xref: /linux/fs/ocfs2/cluster/tcp.c (revision 0b8061c340b643e01da431dd60c75a41bb1d31ec)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /* -*- mode: c; c-basic-offset: 8; -*-
3  *
4  * vim: noexpandtab sw=8 ts=8 sts=0:
5  *
6  * Copyright (C) 2004 Oracle.  All rights reserved.
7  *
8  * ----
9  *
10  * Callers for this were originally written against a very simple synchronus
11  * API.  This implementation reflects those simple callers.  Some day I'm sure
12  * we'll need to move to a more robust posting/callback mechanism.
13  *
14  * Transmit calls pass in kernel virtual addresses and block copying this into
15  * the socket's tx buffers via a usual blocking sendmsg.  They'll block waiting
16  * for a failed socket to timeout.  TX callers can also pass in a poniter to an
17  * 'int' which gets filled with an errno off the wire in response to the
18  * message they send.
19  *
20  * Handlers for unsolicited messages are registered.  Each socket has a page
21  * that incoming data is copied into.  First the header, then the data.
22  * Handlers are called from only one thread with a reference to this per-socket
23  * page.  This page is destroyed after the handler call, so it can't be
24  * referenced beyond the call.  Handlers may block but are discouraged from
25  * doing so.
26  *
27  * Any framing errors (bad magic, large payload lengths) close a connection.
28  *
29  * Our sock_container holds the state we associate with a socket.  It's current
30  * framing state is held there as well as the refcounting we do around when it
31  * is safe to tear down the socket.  The socket is only finally torn down from
32  * the container when the container loses all of its references -- so as long
33  * as you hold a ref on the container you can trust that the socket is valid
34  * for use with kernel socket APIs.
35  *
36  * Connections are initiated between a pair of nodes when the node with the
37  * higher node number gets a heartbeat callback which indicates that the lower
38  * numbered node has started heartbeating.  The lower numbered node is passive
39  * and only accepts the connection if the higher numbered node is heartbeating.
40  */
41 
42 #include <linux/kernel.h>
43 #include <linux/sched/mm.h>
44 #include <linux/jiffies.h>
45 #include <linux/slab.h>
46 #include <linux/idr.h>
47 #include <linux/kref.h>
48 #include <linux/net.h>
49 #include <linux/export.h>
50 #include <net/tcp.h>
51 
52 #include <linux/uaccess.h>
53 
54 #include "heartbeat.h"
55 #include "tcp.h"
56 #include "nodemanager.h"
57 #define MLOG_MASK_PREFIX ML_TCP
58 #include "masklog.h"
59 #include "quorum.h"
60 
61 #include "tcp_internal.h"
62 
63 #define SC_NODEF_FMT "node %s (num %u) at %pI4:%u"
64 #define SC_NODEF_ARGS(sc) sc->sc_node->nd_name, sc->sc_node->nd_num,	\
65 			  &sc->sc_node->nd_ipv4_address,		\
66 			  ntohs(sc->sc_node->nd_ipv4_port)
67 
68 /*
69  * In the following two log macros, the whitespace after the ',' just
70  * before ##args is intentional. Otherwise, gcc 2.95 will eat the
71  * previous token if args expands to nothing.
72  */
73 #define msglog(hdr, fmt, args...) do {					\
74 	typeof(hdr) __hdr = (hdr);					\
75 	mlog(ML_MSG, "[mag %u len %u typ %u stat %d sys_stat %d "	\
76 	     "key %08x num %u] " fmt,					\
77 	     be16_to_cpu(__hdr->magic), be16_to_cpu(__hdr->data_len), 	\
78 	     be16_to_cpu(__hdr->msg_type), be32_to_cpu(__hdr->status),	\
79 	     be32_to_cpu(__hdr->sys_status), be32_to_cpu(__hdr->key),	\
80 	     be32_to_cpu(__hdr->msg_num) ,  ##args);			\
81 } while (0)
82 
83 #define sclog(sc, fmt, args...) do {					\
84 	typeof(sc) __sc = (sc);						\
85 	mlog(ML_SOCKET, "[sc %p refs %d sock %p node %u page %p "	\
86 	     "pg_off %zu] " fmt, __sc,					\
87 	     kref_read(&__sc->sc_kref), __sc->sc_sock,	\
88 	    __sc->sc_node->nd_num, __sc->sc_page, __sc->sc_page_off ,	\
89 	    ##args);							\
90 } while (0)
91 
92 static DEFINE_RWLOCK(o2net_handler_lock);
93 static struct rb_root o2net_handler_tree = RB_ROOT;
94 
95 static struct o2net_node o2net_nodes[O2NM_MAX_NODES];
96 
97 /* XXX someday we'll need better accounting */
98 static struct socket *o2net_listen_sock;
99 
100 /*
101  * listen work is only queued by the listening socket callbacks on the
102  * o2net_wq.  teardown detaches the callbacks before destroying the workqueue.
103  * quorum work is queued as sock containers are shutdown.. stop_listening
104  * tears down all the node's sock containers, preventing future shutdowns
105  * and queued quroum work, before canceling delayed quorum work and
106  * destroying the work queue.
107  */
108 static struct workqueue_struct *o2net_wq;
109 static struct work_struct o2net_listen_work;
110 
111 static struct o2hb_callback_func o2net_hb_up, o2net_hb_down;
112 #define O2NET_HB_PRI 0x1
113 
114 static struct o2net_handshake *o2net_hand;
115 static struct o2net_msg *o2net_keep_req, *o2net_keep_resp;
116 
117 static int o2net_sys_err_translations[O2NET_ERR_MAX] =
118 		{[O2NET_ERR_NONE]	= 0,
119 		 [O2NET_ERR_NO_HNDLR]	= -ENOPROTOOPT,
120 		 [O2NET_ERR_OVERFLOW]	= -EOVERFLOW,
121 		 [O2NET_ERR_DIED]	= -EHOSTDOWN,};
122 
123 /* can't quite avoid *all* internal declarations :/ */
124 static void o2net_sc_connect_completed(struct work_struct *work);
125 static void o2net_rx_until_empty(struct work_struct *work);
126 static void o2net_shutdown_sc(struct work_struct *work);
127 static void o2net_listen_data_ready(struct sock *sk);
128 static void o2net_sc_send_keep_req(struct work_struct *work);
129 static void o2net_idle_timer(struct timer_list *t);
130 static void o2net_sc_postpone_idle(struct o2net_sock_container *sc);
131 static void o2net_sc_reset_idle_timer(struct o2net_sock_container *sc);
132 
133 #ifdef CONFIG_DEBUG_FS
134 static void o2net_init_nst(struct o2net_send_tracking *nst, u32 msgtype,
135 			   u32 msgkey, struct task_struct *task, u8 node)
136 {
137 	INIT_LIST_HEAD(&nst->st_net_debug_item);
138 	nst->st_task = task;
139 	nst->st_msg_type = msgtype;
140 	nst->st_msg_key = msgkey;
141 	nst->st_node = node;
142 }
143 
144 static inline void o2net_set_nst_sock_time(struct o2net_send_tracking *nst)
145 {
146 	nst->st_sock_time = ktime_get();
147 }
148 
149 static inline void o2net_set_nst_send_time(struct o2net_send_tracking *nst)
150 {
151 	nst->st_send_time = ktime_get();
152 }
153 
154 static inline void o2net_set_nst_status_time(struct o2net_send_tracking *nst)
155 {
156 	nst->st_status_time = ktime_get();
157 }
158 
159 static inline void o2net_set_nst_sock_container(struct o2net_send_tracking *nst,
160 						struct o2net_sock_container *sc)
161 {
162 	nst->st_sc = sc;
163 }
164 
165 static inline void o2net_set_nst_msg_id(struct o2net_send_tracking *nst,
166 					u32 msg_id)
167 {
168 	nst->st_id = msg_id;
169 }
170 
171 static inline void o2net_set_sock_timer(struct o2net_sock_container *sc)
172 {
173 	sc->sc_tv_timer = ktime_get();
174 }
175 
176 static inline void o2net_set_data_ready_time(struct o2net_sock_container *sc)
177 {
178 	sc->sc_tv_data_ready = ktime_get();
179 }
180 
181 static inline void o2net_set_advance_start_time(struct o2net_sock_container *sc)
182 {
183 	sc->sc_tv_advance_start = ktime_get();
184 }
185 
186 static inline void o2net_set_advance_stop_time(struct o2net_sock_container *sc)
187 {
188 	sc->sc_tv_advance_stop = ktime_get();
189 }
190 
191 static inline void o2net_set_func_start_time(struct o2net_sock_container *sc)
192 {
193 	sc->sc_tv_func_start = ktime_get();
194 }
195 
196 static inline void o2net_set_func_stop_time(struct o2net_sock_container *sc)
197 {
198 	sc->sc_tv_func_stop = ktime_get();
199 }
200 
201 #else  /* CONFIG_DEBUG_FS */
202 # define o2net_init_nst(a, b, c, d, e)
203 # define o2net_set_nst_sock_time(a)
204 # define o2net_set_nst_send_time(a)
205 # define o2net_set_nst_status_time(a)
206 # define o2net_set_nst_sock_container(a, b)
207 # define o2net_set_nst_msg_id(a, b)
208 # define o2net_set_sock_timer(a)
209 # define o2net_set_data_ready_time(a)
210 # define o2net_set_advance_start_time(a)
211 # define o2net_set_advance_stop_time(a)
212 # define o2net_set_func_start_time(a)
213 # define o2net_set_func_stop_time(a)
214 #endif /* CONFIG_DEBUG_FS */
215 
216 #ifdef CONFIG_OCFS2_FS_STATS
217 static ktime_t o2net_get_func_run_time(struct o2net_sock_container *sc)
218 {
219 	return ktime_sub(sc->sc_tv_func_stop, sc->sc_tv_func_start);
220 }
221 
222 static void o2net_update_send_stats(struct o2net_send_tracking *nst,
223 				    struct o2net_sock_container *sc)
224 {
225 	sc->sc_tv_status_total = ktime_add(sc->sc_tv_status_total,
226 					   ktime_sub(ktime_get(),
227 						     nst->st_status_time));
228 	sc->sc_tv_send_total = ktime_add(sc->sc_tv_send_total,
229 					 ktime_sub(nst->st_status_time,
230 						   nst->st_send_time));
