drivers/nvme/target/tcp.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * NVMe over Fabrics TCP target.
   4  * Copyright (c) 2018 Lightbits Labs. All rights reserved.
   5  */
   6 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
   7 #include <linux/module.h>
   8 #include <linux/init.h>
   9 #include <linux/slab.h>
  10 #include <linux/err.h>
  11 #include <linux/nvme-tcp.h>
  12 #include <net/sock.h>
  13 #include <net/tcp.h>
  14 #include <linux/inet.h>
  15 #include <linux/llist.h>
  16 #include <crypto/hash.h>
  17
  18 #include "nvmet.h"
  19
  20 #define NVMET_TCP_DEF_INLINE_DATA_SIZE  (4 * PAGE_SIZE)
  21
  22 /* Define the socket priority to use for connections were it is desirable
  23  * that the NIC consider performing optimized packet processing or filtering.
  24  * A non-zero value being sufficient to indicate general consideration of any
  25  * possible optimization.  Making it a module param allows for alternative
  26  * values that may be unique for some NIC implementations.
  27  */
  28 static int so_priority;
  29 module_param(so_priority, int, 0644);
  30 MODULE_PARM_DESC(so_priority, "nvmet tcp socket optimize priority");
  31
  32 /* Define a time period (in usecs) that io_work() shall sample an activated
  33  * queue before determining it to be idle.  This optional module behavior
  34  * can enable NIC solutions that support socket optimized packet processing
  35  * using advanced interrupt moderation techniques.
  36  */
  37 static int idle_poll_period_usecs;
  38 module_param(idle_poll_period_usecs, int, 0644);
  39 MODULE_PARM_DESC(idle_poll_period_usecs,
  40                 "nvmet tcp io_work poll till idle time period in usecs");
  41
  42 #define NVMET_TCP_RECV_BUDGET           8
  43 #define NVMET_TCP_SEND_BUDGET           8
  44 #define NVMET_TCP_IO_WORK_BUDGET        64
  45
  46 enum nvmet_tcp_send_state {
  47         NVMET_TCP_SEND_DATA_PDU,
  48         NVMET_TCP_SEND_DATA,
  49         NVMET_TCP_SEND_R2T,
  50         NVMET_TCP_SEND_DDGST,
  51         NVMET_TCP_SEND_RESPONSE
  52 };
  53
  54 enum nvmet_tcp_recv_state {
  55         NVMET_TCP_RECV_PDU,
  56         NVMET_TCP_RECV_DATA,
  57         NVMET_TCP_RECV_DDGST,
  58         NVMET_TCP_RECV_ERR,
  59 };
  60
  61 enum {
  62         NVMET_TCP_F_INIT_FAILED = (1 << 0),
  63 };
  64
  65 struct nvmet_tcp_cmd {
  66         struct nvmet_tcp_queue          *queue;
  67         struct nvmet_req                req;
  68
  69         struct nvme_tcp_cmd_pdu         *cmd_pdu;
  70         struct nvme_tcp_rsp_pdu         *rsp_pdu;
  71         struct nvme_tcp_data_pdu        *data_pdu;
  72         struct nvme_tcp_r2t_pdu         *r2t_pdu;
  73
  74         u32                             rbytes_done;
  75         u32                             wbytes_done;
  76
  77         u32                             pdu_len;
  78         u32                             pdu_recv;
  79         int                             sg_idx;
  80         struct msghdr                   recv_msg;
  81         struct bio_vec                  *iov;
  82         u32                             flags;
  83
  84         struct list_head                entry;
  85         struct llist_node               lentry;
  86
  87         /* send state */
  88         u32                             offset;
  89         struct scatterlist              *cur_sg;
  90         enum nvmet_tcp_send_state       state;
  91
  92         __le32                          exp_ddgst;
  93         __le32                          recv_ddgst;
  94 };
  95
  96 enum nvmet_tcp_queue_state {
  97         NVMET_TCP_Q_CONNECTING,
  98         NVMET_TCP_Q_LIVE,
  99         NVMET_TCP_Q_DISCONNECTING,
 100 };
 101
 102 struct nvmet_tcp_queue {
 103         struct socket           *sock;
 104         struct nvmet_tcp_port   *port;
 105         struct work_struct      io_work;
 106         struct nvmet_cq         nvme_cq;
 107         struct nvmet_sq         nvme_sq;
 108
 109         /* send state */
 110         struct nvmet_tcp_cmd    *cmds;
 111         unsigned int            nr_cmds;
 112         struct list_head        free_list;
 113         struct llist_head       resp_list;
 114         struct list_head        resp_send_list;
 115         int                     send_list_len;
 116         struct nvmet_tcp_cmd    *snd_cmd;
 117
 118         /* recv state */
 119         int                     offset;
 120         int                     left;
 121         enum nvmet_tcp_recv_state rcv_state;
 122         struct nvmet_tcp_cmd    *cmd;
 123         union nvme_tcp_pdu      pdu;
 124
 125         /* digest state */
 126         bool                    hdr_digest;
 127         bool                    data_digest;
 128         struct ahash_request    *snd_hash;
 129         struct ahash_request    *rcv_hash;
 130
 131         unsigned long           poll_end;
 132
 133         spinlock_t              state_lock;
 134         enum nvmet_tcp_queue_state state;
 135
 136         struct sockaddr_storage sockaddr;
 137         struct sockaddr_storage sockaddr_peer;
 138         struct work_struct      release_work;
 139
 140         int                     idx;
 141         struct list_head        queue_list;
 142
 143         struct nvmet_tcp_cmd    connect;
 144
 145         struct page_frag_cache  pf_cache;
 146
 147         void (*data_ready)(struct sock *);
 148         void (*state_change)(struct sock *);
 149         void (*write_space)(struct sock *);
 150 };
 151
 152 struct nvmet_tcp_port {
 153         struct socket           *sock;
 154         struct work_struct      accept_work;
 155         struct nvmet_port       *nport;
 156         struct sockaddr_storage addr;
 157         void (*data_ready)(struct sock *);
 158 };
 159
 160 static DEFINE_IDA(nvmet_tcp_queue_ida);
 161 static LIST_HEAD(nvmet_tcp_queue_list);
 162 static DEFINE_MUTEX(nvmet_tcp_queue_mutex);
 163
 164 static struct workqueue_struct *nvmet_tcp_wq;
 165 static const struct nvmet_fabrics_ops nvmet_tcp_ops;
 166 static void nvmet_tcp_free_cmd(struct nvmet_tcp_cmd *c);
 167 static void nvmet_tcp_free_cmd_buffers(struct nvmet_tcp_cmd *cmd);
 168
 169 static inline u16 nvmet_tcp_cmd_tag(struct nvmet_tcp_queue *queue,
 170                 struct nvmet_tcp_cmd *cmd)
 171 {
 172         if (unlikely(!queue->nr_cmds)) {
 173                 /* We didn't allocate cmds yet, send 0xffff */
 174                 return USHRT_MAX;
 175         }
 176
 177         return cmd - queue->cmds;
 178 }
 179
 180 static inline bool nvmet_tcp_has_data_in(struct nvmet_tcp_cmd *cmd)
 181 {
 182         return nvme_is_write(cmd->req.cmd) &&
 183                 cmd->rbytes_done < cmd->req.transfer_len;
 184 }
 185
 186 static inline bool nvmet_tcp_need_data_in(struct nvmet_tcp_cmd *cmd)
 187 {
 188         return nvmet_tcp_has_data_in(cmd) && !cmd->req.cqe->status;
 189 }
 190
 191 static inline bool nvmet_tcp_need_data_out(struct nvmet_tcp_cmd *cmd)
 192 {
 193         return !nvme_is_write(cmd->req.cmd) &&
 194                 cmd->req.transfer_len > 0 &&
 195                 !cmd->req.cqe->status;
 196 }
 197
 198 static inline bool nvmet_tcp_has_inline_data(struct nvmet_tcp_cmd *cmd)
 199 {
 200         return nvme_is_write(cmd->req.cmd) && cmd->pdu_len &&
 201                 !cmd->rbytes_done;
