xref: /linux/drivers/scsi/lpfc/lpfc_sli.c (revision 148f9bb87745ed45f7a11b2cbd3bc0f017d5d257)
1 /*******************************************************************
2  * This file is part of the Emulex Linux Device Driver for         *
3  * Fibre Channel Host Bus Adapters.                                *
4  * Copyright (C) 2004-2013 Emulex.  All rights reserved.           *
5  * EMULEX and SLI are trademarks of Emulex.                        *
6  * www.emulex.com                                                  *
7  * Portions Copyright (C) 2004-2005 Christoph Hellwig              *
8  *                                                                 *
9  * This program is free software; you can redistribute it and/or   *
10  * modify it under the terms of version 2 of the GNU General       *
11  * Public License as published by the Free Software Foundation.    *
12  * This program is distributed in the hope that it will be useful. *
13  * ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND          *
14  * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,  *
15  * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE      *
16  * DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD *
17  * TO BE LEGALLY INVALID.  See the GNU General Public License for  *
18  * more details, a copy of which can be found in the file COPYING  *
19  * included with this package.                                     *
20  *******************************************************************/
21 
22 #include <linux/blkdev.h>
23 #include <linux/pci.h>
24 #include <linux/interrupt.h>
25 #include <linux/delay.h>
26 #include <linux/slab.h>
27 
28 #include <scsi/scsi.h>
29 #include <scsi/scsi_cmnd.h>
30 #include <scsi/scsi_device.h>
31 #include <scsi/scsi_host.h>
32 #include <scsi/scsi_transport_fc.h>
33 #include <scsi/fc/fc_fs.h>
34 #include <linux/aer.h>
35 
36 #include "lpfc_hw4.h"
37 #include "lpfc_hw.h"
38 #include "lpfc_sli.h"
39 #include "lpfc_sli4.h"
40 #include "lpfc_nl.h"
41 #include "lpfc_disc.h"
42 #include "lpfc_scsi.h"
43 #include "lpfc.h"
44 #include "lpfc_crtn.h"
45 #include "lpfc_logmsg.h"
46 #include "lpfc_compat.h"
47 #include "lpfc_debugfs.h"
48 #include "lpfc_vport.h"
49 
50 /* There are only four IOCB completion types. */
51 typedef enum _lpfc_iocb_type {
52 	LPFC_UNKNOWN_IOCB,
53 	LPFC_UNSOL_IOCB,
54 	LPFC_SOL_IOCB,
55 	LPFC_ABORT_IOCB
56 } lpfc_iocb_type;
57 
58 
59 /* Provide function prototypes local to this module. */
60 static int lpfc_sli_issue_mbox_s4(struct lpfc_hba *, LPFC_MBOXQ_t *,
61 				  uint32_t);
62 static int lpfc_sli4_read_rev(struct lpfc_hba *, LPFC_MBOXQ_t *,
63 			      uint8_t *, uint32_t *);
64 static struct lpfc_iocbq *lpfc_sli4_els_wcqe_to_rspiocbq(struct lpfc_hba *,
65 							 struct lpfc_iocbq *);
66 static void lpfc_sli4_send_seq_to_ulp(struct lpfc_vport *,
67 				      struct hbq_dmabuf *);
68 static int lpfc_sli4_fp_handle_wcqe(struct lpfc_hba *, struct lpfc_queue *,
69 				    struct lpfc_cqe *);
70 static int lpfc_sli4_post_els_sgl_list(struct lpfc_hba *, struct list_head *,
71 				       int);
72 static void lpfc_sli4_hba_handle_eqe(struct lpfc_hba *, struct lpfc_eqe *,
73 			uint32_t);
74 
75 static IOCB_t *
76 lpfc_get_iocb_from_iocbq(struct lpfc_iocbq *iocbq)
77 {
78 	return &iocbq->iocb;
79 }
80 
81 /**
82  * lpfc_sli4_wq_put - Put a Work Queue Entry on an Work Queue
83  * @q: The Work Queue to operate on.
84  * @wqe: The work Queue Entry to put on the Work queue.
85  *
86  * This routine will copy the contents of @wqe to the next available entry on
87  * the @q. This function will then ring the Work Queue Doorbell to signal the
88  * HBA to start processing the Work Queue Entry. This function returns 0 if
89  * successful. If no entries are available on @q then this function will return
90  * -ENOMEM.
91  * The caller is expected to hold the hbalock when calling this routine.
92  **/
93 static uint32_t
94 lpfc_sli4_wq_put(struct lpfc_queue *q, union lpfc_wqe *wqe)
95 {
96 	union lpfc_wqe *temp_wqe;
97 	struct lpfc_register doorbell;
98 	uint32_t host_index;
99 	uint32_t idx;
100 
101 	/* sanity check on queue memory */
102 	if (unlikely(!q))
103 		return -ENOMEM;
104 	temp_wqe = q->qe[q->host_index].wqe;
105 
106 	/* If the host has not yet processed the next entry then we are done */
107 	idx = ((q->host_index + 1) % q->entry_count);
108 	if (idx == q->hba_index) {
109 		q->WQ_overflow++;
110 		return -ENOMEM;
111 	}
112 	q->WQ_posted++;
113 	/* set consumption flag every once in a while */
114 	if (!((q->host_index + 1) % q->entry_repost))
115 		bf_set(wqe_wqec, &wqe->generic.wqe_com, 1);
116 	if (q->phba->sli3_options & LPFC_SLI4_PHWQ_ENABLED)
117 		bf_set(wqe_wqid, &wqe->generic.wqe_com, q->queue_id);
118 	lpfc_sli_pcimem_bcopy(wqe, temp_wqe, q->entry_size);
119 
120 	/* Update the host index before invoking device */
121 	host_index = q->host_index;
122 
123 	q->host_index = idx;
124 
125 	/* Ring Doorbell */
126 	doorbell.word0 = 0;
127 	if (q->db_format == LPFC_DB_LIST_FORMAT) {
128 		bf_set(lpfc_wq_db_list_fm_num_posted, &doorbell, 1);
129 		bf_set(lpfc_wq_db_list_fm_index, &doorbell, host_index);
130 		bf_set(lpfc_wq_db_list_fm_id, &doorbell, q->queue_id);
131 	} else if (q->db_format == LPFC_DB_RING_FORMAT) {
132 		bf_set(lpfc_wq_db_ring_fm_num_posted, &doorbell, 1);
133 		bf_set(lpfc_wq_db_ring_fm_id, &doorbell, q->queue_id);
134 	} else {
135 		return -EINVAL;
136 	}
137 	writel(doorbell.word0, q->db_regaddr);
138 
139 	return 0;
140 }
141 
142 /**
143  * lpfc_sli4_wq_release - Updates internal hba index for WQ
144  * @q: The Work Queue to operate on.
145  * @index: The index to advance the hba index to.
146  *
147  * This routine will update the HBA index of a queue to reflect consumption of
148  * Work Queue Entries by the HBA. When the HBA indicates that it has consumed
149  * an entry the host calls this function to update the queue's internal
150  * pointers. This routine returns the number of entries that were consumed by
151  * the HBA.
152  **/
153 static uint32_t
154 lpfc_sli4_wq_release(struct lpfc_queue *q, uint32_t index)
155 {
156 	uint32_t released = 0;
157 
158 	/* sanity check on queue memory */
159 	if (unlikely(!q))
160 		return 0;
161 
162 	if (q->hba_index == index)
163 		return 0;
164 	do {
165 		q->hba_index = ((q->hba_index + 1) % q->entry_count);
166 		released++;
167 	} while (q->hba_index != index);
168 	return released;
169 }
170 
171 /**
172  * lpfc_sli4_mq_put - Put a Mailbox Queue Entry on an Mailbox Queue
173  * @q: The Mailbox Queue to operate on.
174  * @wqe: The Mailbox Queue Entry to put on the Work queue.
175  *
176  * This routine will copy the contents of @mqe to the next available entry on
177  * the @q. This function will then ring the Work Queue Doorbell to signal the
178  * HBA to start processing the Work Queue Entry. This function returns 0 if
179  * successful. If no entries are available on @q then this function will return
180  * -ENOMEM.
181  * The caller is expected to hold the hbalock when calling this routine.
182  **/
183 static uint32_t
184 lpfc_sli4_mq_put(struct lpfc_queue *q, struct lpfc_mqe *mqe)
185 {
186 	struct lpfc_mqe *temp_mqe;
187 	struct lpfc_register doorbell;
188 	uint32_t host_index;
189 
190 	/* sanity check on queue memory */
191 	if (unlikely(!q))
192 		return -ENOMEM;
193 	temp_mqe = q->qe[q->host_index].mqe;
194 
195 	/* If the host has not yet processed the next entry then we are done */
196 	if (((q->host_index + 1) % q->entry_count) == q->hba_index)
197 		return -ENOMEM;
198 	lpfc_sli_pcimem_bcopy(mqe, temp_mqe, q->entry_size);
199 	/* Save off the mailbox pointer for completion */
200 	q->phba->mbox = (MAILBOX_t *)temp_mqe;
201 
202 	/* Update the host index before invoking device */
203 	host_index = q->host_index;
204 	q->host_index = ((q->host_index + 1) % q->entry_count);
205 
206 	/* Ring Doorbell */
207 	doorbell.word0 = 0;
208 	bf_set(lpfc_mq_doorbell_num_posted, &doorbell, 1);
209 	bf_set(lpfc_mq_doorbell_id, &doorbell, q->queue_id);
210 	writel(doorbell.word0, q->phba->sli4_hba.MQDBregaddr);
211 	return 0;
212 }
213 
214 /**
215  * lpfc_sli4_mq_release - Updates internal hba index for MQ
216  * @q: The Mailbox Queue to operate on.
217  *
218  * This routine will update the HBA index of a queue to reflect consumption of
219  * a Mailbox Queue Entry by the HBA. When the HBA indicates that it has consumed
220  * an entry the host calls this function to update the queue's internal
221  * pointers. This routine returns the number of entries that were consumed by
222  * the HBA.
223  **/
224 static uint32_t
225 lpfc_sli4_mq_release(struct lpfc_queue *q)
226 {
227 	/* sanity check on queue memory */
228 	if (unlikely(!q))
229 		return 0;
230 
231 	/* Clear the mailbox pointer for completion */
232 	q->phba->mbox = NULL;
233 	q->hba_index = ((q->hba_index + 1) % q->entry_count);
234 	return 1;
235 }
236 
237 /**
238  * lpfc_sli4_eq_get - Gets the next valid EQE from a EQ
239  * @q: The Event Queue to get the first valid EQE from
240  *
241  * This routine will get the first valid Event Queue Entry from @q, update
242  * the queue's internal hba index, and return the EQE. If no valid EQEs are in
243  * the Queue (no more work to do), or the Queue is full of EQEs that have been
244  * processed, but not popped back to the HBA then this routine will return NULL.
245  **/
246 static struct lpfc_eqe *
247 lpfc_sli4_eq_get(struct lpfc_queue *q)
248 {
249 	struct lpfc_eqe *eqe;
250 	uint32_t idx;
251 
252 	/* sanity check on queue memory */
253 	if (unlikely(!q))
254 		return NULL;
255 	eqe = q->qe[q->hba_index].eqe;
256 
257 	/* If the next EQE is not valid then we are done */
258 	if (!bf_get_le32(lpfc_eqe_valid, eqe))
259 		return NULL;
260 	/* If the host has not yet processed the next entry then we are done */
261 	idx = ((q->hba_index + 1) % q->entry_count);
262 	if (idx == q->host_index)
263 		return NULL;
264 
265 	q->hba_index = idx;
266 	return eqe;
267 }
268 
269 /**
270  * lpfc_sli4_eq_clr_intr - Turn off interrupts from this EQ
271  * @q: The Event Queue to disable interrupts
272  *
273  **/
274 static inline void
275 lpfc_sli4_eq_clr_intr(struct lpfc_queue *q)
276 {
277 	struct lpfc_register doorbell;
278 
279 	doorbell.word0 = 0;
280 	bf_set(lpfc_eqcq_doorbell_eqci, &doorbell, 1);
281 	bf_set(lpfc_eqcq_doorbell_qt, &doorbell, LPFC_QUEUE_TYPE_EVENT);
282 	bf_set(lpfc_eqcq_doorbell_eqid_hi, &doorbell,
283 		(q->queue_id >> LPFC_EQID_HI_FIELD_SHIFT));
284 	bf_set(lpfc_eqcq_doorbell_eqid_lo, &doorbell, q->queue_id);
285 	writel(doorbell.word0, q->phba->sli4_hba.EQCQDBregaddr);
286 }
287 
288 /**
289  * lpfc_sli4_eq_release - Indicates the host has finished processing an EQ
290  * @q: The Event Queue that the host has completed processing for.
291  * @arm: Indicates whether the host wants to arms this CQ.
292  *
293  * This routine will mark all Event Queue Entries on @q, from the last
294  * known completed entry to the last entry that was processed, as completed
295  * by clearing the valid bit for each completion queue entry. Then it will
296  * notify the HBA, by ringing the doorbell, that the EQEs have been processed.
297  * The internal host index in the @q will be updated by this routine to indicate
298  * that the host has finished processing the entries. The @arm parameter
299  * indicates that the queue should be rearmed when ringing the doorbell.
300  *
301  * This function will return the number of EQEs that were popped.
302  **/
303 uint32_t
304 lpfc_sli4_eq_release(struct lpfc_queue *q, bool arm)
305 {
306 	uint32_t released = 0;
307 	struct lpfc_eqe *temp_eqe;
308 	struct lpfc_register doorbell;
309 
310 	/* sanity check on queue memory */
311 	if (unlikely(!q))
312 		return 0;
313 
314 	/* while there are valid entries */
315 	while (q->hba_index != q->host_index) {
316 		temp_eqe = q->qe[q->host_index].eqe;
317 		bf_set_le32(lpfc_eqe_valid, temp_eqe, 0);
318 		released++;
319 		q->host_index = ((q->host_index + 1) % q->entry_count);
320 	}
321 	if (unlikely(released == 0 && !arm))
322 		return 0;
323 
324 	/* ring doorbell for number popped */
325 	doorbell.word0 = 0;
326 	if (arm) {
327 		bf_set(lpfc_eqcq_doorbell_arm, &doorbell, 1);
328 		bf_set(lpfc_eqcq_doorbell_eqci, &doorbell, 1);
329 	}
330 	bf_set(lpfc_eqcq_doorbell_num_released, &doorbell, released);
331 	bf_set(lpfc_eqcq_doorbell_qt, &doorbell, LPFC_QUEUE_TYPE_EVENT);
332 	bf_set(lpfc_eqcq_doorbell_eqid_hi, &doorbell,
333 			(q->queue_id >> LPFC_EQID_HI_FIELD_SHIFT));
334 	bf_set(lpfc_eqcq_doorbell_eqid_lo, &doorbell, q->queue_id);
335 	writel(doorbell.word0, q->phba->sli4_hba.EQCQDBregaddr);
336 	/* PCI read to flush PCI pipeline on re-arming for INTx mode */
337 	if ((q->phba->intr_type == INTx) && (arm == LPFC_QUEUE_REARM))
338 		readl(q->phba->sli4_hba.EQCQDBregaddr);
339 	return released;
340 }
341 
342 /**
343  * lpfc_sli4_cq_get - Gets the next valid CQE from a CQ
344  * @q: The Completion Queue to get the first valid CQE from
345  *
346  * This routine will get the first valid Completion Queue Entry from @q, update
347  * the queue's internal hba index, and return the CQE. If no valid CQEs are in
348  * the Queue (no more work to do), or the Queue is full of CQEs that have been
349  * processed, but not popped back to the HBA then this routine will return NULL.
350  **/
351 static struct lpfc_cqe *
352 lpfc_sli4_cq_get(struct lpfc_queue *q)
353 {
354 	struct lpfc_cqe *cqe;
355 	uint32_t idx;
356 
357 	/* sanity check on queue memory */
358 	if (unlikely(!q))
359 		return NULL;
360 
361 	/* If the next CQE is not valid then we are done */
362 	if (!bf_get_le32(lpfc_cqe_valid, q->qe[q->hba_index].cqe))
363 		return NULL;
364 	/* If the host has not yet processed the next entry then we are done */
365 	idx = ((q->hba_index + 1) % q->entry_count);
366 	if (idx == q->host_index)
367 		return NULL;
368 
369 	cqe = q->qe[q->hba_index].cqe;
370 	q->hba_index = idx;
371 	return cqe;
372 }
373 
374 /**
375  * lpfc_sli4_cq_release - Indicates the host has finished processing a CQ
376  * @q: The Completion Queue that the host has completed processing for.
377  * @arm: Indicates whether the host wants to arms this CQ.
378  *
379  * This routine will mark all Completion queue entries on @q, from the last
380  * known completed entry to the last entry that was processed, as completed
381  * by clearing the valid bit for each completion queue entry. Then it will
382  * notify the HBA, by ringing the doorbell, that the CQEs have been processed.
383  * The internal host index in the @q will be updated by this routine to indicate
384  * that the host has finished processing the entries. The @arm parameter
385  * indicates that the queue should be rearmed when ringing the doorbell.
386  *
387  * This function will return the number of CQEs that were released.
388  **/
389 uint32_t
390 lpfc_sli4_cq_release(struct lpfc_queue *q, bool arm)
391 {
392 	uint32_t released = 0;
393 	struct lpfc_cqe *temp_qe;
394 	struct lpfc_register doorbell;
395 
396 	/* sanity check on queue memory */
397 	if (unlikely(!q))
398 		return 0;
399 	/* while there are valid entries */
400 	while (q->hba_index != q->host_index) {
401 		temp_qe = q->qe[q->host_index].cqe;
402 		bf_set_le32(lpfc_cqe_valid, temp_qe, 0);
403 		released++;
404 		q->host_index = ((q->host_index + 1) % q->entry_count);
405 	}
406 	if (unlikely(released == 0 && !arm))
407 		return 0;
408 
409 	/* ring doorbell for number popped */
410 	doorbell.word0 = 0;
411 	if (arm)
412 		bf_set(lpfc_eqcq_doorbell_arm, &doorbell, 1);
413 	bf_set(lpfc_eqcq_doorbell_num_released, &doorbell, released);
414 	bf_set(lpfc_eqcq_doorbell_qt, &doorbell, LPFC_QUEUE_TYPE_COMPLETION);
415 	bf_set(lpfc_eqcq_doorbell_cqid_hi, &doorbell,
416 			(q->queue_id >> LPFC_CQID_HI_FIELD_SHIFT));
417 	bf_set(lpfc_eqcq_doorbell_cqid_lo, &doorbell, q->queue_id);
418 	writel(doorbell.word0, q->phba->sli4_hba.EQCQDBregaddr);
419 	return released;
420 }
421 
422 /**
423  * lpfc_sli4_rq_put - Put a Receive Buffer Queue Entry on a Receive Queue
424  * @q: The Header Receive Queue to operate on.
425  * @wqe: The Receive Queue Entry to put on the Receive queue.
426  *
427  * This routine will copy the contents of @wqe to the next available entry on
428  * the @q. This function will then ring the Receive Queue Doorbell to signal the
429  * HBA to start processing the Receive Queue Entry. This function returns the
430  * index that the rqe was copied to if successful. If no entries are available
431  * on @q then this function will return -ENOMEM.
432  * The caller is expected to hold the hbalock when calling this routine.
433  **/
434 static int
435 lpfc_sli4_rq_put(struct lpfc_queue *hq, struct lpfc_queue *dq,
436 		 struct lpfc_rqe *hrqe, struct lpfc_rqe *drqe)
437 {
438 	struct lpfc_rqe *temp_hrqe;
439 	struct lpfc_rqe *temp_drqe;
440 	struct lpfc_register doorbell;
441 	int put_index;
442 
443 	/* sanity check on queue memory */
444 	if (unlikely(!hq) || unlikely(!dq))
445 		return -ENOMEM;
446 	put_index = hq->host_index;
447 	temp_hrqe = hq->qe[hq->host_index].rqe;
448 	temp_drqe = dq->qe[dq->host_index].rqe;
449 
450 	if (hq->type != LPFC_HRQ || dq->type != LPFC_DRQ)
451 		return -EINVAL;
452 	if (hq->host_index != dq->host_index)
453 		return -EINVAL;
454 	/* If the host has not yet processed the next entry then we are done */
455 	if (((hq->host_index + 1) % hq->entry_count) == hq->hba_index)
456 		return -EBUSY;
457 	lpfc_sli_pcimem_bcopy(hrqe, temp_hrqe, hq->entry_size);
458 	lpfc_sli_pcimem_bcopy(drqe, temp_drqe, dq->entry_size);
459 
460 	/* Update the host index to point to the next slot */
461 	hq->host_index = ((hq->host_index + 1) % hq->entry_count);
462 	dq->host_index = ((dq->host_index + 1) % dq->entry_count);
463 
464 	/* Ring The Header Receive Queue Doorbell */
465 	if (!(hq->host_index % hq->entry_repost)) {
466 		doorbell.word0 = 0;
467 		if (hq->db_format == LPFC_DB_RING_FORMAT) {
468 			bf_set(lpfc_rq_db_ring_fm_num_posted, &doorbell,
469 			       hq->entry_repost);
470 			bf_set(lpfc_rq_db_ring_fm_id, &doorbell, hq->queue_id);
471 		} else if (hq->db_format == LPFC_DB_LIST_FORMAT) {
472 			bf_set(lpfc_rq_db_list_fm_num_posted, &doorbell,
473 			       hq->entry_repost);
474 			bf_set(lpfc_rq_db_list_fm_index, &doorbell,
475 			       hq->host_index);
476 			bf_set(lpfc_rq_db_list_fm_id, &doorbell, hq->queue_id);
477 		} else {
478 			return -EINVAL;
479 		}
480 		writel(doorbell.word0, hq->db_regaddr);
481 	}
482 	return put_index;
483 }
484 
485 /**
486  * lpfc_sli4_rq_release - Updates internal hba index for RQ
487  * @q: The Header Receive Queue to operate on.
488  *
489  * This routine will update the HBA index of a queue to reflect consumption of
490  * one Receive Queue Entry by the HBA. When the HBA indicates that it has
491  * consumed an entry the host calls this function to update the queue's
492  * internal pointers. This routine returns the number of entries that were
493  * consumed by the HBA.
494  **/
495 static uint32_t
496 lpfc_sli4_rq_release(struct lpfc_queue *hq, struct lpfc_queue *dq)
497 {
498 	/* sanity check on queue memory */
499 	if (unlikely(!hq) || unlikely(!dq))
500 		return 0;
501 
502 	if ((hq->type != LPFC_HRQ) || (dq->type != LPFC_DRQ))
503 		return 0;
504 	hq->hba_index = ((hq->hba_index + 1) % hq->entry_count);
505 	dq->hba_index = ((dq->hba_index + 1) % dq->entry_count);
506 	return 1;
507 }
508 
509 /**
510  * lpfc_cmd_iocb - Get next command iocb entry in the ring
511  * @phba: Pointer to HBA context object.
512  * @pring: Pointer to driver SLI ring object.
513  *
514  * This function returns pointer to next command iocb entry
515  * in the command ring. The caller must hold hbalock to prevent
516  * other threads consume the next command iocb.
517  * SLI-2/SLI-3 provide different sized iocbs.
518  **/
519 static inline IOCB_t *
520 lpfc_cmd_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
521 {
522 	return (IOCB_t *) (((char *) pring->sli.sli3.cmdringaddr) +
523 			   pring->sli.sli3.cmdidx * phba->iocb_cmd_size);
524 }
525 
526 /**
527  * lpfc_resp_iocb - Get next response iocb entry in the ring
528  * @phba: Pointer to HBA context object.
529  * @pring: Pointer to driver SLI ring object.
530  *
531  * This function returns pointer to next response iocb entry
532  * in the response ring. The caller must hold hbalock to make sure
533  * that no other thread consume the next response iocb.
534  * SLI-2/SLI-3 provide different sized iocbs.
535  **/
536 static inline IOCB_t *
537 lpfc_resp_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
538 {
539 	return (IOCB_t *) (((char *) pring->sli.sli3.rspringaddr) +
540 			   pring->sli.sli3.rspidx * phba->iocb_rsp_size);
541 }
542 
543 /**
544  * __lpfc_sli_get_iocbq - Allocates an iocb object from iocb pool
545  * @phba: Pointer to HBA context object.
546  *
547  * This function is called with hbalock held. This function
548  * allocates a new driver iocb object from the iocb pool. If the
549  * allocation is successful, it returns pointer to the newly
550  * allocated iocb object else it returns NULL.
551  **/
552 struct lpfc_iocbq *
553 __lpfc_sli_get_iocbq(struct lpfc_hba *phba)
554 {
555 	struct list_head *lpfc_iocb_list = &phba->lpfc_iocb_list;
556 	struct lpfc_iocbq * iocbq = NULL;
557 
558 	list_remove_head(lpfc_iocb_list, iocbq, struct lpfc_iocbq, list);
559 	if (iocbq)
560 		phba->iocb_cnt++;
561 	if (phba->iocb_cnt > phba->iocb_max)
562 		phba->iocb_max = phba->iocb_cnt;
563 	return iocbq;
564 }
565 
566 /**
567  * __lpfc_clear_active_sglq - Remove the active sglq for this XRI.
568  * @phba: Pointer to HBA context object.
569  * @xritag: XRI value.
570  *
571  * This function clears the sglq pointer from the array of acive
572  * sglq's. The xritag that is passed in is used to index into the
573  * array. Before the xritag can be used it needs to be adjusted
574  * by subtracting the xribase.
575  *
576  * Returns sglq ponter = success, NULL = Failure.
577  **/
578 static struct lpfc_sglq *
579 __lpfc_clear_active_sglq(struct lpfc_hba *phba, uint16_t xritag)
580 {
581 	struct lpfc_sglq *sglq;
582 
583 	sglq = phba->sli4_hba.lpfc_sglq_active_list[xritag];
584 	phba->sli4_hba.lpfc_sglq_active_list[xritag] = NULL;
585 	return sglq;
586 }
587 
588 /**
589  * __lpfc_get_active_sglq - Get the active sglq for this XRI.
590  * @phba: Pointer to HBA context object.
591  * @xritag: XRI value.
592  *
593  * This function returns the sglq pointer from the array of acive
594  * sglq's. The xritag that is passed in is used to index into the
595  * array. Before the xritag can be used it needs to be adjusted
596  * by subtracting the xribase.
597  *
598  * Returns sglq ponter = success, NULL = Failure.
599  **/
600 struct lpfc_sglq *
601 __lpfc_get_active_sglq(struct lpfc_hba *phba, uint16_t xritag)
602 {
603 	struct lpfc_sglq *sglq;
604 
605 	sglq =  phba->sli4_hba.lpfc_sglq_active_list[xritag];
606 	return sglq;
607 }
608 
609 /**
610  * lpfc_clr_rrq_active - Clears RRQ active bit in xri_bitmap.
611  * @phba: Pointer to HBA context object.
612  * @xritag: xri used in this exchange.
613  * @rrq: The RRQ to be cleared.
614  *
615  **/
616 void
617 lpfc_clr_rrq_active(struct lpfc_hba *phba,
618 		    uint16_t xritag,
619 		    struct lpfc_node_rrq *rrq)
620 {
621 	struct lpfc_nodelist *ndlp = NULL;
622 
623 	if ((rrq->vport) && NLP_CHK_NODE_ACT(rrq->ndlp))
624 		ndlp = lpfc_findnode_did(rrq->vport, rrq->nlp_DID);
625 
626 	/* The target DID could have been swapped (cable swap)
627 	 * we should use the ndlp from the findnode if it is
628 	 * available.
629 	 */
630 	if ((!ndlp) && rrq->ndlp)
631 		ndlp = rrq->ndlp;
632 
633 	if (!ndlp)
634 		goto out;
635 
636 	if (test_and_clear_bit(xritag, ndlp->active_rrqs.xri_bitmap)) {
637 		rrq->send_rrq = 0;
638 		rrq->xritag = 0;
639 		rrq->rrq_stop_time = 0;
640 	}
641 out:
642 	mempool_free(rrq, phba->rrq_pool);
643 }
644 
645 /**
646  * lpfc_handle_rrq_active - Checks if RRQ has waithed RATOV.
647  * @phba: Pointer to HBA context object.
648  *
649  * This function is called with hbalock held. This function
650  * Checks if stop_time (ratov from setting rrq active) has
651  * been reached, if it has and the send_rrq flag is set then
652  * it will call lpfc_send_rrq. If the send_rrq flag is not set
653  * then it will just call the routine to clear the rrq and
654  * free the rrq resource.
655  * The timer is set to the next rrq that is going to expire before
656  * leaving the routine.
657  *
658  **/
659 void
660 lpfc_handle_rrq_active(struct lpfc_hba *phba)
661 {
662 	struct lpfc_node_rrq *rrq;
663 	struct lpfc_node_rrq *nextrrq;
664 	unsigned long next_time;
665 	unsigned long iflags;
666 	LIST_HEAD(send_rrq);
667 
668 	spin_lock_irqsave(&phba->hbalock, iflags);
669 	phba->hba_flag &= ~HBA_RRQ_ACTIVE;
670 	next_time = jiffies + msecs_to_jiffies(1000 * (phba->fc_ratov + 1));
671 	list_for_each_entry_safe(rrq, nextrrq,
672 				 &phba->active_rrq_list, list) {
673 		if (time_after(jiffies, rrq->rrq_stop_time))
674 			list_move(&rrq->list, &send_rrq);
675 		else if (time_before(rrq->rrq_stop_time, next_time))
676 			next_time = rrq->rrq_stop_time;
677 	}
678 	spin_unlock_irqrestore(&phba->hbalock, iflags);
679 	if (!list_empty(&phba->active_rrq_list))
680 		mod_timer(&phba->rrq_tmr, next_time);
681 	list_for_each_entry_safe(rrq, nextrrq, &send_rrq, list) {
682 		list_del(&rrq->list);
683 		if (!rrq->send_rrq)
684 			/* this call will free the rrq */
685 		lpfc_clr_rrq_active(phba, rrq->xritag, rrq);
686 		else if (lpfc_send_rrq(phba, rrq)) {
687 			/* if we send the rrq then the completion handler
688 			*  will clear the bit in the xribitmap.
689 			*/
690 			lpfc_clr_rrq_active(phba, rrq->xritag,
691 					    rrq);
692 		}
693 	}
694 }
695 
696 /**
697  * lpfc_get_active_rrq - Get the active RRQ for this exchange.
698  * @vport: Pointer to vport context object.
699  * @xri: The xri used in the exchange.
700  * @did: The targets DID for this exchange.
701  *
702  * returns NULL = rrq not found in the phba->active_rrq_list.
703  *         rrq = rrq for this xri and target.
704  **/
705 struct lpfc_node_rrq *
706 lpfc_get_active_rrq(struct lpfc_vport *vport, uint16_t xri, uint32_t did)
707 {
708 	struct lpfc_hba *phba = vport->phba;
709 	struct lpfc_node_rrq *rrq;
710 	struct lpfc_node_rrq *nextrrq;
711 	unsigned long iflags;
712 
713 	if (phba->sli_rev != LPFC_SLI_REV4)
714 		return NULL;
715 	spin_lock_irqsave(&phba->hbalock, iflags);
716 	list_for_each_entry_safe(rrq, nextrrq, &phba->active_rrq_list, list) {
717 		if (rrq->vport == vport && rrq->xritag == xri &&
718 				rrq->nlp_DID == did){
719 			list_del(&rrq->list);
720 			spin_unlock_irqrestore(&phba->hbalock, iflags);
721 			return rrq;
722 		}
723 	}
724 	spin_unlock_irqrestore(&phba->hbalock, iflags);
725 	return NULL;
726 }
727 
728 /**
729  * lpfc_cleanup_vports_rrqs - Remove and clear the active RRQ for this vport.
730  * @vport: Pointer to vport context object.
731  * @ndlp: Pointer to the lpfc_node_list structure.
732  * If ndlp is NULL Remove all active RRQs for this vport from the
733  * phba->active_rrq_list and clear the rrq.
734  * If ndlp is not NULL then only remove rrqs for this vport & this ndlp.
735  **/
736 void
737 lpfc_cleanup_vports_rrqs(struct lpfc_vport *vport, struct lpfc_nodelist *ndlp)
738 
739 {
740 	struct lpfc_hba *phba = vport->phba;
741 	struct lpfc_node_rrq *rrq;
742 	struct lpfc_node_rrq *nextrrq;
743 	unsigned long iflags;
744 	LIST_HEAD(rrq_list);
745 
746 	if (phba->sli_rev != LPFC_SLI_REV4)
747 		return;
748 	if (!ndlp) {
749 		lpfc_sli4_vport_delete_els_xri_aborted(vport);
750 		lpfc_sli4_vport_delete_fcp_xri_aborted(vport);
751 	}
752 	spin_lock_irqsave(&phba->hbalock, iflags);
753 	list_for_each_entry_safe(rrq, nextrrq, &phba->active_rrq_list, list)
754 		if ((rrq->vport == vport) && (!ndlp  || rrq->ndlp == ndlp))
755 			list_move(&rrq->list, &rrq_list);
756 	spin_unlock_irqrestore(&phba->hbalock, iflags);
757 
758 	list_for_each_entry_safe(rrq, nextrrq, &rrq_list, list) {
759 		list_del(&rrq->list);
760 		lpfc_clr_rrq_active(phba, rrq->xritag, rrq);
761 	}
762 }
763 
764 /**
765  * lpfc_cleanup_wt_rrqs - Remove all rrq's from the active list.
766  * @phba: Pointer to HBA context object.
767  *
768  * Remove all rrqs from the phba->active_rrq_list and free them by
769  * calling __lpfc_clr_active_rrq
770  *
771  **/
772 void
773 lpfc_cleanup_wt_rrqs(struct lpfc_hba *phba)
774 {
775 	struct lpfc_node_rrq *rrq;
776 	struct lpfc_node_rrq *nextrrq;
777 	unsigned long next_time;
778 	unsigned long iflags;
779 	LIST_HEAD(rrq_list);
780 
781 	if (phba->sli_rev != LPFC_SLI_REV4)
782 		return;
783 	spin_lock_irqsave(&phba->hbalock, iflags);
784 	phba->hba_flag &= ~HBA_RRQ_ACTIVE;
785 	next_time = jiffies + msecs_to_jiffies(1000 * (phba->fc_ratov * 2));
786 	list_splice_init(&phba->active_rrq_list, &rrq_list);
787 	spin_unlock_irqrestore(&phba->hbalock, iflags);
788 
789 	list_for_each_entry_safe(rrq, nextrrq, &rrq_list, list) {
790 		list_del(&rrq->list);
791 		lpfc_clr_rrq_active(phba, rrq->xritag, rrq);
792 	}
793 	if (!list_empty(&phba->active_rrq_list))
794 		mod_timer(&phba->rrq_tmr, next_time);
795 }
796 
797 
798 /**
799  * lpfc_test_rrq_active - Test RRQ bit in xri_bitmap.
800  * @phba: Pointer to HBA context object.
801  * @ndlp: Targets nodelist pointer for this exchange.
802  * @xritag the xri in the bitmap to test.
803  *
804  * This function is called with hbalock held. This function
805  * returns 0 = rrq not active for this xri
806  *         1 = rrq is valid for this xri.
807  **/
808 int
809 lpfc_test_rrq_active(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp,
810 			uint16_t  xritag)
811 {
812 	if (!ndlp)
813 		return 0;
814 	if (test_bit(xritag, ndlp->active_rrqs.xri_bitmap))
815 			return 1;
816 	else
817 		return 0;
818 }
819 
820 /**
821  * lpfc_set_rrq_active - set RRQ active bit in xri_bitmap.
822  * @phba: Pointer to HBA context object.
823  * @ndlp: nodelist pointer for this target.
824  * @xritag: xri used in this exchange.
825  * @rxid: Remote Exchange ID.
826  * @send_rrq: Flag used to determine if we should send rrq els cmd.
827  *
828  * This function takes the hbalock.
829  * The active bit is always set in the active rrq xri_bitmap even
830  * if there is no slot avaiable for the other rrq information.
831  *
832  * returns 0 rrq actived for this xri
833  *         < 0 No memory or invalid ndlp.
834  **/
835 int
836 lpfc_set_rrq_active(struct lpfc_hba *phba, struct lpfc_nodelist *ndlp,
837 		    uint16_t xritag, uint16_t rxid, uint16_t send_rrq)
838 {
839 	unsigned long iflags;
840 	struct lpfc_node_rrq *rrq;
841 	int empty;
842 
843 	if (!ndlp)
844 		return -EINVAL;
845 
846 	if (!phba->cfg_enable_rrq)
847 		return -EINVAL;
848 
849 	spin_lock_irqsave(&phba->hbalock, iflags);
850 	if (phba->pport->load_flag & FC_UNLOADING) {
851 		phba->hba_flag &= ~HBA_RRQ_ACTIVE;
852 		goto out;
853 	}
854 
855 	/*
856 	 * set the active bit even if there is no mem available.
857 	 */
858 	if (NLP_CHK_FREE_REQ(ndlp))
859 		goto out;
860 
861 	if (ndlp->vport && (ndlp->vport->load_flag & FC_UNLOADING))
862 		goto out;
863 
864 	if (test_and_set_bit(xritag, ndlp->active_rrqs.xri_bitmap))
865 		goto out;
866 
867 	spin_unlock_irqrestore(&phba->hbalock, iflags);
868 	rrq = mempool_alloc(phba->rrq_pool, GFP_KERNEL);
869 	if (!rrq) {
870 		lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
871 				"3155 Unable to allocate RRQ xri:0x%x rxid:0x%x"
872 				" DID:0x%x Send:%d\n",
873 				xritag, rxid, ndlp->nlp_DID, send_rrq);
874 		return -EINVAL;
875 	}
876 	if (phba->cfg_enable_rrq == 1)
877 		rrq->send_rrq = send_rrq;
878 	else
879 		rrq->send_rrq = 0;
880 	rrq->xritag = xritag;
881 	rrq->rrq_stop_time = jiffies +
882 				msecs_to_jiffies(1000 * (phba->fc_ratov + 1));
883 	rrq->ndlp = ndlp;
884 	rrq->nlp_DID = ndlp->nlp_DID;
885 	rrq->vport = ndlp->vport;
886 	rrq->rxid = rxid;
887 	spin_lock_irqsave(&phba->hbalock, iflags);
888 	empty = list_empty(&phba->active_rrq_list);
889 	list_add_tail(&rrq->list, &phba->active_rrq_list);
890 	phba->hba_flag |= HBA_RRQ_ACTIVE;
891 	if (empty)
892 		lpfc_worker_wake_up(phba);
893 	spin_unlock_irqrestore(&phba->hbalock, iflags);
894 	return 0;
895 out:
896 	spin_unlock_irqrestore(&phba->hbalock, iflags);
897 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
898 			"2921 Can't set rrq active xri:0x%x rxid:0x%x"
899 			" DID:0x%x Send:%d\n",
900 			xritag, rxid, ndlp->nlp_DID, send_rrq);
901 	return -EINVAL;
902 }
903 
904 /**
905  * __lpfc_sli_get_sglq - Allocates an iocb object from sgl pool
906  * @phba: Pointer to HBA context object.
907  * @piocb: Pointer to the iocbq.
908  *
909  * This function is called with hbalock held. This function
910  * gets a new driver sglq object from the sglq list. If the
911  * list is not empty then it is successful, it returns pointer to the newly
912  * allocated sglq object else it returns NULL.
913  **/
914 static struct lpfc_sglq *
915 __lpfc_sli_get_sglq(struct lpfc_hba *phba, struct lpfc_iocbq *piocbq)
916 {
917 	struct list_head *lpfc_sgl_list = &phba->sli4_hba.lpfc_sgl_list;
918 	struct lpfc_sglq *sglq = NULL;
919 	struct lpfc_sglq *start_sglq = NULL;
920 	struct lpfc_scsi_buf *lpfc_cmd;
921 	struct lpfc_nodelist *ndlp;
922 	int found = 0;
923 
924 	if (piocbq->iocb_flag &  LPFC_IO_FCP) {
925 		lpfc_cmd = (struct lpfc_scsi_buf *) piocbq->context1;
926 		ndlp = lpfc_cmd->rdata->pnode;
927 	} else  if ((piocbq->iocb.ulpCommand == CMD_GEN_REQUEST64_CR) &&
928 			!(piocbq->iocb_flag & LPFC_IO_LIBDFC))
929 		ndlp = piocbq->context_un.ndlp;
930 	else  if (piocbq->iocb_flag & LPFC_IO_LIBDFC)
931 		ndlp = piocbq->context_un.ndlp;
932 	else
933 		ndlp = piocbq->context1;
934 
935 	list_remove_head(lpfc_sgl_list, sglq, struct lpfc_sglq, list);
936 	start_sglq = sglq;
937 	while (!found) {
938 		if (!sglq)
939 			return NULL;
940 		if (lpfc_test_rrq_active(phba, ndlp, sglq->sli4_lxritag)) {
941 			/* This xri has an rrq outstanding for this DID.
942 			 * put it back in the list and get another xri.
943 			 */
944 			list_add_tail(&sglq->list, lpfc_sgl_list);
945 			sglq = NULL;
946 			list_remove_head(lpfc_sgl_list, sglq,
947 						struct lpfc_sglq, list);
948 			if (sglq == start_sglq) {
949 				sglq = NULL;
950 				break;
951 			} else
952 				continue;
953 		}
954 		sglq->ndlp = ndlp;
955 		found = 1;
956 		phba->sli4_hba.lpfc_sglq_active_list[sglq->sli4_lxritag] = sglq;
957 		sglq->state = SGL_ALLOCATED;
958 	}
959 	return sglq;
960 }
961 
962 /**
963  * lpfc_sli_get_iocbq - Allocates an iocb object from iocb pool
964  * @phba: Pointer to HBA context object.
965  *
966  * This function is called with no lock held. This function
967  * allocates a new driver iocb object from the iocb pool. If the
968  * allocation is successful, it returns pointer to the newly
969  * allocated iocb object else it returns NULL.
970  **/
971 struct lpfc_iocbq *
972 lpfc_sli_get_iocbq(struct lpfc_hba *phba)
973 {
974 	struct lpfc_iocbq * iocbq = NULL;
975 	unsigned long iflags;
976 
977 	spin_lock_irqsave(&phba->hbalock, iflags);
978 	iocbq = __lpfc_sli_get_iocbq(phba);
979 	spin_unlock_irqrestore(&phba->hbalock, iflags);
980 	return iocbq;
981 }
982 
983 /**
984  * __lpfc_sli_release_iocbq_s4 - Release iocb to the iocb pool
985  * @phba: Pointer to HBA context object.
986  * @iocbq: Pointer to driver iocb object.
987  *
988  * This function is called with hbalock held to release driver
989  * iocb object to the iocb pool. The iotag in the iocb object
990  * does not change for each use of the iocb object. This function
991  * clears all other fields of the iocb object when it is freed.
992  * The sqlq structure that holds the xritag and phys and virtual
993  * mappings for the scatter gather list is retrieved from the
994  * active array of sglq. The get of the sglq pointer also clears
995  * the entry in the array. If the status of the IO indiactes that
996  * this IO was aborted then the sglq entry it put on the
997  * lpfc_abts_els_sgl_list until the CQ_ABORTED_XRI is received. If the
998  * IO has good status or fails for any other reason then the sglq
999  * entry is added to the free list (lpfc_sgl_list).
1000  **/
1001 static void
1002 __lpfc_sli_release_iocbq_s4(struct lpfc_hba *phba, struct lpfc_iocbq *iocbq)
1003 {
1004 	struct lpfc_sglq *sglq;
1005 	size_t start_clean = offsetof(struct lpfc_iocbq, iocb);
1006 	unsigned long iflag = 0;
1007 	struct lpfc_sli_ring *pring = &phba->sli.ring[LPFC_ELS_RING];
1008 
1009 	if (iocbq->sli4_xritag == NO_XRI)
1010 		sglq = NULL;
1011 	else
1012 		sglq = __lpfc_clear_active_sglq(phba, iocbq->sli4_lxritag);
1013 
1014 
1015 	if (sglq)  {
1016 		if ((iocbq->iocb_flag & LPFC_EXCHANGE_BUSY) &&
1017 			(sglq->state != SGL_XRI_ABORTED)) {
1018 			spin_lock_irqsave(&phba->sli4_hba.abts_sgl_list_lock,
1019 					iflag);
1020 			list_add(&sglq->list,
1021 				&phba->sli4_hba.lpfc_abts_els_sgl_list);
1022 			spin_unlock_irqrestore(
1023 				&phba->sli4_hba.abts_sgl_list_lock, iflag);
1024 		} else {
1025 			sglq->state = SGL_FREED;
1026 			sglq->ndlp = NULL;
1027 			list_add_tail(&sglq->list,
1028 				&phba->sli4_hba.lpfc_sgl_list);
1029 
1030 			/* Check if TXQ queue needs to be serviced */
1031 			if (!list_empty(&pring->txq))
1032 				lpfc_worker_wake_up(phba);
1033 		}
1034 	}
1035 
1036 
1037 	/*
1038 	 * Clean all volatile data fields, preserve iotag and node struct.
1039 	 */
1040 	memset((char *)iocbq + start_clean, 0, sizeof(*iocbq) - start_clean);
1041 	iocbq->sli4_lxritag = NO_XRI;
1042 	iocbq->sli4_xritag = NO_XRI;
1043 	list_add_tail(&iocbq->list, &phba->lpfc_iocb_list);
1044 }
1045 
1046 
1047 /**
1048  * __lpfc_sli_release_iocbq_s3 - Release iocb to the iocb pool
1049  * @phba: Pointer to HBA context object.
1050  * @iocbq: Pointer to driver iocb object.
1051  *
1052  * This function is called with hbalock held to release driver
1053  * iocb object to the iocb pool. The iotag in the iocb object
1054  * does not change for each use of the iocb object. This function
1055  * clears all other fields of the iocb object when it is freed.
1056  **/
1057 static void
1058 __lpfc_sli_release_iocbq_s3(struct lpfc_hba *phba, struct lpfc_iocbq *iocbq)
1059 {
1060 	size_t start_clean = offsetof(struct lpfc_iocbq, iocb);
1061 
1062 
1063 	/*
1064 	 * Clean all volatile data fields, preserve iotag and node struct.
1065 	 */
1066 	memset((char*)iocbq + start_clean, 0, sizeof(*iocbq) - start_clean);
1067 	iocbq->sli4_xritag = NO_XRI;
1068 	list_add_tail(&iocbq->list, &phba->lpfc_iocb_list);
1069 }
1070 
1071 /**
1072  * __lpfc_sli_release_iocbq - Release iocb to the iocb pool
1073  * @phba: Pointer to HBA context object.
1074  * @iocbq: Pointer to driver iocb object.
1075  *
1076  * This function is called with hbalock held to release driver
1077  * iocb object to the iocb pool. The iotag in the iocb object
1078  * does not change for each use of the iocb object. This function
1079  * clears all other fields of the iocb object when it is freed.
1080  **/
1081 static void
1082 __lpfc_sli_release_iocbq(struct lpfc_hba *phba, struct lpfc_iocbq *iocbq)
1083 {
1084 	phba->__lpfc_sli_release_iocbq(phba, iocbq);
1085 	phba->iocb_cnt--;
1086 }
1087 
1088 /**
1089  * lpfc_sli_release_iocbq - Release iocb to the iocb pool
1090  * @phba: Pointer to HBA context object.
1091  * @iocbq: Pointer to driver iocb object.
1092  *
1093  * This function is called with no lock held to release the iocb to
1094  * iocb pool.
1095  **/
1096 void
1097 lpfc_sli_release_iocbq(struct lpfc_hba *phba, struct lpfc_iocbq *iocbq)
1098 {
1099 	unsigned long iflags;
1100 
1101 	/*
1102 	 * Clean all volatile data fields, preserve iotag and node struct.
1103 	 */
1104 	spin_lock_irqsave(&phba->hbalock, iflags);
1105 	__lpfc_sli_release_iocbq(phba, iocbq);
1106 	spin_unlock_irqrestore(&phba->hbalock, iflags);
1107 }
1108 
1109 /**
1110  * lpfc_sli_cancel_iocbs - Cancel all iocbs from a list.
1111  * @phba: Pointer to HBA context object.
1112  * @iocblist: List of IOCBs.
1113  * @ulpstatus: ULP status in IOCB command field.
1114  * @ulpWord4: ULP word-4 in IOCB command field.
1115  *
1116  * This function is called with a list of IOCBs to cancel. It cancels the IOCB
1117  * on the list by invoking the complete callback function associated with the
1118  * IOCB with the provided @ulpstatus and @ulpword4 set to the IOCB commond
1119  * fields.
1120  **/
1121 void
1122 lpfc_sli_cancel_iocbs(struct lpfc_hba *phba, struct list_head *iocblist,
1123 		      uint32_t ulpstatus, uint32_t ulpWord4)
1124 {
1125 	struct lpfc_iocbq *piocb;
1126 
1127 	while (!list_empty(iocblist)) {
1128 		list_remove_head(iocblist, piocb, struct lpfc_iocbq, list);
1129 		if (!piocb->iocb_cmpl)
1130 			lpfc_sli_release_iocbq(phba, piocb);
1131 		else {
1132 			piocb->iocb.ulpStatus = ulpstatus;
1133 			piocb->iocb.un.ulpWord[4] = ulpWord4;
1134 			(piocb->iocb_cmpl) (phba, piocb, piocb);
1135 		}
1136 	}
1137 	return;
1138 }
1139 
1140 /**
1141  * lpfc_sli_iocb_cmd_type - Get the iocb type
1142  * @iocb_cmnd: iocb command code.
1143  *
1144  * This function is called by ring event handler function to get the iocb type.
1145  * This function translates the iocb command to an iocb command type used to
1146  * decide the final disposition of each completed IOCB.
1147  * The function returns
1148  * LPFC_UNKNOWN_IOCB if it is an unsupported iocb
1149  * LPFC_SOL_IOCB     if it is a solicited iocb completion
1150  * LPFC_ABORT_IOCB   if it is an abort iocb
1151  * LPFC_UNSOL_IOCB   if it is an unsolicited iocb
1152  *
1153  * The caller is not required to hold any lock.
1154  **/
1155 static lpfc_iocb_type
1156 lpfc_sli_iocb_cmd_type(uint8_t iocb_cmnd)
1157 {
1158 	lpfc_iocb_type type = LPFC_UNKNOWN_IOCB;
1159 
1160 	if (iocb_cmnd > CMD_MAX_IOCB_CMD)
1161 		return 0;
1162 
1163 	switch (iocb_cmnd) {
1164 	case CMD_XMIT_SEQUENCE_CR:
1165 	case CMD_XMIT_SEQUENCE_CX:
1166 	case CMD_XMIT_BCAST_CN:
1167 	case CMD_XMIT_BCAST_CX:
1168 	case CMD_ELS_REQUEST_CR:
1169 	case CMD_ELS_REQUEST_CX:
1170 	case CMD_CREATE_XRI_CR:
1171 	case CMD_CREATE_XRI_CX:
1172 	case CMD_GET_RPI_CN:
1173 	case CMD_XMIT_ELS_RSP_CX:
1174 	case CMD_GET_RPI_CR:
1175 	case CMD_FCP_IWRITE_CR:
1176 	case CMD_FCP_IWRITE_CX:
1177 	case CMD_FCP_IREAD_CR:
1178 	case CMD_FCP_IREAD_CX:
1179 	case CMD_FCP_ICMND_CR:
1180 	case CMD_FCP_ICMND_CX:
1181 	case CMD_FCP_TSEND_CX:
1182 	case CMD_FCP_TRSP_CX:
1183 	case CMD_FCP_TRECEIVE_CX:
1184 	case CMD_FCP_AUTO_TRSP_CX:
1185 	case CMD_ADAPTER_MSG:
1186 	case CMD_ADAPTER_DUMP:
1187 	case CMD_XMIT_SEQUENCE64_CR:
1188 	case CMD_XMIT_SEQUENCE64_CX:
1189 	case CMD_XMIT_BCAST64_CN:
1190 	case CMD_XMIT_BCAST64_CX:
1191 	case CMD_ELS_REQUEST64_CR:
1192 	case CMD_ELS_REQUEST64_CX:
1193 	case CMD_FCP_IWRITE64_CR:
1194 	case CMD_FCP_IWRITE64_CX:
1195 	case CMD_FCP_IREAD64_CR:
1196 	case CMD_FCP_IREAD64_CX:
1197 	case CMD_FCP_ICMND64_CR:
1198 	case CMD_FCP_ICMND64_CX:
1199 	case CMD_FCP_TSEND64_CX:
1200 	case CMD_FCP_TRSP64_CX:
1201 	case CMD_FCP_TRECEIVE64_CX:
1202 	case CMD_GEN_REQUEST64_CR:
1203 	case CMD_GEN_REQUEST64_CX:
1204 	case CMD_XMIT_ELS_RSP64_CX:
1205 	case DSSCMD_IWRITE64_CR:
1206 	case DSSCMD_IWRITE64_CX:
1207 	case DSSCMD_IREAD64_CR:
1208 	case DSSCMD_IREAD64_CX:
1209 		type = LPFC_SOL_IOCB;
1210 		break;
1211 	case CMD_ABORT_XRI_CN:
1212 	case CMD_ABORT_XRI_CX:
1213 	case CMD_CLOSE_XRI_CN:
1214 	case CMD_CLOSE_XRI_CX:
1215 	case CMD_XRI_ABORTED_CX:
1216 	case CMD_ABORT_MXRI64_CN:
1217 	case CMD_XMIT_BLS_RSP64_CX:
1218 		type = LPFC_ABORT_IOCB;
1219 		break;
1220 	case CMD_RCV_SEQUENCE_CX:
1221 	case CMD_RCV_ELS_REQ_CX:
1222 	case CMD_RCV_SEQUENCE64_CX:
1223 	case CMD_RCV_ELS_REQ64_CX:
1224 	case CMD_ASYNC_STATUS:
1225 	case CMD_IOCB_RCV_SEQ64_CX:
1226 	case CMD_IOCB_RCV_ELS64_CX:
1227 	case CMD_IOCB_RCV_CONT64_CX:
1228 	case CMD_IOCB_RET_XRI64_CX:
1229 		type = LPFC_UNSOL_IOCB;
1230 		break;
1231 	case CMD_IOCB_XMIT_MSEQ64_CR:
1232 	case CMD_IOCB_XMIT_MSEQ64_CX:
1233 	case CMD_IOCB_RCV_SEQ_LIST64_CX:
1234 	case CMD_IOCB_RCV_ELS_LIST64_CX:
1235 	case CMD_IOCB_CLOSE_EXTENDED_CN:
1236 	case CMD_IOCB_ABORT_EXTENDED_CN:
1237 	case CMD_IOCB_RET_HBQE64_CN:
1238 	case CMD_IOCB_FCP_IBIDIR64_CR:
1239 	case CMD_IOCB_FCP_IBIDIR64_CX:
1240 	case CMD_IOCB_FCP_ITASKMGT64_CX:
1241 	case CMD_IOCB_LOGENTRY_CN:
1242 	case CMD_IOCB_LOGENTRY_ASYNC_CN:
1243 		printk("%s - Unhandled SLI-3 Command x%x\n",
1244 				__func__, iocb_cmnd);
1245 		type = LPFC_UNKNOWN_IOCB;
1246 		break;
1247 	default:
1248 		type = LPFC_UNKNOWN_IOCB;
1249 		break;
1250 	}
1251 
1252 	return type;
1253 }
1254 
1255 /**
1256  * lpfc_sli_ring_map - Issue config_ring mbox for all rings
1257  * @phba: Pointer to HBA context object.
1258  *
1259  * This function is called from SLI initialization code
1260  * to configure every ring of the HBA's SLI interface. The
1261  * caller is not required to hold any lock. This function issues
1262  * a config_ring mailbox command for each ring.
1263  * This function returns zero if successful else returns a negative
1264  * error code.
1265  **/
1266 static int
1267 lpfc_sli_ring_map(struct lpfc_hba *phba)
1268 {
1269 	struct lpfc_sli *psli = &phba->sli;
1270 	LPFC_MBOXQ_t *pmb;
1271 	MAILBOX_t *pmbox;
1272 	int i, rc, ret = 0;
1273 
1274 	pmb = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1275 	if (!pmb)
1276 		return -ENOMEM;
1277 	pmbox = &pmb->u.mb;
1278 	phba->link_state = LPFC_INIT_MBX_CMDS;
1279 	for (i = 0; i < psli->num_rings; i++) {
1280 		lpfc_config_ring(phba, i, pmb);
1281 		rc = lpfc_sli_issue_mbox(phba, pmb, MBX_POLL);
1282 		if (rc != MBX_SUCCESS) {
1283 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
1284 					"0446 Adapter failed to init (%d), "
1285 					"mbxCmd x%x CFG_RING, mbxStatus x%x, "
1286 					"ring %d\n",
1287 					rc, pmbox->mbxCommand,
1288 					pmbox->mbxStatus, i);
1289 			phba->link_state = LPFC_HBA_ERROR;
1290 			ret = -ENXIO;
1291 			break;
1292 		}
1293 	}
1294 	mempool_free(pmb, phba->mbox_mem_pool);
1295 	return ret;
1296 }
1297 
1298 /**
1299  * lpfc_sli_ringtxcmpl_put - Adds new iocb to the txcmplq
1300  * @phba: Pointer to HBA context object.
1301  * @pring: Pointer to driver SLI ring object.
1302  * @piocb: Pointer to the driver iocb object.
1303  *
1304  * This function is called with hbalock held. The function adds the
1305  * new iocb to txcmplq of the given ring. This function always returns
1306  * 0. If this function is called for ELS ring, this function checks if
1307  * there is a vport associated with the ELS command. This function also
1308  * starts els_tmofunc timer if this is an ELS command.
1309  **/
1310 static int
1311 lpfc_sli_ringtxcmpl_put(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
1312 			struct lpfc_iocbq *piocb)
1313 {
1314 	list_add_tail(&piocb->list, &pring->txcmplq);
1315 	piocb->iocb_flag |= LPFC_IO_ON_TXCMPLQ;
1316 
1317 	if ((unlikely(pring->ringno == LPFC_ELS_RING)) &&
1318 	   (piocb->iocb.ulpCommand != CMD_ABORT_XRI_CN) &&
1319 	   (piocb->iocb.ulpCommand != CMD_CLOSE_XRI_CN)) {
1320 		if (!piocb->vport)
1321 			BUG();
1322 		else
1323 			mod_timer(&piocb->vport->els_tmofunc,
1324 				jiffies +
1325 				msecs_to_jiffies(1000 * (phba->fc_ratov << 1)));
1326 	}
1327 
1328 
1329 	return 0;
1330 }
1331 
1332 /**
1333  * lpfc_sli_ringtx_get - Get first element of the txq
1334  * @phba: Pointer to HBA context object.
1335  * @pring: Pointer to driver SLI ring object.
1336  *
1337  * This function is called with hbalock held to get next
1338  * iocb in txq of the given ring. If there is any iocb in
1339  * the txq, the function returns first iocb in the list after
1340  * removing the iocb from the list, else it returns NULL.
1341  **/
1342 struct lpfc_iocbq *
1343 lpfc_sli_ringtx_get(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
1344 {
1345 	struct lpfc_iocbq *cmd_iocb;
1346 
1347 	list_remove_head((&pring->txq), cmd_iocb, struct lpfc_iocbq, list);
1348 	return cmd_iocb;
1349 }
1350 
1351 /**
1352  * lpfc_sli_next_iocb_slot - Get next iocb slot in the ring
1353  * @phba: Pointer to HBA context object.
1354  * @pring: Pointer to driver SLI ring object.
1355  *
1356  * This function is called with hbalock held and the caller must post the
1357  * iocb without releasing the lock. If the caller releases the lock,
1358  * iocb slot returned by the function is not guaranteed to be available.
1359  * The function returns pointer to the next available iocb slot if there
1360  * is available slot in the ring, else it returns NULL.
1361  * If the get index of the ring is ahead of the put index, the function
1362  * will post an error attention event to the worker thread to take the
1363  * HBA to offline state.
1364  **/
1365 static IOCB_t *
1366 lpfc_sli_next_iocb_slot (struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
1367 {
1368 	struct lpfc_pgp *pgp = &phba->port_gp[pring->ringno];
1369 	uint32_t  max_cmd_idx = pring->sli.sli3.numCiocb;
1370 	if ((pring->sli.sli3.next_cmdidx == pring->sli.sli3.cmdidx) &&
1371 	   (++pring->sli.sli3.next_cmdidx >= max_cmd_idx))
1372 		pring->sli.sli3.next_cmdidx = 0;
1373 
1374 	if (unlikely(pring->sli.sli3.local_getidx ==
1375 		pring->sli.sli3.next_cmdidx)) {
1376 
1377 		pring->sli.sli3.local_getidx = le32_to_cpu(pgp->cmdGetInx);
1378 
1379 		if (unlikely(pring->sli.sli3.local_getidx >= max_cmd_idx)) {
1380 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
1381 					"0315 Ring %d issue: portCmdGet %d "
1382 					"is bigger than cmd ring %d\n",
1383 					pring->ringno,
1384 					pring->sli.sli3.local_getidx,
1385 					max_cmd_idx);
1386 
1387 			phba->link_state = LPFC_HBA_ERROR;
1388 			/*
1389 			 * All error attention handlers are posted to
1390 			 * worker thread
1391 			 */
1392 			phba->work_ha |= HA_ERATT;
1393 			phba->work_hs = HS_FFER3;
1394 
1395 			lpfc_worker_wake_up(phba);
1396 
1397 			return NULL;
1398 		}
1399 
1400 		if (pring->sli.sli3.local_getidx == pring->sli.sli3.next_cmdidx)
1401 			return NULL;
1402 	}
1403 
1404 	return lpfc_cmd_iocb(phba, pring);
1405 }
1406 
1407 /**
1408  * lpfc_sli_next_iotag - Get an iotag for the iocb
1409  * @phba: Pointer to HBA context object.
1410  * @iocbq: Pointer to driver iocb object.
1411  *
1412  * This function gets an iotag for the iocb. If there is no unused iotag and
1413  * the iocbq_lookup_len < 0xffff, this function allocates a bigger iotag_lookup
1414  * array and assigns a new iotag.
1415  * The function returns the allocated iotag if successful, else returns zero.
1416  * Zero is not a valid iotag.
1417  * The caller is not required to hold any lock.
1418  **/
1419 uint16_t
1420 lpfc_sli_next_iotag(struct lpfc_hba *phba, struct lpfc_iocbq *iocbq)
1421 {
1422 	struct lpfc_iocbq **new_arr;
1423 	struct lpfc_iocbq **old_arr;
1424 	size_t new_len;
1425 	struct lpfc_sli *psli = &phba->sli;
1426 	uint16_t iotag;
1427 
1428 	spin_lock_irq(&phba->hbalock);
1429 	iotag = psli->last_iotag;
1430 	if(++iotag < psli->iocbq_lookup_len) {
1431 		psli->last_iotag = iotag;
1432 		psli->iocbq_lookup[iotag] = iocbq;
1433 		spin_unlock_irq(&phba->hbalock);
1434 		iocbq->iotag = iotag;
1435 		return iotag;
1436 	} else if (psli->iocbq_lookup_len < (0xffff
1437 					   - LPFC_IOCBQ_LOOKUP_INCREMENT)) {
1438 		new_len = psli->iocbq_lookup_len + LPFC_IOCBQ_LOOKUP_INCREMENT;
1439 		spin_unlock_irq(&phba->hbalock);
1440 		new_arr = kzalloc(new_len * sizeof (struct lpfc_iocbq *),
1441 				  GFP_KERNEL);
1442 		if (new_arr) {
1443 			spin_lock_irq(&phba->hbalock);
1444 			old_arr = psli->iocbq_lookup;
1445 			if (new_len <= psli->iocbq_lookup_len) {
1446 				/* highly unprobable case */
1447 				kfree(new_arr);
1448 				iotag = psli->last_iotag;
1449 				if(++iotag < psli->iocbq_lookup_len) {
1450 					psli->last_iotag = iotag;
1451 					psli->iocbq_lookup[iotag] = iocbq;
1452 					spin_unlock_irq(&phba->hbalock);
1453 					iocbq->iotag = iotag;
1454 					return iotag;
1455 				}
1456 				spin_unlock_irq(&phba->hbalock);
1457 				return 0;
1458 			}
1459 			if (psli->iocbq_lookup)
1460 				memcpy(new_arr, old_arr,
1461 				       ((psli->last_iotag  + 1) *
1462 					sizeof (struct lpfc_iocbq *)));
1463 			psli->iocbq_lookup = new_arr;
1464 			psli->iocbq_lookup_len = new_len;
1465 			psli->last_iotag = iotag;
1466 			psli->iocbq_lookup[iotag] = iocbq;
1467 			spin_unlock_irq(&phba->hbalock);
1468 			iocbq->iotag = iotag;
1469 			kfree(old_arr);
1470 			return iotag;
1471 		}
1472 	} else
1473 		spin_unlock_irq(&phba->hbalock);
1474 
1475 	lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
1476 			"0318 Failed to allocate IOTAG.last IOTAG is %d\n",
1477 			psli->last_iotag);
1478 
1479 	return 0;
1480 }
1481 
1482 /**
1483  * lpfc_sli_submit_iocb - Submit an iocb to the firmware
1484  * @phba: Pointer to HBA context object.
1485  * @pring: Pointer to driver SLI ring object.
1486  * @iocb: Pointer to iocb slot in the ring.
1487  * @nextiocb: Pointer to driver iocb object which need to be
1488  *            posted to firmware.
1489  *
1490  * This function is called with hbalock held to post a new iocb to
1491  * the firmware. This function copies the new iocb to ring iocb slot and
1492  * updates the ring pointers. It adds the new iocb to txcmplq if there is
1493  * a completion call back for this iocb else the function will free the
1494  * iocb object.
1495  **/
1496 static void
1497 lpfc_sli_submit_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
1498 		IOCB_t *iocb, struct lpfc_iocbq *nextiocb)
1499 {
1500 	/*
1501 	 * Set up an iotag
1502 	 */
1503 	nextiocb->iocb.ulpIoTag = (nextiocb->iocb_cmpl) ? nextiocb->iotag : 0;
1504 
1505 
1506 	if (pring->ringno == LPFC_ELS_RING) {
1507 		lpfc_debugfs_slow_ring_trc(phba,
1508 			"IOCB cmd ring:   wd4:x%08x wd6:x%08x wd7:x%08x",
1509 			*(((uint32_t *) &nextiocb->iocb) + 4),
1510 			*(((uint32_t *) &nextiocb->iocb) + 6),
1511 			*(((uint32_t *) &nextiocb->iocb) + 7));
1512 	}
1513 
1514 	/*
1515 	 * Issue iocb command to adapter
1516 	 */
1517 	lpfc_sli_pcimem_bcopy(&nextiocb->iocb, iocb, phba->iocb_cmd_size);
1518 	wmb();
1519 	pring->stats.iocb_cmd++;
1520 
1521 	/*
1522 	 * If there is no completion routine to call, we can release the
1523 	 * IOCB buffer back right now. For IOCBs, like QUE_RING_BUF,
1524 	 * that have no rsp ring completion, iocb_cmpl MUST be NULL.
1525 	 */
1526 	if (nextiocb->iocb_cmpl)
1527 		lpfc_sli_ringtxcmpl_put(phba, pring, nextiocb);
1528 	else
1529 		__lpfc_sli_release_iocbq(phba, nextiocb);
1530 
1531 	/*
1532 	 * Let the HBA know what IOCB slot will be the next one the
1533 	 * driver will put a command into.
1534 	 */
1535 	pring->sli.sli3.cmdidx = pring->sli.sli3.next_cmdidx;
1536 	writel(pring->sli.sli3.cmdidx, &phba->host_gp[pring->ringno].cmdPutInx);
1537 }
1538 
1539 /**
1540  * lpfc_sli_update_full_ring - Update the chip attention register
1541  * @phba: Pointer to HBA context object.
1542  * @pring: Pointer to driver SLI ring object.
1543  *
1544  * The caller is not required to hold any lock for calling this function.
1545  * This function updates the chip attention bits for the ring to inform firmware
1546  * that there are pending work to be done for this ring and requests an
1547  * interrupt when there is space available in the ring. This function is
1548  * called when the driver is unable to post more iocbs to the ring due
1549  * to unavailability of space in the ring.
1550  **/
1551 static void
1552 lpfc_sli_update_full_ring(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
1553 {
1554 	int ringno = pring->ringno;
1555 
1556 	pring->flag |= LPFC_CALL_RING_AVAILABLE;
1557 
1558 	wmb();
1559 
1560 	/*
1561 	 * Set ring 'ringno' to SET R0CE_REQ in Chip Att register.
1562 	 * The HBA will tell us when an IOCB entry is available.
1563 	 */
1564 	writel((CA_R0ATT|CA_R0CE_REQ) << (ringno*4), phba->CAregaddr);
1565 	readl(phba->CAregaddr); /* flush */
1566 
1567 	pring->stats.iocb_cmd_full++;
1568 }
1569 
1570 /**
1571  * lpfc_sli_update_ring - Update chip attention register
1572  * @phba: Pointer to HBA context object.
