OSDN Git Service

IB/iser: Fix catastrophic error flow hang
[android-x86/kernel.git] / drivers / infiniband / ulp / iser / iser_verbs.c
1 /*
2  * Copyright (c) 2004, 2005, 2006 Voltaire, Inc. All rights reserved.
3  * Copyright (c) 2005, 2006 Cisco Systems.  All rights reserved.
4  * Copyright (c) 2013-2014 Mellanox Technologies. All rights reserved.
5  *
6  * This software is available to you under a choice of one of two
7  * licenses.  You may choose to be licensed under the terms of the GNU
8  * General Public License (GPL) Version 2, available from the file
9  * COPYING in the main directory of this source tree, or the
10  * OpenIB.org BSD license below:
11  *
12  *     Redistribution and use in source and binary forms, with or
13  *     without modification, are permitted provided that the following
14  *     conditions are met:
15  *
16  *      - Redistributions of source code must retain the above
17  *        copyright notice, this list of conditions and the following
18  *        disclaimer.
19  *
20  *      - Redistributions in binary form must reproduce the above
21  *        copyright notice, this list of conditions and the following
22  *        disclaimer in the documentation and/or other materials
23  *        provided with the distribution.
24  *
25  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
26  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
27  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
28  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
29  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
30  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
31  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
32  * SOFTWARE.
33  */
34 #include <linux/kernel.h>
35 #include <linux/module.h>
36 #include <linux/slab.h>
37 #include <linux/delay.h>
38
39 #include "iscsi_iser.h"
40
41 #define ISCSI_ISER_MAX_CONN     8
42 #define ISER_MAX_RX_LEN         (ISER_QP_MAX_RECV_DTOS * ISCSI_ISER_MAX_CONN)
43 #define ISER_MAX_TX_LEN         (ISER_QP_MAX_REQ_DTOS  * ISCSI_ISER_MAX_CONN)
44 #define ISER_MAX_CQ_LEN         (ISER_MAX_RX_LEN + ISER_MAX_TX_LEN + \
45                                  ISCSI_ISER_MAX_CONN)
46
47 static int iser_cq_poll_limit = 512;
48
49 static void iser_cq_tasklet_fn(unsigned long data);
50 static void iser_cq_callback(struct ib_cq *cq, void *cq_context);
51
52 static void iser_cq_event_callback(struct ib_event *cause, void *context)
53 {
54         iser_err("got cq event %d \n", cause->event);
55 }
56
57 static void iser_qp_event_callback(struct ib_event *cause, void *context)
58 {
59         iser_err("got qp event %d\n",cause->event);
60 }
61
62 static void iser_event_handler(struct ib_event_handler *handler,
63                                 struct ib_event *event)
64 {
65         iser_err("async event %d on device %s port %d\n", event->event,
66                 event->device->name, event->element.port_num);
67 }
68
69 /**
70  * iser_create_device_ib_res - creates Protection Domain (PD), Completion
71  * Queue (CQ), DMA Memory Region (DMA MR) with the device associated with
72  * the adapator.
73  *
74  * returns 0 on success, -1 on failure
75  */
76 static int iser_create_device_ib_res(struct iser_device *device)
77 {
78         struct ib_device_attr *dev_attr = &device->dev_attr;
79         int ret, i, max_cqe;
80
81         ret = ib_query_device(device->ib_device, dev_attr);
82         if (ret) {
83                 pr_warn("Query device failed for %s\n", device->ib_device->name);
84                 return ret;
85         }
86
87         /* Assign function handles  - based on FMR support */
88         if (device->ib_device->alloc_fmr && device->ib_device->dealloc_fmr &&
89             device->ib_device->map_phys_fmr && device->ib_device->unmap_fmr) {
90                 iser_info("FMR supported, using FMR for registration\n");
91                 device->iser_alloc_rdma_reg_res = iser_create_fmr_pool;
92                 device->iser_free_rdma_reg_res = iser_free_fmr_pool;
93                 device->iser_reg_rdma_mem = iser_reg_rdma_mem_fmr;
94                 device->iser_unreg_rdma_mem = iser_unreg_mem_fmr;
95         } else
96         if (dev_attr->device_cap_flags & IB_DEVICE_MEM_MGT_EXTENSIONS) {
97                 iser_info("FastReg supported, using FastReg for registration\n");
98                 device->iser_alloc_rdma_reg_res = iser_create_fastreg_pool;
99                 device->iser_free_rdma_reg_res = iser_free_fastreg_pool;
100                 device->iser_reg_rdma_mem = iser_reg_rdma_mem_fastreg;
101                 device->iser_unreg_rdma_mem = iser_unreg_mem_fastreg;
102         } else {
103                 iser_err("IB device does not support FMRs nor FastRegs, can't register memory\n");
104                 return -1;
105         }
106
107         device->comps_used = min(ISER_MAX_CQ,
108                                  device->ib_device->num_comp_vectors);
109
110         max_cqe = min(ISER_MAX_CQ_LEN, dev_attr->max_cqe);
111
112         iser_info("using %d CQs, device %s supports %d vectors max_cqe %d\n",
113                   device->comps_used, device->ib_device->name,
114                   device->ib_device->num_comp_vectors, max_cqe);
115
116         device->pd = ib_alloc_pd(device->ib_device);
117         if (IS_ERR(device->pd))
118                 goto pd_err;
119
120         for (i = 0; i < device->comps_used; i++) {
121                 struct iser_comp *comp = &device->comps[i];
122
123                 comp->device = device;
124                 comp->cq = ib_create_cq(device->ib_device,
125                                         iser_cq_callback,
126                                         iser_cq_event_callback,
127                                         (void *)comp,
128                                         max_cqe, i);
129                 if (IS_ERR(comp->cq)) {
130                         comp->cq = NULL;
131                         goto cq_err;
132                 }
133
134                 if (ib_req_notify_cq(comp->cq, IB_CQ_NEXT_COMP))
135                         goto cq_err;
136
137                 tasklet_init(&comp->tasklet, iser_cq_tasklet_fn,
138                              (unsigned long)comp);
139         }
140
141         device->mr = ib_get_dma_mr(device->pd, IB_ACCESS_LOCAL_WRITE |
142                                    IB_ACCESS_REMOTE_WRITE |
143                                    IB_ACCESS_REMOTE_READ);
144         if (IS_ERR(device->mr))
145                 goto dma_mr_err;
146
147         INIT_IB_EVENT_HANDLER(&device->event_handler, device->ib_device,
148                                 iser_event_handler);
149         if (ib_register_event_handler(&device->event_handler))
150                 goto handler_err;
151
152         return 0;
153
154 handler_err:
155         ib_dereg_mr(device->mr);
156 dma_mr_err:
157         for (i = 0; i < device->comps_used; i++)
158                 tasklet_kill(&device->comps[i].tasklet);
159 cq_err:
160         for (i = 0; i < device->comps_used; i++) {
161                 struct iser_comp *comp = &device->comps[i];
162
163                 if (comp->cq)
164                         ib_destroy_cq(comp->cq);
165         }
166         ib_dealloc_pd(device->pd);
167 pd_err:
168         iser_err("failed to allocate an IB resource\n");
169         return -1;
170 }
171
172 /**
173  * iser_free_device_ib_res - destroy/dealloc/dereg the DMA MR,
174  * CQ and PD created with the device associated with the adapator.
