xref: /linux/net/bridge/br_netlink.c (revision 06b9cce42634a50f2840777a66553b02320db5ef)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *	Bridge netlink control interface
4  *
5  *	Authors:
6  *	Stephen Hemminger		<shemminger@osdl.org>
7  */
8 
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
14 #include <net/sock.h>
15 #include <uapi/linux/if_bridge.h>
16 
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_cfm.h"
20 #include "br_private_tunnel.h"
21 #include "br_private_mcast_eht.h"
22 
23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
24 				u32 filter_mask)
25 {
26 	struct net_bridge_vlan *v;
27 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
28 	u16 flags, pvid;
29 	int num_vlans = 0;
30 
31 	if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
32 		return 0;
33 
34 	pvid = br_get_pvid(vg);
35 	/* Count number of vlan infos */
36 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
37 		flags = 0;
38 		/* only a context, bridge vlan not activated */
39 		if (!br_vlan_should_use(v))
40 			continue;
41 		if (v->vid == pvid)
42 			flags |= BRIDGE_VLAN_INFO_PVID;
43 
44 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
45 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
46 
47 		if (vid_range_start == 0) {
48 			goto initvars;
49 		} else if ((v->vid - vid_range_end) == 1 &&
50 			flags == vid_range_flags) {
51 			vid_range_end = v->vid;
52 			continue;
53 		} else {
54 			if ((vid_range_end - vid_range_start) > 0)
55 				num_vlans += 2;
56 			else
57 				num_vlans += 1;
58 		}
59 initvars:
60 		vid_range_start = v->vid;
61 		vid_range_end = v->vid;
62 		vid_range_flags = flags;
63 	}
64 
65 	if (vid_range_start != 0) {
66 		if ((vid_range_end - vid_range_start) > 0)
67 			num_vlans += 2;
68 		else
69 			num_vlans += 1;
70 	}
71 
72 	return num_vlans;
73 }
74 
75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
76 				 u32 filter_mask)
77 {
78 	int num_vlans;
79 
80 	if (!vg)
81 		return 0;
82 
83 	if (filter_mask & RTEXT_FILTER_BRVLAN)
84 		return vg->num_vlans;
85 
86 	rcu_read_lock();
87 	num_vlans = __get_num_vlan_infos(vg, filter_mask);
88 	rcu_read_unlock();
89 
90 	return num_vlans;
91 }
92 
93 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
94 					   u32 filter_mask)
95 {
96 	struct net_bridge_vlan_group *vg = NULL;
97 	struct net_bridge_port *p = NULL;
98 	struct net_bridge *br = NULL;
99 	u32 num_cfm_peer_mep_infos;
100 	u32 num_cfm_mep_infos;
101 	size_t vinfo_sz = 0;
102 	int num_vlan_infos;
103 
104 	rcu_read_lock();
105 	if (netif_is_bridge_port(dev)) {
106 		p = br_port_get_check_rcu(dev);
107 		if (p)
108 			vg = nbp_vlan_group_rcu(p);
109 	} else if (netif_is_bridge_master(dev)) {
110 		br = netdev_priv(dev);
111 		vg = br_vlan_group_rcu(br);
112 	}
113 	num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
114 	rcu_read_unlock();
115 
116 	if (p && (p->flags & BR_VLAN_TUNNEL))
117 		vinfo_sz += br_get_vlan_tunnel_info_size(vg);
118 
119 	/* Each VLAN is returned in bridge_vlan_info along with flags */
120 	vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
121 
122 	if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
123 		return vinfo_sz;
124 
125 	if (!br)
126 		return vinfo_sz;
127 
128 	/* CFM status info must be added */
129 	br_cfm_mep_count(br, &num_cfm_mep_infos);
130 	br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
131 
132 	vinfo_sz += nla_total_size(0);	/* IFLA_BRIDGE_CFM */
133 	/* For each status struct the MEP instance (u32) is added */
134 	/* MEP instance (u32) + br_cfm_mep_status */
135 	vinfo_sz += num_cfm_mep_infos *
136 		     /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
137 		    (nla_total_size(sizeof(u32))
138 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
139 		     + nla_total_size(sizeof(u32))
140 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
141 		     + nla_total_size(sizeof(u32))
142 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
143 		     + nla_total_size(sizeof(u32)));
144 	/* MEP instance (u32) + br_cfm_cc_peer_status */
145 	vinfo_sz += num_cfm_peer_mep_infos *
146 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
147 		    (nla_total_size(sizeof(u32))
148 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
149 		     + nla_total_size(sizeof(u32))
150 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
151 		     + nla_total_size(sizeof(u32))
152 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
153 		     + nla_total_size(sizeof(u32))
154 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
155 		     + nla_total_size(sizeof(u8))
156 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
157 		     + nla_total_size(sizeof(u8))
158 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
159 		     + nla_total_size(sizeof(u32))
160 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
161 		     + nla_total_size(sizeof(u32))
162 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
163 		     + nla_total_size(sizeof(u32)));
164 
165 	return vinfo_sz;
166 }
167 
168 static inline size_t br_port_info_size(void)
169 {
170 	return nla_total_size(1)	/* IFLA_BRPORT_STATE  */
171 		+ nla_total_size(2)	/* IFLA_BRPORT_PRIORITY */
172 		+ nla_total_size(4)	/* IFLA_BRPORT_COST */
173 		+ nla_total_size(1)	/* IFLA_BRPORT_MODE */
174 		+ nla_total_size(1)	/* IFLA_BRPORT_GUARD */
175 		+ nla_total_size(1)	/* IFLA_BRPORT_PROTECT */
176 		+ nla_total_size(1)	/* IFLA_BRPORT_FAST_LEAVE */
177 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_TO_UCAST */
178 		+ nla_total_size(1)	/* IFLA_BRPORT_LEARNING */
179 		+ nla_total_size(1)	/* IFLA_BRPORT_UNICAST_FLOOD */
180 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_FLOOD */
181 		+ nla_total_size(1)	/* IFLA_BRPORT_BCAST_FLOOD */
182 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP */
183 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP_WIFI */
184 		+ nla_total_size(1)	/* IFLA_BRPORT_VLAN_TUNNEL */
185 		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_SUPPRESS */
186 		+ nla_total_size(1)	/* IFLA_BRPORT_ISOLATED */
187 		+ nla_total_size(1)	/* IFLA_BRPORT_LOCKED */
188 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_ROOT_ID */
189 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_BRIDGE_ID */
190 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_PORT */
191 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_COST */
192 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_ID */
193 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_NO */
194 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
195 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_CONFIG_PENDING */
196 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
197 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
198 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
199 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
200 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MULTICAST_ROUTER */
201 #endif
202 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_GROUP_FWD_MASK */
203 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_RING_OPEN */
204 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_IN_OPEN */
205 		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
206 		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
207 		+ 0;
208 }
209 
210 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
211 {
212 	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
213 		+ nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
214 		+ nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
215 		+ nla_total_size(4) /* IFLA_MASTER */
216 		+ nla_total_size(4) /* IFLA_MTU */
