Merge git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi-misc-2.6
[linux-2.6.git] / drivers / scsi / bnx2fc / bnx2fc_io.c
1 /* bnx2fc_io.c: Broadcom NetXtreme II Linux FCoE offload driver.
2  * IO manager and SCSI IO processing.
3  *
4  * Copyright (c) 2008 - 2010 Broadcom Corporation
5  *
6  * This program is free software; you can redistribute it and/or modify
7  * it under the terms of the GNU General Public License as published by
8  * the Free Software Foundation.
9  *
10  * Written by: Bhanu Prakash Gollapudi (bprakash@broadcom.com)
11  */
12
13 #include "bnx2fc.h"
14
15 #define RESERVE_FREE_LIST_INDEX num_possible_cpus()
16
17 static int bnx2fc_split_bd(struct bnx2fc_cmd *io_req, u64 addr, int sg_len,
18                            int bd_index);
19 static int bnx2fc_map_sg(struct bnx2fc_cmd *io_req);
20 static void bnx2fc_build_bd_list_from_sg(struct bnx2fc_cmd *io_req);
21 static int bnx2fc_post_io_req(struct bnx2fc_rport *tgt,
22                                struct bnx2fc_cmd *io_req);
23 static void bnx2fc_unmap_sg_list(struct bnx2fc_cmd *io_req);
24 static void bnx2fc_free_mp_resc(struct bnx2fc_cmd *io_req);
25 static void bnx2fc_parse_fcp_rsp(struct bnx2fc_cmd *io_req,
26                                  struct fcoe_fcp_rsp_payload *fcp_rsp,
27                                  u8 num_rq);
28
29 void bnx2fc_cmd_timer_set(struct bnx2fc_cmd *io_req,
30                           unsigned int timer_msec)
31 {
32         struct bnx2fc_hba *hba = io_req->port->priv;
33
34         if (queue_delayed_work(hba->timer_work_queue, &io_req->timeout_work,
35                                   msecs_to_jiffies(timer_msec)))
36                 kref_get(&io_req->refcount);
37 }
38
39 static void bnx2fc_cmd_timeout(struct work_struct *work)
40 {
41         struct bnx2fc_cmd *io_req = container_of(work, struct bnx2fc_cmd,
42                                                  timeout_work.work);
43         struct fc_lport *lport;
44         struct fc_rport_priv *rdata;
45         u8 cmd_type = io_req->cmd_type;
46         struct bnx2fc_rport *tgt = io_req->tgt;
47         int logo_issued;
48         int rc;
49
50         BNX2FC_IO_DBG(io_req, "cmd_timeout, cmd_type = %d,"
51                       "req_flags = %lx\n", cmd_type, io_req->req_flags);
52
53         spin_lock_bh(&tgt->tgt_lock);
54         if (test_and_clear_bit(BNX2FC_FLAG_ISSUE_RRQ, &io_req->req_flags)) {
55                 clear_bit(BNX2FC_FLAG_RETIRE_OXID, &io_req->req_flags);
56                 /*
57                  * ideally we should hold the io_req until RRQ complets,
58                  * and release io_req from timeout hold.
59                  */
60                 spin_unlock_bh(&tgt->tgt_lock);
61                 bnx2fc_send_rrq(io_req);
62                 return;
63         }
64         if (test_and_clear_bit(BNX2FC_FLAG_RETIRE_OXID, &io_req->req_flags)) {
65                 BNX2FC_IO_DBG(io_req, "IO ready for reuse now\n");
66                 goto done;
67         }
68
69         switch (cmd_type) {
70         case BNX2FC_SCSI_CMD:
71                 if (test_and_clear_bit(BNX2FC_FLAG_EH_ABORT,
72                                                         &io_req->req_flags)) {
73                         /* Handle eh_abort timeout */
74                         BNX2FC_IO_DBG(io_req, "eh_abort timed out\n");
75                         complete(&io_req->tm_done);
76                 } else if (test_bit(BNX2FC_FLAG_ISSUE_ABTS,
77                                     &io_req->req_flags)) {
78                         /* Handle internally generated ABTS timeout */
79                         BNX2FC_IO_DBG(io_req, "ABTS timed out refcnt = %d\n",
80                                         io_req->refcount.refcount.counter);
81                         if (!(test_and_set_bit(BNX2FC_FLAG_ABTS_DONE,
82                                                &io_req->req_flags))) {
83
84                                 lport = io_req->port->lport;
85                                 rdata = io_req->tgt->rdata;
86                                 logo_issued = test_and_set_bit(
87                                                 BNX2FC_FLAG_EXPL_LOGO,
88                                                 &tgt->flags);
89                                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
90                                 spin_unlock_bh(&tgt->tgt_lock);
91
92                                 /* Explicitly logo the target */
93                                 if (!logo_issued) {
94                                         BNX2FC_IO_DBG(io_req, "Explicit "
95                                                    "logo - tgt flags = 0x%lx\n",
96                                                    tgt->flags);
97
98                                         mutex_lock(&lport->disc.disc_mutex);
99                                         lport->tt.rport_logoff(rdata);
100                                         mutex_unlock(&lport->disc.disc_mutex);
101                                 }
102                                 return;
103                         }
104                 } else {
105                         /* Hanlde IO timeout */
106                         BNX2FC_IO_DBG(io_req, "IO timed out. issue ABTS\n");
107                         if (test_and_set_bit(BNX2FC_FLAG_IO_COMPL,
108                                              &io_req->req_flags)) {
109                                 BNX2FC_IO_DBG(io_req, "IO completed before "
110                                                            " timer expiry\n");
111                                 goto done;
112                         }
113
114                         if (!test_and_set_bit(BNX2FC_FLAG_ISSUE_ABTS,
115                                               &io_req->req_flags)) {
116                                 rc = bnx2fc_initiate_abts(io_req);
117                                 if (rc == SUCCESS)
118                                         goto done;
119                                 /*
120                                  * Explicitly logo the target if
121                                  * abts initiation fails
122                                  */
123                                 lport = io_req->port->lport;
124                                 rdata = io_req->tgt->rdata;
125                                 logo_issued = test_and_set_bit(
126                                                 BNX2FC_FLAG_EXPL_LOGO,
127                                                 &tgt->flags);
128                                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
129                                 spin_unlock_bh(&tgt->tgt_lock);
130
131                                 if (!logo_issued) {
132                                         BNX2FC_IO_DBG(io_req, "Explicit "
133                                                    "logo - tgt flags = 0x%lx\n",
134                                                    tgt->flags);
135
136
137                                         mutex_lock(&lport->disc.disc_mutex);
138                                         lport->tt.rport_logoff(rdata);
139                                         mutex_unlock(&lport->disc.disc_mutex);
140                                 }
141                                 return;
142                         } else {
143                                 BNX2FC_IO_DBG(io_req, "IO already in "
144                                                       "ABTS processing\n");
145                         }
146                 }
147                 break;
148         case BNX2FC_ELS:
149
150                 if (test_bit(BNX2FC_FLAG_ISSUE_ABTS, &io_req->req_flags)) {
151                         BNX2FC_IO_DBG(io_req, "ABTS for ELS timed out\n");
152
153                         if (!test_and_set_bit(BNX2FC_FLAG_ABTS_DONE,
154                                               &io_req->req_flags)) {
155                                 lport = io_req->port->lport;
156                                 rdata = io_req->tgt->rdata;
157                                 logo_issued = test_and_set_bit(
158                                                 BNX2FC_FLAG_EXPL_LOGO,
159                                                 &tgt->flags);
160                                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
161                                 spin_unlock_bh(&tgt->tgt_lock);
162
163                                 /* Explicitly logo the target */
164                                 if (!logo_issued) {
165                                         BNX2FC_IO_DBG(io_req, "Explicitly logo"
166                                                    "(els)\n");
167                                         mutex_lock(&lport->disc.disc_mutex);
168                                         lport->tt.rport_logoff(rdata);
169                                         mutex_unlock(&lport->disc.disc_mutex);
170                                 }
171                                 return;
172                         }
173                 } else {
174                         /*
175                          * Handle ELS timeout.
176                          * tgt_lock is used to sync compl path and timeout
177                          * path. If els compl path is processing this IO, we
178                          * have nothing to do here, just release the timer hold
179                          */
180                         BNX2FC_IO_DBG(io_req, "ELS timed out\n");
181                         if (test_and_set_bit(BNX2FC_FLAG_ELS_DONE,
182                                                &io_req->req_flags))
183                                 goto done;
184
185                         /* Indicate the cb_func that this ELS is timed out */
186                         set_bit(BNX2FC_FLAG_ELS_TIMEOUT, &io_req->req_flags);
187
188                         if ((io_req->cb_func) && (io_req->cb_arg)) {
189                                 io_req->cb_func(io_req->cb_arg);
190                                 io_req->cb_arg = NULL;
191                         }
192                 }
193                 break;
194         default:
195                 printk(KERN_ERR PFX "cmd_timeout: invalid cmd_type %d\n",
196                         cmd_type);
197                 break;
198         }
199
200 done:
201         /* release the cmd that was held when timer was set */
202         kref_put(&io_req->refcount, bnx2fc_cmd_release);
203         spin_unlock_bh(&tgt->tgt_lock);
204 }
205
206 static void bnx2fc_scsi_done(struct bnx2fc_cmd *io_req, int err_code)
207 {
208         /* Called with host lock held */
209         struct scsi_cmnd *sc_cmd = io_req->sc_cmd;
210
211         /*
212          * active_cmd_queue may have other command types as well,
213          * and during flush operation,  we want to error back only
214          * scsi commands.
