* d7ea9ca9e0e0 4.16.5-xanmod6 * 121be9e32124 Merge tag 'v4.16.5' into 4.16 * e5ce9f6879d3 Linux 4.16.5 * 55c5c3987809 mac80211_hwsim: fix use-after-free bug in hwsim_exit_net * c4e8b46fc5e7 Revert "KVM: X86: Fix SMRAM accessing even if VM is shutdown" * b08a162c9d27 RDMA/mlx5: Fix NULL dereference while accessing XRC_TGT QPs * e680273ec8cf perf: Return proper values for user stack errors * cf3d902d5af7 perf: Fix sample_max_stack maximum check * 8a394b1be5ac netfilter: x_tables: limit allocation requests for blob rule heads * 74e1e28040ee netfilter: compat: reject huge allocation requests * 7407dd814b7b netfilter: compat: prepare xt_compat_init_offsets to return errors * d11ff4ba1a4c netfilter: x_tables: add counters allocation wrapper * f64143c3329e netfilter: x_tables: cap allocations at 512 mbyte * c57e796aabb9 mm,vmscan: Allow preallocating memory for register_shrinker(). * 4602ef09f1c9 alarmtimer: Init nanosleep alarm timer on stack * 3561830a99e4 drm/i915: Fix LSPCON TMDS output buffer enabling from low-power state * 434ff902ed2a drm/i915: Do no use kfree() to free a kmem_cache_alloc() return value * eb67884324d1 drm/i915/audio: Fix audio detection issue on GLK * df11a3516b09 drm/i915/bios: filter out invalid DDC pins from VBT child devices * 14dafbb97471 drm/i915/gvt: Add drm_format_mod update * a864c3295d03 drm/i915/gvt: throw error on unhandled vfio ioctls * 86c9663495cd drm/vc4: Fix memory leak during BO teardown * 47d39ff8d6cb x86/tsc: Prevent 32bit truncation in calc_hpet_ref() * 3917e4804c83 posix-cpu-timers: Ensure set_process_cpu_timer is always evaluated * fa8900e6a49f clocksource/imx-tpm: Correct -ETIME return condition check * bd069d4600e8 x86/acpi: Prevent X2APIC id 0xffffffff from being accounted * 68989e4e5d28 btrfs: Fix race condition between delayed refs and blockgroup removal * df84c88faa0b btrfs: fix unaligned access in readdir * 7a8b85c5d4df cifs: do not allow creating sockets except with SMB1 posix exensions * 8d931c6adf5d cifs: smbd: Check for iov length on sending the last iov * b42b71cd28f2 Linux 4.16.4 * c5e5e481dc28 writeback: safer lock nesting * b74dc8c00232 HID: i2c-hid: fix inverted return value from i2c_hid_command() * 92496da88e47 drm/i915/gvt: init mmio by lri command in vgpu inhibit context * 9fe5617e62cf mm/filemap.c: fix NULL pointer in page_cache_tree_insert() * 8eb1a9398fda autofs: mount point create should honour passed in mode * 86d04eb7ecf1 device-dax: allow MAP_SYNC to succeed * e5872ce01019 libnvdimm, dimm: handle EACCES failures from label reads * f27f9d4eb535 Don't leak MNT_INTERNAL away from internal mounts * 68a8025a3b55 rpc_pipefs: fix double-dput() * 7a372c7c91d6 orangefs_kill_sb(): deal with allocation failures * a10ddc761df5 hypfs_kill_super(): deal with failed allocations * efc16dc36d48 jffs2_kill_sb(): deal with failed allocations * 211a36ec7c4e drm/i915: Correctly handle limited range YCbCr data on VLV/CHV * f4e3f00a3446 drm/i915: Fix hibernation with ACPI S0 target state * b7116e86a534 mmc: sdhci-pci: Only do AMD tuning for HS200 * 69b4bf69f36b fanotify: fix logic of events on child * 47b6e5b549a7 udf: Fix leak of UTF-16 surrogates into encoded strings * 999e92eb3634 powerpc/lib: Fix off-by-one in alternate feature patching * 37a712b4ddf0 powerpc/xive: Fix trying to "push" an already active pool VP * 0b883271af50 powerpc/eeh: Fix enabling bridge MMIO windows * 051db3956541 MIPS: memset.S: Fix clobber of v1 in last_fixup * 2d2aa734dcc2 MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup * 88939e53b0c1 MIPS: memset.S: EVA & fault support for small_memset * 1d0d9058215e MIPS: uaccess: Add micromips clobbers to bzero invocation * 010068656bec s390: add support for IBM z14 Model ZR1 * 73b46af38e8e HID: wacom: bluetooth: send exit report for recent Bluetooth devices * 6bfcef16fb90 HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device * 3bca55081843 HID: input: fix battery level reporting on BT mice * bbdd53af5489 HID: i2c-hid: Fix resume issue on Raydium touchscreen device * e21e58679d3e random: add new ioctl RNDRESEEDCRNG * 6efa23d5851f random: crng_reseed() should lock the crng instance that it is modifying * 89b59f050347 random: use a different mixing algorithm for add_device_randomness() * cd8d7a5778a4 random: fix crng_ready() test * ab5860f5ce70 ALSA: hda/realtek - adjust the location of one mic * 667f3e472296 ALSA: hda/realtek - set PINCFG_HEADSET_MIC to parse_flags * 1798e3019c29 ALSA: hda - New VIA controller suppor no-snoop path * 96e486824464 ALSA: rawmidi: Fix missing input substream checks in compat ioctls * c2795504efef ALSA: line6: Use correct endpoint type for midi output * 7e0ff1ba3e29 drm/radeon: Fix PCIe lane width calculation * 1ab5ee72f633 drm/radeon: add PX quirk for Asus K73TK * 912211ddce26 drm/rockchip: Clear all interrupts before requesting the IRQ * f2aa15101786 drm/amdgpu/si: implement get/set pcie_lanes asic callback * e17bb21827bd drm/amdgpu: Fix PCIe lane width calculation * 49d52e9ef940 drm/amdgpu/sdma: fix mask in emit_pipeline_sync * ae06904414b5 drm/amdgpu: Fix always_valid bos multiple LRU insertions. * 8a431ad0d1c3 drm/amdgpu: Add an ATPX quirk for hybrid laptop * 2e1c4ed5ae1f watchdog: f71808e_wdt: Fix WD_EN register read * 525398643e51 dt-bindings: clock: mediatek: add binding for fixed-factor clock axisel_d4 * 7c4670cf7122 thermal: imx: Fix race condition in imx_thermal_probe() * c1d2f1eac9a9 pwm: mediatek: Improve precision in rate calculation * 95d476598b08 pwm: mediatek: Fix up PWM4 and PWM5 malfunction on MT7623 * af3f8a7fc27a pwm: rcar: Fix a condition to prevent mismatch value setting to duty * 80aa5cf5b001 clk: tegra: Mark HCLK, SCLK and EMC as critical * 8da7199d662c clk: bcm2835: De-assert/assert PLL reset signal when appropriate * c2e8a9955da2 clk: mediatek: fix PWM clock source by adding a fixed-factor clock * 4f3f4551f541 clk: fix false-positive Wmaybe-uninitialized warning * 8c9510d027a0 clk: mvebu: armada-38x: add support for missing clocks * 5b790023eb82 PCI: Mark Broadcom HT1100 and HT2000 Root Port Extended Tags as broken * 0edc19e0c385 trace_uprobe: Use %lx to display offset * 0c04975852a6 drm/amd/display: HDMI has no sound after Panel power off/on * 5c4bda4c2ff7 Revert "drm/amd/display: disable CRTCs with NULL FB on their primary plane (V2)" * 89248a4a1f09 Revert "drm/amd/display: fix dereferencing possible ERR_PTR()" * b42a321adc72 mmc: tmio: Fix error handling when issuing CMD23 * 7809401a616f mmc: jz4740: Fix race condition in IRQ mask update * 723bee23e8ba mmc: core: Prevent bus reference leak in mmc_blk_init() * 36a5a8a9d522 iommu/vt-d: Fix a potential memory leak * 6e53a4e58018 um: Use POSIX ucontext_t instead of struct ucontext * e4801adc4d07 um: Compile with modern headers * 15ecf4478713 ring-buffer: Check if memory is available before allocation * bbe03f938f56 nfit: skip region registration for incomplete control regions * e041107f0651 nfit, address-range-scrub: fix scrub in-progress reporting * c4d2d2ea3fb8 vsprintf: Do not preprocess non-dereferenced pointers for bprintf (%px and %pK) * 02250bcc9b86 libnvdimm, namespace: use a safe lookup for dimm device name * af5bb27195ef libnvdimm, dimm: fix dpa reservation vs uninitialized label area * cc76ab2e932c tpm: self test failure should not cause suspend to fail * a14986d6fb03 cxl: Fix possible deadlock when processing page faults from cxllib * 64ba4ae7a5ac dmaengine: at_xdmac: fix rare residue corruption * f389283c5d74 dm raid: fix nosync status * 21c228ac4287 drivers/infiniband/ulp/srpt/ib_srpt.c: fix build with gcc-4.4.4 * b56b41533299 drivers/infiniband/core/verbs.c: fix build with gcc-4.4.4 * 21be334beccb IB/srpt: Fix an out-of-bounds stack access in srpt_zerolength_write() * 2341d2417eb5 IB/srp: Fix completion vector assignment algorithm * 638f0fe89d54 IB/srp: Fix