projects / linux-2.6-block.git / blame_incremental
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (non-incremental) | history | HEAD
Merge tag 'mm-hotfixes-stable-2025-07-11-16-16' of git://git.kernel.org/pub/scm/linux...
[linux-2.6-block.git] / drivers / nvme / host / tcp.c
... / ...
CommitLineData
1// SPDX-License-Identifier: GPL-2.0
2/*
3 * NVMe over Fabrics TCP host.
4 * Copyright (c) 2018 Lightbits Labs. All rights reserved.
5 */
6#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
7#include <linux/module.h>
8#include <linux/init.h>
9#include <linux/slab.h>
10#include <linux/err.h>
11#include <linux/crc32.h>
12#include <linux/nvme-tcp.h>
13#include <linux/nvme-keyring.h>
14#include <net/sock.h>
15#include <net/tcp.h>
16#include <net/tls.h>
17#include <net/tls_prot.h>
18#include <net/handshake.h>
19#include <linux/blk-mq.h>
20#include <net/busy_poll.h>
21#include <trace/events/sock.h>
22
23#include "nvme.h"
24#include "fabrics.h"
25
26struct nvme_tcp_queue;
27
28/* Define the socket priority to use for connections were it is desirable
29 * that the NIC consider performing optimized packet processing or filtering.
30 * A non-zero value being sufficient to indicate general consideration of any
31 * possible optimization. Making it a module param allows for alternative
32 * values that may be unique for some NIC implementations.
33 */
34static int so_priority;
35module_param(so_priority, int, 0644);
36MODULE_PARM_DESC(so_priority, "nvme tcp socket optimize priority");
37
38/*
39 * Use the unbound workqueue for nvme_tcp_wq, then we can set the cpu affinity
40 * from sysfs.
41 */
42static bool wq_unbound;
43module_param(wq_unbound, bool, 0644);
44MODULE_PARM_DESC(wq_unbound, "Use unbound workqueue for nvme-tcp IO context (default false)");
45
46/*
47 * TLS handshake timeout
48 */
49static int tls_handshake_timeout = 10;
50#ifdef CONFIG_NVME_TCP_TLS
51module_param(tls_handshake_timeout, int, 0644);
52MODULE_PARM_DESC(tls_handshake_timeout,
53 "nvme TLS handshake timeout in seconds (default 10)");
54#endif
55
56static atomic_t nvme_tcp_cpu_queues[NR_CPUS];
57
58#ifdef CONFIG_DEBUG_LOCK_ALLOC
59/* lockdep can detect a circular dependency of the form
60 * sk_lock -> mmap_lock (page fault) -> fs locks -> sk_lock
61 * because dependencies are tracked for both nvme-tcp and user contexts. Using
62 * a separate class prevents lockdep from conflating nvme-tcp socket use with
63 * user-space socket API use.
64 */
65static struct lock_class_key nvme_tcp_sk_key[2];
66static struct lock_class_key nvme_tcp_slock_key[2];
67
68static void nvme_tcp_reclassify_socket(struct socket *sock)
69{
70 struct sock *sk = sock->sk;
71
72 if (WARN_ON_ONCE(!sock_allow_reclassification(sk)))
73 return;
74
75 switch (sk->sk_family) {
76 case AF_INET:
77 sock_lock_init_class_and_name(sk, "slock-AF_INET-NVME",
78 &nvme_tcp_slock_key[0],
79 "sk_lock-AF_INET-NVME",
80 &nvme_tcp_sk_key[0]);
81 break;
82 case AF_INET6:
83 sock_lock_init_class_and_name(sk, "slock-AF_INET6-NVME",
84 &nvme_tcp_slock_key[1],
85 "sk_lock-AF_INET6-NVME",
86 &nvme_tcp_sk_key[1]);
87 break;
88 default:
89 WARN_ON_ONCE(1);
90 }
91}
92#else
93static void nvme_tcp_reclassify_socket(struct socket *sock) { }
94#endif
95
96enum nvme_tcp_send_state {
97 NVME_TCP_SEND_CMD_PDU = 0,
98 NVME_TCP_SEND_H2C_PDU,
99 NVME_TCP_SEND_DATA,
100 NVME_TCP_SEND_DDGST,
101};
102
103struct nvme_tcp_request {
104 struct nvme_request req;
105 void *pdu;
106 struct nvme_tcp_queue *queue;
107 u32 data_len;
108 u32 pdu_len;
109 u32 pdu_sent;
110 u32 h2cdata_left;
111 u32 h2cdata_offset;
112 u16 ttag;
113 __le16 status;
114 struct list_head entry;
115 struct llist_node lentry;
116 __le32 ddgst;
117
118 struct bio *curr_bio;
119 struct iov_iter iter;
120
121 /* send state */
122 size_t offset;
123 size_t data_sent;
124 enum nvme_tcp_send_state state;
125};
126
127enum nvme_tcp_queue_flags {
128 NVME_TCP_Q_ALLOCATED = 0,
129 NVME_TCP_Q_LIVE = 1,
130 NVME_TCP_Q_POLLING = 2,
131 NVME_TCP_Q_IO_CPU_SET = 3,
132};
133
134enum nvme_tcp_recv_state {
135 NVME_TCP_RECV_PDU = 0,
136 NVME_TCP_RECV_DATA,
137 NVME_TCP_RECV_DDGST,
138};
139
140struct nvme_tcp_ctrl;
141struct nvme_tcp_queue {
142 struct socket *sock;
143 struct work_struct io_work;
144 int io_cpu;
145
146 struct mutex queue_lock;
147 struct mutex send_mutex;
148 struct llist_head req_list;
149 struct list_head send_list;
150
151 /* recv state */
152 void *pdu;
153 int pdu_remaining;
154 int pdu_offset;
155 size_t data_remaining;
156 size_t ddgst_remaining;
157 unsigned int nr_cqe;
158
159 /* send state */
160 struct nvme_tcp_request *request;
161
162 u32 maxh2cdata;
163 size_t cmnd_capsule_len;
164 struct nvme_tcp_ctrl *ctrl;
165 unsigned long flags;
166 bool rd_enabled;
167
168 bool hdr_digest;
169 bool data_digest;
170 bool tls_enabled;
171 u32 rcv_crc;
172 u32 snd_crc;
173 __le32 exp_ddgst;
174 __le32 recv_ddgst;
175 struct completion tls_complete;
176 int tls_err;
177 struct page_frag_cache pf_cache;
178
179 void (*state_change)(struct sock *);
180 void (*data_ready)(struct sock *);
181 void (*write_space)(struct sock *);
182};
183
184struct nvme_tcp_ctrl {
185 /* read only in the hot path */
186 struct nvme_tcp_queue *queues;
187 struct blk_mq_tag_set tag_set;
188
189 /* other member variables */
190 struct list_head list;
191 struct blk_mq_tag_set admin_tag_set;
192 struct sockaddr_storage addr;
193 struct sockaddr_storage src_addr;
194 struct nvme_ctrl ctrl;
195
196 struct work_struct err_work;
197 struct delayed_work connect_work;
198 struct nvme_tcp_request async_req;
199 u32 io_queues[HCTX_MAX_TYPES];
200};
201
202static LIST_HEAD(nvme_tcp_ctrl_list);
203static DEFINE_MUTEX(nvme_tcp_ctrl_mutex);
204static struct workqueue_struct *nvme_tcp_wq;
205static const struct blk_mq_ops nvme_tcp_mq_ops;
206static const struct blk_mq_ops nvme_tcp_admin_mq_ops;
207static int nvme_tcp_try_send(struct nvme_tcp_queue *queue);
208
209static inline struct nvme_tcp_ctrl *to_tcp_ctrl(struct nvme_ctrl *ctrl)
210{
211 return container_of(ctrl, struct nvme_tcp_ctrl, ctrl);
212}
213
214static inline int nvme_tcp_queue_id(struct nvme_tcp_queue *queue)
215{
216 return queue - queue->ctrl->queues;
217}
218
219static inline bool nvme_tcp_recv_pdu_supported(enum nvme_tcp_pdu_type type)
220{
221 switch (type) {
222 case nvme_tcp_c2h_term:
223 case nvme_tcp_c2h_data:
224 case nvme_tcp_r2t:
225 case nvme_tcp_rsp:
226 return true;
227 default:
228 return false;
229 }
230}
231
232/*
233 * Check if the queue is TLS encrypted
234 */
235static inline bool nvme_tcp_queue_tls(struct nvme_tcp_queue *queue)
236{
237 if (!IS_ENABLED(CONFIG_NVME_TCP_TLS))
238 return 0;
239
240 return queue->tls_enabled;
241}
242
243/*
244 * Check if TLS is configured for the controller.
245 */
246static inline bool nvme_tcp_tls_configured(struct nvme_ctrl *ctrl)
247{
248 if (!IS_ENABLED(CONFIG_NVME_TCP_TLS))
249 return 0;
250
251 return ctrl->opts->tls || ctrl->opts->concat;
252}
253
254static inline struct blk_mq_tags *nvme_tcp_tagset(struct nvme_tcp_queue *queue)
255{
256 u32 queue_idx = nvme_tcp_queue_id(queue);
257
258 if (queue_idx == 0)
259 return queue->ctrl->admin_tag_set.tags[queue_idx];
260 return queue->ctrl->tag_set.tags[queue_idx - 1];
261}
262
263static inline u8 nvme_tcp_hdgst_len(struct nvme_tcp_queue *queue)
264{
265 return queue->hdr_digest ? NVME_TCP_DIGEST_LENGTH : 0;
266}
267
268static inline u8 nvme_tcp_ddgst_len(struct nvme_tcp_queue *queue)
269{
270 return queue->data_digest ? NVME_TCP_DIGEST_LENGTH : 0;
271}
272
273static inline void *nvme_tcp_req_cmd_pdu(struct nvme_tcp_request *req)
274{
275 return req->pdu;
276}
277
278static inline void *nvme_tcp_req_data_pdu(struct nvme_tcp_request *req)
279{
280 /* use the pdu space in the back for the data pdu */
281 return req->pdu + sizeof(struct nvme_tcp_cmd_pdu) -
282 sizeof(struct nvme_tcp_data_pdu);
283}
284
285static inline size_t nvme_tcp_inline_data_size(struct nvme_tcp_request *req)
286{
287 if (nvme_is_fabrics(req->req.cmd))
288 return NVME_TCP_ADMIN_CCSZ;
289 return req->queue->cmnd_capsule_len - sizeof(struct nvme_command);
290}
291
292static inline bool nvme_tcp_async_req(struct nvme_tcp_request *req)
293{
294 return req == &req->queue->ctrl->async_req;
295}
296
297static inline bool nvme_tcp_has_inline_data(struct nvme_tcp_request *req)
298{
299 struct request *rq;
300
301 if (unlikely(nvme_tcp_async_req(req)))
302 return false; /* async events don't have a request */
303
304 rq = blk_mq_rq_from_pdu(req);
305
306 return rq_data_dir(rq) == WRITE && req->data_len &&
307 req->data_len <= nvme_tcp_inline_data_size(req);
308}
309
310static inline struct page *nvme_tcp_req_cur_page(struct nvme_tcp_request *req)
311{
312 return req->iter.bvec->bv_page;
313}
314
315static inline size_t nvme_tcp_req_cur_offset(struct nvme_tcp_request *req)
316{
317 return req->iter.bvec->bv_offset + req->iter.iov_offset;
318}
319
320static inline size_t nvme_tcp_req_cur_length(struct nvme_tcp_request *req)
321{
322 return min_t(size_t, iov_iter_single_seg_count(&req->iter),
323 req->pdu_len - req->pdu_sent);
324}
325
326static inline size_t nvme_tcp_pdu_data_left(struct nvme_tcp_request *req)
327{
328 return rq_data_dir(blk_mq_rq_from_pdu(req)) == WRITE ?
329 req->pdu_len - req->pdu_sent : 0;
330}
331
332static inline size_t nvme_tcp_pdu_last_send(struct nvme_tcp_request *req,
333 int len)
334{
335 return nvme_tcp_pdu_data_left(req) <= len;
336}
337
338static void nvme_tcp_init_iter(struct nvme_tcp_request *req,
339 unsigned int dir)
340{
341 struct request *rq = blk_mq_rq_from_pdu(req);
342 struct bio_vec *vec;
343 unsigned int size;
344 int nr_bvec;
345 size_t offset;
346
347 if (rq->rq_flags & RQF_SPECIAL_PAYLOAD) {
348 vec = &rq->special_vec;
349 nr_bvec = 1;
350 size = blk_rq_payload_bytes(rq);
351 offset = 0;
352 } else {
353 struct bio *bio = req->curr_bio;
354 struct bvec_iter bi;
355 struct bio_vec bv;
356
357 vec = __bvec_iter_bvec(bio->bi_io_vec, bio->bi_iter);
358 nr_bvec = 0;
359 bio_for_each_bvec(bv, bio, bi) {
360 nr_bvec++;
361 }
362 size = bio->bi_iter.bi_size;
363 offset = bio->bi_iter.bi_bvec_done;
364 }
365
366 iov_iter_bvec(&req->iter, dir, vec, nr_bvec, size);
367 req->iter.iov_offset = offset;
368}
369
370static inline void nvme_tcp_advance_req(struct nvme_tcp_request *req,
371 int len)
372{
373 req->data_sent += len;
374 req->pdu_sent += len;
375 iov_iter_advance(&req->iter, len);
376 if (!iov_iter_count(&req->iter) &&
377 req->data_sent < req->data_len) {
378 req->curr_bio = req->curr_bio->bi_next;
379 nvme_tcp_init_iter(req, ITER_SOURCE);
380 }
381}
382
383static inline void nvme_tcp_send_all(struct nvme_tcp_queue *queue)
384{
385 int ret;
386
387 /* drain the send queue as much as we can... */
388 do {
389 ret = nvme_tcp_try_send(queue);
390 } while (ret > 0);
391}
392
393static inline bool nvme_tcp_queue_has_pending(struct nvme_tcp_queue *queue)
394{
395 return !list_empty(&queue->send_list) ||
396 !llist_empty(&queue->req_list);
397}
398
399static inline bool nvme_tcp_queue_more(struct nvme_tcp_queue *queue)
400{
401 return !nvme_tcp_queue_tls(queue) &&
402 nvme_tcp_queue_has_pending(queue);
403}
404
405static inline void nvme_tcp_queue_request(struct nvme_tcp_request *req,
406 bool last)
407{
408 struct nvme_tcp_queue *queue = req->queue;
409 bool empty;
410
411 empty = llist_add(&req->lentry, &queue->req_list) &&
412 list_empty(&queue->send_list) && !queue->request;
413
414 /*
415 * if we're the first on the send_list and we can try to send
416 * directly, otherwise queue io_work. Also, only do that if we
417 * are on the same cpu, so we don't introduce contention.
