CHROMIUM: Merge 'v4.14.91' into chromeos-4.14

Merge of v4.14.91 into chromeos-4.14

Changelog:
----------------------------------------------------------------
Bart Van Assche (1):
      ib_srpt: Fix a use-after-free in __srpt_close_all_ch()

Cfir Cohen (1):
      KVM: Fix UAF in nested posted interrupt processing

Christophe Leroy (1):
      gpio: max7301: fix driver for use with CONFIG_VMAP_STACK

Colin Ian King (1):
      x86/mtrr: Don't copy uninitialized gentry fields back to userspace

Dan Carpenter (1):
      cifs: integer overflow in in SMB2_ioctl()

Daniel Mack (1):
      ASoC: sta32x: set ->component pointer in private struct

Dexuan Cui (1):
      Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels

Eduardo Habkost (1):
      kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs

Emmanuel Grumbach (1):
      iwlwifi: mvm: don't send GEO_TX_POWER_LIMIT to old firmwares

Greg Kroah-Hartman (1):
      Linux 4.14.91

Guenter Roeck (1):
      Merge remote-tracking branch 'origin/linux/v4.14.91' into merge/chromeos-4.14-v4.14.91

Gustavo A. R. Silva (1):
      drm/ioctl: Fix Spectre v1 vulnerabilities

Hans de Goede (1):
      gpiolib-acpi: Only defer request_irq for GpioInt ACPI event handlers

Hui Peng (1):
      USB: hso: Fix OOB memory access in hso_probe/hso_get_config_data

Ihab Zhaika (1):
      iwlwifi: add new cards for 9560, 9462, 9461 and killer series

Ivan Delalande (1):
      proc/sysctl: don't return ENOMEM on lookup when a table is unregistering

Jens Axboe (2):
      block: break discard submissions into the user defined size
      scsi: sd: use mempool for discard special page

Jiri Olsa (1):
      perf record: Synthesize features before events in pipe mode

Jörgen Storvist (4):
      USB: serial: option: add GosunCn ZTE WeLink ME3630
      USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode)
      USB: serial: option: add Fibocom NL668 series
      USB: serial: option: add Telit LN940 series

Mathias Nyman (1):
      xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only

Mikulas Patocka (1):
      block: fix infinite loop if the device loses discard capability

Nicolas Saenz Julienne (1):
      USB: xhci: fix 'broken_suspend' placement in struct xchi_hcd

Richard Weinberger (2):
      ubifs: Fix directory size calculation for symlinks
      ubifs: Handle re-linking of inodes correctly while recovery

Roman Gushchin (1):
      mm: don't miss the last page because of round-off error

Russell King (1):
      mmc: omap_hsmmc: fix DMA API warning

Sergey Senozhatsky (1):
      panic: avoid deadlocks in re-entrant console drivers

Thomas Gleixner (1):
      posix-timers: Fix division by zero bug

Tore Anderson (1):
      USB: serial: option: add HP lt4132

Ulf Hansson (3):
      mmc: core: Reset HPI enabled state during re-init and in case of errors
      mmc: core: Allow BKOPS and CACHE ctrl even if no HPI support
      mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl

Uwe Kleine-König (2):
      spi: imx: add a device specific prepare_message callback
      spi: imx: mx51-ecspi: Move some initialisation to prepare_message hook.

 Makefile                                      |   2 +-
 arch/x86/include/asm/msr-index.h              |   1 +
 arch/x86/kernel/cpu/mtrr/if.c                 |   2 +
 arch/x86/kvm/vmx.c                            |   2 +
 arch/x86/kvm/x86.c                            |   2 +
 block/blk-lib.c                               |  22 +++-
 drivers/gpio/gpio-max7301.c                   |  12 +--
 drivers/gpio/gpiolib-acpi.c                   | 144 +++++++++++++++-----------
 drivers/gpu/drm/drm_ioctl.c                   |  10 +-
 drivers/hv/vmbus_drv.c                        |  20 ++++
 drivers/infiniband/ulp/srpt/ib_srpt.c         |   4 +-
 drivers/mmc/core/mmc.c                        |  24 +++--
 drivers/mmc/host/omap_hsmmc.c                 |  12 ++-
 drivers/net/usb/hso.c                         |  18 +++-
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c   |   9 ++
 drivers/net/wireless/intel/iwlwifi/pcie/drv.c |  50 +++++++++
 drivers/scsi/sd.c                             |  23 +++-
 drivers/spi/spi-imx.c                         |  91 ++++++++++++----
 drivers/usb/host/xhci-hub.c                   |   3 +-
 drivers/usb/host/xhci.h                       |   4 +-
 drivers/usb/serial/option.c                   |  16 ++-
 fs/cifs/smb2pdu.c                             |   4 +-
 fs/proc/proc_sysctl.c                         |  13 ++-
 fs/ubifs/dir.c                                |   5 +-
 fs/ubifs/replay.c                             |  37 +++++++
 include/linux/math64.h                        |   3 +
 kernel/panic.c                                |   6 +-
 kernel/time/posix-timers.c                    |   5 +-
 mm/vmscan.c                                   |   6 +-
 sound/soc/codecs/sta32x.c                     |   3 +
 tools/perf/builtin-record.c                   |  18 ++--
 31 files changed, 429 insertions(+), 142 deletions(-)

BUG=chromium:918250
TEST=Build and test on various affected systems

Change-Id: Iff4efe45fcc98ad9d96103ec708041644e3f21e8
Signed-off-by: Guenter Roeck <[email protected]>