1 /*
2  * Copyright (c) 2004, 2005, 2006 Voltaire, Inc. All rights reserved.
3  * Copyright (c) 2005, 2006 Cisco Systems.  All rights reserved.
4  * Copyright (c) 2013-2014 Mellanox Technologies. All rights reserved.
5  *
6  * This software is available to you under a choice of one of two
7  * licenses.  You may choose to be licensed under the terms of the GNU
8  * General Public License (GPL) Version 2, available from the file
9  * COPYING in the main directory of this source tree, or the
10  * OpenIB.org BSD license below:
11  *
12  *     Redistribution and use in source and binary forms, with or
13  *     without modification, are permitted provided that the following
14  *     conditions are met:
15  *
16  *	- Redistributions of source code must retain the above
17  *	  copyright notice, this list of conditions and the following
18  *	  disclaimer.
19  *
20  *	- Redistributions in binary form must reproduce the above
21  *	  copyright notice, this list of conditions and the following
22  *	  disclaimer in the documentation and/or other materials
23  *	  provided with the distribution.
24  *
25  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
26  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
27  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
28  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
29  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
30  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
31  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
32  * SOFTWARE.
33  */
34 #include <linux/kernel.h>
35 #include <linux/module.h>
36 #include <linux/slab.h>
37 #include <linux/delay.h>
38 
39 #include "iscsi_iser.h"
40 
41 #define ISCSI_ISER_MAX_CONN	8
42 #define ISER_MAX_RX_LEN		(ISER_QP_MAX_RECV_DTOS * ISCSI_ISER_MAX_CONN)
43 #define ISER_MAX_TX_LEN		(ISER_QP_MAX_REQ_DTOS  * ISCSI_ISER_MAX_CONN)
44 #define ISER_MAX_CQ_LEN		(ISER_MAX_RX_LEN + ISER_MAX_TX_LEN + \
45 				 ISCSI_ISER_MAX_CONN)
46 
47 static void iser_qp_event_callback(struct ib_event *cause, void *context)
48 {
49 	iser_err("qp event %s (%d)\n",
50 		 ib_event_msg(cause->event), cause->event);
51 }
52 
53 static void iser_event_handler(struct ib_event_handler *handler,
54 				struct ib_event *event)
55 {
56 	iser_err("async event %s (%d) on device %s port %d\n",
57 		 ib_event_msg(event->event), event->event,
58 		 event->device->name, event->element.port_num);
59 }
60 
61 /**
62  * iser_create_device_ib_res - creates Protection Domain (PD), Completion
63  * Queue (CQ), DMA Memory Region (DMA MR) with the device associated with
64  * the adapator.
65  *
66  * returns 0 on success, -1 on failure
67  */
68 static int iser_create_device_ib_res(struct iser_device *device)
69 {
70 	struct ib_device *ib_dev = device->ib_device;
71 	int ret, i, max_cqe;
72 
73 	ret = iser_assign_reg_ops(device);
74 	if (ret)
75 		return ret;
76 
77 	device->comps_used = min_t(int, num_online_cpus(),
78 				 ib_dev->num_comp_vectors);
79 
80 	device->comps = kcalloc(device->comps_used, sizeof(*device->comps),
81 				GFP_KERNEL);
82 	if (!device->comps)
83 		goto comps_err;
84 
85 	max_cqe = min(ISER_MAX_CQ_LEN, ib_dev->attrs.max_cqe);
86 
87 	iser_info("using %d CQs, device %s supports %d vectors max_cqe %d\n",
88 		  device->comps_used, ib_dev->name,
89 		  ib_dev->num_comp_vectors, max_cqe);
90 
91 	device->pd = ib_alloc_pd(ib_dev);
92 	if (IS_ERR(device->pd))
93 		goto pd_err;
94 
95 	for (i = 0; i < device->comps_used; i++) {
96 		struct iser_comp *comp = &device->comps[i];
97 
98 		comp->cq = ib_alloc_cq(ib_dev, comp, max_cqe, i,
99 				       IB_POLL_SOFTIRQ);
100 		if (IS_ERR(comp->cq)) {
101 			comp->cq = NULL;
102 			goto cq_err;
103 		}
104 	}
105 
106 	if (!iser_always_reg) {
107 		int access = IB_ACCESS_LOCAL_WRITE |
108 			     IB_ACCESS_REMOTE_WRITE |
109 			     IB_ACCESS_REMOTE_READ;
110 
111 		device->mr = ib_get_dma_mr(device->pd, access);
112 		if (IS_ERR(device->mr))
113 			goto cq_err;
114 	}
115 
116 	INIT_IB_EVENT_HANDLER(&device->event_handler, ib_dev,
117 			      iser_event_handler);
118 	if (ib_register_event_handler(&device->event_handler))
119 		goto handler_err;
120 
121 	return 0;
122 
123 handler_err:
124 	if (device->mr)
125 		ib_dereg_mr(device->mr);
126 cq_err:
127 	for (i = 0; i < device->comps_used; i++) {
128 		struct iser_comp *comp = &device->comps[i];
129 
130 		if (comp->cq)
131 			ib_free_cq(comp->cq);
132 	}
133 	ib_dealloc_pd(device->pd);
134 pd_err:
135 	kfree(device->comps);
136 comps_err:
137 	iser_err("failed to allocate an IB resource\n");
138 	return -1;
139 }
140 
141 /**
142  * iser_free_device_ib_res - destroy/dealloc/dereg the DMA MR,
143  * CQ and PD created with the device associated with the adapator.
