1 /*
2  * Copyright (c) 2013-2016, Mellanox Technologies. All rights reserved.
3  *
4  * This software is available to you under a choice of one of two
5  * licenses.  You may choose to be licensed under the terms of the GNU
6  * General Public License (GPL) Version 2, available from the file
7  * COPYING in the main directory of this source tree, or the
8  * OpenIB.org BSD license below:
9  *
10  *     Redistribution and use in source and binary forms, with or
11  *     without modification, are permitted provided that the following
12  *     conditions are met:
13  *
14  *      - Redistributions of source code must retain the above
15  *        copyright notice, this list of conditions and the following
16  *        disclaimer.
17  *
18  *      - Redistributions in binary form must reproduce the above
19  *        copyright notice, this list of conditions and the following
20  *        disclaimer in the documentation and/or other materials
21  *        provided with the distribution.
22  *
23  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
24  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
25  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
26  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
27  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
28  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
29  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
30  * SOFTWARE.
31  */
32 
33 #include <linux/highmem.h>
34 #include <linux/module.h>
35 #include <linux/errno.h>
36 #include <linux/pci.h>
37 #include <linux/dma-mapping.h>
38 #include <linux/slab.h>
39 #include <linux/delay.h>
40 #include <linux/random.h>
41 #include <linux/io-mapping.h>
42 #include <linux/mlx5/driver.h>
43 #include <linux/mlx5/eq.h>
44 #include <linux/debugfs.h>
45 
46 #include "mlx5_core.h"
47 #include "lib/eq.h"
48 
49 enum {
50 	CMD_IF_REV = 5,
51 };
52 
53 enum {
54 	CMD_MODE_POLLING,
55 	CMD_MODE_EVENTS
56 };
57 
58 enum {
59 	MLX5_CMD_DELIVERY_STAT_OK			= 0x0,
60 	MLX5_CMD_DELIVERY_STAT_SIGNAT_ERR		= 0x1,
61 	MLX5_CMD_DELIVERY_STAT_TOK_ERR			= 0x2,
62 	MLX5_CMD_DELIVERY_STAT_BAD_BLK_NUM_ERR		= 0x3,
63 	MLX5_CMD_DELIVERY_STAT_OUT_PTR_ALIGN_ERR	= 0x4,
64 	MLX5_CMD_DELIVERY_STAT_IN_PTR_ALIGN_ERR		= 0x5,
65 	MLX5_CMD_DELIVERY_STAT_FW_ERR			= 0x6,
66 	MLX5_CMD_DELIVERY_STAT_IN_LENGTH_ERR		= 0x7,
67 	MLX5_CMD_DELIVERY_STAT_OUT_LENGTH_ERR		= 0x8,
68 	MLX5_CMD_DELIVERY_STAT_RES_FLD_NOT_CLR_ERR	= 0x9,
69 	MLX5_CMD_DELIVERY_STAT_CMD_DESCR_ERR		= 0x10,
70 };
71 
72 static struct mlx5_cmd_work_ent *alloc_cmd(struct mlx5_cmd *cmd,
73 					   struct mlx5_cmd_msg *in,
74 					   struct mlx5_cmd_msg *out,
75 					   void *uout, int uout_size,
76 					   mlx5_cmd_cbk_t cbk,
77 					   void *context, int page_queue)
78 {
79 	gfp_t alloc_flags = cbk ? GFP_ATOMIC : GFP_KERNEL;
80 	struct mlx5_cmd_work_ent *ent;
81 
82 	ent = kzalloc(sizeof(*ent), alloc_flags);
83 	if (!ent)
84 		return ERR_PTR(-ENOMEM);
85 
86 	ent->in		= in;
87 	ent->out	= out;
88 	ent->uout	= uout;
89 	ent->uout_size	= uout_size;
90 	ent->callback	= cbk;
91 	ent->context	= context;
92 	ent->cmd	= cmd;
93 	ent->page_queue = page_queue;
94 
95 	return ent;
96 }
97 
98 static u8 alloc_token(struct mlx5_cmd *cmd)
99 {
100 	u8 token;
101 
102 	spin_lock(&cmd->token_lock);
103 	cmd->token++;
104 	if (cmd->token == 0)
105 		cmd->token++;
106 	token = cmd->token;
107 	spin_unlock(&cmd->token_lock);
108 
109 	return token;
110 }
111 
112 static int alloc_ent(struct mlx5_cmd *cmd)
113 {
114 	unsigned long flags;
115 	int ret;
116 
117 	spin_lock_irqsave(&cmd->alloc_lock, flags);
118 	ret = find_first_bit(&cmd->bitmask, cmd->max_reg_cmds);
119 	if (ret < cmd->max_reg_cmds)
120 		clear_bit(ret, &cmd->bitmask);
121 	spin_unlock_irqrestore(&cmd->alloc_lock, flags);
122 
123 	return ret < cmd->max_reg_cmds ? ret : -ENOMEM;
124 }
125 
126 static void free_ent(struct mlx5_cmd *cmd, int idx)
127 {
128 	unsigned long flags;
129 
130 	spin_lock_irqsave(&cmd->alloc_lock, flags);
131 	set_bit(idx, &cmd->bitmask);
132 	spin_unlock_irqrestore(&cmd->alloc_lock, flags);
133 }
134 
135 static struct mlx5_cmd_layout *get_inst(struct mlx5_cmd *cmd, int idx)
136 {
137 	return cmd->cmd_buf + (idx << cmd->log_stride);
138 }
139 
140 static int mlx5_calc_cmd_blocks(struct mlx5_cmd_msg *msg)
141 {
142 	int size = msg->len;
143 	int blen = size - min_t(int, sizeof(msg->first.data), size);
144 
145 	return DIV_ROUND_UP(blen, MLX5_CMD_DATA_BLOCK_SIZE);
146 }
147 
148 static u8 xor8_buf(void *buf, size_t offset, int len)
149 {
150 	u8 *ptr = buf;
151 	u8 sum = 0;
152 	int i;
153 	int end = len + offset;
154 
155 	for (i = offset; i < end; i++)
156 		sum ^= ptr[i];
157 
158 	return sum;
159 }
160 
161 static int verify_block_sig(struct mlx5_cmd_prot_block *block)
162 {
163 	size_t rsvd0_off = offsetof(struct mlx5_cmd_prot_block, rsvd0);
164 	int xor_len = sizeof(*block) - sizeof(block->data) - 1;
165 
166 	if (xor8_buf(block, rsvd0_off, xor_len) != 0xff)
167 		return -EINVAL;
168 
169 	if (xor8_buf(block, 0, sizeof(*block)) != 0xff)
170 		return -EINVAL;
171 
172 	return 0;
173 }
174 
175 static void calc_block_sig(struct mlx5_cmd_prot_block *block)
176 {
177 	int ctrl_xor_len = sizeof(*block) - sizeof(block->data) - 2;
178 	size_t rsvd0_off = offsetof(struct mlx5_cmd_prot_block, rsvd0);
179 
180 	block->ctrl_sig = ~xor8_buf(block, rsvd0_off, ctrl_xor_len);
181 	block->sig = ~xor8_buf(block, 0, sizeof(*block) - 1);
182 }
183 
184 static void calc_chain_sig(struct mlx5_cmd_msg *msg)
185 {
186 	struct mlx5_cmd_mailbox *next = msg->next;
187 	int n = mlx5_calc_cmd_blocks(msg);
188 	int i = 0;
189 
190 	for (i = 0; i < n && next; i++)  {
191 		calc_block_sig(next->buf);
192 		next = next->next;
193 	}
194 }
195 
196 static void set_signature(struct mlx5_cmd_work_ent *ent, int csum)
197 {
198 	ent->lay->sig = ~xor8_buf(ent->lay, 0,  sizeof(*ent->lay));
199 	if (csum) {
200 		calc_chain_sig(ent->in);
201 		calc_chain_sig(ent->out);
202 	}
203 }
204 
205 static void poll_timeout(struct mlx5_cmd_work_ent *ent)
206 {
207 	unsigned long poll_end = jiffies + msecs_to_jiffies(MLX5_CMD_TIMEOUT_MSEC + 1000);
208 	u8 own;
209 
210 	do {
211 		own = READ_ONCE(ent->lay->status_own);
212 		if (!(own & CMD_OWNER_HW)) {
213 			ent->ret = 0;
214 			return;
215 		}
216 		cond_resched();
217 	} while (time_before(jiffies, poll_end));
218 
219 	ent->ret = -ETIMEDOUT;
220 }
221 
222 static void free_cmd(struct mlx5_cmd_work_ent *ent)
223 {
224 	kfree(ent);
225 }
226 
227 static int verify_signature(struct mlx5_cmd_work_ent *ent)
228 {
229 	struct mlx5_cmd_mailbox *next = ent->out->next;
230 	int n = mlx5_calc_cmd_blocks(ent->out);
231 	int err;
232 	u8 sig;
233 	int i = 0;
234 
235 	sig = xor8_buf(ent->lay, 0, sizeof(*ent->lay));
236 	if (sig != 0xff)
237 		return -EINVAL;
238 
239 	for (i = 0; i < n && next; i++) {
240 		err = verify_block_sig(next->buf);
241 		if (err)
242 			return err;
243 
244 		next = next->next;
245 	}
246 
247 	return 0;
248 }
249 
250 static void dump_buf(void *buf, int size, int data_only, int offset)
251 {
252 	__be32 *p = buf;
253 	int i;
254 
255 	for (i = 0; i < size; i += 16) {
256 		pr_debug("%03x: %08x %08x %08x %08x\n", offset, be32_to_cpu(p[0]),
257 			 be32_to_cpu(p[1]), be32_to_cpu(p[2]),
258 			 be32_to_cpu(p[3]));
259 		p += 4;
260 		offset += 16;
261 	}
262 	if (!data_only)
263 		pr_debug("\n");
264 }
265 
266 static int mlx5_internal_err_ret_value(struct mlx5_core_dev *dev, u16 op,
267 				       u32 *synd, u8 *status)
268 {
269 	*synd = 0;
270 	*status = 0;
271 
272 	switch (op) {
273 	case MLX5_CMD_OP_TEARDOWN_HCA:
274 	case MLX5_CMD_OP_DISABLE_HCA:
275 	case MLX5_CMD_OP_MANAGE_PAGES:
276 	case MLX5_CMD_OP_DESTROY_MKEY:
277 	case MLX5_CMD_OP_DESTROY_EQ:
278 	case MLX5_CMD_OP_DESTROY_CQ:
279 	case MLX5_CMD_OP_DESTROY_QP:
280 	case MLX5_CMD_OP_DESTROY_PSV:
281 	case MLX5_CMD_OP_DESTROY_SRQ:
282 	case MLX5_CMD_OP_DESTROY_XRC_SRQ:
283 	case MLX5_CMD_OP_DESTROY_XRQ:
284 	case MLX5_CMD_OP_DESTROY_DCT:
285 	case MLX5_CMD_OP_DEALLOC_Q_COUNTER:
286 	case MLX5_CMD_OP_DESTROY_SCHEDULING_ELEMENT:
287 	case MLX5_CMD_OP_DESTROY_QOS_PARA_VPORT:
288 	case MLX5_CMD_OP_DEALLOC_PD:
289 	case MLX5_CMD_OP_DEALLOC_UAR:
290 	case MLX5_CMD_OP_DETACH_FROM_MCG:
291 	case MLX5_CMD_OP_DEALLOC_XRCD:
292 	case MLX5_CMD_OP_DEALLOC_TRANSPORT_DOMAIN:
293 	case MLX5_CMD_OP_DELETE_VXLAN_UDP_DPORT:
294 	case MLX5_CMD_OP_DELETE_L2_TABLE_ENTRY:
295 	case MLX5_CMD_OP_DESTROY_LAG:
296 	case MLX5_CMD_OP_DESTROY_VPORT_LAG:
297 	case MLX5_CMD_OP_DESTROY_TIR:
298 	case MLX5_CMD_OP_DESTROY_SQ:
299 	case MLX5_CMD_OP_DESTROY_RQ:
300 	case MLX5_CMD_OP_DESTROY_RMP:
301 	case MLX5_CMD_OP_DESTROY_TIS:
302 	case MLX5_CMD_OP_DESTROY_RQT:
303 	case MLX5_CMD_OP_DESTROY_FLOW_TABLE:
304 	case MLX5_CMD_OP_DESTROY_FLOW_GROUP:
305 	case MLX5_CMD_OP_DELETE_FLOW_TABLE_ENTRY:
306 	case MLX5_CMD_OP_DEALLOC_FLOW_COUNTER:
307 	case MLX5_CMD_OP_2ERR_QP:
308 	case MLX5_CMD_OP_2RST_QP:
309 	case MLX5_CMD_OP_MODIFY_NIC_VPORT_CONTEXT:
310 	case MLX5_CMD_OP_MODIFY_FLOW_TABLE:
311 	case MLX5_CMD_OP_SET_FLOW_TABLE_ENTRY:
312 	case MLX5_CMD_OP_SET_FLOW_TABLE_ROOT:
313 	case MLX5_CMD_OP_DEALLOC_PACKET_REFORMAT_CONTEXT:
314 	case MLX5_CMD_OP_DEALLOC_MODIFY_HEADER_CONTEXT:
315 	case MLX5_CMD_OP_FPGA_DESTROY_QP:
316 	case MLX5_CMD_OP_DESTROY_GENERAL_OBJECT:
317 	case MLX5_CMD_OP_DEALLOC_MEMIC:
318 	case MLX5_CMD_OP_PAGE_FAULT_RESUME:
319 	case MLX5_CMD_OP_QUERY_ESW_FUNCTIONS:
320 		return MLX5_CMD_STAT_OK;
321 
322 	case MLX5_CMD_OP_QUERY_HCA_CAP:
323 	case MLX5_CMD_OP_QUERY_ADAPTER:
324 	case MLX5_CMD_OP_INIT_HCA:
325 	case MLX5_CMD_OP_ENABLE_HCA:
326 	case MLX5_CMD_OP_QUERY_PAGES:
327 	case MLX5_CMD_OP_SET_HCA_CAP:
328 	case MLX5_CMD_OP_QUERY_ISSI:
329 	case MLX5_CMD_OP_SET_ISSI:
330 	case MLX5_CMD_OP_CREATE_MKEY:
331 	case MLX5_CMD_OP_QUERY_MKEY:
332 	case MLX5_CMD_OP_QUERY_SPECIAL_CONTEXTS:
333 	case MLX5_CMD_OP_CREATE_EQ:
334 	case MLX5_CMD_OP_QUERY_EQ:
335 	case MLX5_CMD_OP_GEN_EQE:
336 	case MLX5_CMD_OP_CREATE_CQ:
337 	case MLX5_CMD_OP_QUERY_CQ:
338 	case MLX5_CMD_OP_MODIFY_CQ:
339 	case MLX5_CMD_OP_CREATE_QP:
340 	case MLX5_CMD_OP_RST2INIT_QP:
341 	case MLX5_CMD_OP_INIT2RTR_QP:
342 	case MLX5_CMD_OP_RTR2RTS_QP:
343 	case MLX5_CMD_OP_RTS2RTS_QP:
344 	case MLX5_CMD_OP_SQERR2RTS_QP:
345 	case MLX5_CMD_OP_QUERY_QP:
346 	case MLX5_CMD_OP_SQD_RTS_QP:
347 	case MLX5_CMD_OP_INIT2INIT_QP:
348 	case MLX5_CMD_OP_CREATE_PSV:
349 	case MLX5_CMD_OP_CREATE_SRQ:
350 	case MLX5_CMD_OP_QUERY_SRQ:
351 	case MLX5_CMD_OP_ARM_RQ:
352 	case MLX5_CMD_OP_CREATE_XRC_SRQ:
353 	case MLX5_CMD_OP_QUERY_XRC_SRQ:
354 	case MLX5_CMD_OP_ARM_XRC_SRQ:
355 	case MLX5_CMD_OP_CREATE_XRQ:
356 	case MLX5_CMD_OP_QUERY_XRQ:
357 	case MLX5_CMD_OP_ARM_XRQ:
358 	case MLX5_CMD_OP_CREATE_DCT:
359 	case MLX5_CMD_OP_DRAIN_DCT:
360 	case MLX5_CMD_OP_QUERY_DCT:
361 	case MLX5_CMD_OP_ARM_DCT_FOR_KEY_VIOLATION:
362 	case MLX5_CMD_OP_QUERY_VPORT_STATE:
363 	case MLX5_CMD_OP_MODIFY_VPORT_STATE:
364 	case MLX5_CMD_OP_QUERY_ESW_VPORT_CONTEXT:
365 	case MLX5_CMD_OP_MODIFY_ESW_VPORT_CONTEXT:
366 	case MLX5_CMD_OP_QUERY_NIC_VPORT_CONTEXT:
367 	case MLX5_CMD_OP_QUERY_ROCE_ADDRESS:
368 	case MLX5_CMD_OP_SET_ROCE_ADDRESS:
369 	case MLX5_CMD_OP_QUERY_HCA_VPORT_CONTEXT:
370 	case MLX5_CMD_OP_MODIFY_HCA_VPORT_CONTEXT:
371 	case MLX5_CMD_OP_QUERY_HCA_VPORT_GID:
372 	case MLX5_CMD_OP_QUERY_HCA_VPORT_PKEY:
373 	case MLX5_CMD_OP_QUERY_VNIC_ENV:
374 	case MLX5_CMD_OP_QUERY_VPORT_COUNTER:
375 	case MLX5_CMD_OP_ALLOC_Q_COUNTER:
376 	case MLX5_CMD_OP_QUERY_Q_COUNTER:
377 	case MLX5_CMD_OP_SET_MONITOR_COUNTER:
378 	case MLX5_CMD_OP_ARM_MONITOR_COUNTER:
379 	case MLX5_CMD_OP_SET_PP_RATE_LIMIT:
380 	case MLX5_CMD_OP_QUERY_RATE_LIMIT:
381 	case MLX5_CMD_OP_CREATE_SCHEDULING_ELEMENT:
382 	case MLX5_CMD_OP_QUERY_SCHEDULING_ELEMENT:
383 	case MLX5_CMD_OP_MODIFY_SCHEDULING_ELEMENT:
384 	case MLX5_CMD_OP_CREATE_QOS_PARA_VPORT:
385 	case MLX5_CMD_OP_ALLOC_PD:
386 	case MLX5_CMD_OP_ALLOC_UAR:
387 	case MLX5_CMD_OP_CONFIG_INT_MODERATION:
388 	case MLX5_CMD_OP_ACCESS_REG:
389 	case MLX5_CMD_OP_ATTACH_TO_MCG:
390 	case MLX5_CMD_OP_GET_DROPPED_PACKET_LOG:
391 	case MLX5_CMD_OP_MAD_IFC:
392 	case MLX5_CMD_OP_QUERY_MAD_DEMUX:
393 	case MLX5_CMD_OP_SET_MAD_DEMUX:
394 	case MLX5_CMD_OP_NOP:
395 	case MLX5_CMD_OP_ALLOC_XRCD:
396 	case MLX5_CMD_OP_ALLOC_TRANSPORT_DOMAIN:
397 	case MLX5_CMD_OP_QUERY_CONG_STATUS:
398 	case MLX5_CMD_OP_MODIFY_CONG_STATUS:
399 	case MLX5_CMD_OP_QUERY_CONG_PARAMS:
400 	case MLX5_CMD_OP_MODIFY_CONG_PARAMS:
401 	case MLX5_CMD_OP_QUERY_CONG_STATISTICS:
402 	case MLX5_CMD_OP_ADD_VXLAN_UDP_DPORT:
403 	case MLX5_CMD_OP_SET_L2_TABLE_ENTRY:
404 	case MLX5_CMD_OP_QUERY_L2_TABLE_ENTRY:
405 	case MLX5_CMD_OP_CREATE_LAG:
406 	case MLX5_CMD_OP_MODIFY_LAG:
407 	case MLX5_CMD_OP_QUERY_LAG:
408 	case MLX5_CMD_OP_CREATE_VPORT_LAG:
409 	case MLX5_CMD_OP_CREATE_TIR:
410 	case MLX5_CMD_OP_MODIFY_TIR:
411 	case MLX5_CMD_OP_QUERY_TIR:
412 	case MLX5_CMD_OP_CREATE_SQ:
413 	case MLX5_CMD_OP_MODIFY_SQ:
414 	case MLX5_CMD_OP_QUERY_SQ:
415 	case MLX5_CMD_OP_CREATE_RQ:
416 	case MLX5_CMD_OP_MODIFY_RQ:
417 	case MLX5_CMD_OP_QUERY_RQ:
418 	case MLX5_CMD_OP_CREATE_RMP:
419 	case MLX5_CMD_OP_MODIFY_RMP:
420 	case MLX5_CMD_OP_QUERY_RMP:
421 	case MLX5_CMD_OP_CREATE_TIS:
422 	case MLX5_CMD_OP_MODIFY_TIS:
423 	case MLX5_CMD_OP_QUERY_TIS:
424 	case MLX5_CMD_OP_CREATE_RQT:
425 	case MLX5_CMD_OP_MODIFY_RQT:
426 	case MLX5_CMD_OP_QUERY_RQT:
427 
428 	case MLX5_CMD_OP_CREATE_FLOW_TABLE:
429 	case MLX5_CMD_OP_QUERY_FLOW_TABLE:
430 	case MLX5_CMD_OP_CREATE_FLOW_GROUP:
431 	case MLX5_CMD_OP_QUERY_FLOW_GROUP:
432 	case MLX5_CMD_OP_QUERY_FLOW_TABLE_ENTRY:
433 	case MLX5_CMD_OP_ALLOC_FLOW_COUNTER:
434 	case MLX5_CMD_OP_QUERY_FLOW_COUNTER:
435 	case MLX5_CMD_OP_ALLOC_PACKET_REFORMAT_CONTEXT:
436 	case MLX5_CMD_OP_ALLOC_MODIFY_HEADER_CONTEXT:
437 	case MLX5_CMD_OP_FPGA_CREATE_QP:
438 	case MLX5_CMD_OP_FPGA_MODIFY_QP:
439 	case MLX5_CMD_OP_FPGA_QUERY_QP:
440 	case MLX5_CMD_OP_FPGA_QUERY_QP_COUNTERS:
441 	case MLX5_CMD_OP_CREATE_GENERAL_OBJECT:
442 	case MLX5_CMD_OP_MODIFY_GENERAL_OBJECT:
443 	case MLX5_CMD_OP_QUERY_GENERAL_OBJECT:
444 	case MLX5_CMD_OP_CREATE_UCTX:
445 	case MLX5_CMD_OP_DESTROY_UCTX:
446 	case MLX5_CMD_OP_CREATE_UMEM:
447 	case MLX5_CMD_OP_DESTROY_UMEM:
448 	case MLX5_CMD_OP_ALLOC_MEMIC:
449 	case MLX5_CMD_OP_MODIFY_XRQ:
450 	case MLX5_CMD_OP_RELEASE_XRQ_ERROR:
451 		*status = MLX5_DRIVER_STATUS_ABORTED;
452 		*synd = MLX5_DRIVER_SYND;
453 		return -EIO;
454 	default:
455 		mlx5_core_err(dev, "Unknown FW command (%d)\n", op);
456 		return -EINVAL;
457 	}
458 }
459 
460 const char *mlx5_command_str(int command)
461 {
462 #define MLX5_COMMAND_STR_CASE(__cmd) case MLX5_CMD_OP_ ## __cmd: return #__cmd
463 
464 	switch (command) {
465 	MLX5_COMMAND_STR_CASE(QUERY_HCA_CAP);
466 	MLX5_COMMAND_STR_CASE(QUERY_ADAPTER);
467 	MLX5_COMMAND_STR_CASE(INIT_HCA);
468 	MLX5_COMMAND_STR_CASE(TEARDOWN_HCA);
469 	MLX5_COMMAND_STR_CASE(ENABLE_HCA);
470 	MLX5_COMMAND_STR_CASE(DISABLE_HCA);
471 	MLX5_COMMAND_STR_CASE(QUERY_PAGES);
472 	MLX5_COMMAND_STR_CASE(MANAGE_PAGES);
473 	MLX5_COMMAND_STR_CASE(SET_HCA_CAP);
474 	MLX5_COMMAND_STR_CASE(QUERY_ISSI);
475 	MLX5_COMMAND_STR_CASE(SET_ISSI);
476 	MLX5_COMMAND_STR_CASE(SET_DRIVER_VERSION);
477 	MLX5_COMMAND_STR_CASE(CREATE_MKEY);
478 	MLX5_COMMAND_STR_CASE(QUERY_MKEY);
479 	MLX5_COMMAND_STR_CASE(DESTROY_MKEY);
480 	MLX5_COMMAND_STR_CASE(QUERY_SPECIAL_CONTEXTS);
481 	MLX5_COMMAND_STR_CASE(PAGE_FAULT_RESUME);
482 	MLX5_COMMAND_STR_CASE(CREATE_EQ);
483 	MLX5_COMMAND_STR_CASE(DESTROY_EQ);
484 	MLX5_COMMAND_STR_CASE(QUERY_EQ);
485 	MLX5_COMMAND_STR_CASE(GEN_EQE);
486 	MLX5_COMMAND_STR_CASE(CREATE_CQ);
487 	MLX5_COMMAND_STR_CASE(DESTROY_CQ);
488 	MLX5_COMMAND_STR_CASE(QUERY_CQ);
489 	MLX5_COMMAND_STR_CASE(MODIFY_CQ);
490 	MLX5_COMMAND_STR_CASE(CREATE_QP);
491 	MLX5_COMMAND_STR_CASE(DESTROY_QP);
492 	MLX5_COMMAND_STR_CASE(RST2INIT_QP);
493 	MLX5_COMMAND_STR_CASE(INIT2RTR_QP);
494 	MLX5_COMMAND_STR_CASE(RTR2RTS_QP);
495 	MLX5_COMMAND_STR_CASE(RTS2RTS_QP);
496 	MLX5_COMMAND_STR_CASE(SQERR2RTS_QP);
497 	MLX5_COMMAND_STR_CASE(2ERR_QP);
498 	MLX5_COMMAND_STR_CASE(2RST_QP);
499 	MLX5_COMMAND_STR_CASE(QUERY_QP);
500 	MLX5_COMMAND_STR_CASE(SQD_RTS_QP);
501 	MLX5_COMMAND_STR_CASE(INIT2INIT_QP);
502 	MLX5_COMMAND_STR_CASE(CREATE_PSV);
503 	MLX5_COMMAND_STR_CASE(DESTROY_PSV);
