xref: /linux/drivers/scsi/libfc/fc_exch.c (revision edcbb4395ecd2f2731fbf38ecbff5be0316513cb)
1 /*
2  * Copyright(c) 2007 Intel Corporation. All rights reserved.
3  * Copyright(c) 2008 Red Hat, Inc.  All rights reserved.
4  * Copyright(c) 2008 Mike Christie
5  *
6  * This program is free software; you can redistribute it and/or modify it
7  * under the terms and conditions of the GNU General Public License,
8  * version 2, as published by the Free Software Foundation.
9  *
10  * This program is distributed in the hope it will be useful, but WITHOUT
11  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
12  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
13  * more details.
14  *
15  * You should have received a copy of the GNU General Public License along with
16  * this program; if not, write to the Free Software Foundation, Inc.,
17  * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
18  *
19  * Maintained at www.Open-FCoE.org
20  */
21 
22 /*
23  * Fibre Channel exchange and sequence handling.
24  */
25 
26 #include <linux/timer.h>
27 #include <linux/slab.h>
28 #include <linux/err.h>
29 
30 #include <scsi/fc/fc_fc2.h>
31 
32 #include <scsi/libfc.h>
33 #include <scsi/fc_encode.h>
34 
35 #include "fc_libfc.h"
36 
37 u16	fc_cpu_mask;		/* cpu mask for possible cpus */
38 EXPORT_SYMBOL(fc_cpu_mask);
39 static u16	fc_cpu_order;	/* 2's power to represent total possible cpus */
40 static struct kmem_cache *fc_em_cachep;	       /* cache for exchanges */
41 struct workqueue_struct *fc_exch_workqueue;
42 
43 /*
44  * Structure and function definitions for managing Fibre Channel Exchanges
45  * and Sequences.
46  *
47  * The three primary structures used here are fc_exch_mgr, fc_exch, and fc_seq.
48  *
49  * fc_exch_mgr holds the exchange state for an N port
50  *
51  * fc_exch holds state for one exchange and links to its active sequence.
52  *
53  * fc_seq holds the state for an individual sequence.
54  */
55 
56 /**
57  * struct fc_exch_pool - Per cpu exchange pool
58  * @next_index:	  Next possible free exchange index
59  * @total_exches: Total allocated exchanges
60  * @lock:	  Exch pool lock
61  * @ex_list:	  List of exchanges
62  *
63  * This structure manages per cpu exchanges in array of exchange pointers.
64  * This array is allocated followed by struct fc_exch_pool memory for
65  * assigned range of exchanges to per cpu pool.
66  */
67 struct fc_exch_pool {
68 	u16		 next_index;
69 	u16		 total_exches;
70 	spinlock_t	 lock;
71 	struct list_head ex_list;
72 };
73 
74 /**
75  * struct fc_exch_mgr - The Exchange Manager (EM).
76  * @class:	    Default class for new sequences
77  * @kref:	    Reference counter
78  * @min_xid:	    Minimum exchange ID
79  * @max_xid:	    Maximum exchange ID
80  * @ep_pool:	    Reserved exchange pointers
81  * @pool_max_index: Max exch array index in exch pool
82  * @pool:	    Per cpu exch pool
83  * @stats:	    Statistics structure
84  *
85  * This structure is the center for creating exchanges and sequences.
86  * It manages the allocation of exchange IDs.
87  */
88 struct fc_exch_mgr {
89 	enum fc_class	class;
90 	struct kref	kref;
91 	u16		min_xid;
92 	u16		max_xid;
93 	mempool_t	*ep_pool;
94 	u16		pool_max_index;
95 	struct fc_exch_pool *pool;
96 
97 	/*
98 	 * currently exchange mgr stats are updated but not used.
99 	 * either stats can be expose via sysfs or remove them
100 	 * all together if not used XXX
101 	 */
102 	struct {
103 		atomic_t no_free_exch;
104 		atomic_t no_free_exch_xid;
105 		atomic_t xid_not_found;
106 		atomic_t xid_busy;
107 		atomic_t seq_not_found;
108 		atomic_t non_bls_resp;
109 	} stats;
110 };
111 #define	fc_seq_exch(sp) container_of(sp, struct fc_exch, seq)
112 
113 /**
114  * struct fc_exch_mgr_anchor - primary structure for list of EMs
115  * @ema_list: Exchange Manager Anchor list
116  * @mp:	      Exchange Manager associated with this anchor
117  * @match:    Routine to determine if this anchor's EM should be used
118  *
119  * When walking the list of anchors the match routine will be called
120  * for each anchor to determine if that EM should be used. The last
121  * anchor in the list will always match to handle any exchanges not
122  * handled by other EMs. The non-default EMs would be added to the
123  * anchor list by HW that provides FCoE offloads.
124  */
125 struct fc_exch_mgr_anchor {
126 	struct list_head ema_list;
127 	struct fc_exch_mgr *mp;
128 	bool (*match)(struct fc_frame *);
129 };
130 
131 static void fc_exch_rrq(struct fc_exch *);
132 static void fc_seq_ls_acc(struct fc_seq *);
133 static void fc_seq_ls_rjt(struct fc_seq *, enum fc_els_rjt_reason,
134 			  enum fc_els_rjt_explan);
135 static void fc_exch_els_rec(struct fc_seq *, struct fc_frame *);
136 static void fc_exch_els_rrq(struct fc_seq *, struct fc_frame *);
137 
138 /*
139  * Internal implementation notes.
140  *
141  * The exchange manager is one by default in libfc but LLD may choose
142  * to have one per CPU. The sequence manager is one per exchange manager
143  * and currently never separated.
144  *
145  * Section 9.8 in FC-FS-2 specifies:  "The SEQ_ID is a one-byte field
146  * assigned by the Sequence Initiator that shall be unique for a specific
147  * D_ID and S_ID pair while the Sequence is open."   Note that it isn't
148  * qualified by exchange ID, which one might think it would be.
149  * In practice this limits the number of open sequences and exchanges to 256
150  * per session.	 For most targets we could treat this limit as per exchange.
151  *
152  * The exchange and its sequence are freed when the last sequence is received.
153  * It's possible for the remote port to leave an exchange open without
154  * sending any sequences.
155  *
156  * Notes on reference counts:
157  *
158  * Exchanges are reference counted and exchange gets freed when the reference
159  * count becomes zero.
160  *
161  * Timeouts:
162  * Sequences are timed out for E_D_TOV and R_A_TOV.
163  *
164  * Sequence event handling:
165  *
166  * The following events may occur on initiator sequences:
167  *
168  *	Send.
169  *	    For now, the whole thing is sent.
170  *	Receive ACK
171  *	    This applies only to class F.
172  *	    The sequence is marked complete.
173  *	ULP completion.
174  *	    The upper layer calls fc_exch_done() when done
175  *	    with exchange and sequence tuple.
176  *	RX-inferred completion.
177  *	    When we receive the next sequence on the same exchange, we can
178  *	    retire the previous sequence ID.  (XXX not implemented).
179  *	Timeout.
180  *	    R_A_TOV frees the sequence ID.  If we're waiting for ACK,
181  *	    E_D_TOV causes abort and calls upper layer response handler
182  *	    with FC_EX_TIMEOUT error.
183  *	Receive RJT
184  *	    XXX defer.
185  *	Send ABTS
186  *	    On timeout.
187  *
188  * The following events may occur on recipient sequences:
189  *
190  *	Receive
191  *	    Allocate sequence for first frame received.
192  *	    Hold during receive handler.
193  *	    Release when final frame received.
194  *	    Keep status of last N of these for the ELS RES command.  XXX TBD.
195  *	Receive ABTS
196  *	    Deallocate sequence
197  *	Send RJT
198  *	    Deallocate
199  *
200  * For now, we neglect conditions where only part of a sequence was
201  * received or transmitted, or where out-of-order receipt is detected.
202  */
203 
204 /*
205  * Locking notes:
206  *
207  * The EM code run in a per-CPU worker thread.
208  *
209  * To protect against concurrency between a worker thread code and timers,
210  * sequence allocation and deallocation must be locked.
211  *  - exchange refcnt can be done atomicly without locks.
212  *  - sequence allocation must be locked by exch lock.
213  *  - If the EM pool lock and ex_lock must be taken at the same time, then the
214  *    EM pool lock must be taken before the ex_lock.
215  */
216 
217 /*
218  * opcode names for debugging.
219  */
220 static char *fc_exch_rctl_names[] = FC_RCTL_NAMES_INIT;
221 
222 #define FC_TABLE_SIZE(x)   (sizeof(x) / sizeof(x[0]))
223 
224 /**
225  * fc_exch_name_lookup() - Lookup name by opcode
226  * @op:	       Opcode to be looked up
227  * @table:     Opcode/name table
228  * @max_index: Index not to be exceeded
229  *
230  * This routine is used to determine a human-readable string identifying
231  * a R_CTL opcode.
232  */
233 static inline const char *fc_exch_name_lookup(unsigned int op, char **table,
234 					      unsigned int max_index)
235 {
236 	const char *name = NULL;
237 
238 	if (op < max_index)
239 		name = table[op];
240 	if (!name)
241 		name = "unknown";
242 	return name;
243 }
244 
245 /**
246  * fc_exch_rctl_name() - Wrapper routine for fc_exch_name_lookup()
247  * @op: The opcode to be looked up
248  */
249 static const char *fc_exch_rctl_name(unsigned int op)
250 {
251 	return fc_exch_name_lookup(op, fc_exch_rctl_names,
252 				   FC_TABLE_SIZE(fc_exch_rctl_names));
253 }
254 
255 /**
256  * fc_exch_hold() - Increment an exchange's reference count
257  * @ep: Echange to be held
258  */
259 static inline void fc_exch_hold(struct fc_exch *ep)
260 {
261 	atomic_inc(&ep->ex_refcnt);
262 }
263 
264 /**
265  * fc_exch_setup_hdr() - Initialize a FC header by initializing some fields
266  *			 and determine SOF and EOF.
267  * @ep:	   The exchange to that will use the header
268  * @fp:	   The frame whose header is to be modified
269  * @f_ctl: F_CTL bits that will be used for the frame header
270  *
271  * The fields initialized by this routine are: fh_ox_id, fh_rx_id,
272  * fh_seq_id, fh_seq_cnt and the SOF and EOF.
273  */
274 static void fc_exch_setup_hdr(struct fc_exch *ep, struct fc_frame *fp,
275 			      u32 f_ctl)
276 {
277 	struct fc_frame_header *fh = fc_frame_header_get(fp);
278 	u16 fill;
279 
280 	fr_sof(fp) = ep->class;
281 	if (ep->seq.cnt)
282 		fr_sof(fp) = fc_sof_normal(ep->class);
283 
284 	if (f_ctl & FC_FC_END_SEQ) {
285 		fr_eof(fp) = FC_EOF_T;
286 		if (fc_sof_needs_ack(ep->class))
287 			fr_eof(fp) = FC_EOF_N;
288 		/*
289 		 * From F_CTL.
290 		 * The number of fill bytes to make the length a 4-byte
291 		 * multiple is the low order 2-bits of the f_ctl.
292 		 * The fill itself will have been cleared by the frame
293 		 * allocation.
294 		 * After this, the length will be even, as expected by
295 		 * the transport.
296 		 */
297 		fill = fr_len(fp) & 3;
298 		if (fill) {
299 			fill = 4 - fill;
300 			/* TODO, this may be a problem with fragmented skb */
301 			skb_put(fp_skb(fp), fill);
302 			hton24(fh->fh_f_ctl, f_ctl | fill);
303 		}
304 	} else {
305 		WARN_ON(fr_len(fp) % 4 != 0);	/* no pad to non last frame */
306 		fr_eof(fp) = FC_EOF_N;
307 	}
308 
309 	/*
310 	 * Initialize remainig fh fields
311 	 * from fc_fill_fc_hdr
312 	 */
313 	fh->fh_ox_id = htons(ep->oxid);
314 	fh->fh_rx_id = htons(ep->rxid);
315 	fh->fh_seq_id = ep->seq.id;
316 	fh->fh_seq_cnt = htons(ep->seq.cnt);
317 }
318 
319 /**
320  * fc_exch_release() - Decrement an exchange's reference count
321  * @ep: Exchange to be released
322  *
323  * If the reference count reaches zero and the exchange is complete,
324  * it is freed.