418 */
419 if (queue->io_cpu == raw_smp_processor_id() &&
420 empty && mutex_trylock(&queue->send_mutex)) {
421 nvme_tcp_send_all(queue);
422 mutex_unlock(&queue->send_mutex);
423 }
424
425 if (last && nvme_tcp_queue_has_pending(queue))
426 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
427}
428
429static void nvme_tcp_process_req_list(struct nvme_tcp_queue *queue)
430{
431 struct nvme_tcp_request *req;
432 struct llist_node *node;
433
434 for (node = llist_del_all(&queue->req_list); node; node = node->next) {
435 req = llist_entry(node, struct nvme_tcp_request, lentry);
436 list_add(&req->entry, &queue->send_list);
437 }
438}
439
440static inline struct nvme_tcp_request *
441nvme_tcp_fetch_request(struct nvme_tcp_queue *queue)
442{
443 struct nvme_tcp_request *req;
444
445 req = list_first_entry_or_null(&queue->send_list,
446 struct nvme_tcp_request, entry);
447 if (!req) {
448 nvme_tcp_process_req_list(queue);
449 req = list_first_entry_or_null(&queue->send_list,
450 struct nvme_tcp_request, entry);
451 if (unlikely(!req))
452 return NULL;
453 }
454
455 list_del_init(&req->entry);
456 init_llist_node(&req->lentry);
457 return req;
458}
459
460#define NVME_TCP_CRC_SEED (~0)
461
462static inline void nvme_tcp_ddgst_update(u32 *crcp,
463 struct page *page, size_t off, size_t len)
464{
465 page += off / PAGE_SIZE;
466 off %= PAGE_SIZE;
467 while (len) {
468 const void *vaddr = kmap_local_page(page);
469 size_t n = min(len, (size_t)PAGE_SIZE - off);
470
471 *crcp = crc32c(*crcp, vaddr + off, n);
472 kunmap_local(vaddr);
473 page++;
474 off = 0;
475 len -= n;
476 }
477}
478
479static inline __le32 nvme_tcp_ddgst_final(u32 crc)
480{
481 return cpu_to_le32(~crc);
482}
483
484static inline __le32 nvme_tcp_hdgst(const void *pdu, size_t len)
485{
486 return cpu_to_le32(~crc32c(NVME_TCP_CRC_SEED, pdu, len));
487}
488
489static inline void nvme_tcp_set_hdgst(void *pdu, size_t len)
490{
491 *(__le32 *)(pdu + len) = nvme_tcp_hdgst(pdu, len);
492}
493
494static int nvme_tcp_verify_hdgst(struct nvme_tcp_queue *queue,
495 void *pdu, size_t pdu_len)
496{
497 struct nvme_tcp_hdr *hdr = pdu;
498 __le32 recv_digest;
499 __le32 exp_digest;
500
501 if (unlikely(!(hdr->flags & NVME_TCP_F_HDGST))) {
502 dev_err(queue->ctrl->ctrl.device,
503 "queue %d: header digest flag is cleared\n",
504 nvme_tcp_queue_id(queue));
505 return -EPROTO;
506 }
507
508 recv_digest = *(__le32 *)(pdu + hdr->hlen);
509 exp_digest = nvme_tcp_hdgst(pdu, pdu_len);
510 if (recv_digest != exp_digest) {
511 dev_err(queue->ctrl->ctrl.device,
512 "header digest error: recv %#x expected %#x\n",
513 le32_to_cpu(recv_digest), le32_to_cpu(exp_digest));
514 return -EIO;
515 }
516
517 return 0;
518}
519
520static int nvme_tcp_check_ddgst(struct nvme_tcp_queue *queue, void *pdu)
521{
522 struct nvme_tcp_hdr *hdr = pdu;
523 u8 digest_len = nvme_tcp_hdgst_len(queue);
524 u32 len;
525
526 len = le32_to_cpu(hdr->plen) - hdr->hlen -
527 ((hdr->flags & NVME_TCP_F_HDGST) ? digest_len : 0);
528
529 if (unlikely(len && !(hdr->flags & NVME_TCP_F_DDGST))) {
530 dev_err(queue->ctrl->ctrl.device,
531 "queue %d: data digest flag is cleared\n",
532 nvme_tcp_queue_id(queue));
533 return -EPROTO;
534 }
535 queue->rcv_crc = NVME_TCP_CRC_SEED;
536
537 return 0;
538}
539
540static void nvme_tcp_exit_request(struct blk_mq_tag_set *set,
541 struct request *rq, unsigned int hctx_idx)
542{
543 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
544
545 page_frag_free(req->pdu);
546}
547
548static int nvme_tcp_init_request(struct blk_mq_tag_set *set,
549 struct request *rq, unsigned int hctx_idx,
550 unsigned int numa_node)
551{
552 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(set->driver_data);
553 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
554 struct nvme_tcp_cmd_pdu *pdu;
555 int queue_idx = (set == &ctrl->tag_set) ? hctx_idx + 1 : 0;
556 struct nvme_tcp_queue *queue = &ctrl->queues[queue_idx];
557 u8 hdgst = nvme_tcp_hdgst_len(queue);
558
559 req->pdu = page_frag_alloc(&queue->pf_cache,
560 sizeof(struct nvme_tcp_cmd_pdu) + hdgst,
561 GFP_KERNEL | __GFP_ZERO);
562 if (!req->pdu)
563 return -ENOMEM;
564
565 pdu = req->pdu;
566 req->queue = queue;
567 nvme_req(rq)->ctrl = &ctrl->ctrl;
568 nvme_req(rq)->cmd = &pdu->cmd;
569 init_llist_node(&req->lentry);
570 INIT_LIST_HEAD(&req->entry);
571
572 return 0;
573}
574
575static int nvme_tcp_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
576 unsigned int hctx_idx)
577{
578 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(data);
579 struct nvme_tcp_queue *queue = &ctrl->queues[hctx_idx + 1];
580
581 hctx->driver_data = queue;
582 return 0;
583}
584
585static int nvme_tcp_init_admin_hctx(struct blk_mq_hw_ctx *hctx, void *data,
586 unsigned int hctx_idx)
587{
588 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(data);
589 struct nvme_tcp_queue *queue = &ctrl->queues[0];
590
591 hctx->driver_data = queue;
592 return 0;
593}
594
595static enum nvme_tcp_recv_state
596nvme_tcp_recv_state(struct nvme_tcp_queue *queue)
597{
598 return (queue->pdu_remaining) ? NVME_TCP_RECV_PDU :
599 (queue->ddgst_remaining) ? NVME_TCP_RECV_DDGST :
600 NVME_TCP_RECV_DATA;
601}
602
603static void nvme_tcp_init_recv_ctx(struct nvme_tcp_queue *queue)
604{
605 queue->pdu_remaining = sizeof(struct nvme_tcp_rsp_pdu) +
606 nvme_tcp_hdgst_len(queue);
607 queue->pdu_offset = 0;
608 queue->data_remaining = -1;
609 queue->ddgst_remaining = 0;
610}
611
612static void nvme_tcp_error_recovery(struct nvme_ctrl *ctrl)
613{
614 if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_RESETTING))
615 return;
616
617 dev_warn(ctrl->device, "starting error recovery\n");
618 queue_work(nvme_reset_wq, &to_tcp_ctrl(ctrl)->err_work);
619}
620
621static int nvme_tcp_process_nvme_cqe(struct nvme_tcp_queue *queue,
622 struct nvme_completion *cqe)
623{
624 struct nvme_tcp_request *req;
625 struct request *rq;
626
627 rq = nvme_find_rq(nvme_tcp_tagset(queue), cqe->command_id);
628 if (!rq) {
629 dev_err(queue->ctrl->ctrl.device,
630 "got bad cqe.command_id %#x on queue %d\n",
631 cqe->command_id, nvme_tcp_queue_id(queue));
632 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
633 return -EINVAL;
634 }
635
636 req = blk_mq_rq_to_pdu(rq);
637 if (req->status == cpu_to_le16(NVME_SC_SUCCESS))
638 req->status = cqe->status;
639
640 if (!nvme_try_complete_req(rq, req->status, cqe->result))
641 nvme_complete_rq(rq);
642 queue->nr_cqe++;
643
644 return 0;
645}
646
647static int nvme_tcp_handle_c2h_data(struct nvme_tcp_queue *queue,
648 struct nvme_tcp_data_pdu *pdu)
649{
650 struct request *rq;
651
652 rq = nvme_find_rq(nvme_tcp_tagset(queue), pdu->command_id);
653 if (!rq) {
654 dev_err(queue->ctrl->ctrl.device,
655 "got bad c2hdata.command_id %#x on queue %d\n",
656 pdu->command_id, nvme_tcp_queue_id(queue));
657 return -ENOENT;
658 }
659
660 if (!blk_rq_payload_bytes(rq)) {
661 dev_err(queue->ctrl->ctrl.device,
662 "queue %d tag %#x unexpected data\n",
663 nvme_tcp_queue_id(queue), rq->tag);
664 return -EIO;
665 }
666
667 queue->data_remaining = le32_to_cpu(pdu->data_length);
668
669 if (pdu->hdr.flags & NVME_TCP_F_DATA_SUCCESS &&
670 unlikely(!(pdu->hdr.flags & NVME_TCP_F_DATA_LAST))) {
671 dev_err(queue->ctrl->ctrl.device,
672 "queue %d tag %#x SUCCESS set but not last PDU\n",
673 nvme_tcp_queue_id(queue), rq->tag);
674 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
675 return -EPROTO;
676 }
677
678 return 0;
679}
680
681static int nvme_tcp_handle_comp(struct nvme_tcp_queue *queue,
682 struct nvme_tcp_rsp_pdu *pdu)
683{
684 struct nvme_completion *cqe = &pdu->cqe;
685 int ret = 0;
686
687 /*
688 * AEN requests are special as they don't time out and can
689 * survive any kind of queue freeze and often don't respond to
690 * aborts. We don't even bother to allocate a struct request
691 * for them but rather special case them here.
692 */
693 if (unlikely(nvme_is_aen_req(nvme_tcp_queue_id(queue),
694 cqe->command_id)))
695 nvme_complete_async_event(&queue->ctrl->ctrl, cqe->status,
696 &cqe->result);
697 else
698 ret = nvme_tcp_process_nvme_cqe(queue, cqe);
699
700 return ret;
701}
702
703static void nvme_tcp_setup_h2c_data_pdu(struct nvme_tcp_request *req)
704{
705 struct nvme_tcp_data_pdu *data = nvme_tcp_req_data_pdu(req);
706 struct nvme_tcp_queue *queue = req->queue;
707 struct request *rq = blk_mq_rq_from_pdu(req);
708 u32 h2cdata_sent = req->pdu_len;
709 u8 hdgst = nvme_tcp_hdgst_len(queue);
710 u8 ddgst = nvme_tcp_ddgst_len(queue);
711
712 req->state = NVME_TCP_SEND_H2C_PDU;
713 req->offset = 0;
714 req->pdu_len = min(req->h2cdata_left, queue->maxh2cdata);
715 req->pdu_sent = 0;
716 req->h2cdata_left -= req->pdu_len;
717 req->h2cdata_offset += h2cdata_sent;
718
719 memset(data, 0, sizeof(*data));
720 data->hdr.type = nvme_tcp_h2c_data;
721 if (!req->h2cdata_left)
722 data->hdr.flags = NVME_TCP_F_DATA_LAST;
723 if (queue->hdr_digest)
724 data->hdr.flags |= NVME_TCP_F_HDGST;
725 if (queue->data_digest)
726 data->hdr.flags |= NVME_TCP_F_DDGST;
727 data->hdr.hlen = sizeof(*data);
728 data->hdr.pdo = data->hdr.hlen + hdgst;
729 data->hdr.plen =
730 cpu_to_le32(data->hdr.hlen + hdgst + req->pdu_len + ddgst);
731 data->ttag = req->ttag;
732 data->command_id = nvme_cid(rq);
733 data->data_offset = cpu_to_le32(req->h2cdata_offset);
734 data->data_length = cpu_to_le32(req->pdu_len);
735}
736
737static int nvme_tcp_handle_r2t(struct nvme_tcp_queue *queue,
738 struct nvme_tcp_r2t_pdu *pdu)
739{
740 struct nvme_tcp_request *req;
741 struct request *rq;
742 u32 r2t_length = le32_to_cpu(pdu->r2t_length);
743 u32 r2t_offset = le32_to_cpu(pdu->r2t_offset);
744
745 rq = nvme_find_rq(nvme_tcp_tagset(queue), pdu->command_id);
746 if (!rq) {
747 dev_err(queue->ctrl->ctrl.device,
748 "got bad r2t.command_id %#x on queue %d\n",
749 pdu->command_id, nvme_tcp_queue_id(queue));
750 return -ENOENT;
751 }
752 req = blk_mq_rq_to_pdu(rq);
753
754 if (unlikely(!r2t_length)) {
755 dev_err(queue->ctrl->ctrl.device,
756 "req %d r2t len is %u, probably a bug...\n",
757 rq->tag, r2t_length);
758 return -EPROTO;
759 }
760
761 if (unlikely(req->data_sent + r2t_length > req->data_len)) {
762 dev_err(queue->ctrl->ctrl.device,
763 "req %d r2t len %u exceeded data len %u (%zu sent)\n",
764 rq->tag, r2t_length, req->data_len, req->data_sent);
765 return -EPROTO;
766 }
767
768 if (unlikely(r2t_offset < req->data_sent)) {
769 dev_err(queue->ctrl->ctrl.device,
770 "req %d unexpected r2t offset %u (expected %zu)\n",
771 rq->tag, r2t_offset, req->data_sent);
772 return -EPROTO;
773 }
774
775 if (llist_on_list(&req->lentry) ||
776 !list_empty(&req->entry)) {
777 dev_err(queue->ctrl->ctrl.device,
778 "req %d unexpected r2t while processing request\n",
779 rq->tag);
780 return -EPROTO;
781 }
782
783 req->pdu_len = 0;
784 req->h2cdata_left = r2t_length;
785 req->h2cdata_offset = r2t_offset;
786 req->ttag = pdu->ttag;
787
788 nvme_tcp_setup_h2c_data_pdu(req);
789
790 llist_add(&req->lentry, &queue->req_list);
791 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
792
793 return 0;
794}
795
796static void nvme_tcp_handle_c2h_term(struct nvme_tcp_queue *queue,
797 struct nvme_tcp_term_pdu *pdu)
798{
799 u16 fes;
800 const char *msg;
801 u32 plen = le32_to_cpu(pdu->hdr.plen);
802
803 static const char * const msg_table[] = {
804 [NVME_TCP_FES_INVALID_PDU_HDR] = "Invalid PDU Header Field",
805 [NVME_TCP_FES_PDU_SEQ_ERR] = "PDU Sequence Error",
806 [NVME_TCP_FES_HDR_DIGEST_ERR] = "Header Digest Error",
807 [NVME_TCP_FES_DATA_OUT_OF_RANGE] = "Data Transfer Out Of Range",
808 [NVME_TCP_FES_DATA_LIMIT_EXCEEDED] = "Data Transfer Limit Exceeded",
809 [NVME_TCP_FES_UNSUPPORTED_PARAM] = "Unsupported Parameter",
810 };
811
812 if (plen < NVME_TCP_MIN_C2HTERM_PLEN ||
813 plen > NVME_TCP_MAX_C2HTERM_PLEN) {
814 dev_err(queue->ctrl->ctrl.device,
815 "Received a malformed C2HTermReq PDU (plen = %u)\n",
816 plen);
817 return;
818 }
819
820 fes = le16_to_cpu(pdu->fes);
821 if (fes && fes < ARRAY_SIZE(msg_table))
822 msg = msg_table[fes];
823 else
824 msg = "Unknown";
825
826 dev_err(queue->ctrl->ctrl.device,
827 "Received C2HTermReq (FES = %s)\n", msg);
828}
829
830static int nvme_tcp_recv_pdu(struct nvme_tcp_queue *queue, struct sk_buff *skb,
831 unsigned int *offset, size_t *len)
832{
833 struct nvme_tcp_hdr *hdr;
834 char *pdu = queue->pdu;
835 size_t rcv_len = min_t(size_t, *len, queue->pdu_remaining);
836 int ret;
837
838 ret = skb_copy_bits(skb, *offset,
839 &pdu[queue->pdu_offset], rcv_len);
840 if (unlikely(ret))
841 return ret;
842
843 queue->pdu_remaining -= rcv_len;
844 queue->pdu_offset += rcv_len;
845 *offset += rcv_len;
846 *len -= rcv_len;
847 if (queue->pdu_remaining)
848 return 0;
849
850 hdr = queue->pdu;
851 if (unlikely(hdr->hlen != sizeof(struct nvme_tcp_rsp_pdu))) {
852 if (!nvme_tcp_recv_pdu_supported(hdr->type))
853 goto unsupported_pdu;
854
855 dev_err(queue->ctrl->ctrl.device,
856 "pdu type %d has unexpected header length (%d)\n",
857 hdr->type, hdr->hlen);
858 return -EPROTO;
859 }
860
861 if (unlikely(hdr->type == nvme_tcp_c2h_term)) {
862 /*
863 * C2HTermReq never includes Header or Data digests.