 202 }
 203
 204 static inline struct nvmet_tcp_cmd *
 205 nvmet_tcp_get_cmd(struct nvmet_tcp_queue *queue)
 206 {
 207         struct nvmet_tcp_cmd *cmd;
 208
 209         cmd = list_first_entry_or_null(&queue->free_list,
 210                                 struct nvmet_tcp_cmd, entry);
 211         if (!cmd)
 212                 return NULL;
 213         list_del_init(&cmd->entry);
 214
 215         cmd->rbytes_done = cmd->wbytes_done = 0;
 216         cmd->pdu_len = 0;
 217         cmd->pdu_recv = 0;
 218         cmd->iov = NULL;
 219         cmd->flags = 0;
 220         return cmd;
 221 }
 222
 223 static inline void nvmet_tcp_put_cmd(struct nvmet_tcp_cmd *cmd)
 224 {
 225         if (unlikely(cmd == &cmd->queue->connect))
 226                 return;
 227
 228         list_add_tail(&cmd->entry, &cmd->queue->free_list);
 229 }
 230
 231 static inline int queue_cpu(struct nvmet_tcp_queue *queue)
 232 {
 233         return queue->sock->sk->sk_incoming_cpu;
 234 }
 235
 236 static inline u8 nvmet_tcp_hdgst_len(struct nvmet_tcp_queue *queue)
 237 {
 238         return queue->hdr_digest ? NVME_TCP_DIGEST_LENGTH : 0;
 239 }
 240
 241 static inline u8 nvmet_tcp_ddgst_len(struct nvmet_tcp_queue *queue)
 242 {
 243         return queue->data_digest ? NVME_TCP_DIGEST_LENGTH : 0;
 244 }
 245
 246 static inline void nvmet_tcp_hdgst(struct ahash_request *hash,
 247                 void *pdu, size_t len)
 248 {
 249         struct scatterlist sg;
 250
 251         sg_init_one(&sg, pdu, len);
 252         ahash_request_set_crypt(hash, &sg, pdu + len, len);
 253         crypto_ahash_digest(hash);
 254 }
 255
 256 static int nvmet_tcp_verify_hdgst(struct nvmet_tcp_queue *queue,
 257         void *pdu, size_t len)
 258 {
 259         struct nvme_tcp_hdr *hdr = pdu;
 260         __le32 recv_digest;
 261         __le32 exp_digest;
 262
 263         if (unlikely(!(hdr->flags & NVME_TCP_F_HDGST))) {
 264                 pr_err("queue %d: header digest enabled but no header digest\n",
 265                         queue->idx);
 266                 return -EPROTO;
 267         }
 268
 269         recv_digest = *(__le32 *)(pdu + hdr->hlen);
 270         nvmet_tcp_hdgst(queue->rcv_hash, pdu, len);
 271         exp_digest = *(__le32 *)(pdu + hdr->hlen);
 272         if (recv_digest != exp_digest) {
 273                 pr_err("queue %d: header digest error: recv %#x expected %#x\n",
 274                         queue->idx, le32_to_cpu(recv_digest),
 275                         le32_to_cpu(exp_digest));
 276                 return -EPROTO;
 277         }
 278
 279         return 0;
 280 }
 281
 282 static int nvmet_tcp_check_ddgst(struct nvmet_tcp_queue *queue, void *pdu)
 283 {
 284         struct nvme_tcp_hdr *hdr = pdu;
 285         u8 digest_len = nvmet_tcp_hdgst_len(queue);
 286         u32 len;
 287
 288         len = le32_to_cpu(hdr->plen) - hdr->hlen -
 289                 (hdr->flags & NVME_TCP_F_HDGST ? digest_len : 0);
 290
 291         if (unlikely(len && !(hdr->flags & NVME_TCP_F_DDGST))) {
 292                 pr_err("queue %d: data digest flag is cleared\n", queue->idx);
 293                 return -EPROTO;
 294         }
 295
 296         return 0;
 297 }
 298
 299 static void nvmet_tcp_free_cmd_buffers(struct nvmet_tcp_cmd *cmd)
 300 {
 301         kfree(cmd->iov);
 302         sgl_free(cmd->req.sg);
 303         cmd->iov = NULL;
 304         cmd->req.sg = NULL;
 305 }
 306
 307 static void nvmet_tcp_build_pdu_iovec(struct nvmet_tcp_cmd *cmd)
 308 {
 309         struct bio_vec *iov = cmd->iov;
 310         struct scatterlist *sg;
 311         u32 length, offset, sg_offset;
 312         int nr_pages;
 313
 314         length = cmd->pdu_len;
 315         nr_pages = DIV_ROUND_UP(length, PAGE_SIZE);
 316         offset = cmd->rbytes_done;
 317         cmd->sg_idx = offset / PAGE_SIZE;
 318         sg_offset = offset % PAGE_SIZE;
 319         sg = &cmd->req.sg[cmd->sg_idx];
 320
 321         while (length) {
 322                 u32 iov_len = min_t(u32, length, sg->length - sg_offset);
 323
 324                 iov->bv_page = sg_page(sg);
 325                 iov->bv_len = sg->length;
 326                 iov->bv_offset = sg->offset + sg_offset;
 327
 328                 length -= iov_len;
 329                 sg = sg_next(sg);
 330                 iov++;
 331                 sg_offset = 0;
 332         }
 333
 334         iov_iter_bvec(&cmd->recv_msg.msg_iter, ITER_DEST, cmd->iov,
 335                       nr_pages, cmd->pdu_len);
 336 }
 337
 338 static void nvmet_tcp_fatal_error(struct nvmet_tcp_queue *queue)
 339 {
 340         queue->rcv_state = NVMET_TCP_RECV_ERR;
 341         if (queue->nvme_sq.ctrl)
 342                 nvmet_ctrl_fatal_error(queue->nvme_sq.ctrl);
 343         else
 344                 kernel_sock_shutdown(queue->sock, SHUT_RDWR);
 345 }
 346
 347 static void nvmet_tcp_socket_error(struct nvmet_tcp_queue *queue, int status)
 348 {
 349         if (status == -EPIPE || status == -ECONNRESET)
 350                 kernel_sock_shutdown(queue->sock, SHUT_RDWR);
 351         else
 352                 nvmet_tcp_fatal_error(queue);
 353 }
 354
 355 static int nvmet_tcp_map_data(struct nvmet_tcp_cmd *cmd)
 356 {
 357         struct nvme_sgl_desc *sgl = &cmd->req.cmd->common.dptr.sgl;
 358         u32 len = le32_to_cpu(sgl->length);
 359
 360         if (!len)
 361                 return 0;
 362
 363         if (sgl->type == ((NVME_SGL_FMT_DATA_DESC << 4) |
 364                           NVME_SGL_FMT_OFFSET)) {
 365                 if (!nvme_is_write(cmd->req.cmd))
 366                         return NVME_SC_INVALID_FIELD | NVME_SC_DNR;
 367
 368                 if (len > cmd->req.port->inline_data_size)
 369                         return NVME_SC_SGL_INVALID_OFFSET | NVME_SC_DNR;
 370                 cmd->pdu_len = len;
 371         }
 372         cmd->req.transfer_len += len;
 373
 374         cmd->req.sg = sgl_alloc(len, GFP_KERNEL, &cmd->req.sg_cnt);
 375         if (!cmd->req.sg)
 376                 return NVME_SC_INTERNAL;
 377         cmd->cur_sg = cmd->req.sg;
 378
 379         if (nvmet_tcp_has_data_in(cmd)) {
 380                 cmd->iov = kmalloc_array(cmd->req.sg_cnt,
 381                                 sizeof(*cmd->iov), GFP_KERNEL);
 382                 if (!cmd->iov)
 383                         goto err;
 384         }
 385
 386         return 0;
 387 err:
 388         nvmet_tcp_free_cmd_buffers(cmd);
 389         return NVME_SC_INTERNAL;
 390 }
 391
 392 static void nvmet_tcp_calc_ddgst(struct ahash_request *hash,
 393                 struct nvmet_tcp_cmd *cmd)
 394 {
 395         ahash_request_set_crypt(hash, cmd->req.sg,
 396                 (void *)&cmd->exp_ddgst, cmd->req.transfer_len);
 397         crypto_ahash_digest(hash);
 398 }
 399
 400 static void nvmet_setup_c2h_data_pdu(struct nvmet_tcp_cmd *cmd)
 401 {
 402         struct nvme_tcp_data_pdu *pdu = cmd->data_pdu;
 403         struct nvmet_tcp_queue *queue = cmd->queue;
 404         u8 hdgst = nvmet_tcp_hdgst_len(cmd->queue);
 405         u8 ddgst = nvmet_tcp_ddgst_len(cmd->queue);
 406
 407         cmd->offset = 0;
 408         cmd->state = NVMET_TCP_SEND_DATA_PDU;
 409
 410         pdu->hdr.type = nvme_tcp_c2h_data;
 411         pdu->hdr.flags = NVME_TCP_F_DATA_LAST | (queue->nvme_sq.sqhd_disabled ?
