xref: /openbmc/linux/drivers/scsi/lpfc/lpfc_scsi.c (revision df0e68c1)
1 /*******************************************************************
2  * This file is part of the Emulex Linux Device Driver for         *
3  * Fibre Channel Host Bus Adapters.                                *
4  * Copyright (C) 2017-2021 Broadcom. All Rights Reserved. The term *
5  * “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.     *
6  * Copyright (C) 2004-2016 Emulex.  All rights reserved.           *
7  * EMULEX and SLI are trademarks of Emulex.                        *
8  * www.broadcom.com                                                *
9  * Portions Copyright (C) 2004-2005 Christoph Hellwig              *
10  *                                                                 *
11  * This program is free software; you can redistribute it and/or   *
12  * modify it under the terms of version 2 of the GNU General       *
13  * Public License as published by the Free Software Foundation.    *
14  * This program is distributed in the hope that it will be useful. *
15  * ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND          *
16  * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,  *
17  * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE      *
18  * DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD *
19  * TO BE LEGALLY INVALID.  See the GNU General Public License for  *
20  * more details, a copy of which can be found in the file COPYING  *
21  * included with this package.                                     *
22  *******************************************************************/
23 #include <linux/pci.h>
24 #include <linux/slab.h>
25 #include <linux/interrupt.h>
26 #include <linux/export.h>
27 #include <linux/delay.h>
28 #include <asm/unaligned.h>
29 #include <linux/t10-pi.h>
30 #include <linux/crc-t10dif.h>
31 #include <linux/blk-cgroup.h>
32 #include <net/checksum.h>
33 
34 #include <scsi/scsi.h>
35 #include <scsi/scsi_device.h>
36 #include <scsi/scsi_eh.h>
37 #include <scsi/scsi_host.h>
38 #include <scsi/scsi_tcq.h>
39 #include <scsi/scsi_transport_fc.h>
40 
41 #include "lpfc_version.h"
42 #include "lpfc_hw4.h"
43 #include "lpfc_hw.h"
44 #include "lpfc_sli.h"
45 #include "lpfc_sli4.h"
46 #include "lpfc_nl.h"
47 #include "lpfc_disc.h"
48 #include "lpfc.h"
49 #include "lpfc_scsi.h"
50 #include "lpfc_logmsg.h"
51 #include "lpfc_crtn.h"
52 #include "lpfc_vport.h"
53 
54 #define LPFC_RESET_WAIT  2
55 #define LPFC_ABORT_WAIT  2
56 
57 static char *dif_op_str[] = {
58 	"PROT_NORMAL",
59 	"PROT_READ_INSERT",
60 	"PROT_WRITE_STRIP",
61 	"PROT_READ_STRIP",
62 	"PROT_WRITE_INSERT",
63 	"PROT_READ_PASS",
64 	"PROT_WRITE_PASS",
65 };
66 
67 struct scsi_dif_tuple {
68 	__be16 guard_tag;       /* Checksum */
69 	__be16 app_tag;         /* Opaque storage */
70 	__be32 ref_tag;         /* Target LBA or indirect LBA */
71 };
72 
73 static struct lpfc_rport_data *
74 lpfc_rport_data_from_scsi_device(struct scsi_device *sdev)
75 {
76 	struct lpfc_vport *vport = (struct lpfc_vport *)sdev->host->hostdata;
77 
78 	if (vport->phba->cfg_fof)
79 		return ((struct lpfc_device_data *)sdev->hostdata)->rport_data;
80 	else
81 		return (struct lpfc_rport_data *)sdev->hostdata;
82 }
83 
84 static void
85 lpfc_release_scsi_buf_s4(struct lpfc_hba *phba, struct lpfc_io_buf *psb);
86 static void
87 lpfc_release_scsi_buf_s3(struct lpfc_hba *phba, struct lpfc_io_buf *psb);
88 static int
89 lpfc_prot_group_type(struct lpfc_hba *phba, struct scsi_cmnd *sc);
90 static void
91 lpfc_put_vmid_in_hashtable(struct lpfc_vport *vport, u32 hash,
92 			   struct lpfc_vmid *vmp);
93 static void lpfc_vmid_update_entry(struct lpfc_vport *vport, struct scsi_cmnd
94 				   *cmd, struct lpfc_vmid *vmp,
95 				   union lpfc_vmid_io_tag *tag);
96 static void lpfc_vmid_assign_cs_ctl(struct lpfc_vport *vport,
97 				    struct lpfc_vmid *vmid);
98 
99 /**
100  * lpfc_sli4_set_rsp_sgl_last - Set the last bit in the response sge.
101  * @phba: Pointer to HBA object.
102  * @lpfc_cmd: lpfc scsi command object pointer.
103  *
104  * This function is called from the lpfc_prep_task_mgmt_cmd function to
105  * set the last bit in the response sge entry.
106  **/
107 static void
108 lpfc_sli4_set_rsp_sgl_last(struct lpfc_hba *phba,
109 				struct lpfc_io_buf *lpfc_cmd)
110 {
111 	struct sli4_sge *sgl = (struct sli4_sge *)lpfc_cmd->dma_sgl;
112 	if (sgl) {
113 		sgl += 1;
114 		sgl->word2 = le32_to_cpu(sgl->word2);
115 		bf_set(lpfc_sli4_sge_last, sgl, 1);
116 		sgl->word2 = cpu_to_le32(sgl->word2);
117 	}
118 }
119 
120 #define LPFC_INVALID_REFTAG ((u32)-1)
121 
122 /**
123  * lpfc_update_stats - Update statistical data for the command completion
124  * @vport: The virtual port on which this call is executing.
125  * @lpfc_cmd: lpfc scsi command object pointer.
126  *
127  * This function is called when there is a command completion and this
128  * function updates the statistical data for the command completion.
129  **/
130 static void
131 lpfc_update_stats(struct lpfc_vport *vport, struct lpfc_io_buf *lpfc_cmd)
132 {
133 	struct lpfc_hba *phba = vport->phba;
134 	struct lpfc_rport_data *rdata;
135 	struct lpfc_nodelist *pnode;
136 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
137 	unsigned long flags;
138 	struct Scsi_Host *shost = lpfc_shost_from_vport(vport);
139 	unsigned long latency;
140 	int i;
141 
142 	if (!vport->stat_data_enabled ||
143 	    vport->stat_data_blocked ||
144 	    (cmd->result))
145 		return;
146 
147 	latency = jiffies_to_msecs((long)jiffies - (long)lpfc_cmd->start_time);
148 	rdata = lpfc_cmd->rdata;
149 	pnode = rdata->pnode;
150 
151 	spin_lock_irqsave(shost->host_lock, flags);
152 	if (!pnode ||
153 	    !pnode->lat_data ||
154 	    (phba->bucket_type == LPFC_NO_BUCKET)) {
155 		spin_unlock_irqrestore(shost->host_lock, flags);
156 		return;
157 	}
158 
159 	if (phba->bucket_type == LPFC_LINEAR_BUCKET) {
160 		i = (latency + phba->bucket_step - 1 - phba->bucket_base)/
161 			phba->bucket_step;
162 		/* check array subscript bounds */
163 		if (i < 0)
164 			i = 0;
165 		else if (i >= LPFC_MAX_BUCKET_COUNT)
166 			i = LPFC_MAX_BUCKET_COUNT - 1;
167 	} else {
168 		for (i = 0; i < LPFC_MAX_BUCKET_COUNT-1; i++)
169 			if (latency <= (phba->bucket_base +
170 				((1<<i)*phba->bucket_step)))
171 				break;
172 	}
173 
174 	pnode->lat_data[i].cmd_count++;
175 	spin_unlock_irqrestore(shost->host_lock, flags);
176 }
177 
178 /**
179  * lpfc_rampdown_queue_depth - Post RAMP_DOWN_QUEUE event to worker thread
180  * @phba: The Hba for which this call is being executed.
181  *
182  * This routine is called when there is resource error in driver or firmware.
183  * This routine posts WORKER_RAMP_DOWN_QUEUE event for @phba. This routine
184  * posts at most 1 event each second. This routine wakes up worker thread of
185  * @phba to process WORKER_RAM_DOWN_EVENT event.
186  *
187  * This routine should be called with no lock held.
188  **/
189 void
190 lpfc_rampdown_queue_depth(struct lpfc_hba *phba)
191 {
192 	unsigned long flags;
193 	uint32_t evt_posted;
194 	unsigned long expires;
195 
196 	spin_lock_irqsave(&phba->hbalock, flags);
197 	atomic_inc(&phba->num_rsrc_err);
198 	phba->last_rsrc_error_time = jiffies;
199 
200 	expires = phba->last_ramp_down_time + QUEUE_RAMP_DOWN_INTERVAL;
201 	if (time_after(expires, jiffies)) {
202 		spin_unlock_irqrestore(&phba->hbalock, flags);
203 		return;
204 	}
205 
206 	phba->last_ramp_down_time = jiffies;
207 
208 	spin_unlock_irqrestore(&phba->hbalock, flags);
209 
210 	spin_lock_irqsave(&phba->pport->work_port_lock, flags);
211 	evt_posted = phba->pport->work_port_events & WORKER_RAMP_DOWN_QUEUE;
212 	if (!evt_posted)
213 		phba->pport->work_port_events |= WORKER_RAMP_DOWN_QUEUE;
214 	spin_unlock_irqrestore(&phba->pport->work_port_lock, flags);
215 
216 	if (!evt_posted)
217 		lpfc_worker_wake_up(phba);
218 	return;
219 }
220 
221 /**
222  * lpfc_ramp_down_queue_handler - WORKER_RAMP_DOWN_QUEUE event handler
223  * @phba: The Hba for which this call is being executed.
224  *
225  * This routine is called to  process WORKER_RAMP_DOWN_QUEUE event for worker
226  * thread.This routine reduces queue depth for all scsi device on each vport
227  * associated with @phba.
228  **/
229 void
230 lpfc_ramp_down_queue_handler(struct lpfc_hba *phba)
231 {
232 	struct lpfc_vport **vports;
233 	struct Scsi_Host  *shost;
234 	struct scsi_device *sdev;
235 	unsigned long new_queue_depth;
236 	unsigned long num_rsrc_err, num_cmd_success;
237 	int i;
238 
239 	num_rsrc_err = atomic_read(&phba->num_rsrc_err);
240 	num_cmd_success = atomic_read(&phba->num_cmd_success);
241 
242 	/*
243 	 * The error and success command counters are global per
244 	 * driver instance.  If another handler has already
245 	 * operated on this error event, just exit.
246 	 */
247 	if (num_rsrc_err == 0)
248 		return;
249 
250 	vports = lpfc_create_vport_work_array(phba);
251 	if (vports != NULL)
252 		for (i = 0; i <= phba->max_vports && vports[i] != NULL; i++) {
253 			shost = lpfc_shost_from_vport(vports[i]);
254 			shost_for_each_device(sdev, shost) {
255 				new_queue_depth =
256 					sdev->queue_depth * num_rsrc_err /
257 					(num_rsrc_err + num_cmd_success);
258 				if (!new_queue_depth)
259 					new_queue_depth = sdev->queue_depth - 1;
260 				else
261 					new_queue_depth = sdev->queue_depth -
262 								new_queue_depth;
263 				scsi_change_queue_depth(sdev, new_queue_depth);
264 			}
265 		}
266 	lpfc_destroy_vport_work_array(phba, vports);
267 	atomic_set(&phba->num_rsrc_err, 0);
268 	atomic_set(&phba->num_cmd_success, 0);
269 }
270 
271 /**
272  * lpfc_scsi_dev_block - set all scsi hosts to block state
273  * @phba: Pointer to HBA context object.
274  *
275  * This function walks vport list and set each SCSI host to block state
276  * by invoking fc_remote_port_delete() routine. This function is invoked
277  * with EEH when device's PCI slot has been permanently disabled.
278  **/
279 void
280 lpfc_scsi_dev_block(struct lpfc_hba *phba)
281 {
282 	struct lpfc_vport **vports;
283 	struct Scsi_Host  *shost;
284 	struct scsi_device *sdev;
285 	struct fc_rport *rport;
286 	int i;
287 
288 	vports = lpfc_create_vport_work_array(phba);
289 	if (vports != NULL)
290 		for (i = 0; i <= phba->max_vports && vports[i] != NULL; i++) {
291 			shost = lpfc_shost_from_vport(vports[i]);
292 			shost_for_each_device(sdev, shost) {
293 				rport = starget_to_rport(scsi_target(sdev));
294 				fc_remote_port_delete(rport);
295 			}
296 		}
297 	lpfc_destroy_vport_work_array(phba, vports);
298 }
299 
300 /**
301  * lpfc_new_scsi_buf_s3 - Scsi buffer allocator for HBA with SLI3 IF spec
302  * @vport: The virtual port for which this call being executed.
303  * @num_to_alloc: The requested number of buffers to allocate.
304  *
305  * This routine allocates a scsi buffer for device with SLI-3 interface spec,
306  * the scsi buffer contains all the necessary information needed to initiate
307  * a SCSI I/O. The non-DMAable buffer region contains information to build
308  * the IOCB. The DMAable region contains memory for the FCP CMND, FCP RSP,
309  * and the initial BPL. In addition to allocating memory, the FCP CMND and
310  * FCP RSP BDEs are setup in the BPL and the BPL BDE is setup in the IOCB.
311  *
312  * Return codes:
313  *   int - number of scsi buffers that were allocated.
314  *   0 = failure, less than num_to_alloc is a partial failure.
315  **/
316 static int
317 lpfc_new_scsi_buf_s3(struct lpfc_vport *vport, int num_to_alloc)
318 {
319 	struct lpfc_hba *phba = vport->phba;
320 	struct lpfc_io_buf *psb;
321 	struct ulp_bde64 *bpl;
322 	IOCB_t *iocb;
323 	dma_addr_t pdma_phys_fcp_cmd;
324 	dma_addr_t pdma_phys_fcp_rsp;
325 	dma_addr_t pdma_phys_sgl;
326 	uint16_t iotag;
327 	int bcnt, bpl_size;
328 
329 	bpl_size = phba->cfg_sg_dma_buf_size -
330 		(sizeof(struct fcp_cmnd) + sizeof(struct fcp_rsp));
331 
332 	lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
333 			 "9067 ALLOC %d scsi_bufs: %d (%d + %d + %d)\n",
334 			 num_to_alloc, phba->cfg_sg_dma_buf_size,
335 			 (int)sizeof(struct fcp_cmnd),
336 			 (int)sizeof(struct fcp_rsp), bpl_size);
337 
338 	for (bcnt = 0; bcnt < num_to_alloc; bcnt++) {
339 		psb = kzalloc(sizeof(struct lpfc_io_buf), GFP_KERNEL);
340 		if (!psb)
341 			break;
342 
343 		/*
344 		 * Get memory from the pci pool to map the virt space to pci
345 		 * bus space for an I/O.  The DMA buffer includes space for the
346 		 * struct fcp_cmnd, struct fcp_rsp and the number of bde's
347 		 * necessary to support the sg_tablesize.
348 		 */
349 		psb->data = dma_pool_zalloc(phba->lpfc_sg_dma_buf_pool,
350 					GFP_KERNEL, &psb->dma_handle);
351 		if (!psb->data) {
352 			kfree(psb);
353 			break;
354 		}
355 
356 
357 		/* Allocate iotag for psb->cur_iocbq. */
358 		iotag = lpfc_sli_next_iotag(phba, &psb->cur_iocbq);
359 		if (iotag == 0) {
360 			dma_pool_free(phba->lpfc_sg_dma_buf_pool,
361 				      psb->data, psb->dma_handle);
362 			kfree(psb);
363 			break;
364 		}
365 		psb->cur_iocbq.iocb_flag |= LPFC_IO_FCP;
366 
367 		psb->fcp_cmnd = psb->data;
368 		psb->fcp_rsp = psb->data + sizeof(struct fcp_cmnd);
369 		psb->dma_sgl = psb->data + sizeof(struct fcp_cmnd) +
370 			sizeof(struct fcp_rsp);
371 
372 		/* Initialize local short-hand pointers. */
373 		bpl = (struct ulp_bde64 *)psb->dma_sgl;
374 		pdma_phys_fcp_cmd = psb->dma_handle;
375 		pdma_phys_fcp_rsp = psb->dma_handle + sizeof(struct fcp_cmnd);
376 		pdma_phys_sgl = psb->dma_handle + sizeof(struct fcp_cmnd) +
377 			sizeof(struct fcp_rsp);
378 
379 		/*
380 		 * The first two bdes are the FCP_CMD and FCP_RSP. The balance
381 		 * are sg list bdes.  Initialize the first two and leave the
382 		 * rest for queuecommand.
383 		 */
384 		bpl[0].addrHigh = le32_to_cpu(putPaddrHigh(pdma_phys_fcp_cmd));
385 		bpl[0].addrLow = le32_to_cpu(putPaddrLow(pdma_phys_fcp_cmd));
386 		bpl[0].tus.f.bdeSize = sizeof(struct fcp_cmnd);
387 		bpl[0].tus.f.bdeFlags = BUFF_TYPE_BDE_64;
388 		bpl[0].tus.w = le32_to_cpu(bpl[0].tus.w);
389 
390 		/* Setup the physical region for the FCP RSP */
391 		bpl[1].addrHigh = le32_to_cpu(putPaddrHigh(pdma_phys_fcp_rsp));
392 		bpl[1].addrLow = le32_to_cpu(putPaddrLow(pdma_phys_fcp_rsp));
393 		bpl[1].tus.f.bdeSize = sizeof(struct fcp_rsp);
394 		bpl[1].tus.f.bdeFlags = BUFF_TYPE_BDE_64;
395 		bpl[1].tus.w = le32_to_cpu(bpl[1].tus.w);
396 
397 		/*
398 		 * Since the IOCB for the FCP I/O is built into this
399 		 * lpfc_scsi_buf, initialize it with all known data now.
400 		 */
401 		iocb = &psb->cur_iocbq.iocb;
402 		iocb->un.fcpi64.bdl.ulpIoTag32 = 0;
403 		if ((phba->sli_rev == 3) &&
404 				!(phba->sli3_options & LPFC_SLI3_BG_ENABLED)) {
405 			/* fill in immediate fcp command BDE */
406 			iocb->un.fcpi64.bdl.bdeFlags = BUFF_TYPE_BDE_IMMED;
407 			iocb->un.fcpi64.bdl.bdeSize = sizeof(struct fcp_cmnd);
408 			iocb->un.fcpi64.bdl.addrLow = offsetof(IOCB_t,
409 					unsli3.fcp_ext.icd);
410 			iocb->un.fcpi64.bdl.addrHigh = 0;
411 			iocb->ulpBdeCount = 0;
412 			iocb->ulpLe = 0;
413 			/* fill in response BDE */
414 			iocb->unsli3.fcp_ext.rbde.tus.f.bdeFlags =
415 							BUFF_TYPE_BDE_64;
416 			iocb->unsli3.fcp_ext.rbde.tus.f.bdeSize =
417 				sizeof(struct fcp_rsp);
418 			iocb->unsli3.fcp_ext.rbde.addrLow =
419 				putPaddrLow(pdma_phys_fcp_rsp);
420 			iocb->unsli3.fcp_ext.rbde.addrHigh =
421 				putPaddrHigh(pdma_phys_fcp_rsp);
422 		} else {
423 			iocb->un.fcpi64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
424 			iocb->un.fcpi64.bdl.bdeSize =
425 					(2 * sizeof(struct ulp_bde64));
426 			iocb->un.fcpi64.bdl.addrLow =
427 					putPaddrLow(pdma_phys_sgl);
428 			iocb->un.fcpi64.bdl.addrHigh =
429 					putPaddrHigh(pdma_phys_sgl);
430 			iocb->ulpBdeCount = 1;
431 			iocb->ulpLe = 1;
432 		}
433 		iocb->ulpClass = CLASS3;
434 		psb->status = IOSTAT_SUCCESS;
435 		/* Put it back into the SCSI buffer list */
436 		psb->cur_iocbq.context1  = psb;
437 		spin_lock_init(&psb->buf_lock);
438 		lpfc_release_scsi_buf_s3(phba, psb);
439 
440 	}
441 
442 	return bcnt;
443 }
444 
445 /**
446  * lpfc_sli4_vport_delete_fcp_xri_aborted -Remove all ndlp references for vport
447  * @vport: pointer to lpfc vport data structure.
448  *
449  * This routine is invoked by the vport cleanup for deletions and the cleanup
450  * for an ndlp on removal.
451  **/
452 void
453 lpfc_sli4_vport_delete_fcp_xri_aborted(struct lpfc_vport *vport)
454 {
455 	struct lpfc_hba *phba = vport->phba;
456 	struct lpfc_io_buf *psb, *next_psb;
457 	struct lpfc_sli4_hdw_queue *qp;
458 	unsigned long iflag = 0;
459 	int idx;
460 
461 	if (!(vport->cfg_enable_fc4_type & LPFC_ENABLE_FCP))
462 		return;
463 
464 	spin_lock_irqsave(&phba->hbalock, iflag);
465 	for (idx = 0; idx < phba->cfg_hdw_queue; idx++) {
466 		qp = &phba->sli4_hba.hdwq[idx];
467 
468 		spin_lock(&qp->abts_io_buf_list_lock);
469 		list_for_each_entry_safe(psb, next_psb,
470 					 &qp->lpfc_abts_io_buf_list, list) {
471 			if (psb->cur_iocbq.iocb_flag & LPFC_IO_NVME)
472 				continue;
473 
474 			if (psb->rdata && psb->rdata->pnode &&
475 			    psb->rdata->pnode->vport == vport)
476 				psb->rdata = NULL;
477 		}
478 		spin_unlock(&qp->abts_io_buf_list_lock);
479 	}
480 	spin_unlock_irqrestore(&phba->hbalock, iflag);
481 }
482 
483 /**
484  * lpfc_sli4_io_xri_aborted - Fast-path process of fcp xri abort
485  * @phba: pointer to lpfc hba data structure.
486  * @axri: pointer to the fcp xri abort wcqe structure.
487  * @idx: index into hdwq
488  *
489  * This routine is invoked by the worker thread to process a SLI4 fast-path
490  * FCP or NVME aborted xri.
491  **/
492 void
493 lpfc_sli4_io_xri_aborted(struct lpfc_hba *phba,
494 			 struct sli4_wcqe_xri_aborted *axri, int idx)
495 {
496 	u16 xri = 0;
497 	u16 rxid = 0;
498 	struct lpfc_io_buf *psb, *next_psb;
499 	struct lpfc_sli4_hdw_queue *qp;
500 	unsigned long iflag = 0;
501 	struct lpfc_iocbq *iocbq;
502 	int i;
503 	struct lpfc_nodelist *ndlp;
504 	int rrq_empty = 0;
505 	struct lpfc_sli_ring *pring = phba->sli4_hba.els_wq->pring;
506 	struct scsi_cmnd *cmd;
507 	int offline = 0;
508 
509 	if (!(phba->cfg_enable_fc4_type & LPFC_ENABLE_FCP))
510 		return;
511 	offline = pci_channel_offline(phba->pcidev);
512 	if (!offline) {
513 		xri = bf_get(lpfc_wcqe_xa_xri, axri);
514 		rxid = bf_get(lpfc_wcqe_xa_remote_xid, axri);
515 	}
516 	qp = &phba->sli4_hba.hdwq[idx];
517 	spin_lock_irqsave(&phba->hbalock, iflag);
518 	spin_lock(&qp->abts_io_buf_list_lock);
519 	list_for_each_entry_safe(psb, next_psb,
520 		&qp->lpfc_abts_io_buf_list, list) {
521 		if (offline)
522 			xri = psb->cur_iocbq.sli4_xritag;
523 		if (psb->cur_iocbq.sli4_xritag == xri) {
524 			list_del_init(&psb->list);
525 			psb->flags &= ~LPFC_SBUF_XBUSY;
526 			psb->status = IOSTAT_SUCCESS;
527 			if (psb->cur_iocbq.iocb_flag & LPFC_IO_NVME) {
528 				qp->abts_nvme_io_bufs--;
529 				spin_unlock(&qp->abts_io_buf_list_lock);
530 				spin_unlock_irqrestore(&phba->hbalock, iflag);
531 				if (!offline) {
532 					lpfc_sli4_nvme_xri_aborted(phba, axri,
533 								   psb);
534 					return;
535 				}
536 				lpfc_sli4_nvme_pci_offline_aborted(phba, psb);
537 				spin_lock_irqsave(&phba->hbalock, iflag);
538 				spin_lock(&qp->abts_io_buf_list_lock);
539 				continue;
540 			}
541 			qp->abts_scsi_io_bufs--;
542 			spin_unlock(&qp->abts_io_buf_list_lock);
543 
544 			if (psb->rdata && psb->rdata->pnode)
545 				ndlp = psb->rdata->pnode;
546 			else
547 				ndlp = NULL;
548 
549 			rrq_empty = list_empty(&phba->active_rrq_list);
550 			spin_unlock_irqrestore(&phba->hbalock, iflag);
551 			if (ndlp && !offline) {
552 				lpfc_set_rrq_active(phba, ndlp,
553 					psb->cur_iocbq.sli4_lxritag, rxid, 1);
554 				lpfc_sli4_abts_err_handler(phba, ndlp, axri);
555 			}
556 
557 			if (phba->cfg_fcp_wait_abts_rsp || offline) {
558 				spin_lock_irqsave(&psb->buf_lock, iflag);
559 				cmd = psb->pCmd;
560 				psb->pCmd = NULL;
561 				spin_unlock_irqrestore(&psb->buf_lock, iflag);
562 
563 				/* The sdev is not guaranteed to be valid post
564 				 * scsi_done upcall.
565 				 */
566 				if (cmd)
567 					scsi_done(cmd);
568 
569 				/*
570 				 * We expect there is an abort thread waiting
571 				 * for command completion wake up the thread.
572 				 */
573 				spin_lock_irqsave(&psb->buf_lock, iflag);
574 				psb->cur_iocbq.iocb_flag &=
575 					~LPFC_DRIVER_ABORTED;
576 				if (psb->waitq)
577 					wake_up(psb->waitq);
578 				spin_unlock_irqrestore(&psb->buf_lock, iflag);
579 			}
580 
581 			lpfc_release_scsi_buf_s4(phba, psb);
582 			if (rrq_empty)
583 				lpfc_worker_wake_up(phba);
584 			if (!offline)
585 				return;
586 			spin_lock_irqsave(&phba->hbalock, iflag);
587 			spin_lock(&qp->abts_io_buf_list_lock);
588 			continue;
589 		}
590 	}
591 	spin_unlock(&qp->abts_io_buf_list_lock);
592 	if (!offline) {
593 		for (i = 1; i <= phba->sli.last_iotag; i++) {
594 			iocbq = phba->sli.iocbq_lookup[i];
595 
596 			if (!(iocbq->iocb_flag & LPFC_IO_FCP) ||
597 			    (iocbq->iocb_flag & LPFC_IO_LIBDFC))
598 				continue;
599 			if (iocbq->sli4_xritag != xri)
600 				continue;
601 			psb = container_of(iocbq, struct lpfc_io_buf, cur_iocbq);
602 			psb->flags &= ~LPFC_SBUF_XBUSY;
603 			spin_unlock_irqrestore(&phba->hbalock, iflag);
604 			if (!list_empty(&pring->txq))
605 				lpfc_worker_wake_up(phba);
606 			return;
607 		}
608 	}
609 	spin_unlock_irqrestore(&phba->hbalock, iflag);
610 }
611 
612 /**
613  * lpfc_get_scsi_buf_s3 - Get a scsi buffer from lpfc_scsi_buf_list of the HBA
614  * @phba: The HBA for which this call is being executed.
615  * @ndlp: pointer to a node-list data structure.
616  * @cmnd: Pointer to scsi_cmnd data structure.
617  *
618  * This routine removes a scsi buffer from head of @phba lpfc_scsi_buf_list list
619  * and returns to caller.
620  *
621  * Return codes:
622  *   NULL - Error
623  *   Pointer to lpfc_scsi_buf - Success
624  **/
625 static struct lpfc_io_buf *
626 lpfc_get_scsi_buf_s3(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp,
627 		     struct scsi_cmnd *cmnd)
628 {
629 	struct lpfc_io_buf *lpfc_cmd = NULL;
630 	struct list_head *scsi_buf_list_get = &phba->lpfc_scsi_buf_list_get;
631 	unsigned long iflag = 0;
632 
633 	spin_lock_irqsave(&phba->scsi_buf_list_get_lock, iflag);
634 	list_remove_head(scsi_buf_list_get, lpfc_cmd, struct lpfc_io_buf,
635 			 list);
636 	if (!lpfc_cmd) {
637 		spin_lock(&phba->scsi_buf_list_put_lock);
638 		list_splice(&phba->lpfc_scsi_buf_list_put,
639 			    &phba->lpfc_scsi_buf_list_get);
640 		INIT_LIST_HEAD(&phba->lpfc_scsi_buf_list_put);
641 		list_remove_head(scsi_buf_list_get, lpfc_cmd,
642 				 struct lpfc_io_buf, list);
643 		spin_unlock(&phba->scsi_buf_list_put_lock);
644 	}
645 	spin_unlock_irqrestore(&phba->scsi_buf_list_get_lock, iflag);
646 
647 	if (lpfc_ndlp_check_qdepth(phba, ndlp) && lpfc_cmd) {
648 		atomic_inc(&ndlp->cmd_pending);
649 		lpfc_cmd->flags |= LPFC_SBUF_BUMP_QDEPTH;
650 	}
651 	return  lpfc_cmd;
652 }
653 /**
654  * lpfc_get_scsi_buf_s4 - Get a scsi buffer from io_buf_list of the HBA
655  * @phba: The HBA for which this call is being executed.
656  * @ndlp: pointer to a node-list data structure.
657  * @cmnd: Pointer to scsi_cmnd data structure.
658  *
659  * This routine removes a scsi buffer from head of @hdwq io_buf_list
660  * and returns to caller.
661  *
662  * Return codes:
663  *   NULL - Error
664  *   Pointer to lpfc_scsi_buf - Success
665  **/
666 static struct lpfc_io_buf *
667 lpfc_get_scsi_buf_s4(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp,
668 		     struct scsi_cmnd *cmnd)
669 {
670 	struct lpfc_io_buf *lpfc_cmd;
671 	struct lpfc_sli4_hdw_queue *qp;
672 	struct sli4_sge *sgl;
673 	dma_addr_t pdma_phys_fcp_rsp;
674 	dma_addr_t pdma_phys_fcp_cmd;
675 	uint32_t cpu, idx;
676 	int tag;
677 	struct fcp_cmd_rsp_buf *tmp = NULL;
678 
679 	cpu = raw_smp_processor_id();
680 	if (cmnd && phba->cfg_fcp_io_sched == LPFC_FCP_SCHED_BY_HDWQ) {
681 		tag = blk_mq_unique_tag(scsi_cmd_to_rq(cmnd));
682 		idx = blk_mq_unique_tag_to_hwq(tag);
683 	} else {
684 		idx = phba->sli4_hba.cpu_map[cpu].hdwq;
685 	}
686 
687 	lpfc_cmd = lpfc_get_io_buf(phba, ndlp, idx,
688 				   !phba->cfg_xri_rebalancing);
689 	if (!lpfc_cmd) {
690 		qp = &phba->sli4_hba.hdwq[idx];
691 		qp->empty_io_bufs++;
692 		return NULL;
693 	}
694 
695 	/* Setup key fields in buffer that may have been changed
696 	 * if other protocols used this buffer.
697 	 */
698 	lpfc_cmd->cur_iocbq.iocb_flag = LPFC_IO_FCP;
699 	lpfc_cmd->prot_seg_cnt = 0;
700 	lpfc_cmd->seg_cnt = 0;
701 	lpfc_cmd->timeout = 0;
702 	lpfc_cmd->flags = 0;
703 	lpfc_cmd->start_time = jiffies;
704 	lpfc_cmd->waitq = NULL;
705 	lpfc_cmd->cpu = cpu;
706 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
707 	lpfc_cmd->prot_data_type = 0;
708 #endif
709 	tmp = lpfc_get_cmd_rsp_buf_per_hdwq(phba, lpfc_cmd);
710 	if (!tmp) {
711 		lpfc_release_io_buf(phba, lpfc_cmd, lpfc_cmd->hdwq);
712 		return NULL;
713 	}
714 
715 	lpfc_cmd->fcp_cmnd = tmp->fcp_cmnd;
716 	lpfc_cmd->fcp_rsp = tmp->fcp_rsp;
717 
718 	/*
719 	 * The first two SGEs are the FCP_CMD and FCP_RSP.
720 	 * The balance are sg list bdes. Initialize the
721 	 * first two and leave the rest for queuecommand.
722 	 */
723 	sgl = (struct sli4_sge *)lpfc_cmd->dma_sgl;
724 	pdma_phys_fcp_cmd = tmp->fcp_cmd_rsp_dma_handle;
725 	sgl->addr_hi = cpu_to_le32(putPaddrHigh(pdma_phys_fcp_cmd));
726 	sgl->addr_lo = cpu_to_le32(putPaddrLow(pdma_phys_fcp_cmd));
727 	sgl->word2 = le32_to_cpu(sgl->word2);
728 	bf_set(lpfc_sli4_sge_last, sgl, 0);
729 	sgl->word2 = cpu_to_le32(sgl->word2);
730 	sgl->sge_len = cpu_to_le32(sizeof(struct fcp_cmnd));
731 	sgl++;
732 
733 	/* Setup the physical region for the FCP RSP */
734 	pdma_phys_fcp_rsp = pdma_phys_fcp_cmd + sizeof(struct fcp_cmnd);
735 	sgl->addr_hi = cpu_to_le32(putPaddrHigh(pdma_phys_fcp_rsp));
736 	sgl->addr_lo = cpu_to_le32(putPaddrLow(pdma_phys_fcp_rsp));
737 	sgl->word2 = le32_to_cpu(sgl->word2);
738 	bf_set(lpfc_sli4_sge_last, sgl, 1);
739 	sgl->word2 = cpu_to_le32(sgl->word2);
740 	sgl->sge_len = cpu_to_le32(sizeof(struct fcp_rsp));
741 
742 	if (lpfc_ndlp_check_qdepth(phba, ndlp)) {
743 		atomic_inc(&ndlp->cmd_pending);
744 		lpfc_cmd->flags |= LPFC_SBUF_BUMP_QDEPTH;
745 	}
746 	return  lpfc_cmd;
747 }
748 /**
749  * lpfc_get_scsi_buf - Get a scsi buffer from lpfc_scsi_buf_list of the HBA
750  * @phba: The HBA for which this call is being executed.
751  * @ndlp: pointer to a node-list data structure.
752  * @cmnd: Pointer to scsi_cmnd data structure.
753  *
754  * This routine removes a scsi buffer from head of @phba lpfc_scsi_buf_list list
755  * and returns to caller.
756  *
757  * Return codes:
758  *   NULL - Error
759  *   Pointer to lpfc_scsi_buf - Success
760  **/
761 static struct lpfc_io_buf*
762 lpfc_get_scsi_buf(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp,
763 		  struct scsi_cmnd *cmnd)
764 {
765 	return  phba->lpfc_get_scsi_buf(phba, ndlp, cmnd);
766 }
767 
768 /**
769  * lpfc_release_scsi_buf_s3 - Return a scsi buffer back to hba scsi buf list
770  * @phba: The Hba for which this call is being executed.
771  * @psb: The scsi buffer which is being released.
772  *
773  * This routine releases @psb scsi buffer by adding it to tail of @phba
774  * lpfc_scsi_buf_list list.
775  **/
776 static void
777 lpfc_release_scsi_buf_s3(struct lpfc_hba *phba, struct lpfc_io_buf *psb)
778 {
779 	unsigned long iflag = 0;
780 
781 	psb->seg_cnt = 0;
782 	psb->prot_seg_cnt = 0;
783 
784 	spin_lock_irqsave(&phba->scsi_buf_list_put_lock, iflag);
785 	psb->pCmd = NULL;
786 	psb->cur_iocbq.iocb_flag = LPFC_IO_FCP;
787 	list_add_tail(&psb->list, &phba->lpfc_scsi_buf_list_put);
788 	spin_unlock_irqrestore(&phba->scsi_buf_list_put_lock, iflag);
789 }
790 
791 /**
792  * lpfc_release_scsi_buf_s4: Return a scsi buffer back to hba scsi buf list.
793  * @phba: The Hba for which this call is being executed.
794  * @psb: The scsi buffer which is being released.
795  *
796  * This routine releases @psb scsi buffer by adding it to tail of @hdwq
797  * io_buf_list list. For SLI4 XRI's are tied to the scsi buffer
798  * and cannot be reused for at least RA_TOV amount of time if it was
799  * aborted.
800  **/
801 static void
802 lpfc_release_scsi_buf_s4(struct lpfc_hba *phba, struct lpfc_io_buf *psb)
803 {
804 	struct lpfc_sli4_hdw_queue *qp;
805 	unsigned long iflag = 0;
806 
807 	psb->seg_cnt = 0;
808 	psb->prot_seg_cnt = 0;
809 
810 	qp = psb->hdwq;
811 	if (psb->flags & LPFC_SBUF_XBUSY) {
812 		spin_lock_irqsave(&qp->abts_io_buf_list_lock, iflag);
813 		if (!phba->cfg_fcp_wait_abts_rsp)
814 			psb->pCmd = NULL;
815 		list_add_tail(&psb->list, &qp->lpfc_abts_io_buf_list);
816 		qp->abts_scsi_io_bufs++;
817 		spin_unlock_irqrestore(&qp->abts_io_buf_list_lock, iflag);
818 	} else {
819 		lpfc_release_io_buf(phba, (struct lpfc_io_buf *)psb, qp);
820 	}
821 }
822 
823 /**
824  * lpfc_release_scsi_buf: Return a scsi buffer back to hba scsi buf list.
825  * @phba: The Hba for which this call is being executed.
826  * @psb: The scsi buffer which is being released.
827  *
828  * This routine releases @psb scsi buffer by adding it to tail of @phba
829  * lpfc_scsi_buf_list list.
830  **/
831 static void
832 lpfc_release_scsi_buf(struct lpfc_hba *phba, struct lpfc_io_buf *psb)
833 {
834 	if ((psb->flags & LPFC_SBUF_BUMP_QDEPTH) && psb->ndlp)
835 		atomic_dec(&psb->ndlp->cmd_pending);
836 
837 	psb->flags &= ~LPFC_SBUF_BUMP_QDEPTH;
838 	phba->lpfc_release_scsi_buf(phba, psb);
839 }
840 
841 /**
842  * lpfc_fcpcmd_to_iocb - copy the fcp_cmd data into the IOCB
843  * @data: A pointer to the immediate command data portion of the IOCB.
844  * @fcp_cmnd: The FCP Command that is provided by the SCSI layer.
845  *
846  * The routine copies the entire FCP command from @fcp_cmnd to @data while
847  * byte swapping the data to big endian format for transmission on the wire.
848  **/
849 static void
850 lpfc_fcpcmd_to_iocb(u8 *data, struct fcp_cmnd *fcp_cmnd)
851 {
852 	int i, j;
853 
854 	for (i = 0, j = 0; i < sizeof(struct fcp_cmnd);
855 	     i += sizeof(uint32_t), j++) {
856 		((uint32_t *)data)[j] = cpu_to_be32(((uint32_t *)fcp_cmnd)[j]);
857 	}
858 }
859 
860 /**
861  * lpfc_scsi_prep_dma_buf_s3 - DMA mapping for scsi buffer to SLI3 IF spec
862  * @phba: The Hba for which this call is being executed.
863  * @lpfc_cmd: The scsi buffer which is going to be mapped.
864  *
865  * This routine does the pci dma mapping for scatter-gather list of scsi cmnd
866  * field of @lpfc_cmd for device with SLI-3 interface spec. This routine scans
867  * through sg elements and format the bde. This routine also initializes all
868  * IOCB fields which are dependent on scsi command request buffer.
869  *
870  * Return codes:
871  *   1 - Error
872  *   0 - Success
873  **/
874 static int
875 lpfc_scsi_prep_dma_buf_s3(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd)
876 {
877 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
878 	struct scatterlist *sgel = NULL;
879 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
880 	struct ulp_bde64 *bpl = (struct ulp_bde64 *)lpfc_cmd->dma_sgl;
881 	struct lpfc_iocbq *iocbq = &lpfc_cmd->cur_iocbq;
882 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
883 	struct ulp_bde64 *data_bde = iocb_cmd->unsli3.fcp_ext.dbde;
884 	dma_addr_t physaddr;
885 	uint32_t num_bde = 0;
886 	int nseg, datadir = scsi_cmnd->sc_data_direction;
887 
888 	/*
889 	 * There are three possibilities here - use scatter-gather segment, use
890 	 * the single mapping, or neither.  Start the lpfc command prep by
891 	 * bumping the bpl beyond the fcp_cmnd and fcp_rsp regions to the first
892 	 * data bde entry.