325  */
326 static void fc_exch_release(struct fc_exch *ep)
327 {
328 	struct fc_exch_mgr *mp;
329 
330 	if (atomic_dec_and_test(&ep->ex_refcnt)) {
331 		mp = ep->em;
332 		if (ep->destructor)
333 			ep->destructor(&ep->seq, ep->arg);
334 		WARN_ON(!(ep->esb_stat & ESB_ST_COMPLETE));
335 		mempool_free(ep, mp->ep_pool);
336 	}
337 }
338 
339 /**
340  * fc_exch_done_locked() - Complete an exchange with the exchange lock held
341  * @ep: The exchange that is complete
342  */
343 static int fc_exch_done_locked(struct fc_exch *ep)
344 {
345 	int rc = 1;
346 
347 	/*
348 	 * We must check for completion in case there are two threads
349 	 * tyring to complete this. But the rrq code will reuse the
350 	 * ep, and in that case we only clear the resp and set it as
351 	 * complete, so it can be reused by the timer to send the rrq.
352 	 */
353 	ep->resp = NULL;
354 	if (ep->state & FC_EX_DONE)
355 		return rc;
356 	ep->esb_stat |= ESB_ST_COMPLETE;
357 
358 	if (!(ep->esb_stat & ESB_ST_REC_QUAL)) {
359 		ep->state |= FC_EX_DONE;
360 		if (cancel_delayed_work(&ep->timeout_work))
361 			atomic_dec(&ep->ex_refcnt); /* drop hold for timer */
362 		rc = 0;
363 	}
364 	return rc;
365 }
366 
367 /**
368  * fc_exch_ptr_get() - Return an exchange from an exchange pool
369  * @pool:  Exchange Pool to get an exchange from
370  * @index: Index of the exchange within the pool
371  *
372  * Use the index to get an exchange from within an exchange pool. exches
373  * will point to an array of exchange pointers. The index will select
374  * the exchange within the array.
375  */
376 static inline struct fc_exch *fc_exch_ptr_get(struct fc_exch_pool *pool,
377 					      u16 index)
378 {
379 	struct fc_exch **exches = (struct fc_exch **)(pool + 1);
380 	return exches[index];
381 }
382 
383 /**
384  * fc_exch_ptr_set() - Assign an exchange to a slot in an exchange pool
385  * @pool:  The pool to assign the exchange to
386  * @index: The index in the pool where the exchange will be assigned
387  * @ep:	   The exchange to assign to the pool
388  */
389 static inline void fc_exch_ptr_set(struct fc_exch_pool *pool, u16 index,
390 				   struct fc_exch *ep)
391 {
392 	((struct fc_exch **)(pool + 1))[index] = ep;
393 }
394 
395 /**
396  * fc_exch_delete() - Delete an exchange
397  * @ep: The exchange to be deleted
398  */
399 static void fc_exch_delete(struct fc_exch *ep)
400 {
401 	struct fc_exch_pool *pool;
402 
403 	pool = ep->pool;
404 	spin_lock_bh(&pool->lock);
405 	WARN_ON(pool->total_exches <= 0);
406 	pool->total_exches--;
407 	fc_exch_ptr_set(pool, (ep->xid - ep->em->min_xid) >> fc_cpu_order,
408 			NULL);
409 	list_del(&ep->ex_list);
410 	spin_unlock_bh(&pool->lock);
411 	fc_exch_release(ep);	/* drop hold for exch in mp */
412 }
413 
414 /**
415  * fc_exch_timer_set_locked() - Start a timer for an exchange w/ the
416  *				the exchange lock held
417  * @ep:		The exchange whose timer will start
418  * @timer_msec: The timeout period
419  *
420  * Used for upper level protocols to time out the exchange.
421  * The timer is cancelled when it fires or when the exchange completes.
422  */
423 static inline void fc_exch_timer_set_locked(struct fc_exch *ep,
424 					    unsigned int timer_msec)
425 {
426 	if (ep->state & (FC_EX_RST_CLEANUP | FC_EX_DONE))
427 		return;
428 
429 	FC_EXCH_DBG(ep, "Exchange timer armed\n");
430 
431 	if (queue_delayed_work(fc_exch_workqueue, &ep->timeout_work,
432 			       msecs_to_jiffies(timer_msec)))
433 		fc_exch_hold(ep);		/* hold for timer */
434 }
435 
436 /**
437  * fc_exch_timer_set() - Lock the exchange and set the timer
438  * @ep:		The exchange whose timer will start
439  * @timer_msec: The timeout period
440  */
441 static void fc_exch_timer_set(struct fc_exch *ep, unsigned int timer_msec)
442 {
443 	spin_lock_bh(&ep->ex_lock);
444 	fc_exch_timer_set_locked(ep, timer_msec);
445 	spin_unlock_bh(&ep->ex_lock);
446 }
447 
448 /**
449  * fc_seq_send() - Send a frame using existing sequence/exchange pair
450  * @lport: The local port that the exchange will be sent on
451  * @sp:	   The sequence to be sent
452  * @fp:	   The frame to be sent on the exchange
453  */
454 static int fc_seq_send(struct fc_lport *lport, struct fc_seq *sp,
455 		       struct fc_frame *fp)
456 {
457 	struct fc_exch *ep;
458 	struct fc_frame_header *fh = fc_frame_header_get(fp);
459 	int error;
460 	u32 f_ctl;
461 
462 	ep = fc_seq_exch(sp);
463 	WARN_ON((ep->esb_stat & ESB_ST_SEQ_INIT) != ESB_ST_SEQ_INIT);
464 
465 	f_ctl = ntoh24(fh->fh_f_ctl);
466 	fc_exch_setup_hdr(ep, fp, f_ctl);
467 	fr_encaps(fp) = ep->encaps;
468 
469 	/*
470 	 * update sequence count if this frame is carrying
471 	 * multiple FC frames when sequence offload is enabled
472 	 * by LLD.
473 	 */
474 	if (fr_max_payload(fp))
475 		sp->cnt += DIV_ROUND_UP((fr_len(fp) - sizeof(*fh)),
476 					fr_max_payload(fp));
477 	else
478 		sp->cnt++;
479 
480 	/*
481 	 * Send the frame.
482 	 */
483 	error = lport->tt.frame_send(lport, fp);
484 
485 	/*
486 	 * Update the exchange and sequence flags,
487 	 * assuming all frames for the sequence have been sent.
488 	 * We can only be called to send once for each sequence.
489 	 */
490 	spin_lock_bh(&ep->ex_lock);
491 	ep->f_ctl = f_ctl & ~FC_FC_FIRST_SEQ;	/* not first seq */
492 	if (f_ctl & FC_FC_SEQ_INIT)
493 		ep->esb_stat &= ~ESB_ST_SEQ_INIT;
494 	spin_unlock_bh(&ep->ex_lock);
495 	return error;
496 }
497 
498 /**
499  * fc_seq_alloc() - Allocate a sequence for a given exchange
500  * @ep:	    The exchange to allocate a new sequence for
501  * @seq_id: The sequence ID to be used
502  *
503  * We don't support multiple originated sequences on the same exchange.
504  * By implication, any previously originated sequence on this exchange
505  * is complete, and we reallocate the same sequence.
506  */
507 static struct fc_seq *fc_seq_alloc(struct fc_exch *ep, u8 seq_id)
508 {
509 	struct fc_seq *sp;
510 
511 	sp = &ep->seq;
512 	sp->ssb_stat = 0;
513 	sp->cnt = 0;
514 	sp->id = seq_id;
515 	return sp;
516 }
517 
518 /**
519  * fc_seq_start_next_locked() - Allocate a new sequence on the same
520  *				exchange as the supplied sequence
521  * @sp: The sequence/exchange to get a new sequence for
522  */
523 static struct fc_seq *fc_seq_start_next_locked(struct fc_seq *sp)
524 {
525 	struct fc_exch *ep = fc_seq_exch(sp);
526 
527 	sp = fc_seq_alloc(ep, ep->seq_id++);
528 	FC_EXCH_DBG(ep, "f_ctl %6x seq %2x\n",
529 		    ep->f_ctl, sp->id);
530 	return sp;
531 }
532 
533 /**
534  * fc_seq_start_next() - Lock the exchange and get a new sequence
535  *			 for a given sequence/exchange pair
536  * @sp: The sequence/exchange to get a new exchange for
537  */
538 static struct fc_seq *fc_seq_start_next(struct fc_seq *sp)
539 {
540 	struct fc_exch *ep = fc_seq_exch(sp);
541 
542 	spin_lock_bh(&ep->ex_lock);
543 	sp = fc_seq_start_next_locked(sp);
544 	spin_unlock_bh(&ep->ex_lock);
545 
546 	return sp;
547 }
548 
549 /**
550  * fc_seq_exch_abort() - Abort an exchange and sequence
551  * @req_sp:	The sequence to be aborted
552  * @timer_msec: The period of time to wait before aborting
553  *
554  * Generally called because of a timeout or an abort from the upper layer.
555  */
556 static int fc_seq_exch_abort(const struct fc_seq *req_sp,
557 			     unsigned int timer_msec)
558 {
559 	struct fc_seq *sp;
560 	struct fc_exch *ep;
561 	struct fc_frame *fp;
562 	int error;
563 
564 	ep = fc_seq_exch(req_sp);
565 
566 	spin_lock_bh(&ep->ex_lock);
567 	if (ep->esb_stat & (ESB_ST_COMPLETE | ESB_ST_ABNORMAL) ||
568 	    ep->state & (FC_EX_DONE | FC_EX_RST_CLEANUP)) {
569 		spin_unlock_bh(&ep->ex_lock);
570 		return -ENXIO;
571 	}
572 
573 	/*
574 	 * Send the abort on a new sequence if possible.
575 	 */
576 	sp = fc_seq_start_next_locked(&ep->seq);
577 	if (!sp) {
578 		spin_unlock_bh(&ep->ex_lock);
579 		return -ENOMEM;
580 	}
581 
582 	ep->esb_stat |= ESB_ST_SEQ_INIT | ESB_ST_ABNORMAL;
583 	if (timer_msec)
584 		fc_exch_timer_set_locked(ep, timer_msec);
585 	spin_unlock_bh(&ep->ex_lock);
586 
587 	/*
588 	 * If not logged into the fabric, don't send ABTS but leave
589 	 * sequence active until next timeout.
590 	 */
591 	if (!ep->sid)
592 		return 0;
593 
594 	/*
595 	 * Send an abort for the sequence that timed out.
596 	 */
597 	fp = fc_frame_alloc(ep->lp, 0);
598 	if (fp) {
599 		fc_fill_fc_hdr(fp, FC_RCTL_BA_ABTS, ep->did, ep->sid,
600 			       FC_TYPE_BLS, FC_FC_END_SEQ | FC_FC_SEQ_INIT, 0);
601 		error = fc_seq_send(ep->lp, sp, fp);
602 	} else
603 		error = -ENOBUFS;
604 	return error;
605 }
606 
607 /**
608  * fc_exch_timeout() - Handle exchange timer expiration
609  * @work: The work_struct identifying the exchange that timed out
610  */
611 static void fc_exch_timeout(struct work_struct *work)
612 {
613 	struct fc_exch *ep = container_of(work, struct fc_exch,
614 					  timeout_work.work);
615 	struct fc_seq *sp = &ep->seq;
616 	void (*resp)(struct fc_seq *, struct fc_frame *fp, void *arg);
617 	void *arg;
618 	u32 e_stat;
619 	int rc = 1;
620 
621 	FC_EXCH_DBG(ep, "Exchange timed out\n");
622 
623 	spin_lock_bh(&ep->ex_lock);
624 	if (ep->state & (FC_EX_RST_CLEANUP | FC_EX_DONE))
625 		goto unlock;
626 
627 	e_stat = ep->esb_stat;
628 	if (e_stat & ESB_ST_COMPLETE) {
629 		ep->esb_stat = e_stat & ~ESB_ST_REC_QUAL;
630 		spin_unlock_bh(&ep->ex_lock);
631 		if (e_stat & ESB_ST_REC_QUAL)
632 			fc_exch_rrq(ep);
633 		goto done;
634 	} else {
635 		resp = ep->resp;
636 		arg = ep->arg;
637 		ep->resp = NULL;
638 		if (e_stat & ESB_ST_ABNORMAL)
639 			rc = fc_exch_done_locked(ep);
640 		spin_unlock_bh(&ep->ex_lock);
641 		if (!rc)
642 			fc_exch_delete(ep);
643 		if (resp)
644 			resp(sp, ERR_PTR(-FC_EX_TIMEOUT), arg);
645 		fc_seq_exch_abort(sp, 2 * ep->r_a_tov);
646 		goto done;
647 	}
648 unlock:
649 	spin_unlock_bh(&ep->ex_lock);
650 done:
651 	/*
652 	 * This release matches the hold taken when the timer was set.
