xref: /linux/drivers/infiniband/hw/irdma/cm.c (revision 34f7c6e7d4396090692a09789db231e12cb4762b)
1 // SPDX-License-Identifier: GPL-2.0 or Linux-OpenIB
2 /* Copyright (c) 2015 - 2021 Intel Corporation */
3 #include "main.h"
4 #include "trace.h"
5 
6 static void irdma_cm_post_event(struct irdma_cm_event *event);
7 static void irdma_disconnect_worker(struct work_struct *work);
8 
9 /**
10  * irdma_free_sqbuf - put back puda buffer if refcount is 0
11  * @vsi: The VSI structure of the device
12  * @bufp: puda buffer to free
13  */
14 void irdma_free_sqbuf(struct irdma_sc_vsi *vsi, void *bufp)
15 {
16 	struct irdma_puda_buf *buf = bufp;
17 	struct irdma_puda_rsrc *ilq = vsi->ilq;
18 
19 	if (refcount_dec_and_test(&buf->refcount))
20 		irdma_puda_ret_bufpool(ilq, buf);
21 }
22 
23 /**
24  * irdma_record_ird_ord - Record IRD/ORD passed in
25  * @cm_node: connection's node
26  * @conn_ird: connection IRD
27  * @conn_ord: connection ORD
28  */
29 static void irdma_record_ird_ord(struct irdma_cm_node *cm_node, u32 conn_ird,
30 				 u32 conn_ord)
31 {
32 	if (conn_ird > cm_node->dev->hw_attrs.max_hw_ird)
33 		conn_ird = cm_node->dev->hw_attrs.max_hw_ird;
34 
35 	if (conn_ord > cm_node->dev->hw_attrs.max_hw_ord)
36 		conn_ord = cm_node->dev->hw_attrs.max_hw_ord;
37 	else if (!conn_ord && cm_node->send_rdma0_op == SEND_RDMA_READ_ZERO)
38 		conn_ord = 1;
39 	cm_node->ird_size = conn_ird;
40 	cm_node->ord_size = conn_ord;
41 }
42 
43 /**
44  * irdma_copy_ip_ntohl - copy IP address from  network to host
45  * @dst: IP address in host order
46  * @src: IP address in network order (big endian)
47  */
48 void irdma_copy_ip_ntohl(u32 *dst, __be32 *src)
49 {
50 	*dst++ = ntohl(*src++);
51 	*dst++ = ntohl(*src++);
52 	*dst++ = ntohl(*src++);
53 	*dst = ntohl(*src);
54 }
55 
56 /**
57  * irdma_copy_ip_htonl - copy IP address from host to network order
58  * @dst: IP address in network order (big endian)
59  * @src: IP address in host order
60  */
61 void irdma_copy_ip_htonl(__be32 *dst, u32 *src)
62 {
63 	*dst++ = htonl(*src++);
64 	*dst++ = htonl(*src++);
65 	*dst++ = htonl(*src++);
66 	*dst = htonl(*src);
67 }
68 
69 /**
70  * irdma_get_addr_info
71  * @cm_node: contains ip/tcp info
72  * @cm_info: to get a copy of the cm_node ip/tcp info
73  */
74 static void irdma_get_addr_info(struct irdma_cm_node *cm_node,
75 				struct irdma_cm_info *cm_info)
76 {
77 	memset(cm_info, 0, sizeof(*cm_info));
78 	cm_info->ipv4 = cm_node->ipv4;
79 	cm_info->vlan_id = cm_node->vlan_id;
80 	memcpy(cm_info->loc_addr, cm_node->loc_addr, sizeof(cm_info->loc_addr));
81 	memcpy(cm_info->rem_addr, cm_node->rem_addr, sizeof(cm_info->rem_addr));
82 	cm_info->loc_port = cm_node->loc_port;
83 	cm_info->rem_port = cm_node->rem_port;
84 }
85 
86 /**
87  * irdma_fill_sockaddr4 - fill in addr info for IPv4 connection
88  * @cm_node: connection's node
89  * @event: upper layer's cm event
90  */
91 static inline void irdma_fill_sockaddr4(struct irdma_cm_node *cm_node,
92 					struct iw_cm_event *event)
93 {
94 	struct sockaddr_in *laddr = (struct sockaddr_in *)&event->local_addr;
95 	struct sockaddr_in *raddr = (struct sockaddr_in *)&event->remote_addr;
96 
97 	laddr->sin_family = AF_INET;
98 	raddr->sin_family = AF_INET;
99 
100 	laddr->sin_port = htons(cm_node->loc_port);
101 	raddr->sin_port = htons(cm_node->rem_port);
102 
103 	laddr->sin_addr.s_addr = htonl(cm_node->loc_addr[0]);
104 	raddr->sin_addr.s_addr = htonl(cm_node->rem_addr[0]);
105 }
106 
107 /**
108  * irdma_fill_sockaddr6 - fill in addr info for IPv6 connection
109  * @cm_node: connection's node
110  * @event: upper layer's cm event
111  */
112 static inline void irdma_fill_sockaddr6(struct irdma_cm_node *cm_node,
113 					struct iw_cm_event *event)
114 {
115 	struct sockaddr_in6 *laddr6 = (struct sockaddr_in6 *)&event->local_addr;
116 	struct sockaddr_in6 *raddr6 = (struct sockaddr_in6 *)&event->remote_addr;
117 
118 	laddr6->sin6_family = AF_INET6;
119 	raddr6->sin6_family = AF_INET6;
120 
121 	laddr6->sin6_port = htons(cm_node->loc_port);
122 	raddr6->sin6_port = htons(cm_node->rem_port);
123 
124 	irdma_copy_ip_htonl(laddr6->sin6_addr.in6_u.u6_addr32,
125 			    cm_node->loc_addr);
126 	irdma_copy_ip_htonl(raddr6->sin6_addr.in6_u.u6_addr32,
127 			    cm_node->rem_addr);
128 }
129 
130 /**
131  * irdma_get_cmevent_info - for cm event upcall
132  * @cm_node: connection's node
133  * @cm_id: upper layers cm struct for the event
134  * @event: upper layer's cm event
135  */
136 static inline void irdma_get_cmevent_info(struct irdma_cm_node *cm_node,
137 					  struct iw_cm_id *cm_id,
138 					  struct iw_cm_event *event)
139 {
140 	memcpy(&event->local_addr, &cm_id->m_local_addr,
141 	       sizeof(event->local_addr));
142 	memcpy(&event->remote_addr, &cm_id->m_remote_addr,
143 	       sizeof(event->remote_addr));
144 	if (cm_node) {
145 		event->private_data = cm_node->pdata_buf;
146 		event->private_data_len = (u8)cm_node->pdata.size;
147 		event->ird = cm_node->ird_size;
148 		event->ord = cm_node->ord_size;
149 	}
150 }
151 
152 /**
153  * irdma_send_cm_event - upcall cm's event handler
154  * @cm_node: connection's node
155  * @cm_id: upper layer's cm info struct
156  * @type: Event type to indicate
157  * @status: status for the event type
158  */
159 static int irdma_send_cm_event(struct irdma_cm_node *cm_node,
160 			       struct iw_cm_id *cm_id,
161 			       enum iw_cm_event_type type, int status)
162 {
163 	struct iw_cm_event event = {};
164 
165 	event.event = type;
166 	event.status = status;
167 	trace_irdma_send_cm_event(cm_node, cm_id, type, status,
168 				  __builtin_return_address(0));
169 
170 	ibdev_dbg(&cm_node->iwdev->ibdev,
171 		  "CM: cm_node %p cm_id=%p state=%d accel=%d event_type=%d status=%d\n",
172 		  cm_node, cm_id, cm_node->accelerated, cm_node->state, type,
173 		  status);
174 
175 	switch (type) {
176 	case IW_CM_EVENT_CONNECT_REQUEST:
177 		if (cm_node->ipv4)
178 			irdma_fill_sockaddr4(cm_node, &event);
179 		else
180 			irdma_fill_sockaddr6(cm_node, &event);
181 		event.provider_data = cm_node;
182 		event.private_data = cm_node->pdata_buf;
183 		event.private_data_len = (u8)cm_node->pdata.size;
184 		event.ird = cm_node->ird_size;
185 		break;
186 	case IW_CM_EVENT_CONNECT_REPLY:
187 		irdma_get_cmevent_info(cm_node, cm_id, &event);
188 		break;
189 	case IW_CM_EVENT_ESTABLISHED:
190 		event.ird = cm_node->ird_size;
191 		event.ord = cm_node->ord_size;
192 		break;
193 	case IW_CM_EVENT_DISCONNECT:
194 	case IW_CM_EVENT_CLOSE:
195 		/* Wait if we are in RTS but havent issued the iwcm event upcall */
196 		if (!cm_node->accelerated)
197 			wait_for_completion(&cm_node->establish_comp);
198 		break;
199 	default:
200 		return -EINVAL;
201 	}
202 
203 	return cm_id->event_handler(cm_id, &event);
204 }
205 
206 /**
207  * irdma_timer_list_prep - add connection nodes to a list to perform timer tasks
208  * @cm_core: cm's core
209  * @timer_list: a timer list to which cm_node will be selected
210  */
211 static void irdma_timer_list_prep(struct irdma_cm_core *cm_core,
212 				  struct list_head *timer_list)
213 {
214 	struct irdma_cm_node *cm_node;
215 	int bkt;
216 
217 	hash_for_each_rcu(cm_core->cm_hash_tbl, bkt, cm_node, list) {
218 		if ((cm_node->close_entry || cm_node->send_entry) &&
219 		    refcount_inc_not_zero(&cm_node->refcnt))
220 			list_add(&cm_node->timer_entry, timer_list);
221 	}
222 }
223 
224 /**
225  * irdma_create_event - create cm event
226  * @cm_node: connection's node
227  * @type: Event type to generate
228  */
229 static struct irdma_cm_event *irdma_create_event(struct irdma_cm_node *cm_node,
230 						 enum irdma_cm_event_type type)
231 {
232 	struct irdma_cm_event *event;
233 
234 	if (!cm_node->cm_id)
235 		return NULL;
236 
237 	event = kzalloc(sizeof(*event), GFP_ATOMIC);
238 
239 	if (!event)
240 		return NULL;
241 
242 	event->type = type;
243 	event->cm_node = cm_node;
244 	memcpy(event->cm_info.rem_addr, cm_node->rem_addr,
245 	       sizeof(event->cm_info.rem_addr));
246 	memcpy(event->cm_info.loc_addr, cm_node->loc_addr,
247 	       sizeof(event->cm_info.loc_addr));
248 	event->cm_info.rem_port = cm_node->rem_port;
249 	event->cm_info.loc_port = cm_node->loc_port;
250 	event->cm_info.cm_id = cm_node->cm_id;
251 	ibdev_dbg(&cm_node->iwdev->ibdev,
252 		  "CM: node=%p event=%p type=%u dst=%pI4 src=%pI4\n", cm_node,
253 		  event, type, event->cm_info.loc_addr,
254 		  event->cm_info.rem_addr);
255 	trace_irdma_create_event(cm_node, type, __builtin_return_address(0));
256 	irdma_cm_post_event(event);
257 
258 	return event;
259 }
260 
261 /**
262  * irdma_free_retrans_entry - free send entry
263  * @cm_node: connection's node
264  */
265 static void irdma_free_retrans_entry(struct irdma_cm_node *cm_node)
266 {
267 	struct irdma_device *iwdev = cm_node->iwdev;
268 	struct irdma_timer_entry *send_entry;
269 
270 	send_entry = cm_node->send_entry;
271 	if (!send_entry)
272 		return;
273 
274 	cm_node->send_entry = NULL;
275 	irdma_free_sqbuf(&iwdev->vsi, send_entry->sqbuf);
276 	kfree(send_entry);
277 	refcount_dec(&cm_node->refcnt);
278 }
279 
280 /**
281  * irdma_cleanup_retrans_entry - free send entry with lock
282  * @cm_node: connection's node
283  */
284 static void irdma_cleanup_retrans_entry(struct irdma_cm_node *cm_node)
285 {
286 	unsigned long flags;
287 
288 	spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
289 	irdma_free_retrans_entry(cm_node);
290 	spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
291 }
292 
293 /**
294  * irdma_form_ah_cm_frame - get a free packet and build frame with address handle
295  * @cm_node: connection's node ionfo to use in frame
296  * @options: pointer to options info
297  * @hdr: pointer mpa header
298  * @pdata: pointer to private data
299  * @flags:  indicates FIN or ACK
300  */
301 static struct irdma_puda_buf *irdma_form_ah_cm_frame(struct irdma_cm_node *cm_node,
302 						     struct irdma_kmem_info *options,
303 						     struct irdma_kmem_info *hdr,
304 						     struct irdma_mpa_priv_info *pdata,
305 						     u8 flags)
306 {
307 	struct irdma_puda_buf *sqbuf;
308 	struct irdma_sc_vsi *vsi = &cm_node->iwdev->vsi;
309 	u8 *buf;
310 	struct tcphdr *tcph;
311 	u16 pktsize;
312 	u32 opts_len = 0;
313 	u32 pd_len = 0;
314 	u32 hdr_len = 0;
315 
316 	if (!cm_node->ah || !cm_node->ah->ah_info.ah_valid) {
317 		ibdev_dbg(&cm_node->iwdev->ibdev, "CM: AH invalid\n");
318 		return NULL;
319 	}
320 
321 	sqbuf = irdma_puda_get_bufpool(vsi->ilq);
322 	if (!sqbuf) {
323 		ibdev_dbg(&cm_node->iwdev->ibdev, "CM: SQ buf NULL\n");
324 		return NULL;
325 	}
326 
327 	sqbuf->ah_id = cm_node->ah->ah_info.ah_idx;
328 	buf = sqbuf->mem.va;
329 	if (options)
330 		opts_len = (u32)options->size;
331 
332 	if (hdr)
333 		hdr_len = hdr->size;
334 
335 	if (pdata)
336 		pd_len = pdata->size;
337 
338 	pktsize = sizeof(*tcph) + opts_len + hdr_len + pd_len;
339 
340 	memset(buf, 0, pktsize);
341 
342 	sqbuf->totallen = pktsize;
343 	sqbuf->tcphlen = sizeof(*tcph) + opts_len;
344 	sqbuf->scratch = cm_node;
345 
346 	tcph = (struct tcphdr *)buf;
347 	buf += sizeof(*tcph);
348 
349 	tcph->source = htons(cm_node->loc_port);
350 	tcph->dest = htons(cm_node->rem_port);
351 	tcph->seq = htonl(cm_node->tcp_cntxt.loc_seq_num);
352 
353 	if (flags & SET_ACK) {
354 		cm_node->tcp_cntxt.loc_ack_num = cm_node->tcp_cntxt.rcv_nxt;
355 		tcph->ack_seq = htonl(cm_node->tcp_cntxt.loc_ack_num);
356 		tcph->ack = 1;
357 	} else {
358 		tcph->ack_seq = 0;
359 	}
360 
361 	if (flags & SET_SYN) {
362 		cm_node->tcp_cntxt.loc_seq_num++;
363 		tcph->syn = 1;
364 	} else {
365 		cm_node->tcp_cntxt.loc_seq_num += hdr_len + pd_len;
366 	}
367 
368 	if (flags & SET_FIN) {
369 		cm_node->tcp_cntxt.loc_seq_num++;
370 		tcph->fin = 1;
371 	}
372 
373 	if (flags & SET_RST)
374 		tcph->rst = 1;
375 
376 	tcph->doff = (u16)((sizeof(*tcph) + opts_len + 3) >> 2);
377 	sqbuf->tcphlen = tcph->doff << 2;
378 	tcph->window = htons(cm_node->tcp_cntxt.rcv_wnd);
379 	tcph->urg_ptr = 0;
380 
381 	if (opts_len) {
382 		memcpy(buf, options->addr, opts_len);
383 		buf += opts_len;
384 	}
385 
386 	if (hdr_len) {
387 		memcpy(buf, hdr->addr, hdr_len);
388 		buf += hdr_len;
389 	}
390 
391 	if (pdata && pdata->addr)
392 		memcpy(buf, pdata->addr, pdata->size);
393 
394 	refcount_set(&sqbuf->refcount, 1);
395 
396 	print_hex_dump_debug("ILQ: TRANSMIT ILQ BUFFER", DUMP_PREFIX_OFFSET,
397 			     16, 8, sqbuf->mem.va, sqbuf->totallen, false);
398 
399 	return sqbuf;
400 }
401 
402 /**
403  * irdma_form_uda_cm_frame - get a free packet and build frame full tcpip packet
404  * @cm_node: connection's node ionfo to use in frame
405  * @options: pointer to options info
406  * @hdr: pointer mpa header
407  * @pdata: pointer to private data
408  * @flags:  indicates FIN or ACK
409  */
410 static struct irdma_puda_buf *irdma_form_uda_cm_frame(struct irdma_cm_node *cm_node,
411 						      struct irdma_kmem_info *options,
412 						      struct irdma_kmem_info *hdr,
413 						      struct irdma_mpa_priv_info *pdata,
414 						      u8 flags)
415 {
416 	struct irdma_puda_buf *sqbuf;
417 	struct irdma_sc_vsi *vsi = &cm_node->iwdev->vsi;
418 	u8 *buf;
419 
420 	struct tcphdr *tcph;
421 	struct iphdr *iph;
422 	struct ipv6hdr *ip6h;
423 	struct ethhdr *ethh;
424 	u16 pktsize;
425 	u16 eth_hlen = ETH_HLEN;
426 	u32 opts_len = 0;
427 	u32 pd_len = 0;
428 	u32 hdr_len = 0;
429 
430 	u16 vtag;
431 
432 	sqbuf = irdma_puda_get_bufpool(vsi->ilq);
433 	if (!sqbuf)
434 		return NULL;
435 
436 	buf = sqbuf->mem.va;
437 
438 	if (options)
439 		opts_len = (u32)options->size;
440 
441 	if (hdr)
442 		hdr_len = hdr->size;
443 
444 	if (pdata)
445 		pd_len = pdata->size;
446 
447 	if (cm_node->vlan_id < VLAN_N_VID)
448 		eth_hlen += 4;
449 
450 	if (cm_node->ipv4)
451 		pktsize = sizeof(*iph) + sizeof(*tcph);
452 	else
453 		pktsize = sizeof(*ip6h) + sizeof(*tcph);
454 	pktsize += opts_len + hdr_len + pd_len;
455 
456 	memset(buf, 0, eth_hlen + pktsize);
457 
458 	sqbuf->totallen = pktsize + eth_hlen;
459 	sqbuf->maclen = eth_hlen;
460 	sqbuf->tcphlen = sizeof(*tcph) + opts_len;
461 	sqbuf->scratch = cm_node;
462 
463 	ethh = (struct ethhdr *)buf;
464 	buf += eth_hlen;
465 
466 	if (cm_node->do_lpb)
467 		sqbuf->do_lpb = true;
468 
469 	if (cm_node->ipv4) {
470 		sqbuf->ipv4 = true;
471 
472 		iph = (struct iphdr *)buf;
473 		buf += sizeof(*iph);
474 		tcph = (struct tcphdr *)buf;
475 		buf += sizeof(*tcph);
476 
477 		ether_addr_copy(ethh->h_dest, cm_node->rem_mac);
478 		ether_addr_copy(ethh->h_source, cm_node->loc_mac);
479 		if (cm_node->vlan_id < VLAN_N_VID) {
480 			((struct vlan_ethhdr *)ethh)->h_vlan_proto =
481 				htons(ETH_P_8021Q);
482 			vtag = (cm_node->user_pri << VLAN_PRIO_SHIFT) |
483 			       cm_node->vlan_id;
484 			((struct vlan_ethhdr *)ethh)->h_vlan_TCI = htons(vtag);
485 
486 			((struct vlan_ethhdr *)ethh)->h_vlan_encapsulated_proto =
487 				htons(ETH_P_IP);
488 		} else {
489 			ethh->h_proto = htons(ETH_P_IP);
490 		}
491 
492 		iph->version = IPVERSION;
493 		iph->ihl = 5; /* 5 * 4Byte words, IP headr len */
494 		iph->tos = cm_node->tos;
495 		iph->tot_len = htons(pktsize);
496 		iph->id = htons(++cm_node->tcp_cntxt.loc_id);
497 
498 		iph->frag_off = htons(0x4000);
499 		iph->ttl = 0x40;
500 		iph->protocol = IPPROTO_TCP;
501 		iph->saddr = htonl(cm_node->loc_addr[0]);
502 		iph->daddr = htonl(cm_node->rem_addr[0]);
503 	} else {
504 		sqbuf->ipv4 = false;
505 		ip6h = (struct ipv6hdr *)buf;
506 		buf += sizeof(*ip6h);
507 		tcph = (struct tcphdr *)buf;
508 		buf += sizeof(*tcph);
509 
510 		ether_addr_copy(ethh->h_dest, cm_node->rem_mac);
511 		ether_addr_copy(ethh->h_source, cm_node->loc_mac);
512 		if (cm_node->vlan_id < VLAN_N_VID) {
513 			((struct vlan_ethhdr *)ethh)->h_vlan_proto =
514 				htons(ETH_P_8021Q);
515 			vtag = (cm_node->user_pri << VLAN_PRIO_SHIFT) |
516 			       cm_node->vlan_id;
517 			((struct vlan_ethhdr *)ethh)->h_vlan_TCI = htons(vtag);
518 			((struct vlan_ethhdr *)ethh)->h_vlan_encapsulated_proto =
519 				htons(ETH_P_IPV6);
520 		} else {
521 			ethh->h_proto = htons(ETH_P_IPV6);
522 		}
523 		ip6h->version = 6;
524 		ip6h->priority = cm_node->tos >> 4;
525 		ip6h->flow_lbl[0] = cm_node->tos << 4;
526 		ip6h->flow_lbl[1] = 0;
527 		ip6h->flow_lbl[2] = 0;
528 		ip6h->payload_len = htons(pktsize - sizeof(*ip6h));
529 		ip6h->nexthdr = 6;
530 		ip6h->hop_limit = 128;
531 		irdma_copy_ip_htonl(ip6h->saddr.in6_u.u6_addr32,
532 				    cm_node->loc_addr);
533 		irdma_copy_ip_htonl(ip6h->daddr.in6_u.u6_addr32,
534 				    cm_node->rem_addr);
535 	}
536 
537 	tcph->source = htons(cm_node->loc_port);
538 	tcph->dest = htons(cm_node->rem_port);
539 	tcph->seq = htonl(cm_node->tcp_cntxt.loc_seq_num);
540 
541 	if (flags & SET_ACK) {
542 		cm_node->tcp_cntxt.loc_ack_num = cm_node->tcp_cntxt.rcv_nxt;
543 		tcph->ack_seq = htonl(cm_node->tcp_cntxt.loc_ack_num);
544 		tcph->ack = 1;
545 	} else {
546 		tcph->ack_seq = 0;
547 	}
548 
549 	if (flags & SET_SYN) {
550 		cm_node->tcp_cntxt.loc_seq_num++;
551 		tcph->syn = 1;
552 	} else {
553 		cm_node->tcp_cntxt.loc_seq_num += hdr_len + pd_len;
554 	}
555 
556 	if (flags & SET_FIN) {
557 		cm_node->tcp_cntxt.loc_seq_num++;
558 		tcph->fin = 1;
559 	}
560 