217 		+ nla_total_size(4) /* IFLA_LINK */
218 		+ nla_total_size(1) /* IFLA_OPERSTATE */
219 		+ nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
220 		+ nla_total_size(br_get_link_af_size_filtered(dev,
221 				 filter_mask)) /* IFLA_AF_SPEC */
222 		+ nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
223 }
224 
225 static int br_port_fill_attrs(struct sk_buff *skb,
226 			      const struct net_bridge_port *p)
227 {
228 	u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
229 	struct net_bridge_port *backup_p;
230 	u64 timerval;
231 
232 	if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
233 	    nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
234 	    nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
235 	    nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
236 	    nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
237 	    nla_put_u8(skb, IFLA_BRPORT_PROTECT,
238 		       !!(p->flags & BR_ROOT_BLOCK)) ||
239 	    nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
240 		       !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
241 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
242 		       !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
243 	    nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
244 	    nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
245 		       !!(p->flags & BR_FLOOD)) ||
246 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
247 		       !!(p->flags & BR_MCAST_FLOOD)) ||
248 	    nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
249 		       !!(p->flags & BR_BCAST_FLOOD)) ||
250 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
251 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
252 		       !!(p->flags & BR_PROXYARP_WIFI)) ||
253 	    nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
254 		    &p->designated_root) ||
255 	    nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
256 		    &p->designated_bridge) ||
257 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
258 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
259 	    nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
260 	    nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
261 	    nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
262 		       p->topology_change_ack) ||
263 	    nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
264 	    nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
265 							BR_VLAN_TUNNEL)) ||
266 	    nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
267 	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
268 		       !!(p->flags & BR_NEIGH_SUPPRESS)) ||
269 	    nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
270 							  BR_MRP_LOST_CONT)) ||
271 	    nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
272 		       !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
273 	    nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)) ||
274 	    nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(p->flags & BR_PORT_LOCKED)))
275 		return -EMSGSIZE;
276 
277 	timerval = br_timer_value(&p->message_age_timer);
278 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
279 			      IFLA_BRPORT_PAD))
280 		return -EMSGSIZE;
281 	timerval = br_timer_value(&p->forward_delay_timer);
282 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
283 			      IFLA_BRPORT_PAD))
284 		return -EMSGSIZE;
285 	timerval = br_timer_value(&p->hold_timer);
286 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
287 			      IFLA_BRPORT_PAD))
288 		return -EMSGSIZE;
289 
290 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
291 	if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
292 		       p->multicast_ctx.multicast_router) ||
293 	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
294 			p->multicast_eht_hosts_limit) ||
295 	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
296 			p->multicast_eht_hosts_cnt))
297 		return -EMSGSIZE;
298 #endif
299 
300 	/* we might be called only with br->lock */
301 	rcu_read_lock();
302 	backup_p = rcu_dereference(p->backup_port);
303 	if (backup_p)
304 		nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
305 			    backup_p->dev->ifindex);
306 	rcu_read_unlock();
307 
308 	return 0;
309 }
310 
311 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
312 				    u16 vid_end, u16 flags)
313 {
314 	struct  bridge_vlan_info vinfo;
315 
316 	if ((vid_end - vid_start) > 0) {
317 		/* add range to skb */
318 		vinfo.vid = vid_start;
319 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
320 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
321 			    sizeof(vinfo), &vinfo))
322 			goto nla_put_failure;
323 
324 		vinfo.vid = vid_end;
325 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
326 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
327 			    sizeof(vinfo), &vinfo))
328 			goto nla_put_failure;
329 	} else {
330 		vinfo.vid = vid_start;
331 		vinfo.flags = flags;
332 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
333 			    sizeof(vinfo), &vinfo))
334 			goto nla_put_failure;
335 	}
336 
337 	return 0;
338 
339 nla_put_failure:
340 	return -EMSGSIZE;
341 }
342 
343 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
344 					 struct net_bridge_vlan_group *vg)
345 {
346 	struct net_bridge_vlan *v;
347 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
348 	u16 flags, pvid;
349 	int err = 0;
350 
351 	/* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
352 	 * and mark vlan info with begin and end flags
353 	 * if vlaninfo represents a range
354 	 */
355 	pvid = br_get_pvid(vg);
356 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
357 		flags = 0;
358 		if (!br_vlan_should_use(v))
359 			continue;
360 		if (v->vid == pvid)
361 			flags |= BRIDGE_VLAN_INFO_PVID;
362 
363 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
364 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
365 
366 		if (vid_range_start == 0) {
367 			goto initvars;
368 		} else if ((v->vid - vid_range_end) == 1 &&
369 			flags == vid_range_flags) {
370 			vid_range_end = v->vid;
371 			continue;
372 		} else {
373 			err = br_fill_ifvlaninfo_range(skb, vid_range_start,
374 						       vid_range_end,
375 						       vid_range_flags);
376 			if (err)
377 				return err;
378 		}
379 
380 initvars:
381 		vid_range_start = v->vid;
382 		vid_range_end = v->vid;
383 		vid_range_flags = flags;
384 	}
385 
386 	if (vid_range_start != 0) {
387 		/* Call it once more to send any left over vlans */
388 		err = br_fill_ifvlaninfo_range(skb, vid_range_start,
389 					       vid_range_end,
390 					       vid_range_flags);
391 		if (err)
392 			return err;
393 	}
394 
395 	return 0;
396 }
397 
398 static int br_fill_ifvlaninfo(struct sk_buff *skb,
399 			      struct net_bridge_vlan_group *vg)
400 {
401 	struct bridge_vlan_info vinfo;
402 	struct net_bridge_vlan *v;
403 	u16 pvid;
404 
405 	pvid = br_get_pvid(vg);
406 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
407 		if (!br_vlan_should_use(v))
408 			continue;
409 
410 		vinfo.vid = v->vid;
411 		vinfo.flags = 0;
412 		if (v->vid == pvid)
413 			vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
414 
415 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
416 			vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
417 
418 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
419 			    sizeof(vinfo), &vinfo))
420 			goto nla_put_failure;
421 	}
422 
423 	return 0;
424 
425 nla_put_failure:
426 	return -EMSGSIZE;
427 }
428 
429 /*
430  * Create one netlink message for one interface
431  * Contains port and master info as well as carrier and bridge state.