864 * Skip the checks.
865 */
866 nvme_tcp_handle_c2h_term(queue, (void *)queue->pdu);
867 return -EINVAL;
868 }
869
870 if (queue->hdr_digest) {
871 ret = nvme_tcp_verify_hdgst(queue, queue->pdu, hdr->hlen);
872 if (unlikely(ret))
873 return ret;
874 }
875
876
877 if (queue->data_digest) {
878 ret = nvme_tcp_check_ddgst(queue, queue->pdu);
879 if (unlikely(ret))
880 return ret;
881 }
882
883 switch (hdr->type) {
884 case nvme_tcp_c2h_data:
885 return nvme_tcp_handle_c2h_data(queue, (void *)queue->pdu);
886 case nvme_tcp_rsp:
887 nvme_tcp_init_recv_ctx(queue);
888 return nvme_tcp_handle_comp(queue, (void *)queue->pdu);
889 case nvme_tcp_r2t:
890 nvme_tcp_init_recv_ctx(queue);
891 return nvme_tcp_handle_r2t(queue, (void *)queue->pdu);
892 default:
893 goto unsupported_pdu;
894 }
895
896unsupported_pdu:
897 dev_err(queue->ctrl->ctrl.device,
898 "unsupported pdu type (%d)\n", hdr->type);
899 return -EINVAL;
900}
901
902static inline void nvme_tcp_end_request(struct request *rq, u16 status)
903{
904 union nvme_result res = {};
905
906 if (!nvme_try_complete_req(rq, cpu_to_le16(status << 1), res))
907 nvme_complete_rq(rq);
908}
909
910static int nvme_tcp_recv_data(struct nvme_tcp_queue *queue, struct sk_buff *skb,
911 unsigned int *offset, size_t *len)
912{
913 struct nvme_tcp_data_pdu *pdu = (void *)queue->pdu;
914 struct request *rq =
915 nvme_cid_to_rq(nvme_tcp_tagset(queue), pdu->command_id);
916 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
917
918 while (true) {
919 int recv_len, ret;
920
921 recv_len = min_t(size_t, *len, queue->data_remaining);
922 if (!recv_len)
923 break;
924
925 if (!iov_iter_count(&req->iter)) {
926 req->curr_bio = req->curr_bio->bi_next;
927
928 /*
929 * If we don`t have any bios it means that controller
930 * sent more data than we requested, hence error
931 */
932 if (!req->curr_bio) {
933 dev_err(queue->ctrl->ctrl.device,
934 "queue %d no space in request %#x",
935 nvme_tcp_queue_id(queue), rq->tag);
936 nvme_tcp_init_recv_ctx(queue);
937 return -EIO;
938 }
939 nvme_tcp_init_iter(req, ITER_DEST);
940 }
941
942 /* we can read only from what is left in this bio */
943 recv_len = min_t(size_t, recv_len,
944 iov_iter_count(&req->iter));
945
946 if (queue->data_digest)
947 ret = skb_copy_and_crc32c_datagram_iter(skb, *offset,
948 &req->iter, recv_len, &queue->rcv_crc);
949 else
950 ret = skb_copy_datagram_iter(skb, *offset,
951 &req->iter, recv_len);
952 if (ret) {
953 dev_err(queue->ctrl->ctrl.device,
954 "queue %d failed to copy request %#x data",
955 nvme_tcp_queue_id(queue), rq->tag);
956 return ret;
957 }
958
959 *len -= recv_len;
960 *offset += recv_len;
961 queue->data_remaining -= recv_len;
962 }
963
964 if (!queue->data_remaining) {
965 if (queue->data_digest) {
966 queue->exp_ddgst = nvme_tcp_ddgst_final(queue->rcv_crc);
967 queue->ddgst_remaining = NVME_TCP_DIGEST_LENGTH;
968 } else {
969 if (pdu->hdr.flags & NVME_TCP_F_DATA_SUCCESS) {
970 nvme_tcp_end_request(rq,
971 le16_to_cpu(req->status));
972 queue->nr_cqe++;
973 }
974 nvme_tcp_init_recv_ctx(queue);
975 }
976 }
977
978 return 0;
979}
980
981static int nvme_tcp_recv_ddgst(struct nvme_tcp_queue *queue,
982 struct sk_buff *skb, unsigned int *offset, size_t *len)
983{
984 struct nvme_tcp_data_pdu *pdu = (void *)queue->pdu;
985 char *ddgst = (char *)&queue->recv_ddgst;
986 size_t recv_len = min_t(size_t, *len, queue->ddgst_remaining);
987 off_t off = NVME_TCP_DIGEST_LENGTH - queue->ddgst_remaining;
988 int ret;
989
990 ret = skb_copy_bits(skb, *offset, &ddgst[off], recv_len);
991 if (unlikely(ret))
992 return ret;
993
994 queue->ddgst_remaining -= recv_len;
995 *offset += recv_len;
996 *len -= recv_len;
997 if (queue->ddgst_remaining)
998 return 0;
999
1000 if (queue->recv_ddgst != queue->exp_ddgst) {
1001 struct request *rq = nvme_cid_to_rq(nvme_tcp_tagset(queue),
1002 pdu->command_id);
1003 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
1004
1005 req->status = cpu_to_le16(NVME_SC_DATA_XFER_ERROR);
1006
1007 dev_err(queue->ctrl->ctrl.device,
1008 "data digest error: recv %#x expected %#x\n",
1009 le32_to_cpu(queue->recv_ddgst),
1010 le32_to_cpu(queue->exp_ddgst));
1011 }
1012
1013 if (pdu->hdr.flags & NVME_TCP_F_DATA_SUCCESS) {
1014 struct request *rq = nvme_cid_to_rq(nvme_tcp_tagset(queue),
1015 pdu->command_id);
1016 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
1017
1018 nvme_tcp_end_request(rq, le16_to_cpu(req->status));
1019 queue->nr_cqe++;
1020 }
1021
1022 nvme_tcp_init_recv_ctx(queue);
1023 return 0;
1024}
1025
1026static int nvme_tcp_recv_skb(read_descriptor_t *desc, struct sk_buff *skb,
1027 unsigned int offset, size_t len)
1028{
1029 struct nvme_tcp_queue *queue = desc->arg.data;
1030 size_t consumed = len;
1031 int result;
1032
1033 if (unlikely(!queue->rd_enabled))
1034 return -EFAULT;
1035
1036 while (len) {
1037 switch (nvme_tcp_recv_state(queue)) {
1038 case NVME_TCP_RECV_PDU:
1039 result = nvme_tcp_recv_pdu(queue, skb, &offset, &len);
1040 break;
1041 case NVME_TCP_RECV_DATA:
1042 result = nvme_tcp_recv_data(queue, skb, &offset, &len);
1043 break;
1044 case NVME_TCP_RECV_DDGST:
1045 result = nvme_tcp_recv_ddgst(queue, skb, &offset, &len);
1046 break;
1047 default:
1048 result = -EFAULT;
1049 }
1050 if (result) {
1051 dev_err(queue->ctrl->ctrl.device,
1052 "receive failed: %d\n", result);
1053 queue->rd_enabled = false;
1054 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
1055 return result;
1056 }
1057 }
1058
1059 return consumed;
1060}
1061
1062static void nvme_tcp_data_ready(struct sock *sk)
1063{
1064 struct nvme_tcp_queue *queue;
1065
1066 trace_sk_data_ready(sk);
1067
1068 read_lock_bh(&sk->sk_callback_lock);
1069 queue = sk->sk_user_data;
1070 if (likely(queue && queue->rd_enabled) &&
1071 !test_bit(NVME_TCP_Q_POLLING, &queue->flags))
1072 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
1073 read_unlock_bh(&sk->sk_callback_lock);
1074}
1075
1076static void nvme_tcp_write_space(struct sock *sk)
1077{
1078 struct nvme_tcp_queue *queue;
1079
1080 read_lock_bh(&sk->sk_callback_lock);
1081 queue = sk->sk_user_data;
1082 if (likely(queue && sk_stream_is_writeable(sk))) {
1083 clear_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
1084 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
1085 }
1086 read_unlock_bh(&sk->sk_callback_lock);
1087}
1088
1089static void nvme_tcp_state_change(struct sock *sk)
1090{
1091 struct nvme_tcp_queue *queue;
1092
1093 read_lock_bh(&sk->sk_callback_lock);
1094 queue = sk->sk_user_data;
1095 if (!queue)
1096 goto done;
1097
1098 switch (sk->sk_state) {
1099 case TCP_CLOSE:
1100 case TCP_CLOSE_WAIT:
1101 case TCP_LAST_ACK:
1102 case TCP_FIN_WAIT1:
1103 case TCP_FIN_WAIT2:
1104 nvme_tcp_error_recovery(&queue->ctrl->ctrl);
1105 break;
1106 default:
1107 dev_info(queue->ctrl->ctrl.device,
1108 "queue %d socket state %d\n",
1109 nvme_tcp_queue_id(queue), sk->sk_state);
1110 }
1111
1112 queue->state_change(sk);
1113done:
1114 read_unlock_bh(&sk->sk_callback_lock);
1115}
1116
1117static inline void nvme_tcp_done_send_req(struct nvme_tcp_queue *queue)
1118{
1119 queue->request = NULL;
1120}
1121
1122static void nvme_tcp_fail_request(struct nvme_tcp_request *req)
1123{
1124 if (nvme_tcp_async_req(req)) {
1125 union nvme_result res = {};
1126
1127 nvme_complete_async_event(&req->queue->ctrl->ctrl,
1128 cpu_to_le16(NVME_SC_HOST_PATH_ERROR), &res);
1129 } else {
1130 nvme_tcp_end_request(blk_mq_rq_from_pdu(req),
1131 NVME_SC_HOST_PATH_ERROR);
1132 }
1133}
1134
1135static int nvme_tcp_try_send_data(struct nvme_tcp_request *req)
1136{
1137 struct nvme_tcp_queue *queue = req->queue;
1138 int req_data_len = req->data_len;
1139 u32 h2cdata_left = req->h2cdata_left;
1140
1141 while (true) {
1142 struct bio_vec bvec;
1143 struct msghdr msg = {
1144 .msg_flags = MSG_DONTWAIT | MSG_SPLICE_PAGES,
1145 };
1146 struct page *page = nvme_tcp_req_cur_page(req);
1147 size_t offset = nvme_tcp_req_cur_offset(req);
1148 size_t len = nvme_tcp_req_cur_length(req);
1149 bool last = nvme_tcp_pdu_last_send(req, len);
1150 int req_data_sent = req->data_sent;
1151 int ret;
1152
1153 if (last && !queue->data_digest && !nvme_tcp_queue_more(queue))
1154 msg.msg_flags |= MSG_EOR;
1155 else
1156 msg.msg_flags |= MSG_MORE;
1157
1158 if (!sendpages_ok(page, len, offset))
1159 msg.msg_flags &= ~MSG_SPLICE_PAGES;
1160
1161 bvec_set_page(&bvec, page, len, offset);
1162 iov_iter_bvec(&msg.msg_iter, ITER_SOURCE, &bvec, 1, len);
1163 ret = sock_sendmsg(queue->sock, &msg);
1164 if (ret <= 0)
1165 return ret;
1166
1167 if (queue->data_digest)
1168 nvme_tcp_ddgst_update(&queue->snd_crc, page,
1169 offset, ret);
1170
1171 /*
1172 * update the request iterator except for the last payload send
1173 * in the request where we don't want to modify it as we may
1174 * compete with the RX path completing the request.
