1// SPDX-License-Identifier: GPL-2.0 or BSD-3-Clause
2
3/* Authors: Bernard Metzler <bmt@zurich.ibm.com> */
4/*          Fredy Neeser */
5/*          Greg Joyce <greg@opengridcomputing.com> */
6/* Copyright (c) 2008-2019, IBM Corporation */
7/* Copyright (c) 2017, Open Grid Computing, Inc. */
8
9#include <linux/errno.h>
10#include <linux/types.h>
11#include <linux/net.h>
12#include <linux/inetdevice.h>
13#include <net/addrconf.h>
14#include <linux/workqueue.h>
15#include <net/sock.h>
16#include <net/tcp.h>
17#include <linux/inet.h>
18#include <linux/tcp.h>
19#include <trace/events/sock.h>
20
21#include <rdma/iw_cm.h>
22#include <rdma/ib_verbs.h>
23#include <rdma/ib_user_verbs.h>
24
25#include "siw.h"
26#include "siw_cm.h"
27
28/*
29 * Set to any combination of
30 * MPA_V2_RDMA_NO_RTR, MPA_V2_RDMA_READ_RTR, MPA_V2_RDMA_WRITE_RTR
31 */
32static __be16 rtr_type = MPA_V2_RDMA_READ_RTR | MPA_V2_RDMA_WRITE_RTR;
33static const bool relaxed_ird_negotiation = true;
34
35static void siw_cm_llp_state_change(struct sock *s);
36static void siw_cm_llp_data_ready(struct sock *s);
37static void siw_cm_llp_write_space(struct sock *s);
38static void siw_cm_llp_error_report(struct sock *s);
39static int siw_cm_upcall(struct siw_cep *cep, enum iw_cm_event_type reason,
40			 int status);
41
42static void siw_sk_assign_cm_upcalls(struct sock *sk)
43{
44	write_lock_bh(&sk->sk_callback_lock);
45	sk->sk_state_change = siw_cm_llp_state_change;
46	sk->sk_data_ready = siw_cm_llp_data_ready;
47	sk->sk_write_space = siw_cm_llp_write_space;
48	sk->sk_error_report = siw_cm_llp_error_report;
49	write_unlock_bh(&sk->sk_callback_lock);
50}
51
52static void siw_sk_save_upcalls(struct sock *sk)
53{
54	struct siw_cep *cep = sk_to_cep(sk);
55
56	write_lock_bh(&sk->sk_callback_lock);
57	cep->sk_state_change = sk->sk_state_change;
58	cep->sk_data_ready = sk->sk_data_ready;
59	cep->sk_write_space = sk->sk_write_space;
60	cep->sk_error_report = sk->sk_error_report;
61	write_unlock_bh(&sk->sk_callback_lock);
62}
63
64static void siw_sk_restore_upcalls(struct sock *sk, struct siw_cep *cep)
65{
66	sk->sk_state_change = cep->sk_state_change;
67	sk->sk_data_ready = cep->sk_data_ready;
68	sk->sk_write_space = cep->sk_write_space;
69	sk->sk_error_report = cep->sk_error_report;
70	sk->sk_user_data = NULL;
71}
72
73static void siw_qp_socket_assoc(struct siw_cep *cep, struct siw_qp *qp)
74{
75	struct socket *s = cep->sock;
76	struct sock *sk = s->sk;
77
78	write_lock_bh(&sk->sk_callback_lock);
79
80	qp->attrs.sk = s;
81	sk->sk_data_ready = siw_qp_llp_data_ready;
82	sk->sk_write_space = siw_qp_llp_write_space;
83
84	write_unlock_bh(&sk->sk_callback_lock);
85}
86
87static void siw_socket_disassoc(struct socket *s)
88{
89	struct sock *sk = s->sk;
90	struct siw_cep *cep;
91
92	if (sk) {
93		write_lock_bh(&sk->sk_callback_lock);
94		cep = sk_to_cep(sk);
95		if (cep) {
96			siw_sk_restore_upcalls(sk, cep);
97			siw_cep_put(cep);
98		} else {
99			pr_warn("siw: cannot restore sk callbacks: no ep\n");
100		}
101		write_unlock_bh(&sk->sk_callback_lock);
102	} else {
103		pr_warn("siw: cannot restore sk callbacks: no sk\n");
104	}
105}
106
107static void siw_rtr_data_ready(struct sock *sk)
108{
109	struct siw_cep *cep;
110	struct siw_qp *qp = NULL;
111	read_descriptor_t rd_desc;
112
113	trace_sk_data_ready(sk);
114
115	read_lock(&sk->sk_callback_lock);
116
117	cep = sk_to_cep(sk);
118	if (!cep) {
119		WARN(1, "No connection endpoint\n");
120		goto out;
121	}
122	qp = sk_to_qp(sk);
123
124	memset(&rd_desc, 0, sizeof(rd_desc));
125	rd_desc.arg.data = qp;
126	rd_desc.count = 1;
127
128	tcp_read_sock(sk, &rd_desc, siw_tcp_rx_data);
129	/*
130	 * Check if first frame was successfully processed.
131	 * Signal connection full establishment if yes.
132	 * Failed data processing would have already scheduled
133	 * connection drop.
134	 */
135	if (!qp->rx_stream.rx_suspend)
136		siw_cm_upcall(cep, IW_CM_EVENT_ESTABLISHED, 0);
137out:
138	read_unlock(&sk->sk_callback_lock);
139	if (qp)
140		siw_qp_socket_assoc(cep, qp);
141}
142
143static void siw_sk_assign_rtr_upcalls(struct siw_cep *cep)
144{
145	struct sock *sk = cep->sock->sk;
146
147	write_lock_bh(&sk->sk_callback_lock);
148	sk->sk_data_ready = siw_rtr_data_ready;
149	sk->sk_write_space = siw_qp_llp_write_space;
150	write_unlock_bh(&sk->sk_callback_lock);
151}
152
153static void siw_cep_socket_assoc(struct siw_cep *cep, struct socket *s)
154{
155	cep->sock = s;
156	siw_cep_get(cep);
157	s->sk->sk_user_data = cep;
158
159	siw_sk_save_upcalls(s->sk);
160	siw_sk_assign_cm_upcalls(s->sk);
161}
162
163static struct siw_cep *siw_cep_alloc(struct siw_device *sdev)
164{
165	struct siw_cep *cep = kzalloc(sizeof(*cep), GFP_KERNEL);
166	unsigned long flags;
167
168	if (!cep)
169		return NULL;
170
171	INIT_LIST_HEAD(&cep->listenq);
172	INIT_LIST_HEAD(&cep->devq);
173	INIT_LIST_HEAD(&cep->work_freelist);
174
175	kref_init(&cep->ref);
176	cep->state = SIW_EPSTATE_IDLE;
177	init_waitqueue_head(&cep->waitq);
178	spin_lock_init(&cep->lock);
179	cep->sdev = sdev;
180	cep->enhanced_rdma_conn_est = false;
181
182	spin_lock_irqsave(&sdev->lock, flags);
183	list_add_tail(&cep->devq, &sdev->cep_list);
184	spin_unlock_irqrestore(&sdev->lock, flags);
185
186	siw_dbg_cep(cep, "new endpoint\n");
187	return cep;
188}
189
190static void siw_cm_free_work(struct siw_cep *cep)
191{
192	struct list_head *w, *tmp;
193	struct siw_cm_work *work;
194
195	list_for_each_safe(w, tmp, &cep->work_freelist) {
196		work = list_entry(w, struct siw_cm_work, list);
197		list_del(&work->list);
198		kfree(work);
199	}
200}
201
202static void siw_cancel_mpatimer(struct siw_cep *cep)
203{
204	spin_lock_bh(&cep->lock);
205	if (cep->mpa_timer) {
206		if (cancel_delayed_work(&cep->mpa_timer->work)) {
207			siw_cep_put(cep);
208			kfree(cep->mpa_timer); /* not needed again */
209		}
210		cep->mpa_timer = NULL;
211	}
212	spin_unlock_bh(&cep->lock);
213}
214
215static void siw_put_work(struct siw_cm_work *work)
216{
217	INIT_LIST_HEAD(&work->list);
218	spin_lock_bh(&work->cep->lock);
219	list_add(&work->list, &work->cep->work_freelist);
220	spin_unlock_bh(&work->cep->lock);
221}
222
223static void siw_cep_set_inuse(struct siw_cep *cep)
224{
225	unsigned long flags;
226retry:
227	spin_lock_irqsave(&cep->lock, flags);
228
229	if (cep->in_use) {
230		spin_unlock_irqrestore(&cep->lock, flags);
231		wait_event_interruptible(cep->waitq, !cep->in_use);
232		if (signal_pending(current))
233			flush_signals(current);
234		goto retry;
235	} else {
236		cep->in_use = 1;
237		spin_unlock_irqrestore(&cep->lock, flags);
238	}
239}
240
241static void siw_cep_set_free(struct siw_cep *cep)
242{
243	unsigned long flags;
244
245	spin_lock_irqsave(&cep->lock, flags);
246	cep->in_use = 0;
247	spin_unlock_irqrestore(&cep->lock, flags);
248
249	wake_up(&cep->waitq);
250}
251
252static void __siw_cep_dealloc(struct kref *ref)
253{
254	struct siw_cep *cep = container_of(ref, struct siw_cep, ref);
255	struct siw_device *sdev = cep->sdev;
256	unsigned long flags;
257
258	WARN_ON(cep->listen_cep);
259
260	/* kfree(NULL) is safe */
