The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/8327c3a62b875491f6bb58644248294ae95b699a

commit 8327c3a62b875491f6bb58644248294ae95b699a
Author: Guenter Roeck <groeck@chromium.org>
Date: Wed May 09 15:21:05 2018

CHROMIUM: Merge 'v4.14.40' into chromeos-4.14

Merge of v4.14.40 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Agustin Vega-Frias (1):
      irqchip/qcom: Fix check for spurious interrupts

Alan Stern (1):
      USB: Accept bulk endpoints with 1024-byte maxpacket

Ard Biesheuvel (1):
      ACPI / button: make module loadable when booted in non-ACPI mode

Ben Hutchings (1):
      test_firmware: fix setting old custom fw path back on exit, second try

Bharat Potnuri (1):
      iw_cxgb4: Atomically flush per QP HW CQEs

Bin Liu (2):
      usb: musb: host: fix potential NULL pointer dereference
      usb: musb: trace: fix NULL pointer dereference in musb_g_tx()

Bryant G Ly (1):
      scsi: target: Fix fortify_panic kernel exception

Danit Goldberg (1):
      IB/mlx5: Use unlimited rate when static rate is not supported

Darrick J. Wong (1):
      xfs: prevent creating negative-sized file via INSERT_RANGE

Dmitry Torokhov (1):
      Input: leds - fix out of bound access

Greg Kroah-Hartman (2):
      USB: serial: visor: handle potential invalid device configuration
      Linux 4.14.40

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.40' into merge/chromeos-4.14-v4.14.40

Johan Hovold (1):
      USB: serial: option: reimplement interface masking

João Paulo Rechi Vita (1):
      platform/x86: asus-wireless: Fix NULL pointer dereference

Kristian Evensen (1):
      USB: serial: option: Add support for Quectel EP06

LEROY Christophe (1):
      crypto: talitos - fix IPsec cipher in length

Leon Romanovsky (2):
      RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow
      RDMA/mlx5: Protect from shift operand overflow

Mathieu Desnoyers (1):
      tracepoint: Do not warn on ENOMEM

Matthew Wilcox (1):
      errseq: Always report a writeback error once

Mayank Rana (1):
      usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue

Mike Marciniszyn (2):
      IB/hfi1: Fix handling of FECN marked multicast packet
      IB/hfi1: Fix loss of BECN with AHG

Nicolas Dichtel (1):
      net: don't call update_pmtu unconditionally

Ping-Ke Shih (2):
      rtlwifi: btcoex: Add power_on_setting routine
      rtlwifi: cleanup 8723be ant_sel definition

Raju Rangoju (1):
      RDMA/cxgb4: release hw resources on device removal

Robert Rosengren (1):
      ALSA: aloop: Mark paused device as inactive

Roland Dreier (1):
      RDMA/ucma: Allow resolving address w/o specifying source address

SZ Lin (林上智) (2):
      NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2
      USB: serial: option: adding support for ublox R410M

Sean Paul (1):
      drm/bridge: vga-dac: Fix edid memory leak

Sebastian Sanchez (1):
      IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used

Song Liu (1):
      tracing: Fix bad use of igrab in trace_uprobe.c

Takashi Iwai (4):
      ALSA: hda - Fix incorrect usage of IS_REACHABLE()
      ALSA: pcm: Check PCM state at xfern compat ioctl
      ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger()
      ALSA: aloop: Add missing cable lock to ctl API callbacks

Takashi Sakamoto (1):
      ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation for array index

Tejun Heo (1):
      percpu: include linux/sched.h for cond_resched()

Thomas Hellstrom (1):
      drm/vmwgfx: Fix a buffer object leak

Vittorio Gambaletta (VittGam) (1):
      Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro

Xin Long (1):
      geneve: update skb dst pmtu on tx path

 Makefile                                           |   2 +-
 drivers/acpi/button.c                              |  24 +-
 drivers/crypto/talitos.c                           |  41 +-
 drivers/gpu/drm/bridge/dumb-vga-dac.c              |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c                |   1 +
 drivers/infiniband/core/ucma.c                     |   2 +-
 drivers/infiniband/hw/cxgb4/cq.c                   |  11 +-
 drivers/infiniband/hw/cxgb4/device.c               |   9 +-
 drivers/infiniband/hw/cxgb4/iw_cxgb4.h             |   6 +-
 drivers/infiniband/hw/cxgb4/qp.c                   |   4 +-
 drivers/infiniband/hw/cxgb4/resource.c             |  26 +-
 drivers/infiniband/hw/hfi1/driver.c                |  19 +-
 drivers/infiniband/hw/hfi1/hfi.h                   |   8 +-
 drivers/infiniband/hw/hfi1/init.c                  |   2 +
 drivers/infiniband/hw/hfi1/pcie.c                  |   3 -
 drivers/infiniband/hw/hfi1/ruc.c                   |  50 ++-
 drivers/infiniband/hw/hfi1/ud.c                    |   4 +-
 drivers/infiniband/hw/mlx5/mr.c                    |  32 +-
 drivers/infiniband/hw/mlx5/qp.c                    |  22 +-
 drivers/infiniband/ulp/ipoib/ipoib_cm.c            |   3 +-
 drivers/input/input-leds.c                         |   8 +-
 drivers/input/touchscreen/atmel_mxt_ts.c           |   9 +
 drivers/irqchip/qcom-irq-combiner.c                |   4 +-
 drivers/net/geneve.c                               |  14 +
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/vxlan.c                                |   6 +-
 .../realtek/rtlwifi/btcoexist/halbtcoutsrc.c       |  15 -
 .../realtek/rtlwifi/btcoexist/halbtcoutsrc.h       |   1 +
 .../wireless/realtek/rtlwifi/btcoexist/rtl_btc.c   |   6 +
 .../wireless/realtek/rtlwifi/btcoexist/rtl_btc.h   |   1 +
 .../net/wireless/realtek/rtlwifi/rtl8723be/hw.c    |  11 +-
 drivers/net/wireless/realtek/rtlwifi/wifi.h        |   6 +
 drivers/platform/x86/asus-wireless.c               |   4 +-
 drivers/target/target_core_iblock.c                |   8 +-
 drivers/usb/core/config.c                          |   4 +-
 drivers/usb/dwc3/gadget.c                          |   2 +-
 drivers/usb/musb/musb_gadget.c                     |   3 +-
 drivers/usb/musb/musb_host.c                       |   4 +-
 drivers/usb/serial/option.c                        | 448 ++++++++-------------
 drivers/usb/serial/visor.c                         |  69 ++--
 fs/xfs/xfs_file.c                                  |  14 +-
 include/net/dst.h                                  |   8 +
 kernel/trace/trace_uprobe.c                        |  24 +-
 kernel/tracepoint.c                                |   4 +-
 lib/errseq.c                                       |  25 +-
 mm/percpu.c                                        |   1 +
 net/ipv4/ip_tunnel.c                               |   3 +-
 net/ipv4/ip_vti.c                                  |   2 +-
 net/ipv6/ip6_tunnel.c                              |   5 +-
 net/ipv6/ip6_vti.c                                 |   2 +-
 net/ipv6/sit.c                                     |   4 +-
 sound/core/pcm_compat.c                            |   2 +
 sound/core/seq/seq_virmidi.c                       |   4 +-
 sound/drivers/aloop.c                              |  29 +-
 sound/firewire/amdtp-stream.c                      |   5 +-
 sound/pci/hda/patch_realtek.c                      |   2 +-
 tools/testing/selftests/firmware/fw_filesystem.sh  |   6 +-
 57 files changed, 546 insertions(+), 491 deletions(-)

BUG= chromium:839890 
TEST=Build and test on various affected systems

Change-Id: I3d8a9f3e8f7f86c95c4d4372274ceb613a8d7d22
Signed-off-by: Guenter Roeck <groeck@chromium.org>