The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/5925cb99c45f335df06bfb28e3712aa2ea698e4d

commit 5925cb99c45f335df06bfb28e3712aa2ea698e4d
Author: Guenter Roeck <groeck@chromium.org>
Date: Wed Sep 26 19:51:40 2018

CHROMIUM: Merge 'v4.4.158' into chromeos-4.4

Merge of v4.4.158 into chromeos-4.4

Changelog:
----------------------------------------------------------------
Aaron Knister (1):
      IB/ipoib: Avoid a race condition between start_xmit and cm_rep_handler

Alan Stern (1):
      USB: net2280: Fix erroneous synchronization change

Andreas Gruenbacher (1):
      gfs2: Special-case rindex for gfs2_grow

Andy Shevchenko (1):
      gpiolib: Mark gpio_suffixes array with __maybe_unused

Anton Vasilyev (1):
      video: goldfishfb: fix memory leak on driver remove

Ben Hutchings (1):
      USB: yurex: Fix buffer over-read in yurex_write()

Bin Yang (1):
      pstore: Fix incorrect persistent ram buffer mapping

Dan Carpenter (5):
      fbdev: omapfb: off by one in omapfb_register_client()
      cifs: prevent integer overflow in nxt_dir_entry()
      CIFS: fix wrapping bugs in num_entries()
      drm/panel: type promotion bug in s6e8aa0_read_mtp_id()
      mei: bus: type promotion bug in mei_nfc_if_version()

David Rivshin (1):
      drivers: net: cpsw: fix segfault in case of bad phy-handle

Douglas Anderson (1):
      pinctrl: qcom: spmi-gpio: Fix pmic_gpio_config_get() to be compliant

Felix Fietkau (1):
      MIPS: ath79: fix system restart

Fredrik Noring (1):
      fbdev: Distinguish between interlaced and progressive modes

Greg Kroah-Hartman (1):
      Linux 4.4.158

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.4.158' into merge/chromeos-4.4-v4.4.158

Gustavo A. R. Silva (1):
      misc: hmc6352: fix potential Spectre v1

Hans Verkuil (1):
      media: videobuf2-core: check for q->error in vb2_core_qbuf()

Jann Horn (1):
      mtdchar: fix overflows in adjustment of `count`

Jia-Ju Bai (3):
      usb: host: u132-hcd: Fix a sleep-in-atomic-context bug in u132_get_frame()
      usb: misc: uss720: Fix two sleep-in-atomic-context bugs
      usb: cdc-wdm: Fix a sleep-in-atomic-context bug in service_outstanding_interrupt()

Johan Hovold (2):
      USB: serial: io_ti: fix array underflow in completion handler
      USB: serial: ti_usb_3410_5052: fix array underflow in completion handler

John Keeping (1):
      dmaengine: pl330: fix irq race with terminate_all

John Stultz (1):
      selftest: timers: Tweak raw_skew to SKIP when ADJ_OFFSET/other clock adjustments are in progress

Juergen Gross (1):
      xen/netfront: fix waiting for xenbus state change

Julia Lawall (1):
      parport: sunbpp: fix error return code

Julian Wiedmann (2):
      s390/qeth: fix race in used-buffer accounting
      s390/qeth: reset layer2 attribute on layer switch

K. Y. Srinivasan (1):
      Tools: hv: Fix a bug in the key delete code

Krzysztof Kozlowski (1):
      ARM: exynos: Clear global variable on init error path

Loic Poulain (1):
      arm64: dts: qcom: db410c: Fix Bluetooth LED trigger

Maciej W. Rozycki (1):
      binfmt_elf: Respect error return from `regset->active'

Manikanta Pubbisetty (1):
      mac80211: restrict delayed tailroom needed decrement

Masahiro Yamada (1):
      kbuild: add .DELETE_ON_ERROR special target

Mathias Nyman (2):
      usb: Don't die twice if PCI xhci host is not responding in resume
      usb: Avoid use-after-free by flushing endpoints early in usb_set_interface()

Maxence Duprès (1):
      USB: add quirk for WORLDE Controller KS49 or Prodipe MIDI 49C USB controller

Miao Zhong (1):
      iommu/arm-smmu-v3: sync the OVACKFLG to PRIQ consumer register

Michael Müller (1):
      crypto: sharah - Unregister correct algorithms for SAHARA 3

Nicholas Mc Guire (4):
      clk: imx6ul: fix missing of_node_put()
      ARM: hisi: handle of_iomap and fix missing of_node_put
      ARM: hisi: fix error handling and missing of_node_put
      ARM: hisi: check of_iomap and fix missing of_node_put

Nicholas Piggin (1):
      powerpc/powernv: opal_put_chars partial write fix

Parav Pandit (1):
      RDMA/cma: Protect cma dev list with lock

Paul Burton (2):
      MIPS: loongson64: cs5536: Fix PCI_OHCI_INT_REG reads
      MIPS: VDSO: Match data page cache colouring when D$ aliases

Paul Cercueil (1):
      MIPS: jz4740: Bump zload address

Randy Dunlap (3):
      mtd/maps: fix solutionengine.c printk format warnings
      fbdev/via: fix defined but not used warning
      platform/x86: toshiba_acpi: Fix defined but not used build warnings

Robin Murphy (1):
      coresight: tpiu: Fix disabling timeouts

Ronny Chevalier (1):
      audit: fix use-after-free in audit_add_watch

Sandipan Das (2):
      perf powerpc: Fix callchain ip filtering when return address is in a register
      perf powerpc: Fix callchain ip filtering

Suzuki K Poulose (1):
      coresight: Handle errors in finding input/output ports

Takashi Iwai (2):
      ALSA: msnd: Fix the default sample sizes
      ALSA: usb-audio: Fix multiple definitions in AU0828_DEVICE() macro

Thierry Reding (1):
      drm/nouveau: tegra: Detach from ARM DMA/IOMMU mapping

Tim Anderson (1):
      USB: Add quirk to support DJI CineSSD

Timo Wischer (1):
      ALSA: pcm: Fix snd_interval_refine first/last with open min/max

Vitaly Kuznetsov (1):
      xen-netfront: fix queue name setting

Wei Lu (1):
      drm/amdkfd: Fix error codes in kfd_get_process

Xiao Liang (1):
      xen-netfront: fix warn message as irq device name has '/'