231 	sc->sc_tv_acquiry_total = ktime_add(sc->sc_tv_acquiry_total,
232 					    ktime_sub(nst->st_send_time,
233 						      nst->st_sock_time));
234 	sc->sc_send_count++;
235 }
236 
237 static void o2net_update_recv_stats(struct o2net_sock_container *sc)
238 {
239 	sc->sc_tv_process_total = ktime_add(sc->sc_tv_process_total,
240 					    o2net_get_func_run_time(sc));
241 	sc->sc_recv_count++;
242 }
243 
244 #else
245 
246 # define o2net_update_send_stats(a, b)
247 
248 # define o2net_update_recv_stats(sc)
249 
250 #endif /* CONFIG_OCFS2_FS_STATS */
251 
252 static inline unsigned int o2net_reconnect_delay(void)
253 {
254 	return o2nm_single_cluster->cl_reconnect_delay_ms;
255 }
256 
257 static inline unsigned int o2net_keepalive_delay(void)
258 {
259 	return o2nm_single_cluster->cl_keepalive_delay_ms;
260 }
261 
262 static inline unsigned int o2net_idle_timeout(void)
263 {
264 	return o2nm_single_cluster->cl_idle_timeout_ms;
265 }
266 
267 static inline int o2net_sys_err_to_errno(enum o2net_system_error err)
268 {
269 	int trans;
270 	BUG_ON(err >= O2NET_ERR_MAX);
271 	trans = o2net_sys_err_translations[err];
272 
273 	/* Just in case we mess up the translation table above */
274 	BUG_ON(err != O2NET_ERR_NONE && trans == 0);
275 	return trans;
276 }
277 
278 static struct o2net_node * o2net_nn_from_num(u8 node_num)
279 {
280 	BUG_ON(node_num >= ARRAY_SIZE(o2net_nodes));
281 	return &o2net_nodes[node_num];
282 }
283 
284 static u8 o2net_num_from_nn(struct o2net_node *nn)
285 {
286 	BUG_ON(nn == NULL);
287 	return nn - o2net_nodes;
288 }
289 
290 /* ------------------------------------------------------------ */
291 
292 static int o2net_prep_nsw(struct o2net_node *nn, struct o2net_status_wait *nsw)
293 {
294 	int ret;
295 
296 	spin_lock(&nn->nn_lock);
297 	ret = idr_alloc(&nn->nn_status_idr, nsw, 0, 0, GFP_ATOMIC);
298 	if (ret >= 0) {
299 		nsw->ns_id = ret;
300 		list_add_tail(&nsw->ns_node_item, &nn->nn_status_list);
301 	}
302 	spin_unlock(&nn->nn_lock);
303 	if (ret < 0)
304 		return ret;
305 
306 	init_waitqueue_head(&nsw->ns_wq);
307 	nsw->ns_sys_status = O2NET_ERR_NONE;
308 	nsw->ns_status = 0;
309 	return 0;
310 }
311 
312 static void o2net_complete_nsw_locked(struct o2net_node *nn,
313 				      struct o2net_status_wait *nsw,
314 				      enum o2net_system_error sys_status,
315 				      s32 status)
316 {
317 	assert_spin_locked(&nn->nn_lock);
318 
319 	if (!list_empty(&nsw->ns_node_item)) {
320 		list_del_init(&nsw->ns_node_item);
321 		nsw->ns_sys_status = sys_status;
322 		nsw->ns_status = status;
323 		idr_remove(&nn->nn_status_idr, nsw->ns_id);
324 		wake_up(&nsw->ns_wq);
325 	}
326 }
327 
328 static void o2net_complete_nsw(struct o2net_node *nn,
329 			       struct o2net_status_wait *nsw,
330 			       u64 id, enum o2net_system_error sys_status,
331 			       s32 status)
332 {
333 	spin_lock(&nn->nn_lock);
334 	if (nsw == NULL) {
335 		if (id > INT_MAX)
336 			goto out;
337 
338 		nsw = idr_find(&nn->nn_status_idr, id);
339 		if (nsw == NULL)
340 			goto out;
341 	}
342 
343 	o2net_complete_nsw_locked(nn, nsw, sys_status, status);
344 
345 out:
346 	spin_unlock(&nn->nn_lock);
347 	return;
348 }
349 
350 static void o2net_complete_nodes_nsw(struct o2net_node *nn)
351 {
352 	struct o2net_status_wait *nsw, *tmp;
353 	unsigned int num_kills = 0;
354 
355 	assert_spin_locked(&nn->nn_lock);
356 
357 	list_for_each_entry_safe(nsw, tmp, &nn->nn_status_list, ns_node_item) {
358 		o2net_complete_nsw_locked(nn, nsw, O2NET_ERR_DIED, 0);
359 		num_kills++;
360 	}
361 
362 	mlog(0, "completed %d messages for node %u\n", num_kills,
363 	     o2net_num_from_nn(nn));
364 }
365 
366 static int o2net_nsw_completed(struct o2net_node *nn,
367 			       struct o2net_status_wait *nsw)
368 {
369 	int completed;
370 	spin_lock(&nn->nn_lock);
371 	completed = list_empty(&nsw->ns_node_item);
372 	spin_unlock(&nn->nn_lock);
373 	return completed;
374 }
375 
376 /* ------------------------------------------------------------ */
377 
378 static void sc_kref_release(struct kref *kref)
379 {
380 	struct o2net_sock_container *sc = container_of(kref,
381 					struct o2net_sock_container, sc_kref);
382 	BUG_ON(timer_pending(&sc->sc_idle_timeout));
383 
384 	sclog(sc, "releasing\n");
385 
386 	if (sc->sc_sock) {
387 		sock_release(sc->sc_sock);
388 		sc->sc_sock = NULL;
389 	}
390 
391 	o2nm_undepend_item(&sc->sc_node->nd_item);
392 	o2nm_node_put(sc->sc_node);
393 	sc->sc_node = NULL;
394 
395 	o2net_debug_del_sc(sc);
396 
397 	if (sc->sc_page)
398 		__free_page(sc->sc_page);
399 	kfree(sc);
400 }
401 
402 static void sc_put(struct o2net_sock_container *sc)
403 {
404 	sclog(sc, "put\n");
405 	kref_put(&sc->sc_kref, sc_kref_release);
406 }
407 static void sc_get(struct o2net_sock_container *sc)
408 {
409 	sclog(sc, "get\n");
410 	kref_get(&sc->sc_kref);
411 }
412 static struct o2net_sock_container *sc_alloc(struct o2nm_node *node)
413 {
414 	struct o2net_sock_container *sc, *ret = NULL;
415 	struct page *page = NULL;
416 	int status = 0;
417 
418 	page = alloc_page(GFP_NOFS);
419 	sc = kzalloc(sizeof(*sc), GFP_NOFS);
420 	if (sc == NULL || page == NULL)
421 		goto out;
422 
423 	kref_init(&sc->sc_kref);
424 	o2nm_node_get(node);
425 	sc->sc_node = node;
426 
427 	/* pin the node item of the remote node */
428 	status = o2nm_depend_item(&node->nd_item);
429 	if (status) {
430 		mlog_errno(status);
431 		o2nm_node_put(node);
432 		goto out;
433 	}
434 	INIT_WORK(&sc->sc_connect_work, o2net_sc_connect_completed);
435 	INIT_WORK(&sc->sc_rx_work, o2net_rx_until_empty);
436 	INIT_WORK(&sc->sc_shutdown_work, o2net_shutdown_sc);
437 	INIT_DELAYED_WORK(&sc->sc_keepalive_work, o2net_sc_send_keep_req);
438 
439 	timer_setup(&sc->sc_idle_timeout, o2net_idle_timer, 0);
440 
441 	sclog(sc, "alloced\n");
442 
443 	ret = sc;
444 	sc->sc_page = page;
445 	o2net_debug_add_sc(sc);
446 	sc = NULL;
447 	page = NULL;
448 
449 out:
450 	if (page)
451 		__free_page(page);
452 	kfree(sc);
453 
454 	return ret;
455 }
456 
457 /* ------------------------------------------------------------ */
458 
459 static void o2net_sc_queue_work(struct o2net_sock_container *sc,
460 				struct work_struct *work)
461 {
462 	sc_get(sc);
463 	if (!queue_work(o2net_wq, work))
464 		sc_put(sc);
465 }
466 static void o2net_sc_queue_delayed_work(struct o2net_sock_container *sc,
467 					struct delayed_work *work,
468 					int delay)
469 {
470 	sc_get(sc);
471 	if (!queue_delayed_work(o2net_wq, work, delay))
472 		sc_put(sc);
473 }
474 static void o2net_sc_cancel_delayed_work(struct o2net_sock_container *sc,
475 					 struct delayed_work *work)
476 {
477 	if (cancel_delayed_work(work))
478 		sc_put(sc);
479 }
480 
481 static atomic_t o2net_connected_peers = ATOMIC_INIT(0);
482 
483 int o2net_num_connected_peers(void)
484 {
485 	return atomic_read(&o2net_connected_peers);
486 }
487 
488 static void o2net_set_nn_state(struct o2net_node *nn,
489 			       struct o2net_sock_container *sc,
490 			       unsigned valid, int err)
491 {
492 	int was_valid = nn->nn_sc_valid;
493 	int was_err = nn->nn_persistent_error;
494 	struct o2net_sock_container *old_sc = nn->nn_sc;
495 
496 	assert_spin_locked(&nn->nn_lock);
497 
498 	if (old_sc && !sc)
499 		atomic_dec(&o2net_connected_peers);
500 	else if (!old_sc && sc)
501 		atomic_inc(&o2net_connected_peers);
502 
503 	/* the node num comparison and single connect/accept path should stop
504 	 * an non-null sc from being overwritten with another */
505 	BUG_ON(sc && nn->nn_sc && nn->nn_sc != sc);
506 	mlog_bug_on_msg(err && valid, "err %d valid %u\n", err, valid);
507 	mlog_bug_on_msg(valid && !sc, "valid %u sc %p\n", valid, sc);
508 
509 	if (was_valid && !valid && err == 0)
510 		err = -ENOTCONN;
511 
512 	mlog(ML_CONN, "node %u sc: %p -> %p, valid %u -> %u, err %d -> %d\n",
513 	     o2net_num_from_nn(nn), nn->nn_sc, sc, nn->nn_sc_valid, valid,
514 	     nn->nn_persistent_error, err);
515 
516 	nn->nn_sc = sc;
517 	nn->nn_sc_valid = valid ? 1 : 0;
518 	nn->nn_persistent_error = err;
519 
520 	/* mirrors o2net_tx_can_proceed() */
521 	if (nn->nn_persistent_error || nn->nn_sc_valid)
522 		wake_up(&nn->nn_sc_wq);
523 
524 	if (was_valid && !was_err && nn->nn_persistent_error) {
525 		o2quo_conn_err(o2net_num_from_nn(nn));
526 		queue_delayed_work(o2net_wq, &nn->nn_still_up,
527 				   msecs_to_jiffies(O2NET_QUORUM_DELAY_MS));
528 	}
529 
530 	if (was_valid && !valid) {
531 		if (old_sc)
532 			printk(KERN_NOTICE "o2net: No longer connected to "
533 				SC_NODEF_FMT "\n", SC_NODEF_ARGS(old_sc));
534 		o2net_complete_nodes_nsw(nn);
535 	}
536 
537 	if (!was_valid && valid) {
538 		o2quo_conn_up(o2net_num_from_nn(nn));
539 		cancel_delayed_work(&nn->nn_connect_expired);
540 		printk(KERN_NOTICE "o2net: %s " SC_NODEF_FMT "\n",
541 		       o2nm_this_node() > sc->sc_node->nd_num ?
