The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/third_party/kernel/+/a471999b5966c0c3e1e447801de2c6a83c396c15

commit a471999b5966c0c3e1e447801de2c6a83c396c15
Author: Guenter Roeck <groeck@chromium.org>
Date: Sat Dec 29 17:01:49 2018

CHROMIUM: Merge 'v4.19.13' into chromeos-4.19

Merge of v4.19.13 into chromeos-4.19

Changelog:
----------------------------------------------------------------
Alistair Strachan (1):
      x86/vdso: Pass --eh-frame-hdr to the linker

Benjamin Tissoires (1):
      Input: elantech - disable elan-i2c for P52 and P72

Brian Norris (1):
      Revert "mwifiex: restructure rx_reorder_tbl_lock usage"

Cfir Cohen (1):
      KVM: Fix UAF in nested posted interrupt processing

Christian Brauner (1):
      Revert "vfs: Allow userns root to call mknod on owned filesystems."

Christophe Leroy (1):
      gpio: max7301: fix driver for use with CONFIG_VMAP_STACK

Colin Ian King (1):
      x86/mtrr: Don't copy uninitialized gentry fields back to userspace

Dan Williams (1):
      x86/mm: Fix decoy address handling vs 32-bit builds

Dave Chinner (1):
      iomap: Revert "fs/iomap.c: get/put the page in iomap_page_create/release()"

Dexuan Cui (1):
      Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels

Eduardo Habkost (1):
      kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs

Emmanuel Grumbach (1):
      iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares

Greg Kroah-Hartman (1):
      Linux 4.19.13

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.19.13' into merge/chromeos-4.19-v4.19.13

Gustavo A. R. Silva (1):
      drm/ioctl: Fix Spectre v1 vulnerabilities

Hans de Goede (1):
      gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers

Hui Peng (1):
      USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data

Ihab Zhaika (1):
      iwlwifi: add new cards for 9560, 9462, 9461 and killer series

Ivan Delalande (1):
      proc/sysctl: don't return ENOMEM on lookup when a table is unregistering

Jacopo Mondi (1):
      media: ov5640: Fix set format regression

Jens Axboe (1):
      scsi: sd: use mempool for discard special page

Jörgen Storvist (4):
      USB: serial: option: add GosunCn ZTE WeLink ME3630
      USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
      USB: serial: option: add Fibocom NL668 series
      USB: serial: option: add Telit LN940 series

Larry Finger (1):
      rtlwifi: Fix leak of skb when processing C2H_BT_INFO

Martin K. Petersen (1):
      scsi: t10-pi: Return correct ref tag when queue has no integrity profile

Martin Schwidefsky (3):
      mm: add mm_pxd_folded checks to pgtable_bytes accounting functions
      mm: make the __PAGETABLE_PxD_FOLDED defines non-empty
      mm: introduce mm_[p4d|pud|pmd]_folded

Mathias Krause (1):
      xfrm_user: fix freeing of xfrm states on acquire

Mathias Nyman (1):
      xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only

Mikhail Zaslonko (1):
      mm, memory_hotplug: initialize struct pages for the full memory section

Nicolas Saenz Julienne (1):
      USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd

Oscar Salvador (1):
      mm, page_alloc: fix has_unmovable_pages for HugePages

Peter Xu (1):
      mm: thp: fix flags for pmd migration when split

Reinette Chatre (1):
      x86/intel_rdt: Ensure a CPU remains online for the region's pseudo-locking sequence

Richard Weinberger (1):
      ubifs: Handle re-linking of inodes correctly while recovery

Roman Gushchin (1):
      mm: don't miss the last page because of round-off error

Russell King (1):
      mmc: omap_hsmmc: fix DMA API warning

Sergey Senozhatsky (1):
      panic: avoid deadlocks in re-entrant console drivers

Thomas Gleixner (2):
      posix-timers: Fix division by zero bug
      futex: Cure exit race

Tore Anderson (1):
      USB: serial: option: add HP lt4132

Ulf Hansson (3):
      mmc: core: Reset HPI enabled state during re-init and in case of errors
      mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
      mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl

Wanpeng Li (1):
      KVM: X86: Fix NULL deref in vcpu_scan_ioapic

 Makefile                                           |   2 +-
 arch/arm/include/asm/pgtable-2level.h              |   2 +-
 arch/m68k/include/asm/pgtable_mm.h                 |   4 +-
 arch/microblaze/include/asm/pgtable.h              |   2 +-
 arch/nds32/include/asm/pgtable.h                   |   2 +-
 arch/parisc/include/asm/pgtable.h                  |   2 +-
 arch/x86/entry/vdso/Makefile                       |   3 +-
 arch/x86/include/asm/msr-index.h                   |   1 +
 arch/x86/kernel/cpu/intel_rdt_ctrlmondata.c        |   4 +
 arch/x86/kernel/cpu/mtrr/if.c                      |   2 +
 arch/x86/kvm/vmx.c                                 |   2 +
 arch/x86/kvm/x86.c                                 |   4 +-
 arch/x86/mm/pat.c                                  |  13 +-
 drivers/gpio/gpio-max7301.c                        |  12 +-
 drivers/gpio/gpiolib-acpi.c                        | 144 ++++++++++++---------
 drivers/gpu/drm/drm_ioctl.c                        |  10 +-
 drivers/hv/vmbus_drv.c                             |  20 +++
 drivers/input/mouse/elantech.c                     |  18 ++-
 drivers/media/i2c/ov5640.c                         |  17 ++-
 drivers/mmc/core/mmc.c                             |  24 ++--
 drivers/mmc/host/omap_hsmmc.c                      |  12 +-
 drivers/net/usb/hso.c                              |  18 ++-
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |   9 ++
 drivers/net/wireless/intel/iwlwifi/pcie/drv.c      |  50 +++++++
 drivers/net/wireless/marvell/mwifiex/11n.c         |   5 +-
 .../net/wireless/marvell/mwifiex/11n_rxreorder.c   |  96 +++++++-------
 drivers/net/wireless/marvell/mwifiex/uap_txrx.c    |   3 -
 drivers/net/wireless/realtek/rtlwifi/base.c        |   1 +
 drivers/scsi/sd.c                                  |  23 +++-
 drivers/usb/host/xhci-hub.c                        |   3 +-
 drivers/usb/host/xhci.h                            |   4 +-
 drivers/usb/serial/option.c                        |  16 ++-
 fs/iomap.c                                         |   7 -
 fs/namei.c                                         |   3 +-
 fs/proc/proc_sysctl.c                              |  13 +-
 fs/ubifs/replay.c                                  |  37 ++++++
 include/asm-generic/4level-fixup.h                 |   2 +-
 include/asm-generic/5level-fixup.h                 |   2 +-
 include/asm-generic/pgtable-nop4d-hack.h           |   2 +-
 include/asm-generic/pgtable-nop4d.h                |   2 +-
 include/asm-generic/pgtable-nopmd.h                |   2 +-
 include/asm-generic/pgtable-nopud.h                |   2 +-
 include/asm-generic/pgtable.h                      |  16 +++
 include/linux/math64.h                             |   3 +
 include/linux/mm.h                                 |   8 ++
 include/linux/t10-pi.h                             |   9 +-
 include/net/xfrm.h                                 |   1 +
 kernel/futex.c                                     |  69 +++++++++-
 kernel/panic.c                                     |   6 +-
 kernel/time/posix-timers.c                         |   5 +-
 mm/huge_memory.c                                   |  20 +--
 mm/page_alloc.c                                    |  19 ++-
 mm/vmscan.c                                        |   6 +-
 net/xfrm/xfrm_state.c                              |   8 +-
 net/xfrm/xfrm_user.c                               |   4 +-
 55 files changed, 555 insertions(+), 219 deletions(-)

BUG= chromium:918251 
TEST=Build and test on various affected systems

Change-Id: Ie6c7664997e79b4f706f23b0ed4d61188ace73c0
Signed-off-by: Guenter Roeck <groeck@chromium.org>