893 	 */
894 	bpl += 2;
895 	if (scsi_sg_count(scsi_cmnd)) {
896 		/*
897 		 * The driver stores the segment count returned from dma_map_sg
898 		 * because this a count of dma-mappings used to map the use_sg
899 		 * pages.  They are not guaranteed to be the same for those
900 		 * architectures that implement an IOMMU.
901 		 */
902 
903 		nseg = dma_map_sg(&phba->pcidev->dev, scsi_sglist(scsi_cmnd),
904 				  scsi_sg_count(scsi_cmnd), datadir);
905 		if (unlikely(!nseg))
906 			return 1;
907 
908 		lpfc_cmd->seg_cnt = nseg;
909 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt) {
910 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
911 					"9064 BLKGRD: %s: Too many sg segments"
912 					" from dma_map_sg.  Config %d, seg_cnt"
913 					" %d\n", __func__, phba->cfg_sg_seg_cnt,
914 					lpfc_cmd->seg_cnt);
915 			WARN_ON_ONCE(lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt);
916 			lpfc_cmd->seg_cnt = 0;
917 			scsi_dma_unmap(scsi_cmnd);
918 			return 2;
919 		}
920 
921 		/*
922 		 * The driver established a maximum scatter-gather segment count
923 		 * during probe that limits the number of sg elements in any
924 		 * single scsi command.  Just run through the seg_cnt and format
925 		 * the bde's.
926 		 * When using SLI-3 the driver will try to fit all the BDEs into
927 		 * the IOCB. If it can't then the BDEs get added to a BPL as it
928 		 * does for SLI-2 mode.
929 		 */
930 		scsi_for_each_sg(scsi_cmnd, sgel, nseg, num_bde) {
931 			physaddr = sg_dma_address(sgel);
932 			if (phba->sli_rev == 3 &&
933 			    !(phba->sli3_options & LPFC_SLI3_BG_ENABLED) &&
934 			    !(iocbq->iocb_flag & DSS_SECURITY_OP) &&
935 			    nseg <= LPFC_EXT_DATA_BDE_COUNT) {
936 				data_bde->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
937 				data_bde->tus.f.bdeSize = sg_dma_len(sgel);
938 				data_bde->addrLow = putPaddrLow(physaddr);
939 				data_bde->addrHigh = putPaddrHigh(physaddr);
940 				data_bde++;
941 			} else {
942 				bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
943 				bpl->tus.f.bdeSize = sg_dma_len(sgel);
944 				bpl->tus.w = le32_to_cpu(bpl->tus.w);
945 				bpl->addrLow =
946 					le32_to_cpu(putPaddrLow(physaddr));
947 				bpl->addrHigh =
948 					le32_to_cpu(putPaddrHigh(physaddr));
949 				bpl++;
950 			}
951 		}
952 	}
953 
954 	/*
955 	 * Finish initializing those IOCB fields that are dependent on the
956 	 * scsi_cmnd request_buffer.  Note that for SLI-2 the bdeSize is
957 	 * explicitly reinitialized and for SLI-3 the extended bde count is
958 	 * explicitly reinitialized since all iocb memory resources are reused.
959 	 */
960 	if (phba->sli_rev == 3 &&
961 	    !(phba->sli3_options & LPFC_SLI3_BG_ENABLED) &&
962 	    !(iocbq->iocb_flag & DSS_SECURITY_OP)) {
963 		if (num_bde > LPFC_EXT_DATA_BDE_COUNT) {
964 			/*
965 			 * The extended IOCB format can only fit 3 BDE or a BPL.
966 			 * This I/O has more than 3 BDE so the 1st data bde will
967 			 * be a BPL that is filled in here.
968 			 */
969 			physaddr = lpfc_cmd->dma_handle;
970 			data_bde->tus.f.bdeFlags = BUFF_TYPE_BLP_64;
971 			data_bde->tus.f.bdeSize = (num_bde *
972 						   sizeof(struct ulp_bde64));
973 			physaddr += (sizeof(struct fcp_cmnd) +
974 				     sizeof(struct fcp_rsp) +
975 				     (2 * sizeof(struct ulp_bde64)));
976 			data_bde->addrHigh = putPaddrHigh(physaddr);
977 			data_bde->addrLow = putPaddrLow(physaddr);
978 			/* ebde count includes the response bde and data bpl */
979 			iocb_cmd->unsli3.fcp_ext.ebde_count = 2;
980 		} else {
981 			/* ebde count includes the response bde and data bdes */
982 			iocb_cmd->unsli3.fcp_ext.ebde_count = (num_bde + 1);
983 		}
984 	} else {
985 		iocb_cmd->un.fcpi64.bdl.bdeSize =
986 			((num_bde + 2) * sizeof(struct ulp_bde64));
987 		iocb_cmd->unsli3.fcp_ext.ebde_count = (num_bde + 1);
988 	}
989 	fcp_cmnd->fcpDl = cpu_to_be32(scsi_bufflen(scsi_cmnd));
990 
991 	/*
992 	 * Due to difference in data length between DIF/non-DIF paths,
993 	 * we need to set word 4 of IOCB here
994 	 */
995 	iocb_cmd->un.fcpi.fcpi_parm = scsi_bufflen(scsi_cmnd);
996 	lpfc_fcpcmd_to_iocb(iocb_cmd->unsli3.fcp_ext.icd, fcp_cmnd);
997 	return 0;
998 }
999 
1000 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1001 
1002 /* Return BG_ERR_INIT if error injection is detected by Initiator */
1003 #define BG_ERR_INIT	0x1
1004 /* Return BG_ERR_TGT if error injection is detected by Target */
1005 #define BG_ERR_TGT	0x2
1006 /* Return BG_ERR_SWAP if swapping CSUM<-->CRC is required for error injection */
1007 #define BG_ERR_SWAP	0x10
1008 /*
1009  * Return BG_ERR_CHECK if disabling Guard/Ref/App checking is required for
1010  * error injection
1011  */
1012 #define BG_ERR_CHECK	0x20
1013 
1014 /**
1015  * lpfc_bg_err_inject - Determine if we should inject an error
1016  * @phba: The Hba for which this call is being executed.
1017  * @sc: The SCSI command to examine
1018  * @reftag: (out) BlockGuard reference tag for transmitted data
1019  * @apptag: (out) BlockGuard application tag for transmitted data
1020  * @new_guard: (in) Value to replace CRC with if needed
1021  *
1022  * Returns BG_ERR_* bit mask or 0 if request ignored
1023  **/
1024 static int
1025 lpfc_bg_err_inject(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1026 		uint32_t *reftag, uint16_t *apptag, uint32_t new_guard)
1027 {
1028 	struct scatterlist *sgpe; /* s/g prot entry */
1029 	struct lpfc_io_buf *lpfc_cmd = NULL;
1030 	struct scsi_dif_tuple *src = NULL;
1031 	struct lpfc_nodelist *ndlp;
1032 	struct lpfc_rport_data *rdata;
1033 	uint32_t op = scsi_get_prot_op(sc);
1034 	uint32_t blksize;
1035 	uint32_t numblks;
1036 	u32 lba;
1037 	int rc = 0;
1038 	int blockoff = 0;
1039 
1040 	if (op == SCSI_PROT_NORMAL)
1041 		return 0;
1042 
1043 	sgpe = scsi_prot_sglist(sc);
1044 	lba = scsi_prot_ref_tag(sc);
1045 	if (lba == LPFC_INVALID_REFTAG)
1046 		return 0;
1047 
1048 	/* First check if we need to match the LBA */
1049 	if (phba->lpfc_injerr_lba != LPFC_INJERR_LBA_OFF) {
1050 		blksize = scsi_prot_interval(sc);
1051 		numblks = (scsi_bufflen(sc) + blksize - 1) / blksize;
1052 
1053 		/* Make sure we have the right LBA if one is specified */
1054 		if (phba->lpfc_injerr_lba < (u64)lba ||
1055 		    (phba->lpfc_injerr_lba >= (u64)(lba + numblks)))
1056 			return 0;
1057 		if (sgpe) {
1058 			blockoff = phba->lpfc_injerr_lba - (u64)lba;
1059 			numblks = sg_dma_len(sgpe) /
1060 				sizeof(struct scsi_dif_tuple);
1061 			if (numblks < blockoff)
1062 				blockoff = numblks;
1063 		}
1064 	}
1065 
1066 	/* Next check if we need to match the remote NPortID or WWPN */
1067 	rdata = lpfc_rport_data_from_scsi_device(sc->device);
1068 	if (rdata && rdata->pnode) {
1069 		ndlp = rdata->pnode;
1070 
1071 		/* Make sure we have the right NPortID if one is specified */
1072 		if (phba->lpfc_injerr_nportid  &&
1073 			(phba->lpfc_injerr_nportid != ndlp->nlp_DID))
1074 			return 0;
1075 
1076 		/*
1077 		 * Make sure we have the right WWPN if one is specified.
1078 		 * wwn[0] should be a non-zero NAA in a good WWPN.
1079 		 */
1080 		if (phba->lpfc_injerr_wwpn.u.wwn[0]  &&
1081 			(memcmp(&ndlp->nlp_portname, &phba->lpfc_injerr_wwpn,
1082 				sizeof(struct lpfc_name)) != 0))
1083 			return 0;
1084 	}
1085 
1086 	/* Setup a ptr to the protection data if the SCSI host provides it */
1087 	if (sgpe) {
1088 		src = (struct scsi_dif_tuple *)sg_virt(sgpe);
1089 		src += blockoff;
1090 		lpfc_cmd = (struct lpfc_io_buf *)sc->host_scribble;
1091 	}
1092 
1093 	/* Should we change the Reference Tag */
1094 	if (reftag) {
1095 		if (phba->lpfc_injerr_wref_cnt) {
1096 			switch (op) {
1097 			case SCSI_PROT_WRITE_PASS:
1098 				if (src) {
1099 					/*
1100 					 * For WRITE_PASS, force the error
1101 					 * to be sent on the wire. It should
1102 					 * be detected by the Target.
1103 					 * If blockoff != 0 error will be
1104 					 * inserted in middle of the IO.
1105 					 */
1106 
1107 					lpfc_printf_log(phba, KERN_ERR,
1108 							LOG_TRACE_EVENT,
1109 					"9076 BLKGRD: Injecting reftag error: "
1110 					"write lba x%lx + x%x oldrefTag x%x\n",
1111 					(unsigned long)lba, blockoff,
1112 					be32_to_cpu(src->ref_tag));
1113 
1114 					/*
1115 					 * Save the old ref_tag so we can
1116 					 * restore it on completion.
1117 					 */
1118 					if (lpfc_cmd) {
1119 						lpfc_cmd->prot_data_type =
1120 							LPFC_INJERR_REFTAG;
1121 						lpfc_cmd->prot_data_segment =
1122 							src;
1123 						lpfc_cmd->prot_data =
1124 							src->ref_tag;
1125 					}
1126 					src->ref_tag = cpu_to_be32(0xDEADBEEF);
1127 					phba->lpfc_injerr_wref_cnt--;
1128 					if (phba->lpfc_injerr_wref_cnt == 0) {
1129 						phba->lpfc_injerr_nportid = 0;
1130 						phba->lpfc_injerr_lba =
1131 							LPFC_INJERR_LBA_OFF;
1132 						memset(&phba->lpfc_injerr_wwpn,
1133 						  0, sizeof(struct lpfc_name));
1134 					}
1135 					rc = BG_ERR_TGT | BG_ERR_CHECK;
1136 
1137 					break;
1138 				}
1139 				fallthrough;
1140 			case SCSI_PROT_WRITE_INSERT:
1141 				/*
1142 				 * For WRITE_INSERT, force the error
1143 				 * to be sent on the wire. It should be
1144 				 * detected by the Target.
1145 				 */
1146 				/* DEADBEEF will be the reftag on the wire */
1147 				*reftag = 0xDEADBEEF;
1148 				phba->lpfc_injerr_wref_cnt--;
1149 				if (phba->lpfc_injerr_wref_cnt == 0) {
1150 					phba->lpfc_injerr_nportid = 0;
1151 					phba->lpfc_injerr_lba =
1152 					LPFC_INJERR_LBA_OFF;
1153 					memset(&phba->lpfc_injerr_wwpn,
1154 						0, sizeof(struct lpfc_name));
1155 				}
1156 				rc = BG_ERR_TGT | BG_ERR_CHECK;
1157 
1158 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1159 					"9078 BLKGRD: Injecting reftag error: "
1160 					"write lba x%lx\n", (unsigned long)lba);
1161 				break;
1162 			case SCSI_PROT_WRITE_STRIP:
1163 				/*
1164 				 * For WRITE_STRIP and WRITE_PASS,
1165 				 * force the error on data
1166 				 * being copied from SLI-Host to SLI-Port.
1167 				 */
1168 				*reftag = 0xDEADBEEF;
1169 				phba->lpfc_injerr_wref_cnt--;
1170 				if (phba->lpfc_injerr_wref_cnt == 0) {
1171 					phba->lpfc_injerr_nportid = 0;
1172 					phba->lpfc_injerr_lba =
1173 						LPFC_INJERR_LBA_OFF;
1174 					memset(&phba->lpfc_injerr_wwpn,
1175 						0, sizeof(struct lpfc_name));
1176 				}
1177 				rc = BG_ERR_INIT;
1178 
1179 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1180 					"9077 BLKGRD: Injecting reftag error: "
1181 					"write lba x%lx\n", (unsigned long)lba);
1182 				break;
1183 			}
1184 		}
1185 		if (phba->lpfc_injerr_rref_cnt) {
1186 			switch (op) {
1187 			case SCSI_PROT_READ_INSERT:
1188 			case SCSI_PROT_READ_STRIP:
1189 			case SCSI_PROT_READ_PASS:
1190 				/*
1191 				 * For READ_STRIP and READ_PASS, force the
1192 				 * error on data being read off the wire. It
1193 				 * should force an IO error to the driver.
1194 				 */
1195 				*reftag = 0xDEADBEEF;
1196 				phba->lpfc_injerr_rref_cnt--;
1197 				if (phba->lpfc_injerr_rref_cnt == 0) {
1198 					phba->lpfc_injerr_nportid = 0;
1199 					phba->lpfc_injerr_lba =
1200 						LPFC_INJERR_LBA_OFF;
1201 					memset(&phba->lpfc_injerr_wwpn,
1202 						0, sizeof(struct lpfc_name));
1203 				}
1204 				rc = BG_ERR_INIT;
1205 
1206 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1207 					"9079 BLKGRD: Injecting reftag error: "
1208 					"read lba x%lx\n", (unsigned long)lba);
1209 				break;
1210 			}
1211 		}
1212 	}
1213 
1214 	/* Should we change the Application Tag */
1215 	if (apptag) {
1216 		if (phba->lpfc_injerr_wapp_cnt) {
1217 			switch (op) {
1218 			case SCSI_PROT_WRITE_PASS:
1219 				if (src) {
1220 					/*
1221 					 * For WRITE_PASS, force the error
1222 					 * to be sent on the wire. It should
1223 					 * be detected by the Target.
1224 					 * If blockoff != 0 error will be
1225 					 * inserted in middle of the IO.
1226 					 */
1227 
1228 					lpfc_printf_log(phba, KERN_ERR,
1229 							LOG_TRACE_EVENT,
1230 					"9080 BLKGRD: Injecting apptag error: "
1231 					"write lba x%lx + x%x oldappTag x%x\n",
1232 					(unsigned long)lba, blockoff,
1233 					be16_to_cpu(src->app_tag));
1234 
1235 					/*
1236 					 * Save the old app_tag so we can
1237 					 * restore it on completion.
1238 					 */
1239 					if (lpfc_cmd) {
1240 						lpfc_cmd->prot_data_type =
1241 							LPFC_INJERR_APPTAG;
1242 						lpfc_cmd->prot_data_segment =
1243 							src;
1244 						lpfc_cmd->prot_data =
1245 							src->app_tag;
1246 					}
1247 					src->app_tag = cpu_to_be16(0xDEAD);
1248 					phba->lpfc_injerr_wapp_cnt--;
1249 					if (phba->lpfc_injerr_wapp_cnt == 0) {
1250 						phba->lpfc_injerr_nportid = 0;
1251 						phba->lpfc_injerr_lba =
1252 							LPFC_INJERR_LBA_OFF;
1253 						memset(&phba->lpfc_injerr_wwpn,
1254 						  0, sizeof(struct lpfc_name));
1255 					}
1256 					rc = BG_ERR_TGT | BG_ERR_CHECK;
1257 					break;
1258 				}
1259 				fallthrough;
1260 			case SCSI_PROT_WRITE_INSERT:
1261 				/*
1262 				 * For WRITE_INSERT, force the
1263 				 * error to be sent on the wire. It should be
1264 				 * detected by the Target.
1265 				 */
1266 				/* DEAD will be the apptag on the wire */
1267 				*apptag = 0xDEAD;
1268 				phba->lpfc_injerr_wapp_cnt--;
1269 				if (phba->lpfc_injerr_wapp_cnt == 0) {
1270 					phba->lpfc_injerr_nportid = 0;
1271 					phba->lpfc_injerr_lba =
1272 						LPFC_INJERR_LBA_OFF;
1273 					memset(&phba->lpfc_injerr_wwpn,
1274 						0, sizeof(struct lpfc_name));
1275 				}
1276 				rc = BG_ERR_TGT | BG_ERR_CHECK;
1277 
1278 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1279 					"0813 BLKGRD: Injecting apptag error: "
1280 					"write lba x%lx\n", (unsigned long)lba);
1281 				break;
1282 			case SCSI_PROT_WRITE_STRIP:
1283 				/*
1284 				 * For WRITE_STRIP and WRITE_PASS,
1285 				 * force the error on data
1286 				 * being copied from SLI-Host to SLI-Port.
1287 				 */
1288 				*apptag = 0xDEAD;
1289 				phba->lpfc_injerr_wapp_cnt--;
1290 				if (phba->lpfc_injerr_wapp_cnt == 0) {
1291 					phba->lpfc_injerr_nportid = 0;
1292 					phba->lpfc_injerr_lba =
1293 						LPFC_INJERR_LBA_OFF;
1294 					memset(&phba->lpfc_injerr_wwpn,
1295 						0, sizeof(struct lpfc_name));
1296 				}
1297 				rc = BG_ERR_INIT;
1298 
1299 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1300 					"0812 BLKGRD: Injecting apptag error: "
1301 					"write lba x%lx\n", (unsigned long)lba);
1302 				break;
1303 			}
1304 		}
1305 		if (phba->lpfc_injerr_rapp_cnt) {
1306 			switch (op) {
1307 			case SCSI_PROT_READ_INSERT:
1308 			case SCSI_PROT_READ_STRIP:
1309 			case SCSI_PROT_READ_PASS:
1310 				/*
1311 				 * For READ_STRIP and READ_PASS, force the
1312 				 * error on data being read off the wire. It
1313 				 * should force an IO error to the driver.
1314 				 */
1315 				*apptag = 0xDEAD;
1316 				phba->lpfc_injerr_rapp_cnt--;
1317 				if (phba->lpfc_injerr_rapp_cnt == 0) {
1318 					phba->lpfc_injerr_nportid = 0;
1319 					phba->lpfc_injerr_lba =
1320 						LPFC_INJERR_LBA_OFF;
1321 					memset(&phba->lpfc_injerr_wwpn,
1322 						0, sizeof(struct lpfc_name));
1323 				}
1324 				rc = BG_ERR_INIT;
1325 
1326 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1327 					"0814 BLKGRD: Injecting apptag error: "
1328 					"read lba x%lx\n", (unsigned long)lba);
1329 				break;
1330 			}
1331 		}
1332 	}
1333 
1334 
1335 	/* Should we change the Guard Tag */
1336 	if (new_guard) {
1337 		if (phba->lpfc_injerr_wgrd_cnt) {
1338 			switch (op) {
1339 			case SCSI_PROT_WRITE_PASS:
1340 				rc = BG_ERR_CHECK;
1341 				fallthrough;
1342 
1343 			case SCSI_PROT_WRITE_INSERT:
1344 				/*
1345 				 * For WRITE_INSERT, force the
1346 				 * error to be sent on the wire. It should be
1347 				 * detected by the Target.
1348 				 */
1349 				phba->lpfc_injerr_wgrd_cnt--;
1350 				if (phba->lpfc_injerr_wgrd_cnt == 0) {
1351 					phba->lpfc_injerr_nportid = 0;
1352 					phba->lpfc_injerr_lba =
1353 						LPFC_INJERR_LBA_OFF;
1354 					memset(&phba->lpfc_injerr_wwpn,
1355 						0, sizeof(struct lpfc_name));
1356 				}
1357 
1358 				rc |= BG_ERR_TGT | BG_ERR_SWAP;
1359 				/* Signals the caller to swap CRC->CSUM */
1360 
1361 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1362 					"0817 BLKGRD: Injecting guard error: "
1363 					"write lba x%lx\n", (unsigned long)lba);
1364 				break;
1365 			case SCSI_PROT_WRITE_STRIP:
1366 				/*
1367 				 * For WRITE_STRIP and WRITE_PASS,
1368 				 * force the error on data
1369 				 * being copied from SLI-Host to SLI-Port.
1370 				 */
1371 				phba->lpfc_injerr_wgrd_cnt--;
1372 				if (phba->lpfc_injerr_wgrd_cnt == 0) {
1373 					phba->lpfc_injerr_nportid = 0;
1374 					phba->lpfc_injerr_lba =
1375 						LPFC_INJERR_LBA_OFF;
1376 					memset(&phba->lpfc_injerr_wwpn,
1377 						0, sizeof(struct lpfc_name));
1378 				}
1379 
1380 				rc = BG_ERR_INIT | BG_ERR_SWAP;
1381 				/* Signals the caller to swap CRC->CSUM */
1382 
1383 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1384 					"0816 BLKGRD: Injecting guard error: "
1385 					"write lba x%lx\n", (unsigned long)lba);
1386 				break;
1387 			}
1388 		}
1389 		if (phba->lpfc_injerr_rgrd_cnt) {
1390 			switch (op) {
1391 			case SCSI_PROT_READ_INSERT:
1392 			case SCSI_PROT_READ_STRIP:
1393 			case SCSI_PROT_READ_PASS:
1394 				/*
1395 				 * For READ_STRIP and READ_PASS, force the
1396 				 * error on data being read off the wire. It
1397 				 * should force an IO error to the driver.
1398 				 */
1399 				phba->lpfc_injerr_rgrd_cnt--;
1400 				if (phba->lpfc_injerr_rgrd_cnt == 0) {
1401 					phba->lpfc_injerr_nportid = 0;
1402 					phba->lpfc_injerr_lba =
1403 						LPFC_INJERR_LBA_OFF;
1404 					memset(&phba->lpfc_injerr_wwpn,
1405 						0, sizeof(struct lpfc_name));
1406 				}
1407 
1408 				rc = BG_ERR_INIT | BG_ERR_SWAP;
1409 				/* Signals the caller to swap CRC->CSUM */
1410 
1411 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1412 					"0818 BLKGRD: Injecting guard error: "
1413 					"read lba x%lx\n", (unsigned long)lba);
1414 			}
1415 		}
1416 	}
1417 
1418 	return rc;
1419 }
1420 #endif
1421 
1422 /**
1423  * lpfc_sc_to_bg_opcodes - Determine the BlockGuard opcodes to be used with
1424  * the specified SCSI command.
1425  * @phba: The Hba for which this call is being executed.
1426  * @sc: The SCSI command to examine
1427  * @txop: (out) BlockGuard operation for transmitted data
1428  * @rxop: (out) BlockGuard operation for received data
1429  *
1430  * Returns: zero on success; non-zero if tx and/or rx op cannot be determined
1431  *
1432  **/
1433 static int
1434 lpfc_sc_to_bg_opcodes(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1435 		uint8_t *txop, uint8_t *rxop)
1436 {
1437 	uint8_t ret = 0;
1438 
1439 	if (sc->prot_flags & SCSI_PROT_IP_CHECKSUM) {
1440 		switch (scsi_get_prot_op(sc)) {
1441 		case SCSI_PROT_READ_INSERT:
1442 		case SCSI_PROT_WRITE_STRIP:
1443 			*rxop = BG_OP_IN_NODIF_OUT_CSUM;
1444 			*txop = BG_OP_IN_CSUM_OUT_NODIF;
1445 			break;
1446 
1447 		case SCSI_PROT_READ_STRIP:
1448 		case SCSI_PROT_WRITE_INSERT:
1449 			*rxop = BG_OP_IN_CRC_OUT_NODIF;
1450 			*txop = BG_OP_IN_NODIF_OUT_CRC;
1451 			break;
1452 
1453 		case SCSI_PROT_READ_PASS:
1454 		case SCSI_PROT_WRITE_PASS:
1455 			*rxop = BG_OP_IN_CRC_OUT_CSUM;
1456 			*txop = BG_OP_IN_CSUM_OUT_CRC;
1457 			break;
1458 
1459 		case SCSI_PROT_NORMAL:
1460 		default:
1461 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1462 				"9063 BLKGRD: Bad op/guard:%d/IP combination\n",
1463 					scsi_get_prot_op(sc));
1464 			ret = 1;
1465 			break;
1466 
1467 		}
1468 	} else {
1469 		switch (scsi_get_prot_op(sc)) {
1470 		case SCSI_PROT_READ_STRIP:
1471 		case SCSI_PROT_WRITE_INSERT:
1472 			*rxop = BG_OP_IN_CRC_OUT_NODIF;
1473 			*txop = BG_OP_IN_NODIF_OUT_CRC;
1474 			break;
1475 
1476 		case SCSI_PROT_READ_PASS:
1477 		case SCSI_PROT_WRITE_PASS:
1478 			*rxop = BG_OP_IN_CRC_OUT_CRC;
1479 			*txop = BG_OP_IN_CRC_OUT_CRC;
1480 			break;
1481 
1482 		case SCSI_PROT_READ_INSERT:
1483 		case SCSI_PROT_WRITE_STRIP:
1484 			*rxop = BG_OP_IN_NODIF_OUT_CRC;
1485 			*txop = BG_OP_IN_CRC_OUT_NODIF;
1486 			break;
1487 
1488 		case SCSI_PROT_NORMAL:
1489 		default:
1490 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1491 				"9075 BLKGRD: Bad op/guard:%d/CRC combination\n",
1492 					scsi_get_prot_op(sc));
1493 			ret = 1;
1494 			break;
1495 		}
1496 	}
1497 
1498 	return ret;
1499 }
1500 
1501 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1502 /**
1503  * lpfc_bg_err_opcodes - reDetermine the BlockGuard opcodes to be used with
1504  * the specified SCSI command in order to force a guard tag error.
1505  * @phba: The Hba for which this call is being executed.
1506  * @sc: The SCSI command to examine
1507  * @txop: (out) BlockGuard operation for transmitted data
1508  * @rxop: (out) BlockGuard operation for received data
1509  *
1510  * Returns: zero on success; non-zero if tx and/or rx op cannot be determined
1511  *
1512  **/
1513 static int
1514 lpfc_bg_err_opcodes(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1515 		uint8_t *txop, uint8_t *rxop)
1516 {
1517 
1518 	if (sc->prot_flags & SCSI_PROT_IP_CHECKSUM) {
1519 		switch (scsi_get_prot_op(sc)) {
1520 		case SCSI_PROT_READ_INSERT:
1521 		case SCSI_PROT_WRITE_STRIP:
1522 			*rxop = BG_OP_IN_NODIF_OUT_CRC;
1523 			*txop = BG_OP_IN_CRC_OUT_NODIF;
1524 			break;
1525 
1526 		case SCSI_PROT_READ_STRIP:
1527 		case SCSI_PROT_WRITE_INSERT:
1528 			*rxop = BG_OP_IN_CSUM_OUT_NODIF;
1529 			*txop = BG_OP_IN_NODIF_OUT_CSUM;
1530 			break;
1531 
1532 		case SCSI_PROT_READ_PASS:
1533 		case SCSI_PROT_WRITE_PASS:
1534 			*rxop = BG_OP_IN_CSUM_OUT_CRC;
1535 			*txop = BG_OP_IN_CRC_OUT_CSUM;
1536 			break;
1537 
1538 		case SCSI_PROT_NORMAL:
1539 		default:
1540 			break;
1541 
1542 		}
1543 	} else {
1544 		switch (scsi_get_prot_op(sc)) {
1545 		case SCSI_PROT_READ_STRIP:
1546 		case SCSI_PROT_WRITE_INSERT:
1547 			*rxop = BG_OP_IN_CSUM_OUT_NODIF;
1548 			*txop = BG_OP_IN_NODIF_OUT_CSUM;
1549 			break;
1550 
1551 		case SCSI_PROT_READ_PASS:
1552 		case SCSI_PROT_WRITE_PASS:
1553 			*rxop = BG_OP_IN_CSUM_OUT_CSUM;
1554 			*txop = BG_OP_IN_CSUM_OUT_CSUM;
1555 			break;
1556 
1557 		case SCSI_PROT_READ_INSERT:
1558 		case SCSI_PROT_WRITE_STRIP:
1559 			*rxop = BG_OP_IN_NODIF_OUT_CSUM;
1560 			*txop = BG_OP_IN_CSUM_OUT_NODIF;
1561 			break;
1562 
1563 		case SCSI_PROT_NORMAL:
1564 		default:
1565 			break;
1566 		}
1567 	}
1568 
1569 	return 0;
1570 }
1571 #endif
1572 
1573 /**
1574  * lpfc_bg_setup_bpl - Setup BlockGuard BPL with no protection data
1575  * @phba: The Hba for which this call is being executed.
1576  * @sc: pointer to scsi command we're working on
1577  * @bpl: pointer to buffer list for protection groups
1578  * @datasegcnt: number of segments of data that have been dma mapped
1579  *
1580  * This function sets up BPL buffer list for protection groups of
1581  * type LPFC_PG_TYPE_NO_DIF
1582  *
1583  * This is usually used when the HBA is instructed to generate
1584  * DIFs and insert them into data stream (or strip DIF from
1585  * incoming data stream)
1586  *
1587  * The buffer list consists of just one protection group described
1588  * below:
1589  *                                +-------------------------+
1590  *   start of prot group  -->     |          PDE_5          |
1591  *                                +-------------------------+
1592  *                                |          PDE_6          |
1593  *                                +-------------------------+
1594  *                                |         Data BDE        |
1595  *                                +-------------------------+
1596  *                                |more Data BDE's ... (opt)|
1597  *                                +-------------------------+
1598  *
1599  *
1600  * Note: Data s/g buffers have been dma mapped
1601  *
1602  * Returns the number of BDEs added to the BPL.
1603  **/
1604 static int
1605 lpfc_bg_setup_bpl(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1606 		struct ulp_bde64 *bpl, int datasegcnt)
1607 {
1608 	struct scatterlist *sgde = NULL; /* s/g data entry */
1609 	struct lpfc_pde5 *pde5 = NULL;
1610 	struct lpfc_pde6 *pde6 = NULL;
1611 	dma_addr_t physaddr;
1612 	int i = 0, num_bde = 0, status;
1613 	int datadir = sc->sc_data_direction;
1614 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1615 	uint32_t rc;
1616 #endif
1617 	uint32_t checking = 1;
1618 	uint32_t reftag;
1619 	uint8_t txop, rxop;
1620 
1621 	status  = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
1622 	if (status)
1623 		goto out;
1624 
1625 	/* extract some info from the scsi command for pde*/
1626 	reftag = scsi_prot_ref_tag(sc);
1627 	if (reftag == LPFC_INVALID_REFTAG)
1628 		goto out;
1629 
1630 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1631 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
1632 	if (rc) {
1633 		if (rc & BG_ERR_SWAP)
1634 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
1635 		if (rc & BG_ERR_CHECK)
1636 			checking = 0;
1637 	}
1638 #endif
1639 
1640 	/* setup PDE5 with what we have */
1641 	pde5 = (struct lpfc_pde5 *) bpl;
1642 	memset(pde5, 0, sizeof(struct lpfc_pde5));
1643 	bf_set(pde5_type, pde5, LPFC_PDE5_DESCRIPTOR);
1644 
1645 	/* Endianness conversion if necessary for PDE5 */
1646 	pde5->word0 = cpu_to_le32(pde5->word0);
1647 	pde5->reftag = cpu_to_le32(reftag);
1648 
1649 	/* advance bpl and increment bde count */
1650 	num_bde++;
1651 	bpl++;
1652 	pde6 = (struct lpfc_pde6 *) bpl;
1653 
1654 	/* setup PDE6 with the rest of the info */
1655 	memset(pde6, 0, sizeof(struct lpfc_pde6));
1656 	bf_set(pde6_type, pde6, LPFC_PDE6_DESCRIPTOR);
1657 	bf_set(pde6_optx, pde6, txop);
1658 	bf_set(pde6_oprx, pde6, rxop);
1659 
1660 	/*
1661 	 * We only need to check the data on READs, for WRITEs
1662 	 * protection data is automatically generated, not checked.
1663 	 */
1664 	if (datadir == DMA_FROM_DEVICE) {
1665 		if (sc->prot_flags & SCSI_PROT_GUARD_CHECK)
1666 			bf_set(pde6_ce, pde6, checking);
1667 		else
1668 			bf_set(pde6_ce, pde6, 0);
1669 
1670 		if (sc->prot_flags & SCSI_PROT_REF_CHECK)
1671 			bf_set(pde6_re, pde6, checking);
1672 		else
1673 			bf_set(pde6_re, pde6, 0);
1674 	}
1675 	bf_set(pde6_ai, pde6, 1);
1676 	bf_set(pde6_ae, pde6, 0);
1677 	bf_set(pde6_apptagval, pde6, 0);
1678 
1679 	/* Endianness conversion if necessary for PDE6 */
1680 	pde6->word0 = cpu_to_le32(pde6->word0);
1681 	pde6->word1 = cpu_to_le32(pde6->word1);
1682 	pde6->word2 = cpu_to_le32(pde6->word2);
1683 
1684 	/* advance bpl and increment bde count */
1685 	num_bde++;
1686 	bpl++;
1687 
1688 	/* assumption: caller has already run dma_map_sg on command data */
1689 	scsi_for_each_sg(sc, sgde, datasegcnt, i) {
1690 		physaddr = sg_dma_address(sgde);
1691 		bpl->addrLow = le32_to_cpu(putPaddrLow(physaddr));
1692 		bpl->addrHigh = le32_to_cpu(putPaddrHigh(physaddr));
1693 		bpl->tus.f.bdeSize = sg_dma_len(sgde);
1694 		if (datadir == DMA_TO_DEVICE)
1695 			bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
1696 		else
1697 			bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
1698 		bpl->tus.w = le32_to_cpu(bpl->tus.w);
1699 		bpl++;
1700 		num_bde++;
1701 	}
1702 
1703 out:
1704 	return num_bde;
1705 }
1706 
1707 /**
1708  * lpfc_bg_setup_bpl_prot - Setup BlockGuard BPL with protection data
1709  * @phba: The Hba for which this call is being executed.
1710  * @sc: pointer to scsi command we're working on
1711  * @bpl: pointer to buffer list for protection groups
1712  * @datacnt: number of segments of data that have been dma mapped
1713  * @protcnt: number of segment of protection data that have been dma mapped
1714  *
1715  * This function sets up BPL buffer list for protection groups of
1716  * type LPFC_PG_TYPE_DIF
1717  *
1718  * This is usually used when DIFs are in their own buffers,
1719  * separate from the data. The HBA can then by instructed
1720  * to place the DIFs in the outgoing stream.  For read operations,
1721  * The HBA could extract the DIFs and place it in DIF buffers.
1722  *
1723  * The buffer list for this type consists of one or more of the
1724  * protection groups described below:
1725  *                                    +-------------------------+
1726  *   start of first prot group  -->   |          PDE_5          |
1727  *                                    +-------------------------+
1728  *                                    |          PDE_6          |
1729  *                                    +-------------------------+
1730  *                                    |      PDE_7 (Prot BDE)   |
1731  *                                    +-------------------------+
1732  *                                    |        Data BDE         |
1733  *                                    +-------------------------+
1734  *                                    |more Data BDE's ... (opt)|
1735  *                                    +-------------------------+
1736  *   start of new  prot group  -->    |          PDE_5          |
1737  *                                    +-------------------------+
1738  *                                    |          ...            |
1739  *                                    +-------------------------+
1740  *
1741  * Note: It is assumed that both data and protection s/g buffers have been
1742  *       mapped for DMA
1743  *
1744  * Returns the number of BDEs added to the BPL.
