| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20170412131708.GC1952@nanopsycho>
Date: Wed, 12 Apr 2017 15:17:08 +0200
From: Jiri Pirko <jiri@...nulli.us>
To: Johannes Berg <johannes@...solutions.net>
Cc: linux-wireless@...r.kernel.org, netdev@...r.kernel.org,
pablo@...filter.org, Jamal Hadi Salim <jhs@...atatu.com>,
Jiri Benc <jbenc@...hat.com>,
David Ahern <dsa@...ulusnetworks.com>,
Johannes Berg <johannes.berg@...el.com>
Subject: Re: [PATCH net-next v5 4/5] netlink: pass extended ACK struct to
parsing functions
Wed, Apr 12, 2017 at 02:34:07PM CEST, johannes@...solutions.net wrote:
>From: Johannes Berg <johannes.berg@...el.com>
>
>Pass the new extended ACK reporting struct to all of the
Johannes, I wonder, is there a reason you ignore my comments about
narrow descriptions? Why don't you use the whole line?
>generic netlink parsing functions. For now, pass NULL in
>almost all callers (except for some in the core.)
>
>Signed-off-by: Johannes Berg <johannes.berg@...el.com>
>---
> crypto/crypto_user.c | 2 +-
> drivers/block/drbd/drbd_nla.c | 2 +-
> drivers/infiniband/core/addr.c | 2 +-
> drivers/infiniband/core/iwpm_util.c | 6 +-
> drivers/infiniband/core/sa_query.c | 4 +-
> drivers/net/macsec.c | 10 +--
> drivers/net/team/team.c | 2 +-
> drivers/net/veth.c | 3 +-
> drivers/net/wireless/ath/ath10k/testmode.c | 4 +-
> drivers/net/wireless/ath/ath6kl/testmode.c | 4 +-
> drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 3 +-
> drivers/net/wireless/mac80211_hwsim.c | 4 +-
> drivers/net/wireless/marvell/mwifiex/cfg80211.c | 4 +-
> drivers/net/wireless/ti/wlcore/testmode.c | 3 +-
> drivers/net/wireless/ti/wlcore/vendor_cmd.c | 4 +-
> include/net/genetlink.h | 8 ++-
> include/net/netlink.h | 33 +++++++---
> include/net/rtnetlink.h | 3 +-
> lib/nlattr.c | 28 +++++---
> net/8021q/vlan_netlink.c | 3 +-
> net/bridge/br_mdb.c | 3 +-
> net/bridge/br_netlink.c | 4 +-
> net/bridge/br_netlink_tunnel.c | 4 +-
> net/can/gw.c | 2 +-
> net/core/fib_rules.c | 4 +-
> net/core/lwt_bpf.c | 5 +-
> net/core/neighbour.c | 8 +--
> net/core/net_namespace.c | 4 +-
> net/core/rtnetlink.c | 47 ++++++++------
> net/dcb/dcbnl.c | 57 ++++++++---------
> net/decnet/dn_dev.c | 4 +-
> net/decnet/dn_fib.c | 6 +-
> net/decnet/dn_route.c | 2 +-
> net/ieee802154/nl802154.c | 29 ++++-----
> net/ipv4/devinet.c | 12 ++--
> net/ipv4/fib_frontend.c | 3 +-
> net/ipv4/ip_tunnel_core.c | 5 +-
> net/ipv4/ipmr.c | 3 +-
> net/ipv4/route.c | 3 +-
> net/ipv6/addrconf.c | 16 +++--
> net/ipv6/addrlabel.c | 4 +-
> net/ipv6/ila/ila_lwt.c | 3 +-
> net/ipv6/route.c | 6 +-
> net/ipv6/seg6_iptunnel.c | 2 +-
> net/mpls/af_mpls.c | 5 +-
> net/mpls/mpls_iptunnel.c | 2 +-
> net/netfilter/ipset/ip_set_core.c | 27 ++++----
> net/netfilter/ipvs/ip_vs_ctl.c | 12 ++--
> net/netfilter/nf_conntrack_netlink.c | 27 ++++----
> net/netfilter/nf_conntrack_proto_dccp.c | 2 +-
> net/netfilter/nf_conntrack_proto_sctp.c | 6 +-
> net/netfilter/nf_conntrack_proto_tcp.c | 3 +-
> net/netfilter/nf_nat_core.c | 5 +-
> net/netfilter/nf_tables_api.c | 27 ++++----
> net/netfilter/nfnetlink.c | 11 ++--
> net/netfilter/nfnetlink_acct.c | 3 +-
> net/netfilter/nfnetlink_cthelper.c | 12 ++--
> net/netfilter/nfnetlink_cttimeout.c | 3 +-
> net/netfilter/nfnetlink_queue.c | 2 +-
> net/netfilter/nft_compat.c | 2 +-
> net/netlabel/netlabel_cipso_v4.c | 19 +++---
> net/netlink/genetlink.c | 2 +-
> net/nfc/netlink.c | 5 +-
> net/openvswitch/datapath.c | 2 +-
> net/openvswitch/flow_netlink.c | 4 +-
> net/openvswitch/vport-vxlan.c | 3 +-
> net/phonet/pn_netlink.c | 6 +-
> net/qrtr/qrtr.c | 2 +-
> net/sched/act_api.c | 20 +++---
> net/sched/act_bpf.c | 2 +-
> net/sched/act_connmark.c | 3 +-
> net/sched/act_csum.c | 2 +-
> net/sched/act_gact.c | 2 +-
> net/sched/act_ife.c | 4 +-
> net/sched/act_ipt.c | 2 +-
> net/sched/act_mirred.c | 2 +-
> net/sched/act_nat.c | 2 +-
> net/sched/act_pedit.c | 4 +-
> net/sched/act_police.c | 2 +-
> net/sched/act_sample.c | 2 +-
> net/sched/act_simple.c | 2 +-
> net/sched/act_skbedit.c | 2 +-
> net/sched/act_skbmod.c | 2 +-
> net/sched/act_tunnel_key.c | 3 +-
> net/sched/act_vlan.c | 2 +-
> net/sched/cls_api.c | 2 +-
> net/sched/cls_basic.c | 2 +-
> net/sched/cls_bpf.c | 3 +-
> net/sched/cls_cgroup.c | 2 +-
> net/sched/cls_flow.c | 2 +-
> net/sched/cls_flower.c | 3 +-
> net/sched/cls_fw.c | 2 +-
> net/sched/cls_matchall.c | 4 +-
> net/sched/cls_route.c | 2 +-
> net/sched/cls_rsvp.h | 2 +-
> net/sched/cls_tcindex.c | 2 +-
> net/sched/cls_u32.c | 2 +-
> net/sched/em_meta.c | 2 +-
> net/sched/ematch.c | 2 +-
> net/sched/sch_api.c | 10 +--
> net/sched/sch_atm.c | 2 +-
> net/sched/sch_cbq.c | 4 +-
> net/sched/sch_choke.c | 2 +-
> net/sched/sch_codel.c | 2 +-
> net/sched/sch_drr.c | 2 +-
> net/sched/sch_dsmark.c | 4 +-
> net/sched/sch_fq.c | 2 +-
> net/sched/sch_fq_codel.c | 3 +-
> net/sched/sch_gred.c | 4 +-
> net/sched/sch_hfsc.c | 2 +-
> net/sched/sch_hhf.c | 2 +-
> net/sched/sch_htb.c | 4 +-
> net/sched/sch_netem.c | 2 +-
> net/sched/sch_pie.c | 2 +-
> net/sched/sch_qfq.c | 3 +-
> net/sched/sch_red.c | 2 +-
> net/sched/sch_sfb.c | 2 +-
> net/sched/sch_tbf.c | 2 +-
> net/switchdev/switchdev.c | 2 +-
> net/tipc/bearer.c | 14 ++--
> net/tipc/link.c | 2 +-
> net/tipc/net.c | 4 +-
> net/tipc/netlink.c | 3 +-
> net/tipc/netlink_compat.c | 32 +++++-----
> net/tipc/node.c | 12 ++--
> net/tipc/socket.c | 2 +-
> net/tipc/udp_media.c | 7 +-
> net/wireless/nl80211.c | 78 ++++++++++++-----------
> net/xfrm/xfrm_user.c | 6 +-
> 129 files changed, 477 insertions(+), 391 deletions(-)
>
>diff --git a/crypto/crypto_user.c b/crypto/crypto_user.c
>index 4a44830741c1..fc79906c1fe7 100644
>--- a/crypto/crypto_user.c
>+++ b/crypto/crypto_user.c
>@@ -523,7 +523,7 @@ static int crypto_user_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh,
> }
>
> err = nlmsg_parse(nlh, crypto_msg_min[type], attrs, CRYPTOCFGA_MAX,
>- crypto_policy);
>+ crypto_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/drivers/block/drbd/drbd_nla.c b/drivers/block/drbd/drbd_nla.c
>index b2d4791498a6..6bf806df60dc 100644
>--- a/drivers/block/drbd/drbd_nla.c
>+++ b/drivers/block/drbd/drbd_nla.c
>@@ -34,7 +34,7 @@ int drbd_nla_parse_nested(struct nlattr *tb[], int maxtype, struct nlattr *nla,
>
> err = drbd_nla_check_mandatory(maxtype, nla);
> if (!err)
>- err = nla_parse_nested(tb, maxtype, nla, policy);
>+ err = nla_parse_nested(tb, maxtype, nla, policy, NULL);
>
> return err;
> }
>diff --git a/drivers/infiniband/core/addr.c b/drivers/infiniband/core/addr.c
>index 0f58f46dbad7..329d08c884f6 100644
>--- a/drivers/infiniband/core/addr.c
>+++ b/drivers/infiniband/core/addr.c
>@@ -88,7 +88,7 @@ static inline bool ib_nl_is_good_ip_resp(const struct nlmsghdr *nlh)
> return false;
>
> ret = nla_parse(tb, LS_NLA_TYPE_MAX - 1, nlmsg_data(nlh),
>- nlmsg_len(nlh), ib_nl_addr_policy);
>+ nlmsg_len(nlh), ib_nl_addr_policy, NULL);
> if (ret)
> return false;
>
>diff --git a/drivers/infiniband/core/iwpm_util.c b/drivers/infiniband/core/iwpm_util.c
>index 3ef51a96bbf1..f13870e69ccd 100644
>--- a/drivers/infiniband/core/iwpm_util.c
>+++ b/drivers/infiniband/core/iwpm_util.c
>@@ -472,12 +472,14 @@ int iwpm_parse_nlmsg(struct netlink_callback *cb, int policy_max,
> int ret;
> const char *err_str = "";
>
>- ret = nlmsg_validate(cb->nlh, nlh_len, policy_max-1, nlmsg_policy);
>+ ret = nlmsg_validate(cb->nlh, nlh_len, policy_max - 1, nlmsg_policy,
>+ NULL);
> if (ret) {
> err_str = "Invalid attribute";
> goto parse_nlmsg_error;
> }
>- ret = nlmsg_parse(cb->nlh, nlh_len, nltb, policy_max-1, nlmsg_policy);
>+ ret = nlmsg_parse(cb->nlh, nlh_len, nltb, policy_max - 1,
>+ nlmsg_policy, NULL);
> if (ret) {
> err_str = "Unable to parse the nlmsg";
> goto parse_nlmsg_error;
>diff --git a/drivers/infiniband/core/sa_query.c b/drivers/infiniband/core/sa_query.c
>index 81b742ca1639..ceae153997d0 100644
>--- a/drivers/infiniband/core/sa_query.c
>+++ b/drivers/infiniband/core/sa_query.c
>@@ -808,7 +808,7 @@ int ib_nl_handle_set_timeout(struct sk_buff *skb,
> return -EPERM;
>
> ret = nla_parse(tb, LS_NLA_TYPE_MAX - 1, nlmsg_data(nlh),
>- nlmsg_len(nlh), ib_nl_policy);
>+ nlmsg_len(nlh), ib_nl_policy, NULL);
> attr = (const struct nlattr *)tb[LS_NLA_TYPE_TIMEOUT];
> if (ret || !attr)
> goto settimeout_out;
>@@ -860,7 +860,7 @@ static inline int ib_nl_is_good_resolve_resp(const struct nlmsghdr *nlh)
> return 0;
>
> ret = nla_parse(tb, LS_NLA_TYPE_MAX - 1, nlmsg_data(nlh),
>- nlmsg_len(nlh), ib_nl_policy);
>+ nlmsg_len(nlh), ib_nl_policy, NULL);
> if (ret)
> return 0;
>
>diff --git a/drivers/net/macsec.c b/drivers/net/macsec.c
>index ff0a5ed3ca80..9eb7a69be92a 100644
>--- a/drivers/net/macsec.c
>+++ b/drivers/net/macsec.c
>@@ -1590,8 +1590,9 @@ static int parse_sa_config(struct nlattr **attrs, struct nlattr **tb_sa)
> if (!attrs[MACSEC_ATTR_SA_CONFIG])
> return -EINVAL;
>
>- if (nla_parse_nested(tb_sa, MACSEC_SA_ATTR_MAX, attrs[MACSEC_ATTR_SA_CONFIG],
>- macsec_genl_sa_policy))
>+ if (nla_parse_nested(tb_sa, MACSEC_SA_ATTR_MAX,
>+ attrs[MACSEC_ATTR_SA_CONFIG],
>+ macsec_genl_sa_policy, NULL))
> return -EINVAL;
>
> return 0;
>@@ -1602,8 +1603,9 @@ static int parse_rxsc_config(struct nlattr **attrs, struct nlattr **tb_rxsc)
> if (!attrs[MACSEC_ATTR_RXSC_CONFIG])
> return -EINVAL;
>
>- if (nla_parse_nested(tb_rxsc, MACSEC_RXSC_ATTR_MAX, attrs[MACSEC_ATTR_RXSC_CONFIG],
>- macsec_genl_rxsc_policy))
>+ if (nla_parse_nested(tb_rxsc, MACSEC_RXSC_ATTR_MAX,
>+ attrs[MACSEC_ATTR_RXSC_CONFIG],
>+ macsec_genl_rxsc_policy, NULL))
> return -EINVAL;
>
> return 0;
>diff --git a/drivers/net/team/team.c b/drivers/net/team/team.c
>index 1b52520715ae..86f227124ba1 100644
>--- a/drivers/net/team/team.c
>+++ b/drivers/net/team/team.c
>@@ -2471,7 +2471,7 @@ static int team_nl_cmd_options_set(struct sk_buff *skb, struct genl_info *info)
> goto team_put;
> }
> err = nla_parse_nested(opt_attrs, TEAM_ATTR_OPTION_MAX,
>- nl_option, team_nl_option_policy);
>+ nl_option, team_nl_option_policy, NULL);
> if (err)
> goto team_put;
> if (!opt_attrs[TEAM_ATTR_OPTION_NAME] ||
>diff --git a/drivers/net/veth.c b/drivers/net/veth.c
>index 317103680675..38f0f03a29c8 100644
>--- a/drivers/net/veth.c
>+++ b/drivers/net/veth.c
>@@ -368,7 +368,8 @@ static int veth_newlink(struct net *src_net, struct net_device *dev,
> ifmp = nla_data(nla_peer);
> err = rtnl_nla_parse_ifla(peer_tb,
> nla_data(nla_peer) + sizeof(struct ifinfomsg),
>- nla_len(nla_peer) - sizeof(struct ifinfomsg));
>+ nla_len(nla_peer) - sizeof(struct ifinfomsg),
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/drivers/net/wireless/ath/ath10k/testmode.c b/drivers/net/wireless/ath/ath10k/testmode.c
>index 8bb36c18a749..d8564624415c 100644
>--- a/drivers/net/wireless/ath/ath10k/testmode.c
>+++ b/drivers/net/wireless/ath/ath10k/testmode.c
>@@ -420,8 +420,8 @@ int ath10k_tm_cmd(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
> struct nlattr *tb[ATH10K_TM_ATTR_MAX + 1];
> int ret;
>
>- ret = nla_parse(tb, ATH10K_TM_ATTR_MAX, data, len,
>- ath10k_tm_policy);
>+ ret = nla_parse(tb, ATH10K_TM_ATTR_MAX, data, len, ath10k_tm_policy,
>+ NULL);
> if (ret)
> return ret;
>
>diff --git a/drivers/net/wireless/ath/ath6kl/testmode.c b/drivers/net/wireless/ath/ath6kl/testmode.c
>index d67170ea1038..d8dcacda9add 100644
>--- a/drivers/net/wireless/ath/ath6kl/testmode.c
>+++ b/drivers/net/wireless/ath/ath6kl/testmode.c
>@@ -74,8 +74,8 @@ int ath6kl_tm_cmd(struct wiphy *wiphy, struct wireless_dev *wdev,
> int err, buf_len;
> void *buf;
>
>- err = nla_parse(tb, ATH6KL_TM_ATTR_MAX, data, len,
>- ath6kl_tm_policy);
>+ err = nla_parse(tb, ATH6KL_TM_ATTR_MAX, data, len, ath6kl_tm_policy,
>+ NULL);
> if (err)
> return err;
>
>diff --git a/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c b/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
>index 486dcceed17a..841bfdff8750 100644
>--- a/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
>+++ b/drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c
>@@ -3711,7 +3711,8 @@ static int __iwl_mvm_mac_testmode_cmd(struct iwl_mvm *mvm,
> int err;
> u32 noa_duration;
>
>- err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy);
>+ err = nla_parse(tb, IWL_MVM_TM_ATTR_MAX, data, len, iwl_mvm_tm_policy,
>+ NULL);
> if (err)
> return err;
>
>diff --git a/drivers/net/wireless/mac80211_hwsim.c b/drivers/net/wireless/mac80211_hwsim.c
>index 50c219fb1a52..84a0e242ffdb 100644
>--- a/drivers/net/wireless/mac80211_hwsim.c
>+++ b/drivers/net/wireless/mac80211_hwsim.c
>@@ -389,7 +389,7 @@ static int mac80211_hwsim_vendor_cmd_test(struct wiphy *wiphy,
> u32 val;
>
> err = nla_parse(tb, QCA_WLAN_VENDOR_ATTR_MAX, data, data_len,
>- hwsim_vendor_test_policy);
>+ hwsim_vendor_test_policy, NULL);
> if (err)
> return err;
> if (!tb[QCA_WLAN_VENDOR_ATTR_TEST])
>@@ -1852,7 +1852,7 @@ static int mac80211_hwsim_testmode_cmd(struct ieee80211_hw *hw,
> int err, ps;
>
> err = nla_parse(tb, HWSIM_TM_ATTR_MAX, data, len,
>- hwsim_testmode_policy);
>+ hwsim_testmode_policy, NULL);
> if (err)
> return err;
>
>diff --git a/drivers/net/wireless/marvell/mwifiex/cfg80211.c b/drivers/net/wireless/marvell/mwifiex/cfg80211.c
>index 44d06177859e..252e802df8fe 100644
>--- a/drivers/net/wireless/marvell/mwifiex/cfg80211.c
>+++ b/drivers/net/wireless/marvell/mwifiex/cfg80211.c
>@@ -4016,8 +4016,8 @@ static int mwifiex_tm_cmd(struct wiphy *wiphy, struct wireless_dev *wdev,
> if (!priv)
> return -EINVAL;
>
>- err = nla_parse(tb, MWIFIEX_TM_ATTR_MAX, data, len,
>- mwifiex_tm_policy);
>+ err = nla_parse(tb, MWIFIEX_TM_ATTR_MAX, data, len, mwifiex_tm_policy,
>+ NULL);
> if (err)
> return err;
>
>diff --git a/drivers/net/wireless/ti/wlcore/testmode.c b/drivers/net/wireless/ti/wlcore/testmode.c
>index ddad58f614da..009ec07c4cec 100644
>--- a/drivers/net/wireless/ti/wlcore/testmode.c
>+++ b/drivers/net/wireless/ti/wlcore/testmode.c
>@@ -366,7 +366,8 @@ int wl1271_tm_cmd(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
> u32 nla_cmd;
> int err;
>
>- err = nla_parse(tb, WL1271_TM_ATTR_MAX, data, len, wl1271_tm_policy);
>+ err = nla_parse(tb, WL1271_TM_ATTR_MAX, data, len, wl1271_tm_policy,
>+ NULL);
> if (err)
> return err;
>
>diff --git a/drivers/net/wireless/ti/wlcore/vendor_cmd.c b/drivers/net/wireless/ti/wlcore/vendor_cmd.c
>index fd4e9ba176c9..5c0bcb1fe1a1 100644
>--- a/drivers/net/wireless/ti/wlcore/vendor_cmd.c
>+++ b/drivers/net/wireless/ti/wlcore/vendor_cmd.c
>@@ -41,7 +41,7 @@ wlcore_vendor_cmd_smart_config_start(struct wiphy *wiphy,
> return -EINVAL;
>
> ret = nla_parse(tb, MAX_WLCORE_VENDOR_ATTR, data, data_len,
>- wlcore_vendor_attr_policy);
>+ wlcore_vendor_attr_policy, NULL);
> if (ret)
> return ret;
>
>@@ -116,7 +116,7 @@ wlcore_vendor_cmd_smart_config_set_group_key(struct wiphy *wiphy,
> return -EINVAL;
>
> ret = nla_parse(tb, MAX_WLCORE_VENDOR_ATTR, data, data_len,
>- wlcore_vendor_attr_policy);
>+ wlcore_vendor_attr_policy, NULL);
> if (ret)
> return ret;
>
>diff --git a/include/net/genetlink.h b/include/net/genetlink.h
>index f18db6570f52..68b88192b00c 100644
>--- a/include/net/genetlink.h
>+++ b/include/net/genetlink.h
>@@ -174,14 +174,16 @@ genlmsg_nlhdr(void *user_hdr, const struct genl_family *family)
> * @tb: destination array with maxtype+1 elements
> * @maxtype: maximum attribute type to be expected
> * @policy: validation policy
>- * */
>+ * @extack: extended ACK report struct
>+ */
> static inline int genlmsg_parse(const struct nlmsghdr *nlh,
> const struct genl_family *family,
> struct nlattr *tb[], int maxtype,
>- const struct nla_policy *policy)
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
> return nlmsg_parse(nlh, family->hdrsize + GENL_HDRLEN, tb, maxtype,
>- policy);
>+ policy, extack);
> }
>
> /**
>diff --git a/include/net/netlink.h b/include/net/netlink.h
>index a064ec3e2ee1..01709172b3d3 100644
>--- a/include/net/netlink.h
>+++ b/include/net/netlink.h
>@@ -239,9 +239,11 @@ int nlmsg_notify(struct sock *sk, struct sk_buff *skb, u32 portid,
> unsigned int group, int report, gfp_t flags);
>
> int nla_validate(const struct nlattr *head, int len, int maxtype,
>- const struct nla_policy *policy);
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack);
> int nla_parse(struct nlattr **tb, int maxtype, const struct nlattr *head,
>- int len, const struct nla_policy *policy);
>+ int len, const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack);
> int nla_policy_len(const struct nla_policy *, int);
> struct nlattr *nla_find(const struct nlattr *head, int len, int attrtype);
> size_t nla_strlcpy(char *dst, const struct nlattr *nla, size_t dstsize);
>@@ -375,18 +377,20 @@ nlmsg_next(const struct nlmsghdr *nlh, int *remaining)
> * @tb: destination array with maxtype+1 elements
> * @maxtype: maximum attribute type to be expected
> * @policy: validation policy
>+ * @extack: extended ACK report struct
> *
> * See nla_parse()
> */
> static inline int nlmsg_parse(const struct nlmsghdr *nlh, int hdrlen,
> struct nlattr *tb[], int maxtype,
>- const struct nla_policy *policy)
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
> if (nlh->nlmsg_len < nlmsg_msg_size(hdrlen))
> return -EINVAL;
>
> return nla_parse(tb, maxtype, nlmsg_attrdata(nlh, hdrlen),
>- nlmsg_attrlen(nlh, hdrlen), policy);
>+ nlmsg_attrlen(nlh, hdrlen), policy, extack);
> }
>
> /**
>@@ -410,16 +414,19 @@ static inline struct nlattr *nlmsg_find_attr(const struct nlmsghdr *nlh,
> * @hdrlen: length of familiy specific header
> * @maxtype: maximum attribute type to be expected
> * @policy: validation policy
>+ * @extack: extended ACK report struct
> */
> static inline int nlmsg_validate(const struct nlmsghdr *nlh,
> int hdrlen, int maxtype,
>- const struct nla_policy *policy)
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
> if (nlh->nlmsg_len < nlmsg_msg_size(hdrlen))
> return -EINVAL;
>
> return nla_validate(nlmsg_attrdata(nlh, hdrlen),
>- nlmsg_attrlen(nlh, hdrlen), maxtype, policy);
>+ nlmsg_attrlen(nlh, hdrlen), maxtype, policy,
>+ extack);
> }
>
> /**
>@@ -740,14 +747,17 @@ nla_find_nested(const struct nlattr *nla, int attrtype)
> * @maxtype: maximum attribute type to be expected
> * @nla: attribute containing the nested attributes
> * @policy: validation policy
>+ * @extack: extended ACK report struct
> *
> * See nla_parse()
> */
> static inline int nla_parse_nested(struct nlattr *tb[], int maxtype,
> const struct nlattr *nla,
>- const struct nla_policy *policy)
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
>- return nla_parse(tb, maxtype, nla_data(nla), nla_len(nla), policy);
>+ return nla_parse(tb, maxtype, nla_data(nla), nla_len(nla), policy,
>+ extack);
> }
>
> /**
>@@ -1253,6 +1263,7 @@ static inline void nla_nest_cancel(struct sk_buff *skb, struct nlattr *start)
> * @start: container attribute
> * @maxtype: maximum attribute type to be expected
> * @policy: validation policy
>+ * @extack: extended ACK report struct
> *
> * Validates all attributes in the nested attribute stream against the
> * specified policy. Attributes with a type exceeding maxtype will be
>@@ -1261,9 +1272,11 @@ static inline void nla_nest_cancel(struct sk_buff *skb, struct nlattr *start)
> * Returns 0 on success or a negative error code.