srp_abort() * 927324e35539 ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation * bfb9c474ebfa ALSA: pcm: Fix UAF at PCM release via PCM timer access * ee7294f190c5 ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls * d014fa8f8ae6 ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams * 337cdfb45e9b ALSA: pcm: Avoid potential races between OSS ioctls and read/write * 03e19286b7f3 xprtrdma: Fix corner cases when handling device removal * fef573a1e06a xprtrdma: Fix latency regression on NUMA NFS/RDMA clients * 5e2f3f316fff RDMA/core: Avoid that ib_drain_qp() triggers an out-of-bounds stack access * 8ca41b8fe437 RDMA/rxe: Fix an out-of-bounds read * c6bf8f42c9dc RDMA/mlx5: Protect from NULL pointer derefence * dad3d955fb5a RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device * 002c9842c813 dm crypt: limit the number of allocated pages * aa2a38b37f52 dm: backfill abnormal IO support to non-splitting IO submission * 919e7c8da185 ext4: force revalidation of directory pointer after seekdir(2) * 047506fc5142 ext4: add extra checks to ext4_xattr_block_get() * e89600dc2411 ext4: add bounds checking to ext4_xattr_find_entry() * 8cefea558918 ext4: move call to ext4_error() into ext4_xattr_check_block() * adebf4b54f61 ext4: don't allow r/w mounts if metadata blocks overlap the superblock * 114c42aaa631 ext4: always initialize the crc32c checksum driver * 510c85c3f0bc ext4: fail ext4_iget for root directory if unallocated * d97c42e8f9bc ext4: limit xattr size to INT_MAX * 71da360dfb96 ext4: fix offset overflow on 32-bit archs in ext4_iomap_begin() * dac334e0d355 ext4: protect i_disksize update by i_data_sem in direct write path * c6a192f4342e ext4: don't update checksum of new initialized bitmaps * 1122b746fc97 ext4: pass -ESHUTDOWN code to jbd2 layer * c63dc22a0a1f ext4: eliminate sleep from shutdown ioctl * 4919f9b141ff ext4: shutdown should not prevent get_write_access * 1d6ae243ea65 jbd2: if the journal is aborted then don't allow update of the log tail * 5df4e53f1d75 block: use 32-bit blk_status_t on Alpha * f6b3a6ce0e6c extcon: intel-cht-wc: Set direction and drv flags for V5 boost GPIO * 46d52d7c5b83 random: use a tighter cap in credit_entropy_bits_safe() * 3c94bfbd8f08 irqchip/gic: Take lock when updating irq type * b03bb1e57736 thunderbolt: Prevent crash when ICM firmware is not running * f5b7a541c77e thunderbolt: Handle connecting device in place of host properly * c9eda168e8ca thunderbolt: Resume control channel after hibernation image is created * dc414ae189cc thunderbolt: Serialize PCIe tunnel creation with PCI rescan * 75dec3bc980a thunderbolt: Wait a bit longer for ICM to authenticate the active NVM * 0488d22ae767 ASoC: topology: Fix kcontrol name string handling * 28c1acef7e19 ASoC: ssm2602: Replace reg_default_raw with reg_default * d705c2a82ae8 soc: mediatek: fix the mistaken pointer accessed when subdomains are added * 6488aac9b752 HID: core: Fix size as type u32 * dd19d2f1bcd7 HID: Fix hid_report_len usage * 0ea1574a2243 ceph: always update atime/mtime/ctime for new inode * 6101b68f1685 powerpc/mm/radix: Fix checkstops caused by invalid tlbiel * d753ee67b076 powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops * 561ea13c1ffc powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops * ac0db0ecc557 powerpc/kexec_file: Fix error code when trying to load kdump kernel * 4c75c8fa8a3b powerpc/kprobes: Fix call trace due to incorrect preempt count * 54bde5798c93 powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently * bc94cbac7fa1 powerpc/64: Call H_REGISTER_PROC_TBL when running as a HPT guest on POWER9 * 12af91ffeef8 powerpc/64s: Fix dt_cpu_ftrs to have restore_cpu clear unwanted LPCR bits * 9ffa9b9d635c powerpc/eeh: Fix race with driver un/bind * e15d712ed7d8 powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write() * e400e6a8252b powerpc/64s: Fix pkey support in dt_cpu_ftrs, add