346 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_prep_synack()  local
354 		mptcp_fastopen_subflow_synack_set_params(subflow, req);  in subflow_prep_synack()
413 static bool subflow_thmac_valid(struct mptcp_subflow_context *subflow)  in subflow_thmac_valid()  argument
418 	subflow_generate_hmac(subflow->remote_key, subflow->local_key,  in subflow_thmac_valid()
419 			      subflow->remote_nonce, subflow->local_nonce,  in subflow_thmac_valid()
424 		 subflow, subflow->token, thmac, subflow->thmac);  in subflow_thmac_valid()
426 	return thmac == subflow->thmac;  in subflow_thmac_valid()
431 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_reset()  local
432 	struct sock *sk = subflow->conn;  in mptcp_subflow_reset()
458 	struct mptcp_subflow_context *subflow;  in __mptcp_sync_state()  local
462 	subflow = mptcp_subflow_ctx(ssk);  in __mptcp_sync_state()
471 		WRITE_ONCE(msk->write_seq, subflow->idsn + 1);  in __mptcp_sync_state()
479 				   struct mptcp_subflow_context *subflow,  in subflow_set_remote_key()  argument
485 	if (subflow->remote_key_valid)  in subflow_set_remote_key()
488 	subflow->remote_key_valid = 1;  in subflow_set_remote_key()
489 	subflow->remote_key = mp_opt->sndr_key;  in subflow_set_remote_key()
490 	mptcp_crypto_key_sha(subflow->remote_key, NULL, &subflow->iasn);  in subflow_set_remote_key()
491 	subflow->iasn++;  in subflow_set_remote_key()
493 	WRITE_ONCE(msk->remote_key, subflow->remote_key);  in subflow_set_remote_key()
494 	WRITE_ONCE(msk->ack_seq, subflow->iasn);  in subflow_set_remote_key()
496 	atomic64_set(&msk->rcv_wnd_sent, subflow->iasn);  in subflow_set_remote_key()
500 				  struct mptcp_subflow_context *subflow,  in mptcp_propagate_state()  argument
510 		WRITE_ONCE(msk->snd_una, subflow->idsn + 1);  in mptcp_propagate_state()
511 		WRITE_ONCE(msk->wnd_end, subflow->idsn + 1 + tcp_sk(ssk)->snd_wnd);  in mptcp_propagate_state()
512 		subflow_set_remote_key(msk, subflow, mp_opt);  in mptcp_propagate_state()
526 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_finish_connect()  local
528 	struct sock *parent = subflow->conn;  in subflow_finish_connect()
531 	subflow->icsk_af_ops->sk_rx_dst_set(sk, skb);  in subflow_finish_connect()
534 	if (subflow->conn_finished)  in subflow_finish_connect()
538 	subflow->rel_write_seq = 1;  in subflow_finish_connect()
539 	subflow->conn_finished = 1;  in subflow_finish_connect()
540 	subflow->ssn_offset = TCP_SKB_CB(skb)->seq;  in subflow_finish_connect()
541 	pr_debug("subflow=%p synack seq=%x\n", subflow, subflow->ssn_offset);  in subflow_finish_connect()
544 	if (subflow->request_mptcp) {  in subflow_finish_connect()
557 		subflow->mp_capable = 1;  in subflow_finish_connect()
561 		mptcp_propagate_state(parent, sk, subflow, &mp_opt);  in subflow_finish_connect()
562 	} else if (subflow->request_join) {  in subflow_finish_connect()
566 			subflow->reset_reason = MPTCP_RST_EMPTCP;  in subflow_finish_connect()
570 		subflow->backup = mp_opt.backup;  in subflow_finish_connect()
571 		subflow->thmac = mp_opt.thmac;  in subflow_finish_connect()
572 		subflow->remote_nonce = mp_opt.nonce;  in subflow_finish_connect()
573 		WRITE_ONCE(subflow->remote_id, mp_opt.join_id);  in subflow_finish_connect()
575 			 subflow, subflow->thmac, subflow->remote_nonce,  in subflow_finish_connect()
576 			 subflow->backup);  in subflow_finish_connect()
578 		if (!subflow_thmac_valid(subflow)) {  in subflow_finish_connect()
580 			subflow->reset_reason = MPTCP_RST_EMPTCP;  in subflow_finish_connect()
587 		subflow_generate_hmac(subflow->local_key, subflow->remote_key,  in subflow_finish_connect()
588 				      subflow->local_nonce,  in subflow_finish_connect()
589 				      subflow->remote_nonce,  in subflow_finish_connect()
591 		memcpy(subflow->hmac, hmac, MPTCPOPT_HMAC_LEN);  in subflow_finish_connect()
