Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

Pull networking fixes from David Miller:
 "This fixes some fallout from the net-next merge the other day, plus
  some non-merge-window-related bug fixes:

  1) Fix sparse warnings in bcmgenet, systemport, b53, and mt7530
     (Florian Fainelli)

  2) pptp does a bogus dst_release() on a route we have a single
     refcount on, and attached to a socket, which needs that refcount
     (Eric Dumazet)

  3) UDP connected sockets on ipv6 can race with route update handling,
     resulting in a pre-PMTU update route still stuck on the socket and
     thus continuing to get ICMPV6_PKT_TOOBIG errors. We end up never
     seeing the updated route. (Alexey Kodanev)

  4) Missing list initializer(s) in TIPC (Jon Maloy)

  5) Connect phy early to prevent crashes in lan78xx driver (Alexander
     Graf)

  6) Fix build with modular NVMEM (Arnd Bergmann)

  7) netdevsim canot mark nsim_devlink_net_ops and nsim_fib_net_ops as
     __net_initdata, as these are references from module unload
     unconditionally (Arnd Bergmann)"

* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (23 commits)
  netdevsim: remove incorrect __net_initdata annotations
  sfc: remove ctpio_dmabuf_start from stats
  inet: frags: fix ip6frag_low_thresh boundary
  tipc: Fix namespace violation in tipc_sk_fill_sock_diag
  net: avoid unneeded atomic operation in ip*_append_data()
  nvmem: disallow modular CONFIG_NVMEM
  net: hns3: fix length overflow when CONFIG_ARM64_64K_PAGES
  nfp: use full 40 bits of the NSP buffer address
  lan78xx: Connect phy early
  nfp: add a separate counter for packets with CHECKSUM_COMPLETE
  tipc: Fix missing list initializations in struct tipc_subscription
  ipv6: udp: set dst cache for a connected sk if current not valid
  ipv6: udp: convert 'connected' to bool type in udpv6_sendmsg()
  ipv6: allow to cache dst for a connected sk in ip6_sk_dst_lookup_flow()
  ipv6: add a wrapper for ip6_dst_store() with flowi6 checks
  net: phy: marvell10g: add thermal hwmon device
  pptp: remove a buggy dst release in pptp_connect()
  net: dsa: mt7530: Use NULL instead of plain integer
  net: dsa: b53: Fix sparse warnings in b53_mmap.c
  af_unix: remove redundant lockdep class
  ...

34 files changed, 326 insertions, 120 deletions

diff --git a/drivers/net/dsa/b53/b53_mmap.c b/drivers/net/dsa/b53/b53_mmap.c
index ef63d24fef81..c628d0980c0b 100644
--- a/drivers/net/dsa/b53/b53_mmap.c
+++ b/drivers/net/dsa/b53/b53_mmap.c
@@ -30,7 +30,8 @@ struct b53_mmap_priv {
 
 static int b53_mmap_read8(struct b53_device *dev, u8 page, u8 reg, u8 *val)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         *val = readb(regs + (page << 8) + reg);
 
@@ -39,7 +40,8 @@ static int b53_mmap_read8(struct b53_device *dev, u8 page, u8 reg, u8 *val)
 
 static int b53_mmap_read16(struct b53_device *dev, u8 page, u8 reg, u16 *val)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         if (WARN_ON(reg % 2))
                 return -EINVAL;
@@ -54,7 +56,8 @@ static int b53_mmap_read16(struct b53_device *dev, u8 page, u8 reg, u16 *val)
 
 static int b53_mmap_read32(struct b53_device *dev, u8 page, u8 reg, u32 *val)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         if (WARN_ON(reg % 4))
                 return -EINVAL;
@@ -69,7 +72,8 @@ static int b53_mmap_read32(struct b53_device *dev, u8 page, u8 reg, u32 *val)
 
 static int b53_mmap_read48(struct b53_device *dev, u8 page, u8 reg, u64 *val)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         if (WARN_ON(reg % 2))
                 return -EINVAL;
@@ -107,7 +111,8 @@ static int b53_mmap_read48(struct b53_device *dev, u8 page, u8 reg, u64 *val)
 
 static int b53_mmap_read64(struct b53_device *dev, u8 page, u8 reg, u64 *val)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
         u32 hi, lo;
 
         if (WARN_ON(reg % 4))
@@ -128,7 +133,8 @@ static int b53_mmap_read64(struct b53_device *dev, u8 page, u8 reg, u64 *val)
 
 static int b53_mmap_write8(struct b53_device *dev, u8 page, u8 reg, u8 value)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         writeb(value, regs + (page << 8) + reg);
 
@@ -138,7 +144,8 @@ static int b53_mmap_write8(struct b53_device *dev, u8 page, u8 reg, u8 value)
 static int b53_mmap_write16(struct b53_device *dev, u8 page, u8 reg,
                             u16 value)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         if (WARN_ON(reg % 2))
                 return -EINVAL;
@@ -154,7 +161,8 @@ static int b53_mmap_write16(struct b53_device *dev, u8 page, u8 reg,
 static int b53_mmap_write32(struct b53_device *dev, u8 page, u8 reg,
                             u32 value)
 {
-        u8 __iomem *regs = dev->priv;
+        struct b53_mmap_priv *priv = dev->priv;
+        void __iomem *regs = priv->regs;
 
         if (WARN_ON(reg % 4))
                 return -EINVAL;
@@ -223,12 +231,19 @@ static const struct b53_io_ops b53_mmap_ops = {
 static int b53_mmap_probe(struct platform_device *pdev)
 {
         struct b53_platform_data *pdata = pdev->dev.platform_data;
+        struct b53_mmap_priv *priv;
         struct b53_device *dev;
 
         if (!pdata)
                 return -EINVAL;
 
-        dev = b53_switch_alloc(&pdev->dev, &b53_mmap_ops, pdata->regs);
+        priv = devm_kzalloc(&pdev->dev, sizeof(*priv), GFP_KERNEL);
+        if (!priv)
+                return -ENOMEM;
+
+        priv->regs = pdata->regs;
+
+        dev = b53_switch_alloc(&pdev->dev, &b53_mmap_ops, priv);
         if (!dev)
                 return -ENOMEM;
 
diff --git a/drivers/net/dsa/mt7530.c b/drivers/net/dsa/mt7530.c
index d244c41898dd..80a4dbc3a499 100644
--- a/drivers/net/dsa/mt7530.c
+++ b/drivers/net/dsa/mt7530.c
@@ -917,7 +917,7 @@ mt7530_port_fdb_add(struct dsa_switch *ds, int port,
 
         mutex_lock(&priv->reg_mutex);
         mt7530_fdb_write(priv, vid, port_mask, addr, -1, STATIC_ENT);
-        ret = mt7530_fdb_cmd(priv, MT7530_FDB_WRITE, 0);
+        ret = mt7530_fdb_cmd(priv, MT7530_FDB_WRITE, NULL);
         mutex_unlock(&priv->reg_mutex);
 
         return ret;
@@ -933,7 +933,7 @@ mt7530_port_fdb_del(struct dsa_switch *ds, int port,
 
