The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/07783fbe1f5cb63e5ce74a09489280201fbd039e

commit 07783fbe1f5cb63e5ce74a09489280201fbd039e
Author: Guenter Roeck <groeck@chromium.org>
Date: Mon Oct 01 16:50:50 2018

CHROMIUM: Merge 'v4.14.73' into chromeos-4.14

Merge of v4.14.73 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Alex Deucher (1):
      drm/amdgpu: add new polaris pci id

Bjørn Mork (1):
      qmi_wwan: set DTR for modems in forced USB2 mode

Boris Brezillon (1):
      drm/vc4: Fix the "no scaling" case on multi-planar YUV formats

Boris Ostrovsky (1):
      xen/x86/vpmu: Zero struct pt_regs before calling into sample handling code

Colin Ian King (1):
      net: hp100: fix always-true check for link up state

Davide Caratti (1):
      net/sched: act_sample: fix NULL dereference in the data path

Emil Lundmark (1):
      drm: udl: Destroy framebuffer only if it was initialized

Eric Biggers (1):
      ext4: show test_dummy_encryption mount option in /proc/mounts

Eric Dumazet (1):
      ipv6: fix possible use-after-free in ip6_xmit()

Geert Uytterhoeven (1):
      spi: Fix double IDR allocation with DT aliases

Greg Kroah-Hartman (2):
      Revert "rpmsg: core: add support to power domains for devices"
      Linux 4.14.73

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.73' into merge/chromeos-4.14-v4.14.73

Guillaume Nault (1):
      pppoe: fix reception of frames with no mac header

Gustavo A. R. Silva (1):
      tty: vt_ioctl: fix potential Spectre v1

Jiada Wang (1):
      ASoC: rsnd: fixup not to call clk_get/set under non-atomic

Joel Fernandes (Google) (1):
      mm: shmem.c: Correctly annotate new inodes for lockdep

Juergen Gross (1):
      xen/netfront: don't bug in case of too many frags

Junxiao Bi (1):
      ocfs2: fix ocfs2 read block panic

Kirill Kapranov (1):
      spi: fix IDR collision on systems with both fixed and dynamic SPI bus numbers

Li Dongyang (1):
      ext4: don't mark mmp buffer head dirty

Lubomir Rintel (1):
      Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name"

Lyude Paul (5):
      drm/nouveau: Fix deadlocks in nouveau_connector_detect()
      drm/nouveau/drm/nouveau: Don't forget to cancel hpd_work on suspend/unload
      drm/nouveau/drm/nouveau: Fix bogus drm_kms_helper_poll_enable() placement
      drm/nouveau/drm/nouveau: Use pm_runtime_get_noresume() in connector_detect()
      drm/nouveau/drm/nouveau: Prevent handling ACPI HPD events too early

Mario Limonciello (1):
      platform/x86: alienware-wmi: Correct a memory leak

Mika Westerberg (1):
      Revert "PCI: Add ACS quirk for Intel 300 series"

Nadav Amit (1):
      vmw_balloon: include asm/io.h

Paolo Abeni (2):
      udp4: fix IP_CMSG_CHECKSUM for connected sockets
      udp6: add missing checks on edumux packet processing

Richard Weinberger (1):
      Revert "ubifs: xattr: Don't operate on deleted inodes"

Sabrina Dubroca (3):
      tls: don't copy the key out of tls12_crypto_info_aes_gcm_128
      tls: zero the crypto information from tls_context before freeing
      tls: clear key material from kernel memory when do_tls_setsockopt_conf fails

Steve Muckle (1):
      sched/fair: Fix vruntime_normalized() for remote non-migration wakeup

Steve Wise (1):
      iw_cxgb4: only allow 1 flush on user qps

Suren Baghdasaryan (2):
      NFC: Fix possible memory corruption when handling SHDLC I-Frame commands
      NFC: Fix the number of pipes

Sébastien Szymanski (1):
      ASoC: cs4265: fix MMTLR Data switch control

Takashi Sakamoto (9):
      ALSA: bebob: fix memory leak for M-Audio FW1814 and ProjectMix I/O at error path
      ALSA: bebob: use address returned by kmalloc() instead of kernel stack for streaming DMA mapping
      ALSA: fireface: fix memory leak in ff400_switch_fetching_mode()
      ALSA: firewire-digi00x: fix memory leak of private data
      ALSA: firewire-tascam: fix memory leak of private data
      ALSA: fireworks: fix memory leak of response buffer at error path
      ALSA: oxfw: fix memory leak for model-dependent data at error path
      ALSA: oxfw: fix memory leak of discovered stream formats at error path
      ALSA: oxfw: fix memory leak of private data

Theodore Ts'o (6):
      ext4: check to make sure the rename(2)'s destination is not freed
      ext4: avoid divide by zero fault when deleting corrupted inline directories
      ext4: avoid arithemetic overflow that can trigger a BUG
      ext4: recalucate superblock checksum after updating free blocks/inodes
      ext4: fix online resize's handling of a too-small final block group
      ext4: fix online resizing for bigalloc file systems with a 1k block size

