xref: /openbmc/linux/net/bridge/br_netlink.c (revision 8938c48f)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *	Bridge netlink control interface
4  *
5  *	Authors:
6  *	Stephen Hemminger		<shemminger@osdl.org>
7  */
8 
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
14 #include <net/sock.h>
15 #include <uapi/linux/if_bridge.h>
16 
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_cfm.h"
20 #include "br_private_tunnel.h"
21 #include "br_private_mcast_eht.h"
22 
23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
24 				u32 filter_mask)
25 {
26 	struct net_bridge_vlan *v;
27 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
28 	u16 flags, pvid;
29 	int num_vlans = 0;
30 
31 	if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
32 		return 0;
33 
34 	pvid = br_get_pvid(vg);
35 	/* Count number of vlan infos */
36 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
37 		flags = 0;
38 		/* only a context, bridge vlan not activated */
39 		if (!br_vlan_should_use(v))
40 			continue;
41 		if (v->vid == pvid)
42 			flags |= BRIDGE_VLAN_INFO_PVID;
43 
44 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
45 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
46 
47 		if (vid_range_start == 0) {
48 			goto initvars;
49 		} else if ((v->vid - vid_range_end) == 1 &&
50 			flags == vid_range_flags) {
51 			vid_range_end = v->vid;
52 			continue;
53 		} else {
54 			if ((vid_range_end - vid_range_start) > 0)
55 				num_vlans += 2;
56 			else
57 				num_vlans += 1;
58 		}
59 initvars:
60 		vid_range_start = v->vid;
61 		vid_range_end = v->vid;
62 		vid_range_flags = flags;
63 	}
64 
65 	if (vid_range_start != 0) {
66 		if ((vid_range_end - vid_range_start) > 0)
67 			num_vlans += 2;
68 		else
69 			num_vlans += 1;
70 	}
71 
72 	return num_vlans;
73 }
74 
75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
76 				 u32 filter_mask)
77 {
78 	int num_vlans;
79 
80 	if (!vg)
81 		return 0;
82 
83 	if (filter_mask & RTEXT_FILTER_BRVLAN)
84 		return vg->num_vlans;
85 
86 	rcu_read_lock();
87 	num_vlans = __get_num_vlan_infos(vg, filter_mask);
88 	rcu_read_unlock();
89 
90 	return num_vlans;
91 }
92 
93 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
94 					   u32 filter_mask)
95 {
96 	struct net_bridge_vlan_group *vg = NULL;
97 	struct net_bridge_port *p = NULL;
98 	struct net_bridge *br = NULL;
99 	u32 num_cfm_peer_mep_infos;
100 	u32 num_cfm_mep_infos;
101 	size_t vinfo_sz = 0;
102 	int num_vlan_infos;
103 
104 	rcu_read_lock();
105 	if (netif_is_bridge_port(dev)) {
106 		p = br_port_get_rcu(dev);
107 		vg = nbp_vlan_group_rcu(p);
108 	} else if (dev->priv_flags & IFF_EBRIDGE) {
109 		br = netdev_priv(dev);
110 		vg = br_vlan_group_rcu(br);
111 	}
112 	num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
113 	rcu_read_unlock();
114 
115 	if (p && (p->flags & BR_VLAN_TUNNEL))
116 		vinfo_sz += br_get_vlan_tunnel_info_size(vg);
117 
118 	/* Each VLAN is returned in bridge_vlan_info along with flags */
119 	vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
120 
121 	if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
122 		return vinfo_sz;
123 
124 	if (!br)
125 		return vinfo_sz;
126 
127 	/* CFM status info must be added */
128 	br_cfm_mep_count(br, &num_cfm_mep_infos);
129 	br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
130 
131 	vinfo_sz += nla_total_size(0);	/* IFLA_BRIDGE_CFM */
132 	/* For each status struct the MEP instance (u32) is added */
133 	/* MEP instance (u32) + br_cfm_mep_status */
134 	vinfo_sz += num_cfm_mep_infos *
135 		     /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
136 		    (nla_total_size(sizeof(u32))
137 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
138 		     + nla_total_size(sizeof(u32))
139 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
140 		     + nla_total_size(sizeof(u32))
141 		     /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
142 		     + nla_total_size(sizeof(u32)));
143 	/* MEP instance (u32) + br_cfm_cc_peer_status */
144 	vinfo_sz += num_cfm_peer_mep_infos *
145 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
146 		    (nla_total_size(sizeof(u32))
147 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
148 		     + nla_total_size(sizeof(u32))
149 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
150 		     + nla_total_size(sizeof(u32))
151 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
152 		     + nla_total_size(sizeof(u32))
153 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
154 		     + nla_total_size(sizeof(u8))
155 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
156 		     + nla_total_size(sizeof(u8))
157 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
158 		     + nla_total_size(sizeof(u32))
159 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
160 		     + nla_total_size(sizeof(u32))
161 		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
162 		     + nla_total_size(sizeof(u32)));
163 
164 	return vinfo_sz;
165 }
166 
167 static inline size_t br_port_info_size(void)
168 {
169 	return nla_total_size(1)	/* IFLA_BRPORT_STATE  */
170 		+ nla_total_size(2)	/* IFLA_BRPORT_PRIORITY */
171 		+ nla_total_size(4)	/* IFLA_BRPORT_COST */
172 		+ nla_total_size(1)	/* IFLA_BRPORT_MODE */
173 		+ nla_total_size(1)	/* IFLA_BRPORT_GUARD */
174 		+ nla_total_size(1)	/* IFLA_BRPORT_PROTECT */
175 		+ nla_total_size(1)	/* IFLA_BRPORT_FAST_LEAVE */
176 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_TO_UCAST */
177 		+ nla_total_size(1)	/* IFLA_BRPORT_LEARNING */
178 		+ nla_total_size(1)	/* IFLA_BRPORT_UNICAST_FLOOD */
179 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_FLOOD */
180 		+ nla_total_size(1)	/* IFLA_BRPORT_BCAST_FLOOD */
181 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP */
182 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP_WIFI */
183 		+ nla_total_size(1)	/* IFLA_BRPORT_VLAN_TUNNEL */
184 		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_SUPPRESS */
185 		+ nla_total_size(1)	/* IFLA_BRPORT_ISOLATED */
186 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_ROOT_ID */
187 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_BRIDGE_ID */
188 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_PORT */
189 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_COST */
190 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_ID */
191 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_NO */
192 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
193 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_CONFIG_PENDING */
194 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
195 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
196 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
197 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
198 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MULTICAST_ROUTER */
199 #endif
200 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_GROUP_FWD_MASK */
201 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_RING_OPEN */
202 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_IN_OPEN */
203 		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
204 		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
205 		+ 0;
206 }
207 
208 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
209 {
210 	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
211 		+ nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
212 		+ nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
213 		+ nla_total_size(4) /* IFLA_MASTER */
214 		+ nla_total_size(4) /* IFLA_MTU */