261	kfree(cep->mpa.pdata);
262	spin_lock_bh(&cep->lock);
263	if (!list_empty(&cep->work_freelist))
264		siw_cm_free_work(cep);
265	spin_unlock_bh(&cep->lock);
266
267	spin_lock_irqsave(&sdev->lock, flags);
268	list_del(&cep->devq);
269	spin_unlock_irqrestore(&sdev->lock, flags);
270
271	siw_dbg_cep(cep, "free endpoint\n");
272	kfree(cep);
273}
274
275static struct siw_cm_work *siw_get_work(struct siw_cep *cep)
276{
277	struct siw_cm_work *work = NULL;
278
279	spin_lock_bh(&cep->lock);
280	if (!list_empty(&cep->work_freelist)) {
281		work = list_entry(cep->work_freelist.next, struct siw_cm_work,
282				  list);
283		list_del_init(&work->list);
284	}
285	spin_unlock_bh(&cep->lock);
286	return work;
287}
288
289static int siw_cm_alloc_work(struct siw_cep *cep, int num)
290{
291	struct siw_cm_work *work;
292
293	while (num--) {
294		work = kmalloc(sizeof(*work), GFP_KERNEL);
295		if (!work) {
296			if (!(list_empty(&cep->work_freelist)))
297				siw_cm_free_work(cep);
298			return -ENOMEM;
299		}
300		work->cep = cep;
301		INIT_LIST_HEAD(&work->list);
302		list_add(&work->list, &cep->work_freelist);
303	}
304	return 0;
305}
306
307/*
308 * siw_cm_upcall()
309 *
310 * Upcall to IWCM to inform about async connection events
311 */
312static int siw_cm_upcall(struct siw_cep *cep, enum iw_cm_event_type reason,
313			 int status)
314{
315	struct iw_cm_event event;
316	struct iw_cm_id *id;
317
318	memset(&event, 0, sizeof(event));
319	event.status = status;
320	event.event = reason;
321
322	if (reason == IW_CM_EVENT_CONNECT_REQUEST) {
323		event.provider_data = cep;
324		id = cep->listen_cep->cm_id;
325	} else {
326		id = cep->cm_id;
327	}
328	/* Signal IRD and ORD */
329	if (reason == IW_CM_EVENT_ESTABLISHED ||
330	    reason == IW_CM_EVENT_CONNECT_REPLY) {
331		/* Signal negotiated IRD/ORD values we will use */
332		event.ird = cep->ird;
333		event.ord = cep->ord;
334	} else if (reason == IW_CM_EVENT_CONNECT_REQUEST) {
335		event.ird = cep->ord;
336		event.ord = cep->ird;
337	}
338	/* Signal private data and address information */
339	if (reason == IW_CM_EVENT_CONNECT_REQUEST ||
340	    reason == IW_CM_EVENT_CONNECT_REPLY) {
341		u16 pd_len = be16_to_cpu(cep->mpa.hdr.params.pd_len);
342
343		if (pd_len) {
344			/*
345			 * hand over MPA private data
346			 */
347			event.private_data_len = pd_len;
348			event.private_data = cep->mpa.pdata;
349
350			/* Hide MPA V2 IRD/ORD control */
351			if (cep->enhanced_rdma_conn_est) {
352				event.private_data_len -=
353					sizeof(struct mpa_v2_data);
354				event.private_data +=
355					sizeof(struct mpa_v2_data);
356			}
357		}
358		getname_local(cep->sock, &event.local_addr);
359		getname_peer(cep->sock, &event.remote_addr);
360	}
361	siw_dbg_cep(cep, "[QP %u]: reason=%d, status=%d\n",
362		    cep->qp ? qp_id(cep->qp) : UINT_MAX, reason, status);
363
364	return id->event_handler(id, &event);
365}
366
367/*
368 * siw_qp_cm_drop()
369 *
370 * Drops established LLP connection if present and not already
371 * scheduled for dropping. Called from user context, SQ workqueue
372 * or receive IRQ. Caller signals if socket can be immediately
373 * closed (basically, if not in IRQ).
374 */
375void siw_qp_cm_drop(struct siw_qp *qp, int schedule)
376{
377	struct siw_cep *cep = qp->cep;
378
379	qp->rx_stream.rx_suspend = 1;
380	qp->tx_ctx.tx_suspend = 1;
381
382	if (!qp->cep)
383		return;
384
385	if (schedule) {
386		siw_cm_queue_work(cep, SIW_CM_WORK_CLOSE_LLP);
387	} else {
388		siw_cep_set_inuse(cep);
389
390		if (cep->state == SIW_EPSTATE_CLOSED) {
391			siw_dbg_cep(cep, "already closed\n");
392			goto out;
393		}
394		siw_dbg_cep(cep, "immediate close, state %d\n", cep->state);
395
396		if (qp->term_info.valid)
397			siw_send_terminate(qp);
398
399		if (cep->cm_id) {
400			switch (cep->state) {
401			case SIW_EPSTATE_AWAIT_MPAREP:
402				siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY,
403					      -EINVAL);
404				break;
405
406			case SIW_EPSTATE_RDMA_MODE:
407				siw_cm_upcall(cep, IW_CM_EVENT_CLOSE, 0);
408				break;
409
410			case SIW_EPSTATE_IDLE:
411			case SIW_EPSTATE_LISTENING:
412			case SIW_EPSTATE_CONNECTING:
413			case SIW_EPSTATE_AWAIT_MPAREQ:
414			case SIW_EPSTATE_RECVD_MPAREQ:
415			case SIW_EPSTATE_CLOSED:
416			default:
417				break;
418			}
419			cep->cm_id->rem_ref(cep->cm_id);
420			cep->cm_id = NULL;
421			siw_cep_put(cep);
422		}
423		cep->state = SIW_EPSTATE_CLOSED;
424
425		if (cep->sock) {
426			siw_socket_disassoc(cep->sock);
427			/*
428			 * Immediately close socket
429			 */
430			sock_release(cep->sock);
431			cep->sock = NULL;
432		}
433		if (cep->qp) {
434			cep->qp = NULL;
435			siw_qp_put(qp);
436		}
437out:
438		siw_cep_set_free(cep);
439	}
440}
441
442void siw_cep_put(struct siw_cep *cep)
443{
444	WARN_ON(kref_read(&cep->ref) < 1);
445	kref_put(&cep->ref, __siw_cep_dealloc);
446}
447
448void siw_cep_get(struct siw_cep *cep)
449{
450	kref_get(&cep->ref);
451}
452
453/*
454 * Expects params->pd_len in host byte order
455 */
456static int siw_send_mpareqrep(struct siw_cep *cep, const void *pdata, u8 pd_len)
457{
458	struct socket *s = cep->sock;
459	struct mpa_rr *rr = &cep->mpa.hdr;
460	struct kvec iov[3];
461	struct msghdr msg;
462	int rv;
463	int iovec_num = 0;
464	int mpa_len;
465
466	memset(&msg, 0, sizeof(msg));
467
468	iov[iovec_num].iov_base = rr;
469	iov[iovec_num].iov_len = sizeof(*rr);
470	mpa_len = sizeof(*rr);
471
472	if (cep->enhanced_rdma_conn_est) {
473		iovec_num++;
474		iov[iovec_num].iov_base = &cep->mpa.v2_ctrl;
475		iov[iovec_num].iov_len = sizeof(cep->mpa.v2_ctrl);
476		mpa_len += sizeof(cep->mpa.v2_ctrl);
477	}
478	if (pd_len) {
479		iovec_num++;
480		iov[iovec_num].iov_base = (char *)pdata;
481		iov[iovec_num].iov_len = pd_len;
482		mpa_len += pd_len;
483	}
484	if (cep->enhanced_rdma_conn_est)
485		pd_len += sizeof(cep->mpa.v2_ctrl);
486
487	rr->params.pd_len = cpu_to_be16(pd_len);
488
489	rv = kernel_sendmsg(s, &msg, iov, iovec_num + 1, mpa_len);
490
491	return rv < 0 ? rv : 0;
492}
493
494/*
495 * Receive MPA Request/Reply header.
496 *
497 * Returns 0 if complete MPA Request/Reply header including
498 * eventual private data was received. Returns -EAGAIN if
499 * header was partially received or negative error code otherwise.
500 *
501 * Context: May be called in process context only
502 */
503static int siw_recv_mpa_rr(struct siw_cep *cep)
504{
505	struct mpa_rr *hdr = &cep->mpa.hdr;
506	struct socket *s = cep->sock;
507	u16 pd_len;
508	int rcvd, to_rcv;
509
510	if (cep->mpa.bytes_rcvd < sizeof(struct mpa_rr)) {
511		rcvd = ksock_recv(s, (char *)hdr + cep->mpa.bytes_rcvd,
512				  sizeof(struct mpa_rr) - cep->mpa.bytes_rcvd,
513				  0);
514		if (rcvd <= 0)
515			return -ECONNABORTED;
516
517		cep->mpa.bytes_rcvd += rcvd;
518
519		if (cep->mpa.bytes_rcvd < sizeof(struct mpa_rr))
520			return -EAGAIN;
521
522		if (be16_to_cpu(hdr->params.pd_len) > MPA_MAX_PRIVDATA)
523			return -EPROTO;
524	}
525	pd_len = be16_to_cpu(hdr->params.pd_len);
526
527	/*
528	 * At least the MPA Request/Reply header (frame not including
529	 * private data) has been received.
