The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/32b887dfb63098ad7fd5f825b4d7cf6b82419b2e

commit 32b887dfb63098ad7fd5f825b4d7cf6b82419b2e
Author: Guenter Roeck <groeck@chromium.org>
Date: Sun Mar 11 17:10:55 2018

CHROMIUM: Merge 'v4.14.25' into chromeos-4.14

Merge of v4.14.25 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Adam Ford (2):
      ARM: dts: LogicPD SOM-LV: Fix I2C1 pinmux
      ARM: dts: LogicPD Torpedo: Fix I2C1 pinmux

Adrian Hunter (1):
      mmc: sdhci-pci: Fix S0i3 for Intel BYT-based controllers

Alexander Steffen (1):
      tpm_tis_spi: Use DMA-safe memory for SPI transfers

Alexey Kodanev (3):
      sctp: verify size of a new chunk in _sctp_make_chunk()
      udplite: fix partial checksum initialization
      sctp: fix dst refcnt leak in sctp_v6_get_dst()

Anand Jain (1):
      btrfs: use proper endianness accessors for super_copy

Anna Karbownik (1):
      EDAC, sb_edac: Fix out of bound writes during DIMM configuration on KNL

Ard Biesheuvel (1):
      PCI/ASPM: Deal with missing root ports in link state handling

Arnd Bergmann (4):
      tpm: constify transmit data pointers
      ipv6 sit: work around bogus gcc-8 -Wrestrict warning
      ARM: orion: fix orion_ge00_switch_board_info initialization
      ARM: kvm: fix building with gcc-8

Dan Williams (2):
      vfio: disable filesystem-dax page pinning
      dax: fix vma_is_fsdax() helper

Daniel Schultz (1):
      ARM: dts: rockchip: Remove 1.8 GHz operation point from phycore som

David Ahern (1):
      net: ipv4: Set addr_type in hash_keys for forwarded case

David Hildenbrand (4):
      KVM: s390: take care of clock-comparator sign control
      KVM: s390: provide only a single function for setting the tod (fix SCK)
      KVM: s390: consider epoch index on hotplugged CPUs
      KVM: s390: consider epoch index on TOD clock syncs

David Howells (1):
      rxrpc: Fix send in rxrpc_send_data_packet()

Denis Du (1):
      hdlc_ppp: carrier detect ok, don't turn off negotiation

Emil Tantilov (1):
      ixgbe: fix crash in build_skb Rx code path

Eran Ben Elisha (1):
      net/mlx5e: Verify inline header size do not exceed SKB linear size

Eric Biggers (1):
      KVM/x86: remove WARN_ON() for when vm_munmap() fails

Eric Dumazet (2):
      tcp_bbr: better deal with suboptimal GSO
      net_sched: gen_estimator: fix broken estimators based on percpu stats

Erik Veijola (1):
      ALSA: usb-audio: Add a quirck for B&W PX headphones

Gal Pressman (2):
      net/mlx5e: Fix TCP checksum in LRO buffers
      net/mlx5e: Specify numa node when allocating drop rq

Geert Uytterhoeven (1):
      mmc: dw_mmc-k3: Fix out-of-bounds access through DT alias

Greg Kroah-Hartman (1):
      Linux 4.14.25

Grygorii Strashko (1):
      net: ethernet: ti: cpsw: fix net watchdog timeout

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.25' into merge/chromeos-4.14-v4.14.25

Guillaume Nault (1):
      ppp: prevent unregistered channels from connecting to PPP units

Hans de Goede (2):
      Bluetooth: btusb: Use DMI matching for QCA reset_resume quirking
      ALSA: hda: Add a power_save blacklist

Heiner Kallweit (1):
      net: phy: fix phy_start to consider PHY_IGNORE_INTERRUPT

Helge Deller (2):
      parisc: Use cr16 interval timers unconditionally on qemu
      parisc: Reduce irq overhead when run in qemu

Ido Schimmel (2):
      bridge: Fix VLAN reference count problem
      mlxsw: spectrum_router: Do not unconditionally clear route offload indication

Ilya Lesokhin (1):
      tcp: Honor the eor bit in tcp_mtu_probe

Inbar Karmy (1):
      net/mlx5e: Fix loopback self test when GRO is off

Ivan Vecera (1):
      net/sched: cls_u32: fix cls_u32 on filter replace

Jakub Kicinski (1):
      net: fix race on decreasing number of TX queues

Jan Beulich (1):
      x86/mm: Fix {pmd,pud}_{set,clear}_flags()