504 	MLX5_COMMAND_STR_CASE(CREATE_SRQ);
505 	MLX5_COMMAND_STR_CASE(DESTROY_SRQ);
506 	MLX5_COMMAND_STR_CASE(QUERY_SRQ);
507 	MLX5_COMMAND_STR_CASE(ARM_RQ);
508 	MLX5_COMMAND_STR_CASE(CREATE_XRC_SRQ);
509 	MLX5_COMMAND_STR_CASE(DESTROY_XRC_SRQ);
510 	MLX5_COMMAND_STR_CASE(QUERY_XRC_SRQ);
511 	MLX5_COMMAND_STR_CASE(ARM_XRC_SRQ);
512 	MLX5_COMMAND_STR_CASE(CREATE_DCT);
513 	MLX5_COMMAND_STR_CASE(DESTROY_DCT);
514 	MLX5_COMMAND_STR_CASE(DRAIN_DCT);
515 	MLX5_COMMAND_STR_CASE(QUERY_DCT);
516 	MLX5_COMMAND_STR_CASE(ARM_DCT_FOR_KEY_VIOLATION);
517 	MLX5_COMMAND_STR_CASE(QUERY_VPORT_STATE);
518 	MLX5_COMMAND_STR_CASE(MODIFY_VPORT_STATE);
519 	MLX5_COMMAND_STR_CASE(QUERY_ESW_VPORT_CONTEXT);
520 	MLX5_COMMAND_STR_CASE(MODIFY_ESW_VPORT_CONTEXT);
521 	MLX5_COMMAND_STR_CASE(QUERY_NIC_VPORT_CONTEXT);
522 	MLX5_COMMAND_STR_CASE(MODIFY_NIC_VPORT_CONTEXT);
523 	MLX5_COMMAND_STR_CASE(QUERY_ROCE_ADDRESS);
524 	MLX5_COMMAND_STR_CASE(SET_ROCE_ADDRESS);
525 	MLX5_COMMAND_STR_CASE(QUERY_HCA_VPORT_CONTEXT);
526 	MLX5_COMMAND_STR_CASE(MODIFY_HCA_VPORT_CONTEXT);
527 	MLX5_COMMAND_STR_CASE(QUERY_HCA_VPORT_GID);
528 	MLX5_COMMAND_STR_CASE(QUERY_HCA_VPORT_PKEY);
529 	MLX5_COMMAND_STR_CASE(QUERY_VNIC_ENV);
530 	MLX5_COMMAND_STR_CASE(QUERY_VPORT_COUNTER);
531 	MLX5_COMMAND_STR_CASE(ALLOC_Q_COUNTER);
532 	MLX5_COMMAND_STR_CASE(DEALLOC_Q_COUNTER);
533 	MLX5_COMMAND_STR_CASE(QUERY_Q_COUNTER);
534 	MLX5_COMMAND_STR_CASE(SET_MONITOR_COUNTER);
535 	MLX5_COMMAND_STR_CASE(ARM_MONITOR_COUNTER);
536 	MLX5_COMMAND_STR_CASE(SET_PP_RATE_LIMIT);
537 	MLX5_COMMAND_STR_CASE(QUERY_RATE_LIMIT);
538 	MLX5_COMMAND_STR_CASE(CREATE_SCHEDULING_ELEMENT);
539 	MLX5_COMMAND_STR_CASE(DESTROY_SCHEDULING_ELEMENT);
540 	MLX5_COMMAND_STR_CASE(QUERY_SCHEDULING_ELEMENT);
541 	MLX5_COMMAND_STR_CASE(MODIFY_SCHEDULING_ELEMENT);
542 	MLX5_COMMAND_STR_CASE(CREATE_QOS_PARA_VPORT);
543 	MLX5_COMMAND_STR_CASE(DESTROY_QOS_PARA_VPORT);
544 	MLX5_COMMAND_STR_CASE(ALLOC_PD);
545 	MLX5_COMMAND_STR_CASE(DEALLOC_PD);
546 	MLX5_COMMAND_STR_CASE(ALLOC_UAR);
547 	MLX5_COMMAND_STR_CASE(DEALLOC_UAR);
548 	MLX5_COMMAND_STR_CASE(CONFIG_INT_MODERATION);
549 	MLX5_COMMAND_STR_CASE(ACCESS_REG);
550 	MLX5_COMMAND_STR_CASE(ATTACH_TO_MCG);
551 	MLX5_COMMAND_STR_CASE(DETACH_FROM_MCG);
552 	MLX5_COMMAND_STR_CASE(GET_DROPPED_PACKET_LOG);
553 	MLX5_COMMAND_STR_CASE(MAD_IFC);
554 	MLX5_COMMAND_STR_CASE(QUERY_MAD_DEMUX);
555 	MLX5_COMMAND_STR_CASE(SET_MAD_DEMUX);
556 	MLX5_COMMAND_STR_CASE(NOP);
557 	MLX5_COMMAND_STR_CASE(ALLOC_XRCD);
558 	MLX5_COMMAND_STR_CASE(DEALLOC_XRCD);
559 	MLX5_COMMAND_STR_CASE(ALLOC_TRANSPORT_DOMAIN);
560 	MLX5_COMMAND_STR_CASE(DEALLOC_TRANSPORT_DOMAIN);
561 	MLX5_COMMAND_STR_CASE(QUERY_CONG_STATUS);
562 	MLX5_COMMAND_STR_CASE(MODIFY_CONG_STATUS);
563 	MLX5_COMMAND_STR_CASE(QUERY_CONG_PARAMS);
564 	MLX5_COMMAND_STR_CASE(MODIFY_CONG_PARAMS);
565 	MLX5_COMMAND_STR_CASE(QUERY_CONG_STATISTICS);
566 	MLX5_COMMAND_STR_CASE(ADD_VXLAN_UDP_DPORT);
567 	MLX5_COMMAND_STR_CASE(DELETE_VXLAN_UDP_DPORT);
568 	MLX5_COMMAND_STR_CASE(SET_L2_TABLE_ENTRY);
569 	MLX5_COMMAND_STR_CASE(QUERY_L2_TABLE_ENTRY);
570 	MLX5_COMMAND_STR_CASE(DELETE_L2_TABLE_ENTRY);
571 	MLX5_COMMAND_STR_CASE(SET_WOL_ROL);
572 	MLX5_COMMAND_STR_CASE(QUERY_WOL_ROL);
573 	MLX5_COMMAND_STR_CASE(CREATE_LAG);
574 	MLX5_COMMAND_STR_CASE(MODIFY_LAG);
575 	MLX5_COMMAND_STR_CASE(QUERY_LAG);
576 	MLX5_COMMAND_STR_CASE(DESTROY_LAG);
577 	MLX5_COMMAND_STR_CASE(CREATE_VPORT_LAG);
578 	MLX5_COMMAND_STR_CASE(DESTROY_VPORT_LAG);
579 	MLX5_COMMAND_STR_CASE(CREATE_TIR);
580 	MLX5_COMMAND_STR_CASE(MODIFY_TIR);
581 	MLX5_COMMAND_STR_CASE(DESTROY_TIR);
582 	MLX5_COMMAND_STR_CASE(QUERY_TIR);
583 	MLX5_COMMAND_STR_CASE(CREATE_SQ);
584 	MLX5_COMMAND_STR_CASE(MODIFY_SQ);
585 	MLX5_COMMAND_STR_CASE(DESTROY_SQ);
586 	MLX5_COMMAND_STR_CASE(QUERY_SQ);
587 	MLX5_COMMAND_STR_CASE(CREATE_RQ);
588 	MLX5_COMMAND_STR_CASE(MODIFY_RQ);
589 	MLX5_COMMAND_STR_CASE(DESTROY_RQ);
590 	MLX5_COMMAND_STR_CASE(QUERY_RQ);
591 	MLX5_COMMAND_STR_CASE(CREATE_RMP);
592 	MLX5_COMMAND_STR_CASE(MODIFY_RMP);
593 	MLX5_COMMAND_STR_CASE(DESTROY_RMP);
594 	MLX5_COMMAND_STR_CASE(QUERY_RMP);
595 	MLX5_COMMAND_STR_CASE(CREATE_TIS);
596 	MLX5_COMMAND_STR_CASE(MODIFY_TIS);
597 	MLX5_COMMAND_STR_CASE(DESTROY_TIS);
598 	MLX5_COMMAND_STR_CASE(QUERY_TIS);
599 	MLX5_COMMAND_STR_CASE(CREATE_RQT);
600 	MLX5_COMMAND_STR_CASE(MODIFY_RQT);
601 	MLX5_COMMAND_STR_CASE(DESTROY_RQT);
602 	MLX5_COMMAND_STR_CASE(QUERY_RQT);
603 	MLX5_COMMAND_STR_CASE(SET_FLOW_TABLE_ROOT);
604 	MLX5_COMMAND_STR_CASE(CREATE_FLOW_TABLE);
605 	MLX5_COMMAND_STR_CASE(DESTROY_FLOW_TABLE);
606 	MLX5_COMMAND_STR_CASE(QUERY_FLOW_TABLE);
607 	MLX5_COMMAND_STR_CASE(CREATE_FLOW_GROUP);
608 	MLX5_COMMAND_STR_CASE(DESTROY_FLOW_GROUP);
609 	MLX5_COMMAND_STR_CASE(QUERY_FLOW_GROUP);
610 	MLX5_COMMAND_STR_CASE(SET_FLOW_TABLE_ENTRY);
611 	MLX5_COMMAND_STR_CASE(QUERY_FLOW_TABLE_ENTRY);
612 	MLX5_COMMAND_STR_CASE(DELETE_FLOW_TABLE_ENTRY);
613 	MLX5_COMMAND_STR_CASE(ALLOC_FLOW_COUNTER);
614 	MLX5_COMMAND_STR_CASE(DEALLOC_FLOW_COUNTER);
615 	MLX5_COMMAND_STR_CASE(QUERY_FLOW_COUNTER);
616 	MLX5_COMMAND_STR_CASE(MODIFY_FLOW_TABLE);
617 	MLX5_COMMAND_STR_CASE(ALLOC_PACKET_REFORMAT_CONTEXT);
618 	MLX5_COMMAND_STR_CASE(DEALLOC_PACKET_REFORMAT_CONTEXT);
619 	MLX5_COMMAND_STR_CASE(ALLOC_MODIFY_HEADER_CONTEXT);
620 	MLX5_COMMAND_STR_CASE(DEALLOC_MODIFY_HEADER_CONTEXT);
621 	MLX5_COMMAND_STR_CASE(FPGA_CREATE_QP);
622 	MLX5_COMMAND_STR_CASE(FPGA_MODIFY_QP);
623 	MLX5_COMMAND_STR_CASE(FPGA_QUERY_QP);
624 	MLX5_COMMAND_STR_CASE(FPGA_QUERY_QP_COUNTERS);
625 	MLX5_COMMAND_STR_CASE(FPGA_DESTROY_QP);
626 	MLX5_COMMAND_STR_CASE(CREATE_XRQ);
627 	MLX5_COMMAND_STR_CASE(DESTROY_XRQ);
628 	MLX5_COMMAND_STR_CASE(QUERY_XRQ);
629 	MLX5_COMMAND_STR_CASE(ARM_XRQ);
630 	MLX5_COMMAND_STR_CASE(CREATE_GENERAL_OBJECT);
631 	MLX5_COMMAND_STR_CASE(DESTROY_GENERAL_OBJECT);
632 	MLX5_COMMAND_STR_CASE(MODIFY_GENERAL_OBJECT);
633 	MLX5_COMMAND_STR_CASE(QUERY_GENERAL_OBJECT);
634 	MLX5_COMMAND_STR_CASE(QUERY_MODIFY_HEADER_CONTEXT);
635 	MLX5_COMMAND_STR_CASE(ALLOC_MEMIC);
636 	MLX5_COMMAND_STR_CASE(DEALLOC_MEMIC);
637 	MLX5_COMMAND_STR_CASE(QUERY_ESW_FUNCTIONS);
638 	MLX5_COMMAND_STR_CASE(CREATE_UCTX);
639 	MLX5_COMMAND_STR_CASE(DESTROY_UCTX);
640 	MLX5_COMMAND_STR_CASE(CREATE_UMEM);
641 	MLX5_COMMAND_STR_CASE(DESTROY_UMEM);
642 	MLX5_COMMAND_STR_CASE(RELEASE_XRQ_ERROR);
643 	MLX5_COMMAND_STR_CASE(MODIFY_XRQ);
644 	default: return "unknown command opcode";
645 	}
646 }
647 
648 static const char *cmd_status_str(u8 status)
649 {
650 	switch (status) {
651 	case MLX5_CMD_STAT_OK:
652 		return "OK";
653 	case MLX5_CMD_STAT_INT_ERR:
654 		return "internal error";
655 	case MLX5_CMD_STAT_BAD_OP_ERR:
656 		return "bad operation";
657 	case MLX5_CMD_STAT_BAD_PARAM_ERR:
658 		return "bad parameter";
659 	case MLX5_CMD_STAT_BAD_SYS_STATE_ERR:
660 		return "bad system state";
661 	case MLX5_CMD_STAT_BAD_RES_ERR:
662 		return "bad resource";
663 	case MLX5_CMD_STAT_RES_BUSY:
664 		return "resource busy";
665 	case MLX5_CMD_STAT_LIM_ERR:
666 		return "limits exceeded";
667 	case MLX5_CMD_STAT_BAD_RES_STATE_ERR:
668 		return "bad resource state";
669 	case MLX5_CMD_STAT_IX_ERR:
670 		return "bad index";
671 	case MLX5_CMD_STAT_NO_RES_ERR:
672 		return "no resources";
673 	case MLX5_CMD_STAT_BAD_INP_LEN_ERR:
674 		return "bad input length";
675 	case MLX5_CMD_STAT_BAD_OUTP_LEN_ERR:
676 		return "bad output length";
677 	case MLX5_CMD_STAT_BAD_QP_STATE_ERR:
678 		return "bad QP state";
679 	case MLX5_CMD_STAT_BAD_PKT_ERR:
680 		return "bad packet (discarded)";
681 	case MLX5_CMD_STAT_BAD_SIZE_OUTS_CQES_ERR:
682 		return "bad size too many outstanding CQEs";
683 	default:
684 		return "unknown status";
685 	}
686 }
687 
688 static int cmd_status_to_err(u8 status)
689 {
690 	switch (status) {
691 	case MLX5_CMD_STAT_OK:				return 0;
692 	case MLX5_CMD_STAT_INT_ERR:			return -EIO;
693 	case MLX5_CMD_STAT_BAD_OP_ERR:			return -EINVAL;
694 	case MLX5_CMD_STAT_BAD_PARAM_ERR:		return -EINVAL;
695 	case MLX5_CMD_STAT_BAD_SYS_STATE_ERR:		return -EIO;
696 	case MLX5_CMD_STAT_BAD_RES_ERR:			return -EINVAL;
697 	case MLX5_CMD_STAT_RES_BUSY:			return -EBUSY;