542 		       "Connected to" : "Accepted connection from",
543 		       SC_NODEF_ARGS(sc));
544 	}
545 
546 	/* trigger the connecting worker func as long as we're not valid,
547 	 * it will back off if it shouldn't connect.  This can be called
548 	 * from node config teardown and so needs to be careful about
549 	 * the work queue actually being up. */
550 	if (!valid && o2net_wq) {
551 		unsigned long delay;
552 		/* delay if we're within a RECONNECT_DELAY of the
553 		 * last attempt */
554 		delay = (nn->nn_last_connect_attempt +
555 			 msecs_to_jiffies(o2net_reconnect_delay()))
556 			- jiffies;
557 		if (delay > msecs_to_jiffies(o2net_reconnect_delay()))
558 			delay = 0;
559 		mlog(ML_CONN, "queueing conn attempt in %lu jiffies\n", delay);
560 		queue_delayed_work(o2net_wq, &nn->nn_connect_work, delay);
561 
562 		/*
563 		 * Delay the expired work after idle timeout.
564 		 *
565 		 * We might have lots of failed connection attempts that run
566 		 * through here but we only cancel the connect_expired work when
567 		 * a connection attempt succeeds.  So only the first enqueue of
568 		 * the connect_expired work will do anything.  The rest will see
569 		 * that it's already queued and do nothing.
570 		 */
571 		delay += msecs_to_jiffies(o2net_idle_timeout());
572 		queue_delayed_work(o2net_wq, &nn->nn_connect_expired, delay);
573 	}
574 
575 	/* keep track of the nn's sc ref for the caller */
576 	if ((old_sc == NULL) && sc)
577 		sc_get(sc);
578 	if (old_sc && (old_sc != sc)) {
579 		o2net_sc_queue_work(old_sc, &old_sc->sc_shutdown_work);
580 		sc_put(old_sc);
581 	}
582 }
583 
584 /* see o2net_register_callbacks() */
585 static void o2net_data_ready(struct sock *sk)
586 {
587 	void (*ready)(struct sock *sk);
588 	struct o2net_sock_container *sc;
589 
590 	read_lock_bh(&sk->sk_callback_lock);
591 	sc = sk->sk_user_data;
592 	if (sc) {
593 		sclog(sc, "data_ready hit\n");
594 		o2net_set_data_ready_time(sc);
595 		o2net_sc_queue_work(sc, &sc->sc_rx_work);
596 		ready = sc->sc_data_ready;
597 	} else {
598 		ready = sk->sk_data_ready;
599 	}
600 	read_unlock_bh(&sk->sk_callback_lock);
601 
602 	ready(sk);
603 }
604 
605 /* see o2net_register_callbacks() */
606 static void o2net_state_change(struct sock *sk)
607 {
608 	void (*state_change)(struct sock *sk);
609 	struct o2net_sock_container *sc;
610 
611 	read_lock_bh(&sk->sk_callback_lock);
612 	sc = sk->sk_user_data;
613 	if (sc == NULL) {
614 		state_change = sk->sk_state_change;
615 		goto out;
616 	}
617 
618 	sclog(sc, "state_change to %d\n", sk->sk_state);
619 
620 	state_change = sc->sc_state_change;
621 
622 	switch(sk->sk_state) {
623 	/* ignore connecting sockets as they make progress */
624 	case TCP_SYN_SENT:
625 	case TCP_SYN_RECV:
626 		break;
627 	case TCP_ESTABLISHED:
628 		o2net_sc_queue_work(sc, &sc->sc_connect_work);
629 		break;
630 	default:
631 		printk(KERN_INFO "o2net: Connection to " SC_NODEF_FMT
632 			" shutdown, state %d\n",
633 			SC_NODEF_ARGS(sc), sk->sk_state);
634 		o2net_sc_queue_work(sc, &sc->sc_shutdown_work);
635 		break;
636 	}
637 out:
638 	read_unlock_bh(&sk->sk_callback_lock);
639 	state_change(sk);
640 }
641 
642 /*
643  * we register callbacks so we can queue work on events before calling
644  * the original callbacks.  our callbacks our careful to test user_data
645  * to discover when they've reaced with o2net_unregister_callbacks().
646  */
647 static void o2net_register_callbacks(struct sock *sk,
648 				     struct o2net_sock_container *sc)
649 {
650 	write_lock_bh(&sk->sk_callback_lock);
651 
652 	/* accepted sockets inherit the old listen socket data ready */
653 	if (sk->sk_data_ready == o2net_listen_data_ready) {
654 		sk->sk_data_ready = sk->sk_user_data;
655 		sk->sk_user_data = NULL;
656 	}
657 
658 	BUG_ON(sk->sk_user_data != NULL);
659 	sk->sk_user_data = sc;
660 	sc_get(sc);
661 
662 	sc->sc_data_ready = sk->sk_data_ready;
663 	sc->sc_state_change = sk->sk_state_change;
664 	sk->sk_data_ready = o2net_data_ready;
665 	sk->sk_state_change = o2net_state_change;
666 
667 	mutex_init(&sc->sc_send_lock);
668 
669 	write_unlock_bh(&sk->sk_callback_lock);
670 }
671 
672 static int o2net_unregister_callbacks(struct sock *sk,
673 			           struct o2net_sock_container *sc)
674 {
675 	int ret = 0;
676 
677 	write_lock_bh(&sk->sk_callback_lock);
678 	if (sk->sk_user_data == sc) {
679 		ret = 1;
680 		sk->sk_user_data = NULL;
681 		sk->sk_data_ready = sc->sc_data_ready;
682 		sk->sk_state_change = sc->sc_state_change;
683 	}
684 	write_unlock_bh(&sk->sk_callback_lock);
685 
686 	return ret;
687 }
688 
689 /*
690  * this is a little helper that is called by callers who have seen a problem
691  * with an sc and want to detach it from the nn if someone already hasn't beat
692  * them to it.  if an error is given then the shutdown will be persistent
693  * and pending transmits will be canceled.
694  */
695 static void o2net_ensure_shutdown(struct o2net_node *nn,
696 			           struct o2net_sock_container *sc,
697 				   int err)
698 {
699 	spin_lock(&nn->nn_lock);
700 	if (nn->nn_sc == sc)
701 		o2net_set_nn_state(nn, NULL, 0, err);
702 	spin_unlock(&nn->nn_lock);
703 }
704 
705 /*
706  * This work queue function performs the blocking parts of socket shutdown.  A
707  * few paths lead here.  set_nn_state will trigger this callback if it sees an
708  * sc detached from the nn.  state_change will also trigger this callback
709  * directly when it sees errors.  In that case we need to call set_nn_state
710  * ourselves as state_change couldn't get the nn_lock and call set_nn_state
711  * itself.
712  */
713 static void o2net_shutdown_sc(struct work_struct *work)
714 {
715 	struct o2net_sock_container *sc =
716 		container_of(work, struct o2net_sock_container,
717 			     sc_shutdown_work);
718 	struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
719 
720 	sclog(sc, "shutting down\n");
721 
722 	/* drop the callbacks ref and call shutdown only once */
723 	if (o2net_unregister_callbacks(sc->sc_sock->sk, sc)) {
724 		/* we shouldn't flush as we're in the thread, the
725 		 * races with pending sc work structs are harmless */
726 		del_timer_sync(&sc->sc_idle_timeout);
727 		o2net_sc_cancel_delayed_work(sc, &sc->sc_keepalive_work);
728 		sc_put(sc);
729 		kernel_sock_shutdown(sc->sc_sock, SHUT_RDWR);
730 	}
731 
732 	/* not fatal so failed connects before the other guy has our
733 	 * heartbeat can be retried */
734 	o2net_ensure_shutdown(nn, sc, 0);
735 	sc_put(sc);
736 }
737 
738 /* ------------------------------------------------------------ */
739 
740 static int o2net_handler_cmp(struct o2net_msg_handler *nmh, u32 msg_type,
741 			     u32 key)
742 {
743 	int ret = memcmp(&nmh->nh_key, &key, sizeof(key));
744 
745 	if (ret == 0)
746 		ret = memcmp(&nmh->nh_msg_type, &msg_type, sizeof(msg_type));
747 
748 	return ret;
749 }
750 
751 static struct o2net_msg_handler *
752 o2net_handler_tree_lookup(u32 msg_type, u32 key, struct rb_node ***ret_p,
753 			  struct rb_node **ret_parent)
754 {
755 	struct rb_node **p = &o2net_handler_tree.rb_node;
756 	struct rb_node *parent = NULL;
757 	struct o2net_msg_handler *nmh, *ret = NULL;
758 	int cmp;
759 
760 	while (*p) {
761 		parent = *p;
762 		nmh = rb_entry(parent, struct o2net_msg_handler, nh_node);
763 		cmp = o2net_handler_cmp(nmh, msg_type, key);
764 
765 		if (cmp < 0)
766 			p = &(*p)->rb_left;
767 		else if (cmp > 0)
768 			p = &(*p)->rb_right;
769 		else {
770 			ret = nmh;
771 			break;
772 		}
773 	}
774 
775 	if (ret_p != NULL)
776 		*ret_p = p;
777 	if (ret_parent != NULL)
778 		*ret_parent = parent;
779 
780 	return ret;
781 }
782 
783 static void o2net_handler_kref_release(struct kref *kref)
784 {
785 	struct o2net_msg_handler *nmh;
786 	nmh = container_of(kref, struct o2net_msg_handler, nh_kref);
787 
788 	kfree(nmh);
789 }
790 
791 static void o2net_handler_put(struct o2net_msg_handler *nmh)
792 {
793 	kref_put(&nmh->nh_kref, o2net_handler_kref_release);
794 }
795 
796 /* max_len is protection for the handler func.  incoming messages won't
797  * be given to the handler if their payload is longer than the max. */
798 int o2net_register_handler(u32 msg_type, u32 key, u32 max_len,
799 			   o2net_msg_handler_func *func, void *data,
800 			   o2net_post_msg_handler_func *post_func,
801 			   struct list_head *unreg_list)
802 {
803 	struct o2net_msg_handler *nmh = NULL;
804 	struct rb_node **p, *parent;
805 	int ret = 0;
806 
807 	if (max_len > O2NET_MAX_PAYLOAD_BYTES) {
808 		mlog(0, "max_len for message handler out of range: %u\n",
809 			max_len);
810 		ret = -EINVAL;
811 		goto out;
812 	}
813 
814 	if (!msg_type) {
815 		mlog(0, "no message type provided: %u, %p\n", msg_type, func);
816 		ret = -EINVAL;
817 		goto out;
818 
819 	}
820 	if (!func) {
821 		mlog(0, "no message handler provided: %u, %p\n",
822 		       msg_type, func);
823 		ret = -EINVAL;
824 		goto out;
825 	}
826 
827        	nmh = kzalloc(sizeof(struct o2net_msg_handler), GFP_NOFS);
828 	if (nmh == NULL) {
829 		ret = -ENOMEM;
830 		goto out;
831 	}
832 
833 	nmh->nh_func = func;
834 	nmh->nh_func_data = data;
835 	nmh->nh_post_func = post_func;
836 	nmh->nh_msg_type = msg_type;
837 	nmh->nh_max_len = max_len;
838 	nmh->nh_key = key;
839 	/* the tree and list get this ref.. they're both removed in
840 	 * unregister when this ref is dropped */
841 	kref_init(&nmh->nh_kref);
842 	INIT_LIST_HEAD(&nmh->nh_unregister_item);
843 
844 	write_lock(&o2net_handler_lock);
845 	if (o2net_handler_tree_lookup(msg_type, key, &p, &parent))
846 		ret = -EEXIST;
847 	else {
848 	        rb_link_node(&nmh->nh_node, parent, p);
849 		rb_insert_color(&nmh->nh_node, &o2net_handler_tree);
850 		list_add_tail(&nmh->nh_unregister_item, unreg_list);
851 