> */
> static inline int nla_validate_nested(const struct nlattr *start, int maxtype,
>- const struct nla_policy *policy)
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
>- return nla_validate(nla_data(start), nla_len(start), maxtype, policy);
>+ return nla_validate(nla_data(start), nla_len(start), maxtype, policy,
>+ extack);
> }
>
> /**
>diff --git a/include/net/rtnetlink.h b/include/net/rtnetlink.h
>index 106de5f7bf06..c07b941fce89 100644
>--- a/include/net/rtnetlink.h
>+++ b/include/net/rtnetlink.h
>@@ -158,7 +158,8 @@ struct net_device *rtnl_create_link(struct net *net, const char *ifname,
> int rtnl_delete_link(struct net_device *dev);
> int rtnl_configure_link(struct net_device *dev, const struct ifinfomsg *ifm);
>
>-int rtnl_nla_parse_ifla(struct nlattr **tb, const struct nlattr *head, int len);
>+int rtnl_nla_parse_ifla(struct nlattr **tb, const struct nlattr *head, int len,
>+ struct netlink_ext_ack *exterr);
>
> #define MODULE_ALIAS_RTNL_LINK(kind) MODULE_ALIAS("rtnl-link-" kind)
>
>diff --git a/lib/nlattr.c b/lib/nlattr.c
>index b42b8577fc23..a7e0b16078df 100644
>--- a/lib/nlattr.c
>+++ b/lib/nlattr.c
>@@ -112,6 +112,7 @@ static int validate_nla(const struct nlattr *nla, int maxtype,
> * @len: length of attribute stream
> * @maxtype: maximum attribute type to be expected
> * @policy: validation policy
>+ * @extack: extended ACK report struct
> *
> * Validates all attributes in the specified attribute stream against the
> * specified policy. Attributes with a type exceeding maxtype will be
>@@ -120,20 +121,23 @@ static int validate_nla(const struct nlattr *nla, int maxtype,
> * Returns 0 on success or a negative error code.
> */
> int nla_validate(const struct nlattr *head, int len, int maxtype,
>- const struct nla_policy *policy)
>+ const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
> const struct nlattr *nla;
>- int rem, err;
>+ int rem;
>
> nla_for_each_attr(nla, head, len, rem) {
>- err = validate_nla(nla, maxtype, policy);
>- if (err < 0)
>- goto errout;
>+ int err = validate_nla(nla, maxtype, policy);
>+
>+ if (err < 0) {
>+ if (extack)
>+ extack->bad_attr = nla;
>+ return err;
>+ }
> }
>
>- err = 0;
>-errout:
>- return err;
>+ return 0;
> }
> EXPORT_SYMBOL(nla_validate);
>
>@@ -180,7 +184,8 @@ EXPORT_SYMBOL(nla_policy_len);
> * Returns 0 on success or a negative error code.
> */
> int nla_parse(struct nlattr **tb, int maxtype, const struct nlattr *head,
>- int len, const struct nla_policy *policy)
>+ int len, const struct nla_policy *policy,
>+ struct netlink_ext_ack *extack)
> {
> const struct nlattr *nla;
> int rem, err;
>@@ -193,8 +198,11 @@ int nla_parse(struct nlattr **tb, int maxtype, const struct nlattr *head,
> if (type > 0 && type <= maxtype) {
> if (policy) {
> err = validate_nla(nla, maxtype, policy);
>- if (err < 0)
>+ if (err < 0) {
>+ if (extack)
>+ extack->bad_attr = nla;
> goto errout;
>+ }
> }
>
> tb[type] = (struct nlattr *)nla;
>diff --git a/net/8021q/vlan_netlink.c b/net/8021q/vlan_netlink.c
>index 1270207f3d7c..9c94aad153b3 100644
>--- a/net/8021q/vlan_netlink.c
>+++ b/net/8021q/vlan_netlink.c
>@@ -35,7 +35,8 @@ static inline int vlan_validate_qos_map(struct nlattr *attr)
> {
> if (!attr)
> return 0;
>- return nla_validate_nested(attr, IFLA_VLAN_QOS_MAX, vlan_map_policy);
>+ return nla_validate_nested(attr, IFLA_VLAN_QOS_MAX, vlan_map_policy,
>+ NULL);
> }
>
> static int vlan_validate(struct nlattr *tb[], struct nlattr *data[])
>diff --git a/net/bridge/br_mdb.c b/net/bridge/br_mdb.c
>index 056e6ac49d8f..993626a7fc3b 100644
>--- a/net/bridge/br_mdb.c
>+++ b/net/bridge/br_mdb.c
>@@ -464,7 +464,8 @@ static int br_mdb_parse(struct sk_buff *skb, struct nlmsghdr *nlh,
> struct net_device *dev;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*bpm), tb, MDBA_SET_ENTRY_MAX, NULL);
>+ err = nlmsg_parse(nlh, sizeof(*bpm), tb, MDBA_SET_ENTRY_MAX, NULL,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/bridge/br_netlink.c b/net/bridge/br_netlink.c
>index a8f6acd23e30..e6dea5cd6bd6 100644
>--- a/net/bridge/br_netlink.c
>+++ b/net/bridge/br_netlink.c
>@@ -748,8 +748,8 @@ int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
>
> if (p && protinfo) {
> if (protinfo->nla_type & NLA_F_NESTED) {
>- err = nla_parse_nested(tb, IFLA_BRPORT_MAX,
>- protinfo, br_port_policy);
>+ err = nla_parse_nested(tb, IFLA_BRPORT_MAX, protinfo,
>+ br_port_policy, NULL);
> if (err)
> return err;
>
>diff --git a/net/bridge/br_netlink_tunnel.c b/net/bridge/br_netlink_tunnel.c
>index c913491495ab..3712c7f0e00c 100644
>--- a/net/bridge/br_netlink_tunnel.c
>+++ b/net/bridge/br_netlink_tunnel.c
>@@ -227,8 +227,8 @@ int br_parse_vlan_tunnel_info(struct nlattr *attr,
>
> memset(tinfo, 0, sizeof(*tinfo));
>
>- err = nla_parse_nested(tb, IFLA_BRIDGE_VLAN_TUNNEL_MAX,
>- attr, vlan_tunnel_policy);
>+ err = nla_parse_nested(tb, IFLA_BRIDGE_VLAN_TUNNEL_MAX, attr,
>+ vlan_tunnel_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/can/gw.c b/net/can/gw.c
>index 3c117a33e15f..3b84fb7d98aa 100644
>--- a/net/can/gw.c
>+++ b/net/can/gw.c
>@@ -641,7 +641,7 @@ static int cgw_parse_attr(struct nlmsghdr *nlh, struct cf_mod *mod,
> memset(mod, 0, sizeof(*mod));
>
> err = nlmsg_parse(nlh, sizeof(struct rtcanmsg), tb, CGW_MAX,
>- cgw_policy);
>+ cgw_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/core/fib_rules.c b/net/core/fib_rules.c
>index 816e3ccb0ec9..df03110ca3c8 100644
>--- a/net/core/fib_rules.c
>+++ b/net/core/fib_rules.c
>@@ -386,7 +386,7 @@ int fib_nl_newrule(struct sk_buff *skb, struct nlmsghdr *nlh)
> goto errout;
> }
>
>- err = nlmsg_parse(nlh, sizeof(*frh), tb, FRA_MAX, ops->policy);
>+ err = nlmsg_parse(nlh, sizeof(*frh), tb, FRA_MAX, ops->policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -580,7 +580,7 @@ int fib_nl_delrule(struct sk_buff *skb, struct nlmsghdr *nlh)
> goto errout;
> }
>
>- err = nlmsg_parse(nlh, sizeof(*frh), tb, FRA_MAX, ops->policy);
>+ err = nlmsg_parse(nlh, sizeof(*frh), tb, FRA_MAX, ops->policy, NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/core/lwt_bpf.c b/net/core/lwt_bpf.c
>index 0cfe7b0216c3..b3bc0a31af9f 100644
>--- a/net/core/lwt_bpf.c
>+++ b/net/core/lwt_bpf.c
>@@ -209,7 +209,8 @@ static int bpf_parse_prog(struct nlattr *attr, struct bpf_lwt_prog *prog,
> int ret;
> u32 fd;
>
>- ret = nla_parse_nested(tb, LWT_BPF_PROG_MAX, attr, bpf_prog_policy);
>+ ret = nla_parse_nested(tb, LWT_BPF_PROG_MAX, attr, bpf_prog_policy,
>+ NULL);
> if (ret < 0)
> return ret;
>
>@@ -249,7 +250,7 @@ static int bpf_build_state(struct nlattr *nla,
> if (family != AF_INET && family != AF_INET6)
> return -EAFNOSUPPORT;
>
>- ret = nla_parse_nested(tb, LWT_BPF_MAX, nla, bpf_nl_policy);
>+ ret = nla_parse_nested(tb, LWT_BPF_MAX, nla, bpf_nl_policy, NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/core/neighbour.c b/net/core/neighbour.c
>index 8ae87c591c8e..31f37b264710 100644
>--- a/net/core/neighbour.c
>+++ b/net/core/neighbour.c
>@@ -1661,7 +1661,7 @@ static int neigh_add(struct sk_buff *skb, struct nlmsghdr *nlh)
> int err;
>
> ASSERT_RTNL();
>- err = nlmsg_parse(nlh, sizeof(*ndm), tb, NDA_MAX, NULL);
>+ err = nlmsg_parse(nlh, sizeof(*ndm), tb, NDA_MAX, NULL, NULL);
> if (err < 0)
> goto out;
>
>@@ -1946,7 +1946,7 @@ static int neightbl_set(struct sk_buff *skb, struct nlmsghdr *nlh)
> int err, tidx;
>
> err = nlmsg_parse(nlh, sizeof(*ndtmsg), tb, NDTA_MAX,
>- nl_neightbl_policy);
>+ nl_neightbl_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -1984,7 +1984,7 @@ static int neightbl_set(struct sk_buff *skb, struct nlmsghdr *nlh)
> int i, ifindex = 0;
>
> err = nla_parse_nested(tbp, NDTPA_MAX, tb[NDTA_PARMS],
>- nl_ntbl_parm_policy);
>+ nl_ntbl_parm_policy, NULL);
> if (err < 0)
> goto errout_tbl_lock;
>
>@@ -2275,7 +2275,7 @@ static int neigh_dump_table(struct neigh_table *tbl, struct sk_buff *skb,
> unsigned int flags = NLM_F_MULTI;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(struct ndmsg), tb, NDA_MAX, NULL);
>+ err = nlmsg_parse(nlh, sizeof(struct ndmsg), tb, NDA_MAX, NULL, NULL);
> if (!err) {
> if (tb[NDA_IFINDEX])
> filter_idx = nla_get_u32(tb[NDA_IFINDEX]);
>diff --git a/net/core/net_namespace.c b/net/core/net_namespace.c
>index 652468ff65b7..ec18cbc756d2 100644
>--- a/net/core/net_namespace.c
>+++ b/net/core/net_namespace.c
>@@ -579,7 +579,7 @@ static int rtnl_net_newid(struct sk_buff *skb, struct nlmsghdr *nlh)
> int nsid, err;
>
> err = nlmsg_parse(nlh, sizeof(struct rtgenmsg), tb, NETNSA_MAX,
>- rtnl_net_policy);
>+ rtnl_net_policy, NULL);
> if (err < 0)
> return err;
> if (!tb[NETNSA_NSID])
>@@ -653,7 +653,7 @@ static int rtnl_net_getid(struct sk_buff *skb, struct nlmsghdr *nlh)
> int err, id;
>
> err = nlmsg_parse(nlh, sizeof(struct rtgenmsg), tb, NETNSA_MAX,
>- rtnl_net_policy);
>+ rtnl_net_policy, NULL);
> if (err < 0)
> return err;
> if (tb[NETNSA_PID])
>diff --git a/net/core/rtnetlink.c b/net/core/rtnetlink.c
>index 09a2e86f7b92..c8d0e14e8bc9 100644
>--- a/net/core/rtnetlink.c
>+++ b/net/core/rtnetlink.c
>@@ -1515,7 +1515,8 @@ static const struct rtnl_link_ops *linkinfo_to_kind_ops(const struct nlattr *nla
> const struct rtnl_link_ops *ops = NULL;
> struct nlattr *linfo[IFLA_INFO_MAX + 1];
>
>- if (nla_parse_nested(linfo, IFLA_INFO_MAX, nla, ifla_info_policy) < 0)
>+ if (nla_parse_nested(linfo, IFLA_INFO_MAX, nla,
>+ ifla_info_policy, NULL) < 0)
> return NULL;
>
> if (linfo[IFLA_INFO_KIND]) {
>@@ -1592,8 +1593,8 @@ static int rtnl_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
> hdrlen = nlmsg_len(cb->nlh) < sizeof(struct ifinfomsg) ?
> sizeof(struct rtgenmsg) : sizeof(struct ifinfomsg);
>
>- if (nlmsg_parse(cb->nlh, hdrlen, tb, IFLA_MAX, ifla_policy) >= 0) {
>-
>+ if (nlmsg_parse(cb->nlh, hdrlen, tb, IFLA_MAX,
>+ ifla_policy, NULL) >= 0) {
> if (tb[IFLA_EXT_MASK])
> ext_filter_mask = nla_get_u32(tb[IFLA_EXT_MASK]);
>
>@@ -1640,9 +1641,10 @@ static int rtnl_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
> return skb->len;
> }
>
>-int rtnl_nla_parse_ifla(struct nlattr **tb, const struct nlattr *head, int len)
>+int rtnl_nla_parse_ifla(struct nlattr **tb, const struct nlattr *head, int len,
>+ struct netlink_ext_ack *exterr)
> {
>- return nla_parse(tb, IFLA_MAX, head, len, ifla_policy);
>+ return nla_parse(tb, IFLA_MAX, head, len, ifla_policy, exterr);
> }
> EXPORT_SYMBOL(rtnl_nla_parse_ifla);
>
>@@ -2078,7 +2080,7 @@ static int do_setlink(const struct sk_buff *skb,
> goto errout;
> }
> err = nla_parse_nested(vfinfo, IFLA_VF_MAX, attr,
>- ifla_vf_policy);
>+ ifla_vf_policy, NULL);
> if (err < 0)
> goto errout;
> err = do_setvfinfo(dev, vfinfo);
>@@ -2106,7 +2108,7 @@ static int do_setlink(const struct sk_buff *skb,
> goto errout;
> }
> err = nla_parse_nested(port, IFLA_PORT_MAX, attr,
>- ifla_port_policy);
>+ ifla_port_policy, NULL);
> if (err < 0)
> goto errout;
> if (!port[IFLA_PORT_VF]) {
>@@ -2126,7 +2128,8 @@ static int do_setlink(const struct sk_buff *skb,
> struct nlattr *port[IFLA_PORT_MAX+1];
>
> err = nla_parse_nested(port, IFLA_PORT_MAX,
>- tb[IFLA_PORT_SELF], ifla_port_policy);
>+ tb[IFLA_PORT_SELF], ifla_port_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>@@ -2170,7 +2173,7 @@ static int do_setlink(const struct sk_buff *skb,
> u32 xdp_flags = 0;
>
> err = nla_parse_nested(xdp, IFLA_XDP_MAX, tb[IFLA_XDP],
>- ifla_xdp_policy);
>+ ifla_xdp_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -2219,7 +2222,7 @@ static int rtnl_setlink(struct sk_buff *skb, struct nlmsghdr *nlh)
> struct nlattr *tb[IFLA_MAX+1];
> char ifname[IFNAMSIZ];
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -2312,7 +2315,7 @@ static int rtnl_dellink(struct sk_buff *skb, struct nlmsghdr *nlh)
> struct nlattr *tb[IFLA_MAX+1];
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -2441,7 +2444,7 @@ static int rtnl_newlink(struct sk_buff *skb, struct nlmsghdr *nlh)
> #ifdef CONFIG_MODULES
> replay:
> #endif
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -2472,7 +2475,8 @@ static int rtnl_newlink(struct sk_buff *skb, struct nlmsghdr *nlh)
>
> if (tb[IFLA_LINKINFO]) {
> err = nla_parse_nested(linkinfo, IFLA_INFO_MAX,
>- tb[IFLA_LINKINFO], ifla_info_policy);
>+ tb[IFLA_LINKINFO], ifla_info_policy,
>+ NULL);
> if (err < 0)
> return err;
> } else
>@@ -2497,7 +2501,7 @@ static int rtnl_newlink(struct sk_buff *skb, struct nlmsghdr *nlh)
> if (ops->maxtype && linkinfo[IFLA_INFO_DATA]) {
> err = nla_parse_nested(attr, ops->maxtype,
> linkinfo[IFLA_INFO_DATA],
>- ops->policy);
>+ ops->policy, NULL);
> if (err < 0)
> return err;
> data = attr;
>@@ -2515,7 +2519,8 @@ static int rtnl_newlink(struct sk_buff *skb, struct nlmsghdr *nlh)
> err = nla_parse_nested(slave_attr,
> m_ops->slave_maxtype,
> linkinfo[IFLA_INFO_SLAVE_DATA],
>- m_ops->slave_policy);
>+ m_ops->slave_policy,
>+ NULL);
> if (err < 0)
> return err;
> slave_data = slave_attr;
>@@ -2684,7 +2689,7 @@ static int rtnl_getlink(struct sk_buff *skb, struct nlmsghdr* nlh)
> int err;
> u32 ext_filter_mask = 0;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFLA_MAX, ifla_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -2734,7 +2739,7 @@ static u16 rtnl_calcit(struct sk_buff *skb, struct nlmsghdr *nlh)
> hdrlen = nlmsg_len(nlh) < sizeof(struct ifinfomsg) ?