215 		+ nla_total_size(4) /* IFLA_LINK */
216 		+ nla_total_size(1) /* IFLA_OPERSTATE */
217 		+ nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
218 		+ nla_total_size(br_get_link_af_size_filtered(dev,
219 				 filter_mask)) /* IFLA_AF_SPEC */
220 		+ nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
221 }
222 
223 static int br_port_fill_attrs(struct sk_buff *skb,
224 			      const struct net_bridge_port *p)
225 {
226 	u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
227 	struct net_bridge_port *backup_p;
228 	u64 timerval;
229 
230 	if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
231 	    nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
232 	    nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
233 	    nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
234 	    nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
235 	    nla_put_u8(skb, IFLA_BRPORT_PROTECT,
236 		       !!(p->flags & BR_ROOT_BLOCK)) ||
237 	    nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
238 		       !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
239 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
240 		       !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
241 	    nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
242 	    nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
243 		       !!(p->flags & BR_FLOOD)) ||
244 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
245 		       !!(p->flags & BR_MCAST_FLOOD)) ||
246 	    nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
247 		       !!(p->flags & BR_BCAST_FLOOD)) ||
248 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
249 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
250 		       !!(p->flags & BR_PROXYARP_WIFI)) ||
251 	    nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
252 		    &p->designated_root) ||
253 	    nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
254 		    &p->designated_bridge) ||
255 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
256 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
257 	    nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
258 	    nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
259 	    nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
260 		       p->topology_change_ack) ||
261 	    nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
262 	    nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
263 							BR_VLAN_TUNNEL)) ||
264 	    nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
265 	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
266 		       !!(p->flags & BR_NEIGH_SUPPRESS)) ||
267 	    nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
268 							  BR_MRP_LOST_CONT)) ||
269 	    nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
270 		       !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
271 	    nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)))
272 		return -EMSGSIZE;
273 
274 	timerval = br_timer_value(&p->message_age_timer);
275 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
276 			      IFLA_BRPORT_PAD))
277 		return -EMSGSIZE;
278 	timerval = br_timer_value(&p->forward_delay_timer);
279 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
280 			      IFLA_BRPORT_PAD))
281 		return -EMSGSIZE;
282 	timerval = br_timer_value(&p->hold_timer);
283 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
284 			      IFLA_BRPORT_PAD))
285 		return -EMSGSIZE;
286 
287 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
288 	if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
289 		       p->multicast_router) ||
290 	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
291 			p->multicast_eht_hosts_limit) ||
292 	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
293 			p->multicast_eht_hosts_cnt))
294 		return -EMSGSIZE;
295 #endif
296 
297 	/* we might be called only with br->lock */
298 	rcu_read_lock();
299 	backup_p = rcu_dereference(p->backup_port);
300 	if (backup_p)
301 		nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
302 			    backup_p->dev->ifindex);
303 	rcu_read_unlock();
304 
305 	return 0;
306 }
307 
308 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
309 				    u16 vid_end, u16 flags)
310 {
311 	struct  bridge_vlan_info vinfo;
312 
313 	if ((vid_end - vid_start) > 0) {
314 		/* add range to skb */
315 		vinfo.vid = vid_start;
316 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
317 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
318 			    sizeof(vinfo), &vinfo))
319 			goto nla_put_failure;
320 
321 		vinfo.vid = vid_end;
322 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
323 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
324 			    sizeof(vinfo), &vinfo))
325 			goto nla_put_failure;
326 	} else {
327 		vinfo.vid = vid_start;
328 		vinfo.flags = flags;
329 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
330 			    sizeof(vinfo), &vinfo))
331 			goto nla_put_failure;
332 	}
333 
334 	return 0;
335 
336 nla_put_failure:
337 	return -EMSGSIZE;
338 }
339 
340 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
341 					 struct net_bridge_vlan_group *vg)
342 {
343 	struct net_bridge_vlan *v;
344 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
345 	u16 flags, pvid;
346 	int err = 0;
347 
348 	/* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
349 	 * and mark vlan info with begin and end flags
350 	 * if vlaninfo represents a range
351 	 */
352 	pvid = br_get_pvid(vg);
353 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
354 		flags = 0;
355 		if (!br_vlan_should_use(v))
356 			continue;
357 		if (v->vid == pvid)
358 			flags |= BRIDGE_VLAN_INFO_PVID;
359 
360 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
361 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
362 
363 		if (vid_range_start == 0) {
364 			goto initvars;
365 		} else if ((v->vid - vid_range_end) == 1 &&
366 			flags == vid_range_flags) {
367 			vid_range_end = v->vid;
368 			continue;
369 		} else {
370 			err = br_fill_ifvlaninfo_range(skb, vid_range_start,
371 						       vid_range_end,
372 						       vid_range_flags);
373 			if (err)
374 				return err;
375 		}
376 
377 initvars:
378 		vid_range_start = v->vid;
379 		vid_range_end = v->vid;
380 		vid_range_flags = flags;
381 	}
382 
383 	if (vid_range_start != 0) {
384 		/* Call it once more to send any left over vlans */
385 		err = br_fill_ifvlaninfo_range(skb, vid_range_start,
386 					       vid_range_end,
387 					       vid_range_flags);
388 		if (err)
389 			return err;
390 	}
391 
392 	return 0;
393 }
394 
395 static int br_fill_ifvlaninfo(struct sk_buff *skb,
396 			      struct net_bridge_vlan_group *vg)
397 {
398 	struct bridge_vlan_info vinfo;
399 	struct net_bridge_vlan *v;
400 	u16 pvid;
401 
402 	pvid = br_get_pvid(vg);
403 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
404 		if (!br_vlan_should_use(v))
405 			continue;
406 
407 		vinfo.vid = v->vid;
408 		vinfo.flags = 0;
409 		if (v->vid == pvid)
410 			vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
411 
412 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
413 			vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
414 
415 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
416 			    sizeof(vinfo), &vinfo))
417 			goto nla_put_failure;
418 	}
419 
420 	return 0;
421 
422 nla_put_failure:
423 	return -EMSGSIZE;
424 }
425 
426 /*
427  * Create one netlink message for one interface
428  * Contains port and master info as well as carrier and bridge state.
