Xenial update to 4.4.136 stable release

[Juerg Haefliger]

SRU Justification

Impact:
   The upstream process for stable tree updates is quite similar
   in scope to the Ubuntu SRU process, e.g., each patch has to
   demonstrably fix a bug, and each patch is vetted by upstream
   by originating either directly from a mainline/stable Linux tree
   or a minimally backported form of that patch. The 4.4.136 upstream
   stable stable patch set is now available. It should be included
   in the Ubuntu kernel as well.

   git://git.kernel.org/

TEST CASE: TBD

   The following patches from the 4.4.136 stable release shall be
   applied:

  * Linux 4.4.136
  * sparc64: Fix build warnings with gcc 7.
  * mm: fix the NULL mapping case in __isolate_lru_page()
  * fix io_destroy()/aio_complete() race
  * Kbuild: change CC_OPTIMIZE_FOR_SIZE definition
  * drm/i915: Disable LVDS on Radiant P845
  * hwtracing: stm: fix build error on some arches
  * stm class: Use vmalloc for the master map
  * scsi: scsi_transport_srp: Fix shost to rport translation
  * MIPS: prctl: Disallow FRE without FR with PR_SET_FP_MODE requests
  * MIPS: ptrace: Fix PTRACE_PEEKUSR requests for 64-bit FGRs
  * iio:kfifo_buf: check for uint overflow
  * dmaengine: usb-dmac: fix endless loop in usb_dmac_chan_terminate_all()
  * i2c: rcar: revoke START request early
  * i2c: rcar: check master irqs before slave irqs
  * i2c: rcar: don't issue stop when HW does it automatically
  * i2c: rcar: init new messages in irq
  * i2c: rcar: refactor setup of a msg
  * i2c: rcar: remove spinlock
  * i2c: rcar: remove unused IOERROR state
  * i2c: rcar: rework hw init
  * i2c: rcar: make sure clocks are on when doing clock calculation
  * tcp: avoid integer overflows in tcp_rcv_space_adjust()
  * irda: fix overly long udelay()
  * ASoC: Intel: sst: remove redundant variable dma_dev_name
  * rtlwifi: rtl8192cu: Remove variable self-assignment in rf.c
  * cfg80211: further limit wiphy names to 64 bytes
  * selinux: KASAN: slab-out-of-bounds in xattr_getsecurity
  * tracing: Fix crash when freeing instances with event triggers
  * Input: elan_i2c_smbus - fix corrupted stack
  * Revert "ima: limit file hash setting by user to fix and log modes"
  * xfs: detect agfl count corruption and reset agfl
  * sh: New gcc support
  * USB: serial: cp210x: use tcflag_t to fix incompatible pointer type
  * powerpc/64s: Clear PCR on boot
  * arm64: lse: Add early clobbers to some input/output asm operands

[Juerg Haefliger (juergh)]

List of previously applied patches:
  * Revert "ima: limit file hash setting by user to fix and log modes"

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-134.160

---------------
linux (4.4.0-134.160) xenial; urgency=medium

  * linux: 4.4.0-134.160 -proposed tracker (LP: #1787177)

  * locking sockets broken due to missing AppArmor socket mediation patches
    (LP: #1780227)
    - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets

  * Backport namespaced fscaps to xenial 4.4 (LP: #1778286)
    - Introduce v3 namespaced file capabilities
    - commoncap: move assignment of fs_ns to avoid null pointer dereference
    - capabilities: fix buffer overread on very short xattr
    - commoncap: Handle memory allocation failure.

  * Xenial update to 4.4.140 stable release (LP: #1784409)
    - usb: cdc_acm: Add quirk for Uniden UBC125 scanner
    - USB: serial: cp210x: add CESINEL device ids
    - USB: serial: cp210x: add Silicon Labs IDs for Windows Update
    - n_tty: Fix stall at n_tty_receive_char_special().
    - staging: android: ion: Return an ERR_PTR in ion_map_kernel
    - n_tty: Access echo_* variables carefully.
    - x86/boot: Fix early command-line parsing when matching at end
    - ath10k: fix rfc1042 header retrieval in QCA4019 with eth decap mode
    - i2c: rcar: fix resume by always initializing registers before transfer
    - ipv4: Fix error return value in fib_convert_metrics()
    - kprobes/x86: Do not modify singlestep buffer while resuming
    - nvme-pci: initialize queue memory before interrupts
    - netfilter: nf_tables: use WARN_ON_ONCE instead of BUG_ON in nft_do_chain()
    - ARM: dts: imx6q: Use correct SDMA script for SPI5 core
    - ubi: fastmap: Correctly handle interrupted erasures in EBA
    - mm: hugetlb: yield when prepping struct pages
    - tracing: Fix missing return symbol in function_graph output
    - scsi: sg: mitigate read/write abuse
    - s390: Correct register corruption in critical section cleanup
    - drbd: fix access after free
    - cifs: Fix infinite loop when using hard mount option
    - jbd2: don't mark block as modified if the handle is out of credits
    - ext4: make sure bitmaps and the inode table don't overlap with bg
      descriptors
    - ext4: always check block group bounds in ext4_init_block_bitmap()
    - ext4: only look at the bg_flags field if it is valid
    - ext4: verify the depth of extent tree in ext4_find_extent()
    - ext4: include the illegal physical block in the bad map ext4_error msg
    - ext4: clear i_data in ext4_inode_info when removing inline data
    - ext4: add more inode number paranoia checks
    - ext4: add more mount time checks of the superblock
    - ext4: check superblock mapped prior to committing
    - HID: i2c-hid: Fix "incomplete report" noise
    - HID: hiddev: fix potential Spectre v1
    - HID: debug: check length before copy_to_user()
    - x86/mce: Detect local MCEs properly
    - x86/mce: Fix incorrect "Machine check from unknown source" message
    - media: cx25840: Use subdev host data for PLL override
    - mm, page_alloc: do not break __GFP_THISNODE by zonelist reset
    - dm bufio: avoid sleeping while holding the dm_bufio lock
    - dm bufio: drop the lock when doing GFP_NOIO allocation
    - mtd: rawnand: mxc: set spa...