1175 */
1176 if (req_data_sent + ret < req_data_len)
1177 nvme_tcp_advance_req(req, ret);
1178
1179 /* fully successful last send in current PDU */
1180 if (last && ret == len) {
1181 if (queue->data_digest) {
1182 req->ddgst =
1183 nvme_tcp_ddgst_final(queue->snd_crc);
1184 req->state = NVME_TCP_SEND_DDGST;
1185 req->offset = 0;
1186 } else {
1187 if (h2cdata_left)
1188 nvme_tcp_setup_h2c_data_pdu(req);
1189 else
1190 nvme_tcp_done_send_req(queue);
1191 }
1192 return 1;
1193 }
1194 }
1195 return -EAGAIN;
1196}
1197
1198static int nvme_tcp_try_send_cmd_pdu(struct nvme_tcp_request *req)
1199{
1200 struct nvme_tcp_queue *queue = req->queue;
1201 struct nvme_tcp_cmd_pdu *pdu = nvme_tcp_req_cmd_pdu(req);
1202 struct bio_vec bvec;
1203 struct msghdr msg = { .msg_flags = MSG_DONTWAIT | MSG_SPLICE_PAGES, };
1204 bool inline_data = nvme_tcp_has_inline_data(req);
1205 u8 hdgst = nvme_tcp_hdgst_len(queue);
1206 int len = sizeof(*pdu) + hdgst - req->offset;
1207 int ret;
1208
1209 if (inline_data || nvme_tcp_queue_more(queue))
1210 msg.msg_flags |= MSG_MORE;
1211 else
1212 msg.msg_flags |= MSG_EOR;
1213
1214 if (queue->hdr_digest && !req->offset)
1215 nvme_tcp_set_hdgst(pdu, sizeof(*pdu));
1216
1217 bvec_set_virt(&bvec, (void *)pdu + req->offset, len);
1218 iov_iter_bvec(&msg.msg_iter, ITER_SOURCE, &bvec, 1, len);
1219 ret = sock_sendmsg(queue->sock, &msg);
1220 if (unlikely(ret <= 0))
1221 return ret;
1222
1223 len -= ret;
1224 if (!len) {
1225 if (inline_data) {
1226 req->state = NVME_TCP_SEND_DATA;
1227 if (queue->data_digest)
1228 queue->snd_crc = NVME_TCP_CRC_SEED;
1229 } else {
1230 nvme_tcp_done_send_req(queue);
1231 }
1232 return 1;
1233 }
1234 req->offset += ret;
1235
1236 return -EAGAIN;
1237}
1238
1239static int nvme_tcp_try_send_data_pdu(struct nvme_tcp_request *req)
1240{
1241 struct nvme_tcp_queue *queue = req->queue;
1242 struct nvme_tcp_data_pdu *pdu = nvme_tcp_req_data_pdu(req);
1243 struct bio_vec bvec;
1244 struct msghdr msg = { .msg_flags = MSG_DONTWAIT | MSG_MORE, };
1245 u8 hdgst = nvme_tcp_hdgst_len(queue);
1246 int len = sizeof(*pdu) - req->offset + hdgst;
1247 int ret;
1248
1249 if (queue->hdr_digest && !req->offset)
1250 nvme_tcp_set_hdgst(pdu, sizeof(*pdu));
1251
1252 if (!req->h2cdata_left)
1253 msg.msg_flags |= MSG_SPLICE_PAGES;
1254
1255 bvec_set_virt(&bvec, (void *)pdu + req->offset, len);
1256 iov_iter_bvec(&msg.msg_iter, ITER_SOURCE, &bvec, 1, len);
1257 ret = sock_sendmsg(queue->sock, &msg);
1258 if (unlikely(ret <= 0))
1259 return ret;
1260
1261 len -= ret;
1262 if (!len) {
1263 req->state = NVME_TCP_SEND_DATA;
1264 if (queue->data_digest)
1265 queue->snd_crc = NVME_TCP_CRC_SEED;
1266 return 1;
1267 }
1268 req->offset += ret;
1269
1270 return -EAGAIN;
1271}
1272
1273static int nvme_tcp_try_send_ddgst(struct nvme_tcp_request *req)
1274{
1275 struct nvme_tcp_queue *queue = req->queue;
1276 size_t offset = req->offset;
1277 u32 h2cdata_left = req->h2cdata_left;
1278 int ret;
1279 struct msghdr msg = { .msg_flags = MSG_DONTWAIT };
1280 struct kvec iov = {
1281 .iov_base = (u8 *)&req->ddgst + req->offset,
1282 .iov_len = NVME_TCP_DIGEST_LENGTH - req->offset
1283 };
1284
1285 if (nvme_tcp_queue_more(queue))
1286 msg.msg_flags |= MSG_MORE;
1287 else
1288 msg.msg_flags |= MSG_EOR;
1289
1290 ret = kernel_sendmsg(queue->sock, &msg, &iov, 1, iov.iov_len);
1291 if (unlikely(ret <= 0))
1292 return ret;
1293
1294 if (offset + ret == NVME_TCP_DIGEST_LENGTH) {
1295 if (h2cdata_left)
1296 nvme_tcp_setup_h2c_data_pdu(req);
1297 else
1298 nvme_tcp_done_send_req(queue);
1299 return 1;
1300 }
1301
1302 req->offset += ret;
1303 return -EAGAIN;
1304}
1305
1306static int nvme_tcp_try_send(struct nvme_tcp_queue *queue)
1307{
1308 struct nvme_tcp_request *req;
1309 unsigned int noreclaim_flag;
1310 int ret = 1;
1311
1312 if (!queue->request) {
1313 queue->request = nvme_tcp_fetch_request(queue);
1314 if (!queue->request)
1315 return 0;
1316 }
1317 req = queue->request;
1318
1319 noreclaim_flag = memalloc_noreclaim_save();
1320 if (req->state == NVME_TCP_SEND_CMD_PDU) {
1321 ret = nvme_tcp_try_send_cmd_pdu(req);
1322 if (ret <= 0)
1323 goto done;
1324 if (!nvme_tcp_has_inline_data(req))
1325 goto out;
1326 }
1327
1328 if (req->state == NVME_TCP_SEND_H2C_PDU) {
1329 ret = nvme_tcp_try_send_data_pdu(req);
1330 if (ret <= 0)
1331 goto done;
1332 }
1333
1334 if (req->state == NVME_TCP_SEND_DATA) {
1335 ret = nvme_tcp_try_send_data(req);
1336 if (ret <= 0)
1337 goto done;
1338 }
1339
1340 if (req->state == NVME_TCP_SEND_DDGST)
1341 ret = nvme_tcp_try_send_ddgst(req);
1342done:
1343 if (ret == -EAGAIN) {
1344 ret = 0;
1345 } else if (ret < 0) {
1346 dev_err(queue->ctrl->ctrl.device,
1347 "failed to send request %d\n", ret);
1348 nvme_tcp_fail_request(queue->request);
1349 nvme_tcp_done_send_req(queue);
1350 }
1351out:
1352 memalloc_noreclaim_restore(noreclaim_flag);
1353 return ret;
1354}
1355
1356static int nvme_tcp_try_recv(struct nvme_tcp_queue *queue)
1357{
1358 struct socket *sock = queue->sock;
1359 struct sock *sk = sock->sk;
1360 read_descriptor_t rd_desc;
1361 int consumed;
1362
1363 rd_desc.arg.data = queue;
1364 rd_desc.count = 1;
1365 lock_sock(sk);
1366 queue->nr_cqe = 0;
1367 consumed = sock->ops->read_sock(sk, &rd_desc, nvme_tcp_recv_skb);
1368 release_sock(sk);
1369 return consumed == -EAGAIN ? 0 : consumed;
1370}
1371
1372static void nvme_tcp_io_work(struct work_struct *w)
1373{
1374 struct nvme_tcp_queue *queue =
1375 container_of(w, struct nvme_tcp_queue, io_work);
1376 unsigned long deadline = jiffies + msecs_to_jiffies(1);
1377
1378 do {
1379 bool pending = false;
1380 int result;
1381
1382 if (mutex_trylock(&queue->send_mutex)) {
1383 result = nvme_tcp_try_send(queue);
1384 mutex_unlock(&queue->send_mutex);
1385 if (result > 0)
1386 pending = true;
1387 else if (unlikely(result < 0))
1388 break;
1389 }
1390
1391 result = nvme_tcp_try_recv(queue);
1392 if (result > 0)
1393 pending = true;
1394 else if (unlikely(result < 0))
1395 return;
1396
1397 /* did we get some space after spending time in recv? */
1398 if (nvme_tcp_queue_has_pending(queue) &&
1399 sk_stream_is_writeable(queue->sock->sk))
1400 pending = true;
1401
1402 if (!pending || !queue->rd_enabled)
1403 return;
1404
1405 } while (!time_after(jiffies, deadline)); /* quota is exhausted */
1406
1407 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
1408}
1409
1410static void nvme_tcp_free_async_req(struct nvme_tcp_ctrl *ctrl)
1411{
1412 struct nvme_tcp_request *async = &ctrl->async_req;
1413
1414 page_frag_free(async->pdu);
1415}
1416
1417static int nvme_tcp_alloc_async_req(struct nvme_tcp_ctrl *ctrl)
1418{
1419 struct nvme_tcp_queue *queue = &ctrl->queues[0];
1420 struct nvme_tcp_request *async = &ctrl->async_req;
1421 u8 hdgst = nvme_tcp_hdgst_len(queue);
1422
1423 async->pdu = page_frag_alloc(&queue->pf_cache,
1424 sizeof(struct nvme_tcp_cmd_pdu) + hdgst,
1425 GFP_KERNEL | __GFP_ZERO);
1426 if (!async->pdu)
1427 return -ENOMEM;
1428
1429 async->queue = &ctrl->queues[0];
1430 return 0;
1431}
1432
1433static void nvme_tcp_free_queue(struct nvme_ctrl *nctrl, int qid)
1434{
1435 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1436 struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1437 unsigned int noreclaim_flag;
1438
1439 if (!test_and_clear_bit(NVME_TCP_Q_ALLOCATED, &queue->flags))
1440 return;
1441
1442 page_frag_cache_drain(&queue->pf_cache);
1443
1444 noreclaim_flag = memalloc_noreclaim_save();
1445 /* ->sock will be released by fput() */
1446 fput(queue->sock->file);
1447 queue->sock = NULL;
1448 memalloc_noreclaim_restore(noreclaim_flag);
1449
1450 kfree(queue->pdu);
1451 mutex_destroy(&queue->send_mutex);
1452 mutex_destroy(&queue->queue_lock);
1453}
1454
1455static int nvme_tcp_init_connection(struct nvme_tcp_queue *queue)
1456{
1457 struct nvme_tcp_icreq_pdu *icreq;
1458 struct nvme_tcp_icresp_pdu *icresp;
1459 char cbuf[CMSG_LEN(sizeof(char))] = {};
1460 u8 ctype;
1461 struct msghdr msg = {};
1462 struct kvec iov;
1463 bool ctrl_hdgst, ctrl_ddgst;
1464 u32 maxh2cdata;
1465 int ret;
1466
1467 icreq = kzalloc(sizeof(*icreq), GFP_KERNEL);
1468 if (!icreq)
1469 return -ENOMEM;
1470
1471 icresp = kzalloc(sizeof(*icresp), GFP_KERNEL);
1472 if (!icresp) {
1473 ret = -ENOMEM;
1474 goto free_icreq;
1475 }
1476
1477 icreq->hdr.type = nvme_tcp_icreq;
1478 icreq->hdr.hlen = sizeof(*icreq);
1479 icreq->hdr.pdo = 0;
1480 icreq->hdr.plen = cpu_to_le32(icreq->hdr.hlen);
1481 icreq->pfv = cpu_to_le16(NVME_TCP_PFV_1_0);
1482 icreq->maxr2t = 0; /* single inflight r2t supported */
1483 icreq->hpda = 0; /* no alignment constraint */
1484 if (queue->hdr_digest)
1485 icreq->digest |= NVME_TCP_HDR_DIGEST_ENABLE;
1486 if (queue->data_digest)
1487 icreq->digest |= NVME_TCP_DATA_DIGEST_ENABLE;
1488
1489 iov.iov_base = icreq;
1490 iov.iov_len = sizeof(*icreq);
1491 ret = kernel_sendmsg(queue->sock, &msg, &iov, 1, iov.iov_len);
1492 if (ret < 0) {
1493 pr_warn("queue %d: failed to send icreq, error %d\n",
1494 nvme_tcp_queue_id(queue), ret);
1495 goto free_icresp;
1496 }
1497
1498 memset(&msg, 0, sizeof(msg));
1499 iov.iov_base = icresp;
1500 iov.iov_len = sizeof(*icresp);
1501 if (nvme_tcp_queue_tls(queue)) {
1502 msg.msg_control = cbuf;
1503 msg.msg_controllen = sizeof(cbuf);
1504 }
1505 msg.msg_flags = MSG_WAITALL;
1506 ret = kernel_recvmsg(queue->sock, &msg, &iov, 1,
1507 iov.iov_len, msg.msg_flags);
1508 if (ret >= 0 && ret < sizeof(*icresp))
1509 ret = -ECONNRESET;
1510 if (ret < 0) {
1511 pr_warn("queue %d: failed to receive icresp, error %d\n",
1512 nvme_tcp_queue_id(queue), ret);
1513 goto free_icresp;
1514 }
1515 ret = -ENOTCONN;
1516 if (nvme_tcp_queue_tls(queue)) {
1517 ctype = tls_get_record_type(queue->sock->sk,
1518 (struct cmsghdr *)cbuf);
1519 if (ctype != TLS_RECORD_TYPE_DATA) {
1520 pr_err("queue %d: unhandled TLS record %d\n",
1521 nvme_tcp_queue_id(queue), ctype);
1522 goto free_icresp;
1523 }
1524 }
1525 ret = -EINVAL;
1526 if (icresp->hdr.type != nvme_tcp_icresp) {
1527 pr_err("queue %d: bad type returned %d\n",
1528 nvme_tcp_queue_id(queue), icresp->hdr.type);
1529 goto free_icresp;
1530 }
1531
1532 if (le32_to_cpu(icresp->hdr.plen) != sizeof(*icresp)) {
1533 pr_err("queue %d: bad pdu length returned %d\n",
1534 nvme_tcp_queue_id(queue), icresp->hdr.plen);
1535 goto free_icresp;
1536 }
1537
1538 if (icresp->pfv != NVME_TCP_PFV_1_0) {
1539 pr_err("queue %d: bad pfv returned %d\n",
1540 nvme_tcp_queue_id(queue), icresp->pfv);
1541 goto free_icresp;
1542 }
1543
1544 ctrl_ddgst = !!(icresp->digest & NVME_TCP_DATA_DIGEST_ENABLE);
1545 if ((queue->data_digest && !ctrl_ddgst) ||
1546 (!queue->data_digest && ctrl_ddgst)) {
1547 pr_err("queue %d: data digest mismatch host: %s ctrl: %s\n",
1548 nvme_tcp_queue_id(queue),
1549 queue->data_digest ? "enabled" : "disabled",
1550 ctrl_ddgst ? "enabled" : "disabled");
1551 goto free_icresp;
1552 }
1553
1554 ctrl_hdgst = !!(icresp->digest & NVME_TCP_HDR_DIGEST_ENABLE);
1555 if ((queue->hdr_digest && !ctrl_hdgst) ||
1556 (!queue->hdr_digest && ctrl_hdgst)) {
1557 pr_err("queue %d: header digest mismatch host: %s ctrl: %s\n",
1558 nvme_tcp_queue_id(queue),
1559 queue->hdr_digest ? "enabled" : "disabled",
1560 ctrl_hdgst ? "enabled" : "disabled");
1561 goto free_icresp;
1562 }
1563
1564 if (icresp->cpda != 0) {
1565 pr_err("queue %d: unsupported cpda returned %d\n",
1566 nvme_tcp_queue_id(queue), icresp->cpda);
1567 goto free_icresp;
1568 }
1569
1570 maxh2cdata = le32_to_cpu(icresp->maxdata);
1571 if ((maxh2cdata % 4) || (maxh2cdata < NVME_TCP_MIN_MAXH2CDATA)) {
1572 pr_err("queue %d: invalid maxh2cdata returned %u\n",
1573 nvme_tcp_queue_id(queue), maxh2cdata);
1574 goto free_icresp;
1575 }
1576 queue->maxh2cdata = maxh2cdata;
1577
1578 ret = 0;
1579free_icresp:
1580 kfree(icresp);
1581free_icreq:
1582 kfree(icreq);
1583 return ret;
1584}
1585
1586static bool nvme_tcp_admin_queue(struct nvme_tcp_queue *queue)
1587{
1588 return nvme_tcp_queue_id(queue) == 0;
1589}
1590
1591static bool nvme_tcp_default_queue(struct nvme_tcp_queue *queue)
1592{
1593 struct nvme_tcp_ctrl *ctrl = queue->ctrl;
1594 int qid = nvme_tcp_queue_id(queue);
1595
1596 return !nvme_tcp_admin_queue(queue) &&
1597 qid < 1 + ctrl->io_queues[HCTX_TYPE_DEFAULT];
1598}
1599
1600static bool nvme_tcp_read_queue(struct nvme_tcp_queue *queue)
1601{
1602 struct nvme_tcp_ctrl *ctrl = queue->ctrl;
1603 int qid = nvme_tcp_queue_id(queue);
1604
1605 return !nvme_tcp_admin_queue(queue) &&
1606 !nvme_tcp_default_queue(queue) &&
1607 qid < 1 + ctrl->io_queues[HCTX_TYPE_DEFAULT] +
1608 ctrl->io_queues[HCTX_TYPE_READ];
1609}
1610
1611static bool nvme_tcp_poll_queue(struct nvme_tcp_queue *queue)
1612{
1613 struct nvme_tcp_ctrl *ctrl = queue->ctrl;
1614 int qid = nvme_tcp_queue_id(queue);
1615
1616 return !nvme_tcp_admin_queue(queue) &&
1617 !nvme_tcp_default_queue(queue) &&
1618 !nvme_tcp_read_queue(queue) &&
1619 qid < 1 + ctrl->io_queues[HCTX_TYPE_DEFAULT] +
1620 ctrl->io_queues[HCTX_TYPE_READ] +
1621 ctrl->io_queues[HCTX_TYPE_POLL];
1622}
1623
1624/*
1625 * Track the number of queues assigned to each cpu using a global per-cpu
1626 * counter and select the least used cpu from the mq_map. Our goal is to spread
1627 * different controllers I/O threads across different cpu cores.