 412                                                 NVME_TCP_F_DATA_SUCCESS : 0);
 413         pdu->hdr.hlen = sizeof(*pdu);
 414         pdu->hdr.pdo = pdu->hdr.hlen + hdgst;
 415         pdu->hdr.plen =
 416                 cpu_to_le32(pdu->hdr.hlen + hdgst +
 417                                 cmd->req.transfer_len + ddgst);
 418         pdu->command_id = cmd->req.cqe->command_id;
 419         pdu->data_length = cpu_to_le32(cmd->req.transfer_len);
 420         pdu->data_offset = cpu_to_le32(cmd->wbytes_done);
 421
 422         if (queue->data_digest) {
 423                 pdu->hdr.flags |= NVME_TCP_F_DDGST;
 424                 nvmet_tcp_calc_ddgst(queue->snd_hash, cmd);
 425         }
 426
 427         if (cmd->queue->hdr_digest) {
 428                 pdu->hdr.flags |= NVME_TCP_F_HDGST;
 429                 nvmet_tcp_hdgst(queue->snd_hash, pdu, sizeof(*pdu));
 430         }
 431 }
 432
 433 static void nvmet_setup_r2t_pdu(struct nvmet_tcp_cmd *cmd)
 434 {
 435         struct nvme_tcp_r2t_pdu *pdu = cmd->r2t_pdu;
 436         struct nvmet_tcp_queue *queue = cmd->queue;
 437         u8 hdgst = nvmet_tcp_hdgst_len(cmd->queue);
 438
 439         cmd->offset = 0;
 440         cmd->state = NVMET_TCP_SEND_R2T;
 441
 442         pdu->hdr.type = nvme_tcp_r2t;
 443         pdu->hdr.flags = 0;
 444         pdu->hdr.hlen = sizeof(*pdu);
 445         pdu->hdr.pdo = 0;
 446         pdu->hdr.plen = cpu_to_le32(pdu->hdr.hlen + hdgst);
 447
 448         pdu->command_id = cmd->req.cmd->common.command_id;
 449         pdu->ttag = nvmet_tcp_cmd_tag(cmd->queue, cmd);
 450         pdu->r2t_length = cpu_to_le32(cmd->req.transfer_len - cmd->rbytes_done);
 451         pdu->r2t_offset = cpu_to_le32(cmd->rbytes_done);
 452         if (cmd->queue->hdr_digest) {
 453                 pdu->hdr.flags |= NVME_TCP_F_HDGST;
 454                 nvmet_tcp_hdgst(queue->snd_hash, pdu, sizeof(*pdu));
 455         }
 456 }
 457
 458 static void nvmet_setup_response_pdu(struct nvmet_tcp_cmd *cmd)
 459 {
 460         struct nvme_tcp_rsp_pdu *pdu = cmd->rsp_pdu;
 461         struct nvmet_tcp_queue *queue = cmd->queue;
 462         u8 hdgst = nvmet_tcp_hdgst_len(cmd->queue);
 463
 464         cmd->offset = 0;
 465         cmd->state = NVMET_TCP_SEND_RESPONSE;
 466
 467         pdu->hdr.type = nvme_tcp_rsp;
 468         pdu->hdr.flags = 0;
 469         pdu->hdr.hlen = sizeof(*pdu);
 470         pdu->hdr.pdo = 0;
 471         pdu->hdr.plen = cpu_to_le32(pdu->hdr.hlen + hdgst);
 472         if (cmd->queue->hdr_digest) {
 473                 pdu->hdr.flags |= NVME_TCP_F_HDGST;
 474                 nvmet_tcp_hdgst(queue->snd_hash, pdu, sizeof(*pdu));
 475         }
 476 }
 477
 478 static void nvmet_tcp_process_resp_list(struct nvmet_tcp_queue *queue)
 479 {
 480         struct llist_node *node;
 481         struct nvmet_tcp_cmd *cmd;
 482
 483         for (node = llist_del_all(&queue->resp_list); node; node = node->next) {
 484                 cmd = llist_entry(node, struct nvmet_tcp_cmd, lentry);
 485                 list_add(&cmd->entry, &queue->resp_send_list);
 486                 queue->send_list_len++;
 487         }
 488 }
 489
 490 static struct nvmet_tcp_cmd *nvmet_tcp_fetch_cmd(struct nvmet_tcp_queue *queue)
 491 {
 492         queue->snd_cmd = list_first_entry_or_null(&queue->resp_send_list,
 493                                 struct nvmet_tcp_cmd, entry);
 494         if (!queue->snd_cmd) {
 495                 nvmet_tcp_process_resp_list(queue);
 496                 queue->snd_cmd =
 497                         list_first_entry_or_null(&queue->resp_send_list,
 498                                         struct nvmet_tcp_cmd, entry);
 499                 if (unlikely(!queue->snd_cmd))
 500                         return NULL;
 501         }
 502
 503         list_del_init(&queue->snd_cmd->entry);
 504         queue->send_list_len--;
 505
 506         if (nvmet_tcp_need_data_out(queue->snd_cmd))
 507                 nvmet_setup_c2h_data_pdu(queue->snd_cmd);
 508         else if (nvmet_tcp_need_data_in(queue->snd_cmd))
 509                 nvmet_setup_r2t_pdu(queue->snd_cmd);
 510         else
 511                 nvmet_setup_response_pdu(queue->snd_cmd);
 512
 513         return queue->snd_cmd;
 514 }
 515
 516 static void nvmet_tcp_queue_response(struct nvmet_req *req)
 517 {
 518         struct nvmet_tcp_cmd *cmd =
 519                 container_of(req, struct nvmet_tcp_cmd, req);
 520         struct nvmet_tcp_queue  *queue = cmd->queue;
 521         struct nvme_sgl_desc *sgl;
 522         u32 len;
 523
 524         if (unlikely(cmd == queue->cmd)) {
 525                 sgl = &cmd->req.cmd->common.dptr.sgl;
 526                 len = le32_to_cpu(sgl->length);
 527
 528                 /*
 529                  * Wait for inline data before processing the response.
 530                  * Avoid using helpers, this might happen before
 531                  * nvmet_req_init is completed.
 532                  */
 533                 if (queue->rcv_state == NVMET_TCP_RECV_PDU &&
 534                     len && len <= cmd->req.port->inline_data_size &&
 535                     nvme_is_write(cmd->req.cmd))
 536                         return;
 537         }
 538
 539         llist_add(&cmd->lentry, &queue->resp_list);
 540         queue_work_on(queue_cpu(queue), nvmet_tcp_wq, &cmd->queue->io_work);
 541 }
 542
 543 static void nvmet_tcp_execute_request(struct nvmet_tcp_cmd *cmd)
 544 {
 545         if (unlikely(cmd->flags & NVMET_TCP_F_INIT_FAILED))
 546                 nvmet_tcp_queue_response(&cmd->req);
 547         else
 548                 cmd->req.execute(&cmd->req);
 549 }
 550
 551 static int nvmet_try_send_data_pdu(struct nvmet_tcp_cmd *cmd)
 552 {
 553         u8 hdgst = nvmet_tcp_hdgst_len(cmd->queue);
 554         int left = sizeof(*cmd->data_pdu) - cmd->offset + hdgst;
 555         int ret;
 556
 557         ret = kernel_sendpage(cmd->queue->sock, virt_to_page(cmd->data_pdu),
 558                         offset_in_page(cmd->data_pdu) + cmd->offset,
 559                         left, MSG_DONTWAIT | MSG_MORE | MSG_SENDPAGE_NOTLAST);
 560         if (ret <= 0)
 561                 return ret;
 562
 563         cmd->offset += ret;
 564         left -= ret;
 565
 566         if (left)
 567                 return -EAGAIN;
 568
 569         cmd->state = NVMET_TCP_SEND_DATA;
 570         cmd->offset  = 0;
 571         return 1;
 572 }
 573
 574 static int nvmet_try_send_data(struct nvmet_tcp_cmd *cmd, bool last_in_batch)
 575 {
 576         struct nvmet_tcp_queue *queue = cmd->queue;
 577         int ret;
 578
 579         while (cmd->cur_sg) {
 580                 struct page *page = sg_page(cmd->cur_sg);
 581                 u32 left = cmd->cur_sg->length - cmd->offset;
 582                 int flags = MSG_DONTWAIT;
 583
 584                 if ((!last_in_batch && cmd->queue->send_list_len) ||
 585                     cmd->wbytes_done + left < cmd->req.transfer_len ||
 586                     queue->data_digest || !queue->nvme_sq.sqhd_disabled)
 587                         flags |= MSG_MORE | MSG_SENDPAGE_NOTLAST;
 588
 589                 ret = kernel_sendpage(cmd->queue->sock, page, cmd->offset,
 590                                         left, flags);
 591                 if (ret <= 0)
 592                         return ret;
 593
 594                 cmd->offset += ret;
 595                 cmd->wbytes_done += ret;
 596
 597                 /* Done with sg?*/
 598                 if (cmd->offset == cmd->cur_sg->length) {
 599                         cmd->cur_sg = sg_next(cmd->cur_sg);
 600                         cmd->offset = 0;
 601                 }
 602         }
 603
 604         if (queue->data_digest) {
 605                 cmd->state = NVMET_TCP_SEND_DDGST;
 606                 cmd->offset = 0;
 607         } else {
 608                 if (queue->nvme_sq.sqhd_disabled) {
 609                         cmd->queue->snd_cmd = NULL;
 610                         nvmet_tcp_put_cmd(cmd);
 611                 } else {
 612                         nvmet_setup_response_pdu(cmd);
 613                 }
 614         }
 615
 616         if (queue->nvme_sq.sqhd_disabled)
 617                 nvmet_tcp_free_cmd_buffers(cmd);
 618
 619         return 1;
 620
 621 }
 622
 623 static int nvmet_try_send_response(struct nvmet_tcp_cmd *cmd,
 624                 bool last_in_batch)
 625 {
 626         u8 hdgst = nvmet_tcp_hdgst_len(cmd->queue);
 627         int left = sizeof(*cmd->rsp_pdu) - cmd->offset + hdgst;
 628         int flags = MSG_DONTWAIT;
 629         int ret;
 630
 631         if (!last_in_batch && cmd->queue->send_list_len)
 632                 flags |= MSG_MORE | MSG_SENDPAGE_NOTLAST;
 633         else
 634                 flags |= MSG_EOR;
 635
 636         ret = kernel_sendpage(cmd->queue->sock, virt_to_page(cmd->rsp_pdu),
 637                 offset_in_page(cmd->rsp_pdu) + cmd->offset, left, flags);
 638         if (ret <= 0)
 639                 return ret;
 640         cmd->offset += ret;
 641         left -= ret;
 642
 643         if (left)
 644                 return -EAGAIN;