1745  **/
1746 static int
1747 lpfc_bg_setup_bpl_prot(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1748 		struct ulp_bde64 *bpl, int datacnt, int protcnt)
1749 {
1750 	struct scatterlist *sgde = NULL; /* s/g data entry */
1751 	struct scatterlist *sgpe = NULL; /* s/g prot entry */
1752 	struct lpfc_pde5 *pde5 = NULL;
1753 	struct lpfc_pde6 *pde6 = NULL;
1754 	struct lpfc_pde7 *pde7 = NULL;
1755 	dma_addr_t dataphysaddr, protphysaddr;
1756 	unsigned short curr_data = 0, curr_prot = 0;
1757 	unsigned int split_offset;
1758 	unsigned int protgroup_len, protgroup_offset = 0, protgroup_remainder;
1759 	unsigned int protgrp_blks, protgrp_bytes;
1760 	unsigned int remainder, subtotal;
1761 	int status;
1762 	int datadir = sc->sc_data_direction;
1763 	unsigned char pgdone = 0, alldone = 0;
1764 	unsigned blksize;
1765 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1766 	uint32_t rc;
1767 #endif
1768 	uint32_t checking = 1;
1769 	uint32_t reftag;
1770 	uint8_t txop, rxop;
1771 	int num_bde = 0;
1772 
1773 	sgpe = scsi_prot_sglist(sc);
1774 	sgde = scsi_sglist(sc);
1775 
1776 	if (!sgpe || !sgde) {
1777 		lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1778 				"9020 Invalid s/g entry: data=x%px prot=x%px\n",
1779 				sgpe, sgde);
1780 		return 0;
1781 	}
1782 
1783 	status = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
1784 	if (status)
1785 		goto out;
1786 
1787 	/* extract some info from the scsi command */
1788 	blksize = scsi_prot_interval(sc);
1789 	reftag = scsi_prot_ref_tag(sc);
1790 	if (reftag == LPFC_INVALID_REFTAG)
1791 		goto out;
1792 
1793 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
1794 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
1795 	if (rc) {
1796 		if (rc & BG_ERR_SWAP)
1797 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
1798 		if (rc & BG_ERR_CHECK)
1799 			checking = 0;
1800 	}
1801 #endif
1802 
1803 	split_offset = 0;
1804 	do {
1805 		/* Check to see if we ran out of space */
1806 		if (num_bde >= (phba->cfg_total_seg_cnt - 2))
1807 			return num_bde + 3;
1808 
1809 		/* setup PDE5 with what we have */
1810 		pde5 = (struct lpfc_pde5 *) bpl;
1811 		memset(pde5, 0, sizeof(struct lpfc_pde5));
1812 		bf_set(pde5_type, pde5, LPFC_PDE5_DESCRIPTOR);
1813 
1814 		/* Endianness conversion if necessary for PDE5 */
1815 		pde5->word0 = cpu_to_le32(pde5->word0);
1816 		pde5->reftag = cpu_to_le32(reftag);
1817 
1818 		/* advance bpl and increment bde count */
1819 		num_bde++;
1820 		bpl++;
1821 		pde6 = (struct lpfc_pde6 *) bpl;
1822 
1823 		/* setup PDE6 with the rest of the info */
1824 		memset(pde6, 0, sizeof(struct lpfc_pde6));
1825 		bf_set(pde6_type, pde6, LPFC_PDE6_DESCRIPTOR);
1826 		bf_set(pde6_optx, pde6, txop);
1827 		bf_set(pde6_oprx, pde6, rxop);
1828 
1829 		if (sc->prot_flags & SCSI_PROT_GUARD_CHECK)
1830 			bf_set(pde6_ce, pde6, checking);
1831 		else
1832 			bf_set(pde6_ce, pde6, 0);
1833 
1834 		if (sc->prot_flags & SCSI_PROT_REF_CHECK)
1835 			bf_set(pde6_re, pde6, checking);
1836 		else
1837 			bf_set(pde6_re, pde6, 0);
1838 
1839 		bf_set(pde6_ai, pde6, 1);
1840 		bf_set(pde6_ae, pde6, 0);
1841 		bf_set(pde6_apptagval, pde6, 0);
1842 
1843 		/* Endianness conversion if necessary for PDE6 */
1844 		pde6->word0 = cpu_to_le32(pde6->word0);
1845 		pde6->word1 = cpu_to_le32(pde6->word1);
1846 		pde6->word2 = cpu_to_le32(pde6->word2);
1847 
1848 		/* advance bpl and increment bde count */
1849 		num_bde++;
1850 		bpl++;
1851 
1852 		/* setup the first BDE that points to protection buffer */
1853 		protphysaddr = sg_dma_address(sgpe) + protgroup_offset;
1854 		protgroup_len = sg_dma_len(sgpe) - protgroup_offset;
1855 
1856 		/* must be integer multiple of the DIF block length */
1857 		BUG_ON(protgroup_len % 8);
1858 
1859 		pde7 = (struct lpfc_pde7 *) bpl;
1860 		memset(pde7, 0, sizeof(struct lpfc_pde7));
1861 		bf_set(pde7_type, pde7, LPFC_PDE7_DESCRIPTOR);
1862 
1863 		pde7->addrHigh = le32_to_cpu(putPaddrHigh(protphysaddr));
1864 		pde7->addrLow = le32_to_cpu(putPaddrLow(protphysaddr));
1865 
1866 		protgrp_blks = protgroup_len / 8;
1867 		protgrp_bytes = protgrp_blks * blksize;
1868 
1869 		/* check if this pde is crossing the 4K boundary; if so split */
1870 		if ((pde7->addrLow & 0xfff) + protgroup_len > 0x1000) {
1871 			protgroup_remainder = 0x1000 - (pde7->addrLow & 0xfff);
1872 			protgroup_offset += protgroup_remainder;
1873 			protgrp_blks = protgroup_remainder / 8;
1874 			protgrp_bytes = protgrp_blks * blksize;
1875 		} else {
1876 			protgroup_offset = 0;
1877 			curr_prot++;
1878 		}
1879 
1880 		num_bde++;
1881 
1882 		/* setup BDE's for data blocks associated with DIF data */
1883 		pgdone = 0;
1884 		subtotal = 0; /* total bytes processed for current prot grp */
1885 		while (!pgdone) {
1886 			/* Check to see if we ran out of space */
1887 			if (num_bde >= phba->cfg_total_seg_cnt)
1888 				return num_bde + 1;
1889 
1890 			if (!sgde) {
1891 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1892 					"9065 BLKGRD:%s Invalid data segment\n",
1893 						__func__);
1894 				return 0;
1895 			}
1896 			bpl++;
1897 			dataphysaddr = sg_dma_address(sgde) + split_offset;
1898 			bpl->addrLow = le32_to_cpu(putPaddrLow(dataphysaddr));
1899 			bpl->addrHigh = le32_to_cpu(putPaddrHigh(dataphysaddr));
1900 
1901 			remainder = sg_dma_len(sgde) - split_offset;
1902 
1903 			if ((subtotal + remainder) <= protgrp_bytes) {
1904 				/* we can use this whole buffer */
1905 				bpl->tus.f.bdeSize = remainder;
1906 				split_offset = 0;
1907 
1908 				if ((subtotal + remainder) == protgrp_bytes)
1909 					pgdone = 1;
1910 			} else {
1911 				/* must split this buffer with next prot grp */
1912 				bpl->tus.f.bdeSize = protgrp_bytes - subtotal;
1913 				split_offset += bpl->tus.f.bdeSize;
1914 			}
1915 
1916 			subtotal += bpl->tus.f.bdeSize;
1917 
1918 			if (datadir == DMA_TO_DEVICE)
1919 				bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
1920 			else
1921 				bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
1922 			bpl->tus.w = le32_to_cpu(bpl->tus.w);
1923 
1924 			num_bde++;
1925 			curr_data++;
1926 
1927 			if (split_offset)
1928 				break;
1929 
1930 			/* Move to the next s/g segment if possible */
1931 			sgde = sg_next(sgde);
1932 
1933 		}
1934 
1935 		if (protgroup_offset) {
1936 			/* update the reference tag */
1937 			reftag += protgrp_blks;
1938 			bpl++;
1939 			continue;
1940 		}
1941 
1942 		/* are we done ? */
1943 		if (curr_prot == protcnt) {
1944 			alldone = 1;
1945 		} else if (curr_prot < protcnt) {
1946 			/* advance to next prot buffer */
1947 			sgpe = sg_next(sgpe);
1948 			bpl++;
1949 
1950 			/* update the reference tag */
1951 			reftag += protgrp_blks;
1952 		} else {
1953 			/* if we're here, we have a bug */
1954 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
1955 					"9054 BLKGRD: bug in %s\n", __func__);
1956 		}
1957 
1958 	} while (!alldone);
1959 out:
1960 
1961 	return num_bde;
1962 }
1963 
1964 /**
1965  * lpfc_bg_setup_sgl - Setup BlockGuard SGL with no protection data
1966  * @phba: The Hba for which this call is being executed.
1967  * @sc: pointer to scsi command we're working on
1968  * @sgl: pointer to buffer list for protection groups
1969  * @datasegcnt: number of segments of data that have been dma mapped
1970  * @lpfc_cmd: lpfc scsi command object pointer.
1971  *
1972  * This function sets up SGL buffer list for protection groups of
1973  * type LPFC_PG_TYPE_NO_DIF
1974  *
1975  * This is usually used when the HBA is instructed to generate
1976  * DIFs and insert them into data stream (or strip DIF from
1977  * incoming data stream)
1978  *
1979  * The buffer list consists of just one protection group described
1980  * below:
1981  *                                +-------------------------+
1982  *   start of prot group  -->     |         DI_SEED         |
1983  *                                +-------------------------+
1984  *                                |         Data SGE        |
1985  *                                +-------------------------+
1986  *                                |more Data SGE's ... (opt)|
1987  *                                +-------------------------+
1988  *
1989  *
1990  * Note: Data s/g buffers have been dma mapped
1991  *
1992  * Returns the number of SGEs added to the SGL.
1993  **/
1994 static int
1995 lpfc_bg_setup_sgl(struct lpfc_hba *phba, struct scsi_cmnd *sc,
1996 		struct sli4_sge *sgl, int datasegcnt,
1997 		struct lpfc_io_buf *lpfc_cmd)
1998 {
1999 	struct scatterlist *sgde = NULL; /* s/g data entry */
2000 	struct sli4_sge_diseed *diseed = NULL;
2001 	dma_addr_t physaddr;
2002 	int i = 0, num_sge = 0, status;
2003 	uint32_t reftag;
2004 	uint8_t txop, rxop;
2005 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2006 	uint32_t rc;
2007 #endif
2008 	uint32_t checking = 1;
2009 	uint32_t dma_len;
2010 	uint32_t dma_offset = 0;
2011 	struct sli4_hybrid_sgl *sgl_xtra = NULL;
2012 	int j;
2013 	bool lsp_just_set = false;
2014 
2015 	status  = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
2016 	if (status)
2017 		goto out;
2018 
2019 	/* extract some info from the scsi command for pde*/
2020 	reftag = scsi_prot_ref_tag(sc);
2021 	if (reftag == LPFC_INVALID_REFTAG)
2022 		goto out;
2023 
2024 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2025 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
2026 	if (rc) {
2027 		if (rc & BG_ERR_SWAP)
2028 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
2029 		if (rc & BG_ERR_CHECK)
2030 			checking = 0;
2031 	}
2032 #endif
2033 
2034 	/* setup DISEED with what we have */
2035 	diseed = (struct sli4_sge_diseed *) sgl;
2036 	memset(diseed, 0, sizeof(struct sli4_sge_diseed));
2037 	bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DISEED);
2038 
2039 	/* Endianness conversion if necessary */
2040 	diseed->ref_tag = cpu_to_le32(reftag);
2041 	diseed->ref_tag_tran = diseed->ref_tag;
2042 
2043 	/*
2044 	 * We only need to check the data on READs, for WRITEs
2045 	 * protection data is automatically generated, not checked.
2046 	 */
2047 	if (sc->sc_data_direction == DMA_FROM_DEVICE) {
2048 		if (sc->prot_flags & SCSI_PROT_GUARD_CHECK)
2049 			bf_set(lpfc_sli4_sge_dif_ce, diseed, checking);
2050 		else
2051 			bf_set(lpfc_sli4_sge_dif_ce, diseed, 0);
2052 
2053 		if (sc->prot_flags & SCSI_PROT_REF_CHECK)
2054 			bf_set(lpfc_sli4_sge_dif_re, diseed, checking);
2055 		else
2056 			bf_set(lpfc_sli4_sge_dif_re, diseed, 0);
2057 	}
2058 
2059 	/* setup DISEED with the rest of the info */
2060 	bf_set(lpfc_sli4_sge_dif_optx, diseed, txop);
2061 	bf_set(lpfc_sli4_sge_dif_oprx, diseed, rxop);
2062 
2063 	bf_set(lpfc_sli4_sge_dif_ai, diseed, 1);
2064 	bf_set(lpfc_sli4_sge_dif_me, diseed, 0);
2065 
2066 	/* Endianness conversion if necessary for DISEED */
2067 	diseed->word2 = cpu_to_le32(diseed->word2);
2068 	diseed->word3 = cpu_to_le32(diseed->word3);
2069 
2070 	/* advance bpl and increment sge count */
2071 	num_sge++;
2072 	sgl++;
2073 
2074 	/* assumption: caller has already run dma_map_sg on command data */
2075 	sgde = scsi_sglist(sc);
2076 	j = 3;
2077 	for (i = 0; i < datasegcnt; i++) {
2078 		/* clear it */
2079 		sgl->word2 = 0;
2080 
2081 		/* do we need to expand the segment */
2082 		if (!lsp_just_set && !((j + 1) % phba->border_sge_num) &&
2083 		    ((datasegcnt - 1) != i)) {
2084 			/* set LSP type */
2085 			bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_LSP);
2086 
2087 			sgl_xtra = lpfc_get_sgl_per_hdwq(phba, lpfc_cmd);
2088 
2089 			if (unlikely(!sgl_xtra)) {
2090 				lpfc_cmd->seg_cnt = 0;
2091 				return 0;
2092 			}
2093 			sgl->addr_lo = cpu_to_le32(putPaddrLow(
2094 						sgl_xtra->dma_phys_sgl));
2095 			sgl->addr_hi = cpu_to_le32(putPaddrHigh(
2096 						sgl_xtra->dma_phys_sgl));
2097 
2098 		} else {
2099 			bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DATA);
2100 		}
2101 
2102 		if (!(bf_get(lpfc_sli4_sge_type, sgl) & LPFC_SGE_TYPE_LSP)) {
2103 			if ((datasegcnt - 1) == i)
2104 				bf_set(lpfc_sli4_sge_last, sgl, 1);
2105 			physaddr = sg_dma_address(sgde);
2106 			dma_len = sg_dma_len(sgde);
2107 			sgl->addr_lo = cpu_to_le32(putPaddrLow(physaddr));
2108 			sgl->addr_hi = cpu_to_le32(putPaddrHigh(physaddr));
2109 
2110 			bf_set(lpfc_sli4_sge_offset, sgl, dma_offset);
2111 			sgl->word2 = cpu_to_le32(sgl->word2);
2112 			sgl->sge_len = cpu_to_le32(dma_len);
2113 
2114 			dma_offset += dma_len;
2115 			sgde = sg_next(sgde);
2116 
2117 			sgl++;
2118 			num_sge++;
2119 			lsp_just_set = false;
2120 
2121 		} else {
2122 			sgl->word2 = cpu_to_le32(sgl->word2);
2123 			sgl->sge_len = cpu_to_le32(phba->cfg_sg_dma_buf_size);
2124 
2125 			sgl = (struct sli4_sge *)sgl_xtra->dma_sgl;
2126 			i = i - 1;
2127 
2128 			lsp_just_set = true;
2129 		}
2130 
2131 		j++;
2132 
2133 	}
2134 
2135 out:
2136 	return num_sge;
2137 }
2138 
2139 /**
2140  * lpfc_bg_setup_sgl_prot - Setup BlockGuard SGL with protection data
2141  * @phba: The Hba for which this call is being executed.
2142  * @sc: pointer to scsi command we're working on
2143  * @sgl: pointer to buffer list for protection groups
2144  * @datacnt: number of segments of data that have been dma mapped
2145  * @protcnt: number of segment of protection data that have been dma mapped
2146  * @lpfc_cmd: lpfc scsi command object pointer.
2147  *
2148  * This function sets up SGL buffer list for protection groups of
2149  * type LPFC_PG_TYPE_DIF
2150  *
2151  * This is usually used when DIFs are in their own buffers,
2152  * separate from the data. The HBA can then by instructed
2153  * to place the DIFs in the outgoing stream.  For read operations,
2154  * The HBA could extract the DIFs and place it in DIF buffers.
2155  *
2156  * The buffer list for this type consists of one or more of the
2157  * protection groups described below:
2158  *                                    +-------------------------+
2159  *   start of first prot group  -->   |         DISEED          |
2160  *                                    +-------------------------+
2161  *                                    |      DIF (Prot SGE)     |
2162  *                                    +-------------------------+
2163  *                                    |        Data SGE         |
2164  *                                    +-------------------------+
2165  *                                    |more Data SGE's ... (opt)|
2166  *                                    +-------------------------+
2167  *   start of new  prot group  -->    |         DISEED          |
2168  *                                    +-------------------------+
2169  *                                    |          ...            |
2170  *                                    +-------------------------+
2171  *
2172  * Note: It is assumed that both data and protection s/g buffers have been
2173  *       mapped for DMA
2174  *
2175  * Returns the number of SGEs added to the SGL.
2176  **/
2177 static int
2178 lpfc_bg_setup_sgl_prot(struct lpfc_hba *phba, struct scsi_cmnd *sc,
2179 		struct sli4_sge *sgl, int datacnt, int protcnt,
2180 		struct lpfc_io_buf *lpfc_cmd)
2181 {
2182 	struct scatterlist *sgde = NULL; /* s/g data entry */
2183 	struct scatterlist *sgpe = NULL; /* s/g prot entry */
2184 	struct sli4_sge_diseed *diseed = NULL;
2185 	dma_addr_t dataphysaddr, protphysaddr;
2186 	unsigned short curr_data = 0, curr_prot = 0;
2187 	unsigned int split_offset;
2188 	unsigned int protgroup_len, protgroup_offset = 0, protgroup_remainder;
2189 	unsigned int protgrp_blks, protgrp_bytes;
2190 	unsigned int remainder, subtotal;
2191 	int status;
2192 	unsigned char pgdone = 0, alldone = 0;
2193 	unsigned blksize;
2194 	uint32_t reftag;
2195 	uint8_t txop, rxop;
2196 	uint32_t dma_len;
2197 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2198 	uint32_t rc;
2199 #endif
2200 	uint32_t checking = 1;
2201 	uint32_t dma_offset = 0;
2202 	int num_sge = 0, j = 2;
2203 	struct sli4_hybrid_sgl *sgl_xtra = NULL;
2204 
2205 	sgpe = scsi_prot_sglist(sc);
2206 	sgde = scsi_sglist(sc);
2207 
2208 	if (!sgpe || !sgde) {
2209 		lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
2210 				"9082 Invalid s/g entry: data=x%px prot=x%px\n",
2211 				sgpe, sgde);
2212 		return 0;
2213 	}
2214 
2215 	status = lpfc_sc_to_bg_opcodes(phba, sc, &txop, &rxop);
2216 	if (status)
2217 		goto out;
2218 
2219 	/* extract some info from the scsi command */
2220 	blksize = scsi_prot_interval(sc);
2221 	reftag = scsi_prot_ref_tag(sc);
2222 	if (reftag == LPFC_INVALID_REFTAG)
2223 		goto out;
2224 
2225 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
2226 	rc = lpfc_bg_err_inject(phba, sc, &reftag, NULL, 1);
2227 	if (rc) {
2228 		if (rc & BG_ERR_SWAP)
2229 			lpfc_bg_err_opcodes(phba, sc, &txop, &rxop);
2230 		if (rc & BG_ERR_CHECK)
2231 			checking = 0;
2232 	}
2233 #endif
2234 
2235 	split_offset = 0;
2236 	do {
2237 		/* Check to see if we ran out of space */
2238 		if ((num_sge >= (phba->cfg_total_seg_cnt - 2)) &&
2239 		    !(phba->cfg_xpsgl))
2240 			return num_sge + 3;
2241 
2242 		/* DISEED and DIF have to be together */
2243 		if (!((j + 1) % phba->border_sge_num) ||
2244 		    !((j + 2) % phba->border_sge_num) ||
2245 		    !((j + 3) % phba->border_sge_num)) {
2246 			sgl->word2 = 0;
2247 
2248 			/* set LSP type */
2249 			bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_LSP);
2250 
2251 			sgl_xtra = lpfc_get_sgl_per_hdwq(phba, lpfc_cmd);
2252 
2253 			if (unlikely(!sgl_xtra)) {
2254 				goto out;
2255 			} else {
2256 				sgl->addr_lo = cpu_to_le32(putPaddrLow(
2257 						sgl_xtra->dma_phys_sgl));
2258 				sgl->addr_hi = cpu_to_le32(putPaddrHigh(
2259 						       sgl_xtra->dma_phys_sgl));
2260 			}
2261 
2262 			sgl->word2 = cpu_to_le32(sgl->word2);
2263 			sgl->sge_len = cpu_to_le32(phba->cfg_sg_dma_buf_size);
2264 
2265 			sgl = (struct sli4_sge *)sgl_xtra->dma_sgl;
2266 			j = 0;
2267 		}
2268 
2269 		/* setup DISEED with what we have */
2270 		diseed = (struct sli4_sge_diseed *) sgl;
2271 		memset(diseed, 0, sizeof(struct sli4_sge_diseed));
2272 		bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DISEED);
2273 
2274 		/* Endianness conversion if necessary */
2275 		diseed->ref_tag = cpu_to_le32(reftag);
2276 		diseed->ref_tag_tran = diseed->ref_tag;
2277 
2278 		if (sc->prot_flags & SCSI_PROT_GUARD_CHECK) {
2279 			bf_set(lpfc_sli4_sge_dif_ce, diseed, checking);
2280 		} else {
2281 			bf_set(lpfc_sli4_sge_dif_ce, diseed, 0);
2282 			/*
2283 			 * When in this mode, the hardware will replace
2284 			 * the guard tag from the host with a
2285 			 * newly generated good CRC for the wire.
2286 			 * Switch to raw mode here to avoid this
2287 			 * behavior. What the host sends gets put on the wire.
2288 			 */
2289 			if (txop == BG_OP_IN_CRC_OUT_CRC) {
2290 				txop = BG_OP_RAW_MODE;
2291 				rxop = BG_OP_RAW_MODE;
2292 			}
2293 		}
2294 
2295 
2296 		if (sc->prot_flags & SCSI_PROT_REF_CHECK)
2297 			bf_set(lpfc_sli4_sge_dif_re, diseed, checking);
2298 		else
2299 			bf_set(lpfc_sli4_sge_dif_re, diseed, 0);
2300 
2301 		/* setup DISEED with the rest of the info */
2302 		bf_set(lpfc_sli4_sge_dif_optx, diseed, txop);
2303 		bf_set(lpfc_sli4_sge_dif_oprx, diseed, rxop);
2304 
2305 		bf_set(lpfc_sli4_sge_dif_ai, diseed, 1);
2306 		bf_set(lpfc_sli4_sge_dif_me, diseed, 0);
2307 
2308 		/* Endianness conversion if necessary for DISEED */
2309 		diseed->word2 = cpu_to_le32(diseed->word2);
2310 		diseed->word3 = cpu_to_le32(diseed->word3);
2311 
2312 		/* advance sgl and increment bde count */
2313 		num_sge++;
2314 
2315 		sgl++;
2316 		j++;
2317 
2318 		/* setup the first BDE that points to protection buffer */
2319 		protphysaddr = sg_dma_address(sgpe) + protgroup_offset;
2320 		protgroup_len = sg_dma_len(sgpe) - protgroup_offset;
2321 
2322 		/* must be integer multiple of the DIF block length */
2323 		BUG_ON(protgroup_len % 8);
2324 
2325 		/* Now setup DIF SGE */
2326 		sgl->word2 = 0;
2327 		bf_set(lpfc_sli4_sge_type, sgl, LPFC_SGE_TYPE_DIF);
2328 		sgl->addr_hi = le32_to_cpu(putPaddrHigh(protphysaddr));
2329 		sgl->addr_lo = le32_to_cpu(putPaddrLow(protphysaddr));
2330 		sgl->word2 = cpu_to_le32(sgl->word2);
2331 		sgl->sge_len = 0;
2332 
2333 		protgrp_blks = protgroup_len / 8;
2334 		protgrp_bytes = protgrp_blks * blksize;
2335 
2336 		/* check if DIF SGE is crossing the 4K boundary; if so split */
2337 		if ((sgl->addr_lo & 0xfff) + protgroup_len > 0x1000) {
2338 			protgroup_remainder = 0x1000 - (sgl->addr_lo & 0xfff);
2339 			protgroup_offset += protgroup_remainder;
2340 			protgrp_blks = protgroup_remainder / 8;
2341 			protgrp_bytes = protgrp_blks * blksize;
2342 		} else {
2343 			protgroup_offset = 0;
2344 			curr_prot++;
2345 		}
2346 
2347 		num_sge++;
2348 
2349 		/* setup SGE's for data blocks associated with DIF data */
2350 		pgdone = 0;
2351 		subtotal = 0; /* total bytes processed for current prot grp */
2352 
2353 		sgl++;
2354 		j++;
2355 
2356 		while (!pgdone) {
2357 			/* Check to see if we ran out of space */
2358 			if ((num_sge >= phba->cfg_total_seg_cnt) &&
2359 			    !phba->cfg_xpsgl)
2360 				return num_sge + 1;
2361 
2362 			if (!sgde) {
2363 				lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
2364 					"9086 BLKGRD:%s Invalid data segment\n",
2365 						__func__);
2366 				return 0;
2367 			}
2368 
2369 			if (!((j + 1) % phba->border_sge_num)) {
2370 				sgl->word2 = 0;
2371 
2372 				/* set LSP type */
2373 				bf_set(lpfc_sli4_sge_type, sgl,
2374 				       LPFC_SGE_TYPE_LSP);
2375 
2376 				sgl_xtra = lpfc_get_sgl_per_hdwq(phba,
2377 								 lpfc_cmd);
2378 
2379 				if (unlikely(!sgl_xtra)) {
2380 					goto out;
2381 				} else {
2382 					sgl->addr_lo = cpu_to_le32(
2383 					  putPaddrLow(sgl_xtra->dma_phys_sgl));
2384 					sgl->addr_hi = cpu_to_le32(
2385 					  putPaddrHigh(sgl_xtra->dma_phys_sgl));
2386 				}
2387 
2388 				sgl->word2 = cpu_to_le32(sgl->word2);
2389 				sgl->sge_len = cpu_to_le32(
2390 						     phba->cfg_sg_dma_buf_size);
2391 
2392 				sgl = (struct sli4_sge *)sgl_xtra->dma_sgl;
2393 			} else {
2394 				dataphysaddr = sg_dma_address(sgde) +
2395 								   split_offset;
2396 
2397 				remainder = sg_dma_len(sgde) - split_offset;
2398 
2399 				if ((subtotal + remainder) <= protgrp_bytes) {
2400 					/* we can use this whole buffer */
2401 					dma_len = remainder;
2402 					split_offset = 0;
2403 
2404 					if ((subtotal + remainder) ==
2405 								  protgrp_bytes)
2406 						pgdone = 1;
2407 				} else {
2408 					/* must split this buffer with next
2409 					 * prot grp
2410 					 */
2411 					dma_len = protgrp_bytes - subtotal;
2412 					split_offset += dma_len;
2413 				}
2414 
2415 				subtotal += dma_len;
2416 
2417 				sgl->word2 = 0;
2418 				sgl->addr_lo = cpu_to_le32(putPaddrLow(
2419 								 dataphysaddr));
2420 				sgl->addr_hi = cpu_to_le32(putPaddrHigh(
2421 								 dataphysaddr));
2422 				bf_set(lpfc_sli4_sge_last, sgl, 0);
2423 				bf_set(lpfc_sli4_sge_offset, sgl, dma_offset);
2424 				bf_set(lpfc_sli4_sge_type, sgl,
2425 				       LPFC_SGE_TYPE_DATA);
2426 
2427 				sgl->sge_len = cpu_to_le32(dma_len);
2428 				dma_offset += dma_len;
2429 
2430 				num_sge++;
2431 				curr_data++;
2432 
2433 				if (split_offset) {
2434 					sgl++;
2435 					j++;
2436 					break;
2437 				}
2438 
2439 				/* Move to the next s/g segment if possible */
2440 				sgde = sg_next(sgde);
2441 
2442 				sgl++;
2443 			}
2444 
2445 			j++;
2446 		}
2447 
2448 		if (protgroup_offset) {
2449 			/* update the reference tag */
2450 			reftag += protgrp_blks;
2451 			continue;
2452 		}
2453 
2454 		/* are we done ? */
2455 		if (curr_prot == protcnt) {
2456 			/* mark the last SGL */
2457 			sgl--;
2458 			bf_set(lpfc_sli4_sge_last, sgl, 1);
2459 			alldone = 1;
2460 		} else if (curr_prot < protcnt) {
2461 			/* advance to next prot buffer */
2462 			sgpe = sg_next(sgpe);
2463 
2464 			/* update the reference tag */
2465 			reftag += protgrp_blks;
2466 		} else {
2467 			/* if we're here, we have a bug */
2468 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
2469 					"9085 BLKGRD: bug in %s\n", __func__);
2470 		}
2471 
2472 	} while (!alldone);
2473 
2474 out:
2475 
2476 	return num_sge;
2477 }
2478 
2479 /**
2480  * lpfc_prot_group_type - Get prtotection group type of SCSI command
2481  * @phba: The Hba for which this call is being executed.
2482  * @sc: pointer to scsi command we're working on
2483  *
2484  * Given a SCSI command that supports DIF, determine composition of protection
2485  * groups involved in setting up buffer lists
2486  *
2487  * Returns: Protection group type (with or without DIF)
2488  *
2489  **/
2490 static int
2491 lpfc_prot_group_type(struct lpfc_hba *phba, struct scsi_cmnd *sc)
2492 {
2493 	int ret = LPFC_PG_TYPE_INVALID;
2494 	unsigned char op = scsi_get_prot_op(sc);
2495 
2496 	switch (op) {
2497 	case SCSI_PROT_READ_STRIP:
2498 	case SCSI_PROT_WRITE_INSERT:
2499 		ret = LPFC_PG_TYPE_NO_DIF;
2500 		break;
2501 	case SCSI_PROT_READ_INSERT:
2502 	case SCSI_PROT_WRITE_STRIP:
2503 	case SCSI_PROT_READ_PASS:
2504 	case SCSI_PROT_WRITE_PASS:
2505 		ret = LPFC_PG_TYPE_DIF_BUF;
2506 		break;
2507 	default:
2508 		if (phba)
2509 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
2510 					"9021 Unsupported protection op:%d\n",
2511 					op);
2512 		break;
2513 	}
2514 	return ret;
2515 }
2516 
2517 /**
2518  * lpfc_bg_scsi_adjust_dl - Adjust SCSI data length for BlockGuard
2519  * @phba: The Hba for which this call is being executed.
2520  * @lpfc_cmd: The scsi buffer which is going to be adjusted.
2521  *
2522  * Adjust the data length to account for how much data
2523  * is actually on the wire.
2524  *
2525  * returns the adjusted data length
2526  **/
2527 static int
2528 lpfc_bg_scsi_adjust_dl(struct lpfc_hba *phba,
2529 		       struct lpfc_io_buf *lpfc_cmd)
2530 {
2531 	struct scsi_cmnd *sc = lpfc_cmd->pCmd;
2532 	int fcpdl;
2533 
2534 	fcpdl = scsi_bufflen(sc);
2535 
2536 	/* Check if there is protection data on the wire */
2537 	if (sc->sc_data_direction == DMA_FROM_DEVICE) {
2538 		/* Read check for protection data */
2539 		if (scsi_get_prot_op(sc) ==  SCSI_PROT_READ_INSERT)
2540 			return fcpdl;
2541 
2542 	} else {
2543 		/* Write check for protection data */
2544 		if (scsi_get_prot_op(sc) ==  SCSI_PROT_WRITE_STRIP)
2545 			return fcpdl;
2546 	}
2547 
2548 	/*
2549 	 * If we are in DIF Type 1 mode every data block has a 8 byte
2550 	 * DIF (trailer) attached to it. Must ajust FCP data length
2551 	 * to account for the protection data.
2552 	 */
2553 	fcpdl += (fcpdl / scsi_prot_interval(sc)) * 8;
2554 
2555 	return fcpdl;
2556 }
2557 
2558 /**
2559  * lpfc_bg_scsi_prep_dma_buf_s3 - DMA mapping for scsi buffer to SLI3 IF spec
2560  * @phba: The Hba for which this call is being executed.
2561  * @lpfc_cmd: The scsi buffer which is going to be prep'ed.
2562  *
2563  * This is the protection/DIF aware version of
2564  * lpfc_scsi_prep_dma_buf(). It may be a good idea to combine the
2565  * two functions eventually, but for now, it's here.
2566  * RETURNS 0 - SUCCESS,
2567  *         1 - Failed DMA map, retry.
2568  *         2 - Invalid scsi cmd or prot-type. Do not rety.
2569  **/
2570 static int
2571 lpfc_bg_scsi_prep_dma_buf_s3(struct lpfc_hba *phba,
2572 		struct lpfc_io_buf *lpfc_cmd)
2573 {
2574 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
2575 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
2576 	struct ulp_bde64 *bpl = (struct ulp_bde64 *)lpfc_cmd->dma_sgl;
2577 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
2578 	uint32_t num_bde = 0;
2579 	int datasegcnt, protsegcnt, datadir = scsi_cmnd->sc_data_direction;
2580 	int prot_group_type = 0;
2581 	int fcpdl;
2582 	int ret = 1;
2583 	struct lpfc_vport *vport = phba->pport;
2584 
2585 	/*
2586 	 * Start the lpfc command prep by bumping the bpl beyond fcp_cmnd
2587 	 *  fcp_rsp regions to the first data bde entry
2588 	 */
2589 	bpl += 2;
2590 	if (scsi_sg_count(scsi_cmnd)) {
2591 		/*
2592 		 * The driver stores the segment count returned from dma_map_sg
2593 		 * because this a count of dma-mappings used to map the use_sg
2594 		 * pages.  They are not guaranteed to be the same for those
2595 		 * architectures that implement an IOMMU.
2596 		 */
2597 		datasegcnt = dma_map_sg(&phba->pcidev->dev,
2598 					scsi_sglist(scsi_cmnd),
2599 					scsi_sg_count(scsi_cmnd), datadir);
2600 		if (unlikely(!datasegcnt))
2601 			return 1;
2602 
2603 		lpfc_cmd->seg_cnt = datasegcnt;
2604 
2605 		/* First check if data segment count from SCSI Layer is good */
2606 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt) {
2607 			WARN_ON_ONCE(lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt);
2608 			ret = 2;
2609 			goto err;
2610 		}
2611 
2612 		prot_group_type = lpfc_prot_group_type(phba, scsi_cmnd);
2613 
2614 		switch (prot_group_type) {
2615 		case LPFC_PG_TYPE_NO_DIF:
2616 
2617 			/* Here we need to add a PDE5 and PDE6 to the count */
2618 			if ((lpfc_cmd->seg_cnt + 2) > phba->cfg_total_seg_cnt) {
2619 				ret = 2;
2620 				goto err;
2621 			}
2622 
2623 			num_bde = lpfc_bg_setup_bpl(phba, scsi_cmnd, bpl,
2624 					datasegcnt);
2625 			/* we should have 2 or more entries in buffer list */
2626 			if (num_bde < 2) {
2627 				ret = 2;
2628 				goto err;
2629 			}
2630 			break;
2631 
2632 		case LPFC_PG_TYPE_DIF_BUF:
2633 			/*
2634 			 * This type indicates that protection buffers are
2635 			 * passed to the driver, so that needs to be prepared
2636 			 * for DMA
2637 			 */
2638 			protsegcnt = dma_map_sg(&phba->pcidev->dev,
2639 					scsi_prot_sglist(scsi_cmnd),
2640 					scsi_prot_sg_count(scsi_cmnd), datadir);
2641 			if (unlikely(!protsegcnt)) {
2642 				scsi_dma_unmap(scsi_cmnd);
2643 				return 1;
2644 			}
2645 
2646 			lpfc_cmd->prot_seg_cnt = protsegcnt;
2647 
2648 			/*
2649 			 * There is a minimun of 4 BPLs used for every
2650 			 * protection data segment.
2651 			 */
2652 			if ((lpfc_cmd->prot_seg_cnt * 4) >
2653 			    (phba->cfg_total_seg_cnt - 2)) {
2654 				ret = 2;
2655 				goto err;
2656 			}
2657 
2658 			num_bde = lpfc_bg_setup_bpl_prot(phba, scsi_cmnd, bpl,
2659 					datasegcnt, protsegcnt);
2660 			/* we should have 3 or more entries in buffer list */
2661 			if ((num_bde < 3) ||
2662 			    (num_bde > phba->cfg_total_seg_cnt)) {
2663 				ret = 2;
2664 				goto err;
2665 			}
2666 			break;
2667 
2668 		case LPFC_PG_TYPE_INVALID:
2669 		default:
2670 			scsi_dma_unmap(scsi_cmnd);
2671 			lpfc_cmd->seg_cnt = 0;
2672 
2673 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
2674 					"9022 Unexpected protection group %i\n",
2675 					prot_group_type);
2676 			return 2;
2677 		}
2678 	}
2679 
2680 	/*
2681 	 * Finish initializing those IOCB fields that are dependent on the
2682 	 * scsi_cmnd request_buffer.  Note that the bdeSize is explicitly
2683 	 * reinitialized since all iocb memory resources are used many times
2684 	 * for transmit, receive, and continuation bpl's.
2685 	 */
2686 	iocb_cmd->un.fcpi64.bdl.bdeSize = (2 * sizeof(struct ulp_bde64));
2687 	iocb_cmd->un.fcpi64.bdl.bdeSize += (num_bde * sizeof(struct ulp_bde64));
2688 	iocb_cmd->ulpBdeCount = 1;
2689 	iocb_cmd->ulpLe = 1;
2690 
2691 	fcpdl = lpfc_bg_scsi_adjust_dl(phba, lpfc_cmd);
2692 	fcp_cmnd->fcpDl = be32_to_cpu(fcpdl);
2693 
2694 	/*
2695 	 * Due to difference in data length between DIF/non-DIF paths,
2696 	 * we need to set word 4 of IOCB here
2697 	 */
2698 	iocb_cmd->un.fcpi.fcpi_parm = fcpdl;
2699 
2700 	/*
2701 	 * For First burst, we may need to adjust the initial transfer
2702 	 * length for DIF
2703 	 */
2704 	if (iocb_cmd->un.fcpi.fcpi_XRdy &&
2705 	    (fcpdl < vport->cfg_first_burst_size))
2706 		iocb_cmd->un.fcpi.fcpi_XRdy = fcpdl;
2707 
2708 	return 0;
2709 err:
2710 	if (lpfc_cmd->seg_cnt)
2711 		scsi_dma_unmap(scsi_cmnd);
2712 	if (lpfc_cmd->prot_seg_cnt)
2713 		dma_unmap_sg(&phba->pcidev->dev, scsi_prot_sglist(scsi_cmnd),
2714 			     scsi_prot_sg_count(scsi_cmnd),
2715 			     scsi_cmnd->sc_data_direction);
2716 
2717 	lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
2718 			"9023 Cannot setup S/G List for HBA"
2719 			"IO segs %d/%d BPL %d SCSI %d: %d %d\n",
2720 			lpfc_cmd->seg_cnt, lpfc_cmd->prot_seg_cnt,
2721 			phba->cfg_total_seg_cnt, phba->cfg_sg_seg_cnt,
2722 			prot_group_type, num_bde);
2723 
2724 	lpfc_cmd->seg_cnt = 0;
2725 	lpfc_cmd->prot_seg_cnt = 0;
2726 	return ret;
2727 }
2728 
2729 /*
2730  * This function calcuates the T10 DIF guard tag
2731  * on the specified data using a CRC algorithmn
2732  * using crc_t10dif.
2733  */
2734 static uint16_t
2735 lpfc_bg_crc(uint8_t *data, int count)
2736 {
2737 	uint16_t crc = 0;
2738 	uint16_t x;
2739 
2740 	crc = crc_t10dif(data, count);
2741 	x = cpu_to_be16(crc);
2742 	return x;
2743 }
2744 
2745 /*
2746  * This function calcuates the T10 DIF guard tag
2747  * on the specified data using a CSUM algorithmn
2748  * using ip_compute_csum.
2749  */
2750 static uint16_t
2751 lpfc_bg_csum(uint8_t *data, int count)
2752 {
2753 	uint16_t ret;
2754 
2755 	ret = ip_compute_csum(data, count);
2756 	return ret;
2757 }
2758 
2759 /*
2760  * This function examines the protection data to try to determine
2761  * what type of T10-DIF error occurred.
2762  */
2763 static void
2764 lpfc_calc_bg_err(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd)
2765 {
2766 	struct scatterlist *sgpe; /* s/g prot entry */
2767 	struct scatterlist *sgde; /* s/g data entry */
2768 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
2769 	struct scsi_dif_tuple *src = NULL;
2770 	uint8_t *data_src = NULL;
2771 	uint16_t guard_tag;
2772 	uint16_t start_app_tag, app_tag;
2773 	uint32_t start_ref_tag, ref_tag;
2774 	int prot, protsegcnt;
2775 	int err_type, len, data_len;
2776 	int chk_ref, chk_app, chk_guard;
2777 	uint16_t sum;
2778 	unsigned blksize;
2779 
2780 	err_type = BGS_GUARD_ERR_MASK;
2781 	sum = 0;
2782 	guard_tag = 0;
2783 
2784 	/* First check to see if there is protection data to examine */
2785 	prot = scsi_get_prot_op(cmd);
2786 	if ((prot == SCSI_PROT_READ_STRIP) ||
2787 	    (prot == SCSI_PROT_WRITE_INSERT) ||
2788 	    (prot == SCSI_PROT_NORMAL))
2789 		goto out;
2790 
2791 	/* Currently the driver just supports ref_tag and guard_tag checking */
2792 	chk_ref = 1;
2793 	chk_app = 0;
2794 	chk_guard = 0;
2795 
2796 	/* Setup a ptr to the protection data provided by the SCSI host */
2797 	sgpe = scsi_prot_sglist(cmd);
2798 	protsegcnt = lpfc_cmd->prot_seg_cnt;
2799 
2800 	if (sgpe && protsegcnt) {
2801 
2802 		/*
2803 		 * We will only try to verify guard tag if the segment
2804 		 * data length is a multiple of the blksize.
2805 		 */
2806 		sgde = scsi_sglist(cmd);
2807 		blksize = scsi_prot_interval(cmd);
2808 		data_src = (uint8_t *)sg_virt(sgde);
2809 		data_len = sgde->length;
2810 		if ((data_len & (blksize - 1)) == 0)
2811 			chk_guard = 1;
2812 
2813 		src = (struct scsi_dif_tuple *)sg_virt(sgpe);
2814 		start_ref_tag = scsi_prot_ref_tag(cmd);
2815 		if (start_ref_tag == LPFC_INVALID_REFTAG)
2816 			goto out;
2817 		start_app_tag = src->app_tag;
2818 		len = sgpe->length;
2819 		while (src && protsegcnt) {
2820 			while (len) {
2821 
2822 				/*
2823 				 * First check to see if a protection data
2824 				 * check is valid
2825 				 */
2826 				if ((src->ref_tag == T10_PI_REF_ESCAPE) ||
2827 				    (src->app_tag == T10_PI_APP_ESCAPE)) {
2828 					start_ref_tag++;
2829 					goto skipit;
2830 				}
2831 
2832 				/* First Guard Tag checking */
2833 				if (chk_guard) {
2834 					guard_tag = src->guard_tag;
2835 					if (cmd->prot_flags
2836 					    & SCSI_PROT_IP_CHECKSUM)
2837 						sum = lpfc_bg_csum(data_src,
2838 								   blksize);
2839 					else
2840 						sum = lpfc_bg_crc(data_src,
2841 								  blksize);
2842 					if ((guard_tag != sum)) {
2843 						err_type = BGS_GUARD_ERR_MASK;
2844 						goto out;
2845 					}
2846 				}
2847 
2848 				/* Reference Tag checking */
2849 				ref_tag = be32_to_cpu(src->ref_tag);
2850 				if (chk_ref && (ref_tag != start_ref_tag)) {
2851 					err_type = BGS_REFTAG_ERR_MASK;
2852 					goto out;
2853 				}
2854 				start_ref_tag++;
2855 
2856 				/* App Tag checking */
2857 				app_tag = src->app_tag;
2858 				if (chk_app && (app_tag != start_app_tag)) {
2859 					err_type = BGS_APPTAG_ERR_MASK;
2860 					goto out;
2861 				}
2862 skipit:
2863 				len -= sizeof(struct scsi_dif_tuple);
2864 				if (len < 0)
2865 					len = 0;
2866 				src++;
2867 
2868 				data_src += blksize;
2869 				data_len -= blksize;
2870 
2871 				/*
2872 				 * Are we at the end of the Data segment?
