xref: /openbmc/linux/net/bridge/br_netlink.c (revision 304ae3bf)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *	Bridge netlink control interface
4  *
5  *	Authors:
6  *	Stephen Hemminger		<shemminger@osdl.org>
7  */
8 
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
14 #include <net/sock.h>
15 #include <uapi/linux/if_bridge.h>
16 
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_cfm.h"
20 #include "br_private_tunnel.h"
21 #include "br_private_mcast_eht.h"
22 
23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
24 				u32 filter_mask)
25 {
26 	struct net_bridge_vlan *v;
27 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
28 	u16 flags, pvid;
29 	int num_vlans = 0;
30 
31 	if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
32 		return 0;
33 
34 	pvid = br_get_pvid(vg);
35 	/* Count number of vlan infos */
36 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
37 		flags = 0;
38 		/* only a context, bridge vlan not activated */
39 		if (!br_vlan_should_use(v))
40 			continue;
41 		if (v->vid == pvid)
42 			flags |= BRIDGE_VLAN_INFO_PVID;
43 
44 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
45 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
46 
47 		if (vid_range_start == 0) {
48 			goto initvars;
49 		} else if ((v->vid - vid_range_end) == 1 &&
50 			flags == vid_range_flags) {
51 			vid_range_end = v->vid;
52 			continue;
53 		} else {
54 			if ((vid_range_end - vid_range_start) > 0)
55 				num_vlans += 2;
56 			else
57 				num_vlans += 1;
58 		}
59 initvars:
60 		vid_range_start = v->vid;
61 		vid_range_end = v->vid;
62 		vid_range_flags = flags;
63 	}
64 
65 	if (vid_range_start != 0) {
66 		if ((vid_range_end - vid_range_start) > 0)
67 			num_vlans += 2;
68 		else
69 			num_vlans += 1;
70 	}
71 
72 	return num_vlans;
73 }
74 
75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
76 				 u32 filter_mask)
77 {
78 	int num_vlans;
79 
80 	if (!vg)
81 		return 0;
82 
83 	if (filter_mask & RTEXT_FILTER_BRVLAN)
84 		return vg->num_vlans;
85 
86 	rcu_read_lock();
87 	num_vlans = __get_num_vlan_infos(vg, filter_mask);
88 	rcu_read_unlock();
89 
90 	return num_vlans;
91 }
92 
93 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
94 					   u32 filter_mask)
95 {
96 	struct net_bridge_vlan_group *vg = NULL;
97 	struct net_bridge_port *p = NULL;
98 	struct net_bridge *br = NULL;
99 	u32 num_cfm_peer_mep_infos;
100 	u32 num_cfm_mep_infos;
101 	size_t vinfo_sz = 0;
102 	int num_vlan_infos;
103 
104 	rcu_read_lock();
105 	if (netif_is_bridge_port(dev)) {
106 		p = br_port_get_rcu(dev);
107 		vg = nbp_vlan_group_rcu(p);
108 	} else if (dev->priv_flags & IFF_EBRIDGE) {
109 		br = netdev_priv(dev);
110 		vg = br_vlan_group_rcu(br);
111 	}
112 	num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
113 	rcu_read_unlock();
114 
115 	if (p && (p->flags & BR_VLAN_TUNNEL))
116 		vinfo_sz += br_get_vlan_tunnel_info_size(vg);
117 
118 	/* Each VLAN is returned in bridge_vlan_info along with flags */
119 	vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
120 
121 	if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
122 		return vinfo_sz;
123 
124 	if (!br)
125 		return vinfo_sz;
126 
127 	/* CFM status info must be added */
128 	br_cfm_mep_count(br, &num_cfm_mep_infos);
129 	br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
130 
131 	vinfo_sz += nla_total_size(0);	/* IFLA_BRIDGE_CFM */
132 	/* For each status struct the MEP instance (u32) is added */
133 	/* MEP instance (u32) + br_cfm_mep_status */
134 	vinfo_sz += num_cfm_mep_infos *
135 		     /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
136 		    (nla_total_size(sizeof(u32))
137 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
138 		     + nla_total_size(sizeof(u32))
139 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
140 		     + nla_total_size(sizeof(u32))
141 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
142 		     + nla_total_size(sizeof(u32)));
143 	/* MEP instance (u32) + br_cfm_cc_peer_status */
144 	vinfo_sz += num_cfm_peer_mep_infos *
145 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
146 		    (nla_total_size(sizeof(u32))
147 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
148 		     + nla_total_size(sizeof(u32))
149 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
150 		     + nla_total_size(sizeof(u32))
151 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
152 		     + nla_total_size(sizeof(u32))
153 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
154 		     + nla_total_size(sizeof(u8))
155 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
156 		     + nla_total_size(sizeof(u8))
157 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
158 		     + nla_total_size(sizeof(u32))
159 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
160 		     + nla_total_size(sizeof(u32))
161 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
162 		     + nla_total_size(sizeof(u32)));
163 
164 	return vinfo_sz;
165 }
166 
167 static inline size_t br_port_info_size(void)
168 {
169 	return nla_total_size(1)	/* IFLA_BRPORT_STATE  */
170 		+ nla_total_size(2)	/* IFLA_BRPORT_PRIORITY */
171 		+ nla_total_size(4)	/* IFLA_BRPORT_COST */
172 		+ nla_total_size(1)	/* IFLA_BRPORT_MODE */
173 		+ nla_total_size(1)	/* IFLA_BRPORT_GUARD */
174 		+ nla_total_size(1)	/* IFLA_BRPORT_PROTECT */
175 		+ nla_total_size(1)	/* IFLA_BRPORT_FAST_LEAVE */
176 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_TO_UCAST */
177 		+ nla_total_size(1)	/* IFLA_BRPORT_LEARNING */
178 		+ nla_total_size(1)	/* IFLA_BRPORT_UNICAST_FLOOD */
179 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_FLOOD */
180 		+ nla_total_size(1)	/* IFLA_BRPORT_BCAST_FLOOD */
181 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP */
182 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP_WIFI */
183 		+ nla_total_size(1)	/* IFLA_BRPORT_VLAN_TUNNEL */
184 		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_SUPPRESS */
185 		+ nla_total_size(1)	/* IFLA_BRPORT_ISOLATED */
186 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_ROOT_ID */
187 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_BRIDGE_ID */
188 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_PORT */
189 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_COST */
190 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_ID */
191 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_NO */
192 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
193 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_CONFIG_PENDING */
194 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
195 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
196 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
197 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
198 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MULTICAST_ROUTER */
199 #endif
200 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_GROUP_FWD_MASK */
201 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_RING_OPEN */
202 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_IN_OPEN */
203 		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
204 		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
205 		+ 0;
206 }
207 
208 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
209 {
210 	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
211 		+ nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
212 		+ nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
213 		+ nla_total_size(4) /* IFLA_MASTER */
214 		+ nla_total_size(4) /* IFLA_MTU */
