drivers/scsi/qla2xxx/qla_target.c

   1 /*
   2  *  qla_target.c SCSI LLD infrastructure for QLogic 22xx/23xx/24xx/25xx
   3  *
   4  *  based on qla2x00t.c code:
   5  *
   6  *  Copyright (C) 2004 - 2010 Vladislav Bolkhovitin <vst@vlnb.net>
   7  *  Copyright (C) 2004 - 2005 Leonid Stoljar
   8  *  Copyright (C) 2006 Nathaniel Clark <nate@misrule.us>
   9  *  Copyright (C) 2006 - 2010 ID7 Ltd.
  10  *
  11  *  Forward port and refactoring to modern qla2xxx and target/configfs
  12  *
  13  *  Copyright (C) 2010-2013 Nicholas A. Bellinger <nab@kernel.org>
  14  *
  15  *  This program is free software; you can redistribute it and/or
  16  *  modify it under the terms of the GNU General Public License
  17  *  as published by the Free Software Foundation, version 2
  18  *  of the License.
  19  *
  20  *  This program is distributed in the hope that it will be useful,
  21  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  22  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  23  *  GNU General Public License for more details.
  24  */
  25
  26 #include <linux/module.h>
  27 #include <linux/init.h>
  28 #include <linux/types.h>
  29 #include <linux/blkdev.h>
  30 #include <linux/interrupt.h>
  31 #include <linux/pci.h>
  32 #include <linux/delay.h>
  33 #include <linux/list.h>
  34 #include <linux/workqueue.h>
  35 #include <asm/unaligned.h>
  36 #include <scsi/scsi.h>
  37 #include <scsi/scsi_host.h>
  38 #include <scsi/scsi_tcq.h>
  39 #include <target/target_core_base.h>
  40 #include <target/target_core_fabric.h>
  41
  42 #include "qla_def.h"
  43 #include "qla_target.h"
  44
  45 static char *qlini_mode = QLA2XXX_INI_MODE_STR_ENABLED;
  46 module_param(qlini_mode, charp, S_IRUGO);
  47 MODULE_PARM_DESC(qlini_mode,
  48         "Determines when initiator mode will be enabled. Possible values: "
  49         "\"exclusive\" - initiator mode will be enabled on load, "
  50         "disabled on enabling target mode and then on disabling target mode "
  51         "enabled back; "
  52         "\"disabled\" - initiator mode will never be enabled; "
  53         "\"enabled\" (default) - initiator mode will always stay enabled.");
  54
  55 int ql2x_ini_mode = QLA2XXX_INI_MODE_EXCLUSIVE;
  56
  57 /*
  58  * From scsi/fc/fc_fcp.h
  59  */
  60 enum fcp_resp_rsp_codes {
  61         FCP_TMF_CMPL = 0,
  62         FCP_DATA_LEN_INVALID = 1,
  63         FCP_CMND_FIELDS_INVALID = 2,
  64         FCP_DATA_PARAM_MISMATCH = 3,
  65         FCP_TMF_REJECTED = 4,
  66         FCP_TMF_FAILED = 5,
  67         FCP_TMF_INVALID_LUN = 9,
  68 };
  69
  70 /*
  71  * fc_pri_ta from scsi/fc/fc_fcp.h
  72  */
  73 #define FCP_PTA_SIMPLE      0   /* simple task attribute */
  74 #define FCP_PTA_HEADQ       1   /* head of queue task attribute */
  75 #define FCP_PTA_ORDERED     2   /* ordered task attribute */
  76 #define FCP_PTA_ACA         4   /* auto. contingent allegiance */
  77 #define FCP_PTA_MASK        7   /* mask for task attribute field */
  78 #define FCP_PRI_SHIFT       3   /* priority field starts in bit 3 */
  79 #define FCP_PRI_RESVD_MASK  0x80        /* reserved bits in priority field */
  80
  81 /*
  82  * This driver calls qla2x00_alloc_iocbs() and qla2x00_issue_marker(), which
  83  * must be called under HW lock and could unlock/lock it inside.
  84  * It isn't an issue, since in the current implementation on the time when
  85  * those functions are called:
  86  *
  87  *   - Either context is IRQ and only IRQ handler can modify HW data,
  88  *     including rings related fields,
  89  *
  90  *   - Or access to target mode variables from struct qla_tgt doesn't
  91  *     cross those functions boundaries, except tgt_stop, which
  92  *     additionally protected by irq_cmd_count.
  93  */
  94 /* Predefs for callbacks handed to qla2xxx LLD */
  95 static void qlt_24xx_atio_pkt(struct scsi_qla_host *ha,
  96         struct atio_from_isp *pkt);
  97 static void qlt_response_pkt(struct scsi_qla_host *ha, response_t *pkt);
  98 static int qlt_issue_task_mgmt(struct qla_tgt_sess *sess, uint32_t lun,
  99         int fn, void *iocb, int flags);
 100 static void qlt_send_term_exchange(struct scsi_qla_host *ha, struct qla_tgt_cmd
 101         *cmd, struct atio_from_isp *atio, int ha_locked);
 102 static void qlt_reject_free_srr_imm(struct scsi_qla_host *ha,
 103         struct qla_tgt_srr_imm *imm, int ha_lock);
 104 /*
 105  * Global Variables
 106  */
 107 static struct kmem_cache *qla_tgt_mgmt_cmd_cachep;
 108 static mempool_t *qla_tgt_mgmt_cmd_mempool;
 109 static struct workqueue_struct *qla_tgt_wq;
 110 static DEFINE_MUTEX(qla_tgt_mutex);
 111 static LIST_HEAD(qla_tgt_glist);
 112
 113 /* ha->hardware_lock supposed to be held on entry (to protect tgt->sess_list) */
 114 static struct qla_tgt_sess *qlt_find_sess_by_port_name(
 115         struct qla_tgt *tgt,
 116         const uint8_t *port_name)
 117 {
 118         struct qla_tgt_sess *sess;
 119
 120         list_for_each_entry(sess, &tgt->sess_list, sess_list_entry) {
 121                 if (!memcmp(sess->port_name, port_name, WWN_SIZE))
 122                         return sess;
 123         }
 124
 125         return NULL;
 126 }
 127
 128 /* Might release hw lock, then reaquire!! */
 129 static inline int qlt_issue_marker(struct scsi_qla_host *vha, int vha_locked)
 130 {
 131         /* Send marker if required */
 132         if (unlikely(vha->marker_needed != 0)) {
 133                 int rc = qla2x00_issue_marker(vha, vha_locked);
 134                 if (rc != QLA_SUCCESS) {
 135                         ql_dbg(ql_dbg_tgt, vha, 0xe03d,
 136                             "qla_target(%d): issue_marker() failed\n",
 137                             vha->vp_idx);
 138                 }
 139                 return rc;
 140         }
 141         return QLA_SUCCESS;
 142 }
 143
 144 static inline
 145 struct scsi_qla_host *qlt_find_host_by_d_id(struct scsi_qla_host *vha,
 146         uint8_t *d_id)
 147 {
 148         struct qla_hw_data *ha = vha->hw;
 149         uint8_t vp_idx;
 150
 151         if ((vha->d_id.b.area != d_id[1]) || (vha->d_id.b.domain != d_id[0]))
 152                 return NULL;
 153
 154         if (vha->d_id.b.al_pa == d_id[2])
 155                 return vha;
 156
 157         BUG_ON(ha->tgt.tgt_vp_map == NULL);
 158         vp_idx = ha->tgt.tgt_vp_map[d_id[2]].idx;
 159         if (likely(test_bit(vp_idx, ha->vp_idx_map)))
 160                 return ha->tgt.tgt_vp_map[vp_idx].vha;
 161
 162         return NULL;
 163 }
 164
 165 static inline
 166 struct scsi_qla_host *qlt_find_host_by_vp_idx(struct scsi_qla_host *vha,
 167         uint16_t vp_idx)
 168 {
 169         struct qla_hw_data *ha = vha->hw;
 170
 171         if (vha->vp_idx == vp_idx)
 172                 return vha;
 173
 174         BUG_ON(ha->tgt.tgt_vp_map == NULL);
 175         if (likely(test_bit(vp_idx, ha->vp_idx_map)))
 176                 return ha->tgt.tgt_vp_map[vp_idx].vha;
 177
 178         return NULL;
 179 }
 180
 181 void qlt_24xx_atio_pkt_all_vps(struct scsi_qla_host *vha,
 182         struct atio_from_isp *atio)
 183 {
 184         ql_dbg(ql_dbg_tgt, vha, 0xe072,
 185                 "%s: qla_target(%d): type %x ox_id %04x\n",
 186                 __func__, vha->vp_idx, atio->u.raw.entry_type,
 187                 be16_to_cpu(atio->u.isp24.fcp_hdr.ox_id));
 188
 189         switch (atio->u.raw.entry_type) {
 190         case ATIO_TYPE7:
 191         {
 192                 struct scsi_qla_host *host = qlt_find_host_by_d_id(vha,
 193                     atio->u.isp24.fcp_hdr.d_id);
 194                 if (unlikely(NULL == host)) {
 195                         ql_dbg(ql_dbg_tgt, vha, 0xe03e,
 196                             "qla_target(%d): Received ATIO_TYPE7 "
 197                             "with unknown d_id %x:%x:%x\n", vha->vp_idx,
 198                             atio->u.isp24.fcp_hdr.d_id[0],
 199                             atio->u.isp24.fcp_hdr.d_id[1],
 200                             atio->u.isp24.fcp_hdr.d_id[2]);
 201                         break;
 202                 }
 203                 qlt_24xx_atio_pkt(host, atio);
 204                 break;
 205         }
 206
 207         case IMMED_NOTIFY_TYPE:
 208         {
 209                 struct scsi_qla_host *host = vha;
 210                 struct imm_ntfy_from_isp *entry =
 211                     (struct imm_ntfy_from_isp *)atio;
 212
 213                 if ((entry->u.isp24.vp_index != 0xFF) &&
 214                     (entry->u.isp24.nport_handle != 0xFFFF)) {
 215                         host = qlt_find_host_by_vp_idx(vha,
 216                             entry->u.isp24.vp_index);
 217                         if (unlikely(!host)) {
 218                                 ql_dbg(ql_dbg_tgt, vha, 0xe03f,
 219                                     "qla_target(%d): Received "
 220                                     "ATIO (IMMED_NOTIFY_TYPE) "
 221                                     "with unknown vp_index %d\n",
 222                                     vha->vp_idx, entry->u.isp24.vp_index);
 223                                 break;
 224                         }
 225                 }
 226                 qlt_24xx_atio_pkt(host, atio);
 227                 break;
 228         }
 229
 230         default:
 231                 ql_dbg(ql_dbg_tgt, vha, 0xe040,
 232                     "qla_target(%d): Received unknown ATIO atio "
 233                     "type %x\n", vha->vp_idx, atio->u.raw.entry_type);
 234                 break;
 235         }
 236
 237         return;
 238 }
 239
 240 void qlt_response_pkt_all_vps(struct scsi_qla_host *vha, response_t *pkt)
 241 {
 242         switch (pkt->entry_type) {
 243         case CTIO_CRC2:
 244                 ql_dbg(ql_dbg_tgt, vha, 0xe073,
 245                         "qla_target(%d):%s: CRC2 Response pkt\n",
 246                         vha->vp_idx, __func__);
 247         case CTIO_TYPE7:
 248         {
 249                 struct ctio7_from_24xx *entry = (struct ctio7_from_24xx *)pkt;
 250                 struct scsi_qla_host *host = qlt_find_host_by_vp_idx(vha,
 251                     entry->vp_index);
 252                 if (unlikely(!host)) {
 253                         ql_dbg(ql_dbg_tgt, vha, 0xe041,
 254                             "qla_target(%d): Response pkt (CTIO_TYPE7) "
 255                             "received, with unknown vp_index %d\n",
 256                             vha->vp_idx, entry->vp_index);
 257                         break;
 258                 }
 259                 qlt_response_pkt(host, pkt);
 260                 break;
 261         }
 262
 263         case IMMED_NOTIFY_TYPE:
 264         {
 265                 struct scsi_qla_host *host = vha;
 266                 struct imm_ntfy_from_isp *entry =
 267                     (struct imm_ntfy_from_isp *)pkt;
 268
 269                 host = qlt_find_host_by_vp_idx(vha, entry->u.isp24.vp_index);
 270                 if (unlikely(!host)) {
 271                         ql_dbg(ql_dbg_tgt, vha, 0xe042,
 272                             "qla_target(%d): Response pkt (IMMED_NOTIFY_TYPE) "
 273                             "received, with unknown vp_index %d\n",
 274                             vha->vp_idx, entry->u.isp24.vp_index);
 275                         break;
 276                 }
 277                 qlt_response_pkt(host, pkt);
 278                 break;
 279         }
 280
 281         case NOTIFY_ACK_TYPE:
 282         {
 283                 struct scsi_qla_host *host = vha;
 284                 struct nack_to_isp *entry = (struct nack_to_isp *)pkt;
 285
 286                 if (0xFF != entry->u.isp24.vp_index) {
 287                         host = qlt_find_host_by_vp_idx(vha,
 288                             entry->u.isp24.vp_index);
 289                         if (unlikely(!host)) {
 290                                 ql_dbg(ql_dbg_tgt, vha, 0xe043,
 291                                     "qla_target(%d): Response "
 292                                     "pkt (NOTIFY_ACK_TYPE) "
 293                                     "received, with unknown "
 294                                     "vp_index %d\n", vha->vp_idx,
 295                                     entry->u.isp24.vp_index);
 296                                 break;
 297                         }
 298                 }
 299                 qlt_response_pkt(host, pkt);
 300                 break;
 301         }
 302
 303         case ABTS_RECV_24XX:
 304         {
 305                 struct abts_recv_from_24xx *entry =
 306                     (struct abts_recv_from_24xx *)pkt;
 307                 struct scsi_qla_host *host = qlt_find_host_by_vp_idx(vha,
 308                     entry->vp_index);
 309                 if (unlikely(!host)) {
 310                         ql_dbg(ql_dbg_tgt, vha, 0xe044,
 311                             "qla_target(%d): Response pkt "
 312                             "(ABTS_RECV_24XX) received, with unknown "
 313                             "vp_index %d\n", vha->vp_idx, entry->vp_index);
 314                         break;
 315                 }
 316                 qlt_response_pkt(host, pkt);
 317                 break;
 318         }
 319
 320         case ABTS_RESP_24XX:
 321         {
 322                 struct abts_resp_to_24xx *entry =
 323                     (struct abts_resp_to_24xx *)pkt;
 324                 struct scsi_qla_host *host = qlt_find_host_by_vp_idx(vha,
 325                     entry->vp_index);
 326                 if (unlikely(!host)) {
 327                         ql_dbg(ql_dbg_tgt, vha, 0xe045,
 328                             "qla_target(%d): Response pkt "
 329                             "(ABTS_RECV_24XX) received, with unknown "
 330                             "vp_index %d\n", vha->vp_idx, entry->vp_index);
 331                         break;
 332                 }
 333                 qlt_response_pkt(host, pkt);
 334                 break;
 335         }
 336
 337         default:
 338                 qlt_response_pkt(vha, pkt);
 339                 break;
 340         }
 341
 342 }
 343
 344 static void qlt_free_session_done(struct work_struct *work)
 345 {
 346         struct qla_tgt_sess *sess = container_of(work, struct qla_tgt_sess,
 347             free_work);
 348         struct qla_tgt *tgt = sess->tgt;
 349         struct scsi_qla_host *vha = sess->vha;
 350         struct qla_hw_data *ha = vha->hw;
 351
 352         BUG_ON(!tgt);
 353         /*
 354          * Release the target session for FC Nexus from fabric module code.
 355          */
 356         if (sess->se_sess != NULL)
 357                 ha->tgt.tgt_ops->free_session(sess);
 358
 359         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf001,
 360             "Unregistration of sess %p finished\n", sess);
 361
 362         kfree(sess);
 363         /*
 364          * We need to protect against race, when tgt is freed before or
 365          * inside wake_up()
 366          */
 367         tgt->sess_count--;
 368         if (tgt->sess_count == 0)
 369                 wake_up_all(&tgt->waitQ);
 370 }
 371
 372 /* ha->hardware_lock supposed to be held on entry */
 373 void qlt_unreg_sess(struct qla_tgt_sess *sess)
 374 {
 375         struct scsi_qla_host *vha = sess->vha;
 376
 377         vha->hw->tgt.tgt_ops->clear_nacl_from_fcport_map(sess);
 378
 379         list_del(&sess->sess_list_entry);
 380         if (sess->deleted)
 381                 list_del(&sess->del_list_entry);
 382
 383         INIT_WORK(&sess->free_work, qlt_free_session_done);
 384         schedule_work(&sess->free_work);
 385 }
 386 EXPORT_SYMBOL(qlt_unreg_sess);
 387
 388 /* ha->hardware_lock supposed to be held on entry */
 389 static int qlt_reset(struct scsi_qla_host *vha, void *iocb, int mcmd)
 390 {
 391         struct qla_hw_data *ha = vha->hw;
 392         struct qla_tgt_sess *sess = NULL;
 393         uint32_t unpacked_lun, lun = 0;
 394         uint16_t loop_id;
 395         int res = 0;
 396         struct imm_ntfy_from_isp *n = (struct imm_ntfy_from_isp *)iocb;
 397         struct atio_from_isp *a = (struct atio_from_isp *)iocb;
 398
 399         loop_id = le16_to_cpu(n->u.isp24.nport_handle);
 400         if (loop_id == 0xFFFF) {
 401 #if 0 /* FIXME: Re-enable Global event handling.. */
 402                 /* Global event */
 403                 atomic_inc(&ha->tgt.qla_tgt->tgt_global_resets_count);
 404                 qlt_clear_tgt_db(ha->tgt.qla_tgt, 1);
 405                 if (!list_empty(&ha->tgt.qla_tgt->sess_list)) {
 406                         sess = list_entry(ha->tgt.qla_tgt->sess_list.next,
 407                             typeof(*sess), sess_list_entry);
 408                         switch (mcmd) {
 409                         case QLA_TGT_NEXUS_LOSS_SESS:
 410                                 mcmd = QLA_TGT_NEXUS_LOSS;
 411                                 break;
 412                         case QLA_TGT_ABORT_ALL_SESS:
 413                                 mcmd = QLA_TGT_ABORT_ALL;
 414                                 break;
 415                         case QLA_TGT_NEXUS_LOSS:
 416                         case QLA_TGT_ABORT_ALL:
 417                                 break;
 418                         default:
 419                                 ql_dbg(ql_dbg_tgt, vha, 0xe046,
 420                                     "qla_target(%d): Not allowed "
 421                                     "command %x in %s", vha->vp_idx,
 422                                     mcmd, __func__);
 423                                 sess = NULL;
 424                                 break;
 425                         }
 426                 } else
 427                         sess = NULL;
 428 #endif
 429         } else {
 430                 sess = ha->tgt.tgt_ops->find_sess_by_loop_id(vha, loop_id);
 431         }
 432
 433         ql_dbg(ql_dbg_tgt, vha, 0xe000,
 434             "Using sess for qla_tgt_reset: %p\n", sess);
 435         if (!sess) {
 436                 res = -ESRCH;
 437                 return res;
 438         }
 439
 440         ql_dbg(ql_dbg_tgt, vha, 0xe047,
 441             "scsi(%ld): resetting (session %p from port %8phC mcmd %x, "
 442             "loop_id %d)\n", vha->host_no, sess, sess->port_name,
 443             mcmd, loop_id);
 444
 445         lun = a->u.isp24.fcp_cmnd.lun;
 446         unpacked_lun = scsilun_to_int((struct scsi_lun *)&lun);
 447
 448         return qlt_issue_task_mgmt(sess, unpacked_lun, mcmd,
 449             iocb, QLA24XX_MGMT_SEND_NACK);
 450 }
 451
 452 /* ha->hardware_lock supposed to be held on entry */
 453 static void qlt_schedule_sess_for_deletion(struct qla_tgt_sess *sess,
 454         bool immediate)
 455 {
 456         struct qla_tgt *tgt = sess->tgt;
 457         uint32_t dev_loss_tmo = tgt->ha->port_down_retry_count + 5;
 458
 459         if (sess->deleted)
 460                 return;
 461
 462         ql_dbg(ql_dbg_tgt, sess->vha, 0xe001,
 463             "Scheduling sess %p for deletion\n", sess);
 464         list_add_tail(&sess->del_list_entry, &tgt->del_sess_list);
 465         sess->deleted = 1;
 466
 467         if (immediate)
 468                 dev_loss_tmo = 0;
 469
 470         sess->expires = jiffies + dev_loss_tmo * HZ;
 471
 472         ql_dbg(ql_dbg_tgt, sess->vha, 0xe048,
 473             "qla_target(%d): session for port %8phC (loop ID %d) scheduled for "
 474             "deletion in %u secs (expires: %lu) immed: %d\n",
 475             sess->vha->vp_idx, sess->port_name, sess->loop_id, dev_loss_tmo,
 476             sess->expires, immediate);
 477
 478         if (immediate)
 479                 schedule_delayed_work(&tgt->sess_del_work, 0);
 480         else
 481                 schedule_delayed_work(&tgt->sess_del_work,
 482                     sess->expires - jiffies);
 483 }
 484
 485 /* ha->hardware_lock supposed to be held on entry */
 486 static void qlt_clear_tgt_db(struct qla_tgt *tgt, bool local_only)
 487 {
 488         struct qla_tgt_sess *sess;
 489
 490         list_for_each_entry(sess, &tgt->sess_list, sess_list_entry)
 491                 qlt_schedule_sess_for_deletion(sess, true);
 492
 493         /* At this point tgt could be already dead */
 494 }
 495
 496 static int qla24xx_get_loop_id(struct scsi_qla_host *vha, const uint8_t *s_id,
 497         uint16_t *loop_id)
 498 {
 499         struct qla_hw_data *ha = vha->hw;
 500         dma_addr_t gid_list_dma;
 501         struct gid_list_info *gid_list;
 502         char *id_iter;
 503         int res, rc, i;
 504         uint16_t entries;
 505
 506         gid_list = dma_alloc_coherent(&ha->pdev->dev, qla2x00_gid_list_size(ha),
 507             &gid_list_dma, GFP_KERNEL);
 508         if (!gid_list) {
 509                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf044,
 510                     "qla_target(%d): DMA Alloc failed of %u\n",
 511                     vha->vp_idx, qla2x00_gid_list_size(ha));
 512                 return -ENOMEM;
 513         }
 514
 515         /* Get list of logged in devices */
 516         rc = qla2x00_get_id_list(vha, gid_list, gid_list_dma, &entries);
 517         if (rc != QLA_SUCCESS) {
 518                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf045,
 519                     "qla_target(%d): get_id_list() failed: %x\n",
 520                     vha->vp_idx, rc);
 521                 res = -1;
 522                 goto out_free_id_list;
 523         }
 524
 525         id_iter = (char *)gid_list;
 526         res = -1;
 527         for (i = 0; i < entries; i++) {
 528                 struct gid_list_info *gid = (struct gid_list_info *)id_iter;
 529                 if ((gid->al_pa == s_id[2]) &&
 530                     (gid->area == s_id[1]) &&
 531                     (gid->domain == s_id[0])) {
 532                         *loop_id = le16_to_cpu(gid->loop_id);
 533                         res = 0;
 534                         break;
 535                 }
 536                 id_iter += ha->gid_list_info_size;
 537         }
 538
 539 out_free_id_list:
 540         dma_free_coherent(&ha->pdev->dev, qla2x00_gid_list_size(ha),
 541             gid_list, gid_list_dma);
 542         return res;
 543 }
 544
 545 /* ha->hardware_lock supposed to be held on entry */
 546 static void qlt_undelete_sess(struct qla_tgt_sess *sess)
 547 {
 548         BUG_ON(!sess->deleted);
 549
 550         list_del(&sess->del_list_entry);
 551         sess->deleted = 0;
 552 }
 553
 554 static void qlt_del_sess_work_fn(struct delayed_work *work)
 555 {
 556         struct qla_tgt *tgt = container_of(work, struct qla_tgt,
 557             sess_del_work);
 558         struct scsi_qla_host *vha = tgt->vha;
 559         struct qla_hw_data *ha = vha->hw;
 560         struct qla_tgt_sess *sess;
 561         unsigned long flags, elapsed;
 562
 563         spin_lock_irqsave(&ha->hardware_lock, flags);
 564         while (!list_empty(&tgt->del_sess_list)) {
 565                 sess = list_entry(tgt->del_sess_list.next, typeof(*sess),
 566                     del_list_entry);
 567                 elapsed = jiffies;
 568                 if (time_after_eq(elapsed, sess->expires)) {
 569                         qlt_undelete_sess(sess);
 570
 571                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf004,
 572                             "Timeout: sess %p about to be deleted\n",
 573                             sess);
 574                         ha->tgt.tgt_ops->shutdown_sess(sess);
 575                         ha->tgt.tgt_ops->put_sess(sess);
 576                 } else {
 577                         schedule_delayed_work(&tgt->sess_del_work,
 578                             sess->expires - elapsed);
 579                         break;
 580                 }
 581         }
 582         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 583 }
 584
 585 /*
 586  * Adds an extra ref to allow to drop hw lock after adding sess to the list.
 587  * Caller must put it.
 588  */
 589 static struct qla_tgt_sess *qlt_create_sess(
 590         struct scsi_qla_host *vha,
 591         fc_port_t *fcport,
 592         bool local)
 593 {
 594         struct qla_hw_data *ha = vha->hw;
 595         struct qla_tgt_sess *sess;
 596         unsigned long flags;
 597         unsigned char be_sid[3];
 598
 599         /* Check to avoid double sessions */
 600         spin_lock_irqsave(&ha->hardware_lock, flags);
 601         list_for_each_entry(sess, &vha->vha_tgt.qla_tgt->sess_list,
 602                                 sess_list_entry) {
 603                 if (!memcmp(sess->port_name, fcport->port_name, WWN_SIZE)) {
 604                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf005,
 605                             "Double sess %p found (s_id %x:%x:%x, "
 606                             "loop_id %d), updating to d_id %x:%x:%x, "
 607                             "loop_id %d", sess, sess->s_id.b.domain,
 608                             sess->s_id.b.al_pa, sess->s_id.b.area,
 609                             sess->loop_id, fcport->d_id.b.domain,
 610                             fcport->d_id.b.al_pa, fcport->d_id.b.area,
 611                             fcport->loop_id);
 612
 613                         if (sess->deleted)
 614                                 qlt_undelete_sess(sess);
 615
 616                         kref_get(&sess->se_sess->sess_kref);
 617                         ha->tgt.tgt_ops->update_sess(sess, fcport->d_id, fcport->loop_id,
 618                                                 (fcport->flags & FCF_CONF_COMP_SUPPORTED));
 619
 620                         if (sess->local && !local)
 621                                 sess->local = 0;
 622                         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 623
 624                         return sess;
 625                 }
 626         }
 627         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 628
 629         sess = kzalloc(sizeof(*sess), GFP_KERNEL);
 630         if (!sess) {
 631                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf04a,
 632                     "qla_target(%u): session allocation failed, all commands "
 633                     "from port %8phC will be refused", vha->vp_idx,
 634                     fcport->port_name);
 635
 636                 return NULL;
 637         }
 638         sess->tgt = vha->vha_tgt.qla_tgt;
 639         sess->vha = vha;
 640         sess->s_id = fcport->d_id;
 641         sess->loop_id = fcport->loop_id;
 642         sess->local = local;
 643
 644         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf006,
 645             "Adding sess %p to tgt %p via ->check_initiator_node_acl()\n",
 646             sess, vha->vha_tgt.qla_tgt);
 647
 648         be_sid[0] = sess->s_id.b.domain;
 649         be_sid[1] = sess->s_id.b.area;
 650         be_sid[2] = sess->s_id.b.al_pa;
 651         /*
 652          * Determine if this fc_port->port_name is allowed to access
 653          * target mode using explict NodeACLs+MappedLUNs, or using
 654          * TPG demo mode.  If this is successful a target mode FC nexus
 655          * is created.
 656          */
 657         if (ha->tgt.tgt_ops->check_initiator_node_acl(vha,
 658             &fcport->port_name[0], sess, &be_sid[0], fcport->loop_id) < 0) {
 659                 kfree(sess);
 660                 return NULL;
 661         }
 662         /*
 663          * Take an extra reference to ->sess_kref here to handle qla_tgt_sess
 664          * access across ->hardware_lock reaquire.