432  */
433 static int br_fill_ifinfo(struct sk_buff *skb,
434 			  const struct net_bridge_port *port,
435 			  u32 pid, u32 seq, int event, unsigned int flags,
436 			  u32 filter_mask, const struct net_device *dev,
437 			  bool getlink)
438 {
439 	u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
440 	struct nlattr *af = NULL;
441 	struct net_bridge *br;
442 	struct ifinfomsg *hdr;
443 	struct nlmsghdr *nlh;
444 
445 	if (port)
446 		br = port->br;
447 	else
448 		br = netdev_priv(dev);
449 
450 	br_debug(br, "br_fill_info event %d port %s master %s\n",
451 		     event, dev->name, br->dev->name);
452 
453 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
454 	if (nlh == NULL)
455 		return -EMSGSIZE;
456 
457 	hdr = nlmsg_data(nlh);
458 	hdr->ifi_family = AF_BRIDGE;
459 	hdr->__ifi_pad = 0;
460 	hdr->ifi_type = dev->type;
461 	hdr->ifi_index = dev->ifindex;
462 	hdr->ifi_flags = dev_get_flags(dev);
463 	hdr->ifi_change = 0;
464 
465 	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
466 	    nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
467 	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
468 	    nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
469 	    (dev->addr_len &&
470 	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
471 	    (dev->ifindex != dev_get_iflink(dev) &&
472 	     nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
473 		goto nla_put_failure;
474 
475 	if (event == RTM_NEWLINK && port) {
476 		struct nlattr *nest;
477 
478 		nest = nla_nest_start(skb, IFLA_PROTINFO);
479 		if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
480 			goto nla_put_failure;
481 		nla_nest_end(skb, nest);
482 	}
483 
484 	if (filter_mask & (RTEXT_FILTER_BRVLAN |
485 			   RTEXT_FILTER_BRVLAN_COMPRESSED |
486 			   RTEXT_FILTER_MRP |
487 			   RTEXT_FILTER_CFM_CONFIG |
488 			   RTEXT_FILTER_CFM_STATUS)) {
489 		af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
490 		if (!af)
491 			goto nla_put_failure;
492 	}
493 
494 	/* Check if  the VID information is requested */
495 	if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
496 	    (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
497 		struct net_bridge_vlan_group *vg;
498 		int err;
499 
500 		/* RCU needed because of the VLAN locking rules (rcu || rtnl) */
501 		rcu_read_lock();
502 		if (port)
503 			vg = nbp_vlan_group_rcu(port);
504 		else
505 			vg = br_vlan_group_rcu(br);
506 
507 		if (!vg || !vg->num_vlans) {
508 			rcu_read_unlock();
509 			goto done;
510 		}
511 		if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
512 			err = br_fill_ifvlaninfo_compressed(skb, vg);
513 		else
514 			err = br_fill_ifvlaninfo(skb, vg);
515 
516 		if (port && (port->flags & BR_VLAN_TUNNEL))
517 			err = br_fill_vlan_tunnel_info(skb, vg);
518 		rcu_read_unlock();
519 		if (err)
520 			goto nla_put_failure;
521 	}
522 
523 	if (filter_mask & RTEXT_FILTER_MRP) {
524 		int err;
525 
526 		if (!br_mrp_enabled(br) || port)
527 			goto done;
528 
529 		rcu_read_lock();
530 		err = br_mrp_fill_info(skb, br);
531 		rcu_read_unlock();
532 
533 		if (err)
534 			goto nla_put_failure;
535 	}
536 
537 	if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
538 		struct nlattr *cfm_nest = NULL;
539 		int err;
540 
541 		if (!br_cfm_created(br) || port)
542 			goto done;
543 
544 		cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
545 		if (!cfm_nest)
546 			goto nla_put_failure;
547 
548 		if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
549 			rcu_read_lock();
550 			err = br_cfm_config_fill_info(skb, br);
551 			rcu_read_unlock();
552 			if (err)
553 				goto nla_put_failure;
554 		}
555 
556 		if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
557 			rcu_read_lock();
558 			err = br_cfm_status_fill_info(skb, br, getlink);
559 			rcu_read_unlock();
560 			if (err)
561 				goto nla_put_failure;
562 		}
563 
564 		nla_nest_end(skb, cfm_nest);
565 	}
566 
567 done:
568 	if (af)
569 		nla_nest_end(skb, af);
570 	nlmsg_end(skb, nlh);
571 	return 0;
572 
573 nla_put_failure:
574 	nlmsg_cancel(skb, nlh);
575 	return -EMSGSIZE;
576 }
577 
578 void br_info_notify(int event, const struct net_bridge *br,
579 		    const struct net_bridge_port *port, u32 filter)
580 {
581 	struct net_device *dev;
582 	struct sk_buff *skb;
583 	int err = -ENOBUFS;
584 	struct net *net;
585 	u16 port_no = 0;
586 
587 	if (WARN_ON(!port && !br))
588 		return;
589 
590 	if (port) {
591 		dev = port->dev;
592 		br = port->br;
593 		port_no = port->port_no;
594 	} else {
595 		dev = br->dev;
596 	}
597 
598 	net = dev_net(dev);
599 	br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
600 
601 	skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
602 	if (skb == NULL)
603 		goto errout;
604 
605 	err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
606 	if (err < 0) {
607 		/* -EMSGSIZE implies BUG in br_nlmsg_size() */
608 		WARN_ON(err == -EMSGSIZE);
609 		kfree_skb(skb);
610 		goto errout;
611 	}
612 	rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
613 	return;
614 errout:
615 	rtnl_set_sk_err(net, RTNLGRP_LINK, err);
616 }
617 
618 /* Notify listeners of a change in bridge or port information */
619 void br_ifinfo_notify(int event, const struct net_bridge *br,
620 		      const struct net_bridge_port *port)
621 {
622 	u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
623 
624 	return br_info_notify(event, br, port, filter);
625 }
626 
627 /*
628  * Dump information about all ports, in response to GETLINK
629  */
630 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
631 	       struct net_device *dev, u32 filter_mask, int nlflags)
632 {
633 	struct net_bridge_port *port = br_port_get_rtnl(dev);
634 
635 	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
636 	    !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
637 	    !(filter_mask & RTEXT_FILTER_MRP) &&
638 	    !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
639 	    !(filter_mask & RTEXT_FILTER_CFM_STATUS))
640 		return 0;
641 
642 	return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
643 			      filter_mask, dev, true);
644 }
645 
646 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
647 			int cmd, struct bridge_vlan_info *vinfo, bool *changed,
648 			struct netlink_ext_ack *extack)
649 {
650 	bool curr_change;
651 	int err = 0;
652 
653 	switch (cmd) {
654 	case RTM_SETLINK:
655 		if (p) {
656 			/* if the MASTER flag is set this will act on the global
657 			 * per-VLAN entry as well
658 			 */
659 			err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
660 					   &curr_change, extack);
661 		} else {
662 			vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
663 			err = br_vlan_add(br, vinfo->vid, vinfo->flags,
664 					  &curr_change, extack);
665 		}
666 		if (curr_change)
667 			*changed = true;
668 		break;
669 
670 	case RTM_DELLINK:
671 		if (p) {
672 			if (!nbp_vlan_delete(p, vinfo->vid))
673 				*changed = true;
674 
675 			if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
676 			    !br_vlan_delete(p->br, vinfo->vid))
677 				*changed = true;
678 		} else if (!br_vlan_delete(br, vinfo->vid)) {
679 			*changed = true;
680 		}
681 		break;
682 	}
683 
684 	return err;
685 }
686 
687 int br_process_vlan_info(struct net_bridge *br,
688 			 struct net_bridge_port *p, int cmd,
689 			 struct bridge_vlan_info *vinfo_curr,
690 			 struct bridge_vlan_info **vinfo_last,
691 			 bool *changed,
692 			 struct netlink_ext_ack *extack)
693 {
694 	int err, rtm_cmd;
695 
696 	if (!br_vlan_valid_id(vinfo_curr->vid, extack))
697 		return -EINVAL;
698 
