The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/cff6bcd45632d952a3af98383c7f40a1a620d3bd

commit cff6bcd45632d952a3af98383c7f40a1a620d3bd
Author: Guenter Roeck <groeck@chromium.org>
Date: Mon Sep 17 15:52:47 2018

CHROMIUM: Merge 'v4.4.156' into chromeos-4.4

Merge of v4.4.156 into chromeos-4.4

Changelog:
----------------------------------------------------------------
Aleh Filipovich (1):
      platform/x86: asus-nb-wmi: Add keymap entry for lid flip action on UX360

Alexey Kodanev (1):
      vti6: remove !skb->ignore_df check from vti6_xmit()

Andrey Ryabinin (1):
      mm/fadvise.c: fix signed overflow UBSAN complaint

Antonio Murdaca (1):
      ovl: override creds with the ones from the superblock mounter

Arnd Bergmann (1):
      reiserfs: change j_timestamp type to time64_t

Breno Leitao (1):
      selftests/powerpc: Kill child processes on SIGINT

Chas Williams (1):
      Fixes: Commit cdbf92675fad ("mm: numa: avoid waiting on freed migrated pages")

Dan Carpenter (2):
      powerpc: Fix size calculation using resource_size()
      scsi: aic94xx: fix an error code in aic94xx_init()

Doug Berger (1):
      net: bcmgenet: use MAC link status for fixed phy

Ernesto A. Fernández (2):
      hfs: prevent crash on exit from failed search
      hfsplus: fix NULL dereference in hfsplus_lookup()

Ethan Lien (1):
      btrfs: use correct compare function of dirty_metadata_bytes

Fabio Estevam (1):
      Revert "ARM: imx_v6_v7_defconfig: Select ULPI support"

Florian Westphal (1):
      tcp: do not restart timewait timer on rst reception

Govindarajulu Varadarajan (1):
      enic: do not call enic_change_mtu in enic_probe

Greg Hackmann (1):
      staging: android: ion: fix ION_IOC_{MAP,SHARE} use-after-free

Greg Kroah-Hartman (1):
      Linux 4.4.156

Guenter Roeck (2):
      mfd: sm501: Set coherent_dma_mask when creating subdevices
      Merge remote-tracking branch 'origin/linux/v4.4.156' into merge/chromeos-4.4-v4.4.156

Gustavo A. R. Silva (1):
      ASoC: wm8994: Fix missing break in switch

Ian Abbott (1):
      staging: comedi: ni_mio_common: fix subdevice flags for PFI subdevice

Jann Horn (1):
      fork: don't copy inconsistent signal handler state to child

Jean-Philippe Brucker (1):
      net/9p: fix error path of p9_virtio_probe

Joel Fernandes (Google) (1):
      debugobjects: Make stack check warning more informative

John Pittman (1):
      dm kcopyd: avoid softlockup in run_complete_job

Jonas Gorski (1):
      irqchip/bcm7038-l1: Hide cpu offline callback when building for !SMP

Juergen Gross (1):
      x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear

Mahesh Salgaonkar (1):
      powerpc/pseries: Avoid using the size greater than RTAS_ERROR_LOG_MAX.

Manish Chopra (1):
      qlge: Fix netdev features configuration.

Marc Zyngier (3):
      irqchip/gic-v3-its: Recompute the number of pages on page size change
      irqchip/gic-v3: Add missing barrier to 32bit version of gic_read_iar()
      irqchip/gic: Make interrupt ID 1020 invalid

Martin Schwidefsky (1):
      s390/lib: use expoline for all bcr instructions

Michal Hocko (1):
      x86/speculation/l1tf: Fix up pte->pfn conversion for PAE

Miklos Szeredi (2):
      ovl: rename is_merge to is_lowest
      ovl: proper cleanup of workdir

Misono Tomohiro (1):
      btrfs: replace: Reset on-disk dev stats value after replace

Nikolay Aleksandrov (5):
      sch_htb: fix crash on init failure
      sch_multiq: fix double free on init failure
      sch_hhf: fix null pointer dereference on init failure
      sch_netem: avoid null pointer deref on init failure
      sch_tbf: fix two null pointer dereferences on init failure

OGAWA Hirofumi (1):
      fat: validate ->i_start before using

Qu Wenruo (2):
      btrfs: relocation: Only remove reloc rb_trees if reloc control has been initialized
      btrfs: Don't remove block group that still has pinned down bytes

Randy Dunlap (2):
      scripts: modpost: check memory allocation results
      kbuild: make missing $DEPMOD a Warning instead of an Error

Ronnie Sahlberg (1):
      cifs: check if SMB2 PDU size has been padded and suppress the warning

Shanker Donthineni (2):
      irqchip/gicv3-its: Fix memory leak in its_free_tables()
      irqchip/gicv3-its: Avoid cache flush beyond ITS_BASERn memory size

Stefan Haberland (1):
      s390/dasd: fix hanging offline processing due to canceled worker

Steve French (2):
      smb3: fix reset of bytes read and written stats
      SMB3: Number of requests sent should be displayed for SMB3 not just CIFS