 665          */
 666         kref_get(&sess->se_sess->sess_kref);
 667
 668         sess->conf_compl_supported = (fcport->flags & FCF_CONF_COMP_SUPPORTED);
 669         BUILD_BUG_ON(sizeof(sess->port_name) != sizeof(fcport->port_name));
 670         memcpy(sess->port_name, fcport->port_name, sizeof(sess->port_name));
 671
 672         spin_lock_irqsave(&ha->hardware_lock, flags);
 673         list_add_tail(&sess->sess_list_entry, &vha->vha_tgt.qla_tgt->sess_list);
 674         vha->vha_tgt.qla_tgt->sess_count++;
 675         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 676
 677         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf04b,
 678             "qla_target(%d): %ssession for wwn %8phC (loop_id %d, "
 679             "s_id %x:%x:%x, confirmed completion %ssupported) added\n",
 680             vha->vp_idx, local ?  "local " : "", fcport->port_name,
 681             fcport->loop_id, sess->s_id.b.domain, sess->s_id.b.area,
 682             sess->s_id.b.al_pa, sess->conf_compl_supported ?  "" : "not ");
 683
 684         return sess;
 685 }
 686
 687 /*
 688  * Called from drivers/scsi/qla2xxx/qla_init.c:qla2x00_reg_remote_port()
 689  */
 690 void qlt_fc_port_added(struct scsi_qla_host *vha, fc_port_t *fcport)
 691 {
 692         struct qla_hw_data *ha = vha->hw;
 693         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
 694         struct qla_tgt_sess *sess;
 695         unsigned long flags;
 696
 697         if (!vha->hw->tgt.tgt_ops)
 698                 return;
 699
 700         if (!tgt || (fcport->port_type != FCT_INITIATOR))
 701                 return;
 702
 703         if (qla_ini_mode_enabled(vha))
 704                 return;
 705
 706         spin_lock_irqsave(&ha->hardware_lock, flags);
 707         if (tgt->tgt_stop) {
 708                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
 709                 return;
 710         }
 711         sess = qlt_find_sess_by_port_name(tgt, fcport->port_name);
 712         if (!sess) {
 713                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
 714
 715                 mutex_lock(&vha->vha_tgt.tgt_mutex);
 716                 sess = qlt_create_sess(vha, fcport, false);
 717                 mutex_unlock(&vha->vha_tgt.tgt_mutex);
 718
 719                 spin_lock_irqsave(&ha->hardware_lock, flags);
 720         } else {
 721                 kref_get(&sess->se_sess->sess_kref);
 722
 723                 if (sess->deleted) {
 724                         qlt_undelete_sess(sess);
 725
 726                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf04c,
 727                             "qla_target(%u): %ssession for port %8phC "
 728                             "(loop ID %d) reappeared\n", vha->vp_idx,
 729                             sess->local ? "local " : "", sess->port_name,
 730                             sess->loop_id);
 731
 732                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf007,
 733                             "Reappeared sess %p\n", sess);
 734                 }
 735                 ha->tgt.tgt_ops->update_sess(sess, fcport->d_id, fcport->loop_id,
 736                                         (fcport->flags & FCF_CONF_COMP_SUPPORTED));
 737         }
 738
 739         if (sess && sess->local) {
 740                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf04d,
 741                     "qla_target(%u): local session for "
 742                     "port %8phC (loop ID %d) became global\n", vha->vp_idx,
 743                     fcport->port_name, sess->loop_id);
 744                 sess->local = 0;
 745         }
 746         ha->tgt.tgt_ops->put_sess(sess);
 747         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 748 }
 749
 750 void qlt_fc_port_deleted(struct scsi_qla_host *vha, fc_port_t *fcport)
 751 {
 752         struct qla_hw_data *ha = vha->hw;
 753         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
 754         struct qla_tgt_sess *sess;
 755         unsigned long flags;
 756
 757         if (!vha->hw->tgt.tgt_ops)
 758                 return;
 759
 760         if (!tgt || (fcport->port_type != FCT_INITIATOR))
 761                 return;
 762
 763         spin_lock_irqsave(&ha->hardware_lock, flags);
 764         if (tgt->tgt_stop) {
 765                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
 766                 return;
 767         }
 768         sess = qlt_find_sess_by_port_name(tgt, fcport->port_name);
 769         if (!sess) {
 770                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
 771                 return;
 772         }
 773
 774         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf008, "qla_tgt_fc_port_deleted %p", sess);
 775
 776         sess->local = 1;
 777         qlt_schedule_sess_for_deletion(sess, false);
 778         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 779 }
 780
 781 static inline int test_tgt_sess_count(struct qla_tgt *tgt)
 782 {
 783         struct qla_hw_data *ha = tgt->ha;
 784         unsigned long flags;
 785         int res;
 786         /*
 787          * We need to protect against race, when tgt is freed before or
 788          * inside wake_up()
 789          */
 790         spin_lock_irqsave(&ha->hardware_lock, flags);
 791         ql_dbg(ql_dbg_tgt, tgt->vha, 0xe002,
 792             "tgt %p, empty(sess_list)=%d sess_count=%d\n",
 793             tgt, list_empty(&tgt->sess_list), tgt->sess_count);
 794         res = (tgt->sess_count == 0);
 795         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 796
 797         return res;
 798 }
 799
 800 /* Called by tcm_qla2xxx configfs code */
 801 int qlt_stop_phase1(struct qla_tgt *tgt)
 802 {
 803         struct scsi_qla_host *vha = tgt->vha;
 804         struct qla_hw_data *ha = tgt->ha;
 805         unsigned long flags;
 806
 807         mutex_lock(&qla_tgt_mutex);
 808         if (!vha->fc_vport) {
 809                 struct Scsi_Host *sh = vha->host;
 810                 struct fc_host_attrs *fc_host = shost_to_fc_host(sh);
 811                 bool npiv_vports;
 812
 813                 spin_lock_irqsave(sh->host_lock, flags);
 814                 npiv_vports = (fc_host->npiv_vports_inuse);
 815                 spin_unlock_irqrestore(sh->host_lock, flags);
 816
 817                 if (npiv_vports) {
 818                         mutex_unlock(&qla_tgt_mutex);
 819                         return -EPERM;
 820                 }
 821         }
 822         if (tgt->tgt_stop || tgt->tgt_stopped) {
 823                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf04e,
 824                     "Already in tgt->tgt_stop or tgt_stopped state\n");
 825                 mutex_unlock(&qla_tgt_mutex);
 826                 return -EPERM;
 827         }
 828
 829         ql_dbg(ql_dbg_tgt, vha, 0xe003, "Stopping target for host %ld(%p)\n",
 830             vha->host_no, vha);
 831         /*
 832          * Mutex needed to sync with qla_tgt_fc_port_[added,deleted].
 833          * Lock is needed, because we still can get an incoming packet.
 834          */
 835         mutex_lock(&vha->vha_tgt.tgt_mutex);
 836         spin_lock_irqsave(&ha->hardware_lock, flags);
 837         tgt->tgt_stop = 1;
 838         qlt_clear_tgt_db(tgt, true);
 839         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 840         mutex_unlock(&vha->vha_tgt.tgt_mutex);
 841         mutex_unlock(&qla_tgt_mutex);
 842
 843         flush_delayed_work(&tgt->sess_del_work);
 844
 845         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf009,
 846             "Waiting for sess works (tgt %p)", tgt);
 847         spin_lock_irqsave(&tgt->sess_work_lock, flags);
 848         while (!list_empty(&tgt->sess_works_list)) {
 849                 spin_unlock_irqrestore(&tgt->sess_work_lock, flags);
 850                 flush_scheduled_work();
 851                 spin_lock_irqsave(&tgt->sess_work_lock, flags);
 852         }
 853         spin_unlock_irqrestore(&tgt->sess_work_lock, flags);
 854
 855         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf00a,
 856             "Waiting for tgt %p: list_empty(sess_list)=%d "
 857             "sess_count=%d\n", tgt, list_empty(&tgt->sess_list),
 858             tgt->sess_count);
 859
 860         wait_event(tgt->waitQ, test_tgt_sess_count(tgt));
 861
 862         /* Big hammer */
 863         if (!ha->flags.host_shutting_down && qla_tgt_mode_enabled(vha))
 864                 qlt_disable_vha(vha);
 865
 866         /* Wait for sessions to clear out (just in case) */
 867         wait_event(tgt->waitQ, test_tgt_sess_count(tgt));
 868         return 0;
 869 }
 870 EXPORT_SYMBOL(qlt_stop_phase1);
 871
 872 /* Called by tcm_qla2xxx configfs code */
 873 void qlt_stop_phase2(struct qla_tgt *tgt)
 874 {
 875         struct qla_hw_data *ha = tgt->ha;
 876         scsi_qla_host_t *vha = pci_get_drvdata(ha->pdev);
 877         unsigned long flags;
 878
 879         if (tgt->tgt_stopped) {
 880                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf04f,
 881                     "Already in tgt->tgt_stopped state\n");
 882                 dump_stack();
 883                 return;
 884         }
 885
 886         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf00b,
 887             "Waiting for %d IRQ commands to complete (tgt %p)",
 888             tgt->irq_cmd_count, tgt);
 889
 890         mutex_lock(&vha->vha_tgt.tgt_mutex);
 891         spin_lock_irqsave(&ha->hardware_lock, flags);
 892         while (tgt->irq_cmd_count != 0) {
 893                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
 894                 udelay(2);
 895                 spin_lock_irqsave(&ha->hardware_lock, flags);
 896         }
 897         tgt->tgt_stop = 0;
 898         tgt->tgt_stopped = 1;
 899         spin_unlock_irqrestore(&ha->hardware_lock, flags);
 900         mutex_unlock(&vha->vha_tgt.tgt_mutex);
 901
 902         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf00c, "Stop of tgt %p finished",
 903             tgt);
 904 }
 905 EXPORT_SYMBOL(qlt_stop_phase2);
 906
 907 /* Called from qlt_remove_target() -> qla2x00_remove_one() */
 908 static void qlt_release(struct qla_tgt *tgt)
 909 {
 910         scsi_qla_host_t *vha = tgt->vha;
 911
 912         if ((vha->vha_tgt.qla_tgt != NULL) && !tgt->tgt_stopped)
 913                 qlt_stop_phase2(tgt);
 914
 915         vha->vha_tgt.qla_tgt = NULL;
 916
 917         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf00d,
 918             "Release of tgt %p finished\n", tgt);
 919
 920         kfree(tgt);
 921 }
 922
 923 /* ha->hardware_lock supposed to be held on entry */
 924 static int qlt_sched_sess_work(struct qla_tgt *tgt, int type,
 925         const void *param, unsigned int param_size)
 926 {
 927         struct qla_tgt_sess_work_param *prm;
 928         unsigned long flags;
 929
 930         prm = kzalloc(sizeof(*prm), GFP_ATOMIC);
 931         if (!prm) {
 932                 ql_dbg(ql_dbg_tgt_mgt, tgt->vha, 0xf050,
 933                     "qla_target(%d): Unable to create session "
 934                     "work, command will be refused", 0);
 935                 return -ENOMEM;
 936         }
 937
 938         ql_dbg(ql_dbg_tgt_mgt, tgt->vha, 0xf00e,
 939             "Scheduling work (type %d, prm %p)"
 940             " to find session for param %p (size %d, tgt %p)\n",
 941             type, prm, param, param_size, tgt);
 942
 943         prm->type = type;
 944         memcpy(&prm->tm_iocb, param, param_size);
 945
 946         spin_lock_irqsave(&tgt->sess_work_lock, flags);
 947         list_add_tail(&prm->sess_works_list_entry, &tgt->sess_works_list);
 948         spin_unlock_irqrestore(&tgt->sess_work_lock, flags);
 949
 950         schedule_work(&tgt->sess_work);
 951
 952         return 0;
 953 }
 954
 955 /*
 956  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
 957  */
 958 static void qlt_send_notify_ack(struct scsi_qla_host *vha,
 959         struct imm_ntfy_from_isp *ntfy,
 960         uint32_t add_flags, uint16_t resp_code, int resp_code_valid,
 961         uint16_t srr_flags, uint16_t srr_reject_code, uint8_t srr_explan)
 962 {
 963         struct qla_hw_data *ha = vha->hw;
 964         request_t *pkt;
 965         struct nack_to_isp *nack;
 966
 967         ql_dbg(ql_dbg_tgt, vha, 0xe004, "Sending NOTIFY_ACK (ha=%p)\n", ha);
 968
 969         /* Send marker if required */
 970         if (qlt_issue_marker(vha, 1) != QLA_SUCCESS)
 971                 return;
 972
 973         pkt = (request_t *)qla2x00_alloc_iocbs(vha, NULL);
 974         if (!pkt) {
 975                 ql_dbg(ql_dbg_tgt, vha, 0xe049,
 976                     "qla_target(%d): %s failed: unable to allocate "
 977                     "request packet\n", vha->vp_idx, __func__);
 978                 return;
 979         }
 980
 981         if (vha->vha_tgt.qla_tgt != NULL)
 982                 vha->vha_tgt.qla_tgt->notify_ack_expected++;
 983
 984         pkt->entry_type = NOTIFY_ACK_TYPE;
 985         pkt->entry_count = 1;
 986
 987         nack = (struct nack_to_isp *)pkt;
 988         nack->ox_id = ntfy->ox_id;
 989
 990         nack->u.isp24.nport_handle = ntfy->u.isp24.nport_handle;
 991         if (le16_to_cpu(ntfy->u.isp24.status) == IMM_NTFY_ELS) {
 992                 nack->u.isp24.flags = ntfy->u.isp24.flags &
 993                         __constant_cpu_to_le32(NOTIFY24XX_FLAGS_PUREX_IOCB);
 994         }
 995         nack->u.isp24.srr_rx_id = ntfy->u.isp24.srr_rx_id;
 996         nack->u.isp24.status = ntfy->u.isp24.status;
 997         nack->u.isp24.status_subcode = ntfy->u.isp24.status_subcode;
 998         nack->u.isp24.fw_handle = ntfy->u.isp24.fw_handle;
 999         nack->u.isp24.exchange_address = ntfy->u.isp24.exchange_address;
1000         nack->u.isp24.srr_rel_offs = ntfy->u.isp24.srr_rel_offs;
1001         nack->u.isp24.srr_ui = ntfy->u.isp24.srr_ui;
1002         nack->u.isp24.srr_flags = cpu_to_le16(srr_flags);
1003         nack->u.isp24.srr_reject_code = srr_reject_code;
1004         nack->u.isp24.srr_reject_code_expl = srr_explan;
1005         nack->u.isp24.vp_index = ntfy->u.isp24.vp_index;
1006
1007         ql_dbg(ql_dbg_tgt, vha, 0xe005,
1008             "qla_target(%d): Sending 24xx Notify Ack %d\n",
1009             vha->vp_idx, nack->u.isp24.status);
1010
1011         qla2x00_start_iocbs(vha, vha->req);
1012 }
1013
1014 /*
1015  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
1016  */
1017 static void qlt_24xx_send_abts_resp(struct scsi_qla_host *vha,
1018         struct abts_recv_from_24xx *abts, uint32_t status,
1019         bool ids_reversed)
1020 {
1021         struct qla_hw_data *ha = vha->hw;
1022         struct abts_resp_to_24xx *resp;
1023         uint32_t f_ctl;
1024         uint8_t *p;
1025
1026         ql_dbg(ql_dbg_tgt, vha, 0xe006,
1027             "Sending task mgmt ABTS response (ha=%p, atio=%p, status=%x\n",
1028             ha, abts, status);
1029
1030         /* Send marker if required */
1031         if (qlt_issue_marker(vha, 1) != QLA_SUCCESS)
1032                 return;
1033
1034         resp = (struct abts_resp_to_24xx *)qla2x00_alloc_iocbs(vha, NULL);
1035         if (!resp) {
1036                 ql_dbg(ql_dbg_tgt, vha, 0xe04a,
1037                     "qla_target(%d): %s failed: unable to allocate "
1038                     "request packet", vha->vp_idx, __func__);
1039                 return;
1040         }
1041
1042         resp->entry_type = ABTS_RESP_24XX;
1043         resp->entry_count = 1;
1044         resp->nport_handle = abts->nport_handle;
1045         resp->vp_index = vha->vp_idx;
1046         resp->sof_type = abts->sof_type;
1047         resp->exchange_address = abts->exchange_address;
1048         resp->fcp_hdr_le = abts->fcp_hdr_le;
1049         f_ctl = __constant_cpu_to_le32(F_CTL_EXCH_CONTEXT_RESP |
1050             F_CTL_LAST_SEQ | F_CTL_END_SEQ |
1051             F_CTL_SEQ_INITIATIVE);
1052         p = (uint8_t *)&f_ctl;
1053         resp->fcp_hdr_le.f_ctl[0] = *p++;
1054         resp->fcp_hdr_le.f_ctl[1] = *p++;
1055         resp->fcp_hdr_le.f_ctl[2] = *p;
1056         if (ids_reversed) {
1057                 resp->fcp_hdr_le.d_id[0] = abts->fcp_hdr_le.d_id[0];
1058                 resp->fcp_hdr_le.d_id[1] = abts->fcp_hdr_le.d_id[1];
1059                 resp->fcp_hdr_le.d_id[2] = abts->fcp_hdr_le.d_id[2];
1060                 resp->fcp_hdr_le.s_id[0] = abts->fcp_hdr_le.s_id[0];
1061                 resp->fcp_hdr_le.s_id[1] = abts->fcp_hdr_le.s_id[1];
1062                 resp->fcp_hdr_le.s_id[2] = abts->fcp_hdr_le.s_id[2];
1063         } else {
1064                 resp->fcp_hdr_le.d_id[0] = abts->fcp_hdr_le.s_id[0];
1065                 resp->fcp_hdr_le.d_id[1] = abts->fcp_hdr_le.s_id[1];
1066                 resp->fcp_hdr_le.d_id[2] = abts->fcp_hdr_le.s_id[2];
1067                 resp->fcp_hdr_le.s_id[0] = abts->fcp_hdr_le.d_id[0];
1068                 resp->fcp_hdr_le.s_id[1] = abts->fcp_hdr_le.d_id[1];
1069                 resp->fcp_hdr_le.s_id[2] = abts->fcp_hdr_le.d_id[2];
1070         }
1071         resp->exchange_addr_to_abort = abts->exchange_addr_to_abort;
1072         if (status == FCP_TMF_CMPL) {
1073                 resp->fcp_hdr_le.r_ctl = R_CTL_BASIC_LINK_SERV | R_CTL_B_ACC;
1074                 resp->payload.ba_acct.seq_id_valid = SEQ_ID_INVALID;
1075                 resp->payload.ba_acct.low_seq_cnt = 0x0000;
1076                 resp->payload.ba_acct.high_seq_cnt = 0xFFFF;
1077                 resp->payload.ba_acct.ox_id = abts->fcp_hdr_le.ox_id;
1078                 resp->payload.ba_acct.rx_id = abts->fcp_hdr_le.rx_id;
1079         } else {
1080                 resp->fcp_hdr_le.r_ctl = R_CTL_BASIC_LINK_SERV | R_CTL_B_RJT;
1081                 resp->payload.ba_rjt.reason_code =
1082                         BA_RJT_REASON_CODE_UNABLE_TO_PERFORM;
1083                 /* Other bytes are zero */
1084         }
1085
1086         vha->vha_tgt.qla_tgt->abts_resp_expected++;
1087
1088         qla2x00_start_iocbs(vha, vha->req);
1089 }
1090
1091 /*
1092  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
1093  */
1094 static void qlt_24xx_retry_term_exchange(struct scsi_qla_host *vha,
1095         struct abts_resp_from_24xx_fw *entry)
1096 {
1097         struct ctio7_to_24xx *ctio;
1098
1099         ql_dbg(ql_dbg_tgt, vha, 0xe007,
1100             "Sending retry TERM EXCH CTIO7 (ha=%p)\n", vha->hw);
1101         /* Send marker if required */
1102         if (qlt_issue_marker(vha, 1) != QLA_SUCCESS)
1103                 return;
1104
1105         ctio = (struct ctio7_to_24xx *)qla2x00_alloc_iocbs(vha, NULL);
1106         if (ctio == NULL) {
1107                 ql_dbg(ql_dbg_tgt, vha, 0xe04b,
1108                     "qla_target(%d): %s failed: unable to allocate "
1109                     "request packet\n", vha->vp_idx, __func__);
1110                 return;
1111         }
1112
1113         /*
1114          * We've got on entrance firmware's response on by us generated
1115          * ABTS response. So, in it ID fields are reversed.
1116          */
1117
1118         ctio->entry_type = CTIO_TYPE7;
1119         ctio->entry_count = 1;
1120         ctio->nport_handle = entry->nport_handle;
1121         ctio->handle = QLA_TGT_SKIP_HANDLE |    CTIO_COMPLETION_HANDLE_MARK;
1122         ctio->timeout = __constant_cpu_to_le16(QLA_TGT_TIMEOUT);
1123         ctio->vp_index = vha->vp_idx;
1124         ctio->initiator_id[0] = entry->fcp_hdr_le.d_id[0];
1125         ctio->initiator_id[1] = entry->fcp_hdr_le.d_id[1];
1126         ctio->initiator_id[2] = entry->fcp_hdr_le.d_id[2];
1127         ctio->exchange_addr = entry->exchange_addr_to_abort;
1128         ctio->u.status1.flags =
1129             __constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_1 |
1130                 CTIO7_FLAGS_TERMINATE);
1131         ctio->u.status1.ox_id = cpu_to_le16(entry->fcp_hdr_le.ox_id);
1132
1133         qla2x00_start_iocbs(vha, vha->req);
1134
1135         qlt_24xx_send_abts_resp(vha, (struct abts_recv_from_24xx *)entry,
1136             FCP_TMF_CMPL, true);
1137 }
1138
1139 /* ha->hardware_lock supposed to be held on entry */
1140 static int __qlt_24xx_handle_abts(struct scsi_qla_host *vha,
1141         struct abts_recv_from_24xx *abts, struct qla_tgt_sess *sess)
1142 {
1143         struct qla_hw_data *ha = vha->hw;
1144         struct se_session *se_sess = sess->se_sess;
1145         struct qla_tgt_mgmt_cmd *mcmd;
1146         struct se_cmd *se_cmd;
1147         u32 lun = 0;
1148         int rc;
1149         bool found_lun = false;
1150
1151         spin_lock(&se_sess->sess_cmd_lock);
1152         list_for_each_entry(se_cmd, &se_sess->sess_cmd_list, se_cmd_list) {
1153                 struct qla_tgt_cmd *cmd =
1154                         container_of(se_cmd, struct qla_tgt_cmd, se_cmd);
1155                 if (cmd->tag == abts->exchange_addr_to_abort) {
1156                         lun = cmd->unpacked_lun;
1157                         found_lun = true;
1158                         break;
1159                 }
1160         }
1161         spin_unlock(&se_sess->sess_cmd_lock);
1162
1163         if (!found_lun)
1164                 return -ENOENT;
1165
1166         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf00f,
1167             "qla_target(%d): task abort (tag=%d)\n",
1168             vha->vp_idx, abts->exchange_addr_to_abort);
1169
1170         mcmd = mempool_alloc(qla_tgt_mgmt_cmd_mempool, GFP_ATOMIC);
1171         if (mcmd == NULL) {
1172                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf051,
1173                     "qla_target(%d): %s: Allocation of ABORT cmd failed",
1174                     vha->vp_idx, __func__);
1175                 return -ENOMEM;
1176         }
1177         memset(mcmd, 0, sizeof(*mcmd));
1178
1179         mcmd->sess = sess;
1180         memcpy(&mcmd->orig_iocb.abts, abts, sizeof(mcmd->orig_iocb.abts));
1181
1182         rc = ha->tgt.tgt_ops->handle_tmr(mcmd, lun, TMR_ABORT_TASK,
1183             abts->exchange_addr_to_abort);
1184         if (rc != 0) {
1185                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf052,
1186                     "qla_target(%d):  tgt_ops->handle_tmr()"
1187                     " failed: %d", vha->vp_idx, rc);
1188                 mempool_free(mcmd, qla_tgt_mgmt_cmd_mempool);
1189                 return -EFAULT;
1190         }
1191
1192         return 0;
1193 }
1194
1195 /*
1196  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
1197  */
1198 static void qlt_24xx_handle_abts(struct scsi_qla_host *vha,
1199         struct abts_recv_from_24xx *abts)
1200 {
1201         struct qla_hw_data *ha = vha->hw;
1202         struct qla_tgt_sess *sess;
1203         uint32_t tag = abts->exchange_addr_to_abort;
1204         uint8_t s_id[3];
1205         int rc;
1206
1207         if (le32_to_cpu(abts->fcp_hdr_le.parameter) & ABTS_PARAM_ABORT_SEQ) {
1208                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf053,
1209                     "qla_target(%d): ABTS: Abort Sequence not "
1210                     "supported\n", vha->vp_idx);
1211                 qlt_24xx_send_abts_resp(vha, abts, FCP_TMF_REJECTED, false);
1212                 return;
1213         }
1214
1215         if (tag == ATIO_EXCHANGE_ADDRESS_UNKNOWN) {
1216                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf010,
1217                     "qla_target(%d): ABTS: Unknown Exchange "
1218                     "Address received\n", vha->vp_idx);
1219                 qlt_24xx_send_abts_resp(vha, abts, FCP_TMF_REJECTED, false);
1220                 return;
1221         }
1222
1223         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf011,
1224             "qla_target(%d): task abort (s_id=%x:%x:%x, "
1225             "tag=%d, param=%x)\n", vha->vp_idx, abts->fcp_hdr_le.s_id[2],
1226             abts->fcp_hdr_le.s_id[1], abts->fcp_hdr_le.s_id[0], tag,
1227             le32_to_cpu(abts->fcp_hdr_le.parameter));
1228
1229         s_id[0] = abts->fcp_hdr_le.s_id[2];
1230         s_id[1] = abts->fcp_hdr_le.s_id[1];
1231         s_id[2] = abts->fcp_hdr_le.s_id[0];
1232
1233         sess = ha->tgt.tgt_ops->find_sess_by_s_id(vha, s_id);
1234         if (!sess) {
1235                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf012,
1236                     "qla_target(%d): task abort for non-existant session\n",
1237                     vha->vp_idx);
1238                 rc = qlt_sched_sess_work(vha->vha_tgt.qla_tgt,
1239                     QLA_TGT_SESS_WORK_ABORT, abts, sizeof(*abts));
1240                 if (rc != 0) {
1241                         qlt_24xx_send_abts_resp(vha, abts, FCP_TMF_REJECTED,
1242                             false);
1243                 }
1244                 return;
1245         }
1246
1247         rc = __qlt_24xx_handle_abts(vha, abts, sess);
1248         if (rc != 0) {
1249                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf054,
1250                     "qla_target(%d): __qlt_24xx_handle_abts() failed: %d\n",
1251                     vha->vp_idx, rc);
1252                 qlt_24xx_send_abts_resp(vha, abts, FCP_TMF_REJECTED, false);
1253                 return;
1254         }
1255 }
1256
1257 /*
1258  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
1259  */
1260 static void qlt_24xx_send_task_mgmt_ctio(struct scsi_qla_host *ha,
1261         struct qla_tgt_mgmt_cmd *mcmd, uint32_t resp_code)
1262 {
1263         struct atio_from_isp *atio = &mcmd->orig_iocb.atio;
1264         struct ctio7_to_24xx *ctio;
1265         uint16_t temp;
1266
1267         ql_dbg(ql_dbg_tgt, ha, 0xe008,
1268             "Sending task mgmt CTIO7 (ha=%p, atio=%p, resp_code=%x\n",
1269             ha, atio, resp_code);
1270
1271         /* Send marker if required */
1272         if (qlt_issue_marker(ha, 1) != QLA_SUCCESS)
1273                 return;
1274
1275         ctio = (struct ctio7_to_24xx *)qla2x00_alloc_iocbs(ha, NULL);
1276         if (ctio == NULL) {
1277                 ql_dbg(ql_dbg_tgt, ha, 0xe04c,
1278                     "qla_target(%d): %s failed: unable to allocate "
1279                     "request packet\n", ha->vp_idx, __func__);
1280                 return;
1281         }
1282
1283         ctio->entry_type = CTIO_TYPE7;
1284         ctio->entry_count = 1;
1285         ctio->handle = QLA_TGT_SKIP_HANDLE | CTIO_COMPLETION_HANDLE_MARK;
1286         ctio->nport_handle = mcmd->sess->loop_id;
1287         ctio->timeout = __constant_cpu_to_le16(QLA_TGT_TIMEOUT);
1288         ctio->vp_index = ha->vp_idx;
1289         ctio->initiator_id[0] = atio->u.isp24.fcp_hdr.s_id[2];
1290         ctio->initiator_id[1] = atio->u.isp24.fcp_hdr.s_id[1];
1291         ctio->initiator_id[2] = atio->u.isp24.fcp_hdr.s_id[0];
1292         ctio->exchange_addr = atio->u.isp24.exchange_addr;
1293         ctio->u.status1.flags = (atio->u.isp24.attr << 9) |
1294             __constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_1 |
1295                 CTIO7_FLAGS_SEND_STATUS);
1296         temp = be16_to_cpu(atio->u.isp24.fcp_hdr.ox_id);
1297         ctio->u.status1.ox_id = cpu_to_le16(temp);
1298         ctio->u.status1.scsi_status =
1299             __constant_cpu_to_le16(SS_RESPONSE_INFO_LEN_VALID);
1300         ctio->u.status1.response_len = __constant_cpu_to_le16(8);
1301         ctio->u.status1.sense_data[0] = resp_code;
1302
1303         qla2x00_start_iocbs(ha, ha->req);
1304 }
1305
1306 void qlt_free_mcmd(struct qla_tgt_mgmt_cmd *mcmd)
1307 {
1308         mempool_free(mcmd, qla_tgt_mgmt_cmd_mempool);
1309 }
1310 EXPORT_SYMBOL(qlt_free_mcmd);
1311
1312 /* callback from target fabric module code */
1313 void qlt_xmit_tm_rsp(struct qla_tgt_mgmt_cmd *mcmd)
1314 {
1315         struct scsi_qla_host *vha = mcmd->sess->vha;
1316         struct qla_hw_data *ha = vha->hw;
1317         unsigned long flags;
1318
1319         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf013,
1320             "TM response mcmd (%p) status %#x state %#x",
1321             mcmd, mcmd->fc_tm_rsp, mcmd->flags);
1322
1323         spin_lock_irqsave(&ha->hardware_lock, flags);
1324         if (mcmd->flags == QLA24XX_MGMT_SEND_NACK)
1325                 qlt_send_notify_ack(vha, &mcmd->orig_iocb.imm_ntfy,
1326                     0, 0, 0, 0, 0, 0);
1327         else {
1328                 if (mcmd->se_cmd.se_tmr_req->function == TMR_ABORT_TASK)
1329                         qlt_24xx_send_abts_resp(vha, &mcmd->orig_iocb.abts,
1330                             mcmd->fc_tm_rsp, false);
1331                 else
1332                         qlt_24xx_send_task_mgmt_ctio(vha, mcmd,
1333                             mcmd->fc_tm_rsp);
1334         }
1335         /*
1336          * Make the callback for ->free_mcmd() to queue_work() and invoke
1337          * target_put_sess_cmd() to drop cmd_kref to 1.  The final
1338          * target_put_sess_cmd() call will be made from TFO->check_stop_free()
1339          * -> tcm_qla2xxx_check_stop_free() to release the TMR associated se_cmd
1340          * descriptor after TFO->queue_tm_rsp() -> tcm_qla2xxx_queue_tm_rsp() ->
1341          * qlt_xmit_tm_rsp() returns here..