> sizeof(struct rtgenmsg) : sizeof(struct ifinfomsg);
>
>- if (nlmsg_parse(nlh, hdrlen, tb, IFLA_MAX, ifla_policy) >= 0) {
>+ if (nlmsg_parse(nlh, hdrlen, tb, IFLA_MAX, ifla_policy, NULL) >= 0) {
> if (tb[IFLA_EXT_MASK])
> ext_filter_mask = nla_get_u32(tb[IFLA_EXT_MASK]);
> }
>@@ -2965,7 +2970,7 @@ static int rtnl_fdb_add(struct sk_buff *skb, struct nlmsghdr *nlh)
> u16 vid;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*ndm), tb, NDA_MAX, NULL);
>+ err = nlmsg_parse(nlh, sizeof(*ndm), tb, NDA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>@@ -3068,7 +3073,7 @@ static int rtnl_fdb_del(struct sk_buff *skb, struct nlmsghdr *nlh)
> if (!netlink_capable(skb, CAP_NET_ADMIN))
> return -EPERM;
>
>- err = nlmsg_parse(nlh, sizeof(*ndm), tb, NDA_MAX, NULL);
>+ err = nlmsg_parse(nlh, sizeof(*ndm), tb, NDA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>@@ -3203,8 +3208,8 @@ static int rtnl_fdb_dump(struct sk_buff *skb, struct netlink_callback *cb)
> int err = 0;
> int fidx = 0;
>
>- if (nlmsg_parse(cb->nlh, sizeof(struct ifinfomsg), tb, IFLA_MAX,
>- ifla_policy) == 0) {
>+ if (nlmsg_parse(cb->nlh, sizeof(struct ifinfomsg), tb,
>+ IFLA_MAX, ifla_policy, NULL) == 0) {
> if (tb[IFLA_MASTER])
> br_idx = nla_get_u32(tb[IFLA_MASTER]);
> }
>diff --git a/net/dcb/dcbnl.c b/net/dcb/dcbnl.c
>index 3202d75329b5..3f5a5f710576 100644
>--- a/net/dcb/dcbnl.c
>+++ b/net/dcb/dcbnl.c
>@@ -245,8 +245,7 @@ static int dcbnl_getpfccfg(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EOPNOTSUPP;
>
> ret = nla_parse_nested(data, DCB_PFC_UP_ATTR_MAX,
>- tb[DCB_ATTR_PFC_CFG],
>- dcbnl_pfc_up_nest);
>+ tb[DCB_ATTR_PFC_CFG], dcbnl_pfc_up_nest, NULL);
> if (ret)
> return ret;
>
>@@ -304,7 +303,7 @@ static int dcbnl_getcap(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EOPNOTSUPP;
>
> ret = nla_parse_nested(data, DCB_CAP_ATTR_MAX, tb[DCB_ATTR_CAP],
>- dcbnl_cap_nest);
>+ dcbnl_cap_nest, NULL);
> if (ret)
> return ret;
>
>@@ -348,7 +347,7 @@ static int dcbnl_getnumtcs(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EOPNOTSUPP;
>
> ret = nla_parse_nested(data, DCB_NUMTCS_ATTR_MAX, tb[DCB_ATTR_NUMTCS],
>- dcbnl_numtcs_nest);
>+ dcbnl_numtcs_nest, NULL);
> if (ret)
> return ret;
>
>@@ -393,7 +392,7 @@ static int dcbnl_setnumtcs(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EOPNOTSUPP;
>
> ret = nla_parse_nested(data, DCB_NUMTCS_ATTR_MAX, tb[DCB_ATTR_NUMTCS],
>- dcbnl_numtcs_nest);
>+ dcbnl_numtcs_nest, NULL);
> if (ret)
> return ret;
>
>@@ -452,7 +451,7 @@ static int dcbnl_getapp(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EINVAL;
>
> ret = nla_parse_nested(app_tb, DCB_APP_ATTR_MAX, tb[DCB_ATTR_APP],
>- dcbnl_app_nest);
>+ dcbnl_app_nest, NULL);
> if (ret)
> return ret;
>
>@@ -520,7 +519,7 @@ static int dcbnl_setapp(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EINVAL;
>
> ret = nla_parse_nested(app_tb, DCB_APP_ATTR_MAX, tb[DCB_ATTR_APP],
>- dcbnl_app_nest);
>+ dcbnl_app_nest, NULL);
> if (ret)
> return ret;
>
>@@ -577,8 +576,8 @@ static int __dcbnl_pg_getcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> !netdev->dcbnl_ops->getpgbwgcfgrx)
> return -EOPNOTSUPP;
>
>- ret = nla_parse_nested(pg_tb, DCB_PG_ATTR_MAX,
>- tb[DCB_ATTR_PG_CFG], dcbnl_pg_nest);
>+ ret = nla_parse_nested(pg_tb, DCB_PG_ATTR_MAX, tb[DCB_ATTR_PG_CFG],
>+ dcbnl_pg_nest, NULL);
> if (ret)
> return ret;
>
>@@ -597,8 +596,8 @@ static int __dcbnl_pg_getcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> data = pg_tb[DCB_PG_ATTR_TC_ALL];
> else
> data = pg_tb[i];
>- ret = nla_parse_nested(param_tb, DCB_TC_ATTR_PARAM_MAX,
>- data, dcbnl_tc_param_nest);
>+ ret = nla_parse_nested(param_tb, DCB_TC_ATTR_PARAM_MAX, data,
>+ dcbnl_tc_param_nest, NULL);
> if (ret)
> goto err_pg;
>
>@@ -735,8 +734,7 @@ static int dcbnl_setpfccfg(struct net_device *netdev, struct nlmsghdr *nlh,
> return -EOPNOTSUPP;
>
> ret = nla_parse_nested(data, DCB_PFC_UP_ATTR_MAX,
>- tb[DCB_ATTR_PFC_CFG],
>- dcbnl_pfc_up_nest);
>+ tb[DCB_ATTR_PFC_CFG], dcbnl_pfc_up_nest, NULL);
> if (ret)
> return ret;
>
>@@ -791,8 +789,8 @@ static int __dcbnl_pg_setcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> !netdev->dcbnl_ops->setpgbwgcfgrx)
> return -EOPNOTSUPP;
>
>- ret = nla_parse_nested(pg_tb, DCB_PG_ATTR_MAX,
>- tb[DCB_ATTR_PG_CFG], dcbnl_pg_nest);
>+ ret = nla_parse_nested(pg_tb, DCB_PG_ATTR_MAX, tb[DCB_ATTR_PG_CFG],
>+ dcbnl_pg_nest, NULL);
> if (ret)
> return ret;
>
>@@ -801,7 +799,7 @@ static int __dcbnl_pg_setcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> continue;
>
> ret = nla_parse_nested(param_tb, DCB_TC_ATTR_PARAM_MAX,
>- pg_tb[i], dcbnl_tc_param_nest);
>+ pg_tb[i], dcbnl_tc_param_nest, NULL);
> if (ret)
> return ret;
>
>@@ -889,8 +887,8 @@ static int dcbnl_bcn_getcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> !netdev->dcbnl_ops->getbcncfg)
> return -EOPNOTSUPP;
>
>- ret = nla_parse_nested(bcn_tb, DCB_BCN_ATTR_MAX,
>- tb[DCB_ATTR_BCN], dcbnl_bcn_nest);
>+ ret = nla_parse_nested(bcn_tb, DCB_BCN_ATTR_MAX, tb[DCB_ATTR_BCN],
>+ dcbnl_bcn_nest, NULL);
> if (ret)
> return ret;
>
>@@ -948,9 +946,8 @@ static int dcbnl_bcn_setcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> !netdev->dcbnl_ops->setbcnrp)
> return -EOPNOTSUPP;
>
>- ret = nla_parse_nested(data, DCB_BCN_ATTR_MAX,
>- tb[DCB_ATTR_BCN],
>- dcbnl_pfc_up_nest);
>+ ret = nla_parse_nested(data, DCB_BCN_ATTR_MAX, tb[DCB_ATTR_BCN],
>+ dcbnl_pfc_up_nest, NULL);
> if (ret)
> return ret;
>
>@@ -1424,8 +1421,8 @@ static int dcbnl_ieee_set(struct net_device *netdev, struct nlmsghdr *nlh,
> if (!tb[DCB_ATTR_IEEE])
> return -EINVAL;
>
>- err = nla_parse_nested(ieee, DCB_ATTR_IEEE_MAX,
>- tb[DCB_ATTR_IEEE], dcbnl_ieee_policy);
>+ err = nla_parse_nested(ieee, DCB_ATTR_IEEE_MAX, tb[DCB_ATTR_IEEE],
>+ dcbnl_ieee_policy, NULL);
> if (err)
> return err;
>
>@@ -1508,8 +1505,8 @@ static int dcbnl_ieee_del(struct net_device *netdev, struct nlmsghdr *nlh,
> if (!tb[DCB_ATTR_IEEE])
> return -EINVAL;
>
>- err = nla_parse_nested(ieee, DCB_ATTR_IEEE_MAX,
>- tb[DCB_ATTR_IEEE], dcbnl_ieee_policy);
>+ err = nla_parse_nested(ieee, DCB_ATTR_IEEE_MAX, tb[DCB_ATTR_IEEE],
>+ dcbnl_ieee_policy, NULL);
> if (err)
> return err;
>
>@@ -1581,8 +1578,8 @@ static int dcbnl_getfeatcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> if (!tb[DCB_ATTR_FEATCFG])
> return -EINVAL;
>
>- ret = nla_parse_nested(data, DCB_FEATCFG_ATTR_MAX, tb[DCB_ATTR_FEATCFG],
>- dcbnl_featcfg_nest);
>+ ret = nla_parse_nested(data, DCB_FEATCFG_ATTR_MAX,
>+ tb[DCB_ATTR_FEATCFG], dcbnl_featcfg_nest, NULL);
> if (ret)
> return ret;
>
>@@ -1625,8 +1622,8 @@ static int dcbnl_setfeatcfg(struct net_device *netdev, struct nlmsghdr *nlh,
> if (!tb[DCB_ATTR_FEATCFG])
> return -EINVAL;
>
>- ret = nla_parse_nested(data, DCB_FEATCFG_ATTR_MAX, tb[DCB_ATTR_FEATCFG],
>- dcbnl_featcfg_nest);
>+ ret = nla_parse_nested(data, DCB_FEATCFG_ATTR_MAX,
>+ tb[DCB_ATTR_FEATCFG], dcbnl_featcfg_nest, NULL);
>
> if (ret)
> goto err;
>@@ -1715,7 +1712,7 @@ static int dcb_doit(struct sk_buff *skb, struct nlmsghdr *nlh)
> return -EPERM;
>
> ret = nlmsg_parse(nlh, sizeof(*dcb), tb, DCB_ATTR_MAX,
>- dcbnl_rtnl_policy);
>+ dcbnl_rtnl_policy, NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/decnet/dn_dev.c b/net/decnet/dn_dev.c
>index 8fdd9f492b0e..e65f1be44e8e 100644
>--- a/net/decnet/dn_dev.c
>+++ b/net/decnet/dn_dev.c
>@@ -581,7 +581,7 @@ static int dn_nl_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh)
> if (!net_eq(net, &init_net))
> goto errout;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, dn_ifa_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, dn_ifa_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -625,7 +625,7 @@ static int dn_nl_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh)
> if (!net_eq(net, &init_net))
> return -EINVAL;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, dn_ifa_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, dn_ifa_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/decnet/dn_fib.c b/net/decnet/dn_fib.c
>index 7af0ba6157a1..34663bf8aa6d 100644
>--- a/net/decnet/dn_fib.c
>+++ b/net/decnet/dn_fib.c
>@@ -515,7 +515,8 @@ static int dn_fib_rtm_delroute(struct sk_buff *skb, struct nlmsghdr *nlh)
> if (!net_eq(net, &init_net))
> return -EINVAL;
>
>- err = nlmsg_parse(nlh, sizeof(*r), attrs, RTA_MAX, rtm_dn_policy);
>+ err = nlmsg_parse(nlh, sizeof(*r), attrs, RTA_MAX, rtm_dn_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -540,7 +541,8 @@ static int dn_fib_rtm_newroute(struct sk_buff *skb, struct nlmsghdr *nlh)
> if (!net_eq(net, &init_net))
> return -EINVAL;
>
>- err = nlmsg_parse(nlh, sizeof(*r), attrs, RTA_MAX, rtm_dn_policy);
>+ err = nlmsg_parse(nlh, sizeof(*r), attrs, RTA_MAX, rtm_dn_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/decnet/dn_route.c b/net/decnet/dn_route.c
>index b1dc096d22f8..2d7097bbc666 100644
>--- a/net/decnet/dn_route.c
>+++ b/net/decnet/dn_route.c
>@@ -1654,7 +1654,7 @@ static int dn_cache_getroute(struct sk_buff *in_skb, struct nlmsghdr *nlh)
> if (!net_eq(net, &init_net))
> return -EINVAL;
>
>- err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_dn_policy);
>+ err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_dn_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/ieee802154/nl802154.c b/net/ieee802154/nl802154.c
>index fc60cd061f39..d6b1a1b21909 100644
>--- a/net/ieee802154/nl802154.c
>+++ b/net/ieee802154/nl802154.c
>@@ -249,8 +249,7 @@ nl802154_prepare_wpan_dev_dump(struct sk_buff *skb,
> if (!cb->args[0]) {
> err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl802154_fam.hdrsize,
> genl_family_attrbuf(&nl802154_fam),
>- nl802154_fam.maxattr,
>- nl802154_policy);
>+ nl802154_fam.maxattr, nl802154_policy, NULL);
> if (err)
> goto out_unlock;
>
>@@ -562,8 +561,8 @@ static int nl802154_dump_wpan_phy_parse(struct sk_buff *skb,
> struct nl802154_dump_wpan_phy_state *state)
> {
> struct nlattr **tb = genl_family_attrbuf(&nl802154_fam);
>- int ret = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl802154_fam.hdrsize,
>- tb, nl802154_fam.maxattr, nl802154_policy);
>+ int ret = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl802154_fam.hdrsize, tb,
>+ nl802154_fam.maxattr, nl802154_policy, NULL);
>
> /* TODO check if we can handle error here,
> * we have no backward compatibility
>@@ -1308,7 +1307,7 @@ ieee802154_llsec_parse_dev_addr(struct nlattr *nla,
> struct nlattr *attrs[NL802154_DEV_ADDR_ATTR_MAX + 1];
>
> if (!nla || nla_parse_nested(attrs, NL802154_DEV_ADDR_ATTR_MAX, nla,
>- nl802154_dev_addr_policy))
>+ nl802154_dev_addr_policy, NULL))
> return -EINVAL;
>
> if (!attrs[NL802154_DEV_ADDR_ATTR_PAN_ID] ||
>@@ -1348,7 +1347,7 @@ ieee802154_llsec_parse_key_id(struct nlattr *nla,
> struct nlattr *attrs[NL802154_KEY_ID_ATTR_MAX + 1];
>
> if (!nla || nla_parse_nested(attrs, NL802154_KEY_ID_ATTR_MAX, nla,
>- nl802154_key_id_policy))
>+ nl802154_key_id_policy, NULL))
> return -EINVAL;
>
> if (!attrs[NL802154_KEY_ID_ATTR_MODE])
>@@ -1565,7 +1564,7 @@ static int nl802154_add_llsec_key(struct sk_buff *skb, struct genl_info *info)
>
> if (nla_parse_nested(attrs, NL802154_KEY_ATTR_MAX,
> info->attrs[NL802154_ATTR_SEC_KEY],
>- nl802154_key_policy))
>+ nl802154_key_policy, NULL))
> return -EINVAL;
>
> if (!attrs[NL802154_KEY_ATTR_USAGE_FRAMES] ||
>@@ -1615,7 +1614,7 @@ static int nl802154_del_llsec_key(struct sk_buff *skb, struct genl_info *info)
>
> if (nla_parse_nested(attrs, NL802154_KEY_ATTR_MAX,
> info->attrs[NL802154_ATTR_SEC_KEY],
>- nl802154_key_policy))
>+ nl802154_key_policy, NULL))
> return -EINVAL;
>
> if (ieee802154_llsec_parse_key_id(attrs[NL802154_KEY_ATTR_ID], &id) < 0)
>@@ -1729,8 +1728,8 @@ ieee802154_llsec_parse_device(struct nlattr *nla,
> {
> struct nlattr *attrs[NL802154_DEV_ATTR_MAX + 1];
>
>- if (!nla || nla_parse_nested(attrs, NL802154_DEV_ATTR_MAX, nla,
>- nl802154_dev_policy))
>+ if (!nla || nla_parse_nested(attrs, NL802154_DEV_ATTR_MAX,
>+ nla, nl802154_dev_policy, NULL))
> return -EINVAL;
>
> memset(dev, 0, sizeof(*dev));
>@@ -1783,7 +1782,7 @@ static int nl802154_del_llsec_dev(struct sk_buff *skb, struct genl_info *info)
>
> if (nla_parse_nested(attrs, NL802154_DEV_ATTR_MAX,
> info->attrs[NL802154_ATTR_SEC_DEVICE],
>- nl802154_dev_policy))
>+ nl802154_dev_policy, NULL))
> return -EINVAL;
>
> if (!attrs[NL802154_DEV_ATTR_EXTENDED_ADDR])
>@@ -1911,7 +1910,7 @@ static int nl802154_add_llsec_devkey(struct sk_buff *skb, struct genl_info *info
> if (!info->attrs[NL802154_ATTR_SEC_DEVKEY] ||
> nla_parse_nested(attrs, NL802154_DEVKEY_ATTR_MAX,
> info->attrs[NL802154_ATTR_SEC_DEVKEY],
>- nl802154_devkey_policy) < 0)
>+ nl802154_devkey_policy, NULL) < 0)
> return -EINVAL;
>
> if (!attrs[NL802154_DEVKEY_ATTR_FRAME_COUNTER] ||
>@@ -1943,7 +1942,7 @@ static int nl802154_del_llsec_devkey(struct sk_buff *skb, struct genl_info *info
>
> if (nla_parse_nested(attrs, NL802154_DEVKEY_ATTR_MAX,
> info->attrs[NL802154_ATTR_SEC_DEVKEY],
>- nl802154_devkey_policy))
>+ nl802154_devkey_policy, NULL))
> return -EINVAL;
>
> if (!attrs[NL802154_DEVKEY_ATTR_EXTENDED_ADDR])
>@@ -2063,8 +2062,8 @@ llsec_parse_seclevel(struct nlattr *nla, struct ieee802154_llsec_seclevel *sl)
> {
> struct nlattr *attrs[NL802154_SECLEVEL_ATTR_MAX + 1];
>
>- if (!nla || nla_parse_nested(attrs, NL802154_SECLEVEL_ATTR_MAX, nla,
>- nl802154_seclevel_policy))
>+ if (!nla || nla_parse_nested(attrs, NL802154_SECLEVEL_ATTR_MAX,
>+ nla, nl802154_seclevel_policy, NULL))
> return -EINVAL;
>
> memset(sl, 0, sizeof(*sl));
>diff --git a/net/ipv4/devinet.c b/net/ipv4/devinet.c
>index 6d3602ec640c..f33f53791f50 100644
>--- a/net/ipv4/devinet.c
>+++ b/net/ipv4/devinet.c
>@@ -582,7 +582,8 @@ static int inet_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh)
>
> ASSERT_RTNL();
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv4_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv4_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>@@ -752,7 +753,8 @@ static struct in_ifaddr *rtm_to_ifaddr(struct net *net, struct nlmsghdr *nlh,
> struct in_device *in_dev;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv4_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv4_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>@@ -1717,7 +1719,7 @@ static int inet_validate_link_af(const struct net_device *dev,
> if (dev && !__in_dev_get_rtnl(dev))
> return -EAFNOSUPPORT;
>
>- err = nla_parse_nested(tb, IFLA_INET_MAX, nla, inet_af_policy);
>+ err = nla_parse_nested(tb, IFLA_INET_MAX, nla, inet_af_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -1745,7 +1747,7 @@ static int inet_set_link_af(struct net_device *dev, const struct nlattr *nla)
> if (!in_dev)
> return -EAFNOSUPPORT;
>
>- if (nla_parse_nested(tb, IFLA_INET_MAX, nla, NULL) < 0)
>+ if (nla_parse_nested(tb, IFLA_INET_MAX, nla, NULL, NULL) < 0)
> BUG();
>
> if (tb[IFLA_INET_CONF]) {
>@@ -1882,7 +1884,7 @@ static int inet_netconf_get_devconf(struct sk_buff *in_skb,
> int err;
>
> err = nlmsg_parse(nlh, sizeof(*ncm), tb, NETCONFA_MAX,
>- devconf_ipv4_policy);
>+ devconf_ipv4_policy, NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/ipv4/fib_frontend.c b/net/ipv4/fib_frontend.c
>index 8f2133ffc2ff..434dd2538716 100644
>--- a/net/ipv4/fib_frontend.c
>+++ b/net/ipv4/fib_frontend.c
>@@ -632,7 +632,8 @@ static int rtm_to_fib_config(struct net *net, struct sk_buff *skb,
> int err, remaining;
> struct rtmsg *rtm;
>
>- err = nlmsg_validate(nlh, sizeof(*rtm), RTA_MAX, rtm_ipv4_policy);
>+ err = nlmsg_validate(nlh, sizeof(*rtm), RTA_MAX, rtm_ipv4_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/ipv4/ip_tunnel_core.c b/net/ipv4/ip_tunnel_core.c
>index a31f47ccaad9..baf196eaf1d8 100644
>--- a/net/ipv4/ip_tunnel_core.c
>+++ b/net/ipv4/ip_tunnel_core.c
>@@ -235,7 +235,7 @@ static int ip_tun_build_state(struct nlattr *attr,
> struct nlattr *tb[LWTUNNEL_IP_MAX + 1];
> int err;
>
>- err = nla_parse_nested(tb, LWTUNNEL_IP_MAX, attr, ip_tun_policy);
