346 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_prep_synack()  local
354 		mptcp_fastopen_subflow_synack_set_params(subflow, req);  in subflow_prep_synack()
413 static bool subflow_thmac_valid(struct mptcp_subflow_context *subflow)  in subflow_thmac_valid()  argument
418 	subflow_generate_hmac(subflow->remote_key, subflow->local_key,  in subflow_thmac_valid()
419 			      subflow->remote_nonce, subflow->local_nonce,  in subflow_thmac_valid()
424 		 subflow, subflow->token, thmac, subflow->thmac);  in subflow_thmac_valid()
426 	return thmac == subflow->thmac;  in subflow_thmac_valid()
431 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_reset()  local
432 	struct sock *sk = subflow->conn;  in mptcp_subflow_reset()
458 	struct mptcp_subflow_context *subflow;  in __mptcp_sync_state()  local
462 	subflow = mptcp_subflow_ctx(ssk);  in __mptcp_sync_state()
471 		WRITE_ONCE(msk->write_seq, subflow->idsn + 1);  in __mptcp_sync_state()
479 				   struct mptcp_subflow_context *subflow,  in subflow_set_remote_key()  argument
485 	if (subflow->remote_key_valid)  in subflow_set_remote_key()
488 	subflow->remote_key_valid = 1;  in subflow_set_remote_key()
489 	subflow->remote_key = mp_opt->sndr_key;  in subflow_set_remote_key()
490 	mptcp_crypto_key_sha(subflow->remote_key, NULL, &subflow->iasn);  in subflow_set_remote_key()
491 	subflow->iasn++;  in subflow_set_remote_key()
493 	WRITE_ONCE(msk->remote_key, subflow->remote_key);  in subflow_set_remote_key()
494 	WRITE_ONCE(msk->ack_seq, subflow->iasn);  in subflow_set_remote_key()
496 	atomic64_set(&msk->rcv_wnd_sent, subflow->iasn);  in subflow_set_remote_key()
500 				  struct mptcp_subflow_context *subflow,  in mptcp_propagate_state()  argument
510 		WRITE_ONCE(msk->snd_una, subflow->idsn + 1);  in mptcp_propagate_state()
511 		WRITE_ONCE(msk->wnd_end, subflow->idsn + 1 + tcp_sk(ssk)->snd_wnd);  in mptcp_propagate_state()
512 		subflow_set_remote_key(msk, subflow, mp_opt);  in mptcp_propagate_state()
526 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_finish_connect()  local
528 	struct sock *parent = subflow->conn;  in subflow_finish_connect()
531 	subflow->icsk_af_ops->sk_rx_dst_set(sk, skb);  in subflow_finish_connect()
534 	if (subflow->conn_finished)  in subflow_finish_connect()
538 	subflow->rel_write_seq = 1;  in subflow_finish_connect()
539 	subflow->conn_finished = 1;  in subflow_finish_connect()
540 	subflow->ssn_offset = TCP_SKB_CB(skb)->seq;  in subflow_finish_connect()
541 	pr_debug("subflow=%p synack seq=%x\n", subflow, subflow->ssn_offset);  in subflow_finish_connect()
544 	if (subflow->request_mptcp) {  in subflow_finish_connect()
557 		subflow->mp_capable = 1;  in subflow_finish_connect()
561 		mptcp_propagate_state(parent, sk, subflow, &mp_opt);  in subflow_finish_connect()
562 	} else if (subflow->request_join) {  in subflow_finish_connect()
566 			subflow->reset_reason = MPTCP_RST_EMPTCP;  in subflow_finish_connect()
570 		subflow->backup = mp_opt.backup;  in subflow_finish_connect()
571 		subflow->thmac = mp_opt.thmac;  in subflow_finish_connect()
572 		subflow->remote_nonce = mp_opt.nonce;  in subflow_finish_connect()
573 		WRITE_ONCE(subflow->remote_id, mp_opt.join_id);  in subflow_finish_connect()
575 			 subflow, subflow->thmac, subflow->remote_nonce,  in subflow_finish_connect()
576 			 subflow->backup);  in subflow_finish_connect()
578 		if (!subflow_thmac_valid(subflow)) {  in subflow_finish_connect()
580 			subflow->reset_reason = MPTCP_RST_EMPTCP;  in subflow_finish_connect()
587 		subflow_generate_hmac(subflow->local_key, subflow->remote_key,  in subflow_finish_connect()
588 				      subflow->local_nonce,  in subflow_finish_connect()
589 				      subflow->remote_nonce,  in subflow_finish_connect()
591 		memcpy(subflow->hmac, hmac, MPTCPOPT_HMAC_LEN);  in subflow_finish_connect()
593 		subflow->mp_join = 1;  in subflow_finish_connect()