698 	case MLX5_CMD_STAT_LIM_ERR:			return -ENOMEM;
699 	case MLX5_CMD_STAT_BAD_RES_STATE_ERR:		return -EINVAL;
700 	case MLX5_CMD_STAT_IX_ERR:			return -EINVAL;
701 	case MLX5_CMD_STAT_NO_RES_ERR:			return -EAGAIN;
702 	case MLX5_CMD_STAT_BAD_INP_LEN_ERR:		return -EIO;
703 	case MLX5_CMD_STAT_BAD_OUTP_LEN_ERR:		return -EIO;
704 	case MLX5_CMD_STAT_BAD_QP_STATE_ERR:		return -EINVAL;
705 	case MLX5_CMD_STAT_BAD_PKT_ERR:			return -EINVAL;
706 	case MLX5_CMD_STAT_BAD_SIZE_OUTS_CQES_ERR:	return -EINVAL;
707 	default:					return -EIO;
708 	}
709 }
710 
711 struct mlx5_ifc_mbox_out_bits {
712 	u8         status[0x8];
713 	u8         reserved_at_8[0x18];
714 
715 	u8         syndrome[0x20];
716 
717 	u8         reserved_at_40[0x40];
718 };
719 
720 struct mlx5_ifc_mbox_in_bits {
721 	u8         opcode[0x10];
722 	u8         uid[0x10];
723 
724 	u8         reserved_at_20[0x10];
725 	u8         op_mod[0x10];
726 
727 	u8         reserved_at_40[0x40];
728 };
729 
730 void mlx5_cmd_mbox_status(void *out, u8 *status, u32 *syndrome)
731 {
732 	*status = MLX5_GET(mbox_out, out, status);
733 	*syndrome = MLX5_GET(mbox_out, out, syndrome);
734 }
735 
736 static int mlx5_cmd_check(struct mlx5_core_dev *dev, void *in, void *out)
737 {
738 	u32 syndrome;
739 	u8  status;
740 	u16 opcode;
741 	u16 op_mod;
742 	u16 uid;
743 
744 	mlx5_cmd_mbox_status(out, &status, &syndrome);
745 	if (!status)
746 		return 0;
747 
748 	opcode = MLX5_GET(mbox_in, in, opcode);
749 	op_mod = MLX5_GET(mbox_in, in, op_mod);
750 	uid    = MLX5_GET(mbox_in, in, uid);
751 
752 	if (!uid && opcode != MLX5_CMD_OP_DESTROY_MKEY)
753 		mlx5_core_err_rl(dev,
754 			"%s(0x%x) op_mod(0x%x) failed, status %s(0x%x), syndrome (0x%x)\n",
755 			mlx5_command_str(opcode), opcode, op_mod,
756 			cmd_status_str(status), status, syndrome);
757 	else
758 		mlx5_core_dbg(dev,
759 		      "%s(0x%x) op_mod(0x%x) failed, status %s(0x%x), syndrome (0x%x)\n",
760 		      mlx5_command_str(opcode),
761 		      opcode, op_mod,
762 		      cmd_status_str(status),
763 		      status,
764 		      syndrome);
765 
766 	return cmd_status_to_err(status);
767 }
768 
769 static void dump_command(struct mlx5_core_dev *dev,
770 			 struct mlx5_cmd_work_ent *ent, int input)
771 {
772 	struct mlx5_cmd_msg *msg = input ? ent->in : ent->out;
773 	u16 op = MLX5_GET(mbox_in, ent->lay->in, opcode);
774 	struct mlx5_cmd_mailbox *next = msg->next;
775 	int n = mlx5_calc_cmd_blocks(msg);
776 	int data_only;
777 	u32 offset = 0;
778 	int dump_len;
779 	int i;
780 
781 	data_only = !!(mlx5_core_debug_mask & (1 << MLX5_CMD_DATA));
782 
783 	if (data_only)
784 		mlx5_core_dbg_mask(dev, 1 << MLX5_CMD_DATA,
785 				   "dump command data %s(0x%x) %s\n",
786 				   mlx5_command_str(op), op,
787 				   input ? "INPUT" : "OUTPUT");
788 	else
789 		mlx5_core_dbg(dev, "dump command %s(0x%x) %s\n",
790 			      mlx5_command_str(op), op,
791 			      input ? "INPUT" : "OUTPUT");
792 
793 	if (data_only) {
794 		if (input) {
795 			dump_buf(ent->lay->in, sizeof(ent->lay->in), 1, offset);
796 			offset += sizeof(ent->lay->in);
797 		} else {
798 			dump_buf(ent->lay->out, sizeof(ent->lay->out), 1, offset);
799 			offset += sizeof(ent->lay->out);
800 		}
801 	} else {
802 		dump_buf(ent->lay, sizeof(*ent->lay), 0, offset);
803 		offset += sizeof(*ent->lay);
804 	}
805 
806 	for (i = 0; i < n && next; i++)  {
807 		if (data_only) {
808 			dump_len = min_t(int, MLX5_CMD_DATA_BLOCK_SIZE, msg->len - offset);
809 			dump_buf(next->buf, dump_len, 1, offset);
810 			offset += MLX5_CMD_DATA_BLOCK_SIZE;
811 		} else {
812 			mlx5_core_dbg(dev, "command block:\n");
813 			dump_buf(next->buf, sizeof(struct mlx5_cmd_prot_block), 0, offset);
814 			offset += sizeof(struct mlx5_cmd_prot_block);
815 		}
816 		next = next->next;
817 	}
818 
819 	if (data_only)
820 		pr_debug("\n");
821 }
822 
823 static u16 msg_to_opcode(struct mlx5_cmd_msg *in)
824 {
825 	return MLX5_GET(mbox_in, in->first.data, opcode);
826 }
827 
828 static void mlx5_cmd_comp_handler(struct mlx5_core_dev *dev, u64 vec, bool forced);
829 
830 static void cb_timeout_handler(struct work_struct *work)
831 {
832 	struct delayed_work *dwork = container_of(work, struct delayed_work,
833 						  work);
834 	struct mlx5_cmd_work_ent *ent = container_of(dwork,
835 						     struct mlx5_cmd_work_ent,
836 						     cb_timeout_work);
837 	struct mlx5_core_dev *dev = container_of(ent->cmd, struct mlx5_core_dev,
838 						 cmd);
839 
840 	ent->ret = -ETIMEDOUT;
841 	mlx5_core_warn(dev, "%s(0x%x) timeout. Will cause a leak of a command resource\n",
842 		       mlx5_command_str(msg_to_opcode(ent->in)),
843 		       msg_to_opcode(ent->in));
844 	mlx5_cmd_comp_handler(dev, 1UL << ent->idx, true);
845 }
846 
847 static void free_msg(struct mlx5_core_dev *dev, struct mlx5_cmd_msg *msg);
848 static void mlx5_free_cmd_msg(struct mlx5_core_dev *dev,
849 			      struct mlx5_cmd_msg *msg);
850 
851 static bool opcode_allowed(struct mlx5_cmd *cmd, u16 opcode)
852 {
853 	if (cmd->allowed_opcode == CMD_ALLOWED_OPCODE_ALL)
854 		return true;
855 
856 	return cmd->allowed_opcode == opcode;
857 }
858 
859 static void cmd_work_handler(struct work_struct *work)
860 {
861 	struct mlx5_cmd_work_ent *ent = container_of(work, struct mlx5_cmd_work_ent, work);
862 	struct mlx5_cmd *cmd = ent->cmd;
863 	struct mlx5_core_dev *dev = container_of(cmd, struct mlx5_core_dev, cmd);
864 	unsigned long cb_timeout = msecs_to_jiffies(MLX5_CMD_TIMEOUT_MSEC);
865 	struct mlx5_cmd_layout *lay;
866 	struct semaphore *sem;
867 	unsigned long flags;
868 	bool poll_cmd = ent->polling;
869 	int alloc_ret;
870 	int cmd_mode;
871 
872 	complete(&ent->handling);
873 	sem = ent->page_queue ? &cmd->pages_sem : &cmd->sem;
874 	down(sem);
875 	if (!ent->page_queue) {
876 		alloc_ret = alloc_ent(cmd);
877 		if (alloc_ret < 0) {
878 			mlx5_core_err_rl(dev, "failed to allocate command entry\n");
879 			if (ent->callback) {
880 				ent->callback(-EAGAIN, ent->context);
881 				mlx5_free_cmd_msg(dev, ent->out);
882 				free_msg(dev, ent->in);
883 				free_cmd(ent);
884 			} else {
885 				ent->ret = -EAGAIN;
886 				complete(&ent->done);
887 			}
888 			up(sem);
889 			return;
890 		}
891 		ent->idx = alloc_ret;
892 	} else {
893 		ent->idx = cmd->max_reg_cmds;
894 		spin_lock_irqsave(&cmd->alloc_lock, flags);
895 		clear_bit(ent->idx, &cmd->bitmask);
896 		spin_unlock_irqrestore(&cmd->alloc_lock, flags);
897 	}
898 
899 	cmd->ent_arr[ent->idx] = ent;
900 	lay = get_inst(cmd, ent->idx);
901 	ent->lay = lay;
902 	memset(lay, 0, sizeof(*lay));
903 	memcpy(lay->in, ent->in->first.data, sizeof(lay->in));
904 	ent->op = be32_to_cpu(lay->in[0]) >> 16;
905 	if (ent->in->next)
906 		lay->in_ptr = cpu_to_be64(ent->in->next->dma);
907 	lay->inlen = cpu_to_be32(ent->in->len);
908 	if (ent->out->next)
909 		lay->out_ptr = cpu_to_be64(ent->out->next->dma);
910 	lay->outlen = cpu_to_be32(ent->out->len);
911 	lay->type = MLX5_PCI_CMD_XPORT;
912 	lay->token = ent->token;
913 	lay->status_own = CMD_OWNER_HW;
914 	set_signature(ent, !cmd->checksum_disabled);
915 	dump_command(dev, ent, 1);
916 	ent->ts1 = ktime_get_ns();
917 	cmd_mode = cmd->mode;
918 
919 	if (ent->callback)
920 		schedule_delayed_work(&ent->cb_timeout_work, cb_timeout);
921 	set_bit(MLX5_CMD_ENT_STATE_PENDING_COMP, &ent->state);
922 
923 	/* Skip sending command to fw if internal error */
924 	if (pci_channel_offline(dev->pdev) ||
925 	    dev->state == MLX5_DEVICE_STATE_INTERNAL_ERROR ||
926 	    cmd->state != MLX5_CMDIF_STATE_UP ||
927 	    !opcode_allowed(&dev->cmd, ent->op)) {
928 		u8 status = 0;
929 		u32 drv_synd;
930 
931 		ent->ret = mlx5_internal_err_ret_value(dev, msg_to_opcode(ent->in), &drv_synd, &status);
932 		MLX5_SET(mbox_out, ent->out, status, status);
933 		MLX5_SET(mbox_out, ent->out, syndrome, drv_synd);
934 
935 		mlx5_cmd_comp_handler(dev, 1UL << ent->idx, true);
936 		/* no doorbell, no need to keep the entry */
937 		free_ent(cmd, ent->idx);
938 		if (ent->callback)
939 			free_cmd(ent);
940 		return;
941 	}
942 
943 	/* ring doorbell after the descriptor is valid */
944 	mlx5_core_dbg(dev, "writing 0x%x to command doorbell\n", 1 << ent->idx);