 645
 646         nvmet_tcp_free_cmd_buffers(cmd);
 647         cmd->queue->snd_cmd = NULL;
 648         nvmet_tcp_put_cmd(cmd);
 649         return 1;
 650 }
 651
 652 static int nvmet_try_send_r2t(struct nvmet_tcp_cmd *cmd, bool last_in_batch)
 653 {
 654         u8 hdgst = nvmet_tcp_hdgst_len(cmd->queue);
 655         int left = sizeof(*cmd->r2t_pdu) - cmd->offset + hdgst;
 656         int flags = MSG_DONTWAIT;
 657         int ret;
 658
 659         if (!last_in_batch && cmd->queue->send_list_len)
 660                 flags |= MSG_MORE | MSG_SENDPAGE_NOTLAST;
 661         else
 662                 flags |= MSG_EOR;
 663
 664         ret = kernel_sendpage(cmd->queue->sock, virt_to_page(cmd->r2t_pdu),
 665                 offset_in_page(cmd->r2t_pdu) + cmd->offset, left, flags);
 666         if (ret <= 0)
 667                 return ret;
 668         cmd->offset += ret;
 669         left -= ret;
 670
 671         if (left)
 672                 return -EAGAIN;
 673
 674         cmd->queue->snd_cmd = NULL;
 675         return 1;
 676 }
 677
 678 static int nvmet_try_send_ddgst(struct nvmet_tcp_cmd *cmd, bool last_in_batch)
 679 {
 680         struct nvmet_tcp_queue *queue = cmd->queue;
 681         int left = NVME_TCP_DIGEST_LENGTH - cmd->offset;
 682         struct msghdr msg = { .msg_flags = MSG_DONTWAIT };
 683         struct kvec iov = {
 684                 .iov_base = (u8 *)&cmd->exp_ddgst + cmd->offset,
 685                 .iov_len = left
 686         };
 687         int ret;
 688
 689         if (!last_in_batch && cmd->queue->send_list_len)
 690                 msg.msg_flags |= MSG_MORE;
 691         else
 692                 msg.msg_flags |= MSG_EOR;
 693
 694         ret = kernel_sendmsg(queue->sock, &msg, &iov, 1, iov.iov_len);
 695         if (unlikely(ret <= 0))
 696                 return ret;
 697
 698         cmd->offset += ret;
 699         left -= ret;
 700
 701         if (left)
 702                 return -EAGAIN;
 703
 704         if (queue->nvme_sq.sqhd_disabled) {
 705                 cmd->queue->snd_cmd = NULL;
 706                 nvmet_tcp_put_cmd(cmd);
 707         } else {
 708                 nvmet_setup_response_pdu(cmd);
 709         }
 710         return 1;
 711 }
 712
 713 static int nvmet_tcp_try_send_one(struct nvmet_tcp_queue *queue,
 714                 bool last_in_batch)
 715 {
 716         struct nvmet_tcp_cmd *cmd = queue->snd_cmd;
 717         int ret = 0;
 718
 719         if (!cmd || queue->state == NVMET_TCP_Q_DISCONNECTING) {
 720                 cmd = nvmet_tcp_fetch_cmd(queue);
 721                 if (unlikely(!cmd))
 722                         return 0;
 723         }
 724
 725         if (cmd->state == NVMET_TCP_SEND_DATA_PDU) {
 726                 ret = nvmet_try_send_data_pdu(cmd);
 727                 if (ret <= 0)
 728                         goto done_send;
 729         }
 730
 731         if (cmd->state == NVMET_TCP_SEND_DATA) {
 732                 ret = nvmet_try_send_data(cmd, last_in_batch);
 733                 if (ret <= 0)
 734                         goto done_send;
 735         }
 736
 737         if (cmd->state == NVMET_TCP_SEND_DDGST) {
 738                 ret = nvmet_try_send_ddgst(cmd, last_in_batch);
 739                 if (ret <= 0)
 740                         goto done_send;
 741         }
 742
 743         if (cmd->state == NVMET_TCP_SEND_R2T) {
 744                 ret = nvmet_try_send_r2t(cmd, last_in_batch);
 745                 if (ret <= 0)
 746                         goto done_send;
 747         }
 748
 749         if (cmd->state == NVMET_TCP_SEND_RESPONSE)
 750                 ret = nvmet_try_send_response(cmd, last_in_batch);
 751
 752 done_send:
 753         if (ret < 0) {
 754                 if (ret == -EAGAIN)
 755                         return 0;
 756                 return ret;
 757         }
 758
 759         return 1;
 760 }
 761
 762 static int nvmet_tcp_try_send(struct nvmet_tcp_queue *queue,
 763                 int budget, int *sends)
 764 {
 765         int i, ret = 0;
 766
 767         for (i = 0; i < budget; i++) {
 768                 ret = nvmet_tcp_try_send_one(queue, i == budget - 1);
 769                 if (unlikely(ret < 0)) {
 770                         nvmet_tcp_socket_error(queue, ret);
 771                         goto done;
 772                 } else if (ret == 0) {
 773                         break;
 774                 }
 775                 (*sends)++;
 776         }
 777 done:
 778         return ret;
 779 }
 780
 781 static void nvmet_prepare_receive_pdu(struct nvmet_tcp_queue *queue)
 782 {
 783         queue->offset = 0;
 784         queue->left = sizeof(struct nvme_tcp_hdr);
 785         queue->cmd = NULL;
 786         queue->rcv_state = NVMET_TCP_RECV_PDU;
 787 }
 788
 789 static void nvmet_tcp_free_crypto(struct nvmet_tcp_queue *queue)
 790 {
 791         struct crypto_ahash *tfm = crypto_ahash_reqtfm(queue->rcv_hash);
 792
 793         ahash_request_free(queue->rcv_hash);
 794         ahash_request_free(queue->snd_hash);
 795         crypto_free_ahash(tfm);
 796 }
 797
 798 static int nvmet_tcp_alloc_crypto(struct nvmet_tcp_queue *queue)
 799 {
 800         struct crypto_ahash *tfm;
 801
 802         tfm = crypto_alloc_ahash("crc32c", 0, CRYPTO_ALG_ASYNC);
 803         if (IS_ERR(tfm))
 804                 return PTR_ERR(tfm);
 805
 806         queue->snd_hash = ahash_request_alloc(tfm, GFP_KERNEL);
 807         if (!queue->snd_hash)
 808                 goto free_tfm;
 809         ahash_request_set_callback(queue->snd_hash, 0, NULL, NULL);
 810
 811         queue->rcv_hash = ahash_request_alloc(tfm, GFP_KERNEL);
 812         if (!queue->rcv_hash)
 813                 goto free_snd_hash;
 814         ahash_request_set_callback(queue->rcv_hash, 0, NULL, NULL);
 815
 816         return 0;
 817 free_snd_hash:
 818         ahash_request_free(queue->snd_hash);
 819 free_tfm:
 820         crypto_free_ahash(tfm);
 821         return -ENOMEM;
 822 }
 823
 824
 825 static int nvmet_tcp_handle_icreq(struct nvmet_tcp_queue *queue)
 826 {
 827         struct nvme_tcp_icreq_pdu *icreq = &queue->pdu.icreq;
 828         struct nvme_tcp_icresp_pdu *icresp = &queue->pdu.icresp;
 829         struct msghdr msg = {};
 830         struct kvec iov;
 831         int ret;
 832
 833         if (le32_to_cpu(icreq->hdr.plen) != sizeof(struct nvme_tcp_icreq_pdu)) {
 834                 pr_err("bad nvme-tcp pdu length (%d)\n",
 835                         le32_to_cpu(icreq->hdr.plen));
 836                 nvmet_tcp_fatal_error(queue);
 837         }
 838
 839         if (icreq->pfv != NVME_TCP_PFV_1_0) {
 840                 pr_err("queue %d: bad pfv %d\n", queue->idx, icreq->pfv);
 841                 return -EPROTO;
 842         }
 843
 844         if (icreq->hpda != 0) {
 845                 pr_err("queue %d: unsupported hpda %d\n", queue->idx,
 846                         icreq->hpda);
 847                 return -EPROTO;
 848         }
 849
 850         queue->hdr_digest = !!(icreq->digest & NVME_TCP_HDR_DIGEST_ENABLE);
 851         queue->data_digest = !!(icreq->digest & NVME_TCP_DATA_DIGEST_ENABLE);
 852         if (queue->hdr_digest || queue->data_digest) {
 853                 ret = nvmet_tcp_alloc_crypto(queue);
 854                 if (ret)
 855                         return ret;
 856         }
 857
 858         memset(icresp, 0, sizeof(*icresp));
 859         icresp->hdr.type = nvme_tcp_icresp;
 860         icresp->hdr.hlen = sizeof(*icresp);
 861         icresp->hdr.pdo = 0;
 862         icresp->hdr.plen = cpu_to_le32(icresp->hdr.hlen);
 863         icresp->pfv = cpu_to_le16(NVME_TCP_PFV_1_0);
 864         icresp->maxdata = cpu_to_le32(0x400000); /* 16M arbitrary limit */
 865         icresp->cpda = 0;
 866         if (queue->hdr_digest)
 867                 icresp->digest |= NVME_TCP_HDR_DIGEST_ENABLE;
 868         if (queue->data_digest)
 869                 icresp->digest |= NVME_TCP_DATA_DIGEST_ENABLE;
 870
 871         iov.iov_base = icresp;
 872         iov.iov_len = sizeof(*icresp);
 873         ret = kernel_sendmsg(queue->sock, &msg, &iov, 1, iov.iov_len);
 874         if (ret < 0)
 875                 goto free_crypto;
 876
 877         queue->state = NVMET_TCP_Q_LIVE;
 878         nvmet_prepare_receive_pdu(queue);
 879         return 0;
 880 free_crypto:
 881         if (queue->hdr_digest || queue->data_digest)
 882                 nvmet_tcp_free_crypto(queue);
 883         return ret;
 884 }
 885
 886 static void nvmet_tcp_handle_req_failure(struct nvmet_tcp_queue *queue,
 887                 struct nvmet_tcp_cmd *cmd, struct nvmet_req *req)
 888 {
 889         size_t data_len = le32_to_cpu(req->cmd->common.dptr.sgl.length);
 890         int ret;
 891
 892         /*
 893          * This command has not been processed yet, hence we are trying to
 894          * figure out if there is still pending data left to receive. If
 895          * we don't, we can simply prepare for the next pdu and bail out,
 896          * otherwise we will need to prepare a buffer and receive the
 897          * stale data before continuing forward.
