drivers/net/bonding/bond_main.c

   1 /*
   2  * originally based on the dummy device.
   3  *
   4  * Copyright 1999, Thomas Davis, tadavis@lbl.gov.
   5  * Licensed under the GPL. Based on dummy.c, and eql.c devices.
   6  *
   7  * bonding.c: an Ethernet Bonding driver
   8  *
   9  * This is useful to talk to a Cisco EtherChannel compatible equipment:
  10  *      Cisco 5500
  11  *      Sun Trunking (Solaris)
  12  *      Alteon AceDirector Trunks
  13  *      Linux Bonding
  14  *      and probably many L2 switches ...
  15  *
  16  * How it works:
  17  *    ifconfig bond0 ipaddress netmask up
  18  *      will setup a network device, with an ip address.  No mac address
  19  *      will be assigned at this time.  The hw mac address will come from
  20  *      the first slave bonded to the channel.  All slaves will then use
  21  *      this hw mac address.
  22  *
  23  *    ifconfig bond0 down
  24  *         will release all slaves, marking them as down.
  25  *
  26  *    ifenslave bond0 eth0
  27  *      will attach eth0 to bond0 as a slave.  eth0 hw mac address will either
  28  *      a: be used as initial mac address
  29  *      b: if a hw mac address already is there, eth0's hw mac address
  30  *         will then be set from bond0.
  31  *
  32  */
  33
  34 #include <linux/kernel.h>
  35 #include <linux/module.h>
  36 #include <linux/types.h>
  37 #include <linux/fcntl.h>
  38 #include <linux/interrupt.h>
  39 #include <linux/ptrace.h>
  40 #include <linux/ioport.h>
  41 #include <linux/in.h>
  42 #include <net/ip.h>
  43 #include <linux/ip.h>
  44 #include <linux/tcp.h>
  45 #include <linux/udp.h>
  46 #include <linux/slab.h>
  47 #include <linux/string.h>
  48 #include <linux/init.h>
  49 #include <linux/timer.h>
  50 #include <linux/socket.h>
  51 #include <linux/ctype.h>
  52 #include <linux/inet.h>
  53 #include <linux/bitops.h>
  54 #include <linux/io.h>
  55 #include <asm/system.h>
  56 #include <asm/dma.h>
  57 #include <linux/uaccess.h>
  58 #include <linux/errno.h>
  59 #include <linux/netdevice.h>
  60 #include <linux/inetdevice.h>
  61 #include <linux/igmp.h>
  62 #include <linux/etherdevice.h>
  63 #include <linux/skbuff.h>
  64 #include <net/sock.h>
  65 #include <linux/rtnetlink.h>
  66 #include <linux/proc_fs.h>
  67 #include <linux/seq_file.h>
  68 #include <linux/smp.h>
  69 #include <linux/if_ether.h>
  70 #include <net/arp.h>
  71 #include <linux/mii.h>
  72 #include <linux/ethtool.h>
  73 #include <linux/if_vlan.h>
  74 #include <linux/if_bonding.h>
  75 #include <linux/jiffies.h>
  76 #include <net/route.h>
  77 #include <net/net_namespace.h>
  78 #include "bonding.h"
  79 #include "bond_3ad.h"
  80 #include "bond_alb.h"
  81
  82 /*---------------------------- Module parameters ----------------------------*/
  83
  84 /* monitor all links that often (in milliseconds). <=0 disables monitoring */
  85 #define BOND_LINK_MON_INTERV    0
  86 #define BOND_LINK_ARP_INTERV    0
  87
  88 static int max_bonds    = BOND_DEFAULT_MAX_BONDS;
  89 static int num_grat_arp = 1;
  90 static int num_unsol_na = 1;
  91 static int miimon       = BOND_LINK_MON_INTERV;
  92 static int updelay;
  93 static int downdelay;
  94 static int use_carrier  = 1;
  95 static char *mode;
  96 static char *primary;
  97 static char *lacp_rate;
  98 static char *ad_select;
  99 static char *xmit_hash_policy;
 100 static int arp_interval = BOND_LINK_ARP_INTERV;
 101 static char *arp_ip_target[BOND_MAX_ARP_TARGETS];
 102 static char *arp_validate;
 103 static char *fail_over_mac;
 104 static struct bond_params bonding_defaults;
 105
 106 module_param(max_bonds, int, 0);
 107 MODULE_PARM_DESC(max_bonds, "Max number of bonded devices");
 108 module_param(num_grat_arp, int, 0644);
 109 MODULE_PARM_DESC(num_grat_arp, "Number of gratuitous ARP packets to send on failover event");
 110 module_param(num_unsol_na, int, 0644);
 111 MODULE_PARM_DESC(num_unsol_na, "Number of unsolicited IPv6 Neighbor Advertisements packets to send on failover event");
 112 module_param(miimon, int, 0);
 113 MODULE_PARM_DESC(miimon, "Link check interval in milliseconds");
 114 module_param(updelay, int, 0);
 115 MODULE_PARM_DESC(updelay, "Delay before considering link up, in milliseconds");
 116 module_param(downdelay, int, 0);
 117 MODULE_PARM_DESC(downdelay, "Delay before considering link down, "
 118                             "in milliseconds");
 119 module_param(use_carrier, int, 0);
 120 MODULE_PARM_DESC(use_carrier, "Use netif_carrier_ok (vs MII ioctls) in miimon; "
 121                               "0 for off, 1 for on (default)");
 122 module_param(mode, charp, 0);
 123 MODULE_PARM_DESC(mode, "Mode of operation : 0 for balance-rr, "
 124                        "1 for active-backup, 2 for balance-xor, "
 125                        "3 for broadcast, 4 for 802.3ad, 5 for balance-tlb, "
 126                        "6 for balance-alb");
 127 module_param(primary, charp, 0);
 128 MODULE_PARM_DESC(primary, "Primary network device to use");
 129 module_param(lacp_rate, charp, 0);
 130 MODULE_PARM_DESC(lacp_rate, "LACPDU tx rate to request from 802.3ad partner "
 131                             "(slow/fast)");
 132 module_param(ad_select, charp, 0);
 133 MODULE_PARM_DESC(ad_select, "803.ad aggregation selection logic: stable (0, default), bandwidth (1), count (2)");
 134 module_param(xmit_hash_policy, charp, 0);
 135 MODULE_PARM_DESC(xmit_hash_policy, "XOR hashing method: 0 for layer 2 (default)"
 136                                    ", 1 for layer 3+4");
 137 module_param(arp_interval, int, 0);
 138 MODULE_PARM_DESC(arp_interval, "arp interval in milliseconds");
 139 module_param_array(arp_ip_target, charp, NULL, 0);
 140 MODULE_PARM_DESC(arp_ip_target, "arp targets in n.n.n.n form");
 141 module_param(arp_validate, charp, 0);
 142 MODULE_PARM_DESC(arp_validate, "validate src/dst of ARP probes: none (default), active, backup or all");
 143 module_param(fail_over_mac, charp, 0);
 144 MODULE_PARM_DESC(fail_over_mac, "For active-backup, do not set all slaves to the same MAC.  none (default), active or follow");
 145
 146 /*----------------------------- Global variables ----------------------------*/
 147
 148 static const char * const version =
 149         DRV_DESCRIPTION ": v" DRV_VERSION " (" DRV_RELDATE ")\n";
 150
 151 LIST_HEAD(bond_dev_list);
 152
 153 #ifdef CONFIG_PROC_FS
 154 static struct proc_dir_entry *bond_proc_dir;
 155 #endif
 156
 157 static __be32 arp_target[BOND_MAX_ARP_TARGETS];
 158 static int arp_ip_count;
 159 static int bond_mode    = BOND_MODE_ROUNDROBIN;
 160 static int xmit_hashtype = BOND_XMIT_POLICY_LAYER2;
 161 static int lacp_fast;
 162
 163
 164 const struct bond_parm_tbl bond_lacp_tbl[] = {
 165 {       "slow",         AD_LACP_SLOW},
 166 {       "fast",         AD_LACP_FAST},
 167 {       NULL,           -1},
 168 };
 169
 170 const struct bond_parm_tbl bond_mode_tbl[] = {
 171 {       "balance-rr",           BOND_MODE_ROUNDROBIN},
 172 {       "active-backup",        BOND_MODE_ACTIVEBACKUP},
 173 {       "balance-xor",          BOND_MODE_XOR},
 174 {       "broadcast",            BOND_MODE_BROADCAST},
 175 {       "802.3ad",              BOND_MODE_8023AD},
 176 {       "balance-tlb",          BOND_MODE_TLB},
 177 {       "balance-alb",          BOND_MODE_ALB},
 178 {       NULL,                   -1},
 179 };
 180
 181 const struct bond_parm_tbl xmit_hashtype_tbl[] = {
 182 {       "layer2",               BOND_XMIT_POLICY_LAYER2},
 183 {       "layer3+4",             BOND_XMIT_POLICY_LAYER34},
 184 {       "layer2+3",             BOND_XMIT_POLICY_LAYER23},
 185 {       NULL,                   -1},
 186 };
 187
 188 const struct bond_parm_tbl arp_validate_tbl[] = {
 189 {       "none",                 BOND_ARP_VALIDATE_NONE},
 190 {       "active",               BOND_ARP_VALIDATE_ACTIVE},
 191 {       "backup",               BOND_ARP_VALIDATE_BACKUP},
 192 {       "all",                  BOND_ARP_VALIDATE_ALL},
 193 {       NULL,                   -1},
 194 };
 195
 196 const struct bond_parm_tbl fail_over_mac_tbl[] = {
 197 {       "none",                 BOND_FOM_NONE},
 198 {       "active",               BOND_FOM_ACTIVE},
 199 {       "follow",               BOND_FOM_FOLLOW},
 200 {       NULL,                   -1},
 201 };
 202
 203 struct bond_parm_tbl ad_select_tbl[] = {
 204 {       "stable",       BOND_AD_STABLE},
 205 {       "bandwidth",    BOND_AD_BANDWIDTH},
 206 {       "count",        BOND_AD_COUNT},
 207 {       NULL,           -1},
 208 };
 209
 210 /*-------------------------- Forward declarations ---------------------------*/
 211
 212 static void bond_send_gratuitous_arp(struct bonding *bond);
 213 static int bond_init(struct net_device *bond_dev);
 214 static void bond_deinit(struct net_device *bond_dev);
 215
 216 /*---------------------------- General routines -----------------------------*/
 217
 218 static const char *bond_mode_name(int mode)
 219 {
 220         static const char *names[] = {
 221                 [BOND_MODE_ROUNDROBIN] = "load balancing (round-robin)",
 222                 [BOND_MODE_ACTIVEBACKUP] = "fault-tolerance (active-backup)",
 223                 [BOND_MODE_XOR] = "load balancing (xor)",
 224                 [BOND_MODE_BROADCAST] = "fault-tolerance (broadcast)",
 225                 [BOND_MODE_8023AD] = "IEEE 802.3ad Dynamic link aggregation",
 226                 [BOND_MODE_TLB] = "transmit load balancing",
 227                 [BOND_MODE_ALB] = "adaptive load balancing",
 228         };
 229
 230         if (mode < 0 || mode > BOND_MODE_ALB)
 231                 return "unknown";
 232
 233         return names[mode];
 234 }
 235
 236 /*---------------------------------- VLAN -----------------------------------*/
 237
 238 /**
 239  * bond_add_vlan - add a new vlan id on bond
 240  * @bond: bond that got the notification
 241  * @vlan_id: the vlan id to add
 242  *
 243  * Returns -ENOMEM if allocation failed.
 244  */
 245 static int bond_add_vlan(struct bonding *bond, unsigned short vlan_id)
 246 {
 247         struct vlan_entry *vlan;
 248
 249         pr_debug("bond: %s, vlan id %d\n",
 250                 (bond ? bond->dev->name : "None"), vlan_id);
 251
 252         vlan = kzalloc(sizeof(struct vlan_entry), GFP_KERNEL);
 253         if (!vlan)
 254                 return -ENOMEM;
 255
 256         INIT_LIST_HEAD(&vlan->vlan_list);
 257         vlan->vlan_id = vlan_id;
 258
 259         write_lock_bh(&bond->lock);
 260
 261         list_add_tail(&vlan->vlan_list, &bond->vlan_list);
 262
 263         write_unlock_bh(&bond->lock);
 264
 265         pr_debug("added VLAN ID %d on bond %s\n", vlan_id, bond->dev->name);
 266
 267         return 0;
 268 }
 269
 270 /**
 271  * bond_del_vlan - delete a vlan id from bond
 272  * @bond: bond that got the notification
 273  * @vlan_id: the vlan id to delete
 274  *
 275  * returns -ENODEV if @vlan_id was not found in @bond.
 276  */
 277 static int bond_del_vlan(struct bonding *bond, unsigned short vlan_id)
 278 {
 279         struct vlan_entry *vlan;
 280         int res = -ENODEV;
 281
 282         pr_debug("bond: %s, vlan id %d\n", bond->dev->name, vlan_id);
 283
 284         write_lock_bh(&bond->lock);
 285
 286         list_for_each_entry(vlan, &bond->vlan_list, vlan_list) {
 287                 if (vlan->vlan_id == vlan_id) {
 288                         list_del(&vlan->vlan_list);
 289
 290                         if (bond_is_lb(bond))
 291                                 bond_alb_clear_vlan(bond, vlan_id);
 292
 293                         pr_debug("removed VLAN ID %d from bond %s\n", vlan_id,
 294                                 bond->dev->name);
 295
 296                         kfree(vlan);
 297
 298                         if (list_empty(&bond->vlan_list) &&
 299                             (bond->slave_cnt == 0)) {
 300                                 /* Last VLAN removed and no slaves, so
 301                                  * restore block on adding VLANs. This will
 302                                  * be removed once new slaves that are not
 303                                  * VLAN challenged will be added.
 304                                  */
 305                                 bond->dev->features |= NETIF_F_VLAN_CHALLENGED;
 306                         }
 307
 308                         res = 0;
 309                         goto out;
 310                 }
 311         }
 312
 313         pr_debug("couldn't find VLAN ID %d in bond %s\n", vlan_id,
 314                 bond->dev->name);
 315
 316 out:
 317         write_unlock_bh(&bond->lock);
 318         return res;
 319 }
 320
 321 /**
 322  * bond_has_challenged_slaves
 323  * @bond: the bond we're working on
 324  *
 325  * Searches the slave list. Returns 1 if a vlan challenged slave
 326  * was found, 0 otherwise.
 327  *
 328  * Assumes bond->lock is held.
 329  */
 330 static int bond_has_challenged_slaves(struct bonding *bond)
 331 {
 332         struct slave *slave;
 333         int i;
 334
 335         bond_for_each_slave(bond, slave, i) {
 336                 if (slave->dev->features & NETIF_F_VLAN_CHALLENGED) {
 337                         pr_debug("found VLAN challenged slave - %s\n",
 338                                 slave->dev->name);
 339                         return 1;
 340                 }
 341         }
 342
 343         pr_debug("no VLAN challenged slaves found\n");
 344         return 0;
 345 }
 346
 347 /**
 348  * bond_next_vlan - safely skip to the next item in the vlans list.