Jan Kara (1):
      direct-io: Fix sleep in atomic due to sync AIO

Jason A. Donenfeld (1):
      netlink: put module reference if dump start fails

Jason Wang (3):
      tuntap: correctly add the missing XDP flush
      tuntap: disable preemption during XDP processing
      virtio-net: disable NAPI only when enabled during XDP set

Jeremy Boone (5):
      tpm: st33zp24: fix potential buffer overruns caused by bit glitches on the bus
      tpm: fix potential buffer overruns caused by bit glitches on the bus
      tpm_i2c_infineon: fix potential buffer overruns caused by bit glitches on the bus
      tpm_i2c_nuvoton: fix potential buffer overruns caused by bit glitches on the bus
      tpm_tis: fix potential buffer overruns caused by bit glitches on the bus

Jiri Pirko (1):
      mlxsw: spectrum_router: Fix error path in mlxsw_sp_vr_create

Jiufei Xue (1):
      block: fix the count of PGPGOUT for WRITE_SAME

John David Anglin (1):
      parisc: Fix ordering of cache and TLB flushes

Juergen Gross (1):
      x86/xen: Zero MSR_IA32_SPEC_CTRL before suspend

Julian Wiedmann (7):
      s390/qeth: fix SETIP command handling
      s390/qeth: fix overestimated count of buffer elements
      s390/qeth: fix IP removal on offline cards
      s390/qeth: fix double-free on IP add/remove race
      Revert "s390/qeth: fix using of ref counter for rxip addresses"
      s390/qeth: fix IP address lookup for L3 devices
      s390/qeth: fix IPA command submission race

Kai Heng Feng (1):
      ACPI / bus: Parse tables as term_list for Dell XPS 9570 and Precision M5530

Lingutla Chandrasekhar (1):
      timers: Forward timer base before migrating timers

Mauro Carvalho Chehab (1):
      media: m88ds3103: don't call a non-initalized function

Ming Lei (2):
      block: kyber: fix domain token leak during requeue
      blk-mq: don't call io sched's .requeue_request when requeueing rq to ->dispatch

NeilBrown (1):
      md: only allow remove_and_add_spares when no sync_thread running.

Nicolas Dichtel (1):
      netlink: ensure to loop over all netns in genlmsg_multicast_allns()

Paolo Abeni (1):
      cls_u32: fix use after free in u32_destroy_key()

Paolo Bonzini (4):
      KVM: x86: extend usage of RET_MMIO_PF_* constants
      KVM/x86: Remove indirect MSR op calls from SPEC_CTRL
      KVM: x86: move LAPIC initialization after VMCS creation
      KVM/VMX: Optimize vmx_vcpu_run() and svm_vcpu_run() by marking the RDMSR path as unlikely()

Radim Krčmář (1):
      KVM: x86: fix vcpu initialization with userspace lapic

Rasmus Villemoes (1):
      nospec: Allow index argument to have const-qualified type

Richard Fitzgerald (1):
      ALSA: control: Fix memory corruption risk in snd_ctl_elem_read

Roman Kapl (1):
      net: sched: report if filter is too large to dump

Sabrina Dubroca (1):
      net: ipv4: don't allow setting net.ipv4.route.min_pmtu below 68

Sagi Grimberg (1):
      nvme-rdma: don't suppress send completions

Sebastian Panceac (1):
      x86/platform/intel-mid: Handle Intel Edison reboot correctly

Shalom Toledo (1):
      mlxsw: spectrum_switchdev: Check success of FDB add operation

Shawn Lin (3):
      mmc: dw_mmc: Avoid accessing registers in runtime suspended state
      mmc: dw_mmc: Factor out dw_mci_init_slot_caps
      mmc: dw_mmc: Fix out-of-bounds access for slot's caps

Soheil Hassas Yeganeh (1):
      tcp: purge write queue upon RST

Stefano Brivio (1):
      fib_semantics: Don't match route with mismatching tclassid

Takashi Iwai (2):
      ALSA: x86: Fix missing spinlock and mutex initializations
      ALSA: hda - Fix pincfg at resume on Lenovo T470 dock

Thomas Gleixner (1):
      x86/cpu_entry_area: Sync cpu_entry_area to initial_page_table

Tianyu Lan (1):
      KVM/x86: Fix wrong macro references of X86_CR0_PG_BIT and X86_CR4_PAE_BIT in kvm_valid_sregs()

Tom Lendacky (1):
      amd-xgbe: Restore PCI interrupt enablement setting on resume

Tommi Rantala (1):
      sctp: fix dst refcnt leak in sctp_v4_get_dst

Tonghao Zhang (1):
      doc: Change the min default value of tcp_wmem/tcp_rmem.