429  */
430 static int br_fill_ifinfo(struct sk_buff *skb,
431 			  const struct net_bridge_port *port,
432 			  u32 pid, u32 seq, int event, unsigned int flags,
433 			  u32 filter_mask, const struct net_device *dev,
434 			  bool getlink)
435 {
436 	u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
437 	struct nlattr *af = NULL;
438 	struct net_bridge *br;
439 	struct ifinfomsg *hdr;
440 	struct nlmsghdr *nlh;
441 
442 	if (port)
443 		br = port->br;
444 	else
445 		br = netdev_priv(dev);
446 
447 	br_debug(br, "br_fill_info event %d port %s master %s\n",
448 		     event, dev->name, br->dev->name);
449 
450 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
451 	if (nlh == NULL)
452 		return -EMSGSIZE;
453 
454 	hdr = nlmsg_data(nlh);
455 	hdr->ifi_family = AF_BRIDGE;
456 	hdr->__ifi_pad = 0;
457 	hdr->ifi_type = dev->type;
458 	hdr->ifi_index = dev->ifindex;
459 	hdr->ifi_flags = dev_get_flags(dev);
460 	hdr->ifi_change = 0;
461 
462 	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
463 	    nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
464 	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
465 	    nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
466 	    (dev->addr_len &&
467 	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
468 	    (dev->ifindex != dev_get_iflink(dev) &&
469 	     nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
470 		goto nla_put_failure;
471 
472 	if (event == RTM_NEWLINK && port) {
473 		struct nlattr *nest;
474 
475 		nest = nla_nest_start(skb, IFLA_PROTINFO);
476 		if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
477 			goto nla_put_failure;
478 		nla_nest_end(skb, nest);
479 	}
480 
481 	if (filter_mask & (RTEXT_FILTER_BRVLAN |
482 			   RTEXT_FILTER_BRVLAN_COMPRESSED |
483 			   RTEXT_FILTER_MRP |
484 			   RTEXT_FILTER_CFM_CONFIG |
485 			   RTEXT_FILTER_CFM_STATUS)) {
486 		af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
487 		if (!af)
488 			goto nla_put_failure;
489 	}
490 
491 	/* Check if  the VID information is requested */
492 	if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
493 	    (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
494 		struct net_bridge_vlan_group *vg;
495 		int err;
496 
497 		/* RCU needed because of the VLAN locking rules (rcu || rtnl) */
498 		rcu_read_lock();
499 		if (port)
500 			vg = nbp_vlan_group_rcu(port);
501 		else
502 			vg = br_vlan_group_rcu(br);
503 
504 		if (!vg || !vg->num_vlans) {
505 			rcu_read_unlock();
506 			goto done;
507 		}
508 		if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
509 			err = br_fill_ifvlaninfo_compressed(skb, vg);
510 		else
511 			err = br_fill_ifvlaninfo(skb, vg);
512 
513 		if (port && (port->flags & BR_VLAN_TUNNEL))
514 			err = br_fill_vlan_tunnel_info(skb, vg);
515 		rcu_read_unlock();
516 		if (err)
517 			goto nla_put_failure;
518 	}
519 
520 	if (filter_mask & RTEXT_FILTER_MRP) {
521 		int err;
522 
523 		if (!br_mrp_enabled(br) || port)
524 			goto done;
525 
526 		rcu_read_lock();
527 		err = br_mrp_fill_info(skb, br);
528 		rcu_read_unlock();
529 
530 		if (err)
531 			goto nla_put_failure;
532 	}
533 
534 	if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
535 		struct nlattr *cfm_nest = NULL;
536 		int err;
537 
538 		if (!br_cfm_created(br) || port)
539 			goto done;
540 
541 		cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
542 		if (!cfm_nest)
543 			goto nla_put_failure;
544 
545 		if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
546 			rcu_read_lock();
547 			err = br_cfm_config_fill_info(skb, br);
548 			rcu_read_unlock();
549 			if (err)
550 				goto nla_put_failure;
551 		}
552 
553 		if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
554 			rcu_read_lock();
555 			err = br_cfm_status_fill_info(skb, br, getlink);
556 			rcu_read_unlock();
557 			if (err)
558 				goto nla_put_failure;
559 		}
560 
561 		nla_nest_end(skb, cfm_nest);
562 	}
563 
564 done:
565 	if (af)
566 		nla_nest_end(skb, af);
567 	nlmsg_end(skb, nlh);
568 	return 0;
569 
570 nla_put_failure:
571 	nlmsg_cancel(skb, nlh);
572 	return -EMSGSIZE;
573 }
574 
575 void br_info_notify(int event, const struct net_bridge *br,
576 		    const struct net_bridge_port *port, u32 filter)
577 {
578 	struct net_device *dev;
579 	struct sk_buff *skb;
580 	int err = -ENOBUFS;
581 	struct net *net;
582 	u16 port_no = 0;
583 
584 	if (WARN_ON(!port && !br))
585 		return;
586 
587 	if (port) {
588 		dev = port->dev;
589 		br = port->br;
590 		port_no = port->port_no;
591 	} else {
592 		dev = br->dev;
593 	}
594 
595 	net = dev_net(dev);
596 	br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
597 
598 	skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
599 	if (skb == NULL)
600 		goto errout;
601 
602 	err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
603 	if (err < 0) {
604 		/* -EMSGSIZE implies BUG in br_nlmsg_size() */
605 		WARN_ON(err == -EMSGSIZE);
606 		kfree_skb(skb);
607 		goto errout;
608 	}
609 	rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
610 	return;
611 errout:
612 	rtnl_set_sk_err(net, RTNLGRP_LINK, err);
613 }
614 
615 /* Notify listeners of a change in bridge or port information */
616 void br_ifinfo_notify(int event, const struct net_bridge *br,
617 		      const struct net_bridge_port *port)
618 {
619 	u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
620 
621 	return br_info_notify(event, br, port, filter);
622 }
623 
624 /*
625  * Dump information about all ports, in response to GETLINK
626  */
627 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
628 	       struct net_device *dev, u32 filter_mask, int nlflags)
629 {
630 	struct net_bridge_port *port = br_port_get_rtnl(dev);
631 
632 	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
633 	    !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
634 	    !(filter_mask & RTEXT_FILTER_MRP) &&
635 	    !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
636 	    !(filter_mask & RTEXT_FILTER_CFM_STATUS))
637 		return 0;
638 
639 	return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
640 			      filter_mask, dev, true);
641 }
642 
643 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
644 			int cmd, struct bridge_vlan_info *vinfo, bool *changed,
645 			struct netlink_ext_ack *extack)
646 {
647 	bool curr_change;
648 	int err = 0;
649 
650 	switch (cmd) {
651 	case RTM_SETLINK:
652 		if (p) {
653 			/* if the MASTER flag is set this will act on the global
654 			 * per-VLAN entry as well
655 			 */
656 			err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
657 					   &curr_change, extack);
658 		} else {
659 			vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
660 			err = br_vlan_add(br, vinfo->vid, vinfo->flags,
661 					  &curr_change, extack);
662 		}
663 		if (curr_change)
664 			*changed = true;
665 		break;
666 
667 	case RTM_DELLINK:
668 		if (p) {
669 			if (!nbp_vlan_delete(p, vinfo->vid))
670 				*changed = true;
671 
672 			if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
673 			    !br_vlan_delete(p->br, vinfo->vid))
674 				*changed = true;
675 		} else if (!br_vlan_delete(br, vinfo->vid)) {
676 			*changed = true;
677 		}
678 		break;
679 	}
680 
681 	return err;
682 }
683 
684 int br_process_vlan_info(struct net_bridge *br,
685 			 struct net_bridge_port *p, int cmd,
686 			 struct bridge_vlan_info *vinfo_curr,
687 			 struct bridge_vlan_info **vinfo_last,
688 			 bool *changed,
689 			 struct netlink_ext_ack *extack)
690 {
691 	int err, rtm_cmd;
