xref: /linux/net/bridge/br_netlink.c (revision 40e79150c1686263e6a031d7702aec63aff31332)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *	Bridge netlink control interface
4  *
5  *	Authors:
6  *	Stephen Hemminger		<shemminger@osdl.org>
7  */
8 
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
14 #include <net/sock.h>
15 #include <uapi/linux/if_bridge.h>
16 
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_tunnel.h"
20 
21 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
22 				u32 filter_mask)
23 {
24 	struct net_bridge_vlan *v;
25 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
26 	u16 flags, pvid;
27 	int num_vlans = 0;
28 
29 	if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
30 		return 0;
31 
32 	pvid = br_get_pvid(vg);
33 	/* Count number of vlan infos */
34 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
35 		flags = 0;
36 		/* only a context, bridge vlan not activated */
37 		if (!br_vlan_should_use(v))
38 			continue;
39 		if (v->vid == pvid)
40 			flags |= BRIDGE_VLAN_INFO_PVID;
41 
42 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
43 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
44 
45 		if (vid_range_start == 0) {
46 			goto initvars;
47 		} else if ((v->vid - vid_range_end) == 1 &&
48 			flags == vid_range_flags) {
49 			vid_range_end = v->vid;
50 			continue;
51 		} else {
52 			if ((vid_range_end - vid_range_start) > 0)
53 				num_vlans += 2;
54 			else
55 				num_vlans += 1;
56 		}
57 initvars:
58 		vid_range_start = v->vid;
59 		vid_range_end = v->vid;
60 		vid_range_flags = flags;
61 	}
62 
63 	if (vid_range_start != 0) {
64 		if ((vid_range_end - vid_range_start) > 0)
65 			num_vlans += 2;
66 		else
67 			num_vlans += 1;
68 	}
69 
70 	return num_vlans;
71 }
72 
73 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
74 				 u32 filter_mask)
75 {
76 	int num_vlans;
77 
78 	if (!vg)
79 		return 0;
80 
81 	if (filter_mask & RTEXT_FILTER_BRVLAN)
82 		return vg->num_vlans;
83 
84 	rcu_read_lock();
85 	num_vlans = __get_num_vlan_infos(vg, filter_mask);
86 	rcu_read_unlock();
87 
88 	return num_vlans;
89 }
90 
91 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
92 					   u32 filter_mask)
93 {
94 	struct net_bridge_vlan_group *vg = NULL;
95 	struct net_bridge_port *p = NULL;
96 	struct net_bridge *br;
97 	int num_vlan_infos;
98 	size_t vinfo_sz = 0;
99 
100 	rcu_read_lock();
101 	if (netif_is_bridge_port(dev)) {
102 		p = br_port_get_rcu(dev);
103 		vg = nbp_vlan_group_rcu(p);
104 	} else if (dev->priv_flags & IFF_EBRIDGE) {
105 		br = netdev_priv(dev);
106 		vg = br_vlan_group_rcu(br);
107 	}
108 	num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
109 	rcu_read_unlock();
110 
111 	if (p && (p->flags & BR_VLAN_TUNNEL))
112 		vinfo_sz += br_get_vlan_tunnel_info_size(vg);
113 
114 	/* Each VLAN is returned in bridge_vlan_info along with flags */
115 	vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
116 
117 	return vinfo_sz;
118 }
119 
120 static inline size_t br_port_info_size(void)
121 {
122 	return nla_total_size(1)	/* IFLA_BRPORT_STATE  */
123 		+ nla_total_size(2)	/* IFLA_BRPORT_PRIORITY */
124 		+ nla_total_size(4)	/* IFLA_BRPORT_COST */
125 		+ nla_total_size(1)	/* IFLA_BRPORT_MODE */
126 		+ nla_total_size(1)	/* IFLA_BRPORT_GUARD */
127 		+ nla_total_size(1)	/* IFLA_BRPORT_PROTECT */
128 		+ nla_total_size(1)	/* IFLA_BRPORT_FAST_LEAVE */
129 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_TO_UCAST */
130 		+ nla_total_size(1)	/* IFLA_BRPORT_LEARNING */
131 		+ nla_total_size(1)	/* IFLA_BRPORT_UNICAST_FLOOD */
132 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_FLOOD */
133 		+ nla_total_size(1)	/* IFLA_BRPORT_BCAST_FLOOD */
134 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP */
135 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP_WIFI */
136 		+ nla_total_size(1)	/* IFLA_BRPORT_VLAN_TUNNEL */
137 		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_SUPPRESS */
138 		+ nla_total_size(1)	/* IFLA_BRPORT_ISOLATED */
139 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_ROOT_ID */
140 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_BRIDGE_ID */
141 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_PORT */
142 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_COST */
143 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_ID */
144 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_NO */
145 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
146 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_CONFIG_PENDING */
147 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
148 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
149 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
150 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
151 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MULTICAST_ROUTER */
152 #endif
153 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_GROUP_FWD_MASK */
154 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_RING_OPEN */
155 		+ 0;
156 }
157 
158 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
159 {
160 	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
161 		+ nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
162 		+ nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
163 		+ nla_total_size(4) /* IFLA_MASTER */
164 		+ nla_total_size(4) /* IFLA_MTU */
165 		+ nla_total_size(4) /* IFLA_LINK */
166 		+ nla_total_size(1) /* IFLA_OPERSTATE */
167 		+ nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
168 		+ nla_total_size(br_get_link_af_size_filtered(dev,
169 				 filter_mask)) /* IFLA_AF_SPEC */
170 		+ nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
171 }
172 
173 static int br_port_fill_attrs(struct sk_buff *skb,
174 			      const struct net_bridge_port *p)
175 {
176 	u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
177 	struct net_bridge_port *backup_p;
178 	u64 timerval;
179 
180 	if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
181 	    nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
182 	    nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
183 	    nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
184 	    nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
185 	    nla_put_u8(skb, IFLA_BRPORT_PROTECT,
186 		       !!(p->flags & BR_ROOT_BLOCK)) ||
187 	    nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
188 		       !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
189 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
190 		       !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
191 	    nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
192 	    nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
193 		       !!(p->flags & BR_FLOOD)) ||
194 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
195 		       !!(p->flags & BR_MCAST_FLOOD)) ||
196 	    nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
197 		       !!(p->flags & BR_BCAST_FLOOD)) ||
198 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
199 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
200 		       !!(p->flags & BR_PROXYARP_WIFI)) ||
201 	    nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
202 		    &p->designated_root) ||
203 	    nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
204 		    &p->designated_bridge) ||
205 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
206 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
207 	    nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
208 	    nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
209 	    nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
210 		       p->topology_change_ack) ||
211 	    nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
212 	    nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
213 							BR_VLAN_TUNNEL)) ||
214 	    nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
215 	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
216 		       !!(p->flags & BR_NEIGH_SUPPRESS)) ||
217 	    nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
218 							  BR_MRP_LOST_CONT)) ||
219 	    nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)))
220 		return -EMSGSIZE;
221 
222 	timerval = br_timer_value(&p->message_age_timer);
223 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
224 			      IFLA_BRPORT_PAD))
225 		return -EMSGSIZE;
226 	timerval = br_timer_value(&p->forward_delay_timer);
227 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
228 			      IFLA_BRPORT_PAD))
229 		return -EMSGSIZE;
230 	timerval = br_timer_value(&p->hold_timer);
231 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
232 			      IFLA_BRPORT_PAD))
233 		return -EMSGSIZE;
234 
235 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
236 	if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
237 		       p->multicast_router))
238 		return -EMSGSIZE;
239 #endif
240 
241 	/* we might be called only with br->lock */
242 	rcu_read_lock();
243 	backup_p = rcu_dereference(p->backup_port);
244 	if (backup_p)
245 		nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
246 			    backup_p->dev->ifindex);
247 	rcu_read_unlock();
248 
249 	return 0;
250 }
251 
252 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
253 				    u16 vid_end, u16 flags)
254 {
255 	struct  bridge_vlan_info vinfo;
256 
257 	if ((vid_end - vid_start) > 0) {
258 		/* add range to skb */
259 		vinfo.vid = vid_start;
260 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
261 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
262 			    sizeof(vinfo), &vinfo))
263 			goto nla_put_failure;
264 
265 		vinfo.vid = vid_end;
266 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
267 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
268 			    sizeof(vinfo), &vinfo))
269 			goto nla_put_failure;
270 	} else {
271 		vinfo.vid = vid_start;
272 		vinfo.flags = flags;
273 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
274 			    sizeof(vinfo), &vinfo))
275 			goto nla_put_failure;
276 	}
277 
278 	return 0;
279 
280 nla_put_failure:
281 	return -EMSGSIZE;
282 }
283 
284 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
285 					 struct net_bridge_vlan_group *vg)
286 {
287 	struct net_bridge_vlan *v;
288 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
289 	u16 flags, pvid;
290 	int err = 0;
291 
292 	/* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
293 	 * and mark vlan info with begin and end flags
294 	 * if vlaninfo represents a range
295 	 */
296 	pvid = br_get_pvid(vg);
297 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
298 		flags = 0;
299 		if (!br_vlan_should_use(v))
300 			continue;
301 		if (v->vid == pvid)
302 			flags |= BRIDGE_VLAN_INFO_PVID;
303 
304 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
305 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
306 
307 		if (vid_range_start == 0) {
308 			goto initvars;
309 		} else if ((v->vid - vid_range_end) == 1 &&
310 			flags == vid_range_flags) {
311 			vid_range_end = v->vid;
312 			continue;
313 		} else {
314 			err = br_fill_ifvlaninfo_range(skb, vid_range_start,
315 						       vid_range_end,
316 						       vid_range_flags);
317 			if (err)
318 				return err;
319 		}
320 
321 initvars:
322 		vid_range_start = v->vid;
323 		vid_range_end = v->vid;
324 		vid_range_flags = flags;
325 	}
326 
327 	if (vid_range_start != 0) {
328 		/* Call it once more to send any left over vlans */
329 		err = br_fill_ifvlaninfo_range(skb, vid_range_start,
330 					       vid_range_end,
331 					       vid_range_flags);
332 		if (err)
333 			return err;
334 	}
335 
336 	return 0;
337 }
338 
339 static int br_fill_ifvlaninfo(struct sk_buff *skb,
340 			      struct net_bridge_vlan_group *vg)
341 {
342 	struct bridge_vlan_info vinfo;
343 	struct net_bridge_vlan *v;
344 	u16 pvid;
345 
346 	pvid = br_get_pvid(vg);
347 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
348 		if (!br_vlan_should_use(v))
349 			continue;
350 
351 		vinfo.vid = v->vid;
352 		vinfo.flags = 0;
353 		if (v->vid == pvid)
354 			vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
355 
356 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
357 			vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
358 
359 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
360 			    sizeof(vinfo), &vinfo))
361 			goto nla_put_failure;
362 	}
363 
364 	return 0;
365 
366 nla_put_failure:
367 	return -EMSGSIZE;
368 }
369 
370 /*
371  * Create one netlink message for one interface
372  * Contains port and master info as well as carrier and bridge state.