1573  * @pring: Pointer to driver SLI ring object.
1574  *
1575  * This function updates the chip attention register bit for the
1576  * given ring to inform HBA that there is more work to be done
1577  * in this ring. The caller is not required to hold any lock.
1578  **/
1579 static void
1580 lpfc_sli_update_ring(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
1581 {
1582 	int ringno = pring->ringno;
1583 
1584 	/*
1585 	 * Tell the HBA that there is work to do in this ring.
1586 	 */
1587 	if (!(phba->sli3_options & LPFC_SLI3_CRP_ENABLED)) {
1588 		wmb();
1589 		writel(CA_R0ATT << (ringno * 4), phba->CAregaddr);
1590 		readl(phba->CAregaddr); /* flush */
1591 	}
1592 }
1593 
1594 /**
1595  * lpfc_sli_resume_iocb - Process iocbs in the txq
1596  * @phba: Pointer to HBA context object.
1597  * @pring: Pointer to driver SLI ring object.
1598  *
1599  * This function is called with hbalock held to post pending iocbs
1600  * in the txq to the firmware. This function is called when driver
1601  * detects space available in the ring.
1602  **/
1603 static void
1604 lpfc_sli_resume_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
1605 {
1606 	IOCB_t *iocb;
1607 	struct lpfc_iocbq *nextiocb;
1608 
1609 	/*
1610 	 * Check to see if:
1611 	 *  (a) there is anything on the txq to send
1612 	 *  (b) link is up
1613 	 *  (c) link attention events can be processed (fcp ring only)
1614 	 *  (d) IOCB processing is not blocked by the outstanding mbox command.
1615 	 */
1616 
1617 	if (lpfc_is_link_up(phba) &&
1618 	    (!list_empty(&pring->txq)) &&
1619 	    (pring->ringno != phba->sli.fcp_ring ||
1620 	     phba->sli.sli_flag & LPFC_PROCESS_LA)) {
1621 
1622 		while ((iocb = lpfc_sli_next_iocb_slot(phba, pring)) &&
1623 		       (nextiocb = lpfc_sli_ringtx_get(phba, pring)))
1624 			lpfc_sli_submit_iocb(phba, pring, iocb, nextiocb);
1625 
1626 		if (iocb)
1627 			lpfc_sli_update_ring(phba, pring);
1628 		else
1629 			lpfc_sli_update_full_ring(phba, pring);
1630 	}
1631 
1632 	return;
1633 }
1634 
1635 /**
1636  * lpfc_sli_next_hbq_slot - Get next hbq entry for the HBQ
1637  * @phba: Pointer to HBA context object.
1638  * @hbqno: HBQ number.
1639  *
1640  * This function is called with hbalock held to get the next
1641  * available slot for the given HBQ. If there is free slot
1642  * available for the HBQ it will return pointer to the next available
1643  * HBQ entry else it will return NULL.
1644  **/
1645 static struct lpfc_hbq_entry *
1646 lpfc_sli_next_hbq_slot(struct lpfc_hba *phba, uint32_t hbqno)
1647 {
1648 	struct hbq_s *hbqp = &phba->hbqs[hbqno];
1649 
1650 	if (hbqp->next_hbqPutIdx == hbqp->hbqPutIdx &&
1651 	    ++hbqp->next_hbqPutIdx >= hbqp->entry_count)
1652 		hbqp->next_hbqPutIdx = 0;
1653 
1654 	if (unlikely(hbqp->local_hbqGetIdx == hbqp->next_hbqPutIdx)) {
1655 		uint32_t raw_index = phba->hbq_get[hbqno];
1656 		uint32_t getidx = le32_to_cpu(raw_index);
1657 
1658 		hbqp->local_hbqGetIdx = getidx;
1659 
1660 		if (unlikely(hbqp->local_hbqGetIdx >= hbqp->entry_count)) {
1661 			lpfc_printf_log(phba, KERN_ERR,
1662 					LOG_SLI | LOG_VPORT,
1663 					"1802 HBQ %d: local_hbqGetIdx "
1664 					"%u is > than hbqp->entry_count %u\n",
1665 					hbqno, hbqp->local_hbqGetIdx,
1666 					hbqp->entry_count);
1667 
1668 			phba->link_state = LPFC_HBA_ERROR;
1669 			return NULL;
1670 		}
1671 
1672 		if (hbqp->local_hbqGetIdx == hbqp->next_hbqPutIdx)
1673 			return NULL;
1674 	}
1675 
1676 	return (struct lpfc_hbq_entry *) phba->hbqs[hbqno].hbq_virt +
1677 			hbqp->hbqPutIdx;
1678 }
1679 
1680 /**
1681  * lpfc_sli_hbqbuf_free_all - Free all the hbq buffers
1682  * @phba: Pointer to HBA context object.
1683  *
1684  * This function is called with no lock held to free all the
1685  * hbq buffers while uninitializing the SLI interface. It also
1686  * frees the HBQ buffers returned by the firmware but not yet
1687  * processed by the upper layers.
1688  **/
1689 void
1690 lpfc_sli_hbqbuf_free_all(struct lpfc_hba *phba)
1691 {
1692 	struct lpfc_dmabuf *dmabuf, *next_dmabuf;
1693 	struct hbq_dmabuf *hbq_buf;
1694 	unsigned long flags;
1695 	int i, hbq_count;
1696 	uint32_t hbqno;
1697 
1698 	hbq_count = lpfc_sli_hbq_count();
1699 	/* Return all memory used by all HBQs */
1700 	spin_lock_irqsave(&phba->hbalock, flags);
1701 	for (i = 0; i < hbq_count; ++i) {
1702 		list_for_each_entry_safe(dmabuf, next_dmabuf,
1703 				&phba->hbqs[i].hbq_buffer_list, list) {
1704 			hbq_buf = container_of(dmabuf, struct hbq_dmabuf, dbuf);
1705 			list_del(&hbq_buf->dbuf.list);
1706 			(phba->hbqs[i].hbq_free_buffer)(phba, hbq_buf);
1707 		}
1708 		phba->hbqs[i].buffer_count = 0;
1709 	}
1710 	/* Return all HBQ buffer that are in-fly */
1711 	list_for_each_entry_safe(dmabuf, next_dmabuf, &phba->rb_pend_list,
1712 				 list) {
1713 		hbq_buf = container_of(dmabuf, struct hbq_dmabuf, dbuf);
1714 		list_del(&hbq_buf->dbuf.list);
1715 		if (hbq_buf->tag == -1) {
1716 			(phba->hbqs[LPFC_ELS_HBQ].hbq_free_buffer)
1717 				(phba, hbq_buf);
1718 		} else {
1719 			hbqno = hbq_buf->tag >> 16;
1720 			if (hbqno >= LPFC_MAX_HBQS)
1721 				(phba->hbqs[LPFC_ELS_HBQ].hbq_free_buffer)
1722 					(phba, hbq_buf);
1723 			else
1724 				(phba->hbqs[hbqno].hbq_free_buffer)(phba,
1725 					hbq_buf);
1726 		}
1727 	}
1728 
1729 	/* Mark the HBQs not in use */
1730 	phba->hbq_in_use = 0;
1731 	spin_unlock_irqrestore(&phba->hbalock, flags);
1732 }
1733 
1734 /**
1735  * lpfc_sli_hbq_to_firmware - Post the hbq buffer to firmware
1736  * @phba: Pointer to HBA context object.
1737  * @hbqno: HBQ number.
1738  * @hbq_buf: Pointer to HBQ buffer.
1739  *
1740  * This function is called with the hbalock held to post a
1741  * hbq buffer to the firmware. If the function finds an empty
1742  * slot in the HBQ, it will post the buffer. The function will return
1743  * pointer to the hbq entry if it successfully post the buffer
1744  * else it will return NULL.
1745  **/
1746 static int
1747 lpfc_sli_hbq_to_firmware(struct lpfc_hba *phba, uint32_t hbqno,
1748 			 struct hbq_dmabuf *hbq_buf)
1749 {
1750 	return phba->lpfc_sli_hbq_to_firmware(phba, hbqno, hbq_buf);
1751 }
1752 
1753 /**
1754  * lpfc_sli_hbq_to_firmware_s3 - Post the hbq buffer to SLI3 firmware
1755  * @phba: Pointer to HBA context object.
1756  * @hbqno: HBQ number.
1757  * @hbq_buf: Pointer to HBQ buffer.
1758  *
1759  * This function is called with the hbalock held to post a hbq buffer to the
1760  * firmware. If the function finds an empty slot in the HBQ, it will post the
1761  * buffer and place it on the hbq_buffer_list. The function will return zero if
1762  * it successfully post the buffer else it will return an error.
1763  **/
1764 static int
1765 lpfc_sli_hbq_to_firmware_s3(struct lpfc_hba *phba, uint32_t hbqno,
1766 			    struct hbq_dmabuf *hbq_buf)
1767 {
1768 	struct lpfc_hbq_entry *hbqe;
1769 	dma_addr_t physaddr = hbq_buf->dbuf.phys;
1770 
1771 	/* Get next HBQ entry slot to use */
1772 	hbqe = lpfc_sli_next_hbq_slot(phba, hbqno);
1773 	if (hbqe) {
1774 		struct hbq_s *hbqp = &phba->hbqs[hbqno];
1775 
1776 		hbqe->bde.addrHigh = le32_to_cpu(putPaddrHigh(physaddr));
1777 		hbqe->bde.addrLow  = le32_to_cpu(putPaddrLow(physaddr));
1778 		hbqe->bde.tus.f.bdeSize = hbq_buf->size;
1779 		hbqe->bde.tus.f.bdeFlags = 0;
1780 		hbqe->bde.tus.w = le32_to_cpu(hbqe->bde.tus.w);
1781 		hbqe->buffer_tag = le32_to_cpu(hbq_buf->tag);
1782 				/* Sync SLIM */
1783 		hbqp->hbqPutIdx = hbqp->next_hbqPutIdx;
1784 		writel(hbqp->hbqPutIdx, phba->hbq_put + hbqno);
1785 				/* flush */
1786 		readl(phba->hbq_put + hbqno);
1787 		list_add_tail(&hbq_buf->dbuf.list, &hbqp->hbq_buffer_list);
1788 		return 0;
1789 	} else
1790 		return -ENOMEM;
1791 }
1792 
1793 /**
1794  * lpfc_sli_hbq_to_firmware_s4 - Post the hbq buffer to SLI4 firmware
1795  * @phba: Pointer to HBA context object.
1796  * @hbqno: HBQ number.
1797  * @hbq_buf: Pointer to HBQ buffer.
1798  *
1799  * This function is called with the hbalock held to post an RQE to the SLI4
1800  * firmware. If able to post the RQE to the RQ it will queue the hbq entry to
1801  * the hbq_buffer_list and return zero, otherwise it will return an error.
1802  **/
1803 static int
1804 lpfc_sli_hbq_to_firmware_s4(struct lpfc_hba *phba, uint32_t hbqno,
1805 			    struct hbq_dmabuf *hbq_buf)
1806 {
1807 	int rc;
1808 	struct lpfc_rqe hrqe;
1809 	struct lpfc_rqe drqe;
1810 
1811 	hrqe.address_lo = putPaddrLow(hbq_buf->hbuf.phys);
1812 	hrqe.address_hi = putPaddrHigh(hbq_buf->hbuf.phys);
1813 	drqe.address_lo = putPaddrLow(hbq_buf->dbuf.phys);
1814 	drqe.address_hi = putPaddrHigh(hbq_buf->dbuf.phys);
1815 	rc = lpfc_sli4_rq_put(phba->sli4_hba.hdr_rq, phba->sli4_hba.dat_rq,
1816 			      &hrqe, &drqe);
1817 	if (rc < 0)
1818 		return rc;
1819 	hbq_buf->tag = rc;
1820 	list_add_tail(&hbq_buf->dbuf.list, &phba->hbqs[hbqno].hbq_buffer_list);
1821 	return 0;
1822 }
1823 
1824 /* HBQ for ELS and CT traffic. */
1825 static struct lpfc_hbq_init lpfc_els_hbq = {
1826 	.rn = 1,
1827 	.entry_count = 256,
1828 	.mask_count = 0,
1829 	.profile = 0,
1830 	.ring_mask = (1 << LPFC_ELS_RING),
1831 	.buffer_count = 0,
1832 	.init_count = 40,
1833 	.add_count = 40,
1834 };
1835 
1836 /* HBQ for the extra ring if needed */
1837 static struct lpfc_hbq_init lpfc_extra_hbq = {
1838 	.rn = 1,
1839 	.entry_count = 200,
1840 	.mask_count = 0,
1841 	.profile = 0,
1842 	.ring_mask = (1 << LPFC_EXTRA_RING),
1843 	.buffer_count = 0,
1844 	.init_count = 0,
1845 	.add_count = 5,
1846 };
1847 
1848 /* Array of HBQs */
1849 struct lpfc_hbq_init *lpfc_hbq_defs[] = {
1850 	&lpfc_els_hbq,
1851 	&lpfc_extra_hbq,
1852 };
1853 
1854 /**
1855  * lpfc_sli_hbqbuf_fill_hbqs - Post more hbq buffers to HBQ
1856  * @phba: Pointer to HBA context object.
1857  * @hbqno: HBQ number.
1858  * @count: Number of HBQ buffers to be posted.
1859  *
1860  * This function is called with no lock held to post more hbq buffers to the
1861  * given HBQ. The function returns the number of HBQ buffers successfully
1862  * posted.
1863  **/
1864 static int
1865 lpfc_sli_hbqbuf_fill_hbqs(struct lpfc_hba *phba, uint32_t hbqno, uint32_t count)
1866 {
1867 	uint32_t i, posted = 0;
1868 	unsigned long flags;
1869 	struct hbq_dmabuf *hbq_buffer;
1870 	LIST_HEAD(hbq_buf_list);
1871 	if (!phba->hbqs[hbqno].hbq_alloc_buffer)
1872 		return 0;
1873 
1874 	if ((phba->hbqs[hbqno].buffer_count + count) >
1875 	    lpfc_hbq_defs[hbqno]->entry_count)
1876 		count = lpfc_hbq_defs[hbqno]->entry_count -
1877 					phba->hbqs[hbqno].buffer_count;
1878 	if (!count)
1879 		return 0;
1880 	/* Allocate HBQ entries */
1881 	for (i = 0; i < count; i++) {
1882 		hbq_buffer = (phba->hbqs[hbqno].hbq_alloc_buffer)(phba);
1883 		if (!hbq_buffer)
1884 			break;
1885 		list_add_tail(&hbq_buffer->dbuf.list, &hbq_buf_list);
1886 	}
1887 	/* Check whether HBQ is still in use */
1888 	spin_lock_irqsave(&phba->hbalock, flags);
1889 	if (!phba->hbq_in_use)
1890 		goto err;
1891 	while (!list_empty(&hbq_buf_list)) {
1892 		list_remove_head(&hbq_buf_list, hbq_buffer, struct hbq_dmabuf,
1893 				 dbuf.list);
1894 		hbq_buffer->tag = (phba->hbqs[hbqno].buffer_count |
1895 				      (hbqno << 16));
1896 		if (!lpfc_sli_hbq_to_firmware(phba, hbqno, hbq_buffer)) {
1897 			phba->hbqs[hbqno].buffer_count++;
1898 			posted++;
1899 		} else
1900 			(phba->hbqs[hbqno].hbq_free_buffer)(phba, hbq_buffer);
1901 	}
1902 	spin_unlock_irqrestore(&phba->hbalock, flags);
1903 	return posted;
1904 err:
1905 	spin_unlock_irqrestore(&phba->hbalock, flags);
1906 	while (!list_empty(&hbq_buf_list)) {
1907 		list_remove_head(&hbq_buf_list, hbq_buffer, struct hbq_dmabuf,
1908 				 dbuf.list);
1909 		(phba->hbqs[hbqno].hbq_free_buffer)(phba, hbq_buffer);
1910 	}
1911 	return 0;
1912 }
1913 
1914 /**
1915  * lpfc_sli_hbqbuf_add_hbqs - Post more HBQ buffers to firmware
1916  * @phba: Pointer to HBA context object.
1917  * @qno: HBQ number.
1918  *
1919  * This function posts more buffers to the HBQ. This function
1920  * is called with no lock held. The function returns the number of HBQ entries
1921  * successfully allocated.
1922  **/
1923 int
1924 lpfc_sli_hbqbuf_add_hbqs(struct lpfc_hba *phba, uint32_t qno)
1925 {
1926 	if (phba->sli_rev == LPFC_SLI_REV4)
1927 		return 0;
1928 	else
1929 		return lpfc_sli_hbqbuf_fill_hbqs(phba, qno,
1930 					 lpfc_hbq_defs[qno]->add_count);
1931 }
1932 
1933 /**
1934  * lpfc_sli_hbqbuf_init_hbqs - Post initial buffers to the HBQ
1935  * @phba: Pointer to HBA context object.
1936  * @qno:  HBQ queue number.
1937  *
1938  * This function is called from SLI initialization code path with
1939  * no lock held to post initial HBQ buffers to firmware. The
1940  * function returns the number of HBQ entries successfully allocated.
1941  **/
1942 static int
1943 lpfc_sli_hbqbuf_init_hbqs(struct lpfc_hba *phba, uint32_t qno)
1944 {
1945 	if (phba->sli_rev == LPFC_SLI_REV4)
1946 		return lpfc_sli_hbqbuf_fill_hbqs(phba, qno,
1947 					lpfc_hbq_defs[qno]->entry_count);
1948 	else
1949 		return lpfc_sli_hbqbuf_fill_hbqs(phba, qno,
1950 					 lpfc_hbq_defs[qno]->init_count);
1951 }
1952 
1953 /**
1954  * lpfc_sli_hbqbuf_get - Remove the first hbq off of an hbq list
1955  * @phba: Pointer to HBA context object.
1956  * @hbqno: HBQ number.
1957  *
1958  * This function removes the first hbq buffer on an hbq list and returns a
1959  * pointer to that buffer. If it finds no buffers on the list it returns NULL.
1960  **/
1961 static struct hbq_dmabuf *
1962 lpfc_sli_hbqbuf_get(struct list_head *rb_list)
1963 {
1964 	struct lpfc_dmabuf *d_buf;
1965 
1966 	list_remove_head(rb_list, d_buf, struct lpfc_dmabuf, list);
1967 	if (!d_buf)
1968 		return NULL;
1969 	return container_of(d_buf, struct hbq_dmabuf, dbuf);
1970 }
1971 
1972 /**
1973  * lpfc_sli_hbqbuf_find - Find the hbq buffer associated with a tag
1974  * @phba: Pointer to HBA context object.
1975  * @tag: Tag of the hbq buffer.
1976  *
1977  * This function is called with hbalock held. This function searches
1978  * for the hbq buffer associated with the given tag in the hbq buffer
1979  * list. If it finds the hbq buffer, it returns the hbq_buffer other wise
1980  * it returns NULL.
1981  **/
1982 static struct hbq_dmabuf *
1983 lpfc_sli_hbqbuf_find(struct lpfc_hba *phba, uint32_t tag)
1984 {
1985 	struct lpfc_dmabuf *d_buf;
1986 	struct hbq_dmabuf *hbq_buf;
1987 	uint32_t hbqno;
1988 
1989 	hbqno = tag >> 16;
1990 	if (hbqno >= LPFC_MAX_HBQS)
1991 		return NULL;
1992 
1993 	spin_lock_irq(&phba->hbalock);
1994 	list_for_each_entry(d_buf, &phba->hbqs[hbqno].hbq_buffer_list, list) {
1995 		hbq_buf = container_of(d_buf, struct hbq_dmabuf, dbuf);
1996 		if (hbq_buf->tag == tag) {
1997 			spin_unlock_irq(&phba->hbalock);
1998 			return hbq_buf;
1999 		}
2000 	}
2001 	spin_unlock_irq(&phba->hbalock);
2002 	lpfc_printf_log(phba, KERN_ERR, LOG_SLI | LOG_VPORT,
2003 			"1803 Bad hbq tag. Data: x%x x%x\n",
2004 			tag, phba->hbqs[tag >> 16].buffer_count);
2005 	return NULL;
2006 }
2007 
2008 /**
2009  * lpfc_sli_free_hbq - Give back the hbq buffer to firmware
2010  * @phba: Pointer to HBA context object.
2011  * @hbq_buffer: Pointer to HBQ buffer.
2012  *
2013  * This function is called with hbalock. This function gives back
2014  * the hbq buffer to firmware. If the HBQ does not have space to
2015  * post the buffer, it will free the buffer.
2016  **/
2017 void
2018 lpfc_sli_free_hbq(struct lpfc_hba *phba, struct hbq_dmabuf *hbq_buffer)
2019 {
2020 	uint32_t hbqno;
2021 
2022 	if (hbq_buffer) {
2023 		hbqno = hbq_buffer->tag >> 16;
2024 		if (lpfc_sli_hbq_to_firmware(phba, hbqno, hbq_buffer))
2025 			(phba->hbqs[hbqno].hbq_free_buffer)(phba, hbq_buffer);
2026 	}
2027 }
2028 
2029 /**
2030  * lpfc_sli_chk_mbx_command - Check if the mailbox is a legitimate mailbox
2031  * @mbxCommand: mailbox command code.
2032  *
2033  * This function is called by the mailbox event handler function to verify
2034  * that the completed mailbox command is a legitimate mailbox command. If the
2035  * completed mailbox is not known to the function, it will return MBX_SHUTDOWN
2036  * and the mailbox event handler will take the HBA offline.
2037  **/
2038 static int
2039 lpfc_sli_chk_mbx_command(uint8_t mbxCommand)
2040 {
2041 	uint8_t ret;
2042 
2043 	switch (mbxCommand) {
2044 	case MBX_LOAD_SM:
2045 	case MBX_READ_NV:
2046 	case MBX_WRITE_NV:
2047 	case MBX_WRITE_VPARMS:
2048 	case MBX_RUN_BIU_DIAG:
2049 	case MBX_INIT_LINK:
2050 	case MBX_DOWN_LINK:
2051 	case MBX_CONFIG_LINK:
2052 	case MBX_CONFIG_RING:
2053 	case MBX_RESET_RING:
2054 	case MBX_READ_CONFIG:
2055 	case MBX_READ_RCONFIG:
2056 	case MBX_READ_SPARM:
2057 	case MBX_READ_STATUS:
2058 	case MBX_READ_RPI:
2059 	case MBX_READ_XRI:
2060 	case MBX_READ_REV:
2061 	case MBX_READ_LNK_STAT:
2062 	case MBX_REG_LOGIN:
2063 	case MBX_UNREG_LOGIN:
2064 	case MBX_CLEAR_LA:
2065 	case MBX_DUMP_MEMORY:
2066 	case MBX_DUMP_CONTEXT:
2067 	case MBX_RUN_DIAGS:
2068 	case MBX_RESTART:
2069 	case MBX_UPDATE_CFG:
2070 	case MBX_DOWN_LOAD:
2071 	case MBX_DEL_LD_ENTRY:
2072 	case MBX_RUN_PROGRAM:
2073 	case MBX_SET_MASK:
2074 	case MBX_SET_VARIABLE:
2075 	case MBX_UNREG_D_ID:
2076 	case MBX_KILL_BOARD:
2077 	case MBX_CONFIG_FARP:
2078 	case MBX_BEACON:
2079 	case MBX_LOAD_AREA:
2080 	case MBX_RUN_BIU_DIAG64:
2081 	case MBX_CONFIG_PORT:
2082 	case MBX_READ_SPARM64:
2083 	case MBX_READ_RPI64:
2084 	case MBX_REG_LOGIN64:
2085 	case MBX_READ_TOPOLOGY:
2086 	case MBX_WRITE_WWN:
2087 	case MBX_SET_DEBUG:
2088 	case MBX_LOAD_EXP_ROM:
2089 	case MBX_ASYNCEVT_ENABLE:
2090 	case MBX_REG_VPI:
2091 	case MBX_UNREG_VPI:
2092 	case MBX_HEARTBEAT:
2093 	case MBX_PORT_CAPABILITIES:
2094 	case MBX_PORT_IOV_CONTROL:
2095 	case MBX_SLI4_CONFIG:
2096 	case MBX_SLI4_REQ_FTRS:
2097 	case MBX_REG_FCFI:
2098 	case MBX_UNREG_FCFI:
2099 	case MBX_REG_VFI:
2100 	case MBX_UNREG_VFI:
2101 	case MBX_INIT_VPI:
2102 	case MBX_INIT_VFI:
2103 	case MBX_RESUME_RPI:
2104 	case MBX_READ_EVENT_LOG_STATUS:
2105 	case MBX_READ_EVENT_LOG:
2106 	case MBX_SECURITY_MGMT:
2107 	case MBX_AUTH_PORT:
2108 	case MBX_ACCESS_VDATA:
2109 		ret = mbxCommand;
2110 		break;
2111 	default:
2112 		ret = MBX_SHUTDOWN;
2113 		break;
2114 	}
2115 	return ret;
2116 }
2117 
2118 /**
2119  * lpfc_sli_wake_mbox_wait - lpfc_sli_issue_mbox_wait mbox completion handler
2120  * @phba: Pointer to HBA context object.
2121  * @pmboxq: Pointer to mailbox command.
2122  *
2123  * This is completion handler function for mailbox commands issued from
2124  * lpfc_sli_issue_mbox_wait function. This function is called by the
2125  * mailbox event handler function with no lock held. This function
2126  * will wake up thread waiting on the wait queue pointed by context1
2127  * of the mailbox.
2128  **/
2129 void
2130 lpfc_sli_wake_mbox_wait(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
2131 {
2132 	wait_queue_head_t *pdone_q;
2133 	unsigned long drvr_flag;
2134 
2135 	/*
2136 	 * If pdone_q is empty, the driver thread gave up waiting and
2137 	 * continued running.
2138 	 */
2139 	pmboxq->mbox_flag |= LPFC_MBX_WAKE;
2140 	spin_lock_irqsave(&phba->hbalock, drvr_flag);
2141 	pdone_q = (wait_queue_head_t *) pmboxq->context1;
2142 	if (pdone_q)
2143 		wake_up_interruptible(pdone_q);
2144 	spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
2145 	return;
2146 }
2147 
2148 
2149 /**
2150  * lpfc_sli_def_mbox_cmpl - Default mailbox completion handler
2151  * @phba: Pointer to HBA context object.
2152  * @pmb: Pointer to mailbox object.
2153  *
2154  * This function is the default mailbox completion handler. It
2155  * frees the memory resources associated with the completed mailbox
2156  * command. If the completed command is a REG_LOGIN mailbox command,
2157  * this function will issue a UREG_LOGIN to re-claim the RPI.
2158  **/
2159 void
2160 lpfc_sli_def_mbox_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmb)
2161 {
2162 	struct lpfc_vport  *vport = pmb->vport;
2163 	struct lpfc_dmabuf *mp;
2164 	struct lpfc_nodelist *ndlp;
2165 	struct Scsi_Host *shost;
2166 	uint16_t rpi, vpi;
2167 	int rc;
2168 
2169 	mp = (struct lpfc_dmabuf *) (pmb->context1);
2170 
2171 	if (mp) {
2172 		lpfc_mbuf_free(phba, mp->virt, mp->phys);
2173 		kfree(mp);
2174 	}
2175 
2176 	/*
2177 	 * If a REG_LOGIN succeeded  after node is destroyed or node
2178 	 * is in re-discovery driver need to cleanup the RPI.
2179 	 */
2180 	if (!(phba->pport->load_flag & FC_UNLOADING) &&
2181 	    pmb->u.mb.mbxCommand == MBX_REG_LOGIN64 &&
2182 	    !pmb->u.mb.mbxStatus) {
2183 		rpi = pmb->u.mb.un.varWords[0];
2184 		vpi = pmb->u.mb.un.varRegLogin.vpi;
2185 		lpfc_unreg_login(phba, vpi, rpi, pmb);
2186 		pmb->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
2187 		rc = lpfc_sli_issue_mbox(phba, pmb, MBX_NOWAIT);
2188 		if (rc != MBX_NOT_FINISHED)
2189 			return;
2190 	}
2191 
2192 	if ((pmb->u.mb.mbxCommand == MBX_REG_VPI) &&
2193 		!(phba->pport->load_flag & FC_UNLOADING) &&
2194 		!pmb->u.mb.mbxStatus) {
2195 		shost = lpfc_shost_from_vport(vport);
2196 		spin_lock_irq(shost->host_lock);
2197 		vport->vpi_state |= LPFC_VPI_REGISTERED;
2198 		vport->fc_flag &= ~FC_VPORT_NEEDS_REG_VPI;
2199 		spin_unlock_irq(shost->host_lock);
2200 	}
2201 
2202 	if (pmb->u.mb.mbxCommand == MBX_REG_LOGIN64) {
2203 		ndlp = (struct lpfc_nodelist *)pmb->context2;
2204 		lpfc_nlp_put(ndlp);
2205 		pmb->context2 = NULL;
2206 	}
2207 
2208 	/* Check security permission status on INIT_LINK mailbox command */
2209 	if ((pmb->u.mb.mbxCommand == MBX_INIT_LINK) &&
2210 	    (pmb->u.mb.mbxStatus == MBXERR_SEC_NO_PERMISSION))
2211 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
2212 				"2860 SLI authentication is required "
2213 				"for INIT_LINK but has not done yet\n");
2214 
2215 	if (bf_get(lpfc_mqe_command, &pmb->u.mqe) == MBX_SLI4_CONFIG)
2216 		lpfc_sli4_mbox_cmd_free(phba, pmb);
2217 	else
2218 		mempool_free(pmb, phba->mbox_mem_pool);
2219 }
2220 
2221 /**
2222  * lpfc_sli_handle_mb_event - Handle mailbox completions from firmware
2223  * @phba: Pointer to HBA context object.
2224  *
2225  * This function is called with no lock held. This function processes all
2226  * the completed mailbox commands and gives it to upper layers. The interrupt
2227  * service routine processes mailbox completion interrupt and adds completed
2228  * mailbox commands to the mboxq_cmpl queue and signals the worker thread.
2229  * Worker thread call lpfc_sli_handle_mb_event, which will return the
2230  * completed mailbox commands in mboxq_cmpl queue to the upper layers. This
2231  * function returns the mailbox commands to the upper layer by calling the
2232  * completion handler function of each mailbox.
2233  **/
2234 int
2235 lpfc_sli_handle_mb_event(struct lpfc_hba *phba)
2236 {
2237 	MAILBOX_t *pmbox;
2238 	LPFC_MBOXQ_t *pmb;
2239 	int rc;
2240 	LIST_HEAD(cmplq);
2241 
2242 	phba->sli.slistat.mbox_event++;
2243 
2244 	/* Get all completed mailboxe buffers into the cmplq */
2245 	spin_lock_irq(&phba->hbalock);
2246 	list_splice_init(&phba->sli.mboxq_cmpl, &cmplq);
2247 	spin_unlock_irq(&phba->hbalock);
2248 
2249 	/* Get a Mailbox buffer to setup mailbox commands for callback */
2250 	do {
2251 		list_remove_head(&cmplq, pmb, LPFC_MBOXQ_t, list);
2252 		if (pmb == NULL)
2253 			break;
2254 
2255 		pmbox = &pmb->u.mb;
2256 
2257 		if (pmbox->mbxCommand != MBX_HEARTBEAT) {
2258 			if (pmb->vport) {
2259 				lpfc_debugfs_disc_trc(pmb->vport,
2260 					LPFC_DISC_TRC_MBOX_VPORT,
2261 					"MBOX cmpl vport: cmd:x%x mb:x%x x%x",
2262 					(uint32_t)pmbox->mbxCommand,
2263 					pmbox->un.varWords[0],
2264 					pmbox->un.varWords[1]);
2265 			}
2266 			else {
2267 				lpfc_debugfs_disc_trc(phba->pport,
2268 					LPFC_DISC_TRC_MBOX,
2269 					"MBOX cmpl:       cmd:x%x mb:x%x x%x",
2270 					(uint32_t)pmbox->mbxCommand,
2271 					pmbox->un.varWords[0],
2272 					pmbox->un.varWords[1]);
2273 			}
2274 		}
2275 
2276 		/*
2277 		 * It is a fatal error if unknown mbox command completion.
2278 		 */
2279 		if (lpfc_sli_chk_mbx_command(pmbox->mbxCommand) ==
2280 		    MBX_SHUTDOWN) {
2281 			/* Unknown mailbox command compl */
2282 			lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
2283 					"(%d):0323 Unknown Mailbox command "
2284 					"x%x (x%x/x%x) Cmpl\n",
2285 					pmb->vport ? pmb->vport->vpi : 0,
2286 					pmbox->mbxCommand,
2287 					lpfc_sli_config_mbox_subsys_get(phba,
2288 									pmb),
2289 					lpfc_sli_config_mbox_opcode_get(phba,
2290 									pmb));
2291 			phba->link_state = LPFC_HBA_ERROR;
2292 			phba->work_hs = HS_FFER3;
2293 			lpfc_handle_eratt(phba);
2294 			continue;
2295 		}
2296 
2297 		if (pmbox->mbxStatus) {
2298 			phba->sli.slistat.mbox_stat_err++;
2299 			if (pmbox->mbxStatus == MBXERR_NO_RESOURCES) {
2300 				/* Mbox cmd cmpl error - RETRYing */
2301 				lpfc_printf_log(phba, KERN_INFO,
2302 					LOG_MBOX | LOG_SLI,
2303 					"(%d):0305 Mbox cmd cmpl "
2304 					"error - RETRYing Data: x%x "
2305 					"(x%x/x%x) x%x x%x x%x\n",
2306 					pmb->vport ? pmb->vport->vpi : 0,
2307 					pmbox->mbxCommand,
2308 					lpfc_sli_config_mbox_subsys_get(phba,
2309 									pmb),
2310 					lpfc_sli_config_mbox_opcode_get(phba,
2311 									pmb),
2312 					pmbox->mbxStatus,
2313 					pmbox->un.varWords[0],
2314 					pmb->vport->port_state);
2315 				pmbox->mbxStatus = 0;
2316 				pmbox->mbxOwner = OWN_HOST;
2317 				rc = lpfc_sli_issue_mbox(phba, pmb, MBX_NOWAIT);
2318 				if (rc != MBX_NOT_FINISHED)
2319 					continue;
2320 			}
2321 		}
2322 
2323 		/* Mailbox cmd <cmd> Cmpl <cmpl> */
2324 		lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
2325 				"(%d):0307 Mailbox cmd x%x (x%x/x%x) Cmpl x%p "
2326 				"Data: x%x x%x x%x x%x x%x x%x x%x x%x x%x "
2327 				"x%x x%x x%x\n",
2328 				pmb->vport ? pmb->vport->vpi : 0,
2329 				pmbox->mbxCommand,
2330 				lpfc_sli_config_mbox_subsys_get(phba, pmb),
2331 				lpfc_sli_config_mbox_opcode_get(phba, pmb),
2332 				pmb->mbox_cmpl,
2333 				*((uint32_t *) pmbox),
2334 				pmbox->un.varWords[0],
2335 				pmbox->un.varWords[1],
2336 				pmbox->un.varWords[2],
2337 				pmbox->un.varWords[3],
2338 				pmbox->un.varWords[4],
2339 				pmbox->un.varWords[5],
2340 				pmbox->un.varWords[6],
2341 				pmbox->un.varWords[7],
2342 				pmbox->un.varWords[8],
2343 				pmbox->un.varWords[9],
2344 				pmbox->un.varWords[10]);
2345 
2346 		if (pmb->mbox_cmpl)
2347 			pmb->mbox_cmpl(phba,pmb);
2348 	} while (1);
2349 	return 0;
2350 }
2351 
2352 /**
2353  * lpfc_sli_get_buff - Get the buffer associated with the buffer tag
2354  * @phba: Pointer to HBA context object.
2355  * @pring: Pointer to driver SLI ring object.
2356  * @tag: buffer tag.
2357  *
2358  * This function is called with no lock held. When QUE_BUFTAG_BIT bit
2359  * is set in the tag the buffer is posted for a particular exchange,
2360  * the function will return the buffer without replacing the buffer.
2361  * If the buffer is for unsolicited ELS or CT traffic, this function
2362  * returns the buffer and also posts another buffer to the firmware.
2363  **/
2364 static struct lpfc_dmabuf *
2365 lpfc_sli_get_buff(struct lpfc_hba *phba,
2366 		  struct lpfc_sli_ring *pring,
2367 		  uint32_t tag)
2368 {
2369 	struct hbq_dmabuf *hbq_entry;
2370 
2371 	if (tag & QUE_BUFTAG_BIT)
2372 		return lpfc_sli_ring_taggedbuf_get(phba, pring, tag);
2373 	hbq_entry = lpfc_sli_hbqbuf_find(phba, tag);
2374 	if (!hbq_entry)
2375 		return NULL;
2376 	return &hbq_entry->dbuf;
2377 }
2378 
2379 /**
2380  * lpfc_complete_unsol_iocb - Complete an unsolicited sequence
2381  * @phba: Pointer to HBA context object.
2382  * @pring: Pointer to driver SLI ring object.
2383  * @saveq: Pointer to the iocbq struct representing the sequence starting frame.
2384  * @fch_r_ctl: the r_ctl for the first frame of the sequence.
2385  * @fch_type: the type for the first frame of the sequence.
2386  *
2387  * This function is called with no lock held. This function uses the r_ctl and
2388  * type of the received sequence to find the correct callback function to call
2389  * to process the sequence.
2390  **/
2391 static int
2392 lpfc_complete_unsol_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
2393 			 struct lpfc_iocbq *saveq, uint32_t fch_r_ctl,
2394 			 uint32_t fch_type)
2395 {
2396 	int i;
2397 
2398 	/* unSolicited Responses */
2399 	if (pring->prt[0].profile) {
2400 		if (pring->prt[0].lpfc_sli_rcv_unsol_event)
2401 			(pring->prt[0].lpfc_sli_rcv_unsol_event) (phba, pring,
2402 									saveq);
2403 		return 1;
2404 	}
2405 	/* We must search, based on rctl / type
2406 	   for the right routine */
2407 	for (i = 0; i < pring->num_mask; i++) {
2408 		if ((pring->prt[i].rctl == fch_r_ctl) &&
2409 		    (pring->prt[i].type == fch_type)) {
2410 			if (pring->prt[i].lpfc_sli_rcv_unsol_event)
2411 				(pring->prt[i].lpfc_sli_rcv_unsol_event)
2412 						(phba, pring, saveq);
2413 			return 1;
2414 		}
2415 	}
2416 	return 0;
2417 }
2418 
2419 /**
2420  * lpfc_sli_process_unsol_iocb - Unsolicited iocb handler
2421  * @phba: Pointer to HBA context object.
2422  * @pring: Pointer to driver SLI ring object.
2423  * @saveq: Pointer to the unsolicited iocb.
2424  *
2425  * This function is called with no lock held by the ring event handler
2426  * when there is an unsolicited iocb posted to the response ring by the
2427  * firmware. This function gets the buffer associated with the iocbs
2428  * and calls the event handler for the ring. This function handles both
2429  * qring buffers and hbq buffers.
2430  * When the function returns 1 the caller can free the iocb object otherwise
2431  * upper layer functions will free the iocb objects.
2432  **/
2433 static int
2434 lpfc_sli_process_unsol_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
2435 			    struct lpfc_iocbq *saveq)
2436 {
2437 	IOCB_t           * irsp;
2438 	WORD5            * w5p;
2439 	uint32_t           Rctl, Type;
2440 	uint32_t           match;
2441 	struct lpfc_iocbq *iocbq;
2442 	struct lpfc_dmabuf *dmzbuf;
2443 
2444 	match = 0;
2445 	irsp = &(saveq->iocb);
2446 
2447 	if (irsp->ulpCommand == CMD_ASYNC_STATUS) {
2448 		if (pring->lpfc_sli_rcv_async_status)
2449 			pring->lpfc_sli_rcv_async_status(phba, pring, saveq);
2450 		else
2451 			lpfc_printf_log(phba,
2452 					KERN_WARNING,
2453 					LOG_SLI,
2454 					"0316 Ring %d handler: unexpected "
2455 					"ASYNC_STATUS iocb received evt_code "
2456 					"0x%x\n",
2457 					pring->ringno,
2458 					irsp->un.asyncstat.evt_code);
2459 		return 1;
2460 	}
2461 
2462 	if ((irsp->ulpCommand == CMD_IOCB_RET_XRI64_CX) &&
2463 		(phba->sli3_options & LPFC_SLI3_HBQ_ENABLED)) {
2464 		if (irsp->ulpBdeCount > 0) {
2465 			dmzbuf = lpfc_sli_get_buff(phba, pring,
2466 					irsp->un.ulpWord[3]);
2467 			lpfc_in_buf_free(phba, dmzbuf);
2468 		}
2469 
2470 		if (irsp->ulpBdeCount > 1) {
2471 			dmzbuf = lpfc_sli_get_buff(phba, pring,
2472 					irsp->unsli3.sli3Words[3]);
2473 			lpfc_in_buf_free(phba, dmzbuf);
2474 		}
2475 
2476 		if (irsp->ulpBdeCount > 2) {
2477 			dmzbuf = lpfc_sli_get_buff(phba, pring,
2478 				irsp->unsli3.sli3Words[7]);
2479 			lpfc_in_buf_free(phba, dmzbuf);
2480 		}
2481 
2482 		return 1;
2483 	}
2484 
2485 	if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
2486 		if (irsp->ulpBdeCount != 0) {
2487 			saveq->context2 = lpfc_sli_get_buff(phba, pring,
2488 						irsp->un.ulpWord[3]);
2489 			if (!saveq->context2)
2490 				lpfc_printf_log(phba,
2491 					KERN_ERR,
2492 					LOG_SLI,
2493 					"0341 Ring %d Cannot find buffer for "
2494 					"an unsolicited iocb. tag 0x%x\n",
2495 					pring->ringno,
2496 					irsp->un.ulpWord[3]);
2497 		}
2498 		if (irsp->ulpBdeCount == 2) {
2499 			saveq->context3 = lpfc_sli_get_buff(phba, pring,
2500 						irsp->unsli3.sli3Words[7]);
2501 			if (!saveq->context3)
2502 				lpfc_printf_log(phba,
2503 					KERN_ERR,
2504 					LOG_SLI,
2505 					"0342 Ring %d Cannot find buffer for an"
2506 					" unsolicited iocb. tag 0x%x\n",
2507 					pring->ringno,
2508 					irsp->unsli3.sli3Words[7]);
2509 		}
2510 		list_for_each_entry(iocbq, &saveq->list, list) {
2511 			irsp = &(iocbq->iocb);
2512 			if (irsp->ulpBdeCount != 0) {
2513 				iocbq->context2 = lpfc_sli_get_buff(phba, pring,
2514 							irsp->un.ulpWord[3]);
2515 				if (!iocbq->context2)
2516 					lpfc_printf_log(phba,
2517 						KERN_ERR,
2518 						LOG_SLI,
2519 						"0343 Ring %d Cannot find "
2520 						"buffer for an unsolicited iocb"
2521 						". tag 0x%x\n", pring->ringno,
2522 						irsp->un.ulpWord[3]);
2523 			}
2524 			if (irsp->ulpBdeCount == 2) {
2525 				iocbq->context3 = lpfc_sli_get_buff(phba, pring,
2526 						irsp->unsli3.sli3Words[7]);
2527 				if (!iocbq->context3)
2528 					lpfc_printf_log(phba,
2529 						KERN_ERR,
2530 						LOG_SLI,
2531 						"0344 Ring %d Cannot find "
2532 						"buffer for an unsolicited "
2533 						"iocb. tag 0x%x\n",
2534 						pring->ringno,
2535 						irsp->unsli3.sli3Words[7]);
2536 			}
2537 		}
2538 	}
2539 	if (irsp->ulpBdeCount != 0 &&
2540 	    (irsp->ulpCommand == CMD_IOCB_RCV_CONT64_CX ||
2541 	     irsp->ulpStatus == IOSTAT_INTERMED_RSP)) {
2542 		int found = 0;
2543 
2544 		/* search continue save q for same XRI */
2545 		list_for_each_entry(iocbq, &pring->iocb_continue_saveq, clist) {
2546 			if (iocbq->iocb.unsli3.rcvsli3.ox_id ==
2547 				saveq->iocb.unsli3.rcvsli3.ox_id) {
2548 				list_add_tail(&saveq->list, &iocbq->list);
2549 				found = 1;
2550 				break;
2551 			}
2552 		}
2553 		if (!found)
2554 			list_add_tail(&saveq->clist,
2555 				      &pring->iocb_continue_saveq);
2556 		if (saveq->iocb.ulpStatus != IOSTAT_INTERMED_RSP) {
2557 			list_del_init(&iocbq->clist);
2558 			saveq = iocbq;
2559 			irsp = &(saveq->iocb);
2560 		} else
2561 			return 0;
2562 	}
2563 	if ((irsp->ulpCommand == CMD_RCV_ELS_REQ64_CX) ||
2564 	    (irsp->ulpCommand == CMD_RCV_ELS_REQ_CX) ||
2565 	    (irsp->ulpCommand == CMD_IOCB_RCV_ELS64_CX)) {
2566 		Rctl = FC_RCTL_ELS_REQ;
2567 		Type = FC_TYPE_ELS;
2568 	} else {
2569 		w5p = (WORD5 *)&(saveq->iocb.un.ulpWord[5]);
2570 		Rctl = w5p->hcsw.Rctl;
2571 		Type = w5p->hcsw.Type;
2572 
2573 		/* Firmware Workaround */
2574 		if ((Rctl == 0) && (pring->ringno == LPFC_ELS_RING) &&
2575 			(irsp->ulpCommand == CMD_RCV_SEQUENCE64_CX ||
2576 			 irsp->ulpCommand == CMD_IOCB_RCV_SEQ64_CX)) {
2577 			Rctl = FC_RCTL_ELS_REQ;
2578 			Type = FC_TYPE_ELS;
2579 			w5p->hcsw.Rctl = Rctl;
2580 			w5p->hcsw.Type = Type;
2581 		}
2582 	}
2583 
2584 	if (!lpfc_complete_unsol_iocb(phba, pring, saveq, Rctl, Type))
2585 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
2586 				"0313 Ring %d handler: unexpected Rctl x%x "
2587 				"Type x%x received\n",
2588 				pring->ringno, Rctl, Type);
2589 
2590 	return 1;
2591 }
2592 
2593 /**
2594  * lpfc_sli_iocbq_lookup - Find command iocb for the given response iocb
2595  * @phba: Pointer to HBA context object.
2596  * @pring: Pointer to driver SLI ring object.
2597  * @prspiocb: Pointer to response iocb object.
2598  *
2599  * This function looks up the iocb_lookup table to get the command iocb
2600  * corresponding to the given response iocb using the iotag of the
2601  * response iocb. This function is called with the hbalock held.
2602  * This function returns the command iocb object if it finds the command
2603  * iocb else returns NULL.
2604  **/
2605 static struct lpfc_iocbq *
2606 lpfc_sli_iocbq_lookup(struct lpfc_hba *phba,
2607 		      struct lpfc_sli_ring *pring,
2608 		      struct lpfc_iocbq *prspiocb)
2609 {
2610 	struct lpfc_iocbq *cmd_iocb = NULL;
2611 	uint16_t iotag;
2612 
2613 	iotag = prspiocb->iocb.ulpIoTag;
2614 
2615 	if (iotag != 0 && iotag <= phba->sli.last_iotag) {
2616 		cmd_iocb = phba->sli.iocbq_lookup[iotag];
2617 		list_del_init(&cmd_iocb->list);
2618 		if (cmd_iocb->iocb_flag & LPFC_IO_ON_TXCMPLQ) {
2619 			cmd_iocb->iocb_flag &= ~LPFC_IO_ON_TXCMPLQ;
2620 		}
2621 		return cmd_iocb;
2622 	}
2623 
2624 	lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
2625 			"0317 iotag x%x is out off "
2626 			"range: max iotag x%x wd0 x%x\n",
2627 			iotag, phba->sli.last_iotag,
2628 			*(((uint32_t *) &prspiocb->iocb) + 7));
2629 	return NULL;
2630 }
2631 
2632 /**
2633  * lpfc_sli_iocbq_lookup_by_tag - Find command iocb for the iotag
2634  * @phba: Pointer to HBA context object.
2635  * @pring: Pointer to driver SLI ring object.
2636  * @iotag: IOCB tag.
2637  *
2638  * This function looks up the iocb_lookup table to get the command iocb
2639  * corresponding to the given iotag. This function is called with the
2640  * hbalock held.
2641  * This function returns the command iocb object if it finds the command
2642  * iocb else returns NULL.
2643  **/
2644 static struct lpfc_iocbq *
2645 lpfc_sli_iocbq_lookup_by_tag(struct lpfc_hba *phba,
2646 			     struct lpfc_sli_ring *pring, uint16_t iotag)
2647 {
2648 	struct lpfc_iocbq *cmd_iocb;
2649 
2650 	if (iotag != 0 && iotag <= phba->sli.last_iotag) {
2651 		cmd_iocb = phba->sli.iocbq_lookup[iotag];
2652 		if (cmd_iocb->iocb_flag & LPFC_IO_ON_TXCMPLQ) {
2653 			/* remove from txcmpl queue list */
2654 			list_del_init(&cmd_iocb->list);
2655 			cmd_iocb->iocb_flag &= ~LPFC_IO_ON_TXCMPLQ;
2656 			return cmd_iocb;
2657 		}
2658 	}
2659 	lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
2660 			"0372 iotag x%x is out off range: max iotag (x%x)\n",
2661 			iotag, phba->sli.last_iotag);
2662 	return NULL;
2663 }
2664 
2665 /**
2666  * lpfc_sli_process_sol_iocb - process solicited iocb completion
2667  * @phba: Pointer to HBA context object.
2668  * @pring: Pointer to driver SLI ring object.
2669  * @saveq: Pointer to the response iocb to be processed.
2670  *
2671  * This function is called by the ring event handler for non-fcp
2672  * rings when there is a new response iocb in the response ring.
2673  * The caller is not required to hold any locks. This function
2674  * gets the command iocb associated with the response iocb and
2675  * calls the completion handler for the command iocb. If there
2676  * is no completion handler, the function will free the resources
2677  * associated with command iocb. If the response iocb is for
2678  * an already aborted command iocb, the status of the completion
2679  * is changed to IOSTAT_LOCAL_REJECT/IOERR_SLI_ABORTED.
2680  * This function always returns 1.
2681  **/
2682 static int
2683 lpfc_sli_process_sol_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
2684 			  struct lpfc_iocbq *saveq)
2685 {
2686 	struct lpfc_iocbq *cmdiocbp;
2687 	int rc = 1;
2688 	unsigned long iflag;
2689 
2690 	/* Based on the iotag field, get the cmd IOCB from the txcmplq */
2691 	spin_lock_irqsave(&phba->hbalock, iflag);
2692 	cmdiocbp = lpfc_sli_iocbq_lookup(phba, pring, saveq);
2693 	spin_unlock_irqrestore(&phba->hbalock, iflag);
2694 
2695 	if (cmdiocbp) {
2696 		if (cmdiocbp->iocb_cmpl) {
2697 			/*
2698 			 * If an ELS command failed send an event to mgmt
2699 			 * application.
2700 			 */
2701 			if (saveq->iocb.ulpStatus &&
2702 			     (pring->ringno == LPFC_ELS_RING) &&
2703 			     (cmdiocbp->iocb.ulpCommand ==
2704 				CMD_ELS_REQUEST64_CR))
2705 				lpfc_send_els_failure_event(phba,
2706 					cmdiocbp, saveq);
2707 
2708 			/*
2709 			 * Post all ELS completions to the worker thread.
2710 			 * All other are passed to the completion callback.
2711 			 */
2712 			if (pring->ringno == LPFC_ELS_RING) {
2713 				if ((phba->sli_rev < LPFC_SLI_REV4) &&
2714 				    (cmdiocbp->iocb_flag &
2715 							LPFC_DRIVER_ABORTED)) {
2716 					spin_lock_irqsave(&phba->hbalock,
2717 							  iflag);
2718 					cmdiocbp->iocb_flag &=
2719 						~LPFC_DRIVER_ABORTED;
2720 					spin_unlock_irqrestore(&phba->hbalock,
2721 							       iflag);
2722 					saveq->iocb.ulpStatus =
2723 						IOSTAT_LOCAL_REJECT;
2724 					saveq->iocb.un.ulpWord[4] =
2725 						IOERR_SLI_ABORTED;
2726 
2727 					/* Firmware could still be in progress
2728 					 * of DMAing payload, so don't free data
2729 					 * buffer till after a hbeat.
2730 					 */
2731 					spin_lock_irqsave(&phba->hbalock,
2732 							  iflag);
2733 					saveq->iocb_flag |= LPFC_DELAY_MEM_FREE;
2734 					spin_unlock_irqrestore(&phba->hbalock,
2735 							       iflag);
2736 				}
2737 				if (phba->sli_rev == LPFC_SLI_REV4) {
2738 					if (saveq->iocb_flag &
2739 					    LPFC_EXCHANGE_BUSY) {
2740 						/* Set cmdiocb flag for the
2741 						 * exchange busy so sgl (xri)
2742 						 * will not be released until
2743 						 * the abort xri is received
2744 						 * from hba.
2745 						 */
2746 						spin_lock_irqsave(
2747 							&phba->hbalock, iflag);
2748 						cmdiocbp->iocb_flag |=
2749 							LPFC_EXCHANGE_BUSY;
2750 						spin_unlock_irqrestore(
2751 							&phba->hbalock, iflag);
2752 					}
2753 					if (cmdiocbp->iocb_flag &
2754 					    LPFC_DRIVER_ABORTED) {
2755 						/*
2756 						 * Clear LPFC_DRIVER_ABORTED
2757 						 * bit in case it was driver
2758 						 * initiated abort.
2759 						 */
2760 						spin_lock_irqsave(
2761 							&phba->hbalock, iflag);
2762 						cmdiocbp->iocb_flag &=
2763 							~LPFC_DRIVER_ABORTED;
2764 						spin_unlock_irqrestore(
2765 							&phba->hbalock, iflag);
2766 						cmdiocbp->iocb.ulpStatus =
2767 							IOSTAT_LOCAL_REJECT;
2768 						cmdiocbp->iocb.un.ulpWord[4] =
2769 							IOERR_ABORT_REQUESTED;
2770 						/*
2771 						 * For SLI4, irsiocb contains
2772 						 * NO_XRI in sli_xritag, it
2773 						 * shall not affect releasing
2774 						 * sgl (xri) process.
2775 						 */
2776 						saveq->iocb.ulpStatus =
2777 							IOSTAT_LOCAL_REJECT;
2778 						saveq->iocb.un.ulpWord[4] =
2779 							IOERR_SLI_ABORTED;
2780 						spin_lock_irqsave(
2781 							&phba->hbalock, iflag);
2782 						saveq->iocb_flag |=
2783 							LPFC_DELAY_MEM_FREE;
2784 						spin_unlock_irqrestore(
2785 							&phba->hbalock, iflag);
2786 					}
2787 				}
2788 			}
2789 			(cmdiocbp->iocb_cmpl) (phba, cmdiocbp, saveq);
2790 		} else
2791 			lpfc_sli_release_iocbq(phba, cmdiocbp);
2792 	} else {
2793 		/*
2794 		 * Unknown initiating command based on the response iotag.
2795 		 * This could be the case on the ELS ring because of
2796 		 * lpfc_els_abort().
2797 		 */
2798 		if (pring->ringno != LPFC_ELS_RING) {
2799 			/*
2800 			 * Ring <ringno> handler: unexpected completion IoTag
2801 			 * <IoTag>
2802 			 */
2803 			lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
2804 					 "0322 Ring %d handler: "
2805 					 "unexpected completion IoTag x%x "
2806 					 "Data: x%x x%x x%x x%x\n",
2807 					 pring->ringno,
2808 					 saveq->iocb.ulpIoTag,
2809 					 saveq->iocb.ulpStatus,
2810 					 saveq->iocb.un.ulpWord[4],
2811 					 saveq->iocb.ulpCommand,
2812 					 saveq->iocb.ulpContext);
2813 		}
2814 	}
2815 
2816 	return rc;
2817 }
2818 
2819 /**
2820  * lpfc_sli_rsp_pointers_error - Response ring pointer error handler
2821  * @phba: Pointer to HBA context object.
2822  * @pring: Pointer to driver SLI ring object.
2823  *
2824  * This function is called from the iocb ring event handlers when
2825  * put pointer is ahead of the get pointer for a ring. This function signal
2826  * an error attention condition to the worker thread and the worker
2827  * thread will transition the HBA to offline state.
2828  **/
2829 static void
2830 lpfc_sli_rsp_pointers_error(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
2831 {
2832 	struct lpfc_pgp *pgp = &phba->port_gp[pring->ringno];
2833 	/*
2834 	 * Ring <ringno> handler: portRspPut <portRspPut> is bigger than
2835 	 * rsp ring <portRspMax>
2836 	 */
2837 	lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
2838 			"0312 Ring %d handler: portRspPut %d "
2839 			"is bigger than rsp ring %d\n",
2840 			pring->ringno, le32_to_cpu(pgp->rspPutInx),
2841 			pring->sli.sli3.numRiocb);
2842 
2843 	phba->link_state = LPFC_HBA_ERROR;
2844 
2845 	/*
2846 	 * All error attention handlers are posted to
2847 	 * worker thread
2848 	 */
2849 	phba->work_ha |= HA_ERATT;
2850 	phba->work_hs = HS_FFER3;
2851 
2852 	lpfc_worker_wake_up(phba);
2853 
2854 	return;
2855 }
2856 
2857 /**
2858  * lpfc_poll_eratt - Error attention polling timer timeout handler
2859  * @ptr: Pointer to address of HBA context object.
2860  *
2861  * This function is invoked by the Error Attention polling timer when the
2862  * timer times out. It will check the SLI Error Attention register for
2863  * possible attention events. If so, it will post an Error Attention event
2864  * and wake up worker thread to process it. Otherwise, it will set up the
2865  * Error Attention polling timer for the next poll.
2866  **/
2867 void lpfc_poll_eratt(unsigned long ptr)
2868 {
2869 	struct lpfc_hba *phba;
2870 	uint32_t eratt = 0, rem;
2871 	uint64_t sli_intr, cnt;
2872 
2873 	phba = (struct lpfc_hba *)ptr;
2874 
2875 	/* Here we will also keep track of interrupts per sec of the hba */
2876 	sli_intr = phba->sli.slistat.sli_intr;
2877 
2878 	if (phba->sli.slistat.sli_prev_intr > sli_intr)
2879 		cnt = (((uint64_t)(-1) - phba->sli.slistat.sli_prev_intr) +
2880 			sli_intr);
2881 	else
2882 		cnt = (sli_intr - phba->sli.slistat.sli_prev_intr);
2883 
2884 	/* 64-bit integer division not supporte on 32-bit x86 - use do_div */
2885 	rem = do_div(cnt, LPFC_ERATT_POLL_INTERVAL);
2886 	phba->sli.slistat.sli_ips = cnt;
2887 
2888 	phba->sli.slistat.sli_prev_intr = sli_intr;
2889 
2890 	/* Check chip HA register for error event */
2891 	eratt = lpfc_sli_check_eratt(phba);
2892 
2893 	if (eratt)
2894 		/* Tell the worker thread there is work to do */
2895 		lpfc_worker_wake_up(phba);
2896 	else
2897 		/* Restart the timer for next eratt poll */
2898 		mod_timer(&phba->eratt_poll,
2899 			  jiffies +
2900 			  msecs_to_jiffies(1000 * LPFC_ERATT_POLL_INTERVAL));
2901 	return;
2902 }
2903 
2904 
2905 /**
2906  * lpfc_sli_handle_fast_ring_event - Handle ring events on FCP ring
2907  * @phba: Pointer to HBA context object.
2908  * @pring: Pointer to driver SLI ring object.
2909  * @mask: Host attention register mask for this ring.
2910  *
2911  * This function is called from the interrupt context when there is a ring
2912  * event for the fcp ring. The caller does not hold any lock.
2913  * The function processes each response iocb in the response ring until it
2914  * finds an iocb with LE bit set and chains all the iocbs up to the iocb with
2915  * LE bit set. The function will call the completion handler of the command iocb
2916  * if the response iocb indicates a completion for a command iocb or it is
2917  * an abort completion. The function will call lpfc_sli_process_unsol_iocb
2918  * function if this is an unsolicited iocb.
2919  * This routine presumes LPFC_FCP_RING handling and doesn't bother
2920  * to check it explicitly.
2921  */
2922 int
2923 lpfc_sli_handle_fast_ring_event(struct lpfc_hba *phba,
2924 				struct lpfc_sli_ring *pring, uint32_t mask)
2925 {
2926 	struct lpfc_pgp *pgp = &phba->port_gp[pring->ringno];
2927 	IOCB_t *irsp = NULL;
2928 	IOCB_t *entry = NULL;
2929 	struct lpfc_iocbq *cmdiocbq = NULL;
2930 	struct lpfc_iocbq rspiocbq;
2931 	uint32_t status;
2932 	uint32_t portRspPut, portRspMax;
2933 	int rc = 1;
2934 	lpfc_iocb_type type;
2935 	unsigned long iflag;
2936 	uint32_t rsp_cmpl = 0;
2937 
2938 	spin_lock_irqsave(&phba->hbalock, iflag);
2939 	pring->stats.iocb_event++;
2940 
2941 	/*
2942 	 * The next available response entry should never exceed the maximum
2943 	 * entries.  If it does, treat it as an adapter hardware error.
2944 	 */
2945 	portRspMax = pring->sli.sli3.numRiocb;
2946 	portRspPut = le32_to_cpu(pgp->rspPutInx);
2947 	if (unlikely(portRspPut >= portRspMax)) {
2948 		lpfc_sli_rsp_pointers_error(phba, pring);
2949 		spin_unlock_irqrestore(&phba->hbalock, iflag);
2950 		return 1;
2951 	}
2952 	if (phba->fcp_ring_in_use) {
2953 		spin_unlock_irqrestore(&phba->hbalock, iflag);
2954 		return 1;
2955 	} else
2956 		phba->fcp_ring_in_use = 1;
2957 
2958 	rmb();
2959 	while (pring->sli.sli3.rspidx != portRspPut) {
2960 		/*
2961 		 * Fetch an entry off the ring and copy it into a local data
2962 		 * structure.  The copy involves a byte-swap since the
2963 		 * network byte order and pci byte orders are different.
2964 		 */
2965 		entry = lpfc_resp_iocb(phba, pring);
2966 		phba->last_completion_time = jiffies;
2967 
2968 		if (++pring->sli.sli3.rspidx >= portRspMax)
2969 			pring->sli.sli3.rspidx = 0;
2970 
2971 		lpfc_sli_pcimem_bcopy((uint32_t *) entry,
2972 				      (uint32_t *) &rspiocbq.iocb,
2973 				      phba->iocb_rsp_size);
2974 		INIT_LIST_HEAD(&(rspiocbq.list));
2975 		irsp = &rspiocbq.iocb;
2976 
2977 		type = lpfc_sli_iocb_cmd_type(irsp->ulpCommand & CMD_IOCB_MASK);
2978 		pring->stats.iocb_rsp++;
2979 		rsp_cmpl++;
2980 
2981 		if (unlikely(irsp->ulpStatus)) {
2982 			/*
2983 			 * If resource errors reported from HBA, reduce
2984 			 * queuedepths of the SCSI device.
2985 			 */
2986 			if ((irsp->ulpStatus == IOSTAT_LOCAL_REJECT) &&
2987 			    ((irsp->un.ulpWord[4] & IOERR_PARAM_MASK) ==
2988 			     IOERR_NO_RESOURCES)) {
2989 				spin_unlock_irqrestore(&phba->hbalock, iflag);
2990 				phba->lpfc_rampdown_queue_depth(phba);
2991 				spin_lock_irqsave(&phba->hbalock, iflag);
2992 			}
2993 
2994 			/* Rsp ring <ringno> error: IOCB */
2995 			lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
2996 					"0336 Rsp Ring %d error: IOCB Data: "
2997 					"x%x x%x x%x x%x x%x x%x x%x x%x\n",
2998 					pring->ringno,
2999 					irsp->un.ulpWord[0],
3000 					irsp->un.ulpWord[1],
3001 					irsp->un.ulpWord[2],
3002 					irsp->un.ulpWord[3],
3003 					irsp->un.ulpWord[4],
3004 					irsp->un.ulpWord[5],
3005 					*(uint32_t *)&irsp->un1,
3006 					*((uint32_t *)&irsp->un1 + 1));
3007 		}
3008 
3009 		switch (type) {
3010 		case LPFC_ABORT_IOCB:
3011 		case LPFC_SOL_IOCB:
3012 			/*
3013 			 * Idle exchange closed via ABTS from port.  No iocb
3014 			 * resources need to be recovered.
3015 			 */
3016 			if (unlikely(irsp->ulpCommand == CMD_XRI_ABORTED_CX)) {
3017 				lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
3018 						"0333 IOCB cmd 0x%x"
3019 						" processed. Skipping"
3020 						" completion\n",
3021 						irsp->ulpCommand);
3022 				break;
3023 			}
3024 
3025 			cmdiocbq = lpfc_sli_iocbq_lookup(phba, pring,
3026 							 &rspiocbq);
3027 			if (unlikely(!cmdiocbq))
3028 				break;
3029 			if (cmdiocbq->iocb_flag & LPFC_DRIVER_ABORTED)
3030 				cmdiocbq->iocb_flag &= ~LPFC_DRIVER_ABORTED;
3031 			if (cmdiocbq->iocb_cmpl) {
3032 				spin_unlock_irqrestore(&phba->hbalock, iflag);
3033 				(cmdiocbq->iocb_cmpl)(phba, cmdiocbq,
3034 						      &rspiocbq);
3035 				spin_lock_irqsave(&phba->hbalock, iflag);
3036 			}
3037 			break;
3038 		case LPFC_UNSOL_IOCB:
3039 			spin_unlock_irqrestore(&phba->hbalock, iflag);
3040 			lpfc_sli_process_unsol_iocb(phba, pring, &rspiocbq);
3041 			spin_lock_irqsave(&phba->hbalock, iflag);
3042 			break;
3043 		default:
3044 			if (irsp->ulpCommand == CMD_ADAPTER_MSG) {
3045 				char adaptermsg[LPFC_MAX_ADPTMSG];
3046 				memset(adaptermsg, 0, LPFC_MAX_ADPTMSG);
3047 				memcpy(&adaptermsg[0], (uint8_t *) irsp,
3048 				       MAX_MSG_DATA);
3049 				dev_warn(&((phba->pcidev)->dev),
3050 					 "lpfc%d: %s\n",
3051 					 phba->brd_no, adaptermsg);
3052 			} else {
3053 				/* Unknown IOCB command */
3054 				lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
3055 						"0334 Unknown IOCB command "
3056 						"Data: x%x, x%x x%x x%x x%x\n",
3057 						type, irsp->ulpCommand,
3058 						irsp->ulpStatus,
3059 						irsp->ulpIoTag,
3060 						irsp->ulpContext);
3061 			}
3062 			break;
3063 		}
3064 
3065 		/*
3066 		 * The response IOCB has been processed.  Update the ring
3067 		 * pointer in SLIM.  If the port response put pointer has not
3068 		 * been updated, sync the pgp->rspPutInx and fetch the new port
3069 		 * response put pointer.
3070 		 */
3071 		writel(pring->sli.sli3.rspidx,
3072 			&phba->host_gp[pring->ringno].rspGetInx);
3073 
3074 		if (pring->sli.sli3.rspidx == portRspPut)
3075 			portRspPut = le32_to_cpu(pgp->rspPutInx);
3076 	}
3077 
3078 	if ((rsp_cmpl > 0) && (mask & HA_R0RE_REQ)) {
3079 		pring->stats.iocb_rsp_full++;
3080 		status = ((CA_R0ATT | CA_R0RE_RSP) << (pring->ringno * 4));
3081 		writel(status, phba->CAregaddr);
3082 		readl(phba->CAregaddr);
3083 	}
3084 	if ((mask & HA_R0CE_RSP) && (pring->flag & LPFC_CALL_RING_AVAILABLE)) {
3085 		pring->flag &= ~LPFC_CALL_RING_AVAILABLE;
3086 		pring->stats.iocb_cmd_empty++;
3087 
3088 		/* Force update of the local copy of cmdGetInx */
3089 		pring->sli.sli3.local_getidx = le32_to_cpu(pgp->cmdGetInx);
3090 		lpfc_sli_resume_iocb(phba, pring);
3091 
3092 		if ((pring->lpfc_sli_cmd_available))
3093 			(pring->lpfc_sli_cmd_available) (phba, pring);
3094 
3095 	}
3096 
3097 	phba->fcp_ring_in_use = 0;
3098 	spin_unlock_irqrestore(&phba->hbalock, iflag);
3099 	return rc;
3100 }
3101 
3102 /**
3103  * lpfc_sli_sp_handle_rspiocb - Handle slow-path response iocb
3104  * @phba: Pointer to HBA context object.
3105  * @pring: Pointer to driver SLI ring object.
3106  * @rspiocbp: Pointer to driver response IOCB object.
