Commit d36b3279 authored by Bhanu Prakash Gollapudi's avatar Bhanu Prakash Gollapudi Committed by James Bottomley

[SCSI] bnx2fc: Fix kernel panic when deleting NPIV ports

Deleting NPIV port causes a kernel panic when the NPIV port is in the same zone
as the physical port and shares the same LUN. This happens due to the fact that
vport destroy and unsolicited ELS are scheduled to run on the same workqueue,
and vport destroy destroys the lport and the unsolicited ELS tries to access
the invalid lport.  This patch fixes this issue by maintaining a list of valid
lports and verifying if the lport is valid or not before accessing it.
Signed-off-by: default avatarBhanu Prakash Gollapudi <bprakash@broadcom.com>
Signed-off-by: default avatarJames Bottomley <JBottomley@Parallels.com>
parent b5a95fe7
...@@ -152,7 +152,6 @@ struct bnx2fc_percpu_s { ...@@ -152,7 +152,6 @@ struct bnx2fc_percpu_s {
spinlock_t fp_work_lock; spinlock_t fp_work_lock;
}; };
struct bnx2fc_hba { struct bnx2fc_hba {
struct list_head link; struct list_head link;
struct cnic_dev *cnic; struct cnic_dev *cnic;
...@@ -179,6 +178,7 @@ struct bnx2fc_hba { ...@@ -179,6 +178,7 @@ struct bnx2fc_hba {
#define BNX2FC_CTLR_INIT_DONE 1 #define BNX2FC_CTLR_INIT_DONE 1
#define BNX2FC_CREATE_DONE 2 #define BNX2FC_CREATE_DONE 2
struct fcoe_ctlr ctlr; struct fcoe_ctlr ctlr;
struct list_head vports;
u8 vlan_enabled; u8 vlan_enabled;
int vlan_id; int vlan_id;
u32 next_conn_id; u32 next_conn_id;
...@@ -232,6 +232,11 @@ struct bnx2fc_hba { ...@@ -232,6 +232,11 @@ struct bnx2fc_hba {
#define bnx2fc_from_ctlr(fip) container_of(fip, struct bnx2fc_hba, ctlr) #define bnx2fc_from_ctlr(fip) container_of(fip, struct bnx2fc_hba, ctlr)
struct bnx2fc_lport {
struct list_head list;
struct fc_lport *lport;
};
struct bnx2fc_cmd_mgr { struct bnx2fc_cmd_mgr {
struct bnx2fc_hba *hba; struct bnx2fc_hba *hba;
u16 next_idx; u16 next_idx;
...@@ -423,6 +428,7 @@ struct bnx2fc_work { ...@@ -423,6 +428,7 @@ struct bnx2fc_work {
struct bnx2fc_unsol_els { struct bnx2fc_unsol_els {
struct fc_lport *lport; struct fc_lport *lport;
struct fc_frame *fp; struct fc_frame *fp;
struct bnx2fc_hba *hba;
struct work_struct unsol_els_work; struct work_struct unsol_els_work;
}; };
......
...@@ -1228,6 +1228,7 @@ static int bnx2fc_interface_setup(struct bnx2fc_hba *hba, ...@@ -1228,6 +1228,7 @@ static int bnx2fc_interface_setup(struct bnx2fc_hba *hba,
hba->ctlr.get_src_addr = bnx2fc_get_src_mac; hba->ctlr.get_src_addr = bnx2fc_get_src_mac;
set_bit(BNX2FC_CTLR_INIT_DONE, &hba->init_done); set_bit(BNX2FC_CTLR_INIT_DONE, &hba->init_done);
INIT_LIST_HEAD(&hba->vports);
rc = bnx2fc_netdev_setup(hba); rc = bnx2fc_netdev_setup(hba);
if (rc) if (rc)
goto setup_err; goto setup_err;
...@@ -1264,8 +1265,15 @@ static struct fc_lport *bnx2fc_if_create(struct bnx2fc_hba *hba, ...@@ -1264,8 +1265,15 @@ static struct fc_lport *bnx2fc_if_create(struct bnx2fc_hba *hba,
struct fcoe_port *port; struct fcoe_port *port;
struct Scsi_Host *shost; struct Scsi_Host *shost;
struct fc_vport *vport = dev_to_vport(parent); struct fc_vport *vport = dev_to_vport(parent);
struct bnx2fc_lport *blport;
int rc = 0; int rc = 0;
blport = kzalloc(sizeof(struct bnx2fc_lport), GFP_KERNEL);
if (!blport) {
BNX2FC_HBA_DBG(hba->ctlr.lp, "Unable to alloc bnx2fc_lport\n");
return NULL;
}
/* Allocate Scsi_Host structure */ /* Allocate Scsi_Host structure */
if (!npiv) if (!npiv)
lport = libfc_host_alloc(&bnx2fc_shost_template, sizeof(*port)); lport = libfc_host_alloc(&bnx2fc_shost_template, sizeof(*port));
...@@ -1274,7 +1282,7 @@ static struct fc_lport *bnx2fc_if_create(struct bnx2fc_hba *hba, ...@@ -1274,7 +1282,7 @@ static struct fc_lport *bnx2fc_if_create(struct bnx2fc_hba *hba,
if (!lport) { if (!lport) {
printk(KERN_ERR PFX "could not allocate scsi host structure\n"); printk(KERN_ERR PFX "could not allocate scsi host structure\n");
return NULL; goto free_blport;
} }
shost = lport->host; shost = lport->host;
port = lport_priv(lport); port = lport_priv(lport);
...@@ -1330,12 +1338,20 @@ static struct fc_lport *bnx2fc_if_create(struct bnx2fc_hba *hba, ...@@ -1330,12 +1338,20 @@ static struct fc_lport *bnx2fc_if_create(struct bnx2fc_hba *hba,