852 		mlog(ML_TCP, "registered handler func %p type %u key %08x\n",
853 		     func, msg_type, key);
854 		/* we've had some trouble with handlers seemingly vanishing. */
855 		mlog_bug_on_msg(o2net_handler_tree_lookup(msg_type, key, &p,
856 							  &parent) == NULL,
857 			        "couldn't find handler we *just* registered "
858 				"for type %u key %08x\n", msg_type, key);
859 	}
860 	write_unlock(&o2net_handler_lock);
861 
862 out:
863 	if (ret)
864 		kfree(nmh);
865 
866 	return ret;
867 }
868 EXPORT_SYMBOL_GPL(o2net_register_handler);
869 
870 void o2net_unregister_handler_list(struct list_head *list)
871 {
872 	struct o2net_msg_handler *nmh, *n;
873 
874 	write_lock(&o2net_handler_lock);
875 	list_for_each_entry_safe(nmh, n, list, nh_unregister_item) {
876 		mlog(ML_TCP, "unregistering handler func %p type %u key %08x\n",
877 		     nmh->nh_func, nmh->nh_msg_type, nmh->nh_key);
878 		rb_erase(&nmh->nh_node, &o2net_handler_tree);
879 		list_del_init(&nmh->nh_unregister_item);
880 		kref_put(&nmh->nh_kref, o2net_handler_kref_release);
881 	}
882 	write_unlock(&o2net_handler_lock);
883 }
884 EXPORT_SYMBOL_GPL(o2net_unregister_handler_list);
885 
886 static struct o2net_msg_handler *o2net_handler_get(u32 msg_type, u32 key)
887 {
888 	struct o2net_msg_handler *nmh;
889 
890 	read_lock(&o2net_handler_lock);
891 	nmh = o2net_handler_tree_lookup(msg_type, key, NULL, NULL);
892 	if (nmh)
893 		kref_get(&nmh->nh_kref);
894 	read_unlock(&o2net_handler_lock);
895 
896 	return nmh;
897 }
898 
899 /* ------------------------------------------------------------ */
900 
901 static int o2net_recv_tcp_msg(struct socket *sock, void *data, size_t len)
902 {
903 	struct kvec vec = { .iov_len = len, .iov_base = data, };
904 	struct msghdr msg = { .msg_flags = MSG_DONTWAIT, };
905 	iov_iter_kvec(&msg.msg_iter, READ, &vec, 1, len);
906 	return sock_recvmsg(sock, &msg, MSG_DONTWAIT);
907 }
908 
909 static int o2net_send_tcp_msg(struct socket *sock, struct kvec *vec,
910 			      size_t veclen, size_t total)
911 {
912 	int ret;
913 	struct msghdr msg = {.msg_flags = 0,};
914 
915 	if (sock == NULL) {
916 		ret = -EINVAL;
917 		goto out;
918 	}
919 
920 	ret = kernel_sendmsg(sock, &msg, vec, veclen, total);
921 	if (likely(ret == total))
922 		return 0;
923 	mlog(ML_ERROR, "sendmsg returned %d instead of %zu\n", ret, total);
924 	if (ret >= 0)
925 		ret = -EPIPE; /* should be smarter, I bet */
926 out:
927 	mlog(0, "returning error: %d\n", ret);
928 	return ret;
929 }
930 
931 static void o2net_sendpage(struct o2net_sock_container *sc,
932 			   void *kmalloced_virt,
933 			   size_t size)
934 {
935 	struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
936 	ssize_t ret;
937 
938 	while (1) {
939 		mutex_lock(&sc->sc_send_lock);
940 		ret = sc->sc_sock->ops->sendpage(sc->sc_sock,
941 						 virt_to_page(kmalloced_virt),
942 						 offset_in_page(kmalloced_virt),
943 						 size, MSG_DONTWAIT);
944 		mutex_unlock(&sc->sc_send_lock);
945 		if (ret == size)
946 			break;
947 		if (ret == (ssize_t)-EAGAIN) {
948 			mlog(0, "sendpage of size %zu to " SC_NODEF_FMT
949 			     " returned EAGAIN\n", size, SC_NODEF_ARGS(sc));
950 			cond_resched();
951 			continue;
952 		}
953 		mlog(ML_ERROR, "sendpage of size %zu to " SC_NODEF_FMT
954 		     " failed with %zd\n", size, SC_NODEF_ARGS(sc), ret);
955 		o2net_ensure_shutdown(nn, sc, 0);
956 		break;
957 	}
958 }
959 
960 static void o2net_init_msg(struct o2net_msg *msg, u16 data_len, u16 msg_type, u32 key)
961 {
962 	memset(msg, 0, sizeof(struct o2net_msg));
963 	msg->magic = cpu_to_be16(O2NET_MSG_MAGIC);
964 	msg->data_len = cpu_to_be16(data_len);
965 	msg->msg_type = cpu_to_be16(msg_type);
966 	msg->sys_status = cpu_to_be32(O2NET_ERR_NONE);
967 	msg->status = 0;
968 	msg->key = cpu_to_be32(key);
969 }
970 
971 static int o2net_tx_can_proceed(struct o2net_node *nn,
972 			        struct o2net_sock_container **sc_ret,
973 				int *error)
974 {
975 	int ret = 0;
976 
977 	spin_lock(&nn->nn_lock);
978 	if (nn->nn_persistent_error) {
979 		ret = 1;
980 		*sc_ret = NULL;
981 		*error = nn->nn_persistent_error;
982 	} else if (nn->nn_sc_valid) {
983 		kref_get(&nn->nn_sc->sc_kref);
984 
985 		ret = 1;
986 		*sc_ret = nn->nn_sc;
987 		*error = 0;
988 	}
989 	spin_unlock(&nn->nn_lock);
990 
991 	return ret;
992 }
993 
994 /* Get a map of all nodes to which this node is currently connected to */
995 void o2net_fill_node_map(unsigned long *map, unsigned bytes)
996 {
997 	struct o2net_sock_container *sc;
998 	int node, ret;
999 
1000 	BUG_ON(bytes < (BITS_TO_LONGS(O2NM_MAX_NODES) * sizeof(unsigned long)));
1001 
1002 	memset(map, 0, bytes);
1003 	for (node = 0; node < O2NM_MAX_NODES; ++node) {
1004 		if (!o2net_tx_can_proceed(o2net_nn_from_num(node), &sc, &ret))
1005 			continue;
1006 		if (!ret) {
1007 			set_bit(node, map);
1008 			sc_put(sc);
1009 		}
1010 	}
1011 }
1012 EXPORT_SYMBOL_GPL(o2net_fill_node_map);
1013 
1014 int o2net_send_message_vec(u32 msg_type, u32 key, struct kvec *caller_vec,
1015 			   size_t caller_veclen, u8 target_node, int *status)
1016 {
1017 	int ret = 0;
1018 	struct o2net_msg *msg = NULL;
1019 	size_t veclen, caller_bytes = 0;
1020 	struct kvec *vec = NULL;
1021 	struct o2net_sock_container *sc = NULL;
1022 	struct o2net_node *nn = o2net_nn_from_num(target_node);
1023 	struct o2net_status_wait nsw = {
1024 		.ns_node_item = LIST_HEAD_INIT(nsw.ns_node_item),
1025 	};
1026 	struct o2net_send_tracking nst;
1027 
1028 	o2net_init_nst(&nst, msg_type, key, current, target_node);
1029 
1030 	if (o2net_wq == NULL) {
1031 		mlog(0, "attempt to tx without o2netd running\n");
1032 		ret = -ESRCH;
1033 		goto out;
1034 	}
1035 
1036 	if (caller_veclen == 0) {
1037 		mlog(0, "bad kvec array length\n");
1038 		ret = -EINVAL;
1039 		goto out;
1040 	}
1041 
1042 	caller_bytes = iov_length((struct iovec *)caller_vec, caller_veclen);
1043 	if (caller_bytes > O2NET_MAX_PAYLOAD_BYTES) {
1044 		mlog(0, "total payload len %zu too large\n", caller_bytes);
1045 		ret = -EINVAL;
1046 		goto out;
1047 	}
1048 
1049 	if (target_node == o2nm_this_node()) {
1050 		ret = -ELOOP;
1051 		goto out;
1052 	}
1053 
1054 	o2net_debug_add_nst(&nst);
1055 
1056 	o2net_set_nst_sock_time(&nst);
1057 
1058 	wait_event(nn->nn_sc_wq, o2net_tx_can_proceed(nn, &sc, &ret));
1059 	if (ret)
1060 		goto out;
1061 
1062 	o2net_set_nst_sock_container(&nst, sc);
1063 
1064 	veclen = caller_veclen + 1;
1065 	vec = kmalloc_array(veclen, sizeof(struct kvec), GFP_ATOMIC);
1066 	if (vec == NULL) {
1067 		mlog(0, "failed to %zu element kvec!\n", veclen);
1068 		ret = -ENOMEM;
1069 		goto out;
1070 	}
1071 
1072 	msg = kmalloc(sizeof(struct o2net_msg), GFP_ATOMIC);
1073 	if (!msg) {
1074 		mlog(0, "failed to allocate a o2net_msg!\n");
1075 		ret = -ENOMEM;
1076 		goto out;
1077 	}
1078 
1079 	o2net_init_msg(msg, caller_bytes, msg_type, key);
1080 
1081 	vec[0].iov_len = sizeof(struct o2net_msg);
1082 	vec[0].iov_base = msg;
1083 	memcpy(&vec[1], caller_vec, caller_veclen * sizeof(struct kvec));
1084 
1085 	ret = o2net_prep_nsw(nn, &nsw);
1086 	if (ret)
1087 		goto out;
1088 
1089 	msg->msg_num = cpu_to_be32(nsw.ns_id);
1090 	o2net_set_nst_msg_id(&nst, nsw.ns_id);
1091 
1092 	o2net_set_nst_send_time(&nst);
1093 
1094 	/* finally, convert the message header to network byte-order
1095 	 * and send */
1096 	mutex_lock(&sc->sc_send_lock);
1097 	ret = o2net_send_tcp_msg(sc->sc_sock, vec, veclen,
1098 				 sizeof(struct o2net_msg) + caller_bytes);
1099 	mutex_unlock(&sc->sc_send_lock);
1100 	msglog(msg, "sending returned %d\n", ret);
1101 	if (ret < 0) {
1102 		mlog(0, "error returned from o2net_send_tcp_msg=%d\n", ret);
1103 		goto out;
1104 	}
1105 
1106 	/* wait on other node's handler */
1107 	o2net_set_nst_status_time(&nst);
1108 	wait_event(nsw.ns_wq, o2net_nsw_completed(nn, &nsw));
1109 
1110 	o2net_update_send_stats(&nst, sc);
1111 
1112 	/* Note that we avoid overwriting the callers status return
1113 	 * variable if a system error was reported on the other
1114 	 * side. Callers beware. */
1115 	ret = o2net_sys_err_to_errno(nsw.ns_sys_status);
1116 	if (status && !ret)
1117 		*status = nsw.ns_status;
1118 
1119 	mlog(0, "woken, returning system status %d, user status %d\n",
1120 	     ret, nsw.ns_status);
1121 out:
1122 	o2net_debug_del_nst(&nst); /* must be before dropping sc and node */
1123 	if (sc)
1124 		sc_put(sc);
1125 	kfree(vec);
1126 	kfree(msg);
1127 	o2net_complete_nsw(nn, &nsw, 0, 0, 0);
1128 	return ret;
1129 }
1130 EXPORT_SYMBOL_GPL(o2net_send_message_vec);
1131 
1132 int o2net_send_message(u32 msg_type, u32 key, void *data, u32 len,
1133 		       u8 target_node, int *status)
1134 {
1135 	struct kvec vec = {
1136 		.iov_base = data,
1137 		.iov_len = len,
1138 	};
1139 	return o2net_send_message_vec(msg_type, key, &vec, 1,
1140 				      target_node, status);
1141 }
1142 EXPORT_SYMBOL_GPL(o2net_send_message);
1143 
1144 static int o2net_send_status_magic(struct socket *sock, struct o2net_msg *hdr,
1145 				   enum o2net_system_error syserr, int err)
1146 {
1147 	struct kvec vec = {
1148 		.iov_base = hdr,
1149 		.iov_len = sizeof(struct o2net_msg),
1150 	};
1151 
1152 	BUG_ON(syserr >= O2NET_ERR_MAX);
1153 
1154 	/* leave other fields intact from the incoming message, msg_num
1155 	 * in particular */
1156 	hdr->sys_status = cpu_to_be32(syserr);
1157 	hdr->status = cpu_to_be32(err);
1158 	hdr->magic = cpu_to_be16(O2NET_MSG_STATUS_MAGIC);  // twiddle the magic
1159 	hdr->data_len = 0;
1160 
1161 	msglog(hdr, "about to send status magic %d\n", err);
1162 	/* hdr has been in host byteorder this whole time */
1163 	return o2net_send_tcp_msg(sock, &vec, 1, sizeof(struct o2net_msg));
1164 }
1165 
1166 /* this returns -errno if the header was unknown or too large, etc.