144  */
145 static void iser_free_device_ib_res(struct iser_device *device)
146 {
147 	int i;
148 
149 	for (i = 0; i < device->comps_used; i++) {
150 		struct iser_comp *comp = &device->comps[i];
151 
152 		ib_free_cq(comp->cq);
153 		comp->cq = NULL;
154 	}
155 
156 	(void)ib_unregister_event_handler(&device->event_handler);
157 	if (device->mr)
158 		(void)ib_dereg_mr(device->mr);
159 	ib_dealloc_pd(device->pd);
160 
161 	kfree(device->comps);
162 	device->comps = NULL;
163 
164 	device->mr = NULL;
165 	device->pd = NULL;
166 }
167 
168 /**
169  * iser_alloc_fmr_pool - Creates FMR pool and page_vector
170  *
171  * returns 0 on success, or errno code on failure
172  */
173 int iser_alloc_fmr_pool(struct ib_conn *ib_conn,
174 			unsigned cmds_max,
175 			unsigned int size)
176 {
177 	struct iser_device *device = ib_conn->device;
178 	struct iser_fr_pool *fr_pool = &ib_conn->fr_pool;
179 	struct iser_page_vec *page_vec;
180 	struct iser_fr_desc *desc;
181 	struct ib_fmr_pool *fmr_pool;
182 	struct ib_fmr_pool_param params;
183 	int ret;
184 
185 	INIT_LIST_HEAD(&fr_pool->list);
186 	spin_lock_init(&fr_pool->lock);
187 
188 	desc = kzalloc(sizeof(*desc), GFP_KERNEL);
189 	if (!desc)
190 		return -ENOMEM;
191 
192 	page_vec = kmalloc(sizeof(*page_vec) + (sizeof(u64) * size),
193 			   GFP_KERNEL);
194 	if (!page_vec) {
195 		ret = -ENOMEM;
196 		goto err_frpl;
197 	}
198 
199 	page_vec->pages = (u64 *)(page_vec + 1);
200 
201 	params.page_shift        = SHIFT_4K;
202 	params.max_pages_per_fmr = size;
203 	/* make the pool size twice the max number of SCSI commands *
204 	 * the ML is expected to queue, watermark for unmap at 50%  */
205 	params.pool_size	 = cmds_max * 2;
206 	params.dirty_watermark	 = cmds_max;
207 	params.cache		 = 0;
208 	params.flush_function	 = NULL;
209 	params.access		 = (IB_ACCESS_LOCAL_WRITE  |
210 				    IB_ACCESS_REMOTE_WRITE |
211 				    IB_ACCESS_REMOTE_READ);
212 
213 	fmr_pool = ib_create_fmr_pool(device->pd, &params);
214 	if (IS_ERR(fmr_pool)) {
215 		ret = PTR_ERR(fmr_pool);
216 		iser_err("FMR allocation failed, err %d\n", ret);
217 		goto err_fmr;
218 	}
219 
220 	desc->rsc.page_vec = page_vec;
221 	desc->rsc.fmr_pool = fmr_pool;
222 	list_add(&desc->list, &fr_pool->list);
223 
224 	return 0;
225 
226 err_fmr:
227 	kfree(page_vec);
228 err_frpl:
229 	kfree(desc);
230 
231 	return ret;
232 }
233 
234 /**
235  * iser_free_fmr_pool - releases the FMR pool and page vec
236  */
237 void iser_free_fmr_pool(struct ib_conn *ib_conn)
238 {
239 	struct iser_fr_pool *fr_pool = &ib_conn->fr_pool;
240 	struct iser_fr_desc *desc;
241 
242 	desc = list_first_entry(&fr_pool->list,
243 				struct iser_fr_desc, list);
244 	list_del(&desc->list);
245 
246 	iser_info("freeing conn %p fmr pool %p\n",
247 		  ib_conn, desc->rsc.fmr_pool);
248 
249 	ib_destroy_fmr_pool(desc->rsc.fmr_pool);
250 	kfree(desc->rsc.page_vec);
251 	kfree(desc);
252 }
253 
254 static int
255 iser_alloc_reg_res(struct iser_device *device,
256 		   struct ib_pd *pd,
257 		   struct iser_reg_resources *res,
258 		   unsigned int size)
259 {
260 	struct ib_device *ib_dev = device->ib_device;
261 	enum ib_mr_type mr_type;
262 	int ret;
263 
264 	if (ib_dev->attrs.device_cap_flags & IB_DEVICE_SG_GAPS_REG)
265 		mr_type = IB_MR_TYPE_SG_GAPS;
266 	else
267 		mr_type = IB_MR_TYPE_MEM_REG;
268 
269 	res->mr = ib_alloc_mr(pd, mr_type, size);
270 	if (IS_ERR(res->mr)) {
271 		ret = PTR_ERR(res->mr);
272 		iser_err("Failed to allocate ib_fast_reg_mr err=%d\n", ret);
273 		return ret;
274 	}
275 	res->mr_valid = 0;
276 
277 	return 0;
278 }
279 
280 static void
281 iser_free_reg_res(struct iser_reg_resources *rsc)
282 {
283 	ib_dereg_mr(rsc->mr);
284 }
285 
286 static int
287 iser_alloc_pi_ctx(struct iser_device *device,
288 		  struct ib_pd *pd,
289 		  struct iser_fr_desc *desc,
290 		  unsigned int size)
291 {
292 	struct iser_pi_context *pi_ctx = NULL;
293 	int ret;
294 
295 	desc->pi_ctx = kzalloc(sizeof(*desc->pi_ctx), GFP_KERNEL);
296 	if (!desc->pi_ctx)
297 		return -ENOMEM;
298 
299 	pi_ctx = desc->pi_ctx;
300 
301 	ret = iser_alloc_reg_res(device, pd, &pi_ctx->rsc, size);
302 	if (ret) {
303 		iser_err("failed to allocate reg_resources\n");
304 		goto alloc_reg_res_err;
305 	}
306 
307 	pi_ctx->sig_mr = ib_alloc_mr(pd, IB_MR_TYPE_SIGNATURE, 2);