530	 * Receive (or continue receiving) any private data.
531	 */
532	to_rcv = pd_len - (cep->mpa.bytes_rcvd - sizeof(struct mpa_rr));
533
534	if (!to_rcv) {
535		/*
536		 * We must have hdr->params.pd_len == 0 and thus received a
537		 * complete MPA Request/Reply frame.
538		 * Check against peer protocol violation.
539		 */
540		u32 word;
541
542		rcvd = ksock_recv(s, (char *)&word, sizeof(word), MSG_DONTWAIT);
543		if (rcvd == -EAGAIN)
544			return 0;
545
546		if (rcvd == 0) {
547			siw_dbg_cep(cep, "peer EOF\n");
548			return -EPIPE;
549		}
550		if (rcvd < 0) {
551			siw_dbg_cep(cep, "error: %d\n", rcvd);
552			return rcvd;
553		}
554		siw_dbg_cep(cep, "peer sent extra data: %d\n", rcvd);
555
556		return -EPROTO;
557	}
558
559	/*
560	 * At this point, we must have hdr->params.pd_len != 0.
561	 * A private data buffer gets allocated if hdr->params.pd_len != 0.
562	 */
563	if (!cep->mpa.pdata) {
564		cep->mpa.pdata = kmalloc(pd_len + 4, GFP_KERNEL);
565		if (!cep->mpa.pdata)
566			return -ENOMEM;
567	}
568	rcvd = ksock_recv(
569		s, cep->mpa.pdata + cep->mpa.bytes_rcvd - sizeof(struct mpa_rr),
570		to_rcv + 4, MSG_DONTWAIT);
571
572	if (rcvd < 0)
573		return rcvd;
574
575	if (rcvd > to_rcv)
576		return -EPROTO;
577
578	cep->mpa.bytes_rcvd += rcvd;
579
580	if (to_rcv == rcvd) {
581		siw_dbg_cep(cep, "%d bytes private data received\n", pd_len);
582		return 0;
583	}
584	return -EAGAIN;
585}
586
587/*
588 * siw_proc_mpareq()
589 *
590 * Read MPA Request from socket and signal new connection to IWCM
591 * if success. Caller must hold lock on corresponding listening CEP.
592 */
593static int siw_proc_mpareq(struct siw_cep *cep)
594{
595	struct mpa_rr *req;
596	int version, rv;
597	u16 pd_len;
598
599	rv = siw_recv_mpa_rr(cep);
600	if (rv)
601		return rv;
602
603	req = &cep->mpa.hdr;
604
605	version = __mpa_rr_revision(req->params.bits);
606	pd_len = be16_to_cpu(req->params.pd_len);
607
608	if (version > MPA_REVISION_2)
609		/* allow for 0, 1, and 2 only */
610		return -EPROTO;
611
612	if (memcmp(req->key, MPA_KEY_REQ, 16))
613		return -EPROTO;
614
615	/* Prepare for sending MPA reply */
616	memcpy(req->key, MPA_KEY_REP, 16);
617
618	if (version == MPA_REVISION_2 &&
619	    (req->params.bits & MPA_RR_FLAG_ENHANCED)) {
620		/*
621		 * MPA version 2 must signal IRD/ORD values and P2P mode
622		 * in private data if header flag MPA_RR_FLAG_ENHANCED
623		 * is set.
624		 */
625		if (pd_len < sizeof(struct mpa_v2_data))
626			goto reject_conn;
627
628		cep->enhanced_rdma_conn_est = true;
629	}
630
631	/* MPA Markers: currently not supported. Marker TX to be added. */
632	if (req->params.bits & MPA_RR_FLAG_MARKERS)
633		goto reject_conn;
634
635	if (req->params.bits & MPA_RR_FLAG_CRC) {
636		/*
637		 * RFC 5044, page 27: CRC MUST be used if peer requests it.
638		 * siw specific: 'mpa_crc_strict' parameter to reject
639		 * connection with CRC if local CRC off enforced by
640		 * 'mpa_crc_strict' module parameter.
641		 */
642		if (!mpa_crc_required && mpa_crc_strict)
643			goto reject_conn;
644
645		/* Enable CRC if requested by module parameter */
646		if (mpa_crc_required)
647			req->params.bits |= MPA_RR_FLAG_CRC;
648	}
649	if (cep->enhanced_rdma_conn_est) {
650		struct mpa_v2_data *v2 = (struct mpa_v2_data *)cep->mpa.pdata;
651
652		/*
653		 * Peer requested ORD becomes requested local IRD,
654		 * peer requested IRD becomes requested local ORD.
655		 * IRD and ORD get limited by global maximum values.
656		 */
657		cep->ord = ntohs(v2->ird) & MPA_IRD_ORD_MASK;
658		cep->ord = min(cep->ord, SIW_MAX_ORD_QP);
659		cep->ird = ntohs(v2->ord) & MPA_IRD_ORD_MASK;
660		cep->ird = min(cep->ird, SIW_MAX_IRD_QP);
661
662		/* May get overwritten by locally negotiated values */
663		cep->mpa.v2_ctrl.ird = htons(cep->ird);
664		cep->mpa.v2_ctrl.ord = htons(cep->ord);
665
666		/*
667		 * Support for peer sent zero length Write or Read to
668		 * let local side enter RTS. Writes are preferred.
669		 * Sends would require pre-posting a Receive and are
670		 * not supported.
671		 * Propose zero length Write if none of Read and Write
672		 * is indicated.
673		 */
674		if (v2->ird & MPA_V2_PEER_TO_PEER) {
675			cep->mpa.v2_ctrl.ird |= MPA_V2_PEER_TO_PEER;
676
677			if (v2->ord & MPA_V2_RDMA_WRITE_RTR)
678				cep->mpa.v2_ctrl.ord |= MPA_V2_RDMA_WRITE_RTR;
679			else if (v2->ord & MPA_V2_RDMA_READ_RTR)
680				cep->mpa.v2_ctrl.ord |= MPA_V2_RDMA_READ_RTR;
681			else
682				cep->mpa.v2_ctrl.ord |= MPA_V2_RDMA_WRITE_RTR;
683		}
684	}
685
686	cep->state = SIW_EPSTATE_RECVD_MPAREQ;
687
688	/* Keep reference until IWCM accepts/rejects */
689	siw_cep_get(cep);
690	rv = siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REQUEST, 0);
691	if (rv)
692		siw_cep_put(cep);
693
694	return rv;
695
696reject_conn:
697	siw_dbg_cep(cep, "reject: crc %d:%d:%d, m %d:%d\n",
698		    req->params.bits & MPA_RR_FLAG_CRC ? 1 : 0,
699		    mpa_crc_required, mpa_crc_strict,
700		    req->params.bits & MPA_RR_FLAG_MARKERS ? 1 : 0, 0);
701
702	req->params.bits &= ~MPA_RR_FLAG_MARKERS;
703	req->params.bits |= MPA_RR_FLAG_REJECT;
704
705	if (!mpa_crc_required && mpa_crc_strict)
706		req->params.bits &= ~MPA_RR_FLAG_CRC;
707
708	if (pd_len)
709		kfree(cep->mpa.pdata);
710
711	cep->mpa.pdata = NULL;
712
713	siw_send_mpareqrep(cep, NULL, 0);
714
715	return -EOPNOTSUPP;
716}
717
718static int siw_proc_mpareply(struct siw_cep *cep)
719{
720	struct siw_qp_attrs qp_attrs;
721	enum siw_qp_attr_mask qp_attr_mask;
722	struct siw_qp *qp = cep->qp;
723	struct mpa_rr *rep;
724	int rv;
725	u16 rep_ord;
726	u16 rep_ird;
727	bool ird_insufficient = false;
728	enum mpa_v2_ctrl mpa_p2p_mode = MPA_V2_RDMA_NO_RTR;
729
730	rv = siw_recv_mpa_rr(cep);
731	if (rv)
732		goto out_err;
733
734	siw_cancel_mpatimer(cep);
735
736	rep = &cep->mpa.hdr;
737
738	if (__mpa_rr_revision(rep->params.bits) > MPA_REVISION_2) {
739		/* allow for 0, 1,  and 2 only */
740		rv = -EPROTO;
741		goto out_err;
742	}
743	if (memcmp(rep->key, MPA_KEY_REP, 16)) {
744		siw_init_terminate(qp, TERM_ERROR_LAYER_LLP, LLP_ETYPE_MPA,
745				   LLP_ECODE_INVALID_REQ_RESP, 0);
746		siw_send_terminate(qp);
747		rv = -EPROTO;
748		goto out_err;
749	}
750	if (rep->params.bits & MPA_RR_FLAG_REJECT) {
751		siw_dbg_cep(cep, "got mpa reject\n");
752		siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY, -ECONNRESET);
753
754		return -ECONNRESET;
755	}
756	if (try_gso && rep->params.bits & MPA_RR_FLAG_GSO_EXP) {
757		siw_dbg_cep(cep, "peer allows GSO on TX\n");
758		qp->tx_ctx.gso_seg_limit = 0;
759	}
760	if ((rep->params.bits & MPA_RR_FLAG_MARKERS) ||
761	    (mpa_crc_required && !(rep->params.bits & MPA_RR_FLAG_CRC)) ||
762	    (mpa_crc_strict && !mpa_crc_required &&
763	     (rep->params.bits & MPA_RR_FLAG_CRC))) {
764		siw_dbg_cep(cep, "reply unsupp: crc %d:%d:%d, m %d:%d\n",
765			    rep->params.bits & MPA_RR_FLAG_CRC ? 1 : 0,
766			    mpa_crc_required, mpa_crc_strict,
767			    rep->params.bits & MPA_RR_FLAG_MARKERS ? 1 : 0, 0);
768
769		siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY, -ECONNREFUSED);
770
771		return -EINVAL;
772	}
773	if (cep->enhanced_rdma_conn_est) {
774		struct mpa_v2_data *v2;
775
776		if (__mpa_rr_revision(rep->params.bits) < MPA_REVISION_2 ||
777		    !(rep->params.bits & MPA_RR_FLAG_ENHANCED)) {
778			/*
779			 * Protocol failure: The responder MUST reply with
780			 * MPA version 2 and MUST set MPA_RR_FLAG_ENHANCED.
