Utopic update to 3.16.7-ckt9 stable release

[Brad Figg]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from Linus' tree or in a minimally
       backported form of that patch. The 3.16.7-ckt9 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://kernel.ubuntu.com/ubuntu/linux.git

    TEST CASE: TBD

       The following patches are in the 3.16.7-ckt9 stable release:
         netfilter: nf_tables: disable preemption when restoring chain counters
         netfilter: nf_tables: fix leaks in error path of nf_tables_newchain()
         ipvs: rerouting to local clients is not needed anymore
         netfilter: nft_compat: fix module refcount underflow
         netfilter: xt_socket: fix a stack corruption bug
         ipvs: add missing ip_vs_pe_put in sync code
         flowcache: Fix kernel panic in flow_cache_flush_task
         pktgen: fix UDP checksum computation
         rtnetlink: ifla_vf_policy: fix misuses of NLA_BINARY
         tcp: make sure skb is not shared before using skb_get()
         ipv6: fix ipv6_cow_metrics for non DST_HOST case
         rtnetlink: call ->dellink on failure when ->newlink exists
         gen_stats.c: Duplicate xstats buffer for later use
         ipv4: ip_check_defrag should correctly check return value of skb_copy_bits
         ipv4: ip_check_defrag should not assume that skb_network_offset is zero
         net: phy: Fix verification of EEE support in phy_init_eee
         ematch: Fix auto-loading of ematch modules.
         openvswitch: Fix net exit.
         net: reject creation of netdev names with colons
         team: fix possible null pointer dereference in team_handle_frame
         net: compat: Ignore MSG_CMSG_COMPAT in compat_sys_{send, recv}msg
         macvtap: make sure neighbour code can push ethernet header
         usb: plusb: Add support for National Instruments host-to-host cable
         udp: only allow UFO for packets from SOCK_DGRAM sockets
         net: ping: Return EAFNOSUPPORT when appropriate.
         team: don't traverse port list using rcu in team_set_mac_address
         ALSA: hda - Add pin configs for ASUS mobo with IDT 92HD73XX codec
         xfs: Fix quota type in quota structures when reusing quota file
         drm/i915: Dell Chromebook 11 has PWM backlight
         gpiolib: of: allow of_gpiochip_find_and_xlate to find more than one chip per node
         gpio: tps65912: fix wrong container_of arguments
         ALSA: pcm: Don't leave PREPARED state after draining
         metag: Fix KSTK_EIP() and KSTK_ESP() macros
         ALSA: hda: controller code - do not export static functions
         drm/i915: Check obj->vma_list under the struct_mutex
         md/raid1: fix read balance when a drive is write-mostly.
         ALSA: hda - Disable runtime PM for Panther Point again
         drm/radeon: use drm_mode_vrefresh() rather than mode->vrefresh
         drm/radeon: fix 1 RB harvest config setup for TN/RL
         arm64: compat Fix siginfo_t -> compat_siginfo_t conversion on big endian
         nilfs2: fix potential memory overrun on inode
         iio: mxs-lradc: separate touchscreen and buffer virtual channels
         iio: mxs-lradc: make ADC reads not disable touchscreen interrupts
         iio: mxs-lradc: make ADC reads not unschedule touchscreen conversions
         iio: mxs-lradc: only update the buffer when its conversions have finished
         iio: imu: adis16400: Fix sign extension
         iio: mxs-lradc: fix iio channel map regression
         iio:adc:mcp3422 Fix incorrect scales table
         iio: ad5686: fix optional reference voltage declaration
         usb: dwc3: dwc3-omap: Fix disable IRQ
         usb: gadget: configfs: don't NUL-terminate (sub)compatible ids
         KVM: emulate: fix CMPXCHG8B on 32-bit hosts
         usb: XHCI: platform: Move the Marvell quirks after the enabling the clocks
         xhci: Allocate correct amount of scratchpad buffers
         USB: usbfs: don't leak kernel data in siginfo
         uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS539
         efi/libstub: Fix boundary checking in efi_high_alloc()
         Revert "USB: serial: make bulk_out_size a lower limit"
         USB: ftdi_sio: add PIDs for Actisense USB devices
         USB: serial: fix potential use-after-free after failed probe
         USB: serial: fix tty-device error handling at probe
         USB: mxuport: fix null deref when used as a console
         mac80211: Send EAPOL frames at lowest rate
         ARC: Fix KSTK_ESP()
         USB: serial: cp210x: Adding Seletek device id's
         staging: comedi: adv_pci1710: fix AI INSN_READ for non-zero channel
         mei: make device disabled on stop unconditionally
         NFSv4: Don't call put_rpccred() under the rcu_read_lock()
         btrfs: fix lost return value due to variable shadowing
         KVM: MIPS: Fix trace event to save PC directly
         usb: ftdi_sio: Add jtag quirk support for Cyber Cortex AV boards
         ecryptfs: ->f_op is never NULL
         eCryptfs: don't pass fs-specific ioctl commands through
         drm/radeon: do a posting read in r100_set_irq
         drm/radeon: do a posting read in rs600_set_irq
         drm/radeon: do a posting read in r600_set_irq
         drm/radeon: do a posting read in evergreen_set_irq
         drm/radeon: do a posting read in si_set_irq
         drm/radeon: do a posting read in cik_set_irq
         drm/radeon: fix DRM_IOCTL_RADEON_CS oops
         drm/radeon: fix interlaced modes on DCE8
         ACPI / video: Load the module even if ACPI is disabled
         ASoC: omap-pcm: Correct dma mask
         x86/asm/entry/64: Remove a bogus 'ret_from_fork' optimization
         Btrfs: fix data loss in the fast fsync path
         Btrfs:__add_inode_ref: out of bounds memory read when looking for extended ref.
         xhci: fix reporting of 0-sized URBs in control endpoint
         xhci: Workaround for PME stuck issues in Intel xhci
         Change email address for 8250_pci
         tty: fix up atime/mtime mess, take four
         console: Fix console name size mismatch
         net: irda: fix wait_until_sent poll timeout
         USB: serial: fix infinite wait_until_sent timeout
         TTY: fix tty_wait_until_sent on 64-bit machines
         sunrpc: fix braino in ->poll()
         svcrpc: fix memory leak in gssp_accept_sec_context_upcall
         SUNRPC: Always manipulate rpc_rqst::rq_bc_pa_list under xprt->bc_pa_lock
         ath5k: fix spontaneus AR5312 freezes
         net: cls_bpf: fix size mismatch on filter preparation
         net: cls_bpf: fix auto generation of per list handles
         qlge: Fix qlge_update_hw_vlan_features to handle if interface is down
         ip6_gre: fix endianness errors in ip6gre_err
         PCI: Don't read past the end of sysfs "driver_override" buffer
         spi: dw: revisit FIFO size detection again
         spi: atmel: Fix interrupt setup for PDC transfers
         mtd: nand: pxa3xx: Fix PIO FIFO draining
         cpuset: Fix cpuset sched_relax_domain_level
         workqueue: fix hang involving racing cancel[_delayed]_work_sync()'s for PREEMPT_NONE
         bnx2x: Force fundamental reset for EEH recovery
         xen/events: avoid NULL pointer dereference in dom0 on large machines
         spi: pl022: Fix race in giveback() leading to driver lock-up
         tpm/ibmvtpm: Additional LE support for tpm_ibmvtpm_send
         libsas: Fix Kernel Crash in smp_execute_task
         irqchip: armada-370-xp: Fix chained per-cpu interrupts
         ALSA: hda - Fix regression of HD-audio controller fallback modes
         can: add missing initialisations in CAN related skbuffs
         can: kvaser_usb: Avoid double free on URB submission failures
         can: kvaser_usb: Read all messages in a bulk-in URB buffer
         ftrace: Fix en(dis)able graph caller when en(dis)abling record via sysctl
         ftrace: Fix ftrace enable ordering of sysctl ftrace_enabled
         ARM: imx6qdl-sabresd: set swbst_reg as vbus's parent reg
         ARM: imx6sl-evk: set swbst_reg as vbus's parent reg
         drm/radeon: drop setting UPLL to sleep mode
         xen-pciback: limit guest control of command register
         ALSA: hda - Fix built-in mic on Compaq Presario CQ60
         drm/vmwgfx: Fix a couple of lock dependency violations
         drm/vmwgfx: Reorder device takedown somewhat
         ALSA: control: Add sanity checks for user ctl id name string
         ALSA: snd-usb: add quirks for Roland UA-22
         Revert "i2c: core: Dispose OF IRQ mapping at client removal time"
         ALSA: hda - Set single_adc_amp flag for CS420x codecs
         ALSA: hda - Add workaround for MacBook Air 5,2 built-in mic
         nilfs2: fix deadlock of segment constructor during recovery
         ALSA: hda - Don't access stereo amps for mono channel widgets
         ARM: at91: pm: fix at91rm9200 standby
         ARM: dts: DRA7x: Fix the bypass clock source for dpll_iva and others
         ARM: dts: am33xx-clocks: Fix ehrpwm tbclk data on am33xx
         ARM: dts: am43xx-clocks: Fix ehrpwm tbclk data on am43xx
         clk: divider: fix calculation of maximal parent rate for a given divider
         clk: divider: fix selection of divider when rounding to closest
         USB: serial: add Google simple serial SubClass support
         HID: add support for MS Surface Pro 3 Type Cover
         HID: apple: fix battery support for the 2009 ANSI wireless keyboard
         HID: microsoft: add support for Japanese Surface Type Cover 3
         HID: pidff: Fix initialisation forMicrosoft Sidewinder FF Pro 2
         usb: gadget: function: phonet: balance usb_ep_disable calls
         usb: musb: core: add pm_runtime_irq_safe()
         cdc-acm: Add support for Denso cradle CU-321
         HID: microsoft: Add ID for NE7K wireless keyboard
         sparc32: destroy_context() and switch_mm() needs to disable interrupts.
         sparc: semtimedop() unreachable due to comparison error
         sparc: perf: Remove redundant perf_pmu_{en|dis}able calls
         sparc: perf: Make counting mode actually work
         sparc: Touch NMI watchdog when walking cpus and calling printk
         sparc64: Fix several bugs in memmove().
         net: sysctl_net_core: check SNDBUF and RCVBUF for min length
         rds: avoid potential stack overflow
         inet_diag: fix possible overflow in inet_diag_dump_one_icsk()
         caif: fix MSG_OOB test in caif_seqpkt_recvmsg()
         rxrpc: bogus MSG_PEEK test in rxrpc_recvmsg()
         Revert "net: cx82310_eth: use common match macro"
         ipv6: fix backtracking for throw routes
         tcp: fix tcp fin memory accounting
         net: compat: Update get_compat_msghdr() to match copy_msghdr_from_user() behaviour
         tcp: make connect() mem charging friendly
         Linux 3.16.7-ckt9