2873 				 * The data segment is only used for Guard
2874 				 * tag checking.
2875 				 */
2876 				if (chk_guard && (data_len == 0)) {
2877 					chk_guard = 0;
2878 					sgde = sg_next(sgde);
2879 					if (!sgde)
2880 						goto out;
2881 
2882 					data_src = (uint8_t *)sg_virt(sgde);
2883 					data_len = sgde->length;
2884 					if ((data_len & (blksize - 1)) == 0)
2885 						chk_guard = 1;
2886 				}
2887 			}
2888 
2889 			/* Goto the next Protection data segment */
2890 			sgpe = sg_next(sgpe);
2891 			if (sgpe) {
2892 				src = (struct scsi_dif_tuple *)sg_virt(sgpe);
2893 				len = sgpe->length;
2894 			} else {
2895 				src = NULL;
2896 			}
2897 			protsegcnt--;
2898 		}
2899 	}
2900 out:
2901 	if (err_type == BGS_GUARD_ERR_MASK) {
2902 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x1);
2903 		set_host_byte(cmd, DID_ABORT);
2904 		phba->bg_guard_err_cnt++;
2905 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
2906 				"9069 BLKGRD: reftag %x grd_tag err %x != %x\n",
2907 				scsi_prot_ref_tag(cmd),
2908 				sum, guard_tag);
2909 
2910 	} else if (err_type == BGS_REFTAG_ERR_MASK) {
2911 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x3);
2912 		set_host_byte(cmd, DID_ABORT);
2913 
2914 		phba->bg_reftag_err_cnt++;
2915 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
2916 				"9066 BLKGRD: reftag %x ref_tag err %x != %x\n",
2917 				scsi_prot_ref_tag(cmd),
2918 				ref_tag, start_ref_tag);
2919 
2920 	} else if (err_type == BGS_APPTAG_ERR_MASK) {
2921 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x2);
2922 		set_host_byte(cmd, DID_ABORT);
2923 
2924 		phba->bg_apptag_err_cnt++;
2925 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
2926 				"9041 BLKGRD: reftag %x app_tag err %x != %x\n",
2927 				scsi_prot_ref_tag(cmd),
2928 				app_tag, start_app_tag);
2929 	}
2930 }
2931 
2932 /*
2933  * This function checks for BlockGuard errors detected by
2934  * the HBA.  In case of errors, the ASC/ASCQ fields in the
2935  * sense buffer will be set accordingly, paired with
2936  * ILLEGAL_REQUEST to signal to the kernel that the HBA
2937  * detected corruption.
2938  *
2939  * Returns:
2940  *  0 - No error found
2941  *  1 - BlockGuard error found
2942  * -1 - Internal error (bad profile, ...etc)
2943  */
2944 static int
2945 lpfc_sli4_parse_bg_err(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd,
2946 		       struct lpfc_wcqe_complete *wcqe)
2947 {
2948 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
2949 	int ret = 0;
2950 	u32 status = bf_get(lpfc_wcqe_c_status, wcqe);
2951 	u32 bghm = 0;
2952 	u32 bgstat = 0;
2953 	u64 failing_sector = 0;
2954 
2955 	if (status == CQE_STATUS_DI_ERROR) {
2956 		if (bf_get(lpfc_wcqe_c_bg_ge, wcqe)) /* Guard Check failed */
2957 			bgstat |= BGS_GUARD_ERR_MASK;
2958 		if (bf_get(lpfc_wcqe_c_bg_ae, wcqe)) /* AppTag Check failed */
2959 			bgstat |= BGS_APPTAG_ERR_MASK;
2960 		if (bf_get(lpfc_wcqe_c_bg_re, wcqe)) /* RefTag Check failed */
2961 			bgstat |= BGS_REFTAG_ERR_MASK;
2962 
2963 		/* Check to see if there was any good data before the error */
2964 		if (bf_get(lpfc_wcqe_c_bg_tdpv, wcqe)) {
2965 			bgstat |= BGS_HI_WATER_MARK_PRESENT_MASK;
2966 			bghm = wcqe->total_data_placed;
2967 		}
2968 
2969 		/*
2970 		 * Set ALL the error bits to indicate we don't know what
2971 		 * type of error it is.
2972 		 */
2973 		if (!bgstat)
2974 			bgstat |= (BGS_REFTAG_ERR_MASK | BGS_APPTAG_ERR_MASK |
2975 				BGS_GUARD_ERR_MASK);
2976 	}
2977 
2978 	if (lpfc_bgs_get_guard_err(bgstat)) {
2979 		ret = 1;
2980 
2981 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x1);
2982 		set_host_byte(cmd, DID_ABORT);
2983 		phba->bg_guard_err_cnt++;
2984 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
2985 				"9059 BLKGRD: Guard Tag error in cmd"
2986 				" 0x%x lba 0x%llx blk cnt 0x%x "
2987 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
2988 				(unsigned long long)scsi_get_lba(cmd),
2989 				scsi_logical_block_count(cmd), bgstat, bghm);
2990 	}
2991 
2992 	if (lpfc_bgs_get_reftag_err(bgstat)) {
2993 		ret = 1;
2994 
2995 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x3);
2996 		set_host_byte(cmd, DID_ABORT);
2997 
2998 		phba->bg_reftag_err_cnt++;
2999 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3000 				"9060 BLKGRD: Ref Tag error in cmd"
3001 				" 0x%x lba 0x%llx blk cnt 0x%x "
3002 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3003 				(unsigned long long)scsi_get_lba(cmd),
3004 				scsi_logical_block_count(cmd), bgstat, bghm);
3005 	}
3006 
3007 	if (lpfc_bgs_get_apptag_err(bgstat)) {
3008 		ret = 1;
3009 
3010 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x2);
3011 		set_host_byte(cmd, DID_ABORT);
3012 
3013 		phba->bg_apptag_err_cnt++;
3014 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3015 				"9062 BLKGRD: App Tag error in cmd"
3016 				" 0x%x lba 0x%llx blk cnt 0x%x "
3017 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3018 				(unsigned long long)scsi_get_lba(cmd),
3019 				scsi_logical_block_count(cmd), bgstat, bghm);
3020 	}
3021 
3022 	if (lpfc_bgs_get_hi_water_mark_present(bgstat)) {
3023 		/*
3024 		 * setup sense data descriptor 0 per SPC-4 as an information
3025 		 * field, and put the failing LBA in it.
3026 		 * This code assumes there was also a guard/app/ref tag error
3027 		 * indication.
3028 		 */
3029 		cmd->sense_buffer[7] = 0xc;   /* Additional sense length */
3030 		cmd->sense_buffer[8] = 0;     /* Information descriptor type */
3031 		cmd->sense_buffer[9] = 0xa;   /* Additional descriptor length */
3032 		cmd->sense_buffer[10] = 0x80; /* Validity bit */
3033 
3034 		/* bghm is a "on the wire" FC frame based count */
3035 		switch (scsi_get_prot_op(cmd)) {
3036 		case SCSI_PROT_READ_INSERT:
3037 		case SCSI_PROT_WRITE_STRIP:
3038 			bghm /= cmd->device->sector_size;
3039 			break;
3040 		case SCSI_PROT_READ_STRIP:
3041 		case SCSI_PROT_WRITE_INSERT:
3042 		case SCSI_PROT_READ_PASS:
3043 		case SCSI_PROT_WRITE_PASS:
3044 			bghm /= (cmd->device->sector_size +
3045 				sizeof(struct scsi_dif_tuple));
3046 			break;
3047 		}
3048 
3049 		failing_sector = scsi_get_lba(cmd);
3050 		failing_sector += bghm;
3051 
3052 		/* Descriptor Information */
3053 		put_unaligned_be64(failing_sector, &cmd->sense_buffer[12]);
3054 	}
3055 
3056 	if (!ret) {
3057 		/* No error was reported - problem in FW? */
3058 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3059 				"9068 BLKGRD: Unknown error in cmd"
3060 				" 0x%x lba 0x%llx blk cnt 0x%x "
3061 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3062 				(unsigned long long)scsi_get_lba(cmd),
3063 				scsi_logical_block_count(cmd), bgstat, bghm);
3064 
3065 		/* Calculate what type of error it was */
3066 		lpfc_calc_bg_err(phba, lpfc_cmd);
3067 	}
3068 	return ret;
3069 }
3070 
3071 /*
3072  * This function checks for BlockGuard errors detected by
3073  * the HBA.  In case of errors, the ASC/ASCQ fields in the
3074  * sense buffer will be set accordingly, paired with
3075  * ILLEGAL_REQUEST to signal to the kernel that the HBA
3076  * detected corruption.
3077  *
3078  * Returns:
3079  *  0 - No error found
3080  *  1 - BlockGuard error found
3081  * -1 - Internal error (bad profile, ...etc)
3082  */
3083 static int
3084 lpfc_parse_bg_err(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd,
3085 		  struct lpfc_iocbq *pIocbOut)
3086 {
3087 	struct scsi_cmnd *cmd = lpfc_cmd->pCmd;
3088 	struct sli3_bg_fields *bgf = &pIocbOut->iocb.unsli3.sli3_bg;
3089 	int ret = 0;
3090 	uint32_t bghm = bgf->bghm;
3091 	uint32_t bgstat = bgf->bgstat;
3092 	uint64_t failing_sector = 0;
3093 
3094 	if (lpfc_bgs_get_invalid_prof(bgstat)) {
3095 		cmd->result = DID_ERROR << 16;
3096 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3097 				"9072 BLKGRD: Invalid BG Profile in cmd "
3098 				"0x%x reftag 0x%x blk cnt 0x%x "
3099 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3100 				scsi_prot_ref_tag(cmd),
3101 				scsi_logical_block_count(cmd), bgstat, bghm);
3102 		ret = (-1);
3103 		goto out;
3104 	}
3105 
3106 	if (lpfc_bgs_get_uninit_dif_block(bgstat)) {
3107 		cmd->result = DID_ERROR << 16;
3108 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3109 				"9073 BLKGRD: Invalid BG PDIF Block in cmd "
3110 				"0x%x reftag 0x%x blk cnt 0x%x "
3111 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3112 				scsi_prot_ref_tag(cmd),
3113 				scsi_logical_block_count(cmd), bgstat, bghm);
3114 		ret = (-1);
3115 		goto out;
3116 	}
3117 
3118 	if (lpfc_bgs_get_guard_err(bgstat)) {
3119 		ret = 1;
3120 
3121 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x1);
3122 		set_host_byte(cmd, DID_ABORT);
3123 		phba->bg_guard_err_cnt++;
3124 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3125 				"9055 BLKGRD: Guard Tag error in cmd "
3126 				"0x%x reftag 0x%x blk cnt 0x%x "
3127 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3128 				scsi_prot_ref_tag(cmd),
3129 				scsi_logical_block_count(cmd), bgstat, bghm);
3130 	}
3131 
3132 	if (lpfc_bgs_get_reftag_err(bgstat)) {
3133 		ret = 1;
3134 
3135 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x3);
3136 		set_host_byte(cmd, DID_ABORT);
3137 
3138 		phba->bg_reftag_err_cnt++;
3139 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3140 				"9056 BLKGRD: Ref Tag error in cmd "
3141 				"0x%x reftag 0x%x blk cnt 0x%x "
3142 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3143 				scsi_prot_ref_tag(cmd),
3144 				scsi_logical_block_count(cmd), bgstat, bghm);
3145 	}
3146 
3147 	if (lpfc_bgs_get_apptag_err(bgstat)) {
3148 		ret = 1;
3149 
3150 		scsi_build_sense(cmd, 1, ILLEGAL_REQUEST, 0x10, 0x2);
3151 		set_host_byte(cmd, DID_ABORT);
3152 
3153 		phba->bg_apptag_err_cnt++;
3154 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3155 				"9061 BLKGRD: App Tag error in cmd "
3156 				"0x%x reftag 0x%x blk cnt 0x%x "
3157 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3158 				scsi_prot_ref_tag(cmd),
3159 				scsi_logical_block_count(cmd), bgstat, bghm);
3160 	}
3161 
3162 	if (lpfc_bgs_get_hi_water_mark_present(bgstat)) {
3163 		/*
3164 		 * setup sense data descriptor 0 per SPC-4 as an information
3165 		 * field, and put the failing LBA in it.
3166 		 * This code assumes there was also a guard/app/ref tag error
3167 		 * indication.
3168 		 */
3169 		cmd->sense_buffer[7] = 0xc;   /* Additional sense length */
3170 		cmd->sense_buffer[8] = 0;     /* Information descriptor type */
3171 		cmd->sense_buffer[9] = 0xa;   /* Additional descriptor length */
3172 		cmd->sense_buffer[10] = 0x80; /* Validity bit */
3173 
3174 		/* bghm is a "on the wire" FC frame based count */
3175 		switch (scsi_get_prot_op(cmd)) {
3176 		case SCSI_PROT_READ_INSERT:
3177 		case SCSI_PROT_WRITE_STRIP:
3178 			bghm /= cmd->device->sector_size;
3179 			break;
3180 		case SCSI_PROT_READ_STRIP:
3181 		case SCSI_PROT_WRITE_INSERT:
3182 		case SCSI_PROT_READ_PASS:
3183 		case SCSI_PROT_WRITE_PASS:
3184 			bghm /= (cmd->device->sector_size +
3185 				sizeof(struct scsi_dif_tuple));
3186 			break;
3187 		}
3188 
3189 		failing_sector = scsi_get_lba(cmd);
3190 		failing_sector += bghm;
3191 
3192 		/* Descriptor Information */
3193 		put_unaligned_be64(failing_sector, &cmd->sense_buffer[12]);
3194 	}
3195 
3196 	if (!ret) {
3197 		/* No error was reported - problem in FW? */
3198 		lpfc_printf_log(phba, KERN_WARNING, LOG_FCP | LOG_BG,
3199 				"9057 BLKGRD: Unknown error in cmd "
3200 				"0x%x reftag 0x%x blk cnt 0x%x "
3201 				"bgstat=x%x bghm=x%x\n", cmd->cmnd[0],
3202 				scsi_prot_ref_tag(cmd),
3203 				scsi_logical_block_count(cmd), bgstat, bghm);
3204 
3205 		/* Calculate what type of error it was */
3206 		lpfc_calc_bg_err(phba, lpfc_cmd);
3207 	}
3208 out:
3209 	return ret;
3210 }
3211 
3212 /**
3213  * lpfc_scsi_prep_dma_buf_s4 - DMA mapping for scsi buffer to SLI4 IF spec
3214  * @phba: The Hba for which this call is being executed.
3215  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3216  *
3217  * This routine does the pci dma mapping for scatter-gather list of scsi cmnd
3218  * field of @lpfc_cmd for device with SLI-4 interface spec.
3219  *
3220  * Return codes:
3221  *	2 - Error - Do not retry
3222  *	1 - Error - Retry
3223  *	0 - Success
3224  **/
3225 static int
3226 lpfc_scsi_prep_dma_buf_s4(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd)
3227 {
3228 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
3229 	struct scatterlist *sgel = NULL;
3230 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
3231 	struct sli4_sge *sgl = (struct sli4_sge *)lpfc_cmd->dma_sgl;
3232 	struct sli4_sge *first_data_sgl;
3233 	struct lpfc_iocbq *pwqeq = &lpfc_cmd->cur_iocbq;
3234 	struct lpfc_vport *vport = phba->pport;
3235 	union lpfc_wqe128 *wqe = &pwqeq->wqe;
3236 	dma_addr_t physaddr;
3237 	uint32_t dma_len;
3238 	uint32_t dma_offset = 0;
3239 	int nseg, i, j;
3240 	struct ulp_bde64 *bde;
3241 	bool lsp_just_set = false;
3242 	struct sli4_hybrid_sgl *sgl_xtra = NULL;
3243 
3244 	/*
3245 	 * There are three possibilities here - use scatter-gather segment, use
3246 	 * the single mapping, or neither.  Start the lpfc command prep by
3247 	 * bumping the bpl beyond the fcp_cmnd and fcp_rsp regions to the first
3248 	 * data bde entry.
3249 	 */
3250 	if (scsi_sg_count(scsi_cmnd)) {
3251 		/*
3252 		 * The driver stores the segment count returned from dma_map_sg
3253 		 * because this a count of dma-mappings used to map the use_sg
3254 		 * pages.  They are not guaranteed to be the same for those
3255 		 * architectures that implement an IOMMU.
3256 		 */
3257 
3258 		nseg = scsi_dma_map(scsi_cmnd);
3259 		if (unlikely(nseg <= 0))
3260 			return 1;
3261 		sgl += 1;
3262 		/* clear the last flag in the fcp_rsp map entry */
3263 		sgl->word2 = le32_to_cpu(sgl->word2);
3264 		bf_set(lpfc_sli4_sge_last, sgl, 0);
3265 		sgl->word2 = cpu_to_le32(sgl->word2);
3266 		sgl += 1;
3267 		first_data_sgl = sgl;
3268 		lpfc_cmd->seg_cnt = nseg;
3269 		if (!phba->cfg_xpsgl &&
3270 		    lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt) {
3271 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
3272 					"9074 BLKGRD:"
3273 					" %s: Too many sg segments from "
3274 					"dma_map_sg.  Config %d, seg_cnt %d\n",
3275 					__func__, phba->cfg_sg_seg_cnt,
3276 					lpfc_cmd->seg_cnt);
3277 			WARN_ON_ONCE(lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt);
3278 			lpfc_cmd->seg_cnt = 0;
3279 			scsi_dma_unmap(scsi_cmnd);
3280 			return 2;
3281 		}
3282 
3283 		/*
3284 		 * The driver established a maximum scatter-gather segment count
3285 		 * during probe that limits the number of sg elements in any
3286 		 * single scsi command.  Just run through the seg_cnt and format
3287 		 * the sge's.
3288 		 * When using SLI-3 the driver will try to fit all the BDEs into
3289 		 * the IOCB. If it can't then the BDEs get added to a BPL as it
3290 		 * does for SLI-2 mode.
3291 		 */
3292 
3293 		/* for tracking segment boundaries */
3294 		sgel = scsi_sglist(scsi_cmnd);
3295 		j = 2;
3296 		for (i = 0; i < nseg; i++) {
3297 			sgl->word2 = 0;
3298 			if (nseg == 1) {
3299 				bf_set(lpfc_sli4_sge_last, sgl, 1);
3300 				bf_set(lpfc_sli4_sge_type, sgl,
3301 				       LPFC_SGE_TYPE_DATA);
3302 			} else {
3303 				bf_set(lpfc_sli4_sge_last, sgl, 0);
3304 
3305 				/* do we need to expand the segment */
3306 				if (!lsp_just_set &&
3307 				    !((j + 1) % phba->border_sge_num) &&
3308 				    ((nseg - 1) != i)) {
3309 					/* set LSP type */
3310 					bf_set(lpfc_sli4_sge_type, sgl,
3311 					       LPFC_SGE_TYPE_LSP);
3312 
3313 					sgl_xtra = lpfc_get_sgl_per_hdwq(
3314 							phba, lpfc_cmd);
3315 
3316 					if (unlikely(!sgl_xtra)) {
3317 						lpfc_cmd->seg_cnt = 0;
3318 						scsi_dma_unmap(scsi_cmnd);
3319 						return 1;
3320 					}
3321 					sgl->addr_lo = cpu_to_le32(putPaddrLow(
3322 						       sgl_xtra->dma_phys_sgl));
3323 					sgl->addr_hi = cpu_to_le32(putPaddrHigh(
3324 						       sgl_xtra->dma_phys_sgl));
3325 
3326 				} else {
3327 					bf_set(lpfc_sli4_sge_type, sgl,
3328 					       LPFC_SGE_TYPE_DATA);
3329 				}
3330 			}
3331 
3332 			if (!(bf_get(lpfc_sli4_sge_type, sgl) &
3333 				     LPFC_SGE_TYPE_LSP)) {
3334 				if ((nseg - 1) == i)
3335 					bf_set(lpfc_sli4_sge_last, sgl, 1);
3336 
3337 				physaddr = sg_dma_address(sgel);
3338 				dma_len = sg_dma_len(sgel);
3339 				sgl->addr_lo = cpu_to_le32(putPaddrLow(
3340 							   physaddr));
3341 				sgl->addr_hi = cpu_to_le32(putPaddrHigh(
3342 							   physaddr));
3343 
3344 				bf_set(lpfc_sli4_sge_offset, sgl, dma_offset);
3345 				sgl->word2 = cpu_to_le32(sgl->word2);
3346 				sgl->sge_len = cpu_to_le32(dma_len);
3347 
3348 				dma_offset += dma_len;
3349 				sgel = sg_next(sgel);
3350 
3351 				sgl++;
3352 				lsp_just_set = false;
3353 
3354 			} else {
3355 				sgl->word2 = cpu_to_le32(sgl->word2);
3356 				sgl->sge_len = cpu_to_le32(
3357 						     phba->cfg_sg_dma_buf_size);
3358 
3359 				sgl = (struct sli4_sge *)sgl_xtra->dma_sgl;
3360 				i = i - 1;
3361 
3362 				lsp_just_set = true;
3363 			}
3364 
3365 			j++;
3366 		}
3367 
3368 		/* PBDE support for first data SGE only.
3369 		 * For FCoE, we key off Performance Hints.
3370 		 * For FC, we key off lpfc_enable_pbde.
3371 		 */
3372 		if (nseg == 1 &&
3373 		    ((phba->sli3_options & LPFC_SLI4_PERFH_ENABLED) ||
3374 		     phba->cfg_enable_pbde)) {
3375 			/* Words 13-15 */
3376 			bde = (struct ulp_bde64 *)
3377 				&wqe->words[13];
3378 			bde->addrLow = first_data_sgl->addr_lo;
3379 			bde->addrHigh = first_data_sgl->addr_hi;
3380 			bde->tus.f.bdeSize =
3381 					le32_to_cpu(first_data_sgl->sge_len);
3382 			bde->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
3383 			bde->tus.w = cpu_to_le32(bde->tus.w);
3384 
3385 			/* Word 11 - set PBDE bit */
3386 			bf_set(wqe_pbde, &wqe->generic.wqe_com, 1);
3387 		} else {
3388 			memset(&wqe->words[13], 0, (sizeof(uint32_t) * 3));
3389 			/* Word 11 - PBDE bit disabled by default template */
3390 		}
3391 	} else {
3392 		sgl += 1;
3393 		/* set the last flag in the fcp_rsp map entry */
3394 		sgl->word2 = le32_to_cpu(sgl->word2);
3395 		bf_set(lpfc_sli4_sge_last, sgl, 1);
3396 		sgl->word2 = cpu_to_le32(sgl->word2);
3397 
3398 		if ((phba->sli3_options & LPFC_SLI4_PERFH_ENABLED) ||
3399 		    phba->cfg_enable_pbde) {
3400 			bde = (struct ulp_bde64 *)
3401 				&wqe->words[13];
3402 			memset(bde, 0, (sizeof(uint32_t) * 3));
3403 		}
3404 	}
3405 
3406 	/*
3407 	 * Finish initializing those IOCB fields that are dependent on the
3408 	 * scsi_cmnd request_buffer.  Note that for SLI-2 the bdeSize is
3409 	 * explicitly reinitialized.
3410 	 * all iocb memory resources are reused.
3411 	 */
3412 	fcp_cmnd->fcpDl = cpu_to_be32(scsi_bufflen(scsi_cmnd));
3413 	/* Set first-burst provided it was successfully negotiated */
3414 	if (!(phba->hba_flag & HBA_FCOE_MODE) &&
3415 	    vport->cfg_first_burst_size &&
3416 	    scsi_cmnd->sc_data_direction == DMA_TO_DEVICE) {
3417 		u32 init_len, total_len;
3418 
3419 		total_len = be32_to_cpu(fcp_cmnd->fcpDl);
3420 		init_len = min(total_len, vport->cfg_first_burst_size);
3421 
3422 		/* Word 4 & 5 */
3423 		wqe->fcp_iwrite.initial_xfer_len = init_len;
3424 		wqe->fcp_iwrite.total_xfer_len = total_len;
3425 	} else {
3426 		/* Word 4 */
3427 		wqe->fcp_iwrite.total_xfer_len =
3428 			be32_to_cpu(fcp_cmnd->fcpDl);
3429 	}
3430 
3431 	/*
3432 	 * If the OAS driver feature is enabled and the lun is enabled for
3433 	 * OAS, set the oas iocb related flags.
3434 	 */
3435 	if ((phba->cfg_fof) && ((struct lpfc_device_data *)
3436 		scsi_cmnd->device->hostdata)->oas_enabled) {
3437 		lpfc_cmd->cur_iocbq.iocb_flag |= (LPFC_IO_OAS | LPFC_IO_FOF);
3438 		lpfc_cmd->cur_iocbq.priority = ((struct lpfc_device_data *)
3439 			scsi_cmnd->device->hostdata)->priority;
3440 
3441 		/* Word 10 */
3442 		bf_set(wqe_oas, &wqe->generic.wqe_com, 1);
3443 		bf_set(wqe_ccpe, &wqe->generic.wqe_com, 1);
3444 
3445 		if (lpfc_cmd->cur_iocbq.priority)
3446 			bf_set(wqe_ccp, &wqe->generic.wqe_com,
3447 			       (lpfc_cmd->cur_iocbq.priority << 1));
3448 		else
3449 			bf_set(wqe_ccp, &wqe->generic.wqe_com,
3450 			       (phba->cfg_XLanePriority << 1));
3451 	}
3452 
3453 	return 0;
3454 }
3455 
3456 /**
3457  * lpfc_bg_scsi_prep_dma_buf_s4 - DMA mapping for scsi buffer to SLI4 IF spec
3458  * @phba: The Hba for which this call is being executed.
3459  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3460  *
3461  * This is the protection/DIF aware version of
3462  * lpfc_scsi_prep_dma_buf(). It may be a good idea to combine the
3463  * two functions eventually, but for now, it's here
3464  * Return codes:
3465  *	2 - Error - Do not retry
3466  *	1 - Error - Retry
3467  *	0 - Success
3468  **/
3469 static int
3470 lpfc_bg_scsi_prep_dma_buf_s4(struct lpfc_hba *phba,
3471 		struct lpfc_io_buf *lpfc_cmd)
3472 {
3473 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
3474 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
3475 	struct sli4_sge *sgl = (struct sli4_sge *)(lpfc_cmd->dma_sgl);
3476 	struct lpfc_iocbq *pwqeq = &lpfc_cmd->cur_iocbq;
3477 	union lpfc_wqe128 *wqe = &pwqeq->wqe;
3478 	uint32_t num_sge = 0;
3479 	int datasegcnt, protsegcnt, datadir = scsi_cmnd->sc_data_direction;
3480 	int prot_group_type = 0;
3481 	int fcpdl;
3482 	int ret = 1;
3483 	struct lpfc_vport *vport = phba->pport;
3484 
3485 	/*
3486 	 * Start the lpfc command prep by bumping the sgl beyond fcp_cmnd
3487 	 *  fcp_rsp regions to the first data sge entry
3488 	 */
3489 	if (scsi_sg_count(scsi_cmnd)) {
3490 		/*
3491 		 * The driver stores the segment count returned from dma_map_sg
3492 		 * because this a count of dma-mappings used to map the use_sg
3493 		 * pages.  They are not guaranteed to be the same for those
3494 		 * architectures that implement an IOMMU.
3495 		 */
3496 		datasegcnt = dma_map_sg(&phba->pcidev->dev,
3497 					scsi_sglist(scsi_cmnd),
3498 					scsi_sg_count(scsi_cmnd), datadir);
3499 		if (unlikely(!datasegcnt))
3500 			return 1;
3501 
3502 		sgl += 1;
3503 		/* clear the last flag in the fcp_rsp map entry */
3504 		sgl->word2 = le32_to_cpu(sgl->word2);
3505 		bf_set(lpfc_sli4_sge_last, sgl, 0);
3506 		sgl->word2 = cpu_to_le32(sgl->word2);
3507 
3508 		sgl += 1;
3509 		lpfc_cmd->seg_cnt = datasegcnt;
3510 
3511 		/* First check if data segment count from SCSI Layer is good */
3512 		if (lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt &&
3513 		    !phba->cfg_xpsgl) {
3514 			WARN_ON_ONCE(lpfc_cmd->seg_cnt > phba->cfg_sg_seg_cnt);
3515 			ret = 2;
3516 			goto err;
3517 		}
3518 
3519 		prot_group_type = lpfc_prot_group_type(phba, scsi_cmnd);
3520 
3521 		switch (prot_group_type) {
3522 		case LPFC_PG_TYPE_NO_DIF:
3523 			/* Here we need to add a DISEED to the count */
3524 			if (((lpfc_cmd->seg_cnt + 1) >
3525 					phba->cfg_total_seg_cnt) &&
3526 			    !phba->cfg_xpsgl) {
3527 				ret = 2;
3528 				goto err;
3529 			}
3530 
3531 			num_sge = lpfc_bg_setup_sgl(phba, scsi_cmnd, sgl,
3532 					datasegcnt, lpfc_cmd);
3533 
3534 			/* we should have 2 or more entries in buffer list */
3535 			if (num_sge < 2) {
3536 				ret = 2;
3537 				goto err;
3538 			}
3539 			break;
3540 
3541 		case LPFC_PG_TYPE_DIF_BUF:
3542 			/*
3543 			 * This type indicates that protection buffers are
3544 			 * passed to the driver, so that needs to be prepared
3545 			 * for DMA
3546 			 */
3547 			protsegcnt = dma_map_sg(&phba->pcidev->dev,
3548 					scsi_prot_sglist(scsi_cmnd),
3549 					scsi_prot_sg_count(scsi_cmnd), datadir);
3550 			if (unlikely(!protsegcnt)) {
3551 				scsi_dma_unmap(scsi_cmnd);
3552 				return 1;
3553 			}
3554 
3555 			lpfc_cmd->prot_seg_cnt = protsegcnt;
3556 			/*
3557 			 * There is a minimun of 3 SGEs used for every
3558 			 * protection data segment.
3559 			 */
3560 			if (((lpfc_cmd->prot_seg_cnt * 3) >
3561 					(phba->cfg_total_seg_cnt - 2)) &&
3562 			    !phba->cfg_xpsgl) {
3563 				ret = 2;
3564 				goto err;
3565 			}
3566 
3567 			num_sge = lpfc_bg_setup_sgl_prot(phba, scsi_cmnd, sgl,
3568 					datasegcnt, protsegcnt, lpfc_cmd);
3569 
3570 			/* we should have 3 or more entries in buffer list */
3571 			if (num_sge < 3 ||
3572 			    (num_sge > phba->cfg_total_seg_cnt &&
3573 			     !phba->cfg_xpsgl)) {
3574 				ret = 2;
3575 				goto err;
3576 			}
3577 			break;
3578 
3579 		case LPFC_PG_TYPE_INVALID:
3580 		default:
3581 			scsi_dma_unmap(scsi_cmnd);
3582 			lpfc_cmd->seg_cnt = 0;
3583 
3584 			lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
3585 					"9083 Unexpected protection group %i\n",
3586 					prot_group_type);
3587 			return 2;
3588 		}
3589 	}
3590 
3591 	switch (scsi_get_prot_op(scsi_cmnd)) {
3592 	case SCSI_PROT_WRITE_STRIP:
3593 	case SCSI_PROT_READ_STRIP:
3594 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_DIF_STRIP;
3595 		break;
3596 	case SCSI_PROT_WRITE_INSERT:
3597 	case SCSI_PROT_READ_INSERT:
3598 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_DIF_INSERT;
3599 		break;
3600 	case SCSI_PROT_WRITE_PASS:
3601 	case SCSI_PROT_READ_PASS:
3602 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_DIF_PASS;
3603 		break;
3604 	}
3605 
3606 	fcpdl = lpfc_bg_scsi_adjust_dl(phba, lpfc_cmd);
3607 	fcp_cmnd->fcpDl = be32_to_cpu(fcpdl);
3608 
3609 	/* Set first-burst provided it was successfully negotiated */
3610 	if (!(phba->hba_flag & HBA_FCOE_MODE) &&
3611 	    vport->cfg_first_burst_size &&
3612 	    scsi_cmnd->sc_data_direction == DMA_TO_DEVICE) {
3613 		u32 init_len, total_len;
3614 
3615 		total_len = be32_to_cpu(fcp_cmnd->fcpDl);
3616 		init_len = min(total_len, vport->cfg_first_burst_size);
3617 
3618 		/* Word 4 & 5 */
3619 		wqe->fcp_iwrite.initial_xfer_len = init_len;
3620 		wqe->fcp_iwrite.total_xfer_len = total_len;
3621 	} else {
3622 		/* Word 4 */
3623 		wqe->fcp_iwrite.total_xfer_len =
3624 			be32_to_cpu(fcp_cmnd->fcpDl);
3625 	}
3626 
3627 	/*
3628 	 * If the OAS driver feature is enabled and the lun is enabled for
3629 	 * OAS, set the oas iocb related flags.
3630 	 */
3631 	if ((phba->cfg_fof) && ((struct lpfc_device_data *)
3632 		scsi_cmnd->device->hostdata)->oas_enabled) {
3633 		lpfc_cmd->cur_iocbq.iocb_flag |= (LPFC_IO_OAS | LPFC_IO_FOF);
3634 
3635 		/* Word 10 */
3636 		bf_set(wqe_oas, &wqe->generic.wqe_com, 1);
3637 		bf_set(wqe_ccpe, &wqe->generic.wqe_com, 1);
3638 		bf_set(wqe_ccp, &wqe->generic.wqe_com,
3639 		       (phba->cfg_XLanePriority << 1));
3640 	}
3641 
3642 	/* Word 7. DIF Flags */
3643 	if (lpfc_cmd->cur_iocbq.iocb_flag & LPFC_IO_DIF_PASS)
3644 		bf_set(wqe_dif, &wqe->generic.wqe_com, LPFC_WQE_DIF_PASSTHRU);
3645 	else if (lpfc_cmd->cur_iocbq.iocb_flag & LPFC_IO_DIF_STRIP)
3646 		bf_set(wqe_dif, &wqe->generic.wqe_com, LPFC_WQE_DIF_STRIP);
3647 	else if (lpfc_cmd->cur_iocbq.iocb_flag & LPFC_IO_DIF_INSERT)
3648 		bf_set(wqe_dif, &wqe->generic.wqe_com, LPFC_WQE_DIF_INSERT);
3649 
3650 	lpfc_cmd->cur_iocbq.iocb_flag &= ~(LPFC_IO_DIF_PASS |
3651 				 LPFC_IO_DIF_STRIP | LPFC_IO_DIF_INSERT);
3652 
3653 	return 0;
3654 err:
3655 	if (lpfc_cmd->seg_cnt)
3656 		scsi_dma_unmap(scsi_cmnd);
3657 	if (lpfc_cmd->prot_seg_cnt)
3658 		dma_unmap_sg(&phba->pcidev->dev, scsi_prot_sglist(scsi_cmnd),
3659 			     scsi_prot_sg_count(scsi_cmnd),
3660 			     scsi_cmnd->sc_data_direction);
3661 
3662 	lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
3663 			"9084 Cannot setup S/G List for HBA"
3664 			"IO segs %d/%d SGL %d SCSI %d: %d %d\n",
3665 			lpfc_cmd->seg_cnt, lpfc_cmd->prot_seg_cnt,
3666 			phba->cfg_total_seg_cnt, phba->cfg_sg_seg_cnt,
3667 			prot_group_type, num_sge);
3668 
3669 	lpfc_cmd->seg_cnt = 0;
3670 	lpfc_cmd->prot_seg_cnt = 0;
3671 	return ret;
3672 }
3673 
3674 /**
3675  * lpfc_scsi_prep_dma_buf - Wrapper function for DMA mapping of scsi buffer
3676  * @phba: The Hba for which this call is being executed.
3677  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3678  *
3679  * This routine wraps the actual DMA mapping function pointer from the
3680  * lpfc_hba struct.
3681  *
3682  * Return codes:
3683  *	1 - Error
3684  *	0 - Success
3685  **/
3686 static inline int
3687 lpfc_scsi_prep_dma_buf(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd)
3688 {
3689 	return phba->lpfc_scsi_prep_dma_buf(phba, lpfc_cmd);
3690 }
3691 
3692 /**
3693  * lpfc_bg_scsi_prep_dma_buf - Wrapper function for DMA mapping of scsi buffer
3694  * using BlockGuard.
3695  * @phba: The Hba for which this call is being executed.
3696  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3697  *
3698  * This routine wraps the actual DMA mapping function pointer from the
3699  * lpfc_hba struct.
3700  *
3701  * Return codes:
3702  *	1 - Error
3703  *	0 - Success
3704  **/
3705 static inline int
3706 lpfc_bg_scsi_prep_dma_buf(struct lpfc_hba *phba, struct lpfc_io_buf *lpfc_cmd)
3707 {
3708 	return phba->lpfc_bg_scsi_prep_dma_buf(phba, lpfc_cmd);
3709 }
3710 
3711 /**
3712  * lpfc_scsi_prep_cmnd_buf - Wrapper function for IOCB/WQE mapping of scsi
3713  * buffer
3714  * @vport: Pointer to vport object.
3715  * @lpfc_cmd: The scsi buffer which is going to be mapped.
3716  * @tmo: Timeout value for IO
3717  *
3718  * This routine initializes IOCB/WQE data structure from scsi command
3719  *
3720  * Return codes:
3721  *	1 - Error
3722  *	0 - Success
3723  **/
3724 static inline int
3725 lpfc_scsi_prep_cmnd_buf(struct lpfc_vport *vport, struct lpfc_io_buf *lpfc_cmd,
3726 			uint8_t tmo)
3727 {
3728 	return vport->phba->lpfc_scsi_prep_cmnd_buf(vport, lpfc_cmd, tmo);
3729 }
3730 
3731 /**
3732  * lpfc_send_scsi_error_event - Posts an event when there is SCSI error
3733  * @phba: Pointer to hba context object.
3734  * @vport: Pointer to vport object.
3735  * @lpfc_cmd: Pointer to lpfc scsi command which reported the error.
3736  * @fcpi_parm: FCP Initiator parameter.
3737  *
3738  * This function posts an event when there is a SCSI command reporting
3739  * error from the scsi device.
3740  **/
3741 static void
3742 lpfc_send_scsi_error_event(struct lpfc_hba *phba, struct lpfc_vport *vport,
3743 		struct lpfc_io_buf *lpfc_cmd, uint32_t fcpi_parm) {
3744 	struct scsi_cmnd *cmnd = lpfc_cmd->pCmd;
3745 	struct fcp_rsp *fcprsp = lpfc_cmd->fcp_rsp;
3746 	uint32_t resp_info = fcprsp->rspStatus2;
3747 	uint32_t scsi_status = fcprsp->rspStatus3;
3748 	struct lpfc_fast_path_event *fast_path_evt = NULL;
3749 	struct lpfc_nodelist *pnode = lpfc_cmd->rdata->pnode;
3750 	unsigned long flags;
3751 
3752 	if (!pnode)
3753 		return;
3754 
3755 	/* If there is queuefull or busy condition send a scsi event */
3756 	if ((cmnd->result == SAM_STAT_TASK_SET_FULL) ||
3757 		(cmnd->result == SAM_STAT_BUSY)) {
3758 		fast_path_evt = lpfc_alloc_fast_evt(phba);
3759 		if (!fast_path_evt)
3760 			return;
3761 		fast_path_evt->un.scsi_evt.event_type =
3762 			FC_REG_SCSI_EVENT;
3763 		fast_path_evt->un.scsi_evt.subcategory =
3764 		(cmnd->result == SAM_STAT_TASK_SET_FULL) ?