 349  * @bond: the bond we're working on
 350  * @curr: item we're advancing from
 351  *
 352  * Returns %NULL if list is empty, bond->next_vlan if @curr is %NULL,
 353  * or @curr->next otherwise (even if it is @curr itself again).
 354  *
 355  * Caller must hold bond->lock
 356  */
 357 struct vlan_entry *bond_next_vlan(struct bonding *bond, struct vlan_entry *curr)
 358 {
 359         struct vlan_entry *next, *last;
 360
 361         if (list_empty(&bond->vlan_list))
 362                 return NULL;
 363
 364         if (!curr) {
 365                 next = list_entry(bond->vlan_list.next,
 366                                   struct vlan_entry, vlan_list);
 367         } else {
 368                 last = list_entry(bond->vlan_list.prev,
 369                                   struct vlan_entry, vlan_list);
 370                 if (last == curr) {
 371                         next = list_entry(bond->vlan_list.next,
 372                                           struct vlan_entry, vlan_list);
 373                 } else {
 374                         next = list_entry(curr->vlan_list.next,
 375                                           struct vlan_entry, vlan_list);
 376                 }
 377         }
 378
 379         return next;
 380 }
 381
 382 /**
 383  * bond_dev_queue_xmit - Prepare skb for xmit.
 384  *
 385  * @bond: bond device that got this skb for tx.
 386  * @skb: hw accel VLAN tagged skb to transmit
 387  * @slave_dev: slave that is supposed to xmit this skbuff
 388  *
 389  * When the bond gets an skb to transmit that is
 390  * already hardware accelerated VLAN tagged, and it
 391  * needs to relay this skb to a slave that is not
 392  * hw accel capable, the skb needs to be "unaccelerated",
 393  * i.e. strip the hwaccel tag and re-insert it as part
 394  * of the payload.
 395  */
 396 int bond_dev_queue_xmit(struct bonding *bond, struct sk_buff *skb,
 397                         struct net_device *slave_dev)
 398 {
 399         unsigned short uninitialized_var(vlan_id);
 400
 401         if (!list_empty(&bond->vlan_list) &&
 402             !(slave_dev->features & NETIF_F_HW_VLAN_TX) &&
 403             vlan_get_tag(skb, &vlan_id) == 0) {
 404                 skb->dev = slave_dev;
 405                 skb = vlan_put_tag(skb, vlan_id);
 406                 if (!skb) {
 407                         /* vlan_put_tag() frees the skb in case of error,
 408                          * so return success here so the calling functions
 409                          * won't attempt to free is again.
 410                          */
 411                         return 0;
 412                 }
 413         } else {
 414                 skb->dev = slave_dev;
 415         }
 416
 417         skb->priority = 1;
 418         dev_queue_xmit(skb);
 419
 420         return 0;
 421 }
 422
 423 /*
 424  * In the following 3 functions, bond_vlan_rx_register(), bond_vlan_rx_add_vid
 425  * and bond_vlan_rx_kill_vid, We don't protect the slave list iteration with a
 426  * lock because:
 427  * a. This operation is performed in IOCTL context,
 428  * b. The operation is protected by the RTNL semaphore in the 8021q code,
 429  * c. Holding a lock with BH disabled while directly calling a base driver
 430  *    entry point is generally a BAD idea.
 431  *
 432  * The design of synchronization/protection for this operation in the 8021q
 433  * module is good for one or more VLAN devices over a single physical device
 434  * and cannot be extended for a teaming solution like bonding, so there is a
 435  * potential race condition here where a net device from the vlan group might
 436  * be referenced (either by a base driver or the 8021q code) while it is being
 437  * removed from the system. However, it turns out we're not making matters
 438  * worse, and if it works for regular VLAN usage it will work here too.
 439 */
 440
 441 /**
 442  * bond_vlan_rx_register - Propagates registration to slaves
 443  * @bond_dev: bonding net device that got called
 444  * @grp: vlan group being registered
 445  */
 446 static void bond_vlan_rx_register(struct net_device *bond_dev,
 447                                   struct vlan_group *grp)
 448 {
 449         struct bonding *bond = netdev_priv(bond_dev);
 450         struct slave *slave;
 451         int i;
 452
 453         bond->vlgrp = grp;
 454
 455         bond_for_each_slave(bond, slave, i) {
 456                 struct net_device *slave_dev = slave->dev;
 457                 const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
 458
 459                 if ((slave_dev->features & NETIF_F_HW_VLAN_RX) &&
 460                     slave_ops->ndo_vlan_rx_register) {
 461                         slave_ops->ndo_vlan_rx_register(slave_dev, grp);
 462                 }
 463         }
 464 }
 465
 466 /**
 467  * bond_vlan_rx_add_vid - Propagates adding an id to slaves
 468  * @bond_dev: bonding net device that got called
 469  * @vid: vlan id being added
 470  */
 471 static void bond_vlan_rx_add_vid(struct net_device *bond_dev, uint16_t vid)
 472 {
 473         struct bonding *bond = netdev_priv(bond_dev);
 474         struct slave *slave;
 475         int i, res;
 476
 477         bond_for_each_slave(bond, slave, i) {
 478                 struct net_device *slave_dev = slave->dev;
 479                 const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
 480
 481                 if ((slave_dev->features & NETIF_F_HW_VLAN_FILTER) &&
 482                     slave_ops->ndo_vlan_rx_add_vid) {
 483                         slave_ops->ndo_vlan_rx_add_vid(slave_dev, vid);
 484                 }
 485         }
 486
 487         res = bond_add_vlan(bond, vid);
 488         if (res) {
 489                 pr_err(DRV_NAME
 490                        ": %s: Error: Failed to add vlan id %d\n",
 491                        bond_dev->name, vid);
 492         }
 493 }
 494
 495 /**
 496  * bond_vlan_rx_kill_vid - Propagates deleting an id to slaves
 497  * @bond_dev: bonding net device that got called
 498  * @vid: vlan id being removed
 499  */
 500 static void bond_vlan_rx_kill_vid(struct net_device *bond_dev, uint16_t vid)
 501 {
 502         struct bonding *bond = netdev_priv(bond_dev);
 503         struct slave *slave;
 504         struct net_device *vlan_dev;
 505         int i, res;
 506
 507         bond_for_each_slave(bond, slave, i) {
 508                 struct net_device *slave_dev = slave->dev;
 509                 const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
 510
 511                 if ((slave_dev->features & NETIF_F_HW_VLAN_FILTER) &&
 512                     slave_ops->ndo_vlan_rx_kill_vid) {
 513                         /* Save and then restore vlan_dev in the grp array,
 514                          * since the slave's driver might clear it.
 515                          */
 516                         vlan_dev = vlan_group_get_device(bond->vlgrp, vid);
 517                         slave_ops->ndo_vlan_rx_kill_vid(slave_dev, vid);
 518                         vlan_group_set_device(bond->vlgrp, vid, vlan_dev);
 519                 }
 520         }
 521
 522         res = bond_del_vlan(bond, vid);
 523         if (res) {
 524                 pr_err(DRV_NAME
 525                        ": %s: Error: Failed to remove vlan id %d\n",
 526                        bond_dev->name, vid);
 527         }
 528 }
 529
 530 static void bond_add_vlans_on_slave(struct bonding *bond, struct net_device *slave_dev)
 531 {
 532         struct vlan_entry *vlan;
 533         const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
 534
 535         write_lock_bh(&bond->lock);
 536
 537         if (list_empty(&bond->vlan_list))
 538                 goto out;
 539
 540         if ((slave_dev->features & NETIF_F_HW_VLAN_RX) &&
 541             slave_ops->ndo_vlan_rx_register)
 542                 slave_ops->ndo_vlan_rx_register(slave_dev, bond->vlgrp);
 543
 544         if (!(slave_dev->features & NETIF_F_HW_VLAN_FILTER) ||
 545             !(slave_ops->ndo_vlan_rx_add_vid))
 546                 goto out;
 547
 548         list_for_each_entry(vlan, &bond->vlan_list, vlan_list)
 549                 slave_ops->ndo_vlan_rx_add_vid(slave_dev, vlan->vlan_id);
 550
 551 out:
 552         write_unlock_bh(&bond->lock);
 553 }
 554
 555 static void bond_del_vlans_from_slave(struct bonding *bond,
 556                                       struct net_device *slave_dev)
 557 {
 558         const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
 559         struct vlan_entry *vlan;
 560         struct net_device *vlan_dev;
 561
 562         write_lock_bh(&bond->lock);
 563
 564         if (list_empty(&bond->vlan_list))
 565                 goto out;
 566
 567         if (!(slave_dev->features & NETIF_F_HW_VLAN_FILTER) ||
 568             !(slave_ops->ndo_vlan_rx_kill_vid))
 569                 goto unreg;
 570
 571         list_for_each_entry(vlan, &bond->vlan_list, vlan_list) {
 572                 /* Save and then restore vlan_dev in the grp array,
 573                  * since the slave's driver might clear it.
 574                  */
 575                 vlan_dev = vlan_group_get_device(bond->vlgrp, vlan->vlan_id);
 576                 slave_ops->ndo_vlan_rx_kill_vid(slave_dev, vlan->vlan_id);
 577                 vlan_group_set_device(bond->vlgrp, vlan->vlan_id, vlan_dev);
 578         }
 579
 580 unreg:
 581         if ((slave_dev->features & NETIF_F_HW_VLAN_RX) &&
 582             slave_ops->ndo_vlan_rx_register)
 583                 slave_ops->ndo_vlan_rx_register(slave_dev, NULL);
 584
 585 out:
 586         write_unlock_bh(&bond->lock);
 587 }
 588
 589 /*------------------------------- Link status -------------------------------*/
 590
 591 /*
 592  * Set the carrier state for the master according to the state of its
 593  * slaves.  If any slaves are up, the master is up.  In 802.3ad mode,
 594  * do special 802.3ad magic.
 595  *
 596  * Returns zero if carrier state does not change, nonzero if it does.
 597  */
 598 static int bond_set_carrier(struct bonding *bond)
 599 {
 600         struct slave *slave;
 601         int i;
 602
 603         if (bond->slave_cnt == 0)
 604                 goto down;
 605
 606         if (bond->params.mode == BOND_MODE_8023AD)
 607                 return bond_3ad_set_carrier(bond);
 608
 609         bond_for_each_slave(bond, slave, i) {
 610                 if (slave->link == BOND_LINK_UP) {
 611                         if (!netif_carrier_ok(bond->dev)) {
 612                                 netif_carrier_on(bond->dev);
 613                                 return 1;
 614                         }
 615                         return 0;
 616                 }
 617         }
 618
 619 down:
 620         if (netif_carrier_ok(bond->dev)) {
 621                 netif_carrier_off(bond->dev);
 622                 return 1;
 623         }
 624         return 0;
 625 }
 626
 627 /*
 628  * Get link speed and duplex from the slave's base driver
 629  * using ethtool. If for some reason the call fails or the
 630  * values are invalid, fake speed and duplex to 100/Full
 631  * and return error.
 632  */
 633 static int bond_update_speed_duplex(struct slave *slave)
 634 {
 635         struct net_device *slave_dev = slave->dev;
 636         struct ethtool_cmd etool;
 637         int res;
 638
 639         /* Fake speed and duplex */
 640         slave->speed = SPEED_100;
 641         slave->duplex = DUPLEX_FULL;
 642
 643         if (!slave_dev->ethtool_ops || !slave_dev->ethtool_ops->get_settings)
 644                 return -1;
 645
 646         res = slave_dev->ethtool_ops->get_settings(slave_dev, &etool);
 647         if (res < 0)
 648                 return -1;
 649
 650         switch (etool.speed) {
 651         case SPEED_10:
 652         case SPEED_100:
 653         case SPEED_1000:
 654         case SPEED_10000:
 655                 break;
 656         default:
 657                 return -1;
 658         }
 659
 660         switch (etool.duplex) {
 661         case DUPLEX_FULL:
 662         case DUPLEX_HALF:
 663                 break;
 664         default:
 665                 return -1;
 666         }
 667
 668         slave->speed = etool.speed;
 669         slave->duplex = etool.duplex;
 670
 671         return 0;
 672 }
 673
 674 /*
 675  * if <dev> supports MII link status reporting, check its link status.
 676  *
 677  * We either do MII/ETHTOOL ioctls, or check netif_carrier_ok(),
 678  * depending upon the setting of the use_carrier parameter.
 679  *
 680  * Return either BMSR_LSTATUS, meaning that the link is up (or we
 681  * can't tell and just pretend it is), or 0, meaning that the link is
 682  * down.
 683  *
 684  * If reporting is non-zero, instead of faking link up, return -1 if
 685  * both ETHTOOL and MII ioctls fail (meaning the device does not
 686  * support them).  If use_carrier is set, return whatever it says.
 687  * It'd be nice if there was a good way to tell if a driver supports
 688  * netif_carrier, but there really isn't.
 689  */
 690 static int bond_check_dev_link(struct bonding *bond,
 691                                struct net_device *slave_dev, int reporting)
 692 {
 693         const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
 694         static int (*ioctl)(struct net_device *, struct ifreq *, int);
 695         struct ifreq ifr;
 696         struct mii_ioctl_data *mii;
 697
 698         if (!reporting && !netif_running(slave_dev))
 699                 return 0;
 700
 701         if (bond->params.use_carrier)
 702                 return netif_carrier_ok(slave_dev) ? BMSR_LSTATUS : 0;
 703
 704         /* Try to get link status using Ethtool first. */
 705         if (slave_dev->ethtool_ops) {
 706                 if (slave_dev->ethtool_ops->get_link) {
 707                         u32 link;
 708
 709                         link = slave_dev->ethtool_ops->get_link(slave_dev);
 710
 711                         return link ? BMSR_LSTATUS : 0;
 712                 }
 713         }
 714
 715         /* Ethtool can't be used, fallback to MII ioctls. */
 716         ioctl = slave_ops->ndo_do_ioctl;
 717         if (ioctl) {
 718                 /* TODO: set pointer to correct ioctl on a per team member */
 719                 /*       bases to make this more efficient. that is, once  */
 720                 /*       we determine the correct ioctl, we will always    */
 721                 /*       call it and not the others for that team          */
 722                 /*       member.                                           */
 723
 724                 /*
 725                  * We cannot assume that SIOCGMIIPHY will also read a
 726                  * register; not all network drivers (e.g., e100)
 727                  * support that.
 728                  */
 729
 730                 /* Yes, the mii is overlaid on the ifreq.ifr_ifru */
 731                 strncpy(ifr.ifr_name, slave_dev->name, IFNAMSIZ);
 732                 mii = if_mii(&ifr);
 733                 if (IOCTL(slave_dev, &ifr, SIOCGMIIPHY) == 0) {
 734                         mii->reg_num = MII_BMSR;
 735                         if (IOCTL(slave_dev, &ifr, SIOCGMIIREG) == 0)
 736                                 return mii->val_out & BMSR_LSTATUS;
 737                 }
 738         }
 739
 740         /*
 741          * If reporting, report that either there's no dev->do_ioctl,
 742          * or both SIOCGMIIREG and get_link failed (meaning that we
 743          * cannot report link status).  If not reporting, pretend
 744          * we're ok.