308 	if (IS_ERR(pi_ctx->sig_mr)) {
309 		ret = PTR_ERR(pi_ctx->sig_mr);
310 		goto sig_mr_failure;
311 	}
312 	pi_ctx->sig_mr_valid = 0;
313 	desc->pi_ctx->sig_protected = 0;
314 
315 	return 0;
316 
317 sig_mr_failure:
318 	iser_free_reg_res(&pi_ctx->rsc);
319 alloc_reg_res_err:
320 	kfree(desc->pi_ctx);
321 
322 	return ret;
323 }
324 
325 static void
326 iser_free_pi_ctx(struct iser_pi_context *pi_ctx)
327 {
328 	iser_free_reg_res(&pi_ctx->rsc);
329 	ib_dereg_mr(pi_ctx->sig_mr);
330 	kfree(pi_ctx);
331 }
332 
333 static struct iser_fr_desc *
334 iser_create_fastreg_desc(struct iser_device *device,
335 			 struct ib_pd *pd,
336 			 bool pi_enable,
337 			 unsigned int size)
338 {
339 	struct iser_fr_desc *desc;
340 	int ret;
341 
342 	desc = kzalloc(sizeof(*desc), GFP_KERNEL);
343 	if (!desc)
344 		return ERR_PTR(-ENOMEM);
345 
346 	ret = iser_alloc_reg_res(device, pd, &desc->rsc, size);
347 	if (ret)
348 		goto reg_res_alloc_failure;
349 
350 	if (pi_enable) {
351 		ret = iser_alloc_pi_ctx(device, pd, desc, size);
352 		if (ret)
353 			goto pi_ctx_alloc_failure;
354 	}
355 
356 	return desc;
357 
358 pi_ctx_alloc_failure:
359 	iser_free_reg_res(&desc->rsc);
360 reg_res_alloc_failure:
361 	kfree(desc);
362 
363 	return ERR_PTR(ret);
364 }
365 
366 /**
367  * iser_alloc_fastreg_pool - Creates pool of fast_reg descriptors
368  * for fast registration work requests.
369  * returns 0 on success, or errno code on failure
370  */
371 int iser_alloc_fastreg_pool(struct ib_conn *ib_conn,
372 			    unsigned cmds_max,
373 			    unsigned int size)
374 {
375 	struct iser_device *device = ib_conn->device;
376 	struct iser_fr_pool *fr_pool = &ib_conn->fr_pool;
377 	struct iser_fr_desc *desc;
378 	int i, ret;
379 
380 	INIT_LIST_HEAD(&fr_pool->list);
381 	spin_lock_init(&fr_pool->lock);
382 	fr_pool->size = 0;
383 	for (i = 0; i < cmds_max; i++) {
384 		desc = iser_create_fastreg_desc(device, device->pd,
385 						ib_conn->pi_support, size);
386 		if (IS_ERR(desc)) {
387 			ret = PTR_ERR(desc);
388 			goto err;
389 		}
390 
391 		list_add_tail(&desc->list, &fr_pool->list);
392 		fr_pool->size++;
393 	}
394 
395 	return 0;
396 
397 err:
398 	iser_free_fastreg_pool(ib_conn);
399 	return ret;
400 }
401 
402 /**
403  * iser_free_fastreg_pool - releases the pool of fast_reg descriptors
404  */
405 void iser_free_fastreg_pool(struct ib_conn *ib_conn)
406 {
407 	struct iser_fr_pool *fr_pool = &ib_conn->fr_pool;
408 	struct iser_fr_desc *desc, *tmp;
409 	int i = 0;
410 
411 	if (list_empty(&fr_pool->list))
412 		return;
413 
414 	iser_info("freeing conn %p fr pool\n", ib_conn);
415 
416 	list_for_each_entry_safe(desc, tmp, &fr_pool->list, list) {
417 		list_del(&desc->list);
418 		iser_free_reg_res(&desc->rsc);
419 		if (desc->pi_ctx)
420 			iser_free_pi_ctx(desc->pi_ctx);
421 		kfree(desc);
422 		++i;
423 	}
424 
425 	if (i < fr_pool->size)
426 		iser_warn("pool still has %d regions registered\n",
427 			  fr_pool->size - i);
428 }
429 
430 /**
431  * iser_create_ib_conn_res - Queue-Pair (QP)
432  *
433  * returns 0 on success, -1 on failure
434  */
435 static int iser_create_ib_conn_res(struct ib_conn *ib_conn)
436 {
437 	struct iser_conn *iser_conn = to_iser_conn(ib_conn);
438 	struct iser_device	*device;
439 	struct ib_device	*ib_dev;
440 	struct ib_qp_init_attr	init_attr;
441 	int			ret = -ENOMEM;
442 	int index, min_index = 0;
443 
444 	BUG_ON(ib_conn->device == NULL);
445 
446 	device = ib_conn->device;
447 	ib_dev = device->ib_device;
448 
449 	memset(&init_attr, 0, sizeof init_attr);
450 
451 	mutex_lock(&ig.connlist_mutex);
452 	/* select the CQ with the minimal number of usages */
453 	for (index = 0; index < device->comps_used; index++) {
454 		if (device->comps[index].active_qps <
455 		    device->comps[min_index].active_qps)
456 			min_index = index;
457 	}
458 	ib_conn->comp = &device->comps[min_index];
459 	ib_conn->comp->active_qps++;
460 	mutex_unlock(&ig.connlist_mutex);
461 	iser_info("cq index %d used for ib_conn %p\n", min_index, ib_conn);
462 
463 	init_attr.event_handler = iser_qp_event_callback;
464 	init_attr.qp_context	= (void *)ib_conn;
465 	init_attr.send_cq	= ib_conn->comp->cq;
466 	init_attr.recv_cq	= ib_conn->comp->cq;
467 	init_attr.cap.max_recv_wr  = ISER_QP_MAX_RECV_DTOS;