945 	wmb();
946 	iowrite32be(1 << ent->idx, &dev->iseg->cmd_dbell);
947 	/* if not in polling don't use ent after this point */
948 	if (cmd_mode == CMD_MODE_POLLING || poll_cmd) {
949 		poll_timeout(ent);
950 		/* make sure we read the descriptor after ownership is SW */
951 		rmb();
952 		mlx5_cmd_comp_handler(dev, 1UL << ent->idx, (ent->ret == -ETIMEDOUT));
953 	}
954 }
955 
956 static const char *deliv_status_to_str(u8 status)
957 {
958 	switch (status) {
959 	case MLX5_CMD_DELIVERY_STAT_OK:
960 		return "no errors";
961 	case MLX5_CMD_DELIVERY_STAT_SIGNAT_ERR:
962 		return "signature error";
963 	case MLX5_CMD_DELIVERY_STAT_TOK_ERR:
964 		return "token error";
965 	case MLX5_CMD_DELIVERY_STAT_BAD_BLK_NUM_ERR:
966 		return "bad block number";
967 	case MLX5_CMD_DELIVERY_STAT_OUT_PTR_ALIGN_ERR:
968 		return "output pointer not aligned to block size";
969 	case MLX5_CMD_DELIVERY_STAT_IN_PTR_ALIGN_ERR:
970 		return "input pointer not aligned to block size";
971 	case MLX5_CMD_DELIVERY_STAT_FW_ERR:
972 		return "firmware internal error";
973 	case MLX5_CMD_DELIVERY_STAT_IN_LENGTH_ERR:
974 		return "command input length error";
975 	case MLX5_CMD_DELIVERY_STAT_OUT_LENGTH_ERR:
976 		return "command output length error";
977 	case MLX5_CMD_DELIVERY_STAT_RES_FLD_NOT_CLR_ERR:
978 		return "reserved fields not cleared";
979 	case MLX5_CMD_DELIVERY_STAT_CMD_DESCR_ERR:
980 		return "bad command descriptor type";
981 	default:
982 		return "unknown status code";
983 	}
984 }
985 
986 static int wait_func(struct mlx5_core_dev *dev, struct mlx5_cmd_work_ent *ent)
987 {
988 	unsigned long timeout = msecs_to_jiffies(MLX5_CMD_TIMEOUT_MSEC);
989 	struct mlx5_cmd *cmd = &dev->cmd;
990 	int err;
991 
992 	if (!wait_for_completion_timeout(&ent->handling, timeout) &&
993 	    cancel_work_sync(&ent->work)) {
994 		ent->ret = -ECANCELED;
995 		goto out_err;
996 	}
997 	if (cmd->mode == CMD_MODE_POLLING || ent->polling) {
998 		wait_for_completion(&ent->done);
999 	} else if (!wait_for_completion_timeout(&ent->done, timeout)) {
1000 		ent->ret = -ETIMEDOUT;
1001 		mlx5_cmd_comp_handler(dev, 1UL << ent->idx, true);
1002 	}
1003 
1004 out_err:
1005 	err = ent->ret;
1006 
1007 	if (err == -ETIMEDOUT) {
1008 		mlx5_core_warn(dev, "%s(0x%x) timeout. Will cause a leak of a command resource\n",
1009 			       mlx5_command_str(msg_to_opcode(ent->in)),
1010 			       msg_to_opcode(ent->in));
1011 	} else if (err == -ECANCELED) {
1012 		mlx5_core_warn(dev, "%s(0x%x) canceled on out of queue timeout.\n",
1013 			       mlx5_command_str(msg_to_opcode(ent->in)),
1014 			       msg_to_opcode(ent->in));
1015 	}
1016 	mlx5_core_dbg(dev, "err %d, delivery status %s(%d)\n",
1017 		      err, deliv_status_to_str(ent->status), ent->status);
1018 
1019 	return err;
1020 }
1021 
1022 /*  Notes:
1023  *    1. Callback functions may not sleep
1024  *    2. page queue commands do not support asynchrous completion
1025  */
1026 static int mlx5_cmd_invoke(struct mlx5_core_dev *dev, struct mlx5_cmd_msg *in,
1027 			   struct mlx5_cmd_msg *out, void *uout, int uout_size,
1028 			   mlx5_cmd_cbk_t callback,
1029 			   void *context, int page_queue, u8 *status,
1030 			   u8 token, bool force_polling)
1031 {
1032 	struct mlx5_cmd *cmd = &dev->cmd;
1033 	struct mlx5_cmd_work_ent *ent;
1034 	struct mlx5_cmd_stats *stats;
1035 	int err = 0;
1036 	s64 ds;
1037 	u16 op;
1038 
1039 	if (callback && page_queue)
1040 		return -EINVAL;
1041 
1042 	ent = alloc_cmd(cmd, in, out, uout, uout_size, callback, context,
1043 			page_queue);
1044 	if (IS_ERR(ent))
1045 		return PTR_ERR(ent);
1046 
1047 	ent->token = token;
1048 	ent->polling = force_polling;
1049 
1050 	init_completion(&ent->handling);
1051 	if (!callback)
1052 		init_completion(&ent->done);
1053 
1054 	INIT_DELAYED_WORK(&ent->cb_timeout_work, cb_timeout_handler);
1055 	INIT_WORK(&ent->work, cmd_work_handler);
1056 	if (page_queue) {
1057 		cmd_work_handler(&ent->work);
1058 	} else if (!queue_work(cmd->wq, &ent->work)) {
1059 		mlx5_core_warn(dev, "failed to queue work\n");
1060 		err = -ENOMEM;
1061 		goto out_free;
1062 	}
1063 
1064 	if (callback)
1065 		goto out;
1066 
1067 	err = wait_func(dev, ent);
1068 	if (err == -ETIMEDOUT)
1069 		goto out;
1070 	if (err == -ECANCELED)
1071 		goto out_free;
1072 
1073 	ds = ent->ts2 - ent->ts1;
1074 	op = MLX5_GET(mbox_in, in->first.data, opcode);
1075 	if (op < MLX5_CMD_OP_MAX) {
1076 		stats = &cmd->stats[op];
1077 		spin_lock_irq(&stats->lock);
1078 		stats->sum += ds;
1079 		++stats->n;
1080 		spin_unlock_irq(&stats->lock);
1081 	}
1082 	mlx5_core_dbg_mask(dev, 1 << MLX5_CMD_TIME,
1083 			   "fw exec time for %s is %lld nsec\n",
1084 			   mlx5_command_str(op), ds);
1085 	*status = ent->status;
1086 
1087 out_free:
1088 	free_cmd(ent);
1089 out:
1090 	return err;
1091 }
1092 
1093 static ssize_t dbg_write(struct file *filp, const char __user *buf,
1094 			 size_t count, loff_t *pos)
1095 {
1096 	struct mlx5_core_dev *dev = filp->private_data;
1097 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1098 	char lbuf[3];
1099 	int err;
1100 
1101 	if (!dbg->in_msg || !dbg->out_msg)
1102 		return -ENOMEM;
1103 
1104 	if (count < sizeof(lbuf) - 1)
1105 		return -EINVAL;
1106 
1107 	if (copy_from_user(lbuf, buf, sizeof(lbuf) - 1))
1108 		return -EFAULT;
1109 
1110 	lbuf[sizeof(lbuf) - 1] = 0;
1111 
1112 	if (strcmp(lbuf, "go"))
1113 		return -EINVAL;
1114 
1115 	err = mlx5_cmd_exec(dev, dbg->in_msg, dbg->inlen, dbg->out_msg, dbg->outlen);
1116 
1117 	return err ? err : count;
1118 }
1119 
1120 static const struct file_operations fops = {
1121 	.owner	= THIS_MODULE,
1122 	.open	= simple_open,
1123 	.write	= dbg_write,
1124 };
1125 
1126 static int mlx5_copy_to_msg(struct mlx5_cmd_msg *to, void *from, int size,
1127 			    u8 token)
1128 {
1129 	struct mlx5_cmd_prot_block *block;
1130 	struct mlx5_cmd_mailbox *next;
1131 	int copy;
1132 
1133 	if (!to || !from)
1134 		return -ENOMEM;
1135 
1136 	copy = min_t(int, size, sizeof(to->first.data));
1137 	memcpy(to->first.data, from, copy);
1138 	size -= copy;
1139 	from += copy;
1140 
1141 	next = to->next;
1142 	while (size) {
1143 		if (!next) {
1144 			/* this is a BUG */
1145 			return -ENOMEM;
1146 		}
1147 
1148 		copy = min_t(int, size, MLX5_CMD_DATA_BLOCK_SIZE);
1149 		block = next->buf;
1150 		memcpy(block->data, from, copy);
1151 		from += copy;
1152 		size -= copy;
1153 		block->token = token;
1154 		next = next->next;
1155 	}
1156 
1157 	return 0;
1158 }
1159 
1160 static int mlx5_copy_from_msg(void *to, struct mlx5_cmd_msg *from, int size)
1161 {
1162 	struct mlx5_cmd_prot_block *block;
1163 	struct mlx5_cmd_mailbox *next;
1164 	int copy;
1165 
1166 	if (!to || !from)
1167 		return -ENOMEM;
1168 
1169 	copy = min_t(int, size, sizeof(from->first.data));
1170 	memcpy(to, from->first.data, copy);
1171 	size -= copy;
1172 	to += copy;
1173 
1174 	next = from->next;
1175 	while (size) {
1176 		if (!next) {
1177 			/* this is a BUG */
1178 			return -ENOMEM;
1179 		}
1180 
1181 		copy = min_t(int, size, MLX5_CMD_DATA_BLOCK_SIZE);
1182 		block = next->buf;
1183 
1184 		memcpy(to, block->data, copy);
1185 		to += copy;
1186 		size -= copy;
1187 		next = next->next;
1188 	}
1189 
1190 	return 0;
1191 }
1192 
1193 static struct mlx5_cmd_mailbox *alloc_cmd_box(struct mlx5_core_dev *dev,
1194 					      gfp_t flags)
1195 {
1196 	struct mlx5_cmd_mailbox *mailbox;
1197 
1198 	mailbox = kmalloc(sizeof(*mailbox), flags);
1199 	if (!mailbox)
1200 		return ERR_PTR(-ENOMEM);
1201 
1202 	mailbox->buf = dma_pool_zalloc(dev->cmd.pool, flags,
1203 				       &mailbox->dma);
1204 	if (!mailbox->buf) {
1205 		mlx5_core_dbg(dev, "failed allocation\n");
1206 		kfree(mailbox);
1207 		return ERR_PTR(-ENOMEM);
1208 	}
1209 	mailbox->next = NULL;
1210 
1211 	return mailbox;
1212 }
1213 
1214 static void free_cmd_box(struct mlx5_core_dev *dev,
1215 			 struct mlx5_cmd_mailbox *mailbox)
1216 {
1217 	dma_pool_free(dev->cmd.pool, mailbox->buf, mailbox->dma);
1218 	kfree(mailbox);
1219 }
1220 
1221 static struct mlx5_cmd_msg *mlx5_alloc_cmd_msg(struct mlx5_core_dev *dev,
