The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/6ba6269ac79e280fb8e32038471944670333cb22

commit 6ba6269ac79e280fb8e32038471944670333cb22
Author: Guenter Roeck <groeck@chromium.org>
Date: Thu Feb 01 15:39:07 2018

CHROMIUM: Merge 'v4.14.16' into chromeos-4.14

Merge of v4.14.16 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Aaron Ma (1):
      Input: trackpoint - force 3 buttons if 0 button is reported

Alexei Starovoitov (2):
      bpf: introduce BPF_JIT_ALWAYS_ON config
      bpf: fix 32-bit divide by zero

Alexey Kodanev (2):
      dccp: don't restart ccid2_hc_tx_rto_expire() if sk in closed state
      ip6_gre: init dev->mtu and dev->hard_header_len correctly

Andy Lutomirski (1):
      x86/mm/64: Fix vmapped stack syncing on very-large-memory 4-level systems

Ben Hutchings (2):
      ipv6: Fix getsockopt() for sockets with default IPV6_AUTOFLOWLABEL
      nfsd: auth: Fix gid sorting when rootsquash enabled

Boris Brezillon (1):
      drm/vc4: Fix NULL pointer dereference in vc4_save_hang_state()

Borislav Petkov (1):
      x86/microcode: Fix again accessing initrd after having been freed

Christian Borntraeger (1):
      KVM: s390: add proper locking for CMMA migration bitmap

Cong Wang (2):
      tipc: fix a memory leak in tipc_nl_node_get_link()
      tun: fix a memory leak for tfile->tx_array

Dan Streetman (1):
      net: tcp: close sock if net namespace is exiting

Daniel Borkmann (3):
      bpf: avoid false sharing of map refcount with max_entries
      bpf: reject stores into ctx via st and xadd
      bpf, arm64: fix stack_depth tracking in combination with tail calls

David Ahern (2):
      net: vrf: Add support for sends to local broadcast address
      netlink: extack needs to be reset each time through loop

Dmitry Torokhov (1):
      Input: trackpoint - only expose supported controls for Elan, ALPS and NXP

Eran Ben Elisha (1):
      {net,ib}/mlx5: Don't disable local loopback multicast traffic when needed

Eric Dumazet (4):
      ipv6: ip6_make_skb() needs to clear cork.base.dst
      net: qdisc_pkt_len_init() should be more robust
      flow_dissector: properly cap thoff field
      bpf: fix divides by zero

Felix Fietkau (1):
      net: igmp: fix source address check for IGMPv3 reports

Francois Romieu (1):
      r8169: fix memory corruption on retrieval of hardware statistics.

Greg Kroah-Hartman (2):
      Revert "module: Add retpoline tag to VERMAGIC"
      Linux 4.14.16

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.16' into merge/chromeos-4.14-v4.14.16

Guillaume Nault (2):
      pppoe: take ->needed_headroom of lower device into account on xmit
      ppp: unlock all_ppp_mutex before registering device

Ilya Lesokhin (1):
      net/tls: Only attach to sockets in ESTABLISHED state

Ivan Vecera (1):
      be2net: restore properly promisc mode after queues reconfiguration

Jakub Kicinski (1):
      nfp: use the correct index for link speed table

Jia Zhang (1):
      x86/microcode/intel: Extend BDW late-loading further with LLC size check

Jim Westfall (2):
      net: Allow neigh contructor functions ability to modify the primary_key
      ipv4: Make neigh lookup keys for loopback/point-to-point devices be INADDR_ANY

Josef Bacik (1):
      Btrfs: fix stale entries in readdir

Kevin Cernekee (2):
      netfilter: nfnetlink_cthelper: Add missing permission checks
      netfilter: xt_osf: Add missing permission checks

Lorenzo Colitti (1):
      net: ipv4: Make "ip route get" match iif lo rules again.

Mark Furneaux (1):
      Input: xpad - add support for PDP Xbox One controllers

Martin Brandenburg (3):
      orangefs: use list_for_each_entry_safe in purge_waiting_ops
      orangefs: initialize op on loop restart in orangefs_devreq_read
      orangefs: fix deadlock; do not write i_size in read_iter

Mike Maloney (1):
      ipv6: fix udpv6 sendmsg crash caused by too small MTU

Neil Horman (1):
      vmxnet3: repair memory leak

Rafael J. Wysocki (1):
      cpufreq: governor: Ensure sufficiently large sampling intervals

Russell King (8):
      ARM: net: bpf: avoid 'bx' instruction on non-Thumb capable CPUs
      ARM: net: bpf: fix tail call jumps
      ARM: net: bpf: fix stack alignment
      ARM: net: bpf: move stack documentation
      ARM: net: bpf: correct stack layout documentation
      ARM: net: bpf: fix register saving
      ARM: net: bpf: fix LDX instructions
      ARM: net: bpf: clarify tail_call index

Sabrina Dubroca (3):
      tls: fix sw_ctx leak
      tls: return -EBUSY if crypto_info is already set
      tls: reset crypto_info when do_tls_setsockopt_tx fails

Saeed Mahameed (1):
      net/mlx5: Fix get vector affinity helper function

Steffen Klassert (1):
      xfrm: Fix a race in the xdst pcpu cache.