         mutex_lock(&priv->reg_mutex);
         mt7530_fdb_write(priv, vid, port_mask, addr, -1, STATIC_EMP);
-        ret = mt7530_fdb_cmd(priv, MT7530_FDB_WRITE, 0);
+        ret = mt7530_fdb_cmd(priv, MT7530_FDB_WRITE, NULL);
         mutex_unlock(&priv->reg_mutex);
 
         return ret;
@@ -1293,7 +1293,7 @@ mt7530_setup(struct dsa_switch *ds)
         }
 
         /* Flush the FDB table */
-        ret = mt7530_fdb_cmd(priv, MT7530_FDB_FLUSH, 0);
+        ret = mt7530_fdb_cmd(priv, MT7530_FDB_FLUSH, NULL);
         if (ret < 0)
                 return ret;
 
diff --git a/drivers/net/ethernet/broadcom/bcmsysport.c b/drivers/net/ethernet/broadcom/bcmsysport.c
index 4a75b1de22e0..f9a3c1a76d5d 100644
--- a/drivers/net/ethernet/broadcom/bcmsysport.c
+++ b/drivers/net/ethernet/broadcom/bcmsysport.c
@@ -1192,7 +1192,7 @@ static struct sk_buff *bcm_sysport_insert_tsb(struct sk_buff *skb,
         u32 csum_info;
         u8 ip_proto;
         u16 csum_start;
-        u16 ip_ver;
+        __be16 ip_ver;
 
         /* Re-allocate SKB if needed */
         if (unlikely(skb_headroom(skb) < sizeof(*tsb))) {
@@ -1211,12 +1211,12 @@ static struct sk_buff *bcm_sysport_insert_tsb(struct sk_buff *skb,
         memset(tsb, 0, sizeof(*tsb));
 
         if (skb->ip_summed == CHECKSUM_PARTIAL) {
-                ip_ver = htons(skb->protocol);
+                ip_ver = skb->protocol;
                 switch (ip_ver) {
-                case ETH_P_IP:
+                case htons(ETH_P_IP):
                         ip_proto = ip_hdr(skb)->protocol;
                         break;
-                case ETH_P_IPV6:
+                case htons(ETH_P_IPV6):
                         ip_proto = ipv6_hdr(skb)->nexthdr;
                         break;
                 default:
@@ -1230,7 +1230,8 @@ static struct sk_buff *bcm_sysport_insert_tsb(struct sk_buff *skb,
 
                 if (ip_proto == IPPROTO_TCP || ip_proto == IPPROTO_UDP) {
                         csum_info |= L4_LENGTH_VALID;
-                        if (ip_proto == IPPROTO_UDP && ip_ver == ETH_P_IP)
+                        if (ip_proto == IPPROTO_UDP &&
+                            ip_ver == htons(ETH_P_IP))
                                 csum_info |= L4_UDP;
                 } else {
                         csum_info = 0;
diff --git a/drivers/net/ethernet/broadcom/genet/bcmgenet.c b/drivers/net/ethernet/broadcom/genet/bcmgenet.c
index 264fb37dd341..0445f2c0c629 100644
--- a/drivers/net/ethernet/broadcom/genet/bcmgenet.c
+++ b/drivers/net/ethernet/broadcom/genet/bcmgenet.c
@@ -1489,7 +1489,7 @@ static struct sk_buff *bcmgenet_put_tx_csum(struct net_device *dev,
         struct sk_buff *new_skb;
         u16 offset;
         u8 ip_proto;
-        u16 ip_ver;
+        __be16 ip_ver;
         u32 tx_csum_info;
 
         if (unlikely(skb_headroom(skb) < sizeof(*status))) {
@@ -1509,12 +1509,12 @@ static struct sk_buff *bcmgenet_put_tx_csum(struct net_device *dev,
         status = (struct status_64 *)skb->data;
 
         if (skb->ip_summed  == CHECKSUM_PARTIAL) {
-                ip_ver = htons(skb->protocol);
+                ip_ver = skb->protocol;
                 switch (ip_ver) {
-                case ETH_P_IP:
+                case htons(ETH_P_IP):
                         ip_proto = ip_hdr(skb)->protocol;
                         break;
-                case ETH_P_IPV6:
+                case htons(ETH_P_IPV6):
                         ip_proto = ipv6_hdr(skb)->nexthdr;
                         break;
                 default:
@@ -1530,7 +1530,8 @@ static struct sk_buff *bcmgenet_put_tx_csum(struct net_device *dev,
                  */
                 if (ip_proto == IPPROTO_TCP || ip_proto == IPPROTO_UDP) {
                         tx_csum_info |= STATUS_TX_CSUM_LV;
-                        if (ip_proto == IPPROTO_UDP && ip_ver == ETH_P_IP)
+                        if (ip_proto == IPPROTO_UDP &&
+                            ip_ver == htons(ETH_P_IP))
                                 tx_csum_info |= STATUS_TX_CSUM_PROTO_UDP;
                 } else {
                         tx_csum_info = 0;
diff --git a/drivers/net/ethernet/hisilicon/hns3/hns3_enet.h b/drivers/net/ethernet/hisilicon/hns3/hns3_enet.h
index 9e4cfbbf8dcd..98cdbd3a1163 100644
--- a/drivers/net/ethernet/hisilicon/hns3/hns3_enet.h
+++ b/drivers/net/ethernet/hisilicon/hns3/hns3_enet.h
@@ -288,7 +288,7 @@ struct hns3_desc_cb {
         u16 page_offset;
         u16 reuse_flag;
 
-        u16 length;     /* length of the buffer */
+        u32 length;     /* length of the buffer */
 
        /* desc type, used by the ring user to mark the type of the priv data */
         u16 type;
diff --git a/drivers/net/ethernet/netronome/nfp/nfp_net.h b/drivers/net/ethernet/netronome/nfp/nfp_net.h
index 787df47ec430..bd7d8ae31e17 100644
--- a/drivers/net/ethernet/netronome/nfp/nfp_net.h
+++ b/drivers/net/ethernet/netronome/nfp/nfp_net.h
@@ -391,6 +391,7 @@ struct nfp_net_rx_ring {
  * @rx_drops:       Number of packets dropped on RX due to lack of resources
  * @hw_csum_rx_ok:  Counter of packets where the HW checksum was OK
  * @hw_csum_rx_inner_ok: Counter of packets where the inner HW checksum was OK
+ * @hw_csum_rx_complete: Counter of packets with CHECKSUM_COMPLETE reported
  * @hw_csum_rx_error:    Counter of packets with bad checksums
  * @tx_sync:        Seqlock for atomic updates of TX stats
  * @tx_pkts:        Number of Transmitted packets
@@ -434,7 +435,7 @@ struct nfp_net_r_vector {
         u64 rx_drops;
         u64 hw_csum_rx_ok;
         u64 hw_csum_rx_inner_ok;
-        u64 hw_csum_rx_error;
+        u64 hw_csum_rx_complete;
 
         struct nfp_net_tx_ring *xdp_ring;
 
@@ -446,6 +447,7 @@ struct nfp_net_r_vector {
         u64 tx_gather;
         u64 tx_lso;
 