175  */
176 static void iser_free_device_ib_res(struct iser_device *device)
177 {
178         int i;
179         BUG_ON(device->mr == NULL);
180
181         for (i = 0; i < device->comps_used; i++) {
182                 struct iser_comp *comp = &device->comps[i];
183
184                 tasklet_kill(&comp->tasklet);
185                 ib_destroy_cq(comp->cq);
186                 comp->cq = NULL;
187         }
188
189         (void)ib_unregister_event_handler(&device->event_handler);
190         (void)ib_dereg_mr(device->mr);
191         (void)ib_dealloc_pd(device->pd);
192
193         device->mr = NULL;
194         device->pd = NULL;
195 }
196
197 /**
198  * iser_create_fmr_pool - Creates FMR pool and page_vector
199  *
200  * returns 0 on success, or errno code on failure
201  */
202 int iser_create_fmr_pool(struct ib_conn *ib_conn, unsigned cmds_max)
203 {
204         struct iser_device *device = ib_conn->device;
205         struct ib_fmr_pool_param params;
206         int ret = -ENOMEM;
207
208         ib_conn->fmr.page_vec = kmalloc(sizeof(*ib_conn->fmr.page_vec) +
209                                         (sizeof(u64)*(ISCSI_ISER_SG_TABLESIZE + 1)),
210                                         GFP_KERNEL);
211         if (!ib_conn->fmr.page_vec)
212                 return ret;
213
214         ib_conn->fmr.page_vec->pages = (u64 *)(ib_conn->fmr.page_vec + 1);
215
216         params.page_shift        = SHIFT_4K;
217         /* when the first/last SG element are not start/end *
218          * page aligned, the map whould be of N+1 pages     */
219         params.max_pages_per_fmr = ISCSI_ISER_SG_TABLESIZE + 1;
220         /* make the pool size twice the max number of SCSI commands *
221          * the ML is expected to queue, watermark for unmap at 50%  */
222         params.pool_size         = cmds_max * 2;
223         params.dirty_watermark   = cmds_max;
224         params.cache             = 0;
225         params.flush_function    = NULL;
226         params.access            = (IB_ACCESS_LOCAL_WRITE  |
227                                     IB_ACCESS_REMOTE_WRITE |
228                                     IB_ACCESS_REMOTE_READ);
229
230         ib_conn->fmr.pool = ib_create_fmr_pool(device->pd, &params);
231         if (!IS_ERR(ib_conn->fmr.pool))
232                 return 0;
233
234         /* no FMR => no need for page_vec */
235         kfree(ib_conn->fmr.page_vec);
236         ib_conn->fmr.page_vec = NULL;
237
238         ret = PTR_ERR(ib_conn->fmr.pool);
239         ib_conn->fmr.pool = NULL;
240         if (ret != -ENOSYS) {
241                 iser_err("FMR allocation failed, err %d\n", ret);
242                 return ret;
243         } else {
244                 iser_warn("FMRs are not supported, using unaligned mode\n");
245                 return 0;
246         }
247 }
248
249 /**
250  * iser_free_fmr_pool - releases the FMR pool and page vec
251  */
252 void iser_free_fmr_pool(struct ib_conn *ib_conn)
253 {
254         iser_info("freeing conn %p fmr pool %p\n",
255                   ib_conn, ib_conn->fmr.pool);
256
257         if (ib_conn->fmr.pool != NULL)
258                 ib_destroy_fmr_pool(ib_conn->fmr.pool);
259
260         ib_conn->fmr.pool = NULL;
261
262         kfree(ib_conn->fmr.page_vec);
263         ib_conn->fmr.page_vec = NULL;
264 }
265
266 static int
267 iser_create_fastreg_desc(struct ib_device *ib_device, struct ib_pd *pd,
268                          bool pi_enable, struct fast_reg_descriptor *desc)
269 {
270         int ret;
271
272         desc->data_frpl = ib_alloc_fast_reg_page_list(ib_device,
273                                                       ISCSI_ISER_SG_TABLESIZE + 1);
274         if (IS_ERR(desc->data_frpl)) {
275                 ret = PTR_ERR(desc->data_frpl);
276                 iser_err("Failed to allocate ib_fast_reg_page_list err=%d\n",
277                          ret);
278                 return PTR_ERR(desc->data_frpl);
279         }
280
281         desc->data_mr = ib_alloc_fast_reg_mr(pd, ISCSI_ISER_SG_TABLESIZE + 1);
282         if (IS_ERR(desc->data_mr)) {
283                 ret = PTR_ERR(desc->data_mr);
284                 iser_err("Failed to allocate ib_fast_reg_mr err=%d\n", ret);
285                 goto fast_reg_mr_failure;
286         }
287         desc->reg_indicators |= ISER_DATA_KEY_VALID;
288
289         if (pi_enable) {
290                 struct ib_mr_init_attr mr_init_attr = {0};
291                 struct iser_pi_context *pi_ctx = NULL;
292
293                 desc->pi_ctx = kzalloc(sizeof(*desc->pi_ctx), GFP_KERNEL);
294                 if (!desc->pi_ctx) {
295                         iser_err("Failed to allocate pi context\n");
296                         ret = -ENOMEM;
297                         goto pi_ctx_alloc_failure;
298                 }
299                 pi_ctx = desc->pi_ctx;
300
301                 pi_ctx->prot_frpl = ib_alloc_fast_reg_page_list(ib_device,
302                                                     ISCSI_ISER_SG_TABLESIZE);
303                 if (IS_ERR(pi_ctx->prot_frpl)) {
304                         ret = PTR_ERR(pi_ctx->prot_frpl);
305                         iser_err("Failed to allocate prot frpl ret=%d\n",
306                                  ret);
307                         goto prot_frpl_failure;
308                 }
309
310                 pi_ctx->prot_mr = ib_alloc_fast_reg_mr(pd,
311                                                 ISCSI_ISER_SG_TABLESIZE + 1);
312                 if (IS_ERR(pi_ctx->prot_mr)) {
313                         ret = PTR_ERR(pi_ctx->prot_mr);
314                         iser_err("Failed to allocate prot frmr ret=%d\n",
315                                  ret);
316                         goto prot_mr_failure;
317                 }
318                 desc->reg_indicators |= ISER_PROT_KEY_VALID;
319
320                 mr_init_attr.max_reg_descriptors = 2;
321                 mr_init_attr.flags |= IB_MR_SIGNATURE_EN;
322                 pi_ctx->sig_mr = ib_create_mr(pd, &mr_init_attr);
323                 if (IS_ERR(pi_ctx->sig_mr)) {
324                         ret = PTR_ERR(pi_ctx->sig_mr);
325                         iser_err("Failed to allocate signature enabled mr err=%d\n",
326                                  ret);
327                         goto sig_mr_failure;
328                 }
329                 desc->reg_indicators |= ISER_SIG_KEY_VALID;
330         }
331         desc->reg_indicators &= ~ISER_FASTREG_PROTECTED;
332
333         iser_dbg("Create fr_desc %p page_list %p\n",
334                  desc, desc->data_frpl->page_list);
335
336         return 0;
337 sig_mr_failure:
338         ib_dereg_mr(desc->pi_ctx->prot_mr);
339 prot_mr_failure:
340         ib_free_fast_reg_page_list(desc->pi_ctx->prot_frpl);
341 prot_frpl_failure:
342         kfree(desc->pi_ctx);
343 pi_ctx_alloc_failure:
344         ib_dereg_mr(desc->data_mr);
345 fast_reg_mr_failure:
346         ib_free_fast_reg_page_list(desc->data_frpl);
347
348         return ret;
349 }
350
351 /**
352  * iser_create_fastreg_pool - Creates pool of fast_reg descriptors
353  * for fast registration work requests.