1342          */
1343         ha->tgt.tgt_ops->free_mcmd(mcmd);
1344         spin_unlock_irqrestore(&ha->hardware_lock, flags);
1345 }
1346 EXPORT_SYMBOL(qlt_xmit_tm_rsp);
1347
1348 /* No locks */
1349 static int qlt_pci_map_calc_cnt(struct qla_tgt_prm *prm)
1350 {
1351         struct qla_tgt_cmd *cmd = prm->cmd;
1352
1353         BUG_ON(cmd->sg_cnt == 0);
1354
1355         prm->sg = (struct scatterlist *)cmd->sg;
1356         prm->seg_cnt = pci_map_sg(prm->tgt->ha->pdev, cmd->sg,
1357             cmd->sg_cnt, cmd->dma_data_direction);
1358         if (unlikely(prm->seg_cnt == 0))
1359                 goto out_err;
1360
1361         prm->cmd->sg_mapped = 1;
1362
1363         if (cmd->se_cmd.prot_op == TARGET_PROT_NORMAL) {
1364                 /*
1365                  * If greater than four sg entries then we need to allocate
1366                  * the continuation entries
1367                  */
1368                 if (prm->seg_cnt > prm->tgt->datasegs_per_cmd)
1369                         prm->req_cnt += DIV_ROUND_UP(prm->seg_cnt -
1370                         prm->tgt->datasegs_per_cmd,
1371                         prm->tgt->datasegs_per_cont);
1372         } else {
1373                 /* DIF */
1374                 if ((cmd->se_cmd.prot_op == TARGET_PROT_DIN_INSERT) ||
1375                     (cmd->se_cmd.prot_op == TARGET_PROT_DOUT_STRIP)) {
1376                         prm->seg_cnt = DIV_ROUND_UP(cmd->bufflen, cmd->blk_sz);
1377                         prm->tot_dsds = prm->seg_cnt;
1378                 } else
1379                         prm->tot_dsds = prm->seg_cnt;
1380
1381                 if (cmd->prot_sg_cnt) {
1382                         prm->prot_sg      = cmd->prot_sg;
1383                         prm->prot_seg_cnt = pci_map_sg(prm->tgt->ha->pdev,
1384                                 cmd->prot_sg, cmd->prot_sg_cnt,
1385                                 cmd->dma_data_direction);
1386                         if (unlikely(prm->prot_seg_cnt == 0))
1387                                 goto out_err;
1388
1389                         if ((cmd->se_cmd.prot_op == TARGET_PROT_DIN_INSERT) ||
1390                             (cmd->se_cmd.prot_op == TARGET_PROT_DOUT_STRIP)) {
1391                                 /* Dif Bundling not support here */
1392                                 prm->prot_seg_cnt = DIV_ROUND_UP(cmd->bufflen,
1393                                                                 cmd->blk_sz);
1394                                 prm->tot_dsds += prm->prot_seg_cnt;
1395                         } else
1396                                 prm->tot_dsds += prm->prot_seg_cnt;
1397                 }
1398         }
1399
1400         ql_dbg(ql_dbg_tgt, prm->cmd->vha, 0xe009, "seg_cnt=%d, req_cnt=%d\n",
1401             prm->seg_cnt, prm->req_cnt);
1402         return 0;
1403
1404 out_err:
1405         ql_dbg(ql_dbg_tgt, prm->cmd->vha, 0xe04d,
1406             "qla_target(%d): PCI mapping failed: sg_cnt=%d",
1407             0, prm->cmd->sg_cnt);
1408         return -1;
1409 }
1410
1411 static inline void qlt_unmap_sg(struct scsi_qla_host *vha,
1412         struct qla_tgt_cmd *cmd)
1413 {
1414         struct qla_hw_data *ha = vha->hw;
1415
1416         BUG_ON(!cmd->sg_mapped);
1417         pci_unmap_sg(ha->pdev, cmd->sg, cmd->sg_cnt, cmd->dma_data_direction);
1418         cmd->sg_mapped = 0;
1419
1420         if (cmd->prot_sg_cnt)
1421                 pci_unmap_sg(ha->pdev, cmd->prot_sg, cmd->prot_sg_cnt,
1422                         cmd->dma_data_direction);
1423
1424         if (cmd->ctx_dsd_alloced)
1425                 qla2x00_clean_dsd_pool(ha, NULL, cmd);
1426
1427         if (cmd->ctx)
1428                 dma_pool_free(ha->dl_dma_pool, cmd->ctx, cmd->ctx->crc_ctx_dma);
1429 }
1430
1431 static int qlt_check_reserve_free_req(struct scsi_qla_host *vha,
1432         uint32_t req_cnt)
1433 {
1434         struct qla_hw_data *ha = vha->hw;
1435         device_reg_t __iomem *reg = ha->iobase;
1436         uint32_t cnt;
1437
1438         if (vha->req->cnt < (req_cnt + 2)) {
1439                 cnt = (uint16_t)RD_REG_DWORD(&reg->isp24.req_q_out);
1440
1441                 ql_dbg(ql_dbg_tgt, vha, 0xe00a,
1442                     "Request ring circled: cnt=%d, vha->->ring_index=%d, "
1443                     "vha->req->cnt=%d, req_cnt=%d\n", cnt,
1444                     vha->req->ring_index, vha->req->cnt, req_cnt);
1445                 if  (vha->req->ring_index < cnt)
1446                         vha->req->cnt = cnt - vha->req->ring_index;
1447                 else
1448                         vha->req->cnt = vha->req->length -
1449                             (vha->req->ring_index - cnt);
1450         }
1451
1452         if (unlikely(vha->req->cnt < (req_cnt + 2))) {
1453                 ql_dbg(ql_dbg_tgt, vha, 0xe00b,
1454                     "qla_target(%d): There is no room in the "
1455                     "request ring: vha->req->ring_index=%d, vha->req->cnt=%d, "
1456                     "req_cnt=%d\n", vha->vp_idx, vha->req->ring_index,
1457                     vha->req->cnt, req_cnt);
1458                 return -EAGAIN;
1459         }
1460         vha->req->cnt -= req_cnt;
1461
1462         return 0;
1463 }
1464
1465 /*
1466  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
1467  */
1468 static inline void *qlt_get_req_pkt(struct scsi_qla_host *vha)
1469 {
1470         /* Adjust ring index. */
1471         vha->req->ring_index++;
1472         if (vha->req->ring_index == vha->req->length) {
1473                 vha->req->ring_index = 0;
1474                 vha->req->ring_ptr = vha->req->ring;
1475         } else {
1476                 vha->req->ring_ptr++;
1477         }
1478         return (cont_entry_t *)vha->req->ring_ptr;
1479 }
1480
1481 /* ha->hardware_lock supposed to be held on entry */
1482 static inline uint32_t qlt_make_handle(struct scsi_qla_host *vha)
1483 {
1484         struct qla_hw_data *ha = vha->hw;
1485         uint32_t h;
1486
1487         h = ha->tgt.current_handle;
1488         /* always increment cmd handle */
1489         do {
1490                 ++h;
1491                 if (h > DEFAULT_OUTSTANDING_COMMANDS)
1492                         h = 1; /* 0 is QLA_TGT_NULL_HANDLE */
1493                 if (h == ha->tgt.current_handle) {
1494                         ql_dbg(ql_dbg_tgt, vha, 0xe04e,
1495                             "qla_target(%d): Ran out of "
1496                             "empty cmd slots in ha %p\n", vha->vp_idx, ha);
1497                         h = QLA_TGT_NULL_HANDLE;
1498                         break;
1499                 }
1500         } while ((h == QLA_TGT_NULL_HANDLE) ||
1501             (h == QLA_TGT_SKIP_HANDLE) ||
1502             (ha->tgt.cmds[h-1] != NULL));
1503
1504         if (h != QLA_TGT_NULL_HANDLE)
1505                 ha->tgt.current_handle = h;
1506
1507         return h;
1508 }
1509
1510 /* ha->hardware_lock supposed to be held on entry */
1511 static int qlt_24xx_build_ctio_pkt(struct qla_tgt_prm *prm,
1512         struct scsi_qla_host *vha)
1513 {
1514         uint32_t h;
1515         struct ctio7_to_24xx *pkt;
1516         struct qla_hw_data *ha = vha->hw;
1517         struct atio_from_isp *atio = &prm->cmd->atio;
1518         uint16_t temp;
1519
1520         pkt = (struct ctio7_to_24xx *)vha->req->ring_ptr;
1521         prm->pkt = pkt;
1522         memset(pkt, 0, sizeof(*pkt));
1523
1524         pkt->entry_type = CTIO_TYPE7;
1525         pkt->entry_count = (uint8_t)prm->req_cnt;
1526         pkt->vp_index = vha->vp_idx;
1527
1528         h = qlt_make_handle(vha);
1529         if (unlikely(h == QLA_TGT_NULL_HANDLE)) {
1530                 /*
1531                  * CTIO type 7 from the firmware doesn't provide a way to
1532                  * know the initiator's LOOP ID, hence we can't find
1533                  * the session and, so, the command.
1534                  */
1535                 return -EAGAIN;
1536         } else
1537                 ha->tgt.cmds[h-1] = prm->cmd;
1538
1539         pkt->handle = h | CTIO_COMPLETION_HANDLE_MARK;
1540         pkt->nport_handle = prm->cmd->loop_id;
1541         pkt->timeout = __constant_cpu_to_le16(QLA_TGT_TIMEOUT);
1542         pkt->initiator_id[0] = atio->u.isp24.fcp_hdr.s_id[2];
1543         pkt->initiator_id[1] = atio->u.isp24.fcp_hdr.s_id[1];
1544         pkt->initiator_id[2] = atio->u.isp24.fcp_hdr.s_id[0];
1545         pkt->exchange_addr = atio->u.isp24.exchange_addr;
1546         pkt->u.status0.flags |= (atio->u.isp24.attr << 9);
1547         temp = be16_to_cpu(atio->u.isp24.fcp_hdr.ox_id);
1548         pkt->u.status0.ox_id = cpu_to_le16(temp);
1549         pkt->u.status0.relative_offset = cpu_to_le32(prm->cmd->offset);
1550
1551         ql_dbg(ql_dbg_tgt, vha, 0xe00c,
1552             "qla_target(%d): handle(cmd) -> %08x, timeout %d, ox_id %#x\n",
1553             vha->vp_idx, pkt->handle, QLA_TGT_TIMEOUT, temp);
1554         return 0;
1555 }
1556
1557 /*
1558  * ha->hardware_lock supposed to be held on entry. We have already made sure
1559  * that there is sufficient amount of request entries to not drop it.
1560  */
1561 static void qlt_load_cont_data_segments(struct qla_tgt_prm *prm,
1562         struct scsi_qla_host *vha)
1563 {
1564         int cnt;
1565         uint32_t *dword_ptr;
1566         int enable_64bit_addressing = prm->tgt->tgt_enable_64bit_addr;
1567
1568         /* Build continuation packets */
1569         while (prm->seg_cnt > 0) {
1570                 cont_a64_entry_t *cont_pkt64 =
1571                         (cont_a64_entry_t *)qlt_get_req_pkt(vha);
1572
1573                 /*
1574                  * Make sure that from cont_pkt64 none of
1575                  * 64-bit specific fields used for 32-bit
1576                  * addressing. Cast to (cont_entry_t *) for
1577                  * that.
1578                  */
1579
1580                 memset(cont_pkt64, 0, sizeof(*cont_pkt64));
1581
1582                 cont_pkt64->entry_count = 1;
1583                 cont_pkt64->sys_define = 0;
1584
1585                 if (enable_64bit_addressing) {
1586                         cont_pkt64->entry_type = CONTINUE_A64_TYPE;
1587                         dword_ptr =
1588                             (uint32_t *)&cont_pkt64->dseg_0_address;
1589                 } else {
1590                         cont_pkt64->entry_type = CONTINUE_TYPE;
1591                         dword_ptr =
1592                             (uint32_t *)&((cont_entry_t *)
1593                                 cont_pkt64)->dseg_0_address;
1594                 }
1595
1596                 /* Load continuation entry data segments */
1597                 for (cnt = 0;
1598                     cnt < prm->tgt->datasegs_per_cont && prm->seg_cnt;
1599                     cnt++, prm->seg_cnt--) {
1600                         *dword_ptr++ =
1601                             cpu_to_le32(pci_dma_lo32
1602                                 (sg_dma_address(prm->sg)));
1603                         if (enable_64bit_addressing) {
1604                                 *dword_ptr++ =
1605                                     cpu_to_le32(pci_dma_hi32
1606                                         (sg_dma_address
1607                                         (prm->sg)));
1608                         }
1609                         *dword_ptr++ = cpu_to_le32(sg_dma_len(prm->sg));
1610
1611                         ql_dbg(ql_dbg_tgt, vha, 0xe00d,
1612                             "S/G Segment Cont. phys_addr=%llx:%llx, len=%d\n",
1613                             (long long unsigned int)
1614                             pci_dma_hi32(sg_dma_address(prm->sg)),
1615                             (long long unsigned int)
1616                             pci_dma_lo32(sg_dma_address(prm->sg)),
1617                             (int)sg_dma_len(prm->sg));
1618
1619                         prm->sg = sg_next(prm->sg);
1620                 }
1621         }
1622 }
1623
1624 /*
1625  * ha->hardware_lock supposed to be held on entry. We have already made sure
1626  * that there is sufficient amount of request entries to not drop it.
1627  */
1628 static void qlt_load_data_segments(struct qla_tgt_prm *prm,
1629         struct scsi_qla_host *vha)
1630 {
1631         int cnt;
1632         uint32_t *dword_ptr;
1633         int enable_64bit_addressing = prm->tgt->tgt_enable_64bit_addr;
1634         struct ctio7_to_24xx *pkt24 = (struct ctio7_to_24xx *)prm->pkt;
1635
1636         ql_dbg(ql_dbg_tgt, vha, 0xe00e,
1637             "iocb->scsi_status=%x, iocb->flags=%x\n",
1638             le16_to_cpu(pkt24->u.status0.scsi_status),
1639             le16_to_cpu(pkt24->u.status0.flags));
1640
1641         pkt24->u.status0.transfer_length = cpu_to_le32(prm->cmd->bufflen);
1642
1643         /* Setup packet address segment pointer */
1644         dword_ptr = pkt24->u.status0.dseg_0_address;
1645
1646         /* Set total data segment count */
1647         if (prm->seg_cnt)
1648                 pkt24->dseg_count = cpu_to_le16(prm->seg_cnt);
1649
1650         if (prm->seg_cnt == 0) {
1651                 /* No data transfer */
1652                 *dword_ptr++ = 0;
1653                 *dword_ptr = 0;
1654                 return;
1655         }
1656
1657         /* If scatter gather */
1658         ql_dbg(ql_dbg_tgt, vha, 0xe00f, "%s", "Building S/G data segments...");
1659
1660         /* Load command entry data segments */
1661         for (cnt = 0;
1662             (cnt < prm->tgt->datasegs_per_cmd) && prm->seg_cnt;
1663             cnt++, prm->seg_cnt--) {
1664                 *dword_ptr++ =
1665                     cpu_to_le32(pci_dma_lo32(sg_dma_address(prm->sg)));
1666                 if (enable_64bit_addressing) {
1667                         *dword_ptr++ =
1668                             cpu_to_le32(pci_dma_hi32(
1669                                 sg_dma_address(prm->sg)));
1670                 }
1671                 *dword_ptr++ = cpu_to_le32(sg_dma_len(prm->sg));
1672
1673                 ql_dbg(ql_dbg_tgt, vha, 0xe010,
1674                     "S/G Segment phys_addr=%llx:%llx, len=%d\n",
1675                     (long long unsigned int)pci_dma_hi32(sg_dma_address(
1676                     prm->sg)),
1677                     (long long unsigned int)pci_dma_lo32(sg_dma_address(
1678                     prm->sg)),
1679                     (int)sg_dma_len(prm->sg));
1680
1681                 prm->sg = sg_next(prm->sg);
1682         }
1683
1684         qlt_load_cont_data_segments(prm, vha);
1685 }
1686
1687 static inline int qlt_has_data(struct qla_tgt_cmd *cmd)
1688 {
1689         return cmd->bufflen > 0;
1690 }
1691
1692 /*
1693  * Called without ha->hardware_lock held
1694  */
1695 static int qlt_pre_xmit_response(struct qla_tgt_cmd *cmd,
1696         struct qla_tgt_prm *prm, int xmit_type, uint8_t scsi_status,
1697         uint32_t *full_req_cnt)
1698 {
1699         struct qla_tgt *tgt = cmd->tgt;
1700         struct scsi_qla_host *vha = tgt->vha;
1701         struct qla_hw_data *ha = vha->hw;
1702         struct se_cmd *se_cmd = &cmd->se_cmd;
1703
1704         if (unlikely(cmd->aborted)) {
1705                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf014,
1706                     "qla_target(%d): terminating exchange "
1707                     "for aborted cmd=%p (se_cmd=%p, tag=%d)", vha->vp_idx, cmd,
1708                     se_cmd, cmd->tag);
1709
1710                 cmd->state = QLA_TGT_STATE_ABORTED;
1711
1712                 qlt_send_term_exchange(vha, cmd, &cmd->atio, 0);
1713
1714                 /* !! At this point cmd could be already freed !! */
1715                 return QLA_TGT_PRE_XMIT_RESP_CMD_ABORTED;
1716         }
1717
1718         ql_dbg(ql_dbg_tgt, vha, 0xe011, "qla_target(%d): tag=%u ox_id %04x\n",
1719                 vha->vp_idx, cmd->tag,
1720                 be16_to_cpu(cmd->atio.u.isp24.fcp_hdr.ox_id));
1721
1722         prm->cmd = cmd;
1723         prm->tgt = tgt;
1724         prm->rq_result = scsi_status;
1725         prm->sense_buffer = &cmd->sense_buffer[0];
1726         prm->sense_buffer_len = TRANSPORT_SENSE_BUFFER;
1727         prm->sg = NULL;
1728         prm->seg_cnt = -1;
1729         prm->req_cnt = 1;
1730         prm->add_status_pkt = 0;
1731
1732         ql_dbg(ql_dbg_tgt, vha, 0xe012, "rq_result=%x, xmit_type=%x\n",
1733             prm->rq_result, xmit_type);
1734
1735         /* Send marker if required */
1736         if (qlt_issue_marker(vha, 0) != QLA_SUCCESS)
1737                 return -EFAULT;
1738
1739         ql_dbg(ql_dbg_tgt, vha, 0xe013, "CTIO start: vha(%d)\n", vha->vp_idx);
1740
1741         if ((xmit_type & QLA_TGT_XMIT_DATA) && qlt_has_data(cmd)) {
1742                 if  (qlt_pci_map_calc_cnt(prm) != 0)
1743                         return -EAGAIN;
1744         }
1745
1746         *full_req_cnt = prm->req_cnt;
1747
1748         if (se_cmd->se_cmd_flags & SCF_UNDERFLOW_BIT) {
1749                 prm->residual = se_cmd->residual_count;
1750                 ql_dbg(ql_dbg_tgt, vha, 0xe014,
1751                     "Residual underflow: %d (tag %d, "
1752                     "op %x, bufflen %d, rq_result %x)\n", prm->residual,
1753                     cmd->tag, se_cmd->t_task_cdb ? se_cmd->t_task_cdb[0] : 0,
1754                     cmd->bufflen, prm->rq_result);
1755                 prm->rq_result |= SS_RESIDUAL_UNDER;
1756         } else if (se_cmd->se_cmd_flags & SCF_OVERFLOW_BIT) {
1757                 prm->residual = se_cmd->residual_count;
1758                 ql_dbg(ql_dbg_tgt, vha, 0xe015,
1759                     "Residual overflow: %d (tag %d, "
1760                     "op %x, bufflen %d, rq_result %x)\n", prm->residual,
1761                     cmd->tag, se_cmd->t_task_cdb ? se_cmd->t_task_cdb[0] : 0,
1762                     cmd->bufflen, prm->rq_result);
1763                 prm->rq_result |= SS_RESIDUAL_OVER;
1764         }
1765
1766         if (xmit_type & QLA_TGT_XMIT_STATUS) {
1767                 /*
1768                  * If QLA_TGT_XMIT_DATA is not set, add_status_pkt will be
1769                  * ignored in *xmit_response() below
1770                  */
1771                 if (qlt_has_data(cmd)) {
1772                         if (QLA_TGT_SENSE_VALID(prm->sense_buffer) ||
1773                             (IS_FWI2_CAPABLE(ha) &&
1774                             (prm->rq_result != 0))) {
1775                                 prm->add_status_pkt = 1;
1776                                 (*full_req_cnt)++;
1777                         }
1778                 }
1779         }
1780
1781         ql_dbg(ql_dbg_tgt, vha, 0xe016,
1782             "req_cnt=%d, full_req_cnt=%d, add_status_pkt=%d\n",
1783             prm->req_cnt, *full_req_cnt, prm->add_status_pkt);
1784
1785         return 0;
1786 }
1787
1788 static inline int qlt_need_explicit_conf(struct qla_hw_data *ha,
1789         struct qla_tgt_cmd *cmd, int sending_sense)
1790 {
1791         if (ha->tgt.enable_class_2)
1792                 return 0;
1793
1794         if (sending_sense)
1795                 return cmd->conf_compl_supported;
1796         else
1797                 return ha->tgt.enable_explicit_conf &&
1798                     cmd->conf_compl_supported;
1799 }
1800
1801 #ifdef CONFIG_QLA_TGT_DEBUG_SRR
1802 /*
1803  *  Original taken from the XFS code
1804  */
1805 static unsigned long qlt_srr_random(void)
1806 {
1807         static int Inited;
1808         static unsigned long RandomValue;
1809         static DEFINE_SPINLOCK(lock);
1810         /* cycles pseudo-randomly through all values between 1 and 2^31 - 2 */
1811         register long rv;
1812         register long lo;
1813         register long hi;
1814         unsigned long flags;
1815
1816         spin_lock_irqsave(&lock, flags);
1817         if (!Inited) {
1818                 RandomValue = jiffies;
1819                 Inited = 1;
1820         }
1821         rv = RandomValue;
1822         hi = rv / 127773;
1823         lo = rv % 127773;
1824         rv = 16807 * lo - 2836 * hi;
1825         if (rv <= 0)
1826                 rv += 2147483647;
1827         RandomValue = rv;
1828         spin_unlock_irqrestore(&lock, flags);
1829         return rv;
1830 }
1831
1832 static void qlt_check_srr_debug(struct qla_tgt_cmd *cmd, int *xmit_type)
1833 {
1834 #if 0 /* This is not a real status packets lost, so it won't lead to SRR */
1835         if ((*xmit_type & QLA_TGT_XMIT_STATUS) && (qlt_srr_random() % 200)
1836             == 50) {
1837                 *xmit_type &= ~QLA_TGT_XMIT_STATUS;
1838                 ql_dbg(ql_dbg_tgt_mgt, cmd->vha, 0xf015,
1839                     "Dropping cmd %p (tag %d) status", cmd, cmd->tag);
1840         }
1841 #endif
1842         /*
1843          * It's currently not possible to simulate SRRs for FCP_WRITE without
1844          * a physical link layer failure, so don't even try here..
1845          */
1846         if (cmd->dma_data_direction != DMA_FROM_DEVICE)
1847                 return;
1848
1849         if (qlt_has_data(cmd) && (cmd->sg_cnt > 1) &&
1850             ((qlt_srr_random() % 100) == 20)) {
1851                 int i, leave = 0;
1852                 unsigned int tot_len = 0;
1853
1854                 while (leave == 0)
1855                         leave = qlt_srr_random() % cmd->sg_cnt;
1856
1857                 for (i = 0; i < leave; i++)
1858                         tot_len += cmd->sg[i].length;
1859
1860                 ql_dbg(ql_dbg_tgt_mgt, cmd->vha, 0xf016,
1861                     "Cutting cmd %p (tag %d) buffer"
1862                     " tail to len %d, sg_cnt %d (cmd->bufflen %d,"
1863                     " cmd->sg_cnt %d)", cmd, cmd->tag, tot_len, leave,
1864                     cmd->bufflen, cmd->sg_cnt);
1865
1866                 cmd->bufflen = tot_len;
1867                 cmd->sg_cnt = leave;
1868         }
1869
1870         if (qlt_has_data(cmd) && ((qlt_srr_random() % 100) == 70)) {
1871                 unsigned int offset = qlt_srr_random() % cmd->bufflen;
1872
1873                 ql_dbg(ql_dbg_tgt_mgt, cmd->vha, 0xf017,
1874                     "Cutting cmd %p (tag %d) buffer head "
1875                     "to offset %d (cmd->bufflen %d)", cmd, cmd->tag, offset,
1876                     cmd->bufflen);
1877                 if (offset == 0)
1878                         *xmit_type &= ~QLA_TGT_XMIT_DATA;
1879                 else if (qlt_set_data_offset(cmd, offset)) {
1880                         ql_dbg(ql_dbg_tgt_mgt, cmd->vha, 0xf018,
1881                             "qlt_set_data_offset() failed (tag %d)", cmd->tag);
1882                 }
1883         }
1884 }
1885 #else
1886 static inline void qlt_check_srr_debug(struct qla_tgt_cmd *cmd, int *xmit_type)
1887 {}
1888 #endif
1889
1890 static void qlt_24xx_init_ctio_to_isp(struct ctio7_to_24xx *ctio,
1891         struct qla_tgt_prm *prm)
1892 {
1893         prm->sense_buffer_len = min_t(uint32_t, prm->sense_buffer_len,
1894             (uint32_t)sizeof(ctio->u.status1.sense_data));
1895         ctio->u.status0.flags |=
1896             __constant_cpu_to_le16(CTIO7_FLAGS_SEND_STATUS);
1897         if (qlt_need_explicit_conf(prm->tgt->ha, prm->cmd, 0)) {
1898                 ctio->u.status0.flags |= __constant_cpu_to_le16(
1899                     CTIO7_FLAGS_EXPLICIT_CONFORM |
1900                     CTIO7_FLAGS_CONFORM_REQ);
1901         }
1902         ctio->u.status0.residual = cpu_to_le32(prm->residual);
1903         ctio->u.status0.scsi_status = cpu_to_le16(prm->rq_result);
1904         if (QLA_TGT_SENSE_VALID(prm->sense_buffer)) {
1905                 int i;
1906
1907                 if (qlt_need_explicit_conf(prm->tgt->ha, prm->cmd, 1)) {
1908                         if (prm->cmd->se_cmd.scsi_status != 0) {
1909                                 ql_dbg(ql_dbg_tgt, prm->cmd->vha, 0xe017,
1910                                     "Skipping EXPLICIT_CONFORM and "
1911                                     "CTIO7_FLAGS_CONFORM_REQ for FCP READ w/ "
1912                                     "non GOOD status\n");
1913                                 goto skip_explict_conf;
1914                         }
1915                         ctio->u.status1.flags |= __constant_cpu_to_le16(
1916                             CTIO7_FLAGS_EXPLICIT_CONFORM |
1917                             CTIO7_FLAGS_CONFORM_REQ);
1918                 }
1919 skip_explict_conf:
1920                 ctio->u.status1.flags &=
1921                     ~__constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_0);
1922                 ctio->u.status1.flags |=
1923                     __constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_1);
1924                 ctio->u.status1.scsi_status |=
1925                     __constant_cpu_to_le16(SS_SENSE_LEN_VALID);
1926                 ctio->u.status1.sense_length =
1927                     cpu_to_le16(prm->sense_buffer_len);
1928                 for (i = 0; i < prm->sense_buffer_len/4; i++)
1929                         ((uint32_t *)ctio->u.status1.sense_data)[i] =
1930                                 cpu_to_be32(((uint32_t *)prm->sense_buffer)[i]);
1931 #if 0
1932                 if (unlikely((prm->sense_buffer_len % 4) != 0)) {
1933                         static int q;
1934                         if (q < 10) {
1935                                 ql_dbg(ql_dbg_tgt, vha, 0xe04f,
1936                                     "qla_target(%d): %d bytes of sense "
1937                                     "lost", prm->tgt->ha->vp_idx,
1938                                     prm->sense_buffer_len % 4);
1939                                 q++;
1940                         }
1941                 }
1942 #endif
1943         } else {
1944                 ctio->u.status1.flags &=
1945                     ~__constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_0);
1946                 ctio->u.status1.flags |=
1947                     __constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_1);
1948                 ctio->u.status1.sense_length = 0;
1949                 memset(ctio->u.status1.sense_data, 0,
1950                     sizeof(ctio->u.status1.sense_data));
1951         }
1952
1953         /* Sense with len > 24, is it possible ??? */
1954 }
1955
1956
1957
1958 /* diff  */
1959 static inline int
1960 qlt_hba_err_chk_enabled(struct se_cmd *se_cmd)
1961 {
1962         /*
1963          * Uncomment when corresponding SCSI changes are done.
1964          *
1965          if (!sp->cmd->prot_chk)
1966          return 0;
1967          *
1968          */
1969         switch (se_cmd->prot_op) {
1970         case TARGET_PROT_DOUT_INSERT:
1971         case TARGET_PROT_DIN_STRIP:
1972                 if (ql2xenablehba_err_chk >= 1)
1973                         return 1;
1974                 break;
1975         case TARGET_PROT_DOUT_PASS:
1976         case TARGET_PROT_DIN_PASS:
1977                 if (ql2xenablehba_err_chk >= 2)
1978                         return 1;
1979                 break;
1980         case TARGET_PROT_DIN_INSERT:
1981         case TARGET_PROT_DOUT_STRIP:
1982                 return 1;
1983         default:
1984                 break;
1985         }
1986         return 0;
1987 }
1988
1989 /*
1990  * qla24xx_set_t10dif_tags_from_cmd - Extract Ref and App tags from SCSI command
1991  *
1992  */
1993 static inline void
1994 qlt_set_t10dif_tags(struct se_cmd *se_cmd, struct crc_context *ctx)
1995 {
1996         uint32_t lba = 0xffffffff & se_cmd->t_task_lba;
1997
1998         /* wait til Mode Sense/Select cmd, modepage Ah, subpage 2
1999          * have been immplemented by TCM, before AppTag is avail.
2000          * Look for modesense_handlers[]
2001          */
2002         ctx->app_tag = 0;
2003         ctx->app_tag_mask[0] = 0x0;
2004         ctx->app_tag_mask[1] = 0x0;
2005
2006         switch (se_cmd->prot_type) {
2007         case TARGET_DIF_TYPE0_PROT:
2008                 /*
2009                  * No check for ql2xenablehba_err_chk, as it would be an
2010                  * I/O error if hba tag generation is not done.
2011                  */
2012                 ctx->ref_tag = cpu_to_le32(lba);
2013
2014                 if (!qlt_hba_err_chk_enabled(se_cmd))
2015                         break;
2016
2017                 /* enable ALL bytes of the ref tag */
2018                 ctx->ref_tag_mask[0] = 0xff;
2019                 ctx->ref_tag_mask[1] = 0xff;
2020                 ctx->ref_tag_mask[2] = 0xff;
2021                 ctx->ref_tag_mask[3] = 0xff;
2022                 break;
2023         /*
2024          * For TYpe 1 protection: 16 bit GUARD tag, 32 bit REF tag, and
2025          * 16 bit app tag.