215 		+ nla_total_size(4) /* IFLA_LINK */
216 		+ nla_total_size(1) /* IFLA_OPERSTATE */
217 		+ nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
218 		+ nla_total_size(br_get_link_af_size_filtered(dev,
219 				 filter_mask)) /* IFLA_AF_SPEC */
220 		+ nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
221 }
222 
223 static int br_port_fill_attrs(struct sk_buff *skb,
224 			      const struct net_bridge_port *p)
225 {
226 	u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
227 	struct net_bridge_port *backup_p;
228 	u64 timerval;
229 
230 	if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
231 	    nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
232 	    nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
233 	    nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
234 	    nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
235 	    nla_put_u8(skb, IFLA_BRPORT_PROTECT,
236 		       !!(p->flags & BR_ROOT_BLOCK)) ||
237 	    nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
238 		       !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
239 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
240 		       !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
241 	    nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
242 	    nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
243 		       !!(p->flags & BR_FLOOD)) ||
244 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
245 		       !!(p->flags & BR_MCAST_FLOOD)) ||
246 	    nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
247 		       !!(p->flags & BR_BCAST_FLOOD)) ||
248 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
249 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
250 		       !!(p->flags & BR_PROXYARP_WIFI)) ||
251 	    nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
252 		    &p->designated_root) ||
253 	    nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
254 		    &p->designated_bridge) ||
255 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
256 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
257 	    nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
258 	    nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
259 	    nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
260 		       p->topology_change_ack) ||
261 	    nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
262 	    nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
263 							BR_VLAN_TUNNEL)) ||
264 	    nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
265 	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
266 		       !!(p->flags & BR_NEIGH_SUPPRESS)) ||
267 	    nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
268 							  BR_MRP_LOST_CONT)) ||
269 	    nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
270 		       !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
271 	    nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)))
272 		return -EMSGSIZE;
273 
274 	timerval = br_timer_value(&p->message_age_timer);
275 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
276 			      IFLA_BRPORT_PAD))
277 		return -EMSGSIZE;
278 	timerval = br_timer_value(&p->forward_delay_timer);
279 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
280 			      IFLA_BRPORT_PAD))
281 		return -EMSGSIZE;
282 	timerval = br_timer_value(&p->hold_timer);
283 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
284 			      IFLA_BRPORT_PAD))
285 		return -EMSGSIZE;
286 
287 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
288 	if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
289 		       p->multicast_router) ||
290 	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
291 			p->multicast_eht_hosts_limit) ||
292 	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
293 			p->multicast_eht_hosts_cnt))
294 		return -EMSGSIZE;
295 #endif
296 
297 	/* we might be called only with br->lock */
298 	rcu_read_lock();
299 	backup_p = rcu_dereference(p->backup_port);
300 	if (backup_p)
301 		nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
302 			    backup_p->dev->ifindex);
303 	rcu_read_unlock();
304 
305 	return 0;
306 }
307 
308 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
309 				    u16 vid_end, u16 flags)
310 {
311 	struct  bridge_vlan_info vinfo;
312 
313 	if ((vid_end - vid_start) > 0) {
314 		/* add range to skb */
315 		vinfo.vid = vid_start;
316 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
317 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
318 			    sizeof(vinfo), &vinfo))
319 			goto nla_put_failure;
320 
321 		vinfo.vid = vid_end;
322 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
323 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
324 			    sizeof(vinfo), &vinfo))
325 			goto nla_put_failure;
326 	} else {
327 		vinfo.vid = vid_start;
328 		vinfo.flags = flags;
329 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
330 			    sizeof(vinfo), &vinfo))
331 			goto nla_put_failure;
332 	}
333 
334 	return 0;
335 
336 nla_put_failure:
337 	return -EMSGSIZE;
338 }
339 
340 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
341 					 struct net_bridge_vlan_group *vg)
342 {
343 	struct net_bridge_vlan *v;
344 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
345 	u16 flags, pvid;
346 	int err = 0;
347 
348 	/* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
349 	 * and mark vlan info with begin and end flags
350 	 * if vlaninfo represents a range
351 	 */
352 	pvid = br_get_pvid(vg);
353 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
354 		flags = 0;
355 		if (!br_vlan_should_use(v))
356 			continue;
357 		if (v->vid == pvid)
358 			flags |= BRIDGE_VLAN_INFO_PVID;
359 
360 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
361 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
362 
363 		if (vid_range_start == 0) {
364 			goto initvars;
365 		} else if ((v->vid - vid_range_end) == 1 &&
366 			flags == vid_range_flags) {
367 			vid_range_end = v->vid;
368 			continue;
369 		} else {
370 			err = br_fill_ifvlaninfo_range(skb, vid_range_start,
371 						       vid_range_end,
372 						       vid_range_flags);
373 			if (err)
374 				return err;
375 		}
376 
377 initvars:
378 		vid_range_start = v->vid;
379 		vid_range_end = v->vid;
380 		vid_range_flags = flags;
381 	}
382 
383 	if (vid_range_start != 0) {
384 		/* Call it once more to send any left over vlans */
385 		err = br_fill_ifvlaninfo_range(skb, vid_range_start,
386 					       vid_range_end,
387 					       vid_range_flags);
388 		if (err)
389 			return err;
390 	}
391 
392 	return 0;
393 }
394 
395 static int br_fill_ifvlaninfo(struct sk_buff *skb,
396 			      struct net_bridge_vlan_group *vg)
397 {
398 	struct bridge_vlan_info vinfo;
399 	struct net_bridge_vlan *v;
400 	u16 pvid;
401 
402 	pvid = br_get_pvid(vg);
403 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
404 		if (!br_vlan_should_use(v))
405 			continue;
406 
407 		vinfo.vid = v->vid;
408 		vinfo.flags = 0;
409 		if (v->vid == pvid)
410 			vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
411 
412 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
413 			vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
414 
415 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
416 			    sizeof(vinfo), &vinfo))
417 			goto nla_put_failure;
418 	}
419 
420 	return 0;
421 
422 nla_put_failure:
423 	return -EMSGSIZE;
424 }
425 
426 /*
427  * Create one netlink message for one interface
428  * Contains port and master info as well as carrier and bridge state.