+        u64 hw_csum_rx_error;
         u64 rx_replace_buf_alloc_fail;
         u64 tx_errors;
         u64 tx_busy;
diff --git a/drivers/net/ethernet/netronome/nfp/nfp_net_common.c b/drivers/net/ethernet/netronome/nfp/nfp_net_common.c
index 43a9c207a049..1eb6549f2a54 100644
--- a/drivers/net/ethernet/netronome/nfp/nfp_net_common.c
+++ b/drivers/net/ethernet/netronome/nfp/nfp_net_common.c
@@ -1406,7 +1406,7 @@ static void nfp_net_rx_csum(struct nfp_net_dp *dp,
                 skb->ip_summed = meta->csum_type;
                 skb->csum = meta->csum;
                 u64_stats_update_begin(&r_vec->rx_sync);
-                r_vec->hw_csum_rx_ok++;
+                r_vec->hw_csum_rx_complete++;
                 u64_stats_update_end(&r_vec->rx_sync);
                 return;
         }
diff --git a/drivers/net/ethernet/netronome/nfp/nfp_net_ethtool.c b/drivers/net/ethernet/netronome/nfp/nfp_net_ethtool.c
index e1dae0616f52..c9016419bfa0 100644
--- a/drivers/net/ethernet/netronome/nfp/nfp_net_ethtool.c
+++ b/drivers/net/ethernet/netronome/nfp/nfp_net_ethtool.c
@@ -179,7 +179,7 @@ static const struct nfp_et_stat nfp_mac_et_stats[] = {
 
 #define NN_ET_GLOBAL_STATS_LEN ARRAY_SIZE(nfp_net_et_stats)
 #define NN_ET_SWITCH_STATS_LEN 9
-#define NN_RVEC_GATHER_STATS    8
+#define NN_RVEC_GATHER_STATS    9
 #define NN_RVEC_PER_Q_STATS     3
 
 static void nfp_net_get_nspinfo(struct nfp_app *app, char *version)
@@ -468,6 +468,7 @@ static u8 *nfp_vnic_get_sw_stats_strings(struct net_device *netdev, u8 *data)
 
         data = nfp_pr_et(data, "hw_rx_csum_ok");
         data = nfp_pr_et(data, "hw_rx_csum_inner_ok");
+        data = nfp_pr_et(data, "hw_rx_csum_complete");
         data = nfp_pr_et(data, "hw_rx_csum_err");
         data = nfp_pr_et(data, "rx_replace_buf_alloc_fail");
         data = nfp_pr_et(data, "hw_tx_csum");
@@ -493,18 +494,19 @@ static u64 *nfp_vnic_get_sw_stats(struct net_device *netdev, u64 *data)
                         data[0] = nn->r_vecs[i].rx_pkts;
                         tmp[0] = nn->r_vecs[i].hw_csum_rx_ok;
                         tmp[1] = nn->r_vecs[i].hw_csum_rx_inner_ok;
-                        tmp[2] = nn->r_vecs[i].hw_csum_rx_error;
-                        tmp[3] = nn->r_vecs[i].rx_replace_buf_alloc_fail;
+                        tmp[2] = nn->r_vecs[i].hw_csum_rx_complete;
+                        tmp[3] = nn->r_vecs[i].hw_csum_rx_error;
+                        tmp[4] = nn->r_vecs[i].rx_replace_buf_alloc_fail;
                 } while (u64_stats_fetch_retry(&nn->r_vecs[i].rx_sync, start));
 
                 do {
                         start = u64_stats_fetch_begin(&nn->r_vecs[i].tx_sync);
                         data[1] = nn->r_vecs[i].tx_pkts;
                         data[2] = nn->r_vecs[i].tx_busy;
-                        tmp[4] = nn->r_vecs[i].hw_csum_tx;
-                        tmp[5] = nn->r_vecs[i].hw_csum_tx_inner;
-                        tmp[6] = nn->r_vecs[i].tx_gather;
-                        tmp[7] = nn->r_vecs[i].tx_lso;
+                        tmp[5] = nn->r_vecs[i].hw_csum_tx;
+                        tmp[6] = nn->r_vecs[i].hw_csum_tx_inner;
+                        tmp[7] = nn->r_vecs[i].tx_gather;
+                        tmp[8] = nn->r_vecs[i].tx_lso;
                 } while (u64_stats_fetch_retry(&nn->r_vecs[i].tx_sync, start));
 
                 data += NN_RVEC_PER_Q_STATS;
diff --git a/drivers/net/ethernet/netronome/nfp/nfpcore/nfp_nsp.c b/drivers/net/ethernet/netronome/nfp/nfpcore/nfp_nsp.c
index 39abac678b71..99bb679a9801 100644
--- a/drivers/net/ethernet/netronome/nfp/nfpcore/nfp_nsp.c
+++ b/drivers/net/ethernet/netronome/nfp/nfpcore/nfp_nsp.c
@@ -71,10 +71,11 @@
 /* CPP address to retrieve the data from */
 #define NSP_BUFFER              0x10
 #define   NSP_BUFFER_CPP        GENMASK_ULL(63, 40)
-#define   NSP_BUFFER_PCIE       GENMASK_ULL(39, 38)
-#define   NSP_BUFFER_ADDRESS    GENMASK_ULL(37, 0)
+#define   NSP_BUFFER_ADDRESS    GENMASK_ULL(39, 0)
 
 #define NSP_DFLT_BUFFER         0x18
+#define   NSP_DFLT_BUFFER_CPP   GENMASK_ULL(63, 40)
+#define   NSP_DFLT_BUFFER_ADDRESS       GENMASK_ULL(39, 0)
 
 #define NSP_DFLT_BUFFER_CONFIG  0x20
 #define   NSP_DFLT_BUFFER_SIZE_MB       GENMASK_ULL(7, 0)
@@ -427,8 +428,8 @@ __nfp_nsp_command_buf(struct nfp_nsp *nsp, u16 code, u32 option,
         if (err < 0)
                 return err;
 
-        cpp_id = FIELD_GET(NSP_BUFFER_CPP, reg) << 8;
-        cpp_buf = FIELD_GET(NSP_BUFFER_ADDRESS, reg);
+        cpp_id = FIELD_GET(NSP_DFLT_BUFFER_CPP, reg) << 8;
+        cpp_buf = FIELD_GET(NSP_DFLT_BUFFER_ADDRESS, reg);
 