373  */
374 static int br_fill_ifinfo(struct sk_buff *skb,
375 			  const struct net_bridge_port *port,
376 			  u32 pid, u32 seq, int event, unsigned int flags,
377 			  u32 filter_mask, const struct net_device *dev)
378 {
379 	u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
380 	struct net_bridge *br;
381 	struct ifinfomsg *hdr;
382 	struct nlmsghdr *nlh;
383 
384 	if (port)
385 		br = port->br;
386 	else
387 		br = netdev_priv(dev);
388 
389 	br_debug(br, "br_fill_info event %d port %s master %s\n",
390 		     event, dev->name, br->dev->name);
391 
392 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
393 	if (nlh == NULL)
394 		return -EMSGSIZE;
395 
396 	hdr = nlmsg_data(nlh);
397 	hdr->ifi_family = AF_BRIDGE;
398 	hdr->__ifi_pad = 0;
399 	hdr->ifi_type = dev->type;
400 	hdr->ifi_index = dev->ifindex;
401 	hdr->ifi_flags = dev_get_flags(dev);
402 	hdr->ifi_change = 0;
403 
404 	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
405 	    nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
406 	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
407 	    nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
408 	    (dev->addr_len &&
409 	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
410 	    (dev->ifindex != dev_get_iflink(dev) &&
411 	     nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
412 		goto nla_put_failure;
413 
414 	if (event == RTM_NEWLINK && port) {
415 		struct nlattr *nest;
416 
417 		nest = nla_nest_start(skb, IFLA_PROTINFO);
418 		if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
419 			goto nla_put_failure;
420 		nla_nest_end(skb, nest);
421 	}
422 
423 	/* Check if  the VID information is requested */
424 	if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
425 	    (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
426 		struct net_bridge_vlan_group *vg;
427 		struct nlattr *af;
428 		int err;
429 
430 		/* RCU needed because of the VLAN locking rules (rcu || rtnl) */
431 		rcu_read_lock();
432 		if (port)
433 			vg = nbp_vlan_group_rcu(port);
434 		else
435 			vg = br_vlan_group_rcu(br);
436 
437 		if (!vg || !vg->num_vlans) {
438 			rcu_read_unlock();
439 			goto done;
440 		}
441 		af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
442 		if (!af) {
443 			rcu_read_unlock();
444 			goto nla_put_failure;
445 		}
446 		if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
447 			err = br_fill_ifvlaninfo_compressed(skb, vg);
448 		else
449 			err = br_fill_ifvlaninfo(skb, vg);
450 
451 		if (port && (port->flags & BR_VLAN_TUNNEL))
452 			err = br_fill_vlan_tunnel_info(skb, vg);
453 		rcu_read_unlock();
454 		if (err)
455 			goto nla_put_failure;
456 		nla_nest_end(skb, af);
457 	}
458 
459 done:
460 	nlmsg_end(skb, nlh);
461 	return 0;
462 
463 nla_put_failure:
464 	nlmsg_cancel(skb, nlh);
465 	return -EMSGSIZE;
466 }
467 
468 /* Notify listeners of a change in bridge or port information */
469 void br_ifinfo_notify(int event, const struct net_bridge *br,
470 		      const struct net_bridge_port *port)
471 {
472 	u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
473 	struct net_device *dev;
474 	struct sk_buff *skb;
475 	int err = -ENOBUFS;
476 	struct net *net;
477 	u16 port_no = 0;
478 
479 	if (WARN_ON(!port && !br))
480 		return;
481 
482 	if (port) {
483 		dev = port->dev;
484 		br = port->br;
485 		port_no = port->port_no;
486 	} else {
487 		dev = br->dev;
488 	}
489 
490 	net = dev_net(dev);
491 	br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
492 
493 	skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
494 	if (skb == NULL)
495 		goto errout;
496 
497 	err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev);
498 	if (err < 0) {
499 		/* -EMSGSIZE implies BUG in br_nlmsg_size() */
500 		WARN_ON(err == -EMSGSIZE);
501 		kfree_skb(skb);
502 		goto errout;
503 	}
504 	rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
505 	return;
506 errout:
507 	rtnl_set_sk_err(net, RTNLGRP_LINK, err);
508 }
509 
510 /*
511  * Dump information about all ports, in response to GETLINK
512  */
513 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
514 	       struct net_device *dev, u32 filter_mask, int nlflags)
515 {
516 	struct net_bridge_port *port = br_port_get_rtnl(dev);
517 
518 	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
519 	    !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
520 		return 0;
521 
522 	return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
523 			      filter_mask, dev);
524 }
525 
526 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
527 			int cmd, struct bridge_vlan_info *vinfo, bool *changed,
528 			struct netlink_ext_ack *extack)
529 {
530 	bool curr_change;
531 	int err = 0;
532 
533 	switch (cmd) {
534 	case RTM_SETLINK:
535 		if (p) {
536 			/* if the MASTER flag is set this will act on the global
537 			 * per-VLAN entry as well
538 			 */
539 			err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
540 					   &curr_change, extack);
541 		} else {
542 			vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
543 			err = br_vlan_add(br, vinfo->vid, vinfo->flags,
544 					  &curr_change, extack);
545 		}
546 		if (curr_change)
547 			*changed = true;
548 		break;
549 
550 	case RTM_DELLINK:
551 		if (p) {
552 			if (!nbp_vlan_delete(p, vinfo->vid))
553 				*changed = true;
554 
555 			if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
556 			    !br_vlan_delete(p->br, vinfo->vid))
557 				*changed = true;
558 		} else if (!br_vlan_delete(br, vinfo->vid)) {
559 			*changed = true;
560 		}
561 		break;
562 	}
563 
564 	return err;
565 }
566 
567 int br_process_vlan_info(struct net_bridge *br,
568 			 struct net_bridge_port *p, int cmd,
569 			 struct bridge_vlan_info *vinfo_curr,
570 			 struct bridge_vlan_info **vinfo_last,
571 			 bool *changed,
572 			 struct netlink_ext_ack *extack)
573 {
574 	int err, rtm_cmd;
575 
576 	if (!br_vlan_valid_id(vinfo_curr->vid, extack))
577 		return -EINVAL;
578 
579 	/* needed for vlan-only NEWVLAN/DELVLAN notifications */
580 	rtm_cmd = br_afspec_cmd_to_rtm(cmd);
581 
582 	if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
583 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
584 			return -EINVAL;
585 		*vinfo_last = vinfo_curr;
586 		return 0;
587 	}
588 
589 	if (*vinfo_last) {
590 		struct bridge_vlan_info tmp_vinfo;
591 		int v, v_change_start = 0;
592 
593 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
594 			return -EINVAL;
595 
596 		memcpy(&tmp_vinfo, *vinfo_last,
597 		       sizeof(struct bridge_vlan_info));
598 		for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
599 			bool curr_change = false;
600 
601 			tmp_vinfo.vid = v;
602 			err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
603 					   extack);
604 			if (err)
605 				break;
606 			if (curr_change) {
607 				*changed = curr_change;
608 				if (!v_change_start)
609 					v_change_start = v;
610 			} else {
611 				/* nothing to notify yet */
612 				if (!v_change_start)
613 					continue;
614 				br_vlan_notify(br, p, v_change_start,
615 					       v - 1, rtm_cmd);
616 				v_change_start = 0;
617 			}
618 		}
619 		/* v_change_start is set only if the last/whole range changed */
620 		if (v_change_start)
621 			br_vlan_notify(br, p, v_change_start,