429  */
430 static int br_fill_ifinfo(struct sk_buff *skb,
431 			  const struct net_bridge_port *port,
432 			  u32 pid, u32 seq, int event, unsigned int flags,
433 			  u32 filter_mask, const struct net_device *dev,
434 			  bool getlink)
435 {
436 	u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
437 	struct nlattr *af = NULL;
438 	struct net_bridge *br;
439 	struct ifinfomsg *hdr;
440 	struct nlmsghdr *nlh;
441 
442 	if (port)
443 		br = port->br;
444 	else
445 		br = netdev_priv(dev);
446 
447 	br_debug(br, "br_fill_info event %d port %s master %s\n",
448 		     event, dev->name, br->dev->name);
449 
450 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
451 	if (nlh == NULL)
452 		return -EMSGSIZE;
453 
454 	hdr = nlmsg_data(nlh);
455 	hdr->ifi_family = AF_BRIDGE;
456 	hdr->__ifi_pad = 0;
457 	hdr->ifi_type = dev->type;
458 	hdr->ifi_index = dev->ifindex;
459 	hdr->ifi_flags = dev_get_flags(dev);
460 	hdr->ifi_change = 0;
461 
462 	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
463 	    nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
464 	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
465 	    nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
466 	    (dev->addr_len &&
467 	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
468 	    (dev->ifindex != dev_get_iflink(dev) &&
469 	     nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
470 		goto nla_put_failure;
471 
472 	if (event == RTM_NEWLINK && port) {
473 		struct nlattr *nest;
474 
475 		nest = nla_nest_start(skb, IFLA_PROTINFO);
476 		if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
477 			goto nla_put_failure;
478 		nla_nest_end(skb, nest);
479 	}
480 
481 	if (filter_mask & (RTEXT_FILTER_BRVLAN |
482 			   RTEXT_FILTER_BRVLAN_COMPRESSED |
483 			   RTEXT_FILTER_MRP |
484 			   RTEXT_FILTER_CFM_CONFIG |
485 			   RTEXT_FILTER_CFM_STATUS)) {
486 		af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
487 		if (!af)
488 			goto nla_put_failure;
489 	}
490 
491 	/* Check if  the VID information is requested */
492 	if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
493 	    (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
494 		struct net_bridge_vlan_group *vg;
495 		int err;
496 
497 		/* RCU needed because of the VLAN locking rules (rcu || rtnl) */
498 		rcu_read_lock();
499 		if (port)
500 			vg = nbp_vlan_group_rcu(port);
501 		else
502 			vg = br_vlan_group_rcu(br);
503 
504 		if (!vg || !vg->num_vlans) {
505 			rcu_read_unlock();
506 			goto done;
507 		}
508 		if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
509 			err = br_fill_ifvlaninfo_compressed(skb, vg);
510 		else
511 			err = br_fill_ifvlaninfo(skb, vg);
512 
513 		if (port && (port->flags & BR_VLAN_TUNNEL))
514 			err = br_fill_vlan_tunnel_info(skb, vg);
515 		rcu_read_unlock();
516 		if (err)
517 			goto nla_put_failure;
518 	}
519 
520 	if (filter_mask & RTEXT_FILTER_MRP) {
521 		int err;
522 
523 		if (!br_mrp_enabled(br) || port)
524 			goto done;
525 
526 		rcu_read_lock();
527 		err = br_mrp_fill_info(skb, br);
528 		rcu_read_unlock();
529 
530 		if (err)
531 			goto nla_put_failure;
532 	}
533 
534 	if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
535 		struct nlattr *cfm_nest = NULL;
536 		int err;
537 
538 		if (!br_cfm_created(br) || port)
539 			goto done;
540 
541 		cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
542 		if (!cfm_nest)
543 			goto nla_put_failure;
544 
545 		if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
546 			rcu_read_lock();
547 			err = br_cfm_config_fill_info(skb, br);
548 			rcu_read_unlock();
549 			if (err)
550 				goto nla_put_failure;
551 		}
552 
553 		if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
554 			rcu_read_lock();
555 			err = br_cfm_status_fill_info(skb, br, getlink);
556 			rcu_read_unlock();
557 			if (err)
558 				goto nla_put_failure;
559 		}
560 
561 		nla_nest_end(skb, cfm_nest);
562 	}
563 
564 done:
565 	if (af)
566 		nla_nest_end(skb, af);
567 	nlmsg_end(skb, nlh);
568 	return 0;
569 
570 nla_put_failure:
571 	nlmsg_cancel(skb, nlh);
572 	return -EMSGSIZE;
573 }
574 
575 void br_info_notify(int event, const struct net_bridge *br,
576 		    const struct net_bridge_port *port, u32 filter)
577 {
578 	struct net_device *dev;
579 	struct sk_buff *skb;
580 	int err = -ENOBUFS;
581 	struct net *net;
582 	u16 port_no = 0;
583 
584 	if (WARN_ON(!port && !br))
585 		return;
586 
587 	if (port) {
588 		dev = port->dev;
589 		br = port->br;
590 		port_no = port->port_no;
591 	} else {
592 		dev = br->dev;
593 	}
594 
595 	net = dev_net(dev);
596 	br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
597 
598 	skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
599 	if (skb == NULL)
600 		goto errout;
601 
602 	err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
603 	if (err < 0) {
604 		/* -EMSGSIZE implies BUG in br_nlmsg_size() */
605 		WARN_ON(err == -EMSGSIZE);
606 		kfree_skb(skb);
607 		goto errout;
608 	}
609 	rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
610 	return;
611 errout:
612 	rtnl_set_sk_err(net, RTNLGRP_LINK, err);
613 }
614 
615 /* Notify listeners of a change in bridge or port information */
616 void br_ifinfo_notify(int event, const struct net_bridge *br,
617 		      const struct net_bridge_port *port)
618 {
619 	u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
620 
621 	return br_info_notify(event, br, port, filter);
622 }
623 
624 /*
625  * Dump information about all ports, in response to GETLINK
626  */
627 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
628 	       struct net_device *dev, u32 filter_mask, int nlflags)
629 {
630 	struct net_bridge_port *port = br_port_get_rtnl(dev);
631 
632 	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
633 	    !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
634 	    !(filter_mask & RTEXT_FILTER_MRP) &&
635 	    !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
636 	    !(filter_mask & RTEXT_FILTER_CFM_STATUS))
637 		return 0;
638 
639 	return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
640 			      filter_mask, dev, true);
641 }
642 
643 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
644 			int cmd, struct bridge_vlan_info *vinfo, bool *changed,
645 			struct netlink_ext_ack *extack)
646 {
647 	bool curr_change;
648 	int err = 0;
649 
650 	switch (cmd) {
651 	case RTM_SETLINK:
652 		if (p) {
653 			/* if the MASTER flag is set this will act on the global
654 			 * per-VLAN entry as well
655 			 */
656 			err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
657 					   &curr_change, extack);
658 		} else {
659 			vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
660 			err = br_vlan_add(br, vinfo->vid, vinfo->flags,
661 					  &curr_change, extack);
662 		}
663 		if (curr_change)
664 			*changed = true;
665 		break;
666 
667 	case RTM_DELLINK:
668 		if (p) {
669 			if (!nbp_vlan_delete(p, vinfo->vid))
670 				*changed = true;
671 
672 			if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
673 			    !br_vlan_delete(p->br, vinfo->vid))
674 				*changed = true;
675 		} else if (!br_vlan_delete(br, vinfo->vid)) {
676 			*changed = true;
677 		}
678 		break;
679 	}
680 
681 	return err;
682 }
683 
684 int br_process_vlan_info(struct net_bridge *br,
685 			 struct net_bridge_port *p, int cmd,
686 			 struct bridge_vlan_info *vinfo_curr,
687 			 struct bridge_vlan_info **vinfo_last,
688 			 bool *changed,
689 			 struct netlink_ext_ack *extack)
690 {