1628 *
1629 * Note that the accounting is not 100% perfect, but we don't need to be, we're
1630 * simply putting our best effort to select the best candidate cpu core that we
1631 * find at any given point.
1632 */
1633static void nvme_tcp_set_queue_io_cpu(struct nvme_tcp_queue *queue)
1634{
1635 struct nvme_tcp_ctrl *ctrl = queue->ctrl;
1636 struct blk_mq_tag_set *set = &ctrl->tag_set;
1637 int qid = nvme_tcp_queue_id(queue) - 1;
1638 unsigned int *mq_map = NULL;
1639 int cpu, min_queues = INT_MAX, io_cpu;
1640
1641 if (wq_unbound)
1642 goto out;
1643
1644 if (nvme_tcp_default_queue(queue))
1645 mq_map = set->map[HCTX_TYPE_DEFAULT].mq_map;
1646 else if (nvme_tcp_read_queue(queue))
1647 mq_map = set->map[HCTX_TYPE_READ].mq_map;
1648 else if (nvme_tcp_poll_queue(queue))
1649 mq_map = set->map[HCTX_TYPE_POLL].mq_map;
1650
1651 if (WARN_ON(!mq_map))
1652 goto out;
1653
1654 /* Search for the least used cpu from the mq_map */
1655 io_cpu = WORK_CPU_UNBOUND;
1656 for_each_online_cpu(cpu) {
1657 int num_queues = atomic_read(&nvme_tcp_cpu_queues[cpu]);
1658
1659 if (mq_map[cpu] != qid)
1660 continue;
1661 if (num_queues < min_queues) {
1662 io_cpu = cpu;
1663 min_queues = num_queues;
1664 }
1665 }
1666 if (io_cpu != WORK_CPU_UNBOUND) {
1667 queue->io_cpu = io_cpu;
1668 atomic_inc(&nvme_tcp_cpu_queues[io_cpu]);
1669 set_bit(NVME_TCP_Q_IO_CPU_SET, &queue->flags);
1670 }
1671out:
1672 dev_dbg(ctrl->ctrl.device, "queue %d: using cpu %d\n",
1673 qid, queue->io_cpu);
1674}
1675
1676static void nvme_tcp_tls_done(void *data, int status, key_serial_t pskid)
1677{
1678 struct nvme_tcp_queue *queue = data;
1679 struct nvme_tcp_ctrl *ctrl = queue->ctrl;
1680 int qid = nvme_tcp_queue_id(queue);
1681 struct key *tls_key;
1682
1683 dev_dbg(ctrl->ctrl.device, "queue %d: TLS handshake done, key %x, status %d\n",
1684 qid, pskid, status);
1685
1686 if (status) {
1687 queue->tls_err = -status;
1688 goto out_complete;
1689 }
1690
1691 tls_key = nvme_tls_key_lookup(pskid);
1692 if (IS_ERR(tls_key)) {
1693 dev_warn(ctrl->ctrl.device, "queue %d: Invalid key %x\n",
1694 qid, pskid);
1695 queue->tls_err = -ENOKEY;
1696 } else {
1697 queue->tls_enabled = true;
1698 if (qid == 0)
1699 ctrl->ctrl.tls_pskid = key_serial(tls_key);
1700 key_put(tls_key);
1701 queue->tls_err = 0;
1702 }
1703
1704out_complete:
1705 complete(&queue->tls_complete);
1706}
1707
1708static int nvme_tcp_start_tls(struct nvme_ctrl *nctrl,
1709 struct nvme_tcp_queue *queue,
1710 key_serial_t pskid)
1711{
1712 int qid = nvme_tcp_queue_id(queue);
1713 int ret;
1714 struct tls_handshake_args args;
1715 unsigned long tmo = tls_handshake_timeout * HZ;
1716 key_serial_t keyring = nvme_keyring_id();
1717
1718 dev_dbg(nctrl->device, "queue %d: start TLS with key %x\n",
1719 qid, pskid);
1720 memset(&args, 0, sizeof(args));
1721 args.ta_sock = queue->sock;
1722 args.ta_done = nvme_tcp_tls_done;
1723 args.ta_data = queue;
1724 args.ta_my_peerids[0] = pskid;
1725 args.ta_num_peerids = 1;
1726 if (nctrl->opts->keyring)
1727 keyring = key_serial(nctrl->opts->keyring);
1728 args.ta_keyring = keyring;
1729 args.ta_timeout_ms = tls_handshake_timeout * 1000;
1730 queue->tls_err = -EOPNOTSUPP;
1731 init_completion(&queue->tls_complete);
1732 ret = tls_client_hello_psk(&args, GFP_KERNEL);
1733 if (ret) {
1734 dev_err(nctrl->device, "queue %d: failed to start TLS: %d\n",
1735 qid, ret);
1736 return ret;
1737 }
1738 ret = wait_for_completion_interruptible_timeout(&queue->tls_complete, tmo);
1739 if (ret <= 0) {
1740 if (ret == 0)
1741 ret = -ETIMEDOUT;
1742
1743 dev_err(nctrl->device,
1744 "queue %d: TLS handshake failed, error %d\n",
1745 qid, ret);
1746 tls_handshake_cancel(queue->sock->sk);
1747 } else {
1748 dev_dbg(nctrl->device,
1749 "queue %d: TLS handshake complete, error %d\n",
1750 qid, queue->tls_err);
1751 ret = queue->tls_err;
1752 }
1753 return ret;
1754}
1755
1756static int nvme_tcp_alloc_queue(struct nvme_ctrl *nctrl, int qid,
1757 key_serial_t pskid)
1758{
1759 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1760 struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1761 int ret, rcv_pdu_size;
1762 struct file *sock_file;
1763
1764 mutex_init(&queue->queue_lock);
1765 queue->ctrl = ctrl;
1766 init_llist_head(&queue->req_list);
1767 INIT_LIST_HEAD(&queue->send_list);
1768 mutex_init(&queue->send_mutex);
1769 INIT_WORK(&queue->io_work, nvme_tcp_io_work);
1770
1771 if (qid > 0)
1772 queue->cmnd_capsule_len = nctrl->ioccsz * 16;
1773 else
1774 queue->cmnd_capsule_len = sizeof(struct nvme_command) +
1775 NVME_TCP_ADMIN_CCSZ;
1776
1777 ret = sock_create_kern(current->nsproxy->net_ns,
1778 ctrl->addr.ss_family, SOCK_STREAM,
1779 IPPROTO_TCP, &queue->sock);
1780 if (ret) {
1781 dev_err(nctrl->device,
1782 "failed to create socket: %d\n", ret);
1783 goto err_destroy_mutex;
1784 }
1785
1786 sock_file = sock_alloc_file(queue->sock, O_CLOEXEC, NULL);
1787 if (IS_ERR(sock_file)) {
1788 ret = PTR_ERR(sock_file);
1789 goto err_destroy_mutex;
1790 }
1791
1792 sk_net_refcnt_upgrade(queue->sock->sk);
1793 nvme_tcp_reclassify_socket(queue->sock);
1794
1795 /* Single syn retry */
1796 tcp_sock_set_syncnt(queue->sock->sk, 1);
1797
1798 /* Set TCP no delay */
1799 tcp_sock_set_nodelay(queue->sock->sk);
1800
1801 /*
1802 * Cleanup whatever is sitting in the TCP transmit queue on socket
1803 * close. This is done to prevent stale data from being sent should
1804 * the network connection be restored before TCP times out.
1805 */
1806 sock_no_linger(queue->sock->sk);
1807
1808 if (so_priority > 0)
1809 sock_set_priority(queue->sock->sk, so_priority);
1810
1811 /* Set socket type of service */
1812 if (nctrl->opts->tos >= 0)
1813 ip_sock_set_tos(queue->sock->sk, nctrl->opts->tos);
1814
1815 /* Set 10 seconds timeout for icresp recvmsg */
1816 queue->sock->sk->sk_rcvtimeo = 10 * HZ;
1817
1818 queue->sock->sk->sk_allocation = GFP_ATOMIC;
1819 queue->sock->sk->sk_use_task_frag = false;
1820 queue->io_cpu = WORK_CPU_UNBOUND;
1821 queue->request = NULL;
1822 queue->data_remaining = 0;
1823 queue->ddgst_remaining = 0;
1824 queue->pdu_remaining = 0;
1825 queue->pdu_offset = 0;
1826 sk_set_memalloc(queue->sock->sk);
1827
1828 if (nctrl->opts->mask & NVMF_OPT_HOST_TRADDR) {
1829 ret = kernel_bind(queue->sock, (struct sockaddr *)&ctrl->src_addr,
1830 sizeof(ctrl->src_addr));
1831 if (ret) {
1832 dev_err(nctrl->device,
1833 "failed to bind queue %d socket %d\n",
1834 qid, ret);
1835 goto err_sock;
1836 }
1837 }
1838
1839 if (nctrl->opts->mask & NVMF_OPT_HOST_IFACE) {
1840 char *iface = nctrl->opts->host_iface;
1841 sockptr_t optval = KERNEL_SOCKPTR(iface);
1842
1843 ret = sock_setsockopt(queue->sock, SOL_SOCKET, SO_BINDTODEVICE,
1844 optval, strlen(iface));
1845 if (ret) {
1846 dev_err(nctrl->device,
1847 "failed to bind to interface %s queue %d err %d\n",
1848 iface, qid, ret);
1849 goto err_sock;
1850 }
1851 }
1852
1853 queue->hdr_digest = nctrl->opts->hdr_digest;
1854 queue->data_digest = nctrl->opts->data_digest;
1855
1856 rcv_pdu_size = sizeof(struct nvme_tcp_rsp_pdu) +
1857 nvme_tcp_hdgst_len(queue);
1858 queue->pdu = kmalloc(rcv_pdu_size, GFP_KERNEL);
1859 if (!queue->pdu) {
1860 ret = -ENOMEM;
1861 goto err_sock;
1862 }
1863
1864 dev_dbg(nctrl->device, "connecting queue %d\n",
1865 nvme_tcp_queue_id(queue));
1866
1867 ret = kernel_connect(queue->sock, (struct sockaddr *)&ctrl->addr,
1868 sizeof(ctrl->addr), 0);
1869 if (ret) {
1870 dev_err(nctrl->device,
1871 "failed to connect socket: %d\n", ret);
1872 goto err_rcv_pdu;
1873 }
1874
1875 /* If PSKs are configured try to start TLS */
1876 if (nvme_tcp_tls_configured(nctrl) && pskid) {
1877 ret = nvme_tcp_start_tls(nctrl, queue, pskid);
1878 if (ret)
1879 goto err_init_connect;
1880 }
1881
1882 ret = nvme_tcp_init_connection(queue);
1883 if (ret)
1884 goto err_init_connect;
1885
1886 set_bit(NVME_TCP_Q_ALLOCATED, &queue->flags);
1887
1888 return 0;
1889
1890err_init_connect:
1891 kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1892err_rcv_pdu:
1893 kfree(queue->pdu);
1894err_sock:
1895 /* ->sock will be released by fput() */
1896 fput(queue->sock->file);
1897 queue->sock = NULL;
1898err_destroy_mutex:
1899 mutex_destroy(&queue->send_mutex);
1900 mutex_destroy(&queue->queue_lock);
1901 return ret;
1902}
1903
1904static void nvme_tcp_restore_sock_ops(struct nvme_tcp_queue *queue)
1905{
1906 struct socket *sock = queue->sock;
1907
1908 write_lock_bh(&sock->sk->sk_callback_lock);
1909 sock->sk->sk_user_data = NULL;
1910 sock->sk->sk_data_ready = queue->data_ready;
1911 sock->sk->sk_state_change = queue->state_change;
1912 sock->sk->sk_write_space = queue->write_space;
1913 write_unlock_bh(&sock->sk->sk_callback_lock);
1914}
1915
1916static void __nvme_tcp_stop_queue(struct nvme_tcp_queue *queue)
1917{
1918 kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1919 nvme_tcp_restore_sock_ops(queue);
1920 cancel_work_sync(&queue->io_work);
1921}
1922
1923static void nvme_tcp_stop_queue_nowait(struct nvme_ctrl *nctrl, int qid)
1924{
1925 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1926 struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1927
1928 if (!test_bit(NVME_TCP_Q_ALLOCATED, &queue->flags))
1929 return;
1930
1931 if (test_and_clear_bit(NVME_TCP_Q_IO_CPU_SET, &queue->flags))
1932 atomic_dec(&nvme_tcp_cpu_queues[queue->io_cpu]);
1933
1934 mutex_lock(&queue->queue_lock);
1935 if (test_and_clear_bit(NVME_TCP_Q_LIVE, &queue->flags))
1936 __nvme_tcp_stop_queue(queue);
1937 /* Stopping the queue will disable TLS */
1938 queue->tls_enabled = false;
1939 mutex_unlock(&queue->queue_lock);
1940}
1941
1942static void nvme_tcp_wait_queue(struct nvme_ctrl *nctrl, int qid)
1943{
1944 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1945 struct nvme_tcp_queue *queue = &ctrl->queues[qid];
1946 int timeout = 100;
1947
1948 while (timeout > 0) {
1949 if (!test_bit(NVME_TCP_Q_ALLOCATED, &queue->flags) ||
1950 !sk_wmem_alloc_get(queue->sock->sk))
1951 return;
1952 msleep(2);
1953 timeout -= 2;
1954 }
1955 dev_warn(nctrl->device,
1956 "qid %d: timeout draining sock wmem allocation expired\n",
1957 qid);
1958}
1959
1960static void nvme_tcp_stop_queue(struct nvme_ctrl *nctrl, int qid)
1961{
1962 nvme_tcp_stop_queue_nowait(nctrl, qid);
1963 nvme_tcp_wait_queue(nctrl, qid);
1964}
1965
1966
1967static void nvme_tcp_setup_sock_ops(struct nvme_tcp_queue *queue)
1968{
1969 write_lock_bh(&queue->sock->sk->sk_callback_lock);
1970 queue->sock->sk->sk_user_data = queue;