622 				       v - 1, rtm_cmd);
623 
624 		*vinfo_last = NULL;
625 
626 		return err;
627 	}
628 
629 	err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
630 	if (*changed)
631 		br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
632 
633 	return err;
634 }
635 
636 static int br_afspec(struct net_bridge *br,
637 		     struct net_bridge_port *p,
638 		     struct nlattr *af_spec,
639 		     int cmd, bool *changed,
640 		     struct netlink_ext_ack *extack)
641 {
642 	struct bridge_vlan_info *vinfo_curr = NULL;
643 	struct bridge_vlan_info *vinfo_last = NULL;
644 	struct nlattr *attr;
645 	struct vtunnel_info tinfo_last = {};
646 	struct vtunnel_info tinfo_curr = {};
647 	int err = 0, rem;
648 
649 	nla_for_each_nested(attr, af_spec, rem) {
650 		err = 0;
651 		switch (nla_type(attr)) {
652 		case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
653 			if (!p || !(p->flags & BR_VLAN_TUNNEL))
654 				return -EINVAL;
655 			err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
656 			if (err)
657 				return err;
658 			err = br_process_vlan_tunnel_info(br, p, cmd,
659 							  &tinfo_curr,
660 							  &tinfo_last,
661 							  changed);
662 			if (err)
663 				return err;
664 			break;
665 		case IFLA_BRIDGE_VLAN_INFO:
666 			if (nla_len(attr) != sizeof(struct bridge_vlan_info))
667 				return -EINVAL;
668 			vinfo_curr = nla_data(attr);
669 			err = br_process_vlan_info(br, p, cmd, vinfo_curr,
670 						   &vinfo_last, changed,
671 						   extack);
672 			if (err)
673 				return err;
674 			break;
675 		case IFLA_BRIDGE_MRP:
676 			err = br_mrp_parse(br, p, attr, cmd, extack);
677 			if (err)
678 				return err;
679 			break;
680 		}
681 	}
682 
683 	return err;
684 }
685 
686 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
687 	[IFLA_BRPORT_STATE]	= { .type = NLA_U8 },
688 	[IFLA_BRPORT_COST]	= { .type = NLA_U32 },
689 	[IFLA_BRPORT_PRIORITY]	= { .type = NLA_U16 },
690 	[IFLA_BRPORT_MODE]	= { .type = NLA_U8 },
691 	[IFLA_BRPORT_GUARD]	= { .type = NLA_U8 },
692 	[IFLA_BRPORT_PROTECT]	= { .type = NLA_U8 },
693 	[IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
694 	[IFLA_BRPORT_LEARNING]	= { .type = NLA_U8 },
695 	[IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
696 	[IFLA_BRPORT_PROXYARP]	= { .type = NLA_U8 },
697 	[IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
698 	[IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
699 	[IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
700 	[IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
701 	[IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
702 	[IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
703 	[IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
704 	[IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
705 	[IFLA_BRPORT_ISOLATED]	= { .type = NLA_U8 },
706 	[IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
707 };
708 
709 /* Change the state of the port and notify spanning tree */
710 static int br_set_port_state(struct net_bridge_port *p, u8 state)
711 {
712 	if (state > BR_STATE_BLOCKING)
713 		return -EINVAL;
714 
715 	/* if kernel STP is running, don't allow changes */
716 	if (p->br->stp_enabled == BR_KERNEL_STP)
717 		return -EBUSY;
718 
719 	/* if device is not up, change is not allowed
720 	 * if link is not present, only allowable state is disabled
721 	 */
722 	if (!netif_running(p->dev) ||
723 	    (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
724 		return -ENETDOWN;
725 
726 	br_set_state(p, state);
727 	br_port_state_selection(p->br);
728 	return 0;
729 }
730 
731 /* Set/clear or port flags based on attribute */
732 static int br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
733 			    int attrtype, unsigned long mask)
734 {
735 	unsigned long flags;
736 	int err;
737 
738 	if (!tb[attrtype])
739 		return 0;
740 
741 	if (nla_get_u8(tb[attrtype]))
742 		flags = p->flags | mask;
743 	else
744 		flags = p->flags & ~mask;
745 
746 	err = br_switchdev_set_port_flag(p, flags, mask);
747 	if (err)
748 		return err;
749 
750 	p->flags = flags;
751 	return 0;
752 }
753 
754 /* Process bridge protocol info on port */
755 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[])
756 {
757 	unsigned long old_flags = p->flags;
758 	bool br_vlan_tunnel_old = false;
759 	int err;
760 
761 	err = br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
762 	if (err)
763 		return err;
764 
765 	err = br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
766 	if (err)
767 		return err;
768 
769 	err = br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE, BR_MULTICAST_FAST_LEAVE);
770 	if (err)
771 		return err;
772 
773 	err = br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
774 	if (err)
775 		return err;
776 
777 	err = br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
778 	if (err)
779 		return err;
780 
781 	err = br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
782 	if (err)
783 		return err;
784 
785 	err = br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
786 	if (err)
787 		return err;
788 
789 	err = br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST, BR_MULTICAST_TO_UNICAST);
790 	if (err)
791 		return err;
792 
793 	err = br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
794 	if (err)
795 		return err;
796 
797 	err = br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
798 	if (err)
799 		return err;
800 
801 	err = br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
802 	if (err)
803 		return err;
804 
805 	br_vlan_tunnel_old = (p->flags & BR_VLAN_TUNNEL) ? true : false;
806 	err = br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
807 	if (err)
808 		return err;
809 
810 	if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
811 		nbp_vlan_tunnel_info_flush(p);
812 
813 	if (tb[IFLA_BRPORT_COST]) {
814 		err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
815 		if (err)
816 			return err;
817 	}
818 
819 	if (tb[IFLA_BRPORT_PRIORITY]) {
820 		err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
821 		if (err)
822 			return err;
823 	}
824 
825 	if (tb[IFLA_BRPORT_STATE]) {
826 		err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
827 		if (err)
828 			return err;
829 	}
830 
831 	if (tb[IFLA_BRPORT_FLUSH])
832 		br_fdb_delete_by_port(p->br, p, 0, 0);
833 
834 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
835 	if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
836 		u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
837 
838 		err = br_multicast_set_port_router(p, mcast_router);
839 		if (err)
840 			return err;
841 	}
842 #endif
843 
844 	if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
845 		u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
846 
847 		if (fwd_mask & BR_GROUPFWD_MACPAUSE)
848 			return -EINVAL;
849 		p->group_fwd_mask = fwd_mask;
850 	}
851 
852 	err = br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS,
853 			       BR_NEIGH_SUPPRESS);
854 	if (err)
855 		return err;
856 
857 	err = br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
858 	if (err)
859 		return err;
860 
861 	if (tb[IFLA_BRPORT_BACKUP_PORT]) {
862 		struct net_device *backup_dev = NULL;
863 		u32 backup_ifindex;
864 
865 		backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
866 		if (backup_ifindex) {
867 			backup_dev = __dev_get_by_index(dev_net(p->dev),
868 							backup_ifindex);
869 			if (!backup_dev)
870 				return -ENOENT;
871 		}
872 
873 		err = nbp_backup_change(p, backup_dev);
874 		if (err)
875 			return err;
876 	}
877 
878 	br_port_flags_change(p, old_flags ^ p->flags);
879 	return 0;
880 }
881 
882 /* Change state and parameters on port. */
883 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
884 	       struct netlink_ext_ack *extack)
885 {
886 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
887 	struct nlattr *tb[IFLA_BRPORT_MAX + 1];
888 	struct net_bridge_port *p;
889 	struct nlattr *protinfo;
890 	struct nlattr *afspec;
891 	bool changed = false;
892 	int err = 0;
893 
894 	protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
895 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
896 	if (!protinfo && !afspec)
897 		return 0;
898 
899 	p = br_port_get_rtnl(dev);
900 	/* We want to accept dev as bridge itself if the AF_SPEC
901 	 * is set to see if someone is setting vlan info on the bridge
902 	 */
903 	if (!p && !afspec)
904 		return -EINVAL;
905 
906 	if (p && protinfo) {
907 		if (protinfo->nla_type & NLA_F_NESTED) {
908 			err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
909 							  protinfo,
910 							  br_port_policy,
911 							  NULL);
912 			if (err)
913 				return err;
914 
915 			spin_lock_bh(&p->br->lock);
916 			err = br_setport(p, tb);
917 			spin_unlock_bh(&p->br->lock);
918 		} else {
919 			/* Binary compatibility with old RSTP */
920 			if (nla_len(protinfo) < sizeof(u8))
921 				return -EINVAL;
922 
923 			spin_lock_bh(&p->br->lock);
924 			err = br_set_port_state(p, nla_get_u8(protinfo));
925 			spin_unlock_bh(&p->br->lock);
926 		}
927 		if (err)
928 			goto out;
929 		changed = true;
930 	}
931 
932 	if (afspec)
933 		err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
934 
935 	if (changed)
936 		br_ifinfo_notify(RTM_NEWLINK, br, p);
937 out:
938 	return err;
939 }
940 
941 /* Delete port information */
942 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
943 {
944 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
945 	struct net_bridge_port *p;
946 	struct nlattr *afspec;
947 	bool changed = false;
948 	int err = 0;
949 
950 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
951 	if (!afspec)
952 		return 0;
953 
954 	p = br_port_get_rtnl(dev);
955 	/* We want to accept dev as bridge itself as well */
956 	if (!p && !(dev->priv_flags & IFF_EBRIDGE))
957 		return -EINVAL;
958 
959 	err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
960 	if (changed)
961 		/* Send RTM_NEWLINK because userspace
962 		 * expects RTM_NEWLINK for vlan dels
963 		 */
964 		br_ifinfo_notify(RTM_NEWLINK, br, p);
965 
966 	return err;
967 }
968 
969 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
970 		       struct netlink_ext_ack *extack)
971 {
972 	if (tb[IFLA_ADDRESS]) {
973 		if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
974 			return -EINVAL;
975 		if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
976 			return -EADDRNOTAVAIL;
977 	}
978 
979 	if (!data)
980 		return 0;
981 
982 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
983 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
984 		switch (nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])) {
985 		case htons(ETH_P_8021Q):
986 		case htons(ETH_P_8021AD):
987 			break;
988 		default:
989 			return -EPROTONOSUPPORT;
990 		}
991 	}
992 
993 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
994 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
995 
996 		if (defpvid >= VLAN_VID_MASK)
997 			return -EINVAL;
998 	}
999 #endif
1000 
1001 	return 0;
1002 }
1003 
1004 static int br_port_slave_changelink(struct net_device *brdev,
1005 				    struct net_device *dev,
1006 				    struct nlattr *tb[],
1007 				    struct nlattr *data[],
1008 				    struct netlink_ext_ack *extack)
1009 {
1010 	struct net_bridge *br = netdev_priv(brdev);
1011 	int ret;
1012 
1013 	if (!data)
1014 		return 0;
1015 
1016 	spin_lock_bh(&br->lock);
1017 	ret = br_setport(br_port_get_rtnl(dev), data);
1018 	spin_unlock_bh(&br->lock);
1019 
1020 	return ret;
1021 }
1022 
1023 static int br_port_fill_slave_info(struct sk_buff *skb,
1024 				   const struct net_device *brdev,
1025 				   const struct net_device *dev)
1026 {
1027 	return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1028 }
1029 
1030 static size_t br_port_get_slave_size(const struct net_device *brdev,
1031 				     const struct net_device *dev)
1032 {
1033 	return br_port_info_size();
1034 }
1035 
1036 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1037 	[IFLA_BR_FORWARD_DELAY]	= { .type = NLA_U32 },
1038 	[IFLA_BR_HELLO_TIME]	= { .type = NLA_U32 },
1039 	[IFLA_BR_MAX_AGE]	= { .type = NLA_U32 },
1040 	[IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1041 	[IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1042 	[IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1043 	[IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1044 	[IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1045 	[IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1046 	[IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1047 				 .len  = ETH_ALEN },
1048 	[IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1049 	[IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1050 	[IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1051 	[IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1052 	[IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1053 	[IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1054 	[IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1055 	[IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1056 	[IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1057 	[IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1058 	[IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1059 	[IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1060 	[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1061 	[IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1062 	[IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1063 	[IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1064 	[IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1065 	[IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1066 	[IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1067 	[IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1068 	[IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1069 	[IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1070 	[IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1071 	[IFLA_BR_MULTI_BOOLOPT] = { .type = NLA_EXACT_LEN,
1072 				    .len = sizeof(struct br_boolopt_multi) },
1073 };
1074 
1075 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1076 			 struct nlattr *data[],
1077 			 struct netlink_ext_ack *extack)
1078 {
1079 	struct net_bridge *br = netdev_priv(brdev);
1080 	int err;
1081 
1082 	if (!data)
1083 		return 0;
1084 
1085 	if (data[IFLA_BR_FORWARD_DELAY]) {
1086 		err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1087 		if (err)
1088 			return err;
1089 	}
1090 
1091 	if (data[IFLA_BR_HELLO_TIME]) {
1092 		err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1093 		if (err)
1094 			return err;
1095 	}
1096 
1097 	if (data[IFLA_BR_MAX_AGE]) {
1098 		err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1099 		if (err)
1100 			return err;
1101 	}
1102 
1103 	if (data[IFLA_BR_AGEING_TIME]) {
1104 		err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1105 		if (err)
1106 			return err;
1107 	}
1108 
1109 	if (data[IFLA_BR_STP_STATE]) {
1110 		u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1111 
1112 		err = br_stp_set_enabled(br, stp_enabled, extack);
1113 		if (err)
1114 			return err;
1115 	}
1116 
1117 	if (data[IFLA_BR_PRIORITY]) {
1118 		u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1119 
1120 		br_stp_set_bridge_priority(br, priority);
1121 	}
1122 
1123 	if (data[IFLA_BR_VLAN_FILTERING]) {
1124 		u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1125 
1126 		err = __br_vlan_filter_toggle(br, vlan_filter);
1127 		if (err)
1128 			return err;
1129 	}
1130 
1131 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1132 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
1133 		__be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1134 
1135 		err = __br_vlan_set_proto(br, vlan_proto);
1136 		if (err)
1137 			return err;
1138 	}
1139 
1140 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1141 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1142 
1143 		err = __br_vlan_set_default_pvid(br, defpvid, extack);
1144 		if (err)
1145 			return err;
1146 	}
1147 
1148 	if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1149 		__u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1150 
1151 		err = br_vlan_set_stats(br, vlan_stats);
1152 		if (err)
1153 			return err;
1154 	}
1155 
1156 	if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1157 		__u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1158 
1159 		err = br_vlan_set_stats_per_port(br, per_port);
1160 		if (err)
1161 			return err;
1162 	}
1163 #endif
1164 
1165 	if (data[IFLA_BR_GROUP_FWD_MASK]) {
1166 		u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1167 
1168 		if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1169 			return -EINVAL;
1170 		br->group_fwd_mask = fwd_mask;
1171 	}
1172 
1173 	if (data[IFLA_BR_GROUP_ADDR]) {
1174 		u8 new_addr[ETH_ALEN];
1175 
1176 		if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1177 			return -EINVAL;
1178 		memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1179 		if (!is_link_local_ether_addr(new_addr))
1180 			return -EINVAL;
1181 		if (new_addr[5] == 1 ||		/* 802.3x Pause address */
1182 		    new_addr[5] == 2 ||		/* 802.3ad Slow protocols */
1183 		    new_addr[5] == 3)		/* 802.1X PAE address */
1184 			return -EINVAL;
1185 		spin_lock_bh(&br->lock);
1186 		memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1187 		spin_unlock_bh(&br->lock);
1188 		br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1189 		br_recalculate_fwd_mask(br);
1190 	}
1191 
1192 	if (data[IFLA_BR_FDB_FLUSH])
1193 		br_fdb_flush(br);
1194 
1195 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1196 	if (data[IFLA_BR_MCAST_ROUTER]) {
1197 		u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1198 
1199 		err = br_multicast_set_router(br, multicast_router);
1200 		if (err)
1201 			return err;
1202 	}
1203 
1204 	if (data[IFLA_BR_MCAST_SNOOPING]) {
1205 		u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1206 
1207 		br_multicast_toggle(br, mcast_snooping);
1208 	}
1209 
1210 	if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1211 		u8 val;
1212 
1213 		val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1214 		br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1215 	}
1216 
1217 	if (data[IFLA_BR_MCAST_QUERIER]) {
1218 		u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1219 
1220 		err = br_multicast_set_querier(br, mcast_querier);
1221 		if (err)
1222 			return err;
1223 	}
1224 
1225 	if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1226 		br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1227 			RHT_ELASTICITY);
1228 
1229 	if (data[IFLA_BR_MCAST_HASH_MAX])
1230 		br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1231 
1232 	if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1233 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1234 
1235 		br->multicast_last_member_count = val;
1236 	}
1237 
1238 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1239 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1240 
1241 		br->multicast_startup_query_count = val;
1242 	}
1243 
1244 	if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1245 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1246 
1247 		br->multicast_last_member_interval = clock_t_to_jiffies(val);
1248 	}
1249 
1250 	if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1251 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1252 
1253 		br->multicast_membership_interval = clock_t_to_jiffies(val);
1254 	}
1255 
1256 	if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1257 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1258 
1259 		br->multicast_querier_interval = clock_t_to_jiffies(val);
1260 	}
1261 
1262 	if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1263 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1264 
1265 		br->multicast_query_interval = clock_t_to_jiffies(val);
1266 	}
1267 
1268 	if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1269 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1270 
1271 		br->multicast_query_response_interval = clock_t_to_jiffies(val);
1272 	}
1273 
1274 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1275 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1276 
1277 		br->multicast_startup_query_interval = clock_t_to_jiffies(val);
1278 	}
1279 
1280 	if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1281 		__u8 mcast_stats;
1282 
1283 		mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1284 		br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1285 	}
1286 
1287 	if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1288 		__u8 igmp_version;
1289 
1290 		igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1291 		err = br_multicast_set_igmp_version(br, igmp_version);
1292 		if (err)
1293 			return err;
1294 	}
1295 
1296 #if IS_ENABLED(CONFIG_IPV6)
1297 	if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1298 		__u8 mld_version;
1299 
1300 		mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1301 		err = br_multicast_set_mld_version(br, mld_version);
1302 		if (err)
1303 			return err;
1304 	}
1305 #endif
1306 #endif
1307 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1308 	if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1309 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1310 
1311 		br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1312 	}
1313 
1314 	if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1315 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1316 
1317 		br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1318 	}
1319 
1320 	if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1321 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1322 
1323 		br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1324 	}
1325 #endif
1326 
1327 	if (data[IFLA_BR_MULTI_BOOLOPT]) {
1328 		struct br_boolopt_multi *bm;
1329 
1330 		bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1331 		err = br_boolopt_multi_toggle(br, bm, extack);
1332 		if (err)
1333 			return err;
1334 	}
1335 
1336 	return 0;
1337 }
1338 
1339 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1340 			  struct nlattr *tb[], struct nlattr *data[],
1341 			  struct netlink_ext_ack *extack)
1342 {
1343 	struct net_bridge *br = netdev_priv(dev);
1344 	int err;
1345 
1346 	err = register_netdevice(dev);
1347 	if (err)
1348 		return err;
1349 
1350 	if (tb[IFLA_ADDRESS]) {
1351 		spin_lock_bh(&br->lock);
1352 		br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1353 		spin_unlock_bh(&br->lock);
1354 	}
1355 
1356 	err = br_changelink(dev, tb, data, extack);
1357 	if (err)
1358 		br_dev_delete(dev, NULL);
1359 
1360 	return err;
1361 }
1362 
1363 static size_t br_get_size(const struct net_device *brdev)
1364 {
1365 	return nla_total_size(sizeof(u32)) +	/* IFLA_BR_FORWARD_DELAY  */
1366 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_HELLO_TIME */
1367 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_MAX_AGE */
1368 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1369 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1370 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1371 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1372 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1373 	       nla_total_size(sizeof(__be16)) +	/* IFLA_BR_VLAN_PROTOCOL */
1374 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1375 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1376 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_VLAN_STATS_PER_PORT */
1377 #endif
1378 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1379 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1380 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1381 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1382 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1383 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1384 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1385 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1386 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1387 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1388 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1389 	       nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1390 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1391 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1392 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1393 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1394 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1395 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1396 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1397 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1398 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1399 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1400 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1401 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1402 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1403 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1404 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1405 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1406 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_IGMP_VERSION */
1407 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_MLD_VERSION */
1408 #endif
1409 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1410 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1411 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1412 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1413 #endif
1414 	       nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1415 	       0;
1416 }
1417 
1418 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1419 {
1420 	struct net_bridge *br = netdev_priv(brdev);
1421 	u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1422 	u32 hello_time = jiffies_to_clock_t(br->hello_time);
1423 	u32 age_time = jiffies_to_clock_t(br->max_age);
1424 	u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1425 	u32 stp_enabled = br->stp_enabled;
1426 	u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1427 	u8 vlan_enabled = br_vlan_enabled(br->dev);
1428 	struct br_boolopt_multi bm;
1429 	u64 clockval;
1430 
1431 	clockval = br_timer_value(&br->hello_timer);
1432 	if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1433 		return -EMSGSIZE;
1434 	clockval = br_timer_value(&br->tcn_timer);
1435 	if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1436 		return -EMSGSIZE;
1437 	clockval = br_timer_value(&br->topology_change_timer);
1438 	if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1439 			      IFLA_BR_PAD))
1440 		return -EMSGSIZE;
1441 	clockval = br_timer_value(&br->gc_work.timer);
1442 	if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1443 		return -EMSGSIZE;
1444 
1445 	br_boolopt_multi_get(br, &bm);
1446 	if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1447 	    nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1448 	    nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1449 	    nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1450 	    nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1451 	    nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1452 	    nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1453 	    nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1454 	    nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1455 		    &br->bridge_id) ||
1456 	    nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1457 		    &br->designated_root) ||
1458 	    nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1459 	    nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1460 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1461 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1462 		       br->topology_change_detected) ||
1463 	    nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1464 	    nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1465 		return -EMSGSIZE;
1466 
1467 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1468 	if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1469 	    nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1470 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1471 		       br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1472 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1473 		       br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1474 		return -EMSGSIZE;
1475 #endif
1476 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1477 	if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, br->multicast_router) ||
1478 	    nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1479 		       br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1480 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1481 		       br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1482 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1483 		       br_opt_get(br, BROPT_MULTICAST_QUERIER)) ||