>+ err = nla_parse_nested(tb, LWTUNNEL_IP_MAX, attr, ip_tun_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -332,7 +332,8 @@ static int ip6_tun_build_state(struct nlattr *attr,
> struct nlattr *tb[LWTUNNEL_IP6_MAX + 1];
> int err;
>
>- err = nla_parse_nested(tb, LWTUNNEL_IP6_MAX, attr, ip6_tun_policy);
>+ err = nla_parse_nested(tb, LWTUNNEL_IP6_MAX, attr, ip6_tun_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/ipv4/ipmr.c b/net/ipv4/ipmr.c
>index 5bca64fc71b7..d7be21f2174a 100644
>--- a/net/ipv4/ipmr.c
>+++ b/net/ipv4/ipmr.c
>@@ -2439,7 +2439,8 @@ static int rtm_to_ipmr_mfcc(struct net *net, struct nlmsghdr *nlh,
> struct rtmsg *rtm;
> int ret, rem;
>
>- ret = nlmsg_validate(nlh, sizeof(*rtm), RTA_MAX, rtm_ipmr_policy);
>+ ret = nlmsg_validate(nlh, sizeof(*rtm), RTA_MAX, rtm_ipmr_policy,
>+ NULL);
> if (ret < 0)
> goto out;
> rtm = nlmsg_data(nlh);
>diff --git a/net/ipv4/route.c b/net/ipv4/route.c
>index 5e1e60546fce..a8351ea18db3 100644
>--- a/net/ipv4/route.c
>+++ b/net/ipv4/route.c
>@@ -2649,7 +2649,8 @@ static int inet_rtm_getroute(struct sk_buff *in_skb, struct nlmsghdr *nlh)
> u32 table_id = RT_TABLE_MAIN;
> kuid_t uid;
>
>- err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv4_policy);
>+ err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv4_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c
>index 67ec87ea5fb6..b330c2abcb24 100644
>--- a/net/ipv6/addrconf.c
>+++ b/net/ipv6/addrconf.c
>@@ -624,7 +624,7 @@ static int inet6_netconf_get_devconf(struct sk_buff *in_skb,
> int err;
>
> err = nlmsg_parse(nlh, sizeof(*ncm), tb, NETCONFA_MAX,
>- devconf_ipv6_policy);
>+ devconf_ipv6_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -4408,7 +4408,8 @@ inet6_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh)
> u32 ifa_flags;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -4520,7 +4521,8 @@ inet6_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh)
> u32 ifa_flags;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -4881,7 +4883,8 @@ static int inet6_rtm_getaddr(struct sk_buff *in_skb, struct nlmsghdr *nlh)
> struct sk_buff *skb;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>@@ -5251,7 +5254,8 @@ static int inet6_validate_link_af(const struct net_device *dev,
> if (dev && !__in6_dev_get(dev))
> return -EAFNOSUPPORT;
>
>- return nla_parse_nested(tb, IFLA_INET6_MAX, nla, inet6_af_policy);
>+ return nla_parse_nested(tb, IFLA_INET6_MAX, nla, inet6_af_policy,
>+ NULL);
> }
>
> static int check_addr_gen_mode(int mode)
>@@ -5283,7 +5287,7 @@ static int inet6_set_link_af(struct net_device *dev, const struct nlattr *nla)
> if (!idev)
> return -EAFNOSUPPORT;
>
>- if (nla_parse_nested(tb, IFLA_INET6_MAX, nla, NULL) < 0)
>+ if (nla_parse_nested(tb, IFLA_INET6_MAX, nla, NULL, NULL) < 0)
> BUG();
>
> if (tb[IFLA_INET6_TOKEN]) {
>diff --git a/net/ipv6/addrlabel.c b/net/ipv6/addrlabel.c
>index a8f6986dcbe5..6cb4ed91722a 100644
>--- a/net/ipv6/addrlabel.c
>+++ b/net/ipv6/addrlabel.c
>@@ -413,7 +413,7 @@ static int ip6addrlbl_newdel(struct sk_buff *skb, struct nlmsghdr *nlh)
> u32 label;
> int err = 0;
>
>- err = nlmsg_parse(nlh, sizeof(*ifal), tb, IFAL_MAX, ifal_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifal), tb, IFAL_MAX, ifal_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -532,7 +532,7 @@ static int ip6addrlbl_get(struct sk_buff *in_skb, struct nlmsghdr *nlh)
> struct ip6addrlbl_entry *p;
> struct sk_buff *skb;
>
>- err = nlmsg_parse(nlh, sizeof(*ifal), tb, IFAL_MAX, ifal_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifal), tb, IFAL_MAX, ifal_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/ipv6/ila/ila_lwt.c b/net/ipv6/ila/ila_lwt.c
>index ce1aae4a7fc8..b3df03e3faa0 100644
>--- a/net/ipv6/ila/ila_lwt.c
>+++ b/net/ipv6/ila/ila_lwt.c
>@@ -146,8 +146,7 @@ static int ila_build_state(struct nlattr *nla,
> return -EINVAL;
> }
>
>- ret = nla_parse_nested(tb, ILA_ATTR_MAX, nla,
>- ila_nl_policy);
>+ ret = nla_parse_nested(tb, ILA_ATTR_MAX, nla, ila_nl_policy, NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/ipv6/route.c b/net/ipv6/route.c
>index 9db1418993f2..ccde23eba702 100644
>--- a/net/ipv6/route.c
>+++ b/net/ipv6/route.c
>@@ -2906,7 +2906,8 @@ static int rtm_to_fib6_config(struct sk_buff *skb, struct nlmsghdr *nlh,
> unsigned int pref;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy);
>+ err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>@@ -3574,7 +3575,8 @@ static int inet6_rtm_getroute(struct sk_buff *in_skb, struct nlmsghdr *nlh)
> struct flowi6 fl6;
> int err, iif = 0, oif = 0;
>
>- err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy);
>+ err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_ipv6_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/ipv6/seg6_iptunnel.c b/net/ipv6/seg6_iptunnel.c
>index a644aaecdfd3..7436a4a62f3e 100644
>--- a/net/ipv6/seg6_iptunnel.c
>+++ b/net/ipv6/seg6_iptunnel.c
>@@ -328,7 +328,7 @@ static int seg6_build_state(struct nlattr *nla,
> int err;
>
> err = nla_parse_nested(tb, SEG6_IPTUNNEL_MAX, nla,
>- seg6_iptunnel_policy);
>+ seg6_iptunnel_policy, NULL);
>
> if (err < 0)
> return err;
>diff --git a/net/mpls/af_mpls.c b/net/mpls/af_mpls.c
>index 5928d22ba9c8..07181d2273e1 100644
>--- a/net/mpls/af_mpls.c
>+++ b/net/mpls/af_mpls.c
>@@ -1122,7 +1122,7 @@ static int mpls_netconf_get_devconf(struct sk_buff *in_skb,
> int err;
>
> err = nlmsg_parse(nlh, sizeof(*ncm), tb, NETCONFA_MAX,
>- devconf_mpls_policy);
>+ devconf_mpls_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -1643,7 +1643,8 @@ static int rtm_to_route_config(struct sk_buff *skb, struct nlmsghdr *nlh,
> int index;
> int err;
>
>- err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_mpls_policy);
>+ err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_mpls_policy,
>+ NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/mpls/mpls_iptunnel.c b/net/mpls/mpls_iptunnel.c
>index fe00e98667cf..369c7a23c86c 100644
>--- a/net/mpls/mpls_iptunnel.c
>+++ b/net/mpls/mpls_iptunnel.c
>@@ -168,7 +168,7 @@ static int mpls_build_state(struct nlattr *nla,
> int ret;
>
> ret = nla_parse_nested(tb, MPLS_IPTUNNEL_MAX, nla,
>- mpls_iptunnel_policy);
>+ mpls_iptunnel_policy, NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset/ip_set_core.c
>index 26356bf8cebf..9bd5b6636181 100644
>--- a/net/netfilter/ipset/ip_set_core.c
>+++ b/net/netfilter/ipset/ip_set_core.c
>@@ -295,7 +295,8 @@ ip_set_get_ipaddr4(struct nlattr *nla, __be32 *ipaddr)
>
> if (unlikely(!flag_nested(nla)))
> return -IPSET_ERR_PROTOCOL;
>- if (nla_parse_nested(tb, IPSET_ATTR_IPADDR_MAX, nla, ipaddr_policy))
>+ if (nla_parse_nested(tb, IPSET_ATTR_IPADDR_MAX, nla,
>+ ipaddr_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
> if (unlikely(!ip_set_attr_netorder(tb, IPSET_ATTR_IPADDR_IPV4)))
> return -IPSET_ERR_PROTOCOL;
>@@ -313,7 +314,8 @@ ip_set_get_ipaddr6(struct nlattr *nla, union nf_inet_addr *ipaddr)
> if (unlikely(!flag_nested(nla)))
> return -IPSET_ERR_PROTOCOL;
>
>- if (nla_parse_nested(tb, IPSET_ATTR_IPADDR_MAX, nla, ipaddr_policy))
>+ if (nla_parse_nested(tb, IPSET_ATTR_IPADDR_MAX, nla,
>+ ipaddr_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
> if (unlikely(!ip_set_attr_netorder(tb, IPSET_ATTR_IPADDR_IPV6)))
> return -IPSET_ERR_PROTOCOL;
>@@ -906,7 +908,7 @@ static int ip_set_create(struct net *net, struct sock *ctnl,
> /* Without holding any locks, create private part. */
> if (attr[IPSET_ATTR_DATA] &&
> nla_parse_nested(tb, IPSET_ATTR_CREATE_MAX, attr[IPSET_ATTR_DATA],
>- set->type->create_policy)) {
>+ set->type->create_policy, NULL)) {
> ret = -IPSET_ERR_PROTOCOL;
> goto put_out;
> }
>@@ -1257,8 +1259,8 @@ dump_init(struct netlink_callback *cb, struct ip_set_net *inst)
> ip_set_id_t index;
>
> /* Second pass, so parser can't fail */
>- nla_parse(cda, IPSET_ATTR_CMD_MAX,
>- attr, nlh->nlmsg_len - min_len, ip_set_setname_policy);
>+ nla_parse(cda, IPSET_ATTR_CMD_MAX, attr, nlh->nlmsg_len - min_len,
>+ ip_set_setname_policy, NULL);
>
> if (cda[IPSET_ATTR_SETNAME]) {
> struct ip_set *set;
>@@ -1501,9 +1503,8 @@ call_ad(struct sock *ctnl, struct sk_buff *skb, struct ip_set *set,
> memcpy(&errmsg->msg, nlh, nlh->nlmsg_len);
> cmdattr = (void *)&errmsg->msg + min_len;
>
>- nla_parse(cda, IPSET_ATTR_CMD_MAX,
>- cmdattr, nlh->nlmsg_len - min_len,
>- ip_set_adt_policy);
>+ nla_parse(cda, IPSET_ATTR_CMD_MAX, cmdattr,
>+ nlh->nlmsg_len - min_len, ip_set_adt_policy, NULL);
>
> errline = nla_data(cda[IPSET_ATTR_LINENO]);
>
>@@ -1549,7 +1550,7 @@ static int ip_set_uadd(struct net *net, struct sock *ctnl, struct sk_buff *skb,
> if (attr[IPSET_ATTR_DATA]) {
> if (nla_parse_nested(tb, IPSET_ATTR_ADT_MAX,
> attr[IPSET_ATTR_DATA],
>- set->type->adt_policy))
>+ set->type->adt_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
> ret = call_ad(ctnl, skb, set, tb, IPSET_ADD, flags,
> use_lineno);
>@@ -1561,7 +1562,7 @@ static int ip_set_uadd(struct net *net, struct sock *ctnl, struct sk_buff *skb,
> if (nla_type(nla) != IPSET_ATTR_DATA ||
> !flag_nested(nla) ||
> nla_parse_nested(tb, IPSET_ATTR_ADT_MAX, nla,
>- set->type->adt_policy))
>+ set->type->adt_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
> ret = call_ad(ctnl, skb, set, tb, IPSET_ADD,
> flags, use_lineno);
>@@ -1603,7 +1604,7 @@ static int ip_set_udel(struct net *net, struct sock *ctnl, struct sk_buff *skb,
> if (attr[IPSET_ATTR_DATA]) {
> if (nla_parse_nested(tb, IPSET_ATTR_ADT_MAX,
> attr[IPSET_ATTR_DATA],
>- set->type->adt_policy))
>+ set->type->adt_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
> ret = call_ad(ctnl, skb, set, tb, IPSET_DEL, flags,
> use_lineno);
>@@ -1615,7 +1616,7 @@ static int ip_set_udel(struct net *net, struct sock *ctnl, struct sk_buff *skb,
> if (nla_type(nla) != IPSET_ATTR_DATA ||
> !flag_nested(nla) ||
> nla_parse_nested(tb, IPSET_ATTR_ADT_MAX, nla,
>- set->type->adt_policy))
>+ set->type->adt_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
> ret = call_ad(ctnl, skb, set, tb, IPSET_DEL,
> flags, use_lineno);
>@@ -1646,7 +1647,7 @@ static int ip_set_utest(struct net *net, struct sock *ctnl, struct sk_buff *skb,
> return -ENOENT;
>
> if (nla_parse_nested(tb, IPSET_ATTR_ADT_MAX, attr[IPSET_ATTR_DATA],
>- set->type->adt_policy))
>+ set->type->adt_policy, NULL))
> return -IPSET_ERR_PROTOCOL;
>
> rcu_read_lock_bh();
>diff --git a/net/netfilter/ipvs/ip_vs_ctl.c b/net/netfilter/ipvs/ip_vs_ctl.c
>index 541aa7694775..adb7ee142c5f 100644
>--- a/net/netfilter/ipvs/ip_vs_ctl.c
>+++ b/net/netfilter/ipvs/ip_vs_ctl.c
>@@ -3089,7 +3089,8 @@ static int ip_vs_genl_parse_service(struct netns_ipvs *ipvs,
>
> /* Parse mandatory identifying service fields first */
> if (nla == NULL ||
>- nla_parse_nested(attrs, IPVS_SVC_ATTR_MAX, nla, ip_vs_svc_policy))
>+ nla_parse_nested(attrs, IPVS_SVC_ATTR_MAX, nla,
>+ ip_vs_svc_policy, NULL))
> return -EINVAL;
>
> nla_af = attrs[IPVS_SVC_ATTR_AF];
>@@ -3251,8 +3252,8 @@ static int ip_vs_genl_dump_dests(struct sk_buff *skb,
> mutex_lock(&__ip_vs_mutex);
>
> /* Try to find the service for which to dump destinations */
>- if (nlmsg_parse(cb->nlh, GENL_HDRLEN, attrs,
>- IPVS_CMD_ATTR_MAX, ip_vs_cmd_policy))
>+ if (nlmsg_parse(cb->nlh, GENL_HDRLEN, attrs, IPVS_CMD_ATTR_MAX,
>+ ip_vs_cmd_policy, NULL))
> goto out_err;
>
>
>@@ -3288,7 +3289,8 @@ static int ip_vs_genl_parse_dest(struct ip_vs_dest_user_kern *udest,
>
> /* Parse mandatory identifying destination fields first */
> if (nla == NULL ||
>- nla_parse_nested(attrs, IPVS_DEST_ATTR_MAX, nla, ip_vs_dest_policy))
>+ nla_parse_nested(attrs, IPVS_DEST_ATTR_MAX, nla,
>+ ip_vs_dest_policy, NULL))
> return -EINVAL;
>
> nla_addr = attrs[IPVS_DEST_ATTR_ADDR];
>@@ -3530,7 +3532,7 @@ static int ip_vs_genl_set_daemon(struct sk_buff *skb, struct genl_info *info)
> if (!info->attrs[IPVS_CMD_ATTR_DAEMON] ||
> nla_parse_nested(daemon_attrs, IPVS_DAEMON_ATTR_MAX,
> info->attrs[IPVS_CMD_ATTR_DAEMON],
>- ip_vs_daemon_policy))
>+ ip_vs_daemon_policy, NULL))
> goto out;
>
> if (cmd == IPVS_CMD_NEW_DAEMON)
>diff --git a/net/netfilter/nf_conntrack_netlink.c b/net/netfilter/nf_conntrack_netlink.c
>index ecdc324c7785..ace824ab2e03 100644
>--- a/net/netfilter/nf_conntrack_netlink.c
>+++ b/net/netfilter/nf_conntrack_netlink.c
>@@ -908,7 +908,7 @@ static int ctnetlink_parse_tuple_ip(struct nlattr *attr,
> struct nf_conntrack_l3proto *l3proto;
> int ret = 0;
>
>- ret = nla_parse_nested(tb, CTA_IP_MAX, attr, NULL);
>+ ret = nla_parse_nested(tb, CTA_IP_MAX, attr, NULL, NULL);
> if (ret < 0)
> return ret;
>
>@@ -917,7 +917,7 @@ static int ctnetlink_parse_tuple_ip(struct nlattr *attr,
>
> if (likely(l3proto->nlattr_to_tuple)) {
> ret = nla_validate_nested(attr, CTA_IP_MAX,
>- l3proto->nla_policy);
>+ l3proto->nla_policy, NULL);
> if (ret == 0)
> ret = l3proto->nlattr_to_tuple(tb, tuple);
> }
>@@ -938,7 +938,8 @@ static int ctnetlink_parse_tuple_proto(struct nlattr *attr,
> struct nf_conntrack_l4proto *l4proto;
> int ret = 0;
>
>- ret = nla_parse_nested(tb, CTA_PROTO_MAX, attr, proto_nla_policy);
>+ ret = nla_parse_nested(tb, CTA_PROTO_MAX, attr, proto_nla_policy,
>+ NULL);
> if (ret < 0)
> return ret;
>
>@@ -951,7 +952,7 @@ static int ctnetlink_parse_tuple_proto(struct nlattr *attr,
>
> if (likely(l4proto->nlattr_to_tuple)) {
> ret = nla_validate_nested(attr, CTA_PROTO_MAX,
>- l4proto->nla_policy);
>+ l4proto->nla_policy, NULL);
> if (ret == 0)
> ret = l4proto->nlattr_to_tuple(tb, tuple);
> }
>@@ -1015,7 +1016,8 @@ ctnetlink_parse_tuple(const struct nlattr * const cda[],
>
> memset(tuple, 0, sizeof(*tuple));
>
>- err = nla_parse_nested(tb, CTA_TUPLE_MAX, cda[type], tuple_nla_policy);
>+ err = nla_parse_nested(tb, CTA_TUPLE_MAX, cda[type], tuple_nla_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -1065,7 +1067,7 @@ static int ctnetlink_parse_help(const struct nlattr *attr, char **helper_name,
> int err;
> struct nlattr *tb[CTA_HELP_MAX+1];
>
>- err = nla_parse_nested(tb, CTA_HELP_MAX, attr, help_nla_policy);
>+ err = nla_parse_nested(tb, CTA_HELP_MAX, attr, help_nla_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -1566,7 +1568,8 @@ static int ctnetlink_change_protoinfo(struct nf_conn *ct,
> struct nf_conntrack_l4proto *l4proto;
> int err = 0;
>
>- err = nla_parse_nested(tb, CTA_PROTOINFO_MAX, attr, protoinfo_policy);
>+ err = nla_parse_nested(tb, CTA_PROTOINFO_MAX, attr, protoinfo_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -1591,7 +1594,7 @@ static int change_seq_adj(struct nf_ct_seqadj *seq,
> int err;
> struct nlattr *cda[CTA_SEQADJ_MAX+1];
>
>- err = nla_parse_nested(cda, CTA_SEQADJ_MAX, attr, seqadj_policy);
>+ err = nla_parse_nested(cda, CTA_SEQADJ_MAX, attr, seqadj_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -2348,7 +2351,7 @@ ctnetlink_glue_parse(const struct nlattr *attr, struct nf_conn *ct)
> struct nlattr *cda[CTA_MAX+1];
> int ret;
>
>- ret = nla_parse_nested(cda, CTA_MAX, attr, ct_nla_policy);
>+ ret = nla_parse_nested(cda, CTA_MAX, attr, ct_nla_policy, NULL);
> if (ret < 0)
> return ret;
>
>@@ -2385,7 +2388,8 @@ ctnetlink_glue_attach_expect(const struct nlattr *attr, struct nf_conn *ct,
> struct nf_conntrack_expect *exp;
> int err;
>
>- err = nla_parse_nested(cda, CTA_EXPECT_MAX, attr, exp_nla_policy);
>+ err = nla_parse_nested(cda, CTA_EXPECT_MAX, attr, exp_nla_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -3004,7 +3008,8 @@ ctnetlink_parse_expect_nat(const struct nlattr *attr,
> struct nf_conntrack_tuple nat_tuple = {};
> int err;
>
>- err = nla_parse_nested(tb, CTA_EXPECT_NAT_MAX, attr, exp_nat_nla_policy);
>+ err = nla_parse_nested(tb, CTA_EXPECT_NAT_MAX, attr,
>+ exp_nat_nla_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nf_conntrack_proto_dccp.c b/net/netfilter/nf_conntrack_proto_dccp.c
>index 93dd1c5b7bff..b2e02dfe7fa8 100644
>--- a/net/netfilter/nf_conntrack_proto_dccp.c
>+++ b/net/netfilter/nf_conntrack_proto_dccp.c
>@@ -665,7 +665,7 @@ static int nlattr_to_dccp(struct nlattr *cda[], struct nf_conn *ct)