} }
bnx2fc_interface_get(hba); bnx2fc_interface_get(hba);
spin_lock_bh(&hba->hba_lock);
blport->lport = lport;
list_add_tail(&blport->list, &hba->vports);
spin_unlock_bh(&hba->hba_lock);
return lport; return lport;
shost_err: shost_err:
scsi_remove_host(shost); scsi_remove_host(shost);
lp_config_err: lp_config_err:
scsi_host_put(lport->host); scsi_host_put(lport->host);
free_blport:
kfree(blport);
return NULL; return NULL;
} }
...@@ -1351,6 +1367,7 @@ static void bnx2fc_if_destroy(struct fc_lport *lport) ...@@ -1351,6 +1367,7 @@ static void bnx2fc_if_destroy(struct fc_lport *lport)
{ {
struct fcoe_port *port = lport_priv(lport); struct fcoe_port *port = lport_priv(lport);
struct bnx2fc_hba *hba = port->priv; struct bnx2fc_hba *hba = port->priv;
struct bnx2fc_lport *blport, *tmp;
BNX2FC_HBA_DBG(hba->ctlr.lp, "ENTERED bnx2fc_if_destroy\n"); BNX2FC_HBA_DBG(hba->ctlr.lp, "ENTERED bnx2fc_if_destroy\n");
/* Stop the transmit retry timer */ /* Stop the transmit retry timer */
...@@ -1375,6 +1392,15 @@ static void bnx2fc_if_destroy(struct fc_lport *lport) ...@@ -1375,6 +1392,15 @@ static void bnx2fc_if_destroy(struct fc_lport *lport)
/* Free memory used by statistical counters */ /* Free memory used by statistical counters */
fc_lport_free_stats(lport); fc_lport_free_stats(lport);
spin_lock_bh(&hba->hba_lock);
list_for_each_entry_safe(blport, tmp, &hba->vports, list) {
if (blport->lport == lport) {
list_del(&blport->list);
kfree(blport);
}
}
spin_unlock_bh(&hba->hba_lock);
/* Release Scsi_Host */ /* Release Scsi_Host */
scsi_host_put(lport->host); scsi_host_put(lport->host);
......
...@@ -480,16 +480,36 @@ int bnx2fc_send_session_destroy_req(struct bnx2fc_hba *hba, ...@@ -480,16 +480,36 @@ int bnx2fc_send_session_destroy_req(struct bnx2fc_hba *hba,
return rc; return rc;
} }
static bool is_valid_lport(struct bnx2fc_hba *hba, struct fc_lport *lport)
{
struct bnx2fc_lport *blport;
spin_lock_bh(&hba->hba_lock);
list_for_each_entry(blport, &hba->vports, list) {
if (blport->lport == lport) {
spin_unlock_bh(&hba->hba_lock);
return true;
}
}
spin_unlock_bh(&hba->hba_lock);
return false;
}
static void bnx2fc_unsol_els_work(struct work_struct *work) static void bnx2fc_unsol_els_work(struct work_struct *work)
{ {
struct bnx2fc_unsol_els *unsol_els; struct bnx2fc_unsol_els *unsol_els;
struct fc_lport *lport; struct fc_lport *lport;
struct bnx2fc_hba *hba;
struct fc_frame *fp; struct fc_frame *fp;
unsol_els = container_of(work, struct bnx2fc_unsol_els, unsol_els_work); unsol_els = container_of(work, struct bnx2fc_unsol_els, unsol_els_work);
lport = unsol_els->lport; lport = unsol_els->lport;
fp = unsol_els->fp; fp = unsol_els->fp;
fc_exch_recv(lport, fp); hba = unsol_els->hba;
if (is_valid_lport(hba, lport))
fc_exch_recv(lport, fp);
kfree(unsol_els); kfree(unsol_els);
} }
...@@ -499,6 +519,7 @@ void bnx2fc_process_l2_frame_compl(struct bnx2fc_rport *tgt, ...@@ -499,6 +519,7 @@ void bnx2fc_process_l2_frame_compl(struct bnx2fc_rport *tgt,
{ {
struct fcoe_port *port = tgt->port; struct fcoe_port *port = tgt->port;
struct fc_lport *lport = port->lport; struct fc_lport *lport = port->lport;
struct bnx2fc_hba *hba = port->priv;
struct bnx2fc_unsol_els *unsol_els; struct bnx2fc_unsol_els *unsol_els;
struct fc_frame_header *fh; struct fc_frame_header *fh;
struct fc_frame *fp; struct fc_frame *fp;
...@@ -559,6 +580,7 @@ void bnx2fc_process_l2_frame_compl(struct bnx2fc_rport *tgt, ...@@ -559,6 +580,7 @@ void bnx2fc_process_l2_frame_compl(struct bnx2fc_rport *tgt,
fr_eof(fp) = FC_EOF_T; fr_eof(fp) = FC_EOF_T;
fr_crc(fp) = cpu_to_le32(~crc); fr_crc(fp) = cpu_to_le32(~crc);
unsol_els->lport = lport; unsol_els->lport = lport;
unsol_els->hba = hba;
unsol_els->fp = fp; unsol_els->fp = fp;
INIT_WORK(&unsol_els->unsol_els_work, bnx2fc_unsol_els_work); INIT_WORK(&unsol_els->unsol_els_work, bnx2fc_unsol_els_work);
queue_work(bnx2fc_wq, &unsol_els->unsol_els_work); queue_work(bnx2fc_wq, &unsol_els->unsol_els_work);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment