Xenial update to 4.4.129 stable release

[Juerg Haefliger]

SRU Justification

Impact:
   The upstream process for stable tree updates is quite similar
   in scope to the Ubuntu SRU process, e.g., each patch has to
   demonstrably fix a bug, and each patch is vetted by upstream
   by originating either directly from a mainline/stable Linux tree
   or a minimally backported form of that patch. The 4.4.129 upstream
   stable stable patch set is now available. It should be included
   in the Ubuntu kernel as well.

   git://git.kernel.org/

TEST CASE: TBD

   The following patches from the 4.4.129 stable release shall be
   applied:
   * Linux 4.4.129
   * writeback: safer lock nesting
   * fanotify: fix logic of events on child
   * ext4: bugfix for mmaped pages in mpage_release_unused_pages()
   * mm/filemap.c: fix NULL pointer in page_cache_tree_insert()
   * mm: allow GFP_{FS,IO} for page_cache_read page cache allocation
   * autofs: mount point create should honour passed in mode
   * Don't leak MNT_INTERNAL away from internal mounts
   * rpc_pipefs: fix double-dput()
   * hypfs_kill_super(): deal with failed allocations
   * jffs2_kill_sb(): deal with failed allocations
   * powerpc/lib: Fix off-by-one in alternate feature patching
   * powerpc/eeh: Fix enabling bridge MMIO windows
   * MIPS: memset.S: Fix clobber of v1 in last_fixup
   * MIPS: memset.S: Fix return of __clear_user from Lpartial_fixup
   * MIPS: memset.S: EVA & fault support for small_memset
   * MIPS: uaccess: Add micromips clobbers to bzero invocation
   * HID: hidraw: Fix crash on HIDIOCGFEATURE with a destroyed device
   * ALSA: hda - New VIA controller suppor no-snoop path
   * ALSA: rawmidi: Fix missing input substream checks in compat ioctls
   * ALSA: line6: Use correct endpoint type for midi output
   * ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()
   * ext4: fix crashes in dioread_nolock mode
   * drm/radeon: Fix PCIe lane width calculation
   * ext4: don't allow r/w mounts if metadata blocks overlap the superblock
   * vfio/pci: Virtualize Maximum Read Request Size
   * vfio/pci: Virtualize Maximum Payload Size
   * vfio-pci: Virtualize PCIe & AF FLR
   * ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation
   * ALSA: pcm: Fix mutex unbalance in OSS emulation ioctls
   * ALSA: pcm: Return -EBUSY for OSS ioctls changing busy streams
   * ALSA: pcm: Avoid potential races between OSS ioctls and read/write
   * ALSA: pcm: Use ERESTARTSYS instead of EINTR in OSS emulation
   * ALSA: oss: consolidate kmalloc/memset 0 call to kzalloc
   * watchdog: f71808e_wdt: Fix WD_EN register read
   * thermal: imx: Fix race condition in imx_thermal_probe()
   * clk: bcm2835: De-assert/assert PLL reset signal when appropriate
   * clk: mvebu: armada-38x: add support for missing clocks
   * clk: mvebu: armada-38x: add support for 1866MHz variants
   * mmc: jz4740: Fix race condition in IRQ mask update
   * iommu/vt-d: Fix a potential memory leak
   * um: Use POSIX ucontext_t instead of struct ucontext
   * dmaengine: at_xdmac: fix rare residue corruption
   * IB/srp: Fix completion vector assignment algorithm
   * IB/srp: Fix srp_abort()
   * ALSA: pcm: Fix UAF at PCM release via PCM timer access
   * RDMA/ucma: Don't allow setting RDMA_OPTION_IB_PATH without an RDMA device
   * ext4: fail ext4_iget for root directory if unallocated
   * ext4: don't update checksum of new initialized bitmaps
   * jbd2: if the journal is aborted then don't allow update of the log tail
   * random: use a tighter cap in credit_entropy_bits_safe()
   * thunderbolt: Resume control channel after hibernation image is created
   * ASoC: ssm2602: Replace reg_default_raw with reg_default
   * HID: core: Fix size as type u32
   * HID: Fix hid_report_len usage
   * powerpc/powernv: Fix OPAL NVRAM driver OPAL_BUSY loops
   * powerpc/powernv: define a standard delay for OPAL_BUSY type retry loops
   * powerpc/64: Fix smp_wmb barrier definition use use lwsync consistently
   * powerpc/powernv: Handle unknown OPAL errors in opal_nvram_write()
   * HID: i2c-hid: fix size check and type usage
   * usb: dwc3: pci: Properly cleanup resource
   * USB:fix USB3 devices behind USB3 hubs not resuming at hibernate thaw
   * ACPI / hotplug / PCI: Check presence of slot itself in get_slot_status()
   * ACPI / video: Add quirk to force acpi-video backlight on Samsung 670Z5E
   * regmap: Fix reversed bounds check in regmap_raw_write()
   * xen-netfront: Fix hang on device removal
   * ARM: dts: at91: sama5d4: fix pinctrl compatible string
   * ARM: dts: at91: at91sam9g25: fix mux-mask pinctrl property
   * usb: musb: gadget: misplaced out of bounds check
   * mm, slab: reschedule cache_reap() on the same CPU
   * ipc/shm: fix use-after-free of shm file via remap_file_pages()
   * resource: fix integer overflow at reallocation
   * fs/reiserfs/journal.c: add missing resierfs_warning() arg
   * ubi: Reject MLC NAND
   * ubi: Fix error for write access
   * ubi: fastmap: Don't flush fastmap work on detach
   * ubifs: Check ubifs_wbuf_sync() return code
   * tty: make n_tty_read() always abort if hangup is in progress
   * x86/hweight: Don't clobber %rdi
   * x86/hweight: Get rid of the special calling convention
   * lan78xx: Correctly indicate invalid OTP
   * slip: Check if rstate is initialized before uncompressing
   * cdc_ether: flag the Cinterion AHS8 modem by gemalto as WWAN
   * hwmon: (ina2xx) Fix access to uninitialized mutex
   * rtl8187: Fix NULL pointer dereference in priv->conf_mutex
   * getname_kernel() needs to make sure that ->name != ->iname in long case
   * s390/ipl: ensure loadparm valid flag is set
   * s390/qdio: don't merge ERROR output buffers
   * s390/qdio: don't retry EQBS after CCQ 96
   * block/loop: fix deadlock after loop_set_status
   * Revert "perf tests: Decompress kernel module before objdump"
   * radeon: hide pointless #warning when compile testing
   * perf intel-pt: Fix timestamp following overflow
   * perf intel-pt: Fix error recovery from missing TIP packet
   * perf intel-pt: Fix sync_switch
   * perf intel-pt: Fix overlap detection to identify consecutive buffers correctly
   * parisc: Fix out of array access in match_pci_device()
   * media: v4l2-compat-ioctl32: don't oops on overlay

[Juerg Haefliger (juergh)]

Skipped the following commit (commit to be reverted is not applied):
   * Revert "perf tests: Decompress kernel module before objdump"

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-128.154

---------------
linux (4.4.0-128.154) xenial; urgency=medium

  * linux: 4.4.0-128.154 -proposed tracker (LP: #1772960)

  * CVE-2018-3639 (x86)
    - x86/cpu: Make alternative_msr_write work for 32-bit code
    - x86/bugs: Fix the parameters alignment and missing void
    - KVM: SVM: Move spec control call after restore of GS
    - x86/speculation: Use synthetic bits for IBRS/IBPB/STIBP
    - x86/cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS
    - x86/cpufeatures: Disentangle SSBD enumeration
    - x86/cpu/AMD: Fix erratum 1076 (CPB bit)
    - x86/cpufeatures: Add FEATURE_ZEN
    - x86/speculation: Handle HT correctly on AMD
    - x86/bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL
    - x86/speculation: Add virtualized speculative store bypass disable support
    - x86/speculation: Rework speculative_store_bypass_update()
    - x86/bugs: Unify x86_spec_ctrl_{set_guest,restore_host}
    - x86/bugs: Expose x86_spec_ctrl_base directly
    - x86/bugs: Remove x86_spec_ctrl_set()
    - x86/bugs: Rework spec_ctrl base and mask logic
    - x86/speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG
    - KVM: SVM: Implement VIRT_SPEC_CTRL support for SSBD
    - x86/bugs: Rename SSBD_NO to SSB_NO
    - KVM: VMX: Expose SSBD properly to guests.

  * [i915_bpo] Fix flickering issue after panel change (LP: #1770565)
    - drm/i915: Fix iboost setting for DDI with 4 lanes on SKL
    - drm/i915: Name the "iboost bit"
    - drm/i915: Program iboost settings for HDMI/DVI on SKL
    - drm/i915: Move bxt_ddi_vswing_sequence() call into intel_ddi_pre_enable()
      for HDMI
    - drm/i915: Explicitly use ddi buf trans entry 9 for hdmi
    - drm/i915: Split DP/eDP/FDI and HDMI/DVI DDI buffer programming apart
    - drm/i915: Get the iboost setting based on the port type
    - drm/i915: Simplify intel_ddi_get_encoder_port()
    - drm/i915: Fix iboost setting for SKL Y/U DP DDI buffer translation entry 2
    - drm/i915: KBL - Recommended buffer translation programming for DisplayPort
    - drm/i915: Ignore OpRegion panel type except on select machines

  * [SRU][Bionic/Artful] fix false positives in W+X checking (LP: #1769696)
    - init: fix false positives in W+X checking

  * [Ubuntu 16.04] kernel: fix rwlock implementation (LP: #1761674)
    - SAUCE: (no-up) s390: fix rwlock implementation

  * linux < 4.11: unable to use netfilter logging from non-init namespaces
    (LP: #1766573)
    - netfilter: allow logging from non-init namespaces

  * [LTC Test] Ubuntu 18.04: tm_sigreturn failed on P8 compat mode 16.04.04
    guest (LP: #1771439)
    - powerpc: signals: Discard transaction state from signal frames

  * QCA9377 requires more IRAM banks for its new firmware (LP: #1748345)
    - ath10k: update the IRAM bank number for QCA9377

  * i915/kbl_dmc_ver1.bin failed with error -2 package 1.157.17 kernel
    4.4.0-116-generic (LP: #1752536)
    - ubuntu: i915_bpo - Add MODULE_FIRMWARE for Geminilake's DMC

  * Xenial update to 4.4.131 stable release (LP: #1768825)
    - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS
    - ext4: set h_journal if there is a failure...