         if (in_buf && in_size) {
                 err = nfp_cpp_write(cpp, cpp_id, cpp_buf, in_buf, in_size);
diff --git a/drivers/net/ethernet/sfc/ef10.c b/drivers/net/ethernet/sfc/ef10.c
index c4c45c94da77..50daad0a1482 100644
--- a/drivers/net/ethernet/sfc/ef10.c
+++ b/drivers/net/ethernet/sfc/ef10.c
@@ -1666,7 +1666,6 @@ static const struct efx_hw_stat_desc efx_ef10_stat_desc[EF10_STAT_COUNT] = {
         EF10_DMA_STAT(fec_corrected_symbols_lane1, FEC_CORRECTED_SYMBOLS_LANE1),
         EF10_DMA_STAT(fec_corrected_symbols_lane2, FEC_CORRECTED_SYMBOLS_LANE2),
         EF10_DMA_STAT(fec_corrected_symbols_lane3, FEC_CORRECTED_SYMBOLS_LANE3),
-        EF10_DMA_STAT(ctpio_dmabuf_start, CTPIO_DMABUF_START),
         EF10_DMA_STAT(ctpio_vi_busy_fallback, CTPIO_VI_BUSY_FALLBACK),
         EF10_DMA_STAT(ctpio_long_write_success, CTPIO_LONG_WRITE_SUCCESS),
         EF10_DMA_STAT(ctpio_missing_dbell_fail, CTPIO_MISSING_DBELL_FAIL),
@@ -1777,7 +1776,6 @@ static const struct efx_hw_stat_desc efx_ef10_stat_desc[EF10_STAT_COUNT] = {
  * These bits are in the second u64 of the raw mask.
  */
 #define EF10_CTPIO_STAT_MASK (                                          \
-        (1ULL << (EF10_STAT_ctpio_dmabuf_start - 64)) |                 \
         (1ULL << (EF10_STAT_ctpio_vi_busy_fallback - 64)) |             \
         (1ULL << (EF10_STAT_ctpio_long_write_success - 64)) |           \
         (1ULL << (EF10_STAT_ctpio_missing_dbell_fail - 64)) |           \
diff --git a/drivers/net/ethernet/sfc/nic.h b/drivers/net/ethernet/sfc/nic.h
index 5640034bda10..5cca0556b47f 100644
--- a/drivers/net/ethernet/sfc/nic.h
+++ b/drivers/net/ethernet/sfc/nic.h
@@ -332,7 +332,6 @@ enum {
         EF10_STAT_fec_corrected_symbols_lane1,
         EF10_STAT_fec_corrected_symbols_lane2,
         EF10_STAT_fec_corrected_symbols_lane3,
-        EF10_STAT_ctpio_dmabuf_start,
         EF10_STAT_ctpio_vi_busy_fallback,
         EF10_STAT_ctpio_long_write_success,
         EF10_STAT_ctpio_missing_dbell_fail,
diff --git a/drivers/net/netdevsim/devlink.c b/drivers/net/netdevsim/devlink.c
index 27ae05c5fdaf..1dba47936456 100644
--- a/drivers/net/netdevsim/devlink.c
+++ b/drivers/net/netdevsim/devlink.c
@@ -267,7 +267,7 @@ static int __net_init nsim_devlink_netns_init(struct net *net)
         return 0;
 }
 
-static struct pernet_operations nsim_devlink_net_ops __net_initdata = {
+static struct pernet_operations nsim_devlink_net_ops = {
         .init = nsim_devlink_netns_init,
         .id   = &nsim_devlink_id,
         .size = sizeof(bool),
diff --git a/drivers/net/netdevsim/fib.c b/drivers/net/netdevsim/fib.c
index 0d105bafa261..9bfe9e151e13 100644
--- a/drivers/net/netdevsim/fib.c
+++ b/drivers/net/netdevsim/fib.c
@@ -230,7 +230,7 @@ static int __net_init nsim_fib_netns_init(struct net *net)
         return 0;
 }
 
-static struct pernet_operations nsim_fib_net_ops __net_initdata = {
+static struct pernet_operations nsim_fib_net_ops = {
         .init = nsim_fib_netns_init,
         .id   = &nsim_fib_net_id,
         .size = sizeof(struct nsim_fib_data),
diff --git a/drivers/net/phy/marvell10g.c b/drivers/net/phy/marvell10g.c
index 9564916d2d7b..f77a2d9e7f9d 100644
--- a/drivers/net/phy/marvell10g.c
+++ b/drivers/net/phy/marvell10g.c
@@ -21,8 +21,10 @@
  * If both the fiber and copper ports are connected, the first to gain
  * link takes priority and the other port is completely locked out.
  */
-#include <linux/phy.h>
+#include <linux/ctype.h>
+#include <linux/hwmon.h>
 #include <linux/marvell_phy.h>
+#include <linux/phy.h>
 
 enum {
         MV_PCS_BASE_T           = 0x0000,
@@ -40,6 +42,19 @@ enum {
          */
         MV_AN_CTRL1000          = 0x8000, /* 1000base-T control register */
         MV_AN_STAT1000          = 0x8001, /* 1000base-T status register */
+
+        /* Vendor2 MMD registers */
+        MV_V2_TEMP_CTRL         = 0xf08a,
+        MV_V2_TEMP_CTRL_MASK    = 0xc000,
+        MV_V2_TEMP_CTRL_SAMPLE  = 0x0000,
+        MV_V2_TEMP_CTRL_DISABLE = 0xc000,
+        MV_V2_TEMP              = 0xf08c,
+        MV_V2_TEMP_UNKNOWN      = 0x9600, /* unknown function */
+};
+
+struct mv3310_priv {
+        struct device *hwmon_dev;
+        char *hwmon_name;
 };
 
 static int mv3310_modify(struct phy_device *phydev, int devad, u16 reg,
@@ -60,17 +75,180 @@ static int mv3310_modify(struct phy_device *phydev, int devad, u16 reg,
         return ret < 0 ? ret : 1;
 }
 
