xref: /openbmc/linux/drivers/scsi/lpfc/lpfc_scsi.c (revision 8730046c)
1 /*******************************************************************
2  * This file is part of the Emulex Linux Device Driver for         *
3  * Fibre Channel Host Bus Adapters.                                *
4  * Copyright (C) 2004-2016 Emulex.  All rights reserved.           *
5  * EMULEX and SLI are trademarks of Emulex.                        *
6  * www.emulex.com                                                  *
7  * Portions Copyright (C) 2004-2005 Christoph Hellwig              *
8  *                                                                 *
9  * This program is free software; you can redistribute it and/or   *
10  * modify it under the terms of version 2 of the GNU General       *
11  * Public License as published by the Free Software Foundation.    *
12  * This program is distributed in the hope that it will be useful. *
13  * ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND          *
14  * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,  *
15  * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE      *
16  * DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD *
17  * TO BE LEGALLY INVALID.  See the GNU General Public License for  *
18  * more details, a copy of which can be found in the file COPYING  *
19  * included with this package.                                     *
20  *******************************************************************/
21 #include <linux/pci.h>
22 #include <linux/slab.h>
23 #include <linux/interrupt.h>
24 #include <linux/export.h>
25 #include <linux/delay.h>
26 #include <asm/unaligned.h>
27 #include <linux/crc-t10dif.h>
28 #include <net/checksum.h>
29 
30 #include <scsi/scsi.h>
31 #include <scsi/scsi_device.h>
32 #include <scsi/scsi_eh.h>
33 #include <scsi/scsi_host.h>
34 #include <scsi/scsi_tcq.h>
35 #include <scsi/scsi_transport_fc.h>
36 
37 #include "lpfc_version.h"
38 #include "lpfc_hw4.h"
39 #include "lpfc_hw.h"
40 #include "lpfc_sli.h"
41 #include "lpfc_sli4.h"
42 #include "lpfc_nl.h"
43 #include "lpfc_disc.h"
44 #include "lpfc.h"
45 #include "lpfc_scsi.h"
46 #include "lpfc_logmsg.h"
47 #include "lpfc_crtn.h"
48 #include "lpfc_vport.h"
49 
50 #define LPFC_RESET_WAIT  2
51 #define LPFC_ABORT_WAIT  2
52 
53 int _dump_buf_done = 1;
54 
55 static char *dif_op_str[] = {
56 	"PROT_NORMAL",
57 	"PROT_READ_INSERT",
58 	"PROT_WRITE_STRIP",
59 	"PROT_READ_STRIP",
60 	"PROT_WRITE_INSERT",
61 	"PROT_READ_PASS",
62 	"PROT_WRITE_PASS",
63 };
64 
65 struct scsi_dif_tuple {
66 	__be16 guard_tag;       /* Checksum */
67 	__be16 app_tag;         /* Opaque storage */
68 	__be32 ref_tag;         /* Target LBA or indirect LBA */
69 };
70 
71 static struct lpfc_rport_data *
72 lpfc_rport_data_from_scsi_device(struct scsi_device *sdev)
73 {
74 	struct lpfc_vport *vport = (struct lpfc_vport *)sdev->host->hostdata;
75 
76 	if (vport->phba->cfg_fof)
77 		return ((struct lpfc_device_data *)sdev->hostdata)->rport_data;
78 	else
79 		return (struct lpfc_rport_data *)sdev->hostdata;
80 }
81 
82 static void
83 lpfc_release_scsi_buf_s4(struct lpfc_hba *phba, struct lpfc_scsi_buf *psb);
84 static void
85 lpfc_release_scsi_buf_s3(struct lpfc_hba *phba, struct lpfc_scsi_buf *psb);
86 static int
87 lpfc_prot_group_type(struct lpfc_hba *phba, struct scsi_cmnd *sc);
88 
89 static void
90 lpfc_debug_save_data(struct lpfc_hba *phba, struct scsi_cmnd *cmnd)
91 {
92 	void *src, *dst;
93 	struct scatterlist *sgde = scsi_sglist(cmnd);
94 
95 	if (!_dump_buf_data) {
96 		lpfc_printf_log(phba, KERN_ERR, LOG_BG,
97 			"9050 BLKGRD: ERROR %s _dump_buf_data is NULL\n",
98 				__func__);
99 		return;
100 	}
101 
102 
103 	if (!sgde) {
104 		lpfc_printf_log(phba, KERN_ERR, LOG_BG,
105 			"9051 BLKGRD: ERROR: data scatterlist is null\n");
106 		return;
107 	}
108 
109 	dst = (void *) _dump_buf_data;
110 	while (sgde) {
111 		src = sg_virt(sgde);
112 		memcpy(dst, src, sgde->length);
113 		dst += sgde->length;
114 		sgde = sg_next(sgde);
115 	}
116 }
117 
118 static void
119 lpfc_debug_save_dif(struct lpfc_hba *phba, struct scsi_cmnd *cmnd)
120 {
121 	void *src, *dst;
122 	struct scatterlist *sgde = scsi_prot_sglist(cmnd);
123 
124 	if (!_dump_buf_dif) {
125 		lpfc_printf_log(phba, KERN_ERR, LOG_BG,
126 			"9052 BLKGRD: ERROR %s _dump_buf_data is NULL\n",
127 				__func__);
128 		return;
129 	}
130 
131 	if (!sgde) {
132 		lpfc_printf_log(phba, KERN_ERR, LOG_BG,
133 			"9053 BLKGRD: ERROR: prot scatterlist is null\n");
134 		return;
135 	}
136 
137 	dst = _dump_buf_dif;
138 	while (sgde) {
139 		src = sg_virt(sgde);
140 		memcpy(dst, src, sgde->length);
141 		dst += sgde->length;
142 		sgde = sg_next(sgde);
143 	}
144 }
145 
146 static inline unsigned
147 lpfc_cmd_blksize(struct scsi_cmnd *sc)
148 {
149 	return sc->device->sector_size;
150 }
151 
152 #define LPFC_CHECK_PROTECT_GUARD	1
153 #define LPFC_CHECK_PROTECT_REF		2
154 static inline unsigned
155 lpfc_cmd_protect(struct scsi_cmnd *sc, int flag)
156 {
157 	return 1;
158 }
159 
160 static inline unsigned
161 lpfc_cmd_guard_csum(struct scsi_cmnd *sc)
162 {
163 	if (lpfc_prot_group_type(NULL, sc) == LPFC_PG_TYPE_NO_DIF)
164 		return 0;
165 	if (scsi_host_get_guard(sc->device->host) == SHOST_DIX_GUARD_IP)
166 		return 1;
167 	return 0;
168 }
169 
170 /**
171  * lpfc_sli4_set_rsp_sgl_last - Set the last bit in the response sge.
172  * @phba: Pointer to HBA object.
173  * @lpfc_cmd: lpfc scsi command object pointer.
174  *
175  * This function is called from the lpfc_prep_task_mgmt_cmd function to
176  * set the last bit in the response sge entry.
177  **/
178 static void
179 lpfc_sli4_set_rsp_sgl_last(struct lpfc_hba *phba,
180 				struct lpfc_scsi_buf *lpfc_cmd)
181 {
182 	struct sli4_sge *sgl = (struct sli4_sge *)lpfc_cmd->fcp_bpl;
183 	if (sgl) {
184 		sgl += 1;
185 		sgl->word2 = le32_to_cpu(sgl->word2);
186 		bf_set(lpfc_sli4_sge_last, sgl, 1);
187 		sgl->word2 = cpu_to_le32(sgl->word2);
188 	}
189 }
190 
191 /**
192  * lpfc_update_stats - Update statistical data for the command completion
193  * @phba: Pointer to HBA object.
194  * @lpfc_cmd: lpfc scsi command object pointer.
195  *
196  * This function is called when there is a command completion and this
197  * function updates the statistical data for the command completion.
198  **/
199 static void
200 lpfc_update_stats(struct lpfc_hba *phba, struct  lpfc_scsi_buf *lpfc_cmd)
201 {
202 	struct lpfc_rport_data *rdata = lpfc_cmd->rdata;
203 	struct lpfc_nodelist *pnode = rdata->pnode;
204 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
205 	unsigned long flags;
206 	struct Scsi_Host  *shost = cmd->device->host;
207 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
208 	unsigned long latency;
209 	int i;
210 
211 	if (cmd->result)
212 		return;
213 
214 	latency = jiffies_to_msecs((long)jiffies - (long)lpfc_cmd->start_time);
215 
216 	spin_lock_irqsave(shost->host_lock, flags);
217 	if (!vport->stat_data_enabled ||
218 		vport->stat_data_blocked ||
219 		!pnode ||
220 		!pnode->lat_data ||
221 		(phba->bucket_type == LPFC_NO_BUCKET)) {
222 		spin_unlock_irqrestore(shost->host_lock, flags);
223 		return;
224 	}
225 
226 	if (phba->bucket_type == LPFC_LINEAR_BUCKET) {
227 		i = (latency + phba->bucket_step - 1 - phba->bucket_base)/
228 			phba->bucket_step;
229 		/* check array subscript bounds */
230 		if (i < 0)
231 			i = 0;
232 		else if (i >= LPFC_MAX_BUCKET_COUNT)
233 			i = LPFC_MAX_BUCKET_COUNT - 1;
234 	} else {
235 		for (i = 0; i < LPFC_MAX_BUCKET_COUNT-1; i++)
236 			if (latency <= (phba->bucket_base +
237 				((1<<i)*phba->bucket_step)))
238 				break;
239 	}
240 
241 	pnode->lat_data[i].cmd_count++;
242 	spin_unlock_irqrestore(shost->host_lock, flags);
243 }
244 
245 /**
246  * lpfc_rampdown_queue_depth - Post RAMP_DOWN_QUEUE event to worker thread
247  * @phba: The Hba for which this call is being executed.
248  *
249  * This routine is called when there is resource error in driver or firmware.
250  * This routine posts WORKER_RAMP_DOWN_QUEUE event for @phba. This routine
251  * posts at most 1 event each second. This routine wakes up worker thread of
252  * @phba to process WORKER_RAM_DOWN_EVENT event.
253  *
254  * This routine should be called with no lock held.
255  **/
256 void
257 lpfc_rampdown_queue_depth(struct lpfc_hba *phba)
258 {
259 	unsigned long flags;
260 	uint32_t evt_posted;
261 	unsigned long expires;
262 
263 	spin_lock_irqsave(&phba->hbalock, flags);
264 	atomic_inc(&phba->num_rsrc_err);
265 	phba->last_rsrc_error_time = jiffies;
266 
267 	expires = phba->last_ramp_down_time + QUEUE_RAMP_DOWN_INTERVAL;
268 	if (time_after(expires, jiffies)) {
269 		spin_unlock_irqrestore(&phba->hbalock, flags);
270 		return;
271 	}
272 
273 	phba->last_ramp_down_time = jiffies;
274 
275 	spin_unlock_irqrestore(&phba->hbalock, flags);
276 
277 	spin_lock_irqsave(&phba->pport->work_port_lock, flags);
278 	evt_posted = phba->pport->work_port_events & WORKER_RAMP_DOWN_QUEUE;
279 	if (!evt_posted)
280 		phba->pport->work_port_events |= WORKER_RAMP_DOWN_QUEUE;
281 	spin_unlock_irqrestore(&phba->pport->work_port_lock, flags);
282 
283 	if (!evt_posted)
284 		lpfc_worker_wake_up(phba);
285 	return;
286 }
287 
288 /**
289  * lpfc_ramp_down_queue_handler - WORKER_RAMP_DOWN_QUEUE event handler
290  * @phba: The Hba for which this call is being executed.
291  *
292  * This routine is called to  process WORKER_RAMP_DOWN_QUEUE event for worker
293  * thread.This routine reduces queue depth for all scsi device on each vport
294  * associated with @phba.
295  **/
296 void
297 lpfc_ramp_down_queue_handler(struct lpfc_hba *phba)
298 {
299 	struct lpfc_vport **vports;
300 	struct Scsi_Host  *shost;
301 	struct scsi_device *sdev;
302 	unsigned long new_queue_depth;
303 	unsigned long num_rsrc_err, num_cmd_success;
304 	int i;
305 
306 	num_rsrc_err = atomic_read(&phba->num_rsrc_err);
307 	num_cmd_success = atomic_read(&phba->num_cmd_success);
308 
309 	/*
310 	 * The error and success command counters are global per
311 	 * driver instance.  If another handler has already
312 	 * operated on this error event, just exit.
313 	 */
314 	if (num_rsrc_err == 0)
315 		return;
316 
317 	vports = lpfc_create_vport_work_array(phba);
318 	if (vports != NULL)
319 		for (i = 0; i <= phba->max_vports && vports[i] != NULL; i++) {
320 			shost = lpfc_shost_from_vport(vports[i]);
321 			shost_for_each_device(sdev, shost) {
322 				new_queue_depth =
323 					sdev->queue_depth * num_rsrc_err /
324 					(num_rsrc_err + num_cmd_success);
325 				if (!new_queue_depth)
326 					new_queue_depth = sdev->queue_depth - 1;
327 				else
328 					new_queue_depth = sdev->queue_depth -
329 								new_queue_depth;
330 				scsi_change_queue_depth(sdev, new_queue_depth);
331 			}
332 		}
333 	lpfc_destroy_vport_work_array(phba, vports);
334 	atomic_set(&phba->num_rsrc_err, 0);
335 	atomic_set(&phba->num_cmd_success, 0);
336 }
337 
338 /**
339  * lpfc_scsi_dev_block - set all scsi hosts to block state
340  * @phba: Pointer to HBA context object.
341  *
342  * This function walks vport list and set each SCSI host to block state
343  * by invoking fc_remote_port_delete() routine. This function is invoked
344  * with EEH when device's PCI slot has been permanently disabled.
345  **/
346 void
347 lpfc_scsi_dev_block(struct lpfc_hba *phba)
348 {
349 	struct lpfc_vport **vports;
350 	struct Scsi_Host  *shost;
351 	struct scsi_device *sdev;
352 	struct fc_rport *rport;
353 	int i;
354 
355 	vports = lpfc_create_vport_work_array(phba);
356 	if (vports != NULL)
357 		for (i = 0; i <= phba->max_vports && vports[i] != NULL; i++) {
358 			shost = lpfc_shost_from_vport(vports[i]);
359 			shost_for_each_device(sdev, shost) {
360 				rport = starget_to_rport(scsi_target(sdev));
361 				fc_remote_port_delete(rport);
362 			}
363 		}
364 	lpfc_destroy_vport_work_array(phba, vports);
365 }
366 
367 /**
368  * lpfc_new_scsi_buf_s3 - Scsi buffer allocator for HBA with SLI3 IF spec
369  * @vport: The virtual port for which this call being executed.
370  * @num_to_allocate: The requested number of buffers to allocate.
371  *
372  * This routine allocates a scsi buffer for device with SLI-3 interface spec,
373  * the scsi buffer contains all the necessary information needed to initiate
374  * a SCSI I/O. The non-DMAable buffer region contains information to build
375  * the IOCB. The DMAable region contains memory for the FCP CMND, FCP RSP,
376  * and the initial BPL. In addition to allocating memory, the FCP CMND and
377  * FCP RSP BDEs are setup in the BPL and the BPL BDE is setup in the IOCB.
378  *
379  * Return codes:
380  *   int - number of scsi buffers that were allocated.
381  *   0 = failure, less than num_to_alloc is a partial failure.
382  **/
383 static int
384 lpfc_new_scsi_buf_s3(struct lpfc_vport *vport, int num_to_alloc)
385 {
386 	struct lpfc_hba *phba = vport->phba;
387 	struct lpfc_scsi_buf *psb;
388 	struct ulp_bde64 *bpl;
389 	IOCB_t *iocb;
390 	dma_addr_t pdma_phys_fcp_cmd;
391 	dma_addr_t pdma_phys_fcp_rsp;
392 	dma_addr_t pdma_phys_bpl;
393 	uint16_t iotag;
394 	int bcnt, bpl_size;
395 
396 	bpl_size = phba->cfg_sg_dma_buf_size -
397 		(sizeof(struct fcp_cmnd) + sizeof(struct fcp_rsp));
398 
399 	lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
400 			 "9067 ALLOC %d scsi_bufs: %d (%d + %d + %d)\n",
401 			 num_to_alloc, phba->cfg_sg_dma_buf_size,
402 			 (int)sizeof(struct fcp_cmnd),
403 			 (int)sizeof(struct fcp_rsp), bpl_size);
404 
405 	for (bcnt = 0; bcnt < num_to_alloc; bcnt++) {
406 		psb = kzalloc(sizeof(struct lpfc_scsi_buf), GFP_KERNEL);
407 		if (!psb)
408 			break;
409 
410 		/*
411 		 * Get memory from the pci pool to map the virt space to pci
412 		 * bus space for an I/O.  The DMA buffer includes space for the
413 		 * struct fcp_cmnd, struct fcp_rsp and the number of bde's
414 		 * necessary to support the sg_tablesize.
415 		 */
416 		psb->data = pci_pool_zalloc(phba->lpfc_scsi_dma_buf_pool,
417 					GFP_KERNEL, &psb->dma_handle);
418 		if (!psb->data) {
419 			kfree(psb);
420 			break;
421 		}
422 
423 
424 		/* Allocate iotag for psb->cur_iocbq. */
425 		iotag = lpfc_sli_next_iotag(phba, &psb->cur_iocbq);
426 		if (iotag == 0) {
427 			pci_pool_free(phba->lpfc_scsi_dma_buf_pool,
428 					psb->data, psb->dma_handle);
429 			kfree(psb);
430 			break;
431 		}
432 		psb->cur_iocbq.iocb_flag |= LPFC_IO_FCP;
433 
434 		psb->fcp_cmnd = psb->data;
435 		psb->fcp_rsp = psb->data + sizeof(struct fcp_cmnd);
436 		psb->fcp_bpl = psb->data + sizeof(struct fcp_cmnd) +
437 			sizeof(struct fcp_rsp);
438 
439 		/* Initialize local short-hand pointers. */
440 		bpl = psb->fcp_bpl;
441 		pdma_phys_fcp_cmd = psb->dma_handle;
442 		pdma_phys_fcp_rsp = psb->dma_handle + sizeof(struct fcp_cmnd);
443 		pdma_phys_bpl = psb->dma_handle + sizeof(struct fcp_cmnd) +
444 			sizeof(struct fcp_rsp);
445 
446 		/*
447 		 * The first two bdes are the FCP_CMD and FCP_RSP. The balance
448 		 * are sg list bdes.  Initialize the first two and leave the
449 		 * rest for queuecommand.
450 		 */
451 		bpl[0].addrHigh = le32_to_cpu(putPaddrHigh(pdma_phys_fcp_cmd));
452 		bpl[0].addrLow = le32_to_cpu(putPaddrLow(pdma_phys_fcp_cmd));
453 		bpl[0].tus.f.bdeSize = sizeof(struct fcp_cmnd);
454 		bpl[0].tus.f.bdeFlags = BUFF_TYPE_BDE_64;
455 		bpl[0].tus.w = le32_to_cpu(bpl[0].tus.w);
456 
457 		/* Setup the physical region for the FCP RSP */
458 		bpl[1].addrHigh = le32_to_cpu(putPaddrHigh(pdma_phys_fcp_rsp));
459 		bpl[1].addrLow = le32_to_cpu(putPaddrLow(pdma_phys_fcp_rsp));
460 		bpl[1].tus.f.bdeSize = sizeof(struct fcp_rsp);
461 		bpl[1].tus.f.bdeFlags = BUFF_TYPE_BDE_64;
462 		bpl[1].tus.w = le32_to_cpu(bpl[1].tus.w);
463 
464 		/*
465 		 * Since the IOCB for the FCP I/O is built into this
466 		 * lpfc_scsi_buf, initialize it with all known data now.
467 		 */
468 		iocb = &psb->cur_iocbq.iocb;
469 		iocb->un.fcpi64.bdl.ulpIoTag32 = 0;
470 		if ((phba->sli_rev == 3) &&
471 				!(phba->sli3_options & LPFC_SLI3_BG_ENABLED)) {
472 			/* fill in immediate fcp command BDE */
473 			iocb->un.fcpi64.bdl.bdeFlags = BUFF_TYPE_BDE_IMMED;
474 			iocb->un.fcpi64.bdl.bdeSize = sizeof(struct fcp_cmnd);
475 			iocb->un.fcpi64.bdl.addrLow = offsetof(IOCB_t,
476 					unsli3.fcp_ext.icd);
477 			iocb->un.fcpi64.bdl.addrHigh = 0;
478 			iocb->ulpBdeCount = 0;
479 			iocb->ulpLe = 0;
480 			/* fill in response BDE */
481 			iocb->unsli3.fcp_ext.rbde.tus.f.bdeFlags =
482 							BUFF_TYPE_BDE_64;
483 			iocb->unsli3.fcp_ext.rbde.tus.f.bdeSize =
484 				sizeof(struct fcp_rsp);
485 			iocb->unsli3.fcp_ext.rbde.addrLow =
486 				putPaddrLow(pdma_phys_fcp_rsp);
487 			iocb->unsli3.fcp_ext.rbde.addrHigh =
488 				putPaddrHigh(pdma_phys_fcp_rsp);
489 		} else {
490 			iocb->un.fcpi64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
491 			iocb->un.fcpi64.bdl.bdeSize =
492 					(2 * sizeof(struct ulp_bde64));
493 			iocb->un.fcpi64.bdl.addrLow =
494 					putPaddrLow(pdma_phys_bpl);
495 			iocb->un.fcpi64.bdl.addrHigh =
496 					putPaddrHigh(pdma_phys_bpl);
497 			iocb->ulpBdeCount = 1;
498 			iocb->ulpLe = 1;
499 		}
500 		iocb->ulpClass = CLASS3;
501 		psb->status = IOSTAT_SUCCESS;
502 		/* Put it back into the SCSI buffer list */
503 		psb->cur_iocbq.context1  = psb;
504 		lpfc_release_scsi_buf_s3(phba, psb);
505 
506 	}
507 
508 	return bcnt;
509 }
510 
511 /**
512  * lpfc_sli4_vport_delete_fcp_xri_aborted -Remove all ndlp references for vport
513  * @vport: pointer to lpfc vport data structure.
514  *
515  * This routine is invoked by the vport cleanup for deletions and the cleanup
516  * for an ndlp on removal.
517  **/
518 void
519 lpfc_sli4_vport_delete_fcp_xri_aborted(struct lpfc_vport *vport)
520 {
521 	struct lpfc_hba *phba = vport->phba;
522 	struct lpfc_scsi_buf *psb, *next_psb;
523 	unsigned long iflag = 0;
524 
525 	spin_lock_irqsave(&phba->hbalock, iflag);
526 	spin_lock(&phba->sli4_hba.abts_scsi_buf_list_lock);
527 	list_for_each_entry_safe(psb, next_psb,
528 				&phba->sli4_hba.lpfc_abts_scsi_buf_list, list) {
529 		if (psb->rdata && psb->rdata->pnode
530 			&& psb->rdata->pnode->vport == vport)
531 			psb->rdata = NULL;
532 	}
533 	spin_unlock(&phba->sli4_hba.abts_scsi_buf_list_lock);
534 	spin_unlock_irqrestore(&phba->hbalock, iflag);
535 }
536 
537 /**
538  * lpfc_sli4_fcp_xri_aborted - Fast-path process of fcp xri abort
539  * @phba: pointer to lpfc hba data structure.
540  * @axri: pointer to the fcp xri abort wcqe structure.
541  *
542  * This routine is invoked by the worker thread to process a SLI4 fast-path
543  * FCP aborted xri.
544  **/
545 void
546 lpfc_sli4_fcp_xri_aborted(struct lpfc_hba *phba,
547 			  struct sli4_wcqe_xri_aborted *axri)
548 {
549 	uint16_t xri = bf_get(lpfc_wcqe_xa_xri, axri);
550 	uint16_t rxid = bf_get(lpfc_wcqe_xa_remote_xid, axri);
551 	struct lpfc_scsi_buf *psb, *next_psb;
552 	unsigned long iflag = 0;
553 	struct lpfc_iocbq *iocbq;
554 	int i;
555 	struct lpfc_nodelist *ndlp;
556 	int rrq_empty = 0;
557 	struct lpfc_sli_ring *pring = &phba->sli.ring[LPFC_ELS_RING];
558 
559 	spin_lock_irqsave(&phba->hbalock, iflag);
560 	spin_lock(&phba->sli4_hba.abts_scsi_buf_list_lock);
561 	list_for_each_entry_safe(psb, next_psb,
562 		&phba->sli4_hba.lpfc_abts_scsi_buf_list, list) {
563 		if (psb->cur_iocbq.sli4_xritag == xri) {
564 			list_del(&psb->list);
565 			psb->exch_busy = 0;
566 			psb->status = IOSTAT_SUCCESS;
567 			spin_unlock(
568 				&phba->sli4_hba.abts_scsi_buf_list_lock);
569 			if (psb->rdata && psb->rdata->pnode)
570 				ndlp = psb->rdata->pnode;
571 			else
572 				ndlp = NULL;
573 
574 			rrq_empty = list_empty(&phba->active_rrq_list);
575 			spin_unlock_irqrestore(&phba->hbalock, iflag);
576 			if (ndlp) {
577 				lpfc_set_rrq_active(phba, ndlp,
578 					psb->cur_iocbq.sli4_lxritag, rxid, 1);
579 				lpfc_sli4_abts_err_handler(phba, ndlp, axri);
580 			}
581 			lpfc_release_scsi_buf_s4(phba, psb);
582 			if (rrq_empty)
583 				lpfc_worker_wake_up(phba);
584 			return;
585 		}
586 	}
587 	spin_unlock(&phba->sli4_hba.abts_scsi_buf_list_lock);
588 	for (i = 1; i <= phba->sli.last_iotag; i++) {
589 		iocbq = phba->sli.iocbq_lookup[i];
590 
591 		if (!(iocbq->iocb_flag &  LPFC_IO_FCP) ||
592 			(iocbq->iocb_flag & LPFC_IO_LIBDFC))
593 			continue;
594 		if (iocbq->sli4_xritag != xri)
595 			continue;
596 		psb = container_of(iocbq, struct lpfc_scsi_buf, cur_iocbq);
597 		psb->exch_busy = 0;
598 		spin_unlock_irqrestore(&phba->hbalock, iflag);
599 		if (!list_empty(&pring->txq))
600 			lpfc_worker_wake_up(phba);
601 		return;
602 
603 	}
604 	spin_unlock_irqrestore(&phba->hbalock, iflag);
605 }
606 
607 /**
608  * lpfc_sli4_post_scsi_sgl_list - Post blocks of scsi buffer sgls from a list
609  * @phba: pointer to lpfc hba data structure.
610  * @post_sblist: pointer to the scsi buffer list.
611  *
612  * This routine walks a list of scsi buffers that was passed in. It attempts
613  * to construct blocks of scsi buffer sgls which contains contiguous xris and
614  * uses the non-embedded SGL block post mailbox commands to post to the port.
615  * For single SCSI buffer sgl with non-contiguous xri, if any, it shall use
616  * embedded SGL post mailbox command for posting. The @post_sblist passed in
617  * must be local list, thus no lock is needed when manipulate the list.
618  *
619  * Returns: 0 = failure, non-zero number of successfully posted buffers.
620  **/
621 static int
622 lpfc_sli4_post_scsi_sgl_list(struct lpfc_hba *phba,
623 			     struct list_head *post_sblist, int sb_count)
624 {
625 	struct lpfc_scsi_buf *psb, *psb_next;
626 	int status, sgl_size;
627 	int post_cnt = 0, block_cnt = 0, num_posting = 0, num_posted = 0;
628 	dma_addr_t pdma_phys_bpl1;
629 	int last_xritag = NO_XRI;
630 	LIST_HEAD(prep_sblist);
631 	LIST_HEAD(blck_sblist);
632 	LIST_HEAD(scsi_sblist);
633 
634 	/* sanity check */
635 	if (sb_count <= 0)
636 		return -EINVAL;
637 
638 	sgl_size = phba->cfg_sg_dma_buf_size -
639 		(sizeof(struct fcp_cmnd) + sizeof(struct fcp_rsp));
640 
641 	list_for_each_entry_safe(psb, psb_next, post_sblist, list) {
642 		list_del_init(&psb->list);
643 		block_cnt++;
644 		if ((last_xritag != NO_XRI) &&
645 		    (psb->cur_iocbq.sli4_xritag != last_xritag + 1)) {
646 			/* a hole in xri block, form a sgl posting block */
647 			list_splice_init(&prep_sblist, &blck_sblist);
648 			post_cnt = block_cnt - 1;
649 			/* prepare list for next posting block */
650 			list_add_tail(&psb->list, &prep_sblist);
651 			block_cnt = 1;
652 		} else {
653 			/* prepare list for next posting block */
654 			list_add_tail(&psb->list, &prep_sblist);
655 			/* enough sgls for non-embed sgl mbox command */
656 			if (block_cnt == LPFC_NEMBED_MBOX_SGL_CNT) {
657 				list_splice_init(&prep_sblist, &blck_sblist);
658 				post_cnt = block_cnt;
659 				block_cnt = 0;
660 			}
661 		}
662 		num_posting++;
663 		last_xritag = psb->cur_iocbq.sli4_xritag;
664 
665 		/* end of repost sgl list condition for SCSI buffers */
666 		if (num_posting == sb_count) {
667 			if (post_cnt == 0) {
668 				/* last sgl posting block */
669 				list_splice_init(&prep_sblist, &blck_sblist);
670 				post_cnt = block_cnt;
671 			} else if (block_cnt == 1) {
672 				/* last single sgl with non-contiguous xri */
673 				if (sgl_size > SGL_PAGE_SIZE)
674 					pdma_phys_bpl1 = psb->dma_phys_bpl +
675 								SGL_PAGE_SIZE;
676 				else
677 					pdma_phys_bpl1 = 0;
678 				status = lpfc_sli4_post_sgl(phba,
679 						psb->dma_phys_bpl,
680 						pdma_phys_bpl1,
681 						psb->cur_iocbq.sli4_xritag);
682 				if (status) {
683 					/* failure, put on abort scsi list */
684 					psb->exch_busy = 1;
685 				} else {
686 					/* success, put on SCSI buffer list */
687 					psb->exch_busy = 0;
688 					psb->status = IOSTAT_SUCCESS;
689 					num_posted++;
690 				}
691 				/* success, put on SCSI buffer sgl list */
692 				list_add_tail(&psb->list, &scsi_sblist);
693 			}
694 		}
695 
696 		/* continue until a nembed page worth of sgls */
697 		if (post_cnt == 0)
698 			continue;
699 
700 		/* post block of SCSI buffer list sgls */
701 		status = lpfc_sli4_post_scsi_sgl_block(phba, &blck_sblist,
702 						       post_cnt);
703 
704 		/* don't reset xirtag due to hole in xri block */
705 		if (block_cnt == 0)
706 			last_xritag = NO_XRI;
707 
708 		/* reset SCSI buffer post count for next round of posting */
709 		post_cnt = 0;
710 
711 		/* put posted SCSI buffer-sgl posted on SCSI buffer sgl list */
712 		while (!list_empty(&blck_sblist)) {
713 			list_remove_head(&blck_sblist, psb,
714 					 struct lpfc_scsi_buf, list);
715 			if (status) {
716 				/* failure, put on abort scsi list */
717 				psb->exch_busy = 1;
718 			} else {
719 				/* success, put on SCSI buffer list */
720 				psb->exch_busy = 0;
721 				psb->status = IOSTAT_SUCCESS;
722 				num_posted++;
723 			}
724 			list_add_tail(&psb->list, &scsi_sblist);
725 		}
726 	}
727 	/* Push SCSI buffers with sgl posted to the availble list */
728 	while (!list_empty(&scsi_sblist)) {
729 		list_remove_head(&scsi_sblist, psb,
730 				 struct lpfc_scsi_buf, list);
731 		lpfc_release_scsi_buf_s4(phba, psb);
732 	}
733 	return num_posted;
734 }
735 
736 /**
737  * lpfc_sli4_repost_scsi_sgl_list - Repost all the allocated scsi buffer sgls
738  * @phba: pointer to lpfc hba data structure.
739  *
740  * This routine walks the list of scsi buffers that have been allocated and
741  * repost them to the port by using SGL block post. This is needed after a
742  * pci_function_reset/warm_start or start. The lpfc_hba_down_post_s4 routine
743  * is responsible for moving all scsi buffers on the lpfc_abts_scsi_sgl_list
744  * to the lpfc_scsi_buf_list. If the repost fails, reject all scsi buffers.
745  *
746  * Returns: 0 = success, non-zero failure.
747  **/
748 int
749 lpfc_sli4_repost_scsi_sgl_list(struct lpfc_hba *phba)
750 {
751 	LIST_HEAD(post_sblist);
752 	int num_posted, rc = 0;
753 
754 	/* get all SCSI buffers need to repost to a local list */
755 	spin_lock_irq(&phba->scsi_buf_list_get_lock);
756 	spin_lock(&phba->scsi_buf_list_put_lock);
757 	list_splice_init(&phba->lpfc_scsi_buf_list_get, &post_sblist);
758 	list_splice(&phba->lpfc_scsi_buf_list_put, &post_sblist);
759 	spin_unlock(&phba->scsi_buf_list_put_lock);
760 	spin_unlock_irq(&phba->scsi_buf_list_get_lock);
761 
762 	/* post the list of scsi buffer sgls to port if available */
763 	if (!list_empty(&post_sblist)) {
764 		num_posted = lpfc_sli4_post_scsi_sgl_list(phba, &post_sblist,
765 						phba->sli4_hba.scsi_xri_cnt);
766 		/* failed to post any scsi buffer, return error */
767 		if (num_posted == 0)
768 			rc = -EIO;
769 	}
770 	return rc;
771 }
772 
773 /**
774  * lpfc_new_scsi_buf_s4 - Scsi buffer allocator for HBA with SLI4 IF spec
775  * @vport: The virtual port for which this call being executed.