Ulf Magnusson (1):
      ARM: mvebu: Fix broken PL310_ERRATA_753970 selects

Ursula Braun (1):
      s390/qeth: fix underestimated count of buffer elements

Viresh Kumar (1):
      cpufreq: s3c24xx: Fix broken s3c_cpufreq_init()

Wanpeng Li (2):
      KVM: X86: Fix SMRAM accessing even if VM is shutdown
      KVM: mmu: Fix overlap between public and private memslots

Wolfram Sang (1):
      net: amd-xgbe: fix comparison to bitshift when dealing with a mask

Xin Long (2):
      bridge: check brport attr show in brport_show
      sctp: do not pr_err for the duplicated node in transport rhlist

Yuchung Cheng (2):
      tcp: revert F-RTO middle-box workaround
      tcp: revert F-RTO extension to detect more spurious timeouts

 Documentation/networking/ip-sysctl.txt             |   4 +-
 Makefile                                           |   2 +-
 arch/arm/boot/dts/logicpd-som-lv.dtsi              |   9 +-
 arch/arm/boot/dts/logicpd-torpedo-som.dtsi         |   8 ++
 arch/arm/boot/dts/rk3288-phycore-som.dtsi          |  20 ----
 arch/arm/kvm/hyp/Makefile                          |   5 +
 arch/arm/kvm/hyp/banked-sr.c                       |   4 +
 arch/arm/mach-mvebu/Kconfig                        |   4 +-
 arch/arm/plat-orion/common.c                       |  23 ++--
 arch/parisc/include/asm/cacheflush.h               |   1 +
 arch/parisc/include/asm/processor.h                |   2 +
 arch/parisc/kernel/cache.c                         |  57 +++++-----
 arch/parisc/kernel/pacache.S                       |  22 ++++
 arch/parisc/kernel/time.c                          |  11 +-
 arch/s390/kvm/interrupt.c                          |  25 ++++-
 arch/s390/kvm/kvm-s390.c                           |  79 +++++++------
 arch/s390/kvm/kvm-s390.h                           |   5 +-
 arch/s390/kvm/priv.c                               |   9 +-
 arch/x86/include/asm/pgtable.h                     |   8 +-
 arch/x86/include/asm/pgtable_32.h                  |   1 +
 arch/x86/include/asm/pgtable_64.h                  |   1 +
 arch/x86/include/asm/pgtable_types.h               |  10 ++
 arch/x86/kernel/setup.c                            |  17 +--
 arch/x86/kernel/setup_percpu.c                     |  17 +--
 arch/x86/kvm/lapic.c                               |  11 +-
 arch/x86/kvm/mmu.c                                 |  97 ++++++++--------
 arch/x86/kvm/paging_tmpl.h                         |  18 +--
 arch/x86/kvm/svm.c                                 |   9 +-
 arch/x86/kvm/vmx.c                                 |   9 +-
 arch/x86/kvm/x86.c                                 |  12 +-
 arch/x86/mm/cpu_entry_area.c                       |   6 +
 arch/x86/mm/init_32.c                              |  15 +++
 arch/x86/platform/intel-mid/intel-mid.c            |   2 +-
 arch/x86/xen/suspend.c                             |  16 +++
 block/blk-core.c                                   |   2 +-
 block/blk-mq.c                                     |   4 +-
 block/kyber-iosched.c                              |   1 +
 drivers/acpi/bus.c                                 |  38 +++++--
 drivers/bluetooth/btusb.c                          |  25 ++++-
 drivers/char/tpm/st33zp24/st33zp24.c               |   4 +-
 drivers/char/tpm/tpm-interface.c                   |   4 +
 drivers/char/tpm/tpm2-cmd.c                        |   4 +
 drivers/char/tpm/tpm_i2c_infineon.c                |   5 +-
 drivers/char/tpm/tpm_i2c_nuvoton.c                 |   8 +-
 drivers/char/tpm/tpm_tis_core.c                    |   5 +-
 drivers/cpufreq/s3c24xx-cpufreq.c                  |   8 +-
 drivers/edac/sb_edac.c                             |   2 +-
 drivers/md/md.c                                    |   4 +
 drivers/media/dvb-frontends/m88ds3103.c            |   7 +-
 drivers/mmc/host/dw_mmc-exynos.c                   |   1 +
 drivers/mmc/host/dw_mmc-k3.c                       |   4 +
 drivers/mmc/host/dw_mmc-rockchip.c                 |   1 +