561 	if (flags & SET_RST)
562 		tcph->rst = 1;
563 
564 	tcph->doff = (u16)((sizeof(*tcph) + opts_len + 3) >> 2);
565 	sqbuf->tcphlen = tcph->doff << 2;
566 	tcph->window = htons(cm_node->tcp_cntxt.rcv_wnd);
567 	tcph->urg_ptr = 0;
568 
569 	if (opts_len) {
570 		memcpy(buf, options->addr, opts_len);
571 		buf += opts_len;
572 	}
573 
574 	if (hdr_len) {
575 		memcpy(buf, hdr->addr, hdr_len);
576 		buf += hdr_len;
577 	}
578 
579 	if (pdata && pdata->addr)
580 		memcpy(buf, pdata->addr, pdata->size);
581 
582 	refcount_set(&sqbuf->refcount, 1);
583 
584 	print_hex_dump_debug("ILQ: TRANSMIT ILQ BUFFER", DUMP_PREFIX_OFFSET,
585 			     16, 8, sqbuf->mem.va, sqbuf->totallen, false);
586 	return sqbuf;
587 }
588 
589 /**
590  * irdma_send_reset - Send RST packet
591  * @cm_node: connection's node
592  */
593 int irdma_send_reset(struct irdma_cm_node *cm_node)
594 {
595 	struct irdma_puda_buf *sqbuf;
596 	int flags = SET_RST | SET_ACK;
597 
598 	trace_irdma_send_reset(cm_node, 0, __builtin_return_address(0));
599 	sqbuf = cm_node->cm_core->form_cm_frame(cm_node, NULL, NULL, NULL,
600 						flags);
601 	if (!sqbuf)
602 		return -ENOMEM;
603 
604 	ibdev_dbg(&cm_node->iwdev->ibdev,
605 		  "CM: caller: %pS cm_node %p cm_id=%p accel=%d state=%d rem_port=0x%04x, loc_port=0x%04x rem_addr=%pI4 loc_addr=%pI4\n",
606 		  __builtin_return_address(0), cm_node, cm_node->cm_id,
607 		  cm_node->accelerated, cm_node->state, cm_node->rem_port,
608 		  cm_node->loc_port, cm_node->rem_addr, cm_node->loc_addr);
609 
610 	return irdma_schedule_cm_timer(cm_node, sqbuf, IRDMA_TIMER_TYPE_SEND, 0,
611 				       1);
612 }
613 
614 /**
615  * irdma_active_open_err - send event for active side cm error
616  * @cm_node: connection's node
617  * @reset: Flag to send reset or not
618  */
619 static void irdma_active_open_err(struct irdma_cm_node *cm_node, bool reset)
620 {
621 	trace_irdma_active_open_err(cm_node, reset,
622 				    __builtin_return_address(0));
623 	irdma_cleanup_retrans_entry(cm_node);
624 	cm_node->cm_core->stats_connect_errs++;
625 	if (reset) {
626 		ibdev_dbg(&cm_node->iwdev->ibdev,
627 			  "CM: cm_node=%p state=%d\n", cm_node,
628 			  cm_node->state);
629 		refcount_inc(&cm_node->refcnt);
630 		irdma_send_reset(cm_node);
631 	}
632 
633 	cm_node->state = IRDMA_CM_STATE_CLOSED;
634 	irdma_create_event(cm_node, IRDMA_CM_EVENT_ABORTED);
635 }
636 
637 /**
638  * irdma_passive_open_err - handle passive side cm error
639  * @cm_node: connection's node
640  * @reset: send reset or just free cm_node
641  */
642 static void irdma_passive_open_err(struct irdma_cm_node *cm_node, bool reset)
643 {
644 	irdma_cleanup_retrans_entry(cm_node);
645 	cm_node->cm_core->stats_passive_errs++;
646 	cm_node->state = IRDMA_CM_STATE_CLOSED;
647 	ibdev_dbg(&cm_node->iwdev->ibdev, "CM: cm_node=%p state =%d\n",
648 		  cm_node, cm_node->state);
649 	trace_irdma_passive_open_err(cm_node, reset,
650 				     __builtin_return_address(0));
651 	if (reset)
652 		irdma_send_reset(cm_node);
653 	else
654 		irdma_rem_ref_cm_node(cm_node);
655 }
656 
657 /**
658  * irdma_event_connect_error - to create connect error event
659  * @event: cm information for connect event
660  */
661 static void irdma_event_connect_error(struct irdma_cm_event *event)
662 {
663 	struct irdma_qp *iwqp;
664 	struct iw_cm_id *cm_id;
665 
666 	cm_id = event->cm_node->cm_id;
667 	if (!cm_id)
668 		return;
669 
670 	iwqp = cm_id->provider_data;
671 
672 	if (!iwqp || !iwqp->iwdev)
673 		return;
674 
675 	iwqp->cm_id = NULL;
676 	cm_id->provider_data = NULL;
677 	irdma_send_cm_event(event->cm_node, cm_id, IW_CM_EVENT_CONNECT_REPLY,
678 			    -ECONNRESET);
679 	irdma_rem_ref_cm_node(event->cm_node);
680 }
681 
682 /**
683  * irdma_process_options - process options from TCP header
684  * @cm_node: connection's node
685  * @optionsloc: point to start of options
686  * @optionsize: size of all options
687  * @syn_pkt: flag if syn packet
688  */
689 static int irdma_process_options(struct irdma_cm_node *cm_node, u8 *optionsloc,
690 				 u32 optionsize, u32 syn_pkt)
691 {
692 	u32 tmp;
693 	u32 offset = 0;
694 	union all_known_options *all_options;
695 	char got_mss_option = 0;
696 
697 	while (offset < optionsize) {
698 		all_options = (union all_known_options *)(optionsloc + offset);
699 		switch (all_options->base.optionnum) {
700 		case OPTION_NUM_EOL:
701 			offset = optionsize;
702 			break;
703 		case OPTION_NUM_NONE:
704 			offset += 1;
705 			continue;
706 		case OPTION_NUM_MSS:
707 			ibdev_dbg(&cm_node->iwdev->ibdev,
708 				  "CM: MSS Length: %d Offset: %d Size: %d\n",
709 				  all_options->mss.len, offset, optionsize);
710 			got_mss_option = 1;
711 			if (all_options->mss.len != 4)
712 				return -EINVAL;
713 			tmp = ntohs(all_options->mss.mss);
714 			if ((cm_node->ipv4 &&
715 			     (tmp + IRDMA_MTU_TO_MSS_IPV4) < IRDMA_MIN_MTU_IPV4) ||
716 			    (!cm_node->ipv4 &&
717 			     (tmp + IRDMA_MTU_TO_MSS_IPV6) < IRDMA_MIN_MTU_IPV6))
718 				return -EINVAL;
719 			if (tmp < cm_node->tcp_cntxt.mss)
720 				cm_node->tcp_cntxt.mss = tmp;
721 			break;
722 		case OPTION_NUM_WINDOW_SCALE:
723 			cm_node->tcp_cntxt.snd_wscale =
724 				all_options->windowscale.shiftcount;
725 			break;
726 		default:
727 			ibdev_dbg(&cm_node->iwdev->ibdev,
728 				  "CM: Unsupported TCP Option: %x\n",
729 				  all_options->base.optionnum);
730 			break;
731 		}
732 		offset += all_options->base.len;
733 	}
734 	if (!got_mss_option && syn_pkt)
735 		cm_node->tcp_cntxt.mss = IRDMA_CM_DEFAULT_MSS;
736 
737 	return 0;
738 }
739 
740 /**
741  * irdma_handle_tcp_options - setup TCP context info after parsing TCP options
742  * @cm_node: connection's node
743  * @tcph: pointer tcp header
744  * @optionsize: size of options rcvd
745  * @passive: active or passive flag
746  */
747 static int irdma_handle_tcp_options(struct irdma_cm_node *cm_node,
748 				    struct tcphdr *tcph, int optionsize,
749 				    int passive)
750 {
751 	u8 *optionsloc = (u8 *)&tcph[1];
752 	int ret;
753 
754 	if (optionsize) {
755 		ret = irdma_process_options(cm_node, optionsloc, optionsize,
756 					    (u32)tcph->syn);
757 		if (ret) {
758 			ibdev_dbg(&cm_node->iwdev->ibdev,
759 				  "CM: Node %p, Sending Reset\n", cm_node);
760 			if (passive)
761 				irdma_passive_open_err(cm_node, true);
762 			else
763 				irdma_active_open_err(cm_node, true);
764 			return ret;
765 		}
766 	}
767 
768 	cm_node->tcp_cntxt.snd_wnd = ntohs(tcph->window)
769 				     << cm_node->tcp_cntxt.snd_wscale;
770 
771 	if (cm_node->tcp_cntxt.snd_wnd > cm_node->tcp_cntxt.max_snd_wnd)
772 		cm_node->tcp_cntxt.max_snd_wnd = cm_node->tcp_cntxt.snd_wnd;
773 
774 	return 0;
775 }
776 
777 /**
778  * irdma_build_mpa_v1 - build a MPA V1 frame
779  * @cm_node: connection's node
780  * @start_addr: address where to build frame
781  * @mpa_key: to do read0 or write0
782  */
783 static void irdma_build_mpa_v1(struct irdma_cm_node *cm_node, void *start_addr,
784 			       u8 mpa_key)
785 {
786 	struct ietf_mpa_v1 *mpa_frame = start_addr;
787 
788 	switch (mpa_key) {
789 	case MPA_KEY_REQUEST:
790 		memcpy(mpa_frame->key, IEFT_MPA_KEY_REQ, IETF_MPA_KEY_SIZE);
791 		break;
792 	case MPA_KEY_REPLY:
793 		memcpy(mpa_frame->key, IEFT_MPA_KEY_REP, IETF_MPA_KEY_SIZE);
794 		break;
795 	default:
796 		break;
797 	}
798 	mpa_frame->flags = IETF_MPA_FLAGS_CRC;
799 	mpa_frame->rev = cm_node->mpa_frame_rev;
800 	mpa_frame->priv_data_len = htons(cm_node->pdata.size);
801 }
802 
803 /**
804  * irdma_build_mpa_v2 - build a MPA V2 frame
805  * @cm_node: connection's node
806  * @start_addr: buffer start address
807  * @mpa_key: to do read0 or write0
808  */
809 static void irdma_build_mpa_v2(struct irdma_cm_node *cm_node, void *start_addr,
810 			       u8 mpa_key)
811 {
812 	struct ietf_mpa_v2 *mpa_frame = start_addr;
813 	struct ietf_rtr_msg *rtr_msg = &mpa_frame->rtr_msg;
814 	u16 ctrl_ird, ctrl_ord;
815 
816 	/* initialize the upper 5 bytes of the frame */
817 	irdma_build_mpa_v1(cm_node, start_addr, mpa_key);
818 	mpa_frame->flags |= IETF_MPA_V2_FLAG;
819 	if (cm_node->iwdev->iw_ooo) {
820 		mpa_frame->flags |= IETF_MPA_FLAGS_MARKERS;
821 		cm_node->rcv_mark_en = true;
822 	}
823 	mpa_frame->priv_data_len = cpu_to_be16(be16_to_cpu(mpa_frame->priv_data_len) +
824 					       IETF_RTR_MSG_SIZE);
825 
826 	/* initialize RTR msg */
827 	if (cm_node->mpav2_ird_ord == IETF_NO_IRD_ORD) {
828 		ctrl_ird = IETF_NO_IRD_ORD;
829 		ctrl_ord = IETF_NO_IRD_ORD;
830 	} else {
831 		ctrl_ird = (cm_node->ird_size > IETF_NO_IRD_ORD) ?
832 				   IETF_NO_IRD_ORD :
833 				   cm_node->ird_size;
834 		ctrl_ord = (cm_node->ord_size > IETF_NO_IRD_ORD) ?
835 				   IETF_NO_IRD_ORD :
836 				   cm_node->ord_size;
837 	}
838 	ctrl_ird |= IETF_PEER_TO_PEER;
839 
840 	switch (mpa_key) {
841 	case MPA_KEY_REQUEST:
842 		ctrl_ord |= IETF_RDMA0_WRITE;
843 		ctrl_ord |= IETF_RDMA0_READ;
844 		break;
845 	case MPA_KEY_REPLY:
846 		switch (cm_node->send_rdma0_op) {
847 		case SEND_RDMA_WRITE_ZERO:
848 			ctrl_ord |= IETF_RDMA0_WRITE;
849 			break;
850 		case SEND_RDMA_READ_ZERO:
851 			ctrl_ord |= IETF_RDMA0_READ;
852 			break;
853 		}
854 		break;
855 	default:
856 		break;
857 	}
858 	rtr_msg->ctrl_ird = htons(ctrl_ird);
859 	rtr_msg->ctrl_ord = htons(ctrl_ord);
860 }
861 
862 /**
863  * irdma_cm_build_mpa_frame - build mpa frame for mpa version 1 or version 2
864  * @cm_node: connection's node
865  * @mpa: mpa: data buffer
866  * @mpa_key: to do read0 or write0
867  */
868 static int irdma_cm_build_mpa_frame(struct irdma_cm_node *cm_node,
869 				    struct irdma_kmem_info *mpa, u8 mpa_key)
870 {
871 	int hdr_len = 0;
872 
873 	switch (cm_node->mpa_frame_rev) {
874 	case IETF_MPA_V1:
875 		hdr_len = sizeof(struct ietf_mpa_v1);
876 		irdma_build_mpa_v1(cm_node, mpa->addr, mpa_key);
877 		break;
878 	case IETF_MPA_V2:
879 		hdr_len = sizeof(struct ietf_mpa_v2);
880 		irdma_build_mpa_v2(cm_node, mpa->addr, mpa_key);
881 		break;
882 	default:
883 		break;
884 	}
885 
886 	return hdr_len;
887 }
888 
889 /**
890  * irdma_send_mpa_request - active node send mpa request to passive node
891  * @cm_node: connection's node
892  */
893 static int irdma_send_mpa_request(struct irdma_cm_node *cm_node)
894 {
895 	struct irdma_puda_buf *sqbuf;
896 
897 	cm_node->mpa_hdr.addr = &cm_node->mpa_v2_frame;
898 	cm_node->mpa_hdr.size = irdma_cm_build_mpa_frame(cm_node,
899 							 &cm_node->mpa_hdr,
900 							 MPA_KEY_REQUEST);
901 	if (!cm_node->mpa_hdr.size) {
902 		ibdev_dbg(&cm_node->iwdev->ibdev,
903 			  "CM: mpa size = %d\n", cm_node->mpa_hdr.size);
904 		return -EINVAL;
905 	}
906 
907 	sqbuf = cm_node->cm_core->form_cm_frame(cm_node, NULL,
908 						&cm_node->mpa_hdr,
909 						&cm_node->pdata, SET_ACK);
910 	if (!sqbuf)
911 		return -ENOMEM;
912 
913 	return irdma_schedule_cm_timer(cm_node, sqbuf, IRDMA_TIMER_TYPE_SEND, 1,
914 				       0);
915 }
916 
917 /**
918  * irdma_send_mpa_reject -
919  * @cm_node: connection's node
920  * @pdata: reject data for connection
921  * @plen: length of reject data
922  */
923 static int irdma_send_mpa_reject(struct irdma_cm_node *cm_node,
924 				 const void *pdata, u8 plen)
925 {
926 	struct irdma_puda_buf *sqbuf;
927 	struct irdma_mpa_priv_info priv_info;
928 
929 	cm_node->mpa_hdr.addr = &cm_node->mpa_v2_frame;
930 	cm_node->mpa_hdr.size = irdma_cm_build_mpa_frame(cm_node,
931 							 &cm_node->mpa_hdr,
932 							 MPA_KEY_REPLY);
933 
934 	cm_node->mpa_frame.flags |= IETF_MPA_FLAGS_REJECT;
935 	priv_info.addr = pdata;
936 	priv_info.size = plen;
937 
938 	sqbuf = cm_node->cm_core->form_cm_frame(cm_node, NULL,
939 						&cm_node->mpa_hdr, &priv_info,
940 						SET_ACK | SET_FIN);
941 	if (!sqbuf)
942 		return -ENOMEM;
943 
944 	cm_node->state = IRDMA_CM_STATE_FIN_WAIT1;
945 
946 	return irdma_schedule_cm_timer(cm_node, sqbuf, IRDMA_TIMER_TYPE_SEND, 1,
947 				       0);
948 }
949 
950 /**
951  * irdma_negotiate_mpa_v2_ird_ord - negotiate MPAv2 IRD/ORD
952  * @cm_node: connection's node
953  * @buf: Data pointer
954  */
955 static int irdma_negotiate_mpa_v2_ird_ord(struct irdma_cm_node *cm_node,
956 					  u8 *buf)
957 {
958 	struct ietf_mpa_v2 *mpa_v2_frame;
959 	struct ietf_rtr_msg *rtr_msg;
960 	u16 ird_size;
961 	u16 ord_size;
962 	u16 ctrl_ord;
963 	u16 ctrl_ird;
964 
965 	mpa_v2_frame = (struct ietf_mpa_v2 *)buf;
966 	rtr_msg = &mpa_v2_frame->rtr_msg;
967 
968 	/* parse rtr message */
969 	ctrl_ord = ntohs(rtr_msg->ctrl_ord);
970 	ctrl_ird = ntohs(rtr_msg->ctrl_ird);
971 	ird_size = ctrl_ird & IETF_NO_IRD_ORD;
972 	ord_size = ctrl_ord & IETF_NO_IRD_ORD;
973 
974 	if (!(ctrl_ird & IETF_PEER_TO_PEER))
975 		return -EOPNOTSUPP;
976 
977 	if (ird_size == IETF_NO_IRD_ORD || ord_size == IETF_NO_IRD_ORD) {
978 		cm_node->mpav2_ird_ord = IETF_NO_IRD_ORD;
979 		goto negotiate_done;
980 	}
981 
982 	if (cm_node->state != IRDMA_CM_STATE_MPAREQ_SENT) {
983 		/* responder */
984 		if (!ord_size && (ctrl_ord & IETF_RDMA0_READ))
985 			cm_node->ird_size = 1;
986 		if (cm_node->ord_size > ird_size)
987 			cm_node->ord_size = ird_size;
988 	} else {
989 		/* initiator */
990 		if (!ird_size && (ctrl_ord & IETF_RDMA0_READ))
991 			/* Remote peer doesn't support RDMA0_READ */
992 			return -EOPNOTSUPP;
993 
994 		if (cm_node->ord_size > ird_size)
995 			cm_node->ord_size = ird_size;
996 
997 		if (cm_node->ird_size < ord_size)
998 		/* no resources available */
999 			return -EINVAL;
1000 	}
1001 
1002 negotiate_done:
1003 	if (ctrl_ord & IETF_RDMA0_READ)
1004 		cm_node->send_rdma0_op = SEND_RDMA_READ_ZERO;
1005 	else if (ctrl_ord & IETF_RDMA0_WRITE)
1006 		cm_node->send_rdma0_op = SEND_RDMA_WRITE_ZERO;
1007 	else
1008 		/* Not supported RDMA0 operation */
1009 		return -EOPNOTSUPP;
1010 
1011 	ibdev_dbg(&cm_node->iwdev->ibdev,
1012 		  "CM: MPAV2 Negotiated ORD: %d, IRD: %d\n",
1013 		  cm_node->ord_size, cm_node->ird_size);
1014 	trace_irdma_negotiate_mpa_v2(cm_node);
1015 	return 0;
1016 }
1017 
1018 /**
1019  * irdma_parse_mpa - process an IETF MPA frame
1020  * @cm_node: connection's node
1021  * @buf: Data pointer
1022  * @type: to return accept or reject
1023  * @len: Len of mpa buffer
1024  */
1025 static int irdma_parse_mpa(struct irdma_cm_node *cm_node, u8 *buf, u32 *type,
1026 			   u32 len)
1027 {
1028 	struct ietf_mpa_v1 *mpa_frame;
1029 	int mpa_hdr_len, priv_data_len, ret;
1030 
1031 	*type = IRDMA_MPA_REQUEST_ACCEPT;
1032 
1033 	if (len < sizeof(struct ietf_mpa_v1)) {
1034 		ibdev_dbg(&cm_node->iwdev->ibdev,
1035 			  "CM: ietf buffer small (%x)\n", len);
1036 		return -EINVAL;
1037 	}
1038 
1039 	mpa_frame = (struct ietf_mpa_v1 *)buf;
1040 	mpa_hdr_len = sizeof(struct ietf_mpa_v1);
1041 	priv_data_len = ntohs(mpa_frame->priv_data_len);
1042 
1043 	if (priv_data_len > IETF_MAX_PRIV_DATA_LEN) {
1044 		ibdev_dbg(&cm_node->iwdev->ibdev,
1045 			  "CM: private_data too big %d\n", priv_data_len);
1046 		return -EOVERFLOW;
1047 	}
1048 
1049 	if (mpa_frame->rev != IETF_MPA_V1 && mpa_frame->rev != IETF_MPA_V2) {
1050 		ibdev_dbg(&cm_node->iwdev->ibdev,
1051 			  "CM: unsupported mpa rev = %d\n", mpa_frame->rev);
1052 		return -EINVAL;
1053 	}
1054 
1055 	if (mpa_frame->rev > cm_node->mpa_frame_rev) {
1056 		ibdev_dbg(&cm_node->iwdev->ibdev, "CM: rev %d\n",
1057 			  mpa_frame->rev);
1058 		return -EINVAL;
1059 	}
1060 
1061 	cm_node->mpa_frame_rev = mpa_frame->rev;
1062 	if (cm_node->state != IRDMA_CM_STATE_MPAREQ_SENT) {
1063 		if (memcmp(mpa_frame->key, IEFT_MPA_KEY_REQ,
1064 			   IETF_MPA_KEY_SIZE)) {
1065 			ibdev_dbg(&cm_node->iwdev->ibdev,
1066 				  "CM: Unexpected MPA Key received\n");
1067 			return -EINVAL;
1068 		}
1069 	} else {
1070 		if (memcmp(mpa_frame->key, IEFT_MPA_KEY_REP,
1071 			   IETF_MPA_KEY_SIZE)) {
1072 			ibdev_dbg(&cm_node->iwdev->ibdev,
1073 				  "CM: Unexpected MPA Key received\n");
1074 			return -EINVAL;
1075 		}
1076 	}
1077 
1078 	if (priv_data_len + mpa_hdr_len > len) {
1079 		ibdev_dbg(&cm_node->iwdev->ibdev,
1080 			  "CM: ietf buffer len(%x + %x != %x)\n",
1081 			  priv_data_len, mpa_hdr_len, len);
1082 		return -EOVERFLOW;
1083 	}
1084 
1085 	if (len > IRDMA_MAX_CM_BUF) {
1086 		ibdev_dbg(&cm_node->iwdev->ibdev,
1087 			  "CM: ietf buffer large len = %d\n", len);
1088 		return -EOVERFLOW;
1089 	}
1090 
1091 	switch (mpa_frame->rev) {
1092 	case IETF_MPA_V2:
1093 		mpa_hdr_len += IETF_RTR_MSG_SIZE;
1094 		ret = irdma_negotiate_mpa_v2_ird_ord(cm_node, buf);
1095 		if (ret)
1096 			return ret;
1097 		break;
1098 	case IETF_MPA_V1:
1099 	default:
1100 		break;
1101 	}
1102 
1103 	memcpy(cm_node->pdata_buf, buf + mpa_hdr_len, priv_data_len);
1104 	cm_node->pdata.size = priv_data_len;
1105 
1106 	if (mpa_frame->flags & IETF_MPA_FLAGS_REJECT)
1107 		*type = IRDMA_MPA_REQUEST_REJECT;
1108 
1109 	if (mpa_frame->flags & IETF_MPA_FLAGS_MARKERS)
1110 		cm_node->snd_mark_en = true;
1111 
1112 	return 0;
1113 }
1114 
1115 /**
1116  * irdma_schedule_cm_timer
1117  * @cm_node: connection's node
1118  * @sqbuf: buffer to send
1119  * @type: if it is send or close
1120  * @send_retrans: if rexmits to be done
1121  * @close_when_complete: is cm_node to be removed
1122  *
1123  * note - cm_node needs to be protected before calling this. Encase in:
1124  *		irdma_rem_ref_cm_node(cm_core, cm_node);
1125  *		irdma_schedule_cm_timer(...)