653 	 */
654 	fc_exch_release(ep);
655 }
656 
657 /**
658  * fc_exch_em_alloc() - Allocate an exchange from a specified EM.
659  * @lport: The local port that the exchange is for
660  * @mp:	   The exchange manager that will allocate the exchange
661  *
662  * Returns pointer to allocated fc_exch with exch lock held.
663  */
664 static struct fc_exch *fc_exch_em_alloc(struct fc_lport *lport,
665 					struct fc_exch_mgr *mp)
666 {
667 	struct fc_exch *ep;
668 	unsigned int cpu;
669 	u16 index;
670 	struct fc_exch_pool *pool;
671 
672 	/* allocate memory for exchange */
673 	ep = mempool_alloc(mp->ep_pool, GFP_ATOMIC);
674 	if (!ep) {
675 		atomic_inc(&mp->stats.no_free_exch);
676 		goto out;
677 	}
678 	memset(ep, 0, sizeof(*ep));
679 
680 	cpu = get_cpu();
681 	pool = per_cpu_ptr(mp->pool, cpu);
682 	spin_lock_bh(&pool->lock);
683 	put_cpu();
684 	index = pool->next_index;
685 	/* allocate new exch from pool */
686 	while (fc_exch_ptr_get(pool, index)) {
687 		index = index == mp->pool_max_index ? 0 : index + 1;
688 		if (index == pool->next_index)
689 			goto err;
690 	}
691 	pool->next_index = index == mp->pool_max_index ? 0 : index + 1;
692 
693 	fc_exch_hold(ep);	/* hold for exch in mp */
694 	spin_lock_init(&ep->ex_lock);
695 	/*
696 	 * Hold exch lock for caller to prevent fc_exch_reset()
697 	 * from releasing exch	while fc_exch_alloc() caller is
698 	 * still working on exch.
699 	 */
700 	spin_lock_bh(&ep->ex_lock);
701 
702 	fc_exch_ptr_set(pool, index, ep);
703 	list_add_tail(&ep->ex_list, &pool->ex_list);
704 	fc_seq_alloc(ep, ep->seq_id++);
705 	pool->total_exches++;
706 	spin_unlock_bh(&pool->lock);
707 
708 	/*
709 	 *  update exchange
710 	 */
711 	ep->oxid = ep->xid = (index << fc_cpu_order | cpu) + mp->min_xid;
712 	ep->em = mp;
713 	ep->pool = pool;
714 	ep->lp = lport;
715 	ep->f_ctl = FC_FC_FIRST_SEQ;	/* next seq is first seq */
716 	ep->rxid = FC_XID_UNKNOWN;
717 	ep->class = mp->class;
718 	INIT_DELAYED_WORK(&ep->timeout_work, fc_exch_timeout);
719 out:
720 	return ep;
721 err:
722 	spin_unlock_bh(&pool->lock);
723 	atomic_inc(&mp->stats.no_free_exch_xid);
724 	mempool_free(ep, mp->ep_pool);
725 	return NULL;
726 }
727 
728 /**
729  * fc_exch_alloc() - Allocate an exchange from an EM on a
730  *		     local port's list of EMs.
731  * @lport: The local port that will own the exchange
732  * @fp:	   The FC frame that the exchange will be for
733  *
734  * This function walks the list of exchange manager(EM)
735  * anchors to select an EM for a new exchange allocation. The
736  * EM is selected when a NULL match function pointer is encountered
737  * or when a call to a match function returns true.
738  */
739 static inline struct fc_exch *fc_exch_alloc(struct fc_lport *lport,
740 					    struct fc_frame *fp)
741 {
742 	struct fc_exch_mgr_anchor *ema;
743 
744 	list_for_each_entry(ema, &lport->ema_list, ema_list)
745 		if (!ema->match || ema->match(fp))
746 			return fc_exch_em_alloc(lport, ema->mp);
747 	return NULL;
748 }
749 
750 /**
751  * fc_exch_find() - Lookup and hold an exchange
752  * @mp:	 The exchange manager to lookup the exchange from
753  * @xid: The XID of the exchange to look up
754  */
755 static struct fc_exch *fc_exch_find(struct fc_exch_mgr *mp, u16 xid)
756 {
757 	struct fc_exch_pool *pool;
758 	struct fc_exch *ep = NULL;
759 
760 	if ((xid >= mp->min_xid) && (xid <= mp->max_xid)) {
761 		pool = per_cpu_ptr(mp->pool, xid & fc_cpu_mask);
762 		spin_lock_bh(&pool->lock);
763 		ep = fc_exch_ptr_get(pool, (xid - mp->min_xid) >> fc_cpu_order);
764 		if (ep) {
765 			fc_exch_hold(ep);
766 			WARN_ON(ep->xid != xid);
767 		}
768 		spin_unlock_bh(&pool->lock);
769 	}
770 	return ep;
771 }
772 
773 
774 /**
775  * fc_exch_done() - Indicate that an exchange/sequence tuple is complete and
776  *		    the memory allocated for the related objects may be freed.
777  * @sp: The sequence that has completed
778  */
779 static void fc_exch_done(struct fc_seq *sp)
780 {
781 	struct fc_exch *ep = fc_seq_exch(sp);
782 	int rc;
783 
784 	spin_lock_bh(&ep->ex_lock);
785 	rc = fc_exch_done_locked(ep);
786 	spin_unlock_bh(&ep->ex_lock);
787 	if (!rc)
788 		fc_exch_delete(ep);
789 }
790 
791 /**
792  * fc_exch_resp() - Allocate a new exchange for a response frame
793  * @lport: The local port that the exchange was for
794  * @mp:	   The exchange manager to allocate the exchange from
795  * @fp:	   The response frame
796  *
797  * Sets the responder ID in the frame header.
798  */
799 static struct fc_exch *fc_exch_resp(struct fc_lport *lport,
800 				    struct fc_exch_mgr *mp,
801 				    struct fc_frame *fp)
802 {
803 	struct fc_exch *ep;
804 	struct fc_frame_header *fh;
805 
806 	ep = fc_exch_alloc(lport, fp);
807 	if (ep) {
808 		ep->class = fc_frame_class(fp);
809 
810 		/*
811 		 * Set EX_CTX indicating we're responding on this exchange.
812 		 */
813 		ep->f_ctl |= FC_FC_EX_CTX;	/* we're responding */
814 		ep->f_ctl &= ~FC_FC_FIRST_SEQ;	/* not new */
815 		fh = fc_frame_header_get(fp);
816 		ep->sid = ntoh24(fh->fh_d_id);
817 		ep->did = ntoh24(fh->fh_s_id);
818 		ep->oid = ep->did;
819 
820 		/*
821 		 * Allocated exchange has placed the XID in the
822 		 * originator field. Move it to the responder field,
823 		 * and set the originator XID from the frame.
824 		 */
825 		ep->rxid = ep->xid;
826 		ep->oxid = ntohs(fh->fh_ox_id);
827 		ep->esb_stat |= ESB_ST_RESP | ESB_ST_SEQ_INIT;
828 		if ((ntoh24(fh->fh_f_ctl) & FC_FC_SEQ_INIT) == 0)
829 			ep->esb_stat &= ~ESB_ST_SEQ_INIT;
830 
831 		fc_exch_hold(ep);	/* hold for caller */
832 		spin_unlock_bh(&ep->ex_lock);	/* lock from fc_exch_alloc */
833 	}
834 	return ep;
835 }
836 
837 /**
838  * fc_seq_lookup_recip() - Find a sequence where the other end
839  *			   originated the sequence
840  * @lport: The local port that the frame was sent to
841  * @mp:	   The Exchange Manager to lookup the exchange from
842  * @fp:	   The frame associated with the sequence we're looking for
843  *
844  * If fc_pf_rjt_reason is FC_RJT_NONE then this function will have a hold
845  * on the ep that should be released by the caller.
846  */
847 static enum fc_pf_rjt_reason fc_seq_lookup_recip(struct fc_lport *lport,
848 						 struct fc_exch_mgr *mp,
849 						 struct fc_frame *fp)
850 {
851 	struct fc_frame_header *fh = fc_frame_header_get(fp);
852 	struct fc_exch *ep = NULL;
853 	struct fc_seq *sp = NULL;
854 	enum fc_pf_rjt_reason reject = FC_RJT_NONE;
855 	u32 f_ctl;
856 	u16 xid;
857 
858 	f_ctl = ntoh24(fh->fh_f_ctl);
859 	WARN_ON((f_ctl & FC_FC_SEQ_CTX) != 0);
860 
861 	/*
862 	 * Lookup or create the exchange if we will be creating the sequence.
863 	 */
864 	if (f_ctl & FC_FC_EX_CTX) {
865 		xid = ntohs(fh->fh_ox_id);	/* we originated exch */
866 		ep = fc_exch_find(mp, xid);
867 		if (!ep) {
868 			atomic_inc(&mp->stats.xid_not_found);
869 			reject = FC_RJT_OX_ID;
870 			goto out;
871 		}
872 		if (ep->rxid == FC_XID_UNKNOWN)
873 			ep->rxid = ntohs(fh->fh_rx_id);
874 		else if (ep->rxid != ntohs(fh->fh_rx_id)) {
875 			reject = FC_RJT_OX_ID;
876 			goto rel;
877 		}
878 	} else {
879 		xid = ntohs(fh->fh_rx_id);	/* we are the responder */
880 
881 		/*
882 		 * Special case for MDS issuing an ELS TEST with a
883 		 * bad rxid of 0.
884 		 * XXX take this out once we do the proper reject.
885 		 */
886 		if (xid == 0 && fh->fh_r_ctl == FC_RCTL_ELS_REQ &&
887 		    fc_frame_payload_op(fp) == ELS_TEST) {
888 			fh->fh_rx_id = htons(FC_XID_UNKNOWN);
889 			xid = FC_XID_UNKNOWN;
890 		}
891 
892 		/*
893 		 * new sequence - find the exchange
894 		 */
895 		ep = fc_exch_find(mp, xid);
896 		if ((f_ctl & FC_FC_FIRST_SEQ) && fc_sof_is_init(fr_sof(fp))) {
897 			if (ep) {
898 				atomic_inc(&mp->stats.xid_busy);
899 				reject = FC_RJT_RX_ID;
900 				goto rel;
901 			}
902 			ep = fc_exch_resp(lport, mp, fp);
903 			if (!ep) {
904 				reject = FC_RJT_EXCH_EST;	/* XXX */
905 				goto out;
906 			}
907 			xid = ep->xid;	/* get our XID */
908 		} else if (!ep) {
909 			atomic_inc(&mp->stats.xid_not_found);
910 			reject = FC_RJT_RX_ID;	/* XID not found */
911 			goto out;
912 		}
913 	}
914 
915 	/*
916 	 * At this point, we have the exchange held.
917 	 * Find or create the sequence.
918 	 */
919 	if (fc_sof_is_init(fr_sof(fp))) {
920 		sp = &ep->seq;
921 		sp->ssb_stat |= SSB_ST_RESP;
922 		sp->id = fh->fh_seq_id;
923 	} else {
924 		sp = &ep->seq;
925 		if (sp->id != fh->fh_seq_id) {
926 			atomic_inc(&mp->stats.seq_not_found);
927 			reject = FC_RJT_SEQ_ID;	/* sequence/exch should exist */
928 			goto rel;
929 		}
930 	}
931 	WARN_ON(ep != fc_seq_exch(sp));
932 
933 	if (f_ctl & FC_FC_SEQ_INIT)
934 		ep->esb_stat |= ESB_ST_SEQ_INIT;
935 
936 	fr_seq(fp) = sp;
937 out:
938 	return reject;
939 rel:
940 	fc_exch_done(&ep->seq);
941 	fc_exch_release(ep);	/* hold from fc_exch_find/fc_exch_resp */
942 	return reject;
943 }
944 
945 /**
946  * fc_seq_lookup_orig() - Find a sequence where this end
947  *			  originated the sequence
948  * @mp:	   The Exchange Manager to lookup the exchange from
949  * @fp:	   The frame associated with the sequence we're looking for
950  *
951  * Does not hold the sequence for the caller.