776  * @num_to_allocate: The requested number of buffers to allocate.
777  *
778  * This routine allocates scsi buffers for device with SLI-4 interface spec,
779  * the scsi buffer contains all the necessary information needed to initiate
780  * a SCSI I/O. After allocating up to @num_to_allocate SCSI buffers and put
781  * them on a list, it post them to the port by using SGL block post.
782  *
783  * Return codes:
784  *   int - number of scsi buffers that were allocated and posted.
785  *   0 = failure, less than num_to_alloc is a partial failure.
786  **/
787 static int
788 lpfc_new_scsi_buf_s4(struct lpfc_vport *vport, int num_to_alloc)
789 {
790 	struct lpfc_hba *phba = vport->phba;
791 	struct lpfc_scsi_buf *psb;
792 	struct sli4_sge *sgl;
793 	IOCB_t *iocb;
794 	dma_addr_t pdma_phys_fcp_cmd;
795 	dma_addr_t pdma_phys_fcp_rsp;
796 	dma_addr_t pdma_phys_bpl;
797 	uint16_t iotag, lxri = 0;
798 	int bcnt, num_posted, sgl_size;
799 	LIST_HEAD(prep_sblist);
800 	LIST_HEAD(post_sblist);
801 	LIST_HEAD(scsi_sblist);
802 
803 	sgl_size = phba->cfg_sg_dma_buf_size -
804 		(sizeof(struct fcp_cmnd) + sizeof(struct fcp_rsp));
805 
806 	lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
807 			 "9068 ALLOC %d scsi_bufs: %d (%d + %d + %d)\n",
808 			 num_to_alloc, phba->cfg_sg_dma_buf_size, sgl_size,
809 			 (int)sizeof(struct fcp_cmnd),
810 			 (int)sizeof(struct fcp_rsp));
811 
812 	for (bcnt = 0; bcnt < num_to_alloc; bcnt++) {
813 		psb = kzalloc(sizeof(struct lpfc_scsi_buf), GFP_KERNEL);
814 		if (!psb)
815 			break;
816 		/*
817 		 * Get memory from the pci pool to map the virt space to
818 		 * pci bus space for an I/O. The DMA buffer includes space
819 		 * for the struct fcp_cmnd, struct fcp_rsp and the number
820 		 * of bde's necessary to support the sg_tablesize.
821 		 */
822 		psb->data = pci_pool_zalloc(phba->lpfc_scsi_dma_buf_pool,
823 						GFP_KERNEL, &psb->dma_handle);
824 		if (!psb->data) {
825 			kfree(psb);
826 			break;
827 		}
828 
829 		/*
830 		 * 4K Page alignment is CRITICAL to BlockGuard, double check
831 		 * to be sure.
832 		 */
833 		if (phba->cfg_enable_bg  && (((unsigned long)(psb->data) &
834 		    (unsigned long)(SLI4_PAGE_SIZE - 1)) != 0)) {
835 			pci_pool_free(phba->lpfc_scsi_dma_buf_pool,
836 				      psb->data, psb->dma_handle);
837 			kfree(psb);
838 			break;
839 		}
840 
841 
842 		lxri = lpfc_sli4_next_xritag(phba);
843 		if (lxri == NO_XRI) {
844 			pci_pool_free(phba->lpfc_scsi_dma_buf_pool,
845 			      psb->data, psb->dma_handle);
846 			kfree(psb);
847 			break;
848 		}
849 
850 		/* Allocate iotag for psb->cur_iocbq. */
851 		iotag = lpfc_sli_next_iotag(phba, &psb->cur_iocbq);
852 		if (iotag == 0) {
853 			pci_pool_free(phba->lpfc_scsi_dma_buf_pool,
854 				psb->data, psb->dma_handle);
855 			kfree(psb);
856 			lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
857 					"3368 Failed to allocate IOTAG for"
858 					" XRI:0x%x\n", lxri);
859 			lpfc_sli4_free_xri(phba, lxri);
860 			break;
861 		}
862 		psb->cur_iocbq.sli4_lxritag = lxri;
863 		psb->cur_iocbq.sli4_xritag = phba->sli4_hba.xri_ids[lxri];
864 		psb->cur_iocbq.iocb_flag |= LPFC_IO_FCP;
865 		psb->fcp_bpl = psb->data;
866 		psb->fcp_cmnd = (psb->data + sgl_size);
867 		psb->fcp_rsp = (struct fcp_rsp *)((uint8_t *)psb->fcp_cmnd +
868 					sizeof(struct fcp_cmnd));
869 
870 		/* Initialize local short-hand pointers. */
871 		sgl = (struct sli4_sge *)psb->fcp_bpl;
872 		pdma_phys_bpl = psb->dma_handle;
873 		pdma_phys_fcp_cmd = (psb->dma_handle + sgl_size);
874 		pdma_phys_fcp_rsp = pdma_phys_fcp_cmd + sizeof(struct fcp_cmnd);
875 
876 		/*
877 		 * The first two bdes are the FCP_CMD and FCP_RSP.
878 		 * The balance are sg list bdes. Initialize the
879 		 * first two and leave the rest for queuecommand.
880 		 */
881 		sgl->addr_hi = cpu_to_le32(putPaddrHigh(pdma_phys_fcp_cmd));
882 		sgl->addr_lo = cpu_to_le32(putPaddrLow(pdma_phys_fcp_cmd));
883 		sgl->word2 = le32_to_cpu(sgl->word2);
884 		bf_set(lpfc_sli4_sge_last, sgl, 0);
885 		sgl->word2 = cpu_to_le32(sgl->word2);
886 		sgl->sge_len = cpu_to_le32(sizeof(struct fcp_cmnd));
887 		sgl++;
888 
889 		/* Setup the physical region for the FCP RSP */
890 		sgl->addr_hi = cpu_to_le32(putPaddrHigh(pdma_phys_fcp_rsp));
891 		sgl->addr_lo = cpu_to_le32(putPaddrLow(pdma_phys_fcp_rsp));
892 		sgl->word2 = le32_to_cpu(sgl->word2);
893 		bf_set(lpfc_sli4_sge_last, sgl, 1);
894 		sgl->word2 = cpu_to_le32(sgl->word2);
895 		sgl->sge_len = cpu_to_le32(sizeof(struct fcp_rsp));
896 
897 		/*
898 		 * Since the IOCB for the FCP I/O is built into this
899 		 * lpfc_scsi_buf, initialize it with all known data now.
900 		 */
901 		iocb = &psb->cur_iocbq.iocb;
902 		iocb->un.fcpi64.bdl.ulpIoTag32 = 0;
903 		iocb->un.fcpi64.bdl.bdeFlags = BUFF_TYPE_BDE_64;
904 		/* setting the BLP size to 2 * sizeof BDE may not be correct.
905 		 * We are setting the bpl to point to out sgl. An sgl's
906 		 * entries are 16 bytes, a bpl entries are 12 bytes.
907 		 */
908 		iocb->un.fcpi64.bdl.bdeSize = sizeof(struct fcp_cmnd);
909 		iocb->un.fcpi64.bdl.addrLow = putPaddrLow(pdma_phys_fcp_cmd);
910 		iocb->un.fcpi64.bdl.addrHigh = putPaddrHigh(pdma_phys_fcp_cmd);
911 		iocb->ulpBdeCount = 1;
912 		iocb->ulpLe = 1;
913 		iocb->ulpClass = CLASS3;
914 		psb->cur_iocbq.context1 = psb;
915 		psb->dma_phys_bpl = pdma_phys_bpl;
916 
917 		/* add the scsi buffer to a post list */
918 		list_add_tail(&psb->list, &post_sblist);
919 		spin_lock_irq(&phba->scsi_buf_list_get_lock);
920 		phba->sli4_hba.scsi_xri_cnt++;
921 		spin_unlock_irq(&phba->scsi_buf_list_get_lock);
922 	}
923 	lpfc_printf_log(phba, KERN_INFO, LOG_BG,
924 			"3021 Allocate %d out of %d requested new SCSI "
925 			"buffers\n", bcnt, num_to_alloc);
926 
927 	/* post the list of scsi buffer sgls to port if available */
928 	if (!list_empty(&post_sblist))
929 		num_posted = lpfc_sli4_post_scsi_sgl_list(phba,
930 							  &post_sblist, bcnt);
931 	else
932 		num_posted = 0;
933 
934 	return num_posted;
935 }
936 
937 /**
938  * lpfc_new_scsi_buf - Wrapper funciton for scsi buffer allocator
939  * @vport: The virtual port for which this call being executed.
940  * @num_to_allocate: The requested number of buffers to allocate.
941  *
942  * This routine wraps the actual SCSI buffer allocator function pointer from
943  * the lpfc_hba struct.
944  *
945  * Return codes:
946  *   int - number of scsi buffers that were allocated.
947  *   0 = failure, less than num_to_alloc is a partial failure.
948  **/
949 static inline int
950 lpfc_new_scsi_buf(struct lpfc_vport *vport, int num_to_alloc)
951 {
952 	return vport->phba->lpfc_new_scsi_buf(vport, num_to_alloc);
953 }
954 
955 /**
956  * lpfc_get_scsi_buf_s3 - Get a scsi buffer from lpfc_scsi_buf_list of the HBA
957  * @phba: The HBA for which this call is being executed.
958  *
959  * This routine removes a scsi buffer from head of @phba lpfc_scsi_buf_list list
960  * and returns to caller.
961  *
962  * Return codes:
963  *   NULL - Error
964  *   Pointer to lpfc_scsi_buf - Success
965  **/
966 static struct lpfc_scsi_buf*
967 lpfc_get_scsi_buf_s3(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp)
968 {
969 	struct  lpfc_scsi_buf * lpfc_cmd = NULL;
970 	struct list_head *scsi_buf_list_get = &phba->lpfc_scsi_buf_list_get;
971 	unsigned long iflag = 0;
972 
973 	spin_lock_irqsave(&phba->scsi_buf_list_get_lock, iflag);
974 	list_remove_head(scsi_buf_list_get, lpfc_cmd, struct lpfc_scsi_buf,
975 			 list);
976 	if (!lpfc_cmd) {
977 		spin_lock(&phba->scsi_buf_list_put_lock);
978 		list_splice(&phba->lpfc_scsi_buf_list_put,
979 			    &phba->lpfc_scsi_buf_list_get);
980 		INIT_LIST_HEAD(&phba->lpfc_scsi_buf_list_put);
981 		list_remove_head(scsi_buf_list_get, lpfc_cmd,
982 				 struct lpfc_scsi_buf, list);
983 		spin_unlock(&phba->scsi_buf_list_put_lock);
984 	}
985 	spin_unlock_irqrestore(&phba->scsi_buf_list_get_lock, iflag);
986 	return  lpfc_cmd;
987 }
988 /**
989  * lpfc_get_scsi_buf_s4 - Get a scsi buffer from lpfc_scsi_buf_list of the HBA
990  * @phba: The HBA for which this call is being executed.
991  *
992  * This routine removes a scsi buffer from head of @phba lpfc_scsi_buf_list list
993  * and returns to caller.
994  *
995  * Return codes:
996  *   NULL - Error
997  *   Pointer to lpfc_scsi_buf - Success
998  **/
999 static struct lpfc_scsi_buf*
1000 lpfc_get_scsi_buf_s4(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp)
1001 {
1002 	struct lpfc_scsi_buf *lpfc_cmd, *lpfc_cmd_next;
1003 	unsigned long iflag = 0;
1004 	int found = 0;
1005 
1006 	spin_lock_irqsave(&phba->scsi_buf_list_get_lock, iflag);
1007 	list_for_each_entry_safe(lpfc_cmd, lpfc_cmd_next,
1008 				 &phba->lpfc_scsi_buf_list_get, list) {
1009 		if (lpfc_test_rrq_active(phba, ndlp,
1010 					 lpfc_cmd->cur_iocbq.sli4_lxritag))
1011 			continue;
1012 		list_del(&lpfc_cmd->list);
1013 		found = 1;
1014 		break;
1015 	}
1016 	if (!found) {
1017 		spin_lock(&phba->scsi_buf_list_put_lock);
1018 		list_splice(&phba->lpfc_scsi_buf_list_put,
1019 			    &phba->lpfc_scsi_buf_list_get);
1020 		INIT_LIST_HEAD(&phba->lpfc_scsi_buf_list_put);
1021 		spin_unlock(&phba->scsi_buf_list_put_lock);
1022 		list_for_each_entry_safe(lpfc_cmd, lpfc_cmd_next,
1023 					 &phba->lpfc_scsi_buf_list_get, list) {
1024 			if (lpfc_test_rrq_active(
1025 				phba, ndlp, lpfc_cmd->cur_iocbq.sli4_lxritag))
1026 				continue;
1027 			list_del(&lpfc_cmd->list);
1028 			found = 1;
1029 			break;
1030 		}
1031 	}
1032 	spin_unlock_irqrestore(&phba->scsi_buf_list_get_lock, iflag);
1033 	if (!found)
1034 		return NULL;
1035 	return  lpfc_cmd;
1036 }
1037 /**
1038  * lpfc_get_scsi_buf - Get a scsi buffer from lpfc_scsi_buf_list of the HBA
1039  * @phba: The HBA for which this call is being executed.
1040  *
1041  * This routine removes a scsi buffer from head of @phba lpfc_scsi_buf_list list
1042  * and returns to caller.
1043  *
1044  * Return codes:
1045  *   NULL - Error
1046  *   Pointer to lpfc_scsi_buf - Success
1047  **/
1048 static struct lpfc_scsi_buf*
1049 lpfc_get_scsi_buf(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp)
1050 {
1051 	return  phba->lpfc_get_scsi_buf(phba, ndlp);
1052 }
1053 
1054 /**
1055  * lpfc_release_scsi_buf - Return a scsi buffer back to hba scsi buf list
1056  * @phba: The Hba for which this call is being executed.
1057  * @psb: The scsi buffer which is being released.
1058  *
1059  * This routine releases @psb scsi buffer by adding it to tail of @phba
1060  * lpfc_scsi_buf_list list.
1061  **/
1062 static void
1063 lpfc_release_scsi_buf_s3(struct lpfc_hba *phba, struct lpfc_scsi_buf *psb)
1064 {
1065 	unsigned long iflag = 0;
1066 
1067 	psb->seg_cnt = 0;
1068 	psb->nonsg_phys = 0;
1069 	psb->prot_seg_cnt = 0;
1070 
1071 	spin_lock_irqsave(&phba->scsi_buf_list_put_lock, iflag);
1072 	psb->pCmd = NULL;
1073 	psb->cur_iocbq.iocb_flag = LPFC_IO_FCP;
1074 	list_add_tail(&psb->list, &phba->lpfc_scsi_buf_list_put);
1075 	spin_unlock_irqrestore(&phba->scsi_buf_list_put_lock, iflag);
1076 }
1077 
1078 /**
1079  * lpfc_release_scsi_buf_s4: Return a scsi buffer back to hba scsi buf list.
1080  * @phba: The Hba for which this call is being executed.
1081  * @psb: The scsi buffer which is being released.
1082  *
1083  * This routine releases @psb scsi buffer by adding it to tail of @phba
1084  * lpfc_scsi_buf_list list. For SLI4 XRI's are tied to the scsi buffer
1085  * and cannot be reused for at least RA_TOV amount of time if it was
1086  * aborted.
1087  **/
1088 static void
1089 lpfc_release_scsi_buf_s4(struct lpfc_hba *phba, struct lpfc_scsi_buf *psb)
1090 {
1091 	unsigned long iflag = 0;
1092 
1093 	psb->seg_cnt = 0;
1094 	psb->nonsg_phys = 0;
1095 	psb->prot_seg_cnt = 0;
1096 
1097 	if (psb->exch_busy) {
1098 		spin_lock_irqsave(&phba->sli4_hba.abts_scsi_buf_list_lock,
1099 					iflag);
1100 		psb->pCmd = NULL;
1101 		list_add_tail(&psb->list,
1102 			&phba->sli4_hba.lpfc_abts_scsi_buf_list);
1103 		spin_unlock_irqrestore(&phba->sli4_hba.abts_scsi_buf_list_lock,
1104 					iflag);
1105 	} else {
1106 		psb->pCmd = NULL;
1107 		psb->cur_iocbq.iocb_flag = LPFC_IO_FCP;
1108 		spin_lock_irqsave(&phba->scsi_buf_list_put_lock, iflag);
1109 		list_add_tail(&psb->list, &phba->lpfc_scsi_buf_list_put);
1110 		spin_unlock_irqrestore(&phba->scsi_buf_list_put_lock, iflag);
1111 	}
1112 }
1113 
1114 /**
1115  * lpfc_release_scsi_buf: Return a scsi buffer back to hba scsi buf list.
1116  * @phba: The Hba for which this call is being executed.
1117  * @psb: The scsi buffer which is being released.
1118  *
1119  * This routine releases @psb scsi buffer by adding it to tail of @phba
1120  * lpfc_scsi_buf_list list.
1121  **/
1122 static void
1123 lpfc_release_scsi_buf(struct lpfc_hba *phba, struct lpfc_scsi_buf *psb)
1124 {
1125 
1126 	phba->lpfc_release_scsi_buf(phba, psb);
1127 }
1128 
1129 /**
1130  * lpfc_scsi_prep_dma_buf_s3 - DMA mapping for scsi buffer to SLI3 IF spec
1131  * @phba: The Hba for which this call is being executed.
1132  * @lpfc_cmd: The scsi buffer which is going to be mapped.
1133  *
1134  * This routine does the pci dma mapping for scatter-gather list of scsi cmnd
1135  * field of @lpfc_cmd for device with SLI-3 interface spec. This routine scans
1136  * through sg elements and format the bde. This routine also initializes all
1137  * IOCB fields which are dependent on scsi command request buffer.
1138  *
1139  * Return codes:
1140  *   1 - Error
1141  *   0 - Success
1142  **/
1143 static int
1144 lpfc_scsi_prep_dma_buf_s3(struct lpfc_hba *phba, struct lpfc_scsi_buf *lpfc_cmd)
1145 {
1146 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
1147 	struct scatterlist *sgel = NULL;
1148 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
1149 	struct ulp_bde64 *bpl = lpfc_cmd->fcp_bpl;
1150 	struct lpfc_iocbq *iocbq = &lpfc_cmd->cur_iocbq;
1151 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
1152 	struct ulp_bde64 *data_bde = iocb_cmd->unsli3.fcp_ext.dbde;
1153 	dma_addr_t physaddr;
1154 	uint32_t num_bde = 0;
1155 	int nseg, datadir = scsi_cmnd->sc_data_direction;
1156 
1157 	/*
1158 	 * There are three possibilities here - use scatter-gather segment, use
1159 	 * the single mapping, or neither.  Start the lpfc command prep by
1160 	 * bumping the bpl beyond the fcp_cmnd and fcp_rsp regions to the first
1161 	 * data bde entry.
1162 	 */
1163 	bpl += 2;
1164 	if (scsi_sg_count(scsi_cmnd)) {
1165 		/*
1166 		 * The driver stores the segment count returned from pci_map_sg
1167 		 * because this a count of dma-mappings used to map the use_sg
1168 		 * pages.  They are not guaranteed to be the same for those
1169 		 * architectures that implement an IOMMU.
1170 		 */
1171 
1172 		nseg = dma_map_sg(&phba->pcidev->dev, scsi_sglist(scsi_cmnd),
1173 				  scsi_sg_count(scsi_cmnd), datadir);
1174 		if (unlikely(!nseg))
1175 			return 1;
1176 
1177 		lpfc_cmd->seg_cnt = nseg;
1178 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt) {
1179 			lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1180 				"9064 BLKGRD: %s: Too many sg segments from "
1181 			       "dma_map_sg.  Config %d, seg_cnt %d\n",
1182 			       __func__, phba->cfg_sg_seg_cnt,
1183 			       lpfc_cmd->seg_cnt);
1184 			lpfc_cmd->seg_cnt = 0;
1185 			scsi_dma_unmap(scsi_cmnd);
1186 			return 1;
1187 		}
1188 
1189 		/*
1190 		 * The driver established a maximum scatter-gather segment count
1191 		 * during probe that limits the number of sg elements in any
1192 		 * single scsi command.  Just run through the seg_cnt and format
1193 		 * the bde's.
1194 		 * When using SLI-3 the driver will try to fit all the BDEs into
1195 		 * the IOCB. If it can't then the BDEs get added to a BPL as it
1196 		 * does for SLI-2 mode.
1197 		 */
1198 		scsi_for_each_sg(scsi_cmnd, sgel, nseg, num_bde) {
1199 			physaddr = sg_dma_address(sgel);
1200 			if (phba->sli_rev == 3 &&
1201 			    !(phba->sli3_options & LPFC_SLI3_BG_ENABLED) &&
1202 			    !(iocbq->iocb_flag & DSS_SECURITY_OP) &&
1203 			    nseg <= LPFC_EXT_DATA_BDE_COUNT) {
1204 				data_bde->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
1205 				data_bde->tus.f.bdeSize = sg_dma_len(sgel);
1206 				data_bde->addrLow = putPaddrLow(physaddr);
1207 				data_bde->addrHigh = putPaddrHigh(physaddr);
1208 				data_bde++;
1209 			} else {
1210 				bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
1211 				bpl->tus.f.bdeSize = sg_dma_len(sgel);
1212 				bpl->tus.w = le32_to_cpu(bpl->tus.w);
1213 				bpl->addrLow =
1214 					le32_to_cpu(putPaddrLow(physaddr));
1215 				bpl->addrHigh =
1216 					le32_to_cpu(putPaddrHigh(physaddr));
1217 				bpl++;
1218 			}
1219 		}
1220 	}
1221 
1222 	/*
1223 	 * Finish initializing those IOCB fields that are dependent on the
1224 	 * scsi_cmnd request_buffer.  Note that for SLI-2 the bdeSize is
1225 	 * explicitly reinitialized and for SLI-3 the extended bde count is
1226 	 * explicitly reinitialized since all iocb memory resources are reused.
1227 	 */
1228 	if (phba->sli_rev == 3 &&
1229 	    !(phba->sli3_options & LPFC_SLI3_BG_ENABLED) &&
1230 	    !(iocbq->iocb_flag & DSS_SECURITY_OP)) {
1231 		if (num_bde > LPFC_EXT_DATA_BDE_COUNT) {
1232 			/*
1233 			 * The extended IOCB format can only fit 3 BDE or a BPL.
1234 			 * This I/O has more than 3 BDE so the 1st data bde will
1235 			 * be a BPL that is filled in here.
1236 			 */
1237 			physaddr = lpfc_cmd->dma_handle;
1238 			data_bde->tus.f.bdeFlags = BUFF_TYPE_BLP_64;
1239 			data_bde->tus.f.bdeSize = (num_bde *
1240 						   sizeof(struct ulp_bde64));
1241 			physaddr += (sizeof(struct fcp_cmnd) +
1242 				     sizeof(struct fcp_rsp) +
1243 				     (2 * sizeof(struct ulp_bde64)));
1244 			data_bde->addrHigh = putPaddrHigh(physaddr);
1245 			data_bde->addrLow = putPaddrLow(physaddr);
1246 			/* ebde count includes the response bde and data bpl */
1247 			iocb_cmd->unsli3.fcp_ext.ebde_count = 2;
1248 		} else {
1249 			/* ebde count includes the response bde and data bdes */
1250 			iocb_cmd->unsli3.fcp_ext.ebde_count = (num_bde + 1);
1251 		}
1252 	} else {
1253 		iocb_cmd->un.fcpi64.bdl.bdeSize =
1254 			((num_bde + 2) * sizeof(struct ulp_bde64));
1255 		iocb_cmd->unsli3.fcp_ext.ebde_count = (num_bde + 1);
1256 	}
1257 	fcp_cmnd->fcpDl = cpu_to_be32(scsi_bufflen(scsi_cmnd));
1258 
1259 	/*
1260 	 * Due to difference in data length between DIF/non-DIF paths,
1261 	 * we need to set word 4 of IOCB here
1262 	 */
1263 	iocb_cmd->un.fcpi.fcpi_parm = scsi_bufflen(scsi_cmnd);
1264 	return 0;
1265 }
1266 
1267 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1268 
1269 /* Return BG_ERR_INIT if error injection is detected by Initiator */
1270 #define BG_ERR_INIT	0x1
1271 /* Return BG_ERR_TGT if error injection is detected by Target */
1272 #define BG_ERR_TGT	0x2
1273 /* Return BG_ERR_SWAP if swapping CSUM<-->CRC is required for error injection */
1274 #define BG_ERR_SWAP	0x10
1275 /**
1276  * Return BG_ERR_CHECK if disabling Guard/Ref/App checking is required for
1277  * error injection
1278  **/
1279 #define BG_ERR_CHECK	0x20
1280 
1281 /**
1282  * lpfc_bg_err_inject - Determine if we should inject an error
1283  * @phba: The Hba for which this call is being executed.
1284  * @sc: The SCSI command to examine
1285  * @reftag: (out) BlockGuard reference tag for transmitted data
1286  * @apptag: (out) BlockGuard application tag for transmitted data
1287  * @new_guard (in) Value to replace CRC with if needed
1288  *
1289  * Returns BG_ERR_* bit mask or 0 if request ignored
1290  **/
1291 static int
1292 lpfc_bg_err_inject(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1293 		uint32_t *reftag, uint16_t *apptag, uint32_t new_guard)
1294 {
1295 	struct scatterlist *sgpe; /* s/g prot entry */
1296 	struct lpfc_scsi_buf *lpfc_cmd = NULL;
1297 	struct scsi_dif_tuple *src = NULL;
1298 	struct lpfc_nodelist *ndlp;
1299 	struct lpfc_rport_data *rdata;
1300 	uint32_t op = scsi_get_prot_op(sc);
1301 	uint32_t blksize;
1302 	uint32_t numblks;
1303 	sector_t lba;
1304 	int rc = 0;
1305 	int blockoff = 0;
1306 
1307 	if (op == SCSI_PROT_NORMAL)
1308 		return 0;
1309 
1310 	sgpe = scsi_prot_sglist(sc);
1311 	lba = scsi_get_lba(sc);
1312 
1313 	/* First check if we need to match the LBA */
1314 	if (phba->lpfc_injerr_lba != LPFC_INJERR_LBA_OFF) {
1315 		blksize = lpfc_cmd_blksize(sc);
1316 		numblks = (scsi_bufflen(sc) + blksize - 1) / blksize;
1317 
1318 		/* Make sure we have the right LBA if one is specified */
1319 		if ((phba->lpfc_injerr_lba < lba) ||
1320 			(phba->lpfc_injerr_lba >= (lba + numblks)))
1321 			return 0;
1322 		if (sgpe) {
1323 			blockoff = phba->lpfc_injerr_lba - lba;
1324 			numblks = sg_dma_len(sgpe) /
1325 				sizeof(struct scsi_dif_tuple);
1326 			if (numblks < blockoff)
1327 				blockoff = numblks;
1328 		}
1329 	}
1330 
1331 	/* Next check if we need to match the remote NPortID or WWPN */
1332 	rdata = lpfc_rport_data_from_scsi_device(sc->device);
1333 	if (rdata && rdata->pnode) {
1334 		ndlp = rdata->pnode;
1335 
1336 		/* Make sure we have the right NPortID if one is specified */
1337 		if (phba->lpfc_injerr_nportid  &&
1338 			(phba->lpfc_injerr_nportid != ndlp->nlp_DID))
1339 			return 0;
1340 
1341 		/*
1342 		 * Make sure we have the right WWPN if one is specified.
1343 		 * wwn[0] should be a non-zero NAA in a good WWPN.
1344 		 */
1345 		if (phba->lpfc_injerr_wwpn.u.wwn[0]  &&
1346 			(memcmp(&ndlp->nlp_portname, &phba->lpfc_injerr_wwpn,
1347 				sizeof(struct lpfc_name)) != 0))
1348 			return 0;
1349 	}
1350 
1351 	/* Setup a ptr to the protection data if the SCSI host provides it */
1352 	if (sgpe) {
1353 		src = (struct scsi_dif_tuple *)sg_virt(sgpe);
1354 		src += blockoff;
1355 		lpfc_cmd = (struct lpfc_scsi_buf *)sc->host_scribble;
1356 	}
1357 
1358 	/* Should we change the Reference Tag */
1359 	if (reftag) {
1360 		if (phba->lpfc_injerr_wref_cnt) {
1361 			switch (op) {
1362 			case SCSI_PROT_WRITE_PASS:
1363 				if (src) {
1364 					/*
1365 					 * For WRITE_PASS, force the error
1366 					 * to be sent on the wire. It should
1367 					 * be detected by the Target.
1368 					 * If blockoff != 0 error will be
1369 					 * inserted in middle of the IO.
1370 					 */
1371 
1372 					lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1373 					"9076 BLKGRD: Injecting reftag error: "
1374 					"write lba x%lx + x%x oldrefTag x%x\n",
1375 					(unsigned long)lba, blockoff,
1376 					be32_to_cpu(src->ref_tag));
1377 
1378 					/*
1379 					 * Save the old ref_tag so we can
1380 					 * restore it on completion.
1381 					 */
1382 					if (lpfc_cmd) {
1383 						lpfc_cmd->prot_data_type =
1384 							LPFC_INJERR_REFTAG;
1385 						lpfc_cmd->prot_data_segment =
1386 							src;
1387 						lpfc_cmd->prot_data =
1388 							src->ref_tag;
1389 					}
1390 					src->ref_tag = cpu_to_be32(0xDEADBEEF);
1391 					phba->lpfc_injerr_wref_cnt--;
1392 					if (phba->lpfc_injerr_wref_cnt == 0) {
1393 						phba->lpfc_injerr_nportid = 0;
1394 						phba->lpfc_injerr_lba =
1395 							LPFC_INJERR_LBA_OFF;
1396 						memset(&phba->lpfc_injerr_wwpn,
1397 						  0, sizeof(struct lpfc_name));
1398 					}
1399 					rc = BG_ERR_TGT | BG_ERR_CHECK;
1400 
1401 					break;
1402 				}
1403 				/* Drop thru */
1404 			case SCSI_PROT_WRITE_INSERT:
1405 				/*
1406 				 * For WRITE_INSERT, force the error
1407 				 * to be sent on the wire. It should be
1408 				 * detected by the Target.
1409 				 */
1410 				/* DEADBEEF will be the reftag on the wire */
1411 				*reftag = 0xDEADBEEF;
1412 				phba->lpfc_injerr_wref_cnt--;
1413 				if (phba->lpfc_injerr_wref_cnt == 0) {
1414 					phba->lpfc_injerr_nportid = 0;
1415 					phba->lpfc_injerr_lba =
1416 					LPFC_INJERR_LBA_OFF;
1417 					memset(&phba->lpfc_injerr_wwpn,
1418 						0, sizeof(struct lpfc_name));
1419 				}
1420 				rc = BG_ERR_TGT | BG_ERR_CHECK;
1421 
1422 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1423 					"9078 BLKGRD: Injecting reftag error: "
1424 					"write lba x%lx\n", (unsigned long)lba);
1425 				break;
1426 			case SCSI_PROT_WRITE_STRIP:
1427 				/*
1428 				 * For WRITE_STRIP and WRITE_PASS,
1429 				 * force the error on data
1430 				 * being copied from SLI-Host to SLI-Port.
1431 				 */
1432 				*reftag = 0xDEADBEEF;
1433 				phba->lpfc_injerr_wref_cnt--;
1434 				if (phba->lpfc_injerr_wref_cnt == 0) {
1435 					phba->lpfc_injerr_nportid = 0;
1436 					phba->lpfc_injerr_lba =
1437 						LPFC_INJERR_LBA_OFF;
1438 					memset(&phba->lpfc_injerr_wwpn,
1439 						0, sizeof(struct lpfc_name));
1440 				}
1441 				rc = BG_ERR_INIT;
1442 
1443 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1444 					"9077 BLKGRD: Injecting reftag error: "
1445 					"write lba x%lx\n", (unsigned long)lba);
1446 				break;
1447 			}
1448 		}
1449 		if (phba->lpfc_injerr_rref_cnt) {
1450 			switch (op) {
1451 			case SCSI_PROT_READ_INSERT:
1452 			case SCSI_PROT_READ_STRIP:
1453 			case SCSI_PROT_READ_PASS:
1454 				/*
1455 				 * For READ_STRIP and READ_PASS, force the
1456 				 * error on data being read off the wire. It
1457 				 * should force an IO error to the driver.
1458 				 */
1459 				*reftag = 0xDEADBEEF;
1460 				phba->lpfc_injerr_rref_cnt--;
1461 				if (phba->lpfc_injerr_rref_cnt == 0) {
1462 					phba->lpfc_injerr_nportid = 0;
1463 					phba->lpfc_injerr_lba =
1464 						LPFC_INJERR_LBA_OFF;
1465 					memset(&phba->lpfc_injerr_wwpn,
1466 						0, sizeof(struct lpfc_name));
1467 				}
1468 				rc = BG_ERR_INIT;
1469 
1470 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1471 					"9079 BLKGRD: Injecting reftag error: "
1472 					"read lba x%lx\n", (unsigned long)lba);
1473 				break;
1474 			}
1475 		}
1476 	}
1477 
1478 	/* Should we change the Application Tag */
1479 	if (apptag) {
1480 		if (phba->lpfc_injerr_wapp_cnt) {
1481 			switch (op) {
1482 			case SCSI_PROT_WRITE_PASS:
1483 				if (src) {
1484 					/*
1485 					 * For WRITE_PASS, force the error
1486 					 * to be sent on the wire. It should
1487 					 * be detected by the Target.