699 	/* needed for vlan-only NEWVLAN/DELVLAN notifications */
700 	rtm_cmd = br_afspec_cmd_to_rtm(cmd);
701 
702 	if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
703 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
704 			return -EINVAL;
705 		*vinfo_last = vinfo_curr;
706 		return 0;
707 	}
708 
709 	if (*vinfo_last) {
710 		struct bridge_vlan_info tmp_vinfo;
711 		int v, v_change_start = 0;
712 
713 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
714 			return -EINVAL;
715 
716 		memcpy(&tmp_vinfo, *vinfo_last,
717 		       sizeof(struct bridge_vlan_info));
718 		for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
719 			bool curr_change = false;
720 
721 			tmp_vinfo.vid = v;
722 			err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
723 					   extack);
724 			if (err)
725 				break;
726 			if (curr_change) {
727 				*changed = curr_change;
728 				if (!v_change_start)
729 					v_change_start = v;
730 			} else {
731 				/* nothing to notify yet */
732 				if (!v_change_start)
733 					continue;
734 				br_vlan_notify(br, p, v_change_start,
735 					       v - 1, rtm_cmd);
736 				v_change_start = 0;
737 			}
738 			cond_resched();
739 		}
740 		/* v_change_start is set only if the last/whole range changed */
741 		if (v_change_start)
742 			br_vlan_notify(br, p, v_change_start,
743 				       v - 1, rtm_cmd);
744 
745 		*vinfo_last = NULL;
746 
747 		return err;
748 	}
749 
750 	err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
751 	if (*changed)
752 		br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
753 
754 	return err;
755 }
756 
757 static int br_afspec(struct net_bridge *br,
758 		     struct net_bridge_port *p,
759 		     struct nlattr *af_spec,
760 		     int cmd, bool *changed,
761 		     struct netlink_ext_ack *extack)
762 {
763 	struct bridge_vlan_info *vinfo_curr = NULL;
764 	struct bridge_vlan_info *vinfo_last = NULL;
765 	struct nlattr *attr;
766 	struct vtunnel_info tinfo_last = {};
767 	struct vtunnel_info tinfo_curr = {};
768 	int err = 0, rem;
769 
770 	nla_for_each_nested(attr, af_spec, rem) {
771 		err = 0;
772 		switch (nla_type(attr)) {
773 		case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
774 			if (!p || !(p->flags & BR_VLAN_TUNNEL))
775 				return -EINVAL;
776 			err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
777 			if (err)
778 				return err;
779 			err = br_process_vlan_tunnel_info(br, p, cmd,
780 							  &tinfo_curr,
781 							  &tinfo_last,
782 							  changed);
783 			if (err)
784 				return err;
785 			break;
786 		case IFLA_BRIDGE_VLAN_INFO:
787 			if (nla_len(attr) != sizeof(struct bridge_vlan_info))
788 				return -EINVAL;
789 			vinfo_curr = nla_data(attr);
790 			err = br_process_vlan_info(br, p, cmd, vinfo_curr,
791 						   &vinfo_last, changed,
792 						   extack);
793 			if (err)
794 				return err;
795 			break;
796 		case IFLA_BRIDGE_MRP:
797 			err = br_mrp_parse(br, p, attr, cmd, extack);
798 			if (err)
799 				return err;
800 			break;
801 		case IFLA_BRIDGE_CFM:
802 			err = br_cfm_parse(br, p, attr, cmd, extack);
803 			if (err)
804 				return err;
805 			break;
806 		}
807 	}
808 
809 	return err;
810 }
811 
812 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
813 	[IFLA_BRPORT_STATE]	= { .type = NLA_U8 },
814 	[IFLA_BRPORT_COST]	= { .type = NLA_U32 },
815 	[IFLA_BRPORT_PRIORITY]	= { .type = NLA_U16 },
816 	[IFLA_BRPORT_MODE]	= { .type = NLA_U8 },
817 	[IFLA_BRPORT_GUARD]	= { .type = NLA_U8 },
818 	[IFLA_BRPORT_PROTECT]	= { .type = NLA_U8 },
819 	[IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
820 	[IFLA_BRPORT_LEARNING]	= { .type = NLA_U8 },
821 	[IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
822 	[IFLA_BRPORT_PROXYARP]	= { .type = NLA_U8 },
823 	[IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
824 	[IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
825 	[IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
826 	[IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
827 	[IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
828 	[IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
829 	[IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
830 	[IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
831 	[IFLA_BRPORT_ISOLATED]	= { .type = NLA_U8 },
832 	[IFLA_BRPORT_LOCKED] = { .type = NLA_U8 },
833 	[IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
834 	[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
835 };
836 
837 /* Change the state of the port and notify spanning tree */
838 static int br_set_port_state(struct net_bridge_port *p, u8 state)
839 {
840 	if (state > BR_STATE_BLOCKING)
841 		return -EINVAL;
842 
843 	/* if kernel STP is running, don't allow changes */
844 	if (p->br->stp_enabled == BR_KERNEL_STP)
845 		return -EBUSY;
846 
847 	/* if device is not up, change is not allowed
848 	 * if link is not present, only allowable state is disabled
849 	 */
850 	if (!netif_running(p->dev) ||
851 	    (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
852 		return -ENETDOWN;
853 
854 	br_set_state(p, state);
855 	br_port_state_selection(p->br);
856 	return 0;
857 }
858 
859 /* Set/clear or port flags based on attribute */
860 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
861 			     int attrtype, unsigned long mask)
862 {
863 	if (!tb[attrtype])
864 		return;
865 
866 	if (nla_get_u8(tb[attrtype]))
867 		p->flags |= mask;
868 	else
869 		p->flags &= ~mask;
870 }
871 
872 /* Process bridge protocol info on port */
873 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
874 		      struct netlink_ext_ack *extack)
875 {
876 	unsigned long old_flags, changed_mask;
877 	bool br_vlan_tunnel_old;
878 	int err;
879 
880 	old_flags = p->flags;
881 	br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
882 
883 	br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
884 	br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
885 	br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
886 			 BR_MULTICAST_FAST_LEAVE);
887 	br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
888 	br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
889 	br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
890 	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
891 	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
892 			 BR_MULTICAST_TO_UNICAST);
893 	br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
894 	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
895 	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
896 	br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
897 	br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
898 	br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
899 	br_set_port_flag(p, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED);
900 
901 	changed_mask = old_flags ^ p->flags;
902 
903 	err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack);
904 	if (err) {
905 		p->flags = old_flags;
906 		return err;
907 	}
908 
909 	if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
910 		nbp_vlan_tunnel_info_flush(p);
911 
912 	br_port_flags_change(p, changed_mask);
913 
914 	if (tb[IFLA_BRPORT_COST]) {
915 		err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
916 		if (err)
917 			return err;
918 	}
919 
920 	if (tb[IFLA_BRPORT_PRIORITY]) {
921 		err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
922 		if (err)
923 			return err;
924 	}
925 
926 	if (tb[IFLA_BRPORT_STATE]) {
927 		err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
928 		if (err)
929 			return err;
930 	}
931 
932 	if (tb[IFLA_BRPORT_FLUSH])
933 		br_fdb_delete_by_port(p->br, p, 0, 0);