 898          */
 899         if (!nvme_is_write(cmd->req.cmd) || !data_len ||
 900             data_len > cmd->req.port->inline_data_size) {
 901                 nvmet_prepare_receive_pdu(queue);
 902                 return;
 903         }
 904
 905         ret = nvmet_tcp_map_data(cmd);
 906         if (unlikely(ret)) {
 907                 pr_err("queue %d: failed to map data\n", queue->idx);
 908                 nvmet_tcp_fatal_error(queue);
 909                 return;
 910         }
 911
 912         queue->rcv_state = NVMET_TCP_RECV_DATA;
 913         nvmet_tcp_build_pdu_iovec(cmd);
 914         cmd->flags |= NVMET_TCP_F_INIT_FAILED;
 915 }
 916
 917 static int nvmet_tcp_handle_h2c_data_pdu(struct nvmet_tcp_queue *queue)
 918 {
 919         struct nvme_tcp_data_pdu *data = &queue->pdu.data;
 920         struct nvmet_tcp_cmd *cmd;
 921
 922         if (likely(queue->nr_cmds)) {
 923                 if (unlikely(data->ttag >= queue->nr_cmds)) {
 924                         pr_err("queue %d: received out of bound ttag %u, nr_cmds %u\n",
 925                                 queue->idx, data->ttag, queue->nr_cmds);
 926                         nvmet_tcp_fatal_error(queue);
 927                         return -EPROTO;
 928                 }
 929                 cmd = &queue->cmds[data->ttag];
 930         } else {
 931                 cmd = &queue->connect;
 932         }
 933
 934         if (le32_to_cpu(data->data_offset) != cmd->rbytes_done) {
 935                 pr_err("ttag %u unexpected data offset %u (expected %u)\n",
 936                         data->ttag, le32_to_cpu(data->data_offset),
 937                         cmd->rbytes_done);
 938                 /* FIXME: use path and transport errors */
 939                 nvmet_req_complete(&cmd->req,
 940                         NVME_SC_INVALID_FIELD | NVME_SC_DNR);
 941                 return -EPROTO;
 942         }
 943
 944         cmd->pdu_len = le32_to_cpu(data->data_length);
 945         cmd->pdu_recv = 0;
 946         nvmet_tcp_build_pdu_iovec(cmd);
 947         queue->cmd = cmd;
 948         queue->rcv_state = NVMET_TCP_RECV_DATA;
 949
 950         return 0;
 951 }
 952
 953 static int nvmet_tcp_done_recv_pdu(struct nvmet_tcp_queue *queue)
 954 {
 955         struct nvme_tcp_hdr *hdr = &queue->pdu.cmd.hdr;
 956         struct nvme_command *nvme_cmd = &queue->pdu.cmd.cmd;
 957         struct nvmet_req *req;
 958         int ret;
 959
 960         if (unlikely(queue->state == NVMET_TCP_Q_CONNECTING)) {
 961                 if (hdr->type != nvme_tcp_icreq) {
 962                         pr_err("unexpected pdu type (%d) before icreq\n",
 963                                 hdr->type);
 964                         nvmet_tcp_fatal_error(queue);
 965                         return -EPROTO;
 966                 }
 967                 return nvmet_tcp_handle_icreq(queue);
 968         }
 969
 970         if (unlikely(hdr->type == nvme_tcp_icreq)) {
 971                 pr_err("queue %d: received icreq pdu in state %d\n",
 972                         queue->idx, queue->state);
 973                 nvmet_tcp_fatal_error(queue);
 974                 return -EPROTO;
 975         }
 976
 977         if (hdr->type == nvme_tcp_h2c_data) {
 978                 ret = nvmet_tcp_handle_h2c_data_pdu(queue);
 979                 if (unlikely(ret))
 980                         return ret;
 981                 return 0;
 982         }
 983
 984         queue->cmd = nvmet_tcp_get_cmd(queue);
 985         if (unlikely(!queue->cmd)) {
 986                 /* This should never happen */
 987                 pr_err("queue %d: out of commands (%d) send_list_len: %d, opcode: %d",
 988                         queue->idx, queue->nr_cmds, queue->send_list_len,
 989                         nvme_cmd->common.opcode);
 990                 nvmet_tcp_fatal_error(queue);
 991                 return -ENOMEM;
 992         }
 993
 994         req = &queue->cmd->req;
 995         memcpy(req->cmd, nvme_cmd, sizeof(*nvme_cmd));
 996
 997         if (unlikely(!nvmet_req_init(req, &queue->nvme_cq,
 998                         &queue->nvme_sq, &nvmet_tcp_ops))) {
 999                 pr_err("failed cmd %p id %d opcode %d, data_len: %d\n",
1000                         req->cmd, req->cmd->common.command_id,
1001                         req->cmd->common.opcode,
1002                         le32_to_cpu(req->cmd->common.dptr.sgl.length));
1003
1004                 nvmet_tcp_handle_req_failure(queue, queue->cmd, req);
1005                 return 0;
1006         }
1007
1008         ret = nvmet_tcp_map_data(queue->cmd);
1009         if (unlikely(ret)) {
1010                 pr_err("queue %d: failed to map data\n", queue->idx);
1011                 if (nvmet_tcp_has_inline_data(queue->cmd))
1012                         nvmet_tcp_fatal_error(queue);
1013                 else
1014                         nvmet_req_complete(req, ret);
1015                 ret = -EAGAIN;
1016                 goto out;
1017         }
1018
1019         if (nvmet_tcp_need_data_in(queue->cmd)) {
1020                 if (nvmet_tcp_has_inline_data(queue->cmd)) {
1021                         queue->rcv_state = NVMET_TCP_RECV_DATA;
1022                         nvmet_tcp_build_pdu_iovec(queue->cmd);
1023                         return 0;
1024                 }
1025                 /* send back R2T */
1026                 nvmet_tcp_queue_response(&queue->cmd->req);
1027                 goto out;
1028         }
1029
1030         queue->cmd->req.execute(&queue->cmd->req);
1031 out:
1032         nvmet_prepare_receive_pdu(queue);
1033         return ret;
1034 }
1035
1036 static const u8 nvme_tcp_pdu_sizes[] = {
1037         [nvme_tcp_icreq]        = sizeof(struct nvme_tcp_icreq_pdu),
1038         [nvme_tcp_cmd]          = sizeof(struct nvme_tcp_cmd_pdu),
1039         [nvme_tcp_h2c_data]     = sizeof(struct nvme_tcp_data_pdu),
1040 };
1041
1042 static inline u8 nvmet_tcp_pdu_size(u8 type)
1043 {
1044         size_t idx = type;
1045
1046         return (idx < ARRAY_SIZE(nvme_tcp_pdu_sizes) &&
1047                 nvme_tcp_pdu_sizes[idx]) ?
1048                         nvme_tcp_pdu_sizes[idx] : 0;
1049 }
1050
1051 static inline bool nvmet_tcp_pdu_valid(u8 type)
1052 {
1053         switch (type) {
1054         case nvme_tcp_icreq:
1055         case nvme_tcp_cmd:
1056         case nvme_tcp_h2c_data:
1057                 /* fallthru */
1058                 return true;
1059         }
1060
1061         return false;
1062 }
1063
1064 static int nvmet_tcp_try_recv_pdu(struct nvmet_tcp_queue *queue)
1065 {
1066         struct nvme_tcp_hdr *hdr = &queue->pdu.cmd.hdr;
1067         int len;
1068         struct kvec iov;
1069         struct msghdr msg = { .msg_flags = MSG_DONTWAIT };
1070
1071 recv:
1072         iov.iov_base = (void *)&queue->pdu + queue->offset;
1073         iov.iov_len = queue->left;
1074         len = kernel_recvmsg(queue->sock, &msg, &iov, 1,
1075                         iov.iov_len, msg.msg_flags);
1076         if (unlikely(len < 0))
1077                 return len;
1078
1079         queue->offset += len;
1080         queue->left -= len;
1081         if (queue->left)
1082                 return -EAGAIN;
1083
1084         if (queue->offset == sizeof(struct nvme_tcp_hdr)) {
1085                 u8 hdgst = nvmet_tcp_hdgst_len(queue);
1086
1087                 if (unlikely(!nvmet_tcp_pdu_valid(hdr->type))) {
1088                         pr_err("unexpected pdu type %d\n", hdr->type);
1089                         nvmet_tcp_fatal_error(queue);
1090                         return -EIO;
1091                 }
1092
1093                 if (unlikely(hdr->hlen != nvmet_tcp_pdu_size(hdr->type))) {
1094                         pr_err("pdu %d bad hlen %d\n", hdr->type, hdr->hlen);
1095                         return -EIO;
1096                 }
1097
1098                 queue->left = hdr->hlen - queue->offset + hdgst;
1099                 goto recv;
1100         }
1101
1102         if (queue->hdr_digest &&
1103             nvmet_tcp_verify_hdgst(queue, &queue->pdu, hdr->hlen)) {
1104                 nvmet_tcp_fatal_error(queue); /* fatal */
1105                 return -EPROTO;
1106         }
1107
1108         if (queue->data_digest &&
1109             nvmet_tcp_check_ddgst(queue, &queue->pdu)) {
1110                 nvmet_tcp_fatal_error(queue); /* fatal */
1111                 return -EPROTO;
1112         }
1113
1114         return nvmet_tcp_done_recv_pdu(queue);
1115 }
1116
1117 static void nvmet_tcp_prep_recv_ddgst(struct nvmet_tcp_cmd *cmd)
1118 {
1119         struct nvmet_tcp_queue *queue = cmd->queue;
1120
1121         nvmet_tcp_calc_ddgst(queue->rcv_hash, cmd);
1122         queue->offset = 0;
1123         queue->left = NVME_TCP_DIGEST_LENGTH;
1124         queue->rcv_state = NVMET_TCP_RECV_DDGST;
1125 }
1126
1127 static int nvmet_tcp_try_recv_data(struct nvmet_tcp_queue *queue)
1128 {
1129         struct nvmet_tcp_cmd  *cmd = queue->cmd;
1130         int ret;
1131
