xref: /freebsd/sys/contrib/rdma/krping/krping.c (revision 8ef24a0d4b28fe230e20637f56869cc4148cd2ca)
1 /*
2  * Copyright (c) 2005 Ammasso, Inc. All rights reserved.
3  * Copyright (c) 2006-2009 Open Grid Computing, Inc. All rights reserved.
4  *
5  * This software is available to you under a choice of one of two
6  * licenses.  You may choose to be licensed under the terms of the GNU
7  * General Public License (GPL) Version 2, available from the file
8  * COPYING in the main directory of this source tree, or the
9  * OpenIB.org BSD license below:
10  *
11  *     Redistribution and use in source and binary forms, with or
12  *     without modification, are permitted provided that the following
13  *     conditions are met:
14  *
15  *      - Redistributions of source code must retain the above
16  *        copyright notice, this list of conditions and the following
17  *        disclaimer.
18  *
19  *      - Redistributions in binary form must reproduce the above
20  *        copyright notice, this list of conditions and the following
21  *        disclaimer in the documentation and/or other materials
22  *        provided with the distribution.
23  *
24  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
25  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
26  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
27  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
28  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
29  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
30  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
31  * SOFTWARE.
32  */
33 
34 #include <sys/cdefs.h>
35 __FBSDID("$FreeBSD$");
36 
37 #include <linux/module.h>
38 #include <linux/moduleparam.h>
39 #include <linux/slab.h>
40 #include <linux/err.h>
41 #include <linux/string.h>
42 #include <linux/list.h>
43 #include <linux/in.h>
44 #include <linux/device.h>
45 #include <linux/pci.h>
46 #include <linux/sched.h>
47 
48 #include <asm/atomic.h>
49 
50 #include <rdma/ib_verbs.h>
51 #include <rdma/rdma_cm.h>
52 
53 #include "krping.h"
54 #include "getopt.h"
55 
56 extern int krping_debug;
57 #define DEBUG_LOG(cb, x...) if (krping_debug) log(LOG_INFO, x)
58 #define PRINTF(cb, x...) log(LOG_INFO, x)
59 #define BIND_INFO 1
60 
61 MODULE_AUTHOR("Steve Wise");
62 MODULE_DESCRIPTION("RDMA ping client/server");
63 MODULE_LICENSE("Dual BSD/GPL");
64 MODULE_VERSION(krping, 1);
65 MODULE_DEPEND(krping, linuxkpi, 1, 1, 1);
66 
67 static __inline uint64_t
68 get_cycles(void)
69 {
70 	uint32_t low, high;
71 	__asm __volatile("rdtsc" : "=a" (low), "=d" (high));
72 	return (low | ((u_int64_t)high << 32));
73 }
74 
75 typedef uint64_t cycles_t;
76 
77 enum mem_type {
78 	DMA = 1,
79 	FASTREG = 2,
80 	MW = 3,
81 	MR = 4
82 };
83 
84 static const struct krping_option krping_opts[] = {
85 	{"count", OPT_INT, 'C'},
86 	{"size", OPT_INT, 'S'},
87 	{"addr", OPT_STRING, 'a'},
88 	{"port", OPT_INT, 'p'},
89 	{"verbose", OPT_NOPARAM, 'v'},
90 	{"validate", OPT_NOPARAM, 'V'},
91 	{"server", OPT_NOPARAM, 's'},
92 	{"client", OPT_NOPARAM, 'c'},
93 	{"mem_mode", OPT_STRING, 'm'},
94 	{"server_inv", OPT_NOPARAM, 'I'},
95  	{"wlat", OPT_NOPARAM, 'l'},
96  	{"rlat", OPT_NOPARAM, 'L'},
97  	{"bw", OPT_NOPARAM, 'B'},
98  	{"duplex", OPT_NOPARAM, 'd'},
99  	{"txdepth", OPT_INT, 'T'},
100  	{"poll", OPT_NOPARAM, 'P'},
101  	{"local_dma_lkey", OPT_NOPARAM, 'Z'},
102  	{"read_inv", OPT_NOPARAM, 'R'},
103  	{"fr", OPT_INT, 'f'},
104 	{NULL, 0, 0}
105 };
106 
107 #define htonll(x) cpu_to_be64((x))
108 #define ntohll(x) cpu_to_be64((x))
109 
110 static struct mutex krping_mutex;
111 
112 /*
113  * List of running krping threads.
114  */
115 static LIST_HEAD(krping_cbs);
116 
117 /*
118  * krping "ping/pong" loop:
119  * 	client sends source rkey/addr/len
120  *	server receives source rkey/add/len
121  *	server rdma reads "ping" data from source
122  * 	server sends "go ahead" on rdma read completion
123  *	client sends sink rkey/addr/len
124  * 	server receives sink rkey/addr/len
125  * 	server rdma writes "pong" data to sink
126  * 	server sends "go ahead" on rdma write completion
127  * 	<repeat loop>
128  */
129 
130 /*
131  * These states are used to signal events between the completion handler
132  * and the main client or server thread.
133  *
134  * Once CONNECTED, they cycle through RDMA_READ_ADV, RDMA_WRITE_ADV,
135  * and RDMA_WRITE_COMPLETE for each ping.
136  */
137 enum test_state {
138 	IDLE = 1,
139 	CONNECT_REQUEST,
140 	ADDR_RESOLVED,
141 	ROUTE_RESOLVED,
142 	CONNECTED,
143 	RDMA_READ_ADV,
144 	RDMA_READ_COMPLETE,
145 	RDMA_WRITE_ADV,
146 	RDMA_WRITE_COMPLETE,
147 	ERROR
148 };
149 
150 struct krping_rdma_info {
151 	uint64_t buf;
152 	uint32_t rkey;
153 	uint32_t size;
154 };
155 
156 /*
157  * Default max buffer size for IO...
158  */
159 #define RPING_BUFSIZE 128*1024
160 #define RPING_SQ_DEPTH 64
161 
162 /*
163  * Control block struct.
164  */
165 struct krping_cb {
166 	void *cookie;
167 	int server;			/* 0 iff client */
168 	struct ib_cq *cq;
169 	struct ib_pd *pd;
170 	struct ib_qp *qp;
171 
172 	enum mem_type mem;
173 	struct ib_mr *dma_mr;
174 
175 	struct ib_fast_reg_page_list *page_list;
176 	int page_list_len;
177 	struct ib_send_wr fastreg_wr;
178 	struct ib_send_wr invalidate_wr;
179 	struct ib_mr *fastreg_mr;
180 	int server_invalidate;
181 	int read_inv;
182 	u8 key;
183 
184 	struct ib_mw *mw;
185 	struct ib_mw_bind bind_attr;
186 
187 	struct ib_recv_wr rq_wr;	/* recv work request record */
188 	struct ib_sge recv_sgl;		/* recv single SGE */
189 	struct krping_rdma_info recv_buf;/* malloc'd buffer */
190 	u64 recv_dma_addr;
191 	DECLARE_PCI_UNMAP_ADDR(recv_mapping)
192 	struct ib_mr *recv_mr;
193 
194 	struct ib_send_wr sq_wr;	/* send work requrest record */
195 	struct ib_sge send_sgl;
196 	struct krping_rdma_info send_buf;/* single send buf */
197 	u64 send_dma_addr;
198 	DECLARE_PCI_UNMAP_ADDR(send_mapping)
199 	struct ib_mr *send_mr;
200 
201 	struct ib_send_wr rdma_sq_wr;	/* rdma work request record */
202 	struct ib_sge rdma_sgl;		/* rdma single SGE */
203 	char *rdma_buf;			/* used as rdma sink */
204 	u64  rdma_dma_addr;
205 	DECLARE_PCI_UNMAP_ADDR(rdma_mapping)
206 	struct ib_mr *rdma_mr;
207 
208 	uint32_t remote_rkey;		/* remote guys RKEY */
209 	uint64_t remote_addr;		/* remote guys TO */
210 	uint32_t remote_len;		/* remote guys LEN */
211 
212 	char *start_buf;		/* rdma read src */
213 	u64  start_dma_addr;
214 	DECLARE_PCI_UNMAP_ADDR(start_mapping)
215 	struct ib_mr *start_mr;
216 
217 	enum test_state state;		/* used for cond/signalling */
218 	wait_queue_head_t sem;
219 	struct krping_stats stats;
220 
221 	uint16_t port;			/* dst port in NBO */
222 	struct in_addr addr;		/* dst addr in NBO */
223 	char *addr_str;			/* dst addr string */
224 	int verbose;			/* verbose logging */
225 	int count;			/* ping count */
226 	int size;			/* ping data size */
227 	int validate;			/* validate ping data */
228 	int wlat;			/* run wlat test */
229 	int rlat;			/* run rlat test */
230 	int bw;				/* run bw test */
231 	int duplex;			/* run bw full duplex test */
232 	int poll;			/* poll or block for rlat test */
233 	int txdepth;			/* SQ depth */
234 	int local_dma_lkey;		/* use 0 for lkey */
235 	int frtest;			/* fastreg test */
236 	int testnum;
237 
238 	/* CM stuff */
239 	struct rdma_cm_id *cm_id;	/* connection on client side,*/
240 					/* listener on server side. */
241 	struct rdma_cm_id *child_cm_id;	/* connection on server side */
242 	struct list_head list;
243 };
244 
245 static int krping_cma_event_handler(struct rdma_cm_id *cma_id,
246 				   struct rdma_cm_event *event)
247 {
248 	int ret;
249 	struct krping_cb *cb = cma_id->context;
250 
251 	DEBUG_LOG(cb, "cma_event type %d cma_id %p (%s)\n", event->event,
252 	    cma_id, (cma_id == cb->cm_id) ? "parent" : "child");
253 
254 	switch (event->event) {
255 	case RDMA_CM_EVENT_ADDR_RESOLVED:
256 		cb->state = ADDR_RESOLVED;
257 		ret = rdma_resolve_route(cma_id, 2000);
258 		if (ret) {
259 			PRINTF(cb, "rdma_resolve_route error %d\n", ret);
260 			wake_up_interruptible(&cb->sem);
261 		}
262 		break;
263 
264 	case RDMA_CM_EVENT_ROUTE_RESOLVED:
265 		cb->state = ROUTE_RESOLVED;
266 		cb->child_cm_id = cma_id;
267 		wake_up_interruptible(&cb->sem);
268 		break;
269 
270 	case RDMA_CM_EVENT_CONNECT_REQUEST:
271 		if (cb->state == IDLE) {
272 			cb->state = CONNECT_REQUEST;
273 			cb->child_cm_id = cma_id;
274 		} else {
275 			PRINTF(cb, "Received connection request in wrong state"
276 			    " (%d)\n", cb->state);
277 		}
278 		DEBUG_LOG(cb, "child cma %p\n", cb->child_cm_id);
279 		wake_up_interruptible(&cb->sem);
280 		break;
281 
282 	case RDMA_CM_EVENT_ESTABLISHED:
283 		DEBUG_LOG(cb, "ESTABLISHED\n");
284 		if (!cb->server) {
285 			cb->state = CONNECTED;
286 		}
287 		wake_up_interruptible(&cb->sem);
288 		break;
289 
290 	case RDMA_CM_EVENT_ADDR_ERROR:
291 	case RDMA_CM_EVENT_ROUTE_ERROR:
292 	case RDMA_CM_EVENT_CONNECT_ERROR:
293 	case RDMA_CM_EVENT_UNREACHABLE:
294 	case RDMA_CM_EVENT_REJECTED:
295 		PRINTF(cb, "cma event %d, error %d\n", event->event,
296 		       event->status);
297 		cb->state = ERROR;
298 		wake_up_interruptible(&cb->sem);
299 		break;
300 
301 	case RDMA_CM_EVENT_DISCONNECTED:
302 		PRINTF(cb, "DISCONNECT EVENT...\n");
303 		cb->state = ERROR;
304 		wake_up_interruptible(&cb->sem);
305 		break;
306 
307 	case RDMA_CM_EVENT_DEVICE_REMOVAL:
308 		PRINTF(cb, "cma detected device removal!!!!\n");
309 		break;
310 
311 	default:
312 		PRINTF(cb, "oof bad type!\n");
313 		wake_up_interruptible(&cb->sem);
314 		break;
315 	}
316 	return 0;
317 }
318 
319 static int server_recv(struct krping_cb *cb, struct ib_wc *wc)
320 {
321 	if (wc->byte_len != sizeof(cb->recv_buf)) {
322 		PRINTF(cb, "Received bogus data, size %d\n",
323 		       wc->byte_len);
324 		return -1;
325 	}
326 
327 	cb->remote_rkey = ntohl(cb->recv_buf.rkey);
328 	cb->remote_addr = ntohll(cb->recv_buf.buf);
329 	cb->remote_len  = ntohl(cb->recv_buf.size);
330 	DEBUG_LOG(cb, "Received rkey %x addr %llx len %d from peer\n",
331 		  cb->remote_rkey, (unsigned long long)cb->remote_addr,
332 		  cb->remote_len);
333 
334 	if (cb->state <= CONNECTED || cb->state == RDMA_WRITE_COMPLETE)
335 		cb->state = RDMA_READ_ADV;
336 	else
337 		cb->state = RDMA_WRITE_ADV;
338 
339 	return 0;
340 }
341 
342 static int client_recv(struct krping_cb *cb, struct ib_wc *wc)
343 {
344 	if (wc->byte_len != sizeof(cb->recv_buf)) {
345 		PRINTF(cb, "Received bogus data, size %d\n",
346 		       wc->byte_len);
347 		return -1;
348 	}
349 
350 	if (cb->state == RDMA_READ_ADV)
351 		cb->state = RDMA_WRITE_ADV;
352 	else
353 		cb->state = RDMA_WRITE_COMPLETE;
354 
355 	return 0;
356 }
357 
358 static void krping_cq_event_handler(struct ib_cq *cq, void *ctx)
359 {
360 	struct krping_cb *cb = ctx;
361 	struct ib_wc wc;
362 	struct ib_recv_wr *bad_wr;
363 	int ret;
364 
365 	BUG_ON(cb->cq != cq);
366 	if (cb->state == ERROR) {
367 		PRINTF(cb, "cq completion in ERROR state\n");
368 		return;
369 	}
370 	if (!cb->wlat && !cb->rlat && !cb->bw && !cb->frtest)
371 		ib_req_notify_cq(cb->cq, IB_CQ_NEXT_COMP);
372 	while ((ret = ib_poll_cq(cb->cq, 1, &wc)) == 1) {
373 		if (wc.status) {
374 			if (wc.status == IB_WC_WR_FLUSH_ERR) {
375 				DEBUG_LOG(cb, "cq flushed\n");
376 				continue;
377 			} else {
378 				PRINTF(cb, "cq completion failed with "
379 				       "wr_id %jx status %d opcode %d vender_err %x\n",
380 					(uintmax_t)wc.wr_id, wc.status, wc.opcode, wc.vendor_err);
381 				goto error;
382 			}
383 		}
384 
385 		switch (wc.opcode) {
386 		case IB_WC_SEND:
387 			DEBUG_LOG(cb, "send completion\n");
388 			cb->stats.send_bytes += cb->send_sgl.length;
389 			cb->stats.send_msgs++;
390 			break;
391 
392 		case IB_WC_RDMA_WRITE:
393 			DEBUG_LOG(cb, "rdma write completion\n");
394 			cb->stats.write_bytes += cb->rdma_sq_wr.sg_list->length;
395 			cb->stats.write_msgs++;
396 			cb->state = RDMA_WRITE_COMPLETE;
397 			wake_up_interruptible(&cb->sem);
398 			break;
399 
400 		case IB_WC_RDMA_READ:
401 			DEBUG_LOG(cb, "rdma read completion\n");
402 			cb->stats.read_bytes += cb->rdma_sq_wr.sg_list->length;
403 			cb->stats.read_msgs++;
404 			cb->state = RDMA_READ_COMPLETE;
405 			wake_up_interruptible(&cb->sem);
406 			break;
407 
408 		case IB_WC_RECV:
409 			DEBUG_LOG(cb, "recv completion\n");
410 			cb->stats.recv_bytes += sizeof(cb->recv_buf);
411 			cb->stats.recv_msgs++;
412 			if (cb->wlat || cb->rlat || cb->bw || cb->frtest)
413 				ret = server_recv(cb, &wc);
414 			else
415 				ret = cb->server ? server_recv(cb, &wc) :
416 						   client_recv(cb, &wc);
417 			if (ret) {
418 				PRINTF(cb, "recv wc error: %d\n", ret);
419 				goto error;
420 			}
421 
422 			ret = ib_post_recv(cb->qp, &cb->rq_wr, &bad_wr);
423 			if (ret) {
424 				PRINTF(cb, "post recv error: %d\n",
425 				       ret);
426 				goto error;
427 			}
428 			wake_up_interruptible(&cb->sem);
429 			break;
430 
431 		default:
432 			PRINTF(cb,
433 			       "%s:%d Unexpected opcode %d, Shutting down\n",
434 			       __func__, __LINE__, wc.opcode);
435 			goto error;
436 		}
437 	}
438 	if (ret) {
439 		PRINTF(cb, "poll error %d\n", ret);
440 		goto error;
441 	}
442 	return;
443 error:
444 	cb->state = ERROR;
445 	wake_up_interruptible(&cb->sem);
446 }
447 
448 static int krping_accept(struct krping_cb *cb)
449 {
450 	struct rdma_conn_param conn_param;
451 	int ret;
452 
453 	DEBUG_LOG(cb, "accepting client connection request\n");
454 
455 	memset(&conn_param, 0, sizeof conn_param);
456 	conn_param.responder_resources = 1;
457 	conn_param.initiator_depth = 1;
458 
459 	ret = rdma_accept(cb->child_cm_id, &conn_param);
460 	if (ret) {
461 		PRINTF(cb, "rdma_accept error: %d\n", ret);
462 		return ret;
463 	}
464 
465 	if (!cb->wlat && !cb->rlat && !cb->bw && !cb->frtest) {
466 		wait_event_interruptible(cb->sem, cb->state >= CONNECTED);
467 		if (cb->state == ERROR) {
468 			PRINTF(cb, "wait for CONNECTED state %d\n",
469 				cb->state);
470 			return -1;
471 		}
472 	}
473 	return 0;
474 }
475 
476 static void krping_setup_wr(struct krping_cb *cb)
477 {
478 	cb->recv_sgl.addr = cb->recv_dma_addr;
479 	cb->recv_sgl.length = sizeof cb->recv_buf;
480 	if (cb->local_dma_lkey)
481 		cb->recv_sgl.lkey = cb->qp->device->local_dma_lkey;
482 	else if (cb->mem == DMA)
483 		cb->recv_sgl.lkey = cb->dma_mr->lkey;
484 	else
485 		cb->recv_sgl.lkey = cb->recv_mr->lkey;
486 	cb->rq_wr.sg_list = &cb->recv_sgl;
487 	cb->rq_wr.num_sge = 1;
488 
489 	cb->send_sgl.addr = cb->send_dma_addr;
490 	cb->send_sgl.length = sizeof cb->send_buf;
491 	if (cb->local_dma_lkey)
492 		cb->send_sgl.lkey = cb->qp->device->local_dma_lkey;
493 	else if (cb->mem == DMA)
494 		cb->send_sgl.lkey = cb->dma_mr->lkey;
495 	else
496 		cb->send_sgl.lkey = cb->send_mr->lkey;
497 
498 	cb->sq_wr.opcode = IB_WR_SEND;
499 	cb->sq_wr.send_flags = IB_SEND_SIGNALED;
500 	cb->sq_wr.sg_list = &cb->send_sgl;
501 	cb->sq_wr.num_sge = 1;
502 
503 	if (cb->server || cb->wlat || cb->rlat || cb->bw || cb->frtest) {
504 		cb->rdma_sgl.addr = cb->rdma_dma_addr;
505 		if (cb->mem == MR)
506 			cb->rdma_sgl.lkey = cb->rdma_mr->lkey;
507 		cb->rdma_sq_wr.send_flags = IB_SEND_SIGNALED;
508 		cb->rdma_sq_wr.sg_list = &cb->rdma_sgl;
509 		cb->rdma_sq_wr.num_sge = 1;
510 	}
511 
512 	switch(cb->mem) {
513 	case FASTREG:
514 
515 		/*
516 		 * A chain of 2 WRs, INVALDATE_MR + FAST_REG_MR.