YueHaibing (1):
      xfrm: fix 'passing zero to ERR_PTR()' warning

Zhouyang Jia (1):
      rtc: bq4802: add error handling for devm_ioremap

 Makefile                                           |  2 +-
 arch/arm/mach-exynos/suspend.c                     |  1 +
 arch/arm/mach-hisi/hotplug.c                       | 41 ++++++++++++++--------
 arch/arm64/boot/dts/qcom/apq8016-sbc.dtsi          |  2 +-
 arch/mips/ath79/setup.c                            |  1 +
 arch/mips/include/asm/mach-ath79/ath79.h           |  1 +
 arch/mips/jz4740/Platform                          |  2 +-
 arch/mips/kernel/vdso.c                            | 20 +++++++++++
 arch/mips/loongson64/common/cs5536/cs5536_ohci.c   |  2 +-
 arch/powerpc/platforms/powernv/opal.c              |  2 +-
 drivers/clk/imx/clk-imx6ul.c                       |  1 +
 drivers/crypto/sahara.c                            |  4 +--
 drivers/dma/pl330.c                                |  5 +--
 drivers/gpio/gpiolib.h                             |  2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_process.c           |  2 ++
 drivers/gpu/drm/nouveau/nvkm/engine/device/tegra.c | 13 +++++++
 drivers/gpu/drm/panel/panel-samsung-s6e8aa0.c      |  2 +-
 drivers/hwtracing/coresight/coresight-tpiu.c       |  7 ++--
 drivers/hwtracing/coresight/coresight.c            |  7 ++--
 drivers/infiniband/core/cma.c                      | 12 ++++---
 drivers/infiniband/ulp/ipoib/ipoib_cm.c            |  2 ++
 drivers/iommu/arm-smmu-v3.c                        |  1 +
 drivers/media/v4l2-core/videobuf2-core.c           |  5 +++
 drivers/misc/hmc6352.c                             |  2 ++
 drivers/misc/mei/bus-fixup.c                       |  2 +-
 drivers/mtd/maps/solutionengine.c                  |  6 ++--
 drivers/mtd/mtdchar.c                              | 10 ++++--
 drivers/net/ethernet/ti/cpsw.c                     | 37 +++++++++++--------
 drivers/net/xen-netfront.c                         | 30 ++++++++--------
 drivers/parport/parport_sunbpp.c                   |  8 +++--
 drivers/pinctrl/qcom/pinctrl-spmi-gpio.c           | 32 ++++++++++++-----
 drivers/platform/x86/toshiba_acpi.c                |  3 +-
 drivers/rtc/rtc-bq4802.c                           |  4 +++
 drivers/s390/net/qeth_core_main.c                  |  3 +-
 drivers/s390/net/qeth_core_sys.c                   |  1 +
 drivers/usb/class/cdc-wdm.c                        |  2 +-
 drivers/usb/core/hcd-pci.c                         |  2 --
 drivers/usb/core/message.c                         | 11 ++++++
 drivers/usb/core/quirks.c                          |  7 ++++
 drivers/usb/gadget/udc/net2280.c                   | 16 +++++++--
 drivers/usb/host/u132-hcd.c                        |  2 +-
 drivers/usb/misc/uss720.c                          |  4 +--
 drivers/usb/misc/yurex.c                           |  5 +--
 drivers/usb/serial/io_ti.h                         |  2 +-
 drivers/usb/serial/ti_usb_3410_5052.h              |  2 +-
 drivers/usb/storage/scsiglue.c                     |  9 +++++
 drivers/usb/storage/unusual_devs.h                 |  7 ++++
 drivers/video/fbdev/core/modedb.c                  | 41 ++++++++++++++++------
 drivers/video/fbdev/goldfishfb.c                   |  1 +
 drivers/video/fbdev/omap/omapfb_main.c             |  2 +-
 drivers/video/fbdev/via/viafbdev.c                 |  3 +-
 fs/binfmt_elf.c                                    |  2 +-
 fs/cifs/readdir.c                                  | 11 ++++--
 fs/cifs/smb2pdu.c                                  | 25 +++++++------
 fs/gfs2/bmap.c                                     |  2 +-
 fs/pstore/ram_core.c                               | 17 +++++++--
 kernel/audit_watch.c                               | 12 ++++++-
 net/mac80211/cfg.c                                 |  2 +-
 net/mac80211/key.c                                 | 24 ++++++++-----
 net/xfrm/xfrm_policy.c                             |  5 ++-
 scripts/Kbuild.include                             |  3 ++
 sound/core/pcm_lib.c                               | 14 +++++---
 sound/isa/msnd/msnd_pinnacle.c                     |  4 +--
 sound/usb/quirks-table.h                           |  3 +-
 tools/hv/hv_kvp_daemon.c                           |  2 +-
 tools/perf/arch/powerpc/util/skip-callchain-idx.c  | 10 ++++--
 tools/testing/selftests/timers/raw_skew.c          |  5 +++
 67 files changed, 382 insertions(+), 150 deletions(-)

BUG= chromium:889484 
TEST=Build and test on various affected systems

Change-Id: Ia5a8851f5a3fd2d232b1d164d5f0a96d8e70b1d8
Signed-off-by: Guenter Roeck <groeck@chromium.org>