1126  *		refcount_inc(&cm_node->refcnt);
1127  */
1128 int irdma_schedule_cm_timer(struct irdma_cm_node *cm_node,
1129 			    struct irdma_puda_buf *sqbuf,
1130 			    enum irdma_timer_type type, int send_retrans,
1131 			    int close_when_complete)
1132 {
1133 	struct irdma_sc_vsi *vsi = &cm_node->iwdev->vsi;
1134 	struct irdma_cm_core *cm_core = cm_node->cm_core;
1135 	struct irdma_timer_entry *new_send;
1136 	u32 was_timer_set;
1137 	unsigned long flags;
1138 
1139 	new_send = kzalloc(sizeof(*new_send), GFP_ATOMIC);
1140 	if (!new_send) {
1141 		if (type != IRDMA_TIMER_TYPE_CLOSE)
1142 			irdma_free_sqbuf(vsi, sqbuf);
1143 		return -ENOMEM;
1144 	}
1145 
1146 	new_send->retrycount = IRDMA_DEFAULT_RETRYS;
1147 	new_send->retranscount = IRDMA_DEFAULT_RETRANS;
1148 	new_send->sqbuf = sqbuf;
1149 	new_send->timetosend = jiffies;
1150 	new_send->type = type;
1151 	new_send->send_retrans = send_retrans;
1152 	new_send->close_when_complete = close_when_complete;
1153 
1154 	if (type == IRDMA_TIMER_TYPE_CLOSE) {
1155 		new_send->timetosend += (HZ / 10);
1156 		if (cm_node->close_entry) {
1157 			kfree(new_send);
1158 			ibdev_dbg(&cm_node->iwdev->ibdev,
1159 				  "CM: already close entry\n");
1160 			return -EINVAL;
1161 		}
1162 
1163 		cm_node->close_entry = new_send;
1164 	} else { /* type == IRDMA_TIMER_TYPE_SEND */
1165 		spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
1166 		cm_node->send_entry = new_send;
1167 		refcount_inc(&cm_node->refcnt);
1168 		spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
1169 		new_send->timetosend = jiffies + IRDMA_RETRY_TIMEOUT;
1170 
1171 		refcount_inc(&sqbuf->refcount);
1172 		irdma_puda_send_buf(vsi->ilq, sqbuf);
1173 		if (!send_retrans) {
1174 			irdma_cleanup_retrans_entry(cm_node);
1175 			if (close_when_complete)
1176 				irdma_rem_ref_cm_node(cm_node);
1177 			return 0;
1178 		}
1179 	}
1180 
1181 	spin_lock_irqsave(&cm_core->ht_lock, flags);
1182 	was_timer_set = timer_pending(&cm_core->tcp_timer);
1183 
1184 	if (!was_timer_set) {
1185 		cm_core->tcp_timer.expires = new_send->timetosend;
1186 		add_timer(&cm_core->tcp_timer);
1187 	}
1188 	spin_unlock_irqrestore(&cm_core->ht_lock, flags);
1189 
1190 	return 0;
1191 }
1192 
1193 /**
1194  * irdma_retrans_expired - Could not rexmit the packet
1195  * @cm_node: connection's node
1196  */
1197 static void irdma_retrans_expired(struct irdma_cm_node *cm_node)
1198 {
1199 	enum irdma_cm_node_state state = cm_node->state;
1200 
1201 	cm_node->state = IRDMA_CM_STATE_CLOSED;
1202 	switch (state) {
1203 	case IRDMA_CM_STATE_SYN_RCVD:
1204 	case IRDMA_CM_STATE_CLOSING:
1205 		irdma_rem_ref_cm_node(cm_node);
1206 		break;
1207 	case IRDMA_CM_STATE_FIN_WAIT1:
1208 	case IRDMA_CM_STATE_LAST_ACK:
1209 		irdma_send_reset(cm_node);
1210 		break;
1211 	default:
1212 		refcount_inc(&cm_node->refcnt);
1213 		irdma_send_reset(cm_node);
1214 		irdma_create_event(cm_node, IRDMA_CM_EVENT_ABORTED);
1215 		break;
1216 	}
1217 }
1218 
1219 /**
1220  * irdma_handle_close_entry - for handling retry/timeouts
1221  * @cm_node: connection's node
1222  * @rem_node: flag for remove cm_node
1223  */
1224 static void irdma_handle_close_entry(struct irdma_cm_node *cm_node,
1225 				     u32 rem_node)
1226 {
1227 	struct irdma_timer_entry *close_entry = cm_node->close_entry;
1228 	struct irdma_qp *iwqp;
1229 	unsigned long flags;
1230 
1231 	if (!close_entry)
1232 		return;
1233 	iwqp = (struct irdma_qp *)close_entry->sqbuf;
1234 	if (iwqp) {
1235 		spin_lock_irqsave(&iwqp->lock, flags);
1236 		if (iwqp->cm_id) {
1237 			iwqp->hw_tcp_state = IRDMA_TCP_STATE_CLOSED;
1238 			iwqp->hw_iwarp_state = IRDMA_QP_STATE_ERROR;
1239 			iwqp->last_aeq = IRDMA_AE_RESET_SENT;
1240 			iwqp->ibqp_state = IB_QPS_ERR;
1241 			spin_unlock_irqrestore(&iwqp->lock, flags);
1242 			irdma_cm_disconn(iwqp);
1243 		} else {
1244 			spin_unlock_irqrestore(&iwqp->lock, flags);
1245 		}
1246 	} else if (rem_node) {
1247 		/* TIME_WAIT state */
1248 		irdma_rem_ref_cm_node(cm_node);
1249 	}
1250 
1251 	kfree(close_entry);
1252 	cm_node->close_entry = NULL;
1253 }
1254 
1255 /**
1256  * irdma_cm_timer_tick - system's timer expired callback
1257  * @t: Pointer to timer_list
1258  */
1259 static void irdma_cm_timer_tick(struct timer_list *t)
1260 {
1261 	unsigned long nexttimeout = jiffies + IRDMA_LONG_TIME;
1262 	struct irdma_cm_node *cm_node;
1263 	struct irdma_timer_entry *send_entry, *close_entry;
1264 	struct list_head *list_core_temp;
1265 	struct list_head *list_node;
1266 	struct irdma_cm_core *cm_core = from_timer(cm_core, t, tcp_timer);
1267 	struct irdma_sc_vsi *vsi;
1268 	u32 settimer = 0;
1269 	unsigned long timetosend;
1270 	unsigned long flags;
1271 	struct list_head timer_list;
1272 
1273 	INIT_LIST_HEAD(&timer_list);
1274 
1275 	rcu_read_lock();
1276 	irdma_timer_list_prep(cm_core, &timer_list);
1277 	rcu_read_unlock();
1278 
1279 	list_for_each_safe (list_node, list_core_temp, &timer_list) {
1280 		cm_node = container_of(list_node, struct irdma_cm_node,
1281 				       timer_entry);
1282 		close_entry = cm_node->close_entry;
1283 
1284 		if (close_entry) {
1285 			if (time_after(close_entry->timetosend, jiffies)) {
1286 				if (nexttimeout > close_entry->timetosend ||
1287 				    !settimer) {
1288 					nexttimeout = close_entry->timetosend;
1289 					settimer = 1;
1290 				}
1291 			} else {
1292 				irdma_handle_close_entry(cm_node, 1);
1293 			}
1294 		}
1295 
1296 		spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
1297 
1298 		send_entry = cm_node->send_entry;
1299 		if (!send_entry)
1300 			goto done;
1301 		if (time_after(send_entry->timetosend, jiffies)) {
1302 			if (cm_node->state != IRDMA_CM_STATE_OFFLOADED) {
1303 				if (nexttimeout > send_entry->timetosend ||
1304 				    !settimer) {
1305 					nexttimeout = send_entry->timetosend;
1306 					settimer = 1;
1307 				}
1308 			} else {
1309 				irdma_free_retrans_entry(cm_node);
1310 			}
1311 			goto done;
1312 		}
1313 
1314 		if (cm_node->state == IRDMA_CM_STATE_OFFLOADED ||
1315 		    cm_node->state == IRDMA_CM_STATE_CLOSED) {
1316 			irdma_free_retrans_entry(cm_node);
1317 			goto done;
1318 		}
1319 
1320 		if (!send_entry->retranscount || !send_entry->retrycount) {
1321 			irdma_free_retrans_entry(cm_node);
1322 
1323 			spin_unlock_irqrestore(&cm_node->retrans_list_lock,
1324 					       flags);
1325 			irdma_retrans_expired(cm_node);
1326 			cm_node->state = IRDMA_CM_STATE_CLOSED;
1327 			spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
1328 			goto done;
1329 		}
1330 		spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
1331 
1332 		vsi = &cm_node->iwdev->vsi;
1333 		if (!cm_node->ack_rcvd) {
1334 			refcount_inc(&send_entry->sqbuf->refcount);
1335 			irdma_puda_send_buf(vsi->ilq, send_entry->sqbuf);
1336 			cm_node->cm_core->stats_pkt_retrans++;
1337 		}
1338 
1339 		spin_lock_irqsave(&cm_node->retrans_list_lock, flags);
1340 		if (send_entry->send_retrans) {
1341 			send_entry->retranscount--;
1342 			timetosend = (IRDMA_RETRY_TIMEOUT <<
1343 				      (IRDMA_DEFAULT_RETRANS -
1344 				       send_entry->retranscount));
1345 
1346 			send_entry->timetosend = jiffies +
1347 			    min(timetosend, IRDMA_MAX_TIMEOUT);
1348 			if (nexttimeout > send_entry->timetosend || !settimer) {
1349 				nexttimeout = send_entry->timetosend;
1350 				settimer = 1;
1351 			}
1352 		} else {
1353 			int close_when_complete;
1354 
1355 			close_when_complete = send_entry->close_when_complete;
1356 			irdma_free_retrans_entry(cm_node);
1357 			if (close_when_complete)
1358 				irdma_rem_ref_cm_node(cm_node);
1359 		}
1360 done:
1361 		spin_unlock_irqrestore(&cm_node->retrans_list_lock, flags);
1362 		irdma_rem_ref_cm_node(cm_node);
1363 	}
1364 
1365 	if (settimer) {
1366 		spin_lock_irqsave(&cm_core->ht_lock, flags);
1367 		if (!timer_pending(&cm_core->tcp_timer)) {
1368 			cm_core->tcp_timer.expires = nexttimeout;
1369 			add_timer(&cm_core->tcp_timer);
1370 		}
1371 		spin_unlock_irqrestore(&cm_core->ht_lock, flags);
1372 	}
1373 }
1374 
1375 /**
1376  * irdma_send_syn - send SYN packet
1377  * @cm_node: connection's node
1378  * @sendack: flag to set ACK bit or not
1379  */
1380 int irdma_send_syn(struct irdma_cm_node *cm_node, u32 sendack)
1381 {
1382 	struct irdma_puda_buf *sqbuf;
1383 	int flags = SET_SYN;
1384 	char optionsbuf[sizeof(struct option_mss) +
1385 			sizeof(struct option_windowscale) +
1386 			sizeof(struct option_base) + TCP_OPTIONS_PADDING];
1387 	struct irdma_kmem_info opts;
1388 	int optionssize = 0;
1389 	/* Sending MSS option */
1390 	union all_known_options *options;
1391 
1392 	opts.addr = optionsbuf;
1393 	if (!cm_node)
1394 		return -EINVAL;
1395 
1396 	options = (union all_known_options *)&optionsbuf[optionssize];
1397 	options->mss.optionnum = OPTION_NUM_MSS;
1398 	options->mss.len = sizeof(struct option_mss);
1399 	options->mss.mss = htons(cm_node->tcp_cntxt.mss);
1400 	optionssize += sizeof(struct option_mss);
1401 
1402 	options = (union all_known_options *)&optionsbuf[optionssize];
1403 	options->windowscale.optionnum = OPTION_NUM_WINDOW_SCALE;
1404 	options->windowscale.len = sizeof(struct option_windowscale);
1405 	options->windowscale.shiftcount = cm_node->tcp_cntxt.rcv_wscale;
1406 	optionssize += sizeof(struct option_windowscale);
1407 	options = (union all_known_options *)&optionsbuf[optionssize];
1408 	options->eol = OPTION_NUM_EOL;
1409 	optionssize += 1;
1410 
1411 	if (sendack)
1412 		flags |= SET_ACK;
1413 
1414 	opts.size = optionssize;
1415 
1416 	sqbuf = cm_node->cm_core->form_cm_frame(cm_node, &opts, NULL, NULL,
1417 						flags);
1418 	if (!sqbuf)
1419 		return -ENOMEM;
1420 
1421 	return irdma_schedule_cm_timer(cm_node, sqbuf, IRDMA_TIMER_TYPE_SEND, 1,
1422 				       0);
1423 }
1424 
1425 /**
1426  * irdma_send_ack - Send ACK packet
1427  * @cm_node: connection's node
1428  */
1429 void irdma_send_ack(struct irdma_cm_node *cm_node)
1430 {
1431 	struct irdma_puda_buf *sqbuf;
1432 	struct irdma_sc_vsi *vsi = &cm_node->iwdev->vsi;
1433 
1434 	sqbuf = cm_node->cm_core->form_cm_frame(cm_node, NULL, NULL, NULL,
1435 						SET_ACK);
1436 	if (sqbuf)
1437 		irdma_puda_send_buf(vsi->ilq, sqbuf);
1438 }
1439 
1440 /**
1441  * irdma_send_fin - Send FIN pkt
1442  * @cm_node: connection's node
1443  */
1444 static int irdma_send_fin(struct irdma_cm_node *cm_node)
1445 {
1446 	struct irdma_puda_buf *sqbuf;
1447 
1448 	sqbuf = cm_node->cm_core->form_cm_frame(cm_node, NULL, NULL, NULL,
1449 						SET_ACK | SET_FIN);
1450 	if (!sqbuf)
1451 		return -ENOMEM;
1452 
1453 	return irdma_schedule_cm_timer(cm_node, sqbuf, IRDMA_TIMER_TYPE_SEND, 1,
1454 				       0);
1455 }
1456 
1457 /**
1458  * irdma_find_listener - find a cm node listening on this addr-port pair
1459  * @cm_core: cm's core
1460  * @dst_addr: listener ip addr
1461  * @dst_port: listener tcp port num
1462  * @vlan_id: virtual LAN ID
1463  * @listener_state: state to match with listen node's
1464  */
1465 static struct irdma_cm_listener *
1466 irdma_find_listener(struct irdma_cm_core *cm_core, u32 *dst_addr, u16 dst_port,
1467 		    u16 vlan_id, enum irdma_cm_listener_state listener_state)
1468 {
1469 	struct irdma_cm_listener *listen_node;
1470 	static const u32 ip_zero[4] = { 0, 0, 0, 0 };
1471 	u32 listen_addr[4];
1472 	u16 listen_port;
1473 	unsigned long flags;
1474 
1475 	/* walk list and find cm_node associated with this session ID */
1476 	spin_lock_irqsave(&cm_core->listen_list_lock, flags);
1477 	list_for_each_entry (listen_node, &cm_core->listen_list, list) {
1478 		memcpy(listen_addr, listen_node->loc_addr, sizeof(listen_addr));
1479 		listen_port = listen_node->loc_port;
1480 		/* compare node pair, return node handle if a match */
1481 		if ((!memcmp(listen_addr, dst_addr, sizeof(listen_addr)) ||
1482 		     !memcmp(listen_addr, ip_zero, sizeof(listen_addr))) &&
1483 		    listen_port == dst_port &&
1484 		    vlan_id == listen_node->vlan_id &&
1485 		    (listener_state & listen_node->listener_state)) {
1486 			refcount_inc(&listen_node->refcnt);
1487 			spin_unlock_irqrestore(&cm_core->listen_list_lock,
1488 					       flags);
1489 			trace_irdma_find_listener(listen_node);
1490 			return listen_node;
1491 		}
1492 	}
1493 	spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
1494 
1495 	return NULL;
1496 }
1497 
1498 /**
1499  * irdma_del_multiple_qhash - Remove qhash and child listens
1500  * @iwdev: iWarp device
1501  * @cm_info: CM info for parent listen node
1502  * @cm_parent_listen_node: The parent listen node
1503  */
1504 static int irdma_del_multiple_qhash(struct irdma_device *iwdev,
1505 				    struct irdma_cm_info *cm_info,
1506 				    struct irdma_cm_listener *cm_parent_listen_node)
1507 {
1508 	struct irdma_cm_listener *child_listen_node;
1509 	struct list_head *pos, *tpos;
1510 	unsigned long flags;
1511 	int ret = -EINVAL;
1512 
1513 	spin_lock_irqsave(&iwdev->cm_core.listen_list_lock, flags);
1514 	list_for_each_safe (pos, tpos,
1515 			    &cm_parent_listen_node->child_listen_list) {
1516 		child_listen_node = list_entry(pos, struct irdma_cm_listener,
1517 					       child_listen_list);
1518 		if (child_listen_node->ipv4)
1519 			ibdev_dbg(&iwdev->ibdev,
1520 				  "CM: removing child listen for IP=%pI4, port=%d, vlan=%d\n",
1521 				  child_listen_node->loc_addr,
1522 				  child_listen_node->loc_port,
1523 				  child_listen_node->vlan_id);
1524 		else
1525 			ibdev_dbg(&iwdev->ibdev,
1526 				  "CM: removing child listen for IP=%pI6, port=%d, vlan=%d\n",
1527 				  child_listen_node->loc_addr,
1528 				  child_listen_node->loc_port,
1529 				  child_listen_node->vlan_id);
1530 		trace_irdma_del_multiple_qhash(child_listen_node);
1531 		list_del(pos);
1532 		memcpy(cm_info->loc_addr, child_listen_node->loc_addr,
1533 		       sizeof(cm_info->loc_addr));
1534 		cm_info->vlan_id = child_listen_node->vlan_id;
1535 		if (child_listen_node->qhash_set) {
1536 			ret = irdma_manage_qhash(iwdev, cm_info,
1537 						 IRDMA_QHASH_TYPE_TCP_SYN,
1538 						 IRDMA_QHASH_MANAGE_TYPE_DELETE,
1539 						 NULL, false);
1540 			child_listen_node->qhash_set = false;
1541 		} else {
1542 			ret = 0;
1543 		}
1544 		ibdev_dbg(&iwdev->ibdev,
1545 			  "CM: Child listen node freed = %p\n",
1546 			  child_listen_node);
1547 		kfree(child_listen_node);
1548 		cm_parent_listen_node->cm_core->stats_listen_nodes_destroyed++;
1549 	}
1550 	spin_unlock_irqrestore(&iwdev->cm_core.listen_list_lock, flags);
1551 
1552 	return ret;
1553 }
1554 
1555 /**
1556  * irdma_netdev_vlan_ipv6 - Gets the netdev and mac
1557  * @addr: local IPv6 address
1558  * @vlan_id: vlan id for the given IPv6 address
1559  * @mac: mac address for the given IPv6 address
1560  *
1561  * Returns the net_device of the IPv6 address and also sets the
1562  * vlan id and mac for that address.
1563  */
1564 struct net_device *irdma_netdev_vlan_ipv6(u32 *addr, u16 *vlan_id, u8 *mac)
1565 {
1566 	struct net_device *ip_dev = NULL;
1567 	struct in6_addr laddr6;
1568 
1569 	if (!IS_ENABLED(CONFIG_IPV6))
1570 		return NULL;
1571 
1572 	irdma_copy_ip_htonl(laddr6.in6_u.u6_addr32, addr);
1573 	if (vlan_id)
1574 		*vlan_id = 0xFFFF;	/* Match rdma_vlan_dev_vlan_id() */
1575 	if (mac)
1576 		eth_zero_addr(mac);
1577 
1578 	rcu_read_lock();
1579 	for_each_netdev_rcu (&init_net, ip_dev) {
1580 		if (ipv6_chk_addr(&init_net, &laddr6, ip_dev, 1)) {
1581 			if (vlan_id)
1582 				*vlan_id = rdma_vlan_dev_vlan_id(ip_dev);
1583 			if (ip_dev->dev_addr && mac)
1584 				ether_addr_copy(mac, ip_dev->dev_addr);
1585 			break;
1586 		}
1587 	}
1588 	rcu_read_unlock();
1589 
1590 	return ip_dev;
1591 }
1592 
1593 /**
1594  * irdma_get_vlan_ipv4 - Returns the vlan_id for IPv4 address
1595  * @addr: local IPv4 address
1596  */
1597 u16 irdma_get_vlan_ipv4(u32 *addr)
1598 {
1599 	struct net_device *netdev;
1600 	u16 vlan_id = 0xFFFF;
1601 
1602 	netdev = ip_dev_find(&init_net, htonl(addr[0]));
1603 	if (netdev) {
1604 		vlan_id = rdma_vlan_dev_vlan_id(netdev);
1605 		dev_put(netdev);
1606 	}
1607 
1608 	return vlan_id;
1609 }
1610 
1611 /**
1612  * irdma_add_mqh_6 - Adds multiple qhashes for IPv6
1613  * @iwdev: iWarp device
1614  * @cm_info: CM info for parent listen node
1615  * @cm_parent_listen_node: The parent listen node
1616  *
1617  * Adds a qhash and a child listen node for every IPv6 address
1618  * on the adapter and adds the associated qhash filter
1619  */
1620 static int irdma_add_mqh_6(struct irdma_device *iwdev,
1621 			   struct irdma_cm_info *cm_info,
1622 			   struct irdma_cm_listener *cm_parent_listen_node)
1623 {
1624 	struct net_device *ip_dev;
1625 	struct inet6_dev *idev;
1626 	struct inet6_ifaddr *ifp, *tmp;
1627 	struct irdma_cm_listener *child_listen_node;
1628 	unsigned long flags;
1629 	int ret = 0;
1630 
1631 	rtnl_lock();
1632 	for_each_netdev(&init_net, ip_dev) {
1633 		if (!(ip_dev->flags & IFF_UP))
1634 			continue;
1635 
1636 		if (((rdma_vlan_dev_vlan_id(ip_dev) >= VLAN_N_VID) ||
1637 		     (rdma_vlan_dev_real_dev(ip_dev) != iwdev->netdev)) &&
1638 		    ip_dev != iwdev->netdev)
1639 			continue;
1640 
1641 		idev = __in6_dev_get(ip_dev);
1642 		if (!idev) {
1643 			ibdev_dbg(&iwdev->ibdev, "CM: idev == NULL\n");
1644 			break;
1645 		}
1646 		list_for_each_entry_safe (ifp, tmp, &idev->addr_list, if_list) {
1647 			ibdev_dbg(&iwdev->ibdev, "CM: IP=%pI6, vlan_id=%d, MAC=%pM\n",
1648 				  &ifp->addr, rdma_vlan_dev_vlan_id(ip_dev),
1649 				  ip_dev->dev_addr);
1650 			child_listen_node = kzalloc(sizeof(*child_listen_node), GFP_KERNEL);
1651 			ibdev_dbg(&iwdev->ibdev, "CM: Allocating child listener %p\n",
1652 				  child_listen_node);
1653 			if (!child_listen_node) {
1654 				ibdev_dbg(&iwdev->ibdev, "CM: listener memory allocation\n");
1655 				ret = -ENOMEM;
1656 				goto exit;
1657 			}
1658 
1659 			cm_info->vlan_id = rdma_vlan_dev_vlan_id(ip_dev);
1660 			cm_parent_listen_node->vlan_id = cm_info->vlan_id;
1661 			memcpy(child_listen_node, cm_parent_listen_node,
1662 			       sizeof(*child_listen_node));
1663 			irdma_copy_ip_ntohl(child_listen_node->loc_addr,
1664 					    ifp->addr.in6_u.u6_addr32);
1665 			memcpy(cm_info->loc_addr, child_listen_node->loc_addr,
1666 			       sizeof(cm_info->loc_addr));
1667 			ret = irdma_manage_qhash(iwdev, cm_info,
1668 						 IRDMA_QHASH_TYPE_TCP_SYN,
1669 						 IRDMA_QHASH_MANAGE_TYPE_ADD,
1670 						 NULL, true);
1671 			if (ret) {
1672 				kfree(child_listen_node);
1673 				continue;
1674 			}
1675 
1676 			trace_irdma_add_mqh_6(iwdev, child_listen_node,
1677 					      ip_dev->dev_addr);
1678 
1679 			child_listen_node->qhash_set = true;
1680 			spin_lock_irqsave(&iwdev->cm_core.listen_list_lock, flags);
1681 			list_add(&child_listen_node->child_listen_list,
1682 				 &cm_parent_listen_node->child_listen_list);
1683 			spin_unlock_irqrestore(&iwdev->cm_core.listen_list_lock, flags);
1684 			cm_parent_listen_node->cm_core->stats_listen_nodes_created++;
1685 		}
1686 	}
1687 exit:
1688 	rtnl_unlock();
1689 
1690 	return ret;
1691 }
1692 
1693 /**
1694  * irdma_add_mqh_4 - Adds multiple qhashes for IPv4
1695  * @iwdev: iWarp device
1696  * @cm_info: CM info for parent listen node
1697  * @cm_parent_listen_node: The parent listen node
1698  *
1699  * Adds a qhash and a child listen node for every IPv4 address
1700  * on the adapter and adds the associated qhash filter
1701  */
1702 static int irdma_add_mqh_4(struct irdma_device *iwdev,
1703 			   struct irdma_cm_info *cm_info,
1704 			   struct irdma_cm_listener *cm_parent_listen_node)
1705 {
1706 	struct net_device *ip_dev;
1707 	struct in_device *idev;
1708 	struct irdma_cm_listener *child_listen_node;
1709 	unsigned long flags;
1710 	const struct in_ifaddr *ifa;
1711 	int ret = 0;
1712 
1713 	rtnl_lock();
1714 	for_each_netdev(&init_net, ip_dev) {
1715 		if (!(ip_dev->flags & IFF_UP))
1716 			continue;
1717 
1718 		if (((rdma_vlan_dev_vlan_id(ip_dev) >= VLAN_N_VID) ||
1719 		     (rdma_vlan_dev_real_dev(ip_dev) != iwdev->netdev)) &&
1720 		    ip_dev != iwdev->netdev)
1721 			continue;
1722 
1723 		idev = in_dev_get(ip_dev);
1724 		in_dev_for_each_ifa_rtnl(ifa, idev) {
1725 			ibdev_dbg(&iwdev->ibdev,
1726 				  "CM: Allocating child CM Listener forIP=%pI4, vlan_id=%d, MAC=%pM\n",
1727 				  &ifa->ifa_address, rdma_vlan_dev_vlan_id(ip_dev),
1728 				  ip_dev->dev_addr);
1729 			child_listen_node = kzalloc(sizeof(*child_listen_node), GFP_KERNEL);
1730 			cm_parent_listen_node->cm_core->stats_listen_nodes_created++;
1731 			ibdev_dbg(&iwdev->ibdev, "CM: Allocating child listener %p\n",
1732 				  child_listen_node);
1733 			if (!child_listen_node) {
1734 				ibdev_dbg(&iwdev->ibdev, "CM: listener memory allocation\n");
1735 				in_dev_put(idev);
1736 				ret = -ENOMEM;
1737 				goto exit;
1738 			}
1739 
1740 			cm_info->vlan_id = rdma_vlan_dev_vlan_id(ip_dev);
1741 			cm_parent_listen_node->vlan_id = cm_info->vlan_id;
1742 			memcpy(child_listen_node, cm_parent_listen_node,
1743 			       sizeof(*child_listen_node));
1744 			child_listen_node->loc_addr[0] =
1745 				ntohl(ifa->ifa_address);
1746 			memcpy(cm_info->loc_addr, child_listen_node->loc_addr,
1747 			       sizeof(cm_info->loc_addr));
1748 			ret = irdma_manage_qhash(iwdev, cm_info,
1749 						 IRDMA_QHASH_TYPE_TCP_SYN,
1750 						 IRDMA_QHASH_MANAGE_TYPE_ADD,
1751 						 NULL, true);
1752 			if (ret) {
1753 				kfree(child_listen_node);
1754 				cm_parent_listen_node->cm_core
1755 					->stats_listen_nodes_created--;
1756 				continue;
1757 			}
1758 
1759 			trace_irdma_add_mqh_4(iwdev, child_listen_node,
1760 					      ip_dev->dev_addr);
1761 
1762 			child_listen_node->qhash_set = true;
1763 			spin_lock_irqsave(&iwdev->cm_core.listen_list_lock,
1764 					  flags);
1765 			list_add(&child_listen_node->child_listen_list,
1766 				 &cm_parent_listen_node->child_listen_list);
1767 			spin_unlock_irqrestore(&iwdev->cm_core.listen_list_lock, flags);
1768 		}
1769 		in_dev_put(idev);
1770 	}
1771 exit:
1772 	rtnl_unlock();
1773 
1774 	return ret;
1775 }
1776 
1777 /**
1778  * irdma_add_mqh - Adds multiple qhashes