+#ifdef CONFIG_HWMON
+static umode_t mv3310_hwmon_is_visible(const void *data,
+                                       enum hwmon_sensor_types type,
+                                       u32 attr, int channel)
+{
+        if (type == hwmon_chip && attr == hwmon_chip_update_interval)
+                return 0444;
+        if (type == hwmon_temp && attr == hwmon_temp_input)
+                return 0444;
+        return 0;
+}
+
+static int mv3310_hwmon_read(struct device *dev, enum hwmon_sensor_types type,
+                             u32 attr, int channel, long *value)
+{
+        struct phy_device *phydev = dev_get_drvdata(dev);
+        int temp;
+
+        if (type == hwmon_chip && attr == hwmon_chip_update_interval) {
+                *value = MSEC_PER_SEC;
+                return 0;
+        }
+
+        if (type == hwmon_temp && attr == hwmon_temp_input) {
+                temp = phy_read_mmd(phydev, MDIO_MMD_VEND2, MV_V2_TEMP);
+                if (temp < 0)
+                        return temp;
+
+                *value = ((temp & 0xff) - 75) * 1000;
+
+                return 0;
+        }
+
+        return -EOPNOTSUPP;
+}
+
+static const struct hwmon_ops mv3310_hwmon_ops = {
+        .is_visible = mv3310_hwmon_is_visible,
+        .read = mv3310_hwmon_read,
+};
+
+static u32 mv3310_hwmon_chip_config[] = {
+        HWMON_C_REGISTER_TZ | HWMON_C_UPDATE_INTERVAL,
+        0,
+};
+
+static const struct hwmon_channel_info mv3310_hwmon_chip = {
+        .type = hwmon_chip,
+        .config = mv3310_hwmon_chip_config,
+};
+
+static u32 mv3310_hwmon_temp_config[] = {
+        HWMON_T_INPUT,
+        0,
+};
+
+static const struct hwmon_channel_info mv3310_hwmon_temp = {
+        .type = hwmon_temp,
+        .config = mv3310_hwmon_temp_config,
+};
+
+static const struct hwmon_channel_info *mv3310_hwmon_info[] = {
+        &mv3310_hwmon_chip,
+        &mv3310_hwmon_temp,
+        NULL,
+};
+
+static const struct hwmon_chip_info mv3310_hwmon_chip_info = {
+        .ops = &mv3310_hwmon_ops,
+        .info = mv3310_hwmon_info,
+};
+
+static int mv3310_hwmon_config(struct phy_device *phydev, bool enable)
+{
+        u16 val;
+        int ret;
+
+        ret = phy_write_mmd(phydev, MDIO_MMD_VEND2, MV_V2_TEMP,
+                            MV_V2_TEMP_UNKNOWN);
+        if (ret < 0)
+                return ret;
+
+        val = enable ? MV_V2_TEMP_CTRL_SAMPLE : MV_V2_TEMP_CTRL_DISABLE;
+        ret = mv3310_modify(phydev, MDIO_MMD_VEND2, MV_V2_TEMP_CTRL,
+                            MV_V2_TEMP_CTRL_MASK, val);
+
+        return ret < 0 ? ret : 0;
+}
+
+static void mv3310_hwmon_disable(void *data)
+{
+        struct phy_device *phydev = data;
+
+        mv3310_hwmon_config(phydev, false);
+}
+
+static int mv3310_hwmon_probe(struct phy_device *phydev)
+{
+        struct device *dev = &phydev->mdio.dev;
+        struct mv3310_priv *priv = dev_get_drvdata(&phydev->mdio.dev);
+        int i, j, ret;
+
+        priv->hwmon_name = devm_kstrdup(dev, dev_name(dev), GFP_KERNEL);
+        if (!priv->hwmon_name)
+                return -ENODEV;
+
+        for (i = j = 0; priv->hwmon_name[i]; i++) {
+                if (isalnum(priv->hwmon_name[i])) {
+                        if (i != j)
+                                priv->hwmon_name[j] = priv->hwmon_name[i];
+                        j++;
+                }
+        }
+        priv->hwmon_name[j] = '\0';
+
+        ret = mv3310_hwmon_config(phydev, true);
+        if (ret)
+                return ret;
+
+        ret = devm_add_action_or_reset(dev, mv3310_hwmon_disable, phydev);
+        if (ret)
+                return ret;
+
+        priv->hwmon_dev = devm_hwmon_device_register_with_info(dev,
+                                priv->hwmon_name, phydev,
+                                &mv3310_hwmon_chip_info, NULL);
+
+        return PTR_ERR_OR_ZERO(priv->hwmon_dev);
+}
+#else
+static inline int mv3310_hwmon_config(struct phy_device *phydev, bool enable)
+{
+        return 0;
+}
+
+static int mv3310_hwmon_probe(struct phy_device *phydev)
+{
+        return 0;
+}
+#endif
+
 static int mv3310_probe(struct phy_device *phydev)
 {
+        struct mv3310_priv *priv;
         u32 mmd_mask = MDIO_DEVS_PMAPMD | MDIO_DEVS_AN;
+        int ret;
 
         if (!phydev->is_c45 ||
             (phydev->c45_ids.devices_in_package & mmd_mask) != mmd_mask)
                 return -ENODEV;
 
+        priv = devm_kzalloc(&phydev->mdio.dev, sizeof(*priv), GFP_KERNEL);
+        if (!priv)
+                return -ENOMEM;
+
+        dev_set_drvdata(&phydev->mdio.dev, priv);
+
+        ret = mv3310_hwmon_probe(phydev);
+        if (ret)
+                return ret;
+
+        return 0;
+}
+
+static int mv3310_suspend(struct phy_device *phydev)
+{
         return 0;
 }
 
+static int mv3310_resume(struct phy_device *phydev)
+{
+        return mv3310_hwmon_config(phydev, true);
+}
+
 static int mv3310_config_init(struct phy_device *phydev)
 {
         __ETHTOOL_DECLARE_LINK_MODE_MASK(supported) = { 0, };
@@ -367,9 +545,11 @@ static struct phy_driver mv3310_drivers[] = {
                                   SUPPORTED_FIBRE |
                                   SUPPORTED_10000baseT_Full |
                                   SUPPORTED_Backplane,
-                .probe          = mv3310_probe,
                 .soft_reset     = gen10g_no_soft_reset,
                 .config_init    = mv3310_config_init,
+                .probe          = mv3310_probe,
+                .suspend        = mv3310_suspend,
+                .resume         = mv3310_resume,
                 .config_aneg    = mv3310_config_aneg,
                 .aneg_done      = mv3310_aneg_done,
                 .read_status    = mv3310_read_status,
diff --git a/drivers/net/ppp/pptp.c b/drivers/net/ppp/pptp.c
index 8249d46a7844..c4267ecefd85 100644
--- a/drivers/net/ppp/pptp.c
+++ b/drivers/net/ppp/pptp.c
@@ -464,7 +464,6 @@ static int pptp_connect(struct socket *sock, struct sockaddr *uservaddr,
         po->chan.mtu = dst_mtu(&rt->dst);
         if (!po->chan.mtu)
                 po->chan.mtu = PPP_MRU;
-        ip_rt_put(rt);
         po->chan.mtu -= PPTP_HEADER_OVERHEAD;
 
         po->chan.hdrlen = 2 + sizeof(struct pptp_gre_header);
diff --git a/drivers/net/usb/lan78xx.c b/drivers/net/usb/lan78xx.c
index 55a78eb96961..aff105f5f58c 100644
--- a/drivers/net/usb/lan78xx.c
+++ b/drivers/net/usb/lan78xx.c
@@ -2082,10 +2082,6 @@ static int lan78xx_phy_init(struct lan78xx_net *dev)
 
         dev->fc_autoneg = phydev->autoneg;
 
-        phy_start(phydev);
-
-        netif_dbg(dev, ifup, dev->net, "phy initialised successfully");
-
         return 0;
 
 error:
@@ -2522,9 +2518,9 @@ static int lan78xx_open(struct net_device *net)
         if (ret < 0)
                 goto done;
 
-        ret = lan78xx_phy_init(dev);
-        if (ret < 0)
-                goto done;
+        phy_start(net->phydev);
+
+        netif_dbg(dev, ifup, dev->net, "phy initialised successfully");
 
         /* for Link Check */
         if (dev->urb_intr) {
@@ -2585,13 +2581,8 @@ static int lan78xx_stop(struct net_device *net)
         if (timer_pending(&dev->stat_monitor))
                 del_timer_sync(&dev->stat_monitor);
 
-        phy_unregister_fixup_for_uid(PHY_KSZ9031RNX, 0xfffffff0);
-        phy_unregister_fixup_for_uid(PHY_LAN8835, 0xfffffff0);
-
-        phy_stop(net->phydev);
-        phy_disconnect(net->phydev);
-
-        net->phydev = NULL;
+        if (net->phydev)
+                phy_stop(net->phydev);
 
         clear_bit(EVENT_DEV_OPEN, &dev->flags);
         netif_stop_queue(net);
@@ -3506,8 +3497,13 @@ static void lan78xx_disconnect(struct usb_interface *intf)
                 return;
 
         udev = interface_to_usbdev(intf);
-
         net = dev->net;
+
+        phy_unregister_fixup_for_uid(PHY_KSZ9031RNX, 0xfffffff0);
+        phy_unregister_fixup_for_uid(PHY_LAN8835, 0xfffffff0);
+
+        phy_disconnect(net->phydev);
+
         unregister_netdev(net);
 
         cancel_delayed_work_sync(&dev->wq);
@@ -3663,8 +3659,14 @@ static int lan78xx_probe(struct usb_interface *intf,
         pm_runtime_set_autosuspend_delay(&udev->dev,
                                          DEFAULT_AUTOSUSPEND_DELAY);
 
