Xenial update: 4.4.204 upstream stable release

[Connor Kuehl]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

* net/mlx4_en: fix mlx4 ethtool -N insertion
* sfc: Only cancel the PPS workqueue if it exists
* net/sched: act_pedit: fix WARN() in the traffic path
* net: rtnetlink: prevent underflows in do_setvfinfo()
* Revert "fs: ocfs2: fix possible null-pointer dereferences in ocfs2_xa_prepare_entry()"
* mm/ksm.c: don't WARN if page is still mapped in remove_stable_node()
* asus-wmi: Create quirk for airplane_mode LED
* asus-wmi: Add quirk_no_rfkill_wapf4 for the Asus X456UF
* asus-wmi: Add quirk_no_rfkill for the Asus N552VW
* asus-wmi: Add quirk_no_rfkill for the Asus U303LB
* asus-wmi: Add quirk_no_rfkill for the Asus Z550MA
* platform/x86: asus-wmi: Filter buggy scan codes on ASUS Q500A
* platform/x86: asus-wmi: fix asus ux303ub brightness issue
* platform/x86: asus-wmi: Set specified XUSB2PR value for X550LB
* asus-wmi: provide access to ALS control
* platform/x86: asus-wmi: try to set als by default
* platform/x86: asus-nb-wmi: Support ALS on the Zenbook UX430UQ
* platform/x86: asus-wmi: add SERIO_I8042 dependency
* mwifiex: Fix NL80211_TX_POWER_LIMITED
* ALSA: isight: fix leak of reference to firewire unit in error path of .probe callback
* printk: fix integer overflow in setup_log_buf()
* gfs2: Fix marking bitmaps non-full
* synclink_gt(): fix compat_ioctl()
* powerpc: Fix signedness bug in update_flash_db()
* powerpc/eeh: Fix use of EEH_PE_KEEP on wrong field
* brcmsmac: AP mode: update beacon when TIM changes
* spi: sh-msiof: fix deferred probing
* mmc: mediatek: fix cannot receive new request when msdc_cmd_is_ready fail
* btrfs: handle error of get_old_root
* gsmi: Fix bug in append_to_eventlog sysfs handler
* misc: mic: fix a DMA pool free failure
* amiflop: clean up on errors during setup
* scsi: ips: fix missing break in switch
* KVM/x86: Fix invvpid and invept register operand size in 64-bit mode
* scsi: isci: Use proper enumerated type in atapi_d2h_reg_frame_handler
* scsi: isci: Change sci_controller_start_task's return type to sci_status
* scsi: iscsi_tcp: Explicitly cast param in iscsi_sw_tcp_host_get_param
* clk: mmp2: fix the clock id for sdh2_clk and sdh3_clk
* scsi: dc395x: fix dma API usage in srb_done
* scsi: dc395x: fix DMA API usage in sg_update_list
* net: fix warning in af_unix
* kprobes, x86/ptrace.h: Make regs_get_kernel_stack_nth() not fault on bad stack
* ALSA: i2c/cs8427: Fix int to char conversion
* macintosh/windfarm_smu_sat: Fix debug output
* USB: misc: appledisplay: fix backlight update_status return code
* SUNRPC: Fix a compile warning for cmpxchg64()
* atm: zatm: Fix empty body Clang warnings
* s390/perf: Return error when debug_register fails
* spi: omap2-mcspi: Set FIFO DMA trigger level to word length
* sparc: Fix parport build warnings.
* ceph: fix dentry leak in ceph_readdir_prepopulate
* rtc: s35390a: Change buf's type to u8 in s35390a_init
* mISDN: Fix type of switch control variable in ctrl_teimanager
* qlcnic: fix a return in qlcnic_dcb_get_capability()
* mfd: mc13xxx-core: Fix PMIC shutdown when reading ADC values
* mfd: max8997: Enale irq-wakeup unconditionally
* selftests/ftrace: Fix to test kprobe $comm arg only if available
* thermal: rcar_thermal: Prevent hardware access during system suspend
* sparc64: Rework xchg() definition to avoid warnings.
* fs/ocfs2/dlm/dlmdebug.c: fix a sleep-in-atomic-context bug in dlm_print_one_mle()
* mm/page-writeback.c: fix range_cyclic writeback vs writepages deadlock
* um: Make line/tty semantics use true write IRQ
