net: rtnetlink: prevent underflows in do_setvfinfo()
[muen/linux.git] / net / core / rtnetlink.c
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * INET         An implementation of the TCP/IP protocol suite for the LINUX
4  *              operating system.  INET is implemented using the  BSD Socket
5  *              interface as the means of communication with the user level.
6  *
7  *              Routing netlink socket interface: protocol independent part.
8  *
9  * Authors:     Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
10  *
11  *      Fixes:
12  *      Vitaly E. Lavrov                RTA_OK arithmetics was wrong.
13  */
14
15 #include <linux/bitops.h>
16 #include <linux/errno.h>
17 #include <linux/module.h>
18 #include <linux/types.h>
19 #include <linux/socket.h>
20 #include <linux/kernel.h>
21 #include <linux/timer.h>
22 #include <linux/string.h>
23 #include <linux/sockios.h>
24 #include <linux/net.h>
25 #include <linux/fcntl.h>
26 #include <linux/mm.h>
27 #include <linux/slab.h>
28 #include <linux/interrupt.h>
29 #include <linux/capability.h>
30 #include <linux/skbuff.h>
31 #include <linux/init.h>
32 #include <linux/security.h>
33 #include <linux/mutex.h>
34 #include <linux/if_addr.h>
35 #include <linux/if_bridge.h>
36 #include <linux/if_vlan.h>
37 #include <linux/pci.h>
38 #include <linux/etherdevice.h>
39 #include <linux/bpf.h>
40
41 #include <linux/uaccess.h>
42
43 #include <linux/inet.h>
44 #include <linux/netdevice.h>
45 #include <net/ip.h>
46 #include <net/protocol.h>
47 #include <net/arp.h>
48 #include <net/route.h>
49 #include <net/udp.h>
50 #include <net/tcp.h>
51 #include <net/sock.h>
52 #include <net/pkt_sched.h>
53 #include <net/fib_rules.h>
54 #include <net/rtnetlink.h>
55 #include <net/net_namespace.h>
56
57 #define RTNL_MAX_TYPE           50
58 #define RTNL_SLAVE_MAX_TYPE     36
59
60 struct rtnl_link {
61         rtnl_doit_func          doit;
62         rtnl_dumpit_func        dumpit;
63         struct module           *owner;
64         unsigned int            flags;
65         struct rcu_head         rcu;
66 };
67
68 static DEFINE_MUTEX(rtnl_mutex);
69
70 void rtnl_lock(void)
71 {
72         mutex_lock(&rtnl_mutex);
73 }
74 EXPORT_SYMBOL(rtnl_lock);
75
76 int rtnl_lock_killable(void)
77 {
78         return mutex_lock_killable(&rtnl_mutex);
79 }
80 EXPORT_SYMBOL(rtnl_lock_killable);
81
82 static struct sk_buff *defer_kfree_skb_list;
83 void rtnl_kfree_skbs(struct sk_buff *head, struct sk_buff *tail)
84 {
85         if (head && tail) {
86                 tail->next = defer_kfree_skb_list;
87                 defer_kfree_skb_list = head;
88         }
89 }
90 EXPORT_SYMBOL(rtnl_kfree_skbs);
91
92 void __rtnl_unlock(void)
93 {
94         struct sk_buff *head = defer_kfree_skb_list;
95
96         defer_kfree_skb_list = NULL;
97
98         mutex_unlock(&rtnl_mutex);
99
100         while (head) {
101                 struct sk_buff *next = head->next;
102
103                 kfree_skb(head);
104                 cond_resched();
105                 head = next;
106         }
107 }
108
109 void rtnl_unlock(void)
110 {
111         /* This fellow will unlock it for us. */
112         netdev_run_todo();
113 }
114 EXPORT_SYMBOL(rtnl_unlock);
115
116 int rtnl_trylock(void)
117 {
118         return mutex_trylock(&rtnl_mutex);
119 }
120 EXPORT_SYMBOL(rtnl_trylock);
121
122 int rtnl_is_locked(void)
123 {
124         return mutex_is_locked(&rtnl_mutex);
125 }
126 EXPORT_SYMBOL(rtnl_is_locked);
127
128 bool refcount_dec_and_rtnl_lock(refcount_t *r)
129 {
130         return refcount_dec_and_mutex_lock(r, &rtnl_mutex);
131 }
132 EXPORT_SYMBOL(refcount_dec_and_rtnl_lock);
133
134 #ifdef CONFIG_PROVE_LOCKING
135 bool lockdep_rtnl_is_held(void)
136 {
137         return lockdep_is_held(&rtnl_mutex);
138 }
139 EXPORT_SYMBOL(lockdep_rtnl_is_held);
140 #endif /* #ifdef CONFIG_PROVE_LOCKING */
141
142 static struct rtnl_link *__rcu *rtnl_msg_handlers[RTNL_FAMILY_MAX + 1];
143
144 static inline int rtm_msgindex(int msgtype)
145 {
146         int msgindex = msgtype - RTM_BASE;
147
148         /*
149          * msgindex < 0 implies someone tried to register a netlink
150          * control code. msgindex >= RTM_NR_MSGTYPES may indicate that
151          * the message type has not been added to linux/rtnetlink.h
152          */
153         BUG_ON(msgindex < 0 || msgindex >= RTM_NR_MSGTYPES);
154
155         return msgindex;
156 }
157
158 static struct rtnl_link *rtnl_get_link(int protocol, int msgtype)
159 {
160         struct rtnl_link **tab;
161
162         if (protocol >= ARRAY_SIZE(rtnl_msg_handlers))
163                 protocol = PF_UNSPEC;
164
165         tab = rcu_dereference_rtnl(rtnl_msg_handlers[protocol]);
166         if (!tab)
167                 tab = rcu_dereference_rtnl(rtnl_msg_handlers[PF_UNSPEC]);
168
169         return tab[msgtype];
170 }
171
172 static int rtnl_register_internal(struct module *owner,
173                                   int protocol, int msgtype,
174                                   rtnl_doit_func doit, rtnl_dumpit_func dumpit,
175                                   unsigned int flags)
176 {
177         struct rtnl_link *link, *old;
178         struct rtnl_link __rcu **tab;
179         int msgindex;
180         int ret = -ENOBUFS;
181
182         BUG_ON(protocol < 0 || protocol > RTNL_FAMILY_MAX);
183         msgindex = rtm_msgindex(msgtype);
184
185         rtnl_lock();
186         tab = rtnl_msg_handlers[protocol];
187         if (tab == NULL) {
188                 tab = kcalloc(RTM_NR_MSGTYPES, sizeof(void *), GFP_KERNEL);
189                 if (!tab)
190                         goto unlock;
191
192                 /* ensures we see the 0 stores */
193                 rcu_assign_pointer(rtnl_msg_handlers[protocol], tab);
194         }
195
196         old = rtnl_dereference(tab[msgindex]);
197         if (old) {
198                 link = kmemdup(old, sizeof(*old), GFP_KERNEL);
199                 if (!link)
200                         goto unlock;
201         } else {
202                 link = kzalloc(sizeof(*link), GFP_KERNEL);
203                 if (!link)
204                         goto unlock;
205         }
206
207         WARN_ON(link->owner && link->owner != owner);
208         link->owner = owner;
209
210         WARN_ON(doit && link->doit && link->doit != doit);
211         if (doit)
212                 link->doit = doit;
213         WARN_ON(dumpit && link->dumpit && link->dumpit != dumpit);
214         if (dumpit)
215                 link->dumpit = dumpit;
216
217         link->flags |= flags;
218
219         /* publish protocol:msgtype */
220         rcu_assign_pointer(tab[msgindex], link);
221         ret = 0;
222         if (old)
223                 kfree_rcu(old, rcu);
224 unlock:
225         rtnl_unlock();
226         return ret;
227 }
228
229 /**
230  * rtnl_register_module - Register a rtnetlink message type
231  *
232  * @owner: module registering the hook (THIS_MODULE)
233  * @protocol: Protocol family or PF_UNSPEC
234  * @msgtype: rtnetlink message type
235  * @doit: Function pointer called for each request message
236  * @dumpit: Function pointer called for each dump request (NLM_F_DUMP) message
237  * @flags: rtnl_link_flags to modifiy behaviour of doit/dumpit functions
238  *
239  * Like rtnl_register, but for use by removable modules.
240  */
241 int rtnl_register_module(struct module *owner,
242                          int protocol, int msgtype,
243                          rtnl_doit_func doit, rtnl_dumpit_func dumpit,
244                          unsigned int flags)
245 {
246         return rtnl_register_internal(owner, protocol, msgtype,
247                                       doit, dumpit, flags);
248 }
249 EXPORT_SYMBOL_GPL(rtnl_register_module);
250
251 /**
252  * rtnl_register - Register a rtnetlink message type
253  * @protocol: Protocol family or PF_UNSPEC
254  * @msgtype: rtnetlink message type
255  * @doit: Function pointer called for each request message
256  * @dumpit: Function pointer called for each dump request (NLM_F_DUMP) message
257  * @flags: rtnl_link_flags to modifiy behaviour of doit/dumpit functions
258  *
259  * Registers the specified function pointers (at least one of them has
260  * to be non-NULL) to be called whenever a request message for the
261  * specified protocol family and message type is received.
262  *
263  * The special protocol family PF_UNSPEC may be used to define fallback
264  * function pointers for the case when no entry for the specific protocol
265  * family exists.
266  */
267 void rtnl_register(int protocol, int msgtype,
268                    rtnl_doit_func doit, rtnl_dumpit_func dumpit,
269                    unsigned int flags)
270 {
271         int err;
272
273         err = rtnl_register_internal(NULL, protocol, msgtype, doit, dumpit,
274                                      flags);
275         if (err)
276                 pr_err("Unable to register rtnetlink message handler, "
277                        "protocol = %d, message type = %d\n", protocol, msgtype);
278 }
279
280 /**
281  * rtnl_unregister - Unregister a rtnetlink message type
282  * @protocol: Protocol family or PF_UNSPEC
283  * @msgtype: rtnetlink message type
284  *
285  * Returns 0 on success or a negative error code.
286  */
287 int rtnl_unregister(int protocol, int msgtype)
288 {
289         struct rtnl_link **tab, *link;
290         int msgindex;
291
292         BUG_ON(protocol < 0 || protocol > RTNL_FAMILY_MAX);
293         msgindex = rtm_msgindex(msgtype);
294
295         rtnl_lock();
296         tab = rtnl_dereference(rtnl_msg_handlers[protocol]);
297         if (!tab) {
298                 rtnl_unlock();
299                 return -ENOENT;
300         }
301
302         link = tab[msgindex];
303         rcu_assign_pointer(tab[msgindex], NULL);
304         rtnl_unlock();
305
306         kfree_rcu(link, rcu);
307
308         return 0;
309 }
310 EXPORT_SYMBOL_GPL(rtnl_unregister);
311
312 /**
313  * rtnl_unregister_all - Unregister all rtnetlink message type of a protocol
314  * @protocol : Protocol family or PF_UNSPEC
315  *
316  * Identical to calling rtnl_unregster() for all registered message types
317  * of a certain protocol family.
318  */
319 void rtnl_unregister_all(int protocol)
320 {
321         struct rtnl_link **tab, *link;
322         int msgindex;
323
324         BUG_ON(protocol < 0 || protocol > RTNL_FAMILY_MAX);
325
326         rtnl_lock();
327         tab = rtnl_msg_handlers[protocol];
328         if (!tab) {
329                 rtnl_unlock();
330                 return;
331         }
332         RCU_INIT_POINTER(rtnl_msg_handlers[protocol], NULL);
333         for (msgindex = 0; msgindex < RTM_NR_MSGTYPES; msgindex++) {
334                 link = tab[msgindex];
335                 if (!link)
336                         continue;
337
338                 rcu_assign_pointer(tab[msgindex], NULL);
339                 kfree_rcu(link, rcu);
340         }
341         rtnl_unlock();
342
343         synchronize_net();
344
345         kfree(tab);
346 }
347 EXPORT_SYMBOL_GPL(rtnl_unregister_all);
348
349 static LIST_HEAD(link_ops);
350
351 static const struct rtnl_link_ops *rtnl_link_ops_get(const char *kind)
352 {
353         const struct rtnl_link_ops *ops;
354
355         list_for_each_entry(ops, &link_ops, list) {
356                 if (!strcmp(ops->kind, kind))
357                         return ops;
358         }
359         return NULL;
360 }
361
362 /**
363  * __rtnl_link_register - Register rtnl_link_ops with rtnetlink.
364  * @ops: struct rtnl_link_ops * to register
365  *
366  * The caller must hold the rtnl_mutex. This function should be used
367  * by drivers that create devices during module initialization. It
368  * must be called before registering the devices.
369  *
370  * Returns 0 on success or a negative error code.
371  */
372 int __rtnl_link_register(struct rtnl_link_ops *ops)
373 {
374         if (rtnl_link_ops_get(ops->kind))
375                 return -EEXIST;
376
377         /* The check for setup is here because if ops
378          * does not have that filled up, it is not possible
379          * to use the ops for creating device. So do not
380          * fill up dellink as well. That disables rtnl_dellink.
381          */
382         if (ops->setup && !ops->dellink)
383                 ops->dellink = unregister_netdevice_queue;
384
385         list_add_tail(&ops->list, &link_ops);
386         return 0;
387 }
388 EXPORT_SYMBOL_GPL(__rtnl_link_register);
389
390 /**
391  * rtnl_link_register - Register rtnl_link_ops with rtnetlink.
392  * @ops: struct rtnl_link_ops * to register
393  *
394  * Returns 0 on success or a negative error code.
395  */
396 int rtnl_link_register(struct rtnl_link_ops *ops)
397 {
398         int err;
399
400         /* Sanity-check max sizes to avoid stack buffer overflow. */
401         if (WARN_ON(ops->maxtype > RTNL_MAX_TYPE ||
402                     ops->slave_maxtype > RTNL_SLAVE_MAX_TYPE))
403                 return -EINVAL;
404
405         rtnl_lock();
406         err = __rtnl_link_register(ops);
407         rtnl_unlock();
408         return err;
409 }
410 EXPORT_SYMBOL_GPL(rtnl_link_register);
411
412 static void __rtnl_kill_links(struct net *net, struct rtnl_link_ops *ops)
413 {
414         struct net_device *dev;
415         LIST_HEAD(list_kill);
416
417         for_each_netdev(net, dev) {
418                 if (dev->rtnl_link_ops == ops)
419                         ops->dellink(dev, &list_kill);
420         }
421         unregister_netdevice_many(&list_kill);
422 }
423
424 /**
425  * __rtnl_link_unregister - Unregister rtnl_link_ops from rtnetlink.
426  * @ops: struct rtnl_link_ops * to unregister
427  *
428  * The caller must hold the rtnl_mutex and guarantee net_namespace_list
429  * integrity (hold pernet_ops_rwsem for writing to close the race
430  * with setup_net() and cleanup_net()).
431  */
432 void __rtnl_link_unregister(struct rtnl_link_ops *ops)
433 {
434         struct net *net;
435
436         for_each_net(net) {
437                 __rtnl_kill_links(net, ops);
438         }
439         list_del(&ops->list);
440 }
441 EXPORT_SYMBOL_GPL(__rtnl_link_unregister);
442
443 /* Return with the rtnl_lock held when there are no network
444  * devices unregistering in any network namespace.
445  */
446 static void rtnl_lock_unregistering_all(void)
447 {
448         struct net *net;
449         bool unregistering;
450         DEFINE_WAIT_FUNC(wait, woken_wake_function);
451
452         add_wait_queue(&netdev_unregistering_wq, &wait);
453         for (;;) {
454                 unregistering = false;
455                 rtnl_lock();
456                 /* We held write locked pernet_ops_rwsem, and parallel
457                  * setup_net() and cleanup_net() are not possible.
458                  */
459                 for_each_net(net) {
460                         if (net->dev_unreg_count > 0) {
461                                 unregistering = true;
462                                 break;
463                         }
464                 }
465                 if (!unregistering)
466                         break;
467                 __rtnl_unlock();
468
469                 wait_woken(&wait, TASK_UNINTERRUPTIBLE, MAX_SCHEDULE_TIMEOUT);
470         }
471         remove_wait_queue(&netdev_unregistering_wq, &wait);
472 }
473
474 /**
475  * rtnl_link_unregister - Unregister rtnl_link_ops from rtnetlink.
