drivers/nvme/host/tcp.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * NVMe over Fabrics TCP host.
   4  * Copyright (c) 2018 Lightbits Labs. All rights reserved.
   5  */
   6 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
   7 #include <linux/module.h>
   8 #include <linux/init.h>
   9 #include <linux/slab.h>
  10 #include <linux/err.h>
  11 #include <linux/nvme-tcp.h>
  12 #include <net/sock.h>
  13 #include <net/tcp.h>
  14 #include <linux/blk-mq.h>
  15 #include <crypto/hash.h>
  16
  17 #include "nvme.h"
  18 #include "fabrics.h"
  19
  20 struct nvme_tcp_queue;
  21
  22 enum nvme_tcp_send_state {
  23         NVME_TCP_SEND_CMD_PDU = 0,
  24         NVME_TCP_SEND_H2C_PDU,
  25         NVME_TCP_SEND_DATA,
  26         NVME_TCP_SEND_DDGST,
  27 };
  28
  29 struct nvme_tcp_request {
  30         struct nvme_request     req;
  31         void                    *pdu;
  32         struct nvme_tcp_queue   *queue;
  33         u32                     data_len;
  34         u32                     pdu_len;
  35         u32                     pdu_sent;
  36         u16                     ttag;
  37         struct list_head        entry;
  38         __le32                  ddgst;
  39
  40         struct bio              *curr_bio;
  41         struct iov_iter         iter;
  42
  43         /* send state */
  44         size_t                  offset;
  45         size_t                  data_sent;
  46         enum nvme_tcp_send_state state;
  47 };
  48
  49 enum nvme_tcp_queue_flags {
  50         NVME_TCP_Q_ALLOCATED    = 0,
  51         NVME_TCP_Q_LIVE         = 1,
  52 };
  53
  54 enum nvme_tcp_recv_state {
  55         NVME_TCP_RECV_PDU = 0,
  56         NVME_TCP_RECV_DATA,
  57         NVME_TCP_RECV_DDGST,
  58 };
  59
  60 struct nvme_tcp_ctrl;
  61 struct nvme_tcp_queue {
  62         struct socket           *sock;
  63         struct work_struct      io_work;
  64         int                     io_cpu;
  65
  66         spinlock_t              lock;
  67         struct list_head        send_list;
  68
  69         /* recv state */
  70         void                    *pdu;
  71         int                     pdu_remaining;
  72         int                     pdu_offset;
  73         size_t                  data_remaining;
  74         size_t                  ddgst_remaining;
  75
  76         /* send state */
  77         struct nvme_tcp_request *request;
  78
  79         int                     queue_size;
  80         size_t                  cmnd_capsule_len;
  81         struct nvme_tcp_ctrl    *ctrl;
  82         unsigned long           flags;
  83         bool                    rd_enabled;
  84
  85         bool                    hdr_digest;
  86         bool                    data_digest;
  87         struct ahash_request    *rcv_hash;
  88         struct ahash_request    *snd_hash;
  89         __le32                  exp_ddgst;
  90         __le32                  recv_ddgst;
  91
  92         struct page_frag_cache  pf_cache;
  93
  94         void (*state_change)(struct sock *);
  95         void (*data_ready)(struct sock *);
  96         void (*write_space)(struct sock *);
  97 };
  98
  99 struct nvme_tcp_ctrl {
 100         /* read only in the hot path */
 101         struct nvme_tcp_queue   *queues;
 102         struct blk_mq_tag_set   tag_set;
 103
 104         /* other member variables */
 105         struct list_head        list;
 106         struct blk_mq_tag_set   admin_tag_set;
 107         struct sockaddr_storage addr;
 108         struct sockaddr_storage src_addr;
 109         struct nvme_ctrl        ctrl;
 110
 111         struct work_struct      err_work;
 112         struct delayed_work     connect_work;
 113         struct nvme_tcp_request async_req;
 114 };
 115
 116 static LIST_HEAD(nvme_tcp_ctrl_list);
 117 static DEFINE_MUTEX(nvme_tcp_ctrl_mutex);
 118 static struct workqueue_struct *nvme_tcp_wq;
 119 static struct blk_mq_ops nvme_tcp_mq_ops;
 120 static struct blk_mq_ops nvme_tcp_admin_mq_ops;
 121
 122 static inline struct nvme_tcp_ctrl *to_tcp_ctrl(struct nvme_ctrl *ctrl)
 123 {
 124         return container_of(ctrl, struct nvme_tcp_ctrl, ctrl);
 125 }
 126
 127 static inline int nvme_tcp_queue_id(struct nvme_tcp_queue *queue)
 128 {
 129         return queue - queue->ctrl->queues;
 130 }
 131
 132 static inline struct blk_mq_tags *nvme_tcp_tagset(struct nvme_tcp_queue *queue)
 133 {
 134         u32 queue_idx = nvme_tcp_queue_id(queue);
 135
 136         if (queue_idx == 0)
 137                 return queue->ctrl->admin_tag_set.tags[queue_idx];
 138         return queue->ctrl->tag_set.tags[queue_idx - 1];
 139 }
 140
 141 static inline u8 nvme_tcp_hdgst_len(struct nvme_tcp_queue *queue)
 142 {
 143         return queue->hdr_digest ? NVME_TCP_DIGEST_LENGTH : 0;
 144 }
 145
 146 static inline u8 nvme_tcp_ddgst_len(struct nvme_tcp_queue *queue)
 147 {
 148         return queue->data_digest ? NVME_TCP_DIGEST_LENGTH : 0;
 149 }
 150
 151 static inline size_t nvme_tcp_inline_data_size(struct nvme_tcp_queue *queue)
 152 {
 153         return queue->cmnd_capsule_len - sizeof(struct nvme_command);
 154 }
 155
 156 static inline bool nvme_tcp_async_req(struct nvme_tcp_request *req)
 157 {
 158         return req == &req->queue->ctrl->async_req;
 159 }
 160
 161 static inline bool nvme_tcp_has_inline_data(struct nvme_tcp_request *req)
 162 {
 163         struct request *rq;
 164         unsigned int bytes;
 165
 166         if (unlikely(nvme_tcp_async_req(req)))
 167                 return false; /* async events don't have a request */
 168
 169         rq = blk_mq_rq_from_pdu(req);
 170         bytes = blk_rq_payload_bytes(rq);
 171
 172         return rq_data_dir(rq) == WRITE && bytes &&
 173                 bytes <= nvme_tcp_inline_data_size(req->queue);
 174 }
 175
 176 static inline struct page *nvme_tcp_req_cur_page(struct nvme_tcp_request *req)
 177 {
 178         return req->iter.bvec->bv_page;
 179 }
 180
 181 static inline size_t nvme_tcp_req_cur_offset(struct nvme_tcp_request *req)
 182 {
 183         return req->iter.bvec->bv_offset + req->iter.iov_offset;
 184 }
 185
 186 static inline size_t nvme_tcp_req_cur_length(struct nvme_tcp_request *req)
 187 {
 188         return min_t(size_t, req->iter.bvec->bv_len - req->iter.iov_offset,
 189                         req->pdu_len - req->pdu_sent);
 190 }
 191
 192 static inline size_t nvme_tcp_req_offset(struct nvme_tcp_request *req)
 193 {
 194         return req->iter.iov_offset;
 195 }
 196
 197 static inline size_t nvme_tcp_pdu_data_left(struct nvme_tcp_request *req)
 198 {
 199         return rq_data_dir(blk_mq_rq_from_pdu(req)) == WRITE ?
 200                         req->pdu_len - req->pdu_sent : 0;
 201 }
 202
 203 static inline size_t nvme_tcp_pdu_last_send(struct nvme_tcp_request *req,
 204                 int len)
 205 {
 206         return nvme_tcp_pdu_data_left(req) <= len;
 207 }
 208
 209 static void nvme_tcp_init_iter(struct nvme_tcp_request *req,
 210                 unsigned int dir)
 211 {
 212         struct request *rq = blk_mq_rq_from_pdu(req);
 213         struct bio_vec *vec;
 214         unsigned int size;
 215         int nsegs;
 216         size_t offset;
 217
 218         if (rq->rq_flags & RQF_SPECIAL_PAYLOAD) {
 219                 vec = &rq->special_vec;
 220                 nsegs = 1;
 221                 size = blk_rq_payload_bytes(rq);
 222                 offset = 0;
 223         } else {
 224                 struct bio *bio = req->curr_bio;
 225
 226                 vec = __bvec_iter_bvec(bio->bi_io_vec, bio->bi_iter);
 227                 nsegs = bio_segments(bio);
 228                 size = bio->bi_iter.bi_size;
 229                 offset = bio->bi_iter.bi_bvec_done;
 230         }
 231
 232         iov_iter_bvec(&req->iter, dir, vec, nsegs, size);
 233         req->iter.iov_offset = offset;
 234 }
 235
 236 static inline void nvme_tcp_advance_req(struct nvme_tcp_request *req,
 237                 int len)
 238 {
 239         req->data_sent += len;
 240         req->pdu_sent += len;
 241         iov_iter_advance(&req->iter, len);
 242         if (!iov_iter_count(&req->iter) &&
 243             req->data_sent < req->data_len) {
 244                 req->curr_bio = req->curr_bio->bi_next;
 245                 nvme_tcp_init_iter(req, WRITE);
 246         }
 247 }
 248
 249 static inline void nvme_tcp_queue_request(struct nvme_tcp_request *req)
 250 {
 251         struct nvme_tcp_queue *queue = req->queue;
 252
 253         spin_lock(&queue->lock);
 254         list_add_tail(&req->entry, &queue->send_list);
 255         spin_unlock(&queue->lock);
 256
 257         queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
 258 }
 259
 260 static inline struct nvme_tcp_request *
 261 nvme_tcp_fetch_request(struct nvme_tcp_queue *queue)
 262 {
 263         struct nvme_tcp_request *req;
 264
 265         spin_lock(&queue->lock);
 266         req = list_first_entry_or_null(&queue->send_list,
 267                         struct nvme_tcp_request, entry);
 268         if (req)
 269                 list_del(&req->entry);
 270         spin_unlock(&queue->lock);
 271
 272         return req;
 273 }
 274
 275 static inline void nvme_tcp_ddgst_final(struct ahash_request *hash,
 276                 __le32 *dgst)
 277 {
 278         ahash_request_set_crypt(hash, NULL, (u8 *)dgst, 0);
 279         crypto_ahash_final(hash);
 280 }
 281
 282 static inline void nvme_tcp_ddgst_update(struct ahash_request *hash,
 283                 struct page *page, off_t off, size_t len)
 284 {
 285         struct scatterlist sg;
 286
 287         sg_init_marker(&sg, 1);
 288         sg_set_page(&sg, page, len, off);
 289         ahash_request_set_crypt(hash, &sg, NULL, len);
 290         crypto_ahash_update(hash);
 291 }
 292
 293 static inline void nvme_tcp_hdgst(struct ahash_request *hash,
 294                 void *pdu, size_t len)
 295 {
 296         struct scatterlist sg;
 297
 298         sg_init_one(&sg, pdu, len);
 299         ahash_request_set_crypt(hash, &sg, pdu + len, len);
 300         crypto_ahash_digest(hash);
 301 }
 302
 303 static int nvme_tcp_verify_hdgst(struct nvme_tcp_queue *queue,
 304                 void *pdu, size_t pdu_len)
 305 {
 306         struct nvme_tcp_hdr *hdr = pdu;
 307         __le32 recv_digest;
 308         __le32 exp_digest;
 309
 310         if (unlikely(!(hdr->flags & NVME_TCP_F_HDGST))) {