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.16.0-36.48

---------------
linux (3.16.0-36.48) utopic; urgency=low

  [ Luis Henriques ]

  * Release Tracking Bug
    - LP: #1443946
  * Merged back Ubuntu-3.16.0-34.47 security release

linux (3.16.0-35.46) utopic; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1442324

  [ Andy Whitcroft ]

  * [Config] CONFIG_DEFAULT_MMAP_MIN_ADDR needs to match on armhf and arm64
    - LP: #1418140

  [ Chris J Arges ]

  * [Config] CONFIG_PCIEASPM_DEBUG=y
    - LP: #1398544

  [ dann frazier ]

  * [Config] CONFIG_RTC_DRV_EFI=y on arm64
    - LP: #1441291

  [ Upstream Kernel Changes ]

  * Revert "USB: serial: make bulk_out_size a lower limit"
    - LP: #1441317
  * Revert "i2c: core: Dispose OF IRQ mapping at client removal time"
    - LP: #1441317
  * Revert "net: cx82310_eth: use common match macro"
    - LP: #1441317
  * KEYS: request_key() should reget expired keys rather than give
    EKEYEXPIRED
    - LP: #1124250
  * drm/i915/bdw: 3D_CHICKEN3 has write mask bits
    - LP: #1374389
  * drm/i915: call lpt_init_clock_gating on BDW too
    - LP: #1374389
  * drm/i915/bdw: Apply workarounds in render ring init function
    - LP: #1374389
  * drm/i915/bdw: Cleanup pre prod workarounds
    - LP: #1374389
  * drm/i915: Refactor Broadwell PIPE_CONTROL emission into a helper.
    - LP: #1374389
  * drm/i915: Add the WaCsStallBeforeStateCacheInvalidate:bdw workaround.
    - LP: #1374389
  * drm/i915/bdw: Remove BDW preproduction W/As until C stepping.
    - LP: #1374389
  * drm/i915: Rework GPU reset sequence to match driver load & thaw
    - LP: #1384469
  * drm/ast: switch to using CACHED by default for sysram
    - LP: #1420627
  * drm/ast: Add missing entry to dclk_table[]
    - LP: #1420627
  * drm/ast: Add reduced blanking modes for wide screen mode
    - LP: #1420627
  * drm/ast: Try to use MMIO registers when PIO isn't supported
    - LP: #1420627
  * drm/ast: POST chip at probe time if VGA not enabled
    - LP: #1420627
  * drm/ast: Properly initialize P2A base before using it in
    ast_init_3rdtx()
    - LP: #1420627
  * drm/ast: Don't assume DVO enabled means SIL164 on uninitialized chips
    - LP: #1420627
  * drm/ast: Cleanup analog init code path
    - LP: #1420627
  * audit: correctly record file names with different path name types
    - LP: #1439441
  * of: Create of_console_check() for selecting a console specified in
    /chosen
    - LP: #1438585
  * of: Enable console on serial ports specified by /chosen/stdout-path
    - LP: #1438585
  * of: correct of_console_check()'s return value
    - LP: #1438585
  * of: Add bindings for chosen node, stdout-path
    - LP: #1438585
  * of: add optional options parameter to of_find_node_by_path()
    - LP: #1438585
  * of: support passing console options with stdout-path
    - LP: #1438585
  * netfilter: nf_tables: disable preemption when restoring chain counters
    - LP: #1441317
  * netfilter: nf_tables: fix leaks in error path of nf_tables_newchain()
    - LP: #1441317
  * ipvs: rerouting to local clients is not needed anymore
    - LP: #1441317
  * netfilter: nft_compat: fix module refcount underflow
    - LP: #1441317
  * netf...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.13.0-101.148