* linux/bitmap.h: handle constant zero-size bitmaps correctly
* linux/bitmap.h: fix type of nbits in bitmap_shift_right()
* hfsplus: fix BUG on bnode parent update
* hfs: fix BUG on bnode parent update
* hfsplus: prevent btree data loss on ENOSPC
* hfs: prevent btree data loss on ENOSPC
* hfsplus: fix return value of hfsplus_get_block()
* hfs: fix return value of hfs_get_block()
* fs/hfs/extent.c: fix array out of bounds read of array extent
* igb: shorten maximum PHC timecounter update interval
* ntb_netdev: fix sleep time mismatch
* ntb: intel: fix return value for ndev_vec_mask()
* ocfs2: don't put and assigning null to bh allocated outside
* ocfs2: fix clusters leak in ocfs2_defrag_extent()
* net: do not abort bulk send on BQL status
* sched/fair: Don't increase sd->balance_interval on newidle balance
* audit: print empty EXECVE args
* wlcore: Fix the return value in case of error in 'wlcore_vendor_cmd_smart_config_start()'
* rtl8xxxu: Fix missing break in switch
* brcmsmac: never log "tid x is not agg'able" by default
* wireless: airo: potential buffer overflow in sprintf()
* rtlwifi: rtl8192de: Fix misleading REG_MCUFWDL information
* scsi: mpt3sas: Fix Sync cache command failure during driver unload
* scsi: mpt3sas: Fix driver modifying persistent data in Manufacturing page11
* scsi: megaraid_sas: Fix msleep granularity
* scsi: lpfc: fcoe: Fix link down issue after 1000+ link bounces
* dlm: fix invalid free
* dlm: don't leak kernel pointer to userspace
* net: bcmgenet: return correct value 'ret' from bcmgenet_power_down
* sock: Reset dst when changing sk_mark via setsockopt
* pinctrl: qcom: spmi-gpio: fix gpio-hog related boot issues
* pinctrl: zynq: Use define directive for PIN_CONFIG_IO_STANDARD
* PCI: keystone: Use quirk to limit MRRS for K2G
* spi: omap2-mcspi: Fix DMA and FIFO event trigger size mismatch
* IB/hfi1: Ensure full Gen3 speed in a Gen4 system
* Bluetooth: Fix invalid-free in bcsp_close()
* ath9k_hw: fix uninitialized variable data
* dm: use blk_set_queue_dying() in __dm_destroy()
* arm64: fix for bad_mode() handler to always result in panic
* cpufreq: Skip cpufreq resume if it's not suspended
* ocfs2: remove ocfs2_is_o2cb_active()
* mmc: block: Fix tag condition with packed writes
* ARC: perf: Accommodate big-endian CPU
* x86/insn: Fix awk regexp warnings
* x86/speculation: Fix incorrect MDS/TAA mitigation status
* x86/speculation: Fix redundant MDS mitigation message
* media: vivid: Set vid_cap_streaming and vid_out_streaming to true
* media: vivid: Fix wrong locking that causes race conditions on streaming stop
* cpufreq: Add NULL checks to show() and store() methods of cpufreq
* media: b2c2-flexcop-usb: add sanity checking
* media: cxusb: detect cxusb_ctrl_msg error in query
* media: imon: invalid dereference in imon_touch_event
* virtio_console: reset on out of memory
* virtio_console: don't tie bufs to a vq
* virtio_console: allocate inbufs in add_port() only if it is needed
* virtio_console: fix uninitialized variable use
* virtio_console: drop custom control queue cleanup
* virtio_console: move removal code
* usb-serial: cp201x: support Mark-10 digital force gauge
* appledisplay: fix error handling in the scheduled work
* USB: serial: mos7840: add USB ID to support Moxa UPort 2210
* USB: serial: mos7720: fix remote wakeup
* USB: serial: mos7840: fix remote wakeup
* USB: serial: option: add support for DW5821e with eSIM support
* USB: serial: option: add support for Foxconn T77W968 LTE modules
* staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error
* Linux 4.4.204
* UBUNTU: upstream stable to v4.4.204