2026          */
2027         case TARGET_DIF_TYPE1_PROT:
2028                 ctx->ref_tag = cpu_to_le32(lba);
2029
2030                 if (!qlt_hba_err_chk_enabled(se_cmd))
2031                         break;
2032
2033                 /* enable ALL bytes of the ref tag */
2034                 ctx->ref_tag_mask[0] = 0xff;
2035                 ctx->ref_tag_mask[1] = 0xff;
2036                 ctx->ref_tag_mask[2] = 0xff;
2037                 ctx->ref_tag_mask[3] = 0xff;
2038                 break;
2039         /*
2040          * For TYPE 2 protection: 16 bit GUARD + 32 bit REF tag has to
2041          * match LBA in CDB + N
2042          */
2043         case TARGET_DIF_TYPE2_PROT:
2044                 ctx->ref_tag = cpu_to_le32(lba);
2045
2046                 if (!qlt_hba_err_chk_enabled(se_cmd))
2047                         break;
2048
2049                 /* enable ALL bytes of the ref tag */
2050                 ctx->ref_tag_mask[0] = 0xff;
2051                 ctx->ref_tag_mask[1] = 0xff;
2052                 ctx->ref_tag_mask[2] = 0xff;
2053                 ctx->ref_tag_mask[3] = 0xff;
2054                 break;
2055
2056         /* For Type 3 protection: 16 bit GUARD only */
2057         case TARGET_DIF_TYPE3_PROT:
2058                 ctx->ref_tag_mask[0] = ctx->ref_tag_mask[1] =
2059                         ctx->ref_tag_mask[2] = ctx->ref_tag_mask[3] = 0x00;
2060                 break;
2061         }
2062 }
2063
2064
2065 static inline int
2066 qlt_build_ctio_crc2_pkt(struct qla_tgt_prm *prm, scsi_qla_host_t *vha)
2067 {
2068         uint32_t                *cur_dsd;
2069         int                     sgc;
2070         uint32_t                transfer_length = 0;
2071         uint32_t                data_bytes;
2072         uint32_t                dif_bytes;
2073         uint8_t                 bundling = 1;
2074         uint8_t                 *clr_ptr;
2075         struct crc_context      *crc_ctx_pkt = NULL;
2076         struct qla_hw_data      *ha;
2077         struct ctio_crc2_to_fw  *pkt;
2078         dma_addr_t              crc_ctx_dma;
2079         uint16_t                fw_prot_opts = 0;
2080         struct qla_tgt_cmd      *cmd = prm->cmd;
2081         struct se_cmd           *se_cmd = &cmd->se_cmd;
2082         uint32_t h;
2083         struct atio_from_isp *atio = &prm->cmd->atio;
2084         uint16_t t16;
2085
2086         sgc = 0;
2087         ha = vha->hw;
2088
2089         pkt = (struct ctio_crc2_to_fw *)vha->req->ring_ptr;
2090         prm->pkt = pkt;
2091         memset(pkt, 0, sizeof(*pkt));
2092
2093         ql_dbg(ql_dbg_tgt, vha, 0xe071,
2094                 "qla_target(%d):%s: se_cmd[%p] CRC2 prot_op[0x%x] cmd prot sg:cnt[%p:%x] lba[%llu]\n",
2095                 vha->vp_idx, __func__, se_cmd, se_cmd->prot_op,
2096                 prm->prot_sg, prm->prot_seg_cnt, se_cmd->t_task_lba);
2097
2098         if ((se_cmd->prot_op == TARGET_PROT_DIN_INSERT) ||
2099             (se_cmd->prot_op == TARGET_PROT_DOUT_STRIP))
2100                 bundling = 0;
2101
2102         /* Compute dif len and adjust data len to incude protection */
2103         data_bytes = cmd->bufflen;
2104         dif_bytes  = (data_bytes / cmd->blk_sz) * 8;
2105
2106         switch (se_cmd->prot_op) {
2107         case TARGET_PROT_DIN_INSERT:
2108         case TARGET_PROT_DOUT_STRIP:
2109                 transfer_length = data_bytes;
2110                 data_bytes += dif_bytes;
2111                 break;
2112
2113         case TARGET_PROT_DIN_STRIP:
2114         case TARGET_PROT_DOUT_INSERT:
2115         case TARGET_PROT_DIN_PASS:
2116         case TARGET_PROT_DOUT_PASS:
2117                 transfer_length = data_bytes + dif_bytes;
2118                 break;
2119
2120         default:
2121                 BUG();
2122                 break;
2123         }
2124
2125         if (!qlt_hba_err_chk_enabled(se_cmd))
2126                 fw_prot_opts |= 0x10; /* Disable Guard tag checking */
2127         /* HBA error checking enabled */
2128         else if (IS_PI_UNINIT_CAPABLE(ha)) {
2129                 if ((se_cmd->prot_type == TARGET_DIF_TYPE1_PROT) ||
2130                     (se_cmd->prot_type == TARGET_DIF_TYPE2_PROT))
2131                         fw_prot_opts |= PO_DIS_VALD_APP_ESC;
2132                 else if (se_cmd->prot_type == TARGET_DIF_TYPE3_PROT)
2133                         fw_prot_opts |= PO_DIS_VALD_APP_REF_ESC;
2134         }
2135
2136         switch (se_cmd->prot_op) {
2137         case TARGET_PROT_DIN_INSERT:
2138         case TARGET_PROT_DOUT_INSERT:
2139                 fw_prot_opts |= PO_MODE_DIF_INSERT;
2140                 break;
2141         case TARGET_PROT_DIN_STRIP:
2142         case TARGET_PROT_DOUT_STRIP:
2143                 fw_prot_opts |= PO_MODE_DIF_REMOVE;
2144                 break;
2145         case TARGET_PROT_DIN_PASS:
2146         case TARGET_PROT_DOUT_PASS:
2147                 fw_prot_opts |= PO_MODE_DIF_PASS;
2148                 /* FUTURE: does tcm require T10CRC<->IPCKSUM conversion? */
2149                 break;
2150         default:/* Normal Request */
2151                 fw_prot_opts |= PO_MODE_DIF_PASS;
2152                 break;
2153         }
2154
2155
2156         /* ---- PKT ---- */
2157         /* Update entry type to indicate Command Type CRC_2 IOCB */
2158         pkt->entry_type  = CTIO_CRC2;
2159         pkt->entry_count = 1;
2160         pkt->vp_index = vha->vp_idx;
2161
2162         h = qlt_make_handle(vha);
2163         if (unlikely(h == QLA_TGT_NULL_HANDLE)) {
2164                 /*
2165                  * CTIO type 7 from the firmware doesn't provide a way to
2166                  * know the initiator's LOOP ID, hence we can't find
2167                  * the session and, so, the command.
2168                  */
2169                 return -EAGAIN;
2170         } else
2171                 ha->tgt.cmds[h-1] = prm->cmd;
2172
2173
2174         pkt->handle  = h | CTIO_COMPLETION_HANDLE_MARK;
2175         pkt->nport_handle = prm->cmd->loop_id;
2176         pkt->timeout = __constant_cpu_to_le16(QLA_TGT_TIMEOUT);
2177         pkt->initiator_id[0] = atio->u.isp24.fcp_hdr.s_id[2];
2178         pkt->initiator_id[1] = atio->u.isp24.fcp_hdr.s_id[1];
2179         pkt->initiator_id[2] = atio->u.isp24.fcp_hdr.s_id[0];
2180         pkt->exchange_addr   = atio->u.isp24.exchange_addr;
2181
2182         /* silence compile warning */
2183         t16 = be16_to_cpu(atio->u.isp24.fcp_hdr.ox_id);
2184         pkt->ox_id  = cpu_to_le16(t16);
2185
2186         t16 = (atio->u.isp24.attr << 9);
2187         pkt->flags |= cpu_to_le16(t16);
2188         pkt->relative_offset = cpu_to_le32(prm->cmd->offset);
2189
2190         /* Set transfer direction */
2191         if (cmd->dma_data_direction == DMA_TO_DEVICE)
2192                 pkt->flags = __constant_cpu_to_le16(CTIO7_FLAGS_DATA_IN);
2193         else if (cmd->dma_data_direction == DMA_FROM_DEVICE)
2194                 pkt->flags = __constant_cpu_to_le16(CTIO7_FLAGS_DATA_OUT);
2195
2196
2197         pkt->dseg_count = prm->tot_dsds;
2198         /* Fibre channel byte count */
2199         pkt->transfer_length = cpu_to_le32(transfer_length);
2200
2201
2202         /* ----- CRC context -------- */
2203
2204         /* Allocate CRC context from global pool */
2205         crc_ctx_pkt = cmd->ctx =
2206             dma_pool_alloc(ha->dl_dma_pool, GFP_ATOMIC, &crc_ctx_dma);
2207
2208         if (!crc_ctx_pkt)
2209                 goto crc_queuing_error;
2210
2211         /* Zero out CTX area. */
2212         clr_ptr = (uint8_t *)crc_ctx_pkt;
2213         memset(clr_ptr, 0, sizeof(*crc_ctx_pkt));
2214
2215         crc_ctx_pkt->crc_ctx_dma = crc_ctx_dma;
2216         INIT_LIST_HEAD(&crc_ctx_pkt->dsd_list);
2217
2218         /* Set handle */
2219         crc_ctx_pkt->handle = pkt->handle;
2220
2221         qlt_set_t10dif_tags(se_cmd, crc_ctx_pkt);
2222
2223         pkt->crc_context_address[0] = cpu_to_le32(LSD(crc_ctx_dma));
2224         pkt->crc_context_address[1] = cpu_to_le32(MSD(crc_ctx_dma));
2225         pkt->crc_context_len = CRC_CONTEXT_LEN_FW;
2226
2227
2228         if (!bundling) {
2229                 cur_dsd = (uint32_t *) &crc_ctx_pkt->u.nobundling.data_address;
2230         } else {
2231                 /*
2232                  * Configure Bundling if we need to fetch interlaving
2233                  * protection PCI accesses
2234                  */
2235                 fw_prot_opts |= PO_ENABLE_DIF_BUNDLING;
2236                 crc_ctx_pkt->u.bundling.dif_byte_count = cpu_to_le32(dif_bytes);
2237                 crc_ctx_pkt->u.bundling.dseg_count =
2238                         cpu_to_le16(prm->tot_dsds - prm->prot_seg_cnt);
2239                 cur_dsd = (uint32_t *) &crc_ctx_pkt->u.bundling.data_address;
2240         }
2241
2242         /* Finish the common fields of CRC pkt */
2243         crc_ctx_pkt->blk_size   = cpu_to_le16(cmd->blk_sz);
2244         crc_ctx_pkt->prot_opts  = cpu_to_le16(fw_prot_opts);
2245         crc_ctx_pkt->byte_count = cpu_to_le32(data_bytes);
2246         crc_ctx_pkt->guard_seed = __constant_cpu_to_le16(0);
2247
2248
2249         /* Walks data segments */
2250         pkt->flags |= __constant_cpu_to_le16(CTIO7_FLAGS_DSD_PTR);
2251
2252         if (!bundling && prm->prot_seg_cnt) {
2253                 if (qla24xx_walk_and_build_sglist_no_difb(ha, NULL, cur_dsd,
2254                         prm->tot_dsds, cmd))
2255                         goto crc_queuing_error;
2256         } else if (qla24xx_walk_and_build_sglist(ha, NULL, cur_dsd,
2257                 (prm->tot_dsds - prm->prot_seg_cnt), cmd))
2258                 goto crc_queuing_error;
2259
2260         if (bundling && prm->prot_seg_cnt) {
2261                 /* Walks dif segments */
2262                 pkt->add_flags |= CTIO_CRC2_AF_DIF_DSD_ENA;
2263
2264                 cur_dsd = (uint32_t *) &crc_ctx_pkt->u.bundling.dif_address;
2265                 if (qla24xx_walk_and_build_prot_sglist(ha, NULL, cur_dsd,
2266                         prm->prot_seg_cnt, cmd))
2267                         goto crc_queuing_error;
2268         }
2269         return QLA_SUCCESS;
2270
2271 crc_queuing_error:
2272         /* Cleanup will be performed by the caller */
2273
2274         return QLA_FUNCTION_FAILED;
2275 }
2276
2277
2278 /*
2279  * Callback to setup response of xmit_type of QLA_TGT_XMIT_DATA and *
2280  * QLA_TGT_XMIT_STATUS for >= 24xx silicon
2281  */
2282 int qlt_xmit_response(struct qla_tgt_cmd *cmd, int xmit_type,
2283         uint8_t scsi_status)
2284 {
2285         struct scsi_qla_host *vha = cmd->vha;
2286         struct qla_hw_data *ha = vha->hw;
2287         struct ctio7_to_24xx *pkt;
2288         struct qla_tgt_prm prm;
2289         uint32_t full_req_cnt = 0;
2290         unsigned long flags = 0;
2291         int res;
2292
2293         memset(&prm, 0, sizeof(prm));
2294         qlt_check_srr_debug(cmd, &xmit_type);
2295
2296         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe018,
2297             "is_send_status=%d, cmd->bufflen=%d, cmd->sg_cnt=%d, cmd->dma_data_direction=%d se_cmd[%p]\n",
2298             (xmit_type & QLA_TGT_XMIT_STATUS) ?
2299             1 : 0, cmd->bufflen, cmd->sg_cnt, cmd->dma_data_direction,
2300             &cmd->se_cmd);
2301
2302         res = qlt_pre_xmit_response(cmd, &prm, xmit_type, scsi_status,
2303             &full_req_cnt);
2304         if (unlikely(res != 0)) {
2305                 if (res == QLA_TGT_PRE_XMIT_RESP_CMD_ABORTED)
2306                         return 0;
2307
2308                 return res;
2309         }
2310
2311         spin_lock_irqsave(&ha->hardware_lock, flags);
2312
2313         /* Does F/W have an IOCBs for this request */
2314         res = qlt_check_reserve_free_req(vha, full_req_cnt);
2315         if (unlikely(res))
2316                 goto out_unmap_unlock;
2317
2318         if (cmd->se_cmd.prot_op && (xmit_type & QLA_TGT_XMIT_DATA))
2319                 res = qlt_build_ctio_crc2_pkt(&prm, vha);
2320         else
2321                 res = qlt_24xx_build_ctio_pkt(&prm, vha);
2322         if (unlikely(res != 0))
2323                 goto out_unmap_unlock;
2324
2325
2326         pkt = (struct ctio7_to_24xx *)prm.pkt;
2327
2328         if (qlt_has_data(cmd) && (xmit_type & QLA_TGT_XMIT_DATA)) {
2329                 pkt->u.status0.flags |=
2330                     __constant_cpu_to_le16(CTIO7_FLAGS_DATA_IN |
2331                         CTIO7_FLAGS_STATUS_MODE_0);
2332
2333                 if (cmd->se_cmd.prot_op == TARGET_PROT_NORMAL)
2334                         qlt_load_data_segments(&prm, vha);
2335
2336                 if (prm.add_status_pkt == 0) {
2337                         if (xmit_type & QLA_TGT_XMIT_STATUS) {
2338                                 pkt->u.status0.scsi_status =
2339                                     cpu_to_le16(prm.rq_result);
2340                                 pkt->u.status0.residual =
2341                                     cpu_to_le32(prm.residual);
2342                                 pkt->u.status0.flags |= __constant_cpu_to_le16(
2343                                     CTIO7_FLAGS_SEND_STATUS);
2344                                 if (qlt_need_explicit_conf(ha, cmd, 0)) {
2345                                         pkt->u.status0.flags |=
2346                                             __constant_cpu_to_le16(
2347                                                 CTIO7_FLAGS_EXPLICIT_CONFORM |
2348                                                 CTIO7_FLAGS_CONFORM_REQ);
2349                                 }
2350                         }
2351
2352                 } else {
2353                         /*
2354                          * We have already made sure that there is sufficient
2355                          * amount of request entries to not drop HW lock in
2356                          * req_pkt().
2357                          */
2358                         struct ctio7_to_24xx *ctio =
2359                                 (struct ctio7_to_24xx *)qlt_get_req_pkt(vha);
2360
2361                         ql_dbg(ql_dbg_tgt, vha, 0xe019,
2362                             "Building additional status packet\n");
2363
2364                         /*
2365                          * T10Dif: ctio_crc2_to_fw overlay ontop of
2366                          * ctio7_to_24xx
2367                          */
2368                         memcpy(ctio, pkt, sizeof(*ctio));
2369                         /* reset back to CTIO7 */
2370                         ctio->entry_count = 1;
2371                         ctio->entry_type = CTIO_TYPE7;
2372                         ctio->dseg_count = 0;
2373                         ctio->u.status1.flags &= ~__constant_cpu_to_le16(
2374                             CTIO7_FLAGS_DATA_IN);
2375
2376                         /* Real finish is ctio_m1's finish */
2377                         pkt->handle |= CTIO_INTERMEDIATE_HANDLE_MARK;
2378                         pkt->u.status0.flags |= __constant_cpu_to_le16(
2379                             CTIO7_FLAGS_DONT_RET_CTIO);
2380
2381                         /* qlt_24xx_init_ctio_to_isp will correct
2382                          * all neccessary fields that's part of CTIO7.
2383                          * There should be no residual of CTIO-CRC2 data.
2384                          */
2385                         qlt_24xx_init_ctio_to_isp((struct ctio7_to_24xx *)ctio,
2386                             &prm);
2387                         pr_debug("Status CTIO7: %p\n", ctio);
2388                 }
2389         } else
2390                 qlt_24xx_init_ctio_to_isp(pkt, &prm);
2391
2392
2393         cmd->state = QLA_TGT_STATE_PROCESSED; /* Mid-level is done processing */
2394
2395         ql_dbg(ql_dbg_tgt, vha, 0xe01a,
2396             "Xmitting CTIO7 response pkt for 24xx: %p scsi_status: 0x%02x\n",
2397             pkt, scsi_status);
2398
2399         qla2x00_start_iocbs(vha, vha->req);
2400         spin_unlock_irqrestore(&ha->hardware_lock, flags);
2401
2402         return 0;
2403
2404 out_unmap_unlock:
2405         if (cmd->sg_mapped)
2406                 qlt_unmap_sg(vha, cmd);
2407         spin_unlock_irqrestore(&ha->hardware_lock, flags);
2408
2409         return res;
2410 }
2411 EXPORT_SYMBOL(qlt_xmit_response);
2412
2413 int qlt_rdy_to_xfer(struct qla_tgt_cmd *cmd)
2414 {
2415         struct ctio7_to_24xx *pkt;
2416         struct scsi_qla_host *vha = cmd->vha;
2417         struct qla_hw_data *ha = vha->hw;
2418         struct qla_tgt *tgt = cmd->tgt;
2419         struct qla_tgt_prm prm;
2420         unsigned long flags;
2421         int res = 0;
2422
2423         memset(&prm, 0, sizeof(prm));
2424         prm.cmd = cmd;
2425         prm.tgt = tgt;
2426         prm.sg = NULL;
2427         prm.req_cnt = 1;
2428
2429         /* Send marker if required */
2430         if (qlt_issue_marker(vha, 0) != QLA_SUCCESS)
2431                 return -EIO;
2432
2433         ql_dbg(ql_dbg_tgt, vha, 0xe01b,
2434                 "%s: CTIO_start: vha(%d) se_cmd %p ox_id %04x\n",
2435                 __func__, (int)vha->vp_idx, &cmd->se_cmd,
2436                 be16_to_cpu(cmd->atio.u.isp24.fcp_hdr.ox_id));
2437
2438         /* Calculate number of entries and segments required */
2439         if (qlt_pci_map_calc_cnt(&prm) != 0)
2440                 return -EAGAIN;
2441
2442         spin_lock_irqsave(&ha->hardware_lock, flags);
2443
2444         /* Does F/W have an IOCBs for this request */
2445         res = qlt_check_reserve_free_req(vha, prm.req_cnt);
2446         if (res != 0)
2447                 goto out_unlock_free_unmap;
2448         if (cmd->se_cmd.prot_op)
2449                 res = qlt_build_ctio_crc2_pkt(&prm, vha);
2450         else
2451                 res = qlt_24xx_build_ctio_pkt(&prm, vha);
2452
2453         if (unlikely(res != 0))
2454                 goto out_unlock_free_unmap;
2455         pkt = (struct ctio7_to_24xx *)prm.pkt;
2456         pkt->u.status0.flags |= __constant_cpu_to_le16(CTIO7_FLAGS_DATA_OUT |
2457             CTIO7_FLAGS_STATUS_MODE_0);
2458
2459         if (cmd->se_cmd.prot_op == TARGET_PROT_NORMAL)
2460                 qlt_load_data_segments(&prm, vha);
2461
2462         cmd->state = QLA_TGT_STATE_NEED_DATA;
2463
2464         qla2x00_start_iocbs(vha, vha->req);
2465         spin_unlock_irqrestore(&ha->hardware_lock, flags);
2466
2467         return res;
2468
2469 out_unlock_free_unmap:
2470         if (cmd->sg_mapped)
2471                 qlt_unmap_sg(vha, cmd);
2472         spin_unlock_irqrestore(&ha->hardware_lock, flags);
2473
2474         return res;
2475 }
2476 EXPORT_SYMBOL(qlt_rdy_to_xfer);
2477
2478
2479 /*
2480  * Checks the guard or meta-data for the type of error
2481  * detected by the HBA.
2482  */
2483 static inline int
2484 qlt_handle_dif_error(struct scsi_qla_host *vha, struct qla_tgt_cmd *cmd,
2485                 struct ctio_crc_from_fw *sts)
2486 {
2487         uint8_t         *ap = &sts->actual_dif[0];
2488         uint8_t         *ep = &sts->expected_dif[0];
2489         uint32_t        e_ref_tag, a_ref_tag;
2490         uint16_t        e_app_tag, a_app_tag;
2491         uint16_t        e_guard, a_guard;
2492         uint64_t        lba = cmd->se_cmd.t_task_lba;
2493
2494         a_guard   = be16_to_cpu(*(uint16_t *)(ap + 0));
2495         a_app_tag = be16_to_cpu(*(uint16_t *)(ap + 2));
2496         a_ref_tag = be32_to_cpu(*(uint32_t *)(ap + 4));
2497
2498         e_guard   = be16_to_cpu(*(uint16_t *)(ep + 0));
2499         e_app_tag = be16_to_cpu(*(uint16_t *)(ep + 2));
2500         e_ref_tag = be32_to_cpu(*(uint32_t *)(ep + 4));
2501
2502         ql_dbg(ql_dbg_tgt, vha, 0xe075,
2503             "iocb(s) %p Returned STATUS.\n", sts);
2504
2505         ql_dbg(ql_dbg_tgt, vha, 0xf075,
2506             "dif check TGT cdb 0x%x lba 0x%llx: [Actual|Expected] Ref Tag[0x%x|0x%x], App Tag [0x%x|0x%x], Guard [0x%x|0x%x]\n",
2507             cmd->atio.u.isp24.fcp_cmnd.cdb[0], lba,
2508             a_ref_tag, e_ref_tag, a_app_tag, e_app_tag, a_guard, e_guard);
2509
2510         /*
2511          * Ignore sector if:
2512          * For type     3: ref & app tag is all 'f's
2513          * For type 0,1,2: app tag is all 'f's
2514          */
2515         if ((a_app_tag == 0xffff) &&
2516             ((cmd->se_cmd.prot_type != TARGET_DIF_TYPE3_PROT) ||
2517              (a_ref_tag == 0xffffffff))) {
2518                 uint32_t blocks_done;
2519
2520                 /* 2TB boundary case covered automatically with this */
2521                 blocks_done = e_ref_tag - (uint32_t)lba + 1;
2522                 cmd->se_cmd.bad_sector = e_ref_tag;
2523                 cmd->se_cmd.pi_err = 0;
2524                 ql_dbg(ql_dbg_tgt, vha, 0xf074,
2525                         "need to return scsi good\n");
2526
2527                 /* Update protection tag */
2528                 if (cmd->prot_sg_cnt) {
2529                         uint32_t i, j = 0, k = 0, num_ent;
2530                         struct scatterlist *sg, *sgl;
2531
2532
2533                         sgl = cmd->prot_sg;
2534
2535                         /* Patch the corresponding protection tags */
2536                         for_each_sg(sgl, sg, cmd->prot_sg_cnt, i) {
2537                                 num_ent = sg_dma_len(sg) / 8;
2538                                 if (k + num_ent < blocks_done) {
2539                                         k += num_ent;
2540                                         continue;
2541                                 }
2542                                 j = blocks_done - k - 1;
2543                                 k = blocks_done;
2544                                 break;
2545                         }
2546
2547                         if (k != blocks_done) {
2548                                 ql_log(ql_log_warn, vha, 0xf076,
2549                                     "unexpected tag values tag:lba=%u:%llu)\n",
2550                                     e_ref_tag, (unsigned long long)lba);
2551                                 goto out;
2552                         }
2553
2554 #if 0
2555                         struct sd_dif_tuple *spt;
2556                         /* TODO:
2557                          * This section came from initiator. Is it valid here?
2558                          * should ulp be override with actual val???
2559                          */
2560                         spt = page_address(sg_page(sg)) + sg->offset;
2561                         spt += j;
2562
2563                         spt->app_tag = 0xffff;
2564                         if (cmd->se_cmd.prot_type == SCSI_PROT_DIF_TYPE3)
2565                                 spt->ref_tag = 0xffffffff;
2566 #endif
2567                 }
2568
2569                 return 0;
2570         }
2571
2572         /* check guard */
2573         if (e_guard != a_guard) {
2574                 cmd->se_cmd.pi_err = TCM_LOGICAL_BLOCK_GUARD_CHECK_FAILED;
2575                 cmd->se_cmd.bad_sector = cmd->se_cmd.t_task_lba;
2576
2577                 ql_log(ql_log_warn, vha, 0xe076,
2578                     "Guard ERR: cdb 0x%x lba 0x%llx: [Actual|Expected] Ref Tag[0x%x|0x%x], App Tag [0x%x|0x%x], Guard [0x%x|0x%x] cmd=%p\n",
2579                     cmd->atio.u.isp24.fcp_cmnd.cdb[0], lba,
2580                     a_ref_tag, e_ref_tag, a_app_tag, e_app_tag,
2581                     a_guard, e_guard, cmd);
2582                 goto out;
2583         }
2584
2585         /* check ref tag */
2586         if (e_ref_tag != a_ref_tag) {
2587                 cmd->se_cmd.pi_err = TCM_LOGICAL_BLOCK_REF_TAG_CHECK_FAILED;
2588                 cmd->se_cmd.bad_sector = e_ref_tag;
2589
2590                 ql_log(ql_log_warn, vha, 0xe077,
2591                         "Ref Tag ERR: cdb 0x%x lba 0x%llx: [Actual|Expected] Ref Tag[0x%x|0x%x], App Tag [0x%x|0x%x], Guard [0x%x|0x%x] cmd=%p\n",
2592                         cmd->atio.u.isp24.fcp_cmnd.cdb[0], lba,
2593                         a_ref_tag, e_ref_tag, a_app_tag, e_app_tag,
2594                         a_guard, e_guard, cmd);
2595                 goto out;
2596         }
2597
2598         /* check appl tag */
2599         if (e_app_tag != a_app_tag) {
2600                 cmd->se_cmd.pi_err = TCM_LOGICAL_BLOCK_APP_TAG_CHECK_FAILED;
2601                 cmd->se_cmd.bad_sector = cmd->se_cmd.t_task_lba;
2602
2603                 ql_log(ql_log_warn, vha, 0xe078,
2604                         "App Tag ERR: cdb 0x%x lba 0x%llx: [Actual|Expected] Ref Tag[0x%x|0x%x], App Tag [0x%x|0x%x], Guard [0x%x|0x%x] cmd=%p\n",
2605                         cmd->atio.u.isp24.fcp_cmnd.cdb[0], lba,
2606                         a_ref_tag, e_ref_tag, a_app_tag, e_app_tag,
2607                         a_guard, e_guard, cmd);
2608                 goto out;
2609         }
2610 out:
2611         return 1;
2612 }
2613
2614
2615 /* If hardware_lock held on entry, might drop it, then reaquire */
2616 /* This function sends the appropriate CTIO to ISP 2xxx or 24xx */
2617 static int __qlt_send_term_exchange(struct scsi_qla_host *vha,
2618         struct qla_tgt_cmd *cmd,
2619         struct atio_from_isp *atio)
2620 {
2621         struct ctio7_to_24xx *ctio24;
2622         struct qla_hw_data *ha = vha->hw;
2623         request_t *pkt;
2624         int ret = 0;
2625         uint16_t temp;
2626
2627         ql_dbg(ql_dbg_tgt, vha, 0xe01c, "Sending TERM EXCH CTIO (ha=%p)\n", ha);
2628
2629         pkt = (request_t *)qla2x00_alloc_iocbs(vha, NULL);
2630         if (pkt == NULL) {
2631                 ql_dbg(ql_dbg_tgt, vha, 0xe050,
2632                     "qla_target(%d): %s failed: unable to allocate "
2633                     "request packet\n", vha->vp_idx, __func__);
2634                 return -ENOMEM;
2635         }
2636
2637         if (cmd != NULL) {
2638                 if (cmd->state < QLA_TGT_STATE_PROCESSED) {
2639                         ql_dbg(ql_dbg_tgt, vha, 0xe051,
2640                             "qla_target(%d): Terminating cmd %p with "
2641                             "incorrect state %d\n", vha->vp_idx, cmd,
2642                             cmd->state);
2643                 } else
2644                         ret = 1;
2645         }
2646
2647         pkt->entry_count = 1;
2648         pkt->handle = QLA_TGT_SKIP_HANDLE | CTIO_COMPLETION_HANDLE_MARK;
2649
2650         ctio24 = (struct ctio7_to_24xx *)pkt;
2651         ctio24->entry_type = CTIO_TYPE7;
2652         ctio24->nport_handle = cmd ? cmd->loop_id : CTIO7_NHANDLE_UNRECOGNIZED;
2653         ctio24->timeout = __constant_cpu_to_le16(QLA_TGT_TIMEOUT);
2654         ctio24->vp_index = vha->vp_idx;
2655         ctio24->initiator_id[0] = atio->u.isp24.fcp_hdr.s_id[2];
2656         ctio24->initiator_id[1] = atio->u.isp24.fcp_hdr.s_id[1];
2657         ctio24->initiator_id[2] = atio->u.isp24.fcp_hdr.s_id[0];
2658         ctio24->exchange_addr = atio->u.isp24.exchange_addr;
2659         ctio24->u.status1.flags = (atio->u.isp24.attr << 9) |
2660             __constant_cpu_to_le16(CTIO7_FLAGS_STATUS_MODE_1 |
2661                 CTIO7_FLAGS_TERMINATE);
2662         temp = be16_to_cpu(atio->u.isp24.fcp_hdr.ox_id);
2663         ctio24->u.status1.ox_id = cpu_to_le16(temp);
2664
2665         /* Most likely, it isn't needed */
2666         ctio24->u.status1.residual = get_unaligned((uint32_t *)
2667             &atio->u.isp24.fcp_cmnd.add_cdb[
2668             atio->u.isp24.fcp_cmnd.add_cdb_len]);
2669         if (ctio24->u.status1.residual != 0)
2670                 ctio24->u.status1.scsi_status |= SS_RESIDUAL_UNDER;
2671
2672         qla2x00_start_iocbs(vha, vha->req);
2673         return ret;
2674 }
2675
2676 static void qlt_send_term_exchange(struct scsi_qla_host *vha,
2677         struct qla_tgt_cmd *cmd, struct atio_from_isp *atio, int ha_locked)
2678 {
2679         unsigned long flags;
2680         int rc;
2681
2682         if (qlt_issue_marker(vha, ha_locked) < 0)
2683                 return;
2684
2685         if (ha_locked) {
2686                 rc = __qlt_send_term_exchange(vha, cmd, atio);
2687                 goto done;
2688         }
2689         spin_lock_irqsave(&vha->hw->hardware_lock, flags);
2690         rc = __qlt_send_term_exchange(vha, cmd, atio);
2691         spin_unlock_irqrestore(&vha->hw->hardware_lock, flags);
2692 done:
2693         /*
2694          * Terminate exchange will tell fw to release any active CTIO
2695          * that's in FW posession and cleanup the exchange.
2696          *
2697          * "cmd->state == QLA_TGT_STATE_ABORTED" means CTIO is still
2698          * down at FW.  Free the cmd later when CTIO comes back later
2699          * w/aborted(0x2) status.
2700          *
2701          * "cmd->state != QLA_TGT_STATE_ABORTED" means CTIO is already
2702          * back w/some err.  Free the cmd now.