952  */
953 static struct fc_seq *fc_seq_lookup_orig(struct fc_exch_mgr *mp,
954 					 struct fc_frame *fp)
955 {
956 	struct fc_frame_header *fh = fc_frame_header_get(fp);
957 	struct fc_exch *ep;
958 	struct fc_seq *sp = NULL;
959 	u32 f_ctl;
960 	u16 xid;
961 
962 	f_ctl = ntoh24(fh->fh_f_ctl);
963 	WARN_ON((f_ctl & FC_FC_SEQ_CTX) != FC_FC_SEQ_CTX);
964 	xid = ntohs((f_ctl & FC_FC_EX_CTX) ? fh->fh_ox_id : fh->fh_rx_id);
965 	ep = fc_exch_find(mp, xid);
966 	if (!ep)
967 		return NULL;
968 	if (ep->seq.id == fh->fh_seq_id) {
969 		/*
970 		 * Save the RX_ID if we didn't previously know it.
971 		 */
972 		sp = &ep->seq;
973 		if ((f_ctl & FC_FC_EX_CTX) != 0 &&
974 		    ep->rxid == FC_XID_UNKNOWN) {
975 			ep->rxid = ntohs(fh->fh_rx_id);
976 		}
977 	}
978 	fc_exch_release(ep);
979 	return sp;
980 }
981 
982 /**
983  * fc_exch_set_addr() - Set the source and destination IDs for an exchange
984  * @ep:	     The exchange to set the addresses for
985  * @orig_id: The originator's ID
986  * @resp_id: The responder's ID
987  *
988  * Note this must be done before the first sequence of the exchange is sent.
989  */
990 static void fc_exch_set_addr(struct fc_exch *ep,
991 			     u32 orig_id, u32 resp_id)
992 {
993 	ep->oid = orig_id;
994 	if (ep->esb_stat & ESB_ST_RESP) {
995 		ep->sid = resp_id;
996 		ep->did = orig_id;
997 	} else {
998 		ep->sid = orig_id;
999 		ep->did = resp_id;
1000 	}
1001 }
1002 
1003 /**
1004  * fc_seq_els_rsp_send() - Send an ELS response using infomation from
1005  *			   the existing sequence/exchange.
1006  * @sp:	      The sequence/exchange to get information from
1007  * @els_cmd:  The ELS command to be sent
1008  * @els_data: The ELS data to be sent
1009  */
1010 static void fc_seq_els_rsp_send(struct fc_seq *sp, enum fc_els_cmd els_cmd,
1011 				struct fc_seq_els_data *els_data)
1012 {
1013 	switch (els_cmd) {
1014 	case ELS_LS_RJT:
1015 		fc_seq_ls_rjt(sp, els_data->reason, els_data->explan);
1016 		break;
1017 	case ELS_LS_ACC:
1018 		fc_seq_ls_acc(sp);
1019 		break;
1020 	case ELS_RRQ:
1021 		fc_exch_els_rrq(sp, els_data->fp);
1022 		break;
1023 	case ELS_REC:
1024 		fc_exch_els_rec(sp, els_data->fp);
1025 		break;
1026 	default:
1027 		FC_EXCH_DBG(fc_seq_exch(sp), "Invalid ELS CMD:%x\n", els_cmd);
1028 	}
1029 }
1030 
1031 /**
1032  * fc_seq_send_last() - Send a sequence that is the last in the exchange
1033  * @sp:	     The sequence that is to be sent
1034  * @fp:	     The frame that will be sent on the sequence
1035  * @rctl:    The R_CTL information to be sent
1036  * @fh_type: The frame header type
1037  */
1038 static void fc_seq_send_last(struct fc_seq *sp, struct fc_frame *fp,
1039 			     enum fc_rctl rctl, enum fc_fh_type fh_type)
1040 {
1041 	u32 f_ctl;
1042 	struct fc_exch *ep = fc_seq_exch(sp);
1043 
1044 	f_ctl = FC_FC_LAST_SEQ | FC_FC_END_SEQ | FC_FC_SEQ_INIT;
1045 	f_ctl |= ep->f_ctl;
1046 	fc_fill_fc_hdr(fp, rctl, ep->did, ep->sid, fh_type, f_ctl, 0);
1047 	fc_seq_send(ep->lp, sp, fp);
1048 }
1049 
1050 /**
1051  * fc_seq_send_ack() - Send an acknowledgement that we've received a frame
1052  * @sp:	   The sequence to send the ACK on
1053  * @rx_fp: The received frame that is being acknoledged
1054  *
1055  * Send ACK_1 (or equiv.) indicating we received something.
1056  */
1057 static void fc_seq_send_ack(struct fc_seq *sp, const struct fc_frame *rx_fp)
1058 {
1059 	struct fc_frame *fp;
1060 	struct fc_frame_header *rx_fh;
1061 	struct fc_frame_header *fh;
1062 	struct fc_exch *ep = fc_seq_exch(sp);
1063 	struct fc_lport *lport = ep->lp;
1064 	unsigned int f_ctl;
1065 
1066 	/*
1067 	 * Don't send ACKs for class 3.
1068 	 */
1069 	if (fc_sof_needs_ack(fr_sof(rx_fp))) {
1070 		fp = fc_frame_alloc(lport, 0);
1071 		if (!fp)
1072 			return;
1073 
1074 		fh = fc_frame_header_get(fp);
1075 		fh->fh_r_ctl = FC_RCTL_ACK_1;
1076 		fh->fh_type = FC_TYPE_BLS;
1077 
1078 		/*
1079 		 * Form f_ctl by inverting EX_CTX and SEQ_CTX (bits 23, 22).
1080 		 * Echo FIRST_SEQ, LAST_SEQ, END_SEQ, END_CONN, SEQ_INIT.
1081 		 * Bits 9-8 are meaningful (retransmitted or unidirectional).
1082 		 * Last ACK uses bits 7-6 (continue sequence),
1083 		 * bits 5-4 are meaningful (what kind of ACK to use).
1084 		 */
1085 		rx_fh = fc_frame_header_get(rx_fp);
1086 		f_ctl = ntoh24(rx_fh->fh_f_ctl);
1087 		f_ctl &= FC_FC_EX_CTX | FC_FC_SEQ_CTX |
1088 			FC_FC_FIRST_SEQ | FC_FC_LAST_SEQ |
1089 			FC_FC_END_SEQ | FC_FC_END_CONN | FC_FC_SEQ_INIT |
1090 			FC_FC_RETX_SEQ | FC_FC_UNI_TX;
1091 		f_ctl ^= FC_FC_EX_CTX | FC_FC_SEQ_CTX;
1092 		hton24(fh->fh_f_ctl, f_ctl);
1093 
1094 		fc_exch_setup_hdr(ep, fp, f_ctl);
1095 		fh->fh_seq_id = rx_fh->fh_seq_id;
1096 		fh->fh_seq_cnt = rx_fh->fh_seq_cnt;
1097 		fh->fh_parm_offset = htonl(1);	/* ack single frame */
1098 
1099 		fr_sof(fp) = fr_sof(rx_fp);
1100 		if (f_ctl & FC_FC_END_SEQ)
1101 			fr_eof(fp) = FC_EOF_T;
1102 		else
1103 			fr_eof(fp) = FC_EOF_N;
1104 
1105 		lport->tt.frame_send(lport, fp);
1106 	}
1107 }
1108 
1109 /**
1110  * fc_exch_send_ba_rjt() - Send BLS Reject
1111  * @rx_fp:  The frame being rejected
1112  * @reason: The reason the frame is being rejected
1113  * @explan: The explaination for the rejection
1114  *
1115  * This is for rejecting BA_ABTS only.
1116  */
1117 static void fc_exch_send_ba_rjt(struct fc_frame *rx_fp,
1118 				enum fc_ba_rjt_reason reason,
1119 				enum fc_ba_rjt_explan explan)
1120 {
1121 	struct fc_frame *fp;
1122 	struct fc_frame_header *rx_fh;
1123 	struct fc_frame_header *fh;
1124 	struct fc_ba_rjt *rp;
1125 	struct fc_lport *lport;
1126 	unsigned int f_ctl;
1127 
1128 	lport = fr_dev(rx_fp);
1129 	fp = fc_frame_alloc(lport, sizeof(*rp));
1130 	if (!fp)
1131 		return;
1132 	fh = fc_frame_header_get(fp);
1133 	rx_fh = fc_frame_header_get(rx_fp);
1134 
1135 	memset(fh, 0, sizeof(*fh) + sizeof(*rp));
1136 
1137 	rp = fc_frame_payload_get(fp, sizeof(*rp));
1138 	rp->br_reason = reason;
1139 	rp->br_explan = explan;
1140 
1141 	/*
1142 	 * seq_id, cs_ctl, df_ctl and param/offset are zero.
1143 	 */
1144 	memcpy(fh->fh_s_id, rx_fh->fh_d_id, 3);
1145 	memcpy(fh->fh_d_id, rx_fh->fh_s_id, 3);
1146 	fh->fh_ox_id = rx_fh->fh_ox_id;
1147 	fh->fh_rx_id = rx_fh->fh_rx_id;
1148 	fh->fh_seq_cnt = rx_fh->fh_seq_cnt;
1149 	fh->fh_r_ctl = FC_RCTL_BA_RJT;
1150 	fh->fh_type = FC_TYPE_BLS;
1151 
1152 	/*
1153 	 * Form f_ctl by inverting EX_CTX and SEQ_CTX (bits 23, 22).
1154 	 * Echo FIRST_SEQ, LAST_SEQ, END_SEQ, END_CONN, SEQ_INIT.
1155 	 * Bits 9-8 are meaningful (retransmitted or unidirectional).
1156 	 * Last ACK uses bits 7-6 (continue sequence),
1157 	 * bits 5-4 are meaningful (what kind of ACK to use).
1158 	 * Always set LAST_SEQ, END_SEQ.
1159 	 */
1160 	f_ctl = ntoh24(rx_fh->fh_f_ctl);
1161 	f_ctl &= FC_FC_EX_CTX | FC_FC_SEQ_CTX |
1162 		FC_FC_END_CONN | FC_FC_SEQ_INIT |
1163 		FC_FC_RETX_SEQ | FC_FC_UNI_TX;
1164 	f_ctl ^= FC_FC_EX_CTX | FC_FC_SEQ_CTX;
1165 	f_ctl |= FC_FC_LAST_SEQ | FC_FC_END_SEQ;
1166 	f_ctl &= ~FC_FC_FIRST_SEQ;
1167 	hton24(fh->fh_f_ctl, f_ctl);
1168 
1169 	fr_sof(fp) = fc_sof_class(fr_sof(rx_fp));
1170 	fr_eof(fp) = FC_EOF_T;
1171 	if (fc_sof_needs_ack(fr_sof(fp)))
1172 		fr_eof(fp) = FC_EOF_N;
1173 
1174 	lport->tt.frame_send(lport, fp);
1175 }
1176 
1177 /**
1178  * fc_exch_recv_abts() - Handle an incoming ABTS
1179  * @ep:	   The exchange the abort was on
1180  * @rx_fp: The ABTS frame
1181  *
1182  * This would be for target mode usually, but could be due to lost
1183  * FCP transfer ready, confirm or RRQ. We always handle this as an
1184  * exchange abort, ignoring the parameter.