476  * @ops: struct rtnl_link_ops * to unregister
477  */
478 void rtnl_link_unregister(struct rtnl_link_ops *ops)
479 {
480         /* Close the race with setup_net() and cleanup_net() */
481         down_write(&pernet_ops_rwsem);
482         rtnl_lock_unregistering_all();
483         __rtnl_link_unregister(ops);
484         rtnl_unlock();
485         up_write(&pernet_ops_rwsem);
486 }
487 EXPORT_SYMBOL_GPL(rtnl_link_unregister);
488
489 static size_t rtnl_link_get_slave_info_data_size(const struct net_device *dev)
490 {
491         struct net_device *master_dev;
492         const struct rtnl_link_ops *ops;
493         size_t size = 0;
494
495         rcu_read_lock();
496
497         master_dev = netdev_master_upper_dev_get_rcu((struct net_device *)dev);
498         if (!master_dev)
499                 goto out;
500
501         ops = master_dev->rtnl_link_ops;
502         if (!ops || !ops->get_slave_size)
503                 goto out;
504         /* IFLA_INFO_SLAVE_DATA + nested data */
505         size = nla_total_size(sizeof(struct nlattr)) +
506                ops->get_slave_size(master_dev, dev);
507
508 out:
509         rcu_read_unlock();
510         return size;
511 }
512
513 static size_t rtnl_link_get_size(const struct net_device *dev)
514 {
515         const struct rtnl_link_ops *ops = dev->rtnl_link_ops;
516         size_t size;
517
518         if (!ops)
519                 return 0;
520
521         size = nla_total_size(sizeof(struct nlattr)) + /* IFLA_LINKINFO */
522                nla_total_size(strlen(ops->kind) + 1);  /* IFLA_INFO_KIND */
523
524         if (ops->get_size)
525                 /* IFLA_INFO_DATA + nested data */
526                 size += nla_total_size(sizeof(struct nlattr)) +
527                         ops->get_size(dev);
528
529         if (ops->get_xstats_size)
530                 /* IFLA_INFO_XSTATS */
531                 size += nla_total_size(ops->get_xstats_size(dev));
532
533         size += rtnl_link_get_slave_info_data_size(dev);
534
535         return size;
536 }
537
538 static LIST_HEAD(rtnl_af_ops);
539
540 static const struct rtnl_af_ops *rtnl_af_lookup(const int family)
541 {
542         const struct rtnl_af_ops *ops;
543
544         list_for_each_entry_rcu(ops, &rtnl_af_ops, list) {
545                 if (ops->family == family)
546                         return ops;
547         }
548
549         return NULL;
550 }
551
552 /**
553  * rtnl_af_register - Register rtnl_af_ops with rtnetlink.
554  * @ops: struct rtnl_af_ops * to register
555  *
556  * Returns 0 on success or a negative error code.
557  */
558 void rtnl_af_register(struct rtnl_af_ops *ops)
559 {
560         rtnl_lock();
561         list_add_tail_rcu(&ops->list, &rtnl_af_ops);
562         rtnl_unlock();
563 }
564 EXPORT_SYMBOL_GPL(rtnl_af_register);
565
566 /**
567  * rtnl_af_unregister - Unregister rtnl_af_ops from rtnetlink.
568  * @ops: struct rtnl_af_ops * to unregister
569  */
570 void rtnl_af_unregister(struct rtnl_af_ops *ops)
571 {
572         rtnl_lock();
573         list_del_rcu(&ops->list);
574         rtnl_unlock();
575
576         synchronize_rcu();
577 }
578 EXPORT_SYMBOL_GPL(rtnl_af_unregister);
579
580 static size_t rtnl_link_get_af_size(const struct net_device *dev,
581                                     u32 ext_filter_mask)
582 {
583         struct rtnl_af_ops *af_ops;
584         size_t size;
585
586         /* IFLA_AF_SPEC */
587         size = nla_total_size(sizeof(struct nlattr));
588
589         rcu_read_lock();
590         list_for_each_entry_rcu(af_ops, &rtnl_af_ops, list) {
591                 if (af_ops->get_link_af_size) {
592                         /* AF_* + nested data */
593                         size += nla_total_size(sizeof(struct nlattr)) +
594                                 af_ops->get_link_af_size(dev, ext_filter_mask);
595                 }
596         }
597         rcu_read_unlock();
598
599         return size;
600 }
601
602 static bool rtnl_have_link_slave_info(const struct net_device *dev)
603 {
604         struct net_device *master_dev;
605         bool ret = false;
606
607         rcu_read_lock();
608
609         master_dev = netdev_master_upper_dev_get_rcu((struct net_device *)dev);
610         if (master_dev && master_dev->rtnl_link_ops)
611                 ret = true;
612         rcu_read_unlock();
613         return ret;
614 }
615
616 static int rtnl_link_slave_info_fill(struct sk_buff *skb,
617                                      const struct net_device *dev)
618 {
619         struct net_device *master_dev;
620         const struct rtnl_link_ops *ops;
621         struct nlattr *slave_data;
622         int err;
623
624         master_dev = netdev_master_upper_dev_get((struct net_device *) dev);
625         if (!master_dev)
626                 return 0;
627         ops = master_dev->rtnl_link_ops;
628         if (!ops)
629                 return 0;
630         if (nla_put_string(skb, IFLA_INFO_SLAVE_KIND, ops->kind) < 0)
631                 return -EMSGSIZE;
632         if (ops->fill_slave_info) {
633                 slave_data = nla_nest_start_noflag(skb, IFLA_INFO_SLAVE_DATA);
634                 if (!slave_data)
635                         return -EMSGSIZE;
636                 err = ops->fill_slave_info(skb, master_dev, dev);
637                 if (err < 0)
638                         goto err_cancel_slave_data;
639                 nla_nest_end(skb, slave_data);
640         }
641         return 0;
642
643 err_cancel_slave_data:
644         nla_nest_cancel(skb, slave_data);
645         return err;
646 }
647
648 static int rtnl_link_info_fill(struct sk_buff *skb,
649                                const struct net_device *dev)
650 {
651         const struct rtnl_link_ops *ops = dev->rtnl_link_ops;
652         struct nlattr *data;
653         int err;
654
655         if (!ops)
656                 return 0;
657         if (nla_put_string(skb, IFLA_INFO_KIND, ops->kind) < 0)
658                 return -EMSGSIZE;
659         if (ops->fill_xstats) {
660                 err = ops->fill_xstats(skb, dev);
661                 if (err < 0)
662                         return err;
663         }
664         if (ops->fill_info) {
665                 data = nla_nest_start_noflag(skb, IFLA_INFO_DATA);
666                 if (data == NULL)
667                         return -EMSGSIZE;
668                 err = ops->fill_info(skb, dev);
669                 if (err < 0)
670                         goto err_cancel_data;
671                 nla_nest_end(skb, data);
672         }
673         return 0;
674
675 err_cancel_data:
676         nla_nest_cancel(skb, data);
677         return err;
678 }
679
680 static int rtnl_link_fill(struct sk_buff *skb, const struct net_device *dev)
681 {
682         struct nlattr *linkinfo;
683         int err = -EMSGSIZE;
684
685         linkinfo = nla_nest_start_noflag(skb, IFLA_LINKINFO);
686         if (linkinfo == NULL)
687                 goto out;
688
689         err = rtnl_link_info_fill(skb, dev);
690         if (err < 0)
691                 goto err_cancel_link;
692
693         err = rtnl_link_slave_info_fill(skb, dev);
694         if (err < 0)
695                 goto err_cancel_link;
696
697         nla_nest_end(skb, linkinfo);
698         return 0;
699
700 err_cancel_link:
701         nla_nest_cancel(skb, linkinfo);
702 out:
703         return err;
704 }
705
706 int rtnetlink_send(struct sk_buff *skb, struct net *net, u32 pid, unsigned int group, int echo)
707 {
708         struct sock *rtnl = net->rtnl;
709         int err = 0;
710
711         NETLINK_CB(skb).dst_group = group;
712         if (echo)
713                 refcount_inc(&skb->users);
714         netlink_broadcast(rtnl, skb, pid, group, GFP_KERNEL);
715         if (echo)
716                 err = netlink_unicast(rtnl, skb, pid, MSG_DONTWAIT);
717         return err;
718 }
719
720 int rtnl_unicast(struct sk_buff *skb, struct net *net, u32 pid)
721 {
722         struct sock *rtnl = net->rtnl;
723
724         return nlmsg_unicast(rtnl, skb, pid);
725 }
726 EXPORT_SYMBOL(rtnl_unicast);
727
728 void rtnl_notify(struct sk_buff *skb, struct net *net, u32 pid, u32 group,
729                  struct nlmsghdr *nlh, gfp_t flags)
730 {
731         struct sock *rtnl = net->rtnl;
732         int report = 0;
733
734         if (nlh)
735                 report = nlmsg_report(nlh);
736
737         nlmsg_notify(rtnl, skb, pid, group, report, flags);
738 }
739 EXPORT_SYMBOL(rtnl_notify);
740
741 void rtnl_set_sk_err(struct net *net, u32 group, int error)
742 {
743         struct sock *rtnl = net->rtnl;
744
745         netlink_set_err(rtnl, 0, group, error);
746 }
747 EXPORT_SYMBOL(rtnl_set_sk_err);
748
749 int rtnetlink_put_metrics(struct sk_buff *skb, u32 *metrics)
750 {
751         struct nlattr *mx;
752         int i, valid = 0;
753
754         /* nothing is dumped for dst_default_metrics, so just skip the loop */
755         if (metrics == dst_default_metrics.metrics)
756                 return 0;
757
758         mx = nla_nest_start_noflag(skb, RTA_METRICS);
759         if (mx == NULL)
760                 return -ENOBUFS;
761
762         for (i = 0; i < RTAX_MAX; i++) {
763                 if (metrics[i]) {
764                         if (i == RTAX_CC_ALGO - 1) {
765                                 char tmp[TCP_CA_NAME_MAX], *name;
766
767                                 name = tcp_ca_get_name_by_key(metrics[i], tmp);
768                                 if (!name)
769                                         continue;
770                                 if (nla_put_string(skb, i + 1, name))
771                                         goto nla_put_failure;
772                         } else if (i == RTAX_FEATURES - 1) {
773                                 u32 user_features = metrics[i] & RTAX_FEATURE_MASK;
774
775                                 if (!user_features)
776                                         continue;
777                                 BUILD_BUG_ON(RTAX_FEATURE_MASK & DST_FEATURE_MASK);
778                                 if (nla_put_u32(skb, i + 1, user_features))
779                                         goto nla_put_failure;
780                         } else {
781                                 if (nla_put_u32(skb, i + 1, metrics[i]))
782                                         goto nla_put_failure;
783                         }
784                         valid++;
785                 }
786         }
787
788         if (!valid) {
789                 nla_nest_cancel(skb, mx);
790                 return 0;
791         }
792
793         return nla_nest_end(skb, mx);
794
795 nla_put_failure:
796         nla_nest_cancel(skb, mx);
797         return -EMSGSIZE;
798 }
799 EXPORT_SYMBOL(rtnetlink_put_metrics);
800
801 int rtnl_put_cacheinfo(struct sk_buff *skb, struct dst_entry *dst, u32 id,
802                        long expires, u32 error)
803 {
804         struct rta_cacheinfo ci = {
805                 .rta_error = error,
806                 .rta_id =  id,
807         };
808
809         if (dst) {
810                 ci.rta_lastuse = jiffies_delta_to_clock_t(jiffies - dst->lastuse);
811                 ci.rta_used = dst->__use;
812                 ci.rta_clntref = atomic_read(&dst->__refcnt);
813         }
814         if (expires) {
815                 unsigned long clock;
816
817                 clock = jiffies_to_clock_t(abs(expires));
818                 clock = min_t(unsigned long, clock, INT_MAX);
819                 ci.rta_expires = (expires > 0) ? clock : -clock;
820         }
821         return nla_put(skb, RTA_CACHEINFO, sizeof(ci), &ci);
822 }
823 EXPORT_SYMBOL_GPL(rtnl_put_cacheinfo);
824
825 static void set_operstate(struct net_device *dev, unsigned char transition)
826 {
827         unsigned char operstate = dev->operstate;
828
829         switch (transition) {
830         case IF_OPER_UP:
831                 if ((operstate == IF_OPER_DORMANT ||
832                      operstate == IF_OPER_UNKNOWN) &&
833                     !netif_dormant(dev))
834                         operstate = IF_OPER_UP;
835                 break;
836
837         case IF_OPER_DORMANT:
838                 if (operstate == IF_OPER_UP ||
839                     operstate == IF_OPER_UNKNOWN)
840                         operstate = IF_OPER_DORMANT;
841                 break;
842         }
843
844         if (dev->operstate != operstate) {
845                 write_lock_bh(&dev_base_lock);
846                 dev->operstate = operstate;
847                 write_unlock_bh(&dev_base_lock);
848                 netdev_state_change(dev);
849         }
850 }
851
852 static unsigned int rtnl_dev_get_flags(const struct net_device *dev)
853 {
854         return (dev->flags & ~(IFF_PROMISC | IFF_ALLMULTI)) |
855                (dev->gflags & (IFF_PROMISC | IFF_ALLMULTI));
856 }
857
858 static unsigned int rtnl_dev_combine_flags(const struct net_device *dev,
859                                            const struct ifinfomsg *ifm)
860 {
861         unsigned int flags = ifm->ifi_flags;
862
863         /* bugwards compatibility: ifi_change == 0 is treated as ~0 */
864         if (ifm->ifi_change)
865                 flags = (flags & ifm->ifi_change) |
866                         (rtnl_dev_get_flags(dev) & ~ifm->ifi_change);
867
868         return flags;
869 }
870
871 static void copy_rtnl_link_stats(struct rtnl_link_stats *a,
872                                  const struct rtnl_link_stats64 *b)
873 {
874         a->rx_packets = b->rx_packets;
875         a->tx_packets = b->tx_packets;
876         a->rx_bytes = b->rx_bytes;
877         a->tx_bytes = b->tx_bytes;
878         a->rx_errors = b->rx_errors;
879         a->tx_errors = b->tx_errors;
880         a->rx_dropped = b->rx_dropped;
881         a->tx_dropped = b->tx_dropped;
882
883         a->multicast = b->multicast;
884         a->collisions = b->collisions;
885
886         a->rx_length_errors = b->rx_length_errors;
887         a->rx_over_errors = b->rx_over_errors;
888         a->rx_crc_errors = b->rx_crc_errors;
889         a->rx_frame_errors = b->rx_frame_errors;
890         a->rx_fifo_errors = b->rx_fifo_errors;
891         a->rx_missed_errors = b->rx_missed_errors;
892
893         a->tx_aborted_errors = b->tx_aborted_errors;
894         a->tx_carrier_errors = b->tx_carrier_errors;
895         a->tx_fifo_errors = b->tx_fifo_errors;
896         a->tx_heartbeat_errors = b->tx_heartbeat_errors;
897         a->tx_window_errors = b->tx_window_errors;
898
899         a->rx_compressed = b->rx_compressed;
900         a->tx_compressed = b->tx_compressed;
901
902         a->rx_nohandler = b->rx_nohandler;
903 }
904
905 /* All VF info */
906 static inline int rtnl_vfinfo_size(const struct net_device *dev,
907                                    u32 ext_filter_mask)
908 {
909         if (dev->dev.parent && (ext_filter_mask & RTEXT_FILTER_VF)) {
910                 int num_vfs = dev_num_vf(dev->dev.parent);
911                 size_t size = nla_total_size(0);
912                 size += num_vfs *
913                         (nla_total_size(0) +
914                          nla_total_size(sizeof(struct ifla_vf_mac)) +
915                          nla_total_size(sizeof(struct ifla_vf_broadcast)) +
916                          nla_total_size(sizeof(struct ifla_vf_vlan)) +
917                          nla_total_size(0) + /* nest IFLA_VF_VLAN_LIST */
918                          nla_total_size(MAX_VLAN_LIST_LEN *
919                                         sizeof(struct ifla_vf_vlan_info)) +
920                          nla_total_size(sizeof(struct ifla_vf_spoofchk)) +
921                          nla_total_size(sizeof(struct ifla_vf_tx_rate)) +
922                          nla_total_size(sizeof(struct ifla_vf_rate)) +
923                          nla_total_size(sizeof(struct ifla_vf_link_state)) +
924                          nla_total_size(sizeof(struct ifla_vf_rss_query_en)) +
925                          nla_total_size(0) + /* nest IFLA_VF_STATS */
926                          /* IFLA_VF_STATS_RX_PACKETS */
927                          nla_total_size_64bit(sizeof(__u64)) +
928                          /* IFLA_VF_STATS_TX_PACKETS */
929                          nla_total_size_64bit(sizeof(__u64)) +
930                          /* IFLA_VF_STATS_RX_BYTES */
931                          nla_total_size_64bit(sizeof(__u64)) +
932                          /* IFLA_VF_STATS_TX_BYTES */
933                          nla_total_size_64bit(sizeof(__u64)) +
934                          /* IFLA_VF_STATS_BROADCAST */
935                          nla_total_size_64bit(sizeof(__u64)) +
936                          /* IFLA_VF_STATS_MULTICAST */
937                          nla_total_size_64bit(sizeof(__u64)) +
938                          /* IFLA_VF_STATS_RX_DROPPED */
939                          nla_total_size_64bit(sizeof(__u64)) +
940                          /* IFLA_VF_STATS_TX_DROPPED */
941                          nla_total_size_64bit(sizeof(__u64)) +
942                          nla_total_size(sizeof(struct ifla_vf_trust)));
943                 return size;
944         } else
945                 return 0;
946 }
947
948 static size_t rtnl_port_size(const struct net_device *dev,
949                              u32 ext_filter_mask)
950 {
951         size_t port_size = nla_total_size(4)            /* PORT_VF */
952                 + nla_total_size(PORT_PROFILE_MAX)      /* PORT_PROFILE */
953                 + nla_total_size(PORT_UUID_MAX)         /* PORT_INSTANCE_UUID */
954                 + nla_total_size(PORT_UUID_MAX)         /* PORT_HOST_UUID */
955                 + nla_total_size(1)                     /* PROT_VDP_REQUEST */
956                 + nla_total_size(2);                    /* PORT_VDP_RESPONSE */
957         size_t vf_ports_size = nla_total_size(sizeof(struct nlattr));
958         size_t vf_port_size = nla_total_size(sizeof(struct nlattr))
959                 + port_size;
960         size_t port_self_size = nla_total_size(sizeof(struct nlattr))
961                 + port_size;
962
963         if (!dev->netdev_ops->ndo_get_vf_port || !dev->dev.parent ||
964             !(ext_filter_mask & RTEXT_FILTER_VF))
965                 return 0;
966         if (dev_num_vf(dev->dev.parent))
967                 return port_self_size + vf_ports_size +
968                         vf_port_size * dev_num_vf(dev->dev.parent);
969         else
970                 return port_self_size;
971 }
972
973 static size_t rtnl_xdp_size(void)
974 {
975         size_t xdp_size = nla_total_size(0) +   /* nest IFLA_XDP */
976                           nla_total_size(1) +   /* XDP_ATTACHED */
977                           nla_total_size(4) +   /* XDP_PROG_ID (or 1st mode) */
978                           nla_total_size(4);    /* XDP_<mode>_PROG_ID */
979
980         return xdp_size;
981 }
982
983 static noinline size_t if_nlmsg_size(const struct net_device *dev,
984                                      u32 ext_filter_mask)
985 {
986         return NLMSG_ALIGN(sizeof(struct ifinfomsg))
987                + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
988                + nla_total_size(IFALIASZ) /* IFLA_IFALIAS */
989                + nla_total_size(IFNAMSIZ) /* IFLA_QDISC */
990                + nla_total_size_64bit(sizeof(struct rtnl_link_ifmap))
991                + nla_total_size(sizeof(struct rtnl_link_stats))
992                + nla_total_size_64bit(sizeof(struct rtnl_link_stats64))
993                + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
994                + nla_total_size(MAX_ADDR_LEN) /* IFLA_BROADCAST */
995                + nla_total_size(4) /* IFLA_TXQLEN */
996                + nla_total_size(4) /* IFLA_WEIGHT */
997                + nla_total_size(4) /* IFLA_MTU */
998                + nla_total_size(4) /* IFLA_LINK */
999                + nla_total_size(4) /* IFLA_MASTER */
1000                + nla_total_size(1) /* IFLA_CARRIER */
1001                + nla_total_size(4) /* IFLA_PROMISCUITY */
1002                + nla_total_size(4) /* IFLA_NUM_TX_QUEUES */
1003                + nla_total_size(4) /* IFLA_NUM_RX_QUEUES */
1004                + nla_total_size(4) /* IFLA_GSO_MAX_SEGS */
1005                + nla_total_size(4) /* IFLA_GSO_MAX_SIZE */
1006                + nla_total_size(1) /* IFLA_OPERSTATE */
1007                + nla_total_size(1) /* IFLA_LINKMODE */
1008                + nla_total_size(4) /* IFLA_CARRIER_CHANGES */
1009                + nla_total_size(4) /* IFLA_LINK_NETNSID */
1010                + nla_total_size(4) /* IFLA_GROUP */
1011                + nla_total_size(ext_filter_mask
1012                                 & RTEXT_FILTER_VF ? 4 : 0) /* IFLA_NUM_VF */
1013                + rtnl_vfinfo_size(dev, ext_filter_mask) /* IFLA_VFINFO_LIST */
1014                + rtnl_port_size(dev, ext_filter_mask) /* IFLA_VF_PORTS + IFLA_PORT_SELF */
1015                + rtnl_link_get_size(dev) /* IFLA_LINKINFO */
1016                + rtnl_link_get_af_size(dev, ext_filter_mask) /* IFLA_AF_SPEC */
1017                + nla_total_size(MAX_PHYS_ITEM_ID_LEN) /* IFLA_PHYS_PORT_ID */
1018                + nla_total_size(MAX_PHYS_ITEM_ID_LEN) /* IFLA_PHYS_SWITCH_ID */
1019                + nla_total_size(IFNAMSIZ) /* IFLA_PHYS_PORT_NAME */
1020                + rtnl_xdp_size() /* IFLA_XDP */
1021                + nla_total_size(4)  /* IFLA_EVENT */
1022                + nla_total_size(4)  /* IFLA_NEW_NETNSID */
1023                + nla_total_size(4)  /* IFLA_NEW_IFINDEX */
1024                + nla_total_size(1)  /* IFLA_PROTO_DOWN */
1025                + nla_total_size(4)  /* IFLA_TARGET_NETNSID */
1026                + nla_total_size(4)  /* IFLA_CARRIER_UP_COUNT */
1027                + nla_total_size(4)  /* IFLA_CARRIER_DOWN_COUNT */
1028                + nla_total_size(4)  /* IFLA_MIN_MTU */
1029                + nla_total_size(4)  /* IFLA_MAX_MTU */
1030                + 0;
1031 }
1032
1033 static int rtnl_vf_ports_fill(struct sk_buff *skb, struct net_device *dev)
1034 {
1035         struct nlattr *vf_ports;
1036         struct nlattr *vf_port;
1037         int vf;
1038         int err;
1039
1040         vf_ports = nla_nest_start_noflag(skb, IFLA_VF_PORTS);
1041         if (!vf_ports)
1042                 return -EMSGSIZE;
1043
1044         for (vf = 0; vf < dev_num_vf(dev->dev.parent); vf++) {
1045                 vf_port = nla_nest_start_noflag(skb, IFLA_VF_PORT);
1046                 if (!vf_port)
1047                         goto nla_put_failure;
1048                 if (nla_put_u32(skb, IFLA_PORT_VF, vf))
1049                         goto nla_put_failure;
1050                 err = dev->netdev_ops->ndo_get_vf_port(dev, vf, skb);
1051                 if (err == -EMSGSIZE)
1052                         goto nla_put_failure;
1053                 if (err) {
1054                         nla_nest_cancel(skb, vf_port);
1055                         continue;
1056                 }
1057                 nla_nest_end(skb, vf_port);
1058         }
1059
1060         nla_nest_end(skb, vf_ports);
1061
1062         return 0;
1063
1064 nla_put_failure:
1065         nla_nest_cancel(skb, vf_ports);
1066         return -EMSGSIZE;
1067 }
1068
1069 static int rtnl_port_self_fill(struct sk_buff *skb, struct net_device *dev)
1070 {
1071         struct nlattr *port_self;
1072         int err;
1073
1074         port_self = nla_nest_start_noflag(skb, IFLA_PORT_SELF);
1075         if (!port_self)
1076                 return -EMSGSIZE;
1077
1078         err = dev->netdev_ops->ndo_get_vf_port(dev, PORT_SELF_VF, skb);
1079         if (err) {
1080                 nla_nest_cancel(skb, port_self);
1081                 return (err == -EMSGSIZE) ? err : 0;
1082         }
1083
1084         nla_nest_end(skb, port_self);
1085
1086         return 0;
1087 }
1088
1089 static int rtnl_port_fill(struct sk_buff *skb, struct net_device *dev,
1090                           u32 ext_filter_mask)
1091 {
1092         int err;
1093
1094         if (!dev->netdev_ops->ndo_get_vf_port || !dev->dev.parent ||
1095             !(ext_filter_mask & RTEXT_FILTER_VF))
1096                 return 0;
1097
1098         err = rtnl_port_self_fill(skb, dev);
1099         if (err)
1100                 return err;
1101
1102         if (dev_num_vf(dev->dev.parent)) {
1103                 err = rtnl_vf_ports_fill(skb, dev);
1104                 if (err)
1105                         return err;
1106         }
1107
1108         return 0;
1109 }
1110
1111 static int rtnl_phys_port_id_fill(struct sk_buff *skb, struct net_device *dev)
1112 {
1113         int err;
1114         struct netdev_phys_item_id ppid;
1115
1116         err = dev_get_phys_port_id(dev, &ppid);
1117         if (err) {
1118                 if (err == -EOPNOTSUPP)
1119                         return 0;
1120                 return err;
1121         }
1122
1123         if (nla_put(skb, IFLA_PHYS_PORT_ID, ppid.id_len, ppid.id))
1124                 return -EMSGSIZE;
1125
1126         return 0;
1127 }
1128
1129 static int rtnl_phys_port_name_fill(struct sk_buff *skb, struct net_device *dev)
1130 {
1131         char name[IFNAMSIZ];
1132         int err;
1133
1134         err = dev_get_phys_port_name(dev, name, sizeof(name));
1135         if (err) {
1136                 if (err == -EOPNOTSUPP)
1137                         return 0;
1138                 return err;
1139         }
1140
1141         if (nla_put_string(skb, IFLA_PHYS_PORT_NAME, name))
1142                 return -EMSGSIZE;
1143
1144         return 0;
1145 }
1146
1147 static int rtnl_phys_switch_id_fill(struct sk_buff *skb, struct net_device *dev)
1148 {
1149         struct netdev_phys_item_id ppid = { };
1150         int err;
1151
1152         err = dev_get_port_parent_id(dev, &ppid, false);
1153         if (err) {
1154                 if (err == -EOPNOTSUPP)
1155                         return 0;
1156                 return err;
1157         }
1158
1159         if (nla_put(skb, IFLA_PHYS_SWITCH_ID, ppid.id_len, ppid.id))
1160                 return -EMSGSIZE;
1161
1162         return 0;
1163 }
1164
1165 static noinline_for_stack int rtnl_fill_stats(struct sk_buff *skb,
1166                                               struct net_device *dev)
1167 {
1168         struct rtnl_link_stats64 *sp;
1169         struct nlattr *attr;
1170
1171         attr = nla_reserve_64bit(skb, IFLA_STATS64,
1172                                  sizeof(struct rtnl_link_stats64), IFLA_PAD);
1173         if (!attr)
1174                 return -EMSGSIZE;
1175
1176         sp = nla_data(attr);
1177         dev_get_stats(dev, sp);
1178
1179         attr = nla_reserve(skb, IFLA_STATS,
1180                            sizeof(struct rtnl_link_stats));
1181         if (!attr)
1182                 return -EMSGSIZE;
1183
1184         copy_rtnl_link_stats(nla_data(attr), sp);
1185
1186         return 0;
1187 }
1188
1189 static noinline_for_stack int rtnl_fill_vfinfo(struct sk_buff *skb,
1190                                                struct net_device *dev,
1191                                                int vfs_num,
1192                                                struct nlattr *vfinfo)
1193 {
1194         struct ifla_vf_rss_query_en vf_rss_query_en;
1195         struct nlattr *vf, *vfstats, *vfvlanlist;
1196         struct ifla_vf_link_state vf_linkstate;
1197         struct ifla_vf_vlan_info vf_vlan_info;
1198         struct ifla_vf_spoofchk vf_spoofchk;
1199         struct ifla_vf_tx_rate vf_tx_rate;
1200         struct ifla_vf_stats vf_stats;
1201         struct ifla_vf_trust vf_trust;
1202         struct ifla_vf_vlan vf_vlan;
1203         struct ifla_vf_rate vf_rate;
1204         struct ifla_vf_mac vf_mac;
1205         struct ifla_vf_broadcast vf_broadcast;
1206         struct ifla_vf_info ivi;
1207
1208         memset(&ivi, 0, sizeof(ivi));
1209
1210         /* Not all SR-IOV capable drivers support the
1211          * spoofcheck and "RSS query enable" query.  Preset to
1212          * -1 so the user space tool can detect that the driver
1213          * didn't report anything.
1214          */
1215         ivi.spoofchk = -1;
1216         ivi.rss_query_en = -1;
1217         ivi.trusted = -1;
1218         /* The default value for VF link state is "auto"
1219          * IFLA_VF_LINK_STATE_AUTO which equals zero
1220          */
1221         ivi.linkstate = 0;
1222         /* VLAN Protocol by default is 802.1Q */
1223         ivi.vlan_proto = htons(ETH_P_8021Q);
1224         if (dev->netdev_ops->ndo_get_vf_config(dev, vfs_num, &ivi))
1225                 return 0;
1226
1227         memset(&vf_vlan_info, 0, sizeof(vf_vlan_info));
1228
1229         vf_mac.vf =
1230                 vf_vlan.vf =
1231                 vf_vlan_info.vf =
1232                 vf_rate.vf =
1233                 vf_tx_rate.vf =
1234                 vf_spoofchk.vf =
1235                 vf_linkstate.vf =
1236                 vf_rss_query_en.vf =
1237                 vf_trust.vf = ivi.vf;
1238
1239         memcpy(vf_mac.mac, ivi.mac, sizeof(ivi.mac));
1240         memcpy(vf_broadcast.broadcast, dev->broadcast, dev->addr_len);
1241         vf_vlan.vlan = ivi.vlan;
1242         vf_vlan.qos = ivi.qos;
1243         vf_vlan_info.vlan = ivi.vlan;
1244         vf_vlan_info.qos = ivi.qos;
1245         vf_vlan_info.vlan_proto = ivi.vlan_proto;
1246         vf_tx_rate.rate = ivi.max_tx_rate;
1247         vf_rate.min_tx_rate = ivi.min_tx_rate;
1248         vf_rate.max_tx_rate = ivi.max_tx_rate;
1249         vf_spoofchk.setting = ivi.spoofchk;
1250         vf_linkstate.link_state = ivi.linkstate;
1251         vf_rss_query_en.setting = ivi.rss_query_en;
1252         vf_trust.setting = ivi.trusted;
1253         vf = nla_nest_start_noflag(skb, IFLA_VF_INFO);
1254         if (!vf)
1255                 goto nla_put_vfinfo_failure;
1256         if (nla_put(skb, IFLA_VF_MAC, sizeof(vf_mac), &vf_mac) ||
1257             nla_put(skb, IFLA_VF_BROADCAST, sizeof(vf_broadcast), &vf_broadcast) ||
1258             nla_put(skb, IFLA_VF_VLAN, sizeof(vf_vlan), &vf_vlan) ||
1259             nla_put(skb, IFLA_VF_RATE, sizeof(vf_rate),
1260                     &vf_rate) ||
1261             nla_put(skb, IFLA_VF_TX_RATE, sizeof(vf_tx_rate),
1262                     &vf_tx_rate) ||
1263             nla_put(skb, IFLA_VF_SPOOFCHK, sizeof(vf_spoofchk),
1264                     &vf_spoofchk) ||
1265             nla_put(skb, IFLA_VF_LINK_STATE, sizeof(vf_linkstate),
1266                     &vf_linkstate) ||
1267             nla_put(skb, IFLA_VF_RSS_QUERY_EN,
1268                     sizeof(vf_rss_query_en),
1269                     &vf_rss_query_en) ||
1270             nla_put(skb, IFLA_VF_TRUST,
1271                     sizeof(vf_trust), &vf_trust))
1272                 goto nla_put_vf_failure;
1273         vfvlanlist = nla_nest_start_noflag(skb, IFLA_VF_VLAN_LIST);
1274         if (!vfvlanlist)
1275                 goto nla_put_vf_failure;
1276         if (nla_put(skb, IFLA_VF_VLAN_INFO, sizeof(vf_vlan_info),
1277                     &vf_vlan_info)) {
1278                 nla_nest_cancel(skb, vfvlanlist);
1279                 goto nla_put_vf_failure;
1280         }
1281         nla_nest_end(skb, vfvlanlist);
1282         memset(&vf_stats, 0, sizeof(vf_stats));
1283         if (dev->netdev_ops->ndo_get_vf_stats)
1284                 dev->netdev_ops->ndo_get_vf_stats(dev, vfs_num,
1285                                                 &vf_stats);
1286         vfstats = nla_nest_start_noflag(skb, IFLA_VF_STATS);
1287         if (!vfstats)
1288                 goto nla_put_vf_failure;
1289         if (nla_put_u64_64bit(skb, IFLA_VF_STATS_RX_PACKETS,
1290                               vf_stats.rx_packets, IFLA_VF_STATS_PAD) ||
1291             nla_put_u64_64bit(skb, IFLA_VF_STATS_TX_PACKETS,
1292                               vf_stats.tx_packets, IFLA_VF_STATS_PAD) ||
1293             nla_put_u64_64bit(skb, IFLA_VF_STATS_RX_BYTES,
1294                               vf_stats.rx_bytes, IFLA_VF_STATS_PAD) ||
1295             nla_put_u64_64bit(skb, IFLA_VF_STATS_TX_BYTES,
1296                               vf_stats.tx_bytes, IFLA_VF_STATS_PAD) ||
1297             nla_put_u64_64bit(skb, IFLA_VF_STATS_BROADCAST,
1298                               vf_stats.broadcast, IFLA_VF_STATS_PAD) ||
1299             nla_put_u64_64bit(skb, IFLA_VF_STATS_MULTICAST,
1300                               vf_stats.multicast, IFLA_VF_STATS_PAD) ||