1222 					       gfp_t flags, int size,
1223 					       u8 token)
1224 {
1225 	struct mlx5_cmd_mailbox *tmp, *head = NULL;
1226 	struct mlx5_cmd_prot_block *block;
1227 	struct mlx5_cmd_msg *msg;
1228 	int err;
1229 	int n;
1230 	int i;
1231 
1232 	msg = kzalloc(sizeof(*msg), flags);
1233 	if (!msg)
1234 		return ERR_PTR(-ENOMEM);
1235 
1236 	msg->len = size;
1237 	n = mlx5_calc_cmd_blocks(msg);
1238 
1239 	for (i = 0; i < n; i++) {
1240 		tmp = alloc_cmd_box(dev, flags);
1241 		if (IS_ERR(tmp)) {
1242 			mlx5_core_warn(dev, "failed allocating block\n");
1243 			err = PTR_ERR(tmp);
1244 			goto err_alloc;
1245 		}
1246 
1247 		block = tmp->buf;
1248 		tmp->next = head;
1249 		block->next = cpu_to_be64(tmp->next ? tmp->next->dma : 0);
1250 		block->block_num = cpu_to_be32(n - i - 1);
1251 		block->token = token;
1252 		head = tmp;
1253 	}
1254 	msg->next = head;
1255 	return msg;
1256 
1257 err_alloc:
1258 	while (head) {
1259 		tmp = head->next;
1260 		free_cmd_box(dev, head);
1261 		head = tmp;
1262 	}
1263 	kfree(msg);
1264 
1265 	return ERR_PTR(err);
1266 }
1267 
1268 static void mlx5_free_cmd_msg(struct mlx5_core_dev *dev,
1269 			      struct mlx5_cmd_msg *msg)
1270 {
1271 	struct mlx5_cmd_mailbox *head = msg->next;
1272 	struct mlx5_cmd_mailbox *next;
1273 
1274 	while (head) {
1275 		next = head->next;
1276 		free_cmd_box(dev, head);
1277 		head = next;
1278 	}
1279 	kfree(msg);
1280 }
1281 
1282 static ssize_t data_write(struct file *filp, const char __user *buf,
1283 			  size_t count, loff_t *pos)
1284 {
1285 	struct mlx5_core_dev *dev = filp->private_data;
1286 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1287 	void *ptr;
1288 
1289 	if (*pos != 0)
1290 		return -EINVAL;
1291 
1292 	kfree(dbg->in_msg);
1293 	dbg->in_msg = NULL;
1294 	dbg->inlen = 0;
1295 	ptr = memdup_user(buf, count);
1296 	if (IS_ERR(ptr))
1297 		return PTR_ERR(ptr);
1298 	dbg->in_msg = ptr;
1299 	dbg->inlen = count;
1300 
1301 	*pos = count;
1302 
1303 	return count;
1304 }
1305 
1306 static ssize_t data_read(struct file *filp, char __user *buf, size_t count,
1307 			 loff_t *pos)
1308 {
1309 	struct mlx5_core_dev *dev = filp->private_data;
1310 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1311 
1312 	if (!dbg->out_msg)
1313 		return -ENOMEM;
1314 
1315 	return simple_read_from_buffer(buf, count, pos, dbg->out_msg,
1316 				       dbg->outlen);
1317 }
1318 
1319 static const struct file_operations dfops = {
1320 	.owner	= THIS_MODULE,
1321 	.open	= simple_open,
1322 	.write	= data_write,
1323 	.read	= data_read,
1324 };
1325 
1326 static ssize_t outlen_read(struct file *filp, char __user *buf, size_t count,
1327 			   loff_t *pos)
1328 {
1329 	struct mlx5_core_dev *dev = filp->private_data;
1330 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1331 	char outlen[8];
1332 	int err;
1333 
1334 	err = snprintf(outlen, sizeof(outlen), "%d", dbg->outlen);
1335 	if (err < 0)
1336 		return err;
1337 
1338 	return simple_read_from_buffer(buf, count, pos, outlen, err);
1339 }
1340 
1341 static ssize_t outlen_write(struct file *filp, const char __user *buf,
1342 			    size_t count, loff_t *pos)
1343 {
1344 	struct mlx5_core_dev *dev = filp->private_data;
1345 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1346 	char outlen_str[8] = {0};
1347 	int outlen;
1348 	void *ptr;
1349 	int err;
1350 
1351 	if (*pos != 0 || count > 6)
1352 		return -EINVAL;
1353 
1354 	kfree(dbg->out_msg);
1355 	dbg->out_msg = NULL;
1356 	dbg->outlen = 0;
1357 
1358 	if (copy_from_user(outlen_str, buf, count))
1359 		return -EFAULT;
1360 
1361 	err = sscanf(outlen_str, "%d", &outlen);
1362 	if (err < 0)
1363 		return err;
1364 
1365 	ptr = kzalloc(outlen, GFP_KERNEL);
1366 	if (!ptr)
1367 		return -ENOMEM;
1368 
1369 	dbg->out_msg = ptr;
1370 	dbg->outlen = outlen;
1371 
1372 	*pos = count;
1373 
1374 	return count;
1375 }
1376 
1377 static const struct file_operations olfops = {
1378 	.owner	= THIS_MODULE,
1379 	.open	= simple_open,
1380 	.write	= outlen_write,
1381 	.read	= outlen_read,
1382 };
1383 
1384 static void set_wqname(struct mlx5_core_dev *dev)
1385 {
1386 	struct mlx5_cmd *cmd = &dev->cmd;
1387 
1388 	snprintf(cmd->wq_name, sizeof(cmd->wq_name), "mlx5_cmd_%s",
1389 		 dev_name(dev->device));
1390 }
1391 
1392 static void clean_debug_files(struct mlx5_core_dev *dev)
1393 {
1394 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1395 
1396 	if (!mlx5_debugfs_root)
1397 		return;
1398 
1399 	mlx5_cmdif_debugfs_cleanup(dev);
1400 	debugfs_remove_recursive(dbg->dbg_root);
1401 }
1402 
1403 static void create_debugfs_files(struct mlx5_core_dev *dev)
1404 {
1405 	struct mlx5_cmd_debug *dbg = &dev->cmd.dbg;
1406 
1407 	dbg->dbg_root = debugfs_create_dir("cmd", dev->priv.dbg_root);
1408 
1409 	debugfs_create_file("in", 0400, dbg->dbg_root, dev, &dfops);
1410 	debugfs_create_file("out", 0200, dbg->dbg_root, dev, &dfops);
1411 	debugfs_create_file("out_len", 0600, dbg->dbg_root, dev, &olfops);
1412 	debugfs_create_u8("status", 0600, dbg->dbg_root, &dbg->status);
1413 	debugfs_create_file("run", 0200, dbg->dbg_root, dev, &fops);
1414 
1415 	mlx5_cmdif_debugfs_init(dev);
1416 }
1417 
1418 void mlx5_cmd_allowed_opcode(struct mlx5_core_dev *dev, u16 opcode)
1419 {
1420 	struct mlx5_cmd *cmd = &dev->cmd;
1421 	int i;
1422 
1423 	for (i = 0; i < cmd->max_reg_cmds; i++)
1424 		down(&cmd->sem);
1425 	down(&cmd->pages_sem);
1426 
1427 	cmd->allowed_opcode = opcode;
1428 
1429 	up(&cmd->pages_sem);
1430 	for (i = 0; i < cmd->max_reg_cmds; i++)
1431 		up(&cmd->sem);
1432 }
1433 
1434 static void mlx5_cmd_change_mod(struct mlx5_core_dev *dev, int mode)
1435 {
1436 	struct mlx5_cmd *cmd = &dev->cmd;
1437 	int i;
1438 
1439 	for (i = 0; i < cmd->max_reg_cmds; i++)
1440 		down(&cmd->sem);
1441 	down(&cmd->pages_sem);
1442 
1443 	cmd->mode = mode;
1444 
1445 	up(&cmd->pages_sem);
1446 	for (i = 0; i < cmd->max_reg_cmds; i++)
1447 		up(&cmd->sem);
1448 }
1449 
1450 static int cmd_comp_notifier(struct notifier_block *nb,
1451 			     unsigned long type, void *data)
1452 {
1453 	struct mlx5_core_dev *dev;
1454 	struct mlx5_cmd *cmd;
1455 	struct mlx5_eqe *eqe;
1456 
1457 	cmd = mlx5_nb_cof(nb, struct mlx5_cmd, nb);
1458 	dev = container_of(cmd, struct mlx5_core_dev, cmd);
1459 	eqe = data;
1460 
1461 	mlx5_cmd_comp_handler(dev, be32_to_cpu(eqe->data.cmd.vector), false);
1462 
1463 	return NOTIFY_OK;
1464 }
1465 void mlx5_cmd_use_events(struct mlx5_core_dev *dev)
1466 {
1467 	MLX5_NB_INIT(&dev->cmd.nb, cmd_comp_notifier, CMD);
1468 	mlx5_eq_notifier_register(dev, &dev->cmd.nb);
1469 	mlx5_cmd_change_mod(dev, CMD_MODE_EVENTS);
1470 }
1471 
1472 void mlx5_cmd_use_polling(struct mlx5_core_dev *dev)
1473 {
1474 	mlx5_cmd_change_mod(dev, CMD_MODE_POLLING);
1475 	mlx5_eq_notifier_unregister(dev, &dev->cmd.nb);
1476 }
1477 
1478 static void free_msg(struct mlx5_core_dev *dev, struct mlx5_cmd_msg *msg)
1479 {
1480 	unsigned long flags;
1481 
1482 	if (msg->parent) {
1483 		spin_lock_irqsave(&msg->parent->lock, flags);
1484 		list_add_tail(&msg->list, &msg->parent->head);
1485 		spin_unlock_irqrestore(&msg->parent->lock, flags);
1486 	} else {
1487 		mlx5_free_cmd_msg(dev, msg);
1488 	}
1489 }
1490 
1491 static void mlx5_cmd_comp_handler(struct mlx5_core_dev *dev, u64 vec, bool forced)
1492 {
1493 	struct mlx5_cmd *cmd = &dev->cmd;
1494 	struct mlx5_cmd_work_ent *ent;
1495 	mlx5_cmd_cbk_t callback;
1496 	void *context;
1497 	int err;
1498 	int i;
1499 	s64 ds;
1500 	struct mlx5_cmd_stats *stats;
1501 	unsigned long flags;
1502 	unsigned long vector;
1503 
1504 	/* there can be at most 32 command queues */
1505 	vector = vec & 0xffffffff;
1506 	for (i = 0; i < (1 << cmd->log_sz); i++) {
1507 		if (test_bit(i, &vector)) {
1508 			struct semaphore *sem;
1509 
1510 			ent = cmd->ent_arr[i];
1511 
1512 			/* if we already completed the command, ignore it */
1513 			if (!test_and_clear_bit(MLX5_CMD_ENT_STATE_PENDING_COMP,
1514 						&ent->state)) {
1515 				/* only real completion can free the cmd slot */
1516 				if (!forced) {
1517 					mlx5_core_err(dev, "Command completion arrived after timeout (entry idx = %d).\n",
1518 						      ent->idx);