934 
935 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
936 	if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
937 		u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
938 
939 		err = br_multicast_set_port_router(&p->multicast_ctx,
940 						   mcast_router);
941 		if (err)
942 			return err;
943 	}
944 
945 	if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
946 		u32 hlimit;
947 
948 		hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
949 		err = br_multicast_eht_set_hosts_limit(p, hlimit);
950 		if (err)
951 			return err;
952 	}
953 #endif
954 
955 	if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
956 		u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
957 
958 		if (fwd_mask & BR_GROUPFWD_MACPAUSE)
959 			return -EINVAL;
960 		p->group_fwd_mask = fwd_mask;
961 	}
962 
963 	if (tb[IFLA_BRPORT_BACKUP_PORT]) {
964 		struct net_device *backup_dev = NULL;
965 		u32 backup_ifindex;
966 
967 		backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
968 		if (backup_ifindex) {
969 			backup_dev = __dev_get_by_index(dev_net(p->dev),
970 							backup_ifindex);
971 			if (!backup_dev)
972 				return -ENOENT;
973 		}
974 
975 		err = nbp_backup_change(p, backup_dev);
976 		if (err)
977 			return err;
978 	}
979 
980 	return 0;
981 }
982 
983 /* Change state and parameters on port. */
984 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
985 	       struct netlink_ext_ack *extack)
986 {
987 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
988 	struct nlattr *tb[IFLA_BRPORT_MAX + 1];
989 	struct net_bridge_port *p;
990 	struct nlattr *protinfo;
991 	struct nlattr *afspec;
992 	bool changed = false;
993 	int err = 0;
994 
995 	protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
996 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
997 	if (!protinfo && !afspec)
998 		return 0;
999 
1000 	p = br_port_get_rtnl(dev);
1001 	/* We want to accept dev as bridge itself if the AF_SPEC
1002 	 * is set to see if someone is setting vlan info on the bridge
1003 	 */
1004 	if (!p && !afspec)
1005 		return -EINVAL;
1006 
1007 	if (p && protinfo) {
1008 		if (protinfo->nla_type & NLA_F_NESTED) {
1009 			err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1010 							  protinfo,
1011 							  br_port_policy,
1012 							  NULL);
1013 			if (err)
1014 				return err;
1015 
1016 			spin_lock_bh(&p->br->lock);
1017 			err = br_setport(p, tb, extack);
1018 			spin_unlock_bh(&p->br->lock);
1019 		} else {
1020 			/* Binary compatibility with old RSTP */
1021 			if (nla_len(protinfo) < sizeof(u8))
1022 				return -EINVAL;
1023 
1024 			spin_lock_bh(&p->br->lock);
1025 			err = br_set_port_state(p, nla_get_u8(protinfo));
1026 			spin_unlock_bh(&p->br->lock);
1027 		}
1028 		if (err)
1029 			goto out;
1030 		changed = true;
1031 	}
1032 
1033 	if (afspec)
1034 		err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1035 
1036 	if (changed)
1037 		br_ifinfo_notify(RTM_NEWLINK, br, p);
1038 out:
1039 	return err;
1040 }
1041 
1042 /* Delete port information */
1043 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1044 {
1045 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1046 	struct net_bridge_port *p;
1047 	struct nlattr *afspec;
1048 	bool changed = false;
1049 	int err = 0;
1050 
1051 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1052 	if (!afspec)
1053 		return 0;
1054 
1055 	p = br_port_get_rtnl(dev);
1056 	/* We want to accept dev as bridge itself as well */
1057 	if (!p && !netif_is_bridge_master(dev))
1058 		return -EINVAL;
1059 
1060 	err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1061 	if (changed)
1062 		/* Send RTM_NEWLINK because userspace
1063 		 * expects RTM_NEWLINK for vlan dels
1064 		 */
1065 		br_ifinfo_notify(RTM_NEWLINK, br, p);
1066 
1067 	return err;
1068 }
1069 
1070 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1071 		       struct netlink_ext_ack *extack)
1072 {
1073 	if (tb[IFLA_ADDRESS]) {
1074 		if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1075 			return -EINVAL;
1076 		if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1077 			return -EADDRNOTAVAIL;
1078 	}
1079 
1080 	if (!data)
1081 		return 0;
1082 
1083 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1084 	if (data[IFLA_BR_VLAN_PROTOCOL] &&
1085 	    !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1086 		return -EPROTONOSUPPORT;
1087 
1088 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1089 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1090 
1091 		if (defpvid >= VLAN_VID_MASK)
1092 			return -EINVAL;
1093 	}
1094 #endif
1095 
1096 	return 0;
1097 }
1098 
1099 static int br_port_slave_changelink(struct net_device *brdev,
1100 				    struct net_device *dev,
1101 				    struct nlattr *tb[],
1102 				    struct nlattr *data[],
1103 				    struct netlink_ext_ack *extack)
1104 {
1105 	struct net_bridge *br = netdev_priv(brdev);
1106 	int ret;
1107 
1108 	if (!data)
1109 		return 0;
1110 
1111 	spin_lock_bh(&br->lock);
1112 	ret = br_setport(br_port_get_rtnl(dev), data, extack);
1113 	spin_unlock_bh(&br->lock);
1114 
1115 	return ret;
1116 }
1117 
1118 static int br_port_fill_slave_info(struct sk_buff *skb,
1119 				   const struct net_device *brdev,
1120 				   const struct net_device *dev)
1121 {
1122 	return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1123 }
1124 
1125 static size_t br_port_get_slave_size(const struct net_device *brdev,
1126 				     const struct net_device *dev)
1127 {
1128 	return br_port_info_size();
1129 }
1130 
1131 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1132 	[IFLA_BR_FORWARD_DELAY]	= { .type = NLA_U32 },
1133 	[IFLA_BR_HELLO_TIME]	= { .type = NLA_U32 },
1134 	[IFLA_BR_MAX_AGE]	= { .type = NLA_U32 },
1135 	[IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1136 	[IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1137 	[IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1138 	[IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1139 	[IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1140 	[IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1141 	[IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1142 				 .len  = ETH_ALEN },
1143 	[IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1144 	[IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1145 	[IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1146 	[IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1147 	[IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1148 	[IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1149 	[IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1150 	[IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1151 	[IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1152 	[IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1153 	[IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1154 	[IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1155 	[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1156 	[IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1157 	[IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1158 	[IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1159 	[IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1160 	[IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1161 	[IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1162 	[IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1163 	[IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1164 	[IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1165 	[IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1166 	[IFLA_BR_MULTI_BOOLOPT] =