1132         while (msg_data_left(&cmd->recv_msg)) {
1133                 ret = sock_recvmsg(cmd->queue->sock, &cmd->recv_msg,
1134                         cmd->recv_msg.msg_flags);
1135                 if (ret <= 0)
1136                         return ret;
1137
1138                 cmd->pdu_recv += ret;
1139                 cmd->rbytes_done += ret;
1140         }
1141
1142         if (queue->data_digest) {
1143                 nvmet_tcp_prep_recv_ddgst(cmd);
1144                 return 0;
1145         }
1146
1147         if (cmd->rbytes_done == cmd->req.transfer_len)
1148                 nvmet_tcp_execute_request(cmd);
1149
1150         nvmet_prepare_receive_pdu(queue);
1151         return 0;
1152 }
1153
1154 static int nvmet_tcp_try_recv_ddgst(struct nvmet_tcp_queue *queue)
1155 {
1156         struct nvmet_tcp_cmd *cmd = queue->cmd;
1157         int ret;
1158         struct msghdr msg = { .msg_flags = MSG_DONTWAIT };
1159         struct kvec iov = {
1160                 .iov_base = (void *)&cmd->recv_ddgst + queue->offset,
1161                 .iov_len = queue->left
1162         };
1163
1164         ret = kernel_recvmsg(queue->sock, &msg, &iov, 1,
1165                         iov.iov_len, msg.msg_flags);
1166         if (unlikely(ret < 0))
1167                 return ret;
1168
1169         queue->offset += ret;
1170         queue->left -= ret;
1171         if (queue->left)
1172                 return -EAGAIN;
1173
1174         if (queue->data_digest && cmd->exp_ddgst != cmd->recv_ddgst) {
1175                 pr_err("queue %d: cmd %d pdu (%d) data digest error: recv %#x expected %#x\n",
1176                         queue->idx, cmd->req.cmd->common.command_id,
1177                         queue->pdu.cmd.hdr.type, le32_to_cpu(cmd->recv_ddgst),
1178                         le32_to_cpu(cmd->exp_ddgst));
1179                 nvmet_req_uninit(&cmd->req);
1180                 nvmet_tcp_free_cmd_buffers(cmd);
1181                 nvmet_tcp_fatal_error(queue);
1182                 ret = -EPROTO;
1183                 goto out;
1184         }
1185
1186         if (cmd->rbytes_done == cmd->req.transfer_len)
1187                 nvmet_tcp_execute_request(cmd);
1188
1189         ret = 0;
1190 out:
1191         nvmet_prepare_receive_pdu(queue);
1192         return ret;
1193 }
1194
1195 static int nvmet_tcp_try_recv_one(struct nvmet_tcp_queue *queue)
1196 {
1197         int result = 0;
1198
1199         if (unlikely(queue->rcv_state == NVMET_TCP_RECV_ERR))
1200                 return 0;
1201
1202         if (queue->rcv_state == NVMET_TCP_RECV_PDU) {
1203                 result = nvmet_tcp_try_recv_pdu(queue);
1204                 if (result != 0)
1205                         goto done_recv;
1206         }
1207
1208         if (queue->rcv_state == NVMET_TCP_RECV_DATA) {
1209                 result = nvmet_tcp_try_recv_data(queue);
1210                 if (result != 0)
1211                         goto done_recv;
1212         }
1213
1214         if (queue->rcv_state == NVMET_TCP_RECV_DDGST) {
1215                 result = nvmet_tcp_try_recv_ddgst(queue);
1216                 if (result != 0)
1217                         goto done_recv;
1218         }
1219
1220 done_recv:
1221         if (result < 0) {
1222                 if (result == -EAGAIN)
1223                         return 0;
1224                 return result;
1225         }
1226         return 1;
1227 }
1228
1229 static int nvmet_tcp_try_recv(struct nvmet_tcp_queue *queue,
1230                 int budget, int *recvs)
1231 {
1232         int i, ret = 0;
1233
1234         for (i = 0; i < budget; i++) {
1235                 ret = nvmet_tcp_try_recv_one(queue);
1236                 if (unlikely(ret < 0)) {
1237                         nvmet_tcp_socket_error(queue, ret);
1238                         goto done;
1239                 } else if (ret == 0) {
1240                         break;
1241                 }
1242                 (*recvs)++;
1243         }
1244 done:
1245         return ret;
1246 }
1247
1248 static void nvmet_tcp_schedule_release_queue(struct nvmet_tcp_queue *queue)
1249 {
1250         spin_lock(&queue->state_lock);
1251         if (queue->state != NVMET_TCP_Q_DISCONNECTING) {
1252                 queue->state = NVMET_TCP_Q_DISCONNECTING;
1253                 queue_work(nvmet_wq, &queue->release_work);
1254         }
1255         spin_unlock(&queue->state_lock);
1256 }
1257
1258 static inline void nvmet_tcp_arm_queue_deadline(struct nvmet_tcp_queue *queue)
1259 {
1260         queue->poll_end = jiffies + usecs_to_jiffies(idle_poll_period_usecs);
1261 }
1262
1263 static bool nvmet_tcp_check_queue_deadline(struct nvmet_tcp_queue *queue,
1264                 int ops)
1265 {
1266         if (!idle_poll_period_usecs)
1267                 return false;
1268
1269         if (ops)
1270                 nvmet_tcp_arm_queue_deadline(queue);
1271
1272         return !time_after(jiffies, queue->poll_end);
1273 }
1274
1275 static void nvmet_tcp_io_work(struct work_struct *w)
1276 {
1277         struct nvmet_tcp_queue *queue =
1278                 container_of(w, struct nvmet_tcp_queue, io_work);
1279         bool pending;
1280         int ret, ops = 0;
1281
1282         do {
1283                 pending = false;
1284
1285                 ret = nvmet_tcp_try_recv(queue, NVMET_TCP_RECV_BUDGET, &ops);
1286                 if (ret > 0)
1287                         pending = true;
1288                 else if (ret < 0)
1289                         return;
1290
1291                 ret = nvmet_tcp_try_send(queue, NVMET_TCP_SEND_BUDGET, &ops);
1292                 if (ret > 0)
1293                         pending = true;
1294                 else if (ret < 0)
1295                         return;
1296
1297         } while (pending && ops < NVMET_TCP_IO_WORK_BUDGET);
1298
1299         /*
1300          * Requeue the worker if idle deadline period is in progress or any
1301          * ops activity was recorded during the do-while loop above.
1302          */
1303         if (nvmet_tcp_check_queue_deadline(queue, ops) || pending)
1304                 queue_work_on(queue_cpu(queue), nvmet_tcp_wq, &queue->io_work);
1305 }
1306
1307 static int nvmet_tcp_alloc_cmd(struct nvmet_tcp_queue *queue,
1308                 struct nvmet_tcp_cmd *c)
1309 {
1310         u8 hdgst = nvmet_tcp_hdgst_len(queue);
1311
1312         c->queue = queue;
1313         c->req.port = queue->port->nport;
1314
1315         c->cmd_pdu = page_frag_alloc(&queue->pf_cache,
1316                         sizeof(*c->cmd_pdu) + hdgst, GFP_KERNEL | __GFP_ZERO);
1317         if (!c->cmd_pdu)
1318                 return -ENOMEM;
1319         c->req.cmd = &c->cmd_pdu->cmd;
1320
1321         c->rsp_pdu = page_frag_alloc(&queue->pf_cache,
1322                         sizeof(*c->rsp_pdu) + hdgst, GFP_KERNEL | __GFP_ZERO);
1323         if (!c->rsp_pdu)
1324                 goto out_free_cmd;
1325         c->req.cqe = &c->rsp_pdu->cqe;
1326
1327         c->data_pdu = page_frag_alloc(&queue->pf_cache,
1328                         sizeof(*c->data_pdu) + hdgst, GFP_KERNEL | __GFP_ZERO);
1329         if (!c->data_pdu)
1330                 goto out_free_rsp;
1331
1332         c->r2t_pdu = page_frag_alloc(&queue->pf_cache,
1333                         sizeof(*c->r2t_pdu) + hdgst, GFP_KERNEL | __GFP_ZERO);
1334         if (!c->r2t_pdu)
1335                 goto out_free_data;
1336
1337         c->recv_msg.msg_flags = MSG_DONTWAIT | MSG_NOSIGNAL;
1338
1339         list_add_tail(&c->entry, &queue->free_list);
1340
1341         return 0;
1342 out_free_data:
1343         page_frag_free(c->data_pdu);
1344 out_free_rsp:
1345         page_frag_free(c->rsp_pdu);
1346 out_free_cmd:
1347         page_frag_free(c->cmd_pdu);
1348         return -ENOMEM;
1349 }
1350
1351 static void nvmet_tcp_free_cmd(struct nvmet_tcp_cmd *c)
1352 {
1353         page_frag_free(c->r2t_pdu);
1354         page_frag_free(c->data_pdu);
1355         page_frag_free(c->rsp_pdu);
1356         page_frag_free(c->cmd_pdu);
1357 }
1358
1359 static int nvmet_tcp_alloc_cmds(struct nvmet_tcp_queue *queue)
1360 {
1361         struct nvmet_tcp_cmd *cmds;
1362         int i, ret = -EINVAL, nr_cmds = queue->nr_cmds;
1363
1364         cmds = kcalloc(nr_cmds, sizeof(struct nvmet_tcp_cmd), GFP_KERNEL);
1365         if (!cmds)
1366                 goto out;
1367
1368         for (i = 0; i < nr_cmds; i++) {
1369                 ret = nvmet_tcp_alloc_cmd(queue, cmds + i);
1370                 if (ret)
1371                         goto out_free;
1372         }
1373
1374         queue->cmds = cmds;
1375
1376         return 0;
1377 out_free:
1378         while (--i >= 0)
1379                 nvmet_tcp_free_cmd(cmds + i);
1380         kfree(cmds);
1381 out:
1382         return ret;
1383 }
1384
1385 static void nvmet_tcp_free_cmds(struct nvmet_tcp_queue *queue)
1386 {
1387         struct nvmet_tcp_cmd *cmds = queue->cmds;
1388         int i;
1389
1390         for (i = 0; i < queue->nr_cmds; i++)
1391                 nvmet_tcp_free_cmd(cmds + i);
