Xenial update to v4.4.4 stable release

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The v4.4.4 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

       The following patches from the v4.4.4 stable release shall be applied:

af_iucv: Validate socket address length in iucv_sock_bind()
gro: Make GRO aware of lightweight tunnels.
net: dp83640: Fix tx timestamp overflow handling.
tunnels: Allow IPv6 UDP checksums to be correctly controlled.
lwt: fix rx checksum setting for lwt devices tunneling over ipv6
tcp: fix NULL deref in tcp_v4_send_ack()
af_unix: fix struct pid memory leak
pptp: fix illegal memory access caused by multiple bind()s
sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
net: dsa: fix mv88e6xxx switches
tipc: fix connection abort during subscription cancel
inet: frag: Always orphan skbs inside ip_defrag()
switchdev: Require RTNL mutex to be held when sending FDB notifications
tcp: beware of alignments in tcp_get_info()
ipv6: enforce flowi6_oif usage in ip6_dst_lookup_tail()
ipv6/udp: use sticky pktinfo egress ifindex on connect()
ipv6: addrconf: Fix recursive spin lock call
ipv6: fix a lockdep splat
unix: correctly track in-flight fds in sending process user_struct
tcp: do not drop syn_recv on all icmp reports
net:Add sysctl_max_skb_frags
tg3: Fix for tg3 transmit queue 0 timed out when too many gso_segs
enic: increment devcmd2 result ring in case of timeout
sctp: translate network order to host order when users get a hmacid
net: Copy inner L3 and L4 headers as unaligned on GRE TEB
flow_dissector: Fix unaligned access in __skb_flow_dissector when used by eth_get_headlen
bpf: fix branch offset adjustment on backjumps after patching ctx expansion
bonding: Fix ARP monitor validation
ipv4: fix memory leaks in ip_cmsg_send() callers
af_unix: Don't set err in unix_stream_read_generic unless there was an error
af_unix: Guard against other == sk in unix_dgram_sendmsg
tipc: fix premature addition of node to lookup table
tcp: md5: release request socket instead of listener
qmi_wwan: add "4G LTE usb-modem U901"
net/mlx4_en: Count HW buffer overrun only once
net/mlx4_en: Avoid changing dev->features directly in run-time
l2tp: Fix error creating L2TP tunnels
pppoe: fix reference counting in PPPoE proxy
net_sched fix: reclassification needs to consider ether protocol changes
route: check and remove route cache when we get route
tcp/dccp: fix another race at listener dismantle
IFF_NO_QUEUE: Fix for drivers not calling ether_setup()
rtnl: RTM_GETNETCONF: fix wrong return value
tipc: unlock in error path
unix_diag: fix incorrect sign extension in unix_lookup_by_ino
sctp: Fix port hash table size computation
ext4: fix bh->b_state corruption
ARM: debug-ll: fix BCM63xx entry for multiplatform
arm64: errata: Add -mpc-relative-literal-loads to build flags
KVM: s390: fix guest fprs memory leak
devm_memremap: Fix error value when memremap failed
drm/gma500: Use correct unref in the gem bo create function
ARM: 8457/1: psci-smp is built only for SMP
lib/ucs2_string: Add ucs2 -> utf8 helper functions
efi: Use ucs2_as_utf8 in efivarfs instead of open coding a bad version
efi: Do variable name validation tests in utf8
efi: Make our variable validation list include the guid
efi: Make efivarfs entries immutable by default
efi: Add pstore variables to the deletion whitelist
lib/ucs2_string: Correct ucs2 -> utf8 conversion
bcache: fix a livelock when we cause a huge number of cache misses
bcache: Add a cond_resched() call to gc
bcache: clear BCACHE_DEV_UNLINK_DONE flag when attaching a backing device
bcache: fix a leak in bch_cached_dev_run()
bcache: unregister reboot notifier if bcache fails to unregister device
bcache: allows use of register in udev to avoid "device_busy" error.