1185  */
1186 static void fc_exch_recv_abts(struct fc_exch *ep, struct fc_frame *rx_fp)
1187 {
1188 	struct fc_frame *fp;
1189 	struct fc_ba_acc *ap;
1190 	struct fc_frame_header *fh;
1191 	struct fc_seq *sp;
1192 
1193 	if (!ep)
1194 		goto reject;
1195 	spin_lock_bh(&ep->ex_lock);
1196 	if (ep->esb_stat & ESB_ST_COMPLETE) {
1197 		spin_unlock_bh(&ep->ex_lock);
1198 		goto reject;
1199 	}
1200 	if (!(ep->esb_stat & ESB_ST_REC_QUAL))
1201 		fc_exch_hold(ep);		/* hold for REC_QUAL */
1202 	ep->esb_stat |= ESB_ST_ABNORMAL | ESB_ST_REC_QUAL;
1203 	fc_exch_timer_set_locked(ep, ep->r_a_tov);
1204 
1205 	fp = fc_frame_alloc(ep->lp, sizeof(*ap));
1206 	if (!fp) {
1207 		spin_unlock_bh(&ep->ex_lock);
1208 		goto free;
1209 	}
1210 	fh = fc_frame_header_get(fp);
1211 	ap = fc_frame_payload_get(fp, sizeof(*ap));
1212 	memset(ap, 0, sizeof(*ap));
1213 	sp = &ep->seq;
1214 	ap->ba_high_seq_cnt = htons(0xffff);
1215 	if (sp->ssb_stat & SSB_ST_RESP) {
1216 		ap->ba_seq_id = sp->id;
1217 		ap->ba_seq_id_val = FC_BA_SEQ_ID_VAL;
1218 		ap->ba_high_seq_cnt = fh->fh_seq_cnt;
1219 		ap->ba_low_seq_cnt = htons(sp->cnt);
1220 	}
1221 	sp = fc_seq_start_next_locked(sp);
1222 	spin_unlock_bh(&ep->ex_lock);
1223 	fc_seq_send_last(sp, fp, FC_RCTL_BA_ACC, FC_TYPE_BLS);
1224 	fc_frame_free(rx_fp);
1225 	return;
1226 
1227 reject:
1228 	fc_exch_send_ba_rjt(rx_fp, FC_BA_RJT_UNABLE, FC_BA_RJT_INV_XID);
1229 free:
1230 	fc_frame_free(rx_fp);
1231 }
1232 
1233 /**
1234  * fc_exch_recv_req() - Handler for an incoming request where is other
1235  *			end is originating the sequence
1236  * @lport: The local port that received the request
1237  * @mp:	   The EM that the exchange is on
1238  * @fp:	   The request frame
1239  */
1240 static void fc_exch_recv_req(struct fc_lport *lport, struct fc_exch_mgr *mp,
1241 			     struct fc_frame *fp)
1242 {
1243 	struct fc_frame_header *fh = fc_frame_header_get(fp);
1244 	struct fc_seq *sp = NULL;
1245 	struct fc_exch *ep = NULL;
1246 	enum fc_pf_rjt_reason reject;
1247 
1248 	/* We can have the wrong fc_lport at this point with NPIV, which is a
1249 	 * problem now that we know a new exchange needs to be allocated
1250 	 */
1251 	lport = fc_vport_id_lookup(lport, ntoh24(fh->fh_d_id));
1252 	if (!lport) {
1253 		fc_frame_free(fp);
1254 		return;
1255 	}
1256 
1257 	fr_seq(fp) = NULL;
1258 	reject = fc_seq_lookup_recip(lport, mp, fp);
1259 	if (reject == FC_RJT_NONE) {
1260 		sp = fr_seq(fp);	/* sequence will be held */
1261 		ep = fc_seq_exch(sp);
1262 		fc_seq_send_ack(sp, fp);
1263 		ep->encaps = fr_encaps(fp);
1264 
1265 		/*
1266 		 * Call the receive function.
1267 		 *
1268 		 * The receive function may allocate a new sequence
1269 		 * over the old one, so we shouldn't change the
1270 		 * sequence after this.
1271 		 *
1272 		 * The frame will be freed by the receive function.
1273 		 * If new exch resp handler is valid then call that
1274 		 * first.
1275 		 */
1276 		if (ep->resp)
1277 			ep->resp(sp, fp, ep->arg);
1278 		else
1279 			lport->tt.lport_recv(lport, sp, fp);
1280 		fc_exch_release(ep);	/* release from lookup */
1281 	} else {
1282 		FC_LPORT_DBG(lport, "exch/seq lookup failed: reject %x\n",
1283 			     reject);
1284 		fc_frame_free(fp);
1285 	}
1286 }
1287 
1288 /**
1289  * fc_exch_recv_seq_resp() - Handler for an incoming response where the other
1290  *			     end is the originator of the sequence that is a
1291  *			     response to our initial exchange
1292  * @mp: The EM that the exchange is on
1293  * @fp: The response frame
1294  */
1295 static void fc_exch_recv_seq_resp(struct fc_exch_mgr *mp, struct fc_frame *fp)
1296 {
1297 	struct fc_frame_header *fh = fc_frame_header_get(fp);
1298 	struct fc_seq *sp;
1299 	struct fc_exch *ep;
1300 	enum fc_sof sof;
1301 	u32 f_ctl;
1302 	void (*resp)(struct fc_seq *, struct fc_frame *fp, void *arg);
1303 	void *ex_resp_arg;
1304 	int rc;
1305 
1306 	ep = fc_exch_find(mp, ntohs(fh->fh_ox_id));
1307 	if (!ep) {
1308 		atomic_inc(&mp->stats.xid_not_found);
1309 		goto out;
1310 	}
1311 	if (ep->esb_stat & ESB_ST_COMPLETE) {
1312 		atomic_inc(&mp->stats.xid_not_found);
1313 		goto out;
1314 	}
1315 	if (ep->rxid == FC_XID_UNKNOWN)
1316 		ep->rxid = ntohs(fh->fh_rx_id);
1317 	if (ep->sid != 0 && ep->sid != ntoh24(fh->fh_d_id)) {
1318 		atomic_inc(&mp->stats.xid_not_found);
1319 		goto rel;
1320 	}
1321 	if (ep->did != ntoh24(fh->fh_s_id) &&
1322 	    ep->did != FC_FID_FLOGI) {
1323 		atomic_inc(&mp->stats.xid_not_found);
1324 		goto rel;
1325 	}
1326 	sof = fr_sof(fp);
1327 	sp = &ep->seq;
1328 	if (fc_sof_is_init(sof)) {
1329 		sp->ssb_stat |= SSB_ST_RESP;
1330 		sp->id = fh->fh_seq_id;
1331 	} else if (sp->id != fh->fh_seq_id) {
1332 		atomic_inc(&mp->stats.seq_not_found);
1333 		goto rel;
1334 	}
1335 
1336 	f_ctl = ntoh24(fh->fh_f_ctl);
1337 	fr_seq(fp) = sp;
1338 	if (f_ctl & FC_FC_SEQ_INIT)
1339 		ep->esb_stat |= ESB_ST_SEQ_INIT;
1340 
1341 	if (fc_sof_needs_ack(sof))
1342 		fc_seq_send_ack(sp, fp);
1343 	resp = ep->resp;
1344 	ex_resp_arg = ep->arg;
1345 
1346 	if (fh->fh_type != FC_TYPE_FCP && fr_eof(fp) == FC_EOF_T &&
1347 	    (f_ctl & (FC_FC_LAST_SEQ | FC_FC_END_SEQ)) ==
1348 	    (FC_FC_LAST_SEQ | FC_FC_END_SEQ)) {
1349 		spin_lock_bh(&ep->ex_lock);
1350 		rc = fc_exch_done_locked(ep);
1351 		WARN_ON(fc_seq_exch(sp) != ep);
1352 		spin_unlock_bh(&ep->ex_lock);
1353 		if (!rc)
1354 			fc_exch_delete(ep);
1355 	}
1356 
1357 	/*
1358 	 * Call the receive function.
1359 	 * The sequence is held (has a refcnt) for us,
1360 	 * but not for the receive function.
1361 	 *
1362 	 * The receive function may allocate a new sequence
1363 	 * over the old one, so we shouldn't change the
1364 	 * sequence after this.
1365 	 *
1366 	 * The frame will be freed by the receive function.
1367 	 * If new exch resp handler is valid then call that
1368 	 * first.
1369 	 */
1370 	if (resp)
1371 		resp(sp, fp, ex_resp_arg);
1372 	else
1373 		fc_frame_free(fp);
1374 	fc_exch_release(ep);
1375 	return;
1376 rel:
1377 	fc_exch_release(ep);
1378 out:
1379 	fc_frame_free(fp);
1380 }
1381 
1382 /**
1383  * fc_exch_recv_resp() - Handler for a sequence where other end is
1384  *			 responding to our sequence
1385  * @mp: The EM that the exchange is on
1386  * @fp: The response frame
1387  */
1388 static void fc_exch_recv_resp(struct fc_exch_mgr *mp, struct fc_frame *fp)
1389 {
1390 	struct fc_seq *sp;
1391 
1392 	sp = fc_seq_lookup_orig(mp, fp);	/* doesn't hold sequence */
1393 
1394 	if (!sp)
1395 		atomic_inc(&mp->stats.xid_not_found);
1396 	else
1397 		atomic_inc(&mp->stats.non_bls_resp);
1398 
1399 	fc_frame_free(fp);
1400 }
1401 
1402 /**
1403  * fc_exch_abts_resp() - Handler for a response to an ABT
1404  * @ep: The exchange that the frame is on
1405  * @fp: The response frame
1406  *
1407  * This response would be to an ABTS cancelling an exchange or sequence.
1408  * The response can be either BA_ACC or BA_RJT
1409  */
1410 static void fc_exch_abts_resp(struct fc_exch *ep, struct fc_frame *fp)
1411 {
1412 	void (*resp)(struct fc_seq *, struct fc_frame *fp, void *arg);
1413 	void *ex_resp_arg;
1414 	struct fc_frame_header *fh;
1415 	struct fc_ba_acc *ap;
1416 	struct fc_seq *sp;
1417 	u16 low;
1418 	u16 high;
1419 	int rc = 1, has_rec = 0;
1420 
1421 	fh = fc_frame_header_get(fp);
1422 	FC_EXCH_DBG(ep, "exch: BLS rctl %x - %s\n", fh->fh_r_ctl,
1423 		    fc_exch_rctl_name(fh->fh_r_ctl));
1424 
1425 	if (cancel_delayed_work_sync(&ep->timeout_work))
1426 		fc_exch_release(ep);	/* release from pending timer hold */
1427 
1428 	spin_lock_bh(&ep->ex_lock);
1429 	switch (fh->fh_r_ctl) {
1430 	case FC_RCTL_BA_ACC:
1431 		ap = fc_frame_payload_get(fp, sizeof(*ap));
1432 		if (!ap)
1433 			break;
1434 
1435 		/*
1436 		 * Decide whether to establish a Recovery Qualifier.
1437 		 * We do this if there is a non-empty SEQ_CNT range and
1438 		 * SEQ_ID is the same as the one we aborted.
1439 		 */
1440 		low = ntohs(ap->ba_low_seq_cnt);
1441 		high = ntohs(ap->ba_high_seq_cnt);
1442 		if ((ep->esb_stat & ESB_ST_REC_QUAL) == 0 &&
1443 		    (ap->ba_seq_id_val != FC_BA_SEQ_ID_VAL ||
1444 		     ap->ba_seq_id == ep->seq_id) && low != high) {
1445 			ep->esb_stat |= ESB_ST_REC_QUAL;
1446 			fc_exch_hold(ep);  /* hold for recovery qualifier */
1447 			has_rec = 1;
1448 		}
1449 		break;
1450 	case FC_RCTL_BA_RJT:
1451 		break;
1452 	default:
1453 		break;
1454 	}
1455 
1456 	resp = ep->resp;
1457 	ex_resp_arg = ep->arg;
1458 
1459 	/* do we need to do some other checks here. Can we reuse more of
1460 	 * fc_exch_recv_seq_resp
1461 	 */
1462 	sp = &ep->seq;
1463 	/*
1464 	 * do we want to check END_SEQ as well as LAST_SEQ here?