CPU_FTR_PKEY bit * 2c9dacf5bfe1 swiotlb: fix unexpected swiotlb_alloc_coherent failures * f8a7eccf97d3 CIFS: fix sha512 check in cifs_crypto_secmech_release * 4baf0819b61d CIFS: implement v3.11 preauth integrity * 2d677c0617a1 CIFS: add sha512 secmech * 2ad7ada35f31 CIFS: refactor crypto shash/sdesc allocation&free * a64854c5b2ba i2c: i801: Restore configuration at shutdown * 8598c72001ad i2c: i801: Save register SMBSLVCMD value only once * 0d9717769b12 HID: i2c-hid: fix size check and type usage * 9ee0150d47ce smb3: Fix root directory when server returns inode number of zero * f0dbaa686279 cifs: smbd: disconnect transport on RDMA errors * a493112a9f41 cifs: smbd: avoid reconnect lockup * a25429c88fb8 Tree connect for SMB3.1.1 must be signed for non-encrypted shares * 92ce78fc78dd fix smb3-encryption breakage when CONFIG_DEBUG_SG=y * 4c41d9307183 cifs: fix memory leak in SMB2_open() * c3d0f4457692 usb: dwc3: gadget: never call ->complete() from ->ep_queue() * 9a5db1f1d652 usb: dwc3: pci: Properly cleanup resource * 15c8f74fcaf7 usb: dwc3: prevent setting PRTCAP to OTG from debugfs * 547466fa26e6 USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw * 786513e10cac USB: gadget: f_midi: fixing a possible double-free in f_midi * 4a64b3932f51 acpi, nfit: rework NVDIMM leaf method detection * ad393296dc75 ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status() * 13a579991d0d ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E * 320c85dcdc35 regmap: Fix reversed bounds check in regmap_raw_write() * 3f8a27b1bb36 x86/xen: Delay get_cpu_cap until stack canary is established * ba8761d349d6 media: vsp1: Fix BRx conditional path in WPF * e892362d48be media: vb2: core: Finish buffers at the end of the stream * 06f0eee0851a media: vivid: check if the cec_adapter is valid * cf0f522b2af9 media: atomisp_fops.c: disable atomisp_compat_ioctl32 * 6c96656f8b0d media: rc: oops in ir_timer_keyup after device unplug * 2632f27575e9 spi: Fix unregistration of controller with fixed SPI bus number * 7387bbc38990 spi: Fix scatterlist elements size in spi_map_buf * d4870729a63e spi: atmel: init FIFOs before spi enable * eac13cb73e4f ARM: dts: at91: sama5d4: fix pinctrl compatible string * dc9d1dd6cfe1 ARM: dts: exynos: Fix IOMMU support for GScaler devices on Exynos5250 * 5ebb45f8fe1f ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property * 56f203900fdb arm: dts: mt7623: fix USB initialization fails on bananapi-r2 * 8b434767de5c ARM: EXYNOS: Fix coupled CPU idle freeze on Exynos4210 * e6af7621cb85 KVM: arm/arm64: vgic-its: Fix potential overrun in vgic_copy_lpi_list * 84bf72e2abd5 ARM64: dts: meson: reduce odroid-c2 eMMC maximum rate * 2462ef58eceb usb: gadget: udc: core: update usb_ep_queue() documentation * ede0439fbe0f phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS * 522854d21b1b usb: musb: gadget: misplaced out of bounds check * 259893c0b011 mm, slab: reschedule cache_reap() on the same CPU * ba1d1726d7af ipc/shm: fix use-after-free of shm file via remap_file_pages() * a401cbb69959 resource: fix integer overflow at reallocation * 5b6d58346ceb fs/reiserfs/journal.c: add missing resierfs_warning() arg * 790f13833eb4 task_struct: only use anon struct under randstruct plugin * a7140c36665f mm: hwpoison: disable memory error handling on 1GB hugepage * 8ed34360e0a7 mm/hmm: hmm_pfns_bad() was accessing wrong struct * 25df8b83e867 mm/hmm: fix header file if/else/endif maze * 74cbffba615f mm/ksm.c: fix inconsistent accounting of zero pages * 58010b2e8aa9 ubi: Reject MLC NAND * bd62cebba2c3 ubi: Fix error for write access * 3f2fdd3d4a4c ubi: fastmap: Don't flush fastmap work on detach * 89a099cb9ea1 ubifs: Check ubifs_wbuf_sync() return code * a591f53a9f6f cpufreq: armada-37xx: Fix clock leak * 4c05fe722254 cpufreq: CPPC: Use transition_delay_us depending transition_latency * 26696cdda301 Bluetooth: hci_bcm: Add irq_polarity module option