Talat Batheesh (1):
      net/mlx5e: Fix fixpoint divide exception in mlx5e_am_stats_compare

Thomas Gleixner (1):
      hrtimer: Reset hrtimer cpu base proper on CPU hotplug

Vlastimil Babka (1):
      mm, page_alloc: fix potential false positive in __zone_watermark_ok

Willem de Bruijn (1):
      gso: validate gso_type in GSO handlers

Xiao Liang (1):
      perf/x86/amd/power: Do not load AMD power module on !AMD platforms

Xin Long (4):
      sctp: do not allow the v4 socket to bind a v4mapped v6 address
      sctp: return error if the asoc has been peeled off in sctp_wait_for_sndbuf
      sctp: reinit stream if stream outcnt has been change by sinit in sendmsg
      netlink: reset extack earlier in netlink_rcv_skb

Yuiko Oshino (1):
      lan78xx: Fix failure in USB Full Speed

Yuval Mintz (1):
      mlxsw: spectrum_router: Don't log an error on missing neighbor

r.hering@avm.de (1):
      net/tls: Fix inverted error codes to avoid endless loop

 Makefile                                           |   2 +-
 arch/arm/net/bpf_jit_32.c                          | 225 ++++++++++---------
 arch/arm64/net/bpf_jit_comp.c                      |  20 +-
 arch/s390/kvm/kvm-s390.c                           |  18 +-
 arch/x86/events/amd/power.c                        |   2 +-
 arch/x86/kernel/cpu/microcode/core.c               |   2 +-
 arch/x86/kernel/cpu/microcode/intel.c              |  20 +-
 arch/x86/mm/tlb.c                                  |  34 ++-
 drivers/cpufreq/cpufreq_governor.c                 |  19 +-
 drivers/gpu/drm/vc4/vc4_gem.c                      |  12 +-
 drivers/infiniband/hw/mlx5/main.c                  |   9 +-
 drivers/input/joystick/xpad.c                      |  19 ++
 drivers/input/mouse/trackpoint.c                   | 245 +++++++++++++--------
 drivers/input/mouse/trackpoint.h                   |  34 +--
 drivers/net/ethernet/emulex/benet/be_main.c        |   9 +
 drivers/net/ethernet/mellanox/mlx5/core/en_rx_am.c |   6 +
 .../net/ethernet/mellanox/mlx5/core/en_selftest.c  |  27 ++-
 drivers/net/ethernet/mellanox/mlx5/core/main.c     |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/vport.c    |  22 +-
 .../net/ethernet/mellanox/mlxsw/spectrum_router.c  |  10 +-
 .../net/ethernet/netronome/nfp/nfp_net_ethtool.c   |   2 +-
 drivers/net/ethernet/realtek/r8169.c               |   9 +-
 drivers/net/ppp/ppp_generic.c                      |   5 +-
 drivers/net/ppp/pppoe.c                            |  11 +-
 drivers/net/tun.c                                  |  15 +-
 drivers/net/usb/lan78xx.c                          |   1 +
 drivers/net/vmxnet3/vmxnet3_drv.c                  |   2 +-
 drivers/net/vrf.c                                  |   5 +-
 fs/btrfs/delayed-inode.c                           |  26 +--
 fs/nfsd/auth.c                                     |   6 +-
 fs/orangefs/devorangefs-req.c                      |   3 +-
 fs/orangefs/file.c                                 |   7 +-
 fs/orangefs/orangefs-kernel.h                      |  11 -
 fs/orangefs/waitqueue.c                            |   4 +-
 include/linux/bpf.h                                |  21 +-
 include/linux/mlx5/driver.h                        |  19 +-
 include/linux/mlx5/mlx5_ifc.h                      |   5 +-
 include/linux/vermagic.h                           |   8 +-
 include/net/arp.h                                  |   3 +
 include/net/ipv6.h                                 |   1 +
 include/net/net_namespace.h                        |  10 +
 include/net/tls.h                                  |   2 +-
 init/Kconfig                                       |   7 +
 kernel/bpf/core.c                                  |  23 +-
 kernel/bpf/verifier.c                              |  37 ++++
 kernel/time/hrtimer.c                              |   3 +
 lib/test_bpf.c                                     |  11 +-
 mm/page_alloc.c                                    |   6 +-
 net/core/dev.c                                     |  19 +-
 net/core/filter.c                                  |  10 +-
 net/core/flow_dissector.c                          |   3 +-
 net/core/neighbour.c                               |   4 +-
 net/core/sysctl_net_core.c                         |   6 +
 net/dccp/ccids/ccid2.c                             |   3 +
 net/ipv4/arp.c                                     |   7 +-
 net/ipv4/esp4_offload.c                            |   3 +
 net/ipv4/igmp.c                                    |   2 +-
 net/ipv4/route.c                                   |   1 +
 net/ipv4/tcp.c                                     |   3 +
 net/ipv4/tcp_offload.c                             |   3 +
 net/ipv4/tcp_timer.c                               |  15 ++
 net/ipv4/udp_offload.c                             |   3 +
 net/ipv6/esp6_offload.c                            |   3 +
 net/ipv6/ip6_gre.c                                 |  14 +-
 net/ipv6/ip6_output.c                              |   9 +-
 net/ipv6/ipv6_sockglue.c                           |   2 +-
 net/ipv6/tcpv6_offload.c                           |   3 +
 net/ipv6/udp_offload.c                             |   3 +
 net/netlink/af_netlink.c                           |   3 +-
 net/sctp/offload.c                                 |   3 +
 net/sctp/socket.c                                  |  40 ++--
 net/socket.c                                       |   9 +
 net/tipc/node.c                                    |  26 ++-
 net/tls/tls_main.c                                 |  17 +-
 net/tls/tls_sw.c                                   |  16 +-
 net/xfrm/xfrm_policy.c                             |   8 +-
 tools/testing/selftests/bpf/test_verifier.c        |  29 ++-
 77 files changed, 828 insertions(+), 440 deletions(-)

BUG= chromium:807763 
TEST=Build and test on various affected systems

Change-Id: I6c15ec83d37426d587ce584a6563015fe2691338
Signed-off-by: Guenter Roeck <groeck@chromium.org>