215          */
216         if (io_req->cmd_type != BNX2FC_SCSI_CMD)
217                 return;
218
219         BNX2FC_IO_DBG(io_req, "scsi_done. err_code = 0x%x\n", err_code);
220         bnx2fc_unmap_sg_list(io_req);
221         io_req->sc_cmd = NULL;
222         if (!sc_cmd) {
223                 printk(KERN_ERR PFX "scsi_done - sc_cmd NULL. "
224                                     "IO(0x%x) already cleaned up\n",
225                        io_req->xid);
226                 return;
227         }
228         sc_cmd->result = err_code << 16;
229
230         BNX2FC_IO_DBG(io_req, "sc=%p, result=0x%x, retries=%d, allowed=%d\n",
231                 sc_cmd, host_byte(sc_cmd->result), sc_cmd->retries,
232                 sc_cmd->allowed);
233         scsi_set_resid(sc_cmd, scsi_bufflen(sc_cmd));
234         sc_cmd->SCp.ptr = NULL;
235         sc_cmd->scsi_done(sc_cmd);
236 }
237
238 struct bnx2fc_cmd_mgr *bnx2fc_cmd_mgr_alloc(struct bnx2fc_hba *hba,
239                                                 u16 min_xid, u16 max_xid)
240 {
241         struct bnx2fc_cmd_mgr *cmgr;
242         struct io_bdt *bdt_info;
243         struct bnx2fc_cmd *io_req;
244         size_t len;
245         u32 mem_size;
246         u16 xid;
247         int i;
248         int num_ios, num_pri_ios;
249         size_t bd_tbl_sz;
250         int arr_sz = num_possible_cpus() + 1;
251
252         if (max_xid <= min_xid || max_xid == FC_XID_UNKNOWN) {
253                 printk(KERN_ERR PFX "cmd_mgr_alloc: Invalid min_xid 0x%x \
254                                         and max_xid 0x%x\n", min_xid, max_xid);
255                 return NULL;
256         }
257         BNX2FC_MISC_DBG("min xid 0x%x, max xid 0x%x\n", min_xid, max_xid);
258
259         num_ios = max_xid - min_xid + 1;
260         len = (num_ios * (sizeof(struct bnx2fc_cmd *)));
261         len += sizeof(struct bnx2fc_cmd_mgr);
262
263         cmgr = kzalloc(len, GFP_KERNEL);
264         if (!cmgr) {
265                 printk(KERN_ERR PFX "failed to alloc cmgr\n");
266                 return NULL;
267         }
268
269         cmgr->free_list = kzalloc(sizeof(*cmgr->free_list) *
270                                   arr_sz, GFP_KERNEL);
271         if (!cmgr->free_list) {
272                 printk(KERN_ERR PFX "failed to alloc free_list\n");
273                 goto mem_err;
274         }
275
276         cmgr->free_list_lock = kzalloc(sizeof(*cmgr->free_list_lock) *
277                                        arr_sz, GFP_KERNEL);
278         if (!cmgr->free_list_lock) {
279                 printk(KERN_ERR PFX "failed to alloc free_list_lock\n");
280                 goto mem_err;
281         }
282
283         cmgr->hba = hba;
284         cmgr->cmds = (struct bnx2fc_cmd **)(cmgr + 1);
285
286         for (i = 0; i < arr_sz; i++)  {
287                 INIT_LIST_HEAD(&cmgr->free_list[i]);
288                 spin_lock_init(&cmgr->free_list_lock[i]);
289         }
290
291         /*
292          * Pre-allocated pool of bnx2fc_cmds.
293          * Last entry in the free list array is the free list
294          * of slow path requests.
295          */
296         xid = BNX2FC_MIN_XID;
297         num_pri_ios = num_ios - BNX2FC_ELSTM_XIDS;
298         for (i = 0; i < num_ios; i++) {
299                 io_req = kzalloc(sizeof(*io_req), GFP_KERNEL);
300
301                 if (!io_req) {
302                         printk(KERN_ERR PFX "failed to alloc io_req\n");
303                         goto mem_err;
304                 }
305
306                 INIT_LIST_HEAD(&io_req->link);
307                 INIT_DELAYED_WORK(&io_req->timeout_work, bnx2fc_cmd_timeout);
308
309                 io_req->xid = xid++;
310                 if (i < num_pri_ios)
311                         list_add_tail(&io_req->link,
312                                 &cmgr->free_list[io_req->xid %
313                                                  num_possible_cpus()]);
314                 else
315                         list_add_tail(&io_req->link,
316                                 &cmgr->free_list[num_possible_cpus()]);
317                 io_req++;
318         }
319
320         /* Allocate pool of io_bdts - one for each bnx2fc_cmd */
321         mem_size = num_ios * sizeof(struct io_bdt *);
322         cmgr->io_bdt_pool = kmalloc(mem_size, GFP_KERNEL);
323         if (!cmgr->io_bdt_pool) {
324                 printk(KERN_ERR PFX "failed to alloc io_bdt_pool\n");
325                 goto mem_err;
326         }
327
328         mem_size = sizeof(struct io_bdt);
329         for (i = 0; i < num_ios; i++) {
330                 cmgr->io_bdt_pool[i] = kmalloc(mem_size, GFP_KERNEL);
331                 if (!cmgr->io_bdt_pool[i]) {
332                         printk(KERN_ERR PFX "failed to alloc "
333                                 "io_bdt_pool[%d]\n", i);
334                         goto mem_err;
335                 }
336         }
337
338         /* Allocate an map fcoe_bdt_ctx structures */
339         bd_tbl_sz = BNX2FC_MAX_BDS_PER_CMD * sizeof(struct fcoe_bd_ctx);
340         for (i = 0; i < num_ios; i++) {
341                 bdt_info = cmgr->io_bdt_pool[i];
342                 bdt_info->bd_tbl = dma_alloc_coherent(&hba->pcidev->dev,
343                                                       bd_tbl_sz,
344                                                       &bdt_info->bd_tbl_dma,
345                                                       GFP_KERNEL);
346                 if (!bdt_info->bd_tbl) {
347                         printk(KERN_ERR PFX "failed to alloc "
348                                 "bdt_tbl[%d]\n", i);
349                         goto mem_err;
350                 }
351         }
352
353         return cmgr;
354
355 mem_err:
356         bnx2fc_cmd_mgr_free(cmgr);
357         return NULL;
358 }
359
360 void bnx2fc_cmd_mgr_free(struct bnx2fc_cmd_mgr *cmgr)
361 {
362         struct io_bdt *bdt_info;
363         struct bnx2fc_hba *hba = cmgr->hba;
364         size_t bd_tbl_sz;
365         u16 min_xid = BNX2FC_MIN_XID;
366         u16 max_xid = BNX2FC_MAX_XID;
367         int num_ios;
368         int i;
369
370         num_ios = max_xid - min_xid + 1;
371
372         /* Free fcoe_bdt_ctx structures */
373         if (!cmgr->io_bdt_pool)
374                 goto free_cmd_pool;
375
376         bd_tbl_sz = BNX2FC_MAX_BDS_PER_CMD * sizeof(struct fcoe_bd_ctx);
377         for (i = 0; i < num_ios; i++) {
378                 bdt_info = cmgr->io_bdt_pool[i];
379                 if (bdt_info->bd_tbl) {
380                         dma_free_coherent(&hba->pcidev->dev, bd_tbl_sz,
381                                             bdt_info->bd_tbl,
382                                             bdt_info->bd_tbl_dma);
383                         bdt_info->bd_tbl = NULL;
384                 }
385         }
386
387         /* Destroy io_bdt pool */
388         for (i = 0; i < num_ios; i++) {
389                 kfree(cmgr->io_bdt_pool[i]);
390                 cmgr->io_bdt_pool[i] = NULL;
391         }
392
393         kfree(cmgr->io_bdt_pool);
394         cmgr->io_bdt_pool = NULL;
395
396 free_cmd_pool:
397         kfree(cmgr->free_list_lock);
398
399         /* Destroy cmd pool */
400         if (!cmgr->free_list)
401                 goto free_cmgr;
402
403         for (i = 0; i < num_possible_cpus() + 1; i++)  {
404                 struct list_head *list;
405                 struct list_head *tmp;
406
407                 list_for_each_safe(list, tmp, &cmgr->free_list[i]) {
408                         struct bnx2fc_cmd *io_req = (struct bnx2fc_cmd *)list;
409                         list_del(&io_req->link);
410                         kfree(io_req);
411                 }
412         }
413         kfree(cmgr->free_list);
414 free_cmgr:
415         /* Free command manager itself */
416         kfree(cmgr);
417 }
418
419 struct bnx2fc_cmd *bnx2fc_elstm_alloc(struct bnx2fc_rport *tgt, int type)
420 {
421         struct fcoe_port *port = tgt->port;
422         struct bnx2fc_hba *hba = port->priv;
423         struct bnx2fc_cmd_mgr *cmd_mgr = hba->cmd_mgr;
424         struct bnx2fc_cmd *io_req;
425         struct list_head *listp;
426         struct io_bdt *bd_tbl;
427         int index = RESERVE_FREE_LIST_INDEX;
428         u32 free_sqes;
429         u32 max_sqes;
430         u16 xid;
431
432         max_sqes = tgt->max_sqes;
433         switch (type) {
434         case BNX2FC_TASK_MGMT_CMD:
435                 max_sqes = BNX2FC_TM_MAX_SQES;
436                 break;
437         case BNX2FC_ELS:
438                 max_sqes = BNX2FC_ELS_MAX_SQES;
439                 break;
440         default:
441                 break;
442         }
443
444         /*
445          * NOTE: Free list insertions and deletions are protected with
446          * cmgr lock
447          */
448         spin_lock_bh(&cmd_mgr->free_list_lock[index]);
449         free_sqes = atomic_read(&tgt->free_sqes);