1779  * @iwdev: iWarp device
1780  * @cm_info: CM info for parent listen node
1781  * @cm_listen_node: The parent listen node
1782  */
1783 static int irdma_add_mqh(struct irdma_device *iwdev,
1784 			 struct irdma_cm_info *cm_info,
1785 			 struct irdma_cm_listener *cm_listen_node)
1786 {
1787 	if (cm_info->ipv4)
1788 		return irdma_add_mqh_4(iwdev, cm_info, cm_listen_node);
1789 	else
1790 		return irdma_add_mqh_6(iwdev, cm_info, cm_listen_node);
1791 }
1792 
1793 /**
1794  * irdma_reset_list_prep - add connection nodes slated for reset to list
1795  * @cm_core: cm's core
1796  * @listener: pointer to listener node
1797  * @reset_list: a list to which cm_node will be selected
1798  */
1799 static void irdma_reset_list_prep(struct irdma_cm_core *cm_core,
1800 				  struct irdma_cm_listener *listener,
1801 				  struct list_head *reset_list)
1802 {
1803 	struct irdma_cm_node *cm_node;
1804 	int bkt;
1805 
1806 	hash_for_each_rcu(cm_core->cm_hash_tbl, bkt, cm_node, list) {
1807 		if (cm_node->listener == listener &&
1808 		    !cm_node->accelerated &&
1809 		    refcount_inc_not_zero(&cm_node->refcnt))
1810 			list_add(&cm_node->reset_entry, reset_list);
1811 	}
1812 }
1813 
1814 /**
1815  * irdma_dec_refcnt_listen - delete listener and associated cm nodes
1816  * @cm_core: cm's core
1817  * @listener: pointer to listener node
1818  * @free_hanging_nodes: to free associated cm_nodes
1819  * @apbvt_del: flag to delete the apbvt
1820  */
1821 static int irdma_dec_refcnt_listen(struct irdma_cm_core *cm_core,
1822 				   struct irdma_cm_listener *listener,
1823 				   int free_hanging_nodes, bool apbvt_del)
1824 {
1825 	int err;
1826 	struct list_head *list_pos;
1827 	struct list_head *list_temp;
1828 	struct irdma_cm_node *cm_node;
1829 	struct list_head reset_list;
1830 	struct irdma_cm_info nfo;
1831 	enum irdma_cm_node_state old_state;
1832 	unsigned long flags;
1833 
1834 	trace_irdma_dec_refcnt_listen(listener, __builtin_return_address(0));
1835 	/* free non-accelerated child nodes for this listener */
1836 	INIT_LIST_HEAD(&reset_list);
1837 	if (free_hanging_nodes) {
1838 		rcu_read_lock();
1839 		irdma_reset_list_prep(cm_core, listener, &reset_list);
1840 		rcu_read_unlock();
1841 	}
1842 
1843 	list_for_each_safe (list_pos, list_temp, &reset_list) {
1844 		cm_node = container_of(list_pos, struct irdma_cm_node,
1845 				       reset_entry);
1846 		if (cm_node->state >= IRDMA_CM_STATE_FIN_WAIT1) {
1847 			irdma_rem_ref_cm_node(cm_node);
1848 			continue;
1849 		}
1850 
1851 		irdma_cleanup_retrans_entry(cm_node);
1852 		err = irdma_send_reset(cm_node);
1853 		if (err) {
1854 			cm_node->state = IRDMA_CM_STATE_CLOSED;
1855 			ibdev_dbg(&cm_node->iwdev->ibdev,
1856 				  "CM: send reset failed\n");
1857 		} else {
1858 			old_state = cm_node->state;
1859 			cm_node->state = IRDMA_CM_STATE_LISTENER_DESTROYED;
1860 			if (old_state != IRDMA_CM_STATE_MPAREQ_RCVD)
1861 				irdma_rem_ref_cm_node(cm_node);
1862 		}
1863 	}
1864 
1865 	if (refcount_dec_and_test(&listener->refcnt)) {
1866 		spin_lock_irqsave(&cm_core->listen_list_lock, flags);
1867 		list_del(&listener->list);
1868 		spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
1869 
1870 		if (apbvt_del)
1871 			irdma_del_apbvt(listener->iwdev,
1872 					listener->apbvt_entry);
1873 		memcpy(nfo.loc_addr, listener->loc_addr, sizeof(nfo.loc_addr));
1874 		nfo.loc_port = listener->loc_port;
1875 		nfo.ipv4 = listener->ipv4;
1876 		nfo.vlan_id = listener->vlan_id;
1877 		nfo.user_pri = listener->user_pri;
1878 		nfo.qh_qpid = listener->iwdev->vsi.ilq->qp_id;
1879 
1880 		if (!list_empty(&listener->child_listen_list)) {
1881 			irdma_del_multiple_qhash(listener->iwdev, &nfo,
1882 						 listener);
1883 		} else {
1884 			if (listener->qhash_set)
1885 				irdma_manage_qhash(listener->iwdev,
1886 						   &nfo,
1887 						   IRDMA_QHASH_TYPE_TCP_SYN,
1888 						   IRDMA_QHASH_MANAGE_TYPE_DELETE,
1889 						   NULL, false);
1890 		}
1891 
1892 		cm_core->stats_listen_destroyed++;
1893 		cm_core->stats_listen_nodes_destroyed++;
1894 		ibdev_dbg(&listener->iwdev->ibdev,
1895 			  "CM: loc_port=0x%04x loc_addr=%pI4 cm_listen_node=%p cm_id=%p qhash_set=%d vlan_id=%d apbvt_del=%d\n",
1896 			  listener->loc_port, listener->loc_addr, listener,
1897 			  listener->cm_id, listener->qhash_set,
1898 			  listener->vlan_id, apbvt_del);
1899 		kfree(listener);
1900 		listener = NULL;
1901 		return 0;
1902 	}
1903 
1904 	return -EINVAL;
1905 }
1906 
1907 /**
1908  * irdma_cm_del_listen - delete a listener
1909  * @cm_core: cm's core
1910  * @listener: passive connection's listener
1911  * @apbvt_del: flag to delete apbvt
1912  */
1913 static int irdma_cm_del_listen(struct irdma_cm_core *cm_core,
1914 			       struct irdma_cm_listener *listener,
1915 			       bool apbvt_del)
1916 {
1917 	listener->listener_state = IRDMA_CM_LISTENER_PASSIVE_STATE;
1918 	listener->cm_id = NULL;
1919 
1920 	return irdma_dec_refcnt_listen(cm_core, listener, 1, apbvt_del);
1921 }
1922 
1923 /**
1924  * irdma_addr_resolve_neigh - resolve neighbor address
1925  * @iwdev: iwarp device structure
1926  * @src_ip: local ip address
1927  * @dst_ip: remote ip address
1928  * @arpindex: if there is an arp entry
1929  */
1930 static int irdma_addr_resolve_neigh(struct irdma_device *iwdev, u32 src_ip,
1931 				    u32 dst_ip, int arpindex)
1932 {
1933 	struct rtable *rt;
1934 	struct neighbour *neigh;
1935 	int rc = arpindex;
1936 	__be32 dst_ipaddr = htonl(dst_ip);
1937 	__be32 src_ipaddr = htonl(src_ip);
1938 
1939 	rt = ip_route_output(&init_net, dst_ipaddr, src_ipaddr, 0, 0);
1940 	if (IS_ERR(rt)) {
1941 		ibdev_dbg(&iwdev->ibdev, "CM: ip_route_output fail\n");
1942 		return -EINVAL;
1943 	}
1944 
1945 	neigh = dst_neigh_lookup(&rt->dst, &dst_ipaddr);
1946 	if (!neigh)
1947 		goto exit;
1948 
1949 	if (neigh->nud_state & NUD_VALID)
1950 		rc = irdma_add_arp(iwdev->rf, &dst_ip, true, neigh->ha);
1951 	else
1952 		neigh_event_send(neigh, NULL);
1953 	if (neigh)
1954 		neigh_release(neigh);
1955 exit:
1956 	ip_rt_put(rt);
1957 
1958 	return rc;
1959 }
1960 
1961 /**
1962  * irdma_get_dst_ipv6 - get destination cache entry via ipv6 lookup
1963  * @src_addr: local ipv6 sock address
1964  * @dst_addr: destination ipv6 sock address
1965  */
1966 static struct dst_entry *irdma_get_dst_ipv6(struct sockaddr_in6 *src_addr,
1967 					    struct sockaddr_in6 *dst_addr)
1968 {
1969 	struct dst_entry *dst = NULL;
1970 
1971 	if ((IS_ENABLED(CONFIG_IPV6))) {
1972 		struct flowi6 fl6 = {};
1973 
1974 		fl6.daddr = dst_addr->sin6_addr;
1975 		fl6.saddr = src_addr->sin6_addr;
1976 		if (ipv6_addr_type(&fl6.daddr) & IPV6_ADDR_LINKLOCAL)
1977 			fl6.flowi6_oif = dst_addr->sin6_scope_id;
1978 
1979 		dst = ip6_route_output(&init_net, NULL, &fl6);
1980 	}
1981 
1982 	return dst;
1983 }
1984 
1985 /**
1986  * irdma_addr_resolve_neigh_ipv6 - resolve neighbor ipv6 address
1987  * @iwdev: iwarp device structure
1988  * @src: local ip address
1989  * @dest: remote ip address
1990  * @arpindex: if there is an arp entry
1991  */
1992 static int irdma_addr_resolve_neigh_ipv6(struct irdma_device *iwdev, u32 *src,
1993 					 u32 *dest, int arpindex)
1994 {
1995 	struct neighbour *neigh;
1996 	int rc = arpindex;
1997 	struct dst_entry *dst;
1998 	struct sockaddr_in6 dst_addr = {};
1999 	struct sockaddr_in6 src_addr = {};
2000 
2001 	dst_addr.sin6_family = AF_INET6;
2002 	irdma_copy_ip_htonl(dst_addr.sin6_addr.in6_u.u6_addr32, dest);
2003 	src_addr.sin6_family = AF_INET6;
2004 	irdma_copy_ip_htonl(src_addr.sin6_addr.in6_u.u6_addr32, src);
2005 	dst = irdma_get_dst_ipv6(&src_addr, &dst_addr);
2006 	if (!dst || dst->error) {
2007 		if (dst) {
2008 			dst_release(dst);
2009 			ibdev_dbg(&iwdev->ibdev,
2010 				  "CM: ip6_route_output returned dst->error = %d\n",
2011 				  dst->error);
2012 		}
2013 		return -EINVAL;
2014 	}
2015 
2016 	neigh = dst_neigh_lookup(dst, dst_addr.sin6_addr.in6_u.u6_addr32);
2017 	if (!neigh)
2018 		goto exit;
2019 
2020 	ibdev_dbg(&iwdev->ibdev, "CM: dst_neigh_lookup MAC=%pM\n",
2021 		  neigh->ha);
2022 
2023 	trace_irdma_addr_resolve(iwdev, neigh->ha);
2024 
2025 	if (neigh->nud_state & NUD_VALID)
2026 		rc = irdma_add_arp(iwdev->rf, dest, false, neigh->ha);
2027 	else
2028 		neigh_event_send(neigh, NULL);
2029 	if (neigh)
2030 		neigh_release(neigh);
2031 exit:
2032 	dst_release(dst);
2033 
2034 	return rc;
2035 }
2036 
2037 /**
2038  * irdma_find_node - find a cm node that matches the reference cm node
2039  * @cm_core: cm's core
2040  * @rem_port: remote tcp port num
2041  * @rem_addr: remote ip addr
2042  * @loc_port: local tcp port num
2043  * @loc_addr: local ip addr
2044  * @vlan_id: local VLAN ID
2045  */
2046 struct irdma_cm_node *irdma_find_node(struct irdma_cm_core *cm_core,
2047 				      u16 rem_port, u32 *rem_addr, u16 loc_port,
2048 				      u32 *loc_addr, u16 vlan_id)
2049 {
2050 	struct irdma_cm_node *cm_node;
2051 	u32 key = (rem_port << 16) | loc_port;
2052 
2053 	rcu_read_lock();
2054 	hash_for_each_possible_rcu(cm_core->cm_hash_tbl, cm_node, list, key) {
2055 		if (cm_node->vlan_id == vlan_id &&
2056 		    cm_node->loc_port == loc_port && cm_node->rem_port == rem_port &&
2057 		    !memcmp(cm_node->loc_addr, loc_addr, sizeof(cm_node->loc_addr)) &&
2058 		    !memcmp(cm_node->rem_addr, rem_addr, sizeof(cm_node->rem_addr))) {
2059 			if (!refcount_inc_not_zero(&cm_node->refcnt))
2060 				goto exit;
2061 			rcu_read_unlock();
2062 			trace_irdma_find_node(cm_node, 0, NULL);
2063 			return cm_node;
2064 		}
2065 	}
2066 
2067 exit:
2068 	rcu_read_unlock();
2069 
2070 	/* no owner node */
2071 	return NULL;
2072 }
2073 
2074 /**
2075  * irdma_add_hte_node - add a cm node to the hash table
2076  * @cm_core: cm's core
2077  * @cm_node: connection's node
2078  */
2079 static void irdma_add_hte_node(struct irdma_cm_core *cm_core,
2080 			       struct irdma_cm_node *cm_node)
2081 {
2082 	unsigned long flags;
2083 	u32 key = (cm_node->rem_port << 16) | cm_node->loc_port;
2084 
2085 	spin_lock_irqsave(&cm_core->ht_lock, flags);
2086 	hash_add_rcu(cm_core->cm_hash_tbl, &cm_node->list, key);
2087 	spin_unlock_irqrestore(&cm_core->ht_lock, flags);
2088 }
2089 
2090 /**
2091  * irdma_ipv4_is_lpb - check if loopback
2092  * @loc_addr: local addr to compare
2093  * @rem_addr: remote address
2094  */
2095 bool irdma_ipv4_is_lpb(u32 loc_addr, u32 rem_addr)
2096 {
2097 	return ipv4_is_loopback(htonl(rem_addr)) || (loc_addr == rem_addr);
2098 }
2099 
2100 /**
2101  * irdma_ipv6_is_lpb - check if loopback
2102  * @loc_addr: local addr to compare
2103  * @rem_addr: remote address
2104  */
2105 bool irdma_ipv6_is_lpb(u32 *loc_addr, u32 *rem_addr)
2106 {
2107 	struct in6_addr raddr6;
2108 
2109 	irdma_copy_ip_htonl(raddr6.in6_u.u6_addr32, rem_addr);
2110 
2111 	return !memcmp(loc_addr, rem_addr, 16) || ipv6_addr_loopback(&raddr6);
2112 }
2113 
2114 /**
2115  * irdma_cm_create_ah - create a cm address handle
2116  * @cm_node: The connection manager node to create AH for
2117  * @wait: Provides option to wait for ah creation or not
2118  */
2119 static int irdma_cm_create_ah(struct irdma_cm_node *cm_node, bool wait)
2120 {
2121 	struct irdma_ah_info ah_info = {};
2122 	struct irdma_device *iwdev = cm_node->iwdev;
2123 
2124 	ether_addr_copy(ah_info.mac_addr, iwdev->netdev->dev_addr);
2125 
2126 	ah_info.hop_ttl = 0x40;
2127 	ah_info.tc_tos = cm_node->tos;
2128 	ah_info.vsi = &iwdev->vsi;
2129 
2130 	if (cm_node->ipv4) {
2131 		ah_info.ipv4_valid = true;
2132 		ah_info.dest_ip_addr[0] = cm_node->rem_addr[0];
2133 		ah_info.src_ip_addr[0] = cm_node->loc_addr[0];
2134 		ah_info.do_lpbk = irdma_ipv4_is_lpb(ah_info.src_ip_addr[0],
2135 						    ah_info.dest_ip_addr[0]);
2136 	} else {
2137 		memcpy(ah_info.dest_ip_addr, cm_node->rem_addr,
2138 		       sizeof(ah_info.dest_ip_addr));
2139 		memcpy(ah_info.src_ip_addr, cm_node->loc_addr,
2140 		       sizeof(ah_info.src_ip_addr));
2141 		ah_info.do_lpbk = irdma_ipv6_is_lpb(ah_info.src_ip_addr,
2142 						    ah_info.dest_ip_addr);
2143 	}
2144 
2145 	ah_info.vlan_tag = cm_node->vlan_id;
2146 	if (cm_node->vlan_id < VLAN_N_VID) {
2147 		ah_info.insert_vlan_tag = 1;
2148 		ah_info.vlan_tag |= cm_node->user_pri << VLAN_PRIO_SHIFT;
2149 	}
2150 
2151 	ah_info.dst_arpindex =
2152 		irdma_arp_table(iwdev->rf, ah_info.dest_ip_addr,
2153 				ah_info.ipv4_valid, NULL, IRDMA_ARP_RESOLVE);
2154 
2155 	if (irdma_puda_create_ah(&iwdev->rf->sc_dev, &ah_info, wait,
2156 				 IRDMA_PUDA_RSRC_TYPE_ILQ, cm_node,
2157 				 &cm_node->ah))
2158 		return -ENOMEM;
2159 
2160 	trace_irdma_create_ah(cm_node);
2161 	return 0;
2162 }
2163 
2164 /**
2165  * irdma_cm_free_ah - free a cm address handle
2166  * @cm_node: The connection manager node to create AH for
2167  */
2168 static void irdma_cm_free_ah(struct irdma_cm_node *cm_node)
2169 {
2170 	struct irdma_device *iwdev = cm_node->iwdev;
2171 
2172 	trace_irdma_cm_free_ah(cm_node);
2173 	irdma_puda_free_ah(&iwdev->rf->sc_dev, cm_node->ah);
2174 	cm_node->ah = NULL;
2175 }
2176 
2177 /**
2178  * irdma_make_cm_node - create a new instance of a cm node
2179  * @cm_core: cm's core
2180  * @iwdev: iwarp device structure
2181  * @cm_info: quad info for connection
2182  * @listener: passive connection's listener
2183  */
2184 static struct irdma_cm_node *
2185 irdma_make_cm_node(struct irdma_cm_core *cm_core, struct irdma_device *iwdev,
2186 		   struct irdma_cm_info *cm_info,
2187 		   struct irdma_cm_listener *listener)
2188 {
2189 	struct irdma_cm_node *cm_node;
2190 	int oldarpindex;
2191 	int arpindex;
2192 	struct net_device *netdev = iwdev->netdev;
2193 
2194 	/* create an hte and cm_node for this instance */
2195 	cm_node = kzalloc(sizeof(*cm_node), GFP_ATOMIC);
2196 	if (!cm_node)
2197 		return NULL;
2198 
2199 	/* set our node specific transport info */
2200 	cm_node->ipv4 = cm_info->ipv4;
2201 	cm_node->vlan_id = cm_info->vlan_id;
2202 	if (cm_node->vlan_id >= VLAN_N_VID && iwdev->dcb_vlan_mode)
2203 		cm_node->vlan_id = 0;
2204 	cm_node->tos = cm_info->tos;
2205 	cm_node->user_pri = cm_info->user_pri;
2206 	if (listener) {
2207 		if (listener->tos != cm_info->tos)
2208 			ibdev_warn(&iwdev->ibdev,
2209 				   "application TOS[%d] and remote client TOS[%d] mismatch\n",
2210 				   listener->tos, cm_info->tos);
2211 		if (iwdev->vsi.dscp_mode) {
2212 			cm_node->user_pri = listener->user_pri;
2213 		} else {
2214 			cm_node->tos = max(listener->tos, cm_info->tos);
2215 			cm_node->user_pri = rt_tos2priority(cm_node->tos);
2216 		}
2217 		ibdev_dbg(&iwdev->ibdev,
2218 			  "DCB: listener: TOS:[%d] UP:[%d]\n", cm_node->tos,
2219 			  cm_node->user_pri);
2220 		trace_irdma_listener_tos(iwdev, cm_node->tos,
2221 					 cm_node->user_pri);
2222 	}
2223 	memcpy(cm_node->loc_addr, cm_info->loc_addr, sizeof(cm_node->loc_addr));
2224 	memcpy(cm_node->rem_addr, cm_info->rem_addr, sizeof(cm_node->rem_addr));
2225 	cm_node->loc_port = cm_info->loc_port;
2226 	cm_node->rem_port = cm_info->rem_port;
2227 
2228 	cm_node->mpa_frame_rev = IRDMA_CM_DEFAULT_MPA_VER;
2229 	cm_node->send_rdma0_op = SEND_RDMA_READ_ZERO;
2230 	cm_node->iwdev = iwdev;
2231 	cm_node->dev = &iwdev->rf->sc_dev;
2232 
2233 	cm_node->ird_size = cm_node->dev->hw_attrs.max_hw_ird;
2234 	cm_node->ord_size = cm_node->dev->hw_attrs.max_hw_ord;
2235 
2236 	cm_node->listener = listener;
2237 	cm_node->cm_id = cm_info->cm_id;
2238 	ether_addr_copy(cm_node->loc_mac, netdev->dev_addr);
2239 	spin_lock_init(&cm_node->retrans_list_lock);
2240 	cm_node->ack_rcvd = false;
2241 
2242 	init_completion(&cm_node->establish_comp);
2243 	refcount_set(&cm_node->refcnt, 1);
2244 	/* associate our parent CM core */
2245 	cm_node->cm_core = cm_core;
2246 	cm_node->tcp_cntxt.loc_id = IRDMA_CM_DEFAULT_LOCAL_ID;
2247 	cm_node->tcp_cntxt.rcv_wscale = iwdev->rcv_wscale;
2248 	cm_node->tcp_cntxt.rcv_wnd = iwdev->rcv_wnd >> cm_node->tcp_cntxt.rcv_wscale;
2249 	if (cm_node->ipv4) {
2250 		cm_node->tcp_cntxt.loc_seq_num = secure_tcp_seq(htonl(cm_node->loc_addr[0]),
2251 								htonl(cm_node->rem_addr[0]),
2252 								htons(cm_node->loc_port),
2253 								htons(cm_node->rem_port));
2254 		cm_node->tcp_cntxt.mss = iwdev->vsi.mtu - IRDMA_MTU_TO_MSS_IPV4;
2255 	} else if (IS_ENABLED(CONFIG_IPV6)) {
2256 		__be32 loc[4] = {
2257 			htonl(cm_node->loc_addr[0]), htonl(cm_node->loc_addr[1]),
2258 			htonl(cm_node->loc_addr[2]), htonl(cm_node->loc_addr[3])
2259 		};
2260 		__be32 rem[4] = {
2261 			htonl(cm_node->rem_addr[0]), htonl(cm_node->rem_addr[1]),
2262 			htonl(cm_node->rem_addr[2]), htonl(cm_node->rem_addr[3])
2263 		};
2264 		cm_node->tcp_cntxt.loc_seq_num = secure_tcpv6_seq(loc, rem,
2265 								  htons(cm_node->loc_port),
2266 								  htons(cm_node->rem_port));
2267 		cm_node->tcp_cntxt.mss = iwdev->vsi.mtu - IRDMA_MTU_TO_MSS_IPV6;
2268 	}
2269 
2270 	if ((cm_node->ipv4 &&
2271 	     irdma_ipv4_is_lpb(cm_node->loc_addr[0], cm_node->rem_addr[0])) ||
2272 	    (!cm_node->ipv4 &&
2273 	     irdma_ipv6_is_lpb(cm_node->loc_addr, cm_node->rem_addr))) {
2274 		cm_node->do_lpb = true;
2275 		arpindex = irdma_arp_table(iwdev->rf, cm_node->rem_addr,
2276 					   cm_node->ipv4, NULL,
2277 					   IRDMA_ARP_RESOLVE);
2278 	} else {
2279 		oldarpindex = irdma_arp_table(iwdev->rf, cm_node->rem_addr,
2280 					      cm_node->ipv4, NULL,
2281 					      IRDMA_ARP_RESOLVE);
2282 		if (cm_node->ipv4)
2283 			arpindex = irdma_addr_resolve_neigh(iwdev,
2284 							    cm_info->loc_addr[0],
2285 							    cm_info->rem_addr[0],
2286 							    oldarpindex);
2287 		else if (IS_ENABLED(CONFIG_IPV6))
2288 			arpindex = irdma_addr_resolve_neigh_ipv6(iwdev,
2289 								 cm_info->loc_addr,
2290 								 cm_info->rem_addr,
2291 								 oldarpindex);
2292 		else
2293 			arpindex = -EINVAL;
2294 	}
2295 
2296 	if (arpindex < 0)
2297 		goto err;
2298 
2299 	ether_addr_copy(cm_node->rem_mac,
2300 			iwdev->rf->arp_table[arpindex].mac_addr);
2301 	irdma_add_hte_node(cm_core, cm_node);
2302 	cm_core->stats_nodes_created++;
2303 	return cm_node;
2304 
2305 err:
2306 	kfree(cm_node);
2307 
2308 	return NULL;
2309 }
2310 
2311 static void irdma_cm_node_free_cb(struct rcu_head *rcu_head)
2312 {
2313 	struct irdma_cm_node *cm_node =
2314 			    container_of(rcu_head, struct irdma_cm_node, rcu_head);
2315 	struct irdma_cm_core *cm_core = cm_node->cm_core;
2316 	struct irdma_qp *iwqp;
2317 	struct irdma_cm_info nfo;
2318 
2319 	/* if the node is destroyed before connection was accelerated */
2320 	if (!cm_node->accelerated && cm_node->accept_pend) {
2321 		ibdev_dbg(&cm_node->iwdev->ibdev,
2322 			  "CM: node destroyed before established\n");
2323 		atomic_dec(&cm_node->listener->pend_accepts_cnt);
2324 	}
2325 	if (cm_node->close_entry)
2326 		irdma_handle_close_entry(cm_node, 0);
2327 	if (cm_node->listener) {
2328 		irdma_dec_refcnt_listen(cm_core, cm_node->listener, 0, true);
2329 	} else {
2330 		if (cm_node->apbvt_set) {
2331 			irdma_del_apbvt(cm_node->iwdev, cm_node->apbvt_entry);
2332 			cm_node->apbvt_set = 0;
2333 		}
2334 		irdma_get_addr_info(cm_node, &nfo);
2335 		if (cm_node->qhash_set) {
2336 			nfo.qh_qpid = cm_node->iwdev->vsi.ilq->qp_id;
2337 			irdma_manage_qhash(cm_node->iwdev, &nfo,
2338 					   IRDMA_QHASH_TYPE_TCP_ESTABLISHED,
2339 					   IRDMA_QHASH_MANAGE_TYPE_DELETE, NULL,
2340 					   false);
2341 			cm_node->qhash_set = 0;
2342 		}
2343 	}
2344 
2345 	iwqp = cm_node->iwqp;
2346 	if (iwqp) {
2347 		cm_node->cm_id->rem_ref(cm_node->cm_id);
2348 		cm_node->cm_id = NULL;
2349 		iwqp->cm_id = NULL;
2350 		irdma_qp_rem_ref(&iwqp->ibqp);
2351 		cm_node->iwqp = NULL;
2352 	} else if (cm_node->qhash_set) {
2353 		irdma_get_addr_info(cm_node, &nfo);
2354 		nfo.qh_qpid = cm_node->iwdev->vsi.ilq->qp_id;
2355 		irdma_manage_qhash(cm_node->iwdev, &nfo,
2356 				   IRDMA_QHASH_TYPE_TCP_ESTABLISHED,
2357 				   IRDMA_QHASH_MANAGE_TYPE_DELETE, NULL, false);
2358 		cm_node->qhash_set = 0;
2359 	}
2360 
2361 	cm_core->cm_free_ah(cm_node);
2362 	kfree(cm_node);
2363 }
2364 
2365 /**
2366  * irdma_rem_ref_cm_node - destroy an instance of a cm node
2367  * @cm_node: connection's node
2368  */
2369 void irdma_rem_ref_cm_node(struct irdma_cm_node *cm_node)
2370 {
2371 	struct irdma_cm_core *cm_core = cm_node->cm_core;
2372 	unsigned long flags;
2373 
2374 	trace_irdma_rem_ref_cm_node(cm_node, 0, __builtin_return_address(0));
2375 	spin_lock_irqsave(&cm_core->ht_lock, flags);
2376 
2377 	if (!refcount_dec_and_test(&cm_node->refcnt)) {
2378 		spin_unlock_irqrestore(&cm_core->ht_lock, flags);
2379 		return;
2380 	}
2381 	if (cm_node->iwqp) {
2382 		cm_node->iwqp->cm_node = NULL;
2383 		cm_node->iwqp->cm_id = NULL;
2384 	}
2385 	hash_del_rcu(&cm_node->list);
2386 	cm_node->cm_core->stats_nodes_destroyed++;
2387 
2388 	spin_unlock_irqrestore(&cm_core->ht_lock, flags);
2389 
2390 	/* wait for all list walkers to exit their grace period */
2391 	call_rcu(&cm_node->rcu_head, irdma_cm_node_free_cb);
2392 }
2393 
2394 /**
2395  * irdma_handle_fin_pkt - FIN packet received
2396  * @cm_node: connection's node
2397  */
2398 static void irdma_handle_fin_pkt(struct irdma_cm_node *cm_node)
2399 {
2400 	switch (cm_node->state) {
2401 	case IRDMA_CM_STATE_SYN_RCVD:
2402 	case IRDMA_CM_STATE_SYN_SENT:
2403 	case IRDMA_CM_STATE_ESTABLISHED:
2404 	case IRDMA_CM_STATE_MPAREJ_RCVD:
2405 		cm_node->tcp_cntxt.rcv_nxt++;
2406 		irdma_cleanup_retrans_entry(cm_node);
2407 		cm_node->state = IRDMA_CM_STATE_LAST_ACK;
2408 		irdma_send_fin(cm_node);
2409 		break;
2410 	case IRDMA_CM_STATE_MPAREQ_SENT:
2411 		irdma_create_event(cm_node, IRDMA_CM_EVENT_ABORTED);
2412 		cm_node->tcp_cntxt.rcv_nxt++;
2413 		irdma_cleanup_retrans_entry(cm_node);
2414 		cm_node->state = IRDMA_CM_STATE_CLOSED;
2415 		refcount_inc(&cm_node->refcnt);
2416 		irdma_send_reset(cm_node);
2417 		break;
2418 	case IRDMA_CM_STATE_FIN_WAIT1:
2419 		cm_node->tcp_cntxt.rcv_nxt++;
2420 		irdma_cleanup_retrans_entry(cm_node);
2421 		cm_node->state = IRDMA_CM_STATE_CLOSING;
2422 		irdma_send_ack(cm_node);
2423 		/*
2424 		 * Wait for ACK as this is simultaneous close.