354  * returns 0 on success, or errno code on failure
355  */
356 int iser_create_fastreg_pool(struct ib_conn *ib_conn, unsigned cmds_max)
357 {
358         struct iser_device *device = ib_conn->device;
359         struct fast_reg_descriptor *desc;
360         int i, ret;
361
362         INIT_LIST_HEAD(&ib_conn->fastreg.pool);
363         ib_conn->fastreg.pool_size = 0;
364         for (i = 0; i < cmds_max; i++) {
365                 desc = kzalloc(sizeof(*desc), GFP_KERNEL);
366                 if (!desc) {
367                         iser_err("Failed to allocate a new fast_reg descriptor\n");
368                         ret = -ENOMEM;
369                         goto err;
370                 }
371
372                 ret = iser_create_fastreg_desc(device->ib_device, device->pd,
373                                                ib_conn->pi_support, desc);
374                 if (ret) {
375                         iser_err("Failed to create fastreg descriptor err=%d\n",
376                                  ret);
377                         kfree(desc);
378                         goto err;
379                 }
380
381                 list_add_tail(&desc->list, &ib_conn->fastreg.pool);
382                 ib_conn->fastreg.pool_size++;
383         }
384
385         return 0;
386
387 err:
388         iser_free_fastreg_pool(ib_conn);
389         return ret;
390 }
391
392 /**
393  * iser_free_fastreg_pool - releases the pool of fast_reg descriptors
394  */
395 void iser_free_fastreg_pool(struct ib_conn *ib_conn)
396 {
397         struct fast_reg_descriptor *desc, *tmp;
398         int i = 0;
399
400         if (list_empty(&ib_conn->fastreg.pool))
401                 return;
402
403         iser_info("freeing conn %p fr pool\n", ib_conn);
404
405         list_for_each_entry_safe(desc, tmp, &ib_conn->fastreg.pool, list) {
406                 list_del(&desc->list);
407                 ib_free_fast_reg_page_list(desc->data_frpl);
408                 ib_dereg_mr(desc->data_mr);
409                 if (desc->pi_ctx) {
410                         ib_free_fast_reg_page_list(desc->pi_ctx->prot_frpl);
411                         ib_dereg_mr(desc->pi_ctx->prot_mr);
412                         ib_destroy_mr(desc->pi_ctx->sig_mr);
413                         kfree(desc->pi_ctx);
414                 }
415                 kfree(desc);
416                 ++i;
417         }
418
419         if (i < ib_conn->fastreg.pool_size)
420                 iser_warn("pool still has %d regions registered\n",
421                           ib_conn->fastreg.pool_size - i);
422 }
423
424 /**
425  * iser_create_ib_conn_res - Queue-Pair (QP)
426  *
427  * returns 0 on success, -1 on failure
428  */
429 static int iser_create_ib_conn_res(struct ib_conn *ib_conn)
430 {
431         struct iser_conn *iser_conn = container_of(ib_conn, struct iser_conn,
432                                                    ib_conn);
433         struct iser_device      *device;
434         struct ib_device_attr *dev_attr;
435         struct ib_qp_init_attr  init_attr;
436         int                     ret = -ENOMEM;
437         int index, min_index = 0;
438
439         BUG_ON(ib_conn->device == NULL);
440
441         device = ib_conn->device;
442         dev_attr = &device->dev_attr;
443
444         memset(&init_attr, 0, sizeof init_attr);
445
446         mutex_lock(&ig.connlist_mutex);
447         /* select the CQ with the minimal number of usages */
448         for (index = 0; index < device->comps_used; index++) {
449                 if (device->comps[index].active_qps <
450                     device->comps[min_index].active_qps)
451                         min_index = index;
452         }
453         ib_conn->comp = &device->comps[min_index];
454         ib_conn->comp->active_qps++;
455         mutex_unlock(&ig.connlist_mutex);
456         iser_info("cq index %d used for ib_conn %p\n", min_index, ib_conn);
457
458         init_attr.event_handler = iser_qp_event_callback;
459         init_attr.qp_context    = (void *)ib_conn;
460         init_attr.send_cq       = ib_conn->comp->cq;
461         init_attr.recv_cq       = ib_conn->comp->cq;
462         init_attr.cap.max_recv_wr  = ISER_QP_MAX_RECV_DTOS;
463         init_attr.cap.max_send_sge = 2;
464         init_attr.cap.max_recv_sge = 1;
465         init_attr.sq_sig_type   = IB_SIGNAL_REQ_WR;
466         init_attr.qp_type       = IB_QPT_RC;
467         if (ib_conn->pi_support) {
468                 init_attr.cap.max_send_wr = ISER_QP_SIG_MAX_REQ_DTOS + 1;
469                 init_attr.create_flags |= IB_QP_CREATE_SIGNATURE_EN;
470                 iser_conn->max_cmds =
471                         ISER_GET_MAX_XMIT_CMDS(ISER_QP_SIG_MAX_REQ_DTOS);
472         } else {
473                 if (dev_attr->max_qp_wr > ISER_QP_MAX_REQ_DTOS) {
474                         init_attr.cap.max_send_wr  = ISER_QP_MAX_REQ_DTOS + 1;
475                         iser_conn->max_cmds =
476                                 ISER_GET_MAX_XMIT_CMDS(ISER_QP_MAX_REQ_DTOS);
477                 } else {
478                         init_attr.cap.max_send_wr = dev_attr->max_qp_wr;
479                         iser_conn->max_cmds =
480                                 ISER_GET_MAX_XMIT_CMDS(dev_attr->max_qp_wr);
481                         iser_dbg("device %s supports max_send_wr %d\n",
482                                  device->ib_device->name, dev_attr->max_qp_wr);
483                 }
484         }
485
486         ret = rdma_create_qp(ib_conn->cma_id, device->pd, &init_attr);
487         if (ret)
488                 goto out_err;
489
490         ib_conn->qp = ib_conn->cma_id->qp;
491         iser_info("setting conn %p cma_id %p qp %p\n",
492                   ib_conn, ib_conn->cma_id,
493                   ib_conn->cma_id->qp);
494         return ret;
495
496 out_err:
497         iser_err("unable to alloc mem or create resource, err %d\n", ret);
498         return ret;
499 }
500
501 /**
502  * based on the resolved device node GUID see if there already allocated
503  * device for this device. If there's no such, create one.