468 	init_attr.cap.max_send_sge = 2;
469 	init_attr.cap.max_recv_sge = 1;
470 	init_attr.sq_sig_type	= IB_SIGNAL_REQ_WR;
471 	init_attr.qp_type	= IB_QPT_RC;
472 	if (ib_conn->pi_support) {
473 		init_attr.cap.max_send_wr = ISER_QP_SIG_MAX_REQ_DTOS + 1;
474 		init_attr.create_flags |= IB_QP_CREATE_SIGNATURE_EN;
475 		iser_conn->max_cmds =
476 			ISER_GET_MAX_XMIT_CMDS(ISER_QP_SIG_MAX_REQ_DTOS);
477 	} else {
478 		if (ib_dev->attrs.max_qp_wr > ISER_QP_MAX_REQ_DTOS) {
479 			init_attr.cap.max_send_wr  = ISER_QP_MAX_REQ_DTOS + 1;
480 			iser_conn->max_cmds =
481 				ISER_GET_MAX_XMIT_CMDS(ISER_QP_MAX_REQ_DTOS);
482 		} else {
483 			init_attr.cap.max_send_wr = ib_dev->attrs.max_qp_wr;
484 			iser_conn->max_cmds =
485 				ISER_GET_MAX_XMIT_CMDS(ib_dev->attrs.max_qp_wr);
486 			iser_dbg("device %s supports max_send_wr %d\n",
487 				 device->ib_device->name, ib_dev->attrs.max_qp_wr);
488 		}
489 	}
490 
491 	ret = rdma_create_qp(ib_conn->cma_id, device->pd, &init_attr);
492 	if (ret)
493 		goto out_err;
494 
495 	ib_conn->qp = ib_conn->cma_id->qp;
496 	iser_info("setting conn %p cma_id %p qp %p\n",
497 		  ib_conn, ib_conn->cma_id,
498 		  ib_conn->cma_id->qp);
499 	return ret;
500 
501 out_err:
502 	mutex_lock(&ig.connlist_mutex);
503 	ib_conn->comp->active_qps--;
504 	mutex_unlock(&ig.connlist_mutex);
505 	iser_err("unable to alloc mem or create resource, err %d\n", ret);
506 
507 	return ret;
508 }
509 
510 /**
511  * based on the resolved device node GUID see if there already allocated
512  * device for this device. If there's no such, create one.
513  */
514 static
515 struct iser_device *iser_device_find_by_ib_device(struct rdma_cm_id *cma_id)
516 {
517 	struct iser_device *device;
518 
519 	mutex_lock(&ig.device_list_mutex);
520 
521 	list_for_each_entry(device, &ig.device_list, ig_list)
522 		/* find if there's a match using the node GUID */
523 		if (device->ib_device->node_guid == cma_id->device->node_guid)
524 			goto inc_refcnt;
525 
526 	device = kzalloc(sizeof *device, GFP_KERNEL);
527 	if (device == NULL)
528 		goto out;
529 
530 	/* assign this device to the device */
531 	device->ib_device = cma_id->device;
532 	/* init the device and link it into ig device list */
533 	if (iser_create_device_ib_res(device)) {
534 		kfree(device);
535 		device = NULL;
536 		goto out;
537 	}
538 	list_add(&device->ig_list, &ig.device_list);
539 
540 inc_refcnt:
541 	device->refcount++;
542 out:
543 	mutex_unlock(&ig.device_list_mutex);
544 	return device;
545 }
546 
547 /* if there's no demand for this device, release it */
548 static void iser_device_try_release(struct iser_device *device)
549 {
550 	mutex_lock(&ig.device_list_mutex);
551 	device->refcount--;
552 	iser_info("device %p refcount %d\n", device, device->refcount);
553 	if (!device->refcount) {
554 		iser_free_device_ib_res(device);
555 		list_del(&device->ig_list);
556 		kfree(device);
557 	}
558 	mutex_unlock(&ig.device_list_mutex);
559 }
560 
561 /**
562  * Called with state mutex held
563  **/
564 static int iser_conn_state_comp_exch(struct iser_conn *iser_conn,
565 				     enum iser_conn_state comp,
566 				     enum iser_conn_state exch)
567 {
568 	int ret;
569 
570 	ret = (iser_conn->state == comp);
571 	if (ret)
572 		iser_conn->state = exch;
573 
574 	return ret;
575 }
576 
577 void iser_release_work(struct work_struct *work)
578 {
579 	struct iser_conn *iser_conn;
580 
581 	iser_conn = container_of(work, struct iser_conn, release_work);
582 
583 	/* Wait for conn_stop to complete */
584 	wait_for_completion(&iser_conn->stop_completion);
585 	/* Wait for IB resouces cleanup to complete */
586 	wait_for_completion(&iser_conn->ib_completion);
587 
588 	mutex_lock(&iser_conn->state_mutex);
589 	iser_conn->state = ISER_CONN_DOWN;
590 	mutex_unlock(&iser_conn->state_mutex);
591 
592 	iser_conn_release(iser_conn);
593 }
594 
595 /**
596  * iser_free_ib_conn_res - release IB related resources
597  * @iser_conn: iser connection struct
598  * @destroy: indicator if we need to try to release the
599  *     iser device and memory regoins pool (only iscsi
600  *     shutdown and DEVICE_REMOVAL will use this).
601  *
602  * This routine is called with the iser state mutex held
603  * so the cm_id removal is out of here. It is Safe to
604  * be invoked multiple times.