593 		subflow->mp_join = 1;  in subflow_finish_connect()
596 		if (subflow->backup)  in subflow_finish_connect()
607 		if (subflow->mpc_drop)  in subflow_finish_connect()
610 		mptcp_propagate_state(parent, sk, subflow, NULL);  in subflow_finish_connect()
615 	subflow->reset_transient = 0;  in subflow_finish_connect()
619 static void subflow_set_local_id(struct mptcp_subflow_context *subflow, int local_id)  in subflow_set_local_id()  argument
622 	WRITE_ONCE(subflow->local_id, local_id);  in subflow_set_local_id()
627 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_chk_local_id()  local
628 	struct mptcp_sock *msk = mptcp_sk(subflow->conn);  in subflow_chk_local_id()
631 	if (likely(subflow->local_id >= 0))  in subflow_chk_local_id()
638 	subflow_set_local_id(subflow, err);  in subflow_chk_local_id()
639 	subflow->request_bkup = mptcp_pm_is_backup(msk, (struct sock_common *)sk);  in subflow_chk_local_id()
671 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_v4_conn_request()  local
673 	pr_debug("subflow=%p\n", subflow);  in subflow_v4_conn_request()
702 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_v6_conn_request()  local
704 	pr_debug("subflow=%p\n", subflow);  in subflow_v6_conn_request()
797 				       struct mptcp_subflow_context *subflow,  in __mptcp_subflow_fully_established()  argument
800 	subflow_set_remote_key(msk, subflow, mp_opt);  in __mptcp_subflow_fully_established()
801 	WRITE_ONCE(subflow->fully_established, true);  in __mptcp_subflow_fully_established()
804 	if (subflow->is_mptfo)  in __mptcp_subflow_fully_established()
805 		__mptcp_fastopen_gen_msk_ackseq(msk, subflow, mp_opt);  in __mptcp_subflow_fully_established()
933 				struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(child);  in subflow_syn_recv_sock()  local
935 				subflow_add_reset_reason(skb, subflow->reset_reason);  in subflow_syn_recv_sock()
983 static void dbg_bad_map(struct mptcp_subflow_context *subflow, u32 ssn)  in dbg_bad_map()  argument
986 		 ssn, subflow->map_subflow_seq, subflow->map_data_len);  in dbg_bad_map()
991 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in skb_is_fully_mapped()  local
1000 	return skb->len - skb_consumed <= subflow->map_data_len -  in skb_is_fully_mapped()
1001 					  mptcp_subflow_get_map_offset(subflow);  in skb_is_fully_mapped()
1006 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in validate_mapping()  local
1007 	u32 ssn = tcp_sk(ssk)->copied_seq - subflow->ssn_offset;  in validate_mapping()
1009 	if (unlikely(before(ssn, subflow->map_subflow_seq))) {  in validate_mapping()
1013 		dbg_bad_map(subflow, ssn);  in validate_mapping()
1016 	if (unlikely(!before(ssn, subflow->map_subflow_seq +  in validate_mapping()
1017 				  subflow->map_data_len))) {  in validate_mapping()
1019 		dbg_bad_map(subflow, ssn);  in validate_mapping()
1028 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in validate_data_csum()  local
1037 	if (subflow->map_csum_len == subflow->map_data_len)  in validate_data_csum()
1045 	delta = subflow->map_data_len - subflow->map_csum_len;  in validate_data_csum()
1047 		seq = tcp_sk(ssk)->copied_seq + subflow->map_csum_len;  in validate_data_csum()
1058 			subflow->map_data_csum = csum_block_add(subflow->map_data_csum, csum,  in validate_data_csum()
1059 								subflow->map_csum_len);  in validate_data_csum()
1062 			subflow->map_csum_len += len;  in validate_data_csum()
1091 	csum = __mptcp_make_csum(subflow->map_seq,  in validate_data_csum()
1092 				 subflow->map_subflow_seq,  in validate_data_csum()
1093 				 subflow->map_data_len + subflow->map_data_fin,  in validate_data_csum()
1094 				 subflow->map_data_csum);  in validate_data_csum()
1100 	subflow->valid_csum_seen = 1;  in validate_data_csum()