bcache: Change refill_dirty() to always scan entire disk if necessary
dm thin: fix race condition when destroying thin pool workqueue
can: ems_usb: Fix possible tx overflow
usb: dwc3: Fix assignment of EP transfer resources
USB: cp210x: add IDs for GE B650V3 and B850V3 boards
USB: option: add support for SIM7100E
USB: option: add "4G LTE usb-modem U901"
drivers: android: correct the size of struct binder_uintptr_t for BC_DEAD_BINDER_DONE
spi: omap2-mcspi: Prevent duplicate gpio_request
iw_cxgb3: Fix incorrectly returning error on success
drm/i915: shut up gen8+ SDE irq dmesg noise
ocfs2: unlock inode if deleting inode from orphan fails
mm: thp: fix SMP race condition between THP page fault and MADV_DONTNEED
mm: numa: quickly fail allocations for NUMA balancing on full nodes
genirq: Validate action before dereferencing it in handle_irq_event_percpu()
clocksource/drivers/vt8500: Increase the minimum delta
s390/kvm: remove dependency on struct save_area definition
KVM: s390: fix memory overwrites when vx is disabled
Btrfs: add missing brelse when superblock checksum fails
Btrfs: igrab inode in writepage
btrfs: statfs: report zero available if metadata are exhausted
Btrfs: send, don't BUG_ON() when an empty symlink is found
Btrfs: fix number of transaction units required to create symlink
Btrfs: fix transaction handle leak on failure to create hard link
Btrfs: Initialize btrfs_root->highest_objectid when loading tree root and subvolume roots
btrfs: initialize the seq counter in struct btrfs_device
s390: fix normalization bug in exception table sorting
s390/dasd: prevent incorrect length error under z/VM after PAV changes
s390/dasd: fix refcount for PAV reassignment
s390/dasd: fix performance drop
uml: flush stdout before forking
uml: fix hostfs mknod()
um: link with -lpthread
locks: fix unlock when fcntl_setlk races with a close
rtlwifi: rtl_pci: Fix kernel panic
rtlwifi: rtl8192cu: Add missing parameter setup
rtlwifi: rtl8192ce: Fix handling of module parameters
rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
rtlwifi: rtl8723ae: Fix initialization of module parameters
rtlwifi: rtl8192se: Fix module parameter initialization
rtlwifi: rtl8188ee: Fix module parameter initialization
rtlwifi: rtl8723be: Fix module parameter initialization
mei: fix fasync return value on error
mei: validate request value in client notify request ioctl
namei: ->d_inode of a pinned dentry is stable only for positives
rc: sunxi-cir: Initialize the spinlock properly
media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
si2157: return -EINVAL if firmware blob is too big
gspca: ov534/topro: prevent a division by 0
vb2: fix a regression in poll() behavior for output,streams
tda1004x: only update the frontend properties if locked
dm space map metadata: remove unused variable in brb_pop()
dm snapshot: fix hung bios when copy error occurs
dm: fix dm_rq_target_io leak on faults with .request_fn DM w/ blk-mq paths
coresight: checking for NULL string in coresight_name_match()
irqchip/omap-intc: Add support for spurious irq handling
irqchip/mxs: Add missing set_handle_irq()
irqchip/atmel-aic: Fix wrong bit operation for IRQ priority
irqchip/gic-v3-its: Fix double ICC_EOIR write for LPI in EOImode==1
posix-clock: Fix return code on the poll method's error path
clockevents/tcb_clksrc: Prevent disabling an already disabled clock
mmc: usdhi6rol0: handle NULL data in timeout
mmc: sdhci-pci: Do not default to 33 Ohm driver strength for Intel SPT
mmc: sdio: Fix invalid vdd in voltage switch power cycle
mmc: mmc: Fix incorrect use of driver strength switching HS200 and HS400
mmc: sdhci: Fix sdhci_runtime_pm_bus_on/off()
mmc: core: Enable tuning according to the actual timing
mmc: mmci: fix an ages old detection error
mmc: sdhci-acpi: Fix card detect race for Intel BXT/APL
mmc: pxamci: fix again read-only gpio detection polarity
mmc: sdhci-pci: Fix card detect race for Intel BXT/APL
mmc: sdhci: Allow override of mmc host operations
mmc: sdhci: Allow override of get_cd() called from sdhci_request()
Bluetooth: Use continuous scanning when creating LE connections
Bluetooth: Add support of Toshiba Broadcom based devices
Bluetooth: Fix incorrect removing of IRKs
Bluetooth: 6lowpan: Fix kernel NULL pointer dereferences
Bluetooth: 6lowpan: Fix handling of uncompressed IPv6 packets
time: Avoid signed overflow in timekeeping_get_ns()
cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
Revert "MIPS: Fix PAGE_MASK definition"
MIPS: Loongson-3: Fix SMP_ASK_C0COUNT IPI handler
MIPS: hpet: Choose a safe value for the ETIME check
MIPS: Fix some missing CONFIG_CPU_MIPSR6 #ifdefs
MIPS: Fix buffer overflow in syscall_get_arguments()
EDAC: Robustify workqueues destruction
EDAC, mc_sysfs: Fix freeing bus' name
sparc64: fix incorrect sign extension in sys_sparc64_personality
clk: exynos: use irqsave version of spin_lock to avoid deadlock with irqs
regulator: axp20x: Fix GPIO LDO enable value for AXP22x
regulator: mt6311: MT6311_REGULATOR needs to select REGMAP_I2C
virtio_balloon: fix race by fill and leak
virtio_balloon: fix race between migration and ballooning
virtio_pci: fix use after free on release
drm/vmwgfx: Fix an incorrect lock check
drm/vmwgfx: Fix a width / pitch mismatch on framebuffer updates
drm/vmwgfx: respect 'nomodeset'
drm/amdgpu: call hpd_irq_event on resume
drm/amdgpu: use post-decrement in error handling
drm/amdgpu: Don't hang in amdgpu_flip_work_func on disabled crtc.