3107  *
3108  * This function is called from the worker thread when there is a slow-path
3109  * response IOCB to process. This function chains all the response iocbs until
3110  * seeing the iocb with the LE bit set. The function will call
3111  * lpfc_sli_process_sol_iocb function if the response iocb indicates a
3112  * completion of a command iocb. The function will call the
3113  * lpfc_sli_process_unsol_iocb function if this is an unsolicited iocb.
3114  * The function frees the resources or calls the completion handler if this
3115  * iocb is an abort completion. The function returns NULL when the response
3116  * iocb has the LE bit set and all the chained iocbs are processed, otherwise
3117  * this function shall chain the iocb on to the iocb_continueq and return the
3118  * response iocb passed in.
3119  **/
3120 static struct lpfc_iocbq *
3121 lpfc_sli_sp_handle_rspiocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
3122 			struct lpfc_iocbq *rspiocbp)
3123 {
3124 	struct lpfc_iocbq *saveq;
3125 	struct lpfc_iocbq *cmdiocbp;
3126 	struct lpfc_iocbq *next_iocb;
3127 	IOCB_t *irsp = NULL;
3128 	uint32_t free_saveq;
3129 	uint8_t iocb_cmd_type;
3130 	lpfc_iocb_type type;
3131 	unsigned long iflag;
3132 	int rc;
3133 
3134 	spin_lock_irqsave(&phba->hbalock, iflag);
3135 	/* First add the response iocb to the countinueq list */
3136 	list_add_tail(&rspiocbp->list, &(pring->iocb_continueq));
3137 	pring->iocb_continueq_cnt++;
3138 
3139 	/* Now, determine whether the list is completed for processing */
3140 	irsp = &rspiocbp->iocb;
3141 	if (irsp->ulpLe) {
3142 		/*
3143 		 * By default, the driver expects to free all resources
3144 		 * associated with this iocb completion.
3145 		 */
3146 		free_saveq = 1;
3147 		saveq = list_get_first(&pring->iocb_continueq,
3148 				       struct lpfc_iocbq, list);
3149 		irsp = &(saveq->iocb);
3150 		list_del_init(&pring->iocb_continueq);
3151 		pring->iocb_continueq_cnt = 0;
3152 
3153 		pring->stats.iocb_rsp++;
3154 
3155 		/*
3156 		 * If resource errors reported from HBA, reduce
3157 		 * queuedepths of the SCSI device.
3158 		 */
3159 		if ((irsp->ulpStatus == IOSTAT_LOCAL_REJECT) &&
3160 		    ((irsp->un.ulpWord[4] & IOERR_PARAM_MASK) ==
3161 		     IOERR_NO_RESOURCES)) {
3162 			spin_unlock_irqrestore(&phba->hbalock, iflag);
3163 			phba->lpfc_rampdown_queue_depth(phba);
3164 			spin_lock_irqsave(&phba->hbalock, iflag);
3165 		}
3166 
3167 		if (irsp->ulpStatus) {
3168 			/* Rsp ring <ringno> error: IOCB */
3169 			lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
3170 					"0328 Rsp Ring %d error: "
3171 					"IOCB Data: "
3172 					"x%x x%x x%x x%x "
3173 					"x%x x%x x%x x%x "
3174 					"x%x x%x x%x x%x "
3175 					"x%x x%x x%x x%x\n",
3176 					pring->ringno,
3177 					irsp->un.ulpWord[0],
3178 					irsp->un.ulpWord[1],
3179 					irsp->un.ulpWord[2],
3180 					irsp->un.ulpWord[3],
3181 					irsp->un.ulpWord[4],
3182 					irsp->un.ulpWord[5],
3183 					*(((uint32_t *) irsp) + 6),
3184 					*(((uint32_t *) irsp) + 7),
3185 					*(((uint32_t *) irsp) + 8),
3186 					*(((uint32_t *) irsp) + 9),
3187 					*(((uint32_t *) irsp) + 10),
3188 					*(((uint32_t *) irsp) + 11),
3189 					*(((uint32_t *) irsp) + 12),
3190 					*(((uint32_t *) irsp) + 13),
3191 					*(((uint32_t *) irsp) + 14),
3192 					*(((uint32_t *) irsp) + 15));
3193 		}
3194 
3195 		/*
3196 		 * Fetch the IOCB command type and call the correct completion
3197 		 * routine. Solicited and Unsolicited IOCBs on the ELS ring
3198 		 * get freed back to the lpfc_iocb_list by the discovery
3199 		 * kernel thread.
3200 		 */
3201 		iocb_cmd_type = irsp->ulpCommand & CMD_IOCB_MASK;
3202 		type = lpfc_sli_iocb_cmd_type(iocb_cmd_type);
3203 		switch (type) {
3204 		case LPFC_SOL_IOCB:
3205 			spin_unlock_irqrestore(&phba->hbalock, iflag);
3206 			rc = lpfc_sli_process_sol_iocb(phba, pring, saveq);
3207 			spin_lock_irqsave(&phba->hbalock, iflag);
3208 			break;
3209 
3210 		case LPFC_UNSOL_IOCB:
3211 			spin_unlock_irqrestore(&phba->hbalock, iflag);
3212 			rc = lpfc_sli_process_unsol_iocb(phba, pring, saveq);
3213 			spin_lock_irqsave(&phba->hbalock, iflag);
3214 			if (!rc)
3215 				free_saveq = 0;
3216 			break;
3217 
3218 		case LPFC_ABORT_IOCB:
3219 			cmdiocbp = NULL;
3220 			if (irsp->ulpCommand != CMD_XRI_ABORTED_CX)
3221 				cmdiocbp = lpfc_sli_iocbq_lookup(phba, pring,
3222 								 saveq);
3223 			if (cmdiocbp) {
3224 				/* Call the specified completion routine */
3225 				if (cmdiocbp->iocb_cmpl) {
3226 					spin_unlock_irqrestore(&phba->hbalock,
3227 							       iflag);
3228 					(cmdiocbp->iocb_cmpl)(phba, cmdiocbp,
3229 							      saveq);
3230 					spin_lock_irqsave(&phba->hbalock,
3231 							  iflag);
3232 				} else
3233 					__lpfc_sli_release_iocbq(phba,
3234 								 cmdiocbp);
3235 			}
3236 			break;
3237 
3238 		case LPFC_UNKNOWN_IOCB:
3239 			if (irsp->ulpCommand == CMD_ADAPTER_MSG) {
3240 				char adaptermsg[LPFC_MAX_ADPTMSG];
3241 				memset(adaptermsg, 0, LPFC_MAX_ADPTMSG);
3242 				memcpy(&adaptermsg[0], (uint8_t *)irsp,
3243 				       MAX_MSG_DATA);
3244 				dev_warn(&((phba->pcidev)->dev),
3245 					 "lpfc%d: %s\n",
3246 					 phba->brd_no, adaptermsg);
3247 			} else {
3248 				/* Unknown IOCB command */
3249 				lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
3250 						"0335 Unknown IOCB "
3251 						"command Data: x%x "
3252 						"x%x x%x x%x\n",
3253 						irsp->ulpCommand,
3254 						irsp->ulpStatus,
3255 						irsp->ulpIoTag,
3256 						irsp->ulpContext);
3257 			}
3258 			break;
3259 		}
3260 
3261 		if (free_saveq) {
3262 			list_for_each_entry_safe(rspiocbp, next_iocb,
3263 						 &saveq->list, list) {
3264 				list_del_init(&rspiocbp->list);
3265 				__lpfc_sli_release_iocbq(phba, rspiocbp);
3266 			}
3267 			__lpfc_sli_release_iocbq(phba, saveq);
3268 		}
3269 		rspiocbp = NULL;
3270 	}
3271 	spin_unlock_irqrestore(&phba->hbalock, iflag);
3272 	return rspiocbp;
3273 }
3274 
3275 /**
3276  * lpfc_sli_handle_slow_ring_event - Wrapper func for handling slow-path iocbs
3277  * @phba: Pointer to HBA context object.
3278  * @pring: Pointer to driver SLI ring object.
3279  * @mask: Host attention register mask for this ring.
3280  *
3281  * This routine wraps the actual slow_ring event process routine from the
3282  * API jump table function pointer from the lpfc_hba struct.
3283  **/
3284 void
3285 lpfc_sli_handle_slow_ring_event(struct lpfc_hba *phba,
3286 				struct lpfc_sli_ring *pring, uint32_t mask)
3287 {
3288 	phba->lpfc_sli_handle_slow_ring_event(phba, pring, mask);
3289 }
3290 
3291 /**
3292  * lpfc_sli_handle_slow_ring_event_s3 - Handle SLI3 ring event for non-FCP rings
3293  * @phba: Pointer to HBA context object.
3294  * @pring: Pointer to driver SLI ring object.
3295  * @mask: Host attention register mask for this ring.
3296  *
3297  * This function is called from the worker thread when there is a ring event
3298  * for non-fcp rings. The caller does not hold any lock. The function will
3299  * remove each response iocb in the response ring and calls the handle
3300  * response iocb routine (lpfc_sli_sp_handle_rspiocb) to process it.
3301  **/
3302 static void
3303 lpfc_sli_handle_slow_ring_event_s3(struct lpfc_hba *phba,
3304 				   struct lpfc_sli_ring *pring, uint32_t mask)
3305 {
3306 	struct lpfc_pgp *pgp;
3307 	IOCB_t *entry;
3308 	IOCB_t *irsp = NULL;
3309 	struct lpfc_iocbq *rspiocbp = NULL;
3310 	uint32_t portRspPut, portRspMax;
3311 	unsigned long iflag;
3312 	uint32_t status;
3313 
3314 	pgp = &phba->port_gp[pring->ringno];
3315 	spin_lock_irqsave(&phba->hbalock, iflag);
3316 	pring->stats.iocb_event++;
3317 
3318 	/*
3319 	 * The next available response entry should never exceed the maximum
3320 	 * entries.  If it does, treat it as an adapter hardware error.
3321 	 */
3322 	portRspMax = pring->sli.sli3.numRiocb;
3323 	portRspPut = le32_to_cpu(pgp->rspPutInx);
3324 	if (portRspPut >= portRspMax) {
3325 		/*
3326 		 * Ring <ringno> handler: portRspPut <portRspPut> is bigger than
3327 		 * rsp ring <portRspMax>
3328 		 */
3329 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
3330 				"0303 Ring %d handler: portRspPut %d "
3331 				"is bigger than rsp ring %d\n",
3332 				pring->ringno, portRspPut, portRspMax);
3333 
3334 		phba->link_state = LPFC_HBA_ERROR;
3335 		spin_unlock_irqrestore(&phba->hbalock, iflag);
3336 
3337 		phba->work_hs = HS_FFER3;
3338 		lpfc_handle_eratt(phba);
3339 
3340 		return;
3341 	}
3342 
3343 	rmb();
3344 	while (pring->sli.sli3.rspidx != portRspPut) {
3345 		/*
3346 		 * Build a completion list and call the appropriate handler.
3347 		 * The process is to get the next available response iocb, get
3348 		 * a free iocb from the list, copy the response data into the
3349 		 * free iocb, insert to the continuation list, and update the
3350 		 * next response index to slim.  This process makes response
3351 		 * iocb's in the ring available to DMA as fast as possible but
3352 		 * pays a penalty for a copy operation.  Since the iocb is
3353 		 * only 32 bytes, this penalty is considered small relative to
3354 		 * the PCI reads for register values and a slim write.  When
3355 		 * the ulpLe field is set, the entire Command has been
3356 		 * received.
3357 		 */
3358 		entry = lpfc_resp_iocb(phba, pring);
3359 
3360 		phba->last_completion_time = jiffies;
3361 		rspiocbp = __lpfc_sli_get_iocbq(phba);
3362 		if (rspiocbp == NULL) {
3363 			printk(KERN_ERR "%s: out of buffers! Failing "
3364 			       "completion.\n", __func__);
3365 			break;
3366 		}
3367 
3368 		lpfc_sli_pcimem_bcopy(entry, &rspiocbp->iocb,
3369 				      phba->iocb_rsp_size);
3370 		irsp = &rspiocbp->iocb;
3371 
3372 		if (++pring->sli.sli3.rspidx >= portRspMax)
3373 			pring->sli.sli3.rspidx = 0;
3374 
3375 		if (pring->ringno == LPFC_ELS_RING) {
3376 			lpfc_debugfs_slow_ring_trc(phba,
3377 			"IOCB rsp ring:   wd4:x%08x wd6:x%08x wd7:x%08x",
3378 				*(((uint32_t *) irsp) + 4),
3379 				*(((uint32_t *) irsp) + 6),
3380 				*(((uint32_t *) irsp) + 7));
3381 		}
3382 
3383 		writel(pring->sli.sli3.rspidx,
3384 			&phba->host_gp[pring->ringno].rspGetInx);
3385 
3386 		spin_unlock_irqrestore(&phba->hbalock, iflag);
3387 		/* Handle the response IOCB */
3388 		rspiocbp = lpfc_sli_sp_handle_rspiocb(phba, pring, rspiocbp);
3389 		spin_lock_irqsave(&phba->hbalock, iflag);
3390 
3391 		/*
3392 		 * If the port response put pointer has not been updated, sync
3393 		 * the pgp->rspPutInx in the MAILBOX_tand fetch the new port
3394 		 * response put pointer.
3395 		 */
3396 		if (pring->sli.sli3.rspidx == portRspPut) {
3397 			portRspPut = le32_to_cpu(pgp->rspPutInx);
3398 		}
3399 	} /* while (pring->sli.sli3.rspidx != portRspPut) */
3400 
3401 	if ((rspiocbp != NULL) && (mask & HA_R0RE_REQ)) {
3402 		/* At least one response entry has been freed */
3403 		pring->stats.iocb_rsp_full++;
3404 		/* SET RxRE_RSP in Chip Att register */
3405 		status = ((CA_R0ATT | CA_R0RE_RSP) << (pring->ringno * 4));
3406 		writel(status, phba->CAregaddr);
3407 		readl(phba->CAregaddr); /* flush */
3408 	}
3409 	if ((mask & HA_R0CE_RSP) && (pring->flag & LPFC_CALL_RING_AVAILABLE)) {
3410 		pring->flag &= ~LPFC_CALL_RING_AVAILABLE;
3411 		pring->stats.iocb_cmd_empty++;
3412 
3413 		/* Force update of the local copy of cmdGetInx */
3414 		pring->sli.sli3.local_getidx = le32_to_cpu(pgp->cmdGetInx);
3415 		lpfc_sli_resume_iocb(phba, pring);
3416 
3417 		if ((pring->lpfc_sli_cmd_available))
3418 			(pring->lpfc_sli_cmd_available) (phba, pring);
3419 
3420 	}
3421 
3422 	spin_unlock_irqrestore(&phba->hbalock, iflag);
3423 	return;
3424 }
3425 
3426 /**
3427  * lpfc_sli_handle_slow_ring_event_s4 - Handle SLI4 slow-path els events
3428  * @phba: Pointer to HBA context object.
3429  * @pring: Pointer to driver SLI ring object.
3430  * @mask: Host attention register mask for this ring.
3431  *
3432  * This function is called from the worker thread when there is a pending
3433  * ELS response iocb on the driver internal slow-path response iocb worker
3434  * queue. The caller does not hold any lock. The function will remove each
3435  * response iocb from the response worker queue and calls the handle
3436  * response iocb routine (lpfc_sli_sp_handle_rspiocb) to process it.
3437  **/
3438 static void
3439 lpfc_sli_handle_slow_ring_event_s4(struct lpfc_hba *phba,
3440 				   struct lpfc_sli_ring *pring, uint32_t mask)
3441 {
3442 	struct lpfc_iocbq *irspiocbq;
3443 	struct hbq_dmabuf *dmabuf;
3444 	struct lpfc_cq_event *cq_event;
3445 	unsigned long iflag;
3446 
3447 	spin_lock_irqsave(&phba->hbalock, iflag);
3448 	phba->hba_flag &= ~HBA_SP_QUEUE_EVT;
3449 	spin_unlock_irqrestore(&phba->hbalock, iflag);
3450 	while (!list_empty(&phba->sli4_hba.sp_queue_event)) {
3451 		/* Get the response iocb from the head of work queue */
3452 		spin_lock_irqsave(&phba->hbalock, iflag);
3453 		list_remove_head(&phba->sli4_hba.sp_queue_event,
3454 				 cq_event, struct lpfc_cq_event, list);
3455 		spin_unlock_irqrestore(&phba->hbalock, iflag);
3456 
3457 		switch (bf_get(lpfc_wcqe_c_code, &cq_event->cqe.wcqe_cmpl)) {
3458 		case CQE_CODE_COMPL_WQE:
3459 			irspiocbq = container_of(cq_event, struct lpfc_iocbq,
3460 						 cq_event);
3461 			/* Translate ELS WCQE to response IOCBQ */
3462 			irspiocbq = lpfc_sli4_els_wcqe_to_rspiocbq(phba,
3463 								   irspiocbq);
3464 			if (irspiocbq)
3465 				lpfc_sli_sp_handle_rspiocb(phba, pring,
3466 							   irspiocbq);
3467 			break;
3468 		case CQE_CODE_RECEIVE:
3469 		case CQE_CODE_RECEIVE_V1:
3470 			dmabuf = container_of(cq_event, struct hbq_dmabuf,
3471 					      cq_event);
3472 			lpfc_sli4_handle_received_buffer(phba, dmabuf);
3473 			break;
3474 		default:
3475 			break;
3476 		}
3477 	}
3478 }
3479 
3480 /**
3481  * lpfc_sli_abort_iocb_ring - Abort all iocbs in the ring
3482  * @phba: Pointer to HBA context object.
3483  * @pring: Pointer to driver SLI ring object.
3484  *
3485  * This function aborts all iocbs in the given ring and frees all the iocb
3486  * objects in txq. This function issues an abort iocb for all the iocb commands
3487  * in txcmplq. The iocbs in the txcmplq is not guaranteed to complete before
3488  * the return of this function. The caller is not required to hold any locks.
3489  **/
3490 void
3491 lpfc_sli_abort_iocb_ring(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
3492 {
3493 	LIST_HEAD(completions);
3494 	struct lpfc_iocbq *iocb, *next_iocb;
3495 
3496 	if (pring->ringno == LPFC_ELS_RING) {
3497 		lpfc_fabric_abort_hba(phba);
3498 	}
3499 
3500 	/* Error everything on txq and txcmplq
3501 	 * First do the txq.
3502 	 */
3503 	spin_lock_irq(&phba->hbalock);
3504 	list_splice_init(&pring->txq, &completions);
3505 
3506 	/* Next issue ABTS for everything on the txcmplq */
3507 	list_for_each_entry_safe(iocb, next_iocb, &pring->txcmplq, list)
3508 		lpfc_sli_issue_abort_iotag(phba, pring, iocb);
3509 
3510 	spin_unlock_irq(&phba->hbalock);
3511 
3512 	/* Cancel all the IOCBs from the completions list */
3513 	lpfc_sli_cancel_iocbs(phba, &completions, IOSTAT_LOCAL_REJECT,
3514 			      IOERR_SLI_ABORTED);
3515 }
3516 
3517 /**
3518  * lpfc_sli_flush_fcp_rings - flush all iocbs in the fcp ring
3519  * @phba: Pointer to HBA context object.
3520  *
3521  * This function flushes all iocbs in the fcp ring and frees all the iocb
3522  * objects in txq and txcmplq. This function will not issue abort iocbs
3523  * for all the iocb commands in txcmplq, they will just be returned with
3524  * IOERR_SLI_DOWN. This function is invoked with EEH when device's PCI
3525  * slot has been permanently disabled.
3526  **/
3527 void
3528 lpfc_sli_flush_fcp_rings(struct lpfc_hba *phba)
3529 {
3530 	LIST_HEAD(txq);
3531 	LIST_HEAD(txcmplq);
3532 	struct lpfc_sli *psli = &phba->sli;
3533 	struct lpfc_sli_ring  *pring;
3534 
3535 	/* Currently, only one fcp ring */
3536 	pring = &psli->ring[psli->fcp_ring];
3537 
3538 	spin_lock_irq(&phba->hbalock);
3539 	/* Retrieve everything on txq */
3540 	list_splice_init(&pring->txq, &txq);
3541 
3542 	/* Retrieve everything on the txcmplq */
3543 	list_splice_init(&pring->txcmplq, &txcmplq);
3544 
3545 	/* Indicate the I/O queues are flushed */
3546 	phba->hba_flag |= HBA_FCP_IOQ_FLUSH;
3547 	spin_unlock_irq(&phba->hbalock);
3548 
3549 	/* Flush the txq */
3550 	lpfc_sli_cancel_iocbs(phba, &txq, IOSTAT_LOCAL_REJECT,
3551 			      IOERR_SLI_DOWN);
3552 
3553 	/* Flush the txcmpq */
3554 	lpfc_sli_cancel_iocbs(phba, &txcmplq, IOSTAT_LOCAL_REJECT,
3555 			      IOERR_SLI_DOWN);
3556 }
3557 
3558 /**
3559  * lpfc_sli_brdready_s3 - Check for sli3 host ready status
3560  * @phba: Pointer to HBA context object.
3561  * @mask: Bit mask to be checked.
3562  *
3563  * This function reads the host status register and compares
3564  * with the provided bit mask to check if HBA completed
3565  * the restart. This function will wait in a loop for the
3566  * HBA to complete restart. If the HBA does not restart within
3567  * 15 iterations, the function will reset the HBA again. The
3568  * function returns 1 when HBA fail to restart otherwise returns
3569  * zero.
3570  **/
3571 static int
3572 lpfc_sli_brdready_s3(struct lpfc_hba *phba, uint32_t mask)
3573 {
3574 	uint32_t status;
3575 	int i = 0;
3576 	int retval = 0;
3577 
3578 	/* Read the HBA Host Status Register */
3579 	if (lpfc_readl(phba->HSregaddr, &status))
3580 		return 1;
3581 
3582 	/*
3583 	 * Check status register every 100ms for 5 retries, then every
3584 	 * 500ms for 5, then every 2.5 sec for 5, then reset board and
3585 	 * every 2.5 sec for 4.
3586 	 * Break our of the loop if errors occurred during init.
3587 	 */
3588 	while (((status & mask) != mask) &&
3589 	       !(status & HS_FFERM) &&
3590 	       i++ < 20) {
3591 
3592 		if (i <= 5)
3593 			msleep(10);
3594 		else if (i <= 10)
3595 			msleep(500);
3596 		else
3597 			msleep(2500);
3598 
3599 		if (i == 15) {
3600 				/* Do post */
3601 			phba->pport->port_state = LPFC_VPORT_UNKNOWN;
3602 			lpfc_sli_brdrestart(phba);
3603 		}
3604 		/* Read the HBA Host Status Register */
3605 		if (lpfc_readl(phba->HSregaddr, &status)) {
3606 			retval = 1;
3607 			break;
3608 		}
3609 	}
3610 
3611 	/* Check to see if any errors occurred during init */
3612 	if ((status & HS_FFERM) || (i >= 20)) {
3613 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
3614 				"2751 Adapter failed to restart, "
3615 				"status reg x%x, FW Data: A8 x%x AC x%x\n",
3616 				status,
3617 				readl(phba->MBslimaddr + 0xa8),
3618 				readl(phba->MBslimaddr + 0xac));
3619 		phba->link_state = LPFC_HBA_ERROR;
3620 		retval = 1;
3621 	}
3622 
3623 	return retval;
3624 }
3625 
3626 /**
3627  * lpfc_sli_brdready_s4 - Check for sli4 host ready status
3628  * @phba: Pointer to HBA context object.
3629  * @mask: Bit mask to be checked.
3630  *
3631  * This function checks the host status register to check if HBA is
3632  * ready. This function will wait in a loop for the HBA to be ready
3633  * If the HBA is not ready , the function will will reset the HBA PCI
3634  * function again. The function returns 1 when HBA fail to be ready
3635  * otherwise returns zero.
3636  **/
3637 static int
3638 lpfc_sli_brdready_s4(struct lpfc_hba *phba, uint32_t mask)
3639 {
3640 	uint32_t status;
3641 	int retval = 0;
3642 
3643 	/* Read the HBA Host Status Register */
3644 	status = lpfc_sli4_post_status_check(phba);
3645 
3646 	if (status) {
3647 		phba->pport->port_state = LPFC_VPORT_UNKNOWN;
3648 		lpfc_sli_brdrestart(phba);
3649 		status = lpfc_sli4_post_status_check(phba);
3650 	}
3651 
3652 	/* Check to see if any errors occurred during init */
3653 	if (status) {
3654 		phba->link_state = LPFC_HBA_ERROR;
3655 		retval = 1;
3656 	} else
3657 		phba->sli4_hba.intr_enable = 0;
3658 
3659 	return retval;
3660 }
3661 
3662 /**
3663  * lpfc_sli_brdready - Wrapper func for checking the hba readyness
3664  * @phba: Pointer to HBA context object.
3665  * @mask: Bit mask to be checked.
3666  *
3667  * This routine wraps the actual SLI3 or SLI4 hba readyness check routine
3668  * from the API jump table function pointer from the lpfc_hba struct.
3669  **/
3670 int
3671 lpfc_sli_brdready(struct lpfc_hba *phba, uint32_t mask)
3672 {
3673 	return phba->lpfc_sli_brdready(phba, mask);
3674 }
3675 
3676 #define BARRIER_TEST_PATTERN (0xdeadbeef)
3677 
3678 /**
3679  * lpfc_reset_barrier - Make HBA ready for HBA reset
3680  * @phba: Pointer to HBA context object.
3681  *
3682  * This function is called before resetting an HBA. This function is called
3683  * with hbalock held and requests HBA to quiesce DMAs before a reset.
3684  **/
3685 void lpfc_reset_barrier(struct lpfc_hba *phba)
3686 {
3687 	uint32_t __iomem *resp_buf;
3688 	uint32_t __iomem *mbox_buf;
3689 	volatile uint32_t mbox;
3690 	uint32_t hc_copy, ha_copy, resp_data;
3691 	int  i;
3692 	uint8_t hdrtype;
3693 
3694 	pci_read_config_byte(phba->pcidev, PCI_HEADER_TYPE, &hdrtype);
3695 	if (hdrtype != 0x80 ||
3696 	    (FC_JEDEC_ID(phba->vpd.rev.biuRev) != HELIOS_JEDEC_ID &&
3697 	     FC_JEDEC_ID(phba->vpd.rev.biuRev) != THOR_JEDEC_ID))
3698 		return;
3699 
3700 	/*
3701 	 * Tell the other part of the chip to suspend temporarily all
3702 	 * its DMA activity.
3703 	 */
3704 	resp_buf = phba->MBslimaddr;
3705 
3706 	/* Disable the error attention */
3707 	if (lpfc_readl(phba->HCregaddr, &hc_copy))
3708 		return;
3709 	writel((hc_copy & ~HC_ERINT_ENA), phba->HCregaddr);
3710 	readl(phba->HCregaddr); /* flush */
3711 	phba->link_flag |= LS_IGNORE_ERATT;
3712 
3713 	if (lpfc_readl(phba->HAregaddr, &ha_copy))
3714 		return;
3715 	if (ha_copy & HA_ERATT) {
3716 		/* Clear Chip error bit */
3717 		writel(HA_ERATT, phba->HAregaddr);
3718 		phba->pport->stopped = 1;
3719 	}
3720 
3721 	mbox = 0;
3722 	((MAILBOX_t *)&mbox)->mbxCommand = MBX_KILL_BOARD;
3723 	((MAILBOX_t *)&mbox)->mbxOwner = OWN_CHIP;
3724 
3725 	writel(BARRIER_TEST_PATTERN, (resp_buf + 1));
3726 	mbox_buf = phba->MBslimaddr;
3727 	writel(mbox, mbox_buf);
3728 
3729 	for (i = 0; i < 50; i++) {
3730 		if (lpfc_readl((resp_buf + 1), &resp_data))
3731 			return;
3732 		if (resp_data != ~(BARRIER_TEST_PATTERN))
3733 			mdelay(1);
3734 		else
3735 			break;
3736 	}
3737 	resp_data = 0;
3738 	if (lpfc_readl((resp_buf + 1), &resp_data))
3739 		return;
3740 	if (resp_data  != ~(BARRIER_TEST_PATTERN)) {
3741 		if (phba->sli.sli_flag & LPFC_SLI_ACTIVE ||
3742 		    phba->pport->stopped)
3743 			goto restore_hc;
3744 		else
3745 			goto clear_errat;
3746 	}
3747 
3748 	((MAILBOX_t *)&mbox)->mbxOwner = OWN_HOST;
3749 	resp_data = 0;
3750 	for (i = 0; i < 500; i++) {
3751 		if (lpfc_readl(resp_buf, &resp_data))
3752 			return;
3753 		if (resp_data != mbox)
3754 			mdelay(1);
3755 		else
3756 			break;
3757 	}
3758 
3759 clear_errat:
3760 
3761 	while (++i < 500) {
3762 		if (lpfc_readl(phba->HAregaddr, &ha_copy))
3763 			return;
3764 		if (!(ha_copy & HA_ERATT))
3765 			mdelay(1);
3766 		else
3767 			break;
3768 	}
3769 
3770 	if (readl(phba->HAregaddr) & HA_ERATT) {
3771 		writel(HA_ERATT, phba->HAregaddr);
3772 		phba->pport->stopped = 1;
3773 	}
3774 
3775 restore_hc:
3776 	phba->link_flag &= ~LS_IGNORE_ERATT;
3777 	writel(hc_copy, phba->HCregaddr);
3778 	readl(phba->HCregaddr); /* flush */
3779 }
3780 
3781 /**
3782  * lpfc_sli_brdkill - Issue a kill_board mailbox command
3783  * @phba: Pointer to HBA context object.
3784  *
3785  * This function issues a kill_board mailbox command and waits for
3786  * the error attention interrupt. This function is called for stopping
3787  * the firmware processing. The caller is not required to hold any
3788  * locks. This function calls lpfc_hba_down_post function to free
3789  * any pending commands after the kill. The function will return 1 when it
3790  * fails to kill the board else will return 0.
3791  **/
3792 int
3793 lpfc_sli_brdkill(struct lpfc_hba *phba)
3794 {
3795 	struct lpfc_sli *psli;
3796 	LPFC_MBOXQ_t *pmb;
3797 	uint32_t status;
3798 	uint32_t ha_copy;
3799 	int retval;
3800 	int i = 0;
3801 
3802 	psli = &phba->sli;
3803 
3804 	/* Kill HBA */
3805 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
3806 			"0329 Kill HBA Data: x%x x%x\n",
3807 			phba->pport->port_state, psli->sli_flag);
3808 
3809 	pmb = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
3810 	if (!pmb)
3811 		return 1;
3812 
3813 	/* Disable the error attention */
3814 	spin_lock_irq(&phba->hbalock);
3815 	if (lpfc_readl(phba->HCregaddr, &status)) {
3816 		spin_unlock_irq(&phba->hbalock);
3817 		mempool_free(pmb, phba->mbox_mem_pool);
3818 		return 1;
3819 	}
3820 	status &= ~HC_ERINT_ENA;
3821 	writel(status, phba->HCregaddr);
3822 	readl(phba->HCregaddr); /* flush */
3823 	phba->link_flag |= LS_IGNORE_ERATT;
3824 	spin_unlock_irq(&phba->hbalock);
3825 
3826 	lpfc_kill_board(phba, pmb);
3827 	pmb->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
3828 	retval = lpfc_sli_issue_mbox(phba, pmb, MBX_NOWAIT);
3829 
3830 	if (retval != MBX_SUCCESS) {
3831 		if (retval != MBX_BUSY)
3832 			mempool_free(pmb, phba->mbox_mem_pool);
3833 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
3834 				"2752 KILL_BOARD command failed retval %d\n",
3835 				retval);
3836 		spin_lock_irq(&phba->hbalock);
3837 		phba->link_flag &= ~LS_IGNORE_ERATT;
3838 		spin_unlock_irq(&phba->hbalock);
3839 		return 1;
3840 	}
3841 
3842 	spin_lock_irq(&phba->hbalock);
3843 	psli->sli_flag &= ~LPFC_SLI_ACTIVE;
3844 	spin_unlock_irq(&phba->hbalock);
3845 
3846 	mempool_free(pmb, phba->mbox_mem_pool);
3847 
3848 	/* There is no completion for a KILL_BOARD mbox cmd. Check for an error
3849 	 * attention every 100ms for 3 seconds. If we don't get ERATT after
3850 	 * 3 seconds we still set HBA_ERROR state because the status of the
3851 	 * board is now undefined.
3852 	 */
3853 	if (lpfc_readl(phba->HAregaddr, &ha_copy))
3854 		return 1;
3855 	while ((i++ < 30) && !(ha_copy & HA_ERATT)) {
3856 		mdelay(100);
3857 		if (lpfc_readl(phba->HAregaddr, &ha_copy))
3858 			return 1;
3859 	}
3860 
3861 	del_timer_sync(&psli->mbox_tmo);
3862 	if (ha_copy & HA_ERATT) {
3863 		writel(HA_ERATT, phba->HAregaddr);
3864 		phba->pport->stopped = 1;
3865 	}
3866 	spin_lock_irq(&phba->hbalock);
3867 	psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
3868 	psli->mbox_active = NULL;
3869 	phba->link_flag &= ~LS_IGNORE_ERATT;
3870 	spin_unlock_irq(&phba->hbalock);
3871 
3872 	lpfc_hba_down_post(phba);
3873 	phba->link_state = LPFC_HBA_ERROR;
3874 
3875 	return ha_copy & HA_ERATT ? 0 : 1;
3876 }
3877 
3878 /**
3879  * lpfc_sli_brdreset - Reset a sli-2 or sli-3 HBA
3880  * @phba: Pointer to HBA context object.
3881  *
3882  * This function resets the HBA by writing HC_INITFF to the control
3883  * register. After the HBA resets, this function resets all the iocb ring
3884  * indices. This function disables PCI layer parity checking during
3885  * the reset.
3886  * This function returns 0 always.
3887  * The caller is not required to hold any locks.
3888  **/
3889 int
3890 lpfc_sli_brdreset(struct lpfc_hba *phba)
3891 {
3892 	struct lpfc_sli *psli;
3893 	struct lpfc_sli_ring *pring;
3894 	uint16_t cfg_value;
3895 	int i;
3896 
3897 	psli = &phba->sli;
3898 
3899 	/* Reset HBA */
3900 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
3901 			"0325 Reset HBA Data: x%x x%x\n",
3902 			phba->pport->port_state, psli->sli_flag);
3903 
3904 	/* perform board reset */
3905 	phba->fc_eventTag = 0;
3906 	phba->link_events = 0;
3907 	phba->pport->fc_myDID = 0;
3908 	phba->pport->fc_prevDID = 0;
3909 
3910 	/* Turn off parity checking and serr during the physical reset */
3911 	pci_read_config_word(phba->pcidev, PCI_COMMAND, &cfg_value);
3912 	pci_write_config_word(phba->pcidev, PCI_COMMAND,
3913 			      (cfg_value &
3914 			       ~(PCI_COMMAND_PARITY | PCI_COMMAND_SERR)));
3915 
3916 	psli->sli_flag &= ~(LPFC_SLI_ACTIVE | LPFC_PROCESS_LA);
3917 
3918 	/* Now toggle INITFF bit in the Host Control Register */
3919 	writel(HC_INITFF, phba->HCregaddr);
3920 	mdelay(1);
3921 	readl(phba->HCregaddr); /* flush */
3922 	writel(0, phba->HCregaddr);
3923 	readl(phba->HCregaddr); /* flush */
3924 
3925 	/* Restore PCI cmd register */
3926 	pci_write_config_word(phba->pcidev, PCI_COMMAND, cfg_value);
3927 
3928 	/* Initialize relevant SLI info */
3929 	for (i = 0; i < psli->num_rings; i++) {
3930 		pring = &psli->ring[i];
3931 		pring->flag = 0;
3932 		pring->sli.sli3.rspidx = 0;
3933 		pring->sli.sli3.next_cmdidx  = 0;
3934 		pring->sli.sli3.local_getidx = 0;
3935 		pring->sli.sli3.cmdidx = 0;
3936 		pring->missbufcnt = 0;
3937 	}
3938 
3939 	phba->link_state = LPFC_WARM_START;
3940 	return 0;
3941 }
3942 
3943 /**
3944  * lpfc_sli4_brdreset - Reset a sli-4 HBA
3945  * @phba: Pointer to HBA context object.
3946  *
3947  * This function resets a SLI4 HBA. This function disables PCI layer parity
3948  * checking during resets the device. The caller is not required to hold
3949  * any locks.
3950  *
3951  * This function returns 0 always.
3952  **/
3953 int
3954 lpfc_sli4_brdreset(struct lpfc_hba *phba)
3955 {
3956 	struct lpfc_sli *psli = &phba->sli;
3957 	uint16_t cfg_value;
3958 	int rc;
3959 
3960 	/* Reset HBA */
3961 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
3962 			"0295 Reset HBA Data: x%x x%x\n",
3963 			phba->pport->port_state, psli->sli_flag);
3964 
3965 	/* perform board reset */
3966 	phba->fc_eventTag = 0;
3967 	phba->link_events = 0;
3968 	phba->pport->fc_myDID = 0;
3969 	phba->pport->fc_prevDID = 0;
3970 
3971 	spin_lock_irq(&phba->hbalock);
3972 	psli->sli_flag &= ~(LPFC_PROCESS_LA);
3973 	phba->fcf.fcf_flag = 0;
3974 	spin_unlock_irq(&phba->hbalock);
3975 
3976 	/* Now physically reset the device */
3977 	lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
3978 			"0389 Performing PCI function reset!\n");
3979 
3980 	/* Turn off parity checking and serr during the physical reset */
3981 	pci_read_config_word(phba->pcidev, PCI_COMMAND, &cfg_value);
3982 	pci_write_config_word(phba->pcidev, PCI_COMMAND, (cfg_value &
3983 			      ~(PCI_COMMAND_PARITY | PCI_COMMAND_SERR)));
3984 
3985 	/* Perform FCoE PCI function reset before freeing queue memory */
3986 	rc = lpfc_pci_function_reset(phba);
3987 	lpfc_sli4_queue_destroy(phba);
3988 
3989 	/* Restore PCI cmd register */
3990 	pci_write_config_word(phba->pcidev, PCI_COMMAND, cfg_value);
3991 
3992 	return rc;
3993 }
3994 
3995 /**
3996  * lpfc_sli_brdrestart_s3 - Restart a sli-3 hba
3997  * @phba: Pointer to HBA context object.
3998  *
3999  * This function is called in the SLI initialization code path to
4000  * restart the HBA. The caller is not required to hold any lock.
4001  * This function writes MBX_RESTART mailbox command to the SLIM and
4002  * resets the HBA. At the end of the function, it calls lpfc_hba_down_post
4003  * function to free any pending commands. The function enables
4004  * POST only during the first initialization. The function returns zero.
4005  * The function does not guarantee completion of MBX_RESTART mailbox
4006  * command before the return of this function.
4007  **/
4008 static int
4009 lpfc_sli_brdrestart_s3(struct lpfc_hba *phba)
4010 {
4011 	MAILBOX_t *mb;
4012 	struct lpfc_sli *psli;
4013 	volatile uint32_t word0;
4014 	void __iomem *to_slim;
4015 	uint32_t hba_aer_enabled;
4016 
4017 	spin_lock_irq(&phba->hbalock);
4018 
4019 	/* Take PCIe device Advanced Error Reporting (AER) state */
4020 	hba_aer_enabled = phba->hba_flag & HBA_AER_ENABLED;
4021 
4022 	psli = &phba->sli;
4023 
4024 	/* Restart HBA */
4025 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
4026 			"0337 Restart HBA Data: x%x x%x\n",
4027 			phba->pport->port_state, psli->sli_flag);
4028 
4029 	word0 = 0;
4030 	mb = (MAILBOX_t *) &word0;
4031 	mb->mbxCommand = MBX_RESTART;
4032 	mb->mbxHc = 1;
4033 
4034 	lpfc_reset_barrier(phba);
4035 
4036 	to_slim = phba->MBslimaddr;
4037 	writel(*(uint32_t *) mb, to_slim);
4038 	readl(to_slim); /* flush */
4039 
4040 	/* Only skip post after fc_ffinit is completed */
4041 	if (phba->pport->port_state)
4042 		word0 = 1;	/* This is really setting up word1 */
4043 	else
4044 		word0 = 0;	/* This is really setting up word1 */
4045 	to_slim = phba->MBslimaddr + sizeof (uint32_t);
4046 	writel(*(uint32_t *) mb, to_slim);
4047 	readl(to_slim); /* flush */
4048 
4049 	lpfc_sli_brdreset(phba);
4050 	phba->pport->stopped = 0;
4051 	phba->link_state = LPFC_INIT_START;
4052 	phba->hba_flag = 0;
4053 	spin_unlock_irq(&phba->hbalock);
4054 
4055 	memset(&psli->lnk_stat_offsets, 0, sizeof(psli->lnk_stat_offsets));
4056 	psli->stats_start = get_seconds();
4057 
4058 	/* Give the INITFF and Post time to settle. */
4059 	mdelay(100);
4060 
4061 	/* Reset HBA AER if it was enabled, note hba_flag was reset above */
4062 	if (hba_aer_enabled)
4063 		pci_disable_pcie_error_reporting(phba->pcidev);
4064 
4065 	lpfc_hba_down_post(phba);
4066 
4067 	return 0;
4068 }
4069 
4070 /**
4071  * lpfc_sli_brdrestart_s4 - Restart the sli-4 hba
4072  * @phba: Pointer to HBA context object.
4073  *
4074  * This function is called in the SLI initialization code path to restart
4075  * a SLI4 HBA. The caller is not required to hold any lock.
4076  * At the end of the function, it calls lpfc_hba_down_post function to
4077  * free any pending commands.
4078  **/
4079 static int
4080 lpfc_sli_brdrestart_s4(struct lpfc_hba *phba)
4081 {
4082 	struct lpfc_sli *psli = &phba->sli;
4083 	uint32_t hba_aer_enabled;
4084 	int rc;
4085 
4086 	/* Restart HBA */
4087 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
4088 			"0296 Restart HBA Data: x%x x%x\n",
4089 			phba->pport->port_state, psli->sli_flag);
4090 
4091 	/* Take PCIe device Advanced Error Reporting (AER) state */
4092 	hba_aer_enabled = phba->hba_flag & HBA_AER_ENABLED;
4093 
4094 	rc = lpfc_sli4_brdreset(phba);
4095 
4096 	spin_lock_irq(&phba->hbalock);
4097 	phba->pport->stopped = 0;
4098 	phba->link_state = LPFC_INIT_START;
4099 	phba->hba_flag = 0;
4100 	spin_unlock_irq(&phba->hbalock);
4101 
4102 	memset(&psli->lnk_stat_offsets, 0, sizeof(psli->lnk_stat_offsets));
4103 	psli->stats_start = get_seconds();
4104 
4105 	/* Reset HBA AER if it was enabled, note hba_flag was reset above */
4106 	if (hba_aer_enabled)
4107 		pci_disable_pcie_error_reporting(phba->pcidev);
4108 
4109 	lpfc_hba_down_post(phba);
4110 
4111 	return rc;
4112 }
4113 
4114 /**
4115  * lpfc_sli_brdrestart - Wrapper func for restarting hba
4116  * @phba: Pointer to HBA context object.
4117  *
4118  * This routine wraps the actual SLI3 or SLI4 hba restart routine from the
4119  * API jump table function pointer from the lpfc_hba struct.
4120 **/
4121 int
4122 lpfc_sli_brdrestart(struct lpfc_hba *phba)
4123 {
4124 	return phba->lpfc_sli_brdrestart(phba);
4125 }
4126 
4127 /**
4128  * lpfc_sli_chipset_init - Wait for the restart of the HBA after a restart
4129  * @phba: Pointer to HBA context object.
4130  *
4131  * This function is called after a HBA restart to wait for successful
4132  * restart of the HBA. Successful restart of the HBA is indicated by
4133  * HS_FFRDY and HS_MBRDY bits. If the HBA fails to restart even after 15
4134  * iteration, the function will restart the HBA again. The function returns
4135  * zero if HBA successfully restarted else returns negative error code.
4136  **/
4137 static int
4138 lpfc_sli_chipset_init(struct lpfc_hba *phba)
4139 {
4140 	uint32_t status, i = 0;
4141 
4142 	/* Read the HBA Host Status Register */
4143 	if (lpfc_readl(phba->HSregaddr, &status))
4144 		return -EIO;
4145 
4146 	/* Check status register to see what current state is */
4147 	i = 0;
4148 	while ((status & (HS_FFRDY | HS_MBRDY)) != (HS_FFRDY | HS_MBRDY)) {
4149 
4150 		/* Check every 10ms for 10 retries, then every 100ms for 90
4151 		 * retries, then every 1 sec for 50 retires for a total of
4152 		 * ~60 seconds before reset the board again and check every
4153 		 * 1 sec for 50 retries. The up to 60 seconds before the
4154 		 * board ready is required by the Falcon FIPS zeroization
4155 		 * complete, and any reset the board in between shall cause
4156 		 * restart of zeroization, further delay the board ready.
4157 		 */
4158 		if (i++ >= 200) {
4159 			/* Adapter failed to init, timeout, status reg
4160 			   <status> */
4161 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4162 					"0436 Adapter failed to init, "
4163 					"timeout, status reg x%x, "
4164 					"FW Data: A8 x%x AC x%x\n", status,
4165 					readl(phba->MBslimaddr + 0xa8),
4166 					readl(phba->MBslimaddr + 0xac));
4167 			phba->link_state = LPFC_HBA_ERROR;
4168 			return -ETIMEDOUT;
4169 		}
4170 
4171 		/* Check to see if any errors occurred during init */
4172 		if (status & HS_FFERM) {
4173 			/* ERROR: During chipset initialization */
4174 			/* Adapter failed to init, chipset, status reg
4175 			   <status> */
4176 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4177 					"0437 Adapter failed to init, "
4178 					"chipset, status reg x%x, "
4179 					"FW Data: A8 x%x AC x%x\n", status,
4180 					readl(phba->MBslimaddr + 0xa8),
4181 					readl(phba->MBslimaddr + 0xac));
4182 			phba->link_state = LPFC_HBA_ERROR;
4183 			return -EIO;
4184 		}
4185 
4186 		if (i <= 10)
4187 			msleep(10);
4188 		else if (i <= 100)
4189 			msleep(100);
4190 		else
4191 			msleep(1000);
4192 
4193 		if (i == 150) {
4194 			/* Do post */
4195 			phba->pport->port_state = LPFC_VPORT_UNKNOWN;
4196 			lpfc_sli_brdrestart(phba);
4197 		}
4198 		/* Read the HBA Host Status Register */
4199 		if (lpfc_readl(phba->HSregaddr, &status))
4200 			return -EIO;
4201 	}
4202 
4203 	/* Check to see if any errors occurred during init */
4204 	if (status & HS_FFERM) {
4205 		/* ERROR: During chipset initialization */
4206 		/* Adapter failed to init, chipset, status reg <status> */
4207 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4208 				"0438 Adapter failed to init, chipset, "
4209 				"status reg x%x, "
4210 				"FW Data: A8 x%x AC x%x\n", status,
4211 				readl(phba->MBslimaddr + 0xa8),
4212 				readl(phba->MBslimaddr + 0xac));
4213 		phba->link_state = LPFC_HBA_ERROR;
4214 		return -EIO;
4215 	}
4216 
4217 	/* Clear all interrupt enable conditions */
4218 	writel(0, phba->HCregaddr);
4219 	readl(phba->HCregaddr); /* flush */
4220 
4221 	/* setup host attn register */
4222 	writel(0xffffffff, phba->HAregaddr);
4223 	readl(phba->HAregaddr); /* flush */
4224 	return 0;
4225 }
4226 
4227 /**
4228  * lpfc_sli_hbq_count - Get the number of HBQs to be configured
4229  *
4230  * This function calculates and returns the number of HBQs required to be
4231  * configured.
4232  **/
4233 int
4234 lpfc_sli_hbq_count(void)
4235 {
4236 	return ARRAY_SIZE(lpfc_hbq_defs);
4237 }
4238 
4239 /**
4240  * lpfc_sli_hbq_entry_count - Calculate total number of hbq entries
4241  *
4242  * This function adds the number of hbq entries in every HBQ to get
4243  * the total number of hbq entries required for the HBA and returns
4244  * the total count.
4245  **/
4246 static int
4247 lpfc_sli_hbq_entry_count(void)
4248 {
4249 	int  hbq_count = lpfc_sli_hbq_count();
4250 	int  count = 0;
4251 	int  i;
4252 
4253 	for (i = 0; i < hbq_count; ++i)
4254 		count += lpfc_hbq_defs[i]->entry_count;
4255 	return count;
4256 }
4257 
4258 /**
4259  * lpfc_sli_hbq_size - Calculate memory required for all hbq entries
4260  *
4261  * This function calculates amount of memory required for all hbq entries
4262  * to be configured and returns the total memory required.
4263  **/
4264 int
4265 lpfc_sli_hbq_size(void)
4266 {
4267 	return lpfc_sli_hbq_entry_count() * sizeof(struct lpfc_hbq_entry);
4268 }
4269 
4270 /**
4271  * lpfc_sli_hbq_setup - configure and initialize HBQs
4272  * @phba: Pointer to HBA context object.
4273  *
4274  * This function is called during the SLI initialization to configure
4275  * all the HBQs and post buffers to the HBQ. The caller is not
4276  * required to hold any locks. This function will return zero if successful
4277  * else it will return negative error code.
4278  **/
4279 static int
4280 lpfc_sli_hbq_setup(struct lpfc_hba *phba)
4281 {
4282 	int  hbq_count = lpfc_sli_hbq_count();
4283 	LPFC_MBOXQ_t *pmb;
4284 	MAILBOX_t *pmbox;
4285 	uint32_t hbqno;
4286 	uint32_t hbq_entry_index;
4287 
4288 				/* Get a Mailbox buffer to setup mailbox
4289 				 * commands for HBA initialization
4290 				 */
4291 	pmb = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4292 
4293 	if (!pmb)
4294 		return -ENOMEM;
4295 
4296 	pmbox = &pmb->u.mb;
4297 
4298 	/* Initialize the struct lpfc_sli_hbq structure for each hbq */
4299 	phba->link_state = LPFC_INIT_MBX_CMDS;
4300 	phba->hbq_in_use = 1;
4301 
4302 	hbq_entry_index = 0;
4303 	for (hbqno = 0; hbqno < hbq_count; ++hbqno) {
4304 		phba->hbqs[hbqno].next_hbqPutIdx = 0;
4305 		phba->hbqs[hbqno].hbqPutIdx      = 0;
4306 		phba->hbqs[hbqno].local_hbqGetIdx   = 0;
4307 		phba->hbqs[hbqno].entry_count =
4308 			lpfc_hbq_defs[hbqno]->entry_count;
4309 		lpfc_config_hbq(phba, hbqno, lpfc_hbq_defs[hbqno],
4310 			hbq_entry_index, pmb);
4311 		hbq_entry_index += phba->hbqs[hbqno].entry_count;
4312 
4313 		if (lpfc_sli_issue_mbox(phba, pmb, MBX_POLL) != MBX_SUCCESS) {
4314 			/* Adapter failed to init, mbxCmd <cmd> CFG_RING,
4315 			   mbxStatus <status>, ring <num> */
4316 
4317 			lpfc_printf_log(phba, KERN_ERR,
4318 					LOG_SLI | LOG_VPORT,
4319 					"1805 Adapter failed to init. "
4320 					"Data: x%x x%x x%x\n",
4321 					pmbox->mbxCommand,
4322 					pmbox->mbxStatus, hbqno);
4323 
4324 			phba->link_state = LPFC_HBA_ERROR;
4325 			mempool_free(pmb, phba->mbox_mem_pool);
4326 			return -ENXIO;
4327 		}
4328 	}
4329 	phba->hbq_count = hbq_count;
4330 
4331 	mempool_free(pmb, phba->mbox_mem_pool);
4332 
4333 	/* Initially populate or replenish the HBQs */
4334 	for (hbqno = 0; hbqno < hbq_count; ++hbqno)
4335 		lpfc_sli_hbqbuf_init_hbqs(phba, hbqno);
4336 	return 0;
4337 }
4338 
4339 /**
4340  * lpfc_sli4_rb_setup - Initialize and post RBs to HBA
4341  * @phba: Pointer to HBA context object.
4342  *
4343  * This function is called during the SLI initialization to configure
4344  * all the HBQs and post buffers to the HBQ. The caller is not
4345  * required to hold any locks. This function will return zero if successful
4346  * else it will return negative error code.
4347  **/
4348 static int
4349 lpfc_sli4_rb_setup(struct lpfc_hba *phba)
4350 {
4351 	phba->hbq_in_use = 1;
4352 	phba->hbqs[0].entry_count = lpfc_hbq_defs[0]->entry_count;
4353 	phba->hbq_count = 1;
4354 	/* Initially populate or replenish the HBQs */
4355 	lpfc_sli_hbqbuf_init_hbqs(phba, 0);
4356 	return 0;
4357 }
4358 
4359 /**
4360  * lpfc_sli_config_port - Issue config port mailbox command
4361  * @phba: Pointer to HBA context object.
4362  * @sli_mode: sli mode - 2/3
4363  *
4364  * This function is called by the sli intialization code path
4365  * to issue config_port mailbox command. This function restarts the
4366  * HBA firmware and issues a config_port mailbox command to configure
4367  * the SLI interface in the sli mode specified by sli_mode
4368  * variable. The caller is not required to hold any locks.
4369  * The function returns 0 if successful, else returns negative error
4370  * code.
4371  **/
4372 int
4373 lpfc_sli_config_port(struct lpfc_hba *phba, int sli_mode)
4374 {
4375 	LPFC_MBOXQ_t *pmb;
4376 	uint32_t resetcount = 0, rc = 0, done = 0;
4377 
4378 	pmb = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4379 	if (!pmb) {
4380 		phba->link_state = LPFC_HBA_ERROR;
4381 		return -ENOMEM;
4382 	}
4383 
4384 	phba->sli_rev = sli_mode;
4385 	while (resetcount < 2 && !done) {
4386 		spin_lock_irq(&phba->hbalock);
4387 		phba->sli.sli_flag |= LPFC_SLI_MBOX_ACTIVE;
4388 		spin_unlock_irq(&phba->hbalock);
4389 		phba->pport->port_state = LPFC_VPORT_UNKNOWN;
4390 		lpfc_sli_brdrestart(phba);
4391 		rc = lpfc_sli_chipset_init(phba);
4392 		if (rc)
4393 			break;
4394 
4395 		spin_lock_irq(&phba->hbalock);
4396 		phba->sli.sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
4397 		spin_unlock_irq(&phba->hbalock);
4398 		resetcount++;
4399 
4400 		/* Call pre CONFIG_PORT mailbox command initialization.  A
4401 		 * value of 0 means the call was successful.  Any other
4402 		 * nonzero value is a failure, but if ERESTART is returned,
4403 		 * the driver may reset the HBA and try again.
4404 		 */
4405 		rc = lpfc_config_port_prep(phba);
4406 		if (rc == -ERESTART) {
4407 			phba->link_state = LPFC_LINK_UNKNOWN;
4408 			continue;
4409 		} else if (rc)
4410 			break;
4411 
4412 		phba->link_state = LPFC_INIT_MBX_CMDS;
4413 		lpfc_config_port(phba, pmb);
4414 		rc = lpfc_sli_issue_mbox(phba, pmb, MBX_POLL);
4415 		phba->sli3_options &= ~(LPFC_SLI3_NPIV_ENABLED |
4416 					LPFC_SLI3_HBQ_ENABLED |
4417 					LPFC_SLI3_CRP_ENABLED |
4418 					LPFC_SLI3_BG_ENABLED |
4419 					LPFC_SLI3_DSS_ENABLED);
4420 		if (rc != MBX_SUCCESS) {
4421 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4422 				"0442 Adapter failed to init, mbxCmd x%x "
4423 				"CONFIG_PORT, mbxStatus x%x Data: x%x\n",
4424 				pmb->u.mb.mbxCommand, pmb->u.mb.mbxStatus, 0);
4425 			spin_lock_irq(&phba->hbalock);
4426 			phba->sli.sli_flag &= ~LPFC_SLI_ACTIVE;
4427 			spin_unlock_irq(&phba->hbalock);
4428 			rc = -ENXIO;
4429 		} else {
4430 			/* Allow asynchronous mailbox command to go through */
4431 			spin_lock_irq(&phba->hbalock);
4432 			phba->sli.sli_flag &= ~LPFC_SLI_ASYNC_MBX_BLK;
4433 			spin_unlock_irq(&phba->hbalock);
4434 			done = 1;
4435 
4436 			if ((pmb->u.mb.un.varCfgPort.casabt == 1) &&
4437 			    (pmb->u.mb.un.varCfgPort.gasabt == 0))
4438 				lpfc_printf_log(phba, KERN_WARNING, LOG_INIT,
4439 					"3110 Port did not grant ASABT\n");
4440 		}
4441 	}
4442 	if (!done) {
4443 		rc = -EINVAL;
4444 		goto do_prep_failed;
4445 	}
4446 	if (pmb->u.mb.un.varCfgPort.sli_mode == 3) {
4447 		if (!pmb->u.mb.un.varCfgPort.cMA) {
4448 			rc = -ENXIO;
4449 			goto do_prep_failed;
4450 		}
4451 		if (phba->max_vpi && pmb->u.mb.un.varCfgPort.gmv) {
4452 			phba->sli3_options |= LPFC_SLI3_NPIV_ENABLED;
4453 			phba->max_vpi = pmb->u.mb.un.varCfgPort.max_vpi;
4454 			phba->max_vports = (phba->max_vpi > phba->max_vports) ?
4455 				phba->max_vpi : phba->max_vports;
4456 
4457 		} else
4458 			phba->max_vpi = 0;
4459 		phba->fips_level = 0;
4460 		phba->fips_spec_rev = 0;
4461 		if (pmb->u.mb.un.varCfgPort.gdss) {
4462 			phba->sli3_options |= LPFC_SLI3_DSS_ENABLED;
4463 			phba->fips_level = pmb->u.mb.un.varCfgPort.fips_level;
4464 			phba->fips_spec_rev = pmb->u.mb.un.varCfgPort.fips_rev;
4465 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
4466 					"2850 Security Crypto Active. FIPS x%d "
4467 					"(Spec Rev: x%d)",
4468 					phba->fips_level, phba->fips_spec_rev);
4469 		}
4470 		if (pmb->u.mb.un.varCfgPort.sec_err) {
4471 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4472 					"2856 Config Port Security Crypto "
4473 					"Error: x%x ",
4474 					pmb->u.mb.un.varCfgPort.sec_err);
4475 		}
4476 		if (pmb->u.mb.un.varCfgPort.gerbm)
4477 			phba->sli3_options |= LPFC_SLI3_HBQ_ENABLED;
4478 		if (pmb->u.mb.un.varCfgPort.gcrp)
4479 			phba->sli3_options |= LPFC_SLI3_CRP_ENABLED;
4480 
4481 		phba->hbq_get = phba->mbox->us.s3_pgp.hbq_get;
4482 		phba->port_gp = phba->mbox->us.s3_pgp.port;
4483 
4484 		if (phba->cfg_enable_bg) {
4485 			if (pmb->u.mb.un.varCfgPort.gbg)
4486 				phba->sli3_options |= LPFC_SLI3_BG_ENABLED;
4487 			else
4488 				lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4489 						"0443 Adapter did not grant "
4490 						"BlockGuard\n");
4491 		}
4492 	} else {
4493 		phba->hbq_get = NULL;
4494 		phba->port_gp = phba->mbox->us.s2.port;
4495 		phba->max_vpi = 0;
4496 	}
4497 do_prep_failed:
4498 	mempool_free(pmb, phba->mbox_mem_pool);
4499 	return rc;
4500 }
4501 
4502 
4503 /**
4504  * lpfc_sli_hba_setup - SLI intialization function
4505  * @phba: Pointer to HBA context object.
4506  *
4507  * This function is the main SLI intialization function. This function
4508  * is called by the HBA intialization code, HBA reset code and HBA
4509  * error attention handler code. Caller is not required to hold any
4510  * locks. This function issues config_port mailbox command to configure
4511  * the SLI, setup iocb rings and HBQ rings. In the end the function
4512  * calls the config_port_post function to issue init_link mailbox
4513  * command and to start the discovery. The function will return zero
4514  * if successful, else it will return negative error code.
4515  **/
4516 int
4517 lpfc_sli_hba_setup(struct lpfc_hba *phba)
4518 {
4519 	uint32_t rc;
4520 	int  mode = 3, i;
4521 	int longs;
4522 
4523 	switch (lpfc_sli_mode) {
4524 	case 2:
4525 		if (phba->cfg_enable_npiv) {
4526 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT | LOG_VPORT,
4527 				"1824 NPIV enabled: Override lpfc_sli_mode "
4528 				"parameter (%d) to auto (0).\n",
4529 				lpfc_sli_mode);
4530 			break;
4531 		}
4532 		mode = 2;
4533 		break;
4534 	case 0:
4535 	case 3:
4536 		break;
4537 	default:
4538 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT | LOG_VPORT,
4539 				"1819 Unrecognized lpfc_sli_mode "
4540 				"parameter: %d.\n", lpfc_sli_mode);
4541 
4542 		break;
4543 	}
4544 
4545 	rc = lpfc_sli_config_port(phba, mode);
4546 
4547 	if (rc && lpfc_sli_mode == 3)
4548 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT | LOG_VPORT,
4549 				"1820 Unable to select SLI-3.  "
4550 				"Not supported by adapter.\n");
4551 	if (rc && mode != 2)
4552 		rc = lpfc_sli_config_port(phba, 2);
4553 	if (rc)
4554 		goto lpfc_sli_hba_setup_error;
4555 
4556 	/* Enable PCIe device Advanced Error Reporting (AER) if configured */
4557 	if (phba->cfg_aer_support == 1 && !(phba->hba_flag & HBA_AER_ENABLED)) {
4558 		rc = pci_enable_pcie_error_reporting(phba->pcidev);
4559 		if (!rc) {
4560 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
4561 					"2709 This device supports "
4562 					"Advanced Error Reporting (AER)\n");
4563 			spin_lock_irq(&phba->hbalock);
4564 			phba->hba_flag |= HBA_AER_ENABLED;
4565 			spin_unlock_irq(&phba->hbalock);
4566 		} else {
4567 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
4568 					"2708 This device does not support "
4569 					"Advanced Error Reporting (AER): %d\n",
4570 					rc);
4571 			phba->cfg_aer_support = 0;
4572 		}
4573 	}
4574 
4575 	if (phba->sli_rev == 3) {
4576 		phba->iocb_cmd_size = SLI3_IOCB_CMD_SIZE;
4577 		phba->iocb_rsp_size = SLI3_IOCB_RSP_SIZE;
4578 	} else {
4579 		phba->iocb_cmd_size = SLI2_IOCB_CMD_SIZE;
4580 		phba->iocb_rsp_size = SLI2_IOCB_RSP_SIZE;
4581 		phba->sli3_options = 0;
4582 	}
4583 
4584 	lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
4585 			"0444 Firmware in SLI %x mode. Max_vpi %d\n",
4586 			phba->sli_rev, phba->max_vpi);
4587 	rc = lpfc_sli_ring_map(phba);
4588 
4589 	if (rc)
4590 		goto lpfc_sli_hba_setup_error;
4591 
4592 	/* Initialize VPIs. */
4593 	if (phba->sli_rev == LPFC_SLI_REV3) {
4594 		/*
4595 		 * The VPI bitmask and physical ID array are allocated
4596 		 * and initialized once only - at driver load.  A port
4597 		 * reset doesn't need to reinitialize this memory.
4598 		 */
4599 		if ((phba->vpi_bmask == NULL) && (phba->vpi_ids == NULL)) {
4600 			longs = (phba->max_vpi + BITS_PER_LONG) / BITS_PER_LONG;
4601 			phba->vpi_bmask = kzalloc(longs * sizeof(unsigned long),
4602 						  GFP_KERNEL);
4603 			if (!phba->vpi_bmask) {
4604 				rc = -ENOMEM;
4605 				goto lpfc_sli_hba_setup_error;
4606 			}
4607 
4608 			phba->vpi_ids = kzalloc(
4609 					(phba->max_vpi+1) * sizeof(uint16_t),
4610 					GFP_KERNEL);
4611 			if (!phba->vpi_ids) {
4612 				kfree(phba->vpi_bmask);
4613 				rc = -ENOMEM;
4614 				goto lpfc_sli_hba_setup_error;
4615 			}
4616 			for (i = 0; i < phba->max_vpi; i++)
4617 				phba->vpi_ids[i] = i;
4618 		}
4619 	}
4620 
4621 	/* Init HBQs */
4622 	if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
4623 		rc = lpfc_sli_hbq_setup(phba);
4624 		if (rc)
4625 			goto lpfc_sli_hba_setup_error;
4626 	}
4627 	spin_lock_irq(&phba->hbalock);
4628 	phba->sli.sli_flag |= LPFC_PROCESS_LA;
4629 	spin_unlock_irq(&phba->hbalock);
4630 
4631 	rc = lpfc_config_port_post(phba);
4632 	if (rc)
4633 		goto lpfc_sli_hba_setup_error;
4634 
4635 	return rc;
4636 
4637 lpfc_sli_hba_setup_error:
4638 	phba->link_state = LPFC_HBA_ERROR;
4639 	lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
4640 			"0445 Firmware initialization failed\n");
4641 	return rc;
4642 }
4643 
4644 /**
4645  * lpfc_sli4_read_fcoe_params - Read fcoe params from conf region
4646  * @phba: Pointer to HBA context object.
4647  * @mboxq: mailbox pointer.
4648  * This function issue a dump mailbox command to read config region
4649  * 23 and parse the records in the region and populate driver
4650  * data structure.
4651  **/
4652 static int
4653 lpfc_sli4_read_fcoe_params(struct lpfc_hba *phba)
4654 {
4655 	LPFC_MBOXQ_t *mboxq;
4656 	struct lpfc_dmabuf *mp;
4657 	struct lpfc_mqe *mqe;
4658 	uint32_t data_length;
4659 	int rc;
4660 
4661 	/* Program the default value of vlan_id and fc_map */
4662 	phba->valid_vlan = 0;
4663 	phba->fc_map[0] = LPFC_FCOE_FCF_MAP0;
4664 	phba->fc_map[1] = LPFC_FCOE_FCF_MAP1;
4665 	phba->fc_map[2] = LPFC_FCOE_FCF_MAP2;
4666 
4667 	mboxq = (LPFC_MBOXQ_t *)mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4668 	if (!mboxq)
4669 		return -ENOMEM;
4670 
4671 	mqe = &mboxq->u.mqe;
4672 	if (lpfc_sli4_dump_cfg_rg23(phba, mboxq)) {
4673 		rc = -ENOMEM;
4674 		goto out_free_mboxq;
4675 	}
4676 
4677 	mp = (struct lpfc_dmabuf *) mboxq->context1;
4678 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
4679 
4680 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
4681 			"(%d):2571 Mailbox cmd x%x Status x%x "
4682 			"Data: x%x x%x x%x x%x x%x x%x x%x x%x x%x "
4683 			"x%x x%x x%x x%x x%x x%x x%x x%x x%x "
4684 			"CQ: x%x x%x x%x x%x\n",
4685 			mboxq->vport ? mboxq->vport->vpi : 0,
4686 			bf_get(lpfc_mqe_command, mqe),
4687 			bf_get(lpfc_mqe_status, mqe),
4688 			mqe->un.mb_words[0], mqe->un.mb_words[1],
4689 			mqe->un.mb_words[2], mqe->un.mb_words[3],
4690 			mqe->un.mb_words[4], mqe->un.mb_words[5],
4691 			mqe->un.mb_words[6], mqe->un.mb_words[7],
4692 			mqe->un.mb_words[8], mqe->un.mb_words[9],
4693 			mqe->un.mb_words[10], mqe->un.mb_words[11],
4694 			mqe->un.mb_words[12], mqe->un.mb_words[13],
4695 			mqe->un.mb_words[14], mqe->un.mb_words[15],
4696 			mqe->un.mb_words[16], mqe->un.mb_words[50],
4697 			mboxq->mcqe.word0,
4698 			mboxq->mcqe.mcqe_tag0, 	mboxq->mcqe.mcqe_tag1,
4699 			mboxq->mcqe.trailer);
4700 
4701 	if (rc) {
4702 		lpfc_mbuf_free(phba, mp->virt, mp->phys);
4703 		kfree(mp);
4704 		rc = -EIO;
4705 		goto out_free_mboxq;
4706 	}
4707 	data_length = mqe->un.mb_words[5];
4708 	if (data_length > DMP_RGN23_SIZE) {
4709 		lpfc_mbuf_free(phba, mp->virt, mp->phys);
4710 		kfree(mp);
4711 		rc = -EIO;
4712 		goto out_free_mboxq;
4713 	}
4714 
4715 	lpfc_parse_fcoe_conf(phba, mp->virt, data_length);
4716 	lpfc_mbuf_free(phba, mp->virt, mp->phys);
4717 	kfree(mp);
4718 	rc = 0;
4719 
4720 out_free_mboxq:
4721 	mempool_free(mboxq, phba->mbox_mem_pool);
4722 	return rc;
4723 }
4724 
4725 /**
4726  * lpfc_sli4_read_rev - Issue READ_REV and collect vpd data
4727  * @phba: pointer to lpfc hba data structure.