691 	int err, rtm_cmd;
692 
693 	if (!br_vlan_valid_id(vinfo_curr->vid, extack))
694 		return -EINVAL;
695 
696 	/* needed for vlan-only NEWVLAN/DELVLAN notifications */
697 	rtm_cmd = br_afspec_cmd_to_rtm(cmd);
698 
699 	if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
700 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
701 			return -EINVAL;
702 		*vinfo_last = vinfo_curr;
703 		return 0;
704 	}
705 
706 	if (*vinfo_last) {
707 		struct bridge_vlan_info tmp_vinfo;
708 		int v, v_change_start = 0;
709 
710 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
711 			return -EINVAL;
712 
713 		memcpy(&tmp_vinfo, *vinfo_last,
714 		       sizeof(struct bridge_vlan_info));
715 		for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
716 			bool curr_change = false;
717 
718 			tmp_vinfo.vid = v;
719 			err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
720 					   extack);
721 			if (err)
722 				break;
723 			if (curr_change) {
724 				*changed = curr_change;
725 				if (!v_change_start)
726 					v_change_start = v;
727 			} else {
728 				/* nothing to notify yet */
729 				if (!v_change_start)
730 					continue;
731 				br_vlan_notify(br, p, v_change_start,
732 					       v - 1, rtm_cmd);
733 				v_change_start = 0;
734 			}
735 			cond_resched();
736 		}
737 		/* v_change_start is set only if the last/whole range changed */
738 		if (v_change_start)
739 			br_vlan_notify(br, p, v_change_start,
740 				       v - 1, rtm_cmd);
741 
742 		*vinfo_last = NULL;
743 
744 		return err;
745 	}
746 
747 	err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
748 	if (*changed)
749 		br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
750 
751 	return err;
752 }
753 
754 static int br_afspec(struct net_bridge *br,
755 		     struct net_bridge_port *p,
756 		     struct nlattr *af_spec,
757 		     int cmd, bool *changed,
758 		     struct netlink_ext_ack *extack)
759 {
760 	struct bridge_vlan_info *vinfo_curr = NULL;
761 	struct bridge_vlan_info *vinfo_last = NULL;
762 	struct nlattr *attr;
763 	struct vtunnel_info tinfo_last = {};
764 	struct vtunnel_info tinfo_curr = {};
765 	int err = 0, rem;
766 
767 	nla_for_each_nested(attr, af_spec, rem) {
768 		err = 0;
769 		switch (nla_type(attr)) {
770 		case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
771 			if (!p || !(p->flags & BR_VLAN_TUNNEL))
772 				return -EINVAL;
773 			err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
774 			if (err)
775 				return err;
776 			err = br_process_vlan_tunnel_info(br, p, cmd,
777 							  &tinfo_curr,
778 							  &tinfo_last,
779 							  changed);
780 			if (err)
781 				return err;
782 			break;
783 		case IFLA_BRIDGE_VLAN_INFO:
784 			if (nla_len(attr) != sizeof(struct bridge_vlan_info))
785 				return -EINVAL;
786 			vinfo_curr = nla_data(attr);
787 			err = br_process_vlan_info(br, p, cmd, vinfo_curr,
788 						   &vinfo_last, changed,
789 						   extack);
790 			if (err)
791 				return err;
792 			break;
793 		case IFLA_BRIDGE_MRP:
794 			err = br_mrp_parse(br, p, attr, cmd, extack);
795 			if (err)
796 				return err;
797 			break;
798 		case IFLA_BRIDGE_CFM:
799 			err = br_cfm_parse(br, p, attr, cmd, extack);
800 			if (err)
801 				return err;
802 			break;
803 		}
804 	}
805 
806 	return err;
807 }
808 
809 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
810 	[IFLA_BRPORT_STATE]	= { .type = NLA_U8 },
811 	[IFLA_BRPORT_COST]	= { .type = NLA_U32 },
812 	[IFLA_BRPORT_PRIORITY]	= { .type = NLA_U16 },
813 	[IFLA_BRPORT_MODE]	= { .type = NLA_U8 },
814 	[IFLA_BRPORT_GUARD]	= { .type = NLA_U8 },
815 	[IFLA_BRPORT_PROTECT]	= { .type = NLA_U8 },
816 	[IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
817 	[IFLA_BRPORT_LEARNING]	= { .type = NLA_U8 },
818 	[IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
819 	[IFLA_BRPORT_PROXYARP]	= { .type = NLA_U8 },
820 	[IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
821 	[IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
822 	[IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
823 	[IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
824 	[IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
825 	[IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
826 	[IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
827 	[IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
828 	[IFLA_BRPORT_ISOLATED]	= { .type = NLA_U8 },
829 	[IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
830 	[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
831 };
832 
833 /* Change the state of the port and notify spanning tree */
834 static int br_set_port_state(struct net_bridge_port *p, u8 state)
835 {
836 	if (state > BR_STATE_BLOCKING)
837 		return -EINVAL;
838 
839 	/* if kernel STP is running, don't allow changes */
840 	if (p->br->stp_enabled == BR_KERNEL_STP)
841 		return -EBUSY;
842 
843 	/* if device is not up, change is not allowed
844 	 * if link is not present, only allowable state is disabled
845 	 */
846 	if (!netif_running(p->dev) ||
847 	    (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
848 		return -ENETDOWN;
849 
850 	br_set_state(p, state);
851 	br_port_state_selection(p->br);
852 	return 0;
853 }
854 
855 /* Set/clear or port flags based on attribute */
856 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
857 			     int attrtype, unsigned long mask)
858 {
859 	if (!tb[attrtype])
860 		return;
861 
862 	if (nla_get_u8(tb[attrtype]))
863 		p->flags |= mask;
864 	else
865 		p->flags &= ~mask;
866 }
867 
868 /* Process bridge protocol info on port */
869 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[])
870 {
871 	unsigned long old_flags, changed_mask;
872 	bool br_vlan_tunnel_old;
873 	int err;
874 
875 	old_flags = p->flags;
876 	br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
877 
878 	br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
879 	br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
880 	br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
881 			 BR_MULTICAST_FAST_LEAVE);
882 	br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
883 	br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
884 	br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
885 	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
886 	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
887 			 BR_MULTICAST_TO_UNICAST);
888 	br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
889 	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
890 	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
891 	br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
892 	br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
893 	br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
894 
895 	changed_mask = old_flags ^ p->flags;
896 
897 	err = br_switchdev_set_port_flag(p, p->flags, changed_mask);
898 	if (err) {
899 		p->flags = old_flags;
900 		return err;
901 	}
902 
903 	if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
904 		nbp_vlan_tunnel_info_flush(p);
905 
906 	br_port_flags_change(p, changed_mask);
907 
908 	if (tb[IFLA_BRPORT_COST]) {
909 		err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
910 		if (err)
911 			return err;
912 	}
913 
914 	if (tb[IFLA_BRPORT_PRIORITY]) {
915 		err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
916 		if (err)
917 			return err;
918 	}
919 
920 	if (tb[IFLA_BRPORT_STATE]) {
921 		err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
922 		if (err)
923 			return err;
924 	}
925 