       4.4.204 upstream stable release
       from git://git.kernel.org/

[Connor Kuehl (connork)]

Please note the following commits were skipped since they are already applied:

* platform/x86: asus-wmi: Only Tell EC the OS will handle display hotkeys from asus_nb_wmi
130,132d128
* powerpc/64s: support nospectre_v2 cmdline option
* powerpc/book3s64: Fix link stack flush on context switch
* KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-173.203

---------------
linux (4.4.0-173.203) xenial; urgency=medium

  * xenial/linux: 4.4.0-173.203 -proposed tracker (LP: #1859718)

  * CVE-2019-14615
    - drm/i915/gen9: Clear residual context state on context switch

linux (4.4.0-172.202) xenial; urgency=medium

  * xenial/linux: 4.4.0-172.202 -proposed tracker (LP: #1858594)

  * tools/perf fails to build after Xenial update to 4.4.208 upstream stable
    release (LP: #1858798)
    - Revert "perf report: Add warning when libunwind not compiled in"

  * CVE-2019-18885
    - btrfs: refactor btrfs_find_device() take fs_devices as argument
    - btrfs: merge btrfs_find_device and find_device

  * Integrate Intel SGX driver into linux-azure (LP: #1844245)
    - [Packaging] Add systemd service to load intel_sgx

  * Xenial update: 4.4.208 upstream stable release (LP: #1858462)
    - btrfs: do not leak reloc root if we fail to read the fs root
    - btrfs: handle ENOENT in btrfs_uuid_tree_iterate
    - ALSA: hda/ca0132 - Keep power on during processing DSP response
    - ALSA: hda/ca0132 - Avoid endless loop
    - drm: mst: Fix query_payload ack reply struct
    - iio: light: bh1750: Resolve compiler warning and make code more readable
    - spi: Add call to spi_slave_abort() function when spidev driver is released
    - staging: rtl8188eu: fix possible null dereference
    - rtlwifi: prevent memory leak in rtl_usb_probe
    - IB/iser: bound protection_sg size by data_sg size
    - media: am437x-vpfe: Setting STD to current value is not an error
    - media: i2c: ov2659: fix s_stream return value
    - media: i2c: ov2659: Fix missing 720p register config
    - media: ov6650: Fix stored frame format not in sync with hardware
    - tools/power/cpupower: Fix initializer override in hsw_ext_cstates
    - usb: renesas_usbhs: add suspend event support in gadget mode
    - hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled
    - regulator: max8907: Fix the usage of uninitialized variable in
      max8907_regulator_probe()
    - media: flexcop-usb: fix NULL-ptr deref in flexcop_usb_transfer_init()
    - samples: pktgen: fix proc_cmd command result check logic
    - mwifiex: pcie: Fix memory leak in mwifiex_pcie_init_evt_ring
    - media: ti-vpe: vpe: fix a v4l2-compliance warning about invalid pixel format
    - media: ti-vpe: vpe: fix a v4l2-compliance failure about frame sequence
      number
    - media: ti-vpe: vpe: Make sure YUYV is set as default format
    - extcon: sm5502: Reset registers during initialization
    - x86/mm: Use the correct function type for native_set_fixmap()
    - perf report: Add warning when libunwind not compiled in
    - iio: adc: max1027: Reset the device at probe time
    - Bluetooth: hci_core: fix init for HCI_USER_CHANNEL
    - drm/gma500: fix memory disclosures due to uninitialized bytes
    - x86/ioapic: Prevent inconsistent state when moving an interrupt
    - arm64: psci: Reduce the waiting time for cpu_psci_cpu_kill()
    - libata: Ensure ata_port probe has completed before detach
    - pinctrl: sh-pfc: sh7734: Fix duplicate TCLK1_B
    - bnx2x: Fix PF-VF communication over multi-cos queu...