 311                 dev_err(queue->ctrl->ctrl.device,
 312                         "queue %d: header digest flag is cleared\n",
 313                         nvme_tcp_queue_id(queue));
 314                 return -EPROTO;
 315         }
 316
 317         recv_digest = *(__le32 *)(pdu + hdr->hlen);
 318         nvme_tcp_hdgst(queue->rcv_hash, pdu, pdu_len);
 319         exp_digest = *(__le32 *)(pdu + hdr->hlen);
 320         if (recv_digest != exp_digest) {
 321                 dev_err(queue->ctrl->ctrl.device,
 322                         "header digest error: recv %#x expected %#x\n",
 323                         le32_to_cpu(recv_digest), le32_to_cpu(exp_digest));
 324                 return -EIO;
 325         }
 326
 327         return 0;
 328 }
 329
 330 static int nvme_tcp_check_ddgst(struct nvme_tcp_queue *queue, void *pdu)
 331 {
 332         struct nvme_tcp_hdr *hdr = pdu;
 333         u8 digest_len = nvme_tcp_hdgst_len(queue);
 334         u32 len;
 335
 336         len = le32_to_cpu(hdr->plen) - hdr->hlen -
 337                 ((hdr->flags & NVME_TCP_F_HDGST) ? digest_len : 0);
 338
 339         if (unlikely(len && !(hdr->flags & NVME_TCP_F_DDGST))) {
 340                 dev_err(queue->ctrl->ctrl.device,
 341                         "queue %d: data digest flag is cleared\n",
 342                 nvme_tcp_queue_id(queue));
 343                 return -EPROTO;
 344         }
 345         crypto_ahash_init(queue->rcv_hash);
 346
 347         return 0;
 348 }
 349
 350 static void nvme_tcp_exit_request(struct blk_mq_tag_set *set,
 351                 struct request *rq, unsigned int hctx_idx)
 352 {
 353         struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
 354
 355         page_frag_free(req->pdu);
 356 }
 357
 358 static int nvme_tcp_init_request(struct blk_mq_tag_set *set,
 359                 struct request *rq, unsigned int hctx_idx,
 360                 unsigned int numa_node)
 361 {
 362         struct nvme_tcp_ctrl *ctrl = set->driver_data;
 363         struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
 364         int queue_idx = (set == &ctrl->tag_set) ? hctx_idx + 1 : 0;
 365         struct nvme_tcp_queue *queue = &ctrl->queues[queue_idx];
 366         u8 hdgst = nvme_tcp_hdgst_len(queue);
 367
 368         req->pdu = page_frag_alloc(&queue->pf_cache,
 369                 sizeof(struct nvme_tcp_cmd_pdu) + hdgst,
 370                 GFP_KERNEL | __GFP_ZERO);
 371         if (!req->pdu)
 372                 return -ENOMEM;
 373
 374         req->queue = queue;
 375         nvme_req(rq)->ctrl = &ctrl->ctrl;
 376
 377         return 0;
 378 }
 379
 380 static int nvme_tcp_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
 381                 unsigned int hctx_idx)
 382 {
 383         struct nvme_tcp_ctrl *ctrl = data;
 384         struct nvme_tcp_queue *queue = &ctrl->queues[hctx_idx + 1];
 385
 386         hctx->driver_data = queue;
 387         return 0;
 388 }
 389
 390 static int nvme_tcp_init_admin_hctx(struct blk_mq_hw_ctx *hctx, void *data,
 391                 unsigned int hctx_idx)
 392 {
 393         struct nvme_tcp_ctrl *ctrl = data;
 394         struct nvme_tcp_queue *queue = &ctrl->queues[0];
 395
 396         hctx->driver_data = queue;
 397         return 0;
 398 }
 399
 400 static enum nvme_tcp_recv_state
 401 nvme_tcp_recv_state(struct nvme_tcp_queue *queue)
 402 {
 403         return  (queue->pdu_remaining) ? NVME_TCP_RECV_PDU :
 404                 (queue->ddgst_remaining) ? NVME_TCP_RECV_DDGST :
 405                 NVME_TCP_RECV_DATA;
 406 }
 407
 408 static void nvme_tcp_init_recv_ctx(struct nvme_tcp_queue *queue)
 409 {
 410         queue->pdu_remaining = sizeof(struct nvme_tcp_rsp_pdu) +
 411                                 nvme_tcp_hdgst_len(queue);
 412         queue->pdu_offset = 0;
 413         queue->data_remaining = -1;
 414         queue->ddgst_remaining = 0;
 415 }
 416
 417 static void nvme_tcp_error_recovery(struct nvme_ctrl *ctrl)
 418 {
 419         if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_RESETTING))
 420                 return;
 421
 422         queue_work(nvme_wq, &to_tcp_ctrl(ctrl)->err_work);
 423 }
 424
 425 static int nvme_tcp_process_nvme_cqe(struct nvme_tcp_queue *queue,
 426                 struct nvme_completion *cqe)
 427 {
 428         struct request *rq;
 429
 430         rq = blk_mq_tag_to_rq(nvme_tcp_tagset(queue), cqe->command_id);
 431         if (!rq) {
 432                 dev_err(queue->ctrl->ctrl.device,
 433                         "queue %d tag 0x%x not found\n",
 434                         nvme_tcp_queue_id(queue), cqe->command_id);
 435                 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
 436                 return -EINVAL;
 437         }
 438
 439         nvme_end_request(rq, cqe->status, cqe->result);
 440
 441         return 0;
 442 }
 443
 444 static int nvme_tcp_handle_c2h_data(struct nvme_tcp_queue *queue,
 445                 struct nvme_tcp_data_pdu *pdu)
 446 {
 447         struct request *rq;
 448
 449         rq = blk_mq_tag_to_rq(nvme_tcp_tagset(queue), pdu->command_id);
 450         if (!rq) {
 451                 dev_err(queue->ctrl->ctrl.device,
 452                         "queue %d tag %#x not found\n",
 453                         nvme_tcp_queue_id(queue), pdu->command_id);
 454                 return -ENOENT;
 455         }
 456
 457         if (!blk_rq_payload_bytes(rq)) {
 458                 dev_err(queue->ctrl->ctrl.device,
 459                         "queue %d tag %#x unexpected data\n",
 460                         nvme_tcp_queue_id(queue), rq->tag);
 461                 return -EIO;
 462         }
 463
 464         queue->data_remaining = le32_to_cpu(pdu->data_length);
 465
 466         if (pdu->hdr.flags & NVME_TCP_F_DATA_SUCCESS &&
 467             unlikely(!(pdu->hdr.flags & NVME_TCP_F_DATA_LAST))) {
 468                 dev_err(queue->ctrl->ctrl.device,
 469                         "queue %d tag %#x SUCCESS set but not last PDU\n",
 470                         nvme_tcp_queue_id(queue), rq->tag);
 471                 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
 472                 return -EPROTO;
 473         }
 474
 475         return 0;
 476
 477 }
 478
 479 static int nvme_tcp_handle_comp(struct nvme_tcp_queue *queue,
 480                 struct nvme_tcp_rsp_pdu *pdu)
 481 {
 482         struct nvme_completion *cqe = &pdu->cqe;
 483         int ret = 0;
 484
 485         /*
 486          * AEN requests are special as they don't time out and can
 487          * survive any kind of queue freeze and often don't respond to
 488          * aborts.  We don't even bother to allocate a struct request
 489          * for them but rather special case them here.
 490          */
 491         if (unlikely(nvme_tcp_queue_id(queue) == 0 &&
 492             cqe->command_id >= NVME_AQ_BLK_MQ_DEPTH))
 493                 nvme_complete_async_event(&queue->ctrl->ctrl, cqe->status,
 494                                 &cqe->result);
 495         else
 496                 ret = nvme_tcp_process_nvme_cqe(queue, cqe);
 497
 498         return ret;
 499 }
 500
 501 static int nvme_tcp_setup_h2c_data_pdu(struct nvme_tcp_request *req,
 502                 struct nvme_tcp_r2t_pdu *pdu)
 503 {
 504         struct nvme_tcp_data_pdu *data = req->pdu;
 505         struct nvme_tcp_queue *queue = req->queue;
 506         struct request *rq = blk_mq_rq_from_pdu(req);
 507         u8 hdgst = nvme_tcp_hdgst_len(queue);
 508         u8 ddgst = nvme_tcp_ddgst_len(queue);
 509
 510         req->pdu_len = le32_to_cpu(pdu->r2t_length);
 511         req->pdu_sent = 0;
 512
 513         if (unlikely(req->data_sent + req->pdu_len > req->data_len)) {
 514                 dev_err(queue->ctrl->ctrl.device,
 515                         "req %d r2t len %u exceeded data len %u (%zu sent)\n",
 516                         rq->tag, req->pdu_len, req->data_len,
 517                         req->data_sent);
 518                 return -EPROTO;
 519         }
 520
 521         if (unlikely(le32_to_cpu(pdu->r2t_offset) < req->data_sent)) {
 522                 dev_err(queue->ctrl->ctrl.device,
 523                         "req %d unexpected r2t offset %u (expected %zu)\n",
 524                         rq->tag, le32_to_cpu(pdu->r2t_offset),
 525                         req->data_sent);
 526                 return -EPROTO;
 527         }
 528
 529         memset(data, 0, sizeof(*data));
 530         data->hdr.type = nvme_tcp_h2c_data;
 531         data->hdr.flags = NVME_TCP_F_DATA_LAST;
 532         if (queue->hdr_digest)
 533                 data->hdr.flags |= NVME_TCP_F_HDGST;
 534         if (queue->data_digest)
 535                 data->hdr.flags |= NVME_TCP_F_DDGST;
 536         data->hdr.hlen = sizeof(*data);
 537         data->hdr.pdo = data->hdr.hlen + hdgst;
 538         data->hdr.plen =
 539                 cpu_to_le32(data->hdr.hlen + hdgst + req->pdu_len + ddgst);
 540         data->ttag = pdu->ttag;
 541         data->command_id = rq->tag;
 542         data->data_offset = cpu_to_le32(req->data_sent);
 543         data->data_length = cpu_to_le32(req->pdu_len);
 544         return 0;
 545 }
 546
 547 static int nvme_tcp_handle_r2t(struct nvme_tcp_queue *queue,
 548                 struct nvme_tcp_r2t_pdu *pdu)
 549 {
 550         struct nvme_tcp_request *req;
 551         struct request *rq;
 552         int ret;
 553
 554         rq = blk_mq_tag_to_rq(nvme_tcp_tagset(queue), pdu->command_id);
 555         if (!rq) {
 556                 dev_err(queue->ctrl->ctrl.device,
 557                         "queue %d tag %#x not found\n",
 558                         nvme_tcp_queue_id(queue), pdu->command_id);
 559                 return -ENOENT;
 560         }
 561         req = blk_mq_rq_to_pdu(rq);
 562
 563         ret = nvme_tcp_setup_h2c_data_pdu(req, pdu);
 564         if (unlikely(ret))
 565                 return ret;
 566
 567         req->state = NVME_TCP_SEND_H2C_PDU;
 568         req->offset = 0;
 569
 570         nvme_tcp_queue_request(req);
 571
 572         return 0;
 573 }
 574
 575 static int nvme_tcp_recv_pdu(struct nvme_tcp_queue *queue, struct sk_buff *skb,
 576                 unsigned int *offset, size_t *len)
 577 {
 578         struct nvme_tcp_hdr *hdr;
 579         char *pdu = queue->pdu;
 580         size_t rcv_len = min_t(size_t, *len, queue->pdu_remaining);
 581         int ret;
 582