504  */
505 static
506 struct iser_device *iser_device_find_by_ib_device(struct rdma_cm_id *cma_id)
507 {
508         struct iser_device *device;
509
510         mutex_lock(&ig.device_list_mutex);
511
512         list_for_each_entry(device, &ig.device_list, ig_list)
513                 /* find if there's a match using the node GUID */
514                 if (device->ib_device->node_guid == cma_id->device->node_guid)
515                         goto inc_refcnt;
516
517         device = kzalloc(sizeof *device, GFP_KERNEL);
518         if (device == NULL)
519                 goto out;
520
521         /* assign this device to the device */
522         device->ib_device = cma_id->device;
523         /* init the device and link it into ig device list */
524         if (iser_create_device_ib_res(device)) {
525                 kfree(device);
526                 device = NULL;
527                 goto out;
528         }
529         list_add(&device->ig_list, &ig.device_list);
530
531 inc_refcnt:
532         device->refcount++;
533 out:
534         mutex_unlock(&ig.device_list_mutex);
535         return device;
536 }
537
538 /* if there's no demand for this device, release it */
539 static void iser_device_try_release(struct iser_device *device)
540 {
541         mutex_lock(&ig.device_list_mutex);
542         device->refcount--;
543         iser_info("device %p refcount %d\n", device, device->refcount);
544         if (!device->refcount) {
545                 iser_free_device_ib_res(device);
546                 list_del(&device->ig_list);
547                 kfree(device);
548         }
549         mutex_unlock(&ig.device_list_mutex);
550 }
551
552 /**
553  * Called with state mutex held
554  **/
555 static int iser_conn_state_comp_exch(struct iser_conn *iser_conn,
556                                      enum iser_conn_state comp,
557                                      enum iser_conn_state exch)
558 {
559         int ret;
560
561         ret = (iser_conn->state == comp);
562         if (ret)
563                 iser_conn->state = exch;
564
565         return ret;
566 }
567
568 void iser_release_work(struct work_struct *work)
569 {
570         struct iser_conn *iser_conn;
571
572         iser_conn = container_of(work, struct iser_conn, release_work);
573
574         /* Wait for conn_stop to complete */
575         wait_for_completion(&iser_conn->stop_completion);
576         /* Wait for IB resouces cleanup to complete */
577         wait_for_completion(&iser_conn->ib_completion);
578
579         mutex_lock(&iser_conn->state_mutex);
580         iser_conn->state = ISER_CONN_DOWN;
581         mutex_unlock(&iser_conn->state_mutex);
582
583         iser_conn_release(iser_conn);
584 }
585
586 /**
587  * iser_free_ib_conn_res - release IB related resources
588  * @iser_conn: iser connection struct
589  * @destroy_device: indicator if we need to try to release
590  *     the iser device (only iscsi shutdown and DEVICE_REMOVAL
591  *     will use this.
592  *
593  * This routine is called with the iser state mutex held
594  * so the cm_id removal is out of here. It is Safe to
595  * be invoked multiple times.
596  */
597 static void iser_free_ib_conn_res(struct iser_conn *iser_conn,
598                                   bool destroy_device)
599 {
600         struct ib_conn *ib_conn = &iser_conn->ib_conn;
601         struct iser_device *device = ib_conn->device;
602
603         iser_info("freeing conn %p cma_id %p qp %p\n",
604                   iser_conn, ib_conn->cma_id, ib_conn->qp);
605
606         iser_free_rx_descriptors(iser_conn);
607
608         if (ib_conn->qp != NULL) {
609                 ib_conn->comp->active_qps--;
610                 rdma_destroy_qp(ib_conn->cma_id);
611                 ib_conn->qp = NULL;
612         }
613
614         if (destroy_device && device != NULL) {
615                 iser_device_try_release(device);
616                 ib_conn->device = NULL;
617         }
618 }
619
620 /**
621  * Frees all conn objects and deallocs conn descriptor
622  */
623 void iser_conn_release(struct iser_conn *iser_conn)
624 {
625         struct ib_conn *ib_conn = &iser_conn->ib_conn;
626
627         mutex_lock(&ig.connlist_mutex);
628         list_del(&iser_conn->conn_list);
629         mutex_unlock(&ig.connlist_mutex);
630
631         mutex_lock(&iser_conn->state_mutex);
632         if (iser_conn->state != ISER_CONN_DOWN)
633                 iser_warn("iser conn %p state %d, expected state down.\n",
634                           iser_conn, iser_conn->state);
635         /*
636          * In case we never got to bind stage, we still need to
637          * release IB resources (which is safe to call more than once).
638          */
639         iser_free_ib_conn_res(iser_conn, true);
640         mutex_unlock(&iser_conn->state_mutex);
641
642         if (ib_conn->cma_id != NULL) {
643                 rdma_destroy_id(ib_conn->cma_id);
644                 ib_conn->cma_id = NULL;
645         }
646
647         kfree(iser_conn);
648 }
649
650 /**
651  * triggers start of the disconnect procedures and wait for them to be done
652  * Called with state mutex held
653  */
654 int iser_conn_terminate(struct iser_conn *iser_conn)
655 {
656         struct ib_conn *ib_conn = &iser_conn->ib_conn;
657         struct ib_send_wr *bad_wr;
658         int err = 0;
659
660         /* terminate the iser conn only if the conn state is UP */
661         if (!iser_conn_state_comp_exch(iser_conn, ISER_CONN_UP,
662                                        ISER_CONN_TERMINATING))
663                 return 0;
664
665         iser_info("iser_conn %p state %d\n", iser_conn, iser_conn->state);
666
667         /* suspend queuing of new iscsi commands */
668         if (iser_conn->iscsi_conn)
669                 iscsi_suspend_queue(iser_conn->iscsi_conn);
670
671         /*
672          * In case we didn't already clean up the cma_id (peer initiated
673          * a disconnection), we need to Cause the CMA to change the QP
674          * state to ERROR.