1484 	    nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1485 		       br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1486 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1487 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1488 	    nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1489 			br->multicast_last_member_count) ||
1490 	    nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1491 			br->multicast_startup_query_count) ||
1492 	    nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1493 		       br->multicast_igmp_version))
1494 		return -EMSGSIZE;
1495 #if IS_ENABLED(CONFIG_IPV6)
1496 	if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1497 		       br->multicast_mld_version))
1498 		return -EMSGSIZE;
1499 #endif
1500 	clockval = jiffies_to_clock_t(br->multicast_last_member_interval);
1501 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1502 			      IFLA_BR_PAD))
1503 		return -EMSGSIZE;
1504 	clockval = jiffies_to_clock_t(br->multicast_membership_interval);
1505 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1506 			      IFLA_BR_PAD))
1507 		return -EMSGSIZE;
1508 	clockval = jiffies_to_clock_t(br->multicast_querier_interval);
1509 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1510 			      IFLA_BR_PAD))
1511 		return -EMSGSIZE;
1512 	clockval = jiffies_to_clock_t(br->multicast_query_interval);
1513 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1514 			      IFLA_BR_PAD))
1515 		return -EMSGSIZE;
1516 	clockval = jiffies_to_clock_t(br->multicast_query_response_interval);
1517 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1518 			      IFLA_BR_PAD))
1519 		return -EMSGSIZE;
1520 	clockval = jiffies_to_clock_t(br->multicast_startup_query_interval);
1521 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1522 			      IFLA_BR_PAD))
1523 		return -EMSGSIZE;
1524 #endif
1525 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1526 	if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1527 		       br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1528 	    nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1529 		       br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1530 	    nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1531 		       br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1532 		return -EMSGSIZE;
1533 #endif
1534 
1535 	return 0;
1536 }
1537 
1538 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1539 {
1540 	struct net_bridge_port *p = NULL;
1541 	struct net_bridge_vlan_group *vg;
1542 	struct net_bridge_vlan *v;
1543 	struct net_bridge *br;
1544 	int numvls = 0;
1545 
1546 	switch (attr) {
1547 	case IFLA_STATS_LINK_XSTATS:
1548 		br = netdev_priv(dev);
1549 		vg = br_vlan_group(br);
1550 		break;
1551 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1552 		p = br_port_get_rtnl(dev);
1553 		if (!p)
1554 			return 0;
1555 		br = p->br;
1556 		vg = nbp_vlan_group(p);
1557 		break;
1558 	default:
1559 		return 0;
1560 	}
1561 
1562 	if (vg) {
1563 		/* we need to count all, even placeholder entries */
1564 		list_for_each_entry(v, &vg->vlan_list, vlist)
1565 			numvls++;
1566 	}
1567 
1568 	return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1569 	       nla_total_size(sizeof(struct br_mcast_stats)) +
1570 	       nla_total_size(0);
1571 }
1572 
1573 static int br_fill_linkxstats(struct sk_buff *skb,
1574 			      const struct net_device *dev,
1575 			      int *prividx, int attr)
1576 {
1577 	struct nlattr *nla __maybe_unused;
1578 	struct net_bridge_port *p = NULL;
1579 	struct net_bridge_vlan_group *vg;
1580 	struct net_bridge_vlan *v;
1581 	struct net_bridge *br;
1582 	struct nlattr *nest;
1583 	int vl_idx = 0;
1584 
1585 	switch (attr) {
1586 	case IFLA_STATS_LINK_XSTATS:
1587 		br = netdev_priv(dev);
1588 		vg = br_vlan_group(br);
1589 		break;
1590 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1591 		p = br_port_get_rtnl(dev);
1592 		if (!p)
1593 			return 0;
1594 		br = p->br;
1595 		vg = nbp_vlan_group(p);
1596 		break;
1597 	default:
1598 		return -EINVAL;
1599 	}
1600 
1601 	nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1602 	if (!nest)
1603 		return -EMSGSIZE;
1604 
1605 	if (vg) {
1606 		u16 pvid;
1607 
1608 		pvid = br_get_pvid(vg);
1609 		list_for_each_entry(v, &vg->vlan_list, vlist) {
1610 			struct bridge_vlan_xstats vxi;
1611 			struct br_vlan_stats stats;
1612 
1613 			if (++vl_idx < *prividx)
1614 				continue;
1615 			memset(&vxi, 0, sizeof(vxi));
1616 			vxi.vid = v->vid;
1617 			vxi.flags = v->flags;
1618 			if (v->vid == pvid)
1619 				vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1620 			br_vlan_get_stats(v, &stats);
1621 			vxi.rx_bytes = stats.rx_bytes;
1622 			vxi.rx_packets = stats.rx_packets;
1623 			vxi.tx_bytes = stats.tx_bytes;
1624 			vxi.tx_packets = stats.tx_packets;
1625 
1626 			if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1627 				goto nla_put_failure;
1628 		}
1629 	}
1630 
1631 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1632 	if (++vl_idx >= *prividx) {
1633 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1634 					sizeof(struct br_mcast_stats),
1635 					BRIDGE_XSTATS_PAD);
1636 		if (!nla)
1637 			goto nla_put_failure;
1638 		br_multicast_get_stats(br, p, nla_data(nla));
1639 	}
1640 #endif
1641 
1642 	if (p) {
1643 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1644 					sizeof(p->stp_xstats),
1645 					BRIDGE_XSTATS_PAD);
1646 		if (!nla)
1647 			goto nla_put_failure;
1648 
1649 		spin_lock_bh(&br->lock);
1650 		memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1651 		spin_unlock_bh(&br->lock);
1652 	}
1653 
1654 	nla_nest_end(skb, nest);
1655 	*prividx = 0;
1656 
1657 	return 0;
1658 
1659 nla_put_failure:
1660 	nla_nest_end(skb, nest);
1661 	*prividx = vl_idx;
1662 
1663 	return -EMSGSIZE;
1664 }
1665 
1666 static struct rtnl_af_ops br_af_ops __read_mostly = {
1667 	.family			= AF_BRIDGE,
1668 	.get_link_af_size	= br_get_link_af_size_filtered,
1669 };
1670 
1671 struct rtnl_link_ops br_link_ops __read_mostly = {
1672 	.kind			= "bridge",
1673 	.priv_size		= sizeof(struct net_bridge),
1674 	.setup			= br_dev_setup,
1675 	.maxtype		= IFLA_BR_MAX,
1676 	.policy			= br_policy,
1677 	.validate		= br_validate,
1678 	.newlink		= br_dev_newlink,
1679 	.changelink		= br_changelink,
1680 	.dellink		= br_dev_delete,
1681 	.get_size		= br_get_size,
1682 	.fill_info		= br_fill_info,
1683 	.fill_linkxstats	= br_fill_linkxstats,
1684 	.get_linkxstats_size	= br_get_linkxstats_size,
1685 
1686 	.slave_maxtype		= IFLA_BRPORT_MAX,
1687 	.slave_policy		= br_port_policy,
1688 	.slave_changelink	= br_port_slave_changelink,
1689 	.get_slave_size		= br_port_get_slave_size,
1690 	.fill_slave_info	= br_port_fill_slave_info,
1691 };
1692 
1693 int __init br_netlink_init(void)
1694 {
1695 	int err;
1696 
1697 	br_mdb_init();
1698 	br_vlan_rtnl_init();
1699 	rtnl_af_register(&br_af_ops);
1700 
1701 	err = rtnl_link_register(&br_link_ops);
1702 	if (err)
1703 		goto out_af;
1704 
1705 	return 0;
1706 
1707 out_af:
1708 	rtnl_af_unregister(&br_af_ops);
1709 	br_mdb_uninit();
1710 	return err;
1711 }
1712 
1713 void br_netlink_fini(void)
1714 {
1715 	br_mdb_uninit();
1716 	br_vlan_rtnl_uninit();
1717 	rtnl_af_unregister(&br_af_ops);
1718 	rtnl_link_unregister(&br_link_ops);
1719 }
1720