1301             nla_put_u64_64bit(skb, IFLA_VF_STATS_RX_DROPPED,
1302                               vf_stats.rx_dropped, IFLA_VF_STATS_PAD) ||
1303             nla_put_u64_64bit(skb, IFLA_VF_STATS_TX_DROPPED,
1304                               vf_stats.tx_dropped, IFLA_VF_STATS_PAD)) {
1305                 nla_nest_cancel(skb, vfstats);
1306                 goto nla_put_vf_failure;
1307         }
1308         nla_nest_end(skb, vfstats);
1309         nla_nest_end(skb, vf);
1310         return 0;
1311
1312 nla_put_vf_failure:
1313         nla_nest_cancel(skb, vf);
1314 nla_put_vfinfo_failure:
1315         nla_nest_cancel(skb, vfinfo);
1316         return -EMSGSIZE;
1317 }
1318
1319 static noinline_for_stack int rtnl_fill_vf(struct sk_buff *skb,
1320                                            struct net_device *dev,
1321                                            u32 ext_filter_mask)
1322 {
1323         struct nlattr *vfinfo;
1324         int i, num_vfs;
1325
1326         if (!dev->dev.parent || ((ext_filter_mask & RTEXT_FILTER_VF) == 0))
1327                 return 0;
1328
1329         num_vfs = dev_num_vf(dev->dev.parent);
1330         if (nla_put_u32(skb, IFLA_NUM_VF, num_vfs))
1331                 return -EMSGSIZE;
1332
1333         if (!dev->netdev_ops->ndo_get_vf_config)
1334                 return 0;
1335
1336         vfinfo = nla_nest_start_noflag(skb, IFLA_VFINFO_LIST);
1337         if (!vfinfo)
1338                 return -EMSGSIZE;
1339
1340         for (i = 0; i < num_vfs; i++) {
1341                 if (rtnl_fill_vfinfo(skb, dev, i, vfinfo))
1342                         return -EMSGSIZE;
1343         }
1344
1345         nla_nest_end(skb, vfinfo);
1346         return 0;
1347 }
1348
1349 static int rtnl_fill_link_ifmap(struct sk_buff *skb, struct net_device *dev)
1350 {
1351         struct rtnl_link_ifmap map;
1352
1353         memset(&map, 0, sizeof(map));
1354         map.mem_start   = dev->mem_start;
1355         map.mem_end     = dev->mem_end;
1356         map.base_addr   = dev->base_addr;
1357         map.irq         = dev->irq;
1358         map.dma         = dev->dma;
1359         map.port        = dev->if_port;
1360
1361         if (nla_put_64bit(skb, IFLA_MAP, sizeof(map), &map, IFLA_PAD))
1362                 return -EMSGSIZE;
1363
1364         return 0;
1365 }
1366
1367 static u32 rtnl_xdp_prog_skb(struct net_device *dev)
1368 {
1369         const struct bpf_prog *generic_xdp_prog;
1370
1371         ASSERT_RTNL();
1372
1373         generic_xdp_prog = rtnl_dereference(dev->xdp_prog);
1374         if (!generic_xdp_prog)
1375                 return 0;
1376         return generic_xdp_prog->aux->id;
1377 }
1378
1379 static u32 rtnl_xdp_prog_drv(struct net_device *dev)
1380 {
1381         return __dev_xdp_query(dev, dev->netdev_ops->ndo_bpf, XDP_QUERY_PROG);
1382 }
1383
1384 static u32 rtnl_xdp_prog_hw(struct net_device *dev)
1385 {
1386         return __dev_xdp_query(dev, dev->netdev_ops->ndo_bpf,
1387                                XDP_QUERY_PROG_HW);
1388 }
1389
1390 static int rtnl_xdp_report_one(struct sk_buff *skb, struct net_device *dev,
1391                                u32 *prog_id, u8 *mode, u8 tgt_mode, u32 attr,
1392                                u32 (*get_prog_id)(struct net_device *dev))
1393 {
1394         u32 curr_id;
1395         int err;
1396
1397         curr_id = get_prog_id(dev);
1398         if (!curr_id)
1399                 return 0;
1400
1401         *prog_id = curr_id;
1402         err = nla_put_u32(skb, attr, curr_id);
1403         if (err)
1404                 return err;
1405
1406         if (*mode != XDP_ATTACHED_NONE)
1407                 *mode = XDP_ATTACHED_MULTI;
1408         else
1409                 *mode = tgt_mode;
1410
1411         return 0;
1412 }
1413
1414 static int rtnl_xdp_fill(struct sk_buff *skb, struct net_device *dev)
1415 {
1416         struct nlattr *xdp;
1417         u32 prog_id;
1418         int err;
1419         u8 mode;
1420
1421         xdp = nla_nest_start_noflag(skb, IFLA_XDP);
1422         if (!xdp)
1423                 return -EMSGSIZE;
1424
1425         prog_id = 0;
1426         mode = XDP_ATTACHED_NONE;
1427         err = rtnl_xdp_report_one(skb, dev, &prog_id, &mode, XDP_ATTACHED_SKB,
1428                                   IFLA_XDP_SKB_PROG_ID, rtnl_xdp_prog_skb);
1429         if (err)
1430                 goto err_cancel;
1431         err = rtnl_xdp_report_one(skb, dev, &prog_id, &mode, XDP_ATTACHED_DRV,
1432                                   IFLA_XDP_DRV_PROG_ID, rtnl_xdp_prog_drv);
1433         if (err)
1434                 goto err_cancel;
1435         err = rtnl_xdp_report_one(skb, dev, &prog_id, &mode, XDP_ATTACHED_HW,
1436                                   IFLA_XDP_HW_PROG_ID, rtnl_xdp_prog_hw);
1437         if (err)
1438                 goto err_cancel;
1439
1440         err = nla_put_u8(skb, IFLA_XDP_ATTACHED, mode);
1441         if (err)
1442                 goto err_cancel;
1443
1444         if (prog_id && mode != XDP_ATTACHED_MULTI) {
1445                 err = nla_put_u32(skb, IFLA_XDP_PROG_ID, prog_id);
1446                 if (err)
1447                         goto err_cancel;
1448         }
1449
1450         nla_nest_end(skb, xdp);
1451         return 0;
1452
1453 err_cancel:
1454         nla_nest_cancel(skb, xdp);
1455         return err;
1456 }
1457
1458 static u32 rtnl_get_event(unsigned long event)
1459 {
1460         u32 rtnl_event_type = IFLA_EVENT_NONE;
1461
1462         switch (event) {
1463         case NETDEV_REBOOT:
1464                 rtnl_event_type = IFLA_EVENT_REBOOT;
1465                 break;
1466         case NETDEV_FEAT_CHANGE:
1467                 rtnl_event_type = IFLA_EVENT_FEATURES;
1468                 break;
1469         case NETDEV_BONDING_FAILOVER:
1470                 rtnl_event_type = IFLA_EVENT_BONDING_FAILOVER;
1471                 break;
1472         case NETDEV_NOTIFY_PEERS:
1473                 rtnl_event_type = IFLA_EVENT_NOTIFY_PEERS;
1474                 break;
1475         case NETDEV_RESEND_IGMP:
1476                 rtnl_event_type = IFLA_EVENT_IGMP_RESEND;
1477                 break;
1478         case NETDEV_CHANGEINFODATA:
1479                 rtnl_event_type = IFLA_EVENT_BONDING_OPTIONS;
1480                 break;
1481         default:
1482                 break;
1483         }
1484
1485         return rtnl_event_type;
1486 }
1487
1488 static int put_master_ifindex(struct sk_buff *skb, struct net_device *dev)
1489 {
1490         const struct net_device *upper_dev;
1491         int ret = 0;
1492
1493         rcu_read_lock();
1494
1495         upper_dev = netdev_master_upper_dev_get_rcu(dev);
1496         if (upper_dev)
1497                 ret = nla_put_u32(skb, IFLA_MASTER, upper_dev->ifindex);
1498
1499         rcu_read_unlock();
1500         return ret;
1501 }
1502
1503 static int nla_put_iflink(struct sk_buff *skb, const struct net_device *dev,
1504                           bool force)
1505 {
1506         int ifindex = dev_get_iflink(dev);
1507
1508         if (force || dev->ifindex != ifindex)
1509                 return nla_put_u32(skb, IFLA_LINK, ifindex);
1510
1511         return 0;
1512 }
1513
1514 static noinline_for_stack int nla_put_ifalias(struct sk_buff *skb,
1515                                               struct net_device *dev)
1516 {
1517         char buf[IFALIASZ];
1518         int ret;
1519
1520         ret = dev_get_alias(dev, buf, sizeof(buf));
1521         return ret > 0 ? nla_put_string(skb, IFLA_IFALIAS, buf) : 0;
1522 }
1523
1524 static int rtnl_fill_link_netnsid(struct sk_buff *skb,
1525                                   const struct net_device *dev,
1526                                   struct net *src_net, gfp_t gfp)
1527 {
1528         bool put_iflink = false;
1529
1530         if (dev->rtnl_link_ops && dev->rtnl_link_ops->get_link_net) {
1531                 struct net *link_net = dev->rtnl_link_ops->get_link_net(dev);
1532
1533                 if (!net_eq(dev_net(dev), link_net)) {
1534                         int id = peernet2id_alloc(src_net, link_net, gfp);
1535
1536                         if (nla_put_s32(skb, IFLA_LINK_NETNSID, id))
1537                                 return -EMSGSIZE;
1538
1539                         put_iflink = true;
1540                 }
1541         }
1542
1543         return nla_put_iflink(skb, dev, put_iflink);
1544 }
1545
1546 static int rtnl_fill_link_af(struct sk_buff *skb,
1547                              const struct net_device *dev,
1548                              u32 ext_filter_mask)
1549 {
1550         const struct rtnl_af_ops *af_ops;
1551         struct nlattr *af_spec;
1552
1553         af_spec = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
1554         if (!af_spec)
1555                 return -EMSGSIZE;
1556
1557         list_for_each_entry_rcu(af_ops, &rtnl_af_ops, list) {
1558                 struct nlattr *af;
1559                 int err;
1560
1561                 if (!af_ops->fill_link_af)
1562                         continue;
1563
1564                 af = nla_nest_start_noflag(skb, af_ops->family);
1565                 if (!af)
1566                         return -EMSGSIZE;
1567
1568                 err = af_ops->fill_link_af(skb, dev, ext_filter_mask);
1569                 /*
1570                  * Caller may return ENODATA to indicate that there
1571                  * was no data to be dumped. This is not an error, it
1572                  * means we should trim the attribute header and
1573                  * continue.
1574                  */
1575                 if (err == -ENODATA)
1576                         nla_nest_cancel(skb, af);
1577                 else if (err < 0)
1578                         return -EMSGSIZE;
1579
1580                 nla_nest_end(skb, af);
1581         }
1582
1583         nla_nest_end(skb, af_spec);
1584         return 0;
1585 }
1586
1587 static int rtnl_fill_ifinfo(struct sk_buff *skb,
1588                             struct net_device *dev, struct net *src_net,
1589                             int type, u32 pid, u32 seq, u32 change,
1590                             unsigned int flags, u32 ext_filter_mask,
1591                             u32 event, int *new_nsid, int new_ifindex,
1592                             int tgt_netnsid, gfp_t gfp)
1593 {
1594         struct ifinfomsg *ifm;
1595         struct nlmsghdr *nlh;
1596
1597         ASSERT_RTNL();
1598         nlh = nlmsg_put(skb, pid, seq, type, sizeof(*ifm), flags);
1599         if (nlh == NULL)
1600                 return -EMSGSIZE;
1601
1602         ifm = nlmsg_data(nlh);
1603         ifm->ifi_family = AF_UNSPEC;
1604         ifm->__ifi_pad = 0;
1605         ifm->ifi_type = dev->type;
1606         ifm->ifi_index = dev->ifindex;
1607         ifm->ifi_flags = dev_get_flags(dev);
1608         ifm->ifi_change = change;
1609
1610         if (tgt_netnsid >= 0 && nla_put_s32(skb, IFLA_TARGET_NETNSID, tgt_netnsid))
1611                 goto nla_put_failure;
1612
1613         if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
1614             nla_put_u32(skb, IFLA_TXQLEN, dev->tx_queue_len) ||
1615             nla_put_u8(skb, IFLA_OPERSTATE,
1616                        netif_running(dev) ? dev->operstate : IF_OPER_DOWN) ||
1617             nla_put_u8(skb, IFLA_LINKMODE, dev->link_mode) ||
1618             nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
1619             nla_put_u32(skb, IFLA_MIN_MTU, dev->min_mtu) ||
1620             nla_put_u32(skb, IFLA_MAX_MTU, dev->max_mtu) ||
1621             nla_put_u32(skb, IFLA_GROUP, dev->group) ||
1622             nla_put_u32(skb, IFLA_PROMISCUITY, dev->promiscuity) ||
1623             nla_put_u32(skb, IFLA_NUM_TX_QUEUES, dev->num_tx_queues) ||
1624             nla_put_u32(skb, IFLA_GSO_MAX_SEGS, dev->gso_max_segs) ||
1625             nla_put_u32(skb, IFLA_GSO_MAX_SIZE, dev->gso_max_size) ||
1626 #ifdef CONFIG_RPS
1627             nla_put_u32(skb, IFLA_NUM_RX_QUEUES, dev->num_rx_queues) ||
1628 #endif
1629             put_master_ifindex(skb, dev) ||
1630             nla_put_u8(skb, IFLA_CARRIER, netif_carrier_ok(dev)) ||
1631             (dev->qdisc &&
1632              nla_put_string(skb, IFLA_QDISC, dev->qdisc->ops->id)) ||
1633             nla_put_ifalias(skb, dev) ||
1634             nla_put_u32(skb, IFLA_CARRIER_CHANGES,
1635                         atomic_read(&dev->carrier_up_count) +
1636                         atomic_read(&dev->carrier_down_count)) ||
1637             nla_put_u8(skb, IFLA_PROTO_DOWN, dev->proto_down) ||
1638             nla_put_u32(skb, IFLA_CARRIER_UP_COUNT,
1639                         atomic_read(&dev->carrier_up_count)) ||
1640             nla_put_u32(skb, IFLA_CARRIER_DOWN_COUNT,
1641                         atomic_read(&dev->carrier_down_count)))
1642                 goto nla_put_failure;
1643
1644         if (event != IFLA_EVENT_NONE) {
1645                 if (nla_put_u32(skb, IFLA_EVENT, event))
1646                         goto nla_put_failure;
1647         }
1648
1649         if (rtnl_fill_link_ifmap(skb, dev))
1650                 goto nla_put_failure;
1651
1652         if (dev->addr_len) {
1653                 if (nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr) ||
1654                     nla_put(skb, IFLA_BROADCAST, dev->addr_len, dev->broadcast))
1655                         goto nla_put_failure;
1656         }
1657
1658         if (rtnl_phys_port_id_fill(skb, dev))
1659                 goto nla_put_failure;
1660
1661         if (rtnl_phys_port_name_fill(skb, dev))
1662                 goto nla_put_failure;
1663
1664         if (rtnl_phys_switch_id_fill(skb, dev))
1665                 goto nla_put_failure;
1666
1667         if (rtnl_fill_stats(skb, dev))
1668                 goto nla_put_failure;
1669
1670         if (rtnl_fill_vf(skb, dev, ext_filter_mask))
1671                 goto nla_put_failure;
1672
1673         if (rtnl_port_fill(skb, dev, ext_filter_mask))
1674                 goto nla_put_failure;
1675
1676         if (rtnl_xdp_fill(skb, dev))
1677                 goto nla_put_failure;
1678
1679         if (dev->rtnl_link_ops || rtnl_have_link_slave_info(dev)) {
1680                 if (rtnl_link_fill(skb, dev) < 0)
1681                         goto nla_put_failure;
1682         }
1683
1684         if (rtnl_fill_link_netnsid(skb, dev, src_net, gfp))
1685                 goto nla_put_failure;
1686
1687         if (new_nsid &&
1688             nla_put_s32(skb, IFLA_NEW_NETNSID, *new_nsid) < 0)
1689                 goto nla_put_failure;
1690         if (new_ifindex &&
1691             nla_put_s32(skb, IFLA_NEW_IFINDEX, new_ifindex) < 0)
1692                 goto nla_put_failure;
1693
1694
1695         rcu_read_lock();
1696         if (rtnl_fill_link_af(skb, dev, ext_filter_mask))
1697                 goto nla_put_failure_rcu;
1698         rcu_read_unlock();
1699
1700         nlmsg_end(skb, nlh);
1701         return 0;
1702
1703 nla_put_failure_rcu:
1704         rcu_read_unlock();
1705 nla_put_failure:
1706         nlmsg_cancel(skb, nlh);
1707         return -EMSGSIZE;
1708 }
1709
1710 static const struct nla_policy ifla_policy[IFLA_MAX+1] = {
1711         [IFLA_IFNAME]           = { .type = NLA_STRING, .len = IFNAMSIZ-1 },
1712         [IFLA_ADDRESS]          = { .type = NLA_BINARY, .len = MAX_ADDR_LEN },
1713         [IFLA_BROADCAST]        = { .type = NLA_BINARY, .len = MAX_ADDR_LEN },
1714         [IFLA_MAP]              = { .len = sizeof(struct rtnl_link_ifmap) },
1715         [IFLA_MTU]              = { .type = NLA_U32 },
1716         [IFLA_LINK]             = { .type = NLA_U32 },
1717         [IFLA_MASTER]           = { .type = NLA_U32 },
1718         [IFLA_CARRIER]          = { .type = NLA_U8 },
1719         [IFLA_TXQLEN]           = { .type = NLA_U32 },
1720         [IFLA_WEIGHT]           = { .type = NLA_U32 },
1721         [IFLA_OPERSTATE]        = { .type = NLA_U8 },
1722         [IFLA_LINKMODE]         = { .type = NLA_U8 },
1723         [IFLA_LINKINFO]         = { .type = NLA_NESTED },
1724         [IFLA_NET_NS_PID]       = { .type = NLA_U32 },
1725         [IFLA_NET_NS_FD]        = { .type = NLA_U32 },
1726         /* IFLA_IFALIAS is a string, but policy is set to NLA_BINARY to
1727          * allow 0-length string (needed to remove an alias).
