A lot of Thanksgiving turkey leftovers accumulated, here goes: 1) Fix bluetooth l2cap_chan object leak, from Johan Hedberg.
2) IDs for some new iwlwifi chips, from Oren Givon. 3) Fix rtlwifi lockups on boot, from Larry Finger. 4) Fix memory leak in fm10k, from Stephen Hemminger. 5) We have a route leak in the ipv6 tunnel infrastructure, fix from Paolo Abeni. 6) Fix buffer pointer handling in arm64 bpf JIT,f rom Zi Shen Lim. 7) Wrong lockdep annotations in tcp md5 support, fix from Eric Dumazet. 8) Work around some middle boxes which prevent proper handling of TCP Fast Open, from Yuchung Cheng. 9) TCP repair can do huge kmalloc() requests, build paged SKBs instead. From Eric Dumazet. 10) Fix msg_controllen overflow in scm_detach_fds, from Daniel Borkmann. 11) Fix device leaks on ipmr table destruction in ipv4 and ipv6, from Nikolay Aleksandrov. 12) Fix use after free in epoll with AF_UNIX sockets, from Rainer Weikusat. 13) Fix double free in VRF code, from Nikolay Aleksandrov. 14) Fix skb leaks on socket receive queue in tipc, from Ying Xue. 15) Fix ifup/ifdown crach in xgene driver, from Iyappan Subramanian. 16) Fix clearing of persistent array maps in bpf, from Daniel Borkmann. 17) In TCP, for the cross-SYN case, we don't initialize tp->copied_seq early enough. From Eric Dumazet. 18) Fix out of bounds accesses in bpf array implementation when updating elements, from Daniel Borkmann. 19) Fill gaps in RCU protection of np->opt in ipv6 stack, from Eric Dumazet. 20) When dumping proxy neigh entries, we have to accomodate NULL device pointers properly, from Konstantin Khlebnikov. 21) SCTP doesn't release all ipv6 socket resources properly, fix from Eric Dumazet. 22) Prevent underflows of sch->q.qlen for multiqueue packet schedulers, also from Eric Dumazet. 23) Fix MAC and unicast list handling in bnxt_en driver, from Jeffrey Huang and Michael Chan. 24) Don't actively scan radar channels, from Antonio Quartulli. Please pull, thanks a lot! The following changes since commit 34258a32d9a9fc9e38fb549efe1692301cc31f85: Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/s390/linux (2015-11-18 08:59:29 -0800) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/davem/net.git for you to fetch changes up to e3c9b1ef78eb111f925dd04992a3de1f383e8f49: Merge tag 'mac80211-for-davem-2015-12-02' of git://git.kernel.org/pub/scm/linux/kernel/git/jberg/mac80211 (2015-12-03 15:56:22 -0500) ---------------------------------------------------------------- Aaro Koskinen (1): broadcom: fix PHY_ID_BCM5481 entry in the id table Aaron Conole (1): net: openvswitch: Remove invalid comment Alexei Starovoitov (1): bpf: fix allocation warnings in bpf maps and integer overflow Alexey Khoroshilov (1): vmxnet3: fix checks for dma mapping errors Andrew Lunn (1): ipv4: igmp: Allow removing groups from a removed interface Antonio Quartulli (1): mac80211: do not actively scan DFS channels Arnd Bergmann (1): net: tulip: turn compile-time warning into dev_warn() Avri Altman (1): iwlwifi: mvm: Avoid dereferencing sta if it was already flushed Aya Mahfouz (1): net: dns_resolver: convert time_t to time64_t Bartosz Markowski (4): ath10k: fix the currently supported QCA9377 target version name ath10k: update missing hw_params of QCA9377 hw1.1 ath10k: introduce dev_id to hw_params ath10k: add QCA9377 