675          */
676         if (ib_conn->cma_id) {
677                 err = rdma_disconnect(ib_conn->cma_id);
678                 if (err)
679                         iser_err("Failed to disconnect, conn: 0x%p err %d\n",
680                                  iser_conn, err);
681
682                 /* post an indication that all flush errors were consumed */
683                 err = ib_post_send(ib_conn->qp, &ib_conn->beacon, &bad_wr);
684                 if (err) {
685                         iser_err("conn %p failed to post beacon", ib_conn);
686                         return 1;
687                 }
688
689                 wait_for_completion(&ib_conn->flush_comp);
690         }
691
692         return 1;
693 }
694
695 /**
696  * Called with state mutex held
697  **/
698 static void iser_connect_error(struct rdma_cm_id *cma_id)
699 {
700         struct iser_conn *iser_conn;
701
702         iser_conn = (struct iser_conn *)cma_id->context;
703         iser_conn->state = ISER_CONN_DOWN;
704 }
705
706 /**
707  * Called with state mutex held
708  **/
709 static void iser_addr_handler(struct rdma_cm_id *cma_id)
710 {
711         struct iser_device *device;
712         struct iser_conn   *iser_conn;
713         struct ib_conn   *ib_conn;
714         int    ret;
715
716         iser_conn = (struct iser_conn *)cma_id->context;
717         if (iser_conn->state != ISER_CONN_PENDING)
718                 /* bailout */
719                 return;
720
721         ib_conn = &iser_conn->ib_conn;
722         device = iser_device_find_by_ib_device(cma_id);
723         if (!device) {
724                 iser_err("device lookup/creation failed\n");
725                 iser_connect_error(cma_id);
726                 return;
727         }
728
729         ib_conn->device = device;
730
731         /* connection T10-PI support */
732         if (iser_pi_enable) {
733                 if (!(device->dev_attr.device_cap_flags &
734                       IB_DEVICE_SIGNATURE_HANDOVER)) {
735                         iser_warn("T10-PI requested but not supported on %s, "
736                                   "continue without T10-PI\n",
737                                   ib_conn->device->ib_device->name);
738                         ib_conn->pi_support = false;
739                 } else {
740                         ib_conn->pi_support = true;
741                 }
742         }
743
744         ret = rdma_resolve_route(cma_id, 1000);
745         if (ret) {
746                 iser_err("resolve route failed: %d\n", ret);
747                 iser_connect_error(cma_id);
748                 return;
749         }
750 }
751
752 /**
753  * Called with state mutex held
754  **/
755 static void iser_route_handler(struct rdma_cm_id *cma_id)
756 {
757         struct rdma_conn_param conn_param;
758         int    ret;
759         struct iser_cm_hdr req_hdr;
760         struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
761         struct ib_conn *ib_conn = &iser_conn->ib_conn;
762         struct iser_device *device = ib_conn->device;
763
764         if (iser_conn->state != ISER_CONN_PENDING)
765                 /* bailout */
766                 return;
767
768         ret = iser_create_ib_conn_res(ib_conn);
769         if (ret)
770                 goto failure;
771
772         memset(&conn_param, 0, sizeof conn_param);
773         conn_param.responder_resources = device->dev_attr.max_qp_rd_atom;
774         conn_param.initiator_depth     = 1;
775         conn_param.retry_count         = 7;
776         conn_param.rnr_retry_count     = 6;
777
778         memset(&req_hdr, 0, sizeof(req_hdr));
779         req_hdr.flags = (ISER_ZBVA_NOT_SUPPORTED |
780                         ISER_SEND_W_INV_NOT_SUPPORTED);
781         conn_param.private_data         = (void *)&req_hdr;
782         conn_param.private_data_len     = sizeof(struct iser_cm_hdr);
783
784         ret = rdma_connect(cma_id, &conn_param);
785         if (ret) {
786                 iser_err("failure connecting: %d\n", ret);
787                 goto failure;
788         }
789
790         return;
791 failure:
792         iser_connect_error(cma_id);
793 }
794
795 static void iser_connected_handler(struct rdma_cm_id *cma_id)
796 {
797         struct iser_conn *iser_conn;
798         struct ib_qp_attr attr;
799         struct ib_qp_init_attr init_attr;
800
801         iser_conn = (struct iser_conn *)cma_id->context;
802         if (iser_conn->state != ISER_CONN_PENDING)
803                 /* bailout */
804                 return;
805
806         (void)ib_query_qp(cma_id->qp, &attr, ~0, &init_attr);
807         iser_info("remote qpn:%x my qpn:%x\n", attr.dest_qp_num, cma_id->qp->qp_num);
808
809         iser_conn->state = ISER_CONN_UP;
810         complete(&iser_conn->up_completion);
811 }
812
813 static void iser_disconnected_handler(struct rdma_cm_id *cma_id)
814 {
815         struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
816
817         if (iser_conn_terminate(iser_conn)) {
818                 if (iser_conn->iscsi_conn)
819                         iscsi_conn_failure(iser_conn->iscsi_conn,
820                                            ISCSI_ERR_CONN_FAILED);
821                 else
822                         iser_err("iscsi_iser connection isn't bound\n");
823         }
824 }
825
826 static void iser_cleanup_handler(struct rdma_cm_id *cma_id,
827                                  bool destroy_device)
828 {
829         struct iser_conn *iser_conn = (struct iser_conn *)cma_id->context;
830
831         /*
832          * We are not guaranteed that we visited disconnected_handler
833          * by now, call it here to be safe that we handle CM drep
834          * and flush errors.