926 	if (tb[IFLA_BRPORT_FLUSH])
927 		br_fdb_delete_by_port(p->br, p, 0, 0);
928 
929 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
930 	if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
931 		u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
932 
933 		err = br_multicast_set_port_router(p, mcast_router);
934 		if (err)
935 			return err;
936 	}
937 
938 	if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
939 		u32 hlimit;
940 
941 		hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
942 		err = br_multicast_eht_set_hosts_limit(p, hlimit);
943 		if (err)
944 			return err;
945 	}
946 #endif
947 
948 	if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
949 		u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
950 
951 		if (fwd_mask & BR_GROUPFWD_MACPAUSE)
952 			return -EINVAL;
953 		p->group_fwd_mask = fwd_mask;
954 	}
955 
956 	if (tb[IFLA_BRPORT_BACKUP_PORT]) {
957 		struct net_device *backup_dev = NULL;
958 		u32 backup_ifindex;
959 
960 		backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
961 		if (backup_ifindex) {
962 			backup_dev = __dev_get_by_index(dev_net(p->dev),
963 							backup_ifindex);
964 			if (!backup_dev)
965 				return -ENOENT;
966 		}
967 
968 		err = nbp_backup_change(p, backup_dev);
969 		if (err)
970 			return err;
971 	}
972 
973 	return 0;
974 }
975 
976 /* Change state and parameters on port. */
977 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
978 	       struct netlink_ext_ack *extack)
979 {
980 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
981 	struct nlattr *tb[IFLA_BRPORT_MAX + 1];
982 	struct net_bridge_port *p;
983 	struct nlattr *protinfo;
984 	struct nlattr *afspec;
985 	bool changed = false;
986 	int err = 0;
987 
988 	protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
989 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
990 	if (!protinfo && !afspec)
991 		return 0;
992 
993 	p = br_port_get_rtnl(dev);
994 	/* We want to accept dev as bridge itself if the AF_SPEC
995 	 * is set to see if someone is setting vlan info on the bridge
996 	 */
997 	if (!p && !afspec)
998 		return -EINVAL;
999 
1000 	if (p && protinfo) {
1001 		if (protinfo->nla_type & NLA_F_NESTED) {
1002 			err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1003 							  protinfo,
1004 							  br_port_policy,
1005 							  NULL);
1006 			if (err)
1007 				return err;
1008 
1009 			spin_lock_bh(&p->br->lock);
1010 			err = br_setport(p, tb);
1011 			spin_unlock_bh(&p->br->lock);
1012 		} else {
1013 			/* Binary compatibility with old RSTP */
1014 			if (nla_len(protinfo) < sizeof(u8))
1015 				return -EINVAL;
1016 
1017 			spin_lock_bh(&p->br->lock);
1018 			err = br_set_port_state(p, nla_get_u8(protinfo));
1019 			spin_unlock_bh(&p->br->lock);
1020 		}
1021 		if (err)
1022 			goto out;
1023 		changed = true;
1024 	}
1025 
1026 	if (afspec)
1027 		err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1028 
1029 	if (changed)
1030 		br_ifinfo_notify(RTM_NEWLINK, br, p);
1031 out:
1032 	return err;
1033 }
1034 
1035 /* Delete port information */
1036 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1037 {
1038 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1039 	struct net_bridge_port *p;
1040 	struct nlattr *afspec;
1041 	bool changed = false;
1042 	int err = 0;
1043 
1044 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1045 	if (!afspec)
1046 		return 0;
1047 
1048 	p = br_port_get_rtnl(dev);
1049 	/* We want to accept dev as bridge itself as well */
1050 	if (!p && !(dev->priv_flags & IFF_EBRIDGE))
1051 		return -EINVAL;
1052 
1053 	err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1054 	if (changed)
1055 		/* Send RTM_NEWLINK because userspace
1056 		 * expects RTM_NEWLINK for vlan dels
1057 		 */
1058 		br_ifinfo_notify(RTM_NEWLINK, br, p);
1059 
1060 	return err;
1061 }
1062 
1063 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1064 		       struct netlink_ext_ack *extack)
1065 {
1066 	if (tb[IFLA_ADDRESS]) {
1067 		if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1068 			return -EINVAL;
1069 		if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1070 			return -EADDRNOTAVAIL;
1071 	}
1072 
1073 	if (!data)
1074 		return 0;
1075 
1076 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1077 	if (data[IFLA_BR_VLAN_PROTOCOL] &&
1078 	    !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1079 		return -EPROTONOSUPPORT;
1080 
1081 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1082 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1083 
1084 		if (defpvid >= VLAN_VID_MASK)
1085 			return -EINVAL;
1086 	}
1087 #endif
1088 
1089 	return 0;
1090 }
1091 
1092 static int br_port_slave_changelink(struct net_device *brdev,
1093 				    struct net_device *dev,
1094 				    struct nlattr *tb[],
1095 				    struct nlattr *data[],
1096 				    struct netlink_ext_ack *extack)
1097 {
1098 	struct net_bridge *br = netdev_priv(brdev);
1099 	int ret;
1100 
1101 	if (!data)
1102 		return 0;
1103 
1104 	spin_lock_bh(&br->lock);
1105 	ret = br_setport(br_port_get_rtnl(dev), data);
1106 	spin_unlock_bh(&br->lock);
1107 
1108 	return ret;
1109 }
1110 
1111 static int br_port_fill_slave_info(struct sk_buff *skb,
1112 				   const struct net_device *brdev,
1113 				   const struct net_device *dev)
1114 {
1115 	return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1116 }
1117 
1118 static size_t br_port_get_slave_size(const struct net_device *brdev,
1119 				     const struct net_device *dev)
1120 {
1121 	return br_port_info_size();
1122 }
1123 
1124 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1125 	[IFLA_BR_FORWARD_DELAY]	= { .type = NLA_U32 },
1126 	[IFLA_BR_HELLO_TIME]	= { .type = NLA_U32 },
1127 	[IFLA_BR_MAX_AGE]	= { .type = NLA_U32 },
1128 	[IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1129 	[IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1130 	[IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1131 	[IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1132 	[IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1133 	[IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1134 	[IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1135 				 .len  = ETH_ALEN },
1136 	[IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1137 	[IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1138 	[IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1139 	[IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1140 	[IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1141 	[IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1142 	[IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1143 	[IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1144 	[IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1145 	[IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1146 	[IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1147 	[IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1148 	[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1149 	[IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1150 	[IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1151 	[IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1152 	[IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1153 	[IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1154 	[IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1155 	[IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1156 	[IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1157 	[IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1158 	[IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1159 	[IFLA_BR_MULTI_BOOLOPT] =