2703          */
2704         if ((rc == 1) && (cmd->state != QLA_TGT_STATE_ABORTED)) {
2705                 if (!ha_locked && !in_interrupt())
2706                         msleep(250); /* just in case */
2707
2708                 if (cmd->sg_mapped)
2709                         qlt_unmap_sg(vha, cmd);
2710                 vha->hw->tgt.tgt_ops->free_cmd(cmd);
2711         }
2712         return;
2713 }
2714
2715 void qlt_free_cmd(struct qla_tgt_cmd *cmd)
2716 {
2717         struct qla_tgt_sess *sess = cmd->sess;
2718
2719         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe074,
2720             "%s: se_cmd[%p] ox_id %04x\n",
2721             __func__, &cmd->se_cmd,
2722             be16_to_cpu(cmd->atio.u.isp24.fcp_hdr.ox_id));
2723
2724         BUG_ON(cmd->sg_mapped);
2725         if (unlikely(cmd->free_sg))
2726                 kfree(cmd->sg);
2727
2728         if (!sess || !sess->se_sess) {
2729                 WARN_ON(1);
2730                 return;
2731         }
2732         percpu_ida_free(&sess->se_sess->sess_tag_pool, cmd->se_cmd.map_tag);
2733 }
2734 EXPORT_SYMBOL(qlt_free_cmd);
2735
2736 /* ha->hardware_lock supposed to be held on entry */
2737 static int qlt_prepare_srr_ctio(struct scsi_qla_host *vha,
2738         struct qla_tgt_cmd *cmd, void *ctio)
2739 {
2740         struct qla_tgt_srr_ctio *sc;
2741         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
2742         struct qla_tgt_srr_imm *imm;
2743
2744         tgt->ctio_srr_id++;
2745
2746         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf019,
2747             "qla_target(%d): CTIO with SRR status received\n", vha->vp_idx);
2748
2749         if (!ctio) {
2750                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf055,
2751                     "qla_target(%d): SRR CTIO, but ctio is NULL\n",
2752                     vha->vp_idx);
2753                 return -EINVAL;
2754         }
2755
2756         sc = kzalloc(sizeof(*sc), GFP_ATOMIC);
2757         if (sc != NULL) {
2758                 sc->cmd = cmd;
2759                 /* IRQ is already OFF */
2760                 spin_lock(&tgt->srr_lock);
2761                 sc->srr_id = tgt->ctio_srr_id;
2762                 list_add_tail(&sc->srr_list_entry,
2763                     &tgt->srr_ctio_list);
2764                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf01a,
2765                     "CTIO SRR %p added (id %d)\n", sc, sc->srr_id);
2766                 if (tgt->imm_srr_id == tgt->ctio_srr_id) {
2767                         int found = 0;
2768                         list_for_each_entry(imm, &tgt->srr_imm_list,
2769                             srr_list_entry) {
2770                                 if (imm->srr_id == sc->srr_id) {
2771                                         found = 1;
2772                                         break;
2773                                 }
2774                         }
2775                         if (found) {
2776                                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf01b,
2777                                     "Scheduling srr work\n");
2778                                 schedule_work(&tgt->srr_work);
2779                         } else {
2780                                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf056,
2781                                     "qla_target(%d): imm_srr_id "
2782                                     "== ctio_srr_id (%d), but there is no "
2783                                     "corresponding SRR IMM, deleting CTIO "
2784                                     "SRR %p\n", vha->vp_idx,
2785                                     tgt->ctio_srr_id, sc);
2786                                 list_del(&sc->srr_list_entry);
2787                                 spin_unlock(&tgt->srr_lock);
2788
2789                                 kfree(sc);
2790                                 return -EINVAL;
2791                         }
2792                 }
2793                 spin_unlock(&tgt->srr_lock);
2794         } else {
2795                 struct qla_tgt_srr_imm *ti;
2796
2797                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf057,
2798                     "qla_target(%d): Unable to allocate SRR CTIO entry\n",
2799                     vha->vp_idx);
2800                 spin_lock(&tgt->srr_lock);
2801                 list_for_each_entry_safe(imm, ti, &tgt->srr_imm_list,
2802                     srr_list_entry) {
2803                         if (imm->srr_id == tgt->ctio_srr_id) {
2804                                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf01c,
2805                                     "IMM SRR %p deleted (id %d)\n",
2806                                     imm, imm->srr_id);
2807                                 list_del(&imm->srr_list_entry);
2808                                 qlt_reject_free_srr_imm(vha, imm, 1);
2809                         }
2810                 }
2811                 spin_unlock(&tgt->srr_lock);
2812
2813                 return -ENOMEM;
2814         }
2815
2816         return 0;
2817 }
2818
2819 /*
2820  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
2821  */
2822 static int qlt_term_ctio_exchange(struct scsi_qla_host *vha, void *ctio,
2823         struct qla_tgt_cmd *cmd, uint32_t status)
2824 {
2825         int term = 0;
2826
2827         if (ctio != NULL) {
2828                 struct ctio7_from_24xx *c = (struct ctio7_from_24xx *)ctio;
2829                 term = !(c->flags &
2830                     __constant_cpu_to_le16(OF_TERM_EXCH));
2831         } else
2832                 term = 1;
2833
2834         if (term)
2835                 qlt_send_term_exchange(vha, cmd, &cmd->atio, 1);
2836
2837         return term;
2838 }
2839
2840 /* ha->hardware_lock supposed to be held on entry */
2841 static inline struct qla_tgt_cmd *qlt_get_cmd(struct scsi_qla_host *vha,
2842         uint32_t handle)
2843 {
2844         struct qla_hw_data *ha = vha->hw;
2845
2846         handle--;
2847         if (ha->tgt.cmds[handle] != NULL) {
2848                 struct qla_tgt_cmd *cmd = ha->tgt.cmds[handle];
2849                 ha->tgt.cmds[handle] = NULL;
2850                 return cmd;
2851         } else
2852                 return NULL;
2853 }
2854
2855 /* ha->hardware_lock supposed to be held on entry */
2856 static struct qla_tgt_cmd *qlt_ctio_to_cmd(struct scsi_qla_host *vha,
2857         uint32_t handle, void *ctio)
2858 {
2859         struct qla_tgt_cmd *cmd = NULL;
2860
2861         /* Clear out internal marks */
2862         handle &= ~(CTIO_COMPLETION_HANDLE_MARK |
2863             CTIO_INTERMEDIATE_HANDLE_MARK);
2864
2865         if (handle != QLA_TGT_NULL_HANDLE) {
2866                 if (unlikely(handle == QLA_TGT_SKIP_HANDLE)) {
2867                         ql_dbg(ql_dbg_tgt, vha, 0xe01d, "%s",
2868                             "SKIP_HANDLE CTIO\n");
2869                         return NULL;
2870                 }
2871                 /* handle-1 is actually used */
2872                 if (unlikely(handle > DEFAULT_OUTSTANDING_COMMANDS)) {
2873                         ql_dbg(ql_dbg_tgt, vha, 0xe052,
2874                             "qla_target(%d): Wrong handle %x received\n",
2875                             vha->vp_idx, handle);
2876                         return NULL;
2877                 }
2878                 cmd = qlt_get_cmd(vha, handle);
2879                 if (unlikely(cmd == NULL)) {
2880                         ql_dbg(ql_dbg_tgt, vha, 0xe053,
2881                             "qla_target(%d): Suspicious: unable to "
2882                             "find the command with handle %x\n", vha->vp_idx,
2883                             handle);
2884                         return NULL;
2885                 }
2886         } else if (ctio != NULL) {
2887                 /* We can't get loop ID from CTIO7 */
2888                 ql_dbg(ql_dbg_tgt, vha, 0xe054,
2889                     "qla_target(%d): Wrong CTIO received: QLA24xx doesn't "
2890                     "support NULL handles\n", vha->vp_idx);
2891                 return NULL;
2892         }
2893
2894         return cmd;
2895 }
2896
2897 /*
2898  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
2899  */
2900 static void qlt_do_ctio_completion(struct scsi_qla_host *vha, uint32_t handle,
2901         uint32_t status, void *ctio)
2902 {
2903         struct qla_hw_data *ha = vha->hw;
2904         struct se_cmd *se_cmd;
2905         struct target_core_fabric_ops *tfo;
2906         struct qla_tgt_cmd *cmd;
2907
2908         ql_dbg(ql_dbg_tgt, vha, 0xe01e,
2909             "qla_target(%d): handle(ctio %p status %#x) <- %08x\n",
2910             vha->vp_idx, ctio, status, handle);
2911
2912         if (handle & CTIO_INTERMEDIATE_HANDLE_MARK) {
2913                 /* That could happen only in case of an error/reset/abort */
2914                 if (status != CTIO_SUCCESS) {
2915                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf01d,
2916                             "Intermediate CTIO received"
2917                             " (status %x)\n", status);
2918                 }
2919                 return;
2920         }
2921
2922         cmd = qlt_ctio_to_cmd(vha, handle, ctio);
2923         if (cmd == NULL)
2924                 return;
2925
2926         se_cmd = &cmd->se_cmd;
2927         tfo = se_cmd->se_tfo;
2928
2929         if (cmd->sg_mapped)
2930                 qlt_unmap_sg(vha, cmd);
2931
2932         if (unlikely(status != CTIO_SUCCESS)) {
2933                 switch (status & 0xFFFF) {
2934                 case CTIO_LIP_RESET:
2935                 case CTIO_TARGET_RESET:
2936                 case CTIO_ABORTED:
2937                         /* driver request abort via Terminate exchange */
2938                 case CTIO_TIMEOUT:
2939                 case CTIO_INVALID_RX_ID:
2940                         /* They are OK */
2941                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf058,
2942                             "qla_target(%d): CTIO with "
2943                             "status %#x received, state %x, se_cmd %p, "
2944                             "(LIP_RESET=e, ABORTED=2, TARGET_RESET=17, "
2945                             "TIMEOUT=b, INVALID_RX_ID=8)\n", vha->vp_idx,
2946                             status, cmd->state, se_cmd);
2947                         break;
2948
2949                 case CTIO_PORT_LOGGED_OUT:
2950                 case CTIO_PORT_UNAVAILABLE:
2951                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf059,
2952                             "qla_target(%d): CTIO with PORT LOGGED "
2953                             "OUT (29) or PORT UNAVAILABLE (28) status %x "
2954                             "received (state %x, se_cmd %p)\n", vha->vp_idx,
2955                             status, cmd->state, se_cmd);
2956                         break;
2957
2958                 case CTIO_SRR_RECEIVED:
2959                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf05a,
2960                             "qla_target(%d): CTIO with SRR_RECEIVED"
2961                             " status %x received (state %x, se_cmd %p)\n",
2962                             vha->vp_idx, status, cmd->state, se_cmd);
2963                         if (qlt_prepare_srr_ctio(vha, cmd, ctio) != 0)
2964                                 break;
2965                         else
2966                                 return;
2967
2968                 case CTIO_DIF_ERROR: {
2969                         struct ctio_crc_from_fw *crc =
2970                                 (struct ctio_crc_from_fw *)ctio;
2971                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf073,
2972                             "qla_target(%d): CTIO with DIF_ERROR status %x received (state %x, se_cmd %p) actual_dif[0x%llx] expect_dif[0x%llx]\n",
2973                             vha->vp_idx, status, cmd->state, se_cmd,
2974                             *((u64 *)&crc->actual_dif[0]),
2975                             *((u64 *)&crc->expected_dif[0]));
2976
2977                         if (qlt_handle_dif_error(vha, cmd, ctio)) {
2978                                 if (cmd->state == QLA_TGT_STATE_NEED_DATA) {
2979                                         /* scsi Write/xfer rdy complete */
2980                                         goto skip_term;
2981                                 } else {
2982                                         /* scsi read/xmit respond complete
2983                                          * call handle dif to send scsi status
2984                                          * rather than terminate exchange.
2985                                          */
2986                                         cmd->state = QLA_TGT_STATE_PROCESSED;
2987                                         ha->tgt.tgt_ops->handle_dif_err(cmd);
2988                                         return;
2989                                 }
2990                         } else {
2991                                 /* Need to generate a SCSI good completion.
2992                                  * because FW did not send scsi status.
2993                                  */
2994                                 status = 0;
2995                                 goto skip_term;
2996                         }
2997                         break;
2998                 }
2999                 default:
3000                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf05b,
3001                             "qla_target(%d): CTIO with error status 0x%x received (state %x, se_cmd %p\n",
3002                             vha->vp_idx, status, cmd->state, se_cmd);
3003                         break;
3004                 }
3005
3006
3007                 /* "cmd->state == QLA_TGT_STATE_ABORTED" means
3008                  * cmd is already aborted/terminated, we don't
3009                  * need to terminate again.  The exchange is already
3010                  * cleaned up/freed at FW level.  Just cleanup at driver
3011                  * level.
3012                  */
3013                 if ((cmd->state != QLA_TGT_STATE_NEED_DATA) &&
3014                         (cmd->state != QLA_TGT_STATE_ABORTED)) {
3015                         if (qlt_term_ctio_exchange(vha, ctio, cmd, status))
3016                                 return;
3017                 }
3018         }
3019 skip_term:
3020
3021         if (cmd->state == QLA_TGT_STATE_PROCESSED) {
3022                 ql_dbg(ql_dbg_tgt, vha, 0xe01f, "Command %p finished\n", cmd);
3023         } else if (cmd->state == QLA_TGT_STATE_NEED_DATA) {
3024                 int rx_status = 0;
3025
3026                 cmd->state = QLA_TGT_STATE_DATA_IN;
3027
3028                 if (unlikely(status != CTIO_SUCCESS))
3029                         rx_status = -EIO;
3030                 else
3031                         cmd->write_data_transferred = 1;
3032
3033                 ql_dbg(ql_dbg_tgt, vha, 0xe020,
3034                     "Data received, context %x, rx_status %d\n",
3035                     0x0, rx_status);
3036
3037                 ha->tgt.tgt_ops->handle_data(cmd);
3038                 return;
3039         } else if (cmd->state == QLA_TGT_STATE_ABORTED) {
3040                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf01e,
3041                     "Aborted command %p (tag %d) finished\n", cmd, cmd->tag);
3042         } else {
3043                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf05c,
3044                     "qla_target(%d): A command in state (%d) should "
3045                     "not return a CTIO complete\n", vha->vp_idx, cmd->state);
3046         }
3047
3048         if (unlikely(status != CTIO_SUCCESS) &&
3049                 (cmd->state != QLA_TGT_STATE_ABORTED)) {
3050                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf01f, "Finishing failed CTIO\n");
3051                 dump_stack();
3052         }
3053
3054         ha->tgt.tgt_ops->free_cmd(cmd);
3055 }
3056
3057 static inline int qlt_get_fcp_task_attr(struct scsi_qla_host *vha,
3058         uint8_t task_codes)
3059 {
3060         int fcp_task_attr;
3061
3062         switch (task_codes) {
3063         case ATIO_SIMPLE_QUEUE:
3064                 fcp_task_attr = MSG_SIMPLE_TAG;
3065                 break;
3066         case ATIO_HEAD_OF_QUEUE:
3067                 fcp_task_attr = MSG_HEAD_TAG;
3068                 break;
3069         case ATIO_ORDERED_QUEUE:
3070                 fcp_task_attr = MSG_ORDERED_TAG;
3071                 break;
3072         case ATIO_ACA_QUEUE:
3073                 fcp_task_attr = MSG_ACA_TAG;
3074                 break;
3075         case ATIO_UNTAGGED:
3076                 fcp_task_attr = MSG_SIMPLE_TAG;
3077                 break;
3078         default:
3079                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf05d,
3080                     "qla_target: unknown task code %x, use ORDERED instead\n",
3081                     task_codes);
3082                 fcp_task_attr = MSG_ORDERED_TAG;
3083                 break;
3084         }
3085
3086         return fcp_task_attr;
3087 }
3088
3089 static struct qla_tgt_sess *qlt_make_local_sess(struct scsi_qla_host *,
3090                                         uint8_t *);
3091 /*
3092  * Process context for I/O path into tcm_qla2xxx code
3093  */
3094 static void __qlt_do_work(struct qla_tgt_cmd *cmd)
3095 {
3096         scsi_qla_host_t *vha = cmd->vha;
3097         struct qla_hw_data *ha = vha->hw;
3098         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
3099         struct qla_tgt_sess *sess = cmd->sess;
3100         struct atio_from_isp *atio = &cmd->atio;
3101         unsigned char *cdb;
3102         unsigned long flags;
3103         uint32_t data_length;
3104         int ret, fcp_task_attr, data_dir, bidi = 0;
3105
3106         if (tgt->tgt_stop)
3107                 goto out_term;
3108
3109         cdb = &atio->u.isp24.fcp_cmnd.cdb[0];
3110         cmd->tag = atio->u.isp24.exchange_addr;
3111         cmd->unpacked_lun = scsilun_to_int(
3112             (struct scsi_lun *)&atio->u.isp24.fcp_cmnd.lun);
3113
3114         if (atio->u.isp24.fcp_cmnd.rddata &&
3115             atio->u.isp24.fcp_cmnd.wrdata) {
3116                 bidi = 1;
3117                 data_dir = DMA_TO_DEVICE;
3118         } else if (atio->u.isp24.fcp_cmnd.rddata)
3119                 data_dir = DMA_FROM_DEVICE;
3120         else if (atio->u.isp24.fcp_cmnd.wrdata)
3121                 data_dir = DMA_TO_DEVICE;
3122         else
3123                 data_dir = DMA_NONE;
3124
3125         fcp_task_attr = qlt_get_fcp_task_attr(vha,
3126             atio->u.isp24.fcp_cmnd.task_attr);
3127         data_length = be32_to_cpu(get_unaligned((uint32_t *)
3128             &atio->u.isp24.fcp_cmnd.add_cdb[
3129             atio->u.isp24.fcp_cmnd.add_cdb_len]));
3130
3131         ql_dbg(ql_dbg_tgt, vha, 0xe022,
3132                 "qla_target: START qla cmd: %p se_cmd %p lun: 0x%04x (tag %d) len(%d) ox_id %x\n",
3133                 cmd, &cmd->se_cmd, cmd->unpacked_lun, cmd->tag, data_length,
3134                 cmd->atio.u.isp24.fcp_hdr.ox_id);
3135
3136         ret = ha->tgt.tgt_ops->handle_cmd(vha, cmd, cdb, data_length,
3137                                           fcp_task_attr, data_dir, bidi);
3138         if (ret != 0)
3139                 goto out_term;
3140         /*
3141          * Drop extra session reference from qla_tgt_handle_cmd_for_atio*(
3142          */
3143         spin_lock_irqsave(&ha->hardware_lock, flags);
3144         ha->tgt.tgt_ops->put_sess(sess);
3145         spin_unlock_irqrestore(&ha->hardware_lock, flags);
3146         return;
3147
3148 out_term:
3149         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf020, "Terminating work cmd %p", cmd);
3150         /*
3151          * cmd has not sent to target yet, so pass NULL as the second
3152          * argument to qlt_send_term_exchange() and free the memory here.
3153          */
3154         spin_lock_irqsave(&ha->hardware_lock, flags);
3155         qlt_send_term_exchange(vha, NULL, &cmd->atio, 1);
3156         percpu_ida_free(&sess->se_sess->sess_tag_pool, cmd->se_cmd.map_tag);
3157         ha->tgt.tgt_ops->put_sess(sess);
3158         spin_unlock_irqrestore(&ha->hardware_lock, flags);
3159 }
3160
3161 static void qlt_do_work(struct work_struct *work)
3162 {
3163         struct qla_tgt_cmd *cmd = container_of(work, struct qla_tgt_cmd, work);
3164
3165         __qlt_do_work(cmd);
3166 }
3167
3168 static struct qla_tgt_cmd *qlt_get_tag(scsi_qla_host_t *vha,
3169                                        struct qla_tgt_sess *sess,
3170                                        struct atio_from_isp *atio)
3171 {
3172         struct se_session *se_sess = sess->se_sess;
3173         struct qla_tgt_cmd *cmd;
3174         int tag;
3175
3176         tag = percpu_ida_alloc(&se_sess->sess_tag_pool, TASK_RUNNING);
3177         if (tag < 0)
3178                 return NULL;
3179
3180         cmd = &((struct qla_tgt_cmd *)se_sess->sess_cmd_map)[tag];
3181         memset(cmd, 0, sizeof(struct qla_tgt_cmd));
3182
3183         memcpy(&cmd->atio, atio, sizeof(*atio));
3184         cmd->state = QLA_TGT_STATE_NEW;
3185         cmd->tgt = vha->vha_tgt.qla_tgt;
3186         cmd->vha = vha;
3187         cmd->se_cmd.map_tag = tag;
3188         cmd->sess = sess;
3189         cmd->loop_id = sess->loop_id;
3190         cmd->conf_compl_supported = sess->conf_compl_supported;
3191
3192         return cmd;
3193 }
3194
3195 static void qlt_send_busy(struct scsi_qla_host *, struct atio_from_isp *,
3196                           uint16_t);
3197
3198 static void qlt_create_sess_from_atio(struct work_struct *work)
3199 {
3200         struct qla_tgt_sess_op *op = container_of(work,
3201                                         struct qla_tgt_sess_op, work);
3202         scsi_qla_host_t *vha = op->vha;
3203         struct qla_hw_data *ha = vha->hw;
3204         struct qla_tgt_sess *sess;
3205         struct qla_tgt_cmd *cmd;
3206         unsigned long flags;
3207         uint8_t *s_id = op->atio.u.isp24.fcp_hdr.s_id;
3208
3209         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf022,
3210                 "qla_target(%d): Unable to find wwn login"
3211                 " (s_id %x:%x:%x), trying to create it manually\n",
3212                 vha->vp_idx, s_id[0], s_id[1], s_id[2]);
3213
3214         if (op->atio.u.raw.entry_count > 1) {
3215                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf023,
3216                         "Dropping multy entry atio %p\n", &op->atio);
3217                 goto out_term;
3218         }
3219
3220         mutex_lock(&vha->vha_tgt.tgt_mutex);
3221         sess = qlt_make_local_sess(vha, s_id);
3222         /* sess has an extra creation ref. */
3223         mutex_unlock(&vha->vha_tgt.tgt_mutex);
3224
3225         if (!sess)
3226                 goto out_term;
3227         /*
3228          * Now obtain a pre-allocated session tag using the original op->atio
3229          * packet header, and dispatch into __qlt_do_work() using the existing
3230          * process context.
3231          */
3232         cmd = qlt_get_tag(vha, sess, &op->atio);
3233         if (!cmd) {
3234                 spin_lock_irqsave(&ha->hardware_lock, flags);
3235                 qlt_send_busy(vha, &op->atio, SAM_STAT_BUSY);
3236                 ha->tgt.tgt_ops->put_sess(sess);
3237                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
3238                 kfree(op);
3239                 return;
3240         }
3241         /*
3242          * __qlt_do_work() will call ha->tgt.tgt_ops->put_sess() to release
3243          * the extra reference taken above by qlt_make_local_sess()
3244          */
3245         __qlt_do_work(cmd);
3246         kfree(op);
3247         return;
3248
3249 out_term:
3250         spin_lock_irqsave(&ha->hardware_lock, flags);
3251         qlt_send_term_exchange(vha, NULL, &op->atio, 1);
3252         spin_unlock_irqrestore(&ha->hardware_lock, flags);
3253         kfree(op);
3254
3255 }
3256
3257 /* ha->hardware_lock supposed to be held on entry */
3258 static int qlt_handle_cmd_for_atio(struct scsi_qla_host *vha,
3259         struct atio_from_isp *atio)
3260 {
3261         struct qla_hw_data *ha = vha->hw;
3262         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
3263         struct qla_tgt_sess *sess;
3264         struct qla_tgt_cmd *cmd;
3265
3266         if (unlikely(tgt->tgt_stop)) {
3267                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf021,
3268                     "New command while device %p is shutting down\n", tgt);
3269                 return -EFAULT;
3270         }
3271
3272         sess = ha->tgt.tgt_ops->find_sess_by_s_id(vha, atio->u.isp24.fcp_hdr.s_id);
3273         if (unlikely(!sess)) {
3274                 struct qla_tgt_sess_op *op = kzalloc(sizeof(struct qla_tgt_sess_op),
3275                                                      GFP_ATOMIC);
3276                 if (!op)
3277                         return -ENOMEM;
3278
3279                 memcpy(&op->atio, atio, sizeof(*atio));
3280                 op->vha = vha;
3281                 INIT_WORK(&op->work, qlt_create_sess_from_atio);
3282                 queue_work(qla_tgt_wq, &op->work);
3283                 return 0;
3284         }
3285         /*
3286          * Do kref_get() before returning + dropping qla_hw_data->hardware_lock.
3287          */
3288         kref_get(&sess->se_sess->sess_kref);
3289
3290         cmd = qlt_get_tag(vha, sess, atio);
3291         if (!cmd) {
3292                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf05e,
3293                     "qla_target(%d): Allocation of cmd failed\n", vha->vp_idx);
3294                 ha->tgt.tgt_ops->put_sess(sess);
3295                 return -ENOMEM;
3296         }
3297
3298         INIT_WORK(&cmd->work, qlt_do_work);
3299         queue_work(qla_tgt_wq, &cmd->work);
3300         return 0;
3301
3302 }
3303
3304 /* ha->hardware_lock supposed to be held on entry */
3305 static int qlt_issue_task_mgmt(struct qla_tgt_sess *sess, uint32_t lun,
3306         int fn, void *iocb, int flags)
3307 {
3308         struct scsi_qla_host *vha = sess->vha;
3309         struct qla_hw_data *ha = vha->hw;
3310         struct qla_tgt_mgmt_cmd *mcmd;
3311         int res;
3312         uint8_t tmr_func;
3313
3314         mcmd = mempool_alloc(qla_tgt_mgmt_cmd_mempool, GFP_ATOMIC);
3315         if (!mcmd) {
3316                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10009,
3317                     "qla_target(%d): Allocation of management "
3318                     "command failed, some commands and their data could "
3319                     "leak\n", vha->vp_idx);
3320                 return -ENOMEM;
3321         }
3322         memset(mcmd, 0, sizeof(*mcmd));
3323         mcmd->sess = sess;
3324
3325         if (iocb) {
3326                 memcpy(&mcmd->orig_iocb.imm_ntfy, iocb,
3327                     sizeof(mcmd->orig_iocb.imm_ntfy));
3328         }
3329         mcmd->tmr_func = fn;
3330         mcmd->flags = flags;
3331
3332         switch (fn) {
3333         case QLA_TGT_CLEAR_ACA:
3334                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10000,
3335                     "qla_target(%d): CLEAR_ACA received\n", sess->vha->vp_idx);
3336                 tmr_func = TMR_CLEAR_ACA;
3337                 break;
3338
3339         case QLA_TGT_TARGET_RESET:
3340                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10001,
3341                     "qla_target(%d): TARGET_RESET received\n",
3342                     sess->vha->vp_idx);
3343                 tmr_func = TMR_TARGET_WARM_RESET;
3344                 break;
3345
3346         case QLA_TGT_LUN_RESET:
3347                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10002,
3348                     "qla_target(%d): LUN_RESET received\n", sess->vha->vp_idx);
3349                 tmr_func = TMR_LUN_RESET;
3350                 break;
3351
3352         case QLA_TGT_CLEAR_TS:
3353                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10003,
3354                     "qla_target(%d): CLEAR_TS received\n", sess->vha->vp_idx);
3355                 tmr_func = TMR_CLEAR_TASK_SET;
3356                 break;
3357
3358         case QLA_TGT_ABORT_TS:
3359                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10004,
3360                     "qla_target(%d): ABORT_TS received\n", sess->vha->vp_idx);
3361                 tmr_func = TMR_ABORT_TASK_SET;
3362                 break;
3363 #if 0
3364         case QLA_TGT_ABORT_ALL:
3365                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10005,
3366                     "qla_target(%d): Doing ABORT_ALL_TASKS\n",
3367                     sess->vha->vp_idx);
3368                 tmr_func = 0;
3369                 break;
3370
3371         case QLA_TGT_ABORT_ALL_SESS:
3372                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10006,
3373                     "qla_target(%d): Doing ABORT_ALL_TASKS_SESS\n",
3374                     sess->vha->vp_idx);
3375                 tmr_func = 0;
3376                 break;
3377
3378         case QLA_TGT_NEXUS_LOSS_SESS:
3379                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10007,
3380                     "qla_target(%d): Doing NEXUS_LOSS_SESS\n",
3381                     sess->vha->vp_idx);
3382                 tmr_func = 0;
3383                 break;
3384
3385         case QLA_TGT_NEXUS_LOSS:
3386                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x10008,
3387                     "qla_target(%d): Doing NEXUS_LOSS\n", sess->vha->vp_idx);
3388                 tmr_func = 0;
3389                 break;
3390 #endif
3391         default:
3392                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x1000a,
3393                     "qla_target(%d): Unknown task mgmt fn 0x%x\n",
3394                     sess->vha->vp_idx, fn);
3395                 mempool_free(mcmd, qla_tgt_mgmt_cmd_mempool);
3396                 return -ENOSYS;
3397         }
3398
3399         res = ha->tgt.tgt_ops->handle_tmr(mcmd, lun, tmr_func, 0);
3400         if (res != 0) {
3401                 ql_dbg(ql_dbg_tgt_tmr, vha, 0x1000b,
3402                     "qla_target(%d): tgt.tgt_ops->handle_tmr() failed: %d\n",
3403                     sess->vha->vp_idx, res);
3404                 mempool_free(mcmd, qla_tgt_mgmt_cmd_mempool);
3405                 return -EFAULT;
3406         }
3407
3408         return 0;
3409 }
3410
3411 /* ha->hardware_lock supposed to be held on entry */
3412 static int qlt_handle_task_mgmt(struct scsi_qla_host *vha, void *iocb)
3413 {
3414         struct atio_from_isp *a = (struct atio_from_isp *)iocb;
3415         struct qla_hw_data *ha = vha->hw;
3416         struct qla_tgt *tgt;
3417         struct qla_tgt_sess *sess;
3418         uint32_t lun, unpacked_lun;
3419         int lun_size, fn;
3420
3421         tgt = vha->vha_tgt.qla_tgt;
3422
3423         lun = a->u.isp24.fcp_cmnd.lun;
3424         lun_size = sizeof(a->u.isp24.fcp_cmnd.lun);
3425         fn = a->u.isp24.fcp_cmnd.task_mgmt_flags;
3426         sess = ha->tgt.tgt_ops->find_sess_by_s_id(vha,
3427             a->u.isp24.fcp_hdr.s_id);
3428         unpacked_lun = scsilun_to_int((struct scsi_lun *)&lun);
3429
3430         if (!sess) {
3431                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf024,
3432                     "qla_target(%d): task mgmt fn 0x%x for "
3433                     "non-existant session\n", vha->vp_idx, fn);
3434                 return qlt_sched_sess_work(tgt, QLA_TGT_SESS_WORK_TM, iocb,
3435                     sizeof(struct atio_from_isp));
3436         }
3437
3438         return qlt_issue_task_mgmt(sess, unpacked_lun, fn, iocb, 0);
3439 }
3440
3441 /* ha->hardware_lock supposed to be held on entry */
3442 static int __qlt_abort_task(struct scsi_qla_host *vha,
3443         struct imm_ntfy_from_isp *iocb, struct qla_tgt_sess *sess)
3444 {
3445         struct atio_from_isp *a = (struct atio_from_isp *)iocb;
3446         struct qla_hw_data *ha = vha->hw;
3447         struct qla_tgt_mgmt_cmd *mcmd;
3448         uint32_t lun, unpacked_lun;
3449         int rc;
3450
3451         mcmd = mempool_alloc(qla_tgt_mgmt_cmd_mempool, GFP_ATOMIC);
3452         if (mcmd == NULL) {
3453                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf05f,
3454                     "qla_target(%d): %s: Allocation of ABORT cmd failed\n",
3455                     vha->vp_idx, __func__);
3456                 return -ENOMEM;
3457         }
3458         memset(mcmd, 0, sizeof(*mcmd));
3459
3460         mcmd->sess = sess;
3461         memcpy(&mcmd->orig_iocb.imm_ntfy, iocb,
3462             sizeof(mcmd->orig_iocb.imm_ntfy));
3463
3464         lun = a->u.isp24.fcp_cmnd.lun;
3465         unpacked_lun = scsilun_to_int((struct scsi_lun *)&lun);
3466
3467         rc = ha->tgt.tgt_ops->handle_tmr(mcmd, unpacked_lun, TMR_ABORT_TASK,
3468             le16_to_cpu(iocb->u.isp2x.seq_id));
3469         if (rc != 0) {
3470                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf060,
3471                     "qla_target(%d): tgt_ops->handle_tmr() failed: %d\n",
3472                     vha->vp_idx, rc);
3473                 mempool_free(mcmd, qla_tgt_mgmt_cmd_mempool);
3474                 return -EFAULT;
3475         }
3476
3477         return 0;
3478 }
3479
3480 /* ha->hardware_lock supposed to be held on entry */
3481 static int qlt_abort_task(struct scsi_qla_host *vha,
3482         struct imm_ntfy_from_isp *iocb)
3483 {
3484         struct qla_hw_data *ha = vha->hw;
3485         struct qla_tgt_sess *sess;
3486         int loop_id;
3487
3488         loop_id = GET_TARGET_ID(ha, (struct atio_from_isp *)iocb);
3489
3490         sess = ha->tgt.tgt_ops->find_sess_by_loop_id(vha, loop_id);
3491         if (sess == NULL) {
3492                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf025,
3493                     "qla_target(%d): task abort for unexisting "
3494                     "session\n", vha->vp_idx);
3495                 return qlt_sched_sess_work(vha->vha_tgt.qla_tgt,
3496                     QLA_TGT_SESS_WORK_ABORT, iocb, sizeof(*iocb));
3497         }
3498
3499         return __qlt_abort_task(vha, iocb, sess);
3500 }
3501
3502 /*
3503  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
3504  */
3505 static int qlt_24xx_handle_els(struct scsi_qla_host *vha,
3506         struct imm_ntfy_from_isp *iocb)
3507 {
3508         int res = 0;
3509
3510         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf026,
3511             "qla_target(%d): Port ID: 0x%3phC ELS opcode: 0x%02x\n",
3512             vha->vp_idx, iocb->u.isp24.port_id, iocb->u.isp24.status_subcode);
3513
3514         switch (iocb->u.isp24.status_subcode) {
3515         case ELS_PLOGI:
3516         case ELS_FLOGI:
3517         case ELS_PRLI:
3518         case ELS_LOGO:
3519         case ELS_PRLO:
3520                 res = qlt_reset(vha, iocb, QLA_TGT_NEXUS_LOSS_SESS);
3521                 break;
3522         case ELS_PDISC:
3523         case ELS_ADISC:
3524         {
3525                 struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
3526                 if (tgt->link_reinit_iocb_pending) {
3527                         qlt_send_notify_ack(vha, &tgt->link_reinit_iocb,
3528                             0, 0, 0, 0, 0, 0);
3529                         tgt->link_reinit_iocb_pending = 0;
3530                 }
3531                 res = 1; /* send notify ack */
3532                 break;
3533         }
3534
3535         default:
3536                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf061,
3537                     "qla_target(%d): Unsupported ELS command %x "
3538                     "received\n", vha->vp_idx, iocb->u.isp24.status_subcode);
3539                 res = qlt_reset(vha, iocb, QLA_TGT_NEXUS_LOSS_SESS);
3540                 break;
3541         }
3542
3543         return res;
3544 }
3545
3546 static int qlt_set_data_offset(struct qla_tgt_cmd *cmd, uint32_t offset)
3547 {
3548         struct scatterlist *sg, *sgp, *sg_srr, *sg_srr_start = NULL;
3549         size_t first_offset = 0, rem_offset = offset, tmp = 0;
3550         int i, sg_srr_cnt, bufflen = 0;
3551
3552         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe023,
3553             "Entering qla_tgt_set_data_offset: cmd: %p, cmd->sg: %p, "
3554             "cmd->sg_cnt: %u, direction: %d\n",
3555             cmd, cmd->sg, cmd->sg_cnt, cmd->dma_data_direction);
3556
3557         /*
3558          * FIXME: Reject non zero SRR relative offset until we can test
3559          * this code properly.