 745          */
 746         return reporting ? -1 : BMSR_LSTATUS;
 747 }
 748
 749 /*----------------------------- Multicast list ------------------------------*/
 750
 751 /*
 752  * Returns 0 if dmi1 and dmi2 are the same, non-0 otherwise
 753  */
 754 static inline int bond_is_dmi_same(const struct dev_mc_list *dmi1,
 755                                    const struct dev_mc_list *dmi2)
 756 {
 757         return memcmp(dmi1->dmi_addr, dmi2->dmi_addr, dmi1->dmi_addrlen) == 0 &&
 758                         dmi1->dmi_addrlen == dmi2->dmi_addrlen;
 759 }
 760
 761 /*
 762  * returns dmi entry if found, NULL otherwise
 763  */
 764 static struct dev_mc_list *bond_mc_list_find_dmi(struct dev_mc_list *dmi,
 765                                                  struct dev_mc_list *mc_list)
 766 {
 767         struct dev_mc_list *idmi;
 768
 769         for (idmi = mc_list; idmi; idmi = idmi->next) {
 770                 if (bond_is_dmi_same(dmi, idmi))
 771                         return idmi;
 772         }
 773
 774         return NULL;
 775 }
 776
 777 /*
 778  * Push the promiscuity flag down to appropriate slaves
 779  */
 780 static int bond_set_promiscuity(struct bonding *bond, int inc)
 781 {
 782         int err = 0;
 783         if (USES_PRIMARY(bond->params.mode)) {
 784                 /* write lock already acquired */
 785                 if (bond->curr_active_slave) {
 786                         err = dev_set_promiscuity(bond->curr_active_slave->dev,
 787                                                   inc);
 788                 }
 789         } else {
 790                 struct slave *slave;
 791                 int i;
 792                 bond_for_each_slave(bond, slave, i) {
 793                         err = dev_set_promiscuity(slave->dev, inc);
 794                         if (err)
 795                                 return err;
 796                 }
 797         }
 798         return err;
 799 }
 800
 801 /*
 802  * Push the allmulti flag down to all slaves
 803  */
 804 static int bond_set_allmulti(struct bonding *bond, int inc)
 805 {
 806         int err = 0;
 807         if (USES_PRIMARY(bond->params.mode)) {
 808                 /* write lock already acquired */
 809                 if (bond->curr_active_slave) {
 810                         err = dev_set_allmulti(bond->curr_active_slave->dev,
 811                                                inc);
 812                 }
 813         } else {
 814                 struct slave *slave;
 815                 int i;
 816                 bond_for_each_slave(bond, slave, i) {
 817                         err = dev_set_allmulti(slave->dev, inc);
 818                         if (err)
 819                                 return err;
 820                 }
 821         }
 822         return err;
 823 }
 824
 825 /*
 826  * Add a Multicast address to slaves
 827  * according to mode
 828  */
 829 static void bond_mc_add(struct bonding *bond, void *addr, int alen)
 830 {
 831         if (USES_PRIMARY(bond->params.mode)) {
 832                 /* write lock already acquired */
 833                 if (bond->curr_active_slave)
 834                         dev_mc_add(bond->curr_active_slave->dev, addr, alen, 0);
 835         } else {
 836                 struct slave *slave;
 837                 int i;
 838
 839                 bond_for_each_slave(bond, slave, i)
 840                         dev_mc_add(slave->dev, addr, alen, 0);
 841         }
 842 }
 843
 844 /*
 845  * Remove a multicast address from slave
 846  * according to mode
 847  */
 848 static void bond_mc_delete(struct bonding *bond, void *addr, int alen)
 849 {
 850         if (USES_PRIMARY(bond->params.mode)) {
 851                 /* write lock already acquired */
 852                 if (bond->curr_active_slave)
 853                         dev_mc_delete(bond->curr_active_slave->dev, addr,
 854                                       alen, 0);
 855         } else {
 856                 struct slave *slave;
 857                 int i;
 858                 bond_for_each_slave(bond, slave, i) {
 859                         dev_mc_delete(slave->dev, addr, alen, 0);
 860                 }
 861         }
 862 }
 863
 864
 865 /*
 866  * Retrieve the list of registered multicast addresses for the bonding
 867  * device and retransmit an IGMP JOIN request to the current active
 868  * slave.
 869  */
 870 static void bond_resend_igmp_join_requests(struct bonding *bond)
 871 {
 872         struct in_device *in_dev;
 873         struct ip_mc_list *im;
 874
 875         rcu_read_lock();
 876         in_dev = __in_dev_get_rcu(bond->dev);
 877         if (in_dev) {
 878                 for (im = in_dev->mc_list; im; im = im->next)
 879                         ip_mc_rejoin_group(im);
 880         }
 881
 882         rcu_read_unlock();
 883 }
 884
 885 /*
 886  * Totally destroys the mc_list in bond
 887  */
 888 static void bond_mc_list_destroy(struct bonding *bond)
 889 {
 890         struct dev_mc_list *dmi;
 891
 892         dmi = bond->mc_list;
 893         while (dmi) {
 894                 bond->mc_list = dmi->next;
 895                 kfree(dmi);
 896                 dmi = bond->mc_list;
 897         }
 898
 899         bond->mc_list = NULL;
 900 }
 901
 902 /*
 903  * Copy all the Multicast addresses from src to the bonding device dst
 904  */
 905 static int bond_mc_list_copy(struct dev_mc_list *mc_list, struct bonding *bond,
 906                              gfp_t gfp_flag)
 907 {
 908         struct dev_mc_list *dmi, *new_dmi;
 909
 910         for (dmi = mc_list; dmi; dmi = dmi->next) {
 911                 new_dmi = kmalloc(sizeof(struct dev_mc_list), gfp_flag);
 912
 913                 if (!new_dmi) {
 914                         /* FIXME: Potential memory leak !!! */
 915                         return -ENOMEM;
 916                 }
 917
 918                 new_dmi->next = bond->mc_list;
 919                 bond->mc_list = new_dmi;
 920                 new_dmi->dmi_addrlen = dmi->dmi_addrlen;
 921                 memcpy(new_dmi->dmi_addr, dmi->dmi_addr, dmi->dmi_addrlen);
 922                 new_dmi->dmi_users = dmi->dmi_users;
 923                 new_dmi->dmi_gusers = dmi->dmi_gusers;
 924         }
 925
 926         return 0;
 927 }
 928
 929 /*
 930  * flush all members of flush->mc_list from device dev->mc_list
 931  */
 932 static void bond_mc_list_flush(struct net_device *bond_dev,
 933                                struct net_device *slave_dev)
 934 {
 935         struct bonding *bond = netdev_priv(bond_dev);
 936         struct dev_mc_list *dmi;
 937
 938         for (dmi = bond_dev->mc_list; dmi; dmi = dmi->next)
 939                 dev_mc_delete(slave_dev, dmi->dmi_addr, dmi->dmi_addrlen, 0);
 940
 941         if (bond->params.mode == BOND_MODE_8023AD) {
 942                 /* del lacpdu mc addr from mc list */
 943                 u8 lacpdu_multicast[ETH_ALEN] = MULTICAST_LACPDU_ADDR;
 944
 945                 dev_mc_delete(slave_dev, lacpdu_multicast, ETH_ALEN, 0);
 946         }
 947 }
 948
 949 /*--------------------------- Active slave change ---------------------------*/
 950
 951 /*
 952  * Update the mc list and multicast-related flags for the new and
 953  * old active slaves (if any) according to the multicast mode, and
 954  * promiscuous flags unconditionally.
 955  */
 956 static void bond_mc_swap(struct bonding *bond, struct slave *new_active,
 957                          struct slave *old_active)
 958 {
 959         struct dev_mc_list *dmi;
 960
 961         if (!USES_PRIMARY(bond->params.mode))
 962                 /* nothing to do -  mc list is already up-to-date on
 963                  * all slaves
 964                  */
 965                 return;
 966
 967         if (old_active) {
 968                 if (bond->dev->flags & IFF_PROMISC)
 969                         dev_set_promiscuity(old_active->dev, -1);
 970
 971                 if (bond->dev->flags & IFF_ALLMULTI)
 972                         dev_set_allmulti(old_active->dev, -1);
 973
 974                 for (dmi = bond->dev->mc_list; dmi; dmi = dmi->next)
 975                         dev_mc_delete(old_active->dev, dmi->dmi_addr,
 976                                       dmi->dmi_addrlen, 0);
 977         }
 978
 979         if (new_active) {
 980                 /* FIXME: Signal errors upstream. */
 981                 if (bond->dev->flags & IFF_PROMISC)
 982                         dev_set_promiscuity(new_active->dev, 1);
 983
 984                 if (bond->dev->flags & IFF_ALLMULTI)
 985                         dev_set_allmulti(new_active->dev, 1);
 986
 987                 for (dmi = bond->dev->mc_list; dmi; dmi = dmi->next)
 988                         dev_mc_add(new_active->dev, dmi->dmi_addr,
 989                                    dmi->dmi_addrlen, 0);
 990                 bond_resend_igmp_join_requests(bond);
 991         }
 992 }
 993
 994 /*
 995  * bond_do_fail_over_mac
 996  *
 997  * Perform special MAC address swapping for fail_over_mac settings
 998  *
 999  * Called with RTNL, bond->lock for read, curr_slave_lock for write_bh.
1000  */
1001 static void bond_do_fail_over_mac(struct bonding *bond,
1002                                   struct slave *new_active,
1003                                   struct slave *old_active)
1004         __releases(&bond->curr_slave_lock)
1005         __releases(&bond->lock)
1006         __acquires(&bond->lock)
1007         __acquires(&bond->curr_slave_lock)
1008 {
1009         u8 tmp_mac[ETH_ALEN];
1010         struct sockaddr saddr;
1011         int rv;
1012
1013         switch (bond->params.fail_over_mac) {
1014         case BOND_FOM_ACTIVE:
1015                 if (new_active)
1016                         memcpy(bond->dev->dev_addr,  new_active->dev->dev_addr,
1017                                new_active->dev->addr_len);
1018                 break;
1019         case BOND_FOM_FOLLOW:
1020                 /*
1021                  * if new_active && old_active, swap them
1022                  * if just old_active, do nothing (going to no active slave)
1023                  * if just new_active, set new_active to bond's MAC
1024                  */
1025                 if (!new_active)
1026                         return;
1027
1028                 write_unlock_bh(&bond->curr_slave_lock);
1029                 read_unlock(&bond->lock);
1030
1031                 if (old_active) {
1032                         memcpy(tmp_mac, new_active->dev->dev_addr, ETH_ALEN);
1033                         memcpy(saddr.sa_data, old_active->dev->dev_addr,
1034                                ETH_ALEN);
1035                         saddr.sa_family = new_active->dev->type;
1036                 } else {
1037                         memcpy(saddr.sa_data, bond->dev->dev_addr, ETH_ALEN);
1038                         saddr.sa_family = bond->dev->type;
1039                 }
1040
1041                 rv = dev_set_mac_address(new_active->dev, &saddr);
1042                 if (rv) {
1043                         pr_err(DRV_NAME
1044                                ": %s: Error %d setting MAC of slave %s\n",
1045                                bond->dev->name, -rv, new_active->dev->name);
1046                         goto out;
1047                 }
1048
1049                 if (!old_active)
1050                         goto out;
1051
1052                 memcpy(saddr.sa_data, tmp_mac, ETH_ALEN);
1053                 saddr.sa_family = old_active->dev->type;
1054
1055                 rv = dev_set_mac_address(old_active->dev, &saddr);
1056                 if (rv)
1057                         pr_err(DRV_NAME
1058                                ": %s: Error %d setting MAC of slave %s\n",
1059                                bond->dev->name, -rv, new_active->dev->name);
1060 out:
1061                 read_lock(&bond->lock);
1062                 write_lock_bh(&bond->curr_slave_lock);
1063                 break;
1064         default:
1065                 pr_err(DRV_NAME
1066                        ": %s: bond_do_fail_over_mac impossible: bad policy %d\n",
1067                        bond->dev->name, bond->params.fail_over_mac);
1068                 break;
1069         }
1070
1071 }
1072
1073
1074 /**
1075  * find_best_interface - select the best available slave to be the active one
1076  * @bond: our bonding struct
1077  *
1078  * Warning: Caller must hold curr_slave_lock for writing.
1079  */
1080 static struct slave *bond_find_best_slave(struct bonding *bond)
1081 {
1082         struct slave *new_active, *old_active;
1083         struct slave *bestslave = NULL;
1084         int mintime = bond->params.updelay;
1085         int i;
1086
1087         new_active = old_active = bond->curr_active_slave;
1088
1089         if (!new_active) { /* there were no active slaves left */
1090                 if (bond->slave_cnt > 0)   /* found one slave */
1091                         new_active = bond->first_slave;
1092                 else
1093                         return NULL; /* still no slave, return NULL */
1094         }
1095
1096         /*
1097          * first try the primary link; if arping, a link must tx/rx
1098          * traffic before it can be considered the curr_active_slave.
1099          * also, we would skip slaves between the curr_active_slave
1100          * and primary_slave that may be up and able to arp
1101          */
1102         if ((bond->primary_slave) &&
1103             (!bond->params.arp_interval) &&
1104             (IS_UP(bond->primary_slave->dev))) {
1105                 new_active = bond->primary_slave;
1106         }
1107
1108         /* remember where to stop iterating over the slaves */
1109         old_active = new_active;
1110
1111         bond_for_each_slave_from(bond, new_active, i, old_active) {
1112                 if (IS_UP(new_active->dev)) {
1113                         if (new_active->link == BOND_LINK_UP) {
1114                                 return new_active;
1115                         } else if (new_active->link == BOND_LINK_BACK) {
1116                                 /* link up, but waiting for stabilization */
1117                                 if (new_active->delay < mintime) {
1118                                         mintime = new_active->delay;
1119                                         bestslave = new_active;
1120                                 }
1121                         }
1122                 }
1123         }
1124
1125         return bestslave;
1126 }
1127
1128 /**
1129  * change_active_interface - change the active slave into the specified one
1130  * @bond: our bonding struct
1131  * @new: the new slave to make the active one
1132  *
1133  * Set the new slave to the bond's settings and unset them on the old
1134  * curr_active_slave.
1135  * Setting include flags, mc-list, promiscuity, allmulti, etc.
1136  *
1137  * If @new's link state is %BOND_LINK_BACK we'll set it to %BOND_LINK_UP,
1138  * because it is apparently the best available slave we have, even though its
1139  * updelay hasn't timed out yet.
1140  *
1141  * If new_active is not NULL, caller must hold bond->lock for read and
1142  * curr_slave_lock for write_bh.