> return 0;
>
> err = nla_parse_nested(tb, CTA_PROTOINFO_DCCP_MAX, attr,
>- dccp_nla_policy);
>+ dccp_nla_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nf_conntrack_proto_sctp.c b/net/netfilter/nf_conntrack_proto_sctp.c
>index 33279aab583d..2a7300587c87 100644
>--- a/net/netfilter/nf_conntrack_proto_sctp.c
>+++ b/net/netfilter/nf_conntrack_proto_sctp.c
>@@ -584,10 +584,8 @@ static int nlattr_to_sctp(struct nlattr *cda[], struct nf_conn *ct)
> if (!attr)
> return 0;
>
>- err = nla_parse_nested(tb,
>- CTA_PROTOINFO_SCTP_MAX,
>- attr,
>- sctp_nla_policy);
>+ err = nla_parse_nested(tb, CTA_PROTOINFO_SCTP_MAX, attr,
>+ sctp_nla_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nf_conntrack_proto_tcp.c b/net/netfilter/nf_conntrack_proto_tcp.c
>index b122e9dacfed..85bde77ad967 100644
>--- a/net/netfilter/nf_conntrack_proto_tcp.c
>+++ b/net/netfilter/nf_conntrack_proto_tcp.c
>@@ -1234,7 +1234,8 @@ static int nlattr_to_tcp(struct nlattr *cda[], struct nf_conn *ct)
> if (!pattr)
> return 0;
>
>- err = nla_parse_nested(tb, CTA_PROTOINFO_TCP_MAX, pattr, tcp_nla_policy);
>+ err = nla_parse_nested(tb, CTA_PROTOINFO_TCP_MAX, pattr,
>+ tcp_nla_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nf_nat_core.c b/net/netfilter/nf_nat_core.c
>index 82802e4a6640..908ba5abbc0b 100644
>--- a/net/netfilter/nf_nat_core.c
>+++ b/net/netfilter/nf_nat_core.c
>@@ -751,7 +751,8 @@ static int nfnetlink_parse_nat_proto(struct nlattr *attr,
> const struct nf_nat_l4proto *l4proto;
> int err;
>
>- err = nla_parse_nested(tb, CTA_PROTONAT_MAX, attr, protonat_nla_policy);
>+ err = nla_parse_nested(tb, CTA_PROTONAT_MAX, attr,
>+ protonat_nla_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -780,7 +781,7 @@ nfnetlink_parse_nat(const struct nlattr *nat,
>
> memset(range, 0, sizeof(*range));
>
>- err = nla_parse_nested(tb, CTA_NAT_MAX, nat, nat_nla_policy);
>+ err = nla_parse_nested(tb, CTA_NAT_MAX, nat, nat_nla_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
>index 2d822d2fd830..907431318637 100644
>--- a/net/netfilter/nf_tables_api.c
>+++ b/net/netfilter/nf_tables_api.c
>@@ -1182,7 +1182,8 @@ static struct nft_stats __percpu *nft_stats_alloc(const struct nlattr *attr)
> struct nft_stats *stats;
> int err;
>
>- err = nla_parse_nested(tb, NFTA_COUNTER_MAX, attr, nft_counter_policy);
>+ err = nla_parse_nested(tb, NFTA_COUNTER_MAX, attr, nft_counter_policy,
>+ NULL);
> if (err < 0)
> return ERR_PTR(err);
>
>@@ -1257,7 +1258,7 @@ static int nft_chain_parse_hook(struct net *net,
> int err;
>
> err = nla_parse_nested(ha, NFTA_HOOK_MAX, nla[NFTA_CHAIN_HOOK],
>- nft_hook_policy);
>+ nft_hook_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -1724,7 +1725,7 @@ static int nf_tables_expr_parse(const struct nft_ctx *ctx,
> struct nlattr *tb[NFTA_EXPR_MAX + 1];
> int err;
>
>- err = nla_parse_nested(tb, NFTA_EXPR_MAX, nla, nft_expr_policy);
>+ err = nla_parse_nested(tb, NFTA_EXPR_MAX, nla, nft_expr_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -1734,7 +1735,7 @@ static int nf_tables_expr_parse(const struct nft_ctx *ctx,
>
> if (tb[NFTA_EXPR_DATA]) {
> err = nla_parse_nested(info->tb, type->maxattr,
>- tb[NFTA_EXPR_DATA], type->policy);
>+ tb[NFTA_EXPR_DATA], type->policy, NULL);
> if (err < 0)
> goto err1;
> } else
>@@ -2879,7 +2880,8 @@ static int nf_tables_set_desc_parse(const struct nft_ctx *ctx,
> struct nlattr *da[NFTA_SET_DESC_MAX + 1];
> int err;
>
>- err = nla_parse_nested(da, NFTA_SET_DESC_MAX, nla, nft_set_desc_policy);
>+ err = nla_parse_nested(da, NFTA_SET_DESC_MAX, nla,
>+ nft_set_desc_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -3381,7 +3383,8 @@ static int nf_tables_dump_set(struct sk_buff *skb, struct netlink_callback *cb)
> int event, err;
>
> err = nlmsg_parse(cb->nlh, sizeof(struct nfgenmsg), nla,
>- NFTA_SET_ELEM_LIST_MAX, nft_set_elem_list_policy);
>+ NFTA_SET_ELEM_LIST_MAX, nft_set_elem_list_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -3640,7 +3643,7 @@ static int nft_add_set_elem(struct nft_ctx *ctx, struct nft_set *set,
> int err;
>
> err = nla_parse_nested(nla, NFTA_SET_ELEM_MAX, attr,
>- nft_set_elem_policy);
>+ nft_set_elem_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -3870,7 +3873,7 @@ static int nft_del_setelem(struct nft_ctx *ctx, struct nft_set *set,
> int err;
>
> err = nla_parse_nested(nla, NFTA_SET_ELEM_MAX, attr,
>- nft_set_elem_policy);
>+ nft_set_elem_policy, NULL);
> if (err < 0)
> goto err1;
>
>@@ -4101,7 +4104,8 @@ static struct nft_object *nft_obj_init(const struct nft_ctx *ctx,
> int err;
>
> if (attr) {
>- err = nla_parse_nested(tb, type->maxattr, attr, type->policy);
>+ err = nla_parse_nested(tb, type->maxattr, attr, type->policy,
>+ NULL);
> if (err < 0)
> goto err1;
> } else {
>@@ -5314,7 +5318,8 @@ static int nft_verdict_init(const struct nft_ctx *ctx, struct nft_data *data,
> struct nft_chain *chain;
> int err;
>
>- err = nla_parse_nested(tb, NFTA_VERDICT_MAX, nla, nft_verdict_policy);
>+ err = nla_parse_nested(tb, NFTA_VERDICT_MAX, nla, nft_verdict_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -5444,7 +5449,7 @@ int nft_data_init(const struct nft_ctx *ctx,
> struct nlattr *tb[NFTA_DATA_MAX + 1];
> int err;
>
>- err = nla_parse_nested(tb, NFTA_DATA_MAX, nla, nft_data_policy);
>+ err = nla_parse_nested(tb, NFTA_DATA_MAX, nla, nft_data_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nfnetlink.c b/net/netfilter/nfnetlink.c
>index 181d3bb800e6..792def00a07d 100644
>--- a/net/netfilter/nfnetlink.c
>+++ b/net/netfilter/nfnetlink.c
>@@ -192,8 +192,8 @@ static int nfnetlink_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh,
> int attrlen = nlh->nlmsg_len - min_len;
> __u8 subsys_id = NFNL_SUBSYS_ID(type);
>
>- err = nla_parse(cda, ss->cb[cb_id].attr_count,
>- attr, attrlen, ss->cb[cb_id].policy);
>+ err = nla_parse(cda, ss->cb[cb_id].attr_count, attr, attrlen,
>+ ss->cb[cb_id].policy, NULL);
> if (err < 0) {
> rcu_read_unlock();
> return err;
>@@ -377,8 +377,8 @@ static void nfnetlink_rcv_batch(struct sk_buff *skb, struct nlmsghdr *nlh,
> struct nlattr *attr = (void *)nlh + min_len;
> int attrlen = nlh->nlmsg_len - min_len;
>
>- err = nla_parse(cda, ss->cb[cb_id].attr_count,
>- attr, attrlen, ss->cb[cb_id].policy);
>+ err = nla_parse(cda, ss->cb[cb_id].attr_count, attr,
>+ attrlen, ss->cb[cb_id].policy, NULL);
> if (err < 0)
> goto ack;
>
>@@ -467,7 +467,8 @@ static void nfnetlink_rcv_skb_batch(struct sk_buff *skb, struct nlmsghdr *nlh)
> skb->len < NLMSG_HDRLEN + sizeof(struct nfgenmsg))
> return;
>
>- err = nla_parse(cda, NFNL_BATCH_MAX, attr, attrlen, nfnl_batch_policy);
>+ err = nla_parse(cda, NFNL_BATCH_MAX, attr, attrlen, nfnl_batch_policy,
>+ NULL);
> if (err < 0) {
> netlink_ack(skb, nlh, err, NULL);
> return;
>diff --git a/net/netfilter/nfnetlink_acct.c b/net/netfilter/nfnetlink_acct.c
>index c86da174a5fc..2837d5fb98bd 100644
>--- a/net/netfilter/nfnetlink_acct.c
>+++ b/net/netfilter/nfnetlink_acct.c
>@@ -244,7 +244,8 @@ nfacct_filter_alloc(const struct nlattr * const attr)
> struct nlattr *tb[NFACCT_FILTER_MAX + 1];
> int err;
>
>- err = nla_parse_nested(tb, NFACCT_FILTER_MAX, attr, filter_policy);
>+ err = nla_parse_nested(tb, NFACCT_FILTER_MAX, attr, filter_policy,
>+ NULL);
> if (err < 0)
> return ERR_PTR(err);
>
>diff --git a/net/netfilter/nfnetlink_cthelper.c b/net/netfilter/nfnetlink_cthelper.c
>index d45558178da5..5b6c68311566 100644
>--- a/net/netfilter/nfnetlink_cthelper.c
>+++ b/net/netfilter/nfnetlink_cthelper.c
>@@ -77,7 +77,8 @@ nfnl_cthelper_parse_tuple(struct nf_conntrack_tuple *tuple,
> int err;
> struct nlattr *tb[NFCTH_TUPLE_MAX+1];
>
>- err = nla_parse_nested(tb, NFCTH_TUPLE_MAX, attr, nfnl_cthelper_tuple_pol);
>+ err = nla_parse_nested(tb, NFCTH_TUPLE_MAX, attr,
>+ nfnl_cthelper_tuple_pol, NULL);
> if (err < 0)
> return err;
>
>@@ -137,7 +138,8 @@ nfnl_cthelper_expect_policy(struct nf_conntrack_expect_policy *expect_policy,
> int err;
> struct nlattr *tb[NFCTH_POLICY_MAX+1];
>
>- err = nla_parse_nested(tb, NFCTH_POLICY_MAX, attr, nfnl_cthelper_expect_pol);
>+ err = nla_parse_nested(tb, NFCTH_POLICY_MAX, attr,
>+ nfnl_cthelper_expect_pol, NULL);
> if (err < 0)
> return err;
>
>@@ -171,7 +173,7 @@ nfnl_cthelper_parse_expect_policy(struct nf_conntrack_helper *helper,
> unsigned int class_max;
>
> ret = nla_parse_nested(tb, NFCTH_POLICY_SET_MAX, attr,
>- nfnl_cthelper_expect_policy_set);
>+ nfnl_cthelper_expect_policy_set, NULL);
> if (ret < 0)
> return ret;
>
>@@ -276,7 +278,7 @@ nfnl_cthelper_update_policy_one(const struct nf_conntrack_expect_policy *policy,
> int err;
>
> err = nla_parse_nested(tb, NFCTH_POLICY_MAX, attr,
>- nfnl_cthelper_expect_pol);
>+ nfnl_cthelper_expect_pol, NULL);
> if (err < 0)
> return err;
>
>@@ -336,7 +338,7 @@ static int nfnl_cthelper_update_policy(struct nf_conntrack_helper *helper,
> int err;
>
> err = nla_parse_nested(tb, NFCTH_POLICY_SET_MAX, attr,
>- nfnl_cthelper_expect_policy_set);
>+ nfnl_cthelper_expect_policy_set, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nfnetlink_cttimeout.c b/net/netfilter/nfnetlink_cttimeout.c
>index 57c2cdf7b691..0a3510e7e396 100644
>--- a/net/netfilter/nfnetlink_cttimeout.c
>+++ b/net/netfilter/nfnetlink_cttimeout.c
>@@ -56,7 +56,8 @@ ctnl_timeout_parse_policy(void *timeouts, struct nf_conntrack_l4proto *l4proto,
> struct nlattr *tb[l4proto->ctnl_timeout.nlattr_max+1];
>
> ret = nla_parse_nested(tb, l4proto->ctnl_timeout.nlattr_max,
>- attr, l4proto->ctnl_timeout.nla_policy);
>+ attr, l4proto->ctnl_timeout.nla_policy,
>+ NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/netfilter/nfnetlink_queue.c b/net/netfilter/nfnetlink_queue.c
>index 933509ebf3d3..3be6fef30581 100644
>--- a/net/netfilter/nfnetlink_queue.c
>+++ b/net/netfilter/nfnetlink_queue.c
>@@ -1109,7 +1109,7 @@ static int nfqa_parse_bridge(struct nf_queue_entry *entry,
> int err;
>
> err = nla_parse_nested(tb, NFQA_VLAN_MAX, nfqa[NFQA_VLAN],
>- nfqa_vlan_policy);
>+ nfqa_vlan_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netfilter/nft_compat.c b/net/netfilter/nft_compat.c
>index fab6bf3f955e..d76d0f36799f 100644
>--- a/net/netfilter/nft_compat.c
>+++ b/net/netfilter/nft_compat.c
>@@ -200,7 +200,7 @@ static int nft_parse_compat(const struct nlattr *attr, u16 *proto, bool *inv)
> int err;
>
> err = nla_parse_nested(tb, NFTA_RULE_COMPAT_MAX, attr,
>- nft_rule_compat_policy);
>+ nft_rule_compat_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/netlabel/netlabel_cipso_v4.c b/net/netlabel/netlabel_cipso_v4.c
>index 4149d3e63589..9aacf2da3d98 100644
>--- a/net/netlabel/netlabel_cipso_v4.c
>+++ b/net/netlabel/netlabel_cipso_v4.c
>@@ -101,7 +101,7 @@ static int netlbl_cipsov4_add_common(struct genl_info *info,
>
> if (nla_validate_nested(info->attrs[NLBL_CIPSOV4_A_TAGLST],
> NLBL_CIPSOV4_A_MAX,
>- netlbl_cipsov4_genl_policy) != 0)
>+ netlbl_cipsov4_genl_policy, NULL) != 0)
> return -EINVAL;
>
> nla_for_each_nested(nla, info->attrs[NLBL_CIPSOV4_A_TAGLST], nla_rem)
>@@ -148,7 +148,7 @@ static int netlbl_cipsov4_add_std(struct genl_info *info,
>
> if (nla_validate_nested(info->attrs[NLBL_CIPSOV4_A_MLSLVLLST],
> NLBL_CIPSOV4_A_MAX,
>- netlbl_cipsov4_genl_policy) != 0)
>+ netlbl_cipsov4_genl_policy, NULL) != 0)
> return -EINVAL;
>
> doi_def = kmalloc(sizeof(*doi_def), GFP_KERNEL);
>@@ -170,10 +170,10 @@ static int netlbl_cipsov4_add_std(struct genl_info *info,
> info->attrs[NLBL_CIPSOV4_A_MLSLVLLST],
> nla_a_rem)
> if (nla_type(nla_a) == NLBL_CIPSOV4_A_MLSLVL) {
>- if (nla_validate_nested(nla_a,
>- NLBL_CIPSOV4_A_MAX,
>- netlbl_cipsov4_genl_policy) != 0)
>- goto add_std_failure;
>+ if (nla_validate_nested(nla_a, NLBL_CIPSOV4_A_MAX,
>+ netlbl_cipsov4_genl_policy,
>+ NULL) != 0)
>+ goto add_std_failure;
> nla_for_each_nested(nla_b, nla_a, nla_b_rem)
> switch (nla_type(nla_b)) {
> case NLBL_CIPSOV4_A_MLSLVLLOC:
>@@ -236,7 +236,7 @@ static int netlbl_cipsov4_add_std(struct genl_info *info,
> if (info->attrs[NLBL_CIPSOV4_A_MLSCATLST]) {
> if (nla_validate_nested(info->attrs[NLBL_CIPSOV4_A_MLSCATLST],
> NLBL_CIPSOV4_A_MAX,
>- netlbl_cipsov4_genl_policy) != 0)
>+ netlbl_cipsov4_genl_policy, NULL) != 0)
> goto add_std_failure;
>
> nla_for_each_nested(nla_a,
>@@ -244,8 +244,9 @@ static int netlbl_cipsov4_add_std(struct genl_info *info,
> nla_a_rem)
> if (nla_type(nla_a) == NLBL_CIPSOV4_A_MLSCAT) {
> if (nla_validate_nested(nla_a,
>- NLBL_CIPSOV4_A_MAX,
>- netlbl_cipsov4_genl_policy) != 0)
>+ NLBL_CIPSOV4_A_MAX,
>+ netlbl_cipsov4_genl_policy,
>+ NULL) != 0)
> goto add_std_failure;
> nla_for_each_nested(nla_b, nla_a, nla_b_rem)
> switch (nla_type(nla_b)) {
>diff --git a/net/netlink/genetlink.c b/net/netlink/genetlink.c
>index 4b598a5999a2..ff6db5e66eb5 100644
>--- a/net/netlink/genetlink.c
>+++ b/net/netlink/genetlink.c
>@@ -574,7 +574,7 @@ static int genl_family_rcv_msg(const struct genl_family *family,
>
> if (attrbuf) {
> err = nlmsg_parse(nlh, hdrlen, attrbuf, family->maxattr,
>- ops->policy);
>+ ops->policy, NULL);
> if (err < 0)
> goto out;
> }
>diff --git a/net/nfc/netlink.c b/net/nfc/netlink.c
>index 03f3d5c7beb8..aca903c12671 100644
>--- a/net/nfc/netlink.c
>+++ b/net/nfc/netlink.c
>@@ -119,7 +119,8 @@ static struct nfc_dev *__get_device_from_cb(struct netlink_callback *cb)
> u32 idx;
>
> rc = nlmsg_parse(cb->nlh, GENL_HDRLEN + nfc_genl_family.hdrsize,
>- attrbuf, nfc_genl_family.maxattr, nfc_genl_policy);
>+ attrbuf, nfc_genl_family.maxattr, nfc_genl_policy,
>+ NULL);
> if (rc < 0)
> return ERR_PTR(rc);
>
>@@ -1161,7 +1162,7 @@ static int nfc_genl_llc_sdreq(struct sk_buff *skb, struct genl_info *info)
>
> nla_for_each_nested(attr, info->attrs[NFC_ATTR_LLC_SDP], rem) {
> rc = nla_parse_nested(sdp_attrs, NFC_SDP_ATTR_MAX, attr,
>- nfc_sdp_genl_policy);
>+ nfc_sdp_genl_policy, NULL);
>
> if (rc != 0) {
> rc = -EINVAL;
>diff --git a/net/openvswitch/datapath.c b/net/openvswitch/datapath.c
>index 9c62b6325f7a..7b17da9a94a0 100644
>--- a/net/openvswitch/datapath.c
>+++ b/net/openvswitch/datapath.c
>@@ -1353,7 +1353,7 @@ static int ovs_flow_cmd_dump(struct sk_buff *skb, struct netlink_callback *cb)
> int err;
>
> err = genlmsg_parse(cb->nlh, &dp_flow_genl_family, a,
>- OVS_FLOW_ATTR_MAX, flow_policy);
>+ OVS_FLOW_ATTR_MAX, flow_policy, NULL);
> if (err)
> return err;
> ufid_flags = ovs_nla_get_ufid_flags(a[OVS_FLOW_ATTR_UFID_FLAGS]);
>diff --git a/net/openvswitch/flow_netlink.c b/net/openvswitch/flow_netlink.c
>index df82b81a9b35..7e1d8a2afa63 100644
>--- a/net/openvswitch/flow_netlink.c
>+++ b/net/openvswitch/flow_netlink.c
>@@ -2427,8 +2427,8 @@ static int validate_userspace(const struct nlattr *attr)
> struct nlattr *a[OVS_USERSPACE_ATTR_MAX + 1];
> int error;
>
>- error = nla_parse_nested(a, OVS_USERSPACE_ATTR_MAX,
>- attr, userspace_policy);
>+ error = nla_parse_nested(a, OVS_USERSPACE_ATTR_MAX, attr,
>+ userspace_policy, NULL);
> if (error)
> return error;
>
>diff --git a/net/openvswitch/vport-vxlan.c b/net/openvswitch/vport-vxlan.c
>index 7eb955e453e6..869acb3b3d3f 100644
>--- a/net/openvswitch/vport-vxlan.c
>+++ b/net/openvswitch/vport-vxlan.c
>@@ -70,7 +70,8 @@ static int vxlan_configure_exts(struct vport *vport, struct nlattr *attr,
> if (nla_len(attr) < sizeof(struct nlattr))
> return -EINVAL;
>
>- err = nla_parse_nested(exts, OVS_VXLAN_EXT_MAX, attr, exts_policy);
>+ err = nla_parse_nested(exts, OVS_VXLAN_EXT_MAX, attr, exts_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/phonet/pn_netlink.c b/net/phonet/pn_netlink.c
>index bc5ee5fbe6ae..363799bf97f6 100644
>--- a/net/phonet/pn_netlink.c
>+++ b/net/phonet/pn_netlink.c
>@@ -78,7 +78,8 @@ static int addr_doit(struct sk_buff *skb, struct nlmsghdr *nlh)
>
> ASSERT_RTNL();
>
>- err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_phonet_policy);
>+ err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_phonet_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -243,7 +244,8 @@ static int route_doit(struct sk_buff *skb, struct nlmsghdr *nlh)