596 		if (subflow->backup)  in subflow_finish_connect()
607 		if (subflow->mpc_drop)  in subflow_finish_connect()
610 		mptcp_propagate_state(parent, sk, subflow, NULL);  in subflow_finish_connect()
615 	subflow->reset_transient = 0;  in subflow_finish_connect()
619 static void subflow_set_local_id(struct mptcp_subflow_context *subflow, int local_id)  in subflow_set_local_id()  argument
622 	WRITE_ONCE(subflow->local_id, local_id);  in subflow_set_local_id()
627 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_chk_local_id()  local
628 	struct mptcp_sock *msk = mptcp_sk(subflow->conn);  in subflow_chk_local_id()
631 	if (likely(subflow->local_id >= 0))  in subflow_chk_local_id()
638 	subflow_set_local_id(subflow, err);  in subflow_chk_local_id()
639 	subflow->request_bkup = mptcp_pm_is_backup(msk, (struct sock_common *)sk);  in subflow_chk_local_id()
671 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_v4_conn_request()  local
673 	pr_debug("subflow=%p\n", subflow);  in subflow_v4_conn_request()
702 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_v6_conn_request()  local
704 	pr_debug("subflow=%p\n", subflow);  in subflow_v6_conn_request()
799 				       struct mptcp_subflow_context *subflow,  in __mptcp_subflow_fully_established()  argument
802 	subflow_set_remote_key(msk, subflow, mp_opt);  in __mptcp_subflow_fully_established()
803 	subflow->fully_established = 1;  in __mptcp_subflow_fully_established()
806 	if (subflow->is_mptfo)  in __mptcp_subflow_fully_established()
807 		__mptcp_fastopen_gen_msk_ackseq(msk, subflow, mp_opt);  in __mptcp_subflow_fully_established()
928 				struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(child);  in subflow_syn_recv_sock()  local
930 				subflow_add_reset_reason(skb, subflow->reset_reason);  in subflow_syn_recv_sock()
977 static void dbg_bad_map(struct mptcp_subflow_context *subflow, u32 ssn)  in dbg_bad_map()  argument
980 		 ssn, subflow->map_subflow_seq, subflow->map_data_len);  in dbg_bad_map()
985 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in skb_is_fully_mapped()  local
994 	return skb->len - skb_consumed <= subflow->map_data_len -  in skb_is_fully_mapped()
995 					  mptcp_subflow_get_map_offset(subflow);  in skb_is_fully_mapped()
1000 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in validate_mapping()  local
1001 	u32 ssn = tcp_sk(ssk)->copied_seq - subflow->ssn_offset;  in validate_mapping()
1003 	if (unlikely(before(ssn, subflow->map_subflow_seq))) {  in validate_mapping()
1007 		dbg_bad_map(subflow, ssn);  in validate_mapping()
1010 	if (unlikely(!before(ssn, subflow->map_subflow_seq +  in validate_mapping()
1011 				  subflow->map_data_len))) {  in validate_mapping()
1013 		dbg_bad_map(subflow, ssn);  in validate_mapping()
1022 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in validate_data_csum()  local
1031 	if (subflow->map_csum_len == subflow->map_data_len)  in validate_data_csum()
1039 	delta = subflow->map_data_len - subflow->map_csum_len;  in validate_data_csum()
1041 		seq = tcp_sk(ssk)->copied_seq + subflow->map_csum_len;  in validate_data_csum()
1052 			subflow->map_data_csum = csum_block_add(subflow->map_data_csum, csum,  in validate_data_csum()
1053 								subflow->map_csum_len);  in validate_data_csum()
1056 			subflow->map_csum_len += len;  in validate_data_csum()
1085 	csum = __mptcp_make_csum(subflow->map_seq,  in validate_data_csum()
1086 				 subflow->map_subflow_seq,  in validate_data_csum()
1087 				 subflow->map_data_len + subflow->map_data_fin,  in validate_data_csum()
1088 				 subflow->map_data_csum);  in validate_data_csum()
1094 	subflow->valid_csum_seen = 1;  in validate_data_csum()
1101 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in get_mapping_status()  local
1117 		if (!subflow->map_valid && !skb->len) {  in get_mapping_status()
1131 		if (!subflow->map_valid)  in get_mapping_status()