1167 		NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1168 };
1169 
1170 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1171 			 struct nlattr *data[],
1172 			 struct netlink_ext_ack *extack)
1173 {
1174 	struct net_bridge *br = netdev_priv(brdev);
1175 	int err;
1176 
1177 	if (!data)
1178 		return 0;
1179 
1180 	if (data[IFLA_BR_FORWARD_DELAY]) {
1181 		err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1182 		if (err)
1183 			return err;
1184 	}
1185 
1186 	if (data[IFLA_BR_HELLO_TIME]) {
1187 		err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1188 		if (err)
1189 			return err;
1190 	}
1191 
1192 	if (data[IFLA_BR_MAX_AGE]) {
1193 		err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1194 		if (err)
1195 			return err;
1196 	}
1197 
1198 	if (data[IFLA_BR_AGEING_TIME]) {
1199 		err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1200 		if (err)
1201 			return err;
1202 	}
1203 
1204 	if (data[IFLA_BR_STP_STATE]) {
1205 		u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1206 
1207 		err = br_stp_set_enabled(br, stp_enabled, extack);
1208 		if (err)
1209 			return err;
1210 	}
1211 
1212 	if (data[IFLA_BR_PRIORITY]) {
1213 		u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1214 
1215 		br_stp_set_bridge_priority(br, priority);
1216 	}
1217 
1218 	if (data[IFLA_BR_VLAN_FILTERING]) {
1219 		u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1220 
1221 		err = br_vlan_filter_toggle(br, vlan_filter, extack);
1222 		if (err)
1223 			return err;
1224 	}
1225 
1226 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1227 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
1228 		__be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1229 
1230 		err = __br_vlan_set_proto(br, vlan_proto, extack);
1231 		if (err)
1232 			return err;
1233 	}
1234 
1235 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1236 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1237 
1238 		err = __br_vlan_set_default_pvid(br, defpvid, extack);
1239 		if (err)
1240 			return err;
1241 	}
1242 
1243 	if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1244 		__u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1245 
1246 		err = br_vlan_set_stats(br, vlan_stats);
1247 		if (err)
1248 			return err;
1249 	}
1250 
1251 	if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1252 		__u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1253 
1254 		err = br_vlan_set_stats_per_port(br, per_port);
1255 		if (err)
1256 			return err;
1257 	}
1258 #endif
1259 
1260 	if (data[IFLA_BR_GROUP_FWD_MASK]) {
1261 		u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1262 
1263 		if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1264 			return -EINVAL;
1265 		br->group_fwd_mask = fwd_mask;
1266 	}
1267 
1268 	if (data[IFLA_BR_GROUP_ADDR]) {
1269 		u8 new_addr[ETH_ALEN];
1270 
1271 		if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1272 			return -EINVAL;
1273 		memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1274 		if (!is_link_local_ether_addr(new_addr))
1275 			return -EINVAL;
1276 		if (new_addr[5] == 1 ||		/* 802.3x Pause address */
1277 		    new_addr[5] == 2 ||		/* 802.3ad Slow protocols */
1278 		    new_addr[5] == 3)		/* 802.1X PAE address */
1279 			return -EINVAL;
1280 		spin_lock_bh(&br->lock);
1281 		memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1282 		spin_unlock_bh(&br->lock);
1283 		br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1284 		br_recalculate_fwd_mask(br);
1285 	}
1286 
1287 	if (data[IFLA_BR_FDB_FLUSH])
1288 		br_fdb_flush(br);
1289 
1290 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1291 	if (data[IFLA_BR_MCAST_ROUTER]) {
1292 		u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1293 
1294 		err = br_multicast_set_router(&br->multicast_ctx,
1295 					      multicast_router);
1296 		if (err)
1297 			return err;
1298 	}
1299 
1300 	if (data[IFLA_BR_MCAST_SNOOPING]) {
1301 		u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1302 
1303 		err = br_multicast_toggle(br, mcast_snooping, extack);
1304 		if (err)
1305 			return err;
1306 	}
1307 
1308 	if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1309 		u8 val;
1310 
1311 		val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1312 		br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1313 	}
1314 
1315 	if (data[IFLA_BR_MCAST_QUERIER]) {
1316 		u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1317 
1318 		err = br_multicast_set_querier(&br->multicast_ctx,
1319 					       mcast_querier);
1320 		if (err)
1321 			return err;
1322 	}
1323 
1324 	if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1325 		br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1326 			RHT_ELASTICITY);
1327 
1328 	if (data[IFLA_BR_MCAST_HASH_MAX])
1329 		br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1330 
1331 	if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1332 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1333 
1334 		br->multicast_ctx.multicast_last_member_count = val;
1335 	}
1336 
1337 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1338 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1339 
1340 		br->multicast_ctx.multicast_startup_query_count = val;
1341 	}
1342 
1343 	if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1344 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1345 
1346 		br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
1347 	}
1348 
1349 	if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1350 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1351 
1352 		br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
1353 	}
1354 
1355 	if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1356 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1357 
1358 		br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
1359 	}
1360 
1361 	if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1362 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1363 
1364 		br_multicast_set_query_intvl(&br->multicast_ctx, val);
1365 	}
1366 
1367 	if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1368 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1369 
1370 		br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
1371 	}
1372 
1373 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1374 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1375 
1376 		br_multicast_set_startup_query_intvl(&br->multicast_ctx, val);
1377 	}
1378 
1379 	if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1380 		__u8 mcast_stats;
1381 
1382 		mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1383 		br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1384 	}
1385 
1386 	if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1387 		__u8 igmp_version;
1388 
1389 		igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1390 		err = br_multicast_set_igmp_version(&br->multicast_ctx,
1391 						    igmp_version);
1392 		if (err)
1393 			return err;
1394 	}
1395 
1396 #if IS_ENABLED(CONFIG_IPV6)
1397 	if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1398 		__u8 mld_version;
1399 
1400 		mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1401 		err = br_multicast_set_mld_version(&br->multicast_ctx,
1402 						   mld_version);
1403 		if (err)
1404 			return err;
1405 	}
1406 #endif
1407 #endif
1408 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1409 	if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1410 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1411 
1412 		br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1413 	}
1414 