>
> ASSERT_RTNL();
>
>- err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_phonet_policy);
>+ err = nlmsg_parse(nlh, sizeof(*rtm), tb, RTA_MAX, rtm_phonet_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/qrtr/qrtr.c b/net/qrtr/qrtr.c
>index ae5ac175b2be..7fdbb34002f5 100644
>--- a/net/qrtr/qrtr.c
>+++ b/net/qrtr/qrtr.c
>@@ -957,7 +957,7 @@ static int qrtr_addr_doit(struct sk_buff *skb, struct nlmsghdr *nlh)
>
> ASSERT_RTNL();
>
>- rc = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, qrtr_policy);
>+ rc = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, qrtr_policy, NULL);
> if (rc < 0)
> return rc;
>
>diff --git a/net/sched/act_api.c b/net/sched/act_api.c
>index b70aa57319ea..79d875c6e8a0 100644
>--- a/net/sched/act_api.c
>+++ b/net/sched/act_api.c
>@@ -557,7 +557,7 @@ struct tc_action *tcf_action_init_1(struct net *net, struct nlattr *nla,
> int err;
>
> if (name == NULL) {
>- err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL);
>+ err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL, NULL);
> if (err < 0)
> goto err_out;
> err = -EINVAL;
>@@ -654,7 +654,7 @@ int tcf_action_init(struct net *net, struct nlattr *nla, struct nlattr *est,
> int err;
> int i;
>
>- err = nla_parse_nested(tb, TCA_ACT_MAX_PRIO, nla, NULL);
>+ err = nla_parse_nested(tb, TCA_ACT_MAX_PRIO, nla, NULL, NULL);
> if (err < 0)
> return err;
>
>@@ -786,7 +786,7 @@ static struct tc_action *tcf_action_get_1(struct net *net, struct nlattr *nla,
> int index;
> int err;
>
>- err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL);
>+ err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL, NULL);
> if (err < 0)
> goto err_out;
>
>@@ -835,7 +835,7 @@ static int tca_action_flush(struct net *net, struct nlattr *nla,
>
> b = skb_tail_pointer(skb);
>
>- err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL);
>+ err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL, NULL);
> if (err < 0)
> goto err_out;
>
>@@ -921,7 +921,7 @@ tca_action_gd(struct net *net, struct nlattr *nla, struct nlmsghdr *n,
> struct tc_action *act;
> LIST_HEAD(actions);
>
>- ret = nla_parse_nested(tb, TCA_ACT_MAX_PRIO, nla, NULL);
>+ ret = nla_parse_nested(tb, TCA_ACT_MAX_PRIO, nla, NULL, NULL);
> if (ret < 0)
> return ret;
>
>@@ -1004,7 +1004,8 @@ static int tc_ctl_action(struct sk_buff *skb, struct nlmsghdr *n)
> !netlink_capable(skb, CAP_NET_ADMIN))
> return -EPERM;
>
>- ret = nlmsg_parse(n, sizeof(struct tcamsg), tca, TCA_ACT_MAX, NULL);
>+ ret = nlmsg_parse(n, sizeof(struct tcamsg), tca, TCA_ACT_MAX, NULL,
>+ NULL);
> if (ret < 0)
> return ret;
>
>@@ -1051,19 +1052,20 @@ static struct nlattr *find_dump_kind(const struct nlmsghdr *n)
> struct nlattr *nla[TCAA_MAX + 1];
> struct nlattr *kind;
>
>- if (nlmsg_parse(n, sizeof(struct tcamsg), nla, TCAA_MAX, NULL) < 0)
>+ if (nlmsg_parse(n, sizeof(struct tcamsg), nla, TCAA_MAX,
>+ NULL, NULL) < 0)
> return NULL;
> tb1 = nla[TCA_ACT_TAB];
> if (tb1 == NULL)
> return NULL;
>
> if (nla_parse(tb, TCA_ACT_MAX_PRIO, nla_data(tb1),
>- NLMSG_ALIGN(nla_len(tb1)), NULL) < 0)
>+ NLMSG_ALIGN(nla_len(tb1)), NULL, NULL) < 0)
> return NULL;
>
> if (tb[1] == NULL)
> return NULL;
>- if (nla_parse_nested(tb2, TCA_ACT_MAX, tb[1], NULL) < 0)
>+ if (nla_parse_nested(tb2, TCA_ACT_MAX, tb[1], NULL, NULL) < 0)
> return NULL;
> kind = tb2[TCA_ACT_KIND];
>
>diff --git a/net/sched/act_bpf.c b/net/sched/act_bpf.c
>index 520baa41cba3..d33947d6e9d0 100644
>--- a/net/sched/act_bpf.c
>+++ b/net/sched/act_bpf.c
>@@ -283,7 +283,7 @@ static int tcf_bpf_init(struct net *net, struct nlattr *nla,
> if (!nla)
> return -EINVAL;
>
>- ret = nla_parse_nested(tb, TCA_ACT_BPF_MAX, nla, act_bpf_policy);
>+ ret = nla_parse_nested(tb, TCA_ACT_BPF_MAX, nla, act_bpf_policy, NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/sched/act_connmark.c b/net/sched/act_connmark.c
>index f9bb43c25697..2155bc6c6a1e 100644
>--- a/net/sched/act_connmark.c
>+++ b/net/sched/act_connmark.c
>@@ -109,7 +109,8 @@ static int tcf_connmark_init(struct net *net, struct nlattr *nla,
> if (!nla)
> return -EINVAL;
>
>- ret = nla_parse_nested(tb, TCA_CONNMARK_MAX, nla, connmark_policy);
>+ ret = nla_parse_nested(tb, TCA_CONNMARK_MAX, nla, connmark_policy,
>+ NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/sched/act_csum.c b/net/sched/act_csum.c
>index 6c319a40c1cc..ab6fdbd34db7 100644
>--- a/net/sched/act_csum.c
>+++ b/net/sched/act_csum.c
>@@ -59,7 +59,7 @@ static int tcf_csum_init(struct net *net, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_CSUM_MAX, nla, csum_policy);
>+ err = nla_parse_nested(tb, TCA_CSUM_MAX, nla, csum_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_gact.c b/net/sched/act_gact.c
>index e6c874a2b283..99afe8b1f1fb 100644
>--- a/net/sched/act_gact.c
>+++ b/net/sched/act_gact.c
>@@ -73,7 +73,7 @@ static int tcf_gact_init(struct net *net, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_GACT_MAX, nla, gact_policy);
>+ err = nla_parse_nested(tb, TCA_GACT_MAX, nla, gact_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_ife.c b/net/sched/act_ife.c
>index c75ea5c9102c..c5dec308b8b1 100644
>--- a/net/sched/act_ife.c
>+++ b/net/sched/act_ife.c
>@@ -443,7 +443,7 @@ static int tcf_ife_init(struct net *net, struct nlattr *nla,
> int ret = 0;
> int err;
>
>- err = nla_parse_nested(tb, TCA_IFE_MAX, nla, ife_policy);
>+ err = nla_parse_nested(tb, TCA_IFE_MAX, nla, ife_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -514,7 +514,7 @@ static int tcf_ife_init(struct net *net, struct nlattr *nla,
>
> if (tb[TCA_IFE_METALST]) {
> err = nla_parse_nested(tb2, IFE_META_MAX, tb[TCA_IFE_METALST],
>- NULL);
>+ NULL, NULL);
> if (err) {
> metadata_parse_err:
> if (exists)
>diff --git a/net/sched/act_ipt.c b/net/sched/act_ipt.c
>index 992ef8d624f1..36f0ced9e60c 100644
>--- a/net/sched/act_ipt.c
>+++ b/net/sched/act_ipt.c
>@@ -107,7 +107,7 @@ static int __tcf_ipt_init(struct tc_action_net *tn, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_IPT_MAX, nla, ipt_policy);
>+ err = nla_parse_nested(tb, TCA_IPT_MAX, nla, ipt_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_mirred.c b/net/sched/act_mirred.c
>index af49c7dca860..1b5549ababd4 100644
>--- a/net/sched/act_mirred.c
>+++ b/net/sched/act_mirred.c
>@@ -87,7 +87,7 @@ static int tcf_mirred_init(struct net *net, struct nlattr *nla,
>
> if (nla == NULL)
> return -EINVAL;
>- ret = nla_parse_nested(tb, TCA_MIRRED_MAX, nla, mirred_policy);
>+ ret = nla_parse_nested(tb, TCA_MIRRED_MAX, nla, mirred_policy, NULL);
> if (ret < 0)
> return ret;
> if (tb[TCA_MIRRED_PARMS] == NULL)
>diff --git a/net/sched/act_nat.c b/net/sched/act_nat.c
>index 9b6aec665495..9016ab8a0649 100644
>--- a/net/sched/act_nat.c
>+++ b/net/sched/act_nat.c
>@@ -50,7 +50,7 @@ static int tcf_nat_init(struct net *net, struct nlattr *nla, struct nlattr *est,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_NAT_MAX, nla, nat_policy);
>+ err = nla_parse_nested(tb, TCA_NAT_MAX, nla, nat_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_pedit.c b/net/sched/act_pedit.c
>index c1310472f620..164b5ac094be 100644
>--- a/net/sched/act_pedit.c
>+++ b/net/sched/act_pedit.c
>@@ -72,7 +72,7 @@ static struct tcf_pedit_key_ex *tcf_pedit_keys_ex_parse(struct nlattr *nla,
> }
>
> err = nla_parse_nested(tb, TCA_PEDIT_KEY_EX_MAX, ka,
>- pedit_key_ex_policy);
>+ pedit_key_ex_policy, NULL);
> if (err)
> goto err_out;
>
>@@ -147,7 +147,7 @@ static int tcf_pedit_init(struct net *net, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_PEDIT_MAX, nla, pedit_policy);
>+ err = nla_parse_nested(tb, TCA_PEDIT_MAX, nla, pedit_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_police.c b/net/sched/act_police.c
>index 0ba91d1ce994..f42008b29311 100644
>--- a/net/sched/act_police.c
>+++ b/net/sched/act_police.c
>@@ -90,7 +90,7 @@ static int tcf_act_police_init(struct net *net, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_POLICE_MAX, nla, police_policy);
>+ err = nla_parse_nested(tb, TCA_POLICE_MAX, nla, police_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_sample.c b/net/sched/act_sample.c
>index 0b8217b4763f..59d6645a4007 100644
>--- a/net/sched/act_sample.c
>+++ b/net/sched/act_sample.c
>@@ -50,7 +50,7 @@ static int tcf_sample_init(struct net *net, struct nlattr *nla,
>
> if (!nla)
> return -EINVAL;
>- ret = nla_parse_nested(tb, TCA_SAMPLE_MAX, nla, sample_policy);
>+ ret = nla_parse_nested(tb, TCA_SAMPLE_MAX, nla, sample_policy, NULL);
> if (ret < 0)
> return ret;
> if (!tb[TCA_SAMPLE_PARMS] || !tb[TCA_SAMPLE_RATE] ||
>diff --git a/net/sched/act_simple.c b/net/sched/act_simple.c
>index 823a73ad0c60..43605e7ce051 100644
>--- a/net/sched/act_simple.c
>+++ b/net/sched/act_simple.c
>@@ -94,7 +94,7 @@ static int tcf_simp_init(struct net *net, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_DEF_MAX, nla, simple_policy);
>+ err = nla_parse_nested(tb, TCA_DEF_MAX, nla, simple_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_skbedit.c b/net/sched/act_skbedit.c
>index 06ccae3c12ee..6b3e65d7de0c 100644
>--- a/net/sched/act_skbedit.c
>+++ b/net/sched/act_skbedit.c
>@@ -82,7 +82,7 @@ static int tcf_skbedit_init(struct net *net, struct nlattr *nla,
> if (nla == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_SKBEDIT_MAX, nla, skbedit_policy);
>+ err = nla_parse_nested(tb, TCA_SKBEDIT_MAX, nla, skbedit_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_skbmod.c b/net/sched/act_skbmod.c
>index c736627f8f4a..a73c4bbcada2 100644
>--- a/net/sched/act_skbmod.c
>+++ b/net/sched/act_skbmod.c
>@@ -103,7 +103,7 @@ static int tcf_skbmod_init(struct net *net, struct nlattr *nla,
> if (!nla)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_SKBMOD_MAX, nla, skbmod_policy);
>+ err = nla_parse_nested(tb, TCA_SKBMOD_MAX, nla, skbmod_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_tunnel_key.c b/net/sched/act_tunnel_key.c
>index e3a58e021198..b9a2f241a5b3 100644
>--- a/net/sched/act_tunnel_key.c
>+++ b/net/sched/act_tunnel_key.c
>@@ -89,7 +89,8 @@ static int tunnel_key_init(struct net *net, struct nlattr *nla,
> if (!nla)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_TUNNEL_KEY_MAX, nla, tunnel_key_policy);
>+ err = nla_parse_nested(tb, TCA_TUNNEL_KEY_MAX, nla, tunnel_key_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/act_vlan.c b/net/sched/act_vlan.c
>index 19e0dba305ce..13ba3a89f675 100644
>--- a/net/sched/act_vlan.c
>+++ b/net/sched/act_vlan.c
>@@ -121,7 +121,7 @@ static int tcf_vlan_init(struct net *net, struct nlattr *nla,
> if (!nla)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_VLAN_MAX, nla, vlan_policy);
>+ err = nla_parse_nested(tb, TCA_VLAN_MAX, nla, vlan_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_api.c b/net/sched/cls_api.c
>index 732f7cae459d..e2c68c30f97d 100644
>--- a/net/sched/cls_api.c
>+++ b/net/sched/cls_api.c
>@@ -229,7 +229,7 @@ static int tc_ctl_tfilter(struct sk_buff *skb, struct nlmsghdr *n)
> replay:
> tp_created = 0;
>
>- err = nlmsg_parse(n, sizeof(*t), tca, TCA_MAX, NULL);
>+ err = nlmsg_parse(n, sizeof(*t), tca, TCA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_basic.c b/net/sched/cls_basic.c
>index 5877f6061b57..422414f16b38 100644
>--- a/net/sched/cls_basic.c
>+++ b/net/sched/cls_basic.c
>@@ -174,7 +174,7 @@ static int basic_change(struct net *net, struct sk_buff *in_skb,
> return -EINVAL;
>
> err = nla_parse_nested(tb, TCA_BASIC_MAX, tca[TCA_OPTIONS],
>- basic_policy);
>+ basic_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_bpf.c b/net/sched/cls_bpf.c
>index 80f688436dd7..7ddd08efaa0f 100644
>--- a/net/sched/cls_bpf.c
>+++ b/net/sched/cls_bpf.c
>@@ -478,7 +478,8 @@ static int cls_bpf_change(struct net *net, struct sk_buff *in_skb,
> if (tca[TCA_OPTIONS] == NULL)
> return -EINVAL;
>
>- ret = nla_parse_nested(tb, TCA_BPF_MAX, tca[TCA_OPTIONS], bpf_policy);
>+ ret = nla_parse_nested(tb, TCA_BPF_MAX, tca[TCA_OPTIONS], bpf_policy,
>+ NULL);
> if (ret < 0)
> return ret;
>
>diff --git a/net/sched/cls_cgroup.c b/net/sched/cls_cgroup.c
>index c1f20077837f..b5e7c1bee6c3 100644
>--- a/net/sched/cls_cgroup.c
>+++ b/net/sched/cls_cgroup.c
>@@ -99,7 +99,7 @@ static int cls_cgroup_change(struct net *net, struct sk_buff *in_skb,
> new->handle = handle;
> new->tp = tp;
> err = nla_parse_nested(tb, TCA_CGROUP_MAX, tca[TCA_OPTIONS],
>- cgroup_policy);
>+ cgroup_policy, NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/sched/cls_flow.c b/net/sched/cls_flow.c
>index ca193af8634a..008ba7e63b7a 100644
>--- a/net/sched/cls_flow.c
>+++ b/net/sched/cls_flow.c
>@@ -400,7 +400,7 @@ static int flow_change(struct net *net, struct sk_buff *in_skb,
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_FLOW_MAX, opt, flow_policy);
>+ err = nla_parse_nested(tb, TCA_FLOW_MAX, opt, flow_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_flower.c b/net/sched/cls_flower.c
>index 9d0c99d2e9fb..3e7bd7801aa8 100644
>--- a/net/sched/cls_flower.c
>+++ b/net/sched/cls_flower.c
>@@ -848,7 +848,8 @@ static int fl_change(struct net *net, struct sk_buff *in_skb,
> if (!tb)
> return -ENOBUFS;
>
>- err = nla_parse_nested(tb, TCA_FLOWER_MAX, tca[TCA_OPTIONS], fl_policy);
>+ err = nla_parse_nested(tb, TCA_FLOWER_MAX, tca[TCA_OPTIONS],
>+ fl_policy, NULL);
> if (err < 0)
> goto errout_tb;
>
>diff --git a/net/sched/cls_fw.c b/net/sched/cls_fw.c
>index 9dc63d54e167..996209083c6b 100644
>--- a/net/sched/cls_fw.c
>+++ b/net/sched/cls_fw.c
>@@ -250,7 +250,7 @@ static int fw_change(struct net *net, struct sk_buff *in_skb,
> if (!opt)
> return handle ? -EINVAL : 0; /* Succeed if it is old method. */
>
>- err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
>+ err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_matchall.c b/net/sched/cls_matchall.c
>index 224eb2c14346..0dbcca62aa6a 100644
>--- a/net/sched/cls_matchall.c
>+++ b/net/sched/cls_matchall.c
>@@ -161,8 +161,8 @@ static int mall_change(struct net *net, struct sk_buff *in_skb,
> if (head)
> return -EEXIST;
>
>- err = nla_parse_nested(tb, TCA_MATCHALL_MAX,
>- tca[TCA_OPTIONS], mall_policy);
>+ err = nla_parse_nested(tb, TCA_MATCHALL_MAX, tca[TCA_OPTIONS],
>+ mall_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_route.c b/net/sched/cls_route.c
>index 455fc8f83d0a..a371075c1d7a 100644
>--- a/net/sched/cls_route.c
>+++ b/net/sched/cls_route.c
>@@ -489,7 +489,7 @@ static int route4_change(struct net *net, struct sk_buff *in_skb,
> if (opt == NULL)
> return handle ? -EINVAL : 0;
>
>- err = nla_parse_nested(tb, TCA_ROUTE4_MAX, opt, route4_policy);
>+ err = nla_parse_nested(tb, TCA_ROUTE4_MAX, opt, route4_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_rsvp.h b/net/sched/cls_rsvp.h
>index 322438fb3ffc..d7f2923e6ebd 100644
>--- a/net/sched/cls_rsvp.h
>+++ b/net/sched/cls_rsvp.h
>@@ -484,7 +484,7 @@ static int rsvp_change(struct net *net, struct sk_buff *in_skb,
> if (opt == NULL)
> return handle ? -EINVAL : 0;
>
>- err = nla_parse_nested(tb, TCA_RSVP_MAX, opt, rsvp_policy);
>+ err = nla_parse_nested(tb, TCA_RSVP_MAX, opt, rsvp_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_tcindex.c b/net/sched/cls_tcindex.c
>index 0751245a6ace..2ab001361457 100644
>--- a/net/sched/cls_tcindex.c
>+++ b/net/sched/cls_tcindex.c
>@@ -482,7 +482,7 @@ tcindex_change(struct net *net, struct sk_buff *in_skb,
> if (!opt)
> return 0;
>
>- err = nla_parse_nested(tb, TCA_TCINDEX_MAX, opt, tcindex_policy);
>+ err = nla_parse_nested(tb, TCA_TCINDEX_MAX, opt, tcindex_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/cls_u32.c b/net/sched/cls_u32.c
>index 4dbe0c680fe6..9e2f330ac80f 100644
>--- a/net/sched/cls_u32.c
>+++ b/net/sched/cls_u32.c
>@@ -860,7 +860,7 @@ static int u32_change(struct net *net, struct sk_buff *in_skb,
> if (opt == NULL)
> return handle ? -EINVAL : 0;
>
>- err = nla_parse_nested(tb, TCA_U32_MAX, opt, u32_policy);
>+ err = nla_parse_nested(tb, TCA_U32_MAX, opt, u32_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/em_meta.c b/net/sched/em_meta.c