hw1.0 support Ben Pope (1): ethernet/atheros/alx: add Killer E2400 device ID Bjørn Mork (2): net: qmi_wwan: add XS Stick W100-2 from 4G Systems net: cdc_ncm: fix NULL pointer deref in cdc_ncm_bind_common Christoph Biedl (1): isdn: Partially revert debug format string usage clean up Dan Carpenter (1): net/hsr: fix a warning message Daniel Borkmann (3): net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds bpf: fix clearing on persistent program array maps bpf, array: fix heap out-of-bounds access when updating elements David Howells (1): rxrpc: Correctly handle ack at end of client call transmit phase David S. Miller (8): Merge tag 'wireless-drivers-for-davem-2015-11-20' of git://git.kernel.org/.../kvalo/wireless-drivers Merge tag 'linux-can-fixes-for-4.4-20151123' of git://git.kernel.org/.../mkl/linux-can Merge branch 'stmmac-fixes' Merge branch 'thunderx-fixes' Merge branch 'mvneta-fixes' Merge branch 'for-upstream' of git://git.kernel.org/.../bluetooth/bluetooth Merge branch 'bnxt_en-fixes' Merge tag 'mac80211-for-davem-2015-12-02' of git://git.kernel.org/.../jberg/mac80211 Eliad Peller (1): mac80211: don't teardown sdata on sdata stop Emmanuel Grumbach (2): iwlwifi: bump firmware API to 19 mac80211: ensure we don't update tx power on a non-running sdata Eric Dumazet (11): tcp: md5: fix lockdep annotation tcp: fix potential huge kmalloc() calls in TCP_REPAIR drivers: net: xgene: fix possible use after free tcp: initialize tp->copied_seq in case of cross SYN connection net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA net: fix sock_wake_async() rcu protection ipv6: add complete rcu protection around np->opt ipv6: sctp: add rcu protection around np->opt ipv6: kill sk_dst_lock ipv6: sctp: implement sctp_v6_destroy_sock() net_sched: fix qdisc_tree_decrease_qlen() races Giuseppe CAVALLARO (5): stmmac: fix a filter problem after resuming. stmmac: fix csr clock divisor for 300MHz stmmac: dwmac-sti: fix st,tx-retime-src check stmmac: fix PHY reset during resume stmmac: fix oversized frame reception Grant Grundler (1): net: tulip: update MAINTAINER status to Orphan Gregory Greenman (1): mac80211: always set the buf_size in AddBA req to 64 Hannes Frederic Sowa (1): af-unix: passcred support for sendpage Iyappan Subramanian (1): drivers: net: xgene: fix: ifconfig up/down crash Jeffrey Huang (2): bnxt_en: Fixed incorrect implementation of ndo_set_mac_address bnxt_en: enforce proper storing of MAC address Johan Hedberg (1): Bluetooth: Fix l2cap_chan leak in SMP Johannes Berg (3): mac80211: don't advertise NL80211_FEATURE_FULL_AP_CLIENT_STATE mac80211: mesh: fix call_rcu() usage mac80211: fix off-channel mgmt-tx uninitialized variable usage Jon Paul Maloy (1): tipc: correct settings of broadcast link state Jérôme Pouiller (1): net: phy: reset only targeted phy Kalle Valo (2): Merge tag 'iwlwifi-for-kalle-2015-11-15' of https://git.kernel.org/.../iwlwifi/iwlwifi-fixes Merge ath-current from ath.git Konstantin Khlebnikov (1): net/neighbour: fix crash at dumping device-agnostic proxy entries Larry Finger (1): rtlwifi: rtl8821ae: Fix lockups on boot Luca Coelho (1): iwlwifi: mvm: don't overwrite the key indices in D3 entry Marcelo Ricardo Leitner (2): sctp: convert sack_needed and sack_generation to bits sctp: use GFP_USER for user-controlled kmalloc Marcin