Thomas Gleixner (1):
      tick/nohz: Prevent bogus softirq pending warning

Toke Høiland-Jørgensen (1):
      gso_segment: Reset skb->mac_len after modifying network header

Vaibhav Nagarnaik (1):
      ring-buffer: Allow for rescheduling when removing pages

Vasily Khoruzhick (1):
      neighbour: confirm neigh entries when ARP packet is received

Vincent Pelletier (2):
      scsi: target: iscsi: Use hex2bin instead of a re-implementation
      scsi: target: iscsi: Use bin2hex instead of a re-implementation

Willy Tarreau (2):
      net/appletalk: fix minor pointer leak to userspace in SIOCFINDIPDDPRT
      ALSA: emu10k1: fix possible info leak to userspace on SNDRV_EMU10K1_IOCTL_INFO

Zachary Zhang (1):
      PCI: aardvark: Size bridges before resources allocation

 Makefile                                    |  2 +-
 arch/x86/xen/pmu.c                          |  2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c     | 14 ++++---
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c     |  1 +
 drivers/gpu/drm/nouveau/nouveau_connector.c | 42 +++++++++++++++----
 drivers/gpu/drm/nouveau/nouveau_display.c   | 42 ++++++++++++++-----
 drivers/gpu/drm/nouveau/nouveau_display.h   |  2 +-
 drivers/gpu/drm/nouveau/nouveau_drm.c       |  2 +-
 drivers/gpu/drm/udl/udl_fb.c                |  8 ++--
 drivers/gpu/drm/vc4/vc4_plane.c             | 25 ++++++-----
 drivers/infiniband/hw/cxgb4/qp.c            |  6 +++
 drivers/misc/vmw_balloon.c                  |  1 +
 drivers/net/appletalk/ipddp.c               |  8 +++-
 drivers/net/ethernet/hp/hp100.c             |  2 +-
 drivers/net/ppp/pppoe.c                     |  3 ++
 drivers/net/usb/qmi_wwan.c                  | 14 +++----
 drivers/net/xen-netfront.c                  |  8 +++-
 drivers/pci/host/pci-aardvark.c             |  1 +
 drivers/pci/quirks.c                        |  6 ---
 drivers/platform/x86/alienware-wmi.c        |  1 +
 drivers/rpmsg/rpmsg_core.c                  |  7 ----
 drivers/spi/spi.c                           | 13 +++++-
 drivers/target/iscsi/iscsi_target_auth.c    | 45 ++++++++------------
 drivers/tty/vt/vt_ioctl.c                   |  4 ++
 fs/ext4/dir.c                               | 20 ++++-----
 fs/ext4/ext4.h                              |  3 ++
 fs/ext4/inline.c                            |  4 +-
 fs/ext4/inode.c                             |  9 +++-
 fs/ext4/mmp.c                               |  1 -
 fs/ext4/namei.c                             |  6 +++
 fs/ext4/resize.c                            | 23 +++++++++-
 fs/ext4/super.c                             |  4 ++
 fs/ocfs2/buffer_head_io.c                   |  1 +
 fs/ubifs/xattr.c                            | 24 -----------
 include/net/nfc/hci.h                       |  2 +-
 include/net/tls.h                           | 14 ++++---
 include/uapi/linux/keyctl.h                 |  2 +-
 kernel/sched/fair.c                         |  3 +-
 kernel/time/tick-sched.c                    |  2 +-
 kernel/trace/ring_buffer.c                  |  2 +
 mm/shmem.c                                  |  2 +
 net/core/neighbour.c                        | 13 +++---
 net/ipv4/af_inet.c                          |  1 +
 net/ipv4/udp.c                              | 49 ++++++++++++----------
 net/ipv6/ip6_offload.c                      |  1 +
 net/ipv6/ip6_output.c                       |  6 +--
 net/ipv6/udp.c                              | 65 ++++++++++++++++-------------
 net/nfc/hci/core.c                          | 10 +++++
 net/sched/act_sample.c                      |  2 +-
 net/tls/tls_main.c                          | 17 ++++++--
 net/tls/tls_sw.c                            |  7 +---
 security/keys/dh.c                          |  2 +-
 sound/firewire/bebob/bebob.c                |  2 +
 sound/firewire/bebob/bebob_maudio.c         | 28 ++++++-------
 sound/firewire/digi00x/digi00x.c            |  1 +
 sound/firewire/fireface/ff-protocol-ff400.c |  9 ++--
 sound/firewire/fireworks/fireworks.c        |  2 +
 sound/firewire/oxfw/oxfw.c                  | 10 +++++
 sound/firewire/tascam/tascam.c              |  1 +
 sound/pci/emu10k1/emufx.c                   |  2 +-
 sound/soc/codecs/cs4265.c                   |  4 +-
 sound/soc/sh/rcar/core.c                    | 11 +++++
 sound/soc/sh/rcar/rsnd.h                    |  7 ++++
 sound/soc/sh/rcar/ssi.c                     | 16 ++++---
 64 files changed, 400 insertions(+), 247 deletions(-)

BUG= chromium:890625 
TEST=Build and test on various affected systems

Change-Id: I9b61656f1163bb834efa2fc5960339058dd09cd0
Signed-off-by: Guenter Roeck <groeck@chromium.org>