drm/amdgpu/pm: adjust display configuration after powerstate
drm/nouveau/kms: take mode_config mutex in connector hotplug path
drm/nouveau/display: Enable vblank irqs after display engine is on again.
drm/nouveau/disp/dp: ensure sink is powered up before attempting link training
drm/nouveau: platform: Fix deferred probe
drm/dp/mst: process broadcast messages correctly
drm/dp/mst: always send reply for UP request
drm/dp/mst: fix in MSTB RAD initialization
drm/dp/mst: fix in RAD element access
drm/dp/mst: Calculate MST PBN with 31.32 fixed point
drm/dp/mst: move GUID storage from mgr, port to only mst branch
drm/dp/mst: Reverse order of MST enable and clearing VC payload table.
drm/dp/mst: deallocate payload on port destruction
drm/i915: Restore inhibiting the load of the default context
drm/i915: intel_hpd_init(): Fix suspend/resume reprobing
drm/i915: Init power domains early in driver load
drm/i915: Make sure DC writes are coherent on flush.
drm/i915/dp: fall back to 18 bpp when sink capability is unknown
drm/i915: Don't reject primary plane windowing with color keying enabled on SKL+
drm/i915/skl: Don't skip mst encoders in skl_ddi_pll_select()
drm/i915/dsi: defend gpio table against out of bounds access
drm/i915/dsi: don't pass arbitrary data to sideband
drm/i915: fix error path in intel_setup_gmbus()
drm/qxl: use kmalloc_array to alloc reloc_info in qxl_process_single_command
drm/radeon: use post-decrement in error handling
drm: No-Op redundant calls to drm_vblank_off() (v2)
drm: Prevent vblank counter bumps > 1 with active vblank clients. (v2)
drm: Fix drm_vblank_pre/post_modeset regression from Linux 4.4
drm: Fix treatment of drm_vblank_offdelay in drm_vblank_on() (v2)
drm/radeon: Don't hang in radeon_flip_work_func on disabled crtc. (v2)
drm/radeon/pm: adjust display configuration after powerstate
make sure that freeing shmem fast symlinks is RCU-delayed
toshiba_acpi: Fix blank screen at boot if transflective backlight is supported
ideapad-laptop: Add Lenovo ideapad Y700-17ISK to no_hw_rfkill dmi list
ideapad-laptop: Add Lenovo Yoga 700 to no_hw_rfkill dmi list
uapi: update install list after nvme.h rename
lib: sw842: select crc32
ACPI / video: Add disable_backlight_sysfs_if quirk for the Toshiba Portege R700
ACPI / video: Add disable_backlight_sysfs_if quirk for the Toshiba Satellite R830
ACPI: Revert "ACPI / video: Add Dell Inspiron 5737 to the blacklist"
ACPI / PCI / hotplug: unlock in error path in acpiphp_enable_slot()
nfit: fix multi-interface dimm handling, acpi6.1 compatibility
dmaengine: dw: fix cyclic transfer setup
dmaengine: dw: fix cyclic transfer callbacks
dmaengine: at_xdmac: fix resume for cyclic transfers
dmaengine: dw: disable BLOCK IRQs for non-cyclic xfer
IB/cm: Fix a recently introduced deadlock
IB/qib: fix mcast detach when qp not attached
IB/qib: Support creating qps with GFP_NOIO flag
IB/mlx5: Expose correct maximum number of CQE capacity
Thermal: initialize thermal zone device correctly
Thermal: handle thermal zone device properly during system sleep
Thermal: do thermal zone update after a cooling device registered
hwmon: (dell-smm) Blacklist Dell Studio XPS 8000
hwmon: (gpio-fan) Remove un-necessary speed_index lookup for thermal hook
hwmon: (ads1015) Handle negative conversion values correctly
cpufreq: pxa2xx: fix pxa_cpufreq_change_voltage prototype
cpufreq: Fix NULL reference crash while accessing policy->governor_data
seccomp: always propagate NO_NEW_PRIVS on tsync
libceph: fix ceph_msg_revoke()
libceph: don't bail early from try_read() when skipping a message
libceph: use the right footer size when skipping a message
libceph: don't spam dmesg with stray reply warnings
sd: Optimal I/O size is in bytes, not sectors
Staging: speakup: Fix getting port information
Revert "Staging: panel: usleep_range is preferred over udelay"
cdc-acm:exclude Samsung phone 04e8:685d
perf stat: Do not clean event's private stats
tick/nohz: Set the correct expiry when switching to nohz/lowres mode
rfkill: fix rfkill_fop_read wait_event usage
mac80211: Requeue work after scan complete for all VIF types.