1167  * after this is called the buffer us reused for the next message */
1168 static int o2net_process_message(struct o2net_sock_container *sc,
1169 				 struct o2net_msg *hdr)
1170 {
1171 	struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
1172 	int ret = 0, handler_status;
1173 	enum  o2net_system_error syserr;
1174 	struct o2net_msg_handler *nmh = NULL;
1175 	void *ret_data = NULL;
1176 
1177 	msglog(hdr, "processing message\n");
1178 
1179 	o2net_sc_postpone_idle(sc);
1180 
1181 	switch(be16_to_cpu(hdr->magic)) {
1182 		case O2NET_MSG_STATUS_MAGIC:
1183 			/* special type for returning message status */
1184 			o2net_complete_nsw(nn, NULL,
1185 					   be32_to_cpu(hdr->msg_num),
1186 					   be32_to_cpu(hdr->sys_status),
1187 					   be32_to_cpu(hdr->status));
1188 			goto out;
1189 		case O2NET_MSG_KEEP_REQ_MAGIC:
1190 			o2net_sendpage(sc, o2net_keep_resp,
1191 				       sizeof(*o2net_keep_resp));
1192 			goto out;
1193 		case O2NET_MSG_KEEP_RESP_MAGIC:
1194 			goto out;
1195 		case O2NET_MSG_MAGIC:
1196 			break;
1197 		default:
1198 			msglog(hdr, "bad magic\n");
1199 			ret = -EINVAL;
1200 			goto out;
1201 	}
1202 
1203 	/* find a handler for it */
1204 	handler_status = 0;
1205 	nmh = o2net_handler_get(be16_to_cpu(hdr->msg_type),
1206 				be32_to_cpu(hdr->key));
1207 	if (!nmh) {
1208 		mlog(ML_TCP, "couldn't find handler for type %u key %08x\n",
1209 		     be16_to_cpu(hdr->msg_type), be32_to_cpu(hdr->key));
1210 		syserr = O2NET_ERR_NO_HNDLR;
1211 		goto out_respond;
1212 	}
1213 
1214 	syserr = O2NET_ERR_NONE;
1215 
1216 	if (be16_to_cpu(hdr->data_len) > nmh->nh_max_len)
1217 		syserr = O2NET_ERR_OVERFLOW;
1218 
1219 	if (syserr != O2NET_ERR_NONE)
1220 		goto out_respond;
1221 
1222 	o2net_set_func_start_time(sc);
1223 	sc->sc_msg_key = be32_to_cpu(hdr->key);
1224 	sc->sc_msg_type = be16_to_cpu(hdr->msg_type);
1225 	handler_status = (nmh->nh_func)(hdr, sizeof(struct o2net_msg) +
1226 					     be16_to_cpu(hdr->data_len),
1227 					nmh->nh_func_data, &ret_data);
1228 	o2net_set_func_stop_time(sc);
1229 
1230 	o2net_update_recv_stats(sc);
1231 
1232 out_respond:
1233 	/* this destroys the hdr, so don't use it after this */
1234 	mutex_lock(&sc->sc_send_lock);
1235 	ret = o2net_send_status_magic(sc->sc_sock, hdr, syserr,
1236 				      handler_status);
1237 	mutex_unlock(&sc->sc_send_lock);
1238 	hdr = NULL;
1239 	mlog(0, "sending handler status %d, syserr %d returned %d\n",
1240 	     handler_status, syserr, ret);
1241 
1242 	if (nmh) {
1243 		BUG_ON(ret_data != NULL && nmh->nh_post_func == NULL);
1244 		if (nmh->nh_post_func)
1245 			(nmh->nh_post_func)(handler_status, nmh->nh_func_data,
1246 					    ret_data);
1247 	}
1248 
1249 out:
1250 	if (nmh)
1251 		o2net_handler_put(nmh);
1252 	return ret;
1253 }
1254 
1255 static int o2net_check_handshake(struct o2net_sock_container *sc)
1256 {
1257 	struct o2net_handshake *hand = page_address(sc->sc_page);
1258 	struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
1259 
1260 	if (hand->protocol_version != cpu_to_be64(O2NET_PROTOCOL_VERSION)) {
1261 		printk(KERN_NOTICE "o2net: " SC_NODEF_FMT " Advertised net "
1262 		       "protocol version %llu but %llu is required. "
1263 		       "Disconnecting.\n", SC_NODEF_ARGS(sc),
1264 		       (unsigned long long)be64_to_cpu(hand->protocol_version),
1265 		       O2NET_PROTOCOL_VERSION);
1266 
1267 		/* don't bother reconnecting if its the wrong version. */
1268 		o2net_ensure_shutdown(nn, sc, -ENOTCONN);
1269 		return -1;
1270 	}
1271 
1272 	/*
1273 	 * Ensure timeouts are consistent with other nodes, otherwise
1274 	 * we can end up with one node thinking that the other must be down,
1275 	 * but isn't. This can ultimately cause corruption.
1276 	 */
1277 	if (be32_to_cpu(hand->o2net_idle_timeout_ms) !=
1278 				o2net_idle_timeout()) {
1279 		printk(KERN_NOTICE "o2net: " SC_NODEF_FMT " uses a network "
1280 		       "idle timeout of %u ms, but we use %u ms locally. "
1281 		       "Disconnecting.\n", SC_NODEF_ARGS(sc),
1282 		       be32_to_cpu(hand->o2net_idle_timeout_ms),
1283 		       o2net_idle_timeout());
1284 		o2net_ensure_shutdown(nn, sc, -ENOTCONN);
1285 		return -1;
1286 	}
1287 
1288 	if (be32_to_cpu(hand->o2net_keepalive_delay_ms) !=
1289 			o2net_keepalive_delay()) {
1290 		printk(KERN_NOTICE "o2net: " SC_NODEF_FMT " uses a keepalive "
1291 		       "delay of %u ms, but we use %u ms locally. "
1292 		       "Disconnecting.\n", SC_NODEF_ARGS(sc),
1293 		       be32_to_cpu(hand->o2net_keepalive_delay_ms),
1294 		       o2net_keepalive_delay());
1295 		o2net_ensure_shutdown(nn, sc, -ENOTCONN);
1296 		return -1;
1297 	}
1298 
1299 	if (be32_to_cpu(hand->o2hb_heartbeat_timeout_ms) !=
1300 			O2HB_MAX_WRITE_TIMEOUT_MS) {
1301 		printk(KERN_NOTICE "o2net: " SC_NODEF_FMT " uses a heartbeat "
1302 		       "timeout of %u ms, but we use %u ms locally. "
1303 		       "Disconnecting.\n", SC_NODEF_ARGS(sc),
1304 		       be32_to_cpu(hand->o2hb_heartbeat_timeout_ms),
1305 		       O2HB_MAX_WRITE_TIMEOUT_MS);
1306 		o2net_ensure_shutdown(nn, sc, -ENOTCONN);
1307 		return -1;
1308 	}
1309 
1310 	sc->sc_handshake_ok = 1;
1311 
1312 	spin_lock(&nn->nn_lock);
1313 	/* set valid and queue the idle timers only if it hasn't been
1314 	 * shut down already */
1315 	if (nn->nn_sc == sc) {
1316 		o2net_sc_reset_idle_timer(sc);
1317 		atomic_set(&nn->nn_timeout, 0);
1318 		o2net_set_nn_state(nn, sc, 1, 0);
1319 	}
1320 	spin_unlock(&nn->nn_lock);
1321 
1322 	/* shift everything up as though it wasn't there */
1323 	sc->sc_page_off -= sizeof(struct o2net_handshake);
1324 	if (sc->sc_page_off)
1325 		memmove(hand, hand + 1, sc->sc_page_off);
1326 
1327 	return 0;
1328 }
1329 
1330 /* this demuxes the queued rx bytes into header or payload bits and calls
1331  * handlers as each full message is read off the socket.  it returns -error,
1332  * == 0 eof, or > 0 for progress made.*/
1333 static int o2net_advance_rx(struct o2net_sock_container *sc)
1334 {
1335 	struct o2net_msg *hdr;
1336 	int ret = 0;
1337 	void *data;
1338 	size_t datalen;
1339 
1340 	sclog(sc, "receiving\n");
1341 	o2net_set_advance_start_time(sc);
1342 
1343 	if (unlikely(sc->sc_handshake_ok == 0)) {
1344 		if(sc->sc_page_off < sizeof(struct o2net_handshake)) {
1345 			data = page_address(sc->sc_page) + sc->sc_page_off;
1346 			datalen = sizeof(struct o2net_handshake) - sc->sc_page_off;
1347 			ret = o2net_recv_tcp_msg(sc->sc_sock, data, datalen);
1348 			if (ret > 0)
1349 				sc->sc_page_off += ret;
1350 		}
1351 
1352 		if (sc->sc_page_off == sizeof(struct o2net_handshake)) {
1353 			o2net_check_handshake(sc);
1354 			if (unlikely(sc->sc_handshake_ok == 0))
1355 				ret = -EPROTO;
1356 		}
1357 		goto out;
1358 	}
1359 
1360 	/* do we need more header? */
1361 	if (sc->sc_page_off < sizeof(struct o2net_msg)) {
1362 		data = page_address(sc->sc_page) + sc->sc_page_off;
1363 		datalen = sizeof(struct o2net_msg) - sc->sc_page_off;
1364 		ret = o2net_recv_tcp_msg(sc->sc_sock, data, datalen);
1365 		if (ret > 0) {
1366 			sc->sc_page_off += ret;
1367 			/* only swab incoming here.. we can
1368 			 * only get here once as we cross from
1369 			 * being under to over */
1370 			if (sc->sc_page_off == sizeof(struct o2net_msg)) {
1371 				hdr = page_address(sc->sc_page);
1372 				if (be16_to_cpu(hdr->data_len) >
1373 				    O2NET_MAX_PAYLOAD_BYTES)
1374 					ret = -EOVERFLOW;
1375 			}
1376 		}
1377 		if (ret <= 0)
1378 			goto out;
1379 	}
1380 
1381 	if (sc->sc_page_off < sizeof(struct o2net_msg)) {
