The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/ef0ff30554803ddf097dba4de4a47e841c5c27b3

commit ef0ff30554803ddf097dba4de4a47e841c5c27b3
Author: Guenter Roeck <groeck@chromium.org>
Date: Thu Dec 13 15:49:46 2018

CHROMIUM: Merge 'v4.14.88' into chromeos-4.14

Merge of v4.14.88 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Alex Deucher (1):
      drm/amdgpu/gmc8: update MC firmware for polaris

Alexander Theissen (1):
      usb: appledisplay: Add 27" Apple Cinema Display

Andy Shevchenko (1):
      dmaengine: dw: Fix FIFO size for Intel Merrifield

Aya Levin (1):
      net/mlx4: Fix UBSAN warning of signed integer overflow

Bartosz Golaszewski (1):
      gpio: mockup: fix indicated direction

Ben Greear (1):
      mac80211: Clear beacon_int in ieee80211_do_stop

Benson Leung (1):
      HID: input: Ignore battery reported by Symbol DS4308

Bin Liu (1):
      dmaengine: cppi41: delete channel from pending list when stop channel

Chanho Min (1):
      ALSA: pcm: Fix starvation on down_write_nonblock()

Chanho Park (1):
      tty: do not set TTY_IO_ERROR flag if console port

Chao Yu (1):
      f2fs: fix to do sanity check with block address in main area v2

Chuck Lever (1):
      SUNRPC: Fix leak of krb5p encode pages

Colin Ian King (1):
      test_firmware: fix error return getting clobbered

Dan Williams (1):
      libnvdimm, pfn: Pad pfn namespaces relative to other regions

Denis Bolotin (4):
      qed: Fix PTT leak in qed_drain()
      qed: Fix reading wrong value in loop condition
      qed: Fix bitmap_weight() check
      qed: Fix QM getters to always return a valid pq

Dexuan Cui (1):
      Drivers: hv: vmbus: Offload the handling of channels to two workqueues

Emmanuel Grumbach (1):
      mac80211: ignore NullFunc frames in the duplicate detection

Fabrizio Castro (1):
      can: rcar_can: Fix erroneous registration

Felix Fietkau (2):
      mac80211: ignore tx status for PS stations in ieee80211_tx_status_ext
      mac80211: fix reordering of buffered broadcast packets

Filippo Sironi (1):
      amd/iommu: Fix Guest Virtual APIC Log Tail Address Register

Geert Uytterhoeven (1):
      iommu/ipmmu-vmsa: Fix crash on early domain free

Greg Kroah-Hartman (3):
      Staging: lustre: remove two build warnings
      staging: atomisp: remove "fun" strncpy warning
      Linux 4.14.88

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.88' into merge/chromeos-4.14-v4.14.88

Halil Pasic (2):
      virtio/s390: avoid race on vcdev->config
      virtio/s390: fix race in ccw_io_helper()

Hangbin Liu (1):
      team: no need to do team_notify_peers or team_mcast_rejoin when disabling port

Harry Pan (1):
      usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device

Hui Peng (1):
      ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c

Jack Morgenstein (1):
      net/mlx4_core: Zero out lkey field in SW2HW_MPT fw command

Junwei Zhang (1):
      drm/amdgpu: update mc firmware image for polaris12 variants

Kai-Heng Feng (2):
      HID: multitouch: Add pointstick support for Cirque Touchpad
      ALSA: hda: Add support for AMD Stoney Ridge

Kees Cook (2):
      ARM: 8806/1: kprobes: Fix false positive with FORTIFY_SOURCE
      swiotlb: clean up reporting

Lu Baolu (1):
      iommu/vt-d: Fix NULL pointer dereference in prq_event_thread()

Macpaul Lin (1):
      kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var()

Mathias Nyman (1):
      xhci: Prevent U1/U2 link pm states if exit latency is too long

Mathias Payer (1):
      USB: check usb_get_extra_descriptor for proper size

Olof Johansson (1):
      mtd: rawnand: qcom: Namespace prefix some commands

Pan Bian (1):
      iommu/vt-d: Use memunmap to free memremap

Paulo Alcantara (1):
      cifs: Fix separator when building path from dentry

Peter Shih (1):
      tty: serial: 8250_mtk: always resume the device in probe.