 drivers/mmc/host/dw_mmc-zx.c                       |   1 +
 drivers/mmc/host/dw_mmc.c                          |  84 +++++++++-----
 drivers/mmc/host/dw_mmc.h                          |   2 +
 drivers/mmc/host/sdhci-pci-core.c                  |  35 +++++-
 drivers/net/ethernet/amd/xgbe/xgbe-drv.c           |   2 +-
 drivers/net/ethernet/amd/xgbe/xgbe-pci.c           |   2 +
 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c      |   8 ++
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |  10 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_rx.c    |  49 +++++---
 .../net/ethernet/mellanox/mlx5/core/en_selftest.c  |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_tx.c    |   2 +-
 .../net/ethernet/mellanox/mlxsw/spectrum_router.c  |  22 ++--
 .../ethernet/mellanox/mlxsw/spectrum_switchdev.c   |  29 ++++-
 drivers/net/ethernet/ti/cpsw.c                     |  16 ++-
 drivers/net/phy/phy.c                              |   2 +-
 drivers/net/ppp/ppp_generic.c                      |   9 ++
 drivers/net/tun.c                                  |   7 ++
 drivers/net/virtio_net.c                           |   8 +-
 drivers/net/wan/hdlc_ppp.c                         |   5 +-
 drivers/nvme/host/rdma.c                           |  54 +++------
 drivers/pci/pcie/aspm.c                            |   8 +-
 drivers/s390/net/qeth_core.h                       |   7 +-
 drivers/s390/net/qeth_core_main.c                  |  43 +++----
 drivers/s390/net/qeth_l3.h                         |  34 +++++-
 drivers/s390/net/qeth_l3_main.c                    | 123 +++++++++------------
 drivers/vfio/vfio_iommu_type1.c                    |  18 ++-
 fs/btrfs/sysfs.c                                   |   8 +-
 fs/btrfs/transaction.c                             |  20 ++--
 fs/direct-io.c                                     |   3 +-
 include/linux/fs.h                                 |   2 +-
 include/linux/nospec.h                             |   3 +-
 include/net/udplite.h                              |   1 +
 kernel/time/timer.c                                |   6 +
 net/bridge/br_sysfs_if.c                           |   3 +
 net/bridge/br_vlan.c                               |   2 +
 net/core/dev.c                                     |  11 +-
 net/core/gen_estimator.c                           |   1 +
 net/ipv4/fib_semantics.c                           |   5 +
 net/ipv4/route.c                                   |  10 +-
 net/ipv4/tcp_input.c                               |  24 ++--
 net/ipv4/tcp_output.c                              |  33 +++++-
 net/ipv4/udp.c                                     |   5 +
 net/ipv6/ip6_checksum.c                            |   5 +
 net/ipv6/sit.c                                     |   2 +-
 net/netlink/af_netlink.c                           |   4 +-
 net/netlink/genetlink.c                            |  12 +-
 net/rxrpc/output.c                                 |   2 +-
 net/sched/cls_api.c                                |   7 +-
 net/sched/cls_u32.c                                |  24 ++--
 net/sctp/input.c                                   |   5 +-
 net/sctp/ipv6.c                                    |  10 +-
 net/sctp/protocol.c                                |  10 +-
 net/sctp/sm_make_chunk.c                           |   7 +-
 sound/core/control.c                               |   2 +-
 sound/pci/hda/hda_intel.c                          |  38 ++++++-
 sound/pci/hda/patch_realtek.c                      |   3 +-
 sound/usb/quirks-table.h                           |  47 ++++++++
 sound/x86/intel_hdmi_audio.c                       |   2 +
 virt/kvm/kvm_main.c                                |   3 +-
 111 files changed, 1032 insertions(+), 537 deletions(-)

BUG= chromium:820463 
TEST=Build and test on various affected systems

Change-Id: I6004b3b2cb348f7942654805fced35215819ad6f
Signed-off-by: Guenter Roeck <groeck@chromium.org>