1382 		/* oof, still don't have a header */
1383 		goto out;
1384 	}
1385 
1386 	/* this was swabbed above when we first read it */
1387 	hdr = page_address(sc->sc_page);
1388 
1389 	msglog(hdr, "at page_off %zu\n", sc->sc_page_off);
1390 
1391 	/* do we need more payload? */
1392 	if (sc->sc_page_off - sizeof(struct o2net_msg) < be16_to_cpu(hdr->data_len)) {
1393 		/* need more payload */
1394 		data = page_address(sc->sc_page) + sc->sc_page_off;
1395 		datalen = (sizeof(struct o2net_msg) + be16_to_cpu(hdr->data_len)) -
1396 			  sc->sc_page_off;
1397 		ret = o2net_recv_tcp_msg(sc->sc_sock, data, datalen);
1398 		if (ret > 0)
1399 			sc->sc_page_off += ret;
1400 		if (ret <= 0)
1401 			goto out;
1402 	}
1403 
1404 	if (sc->sc_page_off - sizeof(struct o2net_msg) == be16_to_cpu(hdr->data_len)) {
1405 		/* we can only get here once, the first time we read
1406 		 * the payload.. so set ret to progress if the handler
1407 		 * works out. after calling this the message is toast */
1408 		ret = o2net_process_message(sc, hdr);
1409 		if (ret == 0)
1410 			ret = 1;
1411 		sc->sc_page_off = 0;
1412 	}
1413 
1414 out:
1415 	sclog(sc, "ret = %d\n", ret);
1416 	o2net_set_advance_stop_time(sc);
1417 	return ret;
1418 }
1419 
1420 /* this work func is triggerd by data ready.  it reads until it can read no
1421  * more.  it interprets 0, eof, as fatal.  if data_ready hits while we're doing
1422  * our work the work struct will be marked and we'll be called again. */
1423 static void o2net_rx_until_empty(struct work_struct *work)
1424 {
1425 	struct o2net_sock_container *sc =
1426 		container_of(work, struct o2net_sock_container, sc_rx_work);
1427 	int ret;
1428 
1429 	do {
1430 		ret = o2net_advance_rx(sc);
1431 	} while (ret > 0);
1432 
1433 	if (ret <= 0 && ret != -EAGAIN) {
1434 		struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
1435 		sclog(sc, "saw error %d, closing\n", ret);
1436 		/* not permanent so read failed handshake can retry */
1437 		o2net_ensure_shutdown(nn, sc, 0);
1438 	}
1439 
1440 	sc_put(sc);
1441 }
1442 
1443 static void o2net_initialize_handshake(void)
1444 {
1445 	o2net_hand->o2hb_heartbeat_timeout_ms = cpu_to_be32(
1446 		O2HB_MAX_WRITE_TIMEOUT_MS);
1447 	o2net_hand->o2net_idle_timeout_ms = cpu_to_be32(o2net_idle_timeout());
1448 	o2net_hand->o2net_keepalive_delay_ms = cpu_to_be32(
1449 		o2net_keepalive_delay());
1450 	o2net_hand->o2net_reconnect_delay_ms = cpu_to_be32(
1451 		o2net_reconnect_delay());
1452 }
1453 
1454 /* ------------------------------------------------------------ */
1455 
1456 /* called when a connect completes and after a sock is accepted.  the
1457  * rx path will see the response and mark the sc valid */
1458 static void o2net_sc_connect_completed(struct work_struct *work)
1459 {
1460 	struct o2net_sock_container *sc =
1461 		container_of(work, struct o2net_sock_container,
1462 			     sc_connect_work);
1463 
1464 	mlog(ML_MSG, "sc sending handshake with ver %llu id %llx\n",
1465               (unsigned long long)O2NET_PROTOCOL_VERSION,
1466 	      (unsigned long long)be64_to_cpu(o2net_hand->connector_id));
1467 
1468 	o2net_initialize_handshake();
1469 	o2net_sendpage(sc, o2net_hand, sizeof(*o2net_hand));
1470 	sc_put(sc);
1471 }
1472 
1473 /* this is called as a work_struct func. */
1474 static void o2net_sc_send_keep_req(struct work_struct *work)
1475 {
1476 	struct o2net_sock_container *sc =
1477 		container_of(work, struct o2net_sock_container,
1478 			     sc_keepalive_work.work);
1479 
1480 	o2net_sendpage(sc, o2net_keep_req, sizeof(*o2net_keep_req));
1481 	sc_put(sc);
1482 }
1483 
1484 /* socket shutdown does a del_timer_sync against this as it tears down.
1485  * we can't start this timer until we've got to the point in sc buildup
1486  * where shutdown is going to be involved */
1487 static void o2net_idle_timer(struct timer_list *t)
1488 {
1489 	struct o2net_sock_container *sc = from_timer(sc, t, sc_idle_timeout);
1490 	struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
1491 #ifdef CONFIG_DEBUG_FS
1492 	unsigned long msecs = ktime_to_ms(ktime_get()) -
1493 		ktime_to_ms(sc->sc_tv_timer);
1494 #else
1495 	unsigned long msecs = o2net_idle_timeout();
1496 #endif
1497 
1498 	printk(KERN_NOTICE "o2net: Connection to " SC_NODEF_FMT " has been "
1499 	       "idle for %lu.%lu secs.\n",
1500 	       SC_NODEF_ARGS(sc), msecs / 1000, msecs % 1000);
1501 
1502 	/* idle timerout happen, don't shutdown the connection, but
1503 	 * make fence decision. Maybe the connection can recover before
1504 	 * the decision is made.
1505 	 */
1506 	atomic_set(&nn->nn_timeout, 1);
1507 	o2quo_conn_err(o2net_num_from_nn(nn));
1508 	queue_delayed_work(o2net_wq, &nn->nn_still_up,
1509 			msecs_to_jiffies(O2NET_QUORUM_DELAY_MS));
1510 
1511 	o2net_sc_reset_idle_timer(sc);
1512 
1513 }
1514 
1515 static void o2net_sc_reset_idle_timer(struct o2net_sock_container *sc)
1516 {
1517 	o2net_sc_cancel_delayed_work(sc, &sc->sc_keepalive_work);
1518 	o2net_sc_queue_delayed_work(sc, &sc->sc_keepalive_work,
1519 		      msecs_to_jiffies(o2net_keepalive_delay()));
1520 	o2net_set_sock_timer(sc);
1521 	mod_timer(&sc->sc_idle_timeout,
1522 	       jiffies + msecs_to_jiffies(o2net_idle_timeout()));
1523 }
1524 
1525 static void o2net_sc_postpone_idle(struct o2net_sock_container *sc)
1526 {
1527 	struct o2net_node *nn = o2net_nn_from_num(sc->sc_node->nd_num);
1528 
1529 	/* clear fence decision since the connection recover from timeout*/
1530 	if (atomic_read(&nn->nn_timeout)) {
1531 		o2quo_conn_up(o2net_num_from_nn(nn));
1532 		cancel_delayed_work(&nn->nn_still_up);
1533 		atomic_set(&nn->nn_timeout, 0);
1534 	}
1535 
1536 	/* Only push out an existing timer */
1537 	if (timer_pending(&sc->sc_idle_timeout))
1538 		o2net_sc_reset_idle_timer(sc);
1539 }
1540 
1541 /* this work func is kicked whenever a path sets the nn state which doesn't
1542  * have valid set.  This includes seeing hb come up, losing a connection,
1543  * having a connect attempt fail, etc. This centralizes the logic which decides
1544  * if a connect attempt should be made or if we should give up and all future
1545  * transmit attempts should fail */
1546 static void o2net_start_connect(struct work_struct *work)
1547 {
1548 	struct o2net_node *nn =
1549 		container_of(work, struct o2net_node, nn_connect_work.work);
1550 	struct o2net_sock_container *sc = NULL;
1551 	struct o2nm_node *node = NULL, *mynode = NULL;
1552 	struct socket *sock = NULL;
1553 	struct sockaddr_in myaddr = {0, }, remoteaddr = {0, };
1554 	int ret = 0, stop;
1555 	unsigned int timeout;
1556 	unsigned int nofs_flag;
1557 
1558 	/*
1559 	 * sock_create allocates the sock with GFP_KERNEL. We must
1560 	 * prevent the filesystem from being reentered by memory reclaim.
1561 	 */
1562 	nofs_flag = memalloc_nofs_save();
1563 	/* if we're greater we initiate tx, otherwise we accept */
1564 	if (o2nm_this_node() <= o2net_num_from_nn(nn))
1565 		goto out;
1566 
1567 	/* watch for racing with tearing a node down */
1568 	node = o2nm_get_node_by_num(o2net_num_from_nn(nn));
1569 	if (node == NULL)
1570 		goto out;
1571 
1572 	mynode = o2nm_get_node_by_num(o2nm_this_node());
1573 	if (mynode == NULL)
1574 		goto out;
1575 
1576 	spin_lock(&nn->nn_lock);
1577 	/*
1578 	 * see if we already have one pending or have given up.
1579 	 * For nn_timeout, it is set when we close the connection
1580 	 * because of the idle time out. So it means that we have
1581 	 * at least connected to that node successfully once,
1582 	 * now try to connect to it again.