3560          */
3561         pr_debug("Rejecting non zero SRR rel_offs: %u\n", offset);
3562         return -1;
3563
3564         if (!cmd->sg || !cmd->sg_cnt) {
3565                 ql_dbg(ql_dbg_tgt, cmd->vha, 0xe055,
3566                     "Missing cmd->sg or zero cmd->sg_cnt in"
3567                     " qla_tgt_set_data_offset\n");
3568                 return -EINVAL;
3569         }
3570         /*
3571          * Walk the current cmd->sg list until we locate the new sg_srr_start
3572          */
3573         for_each_sg(cmd->sg, sg, cmd->sg_cnt, i) {
3574                 ql_dbg(ql_dbg_tgt, cmd->vha, 0xe024,
3575                     "sg[%d]: %p page: %p, length: %d, offset: %d\n",
3576                     i, sg, sg_page(sg), sg->length, sg->offset);
3577
3578                 if ((sg->length + tmp) > offset) {
3579                         first_offset = rem_offset;
3580                         sg_srr_start = sg;
3581                         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe025,
3582                             "Found matching sg[%d], using %p as sg_srr_start, "
3583                             "and using first_offset: %zu\n", i, sg,
3584                             first_offset);
3585                         break;
3586                 }
3587                 tmp += sg->length;
3588                 rem_offset -= sg->length;
3589         }
3590
3591         if (!sg_srr_start) {
3592                 ql_dbg(ql_dbg_tgt, cmd->vha, 0xe056,
3593                     "Unable to locate sg_srr_start for offset: %u\n", offset);
3594                 return -EINVAL;
3595         }
3596         sg_srr_cnt = (cmd->sg_cnt - i);
3597
3598         sg_srr = kzalloc(sizeof(struct scatterlist) * sg_srr_cnt, GFP_KERNEL);
3599         if (!sg_srr) {
3600                 ql_dbg(ql_dbg_tgt, cmd->vha, 0xe057,
3601                     "Unable to allocate sgp\n");
3602                 return -ENOMEM;
3603         }
3604         sg_init_table(sg_srr, sg_srr_cnt);
3605         sgp = &sg_srr[0];
3606         /*
3607          * Walk the remaining list for sg_srr_start, mapping to the newly
3608          * allocated sg_srr taking first_offset into account.
3609          */
3610         for_each_sg(sg_srr_start, sg, sg_srr_cnt, i) {
3611                 if (first_offset) {
3612                         sg_set_page(sgp, sg_page(sg),
3613                             (sg->length - first_offset), first_offset);
3614                         first_offset = 0;
3615                 } else {
3616                         sg_set_page(sgp, sg_page(sg), sg->length, 0);
3617                 }
3618                 bufflen += sgp->length;
3619
3620                 sgp = sg_next(sgp);
3621                 if (!sgp)
3622                         break;
3623         }
3624
3625         cmd->sg = sg_srr;
3626         cmd->sg_cnt = sg_srr_cnt;
3627         cmd->bufflen = bufflen;
3628         cmd->offset += offset;
3629         cmd->free_sg = 1;
3630
3631         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe026, "New cmd->sg: %p\n", cmd->sg);
3632         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe027, "New cmd->sg_cnt: %u\n",
3633             cmd->sg_cnt);
3634         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe028, "New cmd->bufflen: %u\n",
3635             cmd->bufflen);
3636         ql_dbg(ql_dbg_tgt, cmd->vha, 0xe029, "New cmd->offset: %u\n",
3637             cmd->offset);
3638
3639         if (cmd->sg_cnt < 0)
3640                 BUG();
3641
3642         if (cmd->bufflen < 0)
3643                 BUG();
3644
3645         return 0;
3646 }
3647
3648 static inline int qlt_srr_adjust_data(struct qla_tgt_cmd *cmd,
3649         uint32_t srr_rel_offs, int *xmit_type)
3650 {
3651         int res = 0, rel_offs;
3652
3653         rel_offs = srr_rel_offs - cmd->offset;
3654         ql_dbg(ql_dbg_tgt_mgt, cmd->vha, 0xf027, "srr_rel_offs=%d, rel_offs=%d",
3655             srr_rel_offs, rel_offs);
3656
3657         *xmit_type = QLA_TGT_XMIT_ALL;
3658
3659         if (rel_offs < 0) {
3660                 ql_dbg(ql_dbg_tgt_mgt, cmd->vha, 0xf062,
3661                     "qla_target(%d): SRR rel_offs (%d) < 0",
3662                     cmd->vha->vp_idx, rel_offs);
3663                 res = -1;
3664         } else if (rel_offs == cmd->bufflen)
3665                 *xmit_type = QLA_TGT_XMIT_STATUS;
3666         else if (rel_offs > 0)
3667                 res = qlt_set_data_offset(cmd, rel_offs);
3668
3669         return res;
3670 }
3671
3672 /* No locks, thread context */
3673 static void qlt_handle_srr(struct scsi_qla_host *vha,
3674         struct qla_tgt_srr_ctio *sctio, struct qla_tgt_srr_imm *imm)
3675 {
3676         struct imm_ntfy_from_isp *ntfy =
3677             (struct imm_ntfy_from_isp *)&imm->imm_ntfy;
3678         struct qla_hw_data *ha = vha->hw;
3679         struct qla_tgt_cmd *cmd = sctio->cmd;
3680         struct se_cmd *se_cmd = &cmd->se_cmd;
3681         unsigned long flags;
3682         int xmit_type = 0, resp = 0;
3683         uint32_t offset;
3684         uint16_t srr_ui;
3685
3686         offset = le32_to_cpu(ntfy->u.isp24.srr_rel_offs);
3687         srr_ui = ntfy->u.isp24.srr_ui;
3688
3689         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf028, "SRR cmd %p, srr_ui %x\n",
3690             cmd, srr_ui);
3691
3692         switch (srr_ui) {
3693         case SRR_IU_STATUS:
3694                 spin_lock_irqsave(&ha->hardware_lock, flags);
3695                 qlt_send_notify_ack(vha, ntfy,
3696                     0, 0, 0, NOTIFY_ACK_SRR_FLAGS_ACCEPT, 0, 0);
3697                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
3698                 xmit_type = QLA_TGT_XMIT_STATUS;
3699                 resp = 1;
3700                 break;
3701         case SRR_IU_DATA_IN:
3702                 if (!cmd->sg || !cmd->sg_cnt) {
3703                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf063,
3704                             "Unable to process SRR_IU_DATA_IN due to"
3705                             " missing cmd->sg, state: %d\n", cmd->state);
3706                         dump_stack();
3707                         goto out_reject;
3708                 }
3709                 if (se_cmd->scsi_status != 0) {
3710                         ql_dbg(ql_dbg_tgt, vha, 0xe02a,
3711                             "Rejecting SRR_IU_DATA_IN with non GOOD "
3712                             "scsi_status\n");
3713                         goto out_reject;
3714                 }
3715                 cmd->bufflen = se_cmd->data_length;
3716
3717                 if (qlt_has_data(cmd)) {
3718                         if (qlt_srr_adjust_data(cmd, offset, &xmit_type) != 0)
3719                                 goto out_reject;
3720                         spin_lock_irqsave(&ha->hardware_lock, flags);
3721                         qlt_send_notify_ack(vha, ntfy,
3722                             0, 0, 0, NOTIFY_ACK_SRR_FLAGS_ACCEPT, 0, 0);
3723                         spin_unlock_irqrestore(&ha->hardware_lock, flags);
3724                         resp = 1;
3725                 } else {
3726                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf064,
3727                             "qla_target(%d): SRR for in data for cmd "
3728                             "without them (tag %d, SCSI status %d), "
3729                             "reject", vha->vp_idx, cmd->tag,
3730                             cmd->se_cmd.scsi_status);
3731                         goto out_reject;
3732                 }
3733                 break;
3734         case SRR_IU_DATA_OUT:
3735                 if (!cmd->sg || !cmd->sg_cnt) {
3736                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf065,
3737                             "Unable to process SRR_IU_DATA_OUT due to"
3738                             " missing cmd->sg\n");
3739                         dump_stack();
3740                         goto out_reject;
3741                 }
3742                 if (se_cmd->scsi_status != 0) {
3743                         ql_dbg(ql_dbg_tgt, vha, 0xe02b,
3744                             "Rejecting SRR_IU_DATA_OUT"
3745                             " with non GOOD scsi_status\n");
3746                         goto out_reject;
3747                 }
3748                 cmd->bufflen = se_cmd->data_length;
3749
3750                 if (qlt_has_data(cmd)) {
3751                         if (qlt_srr_adjust_data(cmd, offset, &xmit_type) != 0)
3752                                 goto out_reject;
3753                         spin_lock_irqsave(&ha->hardware_lock, flags);
3754                         qlt_send_notify_ack(vha, ntfy,
3755                             0, 0, 0, NOTIFY_ACK_SRR_FLAGS_ACCEPT, 0, 0);
3756                         spin_unlock_irqrestore(&ha->hardware_lock, flags);
3757                         if (xmit_type & QLA_TGT_XMIT_DATA)
3758                                 qlt_rdy_to_xfer(cmd);
3759                 } else {
3760                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf066,
3761                             "qla_target(%d): SRR for out data for cmd "
3762                             "without them (tag %d, SCSI status %d), "
3763                             "reject", vha->vp_idx, cmd->tag,
3764                             cmd->se_cmd.scsi_status);
3765                         goto out_reject;
3766                 }
3767                 break;
3768         default:
3769                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf067,
3770                     "qla_target(%d): Unknown srr_ui value %x",
3771                     vha->vp_idx, srr_ui);
3772                 goto out_reject;
3773         }
3774
3775         /* Transmit response in case of status and data-in cases */
3776         if (resp)
3777                 qlt_xmit_response(cmd, xmit_type, se_cmd->scsi_status);
3778
3779         return;
3780
3781 out_reject:
3782         spin_lock_irqsave(&ha->hardware_lock, flags);
3783         qlt_send_notify_ack(vha, ntfy, 0, 0, 0,
3784             NOTIFY_ACK_SRR_FLAGS_REJECT,
3785             NOTIFY_ACK_SRR_REJECT_REASON_UNABLE_TO_PERFORM,
3786             NOTIFY_ACK_SRR_FLAGS_REJECT_EXPL_NO_EXPL);
3787         if (cmd->state == QLA_TGT_STATE_NEED_DATA) {
3788                 cmd->state = QLA_TGT_STATE_DATA_IN;
3789                 dump_stack();
3790         } else
3791                 qlt_send_term_exchange(vha, cmd, &cmd->atio, 1);
3792         spin_unlock_irqrestore(&ha->hardware_lock, flags);
3793 }
3794
3795 static void qlt_reject_free_srr_imm(struct scsi_qla_host *vha,
3796         struct qla_tgt_srr_imm *imm, int ha_locked)
3797 {
3798         struct qla_hw_data *ha = vha->hw;
3799         unsigned long flags = 0;
3800
3801         if (!ha_locked)
3802                 spin_lock_irqsave(&ha->hardware_lock, flags);
3803
3804         qlt_send_notify_ack(vha, (void *)&imm->imm_ntfy, 0, 0, 0,
3805             NOTIFY_ACK_SRR_FLAGS_REJECT,
3806             NOTIFY_ACK_SRR_REJECT_REASON_UNABLE_TO_PERFORM,
3807             NOTIFY_ACK_SRR_FLAGS_REJECT_EXPL_NO_EXPL);
3808
3809         if (!ha_locked)
3810                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
3811
3812         kfree(imm);
3813 }
3814
3815 static void qlt_handle_srr_work(struct work_struct *work)
3816 {
3817         struct qla_tgt *tgt = container_of(work, struct qla_tgt, srr_work);
3818         struct scsi_qla_host *vha = tgt->vha;
3819         struct qla_tgt_srr_ctio *sctio;
3820         unsigned long flags;
3821
3822         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf029, "Entering SRR work (tgt %p)\n",
3823             tgt);
3824
3825 restart:
3826         spin_lock_irqsave(&tgt->srr_lock, flags);
3827         list_for_each_entry(sctio, &tgt->srr_ctio_list, srr_list_entry) {
3828                 struct qla_tgt_srr_imm *imm, *i, *ti;
3829                 struct qla_tgt_cmd *cmd;
3830                 struct se_cmd *se_cmd;
3831
3832                 imm = NULL;
3833                 list_for_each_entry_safe(i, ti, &tgt->srr_imm_list,
3834                                                 srr_list_entry) {
3835                         if (i->srr_id == sctio->srr_id) {
3836                                 list_del(&i->srr_list_entry);
3837                                 if (imm) {
3838                                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf068,
3839                                           "qla_target(%d): There must be "
3840                                           "only one IMM SRR per CTIO SRR "
3841                                           "(IMM SRR %p, id %d, CTIO %p\n",
3842                                           vha->vp_idx, i, i->srr_id, sctio);
3843                                         qlt_reject_free_srr_imm(tgt->vha, i, 0);
3844                                 } else
3845                                         imm = i;
3846                         }
3847                 }
3848
3849                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02a,
3850                     "IMM SRR %p, CTIO SRR %p (id %d)\n", imm, sctio,
3851                     sctio->srr_id);
3852
3853                 if (imm == NULL) {
3854                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02b,
3855                             "Not found matching IMM for SRR CTIO (id %d)\n",
3856                             sctio->srr_id);
3857                         continue;
3858                 } else
3859                         list_del(&sctio->srr_list_entry);
3860
3861                 spin_unlock_irqrestore(&tgt->srr_lock, flags);
3862
3863                 cmd = sctio->cmd;
3864                 /*
3865                  * Reset qla_tgt_cmd SRR values and SGL pointer+count to follow
3866                  * tcm_qla2xxx_write_pending() and tcm_qla2xxx_queue_data_in()
3867                  * logic..
3868                  */
3869                 cmd->offset = 0;
3870                 if (cmd->free_sg) {
3871                         kfree(cmd->sg);
3872                         cmd->sg = NULL;
3873                         cmd->free_sg = 0;
3874                 }
3875                 se_cmd = &cmd->se_cmd;
3876
3877                 cmd->sg_cnt = se_cmd->t_data_nents;
3878                 cmd->sg = se_cmd->t_data_sg;
3879
3880                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02c,
3881                     "SRR cmd %p (se_cmd %p, tag %d, op %x), "
3882                     "sg_cnt=%d, offset=%d", cmd, &cmd->se_cmd, cmd->tag,
3883                     se_cmd->t_task_cdb ? se_cmd->t_task_cdb[0] : 0,
3884                     cmd->sg_cnt, cmd->offset);
3885
3886                 qlt_handle_srr(vha, sctio, imm);
3887
3888                 kfree(imm);
3889                 kfree(sctio);
3890                 goto restart;
3891         }
3892         spin_unlock_irqrestore(&tgt->srr_lock, flags);
3893 }
3894
3895 /* ha->hardware_lock supposed to be held on entry */
3896 static void qlt_prepare_srr_imm(struct scsi_qla_host *vha,
3897         struct imm_ntfy_from_isp *iocb)
3898 {
3899         struct qla_tgt_srr_imm *imm;
3900         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
3901         struct qla_tgt_srr_ctio *sctio;
3902
3903         tgt->imm_srr_id++;
3904
3905         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02d, "qla_target(%d): SRR received\n",
3906             vha->vp_idx);
3907
3908         imm = kzalloc(sizeof(*imm), GFP_ATOMIC);
3909         if (imm != NULL) {
3910                 memcpy(&imm->imm_ntfy, iocb, sizeof(imm->imm_ntfy));
3911
3912                 /* IRQ is already OFF */
3913                 spin_lock(&tgt->srr_lock);
3914                 imm->srr_id = tgt->imm_srr_id;
3915                 list_add_tail(&imm->srr_list_entry,
3916                     &tgt->srr_imm_list);
3917                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02e,
3918                     "IMM NTFY SRR %p added (id %d, ui %x)\n",
3919                     imm, imm->srr_id, iocb->u.isp24.srr_ui);
3920                 if (tgt->imm_srr_id == tgt->ctio_srr_id) {
3921                         int found = 0;
3922                         list_for_each_entry(sctio, &tgt->srr_ctio_list,
3923                             srr_list_entry) {
3924                                 if (sctio->srr_id == imm->srr_id) {
3925                                         found = 1;
3926                                         break;
3927                                 }
3928                         }
3929                         if (found) {
3930                                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf02f, "%s",
3931                                     "Scheduling srr work\n");
3932                                 schedule_work(&tgt->srr_work);
3933                         } else {
3934                                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf030,
3935                                     "qla_target(%d): imm_srr_id "
3936                                     "== ctio_srr_id (%d), but there is no "
3937                                     "corresponding SRR CTIO, deleting IMM "
3938                                     "SRR %p\n", vha->vp_idx, tgt->ctio_srr_id,
3939                                     imm);
3940                                 list_del(&imm->srr_list_entry);
3941
3942                                 kfree(imm);
3943
3944                                 spin_unlock(&tgt->srr_lock);
3945                                 goto out_reject;
3946                         }
3947                 }
3948                 spin_unlock(&tgt->srr_lock);
3949         } else {
3950                 struct qla_tgt_srr_ctio *ts;
3951
3952                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf069,
3953                     "qla_target(%d): Unable to allocate SRR IMM "
3954                     "entry, SRR request will be rejected\n", vha->vp_idx);
3955
3956                 /* IRQ is already OFF */
3957                 spin_lock(&tgt->srr_lock);
3958                 list_for_each_entry_safe(sctio, ts, &tgt->srr_ctio_list,
3959                     srr_list_entry) {
3960                         if (sctio->srr_id == tgt->imm_srr_id) {
3961                                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf031,
3962                                     "CTIO SRR %p deleted (id %d)\n",
3963                                     sctio, sctio->srr_id);
3964                                 list_del(&sctio->srr_list_entry);
3965                                 qlt_send_term_exchange(vha, sctio->cmd,
3966                                     &sctio->cmd->atio, 1);
3967                                 kfree(sctio);
3968                         }
3969                 }
3970                 spin_unlock(&tgt->srr_lock);
3971                 goto out_reject;
3972         }
3973
3974         return;
3975
3976 out_reject:
3977         qlt_send_notify_ack(vha, iocb, 0, 0, 0,
3978             NOTIFY_ACK_SRR_FLAGS_REJECT,
3979             NOTIFY_ACK_SRR_REJECT_REASON_UNABLE_TO_PERFORM,
3980             NOTIFY_ACK_SRR_FLAGS_REJECT_EXPL_NO_EXPL);
3981 }
3982
3983 /*
3984  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
3985  */
3986 static void qlt_handle_imm_notify(struct scsi_qla_host *vha,
3987         struct imm_ntfy_from_isp *iocb)
3988 {
3989         struct qla_hw_data *ha = vha->hw;
3990         uint32_t add_flags = 0;
3991         int send_notify_ack = 1;
3992         uint16_t status;
3993
3994         status = le16_to_cpu(iocb->u.isp2x.status);
3995         switch (status) {
3996         case IMM_NTFY_LIP_RESET:
3997         {
3998                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf032,
3999                     "qla_target(%d): LIP reset (loop %#x), subcode %x\n",
4000                     vha->vp_idx, le16_to_cpu(iocb->u.isp24.nport_handle),
4001                     iocb->u.isp24.status_subcode);
4002
4003                 if (qlt_reset(vha, iocb, QLA_TGT_ABORT_ALL) == 0)
4004                         send_notify_ack = 0;
4005                 break;
4006         }
4007
4008         case IMM_NTFY_LIP_LINK_REINIT:
4009         {
4010                 struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
4011                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf033,
4012                     "qla_target(%d): LINK REINIT (loop %#x, "
4013                     "subcode %x)\n", vha->vp_idx,
4014                     le16_to_cpu(iocb->u.isp24.nport_handle),
4015                     iocb->u.isp24.status_subcode);
4016                 if (tgt->link_reinit_iocb_pending) {
4017                         qlt_send_notify_ack(vha, &tgt->link_reinit_iocb,
4018                             0, 0, 0, 0, 0, 0);
4019                 }
4020                 memcpy(&tgt->link_reinit_iocb, iocb, sizeof(*iocb));
4021                 tgt->link_reinit_iocb_pending = 1;
4022                 /*
4023                  * QLogic requires to wait after LINK REINIT for possible
4024                  * PDISC or ADISC ELS commands
4025                  */
4026                 send_notify_ack = 0;
4027                 break;
4028         }
4029
4030         case IMM_NTFY_PORT_LOGOUT:
4031                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf034,
4032                     "qla_target(%d): Port logout (loop "
4033                     "%#x, subcode %x)\n", vha->vp_idx,
4034                     le16_to_cpu(iocb->u.isp24.nport_handle),
4035                     iocb->u.isp24.status_subcode);
4036
4037                 if (qlt_reset(vha, iocb, QLA_TGT_NEXUS_LOSS_SESS) == 0)
4038                         send_notify_ack = 0;
4039                 /* The sessions will be cleared in the callback, if needed */
4040                 break;
4041
4042         case IMM_NTFY_GLBL_TPRLO:
4043                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf035,
4044                     "qla_target(%d): Global TPRLO (%x)\n", vha->vp_idx, status);
4045                 if (qlt_reset(vha, iocb, QLA_TGT_NEXUS_LOSS) == 0)
4046                         send_notify_ack = 0;
4047                 /* The sessions will be cleared in the callback, if needed */
4048                 break;
4049
4050         case IMM_NTFY_PORT_CONFIG:
4051                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf036,
4052                     "qla_target(%d): Port config changed (%x)\n", vha->vp_idx,
4053                     status);
4054                 if (qlt_reset(vha, iocb, QLA_TGT_ABORT_ALL) == 0)
4055                         send_notify_ack = 0;
4056                 /* The sessions will be cleared in the callback, if needed */
4057                 break;
4058
4059         case IMM_NTFY_GLBL_LOGO:
4060                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf06a,
4061                     "qla_target(%d): Link failure detected\n",
4062                     vha->vp_idx);
4063                 /* I_T nexus loss */
4064                 if (qlt_reset(vha, iocb, QLA_TGT_NEXUS_LOSS) == 0)
4065                         send_notify_ack = 0;
4066                 break;
4067
4068         case IMM_NTFY_IOCB_OVERFLOW:
4069                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf06b,
4070                     "qla_target(%d): Cannot provide requested "
4071                     "capability (IOCB overflowed the immediate notify "
4072                     "resource count)\n", vha->vp_idx);
4073                 break;
4074
4075         case IMM_NTFY_ABORT_TASK:
4076                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf037,
4077                     "qla_target(%d): Abort Task (S %08x I %#x -> "
4078                     "L %#x)\n", vha->vp_idx,
4079                     le16_to_cpu(iocb->u.isp2x.seq_id),
4080                     GET_TARGET_ID(ha, (struct atio_from_isp *)iocb),
4081                     le16_to_cpu(iocb->u.isp2x.lun));
4082                 if (qlt_abort_task(vha, iocb) == 0)
4083                         send_notify_ack = 0;
4084                 break;
4085
4086         case IMM_NTFY_RESOURCE:
4087                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf06c,
4088                     "qla_target(%d): Out of resources, host %ld\n",
4089                     vha->vp_idx, vha->host_no);
4090                 break;
4091
4092         case IMM_NTFY_MSG_RX:
4093                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf038,
4094                     "qla_target(%d): Immediate notify task %x\n",
4095                     vha->vp_idx, iocb->u.isp2x.task_flags);
4096                 if (qlt_handle_task_mgmt(vha, iocb) == 0)
4097                         send_notify_ack = 0;
4098                 break;
4099
4100         case IMM_NTFY_ELS:
4101                 if (qlt_24xx_handle_els(vha, iocb) == 0)
4102                         send_notify_ack = 0;
4103                 break;
4104
4105         case IMM_NTFY_SRR:
4106                 qlt_prepare_srr_imm(vha, iocb);
4107                 send_notify_ack = 0;
4108                 break;
4109
4110         default:
4111                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf06d,
4112                     "qla_target(%d): Received unknown immediate "
4113                     "notify status %x\n", vha->vp_idx, status);
4114                 break;
4115         }
4116
4117         if (send_notify_ack)
4118                 qlt_send_notify_ack(vha, iocb, add_flags, 0, 0, 0, 0, 0);
4119 }
4120
4121 /*
4122  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
4123  * This function sends busy to ISP 2xxx or 24xx.
4124  */
4125 static void qlt_send_busy(struct scsi_qla_host *vha,
4126         struct atio_from_isp *atio, uint16_t status)
4127 {
4128         struct ctio7_to_24xx *ctio24;
4129         struct qla_hw_data *ha = vha->hw;
4130         request_t *pkt;
4131         struct qla_tgt_sess *sess = NULL;
4132
4133         sess = ha->tgt.tgt_ops->find_sess_by_s_id(vha,
4134             atio->u.isp24.fcp_hdr.s_id);
4135         if (!sess) {
4136                 qlt_send_term_exchange(vha, NULL, atio, 1);
4137                 return;
4138         }
4139         /* Sending marker isn't necessary, since we called from ISR */
4140
4141         pkt = (request_t *)qla2x00_alloc_iocbs(vha, NULL);
4142         if (!pkt) {
4143                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf06e,
4144                     "qla_target(%d): %s failed: unable to allocate "
4145                     "request packet", vha->vp_idx, __func__);
4146                 return;
4147         }
4148
4149         pkt->entry_count = 1;
4150         pkt->handle = QLA_TGT_SKIP_HANDLE | CTIO_COMPLETION_HANDLE_MARK;
4151
4152         ctio24 = (struct ctio7_to_24xx *)pkt;
4153         ctio24->entry_type = CTIO_TYPE7;
4154         ctio24->nport_handle = sess->loop_id;
4155         ctio24->timeout = __constant_cpu_to_le16(QLA_TGT_TIMEOUT);
4156         ctio24->vp_index = vha->vp_idx;
4157         ctio24->initiator_id[0] = atio->u.isp24.fcp_hdr.s_id[2];
4158         ctio24->initiator_id[1] = atio->u.isp24.fcp_hdr.s_id[1];
4159         ctio24->initiator_id[2] = atio->u.isp24.fcp_hdr.s_id[0];
4160         ctio24->exchange_addr = atio->u.isp24.exchange_addr;
4161         ctio24->u.status1.flags = (atio->u.isp24.attr << 9) |
4162             __constant_cpu_to_le16(
4163                 CTIO7_FLAGS_STATUS_MODE_1 | CTIO7_FLAGS_SEND_STATUS |
4164                 CTIO7_FLAGS_DONT_RET_CTIO);
4165         /*
4166          * CTIO from fw w/o se_cmd doesn't provide enough info to retry it,
4167          * if the explicit conformation is used.
4168          */
4169         ctio24->u.status1.ox_id = swab16(atio->u.isp24.fcp_hdr.ox_id);
4170         ctio24->u.status1.scsi_status = cpu_to_le16(status);
4171         ctio24->u.status1.residual = get_unaligned((uint32_t *)
4172             &atio->u.isp24.fcp_cmnd.add_cdb[
4173             atio->u.isp24.fcp_cmnd.add_cdb_len]);
4174         if (ctio24->u.status1.residual != 0)
4175                 ctio24->u.status1.scsi_status |= SS_RESIDUAL_UNDER;
4176
4177         qla2x00_start_iocbs(vha, vha->req);
4178 }
4179
4180 /* ha->hardware_lock supposed to be held on entry */
4181 /* called via callback from qla2xxx */
4182 static void qlt_24xx_atio_pkt(struct scsi_qla_host *vha,
4183         struct atio_from_isp *atio)
4184 {
4185         struct qla_hw_data *ha = vha->hw;
4186         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
4187         int rc;
4188
4189         if (unlikely(tgt == NULL)) {
4190                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf039,
4191                     "ATIO pkt, but no tgt (ha %p)", ha);
4192                 return;
4193         }
4194         ql_dbg(ql_dbg_tgt, vha, 0xe02c,
4195             "qla_target(%d): ATIO pkt %p: type %02x count %02x",
4196             vha->vp_idx, atio, atio->u.raw.entry_type,
4197             atio->u.raw.entry_count);
4198         /*
4199          * In tgt_stop mode we also should allow all requests to pass.
