send.c 37.9 KB
Newer Older
A
Andy Grover 已提交
1
/*
2
 * Copyright (c) 2006, 2018 Oracle and/or its affiliates. All rights reserved.
A
Andy Grover 已提交
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33
 *
 * This software is available to you under a choice of one of two
 * licenses.  You may choose to be licensed under the terms of the GNU
 * General Public License (GPL) Version 2, available from the file
 * COPYING in the main directory of this source tree, or the
 * OpenIB.org BSD license below:
 *
 *     Redistribution and use in source and binary forms, with or
 *     without modification, are permitted provided that the following
 *     conditions are met:
 *
 *      - Redistributions of source code must retain the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer.
 *
 *      - Redistributions in binary form must reproduce the above
 *        copyright notice, this list of conditions and the following
 *        disclaimer in the documentation and/or other materials
 *        provided with the distribution.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 * SOFTWARE.
 *
 */
#include <linux/kernel.h>
34
#include <linux/moduleparam.h>
35
#include <linux/gfp.h>
A
Andy Grover 已提交
36 37 38
#include <net/sock.h>
#include <linux/in.h>
#include <linux/list.h>
39
#include <linux/ratelimit.h>
40
#include <linux/export.h>
41
#include <linux/sizes.h>
A
Andy Grover 已提交
42 43 44 45 46 47 48 49 50 51 52 53 54

#include "rds.h"

/* When transmitting messages in rds_send_xmit, we need to emerge from
 * time to time and briefly release the CPU. Otherwise the softlock watchdog
 * will kick our shin.
 * Also, it seems fairer to not let one busy connection stall all the
 * others.
 *
 * send_batch_count is the number of times we'll loop in send_xmit. Setting
 * it to 0 will restore the old behavior (where we looped until we had
 * drained the queue).
 */
55
static int send_batch_count = SZ_1K;
A
Andy Grover 已提交
56 57 58
module_param(send_batch_count, int, 0444);
MODULE_PARM_DESC(send_batch_count, " batch factor when working the send queue");

59 60
static void rds_send_remove_from_sock(struct list_head *messages, int status);

A
Andy Grover 已提交
61
/*
62 63
 * Reset the send state.  Callers must ensure that this doesn't race with
 * rds_send_xmit().
A
Andy Grover 已提交
64
 */
65
void rds_send_path_reset(struct rds_conn_path *cp)
A
Andy Grover 已提交
66 67 68 69
{
	struct rds_message *rm, *tmp;
	unsigned long flags;

70 71 72
	if (cp->cp_xmit_rm) {
		rm = cp->cp_xmit_rm;
		cp->cp_xmit_rm = NULL;
A
Andy Grover 已提交
73 74 75 76
		/* Tell the user the RDMA op is no longer mapped by the
		 * transport. This isn't entirely true (it's flushed out
		 * independently) but as the connection is down, there's
		 * no ongoing RDMA to/from that memory */
77 78
		rds_message_unmapped(rm);
		rds_message_put(rm);
A
Andy Grover 已提交
79
	}
80

81 82 83 84 85 86
	cp->cp_xmit_sg = 0;
	cp->cp_xmit_hdr_off = 0;
	cp->cp_xmit_data_off = 0;
	cp->cp_xmit_atomic_sent = 0;
	cp->cp_xmit_rdma_sent = 0;
	cp->cp_xmit_data_sent = 0;
A
Andy Grover 已提交
87

88
	cp->cp_conn->c_map_queued = 0;
A
Andy Grover 已提交
89

90 91
	cp->cp_unacked_packets = rds_sysctl_max_unacked_packets;
	cp->cp_unacked_bytes = rds_sysctl_max_unacked_bytes;
A
Andy Grover 已提交
92 93

	/* Mark messages as retransmissions, and move them to the send q */
94 95
	spin_lock_irqsave(&cp->cp_lock, flags);
	list_for_each_entry_safe(rm, tmp, &cp->cp_retrans, m_conn_item) {
A
Andy Grover 已提交
96 97 98
		set_bit(RDS_MSG_ACK_REQUIRED, &rm->m_flags);
		set_bit(RDS_MSG_RETRANSMITTED, &rm->m_flags);
	}
99 100 101
	list_splice_init(&cp->cp_retrans, &cp->cp_send_queue);
	spin_unlock_irqrestore(&cp->cp_lock, flags);
}
102
EXPORT_SYMBOL_GPL(rds_send_path_reset);
A
Andy Grover 已提交
103

104
static int acquire_in_xmit(struct rds_conn_path *cp)
105
{
106
	return test_and_set_bit(RDS_IN_XMIT, &cp->cp_flags) == 0;
107 108
}

109
static void release_in_xmit(struct rds_conn_path *cp)
110
{
111
	clear_bit(RDS_IN_XMIT, &cp->cp_flags);
112
	smp_mb__after_atomic();
113 114 115 116 117 118
	/*
	 * We don't use wait_on_bit()/wake_up_bit() because our waking is in a
	 * hot path and finding waiters is very rare.  We don't want to walk
	 * the system-wide hashed waitqueue buckets in the fast path only to
	 * almost never find waiters.
	 */
119 120
	if (waitqueue_active(&cp->cp_waitq))
		wake_up_all(&cp->cp_waitq);
121 122
}

A
Andy Grover 已提交
123
/*
L
Lucas De Marchi 已提交
124
 * We're making the conscious trade-off here to only send one message
A
Andy Grover 已提交
125 126 127 128 129 130 131 132 133 134 135 136
 * down the connection at a time.
 *   Pro:
 *      - tx queueing is a simple fifo list
 *   	- reassembly is optional and easily done by transports per conn
 *      - no per flow rx lookup at all, straight to the socket
 *   	- less per-frag memory and wire overhead
 *   Con:
 *      - queued acks can be delayed behind large messages
 *   Depends:
 *      - small message latency is higher behind queued large messages
 *      - large message latency isn't starved by intervening small sends
 */
137
int rds_send_xmit(struct rds_conn_path *cp)
A
Andy Grover 已提交
138
{
139
	struct rds_connection *conn = cp->cp_conn;
A
Andy Grover 已提交
140 141 142 143 144 145
	struct rds_message *rm;
	unsigned long flags;
	unsigned int tmp;
	struct scatterlist *sg;
	int ret = 0;
	LIST_HEAD(to_be_dropped);
146 147
	int batch_count;
	unsigned long send_gen = 0;
A
Andy Grover 已提交
148

149
restart:
150
	batch_count = 0;
151

A
Andy Grover 已提交
152 153 154 155 156 157 158
	/*
	 * sendmsg calls here after having queued its message on the send
	 * queue.  We only have one task feeding the connection at a time.  If
	 * another thread is already feeding the queue then we back off.  This
	 * avoids blocking the caller and trading per-connection data between
	 * caches per message.
	 */
159
	if (!acquire_in_xmit(cp)) {
160
		rds_stats_inc(s_send_lock_contention);
A
Andy Grover 已提交
161 162 163
		ret = -ENOMEM;
		goto out;
	}
164

165
	if (rds_destroy_pending(cp->cp_conn)) {
166 167 168 169 170
		release_in_xmit(cp);
		ret = -ENETUNREACH; /* dont requeue send work */
		goto out;
	}

171 172 173 174 175 176 177 178
	/*
	 * we record the send generation after doing the xmit acquire.
	 * if someone else manages to jump in and do some work, we'll use
	 * this to avoid a goto restart farther down.
	 *
	 * The acquire_in_xmit() check above ensures that only one
	 * caller can increment c_send_gen at any time.
	 */
179 180
	send_gen = READ_ONCE(cp->cp_send_gen) + 1;
	WRITE_ONCE(cp->cp_send_gen, send_gen);
181

182 183 184 185
	/*
	 * rds_conn_shutdown() sets the conn state and then tests RDS_IN_XMIT,
	 * we do the opposite to avoid races.
	 */
186 187
	if (!rds_conn_path_up(cp)) {
		release_in_xmit(cp);
188 189 190
		ret = 0;
		goto out;
	}
A
Andy Grover 已提交
191