2425 		 * After we receive ACK, do not send anything.
2426 		 * Just rm the node.
2427 		 */
2428 		break;
2429 	case IRDMA_CM_STATE_FIN_WAIT2:
2430 		cm_node->tcp_cntxt.rcv_nxt++;
2431 		irdma_cleanup_retrans_entry(cm_node);
2432 		cm_node->state = IRDMA_CM_STATE_TIME_WAIT;
2433 		irdma_send_ack(cm_node);
2434 		irdma_schedule_cm_timer(cm_node, NULL, IRDMA_TIMER_TYPE_CLOSE,
2435 					1, 0);
2436 		break;
2437 	case IRDMA_CM_STATE_TIME_WAIT:
2438 		cm_node->tcp_cntxt.rcv_nxt++;
2439 		irdma_cleanup_retrans_entry(cm_node);
2440 		cm_node->state = IRDMA_CM_STATE_CLOSED;
2441 		irdma_rem_ref_cm_node(cm_node);
2442 		break;
2443 	case IRDMA_CM_STATE_OFFLOADED:
2444 	default:
2445 		ibdev_dbg(&cm_node->iwdev->ibdev,
2446 			  "CM: bad state node state = %d\n", cm_node->state);
2447 		break;
2448 	}
2449 }
2450 
2451 /**
2452  * irdma_handle_rst_pkt - process received RST packet
2453  * @cm_node: connection's node
2454  * @rbuf: receive buffer
2455  */
2456 static void irdma_handle_rst_pkt(struct irdma_cm_node *cm_node,
2457 				 struct irdma_puda_buf *rbuf)
2458 {
2459 	ibdev_dbg(&cm_node->iwdev->ibdev,
2460 		  "CM: caller: %pS cm_node=%p state=%d rem_port=0x%04x loc_port=0x%04x rem_addr=%pI4 loc_addr=%pI4\n",
2461 		  __builtin_return_address(0), cm_node, cm_node->state,
2462 		  cm_node->rem_port, cm_node->loc_port, cm_node->rem_addr,
2463 		  cm_node->loc_addr);
2464 
2465 	irdma_cleanup_retrans_entry(cm_node);
2466 	switch (cm_node->state) {
2467 	case IRDMA_CM_STATE_SYN_SENT:
2468 	case IRDMA_CM_STATE_MPAREQ_SENT:
2469 		switch (cm_node->mpa_frame_rev) {
2470 		case IETF_MPA_V2:
2471 			/* Drop down to MPA_V1*/
2472 			cm_node->mpa_frame_rev = IETF_MPA_V1;
2473 			/* send a syn and goto syn sent state */
2474 			cm_node->state = IRDMA_CM_STATE_SYN_SENT;
2475 			if (irdma_send_syn(cm_node, 0))
2476 				irdma_active_open_err(cm_node, false);
2477 			break;
2478 		case IETF_MPA_V1:
2479 		default:
2480 			irdma_active_open_err(cm_node, false);
2481 			break;
2482 		}
2483 		break;
2484 	case IRDMA_CM_STATE_MPAREQ_RCVD:
2485 		atomic_inc(&cm_node->passive_state);
2486 		break;
2487 	case IRDMA_CM_STATE_ESTABLISHED:
2488 	case IRDMA_CM_STATE_SYN_RCVD:
2489 	case IRDMA_CM_STATE_LISTENING:
2490 		irdma_passive_open_err(cm_node, false);
2491 		break;
2492 	case IRDMA_CM_STATE_OFFLOADED:
2493 		irdma_active_open_err(cm_node, false);
2494 		break;
2495 	case IRDMA_CM_STATE_CLOSED:
2496 		break;
2497 	case IRDMA_CM_STATE_FIN_WAIT2:
2498 	case IRDMA_CM_STATE_FIN_WAIT1:
2499 	case IRDMA_CM_STATE_LAST_ACK:
2500 	case IRDMA_CM_STATE_TIME_WAIT:
2501 		cm_node->state = IRDMA_CM_STATE_CLOSED;
2502 		irdma_rem_ref_cm_node(cm_node);
2503 		break;
2504 	default:
2505 		break;
2506 	}
2507 }
2508 
2509 /**
2510  * irdma_handle_rcv_mpa - Process a recv'd mpa buffer
2511  * @cm_node: connection's node
2512  * @rbuf: receive buffer
2513  */
2514 static void irdma_handle_rcv_mpa(struct irdma_cm_node *cm_node,
2515 				 struct irdma_puda_buf *rbuf)
2516 {
2517 	int err;
2518 	int datasize = rbuf->datalen;
2519 	u8 *dataloc = rbuf->data;
2520 
2521 	enum irdma_cm_event_type type = IRDMA_CM_EVENT_UNKNOWN;
2522 	u32 res_type;
2523 
2524 	err = irdma_parse_mpa(cm_node, dataloc, &res_type, datasize);
2525 	if (err) {
2526 		if (cm_node->state == IRDMA_CM_STATE_MPAREQ_SENT)
2527 			irdma_active_open_err(cm_node, true);
2528 		else
2529 			irdma_passive_open_err(cm_node, true);
2530 		return;
2531 	}
2532 
2533 	switch (cm_node->state) {
2534 	case IRDMA_CM_STATE_ESTABLISHED:
2535 		if (res_type == IRDMA_MPA_REQUEST_REJECT)
2536 			ibdev_dbg(&cm_node->iwdev->ibdev,
2537 				  "CM: state for reject\n");
2538 		cm_node->state = IRDMA_CM_STATE_MPAREQ_RCVD;
2539 		type = IRDMA_CM_EVENT_MPA_REQ;
2540 		irdma_send_ack(cm_node); /* ACK received MPA request */
2541 		atomic_set(&cm_node->passive_state,
2542 			   IRDMA_PASSIVE_STATE_INDICATED);
2543 		break;
2544 	case IRDMA_CM_STATE_MPAREQ_SENT:
2545 		irdma_cleanup_retrans_entry(cm_node);
2546 		if (res_type == IRDMA_MPA_REQUEST_REJECT) {
2547 			type = IRDMA_CM_EVENT_MPA_REJECT;
2548 			cm_node->state = IRDMA_CM_STATE_MPAREJ_RCVD;
2549 		} else {
2550 			type = IRDMA_CM_EVENT_CONNECTED;
2551 			cm_node->state = IRDMA_CM_STATE_OFFLOADED;
2552 		}
2553 		irdma_send_ack(cm_node);
2554 		break;
2555 	default:
2556 		ibdev_dbg(&cm_node->iwdev->ibdev,
2557 			  "CM: wrong cm_node state =%d\n", cm_node->state);
2558 		break;
2559 	}
2560 	irdma_create_event(cm_node, type);
2561 }
2562 
2563 /**
2564  * irdma_check_syn - Check for error on received syn ack
2565  * @cm_node: connection's node
2566  * @tcph: pointer tcp header
2567  */
2568 static int irdma_check_syn(struct irdma_cm_node *cm_node, struct tcphdr *tcph)
2569 {
2570 	if (ntohl(tcph->ack_seq) != cm_node->tcp_cntxt.loc_seq_num) {
2571 		irdma_active_open_err(cm_node, true);
2572 		return 1;
2573 	}
2574 
2575 	return 0;
2576 }
2577 
2578 /**
2579  * irdma_check_seq - check seq numbers if OK
2580  * @cm_node: connection's node
2581  * @tcph: pointer tcp header
2582  */
2583 static int irdma_check_seq(struct irdma_cm_node *cm_node, struct tcphdr *tcph)
2584 {
2585 	u32 seq;
2586 	u32 ack_seq;
2587 	u32 loc_seq_num = cm_node->tcp_cntxt.loc_seq_num;
2588 	u32 rcv_nxt = cm_node->tcp_cntxt.rcv_nxt;
2589 	u32 rcv_wnd;
2590 	int err = 0;
2591 
2592 	seq = ntohl(tcph->seq);
2593 	ack_seq = ntohl(tcph->ack_seq);
2594 	rcv_wnd = cm_node->tcp_cntxt.rcv_wnd;
2595 	if (ack_seq != loc_seq_num ||
2596 	    !between(seq, rcv_nxt, (rcv_nxt + rcv_wnd)))
2597 		err = -1;
2598 	if (err)
2599 		ibdev_dbg(&cm_node->iwdev->ibdev,
2600 			  "CM: seq number err\n");
2601 
2602 	return err;
2603 }
2604 
2605 void irdma_add_conn_est_qh(struct irdma_cm_node *cm_node)
2606 {
2607 	struct irdma_cm_info nfo;
2608 
2609 	irdma_get_addr_info(cm_node, &nfo);
2610 	nfo.qh_qpid = cm_node->iwdev->vsi.ilq->qp_id;
2611 	irdma_manage_qhash(cm_node->iwdev, &nfo,
2612 			   IRDMA_QHASH_TYPE_TCP_ESTABLISHED,
2613 			   IRDMA_QHASH_MANAGE_TYPE_ADD,
2614 			   cm_node, false);
2615 	cm_node->qhash_set = true;
2616 }
2617 
2618 /**
2619  * irdma_handle_syn_pkt - is for Passive node
2620  * @cm_node: connection's node
2621  * @rbuf: receive buffer
2622  */
2623 static void irdma_handle_syn_pkt(struct irdma_cm_node *cm_node,
2624 				 struct irdma_puda_buf *rbuf)
2625 {
2626 	struct tcphdr *tcph = (struct tcphdr *)rbuf->tcph;
2627 	int err;
2628 	u32 inc_sequence;
2629 	int optionsize;
2630 
2631 	optionsize = (tcph->doff << 2) - sizeof(struct tcphdr);
2632 	inc_sequence = ntohl(tcph->seq);
2633 
2634 	switch (cm_node->state) {
2635 	case IRDMA_CM_STATE_SYN_SENT:
2636 	case IRDMA_CM_STATE_MPAREQ_SENT:
2637 		/* Rcvd syn on active open connection */
2638 		irdma_active_open_err(cm_node, 1);
2639 		break;
2640 	case IRDMA_CM_STATE_LISTENING:
2641 		/* Passive OPEN */
2642 		if (atomic_read(&cm_node->listener->pend_accepts_cnt) >
2643 		    cm_node->listener->backlog) {
2644 			cm_node->cm_core->stats_backlog_drops++;
2645 			irdma_passive_open_err(cm_node, false);
2646 			break;
2647 		}
2648 		err = irdma_handle_tcp_options(cm_node, tcph, optionsize, 1);
2649 		if (err) {
2650 			irdma_passive_open_err(cm_node, false);
2651 			/* drop pkt */
2652 			break;
2653 		}
2654 		err = cm_node->cm_core->cm_create_ah(cm_node, false);
2655 		if (err) {
2656 			irdma_passive_open_err(cm_node, false);
2657 			/* drop pkt */
2658 			break;
2659 		}
2660 		cm_node->tcp_cntxt.rcv_nxt = inc_sequence + 1;
2661 		cm_node->accept_pend = 1;
2662 		atomic_inc(&cm_node->listener->pend_accepts_cnt);
2663 
2664 		cm_node->state = IRDMA_CM_STATE_SYN_RCVD;
2665 		break;
2666 	case IRDMA_CM_STATE_CLOSED:
2667 		irdma_cleanup_retrans_entry(cm_node);
2668 		refcount_inc(&cm_node->refcnt);
2669 		irdma_send_reset(cm_node);
2670 		break;
2671 	case IRDMA_CM_STATE_OFFLOADED:
2672 	case IRDMA_CM_STATE_ESTABLISHED:
2673 	case IRDMA_CM_STATE_FIN_WAIT1:
2674 	case IRDMA_CM_STATE_FIN_WAIT2:
2675 	case IRDMA_CM_STATE_MPAREQ_RCVD:
2676 	case IRDMA_CM_STATE_LAST_ACK:
2677 	case IRDMA_CM_STATE_CLOSING:
2678 	case IRDMA_CM_STATE_UNKNOWN:
2679 	default:
2680 		break;
2681 	}
2682 }
2683 
2684 /**
2685  * irdma_handle_synack_pkt - Process SYN+ACK packet (active side)
2686  * @cm_node: connection's node
2687  * @rbuf: receive buffer
2688  */
2689 static void irdma_handle_synack_pkt(struct irdma_cm_node *cm_node,
2690 				    struct irdma_puda_buf *rbuf)
2691 {
2692 	struct tcphdr *tcph = (struct tcphdr *)rbuf->tcph;
2693 	int err;
2694 	u32 inc_sequence;
2695 	int optionsize;
2696 
2697 	optionsize = (tcph->doff << 2) - sizeof(struct tcphdr);
2698 	inc_sequence = ntohl(tcph->seq);
2699 	switch (cm_node->state) {
2700 	case IRDMA_CM_STATE_SYN_SENT:
2701 		irdma_cleanup_retrans_entry(cm_node);
2702 		/* active open */
2703 		if (irdma_check_syn(cm_node, tcph)) {
2704 			ibdev_dbg(&cm_node->iwdev->ibdev,
2705 				  "CM: check syn fail\n");
2706 			return;
2707 		}
2708 		cm_node->tcp_cntxt.rem_ack_num = ntohl(tcph->ack_seq);
2709 		/* setup options */
2710 		err = irdma_handle_tcp_options(cm_node, tcph, optionsize, 0);
2711 		if (err) {
2712 			ibdev_dbg(&cm_node->iwdev->ibdev,
2713 				  "CM: cm_node=%p tcp_options failed\n",
2714 				  cm_node);
2715 			break;
2716 		}
2717 		irdma_cleanup_retrans_entry(cm_node);
2718 		cm_node->tcp_cntxt.rcv_nxt = inc_sequence + 1;
2719 		irdma_send_ack(cm_node); /* ACK  for the syn_ack */
2720 		err = irdma_send_mpa_request(cm_node);
2721 		if (err) {
2722 			ibdev_dbg(&cm_node->iwdev->ibdev,
2723 				  "CM: cm_node=%p irdma_send_mpa_request failed\n",
2724 				  cm_node);
2725 			break;
2726 		}
2727 		cm_node->state = IRDMA_CM_STATE_MPAREQ_SENT;
2728 		break;
2729 	case IRDMA_CM_STATE_MPAREQ_RCVD:
2730 		irdma_passive_open_err(cm_node, true);
2731 		break;
2732 	case IRDMA_CM_STATE_LISTENING:
2733 		cm_node->tcp_cntxt.loc_seq_num = ntohl(tcph->ack_seq);
2734 		irdma_cleanup_retrans_entry(cm_node);
2735 		cm_node->state = IRDMA_CM_STATE_CLOSED;
2736 		irdma_send_reset(cm_node);
2737 		break;
2738 	case IRDMA_CM_STATE_CLOSED:
2739 		cm_node->tcp_cntxt.loc_seq_num = ntohl(tcph->ack_seq);
2740 		irdma_cleanup_retrans_entry(cm_node);
2741 		refcount_inc(&cm_node->refcnt);
2742 		irdma_send_reset(cm_node);
2743 		break;
2744 	case IRDMA_CM_STATE_ESTABLISHED:
2745 	case IRDMA_CM_STATE_FIN_WAIT1:
2746 	case IRDMA_CM_STATE_FIN_WAIT2:
2747 	case IRDMA_CM_STATE_LAST_ACK:
2748 	case IRDMA_CM_STATE_OFFLOADED:
2749 	case IRDMA_CM_STATE_CLOSING:
2750 	case IRDMA_CM_STATE_UNKNOWN:
2751 	case IRDMA_CM_STATE_MPAREQ_SENT:
2752 	default:
2753 		break;
2754 	}
2755 }
2756 
2757 /**
2758  * irdma_handle_ack_pkt - process packet with ACK
2759  * @cm_node: connection's node
2760  * @rbuf: receive buffer
2761  */
2762 static int irdma_handle_ack_pkt(struct irdma_cm_node *cm_node,
2763 				struct irdma_puda_buf *rbuf)
2764 {
2765 	struct tcphdr *tcph = (struct tcphdr *)rbuf->tcph;
2766 	u32 inc_sequence;
2767 	int ret;
2768 	int optionsize;
2769 	u32 datasize = rbuf->datalen;
2770 
2771 	optionsize = (tcph->doff << 2) - sizeof(struct tcphdr);
2772 
2773 	if (irdma_check_seq(cm_node, tcph))
2774 		return -EINVAL;
2775 
2776 	inc_sequence = ntohl(tcph->seq);
2777 	switch (cm_node->state) {
2778 	case IRDMA_CM_STATE_SYN_RCVD:
2779 		irdma_cleanup_retrans_entry(cm_node);
2780 		ret = irdma_handle_tcp_options(cm_node, tcph, optionsize, 1);
2781 		if (ret)
2782 			return ret;
2783 		cm_node->tcp_cntxt.rem_ack_num = ntohl(tcph->ack_seq);
2784 		cm_node->state = IRDMA_CM_STATE_ESTABLISHED;
2785 		if (datasize) {
2786 			cm_node->tcp_cntxt.rcv_nxt = inc_sequence + datasize;
2787 			irdma_handle_rcv_mpa(cm_node, rbuf);
2788 		}
2789 		break;
2790 	case IRDMA_CM_STATE_ESTABLISHED:
2791 		irdma_cleanup_retrans_entry(cm_node);
2792 		if (datasize) {
2793 			cm_node->tcp_cntxt.rcv_nxt = inc_sequence + datasize;
2794 			irdma_handle_rcv_mpa(cm_node, rbuf);
2795 		}
2796 		break;
2797 	case IRDMA_CM_STATE_MPAREQ_SENT:
2798 		cm_node->tcp_cntxt.rem_ack_num = ntohl(tcph->ack_seq);
2799 		if (datasize) {
2800 			cm_node->tcp_cntxt.rcv_nxt = inc_sequence + datasize;
2801 			cm_node->ack_rcvd = false;
2802 			irdma_handle_rcv_mpa(cm_node, rbuf);
2803 		} else {
2804 			cm_node->ack_rcvd = true;
2805 		}
2806 		break;
2807 	case IRDMA_CM_STATE_LISTENING:
2808 		irdma_cleanup_retrans_entry(cm_node);
2809 		cm_node->state = IRDMA_CM_STATE_CLOSED;
2810 		irdma_send_reset(cm_node);
2811 		break;
2812 	case IRDMA_CM_STATE_CLOSED:
2813 		irdma_cleanup_retrans_entry(cm_node);
2814 		refcount_inc(&cm_node->refcnt);
2815 		irdma_send_reset(cm_node);
2816 		break;
2817 	case IRDMA_CM_STATE_LAST_ACK:
2818 	case IRDMA_CM_STATE_CLOSING:
2819 		irdma_cleanup_retrans_entry(cm_node);
2820 		cm_node->state = IRDMA_CM_STATE_CLOSED;
2821 		irdma_rem_ref_cm_node(cm_node);
2822 		break;
2823 	case IRDMA_CM_STATE_FIN_WAIT1:
2824 		irdma_cleanup_retrans_entry(cm_node);
2825 		cm_node->state = IRDMA_CM_STATE_FIN_WAIT2;
2826 		break;
2827 	case IRDMA_CM_STATE_SYN_SENT:
2828 	case IRDMA_CM_STATE_FIN_WAIT2:
2829 	case IRDMA_CM_STATE_OFFLOADED:
2830 	case IRDMA_CM_STATE_MPAREQ_RCVD:
2831 	case IRDMA_CM_STATE_UNKNOWN:
2832 	default:
2833 		irdma_cleanup_retrans_entry(cm_node);
2834 		break;
2835 	}
2836 
2837 	return 0;
2838 }
2839 
2840 /**
2841  * irdma_process_pkt - process cm packet
2842  * @cm_node: connection's node
2843  * @rbuf: receive buffer
2844  */
2845 static void irdma_process_pkt(struct irdma_cm_node *cm_node,
2846 			      struct irdma_puda_buf *rbuf)
2847 {
2848 	enum irdma_tcpip_pkt_type pkt_type = IRDMA_PKT_TYPE_UNKNOWN;
2849 	struct tcphdr *tcph = (struct tcphdr *)rbuf->tcph;
2850 	u32 fin_set = 0;
2851 	int err;
2852 
2853 	if (tcph->rst) {
2854 		pkt_type = IRDMA_PKT_TYPE_RST;
2855 	} else if (tcph->syn) {
2856 		pkt_type = IRDMA_PKT_TYPE_SYN;
2857 		if (tcph->ack)
2858 			pkt_type = IRDMA_PKT_TYPE_SYNACK;
2859 	} else if (tcph->ack) {
2860 		pkt_type = IRDMA_PKT_TYPE_ACK;
2861 	}
2862 	if (tcph->fin)
2863 		fin_set = 1;
2864 
2865 	switch (pkt_type) {
2866 	case IRDMA_PKT_TYPE_SYN:
2867 		irdma_handle_syn_pkt(cm_node, rbuf);
2868 		break;
2869 	case IRDMA_PKT_TYPE_SYNACK:
2870 		irdma_handle_synack_pkt(cm_node, rbuf);
2871 		break;
2872 	case IRDMA_PKT_TYPE_ACK:
2873 		err = irdma_handle_ack_pkt(cm_node, rbuf);
2874 		if (fin_set && !err)
2875 			irdma_handle_fin_pkt(cm_node);
2876 		break;
2877 	case IRDMA_PKT_TYPE_RST:
2878 		irdma_handle_rst_pkt(cm_node, rbuf);
2879 		break;
2880 	default:
2881 		if (fin_set &&
2882 		    (!irdma_check_seq(cm_node, (struct tcphdr *)rbuf->tcph)))
2883 			irdma_handle_fin_pkt(cm_node);
2884 		break;
2885 	}
2886 }
2887 
2888 /**
2889  * irdma_make_listen_node - create a listen node with params
2890  * @cm_core: cm's core
2891  * @iwdev: iwarp device structure
2892  * @cm_info: quad info for connection
2893  */
2894 static struct irdma_cm_listener *
2895 irdma_make_listen_node(struct irdma_cm_core *cm_core,
2896 		       struct irdma_device *iwdev,
2897 		       struct irdma_cm_info *cm_info)
2898 {
2899 	struct irdma_cm_listener *listener;
2900 	unsigned long flags;
2901 
2902 	/* cannot have multiple matching listeners */
2903 	listener = irdma_find_listener(cm_core, cm_info->loc_addr,
2904 				       cm_info->loc_port, cm_info->vlan_id,
2905 				       IRDMA_CM_LISTENER_EITHER_STATE);
2906 	if (listener &&
2907 	    listener->listener_state == IRDMA_CM_LISTENER_ACTIVE_STATE) {
2908 		refcount_dec(&listener->refcnt);
2909 		return NULL;
2910 	}
2911 
2912 	if (!listener) {
2913 		/* create a CM listen node
2914 		 * 1/2 node to compare incoming traffic to
2915 		 */
2916 		listener = kzalloc(sizeof(*listener), GFP_KERNEL);
2917 		if (!listener)
2918 			return NULL;
2919 		cm_core->stats_listen_nodes_created++;
2920 		memcpy(listener->loc_addr, cm_info->loc_addr,
2921 		       sizeof(listener->loc_addr));
2922 		listener->loc_port = cm_info->loc_port;
2923 
2924 		INIT_LIST_HEAD(&listener->child_listen_list);
2925 
2926 		refcount_set(&listener->refcnt, 1);
2927 	} else {
2928 		listener->reused_node = 1;
2929 	}
2930 
2931 	listener->cm_id = cm_info->cm_id;
2932 	listener->ipv4 = cm_info->ipv4;
2933 	listener->vlan_id = cm_info->vlan_id;
2934 	atomic_set(&listener->pend_accepts_cnt, 0);
2935 	listener->cm_core = cm_core;
2936 	listener->iwdev = iwdev;
2937 
2938 	listener->backlog = cm_info->backlog;
2939 	listener->listener_state = IRDMA_CM_LISTENER_ACTIVE_STATE;
2940 
2941 	if (!listener->reused_node) {