 583         ret = skb_copy_bits(skb, *offset,
 584                 &pdu[queue->pdu_offset], rcv_len);
 585         if (unlikely(ret))
 586                 return ret;
 587
 588         queue->pdu_remaining -= rcv_len;
 589         queue->pdu_offset += rcv_len;
 590         *offset += rcv_len;
 591         *len -= rcv_len;
 592         if (queue->pdu_remaining)
 593                 return 0;
 594
 595         hdr = queue->pdu;
 596         if (queue->hdr_digest) {
 597                 ret = nvme_tcp_verify_hdgst(queue, queue->pdu, hdr->hlen);
 598                 if (unlikely(ret))
 599                         return ret;
 600         }
 601
 602
 603         if (queue->data_digest) {
 604                 ret = nvme_tcp_check_ddgst(queue, queue->pdu);
 605                 if (unlikely(ret))
 606                         return ret;
 607         }
 608
 609         switch (hdr->type) {
 610         case nvme_tcp_c2h_data:
 611                 ret = nvme_tcp_handle_c2h_data(queue, (void *)queue->pdu);
 612                 break;
 613         case nvme_tcp_rsp:
 614                 nvme_tcp_init_recv_ctx(queue);
 615                 ret = nvme_tcp_handle_comp(queue, (void *)queue->pdu);
 616                 break;
 617         case nvme_tcp_r2t:
 618                 nvme_tcp_init_recv_ctx(queue);
 619                 ret = nvme_tcp_handle_r2t(queue, (void *)queue->pdu);
 620                 break;
 621         default:
 622                 dev_err(queue->ctrl->ctrl.device,
 623                         "unsupported pdu type (%d)\n", hdr->type);
 624                 return -EINVAL;
 625         }
 626
 627         return ret;
 628 }
 629
 630 static inline void nvme_tcp_end_request(struct request *rq, u16 status)
 631 {
 632         union nvme_result res = {};
 633
 634         nvme_end_request(rq, cpu_to_le16(status << 1), res);
 635 }
 636
 637
 638 static int nvme_tcp_recv_data(struct nvme_tcp_queue *queue, struct sk_buff *skb,
 639                               unsigned int *offset, size_t *len)
 640 {
 641         struct nvme_tcp_data_pdu *pdu = (void *)queue->pdu;
 642         struct nvme_tcp_request *req;
 643         struct request *rq;
 644
 645         rq = blk_mq_tag_to_rq(nvme_tcp_tagset(queue), pdu->command_id);
 646         if (!rq) {
 647                 dev_err(queue->ctrl->ctrl.device,
 648                         "queue %d tag %#x not found\n",
 649                         nvme_tcp_queue_id(queue), pdu->command_id);
 650                 return -ENOENT;
 651         }
 652         req = blk_mq_rq_to_pdu(rq);
 653
 654         while (true) {
 655                 int recv_len, ret;
 656
 657                 recv_len = min_t(size_t, *len, queue->data_remaining);
 658                 if (!recv_len)
 659                         break;
 660
 661                 if (!iov_iter_count(&req->iter)) {
 662                         req->curr_bio = req->curr_bio->bi_next;
 663
 664                         /*
 665                          * If we don`t have any bios it means that controller
 666                          * sent more data than we requested, hence error
 667                          */
 668                         if (!req->curr_bio) {
 669                                 dev_err(queue->ctrl->ctrl.device,
 670                                         "queue %d no space in request %#x",
 671                                         nvme_tcp_queue_id(queue), rq->tag);
 672                                 nvme_tcp_init_recv_ctx(queue);
 673                                 return -EIO;
 674                         }
 675                         nvme_tcp_init_iter(req, READ);
 676                 }
 677
 678                 /* we can read only from what is left in this bio */
 679                 recv_len = min_t(size_t, recv_len,
 680                                 iov_iter_count(&req->iter));
 681
 682                 if (queue->data_digest)
 683                         ret = skb_copy_and_hash_datagram_iter(skb, *offset,
 684                                 &req->iter, recv_len, queue->rcv_hash);
 685                 else
 686                         ret = skb_copy_datagram_iter(skb, *offset,
 687                                         &req->iter, recv_len);
 688                 if (ret) {
 689                         dev_err(queue->ctrl->ctrl.device,
 690                                 "queue %d failed to copy request %#x data",
 691                                 nvme_tcp_queue_id(queue), rq->tag);
 692                         return ret;
 693                 }
 694
 695                 *len -= recv_len;
 696                 *offset += recv_len;
 697                 queue->data_remaining -= recv_len;
 698         }
 699
 700         if (!queue->data_remaining) {
 701                 if (queue->data_digest) {
 702                         nvme_tcp_ddgst_final(queue->rcv_hash, &queue->exp_ddgst);
 703                         queue->ddgst_remaining = NVME_TCP_DIGEST_LENGTH;
 704                 } else {
 705                         if (pdu->hdr.flags & NVME_TCP_F_DATA_SUCCESS)
 706                                 nvme_tcp_end_request(rq, NVME_SC_SUCCESS);
 707                         nvme_tcp_init_recv_ctx(queue);
 708                 }
 709         }
 710
 711         return 0;
 712 }
 713
 714 static int nvme_tcp_recv_ddgst(struct nvme_tcp_queue *queue,
 715                 struct sk_buff *skb, unsigned int *offset, size_t *len)
 716 {
 717         struct nvme_tcp_data_pdu *pdu = (void *)queue->pdu;
 718         char *ddgst = (char *)&queue->recv_ddgst;
 719         size_t recv_len = min_t(size_t, *len, queue->ddgst_remaining);
 720         off_t off = NVME_TCP_DIGEST_LENGTH - queue->ddgst_remaining;
 721         int ret;
 722
 723         ret = skb_copy_bits(skb, *offset, &ddgst[off], recv_len);
 724         if (unlikely(ret))
 725                 return ret;
 726
 727         queue->ddgst_remaining -= recv_len;
 728         *offset += recv_len;
 729         *len -= recv_len;
 730         if (queue->ddgst_remaining)
 731                 return 0;
 732
 733         if (queue->recv_ddgst != queue->exp_ddgst) {
 734                 dev_err(queue->ctrl->ctrl.device,
 735                         "data digest error: recv %#x expected %#x\n",
 736                         le32_to_cpu(queue->recv_ddgst),
 737                         le32_to_cpu(queue->exp_ddgst));
 738                 return -EIO;
 739         }
 740
 741         if (pdu->hdr.flags & NVME_TCP_F_DATA_SUCCESS) {
 742                 struct request *rq = blk_mq_tag_to_rq(nvme_tcp_tagset(queue),
 743                                                 pdu->command_id);
 744
 745                 nvme_tcp_end_request(rq, NVME_SC_SUCCESS);
 746         }
 747
 748         nvme_tcp_init_recv_ctx(queue);
 749         return 0;
 750 }
 751
 752 static int nvme_tcp_recv_skb(read_descriptor_t *desc, struct sk_buff *skb,
 753                              unsigned int offset, size_t len)
 754 {
 755         struct nvme_tcp_queue *queue = desc->arg.data;
 756         size_t consumed = len;
 757         int result;
 758
 759         while (len) {
 760                 switch (nvme_tcp_recv_state(queue)) {
 761                 case NVME_TCP_RECV_PDU:
 762                         result = nvme_tcp_recv_pdu(queue, skb, &offset, &len);
 763                         break;
 764                 case NVME_TCP_RECV_DATA:
 765                         result = nvme_tcp_recv_data(queue, skb, &offset, &len);
 766                         break;
 767                 case NVME_TCP_RECV_DDGST:
 768                         result = nvme_tcp_recv_ddgst(queue, skb, &offset, &len);
 769                         break;
 770                 default:
 771                         result = -EFAULT;
 772                 }
 773                 if (result) {
 774                         dev_err(queue->ctrl->ctrl.device,
 775                                 "receive failed:  %d\n", result);
 776                         queue->rd_enabled = false;
 777                         nvme_tcp_error_recovery(&queue->ctrl->ctrl);
 778                         return result;
 779                 }
 780         }
 781
 782         return consumed;
 783 }
 784
 785 static void nvme_tcp_data_ready(struct sock *sk)
 786 {
 787         struct nvme_tcp_queue *queue;
 788
 789         read_lock(&sk->sk_callback_lock);
 790         queue = sk->sk_user_data;
 791         if (likely(queue && queue->rd_enabled))
 792                 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
 793         read_unlock(&sk->sk_callback_lock);
 794 }
 795
 796 static void nvme_tcp_write_space(struct sock *sk)
 797 {
 798         struct nvme_tcp_queue *queue;
 799
 800         read_lock_bh(&sk->sk_callback_lock);
 801         queue = sk->sk_user_data;
 802         if (likely(queue && sk_stream_is_writeable(sk))) {
 803                 clear_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
 804                 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
 805         }
 806         read_unlock_bh(&sk->sk_callback_lock);
 807 }
 808
 809 static void nvme_tcp_state_change(struct sock *sk)
 810 {
 811         struct nvme_tcp_queue *queue;
 812
 813         read_lock(&sk->sk_callback_lock);
 814         queue = sk->sk_user_data;
 815         if (!queue)
 816                 goto done;
 817
 818         switch (sk->sk_state) {
 819         case TCP_CLOSE:
 820         case TCP_CLOSE_WAIT:
 821         case TCP_LAST_ACK:
 822         case TCP_FIN_WAIT1:
 823         case TCP_FIN_WAIT2:
 824                 /* fallthrough */
 825                 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
 826                 break;
 827         default:
 828                 dev_info(queue->ctrl->ctrl.device,
 829                         "queue %d socket state %d\n",
 830                         nvme_tcp_queue_id(queue), sk->sk_state);
 831         }
 832
 833         queue->state_change(sk);
 834 done:
 835         read_unlock(&sk->sk_callback_lock);
 836 }
 837
 838 static inline void nvme_tcp_done_send_req(struct nvme_tcp_queue *queue)
 839 {
 840         queue->request = NULL;
 841 }
 842
 843 static void nvme_tcp_fail_request(struct nvme_tcp_request *req)
 844 {
 845         nvme_tcp_end_request(blk_mq_rq_from_pdu(req), NVME_SC_DATA_XFER_ERROR);
 846 }
 847
 848 static int nvme_tcp_try_send_data(struct nvme_tcp_request *req)
 849 {
 850         struct nvme_tcp_queue *queue = req->queue;