781			 */
782			siw_dbg_cep(cep, "mpa reply error: vers %d, enhcd %d\n",
783				    __mpa_rr_revision(rep->params.bits),
784				    rep->params.bits & MPA_RR_FLAG_ENHANCED ?
785					    1 :
786					    0);
787
788			siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY,
789				      -ECONNRESET);
790			return -EINVAL;
791		}
792		v2 = (struct mpa_v2_data *)cep->mpa.pdata;
793		rep_ird = ntohs(v2->ird) & MPA_IRD_ORD_MASK;
794		rep_ord = ntohs(v2->ord) & MPA_IRD_ORD_MASK;
795
796		if (cep->ird < rep_ord &&
797		    (relaxed_ird_negotiation == false ||
798		     rep_ord > cep->sdev->attrs.max_ird)) {
799			siw_dbg_cep(cep, "ird %d, rep_ord %d, max_ord %d\n",
800				    cep->ird, rep_ord,
801				    cep->sdev->attrs.max_ord);
802			ird_insufficient = true;
803		}
804		if (cep->ord > rep_ird && relaxed_ird_negotiation == false) {
805			siw_dbg_cep(cep, "ord %d, rep_ird %d\n", cep->ord,
806				    rep_ird);
807			ird_insufficient = true;
808		}
809		/*
810		 * Always report negotiated peer values to user,
811		 * even if IRD/ORD negotiation failed
812		 */
813		cep->ird = rep_ord;
814		cep->ord = rep_ird;
815
816		if (ird_insufficient) {
817			/*
818			 * If the initiator IRD is insuffient for the
819			 * responder ORD, send a TERM.
820			 */
821			siw_init_terminate(qp, TERM_ERROR_LAYER_LLP,
822					   LLP_ETYPE_MPA,
823					   LLP_ECODE_INSUFFICIENT_IRD, 0);
824			siw_send_terminate(qp);
825			rv = -ENOMEM;
826			goto out_err;
827		}
828		if (cep->mpa.v2_ctrl_req.ird & MPA_V2_PEER_TO_PEER)
829			mpa_p2p_mode =
830				cep->mpa.v2_ctrl_req.ord &
831				(MPA_V2_RDMA_WRITE_RTR | MPA_V2_RDMA_READ_RTR);
832
833		/*
834		 * Check if we requested P2P mode, and if peer agrees
835		 */
836		if (mpa_p2p_mode != MPA_V2_RDMA_NO_RTR) {
837			if ((mpa_p2p_mode & v2->ord) == 0) {
838				/*
839				 * We requested RTR mode(s), but the peer
840				 * did not pick any mode we support.
841				 */
842				siw_dbg_cep(cep,
843					    "rtr mode:  req %2x, got %2x\n",
844					    mpa_p2p_mode,
845					    v2->ord & (MPA_V2_RDMA_WRITE_RTR |
846						       MPA_V2_RDMA_READ_RTR));
847
848				siw_init_terminate(qp, TERM_ERROR_LAYER_LLP,
849						   LLP_ETYPE_MPA,
850						   LLP_ECODE_NO_MATCHING_RTR,
851						   0);
852				siw_send_terminate(qp);
853				rv = -EPROTO;
854				goto out_err;
855			}
856			mpa_p2p_mode = v2->ord & (MPA_V2_RDMA_WRITE_RTR |
857						  MPA_V2_RDMA_READ_RTR);
858		}
859	}
860	memset(&qp_attrs, 0, sizeof(qp_attrs));
861
862	if (rep->params.bits & MPA_RR_FLAG_CRC)
863		qp_attrs.flags = SIW_MPA_CRC;
864
865	qp_attrs.irq_size = cep->ird;
866	qp_attrs.orq_size = cep->ord;
867	qp_attrs.sk = cep->sock;
868	qp_attrs.state = SIW_QP_STATE_RTS;
869
870	qp_attr_mask = SIW_QP_ATTR_STATE | SIW_QP_ATTR_LLP_HANDLE |
871		       SIW_QP_ATTR_ORD | SIW_QP_ATTR_IRD | SIW_QP_ATTR_MPA;
872
873	/* Move socket RX/TX under QP control */
874	down_write(&qp->state_lock);
875	if (qp->attrs.state > SIW_QP_STATE_RTR) {
876		rv = -EINVAL;
877		up_write(&qp->state_lock);
878		goto out_err;
879	}
880	rv = siw_qp_modify(qp, &qp_attrs, qp_attr_mask);
881
882	siw_qp_socket_assoc(cep, qp);
883
884	up_write(&qp->state_lock);
885
886	/* Send extra RDMA frame to trigger peer RTS if negotiated */
887	if (mpa_p2p_mode != MPA_V2_RDMA_NO_RTR) {
888		rv = siw_qp_mpa_rts(qp, mpa_p2p_mode);
889		if (rv)
890			goto out_err;
891	}
892	if (!rv) {
893		rv = siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY, 0);
894		if (!rv)
895			cep->state = SIW_EPSTATE_RDMA_MODE;
896
897		return 0;
898	}
899
900out_err:
901	if (rv != -EAGAIN)
902		siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY, -EINVAL);
903
904	return rv;
905}
906
907/*
908 * siw_accept_newconn - accept an incoming pending connection
909 *
910 */
911static void siw_accept_newconn(struct siw_cep *cep)
912{
913	struct socket *s = cep->sock;
914	struct socket *new_s = NULL;
915	struct siw_cep *new_cep = NULL;
916	int rv = 0; /* debug only. should disappear */
917
918	if (cep->state != SIW_EPSTATE_LISTENING)
919		goto error;
920
921	new_cep = siw_cep_alloc(cep->sdev);
922	if (!new_cep)
923		goto error;
924
925	/*
926	 * 4: Allocate a sufficient number of work elements
927	 * to allow concurrent handling of local + peer close
928	 * events, MPA header processing + MPA timeout.
929	 */
930	if (siw_cm_alloc_work(new_cep, 4) != 0)
931		goto error;
932
933	/*
934	 * Copy saved socket callbacks from listening CEP
935	 * and assign new socket with new CEP
936	 */
937	new_cep->sk_state_change = cep->sk_state_change;
938	new_cep->sk_data_ready = cep->sk_data_ready;
939	new_cep->sk_write_space = cep->sk_write_space;
940	new_cep->sk_error_report = cep->sk_error_report;
941
942	rv = kernel_accept(s, &new_s, O_NONBLOCK);
943	if (rv != 0) {
944		/*
945		 * Connection already aborted by peer..?
946		 */
947		siw_dbg_cep(cep, "kernel_accept() error: %d\n", rv);
948		goto error;
949	}
950	new_cep->sock = new_s;
951	siw_cep_get(new_cep);
952	new_s->sk->sk_user_data = new_cep;
953
954	if (siw_tcp_nagle == false)
955		tcp_sock_set_nodelay(new_s->sk);
956	new_cep->state = SIW_EPSTATE_AWAIT_MPAREQ;
957
958	rv = siw_cm_queue_work(new_cep, SIW_CM_WORK_MPATIMEOUT);
959	if (rv)
960		goto error;
961	/*
962	 * See siw_proc_mpareq() etc. for the use of new_cep->listen_cep.