517 		 * both unsignaled.  The client uses them to reregister
518 		 * the rdma buffers with a new key each iteration.
519 		 */
520 		cb->fastreg_wr.opcode = IB_WR_FAST_REG_MR;
521 		cb->fastreg_wr.wr.fast_reg.page_shift = PAGE_SHIFT;
522 		cb->fastreg_wr.wr.fast_reg.length = cb->size;
523 		cb->fastreg_wr.wr.fast_reg.page_list = cb->page_list;
524 		cb->fastreg_wr.wr.fast_reg.page_list_len = cb->page_list_len;
525 
526 		cb->invalidate_wr.next = &cb->fastreg_wr;
527 		cb->invalidate_wr.opcode = IB_WR_LOCAL_INV;
528 		break;
529 	case MW:
530 		cb->bind_attr.wr_id = 0xabbaabba;
531 		cb->bind_attr.send_flags = 0; /* unsignaled */
532 #ifdef BIND_INFO
533 		cb->bind_attr.bind_info.length = cb->size;
534 #else
535 		cb->bind_attr.length = cb->size;
536 #endif
537 		break;
538 	default:
539 		break;
540 	}
541 }
542 
543 static int krping_setup_buffers(struct krping_cb *cb)
544 {
545 	int ret;
546 	struct ib_phys_buf buf;
547 	u64 iovbase;
548 
549 	DEBUG_LOG(cb, "krping_setup_buffers called on cb %p\n", cb);
550 
551 	cb->recv_dma_addr = dma_map_single(cb->pd->device->dma_device,
552 				   &cb->recv_buf,
553 				   sizeof(cb->recv_buf), DMA_BIDIRECTIONAL);
554 	pci_unmap_addr_set(cb, recv_mapping, cb->recv_dma_addr);
555 	cb->send_dma_addr = dma_map_single(cb->pd->device->dma_device,
556 					   &cb->send_buf, sizeof(cb->send_buf),
557 					   DMA_BIDIRECTIONAL);
558 	pci_unmap_addr_set(cb, send_mapping, cb->send_dma_addr);
559 
560 	if (cb->mem == DMA) {
561 		cb->dma_mr = ib_get_dma_mr(cb->pd, IB_ACCESS_LOCAL_WRITE|
562 					   IB_ACCESS_REMOTE_READ|
563 				           IB_ACCESS_REMOTE_WRITE);
564 		if (IS_ERR(cb->dma_mr)) {
565 			DEBUG_LOG(cb, "reg_dmamr failed\n");
566 			ret = PTR_ERR(cb->dma_mr);
567 			goto bail;
568 		}
569 	} else {
570 		if (!cb->local_dma_lkey) {
571 			buf.addr = cb->recv_dma_addr;
572 			buf.size = sizeof cb->recv_buf;
573 			DEBUG_LOG(cb, "recv buf dma_addr %jx size %d\n",
574 			    (uintmax_t)buf.addr, (int)buf.size);
575 			iovbase = cb->recv_dma_addr;
576 			cb->recv_mr = ib_reg_phys_mr(cb->pd, &buf, 1,
577 						     IB_ACCESS_LOCAL_WRITE,
578 						     &iovbase);
579 
580 			if (IS_ERR(cb->recv_mr)) {
581 				DEBUG_LOG(cb, "recv_buf reg_mr failed\n");
582 				ret = PTR_ERR(cb->recv_mr);
583 				goto bail;
584 			}
585 
586 			buf.addr = cb->send_dma_addr;
587 			buf.size = sizeof cb->send_buf;
588 			DEBUG_LOG(cb, "send buf dma_addr %jx size %d\n",
589 			    (uintmax_t)buf.addr, (int)buf.size);
590 			iovbase = cb->send_dma_addr;
591 			cb->send_mr = ib_reg_phys_mr(cb->pd, &buf, 1,
592 						     0, &iovbase);
593 
594 			if (IS_ERR(cb->send_mr)) {
595 				DEBUG_LOG(cb, "send_buf reg_mr failed\n");
596 				ret = PTR_ERR(cb->send_mr);
597 				goto bail;
598 			}
599 		}
600 	}
601 
602 	cb->rdma_buf = kmalloc(cb->size, GFP_KERNEL);
603 	if (!cb->rdma_buf) {
604 		DEBUG_LOG(cb, "rdma_buf malloc failed\n");
605 		ret = -ENOMEM;
606 		goto bail;
607 	}
608 
609 	cb->rdma_dma_addr = dma_map_single(cb->pd->device->dma_device,
610 			       cb->rdma_buf, cb->size,
611 			       DMA_BIDIRECTIONAL);
612 	pci_unmap_addr_set(cb, rdma_mapping, cb->rdma_dma_addr);
613 	if (cb->mem != DMA) {
614 		switch (cb->mem) {
615 		case FASTREG:
616 			cb->page_list_len = (((cb->size - 1) & PAGE_MASK) +
617 				PAGE_SIZE) >> PAGE_SHIFT;
618 			cb->page_list = ib_alloc_fast_reg_page_list(
619 						cb->pd->device,
620 						cb->page_list_len);
621 			if (IS_ERR(cb->page_list)) {
622 				DEBUG_LOG(cb, "recv_buf reg_mr failed\n");
623 				ret = PTR_ERR(cb->page_list);
624 				goto bail;
625 			}
626 			cb->fastreg_mr = ib_alloc_fast_reg_mr(cb->pd,
627 					cb->page_list->max_page_list_len);
628 			if (IS_ERR(cb->fastreg_mr)) {
629 				DEBUG_LOG(cb, "recv_buf reg_mr failed\n");
630 				ret = PTR_ERR(cb->fastreg_mr);
631 				goto bail;
632 			}
633 			DEBUG_LOG(cb, "fastreg rkey 0x%x page_list %p"
634 				" page_list_len %u\n", cb->fastreg_mr->rkey,
635 				cb->page_list, cb->page_list_len);
636 			break;
637 		case MW:
638 			cb->mw = ib_alloc_mw(cb->pd,IB_MW_TYPE_1);
639 			if (IS_ERR(cb->mw)) {
640 				DEBUG_LOG(cb, "recv_buf alloc_mw failed\n");
641 				ret = PTR_ERR(cb->mw);
642 				goto bail;
643 			}
644 			DEBUG_LOG(cb, "mw rkey 0x%x\n", cb->mw->rkey);
645 			/*FALLTHROUGH*/
646 		case MR:
647 			buf.addr = cb->rdma_dma_addr;
648 			buf.size = cb->size;
649 			iovbase = cb->rdma_dma_addr;
650 			cb->rdma_mr = ib_reg_phys_mr(cb->pd, &buf, 1,
651 						IB_ACCESS_LOCAL_WRITE|
652 					     IB_ACCESS_REMOTE_READ|
653 					     IB_ACCESS_REMOTE_WRITE,
654 					     &iovbase);
655 			if (IS_ERR(cb->rdma_mr)) {
656 				DEBUG_LOG(cb, "rdma_buf reg_mr failed\n");
657 				ret = PTR_ERR(cb->rdma_mr);
658 				goto bail;
659 			}
660 			DEBUG_LOG(cb, "rdma buf dma_addr %jx size %d mr rkey 0x%x\n",
661 				(uintmax_t)buf.addr, (int)buf.size, cb->rdma_mr->rkey);
662 			break;
663 		default:
664 			ret = -EINVAL;
665 			goto bail;
666 			break;
667 		}
668 	}
669 
670 	if (!cb->server || cb->wlat || cb->rlat || cb->bw || cb->frtest) {
671 
672 		cb->start_buf = kmalloc(cb->size, GFP_KERNEL);
673 		if (!cb->start_buf) {
674 			DEBUG_LOG(cb, "start_buf malloc failed\n");
675 			ret = -ENOMEM;
676 			goto bail;
677 		}
678 
679 		cb->start_dma_addr = dma_map_single(cb->pd->device->dma_device,
680 						   cb->start_buf, cb->size,
681 						   DMA_BIDIRECTIONAL);
682 		pci_unmap_addr_set(cb, start_mapping, cb->start_dma_addr);
683 
684 		if (cb->mem == MR || cb->mem == MW) {
685 			unsigned flags = IB_ACCESS_REMOTE_READ;
686 
687 			if (cb->wlat || cb->rlat || cb->bw || cb->frtest) {
688 				flags |= IB_ACCESS_LOCAL_WRITE |
689 					IB_ACCESS_REMOTE_WRITE;
690 			}
691 
692 			buf.addr = cb->start_dma_addr;
693 			buf.size = cb->size;
694 			DEBUG_LOG(cb, "start buf dma_addr %jx size %d\n",
695 				(uintmax_t)buf.addr, (int)buf.size);
696 			iovbase = cb->start_dma_addr;
697 			cb->start_mr = ib_reg_phys_mr(cb->pd, &buf, 1,
698 					     flags,
699 					     &iovbase);
700 
701 			if (IS_ERR(cb->start_mr)) {
702 				DEBUG_LOG(cb, "start_buf reg_mr failed\n");
703 				ret = PTR_ERR(cb->start_mr);
704 				goto bail;
705 			}
706 		}
707 	}
708 
709 	krping_setup_wr(cb);
710 	DEBUG_LOG(cb, "allocated & registered buffers...\n");
711 	return 0;
712 bail:
713 	if (cb->fastreg_mr && !IS_ERR(cb->fastreg_mr))
714 		ib_dereg_mr(cb->fastreg_mr);
715 	if (cb->mw && !IS_ERR(cb->mw))
716 		ib_dealloc_mw(cb->mw);
717 	if (cb->rdma_mr && !IS_ERR(cb->rdma_mr))
718 		ib_dereg_mr(cb->rdma_mr);
719 	if (cb->page_list && !IS_ERR(cb->page_list))
720 		ib_free_fast_reg_page_list(cb->page_list);
721 	if (cb->dma_mr && !IS_ERR(cb->dma_mr))
722 		ib_dereg_mr(cb->dma_mr);
723 	if (cb->recv_mr && !IS_ERR(cb->recv_mr))
724 		ib_dereg_mr(cb->recv_mr);
725 	if (cb->send_mr && !IS_ERR(cb->send_mr))
726 		ib_dereg_mr(cb->send_mr);
727 	if (cb->rdma_buf)
728 		kfree(cb->rdma_buf);
729 	if (cb->start_buf)
730 		kfree(cb->start_buf);
731 	return ret;
732 }
733 
734 static void krping_free_buffers(struct krping_cb *cb)
735 {
736 	DEBUG_LOG(cb, "krping_free_buffers called on cb %p\n", cb);
737 
738 	if (cb->dma_mr)
739 		ib_dereg_mr(cb->dma_mr);
740 	if (cb->send_mr)
741 		ib_dereg_mr(cb->send_mr);
742 	if (cb->recv_mr)
743 		ib_dereg_mr(cb->recv_mr);
744 	if (cb->rdma_mr)
745 		ib_dereg_mr(cb->rdma_mr);
746 	if (cb->start_mr)
747 		ib_dereg_mr(cb->start_mr);
748 	if (cb->fastreg_mr)
749 		ib_dereg_mr(cb->fastreg_mr);
750 	if (cb->mw)
751 		ib_dealloc_mw(cb->mw);
752 
753 	dma_unmap_single(cb->pd->device->dma_device,
754 			 pci_unmap_addr(cb, recv_mapping),
755 			 sizeof(cb->recv_buf), DMA_BIDIRECTIONAL);
756 	dma_unmap_single(cb->pd->device->dma_device,
757 			 pci_unmap_addr(cb, send_mapping),
758 			 sizeof(cb->send_buf), DMA_BIDIRECTIONAL);
759 	dma_unmap_single(cb->pd->device->dma_device,
760 			 pci_unmap_addr(cb, rdma_mapping),
761 			 cb->size, DMA_BIDIRECTIONAL);
762 	kfree(cb->rdma_buf);
763 	if (cb->start_buf) {
764 		dma_unmap_single(cb->pd->device->dma_device,
765 			 pci_unmap_addr(cb, start_mapping),
766 			 cb->size, DMA_BIDIRECTIONAL);
767 		kfree(cb->start_buf);
768 	}
769 }
770 
771 static int krping_create_qp(struct krping_cb *cb)
772 {
773 	struct ib_qp_init_attr init_attr;
774 	int ret;
775 
776 	memset(&init_attr, 0, sizeof(init_attr));
777 	init_attr.cap.max_send_wr = cb->txdepth;
778 	init_attr.cap.max_recv_wr = 2;
779 	init_attr.cap.max_recv_sge = 1;
780 	init_attr.cap.max_send_sge = 1;
781 	init_attr.qp_type = IB_QPT_RC;
782 	init_attr.send_cq = cb->cq;
783 	init_attr.recv_cq = cb->cq;
784 	init_attr.sq_sig_type = IB_SIGNAL_REQ_WR;
785 
786 	if (cb->server) {
787 		ret = rdma_create_qp(cb->child_cm_id, cb->pd, &init_attr);
788 		if (!ret)
789 			cb->qp = cb->child_cm_id->qp;
790 	} else {
791 		ret = rdma_create_qp(cb->cm_id, cb->pd, &init_attr);
792 		if (!ret)
793 			cb->qp = cb->cm_id->qp;
794 	}
795 
796 	return ret;
797 }
798 
799 static void krping_free_qp(struct krping_cb *cb)
800 {
801 	ib_destroy_qp(cb->qp);
802 	ib_destroy_cq(cb->cq);
803 	ib_dealloc_pd(cb->pd);
804 }
805 
806 static int krping_setup_qp(struct krping_cb *cb, struct rdma_cm_id *cm_id)
807 {
808 	int ret;
809 	cb->pd = ib_alloc_pd(cm_id->device);
810 	if (IS_ERR(cb->pd)) {
811 		PRINTF(cb, "ib_alloc_pd failed\n");
812 		return PTR_ERR(cb->pd);
813 	}
814 	DEBUG_LOG(cb, "created pd %p\n", cb->pd);
815 
816 	strlcpy(cb->stats.name, cb->pd->device->name, sizeof(cb->stats.name));
817 
818 	cb->cq = ib_create_cq(cm_id->device, krping_cq_event_handler, NULL,
819 			      cb, cb->txdepth * 2, 0);
820 	if (IS_ERR(cb->cq)) {
821 		PRINTF(cb, "ib_create_cq failed\n");
822 		ret = PTR_ERR(cb->cq);
823 		goto err1;
824 	}
825 	DEBUG_LOG(cb, "created cq %p\n", cb->cq);
826 
827 	if (!cb->wlat && !cb->rlat && !cb->bw && !cb->frtest) {
828 		ret = ib_req_notify_cq(cb->cq, IB_CQ_NEXT_COMP);
829 		if (ret) {
830 			PRINTF(cb, "ib_create_cq failed\n");
831 			goto err2;
832 		}
833 	}
834 
835 	ret = krping_create_qp(cb);
836 	if (ret) {
837 		PRINTF(cb, "krping_create_qp failed: %d\n", ret);
838 		goto err2;
839 	}
840 	DEBUG_LOG(cb, "created qp %p\n", cb->qp);
841 	return 0;
842 err2:
843 	ib_destroy_cq(cb->cq);
844 err1:
845 	ib_dealloc_pd(cb->pd);
846 	return ret;
847 }
848 
849 /*
850  * return the (possibly rebound) rkey for the rdma buffer.