1971 queue->state_change = queue->sock->sk->sk_state_change;
1972 queue->data_ready = queue->sock->sk->sk_data_ready;
1973 queue->write_space = queue->sock->sk->sk_write_space;
1974 queue->sock->sk->sk_data_ready = nvme_tcp_data_ready;
1975 queue->sock->sk->sk_state_change = nvme_tcp_state_change;
1976 queue->sock->sk->sk_write_space = nvme_tcp_write_space;
1977#ifdef CONFIG_NET_RX_BUSY_POLL
1978 queue->sock->sk->sk_ll_usec = 1;
1979#endif
1980 write_unlock_bh(&queue->sock->sk->sk_callback_lock);
1981}
1982
1983static int nvme_tcp_start_queue(struct nvme_ctrl *nctrl, int idx)
1984{
1985 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
1986 struct nvme_tcp_queue *queue = &ctrl->queues[idx];
1987 int ret;
1988
1989 queue->rd_enabled = true;
1990 nvme_tcp_init_recv_ctx(queue);
1991 nvme_tcp_setup_sock_ops(queue);
1992
1993 if (idx) {
1994 nvme_tcp_set_queue_io_cpu(queue);
1995 ret = nvmf_connect_io_queue(nctrl, idx);
1996 } else
1997 ret = nvmf_connect_admin_queue(nctrl);
1998
1999 if (!ret) {
2000 set_bit(NVME_TCP_Q_LIVE, &queue->flags);
2001 } else {
2002 if (test_bit(NVME_TCP_Q_ALLOCATED, &queue->flags))
2003 __nvme_tcp_stop_queue(queue);
2004 dev_err(nctrl->device,
2005 "failed to connect queue: %d ret=%d\n", idx, ret);
2006 }
2007 return ret;
2008}
2009
2010static void nvme_tcp_free_admin_queue(struct nvme_ctrl *ctrl)
2011{
2012 if (to_tcp_ctrl(ctrl)->async_req.pdu) {
2013 cancel_work_sync(&ctrl->async_event_work);
2014 nvme_tcp_free_async_req(to_tcp_ctrl(ctrl));
2015 to_tcp_ctrl(ctrl)->async_req.pdu = NULL;
2016 }
2017
2018 nvme_tcp_free_queue(ctrl, 0);
2019}
2020
2021static void nvme_tcp_free_io_queues(struct nvme_ctrl *ctrl)
2022{
2023 int i;
2024
2025 for (i = 1; i < ctrl->queue_count; i++)
2026 nvme_tcp_free_queue(ctrl, i);
2027}
2028
2029static void nvme_tcp_stop_io_queues(struct nvme_ctrl *ctrl)
2030{
2031 int i;
2032
2033 for (i = 1; i < ctrl->queue_count; i++)
2034 nvme_tcp_stop_queue_nowait(ctrl, i);
2035 for (i = 1; i < ctrl->queue_count; i++)
2036 nvme_tcp_wait_queue(ctrl, i);
2037}
2038
2039static int nvme_tcp_start_io_queues(struct nvme_ctrl *ctrl,
2040 int first, int last)
2041{
2042 int i, ret;
2043
2044 for (i = first; i < last; i++) {
2045 ret = nvme_tcp_start_queue(ctrl, i);
2046 if (ret)
2047 goto out_stop_queues;
2048 }
2049
2050 return 0;
2051
2052out_stop_queues:
2053 for (i--; i >= first; i--)
2054 nvme_tcp_stop_queue(ctrl, i);
2055 return ret;
2056}
2057
2058static int nvme_tcp_alloc_admin_queue(struct nvme_ctrl *ctrl)
2059{
2060 int ret;
2061 key_serial_t pskid = 0;
2062
2063 if (nvme_tcp_tls_configured(ctrl)) {
2064 if (ctrl->opts->tls_key)
2065 pskid = key_serial(ctrl->opts->tls_key);
2066 else if (ctrl->opts->tls) {
2067 pskid = nvme_tls_psk_default(ctrl->opts->keyring,
2068 ctrl->opts->host->nqn,
2069 ctrl->opts->subsysnqn);
2070 if (!pskid) {
2071 dev_err(ctrl->device, "no valid PSK found\n");
2072 return -ENOKEY;
2073 }
2074 }
2075 }
2076
2077 ret = nvme_tcp_alloc_queue(ctrl, 0, pskid);
2078 if (ret)
2079 return ret;
2080
2081 ret = nvme_tcp_alloc_async_req(to_tcp_ctrl(ctrl));
2082 if (ret)
2083 goto out_free_queue;
2084
2085 return 0;
2086
2087out_free_queue:
2088 nvme_tcp_free_queue(ctrl, 0);
2089 return ret;
2090}
2091
2092static int __nvme_tcp_alloc_io_queues(struct nvme_ctrl *ctrl)
2093{
2094 int i, ret;
2095
2096 if (nvme_tcp_tls_configured(ctrl)) {
2097 if (ctrl->opts->concat) {
2098 /*
2099 * The generated PSK is stored in the
2100 * fabric options
2101 */
2102 if (!ctrl->opts->tls_key) {
2103 dev_err(ctrl->device, "no PSK generated\n");
2104 return -ENOKEY;
2105 }
2106 if (ctrl->tls_pskid &&
2107 ctrl->tls_pskid != key_serial(ctrl->opts->tls_key)) {
2108 dev_err(ctrl->device, "Stale PSK id %08x\n", ctrl->tls_pskid);
2109 ctrl->tls_pskid = 0;
2110 }
2111 } else if (!ctrl->tls_pskid) {
2112 dev_err(ctrl->device, "no PSK negotiated\n");
2113 return -ENOKEY;
2114 }
2115 }
2116
2117 for (i = 1; i < ctrl->queue_count; i++) {
2118 ret = nvme_tcp_alloc_queue(ctrl, i,
2119 ctrl->tls_pskid);
2120 if (ret)
2121 goto out_free_queues;
2122 }
2123
2124 return 0;
2125
2126out_free_queues:
2127 for (i--; i >= 1; i--)
2128 nvme_tcp_free_queue(ctrl, i);
2129
2130 return ret;
2131}
2132
2133static int nvme_tcp_alloc_io_queues(struct nvme_ctrl *ctrl)
2134{
2135 unsigned int nr_io_queues;
2136 int ret;
2137
2138 nr_io_queues = nvmf_nr_io_queues(ctrl->opts);
2139 ret = nvme_set_queue_count(ctrl, &nr_io_queues);
2140 if (ret)
2141 return ret;
2142
2143 if (nr_io_queues == 0) {
2144 dev_err(ctrl->device,
2145 "unable to set any I/O queues\n");
2146 return -ENOMEM;
2147 }
2148
2149 ctrl->queue_count = nr_io_queues + 1;
2150 dev_info(ctrl->device,
2151 "creating %d I/O queues.\n", nr_io_queues);
2152
2153 nvmf_set_io_queues(ctrl->opts, nr_io_queues,
2154 to_tcp_ctrl(ctrl)->io_queues);
2155 return __nvme_tcp_alloc_io_queues(ctrl);
2156}
2157
2158static int nvme_tcp_configure_io_queues(struct nvme_ctrl *ctrl, bool new)
2159{
2160 int ret, nr_queues;
2161
2162 ret = nvme_tcp_alloc_io_queues(ctrl);
2163 if (ret)
2164 return ret;
2165
2166 if (new) {
2167 ret = nvme_alloc_io_tag_set(ctrl, &to_tcp_ctrl(ctrl)->tag_set,
2168 &nvme_tcp_mq_ops,
2169 ctrl->opts->nr_poll_queues ? HCTX_MAX_TYPES : 2,
2170 sizeof(struct nvme_tcp_request));
2171 if (ret)
2172 goto out_free_io_queues;
2173 }
2174
2175 /*
2176 * Only start IO queues for which we have allocated the tagset
2177 * and limitted it to the available queues. On reconnects, the
2178 * queue number might have changed.
2179 */
2180 nr_queues = min(ctrl->tagset->nr_hw_queues + 1, ctrl->queue_count);
2181 ret = nvme_tcp_start_io_queues(ctrl, 1, nr_queues);
2182 if (ret)
2183 goto out_cleanup_connect_q;
2184
2185 if (!new) {
2186 nvme_start_freeze(ctrl);
2187 nvme_unquiesce_io_queues(ctrl);
2188 if (!nvme_wait_freeze_timeout(ctrl, NVME_IO_TIMEOUT)) {
2189 /*
2190 * If we timed out waiting for freeze we are likely to
2191 * be stuck. Fail the controller initialization just
2192 * to be safe.
2193 */
2194 ret = -ENODEV;
2195 nvme_unfreeze(ctrl);
2196 goto out_wait_freeze_timed_out;
2197 }
2198 blk_mq_update_nr_hw_queues(ctrl->tagset,
2199 ctrl->queue_count - 1);
2200 nvme_unfreeze(ctrl);
2201 }
2202
2203 /*
2204 * If the number of queues has increased (reconnect case)
2205 * start all new queues now.
2206 */
2207 ret = nvme_tcp_start_io_queues(ctrl, nr_queues,
2208 ctrl->tagset->nr_hw_queues + 1);
2209 if (ret)
2210 goto out_wait_freeze_timed_out;
2211
2212 return 0;
2213
2214out_wait_freeze_timed_out:
2215 nvme_quiesce_io_queues(ctrl);
2216 nvme_sync_io_queues(ctrl);
2217 nvme_tcp_stop_io_queues(ctrl);
2218out_cleanup_connect_q:
2219 nvme_cancel_tagset(ctrl);
2220 if (new)
2221 nvme_remove_io_tag_set(ctrl);
2222out_free_io_queues:
2223 nvme_tcp_free_io_queues(ctrl);
2224 return ret;
2225}
2226
2227static int nvme_tcp_configure_admin_queue(struct nvme_ctrl *ctrl, bool new)
2228{
2229 int error;
2230
2231 error = nvme_tcp_alloc_admin_queue(ctrl);
2232 if (error)
2233 return error;
2234
2235 if (new) {
2236 error = nvme_alloc_admin_tag_set(ctrl,
2237 &to_tcp_ctrl(ctrl)->admin_tag_set,
2238 &nvme_tcp_admin_mq_ops,
2239 sizeof(struct nvme_tcp_request));
2240 if (error)
2241 goto out_free_queue;
2242 }
2243
2244 error = nvme_tcp_start_queue(ctrl, 0);
2245 if (error)
2246 goto out_cleanup_tagset;
2247
2248 error = nvme_enable_ctrl(ctrl);
2249 if (error)
2250 goto out_stop_queue;
2251
2252 nvme_unquiesce_admin_queue(ctrl);
2253
2254 error = nvme_init_ctrl_finish(ctrl, false);
2255 if (error)
2256 goto out_quiesce_queue;
2257
2258 return 0;
2259
2260out_quiesce_queue:
2261 nvme_quiesce_admin_queue(ctrl);
2262 blk_sync_queue(ctrl->admin_q);
2263out_stop_queue:
2264 nvme_tcp_stop_queue(ctrl, 0);
2265 nvme_cancel_admin_tagset(ctrl);
2266out_cleanup_tagset:
2267 if (new)
2268 nvme_remove_admin_tag_set(ctrl);
2269out_free_queue:
2270 nvme_tcp_free_admin_queue(ctrl);
2271 return error;
2272}
2273
2274static void nvme_tcp_teardown_admin_queue(struct nvme_ctrl *ctrl,
2275 bool remove)
2276{
2277 nvme_quiesce_admin_queue(ctrl);
2278 blk_sync_queue(ctrl->admin_q);
2279 nvme_tcp_stop_queue(ctrl, 0);
2280 nvme_cancel_admin_tagset(ctrl);
2281 if (remove) {
2282 nvme_unquiesce_admin_queue(ctrl);
2283 nvme_remove_admin_tag_set(ctrl);
2284 }
2285 nvme_tcp_free_admin_queue(ctrl);
2286 if (ctrl->tls_pskid) {
2287 dev_dbg(ctrl->device, "Wipe negotiated TLS_PSK %08x\n",
2288 ctrl->tls_pskid);
2289 ctrl->tls_pskid = 0;
2290 }
2291}
2292
2293static void nvme_tcp_teardown_io_queues(struct nvme_ctrl *ctrl,
2294 bool remove)
2295{
2296 if (ctrl->queue_count <= 1)
2297 return;
2298 nvme_quiesce_io_queues(ctrl);
2299 nvme_sync_io_queues(ctrl);
2300 nvme_tcp_stop_io_queues(ctrl);
2301 nvme_cancel_tagset(ctrl);
2302 if (remove) {
2303 nvme_unquiesce_io_queues(ctrl);
2304 nvme_remove_io_tag_set(ctrl);
2305 }
2306 nvme_tcp_free_io_queues(ctrl);
2307}
2308
2309static void nvme_tcp_reconnect_or_remove(struct nvme_ctrl *ctrl,
2310 int status)
2311{
2312 enum nvme_ctrl_state state = nvme_ctrl_state(ctrl);
2313
2314 /* If we are resetting/deleting then do nothing */
2315 if (state != NVME_CTRL_CONNECTING) {
2316 WARN_ON_ONCE(state == NVME_CTRL_NEW || state == NVME_CTRL_LIVE);
2317 return;
2318 }
2319
2320 if (nvmf_should_reconnect(ctrl, status)) {
2321 dev_info(ctrl->device, "Reconnecting in %d seconds...\n",
2322 ctrl->opts->reconnect_delay);
2323 queue_delayed_work(nvme_wq, &to_tcp_ctrl(ctrl)->connect_work,
2324 ctrl->opts->reconnect_delay * HZ);
2325 } else {
2326 dev_info(ctrl->device, "Removing controller (%d)...\n",
2327 status);
2328 nvme_delete_ctrl(ctrl);
2329 }
2330}
2331
2332/*
2333 * The TLS key is set by secure concatenation after negotiation has been
2334 * completed on the admin queue. We need to revoke the key when:
2335 * - concatenation is enabled (otherwise it's a static key set by the user)
2336 * and
2337 * - the generated key is present in ctrl->tls_key (otherwise there's nothing
2338 * to revoke)
2339 * and
2340 * - a valid PSK key ID has been set in ctrl->tls_pskid (otherwise TLS
2341 * negotiation has not run).
2342 *
2343 * We cannot always revoke the key as nvme_tcp_alloc_admin_queue() is called
2344 * twice during secure concatenation, once on a 'normal' connection to run the
2345 * DH-HMAC-CHAP negotiation (which generates the key, so it _must not_ be set),
2346 * and once after the negotiation (which uses the key, so it _must_ be set).