workqueue: handle NUMA_NO_NODE for unbound pool_workqueue lookup
Revert "workqueue: make sure delayed work run in local cpu"
ALSA: hda - Apply clock gate workaround to Skylake, too
ALSA: hda - Fixing background noise on Dell Inspiron 3162
target: Fix LUN_RESET active I/O handling for ACK_KREF
target: Fix LUN_RESET active TMR descriptor handling
target: Fix TAS handling for multi-session se_node_acls
target: Fix remote-port TMR ABORT + se_cmd fabric stop
target: Fix race with SCF_SEND_DELAYED_TAS handling
spi: atmel: fix gpio chip-select in case of non-DT platform
libata: fix sff host state machine locking while polling
ARCv2: STAR 9000950267: Handle return from intr to Delay Slot #2
ARCv2: SMP: Emulate IPI to self using software triggered interrupt
PCI/AER: Flush workqueue on device remove to avoid use-after-free
cpuset: make mm migration asynchronous
cgroup: make sure a parent css isn't offlined before its children
writeback: keep superblock pinned during cgroup writeback association switches
phy: core: fix wrong err handle for phy_power_on
i2c: i801: Adding Intel Lewisburg support for iTCO
bio: return EINTR if copying to user space got interrupted
block: fix use-after-free in dio_bio_complete
nfs: fix nfs_size_to_loff_t
NFSv4: Fix a dentry leak on alias use
of/irq: Fix msi-map calculation for nonzero rid-base
KVM: async_pf: do not warn on page allocation failures
KVM: arm/arm64: vgic: Ensure bitmaps are long enough
KVM: x86: fix missed hardware breakpoints
KVM: x86: MMU: fix ubsan index-out-of-range warning
powerpc/eeh: Fix partial hotplug criterion
tracing: Fix showing function event in available_events
sunrpc/cache: fix off-by-one in qword_get()
kernel/resource.c: fix muxed resource handling in __request_region()
do_last(): don't let a bogus return value from ->open() et.al. to confuse us
ARM: OMAP2+: Fix onenand initialization to avoid filesystem corruption
ARM: at91/dt: fix typo in sama5d2 pinmux descriptions
xen/arm: correctly handle DMA mapping of compound pages
xen/scsiback: correct frontend counting
xen/pciback: Check PF instead of VF for PCI_COMMAND_MEMORY
xen/pciback: Save the number of MSI-X entries to be copied later.
xen/pcifront: Fix mysterious crashes when NUMA locality information was extracted.
should_follow_link(): validate ->d_seq after having decided to follow
do_last(): ELOOP failure exit should be done after leaving RCU mode
hpfs: don't truncate the file when delete fails
x86/irq: Call chip->irq_set_affinity in proper context
x86/irq: Fix a race in x86_vector_free_irqs()
x86/irq: Validate that irq descriptor is still active
x86/irq: Do not use apic_chip_data.old_domain as temporary buffer
x86/irq: Reorganize the return path in assign_irq_vector
x86/irq: Reorganize the search in assign_irq_vector
x86/irq: Check vector allocation early
x86/irq: Copy vectormask instead of an AND operation
x86/irq: Get rid of code duplication
x86/irq: Remove offline cpus from vector cleanup
x86/irq: Clear move_in_progress before sending cleanup IPI
x86/irq: Remove the cpumask allocation from send_cleanup_vector()
x86/irq: Remove outgoing CPU from vector cleanup mask
x86/irq: Call irq_force_move_complete with irq descriptor
x86/irq: Plug vector cleanup race
IB/cma: Fix RDMA port validation for iWarp
iwlwifi: dvm: fix WoWLAN
iwlwifi: pcie: properly configure the debug buffer size for 8000
iwlwifi: update and fix 7265 series PCI IDs
iwlwifi: mvm: don't allow sched scans without matches to be started
Linux 4.4.4
Revert "UBUNTU: SAUCE: bcache: prevent crash on changing writeback_running"
bcache: prevent crash on changing writeback_running
UBUNTU: [Config] updateconfigs