851  * FASTREG mode: invalidate and rebind via fastreg wr.
852  * MW mode: rebind the MW.
853  * other modes: just return the mr rkey.
854  */
855 static u32 krping_rdma_rkey(struct krping_cb *cb, u64 buf, int post_inv)
856 {
857 	u32 rkey = 0xffffffff;
858 	u64 p;
859 	struct ib_send_wr *bad_wr;
860 	int i;
861 	int ret;
862 
863 	switch (cb->mem) {
864 	case FASTREG:
865 		cb->invalidate_wr.ex.invalidate_rkey = cb->fastreg_mr->rkey;
866 
867 		/*
868 		 * Update the fastreg key.
869 		 */
870 		ib_update_fast_reg_key(cb->fastreg_mr, ++cb->key);
871 		cb->fastreg_wr.wr.fast_reg.rkey = cb->fastreg_mr->rkey;
872 
873 		/*
874 		 * Update the fastreg WR with new buf info.
875 		 */
876 		if (buf == (u64)cb->start_dma_addr)
877 			cb->fastreg_wr.wr.fast_reg.access_flags = IB_ACCESS_REMOTE_READ;
878 		else
879 			cb->fastreg_wr.wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
880 		cb->fastreg_wr.wr.fast_reg.iova_start = buf;
881 		p = (u64)(buf & PAGE_MASK);
882 		for (i=0; i < cb->fastreg_wr.wr.fast_reg.page_list_len;
883 		     i++, p += PAGE_SIZE) {
884 			cb->page_list->page_list[i] = p;
885 			DEBUG_LOG(cb, "page_list[%d] 0x%jx\n", i, (uintmax_t)p);
886 		}
887 
888 		DEBUG_LOG(cb, "post_inv = %d, fastreg new rkey 0x%x shift %u len %u"
889 			" iova_start %jx page_list_len %u\n",
890 			post_inv,
891 			cb->fastreg_wr.wr.fast_reg.rkey,
892 			cb->fastreg_wr.wr.fast_reg.page_shift,
893 			(unsigned)cb->fastreg_wr.wr.fast_reg.length,
894 			(uintmax_t)cb->fastreg_wr.wr.fast_reg.iova_start,
895 			cb->fastreg_wr.wr.fast_reg.page_list_len);
896 
897 		if (post_inv)
898 			ret = ib_post_send(cb->qp, &cb->invalidate_wr, &bad_wr);
899 		else
900 			ret = ib_post_send(cb->qp, &cb->fastreg_wr, &bad_wr);
901 		if (ret) {
902 			PRINTF(cb, "post send error %d\n", ret);
903 			cb->state = ERROR;
904 		}
905 		rkey = cb->fastreg_mr->rkey;
906 		break;
907 	case MW:
908 		/*
909 		 * Update the MW with new buf info.
910 		 */
911 		if (buf == (u64)cb->start_dma_addr) {
912 #ifdef BIND_INFO
913 			cb->bind_attr.bind_info.mw_access_flags = IB_ACCESS_REMOTE_READ;
914 			cb->bind_attr.bind_info.mr = cb->start_mr;
915 #else
916 			cb->bind_attr.mw_access_flags = IB_ACCESS_REMOTE_READ;
917 			cb->bind_attr.mr = cb->start_mr;
918 #endif
919 		} else {
920 #ifdef BIND_INFO
921 			cb->bind_attr.bind_info.mw_access_flags = IB_ACCESS_REMOTE_WRITE;
922 			cb->bind_attr.bind_info.mr = cb->rdma_mr;
923 #else
924 			cb->bind_attr.mw_access_flags = IB_ACCESS_REMOTE_WRITE;
925 			cb->bind_attr.mr = cb->rdma_mr;
926 #endif
927 		}
928 #ifdef BIND_INFO
929 		cb->bind_attr.bind_info.addr = buf;
930 #else
931 		cb->bind_attr.addr = buf;
932 #endif
933 		DEBUG_LOG(cb, "binding mw rkey 0x%x to buf %jx mr rkey 0x%x\n",
934 #ifdef BIND_INFO
935 			cb->mw->rkey, (uintmax_t)buf, cb->bind_attr.bind_info.mr->rkey);
936 #else
937 			cb->mw->rkey, buf, cb->bind_attr.mr->rkey);
938 #endif
939 		ret = ib_bind_mw(cb->qp, cb->mw, &cb->bind_attr);
940 		if (ret) {
941 			PRINTF(cb, "bind mw error %d\n", ret);
942 			cb->state = ERROR;
943 		} else
944 			rkey = cb->mw->rkey;
945 		break;
946 	case MR:
947 		if (buf == (u64)cb->start_dma_addr)
948 			rkey = cb->start_mr->rkey;
949 		else
950 			rkey = cb->rdma_mr->rkey;
951 		break;
952 	case DMA:
953 		rkey = cb->dma_mr->rkey;
954 		break;
955 	default:
956 		PRINTF(cb, "%s:%d case ERROR\n", __func__, __LINE__);
957 		cb->state = ERROR;
958 		break;
959 	}
960 	return rkey;
961 }
962 
963 static void krping_format_send(struct krping_cb *cb, u64 buf)
964 {
965 	struct krping_rdma_info *info = &cb->send_buf;
966 	u32 rkey;
967 
968 	/*
969 	 * Client side will do fastreg or mw bind before
970 	 * advertising the rdma buffer.  Server side
971 	 * sends have no data.
972 	 */
973 	if (!cb->server || cb->wlat || cb->rlat || cb->bw || cb->frtest) {
974 		rkey = krping_rdma_rkey(cb, buf, !cb->server_invalidate);
975 		info->buf = htonll(buf);
976 		info->rkey = htonl(rkey);
977 		info->size = htonl(cb->size);
978 		DEBUG_LOG(cb, "RDMA addr %llx rkey %x len %d\n",
979 			  (unsigned long long)buf, rkey, cb->size);
980 	}
981 }
982 
983 static void krping_test_server(struct krping_cb *cb)
984 {
985 	struct ib_send_wr *bad_wr, inv;
986 	int ret;
987 
988 	while (1) {
989 		/* Wait for client's Start STAG/TO/Len */
990 		wait_event_interruptible(cb->sem, cb->state >= RDMA_READ_ADV);
991 		if (cb->state != RDMA_READ_ADV) {
992 			PRINTF(cb, "wait for RDMA_READ_ADV state %d\n",
993 				cb->state);
994 			break;
995 		}
996 
997 		DEBUG_LOG(cb, "server received sink adv\n");
998 
999 		cb->rdma_sq_wr.wr.rdma.rkey = cb->remote_rkey;
1000 		cb->rdma_sq_wr.wr.rdma.remote_addr = cb->remote_addr;
1001 		cb->rdma_sq_wr.sg_list->length = cb->remote_len;
1002 		cb->rdma_sgl.lkey = krping_rdma_rkey(cb, cb->rdma_dma_addr, 1);
1003 
1004 		/* Issue RDMA Read. */
1005 		if (cb->read_inv)
1006 			cb->rdma_sq_wr.opcode = IB_WR_RDMA_READ_WITH_INV;
1007 		else {
1008 
1009 			cb->rdma_sq_wr.opcode = IB_WR_RDMA_READ;
1010 			if (cb->mem == FASTREG) {
1011 				/*
1012 				 * Immediately follow the read with a
1013 				 * fenced LOCAL_INV.
1014 				 */
1015 				cb->rdma_sq_wr.next = &inv;
1016 				memset(&inv, 0, sizeof inv);
1017 				inv.opcode = IB_WR_LOCAL_INV;
1018 				inv.ex.invalidate_rkey = cb->fastreg_mr->rkey;
1019 				inv.send_flags = IB_SEND_FENCE;
1020 			}
1021 		}
1022 
1023 		ret = ib_post_send(cb->qp, &cb->rdma_sq_wr, &bad_wr);
1024 		if (ret) {
1025 			PRINTF(cb, "post send error %d\n", ret);
1026 			break;
1027 		}
1028 		cb->rdma_sq_wr.next = NULL;
1029 
1030 		DEBUG_LOG(cb, "server posted rdma read req \n");
1031 
1032 		/* Wait for read completion */
1033 		wait_event_interruptible(cb->sem,
1034 					 cb->state >= RDMA_READ_COMPLETE);
1035 		if (cb->state != RDMA_READ_COMPLETE) {
1036 			PRINTF(cb,
1037 			       "wait for RDMA_READ_COMPLETE state %d\n",
1038 			       cb->state);
1039 			break;
1040 		}
1041 		DEBUG_LOG(cb, "server received read complete\n");
1042 
1043 		/* Display data in recv buf */
1044 		if (cb->verbose) {
1045 			if (strlen(cb->rdma_buf) > 128) {
1046 				char msgbuf[128];
1047 
1048 				strlcpy(msgbuf, cb->rdma_buf, sizeof(msgbuf));
1049 				PRINTF(cb, "server ping data stripped: %s\n",
1050 				       msgbuf);
1051 			} else
1052 				PRINTF(cb, "server ping data: %s\n",
1053 				       cb->rdma_buf);
1054 		}
1055 
1056 		/* Tell client to continue */
1057 		if (cb->server && cb->server_invalidate) {
1058 			cb->sq_wr.ex.invalidate_rkey = cb->remote_rkey;
1059 			cb->sq_wr.opcode = IB_WR_SEND_WITH_INV;
1060 			DEBUG_LOG(cb, "send-w-inv rkey 0x%x\n", cb->remote_rkey);
1061 		}
1062 		ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
1063 		if (ret) {
1064 			PRINTF(cb, "post send error %d\n", ret);
1065 			break;
1066 		}
1067 		DEBUG_LOG(cb, "server posted go ahead\n");
1068 
1069 		/* Wait for client's RDMA STAG/TO/Len */
1070 		wait_event_interruptible(cb->sem, cb->state >= RDMA_WRITE_ADV);
1071 		if (cb->state != RDMA_WRITE_ADV) {
1072 			PRINTF(cb,
1073 			       "wait for RDMA_WRITE_ADV state %d\n",
1074 			       cb->state);
1075 			break;
1076 		}
1077 		DEBUG_LOG(cb, "server received sink adv\n");
1078 
1079 		/* RDMA Write echo data */
1080 		cb->rdma_sq_wr.opcode = IB_WR_RDMA_WRITE;
1081 		cb->rdma_sq_wr.wr.rdma.rkey = cb->remote_rkey;
1082 		cb->rdma_sq_wr.wr.rdma.remote_addr = cb->remote_addr;
1083 		cb->rdma_sq_wr.sg_list->length = strlen(cb->rdma_buf) + 1;
1084 		if (cb->local_dma_lkey)
1085 			cb->rdma_sgl.lkey = cb->qp->device->local_dma_lkey;
1086 		else
1087 			cb->rdma_sgl.lkey = krping_rdma_rkey(cb, cb->rdma_dma_addr, 0);
1088 
1089 		DEBUG_LOG(cb, "rdma write from lkey %x laddr %llx len %d\n",
1090 			  cb->rdma_sq_wr.sg_list->lkey,
1091 			  (unsigned long long)cb->rdma_sq_wr.sg_list->addr,
1092 			  cb->rdma_sq_wr.sg_list->length);
1093 
1094 		ret = ib_post_send(cb->qp, &cb->rdma_sq_wr, &bad_wr);
1095 		if (ret) {
1096 			PRINTF(cb, "post send error %d\n", ret);
1097 			break;
1098 		}
1099 
1100 		/* Wait for completion */
1101 		ret = wait_event_interruptible(cb->sem, cb->state >=
1102 							 RDMA_WRITE_COMPLETE);
1103 		if (cb->state != RDMA_WRITE_COMPLETE) {
1104 			PRINTF(cb,
1105 			       "wait for RDMA_WRITE_COMPLETE state %d\n",
1106 			       cb->state);
1107 			break;
1108 		}
1109 		DEBUG_LOG(cb, "server rdma write complete \n");
1110 
1111 		cb->state = CONNECTED;
1112 
1113 		/* Tell client to begin again */
1114 		if (cb->server && cb->server_invalidate) {
1115 			cb->sq_wr.ex.invalidate_rkey = cb->remote_rkey;
1116 			cb->sq_wr.opcode = IB_WR_SEND_WITH_INV;
1117 			DEBUG_LOG(cb, "send-w-inv rkey 0x%x\n", cb->remote_rkey);
1118 		}
1119 		ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
1120 		if (ret) {
1121 			PRINTF(cb, "post send error %d\n", ret);
1122 			break;
1123 		}
1124 		DEBUG_LOG(cb, "server posted go ahead\n");
1125 	}
1126 }
1127 
1128 static void rlat_test(struct krping_cb *cb)
1129 {
1130 	int scnt;
1131 	int iters = cb->count;
1132 	struct timeval start_tv, stop_tv;
1133 	int ret;
1134 	struct ib_wc wc;
1135 	struct ib_send_wr *bad_wr;
1136 	int ne;
1137 
1138 	scnt = 0;
1139 	cb->rdma_sq_wr.opcode = IB_WR_RDMA_READ;
1140 	cb->rdma_sq_wr.wr.rdma.rkey = cb->remote_rkey;
1141 	cb->rdma_sq_wr.wr.rdma.remote_addr = cb->remote_addr;
1142 	cb->rdma_sq_wr.sg_list->length = cb->size;
1143 
1144 	microtime(&start_tv);
1145 	if (!cb->poll) {
1146 		cb->state = RDMA_READ_ADV;
1147 		ib_req_notify_cq(cb->cq, IB_CQ_NEXT_COMP);
1148 	}
1149 	while (scnt < iters) {
1150 
1151 		cb->state = RDMA_READ_ADV;
1152 		ret = ib_post_send(cb->qp, &cb->rdma_sq_wr, &bad_wr);
1153 		if (ret) {
1154 			PRINTF(cb,
1155 				"Couldn't post send: ret=%d scnt %d\n",
1156 				ret, scnt);
1157 			return;
1158 		}
1159 
1160 		do {
1161 			if (!cb->poll) {
1162 				wait_event_interruptible(cb->sem,
1163 					cb->state != RDMA_READ_ADV);
1164 				if (cb->state == RDMA_READ_COMPLETE) {
1165 					ne = 1;
1166 					ib_req_notify_cq(cb->cq,
1167 						IB_CQ_NEXT_COMP);
1168 				} else {
1169 					ne = -1;
1170 				}
1171 			} else
1172 				ne = ib_poll_cq(cb->cq, 1, &wc);
1173 			if (cb->state == ERROR) {
1174 				PRINTF(cb,
1175 					"state == ERROR...bailing scnt %d\n",
1176 					scnt);
1177 				return;
1178 			}
1179 		} while (ne == 0);
1180 
1181 		if (ne < 0) {
1182 			PRINTF(cb, "poll CQ failed %d\n", ne);
1183 			return;
1184 		}
1185 		if (cb->poll && wc.status != IB_WC_SUCCESS) {
1186 			PRINTF(cb, "Completion wth error at %s:\n",
1187 				cb->server ? "server" : "client");
1188 			PRINTF(cb, "Failed status %d: wr_id %d\n",
1189 				wc.status, (int) wc.wr_id);
1190 			return;
1191 		}
1192 		++scnt;
1193 	}
1194 	microtime(&stop_tv);
1195 
1196         if (stop_tv.tv_usec < start_tv.tv_usec) {
1197                 stop_tv.tv_usec += 1000000;
1198                 stop_tv.tv_sec  -= 1;
1199         }
1200 
1201 	PRINTF(cb, "delta sec %lu delta usec %lu iter %d size %d\n",
1202 		(unsigned long)(stop_tv.tv_sec - start_tv.tv_sec),
1203 		(unsigned long)(stop_tv.tv_usec - start_tv.tv_usec),
1204 		scnt, cb->size);
1205 }
1206 
1207 static void wlat_test(struct krping_cb *cb)
1208 {
1209 	int ccnt, scnt, rcnt;
1210 	int iters=cb->count;
1211 	volatile char *poll_buf = (char *) cb->start_buf;
1212 	char *buf = (char *)cb->rdma_buf;
1213 	struct timeval start_tv, stop_tv;
1214 	cycles_t *post_cycles_start, *post_cycles_stop;
1215 	cycles_t *poll_cycles_start, *poll_cycles_stop;
1216 	cycles_t *last_poll_cycles_start;
1217 	cycles_t sum_poll = 0, sum_post = 0, sum_last_poll = 0;
1218 	int i;
1219 	int cycle_iters = 1000;
1220 
1221 	ccnt = 0;
1222 	scnt = 0;
1223 	rcnt = 0;
1224 
1225 	post_cycles_start = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1226 	if (!post_cycles_start) {
1227 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1228 		return;
1229 	}
1230 	post_cycles_stop = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1231 	if (!post_cycles_stop) {
1232 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1233 		return;
1234 	}
1235 	poll_cycles_start = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1236 	if (!poll_cycles_start) {
1237 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1238 		return;
1239 	}
1240 	poll_cycles_stop = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1241 	if (!poll_cycles_stop) {