450         if ((list_empty(&(cmd_mgr->free_list[index]))) ||
451             (tgt->num_active_ios.counter  >= max_sqes) ||
452             (free_sqes + max_sqes <= BNX2FC_SQ_WQES_MAX)) {
453                 BNX2FC_TGT_DBG(tgt, "No free els_tm cmds available "
454                         "ios(%d):sqes(%d)\n",
455                         tgt->num_active_ios.counter, tgt->max_sqes);
456                 if (list_empty(&(cmd_mgr->free_list[index])))
457                         printk(KERN_ERR PFX "elstm_alloc: list_empty\n");
458                 spin_unlock_bh(&cmd_mgr->free_list_lock[index]);
459                 return NULL;
460         }
461
462         listp = (struct list_head *)
463                         cmd_mgr->free_list[index].next;
464         list_del_init(listp);
465         io_req = (struct bnx2fc_cmd *) listp;
466         xid = io_req->xid;
467         cmd_mgr->cmds[xid] = io_req;
468         atomic_inc(&tgt->num_active_ios);
469         atomic_dec(&tgt->free_sqes);
470         spin_unlock_bh(&cmd_mgr->free_list_lock[index]);
471
472         INIT_LIST_HEAD(&io_req->link);
473
474         io_req->port = port;
475         io_req->cmd_mgr = cmd_mgr;
476         io_req->req_flags = 0;
477         io_req->cmd_type = type;
478
479         /* Bind io_bdt for this io_req */
480         /* Have a static link between io_req and io_bdt_pool */
481         bd_tbl = io_req->bd_tbl = cmd_mgr->io_bdt_pool[xid];
482         bd_tbl->io_req = io_req;
483
484         /* Hold the io_req  against deletion */
485         kref_init(&io_req->refcount);
486         return io_req;
487 }
488 static struct bnx2fc_cmd *bnx2fc_cmd_alloc(struct bnx2fc_rport *tgt)
489 {
490         struct fcoe_port *port = tgt->port;
491         struct bnx2fc_hba *hba = port->priv;
492         struct bnx2fc_cmd_mgr *cmd_mgr = hba->cmd_mgr;
493         struct bnx2fc_cmd *io_req;
494         struct list_head *listp;
495         struct io_bdt *bd_tbl;
496         u32 free_sqes;
497         u32 max_sqes;
498         u16 xid;
499         int index = get_cpu();
500
501         max_sqes = BNX2FC_SCSI_MAX_SQES;
502         /*
503          * NOTE: Free list insertions and deletions are protected with
504          * cmgr lock
505          */
506         spin_lock_bh(&cmd_mgr->free_list_lock[index]);
507         free_sqes = atomic_read(&tgt->free_sqes);
508         if ((list_empty(&cmd_mgr->free_list[index])) ||
509             (tgt->num_active_ios.counter  >= max_sqes) ||
510             (free_sqes + max_sqes <= BNX2FC_SQ_WQES_MAX)) {
511                 spin_unlock_bh(&cmd_mgr->free_list_lock[index]);
512                 put_cpu();
513                 return NULL;
514         }
515
516         listp = (struct list_head *)
517                 cmd_mgr->free_list[index].next;
518         list_del_init(listp);
519         io_req = (struct bnx2fc_cmd *) listp;
520         xid = io_req->xid;
521         cmd_mgr->cmds[xid] = io_req;
522         atomic_inc(&tgt->num_active_ios);
523         atomic_dec(&tgt->free_sqes);
524         spin_unlock_bh(&cmd_mgr->free_list_lock[index]);
525         put_cpu();
526
527         INIT_LIST_HEAD(&io_req->link);
528
529         io_req->port = port;
530         io_req->cmd_mgr = cmd_mgr;
531         io_req->req_flags = 0;
532
533         /* Bind io_bdt for this io_req */
534         /* Have a static link between io_req and io_bdt_pool */
535         bd_tbl = io_req->bd_tbl = cmd_mgr->io_bdt_pool[xid];
536         bd_tbl->io_req = io_req;
537
538         /* Hold the io_req  against deletion */
539         kref_init(&io_req->refcount);
540         return io_req;
541 }
542
543 void bnx2fc_cmd_release(struct kref *ref)
544 {
545         struct bnx2fc_cmd *io_req = container_of(ref,
546                                                 struct bnx2fc_cmd, refcount);
547         struct bnx2fc_cmd_mgr *cmd_mgr = io_req->cmd_mgr;
548         int index;
549
550         if (io_req->cmd_type == BNX2FC_SCSI_CMD)
551                 index = io_req->xid % num_possible_cpus();
552         else
553                 index = RESERVE_FREE_LIST_INDEX;
554
555
556         spin_lock_bh(&cmd_mgr->free_list_lock[index]);
557         if (io_req->cmd_type != BNX2FC_SCSI_CMD)
558                 bnx2fc_free_mp_resc(io_req);
559         cmd_mgr->cmds[io_req->xid] = NULL;
560         /* Delete IO from retire queue */
561         list_del_init(&io_req->link);
562         /* Add it to the free list */
563         list_add(&io_req->link,
564                         &cmd_mgr->free_list[index]);
565         atomic_dec(&io_req->tgt->num_active_ios);
566         spin_unlock_bh(&cmd_mgr->free_list_lock[index]);
567
568 }
569
570 static void bnx2fc_free_mp_resc(struct bnx2fc_cmd *io_req)
571 {
572         struct bnx2fc_mp_req *mp_req = &(io_req->mp_req);
573         struct bnx2fc_hba *hba = io_req->port->priv;
574         size_t sz = sizeof(struct fcoe_bd_ctx);
575
576         /* clear tm flags */
577         mp_req->tm_flags = 0;
578         if (mp_req->mp_req_bd) {
579                 dma_free_coherent(&hba->pcidev->dev, sz,
580                                      mp_req->mp_req_bd,
581                                      mp_req->mp_req_bd_dma);
582                 mp_req->mp_req_bd = NULL;
583         }
584         if (mp_req->mp_resp_bd) {
585                 dma_free_coherent(&hba->pcidev->dev, sz,
586                                      mp_req->mp_resp_bd,
587                                      mp_req->mp_resp_bd_dma);
588                 mp_req->mp_resp_bd = NULL;
589         }
590         if (mp_req->req_buf) {
591                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
592                                      mp_req->req_buf,
593                                      mp_req->req_buf_dma);
594                 mp_req->req_buf = NULL;
595         }
596         if (mp_req->resp_buf) {
597                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
598                                      mp_req->resp_buf,
599                                      mp_req->resp_buf_dma);
600                 mp_req->resp_buf = NULL;
601         }
602 }
603
604 int bnx2fc_init_mp_req(struct bnx2fc_cmd *io_req)
605 {
606         struct bnx2fc_mp_req *mp_req;
607         struct fcoe_bd_ctx *mp_req_bd;
608         struct fcoe_bd_ctx *mp_resp_bd;
609         struct bnx2fc_hba *hba = io_req->port->priv;
610         dma_addr_t addr;
611         size_t sz;
612
613         mp_req = (struct bnx2fc_mp_req *)&(io_req->mp_req);
614         memset(mp_req, 0, sizeof(struct bnx2fc_mp_req));
615
616         mp_req->req_len = sizeof(struct fcp_cmnd);
617         io_req->data_xfer_len = mp_req->req_len;
618         mp_req->req_buf = dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
619                                              &mp_req->req_buf_dma,
620                                              GFP_ATOMIC);
621         if (!mp_req->req_buf) {
622                 printk(KERN_ERR PFX "unable to alloc MP req buffer\n");
623                 bnx2fc_free_mp_resc(io_req);
624                 return FAILED;
625         }
626
627         mp_req->resp_buf = dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
628                                               &mp_req->resp_buf_dma,
629                                               GFP_ATOMIC);
630         if (!mp_req->resp_buf) {
631                 printk(KERN_ERR PFX "unable to alloc TM resp buffer\n");
632                 bnx2fc_free_mp_resc(io_req);
633                 return FAILED;
634         }
635         memset(mp_req->req_buf, 0, PAGE_SIZE);
636         memset(mp_req->resp_buf, 0, PAGE_SIZE);
637
638         /* Allocate and map mp_req_bd and mp_resp_bd */
639         sz = sizeof(struct fcoe_bd_ctx);
640         mp_req->mp_req_bd = dma_alloc_coherent(&hba->pcidev->dev, sz,
641                                                  &mp_req->mp_req_bd_dma,
642                                                  GFP_ATOMIC);
643         if (!mp_req->mp_req_bd) {
644                 printk(KERN_ERR PFX "unable to alloc MP req bd\n");
645                 bnx2fc_free_mp_resc(io_req);
646                 return FAILED;
647         }
648         mp_req->mp_resp_bd = dma_alloc_coherent(&hba->pcidev->dev, sz,
649                                                  &mp_req->mp_resp_bd_dma,
650                                                  GFP_ATOMIC);
651         if (!mp_req->mp_req_bd) {
652                 printk(KERN_ERR PFX "unable to alloc MP resp bd\n");
653                 bnx2fc_free_mp_resc(io_req);
654                 return FAILED;
655         }
656         /* Fill bd table */
657         addr = mp_req->req_buf_dma;
658         mp_req_bd = mp_req->mp_req_bd;
659         mp_req_bd->buf_addr_lo = (u32)addr & 0xffffffff;
660         mp_req_bd->buf_addr_hi = (u32)((u64)addr >> 32);
661         mp_req_bd->buf_len = PAGE_SIZE;
662         mp_req_bd->flags = 0;
663
664         /*
665          * MP buffer is either a task mgmt command or an ELS.