1728          */
1729         [IFLA_IFALIAS]          = { .type = NLA_BINARY, .len = IFALIASZ - 1 },
1730         [IFLA_VFINFO_LIST]      = {. type = NLA_NESTED },
1731         [IFLA_VF_PORTS]         = { .type = NLA_NESTED },
1732         [IFLA_PORT_SELF]        = { .type = NLA_NESTED },
1733         [IFLA_AF_SPEC]          = { .type = NLA_NESTED },
1734         [IFLA_EXT_MASK]         = { .type = NLA_U32 },
1735         [IFLA_PROMISCUITY]      = { .type = NLA_U32 },
1736         [IFLA_NUM_TX_QUEUES]    = { .type = NLA_U32 },
1737         [IFLA_NUM_RX_QUEUES]    = { .type = NLA_U32 },
1738         [IFLA_GSO_MAX_SEGS]     = { .type = NLA_U32 },
1739         [IFLA_GSO_MAX_SIZE]     = { .type = NLA_U32 },
1740         [IFLA_PHYS_PORT_ID]     = { .type = NLA_BINARY, .len = MAX_PHYS_ITEM_ID_LEN },
1741         [IFLA_CARRIER_CHANGES]  = { .type = NLA_U32 },  /* ignored */
1742         [IFLA_PHYS_SWITCH_ID]   = { .type = NLA_BINARY, .len = MAX_PHYS_ITEM_ID_LEN },
1743         [IFLA_LINK_NETNSID]     = { .type = NLA_S32 },
1744         [IFLA_PROTO_DOWN]       = { .type = NLA_U8 },
1745         [IFLA_XDP]              = { .type = NLA_NESTED },
1746         [IFLA_EVENT]            = { .type = NLA_U32 },
1747         [IFLA_GROUP]            = { .type = NLA_U32 },
1748         [IFLA_TARGET_NETNSID]   = { .type = NLA_S32 },
1749         [IFLA_CARRIER_UP_COUNT] = { .type = NLA_U32 },
1750         [IFLA_CARRIER_DOWN_COUNT] = { .type = NLA_U32 },
1751         [IFLA_MIN_MTU]          = { .type = NLA_U32 },
1752         [IFLA_MAX_MTU]          = { .type = NLA_U32 },
1753 };
1754
1755 static const struct nla_policy ifla_info_policy[IFLA_INFO_MAX+1] = {
1756         [IFLA_INFO_KIND]        = { .type = NLA_STRING },
1757         [IFLA_INFO_DATA]        = { .type = NLA_NESTED },
1758         [IFLA_INFO_SLAVE_KIND]  = { .type = NLA_STRING },
1759         [IFLA_INFO_SLAVE_DATA]  = { .type = NLA_NESTED },
1760 };
1761
1762 static const struct nla_policy ifla_vf_policy[IFLA_VF_MAX+1] = {
1763         [IFLA_VF_MAC]           = { .len = sizeof(struct ifla_vf_mac) },
1764         [IFLA_VF_BROADCAST]     = { .type = NLA_REJECT },
1765         [IFLA_VF_VLAN]          = { .len = sizeof(struct ifla_vf_vlan) },
1766         [IFLA_VF_VLAN_LIST]     = { .type = NLA_NESTED },
1767         [IFLA_VF_TX_RATE]       = { .len = sizeof(struct ifla_vf_tx_rate) },
1768         [IFLA_VF_SPOOFCHK]      = { .len = sizeof(struct ifla_vf_spoofchk) },
1769         [IFLA_VF_RATE]          = { .len = sizeof(struct ifla_vf_rate) },
1770         [IFLA_VF_LINK_STATE]    = { .len = sizeof(struct ifla_vf_link_state) },
1771         [IFLA_VF_RSS_QUERY_EN]  = { .len = sizeof(struct ifla_vf_rss_query_en) },
1772         [IFLA_VF_STATS]         = { .type = NLA_NESTED },
1773         [IFLA_VF_TRUST]         = { .len = sizeof(struct ifla_vf_trust) },
1774         [IFLA_VF_IB_NODE_GUID]  = { .len = sizeof(struct ifla_vf_guid) },
1775         [IFLA_VF_IB_PORT_GUID]  = { .len = sizeof(struct ifla_vf_guid) },
1776 };
1777
1778 static const struct nla_policy ifla_port_policy[IFLA_PORT_MAX+1] = {
1779         [IFLA_PORT_VF]          = { .type = NLA_U32 },
1780         [IFLA_PORT_PROFILE]     = { .type = NLA_STRING,
1781                                     .len = PORT_PROFILE_MAX },
1782         [IFLA_PORT_INSTANCE_UUID] = { .type = NLA_BINARY,
1783                                       .len = PORT_UUID_MAX },
1784         [IFLA_PORT_HOST_UUID]   = { .type = NLA_STRING,
1785                                     .len = PORT_UUID_MAX },
1786         [IFLA_PORT_REQUEST]     = { .type = NLA_U8, },
1787         [IFLA_PORT_RESPONSE]    = { .type = NLA_U16, },
1788
1789         /* Unused, but we need to keep it here since user space could
1790          * fill it. It's also broken with regard to NLA_BINARY use in
1791          * combination with structs.
1792          */
1793         [IFLA_PORT_VSI_TYPE]    = { .type = NLA_BINARY,
1794                                     .len = sizeof(struct ifla_port_vsi) },
1795 };
1796
1797 static const struct nla_policy ifla_xdp_policy[IFLA_XDP_MAX + 1] = {
1798         [IFLA_XDP_FD]           = { .type = NLA_S32 },
1799         [IFLA_XDP_ATTACHED]     = { .type = NLA_U8 },
1800         [IFLA_XDP_FLAGS]        = { .type = NLA_U32 },
1801         [IFLA_XDP_PROG_ID]      = { .type = NLA_U32 },
1802 };
1803
1804 static const struct rtnl_link_ops *linkinfo_to_kind_ops(const struct nlattr *nla)
1805 {
1806         const struct rtnl_link_ops *ops = NULL;
1807         struct nlattr *linfo[IFLA_INFO_MAX + 1];
1808
1809         if (nla_parse_nested_deprecated(linfo, IFLA_INFO_MAX, nla, ifla_info_policy, NULL) < 0)
1810                 return NULL;
1811
1812         if (linfo[IFLA_INFO_KIND]) {
1813                 char kind[MODULE_NAME_LEN];
1814
1815                 nla_strlcpy(kind, linfo[IFLA_INFO_KIND], sizeof(kind));
1816                 ops = rtnl_link_ops_get(kind);
1817         }
1818
1819         return ops;
1820 }
1821
1822 static bool link_master_filtered(struct net_device *dev, int master_idx)
1823 {
1824         struct net_device *master;
1825
1826         if (!master_idx)
1827                 return false;
1828
1829         master = netdev_master_upper_dev_get(dev);
1830         if (!master || master->ifindex != master_idx)
1831                 return true;
1832
1833         return false;
1834 }
1835
1836 static bool link_kind_filtered(const struct net_device *dev,
1837                                const struct rtnl_link_ops *kind_ops)
1838 {
1839         if (kind_ops && dev->rtnl_link_ops != kind_ops)
1840                 return true;
1841
1842         return false;
1843 }
1844
1845 static bool link_dump_filtered(struct net_device *dev,
1846                                int master_idx,
1847                                const struct rtnl_link_ops *kind_ops)
1848 {
1849         if (link_master_filtered(dev, master_idx) ||
1850             link_kind_filtered(dev, kind_ops))
1851                 return true;
1852
1853         return false;
1854 }
1855
1856 /**
1857  * rtnl_get_net_ns_capable - Get netns if sufficiently privileged.
1858  * @sk: netlink socket
1859  * @netnsid: network namespace identifier
1860  *
1861  * Returns the network namespace identified by netnsid on success or an error
1862  * pointer on failure.
1863  */
1864 struct net *rtnl_get_net_ns_capable(struct sock *sk, int netnsid)
1865 {
1866         struct net *net;
1867
1868         net = get_net_ns_by_id(sock_net(sk), netnsid);
1869         if (!net)
1870                 return ERR_PTR(-EINVAL);
1871
1872         /* For now, the caller is required to have CAP_NET_ADMIN in
1873          * the user namespace owning the target net ns.
1874          */
1875         if (!sk_ns_capable(sk, net->user_ns, CAP_NET_ADMIN)) {
1876                 put_net(net);
1877                 return ERR_PTR(-EACCES);
1878         }
1879         return net;
1880 }
1881 EXPORT_SYMBOL_GPL(rtnl_get_net_ns_capable);
1882
1883 static int rtnl_valid_dump_ifinfo_req(const struct nlmsghdr *nlh,
1884                                       bool strict_check, struct nlattr **tb,
1885                                       struct netlink_ext_ack *extack)
1886 {
1887         int hdrlen;
1888
1889         if (strict_check) {
1890                 struct ifinfomsg *ifm;
1891
1892                 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
1893                         NL_SET_ERR_MSG(extack, "Invalid header for link dump");
1894                         return -EINVAL;
1895                 }
1896
1897                 ifm = nlmsg_data(nlh);
1898                 if (ifm->__ifi_pad || ifm->ifi_type || ifm->ifi_flags ||
1899                     ifm->ifi_change) {
1900                         NL_SET_ERR_MSG(extack, "Invalid values in header for link dump request");
1901                         return -EINVAL;
1902                 }
1903                 if (ifm->ifi_index) {
1904                         NL_SET_ERR_MSG(extack, "Filter by device index not supported for link dumps");
1905                         return -EINVAL;
1906                 }
1907
1908                 return nlmsg_parse_deprecated_strict(nlh, sizeof(*ifm), tb,
1909                                                      IFLA_MAX, ifla_policy,
1910                                                      extack);
1911         }
1912
1913         /* A hack to preserve kernel<->userspace interface.
1914          * The correct header is ifinfomsg. It is consistent with rtnl_getlink.
1915          * However, before Linux v3.9 the code here assumed rtgenmsg and that's
1916          * what iproute2 < v3.9.0 used.
1917          * We can detect the old iproute2. Even including the IFLA_EXT_MASK
1918          * attribute, its netlink message is shorter than struct ifinfomsg.
1919          */
1920         hdrlen = nlmsg_len(nlh) < sizeof(struct ifinfomsg) ?
1921                  sizeof(struct rtgenmsg) : sizeof(struct ifinfomsg);
1922
1923         return nlmsg_parse_deprecated(nlh, hdrlen, tb, IFLA_MAX, ifla_policy,
1924                                       extack);
1925 }
1926
1927 static int rtnl_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
1928 {
1929         struct netlink_ext_ack *extack = cb->extack;
1930         const struct nlmsghdr *nlh = cb->nlh;
1931         struct net *net = sock_net(skb->sk);
1932         struct net *tgt_net = net;
1933         int h, s_h;
1934         int idx = 0, s_idx;
1935         struct net_device *dev;
1936         struct hlist_head *head;
1937         struct nlattr *tb[IFLA_MAX+1];
1938         u32 ext_filter_mask = 0;
1939         const struct rtnl_link_ops *kind_ops = NULL;
1940         unsigned int flags = NLM_F_MULTI;
1941         int master_idx = 0;
1942         int netnsid = -1;
1943         int err, i;
1944
1945         s_h = cb->args[0];
1946         s_idx = cb->args[1];
1947
1948         err = rtnl_valid_dump_ifinfo_req(nlh, cb->strict_check, tb, extack);
1949         if (err < 0) {
1950                 if (cb->strict_check)
1951                         return err;
1952
1953                 goto walk_entries;
1954         }
1955
1956         for (i = 0; i <= IFLA_MAX; ++i) {
1957                 if (!tb[i])
1958                         continue;
1959
1960                 /* new attributes should only be added with strict checking */
1961                 switch (i) {
1962                 case IFLA_TARGET_NETNSID:
1963                         netnsid = nla_get_s32(tb[i]);
1964                         tgt_net = rtnl_get_net_ns_capable(skb->sk, netnsid);
1965                         if (IS_ERR(tgt_net)) {
1966                                 NL_SET_ERR_MSG(extack, "Invalid target network namespace id");
1967                                 return PTR_ERR(tgt_net);
1968                         }
1969                         break;
1970                 case IFLA_EXT_MASK:
1971                         ext_filter_mask = nla_get_u32(tb[i]);
1972                         break;
1973                 case IFLA_MASTER:
1974                         master_idx = nla_get_u32(tb[i]);
1975                         break;
1976                 case IFLA_LINKINFO:
1977                         kind_ops = linkinfo_to_kind_ops(tb[i]);
1978                         break;
1979                 default:
1980                         if (cb->strict_check) {
1981                                 NL_SET_ERR_MSG(extack, "Unsupported attribute in link dump request");
1982                                 return -EINVAL;
1983                         }
1984                 }
1985         }
1986
1987         if (master_idx || kind_ops)
1988                 flags |= NLM_F_DUMP_FILTERED;
1989
1990 walk_entries:
1991         for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
1992                 idx = 0;
1993                 head = &tgt_net->dev_index_head[h];
1994                 hlist_for_each_entry(dev, head, index_hlist) {
1995                         if (link_dump_filtered(dev, master_idx, kind_ops))
1996                                 goto cont;
1997                         if (idx < s_idx)
1998                                 goto cont;
1999                         err = rtnl_fill_ifinfo(skb, dev, net,
2000                                                RTM_NEWLINK,
2001                                                NETLINK_CB(cb->skb).portid,
2002                                                nlh->nlmsg_seq, 0, flags,
2003                                                ext_filter_mask, 0, NULL, 0,
2004                                                netnsid, GFP_KERNEL);
2005
2006                         if (err < 0) {
2007                                 if (likely(skb->len))
2008                                         goto out;
2009
2010                                 goto out_err;
2011                         }
2012 cont:
2013                         idx++;
2014                 }
2015         }
2016 out:
2017         err = skb->len;
2018 out_err:
2019         cb->args[1] = idx;
2020         cb->args[0] = h;
2021         cb->seq = net->dev_base_seq;
2022         nl_dump_check_consistent(cb, nlmsg_hdr(skb));
2023         if (netnsid >= 0)
2024                 put_net(tgt_net);
2025
2026         return err;
2027 }
2028
2029 int rtnl_nla_parse_ifla(struct nlattr **tb, const struct nlattr *head, int len,
2030                         struct netlink_ext_ack *exterr)
2031 {
2032         return nla_parse_deprecated(tb, IFLA_MAX, head, len, ifla_policy,
2033                                     exterr);
2034 }
2035 EXPORT_SYMBOL(rtnl_nla_parse_ifla);
2036
2037 struct net *rtnl_link_get_net(struct net *src_net, struct nlattr *tb[])
2038 {
2039         struct net *net;
2040         /* Examine the link attributes and figure out which
2041          * network namespace we are talking about.
2042          */
2043         if (tb[IFLA_NET_NS_PID])
2044                 net = get_net_ns_by_pid(nla_get_u32(tb[IFLA_NET_NS_PID]));
2045         else if (tb[IFLA_NET_NS_FD])
2046                 net = get_net_ns_by_fd(nla_get_u32(tb[IFLA_NET_NS_FD]));
2047         else
2048                 net = get_net(src_net);
2049         return net;
2050 }
2051 EXPORT_SYMBOL(rtnl_link_get_net);
2052
2053 /* Figure out which network namespace we are talking about by
2054  * examining the link attributes in the following order:
2055  *
2056  * 1. IFLA_NET_NS_PID
2057  * 2. IFLA_NET_NS_FD
2058  * 3. IFLA_TARGET_NETNSID
2059  */
2060 static struct net *rtnl_link_get_net_by_nlattr(struct net *src_net,
2061                                                struct nlattr *tb[])
2062 {
2063         struct net *net;
2064
2065         if (tb[IFLA_NET_NS_PID] || tb[IFLA_NET_NS_FD])
2066                 return rtnl_link_get_net(src_net, tb);
2067
2068         if (!tb[IFLA_TARGET_NETNSID])
2069                 return get_net(src_net);
2070
2071         net = get_net_ns_by_id(src_net, nla_get_u32(tb[IFLA_TARGET_NETNSID]));
2072         if (!net)
2073                 return ERR_PTR(-EINVAL);
2074
2075         return net;
2076 }
2077
2078 static struct net *rtnl_link_get_net_capable(const struct sk_buff *skb,
2079                                              struct net *src_net,
2080                                              struct nlattr *tb[], int cap)
2081 {
2082         struct net *net;
2083
2084         net = rtnl_link_get_net_by_nlattr(src_net, tb);
2085         if (IS_ERR(net))
2086                 return net;
2087
2088         if (!netlink_ns_capable(skb, net->user_ns, cap)) {
2089                 put_net(net);
2090                 return ERR_PTR(-EPERM);
2091         }
2092
2093         return net;
2094 }
2095
2096 /* Verify that rtnetlink requests do not pass additional properties
2097  * potentially referring to different network namespaces.
