Patch "sched, cgroup: Don't reject lower cpu.max on ancestors" has been added to the 4.15-stable tree