4728  * @mboxq: pointer to the LPFC_MBOXQ_t structure.
4729  * @vpd: pointer to the memory to hold resulting port vpd data.
4730  * @vpd_size: On input, the number of bytes allocated to @vpd.
4731  *	      On output, the number of data bytes in @vpd.
4732  *
4733  * This routine executes a READ_REV SLI4 mailbox command.  In
4734  * addition, this routine gets the port vpd data.
4735  *
4736  * Return codes
4737  * 	0 - successful
4738  * 	-ENOMEM - could not allocated memory.
4739  **/
4740 static int
4741 lpfc_sli4_read_rev(struct lpfc_hba *phba, LPFC_MBOXQ_t *mboxq,
4742 		    uint8_t *vpd, uint32_t *vpd_size)
4743 {
4744 	int rc = 0;
4745 	uint32_t dma_size;
4746 	struct lpfc_dmabuf *dmabuf;
4747 	struct lpfc_mqe *mqe;
4748 
4749 	dmabuf = kzalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
4750 	if (!dmabuf)
4751 		return -ENOMEM;
4752 
4753 	/*
4754 	 * Get a DMA buffer for the vpd data resulting from the READ_REV
4755 	 * mailbox command.
4756 	 */
4757 	dma_size = *vpd_size;
4758 	dmabuf->virt = dma_alloc_coherent(&phba->pcidev->dev,
4759 					  dma_size,
4760 					  &dmabuf->phys,
4761 					  GFP_KERNEL);
4762 	if (!dmabuf->virt) {
4763 		kfree(dmabuf);
4764 		return -ENOMEM;
4765 	}
4766 	memset(dmabuf->virt, 0, dma_size);
4767 
4768 	/*
4769 	 * The SLI4 implementation of READ_REV conflicts at word1,
4770 	 * bits 31:16 and SLI4 adds vpd functionality not present
4771 	 * in SLI3.  This code corrects the conflicts.
4772 	 */
4773 	lpfc_read_rev(phba, mboxq);
4774 	mqe = &mboxq->u.mqe;
4775 	mqe->un.read_rev.vpd_paddr_high = putPaddrHigh(dmabuf->phys);
4776 	mqe->un.read_rev.vpd_paddr_low = putPaddrLow(dmabuf->phys);
4777 	mqe->un.read_rev.word1 &= 0x0000FFFF;
4778 	bf_set(lpfc_mbx_rd_rev_vpd, &mqe->un.read_rev, 1);
4779 	bf_set(lpfc_mbx_rd_rev_avail_len, &mqe->un.read_rev, dma_size);
4780 
4781 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
4782 	if (rc) {
4783 		dma_free_coherent(&phba->pcidev->dev, dma_size,
4784 				  dmabuf->virt, dmabuf->phys);
4785 		kfree(dmabuf);
4786 		return -EIO;
4787 	}
4788 
4789 	/*
4790 	 * The available vpd length cannot be bigger than the
4791 	 * DMA buffer passed to the port.  Catch the less than
4792 	 * case and update the caller's size.
4793 	 */
4794 	if (mqe->un.read_rev.avail_vpd_len < *vpd_size)
4795 		*vpd_size = mqe->un.read_rev.avail_vpd_len;
4796 
4797 	memcpy(vpd, dmabuf->virt, *vpd_size);
4798 
4799 	dma_free_coherent(&phba->pcidev->dev, dma_size,
4800 			  dmabuf->virt, dmabuf->phys);
4801 	kfree(dmabuf);
4802 	return 0;
4803 }
4804 
4805 /**
4806  * lpfc_sli4_retrieve_pport_name - Retrieve SLI4 device physical port name
4807  * @phba: pointer to lpfc hba data structure.
4808  *
4809  * This routine retrieves SLI4 device physical port name this PCI function
4810  * is attached to.
4811  *
4812  * Return codes
4813  *      0 - successful
4814  *      otherwise - failed to retrieve physical port name
4815  **/
4816 static int
4817 lpfc_sli4_retrieve_pport_name(struct lpfc_hba *phba)
4818 {
4819 	LPFC_MBOXQ_t *mboxq;
4820 	struct lpfc_mbx_get_cntl_attributes *mbx_cntl_attr;
4821 	struct lpfc_controller_attribute *cntl_attr;
4822 	struct lpfc_mbx_get_port_name *get_port_name;
4823 	void *virtaddr = NULL;
4824 	uint32_t alloclen, reqlen;
4825 	uint32_t shdr_status, shdr_add_status;
4826 	union lpfc_sli4_cfg_shdr *shdr;
4827 	char cport_name = 0;
4828 	int rc;
4829 
4830 	/* We assume nothing at this point */
4831 	phba->sli4_hba.lnk_info.lnk_dv = LPFC_LNK_DAT_INVAL;
4832 	phba->sli4_hba.pport_name_sta = LPFC_SLI4_PPNAME_NON;
4833 
4834 	mboxq = (LPFC_MBOXQ_t *)mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4835 	if (!mboxq)
4836 		return -ENOMEM;
4837 	/* obtain link type and link number via READ_CONFIG */
4838 	phba->sli4_hba.lnk_info.lnk_dv = LPFC_LNK_DAT_INVAL;
4839 	lpfc_sli4_read_config(phba);
4840 	if (phba->sli4_hba.lnk_info.lnk_dv == LPFC_LNK_DAT_VAL)
4841 		goto retrieve_ppname;
4842 
4843 	/* obtain link type and link number via COMMON_GET_CNTL_ATTRIBUTES */
4844 	reqlen = sizeof(struct lpfc_mbx_get_cntl_attributes);
4845 	alloclen = lpfc_sli4_config(phba, mboxq, LPFC_MBOX_SUBSYSTEM_COMMON,
4846 			LPFC_MBOX_OPCODE_GET_CNTL_ATTRIBUTES, reqlen,
4847 			LPFC_SLI4_MBX_NEMBED);
4848 	if (alloclen < reqlen) {
4849 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
4850 				"3084 Allocated DMA memory size (%d) is "
4851 				"less than the requested DMA memory size "
4852 				"(%d)\n", alloclen, reqlen);
4853 		rc = -ENOMEM;
4854 		goto out_free_mboxq;
4855 	}
4856 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
4857 	virtaddr = mboxq->sge_array->addr[0];
4858 	mbx_cntl_attr = (struct lpfc_mbx_get_cntl_attributes *)virtaddr;
4859 	shdr = &mbx_cntl_attr->cfg_shdr;
4860 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
4861 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
4862 	if (shdr_status || shdr_add_status || rc) {
4863 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
4864 				"3085 Mailbox x%x (x%x/x%x) failed, "
4865 				"rc:x%x, status:x%x, add_status:x%x\n",
4866 				bf_get(lpfc_mqe_command, &mboxq->u.mqe),
4867 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
4868 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
4869 				rc, shdr_status, shdr_add_status);
4870 		rc = -ENXIO;
4871 		goto out_free_mboxq;
4872 	}
4873 	cntl_attr = &mbx_cntl_attr->cntl_attr;
4874 	phba->sli4_hba.lnk_info.lnk_dv = LPFC_LNK_DAT_VAL;
4875 	phba->sli4_hba.lnk_info.lnk_tp =
4876 		bf_get(lpfc_cntl_attr_lnk_type, cntl_attr);
4877 	phba->sli4_hba.lnk_info.lnk_no =
4878 		bf_get(lpfc_cntl_attr_lnk_numb, cntl_attr);
4879 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
4880 			"3086 lnk_type:%d, lnk_numb:%d\n",
4881 			phba->sli4_hba.lnk_info.lnk_tp,
4882 			phba->sli4_hba.lnk_info.lnk_no);
4883 
4884 retrieve_ppname:
4885 	lpfc_sli4_config(phba, mboxq, LPFC_MBOX_SUBSYSTEM_COMMON,
4886 		LPFC_MBOX_OPCODE_GET_PORT_NAME,
4887 		sizeof(struct lpfc_mbx_get_port_name) -
4888 		sizeof(struct lpfc_sli4_cfg_mhdr),
4889 		LPFC_SLI4_MBX_EMBED);
4890 	get_port_name = &mboxq->u.mqe.un.get_port_name;
4891 	shdr = (union lpfc_sli4_cfg_shdr *)&get_port_name->header.cfg_shdr;
4892 	bf_set(lpfc_mbox_hdr_version, &shdr->request, LPFC_OPCODE_VERSION_1);
4893 	bf_set(lpfc_mbx_get_port_name_lnk_type, &get_port_name->u.request,
4894 		phba->sli4_hba.lnk_info.lnk_tp);
4895 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
4896 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
4897 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
4898 	if (shdr_status || shdr_add_status || rc) {
4899 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
4900 				"3087 Mailbox x%x (x%x/x%x) failed: "
4901 				"rc:x%x, status:x%x, add_status:x%x\n",
4902 				bf_get(lpfc_mqe_command, &mboxq->u.mqe),
4903 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
4904 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
4905 				rc, shdr_status, shdr_add_status);
4906 		rc = -ENXIO;
4907 		goto out_free_mboxq;
4908 	}
4909 	switch (phba->sli4_hba.lnk_info.lnk_no) {
4910 	case LPFC_LINK_NUMBER_0:
4911 		cport_name = bf_get(lpfc_mbx_get_port_name_name0,
4912 				&get_port_name->u.response);
4913 		phba->sli4_hba.pport_name_sta = LPFC_SLI4_PPNAME_GET;
4914 		break;
4915 	case LPFC_LINK_NUMBER_1:
4916 		cport_name = bf_get(lpfc_mbx_get_port_name_name1,
4917 				&get_port_name->u.response);
4918 		phba->sli4_hba.pport_name_sta = LPFC_SLI4_PPNAME_GET;
4919 		break;
4920 	case LPFC_LINK_NUMBER_2:
4921 		cport_name = bf_get(lpfc_mbx_get_port_name_name2,
4922 				&get_port_name->u.response);
4923 		phba->sli4_hba.pport_name_sta = LPFC_SLI4_PPNAME_GET;
4924 		break;
4925 	case LPFC_LINK_NUMBER_3:
4926 		cport_name = bf_get(lpfc_mbx_get_port_name_name3,
4927 				&get_port_name->u.response);
4928 		phba->sli4_hba.pport_name_sta = LPFC_SLI4_PPNAME_GET;
4929 		break;
4930 	default:
4931 		break;
4932 	}
4933 
4934 	if (phba->sli4_hba.pport_name_sta == LPFC_SLI4_PPNAME_GET) {
4935 		phba->Port[0] = cport_name;
4936 		phba->Port[1] = '\0';
4937 		lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
4938 				"3091 SLI get port name: %s\n", phba->Port);
4939 	}
4940 
4941 out_free_mboxq:
4942 	if (rc != MBX_TIMEOUT) {
4943 		if (bf_get(lpfc_mqe_command, &mboxq->u.mqe) == MBX_SLI4_CONFIG)
4944 			lpfc_sli4_mbox_cmd_free(phba, mboxq);
4945 		else
4946 			mempool_free(mboxq, phba->mbox_mem_pool);
4947 	}
4948 	return rc;
4949 }
4950 
4951 /**
4952  * lpfc_sli4_arm_cqeq_intr - Arm sli-4 device completion and event queues
4953  * @phba: pointer to lpfc hba data structure.
4954  *
4955  * This routine is called to explicitly arm the SLI4 device's completion and
4956  * event queues
4957  **/
4958 static void
4959 lpfc_sli4_arm_cqeq_intr(struct lpfc_hba *phba)
4960 {
4961 	int fcp_eqidx;
4962 
4963 	lpfc_sli4_cq_release(phba->sli4_hba.mbx_cq, LPFC_QUEUE_REARM);
4964 	lpfc_sli4_cq_release(phba->sli4_hba.els_cq, LPFC_QUEUE_REARM);
4965 	fcp_eqidx = 0;
4966 	if (phba->sli4_hba.fcp_cq) {
4967 		do {
4968 			lpfc_sli4_cq_release(phba->sli4_hba.fcp_cq[fcp_eqidx],
4969 					     LPFC_QUEUE_REARM);
4970 		} while (++fcp_eqidx < phba->cfg_fcp_io_channel);
4971 	}
4972 	if (phba->sli4_hba.hba_eq) {
4973 		for (fcp_eqidx = 0; fcp_eqidx < phba->cfg_fcp_io_channel;
4974 		     fcp_eqidx++)
4975 			lpfc_sli4_eq_release(phba->sli4_hba.hba_eq[fcp_eqidx],
4976 					     LPFC_QUEUE_REARM);
4977 	}
4978 }
4979 
4980 /**
4981  * lpfc_sli4_get_avail_extnt_rsrc - Get available resource extent count.
4982  * @phba: Pointer to HBA context object.
4983  * @type: The resource extent type.
4984  * @extnt_count: buffer to hold port available extent count.
4985  * @extnt_size: buffer to hold element count per extent.
4986  *
4987  * This function calls the port and retrievs the number of available
4988  * extents and their size for a particular extent type.
4989  *
4990  * Returns: 0 if successful.  Nonzero otherwise.
4991  **/
4992 int
4993 lpfc_sli4_get_avail_extnt_rsrc(struct lpfc_hba *phba, uint16_t type,
4994 			       uint16_t *extnt_count, uint16_t *extnt_size)
4995 {
4996 	int rc = 0;
4997 	uint32_t length;
4998 	uint32_t mbox_tmo;
4999 	struct lpfc_mbx_get_rsrc_extent_info *rsrc_info;
5000 	LPFC_MBOXQ_t *mbox;
5001 
5002 	mbox = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
5003 	if (!mbox)
5004 		return -ENOMEM;
5005 
5006 	/* Find out how many extents are available for this resource type */
5007 	length = (sizeof(struct lpfc_mbx_get_rsrc_extent_info) -
5008 		  sizeof(struct lpfc_sli4_cfg_mhdr));
5009 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
5010 			 LPFC_MBOX_OPCODE_GET_RSRC_EXTENT_INFO,
5011 			 length, LPFC_SLI4_MBX_EMBED);
5012 
5013 	/* Send an extents count of 0 - the GET doesn't use it. */
5014 	rc = lpfc_sli4_mbox_rsrc_extent(phba, mbox, 0, type,
5015 					LPFC_SLI4_MBX_EMBED);
5016 	if (unlikely(rc)) {
5017 		rc = -EIO;
5018 		goto err_exit;
5019 	}
5020 
5021 	if (!phba->sli4_hba.intr_enable)
5022 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
5023 	else {
5024 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
5025 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
5026 	}
5027 	if (unlikely(rc)) {
5028 		rc = -EIO;
5029 		goto err_exit;
5030 	}
5031 
5032 	rsrc_info = &mbox->u.mqe.un.rsrc_extent_info;
5033 	if (bf_get(lpfc_mbox_hdr_status,
5034 		   &rsrc_info->header.cfg_shdr.response)) {
5035 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_INIT,
5036 				"2930 Failed to get resource extents "
5037 				"Status 0x%x Add'l Status 0x%x\n",
5038 				bf_get(lpfc_mbox_hdr_status,
5039 				       &rsrc_info->header.cfg_shdr.response),
5040 				bf_get(lpfc_mbox_hdr_add_status,
5041 				       &rsrc_info->header.cfg_shdr.response));
5042 		rc = -EIO;
5043 		goto err_exit;
5044 	}
5045 
5046 	*extnt_count = bf_get(lpfc_mbx_get_rsrc_extent_info_cnt,
5047 			      &rsrc_info->u.rsp);
5048 	*extnt_size = bf_get(lpfc_mbx_get_rsrc_extent_info_size,
5049 			     &rsrc_info->u.rsp);
5050 
5051 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
5052 			"3162 Retrieved extents type-%d from port: count:%d, "
5053 			"size:%d\n", type, *extnt_count, *extnt_size);
5054 
5055 err_exit:
5056 	mempool_free(mbox, phba->mbox_mem_pool);
5057 	return rc;
5058 }
5059 
5060 /**
5061  * lpfc_sli4_chk_avail_extnt_rsrc - Check for available SLI4 resource extents.
5062  * @phba: Pointer to HBA context object.
5063  * @type: The extent type to check.
5064  *
5065  * This function reads the current available extents from the port and checks
5066  * if the extent count or extent size has changed since the last access.
5067  * Callers use this routine post port reset to understand if there is a
5068  * extent reprovisioning requirement.
5069  *
5070  * Returns:
5071  *   -Error: error indicates problem.
5072  *   1: Extent count or size has changed.
5073  *   0: No changes.
5074  **/
5075 static int
5076 lpfc_sli4_chk_avail_extnt_rsrc(struct lpfc_hba *phba, uint16_t type)
5077 {
5078 	uint16_t curr_ext_cnt, rsrc_ext_cnt;
5079 	uint16_t size_diff, rsrc_ext_size;
5080 	int rc = 0;
5081 	struct lpfc_rsrc_blks *rsrc_entry;
5082 	struct list_head *rsrc_blk_list = NULL;
5083 
5084 	size_diff = 0;
5085 	curr_ext_cnt = 0;
5086 	rc = lpfc_sli4_get_avail_extnt_rsrc(phba, type,
5087 					    &rsrc_ext_cnt,
5088 					    &rsrc_ext_size);
5089 	if (unlikely(rc))
5090 		return -EIO;
5091 
5092 	switch (type) {
5093 	case LPFC_RSC_TYPE_FCOE_RPI:
5094 		rsrc_blk_list = &phba->sli4_hba.lpfc_rpi_blk_list;
5095 		break;
5096 	case LPFC_RSC_TYPE_FCOE_VPI:
5097 		rsrc_blk_list = &phba->lpfc_vpi_blk_list;
5098 		break;
5099 	case LPFC_RSC_TYPE_FCOE_XRI:
5100 		rsrc_blk_list = &phba->sli4_hba.lpfc_xri_blk_list;
5101 		break;
5102 	case LPFC_RSC_TYPE_FCOE_VFI:
5103 		rsrc_blk_list = &phba->sli4_hba.lpfc_vfi_blk_list;
5104 		break;
5105 	default:
5106 		break;
5107 	}
5108 
5109 	list_for_each_entry(rsrc_entry, rsrc_blk_list, list) {
5110 		curr_ext_cnt++;
5111 		if (rsrc_entry->rsrc_size != rsrc_ext_size)
5112 			size_diff++;
5113 	}
5114 
5115 	if (curr_ext_cnt != rsrc_ext_cnt || size_diff != 0)
5116 		rc = 1;
5117 
5118 	return rc;
5119 }
5120 
5121 /**
5122  * lpfc_sli4_cfg_post_extnts -
5123  * @phba: Pointer to HBA context object.
5124  * @extnt_cnt - number of available extents.
5125  * @type - the extent type (rpi, xri, vfi, vpi).
5126  * @emb - buffer to hold either MBX_EMBED or MBX_NEMBED operation.
5127  * @mbox - pointer to the caller's allocated mailbox structure.
5128  *
5129  * This function executes the extents allocation request.  It also
5130  * takes care of the amount of memory needed to allocate or get the
5131  * allocated extents. It is the caller's responsibility to evaluate
5132  * the response.
5133  *
5134  * Returns:
5135  *   -Error:  Error value describes the condition found.
5136  *   0: if successful
5137  **/
5138 static int
5139 lpfc_sli4_cfg_post_extnts(struct lpfc_hba *phba, uint16_t extnt_cnt,
5140 			  uint16_t type, bool *emb, LPFC_MBOXQ_t *mbox)
5141 {
5142 	int rc = 0;
5143 	uint32_t req_len;
5144 	uint32_t emb_len;
5145 	uint32_t alloc_len, mbox_tmo;
5146 
5147 	/* Calculate the total requested length of the dma memory */
5148 	req_len = extnt_cnt * sizeof(uint16_t);
5149 
5150 	/*
5151 	 * Calculate the size of an embedded mailbox.  The uint32_t
5152 	 * accounts for extents-specific word.
5153 	 */
5154 	emb_len = sizeof(MAILBOX_t) - sizeof(struct mbox_header) -
5155 		sizeof(uint32_t);
5156 
5157 	/*
5158 	 * Presume the allocation and response will fit into an embedded
5159 	 * mailbox.  If not true, reconfigure to a non-embedded mailbox.
5160 	 */
5161 	*emb = LPFC_SLI4_MBX_EMBED;
5162 	if (req_len > emb_len) {
5163 		req_len = extnt_cnt * sizeof(uint16_t) +
5164 			sizeof(union lpfc_sli4_cfg_shdr) +
5165 			sizeof(uint32_t);
5166 		*emb = LPFC_SLI4_MBX_NEMBED;
5167 	}
5168 
5169 	alloc_len = lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
5170 				     LPFC_MBOX_OPCODE_ALLOC_RSRC_EXTENT,
5171 				     req_len, *emb);
5172 	if (alloc_len < req_len) {
5173 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
5174 			"2982 Allocated DMA memory size (x%x) is "
5175 			"less than the requested DMA memory "
5176 			"size (x%x)\n", alloc_len, req_len);
5177 		return -ENOMEM;
5178 	}
5179 	rc = lpfc_sli4_mbox_rsrc_extent(phba, mbox, extnt_cnt, type, *emb);
5180 	if (unlikely(rc))
5181 		return -EIO;
5182 
5183 	if (!phba->sli4_hba.intr_enable)
5184 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
5185 	else {
5186 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
5187 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
5188 	}
5189 
5190 	if (unlikely(rc))
5191 		rc = -EIO;
5192 	return rc;
5193 }
5194 
5195 /**
5196  * lpfc_sli4_alloc_extent - Allocate an SLI4 resource extent.
5197  * @phba: Pointer to HBA context object.
5198  * @type:  The resource extent type to allocate.
5199  *
5200  * This function allocates the number of elements for the specified
5201  * resource type.
5202  **/
5203 static int
5204 lpfc_sli4_alloc_extent(struct lpfc_hba *phba, uint16_t type)
5205 {
5206 	bool emb = false;
5207 	uint16_t rsrc_id_cnt, rsrc_cnt, rsrc_size;
5208 	uint16_t rsrc_id, rsrc_start, j, k;
5209 	uint16_t *ids;
5210 	int i, rc;
5211 	unsigned long longs;
5212 	unsigned long *bmask;
5213 	struct lpfc_rsrc_blks *rsrc_blks;
5214 	LPFC_MBOXQ_t *mbox;
5215 	uint32_t length;
5216 	struct lpfc_id_range *id_array = NULL;
5217 	void *virtaddr = NULL;
5218 	struct lpfc_mbx_nembed_rsrc_extent *n_rsrc;
5219 	struct lpfc_mbx_alloc_rsrc_extents *rsrc_ext;
5220 	struct list_head *ext_blk_list;
5221 
5222 	rc = lpfc_sli4_get_avail_extnt_rsrc(phba, type,
5223 					    &rsrc_cnt,
5224 					    &rsrc_size);
5225 	if (unlikely(rc))
5226 		return -EIO;
5227 
5228 	if ((rsrc_cnt == 0) || (rsrc_size == 0)) {
5229 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_INIT,
5230 			"3009 No available Resource Extents "
5231 			"for resource type 0x%x: Count: 0x%x, "
5232 			"Size 0x%x\n", type, rsrc_cnt,
5233 			rsrc_size);
5234 		return -ENOMEM;
5235 	}
5236 
5237 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_INIT | LOG_SLI,
5238 			"2903 Post resource extents type-0x%x: "
5239 			"count:%d, size %d\n", type, rsrc_cnt, rsrc_size);
5240 
5241 	mbox = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
5242 	if (!mbox)
5243 		return -ENOMEM;
5244 
5245 	rc = lpfc_sli4_cfg_post_extnts(phba, rsrc_cnt, type, &emb, mbox);
5246 	if (unlikely(rc)) {
5247 		rc = -EIO;
5248 		goto err_exit;
5249 	}
5250 
5251 	/*
5252 	 * Figure out where the response is located.  Then get local pointers
5253 	 * to the response data.  The port does not guarantee to respond to
5254 	 * all extents counts request so update the local variable with the
5255 	 * allocated count from the port.
5256 	 */
5257 	if (emb == LPFC_SLI4_MBX_EMBED) {
5258 		rsrc_ext = &mbox->u.mqe.un.alloc_rsrc_extents;
5259 		id_array = &rsrc_ext->u.rsp.id[0];
5260 		rsrc_cnt = bf_get(lpfc_mbx_rsrc_cnt, &rsrc_ext->u.rsp);
5261 	} else {
5262 		virtaddr = mbox->sge_array->addr[0];
5263 		n_rsrc = (struct lpfc_mbx_nembed_rsrc_extent *) virtaddr;
5264 		rsrc_cnt = bf_get(lpfc_mbx_rsrc_cnt, n_rsrc);
5265 		id_array = &n_rsrc->id;
5266 	}
5267 
5268 	longs = ((rsrc_cnt * rsrc_size) + BITS_PER_LONG - 1) / BITS_PER_LONG;
5269 	rsrc_id_cnt = rsrc_cnt * rsrc_size;
5270 
5271 	/*
5272 	 * Based on the resource size and count, correct the base and max
5273 	 * resource values.
5274 	 */
5275 	length = sizeof(struct lpfc_rsrc_blks);
5276 	switch (type) {
5277 	case LPFC_RSC_TYPE_FCOE_RPI:
5278 		phba->sli4_hba.rpi_bmask = kzalloc(longs *
5279 						   sizeof(unsigned long),
5280 						   GFP_KERNEL);
5281 		if (unlikely(!phba->sli4_hba.rpi_bmask)) {
5282 			rc = -ENOMEM;
5283 			goto err_exit;
5284 		}
5285 		phba->sli4_hba.rpi_ids = kzalloc(rsrc_id_cnt *
5286 						 sizeof(uint16_t),
5287 						 GFP_KERNEL);
5288 		if (unlikely(!phba->sli4_hba.rpi_ids)) {
5289 			kfree(phba->sli4_hba.rpi_bmask);
5290 			rc = -ENOMEM;
5291 			goto err_exit;
5292 		}
5293 
5294 		/*
5295 		 * The next_rpi was initialized with the maximum available
5296 		 * count but the port may allocate a smaller number.  Catch
5297 		 * that case and update the next_rpi.
5298 		 */
5299 		phba->sli4_hba.next_rpi = rsrc_id_cnt;
5300 
5301 		/* Initialize local ptrs for common extent processing later. */
5302 		bmask = phba->sli4_hba.rpi_bmask;
5303 		ids = phba->sli4_hba.rpi_ids;
5304 		ext_blk_list = &phba->sli4_hba.lpfc_rpi_blk_list;
5305 		break;
5306 	case LPFC_RSC_TYPE_FCOE_VPI:
5307 		phba->vpi_bmask = kzalloc(longs *
5308 					  sizeof(unsigned long),
5309 					  GFP_KERNEL);
5310 		if (unlikely(!phba->vpi_bmask)) {
5311 			rc = -ENOMEM;
5312 			goto err_exit;
5313 		}
5314 		phba->vpi_ids = kzalloc(rsrc_id_cnt *
5315 					 sizeof(uint16_t),
5316 					 GFP_KERNEL);
5317 		if (unlikely(!phba->vpi_ids)) {
5318 			kfree(phba->vpi_bmask);
5319 			rc = -ENOMEM;
5320 			goto err_exit;
5321 		}
5322 
5323 		/* Initialize local ptrs for common extent processing later. */
5324 		bmask = phba->vpi_bmask;
5325 		ids = phba->vpi_ids;
5326 		ext_blk_list = &phba->lpfc_vpi_blk_list;
5327 		break;
5328 	case LPFC_RSC_TYPE_FCOE_XRI:
5329 		phba->sli4_hba.xri_bmask = kzalloc(longs *
5330 						   sizeof(unsigned long),
5331 						   GFP_KERNEL);
5332 		if (unlikely(!phba->sli4_hba.xri_bmask)) {
5333 			rc = -ENOMEM;
5334 			goto err_exit;
5335 		}
5336 		phba->sli4_hba.max_cfg_param.xri_used = 0;
5337 		phba->sli4_hba.xri_ids = kzalloc(rsrc_id_cnt *
5338 						 sizeof(uint16_t),
5339 						 GFP_KERNEL);
5340 		if (unlikely(!phba->sli4_hba.xri_ids)) {
5341 			kfree(phba->sli4_hba.xri_bmask);
5342 			rc = -ENOMEM;
5343 			goto err_exit;
5344 		}
5345 
5346 		/* Initialize local ptrs for common extent processing later. */
5347 		bmask = phba->sli4_hba.xri_bmask;
5348 		ids = phba->sli4_hba.xri_ids;
5349 		ext_blk_list = &phba->sli4_hba.lpfc_xri_blk_list;
5350 		break;
5351 	case LPFC_RSC_TYPE_FCOE_VFI:
5352 		phba->sli4_hba.vfi_bmask = kzalloc(longs *
5353 						   sizeof(unsigned long),
5354 						   GFP_KERNEL);
5355 		if (unlikely(!phba->sli4_hba.vfi_bmask)) {
5356 			rc = -ENOMEM;
5357 			goto err_exit;
5358 		}
5359 		phba->sli4_hba.vfi_ids = kzalloc(rsrc_id_cnt *
5360 						 sizeof(uint16_t),
5361 						 GFP_KERNEL);
5362 		if (unlikely(!phba->sli4_hba.vfi_ids)) {
5363 			kfree(phba->sli4_hba.vfi_bmask);
5364 			rc = -ENOMEM;
5365 			goto err_exit;
5366 		}
5367 
5368 		/* Initialize local ptrs for common extent processing later. */
5369 		bmask = phba->sli4_hba.vfi_bmask;
5370 		ids = phba->sli4_hba.vfi_ids;
5371 		ext_blk_list = &phba->sli4_hba.lpfc_vfi_blk_list;
5372 		break;
5373 	default:
5374 		/* Unsupported Opcode.  Fail call. */
5375 		id_array = NULL;
5376 		bmask = NULL;
5377 		ids = NULL;
5378 		ext_blk_list = NULL;
5379 		goto err_exit;
5380 	}
5381 
5382 	/*
5383 	 * Complete initializing the extent configuration with the
5384 	 * allocated ids assigned to this function.  The bitmask serves
5385 	 * as an index into the array and manages the available ids.  The
5386 	 * array just stores the ids communicated to the port via the wqes.
5387 	 */
5388 	for (i = 0, j = 0, k = 0; i < rsrc_cnt; i++) {
5389 		if ((i % 2) == 0)
5390 			rsrc_id = bf_get(lpfc_mbx_rsrc_id_word4_0,
5391 					 &id_array[k]);
5392 		else
5393 			rsrc_id = bf_get(lpfc_mbx_rsrc_id_word4_1,
5394 					 &id_array[k]);
5395 
5396 		rsrc_blks = kzalloc(length, GFP_KERNEL);
5397 		if (unlikely(!rsrc_blks)) {
5398 			rc = -ENOMEM;
5399 			kfree(bmask);
5400 			kfree(ids);
5401 			goto err_exit;
5402 		}
5403 		rsrc_blks->rsrc_start = rsrc_id;
5404 		rsrc_blks->rsrc_size = rsrc_size;
5405 		list_add_tail(&rsrc_blks->list, ext_blk_list);
5406 		rsrc_start = rsrc_id;
5407 		if ((type == LPFC_RSC_TYPE_FCOE_XRI) && (j == 0))
5408 			phba->sli4_hba.scsi_xri_start = rsrc_start +
5409 				lpfc_sli4_get_els_iocb_cnt(phba);
5410 
5411 		while (rsrc_id < (rsrc_start + rsrc_size)) {
5412 			ids[j] = rsrc_id;
5413 			rsrc_id++;
5414 			j++;
5415 		}
5416 		/* Entire word processed.  Get next word.*/
5417 		if ((i % 2) == 1)
5418 			k++;
5419 	}
5420  err_exit:
5421 	lpfc_sli4_mbox_cmd_free(phba, mbox);
5422 	return rc;
5423 }
5424 
5425 /**
5426  * lpfc_sli4_dealloc_extent - Deallocate an SLI4 resource extent.
5427  * @phba: Pointer to HBA context object.
5428  * @type: the extent's type.
5429  *
5430  * This function deallocates all extents of a particular resource type.
5431  * SLI4 does not allow for deallocating a particular extent range.  It
5432  * is the caller's responsibility to release all kernel memory resources.
5433  **/
5434 static int
5435 lpfc_sli4_dealloc_extent(struct lpfc_hba *phba, uint16_t type)
5436 {
5437 	int rc;
5438 	uint32_t length, mbox_tmo = 0;
5439 	LPFC_MBOXQ_t *mbox;
5440 	struct lpfc_mbx_dealloc_rsrc_extents *dealloc_rsrc;
5441 	struct lpfc_rsrc_blks *rsrc_blk, *rsrc_blk_next;
5442 
5443 	mbox = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
5444 	if (!mbox)
5445 		return -ENOMEM;
5446 
5447 	/*
5448 	 * This function sends an embedded mailbox because it only sends the
5449 	 * the resource type.  All extents of this type are released by the
5450 	 * port.
5451 	 */
5452 	length = (sizeof(struct lpfc_mbx_dealloc_rsrc_extents) -
5453 		  sizeof(struct lpfc_sli4_cfg_mhdr));
5454 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
5455 			 LPFC_MBOX_OPCODE_DEALLOC_RSRC_EXTENT,
5456 			 length, LPFC_SLI4_MBX_EMBED);
5457 
5458 	/* Send an extents count of 0 - the dealloc doesn't use it. */
5459 	rc = lpfc_sli4_mbox_rsrc_extent(phba, mbox, 0, type,
5460 					LPFC_SLI4_MBX_EMBED);
5461 	if (unlikely(rc)) {
5462 		rc = -EIO;
5463 		goto out_free_mbox;
5464 	}
5465 	if (!phba->sli4_hba.intr_enable)
5466 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
5467 	else {
5468 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
5469 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
5470 	}
5471 	if (unlikely(rc)) {
5472 		rc = -EIO;
5473 		goto out_free_mbox;
5474 	}
5475 
5476 	dealloc_rsrc = &mbox->u.mqe.un.dealloc_rsrc_extents;
5477 	if (bf_get(lpfc_mbox_hdr_status,
5478 		   &dealloc_rsrc->header.cfg_shdr.response)) {
5479 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_INIT,
5480 				"2919 Failed to release resource extents "
5481 				"for type %d - Status 0x%x Add'l Status 0x%x. "
5482 				"Resource memory not released.\n",
5483 				type,
5484 				bf_get(lpfc_mbox_hdr_status,
5485 				    &dealloc_rsrc->header.cfg_shdr.response),
5486 				bf_get(lpfc_mbox_hdr_add_status,
5487 				    &dealloc_rsrc->header.cfg_shdr.response));
5488 		rc = -EIO;
5489 		goto out_free_mbox;
5490 	}
5491 
5492 	/* Release kernel memory resources for the specific type. */
5493 	switch (type) {
5494 	case LPFC_RSC_TYPE_FCOE_VPI:
5495 		kfree(phba->vpi_bmask);
5496 		kfree(phba->vpi_ids);
5497 		bf_set(lpfc_vpi_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
5498 		list_for_each_entry_safe(rsrc_blk, rsrc_blk_next,
5499 				    &phba->lpfc_vpi_blk_list, list) {
5500 			list_del_init(&rsrc_blk->list);
5501 			kfree(rsrc_blk);
5502 		}
5503 		phba->sli4_hba.max_cfg_param.vpi_used = 0;
5504 		break;
5505 	case LPFC_RSC_TYPE_FCOE_XRI:
5506 		kfree(phba->sli4_hba.xri_bmask);
5507 		kfree(phba->sli4_hba.xri_ids);
5508 		list_for_each_entry_safe(rsrc_blk, rsrc_blk_next,
5509 				    &phba->sli4_hba.lpfc_xri_blk_list, list) {
5510 			list_del_init(&rsrc_blk->list);
5511 			kfree(rsrc_blk);
5512 		}
5513 		break;
5514 	case LPFC_RSC_TYPE_FCOE_VFI:
5515 		kfree(phba->sli4_hba.vfi_bmask);
5516 		kfree(phba->sli4_hba.vfi_ids);
5517 		bf_set(lpfc_vfi_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
5518 		list_for_each_entry_safe(rsrc_blk, rsrc_blk_next,
5519 				    &phba->sli4_hba.lpfc_vfi_blk_list, list) {
5520 			list_del_init(&rsrc_blk->list);
5521 			kfree(rsrc_blk);
5522 		}
5523 		break;
5524 	case LPFC_RSC_TYPE_FCOE_RPI:
5525 		/* RPI bitmask and physical id array are cleaned up earlier. */
5526 		list_for_each_entry_safe(rsrc_blk, rsrc_blk_next,
5527 				    &phba->sli4_hba.lpfc_rpi_blk_list, list) {
5528 			list_del_init(&rsrc_blk->list);
5529 			kfree(rsrc_blk);
5530 		}
5531 		break;
5532 	default:
5533 		break;
5534 	}
5535 
5536 	bf_set(lpfc_idx_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
5537 
5538  out_free_mbox:
5539 	mempool_free(mbox, phba->mbox_mem_pool);
5540 	return rc;
5541 }
5542 
5543 /**
5544  * lpfc_sli4_alloc_resource_identifiers - Allocate all SLI4 resource extents.
5545  * @phba: Pointer to HBA context object.
5546  *
5547  * This function allocates all SLI4 resource identifiers.
5548  **/
5549 int
5550 lpfc_sli4_alloc_resource_identifiers(struct lpfc_hba *phba)
5551 {
5552 	int i, rc, error = 0;
5553 	uint16_t count, base;
5554 	unsigned long longs;
5555 
5556 	if (!phba->sli4_hba.rpi_hdrs_in_use)
5557 		phba->sli4_hba.next_rpi = phba->sli4_hba.max_cfg_param.max_rpi;
5558 	if (phba->sli4_hba.extents_in_use) {
5559 		/*
5560 		 * The port supports resource extents. The XRI, VPI, VFI, RPI
5561 		 * resource extent count must be read and allocated before
5562 		 * provisioning the resource id arrays.
5563 		 */
5564 		if (bf_get(lpfc_idx_rsrc_rdy, &phba->sli4_hba.sli4_flags) ==
5565 		    LPFC_IDX_RSRC_RDY) {
5566 			/*
5567 			 * Extent-based resources are set - the driver could
5568 			 * be in a port reset. Figure out if any corrective
5569 			 * actions need to be taken.
5570 			 */
5571 			rc = lpfc_sli4_chk_avail_extnt_rsrc(phba,
5572 						 LPFC_RSC_TYPE_FCOE_VFI);
5573 			if (rc != 0)
5574 				error++;
5575 			rc = lpfc_sli4_chk_avail_extnt_rsrc(phba,
5576 						 LPFC_RSC_TYPE_FCOE_VPI);
5577 			if (rc != 0)
5578 				error++;
5579 			rc = lpfc_sli4_chk_avail_extnt_rsrc(phba,
5580 						 LPFC_RSC_TYPE_FCOE_XRI);
5581 			if (rc != 0)
5582 				error++;
5583 			rc = lpfc_sli4_chk_avail_extnt_rsrc(phba,
5584 						 LPFC_RSC_TYPE_FCOE_RPI);
5585 			if (rc != 0)
5586 				error++;
5587 
5588 			/*
5589 			 * It's possible that the number of resources
5590 			 * provided to this port instance changed between
5591 			 * resets.  Detect this condition and reallocate
5592 			 * resources.  Otherwise, there is no action.
5593 			 */
5594 			if (error) {
5595 				lpfc_printf_log(phba, KERN_INFO,
5596 						LOG_MBOX | LOG_INIT,
5597 						"2931 Detected extent resource "
5598 						"change.  Reallocating all "
5599 						"extents.\n");
5600 				rc = lpfc_sli4_dealloc_extent(phba,
5601 						 LPFC_RSC_TYPE_FCOE_VFI);
5602 				rc = lpfc_sli4_dealloc_extent(phba,
5603 						 LPFC_RSC_TYPE_FCOE_VPI);
5604 				rc = lpfc_sli4_dealloc_extent(phba,
5605 						 LPFC_RSC_TYPE_FCOE_XRI);
5606 				rc = lpfc_sli4_dealloc_extent(phba,
5607 						 LPFC_RSC_TYPE_FCOE_RPI);
5608 			} else
5609 				return 0;
5610 		}
5611 
5612 		rc = lpfc_sli4_alloc_extent(phba, LPFC_RSC_TYPE_FCOE_VFI);
5613 		if (unlikely(rc))
5614 			goto err_exit;
5615 
5616 		rc = lpfc_sli4_alloc_extent(phba, LPFC_RSC_TYPE_FCOE_VPI);
5617 		if (unlikely(rc))
5618 			goto err_exit;
5619 
5620 		rc = lpfc_sli4_alloc_extent(phba, LPFC_RSC_TYPE_FCOE_RPI);
5621 		if (unlikely(rc))
5622 			goto err_exit;
5623 
5624 		rc = lpfc_sli4_alloc_extent(phba, LPFC_RSC_TYPE_FCOE_XRI);
5625 		if (unlikely(rc))
5626 			goto err_exit;
5627 		bf_set(lpfc_idx_rsrc_rdy, &phba->sli4_hba.sli4_flags,
5628 		       LPFC_IDX_RSRC_RDY);
5629 		return rc;
5630 	} else {
5631 		/*
5632 		 * The port does not support resource extents.  The XRI, VPI,
5633 		 * VFI, RPI resource ids were determined from READ_CONFIG.
5634 		 * Just allocate the bitmasks and provision the resource id
5635 		 * arrays.  If a port reset is active, the resources don't
5636 		 * need any action - just exit.
5637 		 */
5638 		if (bf_get(lpfc_idx_rsrc_rdy, &phba->sli4_hba.sli4_flags) ==
5639 		    LPFC_IDX_RSRC_RDY) {
5640 			lpfc_sli4_dealloc_resource_identifiers(phba);
5641 			lpfc_sli4_remove_rpis(phba);
5642 		}
5643 		/* RPIs. */
5644 		count = phba->sli4_hba.max_cfg_param.max_rpi;
5645 		if (count <= 0) {
5646 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
5647 					"3279 Invalid provisioning of "
5648 					"rpi:%d\n", count);
5649 			rc = -EINVAL;
5650 			goto err_exit;
5651 		}
5652 		base = phba->sli4_hba.max_cfg_param.rpi_base;
5653 		longs = (count + BITS_PER_LONG - 1) / BITS_PER_LONG;
5654 		phba->sli4_hba.rpi_bmask = kzalloc(longs *
5655 						   sizeof(unsigned long),
5656 						   GFP_KERNEL);
5657 		if (unlikely(!phba->sli4_hba.rpi_bmask)) {
5658 			rc = -ENOMEM;
5659 			goto err_exit;
5660 		}
5661 		phba->sli4_hba.rpi_ids = kzalloc(count *
5662 						 sizeof(uint16_t),
5663 						 GFP_KERNEL);
5664 		if (unlikely(!phba->sli4_hba.rpi_ids)) {
5665 			rc = -ENOMEM;
5666 			goto free_rpi_bmask;
5667 		}
5668 
5669 		for (i = 0; i < count; i++)
5670 			phba->sli4_hba.rpi_ids[i] = base + i;
5671 
5672 		/* VPIs. */
5673 		count = phba->sli4_hba.max_cfg_param.max_vpi;
5674 		if (count <= 0) {
5675 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
5676 					"3280 Invalid provisioning of "
5677 					"vpi:%d\n", count);
5678 			rc = -EINVAL;
5679 			goto free_rpi_ids;
5680 		}
5681 		base = phba->sli4_hba.max_cfg_param.vpi_base;
5682 		longs = (count + BITS_PER_LONG - 1) / BITS_PER_LONG;
5683 		phba->vpi_bmask = kzalloc(longs *
5684 					  sizeof(unsigned long),
5685 					  GFP_KERNEL);
5686 		if (unlikely(!phba->vpi_bmask)) {
5687 			rc = -ENOMEM;
5688 			goto free_rpi_ids;
5689 		}
5690 		phba->vpi_ids = kzalloc(count *
5691 					sizeof(uint16_t),
5692 					GFP_KERNEL);
5693 		if (unlikely(!phba->vpi_ids)) {
5694 			rc = -ENOMEM;
5695 			goto free_vpi_bmask;
5696 		}
5697 
5698 		for (i = 0; i < count; i++)
5699 			phba->vpi_ids[i] = base + i;
5700 
5701 		/* XRIs. */
5702 		count = phba->sli4_hba.max_cfg_param.max_xri;
5703 		if (count <= 0) {
5704 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
5705 					"3281 Invalid provisioning of "
5706 					"xri:%d\n", count);
5707 			rc = -EINVAL;
5708 			goto free_vpi_ids;
5709 		}
5710 		base = phba->sli4_hba.max_cfg_param.xri_base;
5711 		longs = (count + BITS_PER_LONG - 1) / BITS_PER_LONG;
5712 		phba->sli4_hba.xri_bmask = kzalloc(longs *
5713 						   sizeof(unsigned long),
5714 						   GFP_KERNEL);
5715 		if (unlikely(!phba->sli4_hba.xri_bmask)) {
5716 			rc = -ENOMEM;
5717 			goto free_vpi_ids;
5718 		}
5719 		phba->sli4_hba.max_cfg_param.xri_used = 0;
5720 		phba->sli4_hba.xri_ids = kzalloc(count *
5721 						 sizeof(uint16_t),
5722 						 GFP_KERNEL);
5723 		if (unlikely(!phba->sli4_hba.xri_ids)) {
5724 			rc = -ENOMEM;
5725 			goto free_xri_bmask;
5726 		}
5727 
5728 		for (i = 0; i < count; i++)
5729 			phba->sli4_hba.xri_ids[i] = base + i;
5730 
5731 		/* VFIs. */
5732 		count = phba->sli4_hba.max_cfg_param.max_vfi;
5733 		if (count <= 0) {
5734 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
5735 					"3282 Invalid provisioning of "
5736 					"vfi:%d\n", count);
5737 			rc = -EINVAL;
5738 			goto free_xri_ids;
5739 		}
5740 		base = phba->sli4_hba.max_cfg_param.vfi_base;
5741 		longs = (count + BITS_PER_LONG - 1) / BITS_PER_LONG;
5742 		phba->sli4_hba.vfi_bmask = kzalloc(longs *
5743 						   sizeof(unsigned long),
5744 						   GFP_KERNEL);
5745 		if (unlikely(!phba->sli4_hba.vfi_bmask)) {
5746 			rc = -ENOMEM;
5747 			goto free_xri_ids;
5748 		}
5749 		phba->sli4_hba.vfi_ids = kzalloc(count *
5750 						 sizeof(uint16_t),
5751 						 GFP_KERNEL);
5752 		if (unlikely(!phba->sli4_hba.vfi_ids)) {
5753 			rc = -ENOMEM;
5754 			goto free_vfi_bmask;
5755 		}
5756 
5757 		for (i = 0; i < count; i++)
5758 			phba->sli4_hba.vfi_ids[i] = base + i;
5759 
5760 		/*
5761 		 * Mark all resources ready.  An HBA reset doesn't need
5762 		 * to reset the initialization.
5763 		 */
5764 		bf_set(lpfc_idx_rsrc_rdy, &phba->sli4_hba.sli4_flags,
5765 		       LPFC_IDX_RSRC_RDY);
5766 		return 0;
5767 	}
5768 
5769  free_vfi_bmask:
5770 	kfree(phba->sli4_hba.vfi_bmask);
5771  free_xri_ids:
5772 	kfree(phba->sli4_hba.xri_ids);
5773  free_xri_bmask:
5774 	kfree(phba->sli4_hba.xri_bmask);
5775  free_vpi_ids:
5776 	kfree(phba->vpi_ids);
5777  free_vpi_bmask:
5778 	kfree(phba->vpi_bmask);
5779  free_rpi_ids:
5780 	kfree(phba->sli4_hba.rpi_ids);
5781  free_rpi_bmask:
5782 	kfree(phba->sli4_hba.rpi_bmask);
5783  err_exit:
5784 	return rc;
5785 }
5786 
5787 /**
5788  * lpfc_sli4_dealloc_resource_identifiers - Deallocate all SLI4 resource extents.
5789  * @phba: Pointer to HBA context object.
5790  *
5791  * This function allocates the number of elements for the specified
5792  * resource type.
5793  **/
5794 int
5795 lpfc_sli4_dealloc_resource_identifiers(struct lpfc_hba *phba)
5796 {
5797 	if (phba->sli4_hba.extents_in_use) {
5798 		lpfc_sli4_dealloc_extent(phba, LPFC_RSC_TYPE_FCOE_VPI);
5799 		lpfc_sli4_dealloc_extent(phba, LPFC_RSC_TYPE_FCOE_RPI);
5800 		lpfc_sli4_dealloc_extent(phba, LPFC_RSC_TYPE_FCOE_XRI);
5801 		lpfc_sli4_dealloc_extent(phba, LPFC_RSC_TYPE_FCOE_VFI);
5802 	} else {
5803 		kfree(phba->vpi_bmask);
5804 		phba->sli4_hba.max_cfg_param.vpi_used = 0;
5805 		kfree(phba->vpi_ids);
5806 		bf_set(lpfc_vpi_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
5807 		kfree(phba->sli4_hba.xri_bmask);
5808 		kfree(phba->sli4_hba.xri_ids);
5809 		kfree(phba->sli4_hba.vfi_bmask);
5810 		kfree(phba->sli4_hba.vfi_ids);
5811 		bf_set(lpfc_vfi_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
5812 		bf_set(lpfc_idx_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
5813 	}
5814 
5815 	return 0;
5816 }
5817 
5818 /**
5819  * lpfc_sli4_get_allocated_extnts - Get the port's allocated extents.
5820  * @phba: Pointer to HBA context object.
5821  * @type: The resource extent type.
5822  * @extnt_count: buffer to hold port extent count response
5823  * @extnt_size: buffer to hold port extent size response.
5824  *
5825  * This function calls the port to read the host allocated extents
5826  * for a particular type.
5827  **/
5828 int
5829 lpfc_sli4_get_allocated_extnts(struct lpfc_hba *phba, uint16_t type,
5830 			       uint16_t *extnt_cnt, uint16_t *extnt_size)
5831 {
5832 	bool emb;
5833 	int rc = 0;
5834 	uint16_t curr_blks = 0;
5835 	uint32_t req_len, emb_len;
5836 	uint32_t alloc_len, mbox_tmo;
5837 	struct list_head *blk_list_head;
5838 	struct lpfc_rsrc_blks *rsrc_blk;
5839 	LPFC_MBOXQ_t *mbox;
5840 	void *virtaddr = NULL;
5841 	struct lpfc_mbx_nembed_rsrc_extent *n_rsrc;
5842 	struct lpfc_mbx_alloc_rsrc_extents *rsrc_ext;
5843 	union  lpfc_sli4_cfg_shdr *shdr;
5844 
5845 	switch (type) {
5846 	case LPFC_RSC_TYPE_FCOE_VPI:
5847 		blk_list_head = &phba->lpfc_vpi_blk_list;
5848 		break;
5849 	case LPFC_RSC_TYPE_FCOE_XRI:
5850 		blk_list_head = &phba->sli4_hba.lpfc_xri_blk_list;
5851 		break;
5852 	case LPFC_RSC_TYPE_FCOE_VFI:
5853 		blk_list_head = &phba->sli4_hba.lpfc_vfi_blk_list;
5854 		break;
5855 	case LPFC_RSC_TYPE_FCOE_RPI:
5856 		blk_list_head = &phba->sli4_hba.lpfc_rpi_blk_list;
5857 		break;
5858 	default:
5859 		return -EIO;
5860 	}
5861 
5862 	/* Count the number of extents currently allocatd for this type. */
5863 	list_for_each_entry(rsrc_blk, blk_list_head, list) {
5864 		if (curr_blks == 0) {
5865 			/*
5866 			 * The GET_ALLOCATED mailbox does not return the size,
5867 			 * just the count.  The size should be just the size
5868 			 * stored in the current allocated block and all sizes
5869 			 * for an extent type are the same so set the return
5870 			 * value now.
5871 			 */
5872 			*extnt_size = rsrc_blk->rsrc_size;
5873 		}
5874 		curr_blks++;
5875 	}
5876 
5877 	/* Calculate the total requested length of the dma memory. */
5878 	req_len = curr_blks * sizeof(uint16_t);
5879 
5880 	/*
5881 	 * Calculate the size of an embedded mailbox.  The uint32_t
5882 	 * accounts for extents-specific word.
5883 	 */
5884 	emb_len = sizeof(MAILBOX_t) - sizeof(struct mbox_header) -
5885 		sizeof(uint32_t);
5886 
5887 	/*
5888 	 * Presume the allocation and response will fit into an embedded
5889 	 * mailbox.  If not true, reconfigure to a non-embedded mailbox.
5890 	 */
5891 	emb = LPFC_SLI4_MBX_EMBED;
5892 	req_len = emb_len;
5893 	if (req_len > emb_len) {
5894 		req_len = curr_blks * sizeof(uint16_t) +
5895 			sizeof(union lpfc_sli4_cfg_shdr) +
5896 			sizeof(uint32_t);
5897 		emb = LPFC_SLI4_MBX_NEMBED;
5898 	}
5899 
5900 	mbox = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
5901 	if (!mbox)
5902 		return -ENOMEM;
5903 	memset(mbox, 0, sizeof(LPFC_MBOXQ_t));
5904 
5905 	alloc_len = lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
5906 				     LPFC_MBOX_OPCODE_GET_ALLOC_RSRC_EXTENT,
5907 				     req_len, emb);
5908 	if (alloc_len < req_len) {
5909 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
5910 			"2983 Allocated DMA memory size (x%x) is "
5911 			"less than the requested DMA memory "
5912 			"size (x%x)\n", alloc_len, req_len);
5913 		rc = -ENOMEM;
5914 		goto err_exit;
5915 	}
5916 	rc = lpfc_sli4_mbox_rsrc_extent(phba, mbox, curr_blks, type, emb);
5917 	if (unlikely(rc)) {
5918 		rc = -EIO;
5919 		goto err_exit;
5920 	}
5921 
5922 	if (!phba->sli4_hba.intr_enable)
5923 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
5924 	else {
5925 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
5926 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
5927 	}
5928 
5929 	if (unlikely(rc)) {
5930 		rc = -EIO;
5931 		goto err_exit;
5932 	}
5933 
5934 	/*
5935 	 * Figure out where the response is located.  Then get local pointers
5936 	 * to the response data.  The port does not guarantee to respond to
5937 	 * all extents counts request so update the local variable with the
5938 	 * allocated count from the port.
5939 	 */
5940 	if (emb == LPFC_SLI4_MBX_EMBED) {
5941 		rsrc_ext = &mbox->u.mqe.un.alloc_rsrc_extents;
5942 		shdr = &rsrc_ext->header.cfg_shdr;
5943 		*extnt_cnt = bf_get(lpfc_mbx_rsrc_cnt, &rsrc_ext->u.rsp);
5944 	} else {
5945 		virtaddr = mbox->sge_array->addr[0];
5946 		n_rsrc = (struct lpfc_mbx_nembed_rsrc_extent *) virtaddr;
5947 		shdr = &n_rsrc->cfg_shdr;
5948 		*extnt_cnt = bf_get(lpfc_mbx_rsrc_cnt, n_rsrc);
5949 	}
5950 
5951 	if (bf_get(lpfc_mbox_hdr_status, &shdr->response)) {
5952 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_INIT,
5953 			"2984 Failed to read allocated resources "
5954 			"for type %d - Status 0x%x Add'l Status 0x%x.\n",
5955 			type,
5956 			bf_get(lpfc_mbox_hdr_status, &shdr->response),
5957 			bf_get(lpfc_mbox_hdr_add_status, &shdr->response));
5958 		rc = -EIO;
5959 		goto err_exit;
5960 	}
5961  err_exit:
5962 	lpfc_sli4_mbox_cmd_free(phba, mbox);
5963 	return rc;
5964 }
5965 
5966 /**
5967  * lpfc_sli4_repost_els_sgl_list - Repsot the els buffers sgl pages as block
5968  * @phba: pointer to lpfc hba data structure.
5969  *
5970  * This routine walks the list of els buffers that have been allocated and
5971  * repost them to the port by using SGL block post. This is needed after a
5972  * pci_function_reset/warm_start or start. It attempts to construct blocks
5973  * of els buffer sgls which contains contiguous xris and uses the non-embedded
5974  * SGL block post mailbox commands to post them to the port. For single els
5975  * buffer sgl with non-contiguous xri, if any, it shall use embedded SGL post
5976  * mailbox command for posting.
5977  *
5978  * Returns: 0 = success, non-zero failure.
5979  **/
5980 static int
5981 lpfc_sli4_repost_els_sgl_list(struct lpfc_hba *phba)
5982 {
5983 	struct lpfc_sglq *sglq_entry = NULL;
5984 	struct lpfc_sglq *sglq_entry_next = NULL;
5985 	struct lpfc_sglq *sglq_entry_first = NULL;
5986 	int status, total_cnt, post_cnt = 0, num_posted = 0, block_cnt = 0;
5987 	int last_xritag = NO_XRI;
5988 	LIST_HEAD(prep_sgl_list);
5989 	LIST_HEAD(blck_sgl_list);
5990 	LIST_HEAD(allc_sgl_list);
5991 	LIST_HEAD(post_sgl_list);
5992 	LIST_HEAD(free_sgl_list);
5993 
5994 	spin_lock_irq(&phba->hbalock);
5995 	list_splice_init(&phba->sli4_hba.lpfc_sgl_list, &allc_sgl_list);
5996 	spin_unlock_irq(&phba->hbalock);
5997 
5998 	total_cnt = phba->sli4_hba.els_xri_cnt;
5999 	list_for_each_entry_safe(sglq_entry, sglq_entry_next,
6000 				 &allc_sgl_list, list) {
6001 		list_del_init(&sglq_entry->list);
6002 		block_cnt++;
6003 		if ((last_xritag != NO_XRI) &&
6004 		    (sglq_entry->sli4_xritag != last_xritag + 1)) {
6005 			/* a hole in xri block, form a sgl posting block */
6006 			list_splice_init(&prep_sgl_list, &blck_sgl_list);
6007 			post_cnt = block_cnt - 1;
6008 			/* prepare list for next posting block */
6009 			list_add_tail(&sglq_entry->list, &prep_sgl_list);
6010 			block_cnt = 1;
6011 		} else {
6012 			/* prepare list for next posting block */
6013 			list_add_tail(&sglq_entry->list, &prep_sgl_list);
6014 			/* enough sgls for non-embed sgl mbox command */
6015 			if (block_cnt == LPFC_NEMBED_MBOX_SGL_CNT) {
6016 				list_splice_init(&prep_sgl_list,
6017 						 &blck_sgl_list);
6018 				post_cnt = block_cnt;
6019 				block_cnt = 0;
6020 			}
6021 		}
6022 		num_posted++;
6023 
6024 		/* keep track of last sgl's xritag */
6025 		last_xritag = sglq_entry->sli4_xritag;
6026 
6027 		/* end of repost sgl list condition for els buffers */
6028 		if (num_posted == phba->sli4_hba.els_xri_cnt) {
6029 			if (post_cnt == 0) {
6030 				list_splice_init(&prep_sgl_list,
6031 						 &blck_sgl_list);
6032 				post_cnt = block_cnt;
6033 			} else if (block_cnt == 1) {
6034 				status = lpfc_sli4_post_sgl(phba,
6035 						sglq_entry->phys, 0,
6036 						sglq_entry->sli4_xritag);
6037 				if (!status) {
6038 					/* successful, put sgl to posted list */
6039 					list_add_tail(&sglq_entry->list,
6040 						      &post_sgl_list);
6041 				} else {
6042 					/* Failure, put sgl to free list */
6043 					lpfc_printf_log(phba, KERN_WARNING,
6044 						LOG_SLI,
6045 						"3159 Failed to post els "
6046 						"sgl, xritag:x%x\n",
6047 						sglq_entry->sli4_xritag);
6048 					list_add_tail(&sglq_entry->list,
6049 						      &free_sgl_list);
6050 					total_cnt--;
6051 				}
6052 			}
6053 		}
6054 
6055 		/* continue until a nembed page worth of sgls */
6056 		if (post_cnt == 0)
6057 			continue;
6058 
6059 		/* post the els buffer list sgls as a block */
6060 		status = lpfc_sli4_post_els_sgl_list(phba, &blck_sgl_list,
6061 						     post_cnt);
6062 
6063 		if (!status) {
6064 			/* success, put sgl list to posted sgl list */
6065 			list_splice_init(&blck_sgl_list, &post_sgl_list);
6066 		} else {
6067 			/* Failure, put sgl list to free sgl list */
6068 			sglq_entry_first = list_first_entry(&blck_sgl_list,
6069 							    struct lpfc_sglq,
6070 							    list);
6071 			lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
6072 					"3160 Failed to post els sgl-list, "
6073 					"xritag:x%x-x%x\n",
6074 					sglq_entry_first->sli4_xritag,
6075 					(sglq_entry_first->sli4_xritag +
6076 					 post_cnt - 1));
6077 			list_splice_init(&blck_sgl_list, &free_sgl_list);
6078 			total_cnt -= post_cnt;
6079 		}
6080 
6081 		/* don't reset xirtag due to hole in xri block */
6082 		if (block_cnt == 0)
6083 			last_xritag = NO_XRI;
6084 
6085 		/* reset els sgl post count for next round of posting */
6086 		post_cnt = 0;
6087 	}
6088 	/* update the number of XRIs posted for ELS */
6089 	phba->sli4_hba.els_xri_cnt = total_cnt;
6090 
6091 	/* free the els sgls failed to post */
6092 	lpfc_free_sgl_list(phba, &free_sgl_list);
6093 
6094 	/* push els sgls posted to the availble list */
6095 	if (!list_empty(&post_sgl_list)) {
6096 		spin_lock_irq(&phba->hbalock);
6097 		list_splice_init(&post_sgl_list,
6098 				 &phba->sli4_hba.lpfc_sgl_list);
6099 		spin_unlock_irq(&phba->hbalock);
6100 	} else {
6101 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
6102 				"3161 Failure to post els sgl to port.\n");
6103 		return -EIO;
6104 	}
6105 	return 0;
6106 }
6107 
6108 /**
6109  * lpfc_sli4_hba_setup - SLI4 device intialization PCI function
6110  * @phba: Pointer to HBA context object.
6111  *
6112  * This function is the main SLI4 device intialization PCI function. This
6113  * function is called by the HBA intialization code, HBA reset code and
6114  * HBA error attention handler code. Caller is not required to hold any
6115  * locks.
6116  **/
6117 int
6118 lpfc_sli4_hba_setup(struct lpfc_hba *phba)
6119 {
6120 	int rc;
6121 	LPFC_MBOXQ_t *mboxq;
6122 	struct lpfc_mqe *mqe;
6123 	uint8_t *vpd;
6124 	uint32_t vpd_size;
6125 	uint32_t ftr_rsp = 0;
6126 	struct Scsi_Host *shost = lpfc_shost_from_vport(phba->pport);
6127 	struct lpfc_vport *vport = phba->pport;
6128 	struct lpfc_dmabuf *mp;
6129 
6130 	/* Perform a PCI function reset to start from clean */
6131 	rc = lpfc_pci_function_reset(phba);
6132 	if (unlikely(rc))
6133 		return -ENODEV;
6134 
6135 	/* Check the HBA Host Status Register for readyness */
6136 	rc = lpfc_sli4_post_status_check(phba);
6137 	if (unlikely(rc))
6138 		return -ENODEV;
6139 	else {
6140 		spin_lock_irq(&phba->hbalock);
6141 		phba->sli.sli_flag |= LPFC_SLI_ACTIVE;
6142 		spin_unlock_irq(&phba->hbalock);
6143 	}
6144 
6145 	/*
6146 	 * Allocate a single mailbox container for initializing the
6147 	 * port.
6148 	 */
6149 	mboxq = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
6150 	if (!mboxq)
6151 		return -ENOMEM;
6152 
6153 	/* Issue READ_REV to collect vpd and FW information. */
6154 	vpd_size = SLI4_PAGE_SIZE;
6155 	vpd = kzalloc(vpd_size, GFP_KERNEL);
6156 	if (!vpd) {
6157 		rc = -ENOMEM;
6158 		goto out_free_mbox;
6159 	}
6160 
6161 	rc = lpfc_sli4_read_rev(phba, mboxq, vpd, &vpd_size);
6162 	if (unlikely(rc)) {
6163 		kfree(vpd);
6164 		goto out_free_mbox;
6165 	}
6166 	mqe = &mboxq->u.mqe;
6167 	phba->sli_rev = bf_get(lpfc_mbx_rd_rev_sli_lvl, &mqe->un.read_rev);
6168 	if (bf_get(lpfc_mbx_rd_rev_fcoe, &mqe->un.read_rev))
6169 		phba->hba_flag |= HBA_FCOE_MODE;
6170 	else
6171 		phba->hba_flag &= ~HBA_FCOE_MODE;
6172 
6173 	if (bf_get(lpfc_mbx_rd_rev_cee_ver, &mqe->un.read_rev) ==
6174 		LPFC_DCBX_CEE_MODE)
6175 		phba->hba_flag |= HBA_FIP_SUPPORT;
6176 	else
6177 		phba->hba_flag &= ~HBA_FIP_SUPPORT;
6178 
6179 	phba->hba_flag &= ~HBA_FCP_IOQ_FLUSH;
6180 
6181 	if (phba->sli_rev != LPFC_SLI_REV4) {
6182 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6183 			"0376 READ_REV Error. SLI Level %d "
6184 			"FCoE enabled %d\n",
6185 			phba->sli_rev, phba->hba_flag & HBA_FCOE_MODE);
6186 		rc = -EIO;
6187 		kfree(vpd);
6188 		goto out_free_mbox;
6189 	}
6190 
6191 	/*
6192 	 * Continue initialization with default values even if driver failed
6193 	 * to read FCoE param config regions, only read parameters if the
6194 	 * board is FCoE
6195 	 */
6196 	if (phba->hba_flag & HBA_FCOE_MODE &&
6197 	    lpfc_sli4_read_fcoe_params(phba))
6198 		lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX | LOG_INIT,
6199 			"2570 Failed to read FCoE parameters\n");
6200 
6201 	/*
6202 	 * Retrieve sli4 device physical port name, failure of doing it
6203 	 * is considered as non-fatal.
6204 	 */
6205 	rc = lpfc_sli4_retrieve_pport_name(phba);
6206 	if (!rc)
6207 		lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
6208 				"3080 Successful retrieving SLI4 device "
6209 				"physical port name: %s.\n", phba->Port);
6210 
6211 	/*
6212 	 * Evaluate the read rev and vpd data. Populate the driver
6213 	 * state with the results. If this routine fails, the failure
6214 	 * is not fatal as the driver will use generic values.
6215 	 */
6216 	rc = lpfc_parse_vpd(phba, vpd, vpd_size);
6217 	if (unlikely(!rc)) {
6218 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6219 				"0377 Error %d parsing vpd. "
6220 				"Using defaults.\n", rc);
6221 		rc = 0;
6222 	}
6223 	kfree(vpd);
6224 
6225 	/* Save information as VPD data */
6226 	phba->vpd.rev.biuRev = mqe->un.read_rev.first_hw_rev;
6227 	phba->vpd.rev.smRev = mqe->un.read_rev.second_hw_rev;
6228 	phba->vpd.rev.endecRev = mqe->un.read_rev.third_hw_rev;
6229 	phba->vpd.rev.fcphHigh = bf_get(lpfc_mbx_rd_rev_fcph_high,
6230 					 &mqe->un.read_rev);
6231 	phba->vpd.rev.fcphLow = bf_get(lpfc_mbx_rd_rev_fcph_low,
6232 				       &mqe->un.read_rev);
6233 	phba->vpd.rev.feaLevelHigh = bf_get(lpfc_mbx_rd_rev_ftr_lvl_high,
6234 					    &mqe->un.read_rev);
6235 	phba->vpd.rev.feaLevelLow = bf_get(lpfc_mbx_rd_rev_ftr_lvl_low,
6236 					   &mqe->un.read_rev);
6237 	phba->vpd.rev.sli1FwRev = mqe->un.read_rev.fw_id_rev;
6238 	memcpy(phba->vpd.rev.sli1FwName, mqe->un.read_rev.fw_name, 16);
6239 	phba->vpd.rev.sli2FwRev = mqe->un.read_rev.ulp_fw_id_rev;
6240 	memcpy(phba->vpd.rev.sli2FwName, mqe->un.read_rev.ulp_fw_name, 16);
6241 	phba->vpd.rev.opFwRev = mqe->un.read_rev.fw_id_rev;
6242 	memcpy(phba->vpd.rev.opFwName, mqe->un.read_rev.fw_name, 16);
6243 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
6244 			"(%d):0380 READ_REV Status x%x "
6245 			"fw_rev:%s fcphHi:%x fcphLo:%x flHi:%x flLo:%x\n",
6246 			mboxq->vport ? mboxq->vport->vpi : 0,
6247 			bf_get(lpfc_mqe_status, mqe),
6248 			phba->vpd.rev.opFwName,
6249 			phba->vpd.rev.fcphHigh, phba->vpd.rev.fcphLow,
6250 			phba->vpd.rev.feaLevelHigh, phba->vpd.rev.feaLevelLow);
6251 
6252 	/*
6253 	 * Discover the port's supported feature set and match it against the
6254 	 * hosts requests.