Wojtas (6): net: mvneta: add configuration for MBUS windows access protection net: mvneta: fix bit assignment in MVNETA_RXQ_CONFIG_REG net: mvneta: fix bit assignment for RX packet irq enable net: mvneta: fix error path for building skb net: mvneta: enable setting custom TX IP checksum limit mvebu: dts: enable IP checksum with jumbo frames for Armada 38x on Port0 Mark Brown (2): net: fsl: Don't use NO_IRQ to check return value of irq_of_parse_and_map() net: fsl: Fix error checking for platform_get_irq() Martin Blumenstingl (1): packet: Allow packets with only a header (but no payload) Michael Chan (1): bnxt_en: Setup uc_list mac filters after resetting the chip. Michal Kubeček (1): ipv6: distinguish frag queues by device for multicast and link-local packets Mirza Krak (1): can: sja1000: clear interrupts on start Måns Rullgård (1): net: ethernet: add driver for Aurora VLSI NB8800 Ethernet controller Nicolas Dichtel (1): Revert "ipv6: ndisc: inherit metadata dst when creating ndisc requests" Nikolay Aleksandrov (4): net: ipmr: fix static mfc/dev leaks on table destruction net: ip6mr: fix static mfc/dev leaks on table destruction vrf: fix double free and memory corruption on register_netdevice failure net: ipmr, ip6mr: fix vif/tunnel failure race condition Nina Schiff (1): cgroups: Allow dynamically changing net_classid Oliver Hartkopp (2): can: fix assignment of error location in CAN error messages can: remove obsolete assignment for CAN protocol error type Oren Givon (1): iwlwifi: Add new PCI IDs for the 8260 series Paolo Abeni (3): net/ip6_tunnel: fix dst leak openvswitch: properly refcount vport-vxlan module openvswitch: fix hangup on vxlan/gre/geneve device deletion Peter Hurley (1): wan/x25: Fix use-after-free in x25_asy_open_tty() Punnaiah Choudary Kalluri (1): net: macb: Add support for sgmii phy interface Quentin Casasnovas (1): RDS: fix race condition when sending a message on unbound socket Rainer Weikusat (1): unix: avoid use-after-free in ep_remove_wait_queue Rajkumar Manoharan (2): ath10k: fix invalid NSS for 4x4 devices ath10k: poll HTT send completion when CE 5 is unused Ryan Hsu (1): ath10k: override CE5 configuration for QCA6147 device Sergei Shtylyov (1): ravb: fix WARNING in __free_irq() Shaohui Xie (1): net: fsl: expands dependencies of NET_VENDOR_FREESCALE Sunil Goutham (3): net: thunderx: Set CQ timer threshold properly net: thunderx: Switchon carrier only upon interface link up net: thunderx: Enable BGX LMAC's RX/TX only after VF is up Thanneeru Srinivasulu (2): net: thunderx: Force to load octeon-mdio before bgx driver. net: thunderx: Wait for delayed work to finish before destroying it Tony Lindgren (1): net: cpsw: Fix ethernet regression for dm814x Vladimir Kondratiev (1): MAINTAINERS: wil6210: new maintainer - Maya Erez Vladimir Zapolskiy (1): net: lpc_eth: remove irq > NR_IRQS check from probe() Yang Shi (1): arm64: bpf: add 'store immediate' instruction Ying Xue (2): tipc: avoid packets leaking on socket receive queue tipc: fix error handling of expanding buffer headroom Yuchung Cheng (2): tcp: disable Fast Open on timeouts after handshake tcp: fix Fast Open snmp over-counting bug Yuval Mintz (1): bnx2x: Fix vxlan removal Zi Shen Lim (1): arm64: bpf: fix buffer pointer stephen hemminger (3): udp: remove duplicate include fm10k: fix