+        ret = lan78xx_phy_init(dev);
+        if (ret < 0)
+                goto out4;
+
         return 0;
 
+out4:
+        unregister_netdev(netdev);
 out3:
         lan78xx_unbind(dev, intf);
 out2:
@@ -4012,7 +4014,7 @@ static int lan78xx_reset_resume(struct usb_interface *intf)
 
         lan78xx_reset(dev);
 
-        lan78xx_phy_init(dev);
+        phy_start(dev->net->phydev);
 
         return lan78xx_resume(intf);
 }
diff --git a/drivers/nvmem/Kconfig b/drivers/nvmem/Kconfig
index ff505af064ba..55cf64ee7f7b 100644
--- a/drivers/nvmem/Kconfig
+++ b/drivers/nvmem/Kconfig
@@ -1,5 +1,5 @@
 menuconfig NVMEM
-        tristate "NVMEM Support"
+        bool "NVMEM Support"
         help
           Support for NVMEM(Non Volatile Memory) devices like EEPROM, EFUSES...
 
diff --git a/include/net/ip6_route.h b/include/net/ip6_route.h
index 0084013d6bed..08b132381984 100644
--- a/include/net/ip6_route.h
+++ b/include/net/ip6_route.h
@@ -214,6 +214,9 @@ static inline void ip6_dst_store(struct sock *sk, struct dst_entry *dst,
 #endif
 }
 
+void ip6_sk_dst_store_flow(struct sock *sk, struct dst_entry *dst,
+                           const struct flowi6 *fl6);
+
 static inline bool ipv6_unicast_destination(const struct sk_buff *skb)
 {
         struct rt6_info *rt = (struct rt6_info *) skb_dst(skb);
diff --git a/include/net/ipv6.h b/include/net/ipv6.h
index 9b6e7f51b1d4..836f31af1369 100644
--- a/include/net/ipv6.h
+++ b/include/net/ipv6.h
@@ -965,7 +965,8 @@ int ip6_dst_lookup(struct net *net, struct sock *sk, struct dst_entry **dst,
 struct dst_entry *ip6_dst_lookup_flow(const struct sock *sk, struct flowi6 *fl6,
                                       const struct in6_addr *final_dst);
 struct dst_entry *ip6_sk_dst_lookup_flow(struct sock *sk, struct flowi6 *fl6,
-                                         const struct in6_addr *final_dst);
+                                         const struct in6_addr *final_dst,
+                                         bool connected);
 struct dst_entry *ip6_blackhole_route(struct net *net,
                                       struct dst_entry *orig_dst);
 
diff --git a/net/ieee802154/6lowpan/reassembly.c b/net/ieee802154/6lowpan/reassembly.c
index 44f148a6bb57..1790b65944b3 100644
--- a/net/ieee802154/6lowpan/reassembly.c
+++ b/net/ieee802154/6lowpan/reassembly.c
@@ -411,7 +411,6 @@ err:
 }
 
 #ifdef CONFIG_SYSCTL
-static long zero;
 
 static struct ctl_table lowpan_frags_ns_ctl_table[] = {
         {
@@ -428,7 +427,6 @@ static struct ctl_table lowpan_frags_ns_ctl_table[] = {
                 .maxlen         = sizeof(unsigned long),
                 .mode           = 0644,
                 .proc_handler   = proc_doulongvec_minmax,
-                .extra1         = &zero,
                 .extra2         = &init_net.ieee802154_lowpan.frags.high_thresh
         },
         {
diff --git a/net/ipv4/ip_fragment.c b/net/ipv4/ip_fragment.c
index 994fa70a910f..8e9528ebaa8e 100644
--- a/net/ipv4/ip_fragment.c
+++ b/net/ipv4/ip_fragment.c
@@ -667,7 +667,7 @@ struct sk_buff *ip_check_defrag(struct net *net, struct sk_buff *skb, u32 user)
 EXPORT_SYMBOL(ip_check_defrag);
 
 #ifdef CONFIG_SYSCTL
-static long zero;
+static int dist_min;
 
 static struct ctl_table ip4_frags_ns_ctl_table[] = {
         {
@@ -684,7 +684,6 @@ static struct ctl_table ip4_frags_ns_ctl_table[] = {
                 .maxlen         = sizeof(unsigned long),
                 .mode           = 0644,
                 .proc_handler   = proc_doulongvec_minmax,
-                .extra1         = &zero,
                 .extra2         = &init_net.ipv4.frags.high_thresh
         },
         {
@@ -700,7 +699,7 @@ static struct ctl_table ip4_frags_ns_ctl_table[] = {
                 .maxlen         = sizeof(int),
                 .mode           = 0644,
                 .proc_handler   = proc_dointvec_minmax,
-                .extra1         = &zero
+                .extra1         = &dist_min,
         },
         { }
 };
diff --git a/net/ipv4/ip_output.c b/net/ipv4/ip_output.c
index 94cacae76aca..4c11b810a447 100644
--- a/net/ipv4/ip_output.c
+++ b/net/ipv4/ip_output.c
@@ -1090,7 +1090,8 @@ alloc_new_skb:
                 length -= copy;
         }
 
-        refcount_add(wmem_alloc_delta, &sk->sk_wmem_alloc);
+        if (wmem_alloc_delta)
+                refcount_add(wmem_alloc_delta, &sk->sk_wmem_alloc);
         return 0;
 
 error_efault:
diff --git a/net/ipv6/datagram.c b/net/ipv6/datagram.c
index 88bc2ef7c7a8..a02ad100f0d7 100644
--- a/net/ipv6/datagram.c
+++ b/net/ipv6/datagram.c
@@ -106,14 +106,7 @@ int ip6_datagram_dst_update(struct sock *sk, bool fix_sk_saddr)
                 }
         }
 