835          */
836         iser_disconnected_handler(cma_id);
837         iser_free_ib_conn_res(iser_conn, destroy_device);
838         complete(&iser_conn->ib_completion);
839 };
840
841 static int iser_cma_handler(struct rdma_cm_id *cma_id, struct rdma_cm_event *event)
842 {
843         struct iser_conn *iser_conn;
844         int ret = 0;
845
846         iser_conn = (struct iser_conn *)cma_id->context;
847         iser_info("event %d status %d conn %p id %p\n",
848                   event->event, event->status, cma_id->context, cma_id);
849
850         mutex_lock(&iser_conn->state_mutex);
851         switch (event->event) {
852         case RDMA_CM_EVENT_ADDR_RESOLVED:
853                 iser_addr_handler(cma_id);
854                 break;
855         case RDMA_CM_EVENT_ROUTE_RESOLVED:
856                 iser_route_handler(cma_id);
857                 break;
858         case RDMA_CM_EVENT_ESTABLISHED:
859                 iser_connected_handler(cma_id);
860                 break;
861         case RDMA_CM_EVENT_ADDR_ERROR:
862         case RDMA_CM_EVENT_ROUTE_ERROR:
863         case RDMA_CM_EVENT_CONNECT_ERROR:
864         case RDMA_CM_EVENT_UNREACHABLE:
865         case RDMA_CM_EVENT_REJECTED:
866                 iser_connect_error(cma_id);
867                 break;
868         case RDMA_CM_EVENT_DISCONNECTED:
869         case RDMA_CM_EVENT_ADDR_CHANGE:
870                 iser_disconnected_handler(cma_id);
871                 break;
872         case RDMA_CM_EVENT_DEVICE_REMOVAL:
873                 /*
874                  * we *must* destroy the device as we cannot rely
875                  * on iscsid to be around to initiate error handling.
876                  * also implicitly destroy the cma_id.
877                  */
878                 iser_cleanup_handler(cma_id, true);
879                 iser_conn->ib_conn.cma_id = NULL;
880                 ret = 1;
881                 break;
882         case RDMA_CM_EVENT_TIMEWAIT_EXIT:
883                 iser_cleanup_handler(cma_id, false);
884                 break;
885         default:
886                 iser_err("Unexpected RDMA CM event (%d)\n", event->event);
887                 break;
888         }
889         mutex_unlock(&iser_conn->state_mutex);
890
891         return ret;
892 }
893
894 void iser_conn_init(struct iser_conn *iser_conn)
895 {
896         iser_conn->state = ISER_CONN_INIT;
897         iser_conn->ib_conn.post_recv_buf_count = 0;
898         init_completion(&iser_conn->ib_conn.flush_comp);
899         init_completion(&iser_conn->stop_completion);
900         init_completion(&iser_conn->ib_completion);
901         init_completion(&iser_conn->up_completion);
902         INIT_LIST_HEAD(&iser_conn->conn_list);
903         spin_lock_init(&iser_conn->ib_conn.lock);
904         mutex_init(&iser_conn->state_mutex);
905 }
906
907  /**
908  * starts the process of connecting to the target
909  * sleeps until the connection is established or rejected
910  */
911 int iser_connect(struct iser_conn   *iser_conn,
912                  struct sockaddr    *src_addr,
913                  struct sockaddr    *dst_addr,
914                  int                 non_blocking)
915 {
916         struct ib_conn *ib_conn = &iser_conn->ib_conn;
917         int err = 0;
918
919         mutex_lock(&iser_conn->state_mutex);
920
921         sprintf(iser_conn->name, "%pISp", dst_addr);
922
923         iser_info("connecting to: %s\n", iser_conn->name);
924
925         /* the device is known only --after-- address resolution */
926         ib_conn->device = NULL;
927
928         iser_conn->state = ISER_CONN_PENDING;
929
930         ib_conn->beacon.wr_id = ISER_BEACON_WRID;
931         ib_conn->beacon.opcode = IB_WR_SEND;
932
933         ib_conn->cma_id = rdma_create_id(iser_cma_handler,
934                                          (void *)iser_conn,
935                                          RDMA_PS_TCP, IB_QPT_RC);
936         if (IS_ERR(ib_conn->cma_id)) {
937                 err = PTR_ERR(ib_conn->cma_id);
938                 iser_err("rdma_create_id failed: %d\n", err);
939                 goto id_failure;
940         }
941
942         err = rdma_resolve_addr(ib_conn->cma_id, src_addr, dst_addr, 1000);
943         if (err) {
944                 iser_err("rdma_resolve_addr failed: %d\n", err);
945                 goto addr_failure;
946         }
947
948         if (!non_blocking) {
949                 wait_for_completion_interruptible(&iser_conn->up_completion);
950
951                 if (iser_conn->state != ISER_CONN_UP) {
952                         err =  -EIO;
953                         goto connect_failure;
954                 }
955         }
956         mutex_unlock(&iser_conn->state_mutex);
957
958         mutex_lock(&ig.connlist_mutex);
959         list_add(&iser_conn->conn_list, &ig.connlist);
960         mutex_unlock(&ig.connlist_mutex);
961         return 0;
962
963 id_failure:
964         ib_conn->cma_id = NULL;
965 addr_failure:
966         iser_conn->state = ISER_CONN_DOWN;
967 connect_failure:
968         mutex_unlock(&iser_conn->state_mutex);
969         iser_conn_release(iser_conn);
970         return err;
971 }
972
973 /**
974  * iser_reg_page_vec - Register physical memory
975  *
976  * returns: 0 on success, errno code on failure
977  */
978 int iser_reg_page_vec(struct ib_conn *ib_conn,
979                       struct iser_page_vec *page_vec,
980                       struct iser_mem_reg  *mem_reg)
981 {
982         struct ib_pool_fmr *mem;
983         u64                io_addr;
984         u64                *page_list;
985         int                status;
986
987         page_list = page_vec->pages;
988         io_addr   = page_list[0];
989
990         mem  = ib_fmr_pool_map_phys(ib_conn->fmr.pool,
991                                     page_list,
992                                     page_vec->length,
993                                     io_addr);
994
995         if (IS_ERR(mem)) {
996                 status = (int)PTR_ERR(mem);
997                 iser_err("ib_fmr_pool_map_phys failed: %d\n", status);
998                 return status;
999         }
1000
1001         mem_reg->lkey  = mem->fmr->lkey;
1002         mem_reg->rkey  = mem->fmr->rkey;
1003         mem_reg->len   = page_vec->length * SIZE_4K;
1004         mem_reg->va    = io_addr;
1005         mem_reg->is_mr = 1;
1006         mem_reg->mem_h = (void *)mem;
1007
1008         mem_reg->va   += page_vec->offset;
1009         mem_reg->len   = page_vec->data_size;
1010
1011         iser_dbg("PHYSICAL Mem.register, [PHYS p_array: 0x%p, sz: %d, "
1012                  "entry[0]: (0x%08lx,%ld)] -> "
1013                  "[lkey: 0x%08X mem_h: 0x%p va: 0x%08lX sz: %ld]\n",
1014                  page_vec, page_vec->length,
1015                  (unsigned long)page_vec->pages[0],
1016                  (unsigned long)page_vec->data_size,
1017                  (unsigned int)mem_reg->lkey, mem_reg->mem_h,
1018                  (unsigned long)mem_reg->va, (unsigned long)mem_reg->len);
1019         return 0;
1020 }
1021
1022 /**
1023  * Unregister (previosuly registered using FMR) memory.