666          * So the assumption is that it consumes a single bd
667          * entry in the bd table
668          */
669         mp_resp_bd = mp_req->mp_resp_bd;
670         addr = mp_req->resp_buf_dma;
671         mp_resp_bd->buf_addr_lo = (u32)addr & 0xffffffff;
672         mp_resp_bd->buf_addr_hi = (u32)((u64)addr >> 32);
673         mp_resp_bd->buf_len = PAGE_SIZE;
674         mp_resp_bd->flags = 0;
675
676         return SUCCESS;
677 }
678
679 static int bnx2fc_initiate_tmf(struct scsi_cmnd *sc_cmd, u8 tm_flags)
680 {
681         struct fc_lport *lport;
682         struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device));
683         struct fc_rport_libfc_priv *rp = rport->dd_data;
684         struct fcoe_port *port;
685         struct bnx2fc_hba *hba;
686         struct bnx2fc_rport *tgt;
687         struct bnx2fc_cmd *io_req;
688         struct bnx2fc_mp_req *tm_req;
689         struct fcoe_task_ctx_entry *task;
690         struct fcoe_task_ctx_entry *task_page;
691         struct Scsi_Host *host = sc_cmd->device->host;
692         struct fc_frame_header *fc_hdr;
693         struct fcp_cmnd *fcp_cmnd;
694         int task_idx, index;
695         int rc = SUCCESS;
696         u16 xid;
697         u32 sid, did;
698         unsigned long start = jiffies;
699
700         lport = shost_priv(host);
701         port = lport_priv(lport);
702         hba = port->priv;
703
704         if (rport == NULL) {
705                 printk(KERN_ALERT PFX "device_reset: rport is NULL\n");
706                 rc = FAILED;
707                 goto tmf_err;
708         }
709
710         rc = fc_block_scsi_eh(sc_cmd);
711         if (rc)
712                 return rc;
713
714         if (lport->state != LPORT_ST_READY || !(lport->link_up)) {
715                 printk(KERN_ERR PFX "device_reset: link is not ready\n");
716                 rc = FAILED;
717                 goto tmf_err;
718         }
719         /* rport and tgt are allocated together, so tgt should be non-NULL */
720         tgt = (struct bnx2fc_rport *)&rp[1];
721
722         if (!(test_bit(BNX2FC_FLAG_SESSION_READY, &tgt->flags))) {
723                 printk(KERN_ERR PFX "device_reset: tgt not offloaded\n");
724                 rc = FAILED;
725                 goto tmf_err;
726         }
727 retry_tmf:
728         io_req = bnx2fc_elstm_alloc(tgt, BNX2FC_TASK_MGMT_CMD);
729         if (!io_req) {
730                 if (time_after(jiffies, start + HZ)) {
731                         printk(KERN_ERR PFX "tmf: Failed TMF");
732                         rc = FAILED;
733                         goto tmf_err;
734                 }
735                 msleep(20);
736                 goto retry_tmf;
737         }
738         /* Initialize rest of io_req fields */
739         io_req->sc_cmd = sc_cmd;
740         io_req->port = port;
741         io_req->tgt = tgt;
742
743         tm_req = (struct bnx2fc_mp_req *)&(io_req->mp_req);
744
745         rc = bnx2fc_init_mp_req(io_req);
746         if (rc == FAILED) {
747                 printk(KERN_ERR PFX "Task mgmt MP request init failed\n");
748                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
749                 goto tmf_err;
750         }
751
752         /* Set TM flags */
753         io_req->io_req_flags = 0;
754         tm_req->tm_flags = tm_flags;
755
756         /* Fill FCP_CMND */
757         bnx2fc_build_fcp_cmnd(io_req, (struct fcp_cmnd *)tm_req->req_buf);
758         fcp_cmnd = (struct fcp_cmnd *)tm_req->req_buf;
759         memset(fcp_cmnd->fc_cdb, 0,  sc_cmd->cmd_len);
760         fcp_cmnd->fc_dl = 0;
761
762         /* Fill FC header */
763         fc_hdr = &(tm_req->req_fc_hdr);
764         sid = tgt->sid;
765         did = rport->port_id;
766         __fc_fill_fc_hdr(fc_hdr, FC_RCTL_DD_UNSOL_CMD, did, sid,
767                            FC_TYPE_FCP, FC_FC_FIRST_SEQ | FC_FC_END_SEQ |
768                            FC_FC_SEQ_INIT, 0);
769         /* Obtain exchange id */
770         xid = io_req->xid;
771
772         BNX2FC_TGT_DBG(tgt, "Initiate TMF - xid = 0x%x\n", xid);
773         task_idx = xid/BNX2FC_TASKS_PER_PAGE;
774         index = xid % BNX2FC_TASKS_PER_PAGE;
775
776         /* Initialize task context for this IO request */
777         task_page = (struct fcoe_task_ctx_entry *) hba->task_ctx[task_idx];
778         task = &(task_page[index]);
779         bnx2fc_init_mp_task(io_req, task);
780
781         sc_cmd->SCp.ptr = (char *)io_req;
782
783         /* Obtain free SQ entry */
784         spin_lock_bh(&tgt->tgt_lock);
785         bnx2fc_add_2_sq(tgt, xid);
786
787         /* Enqueue the io_req to active_tm_queue */
788         io_req->on_tmf_queue = 1;
789         list_add_tail(&io_req->link, &tgt->active_tm_queue);
790
791         init_completion(&io_req->tm_done);
792         io_req->wait_for_comp = 1;
793
794         /* Ring doorbell */
795         bnx2fc_ring_doorbell(tgt);
796         spin_unlock_bh(&tgt->tgt_lock);
797
798         rc = wait_for_completion_timeout(&io_req->tm_done,
799                                          BNX2FC_TM_TIMEOUT * HZ);
800         spin_lock_bh(&tgt->tgt_lock);
801
802         io_req->wait_for_comp = 0;
803         if (!(test_bit(BNX2FC_FLAG_TM_COMPL, &io_req->req_flags)))
804                 set_bit(BNX2FC_FLAG_TM_TIMEOUT, &io_req->req_flags);
805
806         spin_unlock_bh(&tgt->tgt_lock);
807
808         if (!rc) {
809                 printk(KERN_ERR PFX "task mgmt command failed...\n");
810                 rc = FAILED;
811         } else {
812                 printk(KERN_ERR PFX "task mgmt command success...\n");
813                 rc = SUCCESS;
814         }
815 tmf_err:
816         return rc;
817 }
818
819 int bnx2fc_initiate_abts(struct bnx2fc_cmd *io_req)
820 {
821         struct fc_lport *lport;
822         struct bnx2fc_rport *tgt = io_req->tgt;
823         struct fc_rport *rport = tgt->rport;
824         struct fc_rport_priv *rdata = tgt->rdata;
825         struct bnx2fc_hba *hba;
826         struct fcoe_port *port;
827         struct bnx2fc_cmd *abts_io_req;
828         struct fcoe_task_ctx_entry *task;
829         struct fcoe_task_ctx_entry *task_page;
830         struct fc_frame_header *fc_hdr;
831         struct bnx2fc_mp_req *abts_req;
832         int task_idx, index;
833         u32 sid, did;
834         u16 xid;
835         int rc = SUCCESS;
836         u32 r_a_tov = rdata->r_a_tov;
837
838         /* called with tgt_lock held */
839         BNX2FC_IO_DBG(io_req, "Entered bnx2fc_initiate_abts\n");
840
841         port = io_req->port;
842         hba = port->priv;
843         lport = port->lport;
844
845         if (!test_bit(BNX2FC_FLAG_SESSION_READY, &tgt->flags)) {
846                 printk(KERN_ERR PFX "initiate_abts: tgt not offloaded\n");
847                 rc = FAILED;
848                 goto abts_err;
849         }
850
851         if (rport == NULL) {
852                 printk(KERN_ALERT PFX "initiate_abts: rport is NULL\n");
853                 rc = FAILED;
854                 goto abts_err;
855         }
856
857         if (lport->state != LPORT_ST_READY || !(lport->link_up)) {
858                 printk(KERN_ERR PFX "initiate_abts: link is not ready\n");
859                 rc = FAILED;
860                 goto abts_err;
861         }
862
863         abts_io_req = bnx2fc_elstm_alloc(tgt, BNX2FC_ABTS);
864         if (!abts_io_req) {
865                 printk(KERN_ERR PFX "abts: couldnt allocate cmd\n");
866                 rc = FAILED;
867                 goto abts_err;
868         }
869
870         /* Initialize rest of io_req fields */
871         abts_io_req->sc_cmd = NULL;
872         abts_io_req->port = port;
873         abts_io_req->tgt = tgt;
874         abts_io_req->data_xfer_len = 0; /* No data transfer for ABTS */
875
876         abts_req = (struct bnx2fc_mp_req *)&(abts_io_req->mp_req);
877         memset(abts_req, 0, sizeof(struct bnx2fc_mp_req));
878
879         /* Fill FC header */
880         fc_hdr = &(abts_req->req_fc_hdr);
881
882         /* Obtain oxid and rxid for the original exchange to be aborted */
883         fc_hdr->fh_ox_id = htons(io_req->xid);
884         fc_hdr->fh_rx_id = htons(io_req->task->rxwr_txrd.var_ctx.rx_id);
885
886         sid = tgt->sid;
887         did = rport->port_id;
888
889         __fc_fill_fc_hdr(fc_hdr, FC_RCTL_BA_ABTS, did, sid,
890                            FC_TYPE_BLS, FC_FC_FIRST_SEQ | FC_FC_END_SEQ |
891                            FC_FC_SEQ_INIT, 0);
892
893         xid = abts_io_req->xid;
894         BNX2FC_IO_DBG(abts_io_req, "ABTS io_req\n");
895         task_idx = xid/BNX2FC_TASKS_PER_PAGE;
896         index = xid % BNX2FC_TASKS_PER_PAGE;
897
898         /* Initialize task context for this IO request */
899         task_page = (struct fcoe_task_ctx_entry *) hba->task_ctx[task_idx];
900         task = &(task_page[index]);
901         bnx2fc_init_mp_task(abts_io_req, task);
902
903         /*
904          * ABTS task is a temporary task that will be cleaned up
905          * irrespective of ABTS response. We need to start the timer
906          * for the original exchange, as the CQE is posted for the original
907          * IO request.
908          *
909          * Timer for ABTS is started only when it is originated by a
910          * TM request. For the ABTS issued as part of ULP timeout,
911          * scsi-ml maintains the timers.