1143  */
1144 void bond_change_active_slave(struct bonding *bond, struct slave *new_active)
1145 {
1146         struct slave *old_active = bond->curr_active_slave;
1147
1148         if (old_active == new_active)
1149                 return;
1150
1151         if (new_active) {
1152                 new_active->jiffies = jiffies;
1153
1154                 if (new_active->link == BOND_LINK_BACK) {
1155                         if (USES_PRIMARY(bond->params.mode)) {
1156                                 pr_info(DRV_NAME
1157                                        ": %s: making interface %s the new "
1158                                        "active one %d ms earlier.\n",
1159                                        bond->dev->name, new_active->dev->name,
1160                                        (bond->params.updelay - new_active->delay) * bond->params.miimon);
1161                         }
1162
1163                         new_active->delay = 0;
1164                         new_active->link = BOND_LINK_UP;
1165
1166                         if (bond->params.mode == BOND_MODE_8023AD)
1167                                 bond_3ad_handle_link_change(new_active, BOND_LINK_UP);
1168
1169                         if (bond_is_lb(bond))
1170                                 bond_alb_handle_link_change(bond, new_active, BOND_LINK_UP);
1171                 } else {
1172                         if (USES_PRIMARY(bond->params.mode)) {
1173                                 pr_info(DRV_NAME
1174                                        ": %s: making interface %s the new "
1175                                        "active one.\n",
1176                                        bond->dev->name, new_active->dev->name);
1177                         }
1178                 }
1179         }
1180
1181         if (USES_PRIMARY(bond->params.mode))
1182                 bond_mc_swap(bond, new_active, old_active);
1183
1184         if (bond_is_lb(bond)) {
1185                 bond_alb_handle_active_change(bond, new_active);
1186                 if (old_active)
1187                         bond_set_slave_inactive_flags(old_active);
1188                 if (new_active)
1189                         bond_set_slave_active_flags(new_active);
1190         } else {
1191                 bond->curr_active_slave = new_active;
1192         }
1193
1194         if (bond->params.mode == BOND_MODE_ACTIVEBACKUP) {
1195                 if (old_active)
1196                         bond_set_slave_inactive_flags(old_active);
1197
1198                 if (new_active) {
1199                         bond_set_slave_active_flags(new_active);
1200
1201                         if (bond->params.fail_over_mac)
1202                                 bond_do_fail_over_mac(bond, new_active,
1203                                                       old_active);
1204
1205                         bond->send_grat_arp = bond->params.num_grat_arp;
1206                         bond_send_gratuitous_arp(bond);
1207
1208                         bond->send_unsol_na = bond->params.num_unsol_na;
1209                         bond_send_unsolicited_na(bond);
1210
1211                         write_unlock_bh(&bond->curr_slave_lock);
1212                         read_unlock(&bond->lock);
1213
1214                         netdev_bonding_change(bond->dev);
1215
1216                         read_lock(&bond->lock);
1217                         write_lock_bh(&bond->curr_slave_lock);
1218                 }
1219         }
1220 }
1221
1222 /**
1223  * bond_select_active_slave - select a new active slave, if needed
1224  * @bond: our bonding struct
1225  *
1226  * This functions should be called when one of the following occurs:
1227  * - The old curr_active_slave has been released or lost its link.
1228  * - The primary_slave has got its link back.
1229  * - A slave has got its link back and there's no old curr_active_slave.
1230  *
1231  * Caller must hold bond->lock for read and curr_slave_lock for write_bh.
1232  */
1233 void bond_select_active_slave(struct bonding *bond)
1234 {
1235         struct slave *best_slave;
1236         int rv;
1237
1238         best_slave = bond_find_best_slave(bond);
1239         if (best_slave != bond->curr_active_slave) {
1240                 bond_change_active_slave(bond, best_slave);
1241                 rv = bond_set_carrier(bond);
1242                 if (!rv)
1243                         return;
1244
1245                 if (netif_carrier_ok(bond->dev)) {
1246                         pr_info(DRV_NAME
1247                                ": %s: first active interface up!\n",
1248                                bond->dev->name);
1249                 } else {
1250                         pr_info(DRV_NAME ": %s: "
1251                                "now running without any active interface !\n",
1252                                bond->dev->name);
1253                 }
1254         }
1255 }
1256
1257 /*--------------------------- slave list handling ---------------------------*/
1258
1259 /*
1260  * This function attaches the slave to the end of list.
1261  *
1262  * bond->lock held for writing by caller.
1263  */
1264 static void bond_attach_slave(struct bonding *bond, struct slave *new_slave)
1265 {
1266         if (bond->first_slave == NULL) { /* attaching the first slave */
1267                 new_slave->next = new_slave;
1268                 new_slave->prev = new_slave;
1269                 bond->first_slave = new_slave;
1270         } else {
1271                 new_slave->next = bond->first_slave;
1272                 new_slave->prev = bond->first_slave->prev;
1273                 new_slave->next->prev = new_slave;
1274                 new_slave->prev->next = new_slave;
1275         }
1276
1277         bond->slave_cnt++;
1278 }
1279
1280 /*
1281  * This function detaches the slave from the list.
1282  * WARNING: no check is made to verify if the slave effectively
1283  * belongs to <bond>.
1284  * Nothing is freed on return, structures are just unchained.
1285  * If any slave pointer in bond was pointing to <slave>,
1286  * it should be changed by the calling function.
1287  *
1288  * bond->lock held for writing by caller.
1289  */
1290 static void bond_detach_slave(struct bonding *bond, struct slave *slave)
1291 {
1292         if (slave->next)
1293                 slave->next->prev = slave->prev;
1294
1295         if (slave->prev)
1296                 slave->prev->next = slave->next;
1297
1298         if (bond->first_slave == slave) { /* slave is the first slave */
1299                 if (bond->slave_cnt > 1) { /* there are more slave */
1300                         bond->first_slave = slave->next;
1301                 } else {
1302                         bond->first_slave = NULL; /* slave was the last one */
1303                 }
1304         }
1305
1306         slave->next = NULL;
1307         slave->prev = NULL;
1308         bond->slave_cnt--;
1309 }
1310
1311 /*---------------------------------- IOCTL ----------------------------------*/
1312
1313 static int bond_sethwaddr(struct net_device *bond_dev,
1314                           struct net_device *slave_dev)
1315 {
1316         pr_debug("bond_dev=%p\n", bond_dev);
1317         pr_debug("slave_dev=%p\n", slave_dev);
1318         pr_debug("slave_dev->addr_len=%d\n", slave_dev->addr_len);
1319         memcpy(bond_dev->dev_addr, slave_dev->dev_addr, slave_dev->addr_len);
1320         return 0;
1321 }
1322
1323 #define BOND_VLAN_FEATURES \
1324         (NETIF_F_VLAN_CHALLENGED | NETIF_F_HW_VLAN_RX | NETIF_F_HW_VLAN_TX | \
1325          NETIF_F_HW_VLAN_FILTER)
1326
1327 /*
1328  * Compute the common dev->feature set available to all slaves.  Some
1329  * feature bits are managed elsewhere, so preserve those feature bits
1330  * on the master device.
1331  */
1332 static int bond_compute_features(struct bonding *bond)
1333 {
1334         struct slave *slave;
1335         struct net_device *bond_dev = bond->dev;
1336         unsigned long features = bond_dev->features;
1337         unsigned long vlan_features = 0;
1338         unsigned short max_hard_header_len = max((u16)ETH_HLEN,
1339                                                 bond_dev->hard_header_len);
1340         int i;
1341
1342         features &= ~(NETIF_F_ALL_CSUM | BOND_VLAN_FEATURES);
1343         features |=  NETIF_F_GSO_MASK | NETIF_F_NO_CSUM;
1344
1345         if (!bond->first_slave)
1346                 goto done;
1347
1348         features &= ~NETIF_F_ONE_FOR_ALL;
1349
1350         vlan_features = bond->first_slave->dev->vlan_features;
1351         bond_for_each_slave(bond, slave, i) {
1352                 features = netdev_increment_features(features,
1353                                                      slave->dev->features,
1354                                                      NETIF_F_ONE_FOR_ALL);
1355                 vlan_features = netdev_increment_features(vlan_features,
1356                                                         slave->dev->vlan_features,
1357                                                         NETIF_F_ONE_FOR_ALL);
1358                 if (slave->dev->hard_header_len > max_hard_header_len)
1359                         max_hard_header_len = slave->dev->hard_header_len;
1360         }
1361
1362 done:
1363         features |= (bond_dev->features & BOND_VLAN_FEATURES);
1364         bond_dev->features = netdev_fix_features(features, NULL);
1365         bond_dev->vlan_features = netdev_fix_features(vlan_features, NULL);
1366         bond_dev->hard_header_len = max_hard_header_len;
1367
1368         return 0;
1369 }
1370
1371 static void bond_setup_by_slave(struct net_device *bond_dev,
1372                                 struct net_device *slave_dev)
1373 {
1374         struct bonding *bond = netdev_priv(bond_dev);
1375
1376         bond_dev->header_ops        = slave_dev->header_ops;
1377
1378         bond_dev->type              = slave_dev->type;
1379         bond_dev->hard_header_len   = slave_dev->hard_header_len;
1380         bond_dev->addr_len          = slave_dev->addr_len;
1381
1382         memcpy(bond_dev->broadcast, slave_dev->broadcast,
1383                 slave_dev->addr_len);
1384         bond->setup_by_slave = 1;
1385 }
1386
1387 /* enslave device <slave> to bond device <master> */
1388 int bond_enslave(struct net_device *bond_dev, struct net_device *slave_dev)
1389 {
1390         struct bonding *bond = netdev_priv(bond_dev);
1391         const struct net_device_ops *slave_ops = slave_dev->netdev_ops;
1392         struct slave *new_slave = NULL;
1393         struct dev_mc_list *dmi;
1394         struct sockaddr addr;
1395         int link_reporting;
1396         int old_features = bond_dev->features;
1397         int res = 0;
1398
1399         if (!bond->params.use_carrier && slave_dev->ethtool_ops == NULL &&
1400                 slave_ops->ndo_do_ioctl == NULL) {
1401                 pr_warning(DRV_NAME
1402                        ": %s: Warning: no link monitoring support for %s\n",
1403                        bond_dev->name, slave_dev->name);
1404         }
1405
1406         /* bond must be initialized by bond_open() before enslaving */
1407         if (!(bond_dev->flags & IFF_UP)) {
1408                 pr_warning(DRV_NAME
1409                         " %s: master_dev is not up in bond_enslave\n",
1410                         bond_dev->name);
1411         }
1412
1413         /* already enslaved */
1414         if (slave_dev->flags & IFF_SLAVE) {
1415                 pr_debug("Error, Device was already enslaved\n");
1416                 return -EBUSY;
1417         }
1418
1419         /* vlan challenged mutual exclusion */
1420         /* no need to lock since we're protected by rtnl_lock */
1421         if (slave_dev->features & NETIF_F_VLAN_CHALLENGED) {
1422                 pr_debug("%s: NETIF_F_VLAN_CHALLENGED\n", slave_dev->name);
1423                 if (!list_empty(&bond->vlan_list)) {
1424                         pr_err(DRV_NAME
1425                                ": %s: Error: cannot enslave VLAN "
1426                                "challenged slave %s on VLAN enabled "
1427                                "bond %s\n", bond_dev->name, slave_dev->name,
1428                                bond_dev->name);
1429                         return -EPERM;
1430                 } else {
1431                         pr_warning(DRV_NAME
1432                                ": %s: Warning: enslaved VLAN challenged "
1433                                "slave %s. Adding VLANs will be blocked as "
1434                                "long as %s is part of bond %s\n",
1435                                bond_dev->name, slave_dev->name, slave_dev->name,
1436                                bond_dev->name);
1437                         bond_dev->features |= NETIF_F_VLAN_CHALLENGED;
1438                 }
1439         } else {
1440                 pr_debug("%s: ! NETIF_F_VLAN_CHALLENGED\n", slave_dev->name);
1441                 if (bond->slave_cnt == 0) {
1442                         /* First slave, and it is not VLAN challenged,
1443                          * so remove the block of adding VLANs over the bond.
1444                          */
1445                         bond_dev->features &= ~NETIF_F_VLAN_CHALLENGED;
1446                 }
1447         }
1448
1449         /*
1450          * Old ifenslave binaries are no longer supported.  These can
1451          * be identified with moderate accuracy by the state of the slave:
1452          * the current ifenslave will set the interface down prior to
1453          * enslaving it; the old ifenslave will not.
1454          */
1455         if ((slave_dev->flags & IFF_UP)) {
1456                 pr_err(DRV_NAME ": %s is up. "
1457                        "This may be due to an out of date ifenslave.\n",
1458                        slave_dev->name);
1459                 res = -EPERM;
1460                 goto err_undo_flags;
1461         }
1462
1463         /* set bonding device ether type by slave - bonding netdevices are
1464          * created with ether_setup, so when the slave type is not ARPHRD_ETHER
1465          * there is a need to override some of the type dependent attribs/funcs.