Rafał Miłecki (1):
      brcmutil: really fix decoding channel info for 160 MHz bandwidth

Sakari Ailus (1):
      media: omap3isp: Unregister media device as first

Sandeep Singh (1):
      xhci: workaround CSS timeout on AMD SNPS 3.0 xHC

Shen Jing (1):
      Revert "usb: gadget: ffs: Fix BUG when userland exits with submitted AIO transfers"

Stefan Hajnoczi (1):
      vhost/vsock: fix use-after-free in network stack callers

Sudarsana Reddy Kalluru (1):
      bnx2x: Assign unique DMAE channel number for FW DMAE transactions.

Sven Eckelmann (2):
      batman-adv: Use explicit tvlv padding for ELP packets
      batman-adv: Expand merged fragment buffer for full packet

Takashi Iwai (3):
      ALSA: pcm: Call snd_pcm_unlink() conditionally at closing
      ALSA: pcm: Fix interval evaluation with openmin/max
      ALSA: hda/realtek - Fix speaker output regression on Thinkpad T570

Tariq Toukan (1):
      net/mlx4_core: Fix uninitialized variable compilation warning

Tetsuo Handa (1):
      mm: don't warn about allocations which stall for too long

Thomas Falcon (1):
      ibmvnic: Fix RX queue buffer cleanup

Thor Thayer (1):
      mtd: spi-nor: Fix Cadence QSPI page fault kernel panic

Tigran Mkrtchyan (1):
      flexfiles: use per-mirror specified stateid for IO

Vasyl Vavrychuk (1):
      mac80211_hwsim: Timer should be initialized before device registered

Vincent Chen (1):
      net: faraday: ftmac100: remove netif_running(netdev) check before disabling interrupts

Yangtao Li (1):
      net: amd: add missing of_node_put()

Young Xiao (2):
      staging: rtl8712: Fix possible buffer overrun
      Revert commit ef9209b642f "staging: rtl8723bs: Fix indenting errors and an off-by-one mistake in core/rtw_mlme_ext.c"