3765 		LPFC_EVENT_QFULL : LPFC_EVENT_DEVBSY;
3766 		fast_path_evt->un.scsi_evt.lun = cmnd->device->lun;
3767 		memcpy(&fast_path_evt->un.scsi_evt.wwpn,
3768 			&pnode->nlp_portname, sizeof(struct lpfc_name));
3769 		memcpy(&fast_path_evt->un.scsi_evt.wwnn,
3770 			&pnode->nlp_nodename, sizeof(struct lpfc_name));
3771 	} else if ((resp_info & SNS_LEN_VALID) && fcprsp->rspSnsLen &&
3772 		((cmnd->cmnd[0] == READ_10) || (cmnd->cmnd[0] == WRITE_10))) {
3773 		fast_path_evt = lpfc_alloc_fast_evt(phba);
3774 		if (!fast_path_evt)
3775 			return;
3776 		fast_path_evt->un.check_cond_evt.scsi_event.event_type =
3777 			FC_REG_SCSI_EVENT;
3778 		fast_path_evt->un.check_cond_evt.scsi_event.subcategory =
3779 			LPFC_EVENT_CHECK_COND;
3780 		fast_path_evt->un.check_cond_evt.scsi_event.lun =
3781 			cmnd->device->lun;
3782 		memcpy(&fast_path_evt->un.check_cond_evt.scsi_event.wwpn,
3783 			&pnode->nlp_portname, sizeof(struct lpfc_name));
3784 		memcpy(&fast_path_evt->un.check_cond_evt.scsi_event.wwnn,
3785 			&pnode->nlp_nodename, sizeof(struct lpfc_name));
3786 		fast_path_evt->un.check_cond_evt.sense_key =
3787 			cmnd->sense_buffer[2] & 0xf;
3788 		fast_path_evt->un.check_cond_evt.asc = cmnd->sense_buffer[12];
3789 		fast_path_evt->un.check_cond_evt.ascq = cmnd->sense_buffer[13];
3790 	} else if ((cmnd->sc_data_direction == DMA_FROM_DEVICE) &&
3791 		     fcpi_parm &&
3792 		     ((be32_to_cpu(fcprsp->rspResId) != fcpi_parm) ||
3793 			((scsi_status == SAM_STAT_GOOD) &&
3794 			!(resp_info & (RESID_UNDER | RESID_OVER))))) {
3795 		/*
3796 		 * If status is good or resid does not match with fcp_param and
3797 		 * there is valid fcpi_parm, then there is a read_check error
3798 		 */
3799 		fast_path_evt = lpfc_alloc_fast_evt(phba);
3800 		if (!fast_path_evt)
3801 			return;
3802 		fast_path_evt->un.read_check_error.header.event_type =
3803 			FC_REG_FABRIC_EVENT;
3804 		fast_path_evt->un.read_check_error.header.subcategory =
3805 			LPFC_EVENT_FCPRDCHKERR;
3806 		memcpy(&fast_path_evt->un.read_check_error.header.wwpn,
3807 			&pnode->nlp_portname, sizeof(struct lpfc_name));
3808 		memcpy(&fast_path_evt->un.read_check_error.header.wwnn,
3809 			&pnode->nlp_nodename, sizeof(struct lpfc_name));
3810 		fast_path_evt->un.read_check_error.lun = cmnd->device->lun;
3811 		fast_path_evt->un.read_check_error.opcode = cmnd->cmnd[0];
3812 		fast_path_evt->un.read_check_error.fcpiparam =
3813 			fcpi_parm;
3814 	} else
3815 		return;
3816 
3817 	fast_path_evt->vport = vport;
3818 	spin_lock_irqsave(&phba->hbalock, flags);
3819 	list_add_tail(&fast_path_evt->work_evt.evt_listp, &phba->work_list);
3820 	spin_unlock_irqrestore(&phba->hbalock, flags);
3821 	lpfc_worker_wake_up(phba);
3822 	return;
3823 }
3824 
3825 /**
3826  * lpfc_scsi_unprep_dma_buf - Un-map DMA mapping of SG-list for dev
3827  * @phba: The HBA for which this call is being executed.
3828  * @psb: The scsi buffer which is going to be un-mapped.
3829  *
3830  * This routine does DMA un-mapping of scatter gather list of scsi command
3831  * field of @lpfc_cmd for device with SLI-3 interface spec.
3832  **/
3833 static void
3834 lpfc_scsi_unprep_dma_buf(struct lpfc_hba *phba, struct lpfc_io_buf *psb)
3835 {
3836 	/*
3837 	 * There are only two special cases to consider.  (1) the scsi command
3838 	 * requested scatter-gather usage or (2) the scsi command allocated
3839 	 * a request buffer, but did not request use_sg.  There is a third
3840 	 * case, but it does not require resource deallocation.
3841 	 */
3842 	if (psb->seg_cnt > 0)
3843 		scsi_dma_unmap(psb->pCmd);
3844 	if (psb->prot_seg_cnt > 0)
3845 		dma_unmap_sg(&phba->pcidev->dev, scsi_prot_sglist(psb->pCmd),
3846 				scsi_prot_sg_count(psb->pCmd),
3847 				psb->pCmd->sc_data_direction);
3848 }
3849 
3850 /**
3851  * lpfc_unblock_requests - allow further commands to be queued.
3852  * @phba: pointer to phba object
3853  *
3854  * For single vport, just call scsi_unblock_requests on physical port.
3855  * For multiple vports, send scsi_unblock_requests for all the vports.
3856  */
3857 void
3858 lpfc_unblock_requests(struct lpfc_hba *phba)
3859 {
3860 	struct lpfc_vport **vports;
3861 	struct Scsi_Host  *shost;
3862 	int i;
3863 
3864 	if (phba->sli_rev == LPFC_SLI_REV4 &&
3865 	    !phba->sli4_hba.max_cfg_param.vpi_used) {
3866 		shost = lpfc_shost_from_vport(phba->pport);
3867 		scsi_unblock_requests(shost);
3868 		return;
3869 	}
3870 
3871 	vports = lpfc_create_vport_work_array(phba);
3872 	if (vports != NULL)
3873 		for (i = 0; i <= phba->max_vports && vports[i] != NULL; i++) {
3874 			shost = lpfc_shost_from_vport(vports[i]);
3875 			scsi_unblock_requests(shost);
3876 		}
3877 	lpfc_destroy_vport_work_array(phba, vports);
3878 }
3879 
3880 /**
3881  * lpfc_block_requests - prevent further commands from being queued.
3882  * @phba: pointer to phba object
3883  *
3884  * For single vport, just call scsi_block_requests on physical port.
3885  * For multiple vports, send scsi_block_requests for all the vports.
3886  */
3887 void
3888 lpfc_block_requests(struct lpfc_hba *phba)
3889 {
3890 	struct lpfc_vport **vports;
3891 	struct Scsi_Host  *shost;
3892 	int i;
3893 
3894 	if (atomic_read(&phba->cmf_stop_io))
3895 		return;
3896 
3897 	if (phba->sli_rev == LPFC_SLI_REV4 &&
3898 	    !phba->sli4_hba.max_cfg_param.vpi_used) {
3899 		shost = lpfc_shost_from_vport(phba->pport);
3900 		scsi_block_requests(shost);
3901 		return;
3902 	}
3903 
3904 	vports = lpfc_create_vport_work_array(phba);
3905 	if (vports != NULL)
3906 		for (i = 0; i <= phba->max_vports && vports[i] != NULL; i++) {
3907 			shost = lpfc_shost_from_vport(vports[i]);
3908 			scsi_block_requests(shost);
3909 		}
3910 	lpfc_destroy_vport_work_array(phba, vports);
3911 }
3912 
3913 /**
3914  * lpfc_update_cmf_cmpl - Adjust CMF counters for IO completion
3915  * @phba: The HBA for which this call is being executed.
3916  * @time: The latency of the IO that completed (in ns)
3917  * @size: The size of the IO that completed
3918  * @shost: SCSI host the IO completed on (NULL for a NVME IO)
3919  *
3920  * The routine adjusts the various Burst and Bandwidth counters used in
3921  * Congestion management and E2E. If time is set to LPFC_CGN_NOT_SENT,
3922  * that means the IO was never issued to the HBA, so this routine is
3923  * just being called to cleanup the counter from a previous
3924  * lpfc_update_cmf_cmd call.
3925  */
3926 int
3927 lpfc_update_cmf_cmpl(struct lpfc_hba *phba,
3928 		     uint64_t time, uint32_t size, struct Scsi_Host *shost)
3929 {
3930 	struct lpfc_cgn_stat *cgs;
3931 
3932 	if (time != LPFC_CGN_NOT_SENT) {
3933 		/* lat is ns coming in, save latency in us */
3934 		if (time < 1000)
3935 			time = 1;
3936 		else
3937 			time = div_u64(time + 500, 1000); /* round it */
3938 
3939 		cgs = this_cpu_ptr(phba->cmf_stat);
3940 		atomic64_add(size, &cgs->rcv_bytes);
3941 		atomic64_add(time, &cgs->rx_latency);
3942 		atomic_inc(&cgs->rx_io_cnt);
3943 	}
3944 	return 0;
3945 }
3946 
3947 /**
3948  * lpfc_update_cmf_cmd - Adjust CMF counters for IO submission
3949  * @phba: The HBA for which this call is being executed.
3950  * @size: The size of the IO that will be issued
3951  *
3952  * The routine adjusts the various Burst and Bandwidth counters used in
3953  * Congestion management and E2E.
3954  */
3955 int
3956 lpfc_update_cmf_cmd(struct lpfc_hba *phba, uint32_t size)
3957 {
3958 	uint64_t total;
3959 	struct lpfc_cgn_stat *cgs;
3960 	int cpu;
3961 
3962 	/* At this point we are either LPFC_CFG_MANAGED or LPFC_CFG_MONITOR */
3963 	if (phba->cmf_active_mode == LPFC_CFG_MANAGED &&
3964 	    phba->cmf_max_bytes_per_interval) {
3965 		total = 0;
3966 		for_each_present_cpu(cpu) {
3967 			cgs = per_cpu_ptr(phba->cmf_stat, cpu);
3968 			total += atomic64_read(&cgs->total_bytes);
3969 		}
3970 		if (total >= phba->cmf_max_bytes_per_interval) {
3971 			if (!atomic_xchg(&phba->cmf_bw_wait, 1)) {
3972 				lpfc_block_requests(phba);
3973 				phba->cmf_last_ts =
3974 					lpfc_calc_cmf_latency(phba);
3975 			}
3976 			atomic_inc(&phba->cmf_busy);
3977 			return -EBUSY;
3978 		}
3979 		if (size > atomic_read(&phba->rx_max_read_cnt))
3980 			atomic_set(&phba->rx_max_read_cnt, size);
3981 	}
3982 
3983 	cgs = this_cpu_ptr(phba->cmf_stat);
3984 	atomic64_add(size, &cgs->total_bytes);
3985 	return 0;
3986 }
3987 
3988 /**
3989  * lpfc_handle_fcp_err - FCP response handler
3990  * @vport: The virtual port for which this call is being executed.
3991  * @lpfc_cmd: Pointer to lpfc_io_buf data structure.
3992  * @fcpi_parm: FCP Initiator parameter.
3993  *
3994  * This routine is called to process response IOCB with status field
3995  * IOSTAT_FCP_RSP_ERROR. This routine sets result field of scsi command
3996  * based upon SCSI and FCP error.
3997  **/
3998 static void
3999 lpfc_handle_fcp_err(struct lpfc_vport *vport, struct lpfc_io_buf *lpfc_cmd,
4000 		    uint32_t fcpi_parm)
4001 {
4002 	struct scsi_cmnd *cmnd = lpfc_cmd->pCmd;
4003 	struct fcp_cmnd *fcpcmd = lpfc_cmd->fcp_cmnd;
4004 	struct fcp_rsp *fcprsp = lpfc_cmd->fcp_rsp;
4005 	uint32_t resp_info = fcprsp->rspStatus2;
4006 	uint32_t scsi_status = fcprsp->rspStatus3;
4007 	uint32_t *lp;
4008 	uint32_t host_status = DID_OK;
4009 	uint32_t rsplen = 0;
4010 	uint32_t fcpDl;
4011 	uint32_t logit = LOG_FCP | LOG_FCP_ERROR;
4012 
4013 
4014 	/*
4015 	 *  If this is a task management command, there is no
4016 	 *  scsi packet associated with this lpfc_cmd.  The driver
4017 	 *  consumes it.
4018 	 */
4019 	if (fcpcmd->fcpCntl2) {
4020 		scsi_status = 0;
4021 		goto out;
4022 	}
4023 
4024 	if (resp_info & RSP_LEN_VALID) {
4025 		rsplen = be32_to_cpu(fcprsp->rspRspLen);
4026 		if (rsplen != 0 && rsplen != 4 && rsplen != 8) {
4027 			lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
4028 					 "2719 Invalid response length: "
4029 					 "tgt x%x lun x%llx cmnd x%x rsplen "
4030 					 "x%x\n", cmnd->device->id,
4031 					 cmnd->device->lun, cmnd->cmnd[0],
4032 					 rsplen);
4033 			host_status = DID_ERROR;
4034 			goto out;
4035 		}
4036 		if (fcprsp->rspInfo3 != RSP_NO_FAILURE) {
4037 			lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
4038 				 "2757 Protocol failure detected during "
4039 				 "processing of FCP I/O op: "
4040 				 "tgt x%x lun x%llx cmnd x%x rspInfo3 x%x\n",
4041 				 cmnd->device->id,
4042 				 cmnd->device->lun, cmnd->cmnd[0],
4043 				 fcprsp->rspInfo3);
4044 			host_status = DID_ERROR;
4045 			goto out;
4046 		}
4047 	}
4048 
4049 	if ((resp_info & SNS_LEN_VALID) && fcprsp->rspSnsLen) {
4050 		uint32_t snslen = be32_to_cpu(fcprsp->rspSnsLen);
4051 		if (snslen > SCSI_SENSE_BUFFERSIZE)
4052 			snslen = SCSI_SENSE_BUFFERSIZE;
4053 
4054 		if (resp_info & RSP_LEN_VALID)
4055 		  rsplen = be32_to_cpu(fcprsp->rspRspLen);
4056 		memcpy(cmnd->sense_buffer, &fcprsp->rspInfo0 + rsplen, snslen);
4057 	}
4058 	lp = (uint32_t *)cmnd->sense_buffer;
4059 
4060 	/* special handling for under run conditions */
4061 	if (!scsi_status && (resp_info & RESID_UNDER)) {
4062 		/* don't log under runs if fcp set... */
4063 		if (vport->cfg_log_verbose & LOG_FCP)
4064 			logit = LOG_FCP_ERROR;
4065 		/* unless operator says so */
4066 		if (vport->cfg_log_verbose & LOG_FCP_UNDER)
4067 			logit = LOG_FCP_UNDER;
4068 	}
4069 
4070 	lpfc_printf_vlog(vport, KERN_WARNING, logit,
4071 			 "9024 FCP command x%x failed: x%x SNS x%x x%x "
4072 			 "Data: x%x x%x x%x x%x x%x\n",
4073 			 cmnd->cmnd[0], scsi_status,
4074 			 be32_to_cpu(*lp), be32_to_cpu(*(lp + 3)), resp_info,
4075 			 be32_to_cpu(fcprsp->rspResId),
4076 			 be32_to_cpu(fcprsp->rspSnsLen),
4077 			 be32_to_cpu(fcprsp->rspRspLen),
4078 			 fcprsp->rspInfo3);
4079 
4080 	scsi_set_resid(cmnd, 0);
4081 	fcpDl = be32_to_cpu(fcpcmd->fcpDl);
4082 	if (resp_info & RESID_UNDER) {
4083 		scsi_set_resid(cmnd, be32_to_cpu(fcprsp->rspResId));
4084 
4085 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP_UNDER,
4086 				 "9025 FCP Underrun, expected %d, "
4087 				 "residual %d Data: x%x x%x x%x\n",
4088 				 fcpDl,
4089 				 scsi_get_resid(cmnd), fcpi_parm, cmnd->cmnd[0],
4090 				 cmnd->underflow);
4091 
4092 		/*
4093 		 * If there is an under run, check if under run reported by
4094 		 * storage array is same as the under run reported by HBA.
4095 		 * If this is not same, there is a dropped frame.
4096 		 */
4097 		if (fcpi_parm && (scsi_get_resid(cmnd) != fcpi_parm)) {
4098 			lpfc_printf_vlog(vport, KERN_WARNING,
4099 					 LOG_FCP | LOG_FCP_ERROR,
4100 					 "9026 FCP Read Check Error "
4101 					 "and Underrun Data: x%x x%x x%x x%x\n",
4102 					 fcpDl,
4103 					 scsi_get_resid(cmnd), fcpi_parm,
4104 					 cmnd->cmnd[0]);
4105 			scsi_set_resid(cmnd, scsi_bufflen(cmnd));
4106 			host_status = DID_ERROR;
4107 		}
4108 		/*
4109 		 * The cmnd->underflow is the minimum number of bytes that must
4110 		 * be transferred for this command.  Provided a sense condition
4111 		 * is not present, make sure the actual amount transferred is at
4112 		 * least the underflow value or fail.
4113 		 */
4114 		if (!(resp_info & SNS_LEN_VALID) &&
4115 		    (scsi_status == SAM_STAT_GOOD) &&
4116 		    (scsi_bufflen(cmnd) - scsi_get_resid(cmnd)
4117 		     < cmnd->underflow)) {
4118 			lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4119 					 "9027 FCP command x%x residual "
4120 					 "underrun converted to error "
4121 					 "Data: x%x x%x x%x\n",
4122 					 cmnd->cmnd[0], scsi_bufflen(cmnd),
4123 					 scsi_get_resid(cmnd), cmnd->underflow);
4124 			host_status = DID_ERROR;
4125 		}
4126 	} else if (resp_info & RESID_OVER) {
4127 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
4128 				 "9028 FCP command x%x residual overrun error. "
4129 				 "Data: x%x x%x\n", cmnd->cmnd[0],
4130 				 scsi_bufflen(cmnd), scsi_get_resid(cmnd));
4131 		host_status = DID_ERROR;
4132 
4133 	/*
4134 	 * Check SLI validation that all the transfer was actually done
4135 	 * (fcpi_parm should be zero). Apply check only to reads.
4136 	 */
4137 	} else if (fcpi_parm) {
4138 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP | LOG_FCP_ERROR,
4139 				 "9029 FCP %s Check Error Data: "
4140 				 "x%x x%x x%x x%x x%x\n",
4141 				 ((cmnd->sc_data_direction == DMA_FROM_DEVICE) ?
4142 				 "Read" : "Write"),
4143 				 fcpDl, be32_to_cpu(fcprsp->rspResId),
4144 				 fcpi_parm, cmnd->cmnd[0], scsi_status);
4145 
4146 		/* There is some issue with the LPe12000 that causes it
4147 		 * to miscalculate the fcpi_parm and falsely trip this
4148 		 * recovery logic.  Detect this case and don't error when true.
4149 		 */
4150 		if (fcpi_parm > fcpDl)
4151 			goto out;
4152 
4153 		switch (scsi_status) {
4154 		case SAM_STAT_GOOD:
4155 		case SAM_STAT_CHECK_CONDITION:
4156 			/* Fabric dropped a data frame. Fail any successful
4157 			 * command in which we detected dropped frames.
4158 			 * A status of good or some check conditions could
4159 			 * be considered a successful command.
4160 			 */
4161 			host_status = DID_ERROR;
4162 			break;
4163 		}
4164 		scsi_set_resid(cmnd, scsi_bufflen(cmnd));
4165 	}
4166 
4167  out:
4168 	cmnd->result = host_status << 16 | scsi_status;
4169 	lpfc_send_scsi_error_event(vport->phba, vport, lpfc_cmd, fcpi_parm);
4170 }
4171 
4172 /**
4173  * lpfc_fcp_io_cmd_wqe_cmpl - Complete a FCP IO
4174  * @phba: The hba for which this call is being executed.
4175  * @pwqeIn: The command WQE for the scsi cmnd.
4176  * @wcqe: Pointer to driver response CQE object.
4177  *
4178  * This routine assigns scsi command result by looking into response WQE
4179  * status field appropriately. This routine handles QUEUE FULL condition as
4180  * well by ramping down device queue depth.
4181  **/
4182 static void
4183 lpfc_fcp_io_cmd_wqe_cmpl(struct lpfc_hba *phba, struct lpfc_iocbq *pwqeIn,
4184 			 struct lpfc_wcqe_complete *wcqe)
4185 {
4186 	struct lpfc_io_buf *lpfc_cmd =
4187 		(struct lpfc_io_buf *)pwqeIn->context1;
4188 	struct lpfc_vport *vport = pwqeIn->vport;
4189 	struct lpfc_rport_data *rdata;
4190 	struct lpfc_nodelist *ndlp;
4191 	struct scsi_cmnd *cmd;
4192 	unsigned long flags;
4193 	struct lpfc_fast_path_event *fast_path_evt;
4194 	struct Scsi_Host *shost;
4195 	u32 logit = LOG_FCP;
4196 	u32 status, idx;
4197 	unsigned long iflags = 0;
4198 	u32 lat;
4199 	u8 wait_xb_clr = 0;
4200 
4201 	/* Sanity check on return of outstanding command */
4202 	if (!lpfc_cmd) {
4203 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
4204 				 "9032 Null lpfc_cmd pointer. No "
4205 				 "release, skip completion\n");
4206 		return;
4207 	}
4208 
4209 	rdata = lpfc_cmd->rdata;
4210 	ndlp = rdata->pnode;
4211 
4212 	if (bf_get(lpfc_wcqe_c_xb, wcqe)) {
4213 		/* TOREMOVE - currently this flag is checked during
4214 		 * the release of lpfc_iocbq. Remove once we move
4215 		 * to lpfc_wqe_job construct.
4216 		 *
4217 		 * This needs to be done outside buf_lock
4218 		 */
4219 		spin_lock_irqsave(&phba->hbalock, iflags);
4220 		lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_EXCHANGE_BUSY;
4221 		spin_unlock_irqrestore(&phba->hbalock, iflags);
4222 	}
4223 
4224 	/* Guard against abort handler being called at same time */
4225 	spin_lock(&lpfc_cmd->buf_lock);
4226 
4227 	/* Sanity check on return of outstanding command */
4228 	cmd = lpfc_cmd->pCmd;
4229 	if (!cmd) {
4230 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
4231 				 "9042 I/O completion: Not an active IO\n");
4232 		spin_unlock(&lpfc_cmd->buf_lock);
4233 		lpfc_release_scsi_buf(phba, lpfc_cmd);
4234 		return;
4235 	}
4236 	idx = lpfc_cmd->cur_iocbq.hba_wqidx;
4237 	if (phba->sli4_hba.hdwq)
4238 		phba->sli4_hba.hdwq[idx].scsi_cstat.io_cmpls++;
4239 
4240 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
4241 	if (unlikely(phba->hdwqstat_on & LPFC_CHECK_SCSI_IO))
4242 		this_cpu_inc(phba->sli4_hba.c_stat->cmpl_io);
4243 #endif
4244 	shost = cmd->device->host;
4245 
4246 	status = bf_get(lpfc_wcqe_c_status, wcqe);
4247 	lpfc_cmd->status = (status & LPFC_IOCB_STATUS_MASK);
4248 	lpfc_cmd->result = (wcqe->parameter & IOERR_PARAM_MASK);
4249 
4250 	lpfc_cmd->flags &= ~LPFC_SBUF_XBUSY;
4251 	if (bf_get(lpfc_wcqe_c_xb, wcqe)) {
4252 		lpfc_cmd->flags |= LPFC_SBUF_XBUSY;
4253 		if (phba->cfg_fcp_wait_abts_rsp)
4254 			wait_xb_clr = 1;
4255 	}
4256 
4257 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
4258 	if (lpfc_cmd->prot_data_type) {
4259 		struct scsi_dif_tuple *src = NULL;
4260 
4261 		src =  (struct scsi_dif_tuple *)lpfc_cmd->prot_data_segment;
4262 		/*
4263 		 * Used to restore any changes to protection
4264 		 * data for error injection.
4265 		 */
4266 		switch (lpfc_cmd->prot_data_type) {
4267 		case LPFC_INJERR_REFTAG:
4268 			src->ref_tag =
4269 				lpfc_cmd->prot_data;
4270 			break;
4271 		case LPFC_INJERR_APPTAG:
4272 			src->app_tag =
4273 				(uint16_t)lpfc_cmd->prot_data;
4274 			break;
4275 		case LPFC_INJERR_GUARD:
4276 			src->guard_tag =
4277 				(uint16_t)lpfc_cmd->prot_data;
4278 			break;
4279 		default:
4280 			break;
4281 		}
4282 
4283 		lpfc_cmd->prot_data = 0;
4284 		lpfc_cmd->prot_data_type = 0;
4285 		lpfc_cmd->prot_data_segment = NULL;
4286 	}
4287 #endif
4288 	if (unlikely(lpfc_cmd->status)) {
4289 		if (lpfc_cmd->status == IOSTAT_LOCAL_REJECT &&
4290 		    (lpfc_cmd->result & IOERR_DRVR_MASK))
4291 			lpfc_cmd->status = IOSTAT_DRIVER_REJECT;
4292 		else if (lpfc_cmd->status >= IOSTAT_CNT)
4293 			lpfc_cmd->status = IOSTAT_DEFAULT;
4294 		if (lpfc_cmd->status == IOSTAT_FCP_RSP_ERROR &&
4295 		    !lpfc_cmd->fcp_rsp->rspStatus3 &&
4296 		    (lpfc_cmd->fcp_rsp->rspStatus2 & RESID_UNDER) &&
4297 		    !(vport->cfg_log_verbose & LOG_FCP_UNDER))
4298 			logit = 0;
4299 		else
4300 			logit = LOG_FCP | LOG_FCP_UNDER;
4301 		lpfc_printf_vlog(vport, KERN_WARNING, logit,
4302 				 "9034 FCP cmd x%x failed <%d/%lld> "
4303 				 "status: x%x result: x%x "
4304 				 "sid: x%x did: x%x oxid: x%x "
4305 				 "Data: x%x x%x x%x\n",
4306 				 cmd->cmnd[0],
4307 				 cmd->device ? cmd->device->id : 0xffff,
4308 				 cmd->device ? cmd->device->lun : 0xffff,
4309 				 lpfc_cmd->status, lpfc_cmd->result,
4310 				 vport->fc_myDID,
4311 				 (ndlp) ? ndlp->nlp_DID : 0,
4312 				 lpfc_cmd->cur_iocbq.sli4_xritag,
4313 				 wcqe->parameter, wcqe->total_data_placed,
4314 				 lpfc_cmd->cur_iocbq.iotag);
4315 	}
4316 
4317 	switch (lpfc_cmd->status) {
4318 	case IOSTAT_SUCCESS:
4319 		cmd->result = DID_OK << 16;
4320 		break;
4321 	case IOSTAT_FCP_RSP_ERROR:
4322 		lpfc_handle_fcp_err(vport, lpfc_cmd,
4323 				    pwqeIn->wqe.fcp_iread.total_xfer_len -
4324 				    wcqe->total_data_placed);
4325 		break;
4326 	case IOSTAT_NPORT_BSY:
4327 	case IOSTAT_FABRIC_BSY:
4328 		cmd->result = DID_TRANSPORT_DISRUPTED << 16;
4329 		fast_path_evt = lpfc_alloc_fast_evt(phba);
4330 		if (!fast_path_evt)
4331 			break;
4332 		fast_path_evt->un.fabric_evt.event_type =
4333 			FC_REG_FABRIC_EVENT;
4334 		fast_path_evt->un.fabric_evt.subcategory =
4335 			(lpfc_cmd->status == IOSTAT_NPORT_BSY) ?
4336 			LPFC_EVENT_PORT_BUSY : LPFC_EVENT_FABRIC_BUSY;
4337 		if (ndlp) {
4338 			memcpy(&fast_path_evt->un.fabric_evt.wwpn,
4339 			       &ndlp->nlp_portname,
4340 				sizeof(struct lpfc_name));
4341 			memcpy(&fast_path_evt->un.fabric_evt.wwnn,
4342 			       &ndlp->nlp_nodename,
4343 				sizeof(struct lpfc_name));
4344 		}
4345 		fast_path_evt->vport = vport;
4346 		fast_path_evt->work_evt.evt =
4347 			LPFC_EVT_FASTPATH_MGMT_EVT;
4348 		spin_lock_irqsave(&phba->hbalock, flags);
4349 		list_add_tail(&fast_path_evt->work_evt.evt_listp,
4350 			      &phba->work_list);
4351 		spin_unlock_irqrestore(&phba->hbalock, flags);
4352 		lpfc_worker_wake_up(phba);
4353 		lpfc_printf_vlog(vport, KERN_WARNING, logit,
4354 				 "9035 Fabric/Node busy FCP cmd x%x failed"
4355 				 " <%d/%lld> "
4356 				 "status: x%x result: x%x "
4357 				 "sid: x%x did: x%x oxid: x%x "
4358 				 "Data: x%x x%x x%x\n",
4359 				 cmd->cmnd[0],
4360 				 cmd->device ? cmd->device->id : 0xffff,
4361 				 cmd->device ? cmd->device->lun : 0xffff,
4362 				 lpfc_cmd->status, lpfc_cmd->result,
4363 				 vport->fc_myDID,
4364 				 (ndlp) ? ndlp->nlp_DID : 0,
4365 				 lpfc_cmd->cur_iocbq.sli4_xritag,
4366 				 wcqe->parameter,
4367 				 wcqe->total_data_placed,
4368 				 lpfc_cmd->cur_iocbq.iocb.ulpIoTag);
4369 		break;
4370 	case IOSTAT_REMOTE_STOP:
4371 		if (ndlp) {
4372 			/* This I/O was aborted by the target, we don't
4373 			 * know the rxid and because we did not send the
4374 			 * ABTS we cannot generate and RRQ.
4375 			 */
4376 			lpfc_set_rrq_active(phba, ndlp,
4377 					    lpfc_cmd->cur_iocbq.sli4_lxritag,
4378 					    0, 0);
4379 		}
4380 		fallthrough;
4381 	case IOSTAT_LOCAL_REJECT:
4382 		if (lpfc_cmd->result & IOERR_DRVR_MASK)
4383 			lpfc_cmd->status = IOSTAT_DRIVER_REJECT;
4384 		if (lpfc_cmd->result == IOERR_ELXSEC_KEY_UNWRAP_ERROR ||
4385 		    lpfc_cmd->result ==
4386 		    IOERR_ELXSEC_KEY_UNWRAP_COMPARE_ERROR ||
4387 		    lpfc_cmd->result == IOERR_ELXSEC_CRYPTO_ERROR ||
4388 		    lpfc_cmd->result ==
4389 		    IOERR_ELXSEC_CRYPTO_COMPARE_ERROR) {
4390 			cmd->result = DID_NO_CONNECT << 16;
4391 			break;
4392 		}
4393 		if (lpfc_cmd->result == IOERR_INVALID_RPI ||
4394 		    lpfc_cmd->result == IOERR_NO_RESOURCES ||
4395 		    lpfc_cmd->result == IOERR_ABORT_REQUESTED ||
4396 		    lpfc_cmd->result == IOERR_SLER_CMD_RCV_FAILURE) {
4397 			cmd->result = DID_REQUEUE << 16;
4398 			break;
4399 		}
4400 		if ((lpfc_cmd->result == IOERR_RX_DMA_FAILED ||
4401 		     lpfc_cmd->result == IOERR_TX_DMA_FAILED) &&
4402 		     status == CQE_STATUS_DI_ERROR) {
4403 			if (scsi_get_prot_op(cmd) !=
4404 			    SCSI_PROT_NORMAL) {
4405 				/*
4406 				 * This is a response for a BG enabled
4407 				 * cmd. Parse BG error
4408 				 */
4409 				lpfc_sli4_parse_bg_err(phba, lpfc_cmd,
4410 						       wcqe);
4411 				break;
4412 			}
4413 			lpfc_printf_vlog(vport, KERN_WARNING, LOG_BG,
4414 				 "9040 non-zero BGSTAT on unprotected cmd\n");
4415 		}
4416 		lpfc_printf_vlog(vport, KERN_WARNING, logit,
4417 				 "9036 Local Reject FCP cmd x%x failed"
4418 				 " <%d/%lld> "
4419 				 "status: x%x result: x%x "
4420 				 "sid: x%x did: x%x oxid: x%x "
4421 				 "Data: x%x x%x x%x\n",
4422 				 cmd->cmnd[0],
4423 				 cmd->device ? cmd->device->id : 0xffff,
4424 				 cmd->device ? cmd->device->lun : 0xffff,
4425 				 lpfc_cmd->status, lpfc_cmd->result,
4426 				 vport->fc_myDID,
4427 				 (ndlp) ? ndlp->nlp_DID : 0,
4428 				 lpfc_cmd->cur_iocbq.sli4_xritag,
4429 				 wcqe->parameter,
4430 				 wcqe->total_data_placed,
4431 				 lpfc_cmd->cur_iocbq.iocb.ulpIoTag);
4432 		fallthrough;
4433 	default:
4434 		if (lpfc_cmd->status >= IOSTAT_CNT)
4435 			lpfc_cmd->status = IOSTAT_DEFAULT;
4436 		cmd->result = DID_ERROR << 16;
4437 		lpfc_printf_vlog(vport, KERN_INFO, LOG_NVME_IOERR,
4438 				 "9037 FCP Completion Error: xri %x "
4439 				 "status x%x result x%x [x%x] "
4440 				 "placed x%x\n",
4441 				 lpfc_cmd->cur_iocbq.sli4_xritag,
4442 				 lpfc_cmd->status, lpfc_cmd->result,
4443 				 wcqe->parameter,
4444 				 wcqe->total_data_placed);
4445 	}
4446 	if (cmd->result || lpfc_cmd->fcp_rsp->rspSnsLen) {
4447 		u32 *lp = (u32 *)cmd->sense_buffer;
4448 
4449 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4450 				 "9039 Iodone <%d/%llu> cmd x%px, error "
4451 				 "x%x SNS x%x x%x Data: x%x x%x\n",
4452 				 cmd->device->id, cmd->device->lun, cmd,
4453 				 cmd->result, *lp, *(lp + 3), cmd->retries,
4454 				 scsi_get_resid(cmd));
4455 	}
4456 
4457 	lpfc_update_stats(vport, lpfc_cmd);
4458 
4459 	if (vport->cfg_max_scsicmpl_time &&
4460 	    time_after(jiffies, lpfc_cmd->start_time +
4461 	    msecs_to_jiffies(vport->cfg_max_scsicmpl_time))) {
4462 		spin_lock_irqsave(shost->host_lock, flags);
4463 		if (ndlp) {
4464 			if (ndlp->cmd_qdepth >
4465 				atomic_read(&ndlp->cmd_pending) &&
4466 				(atomic_read(&ndlp->cmd_pending) >
4467 				LPFC_MIN_TGT_QDEPTH) &&
4468 				(cmd->cmnd[0] == READ_10 ||
4469 				cmd->cmnd[0] == WRITE_10))
4470 				ndlp->cmd_qdepth =
4471 					atomic_read(&ndlp->cmd_pending);
4472 
4473 			ndlp->last_change_time = jiffies;
4474 		}
4475 		spin_unlock_irqrestore(shost->host_lock, flags);
4476 	}
4477 	lpfc_scsi_unprep_dma_buf(phba, lpfc_cmd);
4478 
4479 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
4480 	if (lpfc_cmd->ts_cmd_start) {
4481 		lpfc_cmd->ts_isr_cmpl = lpfc_cmd->cur_iocbq.isr_timestamp;
4482 		lpfc_cmd->ts_data_io = ktime_get_ns();
4483 		phba->ktime_last_cmd = lpfc_cmd->ts_data_io;
4484 		lpfc_io_ktime(phba, lpfc_cmd);
4485 	}
4486 #endif
4487 	if (likely(!wait_xb_clr))
4488 		lpfc_cmd->pCmd = NULL;
4489 	spin_unlock(&lpfc_cmd->buf_lock);
4490 
4491 	/* Check if IO qualified for CMF */
4492 	if (phba->cmf_active_mode != LPFC_CFG_OFF &&
4493 	    cmd->sc_data_direction == DMA_FROM_DEVICE &&
4494 	    (scsi_sg_count(cmd))) {
4495 		/* Used when calculating average latency */
4496 		lat = ktime_get_ns() - lpfc_cmd->rx_cmd_start;
4497 		lpfc_update_cmf_cmpl(phba, lat, scsi_bufflen(cmd), shost);
4498 	}
4499 
4500 	if (wait_xb_clr)
4501 		goto out;
4502 
4503 	/* The sdev is not guaranteed to be valid post scsi_done upcall. */
4504 	scsi_done(cmd);
4505 
4506 	/*
4507 	 * If there is an abort thread waiting for command completion
4508 	 * wake up the thread.
4509 	 */
4510 	spin_lock(&lpfc_cmd->buf_lock);
4511 	lpfc_cmd->cur_iocbq.iocb_flag &= ~LPFC_DRIVER_ABORTED;
4512 	if (lpfc_cmd->waitq)
4513 		wake_up(lpfc_cmd->waitq);
4514 	spin_unlock(&lpfc_cmd->buf_lock);
4515 out:
4516 	lpfc_release_scsi_buf(phba, lpfc_cmd);
4517 }
4518 
4519 /**
4520  * lpfc_scsi_cmd_iocb_cmpl - Scsi cmnd IOCB completion routine
4521  * @phba: The Hba for which this call is being executed.
4522  * @pIocbIn: The command IOCBQ for the scsi cmnd.
4523  * @pIocbOut: The response IOCBQ for the scsi cmnd.
4524  *
4525  * This routine assigns scsi command result by looking into response IOCB
4526  * status field appropriately. This routine handles QUEUE FULL condition as
4527  * well by ramping down device queue depth.
4528  **/
4529 static void
4530 lpfc_scsi_cmd_iocb_cmpl(struct lpfc_hba *phba, struct lpfc_iocbq *pIocbIn,
4531 			struct lpfc_iocbq *pIocbOut)
4532 {
4533 	struct lpfc_io_buf *lpfc_cmd =
4534 		(struct lpfc_io_buf *) pIocbIn->context1;
4535 	struct lpfc_vport      *vport = pIocbIn->vport;
4536 	struct lpfc_rport_data *rdata = lpfc_cmd->rdata;
4537 	struct lpfc_nodelist *pnode = rdata->pnode;
4538 	struct scsi_cmnd *cmd;
4539 	unsigned long flags;
4540 	struct lpfc_fast_path_event *fast_path_evt;
4541 	struct Scsi_Host *shost;
4542 	int idx;
4543 	uint32_t logit = LOG_FCP;
4544 
4545 	/* Guard against abort handler being called at same time */
4546 	spin_lock(&lpfc_cmd->buf_lock);
4547 
4548 	/* Sanity check on return of outstanding command */
4549 	cmd = lpfc_cmd->pCmd;
4550 	if (!cmd || !phba) {
4551 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
4552 				 "2621 IO completion: Not an active IO\n");
4553 		spin_unlock(&lpfc_cmd->buf_lock);
4554 		return;
4555 	}
4556 
4557 	idx = lpfc_cmd->cur_iocbq.hba_wqidx;
4558 	if (phba->sli4_hba.hdwq)
4559 		phba->sli4_hba.hdwq[idx].scsi_cstat.io_cmpls++;
4560 
4561 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
4562 	if (unlikely(phba->hdwqstat_on & LPFC_CHECK_SCSI_IO))
4563 		this_cpu_inc(phba->sli4_hba.c_stat->cmpl_io);
4564 #endif
4565 	shost = cmd->device->host;
4566 
4567 	lpfc_cmd->result = (pIocbOut->iocb.un.ulpWord[4] & IOERR_PARAM_MASK);
4568 	lpfc_cmd->status = pIocbOut->iocb.ulpStatus;
4569 	/* pick up SLI4 exchange busy status from HBA */
4570 	lpfc_cmd->flags &= ~LPFC_SBUF_XBUSY;
4571 	if (pIocbOut->iocb_flag & LPFC_EXCHANGE_BUSY)
4572 		lpfc_cmd->flags |= LPFC_SBUF_XBUSY;
4573 
4574 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
4575 	if (lpfc_cmd->prot_data_type) {
4576 		struct scsi_dif_tuple *src = NULL;
4577 
4578 		src =  (struct scsi_dif_tuple *)lpfc_cmd->prot_data_segment;
4579 		/*
4580 		 * Used to restore any changes to protection
4581 		 * data for error injection.