1107 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in get_mapping_status()  local
1123 		if (!subflow->map_valid && !skb->len) {  in get_mapping_status()
1138 		if (!subflow->map_valid)  in get_mapping_status()
1160 			if (subflow->map_valid) {  in get_mapping_status()
1193 	WRITE_ONCE(mptcp_sk(subflow->conn)->use_64bit_ack, !!mpext->dsn64);  in get_mapping_status()
1195 	if (subflow->map_valid) {  in get_mapping_status()
1197 		if (subflow->map_seq == map_seq &&  in get_mapping_status()
1198 		    subflow->map_subflow_seq == mpext->subflow_seq &&  in get_mapping_status()
1199 		    subflow->map_data_len == data_len &&  in get_mapping_status()
1200 		    subflow->map_csum_reqd == mpext->csum_reqd) {  in get_mapping_status()
1217 	subflow->map_seq = map_seq;  in get_mapping_status()
1218 	subflow->map_subflow_seq = mpext->subflow_seq;  in get_mapping_status()
1219 	subflow->map_data_len = data_len;  in get_mapping_status()
1220 	subflow->map_valid = 1;  in get_mapping_status()
1221 	subflow->map_data_fin = mpext->data_fin;  in get_mapping_status()
1222 	subflow->mpc_map = mpext->mpc_map;  in get_mapping_status()
1223 	subflow->map_csum_reqd = mpext->csum_reqd;  in get_mapping_status()
1224 	subflow->map_csum_len = 0;  in get_mapping_status()
1225 	subflow->map_data_csum = csum_unfold(mpext->csum);  in get_mapping_status()
1228 	if (unlikely(subflow->map_csum_reqd != csum_reqd))  in get_mapping_status()
1232 		 subflow->map_seq, subflow->map_subflow_seq,  in get_mapping_status()
1233 		 subflow->map_data_len, subflow->map_csum_reqd,  in get_mapping_status()
1234 		 subflow->map_data_csum);  in get_mapping_status()
1254 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_discard_data()  local
1267 		 offset, subflow->map_subflow_seq);  in mptcp_subflow_discard_data()
1274 	if (mptcp_subflow_get_map_offset(subflow) >= subflow->map_data_len)  in mptcp_subflow_discard_data()
1275 		subflow->map_valid = 0;  in mptcp_subflow_discard_data()
1295 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_fail()  local
1314 	WRITE_ONCE(subflow->fail_tout, fail_tout);  in mptcp_subflow_fail()
1317 	mptcp_reset_tout_timer(msk, subflow->fail_tout);  in mptcp_subflow_fail()
1322 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in subflow_check_data_avail()  local
1328 		WRITE_ONCE(subflow->data_avail, false);  in subflow_check_data_avail()
1329 	if (subflow->data_avail)  in subflow_check_data_avail()
1332 	msk = mptcp_sk(subflow->conn);  in subflow_check_data_avail()
1354 		ack_seq = mptcp_subflow_get_mapped_dsn(subflow);  in subflow_check_data_avail()
1362 		WRITE_ONCE(subflow->data_avail, true);  in subflow_check_data_avail()
1375 		    (subflow->mp_join || subflow->valid_csum_seen)) {  in subflow_check_data_avail()
1376 			subflow->send_mp_fail = 1;  in subflow_check_data_avail()
1379 				subflow->reset_transient = 0;  in subflow_check_data_avail()
1380 				subflow->reset_reason = MPTCP_RST_EMIDDLEBOX;  in subflow_check_data_avail()
1384 			WRITE_ONCE(subflow->data_avail, true);  in subflow_check_data_avail()
1392 			subflow->reset_transient = 0;  in subflow_check_data_avail()
1393 			subflow->reset_reason = status == MAPPING_NODSS ?  in subflow_check_data_avail()
1403 			WRITE_ONCE(subflow->data_avail, false);  in subflow_check_data_avail()
1411 	subflow->map_valid = 1;  in subflow_check_data_avail()
1412 	subflow->map_seq = READ_ONCE(msk->ack_seq);  in subflow_check_data_avail()
1413 	subflow->map_data_len = skb->len;  in subflow_check_data_avail()
1414 	subflow->map_subflow_seq = tcp_sk(ssk)->copied_seq - subflow->ssn_offset;  in subflow_check_data_avail()
1415 	WRITE_ONCE(subflow->data_avail, true);  in subflow_check_data_avail()
1421 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in mptcp_subflow_data_available()  local