1488 					 * If blockoff != 0 error will be
1489 					 * inserted in middle of the IO.
1490 					 */
1491 
1492 					lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1493 					"9080 BLKGRD: Injecting apptag error: "
1494 					"write lba x%lx + x%x oldappTag x%x\n",
1495 					(unsigned long)lba, blockoff,
1496 					be16_to_cpu(src->app_tag));
1497 
1498 					/*
1499 					 * Save the old app_tag so we can
1500 					 * restore it on completion.
1501 					 */
1502 					if (lpfc_cmd) {
1503 						lpfc_cmd->prot_data_type =
1504 							LPFC_INJERR_APPTAG;
1505 						lpfc_cmd->prot_data_segment =
1506 							src;
1507 						lpfc_cmd->prot_data =
1508 							src->app_tag;
1509 					}
1510 					src->app_tag = cpu_to_be16(0xDEAD);
1511 					phba->lpfc_injerr_wapp_cnt--;
1512 					if (phba->lpfc_injerr_wapp_cnt == 0) {
1513 						phba->lpfc_injerr_nportid = 0;
1514 						phba->lpfc_injerr_lba =
1515 							LPFC_INJERR_LBA_OFF;
1516 						memset(&phba->lpfc_injerr_wwpn,
1517 						  0, sizeof(struct lpfc_name));
1518 					}
1519 					rc = BG_ERR_TGT | BG_ERR_CHECK;
1520 					break;
1521 				}
1522 				/* Drop thru */
1523 			case SCSI_PROT_WRITE_INSERT:
1524 				/*
1525 				 * For WRITE_INSERT, force the
1526 				 * error to be sent on the wire. It should be
1527 				 * detected by the Target.
1528 				 */
1529 				/* DEAD will be the apptag on the wire */
1530 				*apptag = 0xDEAD;
1531 				phba->lpfc_injerr_wapp_cnt--;
1532 				if (phba->lpfc_injerr_wapp_cnt == 0) {
1533 					phba->lpfc_injerr_nportid = 0;
1534 					phba->lpfc_injerr_lba =
1535 						LPFC_INJERR_LBA_OFF;
1536 					memset(&phba->lpfc_injerr_wwpn,
1537 						0, sizeof(struct lpfc_name));
1538 				}
1539 				rc = BG_ERR_TGT | BG_ERR_CHECK;
1540 
1541 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1542 					"0813 BLKGRD: Injecting apptag error: "
1543 					"write lba x%lx\n", (unsigned long)lba);
1544 				break;
1545 			case SCSI_PROT_WRITE_STRIP:
1546 				/*
1547 				 * For WRITE_STRIP and WRITE_PASS,
1548 				 * force the error on data
1549 				 * being copied from SLI-Host to SLI-Port.
1550 				 */
1551 				*apptag = 0xDEAD;
1552 				phba->lpfc_injerr_wapp_cnt--;
1553 				if (phba->lpfc_injerr_wapp_cnt == 0) {
1554 					phba->lpfc_injerr_nportid = 0;
1555 					phba->lpfc_injerr_lba =
1556 						LPFC_INJERR_LBA_OFF;
1557 					memset(&phba->lpfc_injerr_wwpn,
1558 						0, sizeof(struct lpfc_name));
1559 				}
1560 				rc = BG_ERR_INIT;
1561 
1562 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1563 					"0812 BLKGRD: Injecting apptag error: "
1564 					"write lba x%lx\n", (unsigned long)lba);
1565 				break;
1566 			}
1567 		}
1568 		if (phba->lpfc_injerr_rapp_cnt) {
1569 			switch (op) {
1570 			case SCSI_PROT_READ_INSERT:
1571 			case SCSI_PROT_READ_STRIP:
1572 			case SCSI_PROT_READ_PASS:
1573 				/*
1574 				 * For READ_STRIP and READ_PASS, force the
1575 				 * error on data being read off the wire. It
1576 				 * should force an IO error to the driver.
1577 				 */
1578 				*apptag = 0xDEAD;
1579 				phba->lpfc_injerr_rapp_cnt--;
1580 				if (phba->lpfc_injerr_rapp_cnt == 0) {
1581 					phba->lpfc_injerr_nportid = 0;
1582 					phba->lpfc_injerr_lba =
1583 						LPFC_INJERR_LBA_OFF;
1584 					memset(&phba->lpfc_injerr_wwpn,
1585 						0, sizeof(struct lpfc_name));
1586 				}
1587 				rc = BG_ERR_INIT;
1588 
1589 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1590 					"0814 BLKGRD: Injecting apptag error: "
1591 					"read lba x%lx\n", (unsigned long)lba);
1592 				break;
1593 			}
1594 		}
1595 	}
1596 
1597 
1598 	/* Should we change the Guard Tag */
1599 	if (new_guard) {
1600 		if (phba->lpfc_injerr_wgrd_cnt) {
1601 			switch (op) {
1602 			case SCSI_PROT_WRITE_PASS:
1603 				rc = BG_ERR_CHECK;
1604 				/* Drop thru */
1605 
1606 			case SCSI_PROT_WRITE_INSERT:
1607 				/*
1608 				 * For WRITE_INSERT, force the
1609 				 * error to be sent on the wire. It should be
1610 				 * detected by the Target.
1611 				 */
1612 				phba->lpfc_injerr_wgrd_cnt--;
1613 				if (phba->lpfc_injerr_wgrd_cnt == 0) {
1614 					phba->lpfc_injerr_nportid = 0;
1615 					phba->lpfc_injerr_lba =
1616 						LPFC_INJERR_LBA_OFF;
1617 					memset(&phba->lpfc_injerr_wwpn,
1618 						0, sizeof(struct lpfc_name));
1619 				}
1620 
1621 				rc |= BG_ERR_TGT | BG_ERR_SWAP;
1622 				/* Signals the caller to swap CRC->CSUM */
1623 
1624 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1625 					"0817 BLKGRD: Injecting guard error: "
1626 					"write lba x%lx\n", (unsigned long)lba);
1627 				break;
1628 			case SCSI_PROT_WRITE_STRIP:
1629 				/*
1630 				 * For WRITE_STRIP and WRITE_PASS,
1631 				 * force the error on data
1632 				 * being copied from SLI-Host to SLI-Port.
1633 				 */
1634 				phba->lpfc_injerr_wgrd_cnt--;
1635 				if (phba->lpfc_injerr_wgrd_cnt == 0) {
1636 					phba->lpfc_injerr_nportid = 0;
1637 					phba->lpfc_injerr_lba =
1638 						LPFC_INJERR_LBA_OFF;
1639 					memset(&phba->lpfc_injerr_wwpn,
1640 						0, sizeof(struct lpfc_name));
1641 				}
1642 
1643 				rc = BG_ERR_INIT | BG_ERR_SWAP;
1644 				/* Signals the caller to swap CRC->CSUM */
1645 
1646 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1647 					"0816 BLKGRD: Injecting guard error: "
1648 					"write lba x%lx\n", (unsigned long)lba);
1649 				break;
1650 			}
1651 		}
1652 		if (phba->lpfc_injerr_rgrd_cnt) {
1653 			switch (op) {
1654 			case SCSI_PROT_READ_INSERT:
1655 			case SCSI_PROT_READ_STRIP:
1656 			case SCSI_PROT_READ_PASS:
1657 				/*
1658 				 * For READ_STRIP and READ_PASS, force the
1659 				 * error on data being read off the wire. It
1660 				 * should force an IO error to the driver.
1661 				 */
1662 				phba->lpfc_injerr_rgrd_cnt--;
1663 				if (phba->lpfc_injerr_rgrd_cnt == 0) {
1664 					phba->lpfc_injerr_nportid = 0;
1665 					phba->lpfc_injerr_lba =
1666 						LPFC_INJERR_LBA_OFF;
1667 					memset(&phba->lpfc_injerr_wwpn,
1668 						0, sizeof(struct lpfc_name));
1669 				}
1670 
1671 				rc = BG_ERR_INIT | BG_ERR_SWAP;
1672 				/* Signals the caller to swap CRC->CSUM */
1673 
1674 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1675 					"0818 BLKGRD: Injecting guard error: "
1676 					"read lba x%lx\n", (unsigned long)lba);
1677 			}
1678 		}
1679 	}
1680 
1681 	return rc;
1682 }
1683 #endif
1684 
1685 /**
1686  * lpfc_sc_to_bg_opcodes - Determine the BlockGuard opcodes to be used with
1687  * the specified SCSI command.
1688  * @phba: The Hba for which this call is being executed.
1689  * @sc: The SCSI command to examine
1690  * @txopt: (out) BlockGuard operation for transmitted data
1691  * @rxopt: (out) BlockGuard operation for received data
1692  *
1693  * Returns: zero on success; non-zero if tx and/or rx op cannot be determined
1694  *
1695  **/
1696 static int
1697 lpfc_sc_to_bg_opcodes(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1698 		uint8_t *txop, uint8_t *rxop)
1699 {
1700 	uint8_t ret = 0;
1701 
1702 	if (lpfc_cmd_guard_csum(sc)) {
1703 		switch (scsi_get_prot_op(sc)) {
1704 		case SCSI_PROT_READ_INSERT:
1705 		case SCSI_PROT_WRITE_STRIP:
1706 			*rxop = BG_OP_IN_NODIF_OUT_CSUM;
1707 			*txop = BG_OP_IN_CSUM_OUT_NODIF;
1708 			break;
1709 
1710 		case SCSI_PROT_READ_STRIP:
1711 		case SCSI_PROT_WRITE_INSERT:
1712 			*rxop = BG_OP_IN_CRC_OUT_NODIF;
1713 			*txop = BG_OP_IN_NODIF_OUT_CRC;
1714 			break;
1715 
1716 		case SCSI_PROT_READ_PASS:
1717 		case SCSI_PROT_WRITE_PASS:
1718 			*rxop = BG_OP_IN_CRC_OUT_CSUM;
1719 			*txop = BG_OP_IN_CSUM_OUT_CRC;
1720 			break;
1721 
1722 		case SCSI_PROT_NORMAL:
1723 		default:
1724 			lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1725 				"9063 BLKGRD: Bad op/guard:%d/IP combination\n",
1726 					scsi_get_prot_op(sc));
1727 			ret = 1;
1728 			break;
1729 
1730 		}
1731 	} else {
1732 		switch (scsi_get_prot_op(sc)) {
1733 		case SCSI_PROT_READ_STRIP:
1734 		case SCSI_PROT_WRITE_INSERT:
1735 			*rxop = BG_OP_IN_CRC_OUT_NODIF;
1736 			*txop = BG_OP_IN_NODIF_OUT_CRC;
1737 			break;
1738 
1739 		case SCSI_PROT_READ_PASS:
1740 		case SCSI_PROT_WRITE_PASS:
1741 			*rxop = BG_OP_IN_CRC_OUT_CRC;
1742 			*txop = BG_OP_IN_CRC_OUT_CRC;
1743 			break;
1744 
1745 		case SCSI_PROT_READ_INSERT:
1746 		case SCSI_PROT_WRITE_STRIP:
1747 			*rxop = BG_OP_IN_NODIF_OUT_CRC;
1748 			*txop = BG_OP_IN_CRC_OUT_NODIF;
1749 			break;
1750 
1751 		case SCSI_PROT_NORMAL:
1752 		default:
1753 			lpfc_printf_log(phba, KERN_ERR, LOG_BG,
1754 				"9075 BLKGRD: Bad op/guard:%d/CRC combination\n",
1755 					scsi_get_prot_op(sc));
1756 			ret = 1;
1757 			break;
1758 		}
1759 	}
1760 
1761 	return ret;
1762 }
1763 
1764 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1765 /**
1766  * lpfc_bg_err_opcodes - reDetermine the BlockGuard opcodes to be used with
1767  * the specified SCSI command in order to force a guard tag error.
1768  * @phba: The Hba for which this call is being executed.
1769  * @sc: The SCSI command to examine
1770  * @txopt: (out) BlockGuard operation for transmitted data
1771  * @rxopt: (out) BlockGuard operation for received data
1772  *
1773  * Returns: zero on success; non-zero if tx and/or rx op cannot be determined
1774  *
1775  **/
1776 static int
1777 lpfc_bg_err_opcodes(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1778 		uint8_t *txop, uint8_t *rxop)
1779 {
1780 	uint8_t ret = 0;
1781 
1782 	if (lpfc_cmd_guard_csum(sc)) {
1783 		switch (scsi_get_prot_op(sc)) {
1784 		case SCSI_PROT_READ_INSERT:
1785 		case SCSI_PROT_WRITE_STRIP:
1786 			*rxop = BG_OP_IN_NODIF_OUT_CRC;
1787 			*txop = BG_OP_IN_CRC_OUT_NODIF;
1788 			break;
1789 
1790 		case SCSI_PROT_READ_STRIP:
1791 		case SCSI_PROT_WRITE_INSERT:
1792 			*rxop = BG_OP_IN_CSUM_OUT_NODIF;
1793 			*txop = BG_OP_IN_NODIF_OUT_CSUM;
1794 			break;
1795 
1796 		case SCSI_PROT_READ_PASS:
1797 		case SCSI_PROT_WRITE_PASS:
1798 			*rxop = BG_OP_IN_CSUM_OUT_CRC;
1799 			*txop = BG_OP_IN_CRC_OUT_CSUM;
1800 			break;
1801 
1802 		case SCSI_PROT_NORMAL:
1803 		default:
1804 			break;
1805 
1806 		}
1807 	} else {
1808 		switch (scsi_get_prot_op(sc)) {
1809 		case SCSI_PROT_READ_STRIP:
1810 		case SCSI_PROT_WRITE_INSERT:
1811 			*rxop = BG_OP_IN_CSUM_OUT_NODIF;
1812 			*txop = BG_OP_IN_NODIF_OUT_CSUM;
1813 			break;
1814 
1815 		case SCSI_PROT_READ_PASS:
1816 		case SCSI_PROT_WRITE_PASS:
1817 			*rxop = BG_OP_IN_CSUM_OUT_CSUM;
1818 			*txop = BG_OP_IN_CSUM_OUT_CSUM;
1819 			break;
1820 
1821 		case SCSI_PROT_READ_INSERT:
1822 		case SCSI_PROT_WRITE_STRIP:
1823 			*rxop = BG_OP_IN_NODIF_OUT_CSUM;
1824 			*txop = BG_OP_IN_CSUM_OUT_NODIF;
1825 			break;
1826 
1827 		case SCSI_PROT_NORMAL:
1828 		default:
1829 			break;
1830 		}
1831 	}
1832 
1833 	return ret;
1834 }
1835 #endif
1836 
1837 /**
1838  * lpfc_bg_setup_bpl - Setup BlockGuard BPL with no protection data
1839  * @phba: The Hba for which this call is being executed.
1840  * @sc: pointer to scsi command we're working on
1841  * @bpl: pointer to buffer list for protection groups
1842  * @datacnt: number of segments of data that have been dma mapped
1843  *
1844  * This function sets up BPL buffer list for protection groups of
1845  * type LPFC_PG_TYPE_NO_DIF
1846  *
1847  * This is usually used when the HBA is instructed to generate
1848  * DIFs and insert them into data stream (or strip DIF from
1849  * incoming data stream)
1850  *
1851  * The buffer list consists of just one protection group described
1852  * below:
1853  *                                +-------------------------+
1854  *   start of prot group  -->     |          PDE_5          |
1855  *                                +-------------------------+
1856  *                                |          PDE_6          |
1857  *                                +-------------------------+
1858  *                                |         Data BDE        |
1859  *                                +-------------------------+
1860  *                                |more Data BDE's ... (opt)|
1861  *                                +-------------------------+
1862  *
1863  *
1864  * Note: Data s/g buffers have been dma mapped
1865  *
1866  * Returns the number of BDEs added to the BPL.
1867  **/
1868 static int
1869 lpfc_bg_setup_bpl(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1870 		struct ulp_bde64 *bpl, int datasegcnt)
1871 {
1872 	struct scatterlist *sgde = NULL; /* s/g data entry */
1873 	struct lpfc_pde5 *pde5 = NULL;
1874 	struct lpfc_pde6 *pde6 = NULL;
1875 	dma_addr_t physaddr;
1876 	int i = 0, num_bde = 0, status;
1877 	int datadir = sc->sc_data_direction;
1878 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1879 	uint32_t rc;
1880 #endif
1881 	uint32_t checking = 1;
1882 	uint32_t reftag;
1883 	uint8_t txop, rxop;
1884 
1885 	status  = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
1886 	if (status)
1887 		goto out;
1888 
1889 	/* extract some info from the scsi command for pde*/
1890 	reftag = (uint32_t)scsi_get_lba(sc); /* Truncate LBA */
1891 
1892 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1893 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
1894 	if (rc) {
1895 		if (rc & BG_ERR_SWAP)
1896 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
1897 		if (rc & BG_ERR_CHECK)
1898 			checking = 0;
1899 	}
1900 #endif
1901 
1902 	/* setup PDE5 with what we have */
1903 	pde5 = (struct lpfc_pde5 *) bpl;
1904 	memset(pde5, 0, sizeof(struct lpfc_pde5));
1905 	bf_set(pde5_type, pde5, LPFC_PDE5_DESCRIPTOR);
1906 
1907 	/* Endianness conversion if necessary for PDE5 */
1908 	pde5->word0 = cpu_to_le32(pde5->word0);
1909 	pde5->reftag = cpu_to_le32(reftag);
1910 
1911 	/* advance bpl and increment bde count */
1912 	num_bde++;
1913 	bpl++;
1914 	pde6 = (struct lpfc_pde6 *) bpl;
1915 
1916 	/* setup PDE6 with the rest of the info */
1917 	memset(pde6, 0, sizeof(struct lpfc_pde6));
1918 	bf_set(pde6_type, pde6, LPFC_PDE6_DESCRIPTOR);
1919 	bf_set(pde6_optx, pde6, txop);
1920 	bf_set(pde6_oprx, pde6, rxop);
1921 
1922 	/*
1923 	 * We only need to check the data on READs, for WRITEs
1924 	 * protection data is automatically generated, not checked.
1925 	 */
1926 	if (datadir == DMA_FROM_DEVICE) {
1927 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_GUARD))
1928 			bf_set(pde6_ce, pde6, checking);
1929 		else
1930 			bf_set(pde6_ce, pde6, 0);
1931 
1932 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_REF))
1933 			bf_set(pde6_re, pde6, checking);
1934 		else
1935 			bf_set(pde6_re, pde6, 0);
1936 	}
1937 	bf_set(pde6_ai, pde6, 1);
1938 	bf_set(pde6_ae, pde6, 0);
1939 	bf_set(pde6_apptagval, pde6, 0);
1940 
1941 	/* Endianness conversion if necessary for PDE6 */
1942 	pde6->word0 = cpu_to_le32(pde6->word0);
1943 	pde6->word1 = cpu_to_le32(pde6->word1);
1944 	pde6->word2 = cpu_to_le32(pde6->word2);
1945 
1946 	/* advance bpl and increment bde count */
1947 	num_bde++;
1948 	bpl++;
1949 
1950 	/* assumption: caller has already run dma_map_sg on command data */
1951 	scsi_for_each_sg(sc, sgde, datasegcnt, i) {
1952 		physaddr = sg_dma_address(sgde);
1953 		bpl->addrLow = le32_to_cpu(putPaddrLow(physaddr));
1954 		bpl->addrHigh = le32_to_cpu(putPaddrHigh(physaddr));
1955 		bpl->tus.f.bdeSize = sg_dma_len(sgde);
1956 		if (datadir == DMA_TO_DEVICE)
1957 			bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
1958 		else
1959 			bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
1960 		bpl->tus.w = le32_to_cpu(bpl->tus.w);
1961 		bpl++;
1962 		num_bde++;
1963 	}
1964 
1965 out:
1966 	return num_bde;
1967 }
1968 
1969 /**
1970  * lpfc_bg_setup_bpl_prot - Setup BlockGuard BPL with protection data
1971  * @phba: The Hba for which this call is being executed.
1972  * @sc: pointer to scsi command we're working on
1973  * @bpl: pointer to buffer list for protection groups
1974  * @datacnt: number of segments of data that have been dma mapped
1975  * @protcnt: number of segment of protection data that have been dma mapped
1976  *
1977  * This function sets up BPL buffer list for protection groups of
1978  * type LPFC_PG_TYPE_DIF
1979  *
1980  * This is usually used when DIFs are in their own buffers,
1981  * separate from the data. The HBA can then by instructed
1982  * to place the DIFs in the outgoing stream.  For read operations,
1983  * The HBA could extract the DIFs and place it in DIF buffers.
1984  *
1985  * The buffer list for this type consists of one or more of the
1986  * protection groups described below:
1987  *                                    +-------------------------+
1988  *   start of first prot group  -->   |          PDE_5          |
1989  *                                    +-------------------------+
1990  *                                    |          PDE_6          |
1991  *                                    +-------------------------+
1992  *                                    |      PDE_7 (Prot BDE)   |
1993  *                                    +-------------------------+
1994  *                                    |        Data BDE         |
1995  *                                    +-------------------------+
1996  *                                    |more Data BDE's ... (opt)|
1997  *                                    +-------------------------+
1998  *   start of new  prot group  -->    |          PDE_5          |
1999  *                                    +-------------------------+
2000  *                                    |          ...            |
2001  *                                    +-------------------------+
2002  *
2003  * Note: It is assumed that both data and protection s/g buffers have been
2004  *       mapped for DMA
2005  *
2006  * Returns the number of BDEs added to the BPL.
2007  **/
2008 static int
2009 lpfc_bg_setup_bpl_prot(struct lpfc_hba *phba, struct scsi_cmnd *sc,
2010 		struct ulp_bde64 *bpl, int datacnt, int protcnt)
2011 {
2012 	struct scatterlist *sgde = NULL; /* s/g data entry */
2013 	struct scatterlist *sgpe = NULL; /* s/g prot entry */
2014 	struct lpfc_pde5 *pde5 = NULL;
2015 	struct lpfc_pde6 *pde6 = NULL;
2016 	struct lpfc_pde7 *pde7 = NULL;
2017 	dma_addr_t dataphysaddr, protphysaddr;
2018 	unsigned short curr_data = 0, curr_prot = 0;
2019 	unsigned int split_offset;
2020 	unsigned int protgroup_len, protgroup_offset = 0, protgroup_remainder;
2021 	unsigned int protgrp_blks, protgrp_bytes;
2022 	unsigned int remainder, subtotal;
2023 	int status;
2024 	int datadir = sc->sc_data_direction;
2025 	unsigned char pgdone = 0, alldone = 0;
2026 	unsigned blksize;
2027 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2028 	uint32_t rc;
2029 #endif
2030 	uint32_t checking = 1;
2031 	uint32_t reftag;
2032 	uint8_t txop, rxop;
2033 	int num_bde = 0;
2034 
2035 	sgpe = scsi_prot_sglist(sc);
2036 	sgde = scsi_sglist(sc);
2037 
2038 	if (!sgpe || !sgde) {
2039 		lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
2040 				"9020 Invalid s/g entry: data=0x%p prot=0x%p\n",
2041 				sgpe, sgde);
2042 		return 0;
2043 	}
2044 
2045 	status = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
2046 	if (status)
2047 		goto out;
2048 
2049 	/* extract some info from the scsi command */
2050 	blksize = lpfc_cmd_blksize(sc);
2051 	reftag = (uint32_t)scsi_get_lba(sc); /* Truncate LBA */
2052 
2053 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2054 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
2055 	if (rc) {
2056 		if (rc & BG_ERR_SWAP)
2057 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
2058 		if (rc & BG_ERR_CHECK)
2059 			checking = 0;
2060 	}
2061 #endif
2062 
2063 	split_offset = 0;
2064 	do {
2065 		/* Check to see if we ran out of space */
2066 		if (num_bde >= (phba->cfg_total_seg_cnt - 2))
2067 			return num_bde + 3;
2068 
2069 		/* setup PDE5 with what we have */
2070 		pde5 = (struct lpfc_pde5 *) bpl;
2071 		memset(pde5, 0, sizeof(struct lpfc_pde5));
2072 		bf_set(pde5_type, pde5, LPFC_PDE5_DESCRIPTOR);
2073 
2074 		/* Endianness conversion if necessary for PDE5 */
2075 		pde5->word0 = cpu_to_le32(pde5->word0);
2076 		pde5->reftag = cpu_to_le32(reftag);
2077 
2078 		/* advance bpl and increment bde count */
2079 		num_bde++;
2080 		bpl++;
2081 		pde6 = (struct lpfc_pde6 *) bpl;
2082 
2083 		/* setup PDE6 with the rest of the info */
2084 		memset(pde6, 0, sizeof(struct lpfc_pde6));
2085 		bf_set(pde6_type, pde6, LPFC_PDE6_DESCRIPTOR);
2086 		bf_set(pde6_optx, pde6, txop);
2087 		bf_set(pde6_oprx, pde6, rxop);
2088 
2089 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_GUARD))
2090 			bf_set(pde6_ce, pde6, checking);
2091 		else
2092 			bf_set(pde6_ce, pde6, 0);
2093 
2094 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_REF))
2095 			bf_set(pde6_re, pde6, checking);
2096 		else
2097 			bf_set(pde6_re, pde6, 0);
2098 
2099 		bf_set(pde6_ai, pde6, 1);
2100 		bf_set(pde6_ae, pde6, 0);
2101 		bf_set(pde6_apptagval, pde6, 0);
2102 
2103 		/* Endianness conversion if necessary for PDE6 */
2104 		pde6->word0 = cpu_to_le32(pde6->word0);
2105 		pde6->word1 = cpu_to_le32(pde6->word1);
2106 		pde6->word2 = cpu_to_le32(pde6->word2);
2107 
2108 		/* advance bpl and increment bde count */
2109 		num_bde++;
2110 		bpl++;
2111 
2112 		/* setup the first BDE that points to protection buffer */
2113 		protphysaddr = sg_dma_address(sgpe) + protgroup_offset;
2114 		protgroup_len = sg_dma_len(sgpe) - protgroup_offset;
2115 
2116 		/* must be integer multiple of the DIF block length */
2117 		BUG_ON(protgroup_len % 8);
2118 
2119 		pde7 = (struct lpfc_pde7 *) bpl;
2120 		memset(pde7, 0, sizeof(struct lpfc_pde7));
2121 		bf_set(pde7_type, pde7, LPFC_PDE7_DESCRIPTOR);
2122 
2123 		pde7->addrHigh = le32_to_cpu(putPaddrHigh(protphysaddr));
2124 		pde7->addrLow = le32_to_cpu(putPaddrLow(protphysaddr));
2125 
2126 		protgrp_blks = protgroup_len / 8;
2127 		protgrp_bytes = protgrp_blks * blksize;
2128 
2129 		/* check if this pde is crossing the 4K boundary; if so split */
2130 		if ((pde7->addrLow & 0xfff) + protgroup_len > 0x1000) {
2131 			protgroup_remainder = 0x1000 - (pde7->addrLow & 0xfff);
2132 			protgroup_offset += protgroup_remainder;
2133 			protgrp_blks = protgroup_remainder / 8;
2134 			protgrp_bytes = protgrp_blks * blksize;
2135 		} else {
2136 			protgroup_offset = 0;
2137 			curr_prot++;
2138 		}
2139 
2140 		num_bde++;
2141 
2142 		/* setup BDE's for data blocks associated with DIF data */
2143 		pgdone = 0;
2144 		subtotal = 0; /* total bytes processed for current prot grp */
2145 		while (!pgdone) {
2146 			/* Check to see if we ran out of space */
2147 			if (num_bde >= phba->cfg_total_seg_cnt)
2148 				return num_bde + 1;
2149 
2150 			if (!sgde) {
2151 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
2152 					"9065 BLKGRD:%s Invalid data segment\n",
2153 						__func__);
2154 				return 0;
2155 			}
2156 			bpl++;
2157 			dataphysaddr = sg_dma_address(sgde) + split_offset;
2158 			bpl->addrLow = le32_to_cpu(putPaddrLow(dataphysaddr));
2159 			bpl->addrHigh = le32_to_cpu(putPaddrHigh(dataphysaddr));
2160 
2161 			remainder = sg_dma_len(sgde) - split_offset;
2162 
2163 			if ((subtotal + remainder) <= protgrp_bytes) {
2164 				/* we can use this whole buffer */
2165 				bpl->tus.f.bdeSize = remainder;
2166 				split_offset = 0;
2167 
2168 				if ((subtotal + remainder) == protgrp_bytes)
2169 					pgdone = 1;
2170 			} else {
2171 				/* must split this buffer with next prot grp */
2172 				bpl->tus.f.bdeSize = protgrp_bytes - subtotal;
2173 				split_offset += bpl->tus.f.bdeSize;
2174 			}
2175 
2176 			subtotal += bpl->tus.f.bdeSize;
2177 
2178 			if (datadir == DMA_TO_DEVICE)
2179 				bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
2180 			else
2181 				bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
2182 			bpl->tus.w = le32_to_cpu(bpl->tus.w);
2183 
2184 			num_bde++;
2185 			curr_data++;
2186 
2187 			if (split_offset)
2188 				break;
2189 
2190 			/* Move to the next s/g segment if possible */
2191 			sgde = sg_next(sgde);
2192 
2193 		}
2194 
2195 		if (protgroup_offset) {
2196 			/* update the reference tag */
2197 			reftag += protgrp_blks;
2198 			bpl++;
2199 			continue;
2200 		}
2201 
2202 		/* are we done ? */
2203 		if (curr_prot == protcnt) {
2204 			alldone = 1;
2205 		} else if (curr_prot < protcnt) {
2206 			/* advance to next prot buffer */
2207 			sgpe = sg_next(sgpe);
2208 			bpl++;
2209 
2210 			/* update the reference tag */
2211 			reftag += protgrp_blks;
2212 		} else {
2213 			/* if we're here, we have a bug */
2214 			lpfc_printf_log(phba, KERN_ERR, LOG_BG,
2215 				"9054 BLKGRD: bug in %s\n", __func__);
2216 		}
2217 
2218 	} while (!alldone);
2219 out:
2220 
2221 	return num_bde;
2222 }
2223 
2224 /**
2225  * lpfc_bg_setup_sgl - Setup BlockGuard SGL with no protection data
2226  * @phba: The Hba for which this call is being executed.
2227  * @sc: pointer to scsi command we're working on
2228  * @sgl: pointer to buffer list for protection groups
2229  * @datacnt: number of segments of data that have been dma mapped
2230  *
2231  * This function sets up SGL buffer list for protection groups of
2232  * type LPFC_PG_TYPE_NO_DIF
2233  *
2234  * This is usually used when the HBA is instructed to generate
2235  * DIFs and insert them into data stream (or strip DIF from
2236  * incoming data stream)
2237  *
2238  * The buffer list consists of just one protection group described
2239  * below:
2240  *                                +-------------------------+
2241  *   start of prot group  -->     |         DI_SEED         |
2242  *                                +-------------------------+
2243  *                                |         Data SGE        |
2244  *                                +-------------------------+
2245  *                                |more Data SGE's ... (opt)|
2246  *                                +-------------------------+
2247  *
2248  *
2249  * Note: Data s/g buffers have been dma mapped
2250  *
2251  * Returns the number of SGEs added to the SGL.
2252  **/
2253 static int
2254 lpfc_bg_setup_sgl(struct lpfc_hba *phba, struct scsi_cmnd *sc,
2255 		struct sli4_sge *sgl, int datasegcnt)
2256 {
2257 	struct scatterlist *sgde = NULL; /* s/g data entry */
2258 	struct sli4_sge_diseed *diseed = NULL;
2259 	dma_addr_t physaddr;
2260 	int i = 0, num_sge = 0, status;
2261 	uint32_t reftag;
2262 	uint8_t txop, rxop;
2263 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2264 	uint32_t rc;
2265 #endif
2266 	uint32_t checking = 1;
2267 	uint32_t dma_len;
2268 	uint32_t dma_offset = 0;
2269 
2270 	status  = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
2271 	if (status)
2272 		goto out;
2273 
2274 	/* extract some info from the scsi command for pde*/
2275 	reftag = (uint32_t)scsi_get_lba(sc); /* Truncate LBA */
2276 
2277 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2278 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
2279 	if (rc) {
2280 		if (rc & BG_ERR_SWAP)
2281 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
2282 		if (rc & BG_ERR_CHECK)
2283 			checking = 0;
2284 	}
2285 #endif
2286 
2287 	/* setup DISEED with what we have */
2288 	diseed = (struct sli4_sge_diseed *) sgl;
2289 	memset(diseed, 0, sizeof(struct sli4_sge_diseed));
2290 	bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DISEED);
2291 
2292 	/* Endianness conversion if necessary */
2293 	diseed->ref_tag = cpu_to_le32(reftag);
2294 	diseed->ref_tag_tran = diseed->ref_tag;
2295 
2296 	/*
2297 	 * We only need to check the data on READs, for WRITEs
2298 	 * protection data is automatically generated, not checked.