6255 	 */
6256 	lpfc_request_features(phba, mboxq);
6257 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
6258 	if (unlikely(rc)) {
6259 		rc = -EIO;
6260 		goto out_free_mbox;
6261 	}
6262 
6263 	/*
6264 	 * The port must support FCP initiator mode as this is the
6265 	 * only mode running in the host.
6266 	 */
6267 	if (!(bf_get(lpfc_mbx_rq_ftr_rsp_fcpi, &mqe->un.req_ftrs))) {
6268 		lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX | LOG_SLI,
6269 				"0378 No support for fcpi mode.\n");
6270 		ftr_rsp++;
6271 	}
6272 	if (bf_get(lpfc_mbx_rq_ftr_rsp_perfh, &mqe->un.req_ftrs))
6273 		phba->sli3_options |= LPFC_SLI4_PERFH_ENABLED;
6274 	else
6275 		phba->sli3_options &= ~LPFC_SLI4_PERFH_ENABLED;
6276 	/*
6277 	 * If the port cannot support the host's requested features
6278 	 * then turn off the global config parameters to disable the
6279 	 * feature in the driver.  This is not a fatal error.
6280 	 */
6281 	phba->sli3_options &= ~LPFC_SLI3_BG_ENABLED;
6282 	if (phba->cfg_enable_bg) {
6283 		if (bf_get(lpfc_mbx_rq_ftr_rsp_dif, &mqe->un.req_ftrs))
6284 			phba->sli3_options |= LPFC_SLI3_BG_ENABLED;
6285 		else
6286 			ftr_rsp++;
6287 	}
6288 
6289 	if (phba->max_vpi && phba->cfg_enable_npiv &&
6290 	    !(bf_get(lpfc_mbx_rq_ftr_rsp_npiv, &mqe->un.req_ftrs)))
6291 		ftr_rsp++;
6292 
6293 	if (ftr_rsp) {
6294 		lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX | LOG_SLI,
6295 				"0379 Feature Mismatch Data: x%08x %08x "
6296 				"x%x x%x x%x\n", mqe->un.req_ftrs.word2,
6297 				mqe->un.req_ftrs.word3, phba->cfg_enable_bg,
6298 				phba->cfg_enable_npiv, phba->max_vpi);
6299 		if (!(bf_get(lpfc_mbx_rq_ftr_rsp_dif, &mqe->un.req_ftrs)))
6300 			phba->cfg_enable_bg = 0;
6301 		if (!(bf_get(lpfc_mbx_rq_ftr_rsp_npiv, &mqe->un.req_ftrs)))
6302 			phba->cfg_enable_npiv = 0;
6303 	}
6304 
6305 	/* These SLI3 features are assumed in SLI4 */
6306 	spin_lock_irq(&phba->hbalock);
6307 	phba->sli3_options |= (LPFC_SLI3_NPIV_ENABLED | LPFC_SLI3_HBQ_ENABLED);
6308 	spin_unlock_irq(&phba->hbalock);
6309 
6310 	/*
6311 	 * Allocate all resources (xri,rpi,vpi,vfi) now.  Subsequent
6312 	 * calls depends on these resources to complete port setup.
6313 	 */
6314 	rc = lpfc_sli4_alloc_resource_identifiers(phba);
6315 	if (rc) {
6316 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6317 				"2920 Failed to alloc Resource IDs "
6318 				"rc = x%x\n", rc);
6319 		goto out_free_mbox;
6320 	}
6321 
6322 	/* Read the port's service parameters. */
6323 	rc = lpfc_read_sparam(phba, mboxq, vport->vpi);
6324 	if (rc) {
6325 		phba->link_state = LPFC_HBA_ERROR;
6326 		rc = -ENOMEM;
6327 		goto out_free_mbox;
6328 	}
6329 
6330 	mboxq->vport = vport;
6331 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
6332 	mp = (struct lpfc_dmabuf *) mboxq->context1;
6333 	if (rc == MBX_SUCCESS) {
6334 		memcpy(&vport->fc_sparam, mp->virt, sizeof(struct serv_parm));
6335 		rc = 0;
6336 	}
6337 
6338 	/*
6339 	 * This memory was allocated by the lpfc_read_sparam routine. Release
6340 	 * it to the mbuf pool.
6341 	 */
6342 	lpfc_mbuf_free(phba, mp->virt, mp->phys);
6343 	kfree(mp);
6344 	mboxq->context1 = NULL;
6345 	if (unlikely(rc)) {
6346 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6347 				"0382 READ_SPARAM command failed "
6348 				"status %d, mbxStatus x%x\n",
6349 				rc, bf_get(lpfc_mqe_status, mqe));
6350 		phba->link_state = LPFC_HBA_ERROR;
6351 		rc = -EIO;
6352 		goto out_free_mbox;
6353 	}
6354 
6355 	lpfc_update_vport_wwn(vport);
6356 
6357 	/* Update the fc_host data structures with new wwn. */
6358 	fc_host_node_name(shost) = wwn_to_u64(vport->fc_nodename.u.wwn);
6359 	fc_host_port_name(shost) = wwn_to_u64(vport->fc_portname.u.wwn);
6360 
6361 	/* update host els and scsi xri-sgl sizes and mappings */
6362 	rc = lpfc_sli4_xri_sgl_update(phba);
6363 	if (unlikely(rc)) {
6364 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6365 				"1400 Failed to update xri-sgl size and "
6366 				"mapping: %d\n", rc);
6367 		goto out_free_mbox;
6368 	}
6369 
6370 	/* register the els sgl pool to the port */
6371 	rc = lpfc_sli4_repost_els_sgl_list(phba);
6372 	if (unlikely(rc)) {
6373 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6374 				"0582 Error %d during els sgl post "
6375 				"operation\n", rc);
6376 		rc = -ENODEV;
6377 		goto out_free_mbox;
6378 	}
6379 
6380 	/* register the allocated scsi sgl pool to the port */
6381 	rc = lpfc_sli4_repost_scsi_sgl_list(phba);
6382 	if (unlikely(rc)) {
6383 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6384 				"0383 Error %d during scsi sgl post "
6385 				"operation\n", rc);
6386 		/* Some Scsi buffers were moved to the abort scsi list */
6387 		/* A pci function reset will repost them */
6388 		rc = -ENODEV;
6389 		goto out_free_mbox;
6390 	}
6391 
6392 	/* Post the rpi header region to the device. */
6393 	rc = lpfc_sli4_post_all_rpi_hdrs(phba);
6394 	if (unlikely(rc)) {
6395 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6396 				"0393 Error %d during rpi post operation\n",
6397 				rc);
6398 		rc = -ENODEV;
6399 		goto out_free_mbox;
6400 	}
6401 	lpfc_sli4_node_prep(phba);
6402 
6403 	/* Create all the SLI4 queues */
6404 	rc = lpfc_sli4_queue_create(phba);
6405 	if (rc) {
6406 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
6407 				"3089 Failed to allocate queues\n");
6408 		rc = -ENODEV;
6409 		goto out_stop_timers;
6410 	}
6411 	/* Set up all the queues to the device */
6412 	rc = lpfc_sli4_queue_setup(phba);
6413 	if (unlikely(rc)) {
6414 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6415 				"0381 Error %d during queue setup.\n ", rc);
6416 		goto out_destroy_queue;
6417 	}
6418 
6419 	/* Arm the CQs and then EQs on device */
6420 	lpfc_sli4_arm_cqeq_intr(phba);
6421 
6422 	/* Indicate device interrupt mode */
6423 	phba->sli4_hba.intr_enable = 1;
6424 
6425 	/* Allow asynchronous mailbox command to go through */
6426 	spin_lock_irq(&phba->hbalock);
6427 	phba->sli.sli_flag &= ~LPFC_SLI_ASYNC_MBX_BLK;
6428 	spin_unlock_irq(&phba->hbalock);
6429 
6430 	/* Post receive buffers to the device */
6431 	lpfc_sli4_rb_setup(phba);
6432 
6433 	/* Reset HBA FCF states after HBA reset */
6434 	phba->fcf.fcf_flag = 0;
6435 	phba->fcf.current_rec.flag = 0;
6436 
6437 	/* Start the ELS watchdog timer */
6438 	mod_timer(&vport->els_tmofunc,
6439 		  jiffies + msecs_to_jiffies(1000 * (phba->fc_ratov * 2)));
6440 
6441 	/* Start heart beat timer */
6442 	mod_timer(&phba->hb_tmofunc,
6443 		  jiffies + msecs_to_jiffies(1000 * LPFC_HB_MBOX_INTERVAL));
6444 	phba->hb_outstanding = 0;
6445 	phba->last_completion_time = jiffies;
6446 
6447 	/* Start error attention (ERATT) polling timer */
6448 	mod_timer(&phba->eratt_poll,
6449 		  jiffies + msecs_to_jiffies(1000 * LPFC_ERATT_POLL_INTERVAL));
6450 
6451 	/* Enable PCIe device Advanced Error Reporting (AER) if configured */
6452 	if (phba->cfg_aer_support == 1 && !(phba->hba_flag & HBA_AER_ENABLED)) {
6453 		rc = pci_enable_pcie_error_reporting(phba->pcidev);
6454 		if (!rc) {
6455 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
6456 					"2829 This device supports "
6457 					"Advanced Error Reporting (AER)\n");
6458 			spin_lock_irq(&phba->hbalock);
6459 			phba->hba_flag |= HBA_AER_ENABLED;
6460 			spin_unlock_irq(&phba->hbalock);
6461 		} else {
6462 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
6463 					"2830 This device does not support "
6464 					"Advanced Error Reporting (AER)\n");
6465 			phba->cfg_aer_support = 0;
6466 		}
6467 		rc = 0;
6468 	}
6469 
6470 	if (!(phba->hba_flag & HBA_FCOE_MODE)) {
6471 		/*
6472 		 * The FC Port needs to register FCFI (index 0)
6473 		 */
6474 		lpfc_reg_fcfi(phba, mboxq);
6475 		mboxq->vport = phba->pport;
6476 		rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
6477 		if (rc != MBX_SUCCESS)
6478 			goto out_unset_queue;
6479 		rc = 0;
6480 		phba->fcf.fcfi = bf_get(lpfc_reg_fcfi_fcfi,
6481 					&mboxq->u.mqe.un.reg_fcfi);
6482 
6483 		/* Check if the port is configured to be disabled */
6484 		lpfc_sli_read_link_ste(phba);
6485 	}
6486 
6487 	/*
6488 	 * The port is ready, set the host's link state to LINK_DOWN
6489 	 * in preparation for link interrupts.
6490 	 */
6491 	spin_lock_irq(&phba->hbalock);
6492 	phba->link_state = LPFC_LINK_DOWN;
6493 	spin_unlock_irq(&phba->hbalock);
6494 	if (!(phba->hba_flag & HBA_FCOE_MODE) &&
6495 	    (phba->hba_flag & LINK_DISABLED)) {
6496 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT | LOG_SLI,
6497 				"3103 Adapter Link is disabled.\n");
6498 		lpfc_down_link(phba, mboxq);
6499 		rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
6500 		if (rc != MBX_SUCCESS) {
6501 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT | LOG_SLI,
6502 					"3104 Adapter failed to issue "
6503 					"DOWN_LINK mbox cmd, rc:x%x\n", rc);
6504 			goto out_unset_queue;
6505 		}
6506 	} else if (phba->cfg_suppress_link_up == LPFC_INITIALIZE_LINK) {
6507 		/* don't perform init_link on SLI4 FC port loopback test */
6508 		if (!(phba->link_flag & LS_LOOPBACK_MODE)) {
6509 			rc = phba->lpfc_hba_init_link(phba, MBX_NOWAIT);
6510 			if (rc)
6511 				goto out_unset_queue;
6512 		}
6513 	}
6514 	mempool_free(mboxq, phba->mbox_mem_pool);
6515 	return rc;
6516 out_unset_queue:
6517 	/* Unset all the queues set up in this routine when error out */
6518 	lpfc_sli4_queue_unset(phba);
6519 out_destroy_queue:
6520 	lpfc_sli4_queue_destroy(phba);
6521 out_stop_timers:
6522 	lpfc_stop_hba_timers(phba);
6523 out_free_mbox:
6524 	mempool_free(mboxq, phba->mbox_mem_pool);
6525 	return rc;
6526 }
6527 
6528 /**
6529  * lpfc_mbox_timeout - Timeout call back function for mbox timer
6530  * @ptr: context object - pointer to hba structure.
6531  *
6532  * This is the callback function for mailbox timer. The mailbox
6533  * timer is armed when a new mailbox command is issued and the timer
6534  * is deleted when the mailbox complete. The function is called by
6535  * the kernel timer code when a mailbox does not complete within
6536  * expected time. This function wakes up the worker thread to
6537  * process the mailbox timeout and returns. All the processing is
6538  * done by the worker thread function lpfc_mbox_timeout_handler.
6539  **/
6540 void
6541 lpfc_mbox_timeout(unsigned long ptr)
6542 {
6543 	struct lpfc_hba  *phba = (struct lpfc_hba *) ptr;
6544 	unsigned long iflag;
6545 	uint32_t tmo_posted;
6546 
6547 	spin_lock_irqsave(&phba->pport->work_port_lock, iflag);
6548 	tmo_posted = phba->pport->work_port_events & WORKER_MBOX_TMO;
6549 	if (!tmo_posted)
6550 		phba->pport->work_port_events |= WORKER_MBOX_TMO;
6551 	spin_unlock_irqrestore(&phba->pport->work_port_lock, iflag);
6552 
6553 	if (!tmo_posted)
6554 		lpfc_worker_wake_up(phba);
6555 	return;
6556 }
6557 
6558 
6559 /**
6560  * lpfc_mbox_timeout_handler - Worker thread function to handle mailbox timeout
6561  * @phba: Pointer to HBA context object.
6562  *
6563  * This function is called from worker thread when a mailbox command times out.
6564  * The caller is not required to hold any locks. This function will reset the
6565  * HBA and recover all the pending commands.
6566  **/
6567 void
6568 lpfc_mbox_timeout_handler(struct lpfc_hba *phba)
6569 {
6570 	LPFC_MBOXQ_t *pmbox = phba->sli.mbox_active;
6571 	MAILBOX_t *mb = &pmbox->u.mb;
6572 	struct lpfc_sli *psli = &phba->sli;
6573 	struct lpfc_sli_ring *pring;
6574 
6575 	/* Check the pmbox pointer first.  There is a race condition
6576 	 * between the mbox timeout handler getting executed in the
6577 	 * worklist and the mailbox actually completing. When this
6578 	 * race condition occurs, the mbox_active will be NULL.
6579 	 */
6580 	spin_lock_irq(&phba->hbalock);
6581 	if (pmbox == NULL) {
6582 		lpfc_printf_log(phba, KERN_WARNING,
6583 				LOG_MBOX | LOG_SLI,
6584 				"0353 Active Mailbox cleared - mailbox timeout "
6585 				"exiting\n");
6586 		spin_unlock_irq(&phba->hbalock);
6587 		return;
6588 	}
6589 
6590 	/* Mbox cmd <mbxCommand> timeout */
6591 	lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6592 			"0310 Mailbox command x%x timeout Data: x%x x%x x%p\n",
6593 			mb->mbxCommand,
6594 			phba->pport->port_state,
6595 			phba->sli.sli_flag,
6596 			phba->sli.mbox_active);
6597 	spin_unlock_irq(&phba->hbalock);
6598 
6599 	/* Setting state unknown so lpfc_sli_abort_iocb_ring
6600 	 * would get IOCB_ERROR from lpfc_sli_issue_iocb, allowing
6601 	 * it to fail all outstanding SCSI IO.
6602 	 */
6603 	spin_lock_irq(&phba->pport->work_port_lock);
6604 	phba->pport->work_port_events &= ~WORKER_MBOX_TMO;
6605 	spin_unlock_irq(&phba->pport->work_port_lock);
6606 	spin_lock_irq(&phba->hbalock);
6607 	phba->link_state = LPFC_LINK_UNKNOWN;
6608 	psli->sli_flag &= ~LPFC_SLI_ACTIVE;
6609 	spin_unlock_irq(&phba->hbalock);
6610 
6611 	pring = &psli->ring[psli->fcp_ring];
6612 	lpfc_sli_abort_iocb_ring(phba, pring);
6613 
6614 	lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6615 			"0345 Resetting board due to mailbox timeout\n");
6616 
6617 	/* Reset the HBA device */
6618 	lpfc_reset_hba(phba);
6619 }
6620 
6621 /**
6622  * lpfc_sli_issue_mbox_s3 - Issue an SLI3 mailbox command to firmware
6623  * @phba: Pointer to HBA context object.
6624  * @pmbox: Pointer to mailbox object.
6625  * @flag: Flag indicating how the mailbox need to be processed.
6626  *
6627  * This function is called by discovery code and HBA management code
6628  * to submit a mailbox command to firmware with SLI-3 interface spec. This
6629  * function gets the hbalock to protect the data structures.
6630  * The mailbox command can be submitted in polling mode, in which case
6631  * this function will wait in a polling loop for the completion of the
6632  * mailbox.
6633  * If the mailbox is submitted in no_wait mode (not polling) the
6634  * function will submit the command and returns immediately without waiting
6635  * for the mailbox completion. The no_wait is supported only when HBA
6636  * is in SLI2/SLI3 mode - interrupts are enabled.
6637  * The SLI interface allows only one mailbox pending at a time. If the
6638  * mailbox is issued in polling mode and there is already a mailbox
6639  * pending, then the function will return an error. If the mailbox is issued
6640  * in NO_WAIT mode and there is a mailbox pending already, the function
6641  * will return MBX_BUSY after queuing the mailbox into mailbox queue.
6642  * The sli layer owns the mailbox object until the completion of mailbox
6643  * command if this function return MBX_BUSY or MBX_SUCCESS. For all other
6644  * return codes the caller owns the mailbox command after the return of
6645  * the function.
6646  **/
6647 static int
6648 lpfc_sli_issue_mbox_s3(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmbox,
6649 		       uint32_t flag)
6650 {
6651 	MAILBOX_t *mbx;
6652 	struct lpfc_sli *psli = &phba->sli;
6653 	uint32_t status, evtctr;
6654 	uint32_t ha_copy, hc_copy;
6655 	int i;
6656 	unsigned long timeout;
6657 	unsigned long drvr_flag = 0;
6658 	uint32_t word0, ldata;
6659 	void __iomem *to_slim;
6660 	int processing_queue = 0;
6661 
6662 	spin_lock_irqsave(&phba->hbalock, drvr_flag);
6663 	if (!pmbox) {
6664 		phba->sli.sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
6665 		/* processing mbox queue from intr_handler */
6666 		if (unlikely(psli->sli_flag & LPFC_SLI_ASYNC_MBX_BLK)) {
6667 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6668 			return MBX_SUCCESS;
6669 		}
6670 		processing_queue = 1;
6671 		pmbox = lpfc_mbox_get(phba);
6672 		if (!pmbox) {
6673 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6674 			return MBX_SUCCESS;
6675 		}
6676 	}
6677 
6678 	if (pmbox->mbox_cmpl && pmbox->mbox_cmpl != lpfc_sli_def_mbox_cmpl &&
6679 		pmbox->mbox_cmpl != lpfc_sli_wake_mbox_wait) {
6680 		if(!pmbox->vport) {
6681 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6682 			lpfc_printf_log(phba, KERN_ERR,
6683 					LOG_MBOX | LOG_VPORT,
6684 					"1806 Mbox x%x failed. No vport\n",
6685 					pmbox->u.mb.mbxCommand);
6686 			dump_stack();
6687 			goto out_not_finished;
6688 		}
6689 	}
6690 
6691 	/* If the PCI channel is in offline state, do not post mbox. */
6692 	if (unlikely(pci_channel_offline(phba->pcidev))) {
6693 		spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6694 		goto out_not_finished;
6695 	}
6696 
6697 	/* If HBA has a deferred error attention, fail the iocb. */
6698 	if (unlikely(phba->hba_flag & DEFER_ERATT)) {
6699 		spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6700 		goto out_not_finished;
6701 	}
6702 
6703 	psli = &phba->sli;
6704 
6705 	mbx = &pmbox->u.mb;
6706 	status = MBX_SUCCESS;
6707 
6708 	if (phba->link_state == LPFC_HBA_ERROR) {
6709 		spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6710 
6711 		/* Mbox command <mbxCommand> cannot issue */
6712 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6713 				"(%d):0311 Mailbox command x%x cannot "
6714 				"issue Data: x%x x%x\n",
6715 				pmbox->vport ? pmbox->vport->vpi : 0,
6716 				pmbox->u.mb.mbxCommand, psli->sli_flag, flag);
6717 		goto out_not_finished;
6718 	}
6719 
6720 	if (mbx->mbxCommand != MBX_KILL_BOARD && flag & MBX_NOWAIT) {
6721 		if (lpfc_readl(phba->HCregaddr, &hc_copy) ||
6722 			!(hc_copy & HC_MBINT_ENA)) {
6723 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6724 			lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6725 				"(%d):2528 Mailbox command x%x cannot "
6726 				"issue Data: x%x x%x\n",
6727 				pmbox->vport ? pmbox->vport->vpi : 0,
6728 				pmbox->u.mb.mbxCommand, psli->sli_flag, flag);
6729 			goto out_not_finished;
6730 		}
6731 	}
6732 
6733 	if (psli->sli_flag & LPFC_SLI_MBOX_ACTIVE) {
6734 		/* Polling for a mbox command when another one is already active
6735 		 * is not allowed in SLI. Also, the driver must have established
6736 		 * SLI2 mode to queue and process multiple mbox commands.
6737 		 */
6738 
6739 		if (flag & MBX_POLL) {
6740 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6741 
6742 			/* Mbox command <mbxCommand> cannot issue */
6743 			lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6744 					"(%d):2529 Mailbox command x%x "
6745 					"cannot issue Data: x%x x%x\n",
6746 					pmbox->vport ? pmbox->vport->vpi : 0,
6747 					pmbox->u.mb.mbxCommand,
6748 					psli->sli_flag, flag);
6749 			goto out_not_finished;
6750 		}
6751 
6752 		if (!(psli->sli_flag & LPFC_SLI_ACTIVE)) {
6753 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6754 			/* Mbox command <mbxCommand> cannot issue */
6755 			lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6756 					"(%d):2530 Mailbox command x%x "
6757 					"cannot issue Data: x%x x%x\n",
6758 					pmbox->vport ? pmbox->vport->vpi : 0,
6759 					pmbox->u.mb.mbxCommand,
6760 					psli->sli_flag, flag);
6761 			goto out_not_finished;
6762 		}
6763 
6764 		/* Another mailbox command is still being processed, queue this
6765 		 * command to be processed later.
6766 		 */
6767 		lpfc_mbox_put(phba, pmbox);
6768 
6769 		/* Mbox cmd issue - BUSY */
6770 		lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
6771 				"(%d):0308 Mbox cmd issue - BUSY Data: "
6772 				"x%x x%x x%x x%x\n",
6773 				pmbox->vport ? pmbox->vport->vpi : 0xffffff,
6774 				mbx->mbxCommand, phba->pport->port_state,
6775 				psli->sli_flag, flag);
6776 
6777 		psli->slistat.mbox_busy++;
6778 		spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6779 
6780 		if (pmbox->vport) {
6781 			lpfc_debugfs_disc_trc(pmbox->vport,
6782 				LPFC_DISC_TRC_MBOX_VPORT,
6783 				"MBOX Bsy vport:  cmd:x%x mb:x%x x%x",
6784 				(uint32_t)mbx->mbxCommand,
6785 				mbx->un.varWords[0], mbx->un.varWords[1]);
6786 		}
6787 		else {
6788 			lpfc_debugfs_disc_trc(phba->pport,
6789 				LPFC_DISC_TRC_MBOX,
6790 				"MBOX Bsy:        cmd:x%x mb:x%x x%x",
6791 				(uint32_t)mbx->mbxCommand,
6792 				mbx->un.varWords[0], mbx->un.varWords[1]);
6793 		}
6794 
6795 		return MBX_BUSY;
6796 	}
6797 
6798 	psli->sli_flag |= LPFC_SLI_MBOX_ACTIVE;
6799 
6800 	/* If we are not polling, we MUST be in SLI2 mode */
6801 	if (flag != MBX_POLL) {
6802 		if (!(psli->sli_flag & LPFC_SLI_ACTIVE) &&
6803 		    (mbx->mbxCommand != MBX_KILL_BOARD)) {
6804 			psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
6805 			spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
6806 			/* Mbox command <mbxCommand> cannot issue */
6807 			lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
6808 					"(%d):2531 Mailbox command x%x "
6809 					"cannot issue Data: x%x x%x\n",
6810 					pmbox->vport ? pmbox->vport->vpi : 0,
6811 					pmbox->u.mb.mbxCommand,
6812 					psli->sli_flag, flag);
6813 			goto out_not_finished;
6814 		}
6815 		/* timeout active mbox command */
6816 		timeout = msecs_to_jiffies(lpfc_mbox_tmo_val(phba, pmbox) *
6817 					   1000);
6818 		mod_timer(&psli->mbox_tmo, jiffies + timeout);
6819 	}
6820 
6821 	/* Mailbox cmd <cmd> issue */
6822 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
6823 			"(%d):0309 Mailbox cmd x%x issue Data: x%x x%x "
6824 			"x%x\n",
6825 			pmbox->vport ? pmbox->vport->vpi : 0,
6826 			mbx->mbxCommand, phba->pport->port_state,
6827 			psli->sli_flag, flag);
6828 
6829 	if (mbx->mbxCommand != MBX_HEARTBEAT) {
6830 		if (pmbox->vport) {
6831 			lpfc_debugfs_disc_trc(pmbox->vport,
6832 				LPFC_DISC_TRC_MBOX_VPORT,
6833 				"MBOX Send vport: cmd:x%x mb:x%x x%x",
6834 				(uint32_t)mbx->mbxCommand,
6835 				mbx->un.varWords[0], mbx->un.varWords[1]);
6836 		}
6837 		else {
6838 			lpfc_debugfs_disc_trc(phba->pport,
6839 				LPFC_DISC_TRC_MBOX,
6840 				"MBOX Send:       cmd:x%x mb:x%x x%x",
6841 				(uint32_t)mbx->mbxCommand,
6842 				mbx->un.varWords[0], mbx->un.varWords[1]);
6843 		}
6844 	}
6845 
6846 	psli->slistat.mbox_cmd++;
6847 	evtctr = psli->slistat.mbox_event;
6848 
6849 	/* next set own bit for the adapter and copy over command word */
6850 	mbx->mbxOwner = OWN_CHIP;
6851 
6852 	if (psli->sli_flag & LPFC_SLI_ACTIVE) {
6853 		/* Populate mbox extension offset word. */
6854 		if (pmbox->in_ext_byte_len || pmbox->out_ext_byte_len) {
6855 			*(((uint32_t *)mbx) + pmbox->mbox_offset_word)
6856 				= (uint8_t *)phba->mbox_ext
6857 				  - (uint8_t *)phba->mbox;
6858 		}
6859 
6860 		/* Copy the mailbox extension data */
6861 		if (pmbox->in_ext_byte_len && pmbox->context2) {
6862 			lpfc_sli_pcimem_bcopy(pmbox->context2,
6863 				(uint8_t *)phba->mbox_ext,
6864 				pmbox->in_ext_byte_len);
6865 		}
6866 		/* Copy command data to host SLIM area */
6867 		lpfc_sli_pcimem_bcopy(mbx, phba->mbox, MAILBOX_CMD_SIZE);
6868 	} else {
6869 		/* Populate mbox extension offset word. */
6870 		if (pmbox->in_ext_byte_len || pmbox->out_ext_byte_len)
6871 			*(((uint32_t *)mbx) + pmbox->mbox_offset_word)
6872 				= MAILBOX_HBA_EXT_OFFSET;
6873 
6874 		/* Copy the mailbox extension data */
6875 		if (pmbox->in_ext_byte_len && pmbox->context2) {
6876 			lpfc_memcpy_to_slim(phba->MBslimaddr +
6877 				MAILBOX_HBA_EXT_OFFSET,
6878 				pmbox->context2, pmbox->in_ext_byte_len);
6879 
6880 		}
6881 		if (mbx->mbxCommand == MBX_CONFIG_PORT) {
6882 			/* copy command data into host mbox for cmpl */
6883 			lpfc_sli_pcimem_bcopy(mbx, phba->mbox, MAILBOX_CMD_SIZE);
6884 		}
6885 
6886 		/* First copy mbox command data to HBA SLIM, skip past first
6887 		   word */
6888 		to_slim = phba->MBslimaddr + sizeof (uint32_t);
6889 		lpfc_memcpy_to_slim(to_slim, &mbx->un.varWords[0],
6890 			    MAILBOX_CMD_SIZE - sizeof (uint32_t));
6891 
6892 		/* Next copy over first word, with mbxOwner set */
6893 		ldata = *((uint32_t *)mbx);
6894 		to_slim = phba->MBslimaddr;
6895 		writel(ldata, to_slim);
6896 		readl(to_slim); /* flush */
6897 
6898 		if (mbx->mbxCommand == MBX_CONFIG_PORT) {
6899 			/* switch over to host mailbox */
6900 			psli->sli_flag |= LPFC_SLI_ACTIVE;
6901 		}
6902 	}
6903 
6904 	wmb();
6905 
6906 	switch (flag) {
6907 	case MBX_NOWAIT:
6908 		/* Set up reference to mailbox command */
6909 		psli->mbox_active = pmbox;
6910 		/* Interrupt board to do it */
6911 		writel(CA_MBATT, phba->CAregaddr);
6912 		readl(phba->CAregaddr); /* flush */
6913 		/* Don't wait for it to finish, just return */
6914 		break;
6915 
6916 	case MBX_POLL:
6917 		/* Set up null reference to mailbox command */
6918 		psli->mbox_active = NULL;
6919 		/* Interrupt board to do it */
6920 		writel(CA_MBATT, phba->CAregaddr);
6921 		readl(phba->CAregaddr); /* flush */
6922 
6923 		if (psli->sli_flag & LPFC_SLI_ACTIVE) {
6924 			/* First read mbox status word */
6925 			word0 = *((uint32_t *)phba->mbox);
6926 			word0 = le32_to_cpu(word0);
6927 		} else {
6928 			/* First read mbox status word */
6929 			if (lpfc_readl(phba->MBslimaddr, &word0)) {
6930 				spin_unlock_irqrestore(&phba->hbalock,
6931 						       drvr_flag);
6932 				goto out_not_finished;
6933 			}
6934 		}
6935 
6936 		/* Read the HBA Host Attention Register */
6937 		if (lpfc_readl(phba->HAregaddr, &ha_copy)) {
6938 			spin_unlock_irqrestore(&phba->hbalock,
6939 						       drvr_flag);
6940 			goto out_not_finished;
6941 		}
6942 		timeout = msecs_to_jiffies(lpfc_mbox_tmo_val(phba, pmbox) *
6943 							1000) + jiffies;
6944 		i = 0;
6945 		/* Wait for command to complete */
6946 		while (((word0 & OWN_CHIP) == OWN_CHIP) ||
6947 		       (!(ha_copy & HA_MBATT) &&
6948 			(phba->link_state > LPFC_WARM_START))) {
6949 			if (time_after(jiffies, timeout)) {
6950 				psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
6951 				spin_unlock_irqrestore(&phba->hbalock,
6952 						       drvr_flag);
6953 				goto out_not_finished;
6954 			}
6955 
6956 			/* Check if we took a mbox interrupt while we were
6957 			   polling */
6958 			if (((word0 & OWN_CHIP) != OWN_CHIP)
6959 			    && (evtctr != psli->slistat.mbox_event))
6960 				break;
6961 
6962 			if (i++ > 10) {
6963 				spin_unlock_irqrestore(&phba->hbalock,
6964 						       drvr_flag);
6965 				msleep(1);
6966 				spin_lock_irqsave(&phba->hbalock, drvr_flag);
6967 			}
6968 
6969 			if (psli->sli_flag & LPFC_SLI_ACTIVE) {
6970 				/* First copy command data */
6971 				word0 = *((uint32_t *)phba->mbox);
6972 				word0 = le32_to_cpu(word0);
6973 				if (mbx->mbxCommand == MBX_CONFIG_PORT) {
6974 					MAILBOX_t *slimmb;
6975 					uint32_t slimword0;
6976 					/* Check real SLIM for any errors */
6977 					slimword0 = readl(phba->MBslimaddr);
6978 					slimmb = (MAILBOX_t *) & slimword0;
6979 					if (((slimword0 & OWN_CHIP) != OWN_CHIP)
6980 					    && slimmb->mbxStatus) {
6981 						psli->sli_flag &=
6982 						    ~LPFC_SLI_ACTIVE;
6983 						word0 = slimword0;
6984 					}
6985 				}
6986 			} else {
6987 				/* First copy command data */
6988 				word0 = readl(phba->MBslimaddr);
6989 			}
6990 			/* Read the HBA Host Attention Register */
6991 			if (lpfc_readl(phba->HAregaddr, &ha_copy)) {
6992 				spin_unlock_irqrestore(&phba->hbalock,
6993 						       drvr_flag);
6994 				goto out_not_finished;
6995 			}
6996 		}
6997 
6998 		if (psli->sli_flag & LPFC_SLI_ACTIVE) {
6999 			/* copy results back to user */
7000 			lpfc_sli_pcimem_bcopy(phba->mbox, mbx, MAILBOX_CMD_SIZE);
7001 			/* Copy the mailbox extension data */
7002 			if (pmbox->out_ext_byte_len && pmbox->context2) {
7003 				lpfc_sli_pcimem_bcopy(phba->mbox_ext,
7004 						      pmbox->context2,
7005 						      pmbox->out_ext_byte_len);
7006 			}
7007 		} else {
7008 			/* First copy command data */
7009 			lpfc_memcpy_from_slim(mbx, phba->MBslimaddr,
7010 							MAILBOX_CMD_SIZE);
7011 			/* Copy the mailbox extension data */
7012 			if (pmbox->out_ext_byte_len && pmbox->context2) {
7013 				lpfc_memcpy_from_slim(pmbox->context2,
7014 					phba->MBslimaddr +
7015 					MAILBOX_HBA_EXT_OFFSET,
7016 					pmbox->out_ext_byte_len);
7017 			}
7018 		}
7019 
7020 		writel(HA_MBATT, phba->HAregaddr);
7021 		readl(phba->HAregaddr); /* flush */
7022 
7023 		psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
7024 		status = mbx->mbxStatus;
7025 	}
7026 
7027 	spin_unlock_irqrestore(&phba->hbalock, drvr_flag);
7028 	return status;
7029 
7030 out_not_finished:
7031 	if (processing_queue) {
7032 		pmbox->u.mb.mbxStatus = MBX_NOT_FINISHED;
7033 		lpfc_mbox_cmpl_put(phba, pmbox);
7034 	}
7035 	return MBX_NOT_FINISHED;
7036 }
7037 
7038 /**
7039  * lpfc_sli4_async_mbox_block - Block posting SLI4 asynchronous mailbox command
7040  * @phba: Pointer to HBA context object.
7041  *
7042  * The function blocks the posting of SLI4 asynchronous mailbox commands from
7043  * the driver internal pending mailbox queue. It will then try to wait out the
7044  * possible outstanding mailbox command before return.
7045  *
7046  * Returns:
7047  * 	0 - the outstanding mailbox command completed; otherwise, the wait for
7048  * 	the outstanding mailbox command timed out.
7049  **/
7050 static int
7051 lpfc_sli4_async_mbox_block(struct lpfc_hba *phba)
7052 {
7053 	struct lpfc_sli *psli = &phba->sli;
7054 	int rc = 0;
7055 	unsigned long timeout = 0;
7056 
7057 	/* Mark the asynchronous mailbox command posting as blocked */
7058 	spin_lock_irq(&phba->hbalock);
7059 	psli->sli_flag |= LPFC_SLI_ASYNC_MBX_BLK;
7060 	/* Determine how long we might wait for the active mailbox
7061 	 * command to be gracefully completed by firmware.
7062 	 */
7063 	if (phba->sli.mbox_active)
7064 		timeout = msecs_to_jiffies(lpfc_mbox_tmo_val(phba,
7065 						phba->sli.mbox_active) *
7066 						1000) + jiffies;
7067 	spin_unlock_irq(&phba->hbalock);
7068 
7069 	/* Wait for the outstnading mailbox command to complete */
7070 	while (phba->sli.mbox_active) {
7071 		/* Check active mailbox complete status every 2ms */
7072 		msleep(2);
7073 		if (time_after(jiffies, timeout)) {
7074 			/* Timeout, marked the outstanding cmd not complete */
7075 			rc = 1;
7076 			break;
7077 		}
7078 	}
7079 
7080 	/* Can not cleanly block async mailbox command, fails it */
7081 	if (rc) {
7082 		spin_lock_irq(&phba->hbalock);
7083 		psli->sli_flag &= ~LPFC_SLI_ASYNC_MBX_BLK;
7084 		spin_unlock_irq(&phba->hbalock);
7085 	}
7086 	return rc;
7087 }
7088 
7089 /**
7090  * lpfc_sli4_async_mbox_unblock - Block posting SLI4 async mailbox command
7091  * @phba: Pointer to HBA context object.
7092  *
7093  * The function unblocks and resume posting of SLI4 asynchronous mailbox
7094  * commands from the driver internal pending mailbox queue. It makes sure
7095  * that there is no outstanding mailbox command before resuming posting
7096  * asynchronous mailbox commands. If, for any reason, there is outstanding
7097  * mailbox command, it will try to wait it out before resuming asynchronous
7098  * mailbox command posting.
7099  **/
7100 static void
7101 lpfc_sli4_async_mbox_unblock(struct lpfc_hba *phba)
7102 {
7103 	struct lpfc_sli *psli = &phba->sli;
7104 
7105 	spin_lock_irq(&phba->hbalock);
7106 	if (!(psli->sli_flag & LPFC_SLI_ASYNC_MBX_BLK)) {
7107 		/* Asynchronous mailbox posting is not blocked, do nothing */
7108 		spin_unlock_irq(&phba->hbalock);
7109 		return;
7110 	}
7111 
7112 	/* Outstanding synchronous mailbox command is guaranteed to be done,
7113 	 * successful or timeout, after timing-out the outstanding mailbox
7114 	 * command shall always be removed, so just unblock posting async
7115 	 * mailbox command and resume
7116 	 */
7117 	psli->sli_flag &= ~LPFC_SLI_ASYNC_MBX_BLK;
7118 	spin_unlock_irq(&phba->hbalock);
7119 
7120 	/* wake up worker thread to post asynchronlous mailbox command */
7121 	lpfc_worker_wake_up(phba);
7122 }
7123 
7124 /**
7125  * lpfc_sli4_wait_bmbx_ready - Wait for bootstrap mailbox register ready
7126  * @phba: Pointer to HBA context object.
7127  * @mboxq: Pointer to mailbox object.
7128  *
7129  * The function waits for the bootstrap mailbox register ready bit from
7130  * port for twice the regular mailbox command timeout value.
7131  *
7132  *      0 - no timeout on waiting for bootstrap mailbox register ready.
7133  *      MBXERR_ERROR - wait for bootstrap mailbox register timed out.
7134  **/
7135 static int
7136 lpfc_sli4_wait_bmbx_ready(struct lpfc_hba *phba, LPFC_MBOXQ_t *mboxq)
7137 {
7138 	uint32_t db_ready;
7139 	unsigned long timeout;
7140 	struct lpfc_register bmbx_reg;
7141 
7142 	timeout = msecs_to_jiffies(lpfc_mbox_tmo_val(phba, mboxq)
7143 				   * 1000) + jiffies;
7144 
7145 	do {
7146 		bmbx_reg.word0 = readl(phba->sli4_hba.BMBXregaddr);
7147 		db_ready = bf_get(lpfc_bmbx_rdy, &bmbx_reg);
7148 		if (!db_ready)
7149 			msleep(2);
7150 
7151 		if (time_after(jiffies, timeout))
7152 			return MBXERR_ERROR;
7153 	} while (!db_ready);
7154 
7155 	return 0;
7156 }
7157 
7158 /**
7159  * lpfc_sli4_post_sync_mbox - Post an SLI4 mailbox to the bootstrap mailbox
7160  * @phba: Pointer to HBA context object.
7161  * @mboxq: Pointer to mailbox object.
7162  *
7163  * The function posts a mailbox to the port.  The mailbox is expected
7164  * to be comletely filled in and ready for the port to operate on it.
7165  * This routine executes a synchronous completion operation on the
7166  * mailbox by polling for its completion.
7167  *
7168  * The caller must not be holding any locks when calling this routine.
7169  *
7170  * Returns:
7171  *	MBX_SUCCESS - mailbox posted successfully
7172  *	Any of the MBX error values.
7173  **/
7174 static int
7175 lpfc_sli4_post_sync_mbox(struct lpfc_hba *phba, LPFC_MBOXQ_t *mboxq)
7176 {
7177 	int rc = MBX_SUCCESS;
7178 	unsigned long iflag;
7179 	uint32_t mcqe_status;
7180 	uint32_t mbx_cmnd;
7181 	struct lpfc_sli *psli = &phba->sli;
7182 	struct lpfc_mqe *mb = &mboxq->u.mqe;
7183 	struct lpfc_bmbx_create *mbox_rgn;
7184 	struct dma_address *dma_address;
7185 
7186 	/*
7187 	 * Only one mailbox can be active to the bootstrap mailbox region
7188 	 * at a time and there is no queueing provided.
7189 	 */
7190 	spin_lock_irqsave(&phba->hbalock, iflag);
7191 	if (psli->sli_flag & LPFC_SLI_MBOX_ACTIVE) {
7192 		spin_unlock_irqrestore(&phba->hbalock, iflag);
7193 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
7194 				"(%d):2532 Mailbox command x%x (x%x/x%x) "
7195 				"cannot issue Data: x%x x%x\n",
7196 				mboxq->vport ? mboxq->vport->vpi : 0,
7197 				mboxq->u.mb.mbxCommand,
7198 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7199 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7200 				psli->sli_flag, MBX_POLL);
7201 		return MBXERR_ERROR;
7202 	}
7203 	/* The server grabs the token and owns it until release */
7204 	psli->sli_flag |= LPFC_SLI_MBOX_ACTIVE;
7205 	phba->sli.mbox_active = mboxq;
7206 	spin_unlock_irqrestore(&phba->hbalock, iflag);
7207 
7208 	/* wait for bootstrap mbox register for readyness */
7209 	rc = lpfc_sli4_wait_bmbx_ready(phba, mboxq);
7210 	if (rc)
7211 		goto exit;
7212 
7213 	/*
7214 	 * Initialize the bootstrap memory region to avoid stale data areas
7215 	 * in the mailbox post.  Then copy the caller's mailbox contents to
7216 	 * the bmbx mailbox region.
7217 	 */
7218 	mbx_cmnd = bf_get(lpfc_mqe_command, mb);
7219 	memset(phba->sli4_hba.bmbx.avirt, 0, sizeof(struct lpfc_bmbx_create));
7220 	lpfc_sli_pcimem_bcopy(mb, phba->sli4_hba.bmbx.avirt,
7221 			      sizeof(struct lpfc_mqe));
7222 
7223 	/* Post the high mailbox dma address to the port and wait for ready. */
7224 	dma_address = &phba->sli4_hba.bmbx.dma_address;
7225 	writel(dma_address->addr_hi, phba->sli4_hba.BMBXregaddr);
7226 
7227 	/* wait for bootstrap mbox register for hi-address write done */
7228 	rc = lpfc_sli4_wait_bmbx_ready(phba, mboxq);
7229 	if (rc)
7230 		goto exit;
7231 
7232 	/* Post the low mailbox dma address to the port. */
7233 	writel(dma_address->addr_lo, phba->sli4_hba.BMBXregaddr);
7234 
7235 	/* wait for bootstrap mbox register for low address write done */
7236 	rc = lpfc_sli4_wait_bmbx_ready(phba, mboxq);
7237 	if (rc)
7238 		goto exit;
7239 
7240 	/*
7241 	 * Read the CQ to ensure the mailbox has completed.
7242 	 * If so, update the mailbox status so that the upper layers
7243 	 * can complete the request normally.
7244 	 */
7245 	lpfc_sli_pcimem_bcopy(phba->sli4_hba.bmbx.avirt, mb,
7246 			      sizeof(struct lpfc_mqe));
7247 	mbox_rgn = (struct lpfc_bmbx_create *) phba->sli4_hba.bmbx.avirt;
7248 	lpfc_sli_pcimem_bcopy(&mbox_rgn->mcqe, &mboxq->mcqe,
7249 			      sizeof(struct lpfc_mcqe));
7250 	mcqe_status = bf_get(lpfc_mcqe_status, &mbox_rgn->mcqe);
7251 	/*
7252 	 * When the CQE status indicates a failure and the mailbox status
7253 	 * indicates success then copy the CQE status into the mailbox status
7254 	 * (and prefix it with x4000).
7255 	 */
7256 	if (mcqe_status != MB_CQE_STATUS_SUCCESS) {
7257 		if (bf_get(lpfc_mqe_status, mb) == MBX_SUCCESS)
7258 			bf_set(lpfc_mqe_status, mb,
7259 			       (LPFC_MBX_ERROR_RANGE | mcqe_status));
7260 		rc = MBXERR_ERROR;
7261 	} else
7262 		lpfc_sli4_swap_str(phba, mboxq);
7263 
7264 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
7265 			"(%d):0356 Mailbox cmd x%x (x%x/x%x) Status x%x "
7266 			"Data: x%x x%x x%x x%x x%x x%x x%x x%x x%x x%x x%x"
7267 			" x%x x%x CQ: x%x x%x x%x x%x\n",
7268 			mboxq->vport ? mboxq->vport->vpi : 0, mbx_cmnd,
7269 			lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7270 			lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7271 			bf_get(lpfc_mqe_status, mb),
7272 			mb->un.mb_words[0], mb->un.mb_words[1],
7273 			mb->un.mb_words[2], mb->un.mb_words[3],
7274 			mb->un.mb_words[4], mb->un.mb_words[5],
7275 			mb->un.mb_words[6], mb->un.mb_words[7],
7276 			mb->un.mb_words[8], mb->un.mb_words[9],
7277 			mb->un.mb_words[10], mb->un.mb_words[11],
7278 			mb->un.mb_words[12], mboxq->mcqe.word0,
7279 			mboxq->mcqe.mcqe_tag0, 	mboxq->mcqe.mcqe_tag1,
7280 			mboxq->mcqe.trailer);
7281 exit:
7282 	/* We are holding the token, no needed for lock when release */
7283 	spin_lock_irqsave(&phba->hbalock, iflag);
7284 	psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
7285 	phba->sli.mbox_active = NULL;
7286 	spin_unlock_irqrestore(&phba->hbalock, iflag);
7287 	return rc;
7288 }
7289 
7290 /**
7291  * lpfc_sli_issue_mbox_s4 - Issue an SLI4 mailbox command to firmware
7292  * @phba: Pointer to HBA context object.
7293  * @pmbox: Pointer to mailbox object.
7294  * @flag: Flag indicating how the mailbox need to be processed.
7295  *
7296  * This function is called by discovery code and HBA management code to submit
7297  * a mailbox command to firmware with SLI-4 interface spec.
7298  *
7299  * Return codes the caller owns the mailbox command after the return of the
7300  * function.
7301  **/
7302 static int
7303 lpfc_sli_issue_mbox_s4(struct lpfc_hba *phba, LPFC_MBOXQ_t *mboxq,
7304 		       uint32_t flag)
7305 {
7306 	struct lpfc_sli *psli = &phba->sli;
7307 	unsigned long iflags;
7308 	int rc;
7309 
7310 	/* dump from issue mailbox command if setup */
7311 	lpfc_idiag_mbxacc_dump_issue_mbox(phba, &mboxq->u.mb);
7312 
7313 	rc = lpfc_mbox_dev_check(phba);
7314 	if (unlikely(rc)) {
7315 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
7316 				"(%d):2544 Mailbox command x%x (x%x/x%x) "
7317 				"cannot issue Data: x%x x%x\n",
7318 				mboxq->vport ? mboxq->vport->vpi : 0,
7319 				mboxq->u.mb.mbxCommand,
7320 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7321 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7322 				psli->sli_flag, flag);
7323 		goto out_not_finished;
7324 	}
7325 
7326 	/* Detect polling mode and jump to a handler */
7327 	if (!phba->sli4_hba.intr_enable) {
7328 		if (flag == MBX_POLL)
7329 			rc = lpfc_sli4_post_sync_mbox(phba, mboxq);
7330 		else
7331 			rc = -EIO;
7332 		if (rc != MBX_SUCCESS)
7333 			lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX | LOG_SLI,
7334 					"(%d):2541 Mailbox command x%x "
7335 					"(x%x/x%x) failure: "
7336 					"mqe_sta: x%x mcqe_sta: x%x/x%x "
7337 					"Data: x%x x%x\n,",
7338 					mboxq->vport ? mboxq->vport->vpi : 0,
7339 					mboxq->u.mb.mbxCommand,
7340 					lpfc_sli_config_mbox_subsys_get(phba,
7341 									mboxq),
7342 					lpfc_sli_config_mbox_opcode_get(phba,
7343 									mboxq),
7344 					bf_get(lpfc_mqe_status, &mboxq->u.mqe),
7345 					bf_get(lpfc_mcqe_status, &mboxq->mcqe),
7346 					bf_get(lpfc_mcqe_ext_status,
7347 					       &mboxq->mcqe),
7348 					psli->sli_flag, flag);
7349 		return rc;
7350 	} else if (flag == MBX_POLL) {
7351 		lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX | LOG_SLI,
7352 				"(%d):2542 Try to issue mailbox command "
7353 				"x%x (x%x/x%x) synchronously ahead of async"
7354 				"mailbox command queue: x%x x%x\n",
7355 				mboxq->vport ? mboxq->vport->vpi : 0,
7356 				mboxq->u.mb.mbxCommand,
7357 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7358 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7359 				psli->sli_flag, flag);
7360 		/* Try to block the asynchronous mailbox posting */
7361 		rc = lpfc_sli4_async_mbox_block(phba);
7362 		if (!rc) {
7363 			/* Successfully blocked, now issue sync mbox cmd */
7364 			rc = lpfc_sli4_post_sync_mbox(phba, mboxq);
7365 			if (rc != MBX_SUCCESS)
7366 				lpfc_printf_log(phba, KERN_WARNING,
7367 					LOG_MBOX | LOG_SLI,
7368 					"(%d):2597 Sync Mailbox command "
7369 					"x%x (x%x/x%x) failure: "
7370 					"mqe_sta: x%x mcqe_sta: x%x/x%x "
7371 					"Data: x%x x%x\n,",
7372 					mboxq->vport ? mboxq->vport->vpi : 0,
7373 					mboxq->u.mb.mbxCommand,
7374 					lpfc_sli_config_mbox_subsys_get(phba,
7375 									mboxq),
7376 					lpfc_sli_config_mbox_opcode_get(phba,
7377 									mboxq),
7378 					bf_get(lpfc_mqe_status, &mboxq->u.mqe),
7379 					bf_get(lpfc_mcqe_status, &mboxq->mcqe),
7380 					bf_get(lpfc_mcqe_ext_status,
7381 					       &mboxq->mcqe),
7382 					psli->sli_flag, flag);
7383 			/* Unblock the async mailbox posting afterward */
7384 			lpfc_sli4_async_mbox_unblock(phba);
7385 		}
7386 		return rc;
7387 	}
7388 
7389 	/* Now, interrupt mode asynchrous mailbox command */
7390 	rc = lpfc_mbox_cmd_check(phba, mboxq);
7391 	if (rc) {
7392 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
7393 				"(%d):2543 Mailbox command x%x (x%x/x%x) "
7394 				"cannot issue Data: x%x x%x\n",
7395 				mboxq->vport ? mboxq->vport->vpi : 0,
7396 				mboxq->u.mb.mbxCommand,
7397 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7398 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7399 				psli->sli_flag, flag);
7400 		goto out_not_finished;
7401 	}
7402 
7403 	/* Put the mailbox command to the driver internal FIFO */
7404 	psli->slistat.mbox_busy++;
7405 	spin_lock_irqsave(&phba->hbalock, iflags);
7406 	lpfc_mbox_put(phba, mboxq);
7407 	spin_unlock_irqrestore(&phba->hbalock, iflags);
7408 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
7409 			"(%d):0354 Mbox cmd issue - Enqueue Data: "
7410 			"x%x (x%x/x%x) x%x x%x x%x\n",
7411 			mboxq->vport ? mboxq->vport->vpi : 0xffffff,
7412 			bf_get(lpfc_mqe_command, &mboxq->u.mqe),
7413 			lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7414 			lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7415 			phba->pport->port_state,
7416 			psli->sli_flag, MBX_NOWAIT);
7417 	/* Wake up worker thread to transport mailbox command from head */
7418 	lpfc_worker_wake_up(phba);
7419 
7420 	return MBX_BUSY;
7421 
7422 out_not_finished:
7423 	return MBX_NOT_FINISHED;
7424 }
7425 
7426 /**
7427  * lpfc_sli4_post_async_mbox - Post an SLI4 mailbox command to device
7428  * @phba: Pointer to HBA context object.
7429  *
7430  * This function is called by worker thread to send a mailbox command to
7431  * SLI4 HBA firmware.
7432  *
7433  **/
7434 int
7435 lpfc_sli4_post_async_mbox(struct lpfc_hba *phba)
7436 {
7437 	struct lpfc_sli *psli = &phba->sli;
7438 	LPFC_MBOXQ_t *mboxq;
7439 	int rc = MBX_SUCCESS;
7440 	unsigned long iflags;
7441 	struct lpfc_mqe *mqe;
7442 	uint32_t mbx_cmnd;
7443 
7444 	/* Check interrupt mode before post async mailbox command */
7445 	if (unlikely(!phba->sli4_hba.intr_enable))
7446 		return MBX_NOT_FINISHED;
7447 
7448 	/* Check for mailbox command service token */
7449 	spin_lock_irqsave(&phba->hbalock, iflags);
7450 	if (unlikely(psli->sli_flag & LPFC_SLI_ASYNC_MBX_BLK)) {
7451 		spin_unlock_irqrestore(&phba->hbalock, iflags);
7452 		return MBX_NOT_FINISHED;
7453 	}
7454 	if (psli->sli_flag & LPFC_SLI_MBOX_ACTIVE) {
7455 		spin_unlock_irqrestore(&phba->hbalock, iflags);
7456 		return MBX_NOT_FINISHED;
7457 	}
7458 	if (unlikely(phba->sli.mbox_active)) {
7459 		spin_unlock_irqrestore(&phba->hbalock, iflags);
7460 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
7461 				"0384 There is pending active mailbox cmd\n");
7462 		return MBX_NOT_FINISHED;
7463 	}
7464 	/* Take the mailbox command service token */
7465 	psli->sli_flag |= LPFC_SLI_MBOX_ACTIVE;
7466 
7467 	/* Get the next mailbox command from head of queue */
7468 	mboxq = lpfc_mbox_get(phba);
7469 
7470 	/* If no more mailbox command waiting for post, we're done */
7471 	if (!mboxq) {
7472 		psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
7473 		spin_unlock_irqrestore(&phba->hbalock, iflags);
7474 		return MBX_SUCCESS;
7475 	}
7476 	phba->sli.mbox_active = mboxq;
7477 	spin_unlock_irqrestore(&phba->hbalock, iflags);
7478 
7479 	/* Check device readiness for posting mailbox command */
7480 	rc = lpfc_mbox_dev_check(phba);
7481 	if (unlikely(rc))
7482 		/* Driver clean routine will clean up pending mailbox */
7483 		goto out_not_finished;
7484 
7485 	/* Prepare the mbox command to be posted */
7486 	mqe = &mboxq->u.mqe;
7487 	mbx_cmnd = bf_get(lpfc_mqe_command, mqe);
7488 
7489 	/* Start timer for the mbox_tmo and log some mailbox post messages */
7490 	mod_timer(&psli->mbox_tmo, (jiffies +
7491 		  msecs_to_jiffies(1000 * lpfc_mbox_tmo_val(phba, mboxq))));
7492 
7493 	lpfc_printf_log(phba, KERN_INFO, LOG_MBOX | LOG_SLI,
7494 			"(%d):0355 Mailbox cmd x%x (x%x/x%x) issue Data: "
7495 			"x%x x%x\n",
7496 			mboxq->vport ? mboxq->vport->vpi : 0, mbx_cmnd,
7497 			lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7498 			lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7499 			phba->pport->port_state, psli->sli_flag);
7500 
7501 	if (mbx_cmnd != MBX_HEARTBEAT) {
7502 		if (mboxq->vport) {
7503 			lpfc_debugfs_disc_trc(mboxq->vport,
7504 				LPFC_DISC_TRC_MBOX_VPORT,
7505 				"MBOX Send vport: cmd:x%x mb:x%x x%x",
7506 				mbx_cmnd, mqe->un.mb_words[0],
7507 				mqe->un.mb_words[1]);
7508 		} else {
7509 			lpfc_debugfs_disc_trc(phba->pport,
7510 				LPFC_DISC_TRC_MBOX,
7511 				"MBOX Send: cmd:x%x mb:x%x x%x",
7512 				mbx_cmnd, mqe->un.mb_words[0],
7513 				mqe->un.mb_words[1]);
7514 		}
7515 	}
7516 	psli->slistat.mbox_cmd++;
7517 
7518 	/* Post the mailbox command to the port */
7519 	rc = lpfc_sli4_mq_put(phba->sli4_hba.mbx_wq, mqe);
7520 	if (rc != MBX_SUCCESS) {
7521 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX | LOG_SLI,
7522 				"(%d):2533 Mailbox command x%x (x%x/x%x) "
7523 				"cannot issue Data: x%x x%x\n",
7524 				mboxq->vport ? mboxq->vport->vpi : 0,
7525 				mboxq->u.mb.mbxCommand,
7526 				lpfc_sli_config_mbox_subsys_get(phba, mboxq),
7527 				lpfc_sli_config_mbox_opcode_get(phba, mboxq),
7528 				psli->sli_flag, MBX_NOWAIT);
7529 		goto out_not_finished;
7530 	}
7531 
7532 	return rc;
7533 
7534 out_not_finished:
7535 	spin_lock_irqsave(&phba->hbalock, iflags);
7536 	if (phba->sli.mbox_active) {
7537 		mboxq->u.mb.mbxStatus = MBX_NOT_FINISHED;
7538 		__lpfc_mbox_cmpl_put(phba, mboxq);
7539 		/* Release the token */
7540 		psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
7541 		phba->sli.mbox_active = NULL;
7542 	}
7543 	spin_unlock_irqrestore(&phba->hbalock, iflags);
7544 
7545 	return MBX_NOT_FINISHED;
7546 }
7547 
7548 /**
7549  * lpfc_sli_issue_mbox - Wrapper func for issuing mailbox command
7550  * @phba: Pointer to HBA context object.
7551  * @pmbox: Pointer to mailbox object.
7552  * @flag: Flag indicating how the mailbox need to be processed.
7553  *
7554  * This routine wraps the actual SLI3 or SLI4 mailbox issuing routine from
7555  * the API jump table function pointer from the lpfc_hba struct.
7556  *
7557  * Return codes the caller owns the mailbox command after the return of the
7558  * function.
7559  **/
7560 int
7561 lpfc_sli_issue_mbox(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmbox, uint32_t flag)
7562 {
7563 	return phba->lpfc_sli_issue_mbox(phba, pmbox, flag);
7564 }
7565 
7566 /**
7567  * lpfc_mbox_api_table_setup - Set up mbox api function jump table
7568  * @phba: The hba struct for which this call is being executed.
7569  * @dev_grp: The HBA PCI-Device group number.
7570  *
7571  * This routine sets up the mbox interface API function jump table in @phba
7572  * struct.
7573  * Returns: 0 - success, -ENODEV - failure.
7574  **/
7575 int
7576 lpfc_mbox_api_table_setup(struct lpfc_hba *phba, uint8_t dev_grp)
7577 {
7578 
7579 	switch (dev_grp) {
7580 	case LPFC_PCI_DEV_LP:
7581 		phba->lpfc_sli_issue_mbox = lpfc_sli_issue_mbox_s3;
7582 		phba->lpfc_sli_handle_slow_ring_event =
7583 				lpfc_sli_handle_slow_ring_event_s3;
7584 		phba->lpfc_sli_hbq_to_firmware = lpfc_sli_hbq_to_firmware_s3;
7585 		phba->lpfc_sli_brdrestart = lpfc_sli_brdrestart_s3;
7586 		phba->lpfc_sli_brdready = lpfc_sli_brdready_s3;
7587 		break;
7588 	case LPFC_PCI_DEV_OC:
7589 		phba->lpfc_sli_issue_mbox = lpfc_sli_issue_mbox_s4;
7590 		phba->lpfc_sli_handle_slow_ring_event =
7591 				lpfc_sli_handle_slow_ring_event_s4;
7592 		phba->lpfc_sli_hbq_to_firmware = lpfc_sli_hbq_to_firmware_s4;
7593 		phba->lpfc_sli_brdrestart = lpfc_sli_brdrestart_s4;
7594 		phba->lpfc_sli_brdready = lpfc_sli_brdready_s4;
7595 		break;
7596 	default:
7597 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
7598 				"1420 Invalid HBA PCI-device group: 0x%x\n",
7599 				dev_grp);
7600 		return -ENODEV;
7601 		break;
7602 	}
7603 	return 0;
7604 }
7605 
7606 /**
7607  * __lpfc_sli_ringtx_put - Add an iocb to the txq
7608  * @phba: Pointer to HBA context object.
7609  * @pring: Pointer to driver SLI ring object.
7610  * @piocb: Pointer to address of newly added command iocb.
7611  *
7612  * This function is called with hbalock held to add a command
7613  * iocb to the txq when SLI layer cannot submit the command iocb
7614  * to the ring.
7615  **/
7616 void
7617 __lpfc_sli_ringtx_put(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
7618 		    struct lpfc_iocbq *piocb)
7619 {
7620 	/* Insert the caller's iocb in the txq tail for later processing. */
7621 	list_add_tail(&piocb->list, &pring->txq);
7622 }
7623 
7624 /**
7625  * lpfc_sli_next_iocb - Get the next iocb in the txq
7626  * @phba: Pointer to HBA context object.
7627  * @pring: Pointer to driver SLI ring object.
7628  * @piocb: Pointer to address of newly added command iocb.
7629  *
7630  * This function is called with hbalock held before a new
7631  * iocb is submitted to the firmware. This function checks
7632  * txq to flush the iocbs in txq to Firmware before
7633  * submitting new iocbs to the Firmware.
7634  * If there are iocbs in the txq which need to be submitted
7635  * to firmware, lpfc_sli_next_iocb returns the first element
7636  * of the txq after dequeuing it from txq.
7637  * If there is no iocb in the txq then the function will return
7638  * *piocb and *piocb is set to NULL. Caller needs to check
7639  * *piocb to find if there are more commands in the txq.
7640  **/
7641 static struct lpfc_iocbq *
7642 lpfc_sli_next_iocb(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
7643 		   struct lpfc_iocbq **piocb)
7644 {
7645 	struct lpfc_iocbq * nextiocb;
7646 
7647 	nextiocb = lpfc_sli_ringtx_get(phba, pring);
7648 	if (!nextiocb) {
7649 		nextiocb = *piocb;
7650 		*piocb = NULL;
7651 	}
7652 
7653 	return nextiocb;
7654 }
7655 
7656 /**
7657  * __lpfc_sli_issue_iocb_s3 - SLI3 device lockless ver of lpfc_sli_issue_iocb
7658  * @phba: Pointer to HBA context object.
7659  * @ring_number: SLI ring number to issue iocb on.
7660  * @piocb: Pointer to command iocb.
7661  * @flag: Flag indicating if this command can be put into txq.
7662  *
7663  * __lpfc_sli_issue_iocb_s3 is used by other functions in the driver to issue
7664  * an iocb command to an HBA with SLI-3 interface spec. If the PCI slot is
7665  * recovering from error state, if HBA is resetting or if LPFC_STOP_IOCB_EVENT
7666  * flag is turned on, the function returns IOCB_ERROR. When the link is down,
7667  * this function allows only iocbs for posting buffers. This function finds
7668  * next available slot in the command ring and posts the command to the
7669  * available slot and writes the port attention register to request HBA start
7670  * processing new iocb. If there is no slot available in the ring and
7671  * flag & SLI_IOCB_RET_IOCB is set, the new iocb is added to the txq, otherwise
7672  * the function returns IOCB_BUSY.
7673  *
7674  * This function is called with hbalock held. The function will return success
7675  * after it successfully submit the iocb to firmware or after adding to the
7676  * txq.
7677  **/
7678 static int
7679 __lpfc_sli_issue_iocb_s3(struct lpfc_hba *phba, uint32_t ring_number,
7680 		    struct lpfc_iocbq *piocb, uint32_t flag)
7681 {
7682 	struct lpfc_iocbq *nextiocb;
7683 	IOCB_t *iocb;
7684 	struct lpfc_sli_ring *pring = &phba->sli.ring[ring_number];
7685 
7686 	if (piocb->iocb_cmpl && (!piocb->vport) &&
7687 	   (piocb->iocb.ulpCommand != CMD_ABORT_XRI_CN) &&
7688 	   (piocb->iocb.ulpCommand != CMD_CLOSE_XRI_CN)) {
7689 		lpfc_printf_log(phba, KERN_ERR,
7690 				LOG_SLI | LOG_VPORT,
7691 				"1807 IOCB x%x failed. No vport\n",
7692 				piocb->iocb.ulpCommand);
7693 		dump_stack();
7694 		return IOCB_ERROR;
7695 	}
7696 
7697 
7698 	/* If the PCI channel is in offline state, do not post iocbs. */
7699 	if (unlikely(pci_channel_offline(phba->pcidev)))
7700 		return IOCB_ERROR;
7701 
7702 	/* If HBA has a deferred error attention, fail the iocb. */
7703 	if (unlikely(phba->hba_flag & DEFER_ERATT))
7704 		return IOCB_ERROR;
7705 
7706 	/*
7707 	 * We should never get an IOCB if we are in a < LINK_DOWN state
7708 	 */
7709 	if (unlikely(phba->link_state < LPFC_LINK_DOWN))
7710 		return IOCB_ERROR;
7711 
7712 	/*
7713 	 * Check to see if we are blocking IOCB processing because of a
7714 	 * outstanding event.
7715 	 */
7716 	if (unlikely(pring->flag & LPFC_STOP_IOCB_EVENT))
7717 		goto iocb_busy;
7718 
7719 	if (unlikely(phba->link_state == LPFC_LINK_DOWN)) {
7720 		/*
7721 		 * Only CREATE_XRI, CLOSE_XRI, and QUE_RING_BUF
7722 		 * can be issued if the link is not up.
7723 		 */
7724 		switch (piocb->iocb.ulpCommand) {
7725 		case CMD_GEN_REQUEST64_CR:
7726 		case CMD_GEN_REQUEST64_CX:
7727 			if (!(phba->sli.sli_flag & LPFC_MENLO_MAINT) ||
7728 				(piocb->iocb.un.genreq64.w5.hcsw.Rctl !=
7729 					FC_RCTL_DD_UNSOL_CMD) ||
7730 				(piocb->iocb.un.genreq64.w5.hcsw.Type !=
7731 					MENLO_TRANSPORT_TYPE))
7732 
7733 				goto iocb_busy;
7734 			break;
7735 		case CMD_QUE_RING_BUF_CN:
7736 		case CMD_QUE_RING_BUF64_CN:
7737 			/*
7738 			 * For IOCBs, like QUE_RING_BUF, that have no rsp ring
7739 			 * completion, iocb_cmpl MUST be 0.
7740 			 */
7741 			if (piocb->iocb_cmpl)
7742 				piocb->iocb_cmpl = NULL;
7743 			/*FALLTHROUGH*/
7744 		case CMD_CREATE_XRI_CR:
7745 		case CMD_CLOSE_XRI_CN:
7746 		case CMD_CLOSE_XRI_CX:
7747 			break;
7748 		default:
7749 			goto iocb_busy;
7750 		}
7751 
7752 	/*
7753 	 * For FCP commands, we must be in a state where we can process link
7754 	 * attention events.
7755 	 */
7756 	} else if (unlikely(pring->ringno == phba->sli.fcp_ring &&
7757 			    !(phba->sli.sli_flag & LPFC_PROCESS_LA))) {
7758 		goto iocb_busy;
7759 	}
7760 
7761 	while ((iocb = lpfc_sli_next_iocb_slot(phba, pring)) &&
7762 	       (nextiocb = lpfc_sli_next_iocb(phba, pring, &piocb)))
7763 		lpfc_sli_submit_iocb(phba, pring, iocb, nextiocb);
7764 
7765 	if (iocb)
7766 		lpfc_sli_update_ring(phba, pring);
7767 	else
7768 		lpfc_sli_update_full_ring(phba, pring);
7769 
7770 	if (!piocb)
7771 		return IOCB_SUCCESS;
7772 
7773 	goto out_busy;
7774 
7775  iocb_busy:
7776 	pring->stats.iocb_cmd_delay++;
7777 
7778  out_busy:
7779 
7780 	if (!(flag & SLI_IOCB_RET_IOCB)) {
7781 		__lpfc_sli_ringtx_put(phba, pring, piocb);
7782 		return IOCB_SUCCESS;
7783 	}
7784 
7785 	return IOCB_BUSY;
7786 }
7787 
7788 /**
7789  * lpfc_sli4_bpl2sgl - Convert the bpl/bde to a sgl.