1024  * If memory is non-FMR does nothing.
1025  */
1026 void iser_unreg_mem_fmr(struct iscsi_iser_task *iser_task,
1027                         enum iser_data_dir cmd_dir)
1028 {
1029         struct iser_mem_reg *reg = &iser_task->rdma_regd[cmd_dir].reg;
1030         int ret;
1031
1032         if (!reg->is_mr)
1033                 return;
1034
1035         iser_dbg("PHYSICAL Mem.Unregister mem_h %p\n",reg->mem_h);
1036
1037         ret = ib_fmr_pool_unmap((struct ib_pool_fmr *)reg->mem_h);
1038         if (ret)
1039                 iser_err("ib_fmr_pool_unmap failed %d\n", ret);
1040
1041         reg->mem_h = NULL;
1042 }
1043
1044 void iser_unreg_mem_fastreg(struct iscsi_iser_task *iser_task,
1045                             enum iser_data_dir cmd_dir)
1046 {
1047         struct iser_mem_reg *reg = &iser_task->rdma_regd[cmd_dir].reg;
1048         struct iser_conn *iser_conn = iser_task->iser_conn;
1049         struct ib_conn *ib_conn = &iser_conn->ib_conn;
1050         struct fast_reg_descriptor *desc = reg->mem_h;
1051
1052         if (!reg->is_mr)
1053                 return;
1054
1055         reg->mem_h = NULL;
1056         reg->is_mr = 0;
1057         spin_lock_bh(&ib_conn->lock);
1058         list_add_tail(&desc->list, &ib_conn->fastreg.pool);
1059         spin_unlock_bh(&ib_conn->lock);
1060 }
1061
1062 int iser_post_recvl(struct iser_conn *iser_conn)
1063 {
1064         struct ib_recv_wr rx_wr, *rx_wr_failed;
1065         struct ib_conn *ib_conn = &iser_conn->ib_conn;
1066         struct ib_sge     sge;
1067         int ib_ret;
1068
1069         sge.addr   = iser_conn->login_resp_dma;
1070         sge.length = ISER_RX_LOGIN_SIZE;
1071         sge.lkey   = ib_conn->device->mr->lkey;
1072
1073         rx_wr.wr_id   = (unsigned long)iser_conn->login_resp_buf;
1074         rx_wr.sg_list = &sge;
1075         rx_wr.num_sge = 1;
1076         rx_wr.next    = NULL;
1077
1078         ib_conn->post_recv_buf_count++;
1079         ib_ret  = ib_post_recv(ib_conn->qp, &rx_wr, &rx_wr_failed);
1080         if (ib_ret) {
1081                 iser_err("ib_post_recv failed ret=%d\n", ib_ret);
1082                 ib_conn->post_recv_buf_count--;
1083         }
1084         return ib_ret;
1085 }
1086
1087 int iser_post_recvm(struct iser_conn *iser_conn, int count)
1088 {
1089         struct ib_recv_wr *rx_wr, *rx_wr_failed;
1090         int i, ib_ret;
1091         struct ib_conn *ib_conn = &iser_conn->ib_conn;
1092         unsigned int my_rx_head = iser_conn->rx_desc_head;
1093         struct iser_rx_desc *rx_desc;
1094
1095         for (rx_wr = ib_conn->rx_wr, i = 0; i < count; i++, rx_wr++) {
1096                 rx_desc         = &iser_conn->rx_descs[my_rx_head];
1097                 rx_wr->wr_id    = (unsigned long)rx_desc;
1098                 rx_wr->sg_list  = &rx_desc->rx_sg;
1099                 rx_wr->num_sge  = 1;
1100                 rx_wr->next     = rx_wr + 1;
1101                 my_rx_head = (my_rx_head + 1) & iser_conn->qp_max_recv_dtos_mask;
1102         }
1103
1104         rx_wr--;
1105         rx_wr->next = NULL; /* mark end of work requests list */
1106
1107         ib_conn->post_recv_buf_count += count;
1108         ib_ret  = ib_post_recv(ib_conn->qp, ib_conn->rx_wr, &rx_wr_failed);
1109         if (ib_ret) {
1110                 iser_err("ib_post_recv failed ret=%d\n", ib_ret);
1111                 ib_conn->post_recv_buf_count -= count;
1112         } else
1113                 iser_conn->rx_desc_head = my_rx_head;
1114         return ib_ret;
1115 }
1116
1117
1118 /**
1119  * iser_start_send - Initiate a Send DTO operation
1120  *
1121  * returns 0 on success, -1 on failure
1122  */
1123 int iser_post_send(struct ib_conn *ib_conn, struct iser_tx_desc *tx_desc,
1124                    bool signal)
1125 {
1126         int               ib_ret;
1127         struct ib_send_wr send_wr, *send_wr_failed;
1128
1129         ib_dma_sync_single_for_device(ib_conn->device->ib_device,
1130                                       tx_desc->dma_addr, ISER_HEADERS_LEN,
1131                                       DMA_TO_DEVICE);
1132
1133         send_wr.next       = NULL;
1134         send_wr.wr_id      = (unsigned long)tx_desc;
1135         send_wr.sg_list    = tx_desc->tx_sg;
1136         send_wr.num_sge    = tx_desc->num_sge;
1137         send_wr.opcode     = IB_WR_SEND;
1138         send_wr.send_flags = signal ? IB_SEND_SIGNALED : 0;
1139
1140         ib_ret = ib_post_send(ib_conn->qp, &send_wr, &send_wr_failed);
1141         if (ib_ret)
1142                 iser_err("ib_post_send failed, ret:%d\n", ib_ret);
1143
1144         return ib_ret;
1145 }
1146
1147 /**
1148  * is_iser_tx_desc - Indicate if the completion wr_id
1149  *     is a TX descriptor or not.
1150  * @iser_conn: iser connection
1151  * @wr_id: completion WR identifier
1152  *
1153  * Since we cannot rely on wc opcode in FLUSH errors
1154  * we must work around it by checking if the wr_id address
1155  * falls in the iser connection rx_descs buffer. If so
1156  * it is an RX descriptor, otherwize it is a TX.
1157  */
1158 static inline bool
1159 is_iser_tx_desc(struct iser_conn *iser_conn, void *wr_id)
1160 {
1161         void *start = iser_conn->rx_descs;
1162         int len = iser_conn->num_rx_descs * sizeof(*iser_conn->rx_descs);
1163
1164         if (wr_id >= start && wr_id < start + len)
1165                 return false;
1166
1167         return true;
1168 }
1169
1170 /**
1171  * iser_handle_comp_error() - Handle error completion
1172  * @ib_conn:   connection RDMA resources
1173  * @wc:        work completion
1174  *
1175  * Notes: We may handle a FLUSH error completion and in this case
1176  *        we only cleanup in case TX type was DATAOUT. For non-FLUSH
1177  *        error completion we should also notify iscsi layer that
1178  *        connection is failed (in case we passed bind stage).