1583 	 */
1584 	timeout = atomic_read(&nn->nn_timeout);
1585 	stop = (nn->nn_sc ||
1586 		(nn->nn_persistent_error &&
1587 		(nn->nn_persistent_error != -ENOTCONN || timeout == 0)));
1588 	spin_unlock(&nn->nn_lock);
1589 	if (stop)
1590 		goto out;
1591 
1592 	nn->nn_last_connect_attempt = jiffies;
1593 
1594 	sc = sc_alloc(node);
1595 	if (sc == NULL) {
1596 		mlog(0, "couldn't allocate sc\n");
1597 		ret = -ENOMEM;
1598 		goto out;
1599 	}
1600 
1601 	ret = sock_create(PF_INET, SOCK_STREAM, IPPROTO_TCP, &sock);
1602 	if (ret < 0) {
1603 		mlog(0, "can't create socket: %d\n", ret);
1604 		goto out;
1605 	}
1606 	sc->sc_sock = sock; /* freed by sc_kref_release */
1607 
1608 	sock->sk->sk_allocation = GFP_ATOMIC;
1609 
1610 	myaddr.sin_family = AF_INET;
1611 	myaddr.sin_addr.s_addr = mynode->nd_ipv4_address;
1612 	myaddr.sin_port = htons(0); /* any port */
1613 
1614 	ret = sock->ops->bind(sock, (struct sockaddr *)&myaddr,
1615 			      sizeof(myaddr));
1616 	if (ret) {
1617 		mlog(ML_ERROR, "bind failed with %d at address %pI4\n",
1618 		     ret, &mynode->nd_ipv4_address);
1619 		goto out;
1620 	}
1621 
1622 	tcp_sock_set_nodelay(sc->sc_sock->sk);
1623 	tcp_sock_set_user_timeout(sock->sk, O2NET_TCP_USER_TIMEOUT);
1624 
1625 	o2net_register_callbacks(sc->sc_sock->sk, sc);
1626 
1627 	spin_lock(&nn->nn_lock);
1628 	/* handshake completion will set nn->nn_sc_valid */
1629 	o2net_set_nn_state(nn, sc, 0, 0);
1630 	spin_unlock(&nn->nn_lock);
1631 
1632 	remoteaddr.sin_family = AF_INET;
1633 	remoteaddr.sin_addr.s_addr = node->nd_ipv4_address;
1634 	remoteaddr.sin_port = node->nd_ipv4_port;
1635 
1636 	ret = sc->sc_sock->ops->connect(sc->sc_sock,
1637 					(struct sockaddr *)&remoteaddr,
1638 					sizeof(remoteaddr),
1639 					O_NONBLOCK);
1640 	if (ret == -EINPROGRESS)
1641 		ret = 0;
1642 
1643 out:
1644 	if (ret && sc) {
1645 		printk(KERN_NOTICE "o2net: Connect attempt to " SC_NODEF_FMT
1646 		       " failed with errno %d\n", SC_NODEF_ARGS(sc), ret);
1647 		/* 0 err so that another will be queued and attempted
1648 		 * from set_nn_state */
1649 		o2net_ensure_shutdown(nn, sc, 0);
1650 	}
1651 	if (sc)
1652 		sc_put(sc);
1653 	if (node)
1654 		o2nm_node_put(node);
1655 	if (mynode)
1656 		o2nm_node_put(mynode);
1657 
1658 	memalloc_nofs_restore(nofs_flag);
1659 	return;
1660 }
1661 
1662 static void o2net_connect_expired(struct work_struct *work)
1663 {
1664 	struct o2net_node *nn =
1665 		container_of(work, struct o2net_node, nn_connect_expired.work);
1666 
1667 	spin_lock(&nn->nn_lock);
1668 	if (!nn->nn_sc_valid) {
1669 		printk(KERN_NOTICE "o2net: No connection established with "
1670 		       "node %u after %u.%u seconds, check network and"
1671 		       " cluster configuration.\n",
1672 		     o2net_num_from_nn(nn),
1673 		     o2net_idle_timeout() / 1000,
1674 		     o2net_idle_timeout() % 1000);
1675 
1676 		o2net_set_nn_state(nn, NULL, 0, 0);
1677 	}
1678 	spin_unlock(&nn->nn_lock);
1679 }
1680 
1681 static void o2net_still_up(struct work_struct *work)
1682 {
1683 	struct o2net_node *nn =
1684 		container_of(work, struct o2net_node, nn_still_up.work);
1685 
1686 	o2quo_hb_still_up(o2net_num_from_nn(nn));
1687 }
1688 
1689 /* ------------------------------------------------------------ */
1690 
1691 void o2net_disconnect_node(struct o2nm_node *node)
1692 {
1693 	struct o2net_node *nn = o2net_nn_from_num(node->nd_num);
1694 
1695 	/* don't reconnect until it's heartbeating again */
1696 	spin_lock(&nn->nn_lock);
1697 	atomic_set(&nn->nn_timeout, 0);
1698 	o2net_set_nn_state(nn, NULL, 0, -ENOTCONN);
1699 	spin_unlock(&nn->nn_lock);
1700 
1701 	if (o2net_wq) {
1702 		cancel_delayed_work(&nn->nn_connect_expired);
1703 		cancel_delayed_work(&nn->nn_connect_work);
1704 		cancel_delayed_work(&nn->nn_still_up);
1705 		flush_workqueue(o2net_wq);
1706 	}
1707 }
1708 
1709 static void o2net_hb_node_down_cb(struct o2nm_node *node, int node_num,
1710 				  void *data)
1711 {
1712 	o2quo_hb_down(node_num);
1713 
1714 	if (!node)
1715 		return;
1716 
1717 	if (node_num != o2nm_this_node())
1718 		o2net_disconnect_node(node);
1719 
1720 	BUG_ON(atomic_read(&o2net_connected_peers) < 0);
1721 }
1722 
1723 static void o2net_hb_node_up_cb(struct o2nm_node *node, int node_num,
1724 				void *data)
1725 {
1726 	struct o2net_node *nn = o2net_nn_from_num(node_num);
1727 
1728 	o2quo_hb_up(node_num);
1729 
1730 	BUG_ON(!node);
1731 
1732 	/* ensure an immediate connect attempt */
1733 	nn->nn_last_connect_attempt = jiffies -
1734 		(msecs_to_jiffies(o2net_reconnect_delay()) + 1);
1735 
1736 	if (node_num != o2nm_this_node()) {
1737 		/* believe it or not, accept and node heartbeating testing
1738 		 * can succeed for this node before we got here.. so
1739 		 * only use set_nn_state to clear the persistent error
1740 		 * if that hasn't already happened */
1741 		spin_lock(&nn->nn_lock);
1742 		atomic_set(&nn->nn_timeout, 0);
1743 		if (nn->nn_persistent_error)
1744 			o2net_set_nn_state(nn, NULL, 0, 0);
1745 		spin_unlock(&nn->nn_lock);
1746 	}
1747 }
1748 
1749 void o2net_unregister_hb_callbacks(void)
1750 {
1751 	o2hb_unregister_callback(NULL, &o2net_hb_up);
1752 	o2hb_unregister_callback(NULL, &o2net_hb_down);
1753 }
1754 
1755 int o2net_register_hb_callbacks(void)
1756 {
1757 	int ret;
1758 
1759 	o2hb_setup_callback(&o2net_hb_down, O2HB_NODE_DOWN_CB,
1760 			    o2net_hb_node_down_cb, NULL, O2NET_HB_PRI);
1761 	o2hb_setup_callback(&o2net_hb_up, O2HB_NODE_UP_CB,
1762 			    o2net_hb_node_up_cb, NULL, O2NET_HB_PRI);
1763 
1764 	ret = o2hb_register_callback(NULL, &o2net_hb_up);
1765 	if (ret == 0)
1766 		ret = o2hb_register_callback(NULL, &o2net_hb_down);
1767 
1768 	if (ret)
1769 		o2net_unregister_hb_callbacks();
1770 
1771 	return ret;
1772 }
1773 
1774 /* ------------------------------------------------------------ */
1775 
1776 static int o2net_accept_one(struct socket *sock, int *more)
1777 {
1778 	int ret;
1779 	struct sockaddr_in sin;
1780 	struct socket *new_sock = NULL;
1781 	struct o2nm_node *node = NULL;
1782 	struct o2nm_node *local_node = NULL;
1783 	struct o2net_sock_container *sc = NULL;
1784 	struct o2net_node *nn;
1785 	unsigned int nofs_flag;
1786 
1787 	/*
1788 	 * sock_create_lite allocates the sock with GFP_KERNEL. We must
1789 	 * prevent the filesystem from being reentered by memory reclaim.
1790 	 */
1791 	nofs_flag = memalloc_nofs_save();
1792 
1793 	BUG_ON(sock == NULL);
1794 	*more = 0;
1795 	ret = sock_create_lite(sock->sk->sk_family, sock->sk->sk_type,
1796 			       sock->sk->sk_protocol, &new_sock);
1797 	if (ret)
1798 		goto out;
1799 
1800 	new_sock->type = sock->type;
1801 	new_sock->ops = sock->ops;
1802 	ret = sock->ops->accept(sock, new_sock, O_NONBLOCK, false);
1803 	if (ret < 0)
1804 		goto out;
1805 
1806 	*more = 1;
1807 	new_sock->sk->sk_allocation = GFP_ATOMIC;
1808 
1809 	tcp_sock_set_nodelay(new_sock->sk);
1810 	tcp_sock_set_user_timeout(new_sock->sk, O2NET_TCP_USER_TIMEOUT);
1811 
1812 	ret = new_sock->ops->getname(new_sock, (struct sockaddr *) &sin, 1);
1813 	if (ret < 0)
1814 		goto out;
1815 
1816 	node = o2nm_get_node_by_ip(sin.sin_addr.s_addr);
1817 	if (node == NULL) {
1818 		printk(KERN_NOTICE "o2net: Attempt to connect from unknown "
1819 		       "node at %pI4:%d\n", &sin.sin_addr.s_addr,
1820 		       ntohs(sin.sin_port));
1821 		ret = -EINVAL;
1822 		goto out;
1823 	}
1824 
1825 	if (o2nm_this_node() >= node->nd_num) {
1826 		local_node = o2nm_get_node_by_num(o2nm_this_node());
1827 		if (local_node)
1828 			printk(KERN_NOTICE "o2net: Unexpected connect attempt "
1829 					"seen at node '%s' (%u, %pI4:%d) from "
1830 					"node '%s' (%u, %pI4:%d)\n",
1831 					local_node->nd_name, local_node->nd_num,
1832 					&(local_node->nd_ipv4_address),
1833 					ntohs(local_node->nd_ipv4_port),
1834 					node->nd_name,
1835 					node->nd_num, &sin.sin_addr.s_addr,
1836 					ntohs(sin.sin_port));
1837 		ret = -EINVAL;
1838 		goto out;
1839 	}
1840 
1841 	/* this happens all the time when the other node sees our heartbeat
1842 	 * and tries to connect before we see their heartbeat */
1843 	if (!o2hb_check_node_heartbeating_from_callback(node->nd_num)) {
1844 		mlog(ML_CONN, "attempt to connect from node '%s' at "
1845 		     "%pI4:%d but it isn't heartbeating\n",
1846 		     node->nd_name, &sin.sin_addr.s_addr,
1847 		     ntohs(sin.sin_port));
1848 		ret = -EINVAL;
1849 		goto out;
1850 	}
1851 
1852 	nn = o2net_nn_from_num(node->nd_num);
1853 
1854 	spin_lock(&nn->nn_lock);
1855 	if (nn->nn_sc)
1856 		ret = -EBUSY;
1857 	else
1858 		ret = 0;
1859 	spin_unlock(&nn->nn_lock);
1860 	if (ret) {
1861 		printk(KERN_NOTICE "o2net: Attempt to connect from node '%s' "
1862 		       "at %pI4:%d but it already has an open connection\n",
1863 		       node->nd_name, &sin.sin_addr.s_addr,
1864 		       ntohs(sin.sin_port));
1865 		goto out;
1866 	}
1867 
1868 	sc = sc_alloc(node);
1869 	if (sc == NULL) {
1870 		ret = -ENOMEM;
1871 		goto out;
1872 	}
1873 
1874 	sc->sc_sock = new_sock;
1875 	new_sock = NULL;
1876 
1877 	spin_lock(&nn->nn_lock);
1878 	atomic_set(&nn->nn_timeout, 0);
1879 	o2net_set_nn_state(nn, sc, 0, 0);
1880 	spin_unlock(&nn->nn_lock);
1881 
1882 	o2net_register_callbacks(sc->sc_sock->sk, sc);
1883 	o2net_sc_queue_work(sc, &sc->sc_rx_work);
1884 
1885 	o2net_initialize_handshake();
1886 	o2net_sendpage(sc, o2net_hand, sizeof(*o2net_hand));
1887 
1888 out:
1889 	if (new_sock)
1890 		sock_release(new_sock);
1891 	if (node)
1892 		o2nm_node_put(node);
1893 	if (local_node)
1894 		o2nm_node_put(local_node);
1895 	if (sc)
1896 		sc_put(sc);
1897 
1898 	memalloc_nofs_restore(nofs_flag);
1899 	return ret;
1900 }
1901 
1902 /*
1903  * This function is invoked in response to one or more
1904  * pending accepts at softIRQ level. We must drain the
1905  * entire que before returning.