1415 	if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1416 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1417 
1418 		br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1419 	}
1420 
1421 	if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1422 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1423 
1424 		br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1425 	}
1426 #endif
1427 
1428 	if (data[IFLA_BR_MULTI_BOOLOPT]) {
1429 		struct br_boolopt_multi *bm;
1430 
1431 		bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1432 		err = br_boolopt_multi_toggle(br, bm, extack);
1433 		if (err)
1434 			return err;
1435 	}
1436 
1437 	return 0;
1438 }
1439 
1440 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1441 			  struct nlattr *tb[], struct nlattr *data[],
1442 			  struct netlink_ext_ack *extack)
1443 {
1444 	struct net_bridge *br = netdev_priv(dev);
1445 	int err;
1446 
1447 	err = register_netdevice(dev);
1448 	if (err)
1449 		return err;
1450 
1451 	if (tb[IFLA_ADDRESS]) {
1452 		spin_lock_bh(&br->lock);
1453 		br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1454 		spin_unlock_bh(&br->lock);
1455 	}
1456 
1457 	err = br_changelink(dev, tb, data, extack);
1458 	if (err)
1459 		br_dev_delete(dev, NULL);
1460 
1461 	return err;
1462 }
1463 
1464 static size_t br_get_size(const struct net_device *brdev)
1465 {
1466 	return nla_total_size(sizeof(u32)) +	/* IFLA_BR_FORWARD_DELAY  */
1467 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_HELLO_TIME */
1468 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_MAX_AGE */
1469 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1470 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1471 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1472 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1473 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1474 	       nla_total_size(sizeof(__be16)) +	/* IFLA_BR_VLAN_PROTOCOL */
1475 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1476 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1477 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_VLAN_STATS_PER_PORT */
1478 #endif
1479 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1480 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1481 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1482 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1483 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1484 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1485 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1486 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1487 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1488 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1489 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1490 	       nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1491 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1492 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1493 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1494 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1495 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1496 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1497 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1498 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1499 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1500 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1501 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1502 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1503 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1504 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1505 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1506 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1507 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_IGMP_VERSION */
1508 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_MLD_VERSION */
1509 	       br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */
1510 #endif
1511 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1512 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1513 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1514 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1515 #endif
1516 	       nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1517 	       0;
1518 }
1519 
1520 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1521 {
1522 	struct net_bridge *br = netdev_priv(brdev);
1523 	u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1524 	u32 hello_time = jiffies_to_clock_t(br->hello_time);
1525 	u32 age_time = jiffies_to_clock_t(br->max_age);
1526 	u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1527 	u32 stp_enabled = br->stp_enabled;
1528 	u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1529 	u8 vlan_enabled = br_vlan_enabled(br->dev);
1530 	struct br_boolopt_multi bm;
1531 	u64 clockval;
1532 
1533 	clockval = br_timer_value(&br->hello_timer);
1534 	if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1535 		return -EMSGSIZE;
1536 	clockval = br_timer_value(&br->tcn_timer);
1537 	if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1538 		return -EMSGSIZE;
1539 	clockval = br_timer_value(&br->topology_change_timer);
1540 	if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1541 			      IFLA_BR_PAD))
1542 		return -EMSGSIZE;
1543 	clockval = br_timer_value(&br->gc_work.timer);
1544 	if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1545 		return -EMSGSIZE;
1546 
1547 	br_boolopt_multi_get(br, &bm);
1548 	if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1549 	    nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1550 	    nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1551 	    nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1552 	    nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1553 	    nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1554 	    nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1555 	    nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1556 	    nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1557 		    &br->bridge_id) ||
1558 	    nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1559 		    &br->designated_root) ||
1560 	    nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1561 	    nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1562 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1563 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1564 		       br->topology_change_detected) ||
1565 	    nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1566 	    nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1567 		return -EMSGSIZE;
1568 
1569 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1570 	if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1571 	    nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1572 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1573 		       br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1574 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1575 		       br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1576 		return -EMSGSIZE;
1577 #endif
1578 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1579 	if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER,
1580 		       br->multicast_ctx.multicast_router) ||
1581 	    nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1582 		       br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1583 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1584 		       br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1585 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1586 		       br->multicast_ctx.multicast_querier) ||