1466          *
1467          * bond ether type mutual exclusion - don't allow slaves of dissimilar
1468          * ether type (eg ARPHRD_ETHER and ARPHRD_INFINIBAND) share the same bond
1469          */
1470         if (bond->slave_cnt == 0) {
1471                 if (bond_dev->type != slave_dev->type) {
1472                         dev_close(bond_dev);
1473                         pr_debug("%s: change device type from %d to %d\n",
1474                                 bond_dev->name, bond_dev->type, slave_dev->type);
1475                         if (slave_dev->type != ARPHRD_ETHER)
1476                                 bond_setup_by_slave(bond_dev, slave_dev);
1477                         else
1478                                 ether_setup(bond_dev);
1479                         dev_open(bond_dev);
1480                 }
1481         } else if (bond_dev->type != slave_dev->type) {
1482                 pr_err(DRV_NAME ": %s ether type (%d) is different "
1483                         "from other slaves (%d), can not enslave it.\n",
1484                         slave_dev->name,
1485                         slave_dev->type, bond_dev->type);
1486                         res = -EINVAL;
1487                         goto err_undo_flags;
1488         }
1489
1490         if (slave_ops->ndo_set_mac_address == NULL) {
1491                 if (bond->slave_cnt == 0) {
1492                         pr_warning(DRV_NAME
1493                                ": %s: Warning: The first slave device "
1494                                "specified does not support setting the MAC "
1495                                "address. Setting fail_over_mac to active.",
1496                                bond_dev->name);
1497                         bond->params.fail_over_mac = BOND_FOM_ACTIVE;
1498                 } else if (bond->params.fail_over_mac != BOND_FOM_ACTIVE) {
1499                         pr_err(DRV_NAME
1500                                 ": %s: Error: The slave device specified "
1501                                 "does not support setting the MAC address, "
1502                                 "but fail_over_mac is not set to active.\n"
1503                                 , bond_dev->name);
1504                         res = -EOPNOTSUPP;
1505                         goto err_undo_flags;
1506                 }
1507         }
1508
1509         new_slave = kzalloc(sizeof(struct slave), GFP_KERNEL);
1510         if (!new_slave) {
1511                 res = -ENOMEM;
1512                 goto err_undo_flags;
1513         }
1514
1515         /* save slave's original flags before calling
1516          * netdev_set_master and dev_open
1517          */
1518         new_slave->original_flags = slave_dev->flags;
1519
1520         /*
1521          * Save slave's original ("permanent") mac address for modes
1522          * that need it, and for restoring it upon release, and then
1523          * set it to the master's address
1524          */
1525         memcpy(new_slave->perm_hwaddr, slave_dev->dev_addr, ETH_ALEN);
1526
1527         if (!bond->params.fail_over_mac) {
1528                 /*
1529                  * Set slave to master's mac address.  The application already
1530                  * set the master's mac address to that of the first slave
1531                  */
1532                 memcpy(addr.sa_data, bond_dev->dev_addr, bond_dev->addr_len);
1533                 addr.sa_family = slave_dev->type;
1534                 res = dev_set_mac_address(slave_dev, &addr);
1535                 if (res) {
1536                         pr_debug("Error %d calling set_mac_address\n", res);
1537                         goto err_free;
1538                 }
1539         }
1540
1541         res = netdev_set_master(slave_dev, bond_dev);
1542         if (res) {
1543                 pr_debug("Error %d calling netdev_set_master\n", res);
1544                 goto err_restore_mac;
1545         }
1546         /* open the slave since the application closed it */
1547         res = dev_open(slave_dev);
1548         if (res) {
1549                 pr_debug("Opening slave %s failed\n", slave_dev->name);
1550                 goto err_unset_master;
1551         }
1552
1553         new_slave->dev = slave_dev;
1554         slave_dev->priv_flags |= IFF_BONDING;
1555
1556         if (bond_is_lb(bond)) {
1557                 /* bond_alb_init_slave() must be called before all other stages since
1558                  * it might fail and we do not want to have to undo everything
1559                  */
1560                 res = bond_alb_init_slave(bond, new_slave);
1561                 if (res)
1562                         goto err_close;
1563         }
1564
1565         /* If the mode USES_PRIMARY, then the new slave gets the
1566          * master's promisc (and mc) settings only if it becomes the
1567          * curr_active_slave, and that is taken care of later when calling
1568          * bond_change_active()
1569          */
1570         if (!USES_PRIMARY(bond->params.mode)) {
1571                 /* set promiscuity level to new slave */
1572                 if (bond_dev->flags & IFF_PROMISC) {
1573                         res = dev_set_promiscuity(slave_dev, 1);
1574                         if (res)
1575                                 goto err_close;
1576                 }
1577
1578                 /* set allmulti level to new slave */
1579                 if (bond_dev->flags & IFF_ALLMULTI) {
1580                         res = dev_set_allmulti(slave_dev, 1);
1581                         if (res)
1582                                 goto err_close;
1583                 }
1584
1585                 netif_addr_lock_bh(bond_dev);
1586                 /* upload master's mc_list to new slave */
1587                 for (dmi = bond_dev->mc_list; dmi; dmi = dmi->next)
1588                         dev_mc_add(slave_dev, dmi->dmi_addr,
1589                                    dmi->dmi_addrlen, 0);
1590                 netif_addr_unlock_bh(bond_dev);
1591         }
1592
1593         if (bond->params.mode == BOND_MODE_8023AD) {
1594                 /* add lacpdu mc addr to mc list */
1595                 u8 lacpdu_multicast[ETH_ALEN] = MULTICAST_LACPDU_ADDR;
1596
1597                 dev_mc_add(slave_dev, lacpdu_multicast, ETH_ALEN, 0);
1598         }
1599
1600         bond_add_vlans_on_slave(bond, slave_dev);
1601
1602         write_lock_bh(&bond->lock);
1603
1604         bond_attach_slave(bond, new_slave);
1605
1606         new_slave->delay = 0;
1607         new_slave->link_failure_count = 0;
1608
1609         bond_compute_features(bond);
1610
1611         write_unlock_bh(&bond->lock);
1612
1613         read_lock(&bond->lock);
1614
1615         new_slave->last_arp_rx = jiffies;
1616
1617         if (bond->params.miimon && !bond->params.use_carrier) {
1618                 link_reporting = bond_check_dev_link(bond, slave_dev, 1);
1619
1620                 if ((link_reporting == -1) && !bond->params.arp_interval) {
1621                         /*
1622                          * miimon is set but a bonded network driver
1623                          * does not support ETHTOOL/MII and
1624                          * arp_interval is not set.  Note: if
1625                          * use_carrier is enabled, we will never go
1626                          * here (because netif_carrier is always
1627                          * supported); thus, we don't need to change
1628                          * the messages for netif_carrier.
1629                          */
1630                         pr_warning(DRV_NAME
1631                                ": %s: Warning: MII and ETHTOOL support not "
1632                                "available for interface %s, and "
1633                                "arp_interval/arp_ip_target module parameters "
1634                                "not specified, thus bonding will not detect "
1635                                "link failures! see bonding.txt for details.\n",
1636                                bond_dev->name, slave_dev->name);
1637                 } else if (link_reporting == -1) {
1638                         /* unable get link status using mii/ethtool */
1639                         pr_warning(DRV_NAME
1640                                ": %s: Warning: can't get link status from "
1641                                "interface %s; the network driver associated "
1642                                "with this interface does not support MII or "
1643                                "ETHTOOL link status reporting, thus miimon "
1644                                "has no effect on this interface.\n",
1645                                bond_dev->name, slave_dev->name);
1646                 }
1647         }
1648
1649         /* check for initial state */
1650         if (!bond->params.miimon ||
1651             (bond_check_dev_link(bond, slave_dev, 0) == BMSR_LSTATUS)) {
1652                 if (bond->params.updelay) {
1653                         pr_debug("Initial state of slave_dev is "
1654                                 "BOND_LINK_BACK\n");
1655                         new_slave->link  = BOND_LINK_BACK;
1656                         new_slave->delay = bond->params.updelay;
1657                 } else {
1658                         pr_debug("Initial state of slave_dev is "
1659                                 "BOND_LINK_UP\n");
1660                         new_slave->link  = BOND_LINK_UP;
1661                 }
1662                 new_slave->jiffies = jiffies;
1663         } else {
1664                 pr_debug("Initial state of slave_dev is "
1665                         "BOND_LINK_DOWN\n");
1666                 new_slave->link  = BOND_LINK_DOWN;
1667         }
1668
1669         if (bond_update_speed_duplex(new_slave) &&
1670             (new_slave->link != BOND_LINK_DOWN)) {
1671                 pr_warning(DRV_NAME
1672                        ": %s: Warning: failed to get speed and duplex from %s, "
1673                        "assumed to be 100Mb/sec and Full.\n",
1674                        bond_dev->name, new_slave->dev->name);
1675
1676                 if (bond->params.mode == BOND_MODE_8023AD) {
1677                         pr_warning(DRV_NAME
1678                                ": %s: Warning: Operation of 802.3ad mode requires ETHTOOL "
1679                                "support in base driver for proper aggregator "
1680                                "selection.\n", bond_dev->name);
1681                 }
1682         }
1683
1684         if (USES_PRIMARY(bond->params.mode) && bond->params.primary[0]) {
1685                 /* if there is a primary slave, remember it */
1686                 if (strcmp(bond->params.primary, new_slave->dev->name) == 0)
1687                         bond->primary_slave = new_slave;
1688         }
1689
1690         write_lock_bh(&bond->curr_slave_lock);
1691
1692         switch (bond->params.mode) {
1693         case BOND_MODE_ACTIVEBACKUP:
1694                 bond_set_slave_inactive_flags(new_slave);
1695                 bond_select_active_slave(bond);
1696                 break;
1697         case BOND_MODE_8023AD:
1698                 /* in 802.3ad mode, the internal mechanism
1699                  * will activate the slaves in the selected
1700                  * aggregator
1701                  */
1702                 bond_set_slave_inactive_flags(new_slave);
1703                 /* if this is the first slave */
1704                 if (bond->slave_cnt == 1) {
1705                         SLAVE_AD_INFO(new_slave).id = 1;
1706                         /* Initialize AD with the number of times that the AD timer is called in 1 second
1707                          * can be called only after the mac address of the bond is set
1708                          */
1709                         bond_3ad_initialize(bond, 1000/AD_TIMER_INTERVAL,
1710                                             bond->params.lacp_fast);
1711                 } else {
1712                         SLAVE_AD_INFO(new_slave).id =
1713                                 SLAVE_AD_INFO(new_slave->prev).id + 1;
1714                 }
1715
1716                 bond_3ad_bind_slave(new_slave);
1717                 break;
1718         case BOND_MODE_TLB:
1719         case BOND_MODE_ALB:
1720                 new_slave->state = BOND_STATE_ACTIVE;
1721                 bond_set_slave_inactive_flags(new_slave);
1722                 bond_select_active_slave(bond);
1723                 break;
1724         default:
1725                 pr_debug("This slave is always active in trunk mode\n");
1726
1727                 /* always active in trunk mode */
1728                 new_slave->state = BOND_STATE_ACTIVE;
1729
1730                 /* In trunking mode there is little meaning to curr_active_slave
1731                  * anyway (it holds no special properties of the bond device),
1732                  * so we can change it without calling change_active_interface()
1733                  */
1734                 if (!bond->curr_active_slave)
1735                         bond->curr_active_slave = new_slave;
1736
1737                 break;
1738         } /* switch(bond_mode) */
1739
1740         write_unlock_bh(&bond->curr_slave_lock);
1741
1742         bond_set_carrier(bond);
1743
1744         read_unlock(&bond->lock);
1745
1746         res = bond_create_slave_symlinks(bond_dev, slave_dev);
1747         if (res)
1748                 goto err_close;
1749
1750         pr_info(DRV_NAME
1751                ": %s: enslaving %s as a%s interface with a%s link.\n",
1752                bond_dev->name, slave_dev->name,
1753                new_slave->state == BOND_STATE_ACTIVE ? "n active" : " backup",
1754                new_slave->link != BOND_LINK_DOWN ? "n up" : " down");
1755
1756         /* enslave is successful */
1757         return 0;
1758
1759 /* Undo stages on error */
1760 err_close:
1761         dev_close(slave_dev);
1762
1763 err_unset_master:
1764         netdev_set_master(slave_dev, NULL);
1765
1766 err_restore_mac:
1767         if (!bond->params.fail_over_mac) {
1768                 /* XXX TODO - fom follow mode needs to change master's
1769                  * MAC if this slave's MAC is in use by the bond, or at
1770                  * least print a warning.
1771                  */
1772                 memcpy(addr.sa_data, new_slave->perm_hwaddr, ETH_ALEN);
1773                 addr.sa_family = slave_dev->type;
1774                 dev_set_mac_address(slave_dev, &addr);
1775         }
1776
1777 err_free:
1778         kfree(new_slave);
1779
1780 err_undo_flags:
1781         bond_dev->features = old_features;
1782
1783         return res;
1784 }
1785
1786 /*
1787  * Try to release the slave device <slave> from the bond device <master>
1788  * It is legal to access curr_active_slave without a lock because all the function
1789  * is write-locked.
1790  *
1791  * The rules for slave state should be:
1792  *   for Active/Backup:
1793  *     Active stays on all backups go down
1794  *   for Bonded connections:
1795  *     The first up interface should be left on and all others downed.
1796  */
1797 int bond_release(struct net_device *bond_dev, struct net_device *slave_dev)
1798 {
1799         struct bonding *bond = netdev_priv(bond_dev);
1800         struct slave *slave, *oldcurrent;
1801         struct sockaddr addr;
1802
1803         /* slave is not a slave or master is not master of this slave */
1804         if (!(slave_dev->flags & IFF_SLAVE) ||
1805             (slave_dev->master != bond_dev)) {
1806                 pr_err(DRV_NAME
1807                        ": %s: Error: cannot release %s.\n",
1808                        bond_dev->name, slave_dev->name);
1809                 return -EINVAL;
1810         }
1811
1812         write_lock_bh(&bond->lock);
1813
1814         slave = bond_get_slave_by_dev(bond, slave_dev);
1815         if (!slave) {
1816                 /* not a slave of this bond */
1817                 pr_info(DRV_NAME
1818                        ": %s: %s not enslaved\n",
1819                        bond_dev->name, slave_dev->name);
1820                 write_unlock_bh(&bond->lock);
1821                 return -EINVAL;
1822         }
1823
1824         if (!bond->params.fail_over_mac) {
1825                 if (!compare_ether_addr(bond_dev->dev_addr, slave->perm_hwaddr)
1826                     && bond->slave_cnt > 1)
1827                         pr_warning(DRV_NAME
1828                                ": %s: Warning: the permanent HWaddr of %s - "
1829                                "%pM - is still in use by %s. "
1830                                "Set the HWaddr of %s to a different address "
1831                                "to avoid conflicts.\n",
1832                                bond_dev->name, slave_dev->name,
1833                                slave->perm_hwaddr,
1834                                bond_dev->name, slave_dev->name);
1835         }
1836
1837         /* Inform AD package of unbinding of slave. */
1838         if (bond->params.mode == BOND_MODE_8023AD) {
1839                 /* must be called before the slave is
1840                  * detached from the list
1841                  */
1842                 bond_3ad_unbind_slave(slave);
1843         }
1844
1845         pr_info(DRV_NAME
1846                ": %s: releasing %s interface %s\n",
1847                bond_dev->name,
1848                (slave->state == BOND_STATE_ACTIVE)
1849                ? "active" : "backup",
1850                slave_dev->name);
1851
1852         oldcurrent = bond->curr_active_slave;
1853
1854         bond->current_arp_slave = NULL;
1855
1856         /* release the slave from its bond */
1857         bond_detach_slave(bond, slave);
1858
1859         bond_compute_features(bond);
1860
1861         if (bond->primary_slave == slave)
1862                 bond->primary_slave = NULL;
1863
1864         if (oldcurrent == slave)
1865                 bond_change_active_slave(bond, NULL);
1866
1867         if (bond_is_lb(bond)) {
1868                 /* Must be called only after the slave has been
1869                  * detached from the list and the curr_active_slave
1870                  * has been cleared (if our_slave == old_current),
1871                  * but before a new active slave is selected.
1872                  */
1873                 write_unlock_bh(&bond->lock);
1874                 bond_alb_deinit_slave(bond, slave);
1875                 write_lock_bh(&bond->lock);
1876         }
1877
1878         if (oldcurrent == slave) {
1879                 /*
1880                  * Note that we hold RTNL over this sequence, so there
1881                  * is no concern that another slave add/remove event
1882                  * will interfere.