1424 	if (subflow->map_valid &&  in mptcp_subflow_data_available()
1425 	    mptcp_subflow_get_map_offset(subflow) >= subflow->map_data_len) {  in mptcp_subflow_data_available()
1426 		subflow->map_valid = 0;  in mptcp_subflow_data_available()
1427 		WRITE_ONCE(subflow->data_avail, false);  in mptcp_subflow_data_available()
1430 			 subflow->map_subflow_seq,  in mptcp_subflow_data_available()
1431 			 subflow->map_data_len);  in mptcp_subflow_data_available()
1448 	const struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in mptcp_space()  local
1449 	const struct sock *sk = subflow->conn;  in mptcp_space()
1476 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_data_ready()  local
1478 	struct sock *parent = subflow->conn;  in subflow_data_ready()
1495 	WARN_ON_ONCE(!__mptcp_check_fallback(msk) && !subflow->mp_capable &&  in subflow_data_ready()
1496 		     !subflow->mp_join && !(state & TCPF_CLOSE));  in subflow_data_ready()
1533 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in mptcpv6_handle_mapped()  local
1540 		 subflow, sk->sk_family, icsk->icsk_af_ops, target, mapped);  in mptcpv6_handle_mapped()
1545 	subflow->icsk_af_ops = icsk->icsk_af_ops;  in mptcpv6_handle_mapped()
1585 	struct mptcp_subflow_context *subflow;  in __mptcp_subflow_connect()  local
1608 	subflow = mptcp_subflow_ctx(ssk);  in __mptcp_subflow_connect()
1610 		get_random_bytes(&subflow->local_nonce, sizeof(u32));  in __mptcp_subflow_connect()
1611 	} while (!subflow->local_nonce);  in __mptcp_subflow_connect()
1625 		subflow_set_local_id(subflow, local_id);  in __mptcp_subflow_connect()
1627 	subflow->remote_key_valid = 1;  in __mptcp_subflow_connect()
1628 	subflow->remote_key = READ_ONCE(msk->remote_key);  in __mptcp_subflow_connect()
1629 	subflow->local_key = READ_ONCE(msk->local_key);  in __mptcp_subflow_connect()
1630 	subflow->token = msk->token;  in __mptcp_subflow_connect()
1647 	mptcp_crypto_key_sha(subflow->remote_key, &remote_token, NULL);  in __mptcp_subflow_connect()
1650 	subflow->remote_token = remote_token;  in __mptcp_subflow_connect()
1651 	WRITE_ONCE(subflow->remote_id, remote_id);  in __mptcp_subflow_connect()
1652 	subflow->request_join = 1;  in __mptcp_subflow_connect()
1653 	subflow->request_bkup = !!(local->flags & MPTCP_PM_ADDR_FLAG_BACKUP);  in __mptcp_subflow_connect()
1654 	subflow->subflow_id = msk->subflow_id++;  in __mptcp_subflow_connect()
1658 	list_add_tail(&subflow->node, &msk->conn_list);  in __mptcp_subflow_connect()
1677 	list_del(&subflow->node);  in __mptcp_subflow_connect()
1678 	sock_put(mptcp_subflow_tcp_sock(subflow));  in __mptcp_subflow_connect()
1681 	subflow->disposable = 1;  in __mptcp_subflow_connect()
1739 	struct mptcp_subflow_context *subflow;  in mptcp_subflow_create_socket()  local
1785 	subflow = mptcp_subflow_ctx(sf->sk);  in mptcp_subflow_create_socket()
1786 	pr_debug("subflow=%p\n", subflow);  in mptcp_subflow_create_socket()
1790 	subflow->conn = sk;  in mptcp_subflow_create_socket()
1841 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(sk);  in subflow_state_change()  local
1842 	struct sock *parent = subflow->conn;  in subflow_state_change()
1851 		subflow->conn_finished = 1;  in subflow_state_change()
1852 		mptcp_propagate_state(parent, sk, subflow, NULL);  in subflow_state_change()
1878 	struct mptcp_subflow_context *subflow;  in mptcp_subflow_queue_clean()  local
1905 		subflow = mptcp_subflow_ctx(ssk);  in mptcp_subflow_queue_clean()
1906 		if (!subflow || !subflow->conn)  in mptcp_subflow_queue_clean()
1909 		sk = subflow->conn;  in mptcp_subflow_queue_clean()
2074 	struct mptcp_subflow_context *subflow = mptcp_subflow_ctx(ssk);  in tcp_release_cb_override()  local
2081 	status = set_mask_bits(&subflow->delegated_status, MPTCP_DELEGATE_ACTIONS_MASK, 0);  in tcp_release_cb_override()