2098  */
2099 static int rtnl_ensure_unique_netns(struct nlattr *tb[],
2100                                     struct netlink_ext_ack *extack,
2101                                     bool netns_id_only)
2102 {
2103
2104         if (netns_id_only) {
2105                 if (!tb[IFLA_NET_NS_PID] && !tb[IFLA_NET_NS_FD])
2106                         return 0;
2107
2108                 NL_SET_ERR_MSG(extack, "specified netns attribute not supported");
2109                 return -EOPNOTSUPP;
2110         }
2111
2112         if (tb[IFLA_TARGET_NETNSID] && (tb[IFLA_NET_NS_PID] || tb[IFLA_NET_NS_FD]))
2113                 goto invalid_attr;
2114
2115         if (tb[IFLA_NET_NS_PID] && (tb[IFLA_TARGET_NETNSID] || tb[IFLA_NET_NS_FD]))
2116                 goto invalid_attr;
2117
2118         if (tb[IFLA_NET_NS_FD] && (tb[IFLA_TARGET_NETNSID] || tb[IFLA_NET_NS_PID]))
2119                 goto invalid_attr;
2120
2121         return 0;
2122
2123 invalid_attr:
2124         NL_SET_ERR_MSG(extack, "multiple netns identifying attributes specified");
2125         return -EINVAL;
2126 }
2127
2128 static int validate_linkmsg(struct net_device *dev, struct nlattr *tb[])
2129 {
2130         if (dev) {
2131                 if (tb[IFLA_ADDRESS] &&
2132                     nla_len(tb[IFLA_ADDRESS]) < dev->addr_len)
2133                         return -EINVAL;
2134
2135                 if (tb[IFLA_BROADCAST] &&
2136                     nla_len(tb[IFLA_BROADCAST]) < dev->addr_len)
2137                         return -EINVAL;
2138         }
2139
2140         if (tb[IFLA_AF_SPEC]) {
2141                 struct nlattr *af;
2142                 int rem, err;
2143
2144                 nla_for_each_nested(af, tb[IFLA_AF_SPEC], rem) {
2145                         const struct rtnl_af_ops *af_ops;
2146
2147                         rcu_read_lock();
2148                         af_ops = rtnl_af_lookup(nla_type(af));
2149                         if (!af_ops) {
2150                                 rcu_read_unlock();
2151                                 return -EAFNOSUPPORT;
2152                         }
2153
2154                         if (!af_ops->set_link_af) {
2155                                 rcu_read_unlock();
2156                                 return -EOPNOTSUPP;
2157                         }
2158
2159                         if (af_ops->validate_link_af) {
2160                                 err = af_ops->validate_link_af(dev, af);
2161                                 if (err < 0) {
2162                                         rcu_read_unlock();
2163                                         return err;
2164                                 }
2165                         }
2166
2167                         rcu_read_unlock();
2168                 }
2169         }
2170
2171         return 0;
2172 }
2173
2174 static int handle_infiniband_guid(struct net_device *dev, struct ifla_vf_guid *ivt,
2175                                   int guid_type)
2176 {
2177         const struct net_device_ops *ops = dev->netdev_ops;
2178
2179         return ops->ndo_set_vf_guid(dev, ivt->vf, ivt->guid, guid_type);
2180 }
2181
2182 static int handle_vf_guid(struct net_device *dev, struct ifla_vf_guid *ivt, int guid_type)
2183 {
2184         if (dev->type != ARPHRD_INFINIBAND)
2185                 return -EOPNOTSUPP;
2186
2187         return handle_infiniband_guid(dev, ivt, guid_type);
2188 }
2189
2190 static int do_setvfinfo(struct net_device *dev, struct nlattr **tb)
2191 {
2192         const struct net_device_ops *ops = dev->netdev_ops;
2193         int err = -EINVAL;
2194
2195         if (tb[IFLA_VF_MAC]) {
2196                 struct ifla_vf_mac *ivm = nla_data(tb[IFLA_VF_MAC]);
2197
2198                 if (ivm->vf >= INT_MAX)
2199                         return -EINVAL;
2200                 err = -EOPNOTSUPP;
2201                 if (ops->ndo_set_vf_mac)
2202                         err = ops->ndo_set_vf_mac(dev, ivm->vf,
2203                                                   ivm->mac);
2204                 if (err < 0)
2205                         return err;
2206         }
2207
2208         if (tb[IFLA_VF_VLAN]) {
2209                 struct ifla_vf_vlan *ivv = nla_data(tb[IFLA_VF_VLAN]);
2210
2211                 if (ivv->vf >= INT_MAX)
2212                         return -EINVAL;
2213                 err = -EOPNOTSUPP;
2214                 if (ops->ndo_set_vf_vlan)
2215                         err = ops->ndo_set_vf_vlan(dev, ivv->vf, ivv->vlan,
2216                                                    ivv->qos,
2217                                                    htons(ETH_P_8021Q));
2218                 if (err < 0)
2219                         return err;
2220         }
2221
2222         if (tb[IFLA_VF_VLAN_LIST]) {
2223                 struct ifla_vf_vlan_info *ivvl[MAX_VLAN_LIST_LEN];
2224                 struct nlattr *attr;
2225                 int rem, len = 0;
2226
2227                 err = -EOPNOTSUPP;
2228                 if (!ops->ndo_set_vf_vlan)
2229                         return err;
2230
2231                 nla_for_each_nested(attr, tb[IFLA_VF_VLAN_LIST], rem) {
2232                         if (nla_type(attr) != IFLA_VF_VLAN_INFO ||
2233                             nla_len(attr) < NLA_HDRLEN) {
2234                                 return -EINVAL;
2235                         }
2236                         if (len >= MAX_VLAN_LIST_LEN)
2237                                 return -EOPNOTSUPP;
2238                         ivvl[len] = nla_data(attr);
2239
2240                         len++;
2241                 }
2242                 if (len == 0)
2243                         return -EINVAL;
2244
2245                 if (ivvl[0]->vf >= INT_MAX)
2246                         return -EINVAL;
2247                 err = ops->ndo_set_vf_vlan(dev, ivvl[0]->vf, ivvl[0]->vlan,
2248                                            ivvl[0]->qos, ivvl[0]->vlan_proto);
2249                 if (err < 0)
2250                         return err;
2251         }
2252
2253         if (tb[IFLA_VF_TX_RATE]) {
2254                 struct ifla_vf_tx_rate *ivt = nla_data(tb[IFLA_VF_TX_RATE]);
2255                 struct ifla_vf_info ivf;
2256
2257                 if (ivt->vf >= INT_MAX)
2258                         return -EINVAL;
2259                 err = -EOPNOTSUPP;
2260                 if (ops->ndo_get_vf_config)
2261                         err = ops->ndo_get_vf_config(dev, ivt->vf, &ivf);
2262                 if (err < 0)
2263                         return err;
2264
2265                 err = -EOPNOTSUPP;
2266                 if (ops->ndo_set_vf_rate)
2267                         err = ops->ndo_set_vf_rate(dev, ivt->vf,
2268                                                    ivf.min_tx_rate,
2269                                                    ivt->rate);
2270                 if (err < 0)
2271                         return err;
2272         }
2273
2274         if (tb[IFLA_VF_RATE]) {
2275                 struct ifla_vf_rate *ivt = nla_data(tb[IFLA_VF_RATE]);
2276
2277                 if (ivt->vf >= INT_MAX)
2278                         return -EINVAL;
2279                 err = -EOPNOTSUPP;
2280                 if (ops->ndo_set_vf_rate)
2281                         err = ops->ndo_set_vf_rate(dev, ivt->vf,
2282                                                    ivt->min_tx_rate,
2283                                                    ivt->max_tx_rate);
2284                 if (err < 0)
2285                         return err;
2286         }
2287
2288         if (tb[IFLA_VF_SPOOFCHK]) {
2289                 struct ifla_vf_spoofchk *ivs = nla_data(tb[IFLA_VF_SPOOFCHK]);
2290
2291                 if (ivs->vf >= INT_MAX)
2292                         return -EINVAL;
2293                 err = -EOPNOTSUPP;
2294                 if (ops->ndo_set_vf_spoofchk)
2295                         err = ops->ndo_set_vf_spoofchk(dev, ivs->vf,
2296                                                        ivs->setting);
2297                 if (err < 0)
2298                         return err;
2299         }
2300
2301         if (tb[IFLA_VF_LINK_STATE]) {
2302                 struct ifla_vf_link_state *ivl = nla_data(tb[IFLA_VF_LINK_STATE]);
2303
2304                 if (ivl->vf >= INT_MAX)
2305                         return -EINVAL;
2306                 err = -EOPNOTSUPP;
2307                 if (ops->ndo_set_vf_link_state)
2308                         err = ops->ndo_set_vf_link_state(dev, ivl->vf,
2309                                                          ivl->link_state);
2310                 if (err < 0)
2311                         return err;
2312         }
2313
2314         if (tb[IFLA_VF_RSS_QUERY_EN]) {
2315                 struct ifla_vf_rss_query_en *ivrssq_en;
2316
2317                 err = -EOPNOTSUPP;
2318                 ivrssq_en = nla_data(tb[IFLA_VF_RSS_QUERY_EN]);
2319                 if (ivrssq_en->vf >= INT_MAX)
2320                         return -EINVAL;
2321                 if (ops->ndo_set_vf_rss_query_en)
2322                         err = ops->ndo_set_vf_rss_query_en(dev, ivrssq_en->vf,
2323                                                            ivrssq_en->setting);
2324                 if (err < 0)
2325                         return err;
2326         }
2327
2328         if (tb[IFLA_VF_TRUST]) {
2329                 struct ifla_vf_trust *ivt = nla_data(tb[IFLA_VF_TRUST]);
2330
2331                 if (ivt->vf >= INT_MAX)
2332                         return -EINVAL;
2333                 err = -EOPNOTSUPP;
2334                 if (ops->ndo_set_vf_trust)
2335                         err = ops->ndo_set_vf_trust(dev, ivt->vf, ivt->setting);
2336                 if (err < 0)
2337                         return err;
2338         }
2339
2340         if (tb[IFLA_VF_IB_NODE_GUID]) {
2341                 struct ifla_vf_guid *ivt = nla_data(tb[IFLA_VF_IB_NODE_GUID]);
2342
2343                 if (ivt->vf >= INT_MAX)
2344                         return -EINVAL;
2345                 if (!ops->ndo_set_vf_guid)
2346                         return -EOPNOTSUPP;
2347                 return handle_vf_guid(dev, ivt, IFLA_VF_IB_NODE_GUID);
2348         }
2349
2350         if (tb[IFLA_VF_IB_PORT_GUID]) {
2351                 struct ifla_vf_guid *ivt = nla_data(tb[IFLA_VF_IB_PORT_GUID]);
2352
2353                 if (ivt->vf >= INT_MAX)
2354                         return -EINVAL;
2355                 if (!ops->ndo_set_vf_guid)
2356                         return -EOPNOTSUPP;
2357
2358                 return handle_vf_guid(dev, ivt, IFLA_VF_IB_PORT_GUID);
2359         }
2360
2361         return err;
2362 }
2363
2364 static int do_set_master(struct net_device *dev, int ifindex,
2365                          struct netlink_ext_ack *extack)
2366 {
2367         struct net_device *upper_dev = netdev_master_upper_dev_get(dev);
2368         const struct net_device_ops *ops;
2369         int err;
2370
2371         if (upper_dev) {
2372                 if (upper_dev->ifindex == ifindex)
2373                         return 0;
2374                 ops = upper_dev->netdev_ops;
2375                 if (ops->ndo_del_slave) {
2376                         err = ops->ndo_del_slave(upper_dev, dev);
2377                         if (err)
2378                                 return err;
2379                         netdev_update_lockdep_key(dev);
2380                 } else {
2381                         return -EOPNOTSUPP;
2382                 }
2383         }
2384
2385         if (ifindex) {
2386                 upper_dev = __dev_get_by_index(dev_net(dev), ifindex);
2387                 if (!upper_dev)
2388                         return -EINVAL;
2389                 ops = upper_dev->netdev_ops;
2390                 if (ops->ndo_add_slave) {
2391                         err = ops->ndo_add_slave(upper_dev, dev, extack);
2392                         if (err)
2393                                 return err;
2394                 } else {
2395                         return -EOPNOTSUPP;
2396                 }
2397         }
2398         return 0;
2399 }
2400
2401 #define DO_SETLINK_MODIFIED     0x01
2402 /* notify flag means notify + modified. */
2403 #define DO_SETLINK_NOTIFY       0x03
2404 static int do_setlink(const struct sk_buff *skb,
2405                       struct net_device *dev, struct ifinfomsg *ifm,
2406                       struct netlink_ext_ack *extack,
2407                       struct nlattr **tb, char *ifname, int status)
2408 {
2409         const struct net_device_ops *ops = dev->netdev_ops;
2410         int err;
2411
2412         err = validate_linkmsg(dev, tb);
2413         if (err < 0)
2414                 return err;
2415
2416         if (tb[IFLA_NET_NS_PID] || tb[IFLA_NET_NS_FD] || tb[IFLA_TARGET_NETNSID]) {
2417                 struct net *net = rtnl_link_get_net_capable(skb, dev_net(dev),
2418                                                             tb, CAP_NET_ADMIN);
2419                 if (IS_ERR(net)) {
2420                         err = PTR_ERR(net);
2421                         goto errout;
2422                 }
2423
2424                 err = dev_change_net_namespace(dev, net, ifname);
2425                 put_net(net);
2426                 if (err)
2427                         goto errout;
2428                 status |= DO_SETLINK_MODIFIED;
2429         }
2430
2431         if (tb[IFLA_MAP]) {
2432                 struct rtnl_link_ifmap *u_map;
2433                 struct ifmap k_map;
2434
2435                 if (!ops->ndo_set_config) {
2436                         err = -EOPNOTSUPP;
2437                         goto errout;
2438                 }
2439
2440                 if (!netif_device_present(dev)) {
2441                         err = -ENODEV;
2442                         goto errout;
2443                 }
2444
2445                 u_map = nla_data(tb[IFLA_MAP]);
2446                 k_map.mem_start = (unsigned long) u_map->mem_start;
2447                 k_map.mem_end = (unsigned long) u_map->mem_end;
2448                 k_map.base_addr = (unsigned short) u_map->base_addr;
2449                 k_map.irq = (unsigned char) u_map->irq;
2450                 k_map.dma = (unsigned char) u_map->dma;
2451                 k_map.port = (unsigned char) u_map->port;
2452
2453                 err = ops->ndo_set_config(dev, &k_map);
2454                 if (err < 0)
2455                         goto errout;
2456
2457                 status |= DO_SETLINK_NOTIFY;
2458         }
2459
2460         if (tb[IFLA_ADDRESS]) {
2461                 struct sockaddr *sa;
2462                 int len;
2463
2464                 len = sizeof(sa_family_t) + max_t(size_t, dev->addr_len,
2465                                                   sizeof(*sa));
2466                 sa = kmalloc(len, GFP_KERNEL);
2467                 if (!sa) {
2468                         err = -ENOMEM;
2469                         goto errout;
2470                 }
2471                 sa->sa_family = dev->type;
2472                 memcpy(sa->sa_data, nla_data(tb[IFLA_ADDRESS]),
2473                        dev->addr_len);
2474                 err = dev_set_mac_address(dev, sa, extack);
2475                 kfree(sa);
2476                 if (err)
2477                         goto errout;
2478                 status |= DO_SETLINK_MODIFIED;
2479         }
2480
2481         if (tb[IFLA_MTU]) {
2482                 err = dev_set_mtu_ext(dev, nla_get_u32(tb[IFLA_MTU]), extack);
2483                 if (err < 0)
2484                         goto errout;
2485                 status |= DO_SETLINK_MODIFIED;
2486         }
2487
2488         if (tb[IFLA_GROUP]) {
2489                 dev_set_group(dev, nla_get_u32(tb[IFLA_GROUP]));
2490                 status |= DO_SETLINK_NOTIFY;
2491         }
2492
2493         /*
2494          * Interface selected by interface index but interface
2495          * name provided implies that a name change has been
2496          * requested.