1143 		subflow->map_data_len = 0;  in get_mapping_status()
1154 			if (subflow->map_valid) {  in get_mapping_status()
1187 	WRITE_ONCE(mptcp_sk(subflow->conn)->use_64bit_ack, !!mpext->dsn64);  in get_mapping_status()
1189 	if (subflow->map_valid) {  in get_mapping_status()
1191 		if (subflow->map_seq == map_seq &&  in get_mapping_status()
1192 		    subflow->map_subflow_seq == mpext->subflow_seq &&  in get_mapping_status()
1193 		    subflow->map_data_len == data_len &&  in get_mapping_status()
1194 		    subflow->map_csum_reqd == mpext->csum_reqd) {  in get_mapping_status()
1211 	subflow->map_seq = map_seq;  in get_mapping_status()
1212 	subflow->map_subflow_seq = mpext->subflow_seq;  in get_mapping_status()
1213 	subflow->map_data_len = data_len;  in get_mapping_status()
1214 	subflow->map_valid = 1;  in get_mapping_status()
1215 	subflow->map_data_fin = mpext->data_fin;  in get_mapping_status()
1216 	subflow->mpc_map = mpext->mpc_map;  in get_mapping_status()
1217 	subflow->map_csum_reqd = mpext->csum_reqd;  in get_mapping_status()
1218 	subflow->map_csum_len = 0;  in get_mapping_status()
1219 	subflow->map_data_csum = csum_unfold(mpext->csum);  in get_mapping_status()
1222 	if (unlikely(subflow->map_csum_reqd != csum_reqd))  in get_mapping_status()
1226 		 subflow->map_seq, subflow->map_subflow_seq,  in get_mapping_status()
1227 		 subflow->map_data_len, subflow->map_csum_reqd,  in get_mapping_status()
1228 		 subflow->map_data_csum);  in get_mapping_status()
1248 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_discard_data()  local
1261 		 offset, subflow->map_subflow_seq);  in mptcp_subflow_discard_data()
1268 	if (mptcp_subflow_get_map_offset(subflow) >= subflow->map_data_len)  in mptcp_subflow_discard_data()
1269 		subflow->map_valid = 0;  in mptcp_subflow_discard_data()
1287 static bool subflow_can_fallback(struct mptcp_subflow_context *subflow)  in subflow_can_fallback()  argument
1289 	struct mptcp_sock *msk = mptcp_sk(subflow->conn);  in subflow_can_fallback()
1291 	if (subflow->mp_join)  in subflow_can_fallback()
1294 		return !subflow->valid_csum_seen;  in subflow_can_fallback()
1301 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_fail()  local
1320 	WRITE_ONCE(subflow->fail_tout, fail_tout);  in mptcp_subflow_fail()
1323 	mptcp_reset_tout_timer(msk, subflow->fail_tout);  in mptcp_subflow_fail()
1328 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in subflow_check_data_avail()  local
1334 		WRITE_ONCE(subflow->data_avail, false);  in subflow_check_data_avail()
1335 	if (subflow->data_avail)  in subflow_check_data_avail()
1338 	msk = mptcp_sk(subflow->conn);  in subflow_check_data_avail()
1360 		ack_seq = mptcp_subflow_get_mapped_dsn(subflow);  in subflow_check_data_avail()
1368 		WRITE_ONCE(subflow->data_avail, true);  in subflow_check_data_avail()
1381 		    (subflow->mp_join || subflow->valid_csum_seen)) {  in subflow_check_data_avail()
1382 			subflow->send_mp_fail = 1;  in subflow_check_data_avail()
1385 				subflow->reset_transient = 0;  in subflow_check_data_avail()
1386 				subflow->reset_reason = MPTCP_RST_EMIDDLEBOX;  in subflow_check_data_avail()
1390 			WRITE_ONCE(subflow->data_avail, true);  in subflow_check_data_avail()
1394 		if (!subflow_can_fallback(subflow) && subflow->map_data_len) {  in subflow_check_data_avail()
1398 			subflow->reset_transient = 0;  in subflow_check_data_avail()
1399 			subflow->reset_reason = MPTCP_RST_EMPTCP;  in subflow_check_data_avail()
1407 			WRITE_ONCE(subflow->data_avail, false);  in subflow_check_data_avail()
1415 	subflow->map_valid = 1;  in subflow_check_data_avail()
1416 	subflow->map_seq = READ_ONCE(msk->ack_seq);  in subflow_check_data_avail()
1417 	subflow->map_data_len = skb->len;  in subflow_check_data_avail()
1418 	subflow->map_subflow_seq = tcp_sk(ssk)->copied_seq - subflow->ssn_offset;  in subflow_check_data_avail()
1419 	WRITE_ONCE(subflow->data_avail, true);  in subflow_check_data_avail()