1392
1393         nvmet_tcp_free_cmd(&queue->connect);
1394         kfree(cmds);
1395 }
1396
1397 static void nvmet_tcp_restore_socket_callbacks(struct nvmet_tcp_queue *queue)
1398 {
1399         struct socket *sock = queue->sock;
1400
1401         write_lock_bh(&sock->sk->sk_callback_lock);
1402         sock->sk->sk_data_ready =  queue->data_ready;
1403         sock->sk->sk_state_change = queue->state_change;
1404         sock->sk->sk_write_space = queue->write_space;
1405         sock->sk->sk_user_data = NULL;
1406         write_unlock_bh(&sock->sk->sk_callback_lock);
1407 }
1408
1409 static void nvmet_tcp_uninit_data_in_cmds(struct nvmet_tcp_queue *queue)
1410 {
1411         struct nvmet_tcp_cmd *cmd = queue->cmds;
1412         int i;
1413
1414         for (i = 0; i < queue->nr_cmds; i++, cmd++) {
1415                 if (nvmet_tcp_need_data_in(cmd))
1416                         nvmet_req_uninit(&cmd->req);
1417         }
1418
1419         if (!queue->nr_cmds && nvmet_tcp_need_data_in(&queue->connect)) {
1420                 /* failed in connect */
1421                 nvmet_req_uninit(&queue->connect.req);
1422         }
1423 }
1424
1425 static void nvmet_tcp_free_cmd_data_in_buffers(struct nvmet_tcp_queue *queue)
1426 {
1427         struct nvmet_tcp_cmd *cmd = queue->cmds;
1428         int i;
1429
1430         for (i = 0; i < queue->nr_cmds; i++, cmd++) {
1431                 if (nvmet_tcp_need_data_in(cmd))
1432                         nvmet_tcp_free_cmd_buffers(cmd);
1433         }
1434
1435         if (!queue->nr_cmds && nvmet_tcp_need_data_in(&queue->connect))
1436                 nvmet_tcp_free_cmd_buffers(&queue->connect);
1437 }
1438
1439 static void nvmet_tcp_release_queue_work(struct work_struct *w)
1440 {
1441         struct page *page;
1442         struct nvmet_tcp_queue *queue =
1443                 container_of(w, struct nvmet_tcp_queue, release_work);
1444
1445         mutex_lock(&nvmet_tcp_queue_mutex);
1446         list_del_init(&queue->queue_list);
1447         mutex_unlock(&nvmet_tcp_queue_mutex);
1448
1449         nvmet_tcp_restore_socket_callbacks(queue);
1450         cancel_work_sync(&queue->io_work);
1451         /* stop accepting incoming data */
1452         queue->rcv_state = NVMET_TCP_RECV_ERR;
1453
1454         nvmet_tcp_uninit_data_in_cmds(queue);
1455         nvmet_sq_destroy(&queue->nvme_sq);
1456         cancel_work_sync(&queue->io_work);
1457         nvmet_tcp_free_cmd_data_in_buffers(queue);
1458         sock_release(queue->sock);
1459         nvmet_tcp_free_cmds(queue);
1460         if (queue->hdr_digest || queue->data_digest)
1461                 nvmet_tcp_free_crypto(queue);
1462         ida_free(&nvmet_tcp_queue_ida, queue->idx);
1463
1464         page = virt_to_head_page(queue->pf_cache.va);
1465         __page_frag_cache_drain(page, queue->pf_cache.pagecnt_bias);
1466         kfree(queue);
1467 }
1468
1469 static void nvmet_tcp_data_ready(struct sock *sk)
1470 {
1471         struct nvmet_tcp_queue *queue;
1472
1473         read_lock_bh(&sk->sk_callback_lock);
1474         queue = sk->sk_user_data;
1475         if (likely(queue))
1476                 queue_work_on(queue_cpu(queue), nvmet_tcp_wq, &queue->io_work);
1477         read_unlock_bh(&sk->sk_callback_lock);
1478 }
1479
1480 static void nvmet_tcp_write_space(struct sock *sk)
1481 {
1482         struct nvmet_tcp_queue *queue;
1483
1484         read_lock_bh(&sk->sk_callback_lock);
1485         queue = sk->sk_user_data;
1486         if (unlikely(!queue))
1487                 goto out;
1488
1489         if (unlikely(queue->state == NVMET_TCP_Q_CONNECTING)) {
1490                 queue->write_space(sk);
1491                 goto out;
1492         }
1493
1494         if (sk_stream_is_writeable(sk)) {
1495                 clear_bit(SOCK_NOSPACE, &sk->sk_socket->flags);
1496                 queue_work_on(queue_cpu(queue), nvmet_tcp_wq, &queue->io_work);
1497         }
1498 out:
1499         read_unlock_bh(&sk->sk_callback_lock);
1500 }
1501
1502 static void nvmet_tcp_state_change(struct sock *sk)
1503 {
1504         struct nvmet_tcp_queue *queue;
1505
1506         read_lock_bh(&sk->sk_callback_lock);
1507         queue = sk->sk_user_data;
1508         if (!queue)
1509                 goto done;
1510
1511         switch (sk->sk_state) {
1512         case TCP_FIN_WAIT2:
1513         case TCP_LAST_ACK:
1514                 break;
1515         case TCP_FIN_WAIT1:
1516         case TCP_CLOSE_WAIT:
1517         case TCP_CLOSE:
1518                 /* FALLTHRU */
1519                 nvmet_tcp_schedule_release_queue(queue);
1520                 break;
1521         default:
1522                 pr_warn("queue %d unhandled state %d\n",
1523                         queue->idx, sk->sk_state);
1524         }
1525 done:
1526         read_unlock_bh(&sk->sk_callback_lock);
1527 }
1528
1529 static int nvmet_tcp_set_queue_sock(struct nvmet_tcp_queue *queue)
1530 {
1531         struct socket *sock = queue->sock;
1532         struct inet_sock *inet = inet_sk(sock->sk);
1533         int ret;
1534
1535         ret = kernel_getsockname(sock,
1536                 (struct sockaddr *)&queue->sockaddr);
1537         if (ret < 0)
1538                 return ret;
1539
1540         ret = kernel_getpeername(sock,
1541                 (struct sockaddr *)&queue->sockaddr_peer);
1542         if (ret < 0)
1543                 return ret;
1544
1545         /*
1546          * Cleanup whatever is sitting in the TCP transmit queue on socket
1547          * close. This is done to prevent stale data from being sent should
1548          * the network connection be restored before TCP times out.
1549          */
1550         sock_no_linger(sock->sk);
1551
1552         if (so_priority > 0)
1553                 sock_set_priority(sock->sk, so_priority);
1554
1555         /* Set socket type of service */
1556         if (inet->rcv_tos > 0)
1557                 ip_sock_set_tos(sock->sk, inet->rcv_tos);
1558
1559         ret = 0;
1560         write_lock_bh(&sock->sk->sk_callback_lock);
1561         if (sock->sk->sk_state != TCP_ESTABLISHED) {
1562                 /*
1563                  * If the socket is already closing, don't even start
1564                  * consuming it
1565                  */
1566                 ret = -ENOTCONN;
1567         } else {
1568                 sock->sk->sk_user_data = queue;
1569                 queue->data_ready = sock->sk->sk_data_ready;
1570                 sock->sk->sk_data_ready = nvmet_tcp_data_ready;
1571                 queue->state_change = sock->sk->sk_state_change;
1572                 sock->sk->sk_state_change = nvmet_tcp_state_change;
1573                 queue->write_space = sock->sk->sk_write_space;
1574                 sock->sk->sk_write_space = nvmet_tcp_write_space;
1575                 if (idle_poll_period_usecs)
1576                         nvmet_tcp_arm_queue_deadline(queue);
1577                 queue_work_on(queue_cpu(queue), nvmet_tcp_wq, &queue->io_work);
1578         }
1579         write_unlock_bh(&sock->sk->sk_callback_lock);
1580
1581         return ret;
1582 }
1583
1584 static int nvmet_tcp_alloc_queue(struct nvmet_tcp_port *port,
1585                 struct socket *newsock)
1586 {
1587         struct nvmet_tcp_queue *queue;
1588         int ret;
1589
1590         queue = kzalloc(sizeof(*queue), GFP_KERNEL);
1591         if (!queue)
1592                 return -ENOMEM;
1593
1594         INIT_WORK(&queue->release_work, nvmet_tcp_release_queue_work);
1595         INIT_WORK(&queue->io_work, nvmet_tcp_io_work);
1596         queue->sock = newsock;
1597         queue->port = port;
1598         queue->nr_cmds = 0;
1599         spin_lock_init(&queue->state_lock);
1600         queue->state = NVMET_TCP_Q_CONNECTING;
1601         INIT_LIST_HEAD(&queue->free_list);
1602         init_llist_head(&queue->resp_list);
1603         INIT_LIST_HEAD(&queue->resp_send_list);
1604
1605         queue->idx = ida_alloc(&nvmet_tcp_queue_ida, GFP_KERNEL);
1606         if (queue->idx < 0) {
1607                 ret = queue->idx;
1608                 goto out_free_queue;
1609         }
1610
1611         ret = nvmet_tcp_alloc_cmd(queue, &queue->connect);
1612         if (ret)
1613                 goto out_ida_remove;
1614
1615         ret = nvmet_sq_init(&queue->nvme_sq);
1616         if (ret)
1617                 goto out_free_connect;
1618
1619         nvmet_prepare_receive_pdu(queue);
1620
1621         mutex_lock(&nvmet_tcp_queue_mutex);
1622         list_add_tail(&queue->queue_list, &nvmet_tcp_queue_list);
1623         mutex_unlock(&nvmet_tcp_queue_mutex);
1624
1625         ret = nvmet_tcp_set_queue_sock(queue);
1626         if (ret)
1627                 goto out_destroy_sq;
1628
1629         return 0;
1630 out_destroy_sq:
1631         mutex_lock(&nvmet_tcp_queue_mutex);
1632         list_del_init(&queue->queue_list);
1633         mutex_unlock(&nvmet_tcp_queue_mutex);
1634         nvmet_sq_destroy(&queue->nvme_sq);
1635 out_free_connect:
1636         nvmet_tcp_free_cmd(&queue->connect);
1637 out_ida_remove:
1638         ida_free(&nvmet_tcp_queue_ida, queue->idx);
1639 out_free_queue:
1640         kfree(queue);
1641         return ret;
1642 }
1643
1644 static void nvmet_tcp_accept_work(struct work_struct *w)
1645 {
1646         struct nvmet_tcp_port *port =
1647                 container_of(w, struct nvmet_tcp_port, accept_work);
1648         struct socket *newsock;
1649         int ret;
1650
1651         while (true) {
1652                 ret = kernel_accept(port->sock, &newsock, O_NONBLOCK);
1653                 if (ret < 0) {
1654                         if (ret != -EAGAIN)
1655                                 pr_warn("failed to accept err=%d\n", ret);
1656                         return;
1657                 }
1658                 ret = nvmet_tcp_alloc_queue(port, newsock);
1659                 if (ret) {
1660                         pr_err("failed to allocate queue\n");
1661                         sock_release(newsock);
1662                 }
1663         }
1664 }
1665
1666 static void nvmet_tcp_listen_data_ready(struct sock *sk)
1667 {
1668         struct nvmet_tcp_port *port;
1669
1670         read_lock_bh(&sk->sk_callback_lock);
1671         port = sk->sk_user_data;
1672         if (!port)
1673                 goto out;
1674
1675         if (sk->sk_state == TCP_LISTEN)
1676                 queue_work(nvmet_wq, &port->accept_work);
1677 out:
1678         read_unlock_bh(&sk->sk_callback_lock);
1679 }
1680
1681 static int nvmet_tcp_add_port(struct nvmet_port *nport)
1682 {
1683         struct nvmet_tcp_port *port;
1684         __kernel_sa_family_t af;
1685         int ret;
1686
1687         port = kzalloc(sizeof(*port), GFP_KERNEL);
1688         if (!port)
1689                 return -ENOMEM;
1690
1691         switch (nport->disc_addr.adrfam) {
1692         case NVMF_ADDR_FAMILY_IP4:
1693                 af = AF_INET;
1694                 break;
1695         case NVMF_ADDR_FAMILY_IP6:
1696                 af = AF_INET6;
1697                 break;
1698         default:
1699                 pr_err("address family %d not supported\n",
1700                                 nport->disc_addr.adrfam);
1701                 ret = -EINVAL;
1702                 goto err_port;
1703         }
1704
1705         ret = inet_pton_with_scope(&init_net, af, nport->disc_addr.traddr,
1706                         nport->disc_addr.trsvcid, &port->addr);
1707         if (ret) {
1708                 pr_err("malformed ip/port passed: %s:%s\n",
1709                         nport->disc_addr.traddr, nport->disc_addr.trsvcid);
1710                 goto err_port;
1711         }
1712
1713         port->nport = nport;
1714         INIT_WORK(&port->accept_work, nvmet_tcp_accept_work);
1715         if (port->nport->inline_data_size < 0)
1716                 port->nport->inline_data_size = NVMET_TCP_DEF_INLINE_DATA_SIZE;
1717
1718         ret = sock_create(port->addr.ss_family, SOCK_STREAM,
1719                                 IPPROTO_TCP, &port->sock);
1720         if (ret) {
1721                 pr_err("failed to create a socket\n");
1722                 goto err_port;
1723         }
1724
1725         port->sock->sk->sk_user_data = port;
1726         port->data_ready = port->sock->sk->sk_data_ready;
1727         port->sock->sk->sk_data_ready = nvmet_tcp_listen_data_ready;
1728         sock_set_reuseaddr(port->sock->sk);
1729         tcp_sock_set_nodelay(port->sock->sk);
1730         if (so_priority > 0)
1731                 sock_set_priority(port->sock->sk, so_priority);
1732
1733         ret = kernel_bind(port->sock, (struct sockaddr *)&port->addr,
1734                         sizeof(port->addr));
1735         if (ret) {
1736                 pr_err("failed to bind port socket %d\n", ret);
1737                 goto err_sock;
1738         }
1739
1740         ret = kernel_listen(port->sock, 128);
1741         if (ret) {
1742                 pr_err("failed to listen %d on port sock\n", ret);
1743                 goto err_sock;
1744         }
1745
1746         nport->priv = port;
1747         pr_info("enabling port %d (%pISpc)\n",
1748                 le16_to_cpu(nport->disc_addr.portid), &port->addr);
1749
1750         return 0;
1751
1752 err_sock:
1753         sock_release(port->sock);
1754 err_port:
1755         kfree(port);
1756         return ret;
1757 }
1758
1759 static void nvmet_tcp_destroy_port_queues(struct nvmet_tcp_port *port)
1760 {
1761         struct nvmet_tcp_queue *queue;
1762
1763         mutex_lock(&nvmet_tcp_queue_mutex);
1764         list_for_each_entry(queue, &nvmet_tcp_queue_list, queue_list)
1765                 if (queue->port == port)
1766                         kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1767         mutex_unlock(&nvmet_tcp_queue_mutex);
1768 }
1769
1770 static void nvmet_tcp_remove_port(struct nvmet_port *nport)
1771 {
1772         struct nvmet_tcp_port *port = nport->priv;
1773
1774         write_lock_bh(&port->sock->sk->sk_callback_lock);
1775         port->sock->sk->sk_data_ready = port->data_ready;
1776         port->sock->sk->sk_user_data = NULL;
1777         write_unlock_bh(&port->sock->sk->sk_callback_lock);
1778         cancel_work_sync(&port->accept_work);
1779         /*
1780          * Destroy the remaining queues, which are not belong to any
1781          * controller yet.
1782          */
1783         nvmet_tcp_destroy_port_queues(port);
1784
1785         sock_release(port->sock);
1786         kfree(port);
1787 }
1788
1789 static void nvmet_tcp_delete_ctrl(struct nvmet_ctrl *ctrl)
1790 {
1791         struct nvmet_tcp_queue *queue;
1792
1793         mutex_lock(&nvmet_tcp_queue_mutex);
1794         list_for_each_entry(queue, &nvmet_tcp_queue_list, queue_list)
1795                 if (queue->nvme_sq.ctrl == ctrl)
1796                         kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1797         mutex_unlock(&nvmet_tcp_queue_mutex);
1798 }
1799
1800 static u16 nvmet_tcp_install_queue(struct nvmet_sq *sq)
1801 {
1802         struct nvmet_tcp_queue *queue =
1803                 container_of(sq, struct nvmet_tcp_queue, nvme_sq);
1804
1805         if (sq->qid == 0) {
1806                 /* Let inflight controller teardown complete */
1807                 flush_workqueue(nvmet_wq);
1808         }
1809
1810         queue->nr_cmds = sq->size * 2;
1811         if (nvmet_tcp_alloc_cmds(queue))
1812                 return NVME_SC_INTERNAL;
1813         return 0;
1814 }
1815
1816 static void nvmet_tcp_disc_port_addr(struct nvmet_req *req,
1817                 struct nvmet_port *nport, char *traddr)
1818 {
1819         struct nvmet_tcp_port *port = nport->priv;
1820
1821         if (inet_addr_is_any((struct sockaddr *)&port->addr)) {
1822                 struct nvmet_tcp_cmd *cmd =
1823                         container_of(req, struct nvmet_tcp_cmd, req);
1824                 struct nvmet_tcp_queue *queue = cmd->queue;
1825
1826                 sprintf(traddr, "%pISc", (struct sockaddr *)&queue->sockaddr);
1827         } else {
1828                 memcpy(traddr, nport->disc_addr.traddr, NVMF_TRADDR_SIZE);
1829         }
1830 }
1831
1832 static const struct nvmet_fabrics_ops nvmet_tcp_ops = {
1833         .owner                  = THIS_MODULE,
1834         .type                   = NVMF_TRTYPE_TCP,
1835         .msdbd                  = 1,
1836         .add_port               = nvmet_tcp_add_port,
1837         .remove_port            = nvmet_tcp_remove_port,
1838         .queue_response         = nvmet_tcp_queue_response,
1839         .delete_ctrl            = nvmet_tcp_delete_ctrl,
1840         .install_queue          = nvmet_tcp_install_queue,
1841         .disc_traddr            = nvmet_tcp_disc_port_addr,
1842 };
1843
1844 static int __init nvmet_tcp_init(void)
1845 {
1846         int ret;
1847
1848         nvmet_tcp_wq = alloc_workqueue("nvmet_tcp_wq",
1849                                 WQ_MEM_RECLAIM | WQ_HIGHPRI, 0);
1850         if (!nvmet_tcp_wq)
1851                 return -ENOMEM;
1852
1853         ret = nvmet_register_transport(&nvmet_tcp_ops);
1854         if (ret)
1855                 goto err;
1856
1857         return 0;
1858 err:
1859         destroy_workqueue(nvmet_tcp_wq);
1860         return ret;
1861 }
1862
1863 static void __exit nvmet_tcp_exit(void)
1864 {
1865         struct nvmet_tcp_queue *queue;
1866
1867         nvmet_unregister_transport(&nvmet_tcp_ops);
1868
1869         flush_workqueue(nvmet_wq);
1870         mutex_lock(&nvmet_tcp_queue_mutex);
1871         list_for_each_entry(queue, &nvmet_tcp_queue_list, queue_list)
1872                 kernel_sock_shutdown(queue->sock, SHUT_RDWR);
1873         mutex_unlock(&nvmet_tcp_queue_mutex);
1874         flush_workqueue(nvmet_wq);
1875
1876         destroy_workqueue(nvmet_tcp_wq);
1877 }
1878
1879 module_init(nvmet_tcp_init);
1880 module_exit(nvmet_tcp_exit);
1881
1882 MODULE_LICENSE("GPL v2");
1883 MODULE_ALIAS("nvmet-transport-3"); /* 3 == NVMF_TRTYPE_TCP */