2942 		spin_lock_irqsave(&cm_core->listen_list_lock, flags);
2943 		list_add(&listener->list, &cm_core->listen_list);
2944 		spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
2945 	}
2946 
2947 	return listener;
2948 }
2949 
2950 /**
2951  * irdma_create_cm_node - make a connection node with params
2952  * @cm_core: cm's core
2953  * @iwdev: iwarp device structure
2954  * @conn_param: connection parameters
2955  * @cm_info: quad info for connection
2956  * @caller_cm_node: pointer to cm_node structure to return
2957  */
2958 static int irdma_create_cm_node(struct irdma_cm_core *cm_core,
2959 				struct irdma_device *iwdev,
2960 				struct iw_cm_conn_param *conn_param,
2961 				struct irdma_cm_info *cm_info,
2962 				struct irdma_cm_node **caller_cm_node)
2963 {
2964 	struct irdma_cm_node *cm_node;
2965 	u16 private_data_len = conn_param->private_data_len;
2966 	const void *private_data = conn_param->private_data;
2967 
2968 	/* create a CM connection node */
2969 	cm_node = irdma_make_cm_node(cm_core, iwdev, cm_info, NULL);
2970 	if (!cm_node)
2971 		return -ENOMEM;
2972 
2973 	/* set our node side to client (active) side */
2974 	cm_node->tcp_cntxt.client = 1;
2975 	cm_node->tcp_cntxt.rcv_wscale = IRDMA_CM_DEFAULT_RCV_WND_SCALE;
2976 
2977 	irdma_record_ird_ord(cm_node, conn_param->ird, conn_param->ord);
2978 
2979 	cm_node->pdata.size = private_data_len;
2980 	cm_node->pdata.addr = cm_node->pdata_buf;
2981 
2982 	memcpy(cm_node->pdata_buf, private_data, private_data_len);
2983 	*caller_cm_node = cm_node;
2984 
2985 	return 0;
2986 }
2987 
2988 /**
2989  * irdma_cm_reject - reject and teardown a connection
2990  * @cm_node: connection's node
2991  * @pdata: ptr to private data for reject
2992  * @plen: size of private data
2993  */
2994 static int irdma_cm_reject(struct irdma_cm_node *cm_node, const void *pdata,
2995 			   u8 plen)
2996 {
2997 	int ret;
2998 	int passive_state;
2999 
3000 	if (cm_node->tcp_cntxt.client)
3001 		return 0;
3002 
3003 	irdma_cleanup_retrans_entry(cm_node);
3004 
3005 	passive_state = atomic_add_return(1, &cm_node->passive_state);
3006 	if (passive_state == IRDMA_SEND_RESET_EVENT) {
3007 		cm_node->state = IRDMA_CM_STATE_CLOSED;
3008 		irdma_rem_ref_cm_node(cm_node);
3009 		return 0;
3010 	}
3011 
3012 	if (cm_node->state == IRDMA_CM_STATE_LISTENER_DESTROYED) {
3013 		irdma_rem_ref_cm_node(cm_node);
3014 		return 0;
3015 	}
3016 
3017 	ret = irdma_send_mpa_reject(cm_node, pdata, plen);
3018 	if (!ret)
3019 		return 0;
3020 
3021 	cm_node->state = IRDMA_CM_STATE_CLOSED;
3022 	if (irdma_send_reset(cm_node))
3023 		ibdev_dbg(&cm_node->iwdev->ibdev,
3024 			  "CM: send reset failed\n");
3025 
3026 	return ret;
3027 }
3028 
3029 /**
3030  * irdma_cm_close - close of cm connection
3031  * @cm_node: connection's node
3032  */
3033 static int irdma_cm_close(struct irdma_cm_node *cm_node)
3034 {
3035 	switch (cm_node->state) {
3036 	case IRDMA_CM_STATE_SYN_RCVD:
3037 	case IRDMA_CM_STATE_SYN_SENT:
3038 	case IRDMA_CM_STATE_ONE_SIDE_ESTABLISHED:
3039 	case IRDMA_CM_STATE_ESTABLISHED:
3040 	case IRDMA_CM_STATE_ACCEPTING:
3041 	case IRDMA_CM_STATE_MPAREQ_SENT:
3042 	case IRDMA_CM_STATE_MPAREQ_RCVD:
3043 		irdma_cleanup_retrans_entry(cm_node);
3044 		irdma_send_reset(cm_node);
3045 		break;
3046 	case IRDMA_CM_STATE_CLOSE_WAIT:
3047 		cm_node->state = IRDMA_CM_STATE_LAST_ACK;
3048 		irdma_send_fin(cm_node);
3049 		break;
3050 	case IRDMA_CM_STATE_FIN_WAIT1:
3051 	case IRDMA_CM_STATE_FIN_WAIT2:
3052 	case IRDMA_CM_STATE_LAST_ACK:
3053 	case IRDMA_CM_STATE_TIME_WAIT:
3054 	case IRDMA_CM_STATE_CLOSING:
3055 		return -EINVAL;
3056 	case IRDMA_CM_STATE_LISTENING:
3057 		irdma_cleanup_retrans_entry(cm_node);
3058 		irdma_send_reset(cm_node);
3059 		break;
3060 	case IRDMA_CM_STATE_MPAREJ_RCVD:
3061 	case IRDMA_CM_STATE_UNKNOWN:
3062 	case IRDMA_CM_STATE_INITED:
3063 	case IRDMA_CM_STATE_CLOSED:
3064 	case IRDMA_CM_STATE_LISTENER_DESTROYED:
3065 		irdma_rem_ref_cm_node(cm_node);
3066 		break;
3067 	case IRDMA_CM_STATE_OFFLOADED:
3068 		if (cm_node->send_entry)
3069 			ibdev_dbg(&cm_node->iwdev->ibdev,
3070 				  "CM: CM send_entry in OFFLOADED state\n");
3071 		irdma_rem_ref_cm_node(cm_node);
3072 		break;
3073 	}
3074 
3075 	return 0;
3076 }
3077 
3078 /**
3079  * irdma_receive_ilq - recv an ETHERNET packet, and process it
3080  * through CM
3081  * @vsi: VSI structure of dev
3082  * @rbuf: receive buffer
3083  */
3084 void irdma_receive_ilq(struct irdma_sc_vsi *vsi, struct irdma_puda_buf *rbuf)
3085 {
3086 	struct irdma_cm_node *cm_node;
3087 	struct irdma_cm_listener *listener;
3088 	struct iphdr *iph;
3089 	struct ipv6hdr *ip6h;
3090 	struct tcphdr *tcph;
3091 	struct irdma_cm_info cm_info = {};
3092 	struct irdma_device *iwdev = vsi->back_vsi;
3093 	struct irdma_cm_core *cm_core = &iwdev->cm_core;
3094 	struct vlan_ethhdr *ethh;
3095 	u16 vtag;
3096 
3097 	/* if vlan, then maclen = 18 else 14 */
3098 	iph = (struct iphdr *)rbuf->iph;
3099 	print_hex_dump_debug("ILQ: RECEIVE ILQ BUFFER", DUMP_PREFIX_OFFSET,
3100 			     16, 8, rbuf->mem.va, rbuf->totallen, false);
3101 	if (iwdev->rf->sc_dev.hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2) {
3102 		if (rbuf->vlan_valid) {
3103 			vtag = rbuf->vlan_id;
3104 			cm_info.user_pri = (vtag & VLAN_PRIO_MASK) >>
3105 					   VLAN_PRIO_SHIFT;
3106 			cm_info.vlan_id = vtag & VLAN_VID_MASK;
3107 		} else {
3108 			cm_info.vlan_id = 0xFFFF;
3109 		}
3110 	} else {
3111 		ethh = rbuf->mem.va;
3112 
3113 		if (ethh->h_vlan_proto == htons(ETH_P_8021Q)) {
3114 			vtag = ntohs(ethh->h_vlan_TCI);
3115 			cm_info.user_pri = (vtag & VLAN_PRIO_MASK) >>
3116 					   VLAN_PRIO_SHIFT;
3117 			cm_info.vlan_id = vtag & VLAN_VID_MASK;
3118 			ibdev_dbg(&cm_core->iwdev->ibdev,
3119 				  "CM: vlan_id=%d\n", cm_info.vlan_id);
3120 		} else {
3121 			cm_info.vlan_id = 0xFFFF;
3122 		}
3123 	}
3124 	tcph = (struct tcphdr *)rbuf->tcph;
3125 
3126 	if (rbuf->ipv4) {
3127 		cm_info.loc_addr[0] = ntohl(iph->daddr);
3128 		cm_info.rem_addr[0] = ntohl(iph->saddr);
3129 		cm_info.ipv4 = true;
3130 		cm_info.tos = iph->tos;
3131 	} else {
3132 		ip6h = (struct ipv6hdr *)rbuf->iph;
3133 		irdma_copy_ip_ntohl(cm_info.loc_addr,
3134 				    ip6h->daddr.in6_u.u6_addr32);
3135 		irdma_copy_ip_ntohl(cm_info.rem_addr,
3136 				    ip6h->saddr.in6_u.u6_addr32);
3137 		cm_info.ipv4 = false;
3138 		cm_info.tos = (ip6h->priority << 4) | (ip6h->flow_lbl[0] >> 4);
3139 	}
3140 	cm_info.loc_port = ntohs(tcph->dest);
3141 	cm_info.rem_port = ntohs(tcph->source);
3142 	cm_node = irdma_find_node(cm_core, cm_info.rem_port, cm_info.rem_addr,
3143 				  cm_info.loc_port, cm_info.loc_addr, cm_info.vlan_id);
3144 
3145 	if (!cm_node) {
3146 		/* Only type of packet accepted are for the
3147 		 * PASSIVE open (syn only)
3148 		 */
3149 		if (!tcph->syn || tcph->ack)
3150 			return;
3151 
3152 		listener = irdma_find_listener(cm_core,
3153 					       cm_info.loc_addr,
3154 					       cm_info.loc_port,
3155 					       cm_info.vlan_id,
3156 					       IRDMA_CM_LISTENER_ACTIVE_STATE);
3157 		if (!listener) {
3158 			cm_info.cm_id = NULL;
3159 			ibdev_dbg(&cm_core->iwdev->ibdev,
3160 				  "CM: no listener found\n");
3161 			return;
3162 		}
3163 
3164 		cm_info.cm_id = listener->cm_id;
3165 		cm_node = irdma_make_cm_node(cm_core, iwdev, &cm_info,
3166 					     listener);
3167 		if (!cm_node) {
3168 			ibdev_dbg(&cm_core->iwdev->ibdev,
3169 				  "CM: allocate node failed\n");
3170 			refcount_dec(&listener->refcnt);
3171 			return;
3172 		}
3173 
3174 		if (!tcph->rst && !tcph->fin) {
3175 			cm_node->state = IRDMA_CM_STATE_LISTENING;
3176 		} else {
3177 			irdma_rem_ref_cm_node(cm_node);
3178 			return;
3179 		}
3180 
3181 		refcount_inc(&cm_node->refcnt);
3182 	} else if (cm_node->state == IRDMA_CM_STATE_OFFLOADED) {
3183 		irdma_rem_ref_cm_node(cm_node);
3184 		return;
3185 	}
3186 
3187 	irdma_process_pkt(cm_node, rbuf);
3188 	irdma_rem_ref_cm_node(cm_node);
3189 }
3190 
3191 static int irdma_add_qh(struct irdma_cm_node *cm_node, bool active)
3192 {
3193 	if (!active)
3194 		irdma_add_conn_est_qh(cm_node);
3195 	return 0;
3196 }
3197 
3198 static void irdma_cm_free_ah_nop(struct irdma_cm_node *cm_node)
3199 {
3200 }
3201 
3202 /**
3203  * irdma_setup_cm_core - setup top level instance of a cm core
3204  * @iwdev: iwarp device structure
3205  * @rdma_ver: HW version
3206  */
3207 int irdma_setup_cm_core(struct irdma_device *iwdev, u8 rdma_ver)
3208 {
3209 	struct irdma_cm_core *cm_core = &iwdev->cm_core;
3210 
3211 	cm_core->iwdev = iwdev;
3212 	cm_core->dev = &iwdev->rf->sc_dev;
3213 
3214 	/* Handles CM event work items send to Iwarp core */
3215 	cm_core->event_wq = alloc_ordered_workqueue("iwarp-event-wq", 0);
3216 	if (!cm_core->event_wq)
3217 		return -ENOMEM;
3218 
3219 	INIT_LIST_HEAD(&cm_core->listen_list);
3220 
3221 	timer_setup(&cm_core->tcp_timer, irdma_cm_timer_tick, 0);
3222 
3223 	spin_lock_init(&cm_core->ht_lock);
3224 	spin_lock_init(&cm_core->listen_list_lock);
3225 	spin_lock_init(&cm_core->apbvt_lock);
3226 	switch (rdma_ver) {
3227 	case IRDMA_GEN_1:
3228 		cm_core->form_cm_frame = irdma_form_uda_cm_frame;
3229 		cm_core->cm_create_ah = irdma_add_qh;
3230 		cm_core->cm_free_ah = irdma_cm_free_ah_nop;
3231 		break;
3232 	case IRDMA_GEN_2:
3233 	default:
3234 		cm_core->form_cm_frame = irdma_form_ah_cm_frame;
3235 		cm_core->cm_create_ah = irdma_cm_create_ah;
3236 		cm_core->cm_free_ah = irdma_cm_free_ah;
3237 	}
3238 
3239 	return 0;
3240 }
3241 
3242 /**
3243  * irdma_cleanup_cm_core - deallocate a top level instance of a
3244  * cm core
3245  * @cm_core: cm's core
3246  */
3247 void irdma_cleanup_cm_core(struct irdma_cm_core *cm_core)
3248 {
3249 	unsigned long flags;
3250 
3251 	if (!cm_core)
3252 		return;
3253 
3254 	spin_lock_irqsave(&cm_core->ht_lock, flags);
3255 	if (timer_pending(&cm_core->tcp_timer))
3256 		del_timer_sync(&cm_core->tcp_timer);
3257 	spin_unlock_irqrestore(&cm_core->ht_lock, flags);
3258 
3259 	destroy_workqueue(cm_core->event_wq);
3260 	cm_core->dev->ws_reset(&cm_core->iwdev->vsi);
3261 }
3262 
3263 /**
3264  * irdma_init_tcp_ctx - setup qp context
3265  * @cm_node: connection's node
3266  * @tcp_info: offload info for tcp
3267  * @iwqp: associate qp for the connection
3268  */
3269 static void irdma_init_tcp_ctx(struct irdma_cm_node *cm_node,
3270 			       struct irdma_tcp_offload_info *tcp_info,
3271 			       struct irdma_qp *iwqp)
3272 {
3273 	tcp_info->ipv4 = cm_node->ipv4;
3274 	tcp_info->drop_ooo_seg = !iwqp->iwdev->iw_ooo;
3275 	tcp_info->wscale = true;
3276 	tcp_info->ignore_tcp_opt = true;
3277 	tcp_info->ignore_tcp_uns_opt = true;
3278 	tcp_info->no_nagle = false;
3279 
3280 	tcp_info->ttl = IRDMA_DEFAULT_TTL;
3281 	tcp_info->rtt_var = IRDMA_DEFAULT_RTT_VAR;
3282 	tcp_info->ss_thresh = IRDMA_DEFAULT_SS_THRESH;
3283 	tcp_info->rexmit_thresh = IRDMA_DEFAULT_REXMIT_THRESH;
3284 
3285 	tcp_info->tcp_state = IRDMA_TCP_STATE_ESTABLISHED;
3286 	tcp_info->snd_wscale = cm_node->tcp_cntxt.snd_wscale;
3287 	tcp_info->rcv_wscale = cm_node->tcp_cntxt.rcv_wscale;
3288 
3289 	tcp_info->snd_nxt = cm_node->tcp_cntxt.loc_seq_num;
3290 	tcp_info->snd_wnd = cm_node->tcp_cntxt.snd_wnd;
3291 	tcp_info->rcv_nxt = cm_node->tcp_cntxt.rcv_nxt;
3292 	tcp_info->snd_max = cm_node->tcp_cntxt.loc_seq_num;
3293 
3294 	tcp_info->snd_una = cm_node->tcp_cntxt.loc_seq_num;
3295 	tcp_info->cwnd = 2 * cm_node->tcp_cntxt.mss;
3296 	tcp_info->snd_wl1 = cm_node->tcp_cntxt.rcv_nxt;
3297 	tcp_info->snd_wl2 = cm_node->tcp_cntxt.loc_seq_num;
3298 	tcp_info->max_snd_window = cm_node->tcp_cntxt.max_snd_wnd;
3299 	tcp_info->rcv_wnd = cm_node->tcp_cntxt.rcv_wnd
3300 			    << cm_node->tcp_cntxt.rcv_wscale;
3301 
3302 	tcp_info->flow_label = 0;
3303 	tcp_info->snd_mss = (u32)cm_node->tcp_cntxt.mss;
3304 	tcp_info->tos = cm_node->tos;
3305 	if (cm_node->vlan_id < VLAN_N_VID) {
3306 		tcp_info->insert_vlan_tag = true;
3307 		tcp_info->vlan_tag = cm_node->vlan_id;
3308 		tcp_info->vlan_tag |= cm_node->user_pri << VLAN_PRIO_SHIFT;
3309 	}
3310 	if (cm_node->ipv4) {
3311 		tcp_info->src_port = cm_node->loc_port;
3312 		tcp_info->dst_port = cm_node->rem_port;
3313 
3314 		tcp_info->dest_ip_addr[3] = cm_node->rem_addr[0];
3315 		tcp_info->local_ipaddr[3] = cm_node->loc_addr[0];
3316 		tcp_info->arp_idx = (u16)irdma_arp_table(iwqp->iwdev->rf,
3317 							 &tcp_info->dest_ip_addr[3],
3318 							 true, NULL,
3319 							 IRDMA_ARP_RESOLVE);
3320 	} else {
3321 		tcp_info->src_port = cm_node->loc_port;
3322 		tcp_info->dst_port = cm_node->rem_port;
3323 		memcpy(tcp_info->dest_ip_addr, cm_node->rem_addr,
3324 		       sizeof(tcp_info->dest_ip_addr));
3325 		memcpy(tcp_info->local_ipaddr, cm_node->loc_addr,
3326 		       sizeof(tcp_info->local_ipaddr));
3327 
3328 		tcp_info->arp_idx = (u16)irdma_arp_table(iwqp->iwdev->rf,
3329 							 &tcp_info->dest_ip_addr[0],
3330 							 false, NULL,
3331 							 IRDMA_ARP_RESOLVE);
3332 	}
3333 }
3334 
3335 /**
3336  * irdma_cm_init_tsa_conn - setup qp for RTS
3337  * @iwqp: associate qp for the connection
3338  * @cm_node: connection's node
3339  */
3340 static void irdma_cm_init_tsa_conn(struct irdma_qp *iwqp,
3341 				   struct irdma_cm_node *cm_node)
3342 {
3343 	struct irdma_iwarp_offload_info *iwarp_info;
3344 	struct irdma_qp_host_ctx_info *ctx_info;
3345 
3346 	iwarp_info = &iwqp->iwarp_info;
3347 	ctx_info = &iwqp->ctx_info;
3348 
3349 	ctx_info->tcp_info = &iwqp->tcp_info;
3350 	ctx_info->send_cq_num = iwqp->iwscq->sc_cq.cq_uk.cq_id;
3351 	ctx_info->rcv_cq_num = iwqp->iwrcq->sc_cq.cq_uk.cq_id;
3352 
3353 	iwarp_info->ord_size = cm_node->ord_size;
3354 	iwarp_info->ird_size = cm_node->ird_size;
3355 	iwarp_info->rd_en = true;
3356 	iwarp_info->rdmap_ver = 1;
3357 	iwarp_info->ddp_ver = 1;
3358 	iwarp_info->pd_id = iwqp->iwpd->sc_pd.pd_id;
3359 
3360 	ctx_info->tcp_info_valid = true;
3361 	ctx_info->iwarp_info_valid = true;
3362 	ctx_info->user_pri = cm_node->user_pri;
3363 
3364 	irdma_init_tcp_ctx(cm_node, &iwqp->tcp_info, iwqp);
3365 	if (cm_node->snd_mark_en) {
3366 		iwarp_info->snd_mark_en = true;
3367 		iwarp_info->snd_mark_offset = (iwqp->tcp_info.snd_nxt & SNDMARKER_SEQNMASK) +
3368 					       cm_node->lsmm_size;
3369 	}
3370 
3371 	cm_node->state = IRDMA_CM_STATE_OFFLOADED;
3372 	iwqp->tcp_info.tcp_state = IRDMA_TCP_STATE_ESTABLISHED;
3373 	iwqp->tcp_info.src_mac_addr_idx = iwqp->iwdev->mac_ip_table_idx;
3374 
3375 	if (cm_node->rcv_mark_en) {
3376 		iwarp_info->rcv_mark_en = true;
3377 		iwarp_info->align_hdrs = true;
3378 	}
3379 
3380 	irdma_sc_qp_setctx(&iwqp->sc_qp, iwqp->host_ctx.va, ctx_info);
3381 
3382 	/* once tcp_info is set, no need to do it again */
3383 	ctx_info->tcp_info_valid = false;
3384 	ctx_info->iwarp_info_valid = false;
3385 }
3386 
3387 /**
3388  * irdma_cm_disconn - when a connection is being closed
3389  * @iwqp: associated qp for the connection
3390  */
3391 void irdma_cm_disconn(struct irdma_qp *iwqp)
3392 {
3393 	struct irdma_device *iwdev = iwqp->iwdev;
3394 	struct disconn_work *work;
3395 	unsigned long flags;
3396 
3397 	work = kzalloc(sizeof(*work), GFP_ATOMIC);
3398 	if (!work)
3399 		return;
3400 
3401 	spin_lock_irqsave(&iwdev->rf->qptable_lock, flags);
3402 	if (!iwdev->rf->qp_table[iwqp->ibqp.qp_num]) {
3403 		spin_unlock_irqrestore(&iwdev->rf->qptable_lock, flags);
3404 		ibdev_dbg(&iwdev->ibdev,
3405 			  "CM: qp_id %d is already freed\n",
3406 			  iwqp->ibqp.qp_num);
3407 		kfree(work);
3408 		return;
3409 	}
3410 	irdma_qp_add_ref(&iwqp->ibqp);
3411 	spin_unlock_irqrestore(&iwdev->rf->qptable_lock, flags);
3412 
3413 	work->iwqp = iwqp;
3414 	INIT_WORK(&work->work, irdma_disconnect_worker);
3415 	queue_work(iwdev->cleanup_wq, &work->work);
3416 }
3417 
3418 /**
3419  * irdma_qp_disconnect - free qp and close cm
3420  * @iwqp: associate qp for the connection
3421  */
3422 static void irdma_qp_disconnect(struct irdma_qp *iwqp)
3423 {
3424 	struct irdma_device *iwdev = iwqp->iwdev;
3425 
3426 	iwqp->active_conn = 0;
3427 	/* close the CM node down if it is still active */
3428 	ibdev_dbg(&iwdev->ibdev, "CM: Call close API\n");
3429 	irdma_cm_close(iwqp->cm_node);
3430 }
3431 
3432 /**
3433  * irdma_cm_disconn_true - called by worker thread to disconnect qp
3434  * @iwqp: associate qp for the connection
3435  */
3436 static void irdma_cm_disconn_true(struct irdma_qp *iwqp)
3437 {
3438 	struct iw_cm_id *cm_id;
3439 	struct irdma_device *iwdev;
