Xenial update to 4.4.145 stable release

[Stefan Bader]

SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The 4.4.145 upstream stable
       patch set is now available. It should be included in the Ubuntu
       kernel as well.

       git://git.kernel.org/

    TEST CASE: TBD

The following patches from the 4.4.145 stable release shall be applied:
* MIPS: ath79: fix register address in ath79_ddr_wb_flush()
* ip: hash fragments consistently
* net/mlx4_core: Save the qpn from the input modifier in RST2INIT wrapper
* rtnetlink: add rtnl_link_state check in rtnl_configure_link
* tcp: fix dctcp delayed ACK schedule
* tcp: helpers to send special DCTCP ack
* tcp: do not cancel delay-AcK on DCTCP special ACK
* tcp: do not delay ACK in DCTCP upon CE status change
* ip: in cmsg IP(V6)_ORIGDSTADDR call pskb_may_pull
* usb: cdc_acm: Add quirk for Castles VEGA3000
* usb: core: handle hub C_PORT_OVER_CURRENT condition
* usb: gadget: f_fs: Only return delayed status when len is 0
* driver core: Partially revert "driver core: correct device's shutdown order"
* can: xilinx_can: fix RX loop if RXNEMP is asserted without RXOK
* can: xilinx_can: fix recovery from error states not being propagated
* can: xilinx_can: fix device dropping off bus on RX overrun
* can: xilinx_can: keep only 1-2 frames in TX FIFO to fix TX accounting
* can: xilinx_can: fix incorrect clear of non-processed interrupts
* can: xilinx_can: fix RX overflow interrupt not being enabled
* turn off -Wattribute-alias
* ARM: fix put_user() for gcc-8
* Linux 4.4.145

[Stefan Bader (smb)]

Skipped:
* "tcp: avoid collapses in tcp_prune_queue() if possible"
* "tcp: detect malicious patterns in tcp_collapse_ofo_queue()"
  -> Already applied as CVE-2018-5390.

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 4.4.0-138.164

---------------
linux (4.4.0-138.164) xenial; urgency=medium

  * linux: 4.4.0-138.164 -proposed tracker (LP: #1795582)

  * Linux 4.4.155 stable release build is broken on ppc64 (LP: #1795662)
    - powerpc/fadump: Return error when fadump registration fails

  * Kernel hang on drive pull caused by regression introduced by commit
    287922eb0b18 (LP: #1791790)
    - block: Fix a race between blk_cleanup_queue() and timeout handling

  * qeth: use vzalloc for QUERY OAT buffer (LP: #1793086)
    - s390/qeth: use vzalloc for QUERY OAT buffer

  * Page leaking in cachefiles_read_backing_file while vmscan is active
    (LP: #1793430)
    - SAUCE: cachefiles: Page leaking in cachefiles_read_backing_file while vmscan
      is active

  * Bugfix for handling of shadow doorbell buffer (LP: #1788222)
    - nvme-pci: add a memory barrier to nvme_dbbuf_update_and_check_event

  * Xenial update to 4.4.155 stable release (LP: #1792419)
    - net: 6lowpan: fix reserved space for single frames
    - net: mac802154: tx: expand tailroom if necessary
    - 9p/net: Fix zero-copy path in the 9p virtio transport
    - net: lan78xx: Fix misplaced tasklet_schedule() call
    - spi: davinci: fix a NULL pointer dereference
    - drm/i915/userptr: reject zero user_size
    - powerpc/fadump: handle crash memory ranges array index overflow
    - powerpc/pseries: Fix endianness while restoring of r3 in MCE handler.
    - fs/9p/xattr.c: catch the error of p9_client_clunk when setting xattr failed
    - 9p/virtio: fix off-by-one error in sg list bounds check
    - net/9p/client.c: version pointer uninitialized
    - net/9p/trans_fd.c: fix race-condition by flushing workqueue before the
      kfree()
    - dm cache metadata: save in-core policy_hint_size to on-disk superblock
    - iio: ad9523: Fix displayed phase
    - iio: ad9523: Fix return value for ad952x_store()
    - vmw_balloon: fix inflation of 64-bit GFNs
    - vmw_balloon: do not use 2MB without batching
    - vmw_balloon: VMCI_DOORBELL_SET does not check status
    - vmw_balloon: fix VMCI use when balloon built into kernel
    - tracing: Do not call start/stop() functions when tracing_on does not change
    - tracing/blktrace: Fix to allow setting same value
    - kthread, tracing: Don't expose half-written comm when creating kthreads
    - uprobes: Use synchronize_rcu() not synchronize_sched()
    - 9p: fix multiple NULL-pointer-dereferences
    - PM / sleep: wakeup: Fix build error caused by missing SRCU support
    - pnfs/blocklayout: off by one in bl_map_stripe()
    - ARM: tegra: Fix Tegra30 Cardhu PCA954x reset
    - mm/tlb: Remove tlb_remove_table() non-concurrent condition
    - iommu/vt-d: Add definitions for PFSID
    - iommu/vt-d: Fix dev iotlb pfsid use
    - osf_getdomainname(): use copy_to_user()
    - sys: don't hold uts_sem while accessing userspace memory
    - userns: move user access out of the mutex
    - ubifs: Fix memory leak in lprobs self-check
    - Revert "UBIFS: Fix potential integer overflow in allocation"
    - ubifs: Check data node size before truncate
    - ubifs: Fix synced_i_size calculation for xattr inodes
    - pwm: ti...