1242 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1243 		return;
1244 	}
1245 	last_poll_cycles_start = kmalloc(cycle_iters * sizeof(cycles_t),
1246 		GFP_KERNEL);
1247 	if (!last_poll_cycles_start) {
1248 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1249 		return;
1250 	}
1251 	cb->rdma_sq_wr.opcode = IB_WR_RDMA_WRITE;
1252 	cb->rdma_sq_wr.wr.rdma.rkey = cb->remote_rkey;
1253 	cb->rdma_sq_wr.wr.rdma.remote_addr = cb->remote_addr;
1254 	cb->rdma_sq_wr.sg_list->length = cb->size;
1255 
1256 	if (cycle_iters > iters)
1257 		cycle_iters = iters;
1258 	microtime(&start_tv);
1259 	while (scnt < iters || ccnt < iters || rcnt < iters) {
1260 
1261 		/* Wait till buffer changes. */
1262 		if (rcnt < iters && !(scnt < 1 && !cb->server)) {
1263 			++rcnt;
1264 			while (*poll_buf != (char)rcnt) {
1265 				if (cb->state == ERROR) {
1266 					PRINTF(cb,
1267 						"state = ERROR, bailing\n");
1268 					return;
1269 				}
1270 			}
1271 		}
1272 
1273 		if (scnt < iters) {
1274 			struct ib_send_wr *bad_wr;
1275 
1276 			*buf = (char)scnt+1;
1277 			if (scnt < cycle_iters)
1278 				post_cycles_start[scnt] = get_cycles();
1279 			if (ib_post_send(cb->qp, &cb->rdma_sq_wr, &bad_wr)) {
1280 				PRINTF(cb,
1281 					"Couldn't post send: scnt=%d\n",
1282 					scnt);
1283 				return;
1284 			}
1285 			if (scnt < cycle_iters)
1286 				post_cycles_stop[scnt] = get_cycles();
1287 			scnt++;
1288 		}
1289 
1290 		if (ccnt < iters) {
1291 			struct ib_wc wc;
1292 			int ne;
1293 
1294 			if (ccnt < cycle_iters)
1295 				poll_cycles_start[ccnt] = get_cycles();
1296 			do {
1297 				if (ccnt < cycle_iters)
1298 					last_poll_cycles_start[ccnt] =
1299 						get_cycles();
1300 				ne = ib_poll_cq(cb->cq, 1, &wc);
1301 			} while (ne == 0);
1302 			if (ccnt < cycle_iters)
1303 				poll_cycles_stop[ccnt] = get_cycles();
1304 			++ccnt;
1305 
1306 			if (ne < 0) {
1307 				PRINTF(cb, "poll CQ failed %d\n", ne);
1308 				return;
1309 			}
1310 			if (wc.status != IB_WC_SUCCESS) {
1311 				PRINTF(cb,
1312 					"Completion wth error at %s:\n",
1313 					cb->server ? "server" : "client");
1314 				PRINTF(cb,
1315 					"Failed status %d: wr_id %d\n",
1316 					wc.status, (int) wc.wr_id);
1317 				PRINTF(cb,
1318 					"scnt=%d, rcnt=%d, ccnt=%d\n",
1319 					scnt, rcnt, ccnt);
1320 				return;
1321 			}
1322 		}
1323 	}
1324 	microtime(&stop_tv);
1325 
1326         if (stop_tv.tv_usec < start_tv.tv_usec) {
1327                 stop_tv.tv_usec += 1000000;
1328                 stop_tv.tv_sec  -= 1;
1329         }
1330 
1331 	for (i=0; i < cycle_iters; i++) {
1332 		sum_post += post_cycles_stop[i] - post_cycles_start[i];
1333 		sum_poll += poll_cycles_stop[i] - poll_cycles_start[i];
1334 		sum_last_poll += poll_cycles_stop[i]-last_poll_cycles_start[i];
1335 	}
1336 	PRINTF(cb,
1337 		"delta sec %lu delta usec %lu iter %d size %d cycle_iters %d"
1338 		" sum_post %llu sum_poll %llu sum_last_poll %llu\n",
1339 		(unsigned long)(stop_tv.tv_sec - start_tv.tv_sec),
1340 		(unsigned long)(stop_tv.tv_usec - start_tv.tv_usec),
1341 		scnt, cb->size, cycle_iters,
1342 		(unsigned long long)sum_post, (unsigned long long)sum_poll,
1343 		(unsigned long long)sum_last_poll);
1344 	kfree(post_cycles_start);
1345 	kfree(post_cycles_stop);
1346 	kfree(poll_cycles_start);
1347 	kfree(poll_cycles_stop);
1348 	kfree(last_poll_cycles_start);
1349 }
1350 
1351 static void bw_test(struct krping_cb *cb)
1352 {
1353 	int ccnt, scnt, rcnt;
1354 	int iters=cb->count;
1355 	struct timeval start_tv, stop_tv;
1356 	cycles_t *post_cycles_start, *post_cycles_stop;
1357 	cycles_t *poll_cycles_start, *poll_cycles_stop;
1358 	cycles_t *last_poll_cycles_start;
1359 	cycles_t sum_poll = 0, sum_post = 0, sum_last_poll = 0;
1360 	int i;
1361 	int cycle_iters = 1000;
1362 
1363 	ccnt = 0;
1364 	scnt = 0;
1365 	rcnt = 0;
1366 
1367 	post_cycles_start = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1368 	if (!post_cycles_start) {
1369 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1370 		return;
1371 	}
1372 	post_cycles_stop = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1373 	if (!post_cycles_stop) {
1374 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1375 		return;
1376 	}
1377 	poll_cycles_start = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1378 	if (!poll_cycles_start) {
1379 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1380 		return;
1381 	}
1382 	poll_cycles_stop = kmalloc(cycle_iters * sizeof(cycles_t), GFP_KERNEL);
1383 	if (!poll_cycles_stop) {
1384 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1385 		return;
1386 	}
1387 	last_poll_cycles_start = kmalloc(cycle_iters * sizeof(cycles_t),
1388 		GFP_KERNEL);
1389 	if (!last_poll_cycles_start) {
1390 		PRINTF(cb, "%s kmalloc failed\n", __FUNCTION__);
1391 		return;
1392 	}
1393 	cb->rdma_sq_wr.opcode = IB_WR_RDMA_WRITE;
1394 	cb->rdma_sq_wr.wr.rdma.rkey = cb->remote_rkey;
1395 	cb->rdma_sq_wr.wr.rdma.remote_addr = cb->remote_addr;
1396 	cb->rdma_sq_wr.sg_list->length = cb->size;
1397 
1398 	if (cycle_iters > iters)
1399 		cycle_iters = iters;
1400 	microtime(&start_tv);
1401 	while (scnt < iters || ccnt < iters) {
1402 
1403 		while (scnt < iters && scnt - ccnt < cb->txdepth) {
1404 			struct ib_send_wr *bad_wr;
1405 
1406 			if (scnt < cycle_iters)
1407 				post_cycles_start[scnt] = get_cycles();
1408 			if (ib_post_send(cb->qp, &cb->rdma_sq_wr, &bad_wr)) {
1409 				PRINTF(cb,
1410 					"Couldn't post send: scnt=%d\n",
1411 					scnt);
1412 				return;
1413 			}
1414 			if (scnt < cycle_iters)
1415 				post_cycles_stop[scnt] = get_cycles();
1416 			++scnt;
1417 		}
1418 
1419 		if (ccnt < iters) {
1420 			int ne;
1421 			struct ib_wc wc;
1422 
1423 			if (ccnt < cycle_iters)
1424 				poll_cycles_start[ccnt] = get_cycles();
1425 			do {
1426 				if (ccnt < cycle_iters)
1427 					last_poll_cycles_start[ccnt] =
1428 						get_cycles();
1429 				ne = ib_poll_cq(cb->cq, 1, &wc);
1430 			} while (ne == 0);
1431 			if (ccnt < cycle_iters)
1432 				poll_cycles_stop[ccnt] = get_cycles();
1433 			ccnt += 1;
1434 
1435 			if (ne < 0) {
1436 				PRINTF(cb, "poll CQ failed %d\n", ne);
1437 				return;
1438 			}
1439 			if (wc.status != IB_WC_SUCCESS) {
1440 				PRINTF(cb,
1441 					"Completion wth error at %s:\n",
1442 					cb->server ? "server" : "client");
1443 				PRINTF(cb,
1444 					"Failed status %d: wr_id %d\n",
1445 					wc.status, (int) wc.wr_id);
1446 				return;
1447 			}
1448 		}
1449 	}
1450 	microtime(&stop_tv);
1451 
1452         if (stop_tv.tv_usec < start_tv.tv_usec) {
1453                 stop_tv.tv_usec += 1000000;
1454                 stop_tv.tv_sec  -= 1;
1455         }
1456 
1457 	for (i=0; i < cycle_iters; i++) {
1458 		sum_post += post_cycles_stop[i] - post_cycles_start[i];
1459 		sum_poll += poll_cycles_stop[i] - poll_cycles_start[i];
1460 		sum_last_poll += poll_cycles_stop[i]-last_poll_cycles_start[i];
1461 	}
1462 	PRINTF(cb,
1463 		"delta sec %lu delta usec %lu iter %d size %d cycle_iters %d"
1464 		" sum_post %llu sum_poll %llu sum_last_poll %llu\n",
1465 		(unsigned long)(stop_tv.tv_sec - start_tv.tv_sec),
1466 		(unsigned long)(stop_tv.tv_usec - start_tv.tv_usec),
1467 		scnt, cb->size, cycle_iters,
1468 		(unsigned long long)sum_post, (unsigned long long)sum_poll,
1469 		(unsigned long long)sum_last_poll);
1470 	kfree(post_cycles_start);
1471 	kfree(post_cycles_stop);
1472 	kfree(poll_cycles_start);
1473 	kfree(poll_cycles_stop);
1474 	kfree(last_poll_cycles_start);
1475 }
1476 
1477 static void krping_rlat_test_server(struct krping_cb *cb)
1478 {
1479 	struct ib_send_wr *bad_wr;
1480 	struct ib_wc wc;
1481 	int ret;
1482 
1483 	/* Spin waiting for client's Start STAG/TO/Len */
1484 	while (cb->state < RDMA_READ_ADV) {
1485 		krping_cq_event_handler(cb->cq, cb);
1486 	}
1487 
1488 	/* Send STAG/TO/Len to client */
1489 	krping_format_send(cb, cb->start_dma_addr);
1490 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
1491 	if (ret) {
1492 		PRINTF(cb, "post send error %d\n", ret);
1493 		return;
1494 	}
1495 
1496 	/* Spin waiting for send completion */
1497 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
1498 	if (ret < 0) {
1499 		PRINTF(cb, "poll error %d\n", ret);
1500 		return;
1501 	}
1502 	if (wc.status) {
1503 		PRINTF(cb, "send completiong error %d\n", wc.status);
1504 		return;
1505 	}
1506 	wait_event_interruptible(cb->sem, cb->state == ERROR);
1507 }
1508 
1509 static void krping_wlat_test_server(struct krping_cb *cb)
1510 {
1511 	struct ib_send_wr *bad_wr;
1512 	struct ib_wc wc;
1513 	int ret;
1514 
1515 	/* Spin waiting for client's Start STAG/TO/Len */
1516 	while (cb->state < RDMA_READ_ADV) {
1517 		krping_cq_event_handler(cb->cq, cb);
1518 	}
1519 
1520 	/* Send STAG/TO/Len to client */
1521 	krping_format_send(cb, cb->start_dma_addr);
1522 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
1523 	if (ret) {
1524 		PRINTF(cb, "post send error %d\n", ret);
1525 		return;
1526 	}
1527 
1528 	/* Spin waiting for send completion */
1529 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
1530 	if (ret < 0) {
1531 		PRINTF(cb, "poll error %d\n", ret);
1532 		return;
1533 	}
1534 	if (wc.status) {
1535 		PRINTF(cb, "send completiong error %d\n", wc.status);
1536 		return;
1537 	}
1538 
1539 	wlat_test(cb);
1540 	wait_event_interruptible(cb->sem, cb->state == ERROR);
1541 }
1542 
1543 static void krping_bw_test_server(struct krping_cb *cb)
1544 {
1545 	struct ib_send_wr *bad_wr;
1546 	struct ib_wc wc;
1547 	int ret;
1548 
1549 	/* Spin waiting for client's Start STAG/TO/Len */
1550 	while (cb->state < RDMA_READ_ADV) {
1551 		krping_cq_event_handler(cb->cq, cb);
1552 	}
1553 
1554 	/* Send STAG/TO/Len to client */
1555 	krping_format_send(cb, cb->start_dma_addr);
1556 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
1557 	if (ret) {
1558 		PRINTF(cb, "post send error %d\n", ret);
1559 		return;
1560 	}
1561 
1562 	/* Spin waiting for send completion */
1563 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
1564 	if (ret < 0) {
1565 		PRINTF(cb, "poll error %d\n", ret);
1566 		return;
1567 	}
1568 	if (wc.status) {
1569 		PRINTF(cb, "send completiong error %d\n", wc.status);
1570 		return;
1571 	}
1572 
1573 	if (cb->duplex)
1574 		bw_test(cb);
1575 	wait_event_interruptible(cb->sem, cb->state == ERROR);
1576 }
1577 
1578 static int fastreg_supported(struct krping_cb *cb, int server)
1579 {
1580 	struct ib_device *dev = server?cb->child_cm_id->device:
1581 					cb->cm_id->device;
1582 	struct ib_device_attr attr;
1583 	int ret;
1584 
1585 	ret = ib_query_device(dev, &attr);
1586 	if (ret) {
1587 		PRINTF(cb, "ib_query_device failed ret %d\n", ret);
1588 		return 0;
1589 	}
1590 	if (!(attr.device_cap_flags & IB_DEVICE_MEM_MGT_EXTENSIONS)) {
1591 		PRINTF(cb, "Fastreg not supported - device_cap_flags 0x%llx\n",
1592 		    (unsigned long long)attr.device_cap_flags);
1593 		return 0;
1594 	}
1595 	DEBUG_LOG(cb, "Fastreg supported - device_cap_flags 0x%jx\n",
1596 		(uintmax_t)attr.device_cap_flags);
1597 	return 1;
1598 }
1599 
1600 static int krping_bind_server(struct krping_cb *cb)
1601 {
1602 	struct sockaddr_in sin;
1603 	int ret;
1604 
1605 	memset(&sin, 0, sizeof(sin));
1606 	sin.sin_len = sizeof sin;
1607 	sin.sin_family = AF_INET;
1608 	sin.sin_addr.s_addr = cb->addr.s_addr;
1609 	sin.sin_port = cb->port;
1610 
1611 	ret = rdma_bind_addr(cb->cm_id, (struct sockaddr *) &sin);
1612 	if (ret) {
1613 		PRINTF(cb, "rdma_bind_addr error %d\n", ret);
1614 		return ret;
1615 	}
1616 	DEBUG_LOG(cb, "rdma_bind_addr successful\n");
1617 
1618 	DEBUG_LOG(cb, "rdma_listen\n");
1619 	ret = rdma_listen(cb->cm_id, 3);
1620 	if (ret) {
1621 		PRINTF(cb, "rdma_listen failed: %d\n", ret);
1622 		return ret;
1623 	}
1624 
1625 	wait_event_interruptible(cb->sem, cb->state >= CONNECT_REQUEST);
1626 	if (cb->state != CONNECT_REQUEST) {
1627 		PRINTF(cb, "wait for CONNECT_REQUEST state %d\n",
1628 			cb->state);
1629 		return -1;
1630 	}
1631 
1632 	if (cb->mem == FASTREG && !fastreg_supported(cb, 1))
1633 		return -EINVAL;
1634 
1635 	return 0;
1636 }
1637 
1638 /*
1639  * sq-depth worth of fastreg + 0B read-inv pairs, reposting them as the reads
1640  * complete.
1641  * NOTE: every 9 seconds we sleep for 1 second to keep the kernel happy.
