1 // SPDX-License-Identifier: GPL-2.0 OR Linux-OpenIB 2 /* 3 * Copyright (c) 2013-2018, Mellanox Technologies inc. All rights reserved. 4 */ 5 6 #include <linux/module.h> 7 #include <linux/mlx5/qp.h> 8 #include <linux/slab.h> 9 #include <rdma/ib_umem.h> 10 #include <rdma/ib_user_verbs.h> 11 #include "mlx5_ib.h" 12 #include "srq.h" 13 14 static void *get_wqe(struct mlx5_ib_srq *srq, int n) 15 { 16 return mlx5_frag_buf_get_wqe(&srq->fbc, n); 17 } 18 19 static void mlx5_ib_srq_event(struct mlx5_core_srq *srq, enum mlx5_event type) 20 { 21 struct ib_event event; 22 struct ib_srq *ibsrq = &to_mibsrq(srq)->ibsrq; 23 24 if (ibsrq->event_handler) { 25 event.device = ibsrq->device; 26 event.element.srq = ibsrq; 27 switch (type) { 28 case MLX5_EVENT_TYPE_SRQ_RQ_LIMIT: 29 event.event = IB_EVENT_SRQ_LIMIT_REACHED; 30 break; 31 case MLX5_EVENT_TYPE_SRQ_CATAS_ERROR: 32 event.event = IB_EVENT_SRQ_ERR; 33 break; 34 default: 35 pr_warn("mlx5_ib: Unexpected event type %d on SRQ %06x\n", 36 type, srq->srqn); 37 return; 38 } 39 40 ibsrq->event_handler(&event, ibsrq->srq_context); 41 } 42 } 43 44 static int create_srq_user(struct ib_pd *pd, struct mlx5_ib_srq *srq, 45 struct mlx5_srq_attr *in, 46 struct ib_udata *udata, int buf_size) 47 { 48 struct mlx5_ib_dev *dev = to_mdev(pd->device); 49 struct mlx5_ib_create_srq ucmd = {}; 50 struct mlx5_ib_ucontext *ucontext = rdma_udata_to_drv_context( 51 udata, struct mlx5_ib_ucontext, ibucontext); 52 size_t ucmdlen; 53 int err; 54 u32 uidx = MLX5_IB_DEFAULT_UIDX; 55 56 ucmdlen = min(udata->inlen, sizeof(ucmd)); 57 58 if (ib_copy_from_udata(&ucmd, udata, ucmdlen)) { 59 mlx5_ib_dbg(dev, "failed copy udata\n"); 60 return -EFAULT; 61 } 62 63 if (ucmd.reserved0 || ucmd.reserved1) 64 return -EINVAL; 65 66 if (udata->inlen > sizeof(ucmd) && 67 !ib_is_udata_cleared(udata, sizeof(ucmd), 68 udata->inlen - sizeof(ucmd))) 69 return -EINVAL; 70 71 if (in->type != IB_SRQT_BASIC) { 72 err = get_srq_user_index(ucontext, &ucmd, udata->inlen, &uidx); 73 if (err) 74 return err; 75 } 76 77 srq->wq_sig = !!(ucmd.flags & MLX5_SRQ_FLAG_SIGNATURE); 78 79 srq->umem = ib_umem_get(pd->device, ucmd.buf_addr, buf_size, 0); 80 if (IS_ERR(srq->umem)) { 81 mlx5_ib_dbg(dev, "failed umem get, size %d\n", buf_size); 82 err = PTR_ERR(srq->umem); 83 return err; 84 } 85 in->umem = srq->umem; 86 87 err = mlx5_ib_db_map_user(ucontext, udata, ucmd.db_addr, &srq->db); 88 if (err) { 89 mlx5_ib_dbg(dev, "map doorbell failed\n"); 90 goto err_umem; 91 } 92 93 in->uid = (in->type != IB_SRQT_XRC) ? to_mpd(pd)->uid : 0; 94 if (MLX5_CAP_GEN(dev->mdev, cqe_version) == MLX5_CQE_VERSION_V1 && 95 in->type != IB_SRQT_BASIC) 96 in->user_index = uidx; 97 98 return 0; 99 100 err_umem: 101 ib_umem_release(srq->umem); 102 103 return err; 104 } 105 106 static int create_srq_kernel(struct mlx5_ib_dev *dev, struct mlx5_ib_srq *srq, 107 struct mlx5_srq_attr *in, int buf_size) 108 { 109 int err; 110 int i; 111 struct mlx5_wqe_srq_next_seg *next; 112 113 err = mlx5_db_alloc(dev->mdev, &srq->db); 114 if (err) { 115 mlx5_ib_warn(dev, "alloc dbell rec failed\n"); 116 return err; 117 } 118 119 if (mlx5_frag_buf_alloc_node(dev->mdev, buf_size, &srq->buf, 120 dev->mdev->priv.numa_node)) { 121 mlx5_ib_dbg(dev, "buf alloc failed\n"); 122 err = -ENOMEM; 123 goto err_db; 124 } 125 126 mlx5_init_fbc(srq->buf.frags, srq->msrq.wqe_shift, ilog2(srq->msrq.max), 127 &srq->fbc); 128 129 srq->head = 0; 130 srq->tail = srq->msrq.max - 1; 131 srq->wqe_ctr = 0; 132 133 for (i = 0; i < srq->msrq.max; i++) { 134 next = get_wqe(srq, i); 135 next->next_wqe_index = 136 cpu_to_be16((i + 1) & (srq->msrq.max - 1)); 137 } 138 139 mlx5_ib_dbg(dev, "srq->buf.page_shift = %d\n", srq->buf.page_shift); 140 in->pas = kvcalloc(srq->buf.npages, sizeof(*in->pas), GFP_KERNEL); 141 if (!in->pas) { 142 err = -ENOMEM; 143 goto err_buf; 144 } 145 mlx5_fill_page_frag_array(&srq->buf, in->pas); 146 147 srq->wrid = kvmalloc_array(srq->msrq.max, sizeof(u64), GFP_KERNEL); 148 if (!srq->wrid) { 149 err = -ENOMEM; 150 goto err_in; 151 } 152 srq->wq_sig = 0; 153 154 in->log_page_size = srq->buf.page_shift - MLX5_ADAPTER_PAGE_SHIFT; 155 if (MLX5_CAP_GEN(dev->mdev, cqe_version) == MLX5_CQE_VERSION_V1 && 156 in->type != IB_SRQT_BASIC) 157 in->user_index = MLX5_IB_DEFAULT_UIDX; 158 159 return 0; 160 161 err_in: 162 kvfree(in->pas); 163 164 err_buf: 165 mlx5_frag_buf_free(dev->mdev, &srq->buf); 166 167 err_db: 168 mlx5_db_free(dev->mdev, &srq->db); 169 return err; 170 } 171 172 static void destroy_srq_user(struct ib_pd *pd, struct mlx5_ib_srq *srq, 173 struct ib_udata *udata) 174 { 175 mlx5_ib_db_unmap_user( 176 rdma_udata_to_drv_context( 177 udata, 178 struct mlx5_ib_ucontext, 179 ibucontext), 180 &srq->db); 181 ib_umem_release(srq->umem); 182 } 183 184 185 static void destroy_srq_kernel(struct mlx5_ib_dev *dev, struct mlx5_ib_srq *srq) 186 { 187 kvfree(srq->wrid); 188 mlx5_frag_buf_free(dev->mdev, &srq->buf); 189 mlx5_db_free(dev->mdev, &srq->db); 190 } 191 192 int mlx5_ib_create_srq(struct ib_srq *ib_srq, 193 struct ib_srq_init_attr *init_attr, 194 struct ib_udata *udata) 195 { 196 struct mlx5_ib_dev *dev = to_mdev(ib_srq->device); 197 struct mlx5_ib_srq *srq = to_msrq(ib_srq); 198 size_t desc_size; 199 size_t buf_size; 200 int err; 201 struct mlx5_srq_attr in = {}; 202 __u32 max_srq_wqes = 1 << MLX5_CAP_GEN(dev->mdev, log_max_srq_sz); 203 204 if (init_attr->srq_type != IB_SRQT_BASIC && 205 init_attr->srq_type != IB_SRQT_XRC && 206 init_attr->srq_type != IB_SRQT_TM) 207 return -EOPNOTSUPP; 208 209 /* Sanity check SRQ size before proceeding */ 210 if (init_attr->attr.max_wr >= max_srq_wqes) { 211 mlx5_ib_dbg(dev, "max_wr %d, cap %d\n", 212 init_attr->attr.max_wr, 213 max_srq_wqes); 214 return -EINVAL; 215 } 216 217 mutex_init(&srq->mutex); 218 spin_lock_init(&srq->lock); 219 srq->msrq.max = roundup_pow_of_two(init_attr->attr.max_wr + 1); 220 srq->msrq.max_gs = init_attr->attr.max_sge; 221 222 desc_size = sizeof(struct mlx5_wqe_srq_next_seg) + 223 srq->msrq.max_gs * sizeof(struct mlx5_wqe_data_seg); 224 if (desc_size == 0 || srq->msrq.max_gs > desc_size) 225 return -EINVAL; 226 227 desc_size = roundup_pow_of_two(desc_size); 228 desc_size = max_t(size_t, 32, desc_size); 