2299 	 */
2300 	if (sc->sc_data_direction == DMA_FROM_DEVICE) {
2301 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_GUARD))
2302 			bf_set(lpfc_sli4_sge_dif_ce, diseed, checking);
2303 		else
2304 			bf_set(lpfc_sli4_sge_dif_ce, diseed, 0);
2305 
2306 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_REF))
2307 			bf_set(lpfc_sli4_sge_dif_re, diseed, checking);
2308 		else
2309 			bf_set(lpfc_sli4_sge_dif_re, diseed, 0);
2310 	}
2311 
2312 	/* setup DISEED with the rest of the info */
2313 	bf_set(lpfc_sli4_sge_dif_optx, diseed, txop);
2314 	bf_set(lpfc_sli4_sge_dif_oprx, diseed, rxop);
2315 
2316 	bf_set(lpfc_sli4_sge_dif_ai, diseed, 1);
2317 	bf_set(lpfc_sli4_sge_dif_me, diseed, 0);
2318 
2319 	/* Endianness conversion if necessary for DISEED */
2320 	diseed->word2 = cpu_to_le32(diseed->word2);
2321 	diseed->word3 = cpu_to_le32(diseed->word3);
2322 
2323 	/* advance bpl and increment sge count */
2324 	num_sge++;
2325 	sgl++;
2326 
2327 	/* assumption: caller has already run dma_map_sg on command data */
2328 	scsi_for_each_sg(sc, sgde, datasegcnt, i) {
2329 		physaddr = sg_dma_address(sgde);
2330 		dma_len = sg_dma_len(sgde);
2331 		sgl->addr_lo = cpu_to_le32(putPaddrLow(physaddr));
2332 		sgl->addr_hi = cpu_to_le32(putPaddrHigh(physaddr));
2333 		if ((i + 1) == datasegcnt)
2334 			bf_set(lpfc_sli4_sge_last, sgl, 1);
2335 		else
2336 			bf_set(lpfc_sli4_sge_last, sgl, 0);
2337 		bf_set(lpfc_sli4_sge_offset, sgl, dma_offset);
2338 		bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DATA);
2339 
2340 		sgl->sge_len = cpu_to_le32(dma_len);
2341 		dma_offset += dma_len;
2342 
2343 		sgl++;
2344 		num_sge++;
2345 	}
2346 
2347 out:
2348 	return num_sge;
2349 }
2350 
2351 /**
2352  * lpfc_bg_setup_sgl_prot - Setup BlockGuard SGL with protection data
2353  * @phba: The Hba for which this call is being executed.
2354  * @sc: pointer to scsi command we're working on
2355  * @sgl: pointer to buffer list for protection groups
2356  * @datacnt: number of segments of data that have been dma mapped
2357  * @protcnt: number of segment of protection data that have been dma mapped
2358  *
2359  * This function sets up SGL buffer list for protection groups of
2360  * type LPFC_PG_TYPE_DIF
2361  *
2362  * This is usually used when DIFs are in their own buffers,
2363  * separate from the data. The HBA can then by instructed
2364  * to place the DIFs in the outgoing stream.  For read operations,
2365  * The HBA could extract the DIFs and place it in DIF buffers.
2366  *
2367  * The buffer list for this type consists of one or more of the
2368  * protection groups described below:
2369  *                                    +-------------------------+
2370  *   start of first prot group  -->   |         DISEED          |
2371  *                                    +-------------------------+
2372  *                                    |      DIF (Prot SGE)     |
2373  *                                    +-------------------------+
2374  *                                    |        Data SGE         |
2375  *                                    +-------------------------+
2376  *                                    |more Data SGE's ... (opt)|
2377  *                                    +-------------------------+
2378  *   start of new  prot group  -->    |         DISEED          |
2379  *                                    +-------------------------+
2380  *                                    |          ...            |
2381  *                                    +-------------------------+
2382  *
2383  * Note: It is assumed that both data and protection s/g buffers have been
2384  *       mapped for DMA
2385  *
2386  * Returns the number of SGEs added to the SGL.
2387  **/
2388 static int
2389 lpfc_bg_setup_sgl_prot(struct lpfc_hba *phba, struct scsi_cmnd *sc,
2390 		struct sli4_sge *sgl, int datacnt, int protcnt)
2391 {
2392 	struct scatterlist *sgde = NULL; /* s/g data entry */
2393 	struct scatterlist *sgpe = NULL; /* s/g prot entry */
2394 	struct sli4_sge_diseed *diseed = NULL;
2395 	dma_addr_t dataphysaddr, protphysaddr;
2396 	unsigned short curr_data = 0, curr_prot = 0;
2397 	unsigned int split_offset;
2398 	unsigned int protgroup_len, protgroup_offset = 0, protgroup_remainder;
2399 	unsigned int protgrp_blks, protgrp_bytes;
2400 	unsigned int remainder, subtotal;
2401 	int status;
2402 	unsigned char pgdone = 0, alldone = 0;
2403 	unsigned blksize;
2404 	uint32_t reftag;
2405 	uint8_t txop, rxop;
2406 	uint32_t dma_len;
2407 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2408 	uint32_t rc;
2409 #endif
2410 	uint32_t checking = 1;
2411 	uint32_t dma_offset = 0;
2412 	int num_sge = 0;
2413 
2414 	sgpe = scsi_prot_sglist(sc);
2415 	sgde = scsi_sglist(sc);
2416 
2417 	if (!sgpe || !sgde) {
2418 		lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
2419 				"9082 Invalid s/g entry: data=0x%p prot=0x%p\n",
2420 				sgpe, sgde);
2421 		return 0;
2422 	}
2423 
2424 	status = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
2425 	if (status)
2426 		goto out;
2427 
2428 	/* extract some info from the scsi command */
2429 	blksize = lpfc_cmd_blksize(sc);
2430 	reftag = (uint32_t)scsi_get_lba(sc); /* Truncate LBA */
2431 
2432 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2433 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
2434 	if (rc) {
2435 		if (rc & BG_ERR_SWAP)
2436 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
2437 		if (rc & BG_ERR_CHECK)
2438 			checking = 0;
2439 	}
2440 #endif
2441 
2442 	split_offset = 0;
2443 	do {
2444 		/* Check to see if we ran out of space */
2445 		if (num_sge >= (phba->cfg_total_seg_cnt - 2))
2446 			return num_sge + 3;
2447 
2448 		/* setup DISEED with what we have */
2449 		diseed = (struct sli4_sge_diseed *) sgl;
2450 		memset(diseed, 0, sizeof(struct sli4_sge_diseed));
2451 		bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DISEED);
2452 
2453 		/* Endianness conversion if necessary */
2454 		diseed->ref_tag = cpu_to_le32(reftag);
2455 		diseed->ref_tag_tran = diseed->ref_tag;
2456 
2457 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_GUARD)) {
2458 			bf_set(lpfc_sli4_sge_dif_ce, diseed, checking);
2459 
2460 		} else {
2461 			bf_set(lpfc_sli4_sge_dif_ce, diseed, 0);
2462 			/*
2463 			 * When in this mode, the hardware will replace
2464 			 * the guard tag from the host with a
2465 			 * newly generated good CRC for the wire.
2466 			 * Switch to raw mode here to avoid this
2467 			 * behavior. What the host sends gets put on the wire.
2468 			 */
2469 			if (txop == BG_OP_IN_CRC_OUT_CRC) {
2470 				txop = BG_OP_RAW_MODE;
2471 				rxop = BG_OP_RAW_MODE;
2472 			}
2473 		}
2474 
2475 
2476 		if (lpfc_cmd_protect(sc, LPFC_CHECK_PROTECT_REF))
2477 			bf_set(lpfc_sli4_sge_dif_re, diseed, checking);
2478 		else
2479 			bf_set(lpfc_sli4_sge_dif_re, diseed, 0);
2480 
2481 		/* setup DISEED with the rest of the info */
2482 		bf_set(lpfc_sli4_sge_dif_optx, diseed, txop);
2483 		bf_set(lpfc_sli4_sge_dif_oprx, diseed, rxop);
2484 
2485 		bf_set(lpfc_sli4_sge_dif_ai, diseed, 1);
2486 		bf_set(lpfc_sli4_sge_dif_me, diseed, 0);
2487 
2488 		/* Endianness conversion if necessary for DISEED */
2489 		diseed->word2 = cpu_to_le32(diseed->word2);
2490 		diseed->word3 = cpu_to_le32(diseed->word3);
2491 
2492 		/* advance sgl and increment bde count */
2493 		num_sge++;
2494 		sgl++;
2495 
2496 		/* setup the first BDE that points to protection buffer */
2497 		protphysaddr = sg_dma_address(sgpe) + protgroup_offset;
2498 		protgroup_len = sg_dma_len(sgpe) - protgroup_offset;
2499 
2500 		/* must be integer multiple of the DIF block length */
2501 		BUG_ON(protgroup_len % 8);
2502 
2503 		/* Now setup DIF SGE */
2504 		sgl->word2 = 0;
2505 		bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DIF);
2506 		sgl->addr_hi = le32_to_cpu(putPaddrHigh(protphysaddr));
2507 		sgl->addr_lo = le32_to_cpu(putPaddrLow(protphysaddr));
2508 		sgl->word2 = cpu_to_le32(sgl->word2);
2509 
2510 		protgrp_blks = protgroup_len / 8;
2511 		protgrp_bytes = protgrp_blks * blksize;
2512 
2513 		/* check if DIF SGE is crossing the 4K boundary; if so split */
2514 		if ((sgl->addr_lo & 0xfff) + protgroup_len > 0x1000) {
2515 			protgroup_remainder = 0x1000 - (sgl->addr_lo & 0xfff);
2516 			protgroup_offset += protgroup_remainder;
2517 			protgrp_blks = protgroup_remainder / 8;
2518 			protgrp_bytes = protgrp_blks * blksize;
2519 		} else {
2520 			protgroup_offset = 0;
2521 			curr_prot++;
2522 		}
2523 
2524 		num_sge++;
2525 
2526 		/* setup SGE's for data blocks associated with DIF data */
2527 		pgdone = 0;
2528 		subtotal = 0; /* total bytes processed for current prot grp */
2529 		while (!pgdone) {
2530 			/* Check to see if we ran out of space */
2531 			if (num_sge >= phba->cfg_total_seg_cnt)
2532 				return num_sge + 1;
2533 
2534 			if (!sgde) {
2535 				lpfc_printf_log(phba, KERN_ERR, LOG_BG,
2536 					"9086 BLKGRD:%s Invalid data segment\n",
2537 						__func__);
2538 				return 0;
2539 			}
2540 			sgl++;
2541 			dataphysaddr = sg_dma_address(sgde) + split_offset;
2542 
2543 			remainder = sg_dma_len(sgde) - split_offset;
2544 
2545 			if ((subtotal + remainder) <= protgrp_bytes) {
2546 				/* we can use this whole buffer */
2547 				dma_len = remainder;
2548 				split_offset = 0;
2549 
2550 				if ((subtotal + remainder) == protgrp_bytes)
2551 					pgdone = 1;
2552 			} else {
2553 				/* must split this buffer with next prot grp */
2554 				dma_len = protgrp_bytes - subtotal;
2555 				split_offset += dma_len;
2556 			}
2557 
2558 			subtotal += dma_len;
2559 
2560 			sgl->addr_lo = cpu_to_le32(putPaddrLow(dataphysaddr));
2561 			sgl->addr_hi = cpu_to_le32(putPaddrHigh(dataphysaddr));
2562 			bf_set(lpfc_sli4_sge_last, sgl, 0);
2563 			bf_set(lpfc_sli4_sge_offset, sgl, dma_offset);
2564 			bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DATA);
2565 
2566 			sgl->sge_len = cpu_to_le32(dma_len);
2567 			dma_offset += dma_len;
2568 
2569 			num_sge++;
2570 			curr_data++;
2571 
2572 			if (split_offset)
2573 				break;
2574 
2575 			/* Move to the next s/g segment if possible */
2576 			sgde = sg_next(sgde);
2577 		}
2578 
2579 		if (protgroup_offset) {
2580 			/* update the reference tag */
2581 			reftag += protgrp_blks;
2582 			sgl++;
2583 			continue;
2584 		}
2585 
2586 		/* are we done ? */
2587 		if (curr_prot == protcnt) {
2588 			bf_set(lpfc_sli4_sge_last, sgl, 1);
2589 			alldone = 1;
2590 		} else if (curr_prot < protcnt) {
2591 			/* advance to next prot buffer */
2592 			sgpe = sg_next(sgpe);
2593 			sgl++;
2594 
2595 			/* update the reference tag */
2596 			reftag += protgrp_blks;
2597 		} else {
2598 			/* if we're here, we have a bug */
2599 			lpfc_printf_log(phba, KERN_ERR, LOG_BG,
2600 				"9085 BLKGRD: bug in %s\n", __func__);
2601 		}
2602 
2603 	} while (!alldone);
2604 
2605 out:
2606 
2607 	return num_sge;
2608 }
2609 
2610 /**
2611  * lpfc_prot_group_type - Get prtotection group type of SCSI command
2612  * @phba: The Hba for which this call is being executed.
2613  * @sc: pointer to scsi command we're working on
2614  *
2615  * Given a SCSI command that supports DIF, determine composition of protection
2616  * groups involved in setting up buffer lists
2617  *
2618  * Returns: Protection group type (with or without DIF)
2619  *
2620  **/
2621 static int
2622 lpfc_prot_group_type(struct lpfc_hba *phba, struct scsi_cmnd *sc)
2623 {
2624 	int ret = LPFC_PG_TYPE_INVALID;
2625 	unsigned char op = scsi_get_prot_op(sc);
2626 
2627 	switch (op) {
2628 	case SCSI_PROT_READ_STRIP:
2629 	case SCSI_PROT_WRITE_INSERT:
2630 		ret = LPFC_PG_TYPE_NO_DIF;
2631 		break;
2632 	case SCSI_PROT_READ_INSERT:
2633 	case SCSI_PROT_WRITE_STRIP:
2634 	case SCSI_PROT_READ_PASS:
2635 	case SCSI_PROT_WRITE_PASS:
2636 		ret = LPFC_PG_TYPE_DIF_BUF;
2637 		break;
2638 	default:
2639 		if (phba)
2640 			lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
2641 					"9021 Unsupported protection op:%d\n",
2642 					op);
2643 		break;
2644 	}
2645 	return ret;
2646 }
2647 
2648 /**
2649  * lpfc_bg_scsi_adjust_dl - Adjust SCSI data length for BlockGuard
2650  * @phba: The Hba for which this call is being executed.
2651  * @lpfc_cmd: The scsi buffer which is going to be adjusted.
2652  *
2653  * Adjust the data length to account for how much data
2654  * is actually on the wire.
2655  *
2656  * returns the adjusted data length
2657  **/
2658 static int
2659 lpfc_bg_scsi_adjust_dl(struct lpfc_hba *phba,
2660 		       struct lpfc_scsi_buf *lpfc_cmd)
2661 {
2662 	struct scsi_cmnd *sc = lpfc_cmd->pCmd;
2663 	int fcpdl;
2664 
2665 	fcpdl = scsi_bufflen(sc);
2666 
2667 	/* Check if there is protection data on the wire */
2668 	if (sc->sc_data_direction == DMA_FROM_DEVICE) {
2669 		/* Read check for protection data */
2670 		if (scsi_get_prot_op(sc) ==  SCSI_PROT_READ_INSERT)
2671 			return fcpdl;
2672 
2673 	} else {
2674 		/* Write check for protection data */
2675 		if (scsi_get_prot_op(sc) ==  SCSI_PROT_WRITE_STRIP)
2676 			return fcpdl;
2677 	}
2678 
2679 	/*
2680 	 * If we are in DIF Type 1 mode every data block has a 8 byte
2681 	 * DIF (trailer) attached to it. Must ajust FCP data length
2682 	 * to account for the protection data.
2683 	 */
2684 	fcpdl += (fcpdl / lpfc_cmd_blksize(sc)) * 8;
2685 
2686 	return fcpdl;
2687 }
2688 
2689 /**
2690  * lpfc_bg_scsi_prep_dma_buf_s3 - DMA mapping for scsi buffer to SLI3 IF spec
2691  * @phba: The Hba for which this call is being executed.
2692  * @lpfc_cmd: The scsi buffer which is going to be prep'ed.
2693  *
2694  * This is the protection/DIF aware version of
2695  * lpfc_scsi_prep_dma_buf(). It may be a good idea to combine the
2696  * two functions eventually, but for now, it's here
2697  **/
2698 static int
2699 lpfc_bg_scsi_prep_dma_buf_s3(struct lpfc_hba *phba,
2700 		struct lpfc_scsi_buf *lpfc_cmd)
2701 {
2702 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
2703 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
2704 	struct ulp_bde64 *bpl = lpfc_cmd->fcp_bpl;
2705 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
2706 	uint32_t num_bde = 0;
2707 	int datasegcnt, protsegcnt, datadir = scsi_cmnd->sc_data_direction;
2708 	int prot_group_type = 0;
2709 	int fcpdl;
2710 
2711 	/*
2712 	 * Start the lpfc command prep by bumping the bpl beyond fcp_cmnd
2713 	 *  fcp_rsp regions to the first data bde entry
2714 	 */
2715 	bpl += 2;
2716 	if (scsi_sg_count(scsi_cmnd)) {
2717 		/*
2718 		 * The driver stores the segment count returned from pci_map_sg
2719 		 * because this a count of dma-mappings used to map the use_sg
2720 		 * pages.  They are not guaranteed to be the same for those
2721 		 * architectures that implement an IOMMU.
2722 		 */
2723 		datasegcnt = dma_map_sg(&phba->pcidev->dev,
2724 					scsi_sglist(scsi_cmnd),
2725 					scsi_sg_count(scsi_cmnd), datadir);
2726 		if (unlikely(!datasegcnt))
2727 			return 1;
2728 
2729 		lpfc_cmd->seg_cnt = datasegcnt;
2730 
2731 		/* First check if data segment count from SCSI Layer is good */
2732 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt)
2733 			goto err;
2734 
2735 		prot_group_type = lpfc_prot_group_type(phba, scsi_cmnd);
2736 
2737 		switch (prot_group_type) {
2738 		case LPFC_PG_TYPE_NO_DIF:
2739 
2740 			/* Here we need to add a PDE5 and PDE6 to the count */
2741 			if ((lpfc_cmd->seg_cnt + 2) > phba->cfg_total_seg_cnt)
2742 				goto err;
2743 
2744 			num_bde = lpfc_bg_setup_bpl(phba, scsi_cmnd, bpl,
2745 					datasegcnt);
2746 			/* we should have 2 or more entries in buffer list */
2747 			if (num_bde < 2)
2748 				goto err;
2749 			break;
2750 
2751 		case LPFC_PG_TYPE_DIF_BUF:
2752 			/*
2753 			 * This type indicates that protection buffers are
2754 			 * passed to the driver, so that needs to be prepared
2755 			 * for DMA
2756 			 */
2757 			protsegcnt = dma_map_sg(&phba->pcidev->dev,
2758 					scsi_prot_sglist(scsi_cmnd),
2759 					scsi_prot_sg_count(scsi_cmnd), datadir);
2760 			if (unlikely(!protsegcnt)) {
2761 				scsi_dma_unmap(scsi_cmnd);
2762 				return 1;
2763 			}
2764 
2765 			lpfc_cmd->prot_seg_cnt = protsegcnt;
2766 
2767 			/*
2768 			 * There is a minimun of 4 BPLs used for every
2769 			 * protection data segment.
2770 			 */
2771 			if ((lpfc_cmd->prot_seg_cnt * 4) >
2772 			    (phba->cfg_total_seg_cnt - 2))
2773 				goto err;
2774 
2775 			num_bde = lpfc_bg_setup_bpl_prot(phba, scsi_cmnd, bpl,
2776 					datasegcnt, protsegcnt);
2777 			/* we should have 3 or more entries in buffer list */
2778 			if ((num_bde < 3) ||
2779 			    (num_bde > phba->cfg_total_seg_cnt))
2780 				goto err;
2781 			break;
2782 
2783 		case LPFC_PG_TYPE_INVALID:
2784 		default:
2785 			scsi_dma_unmap(scsi_cmnd);
2786 			lpfc_cmd->seg_cnt = 0;
2787 
2788 			lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
2789 					"9022 Unexpected protection group %i\n",
2790 					prot_group_type);
2791 			return 1;
2792 		}
2793 	}
2794 
2795 	/*
2796 	 * Finish initializing those IOCB fields that are dependent on the
2797 	 * scsi_cmnd request_buffer.  Note that the bdeSize is explicitly
2798 	 * reinitialized since all iocb memory resources are used many times
2799 	 * for transmit, receive, and continuation bpl's.
2800 	 */
2801 	iocb_cmd->un.fcpi64.bdl.bdeSize = (2 * sizeof(struct ulp_bde64));
2802 	iocb_cmd->un.fcpi64.bdl.bdeSize += (num_bde * sizeof(struct ulp_bde64));
2803 	iocb_cmd->ulpBdeCount = 1;
2804 	iocb_cmd->ulpLe = 1;
2805 
2806 	fcpdl = lpfc_bg_scsi_adjust_dl(phba, lpfc_cmd);
2807 	fcp_cmnd->fcpDl = be32_to_cpu(fcpdl);
2808 
2809 	/*
2810 	 * Due to difference in data length between DIF/non-DIF paths,
2811 	 * we need to set word 4 of IOCB here
2812 	 */
2813 	iocb_cmd->un.fcpi.fcpi_parm = fcpdl;
2814 
2815 	return 0;
2816 err:
2817 	if (lpfc_cmd->seg_cnt)
2818 		scsi_dma_unmap(scsi_cmnd);
2819 	if (lpfc_cmd->prot_seg_cnt)
2820 		dma_unmap_sg(&phba->pcidev->dev, scsi_prot_sglist(scsi_cmnd),
2821 			     scsi_prot_sg_count(scsi_cmnd),
2822 			     scsi_cmnd->sc_data_direction);
2823 
2824 	lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
2825 			"9023 Cannot setup S/G List for HBA"
2826 			"IO segs %d/%d BPL %d SCSI %d: %d %d\n",
2827 			lpfc_cmd->seg_cnt, lpfc_cmd->prot_seg_cnt,
2828 			phba->cfg_total_seg_cnt, phba->cfg_sg_seg_cnt,
2829 			prot_group_type, num_bde);
2830 
2831 	lpfc_cmd->seg_cnt = 0;
2832 	lpfc_cmd->prot_seg_cnt = 0;
2833 	return 1;
2834 }
2835 
2836 /*
2837  * This function calcuates the T10 DIF guard tag
2838  * on the specified data using a CRC algorithmn
2839  * using crc_t10dif.
2840  */
2841 static uint16_t
2842 lpfc_bg_crc(uint8_t *data, int count)
2843 {
2844 	uint16_t crc = 0;
2845 	uint16_t x;
2846 
2847 	crc = crc_t10dif(data, count);
2848 	x = cpu_to_be16(crc);
2849 	return x;
2850 }
2851 
2852 /*
2853  * This function calcuates the T10 DIF guard tag
2854  * on the specified data using a CSUM algorithmn
2855  * using ip_compute_csum.
2856  */
2857 static uint16_t
2858 lpfc_bg_csum(uint8_t *data, int count)
2859 {
2860 	uint16_t ret;
2861 
2862 	ret = ip_compute_csum(data, count);
2863 	return ret;
2864 }
2865 
2866 /*
2867  * This function examines the protection data to try to determine
2868  * what type of T10-DIF error occurred.
2869  */
2870 static void
2871 lpfc_calc_bg_err(struct lpfc_hba *phba, struct lpfc_scsi_buf *lpfc_cmd)
2872 {
2873 	struct scatterlist *sgpe; /* s/g prot entry */
2874 	struct scatterlist *sgde; /* s/g data entry */
2875 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
2876 	struct scsi_dif_tuple *src = NULL;
2877 	uint8_t *data_src = NULL;
2878 	uint16_t guard_tag;
2879 	uint16_t start_app_tag, app_tag;
2880 	uint32_t start_ref_tag, ref_tag;
2881 	int prot, protsegcnt;
2882 	int err_type, len, data_len;
2883 	int chk_ref, chk_app, chk_guard;
2884 	uint16_t sum;
2885 	unsigned blksize;
2886 
2887 	err_type = BGS_GUARD_ERR_MASK;
2888 	sum = 0;
2889 	guard_tag = 0;
2890 
2891 	/* First check to see if there is protection data to examine */
2892 	prot = scsi_get_prot_op(cmd);
2893 	if ((prot == SCSI_PROT_READ_STRIP) ||
2894 	    (prot == SCSI_PROT_WRITE_INSERT) ||
2895 	    (prot == SCSI_PROT_NORMAL))
2896 		goto out;
2897 
2898 	/* Currently the driver just supports ref_tag and guard_tag checking */
2899 	chk_ref = 1;
2900 	chk_app = 0;
2901 	chk_guard = 0;
2902 
2903 	/* Setup a ptr to the protection data provided by the SCSI host */
2904 	sgpe = scsi_prot_sglist(cmd);
2905 	protsegcnt = lpfc_cmd->prot_seg_cnt;
2906 
2907 	if (sgpe && protsegcnt) {
2908 
2909 		/*
2910 		 * We will only try to verify guard tag if the segment
2911 		 * data length is a multiple of the blksize.
2912 		 */
2913 		sgde = scsi_sglist(cmd);
2914 		blksize = lpfc_cmd_blksize(cmd);
2915 		data_src = (uint8_t *)sg_virt(sgde);
2916 		data_len = sgde->length;
2917 		if ((data_len & (blksize - 1)) == 0)
2918 			chk_guard = 1;
2919 
2920 		src = (struct scsi_dif_tuple *)sg_virt(sgpe);
2921 		start_ref_tag = (uint32_t)scsi_get_lba(cmd); /* Truncate LBA */
2922 		start_app_tag = src->app_tag;
2923 		len = sgpe->length;
2924 		while (src && protsegcnt) {
2925 			while (len) {
2926 
2927 				/*
2928 				 * First check to see if a protection data
2929 				 * check is valid
2930 				 */
2931 				if ((src->ref_tag == 0xffffffff) ||
2932 				    (src->app_tag == 0xffff)) {
2933 					start_ref_tag++;
2934 					goto skipit;
2935 				}
2936 
2937 				/* First Guard Tag checking */
2938 				if (chk_guard) {
2939 					guard_tag = src->guard_tag;
2940 					if (lpfc_cmd_guard_csum(cmd))
2941 						sum = lpfc_bg_csum(data_src,
2942 								   blksize);
2943 					else
2944 						sum = lpfc_bg_crc(data_src,
2945 								  blksize);
2946 					if ((guard_tag != sum)) {
2947 						err_type = BGS_GUARD_ERR_MASK;
2948 						goto out;
2949 					}
2950 				}
2951 
2952 				/* Reference Tag checking */
2953 				ref_tag = be32_to_cpu(src->ref_tag);
2954 				if (chk_ref && (ref_tag != start_ref_tag)) {
2955 					err_type = BGS_REFTAG_ERR_MASK;
2956 					goto out;
2957 				}
2958 				start_ref_tag++;
2959 
2960 				/* App Tag checking */
2961 				app_tag = src->app_tag;
2962 				if (chk_app && (app_tag != start_app_tag)) {
2963 					err_type = BGS_APPTAG_ERR_MASK;
2964 					goto out;
2965 				}
2966 skipit:
2967 				len -= sizeof(struct scsi_dif_tuple);
2968 				if (len < 0)
2969 					len = 0;
2970 				src++;
2971 
2972 				data_src += blksize;
2973 				data_len -= blksize;
2974 
2975 				/*
2976 				 * Are we at the end of the Data segment?
2977 				 * The data segment is only used for Guard
2978 				 * tag checking.
2979 				 */
2980 				if (chk_guard && (data_len == 0)) {
2981 					chk_guard = 0;
2982 					sgde = sg_next(sgde);
2983 					if (!sgde)
2984 						goto out;
2985 
2986 					data_src = (uint8_t *)sg_virt(sgde);
2987 					data_len = sgde->length;
2988 					if ((data_len & (blksize - 1)) == 0)
2989 						chk_guard = 1;
2990 				}
2991 			}
2992 
2993 			/* Goto the next Protection data segment */
2994 			sgpe = sg_next(sgpe);
2995 			if (sgpe) {
2996 				src = (struct scsi_dif_tuple *)sg_virt(sgpe);
2997 				len = sgpe->length;
2998 			} else {
2999 				src = NULL;
3000 			}
3001 			protsegcnt--;
3002 		}
3003 	}
3004 out:
3005 	if (err_type == BGS_GUARD_ERR_MASK) {
3006 		scsi_build_sense_buffer(1, cmd->sense_buffer, ILLEGAL_REQUEST,
3007 					0x10, 0x1);
3008 		cmd->result = DRIVER_SENSE << 24
3009 			| ScsiResult(DID_ABORT, SAM_STAT_CHECK_CONDITION);
3010 		phba->bg_guard_err_cnt++;
3011 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3012 				"9069 BLKGRD: LBA %lx grd_tag error %x != %x\n",
3013 				(unsigned long)scsi_get_lba(cmd),
3014 				sum, guard_tag);
3015 
3016 	} else if (err_type == BGS_REFTAG_ERR_MASK) {
3017 		scsi_build_sense_buffer(1, cmd->sense_buffer, ILLEGAL_REQUEST,
3018 					0x10, 0x3);
3019 		cmd->result = DRIVER_SENSE << 24
3020 			| ScsiResult(DID_ABORT, SAM_STAT_CHECK_CONDITION);
3021 
3022 		phba->bg_reftag_err_cnt++;
3023 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3024 				"9066 BLKGRD: LBA %lx ref_tag error %x != %x\n",
3025 				(unsigned long)scsi_get_lba(cmd),
3026 				ref_tag, start_ref_tag);
3027 
3028 	} else if (err_type == BGS_APPTAG_ERR_MASK) {
3029 		scsi_build_sense_buffer(1, cmd->sense_buffer, ILLEGAL_REQUEST,
3030 					0x10, 0x2);
3031 		cmd->result = DRIVER_SENSE << 24
3032 			| ScsiResult(DID_ABORT, SAM_STAT_CHECK_CONDITION);
3033 
3034 		phba->bg_apptag_err_cnt++;
3035 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3036 				"9041 BLKGRD: LBA %lx app_tag error %x != %x\n",
3037 				(unsigned long)scsi_get_lba(cmd),
3038 				app_tag, start_app_tag);
3039 	}
3040 }
3041 
3042 
3043 /*
3044  * This function checks for BlockGuard errors detected by
3045  * the HBA.  In case of errors, the ASC/ASCQ fields in the
3046  * sense buffer will be set accordingly, paired with
3047  * ILLEGAL_REQUEST to signal to the kernel that the HBA
3048  * detected corruption.
3049  *
3050  * Returns:
3051  *  0 - No error found
3052  *  1 - BlockGuard error found
3053  * -1 - Internal error (bad profile, ...etc)
3054  */
3055 static int
3056 lpfc_parse_bg_err(struct lpfc_hba *phba, struct lpfc_scsi_buf *lpfc_cmd,
3057 			struct lpfc_iocbq *pIocbOut)
3058 {
3059 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
3060 	struct sli3_bg_fields *bgf = &pIocbOut->iocb.unsli3.sli3_bg;
3061 	int ret = 0;
3062 	uint32_t bghm = bgf->bghm;
3063 	uint32_t bgstat = bgf->bgstat;
3064 	uint64_t failing_sector = 0;
3065 
3066 	spin_lock(&_dump_buf_lock);
3067 	if (!_dump_buf_done) {
3068 		lpfc_printf_log(phba, KERN_ERR, LOG_BG,  "9070 BLKGRD: Saving"
3069 			" Data for %u blocks to debugfs\n",
3070 				(cmd->cmnd[7] << 8 | cmd->cmnd[8]));
3071 		lpfc_debug_save_data(phba, cmd);
3072 
3073 		/* If we have a prot sgl, save the DIF buffer */
3074 		if (lpfc_prot_group_type(phba, cmd) ==
3075 				LPFC_PG_TYPE_DIF_BUF) {
3076 			lpfc_printf_log(phba, KERN_ERR, LOG_BG, "9071 BLKGRD: "
3077 				"Saving DIF for %u blocks to debugfs\n",
3078 				(cmd->cmnd[7] << 8 | cmd->cmnd[8]));
3079 			lpfc_debug_save_dif(phba, cmd);
3080 		}
3081 
3082 		_dump_buf_done = 1;
3083 	}
3084 	spin_unlock(&_dump_buf_lock);
3085 
3086 	if (lpfc_bgs_get_invalid_prof(bgstat)) {
3087 		cmd->result = ScsiResult(DID_ERROR, 0);
3088 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3089 				"9072 BLKGRD: Invalid BG Profile in cmd"
3090 				" 0x%x lba 0x%llx blk cnt 0x%x "
3091 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3092 				(unsigned long long)scsi_get_lba(cmd),
3093 				blk_rq_sectors(cmd->request), bgstat, bghm);
3094 		ret = (-1);
3095 		goto out;
3096 	}
3097 
3098 	if (lpfc_bgs_get_uninit_dif_block(bgstat)) {
3099 		cmd->result = ScsiResult(DID_ERROR, 0);
3100 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3101 				"9073 BLKGRD: Invalid BG PDIF Block in cmd"
3102 				" 0x%x lba 0x%llx blk cnt 0x%x "
3103 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3104 				(unsigned long long)scsi_get_lba(cmd),
3105 				blk_rq_sectors(cmd->request), bgstat, bghm);
3106 		ret = (-1);
3107 		goto out;
3108 	}
3109 
3110 	if (lpfc_bgs_get_guard_err(bgstat)) {
3111 		ret = 1;
3112 
3113 		scsi_build_sense_buffer(1, cmd->sense_buffer, ILLEGAL_REQUEST,
3114 				0x10, 0x1);
3115 		cmd->result = DRIVER_SENSE << 24
3116 			| ScsiResult(DID_ABORT, SAM_STAT_CHECK_CONDITION);
3117 		phba->bg_guard_err_cnt++;
3118 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3119 				"9055 BLKGRD: Guard Tag error in cmd"
3120 				" 0x%x lba 0x%llx blk cnt 0x%x "
3121 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3122 				(unsigned long long)scsi_get_lba(cmd),
3123 				blk_rq_sectors(cmd->request), bgstat, bghm);
3124 	}
3125 
3126 	if (lpfc_bgs_get_reftag_err(bgstat)) {
3127 		ret = 1;
3128 
3129 		scsi_build_sense_buffer(1, cmd->sense_buffer, ILLEGAL_REQUEST,
3130 				0x10, 0x3);
3131 		cmd->result = DRIVER_SENSE << 24
3132 			| ScsiResult(DID_ABORT, SAM_STAT_CHECK_CONDITION);
3133 
3134 		phba->bg_reftag_err_cnt++;
3135 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3136 				"9056 BLKGRD: Ref Tag error in cmd"
3137 				" 0x%x lba 0x%llx blk cnt 0x%x "
3138 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3139 				(unsigned long long)scsi_get_lba(cmd),
3140 				blk_rq_sectors(cmd->request), bgstat, bghm);
3141 	}
3142 
3143 	if (lpfc_bgs_get_apptag_err(bgstat)) {
3144 		ret = 1;
3145 
3146 		scsi_build_sense_buffer(1, cmd->sense_buffer, ILLEGAL_REQUEST,
3147 				0x10, 0x2);
3148 		cmd->result = DRIVER_SENSE << 24
3149 			| ScsiResult(DID_ABORT, SAM_STAT_CHECK_CONDITION);
3150 
3151 		phba->bg_apptag_err_cnt++;
3152 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3153 				"9061 BLKGRD: App Tag error in cmd"
3154 				" 0x%x lba 0x%llx blk cnt 0x%x "
3155 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3156 				(unsigned long long)scsi_get_lba(cmd),
3157 				blk_rq_sectors(cmd->request), bgstat, bghm);
3158 	}
3159 
3160 	if (lpfc_bgs_get_hi_water_mark_present(bgstat)) {
3161 		/*
3162 		 * setup sense data descriptor 0 per SPC-4 as an information
3163 		 * field, and put the failing LBA in it.