1465 	 */
1466 	if (ep->fh_type != FC_TYPE_FCP &&
1467 	    ntoh24(fh->fh_f_ctl) & FC_FC_LAST_SEQ)
1468 		rc = fc_exch_done_locked(ep);
1469 	spin_unlock_bh(&ep->ex_lock);
1470 	if (!rc)
1471 		fc_exch_delete(ep);
1472 
1473 	if (resp)
1474 		resp(sp, fp, ex_resp_arg);
1475 	else
1476 		fc_frame_free(fp);
1477 
1478 	if (has_rec)
1479 		fc_exch_timer_set(ep, ep->r_a_tov);
1480 
1481 }
1482 
1483 /**
1484  * fc_exch_recv_bls() - Handler for a BLS sequence
1485  * @mp: The EM that the exchange is on
1486  * @fp: The request frame
1487  *
1488  * The BLS frame is always a sequence initiated by the remote side.
1489  * We may be either the originator or recipient of the exchange.
1490  */
1491 static void fc_exch_recv_bls(struct fc_exch_mgr *mp, struct fc_frame *fp)
1492 {
1493 	struct fc_frame_header *fh;
1494 	struct fc_exch *ep;
1495 	u32 f_ctl;
1496 
1497 	fh = fc_frame_header_get(fp);
1498 	f_ctl = ntoh24(fh->fh_f_ctl);
1499 	fr_seq(fp) = NULL;
1500 
1501 	ep = fc_exch_find(mp, (f_ctl & FC_FC_EX_CTX) ?
1502 			  ntohs(fh->fh_ox_id) : ntohs(fh->fh_rx_id));
1503 	if (ep && (f_ctl & FC_FC_SEQ_INIT)) {
1504 		spin_lock_bh(&ep->ex_lock);
1505 		ep->esb_stat |= ESB_ST_SEQ_INIT;
1506 		spin_unlock_bh(&ep->ex_lock);
1507 	}
1508 	if (f_ctl & FC_FC_SEQ_CTX) {
1509 		/*
1510 		 * A response to a sequence we initiated.
1511 		 * This should only be ACKs for class 2 or F.
1512 		 */
1513 		switch (fh->fh_r_ctl) {
1514 		case FC_RCTL_ACK_1:
1515 		case FC_RCTL_ACK_0:
1516 			break;
1517 		default:
1518 			FC_EXCH_DBG(ep, "BLS rctl %x - %s received",
1519 				    fh->fh_r_ctl,
1520 				    fc_exch_rctl_name(fh->fh_r_ctl));
1521 			break;
1522 		}
1523 		fc_frame_free(fp);
1524 	} else {
1525 		switch (fh->fh_r_ctl) {
1526 		case FC_RCTL_BA_RJT:
1527 		case FC_RCTL_BA_ACC:
1528 			if (ep)
1529 				fc_exch_abts_resp(ep, fp);
1530 			else
1531 				fc_frame_free(fp);
1532 			break;
1533 		case FC_RCTL_BA_ABTS:
1534 			fc_exch_recv_abts(ep, fp);
1535 			break;
1536 		default:			/* ignore junk */
1537 			fc_frame_free(fp);
1538 			break;
1539 		}
1540 	}
1541 	if (ep)
1542 		fc_exch_release(ep);	/* release hold taken by fc_exch_find */
1543 }
1544 
1545 /**
1546  * fc_seq_ls_acc() - Accept sequence with LS_ACC
1547  * @req_sp: The request sequence
1548  *
1549  * If this fails due to allocation or transmit congestion, assume the
1550  * originator will repeat the sequence.
1551  */
1552 static void fc_seq_ls_acc(struct fc_seq *req_sp)
1553 {
1554 	struct fc_seq *sp;
1555 	struct fc_els_ls_acc *acc;
1556 	struct fc_frame *fp;
1557 
1558 	sp = fc_seq_start_next(req_sp);
1559 	fp = fc_frame_alloc(fc_seq_exch(sp)->lp, sizeof(*acc));
1560 	if (fp) {
1561 		acc = fc_frame_payload_get(fp, sizeof(*acc));
1562 		memset(acc, 0, sizeof(*acc));
1563 		acc->la_cmd = ELS_LS_ACC;
1564 		fc_seq_send_last(sp, fp, FC_RCTL_ELS_REP, FC_TYPE_ELS);
1565 	}
1566 }
1567 
1568 /**
1569  * fc_seq_ls_rjt() - Reject a sequence with ELS LS_RJT
1570  * @req_sp: The request sequence
1571  * @reason: The reason the sequence is being rejected
1572  * @explan: The explaination for the rejection
1573  *
1574  * If this fails due to allocation or transmit congestion, assume the
1575  * originator will repeat the sequence.
1576  */
1577 static void fc_seq_ls_rjt(struct fc_seq *req_sp, enum fc_els_rjt_reason reason,
1578 			  enum fc_els_rjt_explan explan)
1579 {
1580 	struct fc_seq *sp;
1581 	struct fc_els_ls_rjt *rjt;
1582 	struct fc_frame *fp;
1583 
1584 	sp = fc_seq_start_next(req_sp);
1585 	fp = fc_frame_alloc(fc_seq_exch(sp)->lp, sizeof(*rjt));
1586 	if (fp) {
1587 		rjt = fc_frame_payload_get(fp, sizeof(*rjt));
1588 		memset(rjt, 0, sizeof(*rjt));
1589 		rjt->er_cmd = ELS_LS_RJT;
1590 		rjt->er_reason = reason;
1591 		rjt->er_explan = explan;
1592 		fc_seq_send_last(sp, fp, FC_RCTL_ELS_REP, FC_TYPE_ELS);
1593 	}
1594 }
1595 
1596 /**
1597  * fc_exch_reset() - Reset an exchange
1598  * @ep: The exchange to be reset
1599  */
1600 static void fc_exch_reset(struct fc_exch *ep)
1601 {
1602 	struct fc_seq *sp;
1603 	void (*resp)(struct fc_seq *, struct fc_frame *, void *);
1604 	void *arg;
1605 	int rc = 1;
1606 
1607 	spin_lock_bh(&ep->ex_lock);
1608 	ep->state |= FC_EX_RST_CLEANUP;
1609 	if (cancel_delayed_work(&ep->timeout_work))
1610 		atomic_dec(&ep->ex_refcnt);	/* drop hold for timer */
1611 	resp = ep->resp;
1612 	ep->resp = NULL;
1613 	if (ep->esb_stat & ESB_ST_REC_QUAL)
1614 		atomic_dec(&ep->ex_refcnt);	/* drop hold for rec_qual */
1615 	ep->esb_stat &= ~ESB_ST_REC_QUAL;
1616 	arg = ep->arg;
1617 	sp = &ep->seq;
1618 	rc = fc_exch_done_locked(ep);
1619 	spin_unlock_bh(&ep->ex_lock);
1620 	if (!rc)
1621 		fc_exch_delete(ep);
1622 
1623 	if (resp)
1624 		resp(sp, ERR_PTR(-FC_EX_CLOSED), arg);
1625 }
1626 
1627 /**
1628  * fc_exch_pool_reset() - Reset a per cpu exchange pool
1629  * @lport: The local port that the exchange pool is on
1630  * @pool:  The exchange pool to be reset
1631  * @sid:   The source ID
1632  * @did:   The destination ID
1633  *
1634  * Resets a per cpu exches pool, releasing all of its sequences
1635  * and exchanges. If sid is non-zero then reset only exchanges
1636  * we sourced from the local port's FID. If did is non-zero then
1637  * only reset exchanges destined for the local port's FID.
1638  */
1639 static void fc_exch_pool_reset(struct fc_lport *lport,
1640 			       struct fc_exch_pool *pool,
1641 			       u32 sid, u32 did)
1642 {
1643 	struct fc_exch *ep;
1644 	struct fc_exch *next;
1645 
1646 	spin_lock_bh(&pool->lock);
1647 restart:
1648 	list_for_each_entry_safe(ep, next, &pool->ex_list, ex_list) {
1649 		if ((lport == ep->lp) &&
1650 		    (sid == 0 || sid == ep->sid) &&
1651 		    (did == 0 || did == ep->did)) {
1652 			fc_exch_hold(ep);
1653 			spin_unlock_bh(&pool->lock);
1654 
1655 			fc_exch_reset(ep);
1656 
1657 			fc_exch_release(ep);
1658 			spin_lock_bh(&pool->lock);
1659 
1660 			/*
1661 			 * must restart loop incase while lock
1662 			 * was down multiple eps were released.
1663 			 */
1664 			goto restart;
1665 		}
1666 	}
1667 	spin_unlock_bh(&pool->lock);
1668 }
1669 
1670 /**
1671  * fc_exch_mgr_reset() - Reset all EMs of a local port
1672  * @lport: The local port whose EMs are to be reset
1673  * @sid:   The source ID
1674  * @did:   The destination ID
1675  *
1676  * Reset all EMs associated with a given local port. Release all
1677  * sequences and exchanges. If sid is non-zero then reset only the
1678  * exchanges sent from the local port's FID. If did is non-zero then
1679  * reset only exchanges destined for the local port's FID.
1680  */
1681 void fc_exch_mgr_reset(struct fc_lport *lport, u32 sid, u32 did)
1682 {
1683 	struct fc_exch_mgr_anchor *ema;
1684 	unsigned int cpu;
1685 
1686 	list_for_each_entry(ema, &lport->ema_list, ema_list) {
1687 		for_each_possible_cpu(cpu)
1688 			fc_exch_pool_reset(lport,
1689 					   per_cpu_ptr(ema->mp->pool, cpu),
1690 					   sid, did);
1691 	}
1692 }
1693 EXPORT_SYMBOL(fc_exch_mgr_reset);
1694 
1695 /**
1696  * fc_exch_els_rec() - Handler for ELS REC (Read Exchange Concise) requests
1697  * @sp:	 The sequence the REC is on
1698  * @rfp: The REC frame
1699  *
1700  * Note that the requesting port may be different than the S_ID in the request.
1701  */
1702 static void fc_exch_els_rec(struct fc_seq *sp, struct fc_frame *rfp)
1703 {
1704 	struct fc_frame *fp;
1705 	struct fc_exch *ep;
1706 	struct fc_exch_mgr *em;
1707 	struct fc_els_rec *rp;
1708 	struct fc_els_rec_acc *acc;
1709 	enum fc_els_rjt_reason reason = ELS_RJT_LOGIC;
1710 	enum fc_els_rjt_explan explan;
1711 	u32 sid;
1712 	u16 rxid;
1713 	u16 oxid;
1714 
1715 	rp = fc_frame_payload_get(rfp, sizeof(*rp));
1716 	explan = ELS_EXPL_INV_LEN;
1717 	if (!rp)
1718 		goto reject;
1719 	sid = ntoh24(rp->rec_s_id);
1720 	rxid = ntohs(rp->rec_rx_id);
1721 	oxid = ntohs(rp->rec_ox_id);
1722 
1723 	/*
1724 	 * Currently it's hard to find the local S_ID from the exchange
1725 	 * manager.  This will eventually be fixed, but for now it's easier
1726 	 * to lookup the subject exchange twice, once as if we were
1727 	 * the initiator, and then again if we weren't.
1728 	 */
1729 	em = fc_seq_exch(sp)->em;
1730 	ep = fc_exch_find(em, oxid);
1731 	explan = ELS_EXPL_OXID_RXID;
1732 	if (ep && ep->oid == sid) {
1733 		if (ep->rxid != FC_XID_UNKNOWN &&
1734 		    rxid != FC_XID_UNKNOWN &&
1735 		    ep->rxid != rxid)
1736 			goto rel;
1737 	} else {
1738 		if (ep)
1739 			fc_exch_release(ep);
1740 		ep = NULL;
1741 		if (rxid != FC_XID_UNKNOWN)
1742 			ep = fc_exch_find(em, rxid);
1743 		if (!ep)
1744 			goto reject;
1745 	}
1746 
1747 	fp = fc_frame_alloc(fc_seq_exch(sp)->lp, sizeof(*acc));
1748 	if (!fp) {
1749 		fc_exch_done(sp);
1750 		goto out;
1751 	}
1752 	acc = fc_frame_payload_get(fp, sizeof(*acc));
1753 	memset(acc, 0, sizeof(*acc));
1754 	acc->reca_cmd = ELS_LS_ACC;
1755 	acc->reca_ox_id = rp->rec_ox_id;
1756 	memcpy(acc->reca_ofid, rp->rec_s_id, 3);
1757 	acc->reca_rx_id = htons(ep->rxid);
1758 	if (ep->sid == ep->oid)
1759 		hton24(acc->reca_rfid, ep->did);
1760 	else
1761 		hton24(acc->reca_rfid, ep->sid);
1762 	acc->reca_fc4value = htonl(ep->seq.rec_data);
1763 	acc->reca_e_stat = htonl(ep->esb_stat & (ESB_ST_RESP |
1764 						 ESB_ST_SEQ_INIT |
1765 						 ESB_ST_COMPLETE));
1766 	sp = fc_seq_start_next(sp);
1767 	fc_seq_send_last(sp, fp, FC_RCTL_ELS_REP, FC_TYPE_ELS);
1768 out:
1769 	fc_exch_release(ep);
1770 	fc_frame_free(rfp);
1771 	return;
1772 
1773 rel:
1774 	fc_exch_release(ep);
1775 reject:
1776 	fc_seq_ls_rjt(sp, reason, explan);
1777 	fc_frame_free(rfp);
1778 }
1779 
1780 /**
1781  * fc_exch_rrq_resp() - Handler for RRQ responses
1782  * @sp:	 The sequence that the RRQ is on
1783  * @fp:	 The RRQ frame
1784  * @arg: The exchange that the RRQ is on
1785  *
1786  * TODO: fix error handler.
