The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/cb31e7b3611ef3f5004e868e32b472ad0ec04f5b

commit cb31e7b3611ef3f5004e868e32b472ad0ec04f5b
Author: Guenter Roeck <groeck@chromium.org>
Date: Thu Jul 12 21:17:03 2018

CHROMIUM: Merge 'v4.14.55' into chromeos-4.14

Merge of v4.14.55 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Brad Love (1):
      media: cx25840: Use subdev host data for PLL override

Cannon Matthews (1):
      mm: hugetlb: yield when prepping struct pages

Changbin Du (1):
      tracing: Fix missing return symbol in function_graph output

Christian Borntraeger (1):
      s390: Correct register corruption in critical section cleanup

Dan Carpenter (1):
      staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write()

Daniel Rosenberg (1):
      HID: debug: check length before copy_to_user()

Darrick J. Wong (1):
      fs: allow per-device dax status checking for filesystems

Dave Jiang (1):
      dax: change bdev_dax_supported() to support boolean returns

David Disseldorp (1):
      scsi: target: Fix truncated PR-in ReadKeys response

Greg Kroah-Hartman (2):
      Revert "dpaa_eth: fix error in dpaa_remove()"
      Linux 4.14.55

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.55' into merge/chromeos-4.14-v4.14.55

Gustavo A. R. Silva (1):
      HID: hiddev: fix potential Spectre v1

Ilya Dryomov (2):
      block: factor out __blkdev_issue_zero_pages()
      block: cope with WRITE ZEROES failing in blkdev_issue_zeroout()

Jaegeuk Kim (1):
      f2fs: truncate preallocated blocks in error case

Jann Horn (2):
      scsi: sg: mitigate read/write abuse
      netfilter: nf_log: don't hold nf_log_mutex during user access

Janosch Frank (1):
      userfaultfd: hugetlbfs: fix userfaultfd_huge_must_wait() pte access

Jason Andryuk (1):
      HID: i2c-hid: Fix "incomplete report" noise

Jason Gunthorpe (1):
      vfio: Use get_user_pages_longterm correctly

Jon Derrick (1):
      ext4: check superblock mapped prior to committing

Lars Ellenberg (1):
      drbd: fix access after free

Lars Persson (1):
      cifs: Fix use after free of a mid_q_entry

Martin Kaiser (1):
      mtd: rawnand: mxc: set spare area size register explicitly

Michel Dänzer (1):
      drm: Use kvzalloc for allocating blob property memory

Mike Snitzer (1):
      dm: set QUEUE_FLAG_DAX accordingly in dm_table_set_restrictions()

Mikulas Patocka (1):
      drm/udl: fix display corruption of the last line

Naoya Horiguchi (1):
      mm: hwpoison: disable memory error handling on 1GB hugepage

Paulo Alcantara (2):
      cifs: Fix memory leak in smb2_set_ea()
      cifs: Fix infinite loop when using hard mount option

Rakib Mullick (1):
      irq/core: Fix boot crash when the irqaffinity= boot parameter is passed on CPUMASK_OFFSTACK=y kernels(v1)

Rasmus Villemoes (1):
      Kbuild: fix # escaping in .cmd files for future Make

Ross Zwisler (2):
      dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
      dm: prevent DAX mounts if not supported

Sakari Ailus (1):
      media: vb2: core: Finish buffers at the end of the stream

Sebastian Andrzej Siewior (2):
      sched, tracing: Fix trace_sched_pi_setprio() for deboosting
      Revert mm/vmstat.c: fix vmstat_update() preemption BUG

Stefano Brivio (1):
      cifs: Fix slab-out-of-bounds in send_set_info() on SMB2 ACE setting

Theodore Ts'o (13):
      jbd2: don't mark block as modified if the handle is out of credits
      ext4: add corruption check in ext4_xattr_set_entry()
      ext4: always verify the magic number in xattr blocks
      ext4: make sure bitmaps and the inode table don't overlap with bg descriptors
      ext4: always check block group bounds in ext4_init_block_bitmap()
      ext4: only look at the bg_flags field if it is valid
      ext4: verify the depth of extent tree in ext4_find_extent()
      ext4: include the illegal physical block in the bad map ext4_error msg
      ext4: clear i_data in ext4_inode_info when removing inline data
      ext4: never move the system.data xattr out of the inode body
      ext4: avoid running out of journal credits when appending to an inline file
      ext4: add more inode number paranoia checks
      ext4: add more mount time checks of the superblock