192 193
	if (conn->c_trans->xmit_path_prepare)
		conn->c_trans->xmit_path_prepare(cp);
A
Andy Grover 已提交
194 195 196

	/*
	 * spin trying to push headers and data down the connection until
A
Andy Grover 已提交
197
	 * the connection doesn't make forward progress.
A
Andy Grover 已提交
198
	 */
199
	while (1) {
A
Andy Grover 已提交
200

201
		rm = cp->cp_xmit_rm;
A
Andy Grover 已提交
202

A
Andy Grover 已提交
203 204 205
		/*
		 * If between sending messages, we can send a pending congestion
		 * map update.
A
Andy Grover 已提交
206
		 */
207
		if (!rm && test_and_clear_bit(0, &conn->c_map_queued)) {
208 209 210 211
			rm = rds_cong_update_alloc(conn);
			if (IS_ERR(rm)) {
				ret = PTR_ERR(rm);
				break;
A
Andy Grover 已提交
212
			}
213
			rm->data.op_active = 1;
214 215
			rm->m_inc.i_conn_path = cp;
			rm->m_inc.i_conn = cp->cp_conn;
216

217
			cp->cp_xmit_rm = rm;
A
Andy Grover 已提交
218 219 220
		}

		/*
A
Andy Grover 已提交
221
		 * If not already working on one, grab the next message.
A
Andy Grover 已提交
222
		 *
223
		 * cp_xmit_rm holds a ref while we're sending this message down
A
Andy Grover 已提交
224 225 226
		 * the connction.  We can use this ref while holding the
		 * send_sem.. rds_send_reset() is serialized with it.
		 */
227
		if (!rm) {
A
Andy Grover 已提交
228 229
			unsigned int len;

230 231 232 233 234 235 236
			batch_count++;

			/* we want to process as big a batch as we can, but
			 * we also want to avoid softlockups.  If we've been
			 * through a lot of messages, lets back off and see
			 * if anyone else jumps in
			 */
237
			if (batch_count >= send_batch_count)
238 239
				goto over_batch;

240
			spin_lock_irqsave(&cp->cp_lock, flags);
A
Andy Grover 已提交
241

242 243
			if (!list_empty(&cp->cp_send_queue)) {
				rm = list_entry(cp->cp_send_queue.next,
A
Andy Grover 已提交
244 245 246 247 248 249 250 251
						struct rds_message,
						m_conn_item);
				rds_message_addref(rm);

				/*
				 * Move the message from the send queue to the retransmit
				 * list right away.
				 */
252 253
				list_move_tail(&rm->m_conn_item,
					       &cp->cp_retrans);
A
Andy Grover 已提交
254 255
			}

256
			spin_unlock_irqrestore(&cp->cp_lock, flags);
A
Andy Grover 已提交
257

258
			if (!rm)
A
Andy Grover 已提交
259 260 261 262 263 264 265 266 267
				break;

			/* Unfortunately, the way Infiniband deals with
			 * RDMA to a bad MR key is by moving the entire
			 * queue pair to error state. We cold possibly
			 * recover from that, but right now we drop the
			 * connection.
			 * Therefore, we never retransmit messages with RDMA ops.
			 */
268 269 270
			if (test_bit(RDS_MSG_FLUSH, &rm->m_flags) ||
			    (rm->rdma.op_active &&
			    test_bit(RDS_MSG_RETRANSMITTED, &rm->m_flags))) {
271
				spin_lock_irqsave(&cp->cp_lock, flags);
A
Andy Grover 已提交
272 273
				if (test_and_clear_bit(RDS_MSG_ON_CONN, &rm->m_flags))
					list_move(&rm->m_conn_item, &to_be_dropped);
274
				spin_unlock_irqrestore(&cp->cp_lock, flags);
A
Andy Grover 已提交
275 276 277 278 279
				continue;
			}

			/* Require an ACK every once in a while */
			len = ntohl(rm->m_inc.i_hdr.h_len);
280 281
			if (cp->cp_unacked_packets == 0 ||
			    cp->cp_unacked_bytes < len) {
282
				set_bit(RDS_MSG_ACK_REQUIRED, &rm->m_flags);
A
Andy Grover 已提交
283

284 285 286 287
				cp->cp_unacked_packets =
					rds_sysctl_max_unacked_packets;
				cp->cp_unacked_bytes =
					rds_sysctl_max_unacked_bytes;
A
Andy Grover 已提交
288 289
				rds_stats_inc(s_send_ack_required);
			} else {
290 291
				cp->cp_unacked_bytes -= len;
				cp->cp_unacked_packets--;
A
Andy Grover 已提交
292 293
			}

294
			cp->cp_xmit_rm = rm;
A
Andy Grover 已提交
295 296
		}

297
		/* The transport either sends the whole rdma or none of it */
298
		if (rm->rdma.op_active && !cp->cp_xmit_rdma_sent) {
299
			rm->m_final_op = &rm->rdma;
300 301 302 303
			/* The transport owns the mapped memory for now.
			 * You can't unmap it while it's on the send queue
			 */
			set_bit(RDS_MSG_MAPPED, &rm->m_flags);
304
			ret = conn->c_trans->xmit_rdma(conn, &rm->rdma);
305 306 307
			if (ret) {
				clear_bit(RDS_MSG_MAPPED, &rm->m_flags);
				wake_up_interruptible(&rm->m_flush_wait);
A
Andy Grover 已提交
308
				break;
309
			}
310
			cp->cp_xmit_rdma_sent = 1;
311

A
Andy Grover 已提交
312 313
		}

314
		if (rm->atomic.op_active && !cp->cp_xmit_atomic_sent) {
315
			rm->m_final_op = &rm->atomic;
316 317 318 319
			/* The transport owns the mapped memory for now.
			 * You can't unmap it while it's on the send queue
			 */
			set_bit(RDS_MSG_MAPPED, &rm->m_flags);
320
			ret = conn->c_trans->xmit_atomic(conn, &rm->atomic);
321 322 323
			if (ret) {
				clear_bit(RDS_MSG_MAPPED, &rm->m_flags);
				wake_up_interruptible(&rm->m_flush_wait);
A
Andy Grover 已提交
324
				break;
325
			}
326
			cp->cp_xmit_atomic_sent = 1;
327

A
Andy Grover 已提交
328 329
		}

330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351
		/*
		 * A number of cases require an RDS header to be sent
		 * even if there is no data.
		 * We permit 0-byte sends; rds-ping depends on this.
		 * However, if there are exclusively attached silent ops,
		 * we skip the hdr/data send, to enable silent operation.
		 */
		if (rm->data.op_nents == 0) {
			int ops_present;
			int all_ops_are_silent = 1;

			ops_present = (rm->atomic.op_active || rm->rdma.op_active);
			if (rm->atomic.op_active && !rm->atomic.op_silent)
				all_ops_are_silent = 0;
			if (rm->rdma.op_active && !rm->rdma.op_silent)
				all_ops_are_silent = 0;

			if (ops_present && all_ops_are_silent
			    && !rm->m_rdma_cookie)
				rm->data.op_active = 0;
		}

352
		if (rm->data.op_active && !cp->cp_xmit_data_sent) {
353
			rm->m_final_op = &rm->data;
354

A
Andy Grover 已提交
355
			ret = conn->c_trans->xmit(conn, rm,
356 357 358
						  cp->cp_xmit_hdr_off,
						  cp->cp_xmit_sg,
						  cp->cp_xmit_data_off);
A
Andy Grover 已提交
359 360 361
			if (ret <= 0)
				break;

362
			if (cp->cp_xmit_hdr_off < sizeof(struct rds_header)) {
A
Andy Grover 已提交
363 364
				tmp = min_t(int, ret,
					    sizeof(struct rds_header) -
365 366
					    cp->cp_xmit_hdr_off);
				cp->cp_xmit_hdr_off += tmp;
A
Andy Grover 已提交
367 368 369
				ret -= tmp;
			}