1642  */
1643 static void krping_fr_test5(struct krping_cb *cb)
1644 {
1645 	struct ib_fast_reg_page_list **pl;
1646 	struct ib_send_wr *fr, *read, *bad;
1647 	struct ib_wc wc;
1648 	struct ib_sge *sgl;
1649 	u8 key = 0;
1650 	struct ib_mr **mr;
1651 	u8 **buf;
1652 	dma_addr_t *dma_addr;
1653 	int i;
1654 	int ret;
1655 	int plen = (((cb->size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
1656 	time_t start;
1657 	int count = 0;
1658 	int scnt;
1659 	int depth = cb->txdepth >> 1;
1660 
1661 	if (!depth) {
1662 		PRINTF(cb, "txdepth must be > 1 for this test!\n");
1663 		return;
1664 	}
1665 
1666 	pl = kzalloc(sizeof *pl * depth, GFP_KERNEL);
1667 	DEBUG_LOG(cb, "%s pl %p size %zu\n", __func__, pl, sizeof *pl * depth);
1668 	mr = kzalloc(sizeof *mr * depth, GFP_KERNEL);
1669 	DEBUG_LOG(cb, "%s mr %p size %zu\n", __func__, mr, sizeof *mr * depth);
1670 	fr = kzalloc(sizeof *fr * depth, GFP_KERNEL);
1671 	DEBUG_LOG(cb, "%s fr %p size %zu\n", __func__, fr, sizeof *fr * depth);
1672 	sgl = kzalloc(sizeof *sgl * depth, GFP_KERNEL);
1673 	DEBUG_LOG(cb, "%s sgl %p size %zu\n", __func__, sgl, sizeof *sgl * depth);
1674 	read = kzalloc(sizeof *read * depth, GFP_KERNEL);
1675 	DEBUG_LOG(cb, "%s read %p size %zu\n", __func__, read, sizeof *read * depth);
1676 	buf = kzalloc(sizeof *buf * depth, GFP_KERNEL);
1677 	DEBUG_LOG(cb, "%s buf %p size %zu\n", __func__, buf, sizeof *buf * depth);
1678 	dma_addr = kzalloc(sizeof *dma_addr * depth, GFP_KERNEL);
1679 	DEBUG_LOG(cb, "%s dma_addr %p size %zu\n", __func__, dma_addr, sizeof *dma_addr * depth);
1680 	if (!pl || !mr || !fr || !read || !sgl || !buf || !dma_addr) {
1681 		PRINTF(cb, "kzalloc failed\n");
1682 		goto err1;
1683 	}
1684 
1685 	for (scnt = 0; scnt < depth; scnt++) {
1686 		pl[scnt] = ib_alloc_fast_reg_page_list(cb->qp->device, plen);
1687 		if (IS_ERR(pl[scnt])) {
1688 			PRINTF(cb, "alloc_fr_page_list failed %ld\n",
1689 			       PTR_ERR(pl[scnt]));
1690 			goto err2;
1691 		}
1692 		DEBUG_LOG(cb, "%s pl[%u] %p\n", __func__, scnt, pl[scnt]);
1693 
1694 		mr[scnt] = ib_alloc_fast_reg_mr(cb->pd, plen);
1695 		if (IS_ERR(mr[scnt])) {
1696 			PRINTF(cb, "alloc_fr failed %ld\n",
1697 			       PTR_ERR(mr[scnt]));
1698 			goto err2;
1699 		}
1700 		DEBUG_LOG(cb, "%s mr[%u] %p\n", __func__, scnt, mr[scnt]);
1701 		ib_update_fast_reg_key(mr[scnt], ++key);
1702 
1703 		buf[scnt] = kmalloc(cb->size, GFP_KERNEL);
1704 		if (!buf[scnt]) {
1705 			PRINTF(cb, "kmalloc failed\n");
1706 			ret = -ENOMEM;
1707 			goto err2;
1708 		}
1709 		DEBUG_LOG(cb, "%s buf[%u] %p\n", __func__, scnt, buf[scnt]);
1710 		dma_addr[scnt] = dma_map_single(cb->pd->device->dma_device,
1711 						   buf[scnt], cb->size,
1712 						   DMA_BIDIRECTIONAL);
1713 		if (dma_mapping_error(cb->pd->device->dma_device,
1714 		    dma_addr[scnt])) {
1715 			PRINTF(cb, "dma_map failed\n");
1716 			ret = -ENOMEM;
1717 			goto err2;
1718 		}
1719 		DEBUG_LOG(cb, "%s dma_addr[%u] %p\n", __func__, scnt, (void *)dma_addr[scnt]);
1720 		for (i=0; i<plen; i++) {
1721 			pl[scnt]->page_list[i] = ((unsigned long)dma_addr[scnt] & PAGE_MASK) + (i * PAGE_SIZE);
1722 			DEBUG_LOG(cb, "%s pl[%u]->page_list[%u] 0x%jx\n",
1723 				  __func__, scnt, i,  (uintmax_t)pl[scnt]->page_list[i]);
1724 		}
1725 
1726 		sgl[scnt].lkey = mr[scnt]->rkey;
1727 		sgl[scnt].length = cb->size;
1728 		sgl[scnt].addr = (u64)buf[scnt];
1729 		DEBUG_LOG(cb, "%s sgl[%u].lkey 0x%x length %u addr 0x%jx\n",
1730 			  __func__, scnt,  sgl[scnt].lkey, sgl[scnt].length,
1731 			  (uintmax_t)sgl[scnt].addr);
1732 
1733 		fr[scnt].opcode = IB_WR_FAST_REG_MR;
1734 		fr[scnt].wr_id = scnt;
1735 		fr[scnt].send_flags = 0;
1736 		fr[scnt].wr.fast_reg.page_shift = PAGE_SHIFT;
1737 		fr[scnt].wr.fast_reg.length = cb->size;
1738 		fr[scnt].wr.fast_reg.page_list = pl[scnt];
1739 		fr[scnt].wr.fast_reg.page_list_len = plen;
1740 		fr[scnt].wr.fast_reg.iova_start = (u64)buf[scnt];
1741 		fr[scnt].wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
1742 		fr[scnt].wr.fast_reg.rkey = mr[scnt]->rkey;
1743 		fr[scnt].next = &read[scnt];
1744 		read[scnt].opcode = IB_WR_RDMA_READ_WITH_INV;
1745 		read[scnt].wr_id = scnt;
1746 		read[scnt].send_flags = IB_SEND_SIGNALED;
1747 		read[scnt].wr.rdma.rkey = cb->remote_rkey;
1748 		read[scnt].wr.rdma.remote_addr = cb->remote_addr;
1749 		read[scnt].num_sge = 1;
1750 		read[scnt].sg_list = &sgl[scnt];
1751 		ret = ib_post_send(cb->qp, &fr[scnt], &bad);
1752 		if (ret) {
1753 			PRINTF(cb, "ib_post_send failed %d\n", ret);
1754 			goto err2;
1755 		}
1756 	}
1757 
1758 	start = time_uptime;
1759 	DEBUG_LOG(cb, "%s starting IO.\n", __func__);
1760 	while (!cb->count || cb->server || count < cb->count) {
1761 		if ((time_uptime - start) >= 9) {
1762 			DEBUG_LOG(cb, "%s pausing 1 tick! count %u\n", __func__,
1763 				  count);
1764 			wait_event_interruptible_timeout(cb->sem,
1765 							 cb->state == ERROR,
1766 							 1);
1767 			if (cb->state == ERROR)
1768 				break;
1769 			start = time_uptime;
1770 		}
1771 		do {
1772 			ret = ib_poll_cq(cb->cq, 1, &wc);
1773 			if (ret < 0) {
1774 				PRINTF(cb, "ib_poll_cq failed %d\n",
1775 				       ret);
1776 				goto err2;
1777 			}
1778 			if (ret == 1) {
1779 				if (wc.status) {
1780 					PRINTF(cb,
1781 					       "completion error %u wr_id %ju "
1782 					       "opcode %d\n", wc.status,
1783 					       (uintmax_t)wc.wr_id, wc.opcode);
1784 					goto err2;
1785 				}
1786 				count++;
1787 				if (count == cb->count)
1788 					break;
1789 				ib_update_fast_reg_key(mr[wc.wr_id], ++key);
1790 				fr[wc.wr_id].wr.fast_reg.rkey =
1791 					mr[wc.wr_id]->rkey;
1792 				sgl[wc.wr_id].lkey = mr[wc.wr_id]->rkey;
1793 				ret = ib_post_send(cb->qp, &fr[wc.wr_id], &bad);
1794 				if (ret) {
1795 					PRINTF(cb,
1796 					       "ib_post_send failed %d\n", ret);
1797 					goto err2;
1798 				}
1799 			} else if (krping_sigpending()) {
1800 				PRINTF(cb, "signal!\n");
1801 				goto err2;
1802 			}
1803 		} while (ret == 1);
1804 	}
1805 	DEBUG_LOG(cb, "%s done!\n", __func__);
1806 err2:
1807 	DEBUG_LOG(cb, "sleeping 1 second\n");
1808 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
1809 	DEBUG_LOG(cb, "draining the cq...\n");
1810 	do {
1811 		ret = ib_poll_cq(cb->cq, 1, &wc);
1812 		if (ret < 0) {
1813 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
1814 			break;
1815 		}
1816 		if (ret == 1) {
1817 			if (wc.status) {
1818 				PRINTF(cb, "completion error %u "
1819 				       "opcode %u\n", wc.status, wc.opcode);
1820 			}
1821 		}
1822 	} while (ret == 1);
1823 
1824 	DEBUG_LOG(cb, "destroying fr mrs!\n");
1825 	for (scnt = 0; scnt < depth; scnt++) {
1826 		if (mr[scnt]) {
1827 			ib_dereg_mr(mr[scnt]);
1828 			DEBUG_LOG(cb, "%s dereg mr %p\n", __func__, mr[scnt]);
1829 		}
1830 	}
1831 	DEBUG_LOG(cb, "unmapping/freeing bufs!\n");
1832 	for (scnt = 0; scnt < depth; scnt++) {
1833 		if (buf[scnt]) {
1834 			dma_unmap_single(cb->pd->device->dma_device,
1835 					 dma_addr[scnt], cb->size,
1836 					 DMA_BIDIRECTIONAL);
1837 			kfree(buf[scnt]);
1838 			DEBUG_LOG(cb, "%s unmap/free buf %p dma_addr %p\n", __func__, buf[scnt], (void *)dma_addr[scnt]);
1839 		}
1840 	}
1841 	DEBUG_LOG(cb, "destroying fr page lists!\n");
1842 	for (scnt = 0; scnt < depth; scnt++) {
1843 		if (pl[scnt]) {
1844 			DEBUG_LOG(cb, "%s free pl %p\n", __func__, pl[scnt]);
1845 			ib_free_fast_reg_page_list(pl[scnt]);
1846 		}
1847 	}
1848 err1:
1849 	if (pl)
1850 		kfree(pl);
1851 	if (mr)
1852 		kfree(mr);
1853 	if (fr)
1854 		kfree(fr);
1855 	if (read)
1856 		kfree(read);
1857 	if (sgl)
1858 		kfree(sgl);
1859 	if (buf)
1860 		kfree(buf);
1861 	if (dma_addr)
1862 		kfree(dma_addr);
1863 }
1864 static void krping_fr_test_server(struct krping_cb *cb)
1865 {
1866 	DEBUG_LOG(cb, "%s waiting for disconnect...\n", __func__);
1867 	wait_event_interruptible(cb->sem, cb->state == ERROR);
1868 }
1869 
1870 static void krping_fr_test5_server(struct krping_cb *cb)
1871 {
1872 	struct ib_send_wr *bad_wr;
1873 	struct ib_wc wc;
1874 	int ret;
1875 
1876 	/* Spin waiting for client's Start STAG/TO/Len */
1877 	while (cb->state < RDMA_READ_ADV) {
1878 		krping_cq_event_handler(cb->cq, cb);
1879 	}
1880 	DEBUG_LOG(cb, "%s client STAG %x TO 0x%jx\n", __func__,
1881 		  cb->remote_rkey, (uintmax_t)cb->remote_addr);
1882 
1883 	/* Send STAG/TO/Len to client */
1884 	krping_format_send(cb, cb->start_dma_addr);
1885 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
1886 	if (ret) {
1887 		PRINTF(cb, "post send error %d\n", ret);
1888 		return;
1889 	}
1890 
1891 	/* Spin waiting for send completion */
1892 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
1893 	if (ret < 0) {
1894 		PRINTF(cb, "poll error %d\n", ret);
1895 		return;
1896 	}
1897 	if (wc.status) {
1898 		PRINTF(cb, "send completiong error %d\n", wc.status);
1899 		return;
1900 	}
1901 
1902 	if (cb->duplex)
1903 		krping_fr_test5(cb);
1904 	DEBUG_LOG(cb, "%s waiting for disconnect...\n", __func__);
1905 	wait_event_interruptible(cb->sem, cb->state == ERROR);
1906 }
1907 
1908 static void krping_fr_test5_client(struct krping_cb *cb)
1909 {
1910 	struct ib_send_wr *bad;
1911 	struct ib_wc wc;
1912 	int ret;
1913 
1914 	cb->state = RDMA_READ_ADV;
1915 
1916 	/* Send STAG/TO/Len to server */
1917 	krping_format_send(cb, cb->start_dma_addr);
1918 	if (cb->state == ERROR) {
1919 		PRINTF(cb, "krping_format_send failed\n");
1920 		return;
1921 	}
1922 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad);
1923 	if (ret) {
1924 		PRINTF(cb, "post send error %d\n", ret);
1925 		return;
1926 	}
1927 
1928 	/* Spin waiting for send completion */
1929 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
1930 	if (ret < 0) {
1931 		PRINTF(cb, "poll error %d\n", ret);
1932 		return;
1933 	}
1934 	if (wc.status) {
1935 		PRINTF(cb, "send completion error %d\n", wc.status);
1936 		return;
1937 	}
1938 
1939 	/* Spin waiting for server's Start STAG/TO/Len */
1940 	while (cb->state < RDMA_WRITE_ADV) {
1941 		krping_cq_event_handler(cb->cq, cb);
1942 	}
1943 	DEBUG_LOG(cb, "%s server STAG %x TO 0x%jx\n", __func__, cb->remote_rkey,
1944 	    (uintmax_t)cb->remote_addr);
1945 
1946 	return krping_fr_test5(cb);
1947 }
1948 
1949 /*
1950  * sq-depth worth of write + fastreg + inv, reposting them as the invs
1951  * complete.
1952  * NOTE: every 9 seconds we sleep for 1 second to keep the kernel happy.
1953  * If a count is given, then the last IO will have a bogus lkey in the
1954  * write work request.  This reproduces a fw bug where the connection
1955  * will get stuck if a fastreg is processed while the ulptx is failing
1956  * the bad write.