229 if (desc_size < sizeof(struct mlx5_wqe_srq_next_seg)) 230 return -EINVAL; 231 232 srq->msrq.max_avail_gather = (desc_size - sizeof(struct mlx5_wqe_srq_next_seg)) / 233 sizeof(struct mlx5_wqe_data_seg); 234 srq->msrq.wqe_shift = ilog2(desc_size); 235 buf_size = srq->msrq.max * desc_size; 236 if (buf_size < desc_size) 237 return -EINVAL; 238 239 in.type = init_attr->srq_type; 240 241 if (udata) 242 err = create_srq_user(ib_srq->pd, srq, &in, udata, buf_size); 243 else 244 err = create_srq_kernel(dev, srq, &in, buf_size); 245 246 if (err) { 247 mlx5_ib_warn(dev, "create srq %s failed, err %d\n", 248 udata ? "user" : "kernel", err); 249 return err; 250 } 251 252 in.log_size = ilog2(srq->msrq.max); 253 in.wqe_shift = srq->msrq.wqe_shift - 4; 254 if (srq->wq_sig) 255 in.flags |= MLX5_SRQ_FLAG_WQ_SIG; 256 257 if (init_attr->srq_type == IB_SRQT_XRC && init_attr->ext.xrc.xrcd) 258 in.xrcd = to_mxrcd(init_attr->ext.xrc.xrcd)->xrcdn; 259 else 260 in.xrcd = dev->devr.xrcdn0; 261 262 if (init_attr->srq_type == IB_SRQT_TM) { 263 in.tm_log_list_size = 264 ilog2(init_attr->ext.tag_matching.max_num_tags) + 1; 265 if (in.tm_log_list_size > 266 MLX5_CAP_GEN(dev->mdev, log_tag_matching_list_sz)) { 267 mlx5_ib_dbg(dev, "TM SRQ max_num_tags exceeding limit\n"); 268 err = -EINVAL; 269 goto err_usr_kern_srq; 270 } 271 in.flags |= MLX5_SRQ_FLAG_RNDV; 272 } 273 274 if (ib_srq_has_cq(init_attr->srq_type)) 275 in.cqn = to_mcq(init_attr->ext.cq)->mcq.cqn; 276 else 277 in.cqn = to_mcq(dev->devr.c0)->mcq.cqn; 278 279 in.pd = to_mpd(ib_srq->pd)->pdn; 280 in.db_record = srq->db.dma; 281 err = mlx5_cmd_create_srq(dev, &srq->msrq, &in); 282 kvfree(in.pas); 283 if (err) { 284 mlx5_ib_dbg(dev, "create SRQ failed, err %d\n", err); 285 goto err_usr_kern_srq; 286 } 287 288 mlx5_ib_dbg(dev, "create SRQ with srqn 0x%x\n", srq->msrq.srqn); 289 290 srq->msrq.event = mlx5_ib_srq_event; 291 srq->ibsrq.ext.xrc.srq_num = srq->msrq.srqn; 292 293 if (udata) { 294 struct mlx5_ib_create_srq_resp resp = { 295 .srqn = srq->msrq.srqn, 296 }; 297 298 if (ib_copy_to_udata(udata, &resp, min(udata->outlen, 299 sizeof(resp)))) { 300 mlx5_ib_dbg(dev, "copy to user failed\n"); 301 err = -EFAULT; 302 goto err_core; 303 } 304 } 305 306 init_attr->attr.max_wr = srq->msrq.max - 1; 307 308 return 0; 309 310 err_core: 311 mlx5_cmd_destroy_srq(dev, &srq->msrq); 312 313 err_usr_kern_srq: 314 if (udata) 315 destroy_srq_user(ib_srq->pd, srq, udata); 316 else 317 destroy_srq_kernel(dev, srq); 318 319 return err; 320 } 321 322 int mlx5_ib_modify_srq(struct ib_srq *ibsrq, struct ib_srq_attr *attr, 323 enum ib_srq_attr_mask attr_mask, struct ib_udata *udata) 324 { 325 struct mlx5_ib_dev *dev = to_mdev(ibsrq->device); 326 struct mlx5_ib_srq *srq = to_msrq(ibsrq); 327 int ret; 328 329 /* We don't support resizing SRQs yet */ 330 if (attr_mask & IB_SRQ_MAX_WR) 331 return -EINVAL; 332 333 if (attr_mask & IB_SRQ_LIMIT) { 334 if (attr->srq_limit >= srq->msrq.max) 335 return -EINVAL; 336 337 mutex_lock(&srq->mutex); 338 ret = mlx5_cmd_arm_srq(dev, &srq->msrq, attr->srq_limit, 1); 339 mutex_unlock(&srq->mutex); 340 