1160 		NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1161 };
1162 
1163 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1164 			 struct nlattr *data[],
1165 			 struct netlink_ext_ack *extack)
1166 {
1167 	struct net_bridge *br = netdev_priv(brdev);
1168 	int err;
1169 
1170 	if (!data)
1171 		return 0;
1172 
1173 	if (data[IFLA_BR_FORWARD_DELAY]) {
1174 		err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1175 		if (err)
1176 			return err;
1177 	}
1178 
1179 	if (data[IFLA_BR_HELLO_TIME]) {
1180 		err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1181 		if (err)
1182 			return err;
1183 	}
1184 
1185 	if (data[IFLA_BR_MAX_AGE]) {
1186 		err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1187 		if (err)
1188 			return err;
1189 	}
1190 
1191 	if (data[IFLA_BR_AGEING_TIME]) {
1192 		err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1193 		if (err)
1194 			return err;
1195 	}
1196 
1197 	if (data[IFLA_BR_STP_STATE]) {
1198 		u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1199 
1200 		err = br_stp_set_enabled(br, stp_enabled, extack);
1201 		if (err)
1202 			return err;
1203 	}
1204 
1205 	if (data[IFLA_BR_PRIORITY]) {
1206 		u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1207 
1208 		br_stp_set_bridge_priority(br, priority);
1209 	}
1210 
1211 	if (data[IFLA_BR_VLAN_FILTERING]) {
1212 		u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1213 
1214 		err = __br_vlan_filter_toggle(br, vlan_filter);
1215 		if (err)
1216 			return err;
1217 	}
1218 
1219 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1220 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
1221 		__be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1222 
1223 		err = __br_vlan_set_proto(br, vlan_proto);
1224 		if (err)
1225 			return err;
1226 	}
1227 
1228 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1229 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1230 
1231 		err = __br_vlan_set_default_pvid(br, defpvid, extack);
1232 		if (err)
1233 			return err;
1234 	}
1235 
1236 	if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1237 		__u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1238 
1239 		err = br_vlan_set_stats(br, vlan_stats);
1240 		if (err)
1241 			return err;
1242 	}
1243 
1244 	if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1245 		__u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1246 
1247 		err = br_vlan_set_stats_per_port(br, per_port);
1248 		if (err)
1249 			return err;
1250 	}
1251 #endif
1252 
1253 	if (data[IFLA_BR_GROUP_FWD_MASK]) {
1254 		u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1255 
1256 		if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1257 			return -EINVAL;
1258 		br->group_fwd_mask = fwd_mask;
1259 	}
1260 
1261 	if (data[IFLA_BR_GROUP_ADDR]) {
1262 		u8 new_addr[ETH_ALEN];
1263 
1264 		if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1265 			return -EINVAL;
1266 		memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1267 		if (!is_link_local_ether_addr(new_addr))
1268 			return -EINVAL;
1269 		if (new_addr[5] == 1 ||		/* 802.3x Pause address */
1270 		    new_addr[5] == 2 ||		/* 802.3ad Slow protocols */
1271 		    new_addr[5] == 3)		/* 802.1X PAE address */
1272 			return -EINVAL;
1273 		spin_lock_bh(&br->lock);
1274 		memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1275 		spin_unlock_bh(&br->lock);
1276 		br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1277 		br_recalculate_fwd_mask(br);
1278 	}
1279 
1280 	if (data[IFLA_BR_FDB_FLUSH])
1281 		br_fdb_flush(br);
1282 
1283 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1284 	if (data[IFLA_BR_MCAST_ROUTER]) {
1285 		u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1286 
1287 		err = br_multicast_set_router(br, multicast_router);
1288 		if (err)
1289 			return err;
1290 	}
1291 
1292 	if (data[IFLA_BR_MCAST_SNOOPING]) {
1293 		u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1294 
1295 		br_multicast_toggle(br, mcast_snooping);
1296 	}
1297 
1298 	if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1299 		u8 val;
1300 
1301 		val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1302 		br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1303 	}
1304 
1305 	if (data[IFLA_BR_MCAST_QUERIER]) {
1306 		u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1307 
1308 		err = br_multicast_set_querier(br, mcast_querier);
1309 		if (err)
1310 			return err;
1311 	}
1312 
1313 	if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1314 		br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1315 			RHT_ELASTICITY);
1316 
1317 	if (data[IFLA_BR_MCAST_HASH_MAX])
1318 		br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1319 
1320 	if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1321 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1322 
1323 		br->multicast_last_member_count = val;
1324 	}
1325 
1326 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1327 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1328 
1329 		br->multicast_startup_query_count = val;
1330 	}
1331 
1332 	if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1333 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1334 
1335 		br->multicast_last_member_interval = clock_t_to_jiffies(val);
1336 	}
1337 
1338 	if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1339 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1340 
1341 		br->multicast_membership_interval = clock_t_to_jiffies(val);
1342 	}
1343 
1344 	if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1345 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1346 
1347 		br->multicast_querier_interval = clock_t_to_jiffies(val);
1348 	}
1349 
1350 	if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1351 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1352 
1353 		br->multicast_query_interval = clock_t_to_jiffies(val);
1354 	}
1355 
1356 	if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1357 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1358 
1359 		br->multicast_query_response_interval = clock_t_to_jiffies(val);
1360 	}
1361 
1362 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1363 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1364 
1365 		br->multicast_startup_query_interval = clock_t_to_jiffies(val);
1366 	}
1367 
1368 	if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1369 		__u8 mcast_stats;
1370 
1371 		mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1372 		br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1373 	}
1374 
1375 	if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1376 		__u8 igmp_version;
1377 
1378 		igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1379 		err = br_multicast_set_igmp_version(br, igmp_version);
1380 		if (err)
1381 			return err;
1382 	}
1383 
1384 #if IS_ENABLED(CONFIG_IPV6)
1385 	if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1386 		__u8 mld_version;
1387 
1388 		mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1389 		err = br_multicast_set_mld_version(br, mld_version);
1390 		if (err)
1391 			return err;
1392 	}
1393 #endif
1394 #endif
1395 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1396 	if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1397 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1398 
1399 		br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1400 	}
