Hi, For the record, this bug is now fixed by linux 4.8[1] in unstable which now emulates FPU branch delay slots using a per-thread page so the stack is never executed.
Thanks, James [1] commit 432c6bacbd0c (MIPS: Use per-mm page to execute branch delay slot instructions)
signature.asc
Description: OpenPGP digital signature