692 
693 	if (!br_vlan_valid_id(vinfo_curr->vid, extack))
694 		return -EINVAL;
695 
696 	/* needed for vlan-only NEWVLAN/DELVLAN notifications */
697 	rtm_cmd = br_afspec_cmd_to_rtm(cmd);
698 
699 	if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
700 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
701 			return -EINVAL;
702 		*vinfo_last = vinfo_curr;
703 		return 0;
704 	}
705 
706 	if (*vinfo_last) {
707 		struct bridge_vlan_info tmp_vinfo;
708 		int v, v_change_start = 0;
709 
710 		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
711 			return -EINVAL;
712 
713 		memcpy(&tmp_vinfo, *vinfo_last,
714 		       sizeof(struct bridge_vlan_info));
715 		for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
716 			bool curr_change = false;
717 
718 			tmp_vinfo.vid = v;
719 			err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
720 					   extack);
721 			if (err)
722 				break;
723 			if (curr_change) {
724 				*changed = curr_change;
725 				if (!v_change_start)
726 					v_change_start = v;
727 			} else {
728 				/* nothing to notify yet */
729 				if (!v_change_start)
730 					continue;
731 				br_vlan_notify(br, p, v_change_start,
732 					       v - 1, rtm_cmd);
733 				v_change_start = 0;
734 			}
735 			cond_resched();
736 		}
737 		/* v_change_start is set only if the last/whole range changed */
738 		if (v_change_start)
739 			br_vlan_notify(br, p, v_change_start,
740 				       v - 1, rtm_cmd);
741 
742 		*vinfo_last = NULL;
743 
744 		return err;
745 	}
746 
747 	err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
748 	if (*changed)
749 		br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
750 
751 	return err;
752 }
753 
754 static int br_afspec(struct net_bridge *br,
755 		     struct net_bridge_port *p,
756 		     struct nlattr *af_spec,
757 		     int cmd, bool *changed,
758 		     struct netlink_ext_ack *extack)
759 {
760 	struct bridge_vlan_info *vinfo_curr = NULL;
761 	struct bridge_vlan_info *vinfo_last = NULL;
762 	struct nlattr *attr;
763 	struct vtunnel_info tinfo_last = {};
764 	struct vtunnel_info tinfo_curr = {};
765 	int err = 0, rem;
766 
767 	nla_for_each_nested(attr, af_spec, rem) {
768 		err = 0;
769 		switch (nla_type(attr)) {
770 		case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
771 			if (!p || !(p->flags & BR_VLAN_TUNNEL))
772 				return -EINVAL;
773 			err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
774 			if (err)
775 				return err;
776 			err = br_process_vlan_tunnel_info(br, p, cmd,
777 							  &tinfo_curr,
778 							  &tinfo_last,
779 							  changed);
780 			if (err)
781 				return err;
782 			break;
783 		case IFLA_BRIDGE_VLAN_INFO:
784 			if (nla_len(attr) != sizeof(struct bridge_vlan_info))
785 				return -EINVAL;
786 			vinfo_curr = nla_data(attr);
787 			err = br_process_vlan_info(br, p, cmd, vinfo_curr,
788 						   &vinfo_last, changed,
789 						   extack);
790 			if (err)
791 				return err;
792 			break;
793 		case IFLA_BRIDGE_MRP:
794 			err = br_mrp_parse(br, p, attr, cmd, extack);
795 			if (err)
796 				return err;
797 			break;
798 		case IFLA_BRIDGE_CFM:
799 			err = br_cfm_parse(br, p, attr, cmd, extack);
800 			if (err)
801 				return err;
802 			break;
803 		}
804 	}
805 
806 	return err;
807 }
808 
809 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
810 	[IFLA_BRPORT_STATE]	= { .type = NLA_U8 },
811 	[IFLA_BRPORT_COST]	= { .type = NLA_U32 },
812 	[IFLA_BRPORT_PRIORITY]	= { .type = NLA_U16 },
813 	[IFLA_BRPORT_MODE]	= { .type = NLA_U8 },
814 	[IFLA_BRPORT_GUARD]	= { .type = NLA_U8 },
815 	[IFLA_BRPORT_PROTECT]	= { .type = NLA_U8 },
816 	[IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
817 	[IFLA_BRPORT_LEARNING]	= { .type = NLA_U8 },
818 	[IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
819 	[IFLA_BRPORT_PROXYARP]	= { .type = NLA_U8 },
820 	[IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
821 	[IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
822 	[IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
823 	[IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
824 	[IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
825 	[IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
826 	[IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
827 	[IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
828 	[IFLA_BRPORT_ISOLATED]	= { .type = NLA_U8 },
829 	[IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
830 	[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
831 };
832 
833 /* Change the state of the port and notify spanning tree */
834 static int br_set_port_state(struct net_bridge_port *p, u8 state)
835 {
836 	if (state > BR_STATE_BLOCKING)
837 		return -EINVAL;
838 
839 	/* if kernel STP is running, don't allow changes */
840 	if (p->br->stp_enabled == BR_KERNEL_STP)
841 		return -EBUSY;
842 
843 	/* if device is not up, change is not allowed
844 	 * if link is not present, only allowable state is disabled
845 	 */
846 	if (!netif_running(p->dev) ||
847 	    (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
848 		return -ENETDOWN;
849 
850 	br_set_state(p, state);
851 	br_port_state_selection(p->br);
852 	return 0;
853 }
854 
855 /* Set/clear or port flags based on attribute */
856 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
857 			     int attrtype, unsigned long mask)
858 {
859 	if (!tb[attrtype])
860 		return;
861 
862 	if (nla_get_u8(tb[attrtype]))
863 		p->flags |= mask;
864 	else
865 		p->flags &= ~mask;
866 }
867 
868 /* Process bridge protocol info on port */
869 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
870 		      struct netlink_ext_ack *extack)
871 {
872 	unsigned long old_flags, changed_mask;
873 	bool br_vlan_tunnel_old;
874 	int err;
875 
876 	old_flags = p->flags;
877 	br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
878 
879 	br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
880 	br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
881 	br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
882 			 BR_MULTICAST_FAST_LEAVE);
883 	br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
884 	br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
885 	br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
886 	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
887 	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
888 			 BR_MULTICAST_TO_UNICAST);
889 	br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
890 	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
891 	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
892 	br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
893 	br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
894 	br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
895 
896 	changed_mask = old_flags ^ p->flags;
897 
898 	err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack);
899 	if (err) {
900 		p->flags = old_flags;
901 		return err;
902 	}
903 
904 	if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
905 		nbp_vlan_tunnel_info_flush(p);
906 
907 	br_port_flags_change(p, changed_mask);
908 
909 	if (tb[IFLA_BRPORT_COST]) {
910 		err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
911 		if (err)
912 			return err;
913 	}
914 
915 	if (tb[IFLA_BRPORT_PRIORITY]) {
916 		err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
917 		if (err)
918 			return err;
919 	}
920 
921 	if (tb[IFLA_BRPORT_STATE]) {
922 		err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
923 		if (err)
924 			return err;