1401 
1402 	if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1403 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1404 
1405 		br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1406 	}
1407 
1408 	if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1409 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1410 
1411 		br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1412 	}
1413 #endif
1414 
1415 	if (data[IFLA_BR_MULTI_BOOLOPT]) {
1416 		struct br_boolopt_multi *bm;
1417 
1418 		bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1419 		err = br_boolopt_multi_toggle(br, bm, extack);
1420 		if (err)
1421 			return err;
1422 	}
1423 
1424 	return 0;
1425 }
1426 
1427 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1428 			  struct nlattr *tb[], struct nlattr *data[],
1429 			  struct netlink_ext_ack *extack)
1430 {
1431 	struct net_bridge *br = netdev_priv(dev);
1432 	int err;
1433 
1434 	err = register_netdevice(dev);
1435 	if (err)
1436 		return err;
1437 
1438 	if (tb[IFLA_ADDRESS]) {
1439 		spin_lock_bh(&br->lock);
1440 		br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1441 		spin_unlock_bh(&br->lock);
1442 	}
1443 
1444 	err = br_changelink(dev, tb, data, extack);
1445 	if (err)
1446 		br_dev_delete(dev, NULL);
1447 
1448 	return err;
1449 }
1450 
1451 static size_t br_get_size(const struct net_device *brdev)
1452 {
1453 	return nla_total_size(sizeof(u32)) +	/* IFLA_BR_FORWARD_DELAY  */
1454 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_HELLO_TIME */
1455 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_MAX_AGE */
1456 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1457 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1458 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1459 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1460 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1461 	       nla_total_size(sizeof(__be16)) +	/* IFLA_BR_VLAN_PROTOCOL */
1462 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1463 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1464 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_VLAN_STATS_PER_PORT */
1465 #endif
1466 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1467 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1468 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1469 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1470 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1471 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1472 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1473 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1474 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1475 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1476 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1477 	       nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1478 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1479 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1480 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1481 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1482 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1483 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1484 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1485 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1486 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1487 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1488 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1489 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1490 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1491 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1492 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1493 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1494 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_IGMP_VERSION */
1495 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_MLD_VERSION */
1496 #endif
1497 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1498 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1499 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1500 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1501 #endif
1502 	       nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1503 	       0;
1504 }
1505 
1506 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1507 {
1508 	struct net_bridge *br = netdev_priv(brdev);
1509 	u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1510 	u32 hello_time = jiffies_to_clock_t(br->hello_time);
1511 	u32 age_time = jiffies_to_clock_t(br->max_age);
1512 	u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1513 	u32 stp_enabled = br->stp_enabled;
1514 	u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1515 	u8 vlan_enabled = br_vlan_enabled(br->dev);
1516 	struct br_boolopt_multi bm;
1517 	u64 clockval;
1518 
1519 	clockval = br_timer_value(&br->hello_timer);
1520 	if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1521 		return -EMSGSIZE;
1522 	clockval = br_timer_value(&br->tcn_timer);
1523 	if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1524 		return -EMSGSIZE;
1525 	clockval = br_timer_value(&br->topology_change_timer);
1526 	if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1527 			      IFLA_BR_PAD))
1528 		return -EMSGSIZE;
1529 	clockval = br_timer_value(&br->gc_work.timer);
1530 	if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1531 		return -EMSGSIZE;
1532 
1533 	br_boolopt_multi_get(br, &bm);
1534 	if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1535 	    nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1536 	    nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1537 	    nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1538 	    nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1539 	    nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1540 	    nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1541 	    nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1542 	    nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1543 		    &br->bridge_id) ||
1544 	    nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1545 		    &br->designated_root) ||
1546 	    nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1547 	    nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1548 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1549 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1550 		       br->topology_change_detected) ||
1551 	    nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1552 	    nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1553 		return -EMSGSIZE;
1554 
1555 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1556 	if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1557 	    nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1558 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1559 		       br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1560 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1561 		       br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1562 		return -EMSGSIZE;
1563 #endif
1564 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1565 	if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, br->multicast_router) ||
1566 	    nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1567 		       br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1568 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1569 		       br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1570 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1571 		       br_opt_get(br, BROPT_MULTICAST_QUERIER)) ||