3164 		 * This code assumes there was also a guard/app/ref tag error
3165 		 * indication.
3166 		 */
3167 		cmd->sense_buffer[7] = 0xc;   /* Additional sense length */
3168 		cmd->sense_buffer[8] = 0;     /* Information descriptor type */
3169 		cmd->sense_buffer[9] = 0xa;   /* Additional descriptor length */
3170 		cmd->sense_buffer[10] = 0x80; /* Validity bit */
3171 
3172 		/* bghm is a "on the wire" FC frame based count */
3173 		switch (scsi_get_prot_op(cmd)) {
3174 		case SCSI_PROT_READ_INSERT:
3175 		case SCSI_PROT_WRITE_STRIP:
3176 			bghm /= cmd->device->sector_size;
3177 			break;
3178 		case SCSI_PROT_READ_STRIP:
3179 		case SCSI_PROT_WRITE_INSERT:
3180 		case SCSI_PROT_READ_PASS:
3181 		case SCSI_PROT_WRITE_PASS:
3182 			bghm /= (cmd->device->sector_size +
3183 				sizeof(struct scsi_dif_tuple));
3184 			break;
3185 		}
3186 
3187 		failing_sector = scsi_get_lba(cmd);
3188 		failing_sector += bghm;
3189 
3190 		/* Descriptor Information */
3191 		put_unaligned_be64(failing_sector, &cmd->sense_buffer[12]);
3192 	}
3193 
3194 	if (!ret) {
3195 		/* No error was reported - problem in FW? */
3196 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3197 				"9057 BLKGRD: Unknown error in cmd"
3198 				" 0x%x lba 0x%llx blk cnt 0x%x "
3199 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3200 				(unsigned long long)scsi_get_lba(cmd),
3201 				blk_rq_sectors(cmd->request), bgstat, bghm);
3202 
3203 		/* Calcuate what type of error it was */
3204 		lpfc_calc_bg_err(phba, lpfc_cmd);
3205 	}
3206 out:
3207 	return ret;
3208 }
3209 
3210 /**
3211  * lpfc_scsi_prep_dma_buf_s4 - DMA mapping for scsi buffer to SLI4 IF spec
3212  * @phba: The Hba for which this call is being executed.
3213  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3214  *
3215  * This routine does the pci dma mapping for scatter-gather list of scsi cmnd
3216  * field of @lpfc_cmd for device with SLI-4 interface spec.
3217  *
3218  * Return codes:
3219  *	1 - Error
3220  *	0 - Success
3221  **/
3222 static int
3223 lpfc_scsi_prep_dma_buf_s4(struct lpfc_hba *phba, struct lpfc_scsi_buf *lpfc_cmd)
3224 {
3225 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
3226 	struct scatterlist *sgel = NULL;
3227 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
3228 	struct sli4_sge *sgl = (struct sli4_sge *)lpfc_cmd->fcp_bpl;
3229 	struct sli4_sge *first_data_sgl;
3230 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
3231 	dma_addr_t physaddr;
3232 	uint32_t num_bde = 0;
3233 	uint32_t dma_len;
3234 	uint32_t dma_offset = 0;
3235 	int nseg;
3236 	struct ulp_bde64 *bde;
3237 
3238 	/*
3239 	 * There are three possibilities here - use scatter-gather segment, use
3240 	 * the single mapping, or neither.  Start the lpfc command prep by
3241 	 * bumping the bpl beyond the fcp_cmnd and fcp_rsp regions to the first
3242 	 * data bde entry.
3243 	 */
3244 	if (scsi_sg_count(scsi_cmnd)) {
3245 		/*
3246 		 * The driver stores the segment count returned from pci_map_sg
3247 		 * because this a count of dma-mappings used to map the use_sg
3248 		 * pages.  They are not guaranteed to be the same for those
3249 		 * architectures that implement an IOMMU.
3250 		 */
3251 
3252 		nseg = scsi_dma_map(scsi_cmnd);
3253 		if (unlikely(nseg <= 0))
3254 			return 1;
3255 		sgl += 1;
3256 		/* clear the last flag in the fcp_rsp map entry */
3257 		sgl->word2 = le32_to_cpu(sgl->word2);
3258 		bf_set(lpfc_sli4_sge_last, sgl, 0);
3259 		sgl->word2 = cpu_to_le32(sgl->word2);
3260 		sgl += 1;
3261 		first_data_sgl = sgl;
3262 		lpfc_cmd->seg_cnt = nseg;
3263 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt) {
3264 			lpfc_printf_log(phba, KERN_ERR, LOG_BG, "9074 BLKGRD:"
3265 				" %s: Too many sg segments from "
3266 				"dma_map_sg.  Config %d, seg_cnt %d\n",
3267 				__func__, phba->cfg_sg_seg_cnt,
3268 			       lpfc_cmd->seg_cnt);
3269 			lpfc_cmd->seg_cnt = 0;
3270 			scsi_dma_unmap(scsi_cmnd);
3271 			return 1;
3272 		}
3273 
3274 		/*
3275 		 * The driver established a maximum scatter-gather segment count
3276 		 * during probe that limits the number of sg elements in any
3277 		 * single scsi command.  Just run through the seg_cnt and format
3278 		 * the sge's.
3279 		 * When using SLI-3 the driver will try to fit all the BDEs into
3280 		 * the IOCB. If it can't then the BDEs get added to a BPL as it
3281 		 * does for SLI-2 mode.
3282 		 */
3283 		scsi_for_each_sg(scsi_cmnd, sgel, nseg, num_bde) {
3284 			physaddr = sg_dma_address(sgel);
3285 			dma_len = sg_dma_len(sgel);
3286 			sgl->addr_lo = cpu_to_le32(putPaddrLow(physaddr));
3287 			sgl->addr_hi = cpu_to_le32(putPaddrHigh(physaddr));
3288 			sgl->word2 = le32_to_cpu(sgl->word2);
3289 			if ((num_bde + 1) == nseg)
3290 				bf_set(lpfc_sli4_sge_last, sgl, 1);
3291 			else
3292 				bf_set(lpfc_sli4_sge_last, sgl, 0);
3293 			bf_set(lpfc_sli4_sge_offset, sgl, dma_offset);
3294 			bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DATA);
3295 			sgl->word2 = cpu_to_le32(sgl->word2);
3296 			sgl->sge_len = cpu_to_le32(dma_len);
3297 			dma_offset += dma_len;
3298 			sgl++;
3299 		}
3300 		/* setup the performance hint (first data BDE) if enabled */
3301 		if (phba->sli3_options & LPFC_SLI4_PERFH_ENABLED) {
3302 			bde = (struct ulp_bde64 *)
3303 					&(iocb_cmd->unsli3.sli3Words[5]);
3304 			bde->addrLow = first_data_sgl->addr_lo;
3305 			bde->addrHigh = first_data_sgl->addr_hi;
3306 			bde->tus.f.bdeSize =
3307 					le32_to_cpu(first_data_sgl->sge_len);
3308 			bde->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
3309 			bde->tus.w = cpu_to_le32(bde->tus.w);
3310 		}
3311 	} else {
3312 		sgl += 1;
3313 		/* clear the last flag in the fcp_rsp map entry */
3314 		sgl->word2 = le32_to_cpu(sgl->word2);
3315 		bf_set(lpfc_sli4_sge_last, sgl, 1);
3316 		sgl->word2 = cpu_to_le32(sgl->word2);
3317 	}
3318 
3319 	/*
3320 	 * Finish initializing those IOCB fields that are dependent on the
3321 	 * scsi_cmnd request_buffer.  Note that for SLI-2 the bdeSize is
3322 	 * explicitly reinitialized.
3323 	 * all iocb memory resources are reused.
3324 	 */
3325 	fcp_cmnd->fcpDl = cpu_to_be32(scsi_bufflen(scsi_cmnd));
3326 
3327 	/*
3328 	 * Due to difference in data length between DIF/non-DIF paths,
3329 	 * we need to set word 4 of IOCB here
3330 	 */
3331 	iocb_cmd->un.fcpi.fcpi_parm = scsi_bufflen(scsi_cmnd);
3332 
3333 	/*
3334 	 * If the OAS driver feature is enabled and the lun is enabled for
3335 	 * OAS, set the oas iocb related flags.
3336 	 */
3337 	if ((phba->cfg_fof) && ((struct lpfc_device_data *)
3338 		scsi_cmnd->device->hostdata)->oas_enabled) {
3339 		lpfc_cmd->cur_iocbq.iocb_flag |= (LPFC_IO_OAS | LPFC_IO_FOF);
3340 		lpfc_cmd->cur_iocbq.priority = ((struct lpfc_device_data *)
3341 			scsi_cmnd->device->hostdata)->priority;
3342 	}
3343 	return 0;
3344 }
3345 
3346 /**
3347  * lpfc_bg_scsi_prep_dma_buf_s4 - DMA mapping for scsi buffer to SLI4 IF spec
3348  * @phba: The Hba for which this call is being executed.
3349  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3350  *
3351  * This is the protection/DIF aware version of
3352  * lpfc_scsi_prep_dma_buf(). It may be a good idea to combine the
3353  * two functions eventually, but for now, it's here
3354  **/
3355 static int
3356 lpfc_bg_scsi_prep_dma_buf_s4(struct lpfc_hba *phba,
3357 		struct lpfc_scsi_buf *lpfc_cmd)
3358 {
3359 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
3360 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
3361 	struct sli4_sge *sgl = (struct sli4_sge *)(lpfc_cmd->fcp_bpl);
3362 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
3363 	uint32_t num_sge = 0;
3364 	int datasegcnt, protsegcnt, datadir = scsi_cmnd->sc_data_direction;
3365 	int prot_group_type = 0;
3366 	int fcpdl;
3367 
3368 	/*
3369 	 * Start the lpfc command prep by bumping the sgl beyond fcp_cmnd
3370 	 *  fcp_rsp regions to the first data sge entry
3371 	 */
3372 	if (scsi_sg_count(scsi_cmnd)) {
3373 		/*
3374 		 * The driver stores the segment count returned from pci_map_sg
3375 		 * because this a count of dma-mappings used to map the use_sg
3376 		 * pages.  They are not guaranteed to be the same for those
3377 		 * architectures that implement an IOMMU.
3378 		 */
3379 		datasegcnt = dma_map_sg(&phba->pcidev->dev,
3380 					scsi_sglist(scsi_cmnd),
3381 					scsi_sg_count(scsi_cmnd), datadir);
3382 		if (unlikely(!datasegcnt))
3383 			return 1;
3384 
3385 		sgl += 1;
3386 		/* clear the last flag in the fcp_rsp map entry */
3387 		sgl->word2 = le32_to_cpu(sgl->word2);
3388 		bf_set(lpfc_sli4_sge_last, sgl, 0);
3389 		sgl->word2 = cpu_to_le32(sgl->word2);
3390 
3391 		sgl += 1;
3392 		lpfc_cmd->seg_cnt = datasegcnt;
3393 
3394 		/* First check if data segment count from SCSI Layer is good */
3395 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt)
3396 			goto err;
3397 
3398 		prot_group_type = lpfc_prot_group_type(phba, scsi_cmnd);
3399 
3400 		switch (prot_group_type) {
3401 		case LPFC_PG_TYPE_NO_DIF:
3402 			/* Here we need to add a DISEED to the count */
3403 			if ((lpfc_cmd->seg_cnt + 1) > phba->cfg_total_seg_cnt)
3404 				goto err;
3405 
3406 			num_sge = lpfc_bg_setup_sgl(phba, scsi_cmnd, sgl,
3407 					datasegcnt);
3408 
3409 			/* we should have 2 or more entries in buffer list */
3410 			if (num_sge < 2)
3411 				goto err;
3412 			break;
3413 
3414 		case LPFC_PG_TYPE_DIF_BUF:
3415 			/*
3416 			 * This type indicates that protection buffers are
3417 			 * passed to the driver, so that needs to be prepared
3418 			 * for DMA
3419 			 */
3420 			protsegcnt = dma_map_sg(&phba->pcidev->dev,
3421 					scsi_prot_sglist(scsi_cmnd),
3422 					scsi_prot_sg_count(scsi_cmnd), datadir);
3423 			if (unlikely(!protsegcnt)) {
3424 				scsi_dma_unmap(scsi_cmnd);
3425 				return 1;
3426 			}
3427 
3428 			lpfc_cmd->prot_seg_cnt = protsegcnt;
3429 			/*
3430 			 * There is a minimun of 3 SGEs used for every
3431 			 * protection data segment.
3432 			 */
3433 			if ((lpfc_cmd->prot_seg_cnt * 3) >
3434 			    (phba->cfg_total_seg_cnt - 2))
3435 				goto err;
3436 
3437 			num_sge = lpfc_bg_setup_sgl_prot(phba, scsi_cmnd, sgl,
3438 					datasegcnt, protsegcnt);
3439 
3440 			/* we should have 3 or more entries in buffer list */
3441 			if ((num_sge < 3) ||
3442 			    (num_sge > phba->cfg_total_seg_cnt))
3443 				goto err;
3444 			break;
3445 
3446 		case LPFC_PG_TYPE_INVALID:
3447 		default:
3448 			scsi_dma_unmap(scsi_cmnd);
3449 			lpfc_cmd->seg_cnt = 0;
3450 
3451 			lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
3452 					"9083 Unexpected protection group %i\n",
3453 					prot_group_type);
3454 			return 1;
3455 		}
3456 	}
3457 
3458 	switch (scsi_get_prot_op(scsi_cmnd)) {
3459 	case SCSI_PROT_WRITE_STRIP:
3460 	case SCSI_PROT_READ_STRIP:
3461 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_DIF_STRIP;
3462 		break;
3463 	case SCSI_PROT_WRITE_INSERT:
3464 	case SCSI_PROT_READ_INSERT:
3465 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_DIF_INSERT;
3466 		break;
3467 	case SCSI_PROT_WRITE_PASS:
3468 	case SCSI_PROT_READ_PASS:
3469 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_DIF_PASS;
3470 		break;
3471 	}
3472 
3473 	fcpdl = lpfc_bg_scsi_adjust_dl(phba, lpfc_cmd);
3474 	fcp_cmnd->fcpDl = be32_to_cpu(fcpdl);
3475 
3476 	/*
3477 	 * Due to difference in data length between DIF/non-DIF paths,
3478 	 * we need to set word 4 of IOCB here
3479 	 */
3480 	iocb_cmd->un.fcpi.fcpi_parm = fcpdl;
3481 
3482 	/*
3483 	 * If the OAS driver feature is enabled and the lun is enabled for
3484 	 * OAS, set the oas iocb related flags.
3485 	 */
3486 	if ((phba->cfg_fof) && ((struct lpfc_device_data *)
3487 		scsi_cmnd->device->hostdata)->oas_enabled)
3488 		lpfc_cmd->cur_iocbq.iocb_flag |= (LPFC_IO_OAS | LPFC_IO_FOF);
3489 
3490 	return 0;
3491 err:
3492 	if (lpfc_cmd->seg_cnt)
3493 		scsi_dma_unmap(scsi_cmnd);
3494 	if (lpfc_cmd->prot_seg_cnt)
3495 		dma_unmap_sg(&phba->pcidev->dev, scsi_prot_sglist(scsi_cmnd),
3496 			     scsi_prot_sg_count(scsi_cmnd),
3497 			     scsi_cmnd->sc_data_direction);
3498 
3499 	lpfc_printf_log(phba, KERN_ERR, LOG_FCP,
3500 			"9084 Cannot setup S/G List for HBA"
3501 			"IO segs %d/%d SGL %d SCSI %d: %d %d\n",
3502 			lpfc_cmd->seg_cnt, lpfc_cmd->prot_seg_cnt,
3503 			phba->cfg_total_seg_cnt, phba->cfg_sg_seg_cnt,
3504 			prot_group_type, num_sge);
3505 
3506 	lpfc_cmd->seg_cnt = 0;
3507 	lpfc_cmd->prot_seg_cnt = 0;
3508 	return 1;
3509 }
3510 
3511 /**
3512  * lpfc_scsi_prep_dma_buf - Wrapper function for DMA mapping of scsi buffer
3513  * @phba: The Hba for which this call is being executed.
3514  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3515  *
3516  * This routine wraps the actual DMA mapping function pointer from the
3517  * lpfc_hba struct.
3518  *
3519  * Return codes:
3520  *	1 - Error
3521  *	0 - Success
3522  **/
3523 static inline int
3524 lpfc_scsi_prep_dma_buf(struct lpfc_hba *phba, struct lpfc_scsi_buf *lpfc_cmd)
3525 {
3526 	return phba->lpfc_scsi_prep_dma_buf(phba, lpfc_cmd);
3527 }
3528 
3529 /**
3530  * lpfc_bg_scsi_prep_dma_buf - Wrapper function for DMA mapping of scsi buffer
3531  * using BlockGuard.
3532  * @phba: The Hba for which this call is being executed.
3533  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3534  *
3535  * This routine wraps the actual DMA mapping function pointer from the
3536  * lpfc_hba struct.
3537  *
3538  * Return codes:
3539  *	1 - Error
3540  *	0 - Success
3541  **/
3542 static inline int
3543 lpfc_bg_scsi_prep_dma_buf(struct lpfc_hba *phba, struct lpfc_scsi_buf *lpfc_cmd)
3544 {
3545 	return phba->lpfc_bg_scsi_prep_dma_buf(phba, lpfc_cmd);
3546 }
3547 
3548 /**
3549  * lpfc_send_scsi_error_event - Posts an event when there is SCSI error
3550  * @phba: Pointer to hba context object.
3551  * @vport: Pointer to vport object.
3552  * @lpfc_cmd: Pointer to lpfc scsi command which reported the error.
3553  * @rsp_iocb: Pointer to response iocb object which reported error.
3554  *
3555  * This function posts an event when there is a SCSI command reporting
3556  * error from the scsi device.
3557  **/
3558 static void
3559 lpfc_send_scsi_error_event(struct lpfc_hba *phba, struct lpfc_vport *vport,
3560 		struct lpfc_scsi_buf *lpfc_cmd, struct lpfc_iocbq *rsp_iocb) {
3561 	struct scsi_cmnd *cmnd = lpfc_cmd->pCmd;
3562 	struct fcp_rsp *fcprsp = lpfc_cmd->fcp_rsp;
3563 	uint32_t resp_info = fcprsp->rspStatus2;
3564 	uint32_t scsi_status = fcprsp->rspStatus3;
3565 	uint32_t fcpi_parm = rsp_iocb->iocb.un.fcpi.fcpi_parm;
3566 	struct lpfc_fast_path_event *fast_path_evt = NULL;
3567 	struct lpfc_nodelist *pnode = lpfc_cmd->rdata->pnode;
3568 	unsigned long flags;
3569 
3570 	if (!pnode || !NLP_CHK_NODE_ACT(pnode))
3571 		return;
3572 
3573 	/* If there is queuefull or busy condition send a scsi event */
3574 	if ((cmnd->result == SAM_STAT_TASK_SET_FULL) ||
3575 		(cmnd->result == SAM_STAT_BUSY)) {
3576 		fast_path_evt = lpfc_alloc_fast_evt(phba);
3577 		if (!fast_path_evt)
3578 			return;
3579 		fast_path_evt->un.scsi_evt.event_type =
3580 			FC_REG_SCSI_EVENT;
3581 		fast_path_evt->un.scsi_evt.subcategory =
3582 		(cmnd->result == SAM_STAT_TASK_SET_FULL) ?
3583 		LPFC_EVENT_QFULL : LPFC_EVENT_DEVBSY;
3584 		fast_path_evt->un.scsi_evt.lun = cmnd->device->lun;
3585 		memcpy(&fast_path_evt->un.scsi_evt.wwpn,
3586 			&pnode->nlp_portname, sizeof(struct lpfc_name));
3587 		memcpy(&fast_path_evt->un.scsi_evt.wwnn,
3588 			&pnode->nlp_nodename, sizeof(struct lpfc_name));
3589 	} else if ((resp_info & SNS_LEN_VALID) && fcprsp->rspSnsLen &&
3590 		((cmnd->cmnd[0] == READ_10) || (cmnd->cmnd[0] == WRITE_10))) {
3591 		fast_path_evt = lpfc_alloc_fast_evt(phba);
3592 		if (!fast_path_evt)
3593 			return;
3594 		fast_path_evt->un.check_cond_evt.scsi_event.event_type =
3595 			FC_REG_SCSI_EVENT;
3596 		fast_path_evt->un.check_cond_evt.scsi_event.subcategory =
3597 			LPFC_EVENT_CHECK_COND;
3598 		fast_path_evt->un.check_cond_evt.scsi_event.lun =
3599 			cmnd->device->lun;
3600 		memcpy(&fast_path_evt->un.check_cond_evt.scsi_event.wwpn,
3601 			&pnode->nlp_portname, sizeof(struct lpfc_name));
3602 		memcpy(&fast_path_evt->un.check_cond_evt.scsi_event.wwnn,
3603 			&pnode->nlp_nodename, sizeof(struct lpfc_name));
3604 		fast_path_evt->un.check_cond_evt.sense_key =
3605 			cmnd->sense_buffer[2] & 0xf;
3606 		fast_path_evt->un.check_cond_evt.asc = cmnd->sense_buffer[12];
3607 		fast_path_evt->un.check_cond_evt.ascq = cmnd->sense_buffer[13];
3608 	} else if ((cmnd->sc_data_direction == DMA_FROM_DEVICE) &&
3609 		     fcpi_parm &&
3610 		     ((be32_to_cpu(fcprsp->rspResId) != fcpi_parm) ||
3611 			((scsi_status == SAM_STAT_GOOD) &&
3612 			!(resp_info & (RESID_UNDER | RESID_OVER))))) {
3613 		/*
3614 		 * If status is good or resid does not match with fcp_param and
3615 		 * there is valid fcpi_parm, then there is a read_check error
3616 		 */
3617 		fast_path_evt = lpfc_alloc_fast_evt(phba);
3618 		if (!fast_path_evt)
3619 			return;
3620 		fast_path_evt->un.read_check_error.header.event_type =
3621 			FC_REG_FABRIC_EVENT;
3622 		fast_path_evt->un.read_check_error.header.subcategory =
3623 			LPFC_EVENT_FCPRDCHKERR;
3624 		memcpy(&fast_path_evt->un.read_check_error.header.wwpn,
3625 			&pnode->nlp_portname, sizeof(struct lpfc_name));
3626 		memcpy(&fast_path_evt->un.read_check_error.header.wwnn,
3627 			&pnode->nlp_nodename, sizeof(struct lpfc_name));
3628 		fast_path_evt->un.read_check_error.lun = cmnd->device->lun;
3629 		fast_path_evt->un.read_check_error.opcode = cmnd->cmnd[0];
3630 		fast_path_evt->un.read_check_error.fcpiparam =
3631 			fcpi_parm;
3632 	} else
3633 		return;
3634 
3635 	fast_path_evt->vport = vport;
3636 	spin_lock_irqsave(&phba->hbalock, flags);
3637 	list_add_tail(&fast_path_evt->work_evt.evt_listp, &phba->work_list);
3638 	spin_unlock_irqrestore(&phba->hbalock, flags);
3639 	lpfc_worker_wake_up(phba);
3640 	return;
3641 }
3642 
3643 /**
3644  * lpfc_scsi_unprep_dma_buf - Un-map DMA mapping of SG-list for dev
3645  * @phba: The HBA for which this call is being executed.
3646  * @psb: The scsi buffer which is going to be un-mapped.
3647  *
3648  * This routine does DMA un-mapping of scatter gather list of scsi command
3649  * field of @lpfc_cmd for device with SLI-3 interface spec.
3650  **/
3651 static void
3652 lpfc_scsi_unprep_dma_buf(struct lpfc_hba *phba, struct lpfc_scsi_buf *psb)
3653 {
3654 	/*
3655 	 * There are only two special cases to consider.  (1) the scsi command
3656 	 * requested scatter-gather usage or (2) the scsi command allocated
3657 	 * a request buffer, but did not request use_sg.  There is a third
3658 	 * case, but it does not require resource deallocation.
3659 	 */
3660 	if (psb->seg_cnt > 0)
3661 		scsi_dma_unmap(psb->pCmd);
3662 	if (psb->prot_seg_cnt > 0)
3663 		dma_unmap_sg(&phba->pcidev->dev, scsi_prot_sglist(psb->pCmd),
3664 				scsi_prot_sg_count(psb->pCmd),
3665 				psb->pCmd->sc_data_direction);
3666 }
3667 
3668 /**
3669  * lpfc_handler_fcp_err - FCP response handler
3670  * @vport: The virtual port for which this call is being executed.
3671  * @lpfc_cmd: Pointer to lpfc_scsi_buf data structure.
3672  * @rsp_iocb: The response IOCB which contains FCP error.
3673  *
3674  * This routine is called to process response IOCB with status field
3675  * IOSTAT_FCP_RSP_ERROR. This routine sets result field of scsi command
3676  * based upon SCSI and FCP error.
3677  **/
3678 static void
3679 lpfc_handle_fcp_err(struct lpfc_vport *vport, struct lpfc_scsi_buf *lpfc_cmd,
3680 		    struct lpfc_iocbq *rsp_iocb)
3681 {
3682 	struct lpfc_hba *phba = vport->phba;
3683 	struct scsi_cmnd *cmnd = lpfc_cmd->pCmd;
3684 	struct fcp_cmnd *fcpcmd = lpfc_cmd->fcp_cmnd;
3685 	struct fcp_rsp *fcprsp = lpfc_cmd->fcp_rsp;
3686 	uint32_t fcpi_parm = rsp_iocb->iocb.un.fcpi.fcpi_parm;
3687 	uint32_t resp_info = fcprsp->rspStatus2;
3688 	uint32_t scsi_status = fcprsp->rspStatus3;
3689 	uint32_t *lp;
3690 	uint32_t host_status = DID_OK;
3691 	uint32_t rsplen = 0;
3692 	uint32_t fcpDl;
3693 	uint32_t logit = LOG_FCP | LOG_FCP_ERROR;
3694 
3695 
3696 	/*
3697 	 *  If this is a task management command, there is no
3698 	 *  scsi packet associated with this lpfc_cmd.  The driver
3699 	 *  consumes it.
3700 	 */
3701 	if (fcpcmd->fcpCntl2) {
3702 		scsi_status = 0;
3703 		goto out;
3704 	}
3705 
3706 	if (resp_info & RSP_LEN_VALID) {
3707 		rsplen = be32_to_cpu(fcprsp->rspRspLen);
3708 		if (rsplen != 0 && rsplen != 4 && rsplen != 8) {
3709 			lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
3710 				 "2719 Invalid response length: "
3711 				 "tgt x%x lun x%llx cmnd x%x rsplen x%x\n",
3712 				 cmnd->device->id,
3713 				 cmnd->device->lun, cmnd->cmnd[0],
3714 				 rsplen);
3715 			host_status = DID_ERROR;
3716 			goto out;
3717 		}
3718 		if (fcprsp->rspInfo3 != RSP_NO_FAILURE) {
3719 			lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
3720 				 "2757 Protocol failure detected during "
3721 				 "processing of FCP I/O op: "
3722 				 "tgt x%x lun x%llx cmnd x%x rspInfo3 x%x\n",
3723 				 cmnd->device->id,
3724 				 cmnd->device->lun, cmnd->cmnd[0],
3725 				 fcprsp->rspInfo3);
3726 			host_status = DID_ERROR;
3727 			goto out;
3728 		}
3729 	}
3730 
3731 	if ((resp_info & SNS_LEN_VALID) && fcprsp->rspSnsLen) {
3732 		uint32_t snslen = be32_to_cpu(fcprsp->rspSnsLen);
3733 		if (snslen > SCSI_SENSE_BUFFERSIZE)
3734 			snslen = SCSI_SENSE_BUFFERSIZE;
3735 
3736 		if (resp_info & RSP_LEN_VALID)
3737 		  rsplen = be32_to_cpu(fcprsp->rspRspLen);
3738 		memcpy(cmnd->sense_buffer, &fcprsp->rspInfo0 + rsplen, snslen);
3739 	}
3740 	lp = (uint32_t *)cmnd->sense_buffer;
3741 
3742 	/* special handling for under run conditions */
3743 	if (!scsi_status && (resp_info & RESID_UNDER)) {
3744 		/* don't log under runs if fcp set... */
3745 		if (vport->cfg_log_verbose & LOG_FCP)
3746 			logit = LOG_FCP_ERROR;
3747 		/* unless operator says so */
3748 		if (vport->cfg_log_verbose & LOG_FCP_UNDER)
3749 			logit = LOG_FCP_UNDER;
3750 	}
3751 
3752 	lpfc_printf_vlog(vport, KERN_WARNING, logit,
3753 			 "9024 FCP command x%x failed: x%x SNS x%x x%x "
3754 			 "Data: x%x x%x x%x x%x x%x\n",
3755 			 cmnd->cmnd[0], scsi_status,
3756 			 be32_to_cpu(*lp), be32_to_cpu(*(lp + 3)), resp_info,
3757 			 be32_to_cpu(fcprsp->rspResId),
3758 			 be32_to_cpu(fcprsp->rspSnsLen),
3759 			 be32_to_cpu(fcprsp->rspRspLen),
3760 			 fcprsp->rspInfo3);
3761 
3762 	scsi_set_resid(cmnd, 0);
3763 	fcpDl = be32_to_cpu(fcpcmd->fcpDl);
3764 	if (resp_info & RESID_UNDER) {
3765 		scsi_set_resid(cmnd, be32_to_cpu(fcprsp->rspResId));
3766 
3767 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP_UNDER,
3768 				 "9025 FCP Read Underrun, expected %d, "
3769 				 "residual %d Data: x%x x%x x%x\n",
3770 				 fcpDl,
3771 				 scsi_get_resid(cmnd), fcpi_parm, cmnd->cmnd[0],
3772 				 cmnd->underflow);
3773 
3774 		/*
3775 		 * If there is an under run check if under run reported by
3776 		 * storage array is same as the under run reported by HBA.
3777 		 * If this is not same, there is a dropped frame.
3778 		 */
3779 		if ((cmnd->sc_data_direction == DMA_FROM_DEVICE) &&
3780 			fcpi_parm &&
3781 			(scsi_get_resid(cmnd) != fcpi_parm)) {
3782 			lpfc_printf_vlog(vport, KERN_WARNING,
3783 					 LOG_FCP | LOG_FCP_ERROR,
3784 					 "9026 FCP Read Check Error "
3785 					 "and Underrun Data: x%x x%x x%x x%x\n",
3786 					 fcpDl,
3787 					 scsi_get_resid(cmnd), fcpi_parm,
3788 					 cmnd->cmnd[0]);
3789 			scsi_set_resid(cmnd, scsi_bufflen(cmnd));
3790 			host_status = DID_ERROR;
3791 		}
3792 		/*
3793 		 * The cmnd->underflow is the minimum number of bytes that must
3794 		 * be transferred for this command.  Provided a sense condition
3795 		 * is not present, make sure the actual amount transferred is at
3796 		 * least the underflow value or fail.