605  */
606 static void iser_free_ib_conn_res(struct iser_conn *iser_conn,
607 				  bool destroy)
608 {
609 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
610 	struct iser_device *device = ib_conn->device;
611 
612 	iser_info("freeing conn %p cma_id %p qp %p\n",
613 		  iser_conn, ib_conn->cma_id, ib_conn->qp);
614 
615 	if (ib_conn->qp != NULL) {
616 		ib_conn->comp->active_qps--;
617 		rdma_destroy_qp(ib_conn->cma_id);
618 		ib_conn->qp = NULL;
619 	}
620 
621 	if (destroy) {
622 		if (iser_conn->rx_descs)
623 			iser_free_rx_descriptors(iser_conn);
624 
625 		if (device != NULL) {
626 			iser_device_try_release(device);
627 			ib_conn->device = NULL;
628 		}
629 	}
630 }
631 
632 /**
633  * Frees all conn objects and deallocs conn descriptor
634  */
635 void iser_conn_release(struct iser_conn *iser_conn)
636 {
637 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
638 
639 	mutex_lock(&ig.connlist_mutex);
640 	list_del(&iser_conn->conn_list);
641 	mutex_unlock(&ig.connlist_mutex);
642 
643 	mutex_lock(&iser_conn->state_mutex);
644 	/* In case we endup here without ep_disconnect being invoked. */
645 	if (iser_conn->state != ISER_CONN_DOWN) {
646 		iser_warn("iser conn %p state %d, expected state down.\n",
647 			  iser_conn, iser_conn->state);
648 		iscsi_destroy_endpoint(iser_conn->ep);
649 		iser_conn->state = ISER_CONN_DOWN;
650 	}
651 	/*
652 	 * In case we never got to bind stage, we still need to
653 	 * release IB resources (which is safe to call more than once).
654 	 */
655 	iser_free_ib_conn_res(iser_conn, true);
656 	mutex_unlock(&iser_conn->state_mutex);
657 
658 	if (ib_conn->cma_id != NULL) {
659 		rdma_destroy_id(ib_conn->cma_id);
660 		ib_conn->cma_id = NULL;
661 	}
662 
663 	kfree(iser_conn);
664 }
665 
666 /**
667  * triggers start of the disconnect procedures and wait for them to be done
668  * Called with state mutex held
669  */
670 int iser_conn_terminate(struct iser_conn *iser_conn)
671 {
672 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
673 	int err = 0;
674 
675 	/* terminate the iser conn only if the conn state is UP */
676 	if (!iser_conn_state_comp_exch(iser_conn, ISER_CONN_UP,
677 				       ISER_CONN_TERMINATING))
678 		return 0;
679 
680 	iser_info("iser_conn %p state %d\n", iser_conn, iser_conn->state);
681 
682 	/* suspend queuing of new iscsi commands */
683 	if (iser_conn->iscsi_conn)
684 		iscsi_suspend_queue(iser_conn->iscsi_conn);
685 
686 	/*
687 	 * In case we didn't already clean up the cma_id (peer initiated
688 	 * a disconnection), we need to Cause the CMA to change the QP
689 	 * state to ERROR.
690 	 */
691 	if (ib_conn->cma_id) {
692 		err = rdma_disconnect(ib_conn->cma_id);
693 		if (err)
694 			iser_err("Failed to disconnect, conn: 0x%p err %d\n",
695 				 iser_conn, err);
696 
697 		/* block until all flush errors are consumed */
698 		ib_drain_sq(ib_conn->qp);
699 	}
700 
701 	return 1;
702 }
703 
704 /**
705  * Called with state mutex held
706  **/
707 static void iser_connect_error(struct rdma_cm_id *cma_id)
708 {
709 	struct iser_conn *iser_conn;
710 
711 	iser_conn = (struct iser_conn *)cma_id->context;
712 	iser_conn->state = ISER_CONN_TERMINATING;
713 }
714 
715 static void
716 iser_calc_scsi_params(struct iser_conn *iser_conn,
717 		      unsigned int max_sectors)
718 {
719 	struct iser_device *device = iser_conn->ib_conn.device;
720 	unsigned short sg_tablesize, sup_sg_tablesize;
721 
722 	sg_tablesize = DIV_ROUND_UP(max_sectors * 512, SIZE_4K);
723 	sup_sg_tablesize = min_t(unsigned, ISCSI_ISER_MAX_SG_TABLESIZE,
724 				 device->ib_device->attrs.max_fast_reg_page_list_len);
725 
726 	if (sg_tablesize > sup_sg_tablesize) {
727 		sg_tablesize = sup_sg_tablesize;
728 		iser_conn->scsi_max_sectors = sg_tablesize * SIZE_4K / 512;
729 	} else {
730 		iser_conn->scsi_max_sectors = max_sectors;
731 	}
732 
733 	iser_conn->scsi_sg_tablesize = sg_tablesize;
734 
735 	iser_dbg("iser_conn %p, sg_tablesize %u, max_sectors %u\n",
736 		 iser_conn, iser_conn->scsi_sg_tablesize,
737 		 iser_conn->scsi_max_sectors);
738 }
739 
740 /**
741  * Called with state mutex held
742  **/
743 static void iser_addr_handler(struct rdma_cm_id *cma_id)
744 {
745 	struct iser_device *device;
746 	struct iser_conn   *iser_conn;
747 	struct ib_conn   *ib_conn;
748 	int    ret;
749 
750 	iser_conn = (struct iser_conn *)cma_id->context;
751 	if (iser_conn->state != ISER_CONN_PENDING)
752 		/* bailout */
753 		return;
754 
755 	ib_conn = &iser_conn->ib_conn;
756 	device = iser_device_find_by_ib_device(cma_id);
757 	if (!device) {
758 		iser_err("device lookup/creation failed\n");
759 		iser_connect_error(cma_id);
760 		return;
761 	}
762 
763 	ib_conn->device = device;
764 
765 	/* connection T10-PI support */
766 	if (iser_pi_enable) {
767 		if (!(device->ib_device->attrs.device_cap_flags &