1425 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in mptcp_subflow_data_available()  local
1428 	if (subflow->map_valid &&  in mptcp_subflow_data_available()
1429 	    mptcp_subflow_get_map_offset(subflow) >= subflow->map_data_len) {  in mptcp_subflow_data_available()
1430 		subflow->map_valid = 0;  in mptcp_subflow_data_available()
1431 		WRITE_ONCE(subflow->data_avail, false);  in mptcp_subflow_data_available()
1434 			 subflow->map_subflow_seq,  in mptcp_subflow_data_available()
1435 			 subflow->map_data_len);  in mptcp_subflow_data_available()
1452 	const struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_space()  local
1453 	const struct sock *sk = subflow->conn;  in mptcp_space()
1480 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_data_ready()  local
1482 	struct sock *parent = subflow->conn;  in subflow_data_ready()
1499 	WARN_ON_ONCE(!__mptcp_check_fallback(msk) && !subflow->mp_capable &&  in subflow_data_ready()
1500 		     !subflow->mp_join && !(state & TCPF_CLOSE));  in subflow_data_ready()
1537 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in mptcpv6_handle_mapped()  local
1544 		 subflow, sk->sk_family, icsk->icsk_af_ops, target, mapped);  in mptcpv6_handle_mapped()
1549 	subflow->icsk_af_ops = icsk->icsk_af_ops;  in mptcpv6_handle_mapped()
1589 	struct mptcp_subflow_context *subflow;  in __mptcp_subflow_connect()  local
1612 	subflow = mptcp_subflow_ctx(ssk);  in __mptcp_subflow_connect()
1614 		get_random_bytes(&subflow->local_nonce, sizeof(u32));  in __mptcp_subflow_connect()
1615 	} while (!subflow->local_nonce);  in __mptcp_subflow_connect()
1629 		subflow_set_local_id(subflow, local_id);  in __mptcp_subflow_connect()
1631 	subflow->remote_key_valid = 1;  in __mptcp_subflow_connect()
1632 	subflow->remote_key = READ_ONCE(msk->remote_key);  in __mptcp_subflow_connect()
1633 	subflow->local_key = READ_ONCE(msk->local_key);  in __mptcp_subflow_connect()
1634 	subflow->token = msk->token;  in __mptcp_subflow_connect()
1651 	mptcp_crypto_key_sha(subflow->remote_key, &remote_token, NULL);  in __mptcp_subflow_connect()
1654 	subflow->remote_token = remote_token;  in __mptcp_subflow_connect()
1655 	WRITE_ONCE(subflow->remote_id, remote_id);  in __mptcp_subflow_connect()
1656 	subflow->request_join = 1;  in __mptcp_subflow_connect()
1657 	subflow->request_bkup = !!(local->flags & MPTCP_PM_ADDR_FLAG_BACKUP);  in __mptcp_subflow_connect()
1658 	subflow->subflow_id = msk->subflow_id++;  in __mptcp_subflow_connect()
1662 	list_add_tail(&subflow->node, &msk->conn_list);  in __mptcp_subflow_connect()
1681 	list_del(&subflow->node);  in __mptcp_subflow_connect()
1682 	sock_put(mptcp_subflow_tcp_sock(subflow));  in __mptcp_subflow_connect()
1685 	subflow->disposable = 1;  in __mptcp_subflow_connect()
1743 	struct mptcp_subflow_context *subflow;  in mptcp_subflow_create_socket()  local
1792 	subflow = mptcp_subflow_ctx(sf->sk);  in mptcp_subflow_create_socket()
1793 	pr_debug("subflow=%p\n", subflow);  in mptcp_subflow_create_socket()
1797 	subflow->conn = sk;  in mptcp_subflow_create_socket()
1848 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_state_change()  local
1849 	struct sock *parent = subflow->conn;  in subflow_state_change()
1858 		subflow->conn_finished = 1;  in subflow_state_change()
1859 		mptcp_propagate_state(parent, sk, subflow, NULL);  in subflow_state_change()
1885 	struct mptcp_subflow_context *subflow;  in mptcp_subflow_queue_clean()  local
1912 		subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_queue_clean()
1913 		if (!subflow || !subflow->conn)  in mptcp_subflow_queue_clean()
1916 		sk = subflow->conn;  in mptcp_subflow_queue_clean()
2082 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in tcp_release_cb_override()  local
2089 	status = set_mask_bits(&subflow->delegated_status, MPTCP_DELEGATE_ACTIONS_MASK, 0);  in tcp_release_cb_override()