7790  * @phba: Pointer to HBA context object.
7791  * @piocb: Pointer to command iocb.
7792  * @sglq: Pointer to the scatter gather queue object.
7793  *
7794  * This routine converts the bpl or bde that is in the IOCB
7795  * to a sgl list for the sli4 hardware. The physical address
7796  * of the bpl/bde is converted back to a virtual address.
7797  * If the IOCB contains a BPL then the list of BDE's is
7798  * converted to sli4_sge's. If the IOCB contains a single
7799  * BDE then it is converted to a single sli_sge.
7800  * The IOCB is still in cpu endianess so the contents of
7801  * the bpl can be used without byte swapping.
7802  *
7803  * Returns valid XRI = Success, NO_XRI = Failure.
7804 **/
7805 static uint16_t
7806 lpfc_sli4_bpl2sgl(struct lpfc_hba *phba, struct lpfc_iocbq *piocbq,
7807 		struct lpfc_sglq *sglq)
7808 {
7809 	uint16_t xritag = NO_XRI;
7810 	struct ulp_bde64 *bpl = NULL;
7811 	struct ulp_bde64 bde;
7812 	struct sli4_sge *sgl  = NULL;
7813 	struct lpfc_dmabuf *dmabuf;
7814 	IOCB_t *icmd;
7815 	int numBdes = 0;
7816 	int i = 0;
7817 	uint32_t offset = 0; /* accumulated offset in the sg request list */
7818 	int inbound = 0; /* number of sg reply entries inbound from firmware */
7819 
7820 	if (!piocbq || !sglq)
7821 		return xritag;
7822 
7823 	sgl  = (struct sli4_sge *)sglq->sgl;
7824 	icmd = &piocbq->iocb;
7825 	if (icmd->ulpCommand == CMD_XMIT_BLS_RSP64_CX)
7826 		return sglq->sli4_xritag;
7827 	if (icmd->un.genreq64.bdl.bdeFlags == BUFF_TYPE_BLP_64) {
7828 		numBdes = icmd->un.genreq64.bdl.bdeSize /
7829 				sizeof(struct ulp_bde64);
7830 		/* The addrHigh and addrLow fields within the IOCB
7831 		 * have not been byteswapped yet so there is no
7832 		 * need to swap them back.
7833 		 */
7834 		if (piocbq->context3)
7835 			dmabuf = (struct lpfc_dmabuf *)piocbq->context3;
7836 		else
7837 			return xritag;
7838 
7839 		bpl  = (struct ulp_bde64 *)dmabuf->virt;
7840 		if (!bpl)
7841 			return xritag;
7842 
7843 		for (i = 0; i < numBdes; i++) {
7844 			/* Should already be byte swapped. */
7845 			sgl->addr_hi = bpl->addrHigh;
7846 			sgl->addr_lo = bpl->addrLow;
7847 
7848 			sgl->word2 = le32_to_cpu(sgl->word2);
7849 			if ((i+1) == numBdes)
7850 				bf_set(lpfc_sli4_sge_last, sgl, 1);
7851 			else
7852 				bf_set(lpfc_sli4_sge_last, sgl, 0);
7853 			/* swap the size field back to the cpu so we
7854 			 * can assign it to the sgl.
7855 			 */
7856 			bde.tus.w = le32_to_cpu(bpl->tus.w);
7857 			sgl->sge_len = cpu_to_le32(bde.tus.f.bdeSize);
7858 			/* The offsets in the sgl need to be accumulated
7859 			 * separately for the request and reply lists.
7860 			 * The request is always first, the reply follows.
7861 			 */
7862 			if (piocbq->iocb.ulpCommand == CMD_GEN_REQUEST64_CR) {
7863 				/* add up the reply sg entries */
7864 				if (bpl->tus.f.bdeFlags == BUFF_TYPE_BDE_64I)
7865 					inbound++;
7866 				/* first inbound? reset the offset */
7867 				if (inbound == 1)
7868 					offset = 0;
7869 				bf_set(lpfc_sli4_sge_offset, sgl, offset);
7870 				bf_set(lpfc_sli4_sge_type, sgl,
7871 					LPFC_SGE_TYPE_DATA);
7872 				offset += bde.tus.f.bdeSize;
7873 			}
7874 			sgl->word2 = cpu_to_le32(sgl->word2);
7875 			bpl++;
7876 			sgl++;
7877 		}
7878 	} else if (icmd->un.genreq64.bdl.bdeFlags == BUFF_TYPE_BDE_64) {
7879 			/* The addrHigh and addrLow fields of the BDE have not
7880 			 * been byteswapped yet so they need to be swapped
7881 			 * before putting them in the sgl.
7882 			 */
7883 			sgl->addr_hi =
7884 				cpu_to_le32(icmd->un.genreq64.bdl.addrHigh);
7885 			sgl->addr_lo =
7886 				cpu_to_le32(icmd->un.genreq64.bdl.addrLow);
7887 			sgl->word2 = le32_to_cpu(sgl->word2);
7888 			bf_set(lpfc_sli4_sge_last, sgl, 1);
7889 			sgl->word2 = cpu_to_le32(sgl->word2);
7890 			sgl->sge_len =
7891 				cpu_to_le32(icmd->un.genreq64.bdl.bdeSize);
7892 	}
7893 	return sglq->sli4_xritag;
7894 }
7895 
7896 /**
7897  * lpfc_sli4_scmd_to_wqidx_distr - scsi command to SLI4 WQ index distribution
7898  * @phba: Pointer to HBA context object.
7899  *
7900  * This routine performs a roundrobin SCSI command to SLI4 FCP WQ index
7901  * distribution.  This is called by __lpfc_sli_issue_iocb_s4() with the hbalock
7902  * held.
7903  *
7904  * Return: index into SLI4 fast-path FCP queue index.
7905  **/
7906 static inline uint32_t
7907 lpfc_sli4_scmd_to_wqidx_distr(struct lpfc_hba *phba)
7908 {
7909 	struct lpfc_vector_map_info *cpup;
7910 	int chann, cpu;
7911 
7912 	if (phba->cfg_fcp_io_sched == LPFC_FCP_SCHED_BY_CPU) {
7913 		cpu = smp_processor_id();
7914 		if (cpu < phba->sli4_hba.num_present_cpu) {
7915 			cpup = phba->sli4_hba.cpu_map;
7916 			cpup += cpu;
7917 			return cpup->channel_id;
7918 		}
7919 		chann = cpu;
7920 	}
7921 	chann = atomic_add_return(1, &phba->fcp_qidx);
7922 	chann = (chann % phba->cfg_fcp_io_channel);
7923 	return chann;
7924 }
7925 
7926 /**
7927  * lpfc_sli_iocb2wqe - Convert the IOCB to a work queue entry.
7928  * @phba: Pointer to HBA context object.
7929  * @piocb: Pointer to command iocb.
7930  * @wqe: Pointer to the work queue entry.
7931  *
7932  * This routine converts the iocb command to its Work Queue Entry
7933  * equivalent. The wqe pointer should not have any fields set when
7934  * this routine is called because it will memcpy over them.
7935  * This routine does not set the CQ_ID or the WQEC bits in the
7936  * wqe.
7937  *
7938  * Returns: 0 = Success, IOCB_ERROR = Failure.
7939  **/
7940 static int
7941 lpfc_sli4_iocb2wqe(struct lpfc_hba *phba, struct lpfc_iocbq *iocbq,
7942 		union lpfc_wqe *wqe)
7943 {
7944 	uint32_t xmit_len = 0, total_len = 0;
7945 	uint8_t ct = 0;
7946 	uint32_t fip;
7947 	uint32_t abort_tag;
7948 	uint8_t command_type = ELS_COMMAND_NON_FIP;
7949 	uint8_t cmnd;
7950 	uint16_t xritag;
7951 	uint16_t abrt_iotag;
7952 	struct lpfc_iocbq *abrtiocbq;
7953 	struct ulp_bde64 *bpl = NULL;
7954 	uint32_t els_id = LPFC_ELS_ID_DEFAULT;
7955 	int numBdes, i;
7956 	struct ulp_bde64 bde;
7957 	struct lpfc_nodelist *ndlp;
7958 	uint32_t *pcmd;
7959 	uint32_t if_type;
7960 
7961 	fip = phba->hba_flag & HBA_FIP_SUPPORT;
7962 	/* The fcp commands will set command type */
7963 	if (iocbq->iocb_flag &  LPFC_IO_FCP)
7964 		command_type = FCP_COMMAND;
7965 	else if (fip && (iocbq->iocb_flag & LPFC_FIP_ELS_ID_MASK))
7966 		command_type = ELS_COMMAND_FIP;
7967 	else
7968 		command_type = ELS_COMMAND_NON_FIP;
7969 
7970 	/* Some of the fields are in the right position already */
7971 	memcpy(wqe, &iocbq->iocb, sizeof(union lpfc_wqe));
7972 	abort_tag = (uint32_t) iocbq->iotag;
7973 	xritag = iocbq->sli4_xritag;
7974 	wqe->generic.wqe_com.word7 = 0; /* The ct field has moved so reset */
7975 	/* words0-2 bpl convert bde */
7976 	if (iocbq->iocb.un.genreq64.bdl.bdeFlags == BUFF_TYPE_BLP_64) {
7977 		numBdes = iocbq->iocb.un.genreq64.bdl.bdeSize /
7978 				sizeof(struct ulp_bde64);
7979 		bpl  = (struct ulp_bde64 *)
7980 			((struct lpfc_dmabuf *)iocbq->context3)->virt;
7981 		if (!bpl)
7982 			return IOCB_ERROR;
7983 
7984 		/* Should already be byte swapped. */
7985 		wqe->generic.bde.addrHigh =  le32_to_cpu(bpl->addrHigh);
7986 		wqe->generic.bde.addrLow =  le32_to_cpu(bpl->addrLow);
7987 		/* swap the size field back to the cpu so we
7988 		 * can assign it to the sgl.
7989 		 */
7990 		wqe->generic.bde.tus.w  = le32_to_cpu(bpl->tus.w);
7991 		xmit_len = wqe->generic.bde.tus.f.bdeSize;
7992 		total_len = 0;
7993 		for (i = 0; i < numBdes; i++) {
7994 			bde.tus.w  = le32_to_cpu(bpl[i].tus.w);
7995 			total_len += bde.tus.f.bdeSize;
7996 		}
7997 	} else
7998 		xmit_len = iocbq->iocb.un.fcpi64.bdl.bdeSize;
7999 
8000 	iocbq->iocb.ulpIoTag = iocbq->iotag;
8001 	cmnd = iocbq->iocb.ulpCommand;
8002 
8003 	switch (iocbq->iocb.ulpCommand) {
8004 	case CMD_ELS_REQUEST64_CR:
8005 		if (iocbq->iocb_flag & LPFC_IO_LIBDFC)
8006 			ndlp = iocbq->context_un.ndlp;
8007 		else
8008 			ndlp = (struct lpfc_nodelist *)iocbq->context1;
8009 		if (!iocbq->iocb.ulpLe) {
8010 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
8011 				"2007 Only Limited Edition cmd Format"
8012 				" supported 0x%x\n",
8013 				iocbq->iocb.ulpCommand);
8014 			return IOCB_ERROR;
8015 		}
8016 
8017 		wqe->els_req.payload_len = xmit_len;
8018 		/* Els_reguest64 has a TMO */
8019 		bf_set(wqe_tmo, &wqe->els_req.wqe_com,
8020 			iocbq->iocb.ulpTimeout);
8021 		/* Need a VF for word 4 set the vf bit*/
8022 		bf_set(els_req64_vf, &wqe->els_req, 0);
8023 		/* And a VFID for word 12 */
8024 		bf_set(els_req64_vfid, &wqe->els_req, 0);
8025 		ct = ((iocbq->iocb.ulpCt_h << 1) | iocbq->iocb.ulpCt_l);
8026 		bf_set(wqe_ctxt_tag, &wqe->els_req.wqe_com,
8027 		       iocbq->iocb.ulpContext);
8028 		bf_set(wqe_ct, &wqe->els_req.wqe_com, ct);
8029 		bf_set(wqe_pu, &wqe->els_req.wqe_com, 0);
8030 		/* CCP CCPE PV PRI in word10 were set in the memcpy */
8031 		if (command_type == ELS_COMMAND_FIP)
8032 			els_id = ((iocbq->iocb_flag & LPFC_FIP_ELS_ID_MASK)
8033 					>> LPFC_FIP_ELS_ID_SHIFT);
8034 		pcmd = (uint32_t *) (((struct lpfc_dmabuf *)
8035 					iocbq->context2)->virt);
8036 		if_type = bf_get(lpfc_sli_intf_if_type,
8037 					&phba->sli4_hba.sli_intf);
8038 		if (if_type == LPFC_SLI_INTF_IF_TYPE_2) {
8039 			if (pcmd && (*pcmd == ELS_CMD_FLOGI ||
8040 				*pcmd == ELS_CMD_SCR ||
8041 				*pcmd == ELS_CMD_FDISC ||
8042 				*pcmd == ELS_CMD_LOGO ||
8043 				*pcmd == ELS_CMD_PLOGI)) {
8044 				bf_set(els_req64_sp, &wqe->els_req, 1);
8045 				bf_set(els_req64_sid, &wqe->els_req,
8046 					iocbq->vport->fc_myDID);
8047 				if ((*pcmd == ELS_CMD_FLOGI) &&
8048 					!(phba->fc_topology ==
8049 						LPFC_TOPOLOGY_LOOP))
8050 					bf_set(els_req64_sid, &wqe->els_req, 0);
8051 				bf_set(wqe_ct, &wqe->els_req.wqe_com, 1);
8052 				bf_set(wqe_ctxt_tag, &wqe->els_req.wqe_com,
8053 					phba->vpi_ids[iocbq->vport->vpi]);
8054 			} else if (pcmd && iocbq->context1) {
8055 				bf_set(wqe_ct, &wqe->els_req.wqe_com, 0);
8056 				bf_set(wqe_ctxt_tag, &wqe->els_req.wqe_com,
8057 					phba->sli4_hba.rpi_ids[ndlp->nlp_rpi]);
8058 			}
8059 		}
8060 		bf_set(wqe_temp_rpi, &wqe->els_req.wqe_com,
8061 		       phba->sli4_hba.rpi_ids[ndlp->nlp_rpi]);
8062 		bf_set(wqe_els_id, &wqe->els_req.wqe_com, els_id);
8063 		bf_set(wqe_dbde, &wqe->els_req.wqe_com, 1);
8064 		bf_set(wqe_iod, &wqe->els_req.wqe_com, LPFC_WQE_IOD_READ);
8065 		bf_set(wqe_qosd, &wqe->els_req.wqe_com, 1);
8066 		bf_set(wqe_lenloc, &wqe->els_req.wqe_com, LPFC_WQE_LENLOC_NONE);
8067 		bf_set(wqe_ebde_cnt, &wqe->els_req.wqe_com, 0);
8068 		break;
8069 	case CMD_XMIT_SEQUENCE64_CX:
8070 		bf_set(wqe_ctxt_tag, &wqe->xmit_sequence.wqe_com,
8071 		       iocbq->iocb.un.ulpWord[3]);
8072 		bf_set(wqe_rcvoxid, &wqe->xmit_sequence.wqe_com,
8073 		       iocbq->iocb.unsli3.rcvsli3.ox_id);
8074 		/* The entire sequence is transmitted for this IOCB */
8075 		xmit_len = total_len;
8076 		cmnd = CMD_XMIT_SEQUENCE64_CR;
8077 		if (phba->link_flag & LS_LOOPBACK_MODE)
8078 			bf_set(wqe_xo, &wqe->xmit_sequence.wge_ctl, 1);
8079 	case CMD_XMIT_SEQUENCE64_CR:
8080 		/* word3 iocb=io_tag32 wqe=reserved */
8081 		wqe->xmit_sequence.rsvd3 = 0;
8082 		/* word4 relative_offset memcpy */
8083 		/* word5 r_ctl/df_ctl memcpy */
8084 		bf_set(wqe_pu, &wqe->xmit_sequence.wqe_com, 0);
8085 		bf_set(wqe_dbde, &wqe->xmit_sequence.wqe_com, 1);
8086 		bf_set(wqe_iod, &wqe->xmit_sequence.wqe_com,
8087 		       LPFC_WQE_IOD_WRITE);
8088 		bf_set(wqe_lenloc, &wqe->xmit_sequence.wqe_com,
8089 		       LPFC_WQE_LENLOC_WORD12);
8090 		bf_set(wqe_ebde_cnt, &wqe->xmit_sequence.wqe_com, 0);
8091 		wqe->xmit_sequence.xmit_len = xmit_len;
8092 		command_type = OTHER_COMMAND;
8093 		break;
8094 	case CMD_XMIT_BCAST64_CN:
8095 		/* word3 iocb=iotag32 wqe=seq_payload_len */
8096 		wqe->xmit_bcast64.seq_payload_len = xmit_len;
8097 		/* word4 iocb=rsvd wqe=rsvd */
8098 		/* word5 iocb=rctl/type/df_ctl wqe=rctl/type/df_ctl memcpy */
8099 		/* word6 iocb=ctxt_tag/io_tag wqe=ctxt_tag/xri */
8100 		bf_set(wqe_ct, &wqe->xmit_bcast64.wqe_com,
8101 			((iocbq->iocb.ulpCt_h << 1) | iocbq->iocb.ulpCt_l));
8102 		bf_set(wqe_dbde, &wqe->xmit_bcast64.wqe_com, 1);
8103 		bf_set(wqe_iod, &wqe->xmit_bcast64.wqe_com, LPFC_WQE_IOD_WRITE);
8104 		bf_set(wqe_lenloc, &wqe->xmit_bcast64.wqe_com,
8105 		       LPFC_WQE_LENLOC_WORD3);
8106 		bf_set(wqe_ebde_cnt, &wqe->xmit_bcast64.wqe_com, 0);
8107 		break;
8108 	case CMD_FCP_IWRITE64_CR:
8109 		command_type = FCP_COMMAND_DATA_OUT;
8110 		/* word3 iocb=iotag wqe=payload_offset_len */
8111 		/* Add the FCP_CMD and FCP_RSP sizes to get the offset */
8112 		wqe->fcp_iwrite.payload_offset_len =
8113 			xmit_len + sizeof(struct fcp_rsp);
8114 		/* word4 iocb=parameter wqe=total_xfer_length memcpy */
8115 		/* word5 iocb=initial_xfer_len wqe=initial_xfer_len memcpy */
8116 		bf_set(wqe_erp, &wqe->fcp_iwrite.wqe_com,
8117 		       iocbq->iocb.ulpFCP2Rcvy);
8118 		bf_set(wqe_lnk, &wqe->fcp_iwrite.wqe_com, iocbq->iocb.ulpXS);
8119 		/* Always open the exchange */
8120 		bf_set(wqe_xc, &wqe->fcp_iwrite.wqe_com, 0);
8121 		bf_set(wqe_iod, &wqe->fcp_iwrite.wqe_com, LPFC_WQE_IOD_WRITE);
8122 		bf_set(wqe_lenloc, &wqe->fcp_iwrite.wqe_com,
8123 		       LPFC_WQE_LENLOC_WORD4);
8124 		bf_set(wqe_ebde_cnt, &wqe->fcp_iwrite.wqe_com, 0);
8125 		bf_set(wqe_pu, &wqe->fcp_iwrite.wqe_com, iocbq->iocb.ulpPU);
8126 		bf_set(wqe_dbde, &wqe->fcp_iwrite.wqe_com, 1);
8127 		break;
8128 	case CMD_FCP_IREAD64_CR:
8129 		/* word3 iocb=iotag wqe=payload_offset_len */
8130 		/* Add the FCP_CMD and FCP_RSP sizes to get the offset */
8131 		wqe->fcp_iread.payload_offset_len =
8132 			xmit_len + sizeof(struct fcp_rsp);
8133 		/* word4 iocb=parameter wqe=total_xfer_length memcpy */
8134 		/* word5 iocb=initial_xfer_len wqe=initial_xfer_len memcpy */
8135 		bf_set(wqe_erp, &wqe->fcp_iread.wqe_com,
8136 		       iocbq->iocb.ulpFCP2Rcvy);
8137 		bf_set(wqe_lnk, &wqe->fcp_iread.wqe_com, iocbq->iocb.ulpXS);
8138 		/* Always open the exchange */
8139 		bf_set(wqe_xc, &wqe->fcp_iread.wqe_com, 0);
8140 		bf_set(wqe_iod, &wqe->fcp_iread.wqe_com, LPFC_WQE_IOD_READ);
8141 		bf_set(wqe_lenloc, &wqe->fcp_iread.wqe_com,
8142 		       LPFC_WQE_LENLOC_WORD4);
8143 		bf_set(wqe_ebde_cnt, &wqe->fcp_iread.wqe_com, 0);
8144 		bf_set(wqe_pu, &wqe->fcp_iread.wqe_com, iocbq->iocb.ulpPU);
8145 		bf_set(wqe_dbde, &wqe->fcp_iread.wqe_com, 1);
8146 		break;
8147 	case CMD_FCP_ICMND64_CR:
8148 		/* word3 iocb=IO_TAG wqe=reserved */
8149 		wqe->fcp_icmd.rsrvd3 = 0;
8150 		bf_set(wqe_pu, &wqe->fcp_icmd.wqe_com, 0);
8151 		/* Always open the exchange */
8152 		bf_set(wqe_xc, &wqe->fcp_icmd.wqe_com, 0);
8153 		bf_set(wqe_dbde, &wqe->fcp_icmd.wqe_com, 1);
8154 		bf_set(wqe_iod, &wqe->fcp_icmd.wqe_com, LPFC_WQE_IOD_WRITE);
8155 		bf_set(wqe_qosd, &wqe->fcp_icmd.wqe_com, 1);
8156 		bf_set(wqe_lenloc, &wqe->fcp_icmd.wqe_com,
8157 		       LPFC_WQE_LENLOC_NONE);
8158 		bf_set(wqe_ebde_cnt, &wqe->fcp_icmd.wqe_com, 0);
8159 		bf_set(wqe_erp, &wqe->fcp_icmd.wqe_com,
8160 		       iocbq->iocb.ulpFCP2Rcvy);
8161 		break;
8162 	case CMD_GEN_REQUEST64_CR:
8163 		/* For this command calculate the xmit length of the
8164 		 * request bde.
8165 		 */
8166 		xmit_len = 0;
8167 		numBdes = iocbq->iocb.un.genreq64.bdl.bdeSize /
8168 			sizeof(struct ulp_bde64);
8169 		for (i = 0; i < numBdes; i++) {
8170 			bde.tus.w = le32_to_cpu(bpl[i].tus.w);
8171 			if (bde.tus.f.bdeFlags != BUFF_TYPE_BDE_64)
8172 				break;
8173 			xmit_len += bde.tus.f.bdeSize;
8174 		}
8175 		/* word3 iocb=IO_TAG wqe=request_payload_len */
8176 		wqe->gen_req.request_payload_len = xmit_len;
8177 		/* word4 iocb=parameter wqe=relative_offset memcpy */
8178 		/* word5 [rctl, type, df_ctl, la] copied in memcpy */
8179 		/* word6 context tag copied in memcpy */
8180 		if (iocbq->iocb.ulpCt_h  || iocbq->iocb.ulpCt_l) {
8181 			ct = ((iocbq->iocb.ulpCt_h << 1) | iocbq->iocb.ulpCt_l);
8182 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
8183 				"2015 Invalid CT %x command 0x%x\n",
8184 				ct, iocbq->iocb.ulpCommand);
8185 			return IOCB_ERROR;
8186 		}
8187 		bf_set(wqe_ct, &wqe->gen_req.wqe_com, 0);
8188 		bf_set(wqe_tmo, &wqe->gen_req.wqe_com, iocbq->iocb.ulpTimeout);
8189 		bf_set(wqe_pu, &wqe->gen_req.wqe_com, iocbq->iocb.ulpPU);
8190 		bf_set(wqe_dbde, &wqe->gen_req.wqe_com, 1);
8191 		bf_set(wqe_iod, &wqe->gen_req.wqe_com, LPFC_WQE_IOD_READ);
8192 		bf_set(wqe_qosd, &wqe->gen_req.wqe_com, 1);
8193 		bf_set(wqe_lenloc, &wqe->gen_req.wqe_com, LPFC_WQE_LENLOC_NONE);
8194 		bf_set(wqe_ebde_cnt, &wqe->gen_req.wqe_com, 0);
8195 		command_type = OTHER_COMMAND;
8196 		break;
8197 	case CMD_XMIT_ELS_RSP64_CX:
8198 		ndlp = (struct lpfc_nodelist *)iocbq->context1;
8199 		/* words0-2 BDE memcpy */
8200 		/* word3 iocb=iotag32 wqe=response_payload_len */
8201 		wqe->xmit_els_rsp.response_payload_len = xmit_len;
8202 		/* word4 */
8203 		wqe->xmit_els_rsp.word4 = 0;
8204 		/* word5 iocb=rsvd wge=did */
8205 		bf_set(wqe_els_did, &wqe->xmit_els_rsp.wqe_dest,
8206 			 iocbq->iocb.un.xseq64.xmit_els_remoteID);
8207 
8208 		if_type = bf_get(lpfc_sli_intf_if_type,
8209 					&phba->sli4_hba.sli_intf);
8210 		if (if_type == LPFC_SLI_INTF_IF_TYPE_2) {
8211 			if (iocbq->vport->fc_flag & FC_PT2PT) {
8212 				bf_set(els_rsp64_sp, &wqe->xmit_els_rsp, 1);
8213 				bf_set(els_rsp64_sid, &wqe->xmit_els_rsp,
8214 					iocbq->vport->fc_myDID);
8215 				if (iocbq->vport->fc_myDID == Fabric_DID) {
8216 					bf_set(wqe_els_did,
8217 						&wqe->xmit_els_rsp.wqe_dest, 0);
8218 				}
8219 			}
8220 		}
8221 		bf_set(wqe_ct, &wqe->xmit_els_rsp.wqe_com,
8222 		       ((iocbq->iocb.ulpCt_h << 1) | iocbq->iocb.ulpCt_l));
8223 		bf_set(wqe_pu, &wqe->xmit_els_rsp.wqe_com, iocbq->iocb.ulpPU);
8224 		bf_set(wqe_rcvoxid, &wqe->xmit_els_rsp.wqe_com,
8225 		       iocbq->iocb.unsli3.rcvsli3.ox_id);
8226 		if (!iocbq->iocb.ulpCt_h && iocbq->iocb.ulpCt_l)
8227 			bf_set(wqe_ctxt_tag, &wqe->xmit_els_rsp.wqe_com,
8228 			       phba->vpi_ids[iocbq->vport->vpi]);
8229 		bf_set(wqe_dbde, &wqe->xmit_els_rsp.wqe_com, 1);
8230 		bf_set(wqe_iod, &wqe->xmit_els_rsp.wqe_com, LPFC_WQE_IOD_WRITE);
8231 		bf_set(wqe_qosd, &wqe->xmit_els_rsp.wqe_com, 1);
8232 		bf_set(wqe_lenloc, &wqe->xmit_els_rsp.wqe_com,
8233 		       LPFC_WQE_LENLOC_WORD3);
8234 		bf_set(wqe_ebde_cnt, &wqe->xmit_els_rsp.wqe_com, 0);
8235 		bf_set(wqe_rsp_temp_rpi, &wqe->xmit_els_rsp,
8236 		       phba->sli4_hba.rpi_ids[ndlp->nlp_rpi]);
8237 		pcmd = (uint32_t *) (((struct lpfc_dmabuf *)
8238 					iocbq->context2)->virt);
8239 		if (phba->fc_topology == LPFC_TOPOLOGY_LOOP) {
8240 				bf_set(els_rsp64_sp, &wqe->xmit_els_rsp, 1);
8241 				bf_set(els_rsp64_sid, &wqe->xmit_els_rsp,
8242 					iocbq->vport->fc_myDID);
8243 				bf_set(wqe_ct, &wqe->xmit_els_rsp.wqe_com, 1);
8244 				bf_set(wqe_ctxt_tag, &wqe->xmit_els_rsp.wqe_com,
8245 					phba->vpi_ids[phba->pport->vpi]);
8246 		}
8247 		command_type = OTHER_COMMAND;
8248 		break;
8249 	case CMD_CLOSE_XRI_CN:
8250 	case CMD_ABORT_XRI_CN:
8251 	case CMD_ABORT_XRI_CX:
8252 		/* words 0-2 memcpy should be 0 rserved */
8253 		/* port will send abts */
8254 		abrt_iotag = iocbq->iocb.un.acxri.abortContextTag;
8255 		if (abrt_iotag != 0 && abrt_iotag <= phba->sli.last_iotag) {
8256 			abrtiocbq = phba->sli.iocbq_lookup[abrt_iotag];
8257 			fip = abrtiocbq->iocb_flag & LPFC_FIP_ELS_ID_MASK;
8258 		} else
8259 			fip = 0;
8260 
8261 		if ((iocbq->iocb.ulpCommand == CMD_CLOSE_XRI_CN) || fip)
8262 			/*
8263 			 * The link is down, or the command was ELS_FIP
8264 			 * so the fw does not need to send abts
8265 			 * on the wire.
8266 			 */
8267 			bf_set(abort_cmd_ia, &wqe->abort_cmd, 1);
8268 		else
8269 			bf_set(abort_cmd_ia, &wqe->abort_cmd, 0);
8270 		bf_set(abort_cmd_criteria, &wqe->abort_cmd, T_XRI_TAG);
8271 		/* word5 iocb=CONTEXT_TAG|IO_TAG wqe=reserved */
8272 		wqe->abort_cmd.rsrvd5 = 0;
8273 		bf_set(wqe_ct, &wqe->abort_cmd.wqe_com,
8274 			((iocbq->iocb.ulpCt_h << 1) | iocbq->iocb.ulpCt_l));
8275 		abort_tag = iocbq->iocb.un.acxri.abortIoTag;
8276 		/*
8277 		 * The abort handler will send us CMD_ABORT_XRI_CN or
8278 		 * CMD_CLOSE_XRI_CN and the fw only accepts CMD_ABORT_XRI_CX
8279 		 */
8280 		bf_set(wqe_cmnd, &wqe->abort_cmd.wqe_com, CMD_ABORT_XRI_CX);
8281 		bf_set(wqe_qosd, &wqe->abort_cmd.wqe_com, 1);
8282 		bf_set(wqe_lenloc, &wqe->abort_cmd.wqe_com,
8283 		       LPFC_WQE_LENLOC_NONE);
8284 		cmnd = CMD_ABORT_XRI_CX;
8285 		command_type = OTHER_COMMAND;
8286 		xritag = 0;
8287 		break;
8288 	case CMD_XMIT_BLS_RSP64_CX:
8289 		ndlp = (struct lpfc_nodelist *)iocbq->context1;
8290 		/* As BLS ABTS RSP WQE is very different from other WQEs,
8291 		 * we re-construct this WQE here based on information in
8292 		 * iocbq from scratch.
8293 		 */
8294 		memset(wqe, 0, sizeof(union lpfc_wqe));
8295 		/* OX_ID is invariable to who sent ABTS to CT exchange */
8296 		bf_set(xmit_bls_rsp64_oxid, &wqe->xmit_bls_rsp,
8297 		       bf_get(lpfc_abts_oxid, &iocbq->iocb.un.bls_rsp));
8298 		if (bf_get(lpfc_abts_orig, &iocbq->iocb.un.bls_rsp) ==
8299 		    LPFC_ABTS_UNSOL_INT) {
8300 			/* ABTS sent by initiator to CT exchange, the
8301 			 * RX_ID field will be filled with the newly
8302 			 * allocated responder XRI.
8303 			 */
8304 			bf_set(xmit_bls_rsp64_rxid, &wqe->xmit_bls_rsp,
8305 			       iocbq->sli4_xritag);
8306 		} else {
8307 			/* ABTS sent by responder to CT exchange, the
8308 			 * RX_ID field will be filled with the responder
8309 			 * RX_ID from ABTS.
8310 			 */
8311 			bf_set(xmit_bls_rsp64_rxid, &wqe->xmit_bls_rsp,
8312 			       bf_get(lpfc_abts_rxid, &iocbq->iocb.un.bls_rsp));
8313 		}
8314 		bf_set(xmit_bls_rsp64_seqcnthi, &wqe->xmit_bls_rsp, 0xffff);
8315 		bf_set(wqe_xmit_bls_pt, &wqe->xmit_bls_rsp.wqe_dest, 0x1);
8316 
8317 		/* Use CT=VPI */
8318 		bf_set(wqe_els_did, &wqe->xmit_bls_rsp.wqe_dest,
8319 			ndlp->nlp_DID);
8320 		bf_set(xmit_bls_rsp64_temprpi, &wqe->xmit_bls_rsp,
8321 			iocbq->iocb.ulpContext);
8322 		bf_set(wqe_ct, &wqe->xmit_bls_rsp.wqe_com, 1);
8323 		bf_set(wqe_ctxt_tag, &wqe->xmit_bls_rsp.wqe_com,
8324 			phba->vpi_ids[phba->pport->vpi]);
8325 		bf_set(wqe_qosd, &wqe->xmit_bls_rsp.wqe_com, 1);
8326 		bf_set(wqe_lenloc, &wqe->xmit_bls_rsp.wqe_com,
8327 		       LPFC_WQE_LENLOC_NONE);
8328 		/* Overwrite the pre-set comnd type with OTHER_COMMAND */
8329 		command_type = OTHER_COMMAND;
8330 		if (iocbq->iocb.un.xseq64.w5.hcsw.Rctl == FC_RCTL_BA_RJT) {
8331 			bf_set(xmit_bls_rsp64_rjt_vspec, &wqe->xmit_bls_rsp,
8332 			       bf_get(lpfc_vndr_code, &iocbq->iocb.un.bls_rsp));
8333 			bf_set(xmit_bls_rsp64_rjt_expc, &wqe->xmit_bls_rsp,
8334 			       bf_get(lpfc_rsn_expln, &iocbq->iocb.un.bls_rsp));
8335 			bf_set(xmit_bls_rsp64_rjt_rsnc, &wqe->xmit_bls_rsp,
8336 			       bf_get(lpfc_rsn_code, &iocbq->iocb.un.bls_rsp));
8337 		}
8338 
8339 		break;
8340 	case CMD_XRI_ABORTED_CX:
8341 	case CMD_CREATE_XRI_CR: /* Do we expect to use this? */
8342 	case CMD_IOCB_FCP_IBIDIR64_CR: /* bidirectional xfer */
8343 	case CMD_FCP_TSEND64_CX: /* Target mode send xfer-ready */
8344 	case CMD_FCP_TRSP64_CX: /* Target mode rcv */
8345 	case CMD_FCP_AUTO_TRSP_CX: /* Auto target rsp */
8346 	default:
8347 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
8348 				"2014 Invalid command 0x%x\n",
8349 				iocbq->iocb.ulpCommand);
8350 		return IOCB_ERROR;
8351 		break;
8352 	}
8353 
8354 	if (iocbq->iocb_flag & LPFC_IO_DIF_PASS)
8355 		bf_set(wqe_dif, &wqe->generic.wqe_com, LPFC_WQE_DIF_PASSTHRU);
8356 	else if (iocbq->iocb_flag & LPFC_IO_DIF_STRIP)
8357 		bf_set(wqe_dif, &wqe->generic.wqe_com, LPFC_WQE_DIF_STRIP);
8358 	else if (iocbq->iocb_flag & LPFC_IO_DIF_INSERT)
8359 		bf_set(wqe_dif, &wqe->generic.wqe_com, LPFC_WQE_DIF_INSERT);
8360 	iocbq->iocb_flag &= ~(LPFC_IO_DIF_PASS | LPFC_IO_DIF_STRIP |
8361 			      LPFC_IO_DIF_INSERT);
8362 	bf_set(wqe_xri_tag, &wqe->generic.wqe_com, xritag);
8363 	bf_set(wqe_reqtag, &wqe->generic.wqe_com, iocbq->iotag);
8364 	wqe->generic.wqe_com.abort_tag = abort_tag;
8365 	bf_set(wqe_cmd_type, &wqe->generic.wqe_com, command_type);
8366 	bf_set(wqe_cmnd, &wqe->generic.wqe_com, cmnd);
8367 	bf_set(wqe_class, &wqe->generic.wqe_com, iocbq->iocb.ulpClass);
8368 	bf_set(wqe_cqid, &wqe->generic.wqe_com, LPFC_WQE_CQ_ID_DEFAULT);
8369 	return 0;
8370 }
8371 
8372 /**
8373  * __lpfc_sli_issue_iocb_s4 - SLI4 device lockless ver of lpfc_sli_issue_iocb
8374  * @phba: Pointer to HBA context object.
8375  * @ring_number: SLI ring number to issue iocb on.
8376  * @piocb: Pointer to command iocb.
8377  * @flag: Flag indicating if this command can be put into txq.
8378  *
8379  * __lpfc_sli_issue_iocb_s4 is used by other functions in the driver to issue
8380  * an iocb command to an HBA with SLI-4 interface spec.
8381  *
8382  * This function is called with hbalock held. The function will return success
8383  * after it successfully submit the iocb to firmware or after adding to the
8384  * txq.
8385  **/
8386 static int
8387 __lpfc_sli_issue_iocb_s4(struct lpfc_hba *phba, uint32_t ring_number,
8388 			 struct lpfc_iocbq *piocb, uint32_t flag)
8389 {
8390 	struct lpfc_sglq *sglq;
8391 	union lpfc_wqe wqe;
8392 	struct lpfc_sli_ring *pring = &phba->sli.ring[ring_number];
8393 
8394 	if (piocb->sli4_xritag == NO_XRI) {
8395 		if (piocb->iocb.ulpCommand == CMD_ABORT_XRI_CN ||
8396 		    piocb->iocb.ulpCommand == CMD_CLOSE_XRI_CN)
8397 			sglq = NULL;
8398 		else {
8399 			if (!list_empty(&pring->txq)) {
8400 				if (!(flag & SLI_IOCB_RET_IOCB)) {
8401 					__lpfc_sli_ringtx_put(phba,
8402 						pring, piocb);
8403 					return IOCB_SUCCESS;
8404 				} else {
8405 					return IOCB_BUSY;
8406 				}
8407 			} else {
8408 				sglq = __lpfc_sli_get_sglq(phba, piocb);
8409 				if (!sglq) {
8410 					if (!(flag & SLI_IOCB_RET_IOCB)) {
8411 						__lpfc_sli_ringtx_put(phba,
8412 								pring,
8413 								piocb);
8414 						return IOCB_SUCCESS;
8415 					} else
8416 						return IOCB_BUSY;
8417 				}
8418 			}
8419 		}
8420 	} else if (piocb->iocb_flag &  LPFC_IO_FCP) {
8421 		/* These IO's already have an XRI and a mapped sgl. */
8422 		sglq = NULL;
8423 	} else {
8424 		/*
8425 		 * This is a continuation of a commandi,(CX) so this
8426 		 * sglq is on the active list
8427 		 */
8428 		sglq = __lpfc_get_active_sglq(phba, piocb->sli4_lxritag);
8429 		if (!sglq)
8430 			return IOCB_ERROR;
8431 	}
8432 
8433 	if (sglq) {
8434 		piocb->sli4_lxritag = sglq->sli4_lxritag;
8435 		piocb->sli4_xritag = sglq->sli4_xritag;
8436 		if (NO_XRI == lpfc_sli4_bpl2sgl(phba, piocb, sglq))
8437 			return IOCB_ERROR;
8438 	}
8439 
8440 	if (lpfc_sli4_iocb2wqe(phba, piocb, &wqe))
8441 		return IOCB_ERROR;
8442 
8443 	if ((piocb->iocb_flag & LPFC_IO_FCP) ||
8444 		(piocb->iocb_flag & LPFC_USE_FCPWQIDX)) {
8445 		if (unlikely(!phba->sli4_hba.fcp_wq))
8446 			return IOCB_ERROR;
8447 		if (lpfc_sli4_wq_put(phba->sli4_hba.fcp_wq[piocb->fcp_wqidx],
8448 				     &wqe))
8449 			return IOCB_ERROR;
8450 	} else {
8451 		if (unlikely(!phba->sli4_hba.els_wq))
8452 			return IOCB_ERROR;
8453 		if (lpfc_sli4_wq_put(phba->sli4_hba.els_wq, &wqe))
8454 			return IOCB_ERROR;
8455 	}
8456 	lpfc_sli_ringtxcmpl_put(phba, pring, piocb);
8457 
8458 	return 0;
8459 }
8460 
8461 /**
8462  * __lpfc_sli_issue_iocb - Wrapper func of lockless version for issuing iocb
8463  *
8464  * This routine wraps the actual lockless version for issusing IOCB function
8465  * pointer from the lpfc_hba struct.
8466  *
8467  * Return codes:
8468  * 	IOCB_ERROR - Error
8469  * 	IOCB_SUCCESS - Success
8470  * 	IOCB_BUSY - Busy
8471  **/
8472 int
8473 __lpfc_sli_issue_iocb(struct lpfc_hba *phba, uint32_t ring_number,
8474 		struct lpfc_iocbq *piocb, uint32_t flag)
8475 {
8476 	return phba->__lpfc_sli_issue_iocb(phba, ring_number, piocb, flag);
8477 }
8478 
8479 /**
8480  * lpfc_sli_api_table_setup - Set up sli api function jump table
8481  * @phba: The hba struct for which this call is being executed.
8482  * @dev_grp: The HBA PCI-Device group number.
8483  *
8484  * This routine sets up the SLI interface API function jump table in @phba
8485  * struct.
8486  * Returns: 0 - success, -ENODEV - failure.
8487  **/
8488 int
8489 lpfc_sli_api_table_setup(struct lpfc_hba *phba, uint8_t dev_grp)
8490 {
8491 
8492 	switch (dev_grp) {
8493 	case LPFC_PCI_DEV_LP:
8494 		phba->__lpfc_sli_issue_iocb = __lpfc_sli_issue_iocb_s3;
8495 		phba->__lpfc_sli_release_iocbq = __lpfc_sli_release_iocbq_s3;
8496 		break;
8497 	case LPFC_PCI_DEV_OC:
8498 		phba->__lpfc_sli_issue_iocb = __lpfc_sli_issue_iocb_s4;
8499 		phba->__lpfc_sli_release_iocbq = __lpfc_sli_release_iocbq_s4;
8500 		break;
8501 	default:
8502 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
8503 				"1419 Invalid HBA PCI-device group: 0x%x\n",
8504 				dev_grp);
8505 		return -ENODEV;
8506 		break;
8507 	}
8508 	phba->lpfc_get_iocb_from_iocbq = lpfc_get_iocb_from_iocbq;
8509 	return 0;
8510 }
8511 
8512 /**
8513  * lpfc_sli_issue_iocb - Wrapper function for __lpfc_sli_issue_iocb
8514  * @phba: Pointer to HBA context object.
8515  * @pring: Pointer to driver SLI ring object.
8516  * @piocb: Pointer to command iocb.
8517  * @flag: Flag indicating if this command can be put into txq.
8518  *
8519  * lpfc_sli_issue_iocb is a wrapper around __lpfc_sli_issue_iocb
8520  * function. This function gets the hbalock and calls
8521  * __lpfc_sli_issue_iocb function and will return the error returned
8522  * by __lpfc_sli_issue_iocb function. This wrapper is used by
8523  * functions which do not hold hbalock.
8524  **/
8525 int
8526 lpfc_sli_issue_iocb(struct lpfc_hba *phba, uint32_t ring_number,
8527 		    struct lpfc_iocbq *piocb, uint32_t flag)
8528 {
8529 	struct lpfc_fcp_eq_hdl *fcp_eq_hdl;
8530 	struct lpfc_sli_ring *pring;
8531 	struct lpfc_queue *fpeq;
8532 	struct lpfc_eqe *eqe;
8533 	unsigned long iflags;
8534 	int rc, idx;
8535 
8536 	if (phba->sli_rev == LPFC_SLI_REV4) {
8537 		if (piocb->iocb_flag &  LPFC_IO_FCP) {
8538 			if (unlikely(!phba->sli4_hba.fcp_wq))
8539 				return IOCB_ERROR;
8540 			idx = lpfc_sli4_scmd_to_wqidx_distr(phba);
8541 			piocb->fcp_wqidx = idx;
8542 			ring_number = MAX_SLI3_CONFIGURED_RINGS + idx;
8543 
8544 			pring = &phba->sli.ring[ring_number];
8545 			spin_lock_irqsave(&pring->ring_lock, iflags);
8546 			rc = __lpfc_sli_issue_iocb(phba, ring_number, piocb,
8547 				flag);
8548 			spin_unlock_irqrestore(&pring->ring_lock, iflags);
8549 
8550 			if (lpfc_fcp_look_ahead) {
8551 				fcp_eq_hdl = &phba->sli4_hba.fcp_eq_hdl[idx];
8552 
8553 				if (atomic_dec_and_test(&fcp_eq_hdl->
8554 					fcp_eq_in_use)) {
8555 
8556 					/* Get associated EQ with this index */
8557 					fpeq = phba->sli4_hba.hba_eq[idx];
8558 
8559 					/* Turn off interrupts from this EQ */
8560 					lpfc_sli4_eq_clr_intr(fpeq);
8561 
8562 					/*
8563 					 * Process all the events on FCP EQ
8564 					 */
8565 					while ((eqe = lpfc_sli4_eq_get(fpeq))) {
8566 						lpfc_sli4_hba_handle_eqe(phba,
8567 							eqe, idx);
8568 						fpeq->EQ_processed++;
8569 					}
8570 
8571 					/* Always clear and re-arm the EQ */
8572 					lpfc_sli4_eq_release(fpeq,
8573 						LPFC_QUEUE_REARM);
8574 				}
8575 				atomic_inc(&fcp_eq_hdl->fcp_eq_in_use);
8576 			}
8577 		} else {
8578 			pring = &phba->sli.ring[ring_number];
8579 			spin_lock_irqsave(&pring->ring_lock, iflags);
8580 			rc = __lpfc_sli_issue_iocb(phba, ring_number, piocb,
8581 				flag);
8582 			spin_unlock_irqrestore(&pring->ring_lock, iflags);
8583 
8584 		}
8585 	} else {
8586 		/* For now, SLI2/3 will still use hbalock */
8587 		spin_lock_irqsave(&phba->hbalock, iflags);
8588 		rc = __lpfc_sli_issue_iocb(phba, ring_number, piocb, flag);
8589 		spin_unlock_irqrestore(&phba->hbalock, iflags);
8590 	}
8591 	return rc;
8592 }
8593 
8594 /**
8595  * lpfc_extra_ring_setup - Extra ring setup function
8596  * @phba: Pointer to HBA context object.
8597  *
8598  * This function is called while driver attaches with the
8599  * HBA to setup the extra ring. The extra ring is used
8600  * only when driver needs to support target mode functionality
8601  * or IP over FC functionalities.
8602  *
8603  * This function is called with no lock held.
8604  **/
8605 static int
8606 lpfc_extra_ring_setup( struct lpfc_hba *phba)
8607 {
8608 	struct lpfc_sli *psli;
8609 	struct lpfc_sli_ring *pring;
8610 
8611 	psli = &phba->sli;
8612 
8613 	/* Adjust cmd/rsp ring iocb entries more evenly */
8614 
8615 	/* Take some away from the FCP ring */
8616 	pring = &psli->ring[psli->fcp_ring];
8617 	pring->sli.sli3.numCiocb -= SLI2_IOCB_CMD_R1XTRA_ENTRIES;
8618 	pring->sli.sli3.numRiocb -= SLI2_IOCB_RSP_R1XTRA_ENTRIES;
8619 	pring->sli.sli3.numCiocb -= SLI2_IOCB_CMD_R3XTRA_ENTRIES;
8620 	pring->sli.sli3.numRiocb -= SLI2_IOCB_RSP_R3XTRA_ENTRIES;
8621 
8622 	/* and give them to the extra ring */
8623 	pring = &psli->ring[psli->extra_ring];
8624 
8625 	pring->sli.sli3.numCiocb += SLI2_IOCB_CMD_R1XTRA_ENTRIES;
8626 	pring->sli.sli3.numRiocb += SLI2_IOCB_RSP_R1XTRA_ENTRIES;
8627 	pring->sli.sli3.numCiocb += SLI2_IOCB_CMD_R3XTRA_ENTRIES;
8628 	pring->sli.sli3.numRiocb += SLI2_IOCB_RSP_R3XTRA_ENTRIES;
8629 
8630 	/* Setup default profile for this ring */
8631 	pring->iotag_max = 4096;
8632 	pring->num_mask = 1;
8633 	pring->prt[0].profile = 0;      /* Mask 0 */
8634 	pring->prt[0].rctl = phba->cfg_multi_ring_rctl;
8635 	pring->prt[0].type = phba->cfg_multi_ring_type;
8636 	pring->prt[0].lpfc_sli_rcv_unsol_event = NULL;
8637 	return 0;
8638 }
8639 
8640 /* lpfc_sli_abts_err_handler - handle a failed ABTS request from an SLI3 port.
8641  * @phba: Pointer to HBA context object.
8642  * @iocbq: Pointer to iocb object.
8643  *
8644  * The async_event handler calls this routine when it receives
8645  * an ASYNC_STATUS_CN event from the port.  The port generates
8646  * this event when an Abort Sequence request to an rport fails
8647  * twice in succession.  The abort could be originated by the
8648  * driver or by the port.  The ABTS could have been for an ELS
8649  * or FCP IO.  The port only generates this event when an ABTS
8650  * fails to complete after one retry.
8651  */
8652 static void
8653 lpfc_sli_abts_err_handler(struct lpfc_hba *phba,
8654 			  struct lpfc_iocbq *iocbq)
8655 {
8656 	struct lpfc_nodelist *ndlp = NULL;
8657 	uint16_t rpi = 0, vpi = 0;
8658 	struct lpfc_vport *vport = NULL;
8659 
8660 	/* The rpi in the ulpContext is vport-sensitive. */
8661 	vpi = iocbq->iocb.un.asyncstat.sub_ctxt_tag;
8662 	rpi = iocbq->iocb.ulpContext;
8663 
8664 	lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
8665 			"3092 Port generated ABTS async event "
8666 			"on vpi %d rpi %d status 0x%x\n",
8667 			vpi, rpi, iocbq->iocb.ulpStatus);
8668 
8669 	vport = lpfc_find_vport_by_vpid(phba, vpi);
8670 	if (!vport)
8671 		goto err_exit;
8672 	ndlp = lpfc_findnode_rpi(vport, rpi);
8673 	if (!ndlp || !NLP_CHK_NODE_ACT(ndlp))
8674 		goto err_exit;
8675 
8676 	if (iocbq->iocb.ulpStatus == IOSTAT_LOCAL_REJECT)
8677 		lpfc_sli_abts_recover_port(vport, ndlp);
8678 	return;
8679 
8680  err_exit:
8681 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
8682 			"3095 Event Context not found, no "
8683 			"action on vpi %d rpi %d status 0x%x, reason 0x%x\n",
8684 			iocbq->iocb.ulpContext, iocbq->iocb.ulpStatus,
8685 			vpi, rpi);
8686 }
8687 
8688 /* lpfc_sli4_abts_err_handler - handle a failed ABTS request from an SLI4 port.
8689  * @phba: pointer to HBA context object.
8690  * @ndlp: nodelist pointer for the impacted rport.
8691  * @axri: pointer to the wcqe containing the failed exchange.
8692  *
8693  * The driver calls this routine when it receives an ABORT_XRI_FCP CQE from the
8694  * port.  The port generates this event when an abort exchange request to an
8695  * rport fails twice in succession with no reply.  The abort could be originated
8696  * by the driver or by the port.  The ABTS could have been for an ELS or FCP IO.
8697  */
8698 void
8699 lpfc_sli4_abts_err_handler(struct lpfc_hba *phba,
8700 			   struct lpfc_nodelist *ndlp,
8701 			   struct sli4_wcqe_xri_aborted *axri)
8702 {
8703 	struct lpfc_vport *vport;
8704 	uint32_t ext_status = 0;
8705 
8706 	if (!ndlp || !NLP_CHK_NODE_ACT(ndlp)) {
8707 		lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
8708 				"3115 Node Context not found, driver "
8709 				"ignoring abts err event\n");
8710 		return;
8711 	}
8712 
8713 	vport = ndlp->vport;
8714 	lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
8715 			"3116 Port generated FCP XRI ABORT event on "
8716 			"vpi %d rpi %d xri x%x status 0x%x parameter x%x\n",
8717 			ndlp->vport->vpi, phba->sli4_hba.rpi_ids[ndlp->nlp_rpi],
8718 			bf_get(lpfc_wcqe_xa_xri, axri),
8719 			bf_get(lpfc_wcqe_xa_status, axri),
8720 			axri->parameter);
8721 
8722 	/*
8723 	 * Catch the ABTS protocol failure case.  Older OCe FW releases returned
8724 	 * LOCAL_REJECT and 0 for a failed ABTS exchange and later OCe and
8725 	 * LPe FW releases returned LOCAL_REJECT and SEQUENCE_TIMEOUT.
8726 	 */
8727 	ext_status = axri->parameter & IOERR_PARAM_MASK;
8728 	if ((bf_get(lpfc_wcqe_xa_status, axri) == IOSTAT_LOCAL_REJECT) &&
8729 	    ((ext_status == IOERR_SEQUENCE_TIMEOUT) || (ext_status == 0)))
8730 		lpfc_sli_abts_recover_port(vport, ndlp);
8731 }
8732 
8733 /**
8734  * lpfc_sli_async_event_handler - ASYNC iocb handler function
8735  * @phba: Pointer to HBA context object.
8736  * @pring: Pointer to driver SLI ring object.
8737  * @iocbq: Pointer to iocb object.
8738  *
8739  * This function is called by the slow ring event handler
8740  * function when there is an ASYNC event iocb in the ring.
8741  * This function is called with no lock held.
8742  * Currently this function handles only temperature related
8743  * ASYNC events. The function decodes the temperature sensor
8744  * event message and posts events for the management applications.
8745  **/
8746 static void
8747 lpfc_sli_async_event_handler(struct lpfc_hba * phba,
8748 	struct lpfc_sli_ring * pring, struct lpfc_iocbq * iocbq)
8749 {
8750 	IOCB_t *icmd;
8751 	uint16_t evt_code;
8752 	struct temp_event temp_event_data;
8753 	struct Scsi_Host *shost;
8754 	uint32_t *iocb_w;
8755 
8756 	icmd = &iocbq->iocb;
8757 	evt_code = icmd->un.asyncstat.evt_code;
8758 
8759 	switch (evt_code) {
8760 	case ASYNC_TEMP_WARN:
8761 	case ASYNC_TEMP_SAFE:
8762 		temp_event_data.data = (uint32_t) icmd->ulpContext;
8763 		temp_event_data.event_type = FC_REG_TEMPERATURE_EVENT;
8764 		if (evt_code == ASYNC_TEMP_WARN) {
8765 			temp_event_data.event_code = LPFC_THRESHOLD_TEMP;
8766 			lpfc_printf_log(phba, KERN_ERR, LOG_TEMP,
8767 				"0347 Adapter is very hot, please take "
8768 				"corrective action. temperature : %d Celsius\n",
8769 				(uint32_t) icmd->ulpContext);
8770 		} else {
8771 			temp_event_data.event_code = LPFC_NORMAL_TEMP;
8772 			lpfc_printf_log(phba, KERN_ERR, LOG_TEMP,
8773 				"0340 Adapter temperature is OK now. "
8774 				"temperature : %d Celsius\n",
8775 				(uint32_t) icmd->ulpContext);
8776 		}
8777 
8778 		/* Send temperature change event to applications */
8779 		shost = lpfc_shost_from_vport(phba->pport);
8780 		fc_host_post_vendor_event(shost, fc_get_event_number(),
8781 			sizeof(temp_event_data), (char *) &temp_event_data,
8782 			LPFC_NL_VENDOR_ID);
8783 		break;
8784 	case ASYNC_STATUS_CN:
8785 		lpfc_sli_abts_err_handler(phba, iocbq);
8786 		break;
8787 	default:
8788 		iocb_w = (uint32_t *) icmd;
8789 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
8790 			"0346 Ring %d handler: unexpected ASYNC_STATUS"
8791 			" evt_code 0x%x\n"
8792 			"W0  0x%08x W1  0x%08x W2  0x%08x W3  0x%08x\n"
8793 			"W4  0x%08x W5  0x%08x W6  0x%08x W7  0x%08x\n"
8794 			"W8  0x%08x W9  0x%08x W10 0x%08x W11 0x%08x\n"
8795 			"W12 0x%08x W13 0x%08x W14 0x%08x W15 0x%08x\n",
8796 			pring->ringno, icmd->un.asyncstat.evt_code,
8797 			iocb_w[0], iocb_w[1], iocb_w[2], iocb_w[3],
8798 			iocb_w[4], iocb_w[5], iocb_w[6], iocb_w[7],
8799 			iocb_w[8], iocb_w[9], iocb_w[10], iocb_w[11],
8800 			iocb_w[12], iocb_w[13], iocb_w[14], iocb_w[15]);
8801 
8802 		break;
8803 	}
8804 }
8805 
8806 
8807 /**
8808  * lpfc_sli_setup - SLI ring setup function
8809  * @phba: Pointer to HBA context object.
8810  *
8811  * lpfc_sli_setup sets up rings of the SLI interface with
8812  * number of iocbs per ring and iotags. This function is
8813  * called while driver attach to the HBA and before the
8814  * interrupts are enabled. So there is no need for locking.
8815  *
8816  * This function always returns 0.
8817  **/
8818 int
8819 lpfc_sli_setup(struct lpfc_hba *phba)
8820 {
8821 	int i, totiocbsize = 0;
8822 	struct lpfc_sli *psli = &phba->sli;
8823 	struct lpfc_sli_ring *pring;
8824 
8825 	psli->num_rings = MAX_SLI3_CONFIGURED_RINGS;
8826 	if (phba->sli_rev == LPFC_SLI_REV4)
8827 		psli->num_rings += phba->cfg_fcp_io_channel;
8828 	psli->sli_flag = 0;
8829 	psli->fcp_ring = LPFC_FCP_RING;
8830 	psli->next_ring = LPFC_FCP_NEXT_RING;
8831 	psli->extra_ring = LPFC_EXTRA_RING;
8832 
8833 	psli->iocbq_lookup = NULL;
8834 	psli->iocbq_lookup_len = 0;
8835 	psli->last_iotag = 0;
8836 
8837 	for (i = 0; i < psli->num_rings; i++) {
8838 		pring = &psli->ring[i];
8839 		switch (i) {
8840 		case LPFC_FCP_RING:	/* ring 0 - FCP */
8841 			/* numCiocb and numRiocb are used in config_port */
8842 			pring->sli.sli3.numCiocb = SLI2_IOCB_CMD_R0_ENTRIES;
8843 			pring->sli.sli3.numRiocb = SLI2_IOCB_RSP_R0_ENTRIES;
8844 			pring->sli.sli3.numCiocb +=
8845 				SLI2_IOCB_CMD_R1XTRA_ENTRIES;
8846 			pring->sli.sli3.numRiocb +=
8847 				SLI2_IOCB_RSP_R1XTRA_ENTRIES;
8848 			pring->sli.sli3.numCiocb +=
8849 				SLI2_IOCB_CMD_R3XTRA_ENTRIES;
8850 			pring->sli.sli3.numRiocb +=
8851 				SLI2_IOCB_RSP_R3XTRA_ENTRIES;
8852 			pring->sli.sli3.sizeCiocb = (phba->sli_rev == 3) ?
8853 							SLI3_IOCB_CMD_SIZE :
8854 							SLI2_IOCB_CMD_SIZE;
8855 			pring->sli.sli3.sizeRiocb = (phba->sli_rev == 3) ?
8856 							SLI3_IOCB_RSP_SIZE :
8857 							SLI2_IOCB_RSP_SIZE;
8858 			pring->iotag_ctr = 0;
8859 			pring->iotag_max =
8860 			    (phba->cfg_hba_queue_depth * 2);
8861 			pring->fast_iotag = pring->iotag_max;
8862 			pring->num_mask = 0;
8863 			break;
8864 		case LPFC_EXTRA_RING:	/* ring 1 - EXTRA */
8865 			/* numCiocb and numRiocb are used in config_port */
8866 			pring->sli.sli3.numCiocb = SLI2_IOCB_CMD_R1_ENTRIES;
8867 			pring->sli.sli3.numRiocb = SLI2_IOCB_RSP_R1_ENTRIES;
8868 			pring->sli.sli3.sizeCiocb = (phba->sli_rev == 3) ?
8869 							SLI3_IOCB_CMD_SIZE :
8870 							SLI2_IOCB_CMD_SIZE;
8871 			pring->sli.sli3.sizeRiocb = (phba->sli_rev == 3) ?
8872 							SLI3_IOCB_RSP_SIZE :
8873 							SLI2_IOCB_RSP_SIZE;
8874 			pring->iotag_max = phba->cfg_hba_queue_depth;
8875 			pring->num_mask = 0;
8876 			break;
8877 		case LPFC_ELS_RING:	/* ring 2 - ELS / CT */
8878 			/* numCiocb and numRiocb are used in config_port */
8879 			pring->sli.sli3.numCiocb = SLI2_IOCB_CMD_R2_ENTRIES;
8880 			pring->sli.sli3.numRiocb = SLI2_IOCB_RSP_R2_ENTRIES;
8881 			pring->sli.sli3.sizeCiocb = (phba->sli_rev == 3) ?
8882 							SLI3_IOCB_CMD_SIZE :
8883 							SLI2_IOCB_CMD_SIZE;
8884 			pring->sli.sli3.sizeRiocb = (phba->sli_rev == 3) ?
8885 							SLI3_IOCB_RSP_SIZE :
8886 							SLI2_IOCB_RSP_SIZE;
8887 			pring->fast_iotag = 0;
8888 			pring->iotag_ctr = 0;
8889 			pring->iotag_max = 4096;
8890 			pring->lpfc_sli_rcv_async_status =
8891 				lpfc_sli_async_event_handler;
8892 			pring->num_mask = LPFC_MAX_RING_MASK;
8893 			pring->prt[0].profile = 0;	/* Mask 0 */
8894 			pring->prt[0].rctl = FC_RCTL_ELS_REQ;
8895 			pring->prt[0].type = FC_TYPE_ELS;
8896 			pring->prt[0].lpfc_sli_rcv_unsol_event =
8897 			    lpfc_els_unsol_event;
8898 			pring->prt[1].profile = 0;	/* Mask 1 */
8899 			pring->prt[1].rctl = FC_RCTL_ELS_REP;
8900 			pring->prt[1].type = FC_TYPE_ELS;
8901 			pring->prt[1].lpfc_sli_rcv_unsol_event =
8902 			    lpfc_els_unsol_event;
8903 			pring->prt[2].profile = 0;	/* Mask 2 */
8904 			/* NameServer Inquiry */
8905 			pring->prt[2].rctl = FC_RCTL_DD_UNSOL_CTL;
8906 			/* NameServer */
8907 			pring->prt[2].type = FC_TYPE_CT;
8908 			pring->prt[2].lpfc_sli_rcv_unsol_event =
8909 			    lpfc_ct_unsol_event;
8910 			pring->prt[3].profile = 0;	/* Mask 3 */
8911 			/* NameServer response */
8912 			pring->prt[3].rctl = FC_RCTL_DD_SOL_CTL;
8913 			/* NameServer */
8914 			pring->prt[3].type = FC_TYPE_CT;
8915 			pring->prt[3].lpfc_sli_rcv_unsol_event =
8916 			    lpfc_ct_unsol_event;
8917 			break;
8918 		}
8919 		totiocbsize += (pring->sli.sli3.numCiocb *
8920 			pring->sli.sli3.sizeCiocb) +
8921 			(pring->sli.sli3.numRiocb * pring->sli.sli3.sizeRiocb);
8922 	}
8923 	if (totiocbsize > MAX_SLIM_IOCB_SIZE) {
8924 		/* Too many cmd / rsp ring entries in SLI2 SLIM */
8925 		printk(KERN_ERR "%d:0462 Too many cmd / rsp ring entries in "
8926 		       "SLI2 SLIM Data: x%x x%lx\n",
8927 		       phba->brd_no, totiocbsize,
8928 		       (unsigned long) MAX_SLIM_IOCB_SIZE);
8929 	}
8930 	if (phba->cfg_multi_ring_support == 2)
8931 		lpfc_extra_ring_setup(phba);
8932 
8933 	return 0;
8934 }
8935 
8936 /**
8937  * lpfc_sli_queue_setup - Queue initialization function
8938  * @phba: Pointer to HBA context object.
8939  *
8940  * lpfc_sli_queue_setup sets up mailbox queues and iocb queues for each
8941  * ring. This function also initializes ring indices of each ring.
8942  * This function is called during the initialization of the SLI
8943  * interface of an HBA.
8944  * This function is called with no lock held and always returns
8945  * 1.
8946  **/
8947 int
8948 lpfc_sli_queue_setup(struct lpfc_hba *phba)
8949 {
8950 	struct lpfc_sli *psli;
8951 	struct lpfc_sli_ring *pring;
8952 	int i;
8953 
8954 	psli = &phba->sli;
8955 	spin_lock_irq(&phba->hbalock);
8956 	INIT_LIST_HEAD(&psli->mboxq);
8957 	INIT_LIST_HEAD(&psli->mboxq_cmpl);
8958 	/* Initialize list headers for txq and txcmplq as double linked lists */
8959 	for (i = 0; i < psli->num_rings; i++) {
8960 		pring = &psli->ring[i];
8961 		pring->ringno = i;
8962 		pring->sli.sli3.next_cmdidx  = 0;
8963 		pring->sli.sli3.local_getidx = 0;
8964 		pring->sli.sli3.cmdidx = 0;
8965 		INIT_LIST_HEAD(&pring->txq);
8966 		INIT_LIST_HEAD(&pring->txcmplq);
8967 		INIT_LIST_HEAD(&pring->iocb_continueq);
8968 		INIT_LIST_HEAD(&pring->iocb_continue_saveq);
8969 		INIT_LIST_HEAD(&pring->postbufq);
8970 		spin_lock_init(&pring->ring_lock);
8971 	}
8972 	spin_unlock_irq(&phba->hbalock);
8973 	return 1;
8974 }
8975 
8976 /**
8977  * lpfc_sli_mbox_sys_flush - Flush mailbox command sub-system
8978  * @phba: Pointer to HBA context object.
8979  *
8980  * This routine flushes the mailbox command subsystem. It will unconditionally
8981  * flush all the mailbox commands in the three possible stages in the mailbox
8982  * command sub-system: pending mailbox command queue; the outstanding mailbox
8983  * command; and completed mailbox command queue. It is caller's responsibility
8984  * to make sure that the driver is in the proper state to flush the mailbox
8985  * command sub-system. Namely, the posting of mailbox commands into the
8986  * pending mailbox command queue from the various clients must be stopped;
8987  * either the HBA is in a state that it will never works on the outstanding
8988  * mailbox command (such as in EEH or ERATT conditions) or the outstanding
8989  * mailbox command has been completed.
8990  **/
8991 static void
8992 lpfc_sli_mbox_sys_flush(struct lpfc_hba *phba)
8993 {
8994 	LIST_HEAD(completions);
8995 	struct lpfc_sli *psli = &phba->sli;
8996 	LPFC_MBOXQ_t *pmb;
8997 	unsigned long iflag;
8998 
8999 	/* Flush all the mailbox commands in the mbox system */
9000 	spin_lock_irqsave(&phba->hbalock, iflag);
9001 	/* The pending mailbox command queue */
9002 	list_splice_init(&phba->sli.mboxq, &completions);
9003 	/* The outstanding active mailbox command */
9004 	if (psli->mbox_active) {
9005 		list_add_tail(&psli->mbox_active->list, &completions);
9006 		psli->mbox_active = NULL;
9007 		psli->sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
9008 	}
9009 	/* The completed mailbox command queue */
9010 	list_splice_init(&phba->sli.mboxq_cmpl, &completions);
9011 	spin_unlock_irqrestore(&phba->hbalock, iflag);
9012 
9013 	/* Return all flushed mailbox commands with MBX_NOT_FINISHED status */
9014 	while (!list_empty(&completions)) {
9015 		list_remove_head(&completions, pmb, LPFC_MBOXQ_t, list);
9016 		pmb->u.mb.mbxStatus = MBX_NOT_FINISHED;
9017 		if (pmb->mbox_cmpl)
9018 			pmb->mbox_cmpl(phba, pmb);
9019 	}
9020 }
9021 
9022 /**
9023  * lpfc_sli_host_down - Vport cleanup function
9024  * @vport: Pointer to virtual port object.