963	 */
964	new_cep->listen_cep = cep;
965	siw_cep_get(cep);
966
967	if (atomic_read(&new_s->sk->sk_rmem_alloc)) {
968		/*
969		 * MPA REQ already queued
970		 */
971		siw_dbg_cep(cep, "immediate mpa request\n");
972
973		siw_cep_set_inuse(new_cep);
974		rv = siw_proc_mpareq(new_cep);
975		if (rv != -EAGAIN) {
976			siw_cep_put(cep);
977			new_cep->listen_cep = NULL;
978			if (rv) {
979				siw_cancel_mpatimer(new_cep);
980				siw_cep_set_free(new_cep);
981				goto error;
982			}
983		}
984		siw_cep_set_free(new_cep);
985	}
986	return;
987
988error:
989	if (new_cep)
990		siw_cep_put(new_cep);
991
992	if (new_s) {
993		siw_socket_disassoc(new_s);
994		sock_release(new_s);
995		new_cep->sock = NULL;
996	}
997	siw_dbg_cep(cep, "error %d\n", rv);
998}
999
1000static void siw_cm_work_handler(struct work_struct *w)
1001{
1002	struct siw_cm_work *work;
1003	struct siw_cep *cep;
1004	int release_cep = 0, rv = 0;
1005
1006	work = container_of(w, struct siw_cm_work, work.work);
1007	cep = work->cep;
1008
1009	siw_dbg_cep(cep, "[QP %u]: work type: %d, state %d\n",
1010		    cep->qp ? qp_id(cep->qp) : UINT_MAX,
1011		    work->type, cep->state);
1012
1013	siw_cep_set_inuse(cep);
1014
1015	switch (work->type) {
1016	case SIW_CM_WORK_ACCEPT:
1017		siw_accept_newconn(cep);
1018		break;
1019
1020	case SIW_CM_WORK_READ_MPAHDR:
1021		if (cep->state == SIW_EPSTATE_AWAIT_MPAREQ) {
1022			if (cep->listen_cep) {
1023				siw_cep_set_inuse(cep->listen_cep);
1024
1025				if (cep->listen_cep->state ==
1026				    SIW_EPSTATE_LISTENING)
1027					rv = siw_proc_mpareq(cep);
1028				else
1029					rv = -EFAULT;
1030
1031				siw_cep_set_free(cep->listen_cep);
1032
1033				if (rv != -EAGAIN) {
1034					siw_cep_put(cep->listen_cep);
1035					cep->listen_cep = NULL;
1036					if (rv)
1037						siw_cep_put(cep);
1038				}
1039			}
1040		} else if (cep->state == SIW_EPSTATE_AWAIT_MPAREP) {
1041			rv = siw_proc_mpareply(cep);
1042		} else {
1043			/*
1044			 * CEP already moved out of MPA handshake.
1045			 * any connection management already done.
1046			 * silently ignore the mpa packet.
1047			 */
1048			if (cep->state == SIW_EPSTATE_RDMA_MODE) {
1049				cep->sock->sk->sk_data_ready(cep->sock->sk);
1050				siw_dbg_cep(cep, "already in RDMA mode");
1051			} else {
1052				siw_dbg_cep(cep, "out of state: %d\n",
1053					    cep->state);
1054			}
1055		}
1056		if (rv && rv != -EAGAIN)
1057			release_cep = 1;
1058		break;
1059
1060	case SIW_CM_WORK_CLOSE_LLP:
1061		/*
1062		 * QP scheduled LLP close
1063		 */
1064		if (cep->qp && cep->qp->term_info.valid)
1065			siw_send_terminate(cep->qp);
1066
1067		if (cep->cm_id)
1068			siw_cm_upcall(cep, IW_CM_EVENT_CLOSE, 0);
1069
1070		release_cep = 1;
1071		break;
1072
1073	case SIW_CM_WORK_PEER_CLOSE:
1074		if (cep->cm_id) {
1075			if (cep->state == SIW_EPSTATE_AWAIT_MPAREP) {
1076				/*
1077				 * MPA reply not received, but connection drop
1078				 */
1079				siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY,
1080					      -ECONNRESET);
1081			} else if (cep->state == SIW_EPSTATE_RDMA_MODE) {
1082				/*
1083				 * NOTE: IW_CM_EVENT_DISCONNECT is given just
1084				 *       to transition IWCM into CLOSING.
1085				 */
1086				siw_cm_upcall(cep, IW_CM_EVENT_DISCONNECT, 0);
1087				siw_cm_upcall(cep, IW_CM_EVENT_CLOSE, 0);
1088			}
1089			/*
1090			 * for other states there is no connection
1091			 * known to the IWCM.
1092			 */
1093		} else {
1094			if (cep->state == SIW_EPSTATE_RECVD_MPAREQ) {
1095				/*
1096				 * Wait for the ulp/CM to call accept/reject
1097				 */
1098				siw_dbg_cep(cep,
1099					    "mpa req recvd, wait for ULP\n");
1100			} else if (cep->state == SIW_EPSTATE_AWAIT_MPAREQ) {
1101				/*
1102				 * Socket close before MPA request received.
1103				 */
1104				if (cep->listen_cep) {
1105					siw_dbg_cep(cep,
1106						"no mpareq: drop listener\n");
1107					siw_cep_put(cep->listen_cep);
1108					cep->listen_cep = NULL;
1109				}
1110			}
1111		}
1112		release_cep = 1;
1113		break;
1114
1115	case SIW_CM_WORK_MPATIMEOUT:
1116		cep->mpa_timer = NULL;
1117
1118		if (cep->state == SIW_EPSTATE_AWAIT_MPAREP) {
1119			/*
1120			 * MPA request timed out:
1121			 * Hide any partially received private data and signal
1122			 * timeout
1123			 */
1124			cep->mpa.hdr.params.pd_len = 0;
1125
1126			if (cep->cm_id)
1127				siw_cm_upcall(cep, IW_CM_EVENT_CONNECT_REPLY,
1128					      -ETIMEDOUT);
1129			release_cep = 1;
1130
1131		} else if (cep->state == SIW_EPSTATE_AWAIT_MPAREQ) {
1132			/*
1133			 * No MPA request received after peer TCP stream setup.
1134			 */
1135			if (cep->listen_cep) {
1136				siw_cep_put(cep->listen_cep);
1137				cep->listen_cep = NULL;
1138			}
1139			release_cep = 1;
1140		}
1141		break;
1142
1143	default:
1144		WARN(1, "Undefined CM work type: %d\n", work->type);
1145	}
1146	if (release_cep) {
1147		siw_dbg_cep(cep,
1148			    "release: timer=%s, QP[%u]\n",
1149			    cep->mpa_timer ? "y" : "n",
1150			    cep->qp ? qp_id(cep->qp) : UINT_MAX);
1151
1152		siw_cancel_mpatimer(cep);
1153
1154		cep->state = SIW_EPSTATE_CLOSED;
1155
1156		if (cep->qp) {
1157			struct siw_qp *qp = cep->qp;
1158			/*
1159			 * Serialize a potential race with application
1160			 * closing the QP and calling siw_qp_cm_drop()
1161			 */
1162			siw_qp_get(qp);
1163			siw_cep_set_free(cep);
1164
1165			siw_qp_llp_close(qp);
1166			siw_qp_put(qp);
1167
1168			siw_cep_set_inuse(cep);
1169			cep->qp = NULL;
1170			siw_qp_put(qp);
1171		}
1172		if (cep->sock) {
1173			siw_socket_disassoc(cep->sock);
1174			sock_release(cep->sock);
1175			cep->sock = NULL;
1176		}
1177		if (cep->cm_id) {
1178			cep->cm_id->rem_ref(cep->cm_id);
1179			cep->cm_id = NULL;
1180			siw_cep_put(cep);
1181		}
1182	}
1183	siw_cep_set_free(cep);
1184	siw_put_work(work);
1185	siw_cep_put(cep);
1186}
1187
1188static struct workqueue_struct *siw_cm_wq;
1189
1190int siw_cm_queue_work(struct siw_cep *cep, enum siw_work_type type)
1191{
1192	struct siw_cm_work *work = siw_get_work(cep);
1193	unsigned long delay = 0;
1194
1195	if (!work) {
1196		siw_dbg_cep(cep, "failed with no work available\n");
1197		return -ENOMEM;
1198	}
1199	work->type = type;
1200	work->cep = cep;
1201
1202	siw_cep_get(cep);
1203
1204	INIT_DELAYED_WORK(&work->work, siw_cm_work_handler);
1205
1206	if (type == SIW_CM_WORK_MPATIMEOUT) {
1207		cep->mpa_timer = work;
1208
1209		if (cep->state == SIW_EPSTATE_AWAIT_MPAREP)
1210			delay = MPAREQ_TIMEOUT;
1211		else
1212			delay = MPAREP_TIMEOUT;
1213	}
1214	siw_dbg_cep(cep, "[QP %u]: work type: %d, timeout %lu\n",
1215		    cep->qp ? qp_id(cep->qp) : -1, type, delay);
1216
1217	queue_delayed_work(siw_cm_wq, &work->work, delay);
1218
1219	return 0;
1220}
1221
1222static void siw_cm_llp_data_ready(struct sock *sk)
1223{
1224	struct siw_cep *cep;
1225
1226	trace_sk_data_ready(sk);
1227
1228	read_lock(&sk->sk_callback_lock);
1229
1230	cep = sk_to_cep(sk);
1231	if (!cep)
1232		goto out;
1233
1234	siw_dbg_cep(cep, "cep state: %d, socket state %d\n",
1235		    cep->state, sk->sk_state);