4582 		 */
4583 		switch (lpfc_cmd->prot_data_type) {
4584 		case LPFC_INJERR_REFTAG:
4585 			src->ref_tag =
4586 				lpfc_cmd->prot_data;
4587 			break;
4588 		case LPFC_INJERR_APPTAG:
4589 			src->app_tag =
4590 				(uint16_t)lpfc_cmd->prot_data;
4591 			break;
4592 		case LPFC_INJERR_GUARD:
4593 			src->guard_tag =
4594 				(uint16_t)lpfc_cmd->prot_data;
4595 			break;
4596 		default:
4597 			break;
4598 		}
4599 
4600 		lpfc_cmd->prot_data = 0;
4601 		lpfc_cmd->prot_data_type = 0;
4602 		lpfc_cmd->prot_data_segment = NULL;
4603 	}
4604 #endif
4605 
4606 	if (unlikely(lpfc_cmd->status)) {
4607 		if (lpfc_cmd->status == IOSTAT_LOCAL_REJECT &&
4608 		    (lpfc_cmd->result & IOERR_DRVR_MASK))
4609 			lpfc_cmd->status = IOSTAT_DRIVER_REJECT;
4610 		else if (lpfc_cmd->status >= IOSTAT_CNT)
4611 			lpfc_cmd->status = IOSTAT_DEFAULT;
4612 		if (lpfc_cmd->status == IOSTAT_FCP_RSP_ERROR &&
4613 		    !lpfc_cmd->fcp_rsp->rspStatus3 &&
4614 		    (lpfc_cmd->fcp_rsp->rspStatus2 & RESID_UNDER) &&
4615 		    !(vport->cfg_log_verbose & LOG_FCP_UNDER))
4616 			logit = 0;
4617 		else
4618 			logit = LOG_FCP | LOG_FCP_UNDER;
4619 		lpfc_printf_vlog(vport, KERN_WARNING, logit,
4620 			 "9030 FCP cmd x%x failed <%d/%lld> "
4621 			 "status: x%x result: x%x "
4622 			 "sid: x%x did: x%x oxid: x%x "
4623 			 "Data: x%x x%x\n",
4624 			 cmd->cmnd[0],
4625 			 cmd->device ? cmd->device->id : 0xffff,
4626 			 cmd->device ? cmd->device->lun : 0xffff,
4627 			 lpfc_cmd->status, lpfc_cmd->result,
4628 			 vport->fc_myDID,
4629 			 (pnode) ? pnode->nlp_DID : 0,
4630 			 phba->sli_rev == LPFC_SLI_REV4 ?
4631 			     lpfc_cmd->cur_iocbq.sli4_xritag : 0xffff,
4632 			 pIocbOut->iocb.ulpContext,
4633 			 lpfc_cmd->cur_iocbq.iocb.ulpIoTag);
4634 
4635 		switch (lpfc_cmd->status) {
4636 		case IOSTAT_FCP_RSP_ERROR:
4637 			/* Call FCP RSP handler to determine result */
4638 			lpfc_handle_fcp_err(vport, lpfc_cmd,
4639 					    pIocbOut->iocb.un.fcpi.fcpi_parm);
4640 			break;
4641 		case IOSTAT_NPORT_BSY:
4642 		case IOSTAT_FABRIC_BSY:
4643 			cmd->result = DID_TRANSPORT_DISRUPTED << 16;
4644 			fast_path_evt = lpfc_alloc_fast_evt(phba);
4645 			if (!fast_path_evt)
4646 				break;
4647 			fast_path_evt->un.fabric_evt.event_type =
4648 				FC_REG_FABRIC_EVENT;
4649 			fast_path_evt->un.fabric_evt.subcategory =
4650 				(lpfc_cmd->status == IOSTAT_NPORT_BSY) ?
4651 				LPFC_EVENT_PORT_BUSY : LPFC_EVENT_FABRIC_BUSY;
4652 			if (pnode) {
4653 				memcpy(&fast_path_evt->un.fabric_evt.wwpn,
4654 					&pnode->nlp_portname,
4655 					sizeof(struct lpfc_name));
4656 				memcpy(&fast_path_evt->un.fabric_evt.wwnn,
4657 					&pnode->nlp_nodename,
4658 					sizeof(struct lpfc_name));
4659 			}
4660 			fast_path_evt->vport = vport;
4661 			fast_path_evt->work_evt.evt =
4662 				LPFC_EVT_FASTPATH_MGMT_EVT;
4663 			spin_lock_irqsave(&phba->hbalock, flags);
4664 			list_add_tail(&fast_path_evt->work_evt.evt_listp,
4665 				&phba->work_list);
4666 			spin_unlock_irqrestore(&phba->hbalock, flags);
4667 			lpfc_worker_wake_up(phba);
4668 			break;
4669 		case IOSTAT_LOCAL_REJECT:
4670 		case IOSTAT_REMOTE_STOP:
4671 			if (lpfc_cmd->result == IOERR_ELXSEC_KEY_UNWRAP_ERROR ||
4672 			    lpfc_cmd->result ==
4673 					IOERR_ELXSEC_KEY_UNWRAP_COMPARE_ERROR ||
4674 			    lpfc_cmd->result == IOERR_ELXSEC_CRYPTO_ERROR ||
4675 			    lpfc_cmd->result ==
4676 					IOERR_ELXSEC_CRYPTO_COMPARE_ERROR) {
4677 				cmd->result = DID_NO_CONNECT << 16;
4678 				break;
4679 			}
4680 			if (lpfc_cmd->result == IOERR_INVALID_RPI ||
4681 			    lpfc_cmd->result == IOERR_NO_RESOURCES ||
4682 			    lpfc_cmd->result == IOERR_ABORT_REQUESTED ||
4683 			    lpfc_cmd->result == IOERR_SLER_CMD_RCV_FAILURE) {
4684 				cmd->result = DID_REQUEUE << 16;
4685 				break;
4686 			}
4687 			if ((lpfc_cmd->result == IOERR_RX_DMA_FAILED ||
4688 			     lpfc_cmd->result == IOERR_TX_DMA_FAILED) &&
4689 			     pIocbOut->iocb.unsli3.sli3_bg.bgstat) {
4690 				if (scsi_get_prot_op(cmd) != SCSI_PROT_NORMAL) {
4691 					/*
4692 					 * This is a response for a BG enabled
4693 					 * cmd. Parse BG error
4694 					 */
4695 					lpfc_parse_bg_err(phba, lpfc_cmd,
4696 							pIocbOut);
4697 					break;
4698 				} else {
4699 					lpfc_printf_vlog(vport, KERN_WARNING,
4700 							LOG_BG,
4701 							"9031 non-zero BGSTAT "
4702 							"on unprotected cmd\n");
4703 				}
4704 			}
4705 			if ((lpfc_cmd->status == IOSTAT_REMOTE_STOP)
4706 				&& (phba->sli_rev == LPFC_SLI_REV4)
4707 				&& pnode) {
4708 				/* This IO was aborted by the target, we don't
4709 				 * know the rxid and because we did not send the
4710 				 * ABTS we cannot generate and RRQ.
4711 				 */
4712 				lpfc_set_rrq_active(phba, pnode,
4713 					lpfc_cmd->cur_iocbq.sli4_lxritag,
4714 					0, 0);
4715 			}
4716 			fallthrough;
4717 		default:
4718 			cmd->result = DID_ERROR << 16;
4719 			break;
4720 		}
4721 
4722 		if (!pnode || (pnode->nlp_state != NLP_STE_MAPPED_NODE))
4723 			cmd->result = DID_TRANSPORT_DISRUPTED << 16 |
4724 				      SAM_STAT_BUSY;
4725 	} else
4726 		cmd->result = DID_OK << 16;
4727 
4728 	if (cmd->result || lpfc_cmd->fcp_rsp->rspSnsLen) {
4729 		uint32_t *lp = (uint32_t *)cmd->sense_buffer;
4730 
4731 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
4732 				 "0710 Iodone <%d/%llu> cmd x%px, error "
4733 				 "x%x SNS x%x x%x Data: x%x x%x\n",
4734 				 cmd->device->id, cmd->device->lun, cmd,
4735 				 cmd->result, *lp, *(lp + 3), cmd->retries,
4736 				 scsi_get_resid(cmd));
4737 	}
4738 
4739 	lpfc_update_stats(vport, lpfc_cmd);
4740 	if (vport->cfg_max_scsicmpl_time &&
4741 	   time_after(jiffies, lpfc_cmd->start_time +
4742 		msecs_to_jiffies(vport->cfg_max_scsicmpl_time))) {
4743 		spin_lock_irqsave(shost->host_lock, flags);
4744 		if (pnode) {
4745 			if (pnode->cmd_qdepth >
4746 				atomic_read(&pnode->cmd_pending) &&
4747 				(atomic_read(&pnode->cmd_pending) >
4748 				LPFC_MIN_TGT_QDEPTH) &&
4749 				((cmd->cmnd[0] == READ_10) ||
4750 				(cmd->cmnd[0] == WRITE_10)))
4751 				pnode->cmd_qdepth =
4752 					atomic_read(&pnode->cmd_pending);
4753 
4754 			pnode->last_change_time = jiffies;
4755 		}
4756 		spin_unlock_irqrestore(shost->host_lock, flags);
4757 	}
4758 	lpfc_scsi_unprep_dma_buf(phba, lpfc_cmd);
4759 
4760 	lpfc_cmd->pCmd = NULL;
4761 	spin_unlock(&lpfc_cmd->buf_lock);
4762 
4763 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
4764 	if (lpfc_cmd->ts_cmd_start) {
4765 		lpfc_cmd->ts_isr_cmpl = pIocbIn->isr_timestamp;
4766 		lpfc_cmd->ts_data_io = ktime_get_ns();
4767 		phba->ktime_last_cmd = lpfc_cmd->ts_data_io;
4768 		lpfc_io_ktime(phba, lpfc_cmd);
4769 	}
4770 #endif
4771 
4772 	/* The sdev is not guaranteed to be valid post scsi_done upcall. */
4773 	scsi_done(cmd);
4774 
4775 	/*
4776 	 * If there is an abort thread waiting for command completion
4777 	 * wake up the thread.
4778 	 */
4779 	spin_lock(&lpfc_cmd->buf_lock);
4780 	lpfc_cmd->cur_iocbq.iocb_flag &= ~LPFC_DRIVER_ABORTED;
4781 	if (lpfc_cmd->waitq)
4782 		wake_up(lpfc_cmd->waitq);
4783 	spin_unlock(&lpfc_cmd->buf_lock);
4784 
4785 	lpfc_release_scsi_buf(phba, lpfc_cmd);
4786 }
4787 
4788 /**
4789  * lpfc_scsi_prep_cmnd_buf_s3 - SLI-3 IOCB init for the IO
4790  * @vport: Pointer to vport object.
4791  * @lpfc_cmd: The scsi buffer which is going to be prep'ed.
4792  * @tmo: timeout value for the IO
4793  *
4794  * Based on the data-direction of the command, initialize IOCB
4795  * in the I/O buffer. Fill in the IOCB fields which are independent
4796  * of the scsi buffer
4797  *
4798  * RETURNS 0 - SUCCESS,
4799  **/
4800 static int lpfc_scsi_prep_cmnd_buf_s3(struct lpfc_vport *vport,
4801 				      struct lpfc_io_buf *lpfc_cmd,
4802 				      uint8_t tmo)
4803 {
4804 	IOCB_t *iocb_cmd = &lpfc_cmd->cur_iocbq.iocb;
4805 	struct lpfc_iocbq *piocbq = &lpfc_cmd->cur_iocbq;
4806 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
4807 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
4808 	struct lpfc_nodelist *pnode = lpfc_cmd->ndlp;
4809 	int datadir = scsi_cmnd->sc_data_direction;
4810 	u32 fcpdl;
4811 
4812 	piocbq->iocb.un.fcpi.fcpi_XRdy = 0;
4813 
4814 	/*
4815 	 * There are three possibilities here - use scatter-gather segment, use
4816 	 * the single mapping, or neither.  Start the lpfc command prep by
4817 	 * bumping the bpl beyond the fcp_cmnd and fcp_rsp regions to the first
4818 	 * data bde entry.
4819 	 */
4820 	if (scsi_sg_count(scsi_cmnd)) {
4821 		if (datadir == DMA_TO_DEVICE) {
4822 			iocb_cmd->ulpCommand = CMD_FCP_IWRITE64_CR;
4823 			iocb_cmd->ulpPU = PARM_READ_CHECK;
4824 			if (vport->cfg_first_burst_size &&
4825 			    (pnode->nlp_flag & NLP_FIRSTBURST)) {
4826 				u32 xrdy_len;
4827 
4828 				fcpdl = scsi_bufflen(scsi_cmnd);
4829 				xrdy_len = min(fcpdl,
4830 					       vport->cfg_first_burst_size);
4831 				piocbq->iocb.un.fcpi.fcpi_XRdy = xrdy_len;
4832 			}
4833 			fcp_cmnd->fcpCntl3 = WRITE_DATA;
4834 		} else {
4835 			iocb_cmd->ulpCommand = CMD_FCP_IREAD64_CR;
4836 			iocb_cmd->ulpPU = PARM_READ_CHECK;
4837 			fcp_cmnd->fcpCntl3 = READ_DATA;
4838 		}
4839 	} else {
4840 		iocb_cmd->ulpCommand = CMD_FCP_ICMND64_CR;
4841 		iocb_cmd->un.fcpi.fcpi_parm = 0;
4842 		iocb_cmd->ulpPU = 0;
4843 		fcp_cmnd->fcpCntl3 = 0;
4844 	}
4845 
4846 	/*
4847 	 * Finish initializing those IOCB fields that are independent
4848 	 * of the scsi_cmnd request_buffer
4849 	 */
4850 	piocbq->iocb.ulpContext = pnode->nlp_rpi;
4851 	if (pnode->nlp_fcp_info & NLP_FCP_2_DEVICE)
4852 		piocbq->iocb.ulpFCP2Rcvy = 1;
4853 	else
4854 		piocbq->iocb.ulpFCP2Rcvy = 0;
4855 
4856 	piocbq->iocb.ulpClass = (pnode->nlp_fcp_info & 0x0f);
4857 	piocbq->context1  = lpfc_cmd;
4858 	if (!piocbq->iocb_cmpl)
4859 		piocbq->iocb_cmpl = lpfc_scsi_cmd_iocb_cmpl;
4860 	piocbq->iocb.ulpTimeout = tmo;
4861 	piocbq->vport = vport;
4862 	return 0;
4863 }
4864 
4865 /**
4866  * lpfc_scsi_prep_cmnd_buf_s4 - SLI-4 WQE init for the IO
4867  * @vport: Pointer to vport object.
4868  * @lpfc_cmd: The scsi buffer which is going to be prep'ed.
4869  * @tmo: timeout value for the IO
4870  *
4871  * Based on the data-direction of the command copy WQE template
4872  * to I/O buffer WQE. Fill in the WQE fields which are independent
4873  * of the scsi buffer
4874  *
4875  * RETURNS 0 - SUCCESS,
4876  **/
4877 static int lpfc_scsi_prep_cmnd_buf_s4(struct lpfc_vport *vport,
4878 				      struct lpfc_io_buf *lpfc_cmd,
4879 				      uint8_t tmo)
4880 {
4881 	struct lpfc_hba *phba = vport->phba;
4882 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
4883 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
4884 	struct lpfc_sli4_hdw_queue *hdwq = NULL;
4885 	struct lpfc_iocbq *pwqeq = &lpfc_cmd->cur_iocbq;
4886 	struct lpfc_nodelist *pnode = lpfc_cmd->ndlp;
4887 	union lpfc_wqe128 *wqe = &pwqeq->wqe;
4888 	u16 idx = lpfc_cmd->hdwq_no;
4889 	int datadir = scsi_cmnd->sc_data_direction;
4890 
4891 	hdwq = &phba->sli4_hba.hdwq[idx];
4892 
4893 	/* Initialize 64 bytes only */
4894 	memset(wqe, 0, sizeof(union lpfc_wqe128));
4895 
4896 	/*
4897 	 * There are three possibilities here - use scatter-gather segment, use
4898 	 * the single mapping, or neither.
4899 	 */
4900 	if (scsi_sg_count(scsi_cmnd)) {
4901 		if (datadir == DMA_TO_DEVICE) {
4902 			/* From the iwrite template, initialize words 7 -  11 */
4903 			memcpy(&wqe->words[7],
4904 			       &lpfc_iwrite_cmd_template.words[7],
4905 			       sizeof(uint32_t) * 5);
4906 
4907 			fcp_cmnd->fcpCntl3 = WRITE_DATA;
4908 			if (hdwq)
4909 				hdwq->scsi_cstat.output_requests++;
4910 		} else {
4911 			/* From the iread template, initialize words 7 - 11 */
4912 			memcpy(&wqe->words[7],
4913 			       &lpfc_iread_cmd_template.words[7],
4914 			       sizeof(uint32_t) * 5);
4915 
4916 			/* Word 7 */
4917 			bf_set(wqe_tmo, &wqe->fcp_iread.wqe_com, tmo);
4918 
4919 			fcp_cmnd->fcpCntl3 = READ_DATA;
4920 			if (hdwq)
4921 				hdwq->scsi_cstat.input_requests++;
4922 
4923 			/* For a CMF Managed port, iod must be zero'ed */
4924 			if (phba->cmf_active_mode == LPFC_CFG_MANAGED)
4925 				bf_set(wqe_iod, &wqe->fcp_iread.wqe_com,
4926 				       LPFC_WQE_IOD_NONE);
4927 		}
4928 	} else {
4929 		/* From the icmnd template, initialize words 4 - 11 */
4930 		memcpy(&wqe->words[4], &lpfc_icmnd_cmd_template.words[4],
4931 		       sizeof(uint32_t) * 8);
4932 
4933 		/* Word 7 */
4934 		bf_set(wqe_tmo, &wqe->fcp_icmd.wqe_com, tmo);
4935 
4936 		fcp_cmnd->fcpCntl3 = 0;
4937 		if (hdwq)
4938 			hdwq->scsi_cstat.control_requests++;
4939 	}
4940 
4941 	/*
4942 	 * Finish initializing those WQE fields that are independent
4943 	 * of the request_buffer
4944 	 */
4945 
4946 	 /* Word 3 */
4947 	bf_set(payload_offset_len, &wqe->fcp_icmd,
4948 	       sizeof(struct fcp_cmnd) + sizeof(struct fcp_rsp));
4949 
4950 	/* Word 6 */
4951 	bf_set(wqe_ctxt_tag, &wqe->generic.wqe_com,
4952 	       phba->sli4_hba.rpi_ids[pnode->nlp_rpi]);
4953 	bf_set(wqe_xri_tag, &wqe->generic.wqe_com, pwqeq->sli4_xritag);
4954 
4955 	/* Word 7*/
4956 	if (pnode->nlp_fcp_info & NLP_FCP_2_DEVICE)
4957 		bf_set(wqe_erp, &wqe->generic.wqe_com, 1);
4958 
4959 	bf_set(wqe_class, &wqe->generic.wqe_com,
4960 	       (pnode->nlp_fcp_info & 0x0f));
4961 
4962 	 /* Word 8 */
4963 	wqe->generic.wqe_com.abort_tag = pwqeq->iotag;
4964 
4965 	/* Word 9 */
4966 	bf_set(wqe_reqtag, &wqe->generic.wqe_com, pwqeq->iotag);
4967 
4968 	pwqeq->vport = vport;
4969 	pwqeq->vport = vport;
4970 	pwqeq->context1 = lpfc_cmd;
4971 	pwqeq->hba_wqidx = lpfc_cmd->hdwq_no;
4972 	pwqeq->wqe_cmpl = lpfc_fcp_io_cmd_wqe_cmpl;
4973 
4974 	return 0;
4975 }
4976 
4977 /**
4978  * lpfc_scsi_prep_cmnd - Wrapper func for convert scsi cmnd to FCP info unit
4979  * @vport: The virtual port for which this call is being executed.
4980  * @lpfc_cmd: The scsi command which needs to send.
4981  * @pnode: Pointer to lpfc_nodelist.
4982  *
4983  * This routine initializes fcp_cmnd and iocb data structure from scsi command
4984  * to transfer for device with SLI3 interface spec.
4985  **/
4986 static int
4987 lpfc_scsi_prep_cmnd(struct lpfc_vport *vport, struct lpfc_io_buf *lpfc_cmd,
4988 		    struct lpfc_nodelist *pnode)
4989 {
4990 	struct scsi_cmnd *scsi_cmnd = lpfc_cmd->pCmd;
4991 	struct fcp_cmnd *fcp_cmnd = lpfc_cmd->fcp_cmnd;
4992 	u8 *ptr;
4993 
4994 	if (!pnode)
4995 		return 0;
4996 
4997 	lpfc_cmd->fcp_rsp->rspSnsLen = 0;
4998 	/* clear task management bits */
4999 	lpfc_cmd->fcp_cmnd->fcpCntl2 = 0;
5000 
5001 	int_to_scsilun(lpfc_cmd->pCmd->device->lun,
5002 		       &lpfc_cmd->fcp_cmnd->fcp_lun);
5003 
5004 	ptr = &fcp_cmnd->fcpCdb[0];
5005 	memcpy(ptr, scsi_cmnd->cmnd, scsi_cmnd->cmd_len);
5006 	if (scsi_cmnd->cmd_len < LPFC_FCP_CDB_LEN) {
5007 		ptr += scsi_cmnd->cmd_len;
5008 		memset(ptr, 0, (LPFC_FCP_CDB_LEN - scsi_cmnd->cmd_len));
5009 	}
5010 
5011 	fcp_cmnd->fcpCntl1 = SIMPLE_Q;
5012 
5013 	lpfc_scsi_prep_cmnd_buf(vport, lpfc_cmd, lpfc_cmd->timeout);
5014 
5015 	return 0;
5016 }
5017 
5018 /**
5019  * lpfc_scsi_prep_task_mgmt_cmd - Convert SLI3 scsi TM cmd to FCP info unit
5020  * @vport: The virtual port for which this call is being executed.
5021  * @lpfc_cmd: Pointer to lpfc_io_buf data structure.
5022  * @lun: Logical unit number.
5023  * @task_mgmt_cmd: SCSI task management command.
5024  *
5025  * This routine creates FCP information unit corresponding to @task_mgmt_cmd
5026  * for device with SLI-3 interface spec.
5027  *
5028  * Return codes:
5029  *   0 - Error
5030  *   1 - Success
5031  **/
5032 static int
5033 lpfc_scsi_prep_task_mgmt_cmd(struct lpfc_vport *vport,
5034 			     struct lpfc_io_buf *lpfc_cmd,
5035 			     uint64_t lun,
5036 			     uint8_t task_mgmt_cmd)
5037 {
5038 	struct lpfc_iocbq *piocbq;
5039 	IOCB_t *piocb;
5040 	struct fcp_cmnd *fcp_cmnd;
5041 	struct lpfc_rport_data *rdata = lpfc_cmd->rdata;
5042 	struct lpfc_nodelist *ndlp = rdata->pnode;
5043 
5044 	if (!ndlp || ndlp->nlp_state != NLP_STE_MAPPED_NODE)
5045 		return 0;
5046 
5047 	piocbq = &(lpfc_cmd->cur_iocbq);
5048 	piocbq->vport = vport;
5049 
5050 	piocb = &piocbq->iocb;
5051 
5052 	fcp_cmnd = lpfc_cmd->fcp_cmnd;
5053 	/* Clear out any old data in the FCP command area */
5054 	memset(fcp_cmnd, 0, sizeof(struct fcp_cmnd));
5055 	int_to_scsilun(lun, &fcp_cmnd->fcp_lun);
5056 	fcp_cmnd->fcpCntl2 = task_mgmt_cmd;
5057 	if (vport->phba->sli_rev == 3 &&
5058 	    !(vport->phba->sli3_options & LPFC_SLI3_BG_ENABLED))
5059 		lpfc_fcpcmd_to_iocb(piocb->unsli3.fcp_ext.icd, fcp_cmnd);
5060 	piocb->ulpCommand = CMD_FCP_ICMND64_CR;
5061 	piocb->ulpContext = ndlp->nlp_rpi;
5062 	if (vport->phba->sli_rev == LPFC_SLI_REV4) {
5063 		piocb->ulpContext =
5064 		  vport->phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
5065 	}
5066 	piocb->ulpFCP2Rcvy = (ndlp->nlp_fcp_info & NLP_FCP_2_DEVICE) ? 1 : 0;
5067 	piocb->ulpClass = (ndlp->nlp_fcp_info & 0x0f);
5068 	piocb->ulpPU = 0;
5069 	piocb->un.fcpi.fcpi_parm = 0;
5070 
5071 	/* ulpTimeout is only one byte */
5072 	if (lpfc_cmd->timeout > 0xff) {
5073 		/*
5074 		 * Do not timeout the command at the firmware level.
5075 		 * The driver will provide the timeout mechanism.
5076 		 */
5077 		piocb->ulpTimeout = 0;
5078 	} else
5079 		piocb->ulpTimeout = lpfc_cmd->timeout;
5080 
5081 	if (vport->phba->sli_rev == LPFC_SLI_REV4)
5082 		lpfc_sli4_set_rsp_sgl_last(vport->phba, lpfc_cmd);
5083 
5084 	return 1;
5085 }
5086 
5087 /**
5088  * lpfc_scsi_api_table_setup - Set up scsi api function jump table
5089  * @phba: The hba struct for which this call is being executed.
5090  * @dev_grp: The HBA PCI-Device group number.
5091  *
5092  * This routine sets up the SCSI interface API function jump table in @phba
5093  * struct.
5094  * Returns: 0 - success, -ENODEV - failure.
5095  **/
5096 int
5097 lpfc_scsi_api_table_setup(struct lpfc_hba *phba, uint8_t dev_grp)
5098 {
5099 
5100 	phba->lpfc_scsi_unprep_dma_buf = lpfc_scsi_unprep_dma_buf;
5101 
5102 	switch (dev_grp) {
5103 	case LPFC_PCI_DEV_LP:
5104 		phba->lpfc_scsi_prep_dma_buf = lpfc_scsi_prep_dma_buf_s3;
5105 		phba->lpfc_bg_scsi_prep_dma_buf = lpfc_bg_scsi_prep_dma_buf_s3;
5106 		phba->lpfc_release_scsi_buf = lpfc_release_scsi_buf_s3;
5107 		phba->lpfc_get_scsi_buf = lpfc_get_scsi_buf_s3;
5108 		phba->lpfc_scsi_prep_cmnd_buf = lpfc_scsi_prep_cmnd_buf_s3;
5109 		break;
5110 	case LPFC_PCI_DEV_OC:
5111 		phba->lpfc_scsi_prep_dma_buf = lpfc_scsi_prep_dma_buf_s4;
5112 		phba->lpfc_bg_scsi_prep_dma_buf = lpfc_bg_scsi_prep_dma_buf_s4;
5113 		phba->lpfc_release_scsi_buf = lpfc_release_scsi_buf_s4;
5114 		phba->lpfc_get_scsi_buf = lpfc_get_scsi_buf_s4;
5115 		phba->lpfc_scsi_prep_cmnd_buf = lpfc_scsi_prep_cmnd_buf_s4;
5116 		break;
5117 	default:
5118 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
5119 				"1418 Invalid HBA PCI-device group: 0x%x\n",
5120 				dev_grp);
5121 		return -ENODEV;
5122 	}
5123 	phba->lpfc_rampdown_queue_depth = lpfc_rampdown_queue_depth;
5124 	phba->lpfc_scsi_cmd_iocb_cmpl = lpfc_scsi_cmd_iocb_cmpl;
5125 	return 0;
5126 }
5127 
5128 /**
5129  * lpfc_tskmgmt_def_cmpl - IOCB completion routine for task management command
5130  * @phba: The Hba for which this call is being executed.
5131  * @cmdiocbq: Pointer to lpfc_iocbq data structure.
5132  * @rspiocbq: Pointer to lpfc_iocbq data structure.
5133  *
5134  * This routine is IOCB completion routine for device reset and target reset
5135  * routine. This routine release scsi buffer associated with lpfc_cmd.
5136  **/
5137 static void
5138 lpfc_tskmgmt_def_cmpl(struct lpfc_hba *phba,
5139 			struct lpfc_iocbq *cmdiocbq,
5140 			struct lpfc_iocbq *rspiocbq)
5141 {
5142 	struct lpfc_io_buf *lpfc_cmd =
5143 		(struct lpfc_io_buf *) cmdiocbq->context1;
5144 	if (lpfc_cmd)
5145 		lpfc_release_scsi_buf(phba, lpfc_cmd);
5146 	return;
5147 }
5148 
5149 /**
5150  * lpfc_check_pci_resettable - Walks list of devices on pci_dev's bus to check
5151  *                             if issuing a pci_bus_reset is possibly unsafe
5152  * @phba: lpfc_hba pointer.
5153  *
5154  * Description:
5155  * Walks the bus_list to ensure only PCI devices with Emulex
5156  * vendor id, device ids that support hot reset, and only one occurrence
5157  * of function 0.
5158  *
5159  * Returns:
5160  * -EBADSLT,  detected invalid device
5161  *      0,    successful
5162  */
5163 int
5164 lpfc_check_pci_resettable(struct lpfc_hba *phba)
5165 {
5166 	const struct pci_dev *pdev = phba->pcidev;
5167 	struct pci_dev *ptr = NULL;
5168 	u8 counter = 0;
5169 
5170 	/* Walk the list of devices on the pci_dev's bus */
5171 	list_for_each_entry(ptr, &pdev->bus->devices, bus_list) {
5172 		/* Check for Emulex Vendor ID */
5173 		if (ptr->vendor != PCI_VENDOR_ID_EMULEX) {
5174 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
5175 					"8346 Non-Emulex vendor found: "
5176 					"0x%04x\n", ptr->vendor);
5177 			return -EBADSLT;
5178 		}
5179 
5180 		/* Check for valid Emulex Device ID */
5181 		if (phba->sli_rev != LPFC_SLI_REV4 ||
5182 		    phba->hba_flag & HBA_FCOE_MODE) {
5183 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
5184 					"8347 Incapable PCI reset device: "
5185 					"0x%04x\n", ptr->device);
5186 			return -EBADSLT;
5187 		}
5188 
5189 		/* Check for only one function 0 ID to ensure only one HBA on
5190 		 * secondary bus
5191 		 */
5192 		if (ptr->devfn == 0) {
5193 			if (++counter > 1) {
5194 				lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
5195 						"8348 More than one device on "
5196 						"secondary bus found\n");
5197 				return -EBADSLT;
5198 			}
5199 		}
5200 	}
5201 
5202 	return 0;
5203 }
5204 
5205 /**
5206  * lpfc_info - Info entry point of scsi_host_template data structure
5207  * @host: The scsi host for which this call is being executed.
5208  *
5209  * This routine provides module information about hba.
5210  *
5211  * Reutrn code:
5212  *   Pointer to char - Success.
5213  **/
5214 const char *
5215 lpfc_info(struct Scsi_Host *host)
5216 {
5217 	struct lpfc_vport *vport = (struct lpfc_vport *) host->hostdata;
5218 	struct lpfc_hba   *phba = vport->phba;
5219 	int link_speed = 0;
5220 	static char lpfcinfobuf[384];
5221 	char tmp[384] = {0};
5222 
5223 	memset(lpfcinfobuf, 0, sizeof(lpfcinfobuf));
5224 	if (phba && phba->pcidev){
5225 		/* Model Description */
5226 		scnprintf(tmp, sizeof(tmp), phba->ModelDesc);
5227 		if (strlcat(lpfcinfobuf, tmp, sizeof(lpfcinfobuf)) >=
5228 		    sizeof(lpfcinfobuf))
5229 			goto buffer_done;
5230 
5231 		/* PCI Info */
5232 		scnprintf(tmp, sizeof(tmp),
5233 			  " on PCI bus %02x device %02x irq %d",
5234 			  phba->pcidev->bus->number, phba->pcidev->devfn,
5235 			  phba->pcidev->irq);
5236 		if (strlcat(lpfcinfobuf, tmp, sizeof(lpfcinfobuf)) >=
5237 		    sizeof(lpfcinfobuf))
5238 			goto buffer_done;
5239 
5240 		/* Port Number */
5241 		if (phba->Port[0]) {
5242 			scnprintf(tmp, sizeof(tmp), " port %s", phba->Port);
5243 			if (strlcat(lpfcinfobuf, tmp, sizeof(lpfcinfobuf)) >=
5244 			    sizeof(lpfcinfobuf))
5245 				goto buffer_done;
5246 		}
5247 
5248 		/* Link Speed */
5249 		link_speed = lpfc_sli_port_speed_get(phba);
5250 		if (link_speed != 0) {
5251 			scnprintf(tmp, sizeof(tmp),
5252 				  " Logical Link Speed: %d Mbps", link_speed);
5253 			if (strlcat(lpfcinfobuf, tmp, sizeof(lpfcinfobuf)) >=
5254 			    sizeof(lpfcinfobuf))
5255 				goto buffer_done;
5256 		}
5257 
5258 		/* PCI resettable */
5259 		if (!lpfc_check_pci_resettable(phba)) {
5260 			scnprintf(tmp, sizeof(tmp), " PCI resettable");
5261 			strlcat(lpfcinfobuf, tmp, sizeof(lpfcinfobuf));
5262 		}
5263 	}
5264 
5265 buffer_done:
5266 	return lpfcinfobuf;
5267 }
5268 
5269 /**
5270  * lpfc_poll_rearm_timer - Routine to modify fcp_poll timer of hba
5271  * @phba: The Hba for which this call is being executed.
5272  *
5273  * This routine modifies fcp_poll_timer  field of @phba by cfg_poll_tmo.
5274  * The default value of cfg_poll_tmo is 10 milliseconds.
5275  **/
5276 static __inline__ void lpfc_poll_rearm_timer(struct lpfc_hba * phba)
5277 {
5278 	unsigned long  poll_tmo_expires =
5279 		(jiffies + msecs_to_jiffies(phba->cfg_poll_tmo));
5280 
5281 	if (!list_empty(&phba->sli.sli3_ring[LPFC_FCP_RING].txcmplq))
5282 		mod_timer(&phba->fcp_poll_timer,
5283 			  poll_tmo_expires);
5284 }
5285 
5286 /**
5287  * lpfc_poll_start_timer - Routine to start fcp_poll_timer of HBA
5288  * @phba: The Hba for which this call is being executed.
5289  *
5290  * This routine starts the fcp_poll_timer of @phba.
5291  **/
5292 void lpfc_poll_start_timer(struct lpfc_hba * phba)
5293 {
5294 	lpfc_poll_rearm_timer(phba);
5295 }
5296 
5297 /**
5298  * lpfc_poll_timeout - Restart polling timer
5299  * @t: Timer construct where lpfc_hba data structure pointer is obtained.
5300  *
5301  * This routine restarts fcp_poll timer, when FCP ring  polling is enable
5302  * and FCP Ring interrupt is disable.
5303  **/
5304 void lpfc_poll_timeout(struct timer_list *t)
5305 {
5306 	struct lpfc_hba *phba = from_timer(phba, t, fcp_poll_timer);
5307 
5308 	if (phba->cfg_poll & ENABLE_FCP_RING_POLLING) {
5309 		lpfc_sli_handle_fast_ring_event(phba,
5310 			&phba->sli.sli3_ring[LPFC_FCP_RING], HA_R0RE_REQ);
5311 
5312 		if (phba->cfg_poll & DISABLE_FCP_RING_INT)
5313 			lpfc_poll_rearm_timer(phba);
5314 	}
5315 }
5316 
5317 /*
5318  * lpfc_get_vmid_from_hashtable - search the UUID in the hash table
5319  * @vport: The virtual port for which this call is being executed.
5320  * @hash: calculated hash value
5321  * @buf: uuid associated with the VE
5322  * Return the VMID entry associated with the UUID
5323  * Make sure to acquire the appropriate lock before invoking this routine.
5324  */
5325 struct lpfc_vmid *lpfc_get_vmid_from_hashtable(struct lpfc_vport *vport,
5326 					      u32 hash, u8 *buf)
5327 {
5328 	struct lpfc_vmid *vmp;
5329 
5330 	hash_for_each_possible(vport->hash_table, vmp, hnode, hash) {
5331 		if (memcmp(&vmp->host_vmid[0], buf, 16) == 0)
5332 			return vmp;
5333 	}
5334 	return NULL;
5335 }
5336 
5337 /*
5338  * lpfc_put_vmid_in_hashtable - put the VMID in the hash table
5339  * @vport: The virtual port for which this call is being executed.
5340  * @hash - calculated hash value
5341  * @vmp: Pointer to a VMID entry representing a VM sending I/O
5342  *
5343  * This routine will insert the newly acquired VMID entity in the hash table.
5344  * Make sure to acquire the appropriate lock before invoking this routine.
5345  */
5346 static void
5347 lpfc_put_vmid_in_hashtable(struct lpfc_vport *vport, u32 hash,
5348 			   struct lpfc_vmid *vmp)
5349 {
5350 	hash_add(vport->hash_table, &vmp->hnode, hash);
5351 }
5352 
5353 /*
5354  * lpfc_vmid_hash_fn - create a hash value of the UUID
5355  * @vmid: uuid associated with the VE
5356  * @len: length of the VMID string
5357  * Returns the calculated hash value
5358  */
5359 int lpfc_vmid_hash_fn(const char *vmid, int len)
5360 {
5361 	int c;
5362 	int hash = 0;
5363 
5364 	if (len == 0)
5365 		return 0;
5366 	while (len--) {
5367 		c = *vmid++;
5368 		if (c >= 'A' && c <= 'Z')
5369 			c += 'a' - 'A';
5370 
5371 		hash = (hash + (c << LPFC_VMID_HASH_SHIFT) +
5372 			(c >> LPFC_VMID_HASH_SHIFT)) * 19;
5373 	}
5374 
5375 	return hash & LPFC_VMID_HASH_MASK;
5376 }
5377 
5378 /*
5379  * lpfc_vmid_update_entry - update the vmid entry in the hash table
5380  * @vport: The virtual port for which this call is being executed.
5381  * @cmd: address of scsi cmd descriptor
5382  * @vmp: Pointer to a VMID entry representing a VM sending I/O
5383  * @tag: VMID tag
5384  */
5385 static void lpfc_vmid_update_entry(struct lpfc_vport *vport, struct scsi_cmnd
5386 				   *cmd, struct lpfc_vmid *vmp,
5387 				   union lpfc_vmid_io_tag *tag)
5388 {
5389 	u64 *lta;
5390 
5391 	if (vport->vmid_priority_tagging)
5392 		tag->cs_ctl_vmid = vmp->un.cs_ctl_vmid;
5393 	else
5394 		tag->app_id = vmp->un.app_id;
5395 
5396 	if (cmd->sc_data_direction == DMA_TO_DEVICE)
5397 		vmp->io_wr_cnt++;
5398 	else
5399 		vmp->io_rd_cnt++;
5400 
5401 	/* update the last access timestamp in the table */
5402 	lta = per_cpu_ptr(vmp->last_io_time, raw_smp_processor_id());
5403 	*lta = jiffies;
5404 }
5405 
5406 static void lpfc_vmid_assign_cs_ctl(struct lpfc_vport *vport,
5407 				    struct lpfc_vmid *vmid)
5408 {
5409 	u32 hash;
5410 	struct lpfc_vmid *pvmid;
5411 
5412 	if (vport->port_type == LPFC_PHYSICAL_PORT) {
5413 		vmid->un.cs_ctl_vmid = lpfc_vmid_get_cs_ctl(vport);
5414 	} else {
5415 		hash = lpfc_vmid_hash_fn(vmid->host_vmid, vmid->vmid_len);
5416 		pvmid =
5417 		    lpfc_get_vmid_from_hashtable(vport->phba->pport, hash,
5418 						vmid->host_vmid);
5419 		if (pvmid)
5420 			vmid->un.cs_ctl_vmid = pvmid->un.cs_ctl_vmid;
5421 		else
5422 			vmid->un.cs_ctl_vmid = lpfc_vmid_get_cs_ctl(vport);
5423 	}
5424 }
5425 
5426 /*
5427  * lpfc_vmid_get_appid - get the VMID associated with the UUID
5428  * @vport: The virtual port for which this call is being executed.