2347 */
2348static bool nvme_tcp_key_revoke_needed(struct nvme_ctrl *ctrl)
2349{
2350 return ctrl->opts->concat && ctrl->opts->tls_key && ctrl->tls_pskid;
2351}
2352
2353static int nvme_tcp_setup_ctrl(struct nvme_ctrl *ctrl, bool new)
2354{
2355 struct nvmf_ctrl_options *opts = ctrl->opts;
2356 int ret;
2357
2358 ret = nvme_tcp_configure_admin_queue(ctrl, new);
2359 if (ret)
2360 return ret;
2361
2362 if (ctrl->opts->concat && !ctrl->tls_pskid) {
2363 /* See comments for nvme_tcp_key_revoke_needed() */
2364 dev_dbg(ctrl->device, "restart admin queue for secure concatenation\n");
2365 nvme_stop_keep_alive(ctrl);
2366 nvme_tcp_teardown_admin_queue(ctrl, false);
2367 ret = nvme_tcp_configure_admin_queue(ctrl, false);
2368 if (ret)
2369 goto destroy_admin;
2370 }
2371
2372 if (ctrl->icdoff) {
2373 ret = -EOPNOTSUPP;
2374 dev_err(ctrl->device, "icdoff is not supported!\n");
2375 goto destroy_admin;
2376 }
2377
2378 if (!nvme_ctrl_sgl_supported(ctrl)) {
2379 ret = -EOPNOTSUPP;
2380 dev_err(ctrl->device, "Mandatory sgls are not supported!\n");
2381 goto destroy_admin;
2382 }
2383
2384 if (opts->queue_size > ctrl->sqsize + 1)
2385 dev_warn(ctrl->device,
2386 "queue_size %zu > ctrl sqsize %u, clamping down\n",
2387 opts->queue_size, ctrl->sqsize + 1);
2388
2389 if (ctrl->sqsize + 1 > ctrl->maxcmd) {
2390 dev_warn(ctrl->device,
2391 "sqsize %u > ctrl maxcmd %u, clamping down\n",
2392 ctrl->sqsize + 1, ctrl->maxcmd);
2393 ctrl->sqsize = ctrl->maxcmd - 1;
2394 }
2395
2396 if (ctrl->queue_count > 1) {
2397 ret = nvme_tcp_configure_io_queues(ctrl, new);
2398 if (ret)
2399 goto destroy_admin;
2400 }
2401
2402 if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_LIVE)) {
2403 /*
2404 * state change failure is ok if we started ctrl delete,
2405 * unless we're during creation of a new controller to
2406 * avoid races with teardown flow.
2407 */
2408 enum nvme_ctrl_state state = nvme_ctrl_state(ctrl);
2409
2410 WARN_ON_ONCE(state != NVME_CTRL_DELETING &&
2411 state != NVME_CTRL_DELETING_NOIO);
2412 WARN_ON_ONCE(new);
2413 ret = -EINVAL;
2414 goto destroy_io;
2415 }
2416
2417 nvme_start_ctrl(ctrl);
2418 return 0;
2419
2420destroy_io:
2421 if (ctrl->queue_count > 1) {
2422 nvme_quiesce_io_queues(ctrl);
2423 nvme_sync_io_queues(ctrl);
2424 nvme_tcp_stop_io_queues(ctrl);
2425 nvme_cancel_tagset(ctrl);
2426 if (new)
2427 nvme_remove_io_tag_set(ctrl);
2428 nvme_tcp_free_io_queues(ctrl);
2429 }
2430destroy_admin:
2431 nvme_stop_keep_alive(ctrl);
2432 nvme_tcp_teardown_admin_queue(ctrl, new);
2433 return ret;
2434}
2435
2436static void nvme_tcp_reconnect_ctrl_work(struct work_struct *work)
2437{
2438 struct nvme_tcp_ctrl *tcp_ctrl = container_of(to_delayed_work(work),
2439 struct nvme_tcp_ctrl, connect_work);
2440 struct nvme_ctrl *ctrl = &tcp_ctrl->ctrl;
2441 int ret;
2442
2443 ++ctrl->nr_reconnects;
2444
2445 ret = nvme_tcp_setup_ctrl(ctrl, false);
2446 if (ret)
2447 goto requeue;
2448
2449 dev_info(ctrl->device, "Successfully reconnected (attempt %d/%d)\n",
2450 ctrl->nr_reconnects, ctrl->opts->max_reconnects);
2451
2452 ctrl->nr_reconnects = 0;
2453
2454 return;
2455
2456requeue:
2457 dev_info(ctrl->device, "Failed reconnect attempt %d/%d\n",
2458 ctrl->nr_reconnects, ctrl->opts->max_reconnects);
2459 nvme_tcp_reconnect_or_remove(ctrl, ret);
2460}
2461
2462static void nvme_tcp_error_recovery_work(struct work_struct *work)
2463{
2464 struct nvme_tcp_ctrl *tcp_ctrl = container_of(work,
2465 struct nvme_tcp_ctrl, err_work);
2466 struct nvme_ctrl *ctrl = &tcp_ctrl->ctrl;
2467
2468 if (nvme_tcp_key_revoke_needed(ctrl))
2469 nvme_auth_revoke_tls_key(ctrl);
2470 nvme_stop_keep_alive(ctrl);
2471 flush_work(&ctrl->async_event_work);
2472 nvme_tcp_teardown_io_queues(ctrl, false);
2473 /* unquiesce to fail fast pending requests */
2474 nvme_unquiesce_io_queues(ctrl);
2475 nvme_tcp_teardown_admin_queue(ctrl, false);
2476 nvme_unquiesce_admin_queue(ctrl);
2477 nvme_auth_stop(ctrl);
2478
2479 if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_CONNECTING)) {
2480 /* state change failure is ok if we started ctrl delete */
2481 enum nvme_ctrl_state state = nvme_ctrl_state(ctrl);
2482
2483 WARN_ON_ONCE(state != NVME_CTRL_DELETING &&
2484 state != NVME_CTRL_DELETING_NOIO);
2485 return;
2486 }
2487
2488 nvme_tcp_reconnect_or_remove(ctrl, 0);
2489}
2490
2491static void nvme_tcp_teardown_ctrl(struct nvme_ctrl *ctrl, bool shutdown)
2492{
2493 nvme_tcp_teardown_io_queues(ctrl, shutdown);
2494 nvme_quiesce_admin_queue(ctrl);
2495 nvme_disable_ctrl(ctrl, shutdown);
2496 nvme_tcp_teardown_admin_queue(ctrl, shutdown);
2497}
2498
2499static void nvme_tcp_delete_ctrl(struct nvme_ctrl *ctrl)
2500{
2501 nvme_tcp_teardown_ctrl(ctrl, true);
2502}
2503
2504static void nvme_reset_ctrl_work(struct work_struct *work)
2505{
2506 struct nvme_ctrl *ctrl =
2507 container_of(work, struct nvme_ctrl, reset_work);
2508 int ret;
2509
2510 if (nvme_tcp_key_revoke_needed(ctrl))
2511 nvme_auth_revoke_tls_key(ctrl);
2512 nvme_stop_ctrl(ctrl);
2513 nvme_tcp_teardown_ctrl(ctrl, false);
2514
2515 if (!nvme_change_ctrl_state(ctrl, NVME_CTRL_CONNECTING)) {
2516 /* state change failure is ok if we started ctrl delete */
2517 enum nvme_ctrl_state state = nvme_ctrl_state(ctrl);
2518
2519 WARN_ON_ONCE(state != NVME_CTRL_DELETING &&
2520 state != NVME_CTRL_DELETING_NOIO);
2521 return;
2522 }
2523
2524 ret = nvme_tcp_setup_ctrl(ctrl, false);
2525 if (ret)
2526 goto out_fail;
2527
2528 return;
2529
2530out_fail:
2531 ++ctrl->nr_reconnects;
2532 nvme_tcp_reconnect_or_remove(ctrl, ret);
2533}
2534
2535static void nvme_tcp_stop_ctrl(struct nvme_ctrl *ctrl)
2536{
2537 flush_work(&to_tcp_ctrl(ctrl)->err_work);
2538 cancel_delayed_work_sync(&to_tcp_ctrl(ctrl)->connect_work);
2539}
2540
2541static void nvme_tcp_free_ctrl(struct nvme_ctrl *nctrl)
2542{
2543 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(nctrl);
2544
2545 if (list_empty(&ctrl->list))
2546 goto free_ctrl;
2547
2548 mutex_lock(&nvme_tcp_ctrl_mutex);
2549 list_del(&ctrl->list);
2550 mutex_unlock(&nvme_tcp_ctrl_mutex);
2551
2552 nvmf_free_options(nctrl->opts);
2553free_ctrl:
2554 kfree(ctrl->queues);
2555 kfree(ctrl);
2556}
2557
2558static void nvme_tcp_set_sg_null(struct nvme_command *c)
2559{
2560 struct nvme_sgl_desc *sg = &c->common.dptr.sgl;
2561
2562 sg->addr = 0;
2563 sg->length = 0;
2564 sg->type = (NVME_TRANSPORT_SGL_DATA_DESC << 4) |
2565 NVME_SGL_FMT_TRANSPORT_A;
2566}
2567
2568static void nvme_tcp_set_sg_inline(struct nvme_tcp_queue *queue,
2569 struct nvme_command *c, u32 data_len)
2570{
2571 struct nvme_sgl_desc *sg = &c->common.dptr.sgl;
2572
2573 sg->addr = cpu_to_le64(queue->ctrl->ctrl.icdoff);
2574 sg->length = cpu_to_le32(data_len);
2575 sg->type = (NVME_SGL_FMT_DATA_DESC << 4) | NVME_SGL_FMT_OFFSET;
2576}
2577
2578static void nvme_tcp_set_sg_host_data(struct nvme_command *c,
2579 u32 data_len)
2580{
2581 struct nvme_sgl_desc *sg = &c->common.dptr.sgl;
2582
2583 sg->addr = 0;
2584 sg->length = cpu_to_le32(data_len);
2585 sg->type = (NVME_TRANSPORT_SGL_DATA_DESC << 4) |
2586 NVME_SGL_FMT_TRANSPORT_A;
2587}
2588
2589static void nvme_tcp_submit_async_event(struct nvme_ctrl *arg)
2590{
2591 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(arg);
2592 struct nvme_tcp_queue *queue = &ctrl->queues[0];
2593 struct nvme_tcp_cmd_pdu *pdu = ctrl->async_req.pdu;
2594 struct nvme_command *cmd = &pdu->cmd;
2595 u8 hdgst = nvme_tcp_hdgst_len(queue);
2596
2597 memset(pdu, 0, sizeof(*pdu));
2598 pdu->hdr.type = nvme_tcp_cmd;
2599 if (queue->hdr_digest)
2600 pdu->hdr.flags |= NVME_TCP_F_HDGST;
2601 pdu->hdr.hlen = sizeof(*pdu);
2602 pdu->hdr.plen = cpu_to_le32(pdu->hdr.hlen + hdgst);
2603
2604 cmd->common.opcode = nvme_admin_async_event;
2605 cmd->common.command_id = NVME_AQ_BLK_MQ_DEPTH;
2606 cmd->common.flags |= NVME_CMD_SGL_METABUF;
2607 nvme_tcp_set_sg_null(cmd);
2608
2609 ctrl->async_req.state = NVME_TCP_SEND_CMD_PDU;
2610 ctrl->async_req.offset = 0;
2611 ctrl->async_req.curr_bio = NULL;
2612 ctrl->async_req.data_len = 0;
2613 init_llist_node(&ctrl->async_req.lentry);
2614 INIT_LIST_HEAD(&ctrl->async_req.entry);
2615
2616 nvme_tcp_queue_request(&ctrl->async_req, true);
2617}
2618
2619static void nvme_tcp_complete_timed_out(struct request *rq)
2620{
2621 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2622 struct nvme_ctrl *ctrl = &req->queue->ctrl->ctrl;
2623
2624 nvme_tcp_stop_queue(ctrl, nvme_tcp_queue_id(req->queue));
2625 nvmf_complete_timed_out_request(rq);
2626}
2627
2628static enum blk_eh_timer_return nvme_tcp_timeout(struct request *rq)
2629{
2630 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2631 struct nvme_ctrl *ctrl = &req->queue->ctrl->ctrl;
2632 struct nvme_tcp_cmd_pdu *pdu = nvme_tcp_req_cmd_pdu(req);
2633 struct nvme_command *cmd = &pdu->cmd;
2634 int qid = nvme_tcp_queue_id(req->queue);
2635
2636 dev_warn(ctrl->device,
2637 "I/O tag %d (%04x) type %d opcode %#x (%s) QID %d timeout\n",
2638 rq->tag, nvme_cid(rq), pdu->hdr.type, cmd->common.opcode,
2639 nvme_fabrics_opcode_str(qid, cmd), qid);
2640
2641 if (nvme_ctrl_state(ctrl) != NVME_CTRL_LIVE) {
2642 /*
2643 * If we are resetting, connecting or deleting we should
2644 * complete immediately because we may block controller
2645 * teardown or setup sequence
2646 * - ctrl disable/shutdown fabrics requests
2647 * - connect requests
2648 * - initialization admin requests
2649 * - I/O requests that entered after unquiescing and
2650 * the controller stopped responding
2651 *
2652 * All other requests should be cancelled by the error
2653 * recovery work, so it's fine that we fail it here.
2654 */
2655 nvme_tcp_complete_timed_out(rq);
2656 return BLK_EH_DONE;
2657 }
2658
2659 /*
2660 * LIVE state should trigger the normal error recovery which will
2661 * handle completing this request.
2662 */
2663 nvme_tcp_error_recovery(ctrl);
2664 return BLK_EH_RESET_TIMER;
2665}
2666
2667static blk_status_t nvme_tcp_map_data(struct nvme_tcp_queue *queue,
2668 struct request *rq)
2669{
2670 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2671 struct nvme_tcp_cmd_pdu *pdu = nvme_tcp_req_cmd_pdu(req);
2672 struct nvme_command *c = &pdu->cmd;
2673
2674 c->common.flags |= NVME_CMD_SGL_METABUF;
2675
2676 if (!blk_rq_nr_phys_segments(rq))
2677 nvme_tcp_set_sg_null(c);
2678 else if (rq_data_dir(rq) == WRITE &&
2679 req->data_len <= nvme_tcp_inline_data_size(req))
2680 nvme_tcp_set_sg_inline(queue, c, req->data_len);
2681 else
2682 nvme_tcp_set_sg_host_data(c, req->data_len);
2683
2684 return 0;
2685}
2686
2687static blk_status_t nvme_tcp_setup_cmd_pdu(struct nvme_ns *ns,
2688 struct request *rq)
2689{
2690 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2691 struct nvme_tcp_cmd_pdu *pdu = nvme_tcp_req_cmd_pdu(req);
2692 struct nvme_tcp_queue *queue = req->queue;
2693 u8 hdgst = nvme_tcp_hdgst_len(queue), ddgst = 0;
2694 blk_status_t ret;
2695
2696 ret = nvme_setup_cmd(ns, rq);
2697 if (ret)
2698 return ret;
2699
2700 req->state = NVME_TCP_SEND_CMD_PDU;
2701 req->status = cpu_to_le16(NVME_SC_SUCCESS);
2702 req->offset = 0;
2703 req->data_sent = 0;
2704 req->pdu_len = 0;
2705 req->pdu_sent = 0;
2706 req->h2cdata_left = 0;
2707 req->data_len = blk_rq_nr_phys_segments(rq) ?