1883                  */
1884                 write_unlock_bh(&bond->lock);
1885                 read_lock(&bond->lock);
1886                 write_lock_bh(&bond->curr_slave_lock);
1887
1888                 bond_select_active_slave(bond);
1889
1890                 write_unlock_bh(&bond->curr_slave_lock);
1891                 read_unlock(&bond->lock);
1892                 write_lock_bh(&bond->lock);
1893         }
1894
1895         if (bond->slave_cnt == 0) {
1896                 bond_set_carrier(bond);
1897
1898                 /* if the last slave was removed, zero the mac address
1899                  * of the master so it will be set by the application
1900                  * to the mac address of the first slave
1901                  */
1902                 memset(bond_dev->dev_addr, 0, bond_dev->addr_len);
1903
1904                 if (list_empty(&bond->vlan_list)) {
1905                         bond_dev->features |= NETIF_F_VLAN_CHALLENGED;
1906                 } else {
1907                         pr_warning(DRV_NAME
1908                                ": %s: Warning: clearing HW address of %s while it "
1909                                "still has VLANs.\n",
1910                                bond_dev->name, bond_dev->name);
1911                         pr_warning(DRV_NAME
1912                                ": %s: When re-adding slaves, make sure the bond's "
1913                                "HW address matches its VLANs'.\n",
1914                                bond_dev->name);
1915                 }
1916         } else if ((bond_dev->features & NETIF_F_VLAN_CHALLENGED) &&
1917                    !bond_has_challenged_slaves(bond)) {
1918                 pr_info(DRV_NAME
1919                        ": %s: last VLAN challenged slave %s "
1920                        "left bond %s. VLAN blocking is removed\n",
1921                        bond_dev->name, slave_dev->name, bond_dev->name);
1922                 bond_dev->features &= ~NETIF_F_VLAN_CHALLENGED;
1923         }
1924
1925         write_unlock_bh(&bond->lock);
1926
1927         /* must do this from outside any spinlocks */
1928         bond_destroy_slave_symlinks(bond_dev, slave_dev);
1929
1930         bond_del_vlans_from_slave(bond, slave_dev);
1931
1932         /* If the mode USES_PRIMARY, then we should only remove its
1933          * promisc and mc settings if it was the curr_active_slave, but that was
1934          * already taken care of above when we detached the slave
1935          */
1936         if (!USES_PRIMARY(bond->params.mode)) {
1937                 /* unset promiscuity level from slave */
1938                 if (bond_dev->flags & IFF_PROMISC)
1939                         dev_set_promiscuity(slave_dev, -1);
1940
1941                 /* unset allmulti level from slave */
1942                 if (bond_dev->flags & IFF_ALLMULTI)
1943                         dev_set_allmulti(slave_dev, -1);
1944
1945                 /* flush master's mc_list from slave */
1946                 netif_addr_lock_bh(bond_dev);
1947                 bond_mc_list_flush(bond_dev, slave_dev);
1948                 netif_addr_unlock_bh(bond_dev);
1949         }
1950
1951         netdev_set_master(slave_dev, NULL);
1952
1953         /* close slave before restoring its mac address */
1954         dev_close(slave_dev);
1955
1956         if (bond->params.fail_over_mac != BOND_FOM_ACTIVE) {
1957                 /* restore original ("permanent") mac address */
1958                 memcpy(addr.sa_data, slave->perm_hwaddr, ETH_ALEN);
1959                 addr.sa_family = slave_dev->type;
1960                 dev_set_mac_address(slave_dev, &addr);
1961         }
1962
1963         slave_dev->priv_flags &= ~(IFF_MASTER_8023AD | IFF_MASTER_ALB |
1964                                    IFF_SLAVE_INACTIVE | IFF_BONDING |
1965                                    IFF_SLAVE_NEEDARP);
1966
1967         kfree(slave);
1968
1969         return 0;  /* deletion OK */
1970 }
1971
1972 /*
1973 * Destroy a bonding device.
1974 * Must be under rtnl_lock when this function is called.
1975 */
1976 static void bond_uninit(struct net_device *bond_dev)
1977 {
1978         struct bonding *bond = netdev_priv(bond_dev);
1979
1980         bond_deinit(bond_dev);
1981         bond_destroy_sysfs_entry(bond);
1982
1983         if (bond->wq)
1984                 destroy_workqueue(bond->wq);
1985
1986         netif_addr_lock_bh(bond_dev);
1987         bond_mc_list_destroy(bond);
1988         netif_addr_unlock_bh(bond_dev);
1989 }
1990
1991 /*
1992 * First release a slave and than destroy the bond if no more slaves are left.
1993 * Must be under rtnl_lock when this function is called.
1994 */
1995 int  bond_release_and_destroy(struct net_device *bond_dev,
1996                               struct net_device *slave_dev)
1997 {
1998         struct bonding *bond = netdev_priv(bond_dev);
1999         int ret;
2000
2001         ret = bond_release(bond_dev, slave_dev);
2002         if ((ret == 0) && (bond->slave_cnt == 0)) {
2003                 pr_info(DRV_NAME ": %s: destroying bond %s.\n",
2004                        bond_dev->name, bond_dev->name);
2005                 unregister_netdevice(bond_dev);
2006         }
2007         return ret;
2008 }
2009
2010 /*
2011  * This function releases all slaves.
2012  */
2013 static int bond_release_all(struct net_device *bond_dev)
2014 {
2015         struct bonding *bond = netdev_priv(bond_dev);
2016         struct slave *slave;
2017         struct net_device *slave_dev;
2018         struct sockaddr addr;
2019
2020         write_lock_bh(&bond->lock);
2021
2022         netif_carrier_off(bond_dev);
2023
2024         if (bond->slave_cnt == 0)
2025                 goto out;
2026
2027         bond->current_arp_slave = NULL;
2028         bond->primary_slave = NULL;
2029         bond_change_active_slave(bond, NULL);
2030
2031         while ((slave = bond->first_slave) != NULL) {
2032                 /* Inform AD package of unbinding of slave
2033                  * before slave is detached from the list.
2034                  */
2035                 if (bond->params.mode == BOND_MODE_8023AD)
2036                         bond_3ad_unbind_slave(slave);
2037
2038                 slave_dev = slave->dev;
2039                 bond_detach_slave(bond, slave);
2040
2041                 /* now that the slave is detached, unlock and perform
2042                  * all the undo steps that should not be called from
2043                  * within a lock.
2044                  */
2045                 write_unlock_bh(&bond->lock);
2046
2047                 if (bond_is_lb(bond)) {
2048                         /* must be called only after the slave
2049                          * has been detached from the list
2050                          */
2051                         bond_alb_deinit_slave(bond, slave);
2052                 }
2053
2054                 bond_compute_features(bond);
2055
2056                 bond_destroy_slave_symlinks(bond_dev, slave_dev);
2057                 bond_del_vlans_from_slave(bond, slave_dev);
2058
2059                 /* If the mode USES_PRIMARY, then we should only remove its
2060                  * promisc and mc settings if it was the curr_active_slave, but that was
2061                  * already taken care of above when we detached the slave
2062                  */
2063                 if (!USES_PRIMARY(bond->params.mode)) {
2064                         /* unset promiscuity level from slave */
2065                         if (bond_dev->flags & IFF_PROMISC)
2066                                 dev_set_promiscuity(slave_dev, -1);
2067
2068                         /* unset allmulti level from slave */
2069                         if (bond_dev->flags & IFF_ALLMULTI)
2070                                 dev_set_allmulti(slave_dev, -1);
2071
2072                         /* flush master's mc_list from slave */
2073                         netif_addr_lock_bh(bond_dev);
2074                         bond_mc_list_flush(bond_dev, slave_dev);
2075                         netif_addr_unlock_bh(bond_dev);
2076                 }
2077
2078                 netdev_set_master(slave_dev, NULL);
2079
2080                 /* close slave before restoring its mac address */
2081                 dev_close(slave_dev);
2082
2083                 if (!bond->params.fail_over_mac) {
2084                         /* restore original ("permanent") mac address*/
2085                         memcpy(addr.sa_data, slave->perm_hwaddr, ETH_ALEN);
2086                         addr.sa_family = slave_dev->type;
2087                         dev_set_mac_address(slave_dev, &addr);
2088                 }
2089
2090                 slave_dev->priv_flags &= ~(IFF_MASTER_8023AD | IFF_MASTER_ALB |
2091                                            IFF_SLAVE_INACTIVE);
2092
2093                 kfree(slave);
2094
2095                 /* re-acquire the lock before getting the next slave */
2096                 write_lock_bh(&bond->lock);
2097         }
2098
2099         /* zero the mac address of the master so it will be
2100          * set by the application to the mac address of the
2101          * first slave
2102          */
2103         memset(bond_dev->dev_addr, 0, bond_dev->addr_len);
2104
2105         if (list_empty(&bond->vlan_list))
2106                 bond_dev->features |= NETIF_F_VLAN_CHALLENGED;
2107         else {
2108                 pr_warning(DRV_NAME
2109                        ": %s: Warning: clearing HW address of %s while it "
2110                        "still has VLANs.\n",
2111                        bond_dev->name, bond_dev->name);
2112                 pr_warning(DRV_NAME
2113                        ": %s: When re-adding slaves, make sure the bond's "
2114                        "HW address matches its VLANs'.\n",
2115                        bond_dev->name);
2116         }
2117
2118         pr_info(DRV_NAME
2119                ": %s: released all slaves\n",
2120                bond_dev->name);
2121
2122 out:
2123         write_unlock_bh(&bond->lock);
2124
2125         return 0;
2126 }
2127
2128 /*
2129  * This function changes the active slave to slave <slave_dev>.
2130  * It returns -EINVAL in the following cases.
2131  *  - <slave_dev> is not found in the list.
2132  *  - There is not active slave now.
2133  *  - <slave_dev> is already active.
2134  *  - The link state of <slave_dev> is not BOND_LINK_UP.
2135  *  - <slave_dev> is not running.
2136  * In these cases, this function does nothing.
2137  * In the other cases, current_slave pointer is changed and 0 is returned.
2138  */
2139 static int bond_ioctl_change_active(struct net_device *bond_dev, struct net_device *slave_dev)
2140 {
2141         struct bonding *bond = netdev_priv(bond_dev);
2142         struct slave *old_active = NULL;
2143         struct slave *new_active = NULL;
2144         int res = 0;
2145
2146         if (!USES_PRIMARY(bond->params.mode))
2147                 return -EINVAL;
2148
2149         /* Verify that master_dev is indeed the master of slave_dev */
2150         if (!(slave_dev->flags & IFF_SLAVE) || (slave_dev->master != bond_dev))
2151                 return -EINVAL;
2152
2153         read_lock(&bond->lock);
2154
2155         read_lock(&bond->curr_slave_lock);
2156         old_active = bond->curr_active_slave;
2157         read_unlock(&bond->curr_slave_lock);
2158
2159         new_active = bond_get_slave_by_dev(bond, slave_dev);
2160
2161         /*
2162          * Changing to the current active: do nothing; return success.
2163          */
2164         if (new_active && (new_active == old_active)) {
2165                 read_unlock(&bond->lock);
2166                 return 0;
2167         }
2168
2169         if ((new_active) &&
2170             (old_active) &&
2171             (new_active->link == BOND_LINK_UP) &&
2172             IS_UP(new_active->dev)) {
2173                 write_lock_bh(&bond->curr_slave_lock);
2174                 bond_change_active_slave(bond, new_active);
2175                 write_unlock_bh(&bond->curr_slave_lock);
2176         } else
2177                 res = -EINVAL;
2178
2179         read_unlock(&bond->lock);
2180
2181         return res;
2182 }
2183
2184 static int bond_info_query(struct net_device *bond_dev, struct ifbond *info)
2185 {
2186         struct bonding *bond = netdev_priv(bond_dev);
2187
2188         info->bond_mode = bond->params.mode;
2189         info->miimon = bond->params.miimon;
2190
2191         read_lock(&bond->lock);
2192         info->num_slaves = bond->slave_cnt;
2193         read_unlock(&bond->lock);
2194
2195         return 0;
2196 }
2197
2198 static int bond_slave_info_query(struct net_device *bond_dev, struct ifslave *info)
2199 {
2200         struct bonding *bond = netdev_priv(bond_dev);
2201         struct slave *slave;
2202         int i, res = -ENODEV;
2203
2204         read_lock(&bond->lock);
2205
2206         bond_for_each_slave(bond, slave, i) {
2207                 if (i == (int)info->slave_id) {
2208                         res = 0;
2209                         strcpy(info->slave_name, slave->dev->name);
2210                         info->link = slave->link;
2211                         info->state = slave->state;
2212                         info->link_failure_count = slave->link_failure_count;
2213                         break;
2214                 }
2215         }
2216
2217         read_unlock(&bond->lock);
2218
2219         return res;
2220 }
2221
2222 /*-------------------------------- Monitoring -------------------------------*/
2223
2224
2225 static int bond_miimon_inspect(struct bonding *bond)
2226 {
2227         struct slave *slave;
2228         int i, link_state, commit = 0;
2229         bool ignore_updelay;
2230
2231         ignore_updelay = !bond->curr_active_slave ? true : false;
2232
2233         bond_for_each_slave(bond, slave, i) {
2234                 slave->new_link = BOND_LINK_NOCHANGE;
2235
2236                 link_state = bond_check_dev_link(bond, slave->dev, 0);
2237
2238                 switch (slave->link) {
2239                 case BOND_LINK_UP:
2240                         if (link_state)
2241                                 continue;
2242
2243                         slave->link = BOND_LINK_FAIL;
2244                         slave->delay = bond->params.downdelay;
2245                         if (slave->delay) {
2246                                 pr_info(DRV_NAME
2247                                        ": %s: link status down for %s"
2248                                        "interface %s, disabling it in %d ms.\n",
2249                                        bond->dev->name,
2250                                        (bond->params.mode ==
2251                                         BOND_MODE_ACTIVEBACKUP) ?
2252                                        ((slave->state == BOND_STATE_ACTIVE) ?