5429  * @uuid: UUID associated with the VE
5430  * @cmd: address of scsi_cmd descriptor
5431  * @tag: VMID tag
5432  * Returns status of the function
5433  */
5434 static int lpfc_vmid_get_appid(struct lpfc_vport *vport, char *uuid, struct
5435 			       scsi_cmnd * cmd, union lpfc_vmid_io_tag *tag)
5436 {
5437 	struct lpfc_vmid *vmp = NULL;
5438 	int hash, len, rc, i;
5439 
5440 	/* check if QFPA is complete */
5441 	if (lpfc_vmid_is_type_priority_tag(vport) && !(vport->vmid_flag &
5442 	      LPFC_VMID_QFPA_CMPL)) {
5443 		vport->work_port_events |= WORKER_CHECK_VMID_ISSUE_QFPA;
5444 		return -EAGAIN;
5445 	}
5446 
5447 	/* search if the UUID has already been mapped to the VMID */
5448 	len = strlen(uuid);
5449 	hash = lpfc_vmid_hash_fn(uuid, len);
5450 
5451 	/* search for the VMID in the table */
5452 	read_lock(&vport->vmid_lock);
5453 	vmp = lpfc_get_vmid_from_hashtable(vport, hash, uuid);
5454 
5455 	/* if found, check if its already registered  */
5456 	if (vmp  && vmp->flag & LPFC_VMID_REGISTERED) {
5457 		read_unlock(&vport->vmid_lock);
5458 		lpfc_vmid_update_entry(vport, cmd, vmp, tag);
5459 		rc = 0;
5460 	} else if (vmp && (vmp->flag & LPFC_VMID_REQ_REGISTER ||
5461 			   vmp->flag & LPFC_VMID_DE_REGISTER)) {
5462 		/* else if register or dereg request has already been sent */
5463 		/* Hence VMID tag will not be added for this I/O */
5464 		read_unlock(&vport->vmid_lock);
5465 		rc = -EBUSY;
5466 	} else {
5467 		/* The VMID was not found in the hashtable. At this point, */
5468 		/* drop the read lock first before proceeding further */
5469 		read_unlock(&vport->vmid_lock);
5470 		/* start the process to obtain one as per the */
5471 		/* type of the VMID indicated */
5472 		write_lock(&vport->vmid_lock);
5473 		vmp = lpfc_get_vmid_from_hashtable(vport, hash, uuid);
5474 
5475 		/* while the read lock was released, in case the entry was */
5476 		/* added by other context or is in process of being added */
5477 		if (vmp && vmp->flag & LPFC_VMID_REGISTERED) {
5478 			lpfc_vmid_update_entry(vport, cmd, vmp, tag);
5479 			write_unlock(&vport->vmid_lock);
5480 			return 0;
5481 		} else if (vmp && vmp->flag & LPFC_VMID_REQ_REGISTER) {
5482 			write_unlock(&vport->vmid_lock);
5483 			return -EBUSY;
5484 		}
5485 
5486 		/* else search and allocate a free slot in the hash table */
5487 		if (vport->cur_vmid_cnt < vport->max_vmid) {
5488 			for (i = 0; i < vport->max_vmid; i++) {
5489 				vmp = vport->vmid + i;
5490 				if (vmp->flag == LPFC_VMID_SLOT_FREE)
5491 					break;
5492 			}
5493 			if (i == vport->max_vmid)
5494 				vmp = NULL;
5495 		} else {
5496 			vmp = NULL;
5497 		}
5498 
5499 		if (!vmp) {
5500 			write_unlock(&vport->vmid_lock);
5501 			return -ENOMEM;
5502 		}
5503 
5504 		/* Add the vmid and register */
5505 		lpfc_put_vmid_in_hashtable(vport, hash, vmp);
5506 		vmp->vmid_len = len;
5507 		memcpy(vmp->host_vmid, uuid, vmp->vmid_len);
5508 		vmp->io_rd_cnt = 0;
5509 		vmp->io_wr_cnt = 0;
5510 		vmp->flag = LPFC_VMID_SLOT_USED;
5511 
5512 		vmp->delete_inactive =
5513 			vport->vmid_inactivity_timeout ? 1 : 0;
5514 
5515 		/* if type priority tag, get next available VMID */
5516 		if (lpfc_vmid_is_type_priority_tag(vport))
5517 			lpfc_vmid_assign_cs_ctl(vport, vmp);
5518 
5519 		/* allocate the per cpu variable for holding */
5520 		/* the last access time stamp only if VMID is enabled */
5521 		if (!vmp->last_io_time)
5522 			vmp->last_io_time = __alloc_percpu(sizeof(u64),
5523 							   __alignof__(struct
5524 							   lpfc_vmid));
5525 		if (!vmp->last_io_time) {
5526 			hash_del(&vmp->hnode);
5527 			vmp->flag = LPFC_VMID_SLOT_FREE;
5528 			write_unlock(&vport->vmid_lock);
5529 			return -EIO;
5530 		}
5531 
5532 		write_unlock(&vport->vmid_lock);
5533 
5534 		/* complete transaction with switch */
5535 		if (lpfc_vmid_is_type_priority_tag(vport))
5536 			rc = lpfc_vmid_uvem(vport, vmp, true);
5537 		else
5538 			rc = lpfc_vmid_cmd(vport, SLI_CTAS_RAPP_IDENT, vmp);
5539 		if (!rc) {
5540 			write_lock(&vport->vmid_lock);
5541 			vport->cur_vmid_cnt++;
5542 			vmp->flag |= LPFC_VMID_REQ_REGISTER;
5543 			write_unlock(&vport->vmid_lock);
5544 		} else {
5545 			write_lock(&vport->vmid_lock);
5546 			hash_del(&vmp->hnode);
5547 			vmp->flag = LPFC_VMID_SLOT_FREE;
5548 			free_percpu(vmp->last_io_time);
5549 			write_unlock(&vport->vmid_lock);
5550 			return -EIO;
5551 		}
5552 
5553 		/* finally, enable the idle timer once */
5554 		if (!(vport->phba->pport->vmid_flag & LPFC_VMID_TIMER_ENBLD)) {
5555 			mod_timer(&vport->phba->inactive_vmid_poll,
5556 				  jiffies +
5557 				  msecs_to_jiffies(1000 * LPFC_VMID_TIMER));
5558 			vport->phba->pport->vmid_flag |= LPFC_VMID_TIMER_ENBLD;
5559 		}
5560 	}
5561 	return rc;
5562 }
5563 
5564 /*
5565  * lpfc_is_command_vm_io - get the UUID from blk cgroup
5566  * @cmd: Pointer to scsi_cmnd data structure
5567  * Returns UUID if present, otherwise NULL
5568  */
5569 static char *lpfc_is_command_vm_io(struct scsi_cmnd *cmd)
5570 {
5571 	struct bio *bio = scsi_cmd_to_rq(cmd)->bio;
5572 
5573 	return bio ? blkcg_get_fc_appid(bio) : NULL;
5574 }
5575 
5576 /**
5577  * lpfc_queuecommand - scsi_host_template queuecommand entry point
5578  * @shost: kernel scsi host pointer.
5579  * @cmnd: Pointer to scsi_cmnd data structure.
5580  *
5581  * Driver registers this routine to scsi midlayer to submit a @cmd to process.
5582  * This routine prepares an IOCB from scsi command and provides to firmware.
5583  * The @done callback is invoked after driver finished processing the command.
5584  *
5585  * Return value :
5586  *   0 - Success
5587  *   SCSI_MLQUEUE_HOST_BUSY - Block all devices served by this host temporarily.
5588  **/
5589 static int
5590 lpfc_queuecommand(struct Scsi_Host *shost, struct scsi_cmnd *cmnd)
5591 {
5592 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
5593 	struct lpfc_hba   *phba = vport->phba;
5594 	struct lpfc_rport_data *rdata;
5595 	struct lpfc_nodelist *ndlp;
5596 	struct lpfc_io_buf *lpfc_cmd;
5597 	struct fc_rport *rport = starget_to_rport(scsi_target(cmnd->device));
5598 	int err, idx;
5599 	u8 *uuid = NULL;
5600 	uint64_t start;
5601 
5602 	start = ktime_get_ns();
5603 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
5604 
5605 	/* sanity check on references */
5606 	if (unlikely(!rdata) || unlikely(!rport))
5607 		goto out_fail_command;
5608 
5609 	err = fc_remote_port_chkready(rport);
5610 	if (err) {
5611 		cmnd->result = err;
5612 		goto out_fail_command;
5613 	}
5614 	ndlp = rdata->pnode;
5615 
5616 	if ((scsi_get_prot_op(cmnd) != SCSI_PROT_NORMAL) &&
5617 		(!(phba->sli3_options & LPFC_SLI3_BG_ENABLED))) {
5618 
5619 		lpfc_printf_log(phba, KERN_ERR, LOG_TRACE_EVENT,
5620 				"9058 BLKGRD: ERROR: rcvd protected cmd:%02x"
5621 				" op:%02x str=%s without registering for"
5622 				" BlockGuard - Rejecting command\n",
5623 				cmnd->cmnd[0], scsi_get_prot_op(cmnd),
5624 				dif_op_str[scsi_get_prot_op(cmnd)]);
5625 		goto out_fail_command;
5626 	}
5627 
5628 	/*
5629 	 * Catch race where our node has transitioned, but the
5630 	 * transport is still transitioning.
5631 	 */
5632 	if (!ndlp)
5633 		goto out_tgt_busy1;
5634 
5635 	/* Check if IO qualifies for CMF */
5636 	if (phba->cmf_active_mode != LPFC_CFG_OFF &&
5637 	    cmnd->sc_data_direction == DMA_FROM_DEVICE &&
5638 	    (scsi_sg_count(cmnd))) {
5639 		/* Latency start time saved in rx_cmd_start later in routine */
5640 		err = lpfc_update_cmf_cmd(phba, scsi_bufflen(cmnd));
5641 		if (err)
5642 			goto out_tgt_busy1;
5643 	}
5644 
5645 	if (lpfc_ndlp_check_qdepth(phba, ndlp)) {
5646 		if (atomic_read(&ndlp->cmd_pending) >= ndlp->cmd_qdepth) {
5647 			lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP_ERROR,
5648 					 "3377 Target Queue Full, scsi Id:%d "
5649 					 "Qdepth:%d Pending command:%d"
5650 					 " WWNN:%02x:%02x:%02x:%02x:"
5651 					 "%02x:%02x:%02x:%02x, "
5652 					 " WWPN:%02x:%02x:%02x:%02x:"
5653 					 "%02x:%02x:%02x:%02x",
5654 					 ndlp->nlp_sid, ndlp->cmd_qdepth,
5655 					 atomic_read(&ndlp->cmd_pending),
5656 					 ndlp->nlp_nodename.u.wwn[0],
5657 					 ndlp->nlp_nodename.u.wwn[1],
5658 					 ndlp->nlp_nodename.u.wwn[2],
5659 					 ndlp->nlp_nodename.u.wwn[3],
5660 					 ndlp->nlp_nodename.u.wwn[4],
5661 					 ndlp->nlp_nodename.u.wwn[5],
5662 					 ndlp->nlp_nodename.u.wwn[6],
5663 					 ndlp->nlp_nodename.u.wwn[7],
5664 					 ndlp->nlp_portname.u.wwn[0],
5665 					 ndlp->nlp_portname.u.wwn[1],
5666 					 ndlp->nlp_portname.u.wwn[2],
5667 					 ndlp->nlp_portname.u.wwn[3],
5668 					 ndlp->nlp_portname.u.wwn[4],
5669 					 ndlp->nlp_portname.u.wwn[5],
5670 					 ndlp->nlp_portname.u.wwn[6],
5671 					 ndlp->nlp_portname.u.wwn[7]);
5672 			goto out_tgt_busy2;
5673 		}
5674 	}
5675 
5676 	lpfc_cmd = lpfc_get_scsi_buf(phba, ndlp, cmnd);
5677 	if (lpfc_cmd == NULL) {
5678 		lpfc_rampdown_queue_depth(phba);
5679 
5680 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP_ERROR,
5681 				 "0707 driver's buffer pool is empty, "
5682 				 "IO busied\n");
5683 		goto out_host_busy;
5684 	}
5685 	lpfc_cmd->rx_cmd_start = start;
5686 
5687 	/*
5688 	 * Store the midlayer's command structure for the completion phase
5689 	 * and complete the command initialization.
5690 	 */
5691 	lpfc_cmd->pCmd  = cmnd;
5692 	lpfc_cmd->rdata = rdata;
5693 	lpfc_cmd->ndlp = ndlp;
5694 	lpfc_cmd->cur_iocbq.iocb_cmpl = NULL;
5695 	cmnd->host_scribble = (unsigned char *)lpfc_cmd;
5696 
5697 	err = lpfc_scsi_prep_cmnd(vport, lpfc_cmd, ndlp);
5698 	if (err)
5699 		goto out_host_busy_release_buf;
5700 
5701 	if (scsi_get_prot_op(cmnd) != SCSI_PROT_NORMAL) {
5702 		if (vport->phba->cfg_enable_bg) {
5703 			lpfc_printf_vlog(vport,
5704 					 KERN_INFO, LOG_SCSI_CMD,
5705 					 "9033 BLKGRD: rcvd %s cmd:x%x "
5706 					 "reftag x%x cnt %u pt %x\n",
5707 					 dif_op_str[scsi_get_prot_op(cmnd)],
5708 					 cmnd->cmnd[0],
5709 					 scsi_prot_ref_tag(cmnd),
5710 					 scsi_logical_block_count(cmnd),
5711 					 (cmnd->cmnd[1]>>5));
5712 		}
5713 		err = lpfc_bg_scsi_prep_dma_buf(phba, lpfc_cmd);
5714 	} else {
5715 		if (vport->phba->cfg_enable_bg) {
5716 			lpfc_printf_vlog(vport,
5717 					 KERN_INFO, LOG_SCSI_CMD,
5718 					 "9038 BLKGRD: rcvd PROT_NORMAL cmd: "
5719 					 "x%x reftag x%x cnt %u pt %x\n",
5720 					 cmnd->cmnd[0],
5721 					 scsi_prot_ref_tag(cmnd),
5722 					 scsi_logical_block_count(cmnd),
5723 					 (cmnd->cmnd[1]>>5));
5724 		}
5725 		err = lpfc_scsi_prep_dma_buf(phba, lpfc_cmd);
5726 	}
5727 
5728 	if (unlikely(err)) {
5729 		if (err == 2) {
5730 			cmnd->result = DID_ERROR << 16;
5731 			goto out_fail_command_release_buf;
5732 		}
5733 		goto out_host_busy_free_buf;
5734 	}
5735 
5736 
5737 	/* check the necessary and sufficient condition to support VMID */
5738 	if (lpfc_is_vmid_enabled(phba) &&
5739 	    (ndlp->vmid_support ||
5740 	     phba->pport->vmid_priority_tagging ==
5741 	     LPFC_VMID_PRIO_TAG_ALL_TARGETS)) {
5742 		/* is the I/O generated by a VM, get the associated virtual */
5743 		/* entity id */
5744 		uuid = lpfc_is_command_vm_io(cmnd);
5745 
5746 		if (uuid) {
5747 			err = lpfc_vmid_get_appid(vport, uuid, cmnd,
5748 				(union lpfc_vmid_io_tag *)
5749 					&lpfc_cmd->cur_iocbq.vmid_tag);
5750 			if (!err)
5751 				lpfc_cmd->cur_iocbq.iocb_flag |= LPFC_IO_VMID;
5752 		}
5753 	}
5754 
5755 	atomic_inc(&ndlp->cmd_pending);
5756 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
5757 	if (unlikely(phba->hdwqstat_on & LPFC_CHECK_SCSI_IO))
5758 		this_cpu_inc(phba->sli4_hba.c_stat->xmt_io);
5759 #endif
5760 	/* Issue I/O to adapter */
5761 	err = lpfc_sli_issue_fcp_io(phba, LPFC_FCP_RING,
5762 				    &lpfc_cmd->cur_iocbq,
5763 				    SLI_IOCB_RET_IOCB);
5764 #ifdef CONFIG_SCSI_LPFC_DEBUG_FS
5765 	if (start) {
5766 		lpfc_cmd->ts_cmd_start = start;
5767 		lpfc_cmd->ts_last_cmd = phba->ktime_last_cmd;
5768 		lpfc_cmd->ts_cmd_wqput = ktime_get_ns();
5769 	} else {
5770 		lpfc_cmd->ts_cmd_start = 0;
5771 	}
5772 #endif
5773 	if (err) {
5774 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
5775 				   "3376 FCP could not issue IOCB err %x "
5776 				   "FCP cmd x%x <%d/%llu> "
5777 				   "sid: x%x did: x%x oxid: x%x "
5778 				   "Data: x%x x%x x%x x%x\n",
5779 				   err, cmnd->cmnd[0],
5780 				   cmnd->device ? cmnd->device->id : 0xffff,
5781 				   cmnd->device ? cmnd->device->lun : (u64)-1,
5782 				   vport->fc_myDID, ndlp->nlp_DID,
5783 				   phba->sli_rev == LPFC_SLI_REV4 ?
5784 				   lpfc_cmd->cur_iocbq.sli4_xritag : 0xffff,
5785 				   phba->sli_rev == LPFC_SLI_REV4 ?
5786 				   phba->sli4_hba.rpi_ids[ndlp->nlp_rpi] :
5787 				   lpfc_cmd->cur_iocbq.iocb.ulpContext,
5788 				   lpfc_cmd->cur_iocbq.iotag,
5789 				   phba->sli_rev == LPFC_SLI_REV4 ?
5790 				   bf_get(wqe_tmo,
5791 				   &lpfc_cmd->cur_iocbq.wqe.generic.wqe_com) :
5792 				   lpfc_cmd->cur_iocbq.iocb.ulpTimeout,
5793 				   (uint32_t)(scsi_cmd_to_rq(cmnd)->timeout / 1000));
5794 
5795 		goto out_host_busy_free_buf;
5796 	}
5797 
5798 	if (phba->cfg_poll & ENABLE_FCP_RING_POLLING) {
5799 		lpfc_sli_handle_fast_ring_event(phba,
5800 			&phba->sli.sli3_ring[LPFC_FCP_RING], HA_R0RE_REQ);
5801 
5802 		if (phba->cfg_poll & DISABLE_FCP_RING_INT)
5803 			lpfc_poll_rearm_timer(phba);
5804 	}
5805 
5806 	if (phba->cfg_xri_rebalancing)
5807 		lpfc_keep_pvt_pool_above_lowwm(phba, lpfc_cmd->hdwq_no);
5808 
5809 	return 0;
5810 
5811  out_host_busy_free_buf:
5812 	idx = lpfc_cmd->hdwq_no;
5813 	lpfc_scsi_unprep_dma_buf(phba, lpfc_cmd);
5814 	if (phba->sli4_hba.hdwq) {
5815 		switch (lpfc_cmd->fcp_cmnd->fcpCntl3) {
5816 		case WRITE_DATA:
5817 			phba->sli4_hba.hdwq[idx].scsi_cstat.output_requests--;
5818 			break;
5819 		case READ_DATA:
5820 			phba->sli4_hba.hdwq[idx].scsi_cstat.input_requests--;
5821 			break;
5822 		default:
5823 			phba->sli4_hba.hdwq[idx].scsi_cstat.control_requests--;
5824 		}
5825 	}
5826  out_host_busy_release_buf:
5827 	lpfc_release_scsi_buf(phba, lpfc_cmd);
5828  out_host_busy:
5829 	lpfc_update_cmf_cmpl(phba, LPFC_CGN_NOT_SENT, scsi_bufflen(cmnd),
5830 			     shost);
5831 	return SCSI_MLQUEUE_HOST_BUSY;
5832 
5833  out_tgt_busy2:
5834 	lpfc_update_cmf_cmpl(phba, LPFC_CGN_NOT_SENT, scsi_bufflen(cmnd),
5835 			     shost);
5836  out_tgt_busy1:
5837 	return SCSI_MLQUEUE_TARGET_BUSY;
5838 
5839  out_fail_command_release_buf:
5840 	lpfc_release_scsi_buf(phba, lpfc_cmd);
5841 	lpfc_update_cmf_cmpl(phba, LPFC_CGN_NOT_SENT, scsi_bufflen(cmnd),
5842 			     shost);
5843 
5844  out_fail_command:
5845 	scsi_done(cmnd);
5846 	return 0;
5847 }
5848 
5849 /*
5850  * lpfc_vmid_vport_cleanup - cleans up the resources associated with a vport
5851  * @vport: The virtual port for which this call is being executed.
5852  */
5853 void lpfc_vmid_vport_cleanup(struct lpfc_vport *vport)
5854 {
5855 	u32 bucket;
5856 	struct lpfc_vmid *cur;
5857 
5858 	if (vport->port_type == LPFC_PHYSICAL_PORT)
5859 		del_timer_sync(&vport->phba->inactive_vmid_poll);
5860 
5861 	kfree(vport->qfpa_res);
5862 	kfree(vport->vmid_priority.vmid_range);
5863 	kfree(vport->vmid);
5864 
5865 	if (!hash_empty(vport->hash_table))
5866 		hash_for_each(vport->hash_table, bucket, cur, hnode)
5867 			hash_del(&cur->hnode);
5868 
5869 	vport->qfpa_res = NULL;
5870 	vport->vmid_priority.vmid_range = NULL;
5871 	vport->vmid = NULL;
5872 	vport->cur_vmid_cnt = 0;
5873 }
5874 
5875 /**
5876  * lpfc_abort_handler - scsi_host_template eh_abort_handler entry point
5877  * @cmnd: Pointer to scsi_cmnd data structure.
5878  *
5879  * This routine aborts @cmnd pending in base driver.
5880  *
5881  * Return code :
5882  *   0x2003 - Error
5883  *   0x2002 - Success
5884  **/
5885 static int
5886 lpfc_abort_handler(struct scsi_cmnd *cmnd)
5887 {
5888 	struct Scsi_Host  *shost = cmnd->device->host;
5889 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
5890 	struct lpfc_hba   *phba = vport->phba;
5891 	struct lpfc_iocbq *iocb;
5892 	struct lpfc_io_buf *lpfc_cmd;
5893 	int ret = SUCCESS, status = 0;
5894 	struct lpfc_sli_ring *pring_s4 = NULL;
5895 	struct lpfc_sli_ring *pring = NULL;
5896 	int ret_val;
5897 	unsigned long flags;
5898 	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(waitq);
5899 
5900 	status = fc_block_scsi_eh(cmnd);
5901 	if (status != 0 && status != SUCCESS)
5902 		return status;
5903 
5904 	lpfc_cmd = (struct lpfc_io_buf *)cmnd->host_scribble;
5905 	if (!lpfc_cmd)
5906 		return ret;
5907 
5908 	spin_lock_irqsave(&phba->hbalock, flags);
5909 	/* driver queued commands are in process of being flushed */
5910 	if (phba->hba_flag & HBA_IOQ_FLUSH) {
5911 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5912 			"3168 SCSI Layer abort requested I/O has been "
5913 			"flushed by LLD.\n");
5914 		ret = FAILED;
5915 		goto out_unlock;
5916 	}
5917 
5918 	/* Guard against IO completion being called at same time */
5919 	spin_lock(&lpfc_cmd->buf_lock);
5920 
5921 	if (!lpfc_cmd->pCmd) {
5922 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5923 			 "2873 SCSI Layer I/O Abort Request IO CMPL Status "
5924 			 "x%x ID %d LUN %llu\n",
5925 			 SUCCESS, cmnd->device->id, cmnd->device->lun);
5926 		goto out_unlock_buf;
5927 	}
5928 
5929 	iocb = &lpfc_cmd->cur_iocbq;
5930 	if (phba->sli_rev == LPFC_SLI_REV4) {
5931 		pring_s4 = phba->sli4_hba.hdwq[iocb->hba_wqidx].io_wq->pring;
5932 		if (!pring_s4) {
5933 			ret = FAILED;
5934 			goto out_unlock_buf;
5935 		}
5936 		spin_lock(&pring_s4->ring_lock);
5937 	}
5938 	/* the command is in process of being cancelled */
5939 	if (!(iocb->iocb_flag & LPFC_IO_ON_TXCMPLQ)) {
5940 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5941 			"3169 SCSI Layer abort requested I/O has been "
5942 			"cancelled by LLD.\n");
5943 		ret = FAILED;
5944 		goto out_unlock_ring;
5945 	}
5946 	/*
5947 	 * If pCmd field of the corresponding lpfc_io_buf structure
5948 	 * points to a different SCSI command, then the driver has
5949 	 * already completed this command, but the midlayer did not
5950 	 * see the completion before the eh fired. Just return SUCCESS.
5951 	 */
5952 	if (lpfc_cmd->pCmd != cmnd) {
5953 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5954 			"3170 SCSI Layer abort requested I/O has been "
5955 			"completed by LLD.\n");
5956 		goto out_unlock_ring;
5957 	}
5958 
5959 	BUG_ON(iocb->context1 != lpfc_cmd);
5960 
5961 	/* abort issued in recovery is still in progress */
5962 	if (iocb->iocb_flag & LPFC_DRIVER_ABORTED) {
5963 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
5964 			 "3389 SCSI Layer I/O Abort Request is pending\n");
5965 		if (phba->sli_rev == LPFC_SLI_REV4)
5966 			spin_unlock(&pring_s4->ring_lock);
5967 		spin_unlock(&lpfc_cmd->buf_lock);
5968 		spin_unlock_irqrestore(&phba->hbalock, flags);
5969 		goto wait_for_cmpl;
5970 	}
5971 
5972 	lpfc_cmd->waitq = &waitq;
5973 	if (phba->sli_rev == LPFC_SLI_REV4) {
5974 		spin_unlock(&pring_s4->ring_lock);
5975 		ret_val = lpfc_sli4_issue_abort_iotag(phba, iocb,
5976 						      lpfc_sli4_abort_fcp_cmpl);
5977 	} else {
5978 		pring = &phba->sli.sli3_ring[LPFC_FCP_RING];
5979 		ret_val = lpfc_sli_issue_abort_iotag(phba, pring, iocb,
5980 						     lpfc_sli_abort_fcp_cmpl);
5981 	}
5982 
5983 	/* Make sure HBA is alive */
5984 	lpfc_issue_hb_tmo(phba);
5985 
5986 	if (ret_val != IOCB_SUCCESS) {
5987 		/* Indicate the IO is not being aborted by the driver. */
5988 		lpfc_cmd->waitq = NULL;
5989 		spin_unlock(&lpfc_cmd->buf_lock);
5990 		spin_unlock_irqrestore(&phba->hbalock, flags);
5991 		ret = FAILED;
5992 		goto out;
5993 	}
5994 
5995 	/* no longer need the lock after this point */
5996 	spin_unlock(&lpfc_cmd->buf_lock);
5997 	spin_unlock_irqrestore(&phba->hbalock, flags);
5998 
5999 	if (phba->cfg_poll & DISABLE_FCP_RING_INT)
6000 		lpfc_sli_handle_fast_ring_event(phba,
6001 			&phba->sli.sli3_ring[LPFC_FCP_RING], HA_R0RE_REQ);
6002 
6003 wait_for_cmpl:
6004 	/*
6005 	 * iocb_flag is set to LPFC_DRIVER_ABORTED before we wait
6006 	 * for abort to complete.
6007 	 */
6008 	wait_event_timeout(waitq,
6009 			  (lpfc_cmd->pCmd != cmnd),
6010 			   msecs_to_jiffies(2*vport->cfg_devloss_tmo*1000));
6011 
6012 	spin_lock(&lpfc_cmd->buf_lock);
6013 
6014 	if (lpfc_cmd->pCmd == cmnd) {
6015 		ret = FAILED;
6016 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6017 				 "0748 abort handler timed out waiting "
6018 				 "for aborting I/O (xri:x%x) to complete: "
6019 				 "ret %#x, ID %d, LUN %llu\n",
6020 				 iocb->sli4_xritag, ret,
6021 				 cmnd->device->id, cmnd->device->lun);
6022 	}
6023 
6024 	lpfc_cmd->waitq = NULL;
6025 
6026 	spin_unlock(&lpfc_cmd->buf_lock);
6027 	goto out;
6028 
6029 out_unlock_ring:
6030 	if (phba->sli_rev == LPFC_SLI_REV4)
6031 		spin_unlock(&pring_s4->ring_lock);
6032 out_unlock_buf:
6033 	spin_unlock(&lpfc_cmd->buf_lock);
6034 out_unlock:
6035 	spin_unlock_irqrestore(&phba->hbalock, flags);
6036 out:
6037 	lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
6038 			 "0749 SCSI Layer I/O Abort Request Status x%x ID %d "
6039 			 "LUN %llu\n", ret, cmnd->device->id,
6040 			 cmnd->device->lun);
6041 	return ret;
6042 }
6043 
6044 static char *
6045 lpfc_taskmgmt_name(uint8_t task_mgmt_cmd)
6046 {
6047 	switch (task_mgmt_cmd) {
6048 	case FCP_ABORT_TASK_SET:
6049 		return "ABORT_TASK_SET";
6050 	case FCP_CLEAR_TASK_SET:
6051 		return "FCP_CLEAR_TASK_SET";
6052 	case FCP_BUS_RESET:
6053 		return "FCP_BUS_RESET";
6054 	case FCP_LUN_RESET:
6055 		return "FCP_LUN_RESET";
6056 	case FCP_TARGET_RESET:
6057 		return "FCP_TARGET_RESET";
6058 	case FCP_CLEAR_ACA:
6059 		return "FCP_CLEAR_ACA";
6060 	case FCP_TERMINATE_TASK:
6061 		return "FCP_TERMINATE_TASK";
6062 	default:
6063 		return "unknown";
6064 	}
6065 }
6066 
6067 
6068 /**
6069  * lpfc_check_fcp_rsp - check the returned fcp_rsp to see if task failed
6070  * @vport: The virtual port for which this call is being executed.
6071  * @lpfc_cmd: Pointer to lpfc_io_buf data structure.
6072  *
6073  * This routine checks the FCP RSP INFO to see if the tsk mgmt command succeded
6074  *
6075  * Return code :
6076  *   0x2003 - Error
6077  *   0x2002 - Success
6078  **/
6079 static int
6080 lpfc_check_fcp_rsp(struct lpfc_vport *vport, struct lpfc_io_buf *lpfc_cmd)
6081 {
6082 	struct fcp_rsp *fcprsp = lpfc_cmd->fcp_rsp;
6083 	uint32_t rsp_info;
6084 	uint32_t rsp_len;
6085 	uint8_t  rsp_info_code;
6086 	int ret = FAILED;
6087 
6088 
6089 	if (fcprsp == NULL)
6090 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6091 				 "0703 fcp_rsp is missing\n");
6092 	else {
6093 		rsp_info = fcprsp->rspStatus2;
6094 		rsp_len = be32_to_cpu(fcprsp->rspRspLen);
6095 		rsp_info_code = fcprsp->rspInfo3;
6096 
6097 
6098 		lpfc_printf_vlog(vport, KERN_INFO,
6099 				 LOG_FCP,
6100 				 "0706 fcp_rsp valid 0x%x,"
6101 				 " rsp len=%d code 0x%x\n",
6102 				 rsp_info,
6103 				 rsp_len, rsp_info_code);
6104 
6105 		/* If FCP_RSP_LEN_VALID bit is one, then the FCP_RSP_LEN
6106 		 * field specifies the number of valid bytes of FCP_RSP_INFO.
6107 		 * The FCP_RSP_LEN field shall be set to 0x04 or 0x08
6108 		 */
6109 		if ((fcprsp->rspStatus2 & RSP_LEN_VALID) &&
6110 		    ((rsp_len == 8) || (rsp_len == 4))) {
6111 			switch (rsp_info_code) {
6112 			case RSP_NO_FAILURE:
6113 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6114 						 "0715 Task Mgmt No Failure\n");
6115 				ret = SUCCESS;
6116 				break;
6117 			case RSP_TM_NOT_SUPPORTED: /* TM rejected */
6118 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6119 						 "0716 Task Mgmt Target "
6120 						"reject\n");
6121 				break;
6122 			case RSP_TM_NOT_COMPLETED: /* TM failed */
6123 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6124 						 "0717 Task Mgmt Target "
6125 						"failed TM\n");
6126 				break;
6127 			case RSP_TM_INVALID_LU: /* TM to invalid LU! */
6128 				lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6129 						 "0718 Task Mgmt to invalid "
6130 						"LUN\n");
6131 				break;
6132 			}
6133 		}
6134 	}
6135 	return ret;
6136 }
6137 
6138 
6139 /**
6140  * lpfc_send_taskmgmt - Generic SCSI Task Mgmt Handler
6141  * @vport: The virtual port for which this call is being executed.
6142  * @cmnd: Pointer to scsi_cmnd data structure.
6143  * @tgt_id: Target ID of remote device.
6144  * @lun_id: Lun number for the TMF
6145  * @task_mgmt_cmd: type of TMF to send
6146  *
6147  * This routine builds and sends a TMF (SCSI Task Mgmt Function) to
6148  * a remote port.
6149  *
6150  * Return Code:
6151  *   0x2003 - Error
6152  *   0x2002 - Success.
6153  **/
6154 static int
6155 lpfc_send_taskmgmt(struct lpfc_vport *vport, struct scsi_cmnd *cmnd,
6156 		   unsigned int tgt_id, uint64_t lun_id,
6157 		   uint8_t task_mgmt_cmd)
6158 {
6159 	struct lpfc_hba   *phba = vport->phba;
6160 	struct lpfc_io_buf *lpfc_cmd;
6161 	struct lpfc_iocbq *iocbq;
6162 	struct lpfc_iocbq *iocbqrsp;
6163 	struct lpfc_rport_data *rdata;
6164 	struct lpfc_nodelist *pnode;
6165 	int ret;
6166 	int status;
6167 
6168 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
6169 	if (!rdata || !rdata->pnode)
6170 		return FAILED;
6171 	pnode = rdata->pnode;
6172 
6173 	lpfc_cmd = lpfc_get_scsi_buf(phba, pnode, NULL);
6174 	if (lpfc_cmd == NULL)
6175 		return FAILED;
6176 	lpfc_cmd->timeout = phba->cfg_task_mgmt_tmo;
6177 	lpfc_cmd->rdata = rdata;
6178 	lpfc_cmd->pCmd = cmnd;
6179 	lpfc_cmd->ndlp = pnode;
6180 
6181 	status = lpfc_scsi_prep_task_mgmt_cmd(vport, lpfc_cmd, lun_id,
6182 					   task_mgmt_cmd);
6183 	if (!status) {
6184 		lpfc_release_scsi_buf(phba, lpfc_cmd);
6185 		return FAILED;
6186 	}
6187 
6188 	iocbq = &lpfc_cmd->cur_iocbq;
6189 	iocbqrsp = lpfc_sli_get_iocbq(phba);
6190 	if (iocbqrsp == NULL) {
6191 		lpfc_release_scsi_buf(phba, lpfc_cmd);
6192 		return FAILED;
6193 	}
6194 	iocbq->iocb_cmpl = lpfc_tskmgmt_def_cmpl;
6195 
6196 	lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6197 			 "0702 Issue %s to TGT %d LUN %llu "
6198 			 "rpi x%x nlp_flag x%x Data: x%x x%x\n",
6199 			 lpfc_taskmgmt_name(task_mgmt_cmd), tgt_id, lun_id,
6200 			 pnode->nlp_rpi, pnode->nlp_flag, iocbq->sli4_xritag,
6201 			 iocbq->iocb_flag);
6202 
6203 	status = lpfc_sli_issue_iocb_wait(phba, LPFC_FCP_RING,
6204 					  iocbq, iocbqrsp, lpfc_cmd->timeout);
6205 	if ((status != IOCB_SUCCESS) ||
6206 	    (iocbqrsp->iocb.ulpStatus != IOSTAT_SUCCESS)) {
6207 		if (status != IOCB_SUCCESS ||
6208 		    iocbqrsp->iocb.ulpStatus != IOSTAT_FCP_RSP_ERROR)
6209 			lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6210 					 "0727 TMF %s to TGT %d LUN %llu "
6211 					 "failed (%d, %d) iocb_flag x%x\n",
6212 					 lpfc_taskmgmt_name(task_mgmt_cmd),
6213 					 tgt_id, lun_id,
6214 					 iocbqrsp->iocb.ulpStatus,
6215 					 iocbqrsp->iocb.un.ulpWord[4],
6216 					 iocbq->iocb_flag);
6217 		/* if ulpStatus != IOCB_SUCCESS, then status == IOCB_SUCCESS */
6218 		if (status == IOCB_SUCCESS) {
6219 			if (iocbqrsp->iocb.ulpStatus == IOSTAT_FCP_RSP_ERROR)
6220 				/* Something in the FCP_RSP was invalid.
6221 				 * Check conditions */
6222 				ret = lpfc_check_fcp_rsp(vport, lpfc_cmd);
6223 			else
6224 				ret = FAILED;
6225 		} else if (status == IOCB_TIMEDOUT) {
6226 			ret = TIMEOUT_ERROR;
6227 		} else {
6228 			ret = FAILED;
6229 		}
6230 	} else
6231 		ret = SUCCESS;
6232 
6233 	lpfc_sli_release_iocbq(phba, iocbqrsp);
6234 
6235 	if (ret != TIMEOUT_ERROR)
6236 		lpfc_release_scsi_buf(phba, lpfc_cmd);
6237 
6238 	return ret;
6239 }
6240 
6241 /**
6242  * lpfc_chk_tgt_mapped -
6243  * @vport: The virtual port to check on
6244  * @cmnd: Pointer to scsi_cmnd data structure.
6245  *
6246  * This routine delays until the scsi target (aka rport) for the
6247  * command exists (is present and logged in) or we declare it non-existent.
6248  *
6249  * Return code :
6250  *  0x2003 - Error
6251  *  0x2002 - Success
6252  **/
6253 static int
6254 lpfc_chk_tgt_mapped(struct lpfc_vport *vport, struct scsi_cmnd *cmnd)
6255 {
6256 	struct lpfc_rport_data *rdata;
6257 	struct lpfc_nodelist *pnode;
6258 	unsigned long later;
6259 
6260 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
6261 	if (!rdata) {
6262 		lpfc_printf_vlog(vport, KERN_INFO, LOG_FCP,
6263 			"0797 Tgt Map rport failure: rdata x%px\n", rdata);
6264 		return FAILED;
6265 	}
6266 	pnode = rdata->pnode;
6267 	/*
6268 	 * If target is not in a MAPPED state, delay until
6269 	 * target is rediscovered or devloss timeout expires.
6270 	 */
6271 	later = msecs_to_jiffies(2 * vport->cfg_devloss_tmo * 1000) + jiffies;
6272 	while (time_after(later, jiffies)) {
6273 		if (!pnode)
6274 			return FAILED;
6275 		if (pnode->nlp_state == NLP_STE_MAPPED_NODE)
6276 			return SUCCESS;
6277 		schedule_timeout_uninterruptible(msecs_to_jiffies(500));
6278 		rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
6279 		if (!rdata)
6280 			return FAILED;
6281 		pnode = rdata->pnode;
6282 	}
6283 	if (!pnode || (pnode->nlp_state != NLP_STE_MAPPED_NODE))
6284 		return FAILED;
6285 	return SUCCESS;
6286 }
6287 
6288 /**
6289  * lpfc_reset_flush_io_context -
6290  * @vport: The virtual port (scsi_host) for the flush context
6291  * @tgt_id: If aborting by Target contect - specifies the target id
6292  * @lun_id: If aborting by Lun context - specifies the lun id
6293  * @context: specifies the context level to flush at.
6294  *
6295  * After a reset condition via TMF, we need to flush orphaned i/o
6296  * contexts from the adapter. This routine aborts any contexts
6297  * outstanding, then waits for their completions. The wait is
6298  * bounded by devloss_tmo though.