370
			sg = &rm->data.op_sg[cp->cp_xmit_sg];
A
Andy Grover 已提交
371 372
			while (ret) {
				tmp = min_t(int, ret, sg->length -
373 374
						      cp->cp_xmit_data_off);
				cp->cp_xmit_data_off += tmp;
A
Andy Grover 已提交
375
				ret -= tmp;
376 377
				if (cp->cp_xmit_data_off == sg->length) {
					cp->cp_xmit_data_off = 0;
A
Andy Grover 已提交
378
					sg++;
379 380 381
					cp->cp_xmit_sg++;
					BUG_ON(ret != 0 && cp->cp_xmit_sg ==
					       rm->data.op_nents);
A
Andy Grover 已提交
382 383
				}
			}
A
Andy Grover 已提交
384

385 386 387
			if (cp->cp_xmit_hdr_off == sizeof(struct rds_header) &&
			    (cp->cp_xmit_sg == rm->data.op_nents))
				cp->cp_xmit_data_sent = 1;
A
Andy Grover 已提交
388 389 390 391 392 393 394
		}

		/*
		 * A rm will only take multiple times through this loop
		 * if there is a data op. Thus, if the data is sent (or there was
		 * none), then we're done with the rm.
		 */
395 396 397 398 399 400 401 402
		if (!rm->data.op_active || cp->cp_xmit_data_sent) {
			cp->cp_xmit_rm = NULL;
			cp->cp_xmit_sg = 0;
			cp->cp_xmit_hdr_off = 0;
			cp->cp_xmit_data_off = 0;
			cp->cp_xmit_rdma_sent = 0;
			cp->cp_xmit_atomic_sent = 0;
			cp->cp_xmit_data_sent = 0;
A
Andy Grover 已提交
403 404

			rds_message_put(rm);
A
Andy Grover 已提交
405 406 407
		}
	}

408
over_batch:
409 410
	if (conn->c_trans->xmit_path_complete)
		conn->c_trans->xmit_path_complete(cp);
411
	release_in_xmit(cp);
A
Andy Grover 已提交
412

413 414 415 416 417 418 419 420
	/* Nuke any messages we decided not to retransmit. */
	if (!list_empty(&to_be_dropped)) {
		/* irqs on here, so we can put(), unlike above */
		list_for_each_entry(rm, &to_be_dropped, m_conn_item)
			rds_message_put(rm);
		rds_send_remove_from_sock(&to_be_dropped, RDS_RDMA_DROPPED);
	}

421
	/*
422 423 424 425 426
	 * Other senders can queue a message after we last test the send queue
	 * but before we clear RDS_IN_XMIT.  In that case they'd back off and
	 * not try and send their newly queued message.  We need to check the
	 * send queue after having cleared RDS_IN_XMIT so that their message
	 * doesn't get stuck on the send queue.
427 428 429 430
	 *
	 * If the transport cannot continue (i.e ret != 0), then it must
	 * call us when more room is available, such as from the tx
	 * completion handler.
431 432 433 434
	 *
	 * We have an extra generation check here so that if someone manages
	 * to jump in after our release_in_xmit, we'll see that they have done
	 * some work and we will skip our goto
435 436
	 */
	if (ret == 0) {
437 438
		bool raced;

439
		smp_mb();
440 441
		raced = send_gen != READ_ONCE(cp->cp_send_gen);

442
		if ((test_bit(0, &conn->c_map_queued) ||
443
		    !list_empty(&cp->cp_send_queue)) && !raced) {
444 445
			if (batch_count < send_batch_count)
				goto restart;
446
			rcu_read_lock();
447
			if (rds_destroy_pending(cp->cp_conn))
448 449 450 451
				ret = -ENETUNREACH;
			else
				queue_delayed_work(rds_wq, &cp->cp_send_w, 1);
			rcu_read_unlock();
452 453
		} else if (raced) {
			rds_stats_inc(s_send_lock_queue_raced);
A
Andy Grover 已提交
454 455 456 457 458
		}
	}
out:
	return ret;
}
459
EXPORT_SYMBOL_GPL(rds_send_xmit);
A
Andy Grover 已提交
460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490

static void rds_send_sndbuf_remove(struct rds_sock *rs, struct rds_message *rm)
{
	u32 len = be32_to_cpu(rm->m_inc.i_hdr.h_len);

	assert_spin_locked(&rs->rs_lock);

	BUG_ON(rs->rs_snd_bytes < len);
	rs->rs_snd_bytes -= len;

	if (rs->rs_snd_bytes == 0)
		rds_stats_inc(s_send_queue_empty);
}

static inline int rds_send_is_acked(struct rds_message *rm, u64 ack,
				    is_acked_func is_acked)
{
	if (is_acked)
		return is_acked(rm, ack);
	return be64_to_cpu(rm->m_inc.i_hdr.h_sequence) <= ack;
}

/*
 * This is pretty similar to what happens below in the ACK
 * handling code - except that we call here as soon as we get
 * the IB send completion on the RDMA op and the accompanying
 * message.
 */
void rds_rdma_send_complete(struct rds_message *rm, int status)
{
	struct rds_sock *rs = NULL;
A
Andy Grover 已提交
491
	struct rm_rdma_op *ro;
A
Andy Grover 已提交
492
	struct rds_notifier *notifier;
493
	unsigned long flags;
494
	unsigned int notify = 0;
A
Andy Grover 已提交
495

496
	spin_lock_irqsave(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
497

498
	notify =  rm->rdma.op_notify | rm->data.op_notify;
A
Andy Grover 已提交
499
	ro = &rm->rdma;
500
	if (test_bit(RDS_MSG_ON_SOCK, &rm->m_flags) &&
501
	    ro->op_active && notify && ro->op_notifier) {
A
Andy Grover 已提交
502
		notifier = ro->op_notifier;
A
Andy Grover 已提交
503 504 505 506 507 508 509 510
		rs = rm->m_rs;
		sock_hold(rds_rs_to_sk(rs));

		notifier->n_status = status;
		spin_lock(&rs->rs_lock);
		list_add_tail(&notifier->n_list, &rs->rs_notify_queue);
		spin_unlock(&rs->rs_lock);

A
Andy Grover 已提交
511
		ro->op_notifier = NULL;
A
Andy Grover 已提交
512 513
	}

514
	spin_unlock_irqrestore(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
515 516 517 518 519 520

	if (rs) {
		rds_wake_sk_sleep(rs);
		sock_put(rds_rs_to_sk(rs));
	}
}
A
Andy Grover 已提交
521
EXPORT_SYMBOL_GPL(rds_rdma_send_complete);
A
Andy Grover 已提交
522

A
Andy Grover 已提交
523 524 525 526 527 528 529 530
/*
 * Just like above, except looks at atomic op
 */
void rds_atomic_send_complete(struct rds_message *rm, int status)
{
	struct rds_sock *rs = NULL;
	struct rm_atomic_op *ao;
	struct rds_notifier *notifier;
531
	unsigned long flags;
A
Andy Grover 已提交
532

533
	spin_lock_irqsave(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549

	ao = &rm->atomic;
	if (test_bit(RDS_MSG_ON_SOCK, &rm->m_flags)
	    && ao->op_active && ao->op_notify && ao->op_notifier) {
		notifier = ao->op_notifier;
		rs = rm->m_rs;
		sock_hold(rds_rs_to_sk(rs));

		notifier->n_status = status;
		spin_lock(&rs->rs_lock);
		list_add_tail(&notifier->n_list, &rs->rs_notify_queue);
		spin_unlock(&rs->rs_lock);

		ao->op_notifier = NULL;
	}

550
	spin_unlock_irqrestore(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
551 552 553 554 555 556 557 558

	if (rs) {
		rds_wake_sk_sleep(rs);
		sock_put(rds_rs_to_sk(rs));
	}
}
EXPORT_SYMBOL_GPL(rds_atomic_send_complete);