 851
 852         while (true) {
 853                 struct page *page = nvme_tcp_req_cur_page(req);
 854                 size_t offset = nvme_tcp_req_cur_offset(req);
 855                 size_t len = nvme_tcp_req_cur_length(req);
 856                 bool last = nvme_tcp_pdu_last_send(req, len);
 857                 int ret, flags = MSG_DONTWAIT;
 858
 859                 if (last && !queue->data_digest)
 860                         flags |= MSG_EOR;
 861                 else
 862                         flags |= MSG_MORE;
 863
 864                 ret = kernel_sendpage(queue->sock, page, offset, len, flags);
 865                 if (ret <= 0)
 866                         return ret;
 867
 868                 nvme_tcp_advance_req(req, ret);
 869                 if (queue->data_digest)
 870                         nvme_tcp_ddgst_update(queue->snd_hash, page,
 871                                         offset, ret);
 872
 873                 /* fully successful last write*/
 874                 if (last && ret == len) {
 875                         if (queue->data_digest) {
 876                                 nvme_tcp_ddgst_final(queue->snd_hash,
 877                                         &req->ddgst);
 878                                 req->state = NVME_TCP_SEND_DDGST;
 879                                 req->offset = 0;
 880                         } else {
 881                                 nvme_tcp_done_send_req(queue);
 882                         }
 883                         return 1;
 884                 }
 885         }
 886         return -EAGAIN;
 887 }
 888
 889 static int nvme_tcp_try_send_cmd_pdu(struct nvme_tcp_request *req)
 890 {
 891         struct nvme_tcp_queue *queue = req->queue;
 892         struct nvme_tcp_cmd_pdu *pdu = req->pdu;
 893         bool inline_data = nvme_tcp_has_inline_data(req);
 894         int flags = MSG_DONTWAIT | (inline_data ? MSG_MORE : MSG_EOR);
 895         u8 hdgst = nvme_tcp_hdgst_len(queue);
 896         int len = sizeof(*pdu) + hdgst - req->offset;
 897         int ret;
 898
 899         if (queue->hdr_digest && !req->offset)
 900                 nvme_tcp_hdgst(queue->snd_hash, pdu, sizeof(*pdu));
 901
 902         ret = kernel_sendpage(queue->sock, virt_to_page(pdu),
 903                         offset_in_page(pdu) + req->offset, len,  flags);
 904         if (unlikely(ret <= 0))
 905                 return ret;
 906
 907         len -= ret;
 908         if (!len) {
 909                 if (inline_data) {
 910                         req->state = NVME_TCP_SEND_DATA;
 911                         if (queue->data_digest)
 912                                 crypto_ahash_init(queue->snd_hash);
 913                         nvme_tcp_init_iter(req, WRITE);
 914                 } else {
 915                         nvme_tcp_done_send_req(queue);
 916                 }
 917                 return 1;
 918         }
 919         req->offset += ret;
 920
 921         return -EAGAIN;
 922 }
 923
 924 static int nvme_tcp_try_send_data_pdu(struct nvme_tcp_request *req)
 925 {
 926         struct nvme_tcp_queue *queue = req->queue;
 927         struct nvme_tcp_data_pdu *pdu = req->pdu;
 928         u8 hdgst = nvme_tcp_hdgst_len(queue);
 929         int len = sizeof(*pdu) - req->offset + hdgst;
 930         int ret;
 931
 932         if (queue->hdr_digest && !req->offset)
 933                 nvme_tcp_hdgst(queue->snd_hash, pdu, sizeof(*pdu));
 934
 935         ret = kernel_sendpage(queue->sock, virt_to_page(pdu),
 936                         offset_in_page(pdu) + req->offset, len,
 937                         MSG_DONTWAIT | MSG_MORE);
 938         if (unlikely(ret <= 0))
 939                 return ret;
 940
 941         len -= ret;
 942         if (!len) {
 943                 req->state = NVME_TCP_SEND_DATA;
 944                 if (queue->data_digest)
 945                         crypto_ahash_init(queue->snd_hash);
 946                 if (!req->data_sent)
 947                         nvme_tcp_init_iter(req, WRITE);
 948                 return 1;
 949         }
 950         req->offset += ret;
 951
 952         return -EAGAIN;
 953 }
 954
 955 static int nvme_tcp_try_send_ddgst(struct nvme_tcp_request *req)
 956 {
 957         struct nvme_tcp_queue *queue = req->queue;
 958         int ret;
 959         struct msghdr msg = { .msg_flags = MSG_DONTWAIT | MSG_EOR };
 960         struct kvec iov = {
 961                 .iov_base = &req->ddgst + req->offset,
 962                 .iov_len = NVME_TCP_DIGEST_LENGTH - req->offset
 963         };
 964
 965         ret = kernel_sendmsg(queue->sock, &msg, &iov, 1, iov.iov_len);
 966         if (unlikely(ret <= 0))
 967                 return ret;
 968
 969         if (req->offset + ret == NVME_TCP_DIGEST_LENGTH) {
 970                 nvme_tcp_done_send_req(queue);
 971                 return 1;
 972         }
 973
 974         req->offset += ret;
 975         return -EAGAIN;
 976 }
 977
 978 static int nvme_tcp_try_send(struct nvme_tcp_queue *queue)
 979 {
 980         struct nvme_tcp_request *req;
 981         int ret = 1;
 982
 983         if (!queue->request) {
 984                 queue->request = nvme_tcp_fetch_request(queue);
 985                 if (!queue->request)
 986                         return 0;
 987         }
 988         req = queue->request;
 989
 990         if (req->state == NVME_TCP_SEND_CMD_PDU) {
 991                 ret = nvme_tcp_try_send_cmd_pdu(req);
 992                 if (ret <= 0)
 993                         goto done;
 994                 if (!nvme_tcp_has_inline_data(req))
 995                         return ret;
 996         }
 997
 998         if (req->state == NVME_TCP_SEND_H2C_PDU) {
 999                 ret = nvme_tcp_try_send_data_pdu(req);
1000                 if (ret <= 0)
1001                         goto done;
1002         }
1003
1004         if (req->state == NVME_TCP_SEND_DATA) {
1005                 ret = nvme_tcp_try_send_data(req);
1006                 if (ret <= 0)
1007                         goto done;
1008         }
1009
1010         if (req->state == NVME_TCP_SEND_DDGST)
1011                 ret = nvme_tcp_try_send_ddgst(req);
1012 done:
1013         if (ret == -EAGAIN)
1014                 ret = 0;
1015         return ret;
1016 }
1017
1018 static int nvme_tcp_try_recv(struct nvme_tcp_queue *queue)
1019 {
1020         struct sock *sk = queue->sock->sk;
1021         read_descriptor_t rd_desc;
1022         int consumed;
1023
1024         rd_desc.arg.data = queue;
1025         rd_desc.count = 1;
1026         lock_sock(sk);
1027         consumed = tcp_read_sock(sk, &rd_desc, nvme_tcp_recv_skb);
1028         release_sock(sk);
1029         return consumed;
1030 }
1031
1032 static void nvme_tcp_io_work(struct work_struct *w)
1033 {
1034         struct nvme_tcp_queue *queue =
1035                 container_of(w, struct nvme_tcp_queue, io_work);
1036         unsigned long start = jiffies + msecs_to_jiffies(1);
1037
1038         do {
1039                 bool pending = false;
1040                 int result;
1041
1042                 result = nvme_tcp_try_send(queue);
1043                 if (result > 0) {
1044                         pending = true;
1045                 } else if (unlikely(result < 0)) {
1046                         dev_err(queue->ctrl->ctrl.device,
1047                                 "failed to send request %d\n", result);
1048                         if (result != -EPIPE)
1049                                 nvme_tcp_fail_request(queue->request);
1050                         nvme_tcp_done_send_req(queue);
1051                         return;
1052                 }
1053
1054                 result = nvme_tcp_try_recv(queue);
1055                 if (result > 0)
1056                         pending = true;
1057
1058                 if (!pending)
1059                         return;
1060
1061         } while (time_after(jiffies, start)); /* quota is exhausted */
1062
1063         queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
1064 }
1065
1066 static void nvme_tcp_free_crypto(struct nvme_tcp_queue *queue)
1067 {
1068         struct crypto_ahash *tfm = crypto_ahash_reqtfm(queue->rcv_hash);
1069
1070         ahash_request_free(queue->rcv_hash);
1071         ahash_request_free(queue->snd_hash);
1072         crypto_free_ahash(tfm);
1073 }
1074
1075 static int nvme_tcp_alloc_crypto(struct nvme_tcp_queue *queue)
1076 {
1077         struct crypto_ahash *tfm;
1078
1079         tfm = crypto_alloc_ahash("crc32c", 0, CRYPTO_ALG_ASYNC);
1080         if (IS_ERR(tfm))
1081                 return PTR_ERR(tfm);
1082
1083         queue->snd_hash = ahash_request_alloc(tfm, GFP_KERNEL);
1084         if (!queue->snd_hash)
1085                 goto free_tfm;
1086         ahash_request_set_callback(queue->snd_hash, 0, NULL, NULL);
1087
1088         queue->rcv_hash = ahash_request_alloc(tfm, GFP_KERNEL);
1089         if (!queue->rcv_hash)
1090                 goto free_snd_hash;
1091         ahash_request_set_callback(queue->rcv_hash, 0, NULL, NULL);
1092
1093         return 0;
1094 free_snd_hash:
1095         ahash_request_free(queue->snd_hash);
1096 free_tfm:
1097         crypto_free_ahash(tfm);
1098         return -ENOMEM;
1099 }
1100
1101 static void nvme_tcp_free_async_req(struct nvme_tcp_ctrl *ctrl)
1102 {
1103         struct nvme_tcp_request *async = &ctrl->async_req;
1104
1105         page_frag_free(async->pdu);
1106 }
1107
1108 static int nvme_tcp_alloc_async_req(struct nvme_tcp_ctrl *ctrl)
1109 {
1110         struct nvme_tcp_queue *queue = &ctrl->queues[0];
1111         struct nvme_tcp_request *async = &ctrl->async_req;
1112         u8 hdgst = nvme_tcp_hdgst_len(queue);
1113
1114         async->pdu = page_frag_alloc(&queue->pf_cache,
1115                 sizeof(struct nvme_tcp_cmd_pdu) + hdgst,
1116                 GFP_KERNEL | __GFP_ZERO);
1117         if (!async->pdu)
1118                 return -ENOMEM;
1119
1120         async->queue = &ctrl->queues[0];
1121         return 0;
1122 }
1123
1124 static void nvme_tcp_free_queue(struct nvme_ctrl *nctrl, int qid)
1125 {
1126         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1127         struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1128
1129         if (!test_and_clear_bit(NVME_TCP_Q_ALLOCATED, &queue->flags))
1130                 return;
1131
1132         if (queue->hdr_digest || queue->data_digest)