Sudeep Holla (1):
      genirq: Delay incrementing interrupt count if it's disabled/pending

Tan Hu (1):
      ipvs: fix race between ip_vs_conn_new() and ip_vs_del_dest()

Tetsuo Handa (2):
      hfsplus: don't return 0 when fill_super() failed
      fs/dcache.c: fix kmemcheck splat at take_dentry_name_snapshot()

Thomas Petazzoni (1):
      PCI: mvebu: Fix I/O space end address calculation

Tomas Winkler (1):
      mei: me: allow runtime pm for platform with D0i3

Tyler Hicks (2):
      irda: Fix memory leak caused by repeated binds of irda socket
      irda: Only insert new objects into the global database via setsockopt

 Makefile                                       |  2 +-
 arch/arm/configs/imx_v6_v7_defconfig           |  2 -
 arch/arm/include/asm/arch_gicv3.h              |  1 +
 arch/powerpc/platforms/pseries/ras.c           |  2 +-
 arch/powerpc/sysdev/mpic_msgr.c                |  2 +-
 arch/s390/lib/mem.S                            |  9 ++-
 arch/x86/include/asm/pgtable-3level.h          |  7 +-
 arch/x86/include/asm/pgtable.h                 |  2 +-
 drivers/irqchip/irq-bcm7038-l1.c               |  4 ++
 drivers/irqchip/irq-gic-v3-its.c               | 34 ++++++----
 drivers/irqchip/irq-gic.c                      |  2 +-
 drivers/md/dm-kcopyd.c                         |  2 +
 drivers/mfd/sm501.c                            |  1 +
 drivers/misc/mei/pci-me.c                      |  5 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.h |  3 +
 drivers/net/ethernet/broadcom/genet/bcmmii.c   | 10 ++-
 drivers/net/ethernet/cisco/enic/enic_main.c    |  2 +-
 drivers/net/ethernet/qlogic/qlge/qlge_main.c   | 23 +++----
 drivers/pci/host/pci-mvebu.c                   |  2 +-
 drivers/platform/x86/asus-nb-wmi.c             |  1 +
 drivers/s390/block/dasd_eckd.c                 |  7 +-
 drivers/scsi/aic94xx/aic94xx_init.c            |  4 +-
 drivers/staging/android/ion/ion.c              | 60 ++++++++++-------
 drivers/staging/comedi/drivers/ni_mio_common.c |  3 +-
 fs/btrfs/dev-replace.c                         |  6 ++
 fs/btrfs/disk-io.c                             | 10 +--
 fs/btrfs/extent-tree.c                         |  2 +-
 fs/btrfs/relocation.c                          | 23 ++++---
 fs/cifs/cifs_debug.c                           |  8 +++
 fs/cifs/smb2misc.c                             |  7 ++
 fs/cifs/smb2pdu.c                              |  2 +-
 fs/dcache.c                                    |  3 +-
 fs/fat/cache.c                                 | 19 ++++--
 fs/fat/fat.h                                   |  5 ++
 fs/fat/fatent.c                                |  6 +-
 fs/hfs/brec.c                                  |  7 +-
 fs/hfsplus/dir.c                               |  4 +-
 fs/hfsplus/super.c                             |  4 +-
 fs/overlayfs/copy_up.c                         | 26 +------
 fs/overlayfs/dir.c                             | 67 ++-----------------
 fs/overlayfs/overlayfs.h                       |  3 +
 fs/overlayfs/readdir.c                         | 93 ++++++++++++++++++++------
 fs/overlayfs/super.c                           | 20 +++++-
 fs/reiserfs/reiserfs.h                         |  2 +-
 kernel/fork.c                                  |  2 +
 kernel/irq/chip.c                              |  8 +--
 lib/debugobjects.c                             |  7 +-
 mm/fadvise.c                                   |  8 ++-
 mm/huge_memory.c                               |  2 +-
 net/9p/trans_virtio.c                          |  3 +-
 net/ipv4/tcp_minisocks.c                       |  3 +-
 net/ipv6/ip6_vti.c                             |  2 +-
 net/irda/af_irda.c                             | 13 +++-
 net/netfilter/ipvs/ip_vs_core.c                | 15 +++--
 net/sched/sch_hhf.c                            |  3 +
 net/sched/sch_htb.c                            |  5 +-
 net/sched/sch_multiq.c                         |  9 +--
 net/sched/sch_netem.c                          |  4 +-
 net/sched/sch_tbf.c                            |  5 +-
 scripts/depmod.sh                              |  4 +-
 scripts/mod/modpost.c                          |  8 +--
 sound/soc/codecs/wm8994.c                      |  1 +
 tools/testing/selftests/powerpc/harness.c      | 18 +++--
 63 files changed, 368 insertions(+), 259 deletions(-)

BUG= chromium:884515 
TEST=Build and test on various affected systems

Change-Id: I3707d4b19bab09e89eee8a50c8df40efdb5c4b8e
Signed-off-by: Guenter Roeck <groeck@chromium.org>