 Makefile                                           |   2 +-
 arch/arm/probes/kprobes/opt-arm.c                  |   2 +-
 drivers/dma/cppi41.c                               |  16 +-
 drivers/dma/dw/core.c                              |   6 +-
 drivers/gpio/gpio-mockup.c                         |   6 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c              |  35 +++-
 drivers/hid/hid-ids.h                              |   3 +
 drivers/hid/hid-multitouch.c                       |   6 +
 drivers/hv/channel_mgmt.c                          | 185 ++++++++++++++-------
 drivers/hv/connection.c                            |  24 ++-
 drivers/hv/hyperv_vmbus.h                          |   7 +
 drivers/iommu/amd_iommu_init.c                     |   3 +-
 drivers/iommu/intel-iommu.c                        |   2 +-
 drivers/iommu/intel-svm.c                          |   2 +-
 drivers/iommu/ipmmu-vmsa.c                         |   3 +
 drivers/media/platform/omap3isp/isp.c              |   3 +-
 drivers/mtd/nand/qcom_nandc.c                      |  32 ++--
 drivers/mtd/spi-nor/cadence-quadspi.c              |  19 ++-
 drivers/net/can/rcar/rcar_can.c                    |   5 +-
 drivers/net/ethernet/amd/sunlance.c                |   4 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x.h        |   7 +
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c     |   1 +
 drivers/net/ethernet/faraday/ftmac100.c            |   7 +-
 drivers/net/ethernet/ibm/ibmvnic.c                 |   4 +-
 drivers/net/ethernet/mellanox/mlx4/alloc.c         |   2 +-
 drivers/net/ethernet/mellanox/mlx4/mlx4.h          |   4 +-
 drivers/net/ethernet/mellanox/mlx4/mr.c            |   1 +
 drivers/net/ethernet/qlogic/qed/qed_dev.c          |  29 +++-
 drivers/net/ethernet/qlogic/qed/qed_int.c          |   2 +
 drivers/net/ethernet/qlogic/qed/qed_main.c         |   2 +-
 drivers/net/team/team.c                            |   2 -
 .../net/wireless/broadcom/brcm80211/brcmutil/d11.c |   3 +
 drivers/net/wireless/mac80211_hwsim.c              |   8 +-
 drivers/nvdimm/nd-core.h                           |   2 +
 drivers/nvdimm/pfn_devs.c                          |  64 ++++---
 drivers/nvdimm/region_devs.c                       |  41 +++++
 drivers/s390/virtio/virtio_ccw.c                   |  17 +-
 drivers/staging/lustre/lnet/lnet/config.c          |   3 +-
 drivers/staging/lustre/lustre/lmv/lmv_obd.c        |   2 +-
 .../css2400/runtime/debug/src/ia_css_debug.c       |   4 +-
 drivers/staging/rtl8712/mlme_linux.c               |   2 +-
 drivers/staging/rtl8712/rtl871x_mlme.c             |   2 +-
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   2 +-
 drivers/tty/serial/8250/8250_mtk.c                 |  16 +-
 drivers/tty/serial/kgdboc.c                        |   4 +-
 drivers/tty/tty_port.c                             |   3 +-
 drivers/usb/core/hub.c                             |   2 +-
 drivers/usb/core/usb.c                             |   6 +-
 drivers/usb/gadget/function/f_fs.c                 |  26 +--
 drivers/usb/host/hwa-hc.c                          |   2 +-
 drivers/usb/host/xhci-pci.c                        |   4 +
 drivers/usb/host/xhci.c                            |  26 ++-
 drivers/usb/host/xhci.h                            |   3 +
 drivers/usb/misc/appledisplay.c                    |   1 +
 drivers/vhost/vsock.c                              |  57 ++++---
 fs/cifs/dir.c                                      |   2 +-
 fs/f2fs/data.c                                     |   3 +
 fs/f2fs/inode.c                                    |  18 +-
 fs/nfs/flexfilelayout/flexfilelayout.c             |  21 +--
 fs/nfs/flexfilelayout/flexfilelayout.h             |   4 +
 fs/nfs/flexfilelayout/flexfilelayoutdev.c          |  19 +++
 include/linux/hyperv.h                             |   7 +
 include/linux/usb.h                                |   4 +-
 include/sound/pcm_params.h                         |   4 +-
 lib/swiotlb.c                                      |  20 +--
 lib/test_firmware.c                                |   1 +
 net/batman-adv/bat_v_elp.c                         |   6 +-
 net/batman-adv/fragmentation.c                     |   2 +-
 net/mac80211/iface.c                               |   2 +
 net/mac80211/rx.c                                  |   1 +
 net/mac80211/status.c                              |   2 +
 net/mac80211/tx.c                                  |   4 +-
 net/sunrpc/auth_gss/auth_gss.c                     |   4 +
 sound/core/pcm_native.c                            |  14 +-
 sound/pci/hda/hda_intel.c                          |   4 +
 sound/pci/hda/patch_realtek.c                      |   9 +
 sound/usb/card.c                                   |   5 +-
 77 files changed, 615 insertions(+), 267 deletions(-)

BUG= chromium:914561 
TEST=Build and test on various affected systems

Change-Id: I1c0d11e8525de85dbc1c38dcff5e173c4ad9c374
Signed-off-by: Guenter Roeck <groeck@chromium.org>