A
Andy Grover 已提交
559 560 561 562 563 564
/*
 * This is the same as rds_rdma_send_complete except we
 * don't do any locking - we have all the ingredients (message,
 * socket, socket lock) and can just move the notifier.
 */
static inline void
565
__rds_send_complete(struct rds_sock *rs, struct rds_message *rm, int status)
A
Andy Grover 已提交
566
{
A
Andy Grover 已提交
567
	struct rm_rdma_op *ro;
568
	struct rm_atomic_op *ao;
A
Andy Grover 已提交
569

A
Andy Grover 已提交
570 571 572 573 574
	ro = &rm->rdma;
	if (ro->op_active && ro->op_notify && ro->op_notifier) {
		ro->op_notifier->n_status = status;
		list_add_tail(&ro->op_notifier->n_list, &rs->rs_notify_queue);
		ro->op_notifier = NULL;
A
Andy Grover 已提交
575 576
	}

577 578 579 580 581 582 583
	ao = &rm->atomic;
	if (ao->op_active && ao->op_notify && ao->op_notifier) {
		ao->op_notifier->n_status = status;
		list_add_tail(&ao->op_notifier->n_list, &rs->rs_notify_queue);
		ao->op_notifier = NULL;
	}

A
Andy Grover 已提交
584 585 586 587 588 589 590 591 592 593 594
	/* No need to wake the app - caller does this */
}

/*
 * This removes messages from the socket's list if they're on it.  The list
 * argument must be private to the caller, we must be able to modify it
 * without locks.  The messages must have a reference held for their
 * position on the list.  This function will drop that reference after
 * removing the messages from the 'messages' list regardless of if it found
 * the messages on the socket list or not.
 */
595
static void rds_send_remove_from_sock(struct list_head *messages, int status)
A
Andy Grover 已提交
596
{
597
	unsigned long flags;
A
Andy Grover 已提交
598 599 600 601
	struct rds_sock *rs = NULL;
	struct rds_message *rm;

	while (!list_empty(messages)) {
602 603
		int was_on_sock = 0;

A
Andy Grover 已提交
604 605 606 607 608 609 610 611 612 613 614 615 616 617
		rm = list_entry(messages->next, struct rds_message,
				m_conn_item);
		list_del_init(&rm->m_conn_item);

		/*
		 * If we see this flag cleared then we're *sure* that someone
		 * else beat us to removing it from the sock.  If we race
		 * with their flag update we'll get the lock and then really
		 * see that the flag has been cleared.
		 *
		 * The message spinlock makes sure nobody clears rm->m_rs
		 * while we're messing with it. It does not prevent the
		 * message from being removed from the socket, though.
		 */
618
		spin_lock_irqsave(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
619 620 621 622 623 624 625 626 627
		if (!test_bit(RDS_MSG_ON_SOCK, &rm->m_flags))
			goto unlock_and_drop;

		if (rs != rm->m_rs) {
			if (rs) {
				rds_wake_sk_sleep(rs);
				sock_put(rds_rs_to_sk(rs));
			}
			rs = rm->m_rs;
628 629
			if (rs)
				sock_hold(rds_rs_to_sk(rs));
A
Andy Grover 已提交
630
		}
631 632
		if (!rs)
			goto unlock_and_drop;
T
Tina Yang 已提交
633
		spin_lock(&rs->rs_lock);
A
Andy Grover 已提交
634 635

		if (test_and_clear_bit(RDS_MSG_ON_SOCK, &rm->m_flags)) {
A
Andy Grover 已提交
636
			struct rm_rdma_op *ro = &rm->rdma;
A
Andy Grover 已提交
637 638 639 640 641
			struct rds_notifier *notifier;

			list_del_init(&rm->m_sock_item);
			rds_send_sndbuf_remove(rs, rm);

A
Andy Grover 已提交
642 643 644
			if (ro->op_active && ro->op_notifier &&
			       (ro->op_notify || (ro->op_recverr && status))) {
				notifier = ro->op_notifier;
A
Andy Grover 已提交
645 646 647 648
				list_add_tail(&notifier->n_list,
						&rs->rs_notify_queue);
				if (!notifier->n_status)
					notifier->n_status = status;
A
Andy Grover 已提交
649
				rm->rdma.op_notifier = NULL;
A
Andy Grover 已提交
650
			}
651
			was_on_sock = 1;
A
Andy Grover 已提交
652
		}
T
Tina Yang 已提交
653
		spin_unlock(&rs->rs_lock);
A
Andy Grover 已提交
654 655

unlock_and_drop:
656
		spin_unlock_irqrestore(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
657
		rds_message_put(rm);
658 659
		if (was_on_sock)
			rds_message_put(rm);
A
Andy Grover 已提交
660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675
	}

	if (rs) {
		rds_wake_sk_sleep(rs);
		sock_put(rds_rs_to_sk(rs));
	}
}

/*
 * Transports call here when they've determined that the receiver queued
 * messages up to, and including, the given sequence number.  Messages are
 * moved to the retrans queue when rds_send_xmit picks them off the send
 * queue. This means that in the TCP case, the message may not have been
 * assigned the m_ack_seq yet - but that's fine as long as tcp_is_acked
 * checks the RDS_MSG_HAS_ACK_SEQ bit.
 */
676 677
void rds_send_path_drop_acked(struct rds_conn_path *cp, u64 ack,
			      is_acked_func is_acked)
A
Andy Grover 已提交
678 679 680 681 682
{
	struct rds_message *rm, *tmp;
	unsigned long flags;
	LIST_HEAD(list);

683
	spin_lock_irqsave(&cp->cp_lock, flags);
A
Andy Grover 已提交
684

685
	list_for_each_entry_safe(rm, tmp, &cp->cp_retrans, m_conn_item) {
A
Andy Grover 已提交
686 687 688 689 690 691 692 693 694
		if (!rds_send_is_acked(rm, ack, is_acked))
			break;

		list_move(&rm->m_conn_item, &list);
		clear_bit(RDS_MSG_ON_CONN, &rm->m_flags);
	}

	/* order flag updates with spin locks */
	if (!list_empty(&list))
695
		smp_mb__after_atomic();
A
Andy Grover 已提交
696

697
	spin_unlock_irqrestore(&cp->cp_lock, flags);
A
Andy Grover 已提交
698 699 700 701

	/* now remove the messages from the sock list as needed */
	rds_send_remove_from_sock(&list, RDS_RDMA_SUCCESS);
}
702 703 704 705 706 707 708 709
EXPORT_SYMBOL_GPL(rds_send_path_drop_acked);

void rds_send_drop_acked(struct rds_connection *conn, u64 ack,
			 is_acked_func is_acked)
{
	WARN_ON(conn->c_trans->t_mp_capable);
	rds_send_path_drop_acked(&conn->c_path[0], ack, is_acked);
}
A
Andy Grover 已提交
710
EXPORT_SYMBOL_GPL(rds_send_drop_acked);
A
Andy Grover 已提交
711

712
void rds_send_drop_to(struct rds_sock *rs, struct sockaddr_in6 *dest)
A
Andy Grover 已提交
713 714 715
{
	struct rds_message *rm, *tmp;
	struct rds_connection *conn;
716
	struct rds_conn_path *cp;
717
	unsigned long flags;
A
Andy Grover 已提交
718 719 720 721 722 723
	LIST_HEAD(list);

	/* get all the messages we're dropping under the rs lock */
	spin_lock_irqsave(&rs->rs_lock, flags);

	list_for_each_entry_safe(rm, tmp, &rs->rs_send_queue, m_sock_item) {
724 725 726
		if (dest &&
		    (!ipv6_addr_equal(&dest->sin6_addr, &rm->m_daddr) ||
		     dest->sin6_port != rm->m_inc.i_hdr.h_dport))
A
Andy Grover 已提交
727 728 729 730 731 732 733 734
			continue;

		list_move(&rm->m_sock_item, &list);
		rds_send_sndbuf_remove(rs, rm);
		clear_bit(RDS_MSG_ON_SOCK, &rm->m_flags);
	}