925 	}
926 
927 	if (tb[IFLA_BRPORT_FLUSH])
928 		br_fdb_delete_by_port(p->br, p, 0, 0);
929 
930 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
931 	if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
932 		u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
933 
934 		err = br_multicast_set_port_router(p, mcast_router);
935 		if (err)
936 			return err;
937 	}
938 
939 	if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
940 		u32 hlimit;
941 
942 		hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
943 		err = br_multicast_eht_set_hosts_limit(p, hlimit);
944 		if (err)
945 			return err;
946 	}
947 #endif
948 
949 	if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
950 		u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
951 
952 		if (fwd_mask & BR_GROUPFWD_MACPAUSE)
953 			return -EINVAL;
954 		p->group_fwd_mask = fwd_mask;
955 	}
956 
957 	if (tb[IFLA_BRPORT_BACKUP_PORT]) {
958 		struct net_device *backup_dev = NULL;
959 		u32 backup_ifindex;
960 
961 		backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
962 		if (backup_ifindex) {
963 			backup_dev = __dev_get_by_index(dev_net(p->dev),
964 							backup_ifindex);
965 			if (!backup_dev)
966 				return -ENOENT;
967 		}
968 
969 		err = nbp_backup_change(p, backup_dev);
970 		if (err)
971 			return err;
972 	}
973 
974 	return 0;
975 }
976 
977 /* Change state and parameters on port. */
978 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
979 	       struct netlink_ext_ack *extack)
980 {
981 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
982 	struct nlattr *tb[IFLA_BRPORT_MAX + 1];
983 	struct net_bridge_port *p;
984 	struct nlattr *protinfo;
985 	struct nlattr *afspec;
986 	bool changed = false;
987 	int err = 0;
988 
989 	protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
990 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
991 	if (!protinfo && !afspec)
992 		return 0;
993 
994 	p = br_port_get_rtnl(dev);
995 	/* We want to accept dev as bridge itself if the AF_SPEC
996 	 * is set to see if someone is setting vlan info on the bridge
997 	 */
998 	if (!p && !afspec)
999 		return -EINVAL;
1000 
1001 	if (p && protinfo) {
1002 		if (protinfo->nla_type & NLA_F_NESTED) {
1003 			err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1004 							  protinfo,
1005 							  br_port_policy,
1006 							  NULL);
1007 			if (err)
1008 				return err;
1009 
1010 			spin_lock_bh(&p->br->lock);
1011 			err = br_setport(p, tb, extack);
1012 			spin_unlock_bh(&p->br->lock);
1013 		} else {
1014 			/* Binary compatibility with old RSTP */
1015 			if (nla_len(protinfo) < sizeof(u8))
1016 				return -EINVAL;
1017 
1018 			spin_lock_bh(&p->br->lock);
1019 			err = br_set_port_state(p, nla_get_u8(protinfo));
1020 			spin_unlock_bh(&p->br->lock);
1021 		}
1022 		if (err)
1023 			goto out;
1024 		changed = true;
1025 	}
1026 
1027 	if (afspec)
1028 		err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1029 
1030 	if (changed)
1031 		br_ifinfo_notify(RTM_NEWLINK, br, p);
1032 out:
1033 	return err;
1034 }
1035 
1036 /* Delete port information */
1037 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1038 {
1039 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1040 	struct net_bridge_port *p;
1041 	struct nlattr *afspec;
1042 	bool changed = false;
1043 	int err = 0;
1044 
1045 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1046 	if (!afspec)
1047 		return 0;
1048 
1049 	p = br_port_get_rtnl(dev);
1050 	/* We want to accept dev as bridge itself as well */
1051 	if (!p && !(dev->priv_flags & IFF_EBRIDGE))
1052 		return -EINVAL;
1053 
1054 	err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1055 	if (changed)
1056 		/* Send RTM_NEWLINK because userspace
1057 		 * expects RTM_NEWLINK for vlan dels
1058 		 */
1059 		br_ifinfo_notify(RTM_NEWLINK, br, p);
1060 
1061 	return err;
1062 }
1063 
1064 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1065 		       struct netlink_ext_ack *extack)
1066 {
1067 	if (tb[IFLA_ADDRESS]) {
1068 		if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1069 			return -EINVAL;
1070 		if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1071 			return -EADDRNOTAVAIL;
1072 	}
1073 
1074 	if (!data)
1075 		return 0;
1076 
1077 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1078 	if (data[IFLA_BR_VLAN_PROTOCOL] &&
1079 	    !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1080 		return -EPROTONOSUPPORT;
1081 
1082 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1083 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1084 
1085 		if (defpvid >= VLAN_VID_MASK)
1086 			return -EINVAL;
1087 	}
1088 #endif
1089 
1090 	return 0;
1091 }
1092 
1093 static int br_port_slave_changelink(struct net_device *brdev,
1094 				    struct net_device *dev,
1095 				    struct nlattr *tb[],
1096 				    struct nlattr *data[],
1097 				    struct netlink_ext_ack *extack)
1098 {
1099 	struct net_bridge *br = netdev_priv(brdev);
1100 	int ret;
1101 
1102 	if (!data)
1103 		return 0;
1104 
1105 	spin_lock_bh(&br->lock);
1106 	ret = br_setport(br_port_get_rtnl(dev), data, extack);
1107 	spin_unlock_bh(&br->lock);
1108 
1109 	return ret;
1110 }
1111 
1112 static int br_port_fill_slave_info(struct sk_buff *skb,
1113 				   const struct net_device *brdev,
1114 				   const struct net_device *dev)
1115 {
1116 	return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1117 }
1118 
1119 static size_t br_port_get_slave_size(const struct net_device *brdev,
1120 				     const struct net_device *dev)
1121 {
1122 	return br_port_info_size();
1123 }
1124 
1125 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1126 	[IFLA_BR_FORWARD_DELAY]	= { .type = NLA_U32 },
1127 	[IFLA_BR_HELLO_TIME]	= { .type = NLA_U32 },
1128 	[IFLA_BR_MAX_AGE]	= { .type = NLA_U32 },
1129 	[IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1130 	[IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1131 	[IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1132 	[IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1133 	[IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1134 	[IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1135 	[IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1136 				 .len  = ETH_ALEN },
1137 	[IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1138 	[IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1139 	[IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1140 	[IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1141 	[IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1142 	[IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1143 	[IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1144 	[IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1145 	[IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1146 	[IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1147 	[IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1148 	[IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1149 	[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1150 	[IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1151 	[IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1152 	[IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1153 	[IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1154 	[IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1155 	[IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1156 	[IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1157 	[IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1158 	[IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1159 	[IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1160 	[IFLA_BR_MULTI_BOOLOPT] =