3797 		 */
3798 		if (!(resp_info & SNS_LEN_VALID) &&
3799 		    (scsi_status == SAM_STAT_GOOD) &&
3800 		    (scsi_bufflen(cmnd) - scsi_get_resid(cmnd)
3801 		     < cmnd->underflow)) {
3802 			lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
3803 					 "9027 FCP command x%x residual "
3804 					 "underrun converted to error "
3805 					 "Data: x%x x%x x%x\n",
3806 					 cmnd->cmnd[0], scsi_bufflen(cmnd),
3807 					 scsi_get_resid(cmnd), cmnd->underflow);
3808 			host_status = DID_ERROR;
3809 		}
3810 	} else if (resp_info & RESID_OVER) {
3811 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
3812 				 "9028 FCP command x%x residual overrun error. "
3813 				 "Data: x%x x%x\n", cmnd->cmnd[0],
3814 				 scsi_bufflen(cmnd), scsi_get_resid(cmnd));
3815 		host_status = DID_ERROR;
3816 
3817 	/*
3818 	 * Check SLI validation that all the transfer was actually done
3819 	 * (fcpi_parm should be zero). Apply check only to reads.
3820 	 */
3821 	} else if (fcpi_parm) {
3822 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP | LOG_FCP_ERROR,
3823 				 "9029 FCP %s Check Error xri x%x  Data: "
3824 				 "x%x x%x x%x x%x x%x\n",
3825 				 ((cmnd->sc_data_direction == DMA_FROM_DEVICE) ?
3826 				 "Read" : "Write"),
3827 				 ((phba->sli_rev == LPFC_SLI_REV4) ?
3828 				 lpfc_cmd->cur_iocbq.sli4_xritag :
3829 				 rsp_iocb->iocb.ulpContext),
3830 				 fcpDl, be32_to_cpu(fcprsp->rspResId),
3831 				 fcpi_parm, cmnd->cmnd[0], scsi_status);
3832 
3833 		/* There is some issue with the LPe12000 that causes it
3834 		 * to miscalculate the fcpi_parm and falsely trip this
3835 		 * recovery logic.  Detect this case and don't error when true.
3836 		 */
3837 		if (fcpi_parm > fcpDl)
3838 			goto out;
3839 
3840 		switch (scsi_status) {
3841 		case SAM_STAT_GOOD:
3842 		case SAM_STAT_CHECK_CONDITION:
3843 			/* Fabric dropped a data frame. Fail any successful
3844 			 * command in which we detected dropped frames.
3845 			 * A status of good or some check conditions could
3846 			 * be considered a successful command.
3847 			 */
3848 			host_status = DID_ERROR;
3849 			break;
3850 		}
3851 		scsi_set_resid(cmnd, scsi_bufflen(cmnd));
3852 	}
3853 
3854  out:
3855 	cmnd->result = ScsiResult(host_status, scsi_status);
3856 	lpfc_send_scsi_error_event(vport->phba, vport, lpfc_cmd, rsp_iocb);
3857 }
3858 
3859 /**
3860  * lpfc_sli4_scmd_to_wqidx_distr - scsi command to SLI4 WQ index distribution
3861  * @phba: Pointer to HBA context object.
3862  *
3863  * This routine performs a roundrobin SCSI command to SLI4 FCP WQ index
3864  * distribution.  This is called by __lpfc_sli_issue_iocb_s4() with the hbalock
3865  * held.
3866  * If scsi-mq is enabled, get the default block layer mapping of software queues
3867  * to hardware queues. This information is saved in request tag.
3868  *
3869  * Return: index into SLI4 fast-path FCP queue index.
3870  **/
3871 int lpfc_sli4_scmd_to_wqidx_distr(struct lpfc_hba *phba,
3872 				  struct lpfc_scsi_buf *lpfc_cmd)
3873 {
3874 	struct scsi_cmnd *cmnd = lpfc_cmd->pCmd;
3875 	struct lpfc_vector_map_info *cpup;
3876 	int chann, cpu;
3877 	uint32_t tag;
3878 	uint16_t hwq;
3879 
3880 	if (cmnd && shost_use_blk_mq(cmnd->device->host)) {
3881 		tag = blk_mq_unique_tag(cmnd->request);
3882 		hwq = blk_mq_unique_tag_to_hwq(tag);
3883 
3884 		return hwq;
3885 	}
3886 
3887 	if (phba->cfg_fcp_io_sched == LPFC_FCP_SCHED_BY_CPU
3888 	    && phba->cfg_fcp_io_channel > 1) {
3889 		cpu = smp_processor_id();
3890 		if (cpu < phba->sli4_hba.num_present_cpu) {
3891 			cpup = phba->sli4_hba.cpu_map;
3892 			cpup += cpu;
3893 			return cpup->channel_id;
3894 		}
3895 	}
3896 	chann = atomic_add_return(1, &phba->fcp_qidx);
3897 	chann = (chann % phba->cfg_fcp_io_channel);
3898 	return chann;
3899 }
3900 
3901 
3902 /**
3903  * lpfc_scsi_cmd_iocb_cmpl - Scsi cmnd IOCB completion routine
3904  * @phba: The Hba for which this call is being executed.
3905  * @pIocbIn: The command IOCBQ for the scsi cmnd.
3906  * @pIocbOut: The response IOCBQ for the scsi cmnd.
3907  *
3908  * This routine assigns scsi command result by looking into response IOCB
3909  * status field appropriately. This routine handles QUEUE FULL condition as
3910  * well by ramping down device queue depth.
3911  **/
3912 static void
3913 lpfc_scsi_cmd_iocb_cmpl(struct lpfc_hba *phba, struct lpfc_iocbq *pIocbIn,
3914 			struct lpfc_iocbq *pIocbOut)
3915 {
3916 	struct lpfc_scsi_buf *lpfc_cmd =
3917 		(struct lpfc_scsi_buf *) pIocbIn->context1;
3918 	struct lpfc_vport      *vport = pIocbIn->vport;
3919 	struct lpfc_rport_data *rdata = lpfc_cmd->rdata;
3920 	struct lpfc_nodelist *pnode = rdata->pnode;
3921 	struct scsi_cmnd *cmd;
3922 	int depth;
3923 	unsigned long flags;
3924 	struct lpfc_fast_path_event *fast_path_evt;
3925 	struct Scsi_Host *shost;
3926 	uint32_t logit = LOG_FCP;
3927 
3928 	/* Sanity check on return of outstanding command */
3929 	cmd = lpfc_cmd->pCmd;
3930 	if (!cmd)
3931 		return;
3932 	shost = cmd->device->host;
3933 
3934 	lpfc_cmd->result = (pIocbOut->iocb.un.ulpWord[4] & IOERR_PARAM_MASK);
3935 	lpfc_cmd->status = pIocbOut->iocb.ulpStatus;
3936 	/* pick up SLI4 exhange busy status from HBA */
3937 	lpfc_cmd->exch_busy = pIocbOut->iocb_flag & LPFC_EXCHANGE_BUSY;
3938 
3939 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
3940 	if (lpfc_cmd->prot_data_type) {
3941 		struct scsi_dif_tuple *src = NULL;
3942 
3943 		src =  (struct scsi_dif_tuple *)lpfc_cmd->prot_data_segment;
3944 		/*
3945 		 * Used to restore any changes to protection
3946 		 * data for error injection.
3947 		 */
3948 		switch (lpfc_cmd->prot_data_type) {
3949 		case LPFC_INJERR_REFTAG:
3950 			src->ref_tag =
3951 				lpfc_cmd->prot_data;
3952 			break;
3953 		case LPFC_INJERR_APPTAG:
3954 			src->app_tag =
3955 				(uint16_t)lpfc_cmd->prot_data;
3956 			break;
3957 		case LPFC_INJERR_GUARD:
3958 			src->guard_tag =
3959 				(uint16_t)lpfc_cmd->prot_data;
3960 			break;
3961 		default:
3962 			break;
3963 		}
3964 
3965 		lpfc_cmd->prot_data = 0;
3966 		lpfc_cmd->prot_data_type = 0;
3967 		lpfc_cmd->prot_data_segment = NULL;
3968 	}
3969 #endif
3970 	if (pnode && NLP_CHK_NODE_ACT(pnode))
3971 		atomic_dec(&pnode->cmd_pending);
3972 
3973 	if (lpfc_cmd->status) {
3974 		if (lpfc_cmd->status == IOSTAT_LOCAL_REJECT &&
3975 		    (lpfc_cmd->result & IOERR_DRVR_MASK))
3976 			lpfc_cmd->status = IOSTAT_DRIVER_REJECT;
3977 		else if (lpfc_cmd->status >= IOSTAT_CNT)
3978 			lpfc_cmd->status = IOSTAT_DEFAULT;
3979 		if (lpfc_cmd->status == IOSTAT_FCP_RSP_ERROR &&
3980 		    !lpfc_cmd->fcp_rsp->rspStatus3 &&
3981 		    (lpfc_cmd->fcp_rsp->rspStatus2 & RESID_UNDER) &&
3982 		    !(vport->cfg_log_verbose & LOG_FCP_UNDER))
3983 			logit = 0;
3984 		else
3985 			logit = LOG_FCP | LOG_FCP_UNDER;
3986 		lpfc_printf_vlog(vport, KERN_WARNING, logit,
3987 			 "9030 FCP cmd x%x failed <%d/%lld> "
3988 			 "status: x%x result: x%x "
3989 			 "sid: x%x did: x%x oxid: x%x "
3990 			 "Data: x%x x%x\n",
3991 			 cmd->cmnd[0],
3992 			 cmd->device ? cmd->device->id : 0xffff,
3993 			 cmd->device ? cmd->device->lun : 0xffff,
3994 			 lpfc_cmd->status, lpfc_cmd->result,
3995 			 vport->fc_myDID,
3996 			 (pnode) ? pnode->nlp_DID : 0,
3997 			 phba->sli_rev == LPFC_SLI_REV4 ?
3998 			     lpfc_cmd->cur_iocbq.sli4_xritag : 0xffff,
3999 			 pIocbOut->iocb.ulpContext,
4000 			 lpfc_cmd->cur_iocbq.iocb.ulpIoTag);
4001 
4002 		switch (lpfc_cmd->status) {
4003 		case IOSTAT_FCP_RSP_ERROR:
4004 			/* Call FCP RSP handler to determine result */
4005 			lpfc_handle_fcp_err(vport, lpfc_cmd, pIocbOut);
4006 			break;
4007 		case IOSTAT_NPORT_BSY:
4008 		case IOSTAT_FABRIC_BSY:
4009 			cmd->result = ScsiResult(DID_TRANSPORT_DISRUPTED, 0);
4010 			fast_path_evt = lpfc_alloc_fast_evt(phba);
4011 			if (!fast_path_evt)
4012 				break;
4013 			fast_path_evt->un.fabric_evt.event_type =
4014 				FC_REG_FABRIC_EVENT;
4015 			fast_path_evt->un.fabric_evt.subcategory =
4016 				(lpfc_cmd->status == IOSTAT_NPORT_BSY) ?
4017 				LPFC_EVENT_PORT_BUSY : LPFC_EVENT_FABRIC_BUSY;
4018 			if (pnode && NLP_CHK_NODE_ACT(pnode)) {
4019 				memcpy(&fast_path_evt->un.fabric_evt.wwpn,
4020 					&pnode->nlp_portname,
4021 					sizeof(struct lpfc_name));
4022 				memcpy(&fast_path_evt->un.fabric_evt.wwnn,
4023 					&pnode->nlp_nodename,
4024 					sizeof(struct lpfc_name));
4025 			}
4026 			fast_path_evt->vport = vport;
4027 			fast_path_evt->work_evt.evt =
4028 				LPFC_EVT_FASTPATH_MGMT_EVT;
4029 			spin_lock_irqsave(&phba->hbalock, flags);
4030 			list_add_tail(&fast_path_evt->work_evt.evt_listp,
4031 				&phba->work_list);
4032 			spin_unlock_irqrestore(&phba->hbalock, flags);
4033 			lpfc_worker_wake_up(phba);
4034 			break;
4035 		case IOSTAT_LOCAL_REJECT:
4036 		case IOSTAT_REMOTE_STOP:
4037 			if (lpfc_cmd->result == IOERR_ELXSEC_KEY_UNWRAP_ERROR ||
4038 			    lpfc_cmd->result ==
4039 					IOERR_ELXSEC_KEY_UNWRAP_COMPARE_ERROR ||
4040 			    lpfc_cmd->result == IOERR_ELXSEC_CRYPTO_ERROR ||
4041 			    lpfc_cmd->result ==
4042 					IOERR_ELXSEC_CRYPTO_COMPARE_ERROR) {
4043 				cmd->result = ScsiResult(DID_NO_CONNECT, 0);
4044 				break;
4045 			}
4046 			if (lpfc_cmd->result == IOERR_INVALID_RPI ||
4047 			    lpfc_cmd->result == IOERR_NO_RESOURCES ||
4048 			    lpfc_cmd->result == IOERR_ABORT_REQUESTED ||
4049 			    lpfc_cmd->result == IOERR_SLER_CMD_RCV_FAILURE) {
4050 				cmd->result = ScsiResult(DID_REQUEUE, 0);
4051 				break;
4052 			}
4053 			if ((lpfc_cmd->result == IOERR_RX_DMA_FAILED ||
4054 			     lpfc_cmd->result == IOERR_TX_DMA_FAILED) &&
4055 			     pIocbOut->iocb.unsli3.sli3_bg.bgstat) {
4056 				if (scsi_get_prot_op(cmd) != SCSI_PROT_NORMAL) {
4057 					/*
4058 					 * This is a response for a BG enabled
4059 					 * cmd. Parse BG error
4060 					 */
4061 					lpfc_parse_bg_err(phba, lpfc_cmd,
4062 							pIocbOut);
4063 					break;
4064 				} else {
4065 					lpfc_printf_vlog(vport, KERN_WARNING,
4066 							LOG_BG,
4067 							"9031 non-zero BGSTAT "
4068 							"on unprotected cmd\n");
4069 				}
4070 			}
4071 			if ((lpfc_cmd->status == IOSTAT_REMOTE_STOP)
4072 				&& (phba->sli_rev == LPFC_SLI_REV4)
4073 				&& (pnode && NLP_CHK_NODE_ACT(pnode))) {
4074 				/* This IO was aborted by the target, we don't
4075 				 * know the rxid and because we did not send the
4076 				 * ABTS we cannot generate and RRQ.
4077 				 */
4078 				lpfc_set_rrq_active(phba, pnode,
4079 					lpfc_cmd->cur_iocbq.sli4_lxritag,
4080 					0, 0);
4081 			}
4082 		/* else: fall through */
4083 		default:
4084 			cmd->result = ScsiResult(DID_ERROR, 0);
4085 			break;
4086 		}
4087 
4088 		if (!pnode || !NLP_CHK_NODE_ACT(pnode)
4089 		    || (pnode->nlp_state != NLP_STE_MAPPED_NODE))
4090 			cmd->result = ScsiResult(DID_TRANSPORT_DISRUPTED,
4091 						 SAM_STAT_BUSY);
4092 	} else
4093 		cmd->result = ScsiResult(DID_OK, 0);
4094 
4095 	if (cmd->result || lpfc_cmd->fcp_rsp->rspSnsLen) {
4096 		uint32_t *lp = (uint32_t *)cmd->sense_buffer;
4097 
4098 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4099 				 "0710 Iodone <%d/%llu> cmd %p, error "
4100 				 "x%x SNS x%x x%x Data: x%x x%x\n",
4101 				 cmd->device->id, cmd->device->lun, cmd,
4102 				 cmd->result, *lp, *(lp + 3), cmd->retries,
4103 				 scsi_get_resid(cmd));
4104 	}
4105 
4106 	lpfc_update_stats(phba, lpfc_cmd);
4107 	if (vport->cfg_max_scsicmpl_time &&
4108 	   time_after(jiffies, lpfc_cmd->start_time +
4109 		msecs_to_jiffies(vport->cfg_max_scsicmpl_time))) {
4110 		spin_lock_irqsave(shost->host_lock, flags);
4111 		if (pnode && NLP_CHK_NODE_ACT(pnode)) {
4112 			if (pnode->cmd_qdepth >
4113 				atomic_read(&pnode->cmd_pending) &&
4114 				(atomic_read(&pnode->cmd_pending) >
4115 				LPFC_MIN_TGT_QDEPTH) &&
4116 				((cmd->cmnd[0] == READ_10) ||
4117 				(cmd->cmnd[0] == WRITE_10)))
4118 				pnode->cmd_qdepth =
4119 					atomic_read(&pnode->cmd_pending);
4120 
4121 			pnode->last_change_time = jiffies;
4122 		}
4123 		spin_unlock_irqrestore(shost->host_lock, flags);
4124 	} else if (pnode && NLP_CHK_NODE_ACT(pnode)) {
4125 		if ((pnode->cmd_qdepth < vport->cfg_tgt_queue_depth) &&
4126 		   time_after(jiffies, pnode->last_change_time +
4127 			      msecs_to_jiffies(LPFC_TGTQ_INTERVAL))) {
4128 			spin_lock_irqsave(shost->host_lock, flags);
4129 			depth = pnode->cmd_qdepth * LPFC_TGTQ_RAMPUP_PCENT
4130 				/ 100;
4131 			depth = depth ? depth : 1;
4132 			pnode->cmd_qdepth += depth;
4133 			if (pnode->cmd_qdepth > vport->cfg_tgt_queue_depth)
4134 				pnode->cmd_qdepth = vport->cfg_tgt_queue_depth;
4135 			pnode->last_change_time = jiffies;
4136 			spin_unlock_irqrestore(shost->host_lock, flags);
4137 		}
4138 	}
4139 
4140 	lpfc_scsi_unprep_dma_buf(phba, lpfc_cmd);
4141 
4142 	spin_lock_irqsave(&phba->hbalock, flags);
4143 	lpfc_cmd->pCmd = NULL;
4144 	spin_unlock_irqrestore(&phba->hbalock, flags);
4145 
4146 	/* The sdev is not guaranteed to be valid post scsi_done upcall. */
4147 	cmd->scsi_done(cmd);
4148 
4149 	/*
4150 	 * If there is a thread waiting for command completion
4151 	 * wake up the thread.
4152 	 */
4153 	spin_lock_irqsave(shost->host_lock, flags);
4154 	if (lpfc_cmd->waitq)
4155 		wake_up(lpfc_cmd->waitq);
4156 	spin_unlock_irqrestore(shost->host_lock, flags);
4157 
4158 	lpfc_release_scsi_buf(phba, lpfc_cmd);
4159 }
4160 
4161 /**
4162  * lpfc_fcpcmd_to_iocb - copy the fcp_cmd data into the IOCB
4163  * @data: A pointer to the immediate command data portion of the IOCB.
4164  * @fcp_cmnd: The FCP Command that is provided by the SCSI layer.
4165  *
4166  * The routine copies the entire FCP command from @fcp_cmnd to @data while
4167  * byte swapping the data to big endian format for transmission on the wire.
4168  **/
4169 static void
4170 lpfc_fcpcmd_to_iocb(uint8_t *data, struct fcp_cmnd *fcp_cmnd)
4171 {
4172 	int i, j;
4173 	for (i = 0, j = 0; i < sizeof(struct fcp_cmnd);
4174 	     i += sizeof(uint32_t), j++) {
4175 		((uint32_t *)data)[j] = cpu_to_be32(((uint32_t *)fcp_cmnd)[j]);
4176 	}
4177 }
4178 
4179 /**
4180  * lpfc_scsi_prep_cmnd - Wrapper func for convert scsi cmnd to FCP info unit
4181  * @vport: The virtual port for which this call is being executed.
4182  * @lpfc_cmd: The scsi command which needs to send.
4183  * @pnode: Pointer to lpfc_nodelist.
4184  *
4185  * This routine initializes fcp_cmnd and iocb data structure from scsi command
4186  * to transfer for device with SLI3 interface spec.
4187  **/
4188 static void
4189 lpfc_scsi_prep_cmnd(struct lpfc_vport *vport, struct lpfc_scsi_buf *lpfc_cmd,
4190 		    struct lpfc_nodelist *pnode)
4191 {
4192 	struct lpfc_hba *phba = vport->phba;
4193 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
4194 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
4195 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
4196 	struct lpfc_iocbq *piocbq = &(lpfc_cmd->cur_iocbq);
4197 	int datadir = scsi_cmnd->sc_data_direction;
4198 	uint8_t *ptr;
4199 	bool sli4;
4200 	uint32_t fcpdl;
4201 
4202 	if (!pnode || !NLP_CHK_NODE_ACT(pnode))
4203 		return;
4204 
4205 	lpfc_cmd->fcp_rsp->rspSnsLen = 0;
4206 	/* clear task management bits */
4207 	lpfc_cmd->fcp_cmnd->fcpCntl2 = 0;
4208 
4209 	int_to_scsilun(lpfc_cmd->pCmd->device->lun,
4210 			&lpfc_cmd->fcp_cmnd->fcp_lun);
4211 
4212 	ptr = &fcp_cmnd->fcpCdb[0];
4213 	memcpy(ptr, scsi_cmnd->cmnd, scsi_cmnd->cmd_len);
4214 	if (scsi_cmnd->cmd_len < LPFC_FCP_CDB_LEN) {
4215 		ptr += scsi_cmnd->cmd_len;
4216 		memset(ptr, 0, (LPFC_FCP_CDB_LEN - scsi_cmnd->cmd_len));
4217 	}
4218 
4219 	fcp_cmnd->fcpCntl1 = SIMPLE_Q;
4220 
4221 	sli4 = (phba->sli_rev == LPFC_SLI_REV4);
4222 	piocbq->iocb.un.fcpi.fcpi_XRdy = 0;
4223 
4224 	/*
4225 	 * There are three possibilities here - use scatter-gather segment, use
4226 	 * the single mapping, or neither.  Start the lpfc command prep by
4227 	 * bumping the bpl beyond the fcp_cmnd and fcp_rsp regions to the first
4228 	 * data bde entry.
4229 	 */
4230 	if (scsi_sg_count(scsi_cmnd)) {
4231 		if (datadir == DMA_TO_DEVICE) {
4232 			iocb_cmd->ulpCommand = CMD_FCP_IWRITE64_CR;
4233 			iocb_cmd->ulpPU = PARM_READ_CHECK;
4234 			if (vport->cfg_first_burst_size &&
4235 			    (pnode->nlp_flag & NLP_FIRSTBURST)) {
4236 				fcpdl = scsi_bufflen(scsi_cmnd);
4237 				if (fcpdl < vport->cfg_first_burst_size)
4238 					piocbq->iocb.un.fcpi.fcpi_XRdy = fcpdl;
4239 				else
4240 					piocbq->iocb.un.fcpi.fcpi_XRdy =
4241 						vport->cfg_first_burst_size;
4242 			}
4243 			fcp_cmnd->fcpCntl3 = WRITE_DATA;
4244 			phba->fc4OutputRequests++;
4245 		} else {
4246 			iocb_cmd->ulpCommand = CMD_FCP_IREAD64_CR;
4247 			iocb_cmd->ulpPU = PARM_READ_CHECK;
4248 			fcp_cmnd->fcpCntl3 = READ_DATA;
4249 			phba->fc4InputRequests++;
4250 		}
4251 	} else {
4252 		iocb_cmd->ulpCommand = CMD_FCP_ICMND64_CR;
4253 		iocb_cmd->un.fcpi.fcpi_parm = 0;
4254 		iocb_cmd->ulpPU = 0;
4255 		fcp_cmnd->fcpCntl3 = 0;
4256 		phba->fc4ControlRequests++;
4257 	}
4258 	if (phba->sli_rev == 3 &&
4259 	    !(phba->sli3_options & LPFC_SLI3_BG_ENABLED))
4260 		lpfc_fcpcmd_to_iocb(iocb_cmd->unsli3.fcp_ext.icd, fcp_cmnd);
4261 	/*
4262 	 * Finish initializing those IOCB fields that are independent
4263 	 * of the scsi_cmnd request_buffer
4264 	 */
4265 	piocbq->iocb.ulpContext = pnode->nlp_rpi;
4266 	if (sli4)
4267 		piocbq->iocb.ulpContext =
4268 		  phba->sli4_hba.rpi_ids[pnode->nlp_rpi];
4269 	if (pnode->nlp_fcp_info & NLP_FCP_2_DEVICE)
4270 		piocbq->iocb.ulpFCP2Rcvy = 1;
4271 	else
4272 		piocbq->iocb.ulpFCP2Rcvy = 0;
4273 
4274 	piocbq->iocb.ulpClass = (pnode->nlp_fcp_info & 0x0f);
4275 	piocbq->context1  = lpfc_cmd;
4276 	piocbq->iocb_cmpl = lpfc_scsi_cmd_iocb_cmpl;
4277 	piocbq->iocb.ulpTimeout = lpfc_cmd->timeout;
4278 	piocbq->vport = vport;
4279 }
4280 
4281 /**
4282  * lpfc_scsi_prep_task_mgmt_cmd - Convert SLI3 scsi TM cmd to FCP info unit
4283  * @vport: The virtual port for which this call is being executed.
4284  * @lpfc_cmd: Pointer to lpfc_scsi_buf data structure.
4285  * @lun: Logical unit number.
4286  * @task_mgmt_cmd: SCSI task management command.
4287  *
4288  * This routine creates FCP information unit corresponding to @task_mgmt_cmd
4289  * for device with SLI-3 interface spec.
4290  *
4291  * Return codes:
4292  *   0 - Error
4293  *   1 - Success
4294  **/
4295 static int
4296 lpfc_scsi_prep_task_mgmt_cmd(struct lpfc_vport *vport,
4297 			     struct lpfc_scsi_buf *lpfc_cmd,
4298 			     uint64_t lun,
4299 			     uint8_t task_mgmt_cmd)
4300 {
4301 	struct lpfc_iocbq *piocbq;
4302 	IOCB_t *piocb;
4303 	struct fcp_cmnd *fcp_cmnd;
4304 	struct lpfc_rport_data *rdata = lpfc_cmd->rdata;
4305 	struct lpfc_nodelist *ndlp = rdata->pnode;
4306 
4307 	if (!ndlp || !NLP_CHK_NODE_ACT(ndlp) ||
4308 	    ndlp->nlp_state != NLP_STE_MAPPED_NODE)
4309 		return 0;
4310 
4311 	piocbq = &(lpfc_cmd->cur_iocbq);
4312 	piocbq->vport = vport;
4313 
4314 	piocb = &piocbq->iocb;
4315 
4316 	fcp_cmnd = lpfc_cmd->fcp_cmnd;
4317 	/* Clear out any old data in the FCP command area */
4318 	memset(fcp_cmnd, 0, sizeof(struct fcp_cmnd));
4319 	int_to_scsilun(lun, &fcp_cmnd->fcp_lun);
4320 	fcp_cmnd->fcpCntl2 = task_mgmt_cmd;
4321 	if (vport->phba->sli_rev == 3 &&
4322 	    !(vport->phba->sli3_options & LPFC_SLI3_BG_ENABLED))
4323 		lpfc_fcpcmd_to_iocb(piocb->unsli3.fcp_ext.icd, fcp_cmnd);
4324 	piocb->ulpCommand = CMD_FCP_ICMND64_CR;
4325 	piocb->ulpContext = ndlp->nlp_rpi;
4326 	if (vport->phba->sli_rev == LPFC_SLI_REV4) {
4327 		piocb->ulpContext =
4328 		  vport->phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
4329 	}
4330 	piocb->ulpFCP2Rcvy = (ndlp->nlp_fcp_info & NLP_FCP_2_DEVICE) ? 1 : 0;
4331 	piocb->ulpClass = (ndlp->nlp_fcp_info & 0x0f);
4332 	piocb->ulpPU = 0;
4333 	piocb->un.fcpi.fcpi_parm = 0;
4334 
4335 	/* ulpTimeout is only one byte */
4336 	if (lpfc_cmd->timeout > 0xff) {
4337 		/*
4338 		 * Do not timeout the command at the firmware level.
4339 		 * The driver will provide the timeout mechanism.
4340 		 */
4341 		piocb->ulpTimeout = 0;
4342 	} else
4343 		piocb->ulpTimeout = lpfc_cmd->timeout;
4344 
4345 	if (vport->phba->sli_rev == LPFC_SLI_REV4)
4346 		lpfc_sli4_set_rsp_sgl_last(vport->phba, lpfc_cmd);
4347 
4348 	return 1;
4349 }
4350 
4351 /**
4352  * lpfc_scsi_api_table_setup - Set up scsi api function jump table
4353  * @phba: The hba struct for which this call is being executed.
4354  * @dev_grp: The HBA PCI-Device group number.
4355  *
4356  * This routine sets up the SCSI interface API function jump table in @phba
4357  * struct.
4358  * Returns: 0 - success, -ENODEV - failure.
4359  **/
4360 int
4361 lpfc_scsi_api_table_setup(struct lpfc_hba *phba, uint8_t dev_grp)
4362 {
4363 
4364 	phba->lpfc_scsi_unprep_dma_buf = lpfc_scsi_unprep_dma_buf;
4365 	phba->lpfc_scsi_prep_cmnd = lpfc_scsi_prep_cmnd;
4366 
4367 	switch (dev_grp) {
4368 	case LPFC_PCI_DEV_LP:
4369 		phba->lpfc_new_scsi_buf = lpfc_new_scsi_buf_s3;
4370 		phba->lpfc_scsi_prep_dma_buf = lpfc_scsi_prep_dma_buf_s3;
4371 		phba->lpfc_bg_scsi_prep_dma_buf = lpfc_bg_scsi_prep_dma_buf_s3;
4372 		phba->lpfc_release_scsi_buf = lpfc_release_scsi_buf_s3;
4373 		phba->lpfc_get_scsi_buf = lpfc_get_scsi_buf_s3;
4374 		break;
4375 	case LPFC_PCI_DEV_OC:
4376 		phba->lpfc_new_scsi_buf = lpfc_new_scsi_buf_s4;
4377 		phba->lpfc_scsi_prep_dma_buf = lpfc_scsi_prep_dma_buf_s4;
4378 		phba->lpfc_bg_scsi_prep_dma_buf = lpfc_bg_scsi_prep_dma_buf_s4;
4379 		phba->lpfc_release_scsi_buf = lpfc_release_scsi_buf_s4;
4380 		phba->lpfc_get_scsi_buf = lpfc_get_scsi_buf_s4;
4381 		break;
4382 	default:
4383 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4384 				"1418 Invalid HBA PCI-device group: 0x%x\n",
4385 				dev_grp);
4386 		return -ENODEV;
4387 		break;
4388 	}
4389 	phba->lpfc_rampdown_queue_depth = lpfc_rampdown_queue_depth;
4390 	phba->lpfc_scsi_cmd_iocb_cmpl = lpfc_scsi_cmd_iocb_cmpl;
4391 	return 0;
4392 }
4393 
4394 /**
4395  * lpfc_taskmgmt_def_cmpl - IOCB completion routine for task management command
4396  * @phba: The Hba for which this call is being executed.
4397  * @cmdiocbq: Pointer to lpfc_iocbq data structure.
4398  * @rspiocbq: Pointer to lpfc_iocbq data structure.
4399  *
4400  * This routine is IOCB completion routine for device reset and target reset
4401  * routine. This routine release scsi buffer associated with lpfc_cmd.
4402  **/
4403 static void
4404 lpfc_tskmgmt_def_cmpl(struct lpfc_hba *phba,
4405 			struct lpfc_iocbq *cmdiocbq,
4406 			struct lpfc_iocbq *rspiocbq)
4407 {
4408 	struct lpfc_scsi_buf *lpfc_cmd =
4409 		(struct lpfc_scsi_buf *) cmdiocbq->context1;
4410 	if (lpfc_cmd)
4411 		lpfc_release_scsi_buf(phba, lpfc_cmd);
4412 	return;
4413 }
4414 
4415 /**
4416  * lpfc_info - Info entry point of scsi_host_template data structure
4417  * @host: The scsi host for which this call is being executed.
4418  *
4419  * This routine provides module information about hba.
4420  *
4421  * Reutrn code:
4422  *   Pointer to char - Success.
4423  **/
4424 const char *
4425 lpfc_info(struct Scsi_Host *host)
4426 {
4427 	struct lpfc_vport *vport = (struct lpfc_vport *) host->hostdata;
4428 	struct lpfc_hba   *phba = vport->phba;
4429 	int len, link_speed = 0;
4430 	static char  lpfcinfobuf[384];
4431 
4432 	memset(lpfcinfobuf,0,384);
4433 	if (phba && phba->pcidev){
4434 		strncpy(lpfcinfobuf, phba->ModelDesc, 256);
4435 		len = strlen(lpfcinfobuf);
4436 		snprintf(lpfcinfobuf + len,
4437 			384-len,
4438 			" on PCI bus %02x device %02x irq %d",
4439 			phba->pcidev->bus->number,
4440 			phba->pcidev->devfn,
4441 			phba->pcidev->irq);
4442 		len = strlen(lpfcinfobuf);
4443 		if (phba->Port[0]) {
4444 			snprintf(lpfcinfobuf + len,
4445 				 384-len,
4446 				 " port %s",
4447 				 phba->Port);
4448 		}
4449 		len = strlen(lpfcinfobuf);
4450 		link_speed = lpfc_sli_port_speed_get(phba);
4451 		if (link_speed != 0)
4452 			snprintf(lpfcinfobuf + len, 384-len,
4453 				 " Logical Link Speed: %d Mbps", link_speed);
4454 	}
4455 	return lpfcinfobuf;
4456 }
4457 
4458 /**
4459  * lpfc_poll_rearm_time - Routine to modify fcp_poll timer of hba
4460  * @phba: The Hba for which this call is being executed.