1957  */
1958 static void krping_fr_test6(struct krping_cb *cb)
1959 {
1960 	struct ib_fast_reg_page_list **pl;
1961 	struct ib_send_wr *fr, *write, *inv, *bad;
1962 	struct ib_wc wc;
1963 	struct ib_sge *sgl;
1964 	u8 key = 0;
1965 	struct ib_mr **mr;
1966 	u8 **buf;
1967 	dma_addr_t *dma_addr;
1968 	int i;
1969 	int ret;
1970 	int plen = (((cb->size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
1971 	unsigned long start;
1972 	int count = 0;
1973 	int scnt;
1974 	int depth = cb->txdepth  / 3;
1975 
1976 	if (!depth) {
1977 		PRINTF(cb, "txdepth must be > 3 for this test!\n");
1978 		return;
1979 	}
1980 
1981 	pl = kzalloc(sizeof *pl * depth, GFP_KERNEL);
1982 	DEBUG_LOG(cb, "%s pl %p size %zu\n", __func__, pl, sizeof *pl * depth);
1983 
1984 	mr = kzalloc(sizeof *mr * depth, GFP_KERNEL);
1985 	DEBUG_LOG(cb, "%s mr %p size %zu\n", __func__, mr, sizeof *mr * depth);
1986 
1987 	fr = kzalloc(sizeof *fr * depth, GFP_KERNEL);
1988 	DEBUG_LOG(cb, "%s fr %p size %zu\n", __func__, fr, sizeof *fr * depth);
1989 
1990 	sgl = kzalloc(sizeof *sgl * depth, GFP_KERNEL);
1991 	DEBUG_LOG(cb, "%s sgl %p size %zu\n", __func__, sgl, sizeof *sgl * depth);
1992 
1993 	write = kzalloc(sizeof *write * depth, GFP_KERNEL);
1994 	DEBUG_LOG(cb, "%s read %p size %zu\n", __func__, write, sizeof *write * depth);
1995 
1996 	inv = kzalloc(sizeof *inv * depth, GFP_KERNEL);
1997 	DEBUG_LOG(cb, "%s inv %p size %zu\n", __func__, inv, sizeof *inv * depth);
1998 
1999 	buf = kzalloc(sizeof *buf * depth, GFP_KERNEL);
2000 	DEBUG_LOG(cb, "%s buf %p size %zu\n", __func__, buf, sizeof *buf * depth);
2001 
2002 	dma_addr = kzalloc(sizeof *dma_addr * depth, GFP_KERNEL);
2003 	DEBUG_LOG(cb, "%s dma_addr %p size %zu\n", __func__, dma_addr, sizeof *dma_addr * depth);
2004 
2005 	if (!pl || !mr || !fr || !write || !sgl || !buf || !dma_addr) {
2006 		PRINTF(cb, "kzalloc failed\n");
2007 		goto err1;
2008 	}
2009 
2010 	for (scnt = 0; scnt < depth; scnt++) {
2011 		pl[scnt] = ib_alloc_fast_reg_page_list(cb->qp->device, plen);
2012 		if (IS_ERR(pl[scnt])) {
2013 			PRINTF(cb, "alloc_fr_page_list failed %ld\n",
2014 			       PTR_ERR(pl[scnt]));
2015 			goto err2;
2016 		}
2017 		DEBUG_LOG(cb, "%s pl[%u] %p\n", __func__, scnt, pl[scnt]);
2018 
2019 		mr[scnt] = ib_alloc_fast_reg_mr(cb->pd, plen);
2020 		if (IS_ERR(mr[scnt])) {
2021 			PRINTF(cb, "alloc_fr failed %ld\n",
2022 			       PTR_ERR(mr[scnt]));
2023 			goto err2;
2024 		}
2025 		DEBUG_LOG(cb, "%s mr[%u] %p\n", __func__, scnt, mr[scnt]);
2026 		ib_update_fast_reg_key(mr[scnt], ++key);
2027 
2028 		buf[scnt] = kmalloc(cb->size, GFP_KERNEL);
2029 		if (!buf[scnt]) {
2030 			PRINTF(cb, "kmalloc failed\n");
2031 			ret = -ENOMEM;
2032 			goto err2;
2033 		}
2034 		DEBUG_LOG(cb, "%s buf[%u] %p\n", __func__, scnt, buf[scnt]);
2035 		dma_addr[scnt] = dma_map_single(cb->pd->device->dma_device,
2036 						   buf[scnt], cb->size,
2037 						   DMA_BIDIRECTIONAL);
2038 		if (dma_mapping_error(cb->pd->device->dma_device,
2039 		    dma_addr[scnt])) {
2040 			PRINTF(cb, "dma_map failed\n");
2041 			ret = -ENOMEM;
2042 			goto err2;
2043 		}
2044 		DEBUG_LOG(cb, "%s dma_addr[%u] %p\n", __func__, scnt, (void *)dma_addr[scnt]);
2045 		for (i=0; i<plen; i++) {
2046 			pl[scnt]->page_list[i] = ((unsigned long)dma_addr[scnt] & PAGE_MASK) + (i * PAGE_SIZE);
2047 			DEBUG_LOG(cb, "%s pl[%u]->page_list[%u] 0x%jx\n",
2048 				  __func__, scnt, i,  (uintmax_t)pl[scnt]->page_list[i]);
2049 		}
2050 
2051 		write[scnt].opcode = IB_WR_RDMA_WRITE;
2052 		write[scnt].wr_id = scnt;
2053 		write[scnt].wr.rdma.rkey = cb->remote_rkey;
2054 		write[scnt].wr.rdma.remote_addr = cb->remote_addr;
2055 		write[scnt].num_sge = 1;
2056 		write[scnt].sg_list = &cb->rdma_sgl;
2057 		write[scnt].sg_list->length = cb->size;
2058 		write[scnt].next = &fr[scnt];
2059 
2060 		fr[scnt].opcode = IB_WR_FAST_REG_MR;
2061 		fr[scnt].wr_id = scnt;
2062 		fr[scnt].wr.fast_reg.page_shift = PAGE_SHIFT;
2063 		fr[scnt].wr.fast_reg.length = cb->size;
2064 		fr[scnt].wr.fast_reg.page_list = pl[scnt];
2065 		fr[scnt].wr.fast_reg.page_list_len = plen;
2066 		fr[scnt].wr.fast_reg.iova_start = (u64)buf[scnt];
2067 		fr[scnt].wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
2068 		fr[scnt].wr.fast_reg.rkey = mr[scnt]->rkey;
2069 		fr[scnt].next = &inv[scnt];
2070 
2071 		inv[scnt].opcode = IB_WR_LOCAL_INV;
2072 		inv[scnt].send_flags = IB_SEND_SIGNALED;
2073 		inv[scnt].ex.invalidate_rkey = mr[scnt]->rkey;
2074 
2075 		ret = ib_post_send(cb->qp, &write[scnt], &bad);
2076 		if (ret) {
2077 			PRINTF(cb, "ib_post_send failed %d\n", ret);
2078 			goto err2;
2079 		}
2080 	}
2081 
2082 	start = time_uptime;
2083 	DEBUG_LOG(cb, "%s starting IO.\n", __func__);
2084 	while (!cb->count || cb->server || count < cb->count) {
2085 		if ((time_uptime - start) >= 9) {
2086 			DEBUG_LOG(cb, "%s pausing 1 tick! count %u\n", __func__,
2087 				  count);
2088 			wait_event_interruptible_timeout(cb->sem,
2089 							 cb->state == ERROR,
2090 							 1);
2091 			if (cb->state == ERROR)
2092 				break;
2093 			start = time_uptime;
2094 		}
2095 		do {
2096 			ret = ib_poll_cq(cb->cq, 1, &wc);
2097 			if (ret < 0) {
2098 				PRINTF(cb, "ib_poll_cq failed %d\n",
2099 				       ret);
2100 				goto err2;
2101 			}
2102 			if (ret == 1) {
2103 				if (wc.status) {
2104 					PRINTF(cb,
2105 					       "completion error %u wr_id %ju "
2106 					       "opcode %d\n", wc.status,
2107 					       (uintmax_t)wc.wr_id, wc.opcode);
2108 					goto err2;
2109 				}
2110 				count++;
2111 				if (count == (cb->count -1))
2112 					cb->rdma_sgl.lkey = 0x00dead;
2113 				if (count == cb->count)
2114 					break;
2115 				ib_update_fast_reg_key(mr[wc.wr_id], ++key);
2116 				fr[wc.wr_id].wr.fast_reg.rkey =
2117 					mr[wc.wr_id]->rkey;
2118 				inv[wc.wr_id].ex.invalidate_rkey =
2119 					mr[wc.wr_id]->rkey;
2120 				ret = ib_post_send(cb->qp, &write[wc.wr_id], &bad);
2121 				if (ret) {
2122 					PRINTF(cb,
2123 					       "ib_post_send failed %d\n", ret);
2124 					goto err2;
2125 				}
2126 			} else if (krping_sigpending()){
2127 				PRINTF(cb, "signal!\n");
2128 				goto err2;
2129 			}
2130 		} while (ret == 1);
2131 	}
2132 	DEBUG_LOG(cb, "%s done!\n", __func__);
2133 err2:
2134 	DEBUG_LOG(cb, "sleeping 1 second\n");
2135 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2136 	DEBUG_LOG(cb, "draining the cq...\n");
2137 	do {
2138 		ret = ib_poll_cq(cb->cq, 1, &wc);
2139 		if (ret < 0) {
2140 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2141 			break;
2142 		}
2143 		if (ret == 1) {
2144 			if (wc.status) {
2145 				PRINTF(cb, "completion error %u "
2146 				       "opcode %u\n", wc.status, wc.opcode);
2147 			}
2148 		}
2149 	} while (ret == 1);
2150 
2151 	DEBUG_LOG(cb, "destroying fr mrs!\n");
2152 	for (scnt = 0; scnt < depth; scnt++) {
2153 		if (mr[scnt]) {
2154 			ib_dereg_mr(mr[scnt]);
2155 			DEBUG_LOG(cb, "%s dereg mr %p\n", __func__, mr[scnt]);
2156 		}
2157 	}
2158 	DEBUG_LOG(cb, "unmapping/freeing bufs!\n");
2159 	for (scnt = 0; scnt < depth; scnt++) {
2160 		if (buf[scnt]) {
2161 			dma_unmap_single(cb->pd->device->dma_device,
2162 					 dma_addr[scnt], cb->size,
2163 					 DMA_BIDIRECTIONAL);
2164 			kfree(buf[scnt]);
2165 			DEBUG_LOG(cb, "%s unmap/free buf %p dma_addr %p\n", __func__, buf[scnt], (void *)dma_addr[scnt]);
2166 		}
2167 	}
2168 	DEBUG_LOG(cb, "destroying fr page lists!\n");
2169 	for (scnt = 0; scnt < depth; scnt++) {
2170 		if (pl[scnt]) {
2171 			DEBUG_LOG(cb, "%s free pl %p\n", __func__, pl[scnt]);
2172 			ib_free_fast_reg_page_list(pl[scnt]);
2173 		}
2174 	}
2175 err1:
2176 	if (pl)
2177 		kfree(pl);
2178 	if (mr)
2179 		kfree(mr);
2180 	if (fr)
2181 		kfree(fr);
2182 	if (write)
2183 		kfree(write);
2184 	if (inv)
2185 		kfree(inv);
2186 	if (sgl)
2187 		kfree(sgl);
2188 	if (buf)
2189 		kfree(buf);
2190 	if (dma_addr)
2191 		kfree(dma_addr);
2192 }
2193 
2194 static void krping_fr_test6_server(struct krping_cb *cb)
2195 {
2196 	struct ib_send_wr *bad_wr;
2197 	struct ib_wc wc;
2198 	int ret;
2199 
2200 	/* Spin waiting for client's Start STAG/TO/Len */
2201 	while (cb->state < RDMA_READ_ADV) {
2202 		krping_cq_event_handler(cb->cq, cb);
2203 	}
2204 	DEBUG_LOG(cb, "%s client STAG %x TO 0x%jx\n", __func__,
2205 		  cb->remote_rkey, (uintmax_t)cb->remote_addr);
2206 
2207 	/* Send STAG/TO/Len to client */
2208 	krping_format_send(cb, cb->start_dma_addr);
2209 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
2210 	if (ret) {
2211 		PRINTF(cb, "post send error %d\n", ret);
2212 		return;
2213 	}
2214 
2215 	/* Spin waiting for send completion */
2216 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
2217 	if (ret < 0) {
2218 		PRINTF(cb, "poll error %d\n", ret);
2219 		return;
2220 	}
2221 	if (wc.status) {
2222 		PRINTF(cb, "send completiong error %d\n", wc.status);
2223 		return;
2224 	}
2225 
2226 	if (cb->duplex)
2227 		krping_fr_test6(cb);
2228 	DEBUG_LOG(cb, "%s waiting for disconnect...\n", __func__);
2229 	wait_event_interruptible(cb->sem, cb->state == ERROR);
2230 }
2231 
2232 static void krping_fr_test6_client(struct krping_cb *cb)
2233 {
2234 	struct ib_send_wr *bad;
2235 	struct ib_wc wc;
2236 	int ret;
2237 
2238 	cb->state = RDMA_READ_ADV;
2239 
2240 	/* Send STAG/TO/Len to server */
2241 	krping_format_send(cb, cb->start_dma_addr);
2242 	if (cb->state == ERROR) {
2243 		PRINTF(cb, "krping_format_send failed\n");
2244 		return;
2245 	}
2246 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad);
2247 	if (ret) {
2248 		PRINTF(cb, "post send error %d\n", ret);
2249 		return;
2250 	}
2251 
2252 	/* Spin waiting for send completion */
2253 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
2254 	if (ret < 0) {
2255 		PRINTF(cb, "poll error %d\n", ret);
2256 		return;
2257 	}
2258 	if (wc.status) {
2259 		PRINTF(cb, "send completion error %d\n", wc.status);
2260 		return;
2261 	}
2262 
2263 	/* Spin waiting for server's Start STAG/TO/Len */
2264 	while (cb->state < RDMA_WRITE_ADV) {
2265 		krping_cq_event_handler(cb->cq, cb);
2266 	}
2267 	DEBUG_LOG(cb, "%s server STAG %x TO 0x%jx\n", __func__, cb->remote_rkey,
2268 	    (uintmax_t)cb->remote_addr);
2269 
2270 	return krping_fr_test6(cb);
2271 }
2272 
2273 static void krping_run_server(struct krping_cb *cb)
2274 {
2275 	struct ib_recv_wr *bad_wr;
2276 	int ret;
2277 
2278 	ret = krping_bind_server(cb);
2279 	if (ret)
2280 		return;
2281 
2282 	ret = krping_setup_qp(cb, cb->child_cm_id);
2283 	if (ret) {
2284 		PRINTF(cb, "setup_qp failed: %d\n", ret);
2285 		goto err0;
2286 	}
2287 
2288 	ret = krping_setup_buffers(cb);
2289 	if (ret) {
2290 		PRINTF(cb, "krping_setup_buffers failed: %d\n", ret);
2291 		goto err1;
2292 	}
2293 
2294 	ret = ib_post_recv(cb->qp, &cb->rq_wr, &bad_wr);
2295 	if (ret) {
2296 		PRINTF(cb, "ib_post_recv failed: %d\n", ret);
2297 		goto err2;
2298 	}
2299 
2300 	ret = krping_accept(cb);
2301 	if (ret) {
2302 		PRINTF(cb, "connect error %d\n", ret);
2303 		goto err2;
2304 	}
2305 
2306 	if (cb->wlat)
2307 		krping_wlat_test_server(cb);
2308 	else if (cb->rlat)
2309 		krping_rlat_test_server(cb);
2310 	else if (cb->bw)
2311 		krping_bw_test_server(cb);
2312 	else if (cb->frtest) {
2313 		switch (cb->testnum) {
2314 		case 1:
2315 		case 2:
2316 		case 3:
2317 		case 4:
2318 			krping_fr_test_server(cb);
2319 			break;
2320 		case 5:
2321 			krping_fr_test5_server(cb);
2322 			break;
2323 		case 6:
2324 			krping_fr_test6_server(cb);
2325 			break;
2326 		default:
2327 			PRINTF(cb, "unknown fr test %d\n", cb->testnum);
2328 			goto err2;
2329 			break;
2330 		}
2331 	} else
2332 		krping_test_server(cb);
2333 	rdma_disconnect(cb->child_cm_id);
2334 err2:
2335 	krping_free_buffers(cb);
2336 err1:
2337 	krping_free_qp(cb);
2338 err0:
2339 	rdma_destroy_id(cb->child_cm_id);
2340 }
2341 
2342 static void krping_test_client(struct krping_cb *cb)
2343 {
2344 	int ping, start, cc, i, ret;
2345 	struct ib_send_wr *bad_wr;
2346 	unsigned char c;
2347 
2348 	start = 65;
2349 	for (ping = 0; !cb->count || ping < cb->count; ping++) {
2350 		cb->state = RDMA_READ_ADV;
2351 
2352 		/* Put some ascii text in the buffer. */
2353 		cc = sprintf(cb->start_buf, "rdma-ping-%d: ", ping);
2354 		for (i = cc, c = start; i < cb->size; i++) {
2355 			cb->start_buf[i] = c;
2356 			c++;
2357 			if (c > 122)
2358 				c = 65;
2359 		}
2360 		start++;
2361 		if (start > 122)
2362 			start = 65;
2363 		cb->start_buf[cb->size - 1] = 0;
2364 
2365 		krping_format_send(cb, cb->start_dma_addr);
2366 		if (cb->state == ERROR) {
2367 			PRINTF(cb, "krping_format_send failed\n");
2368 			break;
2369 		}
2370 		ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
2371 		if (ret) {
2372 			PRINTF(cb, "post send error %d\n", ret);
2373 			break;
2374 		}
2375 
2376 		/* Wait for server to ACK */
2377 		wait_event_interruptible(cb->sem, cb->state >= RDMA_WRITE_ADV);
2378 		if (cb->state != RDMA_WRITE_ADV) {
2379 			PRINTF(cb,
2380 			       "wait for RDMA_WRITE_ADV state %d\n",
2381 			       cb->state);
2382 			break;
2383 		}
2384 
2385 		krping_format_send(cb, cb->rdma_dma_addr);
2386 		ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
2387 		if (ret) {
2388 			PRINTF(cb, "post send error %d\n", ret);
2389 			break;
2390 		}
2391 
2392 		/* Wait for the server to say the RDMA Write is complete. */
2393 		wait_event_interruptible(cb->sem,
2394 					 cb->state >= RDMA_WRITE_COMPLETE);
2395 		if (cb->state != RDMA_WRITE_COMPLETE) {
2396 			PRINTF(cb,
2397 			       "wait for RDMA_WRITE_COMPLETE state %d\n",
2398 			       cb->state);
2399 			break;
2400 		}
2401 
2402 		if (cb->validate)
2403 			if (memcmp(cb->start_buf, cb->rdma_buf, cb->size)) {
2404 				PRINTF(cb, "data mismatch!\n");
2405 				break;
2406 			}
2407 
2408 		if (cb->verbose) {
2409 			if (strlen(cb->rdma_buf) > 128) {
2410 				char msgbuf[128];
2411 
2412 				strlcpy(msgbuf, cb->rdma_buf, sizeof(msgbuf));
2413 				PRINTF(cb, "ping data stripped: %s\n",
2414 				       msgbuf);
2415 			} else
2416 				PRINTF(cb, "ping data: %s\n", cb->rdma_buf);
2417 		}
2418 #ifdef SLOW_KRPING
2419 		wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2420 #endif
2421 	}
2422 }
2423 
2424 static void krping_rlat_test_client(struct krping_cb *cb)
2425 {
2426 	struct ib_send_wr *bad_wr;
2427 	struct ib_wc wc;
2428 	int ret;
2429 
2430 	cb->state = RDMA_READ_ADV;
2431 
2432 	/* Send STAG/TO/Len to client */
2433 	krping_format_send(cb, cb->start_dma_addr);
2434 	if (cb->state == ERROR) {
2435 		PRINTF(cb, "krping_format_send failed\n");
2436 		return;
2437 	}
2438 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
2439 	if (ret) {
2440 		PRINTF(cb, "post send error %d\n", ret);
2441 		return;
2442 	}
2443 
2444 	/* Spin waiting for send completion */
2445 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
2446 	if (ret < 0) {
2447 		PRINTF(cb, "poll error %d\n", ret);
2448 		return;
2449 	}
2450 	if (wc.status) {
2451 		PRINTF(cb, "send completion error %d\n", wc.status);
2452 		return;
2453 	}
2454 
2455 	/* Spin waiting for server's Start STAG/TO/Len */
2456 	while (cb->state < RDMA_WRITE_ADV) {
2457 		krping_cq_event_handler(cb->cq, cb);
2458 	}
2459 
2460 #if 0
2461 {
2462 	int i;
2463 	struct timeval start, stop;
2464 	time_t sec;
2465 	suseconds_t usec;
2466 	unsigned long long elapsed;
2467 	struct ib_wc wc;
2468 	struct ib_send_wr *bad_wr;
2469 	int ne;
2470 
2471 	cb->rdma_sq_wr.opcode = IB_WR_RDMA_WRITE;
2472 	cb->rdma_sq_wr.wr.rdma.rkey = cb->remote_rkey;
2473 	cb->rdma_sq_wr.wr.rdma.remote_addr = cb->remote_addr;
2474 	cb->rdma_sq_wr.sg_list->length = 0;
2475 	cb->rdma_sq_wr.num_sge = 0;
2476 
2477 	microtime(&start);
2478 	for (i=0; i < 100000; i++) {
2479 		if (ib_post_send(cb->qp, &cb->rdma_sq_wr, &bad_wr)) {
2480 			PRINTF(cb, "Couldn't post send\n");
2481 			return;
2482 		}
2483 		do {
2484 			ne = ib_poll_cq(cb->cq, 1, &wc);
2485 		} while (ne == 0);
2486 		if (ne < 0) {
2487 			PRINTF(cb, "poll CQ failed %d\n", ne);
2488 			return;
2489 		}
2490 		if (wc.status != IB_WC_SUCCESS) {
2491 			PRINTF(cb, "Completion wth error at %s:\n",
2492 				cb->server ? "server" : "client");
2493 			PRINTF(cb, "Failed status %d: wr_id %d\n",
2494 				wc.status, (int) wc.wr_id);
2495 			return;
2496 		}
2497 	}
2498 	microtime(&stop);
2499 
2500 	if (stop.tv_usec < start.tv_usec) {
2501 		stop.tv_usec += 1000000;
2502 		stop.tv_sec  -= 1;
2503 	}
2504 	sec     = stop.tv_sec - start.tv_sec;
2505 	usec    = stop.tv_usec - start.tv_usec;
2506 	elapsed = sec * 1000000 + usec;
2507 	PRINTF(cb, "0B-write-lat iters 100000 usec %llu\n", elapsed);
2508 }
2509 #endif
2510 
2511 	rlat_test(cb);
2512 }
2513 
2514 static void krping_wlat_test_client(struct krping_cb *cb)
2515 {
2516 	struct ib_send_wr *bad_wr;
2517 	struct ib_wc wc;
2518 	int ret;
2519 
2520 	cb->state = RDMA_READ_ADV;
2521 
2522 	/* Send STAG/TO/Len to client */
2523 	krping_format_send(cb, cb->start_dma_addr);
2524 	if (cb->state == ERROR) {
2525 		PRINTF(cb, "krping_format_send failed\n");
2526 		return;
2527 	}
2528 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
2529 	if (ret) {
2530 		PRINTF(cb, "post send error %d\n", ret);
2531 		return;
2532 	}
2533 
2534 	/* Spin waiting for send completion */
2535 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
2536 	if (ret < 0) {
2537 		PRINTF(cb, "poll error %d\n", ret);
2538 		return;
2539 	}
2540 	if (wc.status) {
2541 		PRINTF(cb, "send completion error %d\n", wc.status);
2542 		return;
2543 	}
2544 
2545 	/* Spin waiting for server's Start STAG/TO/Len */
2546 	while (cb->state < RDMA_WRITE_ADV) {
2547 		krping_cq_event_handler(cb->cq, cb);
2548 	}
2549 
2550 	wlat_test(cb);
2551 }
2552 
2553 static void krping_bw_test_client(struct krping_cb *cb)
2554 {
2555 	struct ib_send_wr *bad_wr;
2556 	struct ib_wc wc;
2557 	int ret;
2558 
2559 	cb->state = RDMA_READ_ADV;
2560 
2561 	/* Send STAG/TO/Len to client */
2562 	krping_format_send(cb, cb->start_dma_addr);
2563 	if (cb->state == ERROR) {
2564 		PRINTF(cb, "krping_format_send failed\n");
2565 		return;
2566 	}
2567 	ret = ib_post_send(cb->qp, &cb->sq_wr, &bad_wr);
2568 	if (ret) {
2569 		PRINTF(cb, "post send error %d\n", ret);
2570 		return;
2571 	}
2572 
2573 	/* Spin waiting for send completion */
2574 	while ((ret = ib_poll_cq(cb->cq, 1, &wc) == 0));
2575 	if (ret < 0) {
2576 		PRINTF(cb, "poll error %d\n", ret);
2577 		return;
2578 	}
2579 	if (wc.status) {
2580 		PRINTF(cb, "send completion error %d\n", wc.status);
2581 		return;
2582 	}
2583 
2584 	/* Spin waiting for server's Start STAG/TO/Len */
2585 	while (cb->state < RDMA_WRITE_ADV) {
2586 		krping_cq_event_handler(cb->cq, cb);
2587 	}
2588 
2589 	bw_test(cb);
2590 }
2591 
2592 
2593 /*
2594  * fastreg 2 valid different mrs and verify the completions.