912          */
913
914         /* if (test_bit(BNX2FC_FLAG_ISSUE_ABTS, &io_req->req_flags))*/
915         bnx2fc_cmd_timer_set(io_req, 2 * r_a_tov);
916
917         /* Obtain free SQ entry */
918         bnx2fc_add_2_sq(tgt, xid);
919
920         /* Ring doorbell */
921         bnx2fc_ring_doorbell(tgt);
922
923 abts_err:
924         return rc;
925 }
926
927 int bnx2fc_initiate_cleanup(struct bnx2fc_cmd *io_req)
928 {
929         struct fc_lport *lport;
930         struct bnx2fc_rport *tgt = io_req->tgt;
931         struct bnx2fc_hba *hba;
932         struct fcoe_port *port;
933         struct bnx2fc_cmd *cleanup_io_req;
934         struct fcoe_task_ctx_entry *task;
935         struct fcoe_task_ctx_entry *task_page;
936         int task_idx, index;
937         u16 xid, orig_xid;
938         int rc = 0;
939
940         /* ASSUMPTION: called with tgt_lock held */
941         BNX2FC_IO_DBG(io_req, "Entered bnx2fc_initiate_cleanup\n");
942
943         port = io_req->port;
944         hba = port->priv;
945         lport = port->lport;
946
947         cleanup_io_req = bnx2fc_elstm_alloc(tgt, BNX2FC_CLEANUP);
948         if (!cleanup_io_req) {
949                 printk(KERN_ERR PFX "cleanup: couldnt allocate cmd\n");
950                 rc = -1;
951                 goto cleanup_err;
952         }
953
954         /* Initialize rest of io_req fields */
955         cleanup_io_req->sc_cmd = NULL;
956         cleanup_io_req->port = port;
957         cleanup_io_req->tgt = tgt;
958         cleanup_io_req->data_xfer_len = 0; /* No data transfer for cleanup */
959
960         xid = cleanup_io_req->xid;
961
962         task_idx = xid/BNX2FC_TASKS_PER_PAGE;
963         index = xid % BNX2FC_TASKS_PER_PAGE;
964
965         /* Initialize task context for this IO request */
966         task_page = (struct fcoe_task_ctx_entry *) hba->task_ctx[task_idx];
967         task = &(task_page[index]);
968         orig_xid = io_req->xid;
969
970         BNX2FC_IO_DBG(io_req, "CLEANUP io_req xid = 0x%x\n", xid);
971
972         bnx2fc_init_cleanup_task(cleanup_io_req, task, orig_xid);
973
974         /* Obtain free SQ entry */
975         bnx2fc_add_2_sq(tgt, xid);
976
977         /* Ring doorbell */
978         bnx2fc_ring_doorbell(tgt);
979
980 cleanup_err:
981         return rc;
982 }
983
984 /**
985  * bnx2fc_eh_target_reset: Reset a target
986  *
987  * @sc_cmd:     SCSI command
988  *
989  * Set from SCSI host template to send task mgmt command to the target
990  *      and wait for the response
991  */
992 int bnx2fc_eh_target_reset(struct scsi_cmnd *sc_cmd)
993 {
994         return bnx2fc_initiate_tmf(sc_cmd, FCP_TMF_TGT_RESET);
995 }
996
997 /**
998  * bnx2fc_eh_device_reset - Reset a single LUN
999  *
1000  * @sc_cmd:     SCSI command
1001  *
1002  * Set from SCSI host template to send task mgmt command to the target
1003  *      and wait for the response
1004  */
1005 int bnx2fc_eh_device_reset(struct scsi_cmnd *sc_cmd)
1006 {
1007         return bnx2fc_initiate_tmf(sc_cmd, FCP_TMF_LUN_RESET);
1008 }
1009
1010 /**
1011  * bnx2fc_eh_abort - eh_abort_handler api to abort an outstanding
1012  *                      SCSI command
1013  *
1014  * @sc_cmd:     SCSI_ML command pointer
1015  *
1016  * SCSI abort request handler
1017  */
1018 int bnx2fc_eh_abort(struct scsi_cmnd *sc_cmd)
1019 {
1020         struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device));
1021         struct fc_rport_libfc_priv *rp = rport->dd_data;
1022         struct bnx2fc_cmd *io_req;
1023         struct fc_lport *lport;
1024         struct bnx2fc_rport *tgt;
1025         int rc = FAILED;
1026
1027
1028         rc = fc_block_scsi_eh(sc_cmd);
1029         if (rc)
1030                 return rc;
1031
1032         lport = shost_priv(sc_cmd->device->host);
1033         if ((lport->state != LPORT_ST_READY) || !(lport->link_up)) {
1034                 printk(KERN_ALERT PFX "eh_abort: link not ready\n");
1035                 return rc;
1036         }
1037
1038         tgt = (struct bnx2fc_rport *)&rp[1];
1039
1040         BNX2FC_TGT_DBG(tgt, "Entered bnx2fc_eh_abort\n");
1041
1042         spin_lock_bh(&tgt->tgt_lock);
1043         io_req = (struct bnx2fc_cmd *)sc_cmd->SCp.ptr;
1044         if (!io_req) {
1045                 /* Command might have just completed */
1046                 printk(KERN_ERR PFX "eh_abort: io_req is NULL\n");
1047                 spin_unlock_bh(&tgt->tgt_lock);
1048                 return SUCCESS;
1049         }
1050         BNX2FC_IO_DBG(io_req, "eh_abort - refcnt = %d\n",
1051                       io_req->refcount.refcount.counter);
1052
1053         /* Hold IO request across abort processing */
1054         kref_get(&io_req->refcount);
1055
1056         BUG_ON(tgt != io_req->tgt);
1057
1058         /* Remove the io_req from the active_q. */
1059         /*
1060          * Task Mgmt functions (LUN RESET & TGT RESET) will not
1061          * issue an ABTS on this particular IO req, as the
1062          * io_req is no longer in the active_q.
1063          */
1064         if (tgt->flush_in_prog) {
1065                 printk(KERN_ALERT PFX "eh_abort: io_req (xid = 0x%x) "
1066                         "flush in progress\n", io_req->xid);
1067                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1068                 spin_unlock_bh(&tgt->tgt_lock);
1069                 return SUCCESS;
1070         }
1071
1072         if (io_req->on_active_queue == 0) {
1073                 printk(KERN_ALERT PFX "eh_abort: io_req (xid = 0x%x) "
1074                                 "not on active_q\n", io_req->xid);
1075                 /*
1076                  * This condition can happen only due to the FW bug,
1077                  * where we do not receive cleanup response from
1078                  * the FW. Handle this case gracefully by erroring
1079                  * back the IO request to SCSI-ml
1080                  */
1081                 bnx2fc_scsi_done(io_req, DID_ABORT);
1082
1083                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1084                 spin_unlock_bh(&tgt->tgt_lock);
1085                 return SUCCESS;
1086         }
1087
1088         /*
1089          * Only eh_abort processing will remove the IO from
1090          * active_cmd_q before processing the request. this is
1091          * done to avoid race conditions between IOs aborted
1092          * as part of task management completion and eh_abort
1093          * processing
1094          */
1095         list_del_init(&io_req->link);
1096         io_req->on_active_queue = 0;
1097         /* Move IO req to retire queue */
1098         list_add_tail(&io_req->link, &tgt->io_retire_queue);
1099
1100         init_completion(&io_req->tm_done);
1101         io_req->wait_for_comp = 1;
1102
1103         if (!test_and_set_bit(BNX2FC_FLAG_ISSUE_ABTS, &io_req->req_flags)) {
1104                 /* Cancel the current timer running on this io_req */
1105                 if (cancel_delayed_work(&io_req->timeout_work))
1106                         kref_put(&io_req->refcount,
1107                                  bnx2fc_cmd_release); /* drop timer hold */
1108                 set_bit(BNX2FC_FLAG_EH_ABORT, &io_req->req_flags);
1109                 rc = bnx2fc_initiate_abts(io_req);
1110         } else {
1111                 printk(KERN_ALERT PFX "eh_abort: io_req (xid = 0x%x) "
1112                                 "already in abts processing\n", io_req->xid);
1113                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1114                 spin_unlock_bh(&tgt->tgt_lock);
1115                 return SUCCESS;
1116         }
1117         if (rc == FAILED) {
1118                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1119                 spin_unlock_bh(&tgt->tgt_lock);
1120                 return rc;
1121         }
1122         spin_unlock_bh(&tgt->tgt_lock);
1123
1124         wait_for_completion(&io_req->tm_done);
1125
1126         spin_lock_bh(&tgt->tgt_lock);
1127         io_req->wait_for_comp = 0;
1128         if (!(test_and_set_bit(BNX2FC_FLAG_ABTS_DONE,
1129                                     &io_req->req_flags))) {
1130                 /* Let the scsi-ml try to recover this command */
1131                 printk(KERN_ERR PFX "abort failed, xid = 0x%x\n",
1132                        io_req->xid);
1133                 rc = FAILED;
1134         } else {
1135                 /*
1136                  * We come here even when there was a race condition
1137                  * between timeout and abts completion, and abts
1138                  * completion happens just in time.
1139                  */
1140                 BNX2FC_IO_DBG(io_req, "abort succeeded\n");
1141                 rc = SUCCESS;
1142                 bnx2fc_scsi_done(io_req, DID_ABORT);
1143                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1144         }
1145
1146         /* release the reference taken in eh_abort */
1147         kref_put(&io_req->refcount, bnx2fc_cmd_release);
1148         spin_unlock_bh(&tgt->tgt_lock);
1149         return rc;
1150 }
1151
1152 void bnx2fc_process_cleanup_compl(struct bnx2fc_cmd *io_req,
1153                                   struct fcoe_task_ctx_entry *task,
1154                                   u8 num_rq)
1155 {
1156         BNX2FC_IO_DBG(io_req, "Entered process_cleanup_compl "
1157                               "refcnt = %d, cmd_type = %d\n",
1158                    io_req->refcount.refcount.counter, io_req->cmd_type);
1159         bnx2fc_scsi_done(io_req, DID_ERROR);
1160         kref_put(&io_req->refcount, bnx2fc_cmd_release);
1161 }
1162
1163 void bnx2fc_process_abts_compl(struct bnx2fc_cmd *io_req,
1164                                struct fcoe_task_ctx_entry *task,
1165                                u8 num_rq)
1166 {
1167         u32 r_ctl;
1168         u32 r_a_tov = FC_DEF_R_A_TOV;
1169         u8 issue_rrq = 0;
1170         struct bnx2fc_rport *tgt = io_req->tgt;
1171
1172         BNX2FC_IO_DBG(io_req, "Entered process_abts_compl xid = 0x%x"
1173                               "refcnt = %d, cmd_type = %d\n",
1174                    io_req->xid,
1175                    io_req->refcount.refcount.counter, io_req->cmd_type);
1176
1177         if (test_and_set_bit(BNX2FC_FLAG_ABTS_DONE,
1178                                        &io_req->req_flags)) {
1179                 BNX2FC_IO_DBG(io_req, "Timer context finished processing"
1180                                 " this io\n");
1181                 return;
1182         }
1183
1184         /* Do not issue RRQ as this IO is already cleanedup */
1185         if (test_and_set_bit(BNX2FC_FLAG_IO_CLEANUP,
1186                                 &io_req->req_flags))
1187                 goto io_compl;
1188
1189         /*
1190          * For ABTS issued due to SCSI eh_abort_handler, timeout
1191          * values are maintained by scsi-ml itself. Cancel timeout
1192          * in case ABTS issued as part of task management function
1193          * or due to FW error.