4461  *
4462  * This routine modifies fcp_poll_timer  field of @phba by cfg_poll_tmo.
4463  * The default value of cfg_poll_tmo is 10 milliseconds.
4464  **/
4465 static __inline__ void lpfc_poll_rearm_timer(struct lpfc_hba * phba)
4466 {
4467 	unsigned long  poll_tmo_expires =
4468 		(jiffies + msecs_to_jiffies(phba->cfg_poll_tmo));
4469 
4470 	if (!list_empty(&phba->sli.ring[LPFC_FCP_RING].txcmplq))
4471 		mod_timer(&phba->fcp_poll_timer,
4472 			  poll_tmo_expires);
4473 }
4474 
4475 /**
4476  * lpfc_poll_start_timer - Routine to start fcp_poll_timer of HBA
4477  * @phba: The Hba for which this call is being executed.
4478  *
4479  * This routine starts the fcp_poll_timer of @phba.
4480  **/
4481 void lpfc_poll_start_timer(struct lpfc_hba * phba)
4482 {
4483 	lpfc_poll_rearm_timer(phba);
4484 }
4485 
4486 /**
4487  * lpfc_poll_timeout - Restart polling timer
4488  * @ptr: Map to lpfc_hba data structure pointer.
4489  *
4490  * This routine restarts fcp_poll timer, when FCP ring  polling is enable
4491  * and FCP Ring interrupt is disable.
4492  **/
4493 
4494 void lpfc_poll_timeout(unsigned long ptr)
4495 {
4496 	struct lpfc_hba *phba = (struct lpfc_hba *) ptr;
4497 
4498 	if (phba->cfg_poll & ENABLE_FCP_RING_POLLING) {
4499 		lpfc_sli_handle_fast_ring_event(phba,
4500 			&phba->sli.ring[LPFC_FCP_RING], HA_R0RE_REQ);
4501 
4502 		if (phba->cfg_poll & DISABLE_FCP_RING_INT)
4503 			lpfc_poll_rearm_timer(phba);
4504 	}
4505 }
4506 
4507 /**
4508  * lpfc_queuecommand - scsi_host_template queuecommand entry point
4509  * @cmnd: Pointer to scsi_cmnd data structure.
4510  * @done: Pointer to done routine.
4511  *
4512  * Driver registers this routine to scsi midlayer to submit a @cmd to process.
4513  * This routine prepares an IOCB from scsi command and provides to firmware.
4514  * The @done callback is invoked after driver finished processing the command.
4515  *
4516  * Return value :
4517  *   0 - Success
4518  *   SCSI_MLQUEUE_HOST_BUSY - Block all devices served by this host temporarily.
4519  **/
4520 static int
4521 lpfc_queuecommand(struct Scsi_Host *shost, struct scsi_cmnd *cmnd)
4522 {
4523 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
4524 	struct lpfc_hba   *phba = vport->phba;
4525 	struct lpfc_rport_data *rdata;
4526 	struct lpfc_nodelist *ndlp;
4527 	struct lpfc_scsi_buf *lpfc_cmd;
4528 	struct fc_rport *rport = starget_to_rport(scsi_target(cmnd->device));
4529 	int err;
4530 
4531 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
4532 	err = fc_remote_port_chkready(rport);
4533 	if (err) {
4534 		cmnd->result = err;
4535 		goto out_fail_command;
4536 	}
4537 	ndlp = rdata->pnode;
4538 
4539 	if ((scsi_get_prot_op(cmnd) != SCSI_PROT_NORMAL) &&
4540 		(!(phba->sli3_options & LPFC_SLI3_BG_ENABLED))) {
4541 
4542 		lpfc_printf_log(phba, KERN_ERR, LOG_BG,
4543 				"9058 BLKGRD: ERROR: rcvd protected cmd:%02x"
4544 				" op:%02x str=%s without registering for"
4545 				" BlockGuard - Rejecting command\n",
4546 				cmnd->cmnd[0], scsi_get_prot_op(cmnd),
4547 				dif_op_str[scsi_get_prot_op(cmnd)]);
4548 		goto out_fail_command;
4549 	}
4550 
4551 	/*
4552 	 * Catch race where our node has transitioned, but the
4553 	 * transport is still transitioning.
4554 	 */
4555 	if (!ndlp || !NLP_CHK_NODE_ACT(ndlp))
4556 		goto out_tgt_busy;
4557 	if (atomic_read(&ndlp->cmd_pending) >= ndlp->cmd_qdepth)
4558 		goto out_tgt_busy;
4559 
4560 	lpfc_cmd = lpfc_get_scsi_buf(phba, ndlp);
4561 	if (lpfc_cmd == NULL) {
4562 		lpfc_rampdown_queue_depth(phba);
4563 
4564 		lpfc_printf_vlog(vport, KERN_INFO, LOG_MISC,
4565 				 "0707 driver's buffer pool is empty, "
4566 				 "IO busied\n");
4567 		goto out_host_busy;
4568 	}
4569 
4570 	/*
4571 	 * Store the midlayer's command structure for the completion phase
4572 	 * and complete the command initialization.
4573 	 */
4574 	lpfc_cmd->pCmd  = cmnd;
4575 	lpfc_cmd->rdata = rdata;
4576 	lpfc_cmd->timeout = 0;
4577 	lpfc_cmd->start_time = jiffies;
4578 	cmnd->host_scribble = (unsigned char *)lpfc_cmd;
4579 
4580 	if (scsi_get_prot_op(cmnd) != SCSI_PROT_NORMAL) {
4581 		if (vport->phba->cfg_enable_bg) {
4582 			lpfc_printf_vlog(vport,
4583 					 KERN_INFO, LOG_SCSI_CMD,
4584 					 "9033 BLKGRD: rcvd %s cmd:x%x "
4585 					 "sector x%llx cnt %u pt %x\n",
4586 					 dif_op_str[scsi_get_prot_op(cmnd)],
4587 					 cmnd->cmnd[0],
4588 					 (unsigned long long)scsi_get_lba(cmnd),
4589 					 blk_rq_sectors(cmnd->request),
4590 					 (cmnd->cmnd[1]>>5));
4591 		}
4592 		err = lpfc_bg_scsi_prep_dma_buf(phba, lpfc_cmd);
4593 	} else {
4594 		if (vport->phba->cfg_enable_bg) {
4595 			lpfc_printf_vlog(vport,
4596 					 KERN_INFO, LOG_SCSI_CMD,
4597 					 "9038 BLKGRD: rcvd PROT_NORMAL cmd: "
4598 					 "x%x sector x%llx cnt %u pt %x\n",
4599 					 cmnd->cmnd[0],
4600 					 (unsigned long long)scsi_get_lba(cmnd),
4601 					 blk_rq_sectors(cmnd->request),
4602 					 (cmnd->cmnd[1]>>5));
4603 		}
4604 		err = lpfc_scsi_prep_dma_buf(phba, lpfc_cmd);
4605 	}
4606 
4607 	if (err)
4608 		goto out_host_busy_free_buf;
4609 
4610 	lpfc_scsi_prep_cmnd(vport, lpfc_cmd, ndlp);
4611 
4612 	atomic_inc(&ndlp->cmd_pending);
4613 	err = lpfc_sli_issue_iocb(phba, LPFC_FCP_RING,
4614 				  &lpfc_cmd->cur_iocbq, SLI_IOCB_RET_IOCB);
4615 	if (err) {
4616 		atomic_dec(&ndlp->cmd_pending);
4617 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4618 				 "3376 FCP could not issue IOCB err %x"
4619 				 "FCP cmd x%x <%d/%llu> "
4620 				 "sid: x%x did: x%x oxid: x%x "
4621 				 "Data: x%x x%x x%x x%x\n",
4622 				 err, cmnd->cmnd[0],
4623 				 cmnd->device ? cmnd->device->id : 0xffff,
4624 				 cmnd->device ? cmnd->device->lun : (u64) -1,
4625 				 vport->fc_myDID, ndlp->nlp_DID,
4626 				 phba->sli_rev == LPFC_SLI_REV4 ?
4627 				 lpfc_cmd->cur_iocbq.sli4_xritag : 0xffff,
4628 				 lpfc_cmd->cur_iocbq.iocb.ulpContext,
4629 				 lpfc_cmd->cur_iocbq.iocb.ulpIoTag,
4630 				 lpfc_cmd->cur_iocbq.iocb.ulpTimeout,
4631 				 (uint32_t)
4632 				 (cmnd->request->timeout / 1000));
4633 
4634 
4635 		goto out_host_busy_free_buf;
4636 	}
4637 	if (phba->cfg_poll & ENABLE_FCP_RING_POLLING) {
4638 		lpfc_sli_handle_fast_ring_event(phba,
4639 			&phba->sli.ring[LPFC_FCP_RING], HA_R0RE_REQ);
4640 
4641 		if (phba->cfg_poll & DISABLE_FCP_RING_INT)
4642 			lpfc_poll_rearm_timer(phba);
4643 	}
4644 
4645 	return 0;
4646 
4647  out_host_busy_free_buf:
4648 	lpfc_scsi_unprep_dma_buf(phba, lpfc_cmd);
4649 	lpfc_release_scsi_buf(phba, lpfc_cmd);
4650  out_host_busy:
4651 	return SCSI_MLQUEUE_HOST_BUSY;
4652 
4653  out_tgt_busy:
4654 	return SCSI_MLQUEUE_TARGET_BUSY;
4655 
4656  out_fail_command:
4657 	cmnd->scsi_done(cmnd);
4658 	return 0;
4659 }
4660 
4661 
4662 /**
4663  * lpfc_abort_handler - scsi_host_template eh_abort_handler entry point
4664  * @cmnd: Pointer to scsi_cmnd data structure.
4665  *
4666  * This routine aborts @cmnd pending in base driver.
4667  *
4668  * Return code :
4669  *   0x2003 - Error
4670  *   0x2002 - Success
4671  **/
4672 static int
4673 lpfc_abort_handler(struct scsi_cmnd *cmnd)
4674 {
4675 	struct Scsi_Host  *shost = cmnd->device->host;
4676 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
4677 	struct lpfc_hba   *phba = vport->phba;
4678 	struct lpfc_iocbq *iocb;
4679 	struct lpfc_iocbq *abtsiocb;
4680 	struct lpfc_scsi_buf *lpfc_cmd;
4681 	IOCB_t *cmd, *icmd;
4682 	int ret = SUCCESS, status = 0;
4683 	struct lpfc_sli_ring *pring_s4;
4684 	int ring_number, ret_val;
4685 	unsigned long flags, iflags;
4686 	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(waitq);
4687 
4688 	status = fc_block_scsi_eh(cmnd);
4689 	if (status != 0 && status != SUCCESS)
4690 		return status;
4691 
4692 	spin_lock_irqsave(&phba->hbalock, flags);
4693 	/* driver queued commands are in process of being flushed */
4694 	if (phba->hba_flag & HBA_FCP_IOQ_FLUSH) {
4695 		spin_unlock_irqrestore(&phba->hbalock, flags);
4696 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4697 			"3168 SCSI Layer abort requested I/O has been "
4698 			"flushed by LLD.\n");
4699 		return FAILED;
4700 	}
4701 
4702 	lpfc_cmd = (struct lpfc_scsi_buf *)cmnd->host_scribble;
4703 	if (!lpfc_cmd || !lpfc_cmd->pCmd) {
4704 		spin_unlock_irqrestore(&phba->hbalock, flags);
4705 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4706 			 "2873 SCSI Layer I/O Abort Request IO CMPL Status "
4707 			 "x%x ID %d LUN %llu\n",
4708 			 SUCCESS, cmnd->device->id, cmnd->device->lun);
4709 		return SUCCESS;
4710 	}
4711 
4712 	iocb = &lpfc_cmd->cur_iocbq;
4713 	/* the command is in process of being cancelled */
4714 	if (!(iocb->iocb_flag & LPFC_IO_ON_TXCMPLQ)) {
4715 		spin_unlock_irqrestore(&phba->hbalock, flags);
4716 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4717 			"3169 SCSI Layer abort requested I/O has been "
4718 			"cancelled by LLD.\n");
4719 		return FAILED;
4720 	}
4721 	/*
4722 	 * If pCmd field of the corresponding lpfc_scsi_buf structure
4723 	 * points to a different SCSI command, then the driver has
4724 	 * already completed this command, but the midlayer did not
4725 	 * see the completion before the eh fired. Just return SUCCESS.
4726 	 */
4727 	if (lpfc_cmd->pCmd != cmnd) {
4728 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4729 			"3170 SCSI Layer abort requested I/O has been "
4730 			"completed by LLD.\n");
4731 		goto out_unlock;
4732 	}
4733 
4734 	BUG_ON(iocb->context1 != lpfc_cmd);
4735 
4736 	/* abort issued in recovery is still in progress */
4737 	if (iocb->iocb_flag & LPFC_DRIVER_ABORTED) {
4738 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4739 			 "3389 SCSI Layer I/O Abort Request is pending\n");
4740 		spin_unlock_irqrestore(&phba->hbalock, flags);
4741 		goto wait_for_cmpl;
4742 	}
4743 
4744 	abtsiocb = __lpfc_sli_get_iocbq(phba);
4745 	if (abtsiocb == NULL) {
4746 		ret = FAILED;
4747 		goto out_unlock;
4748 	}
4749 
4750 	/* Indicate the IO is being aborted by the driver. */
4751 	iocb->iocb_flag |= LPFC_DRIVER_ABORTED;
4752 
4753 	/*
4754 	 * The scsi command can not be in txq and it is in flight because the
4755 	 * pCmd is still pointig at the SCSI command we have to abort. There
4756 	 * is no need to search the txcmplq. Just send an abort to the FW.
4757 	 */
4758 
4759 	cmd = &iocb->iocb;
4760 	icmd = &abtsiocb->iocb;
4761 	icmd->un.acxri.abortType = ABORT_TYPE_ABTS;
4762 	icmd->un.acxri.abortContextTag = cmd->ulpContext;
4763 	if (phba->sli_rev == LPFC_SLI_REV4)
4764 		icmd->un.acxri.abortIoTag = iocb->sli4_xritag;
4765 	else
4766 		icmd->un.acxri.abortIoTag = cmd->ulpIoTag;
4767 
4768 	icmd->ulpLe = 1;
4769 	icmd->ulpClass = cmd->ulpClass;
4770 
4771 	/* ABTS WQE must go to the same WQ as the WQE to be aborted */
4772 	abtsiocb->fcp_wqidx = iocb->fcp_wqidx;
4773 	abtsiocb->iocb_flag |= LPFC_USE_FCPWQIDX;
4774 	if (iocb->iocb_flag & LPFC_IO_FOF)
4775 		abtsiocb->iocb_flag |= LPFC_IO_FOF;
4776 
4777 	if (lpfc_is_link_up(phba))
4778 		icmd->ulpCommand = CMD_ABORT_XRI_CN;
4779 	else
4780 		icmd->ulpCommand = CMD_CLOSE_XRI_CN;
4781 
4782 	abtsiocb->iocb_cmpl = lpfc_sli_abort_fcp_cmpl;
4783 	abtsiocb->vport = vport;
4784 	if (phba->sli_rev == LPFC_SLI_REV4) {
4785 		ring_number = MAX_SLI3_CONFIGURED_RINGS + iocb->fcp_wqidx;
4786 		pring_s4 = &phba->sli.ring[ring_number];
4787 		/* Note: both hbalock and ring_lock must be set here */
4788 		spin_lock_irqsave(&pring_s4->ring_lock, iflags);
4789 		ret_val = __lpfc_sli_issue_iocb(phba, pring_s4->ringno,
4790 						abtsiocb, 0);
4791 		spin_unlock_irqrestore(&pring_s4->ring_lock, iflags);
4792 	} else {
4793 		ret_val = __lpfc_sli_issue_iocb(phba, LPFC_FCP_RING,
4794 						abtsiocb, 0);
4795 	}
4796 	/* no longer need the lock after this point */
4797 	spin_unlock_irqrestore(&phba->hbalock, flags);
4798 
4799 
4800 	if (ret_val == IOCB_ERROR) {
4801 		lpfc_sli_release_iocbq(phba, abtsiocb);
4802 		ret = FAILED;
4803 		goto out;
4804 	}
4805 
4806 	if (phba->cfg_poll & DISABLE_FCP_RING_INT)
4807 		lpfc_sli_handle_fast_ring_event(phba,
4808 			&phba->sli.ring[LPFC_FCP_RING], HA_R0RE_REQ);
4809 
4810 wait_for_cmpl:
4811 	lpfc_cmd->waitq = &waitq;
4812 	/* Wait for abort to complete */
4813 	wait_event_timeout(waitq,
4814 			  (lpfc_cmd->pCmd != cmnd),
4815 			   msecs_to_jiffies(2*vport->cfg_devloss_tmo*1000));
4816 
4817 	spin_lock_irqsave(shost->host_lock, flags);
4818 	lpfc_cmd->waitq = NULL;
4819 	spin_unlock_irqrestore(shost->host_lock, flags);
4820 
4821 	if (lpfc_cmd->pCmd == cmnd) {
4822 		ret = FAILED;
4823 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
4824 				 "0748 abort handler timed out waiting "
4825 				 "for aborting I/O (xri:x%x) to complete: "
4826 				 "ret %#x, ID %d, LUN %llu\n",
4827 				 iocb->sli4_xritag, ret,
4828 				 cmnd->device->id, cmnd->device->lun);
4829 	}
4830 	goto out;
4831 
4832 out_unlock:
4833 	spin_unlock_irqrestore(&phba->hbalock, flags);
4834 out:
4835 	lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4836 			 "0749 SCSI Layer I/O Abort Request Status x%x ID %d "
4837 			 "LUN %llu\n", ret, cmnd->device->id,
4838 			 cmnd->device->lun);
4839 	return ret;
4840 }
4841 
4842 static char *
4843 lpfc_taskmgmt_name(uint8_t task_mgmt_cmd)
4844 {
4845 	switch (task_mgmt_cmd) {
4846 	case FCP_ABORT_TASK_SET:
4847 		return "ABORT_TASK_SET";
4848 	case FCP_CLEAR_TASK_SET:
4849 		return "FCP_CLEAR_TASK_SET";
4850 	case FCP_BUS_RESET:
4851 		return "FCP_BUS_RESET";
4852 	case FCP_LUN_RESET:
4853 		return "FCP_LUN_RESET";
4854 	case FCP_TARGET_RESET:
4855 		return "FCP_TARGET_RESET";
4856 	case FCP_CLEAR_ACA:
4857 		return "FCP_CLEAR_ACA";
4858 	case FCP_TERMINATE_TASK:
4859 		return "FCP_TERMINATE_TASK";
4860 	default:
4861 		return "unknown";
4862 	}
4863 }
4864 
4865 
4866 /**
4867  * lpfc_check_fcp_rsp - check the returned fcp_rsp to see if task failed
4868  * @vport: The virtual port for which this call is being executed.
4869  * @lpfc_cmd: Pointer to lpfc_scsi_buf data structure.
4870  *
4871  * This routine checks the FCP RSP INFO to see if the tsk mgmt command succeded
4872  *
4873  * Return code :
4874  *   0x2003 - Error
4875  *   0x2002 - Success
4876  **/
4877 static int
4878 lpfc_check_fcp_rsp(struct lpfc_vport *vport, struct lpfc_scsi_buf *lpfc_cmd)
4879 {
4880 	struct fcp_rsp *fcprsp = lpfc_cmd->fcp_rsp;
4881 	uint32_t rsp_info;
4882 	uint32_t rsp_len;
4883 	uint8_t  rsp_info_code;
4884 	int ret = FAILED;
4885 
4886 
4887 	if (fcprsp == NULL)
4888 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4889 				 "0703 fcp_rsp is missing\n");
4890 	else {
4891 		rsp_info = fcprsp->rspStatus2;
4892 		rsp_len = be32_to_cpu(fcprsp->rspRspLen);
4893 		rsp_info_code = fcprsp->rspInfo3;
4894 
4895 
4896 		lpfc_printf_vlog(vport, KERN_INFO,
4897 				 LOG_FCP,
4898 				 "0706 fcp_rsp valid 0x%x,"
4899 				 " rsp len=%d code 0x%x\n",
4900 				 rsp_info,
4901 				 rsp_len, rsp_info_code);
4902 
4903 		if ((fcprsp->rspStatus2&RSP_LEN_VALID) && (rsp_len == 8)) {
4904 			switch (rsp_info_code) {
4905 			case RSP_NO_FAILURE:
4906 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4907 						 "0715 Task Mgmt No Failure\n");
4908 				ret = SUCCESS;
4909 				break;
4910 			case RSP_TM_NOT_SUPPORTED: /* TM rejected */
4911 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4912 						 "0716 Task Mgmt Target "
4913 						"reject\n");
4914 				break;
4915 			case RSP_TM_NOT_COMPLETED: /* TM failed */
4916 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4917 						 "0717 Task Mgmt Target "
4918 						"failed TM\n");
4919 				break;
4920 			case RSP_TM_INVALID_LU: /* TM to invalid LU! */
4921 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4922 						 "0718 Task Mgmt to invalid "
4923 						"LUN\n");
4924 				break;
4925 			}
4926 		}
4927 	}
4928 	return ret;
4929 }
4930 
4931 
4932 /**
4933  * lpfc_send_taskmgmt - Generic SCSI Task Mgmt Handler
4934  * @vport: The virtual port for which this call is being executed.
4935  * @rdata: Pointer to remote port local data
4936  * @tgt_id: Target ID of remote device.
4937  * @lun_id: Lun number for the TMF
4938  * @task_mgmt_cmd: type of TMF to send
4939  *
4940  * This routine builds and sends a TMF (SCSI Task Mgmt Function) to
4941  * a remote port.
4942  *
4943  * Return Code:
4944  *   0x2003 - Error
4945  *   0x2002 - Success.
4946  **/
4947 static int
4948 lpfc_send_taskmgmt(struct lpfc_vport *vport, struct scsi_cmnd *cmnd,
4949 		   unsigned int tgt_id, uint64_t lun_id,
4950 		   uint8_t task_mgmt_cmd)
4951 {
4952 	struct lpfc_hba   *phba = vport->phba;
4953 	struct lpfc_scsi_buf *lpfc_cmd;
4954 	struct lpfc_iocbq *iocbq;
4955 	struct lpfc_iocbq *iocbqrsp;
4956 	struct lpfc_rport_data *rdata;
4957 	struct lpfc_nodelist *pnode;
4958 	int ret;
4959 	int status;
4960 
4961 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
4962 	if (!rdata || !rdata->pnode || !NLP_CHK_NODE_ACT(rdata->pnode))
4963 		return FAILED;
4964 	pnode = rdata->pnode;
4965 
4966 	lpfc_cmd = lpfc_get_scsi_buf(phba, pnode);
4967 	if (lpfc_cmd == NULL)
4968 		return FAILED;
4969 	lpfc_cmd->timeout = phba->cfg_task_mgmt_tmo;
4970 	lpfc_cmd->rdata = rdata;
4971 	lpfc_cmd->pCmd = cmnd;
4972 
4973 	status = lpfc_scsi_prep_task_mgmt_cmd(vport, lpfc_cmd, lun_id,
4974 					   task_mgmt_cmd);
4975 	if (!status) {
4976 		lpfc_release_scsi_buf(phba, lpfc_cmd);
4977 		return FAILED;
4978 	}
4979 
4980 	iocbq = &lpfc_cmd->cur_iocbq;
4981 	iocbqrsp = lpfc_sli_get_iocbq(phba);
4982 	if (iocbqrsp == NULL) {
4983 		lpfc_release_scsi_buf(phba, lpfc_cmd);
4984 		return FAILED;
4985 	}
4986 	iocbq->iocb_cmpl = lpfc_tskmgmt_def_cmpl;
4987 
4988 	lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4989 			 "0702 Issue %s to TGT %d LUN %llu "
4990 			 "rpi x%x nlp_flag x%x Data: x%x x%x\n",
4991 			 lpfc_taskmgmt_name(task_mgmt_cmd), tgt_id, lun_id,
4992 			 pnode->nlp_rpi, pnode->nlp_flag, iocbq->sli4_xritag,
4993 			 iocbq->iocb_flag);
4994 
4995 	status = lpfc_sli_issue_iocb_wait(phba, LPFC_FCP_RING,
4996 					  iocbq, iocbqrsp, lpfc_cmd->timeout);
4997 	if ((status != IOCB_SUCCESS) ||
4998 	    (iocbqrsp->iocb.ulpStatus != IOSTAT_SUCCESS)) {
4999 		if (status != IOCB_SUCCESS ||
5000 		    iocbqrsp->iocb.ulpStatus != IOSTAT_FCP_RSP_ERROR)
5001 			lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5002 					 "0727 TMF %s to TGT %d LUN %llu "
5003 					 "failed (%d, %d) iocb_flag x%x\n",
5004 					 lpfc_taskmgmt_name(task_mgmt_cmd),
5005 					 tgt_id, lun_id,
5006 					 iocbqrsp->iocb.ulpStatus,
5007 					 iocbqrsp->iocb.un.ulpWord[4],
5008 					 iocbq->iocb_flag);
5009 		/* if ulpStatus != IOCB_SUCCESS, then status == IOCB_SUCCESS */
5010 		if (status == IOCB_SUCCESS) {
5011 			if (iocbqrsp->iocb.ulpStatus == IOSTAT_FCP_RSP_ERROR)
5012 				/* Something in the FCP_RSP was invalid.
5013 				 * Check conditions */
5014 				ret = lpfc_check_fcp_rsp(vport, lpfc_cmd);
5015 			else
5016 				ret = FAILED;
5017 		} else if (status == IOCB_TIMEDOUT) {
5018 			ret = TIMEOUT_ERROR;
5019 		} else {
5020 			ret = FAILED;
5021 		}
5022 	} else
5023 		ret = SUCCESS;
5024 
5025 	lpfc_sli_release_iocbq(phba, iocbqrsp);
5026 
5027 	if (ret != TIMEOUT_ERROR)
5028 		lpfc_release_scsi_buf(phba, lpfc_cmd);
5029 
5030 	return ret;
5031 }
5032 
5033 /**
5034  * lpfc_chk_tgt_mapped -
5035  * @vport: The virtual port to check on
5036  * @cmnd: Pointer to scsi_cmnd data structure.
5037  *
5038  * This routine delays until the scsi target (aka rport) for the
5039  * command exists (is present and logged in) or we declare it non-existent.
5040  *
5041  * Return code :
5042  *  0x2003 - Error
5043  *  0x2002 - Success
5044  **/
5045 static int
5046 lpfc_chk_tgt_mapped(struct lpfc_vport *vport, struct scsi_cmnd *cmnd)
5047 {
5048 	struct lpfc_rport_data *rdata;
5049 	struct lpfc_nodelist *pnode;
5050 	unsigned long later;
5051 
5052 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
5053 	if (!rdata) {
5054 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
5055 			"0797 Tgt Map rport failure: rdata x%p\n", rdata);
5056 		return FAILED;
5057 	}
5058 	pnode = rdata->pnode;
5059 	/*
5060 	 * If target is not in a MAPPED state, delay until
5061 	 * target is rediscovered or devloss timeout expires.
5062 	 */
5063 	later = msecs_to_jiffies(2 * vport->cfg_devloss_tmo * 1000) + jiffies;
5064 	while (time_after(later, jiffies)) {
5065 		if (!pnode || !NLP_CHK_NODE_ACT(pnode))
5066 			return FAILED;
5067 		if (pnode->nlp_state == NLP_STE_MAPPED_NODE)
5068 			return SUCCESS;
5069 		schedule_timeout_uninterruptible(msecs_to_jiffies(500));
5070 		rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
5071 		if (!rdata)
5072 			return FAILED;
5073 		pnode = rdata->pnode;
5074 	}
5075 	if (!pnode || !NLP_CHK_NODE_ACT(pnode) ||
5076 	    (pnode->nlp_state != NLP_STE_MAPPED_NODE))
5077 		return FAILED;
5078 	return SUCCESS;
5079 }
5080 
5081 /**
5082  * lpfc_reset_flush_io_context -
5083  * @vport: The virtual port (scsi_host) for the flush context
5084  * @tgt_id: If aborting by Target contect - specifies the target id
5085  * @lun_id: If aborting by Lun context - specifies the lun id
5086  * @context: specifies the context level to flush at.
5087  *
5088  * After a reset condition via TMF, we need to flush orphaned i/o
5089  * contexts from the adapter. This routine aborts any contexts
5090  * outstanding, then waits for their completions. The wait is
5091  * bounded by devloss_tmo though.
5092  *
5093  * Return code :
5094  *  0x2003 - Error
5095  *  0x2002 - Success
5096  **/
5097 static int
5098 lpfc_reset_flush_io_context(struct lpfc_vport *vport, uint16_t tgt_id,
5099 			uint64_t lun_id, lpfc_ctx_cmd context)
5100 {
5101 	struct lpfc_hba   *phba = vport->phba;
5102 	unsigned long later;
5103 	int cnt;
5104 
5105 	cnt = lpfc_sli_sum_iocb(vport, tgt_id, lun_id, context);
5106 	if (cnt)
5107 		lpfc_sli_abort_taskmgmt(vport,
5108 					&phba->sli.ring[phba->sli.fcp_ring],
5109 					tgt_id, lun_id, context);
5110 	later = msecs_to_jiffies(2 * vport->cfg_devloss_tmo * 1000) + jiffies;
5111 	while (time_after(later, jiffies) && cnt) {
5112 		schedule_timeout_uninterruptible(msecs_to_jiffies(20));
5113 		cnt = lpfc_sli_sum_iocb(vport, tgt_id, lun_id, context);
5114 	}
5115 	if (cnt) {
5116 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5117 			"0724 I/O flush failure for context %s : cnt x%x\n",
5118 			((context == LPFC_CTX_LUN) ? "LUN" :
5119 			 ((context == LPFC_CTX_TGT) ? "TGT" :
5120 			  ((context == LPFC_CTX_HOST) ? "HOST" : "Unknown"))),
5121 			cnt);
5122 		return FAILED;
5123 	}
5124 	return SUCCESS;
5125 }
5126 
5127 /**
5128  * lpfc_device_reset_handler - scsi_host_template eh_device_reset entry point
5129  * @cmnd: Pointer to scsi_cmnd data structure.
5130  *
5131  * This routine does a device reset by sending a LUN_RESET task management
5132  * command.
5133  *
5134  * Return code :
5135  *  0x2003 - Error
5136  *  0x2002 - Success
5137  **/
5138 static int
5139 lpfc_device_reset_handler(struct scsi_cmnd *cmnd)
5140 {
5141 	struct Scsi_Host  *shost = cmnd->device->host;
5142 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
5143 	struct lpfc_rport_data *rdata;
5144 	struct lpfc_nodelist *pnode;
5145 	unsigned tgt_id = cmnd->device->id;
5146 	uint64_t lun_id = cmnd->device->lun;
5147 	struct lpfc_scsi_event_header scsi_event;
5148 	int status;
5149 
5150 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
5151 	if (!rdata || !rdata->pnode) {
5152 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5153 				 "0798 Device Reset rport failure: rdata x%p\n",
5154 				 rdata);
5155 		return FAILED;
5156 	}
5157 	pnode = rdata->pnode;
5158 	status = fc_block_scsi_eh(cmnd);
5159 	if (status != 0 && status != SUCCESS)
5160 		return status;
5161 
5162 	status = lpfc_chk_tgt_mapped(vport, cmnd);
5163 	if (status == FAILED) {
5164 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5165 			"0721 Device Reset rport failure: rdata x%p\n", rdata);
5166 		return FAILED;
5167 	}
5168 
5169 	scsi_event.event_type = FC_REG_SCSI_EVENT;
5170 	scsi_event.subcategory = LPFC_EVENT_LUNRESET;
5171 	scsi_event.lun = lun_id;
5172 	memcpy(scsi_event.wwpn, &pnode->nlp_portname, sizeof(struct lpfc_name));
5173 	memcpy(scsi_event.wwnn, &pnode->nlp_nodename, sizeof(struct lpfc_name));
5174 
5175 	fc_host_post_vendor_event(shost, fc_get_event_number(),
5176 		sizeof(scsi_event), (char *)&scsi_event, LPFC_NL_VENDOR_ID);
5177 
5178 	status = lpfc_send_taskmgmt(vport, cmnd, tgt_id, lun_id,
5179 						FCP_LUN_RESET);
5180 
5181 	lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5182 			 "0713 SCSI layer issued Device Reset (%d, %llu) "
5183 			 "return x%x\n", tgt_id, lun_id, status);
5184 
5185 	/*
5186 	 * We have to clean up i/o as : they may be orphaned by the TMF;
5187 	 * or if the TMF failed, they may be in an indeterminate state.
5188 	 * So, continue on.
5189 	 * We will report success if all the i/o aborts successfully.
5190 	 */
5191 	if (status == SUCCESS)
5192 		status = lpfc_reset_flush_io_context(vport, tgt_id, lun_id,
5193 						LPFC_CTX_LUN);
5194 
5195 	return status;
5196 }
5197 
5198 /**
5199  * lpfc_target_reset_handler - scsi_host_template eh_target_reset entry point
5200  * @cmnd: Pointer to scsi_cmnd data structure.
5201  *
5202  * This routine does a target reset by sending a TARGET_RESET task management
5203  * command.