>index ae7e4f5b348b..eb0e9bab54c1 100644
>--- a/net/sched/em_meta.c
>+++ b/net/sched/em_meta.c
>@@ -912,7 +912,7 @@ static int em_meta_change(struct net *net, void *data, int len,
> struct tcf_meta_hdr *hdr;
> struct meta_match *meta = NULL;
>
>- err = nla_parse(tb, TCA_EM_META_MAX, data, len, meta_policy);
>+ err = nla_parse(tb, TCA_EM_META_MAX, data, len, meta_policy, NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/sched/ematch.c b/net/sched/ematch.c
>index fbb7ebfc58c6..03b677bc0700 100644
>--- a/net/sched/ematch.c
>+++ b/net/sched/ematch.c
>@@ -314,7 +314,7 @@ int tcf_em_tree_validate(struct tcf_proto *tp, struct nlattr *nla,
> if (!nla)
> return 0;
>
>- err = nla_parse_nested(tb, TCA_EMATCH_TREE_MAX, nla, em_policy);
>+ err = nla_parse_nested(tb, TCA_EMATCH_TREE_MAX, nla, em_policy, NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/sched/sch_api.c b/net/sched/sch_api.c
>index 62567bfe52c7..fcb5ae581c04 100644
>--- a/net/sched/sch_api.c
>+++ b/net/sched/sch_api.c
>@@ -457,7 +457,7 @@ static struct qdisc_size_table *qdisc_get_stab(struct nlattr *opt)
> u16 *tab = NULL;
> int err;
>
>- err = nla_parse_nested(tb, TCA_STAB_MAX, opt, stab_policy);
>+ err = nla_parse_nested(tb, TCA_STAB_MAX, opt, stab_policy, NULL);
> if (err < 0)
> return ERR_PTR(err);
> if (!tb[TCA_STAB_BASE])
>@@ -1131,7 +1131,7 @@ static int tc_get_qdisc(struct sk_buff *skb, struct nlmsghdr *n)
> !netlink_ns_capable(skb, net->user_ns, CAP_NET_ADMIN))
> return -EPERM;
>
>- err = nlmsg_parse(n, sizeof(*tcm), tca, TCA_MAX, NULL);
>+ err = nlmsg_parse(n, sizeof(*tcm), tca, TCA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>@@ -1200,7 +1200,7 @@ static int tc_modify_qdisc(struct sk_buff *skb, struct nlmsghdr *n)
>
> replay:
> /* Reinit, just in case something touches this. */
>- err = nlmsg_parse(n, sizeof(*tcm), tca, TCA_MAX, NULL);
>+ err = nlmsg_parse(n, sizeof(*tcm), tca, TCA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>@@ -1515,7 +1515,7 @@ static int tc_dump_qdisc(struct sk_buff *skb, struct netlink_callback *cb)
> idx = 0;
> ASSERT_RTNL();
>
>- err = nlmsg_parse(nlh, sizeof(*tcm), tca, TCA_MAX, NULL);
>+ err = nlmsg_parse(nlh, sizeof(*tcm), tca, TCA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>@@ -1577,7 +1577,7 @@ static int tc_ctl_tclass(struct sk_buff *skb, struct nlmsghdr *n)
> !netlink_ns_capable(skb, net->user_ns, CAP_NET_ADMIN))
> return -EPERM;
>
>- err = nlmsg_parse(n, sizeof(*tcm), tca, TCA_MAX, NULL);
>+ err = nlmsg_parse(n, sizeof(*tcm), tca, TCA_MAX, NULL, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_atm.c b/net/sched/sch_atm.c
>index 2209c2ddacbf..40cbceed4de8 100644
>--- a/net/sched/sch_atm.c
>+++ b/net/sched/sch_atm.c
>@@ -214,7 +214,7 @@ static int atm_tc_change(struct Qdisc *sch, u32 classid, u32 parent,
> if (opt == NULL)
> return -EINVAL;
>
>- error = nla_parse_nested(tb, TCA_ATM_MAX, opt, atm_policy);
>+ error = nla_parse_nested(tb, TCA_ATM_MAX, opt, atm_policy, NULL);
> if (error < 0)
> return error;
>
>diff --git a/net/sched/sch_cbq.c b/net/sched/sch_cbq.c
>index cf93e5ff3d63..7415859fd4c3 100644
>--- a/net/sched/sch_cbq.c
>+++ b/net/sched/sch_cbq.c
>@@ -1137,7 +1137,7 @@ static int cbq_init(struct Qdisc *sch, struct nlattr *opt)
> struct tc_ratespec *r;
> int err;
>
>- err = nla_parse_nested(tb, TCA_CBQ_MAX, opt, cbq_policy);
>+ err = nla_parse_nested(tb, TCA_CBQ_MAX, opt, cbq_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -1474,7 +1474,7 @@ cbq_change_class(struct Qdisc *sch, u32 classid, u32 parentid, struct nlattr **t
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_CBQ_MAX, opt, cbq_policy);
>+ err = nla_parse_nested(tb, TCA_CBQ_MAX, opt, cbq_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_choke.c b/net/sched/sch_choke.c
>index 593183a5b5b5..d00f4c7c2f3a 100644
>--- a/net/sched/sch_choke.c
>+++ b/net/sched/sch_choke.c
>@@ -357,7 +357,7 @@ static int choke_change(struct Qdisc *sch, struct nlattr *opt)
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_CHOKE_MAX, opt, choke_policy);
>+ err = nla_parse_nested(tb, TCA_CHOKE_MAX, opt, choke_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_codel.c b/net/sched/sch_codel.c
>index 5bfa79ee657c..c518a1efcb9d 100644
>--- a/net/sched/sch_codel.c
>+++ b/net/sched/sch_codel.c
>@@ -140,7 +140,7 @@ static int codel_change(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_CODEL_MAX, opt, codel_policy);
>+ err = nla_parse_nested(tb, TCA_CODEL_MAX, opt, codel_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_drr.c b/net/sched/sch_drr.c
>index 9fe67e257dfa..58a8c32eab23 100644
>--- a/net/sched/sch_drr.c
>+++ b/net/sched/sch_drr.c
>@@ -76,7 +76,7 @@ static int drr_change_class(struct Qdisc *sch, u32 classid, u32 parentid,
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_DRR_MAX, opt, drr_policy);
>+ err = nla_parse_nested(tb, TCA_DRR_MAX, opt, drr_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_dsmark.c b/net/sched/sch_dsmark.c
>index cfa1f2cdbaf7..1c0f877f673a 100644
>--- a/net/sched/sch_dsmark.c
>+++ b/net/sched/sch_dsmark.c
>@@ -129,7 +129,7 @@ static int dsmark_change(struct Qdisc *sch, u32 classid, u32 parent,
> if (!opt)
> goto errout;
>
>- err = nla_parse_nested(tb, TCA_DSMARK_MAX, opt, dsmark_policy);
>+ err = nla_parse_nested(tb, TCA_DSMARK_MAX, opt, dsmark_policy, NULL);
> if (err < 0)
> goto errout;
>
>@@ -342,7 +342,7 @@ static int dsmark_init(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> goto errout;
>
>- err = nla_parse_nested(tb, TCA_DSMARK_MAX, opt, dsmark_policy);
>+ err = nla_parse_nested(tb, TCA_DSMARK_MAX, opt, dsmark_policy, NULL);
> if (err < 0)
> goto errout;
>
>diff --git a/net/sched/sch_fq.c b/net/sched/sch_fq.c
>index a4f738ac7728..da4f67bda0ee 100644
>--- a/net/sched/sch_fq.c
>+++ b/net/sched/sch_fq.c
>@@ -698,7 +698,7 @@ static int fq_change(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_FQ_MAX, opt, fq_policy);
>+ err = nla_parse_nested(tb, TCA_FQ_MAX, opt, fq_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_fq_codel.c b/net/sched/sch_fq_codel.c
>index 097bbe9857a5..18bbb5476c83 100644
>--- a/net/sched/sch_fq_codel.c
>+++ b/net/sched/sch_fq_codel.c
>@@ -383,7 +383,8 @@ static int fq_codel_change(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_FQ_CODEL_MAX, opt, fq_codel_policy);
>+ err = nla_parse_nested(tb, TCA_FQ_CODEL_MAX, opt, fq_codel_policy,
>+ NULL);
> if (err < 0)
> return err;
> if (tb[TCA_FQ_CODEL_FLOWS]) {
>diff --git a/net/sched/sch_gred.c b/net/sched/sch_gred.c
>index c78a093c551a..17c7130454bd 100644
>--- a/net/sched/sch_gred.c
>+++ b/net/sched/sch_gred.c
>@@ -401,7 +401,7 @@ static int gred_change(struct Qdisc *sch, struct nlattr *opt)
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_GRED_MAX, opt, gred_policy);
>+ err = nla_parse_nested(tb, TCA_GRED_MAX, opt, gred_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -470,7 +470,7 @@ static int gred_init(struct Qdisc *sch, struct nlattr *opt)
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_GRED_MAX, opt, gred_policy);
>+ err = nla_parse_nested(tb, TCA_GRED_MAX, opt, gred_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_hfsc.c b/net/sched/sch_hfsc.c
>index 0198c6cdda49..5cb82f6c1b06 100644
>--- a/net/sched/sch_hfsc.c
>+++ b/net/sched/sch_hfsc.c
>@@ -957,7 +957,7 @@ hfsc_change_class(struct Qdisc *sch, u32 classid, u32 parentid,
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_HFSC_MAX, opt, hfsc_policy);
>+ err = nla_parse_nested(tb, TCA_HFSC_MAX, opt, hfsc_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_hhf.c b/net/sched/sch_hhf.c
>index 2fae8b5f1b80..c19d346e6c5a 100644
>--- a/net/sched/sch_hhf.c
>+++ b/net/sched/sch_hhf.c
>@@ -529,7 +529,7 @@ static int hhf_change(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_HHF_MAX, opt, hhf_policy);
>+ err = nla_parse_nested(tb, TCA_HHF_MAX, opt, hhf_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_htb.c b/net/sched/sch_htb.c
>index 95867033542e..570ef3b0c09b 100644
>--- a/net/sched/sch_htb.c
>+++ b/net/sched/sch_htb.c
>@@ -1017,7 +1017,7 @@ static int htb_init(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_HTB_MAX, opt, htb_policy);
>+ err = nla_parse_nested(tb, TCA_HTB_MAX, opt, htb_policy, NULL);
> if (err < 0)
> return err;
>
>@@ -1342,7 +1342,7 @@ static int htb_change_class(struct Qdisc *sch, u32 classid,
> if (!opt)
> goto failure;
>
>- err = nla_parse_nested(tb, TCA_HTB_MAX, opt, htb_policy);
>+ err = nla_parse_nested(tb, TCA_HTB_MAX, opt, htb_policy, NULL);
> if (err < 0)
> goto failure;
>
>diff --git a/net/sched/sch_netem.c b/net/sched/sch_netem.c
>index 94b4928ad413..f0ce4780f395 100644
>--- a/net/sched/sch_netem.c
>+++ b/net/sched/sch_netem.c
>@@ -843,7 +843,7 @@ static int parse_attr(struct nlattr *tb[], int maxtype, struct nlattr *nla,
>
> if (nested_len >= nla_attr_size(0))
> return nla_parse(tb, maxtype, nla_data(nla) + NLA_ALIGN(len),
>- nested_len, policy);
>+ nested_len, policy, NULL);
>
> memset(tb, 0, sizeof(struct nlattr *) * (maxtype + 1));
> return 0;
>diff --git a/net/sched/sch_pie.c b/net/sched/sch_pie.c
>index 5c3a99d6aa82..6c2791d6102d 100644
>--- a/net/sched/sch_pie.c
>+++ b/net/sched/sch_pie.c
>@@ -190,7 +190,7 @@ static int pie_change(struct Qdisc *sch, struct nlattr *opt)
> if (!opt)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_PIE_MAX, opt, pie_policy);
>+ err = nla_parse_nested(tb, TCA_PIE_MAX, opt, pie_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_qfq.c b/net/sched/sch_qfq.c
>index 6c85f3e9239b..041eba3006cc 100644
>--- a/net/sched/sch_qfq.c
>+++ b/net/sched/sch_qfq.c
>@@ -418,7 +418,8 @@ static int qfq_change_class(struct Qdisc *sch, u32 classid, u32 parentid,
> return -EINVAL;
> }
>
>- err = nla_parse_nested(tb, TCA_QFQ_MAX, tca[TCA_OPTIONS], qfq_policy);
>+ err = nla_parse_nested(tb, TCA_QFQ_MAX, tca[TCA_OPTIONS], qfq_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_red.c b/net/sched/sch_red.c
>index 799ea6dd69b2..11292adce412 100644
>--- a/net/sched/sch_red.c
>+++ b/net/sched/sch_red.c
>@@ -173,7 +173,7 @@ static int red_change(struct Qdisc *sch, struct nlattr *opt)
> if (opt == NULL)
> return -EINVAL;
>
>- err = nla_parse_nested(tb, TCA_RED_MAX, opt, red_policy);
>+ err = nla_parse_nested(tb, TCA_RED_MAX, opt, red_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/sched/sch_sfb.c b/net/sched/sch_sfb.c
>index ae862f172c94..0f777273ba29 100644
>--- a/net/sched/sch_sfb.c
>+++ b/net/sched/sch_sfb.c
>@@ -495,7 +495,7 @@ static int sfb_change(struct Qdisc *sch, struct nlattr *opt)
> int err;
>
> if (opt) {
>- err = nla_parse_nested(tb, TCA_SFB_MAX, opt, sfb_policy);
>+ err = nla_parse_nested(tb, TCA_SFB_MAX, opt, sfb_policy, NULL);
> if (err < 0)
> return -EINVAL;
>
>diff --git a/net/sched/sch_tbf.c b/net/sched/sch_tbf.c
>index 9850126129a3..b2e4b6ad241a 100644
>--- a/net/sched/sch_tbf.c
>+++ b/net/sched/sch_tbf.c
>@@ -315,7 +315,7 @@ static int tbf_change(struct Qdisc *sch, struct nlattr *opt)
> s64 buffer, mtu;
> u64 rate64 = 0, prate64 = 0;
>
>- err = nla_parse_nested(tb, TCA_TBF_MAX, opt, tbf_policy);
>+ err = nla_parse_nested(tb, TCA_TBF_MAX, opt, tbf_policy, NULL);
> if (err < 0)
> return err;
>
>diff --git a/net/switchdev/switchdev.c b/net/switchdev/switchdev.c
>index 017801f9dbaa..8d40a7d31c99 100644
>--- a/net/switchdev/switchdev.c
>+++ b/net/switchdev/switchdev.c
>@@ -826,7 +826,7 @@ static int switchdev_port_br_setlink_protinfo(struct net_device *dev,
> int err;
>
> err = nla_validate_nested(protinfo, IFLA_BRPORT_MAX,
>- switchdev_port_bridge_policy);
>+ switchdev_port_bridge_policy, NULL);
> if (err)
> return err;
>
>diff --git a/net/tipc/bearer.c b/net/tipc/bearer.c
>index 33a5bdfbef76..9b5c45f48f60 100644
>--- a/net/tipc/bearer.c
>+++ b/net/tipc/bearer.c
>@@ -802,7 +802,7 @@ int tipc_nl_bearer_get(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_BEARER_MAX,
> info->attrs[TIPC_NLA_BEARER],
>- tipc_nl_bearer_policy);
>+ tipc_nl_bearer_policy, NULL);
> if (err)
> return err;
>
>@@ -851,7 +851,7 @@ int tipc_nl_bearer_disable(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_BEARER_MAX,
> info->attrs[TIPC_NLA_BEARER],
>- tipc_nl_bearer_policy);
>+ tipc_nl_bearer_policy, NULL);
> if (err)
> return err;
>
>@@ -891,7 +891,7 @@ int tipc_nl_bearer_enable(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_BEARER_MAX,
> info->attrs[TIPC_NLA_BEARER],
>- tipc_nl_bearer_policy);
>+ tipc_nl_bearer_policy, NULL);
> if (err)
> return err;
>
>@@ -939,7 +939,7 @@ int tipc_nl_bearer_add(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_BEARER_MAX,
> info->attrs[TIPC_NLA_BEARER],
>- tipc_nl_bearer_policy);
>+ tipc_nl_bearer_policy, NULL);
> if (err)
> return err;
>
>@@ -982,7 +982,7 @@ int tipc_nl_bearer_set(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_BEARER_MAX,
> info->attrs[TIPC_NLA_BEARER],
>- tipc_nl_bearer_policy);
>+ tipc_nl_bearer_policy, NULL);
> if (err)
> return err;
>
>@@ -1104,7 +1104,7 @@ int tipc_nl_media_get(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_MEDIA_MAX,
> info->attrs[TIPC_NLA_MEDIA],
>- tipc_nl_media_policy);
>+ tipc_nl_media_policy, NULL);
> if (err)
> return err;
>
>@@ -1152,7 +1152,7 @@ int tipc_nl_media_set(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_MEDIA_MAX,
> info->attrs[TIPC_NLA_MEDIA],
>- tipc_nl_media_policy);
>+ tipc_nl_media_policy, NULL);
>
> if (!attrs[TIPC_NLA_MEDIA_NAME])
> return -EINVAL;
>diff --git a/net/tipc/link.c b/net/tipc/link.c
>index ddd2dd6f77aa..60820dc35a08 100644
>--- a/net/tipc/link.c
>+++ b/net/tipc/link.c
>@@ -1827,7 +1827,7 @@ int tipc_nl_parse_link_prop(struct nlattr *prop, struct nlattr *props[])
> int err;
>
> err = nla_parse_nested(props, TIPC_NLA_PROP_MAX, prop,
>- tipc_nl_prop_policy);
>+ tipc_nl_prop_policy, NULL);
> if (err)
> return err;
>
>diff --git a/net/tipc/net.c b/net/tipc/net.c
>index ab8a2d5d1e32..836da66cd852 100644
>--- a/net/tipc/net.c
>+++ b/net/tipc/net.c
>@@ -211,8 +211,8 @@ int tipc_nl_net_set(struct sk_buff *skb, struct genl_info *info)
> return -EINVAL;
>
> err = nla_parse_nested(attrs, TIPC_NLA_NET_MAX,
>- info->attrs[TIPC_NLA_NET],
>- tipc_nl_net_policy);
>+ info->attrs[TIPC_NLA_NET], tipc_nl_net_policy,
>+ NULL);
> if (err)
> return err;
>
>diff --git a/net/tipc/netlink.c b/net/tipc/netlink.c
>index 26ca8dd64ded..b76f13f6fea1 100644
>--- a/net/tipc/netlink.c
>+++ b/net/tipc/netlink.c
>@@ -268,7 +268,8 @@ int tipc_nlmsg_parse(const struct nlmsghdr *nlh, struct nlattr ***attr)
> if (!*attr)
> return -EOPNOTSUPP;
>
>- return nlmsg_parse(nlh, GENL_HDRLEN, *attr, maxattr, tipc_nl_policy);
>+ return nlmsg_parse(nlh, GENL_HDRLEN, *attr, maxattr, tipc_nl_policy,
>+ NULL);
> }
>
> int __init tipc_netlink_start(void)
>diff --git a/net/tipc/netlink_compat.c b/net/tipc/netlink_compat.c
>index e1ae8a8a2b8e..9bfe886ab330 100644
>--- a/net/tipc/netlink_compat.c
>+++ b/net/tipc/netlink_compat.c
>@@ -296,7 +296,7 @@ static int __tipc_nl_compat_doit(struct tipc_nl_compat_cmd_doit *cmd,
>
> err = nla_parse(attrbuf, tipc_genl_family.maxattr,
> (const struct nlattr *)trans_buf->data,
>- trans_buf->len, NULL);
>+ trans_buf->len, NULL, NULL);
> if (err)
> goto parse_out;
>
>@@ -352,7 +352,7 @@ static int tipc_nl_compat_bearer_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(bearer, TIPC_NLA_BEARER_MAX,
>- attrs[TIPC_NLA_BEARER], NULL);
>+ attrs[TIPC_NLA_BEARER], NULL, NULL);
> if (err)
> return err;
>
>@@ -472,7 +472,7 @@ static int tipc_nl_compat_link_stat_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(link, TIPC_NLA_LINK_MAX, attrs[TIPC_NLA_LINK],
>- NULL);
>+ NULL, NULL);
> if (err)
> return err;
>
>@@ -480,7 +480,7 @@ static int tipc_nl_compat_link_stat_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(prop, TIPC_NLA_PROP_MAX,
>- link[TIPC_NLA_LINK_PROP], NULL);
>+ link[TIPC_NLA_LINK_PROP], NULL, NULL);
> if (err)
> return err;
>
>@@ -488,7 +488,7 @@ static int tipc_nl_compat_link_stat_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(stats, TIPC_NLA_STATS_MAX,