1519 					free_ent(cmd, ent->idx);
1520 					free_cmd(ent);
1521 				}
1522 				continue;
1523 			}
1524 
1525 			if (ent->callback)
1526 				cancel_delayed_work(&ent->cb_timeout_work);
1527 			if (ent->page_queue)
1528 				sem = &cmd->pages_sem;
1529 			else
1530 				sem = &cmd->sem;
1531 			ent->ts2 = ktime_get_ns();
1532 			memcpy(ent->out->first.data, ent->lay->out, sizeof(ent->lay->out));
1533 			dump_command(dev, ent, 0);
1534 			if (!ent->ret) {
1535 				if (!cmd->checksum_disabled)
1536 					ent->ret = verify_signature(ent);
1537 				else
1538 					ent->ret = 0;
1539 				if (vec & MLX5_TRIGGERED_CMD_COMP)
1540 					ent->status = MLX5_DRIVER_STATUS_ABORTED;
1541 				else
1542 					ent->status = ent->lay->status_own >> 1;
1543 
1544 				mlx5_core_dbg(dev, "command completed. ret 0x%x, delivery status %s(0x%x)\n",
1545 					      ent->ret, deliv_status_to_str(ent->status), ent->status);
1546 			}
1547 
1548 			/* only real completion will free the entry slot */
1549 			if (!forced)
1550 				free_ent(cmd, ent->idx);
1551 
1552 			if (ent->callback) {
1553 				ds = ent->ts2 - ent->ts1;
1554 				if (ent->op < MLX5_CMD_OP_MAX) {
1555 					stats = &cmd->stats[ent->op];
1556 					spin_lock_irqsave(&stats->lock, flags);
1557 					stats->sum += ds;
1558 					++stats->n;
1559 					spin_unlock_irqrestore(&stats->lock, flags);
1560 				}
1561 
1562 				callback = ent->callback;
1563 				context = ent->context;
1564 				err = ent->ret;
1565 				if (!err) {
1566 					err = mlx5_copy_from_msg(ent->uout,
1567 								 ent->out,
1568 								 ent->uout_size);
1569 
1570 					err = err ? err : mlx5_cmd_check(dev,
1571 									ent->in->first.data,
1572 									ent->uout);
1573 				}
1574 
1575 				mlx5_free_cmd_msg(dev, ent->out);
1576 				free_msg(dev, ent->in);
1577 
1578 				err = err ? err : ent->status;
1579 				if (!forced)
1580 					free_cmd(ent);
1581 				callback(err, context);
1582 			} else {
1583 				complete(&ent->done);
1584 			}
1585 			up(sem);
1586 		}
1587 	}
1588 }
1589 
1590 void mlx5_cmd_trigger_completions(struct mlx5_core_dev *dev)
1591 {
1592 	unsigned long flags;
1593 	u64 vector;
1594 
1595 	/* wait for pending handlers to complete */
1596 	mlx5_eq_synchronize_cmd_irq(dev);
1597 	spin_lock_irqsave(&dev->cmd.alloc_lock, flags);
1598 	vector = ~dev->cmd.bitmask & ((1ul << (1 << dev->cmd.log_sz)) - 1);
1599 	if (!vector)
1600 		goto no_trig;
1601 
1602 	vector |= MLX5_TRIGGERED_CMD_COMP;
1603 	spin_unlock_irqrestore(&dev->cmd.alloc_lock, flags);
1604 
1605 	mlx5_core_dbg(dev, "vector 0x%llx\n", vector);
1606 	mlx5_cmd_comp_handler(dev, vector, true);
1607 	return;
1608 
1609 no_trig:
1610 	spin_unlock_irqrestore(&dev->cmd.alloc_lock, flags);
1611 }
1612 
1613 void mlx5_cmd_flush(struct mlx5_core_dev *dev)
1614 {
1615 	struct mlx5_cmd *cmd = &dev->cmd;
1616 	int i;
1617 
1618 	for (i = 0; i < cmd->max_reg_cmds; i++)
1619 		while (down_trylock(&cmd->sem))
1620 			mlx5_cmd_trigger_completions(dev);
1621 
1622 	while (down_trylock(&cmd->pages_sem))
1623 		mlx5_cmd_trigger_completions(dev);
1624 
1625 	/* Unlock cmdif */
1626 	up(&cmd->pages_sem);
1627 	for (i = 0; i < cmd->max_reg_cmds; i++)
1628 		up(&cmd->sem);
1629 }
1630 
1631 static int status_to_err(u8 status)
1632 {
1633 	switch (status) {
1634 	case MLX5_CMD_DELIVERY_STAT_OK:
1635 	case MLX5_DRIVER_STATUS_ABORTED:
1636 		return 0;
1637 	case MLX5_CMD_DELIVERY_STAT_SIGNAT_ERR:
1638 	case MLX5_CMD_DELIVERY_STAT_TOK_ERR:
1639 		return -EBADR;
1640 	case MLX5_CMD_DELIVERY_STAT_BAD_BLK_NUM_ERR:
1641 	case MLX5_CMD_DELIVERY_STAT_OUT_PTR_ALIGN_ERR:
1642 	case MLX5_CMD_DELIVERY_STAT_IN_PTR_ALIGN_ERR:
1643 		return -EFAULT; /* Bad address */
1644 	case MLX5_CMD_DELIVERY_STAT_IN_LENGTH_ERR:
1645 	case MLX5_CMD_DELIVERY_STAT_OUT_LENGTH_ERR:
1646 	case MLX5_CMD_DELIVERY_STAT_CMD_DESCR_ERR:
1647 	case MLX5_CMD_DELIVERY_STAT_RES_FLD_NOT_CLR_ERR:
1648 		return -ENOMSG;
1649 	case MLX5_CMD_DELIVERY_STAT_FW_ERR:
1650 		return -EIO;
1651 	default:
1652 		return -EINVAL;
1653 	}
1654 }
1655 
1656 static struct mlx5_cmd_msg *alloc_msg(struct mlx5_core_dev *dev, int in_size,
1657 				      gfp_t gfp)
1658 {
1659 	struct mlx5_cmd_msg *msg = ERR_PTR(-ENOMEM);
1660 	struct cmd_msg_cache *ch = NULL;
1661 	struct mlx5_cmd *cmd = &dev->cmd;
1662 	int i;
1663 
1664 	if (in_size <= 16)
1665 		goto cache_miss;
1666 
1667 	for (i = 0; i < MLX5_NUM_COMMAND_CACHES; i++) {
1668 		ch = &cmd->cache[i];
1669 		if (in_size > ch->max_inbox_size)
1670 			continue;
1671 		spin_lock_irq(&ch->lock);
1672 		if (list_empty(&ch->head)) {
1673 			spin_unlock_irq(&ch->lock);
1674 			continue;
1675 		}
1676 		msg = list_entry(ch->head.next, typeof(*msg), list);
1677 		/* For cached lists, we must explicitly state what is
1678 		 * the real size
1679 		 */
1680 		msg->len = in_size;
1681 		list_del(&msg->list);
1682 		spin_unlock_irq(&ch->lock);
1683 		break;
1684 	}
1685 
1686 	if (!IS_ERR(msg))
1687 		return msg;
1688 
1689 cache_miss:
1690 	msg = mlx5_alloc_cmd_msg(dev, gfp, in_size, 0);
1691 	return msg;
1692 }
1693 
1694 static int is_manage_pages(void *in)
1695 {
1696 	return MLX5_GET(mbox_in, in, opcode) == MLX5_CMD_OP_MANAGE_PAGES;
1697 }
1698 
1699 static int cmd_exec(struct mlx5_core_dev *dev, void *in, int in_size, void *out,
1700 		    int out_size, mlx5_cmd_cbk_t callback, void *context,
1701 		    bool force_polling)
1702 {
1703 	struct mlx5_cmd_msg *inb;
1704 	struct mlx5_cmd_msg *outb;
1705 	int pages_queue;
1706 	gfp_t gfp;
1707 	int err;
1708 	u8 status = 0;
1709 	u32 drv_synd;
1710 	u16 opcode;
1711 	u8 token;
1712 
1713 	opcode = MLX5_GET(mbox_in, in, opcode);
1714 	if (pci_channel_offline(dev->pdev) ||
1715 	    dev->state == MLX5_DEVICE_STATE_INTERNAL_ERROR ||
1716 	    dev->cmd.state != MLX5_CMDIF_STATE_UP ||
1717 	    !opcode_allowed(&dev->cmd, opcode)) {
1718 		err = mlx5_internal_err_ret_value(dev, opcode, &drv_synd, &status);
1719 		MLX5_SET(mbox_out, out, status, status);
1720 		MLX5_SET(mbox_out, out, syndrome, drv_synd);
1721 		return err;
1722 	}
1723 
1724 	pages_queue = is_manage_pages(in);
1725 	gfp = callback ? GFP_ATOMIC : GFP_KERNEL;
1726 
1727 	inb = alloc_msg(dev, in_size, gfp);
1728 	if (IS_ERR(inb)) {
1729 		err = PTR_ERR(inb);
1730 		return err;
1731 	}
1732 
1733 	token = alloc_token(&dev->cmd);
1734 
1735 	err = mlx5_copy_to_msg(inb, in, in_size, token);
1736 	if (err) {
1737 		mlx5_core_warn(dev, "err %d\n", err);
1738 		goto out_in;
1739 	}
1740 
1741 	outb = mlx5_alloc_cmd_msg(dev, gfp, out_size, token);
1742 	if (IS_ERR(outb)) {
1743 		err = PTR_ERR(outb);
1744 		goto out_in;
1745 	}
1746 
1747 	err = mlx5_cmd_invoke(dev, inb, outb, out, out_size, callback, context,
1748 			      pages_queue, &status, token, force_polling);
1749 	if (err)
1750 		goto out_out;
1751 
1752 	mlx5_core_dbg(dev, "err %d, status %d\n", err, status);
1753 	if (status) {
1754 		err = status_to_err(status);
1755 		goto out_out;
1756 	}
1757 
1758 	if (!callback)
1759 		err = mlx5_copy_from_msg(out, outb, out_size);
1760 
1761 out_out:
1762 	if (!callback)
1763 		mlx5_free_cmd_msg(dev, outb);
1764 
1765 out_in:
1766 	if (!callback)
1767 		free_msg(dev, inb);
1768 	return err;
1769 }
1770 
1771 int mlx5_cmd_exec(struct mlx5_core_dev *dev, void *in, int in_size, void *out,
1772 		  int out_size)
1773 {
1774 	int err;
1775 
1776 	err = cmd_exec(dev, in, in_size, out, out_size, NULL, NULL, false);
1777 	return err ? : mlx5_cmd_check(dev, in, out);
1778 }
1779 EXPORT_SYMBOL(mlx5_cmd_exec);
1780 
1781 void mlx5_cmd_init_async_ctx(struct mlx5_core_dev *dev,
1782 			     struct mlx5_async_ctx *ctx)
1783 {
1784 	ctx->dev = dev;
1785 	/* Starts at 1 to avoid doing wake_up if we are not cleaning up */
1786 	atomic_set(&ctx->num_inflight, 1);
1787 	init_waitqueue_head(&ctx->wait);
1788 }
1789 EXPORT_SYMBOL(mlx5_cmd_init_async_ctx);
1790 
1791 /**
1792  * mlx5_cmd_cleanup_async_ctx - Clean up an async_ctx
1793  * @ctx: The ctx to clean
1794  *
1795  * Upon return all callbacks given to mlx5_cmd_exec_cb() have been called. The
1796  * caller must ensure that mlx5_cmd_exec_cb() is not called during or after
1797  * the call mlx5_cleanup_async_ctx().