6299  *
6300  * Return code :
6301  *  0x2003 - Error
6302  *  0x2002 - Success
6303  **/
6304 static int
6305 lpfc_reset_flush_io_context(struct lpfc_vport *vport, uint16_t tgt_id,
6306 			uint64_t lun_id, lpfc_ctx_cmd context)
6307 {
6308 	struct lpfc_hba   *phba = vport->phba;
6309 	unsigned long later;
6310 	int cnt;
6311 
6312 	cnt = lpfc_sli_sum_iocb(vport, tgt_id, lun_id, context);
6313 	if (cnt)
6314 		lpfc_sli_abort_taskmgmt(vport,
6315 					&phba->sli.sli3_ring[LPFC_FCP_RING],
6316 					tgt_id, lun_id, context);
6317 	later = msecs_to_jiffies(2 * vport->cfg_devloss_tmo * 1000) + jiffies;
6318 	while (time_after(later, jiffies) && cnt) {
6319 		schedule_timeout_uninterruptible(msecs_to_jiffies(20));
6320 		cnt = lpfc_sli_sum_iocb(vport, tgt_id, lun_id, context);
6321 	}
6322 	if (cnt) {
6323 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6324 			"0724 I/O flush failure for context %s : cnt x%x\n",
6325 			((context == LPFC_CTX_LUN) ? "LUN" :
6326 			 ((context == LPFC_CTX_TGT) ? "TGT" :
6327 			  ((context == LPFC_CTX_HOST) ? "HOST" : "Unknown"))),
6328 			cnt);
6329 		return FAILED;
6330 	}
6331 	return SUCCESS;
6332 }
6333 
6334 /**
6335  * lpfc_device_reset_handler - scsi_host_template eh_device_reset entry point
6336  * @cmnd: Pointer to scsi_cmnd data structure.
6337  *
6338  * This routine does a device reset by sending a LUN_RESET task management
6339  * command.
6340  *
6341  * Return code :
6342  *  0x2003 - Error
6343  *  0x2002 - Success
6344  **/
6345 static int
6346 lpfc_device_reset_handler(struct scsi_cmnd *cmnd)
6347 {
6348 	struct Scsi_Host  *shost = cmnd->device->host;
6349 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
6350 	struct lpfc_rport_data *rdata;
6351 	struct lpfc_nodelist *pnode;
6352 	unsigned tgt_id = cmnd->device->id;
6353 	uint64_t lun_id = cmnd->device->lun;
6354 	struct lpfc_scsi_event_header scsi_event;
6355 	int status;
6356 	u32 logit = LOG_FCP;
6357 
6358 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
6359 	if (!rdata || !rdata->pnode) {
6360 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6361 				 "0798 Device Reset rdata failure: rdata x%px\n",
6362 				 rdata);
6363 		return FAILED;
6364 	}
6365 	pnode = rdata->pnode;
6366 	status = fc_block_scsi_eh(cmnd);
6367 	if (status != 0 && status != SUCCESS)
6368 		return status;
6369 
6370 	status = lpfc_chk_tgt_mapped(vport, cmnd);
6371 	if (status == FAILED) {
6372 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6373 			"0721 Device Reset rport failure: rdata x%px\n", rdata);
6374 		return FAILED;
6375 	}
6376 
6377 	scsi_event.event_type = FC_REG_SCSI_EVENT;
6378 	scsi_event.subcategory = LPFC_EVENT_LUNRESET;
6379 	scsi_event.lun = lun_id;
6380 	memcpy(scsi_event.wwpn, &pnode->nlp_portname, sizeof(struct lpfc_name));
6381 	memcpy(scsi_event.wwnn, &pnode->nlp_nodename, sizeof(struct lpfc_name));
6382 
6383 	fc_host_post_vendor_event(shost, fc_get_event_number(),
6384 		sizeof(scsi_event), (char *)&scsi_event, LPFC_NL_VENDOR_ID);
6385 
6386 	status = lpfc_send_taskmgmt(vport, cmnd, tgt_id, lun_id,
6387 						FCP_LUN_RESET);
6388 	if (status != SUCCESS)
6389 		logit =  LOG_TRACE_EVENT;
6390 
6391 	lpfc_printf_vlog(vport, KERN_ERR, logit,
6392 			 "0713 SCSI layer issued Device Reset (%d, %llu) "
6393 			 "return x%x\n", tgt_id, lun_id, status);
6394 
6395 	/*
6396 	 * We have to clean up i/o as : they may be orphaned by the TMF;
6397 	 * or if the TMF failed, they may be in an indeterminate state.
6398 	 * So, continue on.
6399 	 * We will report success if all the i/o aborts successfully.
6400 	 */
6401 	if (status == SUCCESS)
6402 		status = lpfc_reset_flush_io_context(vport, tgt_id, lun_id,
6403 						LPFC_CTX_LUN);
6404 
6405 	return status;
6406 }
6407 
6408 /**
6409  * lpfc_target_reset_handler - scsi_host_template eh_target_reset entry point
6410  * @cmnd: Pointer to scsi_cmnd data structure.
6411  *
6412  * This routine does a target reset by sending a TARGET_RESET task management
6413  * command.
6414  *
6415  * Return code :
6416  *  0x2003 - Error
6417  *  0x2002 - Success
6418  **/
6419 static int
6420 lpfc_target_reset_handler(struct scsi_cmnd *cmnd)
6421 {
6422 	struct Scsi_Host  *shost = cmnd->device->host;
6423 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
6424 	struct lpfc_rport_data *rdata;
6425 	struct lpfc_nodelist *pnode;
6426 	unsigned tgt_id = cmnd->device->id;
6427 	uint64_t lun_id = cmnd->device->lun;
6428 	struct lpfc_scsi_event_header scsi_event;
6429 	int status;
6430 	u32 logit = LOG_FCP;
6431 	u32 dev_loss_tmo = vport->cfg_devloss_tmo;
6432 	unsigned long flags;
6433 	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(waitq);
6434 
6435 	rdata = lpfc_rport_data_from_scsi_device(cmnd->device);
6436 	if (!rdata || !rdata->pnode) {
6437 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6438 				 "0799 Target Reset rdata failure: rdata x%px\n",
6439 				 rdata);
6440 		return FAILED;
6441 	}
6442 	pnode = rdata->pnode;
6443 	status = fc_block_scsi_eh(cmnd);
6444 	if (status != 0 && status != SUCCESS)
6445 		return status;
6446 
6447 	status = lpfc_chk_tgt_mapped(vport, cmnd);
6448 	if (status == FAILED) {
6449 		lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6450 			"0722 Target Reset rport failure: rdata x%px\n", rdata);
6451 		if (pnode) {
6452 			spin_lock_irqsave(&pnode->lock, flags);
6453 			pnode->nlp_flag &= ~NLP_NPR_ADISC;
6454 			pnode->nlp_fcp_info &= ~NLP_FCP_2_DEVICE;
6455 			spin_unlock_irqrestore(&pnode->lock, flags);
6456 		}
6457 		lpfc_reset_flush_io_context(vport, tgt_id, lun_id,
6458 					  LPFC_CTX_TGT);
6459 		return FAST_IO_FAIL;
6460 	}
6461 
6462 	scsi_event.event_type = FC_REG_SCSI_EVENT;
6463 	scsi_event.subcategory = LPFC_EVENT_TGTRESET;
6464 	scsi_event.lun = 0;
6465 	memcpy(scsi_event.wwpn, &pnode->nlp_portname, sizeof(struct lpfc_name));
6466 	memcpy(scsi_event.wwnn, &pnode->nlp_nodename, sizeof(struct lpfc_name));
6467 
6468 	fc_host_post_vendor_event(shost, fc_get_event_number(),
6469 		sizeof(scsi_event), (char *)&scsi_event, LPFC_NL_VENDOR_ID);
6470 
6471 	status = lpfc_send_taskmgmt(vport, cmnd, tgt_id, lun_id,
6472 					FCP_TARGET_RESET);
6473 	if (status != SUCCESS) {
6474 		logit = LOG_TRACE_EVENT;
6475 
6476 		/* Issue LOGO, if no LOGO is outstanding */
6477 		spin_lock_irqsave(&pnode->lock, flags);
6478 		if (!(pnode->save_flags & NLP_WAIT_FOR_LOGO) &&
6479 		    !pnode->logo_waitq) {
6480 			pnode->logo_waitq = &waitq;
6481 			pnode->nlp_fcp_info &= ~NLP_FCP_2_DEVICE;
6482 			pnode->nlp_flag |= NLP_ISSUE_LOGO;
6483 			pnode->save_flags |= NLP_WAIT_FOR_LOGO;
6484 			spin_unlock_irqrestore(&pnode->lock, flags);
6485 			lpfc_unreg_rpi(vport, pnode);
6486 			wait_event_timeout(waitq,
6487 					   (!(pnode->save_flags &
6488 					      NLP_WAIT_FOR_LOGO)),
6489 					   msecs_to_jiffies(dev_loss_tmo *
6490 							    1000));
6491 
6492 			if (pnode->save_flags & NLP_WAIT_FOR_LOGO) {
6493 				lpfc_printf_vlog(vport, KERN_ERR, logit,
6494 						 "0725 SCSI layer TGTRST "
6495 						 "failed & LOGO TMO (%d, %llu) "
6496 						 "return x%x\n",
6497 						 tgt_id, lun_id, status);
6498 				spin_lock_irqsave(&pnode->lock, flags);
6499 				pnode->save_flags &= ~NLP_WAIT_FOR_LOGO;
6500 			} else {
6501 				spin_lock_irqsave(&pnode->lock, flags);
6502 			}
6503 			pnode->logo_waitq = NULL;
6504 			spin_unlock_irqrestore(&pnode->lock, flags);
6505 			status = SUCCESS;
6506 
6507 		} else {
6508 			spin_unlock_irqrestore(&pnode->lock, flags);
6509 			status = FAILED;
6510 		}
6511 	}
6512 
6513 	lpfc_printf_vlog(vport, KERN_ERR, logit,
6514 			 "0723 SCSI layer issued Target Reset (%d, %llu) "
6515 			 "return x%x\n", tgt_id, lun_id, status);
6516 
6517 	/*
6518 	 * We have to clean up i/o as : they may be orphaned by the TMF;
6519 	 * or if the TMF failed, they may be in an indeterminate state.
6520 	 * So, continue on.
6521 	 * We will report success if all the i/o aborts successfully.
6522 	 */
6523 	if (status == SUCCESS)
6524 		status = lpfc_reset_flush_io_context(vport, tgt_id, lun_id,
6525 					  LPFC_CTX_TGT);
6526 	return status;
6527 }
6528 
6529 /**
6530  * lpfc_bus_reset_handler - scsi_host_template eh_bus_reset_handler entry point
6531  * @cmnd: Pointer to scsi_cmnd data structure.
6532  *
6533  * This routine does target reset to all targets on @cmnd->device->host.
6534  * This emulates Parallel SCSI Bus Reset Semantics.
6535  *
6536  * Return code :
6537  *  0x2003 - Error
6538  *  0x2002 - Success
6539  **/
6540 static int
6541 lpfc_bus_reset_handler(struct scsi_cmnd *cmnd)
6542 {
6543 	struct Scsi_Host  *shost = cmnd->device->host;
6544 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
6545 	struct lpfc_nodelist *ndlp = NULL;
6546 	struct lpfc_scsi_event_header scsi_event;
6547 	int match;
6548 	int ret = SUCCESS, status, i;
6549 	u32 logit = LOG_FCP;
6550 
6551 	scsi_event.event_type = FC_REG_SCSI_EVENT;
6552 	scsi_event.subcategory = LPFC_EVENT_BUSRESET;
6553 	scsi_event.lun = 0;
6554 	memcpy(scsi_event.wwpn, &vport->fc_portname, sizeof(struct lpfc_name));
6555 	memcpy(scsi_event.wwnn, &vport->fc_nodename, sizeof(struct lpfc_name));
6556 
6557 	fc_host_post_vendor_event(shost, fc_get_event_number(),
6558 		sizeof(scsi_event), (char *)&scsi_event, LPFC_NL_VENDOR_ID);
6559 
6560 	status = fc_block_scsi_eh(cmnd);
6561 	if (status != 0 && status != SUCCESS)
6562 		return status;
6563 
6564 	/*
6565 	 * Since the driver manages a single bus device, reset all
6566 	 * targets known to the driver.  Should any target reset
6567 	 * fail, this routine returns failure to the midlayer.
6568 	 */
6569 	for (i = 0; i < LPFC_MAX_TARGET; i++) {
6570 		/* Search for mapped node by target ID */
6571 		match = 0;
6572 		spin_lock_irq(shost->host_lock);
6573 		list_for_each_entry(ndlp, &vport->fc_nodes, nlp_listp) {
6574 
6575 			if (vport->phba->cfg_fcp2_no_tgt_reset &&
6576 			    (ndlp->nlp_fcp_info & NLP_FCP_2_DEVICE))
6577 				continue;
6578 			if (ndlp->nlp_state == NLP_STE_MAPPED_NODE &&
6579 			    ndlp->nlp_sid == i &&
6580 			    ndlp->rport &&
6581 			    ndlp->nlp_type & NLP_FCP_TARGET) {
6582 				match = 1;
6583 				break;
6584 			}
6585 		}
6586 		spin_unlock_irq(shost->host_lock);
6587 		if (!match)
6588 			continue;
6589 
6590 		status = lpfc_send_taskmgmt(vport, cmnd,
6591 					i, 0, FCP_TARGET_RESET);
6592 
6593 		if (status != SUCCESS) {
6594 			lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6595 					 "0700 Bus Reset on target %d failed\n",
6596 					 i);
6597 			ret = FAILED;
6598 		}
6599 	}
6600 	/*
6601 	 * We have to clean up i/o as : they may be orphaned by the TMFs
6602 	 * above; or if any of the TMFs failed, they may be in an
6603 	 * indeterminate state.
6604 	 * We will report success if all the i/o aborts successfully.
6605 	 */
6606 
6607 	status = lpfc_reset_flush_io_context(vport, 0, 0, LPFC_CTX_HOST);
6608 	if (status != SUCCESS)
6609 		ret = FAILED;
6610 	if (ret == FAILED)
6611 		logit =  LOG_TRACE_EVENT;
6612 
6613 	lpfc_printf_vlog(vport, KERN_ERR, logit,
6614 			 "0714 SCSI layer issued Bus Reset Data: x%x\n", ret);
6615 	return ret;
6616 }
6617 
6618 /**
6619  * lpfc_host_reset_handler - scsi_host_template eh_host_reset_handler entry pt
6620  * @cmnd: Pointer to scsi_cmnd data structure.
6621  *
6622  * This routine does host reset to the adaptor port. It brings the HBA
6623  * offline, performs a board restart, and then brings the board back online.
6624  * The lpfc_offline calls lpfc_sli_hba_down which will abort and local
6625  * reject all outstanding SCSI commands to the host and error returned
6626  * back to SCSI mid-level. As this will be SCSI mid-level's last resort
6627  * of error handling, it will only return error if resetting of the adapter
6628  * is not successful; in all other cases, will return success.
6629  *
6630  * Return code :
6631  *  0x2003 - Error
6632  *  0x2002 - Success
6633  **/
6634 static int
6635 lpfc_host_reset_handler(struct scsi_cmnd *cmnd)
6636 {
6637 	struct Scsi_Host *shost = cmnd->device->host;
6638 	struct lpfc_vport *vport = (struct lpfc_vport *) shost->hostdata;
6639 	struct lpfc_hba *phba = vport->phba;
6640 	int rc, ret = SUCCESS;
6641 
6642 	lpfc_printf_vlog(vport, KERN_ERR, LOG_FCP,
6643 			 "3172 SCSI layer issued Host Reset Data:\n");
6644 
6645 	lpfc_offline_prep(phba, LPFC_MBX_WAIT);
6646 	lpfc_offline(phba);
6647 	rc = lpfc_sli_brdrestart(phba);
6648 	if (rc)
6649 		goto error;
6650 
6651 	/* Wait for successful restart of adapter */
6652 	if (phba->sli_rev < LPFC_SLI_REV4) {
6653 		rc = lpfc_sli_chipset_init(phba);
6654 		if (rc)
6655 			goto error;
6656 	}
6657 
6658 	rc = lpfc_online(phba);
6659 	if (rc)
6660 		goto error;
6661 
6662 	lpfc_unblock_mgmt_io(phba);
6663 
6664 	return ret;
6665 error:
6666 	lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6667 			 "3323 Failed host reset\n");
6668 	lpfc_unblock_mgmt_io(phba);
6669 	return FAILED;
6670 }
6671 
6672 /**
6673  * lpfc_slave_alloc - scsi_host_template slave_alloc entry point
6674  * @sdev: Pointer to scsi_device.
6675  *
6676  * This routine populates the cmds_per_lun count + 2 scsi_bufs into  this host's
6677  * globally available list of scsi buffers. This routine also makes sure scsi
6678  * buffer is not allocated more than HBA limit conveyed to midlayer. This list
6679  * of scsi buffer exists for the lifetime of the driver.
6680  *
6681  * Return codes:
6682  *   non-0 - Error
6683  *   0 - Success
6684  **/
6685 static int
6686 lpfc_slave_alloc(struct scsi_device *sdev)
6687 {
6688 	struct lpfc_vport *vport = (struct lpfc_vport *) sdev->host->hostdata;
6689 	struct lpfc_hba   *phba = vport->phba;
6690 	struct fc_rport *rport = starget_to_rport(scsi_target(sdev));
6691 	uint32_t total = 0;
6692 	uint32_t num_to_alloc = 0;
6693 	int num_allocated = 0;
6694 	uint32_t sdev_cnt;
6695 	struct lpfc_device_data *device_data;
6696 	unsigned long flags;
6697 	struct lpfc_name target_wwpn;
6698 
6699 	if (!rport || fc_remote_port_chkready(rport))
6700 		return -ENXIO;
6701 
6702 	if (phba->cfg_fof) {
6703 
6704 		/*
6705 		 * Check to see if the device data structure for the lun
6706 		 * exists.  If not, create one.
6707 		 */
6708 
6709 		u64_to_wwn(rport->port_name, target_wwpn.u.wwn);
6710 		spin_lock_irqsave(&phba->devicelock, flags);
6711 		device_data = __lpfc_get_device_data(phba,
6712 						     &phba->luns,
6713 						     &vport->fc_portname,
6714 						     &target_wwpn,
6715 						     sdev->lun);
6716 		if (!device_data) {
6717 			spin_unlock_irqrestore(&phba->devicelock, flags);
6718 			device_data = lpfc_create_device_data(phba,
6719 							&vport->fc_portname,
6720 							&target_wwpn,
6721 							sdev->lun,
6722 							phba->cfg_XLanePriority,
6723 							true);
6724 			if (!device_data)
6725 				return -ENOMEM;
6726 			spin_lock_irqsave(&phba->devicelock, flags);
6727 			list_add_tail(&device_data->listentry, &phba->luns);
6728 		}
6729 		device_data->rport_data = rport->dd_data;
6730 		device_data->available = true;
6731 		spin_unlock_irqrestore(&phba->devicelock, flags);
6732 		sdev->hostdata = device_data;
6733 	} else {
6734 		sdev->hostdata = rport->dd_data;
6735 	}
6736 	sdev_cnt = atomic_inc_return(&phba->sdev_cnt);
6737 
6738 	/* For SLI4, all IO buffers are pre-allocated */
6739 	if (phba->sli_rev == LPFC_SLI_REV4)
6740 		return 0;
6741 
6742 	/* This code path is now ONLY for SLI3 adapters */
6743 
6744 	/*
6745 	 * Populate the cmds_per_lun count scsi_bufs into this host's globally
6746 	 * available list of scsi buffers.  Don't allocate more than the
6747 	 * HBA limit conveyed to the midlayer via the host structure.  The
6748 	 * formula accounts for the lun_queue_depth + error handlers + 1
6749 	 * extra.  This list of scsi bufs exists for the lifetime of the driver.
6750 	 */
6751 	total = phba->total_scsi_bufs;
6752 	num_to_alloc = vport->cfg_lun_queue_depth + 2;
6753 
6754 	/* If allocated buffers are enough do nothing */
6755 	if ((sdev_cnt * (vport->cfg_lun_queue_depth + 2)) < total)
6756 		return 0;
6757 
6758 	/* Allow some exchanges to be available always to complete discovery */
6759 	if (total >= phba->cfg_hba_queue_depth - LPFC_DISC_IOCB_BUFF_COUNT ) {
6760 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
6761 				 "0704 At limitation of %d preallocated "
6762 				 "command buffers\n", total);
6763 		return 0;
6764 	/* Allow some exchanges to be available always to complete discovery */
6765 	} else if (total + num_to_alloc >
6766 		phba->cfg_hba_queue_depth - LPFC_DISC_IOCB_BUFF_COUNT ) {
6767 		lpfc_printf_vlog(vport, KERN_WARNING, LOG_FCP,
6768 				 "0705 Allocation request of %d "
6769 				 "command buffers will exceed max of %d.  "
6770 				 "Reducing allocation request to %d.\n",
6771 				 num_to_alloc, phba->cfg_hba_queue_depth,
6772 				 (phba->cfg_hba_queue_depth - total));
6773 		num_to_alloc = phba->cfg_hba_queue_depth - total;
6774 	}
6775 	num_allocated = lpfc_new_scsi_buf_s3(vport, num_to_alloc);
6776 	if (num_to_alloc != num_allocated) {
6777 			lpfc_printf_vlog(vport, KERN_ERR, LOG_TRACE_EVENT,
6778 					 "0708 Allocation request of %d "
6779 					 "command buffers did not succeed.  "
6780 					 "Allocated %d buffers.\n",
6781 					 num_to_alloc, num_allocated);
6782 	}
6783 	if (num_allocated > 0)
6784 		phba->total_scsi_bufs += num_allocated;
6785 	return 0;
6786 }
6787 
6788 /**
6789  * lpfc_slave_configure - scsi_host_template slave_configure entry point
6790  * @sdev: Pointer to scsi_device.
6791  *
6792  * This routine configures following items
6793  *   - Tag command queuing support for @sdev if supported.
6794  *   - Enable SLI polling for fcp ring if ENABLE_FCP_RING_POLLING flag is set.
6795  *
6796  * Return codes:
6797  *   0 - Success
6798  **/
6799 static int
6800 lpfc_slave_configure(struct scsi_device *sdev)
6801 {
6802 	struct lpfc_vport *vport = (struct lpfc_vport *) sdev->host->hostdata;
6803 	struct lpfc_hba   *phba = vport->phba;
6804 
6805 	scsi_change_queue_depth(sdev, vport->cfg_lun_queue_depth);
6806 
6807 	if (phba->cfg_poll & ENABLE_FCP_RING_POLLING) {
6808 		lpfc_sli_handle_fast_ring_event(phba,
6809 			&phba->sli.sli3_ring[LPFC_FCP_RING], HA_R0RE_REQ);
6810 		if (phba->cfg_poll & DISABLE_FCP_RING_INT)
6811 			lpfc_poll_rearm_timer(phba);
6812 	}
6813 
6814 	return 0;
6815 }
6816 
6817 /**
6818  * lpfc_slave_destroy - slave_destroy entry point of SHT data structure
6819  * @sdev: Pointer to scsi_device.
6820  *
6821  * This routine sets @sdev hostatdata filed to null.
6822  **/
6823 static void
6824 lpfc_slave_destroy(struct scsi_device *sdev)
6825 {
6826 	struct lpfc_vport *vport = (struct lpfc_vport *) sdev->host->hostdata;
6827 	struct lpfc_hba   *phba = vport->phba;
6828 	unsigned long flags;
6829 	struct lpfc_device_data *device_data = sdev->hostdata;
6830 
6831 	atomic_dec(&phba->sdev_cnt);
6832 	if ((phba->cfg_fof) && (device_data)) {
6833 		spin_lock_irqsave(&phba->devicelock, flags);
6834 		device_data->available = false;
6835 		if (!device_data->oas_enabled)
6836 			lpfc_delete_device_data(phba, device_data);
6837 		spin_unlock_irqrestore(&phba->devicelock, flags);
6838 	}
6839 	sdev->hostdata = NULL;
6840 	return;
6841 }
6842 
6843 /**
6844  * lpfc_create_device_data - creates and initializes device data structure for OAS
6845  * @phba: Pointer to host bus adapter structure.
6846  * @vport_wwpn: Pointer to vport's wwpn information
6847  * @target_wwpn: Pointer to target's wwpn information
6848  * @lun: Lun on target
6849  * @pri: Priority
6850  * @atomic_create: Flag to indicate if memory should be allocated using the
6851  *		  GFP_ATOMIC flag or not.
6852  *
6853  * This routine creates a device data structure which will contain identifying
6854  * information for the device (host wwpn, target wwpn, lun), state of OAS,
6855  * whether or not the corresponding lun is available by the system,
6856  * and pointer to the rport data.
6857  *
6858  * Return codes:
6859  *   NULL - Error
6860  *   Pointer to lpfc_device_data - Success
6861  **/
6862 struct lpfc_device_data*
6863 lpfc_create_device_data(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
6864 			struct lpfc_name *target_wwpn, uint64_t lun,
6865 			uint32_t pri, bool atomic_create)
6866 {
6867 
6868 	struct lpfc_device_data *lun_info;
6869 	int memory_flags;
6870 
6871 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn  ||
6872 	    !(phba->cfg_fof))
6873 		return NULL;
6874 
6875 	/* Attempt to create the device data to contain lun info */
6876 
6877 	if (atomic_create)
6878 		memory_flags = GFP_ATOMIC;
6879 	else
6880 		memory_flags = GFP_KERNEL;
6881 	lun_info = mempool_alloc(phba->device_data_mem_pool, memory_flags);
6882 	if (!lun_info)
6883 		return NULL;
6884 	INIT_LIST_HEAD(&lun_info->listentry);
6885 	lun_info->rport_data  = NULL;
6886 	memcpy(&lun_info->device_id.vport_wwpn, vport_wwpn,
6887 	       sizeof(struct lpfc_name));
6888 	memcpy(&lun_info->device_id.target_wwpn, target_wwpn,
6889 	       sizeof(struct lpfc_name));
6890 	lun_info->device_id.lun = lun;
6891 	lun_info->oas_enabled = false;
6892 	lun_info->priority = pri;
6893 	lun_info->available = false;
6894 	return lun_info;
6895 }
6896 
6897 /**
6898  * lpfc_delete_device_data - frees a device data structure for OAS
6899  * @phba: Pointer to host bus adapter structure.
6900  * @lun_info: Pointer to device data structure to free.
6901  *
6902  * This routine frees the previously allocated device data structure passed.
6903  *
6904  **/
6905 void
6906 lpfc_delete_device_data(struct lpfc_hba *phba,
6907 			struct lpfc_device_data *lun_info)
6908 {
6909 
6910 	if (unlikely(!phba) || !lun_info  ||
6911 	    !(phba->cfg_fof))
6912 		return;
6913 
6914 	if (!list_empty(&lun_info->listentry))
6915 		list_del(&lun_info->listentry);
6916 	mempool_free(lun_info, phba->device_data_mem_pool);
6917 	return;
6918 }
6919 
6920 /**
6921  * __lpfc_get_device_data - returns the device data for the specified lun
6922  * @phba: Pointer to host bus adapter structure.
6923  * @list: Point to list to search.
6924  * @vport_wwpn: Pointer to vport's wwpn information
6925  * @target_wwpn: Pointer to target's wwpn information
6926  * @lun: Lun on target
6927  *
6928  * This routine searches the list passed for the specified lun's device data.
6929  * This function does not hold locks, it is the responsibility of the caller
6930  * to ensure the proper lock is held before calling the function.
6931  *
6932  * Return codes:
6933  *   NULL - Error
6934  *   Pointer to lpfc_device_data - Success
6935  **/
6936 struct lpfc_device_data*
6937 __lpfc_get_device_data(struct lpfc_hba *phba, struct list_head *list,
6938 		       struct lpfc_name *vport_wwpn,
6939 		       struct lpfc_name *target_wwpn, uint64_t lun)
6940 {
6941 
6942 	struct lpfc_device_data *lun_info;
6943 
6944 	if (unlikely(!phba) || !list || !vport_wwpn || !target_wwpn ||
6945 	    !phba->cfg_fof)
6946 		return NULL;
6947 
6948 	/* Check to see if the lun is already enabled for OAS. */
6949 
6950 	list_for_each_entry(lun_info, list, listentry) {
6951 		if ((memcmp(&lun_info->device_id.vport_wwpn, vport_wwpn,
6952 			    sizeof(struct lpfc_name)) == 0) &&
6953 		    (memcmp(&lun_info->device_id.target_wwpn, target_wwpn,
6954 			    sizeof(struct lpfc_name)) == 0) &&
6955 		    (lun_info->device_id.lun == lun))
6956 			return lun_info;
6957 	}
6958 
6959 	return NULL;
6960 }
6961 
6962 /**
6963  * lpfc_find_next_oas_lun - searches for the next oas lun
6964  * @phba: Pointer to host bus adapter structure.
6965  * @vport_wwpn: Pointer to vport's wwpn information
6966  * @target_wwpn: Pointer to target's wwpn information
6967  * @starting_lun: Pointer to the lun to start searching for
6968  * @found_vport_wwpn: Pointer to the found lun's vport wwpn information
6969  * @found_target_wwpn: Pointer to the found lun's target wwpn information
6970  * @found_lun: Pointer to the found lun.
6971  * @found_lun_status: Pointer to status of the found lun.
6972  * @found_lun_pri: Pointer to priority of the found lun.
6973  *
6974  * This routine searches the luns list for the specified lun
6975  * or the first lun for the vport/target.  If the vport wwpn contains
6976  * a zero value then a specific vport is not specified. In this case
6977  * any vport which contains the lun will be considered a match.  If the
6978  * target wwpn contains a zero value then a specific target is not specified.
6979  * In this case any target which contains the lun will be considered a
6980  * match.  If the lun is found, the lun, vport wwpn, target wwpn and lun status
6981  * are returned.  The function will also return the next lun if available.
6982  * If the next lun is not found, starting_lun parameter will be set to
6983  * NO_MORE_OAS_LUN.
6984  *
6985  * Return codes:
6986  *   non-0 - Error
6987  *   0 - Success
6988  **/
6989 bool
6990 lpfc_find_next_oas_lun(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
6991 		       struct lpfc_name *target_wwpn, uint64_t *starting_lun,
6992 		       struct lpfc_name *found_vport_wwpn,
6993 		       struct lpfc_name *found_target_wwpn,
6994 		       uint64_t *found_lun,
6995 		       uint32_t *found_lun_status,
6996 		       uint32_t *found_lun_pri)
6997 {
6998 
6999 	unsigned long flags;
7000 	struct lpfc_device_data *lun_info;
7001 	struct lpfc_device_id *device_id;
7002 	uint64_t lun;
7003 	bool found = false;
7004 
7005 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn ||
7006 	    !starting_lun || !found_vport_wwpn ||
7007 	    !found_target_wwpn || !found_lun || !found_lun_status ||
7008 	    (*starting_lun == NO_MORE_OAS_LUN) ||
7009 	    !phba->cfg_fof)
7010 		return false;
7011 
7012 	lun = *starting_lun;
7013 	*found_lun = NO_MORE_OAS_LUN;
7014 	*starting_lun = NO_MORE_OAS_LUN;
7015 
7016 	/* Search for lun or the lun closet in value */
7017 
7018 	spin_lock_irqsave(&phba->devicelock, flags);
7019 	list_for_each_entry(lun_info, &phba->luns, listentry) {
7020 		if (((wwn_to_u64(vport_wwpn->u.wwn) == 0) ||
7021 		     (memcmp(&lun_info->device_id.vport_wwpn, vport_wwpn,
7022 			    sizeof(struct lpfc_name)) == 0)) &&
7023 		    ((wwn_to_u64(target_wwpn->u.wwn) == 0) ||
7024 		     (memcmp(&lun_info->device_id.target_wwpn, target_wwpn,
7025 			    sizeof(struct lpfc_name)) == 0)) &&
7026 		    (lun_info->oas_enabled)) {
7027 			device_id = &lun_info->device_id;
7028 			if ((!found) &&
7029 			    ((lun == FIND_FIRST_OAS_LUN) ||
7030 			     (device_id->lun == lun))) {
7031 				*found_lun = device_id->lun;
7032 				memcpy(found_vport_wwpn,
7033 				       &device_id->vport_wwpn,
7034 				       sizeof(struct lpfc_name));
7035 				memcpy(found_target_wwpn,
7036 				       &device_id->target_wwpn,
7037 				       sizeof(struct lpfc_name));
7038 				if (lun_info->available)
7039 					*found_lun_status =
7040 						OAS_LUN_STATUS_EXISTS;
7041 				else
7042 					*found_lun_status = 0;
7043 				*found_lun_pri = lun_info->priority;
7044 				if (phba->cfg_oas_flags & OAS_FIND_ANY_VPORT)
7045 					memset(vport_wwpn, 0x0,
7046 					       sizeof(struct lpfc_name));
7047 				if (phba->cfg_oas_flags & OAS_FIND_ANY_TARGET)
7048 					memset(target_wwpn, 0x0,
7049 					       sizeof(struct lpfc_name));
7050 				found = true;
7051 			} else if (found) {
7052 				*starting_lun = device_id->lun;
7053 				memcpy(vport_wwpn, &device_id->vport_wwpn,
7054 				       sizeof(struct lpfc_name));
7055 				memcpy(target_wwpn, &device_id->target_wwpn,
7056 				       sizeof(struct lpfc_name));
7057 				break;
7058 			}
7059 		}
7060 	}
7061 	spin_unlock_irqrestore(&phba->devicelock, flags);
7062 	return found;
7063 }
7064 
7065 /**
7066  * lpfc_enable_oas_lun - enables a lun for OAS operations
7067  * @phba: Pointer to host bus adapter structure.
7068  * @vport_wwpn: Pointer to vport's wwpn information
7069  * @target_wwpn: Pointer to target's wwpn information
7070  * @lun: Lun
7071  * @pri: Priority
7072  *
7073  * This routine enables a lun for oas operations.  The routines does so by
7074  * doing the following :
7075  *
7076  *   1) Checks to see if the device data for the lun has been created.
7077  *   2) If found, sets the OAS enabled flag if not set and returns.
7078  *   3) Otherwise, creates a device data structure.
7079  *   4) If successfully created, indicates the device data is for an OAS lun,
7080  *   indicates the lun is not available and add to the list of luns.
7081  *
7082  * Return codes:
7083  *   false - Error
7084  *   true - Success
7085  **/
7086 bool
7087 lpfc_enable_oas_lun(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
7088 		    struct lpfc_name *target_wwpn, uint64_t lun, uint8_t pri)
7089 {
7090 
7091 	struct lpfc_device_data *lun_info;
7092 	unsigned long flags;
7093 
7094 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn ||
7095 	    !phba->cfg_fof)
7096 		return false;
7097 
7098 	spin_lock_irqsave(&phba->devicelock, flags);
7099 
7100 	/* Check to see if the device data for the lun has been created */
7101 	lun_info = __lpfc_get_device_data(phba, &phba->luns, vport_wwpn,
7102 					  target_wwpn, lun);
7103 	if (lun_info) {
7104 		if (!lun_info->oas_enabled)
7105 			lun_info->oas_enabled = true;
7106 		lun_info->priority = pri;
7107 		spin_unlock_irqrestore(&phba->devicelock, flags);
7108 		return true;
7109 	}
7110 
7111 	/* Create an lun info structure and add to list of luns */
7112 	lun_info = lpfc_create_device_data(phba, vport_wwpn, target_wwpn, lun,
7113 					   pri, true);
7114 	if (lun_info) {
7115 		lun_info->oas_enabled = true;
7116 		lun_info->priority = pri;
7117 		lun_info->available = false;
7118 		list_add_tail(&lun_info->listentry, &phba->luns);
7119 		spin_unlock_irqrestore(&phba->devicelock, flags);
7120 		return true;
7121 	}
7122 	spin_unlock_irqrestore(&phba->devicelock, flags);
7123 	return false;
7124 }
7125 
7126 /**
7127  * lpfc_disable_oas_lun - disables a lun for OAS operations
7128  * @phba: Pointer to host bus adapter structure.
7129  * @vport_wwpn: Pointer to vport's wwpn information
7130  * @target_wwpn: Pointer to target's wwpn information
7131  * @lun: Lun
7132  * @pri: Priority
7133  *
7134  * This routine disables a lun for oas operations.  The routines does so by
7135  * doing the following :
7136  *
7137  *   1) Checks to see if the device data for the lun is created.
7138  *   2) If present, clears the flag indicating this lun is for OAS.
7139  *   3) If the lun is not available by the system, the device data is
7140  *   freed.
7141  *
7142  * Return codes:
7143  *   false - Error
7144  *   true - Success
7145  **/
7146 bool
7147 lpfc_disable_oas_lun(struct lpfc_hba *phba, struct lpfc_name *vport_wwpn,
7148 		     struct lpfc_name *target_wwpn, uint64_t lun, uint8_t pri)
7149 {
7150 
7151 	struct lpfc_device_data *lun_info;
7152 	unsigned long flags;
7153 
7154 	if (unlikely(!phba) || !vport_wwpn || !target_wwpn ||
7155 	    !phba->cfg_fof)
7156 		return false;
7157 
7158 	spin_lock_irqsave(&phba->devicelock, flags);
7159 
7160 	/* Check to see if the lun is available. */
7161 	lun_info = __lpfc_get_device_data(phba,
7162 					  &phba->luns, vport_wwpn,
7163 					  target_wwpn, lun);
7164 	if (lun_info) {
7165 		lun_info->oas_enabled = false;
7166 		lun_info->priority = pri;
7167 		if (!lun_info->available)
7168 			lpfc_delete_device_data(phba, lun_info);
7169 		spin_unlock_irqrestore(&phba->devicelock, flags);
7170 		return true;
7171 	}
7172 
7173 	spin_unlock_irqrestore(&phba->devicelock, flags);
7174 	return false;
7175 }
7176 
7177 static int
7178 lpfc_no_command(struct Scsi_Host *shost, struct scsi_cmnd *cmnd)
7179 {
7180 	return SCSI_MLQUEUE_HOST_BUSY;
7181 }
7182 
7183 static int
7184 lpfc_no_handler(struct scsi_cmnd *cmnd)
7185 {
7186 	return FAILED;
7187 }
7188 
7189 static int
7190 lpfc_no_slave(struct scsi_device *sdev)
7191 {
7192 	return -ENODEV;
7193 }
7194 
7195 struct scsi_host_template lpfc_template_nvme = {
7196 	.module			= THIS_MODULE,
7197 	.name			= LPFC_DRIVER_NAME,
7198 	.proc_name		= LPFC_DRIVER_NAME,
7199 	.info			= lpfc_info,
7200 	.queuecommand		= lpfc_no_command,
7201 	.eh_abort_handler	= lpfc_no_handler,
7202 	.eh_device_reset_handler = lpfc_no_handler,
7203 	.eh_target_reset_handler = lpfc_no_handler,
7204 	.eh_bus_reset_handler	= lpfc_no_handler,
7205 	.eh_host_reset_handler  = lpfc_no_handler,
7206 	.slave_alloc		= lpfc_no_slave,
7207 	.slave_configure	= lpfc_no_slave,
7208 	.scan_finished		= lpfc_scan_finished,
7209 	.this_id		= -1,
7210 	.sg_tablesize		= 1,
7211 	.cmd_per_lun		= 1,
7212 	.shost_groups		= lpfc_hba_groups,
7213 	.max_sectors		= 0xFFFFFFFF,
7214 	.vendor_id		= LPFC_NL_VENDOR_ID,
7215 	.track_queue_depth	= 0,
7216 };
7217 
7218 struct scsi_host_template lpfc_template = {
7219 	.module			= THIS_MODULE,
7220 	.name			= LPFC_DRIVER_NAME,
7221 	.proc_name		= LPFC_DRIVER_NAME,
7222 	.info			= lpfc_info,
7223 	.queuecommand		= lpfc_queuecommand,
7224 	.eh_timed_out		= fc_eh_timed_out,
7225 	.eh_should_retry_cmd    = fc_eh_should_retry_cmd,
7226 	.eh_abort_handler	= lpfc_abort_handler,
7227 	.eh_device_reset_handler = lpfc_device_reset_handler,
7228 	.eh_target_reset_handler = lpfc_target_reset_handler,
7229 	.eh_bus_reset_handler	= lpfc_bus_reset_handler,
7230 	.eh_host_reset_handler  = lpfc_host_reset_handler,
7231 	.slave_alloc		= lpfc_slave_alloc,
7232 	.slave_configure	= lpfc_slave_configure,
7233 	.slave_destroy		= lpfc_slave_destroy,
7234 	.scan_finished		= lpfc_scan_finished,
7235 	.this_id		= -1,
7236 	.sg_tablesize		= LPFC_DEFAULT_SG_SEG_CNT,
7237 	.cmd_per_lun		= LPFC_CMD_PER_LUN,
7238 	.shost_groups		= lpfc_hba_groups,
7239 	.max_sectors		= 0xFFFFFFFF,
7240 	.vendor_id		= LPFC_NL_VENDOR_ID,
7241 	.change_queue_depth	= scsi_change_queue_depth,
7242 	.track_queue_depth	= 1,
7243 };
7244