	/* order flag updates with the rs lock */
735
	smp_mb__after_atomic();
A
Andy Grover 已提交
736 737 738

	spin_unlock_irqrestore(&rs->rs_lock, flags);

739 740
	if (list_empty(&list))
		return;
A
Andy Grover 已提交
741

742
	/* Remove the messages from the conn */
A
Andy Grover 已提交
743
	list_for_each_entry(rm, &list, m_sock_item) {
744 745

		conn = rm->m_inc.i_conn;
746 747 748 749
		if (conn->c_trans->t_mp_capable)
			cp = rm->m_inc.i_conn_path;
		else
			cp = &conn->c_path[0];
A
Andy Grover 已提交
750

751
		spin_lock_irqsave(&cp->cp_lock, flags);
A
Andy Grover 已提交
752
		/*
753 754 755
		 * Maybe someone else beat us to removing rm from the conn.
		 * If we race with their flag update we'll get the lock and
		 * then really see that the flag has been cleared.
A
Andy Grover 已提交
756
		 */
757
		if (!test_and_clear_bit(RDS_MSG_ON_CONN, &rm->m_flags)) {
758
			spin_unlock_irqrestore(&cp->cp_lock, flags);
A
Andy Grover 已提交
759 760
			continue;
		}
761
		list_del_init(&rm->m_conn_item);
762
		spin_unlock_irqrestore(&cp->cp_lock, flags);
A
Andy Grover 已提交
763

764 765 766 767
		/*
		 * Couldn't grab m_rs_lock in top loop (lock ordering),
		 * but we can now.
		 */
768
		spin_lock_irqsave(&rm->m_rs_lock, flags);
A
Andy Grover 已提交
769

770
		spin_lock(&rs->rs_lock);
771
		__rds_send_complete(rs, rm, RDS_RDMA_CANCELED);
772 773
		spin_unlock(&rs->rs_lock);

774
		spin_unlock_irqrestore(&rm->m_rs_lock, flags);
775 776 777

		rds_message_put(rm);
	}
A
Andy Grover 已提交
778

779
	rds_wake_sk_sleep(rs);
780

A
Andy Grover 已提交
781 782 783 784
	while (!list_empty(&list)) {
		rm = list_entry(list.next, struct rds_message, m_sock_item);
		list_del_init(&rm->m_sock_item);
		rds_message_wait(rm);
785 786 787 788 789 790 791 792 793 794 795 796 797 798

		/* just in case the code above skipped this message
		 * because RDS_MSG_ON_CONN wasn't set, run it again here
		 * taking m_rs_lock is the only thing that keeps us
		 * from racing with ack processing.
		 */
		spin_lock_irqsave(&rm->m_rs_lock, flags);

		spin_lock(&rs->rs_lock);
		__rds_send_complete(rs, rm, RDS_RDMA_CANCELED);
		spin_unlock(&rs->rs_lock);

		spin_unlock_irqrestore(&rm->m_rs_lock, flags);

A
Andy Grover 已提交
799 800 801 802 803 804 805 806 807 808
		rds_message_put(rm);
	}
}

/*
 * we only want this to fire once so we use the callers 'queued'.  It's
 * possible that another thread can race with us and remove the
 * message from the flow with RDS_CANCEL_SENT_TO.
 */
static int rds_send_queue_rm(struct rds_sock *rs, struct rds_connection *conn,
809
			     struct rds_conn_path *cp,
A
Andy Grover 已提交
810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841
			     struct rds_message *rm, __be16 sport,
			     __be16 dport, int *queued)
{
	unsigned long flags;
	u32 len;

	if (*queued)
		goto out;

	len = be32_to_cpu(rm->m_inc.i_hdr.h_len);

	/* this is the only place which holds both the socket's rs_lock
	 * and the connection's c_lock */
	spin_lock_irqsave(&rs->rs_lock, flags);

	/*
	 * If there is a little space in sndbuf, we don't queue anything,
	 * and userspace gets -EAGAIN. But poll() indicates there's send
	 * room. This can lead to bad behavior (spinning) if snd_bytes isn't
	 * freed up by incoming acks. So we check the *old* value of
	 * rs_snd_bytes here to allow the last msg to exceed the buffer,
	 * and poll() now knows no more data can be sent.
	 */
	if (rs->rs_snd_bytes < rds_sk_sndbuf(rs)) {
		rs->rs_snd_bytes += len;

		/* let recv side know we are close to send space exhaustion.
		 * This is probably not the optimal way to do it, as this
		 * means we set the flag on *all* messages as soon as our
		 * throughput hits a certain threshold.
		 */
		if (rs->rs_snd_bytes >= rds_sk_sndbuf(rs) / 2)
842
			set_bit(RDS_MSG_ACK_REQUIRED, &rm->m_flags);
A
Andy Grover 已提交
843 844 845 846

		list_add_tail(&rm->m_sock_item, &rs->rs_send_queue);
		set_bit(RDS_MSG_ON_SOCK, &rm->m_flags);
		rds_message_addref(rm);
847
		sock_hold(rds_rs_to_sk(rs));
A
Andy Grover 已提交
848 849 850 851 852 853
		rm->m_rs = rs;

		/* The code ordering is a little weird, but we're
		   trying to minimize the time we hold c_lock */
		rds_message_populate_header(&rm->m_inc.i_hdr, sport, dport, 0);
		rm->m_inc.i_conn = conn;
854
		rm->m_inc.i_conn_path = cp;
A
Andy Grover 已提交
855 856
		rds_message_addref(rm);

857 858 859
		spin_lock(&cp->cp_lock);
		rm->m_inc.i_hdr.h_sequence = cpu_to_be64(cp->cp_next_tx_seq++);
		list_add_tail(&rm->m_conn_item, &cp->cp_send_queue);
A
Andy Grover 已提交
860
		set_bit(RDS_MSG_ON_CONN, &rm->m_flags);
861
		spin_unlock(&cp->cp_lock);
A
Andy Grover 已提交
862 863 864 865 866 867 868 869 870 871 872 873 874

		rdsdebug("queued msg %p len %d, rs %p bytes %d seq %llu\n",
			 rm, len, rs, rs->rs_snd_bytes,
			 (unsigned long long)be64_to_cpu(rm->m_inc.i_hdr.h_sequence));

		*queued = 1;
	}

	spin_unlock_irqrestore(&rs->rs_lock, flags);
out:
	return *queued;
}

875 876 877 878
/*
 * rds_message is getting to be quite complicated, and we'd like to allocate
 * it all in one go. This figures out how big it needs to be up front.
 */
S
Sowmini Varadhan 已提交
879
static int rds_rm_size(struct msghdr *msg, int num_sgs)
880
{
881
	struct cmsghdr *cmsg;
882
	int size = 0;
883
	int cmsg_groups = 0;
884
	int retval;
S
Sowmini Varadhan 已提交
885
	bool zcopy_cookie = false;
886

887
	for_each_cmsghdr(cmsg, msg) {
888 889 890 891 892 893 894 895
		if (!CMSG_OK(msg, cmsg))
			return -EINVAL;

		if (cmsg->cmsg_level != SOL_RDS)
			continue;

		switch (cmsg->cmsg_type) {
		case RDS_CMSG_RDMA_ARGS:
896
			cmsg_groups |= 1;
897 898 899 900
			retval = rds_rdma_extra_size(CMSG_DATA(cmsg));
			if (retval < 0)
				return retval;
			size += retval;
901

902 903
			break;

S
Sowmini Varadhan 已提交
904 905
		case RDS_CMSG_ZCOPY_COOKIE:
			zcopy_cookie = true;
906 907
			/* fall through */