memory leak hdlc: fix null-deref on allocation failure Documentation/devicetree/bindings/net/marvell-armada-370-neta.txt | 6 + MAINTAINERS | 6 +- arch/arm/boot/dts/armada-38x.dtsi | 1 + arch/arm64/net/bpf_jit_comp.c | 47 ++- crypto/algif_aead.c | 4 +- crypto/algif_skcipher.c | 6 +- drivers/isdn/hisax/config.c | 2 +- drivers/isdn/hisax/hfc_pci.c | 2 +- drivers/isdn/hisax/hfc_sx.c | 2 +- drivers/isdn/hisax/q931.c | 6 +- drivers/net/can/bfin_can.c | 2 - drivers/net/can/c_can/c_can.c | 7 +- drivers/net/can/cc770/cc770.c | 2 +- drivers/net/can/flexcan.c | 4 +- drivers/net/can/janz-ican3.c | 1 - drivers/net/can/m_can/m_can.c | 7 +- drivers/net/can/pch_can.c | 3 +- drivers/net/can/rcar_can.c | 11 +- drivers/net/can/sja1000/sja1000.c | 4 +- drivers/net/can/sun4i_can.c | 1 - drivers/net/can/ti_hecc.c | 7 +- drivers/net/can/usb/ems_usb.c | 1 - drivers/net/can/usb/esd_usb2.c | 1 - drivers/net/can/usb/kvaser_usb.c | 5 +- drivers/net/can/usb/usb_8dev.c | 4 +- drivers/net/can/xilinx_can.c | 9 +- drivers/net/ethernet/Kconfig | 1 + drivers/net/ethernet/Makefile | 1 + drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 31 +- drivers/net/ethernet/atheros/alx/main.c | 2 + drivers/net/ethernet/atheros/alx/reg.h | 1 + drivers/net/ethernet/aurora/Kconfig | 20 + drivers/net/ethernet/aurora/Makefile | 1 + drivers/net/ethernet/aurora/nb8800.c | 1552 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ drivers/net/ethernet/aurora/nb8800.h | 316 +++++++++++++++ drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 44 ++- drivers/net/ethernet/broadcom/bnxt/bnxt_sriov.c | 7 +- drivers/net/ethernet/cadence/macb.c | 4 + drivers/net/ethernet/cadence/macb.h | 5 + drivers/net/ethernet/cavium/thunder/nic.h | 5 +- drivers/net/ethernet/cavium/thunder/nic_main.c | 23 +- drivers/net/ethernet/cavium/thunder/nicvf_ethtool.c | 16 +- drivers/net/ethernet/cavium/thunder/nicvf_main.c | 4 +- drivers/net/ethernet/cavium/thunder/nicvf_queues.c | 2 +- drivers/net/ethernet/cavium/thunder/nicvf_queues.h | 2 +- drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 28 +- drivers/net/ethernet/cavium/thunder/thunder_bgx.h | 2 + drivers/net/ethernet/dec/tulip/tulip_core.c | 9 +- drivers/net/ethernet/dec/tulip/winbond-840.c | 2 +- drivers/net/ethernet/freescale/Kconfig | 3 +- drivers/net/ethernet/freescale/gianfar.c | 6 +- drivers/net/ethernet/freescale/gianfar_ptp.c | 2 +- drivers/net/ethernet/intel/fm10k/fm10k_netdev.c | 4 +- drivers/net/ethernet/marvell/mvneta.c | 33 +- drivers/net/ethernet/nxp/lpc_eth.c | 2 +- drivers/net/ethernet/renesas/ravb_main.c | 6 +- drivers/net/ethernet/stmicro/stmmac/dwmac-sti.c | 13 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 +- drivers/net/ethernet/stmicro/stmmac/stmmac_mdio.c | 28 +- drivers/net/ethernet/ti/cpsw-common.c | 3 + drivers/net/macvtap.c | 4 +- drivers/net/phy/broadcom.c | 2 +- drivers/net/phy/phy.c | 3 +- drivers/net/tun.c | 4 +- drivers/net/usb/cdc_ncm.c | 8 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/vmxnet3/vmxnet3_drv.c | 71 +++- drivers/net/vrf.c | 11 +- drivers/net/wan/hdlc_fr.c | 10 +- drivers/net/wan/x25_asy.c | 6 +- drivers/net/wireless/ath/ath10k/core.c | 49 ++- drivers/net/wireless/ath/ath10k/core.h | 1 + drivers/net/wireless/ath/ath10k/hw.h | 17 +- drivers/net/wireless/ath/ath10k/mac.c | 2 +- drivers/net/wireless/ath/ath10k/pci.c | 53 ++- drivers/net/wireless/iwlwifi/iwl-7000.c | 2 +- drivers/net/wireless/iwlwifi/iwl-8000.c | 2 +- drivers/net/wireless/iwlwifi/mvm/d3.c | 8 +- drivers/net/wireless/iwlwifi/mvm/mac80211.c | 11 +- drivers/net/wireless/iwlwifi/mvm/sta.c | 88 +++-- drivers/net/wireless/iwlwifi/mvm/sta.h | 4 +- drivers/net/wireless/iwlwifi/pcie/drv.c | 19 +- drivers/net/wireless/realtek/rtlwifi/rtl8821ae/hw.c | 2 +- drivers/net/wireless/realtek/rtlwifi/rtl8821ae/sw.c | 2 +- fs/dlm/lowcomms.c | 4 +- include/linux/bpf.h | 5 +- include/linux/dns_resolver.h | 2 +- include/linux/ipv6.h | 2 +- include/linux/net.h | 13 +- include/linux/netdevice.h | 3 +- include/net/af_unix.h | 1 + include/net/ip6_route.h | 17 +- include/net/ipv6.h | 22 +- include/net/mac80211.h | 6 +- include/net/ndisc.h | 3 +- include/net/sch_generic.h | 3 + include/net/sctp/structs.h | 16 +- include/net/sock.h | 32 +- kernel/bpf/arraymap.c | 10 +- kernel/bpf/hashtab.c | 34 +- kernel/bpf/inode.c | 6 +- kernel/bpf/syscall.c | 40 +- kernel/bpf/verifier.c | 3 +- net/bluetooth/af_bluetooth.c | 6 +- net/bluetooth/smp.c | 7 +- net/caif/caif_socket.c | 4 +- net/core/datagram.c | 2 +- net/core/neighbour.c | 4 +- net/core/netclassid_cgroup.c | 26 +- net/core/scm.c | 2 + net/core/sock.c | 12 +- net/core/stream.c | 6 +- net/dccp/ipv6.c | 37 +- net/dccp/proto.c | 3 +- net/decnet/af_decnet.c | 8 +- net/dns_resolver/dns_query.c | 2 +- net/hsr/hsr_device.c | 2 +- net/ipv4/igmp.c | 5 +- net/ipv4/ipmr.c | 23 +- net/ipv4/tcp.c | 7 +- net/ipv4/tcp_input.c | 23 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_timer.c | 14 +- net/ipv4/udp.c | 1 - net/ipv6/addrconf.c | 2 +- net/ipv6/af_inet6.c | 15 +- net/ipv6/datagram.c | 4 +- net/ipv6/exthdrs.c | 3 +- net/ipv6/icmp.c | 14 - net/ipv6/inet6_connection_sock.c | 21 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ip6mr.c | 19 +- net/ipv6/ipv6_sockglue.c | 33 +- net/ipv6/ndisc.c | 10 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 5 +- net/ipv6/raw.c | 8 +- net/ipv6/reassembly.c | 10 +- net/ipv6/route.c | 2 +- net/ipv6/syncookies.c | 2 +- net/ipv6/tcp_ipv6.c | 32 +- net/ipv6/udp.c | 8 +- net/iucv/af_iucv.c | 2 +- net/l2tp/l2tp_ip6.c | 8 +- net/mac80211/agg-tx.c | 3 +- net/mac80211/cfg.c | 8 +- net/mac80211/iface.c | 5 +- net/mac80211/main.c | 3 +- net/mac80211/mesh_pathtbl.c | 8 +- net/mac80211/scan.c | 9 +- net/nfc/llcp_sock.c | 2 +- net/openvswitch/dp_notify.c | 2 +- net/openvswitch/vport-geneve.c | 1 - net/openvswitch/vport-gre.c | 1 - net/openvswitch/vport-netdev.c | 8 +- net/openvswitch/vport.c | 8 +- net/openvswitch/vport.h | 8 +- net/packet/af_packet.c | 4 +- net/rds/connection.c | 6 - net/rds/send.c | 4 +- net/rxrpc/ar-ack.c | 4 +- net/rxrpc/ar-output.c | 2 +- net/sched/sch_api.c | 27 +- net/sched/sch_generic.c | 2 +- net/sched/sch_mq.c | 4 +- net/sched/sch_mqprio.c | 4 +- net/sctp/ipv6.c | 13 +- net/sctp/socket.c | 39 +- net/socket.c | 21 +- net/sunrpc/xprtsock.c | 14 +- net/tipc/link.c | 2 + net/tipc/socket.c | 10 +- net/tipc/udp_media.c | 7 +- net/unix/af_unix.c | 268 +++++++++++-- 174 files changed, 3192 insertions(+), 646 deletions(-) create mode 100644 drivers/net/ethernet/aurora/Kconfig create mode 100644 drivers/net/ethernet/aurora/Makefile create mode 100644 drivers/net/ethernet/aurora/nb8800.c create mode 100644 drivers/net/ethernet/aurora/nb8800.h