1787  */
1788 static void fc_exch_rrq_resp(struct fc_seq *sp, struct fc_frame *fp, void *arg)
1789 {
1790 	struct fc_exch *aborted_ep = arg;
1791 	unsigned int op;
1792 
1793 	if (IS_ERR(fp)) {
1794 		int err = PTR_ERR(fp);
1795 
1796 		if (err == -FC_EX_CLOSED || err == -FC_EX_TIMEOUT)
1797 			goto cleanup;
1798 		FC_EXCH_DBG(aborted_ep, "Cannot process RRQ, "
1799 			    "frame error %d\n", err);
1800 		return;
1801 	}
1802 
1803 	op = fc_frame_payload_op(fp);
1804 	fc_frame_free(fp);
1805 
1806 	switch (op) {
1807 	case ELS_LS_RJT:
1808 		FC_EXCH_DBG(aborted_ep, "LS_RJT for RRQ");
1809 		/* fall through */
1810 	case ELS_LS_ACC:
1811 		goto cleanup;
1812 	default:
1813 		FC_EXCH_DBG(aborted_ep, "unexpected response op %x "
1814 			    "for RRQ", op);
1815 		return;
1816 	}
1817 
1818 cleanup:
1819 	fc_exch_done(&aborted_ep->seq);
1820 	/* drop hold for rec qual */
1821 	fc_exch_release(aborted_ep);
1822 }
1823 
1824 
1825 /**
1826  * fc_exch_seq_send() - Send a frame using a new exchange and sequence
1827  * @lport:	The local port to send the frame on
1828  * @fp:		The frame to be sent
1829  * @resp:	The response handler for this request
1830  * @destructor: The destructor for the exchange
1831  * @arg:	The argument to be passed to the response handler
1832  * @timer_msec: The timeout period for the exchange
1833  *
1834  * The frame pointer with some of the header's fields must be
1835  * filled before calling this routine, those fields are:
1836  *
1837  * - routing control
1838  * - FC port did
1839  * - FC port sid
1840  * - FC header type
1841  * - frame control
1842  * - parameter or relative offset
1843  */
1844 static struct fc_seq *fc_exch_seq_send(struct fc_lport *lport,
1845 				       struct fc_frame *fp,
1846 				       void (*resp)(struct fc_seq *,
1847 						    struct fc_frame *fp,
1848 						    void *arg),
1849 				       void (*destructor)(struct fc_seq *,
1850 							  void *),
1851 				       void *arg, u32 timer_msec)
1852 {
1853 	struct fc_exch *ep;
1854 	struct fc_seq *sp = NULL;
1855 	struct fc_frame_header *fh;
1856 	int rc = 1;
1857 
1858 	ep = fc_exch_alloc(lport, fp);
1859 	if (!ep) {
1860 		fc_frame_free(fp);
1861 		return NULL;
1862 	}
1863 	ep->esb_stat |= ESB_ST_SEQ_INIT;
1864 	fh = fc_frame_header_get(fp);
1865 	fc_exch_set_addr(ep, ntoh24(fh->fh_s_id), ntoh24(fh->fh_d_id));
1866 	ep->resp = resp;
1867 	ep->destructor = destructor;
1868 	ep->arg = arg;
1869 	ep->r_a_tov = FC_DEF_R_A_TOV;
1870 	ep->lp = lport;
1871 	sp = &ep->seq;
1872 
1873 	ep->fh_type = fh->fh_type; /* save for possbile timeout handling */
1874 	ep->f_ctl = ntoh24(fh->fh_f_ctl);
1875 	fc_exch_setup_hdr(ep, fp, ep->f_ctl);
1876 	sp->cnt++;
1877 
1878 	if (ep->xid <= lport->lro_xid && fh->fh_r_ctl == FC_RCTL_DD_UNSOL_CMD)
1879 		fc_fcp_ddp_setup(fr_fsp(fp), ep->xid);
1880 
1881 	if (unlikely(lport->tt.frame_send(lport, fp)))
1882 		goto err;
1883 
1884 	if (timer_msec)
1885 		fc_exch_timer_set_locked(ep, timer_msec);
1886 	ep->f_ctl &= ~FC_FC_FIRST_SEQ;	/* not first seq */
1887 
1888 	if (ep->f_ctl & FC_FC_SEQ_INIT)
1889 		ep->esb_stat &= ~ESB_ST_SEQ_INIT;
1890 	spin_unlock_bh(&ep->ex_lock);
1891 	return sp;
1892 err:
1893 	rc = fc_exch_done_locked(ep);
1894 	spin_unlock_bh(&ep->ex_lock);
1895 	if (!rc)
1896 		fc_exch_delete(ep);
1897 	return NULL;
1898 }
1899 
1900 /**
1901  * fc_exch_rrq() - Send an ELS RRQ (Reinstate Recovery Qualifier) command
1902  * @ep: The exchange to send the RRQ on
1903  *
1904  * This tells the remote port to stop blocking the use of
1905  * the exchange and the seq_cnt range.
1906  */
1907 static void fc_exch_rrq(struct fc_exch *ep)
1908 {
1909 	struct fc_lport *lport;
1910 	struct fc_els_rrq *rrq;
1911 	struct fc_frame *fp;
1912 	u32 did;
1913 
1914 	lport = ep->lp;
1915 
1916 	fp = fc_frame_alloc(lport, sizeof(*rrq));
1917 	if (!fp)
1918 		goto retry;
1919 
1920 	rrq = fc_frame_payload_get(fp, sizeof(*rrq));
1921 	memset(rrq, 0, sizeof(*rrq));
1922 	rrq->rrq_cmd = ELS_RRQ;
1923 	hton24(rrq->rrq_s_id, ep->sid);
1924 	rrq->rrq_ox_id = htons(ep->oxid);
1925 	rrq->rrq_rx_id = htons(ep->rxid);
1926 
1927 	did = ep->did;
1928 	if (ep->esb_stat & ESB_ST_RESP)
1929 		did = ep->sid;
1930 
1931 	fc_fill_fc_hdr(fp, FC_RCTL_ELS_REQ, did,
1932 		       lport->port_id, FC_TYPE_ELS,
1933 		       FC_FC_FIRST_SEQ | FC_FC_END_SEQ | FC_FC_SEQ_INIT, 0);
1934 
1935 	if (fc_exch_seq_send(lport, fp, fc_exch_rrq_resp, NULL, ep,
1936 			     lport->e_d_tov))
1937 		return;
1938 
1939 retry:
1940 	spin_lock_bh(&ep->ex_lock);
1941 	if (ep->state & (FC_EX_RST_CLEANUP | FC_EX_DONE)) {
1942 		spin_unlock_bh(&ep->ex_lock);
1943 		/* drop hold for rec qual */
1944 		fc_exch_release(ep);
1945 		return;
1946 	}
1947 	ep->esb_stat |= ESB_ST_REC_QUAL;
1948 	fc_exch_timer_set_locked(ep, ep->r_a_tov);
1949 	spin_unlock_bh(&ep->ex_lock);
1950 }
1951 
1952 
1953 /**
1954  * fc_exch_els_rrq() - Handler for ELS RRQ (Reset Recovery Qualifier) requests
1955  * @sp: The sequence that the RRQ is on
1956  * @fp: The RRQ frame
1957  */
1958 static void fc_exch_els_rrq(struct fc_seq *sp, struct fc_frame *fp)
1959 {
1960 	struct fc_exch *ep = NULL;	/* request or subject exchange */
1961 	struct fc_els_rrq *rp;
1962 	u32 sid;
1963 	u16 xid;
1964 	enum fc_els_rjt_explan explan;
1965 
1966 	rp = fc_frame_payload_get(fp, sizeof(*rp));
1967 	explan = ELS_EXPL_INV_LEN;
1968 	if (!rp)
1969 		goto reject;
1970 
1971 	/*
1972 	 * lookup subject exchange.
1973 	 */
1974 	ep = fc_seq_exch(sp);
1975 	sid = ntoh24(rp->rrq_s_id);		/* subject source */
1976 	xid = ep->did == sid ? ntohs(rp->rrq_ox_id) : ntohs(rp->rrq_rx_id);
1977 	ep = fc_exch_find(ep->em, xid);
1978 
1979 	explan = ELS_EXPL_OXID_RXID;
1980 	if (!ep)
1981 		goto reject;
1982 	spin_lock_bh(&ep->ex_lock);
1983 	if (ep->oxid != ntohs(rp->rrq_ox_id))
1984 		goto unlock_reject;
1985 	if (ep->rxid != ntohs(rp->rrq_rx_id) &&
1986 	    ep->rxid != FC_XID_UNKNOWN)
1987 		goto unlock_reject;
1988 	explan = ELS_EXPL_SID;
1989 	if (ep->sid != sid)
1990 		goto unlock_reject;
1991 
1992 	/*
1993 	 * Clear Recovery Qualifier state, and cancel timer if complete.
1994 	 */
1995 	if (ep->esb_stat & ESB_ST_REC_QUAL) {
1996 		ep->esb_stat &= ~ESB_ST_REC_QUAL;
1997 		atomic_dec(&ep->ex_refcnt);	/* drop hold for rec qual */
1998 	}
1999 	if (ep->esb_stat & ESB_ST_COMPLETE) {
2000 		if (cancel_delayed_work(&ep->timeout_work))
2001 			atomic_dec(&ep->ex_refcnt);	/* drop timer hold */
2002 	}
2003 
2004 	spin_unlock_bh(&ep->ex_lock);
2005 
2006 	/*
2007 	 * Send LS_ACC.