1572 	    nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1573 		       br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1574 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1575 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1576 	    nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1577 			br->multicast_last_member_count) ||
1578 	    nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1579 			br->multicast_startup_query_count) ||
1580 	    nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1581 		       br->multicast_igmp_version))
1582 		return -EMSGSIZE;
1583 #if IS_ENABLED(CONFIG_IPV6)
1584 	if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1585 		       br->multicast_mld_version))
1586 		return -EMSGSIZE;
1587 #endif
1588 	clockval = jiffies_to_clock_t(br->multicast_last_member_interval);
1589 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1590 			      IFLA_BR_PAD))
1591 		return -EMSGSIZE;
1592 	clockval = jiffies_to_clock_t(br->multicast_membership_interval);
1593 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1594 			      IFLA_BR_PAD))
1595 		return -EMSGSIZE;
1596 	clockval = jiffies_to_clock_t(br->multicast_querier_interval);
1597 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1598 			      IFLA_BR_PAD))
1599 		return -EMSGSIZE;
1600 	clockval = jiffies_to_clock_t(br->multicast_query_interval);
1601 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1602 			      IFLA_BR_PAD))
1603 		return -EMSGSIZE;
1604 	clockval = jiffies_to_clock_t(br->multicast_query_response_interval);
1605 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1606 			      IFLA_BR_PAD))
1607 		return -EMSGSIZE;
1608 	clockval = jiffies_to_clock_t(br->multicast_startup_query_interval);
1609 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1610 			      IFLA_BR_PAD))
1611 		return -EMSGSIZE;
1612 #endif
1613 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1614 	if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1615 		       br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1616 	    nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1617 		       br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1618 	    nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1619 		       br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1620 		return -EMSGSIZE;
1621 #endif
1622 
1623 	return 0;
1624 }
1625 
1626 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1627 {
1628 	struct net_bridge_port *p = NULL;
1629 	struct net_bridge_vlan_group *vg;
1630 	struct net_bridge_vlan *v;
1631 	struct net_bridge *br;
1632 	int numvls = 0;
1633 
1634 	switch (attr) {
1635 	case IFLA_STATS_LINK_XSTATS:
1636 		br = netdev_priv(dev);
1637 		vg = br_vlan_group(br);
1638 		break;
1639 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1640 		p = br_port_get_rtnl(dev);
1641 		if (!p)
1642 			return 0;
1643 		br = p->br;
1644 		vg = nbp_vlan_group(p);
1645 		break;
1646 	default:
1647 		return 0;
1648 	}
1649 
1650 	if (vg) {
1651 		/* we need to count all, even placeholder entries */
1652 		list_for_each_entry(v, &vg->vlan_list, vlist)
1653 			numvls++;
1654 	}
1655 
1656 	return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1657 	       nla_total_size(sizeof(struct br_mcast_stats)) +
1658 	       nla_total_size(0);
1659 }
1660 
1661 static int br_fill_linkxstats(struct sk_buff *skb,
1662 			      const struct net_device *dev,
1663 			      int *prividx, int attr)
1664 {
1665 	struct nlattr *nla __maybe_unused;
1666 	struct net_bridge_port *p = NULL;
1667 	struct net_bridge_vlan_group *vg;
1668 	struct net_bridge_vlan *v;
1669 	struct net_bridge *br;
1670 	struct nlattr *nest;
1671 	int vl_idx = 0;
1672 
1673 	switch (attr) {
1674 	case IFLA_STATS_LINK_XSTATS:
1675 		br = netdev_priv(dev);
1676 		vg = br_vlan_group(br);
1677 		break;
1678 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1679 		p = br_port_get_rtnl(dev);
1680 		if (!p)
1681 			return 0;
1682 		br = p->br;
1683 		vg = nbp_vlan_group(p);
1684 		break;
1685 	default:
1686 		return -EINVAL;
1687 	}
1688 
1689 	nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1690 	if (!nest)
1691 		return -EMSGSIZE;
1692 
1693 	if (vg) {
1694 		u16 pvid;
1695 
1696 		pvid = br_get_pvid(vg);
1697 		list_for_each_entry(v, &vg->vlan_list, vlist) {
1698 			struct bridge_vlan_xstats vxi;
1699 			struct pcpu_sw_netstats stats;
1700 
1701 			if (++vl_idx < *prividx)
1702 				continue;
1703 			memset(&vxi, 0, sizeof(vxi));
1704 			vxi.vid = v->vid;
1705 			vxi.flags = v->flags;
1706 			if (v->vid == pvid)
1707 				vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1708 			br_vlan_get_stats(v, &stats);
1709 			vxi.rx_bytes = stats.rx_bytes;
1710 			vxi.rx_packets = stats.rx_packets;
1711 			vxi.tx_bytes = stats.tx_bytes;
1712 			vxi.tx_packets = stats.tx_packets;
1713 
1714 			if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1715 				goto nla_put_failure;
1716 		}
1717 	}
1718 
1719 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1720 	if (++vl_idx >= *prividx) {
1721 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1722 					sizeof(struct br_mcast_stats),
1723 					BRIDGE_XSTATS_PAD);
1724 		if (!nla)
1725 			goto nla_put_failure;
1726 		br_multicast_get_stats(br, p, nla_data(nla));
1727 	}
1728 #endif
1729 
1730 	if (p) {
1731 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1732 					sizeof(p->stp_xstats),
1733 					BRIDGE_XSTATS_PAD);
1734 		if (!nla)
1735 			goto nla_put_failure;
1736 
1737 		spin_lock_bh(&br->lock);
1738 		memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1739 		spin_unlock_bh(&br->lock);
1740 	}
1741 
1742 	nla_nest_end(skb, nest);
1743 	*prividx = 0;
1744 
1745 	return 0;
1746 
1747 nla_put_failure:
1748 	nla_nest_end(skb, nest);
1749 	*prividx = vl_idx;
1750 
1751 	return -EMSGSIZE;
1752 }
1753 
1754 static struct rtnl_af_ops br_af_ops __read_mostly = {
1755 	.family			= AF_BRIDGE,
1756 	.get_link_af_size	= br_get_link_af_size_filtered,
1757 };
1758 
1759 struct rtnl_link_ops br_link_ops __read_mostly = {
1760 	.kind			= "bridge",
1761 	.priv_size		= sizeof(struct net_bridge),
1762 	.setup			= br_dev_setup,
1763 	.maxtype		= IFLA_BR_MAX,
1764 	.policy			= br_policy,
1765 	.validate		= br_validate,
1766 	.newlink		= br_dev_newlink,
1767 	.changelink		= br_changelink,
1768 	.dellink		= br_dev_delete,
1769 	.get_size		= br_get_size,
1770 	.fill_info		= br_fill_info,
1771 	.fill_linkxstats	= br_fill_linkxstats,
1772 	.get_linkxstats_size	= br_get_linkxstats_size,
1773 
1774 	.slave_maxtype		= IFLA_BRPORT_MAX,
1775 	.slave_policy		= br_port_policy,
1776 	.slave_changelink	= br_port_slave_changelink,
1777 	.get_slave_size		= br_port_get_slave_size,
1778 	.fill_slave_info	= br_port_fill_slave_info,
1779 };
1780 
1781 int __init br_netlink_init(void)
1782 {
1783 	int err;
1784 
1785 	br_mdb_init();
1786 	br_vlan_rtnl_init();
1787 	rtnl_af_register(&br_af_ops);
1788 
1789 	err = rtnl_link_register(&br_link_ops);
1790 	if (err)
1791 		goto out_af;
1792 
1793 	return 0;
1794 
1795 out_af:
1796 	rtnl_af_unregister(&br_af_ops);
1797 	br_mdb_uninit();
1798 	return err;
1799 }
1800 
1801 void br_netlink_fini(void)
1802 {
1803 	br_mdb_uninit();
1804 	br_vlan_rtnl_uninit();
1805 	rtnl_af_unregister(&br_af_ops);
1806 	rtnl_link_unregister(&br_link_ops);
1807 }
1808