5204  *
5205  * Return code :
5206  *  0x2003 - Error
5207  *  0x2002 - Success
5208  **/
5209 static int
5210 lpfc_target_reset_handler(struct scsi_cmnd *cmnd)
5211 {
5212 	struct Scsi_Host  *shost = cmnd->device->host;
5213 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
5214 	struct lpfc_rport_data *rdata;
5215 	struct lpfc_nodelist *pnode;
5216 	unsigned tgt_id = cmnd->device->id;
5217 	uint64_t lun_id = cmnd->device->lun;
5218 	struct lpfc_scsi_event_header scsi_event;
5219 	int status;
5220 
5221 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
5222 	if (!rdata) {
5223 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5224 			"0799 Target Reset rport failure: rdata x%p\n", rdata);
5225 		return FAILED;
5226 	}
5227 	pnode = rdata->pnode;
5228 	status = fc_block_scsi_eh(cmnd);
5229 	if (status != 0 && status != SUCCESS)
5230 		return status;
5231 
5232 	status = lpfc_chk_tgt_mapped(vport, cmnd);
5233 	if (status == FAILED) {
5234 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5235 			"0722 Target Reset rport failure: rdata x%p\n", rdata);
5236 		if (pnode) {
5237 			spin_lock_irq(shost->host_lock);
5238 			pnode->nlp_flag &= ~NLP_NPR_ADISC;
5239 			pnode->nlp_fcp_info &= ~NLP_FCP_2_DEVICE;
5240 			spin_unlock_irq(shost->host_lock);
5241 		}
5242 		lpfc_reset_flush_io_context(vport, tgt_id, lun_id,
5243 					  LPFC_CTX_TGT);
5244 		return FAST_IO_FAIL;
5245 	}
5246 
5247 	scsi_event.event_type = FC_REG_SCSI_EVENT;
5248 	scsi_event.subcategory = LPFC_EVENT_TGTRESET;
5249 	scsi_event.lun = 0;
5250 	memcpy(scsi_event.wwpn, &pnode->nlp_portname, sizeof(struct lpfc_name));
5251 	memcpy(scsi_event.wwnn, &pnode->nlp_nodename, sizeof(struct lpfc_name));
5252 
5253 	fc_host_post_vendor_event(shost, fc_get_event_number(),
5254 		sizeof(scsi_event), (char *)&scsi_event, LPFC_NL_VENDOR_ID);
5255 
5256 	status = lpfc_send_taskmgmt(vport, cmnd, tgt_id, lun_id,
5257 					FCP_TARGET_RESET);
5258 
5259 	lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5260 			 "0723 SCSI layer issued Target Reset (%d, %llu) "
5261 			 "return x%x\n", tgt_id, lun_id, status);
5262 
5263 	/*
5264 	 * We have to clean up i/o as : they may be orphaned by the TMF;
5265 	 * or if the TMF failed, they may be in an indeterminate state.
5266 	 * So, continue on.
5267 	 * We will report success if all the i/o aborts successfully.
5268 	 */
5269 	if (status == SUCCESS)
5270 		status = lpfc_reset_flush_io_context(vport, tgt_id, lun_id,
5271 					  LPFC_CTX_TGT);
5272 	return status;
5273 }
5274 
5275 /**
5276  * lpfc_bus_reset_handler - scsi_host_template eh_bus_reset_handler entry point
5277  * @cmnd: Pointer to scsi_cmnd data structure.
5278  *
5279  * This routine does target reset to all targets on @cmnd->device->host.
5280  * This emulates Parallel SCSI Bus Reset Semantics.
5281  *
5282  * Return code :
5283  *  0x2003 - Error
5284  *  0x2002 - Success
5285  **/
5286 static int
5287 lpfc_bus_reset_handler(struct scsi_cmnd *cmnd)
5288 {
5289 	struct Scsi_Host  *shost = cmnd->device->host;
5290 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
5291 	struct lpfc_nodelist *ndlp = NULL;
5292 	struct lpfc_scsi_event_header scsi_event;
5293 	int match;
5294 	int ret = SUCCESS, status, i;
5295 
5296 	scsi_event.event_type = FC_REG_SCSI_EVENT;
5297 	scsi_event.subcategory = LPFC_EVENT_BUSRESET;
5298 	scsi_event.lun = 0;
5299 	memcpy(scsi_event.wwpn, &vport->fc_portname, sizeof(struct lpfc_name));
5300 	memcpy(scsi_event.wwnn, &vport->fc_nodename, sizeof(struct lpfc_name));
5301 
5302 	fc_host_post_vendor_event(shost, fc_get_event_number(),
5303 		sizeof(scsi_event), (char *)&scsi_event, LPFC_NL_VENDOR_ID);
5304 
5305 	status = fc_block_scsi_eh(cmnd);
5306 	if (status != 0 && status != SUCCESS)
5307 		return status;
5308 
5309 	/*
5310 	 * Since the driver manages a single bus device, reset all
5311 	 * targets known to the driver.  Should any target reset
5312 	 * fail, this routine returns failure to the midlayer.
5313 	 */
5314 	for (i = 0; i < LPFC_MAX_TARGET; i++) {
5315 		/* Search for mapped node by target ID */
5316 		match = 0;
5317 		spin_lock_irq(shost->host_lock);
5318 		list_for_each_entry(ndlp, &vport->fc_nodes, nlp_listp) {
5319 			if (!NLP_CHK_NODE_ACT(ndlp))
5320 				continue;
5321 			if (vport->phba->cfg_fcp2_no_tgt_reset &&
5322 			    (ndlp->nlp_fcp_info & NLP_FCP_2_DEVICE))
5323 				continue;
5324 			if (ndlp->nlp_state == NLP_STE_MAPPED_NODE &&
5325 			    ndlp->nlp_sid == i &&
5326 			    ndlp->rport) {
5327 				match = 1;
5328 				break;
5329 			}
5330 		}
5331 		spin_unlock_irq(shost->host_lock);
5332 		if (!match)
5333 			continue;
5334 
5335 		status = lpfc_send_taskmgmt(vport, cmnd,
5336 					i, 0, FCP_TARGET_RESET);
5337 
5338 		if (status != SUCCESS) {
5339 			lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5340 					 "0700 Bus Reset on target %d failed\n",
5341 					 i);
5342 			ret = FAILED;
5343 		}
5344 	}
5345 	/*
5346 	 * We have to clean up i/o as : they may be orphaned by the TMFs
5347 	 * above; or if any of the TMFs failed, they may be in an
5348 	 * indeterminate state.
5349 	 * We will report success if all the i/o aborts successfully.
5350 	 */
5351 
5352 	status = lpfc_reset_flush_io_context(vport, 0, 0, LPFC_CTX_HOST);
5353 	if (status != SUCCESS)
5354 		ret = FAILED;
5355 
5356 	lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5357 			 "0714 SCSI layer issued Bus Reset Data: x%x\n", ret);
5358 	return ret;
5359 }
5360 
5361 /**
5362  * lpfc_host_reset_handler - scsi_host_template eh_host_reset_handler entry pt
5363  * @cmnd: Pointer to scsi_cmnd data structure.
5364  *
5365  * This routine does host reset to the adaptor port. It brings the HBA
5366  * offline, performs a board restart, and then brings the board back online.
5367  * The lpfc_offline calls lpfc_sli_hba_down which will abort and local
5368  * reject all outstanding SCSI commands to the host and error returned
5369  * back to SCSI mid-level. As this will be SCSI mid-level's last resort
5370  * of error handling, it will only return error if resetting of the adapter
5371  * is not successful; in all other cases, will return success.
5372  *
5373  * Return code :
5374  *  0x2003 - Error
5375  *  0x2002 - Success
5376  **/
5377 static int
5378 lpfc_host_reset_handler(struct scsi_cmnd *cmnd)
5379 {
5380 	struct Scsi_Host *shost = cmnd->device->host;
5381 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
5382 	struct lpfc_hba *phba = vport->phba;
5383 	int rc, ret = SUCCESS;
5384 
5385 	lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5386 			 "3172 SCSI layer issued Host Reset Data:\n");
5387 
5388 	lpfc_offline_prep(phba, LPFC_MBX_WAIT);
5389 	lpfc_offline(phba);
5390 	rc = lpfc_sli_brdrestart(phba);
5391 	if (rc)
5392 		ret = FAILED;
5393 	rc = lpfc_online(phba);
5394 	if (rc)
5395 		ret = FAILED;
5396 	lpfc_unblock_mgmt_io(phba);
5397 
5398 	if (ret == FAILED) {
5399 		lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5400 				 "3323 Failed host reset, bring it offline\n");
5401 		lpfc_sli4_offline_eratt(phba);
5402 	}
5403 	return ret;
5404 }
5405 
5406 /**
5407  * lpfc_slave_alloc - scsi_host_template slave_alloc entry point
5408  * @sdev: Pointer to scsi_device.
5409  *
5410  * This routine populates the cmds_per_lun count + 2 scsi_bufs into  this host's
5411  * globally available list of scsi buffers. This routine also makes sure scsi
5412  * buffer is not allocated more than HBA limit conveyed to midlayer. This list
5413  * of scsi buffer exists for the lifetime of the driver.
5414  *
5415  * Return codes:
5416  *   non-0 - Error
5417  *   0 - Success
5418  **/
5419 static int
5420 lpfc_slave_alloc(struct scsi_device *sdev)
5421 {
5422 	struct lpfc_vport *vport = (struct lpfc_vport *) sdev->host->hostdata;
5423 	struct lpfc_hba   *phba = vport->phba;
5424 	struct fc_rport *rport = starget_to_rport(scsi_target(sdev));
5425 	uint32_t total = 0;
5426 	uint32_t num_to_alloc = 0;
5427 	int num_allocated = 0;
5428 	uint32_t sdev_cnt;
5429 	struct lpfc_device_data *device_data;
5430 	unsigned long flags;
5431 	struct lpfc_name target_wwpn;
5432 
5433 	if (!rport || fc_remote_port_chkready(rport))
5434 		return -ENXIO;
5435 
5436 	if (phba->cfg_fof) {
5437 
5438 		/*
5439 		 * Check to see if the device data structure for the lun
5440 		 * exists.  If not, create one.
5441 		 */
5442 
5443 		u64_to_wwn(rport->port_name, target_wwpn.u.wwn);
5444 		spin_lock_irqsave(&phba->devicelock, flags);
5445 		device_data = __lpfc_get_device_data(phba,
5446 						     &phba->luns,
5447 						     &vport->fc_portname,
5448 						     &target_wwpn,
5449 						     sdev->lun);
5450 		if (!device_data) {
5451 			spin_unlock_irqrestore(&phba->devicelock, flags);
5452 			device_data = lpfc_create_device_data(phba,
5453 							&vport->fc_portname,
5454 							&target_wwpn,
5455 							sdev->lun, true);
5456 			if (!device_data)
5457 				return -ENOMEM;
5458 			spin_lock_irqsave(&phba->devicelock, flags);
5459 			list_add_tail(&device_data->listentry, &phba->luns);
5460 		}
5461 		device_data->rport_data = rport->dd_data;
5462 		device_data->available = true;
5463 		spin_unlock_irqrestore(&phba->devicelock, flags);
5464 		sdev->hostdata = device_data;
5465 	} else {
5466 		sdev->hostdata = rport->dd_data;
5467 	}
5468 	sdev_cnt = atomic_inc_return(&phba->sdev_cnt);
5469 
5470 	/*
5471 	 * Populate the cmds_per_lun count scsi_bufs into this host's globally
5472 	 * available list of scsi buffers.  Don't allocate more than the
5473 	 * HBA limit conveyed to the midlayer via the host structure.  The
5474 	 * formula accounts for the lun_queue_depth + error handlers + 1
5475 	 * extra.  This list of scsi bufs exists for the lifetime of the driver.
5476 	 */
5477 	total = phba->total_scsi_bufs;
5478 	num_to_alloc = vport->cfg_lun_queue_depth + 2;
5479 
5480 	/* If allocated buffers are enough do nothing */
5481 	if ((sdev_cnt * (vport->cfg_lun_queue_depth + 2)) < total)
5482 		return 0;
5483 
5484 	/* Allow some exchanges to be available always to complete discovery */
5485 	if (total >= phba->cfg_hba_queue_depth - LPFC_DISC_IOCB_BUFF_COUNT ) {
5486 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5487 				 "0704 At limitation of %d preallocated "
5488 				 "command buffers\n", total);
5489 		return 0;
5490 	/* Allow some exchanges to be available always to complete discovery */
5491 	} else if (total + num_to_alloc >
5492 		phba->cfg_hba_queue_depth - LPFC_DISC_IOCB_BUFF_COUNT ) {
5493 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5494 				 "0705 Allocation request of %d "
5495 				 "command buffers will exceed max of %d.  "
5496 				 "Reducing allocation request to %d.\n",
5497 				 num_to_alloc, phba->cfg_hba_queue_depth,
5498 				 (phba->cfg_hba_queue_depth - total));
5499 		num_to_alloc = phba->cfg_hba_queue_depth - total;
5500 	}
5501 	num_allocated = lpfc_new_scsi_buf(vport, num_to_alloc);
5502 	if (num_to_alloc != num_allocated) {
5503 			lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
5504 					 "0708 Allocation request of %d "
5505 					 "command buffers did not succeed.  "
5506 					 "Allocated %d buffers.\n",
5507 					 num_to_alloc, num_allocated);
5508 	}
5509 	if (num_allocated > 0)
5510 		phba->total_scsi_bufs += num_allocated;
5511 	return 0;
5512 }
5513 
5514 /**
5515  * lpfc_slave_configure - scsi_host_template slave_configure entry point
5516  * @sdev: Pointer to scsi_device.
5517  *
5518  * This routine configures following items
5519  *   - Tag command queuing support for @sdev if supported.
5520  *   - Enable SLI polling for fcp ring if ENABLE_FCP_RING_POLLING flag is set.
5521  *
5522  * Return codes:
5523  *   0 - Success
5524  **/
5525 static int
5526 lpfc_slave_configure(struct scsi_device *sdev)
5527 {
5528 	struct lpfc_vport *vport = (struct lpfc_vport *) sdev->host->hostdata;
5529 	struct lpfc_hba   *phba = vport->phba;
5530 
5531 	scsi_change_queue_depth(sdev, vport->cfg_lun_queue_depth);
5532 
5533 	if (phba->cfg_poll & ENABLE_FCP_RING_POLLING) {
5534 		lpfc_sli_handle_fast_ring_event(phba,
5535 			&phba->sli.ring[LPFC_FCP_RING], HA_R0RE_REQ);
5536 		if (phba->cfg_poll & DISABLE_FCP_RING_INT)
5537 			lpfc_poll_rearm_timer(phba);
5538 	}
5539 
5540 	return 0;
5541 }
5542 
5543 /**
5544  * lpfc_slave_destroy - slave_destroy entry point of SHT data structure
5545  * @sdev: Pointer to scsi_device.
5546  *
5547  * This routine sets @sdev hostatdata filed to null.
5548  **/
5549 static void
5550 lpfc_slave_destroy(struct scsi_device *sdev)
5551 {
5552 	struct lpfc_vport *vport = (struct lpfc_vport *) sdev->host->hostdata;
5553 	struct lpfc_hba   *phba = vport->phba;
5554 	unsigned long flags;
5555 	struct lpfc_device_data *device_data = sdev->hostdata;
5556 
5557 	atomic_dec(&phba->sdev_cnt);
5558 	if ((phba->cfg_fof) && (device_data)) {
5559 		spin_lock_irqsave(&phba->devicelock, flags);
5560 		device_data->available = false;
5561 		if (!device_data->oas_enabled)
5562 			lpfc_delete_device_data(phba, device_data);
5563 		spin_unlock_irqrestore(&phba->devicelock, flags);
5564 	}
5565 	sdev->hostdata = NULL;
5566 	return;
5567 }
5568 
5569 /**
5570  * lpfc_create_device_data - creates and initializes device data structure for OAS
5571  * @pha: Pointer to host bus adapter structure.
5572  * @vport_wwpn: Pointer to vport's wwpn information
5573  * @target_wwpn: Pointer to target's wwpn information
5574  * @lun: Lun on target
5575  * @atomic_create: Flag to indicate if memory should be allocated using the
5576  *		  GFP_ATOMIC flag or not.
5577  *
5578  * This routine creates a device data structure which will contain identifying
5579  * information for the device (host wwpn, target wwpn, lun), state of OAS,
5580  * whether or not the corresponding lun is available by the system,
5581  * and pointer to the rport data.
5582  *
5583  * Return codes:
5584  *   NULL - Error
5585  *   Pointer to lpfc_device_data - Success
5586  **/
5587 struct lpfc_device_data*
5588 lpfc_create_device_data(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
5589 			struct lpfc_name *target_wwpn, uint64_t lun,
5590 			bool atomic_create)
5591 {
5592 
5593 	struct lpfc_device_data *lun_info;
5594 	int memory_flags;
5595 
5596 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn  ||
5597 	    !(phba->cfg_fof))
5598 		return NULL;
5599 
5600 	/* Attempt to create the device data to contain lun info */
5601 
5602 	if (atomic_create)
5603 		memory_flags = GFP_ATOMIC;
5604 	else
5605 		memory_flags = GFP_KERNEL;
5606 	lun_info = mempool_alloc(phba->device_data_mem_pool, memory_flags);
5607 	if (!lun_info)
5608 		return NULL;
5609 	INIT_LIST_HEAD(&lun_info->listentry);
5610 	lun_info->rport_data  = NULL;
5611 	memcpy(&lun_info->device_id.vport_wwpn, vport_wwpn,
5612 	       sizeof(struct lpfc_name));
5613 	memcpy(&lun_info->device_id.target_wwpn, target_wwpn,
5614 	       sizeof(struct lpfc_name));
5615 	lun_info->device_id.lun = lun;
5616 	lun_info->oas_enabled = false;
5617 	lun_info->priority = phba->cfg_XLanePriority;
5618 	lun_info->available = false;
5619 	return lun_info;
5620 }
5621 
5622 /**
5623  * lpfc_delete_device_data - frees a device data structure for OAS
5624  * @pha: Pointer to host bus adapter structure.
5625  * @lun_info: Pointer to device data structure to free.
5626  *
5627  * This routine frees the previously allocated device data structure passed.
5628  *
5629  **/
5630 void
5631 lpfc_delete_device_data(struct lpfc_hba *phba,
5632 			struct lpfc_device_data *lun_info)
5633 {
5634 
5635 	if (unlikely(!phba) || !lun_info  ||
5636 	    !(phba->cfg_fof))
5637 		return;
5638 
5639 	if (!list_empty(&lun_info->listentry))
5640 		list_del(&lun_info->listentry);
5641 	mempool_free(lun_info, phba->device_data_mem_pool);
5642 	return;
5643 }
5644 
5645 /**
5646  * __lpfc_get_device_data - returns the device data for the specified lun
5647  * @pha: Pointer to host bus adapter structure.
5648  * @list: Point to list to search.
5649  * @vport_wwpn: Pointer to vport's wwpn information
5650  * @target_wwpn: Pointer to target's wwpn information
5651  * @lun: Lun on target
5652  *
5653  * This routine searches the list passed for the specified lun's device data.
5654  * This function does not hold locks, it is the responsibility of the caller
5655  * to ensure the proper lock is held before calling the function.
5656  *
5657  * Return codes:
5658  *   NULL - Error
5659  *   Pointer to lpfc_device_data - Success
5660  **/
5661 struct lpfc_device_data*
5662 __lpfc_get_device_data(struct lpfc_hba *phba, struct list_head *list,
5663 		       struct lpfc_name *vport_wwpn,
5664 		       struct lpfc_name *target_wwpn, uint64_t lun)
5665 {
5666 
5667 	struct lpfc_device_data *lun_info;
5668 
5669 	if (unlikely(!phba) || !list || !vport_wwpn || !target_wwpn ||
5670 	    !phba->cfg_fof)
5671 		return NULL;
5672 
5673 	/* Check to see if the lun is already enabled for OAS. */
5674 
5675 	list_for_each_entry(lun_info, list, listentry) {
5676 		if ((memcmp(&lun_info->device_id.vport_wwpn, vport_wwpn,
5677 			    sizeof(struct lpfc_name)) == 0) &&
5678 		    (memcmp(&lun_info->device_id.target_wwpn, target_wwpn,
5679 			    sizeof(struct lpfc_name)) == 0) &&
5680 		    (lun_info->device_id.lun == lun))
5681 			return lun_info;
5682 	}
5683 
5684 	return NULL;
5685 }
5686 
5687 /**
5688  * lpfc_find_next_oas_lun - searches for the next oas lun
5689  * @pha: Pointer to host bus adapter structure.
5690  * @vport_wwpn: Pointer to vport's wwpn information
5691  * @target_wwpn: Pointer to target's wwpn information
5692  * @starting_lun: Pointer to the lun to start searching for
5693  * @found_vport_wwpn: Pointer to the found lun's vport wwpn information
5694  * @found_target_wwpn: Pointer to the found lun's target wwpn information
5695  * @found_lun: Pointer to the found lun.
5696  * @found_lun_status: Pointer to status of the found lun.
5697  *
5698  * This routine searches the luns list for the specified lun
5699  * or the first lun for the vport/target.  If the vport wwpn contains
5700  * a zero value then a specific vport is not specified. In this case
5701  * any vport which contains the lun will be considered a match.  If the
5702  * target wwpn contains a zero value then a specific target is not specified.
5703  * In this case any target which contains the lun will be considered a
5704  * match.  If the lun is found, the lun, vport wwpn, target wwpn and lun status
5705  * are returned.  The function will also return the next lun if available.
5706  * If the next lun is not found, starting_lun parameter will be set to
5707  * NO_MORE_OAS_LUN.
5708  *
5709  * Return codes:
5710  *   non-0 - Error
5711  *   0 - Success
5712  **/
5713 bool
5714 lpfc_find_next_oas_lun(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
5715 		       struct lpfc_name *target_wwpn, uint64_t *starting_lun,
5716 		       struct lpfc_name *found_vport_wwpn,
5717 		       struct lpfc_name *found_target_wwpn,
5718 		       uint64_t *found_lun,
5719 		       uint32_t *found_lun_status)
5720 {
5721 
5722 	unsigned long flags;
5723 	struct lpfc_device_data *lun_info;
5724 	struct lpfc_device_id *device_id;
5725 	uint64_t lun;
5726 	bool found = false;
5727 
5728 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn ||
5729 	    !starting_lun || !found_vport_wwpn ||
5730 	    !found_target_wwpn || !found_lun || !found_lun_status ||
5731 	    (*starting_lun == NO_MORE_OAS_LUN) ||
5732 	    !phba->cfg_fof)
5733 		return false;
5734 
5735 	lun = *starting_lun;
5736 	*found_lun = NO_MORE_OAS_LUN;
5737 	*starting_lun = NO_MORE_OAS_LUN;
5738 
5739 	/* Search for lun or the lun closet in value */
5740 
5741 	spin_lock_irqsave(&phba->devicelock, flags);
5742 	list_for_each_entry(lun_info, &phba->luns, listentry) {
5743 		if (((wwn_to_u64(vport_wwpn->u.wwn) == 0) ||
5744 		     (memcmp(&lun_info->device_id.vport_wwpn, vport_wwpn,
5745 			    sizeof(struct lpfc_name)) == 0)) &&
5746 		    ((wwn_to_u64(target_wwpn->u.wwn) == 0) ||
5747 		     (memcmp(&lun_info->device_id.target_wwpn, target_wwpn,
5748 			    sizeof(struct lpfc_name)) == 0)) &&
5749 		    (lun_info->oas_enabled)) {
5750 			device_id = &lun_info->device_id;
5751 			if ((!found) &&
5752 			    ((lun == FIND_FIRST_OAS_LUN) ||
5753 			     (device_id->lun == lun))) {
5754 				*found_lun = device_id->lun;
5755 				memcpy(found_vport_wwpn,
5756 				       &device_id->vport_wwpn,
5757 				       sizeof(struct lpfc_name));
5758 				memcpy(found_target_wwpn,
5759 				       &device_id->target_wwpn,
5760 				       sizeof(struct lpfc_name));
5761 				if (lun_info->available)
5762 					*found_lun_status =
5763 						OAS_LUN_STATUS_EXISTS;
5764 				else
5765 					*found_lun_status = 0;
5766 				if (phba->cfg_oas_flags & OAS_FIND_ANY_VPORT)
5767 					memset(vport_wwpn, 0x0,
5768 					       sizeof(struct lpfc_name));
5769 				if (phba->cfg_oas_flags & OAS_FIND_ANY_TARGET)
5770 					memset(target_wwpn, 0x0,
5771 					       sizeof(struct lpfc_name));
5772 				found = true;
5773 			} else if (found) {
5774 				*starting_lun = device_id->lun;
5775 				memcpy(vport_wwpn, &device_id->vport_wwpn,
5776 				       sizeof(struct lpfc_name));
5777 				memcpy(target_wwpn, &device_id->target_wwpn,
5778 				       sizeof(struct lpfc_name));
5779 				break;
5780 			}
5781 		}
5782 	}
5783 	spin_unlock_irqrestore(&phba->devicelock, flags);
5784 	return found;
5785 }
5786 
5787 /**
5788  * lpfc_enable_oas_lun - enables a lun for OAS operations
5789  * @pha: Pointer to host bus adapter structure.
5790  * @vport_wwpn: Pointer to vport's wwpn information
5791  * @target_wwpn: Pointer to target's wwpn information
5792  * @lun: Lun
5793  *
5794  * This routine enables a lun for oas operations.  The routines does so by
5795  * doing the following :
5796  *
5797  *   1) Checks to see if the device data for the lun has been created.
5798  *   2) If found, sets the OAS enabled flag if not set and returns.
5799  *   3) Otherwise, creates a device data structure.
5800  *   4) If successfully created, indicates the device data is for an OAS lun,
5801  *   indicates the lun is not available and add to the list of luns.
5802  *
5803  * Return codes:
5804  *   false - Error
5805  *   true - Success
5806  **/
5807 bool
5808 lpfc_enable_oas_lun(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
5809 		    struct lpfc_name *target_wwpn, uint64_t lun, uint8_t pri)
5810 {
5811 
5812 	struct lpfc_device_data *lun_info;
5813 	unsigned long flags;
5814 
5815 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn ||
5816 	    !phba->cfg_fof)
5817 		return false;
5818 
5819 	spin_lock_irqsave(&phba->devicelock, flags);
5820 
5821 	/* Check to see if the device data for the lun has been created */
5822 	lun_info = __lpfc_get_device_data(phba, &phba->luns, vport_wwpn,
5823 					  target_wwpn, lun);
5824 	if (lun_info) {
5825 		if (!lun_info->oas_enabled)
5826 			lun_info->oas_enabled = true;
5827 		spin_unlock_irqrestore(&phba->devicelock, flags);
5828 		return true;
5829 	}
5830 
5831 	/* Create an lun info structure and add to list of luns */
5832 	lun_info = lpfc_create_device_data(phba, vport_wwpn, target_wwpn, lun,
5833 					   false);
5834 	if (lun_info) {
5835 		lun_info->oas_enabled = true;
5836 		lun_info->priority = pri;
5837 		lun_info->available = false;
5838 		list_add_tail(&lun_info->listentry, &phba->luns);
5839 		spin_unlock_irqrestore(&phba->devicelock, flags);
5840 		return true;
5841 	}
5842 	spin_unlock_irqrestore(&phba->devicelock, flags);
5843 	return false;
5844 }
5845 
5846 /**
5847  * lpfc_disable_oas_lun - disables a lun for OAS operations
5848  * @pha: Pointer to host bus adapter structure.
5849  * @vport_wwpn: Pointer to vport's wwpn information
5850  * @target_wwpn: Pointer to target's wwpn information
5851  * @lun: Lun
5852  *
5853  * This routine disables a lun for oas operations.  The routines does so by
5854  * doing the following :
5855  *
5856  *   1) Checks to see if the device data for the lun is created.
5857  *   2) If present, clears the flag indicating this lun is for OAS.
5858  *   3) If the lun is not available by the system, the device data is
5859  *   freed.
5860  *
5861  * Return codes:
5862  *   false - Error
5863  *   true - Success
5864  **/
5865 bool
5866 lpfc_disable_oas_lun(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
5867 		     struct lpfc_name *target_wwpn, uint64_t lun)
5868 {
5869 
5870 	struct lpfc_device_data *lun_info;
5871 	unsigned long flags;
5872 
5873 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn ||
5874 	    !phba->cfg_fof)
5875 		return false;
5876 
5877 	spin_lock_irqsave(&phba->devicelock, flags);
5878 
5879 	/* Check to see if the lun is available. */
5880 	lun_info = __lpfc_get_device_data(phba,
5881 					  &phba->luns, vport_wwpn,
5882 					  target_wwpn, lun);
5883 	if (lun_info) {
5884 		lun_info->oas_enabled = false;
5885 		if (!lun_info->available)
5886 			lpfc_delete_device_data(phba, lun_info);
5887 		spin_unlock_irqrestore(&phba->devicelock, flags);
5888 		return true;
5889 	}
5890 
5891 	spin_unlock_irqrestore(&phba->devicelock, flags);
5892 	return false;
5893 }
5894 
5895 struct scsi_host_template lpfc_template_s3 = {
5896 	.module			= THIS_MODULE,
5897 	.name			= LPFC_DRIVER_NAME,
5898 	.proc_name		= LPFC_DRIVER_NAME,
5899 	.info			= lpfc_info,
5900 	.queuecommand		= lpfc_queuecommand,
5901 	.eh_abort_handler	= lpfc_abort_handler,
5902 	.eh_device_reset_handler = lpfc_device_reset_handler,
5903 	.eh_target_reset_handler = lpfc_target_reset_handler,
5904 	.eh_bus_reset_handler	= lpfc_bus_reset_handler,
5905 	.slave_alloc		= lpfc_slave_alloc,
5906 	.slave_configure	= lpfc_slave_configure,
5907 	.slave_destroy		= lpfc_slave_destroy,
5908 	.scan_finished		= lpfc_scan_finished,
5909 	.this_id		= -1,
5910 	.sg_tablesize		= LPFC_DEFAULT_SG_SEG_CNT,
5911 	.cmd_per_lun		= LPFC_CMD_PER_LUN,
5912 	.use_clustering		= ENABLE_CLUSTERING,
5913 	.shost_attrs		= lpfc_hba_attrs,
5914 	.max_sectors		= 0xFFFF,
5915 	.vendor_id		= LPFC_NL_VENDOR_ID,
5916 	.change_queue_depth	= scsi_change_queue_depth,
5917 	.track_queue_depth	= 1,
5918 };
5919 
5920 struct scsi_host_template lpfc_template = {
5921 	.module			= THIS_MODULE,
5922 	.name			= LPFC_DRIVER_NAME,
5923 	.proc_name		= LPFC_DRIVER_NAME,
5924 	.info			= lpfc_info,
5925 	.queuecommand		= lpfc_queuecommand,
5926 	.eh_abort_handler	= lpfc_abort_handler,
5927 	.eh_device_reset_handler = lpfc_device_reset_handler,
5928 	.eh_target_reset_handler = lpfc_target_reset_handler,
5929 	.eh_bus_reset_handler	= lpfc_bus_reset_handler,
5930 	.eh_host_reset_handler  = lpfc_host_reset_handler,
5931 	.slave_alloc		= lpfc_slave_alloc,
5932 	.slave_configure	= lpfc_slave_configure,
5933 	.slave_destroy		= lpfc_slave_destroy,
5934 	.scan_finished		= lpfc_scan_finished,
5935 	.this_id		= -1,
5936 	.sg_tablesize		= LPFC_DEFAULT_SG_SEG_CNT,
5937 	.cmd_per_lun		= LPFC_CMD_PER_LUN,
5938 	.use_clustering		= ENABLE_CLUSTERING,
5939 	.shost_attrs		= lpfc_hba_attrs,
5940 	.max_sectors		= 0xFFFF,
5941 	.vendor_id		= LPFC_NL_VENDOR_ID,
5942 	.change_queue_depth	= scsi_change_queue_depth,
5943 	.track_queue_depth	= 1,
5944 };
5945 
5946 struct scsi_host_template lpfc_vport_template = {
5947 	.module			= THIS_MODULE,
5948 	.name			= LPFC_DRIVER_NAME,
5949 	.proc_name		= LPFC_DRIVER_NAME,
5950 	.info			= lpfc_info,
5951 	.queuecommand		= lpfc_queuecommand,
5952 	.eh_abort_handler	= lpfc_abort_handler,
5953 	.eh_device_reset_handler = lpfc_device_reset_handler,
5954 	.eh_target_reset_handler = lpfc_target_reset_handler,
5955 	.eh_bus_reset_handler	= lpfc_bus_reset_handler,
5956 	.slave_alloc		= lpfc_slave_alloc,
5957 	.slave_configure	= lpfc_slave_configure,
5958 	.slave_destroy		= lpfc_slave_destroy,
5959 	.scan_finished		= lpfc_scan_finished,
5960 	.this_id		= -1,
5961 	.sg_tablesize		= LPFC_DEFAULT_SG_SEG_CNT,
5962 	.cmd_per_lun		= LPFC_CMD_PER_LUN,
5963 	.use_clustering		= ENABLE_CLUSTERING,
5964 	.shost_attrs		= lpfc_vport_attrs,
5965 	.max_sectors		= 0xFFFF,
5966 	.change_queue_depth	= scsi_change_queue_depth,
5967 	.track_queue_depth	= 1,
5968 };
5969