4200          * Otherwise, some commands can stuck.
4201          */
4202
4203         tgt->irq_cmd_count++;
4204
4205         switch (atio->u.raw.entry_type) {
4206         case ATIO_TYPE7:
4207                 ql_dbg(ql_dbg_tgt, vha, 0xe02d,
4208                     "ATIO_TYPE7 instance %d, lun %Lx, read/write %d/%d, cdb %x, add_cdb_len %x, data_length %04x, s_id %02x%02x%02x\n",
4209                     vha->vp_idx, atio->u.isp24.fcp_cmnd.lun,
4210                     atio->u.isp24.fcp_cmnd.rddata,
4211                     atio->u.isp24.fcp_cmnd.wrdata,
4212                     atio->u.isp24.fcp_cmnd.cdb[0],
4213                     atio->u.isp24.fcp_cmnd.add_cdb_len,
4214                     be32_to_cpu(get_unaligned((uint32_t *)
4215                         &atio->u.isp24.fcp_cmnd.add_cdb[
4216                         atio->u.isp24.fcp_cmnd.add_cdb_len])),
4217                     atio->u.isp24.fcp_hdr.s_id[0],
4218                     atio->u.isp24.fcp_hdr.s_id[1],
4219                     atio->u.isp24.fcp_hdr.s_id[2]);
4220
4221                 if (unlikely(atio->u.isp24.exchange_addr ==
4222                     ATIO_EXCHANGE_ADDRESS_UNKNOWN)) {
4223                         ql_dbg(ql_dbg_tgt, vha, 0xe058,
4224                             "qla_target(%d): ATIO_TYPE7 "
4225                             "received with UNKNOWN exchange address, "
4226                             "sending QUEUE_FULL\n", vha->vp_idx);
4227                         qlt_send_busy(vha, atio, SAM_STAT_TASK_SET_FULL);
4228                         break;
4229                 }
4230                 if (likely(atio->u.isp24.fcp_cmnd.task_mgmt_flags == 0))
4231                         rc = qlt_handle_cmd_for_atio(vha, atio);
4232                 else
4233                         rc = qlt_handle_task_mgmt(vha, atio);
4234                 if (unlikely(rc != 0)) {
4235                         if (rc == -ESRCH) {
4236 #if 1 /* With TERM EXCHANGE some FC cards refuse to boot */
4237                                 qlt_send_busy(vha, atio, SAM_STAT_BUSY);
4238 #else
4239                                 qlt_send_term_exchange(vha, NULL, atio, 1);
4240 #endif
4241                         } else {
4242                                 if (tgt->tgt_stop) {
4243                                         ql_dbg(ql_dbg_tgt, vha, 0xe059,
4244                                             "qla_target: Unable to send "
4245                                             "command to target for req, "
4246                                             "ignoring.\n");
4247                                 } else {
4248                                         ql_dbg(ql_dbg_tgt, vha, 0xe05a,
4249                                             "qla_target(%d): Unable to send "
4250                                             "command to target, sending BUSY "
4251                                             "status.\n", vha->vp_idx);
4252                                         qlt_send_busy(vha, atio, SAM_STAT_BUSY);
4253                                 }
4254                         }
4255                 }
4256                 break;
4257
4258         case IMMED_NOTIFY_TYPE:
4259         {
4260                 if (unlikely(atio->u.isp2x.entry_status != 0)) {
4261                         ql_dbg(ql_dbg_tgt, vha, 0xe05b,
4262                             "qla_target(%d): Received ATIO packet %x "
4263                             "with error status %x\n", vha->vp_idx,
4264                             atio->u.raw.entry_type,
4265                             atio->u.isp2x.entry_status);
4266                         break;
4267                 }
4268                 ql_dbg(ql_dbg_tgt, vha, 0xe02e, "%s", "IMMED_NOTIFY ATIO");
4269                 qlt_handle_imm_notify(vha, (struct imm_ntfy_from_isp *)atio);
4270                 break;
4271         }
4272
4273         default:
4274                 ql_dbg(ql_dbg_tgt, vha, 0xe05c,
4275                     "qla_target(%d): Received unknown ATIO atio "
4276                     "type %x\n", vha->vp_idx, atio->u.raw.entry_type);
4277                 break;
4278         }
4279
4280         tgt->irq_cmd_count--;
4281 }
4282
4283 /* ha->hardware_lock supposed to be held on entry */
4284 /* called via callback from qla2xxx */
4285 static void qlt_response_pkt(struct scsi_qla_host *vha, response_t *pkt)
4286 {
4287         struct qla_hw_data *ha = vha->hw;
4288         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
4289
4290         if (unlikely(tgt == NULL)) {
4291                 ql_dbg(ql_dbg_tgt, vha, 0xe05d,
4292                     "qla_target(%d): Response pkt %x received, but no "
4293                     "tgt (ha %p)\n", vha->vp_idx, pkt->entry_type, ha);
4294                 return;
4295         }
4296
4297         ql_dbg(ql_dbg_tgt, vha, 0xe02f,
4298             "qla_target(%d): response pkt %p: T %02x C %02x S %02x "
4299             "handle %#x\n", vha->vp_idx, pkt, pkt->entry_type,
4300             pkt->entry_count, pkt->entry_status, pkt->handle);
4301
4302         /*
4303          * In tgt_stop mode we also should allow all requests to pass.
4304          * Otherwise, some commands can stuck.
4305          */
4306
4307         tgt->irq_cmd_count++;
4308
4309         switch (pkt->entry_type) {
4310         case CTIO_CRC2:
4311         case CTIO_TYPE7:
4312         {
4313                 struct ctio7_from_24xx *entry = (struct ctio7_from_24xx *)pkt;
4314                 ql_dbg(ql_dbg_tgt, vha, 0xe030,
4315                         "CTIO[0x%x] 12/CTIO7 7A/CRC2: instance %d\n",
4316                         entry->entry_type, vha->vp_idx);
4317                 qlt_do_ctio_completion(vha, entry->handle,
4318                     le16_to_cpu(entry->status)|(pkt->entry_status << 16),
4319                     entry);
4320                 break;
4321         }
4322
4323         case ACCEPT_TGT_IO_TYPE:
4324         {
4325                 struct atio_from_isp *atio = (struct atio_from_isp *)pkt;
4326                 int rc;
4327                 ql_dbg(ql_dbg_tgt, vha, 0xe031,
4328                     "ACCEPT_TGT_IO instance %d status %04x "
4329                     "lun %04x read/write %d data_length %04x "
4330                     "target_id %02x rx_id %04x\n ", vha->vp_idx,
4331                     le16_to_cpu(atio->u.isp2x.status),
4332                     le16_to_cpu(atio->u.isp2x.lun),
4333                     atio->u.isp2x.execution_codes,
4334                     le32_to_cpu(atio->u.isp2x.data_length), GET_TARGET_ID(ha,
4335                     atio), atio->u.isp2x.rx_id);
4336                 if (atio->u.isp2x.status !=
4337                     __constant_cpu_to_le16(ATIO_CDB_VALID)) {
4338                         ql_dbg(ql_dbg_tgt, vha, 0xe05e,
4339                             "qla_target(%d): ATIO with error "
4340                             "status %x received\n", vha->vp_idx,
4341                             le16_to_cpu(atio->u.isp2x.status));
4342                         break;
4343                 }
4344                 ql_dbg(ql_dbg_tgt, vha, 0xe032,
4345                     "FCP CDB: 0x%02x, sizeof(cdb): %lu",
4346                     atio->u.isp2x.cdb[0], (unsigned long
4347                     int)sizeof(atio->u.isp2x.cdb));
4348
4349                 rc = qlt_handle_cmd_for_atio(vha, atio);
4350                 if (unlikely(rc != 0)) {
4351                         if (rc == -ESRCH) {
4352 #if 1 /* With TERM EXCHANGE some FC cards refuse to boot */
4353                                 qlt_send_busy(vha, atio, 0);
4354 #else
4355                                 qlt_send_term_exchange(vha, NULL, atio, 1);
4356 #endif
4357                         } else {
4358                                 if (tgt->tgt_stop) {
4359                                         ql_dbg(ql_dbg_tgt, vha, 0xe05f,
4360                                             "qla_target: Unable to send "
4361                                             "command to target, sending TERM "
4362                                             "EXCHANGE for rsp\n");
4363                                         qlt_send_term_exchange(vha, NULL,
4364                                             atio, 1);
4365                                 } else {
4366                                         ql_dbg(ql_dbg_tgt, vha, 0xe060,
4367                                             "qla_target(%d): Unable to send "
4368                                             "command to target, sending BUSY "
4369                                             "status\n", vha->vp_idx);
4370                                         qlt_send_busy(vha, atio, 0);
4371                                 }
4372                         }
4373                 }
4374         }
4375         break;
4376
4377         case CONTINUE_TGT_IO_TYPE:
4378         {
4379                 struct ctio_to_2xxx *entry = (struct ctio_to_2xxx *)pkt;
4380                 ql_dbg(ql_dbg_tgt, vha, 0xe033,
4381                     "CONTINUE_TGT_IO: instance %d\n", vha->vp_idx);
4382                 qlt_do_ctio_completion(vha, entry->handle,
4383                     le16_to_cpu(entry->status)|(pkt->entry_status << 16),
4384                     entry);
4385                 break;
4386         }
4387
4388         case CTIO_A64_TYPE:
4389         {
4390                 struct ctio_to_2xxx *entry = (struct ctio_to_2xxx *)pkt;
4391                 ql_dbg(ql_dbg_tgt, vha, 0xe034, "CTIO_A64: instance %d\n",
4392                     vha->vp_idx);
4393                 qlt_do_ctio_completion(vha, entry->handle,
4394                     le16_to_cpu(entry->status)|(pkt->entry_status << 16),
4395                     entry);
4396                 break;
4397         }
4398
4399         case IMMED_NOTIFY_TYPE:
4400                 ql_dbg(ql_dbg_tgt, vha, 0xe035, "%s", "IMMED_NOTIFY\n");
4401                 qlt_handle_imm_notify(vha, (struct imm_ntfy_from_isp *)pkt);
4402                 break;
4403
4404         case NOTIFY_ACK_TYPE:
4405                 if (tgt->notify_ack_expected > 0) {
4406                         struct nack_to_isp *entry = (struct nack_to_isp *)pkt;
4407                         ql_dbg(ql_dbg_tgt, vha, 0xe036,
4408                             "NOTIFY_ACK seq %08x status %x\n",
4409                             le16_to_cpu(entry->u.isp2x.seq_id),
4410                             le16_to_cpu(entry->u.isp2x.status));
4411                         tgt->notify_ack_expected--;
4412                         if (entry->u.isp2x.status !=
4413                             __constant_cpu_to_le16(NOTIFY_ACK_SUCCESS)) {
4414                                 ql_dbg(ql_dbg_tgt, vha, 0xe061,
4415                                     "qla_target(%d): NOTIFY_ACK "
4416                                     "failed %x\n", vha->vp_idx,
4417                                     le16_to_cpu(entry->u.isp2x.status));
4418                         }
4419                 } else {
4420                         ql_dbg(ql_dbg_tgt, vha, 0xe062,
4421                             "qla_target(%d): Unexpected NOTIFY_ACK received\n",
4422                             vha->vp_idx);
4423                 }
4424                 break;
4425
4426         case ABTS_RECV_24XX:
4427                 ql_dbg(ql_dbg_tgt, vha, 0xe037,
4428                     "ABTS_RECV_24XX: instance %d\n", vha->vp_idx);
4429                 qlt_24xx_handle_abts(vha, (struct abts_recv_from_24xx *)pkt);
4430                 break;
4431
4432         case ABTS_RESP_24XX:
4433                 if (tgt->abts_resp_expected > 0) {
4434                         struct abts_resp_from_24xx_fw *entry =
4435                                 (struct abts_resp_from_24xx_fw *)pkt;
4436                         ql_dbg(ql_dbg_tgt, vha, 0xe038,
4437                             "ABTS_RESP_24XX: compl_status %x\n",
4438                             entry->compl_status);
4439                         tgt->abts_resp_expected--;
4440                         if (le16_to_cpu(entry->compl_status) !=
4441                             ABTS_RESP_COMPL_SUCCESS) {
4442                                 if ((entry->error_subcode1 == 0x1E) &&
4443                                     (entry->error_subcode2 == 0)) {
4444                                         /*
4445                                          * We've got a race here: aborted
4446                                          * exchange not terminated, i.e.
4447                                          * response for the aborted command was
4448                                          * sent between the abort request was
4449                                          * received and processed.
4450                                          * Unfortunately, the firmware has a
4451                                          * silly requirement that all aborted
4452                                          * exchanges must be explicitely
4453                                          * terminated, otherwise it refuses to
4454                                          * send responses for the abort
4455                                          * requests. So, we have to
4456                                          * (re)terminate the exchange and retry
4457                                          * the abort response.
4458                                          */
4459                                         qlt_24xx_retry_term_exchange(vha,
4460                                             entry);
4461                                 } else
4462                                         ql_dbg(ql_dbg_tgt, vha, 0xe063,
4463                                             "qla_target(%d): ABTS_RESP_24XX "
4464                                             "failed %x (subcode %x:%x)",
4465                                             vha->vp_idx, entry->compl_status,
4466                                             entry->error_subcode1,
4467                                             entry->error_subcode2);
4468                         }
4469                 } else {
4470                         ql_dbg(ql_dbg_tgt, vha, 0xe064,
4471                             "qla_target(%d): Unexpected ABTS_RESP_24XX "
4472                             "received\n", vha->vp_idx);
4473                 }
4474                 break;
4475
4476         default:
4477                 ql_dbg(ql_dbg_tgt, vha, 0xe065,
4478                     "qla_target(%d): Received unknown response pkt "
4479                     "type %x\n", vha->vp_idx, pkt->entry_type);
4480                 break;
4481         }
4482
4483         tgt->irq_cmd_count--;
4484 }
4485
4486 /*
4487  * ha->hardware_lock supposed to be held on entry. Might drop it, then reaquire
4488  */
4489 void qlt_async_event(uint16_t code, struct scsi_qla_host *vha,
4490         uint16_t *mailbox)
4491 {
4492         struct qla_hw_data *ha = vha->hw;
4493         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
4494         int login_code;
4495
4496         ql_dbg(ql_dbg_tgt, vha, 0xe039,
4497             "scsi(%ld): ha state %d init_done %d oper_mode %d topo %d\n",
4498             vha->host_no, atomic_read(&vha->loop_state), vha->flags.init_done,
4499             ha->operating_mode, ha->current_topology);
4500
4501         if (!ha->tgt.tgt_ops)
4502                 return;
4503
4504         if (unlikely(tgt == NULL)) {
4505                 ql_dbg(ql_dbg_tgt, vha, 0xe03a,
4506                     "ASYNC EVENT %#x, but no tgt (ha %p)\n", code, ha);
4507                 return;
4508         }
4509
4510         if (((code == MBA_POINT_TO_POINT) || (code == MBA_CHG_IN_CONNECTION)) &&
4511             IS_QLA2100(ha))
4512                 return;
4513         /*
4514          * In tgt_stop mode we also should allow all requests to pass.
4515          * Otherwise, some commands can stuck.
4516          */
4517
4518         tgt->irq_cmd_count++;
4519
4520         switch (code) {
4521         case MBA_RESET:                 /* Reset */
4522         case MBA_SYSTEM_ERR:            /* System Error */
4523         case MBA_REQ_TRANSFER_ERR:      /* Request Transfer Error */
4524         case MBA_RSP_TRANSFER_ERR:      /* Response Transfer Error */
4525                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf03a,
4526                     "qla_target(%d): System error async event %#x "
4527                     "occurred", vha->vp_idx, code);
4528                 break;
4529         case MBA_WAKEUP_THRES:          /* Request Queue Wake-up. */
4530                 set_bit(ISP_ABORT_NEEDED, &vha->dpc_flags);
4531                 break;
4532
4533         case MBA_LOOP_UP:
4534         {
4535                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf03b,
4536                     "qla_target(%d): Async LOOP_UP occurred "
4537                     "(m[0]=%x, m[1]=%x, m[2]=%x, m[3]=%x)", vha->vp_idx,
4538                     le16_to_cpu(mailbox[0]), le16_to_cpu(mailbox[1]),
4539                     le16_to_cpu(mailbox[2]), le16_to_cpu(mailbox[3]));
4540                 if (tgt->link_reinit_iocb_pending) {
4541                         qlt_send_notify_ack(vha, (void *)&tgt->link_reinit_iocb,
4542                             0, 0, 0, 0, 0, 0);
4543                         tgt->link_reinit_iocb_pending = 0;
4544                 }
4545                 break;
4546         }
4547
4548         case MBA_LIP_OCCURRED:
4549         case MBA_LOOP_DOWN:
4550         case MBA_LIP_RESET:
4551         case MBA_RSCN_UPDATE:
4552                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf03c,
4553                     "qla_target(%d): Async event %#x occurred "
4554                     "(m[0]=%x, m[1]=%x, m[2]=%x, m[3]=%x)", vha->vp_idx, code,
4555                     le16_to_cpu(mailbox[0]), le16_to_cpu(mailbox[1]),
4556                     le16_to_cpu(mailbox[2]), le16_to_cpu(mailbox[3]));
4557                 break;
4558
4559         case MBA_PORT_UPDATE:
4560                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf03d,
4561                     "qla_target(%d): Port update async event %#x "
4562                     "occurred: updating the ports database (m[0]=%x, m[1]=%x, "
4563                     "m[2]=%x, m[3]=%x)", vha->vp_idx, code,
4564                     le16_to_cpu(mailbox[0]), le16_to_cpu(mailbox[1]),
4565                     le16_to_cpu(mailbox[2]), le16_to_cpu(mailbox[3]));
4566
4567                 login_code = le16_to_cpu(mailbox[2]);
4568                 if (login_code == 0x4)
4569                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf03e,
4570                             "Async MB 2: Got PLOGI Complete\n");
4571                 else if (login_code == 0x7)
4572                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf03f,
4573                             "Async MB 2: Port Logged Out\n");
4574                 break;
4575
4576         default:
4577                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf040,
4578                     "qla_target(%d): Async event %#x occurred: "
4579                     "ignore (m[0]=%x, m[1]=%x, m[2]=%x, m[3]=%x)", vha->vp_idx,
4580                     code, le16_to_cpu(mailbox[0]), le16_to_cpu(mailbox[1]),
4581                     le16_to_cpu(mailbox[2]), le16_to_cpu(mailbox[3]));
4582                 break;
4583         }
4584
4585         tgt->irq_cmd_count--;
4586 }
4587
4588 static fc_port_t *qlt_get_port_database(struct scsi_qla_host *vha,
4589         uint16_t loop_id)
4590 {
4591         fc_port_t *fcport;
4592         int rc;
4593
4594         fcport = kzalloc(sizeof(*fcport), GFP_KERNEL);
4595         if (!fcport) {
4596                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf06f,
4597                     "qla_target(%d): Allocation of tmp FC port failed",
4598                     vha->vp_idx);
4599                 return NULL;
4600         }
4601
4602         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf041, "loop_id %d", loop_id);
4603
4604         fcport->loop_id = loop_id;
4605
4606         rc = qla2x00_get_port_database(vha, fcport, 0);
4607         if (rc != QLA_SUCCESS) {
4608                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf070,
4609                     "qla_target(%d): Failed to retrieve fcport "
4610                     "information -- get_port_database() returned %x "
4611                     "(loop_id=0x%04x)", vha->vp_idx, rc, loop_id);
4612                 kfree(fcport);
4613                 return NULL;
4614         }
4615
4616         return fcport;
4617 }
4618
4619 /* Must be called under tgt_mutex */
4620 static struct qla_tgt_sess *qlt_make_local_sess(struct scsi_qla_host *vha,
4621         uint8_t *s_id)
4622 {
4623         struct qla_tgt_sess *sess = NULL;
4624         fc_port_t *fcport = NULL;
4625         int rc, global_resets;
4626         uint16_t loop_id = 0;
4627
4628 retry:
4629         global_resets =
4630             atomic_read(&vha->vha_tgt.qla_tgt->tgt_global_resets_count);
4631
4632         rc = qla24xx_get_loop_id(vha, s_id, &loop_id);
4633         if (rc != 0) {
4634                 if ((s_id[0] == 0xFF) &&
4635                     (s_id[1] == 0xFC)) {
4636                         /*
4637                          * This is Domain Controller, so it should be
4638                          * OK to drop SCSI commands from it.
4639                          */
4640                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf042,
4641                             "Unable to find initiator with S_ID %x:%x:%x",
4642                             s_id[0], s_id[1], s_id[2]);
4643                 } else
4644                         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf071,
4645                             "qla_target(%d): Unable to find "
4646                             "initiator with S_ID %x:%x:%x",
4647                             vha->vp_idx, s_id[0], s_id[1],
4648                             s_id[2]);
4649                 return NULL;
4650         }
4651
4652         fcport = qlt_get_port_database(vha, loop_id);
4653         if (!fcport)
4654                 return NULL;
4655
4656         if (global_resets !=
4657             atomic_read(&vha->vha_tgt.qla_tgt->tgt_global_resets_count)) {
4658                 ql_dbg(ql_dbg_tgt_mgt, vha, 0xf043,
4659                     "qla_target(%d): global reset during session discovery "
4660                     "(counter was %d, new %d), retrying", vha->vp_idx,
4661                     global_resets,
4662                     atomic_read(&vha->vha_tgt.
4663                         qla_tgt->tgt_global_resets_count));
4664                 goto retry;
4665         }
4666
4667         sess = qlt_create_sess(vha, fcport, true);
4668
4669         kfree(fcport);
4670         return sess;
4671 }
4672
4673 static void qlt_abort_work(struct qla_tgt *tgt,
4674         struct qla_tgt_sess_work_param *prm)
4675 {
4676         struct scsi_qla_host *vha = tgt->vha;
4677         struct qla_hw_data *ha = vha->hw;
4678         struct qla_tgt_sess *sess = NULL;
4679         unsigned long flags;
4680         uint32_t be_s_id;
4681         uint8_t s_id[3];
4682         int rc;
4683
4684         spin_lock_irqsave(&ha->hardware_lock, flags);
4685
4686         if (tgt->tgt_stop)
4687                 goto out_term;
4688
4689         s_id[0] = prm->abts.fcp_hdr_le.s_id[2];
4690         s_id[1] = prm->abts.fcp_hdr_le.s_id[1];
4691         s_id[2] = prm->abts.fcp_hdr_le.s_id[0];
4692
4693         sess = ha->tgt.tgt_ops->find_sess_by_s_id(vha,
4694             (unsigned char *)&be_s_id);
4695         if (!sess) {
4696                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
4697
4698                 mutex_lock(&vha->vha_tgt.tgt_mutex);
4699                 sess = qlt_make_local_sess(vha, s_id);
4700                 /* sess has got an extra creation ref */
4701                 mutex_unlock(&vha->vha_tgt.tgt_mutex);
4702
4703                 spin_lock_irqsave(&ha->hardware_lock, flags);
4704                 if (!sess)
4705                         goto out_term;
4706         } else {
4707                 kref_get(&sess->se_sess->sess_kref);
4708         }
4709
4710         if (tgt->tgt_stop)
4711                 goto out_term;
4712
4713         rc = __qlt_24xx_handle_abts(vha, &prm->abts, sess);
4714         if (rc != 0)
4715                 goto out_term;
4716
4717         ha->tgt.tgt_ops->put_sess(sess);
4718         spin_unlock_irqrestore(&ha->hardware_lock, flags);
4719         return;
4720
4721 out_term:
4722         qlt_24xx_send_abts_resp(vha, &prm->abts, FCP_TMF_REJECTED, false);
4723         if (sess)
4724                 ha->tgt.tgt_ops->put_sess(sess);
4725         spin_unlock_irqrestore(&ha->hardware_lock, flags);
4726 }
4727
4728 static void qlt_tmr_work(struct qla_tgt *tgt,
4729         struct qla_tgt_sess_work_param *prm)
4730 {
4731         struct atio_from_isp *a = &prm->tm_iocb2;
4732         struct scsi_qla_host *vha = tgt->vha;
4733         struct qla_hw_data *ha = vha->hw;
4734         struct qla_tgt_sess *sess = NULL;
4735         unsigned long flags;
4736         uint8_t *s_id = NULL; /* to hide compiler warnings */
4737         int rc;
4738         uint32_t lun, unpacked_lun;
4739         int lun_size, fn;
4740         void *iocb;
4741
4742         spin_lock_irqsave(&ha->hardware_lock, flags);
4743
4744         if (tgt->tgt_stop)
4745                 goto out_term;
4746
4747         s_id = prm->tm_iocb2.u.isp24.fcp_hdr.s_id;
4748         sess = ha->tgt.tgt_ops->find_sess_by_s_id(vha, s_id);
4749         if (!sess) {
4750                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
4751
4752                 mutex_lock(&vha->vha_tgt.tgt_mutex);
4753                 sess = qlt_make_local_sess(vha, s_id);
4754                 /* sess has got an extra creation ref */
4755                 mutex_unlock(&vha->vha_tgt.tgt_mutex);
4756
4757                 spin_lock_irqsave(&ha->hardware_lock, flags);
4758                 if (!sess)
4759                         goto out_term;
4760         } else {
4761                 kref_get(&sess->se_sess->sess_kref);
4762         }
4763
4764         iocb = a;
4765         lun = a->u.isp24.fcp_cmnd.lun;
4766         lun_size = sizeof(lun);
4767         fn = a->u.isp24.fcp_cmnd.task_mgmt_flags;
4768         unpacked_lun = scsilun_to_int((struct scsi_lun *)&lun);
4769
4770         rc = qlt_issue_task_mgmt(sess, unpacked_lun, fn, iocb, 0);
4771         if (rc != 0)
4772                 goto out_term;
4773
4774         ha->tgt.tgt_ops->put_sess(sess);
4775         spin_unlock_irqrestore(&ha->hardware_lock, flags);
4776         return;
4777
4778 out_term:
4779         qlt_send_term_exchange(vha, NULL, &prm->tm_iocb2, 1);
4780         if (sess)
4781                 ha->tgt.tgt_ops->put_sess(sess);
4782         spin_unlock_irqrestore(&ha->hardware_lock, flags);
4783 }
4784
4785 static void qlt_sess_work_fn(struct work_struct *work)
4786 {
4787         struct qla_tgt *tgt = container_of(work, struct qla_tgt, sess_work);
4788         struct scsi_qla_host *vha = tgt->vha;
4789         unsigned long flags;
4790
4791         ql_dbg(ql_dbg_tgt_mgt, vha, 0xf000, "Sess work (tgt %p)", tgt);
4792
4793         spin_lock_irqsave(&tgt->sess_work_lock, flags);
4794         while (!list_empty(&tgt->sess_works_list)) {
4795                 struct qla_tgt_sess_work_param *prm = list_entry(
4796                     tgt->sess_works_list.next, typeof(*prm),
4797                     sess_works_list_entry);
4798
4799                 /*
4800                  * This work can be scheduled on several CPUs at time, so we
4801                  * must delete the entry to eliminate double processing
4802                  */
4803                 list_del(&prm->sess_works_list_entry);
4804
4805                 spin_unlock_irqrestore(&tgt->sess_work_lock, flags);
4806
4807                 switch (prm->type) {
4808                 case QLA_TGT_SESS_WORK_ABORT:
4809                         qlt_abort_work(tgt, prm);
4810                         break;
4811                 case QLA_TGT_SESS_WORK_TM:
4812                         qlt_tmr_work(tgt, prm);
4813                         break;
4814                 default:
4815                         BUG_ON(1);
4816                         break;
4817                 }
4818
4819                 spin_lock_irqsave(&tgt->sess_work_lock, flags);
4820
4821                 kfree(prm);
4822         }
4823         spin_unlock_irqrestore(&tgt->sess_work_lock, flags);
4824 }
4825
4826 /* Must be called under tgt_host_action_mutex */
4827 int qlt_add_target(struct qla_hw_data *ha, struct scsi_qla_host *base_vha)
4828 {
4829         struct qla_tgt *tgt;
4830
4831         if (!QLA_TGT_MODE_ENABLED())
4832                 return 0;
4833
4834         if (!IS_TGT_MODE_CAPABLE(ha)) {
4835                 ql_log(ql_log_warn, base_vha, 0xe070,
4836                     "This adapter does not support target mode.\n");
4837                 return 0;
4838         }
4839
4840         ql_dbg(ql_dbg_tgt, base_vha, 0xe03b,
4841             "Registering target for host %ld(%p).\n", base_vha->host_no, ha);
4842
4843         BUG_ON(base_vha->vha_tgt.qla_tgt != NULL);
4844
4845         tgt = kzalloc(sizeof(struct qla_tgt), GFP_KERNEL);
4846         if (!tgt) {
4847                 ql_dbg(ql_dbg_tgt, base_vha, 0xe066,
4848                     "Unable to allocate struct qla_tgt\n");