1133                 nvme_tcp_free_crypto(queue);
1134
1135         sock_release(queue->sock);
1136         kfree(queue->pdu);
1137 }
1138
1139 static int nvme_tcp_init_connection(struct nvme_tcp_queue *queue)
1140 {
1141         struct nvme_tcp_icreq_pdu *icreq;
1142         struct nvme_tcp_icresp_pdu *icresp;
1143         struct msghdr msg = {};
1144         struct kvec iov;
1145         bool ctrl_hdgst, ctrl_ddgst;
1146         int ret;
1147
1148         icreq = kzalloc(sizeof(*icreq), GFP_KERNEL);
1149         if (!icreq)
1150                 return -ENOMEM;
1151
1152         icresp = kzalloc(sizeof(*icresp), GFP_KERNEL);
1153         if (!icresp) {
1154                 ret = -ENOMEM;
1155                 goto free_icreq;
1156         }
1157
1158         icreq->hdr.type = nvme_tcp_icreq;
1159         icreq->hdr.hlen = sizeof(*icreq);
1160         icreq->hdr.pdo = 0;
1161         icreq->hdr.plen = cpu_to_le32(icreq->hdr.hlen);
1162         icreq->pfv = cpu_to_le16(NVME_TCP_PFV_1_0);
1163         icreq->maxr2t = 0; /* single inflight r2t supported */
1164         icreq->hpda = 0; /* no alignment constraint */
1165         if (queue->hdr_digest)
1166                 icreq->digest |= NVME_TCP_HDR_DIGEST_ENABLE;
1167         if (queue->data_digest)
1168                 icreq->digest |= NVME_TCP_DATA_DIGEST_ENABLE;
1169
1170         iov.iov_base = icreq;
1171         iov.iov_len = sizeof(*icreq);
1172         ret = kernel_sendmsg(queue->sock, &msg, &iov, 1, iov.iov_len);
1173         if (ret < 0)
1174                 goto free_icresp;
1175
1176         memset(&msg, 0, sizeof(msg));
1177         iov.iov_base = icresp;
1178         iov.iov_len = sizeof(*icresp);
1179         ret = kernel_recvmsg(queue->sock, &msg, &iov, 1,
1180                         iov.iov_len, msg.msg_flags);
1181         if (ret < 0)
1182                 goto free_icresp;
1183
1184         ret = -EINVAL;
1185         if (icresp->hdr.type != nvme_tcp_icresp) {
1186                 pr_err("queue %d: bad type returned %d\n",
1187                         nvme_tcp_queue_id(queue), icresp->hdr.type);
1188                 goto free_icresp;
1189         }
1190
1191         if (le32_to_cpu(icresp->hdr.plen) != sizeof(*icresp)) {
1192                 pr_err("queue %d: bad pdu length returned %d\n",
1193                         nvme_tcp_queue_id(queue), icresp->hdr.plen);
1194                 goto free_icresp;
1195         }
1196
1197         if (icresp->pfv != NVME_TCP_PFV_1_0) {
1198                 pr_err("queue %d: bad pfv returned %d\n",
1199                         nvme_tcp_queue_id(queue), icresp->pfv);
1200                 goto free_icresp;
1201         }
1202
1203         ctrl_ddgst = !!(icresp->digest & NVME_TCP_DATA_DIGEST_ENABLE);
1204         if ((queue->data_digest && !ctrl_ddgst) ||
1205             (!queue->data_digest && ctrl_ddgst)) {
1206                 pr_err("queue %d: data digest mismatch host: %s ctrl: %s\n",
1207                         nvme_tcp_queue_id(queue),
1208                         queue->data_digest ? "enabled" : "disabled",
1209                         ctrl_ddgst ? "enabled" : "disabled");
1210                 goto free_icresp;
1211         }
1212
1213         ctrl_hdgst = !!(icresp->digest & NVME_TCP_HDR_DIGEST_ENABLE);
1214         if ((queue->hdr_digest && !ctrl_hdgst) ||
1215             (!queue->hdr_digest && ctrl_hdgst)) {
1216                 pr_err("queue %d: header digest mismatch host: %s ctrl: %s\n",
1217                         nvme_tcp_queue_id(queue),
1218                         queue->hdr_digest ? "enabled" : "disabled",
1219                         ctrl_hdgst ? "enabled" : "disabled");
1220                 goto free_icresp;
1221         }
1222
1223         if (icresp->cpda != 0) {
1224                 pr_err("queue %d: unsupported cpda returned %d\n",
1225                         nvme_tcp_queue_id(queue), icresp->cpda);
1226                 goto free_icresp;
1227         }
1228
1229         ret = 0;
1230 free_icresp:
1231         kfree(icresp);
1232 free_icreq:
1233         kfree(icreq);
1234         return ret;
1235 }
1236
1237 static int nvme_tcp_alloc_queue(struct nvme_ctrl *nctrl,
1238                 int qid, size_t queue_size)
1239 {
1240         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1241         struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1242         struct linger sol = { .l_onoff = 1, .l_linger = 0 };
1243         int ret, opt, rcv_pdu_size, n;
1244
1245         queue->ctrl = ctrl;
1246         INIT_LIST_HEAD(&queue->send_list);
1247         spin_lock_init(&queue->lock);
1248         INIT_WORK(&queue->io_work, nvme_tcp_io_work);
1249         queue->queue_size = queue_size;
1250
1251         if (qid > 0)
1252                 queue->cmnd_capsule_len = ctrl->ctrl.ioccsz * 16;
1253         else
1254                 queue->cmnd_capsule_len = sizeof(struct nvme_command) +
1255                                                 NVME_TCP_ADMIN_CCSZ;
1256
1257         ret = sock_create(ctrl->addr.ss_family, SOCK_STREAM,
1258                         IPPROTO_TCP, &queue->sock);
1259         if (ret) {
1260                 dev_err(ctrl->ctrl.device,
1261                         "failed to create socket: %d\n", ret);
1262                 return ret;
1263         }
1264
1265         /* Single syn retry */
1266         opt = 1;
1267         ret = kernel_setsockopt(queue->sock, IPPROTO_TCP, TCP_SYNCNT,
1268                         (char *)&opt, sizeof(opt));
1269         if (ret) {
1270                 dev_err(ctrl->ctrl.device,
1271                         "failed to set TCP_SYNCNT sock opt %d\n", ret);
1272                 goto err_sock;
1273         }
1274
1275         /* Set TCP no delay */
1276         opt = 1;
1277         ret = kernel_setsockopt(queue->sock, IPPROTO_TCP,
1278                         TCP_NODELAY, (char *)&opt, sizeof(opt));
1279         if (ret) {
1280                 dev_err(ctrl->ctrl.device,
1281                         "failed to set TCP_NODELAY sock opt %d\n", ret);
1282                 goto err_sock;
1283         }
1284
1285         /*
1286          * Cleanup whatever is sitting in the TCP transmit queue on socket
1287          * close. This is done to prevent stale data from being sent should
1288          * the network connection be restored before TCP times out.
1289          */
1290         ret = kernel_setsockopt(queue->sock, SOL_SOCKET, SO_LINGER,
1291                         (char *)&sol, sizeof(sol));
1292         if (ret) {
1293                 dev_err(ctrl->ctrl.device,
1294                         "failed to set SO_LINGER sock opt %d\n", ret);
1295                 goto err_sock;
1296         }
1297
1298         queue->sock->sk->sk_allocation = GFP_ATOMIC;
1299         if (!qid)
1300                 n = 0;
1301         else
1302                 n = (qid - 1) % num_online_cpus();
1303         queue->io_cpu = cpumask_next_wrap(n - 1, cpu_online_mask, -1, false);
1304         queue->request = NULL;
1305         queue->data_remaining = 0;
1306         queue->ddgst_remaining = 0;
1307         queue->pdu_remaining = 0;
1308         queue->pdu_offset = 0;
1309         sk_set_memalloc(queue->sock->sk);
1310
1311         if (ctrl->ctrl.opts->mask & NVMF_OPT_HOST_TRADDR) {
1312                 ret = kernel_bind(queue->sock, (struct sockaddr *)&ctrl->src_addr,
1313                         sizeof(ctrl->src_addr));
1314                 if (ret) {
1315                         dev_err(ctrl->ctrl.device,
1316                                 "failed to bind queue %d socket %d\n",
1317                                 qid, ret);
1318                         goto err_sock;
1319                 }
1320         }
1321
1322         queue->hdr_digest = nctrl->opts->hdr_digest;
1323         queue->data_digest = nctrl->opts->data_digest;
1324         if (queue->hdr_digest || queue->data_digest) {
1325                 ret = nvme_tcp_alloc_crypto(queue);
1326                 if (ret) {
1327                         dev_err(ctrl->ctrl.device,
1328                                 "failed to allocate queue %d crypto\n", qid);
1329                         goto err_sock;
1330                 }
1331         }
1332
1333         rcv_pdu_size = sizeof(struct nvme_tcp_rsp_pdu) +
1334                         nvme_tcp_hdgst_len(queue);
1335         queue->pdu = kmalloc(rcv_pdu_size, GFP_KERNEL);
1336         if (!queue->pdu) {
1337                 ret = -ENOMEM;
1338                 goto err_crypto;
1339         }
1340
1341         dev_dbg(ctrl->ctrl.device, "connecting queue %d\n",
1342                         nvme_tcp_queue_id(queue));
1343
1344         ret = kernel_connect(queue->sock, (struct sockaddr *)&ctrl->addr,
1345                 sizeof(ctrl->addr), 0);
1346         if (ret) {
1347                 dev_err(ctrl->ctrl.device,
1348                         "failed to connect socket: %d\n", ret);
1349                 goto err_rcv_pdu;
1350         }
1351
1352         ret = nvme_tcp_init_connection(queue);
1353         if (ret)
1354                 goto err_init_connect;
1355
1356         queue->rd_enabled = true;
1357         set_bit(NVME_TCP_Q_ALLOCATED, &queue->flags);
1358         nvme_tcp_init_recv_ctx(queue);
1359
1360         write_lock_bh(&queue->sock->sk->sk_callback_lock);
1361         queue->sock->sk->sk_user_data = queue;
1362         queue->state_change = queue->sock->sk->sk_state_change;
1363         queue->data_ready = queue->sock->sk->sk_data_ready;
1364         queue->write_space = queue->sock->sk->sk_write_space;
1365         queue->sock->sk->sk_data_ready = nvme_tcp_data_ready;
1366         queue->sock->sk->sk_state_change = nvme_tcp_state_change;
1367         queue->sock->sk->sk_write_space = nvme_tcp_write_space;
1368         write_unlock_bh(&queue->sock->sk->sk_callback_lock);
1369
1370         return 0;
1371
1372 err_init_connect:
1373         kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1374 err_rcv_pdu:
1375         kfree(queue->pdu);
1376 err_crypto:
1377         if (queue->hdr_digest || queue->data_digest)
1378                 nvme_tcp_free_crypto(queue);
1379 err_sock:
1380         sock_release(queue->sock);
1381         queue->sock = NULL;
1382         return ret;
1383 }
1384
1385 static void nvme_tcp_restore_sock_calls(struct nvme_tcp_queue *queue)
1386 {
1387         struct socket *sock = queue->sock;
1388
1389         write_lock_bh(&sock->sk->sk_callback_lock);
1390         sock->sk->sk_user_data  = NULL;