341 if (ret) 342 return ret; 343 } 344 345 return 0; 346 } 347 348 int mlx5_ib_query_srq(struct ib_srq *ibsrq, struct ib_srq_attr *srq_attr) 349 { 350 struct mlx5_ib_dev *dev = to_mdev(ibsrq->device); 351 struct mlx5_ib_srq *srq = to_msrq(ibsrq); 352 int ret; 353 struct mlx5_srq_attr *out; 354 355 out = kzalloc(sizeof(*out), GFP_KERNEL); 356 if (!out) 357 return -ENOMEM; 358 359 ret = mlx5_cmd_query_srq(dev, &srq->msrq, out); 360 if (ret) 361 goto out_box; 362 363 srq_attr->srq_limit = out->lwm; 364 srq_attr->max_wr = srq->msrq.max - 1; 365 srq_attr->max_sge = srq->msrq.max_gs; 366 367 out_box: 368 kfree(out); 369 return ret; 370 } 371 372 int mlx5_ib_destroy_srq(struct ib_srq *srq, struct ib_udata *udata) 373 { 374 struct mlx5_ib_dev *dev = to_mdev(srq->device); 375 struct mlx5_ib_srq *msrq = to_msrq(srq); 376 int ret; 377 378 ret = mlx5_cmd_destroy_srq(dev, &msrq->msrq); 379 if (ret) 380 return ret; 381 382 if (udata) 383 destroy_srq_user(srq->pd, msrq, udata); 384 else 385 destroy_srq_kernel(dev, msrq); 386 return 0; 387 } 388 389 void mlx5_ib_free_srq_wqe(struct mlx5_ib_srq *srq, int wqe_index) 390 { 391 struct mlx5_wqe_srq_next_seg *next; 392 393 /* always called with interrupts disabled. */ 394 spin_lock(&srq->lock); 395 396 next = get_wqe(srq, srq->tail); 397 next->next_wqe_index = cpu_to_be16(wqe_index); 398 srq->tail = wqe_index; 399 400 spin_unlock(&srq->lock); 401 } 402 403 int mlx5_ib_post_srq_recv(struct ib_srq *ibsrq, const struct ib_recv_wr *wr, 404 const struct ib_recv_wr **bad_wr) 405 { 406 struct mlx5_ib_srq *srq = to_msrq(ibsrq); 407 struct mlx5_wqe_srq_next_seg *next; 408 struct mlx5_wqe_data_seg *scat; 409 struct mlx5_ib_dev *dev = to_mdev(ibsrq->device); 410 struct mlx5_core_dev *mdev = dev->mdev; 411 unsigned long flags; 412 int err = 0; 413 int nreq; 414 int i; 415 416 spin_lock_irqsave(&srq->lock, flags); 417 418 if (mdev->state == MLX5_DEVICE_STATE_INTERNAL_ERROR) { 419 err = -EIO; 420 *bad_wr = wr; 421 goto out; 422 } 423 424 for (nreq = 0; wr; nreq++, wr = wr->next) { 425 if (unlikely(wr->num_sge > srq->msrq.max_gs)) { 426 err = -EINVAL; 427 *bad_wr = wr; 428 break; 429 } 430 431 if (unlikely(srq->head == srq->tail)) { 432 err = -ENOMEM; 433 *bad_wr = wr; 434 break; 435 } 436 437 srq->wrid[srq->head] = wr->wr_id; 438 439 next = get_wqe(srq, srq->head); 440 srq->head = be16_to_cpu(next->next_wqe_index); 441 scat = (struct mlx5_wqe_data_seg *)(next + 1); 442 443 for (i = 0; i < wr->num_sge; i++) { 444 scat[i].byte_count = cpu_to_be32(wr->sg_list[i].length); 445 scat[i].lkey = cpu_to_be32(wr->sg_list[i].lkey); 446 scat[i].addr = cpu_to_be64(wr->sg_list[i].addr); 447 } 448 449 if (i < srq->msrq.max_avail_gather) { 450 scat[i].byte_count = 0; 451 scat[i].lkey = cpu_to_be32(MLX5_INVALID_LKEY); 452 scat[i].addr = 0; 453 } 454 } 455 456 if (likely(nreq)) { 457 srq->wqe_ctr += nreq; 458 459 /* Make sure that descriptors are written before 460 * doorbell record. 461 */ 462 wmb(); 463 464 *srq->db.db = cpu_to_be32(srq->wqe_ctr); 465 } 466 out: 467 spin_unlock_irqrestore(&srq->lock, flags); 468 469 return err; 470 } 471