-        ip6_dst_store(sk, dst,
-                      ipv6_addr_equal(&fl6.daddr, &sk->sk_v6_daddr) ?
-                      &sk->sk_v6_daddr : NULL,
-#ifdef CONFIG_IPV6_SUBTREES
-                      ipv6_addr_equal(&fl6.saddr, &np->saddr) ?
-                      &np->saddr :
-#endif
-                      NULL);
+        ip6_sk_dst_store_flow(sk, dst, &fl6);
 
 out:
         fl6_sock_release(flowlabel);
diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c
index e6eaa4dd9f60..b8ee50e94af3 100644
--- a/net/ipv6/ip6_output.c
+++ b/net/ipv6/ip6_output.c
@@ -1105,23 +1105,32 @@ EXPORT_SYMBOL_GPL(ip6_dst_lookup_flow);
  *      @sk: socket which provides the dst cache and route info
  *      @fl6: flow to lookup
  *      @final_dst: final destination address for ipsec lookup
+ *      @connected: whether @sk is connected or not
  *
  *      This function performs a route lookup on the given flow with the
  *      possibility of using the cached route in the socket if it is valid.
  *      It will take the socket dst lock when operating on the dst cache.
  *      As a result, this function can only be used in process context.
  *
+ *      In addition, for a connected socket, cache the dst in the socket
+ *      if the current cache is not valid.
+ *
  *      It returns a valid dst pointer on success, or a pointer encoded
  *      error code.
  */
 struct dst_entry *ip6_sk_dst_lookup_flow(struct sock *sk, struct flowi6 *fl6,
-                                         const struct in6_addr *final_dst)
+                                         const struct in6_addr *final_dst,
+                                         bool connected)
 {
         struct dst_entry *dst = sk_dst_check(sk, inet6_sk(sk)->dst_cookie);
 
         dst = ip6_sk_dst_check(sk, dst, fl6);
-        if (!dst)
-                dst = ip6_dst_lookup_flow(sk, fl6, final_dst);
+        if (dst)
+                return dst;
+
+        dst = ip6_dst_lookup_flow(sk, fl6, final_dst);
+        if (connected && !IS_ERR(dst))
+                ip6_sk_dst_store_flow(sk, dst_clone(dst), fl6);
 
         return dst;
 }
@@ -1536,7 +1545,8 @@ alloc_new_skb:
                 length -= copy;
         }
 
-        refcount_add(wmem_alloc_delta, &sk->sk_wmem_alloc);
+        if (wmem_alloc_delta)
+                refcount_add(wmem_alloc_delta, &sk->sk_wmem_alloc);
         return 0;
 
 error_efault:
diff --git a/net/ipv6/netfilter/nf_conntrack_reasm.c b/net/ipv6/netfilter/nf_conntrack_reasm.c
index 3622aac343ae..5e0332014c17 100644
--- a/net/ipv6/netfilter/nf_conntrack_reasm.c
+++ b/net/ipv6/netfilter/nf_conntrack_reasm.c
@@ -55,7 +55,6 @@ static const char nf_frags_cache_name[] = "nf-frags";
 static struct inet_frags nf_frags;
 
 #ifdef CONFIG_SYSCTL
-static long zero;
 
 static struct ctl_table nf_ct_frag6_sysctl_table[] = {
         {
@@ -71,7 +70,6 @@ static struct ctl_table nf_ct_frag6_sysctl_table[] = {
                 .maxlen         = sizeof(unsigned long),
                 .mode           = 0644,
                 .proc_handler   = proc_doulongvec_minmax,
-                .extra1         = &zero,
                 .extra2         = &init_net.nf_frag.frags.high_thresh
         },
         {
diff --git a/net/ipv6/ping.c b/net/ipv6/ping.c
index d12c55dad7d1..746eeae7f581 100644
--- a/net/ipv6/ping.c
+++ b/net/ipv6/ping.c
@@ -121,7 +121,7 @@ static int ping_v6_sendmsg(struct sock *sk, struct msghdr *msg, size_t len)
         ipc6.tclass = np->tclass;
         fl6.flowlabel = ip6_make_flowinfo(ipc6.tclass, fl6.flowlabel);
 
-        dst = ip6_sk_dst_lookup_flow(sk, &fl6,  daddr);
+        dst = ip6_sk_dst_lookup_flow(sk, &fl6, daddr, false);
         if (IS_ERR(dst))
                 return PTR_ERR(dst);
         rt = (struct rt6_info *) dst;
diff --git a/net/ipv6/reassembly.c b/net/ipv6/reassembly.c
index 70e4a578b2fb..4979610287e2 100644
--- a/net/ipv6/reassembly.c
+++ b/net/ipv6/reassembly.c
@@ -548,7 +548,6 @@ static const struct inet6_protocol frag_protocol = {
 };
 
 #ifdef CONFIG_SYSCTL
-static int zero;
 
 static struct ctl_table ip6_frags_ns_ctl_table[] = {
         {
@@ -565,7 +564,6 @@ static struct ctl_table ip6_frags_ns_ctl_table[] = {
                 .maxlen         = sizeof(unsigned long),
                 .mode           = 0644,
                 .proc_handler   = proc_doulongvec_minmax,
-                .extra1         = &zero,
                 .extra2         = &init_net.ipv6.frags.high_thresh
         },
         {
diff --git a/net/ipv6/route.c b/net/ipv6/route.c
index f239f91d2efb..49b954d6d0fa 100644
--- a/net/ipv6/route.c
+++ b/net/ipv6/route.c
@@ -2229,6 +2229,23 @@ void ip6_sk_update_pmtu(struct sk_buff *skb, struct sock *sk, __be32 mtu)
 }
 EXPORT_SYMBOL_GPL(ip6_sk_update_pmtu);
 
+void ip6_sk_dst_store_flow(struct sock *sk, struct dst_entry *dst,
+                           const struct flowi6 *fl6)
+{
+#ifdef CONFIG_IPV6_SUBTREES
+        struct ipv6_pinfo *np = inet6_sk(sk);
+#endif
+
+        ip6_dst_store(sk, dst,
+                      ipv6_addr_equal(&fl6->daddr, &sk->sk_v6_daddr) ?
+                      &sk->sk_v6_daddr : NULL,
+#ifdef CONFIG_IPV6_SUBTREES
+                      ipv6_addr_equal(&fl6->saddr, &np->saddr) ?
+                      &np->saddr :
+#endif
+                      NULL);
+}
+
 /* Handle redirects */
 struct ip6rd_flowi {
         struct flowi6 fl6;
diff --git a/net/ipv6/udp.c b/net/ipv6/udp.c
index 6861ed479469..4ec76a87aeb8 100644
--- a/net/ipv6/udp.c
+++ b/net/ipv6/udp.c
@@ -1116,10 +1116,10 @@ int udpv6_sendmsg(struct sock *sk, struct msghdr *msg, size_t len)
         struct dst_entry *dst;
         struct ipcm6_cookie ipc6;
         int addr_len = msg->msg_namelen;
+        bool connected = false;
         int ulen = len;
         int corkreq = up->corkflag || msg->msg_flags&MSG_MORE;
         int err;
-        int connected = 0;
         int is_udplite = IS_UDPLITE(sk);
         int (*getfrag)(void *, char *, int, int, int, struct sk_buff *);
         struct sockcm_cookie sockc;
@@ -1241,7 +1241,7 @@ do_udp_sendmsg:
                 fl6.fl6_dport = inet->inet_dport;
                 daddr = &sk->sk_v6_daddr;
                 fl6.flowlabel = np->flow_label;
-                connected = 1;
+                connected = true;
         }
 
         if (!fl6.flowi6_oif)
@@ -1271,7 +1271,7 @@ do_udp_sendmsg:
                 }
                 if (!(opt->opt_nflen|opt->opt_flen))
                         opt = NULL;
-                connected = 0;
+                connected = false;
         }
         if (!opt) {
                 opt = txopt_get(np);
@@ -1293,11 +1293,11 @@ do_udp_sendmsg:
 
         final_p = fl6_update_dst(&fl6, opt, &final);
         if (final_p)
-                connected = 0;
+                connected = false;
 
         if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr)) {
                 fl6.flowi6_oif = np->mcast_oif;
-                connected = 0;
+                connected = false;
         } else if (!fl6.flowi6_oif)
                 fl6.flowi6_oif = np->ucast_oif;
 