9025  *
9026  * lpfc_sli_host_down is called to clean up the resources
9027  * associated with a vport before destroying virtual
9028  * port data structures.
9029  * This function does following operations:
9030  * - Free discovery resources associated with this virtual
9031  *   port.
9032  * - Free iocbs associated with this virtual port in
9033  *   the txq.
9034  * - Send abort for all iocb commands associated with this
9035  *   vport in txcmplq.
9036  *
9037  * This function is called with no lock held and always returns 1.
9038  **/
9039 int
9040 lpfc_sli_host_down(struct lpfc_vport *vport)
9041 {
9042 	LIST_HEAD(completions);
9043 	struct lpfc_hba *phba = vport->phba;
9044 	struct lpfc_sli *psli = &phba->sli;
9045 	struct lpfc_sli_ring *pring;
9046 	struct lpfc_iocbq *iocb, *next_iocb;
9047 	int i;
9048 	unsigned long flags = 0;
9049 	uint16_t prev_pring_flag;
9050 
9051 	lpfc_cleanup_discovery_resources(vport);
9052 
9053 	spin_lock_irqsave(&phba->hbalock, flags);
9054 	for (i = 0; i < psli->num_rings; i++) {
9055 		pring = &psli->ring[i];
9056 		prev_pring_flag = pring->flag;
9057 		/* Only slow rings */
9058 		if (pring->ringno == LPFC_ELS_RING) {
9059 			pring->flag |= LPFC_DEFERRED_RING_EVENT;
9060 			/* Set the lpfc data pending flag */
9061 			set_bit(LPFC_DATA_READY, &phba->data_flags);
9062 		}
9063 		/*
9064 		 * Error everything on the txq since these iocbs have not been
9065 		 * given to the FW yet.
9066 		 */
9067 		list_for_each_entry_safe(iocb, next_iocb, &pring->txq, list) {
9068 			if (iocb->vport != vport)
9069 				continue;
9070 			list_move_tail(&iocb->list, &completions);
9071 		}
9072 
9073 		/* Next issue ABTS for everything on the txcmplq */
9074 		list_for_each_entry_safe(iocb, next_iocb, &pring->txcmplq,
9075 									list) {
9076 			if (iocb->vport != vport)
9077 				continue;
9078 			lpfc_sli_issue_abort_iotag(phba, pring, iocb);
9079 		}
9080 
9081 		pring->flag = prev_pring_flag;
9082 	}
9083 
9084 	spin_unlock_irqrestore(&phba->hbalock, flags);
9085 
9086 	/* Cancel all the IOCBs from the completions list */
9087 	lpfc_sli_cancel_iocbs(phba, &completions, IOSTAT_LOCAL_REJECT,
9088 			      IOERR_SLI_DOWN);
9089 	return 1;
9090 }
9091 
9092 /**
9093  * lpfc_sli_hba_down - Resource cleanup function for the HBA
9094  * @phba: Pointer to HBA context object.
9095  *
9096  * This function cleans up all iocb, buffers, mailbox commands
9097  * while shutting down the HBA. This function is called with no
9098  * lock held and always returns 1.
9099  * This function does the following to cleanup driver resources:
9100  * - Free discovery resources for each virtual port
9101  * - Cleanup any pending fabric iocbs
9102  * - Iterate through the iocb txq and free each entry
9103  *   in the list.
9104  * - Free up any buffer posted to the HBA
9105  * - Free mailbox commands in the mailbox queue.
9106  **/
9107 int
9108 lpfc_sli_hba_down(struct lpfc_hba *phba)
9109 {
9110 	LIST_HEAD(completions);
9111 	struct lpfc_sli *psli = &phba->sli;
9112 	struct lpfc_sli_ring *pring;
9113 	struct lpfc_dmabuf *buf_ptr;
9114 	unsigned long flags = 0;
9115 	int i;
9116 
9117 	/* Shutdown the mailbox command sub-system */
9118 	lpfc_sli_mbox_sys_shutdown(phba, LPFC_MBX_WAIT);
9119 
9120 	lpfc_hba_down_prep(phba);
9121 
9122 	lpfc_fabric_abort_hba(phba);
9123 
9124 	spin_lock_irqsave(&phba->hbalock, flags);
9125 	for (i = 0; i < psli->num_rings; i++) {
9126 		pring = &psli->ring[i];
9127 		/* Only slow rings */
9128 		if (pring->ringno == LPFC_ELS_RING) {
9129 			pring->flag |= LPFC_DEFERRED_RING_EVENT;
9130 			/* Set the lpfc data pending flag */
9131 			set_bit(LPFC_DATA_READY, &phba->data_flags);
9132 		}
9133 
9134 		/*
9135 		 * Error everything on the txq since these iocbs have not been
9136 		 * given to the FW yet.
9137 		 */
9138 		list_splice_init(&pring->txq, &completions);
9139 	}
9140 	spin_unlock_irqrestore(&phba->hbalock, flags);
9141 
9142 	/* Cancel all the IOCBs from the completions list */
9143 	lpfc_sli_cancel_iocbs(phba, &completions, IOSTAT_LOCAL_REJECT,
9144 			      IOERR_SLI_DOWN);
9145 
9146 	spin_lock_irqsave(&phba->hbalock, flags);
9147 	list_splice_init(&phba->elsbuf, &completions);
9148 	phba->elsbuf_cnt = 0;
9149 	phba->elsbuf_prev_cnt = 0;
9150 	spin_unlock_irqrestore(&phba->hbalock, flags);
9151 
9152 	while (!list_empty(&completions)) {
9153 		list_remove_head(&completions, buf_ptr,
9154 			struct lpfc_dmabuf, list);
9155 		lpfc_mbuf_free(phba, buf_ptr->virt, buf_ptr->phys);
9156 		kfree(buf_ptr);
9157 	}
9158 
9159 	/* Return any active mbox cmds */
9160 	del_timer_sync(&psli->mbox_tmo);
9161 
9162 	spin_lock_irqsave(&phba->pport->work_port_lock, flags);
9163 	phba->pport->work_port_events &= ~WORKER_MBOX_TMO;
9164 	spin_unlock_irqrestore(&phba->pport->work_port_lock, flags);
9165 
9166 	return 1;
9167 }
9168 
9169 /**
9170  * lpfc_sli_pcimem_bcopy - SLI memory copy function
9171  * @srcp: Source memory pointer.
9172  * @destp: Destination memory pointer.
9173  * @cnt: Number of words required to be copied.
9174  *
9175  * This function is used for copying data between driver memory
9176  * and the SLI memory. This function also changes the endianness
9177  * of each word if native endianness is different from SLI
9178  * endianness. This function can be called with or without
9179  * lock.
9180  **/
9181 void
9182 lpfc_sli_pcimem_bcopy(void *srcp, void *destp, uint32_t cnt)
9183 {
9184 	uint32_t *src = srcp;
9185 	uint32_t *dest = destp;
9186 	uint32_t ldata;
9187 	int i;
9188 
9189 	for (i = 0; i < (int)cnt; i += sizeof (uint32_t)) {
9190 		ldata = *src;
9191 		ldata = le32_to_cpu(ldata);
9192 		*dest = ldata;
9193 		src++;
9194 		dest++;
9195 	}
9196 }
9197 
9198 
9199 /**
9200  * lpfc_sli_bemem_bcopy - SLI memory copy function
9201  * @srcp: Source memory pointer.
9202  * @destp: Destination memory pointer.
9203  * @cnt: Number of words required to be copied.
9204  *
9205  * This function is used for copying data between a data structure
9206  * with big endian representation to local endianness.
9207  * This function can be called with or without lock.
9208  **/
9209 void
9210 lpfc_sli_bemem_bcopy(void *srcp, void *destp, uint32_t cnt)
9211 {
9212 	uint32_t *src = srcp;
9213 	uint32_t *dest = destp;
9214 	uint32_t ldata;
9215 	int i;
9216 
9217 	for (i = 0; i < (int)cnt; i += sizeof(uint32_t)) {
9218 		ldata = *src;
9219 		ldata = be32_to_cpu(ldata);
9220 		*dest = ldata;
9221 		src++;
9222 		dest++;
9223 	}
9224 }
9225 
9226 /**
9227  * lpfc_sli_ringpostbuf_put - Function to add a buffer to postbufq
9228  * @phba: Pointer to HBA context object.
9229  * @pring: Pointer to driver SLI ring object.
9230  * @mp: Pointer to driver buffer object.
9231  *
9232  * This function is called with no lock held.
9233  * It always return zero after adding the buffer to the postbufq
9234  * buffer list.
9235  **/
9236 int
9237 lpfc_sli_ringpostbuf_put(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
9238 			 struct lpfc_dmabuf *mp)
9239 {
9240 	/* Stick struct lpfc_dmabuf at end of postbufq so driver can look it up
9241 	   later */
9242 	spin_lock_irq(&phba->hbalock);
9243 	list_add_tail(&mp->list, &pring->postbufq);
9244 	pring->postbufq_cnt++;
9245 	spin_unlock_irq(&phba->hbalock);
9246 	return 0;
9247 }
9248 
9249 /**
9250  * lpfc_sli_get_buffer_tag - allocates a tag for a CMD_QUE_XRI64_CX buffer
9251  * @phba: Pointer to HBA context object.
9252  *
9253  * When HBQ is enabled, buffers are searched based on tags. This function
9254  * allocates a tag for buffer posted using CMD_QUE_XRI64_CX iocb. The
9255  * tag is bit wise or-ed with QUE_BUFTAG_BIT to make sure that the tag
9256  * does not conflict with tags of buffer posted for unsolicited events.
9257  * The function returns the allocated tag. The function is called with
9258  * no locks held.
9259  **/
9260 uint32_t
9261 lpfc_sli_get_buffer_tag(struct lpfc_hba *phba)
9262 {
9263 	spin_lock_irq(&phba->hbalock);
9264 	phba->buffer_tag_count++;
9265 	/*
9266 	 * Always set the QUE_BUFTAG_BIT to distiguish between
9267 	 * a tag assigned by HBQ.
9268 	 */
9269 	phba->buffer_tag_count |= QUE_BUFTAG_BIT;
9270 	spin_unlock_irq(&phba->hbalock);
9271 	return phba->buffer_tag_count;
9272 }
9273 
9274 /**
9275  * lpfc_sli_ring_taggedbuf_get - find HBQ buffer associated with given tag
9276  * @phba: Pointer to HBA context object.
9277  * @pring: Pointer to driver SLI ring object.
9278  * @tag: Buffer tag.
9279  *
9280  * Buffers posted using CMD_QUE_XRI64_CX iocb are in pring->postbufq
9281  * list. After HBA DMA data to these buffers, CMD_IOCB_RET_XRI64_CX
9282  * iocb is posted to the response ring with the tag of the buffer.
9283  * This function searches the pring->postbufq list using the tag
9284  * to find buffer associated with CMD_IOCB_RET_XRI64_CX
9285  * iocb. If the buffer is found then lpfc_dmabuf object of the
9286  * buffer is returned to the caller else NULL is returned.
9287  * This function is called with no lock held.
9288  **/
9289 struct lpfc_dmabuf *
9290 lpfc_sli_ring_taggedbuf_get(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
9291 			uint32_t tag)
9292 {
9293 	struct lpfc_dmabuf *mp, *next_mp;
9294 	struct list_head *slp = &pring->postbufq;
9295 
9296 	/* Search postbufq, from the beginning, looking for a match on tag */
9297 	spin_lock_irq(&phba->hbalock);
9298 	list_for_each_entry_safe(mp, next_mp, &pring->postbufq, list) {
9299 		if (mp->buffer_tag == tag) {
9300 			list_del_init(&mp->list);
9301 			pring->postbufq_cnt--;
9302 			spin_unlock_irq(&phba->hbalock);
9303 			return mp;
9304 		}
9305 	}
9306 
9307 	spin_unlock_irq(&phba->hbalock);
9308 	lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
9309 			"0402 Cannot find virtual addr for buffer tag on "
9310 			"ring %d Data x%lx x%p x%p x%x\n",
9311 			pring->ringno, (unsigned long) tag,
9312 			slp->next, slp->prev, pring->postbufq_cnt);
9313 
9314 	return NULL;
9315 }
9316 
9317 /**
9318  * lpfc_sli_ringpostbuf_get - search buffers for unsolicited CT and ELS events
9319  * @phba: Pointer to HBA context object.
9320  * @pring: Pointer to driver SLI ring object.
9321  * @phys: DMA address of the buffer.
9322  *
9323  * This function searches the buffer list using the dma_address
9324  * of unsolicited event to find the driver's lpfc_dmabuf object
9325  * corresponding to the dma_address. The function returns the
9326  * lpfc_dmabuf object if a buffer is found else it returns NULL.
9327  * This function is called by the ct and els unsolicited event
9328  * handlers to get the buffer associated with the unsolicited
9329  * event.
9330  *
9331  * This function is called with no lock held.
9332  **/
9333 struct lpfc_dmabuf *
9334 lpfc_sli_ringpostbuf_get(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
9335 			 dma_addr_t phys)
9336 {
9337 	struct lpfc_dmabuf *mp, *next_mp;
9338 	struct list_head *slp = &pring->postbufq;
9339 
9340 	/* Search postbufq, from the beginning, looking for a match on phys */
9341 	spin_lock_irq(&phba->hbalock);
9342 	list_for_each_entry_safe(mp, next_mp, &pring->postbufq, list) {
9343 		if (mp->phys == phys) {
9344 			list_del_init(&mp->list);
9345 			pring->postbufq_cnt--;
9346 			spin_unlock_irq(&phba->hbalock);
9347 			return mp;
9348 		}
9349 	}
9350 
9351 	spin_unlock_irq(&phba->hbalock);
9352 	lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
9353 			"0410 Cannot find virtual addr for mapped buf on "
9354 			"ring %d Data x%llx x%p x%p x%x\n",
9355 			pring->ringno, (unsigned long long)phys,
9356 			slp->next, slp->prev, pring->postbufq_cnt);
9357 	return NULL;
9358 }
9359 
9360 /**
9361  * lpfc_sli_abort_els_cmpl - Completion handler for the els abort iocbs
9362  * @phba: Pointer to HBA context object.
9363  * @cmdiocb: Pointer to driver command iocb object.
9364  * @rspiocb: Pointer to driver response iocb object.
9365  *
9366  * This function is the completion handler for the abort iocbs for
9367  * ELS commands. This function is called from the ELS ring event
9368  * handler with no lock held. This function frees memory resources
9369  * associated with the abort iocb.
9370  **/
9371 static void
9372 lpfc_sli_abort_els_cmpl(struct lpfc_hba *phba, struct lpfc_iocbq *cmdiocb,
9373 			struct lpfc_iocbq *rspiocb)
9374 {
9375 	IOCB_t *irsp = &rspiocb->iocb;
9376 	uint16_t abort_iotag, abort_context;
9377 	struct lpfc_iocbq *abort_iocb = NULL;
9378 
9379 	if (irsp->ulpStatus) {
9380 
9381 		/*
9382 		 * Assume that the port already completed and returned, or
9383 		 * will return the iocb. Just Log the message.
9384 		 */
9385 		abort_context = cmdiocb->iocb.un.acxri.abortContextTag;
9386 		abort_iotag = cmdiocb->iocb.un.acxri.abortIoTag;
9387 
9388 		spin_lock_irq(&phba->hbalock);
9389 		if (phba->sli_rev < LPFC_SLI_REV4) {
9390 			if (abort_iotag != 0 &&
9391 				abort_iotag <= phba->sli.last_iotag)
9392 				abort_iocb =
9393 					phba->sli.iocbq_lookup[abort_iotag];
9394 		} else
9395 			/* For sli4 the abort_tag is the XRI,
9396 			 * so the abort routine puts the iotag  of the iocb
9397 			 * being aborted in the context field of the abort
9398 			 * IOCB.
9399 			 */
9400 			abort_iocb = phba->sli.iocbq_lookup[abort_context];
9401 
9402 		lpfc_printf_log(phba, KERN_WARNING, LOG_ELS | LOG_SLI,
9403 				"0327 Cannot abort els iocb %p "
9404 				"with tag %x context %x, abort status %x, "
9405 				"abort code %x\n",
9406 				abort_iocb, abort_iotag, abort_context,
9407 				irsp->ulpStatus, irsp->un.ulpWord[4]);
9408 
9409 		spin_unlock_irq(&phba->hbalock);
9410 	}
9411 	lpfc_sli_release_iocbq(phba, cmdiocb);
9412 	return;
9413 }
9414 
9415 /**
9416  * lpfc_ignore_els_cmpl - Completion handler for aborted ELS command
9417  * @phba: Pointer to HBA context object.
9418  * @cmdiocb: Pointer to driver command iocb object.
9419  * @rspiocb: Pointer to driver response iocb object.
9420  *
9421  * The function is called from SLI ring event handler with no
9422  * lock held. This function is the completion handler for ELS commands
9423  * which are aborted. The function frees memory resources used for
9424  * the aborted ELS commands.
9425  **/
9426 static void
9427 lpfc_ignore_els_cmpl(struct lpfc_hba *phba, struct lpfc_iocbq *cmdiocb,
9428 		     struct lpfc_iocbq *rspiocb)
9429 {
9430 	IOCB_t *irsp = &rspiocb->iocb;
9431 
9432 	/* ELS cmd tag <ulpIoTag> completes */
9433 	lpfc_printf_log(phba, KERN_INFO, LOG_ELS,
9434 			"0139 Ignoring ELS cmd tag x%x completion Data: "
9435 			"x%x x%x x%x\n",
9436 			irsp->ulpIoTag, irsp->ulpStatus,
9437 			irsp->un.ulpWord[4], irsp->ulpTimeout);
9438 	if (cmdiocb->iocb.ulpCommand == CMD_GEN_REQUEST64_CR)
9439 		lpfc_ct_free_iocb(phba, cmdiocb);
9440 	else
9441 		lpfc_els_free_iocb(phba, cmdiocb);
9442 	return;
9443 }
9444 
9445 /**
9446  * lpfc_sli_abort_iotag_issue - Issue abort for a command iocb
9447  * @phba: Pointer to HBA context object.
9448  * @pring: Pointer to driver SLI ring object.
9449  * @cmdiocb: Pointer to driver command iocb object.
9450  *
9451  * This function issues an abort iocb for the provided command iocb down to
9452  * the port. Other than the case the outstanding command iocb is an abort
9453  * request, this function issues abort out unconditionally. This function is
9454  * called with hbalock held. The function returns 0 when it fails due to
9455  * memory allocation failure or when the command iocb is an abort request.
9456  **/
9457 static int
9458 lpfc_sli_abort_iotag_issue(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
9459 			   struct lpfc_iocbq *cmdiocb)
9460 {
9461 	struct lpfc_vport *vport = cmdiocb->vport;
9462 	struct lpfc_iocbq *abtsiocbp;
9463 	IOCB_t *icmd = NULL;
9464 	IOCB_t *iabt = NULL;
9465 	int retval;
9466 	unsigned long iflags;
9467 
9468 	/*
9469 	 * There are certain command types we don't want to abort.  And we
9470 	 * don't want to abort commands that are already in the process of
9471 	 * being aborted.
9472 	 */
9473 	icmd = &cmdiocb->iocb;
9474 	if (icmd->ulpCommand == CMD_ABORT_XRI_CN ||
9475 	    icmd->ulpCommand == CMD_CLOSE_XRI_CN ||
9476 	    (cmdiocb->iocb_flag & LPFC_DRIVER_ABORTED) != 0)
9477 		return 0;
9478 
9479 	/* issue ABTS for this IOCB based on iotag */
9480 	abtsiocbp = __lpfc_sli_get_iocbq(phba);
9481 	if (abtsiocbp == NULL)
9482 		return 0;
9483 
9484 	/* This signals the response to set the correct status
9485 	 * before calling the completion handler
9486 	 */
9487 	cmdiocb->iocb_flag |= LPFC_DRIVER_ABORTED;
9488 
9489 	iabt = &abtsiocbp->iocb;
9490 	iabt->un.acxri.abortType = ABORT_TYPE_ABTS;
9491 	iabt->un.acxri.abortContextTag = icmd->ulpContext;
9492 	if (phba->sli_rev == LPFC_SLI_REV4) {
9493 		iabt->un.acxri.abortIoTag = cmdiocb->sli4_xritag;
9494 		iabt->un.acxri.abortContextTag = cmdiocb->iotag;
9495 	}
9496 	else
9497 		iabt->un.acxri.abortIoTag = icmd->ulpIoTag;
9498 	iabt->ulpLe = 1;
9499 	iabt->ulpClass = icmd->ulpClass;
9500 
9501 	/* ABTS WQE must go to the same WQ as the WQE to be aborted */
9502 	abtsiocbp->fcp_wqidx = cmdiocb->fcp_wqidx;
9503 	if (cmdiocb->iocb_flag & LPFC_IO_FCP)
9504 		abtsiocbp->iocb_flag |= LPFC_USE_FCPWQIDX;
9505 
9506 	if (phba->link_state >= LPFC_LINK_UP)
9507 		iabt->ulpCommand = CMD_ABORT_XRI_CN;
9508 	else
9509 		iabt->ulpCommand = CMD_CLOSE_XRI_CN;
9510 
9511 	abtsiocbp->iocb_cmpl = lpfc_sli_abort_els_cmpl;
9512 
9513 	lpfc_printf_vlog(vport, KERN_INFO, LOG_SLI,
9514 			 "0339 Abort xri x%x, original iotag x%x, "
9515 			 "abort cmd iotag x%x\n",
9516 			 iabt->un.acxri.abortIoTag,
9517 			 iabt->un.acxri.abortContextTag,
9518 			 abtsiocbp->iotag);
9519 
9520 	if (phba->sli_rev == LPFC_SLI_REV4) {
9521 		/* Note: both hbalock and ring_lock need to be set here */
9522 		spin_lock_irqsave(&pring->ring_lock, iflags);
9523 		retval = __lpfc_sli_issue_iocb(phba, pring->ringno,
9524 			abtsiocbp, 0);
9525 		spin_unlock_irqrestore(&pring->ring_lock, iflags);
9526 	} else {
9527 		retval = __lpfc_sli_issue_iocb(phba, pring->ringno,
9528 			abtsiocbp, 0);
9529 	}
9530 
9531 	if (retval)
9532 		__lpfc_sli_release_iocbq(phba, abtsiocbp);
9533 
9534 	/*
9535 	 * Caller to this routine should check for IOCB_ERROR
9536 	 * and handle it properly.  This routine no longer removes
9537 	 * iocb off txcmplq and call compl in case of IOCB_ERROR.
9538 	 */
9539 	return retval;
9540 }
9541 
9542 /**
9543  * lpfc_sli_issue_abort_iotag - Abort function for a command iocb
9544  * @phba: Pointer to HBA context object.
9545  * @pring: Pointer to driver SLI ring object.
9546  * @cmdiocb: Pointer to driver command iocb object.
9547  *
9548  * This function issues an abort iocb for the provided command iocb. In case
9549  * of unloading, the abort iocb will not be issued to commands on the ELS
9550  * ring. Instead, the callback function shall be changed to those commands
9551  * so that nothing happens when them finishes. This function is called with
9552  * hbalock held. The function returns 0 when the command iocb is an abort
9553  * request.
9554  **/
9555 int
9556 lpfc_sli_issue_abort_iotag(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
9557 			   struct lpfc_iocbq *cmdiocb)
9558 {
9559 	struct lpfc_vport *vport = cmdiocb->vport;
9560 	int retval = IOCB_ERROR;
9561 	IOCB_t *icmd = NULL;
9562 
9563 	/*
9564 	 * There are certain command types we don't want to abort.  And we
9565 	 * don't want to abort commands that are already in the process of
9566 	 * being aborted.
9567 	 */
9568 	icmd = &cmdiocb->iocb;
9569 	if (icmd->ulpCommand == CMD_ABORT_XRI_CN ||
9570 	    icmd->ulpCommand == CMD_CLOSE_XRI_CN ||
9571 	    (cmdiocb->iocb_flag & LPFC_DRIVER_ABORTED) != 0)
9572 		return 0;
9573 
9574 	/*
9575 	 * If we're unloading, don't abort iocb on the ELS ring, but change
9576 	 * the callback so that nothing happens when it finishes.
9577 	 */
9578 	if ((vport->load_flag & FC_UNLOADING) &&
9579 	    (pring->ringno == LPFC_ELS_RING)) {
9580 		if (cmdiocb->iocb_flag & LPFC_IO_FABRIC)
9581 			cmdiocb->fabric_iocb_cmpl = lpfc_ignore_els_cmpl;
9582 		else
9583 			cmdiocb->iocb_cmpl = lpfc_ignore_els_cmpl;
9584 		goto abort_iotag_exit;
9585 	}
9586 
9587 	/* Now, we try to issue the abort to the cmdiocb out */
9588 	retval = lpfc_sli_abort_iotag_issue(phba, pring, cmdiocb);
9589 
9590 abort_iotag_exit:
9591 	/*
9592 	 * Caller to this routine should check for IOCB_ERROR
9593 	 * and handle it properly.  This routine no longer removes
9594 	 * iocb off txcmplq and call compl in case of IOCB_ERROR.
9595 	 */
9596 	return retval;
9597 }
9598 
9599 /**
9600  * lpfc_sli_iocb_ring_abort - Unconditionally abort all iocbs on an iocb ring
9601  * @phba: Pointer to HBA context object.
9602  * @pring: Pointer to driver SLI ring object.
9603  *
9604  * This function aborts all iocbs in the given ring and frees all the iocb
9605  * objects in txq. This function issues abort iocbs unconditionally for all
9606  * the iocb commands in txcmplq. The iocbs in the txcmplq is not guaranteed
9607  * to complete before the return of this function. The caller is not required
9608  * to hold any locks.
9609  **/
9610 static void
9611 lpfc_sli_iocb_ring_abort(struct lpfc_hba *phba, struct lpfc_sli_ring *pring)
9612 {
9613 	LIST_HEAD(completions);
9614 	struct lpfc_iocbq *iocb, *next_iocb;
9615 
9616 	if (pring->ringno == LPFC_ELS_RING)
9617 		lpfc_fabric_abort_hba(phba);
9618 
9619 	spin_lock_irq(&phba->hbalock);
9620 
9621 	/* Take off all the iocbs on txq for cancelling */
9622 	list_splice_init(&pring->txq, &completions);
9623 	pring->txq_cnt = 0;
9624 
9625 	/* Next issue ABTS for everything on the txcmplq */
9626 	list_for_each_entry_safe(iocb, next_iocb, &pring->txcmplq, list)
9627 		lpfc_sli_abort_iotag_issue(phba, pring, iocb);
9628 
9629 	spin_unlock_irq(&phba->hbalock);
9630 
9631 	/* Cancel all the IOCBs from the completions list */
9632 	lpfc_sli_cancel_iocbs(phba, &completions, IOSTAT_LOCAL_REJECT,
9633 			      IOERR_SLI_ABORTED);
9634 }
9635 
9636 /**
9637  * lpfc_sli_hba_iocb_abort - Abort all iocbs to an hba.
9638  * @phba: pointer to lpfc HBA data structure.
9639  *
9640  * This routine will abort all pending and outstanding iocbs to an HBA.
9641  **/
9642 void
9643 lpfc_sli_hba_iocb_abort(struct lpfc_hba *phba)
9644 {
9645 	struct lpfc_sli *psli = &phba->sli;
9646 	struct lpfc_sli_ring *pring;
9647 	int i;
9648 
9649 	for (i = 0; i < psli->num_rings; i++) {
9650 		pring = &psli->ring[i];
9651 		lpfc_sli_iocb_ring_abort(phba, pring);
9652 	}
9653 }
9654 
9655 /**
9656  * lpfc_sli_validate_fcp_iocb - find commands associated with a vport or LUN
9657  * @iocbq: Pointer to driver iocb object.
9658  * @vport: Pointer to driver virtual port object.
9659  * @tgt_id: SCSI ID of the target.
9660  * @lun_id: LUN ID of the scsi device.
9661  * @ctx_cmd: LPFC_CTX_LUN/LPFC_CTX_TGT/LPFC_CTX_HOST
9662  *
9663  * This function acts as an iocb filter for functions which abort or count
9664  * all FCP iocbs pending on a lun/SCSI target/SCSI host. It will return
9665  * 0 if the filtering criteria is met for the given iocb and will return
9666  * 1 if the filtering criteria is not met.
9667  * If ctx_cmd == LPFC_CTX_LUN, the function returns 0 only if the
9668  * given iocb is for the SCSI device specified by vport, tgt_id and
9669  * lun_id parameter.
9670  * If ctx_cmd == LPFC_CTX_TGT,  the function returns 0 only if the
9671  * given iocb is for the SCSI target specified by vport and tgt_id
9672  * parameters.
9673  * If ctx_cmd == LPFC_CTX_HOST, the function returns 0 only if the
9674  * given iocb is for the SCSI host associated with the given vport.
9675  * This function is called with no locks held.
9676  **/
9677 static int
9678 lpfc_sli_validate_fcp_iocb(struct lpfc_iocbq *iocbq, struct lpfc_vport *vport,
9679 			   uint16_t tgt_id, uint64_t lun_id,
9680 			   lpfc_ctx_cmd ctx_cmd)
9681 {
9682 	struct lpfc_scsi_buf *lpfc_cmd;
9683 	int rc = 1;
9684 
9685 	if (!(iocbq->iocb_flag &  LPFC_IO_FCP))
9686 		return rc;
9687 
9688 	if (iocbq->vport != vport)
9689 		return rc;
9690 
9691 	lpfc_cmd = container_of(iocbq, struct lpfc_scsi_buf, cur_iocbq);
9692 
9693 	if (lpfc_cmd->pCmd == NULL)
9694 		return rc;
9695 
9696 	switch (ctx_cmd) {
9697 	case LPFC_CTX_LUN:
9698 		if ((lpfc_cmd->rdata->pnode) &&
9699 		    (lpfc_cmd->rdata->pnode->nlp_sid == tgt_id) &&
9700 		    (scsilun_to_int(&lpfc_cmd->fcp_cmnd->fcp_lun) == lun_id))
9701 			rc = 0;
9702 		break;
9703 	case LPFC_CTX_TGT:
9704 		if ((lpfc_cmd->rdata->pnode) &&
9705 		    (lpfc_cmd->rdata->pnode->nlp_sid == tgt_id))
9706 			rc = 0;
9707 		break;
9708 	case LPFC_CTX_HOST:
9709 		rc = 0;
9710 		break;
9711 	default:
9712 		printk(KERN_ERR "%s: Unknown context cmd type, value %d\n",
9713 			__func__, ctx_cmd);
9714 		break;
9715 	}
9716 
9717 	return rc;
9718 }
9719 
9720 /**
9721  * lpfc_sli_sum_iocb - Function to count the number of FCP iocbs pending
9722  * @vport: Pointer to virtual port.
9723  * @tgt_id: SCSI ID of the target.
9724  * @lun_id: LUN ID of the scsi device.
9725  * @ctx_cmd: LPFC_CTX_LUN/LPFC_CTX_TGT/LPFC_CTX_HOST.
9726  *
9727  * This function returns number of FCP commands pending for the vport.
9728  * When ctx_cmd == LPFC_CTX_LUN, the function returns number of FCP
9729  * commands pending on the vport associated with SCSI device specified
9730  * by tgt_id and lun_id parameters.
9731  * When ctx_cmd == LPFC_CTX_TGT, the function returns number of FCP
9732  * commands pending on the vport associated with SCSI target specified
9733  * by tgt_id parameter.
9734  * When ctx_cmd == LPFC_CTX_HOST, the function returns number of FCP
9735  * commands pending on the vport.
9736  * This function returns the number of iocbs which satisfy the filter.
9737  * This function is called without any lock held.
9738  **/
9739 int
9740 lpfc_sli_sum_iocb(struct lpfc_vport *vport, uint16_t tgt_id, uint64_t lun_id,
9741 		  lpfc_ctx_cmd ctx_cmd)
9742 {
9743 	struct lpfc_hba *phba = vport->phba;
9744 	struct lpfc_iocbq *iocbq;
9745 	int sum, i;
9746 
9747 	for (i = 1, sum = 0; i <= phba->sli.last_iotag; i++) {
9748 		iocbq = phba->sli.iocbq_lookup[i];
9749 
9750 		if (lpfc_sli_validate_fcp_iocb (iocbq, vport, tgt_id, lun_id,
9751 						ctx_cmd) == 0)
9752 			sum++;
9753 	}
9754 
9755 	return sum;
9756 }
9757 
9758 /**
9759  * lpfc_sli_abort_fcp_cmpl - Completion handler function for aborted FCP IOCBs
9760  * @phba: Pointer to HBA context object
9761  * @cmdiocb: Pointer to command iocb object.
9762  * @rspiocb: Pointer to response iocb object.
9763  *
9764  * This function is called when an aborted FCP iocb completes. This
9765  * function is called by the ring event handler with no lock held.
9766  * This function frees the iocb.
9767  **/
9768 void
9769 lpfc_sli_abort_fcp_cmpl(struct lpfc_hba *phba, struct lpfc_iocbq *cmdiocb,
9770 			struct lpfc_iocbq *rspiocb)
9771 {
9772 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
9773 			"3096 ABORT_XRI_CN completing on rpi x%x "
9774 			"original iotag x%x, abort cmd iotag x%x "
9775 			"status 0x%x, reason 0x%x\n",
9776 			cmdiocb->iocb.un.acxri.abortContextTag,
9777 			cmdiocb->iocb.un.acxri.abortIoTag,
9778 			cmdiocb->iotag, rspiocb->iocb.ulpStatus,
9779 			rspiocb->iocb.un.ulpWord[4]);
9780 	lpfc_sli_release_iocbq(phba, cmdiocb);
9781 	return;
9782 }
9783 
9784 /**
9785  * lpfc_sli_abort_iocb - issue abort for all commands on a host/target/LUN
9786  * @vport: Pointer to virtual port.
9787  * @pring: Pointer to driver SLI ring object.
9788  * @tgt_id: SCSI ID of the target.
9789  * @lun_id: LUN ID of the scsi device.
9790  * @abort_cmd: LPFC_CTX_LUN/LPFC_CTX_TGT/LPFC_CTX_HOST.
9791  *
9792  * This function sends an abort command for every SCSI command
9793  * associated with the given virtual port pending on the ring
9794  * filtered by lpfc_sli_validate_fcp_iocb function.
9795  * When abort_cmd == LPFC_CTX_LUN, the function sends abort only to the
9796  * FCP iocbs associated with lun specified by tgt_id and lun_id
9797  * parameters
9798  * When abort_cmd == LPFC_CTX_TGT, the function sends abort only to the
9799  * FCP iocbs associated with SCSI target specified by tgt_id parameter.
9800  * When abort_cmd == LPFC_CTX_HOST, the function sends abort to all
9801  * FCP iocbs associated with virtual port.
9802  * This function returns number of iocbs it failed to abort.
9803  * This function is called with no locks held.
9804  **/
9805 int
9806 lpfc_sli_abort_iocb(struct lpfc_vport *vport, struct lpfc_sli_ring *pring,
9807 		    uint16_t tgt_id, uint64_t lun_id, lpfc_ctx_cmd abort_cmd)
9808 {
9809 	struct lpfc_hba *phba = vport->phba;
9810 	struct lpfc_iocbq *iocbq;
9811 	struct lpfc_iocbq *abtsiocb;
9812 	IOCB_t *cmd = NULL;
9813 	int errcnt = 0, ret_val = 0;
9814 	int i;
9815 
9816 	for (i = 1; i <= phba->sli.last_iotag; i++) {
9817 		iocbq = phba->sli.iocbq_lookup[i];
9818 
9819 		if (lpfc_sli_validate_fcp_iocb(iocbq, vport, tgt_id, lun_id,
9820 					       abort_cmd) != 0)
9821 			continue;
9822 
9823 		/* issue ABTS for this IOCB based on iotag */
9824 		abtsiocb = lpfc_sli_get_iocbq(phba);
9825 		if (abtsiocb == NULL) {
9826 			errcnt++;
9827 			continue;
9828 		}
9829 
9830 		cmd = &iocbq->iocb;
9831 		abtsiocb->iocb.un.acxri.abortType = ABORT_TYPE_ABTS;
9832 		abtsiocb->iocb.un.acxri.abortContextTag = cmd->ulpContext;
9833 		if (phba->sli_rev == LPFC_SLI_REV4)
9834 			abtsiocb->iocb.un.acxri.abortIoTag = iocbq->sli4_xritag;
9835 		else
9836 			abtsiocb->iocb.un.acxri.abortIoTag = cmd->ulpIoTag;
9837 		abtsiocb->iocb.ulpLe = 1;
9838 		abtsiocb->iocb.ulpClass = cmd->ulpClass;
9839 		abtsiocb->vport = phba->pport;
9840 
9841 		/* ABTS WQE must go to the same WQ as the WQE to be aborted */
9842 		abtsiocb->fcp_wqidx = iocbq->fcp_wqidx;
9843 		if (iocbq->iocb_flag & LPFC_IO_FCP)
9844 			abtsiocb->iocb_flag |= LPFC_USE_FCPWQIDX;
9845 
9846 		if (lpfc_is_link_up(phba))
9847 			abtsiocb->iocb.ulpCommand = CMD_ABORT_XRI_CN;
9848 		else
9849 			abtsiocb->iocb.ulpCommand = CMD_CLOSE_XRI_CN;
9850 
9851 		/* Setup callback routine and issue the command. */
9852 		abtsiocb->iocb_cmpl = lpfc_sli_abort_fcp_cmpl;
9853 		ret_val = lpfc_sli_issue_iocb(phba, pring->ringno,
9854 					      abtsiocb, 0);
9855 		if (ret_val == IOCB_ERROR) {
9856 			lpfc_sli_release_iocbq(phba, abtsiocb);
9857 			errcnt++;
9858 			continue;
9859 		}
9860 	}
9861 
9862 	return errcnt;
9863 }
9864 
9865 /**
9866  * lpfc_sli_wake_iocb_wait - lpfc_sli_issue_iocb_wait's completion handler
9867  * @phba: Pointer to HBA context object.
9868  * @cmdiocbq: Pointer to command iocb.
9869  * @rspiocbq: Pointer to response iocb.
9870  *
9871  * This function is the completion handler for iocbs issued using
9872  * lpfc_sli_issue_iocb_wait function. This function is called by the
9873  * ring event handler function without any lock held. This function
9874  * can be called from both worker thread context and interrupt
9875  * context. This function also can be called from other thread which
9876  * cleans up the SLI layer objects.
9877  * This function copy the contents of the response iocb to the
9878  * response iocb memory object provided by the caller of
9879  * lpfc_sli_issue_iocb_wait and then wakes up the thread which
9880  * sleeps for the iocb completion.
9881  **/
9882 static void
9883 lpfc_sli_wake_iocb_wait(struct lpfc_hba *phba,
9884 			struct lpfc_iocbq *cmdiocbq,
9885 			struct lpfc_iocbq *rspiocbq)
9886 {
9887 	wait_queue_head_t *pdone_q;
9888 	unsigned long iflags;
9889 	struct lpfc_scsi_buf *lpfc_cmd;
9890 
9891 	spin_lock_irqsave(&phba->hbalock, iflags);
9892 	cmdiocbq->iocb_flag |= LPFC_IO_WAKE;
9893 	if (cmdiocbq->context2 && rspiocbq)
9894 		memcpy(&((struct lpfc_iocbq *)cmdiocbq->context2)->iocb,
9895 		       &rspiocbq->iocb, sizeof(IOCB_t));
9896 
9897 	/* Set the exchange busy flag for task management commands */
9898 	if ((cmdiocbq->iocb_flag & LPFC_IO_FCP) &&
9899 		!(cmdiocbq->iocb_flag & LPFC_IO_LIBDFC)) {
9900 		lpfc_cmd = container_of(cmdiocbq, struct lpfc_scsi_buf,
9901 			cur_iocbq);
9902 		lpfc_cmd->exch_busy = rspiocbq->iocb_flag & LPFC_EXCHANGE_BUSY;
9903 	}
9904 
9905 	pdone_q = cmdiocbq->context_un.wait_queue;
9906 	if (pdone_q)
9907 		wake_up(pdone_q);
9908 	spin_unlock_irqrestore(&phba->hbalock, iflags);
9909 	return;
9910 }
9911 
9912 /**
9913  * lpfc_chk_iocb_flg - Test IOCB flag with lock held.
9914  * @phba: Pointer to HBA context object..
9915  * @piocbq: Pointer to command iocb.
9916  * @flag: Flag to test.
9917  *
9918  * This routine grabs the hbalock and then test the iocb_flag to
9919  * see if the passed in flag is set.
9920  * Returns:
9921  * 1 if flag is set.
9922  * 0 if flag is not set.
9923  **/
9924 static int
9925 lpfc_chk_iocb_flg(struct lpfc_hba *phba,
9926 		 struct lpfc_iocbq *piocbq, uint32_t flag)
9927 {
9928 	unsigned long iflags;
9929 	int ret;
9930 
9931 	spin_lock_irqsave(&phba->hbalock, iflags);
9932 	ret = piocbq->iocb_flag & flag;
9933 	spin_unlock_irqrestore(&phba->hbalock, iflags);
9934 	return ret;
9935 
9936 }
9937 
9938 /**
9939  * lpfc_sli_issue_iocb_wait - Synchronous function to issue iocb commands
9940  * @phba: Pointer to HBA context object..
9941  * @pring: Pointer to sli ring.
9942  * @piocb: Pointer to command iocb.
9943  * @prspiocbq: Pointer to response iocb.
9944  * @timeout: Timeout in number of seconds.
9945  *
9946  * This function issues the iocb to firmware and waits for the
9947  * iocb to complete. If the iocb command is not
9948  * completed within timeout seconds, it returns IOCB_TIMEDOUT.
9949  * Caller should not free the iocb resources if this function
9950  * returns IOCB_TIMEDOUT.
9951  * The function waits for the iocb completion using an
9952  * non-interruptible wait.
9953  * This function will sleep while waiting for iocb completion.
9954  * So, this function should not be called from any context which
9955  * does not allow sleeping. Due to the same reason, this function
9956  * cannot be called with interrupt disabled.
9957  * This function assumes that the iocb completions occur while
9958  * this function sleep. So, this function cannot be called from
9959  * the thread which process iocb completion for this ring.
9960  * This function clears the iocb_flag of the iocb object before
9961  * issuing the iocb and the iocb completion handler sets this
9962  * flag and wakes this thread when the iocb completes.
9963  * The contents of the response iocb will be copied to prspiocbq
9964  * by the completion handler when the command completes.
9965  * This function returns IOCB_SUCCESS when success.
9966  * This function is called with no lock held.
9967  **/
9968 int
9969 lpfc_sli_issue_iocb_wait(struct lpfc_hba *phba,
9970 			 uint32_t ring_number,
9971 			 struct lpfc_iocbq *piocb,
9972 			 struct lpfc_iocbq *prspiocbq,
9973 			 uint32_t timeout)
9974 {
9975 	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(done_q);
9976 	long timeleft, timeout_req = 0;
9977 	int retval = IOCB_SUCCESS;
9978 	uint32_t creg_val;
9979 	struct lpfc_iocbq *iocb;
9980 	int txq_cnt = 0;
9981 	int txcmplq_cnt = 0;
9982 	struct lpfc_sli_ring *pring = &phba->sli.ring[LPFC_ELS_RING];
9983 	/*
9984 	 * If the caller has provided a response iocbq buffer, then context2
9985 	 * is NULL or its an error.
9986 	 */
9987 	if (prspiocbq) {
9988 		if (piocb->context2)
9989 			return IOCB_ERROR;
9990 		piocb->context2 = prspiocbq;
9991 	}
9992 
9993 	piocb->iocb_cmpl = lpfc_sli_wake_iocb_wait;
9994 	piocb->context_un.wait_queue = &done_q;
9995 	piocb->iocb_flag &= ~LPFC_IO_WAKE;
9996 
9997 	if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
9998 		if (lpfc_readl(phba->HCregaddr, &creg_val))
9999 			return IOCB_ERROR;
10000 		creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
10001 		writel(creg_val, phba->HCregaddr);
10002 		readl(phba->HCregaddr); /* flush */
10003 	}
10004 
10005 	retval = lpfc_sli_issue_iocb(phba, ring_number, piocb,
10006 				     SLI_IOCB_RET_IOCB);
10007 	if (retval == IOCB_SUCCESS) {
10008 		timeout_req = msecs_to_jiffies(timeout * 1000);
10009 		timeleft = wait_event_timeout(done_q,
10010 				lpfc_chk_iocb_flg(phba, piocb, LPFC_IO_WAKE),
10011 				timeout_req);
10012 
10013 		if (piocb->iocb_flag & LPFC_IO_WAKE) {
10014 			lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
10015 					"0331 IOCB wake signaled\n");
10016 		} else if (timeleft == 0) {
10017 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
10018 					"0338 IOCB wait timeout error - no "
10019 					"wake response Data x%x\n", timeout);
10020 			retval = IOCB_TIMEDOUT;
10021 		} else {
10022 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
10023 					"0330 IOCB wake NOT set, "
10024 					"Data x%x x%lx\n",
10025 					timeout, (timeleft / jiffies));
10026 			retval = IOCB_TIMEDOUT;
10027 		}
10028 	} else if (retval == IOCB_BUSY) {
10029 		if (phba->cfg_log_verbose & LOG_SLI) {
10030 			list_for_each_entry(iocb, &pring->txq, list) {
10031 				txq_cnt++;
10032 			}
10033 			list_for_each_entry(iocb, &pring->txcmplq, list) {
10034 				txcmplq_cnt++;
10035 			}
10036 			lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
10037 				"2818 Max IOCBs %d txq cnt %d txcmplq cnt %d\n",
10038 				phba->iocb_cnt, txq_cnt, txcmplq_cnt);
10039 		}
10040 		return retval;
10041 	} else {
10042 		lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
10043 				"0332 IOCB wait issue failed, Data x%x\n",
10044 				retval);
10045 		retval = IOCB_ERROR;
10046 	}
10047 
10048 	if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
10049 		if (lpfc_readl(phba->HCregaddr, &creg_val))
10050 			return IOCB_ERROR;
10051 		creg_val &= ~(HC_R0INT_ENA << LPFC_FCP_RING);
10052 		writel(creg_val, phba->HCregaddr);
10053 		readl(phba->HCregaddr); /* flush */
10054 	}
10055 
10056 	if (prspiocbq)
10057 		piocb->context2 = NULL;
10058 
10059 	piocb->context_un.wait_queue = NULL;
10060 	piocb->iocb_cmpl = NULL;
10061 	return retval;
10062 }
10063 
10064 /**
10065  * lpfc_sli_issue_mbox_wait - Synchronous function to issue mailbox
10066  * @phba: Pointer to HBA context object.
10067  * @pmboxq: Pointer to driver mailbox object.
10068  * @timeout: Timeout in number of seconds.
10069  *
10070  * This function issues the mailbox to firmware and waits for the
10071  * mailbox command to complete. If the mailbox command is not
10072  * completed within timeout seconds, it returns MBX_TIMEOUT.
10073  * The function waits for the mailbox completion using an
10074  * interruptible wait. If the thread is woken up due to a
10075  * signal, MBX_TIMEOUT error is returned to the caller. Caller
10076  * should not free the mailbox resources, if this function returns
10077  * MBX_TIMEOUT.
10078  * This function will sleep while waiting for mailbox completion.
10079  * So, this function should not be called from any context which
10080  * does not allow sleeping. Due to the same reason, this function
10081  * cannot be called with interrupt disabled.
10082  * This function assumes that the mailbox completion occurs while
10083  * this function sleep. So, this function cannot be called from
10084  * the worker thread which processes mailbox completion.
10085  * This function is called in the context of HBA management
10086  * applications.
10087  * This function returns MBX_SUCCESS when successful.
10088  * This function is called with no lock held.
10089  **/
10090 int
10091 lpfc_sli_issue_mbox_wait(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq,
10092 			 uint32_t timeout)
10093 {
10094 	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(done_q);
10095 	MAILBOX_t *mb = NULL;
10096 	int retval;
10097 	unsigned long flag;
10098 
10099 	/* The caller might set context1 for extended buffer */
10100 	if (pmboxq->context1)
10101 		mb = (MAILBOX_t *)pmboxq->context1;
10102 
10103 	pmboxq->mbox_flag &= ~LPFC_MBX_WAKE;
10104 	/* setup wake call as IOCB callback */
10105 	pmboxq->mbox_cmpl = lpfc_sli_wake_mbox_wait;
10106 	/* setup context field to pass wait_queue pointer to wake function  */
10107 	pmboxq->context1 = &done_q;
10108 
10109 	/* now issue the command */
10110 	retval = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
10111 	if (retval == MBX_BUSY || retval == MBX_SUCCESS) {
10112 		wait_event_interruptible_timeout(done_q,
10113 				pmboxq->mbox_flag & LPFC_MBX_WAKE,
10114 				msecs_to_jiffies(timeout * 1000));
10115 
10116 		spin_lock_irqsave(&phba->hbalock, flag);
10117 		/* restore the possible extended buffer for free resource */
10118 		pmboxq->context1 = (uint8_t *)mb;
10119 		/*
10120 		 * if LPFC_MBX_WAKE flag is set the mailbox is completed
10121 		 * else do not free the resources.
10122 		 */
10123 		if (pmboxq->mbox_flag & LPFC_MBX_WAKE) {
10124 			retval = MBX_SUCCESS;
10125 			lpfc_sli4_swap_str(phba, pmboxq);
10126 		} else {
10127 			retval = MBX_TIMEOUT;
10128 			pmboxq->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
10129 		}
10130 		spin_unlock_irqrestore(&phba->hbalock, flag);
10131 	} else {
10132 		/* restore the possible extended buffer for free resource */
10133 		pmboxq->context1 = (uint8_t *)mb;
10134 	}
10135 
10136 	return retval;
10137 }
10138 
10139 /**
10140  * lpfc_sli_mbox_sys_shutdown - shutdown mailbox command sub-system
10141  * @phba: Pointer to HBA context.
10142  *
10143  * This function is called to shutdown the driver's mailbox sub-system.
10144  * It first marks the mailbox sub-system is in a block state to prevent
10145  * the asynchronous mailbox command from issued off the pending mailbox
10146  * command queue. If the mailbox command sub-system shutdown is due to
10147  * HBA error conditions such as EEH or ERATT, this routine shall invoke
10148  * the mailbox sub-system flush routine to forcefully bring down the
10149  * mailbox sub-system. Otherwise, if it is due to normal condition (such
10150  * as with offline or HBA function reset), this routine will wait for the
10151  * outstanding mailbox command to complete before invoking the mailbox
10152  * sub-system flush routine to gracefully bring down mailbox sub-system.
10153  **/
10154 void
10155 lpfc_sli_mbox_sys_shutdown(struct lpfc_hba *phba, int mbx_action)
10156 {
10157 	struct lpfc_sli *psli = &phba->sli;
10158 	unsigned long timeout;
10159 
10160 	if (mbx_action == LPFC_MBX_NO_WAIT) {
10161 		/* delay 100ms for port state */
10162 		msleep(100);
10163 		lpfc_sli_mbox_sys_flush(phba);
10164 		return;
10165 	}
10166 	timeout = msecs_to_jiffies(LPFC_MBOX_TMO * 1000) + jiffies;
10167 
10168 	spin_lock_irq(&phba->hbalock);
10169 	psli->sli_flag |= LPFC_SLI_ASYNC_MBX_BLK;
10170 
10171 	if (psli->sli_flag & LPFC_SLI_ACTIVE) {
10172 		/* Determine how long we might wait for the active mailbox
10173 		 * command to be gracefully completed by firmware.
10174 		 */
10175 		if (phba->sli.mbox_active)
10176 			timeout = msecs_to_jiffies(lpfc_mbox_tmo_val(phba,
10177 						phba->sli.mbox_active) *
10178 						1000) + jiffies;
10179 		spin_unlock_irq(&phba->hbalock);
10180 
10181 		while (phba->sli.mbox_active) {
10182 			/* Check active mailbox complete status every 2ms */
10183 			msleep(2);
10184 			if (time_after(jiffies, timeout))
10185 				/* Timeout, let the mailbox flush routine to
10186 				 * forcefully release active mailbox command
10187 				 */
10188 				break;
10189 		}
10190 	} else
10191 		spin_unlock_irq(&phba->hbalock);
10192 
10193 	lpfc_sli_mbox_sys_flush(phba);
10194 }
10195 
10196 /**
10197  * lpfc_sli_eratt_read - read sli-3 error attention events
10198  * @phba: Pointer to HBA context.
10199  *
10200  * This function is called to read the SLI3 device error attention registers
10201  * for possible error attention events. The caller must hold the hostlock
10202  * with spin_lock_irq().
10203  *
10204  * This function returns 1 when there is Error Attention in the Host Attention
10205  * Register and returns 0 otherwise.
10206  **/
10207 static int
10208 lpfc_sli_eratt_read(struct lpfc_hba *phba)
10209 {
10210 	uint32_t ha_copy;
10211 
10212 	/* Read chip Host Attention (HA) register */
10213 	if (lpfc_readl(phba->HAregaddr, &ha_copy))
10214 		goto unplug_err;
10215 
10216 	if (ha_copy & HA_ERATT) {
10217 		/* Read host status register to retrieve error event */
10218 		if (lpfc_sli_read_hs(phba))
10219 			goto unplug_err;
10220 
10221 		/* Check if there is a deferred error condition is active */
10222 		if ((HS_FFER1 & phba->work_hs) &&
10223 		    ((HS_FFER2 | HS_FFER3 | HS_FFER4 | HS_FFER5 |
10224 		      HS_FFER6 | HS_FFER7 | HS_FFER8) & phba->work_hs)) {
10225 			phba->hba_flag |= DEFER_ERATT;
10226 			/* Clear all interrupt enable conditions */
10227 			writel(0, phba->HCregaddr);
10228 			readl(phba->HCregaddr);
10229 		}
10230 
10231 		/* Set the driver HA work bitmap */
10232 		phba->work_ha |= HA_ERATT;
10233 		/* Indicate polling handles this ERATT */
10234 		phba->hba_flag |= HBA_ERATT_HANDLED;
10235 		return 1;
10236 	}
10237 	return 0;
10238 
10239 unplug_err:
10240 	/* Set the driver HS work bitmap */
10241 	phba->work_hs |= UNPLUG_ERR;
10242 	/* Set the driver HA work bitmap */
10243 	phba->work_ha |= HA_ERATT;
10244 	/* Indicate polling handles this ERATT */
10245 	phba->hba_flag |= HBA_ERATT_HANDLED;
10246 	return 1;
10247 }
10248 
10249 /**
10250  * lpfc_sli4_eratt_read - read sli-4 error attention events
10251  * @phba: Pointer to HBA context.
10252  *
10253  * This function is called to read the SLI4 device error attention registers
10254  * for possible error attention events. The caller must hold the hostlock
10255  * with spin_lock_irq().
10256  *
10257  * This function returns 1 when there is Error Attention in the Host Attention
10258  * Register and returns 0 otherwise.
10259  **/
10260 static int
10261 lpfc_sli4_eratt_read(struct lpfc_hba *phba)
10262 {
10263 	uint32_t uerr_sta_hi, uerr_sta_lo;
10264 	uint32_t if_type, portsmphr;
10265 	struct lpfc_register portstat_reg;
10266 
10267 	/*
10268 	 * For now, use the SLI4 device internal unrecoverable error
10269 	 * registers for error attention. This can be changed later.
10270 	 */
10271 	if_type = bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf);
10272 	switch (if_type) {
10273 	case LPFC_SLI_INTF_IF_TYPE_0:
10274 		if (lpfc_readl(phba->sli4_hba.u.if_type0.UERRLOregaddr,
10275 			&uerr_sta_lo) ||
10276 			lpfc_readl(phba->sli4_hba.u.if_type0.UERRHIregaddr,
10277 			&uerr_sta_hi)) {
10278 			phba->work_hs |= UNPLUG_ERR;
10279 			phba->work_ha |= HA_ERATT;
10280 			phba->hba_flag |= HBA_ERATT_HANDLED;
10281 			return 1;
10282 		}
10283 		if ((~phba->sli4_hba.ue_mask_lo & uerr_sta_lo) ||
10284 		    (~phba->sli4_hba.ue_mask_hi & uerr_sta_hi)) {
10285 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
10286 					"1423 HBA Unrecoverable error: "
10287 					"uerr_lo_reg=0x%x, uerr_hi_reg=0x%x, "
10288 					"ue_mask_lo_reg=0x%x, "
10289 					"ue_mask_hi_reg=0x%x\n",
10290 					uerr_sta_lo, uerr_sta_hi,
10291 					phba->sli4_hba.ue_mask_lo,
10292 					phba->sli4_hba.ue_mask_hi);
10293 			phba->work_status[0] = uerr_sta_lo;
10294 			phba->work_status[1] = uerr_sta_hi;
10295 			phba->work_ha |= HA_ERATT;
10296 			phba->hba_flag |= HBA_ERATT_HANDLED;
10297 			return 1;
10298 		}
10299 		break;
10300 	case LPFC_SLI_INTF_IF_TYPE_2:
10301 		if (lpfc_readl(phba->sli4_hba.u.if_type2.STATUSregaddr,
10302 			&portstat_reg.word0) ||
10303 			lpfc_readl(phba->sli4_hba.PSMPHRregaddr,
10304 			&portsmphr)){
10305 			phba->work_hs |= UNPLUG_ERR;
10306 			phba->work_ha |= HA_ERATT;
10307 			phba->hba_flag |= HBA_ERATT_HANDLED;
10308 			return 1;
10309 		}
10310 		if (bf_get(lpfc_sliport_status_err, &portstat_reg)) {
10311 			phba->work_status[0] =
10312 				readl(phba->sli4_hba.u.if_type2.ERR1regaddr);
10313 			phba->work_status[1] =
10314 				readl(phba->sli4_hba.u.if_type2.ERR2regaddr);
10315 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
10316 					"2885 Port Status Event: "
10317 					"port status reg 0x%x, "
10318 					"port smphr reg 0x%x, "
10319 					"error 1=0x%x, error 2=0x%x\n",
10320 					portstat_reg.word0,
10321 					portsmphr,
10322 					phba->work_status[0],
10323 					phba->work_status[1]);
10324 			phba->work_ha |= HA_ERATT;
10325 			phba->hba_flag |= HBA_ERATT_HANDLED;
10326 			return 1;
10327 		}
10328 		break;
10329 	case LPFC_SLI_INTF_IF_TYPE_1:
10330 	default:
10331 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
10332 				"2886 HBA Error Attention on unsupported "
10333 				"if type %d.", if_type);
10334 		return 1;
10335 	}
10336 
10337 	return 0;
10338 }
10339 
10340 /**
10341  * lpfc_sli_check_eratt - check error attention events
10342  * @phba: Pointer to HBA context.
10343  *
10344  * This function is called from timer soft interrupt context to check HBA's
10345  * error attention register bit for error attention events.
10346  *
10347  * This function returns 1 when there is Error Attention in the Host Attention
10348  * Register and returns 0 otherwise.
10349  **/
10350 int
10351 lpfc_sli_check_eratt(struct lpfc_hba *phba)
10352 {
10353 	uint32_t ha_copy;
10354 
10355 	/* If somebody is waiting to handle an eratt, don't process it
10356 	 * here. The brdkill function will do this.
10357 	 */
10358 	if (phba->link_flag & LS_IGNORE_ERATT)
10359 		return 0;
10360 
10361 	/* Check if interrupt handler handles this ERATT */
10362 	spin_lock_irq(&phba->hbalock);
10363 	if (phba->hba_flag & HBA_ERATT_HANDLED) {
10364 		/* Interrupt handler has handled ERATT */
10365 		spin_unlock_irq(&phba->hbalock);
10366 		return 0;
10367 	}
10368 
10369 	/*
10370 	 * If there is deferred error attention, do not check for error
10371 	 * attention
10372 	 */
10373 	if (unlikely(phba->hba_flag & DEFER_ERATT)) {
10374 		spin_unlock_irq(&phba->hbalock);
10375 		return 0;
10376 	}
10377 
10378 	/* If PCI channel is offline, don't process it */
10379 	if (unlikely(pci_channel_offline(phba->pcidev))) {
10380 		spin_unlock_irq(&phba->hbalock);
10381 		return 0;
10382 	}
10383 
10384 	switch (phba->sli_rev) {
10385 	case LPFC_SLI_REV2:
10386 	case LPFC_SLI_REV3:
10387 		/* Read chip Host Attention (HA) register */
10388 		ha_copy = lpfc_sli_eratt_read(phba);
10389 		break;
10390 	case LPFC_SLI_REV4:
10391 		/* Read device Uncoverable Error (UERR) registers */
10392 		ha_copy = lpfc_sli4_eratt_read(phba);
10393 		break;
10394 	default:
10395 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
10396 				"0299 Invalid SLI revision (%d)\n",
10397 				phba->sli_rev);
10398 		ha_copy = 0;
10399 		break;
10400 	}
10401 	spin_unlock_irq(&phba->hbalock);
10402 
10403 	return ha_copy;
10404 }
10405 
10406 /**
10407  * lpfc_intr_state_check - Check device state for interrupt handling
10408  * @phba: Pointer to HBA context.
10409  *
10410  * This inline routine checks whether a device or its PCI slot is in a state
10411  * that the interrupt should be handled.
10412  *
10413  * This function returns 0 if the device or the PCI slot is in a state that
10414  * interrupt should be handled, otherwise -EIO.
10415  */
10416 static inline int
10417 lpfc_intr_state_check(struct lpfc_hba *phba)
10418 {
10419 	/* If the pci channel is offline, ignore all the interrupts */
10420 	if (unlikely(pci_channel_offline(phba->pcidev)))
10421 		return -EIO;
10422 
10423 	/* Update device level interrupt statistics */
10424 	phba->sli.slistat.sli_intr++;
10425 
10426 	/* Ignore all interrupts during initialization. */
10427 	if (unlikely(phba->link_state < LPFC_LINK_DOWN))
10428 		return -EIO;
10429 
10430 	return 0;
10431 }
10432 
10433 /**
10434  * lpfc_sli_sp_intr_handler - Slow-path interrupt handler to SLI-3 device
10435  * @irq: Interrupt number.
10436  * @dev_id: The device context pointer.
10437  *
10438  * This function is directly called from the PCI layer as an interrupt
10439  * service routine when device with SLI-3 interface spec is enabled with
10440  * MSI-X multi-message interrupt mode and there are slow-path events in
10441  * the HBA. However, when the device is enabled with either MSI or Pin-IRQ
10442  * interrupt mode, this function is called as part of the device-level
10443  * interrupt handler. When the PCI slot is in error recovery or the HBA
10444  * is undergoing initialization, the interrupt handler will not process
10445  * the interrupt. The link attention and ELS ring attention events are
10446  * handled by the worker thread. The interrupt handler signals the worker
10447  * thread and returns for these events. This function is called without
10448  * any lock held. It gets the hbalock to access and update SLI data
10449  * structures.
10450  *
10451  * This function returns IRQ_HANDLED when interrupt is handled else it
10452  * returns IRQ_NONE.
10453  **/
10454 irqreturn_t
10455 lpfc_sli_sp_intr_handler(int irq, void *dev_id)
10456 {
10457 	struct lpfc_hba  *phba;
10458 	uint32_t ha_copy, hc_copy;
10459 	uint32_t work_ha_copy;
10460 	unsigned long status;
10461 	unsigned long iflag;
10462 	uint32_t control;
10463 
10464 	MAILBOX_t *mbox, *pmbox;
10465 	struct lpfc_vport *vport;
10466 	struct lpfc_nodelist *ndlp;
10467 	struct lpfc_dmabuf *mp;
10468 	LPFC_MBOXQ_t *pmb;
10469 	int rc;
10470 
10471 	/*
10472 	 * Get the driver's phba structure from the dev_id and
10473 	 * assume the HBA is not interrupting.
10474 	 */
10475 	phba = (struct lpfc_hba *)dev_id;
10476 
10477 	if (unlikely(!phba))
10478 		return IRQ_NONE;
10479 
10480 	/*
10481 	 * Stuff needs to be attented to when this function is invoked as an
10482 	 * individual interrupt handler in MSI-X multi-message interrupt mode
10483 	 */
10484 	if (phba->intr_type == MSIX) {
10485 		/* Check device state for handling interrupt */
10486 		if (lpfc_intr_state_check(phba))
10487 			return IRQ_NONE;
10488 		/* Need to read HA REG for slow-path events */
10489 		spin_lock_irqsave(&phba->hbalock, iflag);
10490 		if (lpfc_readl(phba->HAregaddr, &ha_copy))
10491 			goto unplug_error;
10492 		/* If somebody is waiting to handle an eratt don't process it
10493 		 * here. The brdkill function will do this.
10494 		 */
10495 		if (phba->link_flag & LS_IGNORE_ERATT)
10496 			ha_copy &= ~HA_ERATT;
10497 		/* Check the need for handling ERATT in interrupt handler */
10498 		if (ha_copy & HA_ERATT) {
10499 			if (phba->hba_flag & HBA_ERATT_HANDLED)
10500 				/* ERATT polling has handled ERATT */
10501 				ha_copy &= ~HA_ERATT;
10502 			else
10503 				/* Indicate interrupt handler handles ERATT */
10504 				phba->hba_flag |= HBA_ERATT_HANDLED;
10505 		}
10506 
10507 		/*
10508 		 * If there is deferred error attention, do not check for any
10509 		 * interrupt.
10510 		 */
10511 		if (unlikely(phba->hba_flag & DEFER_ERATT)) {
10512 			spin_unlock_irqrestore(&phba->hbalock, iflag);
10513 			return IRQ_NONE;
10514 		}
10515 
10516 		/* Clear up only attention source related to slow-path */
10517 		if (lpfc_readl(phba->HCregaddr, &hc_copy))
10518 			goto unplug_error;
10519 
10520 		writel(hc_copy & ~(HC_MBINT_ENA | HC_R2INT_ENA |
10521 			HC_LAINT_ENA | HC_ERINT_ENA),
10522 			phba->HCregaddr);
10523 		writel((ha_copy & (HA_MBATT | HA_R2_CLR_MSK)),
10524 			phba->HAregaddr);
10525 		writel(hc_copy, phba->HCregaddr);
10526 		readl(phba->HAregaddr); /* flush */
10527 		spin_unlock_irqrestore(&phba->hbalock, iflag);
10528 	} else
10529 		ha_copy = phba->ha_copy;
10530 
10531 	work_ha_copy = ha_copy & phba->work_ha_mask;
10532 
10533 	if (work_ha_copy) {
10534 		if (work_ha_copy & HA_LATT) {
10535 			if (phba->sli.sli_flag & LPFC_PROCESS_LA) {
10536 				/*
10537 				 * Turn off Link Attention interrupts
10538 				 * until CLEAR_LA done
10539 				 */
10540 				spin_lock_irqsave(&phba->hbalock, iflag);
10541 				phba->sli.sli_flag &= ~LPFC_PROCESS_LA;
10542 				if (lpfc_readl(phba->HCregaddr, &control))
10543 					goto unplug_error;
10544 				control &= ~HC_LAINT_ENA;
10545 				writel(control, phba->HCregaddr);
10546 				readl(phba->HCregaddr); /* flush */
10547 				spin_unlock_irqrestore(&phba->hbalock, iflag);
10548 			}
10549 			else
10550 				work_ha_copy &= ~HA_LATT;
10551 		}
10552 
10553 		if (work_ha_copy & ~(HA_ERATT | HA_MBATT | HA_LATT)) {
10554 			/*
10555 			 * Turn off Slow Rings interrupts, LPFC_ELS_RING is
10556 			 * the only slow ring.