1587 	    nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1588 		       br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1589 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1590 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1591 	    nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1592 			br->multicast_ctx.multicast_last_member_count) ||
1593 	    nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1594 			br->multicast_ctx.multicast_startup_query_count) ||
1595 	    nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1596 		       br->multicast_ctx.multicast_igmp_version) ||
1597 	    br_multicast_dump_querier_state(skb, &br->multicast_ctx,
1598 					    IFLA_BR_MCAST_QUERIER_STATE))
1599 		return -EMSGSIZE;
1600 #if IS_ENABLED(CONFIG_IPV6)
1601 	if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1602 		       br->multicast_ctx.multicast_mld_version))
1603 		return -EMSGSIZE;
1604 #endif
1605 	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval);
1606 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1607 			      IFLA_BR_PAD))
1608 		return -EMSGSIZE;
1609 	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval);
1610 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1611 			      IFLA_BR_PAD))
1612 		return -EMSGSIZE;
1613 	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval);
1614 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1615 			      IFLA_BR_PAD))
1616 		return -EMSGSIZE;
1617 	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval);
1618 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1619 			      IFLA_BR_PAD))
1620 		return -EMSGSIZE;
1621 	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval);
1622 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1623 			      IFLA_BR_PAD))
1624 		return -EMSGSIZE;
1625 	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval);
1626 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1627 			      IFLA_BR_PAD))
1628 		return -EMSGSIZE;
1629 #endif
1630 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1631 	if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1632 		       br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1633 	    nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1634 		       br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1635 	    nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1636 		       br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1637 		return -EMSGSIZE;
1638 #endif
1639 
1640 	return 0;
1641 }
1642 
1643 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1644 {
1645 	struct net_bridge_port *p = NULL;
1646 	struct net_bridge_vlan_group *vg;
1647 	struct net_bridge_vlan *v;
1648 	struct net_bridge *br;
1649 	int numvls = 0;
1650 
1651 	switch (attr) {
1652 	case IFLA_STATS_LINK_XSTATS:
1653 		br = netdev_priv(dev);
1654 		vg = br_vlan_group(br);
1655 		break;
1656 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1657 		p = br_port_get_rtnl(dev);
1658 		if (!p)
1659 			return 0;
1660 		vg = nbp_vlan_group(p);
1661 		break;
1662 	default:
1663 		return 0;
1664 	}
1665 
1666 	if (vg) {
1667 		/* we need to count all, even placeholder entries */
1668 		list_for_each_entry(v, &vg->vlan_list, vlist)
1669 			numvls++;
1670 	}
1671 
1672 	return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1673 	       nla_total_size_64bit(sizeof(struct br_mcast_stats)) +
1674 	       (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) +
1675 	       nla_total_size(0);
1676 }
1677 
1678 static int br_fill_linkxstats(struct sk_buff *skb,
1679 			      const struct net_device *dev,
1680 			      int *prividx, int attr)
1681 {
1682 	struct nlattr *nla __maybe_unused;
1683 	struct net_bridge_port *p = NULL;
1684 	struct net_bridge_vlan_group *vg;
1685 	struct net_bridge_vlan *v;
1686 	struct net_bridge *br;
1687 	struct nlattr *nest;
1688 	int vl_idx = 0;
1689 
1690 	switch (attr) {
1691 	case IFLA_STATS_LINK_XSTATS:
1692 		br = netdev_priv(dev);
1693 		vg = br_vlan_group(br);
1694 		break;
1695 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1696 		p = br_port_get_rtnl(dev);
1697 		if (!p)
1698 			return 0;
1699 		br = p->br;
1700 		vg = nbp_vlan_group(p);
1701 		break;
1702 	default:
1703 		return -EINVAL;
1704 	}
1705 
1706 	nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1707 	if (!nest)
1708 		return -EMSGSIZE;
1709 
1710 	if (vg) {
1711 		u16 pvid;
1712 
1713 		pvid = br_get_pvid(vg);
1714 		list_for_each_entry(v, &vg->vlan_list, vlist) {
1715 			struct bridge_vlan_xstats vxi;
1716 			struct pcpu_sw_netstats stats;
1717 
1718 			if (++vl_idx < *prividx)
1719 				continue;
1720 			memset(&vxi, 0, sizeof(vxi));
1721 			vxi.vid = v->vid;
1722 			vxi.flags = v->flags;
1723 			if (v->vid == pvid)
1724 				vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1725 			br_vlan_get_stats(v, &stats);
1726 			vxi.rx_bytes = stats.rx_bytes;
1727 			vxi.rx_packets = stats.rx_packets;
1728 			vxi.tx_bytes = stats.tx_bytes;
1729 			vxi.tx_packets = stats.tx_packets;
1730 
1731 			if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1732 				goto nla_put_failure;
1733 		}
1734 	}
1735 
1736 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1737 	if (++vl_idx >= *prividx) {
1738 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1739 					sizeof(struct br_mcast_stats),
1740 					BRIDGE_XSTATS_PAD);
1741 		if (!nla)
1742 			goto nla_put_failure;
1743 		br_multicast_get_stats(br, p, nla_data(nla));
1744 	}
1745 #endif
1746 
1747 	if (p) {
1748 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1749 					sizeof(p->stp_xstats),
1750 					BRIDGE_XSTATS_PAD);
1751 		if (!nla)
1752 			goto nla_put_failure;
1753 
1754 		spin_lock_bh(&br->lock);
1755 		memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1756 		spin_unlock_bh(&br->lock);
1757 	}
1758 
1759 	nla_nest_end(skb, nest);
1760 	*prividx = 0;
1761 
1762 	return 0;
1763 
1764 nla_put_failure:
1765 	nla_nest_end(skb, nest);
1766 	*prividx = vl_idx;
1767 
1768 	return -EMSGSIZE;
1769 }
1770 
1771 static struct rtnl_af_ops br_af_ops __read_mostly = {
1772 	.family			= AF_BRIDGE,
1773 	.get_link_af_size	= br_get_link_af_size_filtered,
1774 };
1775 
1776 struct rtnl_link_ops br_link_ops __read_mostly = {
1777 	.kind			= "bridge",
1778 	.priv_size		= sizeof(struct net_bridge),
1779 	.setup			= br_dev_setup,
1780 	.maxtype		= IFLA_BR_MAX,
1781 	.policy			= br_policy,
1782 	.validate		= br_validate,
1783 	.newlink		= br_dev_newlink,
1784 	.changelink		= br_changelink,
1785 	.dellink		= br_dev_delete,
1786 	.get_size		= br_get_size,
1787 	.fill_info		= br_fill_info,
1788 	.fill_linkxstats	= br_fill_linkxstats,
1789 	.get_linkxstats_size	= br_get_linkxstats_size,
1790 
1791 	.slave_maxtype		= IFLA_BRPORT_MAX,
1792 	.slave_policy		= br_port_policy,
1793 	.slave_changelink	= br_port_slave_changelink,
1794 	.get_slave_size		= br_port_get_slave_size,
1795 	.fill_slave_info	= br_port_fill_slave_info,
1796 };
1797 
1798 int __init br_netlink_init(void)
1799 {
1800 	int err;
1801 
1802 	br_mdb_init();
1803 	br_vlan_rtnl_init();
1804 	rtnl_af_register(&br_af_ops);
1805 
1806 	err = rtnl_link_register(&br_link_ops);
1807 	if (err)
1808 		goto out_af;
1809 
1810 	return 0;
1811 
1812 out_af:
1813 	rtnl_af_unregister(&br_af_ops);
1814 	br_mdb_uninit();
1815 	return err;
1816 }
1817 
1818 void br_netlink_fini(void)
1819 {
1820 	br_mdb_uninit();
1821 	br_vlan_rtnl_uninit();
1822 	rtnl_af_unregister(&br_af_ops);
1823 	rtnl_link_unregister(&br_link_ops);
1824 }
1825