768 		      IB_DEVICE_SIGNATURE_HANDOVER)) {
769 			iser_warn("T10-PI requested but not supported on %s, "
770 				  "continue without T10-PI\n",
771 				  ib_conn->device->ib_device->name);
772 			ib_conn->pi_support = false;
773 		} else {
774 			ib_conn->pi_support = true;
775 		}
776 	}
777 
778 	iser_calc_scsi_params(iser_conn, iser_max_sectors);
779 
780 	ret = rdma_resolve_route(cma_id, 1000);
781 	if (ret) {
782 		iser_err("resolve route failed: %d\n", ret);
783 		iser_connect_error(cma_id);
784 		return;
785 	}
786 }
787 
788 /**
789  * Called with state mutex held
790  **/
791 static void iser_route_handler(struct rdma_cm_id *cma_id)
792 {
793 	struct rdma_conn_param conn_param;
794 	int    ret;
795 	struct iser_cm_hdr req_hdr;
796 	struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
797 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
798 	struct iser_device *device = ib_conn->device;
799 
800 	if (iser_conn->state != ISER_CONN_PENDING)
801 		/* bailout */
802 		return;
803 
804 	ret = iser_create_ib_conn_res(ib_conn);
805 	if (ret)
806 		goto failure;
807 
808 	memset(&conn_param, 0, sizeof conn_param);
809 	conn_param.responder_resources = device->ib_device->attrs.max_qp_rd_atom;
810 	conn_param.initiator_depth     = 1;
811 	conn_param.retry_count	       = 7;
812 	conn_param.rnr_retry_count     = 6;
813 
814 	memset(&req_hdr, 0, sizeof(req_hdr));
815 	req_hdr.flags = ISER_ZBVA_NOT_SUP;
816 	if (!device->remote_inv_sup)
817 		req_hdr.flags |= ISER_SEND_W_INV_NOT_SUP;
818 	conn_param.private_data	= (void *)&req_hdr;
819 	conn_param.private_data_len = sizeof(struct iser_cm_hdr);
820 
821 	ret = rdma_connect(cma_id, &conn_param);
822 	if (ret) {
823 		iser_err("failure connecting: %d\n", ret);
824 		goto failure;
825 	}
826 
827 	return;
828 failure:
829 	iser_connect_error(cma_id);
830 }
831 
832 static void iser_connected_handler(struct rdma_cm_id *cma_id,
833 				   const void *private_data)
834 {
835 	struct iser_conn *iser_conn;
836 	struct ib_qp_attr attr;
837 	struct ib_qp_init_attr init_attr;
838 
839 	iser_conn = (struct iser_conn *)cma_id->context;
840 	if (iser_conn->state != ISER_CONN_PENDING)
841 		/* bailout */
842 		return;
843 
844 	(void)ib_query_qp(cma_id->qp, &attr, ~0, &init_attr);
845 	iser_info("remote qpn:%x my qpn:%x\n", attr.dest_qp_num, cma_id->qp->qp_num);
846 
847 	if (private_data) {
848 		u8 flags = *(u8 *)private_data;
849 
850 		iser_conn->snd_w_inv = !(flags & ISER_SEND_W_INV_NOT_SUP);
851 	}
852 
853 	iser_info("conn %p: negotiated %s invalidation\n",
854 		  iser_conn, iser_conn->snd_w_inv ? "remote" : "local");
855 
856 	iser_conn->state = ISER_CONN_UP;
857 	complete(&iser_conn->up_completion);
858 }
859 
860 static void iser_disconnected_handler(struct rdma_cm_id *cma_id)
861 {
862 	struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
863 
864 	if (iser_conn_terminate(iser_conn)) {
865 		if (iser_conn->iscsi_conn)
866 			iscsi_conn_failure(iser_conn->iscsi_conn,
867 					   ISCSI_ERR_CONN_FAILED);
868 		else
869 			iser_err("iscsi_iser connection isn't bound\n");
870 	}
871 }
872 
873 static void iser_cleanup_handler(struct rdma_cm_id *cma_id,
874 				 bool destroy)
875 {
876 	struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
877 
878 	/*
879 	 * We are not guaranteed that we visited disconnected_handler
880 	 * by now, call it here to be safe that we handle CM drep
881 	 * and flush errors.
882 	 */
883 	iser_disconnected_handler(cma_id);
884 	iser_free_ib_conn_res(iser_conn, destroy);
885 	complete(&iser_conn->ib_completion);
886 };
887 
888 static int iser_cma_handler(struct rdma_cm_id *cma_id, struct rdma_cm_event *event)
889 {
890 	struct iser_conn *iser_conn;
891 	int ret = 0;
892 
893 	iser_conn = (struct iser_conn *)cma_id->context;
894 	iser_info("%s (%d): status %d conn %p id %p\n",
895 		  rdma_event_msg(event->event), event->event,
896 		  event->status, cma_id->context, cma_id);
897 
898 	mutex_lock(&iser_conn->state_mutex);
899 	switch (event->event) {
900 	case RDMA_CM_EVENT_ADDR_RESOLVED:
901 		iser_addr_handler(cma_id);
902 		break;
903 	case RDMA_CM_EVENT_ROUTE_RESOLVED:
904 		iser_route_handler(cma_id);
905 		break;
906 	case RDMA_CM_EVENT_ESTABLISHED:
907 		iser_connected_handler(cma_id, event->param.conn.private_data);
908 		break;
909 	case RDMA_CM_EVENT_ADDR_ERROR:
910 	case RDMA_CM_EVENT_ROUTE_ERROR:
911 	case RDMA_CM_EVENT_CONNECT_ERROR:
912 	case RDMA_CM_EVENT_UNREACHABLE:
913 	case RDMA_CM_EVENT_REJECTED:
914 		iser_connect_error(cma_id);
915 		break;
916 	case RDMA_CM_EVENT_DISCONNECTED:
917 	case RDMA_CM_EVENT_ADDR_CHANGE:
918 	case RDMA_CM_EVENT_TIMEWAIT_EXIT:
919 		iser_cleanup_handler(cma_id, false);
920 		break;
921 	case RDMA_CM_EVENT_DEVICE_REMOVAL:
922 		/*
923 		 * we *must* destroy the device as we cannot rely
924 		 * on iscsid to be around to initiate error handling.