908 909
		case RDS_CMSG_RDMA_DEST:
		case RDS_CMSG_RDMA_MAP:
910
			cmsg_groups |= 2;
911 912 913
			/* these are valid but do no add any size */
			break;

A
Andy Grover 已提交
914 915
		case RDS_CMSG_ATOMIC_CSWP:
		case RDS_CMSG_ATOMIC_FADD:
916 917
		case RDS_CMSG_MASKED_ATOMIC_CSWP:
		case RDS_CMSG_MASKED_ATOMIC_FADD:
918
			cmsg_groups |= 1;
A
Andy Grover 已提交
919 920 921
			size += sizeof(struct scatterlist);
			break;

922 923 924 925 926
		default:
			return -EINVAL;
		}

	}
927

S
Sowmini Varadhan 已提交
928 929 930 931
	if ((msg->msg_flags & MSG_ZEROCOPY) && !zcopy_cookie)
		return -EINVAL;

	size += num_sgs * sizeof(struct scatterlist);
932

933 934 935 936
	/* Ensure (DEST, MAP) are never used with (ARGS, ATOMIC) */
	if (cmsg_groups == 3)
		return -EINVAL;

937 938 939
	return size;
}

S
Sowmini Varadhan 已提交
940 941 942 943 944
static int rds_cmsg_zcopy(struct rds_sock *rs, struct rds_message *rm,
			  struct cmsghdr *cmsg)
{
	u32 *cookie;

945 946
	if (cmsg->cmsg_len < CMSG_LEN(sizeof(*cookie)) ||
	    !rm->data.op_mmp_znotifier)
S
Sowmini Varadhan 已提交
947 948 949 950 951 952
		return -EINVAL;
	cookie = CMSG_DATA(cmsg);
	rm->data.op_mmp_znotifier->z_cookie = *cookie;
	return 0;
}

A
Andy Grover 已提交
953 954 955 956 957 958
static int rds_cmsg_send(struct rds_sock *rs, struct rds_message *rm,
			 struct msghdr *msg, int *allocated_mr)
{
	struct cmsghdr *cmsg;
	int ret = 0;

959
	for_each_cmsghdr(cmsg, msg) {
A
Andy Grover 已提交
960 961 962 963 964 965 966
		if (!CMSG_OK(msg, cmsg))
			return -EINVAL;

		if (cmsg->cmsg_level != SOL_RDS)
			continue;

		/* As a side effect, RDMA_DEST and RDMA_MAP will set
A
Andy Grover 已提交
967
		 * rm->rdma.m_rdma_cookie and rm->rdma.m_rdma_mr.
A
Andy Grover 已提交
968 969 970 971 972 973 974 975 976 977 978 979 980 981
		 */
		switch (cmsg->cmsg_type) {
		case RDS_CMSG_RDMA_ARGS:
			ret = rds_cmsg_rdma_args(rs, rm, cmsg);
			break;

		case RDS_CMSG_RDMA_DEST:
			ret = rds_cmsg_rdma_dest(rs, rm, cmsg);
			break;

		case RDS_CMSG_RDMA_MAP:
			ret = rds_cmsg_rdma_map(rs, rm, cmsg);
			if (!ret)
				*allocated_mr = 1;
982 983 984 985 986
			else if (ret == -ENODEV)
				/* Accommodate the get_mr() case which can fail
				 * if connection isn't established yet.
				 */
				ret = -EAGAIN;
A
Andy Grover 已提交
987
			break;
A
Andy Grover 已提交
988 989
		case RDS_CMSG_ATOMIC_CSWP:
		case RDS_CMSG_ATOMIC_FADD:
990 991
		case RDS_CMSG_MASKED_ATOMIC_CSWP:
		case RDS_CMSG_MASKED_ATOMIC_FADD:
A
Andy Grover 已提交
992 993
			ret = rds_cmsg_atomic(rs, rm, cmsg);
			break;
A
Andy Grover 已提交
994

S
Sowmini Varadhan 已提交
995 996 997 998
		case RDS_CMSG_ZCOPY_COOKIE:
			ret = rds_cmsg_zcopy(rs, rm, cmsg);
			break;

A
Andy Grover 已提交
999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009
		default:
			return -EINVAL;
		}

		if (ret)
			break;
	}

	return ret;
}

1010 1011 1012 1013 1014 1015 1016 1017 1018
static int rds_send_mprds_hash(struct rds_sock *rs, struct rds_connection *conn)
{
	int hash;

	if (conn->c_npaths == 0)
		hash = RDS_MPATH_HASH(rs, RDS_MPATH_WORKERS);
	else
		hash = RDS_MPATH_HASH(rs, conn->c_npaths);
	if (conn->c_npaths == 0 && hash != 0) {
1019
		rds_send_ping(conn, 0);
1020

1021 1022 1023 1024 1025 1026 1027 1028 1029
		/* The underlying connection is not up yet.  Need to wait
		 * until it is up to be sure that the non-zero c_path can be
		 * used.  But if we are interrupted, we have to use the zero
		 * c_path in case the connection ends up being non-MP capable.
		 */
		if (conn->c_npaths == 0)
			if (wait_event_interruptible(conn->c_hs_waitq,
						     conn->c_npaths != 0))
				hash = 0;
1030 1031 1032 1033 1034 1035
		if (conn->c_npaths == 1)
			hash = 0;
	}
	return hash;
}

1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048
static int rds_rdma_bytes(struct msghdr *msg, size_t *rdma_bytes)
{
	struct rds_rdma_args *args;
	struct cmsghdr *cmsg;

	for_each_cmsghdr(cmsg, msg) {
		if (!CMSG_OK(msg, cmsg))
			return -EINVAL;

		if (cmsg->cmsg_level != SOL_RDS)
			continue;

		if (cmsg->cmsg_type == RDS_CMSG_RDMA_ARGS) {
1049 1050 1051
			if (cmsg->cmsg_len <
			    CMSG_LEN(sizeof(struct rds_rdma_args)))
				return -EINVAL;
1052 1053 1054 1055 1056 1057 1058
			args = CMSG_DATA(cmsg);
			*rdma_bytes += args->remote_vec.bytes;
		}
	}
	return 0;
}

1059
int rds_sendmsg(struct socket *sock, struct msghdr *msg, size_t payload_len)
A
Andy Grover 已提交
1060 1061 1062
{
	struct sock *sk = sock->sk;
	struct rds_sock *rs = rds_sk_to_rs(sk);
1063
	DECLARE_SOCKADDR(struct sockaddr_in6 *, sin6, msg->msg_name);
1064
	DECLARE_SOCKADDR(struct sockaddr_in *, usin, msg->msg_name);
A
Andy Grover 已提交
1065 1066 1067 1068 1069 1070
	__be16 dport;
	struct rds_message *rm = NULL;
	struct rds_connection *conn;
	int ret = 0;
	int queued = 0, allocated_mr = 0;
	int nonblock = msg->msg_flags & MSG_DONTWAIT;
1071
	long timeo = sock_sndtimeo(sk, nonblock);
1072
	struct rds_conn_path *cpath;
1073 1074
	struct in6_addr daddr;
	__u32 scope_id = 0;
1075
	size_t total_payload_len = payload_len, rdma_payload_len = 0;
S
Sowmini Varadhan 已提交
1076 1077 1078
	bool zcopy = ((msg->msg_flags & MSG_ZEROCOPY) &&
		      sock_flag(rds_rs_to_sk(rs), SOCK_ZEROCOPY));
	int num_sgs = ceil(payload_len, PAGE_SIZE);
1079
	int namelen;
A
Andy Grover 已提交
1080 1081 1082

	/* Mirror Linux UDP mirror of BSD error message compatibility */
	/* XXX: Perhaps MSG_MORE someday */
S
Sowmini Varadhan 已提交
1083
	if (msg->msg_flags & ~(MSG_DONTWAIT | MSG_CMSG_COMPAT | MSG_ZEROCOPY)) {
A
Andy Grover 已提交
1084 1085 1086 1087
		ret = -EOPNOTSUPP;
		goto out;
	}

