The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/87d91cb399f5595ad815f775cd834fa3e9c27225

commit 87d91cb399f5595ad815f775cd834fa3e9c27225
Author: Guenter Roeck <groeck@chromium.org>
Date: Fri May 04 14:42:03 2018

CHROMIUM: Merge 'v4.4.131' into chromeos-4.4

Merge of v4.4.131 into chromeos-4.4

Changelog:
----------------------------------------------------------------
Arnd Bergmann (1):
      x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds

Collin May (1):
      USB: serial: simple: add libtransistor console

David Henningsson (1):
      ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr

Dmitry Vyukov (1):
      kobject: don't use WARN for registration failures

Eric Biggers (1):
      ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS

Geert Uytterhoeven (3):
      ARM: amba: Make driver_override output consistent with other buses
      ARM: amba: Fix race condition with driver_override
      ARM: amba: Don't read past the end of sysfs "driver_override" buffer

Gerd Hoffmann (1):
      drm/virtio: fix vq wait_event condition

Greg Kroah-Hartman (1):
      Linux 4.4.131

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.4.131' into merge/chromeos-4.4-v4.4.131

Ilya Dryomov (1):
      libceph: validate con->state at the top of try_write()

Joakim Tjernlund (3):
      mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block.
      mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug.
      mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block.

Kailang Yang (1):
      ALSA: hda/realtek - Add some fixes for ALC233

Kamil Lulko (1):
      usb: core: Add quirk for HP v222w 16GB Mini

Kyle Roeschley (1):
      USB: serial: cp210x: add ID for NI USB serial console

Lukas Czerner (1):
      ext4: fix bitmap position validation

Mahesh Rajashekhara (1):
      scsi: sd: Defer spinning up drive while SANITIZE is in progress

Michael S. Tsirkin (2):
      virtio: add ability to iterate over vqs
      virtio_console: free buffers after reset

Nicolin Chen (1):
      ASoC: fsl_esai: Fix divisor calculation failure at lower ratio

Ravi Chandra Sadineni (1):
      USB: Increment wakeup count on remote wakeup.

Romain Izard (1):
      serial: mctrl_gpio: Add missing module license

Shuah Khan (2):
      usbip: usbip_host: fix to hold parent lock for device_attach() calls
      usbip: vhci_hcd: Fix usb device and sockfd leaks

Takashi Iwai (9):
      ALSA: usb-audio: Skip broken EU on Dell dock USB-audio
      ALSA: opl3: Hardening for potential Spectre v1
      ALSA: asihpi: Hardening for potential Spectre v1
      ALSA: hdspm: Hardening for potential Spectre v1
      ALSA: rme9652: Hardening for potential Spectre v1
      ALSA: control: Hardening for potential Spectre v1
      ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device
      ALSA: seq: oss: Hardening for potential Spectre v1
      ALSA: hda: Hardening for potential Spectre v1

Tetsuo Handa (2):
      tty: Don't call panic() at tty_ldisc_init()
      tty: Use __GFP_NOFAIL for tty_ldisc_get()

Theodore Ts'o (2):
      ext4: set h_journal if there is a failure starting a reserved handle
      ext4: add validity checks for bitmap block numbers

Tony Lindgren (2):
      tty: n_gsm: Fix long delays with control frame timeouts in ADM mode
      tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set

Uwe Kleine-König (1):
      serial: mctrl_gpio: export mctrl_gpio_disable_ms and mctrl_gpio_init

Vasyl Vavrychuk (1):
      USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster

Yazen Ghannam (1):
      x86/smpboot: Don't use mwait_play_dead() on AMD systems

 Makefile                               |  2 +-
 arch/x86/include/uapi/asm/msgbuf.h     | 31 +++++++++++++
 arch/x86/include/uapi/asm/shmbuf.h     | 42 +++++++++++++++++
 arch/x86/kernel/smpboot.c              |  2 +
 drivers/amba/bus.c                     | 17 ++++---
 drivers/char/virtio_console.c          | 49 ++++++++++----------
 drivers/gpu/drm/virtio/virtgpu_vq.c    |  4 +-
 drivers/mtd/chips/cfi_cmdset_0001.c    | 33 +++++++++++--
 drivers/mtd/chips/cfi_cmdset_0002.c    |  9 ++--
 drivers/scsi/sd.c                      |  2 +
 drivers/tty/n_gsm.c                    | 23 ++++++++-
 drivers/tty/serial/serial_mctrl_gpio.c |  5 ++
 drivers/tty/tty_io.c                   |  5 +-
 drivers/tty/tty_ldisc.c                | 16 +++----
 drivers/usb/core/hcd.c                 |  1 +
 drivers/usb/core/hub.c                 | 10 +++-
 drivers/usb/core/quirks.c              |  3 ++
 drivers/usb/serial/Kconfig             |  1 +
 drivers/usb/serial/cp210x.c            |  1 +
 drivers/usb/serial/ftdi_sio.c          |  3 +-
 drivers/usb/serial/usb-serial-simple.c |  7 +++
 drivers/usb/usbip/stub_main.c          |  5 ++
 drivers/usb/usbip/usbip_common.h       |  2 +-
 fs/ext4/balloc.c                       | 17 ++++++-
 fs/ext4/extents.c                      | 16 +++++--
 fs/ext4/ialloc.c                       |  7 +++
 fs/jbd2/transaction.c                  |  1 +
 include/linux/mtd/flashchip.h          |  1 +
 include/linux/tty.h                    |  2 +-
 include/linux/virtio.h                 |  3 ++
 include/sound/control.h                |  7 ++-
 lib/kobject.c                          | 12 ++---
 net/ceph/messenger.c                   |  7 +++
 sound/core/pcm_native.c                |  1 +
 sound/core/seq/oss/seq_oss_event.c     | 15 +++---
 sound/core/seq/oss/seq_oss_midi.c      |  2 +
 sound/core/seq/oss/seq_oss_synth.c     | 85 ++++++++++++++++++++--------------
 sound/core/seq/oss/seq_oss_synth.h     |  3 +-
 sound/drivers/opl3/opl3_synth.c        |  7 ++-
 sound/pci/asihpi/hpimsginit.c          | 13 ++++--
 sound/pci/asihpi/hpioctl.c             |  4 +-
 sound/pci/hda/hda_hwdep.c              | 12 ++++-
 sound/pci/hda/patch_realtek.c          |  2 +
 sound/pci/rme9652/hdspm.c              | 24 ++++++----
 sound/pci/rme9652/rme9652.c            |  6 ++-
 sound/soc/fsl/fsl_esai.c               |  7 +++
 sound/usb/mixer_maps.c                 |  3 ++
 47 files changed, 395 insertions(+), 135 deletions(-)

BUG= chromium:839377 
TEST=Build and test on various affected systems

Change-Id: Ie2d998d691129ba8ec6e9b4746aedab95de069f2
Signed-off-by: Guenter Roeck <groeck@chromium.org>