1236
1237	if (sk->sk_state != TCP_ESTABLISHED)
1238		goto out;
1239
1240	switch (cep->state) {
1241	case SIW_EPSTATE_RDMA_MODE:
1242	case SIW_EPSTATE_LISTENING:
1243		break;
1244
1245	case SIW_EPSTATE_AWAIT_MPAREQ:
1246	case SIW_EPSTATE_AWAIT_MPAREP:
1247		siw_cm_queue_work(cep, SIW_CM_WORK_READ_MPAHDR);
1248		break;
1249
1250	default:
1251		siw_dbg_cep(cep, "unexpected data, state %d\n", cep->state);
1252		break;
1253	}
1254out:
1255	read_unlock(&sk->sk_callback_lock);
1256}
1257
1258static void siw_cm_llp_write_space(struct sock *sk)
1259{
1260	struct siw_cep *cep = sk_to_cep(sk);
1261
1262	if (cep)
1263		siw_dbg_cep(cep, "state: %d\n", cep->state);
1264}
1265
1266static void siw_cm_llp_error_report(struct sock *sk)
1267{
1268	struct siw_cep *cep = sk_to_cep(sk);
1269
1270	if (cep) {
1271		siw_dbg_cep(cep, "error %d, socket state: %d, cep state: %d\n",
1272			    sk->sk_err, sk->sk_state, cep->state);
1273		cep->sk_error_report(sk);
1274	}
1275}
1276
1277static void siw_cm_llp_state_change(struct sock *sk)
1278{
1279	struct siw_cep *cep;
1280	void (*orig_state_change)(struct sock *s);
1281
1282	read_lock(&sk->sk_callback_lock);
1283
1284	cep = sk_to_cep(sk);
1285	if (!cep) {
1286		/* endpoint already disassociated */
1287		read_unlock(&sk->sk_callback_lock);
1288		return;
1289	}
1290	orig_state_change = cep->sk_state_change;
1291
1292	siw_dbg_cep(cep, "state: %d\n", cep->state);
1293
1294	switch (sk->sk_state) {
1295	case TCP_ESTABLISHED:
1296		/*
1297		 * handle accepting socket as special case where only
1298		 * new connection is possible
1299		 */
1300		siw_cm_queue_work(cep, SIW_CM_WORK_ACCEPT);
1301		break;
1302
1303	case TCP_CLOSE:
1304	case TCP_CLOSE_WAIT:
1305		if (cep->qp)
1306			cep->qp->tx_ctx.tx_suspend = 1;
1307		siw_cm_queue_work(cep, SIW_CM_WORK_PEER_CLOSE);
1308		break;
1309
1310	default:
1311		siw_dbg_cep(cep, "unexpected socket state %d\n", sk->sk_state);
1312	}
1313	read_unlock(&sk->sk_callback_lock);
1314	orig_state_change(sk);
1315}
1316
1317static int kernel_bindconnect(struct socket *s, struct sockaddr *laddr,
1318			      struct sockaddr *raddr, bool afonly)
1319{
1320	int rv, flags = 0;
1321	size_t size = laddr->sa_family == AF_INET ?
1322		sizeof(struct sockaddr_in) : sizeof(struct sockaddr_in6);
1323
1324	/*
1325	 * Make address available again asap.
1326	 */
1327	sock_set_reuseaddr(s->sk);
1328
1329	if (afonly) {
1330		rv = ip6_sock_set_v6only(s->sk);
1331		if (rv)
1332			return rv;
1333	}
1334
1335	rv = s->ops->bind(s, laddr, size);
1336	if (rv < 0)
1337		return rv;
1338
1339	rv = s->ops->connect(s, raddr, size, flags);
1340
1341	return rv < 0 ? rv : 0;
1342}
1343
1344int siw_connect(struct iw_cm_id *id, struct iw_cm_conn_param *params)
1345{
1346	struct siw_device *sdev = to_siw_dev(id->device);
1347	struct siw_qp *qp;
1348	struct siw_cep *cep = NULL;
1349	struct socket *s = NULL;
1350	struct sockaddr *laddr = (struct sockaddr *)&id->local_addr,
1351			*raddr = (struct sockaddr *)&id->remote_addr;
1352	bool p2p_mode = peer_to_peer, v4 = true;
1353	u16 pd_len = params->private_data_len;
1354	int version = mpa_version, rv;
1355
1356	if (pd_len > MPA_MAX_PRIVDATA)
1357		return -EINVAL;
1358
1359	if (params->ird > sdev->attrs.max_ird ||
1360	    params->ord > sdev->attrs.max_ord)
1361		return -ENOMEM;
1362
1363	if (laddr->sa_family == AF_INET6)
1364		v4 = false;
1365	else if (laddr->sa_family != AF_INET)
1366		return -EAFNOSUPPORT;
1367
1368	/*
1369	 * Respect any iwarp port mapping: Use mapped remote address
1370	 * if valid. Local address must not be mapped, since siw
1371	 * uses kernel TCP stack.
1372	 */
1373	if ((v4 && to_sockaddr_in(id->remote_addr).sin_port != 0) ||
1374	     to_sockaddr_in6(id->remote_addr).sin6_port != 0)
1375		raddr = (struct sockaddr *)&id->m_remote_addr;
1376
1377	qp = siw_qp_id2obj(sdev, params->qpn);
1378	if (!qp) {
1379		WARN(1, "[QP %u] does not exist\n", params->qpn);
1380		rv = -EINVAL;
1381		goto error;
1382	}
1383	siw_dbg_qp(qp, "pd_len %d, laddr %pISp, raddr %pISp\n", pd_len, laddr,
1384		   raddr);
1385
1386	rv = sock_create(v4 ? AF_INET : AF_INET6, SOCK_STREAM, IPPROTO_TCP, &s);
1387	if (rv < 0)
1388		goto error;
1389
1390	/*
1391	 * NOTE: For simplification, connect() is called in blocking
1392	 * mode. Might be reconsidered for async connection setup at
1393	 * TCP level.
1394	 */
1395	rv = kernel_bindconnect(s, laddr, raddr, id->afonly);
1396	if (rv != 0) {
1397		siw_dbg_qp(qp, "kernel_bindconnect: error %d\n", rv);
1398		goto error;
1399	}
1400	if (siw_tcp_nagle == false)
1401		tcp_sock_set_nodelay(s->sk);
1402	cep = siw_cep_alloc(sdev);
1403	if (!cep) {
1404		rv = -ENOMEM;
1405		goto error;
1406	}
1407	siw_cep_set_inuse(cep);
1408
1409	/* Associate QP with CEP */
1410	siw_cep_get(cep);
1411	qp->cep = cep;
1412
1413	/* siw_qp_get(qp) already done by QP lookup */
1414	cep->qp = qp;
1415
1416	id->add_ref(id);
1417	cep->cm_id = id;
1418
1419	/*
1420	 * 4: Allocate a sufficient number of work elements
1421	 * to allow concurrent handling of local + peer close
1422	 * events, MPA header processing + MPA timeout.
1423	 */
1424	rv = siw_cm_alloc_work(cep, 4);
1425	if (rv != 0) {
1426		rv = -ENOMEM;
1427		goto error;
1428	}
1429	cep->ird = params->ird;
1430	cep->ord = params->ord;
1431
1432	if (p2p_mode && cep->ord == 0)
1433		cep->ord = 1;
1434
1435	cep->state = SIW_EPSTATE_CONNECTING;
1436
1437	/*
1438	 * Associate CEP with socket
1439	 */
1440	siw_cep_socket_assoc(cep, s);
1441
1442	cep->state = SIW_EPSTATE_AWAIT_MPAREP;
1443
1444	/*
1445	 * Set MPA Request bits: CRC if required, no MPA Markers,
1446	 * MPA Rev. according to module parameter 'mpa_version', Key 'Request'.
1447	 */
1448	cep->mpa.hdr.params.bits = 0;
1449	if (version > MPA_REVISION_2) {
1450		pr_warn("Setting MPA version to %u\n", MPA_REVISION_2);
1451		version = MPA_REVISION_2;
1452		/* Adjust also module parameter */
1453		mpa_version = MPA_REVISION_2;
1454	}
1455	__mpa_rr_set_revision(&cep->mpa.hdr.params.bits, version);
1456
1457	if (try_gso)
1458		cep->mpa.hdr.params.bits |= MPA_RR_FLAG_GSO_EXP;
1459
1460	if (mpa_crc_required)
1461		cep->mpa.hdr.params.bits |= MPA_RR_FLAG_CRC;
1462
1463	/*
1464	 * If MPA version == 2:
1465	 * o Include ORD and IRD.
1466	 * o Indicate peer-to-peer mode, if required by module
1467	 *   parameter 'peer_to_peer'.
1468	 */
1469	if (version == MPA_REVISION_2) {
1470		cep->enhanced_rdma_conn_est = true;
1471		cep->mpa.hdr.params.bits |= MPA_RR_FLAG_ENHANCED;
1472
1473		cep->mpa.v2_ctrl.ird = htons(cep->ird);
1474		cep->mpa.v2_ctrl.ord = htons(cep->ord);
1475
1476		if (p2p_mode) {
1477			cep->mpa.v2_ctrl.ird |= MPA_V2_PEER_TO_PEER;
1478			cep->mpa.v2_ctrl.ord |= rtr_type;
1479		}
1480		/* Remember own P2P mode requested */
1481		cep->mpa.v2_ctrl_req.ird = cep->mpa.v2_ctrl.ird;
1482		cep->mpa.v2_ctrl_req.ord = cep->mpa.v2_ctrl.ord;
1483	}
1484	memcpy(cep->mpa.hdr.key, MPA_KEY_REQ, 16);
1485
1486	rv = siw_send_mpareqrep(cep, params->private_data, pd_len);
1487	/*
1488	 * Reset private data.