1088 1089 1090 1091 1092 1093
	namelen = msg->msg_namelen;
	if (namelen != 0) {
		if (namelen < sizeof(*usin)) {
			ret = -EINVAL;
			goto out;
		}
K
Ka-Cheong Poon 已提交
1094 1095 1096
		switch (usin->sin_family) {
		case AF_INET:
			if (usin->sin_addr.s_addr == htonl(INADDR_ANY) ||
1097 1098 1099 1100 1101 1102 1103 1104 1105
			    usin->sin_addr.s_addr == htonl(INADDR_BROADCAST) ||
			    IN_MULTICAST(ntohl(usin->sin_addr.s_addr))) {
				ret = -EINVAL;
				goto out;
			}
			ipv6_addr_set_v4mapped(usin->sin_addr.s_addr, &daddr);
			dport = usin->sin_port;
			break;

K
Ka-Cheong Poon 已提交
1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128
		case AF_INET6: {
			int addr_type;

			if (namelen < sizeof(*sin6)) {
				ret = -EINVAL;
				goto out;
			}
			addr_type = ipv6_addr_type(&sin6->sin6_addr);
			if (!(addr_type & IPV6_ADDR_UNICAST)) {
				__be32 addr4;

				if (!(addr_type & IPV6_ADDR_MAPPED)) {
					ret = -EINVAL;
					goto out;
				}

				/* It is a mapped address.  Need to do some
				 * sanity checks.
				 */
				addr4 = sin6->sin6_addr.s6_addr32[3];
				if (addr4 == htonl(INADDR_ANY) ||
				    addr4 == htonl(INADDR_BROADCAST) ||
				    IN_MULTICAST(ntohl(addr4))) {
1129
					ret = -EINVAL;
K
Ka-Cheong Poon 已提交
1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143
					goto out;
				}
			}
			if (addr_type & IPV6_ADDR_LINKLOCAL) {
				if (sin6->sin6_scope_id == 0) {
					ret = -EINVAL;
					goto out;
				}
				scope_id = sin6->sin6_scope_id;
			}

			daddr = sin6->sin6_addr;
			dport = sin6->sin6_port;
			break;
1144 1145 1146
		}

		default:
A
Andy Grover 已提交
1147 1148 1149 1150 1151 1152 1153 1154
			ret = -EINVAL;
			goto out;
		}
	} else {
		/* We only care about consistency with ->connect() */
		lock_sock(sk);
		daddr = rs->rs_conn_addr;
		dport = rs->rs_conn_port;
1155
		scope_id = rs->rs_bound_scope_id;
A
Andy Grover 已提交
1156 1157 1158
		release_sock(sk);
	}

1159
	lock_sock(sk);
1160
	if (ipv6_addr_any(&rs->rs_bound_addr) || ipv6_addr_any(&daddr)) {
1161
		release_sock(sk);
1162
		ret = -ENOTCONN;
A
Andy Grover 已提交
1163
		goto out;
1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174
	} else if (namelen != 0) {
		/* Cannot send to an IPv4 address using an IPv6 source
		 * address and cannot send to an IPv6 address using an
		 * IPv4 source address.
		 */
		if (ipv6_addr_v4mapped(&daddr) ^
		    ipv6_addr_v4mapped(&rs->rs_bound_addr)) {
			release_sock(sk);
			ret = -EOPNOTSUPP;
			goto out;
		}
K
Ka-Cheong Poon 已提交
1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187
		/* If the socket is already bound to a link local address,
		 * it can only send to peers on the same link.  But allow
		 * communicating beween link local and non-link local address.
		 */
		if (scope_id != rs->rs_bound_scope_id) {
			if (!scope_id) {
				scope_id = rs->rs_bound_scope_id;
			} else if (rs->rs_bound_scope_id) {
				release_sock(sk);
				ret = -EINVAL;
				goto out;
			}
		}
A
Andy Grover 已提交
1188
	}
1189
	release_sock(sk);
A
Andy Grover 已提交
1190

1191 1192 1193 1194 1195 1196 1197 1198 1199 1200
	ret = rds_rdma_bytes(msg, &rdma_payload_len);
	if (ret)
		goto out;

	total_payload_len += rdma_payload_len;
	if (max_t(size_t, payload_len, rdma_payload_len) > RDS_MAX_MSG_SIZE) {
		ret = -EMSGSIZE;
		goto out;
	}

1201 1202 1203 1204 1205
	if (payload_len > rds_sk_sndbuf(rs)) {
		ret = -EMSGSIZE;
		goto out;
	}

S
Sowmini Varadhan 已提交
1206 1207 1208 1209 1210 1211 1212
	if (zcopy) {
		if (rs->rs_transport->t_type != RDS_TRANS_TCP) {
			ret = -EOPNOTSUPP;
			goto out;
		}
		num_sgs = iov_iter_npages(&msg->msg_iter, INT_MAX);
	}
1213
	/* size of rm including all sgs */
S
Sowmini Varadhan 已提交
1214
	ret = rds_rm_size(msg, num_sgs);
1215 1216 1217 1218 1219 1220
	if (ret < 0)
		goto out;

	rm = rds_message_alloc(ret, GFP_KERNEL);
	if (!rm) {
		ret = -ENOMEM;
A
Andy Grover 已提交
1221 1222 1223
		goto out;
	}

1224 1225
	/* Attach data to the rm */
	if (payload_len) {
S
Sowmini Varadhan 已提交
1226
		rm->data.op_sg = rds_message_alloc_sgs(rm, num_sgs);
1227 1228 1229 1230
		if (!rm->data.op_sg) {
			ret = -ENOMEM;
			goto out;
		}
S
Sowmini Varadhan 已提交
1231
		ret = rds_message_copy_from_user(rm, &msg->msg_iter, zcopy);
1232 1233 1234 1235
		if (ret)
			goto out;
	}
	rm->data.op_active = 1;
1236

A
Andy Grover 已提交
1237 1238 1239 1240
	rm->m_daddr = daddr;

	/* rds_conn_create has a spinlock that runs with IRQ off.
	 * Caching the conn in the socket helps a lot. */
1241
	if (rs->rs_conn && ipv6_addr_equal(&rs->rs_conn->c_faddr, &daddr))
A
Andy Grover 已提交
1242 1243
		conn = rs->rs_conn;
	else {
1244
		conn = rds_conn_create_outgoing(sock_net(sock->sk),
1245 1246 1247 1248
						&rs->rs_bound_addr, &daddr,
						rs->rs_transport,
						sock->sk->sk_allocation,
						scope_id);
A
Andy Grover 已提交
1249 1250 1251 1252 1253 1254 1255
		if (IS_ERR(conn)) {
			ret = PTR_ERR(conn);
			goto out;
		}
		rs->rs_conn = conn;
	}

1256 1257
	/* Parse any control messages the user may have included. */
	ret = rds_cmsg_send(rs, rm, msg, &allocated_mr);
1258 1259 1260 1261
	if (ret) {
		/* Trigger connection so that its ready for the next retry */
		if (ret ==  -EAGAIN)
			rds_conn_connect_if_down(conn);
1262
		goto out;
1263
	}
1264

1265
	if (rm->rdma.op_active && !conn->c_trans->xmit_rdma) {
1266
		printk_ratelimited(KERN_NOTICE "rdma_op %p conn xmit_rdma %p\n",
A
Andy Grover 已提交
1267
			       &rm->rdma, conn->c_trans->xmit_rdma);
A
Andy Grover 已提交
1268 1269 1270 1271 1272
		ret = -EOPNOTSUPP;
		goto out;
	}

	if (rm->atomic.op_active && !conn->c_trans->xmit_atomic) {
1273
		printk_ratelimited(KERN_NOTICE "atomic_op %p conn xmit_atomic %p\n",
A
Andy Grover 已提交
1274
			       &rm->atomic, conn->c_trans->xmit_atomic);
A
Andy Grover 已提交
1275 1276 1277 1278
		ret = -EOPNOTSUPP;
		goto out;
	}