1798  */
1799 void mlx5_cmd_cleanup_async_ctx(struct mlx5_async_ctx *ctx)
1800 {
1801 	atomic_dec(&ctx->num_inflight);
1802 	wait_event(ctx->wait, atomic_read(&ctx->num_inflight) == 0);
1803 }
1804 EXPORT_SYMBOL(mlx5_cmd_cleanup_async_ctx);
1805 
1806 static void mlx5_cmd_exec_cb_handler(int status, void *_work)
1807 {
1808 	struct mlx5_async_work *work = _work;
1809 	struct mlx5_async_ctx *ctx = work->ctx;
1810 
1811 	work->user_callback(status, work);
1812 	if (atomic_dec_and_test(&ctx->num_inflight))
1813 		wake_up(&ctx->wait);
1814 }
1815 
1816 int mlx5_cmd_exec_cb(struct mlx5_async_ctx *ctx, void *in, int in_size,
1817 		     void *out, int out_size, mlx5_async_cbk_t callback,
1818 		     struct mlx5_async_work *work)
1819 {
1820 	int ret;
1821 
1822 	work->ctx = ctx;
1823 	work->user_callback = callback;
1824 	if (WARN_ON(!atomic_inc_not_zero(&ctx->num_inflight)))
1825 		return -EIO;
1826 	ret = cmd_exec(ctx->dev, in, in_size, out, out_size,
1827 		       mlx5_cmd_exec_cb_handler, work, false);
1828 	if (ret && atomic_dec_and_test(&ctx->num_inflight))
1829 		wake_up(&ctx->wait);
1830 
1831 	return ret;
1832 }
1833 EXPORT_SYMBOL(mlx5_cmd_exec_cb);
1834 
1835 int mlx5_cmd_exec_polling(struct mlx5_core_dev *dev, void *in, int in_size,
1836 			  void *out, int out_size)
1837 {
1838 	int err;
1839 
1840 	err = cmd_exec(dev, in, in_size, out, out_size, NULL, NULL, true);
1841 
1842 	return err ? : mlx5_cmd_check(dev, in, out);
1843 }
1844 EXPORT_SYMBOL(mlx5_cmd_exec_polling);
1845 
1846 static void destroy_msg_cache(struct mlx5_core_dev *dev)
1847 {
1848 	struct cmd_msg_cache *ch;
1849 	struct mlx5_cmd_msg *msg;
1850 	struct mlx5_cmd_msg *n;
1851 	int i;
1852 
1853 	for (i = 0; i < MLX5_NUM_COMMAND_CACHES; i++) {
1854 		ch = &dev->cmd.cache[i];
1855 		list_for_each_entry_safe(msg, n, &ch->head, list) {
1856 			list_del(&msg->list);
1857 			mlx5_free_cmd_msg(dev, msg);
1858 		}
1859 	}
1860 }
1861 
1862 static unsigned cmd_cache_num_ent[MLX5_NUM_COMMAND_CACHES] = {
1863 	512, 32, 16, 8, 2
1864 };
1865 
1866 static unsigned cmd_cache_ent_size[MLX5_NUM_COMMAND_CACHES] = {
1867 	16 + MLX5_CMD_DATA_BLOCK_SIZE,
1868 	16 + MLX5_CMD_DATA_BLOCK_SIZE * 2,
1869 	16 + MLX5_CMD_DATA_BLOCK_SIZE * 16,
1870 	16 + MLX5_CMD_DATA_BLOCK_SIZE * 256,
1871 	16 + MLX5_CMD_DATA_BLOCK_SIZE * 512,
1872 };
1873 
1874 static void create_msg_cache(struct mlx5_core_dev *dev)
1875 {
1876 	struct mlx5_cmd *cmd = &dev->cmd;
1877 	struct cmd_msg_cache *ch;
1878 	struct mlx5_cmd_msg *msg;
1879 	int i;
1880 	int k;
1881 
1882 	/* Initialize and fill the caches with initial entries */
1883 	for (k = 0; k < MLX5_NUM_COMMAND_CACHES; k++) {
1884 		ch = &cmd->cache[k];
1885 		spin_lock_init(&ch->lock);
1886 		INIT_LIST_HEAD(&ch->head);
1887 		ch->num_ent = cmd_cache_num_ent[k];
1888 		ch->max_inbox_size = cmd_cache_ent_size[k];
1889 		for (i = 0; i < ch->num_ent; i++) {
1890 			msg = mlx5_alloc_cmd_msg(dev, GFP_KERNEL | __GFP_NOWARN,
1891 						 ch->max_inbox_size, 0);
1892 			if (IS_ERR(msg))
1893 				break;
1894 			msg->parent = ch;
1895 			list_add_tail(&msg->list, &ch->head);
1896 		}
1897 	}
1898 }
1899 
1900 static int alloc_cmd_page(struct mlx5_core_dev *dev, struct mlx5_cmd *cmd)
1901 {
1902 	struct device *ddev = dev->device;
1903 
1904 	cmd->cmd_alloc_buf = dma_alloc_coherent(ddev, MLX5_ADAPTER_PAGE_SIZE,
1905 						&cmd->alloc_dma, GFP_KERNEL);
1906 	if (!cmd->cmd_alloc_buf)
1907 		return -ENOMEM;
1908 
1909 	/* make sure it is aligned to 4K */
1910 	if (!((uintptr_t)cmd->cmd_alloc_buf & (MLX5_ADAPTER_PAGE_SIZE - 1))) {
1911 		cmd->cmd_buf = cmd->cmd_alloc_buf;
1912 		cmd->dma = cmd->alloc_dma;
1913 		cmd->alloc_size = MLX5_ADAPTER_PAGE_SIZE;
1914 		return 0;
1915 	}
1916 
1917 	dma_free_coherent(ddev, MLX5_ADAPTER_PAGE_SIZE, cmd->cmd_alloc_buf,
1918 			  cmd->alloc_dma);
1919 	cmd->cmd_alloc_buf = dma_alloc_coherent(ddev,
1920 						2 * MLX5_ADAPTER_PAGE_SIZE - 1,
1921 						&cmd->alloc_dma, GFP_KERNEL);
1922 	if (!cmd->cmd_alloc_buf)
1923 		return -ENOMEM;
1924 
1925 	cmd->cmd_buf = PTR_ALIGN(cmd->cmd_alloc_buf, MLX5_ADAPTER_PAGE_SIZE);
1926 	cmd->dma = ALIGN(cmd->alloc_dma, MLX5_ADAPTER_PAGE_SIZE);
1927 	cmd->alloc_size = 2 * MLX5_ADAPTER_PAGE_SIZE - 1;
1928 	return 0;
1929 }
1930 
1931 static void free_cmd_page(struct mlx5_core_dev *dev, struct mlx5_cmd *cmd)
1932 {
1933 	struct device *ddev = dev->device;
1934 
1935 	dma_free_coherent(ddev, cmd->alloc_size, cmd->cmd_alloc_buf,
1936 			  cmd->alloc_dma);
1937 }
1938 
1939 static u16 cmdif_rev(struct mlx5_core_dev *dev)
1940 {
1941 	return ioread32be(&dev->iseg->cmdif_rev_fw_sub) >> 16;
1942 }
1943 
1944 int mlx5_cmd_init(struct mlx5_core_dev *dev)
1945 {
1946 	int size = sizeof(struct mlx5_cmd_prot_block);
1947 	int align = roundup_pow_of_two(size);
1948 	struct mlx5_cmd *cmd = &dev->cmd;
1949 	u32 cmd_h, cmd_l;
1950 	u16 cmd_if_rev;
1951 	int err;
1952 	int i;
1953 
1954 	memset(cmd, 0, sizeof(*cmd));
1955 	cmd_if_rev = cmdif_rev(dev);
1956 	if (cmd_if_rev != CMD_IF_REV) {
1957 		mlx5_core_err(dev,
1958 			      "Driver cmdif rev(%d) differs from firmware's(%d)\n",
1959 			      CMD_IF_REV, cmd_if_rev);
1960 		return -EINVAL;
1961 	}
1962 
1963 	cmd->stats = kvzalloc(MLX5_CMD_OP_MAX * sizeof(*cmd->stats), GFP_KERNEL);
1964 	if (!cmd->stats)
1965 		return -ENOMEM;
1966 
1967 	cmd->pool = dma_pool_create("mlx5_cmd", dev->device, size, align, 0);
1968 	if (!cmd->pool) {
1969 		err = -ENOMEM;
1970 		goto dma_pool_err;
1971 	}
1972 
1973 	err = alloc_cmd_page(dev, cmd);
1974 	if (err)
1975 		goto err_free_pool;
1976 
1977 	cmd_l = ioread32be(&dev->iseg->cmdq_addr_l_sz) & 0xff;
1978 	cmd->log_sz = cmd_l >> 4 & 0xf;
1979 	cmd->log_stride = cmd_l & 0xf;
1980 	if (1 << cmd->log_sz > MLX5_MAX_COMMANDS) {
1981 		mlx5_core_err(dev, "firmware reports too many outstanding commands %d\n",
1982 			      1 << cmd->log_sz);
1983 		err = -EINVAL;
1984 		goto err_free_page;
1985 	}
1986 
1987 	if (cmd->log_sz + cmd->log_stride > MLX5_ADAPTER_PAGE_SHIFT) {
1988 		mlx5_core_err(dev, "command queue size overflow\n");
1989 		err = -EINVAL;
1990 		goto err_free_page;
1991 	}
1992 
1993 	cmd->state = MLX5_CMDIF_STATE_DOWN;
1994 	cmd->checksum_disabled = 1;
1995 	cmd->max_reg_cmds = (1 << cmd->log_sz) - 1;
1996 	cmd->bitmask = (1UL << cmd->max_reg_cmds) - 1;
1997 
1998 	cmd->cmdif_rev = ioread32be(&dev->iseg->cmdif_rev_fw_sub) >> 16;
1999 	if (cmd->cmdif_rev > CMD_IF_REV) {
2000 		mlx5_core_err(dev, "driver does not support command interface version. driver %d, firmware %d\n",
2001 			      CMD_IF_REV, cmd->cmdif_rev);
2002 		err = -EOPNOTSUPP;
2003 		goto err_free_page;
2004 	}
2005 
2006 	spin_lock_init(&cmd->alloc_lock);
2007 	spin_lock_init(&cmd->token_lock);
2008 	for (i = 0; i < MLX5_CMD_OP_MAX; i++)
2009 		spin_lock_init(&cmd->stats[i].lock);
2010 
2011 	sema_init(&cmd->sem, cmd->max_reg_cmds);
2012 	sema_init(&cmd->pages_sem, 1);
2013 
2014 	cmd_h = (u32)((u64)(cmd->dma) >> 32);
2015 	cmd_l = (u32)(cmd->dma);
2016 	if (cmd_l & 0xfff) {
2017 		mlx5_core_err(dev, "invalid command queue address\n");
2018 		err = -ENOMEM;
2019 		goto err_free_page;
2020 	}
2021 
2022 	iowrite32be(cmd_h, &dev->iseg->cmdq_addr_h);
2023 	iowrite32be(cmd_l, &dev->iseg->cmdq_addr_l_sz);
2024 
2025 	/* Make sure firmware sees the complete address before we proceed */
2026 	wmb();
2027 
2028 	mlx5_core_dbg(dev, "descriptor at dma 0x%llx\n", (unsigned long long)(cmd->dma));
2029 
2030 	cmd->mode = CMD_MODE_POLLING;
2031 	cmd->allowed_opcode = CMD_ALLOWED_OPCODE_ALL;
2032 
2033 	create_msg_cache(dev);
2034 
2035 	set_wqname(dev);
2036 	cmd->wq = create_singlethread_workqueue(cmd->wq_name);
2037 	if (!cmd->wq) {
2038 		mlx5_core_err(dev, "failed to create command workqueue\n");
2039 		err = -ENOMEM;
2040 		goto err_cache;
2041 	}
2042 
2043 	create_debugfs_files(dev);
2044 
2045 	return 0;
2046 
2047 err_cache:
2048 	destroy_msg_cache(dev);
2049 
2050 err_free_page:
2051 	free_cmd_page(dev, cmd);
2052 
2053 err_free_pool:
2054 	dma_pool_destroy(cmd->pool);
2055 dma_pool_err:
2056 	kvfree(cmd->stats);
2057 	return err;
2058 }
2059 EXPORT_SYMBOL(mlx5_cmd_init);
2060 
2061 void mlx5_cmd_cleanup(struct mlx5_core_dev *dev)
2062 {
2063 	struct mlx5_cmd *cmd = &dev->cmd;
2064 
2065 	clean_debug_files(dev);
2066 	destroy_workqueue(cmd->wq);
2067 	destroy_msg_cache(dev);
2068 	free_cmd_page(dev, cmd);
2069 	dma_pool_destroy(cmd->pool);
2070 	kvfree(cmd->stats);
2071 }
2072 EXPORT_SYMBOL(mlx5_cmd_cleanup);
2073 
2074 void mlx5_cmd_set_state(struct mlx5_core_dev *dev,
2075 			enum mlx5_cmdif_state cmdif_state)
2076 {
2077 	dev->cmd.state = cmdif_state;
2078 }
2079 EXPORT_SYMBOL(mlx5_cmd_set_state);
2080