2708 blk_rq_payload_bytes(rq) : 0;
2709 req->curr_bio = rq->bio;
2710 if (req->curr_bio && req->data_len)
2711 nvme_tcp_init_iter(req, rq_data_dir(rq));
2712
2713 if (rq_data_dir(rq) == WRITE &&
2714 req->data_len <= nvme_tcp_inline_data_size(req))
2715 req->pdu_len = req->data_len;
2716
2717 pdu->hdr.type = nvme_tcp_cmd;
2718 pdu->hdr.flags = 0;
2719 if (queue->hdr_digest)
2720 pdu->hdr.flags |= NVME_TCP_F_HDGST;
2721 if (queue->data_digest && req->pdu_len) {
2722 pdu->hdr.flags |= NVME_TCP_F_DDGST;
2723 ddgst = nvme_tcp_ddgst_len(queue);
2724 }
2725 pdu->hdr.hlen = sizeof(*pdu);
2726 pdu->hdr.pdo = req->pdu_len ? pdu->hdr.hlen + hdgst : 0;
2727 pdu->hdr.plen =
2728 cpu_to_le32(pdu->hdr.hlen + hdgst + req->pdu_len + ddgst);
2729
2730 ret = nvme_tcp_map_data(queue, rq);
2731 if (unlikely(ret)) {
2732 nvme_cleanup_cmd(rq);
2733 dev_err(queue->ctrl->ctrl.device,
2734 "Failed to map data (%d)\n", ret);
2735 return ret;
2736 }
2737
2738 return 0;
2739}
2740
2741static void nvme_tcp_commit_rqs(struct blk_mq_hw_ctx *hctx)
2742{
2743 struct nvme_tcp_queue *queue = hctx->driver_data;
2744
2745 if (!llist_empty(&queue->req_list))
2746 queue_work_on(queue->io_cpu, nvme_tcp_wq, &queue->io_work);
2747}
2748
2749static blk_status_t nvme_tcp_queue_rq(struct blk_mq_hw_ctx *hctx,
2750 const struct blk_mq_queue_data *bd)
2751{
2752 struct nvme_ns *ns = hctx->queue->queuedata;
2753 struct nvme_tcp_queue *queue = hctx->driver_data;
2754 struct request *rq = bd->rq;
2755 struct nvme_tcp_request *req = blk_mq_rq_to_pdu(rq);
2756 bool queue_ready = test_bit(NVME_TCP_Q_LIVE, &queue->flags);
2757 blk_status_t ret;
2758
2759 if (!nvme_check_ready(&queue->ctrl->ctrl, rq, queue_ready))
2760 return nvme_fail_nonready_command(&queue->ctrl->ctrl, rq);
2761
2762 ret = nvme_tcp_setup_cmd_pdu(ns, rq);
2763 if (unlikely(ret))
2764 return ret;
2765
2766 nvme_start_request(rq);
2767
2768 nvme_tcp_queue_request(req, bd->last);
2769
2770 return BLK_STS_OK;
2771}
2772
2773static void nvme_tcp_map_queues(struct blk_mq_tag_set *set)
2774{
2775 struct nvme_tcp_ctrl *ctrl = to_tcp_ctrl(set->driver_data);
2776
2777 nvmf_map_queues(set, &ctrl->ctrl, ctrl->io_queues);
2778}
2779
2780static int nvme_tcp_poll(struct blk_mq_hw_ctx *hctx, struct io_comp_batch *iob)
2781{
2782 struct nvme_tcp_queue *queue = hctx->driver_data;
2783 struct sock *sk = queue->sock->sk;
2784 int ret;
2785
2786 if (!test_bit(NVME_TCP_Q_LIVE, &queue->flags))
2787 return 0;
2788
2789 set_bit(NVME_TCP_Q_POLLING, &queue->flags);
2790 if (sk_can_busy_loop(sk) && skb_queue_empty_lockless(&sk->sk_receive_queue))
2791 sk_busy_loop(sk, true);
2792 ret = nvme_tcp_try_recv(queue);
2793 clear_bit(NVME_TCP_Q_POLLING, &queue->flags);
2794 return ret < 0 ? ret : queue->nr_cqe;
2795}
2796
2797static int nvme_tcp_get_address(struct nvme_ctrl *ctrl, char *buf, int size)
2798{
2799 struct nvme_tcp_queue *queue = &to_tcp_ctrl(ctrl)->queues[0];
2800 struct sockaddr_storage src_addr;
2801 int ret, len;
2802
2803 len = nvmf_get_address(ctrl, buf, size);
2804
2805 if (!test_bit(NVME_TCP_Q_LIVE, &queue->flags))
2806 return len;
2807
2808 mutex_lock(&queue->queue_lock);
2809
2810 ret = kernel_getsockname(queue->sock, (struct sockaddr *)&src_addr);
2811 if (ret > 0) {
2812 if (len > 0)
2813 len--; /* strip trailing newline */
2814 len += scnprintf(buf + len, size - len, "%ssrc_addr=%pISc\n",
2815 (len) ? "," : "", &src_addr);
2816 }
2817
2818 mutex_unlock(&queue->queue_lock);
2819
2820 return len;
2821}
2822
2823static const struct blk_mq_ops nvme_tcp_mq_ops = {
2824 .queue_rq = nvme_tcp_queue_rq,
2825 .commit_rqs = nvme_tcp_commit_rqs,
2826 .complete = nvme_complete_rq,
2827 .init_request = nvme_tcp_init_request,
2828 .exit_request = nvme_tcp_exit_request,
2829 .init_hctx = nvme_tcp_init_hctx,
2830 .timeout = nvme_tcp_timeout,
2831 .map_queues = nvme_tcp_map_queues,
2832 .poll = nvme_tcp_poll,
2833};
2834
2835static const struct blk_mq_ops nvme_tcp_admin_mq_ops = {
2836 .queue_rq = nvme_tcp_queue_rq,
2837 .complete = nvme_complete_rq,
2838 .init_request = nvme_tcp_init_request,
2839 .exit_request = nvme_tcp_exit_request,
2840 .init_hctx = nvme_tcp_init_admin_hctx,
2841 .timeout = nvme_tcp_timeout,
2842};
2843
2844static const struct nvme_ctrl_ops nvme_tcp_ctrl_ops = {
2845 .name = "tcp",
2846 .module = THIS_MODULE,
2847 .flags = NVME_F_FABRICS | NVME_F_BLOCKING,
2848 .reg_read32 = nvmf_reg_read32,
2849 .reg_read64 = nvmf_reg_read64,
2850 .reg_write32 = nvmf_reg_write32,
2851 .subsystem_reset = nvmf_subsystem_reset,
2852 .free_ctrl = nvme_tcp_free_ctrl,
2853 .submit_async_event = nvme_tcp_submit_async_event,
2854 .delete_ctrl = nvme_tcp_delete_ctrl,
2855 .get_address = nvme_tcp_get_address,
2856 .stop_ctrl = nvme_tcp_stop_ctrl,
2857};
2858
2859static bool
2860nvme_tcp_existing_controller(struct nvmf_ctrl_options *opts)
2861{
2862 struct nvme_tcp_ctrl *ctrl;
2863 bool found = false;
2864
2865 mutex_lock(&nvme_tcp_ctrl_mutex);
2866 list_for_each_entry(ctrl, &nvme_tcp_ctrl_list, list) {
2867 found = nvmf_ip_options_match(&ctrl->ctrl, opts);
2868 if (found)
2869 break;
2870 }
2871 mutex_unlock(&nvme_tcp_ctrl_mutex);
2872
2873 return found;
2874}
2875
2876static struct nvme_tcp_ctrl *nvme_tcp_alloc_ctrl(struct device *dev,
2877 struct nvmf_ctrl_options *opts)
2878{
2879 struct nvme_tcp_ctrl *ctrl;
2880 int ret;
2881
2882 ctrl = kzalloc(sizeof(*ctrl), GFP_KERNEL);
2883 if (!ctrl)
2884 return ERR_PTR(-ENOMEM);
2885
2886 INIT_LIST_HEAD(&ctrl->list);
2887 ctrl->ctrl.opts = opts;
2888 ctrl->ctrl.queue_count = opts->nr_io_queues + opts->nr_write_queues +
2889 opts->nr_poll_queues + 1;
2890 ctrl->ctrl.sqsize = opts->queue_size - 1;
2891 ctrl->ctrl.kato = opts->kato;
2892
2893 INIT_DELAYED_WORK(&ctrl->connect_work,
2894 nvme_tcp_reconnect_ctrl_work);
2895 INIT_WORK(&ctrl->err_work, nvme_tcp_error_recovery_work);
2896 INIT_WORK(&ctrl->ctrl.reset_work, nvme_reset_ctrl_work);
2897
2898 if (!(opts->mask & NVMF_OPT_TRSVCID)) {
2899 opts->trsvcid =
2900 kstrdup(__stringify(NVME_TCP_DISC_PORT), GFP_KERNEL);
2901 if (!opts->trsvcid) {
2902 ret = -ENOMEM;
2903 goto out_free_ctrl;
2904 }
2905 opts->mask |= NVMF_OPT_TRSVCID;
2906 }
2907
2908 ret = inet_pton_with_scope(&init_net, AF_UNSPEC,
2909 opts->traddr, opts->trsvcid, &ctrl->addr);
2910 if (ret) {
2911 pr_err("malformed address passed: %s:%s\n",
2912 opts->traddr, opts->trsvcid);
2913 goto out_free_ctrl;
2914 }
2915
2916 if (opts->mask & NVMF_OPT_HOST_TRADDR) {
2917 ret = inet_pton_with_scope(&init_net, AF_UNSPEC,
2918 opts->host_traddr, NULL, &ctrl->src_addr);
2919 if (ret) {
2920 pr_err("malformed src address passed: %s\n",
2921 opts->host_traddr);
2922 goto out_free_ctrl;
2923 }
2924 }
2925
2926 if (opts->mask & NVMF_OPT_HOST_IFACE) {
2927 if (!__dev_get_by_name(&init_net, opts->host_iface)) {
2928 pr_err("invalid interface passed: %s\n",
2929 opts->host_iface);
2930 ret = -ENODEV;
2931 goto out_free_ctrl;
2932 }
2933 }
2934
2935 if (!opts->duplicate_connect && nvme_tcp_existing_controller(opts)) {
2936 ret = -EALREADY;
2937 goto out_free_ctrl;
2938 }
2939
2940 ctrl->queues = kcalloc(ctrl->ctrl.queue_count, sizeof(*ctrl->queues),
2941 GFP_KERNEL);
2942 if (!ctrl->queues) {
2943 ret = -ENOMEM;
2944 goto out_free_ctrl;
2945 }
2946
2947 ret = nvme_init_ctrl(&ctrl->ctrl, dev, &nvme_tcp_ctrl_ops, 0);
2948 if (ret)
2949 goto out_kfree_queues;
2950
2951 return ctrl;
2952out_kfree_queues:
2953 kfree(ctrl->queues);
2954out_free_ctrl:
2955 kfree(ctrl);
2956 return ERR_PTR(ret);
2957}
2958
2959static struct nvme_ctrl *nvme_tcp_create_ctrl(struct device *dev,
2960 struct nvmf_ctrl_options *opts)
2961{
2962 struct nvme_tcp_ctrl *ctrl;
2963 int ret;
2964
2965 ctrl = nvme_tcp_alloc_ctrl(dev, opts);
2966 if (IS_ERR(ctrl))
2967 return ERR_CAST(ctrl);
2968
2969 ret = nvme_add_ctrl(&ctrl->ctrl);
2970 if (ret)
2971 goto out_put_ctrl;
2972
2973 if (!nvme_change_ctrl_state(&ctrl->ctrl, NVME_CTRL_CONNECTING)) {
2974 WARN_ON_ONCE(1);
2975 ret = -EINTR;
2976 goto out_uninit_ctrl;
2977 }
2978
2979 ret = nvme_tcp_setup_ctrl(&ctrl->ctrl, true);
2980 if (ret)
2981 goto out_uninit_ctrl;
2982
2983 dev_info(ctrl->ctrl.device, "new ctrl: NQN \"%s\", addr %pISp, hostnqn: %s\n",
2984 nvmf_ctrl_subsysnqn(&ctrl->ctrl), &ctrl->addr, opts->host->nqn);
2985
2986 mutex_lock(&nvme_tcp_ctrl_mutex);
2987 list_add_tail(&ctrl->list, &nvme_tcp_ctrl_list);
2988 mutex_unlock(&nvme_tcp_ctrl_mutex);
2989
2990 return &ctrl->ctrl;
2991
2992out_uninit_ctrl:
2993 nvme_uninit_ctrl(&ctrl->ctrl);
2994out_put_ctrl:
2995 nvme_put_ctrl(&ctrl->ctrl);
2996 if (ret > 0)
2997 ret = -EIO;
2998 return ERR_PTR(ret);
2999}
3000
3001static struct nvmf_transport_ops nvme_tcp_transport = {
3002 .name = "tcp",
3003 .module = THIS_MODULE,
3004 .required_opts = NVMF_OPT_TRADDR,
3005 .allowed_opts = NVMF_OPT_TRSVCID | NVMF_OPT_RECONNECT_DELAY |
3006 NVMF_OPT_HOST_TRADDR | NVMF_OPT_CTRL_LOSS_TMO |
3007 NVMF_OPT_HDR_DIGEST | NVMF_OPT_DATA_DIGEST |
3008 NVMF_OPT_NR_WRITE_QUEUES | NVMF_OPT_NR_POLL_QUEUES |
3009 NVMF_OPT_TOS | NVMF_OPT_HOST_IFACE | NVMF_OPT_TLS |
3010 NVMF_OPT_KEYRING | NVMF_OPT_TLS_KEY | NVMF_OPT_CONCAT,
3011 .create_ctrl = nvme_tcp_create_ctrl,
3012};
3013
3014static int __init nvme_tcp_init_module(void)
3015{
3016 unsigned int wq_flags = WQ_MEM_RECLAIM | WQ_HIGHPRI | WQ_SYSFS;
3017 int cpu;
3018
3019 BUILD_BUG_ON(sizeof(struct nvme_tcp_hdr) != 8);
3020 BUILD_BUG_ON(sizeof(struct nvme_tcp_cmd_pdu) != 72);
3021 BUILD_BUG_ON(sizeof(struct nvme_tcp_data_pdu) != 24);
3022 BUILD_BUG_ON(sizeof(struct nvme_tcp_rsp_pdu) != 24);
3023 BUILD_BUG_ON(sizeof(struct nvme_tcp_r2t_pdu) != 24);
3024 BUILD_BUG_ON(sizeof(struct nvme_tcp_icreq_pdu) != 128);
3025 BUILD_BUG_ON(sizeof(struct nvme_tcp_icresp_pdu) != 128);
3026 BUILD_BUG_ON(sizeof(struct nvme_tcp_term_pdu) != 24);
3027
3028 if (wq_unbound)
3029 wq_flags |= WQ_UNBOUND;
3030
3031 nvme_tcp_wq = alloc_workqueue("nvme_tcp_wq", wq_flags, 0);
3032 if (!nvme_tcp_wq)
3033 return -ENOMEM;
3034
3035 for_each_possible_cpu(cpu)
3036 atomic_set(&nvme_tcp_cpu_queues[cpu], 0);
3037
3038 nvmf_register_transport(&nvme_tcp_transport);
3039 return 0;
3040}
3041
3042static void __exit nvme_tcp_cleanup_module(void)
3043{
3044 struct nvme_tcp_ctrl *ctrl;
3045
3046 nvmf_unregister_transport(&nvme_tcp_transport);
3047
3048 mutex_lock(&nvme_tcp_ctrl_mutex);
3049 list_for_each_entry(ctrl, &nvme_tcp_ctrl_list, list)
3050 nvme_delete_ctrl(&ctrl->ctrl);
3051 mutex_unlock(&nvme_tcp_ctrl_mutex);
3052 flush_workqueue(nvme_delete_wq);
3053
3054 destroy_workqueue(nvme_tcp_wq);
3055}
3056
3057module_init(nvme_tcp_init_module);
3058module_exit(nvme_tcp_cleanup_module);
3059
3060MODULE_DESCRIPTION("NVMe host TCP transport driver");
3061MODULE_LICENSE("GPL v2");
Linux 6.x block layer and io_uring tree(s)