Xenial update to 4.4.75 stable release

[Stefan Bader]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.4.75 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

The following patches from the 4.4.75 stable release shall be applied:
* fs/exec.c: account for argv/envp pointers
* autofs: sanity check status reported with AUTOFS_DEV_IOCTL_FAIL
* lib/cmdline.c: fix get_options() overflow while parsing ranges
* KVM: PPC: Book3S HV: Preserve userspace HTM state properly
* CIFS: Improve readdir verbosity
* HID: Add quirk for Dell PIXART OEM mouse
* signal: Only reschedule timers on signals timers have sent
* powerpc/kprobes: Pause function_graph tracing during jprobes handling
* Input: i8042 - add Fujitsu Lifebook AH544 to notimeout list
* time: Fix clock->read(clock) race around clocksource changes
* target: Fix kref->refcount underflow in transport_cmd_finish_abort
* iscsi-target: Reject immediate data underflow larger than SCSI transfer
  length
* drm/radeon: add a PX quirk for another K53TK variant
* drm/radeon: add a quirk for Toshiba Satellite L20-183
* drm/amdgpu/atom: fix ps allocation size for EnableDispPowerGating
* drm/amdgpu: adjust default display clock
* USB: usbip: fix nonconforming hub descriptor
* rxrpc: Fix several cases where a padded len isn't checked in ticket decode
* of: Add check to of_scan_flat_dt() before accessing initial_boot_params
* mtd: spi-nor: fix spansion quad enable
* powerpc/slb: Force a full SLB flush when we insert for a bad EA
* usb: gadget: f_fs: avoid out of bounds access on comp_desc
* net: phy: Initialize mdio clock at probe function
* net: phy: fix marvell phy status reading
* Linux 4.4.75

[Stefan Bader (smb)]

Patch "time: Fix clock->read(clock) race around clocksource changes" applied but with fuzz 1.

The following patches were skipped because they were already applied:
* bug #1602726 nvme - reset_controller is not working after adapter's
  firmware upgrade (adapter quirk is needed)
  - nvme/quirk: Add a delay before checking for adapter readiness
* bug #1656913 NVMe: adapter is missing after abnormal shutdown
  followed by quick reboot, quirk needed
  - nvme: apply DELAY_BEFORE_CHK_RDY quirk at probe time too

[Stefan Bader (smb)]

Patch "time: Fix clock->read(clock) race around clocksource changes" had to be fixed up because we backported the following patches for bug #1519625 "Always Running Timer (ART) to System Time translation":
* time: Add timekeeping snapshot code capturing system time and counter
* time: Add history to cross timestamp interface supporting slower devices

The original upstream patch did have those fixes, so the fixup has been melded into the patch.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-89.112

---------------
linux (4.4.0-89.112) xenial; urgency=low

  * CVE-2017-7533
    - dentry name snapshots

linux (4.4.0-88.111) xenial; urgency=low

  * linux: 4.4.0-88.111 -proposed tracker (LP: #1705270)

  * [Xenial] nvme: Quirks for PM1725 controllers (LP: #1704435)
    - nvme: Quirks for PM1725 controllers

  * Upgrade Redpine WLAN/BT driver to ver. 1.2 (production release)
    (LP: #1697829)
    - SAUCE: Redpine: Upgrade to ver. 1.2 production release

  * ubuntu/rsi driver has several issues as picked up by static analysis
    (LP: #1694733)
    - SAUCE: Redpine: Upgrade to ver. 1.2 production release

  * Redpine vendor driver - Switching to AP mode causes kernel panic
    (LP: #1700941)
    - SAUCE: Redpine: Upgrade to ver. 1.2 production release

  * CVE-2017-10810
    - drm/virtio: don't leak bo on drm_gem_object_init failure

  * Ath10k to read different board data file if specify in SMBIOS (LP: #1666742)
    - ath10k: search SMBIOS for OEM board file extension

  * make snap-pkg support (LP: #1700747)
    - SAUCE: make snap-pkg support

  * ISST-LTE: Briggs:Stratton:UbuntuKVM: ics_opal_set_affinity on host kernel
    log using Intel X710 (i40e driver) (LP: #1703663)
    - i40e: use valid online CPU on q_vector initialization

  * Update snapcraft.yaml (LP: #1700480)
    - snapcraft.yaml: various improvements

  * Xenial update to 4.4.76 stable release (LP: #1702863)
    - ipv6: release dst on error in ip6_dst_lookup_tail
    - net: don't call strlen on non-terminated string in dev_set_alias()
    - decnet: dn_rtmsg: Improve input length sanitization in
      dnrmg_receive_user_skb
    - net: Zero ifla_vf_info in rtnl_fill_vfinfo()
    - af_unix: Add sockaddr length checks before accessing sa_family in bind and
      connect handlers
    - Fix an intermittent pr_emerg warning about lo becoming free.
    - net: caif: Fix a sleep-in-atomic bug in cfpkt_create_pfx
    - igmp: acquire pmc lock for ip_mc_clear_src()
    - igmp: add a missing spin_lock_init()
    - ipv6: fix calling in6_ifa_hold incorrectly for dad work
    - net/mlx5: Wait for FW readiness before initializing command interface
    - decnet: always not take dst->__refcnt when inserting dst into hash table
    - net: 8021q: Fix one possible panic caused by BUG_ON in free_netdev
    - sfc: provide dummy definitions of vswitch functions
    - ipv6: Do not leak throw route references
    - rtnetlink: add IFLA_GROUP to ifla_policy
    - netfilter: xt_TCPMSS: add more sanity tests on tcph->doff
    - netfilter: synproxy: fix conntrackd interaction
    - NFSv4: fix a reference leak caused WARNING messages
    - drm/ast: Handle configuration without P2A bridge
    - mm, swap_cgroup: reschedule when neeed in swap_cgroup_swapoff()
    - MIPS: Avoid accidental raw backtrace
    - MIPS: pm-cps: Drop manual cache-line alignment of ready_count
    - MIPS: Fix IRQ tracing & lockdep when rescheduling
    - ALSA: hda - Fix endless loop of codec configure
    - ALSA: hda - set input_path bitmap to zero after moving it to new place
    - drm/vmwgfx: Free hash table allocated by cmdbuf managed res mgr
    - usb: gadget: f_fs: Fix possi...