1391         sock->sk->sk_data_ready = queue->data_ready;
1392         sock->sk->sk_state_change = queue->state_change;
1393         sock->sk->sk_write_space  = queue->write_space;
1394         write_unlock_bh(&sock->sk->sk_callback_lock);
1395 }
1396
1397 static void __nvme_tcp_stop_queue(struct nvme_tcp_queue *queue)
1398 {
1399         kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1400         nvme_tcp_restore_sock_calls(queue);
1401         cancel_work_sync(&queue->io_work);
1402 }
1403
1404 static void nvme_tcp_stop_queue(struct nvme_ctrl *nctrl, int qid)
1405 {
1406         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1407         struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1408
1409         if (!test_and_clear_bit(NVME_TCP_Q_LIVE, &queue->flags))
1410                 return;
1411
1412         __nvme_tcp_stop_queue(queue);
1413 }
1414
1415 static int nvme_tcp_start_queue(struct nvme_ctrl *nctrl, int idx)
1416 {
1417         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1418         int ret;
1419
1420         if (idx)
1421                 ret = nvmf_connect_io_queue(nctrl, idx, false);
1422         else
1423                 ret = nvmf_connect_admin_queue(nctrl);
1424
1425         if (!ret) {
1426                 set_bit(NVME_TCP_Q_LIVE, &ctrl->queues[idx].flags);
1427         } else {
1428                 __nvme_tcp_stop_queue(&ctrl->queues[idx]);
1429                 dev_err(nctrl->device,
1430                         "failed to connect queue: %d ret=%d\n", idx, ret);
1431         }
1432         return ret;
1433 }
1434
1435 static struct blk_mq_tag_set *nvme_tcp_alloc_tagset(struct nvme_ctrl *nctrl,
1436                 bool admin)
1437 {
1438         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1439         struct blk_mq_tag_set *set;
1440         int ret;
1441
1442         if (admin) {
1443                 set = &ctrl->admin_tag_set;
1444                 memset(set, 0, sizeof(*set));
1445                 set->ops = &nvme_tcp_admin_mq_ops;
1446                 set->queue_depth = NVME_AQ_MQ_TAG_DEPTH;
1447                 set->reserved_tags = 2; /* connect + keep-alive */
1448                 set->numa_node = NUMA_NO_NODE;
1449                 set->cmd_size = sizeof(struct nvme_tcp_request);
1450                 set->driver_data = ctrl;
1451                 set->nr_hw_queues = 1;
1452                 set->timeout = ADMIN_TIMEOUT;
1453         } else {
1454                 set = &ctrl->tag_set;
1455                 memset(set, 0, sizeof(*set));
1456                 set->ops = &nvme_tcp_mq_ops;
1457                 set->queue_depth = nctrl->sqsize + 1;
1458                 set->reserved_tags = 1; /* fabric connect */
1459                 set->numa_node = NUMA_NO_NODE;
1460                 set->flags = BLK_MQ_F_SHOULD_MERGE;
1461                 set->cmd_size = sizeof(struct nvme_tcp_request);
1462                 set->driver_data = ctrl;
1463                 set->nr_hw_queues = nctrl->queue_count - 1;
1464                 set->timeout = NVME_IO_TIMEOUT;
1465                 set->nr_maps = 2 /* default + read */;
1466         }
1467
1468         ret = blk_mq_alloc_tag_set(set);
1469         if (ret)
1470                 return ERR_PTR(ret);
1471
1472         return set;
1473 }
1474
1475 static void nvme_tcp_free_admin_queue(struct nvme_ctrl *ctrl)
1476 {
1477         if (to_tcp_ctrl(ctrl)->async_req.pdu) {
1478                 nvme_tcp_free_async_req(to_tcp_ctrl(ctrl));
1479                 to_tcp_ctrl(ctrl)->async_req.pdu = NULL;
1480         }
1481
1482         nvme_tcp_free_queue(ctrl, 0);
1483 }
1484
1485 static void nvme_tcp_free_io_queues(struct nvme_ctrl *ctrl)
1486 {
1487         int i;
1488
1489         for (i = 1; i < ctrl->queue_count; i++)
1490                 nvme_tcp_free_queue(ctrl, i);
1491 }
1492
1493 static void nvme_tcp_stop_io_queues(struct nvme_ctrl *ctrl)
1494 {
1495         int i;
1496
1497         for (i = 1; i < ctrl->queue_count; i++)
1498                 nvme_tcp_stop_queue(ctrl, i);
1499 }
1500
1501 static int nvme_tcp_start_io_queues(struct nvme_ctrl *ctrl)
1502 {
1503         int i, ret = 0;
1504
1505         for (i = 1; i < ctrl->queue_count; i++) {
1506                 ret = nvme_tcp_start_queue(ctrl, i);
1507                 if (ret)
1508                         goto out_stop_queues;
1509         }
1510
1511         return 0;
1512
1513 out_stop_queues:
1514         for (i--; i >= 1; i--)
1515                 nvme_tcp_stop_queue(ctrl, i);
1516         return ret;
1517 }
1518
1519 static int nvme_tcp_alloc_admin_queue(struct nvme_ctrl *ctrl)
1520 {
1521         int ret;
1522
1523         ret = nvme_tcp_alloc_queue(ctrl, 0, NVME_AQ_DEPTH);
1524         if (ret)
1525                 return ret;
1526
1527         ret = nvme_tcp_alloc_async_req(to_tcp_ctrl(ctrl));
1528         if (ret)
1529                 goto out_free_queue;
1530
1531         return 0;
1532
1533 out_free_queue:
1534         nvme_tcp_free_queue(ctrl, 0);
1535         return ret;
1536 }
1537
1538 static int nvme_tcp_alloc_io_queues(struct nvme_ctrl *ctrl)
1539 {
1540         int i, ret;
1541
1542         for (i = 1; i < ctrl->queue_count; i++) {
1543                 ret = nvme_tcp_alloc_queue(ctrl, i,
1544                                 ctrl->sqsize + 1);
1545                 if (ret)
1546                         goto out_free_queues;
1547         }
1548
1549         return 0;
1550
1551 out_free_queues:
1552         for (i--; i >= 1; i--)
1553                 nvme_tcp_free_queue(ctrl, i);
1554
1555         return ret;
1556 }
1557
1558 static unsigned int nvme_tcp_nr_io_queues(struct nvme_ctrl *ctrl)
1559 {
1560         unsigned int nr_io_queues;
1561
1562         nr_io_queues = min(ctrl->opts->nr_io_queues, num_online_cpus());
1563         nr_io_queues += min(ctrl->opts->nr_write_queues, num_online_cpus());
1564
1565         return nr_io_queues;
1566 }
1567
1568 static int nvme_alloc_io_queues(struct nvme_ctrl *ctrl)
1569 {
1570         unsigned int nr_io_queues;
1571         int ret;
1572
1573         nr_io_queues = nvme_tcp_nr_io_queues(ctrl);
1574         ret = nvme_set_queue_count(ctrl, &nr_io_queues);
1575         if (ret)
1576                 return ret;
1577
1578         ctrl->queue_count = nr_io_queues + 1;
1579         if (ctrl->queue_count < 2)
1580                 return 0;
1581
1582         dev_info(ctrl->device,
1583                 "creating %d I/O queues.\n", nr_io_queues);
1584
1585         return nvme_tcp_alloc_io_queues(ctrl);
1586 }
1587
1588 static void nvme_tcp_destroy_io_queues(struct nvme_ctrl *ctrl, bool remove)
1589 {
1590         nvme_tcp_stop_io_queues(ctrl);
1591         if (remove) {
1592                 blk_cleanup_queue(ctrl->connect_q);
1593                 blk_mq_free_tag_set(ctrl->tagset);
1594         }
1595         nvme_tcp_free_io_queues(ctrl);
1596 }
1597
1598 static int nvme_tcp_configure_io_queues(struct nvme_ctrl *ctrl, bool new)
1599 {
1600         int ret;
1601
1602         ret = nvme_alloc_io_queues(ctrl);
1603         if (ret)
1604                 return ret;
1605
1606         if (new) {
1607                 ctrl->tagset = nvme_tcp_alloc_tagset(ctrl, false);
1608                 if (IS_ERR(ctrl->tagset)) {
1609                         ret = PTR_ERR(ctrl->tagset);
1610                         goto out_free_io_queues;
1611                 }
1612
1613                 ctrl->connect_q = blk_mq_init_queue(ctrl->tagset);
1614                 if (IS_ERR(ctrl->connect_q)) {
1615                         ret = PTR_ERR(ctrl->connect_q);
1616                         goto out_free_tag_set;
1617                 }
1618         } else {
1619                 blk_mq_update_nr_hw_queues(ctrl->tagset,
1620                         ctrl->queue_count - 1);
1621         }
1622
1623         ret = nvme_tcp_start_io_queues(ctrl);
1624         if (ret)
1625                 goto out_cleanup_connect_q;
1626
1627         return 0;
1628
1629 out_cleanup_connect_q:
1630         if (new)
1631                 blk_cleanup_queue(ctrl->connect_q);
1632 out_free_tag_set:
1633         if (new)
1634                 blk_mq_free_tag_set(ctrl->tagset);
1635 out_free_io_queues:
1636         nvme_tcp_free_io_queues(ctrl);
1637         return ret;
1638 }
1639
1640 static void nvme_tcp_destroy_admin_queue(struct nvme_ctrl *ctrl, bool remove)
1641 {
1642         nvme_tcp_stop_queue(ctrl, 0);
1643         if (remove) {
1644                 blk_cleanup_queue(ctrl->admin_q);
1645                 blk_mq_free_tag_set(ctrl->admin_tagset);
1646         }
1647         nvme_tcp_free_admin_queue(ctrl);
1648 }
1649
1650 static int nvme_tcp_configure_admin_queue(struct nvme_ctrl *ctrl, bool new)
1651 {
1652         int error;
1653
1654         error = nvme_tcp_alloc_admin_queue(ctrl);
1655         if (error)
1656                 return error;
1657
1658         if (new) {
1659                 ctrl->admin_tagset = nvme_tcp_alloc_tagset(ctrl, true);
1660                 if (IS_ERR(ctrl->admin_tagset)) {
1661                         error = PTR_ERR(ctrl->admin_tagset);
1662                         goto out_free_queue;
1663                 }
1664
1665                 ctrl->admin_q = blk_mq_init_queue(ctrl->admin_tagset);
1666                 if (IS_ERR(ctrl->admin_q)) {
1667                         error = PTR_ERR(ctrl->admin_q);
1668                         goto out_free_tagset;
1669                 }
1670         }
1671
1672         error = nvme_tcp_start_queue(ctrl, 0);
1673         if (error)
1674                 goto out_cleanup_queue;
1675
1676         error = ctrl->ops->reg_read64(ctrl, NVME_REG_CAP, &ctrl->cap);
1677         if (error) {
1678                 dev_err(ctrl->device,
1679                         "prop_get NVME_REG_CAP failed\n");
1680                 goto out_stop_queue;
1681         }
1682
1683         ctrl->sqsize = min_t(int, NVME_CAP_MQES(ctrl->cap), ctrl->sqsize);
1684
1685         error = nvme_enable_ctrl(ctrl, ctrl->cap);
1686         if (error)
1687                 goto out_stop_queue;
1688
1689         error = nvme_init_identify(ctrl);
1690         if (error)
1691                 goto out_stop_queue;
1692
1693         return 0;
1694
1695 out_stop_queue:
1696         nvme_tcp_stop_queue(ctrl, 0);
1697 out_cleanup_queue:
1698         if (new)
1699                 blk_cleanup_queue(ctrl->admin_q);
1700 out_free_tagset:
1701         if (new)
1702                 blk_mq_free_tag_set(ctrl->admin_tagset);