1194          */
1195         if (test_bit(BNX2FC_FLAG_ISSUE_ABTS, &io_req->req_flags))
1196                 if (cancel_delayed_work(&io_req->timeout_work))
1197                         kref_put(&io_req->refcount,
1198                                  bnx2fc_cmd_release); /* drop timer hold */
1199
1200         r_ctl = (u8)task->rxwr_only.union_ctx.comp_info.abts_rsp.r_ctl;
1201
1202         switch (r_ctl) {
1203         case FC_RCTL_BA_ACC:
1204                 /*
1205                  * Dont release this cmd yet. It will be relesed
1206                  * after we get RRQ response
1207                  */
1208                 BNX2FC_IO_DBG(io_req, "ABTS response - ACC Send RRQ\n");
1209                 issue_rrq = 1;
1210                 break;
1211
1212         case FC_RCTL_BA_RJT:
1213                 BNX2FC_IO_DBG(io_req, "ABTS response - RJT\n");
1214                 break;
1215         default:
1216                 printk(KERN_ERR PFX "Unknown ABTS response\n");
1217                 break;
1218         }
1219
1220         if (issue_rrq) {
1221                 BNX2FC_IO_DBG(io_req, "Issue RRQ after R_A_TOV\n");
1222                 set_bit(BNX2FC_FLAG_ISSUE_RRQ, &io_req->req_flags);
1223         }
1224         set_bit(BNX2FC_FLAG_RETIRE_OXID, &io_req->req_flags);
1225         bnx2fc_cmd_timer_set(io_req, r_a_tov);
1226
1227 io_compl:
1228         if (io_req->wait_for_comp) {
1229                 if (test_and_clear_bit(BNX2FC_FLAG_EH_ABORT,
1230                                        &io_req->req_flags))
1231                         complete(&io_req->tm_done);
1232         } else {
1233                 /*
1234                  * We end up here when ABTS is issued as
1235                  * in asynchronous context, i.e., as part
1236                  * of task management completion, or
1237                  * when FW error is received or when the
1238                  * ABTS is issued when the IO is timed
1239                  * out.
1240                  */
1241
1242                 if (io_req->on_active_queue) {
1243                         list_del_init(&io_req->link);
1244                         io_req->on_active_queue = 0;
1245                         /* Move IO req to retire queue */
1246                         list_add_tail(&io_req->link, &tgt->io_retire_queue);
1247                 }
1248                 bnx2fc_scsi_done(io_req, DID_ERROR);
1249                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1250         }
1251 }
1252
1253 static void bnx2fc_lun_reset_cmpl(struct bnx2fc_cmd *io_req)
1254 {
1255         struct scsi_cmnd *sc_cmd = io_req->sc_cmd;
1256         struct bnx2fc_rport *tgt = io_req->tgt;
1257         struct list_head *list;
1258         struct list_head *tmp;
1259         struct bnx2fc_cmd *cmd;
1260         int tm_lun = sc_cmd->device->lun;
1261         int rc = 0;
1262         int lun;
1263
1264         /* called with tgt_lock held */
1265         BNX2FC_IO_DBG(io_req, "Entered bnx2fc_lun_reset_cmpl\n");
1266         /*
1267          * Walk thru the active_ios queue and ABORT the IO
1268          * that matches with the LUN that was reset
1269          */
1270         list_for_each_safe(list, tmp, &tgt->active_cmd_queue) {
1271                 BNX2FC_TGT_DBG(tgt, "LUN RST cmpl: scan for pending IOs\n");
1272                 cmd = (struct bnx2fc_cmd *)list;
1273                 lun = cmd->sc_cmd->device->lun;
1274                 if (lun == tm_lun) {
1275                         /* Initiate ABTS on this cmd */
1276                         if (!test_and_set_bit(BNX2FC_FLAG_ISSUE_ABTS,
1277                                               &cmd->req_flags)) {
1278                                 /* cancel the IO timeout */
1279                                 if (cancel_delayed_work(&io_req->timeout_work))
1280                                         kref_put(&io_req->refcount,
1281                                                  bnx2fc_cmd_release);
1282                                                         /* timer hold */
1283                                 rc = bnx2fc_initiate_abts(cmd);
1284                                 /* abts shouldn't fail in this context */
1285                                 WARN_ON(rc != SUCCESS);
1286                         } else
1287                                 printk(KERN_ERR PFX "lun_rst: abts already in"
1288                                         " progress for this IO 0x%x\n",
1289                                         cmd->xid);
1290                 }
1291         }
1292 }
1293
1294 static void bnx2fc_tgt_reset_cmpl(struct bnx2fc_cmd *io_req)
1295 {
1296         struct bnx2fc_rport *tgt = io_req->tgt;
1297         struct list_head *list;
1298         struct list_head *tmp;
1299         struct bnx2fc_cmd *cmd;
1300         int rc = 0;
1301
1302         /* called with tgt_lock held */
1303         BNX2FC_IO_DBG(io_req, "Entered bnx2fc_tgt_reset_cmpl\n");
1304         /*
1305          * Walk thru the active_ios queue and ABORT the IO
1306          * that matches with the LUN that was reset
1307          */
1308         list_for_each_safe(list, tmp, &tgt->active_cmd_queue) {
1309                 BNX2FC_TGT_DBG(tgt, "TGT RST cmpl: scan for pending IOs\n");
1310                 cmd = (struct bnx2fc_cmd *)list;
1311                 /* Initiate ABTS */
1312                 if (!test_and_set_bit(BNX2FC_FLAG_ISSUE_ABTS,
1313                                                         &cmd->req_flags)) {
1314                         /* cancel the IO timeout */
1315                         if (cancel_delayed_work(&io_req->timeout_work))
1316                                 kref_put(&io_req->refcount,
1317                                          bnx2fc_cmd_release); /* timer hold */
1318                         rc = bnx2fc_initiate_abts(cmd);
1319                         /* abts shouldn't fail in this context */
1320                         WARN_ON(rc != SUCCESS);
1321
1322                 } else
1323                         printk(KERN_ERR PFX "tgt_rst: abts already in progress"
1324                                 " for this IO 0x%x\n", cmd->xid);
1325         }
1326 }
1327
1328 void bnx2fc_process_tm_compl(struct bnx2fc_cmd *io_req,
1329                              struct fcoe_task_ctx_entry *task, u8 num_rq)
1330 {
1331         struct bnx2fc_mp_req *tm_req;
1332         struct fc_frame_header *fc_hdr;
1333         struct scsi_cmnd *sc_cmd = io_req->sc_cmd;
1334         u64 *hdr;
1335         u64 *temp_hdr;
1336         void *rsp_buf;
1337
1338         /* Called with tgt_lock held */
1339         BNX2FC_IO_DBG(io_req, "Entered process_tm_compl\n");
1340
1341         if (!(test_bit(BNX2FC_FLAG_TM_TIMEOUT, &io_req->req_flags)))
1342                 set_bit(BNX2FC_FLAG_TM_COMPL, &io_req->req_flags);
1343         else {
1344                 /* TM has already timed out and we got
1345                  * delayed completion. Ignore completion
1346                  * processing.
1347                  */
1348                 return;
1349         }
1350
1351         tm_req = &(io_req->mp_req);
1352         fc_hdr = &(tm_req->resp_fc_hdr);
1353         hdr = (u64 *)fc_hdr;
1354         temp_hdr = (u64 *)
1355                 &task->rxwr_only.union_ctx.comp_info.mp_rsp.fc_hdr;
1356         hdr[0] = cpu_to_be64(temp_hdr[0]);
1357         hdr[1] = cpu_to_be64(temp_hdr[1]);
1358         hdr[2] = cpu_to_be64(temp_hdr[2]);
1359
1360         tm_req->resp_len =
1361                 task->rxwr_only.union_ctx.comp_info.mp_rsp.mp_payload_len;
1362
1363         rsp_buf = tm_req->resp_buf;
1364
1365         if (fc_hdr->fh_r_ctl == FC_RCTL_DD_CMD_STATUS) {
1366                 bnx2fc_parse_fcp_rsp(io_req,
1367                                      (struct fcoe_fcp_rsp_payload *)
1368                                      rsp_buf, num_rq);
1369                 if (io_req->fcp_rsp_code == 0) {
1370                         /* TM successful */
1371                         if (tm_req->tm_flags & FCP_TMF_LUN_RESET)
1372                                 bnx2fc_lun_reset_cmpl(io_req);
1373                         else if (tm_req->tm_flags & FCP_TMF_TGT_RESET)
1374                                 bnx2fc_tgt_reset_cmpl(io_req);
1375                 }
1376         } else {
1377                 printk(KERN_ERR PFX "tmf's fc_hdr r_ctl = 0x%x\n",
1378                         fc_hdr->fh_r_ctl);
1379         }
1380         if (!sc_cmd->SCp.ptr) {
1381                 printk(KERN_ALERT PFX "tm_compl: SCp.ptr is NULL\n");
1382                 return;
1383         }
1384         switch (io_req->fcp_status) {
1385         case FC_GOOD:
1386                 if (io_req->cdb_status == 0) {
1387                         /* Good IO completion */
1388                         sc_cmd->result = DID_OK << 16;
1389                 } else {
1390                         /* Transport status is good, SCSI status not good */
1391                         sc_cmd->result = (DID_OK << 16) | io_req->cdb_status;
1392                 }
1393                 if (io_req->fcp_resid)
1394                         scsi_set_resid(sc_cmd, io_req->fcp_resid);
1395                 break;
1396
1397         default:
1398                 BNX2FC_IO_DBG(io_req, "process_tm_compl: fcp_status = %d\n",
1399                            io_req->fcp_status);
1400                 break;
1401         }
1402
1403         sc_cmd = io_req->sc_cmd;
1404         io_req->sc_cmd = NULL;
1405
1406         /* check if the io_req exists in tgt's tmf_q */
1407         if (io_req->on_tmf_queue) {
1408
1409                 list_del_init(&io_req->link);
1410                 io_req->on_tmf_queue = 0;
1411         } else {
1412
1413                 printk(KERN_ALERT PFX "Command not on active_cmd_queue!\n");
1414                 return;
1415         }
1416
1417         sc_cmd->SCp.ptr = NULL;
1418         sc_cmd->scsi_done(sc_cmd);
1419
1420         kref_put(&io_req->refcount, bnx2fc_cmd_release);
1421         if (io_req->wait_for_comp) {
1422                 BNX2FC_IO_DBG(io_req, "tm_compl - wake up the waiter\n");
1423                 complete(&io_req->tm_done);
1424         }
1425 }
1426
1427 static int bnx2fc_split_bd(struct bnx2fc_cmd *io_req, u64 addr, int sg_len,