2497          */
2498         if (ifm->ifi_index > 0 && ifname[0]) {
2499                 err = dev_change_name(dev, ifname);
2500                 if (err < 0)
2501                         goto errout;
2502                 status |= DO_SETLINK_MODIFIED;
2503         }
2504
2505         if (tb[IFLA_IFALIAS]) {
2506                 err = dev_set_alias(dev, nla_data(tb[IFLA_IFALIAS]),
2507                                     nla_len(tb[IFLA_IFALIAS]));
2508                 if (err < 0)
2509                         goto errout;
2510                 status |= DO_SETLINK_NOTIFY;
2511         }
2512
2513         if (tb[IFLA_BROADCAST]) {
2514                 nla_memcpy(dev->broadcast, tb[IFLA_BROADCAST], dev->addr_len);
2515                 call_netdevice_notifiers(NETDEV_CHANGEADDR, dev);
2516         }
2517
2518         if (ifm->ifi_flags || ifm->ifi_change) {
2519                 err = dev_change_flags(dev, rtnl_dev_combine_flags(dev, ifm),
2520                                        extack);
2521                 if (err < 0)
2522                         goto errout;
2523         }
2524
2525         if (tb[IFLA_MASTER]) {
2526                 err = do_set_master(dev, nla_get_u32(tb[IFLA_MASTER]), extack);
2527                 if (err)
2528                         goto errout;
2529                 status |= DO_SETLINK_MODIFIED;
2530         }
2531
2532         if (tb[IFLA_CARRIER]) {
2533                 err = dev_change_carrier(dev, nla_get_u8(tb[IFLA_CARRIER]));
2534                 if (err)
2535                         goto errout;
2536                 status |= DO_SETLINK_MODIFIED;
2537         }
2538
2539         if (tb[IFLA_TXQLEN]) {
2540                 unsigned int value = nla_get_u32(tb[IFLA_TXQLEN]);
2541
2542                 err = dev_change_tx_queue_len(dev, value);
2543                 if (err)
2544                         goto errout;
2545                 status |= DO_SETLINK_MODIFIED;
2546         }
2547
2548         if (tb[IFLA_GSO_MAX_SIZE]) {
2549                 u32 max_size = nla_get_u32(tb[IFLA_GSO_MAX_SIZE]);
2550
2551                 if (max_size > GSO_MAX_SIZE) {
2552                         err = -EINVAL;
2553                         goto errout;
2554                 }
2555
2556                 if (dev->gso_max_size ^ max_size) {
2557                         netif_set_gso_max_size(dev, max_size);
2558                         status |= DO_SETLINK_MODIFIED;
2559                 }
2560         }
2561
2562         if (tb[IFLA_GSO_MAX_SEGS]) {
2563                 u32 max_segs = nla_get_u32(tb[IFLA_GSO_MAX_SEGS]);
2564
2565                 if (max_segs > GSO_MAX_SEGS) {
2566                         err = -EINVAL;
2567                         goto errout;
2568                 }
2569
2570                 if (dev->gso_max_segs ^ max_segs) {
2571                         dev->gso_max_segs = max_segs;
2572                         status |= DO_SETLINK_MODIFIED;
2573                 }
2574         }
2575
2576         if (tb[IFLA_OPERSTATE])
2577                 set_operstate(dev, nla_get_u8(tb[IFLA_OPERSTATE]));
2578
2579         if (tb[IFLA_LINKMODE]) {
2580                 unsigned char value = nla_get_u8(tb[IFLA_LINKMODE]);
2581
2582                 write_lock_bh(&dev_base_lock);
2583                 if (dev->link_mode ^ value)
2584                         status |= DO_SETLINK_NOTIFY;
2585                 dev->link_mode = value;
2586                 write_unlock_bh(&dev_base_lock);
2587         }
2588
2589         if (tb[IFLA_VFINFO_LIST]) {
2590                 struct nlattr *vfinfo[IFLA_VF_MAX + 1];
2591                 struct nlattr *attr;
2592                 int rem;
2593
2594                 nla_for_each_nested(attr, tb[IFLA_VFINFO_LIST], rem) {
2595                         if (nla_type(attr) != IFLA_VF_INFO ||
2596                             nla_len(attr) < NLA_HDRLEN) {
2597                                 err = -EINVAL;
2598                                 goto errout;
2599                         }
2600                         err = nla_parse_nested_deprecated(vfinfo, IFLA_VF_MAX,
2601                                                           attr,
2602                                                           ifla_vf_policy,
2603                                                           NULL);
2604                         if (err < 0)
2605                                 goto errout;
2606                         err = do_setvfinfo(dev, vfinfo);
2607                         if (err < 0)
2608                                 goto errout;
2609                         status |= DO_SETLINK_NOTIFY;
2610                 }
2611         }
2612         err = 0;
2613
2614         if (tb[IFLA_VF_PORTS]) {
2615                 struct nlattr *port[IFLA_PORT_MAX+1];
2616                 struct nlattr *attr;
2617                 int vf;
2618                 int rem;
2619
2620                 err = -EOPNOTSUPP;
2621                 if (!ops->ndo_set_vf_port)
2622                         goto errout;
2623
2624                 nla_for_each_nested(attr, tb[IFLA_VF_PORTS], rem) {
2625                         if (nla_type(attr) != IFLA_VF_PORT ||
2626                             nla_len(attr) < NLA_HDRLEN) {
2627                                 err = -EINVAL;
2628                                 goto errout;
2629                         }
2630                         err = nla_parse_nested_deprecated(port, IFLA_PORT_MAX,
2631                                                           attr,
2632                                                           ifla_port_policy,
2633                                                           NULL);
2634                         if (err < 0)
2635                                 goto errout;
2636                         if (!port[IFLA_PORT_VF]) {
2637                                 err = -EOPNOTSUPP;
2638                                 goto errout;
2639                         }
2640                         vf = nla_get_u32(port[IFLA_PORT_VF]);
2641                         err = ops->ndo_set_vf_port(dev, vf, port);
2642                         if (err < 0)
2643                                 goto errout;
2644                         status |= DO_SETLINK_NOTIFY;
2645                 }
2646         }
2647         err = 0;
2648
2649         if (tb[IFLA_PORT_SELF]) {
2650                 struct nlattr *port[IFLA_PORT_MAX+1];
2651
2652                 err = nla_parse_nested_deprecated(port, IFLA_PORT_MAX,
2653                                                   tb[IFLA_PORT_SELF],
2654                                                   ifla_port_policy, NULL);
2655                 if (err < 0)
2656                         goto errout;
2657
2658                 err = -EOPNOTSUPP;
2659                 if (ops->ndo_set_vf_port)
2660                         err = ops->ndo_set_vf_port(dev, PORT_SELF_VF, port);
2661                 if (err < 0)
2662                         goto errout;
2663                 status |= DO_SETLINK_NOTIFY;
2664         }
2665
2666         if (tb[IFLA_AF_SPEC]) {
2667                 struct nlattr *af;
2668                 int rem;
2669
2670                 nla_for_each_nested(af, tb[IFLA_AF_SPEC], rem) {
2671                         const struct rtnl_af_ops *af_ops;
2672
2673                         rcu_read_lock();
2674
2675                         BUG_ON(!(af_ops = rtnl_af_lookup(nla_type(af))));
2676
2677                         err = af_ops->set_link_af(dev, af);
2678                         if (err < 0) {
2679                                 rcu_read_unlock();
2680                                 goto errout;
2681                         }
2682
2683                         rcu_read_unlock();
2684                         status |= DO_SETLINK_NOTIFY;
2685                 }
2686         }
2687         err = 0;
2688
2689         if (tb[IFLA_PROTO_DOWN]) {
2690                 err = dev_change_proto_down(dev,
2691                                             nla_get_u8(tb[IFLA_PROTO_DOWN]));
2692                 if (err)
2693                         goto errout;
2694                 status |= DO_SETLINK_NOTIFY;
2695         }
2696
2697         if (tb[IFLA_XDP]) {
2698                 struct nlattr *xdp[IFLA_XDP_MAX + 1];
2699                 u32 xdp_flags = 0;
2700
2701                 err = nla_parse_nested_deprecated(xdp, IFLA_XDP_MAX,
2702                                                   tb[IFLA_XDP],
2703                                                   ifla_xdp_policy, NULL);
2704                 if (err < 0)
2705                         goto errout;
2706
2707                 if (xdp[IFLA_XDP_ATTACHED] || xdp[IFLA_XDP_PROG_ID]) {
2708                         err = -EINVAL;
2709                         goto errout;
2710                 }
2711
2712                 if (xdp[IFLA_XDP_FLAGS]) {
2713                         xdp_flags = nla_get_u32(xdp[IFLA_XDP_FLAGS]);
2714                         if (xdp_flags & ~XDP_FLAGS_MASK) {
2715                                 err = -EINVAL;
2716                                 goto errout;
2717                         }
2718                         if (hweight32(xdp_flags & XDP_FLAGS_MODES) > 1) {
2719                                 err = -EINVAL;
2720                                 goto errout;
2721                         }
2722                 }
2723
2724                 if (xdp[IFLA_XDP_FD]) {
2725                         err = dev_change_xdp_fd(dev, extack,
2726                                                 nla_get_s32(xdp[IFLA_XDP_FD]),
2727                                                 xdp_flags);
2728                         if (err)
2729                                 goto errout;
2730                         status |= DO_SETLINK_NOTIFY;
2731                 }
2732         }
2733
2734 errout:
2735         if (status & DO_SETLINK_MODIFIED) {
2736                 if ((status & DO_SETLINK_NOTIFY) == DO_SETLINK_NOTIFY)
2737                         netdev_state_change(dev);
2738
2739                 if (err < 0)
2740                         net_warn_ratelimited("A link change request failed with some changes committed already. Interface %s may have been left with an inconsistent configuration, please check.\n",
2741                                              dev->name);
2742         }
2743
2744         return err;
2745 }
2746
2747 static int rtnl_setlink(struct sk_buff *skb, struct nlmsghdr *nlh,
2748                         struct netlink_ext_ack *extack)
2749 {
2750         struct net *net = sock_net(skb->sk);
2751         struct ifinfomsg *ifm;
2752         struct net_device *dev;
2753         int err;
2754         struct nlattr *tb[IFLA_MAX+1];
2755         char ifname[IFNAMSIZ];
2756
2757         err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFLA_MAX,
2758                                      ifla_policy, extack);
2759         if (err < 0)
2760                 goto errout;
2761
2762         err = rtnl_ensure_unique_netns(tb, extack, false);
2763         if (err < 0)
2764                 goto errout;
2765
2766         if (tb[IFLA_IFNAME])
2767                 nla_strlcpy(ifname, tb[IFLA_IFNAME], IFNAMSIZ);
2768         else
2769                 ifname[0] = '\0';
2770
2771         err = -EINVAL;
2772         ifm = nlmsg_data(nlh);
2773         if (ifm->ifi_index > 0)
2774                 dev = __dev_get_by_index(net, ifm->ifi_index);
2775         else if (tb[IFLA_IFNAME])
2776                 dev = __dev_get_by_name(net, ifname);
2777         else
2778                 goto errout;
2779
2780         if (dev == NULL) {
2781                 err = -ENODEV;
2782                 goto errout;
2783         }
2784
2785         err = do_setlink(skb, dev, ifm, extack, tb, ifname, 0);
2786 errout:
2787         return err;
2788 }
2789
2790 static int rtnl_group_dellink(const struct net *net, int group)
2791 {
2792         struct net_device *dev, *aux;
2793         LIST_HEAD(list_kill);
2794         bool found = false;
2795
2796         if (!group)
2797                 return -EPERM;
2798
2799         for_each_netdev(net, dev) {
2800                 if (dev->group == group) {
2801                         const struct rtnl_link_ops *ops;
2802
2803                         found = true;
2804                         ops = dev->rtnl_link_ops;
2805                         if (!ops || !ops->dellink)
2806                                 return -EOPNOTSUPP;
2807                 }
2808         }
2809
2810         if (!found)
2811                 return -ENODEV;
2812
2813         for_each_netdev_safe(net, dev, aux) {
2814                 if (dev->group == group) {
2815                         const struct rtnl_link_ops *ops;
2816
2817                         ops = dev->rtnl_link_ops;
2818                         ops->dellink(dev, &list_kill);
2819                 }
2820         }
2821         unregister_netdevice_many(&list_kill);
2822
2823         return 0;
2824 }
2825
2826 int rtnl_delete_link(struct net_device *dev)
2827 {
2828         const struct rtnl_link_ops *ops;
2829         LIST_HEAD(list_kill);
2830
2831         ops = dev->rtnl_link_ops;
2832         if (!ops || !ops->dellink)
2833                 return -EOPNOTSUPP;
2834
2835         ops->dellink(dev, &list_kill);
2836         unregister_netdevice_many(&list_kill);
2837
2838         return 0;
2839 }
2840 EXPORT_SYMBOL_GPL(rtnl_delete_link);
2841
2842 static int rtnl_dellink(struct sk_buff *skb, struct nlmsghdr *nlh,
2843                         struct netlink_ext_ack *extack)
2844 {
2845         struct net *net = sock_net(skb->sk);
2846         struct net *tgt_net = net;
2847         struct net_device *dev = NULL;
2848         struct ifinfomsg *ifm;
2849         char ifname[IFNAMSIZ];
2850         struct nlattr *tb[IFLA_MAX+1];
2851         int err;
2852         int netnsid = -1;
2853
2854         err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFLA_MAX,
2855                                      ifla_policy, extack);
2856         if (err < 0)
2857                 return err;
2858
2859         err = rtnl_ensure_unique_netns(tb, extack, true);
2860         if (err < 0)
2861                 return err;
2862
2863         if (tb[IFLA_IFNAME])
2864                 nla_strlcpy(ifname, tb[IFLA_IFNAME], IFNAMSIZ);
2865
2866         if (tb[IFLA_TARGET_NETNSID]) {
2867                 netnsid = nla_get_s32(tb[IFLA_TARGET_NETNSID]);
2868                 tgt_net = rtnl_get_net_ns_capable(NETLINK_CB(skb).sk, netnsid);
2869                 if (IS_ERR(tgt_net))
2870                         return PTR_ERR(tgt_net);
2871         }
2872
2873         err = -EINVAL;
2874         ifm = nlmsg_data(nlh);
2875         if (ifm->ifi_index > 0)
2876                 dev = __dev_get_by_index(tgt_net, ifm->ifi_index);
2877         else if (tb[IFLA_IFNAME])
2878                 dev = __dev_get_by_name(tgt_net, ifname);
2879         else if (tb[IFLA_GROUP])
2880                 err = rtnl_group_dellink(tgt_net, nla_get_u32(tb[IFLA_GROUP]));
2881         else
2882                 goto out;
2883
2884         if (!dev) {
2885                 if (tb[IFLA_IFNAME] || ifm->ifi_index > 0)
2886                         err = -ENODEV;
2887
2888                 goto out;
2889         }
2890
2891         err = rtnl_delete_link(dev);
2892
2893 out:
2894         if (netnsid >= 0)
2895                 put_net(tgt_net);
2896
2897         return err;
2898 }
2899
2900 int rtnl_configure_link(struct net_device *dev, const struct ifinfomsg *ifm)
2901 {
2902         unsigned int old_flags;
2903         int err;
2904
2905         old_flags = dev->flags;
2906         if (ifm && (ifm->ifi_flags || ifm->ifi_change)) {
2907                 err = __dev_change_flags(dev, rtnl_dev_combine_flags(dev, ifm),
2908                                          NULL);
2909                 if (err < 0)
2910                         return err;
2911         }
2912
2913         if (dev->rtnl_link_state == RTNL_LINK_INITIALIZED) {
2914                 __dev_notify_flags(dev, old_flags, (old_flags ^ dev->flags));
2915         } else {
2916                 dev->rtnl_link_state = RTNL_LINK_INITIALIZED;
2917                 __dev_notify_flags(dev, old_flags, ~0U);
2918         }
2919         return 0;
2920 }
2921 EXPORT_SYMBOL(rtnl_configure_link);
2922
2923 struct net_device *rtnl_create_link(struct net *net, const char *ifname,
2924                                     unsigned char name_assign_type,
2925                                     const struct rtnl_link_ops *ops,
2926                                     struct nlattr *tb[],
2927                                     struct netlink_ext_ack *extack)
2928 {
2929         struct net_device *dev;
2930         unsigned int num_tx_queues = 1;
2931         unsigned int num_rx_queues = 1;
2932
2933         if (tb[IFLA_NUM_TX_QUEUES])
2934                 num_tx_queues = nla_get_u32(tb[IFLA_NUM_TX_QUEUES]);
2935         else if (ops->get_num_tx_queues)
2936                 num_tx_queues = ops->get_num_tx_queues();
2937
2938         if (tb[IFLA_NUM_RX_QUEUES])
2939                 num_rx_queues = nla_get_u32(tb[IFLA_NUM_RX_QUEUES]);
2940         else if (ops->get_num_rx_queues)
2941                 num_rx_queues = ops->get_num_rx_queues();
2942
2943         if (num_tx_queues < 1 || num_tx_queues > 4096) {
2944                 NL_SET_ERR_MSG(extack, "Invalid number of transmit queues");
2945                 return ERR_PTR(-EINVAL);
2946         }
2947
2948         if (num_rx_queues < 1 || num_rx_queues > 4096) {
2949                 NL_SET_ERR_MSG(extack, "Invalid number of receive queues");