2253                                         "active " : "backup ") : "",
2254                                        slave->dev->name,
2255                                        bond->params.downdelay * bond->params.miimon);
2256                         }
2257                         /*FALLTHRU*/
2258                 case BOND_LINK_FAIL:
2259                         if (link_state) {
2260                                 /*
2261                                  * recovered before downdelay expired
2262                                  */
2263                                 slave->link = BOND_LINK_UP;
2264                                 slave->jiffies = jiffies;
2265                                 pr_info(DRV_NAME
2266                                        ": %s: link status up again after %d "
2267                                        "ms for interface %s.\n",
2268                                        bond->dev->name,
2269                                        (bond->params.downdelay - slave->delay) *
2270                                        bond->params.miimon,
2271                                        slave->dev->name);
2272                                 continue;
2273                         }
2274
2275                         if (slave->delay <= 0) {
2276                                 slave->new_link = BOND_LINK_DOWN;
2277                                 commit++;
2278                                 continue;
2279                         }
2280
2281                         slave->delay--;
2282                         break;
2283
2284                 case BOND_LINK_DOWN:
2285                         if (!link_state)
2286                                 continue;
2287
2288                         slave->link = BOND_LINK_BACK;
2289                         slave->delay = bond->params.updelay;
2290
2291                         if (slave->delay) {
2292                                 pr_info(DRV_NAME
2293                                        ": %s: link status up for "
2294                                        "interface %s, enabling it in %d ms.\n",
2295                                        bond->dev->name, slave->dev->name,
2296                                        ignore_updelay ? 0 :
2297                                        bond->params.updelay *
2298                                        bond->params.miimon);
2299                         }
2300                         /*FALLTHRU*/
2301                 case BOND_LINK_BACK:
2302                         if (!link_state) {
2303                                 slave->link = BOND_LINK_DOWN;
2304                                 pr_info(DRV_NAME
2305                                        ": %s: link status down again after %d "
2306                                        "ms for interface %s.\n",
2307                                        bond->dev->name,
2308                                        (bond->params.updelay - slave->delay) *
2309                                        bond->params.miimon,
2310                                        slave->dev->name);
2311
2312                                 continue;
2313                         }
2314
2315                         if (ignore_updelay)
2316                                 slave->delay = 0;
2317
2318                         if (slave->delay <= 0) {
2319                                 slave->new_link = BOND_LINK_UP;
2320                                 commit++;
2321                                 ignore_updelay = false;
2322                                 continue;
2323                         }
2324
2325                         slave->delay--;
2326                         break;
2327                 }
2328         }
2329
2330         return commit;
2331 }
2332
2333 static void bond_miimon_commit(struct bonding *bond)
2334 {
2335         struct slave *slave;
2336         int i;
2337
2338         bond_for_each_slave(bond, slave, i) {
2339                 switch (slave->new_link) {
2340                 case BOND_LINK_NOCHANGE:
2341                         continue;
2342
2343                 case BOND_LINK_UP:
2344                         slave->link = BOND_LINK_UP;
2345                         slave->jiffies = jiffies;
2346
2347                         if (bond->params.mode == BOND_MODE_8023AD) {
2348                                 /* prevent it from being the active one */
2349                                 slave->state = BOND_STATE_BACKUP;
2350                         } else if (bond->params.mode != BOND_MODE_ACTIVEBACKUP) {
2351                                 /* make it immediately active */
2352                                 slave->state = BOND_STATE_ACTIVE;
2353                         } else if (slave != bond->primary_slave) {
2354                                 /* prevent it from being the active one */
2355                                 slave->state = BOND_STATE_BACKUP;
2356                         }
2357
2358                         pr_info(DRV_NAME
2359                                ": %s: link status definitely "
2360                                "up for interface %s.\n",
2361                                bond->dev->name, slave->dev->name);
2362
2363                         /* notify ad that the link status has changed */
2364                         if (bond->params.mode == BOND_MODE_8023AD)
2365                                 bond_3ad_handle_link_change(slave, BOND_LINK_UP);
2366
2367                         if (bond_is_lb(bond))
2368                                 bond_alb_handle_link_change(bond, slave,
2369                                                             BOND_LINK_UP);
2370
2371                         if (!bond->curr_active_slave ||
2372                             (slave == bond->primary_slave))
2373                                 goto do_failover;
2374
2375                         continue;
2376
2377                 case BOND_LINK_DOWN:
2378                         if (slave->link_failure_count < UINT_MAX)
2379                                 slave->link_failure_count++;
2380
2381                         slave->link = BOND_LINK_DOWN;
2382
2383                         if (bond->params.mode == BOND_MODE_ACTIVEBACKUP ||
2384                             bond->params.mode == BOND_MODE_8023AD)
2385                                 bond_set_slave_inactive_flags(slave);
2386
2387                         pr_info(DRV_NAME
2388                                ": %s: link status definitely down for "
2389                                "interface %s, disabling it\n",
2390                                bond->dev->name, slave->dev->name);
2391
2392                         if (bond->params.mode == BOND_MODE_8023AD)
2393                                 bond_3ad_handle_link_change(slave,
2394                                                             BOND_LINK_DOWN);
2395
2396                         if (bond_is_lb(bond))
2397                                 bond_alb_handle_link_change(bond, slave,
2398                                                             BOND_LINK_DOWN);
2399
2400                         if (slave == bond->curr_active_slave)
2401                                 goto do_failover;
2402
2403                         continue;
2404
2405                 default:
2406                         pr_err(DRV_NAME
2407                                ": %s: invalid new link %d on slave %s\n",
2408                                bond->dev->name, slave->new_link,
2409                                slave->dev->name);
2410                         slave->new_link = BOND_LINK_NOCHANGE;
2411
2412                         continue;
2413                 }
2414
2415 do_failover:
2416                 ASSERT_RTNL();
2417                 write_lock_bh(&bond->curr_slave_lock);
2418                 bond_select_active_slave(bond);
2419                 write_unlock_bh(&bond->curr_slave_lock);
2420         }
2421
2422         bond_set_carrier(bond);
2423 }
2424
2425 /*
2426  * bond_mii_monitor
2427  *
2428  * Really a wrapper that splits the mii monitor into two phases: an
2429  * inspection, then (if inspection indicates something needs to be done)
2430  * an acquisition of appropriate locks followed by a commit phase to
2431  * implement whatever link state changes are indicated.
2432  */
2433 void bond_mii_monitor(struct work_struct *work)
2434 {
2435         struct bonding *bond = container_of(work, struct bonding,
2436                                             mii_work.work);
2437
2438         read_lock(&bond->lock);
2439         if (bond->kill_timers)
2440                 goto out;
2441
2442         if (bond->slave_cnt == 0)
2443                 goto re_arm;
2444
2445         if (bond->send_grat_arp) {
2446                 read_lock(&bond->curr_slave_lock);
2447                 bond_send_gratuitous_arp(bond);
2448                 read_unlock(&bond->curr_slave_lock);
2449         }
2450
2451         if (bond->send_unsol_na) {
2452                 read_lock(&bond->curr_slave_lock);
2453                 bond_send_unsolicited_na(bond);
2454                 read_unlock(&bond->curr_slave_lock);
2455         }
2456
2457         if (bond_miimon_inspect(bond)) {
2458                 read_unlock(&bond->lock);
2459                 rtnl_lock();
2460                 read_lock(&bond->lock);
2461
2462                 bond_miimon_commit(bond);
2463
2464                 read_unlock(&bond->lock);
2465                 rtnl_unlock();  /* might sleep, hold no other locks */
2466                 read_lock(&bond->lock);
2467         }
2468
2469 re_arm:
2470         if (bond->params.miimon)
2471                 queue_delayed_work(bond->wq, &bond->mii_work,
2472                                    msecs_to_jiffies(bond->params.miimon));
2473 out:
2474         read_unlock(&bond->lock);
2475 }
2476
2477 static __be32 bond_glean_dev_ip(struct net_device *dev)
2478 {
2479         struct in_device *idev;
2480         struct in_ifaddr *ifa;
2481         __be32 addr = 0;
2482
2483         if (!dev)
2484                 return 0;
2485
2486         rcu_read_lock();
2487         idev = __in_dev_get_rcu(dev);
2488         if (!idev)
2489                 goto out;
2490
2491         ifa = idev->ifa_list;
2492         if (!ifa)
2493                 goto out;
2494
2495         addr = ifa->ifa_local;
2496 out:
2497         rcu_read_unlock();
2498         return addr;
2499 }
2500
2501 static int bond_has_this_ip(struct bonding *bond, __be32 ip)
2502 {
2503         struct vlan_entry *vlan;
2504
2505         if (ip == bond->master_ip)
2506                 return 1;
2507
2508         list_for_each_entry(vlan, &bond->vlan_list, vlan_list) {
2509                 if (ip == vlan->vlan_ip)
2510                         return 1;
2511         }
2512
2513         return 0;
2514 }
2515
2516 /*
2517  * We go to the (large) trouble of VLAN tagging ARP frames because
2518  * switches in VLAN mode (especially if ports are configured as
2519  * "native" to a VLAN) might not pass non-tagged frames.
2520  */
2521 static void bond_arp_send(struct net_device *slave_dev, int arp_op, __be32 dest_ip, __be32 src_ip, unsigned short vlan_id)
2522 {
2523         struct sk_buff *skb;
2524
2525         pr_debug("arp %d on slave %s: dst %x src %x vid %d\n", arp_op,
2526                slave_dev->name, dest_ip, src_ip, vlan_id);
2527
2528         skb = arp_create(arp_op, ETH_P_ARP, dest_ip, slave_dev, src_ip,
2529                          NULL, slave_dev->dev_addr, NULL);
2530
2531         if (!skb) {
2532                 pr_err(DRV_NAME ": ARP packet allocation failed\n");
2533                 return;
2534         }
2535         if (vlan_id) {
2536                 skb = vlan_put_tag(skb, vlan_id);
2537                 if (!skb) {
2538                         pr_err(DRV_NAME ": failed to insert VLAN tag\n");
2539                         return;
2540                 }
2541         }
2542         arp_xmit(skb);
2543 }
2544
2545
2546 static void bond_arp_send_all(struct bonding *bond, struct slave *slave)
2547 {
2548         int i, vlan_id, rv;
2549         __be32 *targets = bond->params.arp_targets;
2550         struct vlan_entry *vlan;
2551         struct net_device *vlan_dev;
2552         struct flowi fl;
2553         struct rtable *rt;
2554
2555         for (i = 0; (i < BOND_MAX_ARP_TARGETS); i++) {
2556                 if (!targets[i])
2557                         break;
2558                 pr_debug("basa: target %x\n", targets[i]);
2559                 if (list_empty(&bond->vlan_list)) {
2560                         pr_debug("basa: empty vlan: arp_send\n");
2561                         bond_arp_send(slave->dev, ARPOP_REQUEST, targets[i],
2562                                       bond->master_ip, 0);
2563                         continue;
2564                 }
2565
2566                 /*
2567                  * If VLANs are configured, we do a route lookup to
2568                  * determine which VLAN interface would be used, so we
2569                  * can tag the ARP with the proper VLAN tag.
2570                  */
2571                 memset(&fl, 0, sizeof(fl));
2572                 fl.fl4_dst = targets[i];
2573                 fl.fl4_tos = RTO_ONLINK;
2574
2575                 rv = ip_route_output_key(&init_net, &rt, &fl);
2576                 if (rv) {
2577                         if (net_ratelimit()) {
2578                                 pr_warning(DRV_NAME
2579                              ": %s: no route to arp_ip_target %pI4\n",
2580                                        bond->dev->name, &fl.fl4_dst);
2581                         }
2582                         continue;
2583                 }
2584
2585                 /*
2586                  * This target is not on a VLAN
2587                  */
2588                 if (rt->u.dst.dev == bond->dev) {
2589                         ip_rt_put(rt);
2590                         pr_debug("basa: rtdev == bond->dev: arp_send\n");
2591                         bond_arp_send(slave->dev, ARPOP_REQUEST, targets[i],
2592                                       bond->master_ip, 0);
2593                         continue;
2594                 }
2595
2596                 vlan_id = 0;
2597                 list_for_each_entry(vlan, &bond->vlan_list, vlan_list) {
2598                         vlan_dev = vlan_group_get_device(bond->vlgrp, vlan->vlan_id);
2599                         if (vlan_dev == rt->u.dst.dev) {
2600                                 vlan_id = vlan->vlan_id;
2601                                 pr_debug("basa: vlan match on %s %d\n",
2602                                        vlan_dev->name, vlan_id);
2603                                 break;
2604                         }
2605                 }
2606
2607                 if (vlan_id) {
2608                         ip_rt_put(rt);
2609                         bond_arp_send(slave->dev, ARPOP_REQUEST, targets[i],
2610                                       vlan->vlan_ip, vlan_id);
2611                         continue;
2612                 }
2613
2614                 if (net_ratelimit()) {
2615                         pr_warning(DRV_NAME
2616                ": %s: no path to arp_ip_target %pI4 via rt.dev %s\n",
2617                                bond->dev->name, &fl.fl4_dst,
2618                                rt->u.dst.dev ? rt->u.dst.dev->name : "NULL");
2619                 }
2620                 ip_rt_put(rt);
2621         }
2622 }
2623
2624 /*
2625  * Kick out a gratuitous ARP for an IP on the bonding master plus one
2626  * for each VLAN above us.
2627  *
2628  * Caller must hold curr_slave_lock for read or better
2629  */
2630 static void bond_send_gratuitous_arp(struct bonding *bond)
2631 {
2632         struct slave *slave = bond->curr_active_slave;
2633         struct vlan_entry *vlan;
2634         struct net_device *vlan_dev;
2635
2636         pr_debug("bond_send_grat_arp: bond %s slave %s\n", bond->dev->name,
2637                                 slave ? slave->dev->name : "NULL");
2638
2639         if (!slave || !bond->send_grat_arp ||
2640             test_bit(__LINK_STATE_LINKWATCH_PENDING, &slave->dev->state))
2641                 return;
2642
2643         bond->send_grat_arp--;
2644
2645         if (bond->master_ip) {
2646                 bond_arp_send(slave->dev, ARPOP_REPLY, bond->master_ip,
2647                                 bond->master_ip, 0);
2648         }
2649
2650         list_for_each_entry(vlan, &bond->vlan_list, vlan_list) {
2651                 vlan_dev = vlan_group_get_device(bond->vlgrp, vlan->vlan_id);
2652                 if (vlan->vlan_ip) {
2653                         bond_arp_send(slave->dev, ARPOP_REPLY, vlan->vlan_ip,
2654                                       vlan->vlan_ip, vlan->vlan_id);
2655                 }
2656         }
2657 }
2658
2659 static void bond_validate_arp(struct bonding *bond, struct slave *slave, __be32 sip, __be32 tip)
2660 {
2661         int i;
2662         __be32 *targets = bond->params.arp_targets;
2663
2664         for (i = 0; (i < BOND_MAX_ARP_TARGETS) && targets[i]; i++) {
2665                 pr_debug("bva: sip %pI4 tip %pI4 t[%d] %pI4 bhti(tip) %d\n",
2666                         &sip, &tip, i, &targets[i], bond_has_this_ip(bond, tip));
2667                 if (sip == targets[i]) {
2668                         if (bond_has_this_ip(bond, tip))
2669                                 slave->last_arp_rx = jiffies;
2670                         return;
2671                 }
2672         }
2673 }
2674
2675 static int bond_arp_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev)
2676 {
2677         struct arphdr *arp;
2678         struct slave *slave;
2679         struct bonding *bond;
2680         unsigned char *arp_ptr;
2681         __be32 sip, tip;
2682
2683         if (dev_net(dev) != &init_net)
2684                 goto out;
2685
2686         if (!(dev->priv_flags & IFF_BONDING) || !(dev->flags & IFF_MASTER))
2687                 goto out;
2688
2689         bond = netdev_priv(dev);
2690         read_lock(&bond->lock);
2691
2692         pr_debug("bond_arp_rcv: bond %s skb->dev %s orig_dev %s\n",
2693                 bond->dev->name, skb->dev ? skb->dev->name : "NULL",
2694                 orig_dev ? orig_dev->name : "NULL");
2695
2696         slave = bond_get_slave_by_dev(bond, orig_dev);
2697         if (!slave || !slave_do_arp_validate(bond, slave))
2698                 goto out_unlock;
2699
2700         if (!pskb_may_pull(skb, arp_hdr_len(dev)))
2701                 goto out_unlock;
2702
2703         arp = arp_hdr(skb);
2704         if (arp->ar_hln != dev->addr_len ||
2705             skb->pkt_type == PACKET_OTHERHOST ||
2706             skb->pkt_type == PACKET_LOOPBACK ||
2707             arp->ar_hrd != htons(ARPHRD_ETHER) ||
2708             arp->ar_pro != htons(ETH_P_IP) ||
2709             arp->ar_pln != 4)
2710                 goto out_unlock;
2711
2712         arp_ptr = (unsigned char *)(arp + 1);
2713         arp_ptr += dev->addr_len;
2714         memcpy(&sip, arp_ptr, 4);
2715         arp_ptr += 4 + dev->addr_len;
2716         memcpy(&tip, arp_ptr, 4);
2717
2718         pr_debug("bond_arp_rcv: %s %s/%d av %d sv %d sip %pI4 tip %pI4\n",
2719                 bond->dev->name, slave->dev->name, slave->state,
2720                 bond->params.arp_validate, slave_do_arp_validate(bond, slave),
2721                 &sip, &tip);
2722
2723         /*
2724          * Backup slaves won't see the ARP reply, but do come through
2725          * here for each ARP probe (so we swap the sip/tip to validate
2726          * the probe).  In a "redundant switch, common router" type of
2727          * configuration, the ARP probe will (hopefully) travel from
2728          * the active, through one switch, the router, then the other
2729          * switch before reaching the backup.