1428                            int bd_index)
1429 {
1430         struct fcoe_bd_ctx *bd = io_req->bd_tbl->bd_tbl;
1431         int frag_size, sg_frags;
1432
1433         sg_frags = 0;
1434         while (sg_len) {
1435                 if (sg_len >= BNX2FC_BD_SPLIT_SZ)
1436                         frag_size = BNX2FC_BD_SPLIT_SZ;
1437                 else
1438                         frag_size = sg_len;
1439                 bd[bd_index + sg_frags].buf_addr_lo = addr & 0xffffffff;
1440                 bd[bd_index + sg_frags].buf_addr_hi  = addr >> 32;
1441                 bd[bd_index + sg_frags].buf_len = (u16)frag_size;
1442                 bd[bd_index + sg_frags].flags = 0;
1443
1444                 addr += (u64) frag_size;
1445                 sg_frags++;
1446                 sg_len -= frag_size;
1447         }
1448         return sg_frags;
1449
1450 }
1451
1452 static int bnx2fc_map_sg(struct bnx2fc_cmd *io_req)
1453 {
1454         struct scsi_cmnd *sc = io_req->sc_cmd;
1455         struct fcoe_bd_ctx *bd = io_req->bd_tbl->bd_tbl;
1456         struct scatterlist *sg;
1457         int byte_count = 0;
1458         int sg_count = 0;
1459         int bd_count = 0;
1460         int sg_frags;
1461         unsigned int sg_len;
1462         u64 addr;
1463         int i;
1464
1465         sg_count = scsi_dma_map(sc);
1466         scsi_for_each_sg(sc, sg, sg_count, i) {
1467                 sg_len = sg_dma_len(sg);
1468                 addr = sg_dma_address(sg);
1469                 if (sg_len > BNX2FC_MAX_BD_LEN) {
1470                         sg_frags = bnx2fc_split_bd(io_req, addr, sg_len,
1471                                                    bd_count);
1472                 } else {
1473
1474                         sg_frags = 1;
1475                         bd[bd_count].buf_addr_lo = addr & 0xffffffff;
1476                         bd[bd_count].buf_addr_hi  = addr >> 32;
1477                         bd[bd_count].buf_len = (u16)sg_len;
1478                         bd[bd_count].flags = 0;
1479                 }
1480                 bd_count += sg_frags;
1481                 byte_count += sg_len;
1482         }
1483         if (byte_count != scsi_bufflen(sc))
1484                 printk(KERN_ERR PFX "byte_count = %d != scsi_bufflen = %d, "
1485                         "task_id = 0x%x\n", byte_count, scsi_bufflen(sc),
1486                         io_req->xid);
1487         return bd_count;
1488 }
1489
1490 static void bnx2fc_build_bd_list_from_sg(struct bnx2fc_cmd *io_req)
1491 {
1492         struct scsi_cmnd *sc = io_req->sc_cmd;
1493         struct fcoe_bd_ctx *bd = io_req->bd_tbl->bd_tbl;
1494         int bd_count;
1495
1496         if (scsi_sg_count(sc))
1497                 bd_count = bnx2fc_map_sg(io_req);
1498         else {
1499                 bd_count = 0;
1500                 bd[0].buf_addr_lo = bd[0].buf_addr_hi = 0;
1501                 bd[0].buf_len = bd[0].flags = 0;
1502         }
1503         io_req->bd_tbl->bd_valid = bd_count;
1504 }
1505
1506 static void bnx2fc_unmap_sg_list(struct bnx2fc_cmd *io_req)
1507 {
1508         struct scsi_cmnd *sc = io_req->sc_cmd;
1509
1510         if (io_req->bd_tbl->bd_valid && sc) {
1511                 scsi_dma_unmap(sc);
1512                 io_req->bd_tbl->bd_valid = 0;
1513         }
1514 }
1515
1516 void bnx2fc_build_fcp_cmnd(struct bnx2fc_cmd *io_req,
1517                                   struct fcp_cmnd *fcp_cmnd)
1518 {
1519         struct scsi_cmnd *sc_cmd = io_req->sc_cmd;
1520         char tag[2];
1521
1522         memset(fcp_cmnd, 0, sizeof(struct fcp_cmnd));
1523
1524         int_to_scsilun(sc_cmd->device->lun,
1525                         (struct scsi_lun *) fcp_cmnd->fc_lun);
1526
1527
1528         fcp_cmnd->fc_dl = htonl(io_req->data_xfer_len);
1529         memcpy(fcp_cmnd->fc_cdb, sc_cmd->cmnd, sc_cmd->cmd_len);
1530
1531         fcp_cmnd->fc_cmdref = 0;
1532         fcp_cmnd->fc_pri_ta = 0;
1533         fcp_cmnd->fc_tm_flags = io_req->mp_req.tm_flags;
1534         fcp_cmnd->fc_flags = io_req->io_req_flags;
1535
1536         if (scsi_populate_tag_msg(sc_cmd, tag)) {
1537                 switch (tag[0]) {
1538                 case HEAD_OF_QUEUE_TAG:
1539                         fcp_cmnd->fc_pri_ta = FCP_PTA_HEADQ;
1540                         break;
1541                 case ORDERED_QUEUE_TAG:
1542                         fcp_cmnd->fc_pri_ta = FCP_PTA_ORDERED;
1543                         break;
1544                 default:
1545                         fcp_cmnd->fc_pri_ta = FCP_PTA_SIMPLE;
1546                         break;
1547                 }
1548         } else {
1549                 fcp_cmnd->fc_pri_ta = 0;
1550         }
1551 }
1552
1553 static void bnx2fc_parse_fcp_rsp(struct bnx2fc_cmd *io_req,
1554                                  struct fcoe_fcp_rsp_payload *fcp_rsp,
1555                                  u8 num_rq)
1556 {
1557         struct scsi_cmnd *sc_cmd = io_req->sc_cmd;
1558         struct bnx2fc_rport *tgt = io_req->tgt;
1559         u8 rsp_flags = fcp_rsp->fcp_flags.flags;
1560         u32 rq_buff_len = 0;
1561         int i;
1562         unsigned char *rq_data;
1563         unsigned char *dummy;
1564         int fcp_sns_len = 0;
1565         int fcp_rsp_len = 0;
1566
1567         io_req->fcp_status = FC_GOOD;
1568         io_req->fcp_resid = fcp_rsp->fcp_resid;
1569
1570         io_req->scsi_comp_flags = rsp_flags;
1571         CMD_SCSI_STATUS(sc_cmd) = io_req->cdb_status =
1572                                 fcp_rsp->scsi_status_code;
1573
1574         /* Fetch fcp_rsp_info and fcp_sns_info if available */
1575         if (num_rq) {
1576
1577                 /*
1578                  * We do not anticipate num_rq >1, as the linux defined
1579                  * SCSI_SENSE_BUFFERSIZE is 96 bytes + 8 bytes of FCP_RSP_INFO
1580                  * 256 bytes of single rq buffer is good enough to hold this.
1581                  */
1582
1583                 if (rsp_flags &
1584                     FCOE_FCP_RSP_FLAGS_FCP_RSP_LEN_VALID) {
1585                         fcp_rsp_len = rq_buff_len
1586                                         = fcp_rsp->fcp_rsp_len;
1587                 }
1588
1589                 if (rsp_flags &
1590                     FCOE_FCP_RSP_FLAGS_FCP_SNS_LEN_VALID) {
1591                         fcp_sns_len = fcp_rsp->fcp_sns_len;
1592                         rq_buff_len += fcp_rsp->fcp_sns_len;
1593                 }
1594
1595                 io_req->fcp_rsp_len = fcp_rsp_len;
1596                 io_req->fcp_sns_len = fcp_sns_len;
1597
1598                 if (rq_buff_len > num_rq * BNX2FC_RQ_BUF_SZ) {
1599                         /* Invalid sense sense length. */
1600                         printk(KERN_ALERT PFX "invalid sns length %d\n",
1601                                 rq_buff_len);
1602                         /* reset rq_buff_len */
1603                         rq_buff_len =  num_rq * BNX2FC_RQ_BUF_SZ;
1604                 }
1605
1606                 rq_data = bnx2fc_get_next_rqe(tgt, 1);
1607
1608                 if (num_rq > 1) {
1609                         /* We do not need extra sense data */
1610                         for (i = 1; i < num_rq; i++)
1611                                 dummy = bnx2fc_get_next_rqe(tgt, 1);
1612                 }
1613
1614                 /* fetch fcp_rsp_code */
1615                 if ((fcp_rsp_len == 4) || (fcp_rsp_len == 8)) {
1616                         /* Only for task management function */
1617                         io_req->fcp_rsp_code = rq_data[3];
1618                         printk(KERN_ERR PFX "fcp_rsp_code = %d\n",
1619                                 io_req->fcp_rsp_code);
1620                 }
1621
1622                 /* fetch sense data */
1623                 rq_data += fcp_rsp_len;
1624
1625                 if (fcp_sns_len > SCSI_SENSE_BUFFERSIZE) {
1626                         printk(KERN_ERR PFX "Truncating sense buffer\n");
1627                         fcp_sns_len = SCSI_SENSE_BUFFERSIZE;
1628                 }
1629
1630                 memset(sc_cmd->sense_buffer, 0, sizeof(sc_cmd->sense_buffer));
1631                 if (fcp_sns_len)
1632                         memcpy(sc_cmd->sense_buffer, rq_data, fcp_sns_len);
1633
1634                 /* return RQ entries */
1635                 for (i = 0; i < num_rq; i++)
1636                         bnx2fc_return_rqe(tgt, 1);
1637         }
1638 }
1639
1640 /**
1641  * bnx2fc_queuecommand - Queuecommand function of the scsi template
1642  *
1643  * @host:       The Scsi_Host the command was issued to
1644  * @sc_cmd:     struct scsi_cmnd to be executed
1645  *
1646  * This is the IO strategy routine, called by SCSI-ML
1647  **/
1648 int bnx2fc_queuecommand(struct Scsi_Host *host,
1649                         struct scsi_cmnd *sc_cmd)
1650 {
1651         struct fc_lport *lport = shost_priv(host);
1652         struct fc_rport *rport = starget_to_rport(scsi_target(sc_cmd->device));
1653         struct fc_rport_libfc_priv *rp = rport->dd_data;
1654         struct bnx2fc_rport *tgt;
1655         struct bnx2fc_cmd *io_req;
1656         int rc = 0;
1657         int rval;
1658
1659         rval = fc_remote_port_chkready(rport);
1660         if (rval) {
1661                 sc_cmd->result = rval;
1662                 sc_cmd->scsi_done(sc_cmd);
1663                 return 0;
1664         }
1665
1666         if ((lport->state != LPORT_ST_READY) || !(lport->link_up)) {
1667                 rc = SCSI_MLQUEUE_HOST_BUSY;
1668                 goto exit_qcmd;
1669         }
1670
1671         /* rport and tgt are allocated together, so tgt should be non-NULL */
1672         tgt = (struct bnx2fc_rport *)&rp[1];
1673
1674         if (!test_bit(BNX2FC_FLAG_SESSION_READY, &tgt->flags)) {
1675                 if (test_bit(BNX2FC_FLAG_UPLD_REQ_COMPL, &tgt->flags))  {
1676                         sc_cmd->result = DID_NO_CONNECT << 16;
1677                         sc_cmd->scsi_done(sc_cmd);
1678                         return 0;
1679
1680                 }
1681                 /*
1682                  * Session is not offloaded yet. Let SCSI-ml retry
1683                  * the command.