1703 out_free_queue:
1704         nvme_tcp_free_admin_queue(ctrl);
1705         return error;
1706 }
1707
1708 static void nvme_tcp_teardown_admin_queue(struct nvme_ctrl *ctrl,
1709                 bool remove)
1710 {
1711         blk_mq_quiesce_queue(ctrl->admin_q);
1712         nvme_tcp_stop_queue(ctrl, 0);
1713         blk_mq_tagset_busy_iter(ctrl->admin_tagset, nvme_cancel_request, ctrl);
1714         blk_mq_unquiesce_queue(ctrl->admin_q);
1715         nvme_tcp_destroy_admin_queue(ctrl, remove);
1716 }
1717
1718 static void nvme_tcp_teardown_io_queues(struct nvme_ctrl *ctrl,
1719                 bool remove)
1720 {
1721         if (ctrl->queue_count <= 1)
1722                 return;
1723         nvme_stop_queues(ctrl);
1724         nvme_tcp_stop_io_queues(ctrl);
1725         blk_mq_tagset_busy_iter(ctrl->tagset, nvme_cancel_request, ctrl);
1726         if (remove)
1727                 nvme_start_queues(ctrl);
1728         nvme_tcp_destroy_io_queues(ctrl, remove);
1729 }
1730
1731 static void nvme_tcp_reconnect_or_remove(struct nvme_ctrl *ctrl)
1732 {
1733         /* If we are resetting/deleting then do nothing */
1734         if (ctrl->state != NVME_CTRL_CONNECTING) {
1735                 WARN_ON_ONCE(ctrl->state == NVME_CTRL_NEW ||
1736                         ctrl->state == NVME_CTRL_LIVE);
1737                 return;
1738         }
1739
1740         if (nvmf_should_reconnect(ctrl)) {
1741                 dev_info(ctrl->device, "Reconnecting in %d seconds...\n",
1742                         ctrl->opts->reconnect_delay);
1743                 queue_delayed_work(nvme_wq, &to_tcp_ctrl(ctrl)->connect_work,
1744                                 ctrl->opts->reconnect_delay * HZ);
1745         } else {
1746                 dev_info(ctrl->device, "Removing controller...\n");
1747                 nvme_delete_ctrl(ctrl);
1748         }
1749 }
1750
1751 static int nvme_tcp_setup_ctrl(struct nvme_ctrl *ctrl, bool new)
1752 {
1753         struct nvmf_ctrl_options *opts = ctrl->opts;
1754         int ret = -EINVAL;
1755
1756         ret = nvme_tcp_configure_admin_queue(ctrl, new);
1757         if (ret)
1758                 return ret;
1759
1760         if (ctrl->icdoff) {
1761                 dev_err(ctrl->device, "icdoff is not supported!\n");
1762                 goto destroy_admin;
1763         }
1764
1765         if (opts->queue_size > ctrl->sqsize + 1)
1766                 dev_warn(ctrl->device,
1767                         "queue_size %zu > ctrl sqsize %u, clamping down\n",
1768                         opts->queue_size, ctrl->sqsize + 1);
1769
1770         if (ctrl->sqsize + 1 > ctrl->maxcmd) {
1771                 dev_warn(ctrl->device,
1772                         "sqsize %u > ctrl maxcmd %u, clamping down\n",
1773                         ctrl->sqsize + 1, ctrl->maxcmd);
1774                 ctrl->sqsize = ctrl->maxcmd - 1;
1775         }
1776
1777         if (ctrl->queue_count > 1) {
1778                 ret = nvme_tcp_configure_io_queues(ctrl, new);
1779                 if (ret)
1780                         goto destroy_admin;
1781         }
1782
1783         if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_LIVE)) {
1784                 /* state change failure is ok if we're in DELETING state */
1785                 WARN_ON_ONCE(ctrl->state != NVME_CTRL_DELETING);
1786                 ret = -EINVAL;
1787                 goto destroy_io;
1788         }
1789
1790         nvme_start_ctrl(ctrl);
1791         return 0;
1792
1793 destroy_io:
1794         if (ctrl->queue_count > 1)
1795                 nvme_tcp_destroy_io_queues(ctrl, new);
1796 destroy_admin:
1797         nvme_tcp_stop_queue(ctrl, 0);
1798         nvme_tcp_destroy_admin_queue(ctrl, new);
1799         return ret;
1800 }
1801
1802 static void nvme_tcp_reconnect_ctrl_work(struct work_struct *work)
1803 {
1804         struct nvme_tcp_ctrl *tcp_ctrl = container_of(to_delayed_work(work),
1805                         struct nvme_tcp_ctrl, connect_work);
1806         struct nvme_ctrl *ctrl = &tcp_ctrl->ctrl;
1807
1808         ++ctrl->nr_reconnects;
1809
1810         if (nvme_tcp_setup_ctrl(ctrl, false))
1811                 goto requeue;
1812
1813         dev_info(ctrl->device, "Successfully reconnected (%d attempt)\n",
1814                         ctrl->nr_reconnects);
1815
1816         ctrl->nr_reconnects = 0;
1817
1818         return;
1819
1820 requeue:
1821         dev_info(ctrl->device, "Failed reconnect attempt %d\n",
1822                         ctrl->nr_reconnects);
1823         nvme_tcp_reconnect_or_remove(ctrl);
1824 }
1825
1826 static void nvme_tcp_error_recovery_work(struct work_struct *work)
1827 {
1828         struct nvme_tcp_ctrl *tcp_ctrl = container_of(work,
1829                                 struct nvme_tcp_ctrl, err_work);
1830         struct nvme_ctrl *ctrl = &tcp_ctrl->ctrl;
1831
1832         nvme_stop_keep_alive(ctrl);
1833         nvme_tcp_teardown_io_queues(ctrl, false);
1834         /* unquiesce to fail fast pending requests */
1835         nvme_start_queues(ctrl);
1836         nvme_tcp_teardown_admin_queue(ctrl, false);
1837
1838         if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_CONNECTING)) {
1839                 /* state change failure is ok if we're in DELETING state */
1840                 WARN_ON_ONCE(ctrl->state != NVME_CTRL_DELETING);
1841                 return;
1842         }
1843
1844         nvme_tcp_reconnect_or_remove(ctrl);
1845 }
1846
1847 static void nvme_tcp_teardown_ctrl(struct nvme_ctrl *ctrl, bool shutdown)
1848 {
1849         cancel_work_sync(&to_tcp_ctrl(ctrl)->err_work);
1850         cancel_delayed_work_sync(&to_tcp_ctrl(ctrl)->connect_work);
1851
1852         nvme_tcp_teardown_io_queues(ctrl, shutdown);
1853         if (shutdown)
1854                 nvme_shutdown_ctrl(ctrl);
1855         else
1856                 nvme_disable_ctrl(ctrl, ctrl->cap);
1857         nvme_tcp_teardown_admin_queue(ctrl, shutdown);
1858 }
1859
1860 static void nvme_tcp_delete_ctrl(struct nvme_ctrl *ctrl)
1861 {
1862         nvme_tcp_teardown_ctrl(ctrl, true);
1863 }
1864
1865 static void nvme_reset_ctrl_work(struct work_struct *work)
1866 {
1867         struct nvme_ctrl *ctrl =
1868                 container_of(work, struct nvme_ctrl, reset_work);
1869
1870         nvme_stop_ctrl(ctrl);
1871         nvme_tcp_teardown_ctrl(ctrl, false);
1872
1873         if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_CONNECTING)) {
1874                 /* state change failure is ok if we're in DELETING state */
1875                 WARN_ON_ONCE(ctrl->state != NVME_CTRL_DELETING);
1876                 return;
1877         }
1878
1879         if (nvme_tcp_setup_ctrl(ctrl, false))
1880                 goto out_fail;
1881
1882         return;
1883
1884 out_fail:
1885         ++ctrl->nr_reconnects;
1886         nvme_tcp_reconnect_or_remove(ctrl);
1887 }
1888
1889 static void nvme_tcp_free_ctrl(struct nvme_ctrl *nctrl)
1890 {
1891         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1892
1893         if (list_empty(&ctrl->list))
1894                 goto free_ctrl;
1895
1896         mutex_lock(&nvme_tcp_ctrl_mutex);
1897         list_del(&ctrl->list);
1898         mutex_unlock(&nvme_tcp_ctrl_mutex);
1899
1900         nvmf_free_options(nctrl->opts);
1901 free_ctrl:
1902         kfree(ctrl->queues);
1903         kfree(ctrl);
1904 }
1905
1906 static void nvme_tcp_set_sg_null(struct nvme_command *c)
1907 {
1908         struct nvme_sgl_desc *sg = &c->common.dptr.sgl;
1909
1910         sg->addr = 0;
1911         sg->length = 0;
1912         sg->type = (NVME_TRANSPORT_SGL_DATA_DESC << 4) |
1913                         NVME_SGL_FMT_TRANSPORT_A;
1914 }
1915
1916 static void nvme_tcp_set_sg_inline(struct nvme_tcp_queue *queue,
1917                 struct nvme_command *c, u32 data_len)
1918 {
1919         struct nvme_sgl_desc *sg = &c->common.dptr.sgl;
1920
1921         sg->addr = cpu_to_le64(queue->ctrl->ctrl.icdoff);
1922         sg->length = cpu_to_le32(data_len);
1923         sg->type = (NVME_SGL_FMT_DATA_DESC << 4) | NVME_SGL_FMT_OFFSET;
1924 }
1925
1926 static void nvme_tcp_set_sg_host_data(struct nvme_command *c,
1927                 u32 data_len)
1928 {
1929         struct nvme_sgl_desc *sg = &c->common.dptr.sgl;
1930
1931         sg->addr = 0;
1932         sg->length = cpu_to_le32(data_len);
1933         sg->type = (NVME_TRANSPORT_SGL_DATA_DESC << 4) |
1934                         NVME_SGL_FMT_TRANSPORT_A;
1935 }
1936
1937 static void nvme_tcp_submit_async_event(struct nvme_ctrl *arg)
1938 {
1939         struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(arg);
1940         struct nvme_tcp_queue *queue = &ctrl->queues[0];
1941         struct nvme_tcp_cmd_pdu *pdu = ctrl->async_req.pdu;
1942         struct nvme_command *cmd = &pdu->cmd;
1943         u8 hdgst = nvme_tcp_hdgst_len(queue);
1944
1945         memset(pdu, 0, sizeof(*pdu));
1946         pdu->hdr.type = nvme_tcp_cmd;
1947         if (queue->hdr_digest)
1948                 pdu->hdr.flags |= NVME_TCP_F_HDGST;
1949         pdu->hdr.hlen = sizeof(*pdu);
1950         pdu->hdr.plen = cpu_to_le32(pdu->hdr.hlen + hdgst);
1951
1952         cmd->common.opcode = nvme_admin_async_event;
1953         cmd->common.command_id = NVME_AQ_BLK_MQ_DEPTH;
1954         cmd->common.flags |= NVME_CMD_SGL_METABUF;
1955         nvme_tcp_set_sg_null(cmd);
1956
1957         ctrl->async_req.state = NVME_TCP_SEND_CMD_PDU;
1958         ctrl->async_req.offset = 0;
1959         ctrl->async_req.curr_bio = NULL;
1960         ctrl->async_req.data_len = 0;
1961
1962         nvme_tcp_queue_request(&ctrl->async_req);
1963 }
1964
1965 static enum blk_eh_timer_return
1966 nvme_tcp_timeout(struct request *rq, bool reserved)
1967 {
1968         struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
1969         struct nvme_tcp_ctrl *ctrl = req->queue->ctrl;
1970         struct nvme_tcp_cmd_pdu *pdu = req->pdu;
1971
1972         dev_warn(ctrl->ctrl.device,
1973                 "queue %d: timeout request %#x type %d\n",
1974                 nvme_tcp_queue_id(req->queue), rq->tag, pdu->hdr.type);
1975
1976         if (ctrl->ctrl.state != NVME_CTRL_LIVE) {
1977                 /*
1978                  * Teardown immediately if controller times out while starting
1979                  * or we are already started error recovery. all outstanding
1980                  * requests are completed on shutdown, so we return BLK_EH_DONE.