2730          */
2731         if (slave->state == BOND_STATE_ACTIVE)
2732                 bond_validate_arp(bond, slave, sip, tip);
2733         else
2734                 bond_validate_arp(bond, slave, tip, sip);
2735
2736 out_unlock:
2737         read_unlock(&bond->lock);
2738 out:
2739         dev_kfree_skb(skb);
2740         return NET_RX_SUCCESS;
2741 }
2742
2743 /*
2744  * this function is called regularly to monitor each slave's link
2745  * ensuring that traffic is being sent and received when arp monitoring
2746  * is used in load-balancing mode. if the adapter has been dormant, then an
2747  * arp is transmitted to generate traffic. see activebackup_arp_monitor for
2748  * arp monitoring in active backup mode.
2749  */
2750 void bond_loadbalance_arp_mon(struct work_struct *work)
2751 {
2752         struct bonding *bond = container_of(work, struct bonding,
2753                                             arp_work.work);
2754         struct slave *slave, *oldcurrent;
2755         int do_failover = 0;
2756         int delta_in_ticks;
2757         int i;
2758
2759         read_lock(&bond->lock);
2760
2761         delta_in_ticks = msecs_to_jiffies(bond->params.arp_interval);
2762
2763         if (bond->kill_timers)
2764                 goto out;
2765
2766         if (bond->slave_cnt == 0)
2767                 goto re_arm;
2768
2769         read_lock(&bond->curr_slave_lock);
2770         oldcurrent = bond->curr_active_slave;
2771         read_unlock(&bond->curr_slave_lock);
2772
2773         /* see if any of the previous devices are up now (i.e. they have
2774          * xmt and rcv traffic). the curr_active_slave does not come into
2775          * the picture unless it is null. also, slave->jiffies is not needed
2776          * here because we send an arp on each slave and give a slave as
2777          * long as it needs to get the tx/rx within the delta.
2778          * TODO: what about up/down delay in arp mode? it wasn't here before
2779          *       so it can wait
2780          */
2781         bond_for_each_slave(bond, slave, i) {
2782                 if (slave->link != BOND_LINK_UP) {
2783                         if (time_before_eq(jiffies, dev_trans_start(slave->dev) + delta_in_ticks) &&
2784                             time_before_eq(jiffies, slave->dev->last_rx + delta_in_ticks)) {
2785
2786                                 slave->link  = BOND_LINK_UP;
2787                                 slave->state = BOND_STATE_ACTIVE;
2788
2789                                 /* primary_slave has no meaning in round-robin
2790                                  * mode. the window of a slave being up and
2791                                  * curr_active_slave being null after enslaving
2792                                  * is closed.
2793                                  */
2794                                 if (!oldcurrent) {
2795                                         pr_info(DRV_NAME
2796                                                ": %s: link status definitely "
2797                                                "up for interface %s, ",
2798                                                bond->dev->name,
2799                                                slave->dev->name);
2800                                         do_failover = 1;
2801                                 } else {
2802                                         pr_info(DRV_NAME
2803                                                ": %s: interface %s is now up\n",
2804                                                bond->dev->name,
2805                                                slave->dev->name);
2806                                 }
2807                         }
2808                 } else {
2809                         /* slave->link == BOND_LINK_UP */
2810
2811                         /* not all switches will respond to an arp request
2812                          * when the source ip is 0, so don't take the link down
2813                          * if we don't know our ip yet
2814                          */
2815                         if (time_after_eq(jiffies, dev_trans_start(slave->dev) + 2*delta_in_ticks) ||
2816                             (time_after_eq(jiffies, slave->dev->last_rx + 2*delta_in_ticks))) {
2817
2818                                 slave->link  = BOND_LINK_DOWN;
2819                                 slave->state = BOND_STATE_BACKUP;
2820
2821                                 if (slave->link_failure_count < UINT_MAX)
2822                                         slave->link_failure_count++;
2823
2824                                 pr_info(DRV_NAME
2825                                        ": %s: interface %s is now down.\n",
2826                                        bond->dev->name,
2827                                        slave->dev->name);
2828
2829                                 if (slave == oldcurrent)
2830                                         do_failover = 1;
2831                         }
2832                 }
2833
2834                 /* note: if switch is in round-robin mode, all links
2835                  * must tx arp to ensure all links rx an arp - otherwise
2836                  * links may oscillate or not come up at all; if switch is
2837                  * in something like xor mode, there is nothing we can
2838                  * do - all replies will be rx'ed on same link causing slaves
2839                  * to be unstable during low/no traffic periods
2840                  */
2841                 if (IS_UP(slave->dev))
2842                         bond_arp_send_all(bond, slave);
2843         }
2844
2845         if (do_failover) {
2846                 write_lock_bh(&bond->curr_slave_lock);
2847
2848                 bond_select_active_slave(bond);
2849
2850                 write_unlock_bh(&bond->curr_slave_lock);
2851         }
2852
2853 re_arm:
2854         if (bond->params.arp_interval)
2855                 queue_delayed_work(bond->wq, &bond->arp_work, delta_in_ticks);
2856 out:
2857         read_unlock(&bond->lock);
2858 }
2859
2860 /*
2861  * Called to inspect slaves for active-backup mode ARP monitor link state
2862  * changes.  Sets new_link in slaves to specify what action should take
2863  * place for the slave.  Returns 0 if no changes are found, >0 if changes
2864  * to link states must be committed.
2865  *
2866  * Called with bond->lock held for read.
2867  */
2868 static int bond_ab_arp_inspect(struct bonding *bond, int delta_in_ticks)
2869 {
2870         struct slave *slave;
2871         int i, commit = 0;
2872
2873         bond_for_each_slave(bond, slave, i) {
2874                 slave->new_link = BOND_LINK_NOCHANGE;
2875
2876                 if (slave->link != BOND_LINK_UP) {
2877                         if (time_before_eq(jiffies, slave_last_rx(bond, slave) +
2878                                            delta_in_ticks)) {
2879                                 slave->new_link = BOND_LINK_UP;
2880                                 commit++;
2881                         }
2882
2883                         continue;
2884                 }
2885
2886                 /*
2887                  * Give slaves 2*delta after being enslaved or made
2888                  * active.  This avoids bouncing, as the last receive
2889                  * times need a full ARP monitor cycle to be updated.
2890                  */
2891                 if (!time_after_eq(jiffies, slave->jiffies +
2892                                    2 * delta_in_ticks))
2893                         continue;
2894
2895                 /*
2896                  * Backup slave is down if:
2897                  * - No current_arp_slave AND
2898                  * - more than 3*delta since last receive AND
2899                  * - the bond has an IP address
2900                  *
2901                  * Note: a non-null current_arp_slave indicates
2902                  * the curr_active_slave went down and we are
2903                  * searching for a new one; under this condition
2904                  * we only take the curr_active_slave down - this
2905                  * gives each slave a chance to tx/rx traffic
2906                  * before being taken out
2907                  */
2908                 if (slave->state == BOND_STATE_BACKUP &&
2909                     !bond->current_arp_slave &&
2910                     time_after(jiffies, slave_last_rx(bond, slave) +
2911                                3 * delta_in_ticks)) {
2912                         slave->new_link = BOND_LINK_DOWN;
2913                         commit++;
2914                 }
2915
2916                 /*
2917                  * Active slave is down if:
2918                  * - more than 2*delta since transmitting OR
2919                  * - (more than 2*delta since receive AND
2920                  *    the bond has an IP address)
2921                  */
2922                 if ((slave->state == BOND_STATE_ACTIVE) &&
2923                     (time_after_eq(jiffies, dev_trans_start(slave->dev) +
2924                                     2 * delta_in_ticks) ||
2925                       (time_after_eq(jiffies, slave_last_rx(bond, slave)
2926                                      + 2 * delta_in_ticks)))) {
2927                         slave->new_link = BOND_LINK_DOWN;
2928                         commit++;
2929                 }
2930         }
2931
2932         read_lock(&bond->curr_slave_lock);
2933
2934         /*
2935          * Trigger a commit if the primary option setting has changed.
2936          */
2937         if (bond->primary_slave &&
2938             (bond->primary_slave != bond->curr_active_slave) &&
2939             (bond->primary_slave->link == BOND_LINK_UP))
2940                 commit++;
2941
2942         read_unlock(&bond->curr_slave_lock);
2943
2944         return commit;
2945 }
2946
2947 /*
2948  * Called to commit link state changes noted by inspection step of
2949  * active-backup mode ARP monitor.
2950  *
2951  * Called with RTNL and bond->lock for read.
2952  */
2953 static void bond_ab_arp_commit(struct bonding *bond, int delta_in_ticks)
2954 {
2955         struct slave *slave;
2956         int i;
2957
2958         bond_for_each_slave(bond, slave, i) {
2959                 switch (slave->new_link) {
2960                 case BOND_LINK_NOCHANGE:
2961                         continue;
2962
2963                 case BOND_LINK_UP:
2964                         write_lock_bh(&bond->curr_slave_lock);
2965
2966                         if (!bond->curr_active_slave &&
2967                             time_before_eq(jiffies, dev_trans_start(slave->dev) +
2968                                            delta_in_ticks)) {
2969                                 slave->link = BOND_LINK_UP;
2970                                 bond_change_active_slave(bond, slave);
2971                                 bond->current_arp_slave = NULL;
2972
2973                                 pr_info(DRV_NAME
2974                                        ": %s: %s is up and now the "
2975                                        "active interface\n",
2976                                        bond->dev->name, slave->dev->name);
2977
2978                         } else if (bond->curr_active_slave != slave) {
2979                                 /* this slave has just come up but we
2980                                  * already have a current slave; this can
2981                                  * also happen if bond_enslave adds a new
2982                                  * slave that is up while we are searching
2983                                  * for a new slave
2984                                  */
2985                                 slave->link = BOND_LINK_UP;
2986                                 bond_set_slave_inactive_flags(slave);
2987                                 bond->current_arp_slave = NULL;
2988
2989                                 pr_info(DRV_NAME
2990                                        ": %s: backup interface %s is now up\n",
2991                                        bond->dev->name, slave->dev->name);
2992                         }
2993
2994                         write_unlock_bh(&bond->curr_slave_lock);
2995
2996                         break;
2997
2998                 case BOND_LINK_DOWN:
2999                         if (slave->link_failure_count < UINT_MAX)
3000                                 slave->link_failure_count++;
3001
3002                         slave->link = BOND_LINK_DOWN;
3003
3004                         if (slave == bond->curr_active_slave) {
3005                                 pr_info(DRV_NAME
3006                                        ": %s: link status down for active "
3007                                        "interface %s, disabling it\n",
3008                                        bond->dev->name, slave->dev->name);
3009
3010                                 bond_set_slave_inactive_flags(slave);
3011
3012                                 write_lock_bh(&bond->curr_slave_lock);
3013
3014                                 bond_select_active_slave(bond);
3015                                 if (bond->curr_active_slave)
3016                                         bond->curr_active_slave->jiffies =
3017                                                 jiffies;
3018
3019                                 write_unlock_bh(&bond->curr_slave_lock);
3020
3021                                 bond->current_arp_slave = NULL;
3022
3023                         } else if (slave->state == BOND_STATE_BACKUP) {
3024                                 pr_info(DRV_NAME
3025                                        ": %s: backup interface %s is now down\n",
3026                                        bond->dev->name, slave->dev->name);
3027
3028                                 bond_set_slave_inactive_flags(slave);
3029                         }
3030                         break;
3031
3032                 default:
3033                         pr_err(DRV_NAME
3034                                ": %s: impossible: new_link %d on slave %s\n",
3035                                bond->dev->name, slave->new_link,
3036                                slave->dev->name);
3037                 }
3038         }
3039
3040         /*
3041          * No race with changes to primary via sysfs, as we hold rtnl.
3042          */
3043         if (bond->primary_slave &&
3044             (bond->primary_slave != bond->curr_active_slave) &&
3045             (bond->primary_slave->link == BOND_LINK_UP)) {
3046                 write_lock_bh(&bond->curr_slave_lock);
3047                 bond_change_active_slave(bond, bond->primary_slave);
3048                 write_unlock_bh(&bond->curr_slave_lock);
3049         }
3050
3051         bond_set_carrier(bond);
3052 }
3053
3054 /*
3055  * Send ARP probes for active-backup mode ARP monitor.
3056  *
3057  * Called with bond->lock held for read.
3058  */
3059 static void bond_ab_arp_probe(struct bonding *bond)
3060 {
3061         struct slave *slave;
3062         int i;
3063
3064         read_lock(&bond->curr_slave_lock);
3065
3066         if (bond->current_arp_slave && bond->curr_active_slave)
3067                 pr_info(DRV_NAME "PROBE: c_arp %s && cas %s BAD\n",
3068                        bond->current_arp_slave->dev->name,
3069                        bond->curr_active_slave->dev->name);
3070
3071         if (bond->curr_active_slave) {
3072                 bond_arp_send_all(bond, bond->curr_active_slave);
3073                 read_unlock(&bond->curr_slave_lock);
3074                 return;
3075         }
3076
3077         read_unlock(&bond->curr_slave_lock);
3078
3079         /* if we don't have a curr_active_slave, search for the next available
3080          * backup slave from the current_arp_slave and make it the candidate
3081          * for becoming the curr_active_slave
3082          */
3083
3084         if (!bond->current_arp_slave) {
3085                 bond->current_arp_slave = bond->first_slave;
3086                 if (!bond->current_arp_slave)
3087                         return;
3088         }
3089
3090         bond_set_slave_inactive_flags(bond->current_arp_slave);
3091
3092         /* search for next candidate */
3093         bond_for_each_slave_from(bond, slave, i, bond->current_arp_slave->next) {
3094                 if (IS_UP(slave->dev)) {
3095                         slave->link = BOND_LINK_BACK;
3096                         bond_set_slave_active_flags(slave);
3097                         bond_arp_send_all(bond, slave);
3098                         slave->jiffies = jiffies;
3099                         bond->current_arp_slave = slave;
3100                         break;
3101                 }
3102
3103                 /* if the link state is up at this point, we
3104                  * mark it down - this can happen if we have
3105                  * simultaneous link failures and
3106                  * reselect_active_interface doesn't make this
3107                  * one the current slave so it is still marked
3108                  * up when it is actually down
3109                  */
3110                 if (slave->link == BOND_LINK_UP) {
3111                         slave->link = BOND_LINK_DOWN;
3112                         if (slave->link_failure_count < UINT_MAX)
3113                                 slave->link_failure