1179  */
1180 static void
1181 iser_handle_comp_error(struct ib_conn *ib_conn,
1182                        struct ib_wc *wc)
1183 {
1184         struct iser_conn *iser_conn = container_of(ib_conn, struct iser_conn,
1185                                                    ib_conn);
1186
1187         if (wc->status != IB_WC_WR_FLUSH_ERR)
1188                 if (iser_conn->iscsi_conn)
1189                         iscsi_conn_failure(iser_conn->iscsi_conn,
1190                                            ISCSI_ERR_CONN_FAILED);
1191
1192         if (is_iser_tx_desc(iser_conn, (void *)wc->wr_id)) {
1193                 struct iser_tx_desc *desc = (struct iser_tx_desc *)wc->wr_id;
1194
1195                 if (desc->type == ISCSI_TX_DATAOUT)
1196                         kmem_cache_free(ig.desc_cache, desc);
1197         } else {
1198                 ib_conn->post_recv_buf_count--;
1199         }
1200 }
1201
1202 /**
1203  * iser_handle_wc - handle a single work completion
1204  * @wc: work completion
1205  *
1206  * Soft-IRQ context, work completion can be either
1207  * SEND or RECV, and can turn out successful or
1208  * with error (or flush error).
1209  */
1210 static void iser_handle_wc(struct ib_wc *wc)
1211 {
1212         struct ib_conn *ib_conn;
1213         struct iser_tx_desc *tx_desc;
1214         struct iser_rx_desc *rx_desc;
1215
1216         ib_conn = wc->qp->qp_context;
1217         if (wc->status == IB_WC_SUCCESS) {
1218                 if (wc->opcode == IB_WC_RECV) {
1219                         rx_desc = (struct iser_rx_desc *)wc->wr_id;
1220                         iser_rcv_completion(rx_desc, wc->byte_len,
1221                                             ib_conn);
1222                 } else
1223                 if (wc->opcode == IB_WC_SEND) {
1224                         tx_desc = (struct iser_tx_desc *)wc->wr_id;
1225                         iser_snd_completion(tx_desc, ib_conn);
1226                 } else {
1227                         iser_err("Unknown wc opcode %d\n", wc->opcode);
1228                 }
1229         } else {
1230                 if (wc->status != IB_WC_WR_FLUSH_ERR)
1231                         iser_err("wr id %llx status %d vend_err %x\n",
1232                                  wc->wr_id, wc->status, wc->vendor_err);
1233                 else
1234                         iser_dbg("flush error: wr id %llx\n", wc->wr_id);
1235
1236                 if (wc->wr_id != ISER_FASTREG_LI_WRID &&
1237                     wc->wr_id != ISER_BEACON_WRID)
1238                         iser_handle_comp_error(ib_conn, wc);
1239
1240                 /* complete in case all flush errors were consumed */
1241                 if (wc->wr_id == ISER_BEACON_WRID)
1242                         complete(&ib_conn->flush_comp);
1243         }
1244 }
1245
1246 /**
1247  * iser_cq_tasklet_fn - iSER completion polling loop
1248  * @data: iSER completion context
1249  *
1250  * Soft-IRQ context, polling connection CQ until
1251  * either CQ was empty or we exausted polling budget
1252  */
1253 static void iser_cq_tasklet_fn(unsigned long data)
1254 {
1255         struct iser_comp *comp = (struct iser_comp *)data;
1256         struct ib_cq *cq = comp->cq;
1257         struct ib_wc *const wcs = comp->wcs;
1258         int i, n, completed = 0;
1259
1260         while ((n = ib_poll_cq(cq, ARRAY_SIZE(comp->wcs), wcs)) > 0) {
1261                 for (i = 0; i < n; i++)
1262                         iser_handle_wc(&wcs[i]);
1263
1264                 completed += n;
1265                 if (completed >= iser_cq_poll_limit)
1266                         break;
1267         }
1268
1269         /*
1270          * It is assumed here that arming CQ only once its empty
1271          * would not cause interrupts to be missed.
1272          */
1273         ib_req_notify_cq(cq, IB_CQ_NEXT_COMP);
1274
1275         iser_dbg("got %d completions\n", completed);
1276 }
1277
1278 static void iser_cq_callback(struct ib_cq *cq, void *cq_context)
1279 {
1280         struct iser_comp *comp = cq_context;
1281
1282         tasklet_schedule(&comp->tasklet);
1283 }
1284
1285 u8 iser_check_task_pi_status(struct iscsi_iser_task *iser_task,
1286                              enum iser_data_dir cmd_dir, sector_t *sector)
1287 {
1288         struct iser_mem_reg *reg = &iser_task->rdma_regd[cmd_dir].reg;
1289         struct fast_reg_descriptor *desc = reg->mem_h;
1290         unsigned long sector_size = iser_task->sc->device->sector_size;
1291         struct ib_mr_status mr_status;
1292         int ret;
1293
1294         if (desc && desc->reg_indicators & ISER_FASTREG_PROTECTED) {
1295                 desc->reg_indicators &= ~ISER_FASTREG_PROTECTED;
1296                 ret = ib_check_mr_status(desc->pi_ctx->sig_mr,
1297                                          IB_MR_CHECK_SIG_STATUS, &mr_status);
1298                 if (ret) {
1299                         pr_err("ib_check_mr_status failed, ret %d\n", ret);
1300                         goto err;
1301                 }
1302
1303                 if (mr_status.fail_status & IB_MR_CHECK_SIG_STATUS) {
1304                         sector_t sector_off = mr_status.sig_err.sig_err_offset;
1305
1306                         do_div(sector_off, sector_size + 8);
1307                         *sector = scsi_get_lba(iser_task->sc) + sector_off;
1308
1309                         pr_err("PI error found type %d at sector %llx "
1310                                "expected %x vs actual %x\n",
1311                                mr_status.sig_err.err_type,
1312                                (unsigned long long)*sector,
1313                                mr_status.sig_err.expected,
1314                                mr_status.sig_err.actual);
1315
1316                         switch (mr_status.sig_err.err_type) {
1317                         case IB_SIG_BAD_GUARD:
1318                                 return 0x1;
1319                         case IB_SIG_BAD_REFTAG:
1320                                 return 0x3;
1321                         case IB_SIG_BAD_APPTAG:
1322                                 return 0x2;
1323                         }
1324                 }
1325         }
1326
1327         return 0;
1328 err:
1329         /* Not alot we can do here, return ambiguous guard error */
1330         return 0x1;
1331 }