4849                 return -ENOMEM;
4850         }
4851
4852         if (!(base_vha->host->hostt->supported_mode & MODE_TARGET))
4853                 base_vha->host->hostt->supported_mode |= MODE_TARGET;
4854
4855         tgt->ha = ha;
4856         tgt->vha = base_vha;
4857         init_waitqueue_head(&tgt->waitQ);
4858         INIT_LIST_HEAD(&tgt->sess_list);
4859         INIT_LIST_HEAD(&tgt->del_sess_list);
4860         INIT_DELAYED_WORK(&tgt->sess_del_work,
4861                 (void (*)(struct work_struct *))qlt_del_sess_work_fn);
4862         spin_lock_init(&tgt->sess_work_lock);
4863         INIT_WORK(&tgt->sess_work, qlt_sess_work_fn);
4864         INIT_LIST_HEAD(&tgt->sess_works_list);
4865         spin_lock_init(&tgt->srr_lock);
4866         INIT_LIST_HEAD(&tgt->srr_ctio_list);
4867         INIT_LIST_HEAD(&tgt->srr_imm_list);
4868         INIT_WORK(&tgt->srr_work, qlt_handle_srr_work);
4869         atomic_set(&tgt->tgt_global_resets_count, 0);
4870
4871         base_vha->vha_tgt.qla_tgt = tgt;
4872
4873         ql_dbg(ql_dbg_tgt, base_vha, 0xe067,
4874                 "qla_target(%d): using 64 Bit PCI addressing",
4875                 base_vha->vp_idx);
4876         tgt->tgt_enable_64bit_addr = 1;
4877         /* 3 is reserved */
4878         tgt->sg_tablesize = QLA_TGT_MAX_SG_24XX(base_vha->req->length - 3);
4879         tgt->datasegs_per_cmd = QLA_TGT_DATASEGS_PER_CMD_24XX;
4880         tgt->datasegs_per_cont = QLA_TGT_DATASEGS_PER_CONT_24XX;
4881
4882         if (base_vha->fc_vport)
4883                 return 0;
4884
4885         mutex_lock(&qla_tgt_mutex);
4886         list_add_tail(&tgt->tgt_list_entry, &qla_tgt_glist);
4887         mutex_unlock(&qla_tgt_mutex);
4888
4889         return 0;
4890 }
4891
4892 /* Must be called under tgt_host_action_mutex */
4893 int qlt_remove_target(struct qla_hw_data *ha, struct scsi_qla_host *vha)
4894 {
4895         if (!vha->vha_tgt.qla_tgt)
4896                 return 0;
4897
4898         if (vha->fc_vport) {
4899                 qlt_release(vha->vha_tgt.qla_tgt);
4900                 return 0;
4901         }
4902         mutex_lock(&qla_tgt_mutex);
4903         list_del(&vha->vha_tgt.qla_tgt->tgt_list_entry);
4904         mutex_unlock(&qla_tgt_mutex);
4905
4906         ql_dbg(ql_dbg_tgt, vha, 0xe03c, "Unregistering target for host %ld(%p)",
4907             vha->host_no, ha);
4908         qlt_release(vha->vha_tgt.qla_tgt);
4909
4910         return 0;
4911 }
4912
4913 static void qlt_lport_dump(struct scsi_qla_host *vha, u64 wwpn,
4914         unsigned char *b)
4915 {
4916         int i;
4917
4918         pr_debug("qla2xxx HW vha->node_name: ");
4919         for (i = 0; i < WWN_SIZE; i++)
4920                 pr_debug("%02x ", vha->node_name[i]);
4921         pr_debug("\n");
4922         pr_debug("qla2xxx HW vha->port_name: ");
4923         for (i = 0; i < WWN_SIZE; i++)
4924                 pr_debug("%02x ", vha->port_name[i]);
4925         pr_debug("\n");
4926
4927         pr_debug("qla2xxx passed configfs WWPN: ");
4928         put_unaligned_be64(wwpn, b);
4929         for (i = 0; i < WWN_SIZE; i++)
4930                 pr_debug("%02x ", b[i]);
4931         pr_debug("\n");
4932 }
4933
4934 /**
4935  * qla_tgt_lport_register - register lport with external module
4936  *
4937  * @qla_tgt_ops: Pointer for tcm_qla2xxx qla_tgt_ops
4938  * @wwpn: Passwd FC target WWPN
4939  * @callback:  lport initialization callback for tcm_qla2xxx code
4940  * @target_lport_ptr: pointer for tcm_qla2xxx specific lport data
4941  */
4942 int qlt_lport_register(void *target_lport_ptr, u64 phys_wwpn,
4943                        u64 npiv_wwpn, u64 npiv_wwnn,
4944                        int (*callback)(struct scsi_qla_host *, void *, u64, u64))
4945 {
4946         struct qla_tgt *tgt;
4947         struct scsi_qla_host *vha;
4948         struct qla_hw_data *ha;
4949         struct Scsi_Host *host;
4950         unsigned long flags;
4951         int rc;
4952         u8 b[WWN_SIZE];
4953
4954         mutex_lock(&qla_tgt_mutex);
4955         list_for_each_entry(tgt, &qla_tgt_glist, tgt_list_entry) {
4956                 vha = tgt->vha;
4957                 ha = vha->hw;
4958
4959                 host = vha->host;
4960                 if (!host)
4961                         continue;
4962
4963                 if (!(host->hostt->supported_mode & MODE_TARGET))
4964                         continue;
4965
4966                 spin_lock_irqsave(&ha->hardware_lock, flags);
4967                 if ((!npiv_wwpn || !npiv_wwnn) && host->active_mode & MODE_TARGET) {
4968                         pr_debug("MODE_TARGET already active on qla2xxx(%d)\n",
4969                             host->host_no);
4970                         spin_unlock_irqrestore(&ha->hardware_lock, flags);
4971                         continue;
4972                 }
4973                 if (tgt->tgt_stop) {
4974                         pr_debug("MODE_TARGET in shutdown on qla2xxx(%d)\n",
4975                                  host->host_no);
4976                         spin_unlock_irqrestore(&ha->hardware_lock, flags);
4977                         continue;
4978                 }
4979                 spin_unlock_irqrestore(&ha->hardware_lock, flags);
4980
4981                 if (!scsi_host_get(host)) {
4982                         ql_dbg(ql_dbg_tgt, vha, 0xe068,
4983                             "Unable to scsi_host_get() for"
4984                             " qla2xxx scsi_host\n");
4985                         continue;
4986                 }
4987                 qlt_lport_dump(vha, phys_wwpn, b);
4988
4989                 if (memcmp(vha->port_name, b, WWN_SIZE)) {
4990                         scsi_host_put(host);
4991                         continue;
4992                 }
4993                 rc = (*callback)(vha, target_lport_ptr, npiv_wwpn, npiv_wwnn);
4994                 if (rc != 0)
4995                         scsi_host_put(host);
4996
4997                 mutex_unlock(&qla_tgt_mutex);
4998                 return rc;
4999         }
5000         mutex_unlock(&qla_tgt_mutex);
5001
5002         return -ENODEV;
5003 }
5004 EXPORT_SYMBOL(qlt_lport_register);
5005
5006 /**
5007  * qla_tgt_lport_deregister - Degister lport
5008  *
5009  * @vha:  Registered scsi_qla_host pointer
5010  */
5011 void qlt_lport_deregister(struct scsi_qla_host *vha)
5012 {
5013         struct qla_hw_data *ha = vha->hw;
5014         struct Scsi_Host *sh = vha->host;
5015         /*
5016          * Clear the target_lport_ptr qla_target_template pointer in qla_hw_data
5017          */
5018         vha->vha_tgt.target_lport_ptr = NULL;
5019         ha->tgt.tgt_ops = NULL;
5020         /*
5021          * Release the Scsi_Host reference for the underlying qla2xxx host
5022          */
5023         scsi_host_put(sh);
5024 }
5025 EXPORT_SYMBOL(qlt_lport_deregister);
5026
5027 /* Must be called under HW lock */
5028 void qlt_set_mode(struct scsi_qla_host *vha)
5029 {
5030         struct qla_hw_data *ha = vha->hw;
5031
5032         switch (ql2x_ini_mode) {
5033         case QLA2XXX_INI_MODE_DISABLED:
5034         case QLA2XXX_INI_MODE_EXCLUSIVE:
5035                 vha->host->active_mode = MODE_TARGET;
5036                 break;
5037         case QLA2XXX_INI_MODE_ENABLED:
5038                 vha->host->active_mode |= MODE_TARGET;
5039                 break;
5040         default:
5041                 break;
5042         }
5043
5044         if (ha->tgt.ini_mode_force_reverse)
5045                 qla_reverse_ini_mode(vha);
5046 }
5047
5048 /* Must be called under HW lock */
5049 void qlt_clear_mode(struct scsi_qla_host *vha)
5050 {
5051         struct qla_hw_data *ha = vha->hw;
5052
5053         switch (ql2x_ini_mode) {
5054         case QLA2XXX_INI_MODE_DISABLED:
5055                 vha->host->active_mode = MODE_UNKNOWN;
5056                 break;
5057         case QLA2XXX_INI_MODE_EXCLUSIVE:
5058                 vha->host->active_mode = MODE_INITIATOR;
5059                 break;
5060         case QLA2XXX_INI_MODE_ENABLED:
5061                 vha->host->active_mode &= ~MODE_TARGET;
5062                 break;
5063         default:
5064                 break;
5065         }
5066
5067         if (ha->tgt.ini_mode_force_reverse)
5068                 qla_reverse_ini_mode(vha);
5069 }
5070
5071 /*
5072  * qla_tgt_enable_vha - NO LOCK HELD
5073  *
5074  * host_reset, bring up w/ Target Mode Enabled
5075  */
5076 void
5077 qlt_enable_vha(struct scsi_qla_host *vha)
5078 {
5079         struct qla_hw_data *ha = vha->hw;
5080         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
5081         unsigned long flags;
5082         scsi_qla_host_t *base_vha = pci_get_drvdata(ha->pdev);
5083
5084         if (!tgt) {
5085                 ql_dbg(ql_dbg_tgt, vha, 0xe069,
5086                     "Unable to locate qla_tgt pointer from"
5087                     " struct qla_hw_data\n");
5088                 dump_stack();
5089                 return;
5090         }
5091
5092         spin_lock_irqsave(&ha->hardware_lock, flags);
5093         tgt->tgt_stopped = 0;
5094         qlt_set_mode(vha);
5095         spin_unlock_irqrestore(&ha->hardware_lock, flags);
5096
5097         if (vha->vp_idx) {
5098                 qla24xx_disable_vp(vha);
5099                 qla24xx_enable_vp(vha);
5100         } else {
5101                 set_bit(ISP_ABORT_NEEDED, &base_vha->dpc_flags);
5102                 qla2xxx_wake_dpc(base_vha);
5103                 qla2x00_wait_for_hba_online(base_vha);
5104         }
5105 }
5106 EXPORT_SYMBOL(qlt_enable_vha);
5107
5108 /*
5109  * qla_tgt_disable_vha - NO LOCK HELD
5110  *
5111  * Disable Target Mode and reset the adapter
5112  */
5113 void
5114 qlt_disable_vha(struct scsi_qla_host *vha)
5115 {
5116         struct qla_hw_data *ha = vha->hw;
5117         struct qla_tgt *tgt = vha->vha_tgt.qla_tgt;
5118         unsigned long flags;
5119
5120         if (!tgt) {
5121                 ql_dbg(ql_dbg_tgt, vha, 0xe06a,
5122                     "Unable to locate qla_tgt pointer from"
5123                     " struct qla_hw_data\n");
5124                 dump_stack();
5125                 return;
5126         }
5127
5128         spin_lock_irqsave(&ha->hardware_lock, flags);
5129         qlt_clear_mode(vha);
5130         spin_unlock_irqrestore(&ha->hardware_lock, flags);
5131
5132         set_bit(ISP_ABORT_NEEDED, &vha->dpc_flags);
5133         qla2xxx_wake_dpc(vha);
5134         qla2x00_wait_for_hba_online(vha);
5135 }
5136
5137 /*
5138  * Called from qla_init.c:qla24xx_vport_create() contex to setup
5139  * the target mode specific struct scsi_qla_host and struct qla_hw_data
5140  * members.
5141  */
5142 void
5143 qlt_vport_create(struct scsi_qla_host *vha, struct qla_hw_data *ha)
5144 {
5145         if (!qla_tgt_mode_enabled(vha))
5146                 return;
5147
5148         vha->vha_tgt.qla_tgt = NULL;
5149
5150         mutex_init(&vha->vha_tgt.tgt_mutex);
5151         mutex_init(&vha->vha_tgt.tgt_host_action_mutex);
5152
5153         qlt_clear_mode(vha);
5154
5155         /*
5156          * NOTE: Currently the value is kept the same for <24xx and
5157          * >=24xx ISPs. If it is necessary to change it,
5158          * the check should be added for specific ISPs,
5159          * assigning the value appropriately.
5160          */
5161         ha->tgt.atio_q_length = ATIO_ENTRY_CNT_24XX;
5162
5163         qlt_add_target(ha, vha);
5164 }
5165
5166 void
5167 qlt_rff_id(struct scsi_qla_host *vha, struct ct_sns_req *ct_req)
5168 {
5169         /*
5170          * FC-4 Feature bit 0 indicates target functionality to the name server.
5171          */
5172         if (qla_tgt_mode_enabled(vha)) {
5173                 if (qla_ini_mode_enabled(vha))
5174                         ct_req->req.rff_id.fc4_feature = BIT_0 | BIT_1;
5175                 else
5176                         ct_req->req.rff_id.fc4_feature = BIT_0;
5177         } else if (qla_ini_mode_enabled(vha)) {
5178                 ct_req->req.rff_id.fc4_feature = BIT_1;
5179         }
5180 }
5181
5182 /*
5183  * qlt_init_atio_q_entries() - Initializes ATIO queue entries.
5184  * @ha: HA context
5185  *
5186  * Beginning of ATIO ring has initialization control block already built
5187  * by nvram config routine.
5188  *
5189  * Returns 0 on success.
5190  */
5191 void
5192 qlt_init_atio_q_entries(struct scsi_qla_host *vha)
5193 {
5194         struct qla_hw_data *ha = vha->hw;
5195         uint16_t cnt;
5196         struct atio_from_isp *pkt = (struct atio_from_isp *)ha->tgt.atio_ring;
5197
5198         if (!qla_tgt_mode_enabled(vha))
5199                 return;
5200
5201         for (cnt = 0; cnt < ha->tgt.atio_q_length; cnt++) {
5202                 pkt->u.raw.signature = ATIO_PROCESSED;
5203                 pkt++;
5204         }
5205
5206 }
5207
5208 /*
5209  * qlt_24xx_process_atio_queue() - Process ATIO queue entries.
5210  * @ha: SCSI driver HA context
5211  */
5212 void
5213 qlt_24xx_process_atio_queue(struct scsi_qla_host *vha)
5214 {
5215         struct qla_hw_data *ha = vha->hw;
5216         struct atio_from_isp *pkt;
5217         int cnt, i;
5218
5219         if (!vha->flags.online)
5220                 return;
5221
5222         while (ha->tgt.atio_ring_ptr->signature != ATIO_PROCESSED) {
5223                 pkt = (struct atio_from_isp *)ha->tgt.atio_ring_ptr;
5224                 cnt = pkt->u.raw.entry_count;
5225
5226                 qlt_24xx_atio_pkt_all_vps(vha, (struct atio_from_isp *)pkt);
5227
5228                 for (i = 0; i < cnt; i++) {
5229                         ha->tgt.atio_ring_index++;
5230                         if (ha->tgt.atio_ring_index == ha->tgt.atio_q_length) {
5231                                 ha->tgt.atio_ring_index = 0;
5232                                 ha->tgt.atio_ring_ptr = ha->tgt.atio_ring;
5233                         } else
5234                                 ha->tgt.atio_ring_ptr++;
5235
5236                         pkt->u.raw.signature = ATIO_PROCESSED;
5237                         pkt = (struct atio_from_isp *)ha->tgt.atio_ring_ptr;
5238                 }
5239                 wmb();
5240         }
5241
5242         /* Adjust ring index */
5243         WRT_REG_DWORD(ISP_ATIO_Q_OUT(vha), ha->tgt.atio_ring_index);
5244 }
5245
5246 void
5247 qlt_24xx_config_rings(struct scsi_qla_host *vha)
5248 {
5249         struct qla_hw_data *ha = vha->hw;
5250         if (!QLA_TGT_MODE_ENABLED())
5251                 return;
5252
5253         WRT_REG_DWORD(ISP_ATIO_Q_IN(vha), 0);
5254         WRT_REG_DWORD(ISP_ATIO_Q_OUT(vha), 0);
5255         RD_REG_DWORD(ISP_ATIO_Q_OUT(vha));
5256
5257         if (IS_ATIO_MSIX_CAPABLE(ha)) {
5258                 struct qla_msix_entry *msix = &ha->msix_entries[2];
5259                 struct init_cb_24xx *icb = (struct init_cb_24xx *)ha->init_cb;
5260
5261                 icb->msix_atio = cpu_to_le16(msix->entry);
5262                 ql_dbg(ql_dbg_init, vha, 0xf072,
5263                     "Registering ICB vector 0x%x for atio que.\n",
5264                     msix->entry);
5265         }
5266 }
5267
5268 void
5269 qlt_24xx_config_nvram_stage1(struct scsi_qla_host *vha, struct nvram_24xx *nv)
5270 {
5271         struct qla_hw_data *ha = vha->hw;
5272
5273         if (qla_tgt_mode_enabled(vha)) {
5274                 if (!ha->tgt.saved_set) {
5275                         /* We save only once */
5276                         ha->tgt.saved_exchange_count = nv->exchange_count;
5277                         ha->tgt.saved_firmware_options_1 =
5278                             nv->firmware_options_1;
5279                         ha->tgt.saved_firmware_options_2 =
5280                             nv->firmware_options_2;
5281                         ha->tgt.saved_firmware_options_3 =
5282                             nv->firmware_options_3;
5283                         ha->tgt.saved_set = 1;
5284                 }
5285
5286                 nv->exchange_count = __constant_cpu_to_le16(0xFFFF);
5287
5288                 /* Enable target mode */
5289                 nv->firmware_options_1 |= __constant_cpu_to_le32(BIT_4);
5290
5291                 /* Disable ini mode, if requested */
5292                 if (!qla_ini_mode_enabled(vha))
5293                         nv->firmware_options_1 |= __constant_cpu_to_le32(BIT_5);
5294
5295                 /* Disable Full Login after LIP */
5296                 nv->firmware_options_1 &= __constant_cpu_to_le32(~BIT_13);
5297                 /* Enable initial LIP */
5298                 nv->firmware_options_1 &= __constant_cpu_to_le32(~BIT_9);
5299                 /* Enable FC tapes support */
5300                 nv->firmware_options_2 |= __constant_cpu_to_le32(BIT_12);
5301                 /* Disable Full Login after LIP */
5302                 nv->host_p &= __constant_cpu_to_le32(~BIT_10);
5303                 /* Enable target PRLI control */
5304                 nv->firmware_options_2 |= __constant_cpu_to_le32(BIT_14);
5305         } else {
5306                 if (ha->tgt.saved_set) {
5307                         nv->exchange_count = ha->tgt.saved_exchange_count;
5308                         nv->firmware_options_1 =
5309                             ha->tgt.saved_firmware_options_1;
5310                         nv->firmware_options_2 =
5311                             ha->tgt.saved_firmware_options_2;
5312                         nv->firmware_options_3 =
5313                             ha->tgt.saved_firmware_options_3;
5314                 }
5315                 return;
5316         }
5317
5318         /* out-of-order frames reassembly */
5319         nv->firmware_options_3 |= BIT_6|BIT_9;
5320
5321         if (ha->tgt.enable_class_2) {
5322                 if (vha->flags.init_done)
5323                         fc_host_supported_classes(vha->host) =
5324                                 FC_COS_CLASS2 | FC_COS_CLASS3;
5325
5326                 nv->firmware_options_2 |= __constant_cpu_to_le32(BIT_8);
5327         } else {
5328                 if (vha->flags.init_done)
5329                         fc_host_supported_classes(vha->host) = FC_COS_CLASS3;
5330
5331                 nv->firmware_options_2 &= ~__constant_cpu_to_le32(BIT_8);
5332         }
5333 }
5334
5335 void
5336 qlt_24xx_config_nvram_stage2(struct scsi_qla_host *vha,
5337         struct init_cb_24xx *icb)
5338 {
5339         struct qla_hw_data *ha = vha->hw;
5340
5341         if (ha->tgt.node_name_set) {
5342                 memcpy(icb->node_name, ha->tgt.tgt_node_name, WWN_SIZE);
5343                 icb->firmware_options_1 |= __constant_cpu_to_le32(BIT_14);
5344         }
5345 }
5346
5347 void
5348 qlt_81xx_config_nvram_stage1(struct scsi_qla_host *vha, struct nvram_81xx *nv)
5349 {
5350         struct qla_hw_data *ha = vha->hw;
5351
5352         if (!QLA_TGT_MODE_ENABLED())
5353                 return;
5354
5355         if (qla_tgt_mode_enabled(vha)) {
5356                 if (!ha->tgt.saved_set) {
5357                         /* We save only once */
5358                         ha->tgt.saved_exchange_count = nv->exchange_count;
5359                         ha->tgt.saved_firmware_options_1 =
5360                             nv->firmware_options_1;
5361                         ha->tgt.saved_firmware_options_2 =
5362                             nv->firmware_options_2;
5363                         ha->tgt.saved_firmware_options_3 =
5364                             nv->firmware_options_3;
5365                         ha->tgt.saved_set = 1;
5366                 }
5367
5368                 nv->exchange_count = __constant_cpu_to_le16(0xFFFF);
5369
5370                 /* Enable target mode */
5371                 nv->firmware_options_1 |= __constant_cpu_to_le32(BIT_4);
5372
5373                 /* Disable ini mode, if requested */
5374                 if (!qla_ini_mode_enabled(vha))
5375                         nv->firmware_options_1 |=
5376                             __constant_cpu_to_le32(BIT_5);
5377
5378                 /* Disable Full Login after LIP */
5379                 nv->firmware_options_1 &= __constant_cpu_to_le32(~BIT_13);
5380                 /* Enable initial LIP */
5381                 nv->firmware_options_1 &= __constant_cpu_to_le32(~BIT_9);
5382                 /* Enable FC tapes support */
5383                 nv->firmware_options_2 |= __constant_cpu_to_le32(BIT_12);
5384                 /* Disable Full Login after LIP */
5385                 nv->host_p &= __constant_cpu_to_le32(~BIT_10);
5386                 /* Enable target PRLI control */
5387                 nv->firmware_options_2 |= __constant_cpu_to_le32(BIT_14);
5388         } else {
5389                 if (ha->tgt.saved_set) {
5390                         nv->exchange_count = ha->tgt.saved_exchange_count;
5391                         nv->firmware_options_1 =
5392                             ha->tgt.saved_firmware_options_1;
5393                         nv->firmware_options_2 =
5394                             ha->tgt.saved_firmware_options_2;
5395                         nv->firmware_options_3 =
5396                             ha->tgt.saved_firmware_options_3;
5397                 }
5398                 return;
5399         }
5400
5401         /* out-of-order frames reassembly */
5402         nv->firmware_options_3 |= BIT_6|BIT_9;
5403
5404         if (ha->tgt.enable_class_2) {
5405                 if (vha->flags.init_done)
5406                         fc_host_supported_classes(vha->host) =
5407                                 FC_COS_CLASS2 | FC_COS_CLASS3;
5408
5409                 nv->firmware_options_2 |= __constant_cpu_to_le32(BIT_8);
5410         } else {
5411                 if (vha->flags.init_done)
5412                         fc_host_supported_classes(vha->host) = FC_COS_CLASS3;
5413
5414                 nv->firmware_options_2 &= ~__constant_cpu_to_le32(BIT_8);
5415         }
5416 }
5417
5418 void
5419 qlt_81xx_config_nvram_stage2(struct scsi_qla_host *vha,
5420         struct init_cb_81xx *icb)
5421 {
5422         struct qla_hw_data *ha = vha->hw;
5423
5424         if (!QLA_TGT_MODE_ENABLED())
5425                 return;
5426
5427         if (ha->tgt.node_name_set) {
5428                 memcpy(icb->node_name, ha->tgt.tgt_node_name, WWN_SIZE);
5429                 icb->firmware_options_1 |= __constant_cpu_to_le32(BIT_14);
5430         }
5431 }
5432
5433 void
5434 qlt_83xx_iospace_config(struct qla_hw_data *ha)
5435 {
5436         if (!QLA_TGT_MODE_ENABLED())
5437                 return;
5438
5439         ha->msix_count += 1; /* For ATIO Q */
5440 }
5441
5442 int
5443 qlt_24xx_process_response_error(struct scsi_qla_host *vha,
5444         struct sts_entry_24xx *pkt)
5445 {
5446         switch (pkt->entry_type) {
5447         case ABTS_RECV_24XX:
5448         case ABTS_RESP_24XX:
5449         case CTIO_TYPE7:
5450         case NOTIFY_ACK_TYPE:
5451         case CTIO_CRC2:
5452                 return 1;
5453         default:
5454                 return 0;
5455         }
5456 }
5457
5458 void
5459 qlt_modify_vp_config(struct scsi_qla_host *vha,
5460         struct vp_config_entry_24xx *vpmod)
5461 {
5462         if (qla_tgt_mode_enabled(vha))
5463                 vpmod->options_idx1 &= ~BIT_5;
5464         /* Disable ini mode, if requested */
5465         if (!qla_ini_mode_enabled(vha))
5466                 vpmod->options_idx1 &= ~BIT_4;
5467 }
5468
5469 void
5470 qlt_probe_one_stage1(struct scsi_qla_host *base_vha, struct qla_hw_data *ha)
5471 {
5472         if (!QLA_TGT_MODE_ENABLED())
5473                 return;
5474
5475         if  (ha->mqenable || IS_QLA83XX(ha)) {
5476                 ISP_ATIO_Q_IN(base_vha) = &ha->mqiobase->isp25mq.atio_q_in;
5477                 ISP_ATIO_Q_OUT(base_vha) = &ha->mqiobase->isp25mq.atio_q_out;
5478         } else {
5479                 ISP_ATIO_Q_IN(base_vha) = &ha->iobase->isp24.atio_q_in;
5480                 ISP_ATIO_Q_OUT(base_vha) = &ha->iobase->isp24.atio_q_out;
5481         }
5482
5483         mutex_init(&base_vha->vha_tgt.tgt_mutex);
5484         mutex_init(&base_vha->vha_tgt.tgt_host_action_mutex);
5485         qlt_clear_mode(base_vha);
5486 }
5487
5488 irqreturn_t
5489 qla83xx_msix_atio_q(int irq, void *dev_id)
5490 {
5491         struct rsp_que *rsp;
5492         scsi_qla_host_t *vha;
5493         struct qla_hw_data *ha;
5494         unsigned long flags;
5495
5496         rsp = (struct rsp_que *) dev_id;
5497         ha = rsp->hw;
5498         vha = pci_get_drvdata(ha->pdev);
5499
5500         spin_lock_irqsave(&ha->hardware_lock, flags);
5501
5502         qlt_24xx_process_atio_queue(vha);
5503         qla24xx_process_response_queue(vha, rsp);
5504
5505         spin_unlock_irqrestore(&ha->hardware_lock, flags);
5506
5507         return IRQ_HANDLED;
5508 }
5509
5510 int
5511 qlt_mem_alloc(struct qla_hw_data *ha)
5512 {
5513         if (!QLA_TGT_MODE_ENABLED())
5514                 return 0;
5515
5516         ha->tgt.tgt_vp_map = kzalloc(sizeof(struct qla_tgt_vp_map) *
5517             MAX_MULTI_ID_FABRIC, GFP_KERNEL);
5518         if (!ha->tgt.tgt_vp_map)
5519                 return -ENOMEM;
5520
5521         ha->tgt.atio_ring = dma_alloc_coherent(&ha->pdev->dev,
5522             (ha->tgt.atio_q_length + 1) * sizeof(struct atio_from_isp),
5523             &ha->tgt.atio_dma, GFP_KERNEL);
5524         if (!ha->tgt.atio_ring) {
5525                 kfree(ha->tgt.tgt_vp_map);
5526                 return -ENOMEM;
5527         }
5528         return 0;
5529 }
5530
5531 void
5532 qlt_mem_free(struct qla_hw_data *ha)
5533 {
5534         if (!QLA_TGT_MODE_ENABLED())
5535                 return;
5536
5537         if (ha->tgt.atio_ring) {
5538                 dma_free_coherent(&ha->pdev->dev, (ha->tgt.atio_q_length + 1) *
5539                     sizeof(struct atio_from_isp), ha->tgt.atio_ring,
5540                     ha->tgt.atio_dma);
5541         }
5542         kfree(ha->tgt.tgt_vp_map);
5543 }
5544
5545 /* vport_slock to be held by the caller */
5546 void
5547 qlt_update_vp_map(struct scsi_qla_host *vha, int cmd)
5548 {
5549         if (!QLA_TGT_MODE_ENABLED())
5550                 return;
5551
5552         switch (cmd) {
5553         case SET_VP_IDX:
5554                 vha->hw->tgt.tgt_vp_map[vha->vp_idx].vha = vha;
5555                 break;
5556         case SET_AL_PA:
5557                 vha->hw->tgt.tgt_vp_map[vha->d_id.b.al_pa].idx = vha->vp_idx;
5558                 break;
5559         case RESET_VP_IDX:
5560                 vha->hw->tgt.tgt_vp_map[vha->vp_idx].vha = NULL;
5561                 break;
5562         case RESET_AL_PA:
5563                 vha->hw->tgt.tgt_vp_map[vha->d_id.b.al_pa].idx = 0;
5564                 break;
5565         }
5566 }
5567
5568 static int __init qlt_parse_ini_mode(void)
5569 {
5570         if (strcasecmp(qlini_mode, QLA2XXX_INI_MODE_STR_EXCLUSIVE) == 0)
5571                 ql2x_ini_mode = QLA2XXX_INI_MODE_EXCLUSIVE;
5572         else if (strcasecmp(qlini_mode, QLA2XXX_INI_MODE_STR_DISABLED) == 0)
5573                 ql2x_ini_mode = QLA2XXX_INI_MODE_DISABLED;
5574         else if (strcasecmp(qlini_mode, QLA2XXX_INI_MODE_STR_ENABLED) == 0)
5575                 ql2x_ini_mode = QLA2XXX_INI_MODE_ENABLED;
5576         else
5577                 return false;
5578
5579         return true;
5580 }
5581
5582 int __init qlt_init(void)
5583 {
5584         int ret;
5585
5586         if (!qlt_parse_ini_mode()) {
5587                 ql_log(ql_log_fatal, NULL, 0xe06b,
5588                     "qlt_parse_ini_mode() failed\n");
5589                 return -EINVAL;
5590         }
5591
5592         if (!QLA_TGT_MODE_ENABLED())
5593                 return 0;
5594
5595         qla_tgt_mgmt_cmd_cachep = kmem_cache_create("qla_tgt_mgmt_cmd_cachep",
5596             sizeof(struct qla_tgt_mgmt_cmd), __alignof__(struct
5597             qla_tgt_mgmt_cmd), 0, NULL);
5598         if (!qla_tgt_mgmt_cmd_cachep) {
5599                 ql_log(ql_log_fatal, NULL, 0xe06d,
5600                     "kmem_cache_create for qla_tgt_mgmt_cmd_cachep failed\n");
5601                 return -ENOMEM;
5602         }
5603
5604         qla_tgt_mgmt_cmd_mempool = mempool_create(25, mempool_alloc_slab,
5605             mempool_free_slab, qla_tgt_mgmt_cmd_cachep);
5606         if (!qla_tgt_mgmt_cmd_mempool) {
5607                 ql_log(ql_log_fatal, NULL, 0xe06e,
5608                     "mempool_create for qla_tgt_mgmt_cmd_mempool failed\n");
5609                 ret = -ENOMEM;
5610                 goto out_mgmt_cmd_cachep;
5611         }
5612
5613         qla_tgt_wq = alloc_workqueue("qla_tgt_wq", 0, 0);
5614         if (!qla_tgt_wq) {
5615                 ql_log(ql_log_fatal, NULL, 0xe06f,
5616                     "alloc_workqueue for qla_tgt_wq failed\n");
5617                 ret = -ENOMEM;
5618                 goto out_cmd_mempool;
5619         }
5620         /*
5621          * Return 1 to signal that initiator-mode is being disabled
5622          */
5623         return (ql2x_ini_mode == QLA2XXX_INI_MODE_DISABLED) ? 1 : 0;
5624
5625 out_cmd_mempool:
5626         mempool_destroy(qla_tgt_mgmt_cmd_mempool);
5627 out_mgmt_cmd_cachep:
5628         kmem_cache_destroy(qla_tgt_mgmt_cmd_cachep);
5629         return ret;
5630 }
5631
5632 void qlt_exit(void)
5633 {
5634         if (!QLA_TGT_MODE_ENABLED())
5635                 return;
5636
5637         destroy_workqueue(qla_tgt_wq);
5638         mempool_destroy(qla_tgt_mgmt_cmd_mempool);
5639         kmem_cache_destroy(qla_tgt_mgmt_cmd_cachep);
5640 }