---------------
linux (3.13.0-101.148) trusty; urgency=low

  [ Seth Forshee ]

  * Release Tracking Bug
    - LP: #1635430

  * [arm64] nova instances can't boot with 3.13.0-92 (LP: #1608854)
    - Revert "efi: Disable interrupts around EFI calls, not in the epilog/prolog
      calls"
    - Revert "x86/efi: Use all 64 bit of efi_memmap in setup_e820()"
    - Revert "x86/efi: Store upper bits of command line buffer address in
      ext_cmd_line_ptr"
    - Revert "efivarfs: Ensure VariableName is NUL-terminated"
    - Revert "efi/libstub: Fix boundary checking in efi_high_alloc()"
    - Revert "arm64: efi: only attempt efi map setup if booting via EFI"
    - Revert "UBUNTU: arm64: Implement efi_enabled()"
    - Revert "efi/arm64: ignore dtb= when UEFI SecureBoot is enabled"
    - Revert "doc: arm64: add description of EFI stub support"
    - Revert "UBUNTU: Move get_dram_base to arm private file"
    - Revert "arm64: efi: add EFI stub"
    - Revert "arm64: add EFI runtime services"
    - Revert "efi: Add shared FDT related functions for ARM/ARM64"
    - Revert "efi: add helper function to get UEFI params from FDT"
    - Revert "doc: efi-stub.txt updates for ARM"
    - Revert "efi: Add get_dram_base() helper function"
    - Revert "efi: create memory map iteration helper"
    - Revert "x86, ia64: Move EFI_FB vga_default_device() initialization to
      pci_vga_fixup()"
    - Revert "firmware: Do not use WARN_ON(!spin_is_locked())"
    - Revert "efi-pstore: Fix an overflow on 32-bit builds"
    - Revert "x86/efi: Fix 32-bit fallout"
    - Revert "x86/efi: Check krealloc return value"
    - Revert "x86/efi: Runtime services virtual mapping"
    - Revert "x86/efi: Fix off-by-one bug in EFI Boot Services reservation"
    - x86/efi: Simplify EFI_DEBUG
    - x86/efi: Runtime services virtual mapping
    - x86/efi: Check krealloc return value
    - SAUCE: Merge tag 'efi-next' of
      git://git.kernel.org/pub/scm/linux/kernel/git/mfleming/efi into x86/efi
    - doc: Fix trivial spelling mistake in efi-stub.txt
    - x86/efi: Remove unused variables in __map_region()
    - x86/efi: Add a wrapper function efi_map_region_fixed()
    - x86/efi: Fix off-by-one bug in EFI Boot Services reservation
    - x86/efi: Cleanup efi_enter_virtual_mode() function
    - efi: Export more EFI table variables to sysfs
    - [Config] CONFIG_EFI_RUNTIME_MAP=y
    - efi: Export EFI runtime memory mapping to sysfs
    - x86/efi: Pass necessary EFI data for kexec via setup_data
    - x86/efi: Delete superfluous global variables
    - x86/efi: parse_efi_setup() build fix
    - SAUCE: Merge tag 'v3.13-rc7' into x86/efi-kexec to resolve conflicts
    - x86/efi: Allow mapping BGRT on x86-32
    - x86/efi: Fix 32-bit fallout
    - x86/efi: Check status field to validate BGRT header
    - x86/efi: Quirk out SGI UV
    - v3.14 - Bacported EFI up to v3.14
    - efi: Move facility flags to struct efi
    - efi: Set feature flags inside feature init functions
    - efivarfs: 'efivarfs_file_write' function reorganization
    - x86/efi: Delete out-of-date comments of efi_query_variable_store
    - x86/efi: Style neatening
    - x8...