3440 	struct irdma_sc_qp *qp = &iwqp->sc_qp;
3441 	u16 last_ae;
3442 	u8 original_hw_tcp_state;
3443 	u8 original_ibqp_state;
3444 	int disconn_status = 0;
3445 	int issue_disconn = 0;
3446 	int issue_close = 0;
3447 	int issue_flush = 0;
3448 	unsigned long flags;
3449 	int err;
3450 
3451 	iwdev = iwqp->iwdev;
3452 	spin_lock_irqsave(&iwqp->lock, flags);
3453 	if (rdma_protocol_roce(&iwdev->ibdev, 1)) {
3454 		struct ib_qp_attr attr;
3455 
3456 		if (iwqp->flush_issued || iwqp->sc_qp.qp_uk.destroy_pending) {
3457 			spin_unlock_irqrestore(&iwqp->lock, flags);
3458 			return;
3459 		}
3460 
3461 		spin_unlock_irqrestore(&iwqp->lock, flags);
3462 
3463 		attr.qp_state = IB_QPS_ERR;
3464 		irdma_modify_qp_roce(&iwqp->ibqp, &attr, IB_QP_STATE, NULL);
3465 		irdma_ib_qp_event(iwqp, qp->event_type);
3466 		return;
3467 	}
3468 
3469 	cm_id = iwqp->cm_id;
3470 	/* make sure we havent already closed this connection */
3471 	if (!cm_id) {
3472 		spin_unlock_irqrestore(&iwqp->lock, flags);
3473 		return;
3474 	}
3475 
3476 	original_hw_tcp_state = iwqp->hw_tcp_state;
3477 	original_ibqp_state = iwqp->ibqp_state;
3478 	last_ae = iwqp->last_aeq;
3479 
3480 	if (qp->term_flags) {
3481 		issue_disconn = 1;
3482 		issue_close = 1;
3483 		iwqp->cm_id = NULL;
3484 		irdma_terminate_del_timer(qp);
3485 		if (!iwqp->flush_issued) {
3486 			iwqp->flush_issued = 1;
3487 			issue_flush = 1;
3488 		}
3489 	} else if ((original_hw_tcp_state == IRDMA_TCP_STATE_CLOSE_WAIT) ||
3490 		   ((original_ibqp_state == IB_QPS_RTS) &&
3491 		    (last_ae == IRDMA_AE_LLP_CONNECTION_RESET))) {
3492 		issue_disconn = 1;
3493 		if (last_ae == IRDMA_AE_LLP_CONNECTION_RESET)
3494 			disconn_status = -ECONNRESET;
3495 	}
3496 
3497 	if ((original_hw_tcp_state == IRDMA_TCP_STATE_CLOSED ||
3498 	     original_hw_tcp_state == IRDMA_TCP_STATE_TIME_WAIT ||
3499 	     last_ae == IRDMA_AE_RDMAP_ROE_BAD_LLP_CLOSE ||
3500 	     last_ae == IRDMA_AE_BAD_CLOSE ||
3501 	     last_ae == IRDMA_AE_LLP_CONNECTION_RESET || iwdev->rf->reset)) {
3502 		issue_close = 1;
3503 		iwqp->cm_id = NULL;
3504 		qp->term_flags = 0;
3505 		if (!iwqp->flush_issued) {
3506 			iwqp->flush_issued = 1;
3507 			issue_flush = 1;
3508 		}
3509 	}
3510 
3511 	spin_unlock_irqrestore(&iwqp->lock, flags);
3512 	if (issue_flush && !iwqp->sc_qp.qp_uk.destroy_pending) {
3513 		irdma_flush_wqes(iwqp, IRDMA_FLUSH_SQ | IRDMA_FLUSH_RQ |
3514 				 IRDMA_FLUSH_WAIT);
3515 
3516 		if (qp->term_flags)
3517 			irdma_ib_qp_event(iwqp, qp->event_type);
3518 	}
3519 
3520 	if (!cm_id || !cm_id->event_handler)
3521 		return;
3522 
3523 	spin_lock_irqsave(&iwdev->cm_core.ht_lock, flags);
3524 	if (!iwqp->cm_node) {
3525 		spin_unlock_irqrestore(&iwdev->cm_core.ht_lock, flags);
3526 		return;
3527 	}
3528 	refcount_inc(&iwqp->cm_node->refcnt);
3529 
3530 	spin_unlock_irqrestore(&iwdev->cm_core.ht_lock, flags);
3531 
3532 	if (issue_disconn) {
3533 		err = irdma_send_cm_event(iwqp->cm_node, cm_id,
3534 					  IW_CM_EVENT_DISCONNECT,
3535 					  disconn_status);
3536 		if (err)
3537 			ibdev_dbg(&iwdev->ibdev,
3538 				  "CM: disconnect event failed: - cm_id = %p\n",
3539 				  cm_id);
3540 	}
3541 	if (issue_close) {
3542 		cm_id->provider_data = iwqp;
3543 		err = irdma_send_cm_event(iwqp->cm_node, cm_id,
3544 					  IW_CM_EVENT_CLOSE, 0);
3545 		if (err)
3546 			ibdev_dbg(&iwdev->ibdev,
3547 				  "CM: close event failed: - cm_id = %p\n",
3548 				  cm_id);
3549 		irdma_qp_disconnect(iwqp);
3550 	}
3551 	irdma_rem_ref_cm_node(iwqp->cm_node);
3552 }
3553 
3554 /**
3555  * irdma_disconnect_worker - worker for connection close
3556  * @work: points or disconn structure
3557  */
3558 static void irdma_disconnect_worker(struct work_struct *work)
3559 {
3560 	struct disconn_work *dwork = container_of(work, struct disconn_work, work);
3561 	struct irdma_qp *iwqp = dwork->iwqp;
3562 
3563 	kfree(dwork);
3564 	irdma_cm_disconn_true(iwqp);
3565 	irdma_qp_rem_ref(&iwqp->ibqp);
3566 }
3567 
3568 /**
3569  * irdma_free_lsmm_rsrc - free lsmm memory and deregister
3570  * @iwqp: associate qp for the connection
3571  */
3572 void irdma_free_lsmm_rsrc(struct irdma_qp *iwqp)
3573 {
3574 	struct irdma_device *iwdev;
3575 
3576 	iwdev = iwqp->iwdev;
3577 
3578 	if (iwqp->ietf_mem.va) {
3579 		if (iwqp->lsmm_mr)
3580 			iwdev->ibdev.ops.dereg_mr(iwqp->lsmm_mr, NULL);
3581 		dma_free_coherent(iwdev->rf->sc_dev.hw->device,
3582 				  iwqp->ietf_mem.size, iwqp->ietf_mem.va,
3583 				  iwqp->ietf_mem.pa);
3584 		iwqp->ietf_mem.va = NULL;
3585 		iwqp->ietf_mem.va = NULL;
3586 	}
3587 }
3588 
3589 /**
3590  * irdma_accept - registered call for connection to be accepted
3591  * @cm_id: cm information for passive connection
3592  * @conn_param: accpet parameters
3593  */
3594 int irdma_accept(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
3595 {
3596 	struct ib_qp *ibqp;
3597 	struct irdma_qp *iwqp;
3598 	struct irdma_device *iwdev;
3599 	struct irdma_sc_dev *dev;
3600 	struct irdma_cm_node *cm_node;
3601 	struct ib_qp_attr attr = {};
3602 	int passive_state;
3603 	struct ib_mr *ibmr;
3604 	struct irdma_pd *iwpd;
3605 	u16 buf_len = 0;
3606 	struct irdma_kmem_info accept;
3607 	u64 tagged_offset;
3608 	int wait_ret;
3609 	int ret = 0;
3610 
3611 	ibqp = irdma_get_qp(cm_id->device, conn_param->qpn);
3612 	if (!ibqp)
3613 		return -EINVAL;
3614 
3615 	iwqp = to_iwqp(ibqp);
3616 	iwdev = iwqp->iwdev;
3617 	dev = &iwdev->rf->sc_dev;
3618 	cm_node = cm_id->provider_data;
3619 
3620 	if (((struct sockaddr_in *)&cm_id->local_addr)->sin_family == AF_INET) {
3621 		cm_node->ipv4 = true;
3622 		cm_node->vlan_id = irdma_get_vlan_ipv4(cm_node->loc_addr);
3623 	} else {
3624 		cm_node->ipv4 = false;
3625 		irdma_netdev_vlan_ipv6(cm_node->loc_addr, &cm_node->vlan_id,
3626 				       NULL);
3627 	}
3628 	ibdev_dbg(&iwdev->ibdev, "CM: Accept vlan_id=%d\n",
3629 		  cm_node->vlan_id);
3630 
3631 	trace_irdma_accept(cm_node, 0, NULL);
3632 
3633 	if (cm_node->state == IRDMA_CM_STATE_LISTENER_DESTROYED) {
3634 		ret = -EINVAL;
3635 		goto error;
3636 	}
3637 
3638 	passive_state = atomic_add_return(1, &cm_node->passive_state);
3639 	if (passive_state == IRDMA_SEND_RESET_EVENT) {
3640 		ret = -ECONNRESET;
3641 		goto error;
3642 	}
3643 
3644 	buf_len = conn_param->private_data_len + IRDMA_MAX_IETF_SIZE;
3645 	iwqp->ietf_mem.size = ALIGN(buf_len, 1);
3646 	iwqp->ietf_mem.va = dma_alloc_coherent(dev->hw->device,
3647 					       iwqp->ietf_mem.size,
3648 					       &iwqp->ietf_mem.pa, GFP_KERNEL);
3649 	if (!iwqp->ietf_mem.va) {
3650 		ret = -ENOMEM;
3651 		goto error;
3652 	}
3653 
3654 	cm_node->pdata.size = conn_param->private_data_len;
3655 	accept.addr = iwqp->ietf_mem.va;
3656 	accept.size = irdma_cm_build_mpa_frame(cm_node, &accept, MPA_KEY_REPLY);
3657 	memcpy((u8 *)accept.addr + accept.size, conn_param->private_data,
3658 	       conn_param->private_data_len);
3659 
3660 	if (cm_node->dev->ws_add(iwqp->sc_qp.vsi, cm_node->user_pri)) {
3661 		ret = -ENOMEM;
3662 		goto error;
3663 	}
3664 	iwqp->sc_qp.user_pri = cm_node->user_pri;
3665 	irdma_qp_add_qos(&iwqp->sc_qp);
3666 	/* setup our first outgoing iWarp send WQE (the IETF frame response) */
3667 	iwpd = iwqp->iwpd;
3668 	tagged_offset = (uintptr_t)iwqp->ietf_mem.va;
3669 	ibmr = irdma_reg_phys_mr(&iwpd->ibpd, iwqp->ietf_mem.pa, buf_len,
3670 				 IB_ACCESS_LOCAL_WRITE, &tagged_offset);
3671 	if (IS_ERR(ibmr)) {
3672 		ret = -ENOMEM;
3673 		goto error;
3674 	}
3675 
3676 	ibmr->pd = &iwpd->ibpd;
3677 	ibmr->device = iwpd->ibpd.device;
3678 	iwqp->lsmm_mr = ibmr;
3679 	if (iwqp->page)
3680 		iwqp->sc_qp.qp_uk.sq_base = kmap_local_page(iwqp->page);
3681 
3682 	cm_node->lsmm_size = accept.size + conn_param->private_data_len;
3683 	irdma_sc_send_lsmm(&iwqp->sc_qp, iwqp->ietf_mem.va, cm_node->lsmm_size,
3684 			   ibmr->lkey);
3685 
3686 	if (iwqp->page)
3687 		kunmap_local(iwqp->sc_qp.qp_uk.sq_base);
3688 
3689 	iwqp->cm_id = cm_id;
3690 	cm_node->cm_id = cm_id;
3691 
3692 	cm_id->provider_data = iwqp;
3693 	iwqp->active_conn = 0;
3694 	iwqp->cm_node = cm_node;
3695 	cm_node->iwqp = iwqp;
3696 	irdma_cm_init_tsa_conn(iwqp, cm_node);
3697 	irdma_qp_add_ref(&iwqp->ibqp);
3698 	cm_id->add_ref(cm_id);
3699 
3700 	attr.qp_state = IB_QPS_RTS;
3701 	cm_node->qhash_set = false;
3702 	cm_node->cm_core->cm_free_ah(cm_node);
3703 
3704 	irdma_modify_qp(&iwqp->ibqp, &attr, IB_QP_STATE, NULL);
3705 	if (dev->hw_attrs.uk_attrs.feature_flags & IRDMA_FEATURE_RTS_AE) {
3706 		wait_ret = wait_event_interruptible_timeout(iwqp->waitq,
3707 							    iwqp->rts_ae_rcvd,
3708 							    IRDMA_MAX_TIMEOUT);
3709 		if (!wait_ret) {
3710 			ibdev_dbg(&iwdev->ibdev,
3711 				  "CM: Slow Connection: cm_node=%p, loc_port=%d, rem_port=%d, cm_id=%p\n",
3712 				  cm_node, cm_node->loc_port,
3713 				  cm_node->rem_port, cm_node->cm_id);
3714 			ret = -ECONNRESET;
3715 			goto error;
3716 		}
3717 	}
3718 
3719 	irdma_send_cm_event(cm_node, cm_id, IW_CM_EVENT_ESTABLISHED, 0);
3720 	cm_node->accelerated = true;
3721 	complete(&cm_node->establish_comp);
3722 
3723 	if (cm_node->accept_pend) {
3724 		atomic_dec(&cm_node->listener->pend_accepts_cnt);
3725 		cm_node->accept_pend = 0;
3726 	}
3727 
3728 	ibdev_dbg(&iwdev->ibdev,
3729 		  "CM: rem_port=0x%04x, loc_port=0x%04x rem_addr=%pI4 loc_addr=%pI4 cm_node=%p cm_id=%p qp_id = %d\n\n",
3730 		  cm_node->rem_port, cm_node->loc_port, cm_node->rem_addr,
3731 		  cm_node->loc_addr, cm_node, cm_id, ibqp->qp_num);
3732 	cm_node->cm_core->stats_accepts++;
3733 
3734 	return 0;
3735 error:
3736 	irdma_free_lsmm_rsrc(iwqp);
3737 	irdma_rem_ref_cm_node(cm_node);
3738 
3739 	return ret;
3740 }
3741 
3742 /**
3743  * irdma_reject - registered call for connection to be rejected
3744  * @cm_id: cm information for passive connection
3745  * @pdata: private data to be sent
3746  * @pdata_len: private data length
3747  */
3748 int irdma_reject(struct iw_cm_id *cm_id, const void *pdata, u8 pdata_len)
3749 {
3750 	struct irdma_device *iwdev;
3751 	struct irdma_cm_node *cm_node;
3752 
3753 	cm_node = cm_id->provider_data;
3754 	cm_node->pdata.size = pdata_len;
3755 
3756 	trace_irdma_reject(cm_node, 0, NULL);
3757 
3758 	iwdev = to_iwdev(cm_id->device);
3759 	if (!iwdev)
3760 		return -EINVAL;
3761 
3762 	cm_node->cm_core->stats_rejects++;
3763 
3764 	if (pdata_len + sizeof(struct ietf_mpa_v2) > IRDMA_MAX_CM_BUF)
3765 		return -EINVAL;
3766 
3767 	return irdma_cm_reject(cm_node, pdata, pdata_len);
3768 }
3769 
3770 /**
3771  * irdma_connect - registered call for connection to be established
3772  * @cm_id: cm information for passive connection
3773  * @conn_param: Information about the connection
3774  */
3775 int irdma_connect(struct iw_cm_id *cm_id, struct iw_cm_conn_param *conn_param)
3776 {
3777 	struct ib_qp *ibqp;
3778 	struct irdma_qp *iwqp;
3779 	struct irdma_device *iwdev;
3780 	struct irdma_cm_node *cm_node;
3781 	struct irdma_cm_info cm_info;
3782 	struct sockaddr_in *laddr;
3783 	struct sockaddr_in *raddr;
3784 	struct sockaddr_in6 *laddr6;
3785 	struct sockaddr_in6 *raddr6;
3786 	int ret = 0;
3787 
3788 	ibqp = irdma_get_qp(cm_id->device, conn_param->qpn);
3789 	if (!ibqp)
3790 		return -EINVAL;
3791 	iwqp = to_iwqp(ibqp);
3792 	if (!iwqp)
3793 		return -EINVAL;
3794 	iwdev = iwqp->iwdev;
3795 	if (!iwdev)
3796 		return -EINVAL;
3797 
3798 	laddr = (struct sockaddr_in *)&cm_id->m_local_addr;
3799 	raddr = (struct sockaddr_in *)&cm_id->m_remote_addr;
3800 	laddr6 = (struct sockaddr_in6 *)&cm_id->m_local_addr;
3801 	raddr6 = (struct sockaddr_in6 *)&cm_id->m_remote_addr;
3802 
3803 	if (!(laddr->sin_port) || !(raddr->sin_port))
3804 		return -EINVAL;
3805 
3806 	iwqp->active_conn = 1;
3807 	iwqp->cm_id = NULL;
3808 	cm_id->provider_data = iwqp;
3809 
3810 	/* set up the connection params for the node */
3811 	if (cm_id->remote_addr.ss_family == AF_INET) {
3812 		if (iwdev->vsi.mtu < IRDMA_MIN_MTU_IPV4)
3813 			return -EINVAL;
3814 
3815 		cm_info.ipv4 = true;
3816 		memset(cm_info.loc_addr, 0, sizeof(cm_info.loc_addr));
3817 		memset(cm_info.rem_addr, 0, sizeof(cm_info.rem_addr));
3818 		cm_info.loc_addr[0] = ntohl(laddr->sin_addr.s_addr);
3819 		cm_info.rem_addr[0] = ntohl(raddr->sin_addr.s_addr);
3820 		cm_info.loc_port = ntohs(laddr->sin_port);
3821 		cm_info.rem_port = ntohs(raddr->sin_port);
3822 		cm_info.vlan_id = irdma_get_vlan_ipv4(cm_info.loc_addr);
3823 	} else {
3824 		if (iwdev->vsi.mtu < IRDMA_MIN_MTU_IPV6)
3825 			return -EINVAL;
3826 
3827 		cm_info.ipv4 = false;
3828 		irdma_copy_ip_ntohl(cm_info.loc_addr,
3829 				    laddr6->sin6_addr.in6_u.u6_addr32);
3830 		irdma_copy_ip_ntohl(cm_info.rem_addr,
3831 				    raddr6->sin6_addr.in6_u.u6_addr32);
3832 		cm_info.loc_port = ntohs(laddr6->sin6_port);
3833 		cm_info.rem_port = ntohs(raddr6->sin6_port);
3834 		irdma_netdev_vlan_ipv6(cm_info.loc_addr, &cm_info.vlan_id,
3835 				       NULL);
3836 	}
3837 	cm_info.cm_id = cm_id;
3838 	cm_info.qh_qpid = iwdev->vsi.ilq->qp_id;
3839 	cm_info.tos = cm_id->tos;
3840 	if (iwdev->vsi.dscp_mode)
3841 		cm_info.user_pri =
3842 			iwqp->sc_qp.vsi->dscp_map[irdma_tos2dscp(cm_info.tos)];
3843 	else
3844 		cm_info.user_pri = rt_tos2priority(cm_id->tos);
3845 
3846 	if (iwqp->sc_qp.dev->ws_add(iwqp->sc_qp.vsi, cm_info.user_pri))
3847 		return -ENOMEM;
3848 	iwqp->sc_qp.user_pri = cm_info.user_pri;
3849 	irdma_qp_add_qos(&iwqp->sc_qp);
3850 	ibdev_dbg(&iwdev->ibdev, "DCB: TOS:[%d] UP:[%d]\n", cm_id->tos,
3851 		  cm_info.user_pri);
3852 
3853 	trace_irdma_dcb_tos(iwdev, cm_id->tos, cm_info.user_pri);
3854 
3855 	ret = irdma_create_cm_node(&iwdev->cm_core, iwdev, conn_param, &cm_info,
3856 				   &cm_node);
3857 	if (ret)
3858 		return ret;
3859 	ret = cm_node->cm_core->cm_create_ah(cm_node, true);
3860 	if (ret)
3861 		goto err;
3862 	if (irdma_manage_qhash(iwdev, &cm_info,
3863 			       IRDMA_QHASH_TYPE_TCP_ESTABLISHED,
3864 			       IRDMA_QHASH_MANAGE_TYPE_ADD, NULL, true)) {
3865 		ret = -EINVAL;
3866 		goto err;
3867 	}
3868 	cm_node->qhash_set = true;
3869 
3870 	cm_node->apbvt_entry = irdma_add_apbvt(iwdev, cm_info.loc_port);
3871 	if (!cm_node->apbvt_entry) {
3872 		ret = -EINVAL;
3873 		goto err;
3874 	}
3875 
3876 	cm_node->apbvt_set = true;
3877 	iwqp->cm_node = cm_node;
3878 	cm_node->iwqp = iwqp;
3879 	iwqp->cm_id = cm_id;
3880 	irdma_qp_add_ref(&iwqp->ibqp);
3881 	cm_id->add_ref(cm_id);
3882 
3883 	if (cm_node->state != IRDMA_CM_STATE_OFFLOADED) {
3884 		cm_node->state = IRDMA_CM_STATE_SYN_SENT;
3885 		ret = irdma_send_syn(cm_node, 0);
3886 		if (ret)
3887 			goto err;
3888 	}
3889 
3890 	ibdev_dbg(&iwdev->ibdev,
3891 		  "CM: rem_port=0x%04x, loc_port=0x%04x rem_addr=%pI4 loc_addr=%pI4 cm_node=%p cm_id=%p qp_id = %d\n\n",
3892 		  cm_node->rem_port, cm_node->loc_port, cm_node->rem_addr,
3893 		  cm_node->loc_addr, cm_node, cm_id, ibqp->qp_num);
3894 
3895 	trace_irdma_connect(cm_node, 0, NULL);
3896 
3897 	return 0;
3898 
3899 err:
3900 	if (cm_info.ipv4)
3901 		ibdev_dbg(&iwdev->ibdev,
3902 			  "CM: connect() FAILED: dest addr=%pI4",
3903 			  cm_info.rem_addr);
3904 	else
3905 		ibdev_dbg(&iwdev->ibdev,
3906 			  "CM: connect() FAILED: dest addr=%pI6",
3907 			  cm_info.rem_addr);
3908 	irdma_rem_ref_cm_node(cm_node);
3909 	iwdev->cm_core.stats_connect_errs++;
3910 
3911 	return ret;
3912 }
3913 
3914 /**
3915  * irdma_create_listen - registered call creating listener
3916  * @cm_id: cm information for passive connection
3917  * @backlog: to max accept pending count
3918  */
3919 int irdma_create_listen(struct iw_cm_id *cm_id, int backlog)
3920 {
3921 	struct irdma_device *iwdev;
3922 	struct irdma_cm_listener *cm_listen_node;
3923 	struct irdma_cm_info cm_info = {};
3924 	struct sockaddr_in *laddr;
3925 	struct sockaddr_in6 *laddr6;
3926 	bool wildcard = false;
3927 	int err;
3928 
3929 	iwdev = to_iwdev(cm_id->device);
3930 	if (!iwdev)
3931 		return -EINVAL;
3932 
3933 	laddr = (struct sockaddr_in *)&cm_id->m_local_addr;
3934 	laddr6 = (struct sockaddr_in6 *)&cm_id->m_local_addr;
3935 	cm_info.qh_qpid = iwdev->vsi.ilq->qp_id;
3936 
3937 	if (laddr->sin_family == AF_INET) {
3938 		if (iwdev->vsi.mtu < IRDMA_MIN_MTU_IPV4)
3939 			return -EINVAL;
3940 
3941 		cm_info.ipv4 = true;
3942 		cm_info.loc_addr[0] = ntohl(laddr->sin_addr.s_addr);
3943 		cm_info.loc_port = ntohs(laddr->sin_port);
3944 
3945 		if (laddr->sin_addr.s_addr != htonl(INADDR_ANY)) {
3946 			cm_info.vlan_id = irdma_get_vlan_ipv4(cm_info.loc_addr);
3947 		} else {
3948 			cm_info.vlan_id = 0xFFFF;