2950                 return ERR_PTR(-EINVAL);
2951         }
2952
2953         dev = alloc_netdev_mqs(ops->priv_size, ifname, name_assign_type,
2954                                ops->setup, num_tx_queues, num_rx_queues);
2955         if (!dev)
2956                 return ERR_PTR(-ENOMEM);
2957
2958         dev_net_set(dev, net);
2959         dev->rtnl_link_ops = ops;
2960         dev->rtnl_link_state = RTNL_LINK_INITIALIZING;
2961
2962         if (tb[IFLA_MTU])
2963                 dev->mtu = nla_get_u32(tb[IFLA_MTU]);
2964         if (tb[IFLA_ADDRESS]) {
2965                 memcpy(dev->dev_addr, nla_data(tb[IFLA_ADDRESS]),
2966                                 nla_len(tb[IFLA_ADDRESS]));
2967                 dev->addr_assign_type = NET_ADDR_SET;
2968         }
2969         if (tb[IFLA_BROADCAST])
2970                 memcpy(dev->broadcast, nla_data(tb[IFLA_BROADCAST]),
2971                                 nla_len(tb[IFLA_BROADCAST]));
2972         if (tb[IFLA_TXQLEN])
2973                 dev->tx_queue_len = nla_get_u32(tb[IFLA_TXQLEN]);
2974         if (tb[IFLA_OPERSTATE])
2975                 set_operstate(dev, nla_get_u8(tb[IFLA_OPERSTATE]));
2976         if (tb[IFLA_LINKMODE])
2977                 dev->link_mode = nla_get_u8(tb[IFLA_LINKMODE]);
2978         if (tb[IFLA_GROUP])
2979                 dev_set_group(dev, nla_get_u32(tb[IFLA_GROUP]));
2980         if (tb[IFLA_GSO_MAX_SIZE])
2981                 netif_set_gso_max_size(dev, nla_get_u32(tb[IFLA_GSO_MAX_SIZE]));
2982         if (tb[IFLA_GSO_MAX_SEGS])
2983                 dev->gso_max_segs = nla_get_u32(tb[IFLA_GSO_MAX_SEGS]);
2984
2985         return dev;
2986 }
2987 EXPORT_SYMBOL(rtnl_create_link);
2988
2989 static int rtnl_group_changelink(const struct sk_buff *skb,
2990                 struct net *net, int group,
2991                 struct ifinfomsg *ifm,
2992                 struct netlink_ext_ack *extack,
2993                 struct nlattr **tb)
2994 {
2995         struct net_device *dev, *aux;
2996         int err;
2997
2998         for_each_netdev_safe(net, dev, aux) {
2999                 if (dev->group == group) {
3000                         err = do_setlink(skb, dev, ifm, extack, tb, NULL, 0);
3001                         if (err < 0)
3002                                 return err;
3003                 }
3004         }
3005
3006         return 0;
3007 }
3008
3009 static int __rtnl_newlink(struct sk_buff *skb, struct nlmsghdr *nlh,
3010                           struct nlattr **attr, struct netlink_ext_ack *extack)
3011 {
3012         struct nlattr *slave_attr[RTNL_SLAVE_MAX_TYPE + 1];
3013         unsigned char name_assign_type = NET_NAME_USER;
3014         struct nlattr *linkinfo[IFLA_INFO_MAX + 1];
3015         const struct rtnl_link_ops *m_ops = NULL;
3016         struct net_device *master_dev = NULL;
3017         struct net *net = sock_net(skb->sk);
3018         const struct rtnl_link_ops *ops;
3019         struct nlattr *tb[IFLA_MAX + 1];
3020         struct net *dest_net, *link_net;
3021         struct nlattr **slave_data;
3022         char kind[MODULE_NAME_LEN];
3023         struct net_device *dev;
3024         struct ifinfomsg *ifm;
3025         char ifname[IFNAMSIZ];
3026         struct nlattr **data;
3027         int err;
3028
3029 #ifdef CONFIG_MODULES
3030 replay:
3031 #endif
3032         err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFLA_MAX,
3033                                      ifla_policy, extack);
3034         if (err < 0)
3035                 return err;
3036
3037         err = rtnl_ensure_unique_netns(tb, extack, false);
3038         if (err < 0)
3039                 return err;
3040
3041         if (tb[IFLA_IFNAME])
3042                 nla_strlcpy(ifname, tb[IFLA_IFNAME], IFNAMSIZ);
3043         else
3044                 ifname[0] = '\0';
3045
3046         ifm = nlmsg_data(nlh);
3047         if (ifm->ifi_index > 0)
3048                 dev = __dev_get_by_index(net, ifm->ifi_index);
3049         else {
3050                 if (ifname[0])
3051                         dev = __dev_get_by_name(net, ifname);
3052                 else
3053                         dev = NULL;
3054         }
3055
3056         if (dev) {
3057                 master_dev = netdev_master_upper_dev_get(dev);
3058                 if (master_dev)
3059                         m_ops = master_dev->rtnl_link_ops;
3060         }
3061
3062         err = validate_linkmsg(dev, tb);
3063         if (err < 0)
3064                 return err;
3065
3066         if (tb[IFLA_LINKINFO]) {
3067                 err = nla_parse_nested_deprecated(linkinfo, IFLA_INFO_MAX,
3068                                                   tb[IFLA_LINKINFO],
3069                                                   ifla_info_policy, NULL);
3070                 if (err < 0)
3071                         return err;
3072         } else
3073                 memset(linkinfo, 0, sizeof(linkinfo));
3074
3075         if (linkinfo[IFLA_INFO_KIND]) {
3076                 nla_strlcpy(kind, linkinfo[IFLA_INFO_KIND], sizeof(kind));
3077                 ops = rtnl_link_ops_get(kind);
3078         } else {
3079                 kind[0] = '\0';
3080                 ops = NULL;
3081         }
3082
3083         data = NULL;
3084         if (ops) {
3085                 if (ops->maxtype > RTNL_MAX_TYPE)
3086                         return -EINVAL;
3087
3088                 if (ops->maxtype && linkinfo[IFLA_INFO_DATA]) {
3089                         err = nla_parse_nested_deprecated(attr, ops->maxtype,
3090                                                           linkinfo[IFLA_INFO_DATA],
3091                                                           ops->policy, extack);
3092                         if (err < 0)
3093                                 return err;
3094                         data = attr;
3095                 }
3096                 if (ops->validate) {
3097                         err = ops->validate(tb, data, extack);
3098                         if (err < 0)
3099                                 return err;
3100                 }
3101         }
3102
3103         slave_data = NULL;
3104         if (m_ops) {
3105                 if (m_ops->slave_maxtype > RTNL_SLAVE_MAX_TYPE)
3106                         return -EINVAL;
3107
3108                 if (m_ops->slave_maxtype &&
3109                     linkinfo[IFLA_INFO_SLAVE_DATA]) {
3110                         err = nla_parse_nested_deprecated(slave_attr,
3111                                                           m_ops->slave_maxtype,
3112                                                           linkinfo[IFLA_INFO_SLAVE_DATA],
3113                                                           m_ops->slave_policy,
3114                                                           extack);
3115                         if (err < 0)
3116                                 return err;
3117                         slave_data = slave_attr;
3118                 }
3119         }
3120
3121         if (dev) {
3122                 int status = 0;
3123
3124                 if (nlh->nlmsg_flags & NLM_F_EXCL)
3125                         return -EEXIST;
3126                 if (nlh->nlmsg_flags & NLM_F_REPLACE)
3127                         return -EOPNOTSUPP;
3128
3129                 if (linkinfo[IFLA_INFO_DATA]) {
3130                         if (!ops || ops != dev->rtnl_link_ops ||
3131                             !ops->changelink)
3132                                 return -EOPNOTSUPP;
3133
3134                         err = ops->changelink(dev, tb, data, extack);
3135                         if (err < 0)
3136                                 return err;
3137                         status |= DO_SETLINK_NOTIFY;
3138                 }
3139
3140                 if (linkinfo[IFLA_INFO_SLAVE_DATA]) {
3141                         if (!m_ops || !m_ops->slave_changelink)
3142                                 return -EOPNOTSUPP;
3143
3144                         err = m_ops->slave_changelink(master_dev, dev, tb,
3145                                                       slave_data, extack);
3146                         if (err < 0)
3147                                 return err;
3148                         status |= DO_SETLINK_NOTIFY;
3149                 }
3150
3151                 return do_setlink(skb, dev, ifm, extack, tb, ifname, status);
3152         }
3153
3154         if (!(nlh->nlmsg_flags & NLM_F_CREATE)) {
3155                 if (ifm->ifi_index == 0 && tb[IFLA_GROUP])
3156                         return rtnl_group_changelink(skb, net,
3157                                                 nla_get_u32(tb[IFLA_GROUP]),
3158                                                 ifm, extack, tb);
3159                 return -ENODEV;
3160         }
3161
3162         if (tb[IFLA_MAP] || tb[IFLA_PROTINFO])
3163                 return -EOPNOTSUPP;
3164
3165         if (!ops) {
3166 #ifdef CONFIG_MODULES
3167                 if (kind[0]) {
3168                         __rtnl_unlock();
3169                         request_module("rtnl-link-%s", kind);
3170                         rtnl_lock();
3171                         ops = rtnl_link_ops_get(kind);
3172                         if (ops)
3173                                 goto replay;
3174                 }
3175 #endif
3176                 NL_SET_ERR_MSG(extack, "Unknown device type");
3177                 return -EOPNOTSUPP;
3178         }
3179
3180         if (!ops->setup)
3181                 return -EOPNOTSUPP;
3182
3183         if (!ifname[0]) {
3184                 snprintf(ifname, IFNAMSIZ, "%s%%d", ops->kind);
3185                 name_assign_type = NET_NAME_ENUM;
3186         }
3187
3188         dest_net = rtnl_link_get_net_capable(skb, net, tb, CAP_NET_ADMIN);
3189         if (IS_ERR(dest_net))
3190                 return PTR_ERR(dest_net);
3191
3192         if (tb[IFLA_LINK_NETNSID]) {
3193                 int id = nla_get_s32(tb[IFLA_LINK_NETNSID]);
3194
3195                 link_net = get_net_ns_by_id(dest_net, id);
3196                 if (!link_net) {
3197                         NL_SET_ERR_MSG(extack, "Unknown network namespace id");
3198                         err =  -EINVAL;
3199                         goto out;
3200                 }
3201                 err = -EPERM;
3202                 if (!netlink_ns_capable(skb, link_net->user_ns, CAP_NET_ADMIN))
3203                         goto out;
3204         } else {
3205                 link_net = NULL;
3206         }
3207
3208         dev = rtnl_create_link(link_net ? : dest_net, ifname,
3209                                name_assign_type, ops, tb, extack);
3210         if (IS_ERR(dev)) {
3211                 err = PTR_ERR(dev);
3212                 goto out;
3213         }
3214
3215         dev->ifindex = ifm->ifi_index;
3216
3217         if (ops->newlink) {
3218                 err = ops->newlink(link_net ? : net, dev, tb, data, extack);
3219                 /* Drivers should call free_netdev() in ->destructor
3220                  * and unregister it on failure after registration
3221                  * so that device could be finally freed in rtnl_unlock.
3222                  */
3223                 if (err < 0) {
3224                         /* If device is not registered at all, free it now */
3225                         if (dev->reg_state == NETREG_UNINITIALIZED)
3226                                 free_netdev(dev);
3227                         goto out;
3228                 }
3229         } else {
3230                 err = register_netdevice(dev);
3231                 if (err < 0) {
3232                         free_netdev(dev);
3233                         goto out;
3234                 }
3235         }
3236         err = rtnl_configure_link(dev, ifm);
3237         if (err < 0)
3238                 goto out_unregister;
3239         if (link_net) {
3240                 err = dev_change_net_namespace(dev, dest_net, ifname);
3241                 if (err < 0)
3242                         goto out_unregister;
3243         }
3244         if (tb[IFLA_MASTER]) {
3245                 err = do_set_master(dev, nla_get_u32(tb[IFLA_MASTER]), extack);
3246                 if (err)
3247                         goto out_unregister;
3248         }
3249 out:
3250         if (link_net)
3251                 put_net(link_net);
3252         put_net(dest_net);
3253         return err;
3254 out_unregister:
3255         if (ops->newlink) {
3256                 LIST_HEAD(list_kill);
3257
3258                 ops->dellink(dev, &list_kill);
3259                 unregister_netdevice_many(&list_kill);
3260         } else {
3261                 unregister_netdevice(dev);
3262         }
3263         goto out;
3264 }
3265
3266 static int rtnl_newlink(struct sk_buff *skb, struct nlmsghdr *nlh,
3267                         struct netlink_ext_ack *extack)
3268 {
3269         struct nlattr **attr;
3270         int ret;
3271
3272         attr = kmalloc_array(RTNL_MAX_TYPE + 1, sizeof(*attr), GFP_KERNEL);
3273         if (!attr)
3274                 return -ENOMEM;
3275
3276         ret = __rtnl_newlink(skb, nlh, attr, extack);
3277         kfree(attr);
3278         return ret;
3279 }
3280
3281 static int rtnl_valid_getlink_req(struct sk_buff *skb,
3282                                   const struct nlmsghdr *nlh,
3283                                   struct nlattr **tb,
3284                                   struct netlink_ext_ack *extack)
3285 {
3286         struct ifinfomsg *ifm;
3287         int i, err;
3288
3289         if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
3290                 NL_SET_ERR_MSG(extack, "Invalid header for get link");
3291                 return -EINVAL;
3292         }
3293
3294         if (!netlink_strict_get_check(skb))
3295                 return nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFLA_MAX,
3296                                               ifla_policy, extack);
3297
3298         ifm = nlmsg_data(nlh);
3299         if (ifm->__ifi_pad || ifm->ifi_type || ifm->ifi_flags ||
3300             ifm->ifi_change) {
3301                 NL_SET_ERR_MSG(extack, "Invalid values in header for get link request");
3302                 return -EINVAL;
3303         }
3304
3305         err = nlmsg_parse_deprecated_strict(nlh, sizeof(*ifm), tb, IFLA_MAX,
3306                                             ifla_policy, extack);
3307         if (err)
3308                 return err;
3309
3310         for (i = 0; i <= IFLA_MAX; i++) {
3311                 if (!tb[i])
3312                         continue;
3313
3314                 switch (i) {
3315                 case IFLA_IFNAME:
3316                 case IFLA_EXT_MASK:
3317                 case IFLA_TARGET_NETNSID:
3318                         break;
3319                 default:
3320                         NL_SET_ERR_MSG(extack, "Unsupported attribute in get link request");
3321                         return -EINVAL;
3322                 }
3323         }
3324
3325         return 0;
3326 }
3327
3328 static int rtnl_getlink(struct sk_buff *skb, struct nlmsghdr *nlh,
3329                         struct netlink_ext_ack *extack)
3330 {
3331         struct net *net = sock_net(skb->sk);
3332         struct net *tgt_net = net;
3333         struct ifinfomsg *ifm;
3334         char ifname[IFNAMSIZ];
3335         struct nlattr *tb[IFLA_MAX+1];
3336         struct net_device *dev = NULL;
3337         struct sk_buff *nskb;
3338         int netnsid = -1;
3339         int err;
3340         u32 ext_filter_mask = 0;
3341
3342         err = rtnl_valid_getlink_req(skb, nlh, tb, extack);
3343         if (err < 0)
3344                 return err;
3345
3346         err = rtnl_ensure_unique_netns(tb, extack, true);
3347         if (err < 0)
3348                 return err;
3349
3350         if (tb[IFLA_TARGET_NETNSID]) {
3351                 netnsid = nla_get_s32(tb[IFLA_TARGET_NETNSID]);
3352                 tgt_net = rtnl_get_net_ns_capable(NETLINK_CB(skb).sk, netnsid);
3353                 if (IS_ERR(tgt_net))
3354                         return PTR_ERR(tgt_net);
3355         }
3356
3357         if (tb[IFLA_IFNAME])
3358                 nla_strlcpy(ifname, tb[IFLA_IFNAME], IFNAMSIZ);
3359
3360         if (tb[IFLA_EXT_MASK])
3361                 ext_filter_mask = nla_get_u32(tb[IFLA_EXT_MASK]);
3362
3363         err = -EINVAL;
3364         ifm = nlmsg_data(nlh);
3365         if (ifm->ifi_index > 0)
3366                 dev = __dev_get_by_index(tgt_net, ifm->ifi_index);
3367         else if (tb[IFLA_IFNAME])
3368                 dev = __dev_get_by_name(tgt_net, ifname);
3369         else
3370                 goto out;
3371
3372         err = -ENODEV;
3373         if (dev == NULL)
3374                 goto out;
3375
3376         err = -ENOBUFS;
3377         nskb = nlmsg_new(if_nlmsg_size(dev, ext_filter_mask), GFP_KERNEL);
3378         if (nskb == NULL)
3379                 goto out;
3380
3381         err = rtnl_fill_ifinfo(nskb, dev, net,
3382                                RTM_NEWLINK, NETLINK_CB(skb).portid,
3383                                nlh->nlmsg_seq, 0, 0, ext_filter_mask,
3384                                0, NULL, 0, netnsid, GFP_KERNEL);
3385         if (err < 0) {
3386                 /* -EMSGSIZE implies BUG in if_nlmsg_size */
3387                 WARN_ON(err == -EMSGSIZE);
3388                 kfree_skb(nskb);
3389         } else
3390                 err = rtnl_unicast(nskb, net, NETLINK_CB(skb).portid);
3391 out:
3392         if (netnsid >= 0)
3393                 put_net(tgt_net);
3394
3395         re