2595  */
2596 static void krping_fr_test1(struct krping_cb *cb)
2597 {
2598 	struct ib_fast_reg_page_list *pl;
2599 	struct ib_send_wr fr, *bad;
2600 	struct ib_wc wc;
2601 	struct ib_mr *mr1, *mr2;
2602 	int i;
2603 	int ret;
2604 	int size = cb->size;
2605 	int plen = (((size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
2606 	int count = 0;
2607 
2608 	pl = ib_alloc_fast_reg_page_list(cb->qp->device, plen);
2609 	if (IS_ERR(pl)) {
2610 		PRINTF(cb, "ib_alloc_fast_reg_page_list failed %ld\n", PTR_ERR(pl));
2611 		return;
2612 	}
2613 
2614 	mr1 = ib_alloc_fast_reg_mr(cb->pd, plen);
2615 	if (IS_ERR(mr1)) {
2616 		PRINTF(cb, "ib_alloc_fast_reg_mr failed %ld\n", PTR_ERR(pl));
2617 		goto err1;
2618 	}
2619 	mr2 = ib_alloc_fast_reg_mr(cb->pd, plen);
2620 	if (IS_ERR(mr2)) {
2621 		PRINTF(cb, "ib_alloc_fast_reg_mr failed %ld\n", PTR_ERR(pl));
2622 		goto err2;
2623 	}
2624 
2625 
2626 	for (i=0; i<plen; i++)
2627 		pl->page_list[i] = i * PAGE_SIZE;
2628 
2629 	memset(&fr, 0, sizeof fr);
2630 	fr.opcode = IB_WR_FAST_REG_MR;
2631 	fr.wr_id = 1;
2632 	fr.wr.fast_reg.page_shift = PAGE_SHIFT;
2633 	fr.wr.fast_reg.length = size;
2634 	fr.wr.fast_reg.page_list = pl;
2635 	fr.wr.fast_reg.page_list_len = plen;
2636 	fr.wr.fast_reg.iova_start = 0;
2637 	fr.wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
2638 	fr.send_flags = IB_SEND_SIGNALED;
2639 	fr.wr.fast_reg.rkey = mr1->rkey;
2640 	DEBUG_LOG(cb, "%s fr1: stag 0x%x plen %u size %u depth %u\n", __func__, fr.wr.fast_reg.rkey, plen, cb->size, cb->txdepth);
2641 	ret = ib_post_send(cb->qp, &fr, &bad);
2642 	if (ret) {
2643 		PRINTF(cb, "ib_post_send failed %d\n", ret);
2644 		goto err3;
2645 	}
2646 	fr.wr.fast_reg.rkey = mr2->rkey;
2647 	DEBUG_LOG(cb, "%s fr2: stag 0x%x plen %u size %u depth %u\n", __func__, fr.wr.fast_reg.rkey, plen, cb->size, cb->txdepth);
2648 	ret = ib_post_send(cb->qp, &fr, &bad);
2649 	if (ret) {
2650 		PRINTF(cb, "ib_post_send failed %d\n", ret);
2651 		goto err3;
2652 	}
2653 
2654 	DEBUG_LOG(cb, "sleeping 1 second\n");
2655 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2656 	do {
2657 		ret = ib_poll_cq(cb->cq, 1, &wc);
2658 		if (ret < 0) {
2659 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2660 			goto err3;
2661 		}
2662 		if (ret == 1) {
2663 			DEBUG_LOG(cb, "completion status %u wr %s\n",
2664 				  wc.status, wc.wr_id == 1 ? "fr" : "inv");
2665 			count++;
2666 		} else if (krping_sigpending()) {
2667 			PRINTF(cb, "signal!\n");
2668 			goto err3;
2669 		}
2670 
2671 		wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2672 	} while (count != 2);
2673 err3:
2674 	DEBUG_LOG(cb, "sleeping 1 second\n");
2675 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2676 	DEBUG_LOG(cb, "draining the cq...\n");
2677 	do {
2678 		ret = ib_poll_cq(cb->cq, 1, &wc);
2679 		if (ret < 0) {
2680 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2681 			break;
2682 		}
2683 		if (ret == 1) {
2684 			PRINTF(cb, "completion %u opcode %u\n", wc.status, wc.opcode);
2685 		}
2686 	} while (ret == 1);
2687 	DEBUG_LOG(cb, "destroying fr mr2!\n");
2688 
2689 	ib_dereg_mr(mr2);
2690 err2:
2691 	DEBUG_LOG(cb, "destroying fr mr1!\n");
2692 	ib_dereg_mr(mr1);
2693 err1:
2694 	DEBUG_LOG(cb, "destroying fr page list!\n");
2695 	ib_free_fast_reg_page_list(pl);
2696 	DEBUG_LOG(cb, "%s done!\n", __func__);
2697 }
2698 
2699 /*
2700  * fastreg the same mr twice, 2nd one should produce error cqe.
2701  */
2702 static void krping_fr_test2(struct krping_cb *cb)
2703 {
2704 	struct ib_fast_reg_page_list *pl;
2705 	struct ib_send_wr fr, *bad;
2706 	struct ib_wc wc;
2707 	struct ib_mr *mr1;
2708 	int i;
2709 	int ret;
2710 	int size = cb->size;
2711 	int plen = (((size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
2712 	int count = 0;
2713 
2714 	pl = ib_alloc_fast_reg_page_list(cb->qp->device, plen);
2715 	if (IS_ERR(pl)) {
2716 		PRINTF(cb, "ib_alloc_fast_reg_page_list failed %ld\n", PTR_ERR(pl));
2717 		return;
2718 	}
2719 
2720 	mr1 = ib_alloc_fast_reg_mr(cb->pd, plen);
2721 	if (IS_ERR(mr1)) {
2722 		PRINTF(cb, "ib_alloc_fast_reg_mr failed %ld\n", PTR_ERR(pl));
2723 		goto err1;
2724 	}
2725 
2726 	for (i=0; i<plen; i++)
2727 		pl->page_list[i] = i * PAGE_SIZE;
2728 
2729 	memset(&fr, 0, sizeof fr);
2730 	fr.opcode = IB_WR_FAST_REG_MR;
2731 	fr.wr_id = 1;
2732 	fr.wr.fast_reg.page_shift = PAGE_SHIFT;
2733 	fr.wr.fast_reg.length = size;
2734 	fr.wr.fast_reg.page_list = pl;
2735 	fr.wr.fast_reg.page_list_len = plen;
2736 	fr.wr.fast_reg.iova_start = 0;
2737 	fr.wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
2738 	fr.send_flags = IB_SEND_SIGNALED;
2739 	fr.wr.fast_reg.rkey = mr1->rkey;
2740 	DEBUG_LOG(cb, "%s fr1: stag 0x%x plen %u size %u depth %u\n", __func__, fr.wr.fast_reg.rkey, plen, cb->size, cb->txdepth);
2741 	ret = ib_post_send(cb->qp, &fr, &bad);
2742 	if (ret) {
2743 		PRINTF(cb, "ib_post_send failed %d\n", ret);
2744 		goto err3;
2745 	}
2746 	DEBUG_LOG(cb, "%s fr2: stag 0x%x plen %u size %u depth %u\n", __func__, fr.wr.fast_reg.rkey, plen, cb->size, cb->txdepth);
2747 	ret = ib_post_send(cb->qp, &fr, &bad);
2748 	if (ret) {
2749 		PRINTF(cb, "ib_post_send failed %d\n", ret);
2750 		goto err3;
2751 	}
2752 
2753 	DEBUG_LOG(cb, "sleeping 1 second\n");
2754 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2755 	do {
2756 		ret = ib_poll_cq(cb->cq, 1, &wc);
2757 		if (ret < 0) {
2758 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2759 			goto err3;
2760 		}
2761 		if (ret == 1) {
2762 			DEBUG_LOG(cb, "completion status %u wr %s\n",
2763 				  wc.status, wc.wr_id == 1 ? "fr" : "inv");
2764 			count++;
2765 		} else if (krping_sigpending()) {
2766 			PRINTF(cb, "signal!\n");
2767 			goto err3;
2768 		}
2769 		wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2770 	} while (count != 2);
2771 err3:
2772 	DEBUG_LOG(cb, "sleeping 1 second\n");
2773 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2774 	DEBUG_LOG(cb, "draining the cq...\n");
2775 	do {
2776 		ret = ib_poll_cq(cb->cq, 1, &wc);
2777 		if (ret < 0) {
2778 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2779 			break;
2780 		}
2781 		if (ret == 1) {
2782 			PRINTF(cb, "completion %u opcode %u\n", wc.status, wc.opcode);
2783 		}
2784 	} while (ret == 1);
2785 	DEBUG_LOG(cb, "destroying fr mr1!\n");
2786 	ib_dereg_mr(mr1);
2787 err1:
2788 	DEBUG_LOG(cb, "destroying fr page list!\n");
2789 	ib_free_fast_reg_page_list(pl);
2790 	DEBUG_LOG(cb, "%s done!\n", __func__);
2791 }
2792 
2793 /*
2794  * fastreg pipelined in a loop as fast as we can until the user interrupts.
2795  * NOTE: every 9 seconds we sleep for 1 second to keep the kernel happy.
2796  */
2797 static void krping_fr_test3(struct krping_cb *cb)
2798 {
2799 	struct ib_fast_reg_page_list *pl;
2800 	struct ib_send_wr fr, inv, *bad;
2801 	struct ib_wc wc;
2802 	u8 key = 0;
2803 	struct ib_mr *mr;
2804 	int i;
2805 	int ret;
2806 	int size = cb->size;
2807 	int plen = (((size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
2808 	unsigned long start;
2809 	int count = 0;
2810 	int scnt = 0;
2811 
2812 
2813 	pl = ib_alloc_fast_reg_page_list(cb->qp->device, plen);
2814 	if (IS_ERR(pl)) {
2815 		PRINTF(cb, "ib_alloc_fast_reg_page_list failed %ld\n", PTR_ERR(pl));
2816 		return;
2817 	}
2818 
2819 	mr = ib_alloc_fast_reg_mr(cb->pd, plen);
2820 	if (IS_ERR(mr)) {
2821 		PRINTF(cb, "ib_alloc_fast_reg_mr failed %ld\n", PTR_ERR(pl));
2822 		goto err1;
2823 	}
2824 
2825 	for (i=0; i<plen; i++)
2826 		pl->page_list[i] = i * PAGE_SIZE;
2827 
2828 	memset(&fr, 0, sizeof fr);
2829 	fr.opcode = IB_WR_FAST_REG_MR;
2830 	fr.wr.fast_reg.page_shift = PAGE_SHIFT;
2831 	fr.wr.fast_reg.length = size;
2832 	fr.wr.fast_reg.page_list = pl;
2833 	fr.wr.fast_reg.page_list_len = plen;
2834 	fr.wr.fast_reg.iova_start = 0;
2835 	fr.send_flags = IB_SEND_SIGNALED;
2836 	fr.wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
2837 	fr.next = &inv;
2838 	memset(&inv, 0, sizeof inv);
2839 	inv.opcode = IB_WR_LOCAL_INV;
2840 	inv.send_flags = IB_SEND_SIGNALED;
2841 
2842 	DEBUG_LOG(cb, "fr_test: stag index 0x%x plen %u size %u depth %u\n", mr->rkey >> 8, plen, cb->size, cb->txdepth);
2843 	start = time_uptime;
2844 	while (1) {
2845 		if ((time_uptime - start) >= 9) {
2846 			DEBUG_LOG(cb, "fr_test: pausing 1 second! count %u latest size %u plen %u\n", count, size, plen);
2847 			wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2848 			if (cb->state == ERROR)
2849 				break;
2850 			start = time_uptime;
2851 		}
2852 		while (scnt < (cb->txdepth>>1)) {
2853 			ib_update_fast_reg_key(mr, ++key);
2854 			fr.wr.fast_reg.rkey = mr->rkey;
2855 			inv.ex.invalidate_rkey = mr->rkey;
2856 			size = arc4random() % cb->size;
2857 			if (size == 0)
2858 				size = cb->size;
2859 			plen = (((size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
2860 			fr.wr.fast_reg.length = size;
2861 			fr.wr.fast_reg.page_list_len = plen;
2862 			ret = ib_post_send(cb->qp, &fr, &bad);
2863 			if (ret) {
2864 				PRINTF(cb, "ib_post_send failed %d\n", ret);
2865 				goto err2;
2866 			}
2867 			scnt+=2;
2868 		}
2869 
2870 		do {
2871 			ret = ib_poll_cq(cb->cq, 1, &wc);
2872 			if (ret < 0) {
2873 				PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2874 				goto err2;
2875 			}
2876 			if (ret == 1) {
2877 				if (wc.status) {
2878 					PRINTF(cb, "completion error %u\n", wc.status);
2879 					goto err2;
2880 				}
2881 				count++;
2882 				scnt--;
2883 			}
2884 			else if (krping_sigpending()) {
2885 				PRINTF(cb, "signal!\n");
2886 				goto err2;
2887 			}
2888 		} while (ret == 1);
2889 	}
2890 err2:
2891 	DEBUG_LOG(cb, "sleeping 1 second\n");
2892 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2893 	DEBUG_LOG(cb, "draining the cq...\n");
2894 	do {
2895 		ret = ib_poll_cq(cb->cq, 1, &wc);
2896 		if (ret < 0) {
2897 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2898 			break;
2899 		}
2900 		if (ret == 1) {
2901 			if (wc.status) {
2902 				PRINTF(cb, "completion error %u opcode %u\n", wc.status, wc.opcode);
2903 			}
2904 		}
2905 	} while (ret == 1);
2906 	DEBUG_LOG(cb, "fr_test: done!\n");
2907 	ib_dereg_mr(mr);
2908 err1:
2909 	DEBUG_LOG(cb, "destroying fr page list!\n");
2910 	ib_free_fast_reg_page_list(pl);
2911 	DEBUG_LOG(cb, "%s done!\n", __func__);
2912 }
2913 
2914 /*
2915  * fastreg 1 and invalidate 1 mr and verify completion.