925 		 * also if we are not in state DOWN implicitly destroy
926 		 * the cma_id.
927 		 */
928 		iser_cleanup_handler(cma_id, true);
929 		if (iser_conn->state != ISER_CONN_DOWN) {
930 			iser_conn->ib_conn.cma_id = NULL;
931 			ret = 1;
932 		}
933 		break;
934 	default:
935 		iser_err("Unexpected RDMA CM event: %s (%d)\n",
936 			 rdma_event_msg(event->event), event->event);
937 		break;
938 	}
939 	mutex_unlock(&iser_conn->state_mutex);
940 
941 	return ret;
942 }
943 
944 void iser_conn_init(struct iser_conn *iser_conn)
945 {
946 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
947 
948 	iser_conn->state = ISER_CONN_INIT;
949 	init_completion(&iser_conn->stop_completion);
950 	init_completion(&iser_conn->ib_completion);
951 	init_completion(&iser_conn->up_completion);
952 	INIT_LIST_HEAD(&iser_conn->conn_list);
953 	mutex_init(&iser_conn->state_mutex);
954 
955 	ib_conn->post_recv_buf_count = 0;
956 	ib_conn->reg_cqe.done = iser_reg_comp;
957 }
958 
959  /**
960  * starts the process of connecting to the target
961  * sleeps until the connection is established or rejected
962  */
963 int iser_connect(struct iser_conn   *iser_conn,
964 		 struct sockaddr    *src_addr,
965 		 struct sockaddr    *dst_addr,
966 		 int                 non_blocking)
967 {
968 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
969 	int err = 0;
970 
971 	mutex_lock(&iser_conn->state_mutex);
972 
973 	sprintf(iser_conn->name, "%pISp", dst_addr);
974 
975 	iser_info("connecting to: %s\n", iser_conn->name);
976 
977 	/* the device is known only --after-- address resolution */
978 	ib_conn->device = NULL;
979 
980 	iser_conn->state = ISER_CONN_PENDING;
981 
982 	ib_conn->cma_id = rdma_create_id(&init_net, iser_cma_handler,
983 					 (void *)iser_conn,
984 					 RDMA_PS_TCP, IB_QPT_RC);
985 	if (IS_ERR(ib_conn->cma_id)) {
986 		err = PTR_ERR(ib_conn->cma_id);
987 		iser_err("rdma_create_id failed: %d\n", err);
988 		goto id_failure;
989 	}
990 
991 	err = rdma_resolve_addr(ib_conn->cma_id, src_addr, dst_addr, 1000);
992 	if (err) {
993 		iser_err("rdma_resolve_addr failed: %d\n", err);
994 		goto addr_failure;
995 	}
996 
997 	if (!non_blocking) {
998 		wait_for_completion_interruptible(&iser_conn->up_completion);
999 
1000 		if (iser_conn->state != ISER_CONN_UP) {
1001 			err =  -EIO;
1002 			goto connect_failure;
1003 		}
1004 	}
1005 	mutex_unlock(&iser_conn->state_mutex);
1006 
1007 	mutex_lock(&ig.connlist_mutex);
1008 	list_add(&iser_conn->conn_list, &ig.connlist);
1009 	mutex_unlock(&ig.connlist_mutex);
1010 	return 0;
1011 
1012 id_failure:
1013 	ib_conn->cma_id = NULL;
1014 addr_failure:
1015 	iser_conn->state = ISER_CONN_DOWN;
1016 connect_failure:
1017 	mutex_unlock(&iser_conn->state_mutex);
1018 	iser_conn_release(iser_conn);
1019 	return err;
1020 }
1021 
1022 int iser_post_recvl(struct iser_conn *iser_conn)
1023 {
1024 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
1025 	struct iser_login_desc *desc = &iser_conn->login_desc;
1026 	struct ib_recv_wr wr, *wr_failed;
1027 	int ib_ret;
1028 
1029 	desc->sge.addr = desc->rsp_dma;
1030 	desc->sge.length = ISER_RX_LOGIN_SIZE;
1031 	desc->sge.lkey = ib_conn->device->pd->local_dma_lkey;
1032 
1033 	desc->cqe.done = iser_login_rsp;
1034 	wr.wr_cqe = &desc->cqe;
1035 	wr.sg_list = &desc->sge;
1036 	wr.num_sge = 1;
1037 	wr.next = NULL;
1038 
1039 	ib_conn->post_recv_buf_count++;
1040 	ib_ret = ib_post_recv(ib_conn->qp, &wr, &wr_failed);
1041 	if (ib_ret) {
1042 		iser_err("ib_post_recv failed ret=%d\n", ib_ret);
1043 		ib_conn->post_recv_buf_count--;
1044 	}
1045 
1046 	return ib_ret;
1047 }
1048 
1049 int iser_post_recvm(struct iser_conn *iser_conn, int count)
1050 {
1051 	struct ib_conn *ib_conn = &iser_conn->ib_conn;
1052 	unsigned int my_rx_head = iser_conn->rx_desc_head;
1053 	struct iser_rx_desc *rx_desc;
1054 	struct ib_recv_wr *wr, *wr_failed;