>- link[TIPC_NLA_LINK_STATS], NULL);
>+ link[TIPC_NLA_LINK_STATS], NULL, NULL);
> if (err)
> return err;
>
>@@ -598,7 +598,7 @@ static int tipc_nl_compat_link_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(link, TIPC_NLA_LINK_MAX, attrs[TIPC_NLA_LINK],
>- NULL);
>+ NULL, NULL);
> if (err)
> return err;
>
>@@ -795,7 +795,7 @@ static int tipc_nl_compat_name_table_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(nt, TIPC_NLA_NAME_TABLE_MAX,
>- attrs[TIPC_NLA_NAME_TABLE], NULL);
>+ attrs[TIPC_NLA_NAME_TABLE], NULL, NULL);
> if (err)
> return err;
>
>@@ -803,7 +803,7 @@ static int tipc_nl_compat_name_table_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(publ, TIPC_NLA_PUBL_MAX,
>- nt[TIPC_NLA_NAME_TABLE_PUBL], NULL);
>+ nt[TIPC_NLA_NAME_TABLE_PUBL], NULL, NULL);
> if (err)
> return err;
>
>@@ -863,7 +863,7 @@ static int __tipc_nl_compat_publ_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(publ, TIPC_NLA_PUBL_MAX, attrs[TIPC_NLA_PUBL],
>- NULL);
>+ NULL, NULL);
> if (err)
> return err;
>
>@@ -929,7 +929,7 @@ static int tipc_nl_compat_sk_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(sock, TIPC_NLA_SOCK_MAX, attrs[TIPC_NLA_SOCK],
>- NULL);
>+ NULL, NULL);
> if (err)
> return err;
>
>@@ -940,8 +940,8 @@ static int tipc_nl_compat_sk_dump(struct tipc_nl_compat_msg *msg,
> u32 node;
> struct nlattr *con[TIPC_NLA_CON_MAX + 1];
>
>- nla_parse_nested(con, TIPC_NLA_CON_MAX, sock[TIPC_NLA_SOCK_CON],
>- NULL);
>+ nla_parse_nested(con, TIPC_NLA_CON_MAX,
>+ sock[TIPC_NLA_SOCK_CON], NULL, NULL);
>
> node = nla_get_u32(con[TIPC_NLA_CON_NODE]);
> tipc_tlv_sprintf(msg->rep, " connected to <%u.%u.%u:%u>",
>@@ -977,8 +977,8 @@ static int tipc_nl_compat_media_dump(struct tipc_nl_compat_msg *msg,
> if (!attrs[TIPC_NLA_MEDIA])
> return -EINVAL;
>
>- err = nla_parse_nested(media, TIPC_NLA_MEDIA_MAX, attrs[TIPC_NLA_MEDIA],
>- NULL);
>+ err = nla_parse_nested(media, TIPC_NLA_MEDIA_MAX,
>+ attrs[TIPC_NLA_MEDIA], NULL, NULL);
> if (err)
> return err;
>
>@@ -998,7 +998,7 @@ static int tipc_nl_compat_node_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(node, TIPC_NLA_NODE_MAX, attrs[TIPC_NLA_NODE],
>- NULL);
>+ NULL, NULL);
> if (err)
> return err;
>
>@@ -1045,7 +1045,7 @@ static int tipc_nl_compat_net_dump(struct tipc_nl_compat_msg *msg,
> return -EINVAL;
>
> err = nla_parse_nested(net, TIPC_NLA_NET_MAX, attrs[TIPC_NLA_NET],
>- NULL);
>+ NULL, NULL);
> if (err)
> return err;
>
>diff --git a/net/tipc/node.c b/net/tipc/node.c
>index 4512e83652b1..1dcde24c7053 100644
>--- a/net/tipc/node.c
>+++ b/net/tipc/node.c
>@@ -1607,8 +1607,8 @@ int tipc_nl_peer_rm(struct sk_buff *skb, struct genl_info *info)
> return -EINVAL;
>
> err = nla_parse_nested(attrs, TIPC_NLA_NET_MAX,
>- info->attrs[TIPC_NLA_NET],
>- tipc_nl_net_policy);
>+ info->attrs[TIPC_NLA_NET], tipc_nl_net_policy,
>+ NULL);
> if (err)
> return err;
>
>@@ -1774,7 +1774,7 @@ int tipc_nl_node_set_link(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_LINK_MAX,
> info->attrs[TIPC_NLA_LINK],
>- tipc_nl_link_policy);
>+ tipc_nl_link_policy, NULL);
> if (err)
> return err;
>
>@@ -1902,7 +1902,7 @@ int tipc_nl_node_reset_link_stats(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_LINK_MAX,
> info->attrs[TIPC_NLA_LINK],
>- tipc_nl_link_policy);
>+ tipc_nl_link_policy, NULL);
> if (err)
> return err;
>
>@@ -2042,7 +2042,7 @@ int tipc_nl_node_set_monitor(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(attrs, TIPC_NLA_MON_MAX,
> info->attrs[TIPC_NLA_MON],
>- tipc_nl_monitor_policy);
>+ tipc_nl_monitor_policy, NULL);
> if (err)
> return err;
>
>@@ -2163,7 +2163,7 @@ int tipc_nl_node_dump_monitor_peer(struct sk_buff *skb,
>
> err = nla_parse_nested(mon, TIPC_NLA_MON_MAX,
> attrs[TIPC_NLA_MON],
>- tipc_nl_monitor_policy);
>+ tipc_nl_monitor_policy, NULL);
> if (err)
> return err;
>
>diff --git a/net/tipc/socket.c b/net/tipc/socket.c
>index 15f6ce7bf868..740100abeec3 100644
>--- a/net/tipc/socket.c
>+++ b/net/tipc/socket.c
>@@ -2866,7 +2866,7 @@ int tipc_nl_publ_dump(struct sk_buff *skb, struct netlink_callback *cb)
>
> err = nla_parse_nested(sock, TIPC_NLA_SOCK_MAX,
> attrs[TIPC_NLA_SOCK],
>- tipc_nl_sock_policy);
>+ tipc_nl_sock_policy, NULL);
> if (err)
> return err;
>
>diff --git a/net/tipc/udp_media.c b/net/tipc/udp_media.c
>index 46061cf48cd1..ecca64fc6a6f 100644
>--- a/net/tipc/udp_media.c
>+++ b/net/tipc/udp_media.c
>@@ -457,7 +457,7 @@ int tipc_udp_nl_dump_remoteip(struct sk_buff *skb, struct netlink_callback *cb)
>
> err = nla_parse_nested(battrs, TIPC_NLA_BEARER_MAX,
> attrs[TIPC_NLA_BEARER],
>- tipc_nl_bearer_policy);
>+ tipc_nl_bearer_policy, NULL);
> if (err)
> return err;
>
>@@ -609,7 +609,8 @@ int tipc_udp_nl_bearer_add(struct tipc_bearer *b, struct nlattr *attr)
> struct nlattr *opts[TIPC_NLA_UDP_MAX + 1];
> struct udp_media_addr *dst;
>
>- if (nla_parse_nested(opts, TIPC_NLA_UDP_MAX, attr, tipc_nl_udp_policy))
>+ if (nla_parse_nested(opts, TIPC_NLA_UDP_MAX, attr,
>+ tipc_nl_udp_policy, NULL))
> return -EINVAL;
>
> if (!opts[TIPC_NLA_UDP_REMOTE])
>@@ -662,7 +663,7 @@ static int tipc_udp_enable(struct net *net, struct tipc_bearer *b,
>
> if (nla_parse_nested(opts, TIPC_NLA_UDP_MAX,
> attrs[TIPC_NLA_BEARER_UDP_OPTS],
>- tipc_nl_udp_policy))
>+ tipc_nl_udp_policy, NULL))
> goto err;
>
> if (!opts[TIPC_NLA_UDP_LOCAL] || !opts[TIPC_NLA_UDP_REMOTE]) {
>diff --git a/net/wireless/nl80211.c b/net/wireless/nl80211.c
>index 2312dc2ffdb9..e7594a3a0ab6 100644
>--- a/net/wireless/nl80211.c
>+++ b/net/wireless/nl80211.c
>@@ -548,7 +548,7 @@ static int nl80211_prepare_wdev_dump(struct sk_buff *skb,
> if (!cb->args[0]) {
> err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
> genl_family_attrbuf(&nl80211_fam),
>- nl80211_fam.maxattr, nl80211_policy);
>+ nl80211_fam.maxattr, nl80211_policy, NULL);
> if (err)
> return err;
>
>@@ -719,7 +719,7 @@ static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
> {
> struct nlattr *tb[NL80211_KEY_MAX + 1];
> int err = nla_parse_nested(tb, NL80211_KEY_MAX, key,
>- nl80211_key_policy);
>+ nl80211_key_policy, NULL);
> if (err)
> return err;
>
>@@ -760,7 +760,7 @@ static int nl80211_parse_key_new(struct nlattr *key, struct key_parse *k)
>
> err = nla_parse_nested(kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
> tb[NL80211_KEY_DEFAULT_TYPES],
>- nl80211_key_default_policy);
>+ nl80211_key_default_policy, NULL);
> if (err)
> return err;
>
>@@ -807,10 +807,10 @@ static int nl80211_parse_key_old(struct genl_info *info, struct key_parse *k)
>
> if (info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES]) {
> struct nlattr *kdt[NUM_NL80211_KEY_DEFAULT_TYPES];
>- int err = nla_parse_nested(
>- kdt, NUM_NL80211_KEY_DEFAULT_TYPES - 1,
>- info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
>- nl80211_key_default_policy);
>+ int err = nla_parse_nested(kdt,
>+ NUM_NL80211_KEY_DEFAULT_TYPES - 1,
>+ info->attrs[NL80211_ATTR_KEY_DEFAULT_TYPES],
>+ nl80211_key_default_policy, NULL);
> if (err)
> return err;
>
>@@ -1892,8 +1892,8 @@ static int nl80211_dump_wiphy_parse(struct sk_buff *skb,
> struct nl80211_dump_wiphy_state *state)
> {
> struct nlattr **tb = genl_family_attrbuf(&nl80211_fam);
>- int ret = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
>- tb, nl80211_fam.maxattr, nl80211_policy);
>+ int ret = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize, tb,
>+ nl80211_fam.maxattr, nl80211_policy, NULL);
> /* ignore parse errors for backward compatibility */
> if (ret)
> return 0;
>@@ -2308,7 +2308,7 @@ static int nl80211_set_wiphy(struct sk_buff *skb, struct genl_info *info)
> rem_txq_params) {
> result = nla_parse_nested(tb, NL80211_TXQ_ATTR_MAX,
> nl_txq_params,
>- txq_params_policy);
>+ txq_params_policy, NULL);
> if (result)
> return result;
> result = parse_txq_params(tb, &txq_params);
>@@ -2695,8 +2695,8 @@ static int parse_monitor_flags(struct nlattr *nla, u32 *mntrflags)
> if (!nla)
> return -EINVAL;
>
>- if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX,
>- nla, mntr_flags_policy))
>+ if (nla_parse_nested(flags, NL80211_MNTR_FLAG_MAX, nla,
>+ mntr_flags_policy, NULL))
> return -EINVAL;
>
> for (flag = 1; flag <= NL80211_MNTR_FLAG_MAX; flag++)
>@@ -3561,7 +3561,7 @@ static int nl80211_parse_tx_bitrate_mask(struct genl_info *info,
> if (sband == NULL)
> return -EINVAL;
> err = nla_parse_nested(tb, NL80211_TXRATE_MAX, tx_rates,
>- nl80211_txattr_policy);
>+ nl80211_txattr_policy, NULL);
> if (err)
> return err;
> if (tb[NL80211_TXRATE_LEGACY]) {
>@@ -4100,8 +4100,8 @@ static int parse_station_flags(struct genl_info *info,
> if (!nla)
> return 0;
>
>- if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX,
>- nla, sta_flags_policy))
>+ if (nla_parse_nested(flags, NL80211_STA_FLAG_MAX, nla,
>+ sta_flags_policy, NULL))
> return -EINVAL;
>
> /*
>@@ -4728,7 +4728,7 @@ static int nl80211_parse_sta_wme(struct genl_info *info,
>
> nla = info->attrs[NL80211_ATTR_STA_WME];
> err = nla_parse_nested(tb, NL80211_STA_WME_MAX, nla,
>- nl80211_sta_wme_policy);
>+ nl80211_sta_wme_policy, NULL);
> if (err)
> return err;
>
>@@ -5853,7 +5853,7 @@ do { \
> return -EINVAL;
> if (nla_parse_nested(tb, NL80211_MESHCONF_ATTR_MAX,
> info->attrs[NL80211_ATTR_MESH_CONFIG],
>- nl80211_meshconf_params_policy))
>+ nl80211_meshconf_params_policy, NULL))
> return -EINVAL;
>
> /* This makes sure that there aren't more than 32 mesh config
>@@ -6002,7 +6002,7 @@ static int nl80211_parse_mesh_setup(struct genl_info *info,
> return -EINVAL;
> if (nla_parse_nested(tb, NL80211_MESH_SETUP_ATTR_MAX,
> info->attrs[NL80211_ATTR_MESH_SETUP],
>- nl80211_mesh_setup_params_policy))
>+ nl80211_mesh_setup_params_policy, NULL))
> return -EINVAL;
>
> if (tb[NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC])
>@@ -6393,7 +6393,7 @@ static int nl80211_set_reg(struct sk_buff *skb, struct genl_info *info)
> nla_for_each_nested(nl_reg_rule, info->attrs[NL80211_ATTR_REG_RULES],
> rem_reg_rules) {
> r = nla_parse_nested(tb, NL80211_REG_RULE_ATTR_MAX,
>- nl_reg_rule, reg_rule_policy);
>+ nl_reg_rule, reg_rule_policy, NULL);
> if (r)
> goto bad_reg;
> r = parse_reg_rule(tb, &rd->reg_rules[rule_idx]);
>@@ -6461,7 +6461,7 @@ static int parse_bss_select(struct nlattr *nla, struct wiphy *wiphy,
> return -EINVAL;
>
> err = nla_parse_nested(attr, NL80211_BSS_SELECT_ATTR_MAX, nest,
>- nl80211_bss_select_policy);
>+ nl80211_bss_select_policy, NULL);
> if (err)
> return err;
>
>@@ -6862,7 +6862,7 @@ nl80211_parse_sched_scan_plans(struct wiphy *wiphy, int n_plans,
> return -EINVAL;
>
> err = nla_parse_nested(plan, NL80211_SCHED_SCAN_PLAN_MAX,
>- attr, nl80211_plan_policy);
>+ attr, nl80211_plan_policy, NULL);
> if (err)
> return err;
>
>@@ -6953,7 +6953,8 @@ nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
>
> err = nla_parse_nested(tb,
> NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
>- attr, nl80211_match_policy);
>+ attr, nl80211_match_policy,
>+ NULL);
> if (err)
> return ERR_PTR(err);
> /* add other standalone attributes here */
>@@ -7132,7 +7133,8 @@ nl80211_parse_sched_scan(struct wiphy *wiphy, struct wireless_dev *wdev,
>
> err = nla_parse_nested(tb,
> NL80211_SCHED_SCAN_MATCH_ATTR_MAX,
>- attr, nl80211_match_policy);
>+ attr, nl80211_match_policy,
>+ NULL);
> if (err)
> goto out_free;
> ssid = tb[NL80211_SCHED_SCAN_MATCH_ATTR_SSID];
>@@ -7433,7 +7435,7 @@ static int nl80211_channel_switch(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(csa_attrs, NL80211_ATTR_MAX,
> info->attrs[NL80211_ATTR_CSA_IES],
>- nl80211_policy);
>+ nl80211_policy, NULL);
> if (err)
> return err;
>
>@@ -8639,7 +8641,8 @@ static int nl80211_testmode_dump(struct sk_buff *skb,
> struct nlattr **attrbuf = genl_family_attrbuf(&nl80211_fam);
>
> err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
>- attrbuf, nl80211_fam.maxattr, nl80211_policy);
>+ attrbuf, nl80211_fam.maxattr,
>+ nl80211_policy, NULL);
> if (err)
> goto out_err;
>
>@@ -9530,7 +9533,7 @@ static int nl80211_set_cqm(struct sk_buff *skb, struct genl_info *info)
> return -EINVAL;
>
> err = nla_parse_nested(attrs, NL80211_ATTR_CQM_MAX, cqm,
>- nl80211_attr_cqm_policy);
>+ nl80211_attr_cqm_policy, NULL);
> if (err)
> return err;
>
>@@ -9940,7 +9943,7 @@ static int nl80211_parse_wowlan_tcp(struct cfg80211_registered_device *rdev,
> return -EINVAL;
>
> err = nla_parse_nested(tb, MAX_NL80211_WOWLAN_TCP, attr,
>- nl80211_wowlan_tcp_policy);
>+ nl80211_wowlan_tcp_policy, NULL);
> if (err)
> return err;
>
>@@ -10085,7 +10088,8 @@ static int nl80211_parse_wowlan_nd(struct cfg80211_registered_device *rdev,
> goto out;
> }
>
>- err = nla_parse_nested(tb, NL80211_ATTR_MAX, attr, nl80211_policy);
>+ err = nla_parse_nested(tb, NL80211_ATTR_MAX, attr, nl80211_policy,
>+ NULL);
> if (err)
> goto out;
>
>@@ -10122,7 +10126,7 @@ static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(tb, MAX_NL80211_WOWLAN_TRIG,
> info->attrs[NL80211_ATTR_WOWLAN_TRIGGERS],
>- nl80211_wowlan_policy);
>+ nl80211_wowlan_policy, NULL);
> if (err)
> return err;
>
>@@ -10205,7 +10209,7 @@ static int nl80211_set_wowlan(struct sk_buff *skb, struct genl_info *info)
> u8 *mask_pat;
>
> nla_parse_nested(pat_tb, MAX_NL80211_PKTPAT, pat,
>- NULL);
>+ NULL, NULL);
> err = -EINVAL;
> if (!pat_tb[NL80211_PKTPAT_MASK] ||
> !pat_tb[NL80211_PKTPAT_PATTERN])
>@@ -10416,7 +10420,7 @@ static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
> struct nlattr *pat_tb[NUM_NL80211_PKTPAT];
>
> err = nla_parse_nested(tb, NL80211_ATTR_COALESCE_RULE_MAX, rule,
>- nl80211_coalesce_policy);
>+ nl80211_coalesce_policy, NULL);
> if (err)
> return err;
>
>@@ -10454,7 +10458,7 @@ static int nl80211_parse_coalesce_rule(struct cfg80211_registered_device *rdev,
> rem) {
> u8 *mask_pat;
>
>- nla_parse_nested(pat_tb, MAX_NL80211_PKTPAT, pat, NULL);
>+ nla_parse_nested(pat_tb, MAX_NL80211_PKTPAT, pat, NULL, NULL);
> if (!pat_tb[NL80211_PKTPAT_MASK] ||
> !pat_tb[NL80211_PKTPAT_PATTERN])
> return -EINVAL;
>@@ -10575,7 +10579,7 @@ static int nl80211_set_rekey_data(struct sk_buff *skb, struct genl_info *info)
>
> err = nla_parse_nested(tb, MAX_NL80211_REKEY_DATA,
> info->attrs[NL80211_ATTR_REKEY_DATA],
>- nl80211_rekey_policy);
>+ nl80211_rekey_policy, NULL);
> if (err)
> return err;
>
>@@ -10892,7 +10896,7 @@ static int nl80211_nan_add_func(struct sk_buff *skb,
>
> err = nla_parse_nested(tb, NL80211_NAN_FUNC_ATTR_MAX,
> info->attrs[NL80211_ATTR_NAN_FUNC],
>- nl80211_nan_func_policy);
>+ nl80211_nan_func_policy, NULL);
> if (err)
> return err;
>
>@@ -10989,7 +10993,7 @@ static int nl80211_nan_add_func(struct sk_buff *skb,
>
> err = nla_parse_nested(srf_tb, NL80211_NAN_SRF_ATTR_MAX,
> tb[NL80211_NAN_FUNC_SRF],
>- nl80211_nan_srf_policy);
>+ nl80211_nan_srf_policy, NULL);
> if (err)
> goto out;
>
>@@ -11524,8 +11528,8 @@ static int nl80211_prepare_vendor_dump(struct sk_buff *skb,
> return 0;
> }
>
>- err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize,
>- attrbuf, nl80211_fam.maxattr, nl80211_policy);
>+ err = nlmsg_parse(cb->nlh, GENL_HDRLEN + nl80211_fam.hdrsize, attrbuf,
>+ nl80211_fam.maxattr, nl80211_policy, NULL);
> if (err)
> return err;
>
>diff --git a/net/xfrm/xfrm_user.c b/net/xfrm/xfrm_user.c
>index e93d5c0471b2..804e99a3227c 100644
>--- a/net/xfrm/xfrm_user.c
>+++ b/net/xfrm/xfrm_user.c
>@@ -932,8 +932,8 @@ static int xfrm_dump_sa(struct sk_buff *skb, struct netlink_callback *cb)
> u8 proto = 0;
> int err;
>
>- err = nlmsg_parse(cb->nlh, 0, attrs, XFRMA_MAX,
>- xfrma_policy);
>+ err = nlmsg_parse(cb->nlh, 0, attrs, XFRMA_MAX, xfrma_policy,
>+ NULL);
> if (err < 0)
> return err;
>
>@@ -2489,7 +2489,7 @@ static int xfrm_user_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh,
>
> err = nlmsg_parse(nlh, xfrm_msg_min[type], attrs,
> link->nla_max ? : XFRMA_MAX,
>- link->nla_pol ? : xfrma_policy);
>+ link->nla_pol ? : xfrma_policy, NULL);
> if (err < 0)
> return err;
>
>--
>2.11.0
>
Powered by blists - more mailing lists