The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/b8136aca26a310179d52e99f8ba2f1dfe8599923

commit b8136aca26a310179d52e99f8ba2f1dfe8599923
Author: Guenter Roeck <groeck@chromium.org>
Date: Thu Mar 22 18:30:37 2018

CHROMIUM: Merge 'v4.14.29' into chromeos-4.14

Merge of v4.14.29 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Al Viro (1):
      lock_parent() needs to recheck if dentry got __dentry_kill'ed under it

Alexander Sergeyev (1):
      x86/speculation: Remove Skylake C2 from Speculation Control microcode blacklist

Andy Lutomirski (3):
      selftests/x86/entry_from_vm86: Exit with 1 if we fail
      selftests/x86/entry_from_vm86: Add test cases for POPF
      x86/vm86/32: Fix POPF emulation

Andy Whitcroft (1):
      x86/speculation, objtool: Annotate indirect calls/jumps for objtool on 32-bit kernels

Ard Biesheuvel (2):
      KVM: arm/arm64: Reduce verbosity of KVM init log
      irqchip/gic-v3-its: Ensure nr_ites >= nr_lpis

Bill Kuzeja (1):
      scsi: qla2xxx: Fix crashes in qla2x00_probe_one on probe failure

Christian König (2):
      drm/amdgpu: fix prime teardown order
      drm/radeon: fix prime teardown order

Dmitriy Gorokh (1):
      btrfs: Fix NULL pointer exception in find_bio_stripe

Edmund Nadolski (1):
      btrfs: add missing initialization in btrfs_check_shared

Eric W. Biederman (1):
      fs: Teach path_connected to handle nfs filesystems with multiple roots.

Greg Kroah-Hartman (1):
      Linux 4.14.29

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.29' into merge/chromeos-4.14-v4.14.29

Hans van Kranenburg (1):
      btrfs: alloc_chunk: fix DUP stripe size handling

Himanshu Madhani (2):
      scsi: qla2xxx: Fix smatch warning in qla25xx_delete_{rsp|req}_que
      scsi: qla2xxx: Fix logo flag for qlt_free_session_done()

John David Anglin (1):
      parisc: Handle case where flush_cache_range is called with no context

Kirill A. Shutemov (2):
      x86/cpufeatures: Add Intel Total Memory Encryption cpufeature
      x86/cpufeatures: Add Intel PCONFIG cpufeature

Lukas Wunner (1):
      drm/nouveau/bl: Fix oops on driver unbind

Marc Zyngier (2):
      kvm: arm/arm64: vgic-v3: Tighten synchronization for guests using v2 on v3
      KVM: arm/arm64: vgic: Don't populate multiple LRs with the same vintid

Michel Dänzer (1):
      drm/amdgpu/dce: Don't turn off DP sink when disconnected

Nikolay Borisov (2):
      btrfs: Fix use-after-free when cleaning up fs_devs with a single stale device
      btrfs: Fix memory barriers usage with device stats counters

Quinn Tran (1):
      scsi: qla2xxx: Fix NULL pointer access for fcport structure

Ricardo Neri (2):
      selftests/x86: Add tests for User-Mode Instruction Prevention
      selftests/x86: Add tests for the STR and SLDT instructions

Takashi Iwai (4):
      ALSA: pcm: Fix UAF in snd_pcm_oss_get_formats()
      ALSA: hda - Revert power_save option default value
      ALSA: seq: Fix possible UAF in snd_seq_check_queue()
      ALSA: seq: Clear client entry before deleting else at closing

Tejun Heo (3):
      fs/aio: Add explicit RCU grace period when freeing kioctx
      fs/aio: Use RCU accessors for kioctx_table->table[]
      RDMAVT: Fix synchronization around percpu_ref

Thinh Nguyen (1):
      usb: dwc3: Fix GDBGFIFOSPACE_TYPE values

Tom Lendacky (1):
      KVM: x86: Fix device passthrough when SME is active

Toshi Kani (1):
      x86/mm: Fix vmalloc_fault to use pXd_large

Wei Yongjun (1):
      USB: gadget: udc: Add missing platform_device_put() on error in bdc_pci_probe()

Zygo Blaxell (1):
      btrfs: remove spurious WARN_ON(ref->count < 0) in find_parent_nodes

 Makefile                                       |   2 +-
 arch/parisc/kernel/cache.c                     |  41 +++++++--
 arch/x86/include/asm/cpufeatures.h             |   2 +
 arch/x86/include/asm/nospec-branch.h           |   5 +-
 arch/x86/kernel/cpu/intel.c                    |   3 +-
 arch/x86/kernel/vm86_32.c                      |   3 +-
 arch/x86/kvm/mmu.c                             |   4 +-
 arch/x86/mm/fault.c                            |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c |  31 +++----
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c        |   2 -
 drivers/gpu/drm/amd/amdgpu/amdgpu_object.c     |   2 +
 drivers/gpu/drm/nouveau/nouveau_backlight.c    |   4 +-
 drivers/gpu/drm/radeon/radeon_gem.c            |   2 -
 drivers/gpu/drm/radeon/radeon_object.c         |   2 +
 drivers/infiniband/sw/rdmavt/mr.c              |  10 ++-
 drivers/irqchip/irq-gic-v3-its.c               |   9 +-
 drivers/scsi/qla2xxx/qla_init.c                |  13 ++-
 drivers/scsi/qla2xxx/qla_mid.c                 |   6 +-
 drivers/scsi/qla2xxx/qla_os.c                  |  59 ++++++++-----
 drivers/scsi/qla2xxx/qla_target.c              |   1 +
 drivers/usb/dwc3/core.h                        |  16 ++--
 drivers/usb/gadget/udc/bdc/bdc_pci.c           |   1 +
 fs/aio.c                                       |  44 +++++++---
 fs/btrfs/backref.c                             |  12 ++-
 fs/btrfs/raid56.c                              |   1 +
 fs/btrfs/volumes.c                             |  30 +++++--
 fs/btrfs/volumes.h                             |  12 +++
 fs/dcache.c                                    |  11 ++-
 fs/namei.c                                     |   5 +-
 fs/nfs/super.c                                 |   2 +
 include/linux/fs.h                             |   1 +
 include/linux/irqchip/arm-gic-v3.h             |   1 +
 include/linux/irqchip/arm-gic.h                |   1 +
 sound/core/oss/pcm_oss.c                       |  10 ++-
 sound/core/seq/seq_clientmgr.c                 |   4 +-
 sound/core/seq/seq_prioq.c                     |  28 +++---
 sound/core/seq/seq_prioq.h                     |   6 +-
 sound/core/seq/seq_queue.c                     |  28 ++----
 sound/pci/hda/hda_intel.c                      |   9 +-
 tools/testing/selftests/x86/entry_from_vm86.c  | 117 ++++++++++++++++++++++++-
 virt/kvm/arm/arch_timer.c                      |   2 +-
 virt/kvm/arm/hyp/vgic-v3-sr.c                  |   3 +-
 virt/kvm/arm/mmu.c                             |   6 +-
 virt/kvm/arm/vgic/vgic-v2.c                    |  11 ++-
 virt/kvm/arm/vgic/vgic-v3.c                    |   9 +-
 virt/kvm/arm/vgic/vgic.c                       |  61 ++++++++++---
 virt/kvm/arm/vgic/vgic.h                       |   2 +
 47 files changed, 455 insertions(+), 185 deletions(-)

BUG= chromium:824877 
TEST=Build and test on various affected systems

Change-Id: I7bdf0480994b8a7a2c2366aa85e41caf09c49c44
Signed-off-by: Guenter Roeck <groeck@chromium.org>