2916  */
2917 static void krping_fr_test4(struct krping_cb *cb)
2918 {
2919 	struct ib_fast_reg_page_list *pl;
2920 	struct ib_send_wr fr, inv, *bad;
2921 	struct ib_wc wc;
2922 	struct ib_mr *mr1;
2923 	int i;
2924 	int ret;
2925 	int size = cb->size;
2926 	int plen = (((size - 1) & PAGE_MASK) + PAGE_SIZE) >> PAGE_SHIFT;
2927 	int count = 0;
2928 
2929 	pl = ib_alloc_fast_reg_page_list(cb->qp->device, plen);
2930 	if (IS_ERR(pl)) {
2931 		PRINTF(cb, "ib_alloc_fast_reg_page_list failed %ld\n", PTR_ERR(pl));
2932 		return;
2933 	}
2934 
2935 	mr1 = ib_alloc_fast_reg_mr(cb->pd, plen);
2936 	if (IS_ERR(mr1)) {
2937 		PRINTF(cb, "ib_alloc_fast_reg_mr failed %ld\n", PTR_ERR(pl));
2938 		goto err1;
2939 	}
2940 
2941 	for (i=0; i<plen; i++)
2942 		pl->page_list[i] = i * PAGE_SIZE;
2943 
2944 	memset(&fr, 0, sizeof fr);
2945 	fr.opcode = IB_WR_FAST_REG_MR;
2946 	fr.wr_id = 1;
2947 	fr.wr.fast_reg.page_shift = PAGE_SHIFT;
2948 	fr.wr.fast_reg.length = size;
2949 	fr.wr.fast_reg.page_list = pl;
2950 	fr.wr.fast_reg.page_list_len = plen;
2951 	fr.wr.fast_reg.iova_start = 0;
2952 	fr.wr.fast_reg.access_flags = IB_ACCESS_REMOTE_WRITE | IB_ACCESS_LOCAL_WRITE;
2953 	fr.send_flags = IB_SEND_SIGNALED;
2954 	fr.wr.fast_reg.rkey = mr1->rkey;
2955 	fr.next = &inv;
2956 	memset(&inv, 0, sizeof inv);
2957 	inv.opcode = IB_WR_LOCAL_INV;
2958 	inv.ex.invalidate_rkey = mr1->rkey;
2959 
2960 	DEBUG_LOG(cb, "%s fr1: stag 0x%x plen %u size %u depth %u\n", __func__, fr.wr.fast_reg.rkey, plen, cb->size, cb->txdepth);
2961 	ret = ib_post_send(cb->qp, &fr, &bad);
2962 	if (ret) {
2963 		PRINTF(cb, "ib_post_send failed %d\n", ret);
2964 		goto err3;
2965 	}
2966 	DEBUG_LOG(cb, "sleeping 1 second\n");
2967 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2968 	do {
2969 		ret = ib_poll_cq(cb->cq, 1, &wc);
2970 		if (ret < 0) {
2971 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2972 			goto err3;
2973 		}
2974 		if (ret == 1) {
2975 			DEBUG_LOG(cb, "completion status %u wr %s\n",
2976 				  wc.status, wc.wr_id == 1 ? "fr" : "inv");
2977 			count++;
2978 		} else if (krping_sigpending()) {
2979 			PRINTF(cb, "signal!\n");
2980 			goto err3;
2981 		}
2982 		wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2983 	} while (count != 1);
2984 err3:
2985 	DEBUG_LOG(cb, "sleeping 1 second\n");
2986 	wait_event_interruptible_timeout(cb->sem, cb->state == ERROR, HZ);
2987 	DEBUG_LOG(cb, "draining the cq...\n");
2988 	do {
2989 		ret = ib_poll_cq(cb->cq, 1, &wc);
2990 		if (ret < 0) {
2991 			PRINTF(cb, "ib_poll_cq failed %d\n", ret);
2992 			break;
2993 		}
2994 		if (ret == 1) {
2995 			PRINTF(cb, "completion %u opcode %u\n", wc.status, wc.opcode);
2996 		}
2997 	} while (ret == 1);
2998 	DEBUG_LOG(cb, "destroying fr mr1!\n");
2999 	ib_dereg_mr(mr1);
3000 err1:
3001 	DEBUG_LOG(cb, "destroying fr page list!\n");
3002 	ib_free_fast_reg_page_list(pl);
3003 	DEBUG_LOG(cb, "%s done!\n", __func__);
3004 }
3005 
3006 static void krping_fr_test(struct krping_cb *cb)
3007 {
3008 	switch (cb->testnum) {
3009 	case 1:
3010 		krping_fr_test1(cb);
3011 		break;
3012 	case 2:
3013 		krping_fr_test2(cb);
3014 		break;
3015 	case 3:
3016 		krping_fr_test3(cb);
3017 		break;
3018 	case 4:
3019 		krping_fr_test4(cb);
3020 		break;
3021 	case 5:
3022 		krping_fr_test5_client(cb);
3023 		break;
3024 	case 6:
3025 		krping_fr_test6_client(cb);
3026 		break;
3027 	default:
3028 		PRINTF(cb, "Unkown frtest num %u\n", cb->testnum);
3029 		break;
3030 	}
3031 }
3032 
3033 static int krping_connect_client(struct krping_cb *cb)
3034 {
3035 	struct rdma_conn_param conn_param;
3036 	int ret;
3037 
3038 	memset(&conn_param, 0, sizeof conn_param);
3039 	conn_param.responder_resources = 1;
3040 	conn_param.initiator_depth = 1;
3041 	conn_param.retry_count = 10;
3042 
3043 	ret = rdma_connect(cb->cm_id, &conn_param);
3044 	if (ret) {
3045 		PRINTF(cb, "rdma_connect error %d\n", ret);
3046 		return ret;
3047 	}
3048 
3049 	wait_event_interruptible(cb->sem, cb->state >= CONNECTED);
3050 	if (cb->state == ERROR) {
3051 		PRINTF(cb, "wait for CONNECTED state %d\n", cb->state);
3052 		return -1;
3053 	}
3054 
3055 	DEBUG_LOG(cb, "rdma_connect successful\n");
3056 	return 0;
3057 }
3058 
3059 static int krping_bind_client(struct krping_cb *cb)
3060 {
3061 	struct sockaddr_in sin;
3062 	int ret;
3063 
3064 	memset(&sin, 0, sizeof(sin));
3065 	sin.sin_len = sizeof sin;
3066 	sin.sin_family = AF_INET;
3067 	sin.sin_addr.s_addr = cb->addr.s_addr;
3068 	sin.sin_port = cb->port;
3069 
3070 	ret = rdma_resolve_addr(cb->cm_id, NULL, (struct sockaddr *) &sin,
3071 				2000);
3072 	if (ret) {
3073 		PRINTF(cb, "rdma_resolve_addr error %d\n", ret);
3074 		return ret;
3075 	}
3076 
3077 	wait_event_interruptible(cb->sem, cb->state >= ROUTE_RESOLVED);
3078 	if (cb->state != ROUTE_RESOLVED) {
3079 		PRINTF(cb,
3080 		       "addr/route resolution did not resolve: state %d\n",
3081 		       cb->state);
3082 		return -EINTR;
3083 	}
3084 
3085 	if (cb->mem == FASTREG && !fastreg_supported(cb, 0))
3086 		return -EINVAL;
3087 
3088 	DEBUG_LOG(cb, "rdma_resolve_addr - rdma_resolve_route successful\n");
3089 	return 0;
3090 }
3091 
3092 static void krping_run_client(struct krping_cb *cb)
3093 {
3094 	struct ib_recv_wr *bad_wr;
3095 	int ret;
3096 
3097 	ret = krping_bind_client(cb);
3098 	if (ret)
3099 		return;
3100 
3101 	ret = krping_setup_qp(cb, cb->cm_id);
3102 	if (ret) {
3103 		PRINTF(cb, "setup_qp failed: %d\n", ret);
3104 		return;
3105 	}
3106 
3107 	ret = krping_setup_buffers(cb);
3108 	if (ret) {
3109 		PRINTF(cb, "krping_setup_buffers failed: %d\n", ret);
3110 		goto err1;
3111 	}
3112 
3113 	ret = ib_post_recv(cb->qp, &cb->rq_wr, &bad_wr);
3114 	if (ret) {
3115 		PRINTF(cb, "ib_post_recv failed: %d\n", ret);
3116 		goto err2;
3117 	}
3118 
3119 	ret = krping_connect_client(cb);
3120 	if (ret) {
3121 		PRINTF(cb, "connect error %d\n", ret);
3122 		goto err2;
3123 	}
3124 
3125 	if (cb->wlat)
3126 		krping_wlat_test_client(cb);
3127 	else if (cb->rlat)
3128 		krping_rlat_test_client(cb);
3129 	else if (cb->bw)
3130 		krping_bw_test_client(cb);
3131 	else if (cb->frtest)
3132 		krping_fr_test(cb);
3133 	else
3134 		krping_test_client(cb);
3135 	rdma_disconnect(cb->cm_id);
3136 err2:
3137 	krping_free_buffers(cb);
3138 err1:
3139 	krping_free_qp(cb);
3140 }
3141 
3142 int krping_doit(char *cmd, void *cookie)
3143 {
3144 	struct krping_cb *cb;
3145 	int op;
3146 	int ret = 0;
3147 	char *optarg;
3148 	unsigned long optint;
3149 
3150 	cb = kzalloc(sizeof(*cb), GFP_KERNEL);
3151 	if (!cb)
3152 		return -ENOMEM;
3153 
3154 	mutex_lock(&krping_mutex);
3155 	list_add_tail(&cb->list, &krping_cbs);
3156 	mutex_unlock(&krping_mutex);
3157 
3158 	cb->cookie = cookie;
3159 	cb->server = -1;
3160 	cb->state = IDLE;
3161 	cb->size = 64;
3162 	cb->txdepth = RPING_SQ_DEPTH;
3163 	cb->mem = DMA;
3164 	init_waitqueue_head(&cb->sem);
3165 
3166 	while ((op = krping_getopt("krping", &cmd, krping_opts, NULL, &optarg,
3167 			      &optint)) != 0) {
3168 		switch (op) {
3169 		case 'a':
3170 			cb->addr_str = optarg;
3171 			DEBUG_LOG(cb, "ipaddr (%s)\n", optarg);
3172 			if (!inet_aton(optarg, &cb->addr)) {
3173 				PRINTF(cb, "bad addr string %s\n",
3174 				    optarg);
3175 				ret = EINVAL;
3176 			}
3177 			break;
3178 		case 'p':
3179 			cb->port = htons(optint);
3180 			DEBUG_LOG(cb, "port %d\n", (int)optint);
3181 			break;
3182 		case 'P':
3183 			cb->poll = 1;
3184 			DEBUG_LOG(cb, "server\n");
3185 			break;
3186 		case 's':
3187 			cb->server = 1;
3188 			DEBUG_LOG(cb, "server\n");
3189 			break;
3190 		case 'c':
3191 			cb->server = 0;
3192 			DEBUG_LOG(cb, "client\n");
3193 			break;
3194 		case 'S':
3195 			cb->size = optint;
3196 			if ((cb->size < 1) ||
3197 			    (cb->size > RPING_BUFSIZE)) {
3198 				PRINTF(cb, "Invalid size %d "
3199 				       "(valid range is 1 to %d)\n",
3200 				       cb->size, RPING_BUFSIZE);
3201 				ret = EINVAL;
3202 			} else
3203 				DEBUG_LOG(cb, "size %d\n", (int)optint);
3204 			break;
3205 		case 'C':
3206 			cb->count = optint;
3207 			if (cb->count < 0) {
3208 				PRINTF(cb, "Invalid count %d\n",
3209 					cb->count);
3210 				ret = EINVAL;
3211 			} else
3212 				DEBUG_LOG(cb, "count %d\n", (int) cb->count);
3213 			break;
3214 		case 'v':
3215 			cb->verbose++;
3216 			DEBUG_LOG(cb, "verbose\n");
3217 			break;
3218 		case 'V':
3219 			cb->validate++;
3220 			DEBUG_LOG(cb, "validate data\n");
3221 			break;
3222 		case 'l':
3223 			cb->wlat++;
3224 			break;
3225 		case 'L':
3226 			cb->rlat++;
3227 			break;
3228 		case 'B':
3229 			cb->bw++;
3230 			break;
3231 		case 'd':
3232 			cb->duplex++;
3233 			break;
3234 		case 'm':
3235 			if (!strncmp(optarg, "dma", 3))
3236 				cb->mem = DMA;
3237 			else if (!strncmp(optarg, "fastreg", 7))
3238 				cb->mem = FASTREG;
3239 			else if (!strncmp(optarg, "mw", 2))
3240 				cb->mem = MW;
3241 			else if (!strncmp(optarg, "mr", 2))
3242 				cb->mem = MR;
3243 			else {
3244 				PRINTF(cb, "unknown mem mode %s.  "
3245 					"Must be dma, fastreg, mw, or mr\n",
3246 					optarg);
3247 				ret = -EINVAL;
3248 				break;
3249 			}
3250 			break;
3251 		case 'I':
3252 			cb->server_invalidate = 1;
3253 			break;
3254 		case 'T':
3255 			cb->txdepth = optint;
3256 			DEBUG_LOG(cb, "txdepth %d\n", (int) cb->txdepth);
3257 			break;
3258 		case 'Z':
3259 			cb->local_dma_lkey = 1;
3260 			DEBUG_LOG(cb, "using local dma lkey\n");
3261 			break;
3262 		case 'R':
3263 			cb->read_inv = 1;
3264 			DEBUG_LOG(cb, "using read-with-inv\n");
3265 			break;
3266 		case 'f':
3267 			cb->frtest = 1;
3268 			cb->testnum = optint;
3269 			DEBUG_LOG(cb, "fast-reg test!\n");
3270 			break;
3271 		default:
3272 			PRINTF(cb, "unknown opt %s\n", optarg);
3273 			ret = -EINVAL;
3274 			break;
3275 		}
3276 	}
3277 	if (ret)
3278 		goto out;
3279 
3280 	if (cb->server == -1) {
3281 		PRINTF(cb, "must be either client or server\n");
3282 		ret = -EINVAL;
3283 		goto out;
3284 	}
3285 
3286 	if ((cb->frtest + cb->bw + cb->rlat + cb->wlat) > 1) {
3287 		PRINTF(cb, "Pick only one test: fr, bw, rlat, wlat\n");
3288 		ret = -EINVAL;
3289 		goto out;
3290 	}
3291 	if (cb->server_invalidate && cb->mem != FASTREG) {
3292 		PRINTF(cb, "server_invalidate only valid with fastreg mem_mode\n");
3293 		ret = -EINVAL;
3294 		goto out;
3295 	}
3296 
3297 	if (cb->read_inv && cb->mem != FASTREG) {
3298 		PRINTF(cb, "read_inv only valid with fastreg mem_mode\n");
3299 		ret = -EINVAL;
3300 		goto out;
3301 	}
3302 
3303 	if (cb->mem != MR && (cb->wlat || cb->rlat || cb->bw || cb->frtest)) {
3304 		PRINTF(cb, "wlat, rlat, and bw tests only support mem_mode MR\n");
3305 		ret = -EINVAL;
3306 		goto out;
3307 	}
3308 
3309 	cb->cm_id = rdma_create_id(krping_cma_event_handler, cb, RDMA_PS_TCP, IB_QPT_RC);
3310 	if (IS_ERR(cb->cm_id)) {
3311 		ret = PTR_ERR(cb->cm_id);
3312 		PRINTF(cb, "rdma_create_id error %d\n", ret);
3313 		goto out;
3314 	}
3315 	DEBUG_LOG(cb, "created cm_id %p\n", cb->cm_id);
3316 
3317 	if (cb->server)
3318 		krping_run_server(cb);
3319 	else
3320 		krping_run_client(cb);
3321 
3322 	DEBUG_LOG(cb, "destroy cm_id %p\n", cb->cm_id);
3323 	rdma_destroy_id(cb->cm_id);
3324 out:
3325 	mutex_lock(&krping_mutex);
3326 	list_del(&cb->list);
3327 	mutex_unlock(&krping_mutex);
3328 	kfree(cb);
3329 	return ret;
3330 }
3331 
3332 void
3333 krping_walk_cb_list(void (*f)(struct krping_stats *, void *), void *arg)
3334 {
3335 	struct krping_cb *cb;
3336 
3337 	mutex_lock(&krping_mutex);
3338 	list_for_each_entry(cb, &krping_cbs, list)
3339 	    (*f)(cb->pd ? &cb->stats : NULL, arg);
3340 	mutex_unlock(&krping_mutex);
3341 }
3342 
3343 void krping_init(void)
3344 {
3345 
3346 	mutex_init(&krping_mutex);
3347 }
3348