1489	 */
1490	cep->mpa.hdr.params.pd_len = 0;
1491
1492	if (rv >= 0) {
1493		rv = siw_cm_queue_work(cep, SIW_CM_WORK_MPATIMEOUT);
1494		if (!rv) {
1495			siw_dbg_cep(cep, "[QP %u]: exit\n", qp_id(qp));
1496			siw_cep_set_free(cep);
1497			return 0;
1498		}
1499	}
1500error:
1501	siw_dbg(id->device, "failed: %d\n", rv);
1502
1503	if (cep) {
1504		siw_socket_disassoc(s);
1505		sock_release(s);
1506		cep->sock = NULL;
1507
1508		cep->qp = NULL;
1509
1510		cep->cm_id = NULL;
1511		id->rem_ref(id);
1512
1513		qp->cep = NULL;
1514		siw_cep_put(cep);
1515
1516		cep->state = SIW_EPSTATE_CLOSED;
1517
1518		siw_cep_set_free(cep);
1519
1520		siw_cep_put(cep);
1521
1522	} else if (s) {
1523		sock_release(s);
1524	}
1525	if (qp)
1526		siw_qp_put(qp);
1527
1528	return rv;
1529}
1530
1531/*
1532 * siw_accept - Let SoftiWARP accept an RDMA connection request
1533 *
1534 * @id:		New connection management id to be used for accepted
1535 *		connection request
1536 * @params:	Connection parameters provided by ULP for accepting connection
1537 *
1538 * Transition QP to RTS state, associate new CM id @id with accepted CEP
1539 * and get prepared for TCP input by installing socket callbacks.
1540 * Then send MPA Reply and generate the "connection established" event.
1541 * Socket callbacks must be installed before sending MPA Reply, because
1542 * the latter may cause a first RDMA message to arrive from the RDMA Initiator
1543 * side very quickly, at which time the socket callbacks must be ready.
1544 */
1545int siw_accept(struct iw_cm_id *id, struct iw_cm_conn_param *params)
1546{
1547	struct siw_device *sdev = to_siw_dev(id->device);
1548	struct siw_cep *cep = (struct siw_cep *)id->provider_data;
1549	struct siw_qp *qp;
1550	struct siw_qp_attrs qp_attrs;
1551	int rv, max_priv_data = MPA_MAX_PRIVDATA;
1552	bool wait_for_peer_rts = false;
1553
1554	siw_cep_set_inuse(cep);
1555	siw_cep_put(cep);
1556
1557	/* Free lingering inbound private data */
1558	if (cep->mpa.hdr.params.pd_len) {
1559		cep->mpa.hdr.params.pd_len = 0;
1560		kfree(cep->mpa.pdata);
1561		cep->mpa.pdata = NULL;
1562	}
1563	siw_cancel_mpatimer(cep);
1564
1565	if (cep->state != SIW_EPSTATE_RECVD_MPAREQ) {
1566		siw_dbg_cep(cep, "out of state\n");
1567
1568		siw_cep_set_free(cep);
1569		siw_cep_put(cep);
1570
1571		return -ECONNRESET;
1572	}
1573	qp = siw_qp_id2obj(sdev, params->qpn);
1574	if (!qp) {
1575		WARN(1, "[QP %d] does not exist\n", params->qpn);
1576		siw_cep_set_free(cep);
1577		siw_cep_put(cep);
1578
1579		return -EINVAL;
1580	}
1581	down_write(&qp->state_lock);
1582	if (qp->attrs.state > SIW_QP_STATE_RTR) {
1583		rv = -EINVAL;
1584		up_write(&qp->state_lock);
1585		goto error;
1586	}
1587	siw_dbg_cep(cep, "[QP %d]\n", params->qpn);
1588
1589	if (try_gso && cep->mpa.hdr.params.bits & MPA_RR_FLAG_GSO_EXP) {
1590		siw_dbg_cep(cep, "peer allows GSO on TX\n");
1591		qp->tx_ctx.gso_seg_limit = 0;
1592	}
1593	if (params->ord > sdev->attrs.max_ord ||
1594	    params->ird > sdev->attrs.max_ird) {
1595		siw_dbg_cep(
1596			cep,
1597			"[QP %u]: ord %d (max %d), ird %d (max %d)\n",
1598			qp_id(qp), params->ord, sdev->attrs.max_ord,
1599			params->ird, sdev->attrs.max_ird);
1600		rv = -EINVAL;
1601		up_write(&qp->state_lock);
1602		goto error;
1603	}
1604	if (cep->enhanced_rdma_conn_est)
1605		max_priv_data -= sizeof(struct mpa_v2_data);
1606
1607	if (params->private_data_len > max_priv_data) {
1608		siw_dbg_cep(
1609			cep,
1610			"[QP %u]: private data length: %d (max %d)\n",
1611			qp_id(qp), params->private_data_len, max_priv_data);
1612		rv = -EINVAL;
1613		up_write(&qp->state_lock);
1614		goto error;
1615	}
1616	if (cep->enhanced_rdma_conn_est) {
1617		if (params->ord > cep->ord) {
1618			if (relaxed_ird_negotiation) {
1619				params->ord = cep->ord;
1620			} else {
1621				cep->ird = params->ird;
1622				cep->ord = params->ord;
1623				rv = -EINVAL;
1624				up_write(&qp->state_lock);
1625				goto error;
1626			}
1627		}
1628		if (params->ird < cep->ird) {
1629			if (relaxed_ird_negotiation &&
1630			    cep->ird <= sdev->attrs.max_ird)
1631				params->ird = cep->ird;
1632			else {
1633				rv = -ENOMEM;
1634				up_write(&qp->state_lock);
1635				goto error;
1636			}
1637		}
1638		if (cep->mpa.v2_ctrl.ord &
1639		    (MPA_V2_RDMA_WRITE_RTR | MPA_V2_RDMA_READ_RTR))
1640			wait_for_peer_rts = true;
1641		/*
1642		 * Signal back negotiated IRD and ORD values
1643		 */
1644		cep->mpa.v2_ctrl.ord =
1645			htons(params->ord & MPA_IRD_ORD_MASK) |
1646			(cep->mpa.v2_ctrl.ord & ~MPA_V2_MASK_IRD_ORD);
1647		cep->mpa.v2_ctrl.ird =
1648			htons(params->ird & MPA_IRD_ORD_MASK) |
1649			(cep->mpa.v2_ctrl.ird & ~MPA_V2_MASK_IRD_ORD);
1650	}
1651	cep->ird = params->ird;
1652	cep->ord = params->ord;
1653
1654	cep->cm_id = id;
1655	id->add_ref(id);
1656
1657	memset(&qp_attrs, 0, sizeof(qp_attrs));
1658	qp_attrs.orq_size = cep->ord;
1659	qp_attrs.irq_size = cep->ird;
1660	qp_attrs.sk = cep->sock;
1661	if (cep->mpa.hdr.params.bits & MPA_RR_FLAG_CRC)
1662		qp_attrs.flags = SIW_MPA_CRC;
1663	qp_attrs.state = SIW_QP_STATE_RTS;
1664
1665	siw_dbg_cep(cep, "[QP%u]: moving to rts\n", qp_id(qp));
1666
1667	/* Associate QP with CEP */
1668	siw_cep_get(cep);
1669	qp->cep = cep;
1670
1671	/* siw_qp_get(qp) already done by QP lookup */
1672	cep->qp = qp;
1673
1674	cep->state = SIW_EPSTATE_RDMA_MODE;
1675
1676	/* Move socket RX/TX under QP control */
1677	rv = siw_qp_modify(qp, &qp_attrs,
1678			   SIW_QP_ATTR_STATE | SIW_QP_ATTR_LLP_HANDLE |
1679				   SIW_QP_ATTR_ORD | SIW_QP_ATTR_IRD |
1680				   SIW_QP_ATTR_MPA);
1681	up_write(&qp->state_lock);
1682
1683	if (rv)
1684		goto error;
1685
1686	siw_dbg_cep(cep, "[QP %u]: send mpa reply, %d byte pdata\n",
1687		    qp_id(qp), params->private_data_len);
1688
1689	rv = siw_send_mpareqrep(cep, params->private_data,
1690				params->private_data_len);
1691	if (rv != 0)
1692		goto error;
1693
1694	if (wait_for_peer_rts) {
1695		siw_sk_assign_rtr_upcalls(cep);
1696	} else {
1697		siw_qp_socket_assoc(cep, qp);
1698		rv = siw_cm_upcall(cep, IW_CM_EVENT_ESTABLISHED, 0);
1699		if (rv)
1700			goto error;
1701	}
1702	siw_cep_set_free(cep);
1703
1704	return 0;
1705error:
1706	siw_socket_disassoc(cep->sock);
1707	sock_release(cep->sock);
1708	cep->sock = NULL;
1709
1710	cep->state = SIW_EPSTATE_CLOSED;
1711
1712	if (cep->cm_id) {
1713		cep->cm_id->rem_ref(id);
1714		cep->cm_id = NULL;
1715	}
1716	if (qp->cep) {
1717		siw_cep_put(cep);
1718		qp->cep = NULL;
1719	}
1720	cep->qp = NULL;
1721	siw_qp_put(qp);
1722
1723	siw_cep_set_free(cep);
1724	siw_cep_put(cep);
1725
1726	return rv;
1727}
1728
1729/*
1730 * siw_reject()
1731 *
1732 * Local connection reject case. Send private data back to peer,
1733 * close connection and dereference connection id.