1981                  */
1982                 flush_work(&ctrl->err_work);
1983                 nvme_tcp_teardown_io_queues(&ctrl->ctrl, false);
1984                 nvme_tcp_teardown_admin_queue(&ctrl->ctrl, false);
1985                 return BLK_EH_DONE;
1986         }
1987
1988         dev_warn(ctrl->ctrl.device, "starting error recovery\n");
1989         nvme_tcp_error_recovery(&ctrl->ctrl);
1990
1991         return BLK_EH_RESET_TIMER;
1992 }
1993
1994 static blk_status_t nvme_tcp_map_data(struct nvme_tcp_queue *queue,
1995                         struct request *rq)
1996 {
1997         struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
1998         struct nvme_tcp_cmd_pdu *pdu = req->pdu;
1999         struct nvme_command *c = &pdu->cmd;
2000
2001         c->common.flags |= NVME_CMD_SGL_METABUF;
2002
2003         if (rq_data_dir(rq) == WRITE && req->data_len &&
2004             req->data_len <= nvme_tcp_inline_data_size(queue))
2005                 nvme_tcp_set_sg_inline(queue, c, req->data_len);
2006         else
2007                 nvme_tcp_set_sg_host_data(c, req->data_len);
2008
2009         return 0;
2010 }
2011
2012 static blk_status_t nvme_tcp_setup_cmd_pdu(struct nvme_ns *ns,
2013                 struct request *rq)
2014 {
2015         struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2016         struct nvme_tcp_cmd_pdu *pdu = req->pdu;
2017         struct nvme_tcp_queue *queue = req->queue;
2018         u8 hdgst = nvme_tcp_hdgst_len(queue), ddgst = 0;
2019         blk_status_t ret;
2020
2021         ret = nvme_setup_cmd(ns, rq, &pdu->cmd);
2022         if (ret)
2023                 return ret;
2024
2025         req->state = NVME_TCP_SEND_CMD_PDU;
2026         req->offset = 0;
2027         req->data_sent = 0;
2028         req->pdu_len = 0;
2029         req->pdu_sent = 0;
2030         req->data_len = blk_rq_payload_bytes(rq);
2031         req->curr_bio = rq->bio;
2032
2033         if (rq_data_dir(rq) == WRITE &&
2034             req->data_len <= nvme_tcp_inline_data_size(queue))
2035                 req->pdu_len = req->data_len;
2036         else if (req->curr_bio)
2037                 nvme_tcp_init_iter(req, READ);
2038
2039         pdu->hdr.type = nvme_tcp_cmd;
2040         pdu->hdr.flags = 0;
2041         if (queue->hdr_digest)
2042                 pdu->hdr.flags |= NVME_TCP_F_HDGST;
2043         if (queue->data_digest && req->pdu_len) {
2044                 pdu->hdr.flags |= NVME_TCP_F_DDGST;
2045                 ddgst = nvme_tcp_ddgst_len(queue);
2046         }
2047         pdu->hdr.hlen = sizeof(*pdu);
2048         pdu->hdr.pdo = req->pdu_len ? pdu->hdr.hlen + hdgst : 0;
2049         pdu->hdr.plen =
2050                 cpu_to_le32(pdu->hdr.hlen + hdgst + req->pdu_len + ddgst);
2051
2052         ret = nvme_tcp_map_data(queue, rq);
2053         if (unlikely(ret)) {
2054                 dev_err(queue->ctrl->ctrl.device,
2055                         "Failed to map data (%d)\n", ret);
2056                 return ret;
2057         }
2058
2059         return 0;
2060 }
2061
2062 static blk_status_t nvme_tcp_queue_rq(struct blk_mq_hw_ctx *hctx,
2063                 const struct blk_mq_queue_data *bd)
2064 {
2065         struct nvme_ns *ns = hctx->queue->queuedata;
2066         struct nvme_tcp_queue *queue = hctx->driver_data;
2067         struct request *rq = bd->rq;
2068         struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2069         bool queue_ready = test_bit(NVME_TCP_Q_LIVE, &queue->flags);
2070         blk_status_t ret;
2071
2072         if (!nvmf_check_ready(&queue->ctrl->ctrl, rq, queue_ready))
2073                 return nvmf_fail_nonready_command(&queue->ctrl->ctrl, rq);
2074
2075         ret = nvme_tcp_setup_cmd_pdu(ns, rq);
2076         if (unlikely(ret))
2077                 return ret;
2078
2079         blk_mq_start_request(rq);
2080
2081         nvme_tcp_queue_request(req);
2082
2083         return BLK_STS_OK;
2084 }
2085
2086 static int nvme_tcp_map_queues(struct blk_mq_tag_set *set)
2087 {
2088         struct nvme_tcp_ctrl *ctrl = set->driver_data;
2089
2090         set->map[HCTX_TYPE_DEFAULT].queue_offset = 0;
2091         set->map[HCTX_TYPE_READ].nr_queues = ctrl->ctrl.opts->nr_io_queues;
2092         if (ctrl->ctrl.opts->nr_write_queues) {
2093                 /* separate read/write queues */
2094                 set->map[HCTX_TYPE_DEFAULT].nr_queues =
2095                                 ctrl->ctrl.opts->nr_write_queues;
2096                 set->map[HCTX_TYPE_READ].queue_offset =
2097                                 ctrl->ctrl.opts->nr_write_queues;
2098         } else {
2099                 /* mixed read/write queues */
2100                 set->map[HCTX_TYPE_DEFAULT].nr_queues =
2101                                 ctrl->ctrl.opts->nr_io_queues;
2102                 set->map[HCTX_TYPE_READ].queue_offset = 0;
2103         }
2104         blk_mq_map_queues(&set->map[HCTX_TYPE_DEFAULT]);
2105         blk_mq_map_queues(&set->map[HCTX_TYPE_READ]);
2106         return 0;
2107 }
2108
2109 static struct blk_mq_ops nvme_tcp_mq_ops = {
2110         .queue_rq       = nvme_tcp_queue_rq,
2111         .complete       = nvme_complete_rq,
2112         .init_request   = nvme_tcp_init_request,
2113         .exit_request   = nvme_tcp_exit_request,
2114         .init_hctx      = nvme_tcp_init_hctx,
2115         .timeout        = nvme_tcp_timeout,
2116         .map_queues     = nvme_tcp_map_queues,
2117 };
2118
2119 static struct blk_mq_ops nvme_tcp_admin_mq_ops = {
2120         .queue_rq       = nvme_tcp_queue_rq,
2121         .complete       = nvme_complete_rq,
2122         .init_request   = nvme_tcp_init_request,
2123         .exit_request   = nvme_tcp_exit_request,
2124         .init_hctx      = nvme_tcp_init_admin_hctx,
2125         .timeout        = nvme_tcp_timeout,
2126 };
2127
2128 static const struct nvme_ctrl_ops nvme_tcp_ctrl_ops = {
2129         .name                   = "tcp",
2130         .module                 = THIS_MODULE,
2131         .flags                  = NVME_F_FABRICS,
2132         .reg_read32             = nvmf_reg_read32,
2133         .reg_read64             = nvmf_reg_read64,
2134         .reg_write32            = nvmf_reg_write32,
2135         .free_ctrl              = nvme_tcp_free_ctrl,
2136         .submit_async_event     = nvme_tcp_submit_async_event,
2137         .delete_ctrl            = nvme_tcp_delete_ctrl,
2138         .get_address            = nvmf_get_address,
2139 };
2140
2141 static bool
2142 nvme_tcp_existing_controller(struct nvmf_ctrl_options *opts)
2143 {
2144         struct nvme_tcp_ctrl *ctrl;
2145         bool found = false;
2146
2147         mutex_lock(&nvme_tcp_ctrl_mutex);
2148         list_for_each_entry(ctrl, &nvme_tcp_ctrl_list, list) {
2149                 found = nvmf_ip_options_match(&ctrl->ctrl, opts);
2150                 if (found)
2151                         break;
2152         }
2153         mutex_unlock(&nvme_tcp_ctrl_mutex);
2154
2155         return found;
2156 }
2157
2158 static struct nvme_ctrl *nvme_tcp_create_ctrl(struct device *dev,
2159                 struct nvmf_ctrl_options *opts)
2160 {
2161         struct nvme_tcp_ctrl *ctrl;
2162         int ret;
2163
2164         ctrl = kzalloc(sizeof(*ctrl), GFP_KERNEL);
2165         if (!ctrl)
2166                 return ERR_PTR(-ENOMEM);
2167
2168         INIT_LIST_HEAD(&ctrl->list);
2169         ctrl->ctrl.opts = opts;
2170         ctrl->ctrl.queue_count = opts->nr_io_queues + opts->nr_write_queues + 1;
2171         ctrl->ctrl.sqsize = opts->queue_size - 1;
2172         ctrl->ctrl.kato = opts->kato;
2173
2174         INIT_DELAYED_WORK(&ctrl->connect_work,
2175                         nvme_tcp_reconnect_ctrl_work);
2176         INIT_WORK(&ctrl->err_work, nvme_tcp_error_recovery_work);
2177         INIT_WORK(&ctrl->ctrl.reset_work, nvme_reset_ctrl_work);
2178
2179         if (!(opts->mask & NVMF_OPT_TRSVCID)) {
2180                 opts->trsvcid =
2181                         kstrdup(__stringify(NVME_TCP_DISC_PORT), GFP_KERNEL);
2182                 if (!opts->trsvcid) {
2183                         ret = -ENOMEM;
2184                         goto out_free_ctrl;
2185                 }
2186                 opts->mask |= NVMF_OPT_TRSVCID;
2187         }
2188
2189         ret = inet_pton_with_scope(&init_net, AF_UNSPEC,
2190                         opts->traddr, opts->trsvcid, &ctrl->addr);
2191         if (ret) {
2192                 pr_err("malformed address passed: %s:%s\n",
2193                         opts->traddr, opts->trsvcid);
2194                 goto out_free_ctrl;
2195         }
2196
2197         if (opts->mask & NVMF_OPT_HOST_TRADDR) {
2198                 ret = inet_pton_with_scope(&init_net, AF_UNSPEC,
2199                         opts->host_traddr, NULL, &ctrl->src_addr);
2200                 if (ret) {
2201                         pr_err("malformed src address passed: %s\n",
2202                                opts->host_traddr);
2203                         goto out_free_ctrl;
2204                 }
2205         }
2206
2207         if (!opts->duplicate_connect && nvme_tcp_existing_controller(opts)) {
2208                 ret = -EALREADY;
2209                 goto out_free_ctrl;
2210         }
2211
2212         ctrl->queues = kcalloc(ctrl->ctrl.queue_count, sizeof(*ctrl->queues),
2213                                 GFP_KERNEL);
2214         if (!ctrl->queues) {
2215                 ret = -ENOMEM;
2216                 goto out_free_ctrl;
2217         }
2218
2219         ret = nvme_init_ctrl(&ctrl->ctrl, dev, &nvme_tcp_ctrl_ops, 0);
2220         if (ret)
2221                 goto out_kfree_queues;
2222
2223         if (!nvme_change_ctrl_state(&ctrl->ctrl, NVME_CTRL_CONNECTING)) {
2224                 WARN_ON_ONCE(1);
2225                 ret = -EINTR;
2226                 goto out_uninit_ctrl;
2227         }
2228
2229         ret = nvme_tcp_setup_ctrl(&ctrl->ctrl, true);
2230         if (ret)
2231                 goto out_uninit_ctrl;
2232
2233         dev_info(ctrl->ctrl.device, "new ctrl: NQN \"%s\", addr %pISp\n",
2234                 ctrl->ctrl.opts->subsysnqn, &ctrl->addr);
2235
2236         nvme_get_ctrl(&ctrl->ctrl);
2237
2238         mutex_lock(&nvme_tcp_ctrl_mutex);
2239         list_add_tail(&ctrl->list, &nvme_tcp_ctrl_list);
2240         mutex_unlock(&nvme_tcp_ctrl_mutex);
2241
2242         return &ctrl->ctrl;
2243
2244 out_uninit_ctrl:
2245         nvme_uninit_ctrl(&ctrl->ctrl);
2246         nvme_put_ctrl(&ctrl->ctrl);
2247         if (ret > 0)
2248                 ret = -EIO;
2249         return ERR_PTR(ret);
2250 out_kfree_queues:
2251         kfree(ctrl->queues);
2252 out_free_ctrl:
2253         kfree(ctrl);
2254         return ERR_PTR(ret);
2255 }
2256
2257 static struct nvmf_transport_ops nvme_tcp_transport = {
2258         .name           = "tcp",
2259         .module         = THIS_MODULE,
2260         .required_opts  = NVMF_OPT_TRADDR,
2261         .allowed_opts   = NVMF_OPT_TRSVCID | NVMF_OPT_RECONNECT_DELAY |
2262                           NVMF_OPT_HOST_TRADDR | NVMF_OPT_CTRL_LOSS_TMO |
2263                           NVMF_OPT_HDR_DIGEST | NVMF_OPT_DATA_DIGEST |
2264                           NVMF_OPT_NR_WRITE_QUEUES,
2265         .create_ctrl    = nvme_tcp_create_ctrl,
2266 };
2267
2268 static int __init nvme_tcp_init_module(void)
2269 {
2270         nvme_tcp_wq = alloc_workqueue("nvme_tcp_wq",
2271                         WQ_MEM_RECLAIM | WQ_HIGHPRI, 0);
2272         if (!nvme_tcp_wq)
2273                 return -ENOMEM;
2274
2275         nvmf_register_transport(&nvme_tcp_transport);
2276         return 0;
2277 }
2278
2279 static void __exit nvme_tcp_cleanup_module(void)
2280 {
2281         struct nvme_tcp_ctrl *ctrl;
2282
2283         nvmf_unregister_transport(&nvme_tcp_transport);
2284
2285         mutex_lock(&nvme_tcp_ctrl_mutex);
2286         list_for_each_entry(ctrl, &nvme_tcp_ctrl_list, list)
2287                 nvme_delete_ctrl(&ctrl->ctrl);
2288         mutex_unlock(&nvme_tcp_ctrl_mutex);
2289         flush_workqueue(nvme_delete_wq);
2290
2291         destroy_workqueue(nvme_tcp_wq);
2292 }
2293
2294 module_init(nvme_tcp_init_module);
2295 module_exit(nvme_tcp_cleanup_module);
2296
2297 MODULE_LICENSE("GPL v2");