1684                  */
1685                 rc = SCSI_MLQUEUE_TARGET_BUSY;
1686                 goto exit_qcmd;
1687         }
1688
1689         io_req = bnx2fc_cmd_alloc(tgt);
1690         if (!io_req) {
1691                 rc = SCSI_MLQUEUE_HOST_BUSY;
1692                 goto exit_qcmd;
1693         }
1694         io_req->sc_cmd = sc_cmd;
1695
1696         if (bnx2fc_post_io_req(tgt, io_req)) {
1697                 printk(KERN_ERR PFX "Unable to post io_req\n");
1698                 rc = SCSI_MLQUEUE_HOST_BUSY;
1699                 goto exit_qcmd;
1700         }
1701 exit_qcmd:
1702         return rc;
1703 }
1704
1705 void bnx2fc_process_scsi_cmd_compl(struct bnx2fc_cmd *io_req,
1706                                    struct fcoe_task_ctx_entry *task,
1707                                    u8 num_rq)
1708 {
1709         struct fcoe_fcp_rsp_payload *fcp_rsp;
1710         struct bnx2fc_rport *tgt = io_req->tgt;
1711         struct scsi_cmnd *sc_cmd;
1712         struct Scsi_Host *host;
1713
1714
1715         /* scsi_cmd_cmpl is called with tgt lock held */
1716
1717         if (test_and_set_bit(BNX2FC_FLAG_IO_COMPL, &io_req->req_flags)) {
1718                 /* we will not receive ABTS response for this IO */
1719                 BNX2FC_IO_DBG(io_req, "Timer context finished processing "
1720                            "this scsi cmd\n");
1721         }
1722
1723         /* Cancel the timeout_work, as we received IO completion */
1724         if (cancel_delayed_work(&io_req->timeout_work))
1725                 kref_put(&io_req->refcount,
1726                          bnx2fc_cmd_release); /* drop timer hold */
1727
1728         sc_cmd = io_req->sc_cmd;
1729         if (sc_cmd == NULL) {
1730                 printk(KERN_ERR PFX "scsi_cmd_compl - sc_cmd is NULL\n");
1731                 return;
1732         }
1733
1734         /* Fetch fcp_rsp from task context and perform cmd completion */
1735         fcp_rsp = (struct fcoe_fcp_rsp_payload *)
1736                    &(task->rxwr_only.union_ctx.comp_info.fcp_rsp.payload);
1737
1738         /* parse fcp_rsp and obtain sense data from RQ if available */
1739         bnx2fc_parse_fcp_rsp(io_req, fcp_rsp, num_rq);
1740
1741         host = sc_cmd->device->host;
1742         if (!sc_cmd->SCp.ptr) {
1743                 printk(KERN_ERR PFX "SCp.ptr is NULL\n");
1744                 return;
1745         }
1746
1747         if (io_req->on_active_queue) {
1748                 list_del_init(&io_req->link);
1749                 io_req->on_active_queue = 0;
1750                 /* Move IO req to retire queue */
1751                 list_add_tail(&io_req->link, &tgt->io_retire_queue);
1752         } else {
1753                 /* This should not happen, but could have been pulled
1754                  * by bnx2fc_flush_active_ios(), or during a race
1755                  * between command abort and (late) completion.
1756                  */
1757                 BNX2FC_IO_DBG(io_req, "xid not on active_cmd_queue\n");
1758                 if (io_req->wait_for_comp)
1759                         if (test_and_clear_bit(BNX2FC_FLAG_EH_ABORT,
1760                                                &io_req->req_flags))
1761                                 complete(&io_req->tm_done);
1762         }
1763
1764         bnx2fc_unmap_sg_list(io_req);
1765         io_req->sc_cmd = NULL;
1766
1767         switch (io_req->fcp_status) {
1768         case FC_GOOD:
1769                 if (io_req->cdb_status == 0) {
1770                         /* Good IO completion */
1771                         sc_cmd->result = DID_OK << 16;
1772                 } else {
1773                         /* Transport status is good, SCSI status not good */
1774                         BNX2FC_IO_DBG(io_req, "scsi_cmpl: cdb_status = %d"
1775                                  " fcp_resid = 0x%x\n",
1776                                 io_req->cdb_status, io_req->fcp_resid);
1777                         sc_cmd->result = (DID_OK << 16) | io_req->cdb_status;
1778                 }
1779                 if (io_req->fcp_resid)
1780                         scsi_set_resid(sc_cmd, io_req->fcp_resid);
1781                 break;
1782         default:
1783                 printk(KERN_ALERT PFX "scsi_cmd_compl: fcp_status = %d\n",
1784                         io_req->fcp_status);
1785                 break;
1786         }
1787         sc_cmd->SCp.ptr = NULL;
1788         sc_cmd->scsi_done(sc_cmd);
1789         kref_put(&io_req->refcount, bnx2fc_cmd_release);
1790 }
1791
1792 static int bnx2fc_post_io_req(struct bnx2fc_rport *tgt,
1793                                struct bnx2fc_cmd *io_req)
1794 {
1795         struct fcoe_task_ctx_entry *task;
1796         struct fcoe_task_ctx_entry *task_page;
1797         struct scsi_cmnd *sc_cmd = io_req->sc_cmd;
1798         struct fcoe_port *port = tgt->port;
1799         struct bnx2fc_hba *hba = port->priv;
1800         struct fc_lport *lport = port->lport;
1801         struct fcoe_dev_stats *stats;
1802         int task_idx, index;
1803         u16 xid;
1804
1805         /* Initialize rest of io_req fields */
1806         io_req->cmd_type = BNX2FC_SCSI_CMD;
1807         io_req->port = port;
1808         io_req->tgt = tgt;
1809         io_req->data_xfer_len = scsi_bufflen(sc_cmd);
1810         sc_cmd->SCp.ptr = (char *)io_req;
1811
1812         stats = per_cpu_ptr(lport->dev_stats, get_cpu());
1813         if (sc_cmd->sc_data_direction == DMA_FROM_DEVICE) {
1814                 io_req->io_req_flags = BNX2FC_READ;
1815                 stats->InputRequests++;
1816                 stats->InputBytes += io_req->data_xfer_len;
1817         } else if (sc_cmd->sc_data_direction == DMA_TO_DEVICE) {
1818                 io_req->io_req_flags = BNX2FC_WRITE;
1819                 stats->OutputRequests++;
1820                 stats->OutputBytes += io_req->data_xfer_len;
1821         } else {
1822                 io_req->io_req_flags = 0;
1823                 stats->ControlRequests++;
1824         }
1825         put_cpu();
1826
1827         xid = io_req->xid;
1828
1829         /* Build buffer descriptor list for firmware from sg list */
1830         bnx2fc_build_bd_list_from_sg(io_req);
1831
1832         task_idx = xid / BNX2FC_TASKS_PER_PAGE;
1833         index = xid % BNX2FC_TASKS_PER_PAGE;
1834
1835         /* Initialize task context for this IO request */
1836         task_page = (struct fcoe_task_ctx_entry *) hba->task_ctx[task_idx];
1837         task = &(task_page[index]);
1838         bnx2fc_init_task(io_req, task);
1839
1840         spin_lock_bh(&tgt->tgt_lock);
1841
1842         if (tgt->flush_in_prog) {
1843                 printk(KERN_ERR PFX "Flush in progress..Host Busy\n");
1844                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1845                 spin_unlock_bh(&tgt->tgt_lock);
1846                 return -EAGAIN;
1847         }
1848
1849         if (!test_bit(BNX2FC_FLAG_SESSION_READY, &tgt->flags)) {
1850                 printk(KERN_ERR PFX "Session not ready...post_io\n");
1851                 kref_put(&io_req->refcount, bnx2fc_cmd_release);
1852                 spin_unlock_bh(&tgt->tgt_lock);
1853                 return -EAGAIN;
1854         }
1855
1856         /* Time IO req */
1857         bnx2fc_cmd_timer_set(io_req, BNX2FC_IO_TIMEOUT);
1858         /* Obtain free SQ entry */
1859         bnx2fc_add_2_sq(tgt, xid);
1860
1861         /* Enqueue the io_req to active_cmd_queue */
1862
1863         io_req->on_active_queue = 1;
1864         /* move io_req from pending_queue to active_queue */
1865         list_add_tail(&io_req->link, &tgt->active_cmd_queue);
1866
1867         /* Ring doorbell */
1868         bnx2fc_ring_doorbell(tgt);
1869         spin_unlock_bh(&tgt->tgt_lock);
1870         return 0;
1871 }