1055 	int i, ib_ret;
1056 
1057 	for (wr = ib_conn->rx_wr, i = 0; i < count; i++, wr++) {
1058 		rx_desc = &iser_conn->rx_descs[my_rx_head];
1059 		rx_desc->cqe.done = iser_task_rsp;
1060 		wr->wr_cqe = &rx_desc->cqe;
1061 		wr->sg_list = &rx_desc->rx_sg;
1062 		wr->num_sge = 1;
1063 		wr->next = wr + 1;
1064 		my_rx_head = (my_rx_head + 1) & iser_conn->qp_max_recv_dtos_mask;
1065 	}
1066 
1067 	wr--;
1068 	wr->next = NULL; /* mark end of work requests list */
1069 
1070 	ib_conn->post_recv_buf_count += count;
1071 	ib_ret = ib_post_recv(ib_conn->qp, ib_conn->rx_wr, &wr_failed);
1072 	if (ib_ret) {
1073 		iser_err("ib_post_recv failed ret=%d\n", ib_ret);
1074 		ib_conn->post_recv_buf_count -= count;
1075 	} else
1076 		iser_conn->rx_desc_head = my_rx_head;
1077 
1078 	return ib_ret;
1079 }
1080 
1081 
1082 /**
1083  * iser_start_send - Initiate a Send DTO operation
1084  *
1085  * returns 0 on success, -1 on failure
1086  */
1087 int iser_post_send(struct ib_conn *ib_conn, struct iser_tx_desc *tx_desc,
1088 		   bool signal)
1089 {
1090 	struct ib_send_wr *bad_wr, *wr = iser_tx_next_wr(tx_desc);
1091 	int ib_ret;
1092 
1093 	ib_dma_sync_single_for_device(ib_conn->device->ib_device,
1094 				      tx_desc->dma_addr, ISER_HEADERS_LEN,
1095 				      DMA_TO_DEVICE);
1096 
1097 	wr->next = NULL;
1098 	wr->wr_cqe = &tx_desc->cqe;
1099 	wr->sg_list = tx_desc->tx_sg;
1100 	wr->num_sge = tx_desc->num_sge;
1101 	wr->opcode = IB_WR_SEND;
1102 	wr->send_flags = signal ? IB_SEND_SIGNALED : 0;
1103 
1104 	ib_ret = ib_post_send(ib_conn->qp, &tx_desc->wrs[0].send, &bad_wr);
1105 	if (ib_ret)
1106 		iser_err("ib_post_send failed, ret:%d opcode:%d\n",
1107 			 ib_ret, bad_wr->opcode);
1108 
1109 	return ib_ret;
1110 }
1111 
1112 u8 iser_check_task_pi_status(struct iscsi_iser_task *iser_task,
1113 			     enum iser_data_dir cmd_dir, sector_t *sector)
1114 {
1115 	struct iser_mem_reg *reg = &iser_task->rdma_reg[cmd_dir];
1116 	struct iser_fr_desc *desc = reg->mem_h;
1117 	unsigned long sector_size = iser_task->sc->device->sector_size;
1118 	struct ib_mr_status mr_status;
1119 	int ret;
1120 
1121 	if (desc && desc->pi_ctx->sig_protected) {
1122 		desc->pi_ctx->sig_protected = 0;
1123 		ret = ib_check_mr_status(desc->pi_ctx->sig_mr,
1124 					 IB_MR_CHECK_SIG_STATUS, &mr_status);
1125 		if (ret) {
1126 			pr_err("ib_check_mr_status failed, ret %d\n", ret);
1127 			goto err;
1128 		}
1129 
1130 		if (mr_status.fail_status & IB_MR_CHECK_SIG_STATUS) {
1131 			sector_t sector_off = mr_status.sig_err.sig_err_offset;
1132 
1133 			sector_div(sector_off, sector_size + 8);
1134 			*sector = scsi_get_lba(iser_task->sc) + sector_off;
1135 
1136 			pr_err("PI error found type %d at sector %llx "
1137 			       "expected %x vs actual %x\n",
1138 			       mr_status.sig_err.err_type,
1139 			       (unsigned long long)*sector,
1140 			       mr_status.sig_err.expected,
1141 			       mr_status.sig_err.actual);
1142 
1143 			switch (mr_status.sig_err.err_type) {
1144 			case IB_SIG_BAD_GUARD:
1145 				return 0x1;
1146 			case IB_SIG_BAD_REFTAG:
1147 				return 0x3;
1148 			case IB_SIG_BAD_APPTAG:
1149 				return 0x2;
1150 			}
1151 		}
1152 	}
1153 
1154 	return 0;
1155 err:
1156 	/* Not alot we can do here, return ambiguous guard error */
1157 	return 0x1;
1158 }
1159 
1160 void iser_err_comp(struct ib_wc *wc, const char *type)
1161 {
1162 	if (wc->status != IB_WC_WR_FLUSH_ERR) {
1163 		struct iser_conn *iser_conn = to_iser_conn(wc->qp->qp_context);
1164 
1165 		iser_err("%s failure: %s (%d) vend_err %x\n", type,
1166 			 ib_wc_status_msg(wc->status), wc->status,
1167 			 wc->vendor_err);
1168 
1169 		if (iser_conn->iscsi_conn)
1170 			iscsi_conn_failure(iser_conn->iscsi_conn,
1171 					   ISCSI_ERR_CONN_FAILED);
1172 	} else {
1173 		iser_dbg("%s failure: %s (%d)\n", type,
1174 			 ib_wc_status_msg(wc->status), wc->status);
1175 	}
1176 }
1177