@@ -1308,7 +1308,7 @@ do_udp_sendmsg:
 
         fl6.flowlabel = ip6_make_flowinfo(ipc6.tclass, fl6.flowlabel);
 
-        dst = ip6_sk_dst_lookup_flow(sk, &fl6, final_p);
+        dst = ip6_sk_dst_lookup_flow(sk, &fl6, final_p, connected);
         if (IS_ERR(dst)) {
                 err = PTR_ERR(dst);
                 dst = NULL;
@@ -1333,7 +1333,7 @@ back_from_confirm:
                 err = PTR_ERR(skb);
                 if (!IS_ERR_OR_NULL(skb))
                         err = udp_v6_send_skb(skb, &fl6);
-                goto release_dst;
+                goto out;
         }
 
         lock_sock(sk);
@@ -1367,23 +1367,6 @@ do_append_data:
                 err = np->recverr ? net_xmit_errno(err) : 0;
         release_sock(sk);
 
-release_dst:
-        if (dst) {
-                if (connected) {
-                        ip6_dst_store(sk, dst,
-                                      ipv6_addr_equal(&fl6.daddr, &sk->sk_v6_daddr) ?
-                                      &sk->sk_v6_daddr : NULL,
-#ifdef CONFIG_IPV6_SUBTREES
-                                      ipv6_addr_equal(&fl6.saddr, &np->saddr) ?
-                                      &np->saddr :
-#endif
-                                      NULL);
-                } else {
-                        dst_release(dst);
-                }
-                dst = NULL;
-        }
-
 out:
         dst_release(dst);
         fl6_sock_release(flowlabel);
diff --git a/net/rxrpc/input.c b/net/rxrpc/input.c
index 21800e6f5019..0410d2277ca2 100644
--- a/net/rxrpc/input.c
+++ b/net/rxrpc/input.c
@@ -1200,6 +1200,12 @@ void rxrpc_data_ready(struct sock *udp_sk)
                     !rxrpc_validate_jumbo(skb))
                         goto bad_message;
                 break;
+
+                /* Packet types 9-11 should just be ignored. */
+        case RXRPC_PACKET_TYPE_PARAMS:
+        case RXRPC_PACKET_TYPE_10:
+        case RXRPC_PACKET_TYPE_11:
+                goto discard;
         }
 
         rcu_read_lock();
diff --git a/net/rxrpc/protocol.h b/net/rxrpc/protocol.h
index 4bddcf3face3..93da73bf7098 100644
--- a/net/rxrpc/protocol.h
+++ b/net/rxrpc/protocol.h
@@ -46,6 +46,9 @@ struct rxrpc_wire_header {
 #define RXRPC_PACKET_TYPE_CHALLENGE     6       /* connection security challenge (SRVR->CLNT) */
 #define RXRPC_PACKET_TYPE_RESPONSE      7       /* connection secutity response (CLNT->SRVR) */
 #define RXRPC_PACKET_TYPE_DEBUG         8       /* debug info request */
+#define RXRPC_PACKET_TYPE_PARAMS        9       /* Parameter negotiation (unspec'd, ignore) */
+#define RXRPC_PACKET_TYPE_10            10      /* Ignored */
+#define RXRPC_PACKET_TYPE_11            11      /* Ignored */
 #define RXRPC_PACKET_TYPE_VERSION       13      /* version string request */
 #define RXRPC_N_PACKET_TYPES            14      /* number of packet types (incl type 0) */
 
@@ -78,6 +81,9 @@ struct rxrpc_wire_header {
                 (1 << RXRPC_PACKET_TYPE_CHALLENGE) |    \
                 (1 << RXRPC_PACKET_TYPE_RESPONSE) |     \
                 /*(1 << RXRPC_PACKET_TYPE_DEBUG) | */   \
+                (1 << RXRPC_PACKET_TYPE_PARAMS) |       \
+                (1 << RXRPC_PACKET_TYPE_10) |           \
+                (1 << RXRPC_PACKET_TYPE_11) |           \
                 (1 << RXRPC_PACKET_TYPE_VERSION))
 
 /*****************************************************************************/
diff --git a/net/tipc/socket.c b/net/tipc/socket.c
index 3e5eba30865e..cee6674a3bf4 100644
--- a/net/tipc/socket.c
+++ b/net/tipc/socket.c
@@ -3280,7 +3280,8 @@ int tipc_sk_fill_sock_diag(struct sk_buff *skb, struct tipc_sock *tsk,
             nla_put_u32(skb, TIPC_NLA_SOCK_TIPC_STATE, (u32)sk->sk_state) ||
             nla_put_u32(skb, TIPC_NLA_SOCK_INO, sock_i_ino(sk)) ||
             nla_put_u32(skb, TIPC_NLA_SOCK_UID,
-                        from_kuid_munged(sk_user_ns(sk), sock_i_uid(sk))) ||
+                        from_kuid_munged(sk_user_ns(NETLINK_CB(skb).sk),
+                                         sock_i_uid(sk))) ||
             nla_put_u64_64bit(skb, TIPC_NLA_SOCK_COOKIE,
                               tipc_diag_gen_cookie(sk),
                               TIPC_NLA_SOCK_PAD))
diff --git a/net/tipc/subscr.c b/net/tipc/subscr.c
index 6925a989569b..b7d80bc5f4ab 100644
--- a/net/tipc/subscr.c
+++ b/net/tipc/subscr.c
@@ -145,6 +145,8 @@ struct tipc_subscription *tipc_sub_subscribe(struct net *net,
                 pr_warn("Subscription rejected, no memory\n");
                 return NULL;
         }
+        INIT_LIST_HEAD(&sub->service_list);
+        INIT_LIST_HEAD(&sub->sub_list);
         sub->net = net;
         sub->conid = conid;
         sub->inactive = false;
diff --git a/net/unix/af_unix.c b/net/unix/af_unix.c
index aded82da1aea..68bb70a62afe 100644
--- a/net/unix/af_unix.c
+++ b/net/unix/af_unix.c
@@ -745,14 +745,6 @@ static struct proto unix_proto = {
         .obj_size               = sizeof(struct unix_sock),
 };
 
-/*
- * AF_UNIX sockets do not interact with hardware, hence they
- * dont trigger interrupts - so it's safe for them to have
- * bh-unsafe locking for their sk_receive_queue.lock. Split off
- * this special lock-class by reinitializing the spinlock key:
- */
-static struct lock_class_key af_unix_sk_receive_queue_lock_key;
-
 static struct sock *unix_create1(struct net *net, struct socket *sock, int kern)
 {
         struct sock *sk = NULL;
@@ -767,8 +759,6 @@ static struct sock *unix_create1(struct net *net, struct socket *sock, int kern)
                 goto out;
 
         sock_init_data(sock, sk);
-        lockdep_set_class(&sk->sk_receive_queue.lock,
-                                &af_unix_sk_receive_queue_lock_key);
 
         sk->sk_allocation       = GFP_KERNEL_ACCOUNT;
         sk->sk_write_space      = unix_write_space;