1279 1280 1281 1282
	if (conn->c_trans->t_mp_capable)
		cpath = &conn->c_path[rds_send_mprds_hash(rs, conn)];
	else
		cpath = &conn->c_path[0];
1283

1284
	if (rds_destroy_pending(conn)) {
1285 1286 1287 1288
		ret = -EAGAIN;
		goto out;
	}

1289
	rds_conn_path_connect_if_down(cpath);
A
Andy Grover 已提交
1290 1291

	ret = rds_cong_wait(conn->c_fcong, dport, nonblock, rs);
1292 1293
	if (ret) {
		rs->rs_seen_congestion = 1;
A
Andy Grover 已提交
1294
		goto out;
1295
	}
1296
	while (!rds_send_queue_rm(rs, conn, cpath, rm, rs->rs_bound_port,
A
Andy Grover 已提交
1297 1298
				  dport, &queued)) {
		rds_stats_inc(s_send_queue_full);
1299

A
Andy Grover 已提交
1300 1301 1302 1303 1304
		if (nonblock) {
			ret = -EAGAIN;
			goto out;
		}

E
Eric Dumazet 已提交
1305
		timeo = wait_event_interruptible_timeout(*sk_sleep(sk),
1306
					rds_send_queue_rm(rs, conn, cpath, rm,
A
Andy Grover 已提交
1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326
							  rs->rs_bound_port,
							  dport,
							  &queued),
					timeo);
		rdsdebug("sendmsg woke queued %d timeo %ld\n", queued, timeo);
		if (timeo > 0 || timeo == MAX_SCHEDULE_TIMEOUT)
			continue;

		ret = timeo;
		if (ret == 0)
			ret = -ETIMEDOUT;
		goto out;
	}

	/*
	 * By now we've committed to the send.  We reuse rds_send_worker()
	 * to retry sends in the rds thread if the transport asks us to.
	 */
	rds_stats_inc(s_send_queued);

1327
	ret = rds_send_xmit(cpath);
1328 1329 1330
	if (ret == -ENOMEM || ret == -EAGAIN) {
		ret = 0;
		rcu_read_lock();
1331
		if (rds_destroy_pending(cpath->cp_conn))
1332 1333 1334 1335 1336 1337 1338
			ret = -ENETUNREACH;
		else
			queue_delayed_work(rds_wq, &cpath->cp_send_w, 1);
		rcu_read_unlock();
	}
	if (ret)
		goto out;
A
Andy Grover 已提交
1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354
	rds_message_put(rm);
	return payload_len;

out:
	/* If the user included a RDMA_MAP cmsg, we allocated a MR on the fly.
	 * If the sendmsg goes through, we keep the MR. If it fails with EAGAIN
	 * or in any other way, we need to destroy the MR again */
	if (allocated_mr)
		rds_rdma_unuse(rs, rds_rdma_cookie_key(rm->m_rdma_cookie), 1);

	if (rm)
		rds_message_put(rm);
	return ret;
}

/*
1355 1356 1357 1358 1359 1360
 * send out a probe. Can be shared by rds_send_ping,
 * rds_send_pong, rds_send_hb.
 * rds_send_hb should use h_flags
 *   RDS_FLAG_HB_PING|RDS_FLAG_ACK_REQUIRED
 * or
 *   RDS_FLAG_HB_PONG|RDS_FLAG_ACK_REQUIRED
A
Andy Grover 已提交
1361
 */
1362
static int
1363 1364
rds_send_probe(struct rds_conn_path *cp, __be16 sport,
	       __be16 dport, u8 h_flags)
A
Andy Grover 已提交
1365 1366 1367 1368 1369 1370
{
	struct rds_message *rm;
	unsigned long flags;
	int ret = 0;

	rm = rds_message_alloc(0, GFP_ATOMIC);
1371
	if (!rm) {
A
Andy Grover 已提交
1372 1373 1374 1375
		ret = -ENOMEM;
		goto out;
	}

1376
	rm->m_daddr = cp->cp_conn->c_faddr;
A
Andy Grover 已提交
1377
	rm->data.op_active = 1;
A
Andy Grover 已提交
1378

1379
	rds_conn_path_connect_if_down(cp);
A
Andy Grover 已提交
1380

1381
	ret = rds_cong_wait(cp->cp_conn->c_fcong, dport, 1, NULL);
A
Andy Grover 已提交
1382 1383 1384
	if (ret)
		goto out;

1385 1386
	spin_lock_irqsave(&cp->cp_lock, flags);
	list_add_tail(&rm->m_conn_item, &cp->cp_send_queue);
A
Andy Grover 已提交
1387 1388
	set_bit(RDS_MSG_ON_CONN, &rm->m_flags);
	rds_message_addref(rm);
1389 1390
	rm->m_inc.i_conn = cp->cp_conn;
	rm->m_inc.i_conn_path = cp;
A
Andy Grover 已提交
1391

1392
	rds_message_populate_header(&rm->m_inc.i_hdr, sport, dport,
1393
				    cp->cp_next_tx_seq);
1394
	rm->m_inc.i_hdr.h_flags |= h_flags;
1395
	cp->cp_next_tx_seq++;
1396

1397 1398 1399 1400
	if (RDS_HS_PROBE(be16_to_cpu(sport), be16_to_cpu(dport)) &&
	    cp->cp_conn->c_trans->t_mp_capable) {
		u16 npaths = cpu_to_be16(RDS_MPATH_WORKERS);
		u32 my_gen_num = cpu_to_be32(cp->cp_conn->c_my_gen_num);
1401 1402 1403 1404

		rds_message_add_extension(&rm->m_inc.i_hdr,
					  RDS_EXTHDR_NPATHS, &npaths,
					  sizeof(npaths));
1405 1406
		rds_message_add_extension(&rm->m_inc.i_hdr,
					  RDS_EXTHDR_GEN_NUM,
1407
					  &my_gen_num,
1408
					  sizeof(u32));
1409
	}
1410
	spin_unlock_irqrestore(&cp->cp_lock, flags);
A
Andy Grover 已提交
1411 1412 1413 1414

	rds_stats_inc(s_send_queued);
	rds_stats_inc(s_send_pong);

1415
	/* schedule the send work on rds_wq */
1416
	rcu_read_lock();
1417
	if (!rds_destroy_pending(cp->cp_conn))
1418 1419
		queue_delayed_work(rds_wq, &cp->cp_send_w, 1);
	rcu_read_unlock();
A
Andy Grover 已提交
1420

A
Andy Grover 已提交
1421 1422 1423 1424 1425 1426 1427 1428
	rds_message_put(rm);
	return 0;

out:
	if (rm)
		rds_message_put(rm);
	return ret;
}
1429 1430 1431 1432 1433 1434 1435

int
rds_send_pong(struct rds_conn_path *cp, __be16 dport)
{
	return rds_send_probe(cp, 0, dport, 0);
}

1436 1437
void
rds_send_ping(struct rds_connection *conn, int cp_index)
1438 1439
{
	unsigned long flags;
1440
	struct rds_conn_path *cp = &conn->c_path[cp_index];
1441 1442 1443 1444 1445 1446 1447 1448

	spin_lock_irqsave(&cp->cp_lock, flags);
	if (conn->c_ping_triggered) {
		spin_unlock_irqrestore(&cp->cp_lock, flags);
		return;
	}
	conn->c_ping_triggered = 1;
	spin_unlock_irqrestore(&cp->cp_lock, flags);
1449
	rds_send_probe(cp, cpu_to_be16(RDS_FLAG_PROBE_PORT), 0, 0);
1450
}
1451
EXPORT_SYMBOL_GPL(rds_send_ping);