3949 			wildcard = true;
3950 		}
3951 	} else {
3952 		if (iwdev->vsi.mtu < IRDMA_MIN_MTU_IPV6)
3953 			return -EINVAL;
3954 
3955 		cm_info.ipv4 = false;
3956 		irdma_copy_ip_ntohl(cm_info.loc_addr,
3957 				    laddr6->sin6_addr.in6_u.u6_addr32);
3958 		cm_info.loc_port = ntohs(laddr6->sin6_port);
3959 		if (ipv6_addr_type(&laddr6->sin6_addr) != IPV6_ADDR_ANY) {
3960 			irdma_netdev_vlan_ipv6(cm_info.loc_addr,
3961 					       &cm_info.vlan_id, NULL);
3962 		} else {
3963 			cm_info.vlan_id = 0xFFFF;
3964 			wildcard = true;
3965 		}
3966 	}
3967 
3968 	if (cm_info.vlan_id >= VLAN_N_VID && iwdev->dcb_vlan_mode)
3969 		cm_info.vlan_id = 0;
3970 	cm_info.backlog = backlog;
3971 	cm_info.cm_id = cm_id;
3972 
3973 	trace_irdma_create_listen(iwdev, &cm_info);
3974 
3975 	cm_listen_node = irdma_make_listen_node(&iwdev->cm_core, iwdev,
3976 						&cm_info);
3977 	if (!cm_listen_node) {
3978 		ibdev_dbg(&iwdev->ibdev,
3979 			  "CM: cm_listen_node == NULL\n");
3980 		return -ENOMEM;
3981 	}
3982 
3983 	cm_id->provider_data = cm_listen_node;
3984 
3985 	cm_listen_node->tos = cm_id->tos;
3986 	if (iwdev->vsi.dscp_mode)
3987 		cm_listen_node->user_pri =
3988 			iwdev->vsi.dscp_map[irdma_tos2dscp(cm_id->tos)];
3989 	else
3990 		cm_listen_node->user_pri = rt_tos2priority(cm_id->tos);
3991 	cm_info.user_pri = cm_listen_node->user_pri;
3992 	if (!cm_listen_node->reused_node) {
3993 		if (wildcard) {
3994 			err = irdma_add_mqh(iwdev, &cm_info, cm_listen_node);
3995 			if (err)
3996 				goto error;
3997 		} else {
3998 			err = irdma_manage_qhash(iwdev, &cm_info,
3999 						 IRDMA_QHASH_TYPE_TCP_SYN,
4000 						 IRDMA_QHASH_MANAGE_TYPE_ADD,
4001 						 NULL, true);
4002 			if (err)
4003 				goto error;
4004 
4005 			cm_listen_node->qhash_set = true;
4006 		}
4007 
4008 		cm_listen_node->apbvt_entry = irdma_add_apbvt(iwdev,
4009 							      cm_info.loc_port);
4010 		if (!cm_listen_node->apbvt_entry)
4011 			goto error;
4012 	}
4013 	cm_id->add_ref(cm_id);
4014 	cm_listen_node->cm_core->stats_listen_created++;
4015 	ibdev_dbg(&iwdev->ibdev,
4016 		  "CM: loc_port=0x%04x loc_addr=%pI4 cm_listen_node=%p cm_id=%p qhash_set=%d vlan_id=%d\n",
4017 		  cm_listen_node->loc_port, cm_listen_node->loc_addr,
4018 		  cm_listen_node, cm_listen_node->cm_id,
4019 		  cm_listen_node->qhash_set, cm_listen_node->vlan_id);
4020 
4021 	return 0;
4022 
4023 error:
4024 
4025 	irdma_cm_del_listen(&iwdev->cm_core, cm_listen_node, false);
4026 
4027 	return -EINVAL;
4028 }
4029 
4030 /**
4031  * irdma_destroy_listen - registered call to destroy listener
4032  * @cm_id: cm information for passive connection
4033  */
4034 int irdma_destroy_listen(struct iw_cm_id *cm_id)
4035 {
4036 	struct irdma_device *iwdev;
4037 
4038 	iwdev = to_iwdev(cm_id->device);
4039 	if (cm_id->provider_data)
4040 		irdma_cm_del_listen(&iwdev->cm_core, cm_id->provider_data,
4041 				    true);
4042 	else
4043 		ibdev_dbg(&iwdev->ibdev,
4044 			  "CM: cm_id->provider_data was NULL\n");
4045 
4046 	cm_id->rem_ref(cm_id);
4047 
4048 	return 0;
4049 }
4050 
4051 /**
4052  * irdma_teardown_list_prep - add conn nodes slated for tear down to list
4053  * @cm_core: cm's core
4054  * @teardown_list: a list to which cm_node will be selected
4055  * @ipaddr: pointer to ip address
4056  * @nfo: pointer to cm_info structure instance
4057  * @disconnect_all: flag indicating disconnect all QPs
4058  */
4059 static void irdma_teardown_list_prep(struct irdma_cm_core *cm_core,
4060 				     struct list_head *teardown_list,
4061 				     u32 *ipaddr,
4062 				     struct irdma_cm_info *nfo,
4063 				     bool disconnect_all)
4064 {
4065 	struct irdma_cm_node *cm_node;
4066 	int bkt;
4067 
4068 	hash_for_each_rcu(cm_core->cm_hash_tbl, bkt, cm_node, list) {
4069 		if ((disconnect_all ||
4070 		     (nfo->vlan_id == cm_node->vlan_id &&
4071 		      !memcmp(cm_node->loc_addr, ipaddr, nfo->ipv4 ? 4 : 16))) &&
4072 		    refcount_inc_not_zero(&cm_node->refcnt))
4073 			list_add(&cm_node->teardown_entry, teardown_list);
4074 	}
4075 }
4076 
4077 /**
4078  * irdma_cm_event_connected - handle connected active node
4079  * @event: the info for cm_node of connection
4080  */
4081 static void irdma_cm_event_connected(struct irdma_cm_event *event)
4082 {
4083 	struct irdma_qp *iwqp;
4084 	struct irdma_device *iwdev;
4085 	struct irdma_cm_node *cm_node;
4086 	struct irdma_sc_dev *dev;
4087 	struct ib_qp_attr attr = {};
4088 	struct iw_cm_id *cm_id;
4089 	int status;
4090 	bool read0;
4091 	int wait_ret = 0;
4092 
4093 	cm_node = event->cm_node;
4094 	cm_id = cm_node->cm_id;
4095 	iwqp = cm_id->provider_data;
4096 	iwdev = iwqp->iwdev;
4097 	dev = &iwdev->rf->sc_dev;
4098 	if (iwqp->sc_qp.qp_uk.destroy_pending) {
4099 		status = -ETIMEDOUT;
4100 		goto error;
4101 	}
4102 
4103 	irdma_cm_init_tsa_conn(iwqp, cm_node);
4104 	read0 = (cm_node->send_rdma0_op == SEND_RDMA_READ_ZERO);
4105 	if (iwqp->page)
4106 		iwqp->sc_qp.qp_uk.sq_base = kmap_local_page(iwqp->page);
4107 	irdma_sc_send_rtt(&iwqp->sc_qp, read0);
4108 	if (iwqp->page)
4109 		kunmap_local(iwqp->sc_qp.qp_uk.sq_base);
4110 
4111 	attr.qp_state = IB_QPS_RTS;
4112 	cm_node->qhash_set = false;
4113 	irdma_modify_qp(&iwqp->ibqp, &attr, IB_QP_STATE, NULL);
4114 	if (dev->hw_attrs.uk_attrs.feature_flags & IRDMA_FEATURE_RTS_AE) {
4115 		wait_ret = wait_event_interruptible_timeout(iwqp->waitq,
4116 							    iwqp->rts_ae_rcvd,
4117 							    IRDMA_MAX_TIMEOUT);
4118 		if (!wait_ret)
4119 			ibdev_dbg(&iwdev->ibdev,
4120 				  "CM: Slow Connection: cm_node=%p, loc_port=%d, rem_port=%d, cm_id=%p\n",
4121 				  cm_node, cm_node->loc_port,
4122 				  cm_node->rem_port, cm_node->cm_id);
4123 	}
4124 
4125 	irdma_send_cm_event(cm_node, cm_id, IW_CM_EVENT_CONNECT_REPLY, 0);
4126 	cm_node->accelerated = true;
4127 	complete(&cm_node->establish_comp);
4128 	cm_node->cm_core->cm_free_ah(cm_node);
4129 	return;
4130 
4131 error:
4132 	iwqp->cm_id = NULL;
4133 	cm_id->provider_data = NULL;
4134 	irdma_send_cm_event(event->cm_node, cm_id, IW_CM_EVENT_CONNECT_REPLY,
4135 			    status);
4136 	irdma_rem_ref_cm_node(event->cm_node);
4137 }
4138 
4139 /**
4140  * irdma_cm_event_reset - handle reset
4141  * @event: the info for cm_node of connection
4142  */
4143 static void irdma_cm_event_reset(struct irdma_cm_event *event)
4144 {
4145 	struct irdma_cm_node *cm_node = event->cm_node;
4146 	struct iw_cm_id *cm_id = cm_node->cm_id;
4147 	struct irdma_qp *iwqp;
4148 
4149 	if (!cm_id)
4150 		return;
4151 
4152 	iwqp = cm_id->provider_data;
4153 	if (!iwqp)
4154 		return;
4155 
4156 	ibdev_dbg(&cm_node->iwdev->ibdev,
4157 		  "CM: reset event %p - cm_id = %p\n", event->cm_node, cm_id);
4158 	iwqp->cm_id = NULL;
4159 
4160 	irdma_send_cm_event(cm_node, cm_node->cm_id, IW_CM_EVENT_DISCONNECT,
4161 			    -ECONNRESET);
4162 	irdma_send_cm_event(cm_node, cm_node->cm_id, IW_CM_EVENT_CLOSE, 0);
4163 }
4164 
4165 /**
4166  * irdma_cm_event_handler - send event to cm upper layer
4167  * @work: pointer of cm event info.
4168  */
4169 static void irdma_cm_event_handler(struct work_struct *work)
4170 {
4171 	struct irdma_cm_event *event = container_of(work, struct irdma_cm_event, event_work);
4172 	struct irdma_cm_node *cm_node;
4173 
4174 	if (!event || !event->cm_node || !event->cm_node->cm_core)
4175 		return;
4176 
4177 	cm_node = event->cm_node;
4178 	trace_irdma_cm_event_handler(cm_node, event->type, NULL);
4179 
4180 	switch (event->type) {
4181 	case IRDMA_CM_EVENT_MPA_REQ:
4182 		irdma_send_cm_event(cm_node, cm_node->cm_id,
4183 				    IW_CM_EVENT_CONNECT_REQUEST, 0);
4184 		break;
4185 	case IRDMA_CM_EVENT_RESET:
4186 		irdma_cm_event_reset(event);
4187 		break;
4188 	case IRDMA_CM_EVENT_CONNECTED:
4189 		if (!event->cm_node->cm_id ||
4190 		    event->cm_node->state != IRDMA_CM_STATE_OFFLOADED)
4191 			break;
4192 		irdma_cm_event_connected(event);
4193 		break;
4194 	case IRDMA_CM_EVENT_MPA_REJECT:
4195 		if (!event->cm_node->cm_id ||
4196 		    cm_node->state == IRDMA_CM_STATE_OFFLOADED)
4197 			break;
4198 		irdma_send_cm_event(cm_node, cm_node->cm_id,
4199 				    IW_CM_EVENT_CONNECT_REPLY, -ECONNREFUSED);
4200 		break;
4201 	case IRDMA_CM_EVENT_ABORTED:
4202 		if (!event->cm_node->cm_id ||
4203 		    event->cm_node->state == IRDMA_CM_STATE_OFFLOADED)
4204 			break;
4205 		irdma_event_connect_error(event);
4206 		break;
4207 	default:
4208 		ibdev_dbg(&cm_node->iwdev->ibdev,
4209 			  "CM: bad event type = %d\n", event->type);
4210 		break;
4211 	}
4212 
4213 	irdma_rem_ref_cm_node(event->cm_node);
4214 	kfree(event);
4215 }
4216 
4217 /**
4218  * irdma_cm_post_event - queue event request for worker thread
4219  * @event: cm node's info for up event call
4220  */
4221 static void irdma_cm_post_event(struct irdma_cm_event *event)
4222 {
4223 	refcount_inc(&event->cm_node->refcnt);
4224 	INIT_WORK(&event->event_work, irdma_cm_event_handler);
4225 	queue_work(event->cm_node->cm_core->event_wq, &event->event_work);
4226 }
4227 
4228 /**
4229  * irdma_cm_teardown_connections - teardown QPs
4230  * @iwdev: device pointer
4231  * @ipaddr: Pointer to IPv4 or IPv6 address
4232  * @nfo: Connection info
4233  * @disconnect_all: flag indicating disconnect all QPs
4234  *
4235  * teardown QPs where source or destination addr matches ip addr
4236  */
4237 void irdma_cm_teardown_connections(struct irdma_device *iwdev, u32 *ipaddr,
4238 				   struct irdma_cm_info *nfo,
4239 				   bool disconnect_all)
4240 {
4241 	struct irdma_cm_core *cm_core = &iwdev->cm_core;
4242 	struct list_head *list_core_temp;
4243 	struct list_head *list_node;
4244 	struct irdma_cm_node *cm_node;
4245 	struct list_head teardown_list;
4246 	struct ib_qp_attr attr;
4247 	struct irdma_sc_vsi *vsi = &iwdev->vsi;
4248 	struct irdma_sc_qp *sc_qp;
4249 	struct irdma_qp *qp;
4250 	int i;
4251 
4252 	INIT_LIST_HEAD(&teardown_list);
4253 
4254 	rcu_read_lock();
4255 	irdma_teardown_list_prep(cm_core, &teardown_list, ipaddr, nfo, disconnect_all);
4256 	rcu_read_unlock();
4257 
4258 	list_for_each_safe (list_node, list_core_temp, &teardown_list) {
4259 		cm_node = container_of(list_node, struct irdma_cm_node,
4260 				       teardown_entry);
4261 		attr.qp_state = IB_QPS_ERR;
4262 		irdma_modify_qp(&cm_node->iwqp->ibqp, &attr, IB_QP_STATE, NULL);
4263 		if (iwdev->rf->reset)
4264 			irdma_cm_disconn(cm_node->iwqp);
4265 		irdma_rem_ref_cm_node(cm_node);
4266 	}
4267 	if (!iwdev->roce_mode)
4268 		return;
4269 
4270 	INIT_LIST_HEAD(&teardown_list);
4271 	for (i = 0; i < IRDMA_MAX_USER_PRIORITY; i++) {
4272 		mutex_lock(&vsi->qos[i].qos_mutex);
4273 		list_for_each_safe (list_node, list_core_temp,
4274 				    &vsi->qos[i].qplist) {
4275 			u32 qp_ip[4];
4276 
4277 			sc_qp = container_of(list_node, struct irdma_sc_qp,
4278 					     list);
4279 			if (sc_qp->qp_uk.qp_type != IRDMA_QP_TYPE_ROCE_RC)
4280 				continue;
4281 
4282 			qp = sc_qp->qp_uk.back_qp;
4283 			if (!disconnect_all) {
4284 				if (nfo->ipv4)
4285 					qp_ip[0] = qp->udp_info.local_ipaddr[3];
4286 				else
4287 					memcpy(qp_ip,
4288 					       &qp->udp_info.local_ipaddr[0],
4289 					       sizeof(qp_ip));
4290 			}
4291 
4292 			if (disconnect_all ||
4293 			    (nfo->vlan_id == (qp->udp_info.vlan_tag & VLAN_VID_MASK) &&
4294 			     !memcmp(qp_ip, ipaddr, nfo->ipv4 ? 4 : 16))) {
4295 				spin_lock(&iwdev->rf->qptable_lock);
4296 				if (iwdev->rf->qp_table[sc_qp->qp_uk.qp_id]) {
4297 					irdma_qp_add_ref(&qp->ibqp);
4298 					list_add(&qp->teardown_entry,
4299 						 &teardown_list);
4300 				}
4301 				spin_unlock(&iwdev->rf->qptable_lock);
4302 			}
4303 		}
4304 		mutex_unlock(&vsi->qos[i].qos_mutex);
4305 	}
4306 
4307 	list_for_each_safe (list_node, list_core_temp, &teardown_list) {
4308 		qp = container_of(list_node, struct irdma_qp, teardown_entry);
4309 		attr.qp_state = IB_QPS_ERR;
4310 		irdma_modify_qp_roce(&qp->ibqp, &attr, IB_QP_STATE, NULL);
4311 		irdma_qp_rem_ref(&qp->ibqp);
4312 	}
4313 }
4314 
4315 /**
4316  * irdma_qhash_ctrl - enable/disable qhash for list
4317  * @iwdev: device pointer
4318  * @parent_listen_node: parent listen node
4319  * @nfo: cm info node
4320  * @ipaddr: Pointer to IPv4 or IPv6 address
4321  * @ipv4: flag indicating IPv4 when true
4322  * @ifup: flag indicating interface up when true
4323  *
4324  * Enables or disables the qhash for the node in the child
4325  * listen list that matches ipaddr. If no matching IP was found
4326  * it will allocate and add a new child listen node to the
4327  * parent listen node. The listen_list_lock is assumed to be
4328  * held when called.
4329  */
4330 static void irdma_qhash_ctrl(struct irdma_device *iwdev,
4331 			     struct irdma_cm_listener *parent_listen_node,
4332 			     struct irdma_cm_info *nfo, u32 *ipaddr, bool ipv4,
4333 			     bool ifup)
4334 {
4335 	struct list_head *child_listen_list = &parent_listen_node->child_listen_list;
4336 	struct irdma_cm_listener *child_listen_node;
4337 	struct list_head *pos, *tpos;
4338 	bool node_allocated = false;
4339 	enum irdma_quad_hash_manage_type op = ifup ?
4340 					      IRDMA_QHASH_MANAGE_TYPE_ADD :
4341 					      IRDMA_QHASH_MANAGE_TYPE_DELETE;
4342 	int err;
4343 
4344 	list_for_each_safe (pos, tpos, child_listen_list) {
4345 		child_listen_node = list_entry(pos, struct irdma_cm_listener,
4346 					       child_listen_list);
4347 		if (!memcmp(child_listen_node->loc_addr, ipaddr, ipv4 ? 4 : 16))
4348 			goto set_qhash;
4349 	}
4350 
4351 	/* if not found then add a child listener if interface is going up */
4352 	if (!ifup)
4353 		return;
4354 	child_listen_node = kmemdup(parent_listen_node,
4355 				    sizeof(*child_listen_node), GFP_ATOMIC);
4356 	if (!child_listen_node)
4357 		return;
4358 
4359 	node_allocated = true;
4360 	memcpy(child_listen_node->loc_addr, ipaddr, ipv4 ? 4 : 16);
4361 
4362 set_qhash:
4363 	memcpy(nfo->loc_addr, child_listen_node->loc_addr,
4364 	       sizeof(nfo->loc_addr));
4365 	nfo->vlan_id = child_listen_node->vlan_id;
4366 	err = irdma_manage_qhash(iwdev, nfo, IRDMA_QHASH_TYPE_TCP_SYN, op, NULL,
4367 				 false);
4368 	if (!err) {
4369 		child_listen_node->qhash_set = ifup;
4370 		if (node_allocated)
4371 			list_add(&child_listen_node->child_listen_list,
4372 				 &parent_listen_node->child_listen_list);
4373 	} else if (node_allocated) {
4374 		kfree(child_listen_node);
4375 	}
4376 }
4377 
4378 /**
4379  * irdma_if_notify - process an ifdown on an interface
4380  * @iwdev: device pointer
4381  * @netdev: network device structure
4382  * @ipaddr: Pointer to IPv4 or IPv6 address
4383  * @ipv4: flag indicating IPv4 when true
4384  * @ifup: flag indicating interface up when true
4385  */
4386 void irdma_if_notify(struct irdma_device *iwdev, struct net_device *netdev,
4387 		     u32 *ipaddr, bool ipv4, bool ifup)
4388 {
4389 	struct irdma_cm_core *cm_core = &iwdev->cm_core;
4390 	unsigned long flags;
4391 	struct irdma_cm_listener *listen_node;
4392 	static const u32 ip_zero[4] = { 0, 0, 0, 0 };
4393 	struct irdma_cm_info nfo = {};
4394 	u16 vlan_id = rdma_vlan_dev_vlan_id(netdev);
4395 	enum irdma_quad_hash_manage_type op = ifup ?
4396 					      IRDMA_QHASH_MANAGE_TYPE_ADD :
4397 					      IRDMA_QHASH_MANAGE_TYPE_DELETE;
4398 
4399 	nfo.vlan_id = vlan_id;
4400 	nfo.ipv4 = ipv4;
4401 	nfo.qh_qpid = 1;
4402 
4403 	/* Disable or enable qhash for listeners */
4404 	spin_lock_irqsave(&cm_core->listen_list_lock, flags);
4405 	list_for_each_entry (listen_node, &cm_core->listen_list, list) {
4406 		if (vlan_id != listen_node->vlan_id ||
4407 		    (memcmp(listen_node->loc_addr, ipaddr, ipv4 ? 4 : 16) &&
4408 		     memcmp(listen_node->loc_addr, ip_zero, ipv4 ? 4 : 16)))
4409 			continue;
4410 
4411 		memcpy(nfo.loc_addr, listen_node->loc_addr,
4412 		       sizeof(nfo.loc_addr));
4413 		nfo.loc_port = listen_node->loc_port;
4414 		nfo.user_pri = listen_node->user_pri;
4415 		if (!list_empty(&listen_node->child_listen_list)) {
4416 			irdma_qhash_ctrl(iwdev, listen_node, &nfo, ipaddr, ipv4,
4417 					 ifup);
4418 		} else if (memcmp(listen_node->loc_addr, ip_zero,
4419 				  ipv4 ? 4 : 16)) {
4420 			if (!irdma_manage_qhash(iwdev, &nfo,
4421 						IRDMA_QHASH_TYPE_TCP_SYN, op,
4422 						NULL, false))
4423 				listen_node->qhash_set = ifup;
4424 		}
4425 	}
4426 	spin_unlock_irqrestore(&cm_core->listen_list_lock, flags);
4427 
4428 	/* disconnect any connected qp's on ifdown */
4429 	if (!ifup)
4430 		irdma_cm_teardown_connections(iwdev, ipaddr, &nfo, false);
4431 }
4432