2008 	 */
2009 	fc_seq_ls_acc(sp);
2010 	goto out;
2011 
2012 unlock_reject:
2013 	spin_unlock_bh(&ep->ex_lock);
2014 reject:
2015 	fc_seq_ls_rjt(sp, ELS_RJT_LOGIC, explan);
2016 out:
2017 	fc_frame_free(fp);
2018 	if (ep)
2019 		fc_exch_release(ep);	/* drop hold from fc_exch_find */
2020 }
2021 
2022 /**
2023  * fc_exch_mgr_add() - Add an exchange manager to a local port's list of EMs
2024  * @lport: The local port to add the exchange manager to
2025  * @mp:	   The exchange manager to be added to the local port
2026  * @match: The match routine that indicates when this EM should be used
2027  */
2028 struct fc_exch_mgr_anchor *fc_exch_mgr_add(struct fc_lport *lport,
2029 					   struct fc_exch_mgr *mp,
2030 					   bool (*match)(struct fc_frame *))
2031 {
2032 	struct fc_exch_mgr_anchor *ema;
2033 
2034 	ema = kmalloc(sizeof(*ema), GFP_ATOMIC);
2035 	if (!ema)
2036 		return ema;
2037 
2038 	ema->mp = mp;
2039 	ema->match = match;
2040 	/* add EM anchor to EM anchors list */
2041 	list_add_tail(&ema->ema_list, &lport->ema_list);
2042 	kref_get(&mp->kref);
2043 	return ema;
2044 }
2045 EXPORT_SYMBOL(fc_exch_mgr_add);
2046 
2047 /**
2048  * fc_exch_mgr_destroy() - Destroy an exchange manager
2049  * @kref: The reference to the EM to be destroyed
2050  */
2051 static void fc_exch_mgr_destroy(struct kref *kref)
2052 {
2053 	struct fc_exch_mgr *mp = container_of(kref, struct fc_exch_mgr, kref);
2054 
2055 	mempool_destroy(mp->ep_pool);
2056 	free_percpu(mp->pool);
2057 	kfree(mp);
2058 }
2059 
2060 /**
2061  * fc_exch_mgr_del() - Delete an EM from a local port's list
2062  * @ema: The exchange manager anchor identifying the EM to be deleted
2063  */
2064 void fc_exch_mgr_del(struct fc_exch_mgr_anchor *ema)
2065 {
2066 	/* remove EM anchor from EM anchors list */
2067 	list_del(&ema->ema_list);
2068 	kref_put(&ema->mp->kref, fc_exch_mgr_destroy);
2069 	kfree(ema);
2070 }
2071 EXPORT_SYMBOL(fc_exch_mgr_del);
2072 
2073 /**
2074  * fc_exch_mgr_list_clone() - Share all exchange manager objects
2075  * @src: Source lport to clone exchange managers from
2076  * @dst: New lport that takes references to all the exchange managers
2077  */
2078 int fc_exch_mgr_list_clone(struct fc_lport *src, struct fc_lport *dst)
2079 {
2080 	struct fc_exch_mgr_anchor *ema, *tmp;
2081 
2082 	list_for_each_entry(ema, &src->ema_list, ema_list) {
2083 		if (!fc_exch_mgr_add(dst, ema->mp, ema->match))
2084 			goto err;
2085 	}
2086 	return 0;
2087 err:
2088 	list_for_each_entry_safe(ema, tmp, &dst->ema_list, ema_list)
2089 		fc_exch_mgr_del(ema);
2090 	return -ENOMEM;
2091 }
2092 
2093 /**
2094  * fc_exch_mgr_alloc() - Allocate an exchange manager
2095  * @lport:   The local port that the new EM will be associated with
2096  * @class:   The default FC class for new exchanges
2097  * @min_xid: The minimum XID for exchanges from the new EM
2098  * @max_xid: The maximum XID for exchanges from the new EM
2099  * @match:   The match routine for the new EM
2100  */
2101 struct fc_exch_mgr *fc_exch_mgr_alloc(struct fc_lport *lport,
2102 				      enum fc_class class,
2103 				      u16 min_xid, u16 max_xid,
2104 				      bool (*match)(struct fc_frame *))
2105 {
2106 	struct fc_exch_mgr *mp;
2107 	u16 pool_exch_range;
2108 	size_t pool_size;
2109 	unsigned int cpu;
2110 	struct fc_exch_pool *pool;
2111 
2112 	if (max_xid <= min_xid || max_xid == FC_XID_UNKNOWN ||
2113 	    (min_xid & fc_cpu_mask) != 0) {
2114 		FC_LPORT_DBG(lport, "Invalid min_xid 0x:%x and max_xid 0x:%x\n",
2115 			     min_xid, max_xid);
2116 		return NULL;
2117 	}
2118 
2119 	/*
2120 	 * allocate memory for EM
2121 	 */
2122 	mp = kzalloc(sizeof(struct fc_exch_mgr), GFP_ATOMIC);
2123 	if (!mp)
2124 		return NULL;
2125 
2126 	mp->class = class;
2127 	/* adjust em exch xid range for offload */
2128 	mp->min_xid = min_xid;
2129 	mp->max_xid = max_xid;
2130 
2131 	mp->ep_pool = mempool_create_slab_pool(2, fc_em_cachep);
2132 	if (!mp->ep_pool)
2133 		goto free_mp;
2134 
2135 	/*
2136 	 * Setup per cpu exch pool with entire exchange id range equally
2137 	 * divided across all cpus. The exch pointers array memory is
2138 	 * allocated for exch range per pool.
2139 	 */
2140 	pool_exch_range = (mp->max_xid - mp->min_xid + 1) / (fc_cpu_mask + 1);
2141 	mp->pool_max_index = pool_exch_range - 1;
2142 
2143 	/*
2144 	 * Allocate and initialize per cpu exch pool
2145 	 */
2146 	pool_size = sizeof(*pool) + pool_exch_range * sizeof(struct fc_exch *);
2147 	mp->pool = __alloc_percpu(pool_size, __alignof__(struct fc_exch_pool));
2148 	if (!mp->pool)
2149 		goto free_mempool;
2150 	for_each_possible_cpu(cpu) {
2151 		pool = per_cpu_ptr(mp->pool, cpu);
2152 		spin_lock_init(&pool->lock);
2153 		INIT_LIST_HEAD(&pool->ex_list);
2154 	}
2155 
2156 	kref_init(&mp->kref);
2157 	if (!fc_exch_mgr_add(lport, mp, match)) {
2158 		free_percpu(mp->pool);
2159 		goto free_mempool;
2160 	}
2161 
2162 	/*
2163 	 * Above kref_init() sets mp->kref to 1 and then
2164 	 * call to fc_exch_mgr_add incremented mp->kref again,
2165 	 * so adjust that extra increment.
2166 	 */
2167 	kref_put(&mp->kref, fc_exch_mgr_destroy);
2168 	return mp;
2169 
2170 free_mempool:
2171 	mempool_destroy(mp->ep_pool);
2172 free_mp:
2173 	kfree(mp);
2174 	return NULL;
2175 }
2176 EXPORT_SYMBOL(fc_exch_mgr_alloc);
2177 
2178 /**
2179  * fc_exch_mgr_free() - Free all exchange managers on a local port
2180  * @lport: The local port whose EMs are to be freed
2181  */
2182 void fc_exch_mgr_free(struct fc_lport *lport)
2183 {
2184 	struct fc_exch_mgr_anchor *ema, *next;
2185 
2186 	flush_workqueue(fc_exch_workqueue);
2187 	list_for_each_entry_safe(ema, next, &lport->ema_list, ema_list)
2188 		fc_exch_mgr_del(ema);
2189 }
2190 EXPORT_SYMBOL(fc_exch_mgr_free);
2191 
2192 /**
2193  * fc_exch_recv() - Handler for received frames
2194  * @lport: The local port the frame was received on
2195  * @fp:	   The received frame
2196  */
2197 void fc_exch_recv(struct fc_lport *lport, struct fc_frame *fp)
2198 {
2199 	struct fc_frame_header *fh = fc_frame_header_get(fp);
2200 	struct fc_exch_mgr_anchor *ema;
2201 	u32 f_ctl, found = 0;
2202 	u16 oxid;
2203 
2204 	/* lport lock ? */
2205 	if (!lport || lport->state == LPORT_ST_DISABLED) {
2206 		FC_LPORT_DBG(lport, "Receiving frames for an lport that "
2207 			     "has not been initialized correctly\n");
2208 		fc_frame_free(fp);
2209 		return;
2210 	}
2211 
2212 	f_ctl = ntoh24(fh->fh_f_ctl);
2213 	oxid = ntohs(fh->fh_ox_id);
2214 	if (f_ctl & FC_FC_EX_CTX) {
2215 		list_for_each_entry(ema, &lport->ema_list, ema_list) {
2216 			if ((oxid >= ema->mp->min_xid) &&
2217 			    (oxid <= ema->mp->max_xid)) {
2218 				found = 1;
2219 				break;
2220 			}
2221 		}
2222 
2223 		if (!found) {
2224 			FC_LPORT_DBG(lport, "Received response for out "
2225 				     "of range oxid:%hx\n", oxid);
2226 			fc_frame_free(fp);
2227 			return;
2228 		}
2229 	} else
2230 		ema = list_entry(lport->ema_list.prev, typeof(*ema), ema_list);
2231 
2232 	/*
2233 	 * If frame is marked invalid, just drop it.
2234 	 */
2235 	switch (fr_eof(fp)) {
2236 	case FC_EOF_T:
2237 		if (f_ctl & FC_FC_END_SEQ)
2238 			skb_trim(fp_skb(fp), fr_len(fp) - FC_FC_FILL(f_ctl));
2239 		/* fall through */
2240 	case FC_EOF_N:
2241 		if (fh->fh_type == FC_TYPE_BLS)
2242 			fc_exch_recv_bls(ema->mp, fp);
2243 		else if ((f_ctl & (FC_FC_EX_CTX | FC_FC_SEQ_CTX)) ==
2244 			 FC_FC_EX_CTX)
2245 			fc_exch_recv_seq_resp(ema->mp, fp);
2246 		else if (f_ctl & FC_FC_SEQ_CTX)
2247 			fc_exch_recv_resp(ema->mp, fp);
2248 		else
2249 			fc_exch_recv_req(lport, ema->mp, fp);
2250 		break;
2251 	default:
2252 		FC_LPORT_DBG(lport, "dropping invalid frame (eof %x)",
2253 			     fr_eof(fp));
2254 		fc_frame_free(fp);
2255 	}
2256 }
2257 EXPORT_SYMBOL(fc_exch_recv);
2258 
2259 /**
2260  * fc_exch_init() - Initialize the exchange layer for a local port
2261  * @lport: The local port to initialize the exchange layer for
2262  */
2263 int fc_exch_init(struct fc_lport *lport)
2264 {
2265 	if (!lport->tt.seq_start_next)
2266 		lport->tt.seq_start_next = fc_seq_start_next;
2267 
2268 	if (!lport->tt.exch_seq_send)
2269 		lport->tt.exch_seq_send = fc_exch_seq_send;
2270 
2271 	if (!lport->tt.seq_send)
2272 		lport->tt.seq_send = fc_seq_send;
2273 
2274 	if (!lport->tt.seq_els_rsp_send)
2275 		lport->tt.seq_els_rsp_send = fc_seq_els_rsp_send;
2276 
2277 	if (!lport->tt.exch_done)
2278 		lport->tt.exch_done = fc_exch_done;
2279 
2280 	if (!lport->tt.exch_mgr_reset)
2281 		lport->tt.exch_mgr_reset = fc_exch_mgr_reset;
2282 
2283 	if (!lport->tt.seq_exch_abort)
2284 		lport->tt.seq_exch_abort = fc_seq_exch_abort;
2285 
2286 	return 0;
2287 }
2288 EXPORT_SYMBOL(fc_exch_init);
2289 
2290 /**
2291  * fc_setup_exch_mgr() - Setup an exchange manager
2292  */
2293 int fc_setup_exch_mgr()
2294 {
2295 	fc_em_cachep = kmem_cache_create("libfc_em", sizeof(struct fc_exch),
2296 					 0, SLAB_HWCACHE_ALIGN, NULL);
2297 	if (!fc_em_cachep)
2298 		return -ENOMEM;
2299 
2300 	/*
2301 	 * Initialize fc_cpu_mask and fc_cpu_order. The
2302 	 * fc_cpu_mask is set for nr_cpu_ids rounded up
2303 	 * to order of 2's * power and order is stored
2304 	 * in fc_cpu_order as this is later required in
2305 	 * mapping between an exch id and exch array index
2306 	 * in per cpu exch pool.
2307 	 *
2308 	 * This round up is required to align fc_cpu_mask
2309 	 * to exchange id's lower bits such that all incoming
2310 	 * frames of an exchange gets delivered to the same
2311 	 * cpu on which exchange originated by simple bitwise
2312 	 * AND operation between fc_cpu_mask and exchange id.
2313 	 */
2314 	fc_cpu_mask = 1;
2315 	fc_cpu_order = 0;
2316 	while (fc_cpu_mask < nr_cpu_ids) {
2317 		fc_cpu_mask <<= 1;
2318 		fc_cpu_order++;
2319 	}
2320 	fc_cpu_mask--;
2321 
2322 	fc_exch_workqueue = create_singlethread_workqueue("fc_exch_workqueue");
2323 	if (!fc_exch_workqueue)
2324 		return -ENOMEM;
2325 	return 0;
2326 }
2327 
2328 /**
2329  * fc_destroy_exch_mgr() - Destroy an exchange manager
2330  */
2331 void fc_destroy_exch_mgr()
2332 {
2333 	destroy_workqueue(fc_exch_workqueue);
2334 	kmem_cache_destroy(fc_em_cachep);
2335 }
2336