1161 		NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1162 };
1163 
1164 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1165 			 struct nlattr *data[],
1166 			 struct netlink_ext_ack *extack)
1167 {
1168 	struct net_bridge *br = netdev_priv(brdev);
1169 	int err;
1170 
1171 	if (!data)
1172 		return 0;
1173 
1174 	if (data[IFLA_BR_FORWARD_DELAY]) {
1175 		err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1176 		if (err)
1177 			return err;
1178 	}
1179 
1180 	if (data[IFLA_BR_HELLO_TIME]) {
1181 		err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1182 		if (err)
1183 			return err;
1184 	}
1185 
1186 	if (data[IFLA_BR_MAX_AGE]) {
1187 		err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1188 		if (err)
1189 			return err;
1190 	}
1191 
1192 	if (data[IFLA_BR_AGEING_TIME]) {
1193 		err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1194 		if (err)
1195 			return err;
1196 	}
1197 
1198 	if (data[IFLA_BR_STP_STATE]) {
1199 		u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1200 
1201 		err = br_stp_set_enabled(br, stp_enabled, extack);
1202 		if (err)
1203 			return err;
1204 	}
1205 
1206 	if (data[IFLA_BR_PRIORITY]) {
1207 		u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1208 
1209 		br_stp_set_bridge_priority(br, priority);
1210 	}
1211 
1212 	if (data[IFLA_BR_VLAN_FILTERING]) {
1213 		u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1214 
1215 		err = br_vlan_filter_toggle(br, vlan_filter, extack);
1216 		if (err)
1217 			return err;
1218 	}
1219 
1220 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1221 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
1222 		__be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1223 
1224 		err = __br_vlan_set_proto(br, vlan_proto, extack);
1225 		if (err)
1226 			return err;
1227 	}
1228 
1229 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1230 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1231 
1232 		err = __br_vlan_set_default_pvid(br, defpvid, extack);
1233 		if (err)
1234 			return err;
1235 	}
1236 
1237 	if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1238 		__u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1239 
1240 		err = br_vlan_set_stats(br, vlan_stats);
1241 		if (err)
1242 			return err;
1243 	}
1244 
1245 	if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1246 		__u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1247 
1248 		err = br_vlan_set_stats_per_port(br, per_port);
1249 		if (err)
1250 			return err;
1251 	}
1252 #endif
1253 
1254 	if (data[IFLA_BR_GROUP_FWD_MASK]) {
1255 		u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1256 
1257 		if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1258 			return -EINVAL;
1259 		br->group_fwd_mask = fwd_mask;
1260 	}
1261 
1262 	if (data[IFLA_BR_GROUP_ADDR]) {
1263 		u8 new_addr[ETH_ALEN];
1264 
1265 		if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1266 			return -EINVAL;
1267 		memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1268 		if (!is_link_local_ether_addr(new_addr))
1269 			return -EINVAL;
1270 		if (new_addr[5] == 1 ||		/* 802.3x Pause address */
1271 		    new_addr[5] == 2 ||		/* 802.3ad Slow protocols */
1272 		    new_addr[5] == 3)		/* 802.1X PAE address */
1273 			return -EINVAL;
1274 		spin_lock_bh(&br->lock);
1275 		memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1276 		spin_unlock_bh(&br->lock);
1277 		br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1278 		br_recalculate_fwd_mask(br);
1279 	}
1280 
1281 	if (data[IFLA_BR_FDB_FLUSH])
1282 		br_fdb_flush(br);
1283 
1284 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1285 	if (data[IFLA_BR_MCAST_ROUTER]) {
1286 		u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1287 
1288 		err = br_multicast_set_router(br, multicast_router);
1289 		if (err)
1290 			return err;
1291 	}
1292 
1293 	if (data[IFLA_BR_MCAST_SNOOPING]) {
1294 		u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1295 
1296 		br_multicast_toggle(br, mcast_snooping);
1297 	}
1298 
1299 	if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1300 		u8 val;
1301 
1302 		val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1303 		br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1304 	}
1305 
1306 	if (data[IFLA_BR_MCAST_QUERIER]) {
1307 		u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1308 
1309 		err = br_multicast_set_querier(br, mcast_querier);
1310 		if (err)
1311 			return err;
1312 	}
1313 
1314 	if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1315 		br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1316 			RHT_ELASTICITY);
1317 
1318 	if (data[IFLA_BR_MCAST_HASH_MAX])
1319 		br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1320 
1321 	if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1322 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1323 
1324 		br->multicast_last_member_count = val;
1325 	}
1326 
1327 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1328 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1329 
1330 		br->multicast_startup_query_count = val;
1331 	}
1332 
1333 	if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1334 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1335 
1336 		br->multicast_last_member_interval = clock_t_to_jiffies(val);
1337 	}
1338 
1339 	if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1340 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1341 
1342 		br->multicast_membership_interval = clock_t_to_jiffies(val);
1343 	}
1344 
1345 	if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1346 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1347 
1348 		br->multicast_querier_interval = clock_t_to_jiffies(val);
1349 	}
1350 
1351 	if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1352 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1353 
1354 		br->multicast_query_interval = clock_t_to_jiffies(val);
1355 	}
1356 
1357 	if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1358 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1359 
1360 		br->multicast_query_response_interval = clock_t_to_jiffies(val);
1361 	}
1362 
1363 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1364 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1365 
1366 		br->multicast_startup_query_interval = clock_t_to_jiffies(val);
1367 	}
1368 
1369 	if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1370 		__u8 mcast_stats;
1371 
1372 		mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1373 		br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1374 	}
1375 
1376 	if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1377 		__u8 igmp_version;
1378 
1379 		igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1380 		err = br_multicast_set_igmp_version(br, igmp_version);
1381 		if (err)
1382 			return err;
1383 	}
1384 
1385 #if IS_ENABLED(CONFIG_IPV6)
1386 	if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1387 		__u8 mld_version;
1388 
1389 		mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1390 		err = br_multicast_set_mld_version(br, mld_version);
1391 		if (err)
1392 			return err;
1393 	}
1394 #endif
1395 #endif
1396 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1397 	if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1398 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1399 