1906  */
1907 
1908 static void o2net_accept_many(struct work_struct *work)
1909 {
1910 	struct socket *sock = o2net_listen_sock;
1911 	int	more;
1912 
1913 	/*
1914 	 * It is critical to note that due to interrupt moderation
1915 	 * at the network driver level, we can't assume to get a
1916 	 * softIRQ for every single conn since tcp SYN packets
1917 	 * can arrive back-to-back, and therefore many pending
1918 	 * accepts may result in just 1 softIRQ. If we terminate
1919 	 * the o2net_accept_one() loop upon seeing an err, what happens
1920 	 * to the rest of the conns in the queue? If no new SYN
1921 	 * arrives for hours, no softIRQ  will be delivered,
1922 	 * and the connections will just sit in the queue.
1923 	 */
1924 
1925 	for (;;) {
1926 		o2net_accept_one(sock, &more);
1927 		if (!more)
1928 			break;
1929 		cond_resched();
1930 	}
1931 }
1932 
1933 static void o2net_listen_data_ready(struct sock *sk)
1934 {
1935 	void (*ready)(struct sock *sk);
1936 
1937 	read_lock_bh(&sk->sk_callback_lock);
1938 	ready = sk->sk_user_data;
1939 	if (ready == NULL) { /* check for teardown race */
1940 		ready = sk->sk_data_ready;
1941 		goto out;
1942 	}
1943 
1944 	/* This callback may called twice when a new connection
1945 	 * is  being established as a child socket inherits everything
1946 	 * from a parent LISTEN socket, including the data_ready cb of
1947 	 * the parent. This leads to a hazard. In o2net_accept_one()
1948 	 * we are still initializing the child socket but have not
1949 	 * changed the inherited data_ready callback yet when
1950 	 * data starts arriving.
1951 	 * We avoid this hazard by checking the state.
1952 	 * For the listening socket,  the state will be TCP_LISTEN; for the new
1953 	 * socket, will be  TCP_ESTABLISHED. Also, in this case,
1954 	 * sk->sk_user_data is not a valid function pointer.
1955 	 */
1956 
1957 	if (sk->sk_state == TCP_LISTEN) {
1958 		queue_work(o2net_wq, &o2net_listen_work);
1959 	} else {
1960 		ready = NULL;
1961 	}
1962 
1963 out:
1964 	read_unlock_bh(&sk->sk_callback_lock);
1965 	if (ready != NULL)
1966 		ready(sk);
1967 }
1968 
1969 static int o2net_open_listening_sock(__be32 addr, __be16 port)
1970 {
1971 	struct socket *sock = NULL;
1972 	int ret;
1973 	struct sockaddr_in sin = {
1974 		.sin_family = PF_INET,
1975 		.sin_addr = { .s_addr = addr },
1976 		.sin_port = port,
1977 	};
1978 
1979 	ret = sock_create(PF_INET, SOCK_STREAM, IPPROTO_TCP, &sock);
1980 	if (ret < 0) {
1981 		printk(KERN_ERR "o2net: Error %d while creating socket\n", ret);
1982 		goto out;
1983 	}
1984 
1985 	sock->sk->sk_allocation = GFP_ATOMIC;
1986 
1987 	write_lock_bh(&sock->sk->sk_callback_lock);
1988 	sock->sk->sk_user_data = sock->sk->sk_data_ready;
1989 	sock->sk->sk_data_ready = o2net_listen_data_ready;
1990 	write_unlock_bh(&sock->sk->sk_callback_lock);
1991 
1992 	o2net_listen_sock = sock;
1993 	INIT_WORK(&o2net_listen_work, o2net_accept_many);
1994 
1995 	sock->sk->sk_reuse = SK_CAN_REUSE;
1996 	ret = sock->ops->bind(sock, (struct sockaddr *)&sin, sizeof(sin));
1997 	if (ret < 0) {
1998 		printk(KERN_ERR "o2net: Error %d while binding socket at "
1999 		       "%pI4:%u\n", ret, &addr, ntohs(port));
2000 		goto out;
2001 	}
2002 
2003 	ret = sock->ops->listen(sock, 64);
2004 	if (ret < 0)
2005 		printk(KERN_ERR "o2net: Error %d while listening on %pI4:%u\n",
2006 		       ret, &addr, ntohs(port));
2007 
2008 out:
2009 	if (ret) {
2010 		o2net_listen_sock = NULL;
2011 		if (sock)
2012 			sock_release(sock);
2013 	}
2014 	return ret;
2015 }
2016 
2017 /*
2018  * called from node manager when we should bring up our network listening
2019  * socket.  node manager handles all the serialization to only call this
2020  * once and to match it with o2net_stop_listening().  note,
2021  * o2nm_this_node() doesn't work yet as we're being called while it
2022  * is being set up.
2023  */
2024 int o2net_start_listening(struct o2nm_node *node)
2025 {
2026 	int ret = 0;
2027 
2028 	BUG_ON(o2net_wq != NULL);
2029 	BUG_ON(o2net_listen_sock != NULL);
2030 
2031 	mlog(ML_KTHREAD, "starting o2net thread...\n");
2032 	o2net_wq = alloc_ordered_workqueue("o2net", WQ_MEM_RECLAIM);
2033 	if (o2net_wq == NULL) {
2034 		mlog(ML_ERROR, "unable to launch o2net thread\n");
2035 		return -ENOMEM; /* ? */
2036 	}
2037 
2038 	ret = o2net_open_listening_sock(node->nd_ipv4_address,
2039 					node->nd_ipv4_port);
2040 	if (ret) {
2041 		destroy_workqueue(o2net_wq);
2042 		o2net_wq = NULL;
2043 	} else
2044 		o2quo_conn_up(node->nd_num);
2045 
2046 	return ret;
2047 }
2048 
2049 /* again, o2nm_this_node() doesn't work here as we're involved in
2050  * tearing it down */
2051 void o2net_stop_listening(struct o2nm_node *node)
2052 {
2053 	struct socket *sock = o2net_listen_sock;
2054 	size_t i;
2055 
2056 	BUG_ON(o2net_wq == NULL);
2057 	BUG_ON(o2net_listen_sock == NULL);
2058 
2059 	/* stop the listening socket from generating work */
2060 	write_lock_bh(&sock->sk->sk_callback_lock);
2061 	sock->sk->sk_data_ready = sock->sk->sk_user_data;
2062 	sock->sk->sk_user_data = NULL;
2063 	write_unlock_bh(&sock->sk->sk_callback_lock);
2064 
2065 	for (i = 0; i < ARRAY_SIZE(o2net_nodes); i++) {
2066 		struct o2nm_node *node = o2nm_get_node_by_num(i);
2067 		if (node) {
2068 			o2net_disconnect_node(node);
2069 			o2nm_node_put(node);
2070 		}
2071 	}
2072 
2073 	/* finish all work and tear down the work queue */
2074 	mlog(ML_KTHREAD, "waiting for o2net thread to exit....\n");
2075 	destroy_workqueue(o2net_wq);
2076 	o2net_wq = NULL;
2077 
2078 	sock_release(o2net_listen_sock);
2079 	o2net_listen_sock = NULL;
2080 
2081 	o2quo_conn_err(node->nd_num);
2082 }
2083 
2084 /* ------------------------------------------------------------ */
2085 
2086 int o2net_init(void)
2087 {
2088 	unsigned long i;
2089 
2090 	o2quo_init();
2091 
2092 	o2net_debugfs_init();
2093 
2094 	o2net_hand = kzalloc(sizeof(struct o2net_handshake), GFP_KERNEL);
2095 	o2net_keep_req = kzalloc(sizeof(struct o2net_msg), GFP_KERNEL);
2096 	o2net_keep_resp = kzalloc(sizeof(struct o2net_msg), GFP_KERNEL);
2097 	if (!o2net_hand || !o2net_keep_req || !o2net_keep_resp)
2098 		goto out;
2099 
2100 	o2net_hand->protocol_version = cpu_to_be64(O2NET_PROTOCOL_VERSION);
2101 	o2net_hand->connector_id = cpu_to_be64(1);
2102 
2103 	o2net_keep_req->magic = cpu_to_be16(O2NET_MSG_KEEP_REQ_MAGIC);
2104 	o2net_keep_resp->magic = cpu_to_be16(O2NET_MSG_KEEP_RESP_MAGIC);
2105 
2106 	for (i = 0; i < ARRAY_SIZE(o2net_nodes); i++) {
2107 		struct o2net_node *nn = o2net_nn_from_num(i);
2108 
2109 		atomic_set(&nn->nn_timeout, 0);
2110 		spin_lock_init(&nn->nn_lock);
2111 		INIT_DELAYED_WORK(&nn->nn_connect_work, o2net_start_connect);
2112 		INIT_DELAYED_WORK(&nn->nn_connect_expired,
2113 				  o2net_connect_expired);
2114 		INIT_DELAYED_WORK(&nn->nn_still_up, o2net_still_up);
2115 		/* until we see hb from a node we'll return einval */
2116 		nn->nn_persistent_error = -ENOTCONN;
2117 		init_waitqueue_head(&nn->nn_sc_wq);
2118 		idr_init(&nn->nn_status_idr);
2119 		INIT_LIST_HEAD(&nn->nn_status_list);
2120 	}
2121 
2122 	return 0;
2123 
2124 out:
2125 	kfree(o2net_hand);
2126 	kfree(o2net_keep_req);
2127 	kfree(o2net_keep_resp);
2128 	o2net_debugfs_exit();
2129 	o2quo_exit();
2130 	return -ENOMEM;
2131 }
2132 
2133 void o2net_exit(void)
2134 {
2135 	o2quo_exit();
2136 	kfree(o2net_hand);
2137 	kfree(o2net_keep_req);
2138 	kfree(o2net_keep_resp);
2139 	o2net_debugfs_exit();
2140 }
2141