1734 */
1735int siw_reject(struct iw_cm_id *id, const void *pdata, u8 pd_len)
1736{
1737	struct siw_cep *cep = (struct siw_cep *)id->provider_data;
1738
1739	siw_cep_set_inuse(cep);
1740	siw_cep_put(cep);
1741
1742	siw_cancel_mpatimer(cep);
1743
1744	if (cep->state != SIW_EPSTATE_RECVD_MPAREQ) {
1745		siw_dbg_cep(cep, "out of state\n");
1746
1747		siw_cep_set_free(cep);
1748		siw_cep_put(cep); /* put last reference */
1749
1750		return -ECONNRESET;
1751	}
1752	siw_dbg_cep(cep, "cep->state %d, pd_len %d\n", cep->state,
1753		    pd_len);
1754
1755	if (__mpa_rr_revision(cep->mpa.hdr.params.bits) >= MPA_REVISION_1) {
1756		cep->mpa.hdr.params.bits |= MPA_RR_FLAG_REJECT; /* reject */
1757		siw_send_mpareqrep(cep, pdata, pd_len);
1758	}
1759	siw_socket_disassoc(cep->sock);
1760	sock_release(cep->sock);
1761	cep->sock = NULL;
1762
1763	cep->state = SIW_EPSTATE_CLOSED;
1764
1765	siw_cep_set_free(cep);
1766	siw_cep_put(cep);
1767
1768	return 0;
1769}
1770
1771/*
1772 * siw_create_listen - Create resources for a listener's IWCM ID @id
1773 *
1774 * Starts listen on the socket address id->local_addr.
1775 *
1776 */
1777int siw_create_listen(struct iw_cm_id *id, int backlog)
1778{
1779	struct socket *s;
1780	struct siw_cep *cep = NULL;
1781	struct siw_device *sdev = to_siw_dev(id->device);
1782	int addr_family = id->local_addr.ss_family;
1783	int rv = 0;
1784
1785	if (addr_family != AF_INET && addr_family != AF_INET6)
1786		return -EAFNOSUPPORT;
1787
1788	rv = sock_create(addr_family, SOCK_STREAM, IPPROTO_TCP, &s);
1789	if (rv < 0)
1790		return rv;
1791
1792	/*
1793	 * Allow binding local port when still in TIME_WAIT from last close.
1794	 */
1795	sock_set_reuseaddr(s->sk);
1796
1797	if (addr_family == AF_INET) {
1798		struct sockaddr_in *laddr = &to_sockaddr_in(id->local_addr);
1799
1800		/* For wildcard addr, limit binding to current device only */
1801		if (ipv4_is_zeronet(laddr->sin_addr.s_addr))
1802			s->sk->sk_bound_dev_if = sdev->netdev->ifindex;
1803
1804		rv = s->ops->bind(s, (struct sockaddr *)laddr,
1805				  sizeof(struct sockaddr_in));
1806	} else {
1807		struct sockaddr_in6 *laddr = &to_sockaddr_in6(id->local_addr);
1808
1809		if (id->afonly) {
1810			rv = ip6_sock_set_v6only(s->sk);
1811			if (rv) {
1812				siw_dbg(id->device,
1813					"ip6_sock_set_v6only erro: %d\n", rv);
1814				goto error;
1815			}
1816		}
1817
1818		/* For wildcard addr, limit binding to current device only */
1819		if (ipv6_addr_any(&laddr->sin6_addr))
1820			s->sk->sk_bound_dev_if = sdev->netdev->ifindex;
1821
1822		rv = s->ops->bind(s, (struct sockaddr *)laddr,
1823				  sizeof(struct sockaddr_in6));
1824	}
1825	if (rv) {
1826		siw_dbg(id->device, "socket bind error: %d\n", rv);
1827		goto error;
1828	}
1829	cep = siw_cep_alloc(sdev);
1830	if (!cep) {
1831		rv = -ENOMEM;
1832		goto error;
1833	}
1834	siw_cep_socket_assoc(cep, s);
1835
1836	rv = siw_cm_alloc_work(cep, backlog);
1837	if (rv) {
1838		siw_dbg(id->device,
1839			"alloc_work error %d, backlog %d\n",
1840			rv, backlog);
1841		goto error;
1842	}
1843	rv = s->ops->listen(s, backlog);
1844	if (rv) {
1845		siw_dbg(id->device, "listen error %d\n", rv);
1846		goto error;
1847	}
1848	cep->cm_id = id;
1849	id->add_ref(id);
1850
1851	/*
1852	 * In case of a wildcard rdma_listen on a multi-homed device,
1853	 * a listener's IWCM id is associated with more than one listening CEP.
1854	 *
1855	 * We currently use id->provider_data in three different ways:
1856	 *
1857	 * o For a listener's IWCM id, id->provider_data points to
1858	 *   the list_head of the list of listening CEPs.
1859	 *   Uses: siw_create_listen(), siw_destroy_listen()
1860	 *
1861	 * o For each accepted passive-side IWCM id, id->provider_data
1862	 *   points to the CEP itself. This is a consequence of
1863	 *   - siw_cm_upcall() setting event.provider_data = cep and
1864	 *   - the IWCM's cm_conn_req_handler() setting provider_data of the
1865	 *     new passive-side IWCM id equal to event.provider_data
1866	 *   Uses: siw_accept(), siw_reject()
1867	 *
1868	 * o For an active-side IWCM id, id->provider_data is not used at all.
1869	 *
1870	 */
1871	if (!id->provider_data) {
1872		id->provider_data =
1873			kmalloc(sizeof(struct list_head), GFP_KERNEL);
1874		if (!id->provider_data) {
1875			rv = -ENOMEM;
1876			goto error;
1877		}
1878		INIT_LIST_HEAD((struct list_head *)id->provider_data);
1879	}
1880	list_add_tail(&cep->listenq, (struct list_head *)id->provider_data);
1881	cep->state = SIW_EPSTATE_LISTENING;
1882
1883	siw_dbg(id->device, "Listen at laddr %pISp\n", &id->local_addr);
1884
1885	return 0;
1886
1887error:
1888	siw_dbg(id->device, "failed: %d\n", rv);
1889
1890	if (cep) {
1891		siw_cep_set_inuse(cep);
1892
1893		if (cep->cm_id) {
1894			cep->cm_id->rem_ref(cep->cm_id);
1895			cep->cm_id = NULL;
1896		}
1897		cep->sock = NULL;
1898		siw_socket_disassoc(s);
1899		cep->state = SIW_EPSTATE_CLOSED;
1900
1901		siw_cep_set_free(cep);
1902		siw_cep_put(cep);
1903	}
1904	sock_release(s);
1905
1906	return rv;
1907}
1908
1909static void siw_drop_listeners(struct iw_cm_id *id)
1910{
1911	struct list_head *p, *tmp;
1912
1913	/*
1914	 * In case of a wildcard rdma_listen on a multi-homed device,
1915	 * a listener's IWCM id is associated with more than one listening CEP.
1916	 */
1917	list_for_each_safe(p, tmp, (struct list_head *)id->provider_data) {
1918		struct siw_cep *cep = list_entry(p, struct siw_cep, listenq);
1919
1920		list_del(p);
1921
1922		siw_dbg_cep(cep, "drop cep, state %d\n", cep->state);
1923
1924		siw_cep_set_inuse(cep);
1925
1926		if (cep->cm_id) {
1927			cep->cm_id->rem_ref(cep->cm_id);
1928			cep->cm_id = NULL;
1929		}
1930		if (cep->sock) {
1931			siw_socket_disassoc(cep->sock);
1932			sock_release(cep->sock);
1933			cep->sock = NULL;
1934		}
1935		cep->state = SIW_EPSTATE_CLOSED;
1936		siw_cep_set_free(cep);
1937		siw_cep_put(cep);
1938	}
1939}
1940
1941int siw_destroy_listen(struct iw_cm_id *id)
1942{
1943	if (!id->provider_data) {
1944		siw_dbg(id->device, "no cep(s)\n");
1945		return 0;
1946	}
1947	siw_drop_listeners(id);
1948	kfree(id->provider_data);
1949	id->provider_data = NULL;
1950
1951	return 0;
1952}
1953
1954int siw_cm_init(void)
1955{
1956	/*
1957	 * create_single_workqueue for strict ordering
1958	 */
1959	siw_cm_wq = create_singlethread_workqueue("siw_cm_wq");
1960	if (!siw_cm_wq)
1961		return -ENOMEM;
1962
1963	return 0;
1964}
1965
1966void siw_cm_exit(void)
1967{
1968	if (siw_cm_wq)
1969		destroy_workqueue(siw_cm_wq);
1970}
1971