1400 		br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1401 	}
1402 
1403 	if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1404 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1405 
1406 		br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1407 	}
1408 
1409 	if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1410 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1411 
1412 		br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1413 	}
1414 #endif
1415 
1416 	if (data[IFLA_BR_MULTI_BOOLOPT]) {
1417 		struct br_boolopt_multi *bm;
1418 
1419 		bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1420 		err = br_boolopt_multi_toggle(br, bm, extack);
1421 		if (err)
1422 			return err;
1423 	}
1424 
1425 	return 0;
1426 }
1427 
1428 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1429 			  struct nlattr *tb[], struct nlattr *data[],
1430 			  struct netlink_ext_ack *extack)
1431 {
1432 	struct net_bridge *br = netdev_priv(dev);
1433 	int err;
1434 
1435 	err = register_netdevice(dev);
1436 	if (err)
1437 		return err;
1438 
1439 	if (tb[IFLA_ADDRESS]) {
1440 		spin_lock_bh(&br->lock);
1441 		br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1442 		spin_unlock_bh(&br->lock);
1443 	}
1444 
1445 	err = br_changelink(dev, tb, data, extack);
1446 	if (err)
1447 		br_dev_delete(dev, NULL);
1448 
1449 	return err;
1450 }
1451 
1452 static size_t br_get_size(const struct net_device *brdev)
1453 {
1454 	return nla_total_size(sizeof(u32)) +	/* IFLA_BR_FORWARD_DELAY  */
1455 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_HELLO_TIME */
1456 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_MAX_AGE */
1457 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1458 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1459 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1460 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1461 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1462 	       nla_total_size(sizeof(__be16)) +	/* IFLA_BR_VLAN_PROTOCOL */
1463 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1464 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1465 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_VLAN_STATS_PER_PORT */
1466 #endif
1467 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1468 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1469 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1470 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1471 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1472 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1473 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1474 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1475 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1476 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1477 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1478 	       nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1479 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1480 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1481 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1482 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1483 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1484 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1485 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1486 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1487 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1488 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1489 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1490 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1491 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1492 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1493 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1494 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1495 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_IGMP_VERSION */
1496 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_MLD_VERSION */
1497 #endif
1498 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1499 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1500 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1501 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1502 #endif
1503 	       nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1504 	       0;
1505 }
1506 
1507 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1508 {
1509 	struct net_bridge *br = netdev_priv(brdev);
1510 	u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1511 	u32 hello_time = jiffies_to_clock_t(br->hello_time);
1512 	u32 age_time = jiffies_to_clock_t(br->max_age);
1513 	u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1514 	u32 stp_enabled = br->stp_enabled;
1515 	u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1516 	u8 vlan_enabled = br_vlan_enabled(br->dev);
1517 	struct br_boolopt_multi bm;
1518 	u64 clockval;
1519 
1520 	clockval = br_timer_value(&br->hello_timer);
1521 	if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1522 		return -EMSGSIZE;
1523 	clockval = br_timer_value(&br->tcn_timer);
1524 	if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1525 		return -EMSGSIZE;
1526 	clockval = br_timer_value(&br->topology_change_timer);
1527 	if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1528 			      IFLA_BR_PAD))
1529 		return -EMSGSIZE;
1530 	clockval = br_timer_value(&br->gc_work.timer);
1531 	if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1532 		return -EMSGSIZE;
1533 
1534 	br_boolopt_multi_get(br, &bm);
1535 	if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1536 	    nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1537 	    nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1538 	    nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1539 	    nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1540 	    nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1541 	    nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1542 	    nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1543 	    nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1544 		    &br->bridge_id) ||
1545 	    nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1546 		    &br->designated_root) ||
1547 	    nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1548 	    nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1549 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1550 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1551 		       br->topology_change_detected) ||
1552 	    nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1553 	    nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1554 		return -EMSGSIZE;
1555 
1556 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1557 	if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1558 	    nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1559 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1560 		       br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1561 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1562 		       br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1563 		return -EMSGSIZE;
1564 #endif
1565 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1566 	if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, br->multicast_router) ||
1567 	    nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1568 		       br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1569 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1570 		       br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1571 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1572 		       br_opt_get(br, BROPT_MULTICAST_QUERIER)) ||