Tokunori Ikegami (3):
      mtd: cfi_cmdset_0002: Change definition naming to retry write operation
      mtd: cfi_cmdset_0002: Change erase functions to retry for error
      mtd: cfi_cmdset_0002: Change erase functions to check chip good only

 Makefile                                         |   2 +-
 arch/s390/kernel/entry.S                         |   4 +-
 block/blk-lib.c                                  | 108 +++++++++++++++--------
 drivers/block/drbd/drbd_worker.c                 |   2 +-
 drivers/dax/super.c                              |  42 +++++----
 drivers/gpu/drm/drm_property.c                   |   6 +-
 drivers/gpu/drm/udl/udl_fb.c                     |   5 +-
 drivers/gpu/drm/udl/udl_transfer.c               |  11 ++-
 drivers/hid/hid-debug.c                          |   8 +-
 drivers/hid/i2c-hid/i2c-hid.c                    |   2 +-
 drivers/hid/usbhid/hiddev.c                      |  11 +++
 drivers/md/dm-table.c                            |   9 +-
 drivers/md/dm.c                                  |   6 +-
 drivers/media/i2c/cx25840/cx25840-core.c         |  28 ++++--
 drivers/media/v4l2-core/videobuf2-core.c         |   9 ++
 drivers/mtd/chips/cfi_cmdset_0002.c              |  30 +++++--
 drivers/mtd/nand/mxc_nand.c                      |   5 +-
 drivers/net/ethernet/freescale/dpaa/dpaa_eth.c   |   2 +-
 drivers/scsi/sg.c                                |  42 ++++++++-
 drivers/staging/comedi/drivers/quatech_daqp_cs.c |   2 +-
 drivers/target/target_core_pr.c                  |  15 ++--
 drivers/vfio/vfio_iommu_type1.c                  |  16 ++--
 fs/cifs/cifsglob.h                               |   1 +
 fs/cifs/cifsproto.h                              |   1 +
 fs/cifs/cifssmb.c                                |  10 ++-
 fs/cifs/connect.c                                |   8 +-
 fs/cifs/smb1ops.c                                |   1 +
 fs/cifs/smb2ops.c                                |   3 +
 fs/cifs/smb2pdu.c                                |  25 ++++--
 fs/cifs/smb2transport.c                          |   1 +
 fs/cifs/transport.c                              |  18 +++-
 fs/ext2/super.c                                  |   3 +-
 fs/ext4/balloc.c                                 |  21 +++--
 fs/ext4/ext4.h                                   |   8 --
 fs/ext4/ext4_extents.h                           |   1 +
 fs/ext4/extents.c                                |   6 ++
 fs/ext4/ialloc.c                                 |  14 ++-
 fs/ext4/inline.c                                 |  39 +-------
 fs/ext4/inode.c                                  |   7 +-
 fs/ext4/mballoc.c                                |   6 +-
 fs/ext4/super.c                                  |  89 ++++++++++++++++---
 fs/ext4/xattr.c                                  |  40 ++++-----
 fs/f2fs/file.c                                   |   9 ++
 fs/jbd2/transaction.c                            |   9 +-
 fs/userfaultfd.c                                 |  12 +--
 fs/xfs/xfs_ioctl.c                               |   3 +-
 fs/xfs/xfs_iops.c                                |  30 +++++--
 fs/xfs/xfs_super.c                               |  10 ++-
 include/linux/dax.h                              |  11 +--
 include/linux/mm.h                               |   1 +
 include/trace/events/sched.h                     |   4 +-
 kernel/irq/irqdesc.c                             |   6 +-
 kernel/trace/trace_functions_graph.c             |   5 +-
 mm/hugetlb.c                                     |   1 +
 mm/memory-failure.c                              |  16 ++++
 mm/vmstat.c                                      |   2 -
 net/netfilter/nf_log.c                           |   9 +-
 scripts/Kbuild.include                           |   5 +-
 tools/build/Build.include                        |   5 +-
 tools/objtool/Makefile                           |   2 +-
 tools/scripts/Makefile.include                   |   2 +
 61 files changed, 555 insertions(+), 254 deletions(-)

BUG= chromium:862704 
TEST=Build and test on various affected systems

Change-Id: Ie2127dc22f4bcb2f5d2162d23f1a459e6d7e563a
Signed-off-by: Guenter Roeck <groeck@chromium.org>