1573 	    nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1574 		       br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1575 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1576 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1577 	    nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1578 			br->multicast_last_member_count) ||
1579 	    nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1580 			br->multicast_startup_query_count) ||
1581 	    nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1582 		       br->multicast_igmp_version))
1583 		return -EMSGSIZE;
1584 #if IS_ENABLED(CONFIG_IPV6)
1585 	if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1586 		       br->multicast_mld_version))
1587 		return -EMSGSIZE;
1588 #endif
1589 	clockval = jiffies_to_clock_t(br->multicast_last_member_interval);
1590 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1591 			      IFLA_BR_PAD))
1592 		return -EMSGSIZE;
1593 	clockval = jiffies_to_clock_t(br->multicast_membership_interval);
1594 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1595 			      IFLA_BR_PAD))
1596 		return -EMSGSIZE;
1597 	clockval = jiffies_to_clock_t(br->multicast_querier_interval);
1598 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1599 			      IFLA_BR_PAD))
1600 		return -EMSGSIZE;
1601 	clockval = jiffies_to_clock_t(br->multicast_query_interval);
1602 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1603 			      IFLA_BR_PAD))
1604 		return -EMSGSIZE;
1605 	clockval = jiffies_to_clock_t(br->multicast_query_response_interval);
1606 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1607 			      IFLA_BR_PAD))
1608 		return -EMSGSIZE;
1609 	clockval = jiffies_to_clock_t(br->multicast_startup_query_interval);
1610 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1611 			      IFLA_BR_PAD))
1612 		return -EMSGSIZE;
1613 #endif
1614 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1615 	if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1616 		       br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1617 	    nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1618 		       br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1619 	    nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1620 		       br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1621 		return -EMSGSIZE;
1622 #endif
1623 
1624 	return 0;
1625 }
1626 
1627 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1628 {
1629 	struct net_bridge_port *p = NULL;
1630 	struct net_bridge_vlan_group *vg;
1631 	struct net_bridge_vlan *v;
1632 	struct net_bridge *br;
1633 	int numvls = 0;
1634 
1635 	switch (attr) {
1636 	case IFLA_STATS_LINK_XSTATS:
1637 		br = netdev_priv(dev);
1638 		vg = br_vlan_group(br);
1639 		break;
1640 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1641 		p = br_port_get_rtnl(dev);
1642 		if (!p)
1643 			return 0;
1644 		br = p->br;
1645 		vg = nbp_vlan_group(p);
1646 		break;
1647 	default:
1648 		return 0;
1649 	}
1650 
1651 	if (vg) {
1652 		/* we need to count all, even placeholder entries */
1653 		list_for_each_entry(v, &vg->vlan_list, vlist)
1654 			numvls++;
1655 	}
1656 
1657 	return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1658 	       nla_total_size(sizeof(struct br_mcast_stats)) +
1659 	       nla_total_size(0);
1660 }
1661 
1662 static int br_fill_linkxstats(struct sk_buff *skb,
1663 			      const struct net_device *dev,
1664 			      int *prividx, int attr)
1665 {
1666 	struct nlattr *nla __maybe_unused;
1667 	struct net_bridge_port *p = NULL;
1668 	struct net_bridge_vlan_group *vg;
1669 	struct net_bridge_vlan *v;
1670 	struct net_bridge *br;
1671 	struct nlattr *nest;
1672 	int vl_idx = 0;
1673 
1674 	switch (attr) {
1675 	case IFLA_STATS_LINK_XSTATS:
1676 		br = netdev_priv(dev);
1677 		vg = br_vlan_group(br);
1678 		break;
1679 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1680 		p = br_port_get_rtnl(dev);
1681 		if (!p)
1682 			return 0;
1683 		br = p->br;
1684 		vg = nbp_vlan_group(p);
1685 		break;
1686 	default:
1687 		return -EINVAL;
1688 	}
1689 
1690 	nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1691 	if (!nest)
1692 		return -EMSGSIZE;
1693 
1694 	if (vg) {
1695 		u16 pvid;
1696 
1697 		pvid = br_get_pvid(vg);
1698 		list_for_each_entry(v, &vg->vlan_list, vlist) {
1699 			struct bridge_vlan_xstats vxi;
1700 			struct pcpu_sw_netstats stats;
1701 
1702 			if (++vl_idx < *prividx)
1703 				continue;
1704 			memset(&vxi, 0, sizeof(vxi));
1705 			vxi.vid = v->vid;
1706 			vxi.flags = v->flags;
1707 			if (v->vid == pvid)
1708 				vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1709 			br_vlan_get_stats(v, &stats);
1710 			vxi.rx_bytes = stats.rx_bytes;
1711 			vxi.rx_packets = stats.rx_packets;
1712 			vxi.tx_bytes = stats.tx_bytes;
1713 			vxi.tx_packets = stats.tx_packets;
1714 
1715 			if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1716 				goto nla_put_failure;
1717 		}
1718 	}
1719 
1720 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1721 	if (++vl_idx >= *prividx) {
1722 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1723 					sizeof(struct br_mcast_stats),
1724 					BRIDGE_XSTATS_PAD);
1725 		if (!nla)
1726 			goto nla_put_failure;
1727 		br_multicast_get_stats(br, p, nla_data(nla));
1728 	}
1729 #endif
1730 
1731 	if (p) {
1732 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1733 					sizeof(p->stp_xstats),
1734 					BRIDGE_XSTATS_PAD);
1735 		if (!nla)
1736 			goto nla_put_failure;
1737 
1738 		spin_lock_bh(&br->lock);
1739 		memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1740 		spin_unlock_bh(&br->lock);
1741 	}
1742 
1743 	nla_nest_end(skb, nest);
1744 	*prividx = 0;
1745 
1746 	return 0;
1747 
1748 nla_put_failure:
1749 	nla_nest_end(skb, nest);
1750 	*prividx = vl_idx;
1751 
1752 	return -EMSGSIZE;
1753 }
1754 
1755 static struct rtnl_af_ops br_af_ops __read_mostly = {
1756 	.family			= AF_BRIDGE,
1757 	.get_link_af_size	= br_get_link_af_size_filtered,
1758 };
1759 
1760 struct rtnl_link_ops br_link_ops __read_mostly = {
1761 	.kind			= "bridge",
1762 	.priv_size		= sizeof(struct net_bridge),
1763 	.setup			= br_dev_setup,
1764 	.maxtype		= IFLA_BR_MAX,
1765 	.policy			= br_policy,
1766 	.validate		= br_validate,
1767 	.newlink		= br_dev_newlink,
1768 	.changelink		= br_changelink,
1769 	.dellink		= br_dev_delete,
1770 	.get_size		= br_get_size,
1771 	.fill_info		= br_fill_info,
1772 	.fill_linkxstats	= br_fill_linkxstats,
1773 	.get_linkxstats_size	= br_get_linkxstats_size,
1774 
1775 	.slave_maxtype		= IFLA_BRPORT_MAX,
1776 	.slave_policy		= br_port_policy,
1777 	.slave_changelink	= br_port_slave_changelink,
1778 	.get_slave_size		= br_port_get_slave_size,
1779 	.fill_slave_info	= br_port_fill_slave_info,
1780 };
1781 
1782 int __init br_netlink_init(void)
1783 {
1784 	int err;
1785 
1786 	br_mdb_init();
1787 	br_vlan_rtnl_init();
1788 	rtnl_af_register(&br_af_ops);
1789 
1790 	err = rtnl_link_register(&br_link_ops);
1791 	if (err)
1792 		goto out_af;
1793 
1794 	return 0;
1795 
1796 out_af:
1797 	rtnl_af_unregister(&br_af_ops);
1798 	br_mdb_uninit();
1799 	return err;
1800 }
1801 
1802 void br_netlink_fini(void)
1803 {
1804 	br_mdb_uninit();
1805 	br_vlan_rtnl_uninit();
1806 	rtnl_af_unregister(&br_af_ops);
1807 	rtnl_link_unregister(&br_link_ops);
1808 }
1809