10557 			 */
10558 			status = (work_ha_copy &
10559 				(HA_RXMASK  << (4*LPFC_ELS_RING)));
10560 			status >>= (4*LPFC_ELS_RING);
10561 			if (status & HA_RXMASK) {
10562 				spin_lock_irqsave(&phba->hbalock, iflag);
10563 				if (lpfc_readl(phba->HCregaddr, &control))
10564 					goto unplug_error;
10565 
10566 				lpfc_debugfs_slow_ring_trc(phba,
10567 				"ISR slow ring:   ctl:x%x stat:x%x isrcnt:x%x",
10568 				control, status,
10569 				(uint32_t)phba->sli.slistat.sli_intr);
10570 
10571 				if (control & (HC_R0INT_ENA << LPFC_ELS_RING)) {
10572 					lpfc_debugfs_slow_ring_trc(phba,
10573 						"ISR Disable ring:"
10574 						"pwork:x%x hawork:x%x wait:x%x",
10575 						phba->work_ha, work_ha_copy,
10576 						(uint32_t)((unsigned long)
10577 						&phba->work_waitq));
10578 
10579 					control &=
10580 					    ~(HC_R0INT_ENA << LPFC_ELS_RING);
10581 					writel(control, phba->HCregaddr);
10582 					readl(phba->HCregaddr); /* flush */
10583 				}
10584 				else {
10585 					lpfc_debugfs_slow_ring_trc(phba,
10586 						"ISR slow ring:   pwork:"
10587 						"x%x hawork:x%x wait:x%x",
10588 						phba->work_ha, work_ha_copy,
10589 						(uint32_t)((unsigned long)
10590 						&phba->work_waitq));
10591 				}
10592 				spin_unlock_irqrestore(&phba->hbalock, iflag);
10593 			}
10594 		}
10595 		spin_lock_irqsave(&phba->hbalock, iflag);
10596 		if (work_ha_copy & HA_ERATT) {
10597 			if (lpfc_sli_read_hs(phba))
10598 				goto unplug_error;
10599 			/*
10600 			 * Check if there is a deferred error condition
10601 			 * is active
10602 			 */
10603 			if ((HS_FFER1 & phba->work_hs) &&
10604 				((HS_FFER2 | HS_FFER3 | HS_FFER4 | HS_FFER5 |
10605 				  HS_FFER6 | HS_FFER7 | HS_FFER8) &
10606 				  phba->work_hs)) {
10607 				phba->hba_flag |= DEFER_ERATT;
10608 				/* Clear all interrupt enable conditions */
10609 				writel(0, phba->HCregaddr);
10610 				readl(phba->HCregaddr);
10611 			}
10612 		}
10613 
10614 		if ((work_ha_copy & HA_MBATT) && (phba->sli.mbox_active)) {
10615 			pmb = phba->sli.mbox_active;
10616 			pmbox = &pmb->u.mb;
10617 			mbox = phba->mbox;
10618 			vport = pmb->vport;
10619 
10620 			/* First check out the status word */
10621 			lpfc_sli_pcimem_bcopy(mbox, pmbox, sizeof(uint32_t));
10622 			if (pmbox->mbxOwner != OWN_HOST) {
10623 				spin_unlock_irqrestore(&phba->hbalock, iflag);
10624 				/*
10625 				 * Stray Mailbox Interrupt, mbxCommand <cmd>
10626 				 * mbxStatus <status>
10627 				 */
10628 				lpfc_printf_log(phba, KERN_ERR, LOG_MBOX |
10629 						LOG_SLI,
10630 						"(%d):0304 Stray Mailbox "
10631 						"Interrupt mbxCommand x%x "
10632 						"mbxStatus x%x\n",
10633 						(vport ? vport->vpi : 0),
10634 						pmbox->mbxCommand,
10635 						pmbox->mbxStatus);
10636 				/* clear mailbox attention bit */
10637 				work_ha_copy &= ~HA_MBATT;
10638 			} else {
10639 				phba->sli.mbox_active = NULL;
10640 				spin_unlock_irqrestore(&phba->hbalock, iflag);
10641 				phba->last_completion_time = jiffies;
10642 				del_timer(&phba->sli.mbox_tmo);
10643 				if (pmb->mbox_cmpl) {
10644 					lpfc_sli_pcimem_bcopy(mbox, pmbox,
10645 							MAILBOX_CMD_SIZE);
10646 					if (pmb->out_ext_byte_len &&
10647 						pmb->context2)
10648 						lpfc_sli_pcimem_bcopy(
10649 						phba->mbox_ext,
10650 						pmb->context2,
10651 						pmb->out_ext_byte_len);
10652 				}
10653 				if (pmb->mbox_flag & LPFC_MBX_IMED_UNREG) {
10654 					pmb->mbox_flag &= ~LPFC_MBX_IMED_UNREG;
10655 
10656 					lpfc_debugfs_disc_trc(vport,
10657 						LPFC_DISC_TRC_MBOX_VPORT,
10658 						"MBOX dflt rpi: : "
10659 						"status:x%x rpi:x%x",
10660 						(uint32_t)pmbox->mbxStatus,
10661 						pmbox->un.varWords[0], 0);
10662 
10663 					if (!pmbox->mbxStatus) {
10664 						mp = (struct lpfc_dmabuf *)
10665 							(pmb->context1);
10666 						ndlp = (struct lpfc_nodelist *)
10667 							pmb->context2;
10668 
10669 						/* Reg_LOGIN of dflt RPI was
10670 						 * successful. new lets get
10671 						 * rid of the RPI using the
10672 						 * same mbox buffer.
10673 						 */
10674 						lpfc_unreg_login(phba,
10675 							vport->vpi,
10676 							pmbox->un.varWords[0],
10677 							pmb);
10678 						pmb->mbox_cmpl =
10679 							lpfc_mbx_cmpl_dflt_rpi;
10680 						pmb->context1 = mp;
10681 						pmb->context2 = ndlp;
10682 						pmb->vport = vport;
10683 						rc = lpfc_sli_issue_mbox(phba,
10684 								pmb,
10685 								MBX_NOWAIT);
10686 						if (rc != MBX_BUSY)
10687 							lpfc_printf_log(phba,
10688 							KERN_ERR,
10689 							LOG_MBOX | LOG_SLI,
10690 							"0350 rc should have"
10691 							"been MBX_BUSY\n");
10692 						if (rc != MBX_NOT_FINISHED)
10693 							goto send_current_mbox;
10694 					}
10695 				}
10696 				spin_lock_irqsave(
10697 						&phba->pport->work_port_lock,
10698 						iflag);
10699 				phba->pport->work_port_events &=
10700 					~WORKER_MBOX_TMO;
10701 				spin_unlock_irqrestore(
10702 						&phba->pport->work_port_lock,
10703 						iflag);
10704 				lpfc_mbox_cmpl_put(phba, pmb);
10705 			}
10706 		} else
10707 			spin_unlock_irqrestore(&phba->hbalock, iflag);
10708 
10709 		if ((work_ha_copy & HA_MBATT) &&
10710 		    (phba->sli.mbox_active == NULL)) {
10711 send_current_mbox:
10712 			/* Process next mailbox command if there is one */
10713 			do {
10714 				rc = lpfc_sli_issue_mbox(phba, NULL,
10715 							 MBX_NOWAIT);
10716 			} while (rc == MBX_NOT_FINISHED);
10717 			if (rc != MBX_SUCCESS)
10718 				lpfc_printf_log(phba, KERN_ERR, LOG_MBOX |
10719 						LOG_SLI, "0349 rc should be "
10720 						"MBX_SUCCESS\n");
10721 		}
10722 
10723 		spin_lock_irqsave(&phba->hbalock, iflag);
10724 		phba->work_ha |= work_ha_copy;
10725 		spin_unlock_irqrestore(&phba->hbalock, iflag);
10726 		lpfc_worker_wake_up(phba);
10727 	}
10728 	return IRQ_HANDLED;
10729 unplug_error:
10730 	spin_unlock_irqrestore(&phba->hbalock, iflag);
10731 	return IRQ_HANDLED;
10732 
10733 } /* lpfc_sli_sp_intr_handler */
10734 
10735 /**
10736  * lpfc_sli_fp_intr_handler - Fast-path interrupt handler to SLI-3 device.
10737  * @irq: Interrupt number.
10738  * @dev_id: The device context pointer.
10739  *
10740  * This function is directly called from the PCI layer as an interrupt
10741  * service routine when device with SLI-3 interface spec is enabled with
10742  * MSI-X multi-message interrupt mode and there is a fast-path FCP IOCB
10743  * ring event in the HBA. However, when the device is enabled with either
10744  * MSI or Pin-IRQ interrupt mode, this function is called as part of the
10745  * device-level interrupt handler. When the PCI slot is in error recovery
10746  * or the HBA is undergoing initialization, the interrupt handler will not
10747  * process the interrupt. The SCSI FCP fast-path ring event are handled in
10748  * the intrrupt context. This function is called without any lock held.
10749  * It gets the hbalock to access and update SLI data structures.
10750  *
10751  * This function returns IRQ_HANDLED when interrupt is handled else it
10752  * returns IRQ_NONE.
10753  **/
10754 irqreturn_t
10755 lpfc_sli_fp_intr_handler(int irq, void *dev_id)
10756 {
10757 	struct lpfc_hba  *phba;
10758 	uint32_t ha_copy;
10759 	unsigned long status;
10760 	unsigned long iflag;
10761 
10762 	/* Get the driver's phba structure from the dev_id and
10763 	 * assume the HBA is not interrupting.
10764 	 */
10765 	phba = (struct lpfc_hba *) dev_id;
10766 
10767 	if (unlikely(!phba))
10768 		return IRQ_NONE;
10769 
10770 	/*
10771 	 * Stuff needs to be attented to when this function is invoked as an
10772 	 * individual interrupt handler in MSI-X multi-message interrupt mode
10773 	 */
10774 	if (phba->intr_type == MSIX) {
10775 		/* Check device state for handling interrupt */
10776 		if (lpfc_intr_state_check(phba))
10777 			return IRQ_NONE;
10778 		/* Need to read HA REG for FCP ring and other ring events */
10779 		if (lpfc_readl(phba->HAregaddr, &ha_copy))
10780 			return IRQ_HANDLED;
10781 		/* Clear up only attention source related to fast-path */
10782 		spin_lock_irqsave(&phba->hbalock, iflag);
10783 		/*
10784 		 * If there is deferred error attention, do not check for
10785 		 * any interrupt.
10786 		 */
10787 		if (unlikely(phba->hba_flag & DEFER_ERATT)) {
10788 			spin_unlock_irqrestore(&phba->hbalock, iflag);
10789 			return IRQ_NONE;
10790 		}
10791 		writel((ha_copy & (HA_R0_CLR_MSK | HA_R1_CLR_MSK)),
10792 			phba->HAregaddr);
10793 		readl(phba->HAregaddr); /* flush */
10794 		spin_unlock_irqrestore(&phba->hbalock, iflag);
10795 	} else
10796 		ha_copy = phba->ha_copy;
10797 
10798 	/*
10799 	 * Process all events on FCP ring. Take the optimized path for FCP IO.
10800 	 */
10801 	ha_copy &= ~(phba->work_ha_mask);
10802 
10803 	status = (ha_copy & (HA_RXMASK << (4*LPFC_FCP_RING)));
10804 	status >>= (4*LPFC_FCP_RING);
10805 	if (status & HA_RXMASK)
10806 		lpfc_sli_handle_fast_ring_event(phba,
10807 						&phba->sli.ring[LPFC_FCP_RING],
10808 						status);
10809 
10810 	if (phba->cfg_multi_ring_support == 2) {
10811 		/*
10812 		 * Process all events on extra ring. Take the optimized path
10813 		 * for extra ring IO.
10814 		 */
10815 		status = (ha_copy & (HA_RXMASK << (4*LPFC_EXTRA_RING)));
10816 		status >>= (4*LPFC_EXTRA_RING);
10817 		if (status & HA_RXMASK) {
10818 			lpfc_sli_handle_fast_ring_event(phba,
10819 					&phba->sli.ring[LPFC_EXTRA_RING],
10820 					status);
10821 		}
10822 	}
10823 	return IRQ_HANDLED;
10824 }  /* lpfc_sli_fp_intr_handler */
10825 
10826 /**
10827  * lpfc_sli_intr_handler - Device-level interrupt handler to SLI-3 device
10828  * @irq: Interrupt number.
10829  * @dev_id: The device context pointer.
10830  *
10831  * This function is the HBA device-level interrupt handler to device with
10832  * SLI-3 interface spec, called from the PCI layer when either MSI or
10833  * Pin-IRQ interrupt mode is enabled and there is an event in the HBA which
10834  * requires driver attention. This function invokes the slow-path interrupt
10835  * attention handling function and fast-path interrupt attention handling
10836  * function in turn to process the relevant HBA attention events. This
10837  * function is called without any lock held. It gets the hbalock to access
10838  * and update SLI data structures.
10839  *
10840  * This function returns IRQ_HANDLED when interrupt is handled, else it
10841  * returns IRQ_NONE.
10842  **/
10843 irqreturn_t
10844 lpfc_sli_intr_handler(int irq, void *dev_id)
10845 {
10846 	struct lpfc_hba  *phba;
10847 	irqreturn_t sp_irq_rc, fp_irq_rc;
10848 	unsigned long status1, status2;
10849 	uint32_t hc_copy;
10850 
10851 	/*
10852 	 * Get the driver's phba structure from the dev_id and
10853 	 * assume the HBA is not interrupting.
10854 	 */
10855 	phba = (struct lpfc_hba *) dev_id;
10856 
10857 	if (unlikely(!phba))
10858 		return IRQ_NONE;
10859 
10860 	/* Check device state for handling interrupt */
10861 	if (lpfc_intr_state_check(phba))
10862 		return IRQ_NONE;
10863 
10864 	spin_lock(&phba->hbalock);
10865 	if (lpfc_readl(phba->HAregaddr, &phba->ha_copy)) {
10866 		spin_unlock(&phba->hbalock);
10867 		return IRQ_HANDLED;
10868 	}
10869 
10870 	if (unlikely(!phba->ha_copy)) {
10871 		spin_unlock(&phba->hbalock);
10872 		return IRQ_NONE;
10873 	} else if (phba->ha_copy & HA_ERATT) {
10874 		if (phba->hba_flag & HBA_ERATT_HANDLED)
10875 			/* ERATT polling has handled ERATT */
10876 			phba->ha_copy &= ~HA_ERATT;
10877 		else
10878 			/* Indicate interrupt handler handles ERATT */
10879 			phba->hba_flag |= HBA_ERATT_HANDLED;
10880 	}
10881 
10882 	/*
10883 	 * If there is deferred error attention, do not check for any interrupt.
10884 	 */
10885 	if (unlikely(phba->hba_flag & DEFER_ERATT)) {
10886 		spin_unlock(&phba->hbalock);
10887 		return IRQ_NONE;
10888 	}
10889 
10890 	/* Clear attention sources except link and error attentions */
10891 	if (lpfc_readl(phba->HCregaddr, &hc_copy)) {
10892 		spin_unlock(&phba->hbalock);
10893 		return IRQ_HANDLED;
10894 	}
10895 	writel(hc_copy & ~(HC_MBINT_ENA | HC_R0INT_ENA | HC_R1INT_ENA
10896 		| HC_R2INT_ENA | HC_LAINT_ENA | HC_ERINT_ENA),
10897 		phba->HCregaddr);
10898 	writel((phba->ha_copy & ~(HA_LATT | HA_ERATT)), phba->HAregaddr);
10899 	writel(hc_copy, phba->HCregaddr);
10900 	readl(phba->HAregaddr); /* flush */
10901 	spin_unlock(&phba->hbalock);
10902 
10903 	/*
10904 	 * Invokes slow-path host attention interrupt handling as appropriate.
10905 	 */
10906 
10907 	/* status of events with mailbox and link attention */
10908 	status1 = phba->ha_copy & (HA_MBATT | HA_LATT | HA_ERATT);
10909 
10910 	/* status of events with ELS ring */
10911 	status2 = (phba->ha_copy & (HA_RXMASK  << (4*LPFC_ELS_RING)));
10912 	status2 >>= (4*LPFC_ELS_RING);
10913 
10914 	if (status1 || (status2 & HA_RXMASK))
10915 		sp_irq_rc = lpfc_sli_sp_intr_handler(irq, dev_id);
10916 	else
10917 		sp_irq_rc = IRQ_NONE;
10918 
10919 	/*
10920 	 * Invoke fast-path host attention interrupt handling as appropriate.
10921 	 */
10922 
10923 	/* status of events with FCP ring */
10924 	status1 = (phba->ha_copy & (HA_RXMASK << (4*LPFC_FCP_RING)));
10925 	status1 >>= (4*LPFC_FCP_RING);
10926 
10927 	/* status of events with extra ring */
10928 	if (phba->cfg_multi_ring_support == 2) {
10929 		status2 = (phba->ha_copy & (HA_RXMASK << (4*LPFC_EXTRA_RING)));
10930 		status2 >>= (4*LPFC_EXTRA_RING);
10931 	} else
10932 		status2 = 0;
10933 
10934 	if ((status1 & HA_RXMASK) || (status2 & HA_RXMASK))
10935 		fp_irq_rc = lpfc_sli_fp_intr_handler(irq, dev_id);
10936 	else
10937 		fp_irq_rc = IRQ_NONE;
10938 
10939 	/* Return device-level interrupt handling status */
10940 	return (sp_irq_rc == IRQ_HANDLED) ? sp_irq_rc : fp_irq_rc;
10941 }  /* lpfc_sli_intr_handler */
10942 
10943 /**
10944  * lpfc_sli4_fcp_xri_abort_event_proc - Process fcp xri abort event
10945  * @phba: pointer to lpfc hba data structure.
10946  *
10947  * This routine is invoked by the worker thread to process all the pending
10948  * SLI4 FCP abort XRI events.
10949  **/
10950 void lpfc_sli4_fcp_xri_abort_event_proc(struct lpfc_hba *phba)
10951 {
10952 	struct lpfc_cq_event *cq_event;
10953 
10954 	/* First, declare the fcp xri abort event has been handled */
10955 	spin_lock_irq(&phba->hbalock);
10956 	phba->hba_flag &= ~FCP_XRI_ABORT_EVENT;
10957 	spin_unlock_irq(&phba->hbalock);
10958 	/* Now, handle all the fcp xri abort events */
10959 	while (!list_empty(&phba->sli4_hba.sp_fcp_xri_aborted_work_queue)) {
10960 		/* Get the first event from the head of the event queue */
10961 		spin_lock_irq(&phba->hbalock);
10962 		list_remove_head(&phba->sli4_hba.sp_fcp_xri_aborted_work_queue,
10963 				 cq_event, struct lpfc_cq_event, list);
10964 		spin_unlock_irq(&phba->hbalock);
10965 		/* Notify aborted XRI for FCP work queue */
10966 		lpfc_sli4_fcp_xri_aborted(phba, &cq_event->cqe.wcqe_axri);
10967 		/* Free the event processed back to the free pool */
10968 		lpfc_sli4_cq_event_release(phba, cq_event);
10969 	}
10970 }
10971 
10972 /**
10973  * lpfc_sli4_els_xri_abort_event_proc - Process els xri abort event
10974  * @phba: pointer to lpfc hba data structure.
10975  *
10976  * This routine is invoked by the worker thread to process all the pending
10977  * SLI4 els abort xri events.
10978  **/
10979 void lpfc_sli4_els_xri_abort_event_proc(struct lpfc_hba *phba)
10980 {
10981 	struct lpfc_cq_event *cq_event;
10982 
10983 	/* First, declare the els xri abort event has been handled */
10984 	spin_lock_irq(&phba->hbalock);
10985 	phba->hba_flag &= ~ELS_XRI_ABORT_EVENT;
10986 	spin_unlock_irq(&phba->hbalock);
10987 	/* Now, handle all the els xri abort events */
10988 	while (!list_empty(&phba->sli4_hba.sp_els_xri_aborted_work_queue)) {
10989 		/* Get the first event from the head of the event queue */
10990 		spin_lock_irq(&phba->hbalock);
10991 		list_remove_head(&phba->sli4_hba.sp_els_xri_aborted_work_queue,
10992 				 cq_event, struct lpfc_cq_event, list);
10993 		spin_unlock_irq(&phba->hbalock);
10994 		/* Notify aborted XRI for ELS work queue */
10995 		lpfc_sli4_els_xri_aborted(phba, &cq_event->cqe.wcqe_axri);
10996 		/* Free the event processed back to the free pool */
10997 		lpfc_sli4_cq_event_release(phba, cq_event);
10998 	}
10999 }
11000 
11001 /**
11002  * lpfc_sli4_iocb_param_transfer - Transfer pIocbOut and cmpl status to pIocbIn
11003  * @phba: pointer to lpfc hba data structure
11004  * @pIocbIn: pointer to the rspiocbq
11005  * @pIocbOut: pointer to the cmdiocbq
11006  * @wcqe: pointer to the complete wcqe
11007  *
11008  * This routine transfers the fields of a command iocbq to a response iocbq
11009  * by copying all the IOCB fields from command iocbq and transferring the
11010  * completion status information from the complete wcqe.
11011  **/
11012 static void
11013 lpfc_sli4_iocb_param_transfer(struct lpfc_hba *phba,
11014 			      struct lpfc_iocbq *pIocbIn,
11015 			      struct lpfc_iocbq *pIocbOut,
11016 			      struct lpfc_wcqe_complete *wcqe)
11017 {
11018 	unsigned long iflags;
11019 	uint32_t status;
11020 	size_t offset = offsetof(struct lpfc_iocbq, iocb);
11021 
11022 	memcpy((char *)pIocbIn + offset, (char *)pIocbOut + offset,
11023 	       sizeof(struct lpfc_iocbq) - offset);
11024 	/* Map WCQE parameters into irspiocb parameters */
11025 	status = bf_get(lpfc_wcqe_c_status, wcqe);
11026 	pIocbIn->iocb.ulpStatus = (status & LPFC_IOCB_STATUS_MASK);
11027 	if (pIocbOut->iocb_flag & LPFC_IO_FCP)
11028 		if (pIocbIn->iocb.ulpStatus == IOSTAT_FCP_RSP_ERROR)
11029 			pIocbIn->iocb.un.fcpi.fcpi_parm =
11030 					pIocbOut->iocb.un.fcpi.fcpi_parm -
11031 					wcqe->total_data_placed;
11032 		else
11033 			pIocbIn->iocb.un.ulpWord[4] = wcqe->parameter;
11034 	else {
11035 		pIocbIn->iocb.un.ulpWord[4] = wcqe->parameter;
11036 		pIocbIn->iocb.un.genreq64.bdl.bdeSize = wcqe->total_data_placed;
11037 	}
11038 
11039 	/* Convert BG errors for completion status */
11040 	if (status == CQE_STATUS_DI_ERROR) {
11041 		pIocbIn->iocb.ulpStatus = IOSTAT_LOCAL_REJECT;
11042 
11043 		if (bf_get(lpfc_wcqe_c_bg_edir, wcqe))
11044 			pIocbIn->iocb.un.ulpWord[4] = IOERR_RX_DMA_FAILED;
11045 		else
11046 			pIocbIn->iocb.un.ulpWord[4] = IOERR_TX_DMA_FAILED;
11047 
11048 		pIocbIn->iocb.unsli3.sli3_bg.bgstat = 0;
11049 		if (bf_get(lpfc_wcqe_c_bg_ge, wcqe)) /* Guard Check failed */
11050 			pIocbIn->iocb.unsli3.sli3_bg.bgstat |=
11051 				BGS_GUARD_ERR_MASK;
11052 		if (bf_get(lpfc_wcqe_c_bg_ae, wcqe)) /* App Tag Check failed */
11053 			pIocbIn->iocb.unsli3.sli3_bg.bgstat |=
11054 				BGS_APPTAG_ERR_MASK;
11055 		if (bf_get(lpfc_wcqe_c_bg_re, wcqe)) /* Ref Tag Check failed */
11056 			pIocbIn->iocb.unsli3.sli3_bg.bgstat |=
11057 				BGS_REFTAG_ERR_MASK;
11058 
11059 		/* Check to see if there was any good data before the error */
11060 		if (bf_get(lpfc_wcqe_c_bg_tdpv, wcqe)) {
11061 			pIocbIn->iocb.unsli3.sli3_bg.bgstat |=
11062 				BGS_HI_WATER_MARK_PRESENT_MASK;
11063 			pIocbIn->iocb.unsli3.sli3_bg.bghm =
11064 				wcqe->total_data_placed;
11065 		}
11066 
11067 		/*
11068 		* Set ALL the error bits to indicate we don't know what
11069 		* type of error it is.
11070 		*/
11071 		if (!pIocbIn->iocb.unsli3.sli3_bg.bgstat)
11072 			pIocbIn->iocb.unsli3.sli3_bg.bgstat |=
11073 				(BGS_REFTAG_ERR_MASK | BGS_APPTAG_ERR_MASK |
11074 				BGS_GUARD_ERR_MASK);
11075 	}
11076 
11077 	/* Pick up HBA exchange busy condition */
11078 	if (bf_get(lpfc_wcqe_c_xb, wcqe)) {
11079 		spin_lock_irqsave(&phba->hbalock, iflags);
11080 		pIocbIn->iocb_flag |= LPFC_EXCHANGE_BUSY;
11081 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11082 	}
11083 }
11084 
11085 /**
11086  * lpfc_sli4_els_wcqe_to_rspiocbq - Get response iocbq from els wcqe
11087  * @phba: Pointer to HBA context object.
11088  * @wcqe: Pointer to work-queue completion queue entry.
11089  *
11090  * This routine handles an ELS work-queue completion event and construct
11091  * a pseudo response ELS IODBQ from the SLI4 ELS WCQE for the common
11092  * discovery engine to handle.
11093  *
11094  * Return: Pointer to the receive IOCBQ, NULL otherwise.
11095  **/
11096 static struct lpfc_iocbq *
11097 lpfc_sli4_els_wcqe_to_rspiocbq(struct lpfc_hba *phba,
11098 			       struct lpfc_iocbq *irspiocbq)
11099 {
11100 	struct lpfc_sli_ring *pring = &phba->sli.ring[LPFC_ELS_RING];
11101 	struct lpfc_iocbq *cmdiocbq;
11102 	struct lpfc_wcqe_complete *wcqe;
11103 	unsigned long iflags;
11104 
11105 	wcqe = &irspiocbq->cq_event.cqe.wcqe_cmpl;
11106 	spin_lock_irqsave(&pring->ring_lock, iflags);
11107 	pring->stats.iocb_event++;
11108 	/* Look up the ELS command IOCB and create pseudo response IOCB */
11109 	cmdiocbq = lpfc_sli_iocbq_lookup_by_tag(phba, pring,
11110 				bf_get(lpfc_wcqe_c_request_tag, wcqe));
11111 	spin_unlock_irqrestore(&pring->ring_lock, iflags);
11112 
11113 	if (unlikely(!cmdiocbq)) {
11114 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11115 				"0386 ELS complete with no corresponding "
11116 				"cmdiocb: iotag (%d)\n",
11117 				bf_get(lpfc_wcqe_c_request_tag, wcqe));
11118 		lpfc_sli_release_iocbq(phba, irspiocbq);
11119 		return NULL;
11120 	}
11121 
11122 	/* Fake the irspiocbq and copy necessary response information */
11123 	lpfc_sli4_iocb_param_transfer(phba, irspiocbq, cmdiocbq, wcqe);
11124 
11125 	return irspiocbq;
11126 }
11127 
11128 /**
11129  * lpfc_sli4_sp_handle_async_event - Handle an asynchroous event
11130  * @phba: Pointer to HBA context object.
11131  * @cqe: Pointer to mailbox completion queue entry.
11132  *
11133  * This routine process a mailbox completion queue entry with asynchrous
11134  * event.
11135  *
11136  * Return: true if work posted to worker thread, otherwise false.
11137  **/
11138 static bool
11139 lpfc_sli4_sp_handle_async_event(struct lpfc_hba *phba, struct lpfc_mcqe *mcqe)
11140 {
11141 	struct lpfc_cq_event *cq_event;
11142 	unsigned long iflags;
11143 
11144 	lpfc_printf_log(phba, KERN_INFO, LOG_SLI,
11145 			"0392 Async Event: word0:x%x, word1:x%x, "
11146 			"word2:x%x, word3:x%x\n", mcqe->word0,
11147 			mcqe->mcqe_tag0, mcqe->mcqe_tag1, mcqe->trailer);
11148 
11149 	/* Allocate a new internal CQ_EVENT entry */
11150 	cq_event = lpfc_sli4_cq_event_alloc(phba);
11151 	if (!cq_event) {
11152 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11153 				"0394 Failed to allocate CQ_EVENT entry\n");
11154 		return false;
11155 	}
11156 
11157 	/* Move the CQE into an asynchronous event entry */
11158 	memcpy(&cq_event->cqe, mcqe, sizeof(struct lpfc_mcqe));
11159 	spin_lock_irqsave(&phba->hbalock, iflags);
11160 	list_add_tail(&cq_event->list, &phba->sli4_hba.sp_asynce_work_queue);
11161 	/* Set the async event flag */
11162 	phba->hba_flag |= ASYNC_EVENT;
11163 	spin_unlock_irqrestore(&phba->hbalock, iflags);
11164 
11165 	return true;
11166 }
11167 
11168 /**
11169  * lpfc_sli4_sp_handle_mbox_event - Handle a mailbox completion event
11170  * @phba: Pointer to HBA context object.
11171  * @cqe: Pointer to mailbox completion queue entry.
11172  *
11173  * This routine process a mailbox completion queue entry with mailbox
11174  * completion event.
11175  *
11176  * Return: true if work posted to worker thread, otherwise false.
11177  **/
11178 static bool
11179 lpfc_sli4_sp_handle_mbox_event(struct lpfc_hba *phba, struct lpfc_mcqe *mcqe)
11180 {
11181 	uint32_t mcqe_status;
11182 	MAILBOX_t *mbox, *pmbox;
11183 	struct lpfc_mqe *mqe;
11184 	struct lpfc_vport *vport;
11185 	struct lpfc_nodelist *ndlp;
11186 	struct lpfc_dmabuf *mp;
11187 	unsigned long iflags;
11188 	LPFC_MBOXQ_t *pmb;
11189 	bool workposted = false;
11190 	int rc;
11191 
11192 	/* If not a mailbox complete MCQE, out by checking mailbox consume */
11193 	if (!bf_get(lpfc_trailer_completed, mcqe))
11194 		goto out_no_mqe_complete;
11195 
11196 	/* Get the reference to the active mbox command */
11197 	spin_lock_irqsave(&phba->hbalock, iflags);
11198 	pmb = phba->sli.mbox_active;
11199 	if (unlikely(!pmb)) {
11200 		lpfc_printf_log(phba, KERN_ERR, LOG_MBOX,
11201 				"1832 No pending MBOX command to handle\n");
11202 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11203 		goto out_no_mqe_complete;
11204 	}
11205 	spin_unlock_irqrestore(&phba->hbalock, iflags);
11206 	mqe = &pmb->u.mqe;
11207 	pmbox = (MAILBOX_t *)&pmb->u.mqe;
11208 	mbox = phba->mbox;
11209 	vport = pmb->vport;
11210 
11211 	/* Reset heartbeat timer */
11212 	phba->last_completion_time = jiffies;
11213 	del_timer(&phba->sli.mbox_tmo);
11214 
11215 	/* Move mbox data to caller's mailbox region, do endian swapping */
11216 	if (pmb->mbox_cmpl && mbox)
11217 		lpfc_sli_pcimem_bcopy(mbox, mqe, sizeof(struct lpfc_mqe));
11218 
11219 	/*
11220 	 * For mcqe errors, conditionally move a modified error code to
11221 	 * the mbox so that the error will not be missed.
11222 	 */
11223 	mcqe_status = bf_get(lpfc_mcqe_status, mcqe);
11224 	if (mcqe_status != MB_CQE_STATUS_SUCCESS) {
11225 		if (bf_get(lpfc_mqe_status, mqe) == MBX_SUCCESS)
11226 			bf_set(lpfc_mqe_status, mqe,
11227 			       (LPFC_MBX_ERROR_RANGE | mcqe_status));
11228 	}
11229 	if (pmb->mbox_flag & LPFC_MBX_IMED_UNREG) {
11230 		pmb->mbox_flag &= ~LPFC_MBX_IMED_UNREG;
11231 		lpfc_debugfs_disc_trc(vport, LPFC_DISC_TRC_MBOX_VPORT,
11232 				      "MBOX dflt rpi: status:x%x rpi:x%x",
11233 				      mcqe_status,
11234 				      pmbox->un.varWords[0], 0);
11235 		if (mcqe_status == MB_CQE_STATUS_SUCCESS) {
11236 			mp = (struct lpfc_dmabuf *)(pmb->context1);
11237 			ndlp = (struct lpfc_nodelist *)pmb->context2;
11238 			/* Reg_LOGIN of dflt RPI was successful. Now lets get
11239 			 * RID of the PPI using the same mbox buffer.
11240 			 */
11241 			lpfc_unreg_login(phba, vport->vpi,
11242 					 pmbox->un.varWords[0], pmb);
11243 			pmb->mbox_cmpl = lpfc_mbx_cmpl_dflt_rpi;
11244 			pmb->context1 = mp;
11245 			pmb->context2 = ndlp;
11246 			pmb->vport = vport;
11247 			rc = lpfc_sli_issue_mbox(phba, pmb, MBX_NOWAIT);
11248 			if (rc != MBX_BUSY)
11249 				lpfc_printf_log(phba, KERN_ERR, LOG_MBOX |
11250 						LOG_SLI, "0385 rc should "
11251 						"have been MBX_BUSY\n");
11252 			if (rc != MBX_NOT_FINISHED)
11253 				goto send_current_mbox;
11254 		}
11255 	}
11256 	spin_lock_irqsave(&phba->pport->work_port_lock, iflags);
11257 	phba->pport->work_port_events &= ~WORKER_MBOX_TMO;
11258 	spin_unlock_irqrestore(&phba->pport->work_port_lock, iflags);
11259 
11260 	/* There is mailbox completion work to do */
11261 	spin_lock_irqsave(&phba->hbalock, iflags);
11262 	__lpfc_mbox_cmpl_put(phba, pmb);
11263 	phba->work_ha |= HA_MBATT;
11264 	spin_unlock_irqrestore(&phba->hbalock, iflags);
11265 	workposted = true;
11266 
11267 send_current_mbox:
11268 	spin_lock_irqsave(&phba->hbalock, iflags);
11269 	/* Release the mailbox command posting token */
11270 	phba->sli.sli_flag &= ~LPFC_SLI_MBOX_ACTIVE;
11271 	/* Setting active mailbox pointer need to be in sync to flag clear */
11272 	phba->sli.mbox_active = NULL;
11273 	spin_unlock_irqrestore(&phba->hbalock, iflags);
11274 	/* Wake up worker thread to post the next pending mailbox command */
11275 	lpfc_worker_wake_up(phba);
11276 out_no_mqe_complete:
11277 	if (bf_get(lpfc_trailer_consumed, mcqe))
11278 		lpfc_sli4_mq_release(phba->sli4_hba.mbx_wq);
11279 	return workposted;
11280 }
11281 
11282 /**
11283  * lpfc_sli4_sp_handle_mcqe - Process a mailbox completion queue entry
11284  * @phba: Pointer to HBA context object.
11285  * @cqe: Pointer to mailbox completion queue entry.
11286  *
11287  * This routine process a mailbox completion queue entry, it invokes the
11288  * proper mailbox complete handling or asynchrous event handling routine
11289  * according to the MCQE's async bit.
11290  *
11291  * Return: true if work posted to worker thread, otherwise false.
11292  **/
11293 static bool
11294 lpfc_sli4_sp_handle_mcqe(struct lpfc_hba *phba, struct lpfc_cqe *cqe)
11295 {
11296 	struct lpfc_mcqe mcqe;
11297 	bool workposted;
11298 
11299 	/* Copy the mailbox MCQE and convert endian order as needed */
11300 	lpfc_sli_pcimem_bcopy(cqe, &mcqe, sizeof(struct lpfc_mcqe));
11301 
11302 	/* Invoke the proper event handling routine */
11303 	if (!bf_get(lpfc_trailer_async, &mcqe))
11304 		workposted = lpfc_sli4_sp_handle_mbox_event(phba, &mcqe);
11305 	else
11306 		workposted = lpfc_sli4_sp_handle_async_event(phba, &mcqe);
11307 	return workposted;
11308 }
11309 
11310 /**
11311  * lpfc_sli4_sp_handle_els_wcqe - Handle els work-queue completion event
11312  * @phba: Pointer to HBA context object.
11313  * @cq: Pointer to associated CQ
11314  * @wcqe: Pointer to work-queue completion queue entry.
11315  *
11316  * This routine handles an ELS work-queue completion event.
11317  *
11318  * Return: true if work posted to worker thread, otherwise false.
11319  **/
11320 static bool
11321 lpfc_sli4_sp_handle_els_wcqe(struct lpfc_hba *phba, struct lpfc_queue *cq,
11322 			     struct lpfc_wcqe_complete *wcqe)
11323 {
11324 	struct lpfc_iocbq *irspiocbq;
11325 	unsigned long iflags;
11326 	struct lpfc_sli_ring *pring = cq->pring;
11327 	int txq_cnt = 0;
11328 	int txcmplq_cnt = 0;
11329 	int fcp_txcmplq_cnt = 0;
11330 
11331 	/* Get an irspiocbq for later ELS response processing use */
11332 	irspiocbq = lpfc_sli_get_iocbq(phba);
11333 	if (!irspiocbq) {
11334 		if (!list_empty(&pring->txq))
11335 			txq_cnt++;
11336 		if (!list_empty(&pring->txcmplq))
11337 			txcmplq_cnt++;
11338 		if (!list_empty(&phba->sli.ring[LPFC_FCP_RING].txcmplq))
11339 			fcp_txcmplq_cnt++;
11340 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11341 			"0387 NO IOCBQ data: txq_cnt=%d iocb_cnt=%d "
11342 			"fcp_txcmplq_cnt=%d, els_txcmplq_cnt=%d\n",
11343 			txq_cnt, phba->iocb_cnt,
11344 			fcp_txcmplq_cnt,
11345 			txcmplq_cnt);
11346 		return false;
11347 	}
11348 
11349 	/* Save off the slow-path queue event for work thread to process */
11350 	memcpy(&irspiocbq->cq_event.cqe.wcqe_cmpl, wcqe, sizeof(*wcqe));
11351 	spin_lock_irqsave(&phba->hbalock, iflags);
11352 	list_add_tail(&irspiocbq->cq_event.list,
11353 		      &phba->sli4_hba.sp_queue_event);
11354 	phba->hba_flag |= HBA_SP_QUEUE_EVT;
11355 	spin_unlock_irqrestore(&phba->hbalock, iflags);
11356 
11357 	return true;
11358 }
11359 
11360 /**
11361  * lpfc_sli4_sp_handle_rel_wcqe - Handle slow-path WQ entry consumed event
11362  * @phba: Pointer to HBA context object.
11363  * @wcqe: Pointer to work-queue completion queue entry.
11364  *
11365  * This routine handles slow-path WQ entry comsumed event by invoking the
11366  * proper WQ release routine to the slow-path WQ.
11367  **/
11368 static void
11369 lpfc_sli4_sp_handle_rel_wcqe(struct lpfc_hba *phba,
11370 			     struct lpfc_wcqe_release *wcqe)
11371 {
11372 	/* sanity check on queue memory */
11373 	if (unlikely(!phba->sli4_hba.els_wq))
11374 		return;
11375 	/* Check for the slow-path ELS work queue */
11376 	if (bf_get(lpfc_wcqe_r_wq_id, wcqe) == phba->sli4_hba.els_wq->queue_id)
11377 		lpfc_sli4_wq_release(phba->sli4_hba.els_wq,
11378 				     bf_get(lpfc_wcqe_r_wqe_index, wcqe));
11379 	else
11380 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11381 				"2579 Slow-path wqe consume event carries "
11382 				"miss-matched qid: wcqe-qid=x%x, sp-qid=x%x\n",
11383 				bf_get(lpfc_wcqe_r_wqe_index, wcqe),
11384 				phba->sli4_hba.els_wq->queue_id);
11385 }
11386 
11387 /**
11388  * lpfc_sli4_sp_handle_abort_xri_wcqe - Handle a xri abort event
11389  * @phba: Pointer to HBA context object.
11390  * @cq: Pointer to a WQ completion queue.
11391  * @wcqe: Pointer to work-queue completion queue entry.
11392  *
11393  * This routine handles an XRI abort event.
11394  *
11395  * Return: true if work posted to worker thread, otherwise false.
11396  **/
11397 static bool
11398 lpfc_sli4_sp_handle_abort_xri_wcqe(struct lpfc_hba *phba,
11399 				   struct lpfc_queue *cq,
11400 				   struct sli4_wcqe_xri_aborted *wcqe)
11401 {
11402 	bool workposted = false;
11403 	struct lpfc_cq_event *cq_event;
11404 	unsigned long iflags;
11405 
11406 	/* Allocate a new internal CQ_EVENT entry */
11407 	cq_event = lpfc_sli4_cq_event_alloc(phba);
11408 	if (!cq_event) {
11409 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11410 				"0602 Failed to allocate CQ_EVENT entry\n");
11411 		return false;
11412 	}
11413 
11414 	/* Move the CQE into the proper xri abort event list */
11415 	memcpy(&cq_event->cqe, wcqe, sizeof(struct sli4_wcqe_xri_aborted));
11416 	switch (cq->subtype) {
11417 	case LPFC_FCP:
11418 		spin_lock_irqsave(&phba->hbalock, iflags);
11419 		list_add_tail(&cq_event->list,
11420 			      &phba->sli4_hba.sp_fcp_xri_aborted_work_queue);
11421 		/* Set the fcp xri abort event flag */
11422 		phba->hba_flag |= FCP_XRI_ABORT_EVENT;
11423 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11424 		workposted = true;
11425 		break;
11426 	case LPFC_ELS:
11427 		spin_lock_irqsave(&phba->hbalock, iflags);
11428 		list_add_tail(&cq_event->list,
11429 			      &phba->sli4_hba.sp_els_xri_aborted_work_queue);
11430 		/* Set the els xri abort event flag */
11431 		phba->hba_flag |= ELS_XRI_ABORT_EVENT;
11432 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11433 		workposted = true;
11434 		break;
11435 	default:
11436 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11437 				"0603 Invalid work queue CQE subtype (x%x)\n",
11438 				cq->subtype);
11439 		workposted = false;
11440 		break;
11441 	}
11442 	return workposted;
11443 }
11444 
11445 /**
11446  * lpfc_sli4_sp_handle_rcqe - Process a receive-queue completion queue entry
11447  * @phba: Pointer to HBA context object.
11448  * @rcqe: Pointer to receive-queue completion queue entry.
11449  *
11450  * This routine process a receive-queue completion queue entry.
11451  *
11452  * Return: true if work posted to worker thread, otherwise false.
11453  **/
11454 static bool
11455 lpfc_sli4_sp_handle_rcqe(struct lpfc_hba *phba, struct lpfc_rcqe *rcqe)
11456 {
11457 	bool workposted = false;
11458 	struct lpfc_queue *hrq = phba->sli4_hba.hdr_rq;
11459 	struct lpfc_queue *drq = phba->sli4_hba.dat_rq;
11460 	struct hbq_dmabuf *dma_buf;
11461 	uint32_t status, rq_id;
11462 	unsigned long iflags;
11463 
11464 	/* sanity check on queue memory */
11465 	if (unlikely(!hrq) || unlikely(!drq))
11466 		return workposted;
11467 
11468 	if (bf_get(lpfc_cqe_code, rcqe) == CQE_CODE_RECEIVE_V1)
11469 		rq_id = bf_get(lpfc_rcqe_rq_id_v1, rcqe);
11470 	else
11471 		rq_id = bf_get(lpfc_rcqe_rq_id, rcqe);
11472 	if (rq_id != hrq->queue_id)
11473 		goto out;
11474 
11475 	status = bf_get(lpfc_rcqe_status, rcqe);
11476 	switch (status) {
11477 	case FC_STATUS_RQ_BUF_LEN_EXCEEDED:
11478 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11479 				"2537 Receive Frame Truncated!!\n");
11480 		hrq->RQ_buf_trunc++;
11481 	case FC_STATUS_RQ_SUCCESS:
11482 		lpfc_sli4_rq_release(hrq, drq);
11483 		spin_lock_irqsave(&phba->hbalock, iflags);
11484 		dma_buf = lpfc_sli_hbqbuf_get(&phba->hbqs[0].hbq_buffer_list);
11485 		if (!dma_buf) {
11486 			hrq->RQ_no_buf_found++;
11487 			spin_unlock_irqrestore(&phba->hbalock, iflags);
11488 			goto out;
11489 		}
11490 		hrq->RQ_rcv_buf++;
11491 		memcpy(&dma_buf->cq_event.cqe.rcqe_cmpl, rcqe, sizeof(*rcqe));
11492 		/* save off the frame for the word thread to process */
11493 		list_add_tail(&dma_buf->cq_event.list,
11494 			      &phba->sli4_hba.sp_queue_event);
11495 		/* Frame received */
11496 		phba->hba_flag |= HBA_SP_QUEUE_EVT;
11497 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11498 		workposted = true;
11499 		break;
11500 	case FC_STATUS_INSUFF_BUF_NEED_BUF:
11501 	case FC_STATUS_INSUFF_BUF_FRM_DISC:
11502 		hrq->RQ_no_posted_buf++;
11503 		/* Post more buffers if possible */
11504 		spin_lock_irqsave(&phba->hbalock, iflags);
11505 		phba->hba_flag |= HBA_POST_RECEIVE_BUFFER;
11506 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11507 		workposted = true;
11508 		break;
11509 	}
11510 out:
11511 	return workposted;
11512 }
11513 
11514 /**
11515  * lpfc_sli4_sp_handle_cqe - Process a slow path completion queue entry
11516  * @phba: Pointer to HBA context object.
11517  * @cq: Pointer to the completion queue.
11518  * @wcqe: Pointer to a completion queue entry.
11519  *
11520  * This routine process a slow-path work-queue or receive queue completion queue
11521  * entry.
11522  *
11523  * Return: true if work posted to worker thread, otherwise false.
11524  **/
11525 static bool
11526 lpfc_sli4_sp_handle_cqe(struct lpfc_hba *phba, struct lpfc_queue *cq,
11527 			 struct lpfc_cqe *cqe)
11528 {
11529 	struct lpfc_cqe cqevt;
11530 	bool workposted = false;
11531 
11532 	/* Copy the work queue CQE and convert endian order if needed */
11533 	lpfc_sli_pcimem_bcopy(cqe, &cqevt, sizeof(struct lpfc_cqe));
11534 
11535 	/* Check and process for different type of WCQE and dispatch */
11536 	switch (bf_get(lpfc_cqe_code, &cqevt)) {
11537 	case CQE_CODE_COMPL_WQE:
11538 		/* Process the WQ/RQ complete event */
11539 		phba->last_completion_time = jiffies;
11540 		workposted = lpfc_sli4_sp_handle_els_wcqe(phba, cq,
11541 				(struct lpfc_wcqe_complete *)&cqevt);
11542 		break;
11543 	case CQE_CODE_RELEASE_WQE:
11544 		/* Process the WQ release event */
11545 		lpfc_sli4_sp_handle_rel_wcqe(phba,
11546 				(struct lpfc_wcqe_release *)&cqevt);
11547 		break;
11548 	case CQE_CODE_XRI_ABORTED:
11549 		/* Process the WQ XRI abort event */
11550 		phba->last_completion_time = jiffies;
11551 		workposted = lpfc_sli4_sp_handle_abort_xri_wcqe(phba, cq,
11552 				(struct sli4_wcqe_xri_aborted *)&cqevt);
11553 		break;
11554 	case CQE_CODE_RECEIVE:
11555 	case CQE_CODE_RECEIVE_V1:
11556 		/* Process the RQ event */
11557 		phba->last_completion_time = jiffies;
11558 		workposted = lpfc_sli4_sp_handle_rcqe(phba,
11559 				(struct lpfc_rcqe *)&cqevt);
11560 		break;
11561 	default:
11562 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11563 				"0388 Not a valid WCQE code: x%x\n",
11564 				bf_get(lpfc_cqe_code, &cqevt));
11565 		break;
11566 	}
11567 	return workposted;
11568 }
11569 
11570 /**
11571  * lpfc_sli4_sp_handle_eqe - Process a slow-path event queue entry
11572  * @phba: Pointer to HBA context object.
11573  * @eqe: Pointer to fast-path event queue entry.
11574  *
11575  * This routine process a event queue entry from the slow-path event queue.
11576  * It will check the MajorCode and MinorCode to determine this is for a
11577  * completion event on a completion queue, if not, an error shall be logged
11578  * and just return. Otherwise, it will get to the corresponding completion
11579  * queue and process all the entries on that completion queue, rearm the
11580  * completion queue, and then return.
11581  *
11582  **/
11583 static void
11584 lpfc_sli4_sp_handle_eqe(struct lpfc_hba *phba, struct lpfc_eqe *eqe,
11585 	struct lpfc_queue *speq)
11586 {
11587 	struct lpfc_queue *cq = NULL, *childq;
11588 	struct lpfc_cqe *cqe;
11589 	bool workposted = false;
11590 	int ecount = 0;
11591 	uint16_t cqid;
11592 
11593 	/* Get the reference to the corresponding CQ */
11594 	cqid = bf_get_le32(lpfc_eqe_resource_id, eqe);
11595 
11596 	list_for_each_entry(childq, &speq->child_list, list) {
11597 		if (childq->queue_id == cqid) {
11598 			cq = childq;
11599 			break;
11600 		}
11601 	}
11602 	if (unlikely(!cq)) {
11603 		if (phba->sli.sli_flag & LPFC_SLI_ACTIVE)
11604 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11605 					"0365 Slow-path CQ identifier "
11606 					"(%d) does not exist\n", cqid);
11607 		return;
11608 	}
11609 
11610 	/* Process all the entries to the CQ */
11611 	switch (cq->type) {
11612 	case LPFC_MCQ:
11613 		while ((cqe = lpfc_sli4_cq_get(cq))) {
11614 			workposted |= lpfc_sli4_sp_handle_mcqe(phba, cqe);
11615 			if (!(++ecount % cq->entry_repost))
11616 				lpfc_sli4_cq_release(cq, LPFC_QUEUE_NOARM);
11617 			cq->CQ_mbox++;
11618 		}
11619 		break;
11620 	case LPFC_WCQ:
11621 		while ((cqe = lpfc_sli4_cq_get(cq))) {
11622 			if (cq->subtype == LPFC_FCP)
11623 				workposted |= lpfc_sli4_fp_handle_wcqe(phba, cq,
11624 								       cqe);
11625 			else
11626 				workposted |= lpfc_sli4_sp_handle_cqe(phba, cq,
11627 								      cqe);
11628 			if (!(++ecount % cq->entry_repost))
11629 				lpfc_sli4_cq_release(cq, LPFC_QUEUE_NOARM);
11630 		}
11631 
11632 		/* Track the max number of CQEs processed in 1 EQ */
11633 		if (ecount > cq->CQ_max_cqe)
11634 			cq->CQ_max_cqe = ecount;
11635 		break;
11636 	default:
11637 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11638 				"0370 Invalid completion queue type (%d)\n",
11639 				cq->type);
11640 		return;
11641 	}
11642 
11643 	/* Catch the no cq entry condition, log an error */
11644 	if (unlikely(ecount == 0))
11645 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11646 				"0371 No entry from the CQ: identifier "
11647 				"(x%x), type (%d)\n", cq->queue_id, cq->type);
11648 
11649 	/* In any case, flash and re-arm the RCQ */
11650 	lpfc_sli4_cq_release(cq, LPFC_QUEUE_REARM);
11651 
11652 	/* wake up worker thread if there are works to be done */
11653 	if (workposted)
11654 		lpfc_worker_wake_up(phba);
11655 }
11656 
11657 /**
11658  * lpfc_sli4_fp_handle_fcp_wcqe - Process fast-path work queue completion entry
11659  * @phba: Pointer to HBA context object.
11660  * @cq: Pointer to associated CQ
11661  * @wcqe: Pointer to work-queue completion queue entry.
11662  *
11663  * This routine process a fast-path work queue completion entry from fast-path
11664  * event queue for FCP command response completion.
11665  **/
11666 static void
11667 lpfc_sli4_fp_handle_fcp_wcqe(struct lpfc_hba *phba, struct lpfc_queue *cq,
11668 			     struct lpfc_wcqe_complete *wcqe)
11669 {
11670 	struct lpfc_sli_ring *pring = cq->pring;
11671 	struct lpfc_iocbq *cmdiocbq;
11672 	struct lpfc_iocbq irspiocbq;
11673 	unsigned long iflags;
11674 
11675 	/* Check for response status */
11676 	if (unlikely(bf_get(lpfc_wcqe_c_status, wcqe))) {
11677 		/* If resource errors reported from HBA, reduce queue
11678 		 * depth of the SCSI device.
11679 		 */
11680 		if (((bf_get(lpfc_wcqe_c_status, wcqe) ==
11681 		     IOSTAT_LOCAL_REJECT)) &&
11682 		    ((wcqe->parameter & IOERR_PARAM_MASK) ==
11683 		     IOERR_NO_RESOURCES))
11684 			phba->lpfc_rampdown_queue_depth(phba);
11685 
11686 		/* Log the error status */
11687 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11688 				"0373 FCP complete error: status=x%x, "
11689 				"hw_status=x%x, total_data_specified=%d, "
11690 				"parameter=x%x, word3=x%x\n",
11691 				bf_get(lpfc_wcqe_c_status, wcqe),
11692 				bf_get(lpfc_wcqe_c_hw_status, wcqe),
11693 				wcqe->total_data_placed, wcqe->parameter,
11694 				wcqe->word3);
11695 	}
11696 
11697 	/* Look up the FCP command IOCB and create pseudo response IOCB */
11698 	spin_lock_irqsave(&pring->ring_lock, iflags);
11699 	pring->stats.iocb_event++;
11700 	cmdiocbq = lpfc_sli_iocbq_lookup_by_tag(phba, pring,
11701 				bf_get(lpfc_wcqe_c_request_tag, wcqe));
11702 	spin_unlock_irqrestore(&pring->ring_lock, iflags);
11703 	if (unlikely(!cmdiocbq)) {
11704 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11705 				"0374 FCP complete with no corresponding "
11706 				"cmdiocb: iotag (%d)\n",
11707 				bf_get(lpfc_wcqe_c_request_tag, wcqe));
11708 		return;
11709 	}
11710 	if (unlikely(!cmdiocbq->iocb_cmpl)) {
11711 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11712 				"0375 FCP cmdiocb not callback function "
11713 				"iotag: (%d)\n",
11714 				bf_get(lpfc_wcqe_c_request_tag, wcqe));
11715 		return;
11716 	}
11717 
11718 	/* Fake the irspiocb and copy necessary response information */
11719 	lpfc_sli4_iocb_param_transfer(phba, &irspiocbq, cmdiocbq, wcqe);
11720 
11721 	if (cmdiocbq->iocb_flag & LPFC_DRIVER_ABORTED) {
11722 		spin_lock_irqsave(&phba->hbalock, iflags);
11723 		cmdiocbq->iocb_flag &= ~LPFC_DRIVER_ABORTED;
11724 		spin_unlock_irqrestore(&phba->hbalock, iflags);
11725 	}
11726 
11727 	/* Pass the cmd_iocb and the rsp state to the upper layer */
11728 	(cmdiocbq->iocb_cmpl)(phba, cmdiocbq, &irspiocbq);
11729 }
11730 
11731 /**
11732  * lpfc_sli4_fp_handle_rel_wcqe - Handle fast-path WQ entry consumed event
11733  * @phba: Pointer to HBA context object.
11734  * @cq: Pointer to completion queue.
11735  * @wcqe: Pointer to work-queue completion queue entry.
11736  *
11737  * This routine handles an fast-path WQ entry comsumed event by invoking the
11738  * proper WQ release routine to the slow-path WQ.
11739  **/
11740 static void
11741 lpfc_sli4_fp_handle_rel_wcqe(struct lpfc_hba *phba, struct lpfc_queue *cq,
11742 			     struct lpfc_wcqe_release *wcqe)
11743 {
11744 	struct lpfc_queue *childwq;
11745 	bool wqid_matched = false;
11746 	uint16_t fcp_wqid;
11747 
11748 	/* Check for fast-path FCP work queue release */
11749 	fcp_wqid = bf_get(lpfc_wcqe_r_wq_id, wcqe);
11750 	list_for_each_entry(childwq, &cq->child_list, list) {
11751 		if (childwq->queue_id == fcp_wqid) {
11752 			lpfc_sli4_wq_release(childwq,
11753 					bf_get(lpfc_wcqe_r_wqe_index, wcqe));
11754 			wqid_matched = true;
11755 			break;
11756 		}
11757 	}
11758 	/* Report warning log message if no match found */
11759 	if (wqid_matched != true)
11760 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11761 				"2580 Fast-path wqe consume event carries "
11762 				"miss-matched qid: wcqe-qid=x%x\n", fcp_wqid);
11763 }
11764 
11765 /**
11766  * lpfc_sli4_fp_handle_wcqe - Process fast-path work queue completion entry
11767  * @cq: Pointer to the completion queue.
11768  * @eqe: Pointer to fast-path completion queue entry.
11769  *
11770  * This routine process a fast-path work queue completion entry from fast-path
11771  * event queue for FCP command response completion.
11772  **/
11773 static int
11774 lpfc_sli4_fp_handle_wcqe(struct lpfc_hba *phba, struct lpfc_queue *cq,
11775 			 struct lpfc_cqe *cqe)
11776 {
11777 	struct lpfc_wcqe_release wcqe;
11778 	bool workposted = false;
11779 
11780 	/* Copy the work queue CQE and convert endian order if needed */
11781 	lpfc_sli_pcimem_bcopy(cqe, &wcqe, sizeof(struct lpfc_cqe));
11782 
11783 	/* Check and process for different type of WCQE and dispatch */
11784 	switch (bf_get(lpfc_wcqe_c_code, &wcqe)) {
11785 	case CQE_CODE_COMPL_WQE:
11786 		cq->CQ_wq++;
11787 		/* Process the WQ complete event */
11788 		phba->last_completion_time = jiffies;
11789 		lpfc_sli4_fp_handle_fcp_wcqe(phba, cq,
11790 				(struct lpfc_wcqe_complete *)&wcqe);
11791 		break;
11792 	case CQE_CODE_RELEASE_WQE:
11793 		cq->CQ_release_wqe++;
11794 		/* Process the WQ release event */
11795 		lpfc_sli4_fp_handle_rel_wcqe(phba, cq,
11796 				(struct lpfc_wcqe_release *)&wcqe);
11797 		break;
11798 	case CQE_CODE_XRI_ABORTED:
11799 		cq->CQ_xri_aborted++;
11800 		/* Process the WQ XRI abort event */
11801 		phba->last_completion_time = jiffies;
11802 		workposted = lpfc_sli4_sp_handle_abort_xri_wcqe(phba, cq,
11803 				(struct sli4_wcqe_xri_aborted *)&wcqe);
11804 		break;
11805 	default:
11806 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11807 				"0144 Not a valid WCQE code: x%x\n",
11808 				bf_get(lpfc_wcqe_c_code, &wcqe));
11809 		break;
11810 	}
11811 	return workposted;
11812 }
11813 
11814 /**
11815  * lpfc_sli4_hba_handle_eqe - Process a fast-path event queue entry
11816  * @phba: Pointer to HBA context object.
11817  * @eqe: Pointer to fast-path event queue entry.
11818  *
11819  * This routine process a event queue entry from the fast-path event queue.
11820  * It will check the MajorCode and MinorCode to determine this is for a
11821  * completion event on a completion queue, if not, an error shall be logged
11822  * and just return. Otherwise, it will get to the corresponding completion
11823  * queue and process all the entries on the completion queue, rearm the
11824  * completion queue, and then return.
11825  **/
11826 static void
11827 lpfc_sli4_hba_handle_eqe(struct lpfc_hba *phba, struct lpfc_eqe *eqe,
11828 			uint32_t qidx)
11829 {
11830 	struct lpfc_queue *cq;
11831 	struct lpfc_cqe *cqe;
11832 	bool workposted = false;
11833 	uint16_t cqid;
11834 	int ecount = 0;
11835 
11836 	if (unlikely(bf_get_le32(lpfc_eqe_major_code, eqe) != 0)) {
11837 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11838 				"0366 Not a valid completion "
11839 				"event: majorcode=x%x, minorcode=x%x\n",
11840 				bf_get_le32(lpfc_eqe_major_code, eqe),
11841 				bf_get_le32(lpfc_eqe_minor_code, eqe));
11842 		return;
11843 	}
11844 
11845 	/* Get the reference to the corresponding CQ */
11846 	cqid = bf_get_le32(lpfc_eqe_resource_id, eqe);
11847 
11848 	/* Check if this is a Slow path event */
11849 	if (unlikely(cqid != phba->sli4_hba.fcp_cq_map[qidx])) {
11850 		lpfc_sli4_sp_handle_eqe(phba, eqe,
11851 			phba->sli4_hba.hba_eq[qidx]);
11852 		return;
11853 	}
11854 
11855 	if (unlikely(!phba->sli4_hba.fcp_cq)) {
11856 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
11857 				"3146 Fast-path completion queues "
11858 				"does not exist\n");
11859 		return;
11860 	}
11861 	cq = phba->sli4_hba.fcp_cq[qidx];
11862 	if (unlikely(!cq)) {
11863 		if (phba->sli.sli_flag & LPFC_SLI_ACTIVE)
11864 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11865 					"0367 Fast-path completion queue "
11866 					"(%d) does not exist\n", qidx);
11867 		return;
11868 	}
11869 
11870 	if (unlikely(cqid != cq->queue_id)) {
11871 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11872 				"0368 Miss-matched fast-path completion "
11873 				"queue identifier: eqcqid=%d, fcpcqid=%d\n",
11874 				cqid, cq->queue_id);
11875 		return;
11876 	}
11877 
11878 	/* Process all the entries to the CQ */
11879 	while ((cqe = lpfc_sli4_cq_get(cq))) {
11880 		workposted |= lpfc_sli4_fp_handle_wcqe(phba, cq, cqe);
11881 		if (!(++ecount % cq->entry_repost))
11882 			lpfc_sli4_cq_release(cq, LPFC_QUEUE_NOARM);
11883 	}
11884 
11885 	/* Track the max number of CQEs processed in 1 EQ */
11886 	if (ecount > cq->CQ_max_cqe)
11887 		cq->CQ_max_cqe = ecount;
11888 
11889 	/* Catch the no cq entry condition */
11890 	if (unlikely(ecount == 0))
11891 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
11892 				"0369 No entry from fast-path completion "
11893 				"queue fcpcqid=%d\n", cq->queue_id);
11894 
11895 	/* In any case, flash and re-arm the CQ */
11896 	lpfc_sli4_cq_release(cq, LPFC_QUEUE_REARM);
11897 
11898 	/* wake up worker thread if there are works to be done */
11899 	if (workposted)
11900 		lpfc_worker_wake_up(phba);
11901 }
11902 
11903 static void
11904 lpfc_sli4_eq_flush(struct lpfc_hba *phba, struct lpfc_queue *eq)
11905 {
11906 	struct lpfc_eqe *eqe;
11907 
11908 	/* walk all the EQ entries and drop on the floor */
11909 	while ((eqe = lpfc_sli4_eq_get(eq)))
11910 		;
11911 
11912 	/* Clear and re-arm the EQ */
11913 	lpfc_sli4_eq_release(eq, LPFC_QUEUE_REARM);
11914 }
11915 
11916 /**
11917  * lpfc_sli4_hba_intr_handler - HBA interrupt handler to SLI-4 device
11918  * @irq: Interrupt number.
11919  * @dev_id: The device context pointer.
11920  *
11921  * This function is directly called from the PCI layer as an interrupt
11922  * service routine when device with SLI-4 interface spec is enabled with
11923  * MSI-X multi-message interrupt mode and there is a fast-path FCP IOCB
11924  * ring event in the HBA. However, when the device is enabled with either
11925  * MSI or Pin-IRQ interrupt mode, this function is called as part of the
11926  * device-level interrupt handler. When the PCI slot is in error recovery
11927  * or the HBA is undergoing initialization, the interrupt handler will not
11928  * process the interrupt. The SCSI FCP fast-path ring event are handled in
11929  * the intrrupt context. This function is called without any lock held.
11930  * It gets the hbalock to access and update SLI data structures. Note that,
11931  * the FCP EQ to FCP CQ are one-to-one map such that the FCP EQ index is
11932  * equal to that of FCP CQ index.
11933  *
11934  * The link attention and ELS ring attention events are handled
11935  * by the worker thread. The interrupt handler signals the worker thread
11936  * and returns for these events. This function is called without any lock
11937  * held. It gets the hbalock to access and update SLI data structures.
11938  *
11939  * This function returns IRQ_HANDLED when interrupt is handled else it
11940  * returns IRQ_NONE.
11941  **/
11942 irqreturn_t
11943 lpfc_sli4_hba_intr_handler(int irq, void *dev_id)
11944 {
11945 	struct lpfc_hba *phba;
11946 	struct lpfc_fcp_eq_hdl *fcp_eq_hdl;
11947 	struct lpfc_queue *fpeq;
11948 	struct lpfc_eqe *eqe;
11949 	unsigned long iflag;
11950 	int ecount = 0;
11951 	int fcp_eqidx;
11952 
11953 	/* Get the driver's phba structure from the dev_id */
11954 	fcp_eq_hdl = (struct lpfc_fcp_eq_hdl *)dev_id;
11955 	phba = fcp_eq_hdl->phba;
11956 	fcp_eqidx = fcp_eq_hdl->idx;
11957 
11958 	if (unlikely(!phba))
11959 		return IRQ_NONE;
11960 	if (unlikely(!phba->sli4_hba.hba_eq))
11961 		return IRQ_NONE;
11962 
11963 	/* Get to the EQ struct associated with this vector */
11964 	fpeq = phba->sli4_hba.hba_eq[fcp_eqidx];
11965 	if (unlikely(!fpeq))
11966 		return IRQ_NONE;
11967 
11968 	if (lpfc_fcp_look_ahead) {
11969 		if (atomic_dec_and_test(&fcp_eq_hdl->fcp_eq_in_use))
11970 			lpfc_sli4_eq_clr_intr(fpeq);
11971 		else {
11972 			atomic_inc(&fcp_eq_hdl->fcp_eq_in_use);
11973 			return IRQ_NONE;
11974 		}
11975 	}
11976 
11977 	/* Check device state for handling interrupt */
11978 	if (unlikely(lpfc_intr_state_check(phba))) {
11979 		fpeq->EQ_badstate++;
11980 		/* Check again for link_state with lock held */
11981 		spin_lock_irqsave(&phba->hbalock, iflag);
11982 		if (phba->link_state < LPFC_LINK_DOWN)
11983 			/* Flush, clear interrupt, and rearm the EQ */
11984 			lpfc_sli4_eq_flush(phba, fpeq);
11985 		spin_unlock_irqrestore(&phba->hbalock, iflag);
11986 		if (lpfc_fcp_look_ahead)
11987 			atomic_inc(&fcp_eq_hdl->fcp_eq_in_use);
11988 		return IRQ_NONE;
11989 	}
11990 
11991 	/*
11992 	 * Process all the event on FCP fast-path EQ
11993 	 */
11994 	while ((eqe = lpfc_sli4_eq_get(fpeq))) {
11995 		lpfc_sli4_hba_handle_eqe(phba, eqe, fcp_eqidx);
11996 		if (!(++ecount % fpeq->entry_repost))
11997 			lpfc_sli4_eq_release(fpeq, LPFC_QUEUE_NOARM);
11998 		fpeq->EQ_processed++;
11999 	}
12000 
12001 	/* Track the max number of EQEs processed in 1 intr */
12002 	if (ecount > fpeq->EQ_max_eqe)
12003 		fpeq->EQ_max_eqe = ecount;
12004 
12005 	/* Always clear and re-arm the fast-path EQ */
12006 	lpfc_sli4_eq_release(fpeq, LPFC_QUEUE_REARM);
12007 
12008 	if (unlikely(ecount == 0)) {
12009 		fpeq->EQ_no_entry++;
12010 
12011 		if (lpfc_fcp_look_ahead) {
12012 			atomic_inc(&fcp_eq_hdl->fcp_eq_in_use);
12013 			return IRQ_NONE;
12014 		}
12015 
12016 		if (phba->intr_type == MSIX)
12017 			/* MSI-X treated interrupt served as no EQ share INT */
12018 			lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
12019 					"0358 MSI-X interrupt with no EQE\n");
12020 		else
12021 			/* Non MSI-X treated on interrupt as EQ share INT */
12022 			return IRQ_NONE;
12023 	}
12024 
12025 	if (lpfc_fcp_look_ahead)
12026 		atomic_inc(&fcp_eq_hdl->fcp_eq_in_use);
12027 	return IRQ_HANDLED;
12028 } /* lpfc_sli4_fp_intr_handler */
12029 
12030 /**
12031  * lpfc_sli4_intr_handler - Device-level interrupt handler for SLI-4 device
12032  * @irq: Interrupt number.
12033  * @dev_id: The device context pointer.
12034  *
12035  * This function is the device-level interrupt handler to device with SLI-4
12036  * interface spec, called from the PCI layer when either MSI or Pin-IRQ
12037  * interrupt mode is enabled and there is an event in the HBA which requires
12038  * driver attention. This function invokes the slow-path interrupt attention
12039  * handling function and fast-path interrupt attention handling function in
12040  * turn to process the relevant HBA attention events. This function is called
12041  * without any lock held. It gets the hbalock to access and update SLI data
12042  * structures.
12043  *
12044  * This function returns IRQ_HANDLED when interrupt is handled, else it
12045  * returns IRQ_NONE.
12046  **/
12047 irqreturn_t
12048 lpfc_sli4_intr_handler(int irq, void *dev_id)
12049 {
12050 	struct lpfc_hba  *phba;
12051 	irqreturn_t hba_irq_rc;
12052 	bool hba_handled = false;
12053 	int fcp_eqidx;
12054 
12055 	/* Get the driver's phba structure from the dev_id */
12056 	phba = (struct lpfc_hba *)dev_id;
12057 
12058 	if (unlikely(!phba))
12059 		return IRQ_NONE;
12060 
12061 	/*
12062 	 * Invoke fast-path host attention interrupt handling as appropriate.
12063 	 */
12064 	for (fcp_eqidx = 0; fcp_eqidx < phba->cfg_fcp_io_channel; fcp_eqidx++) {
12065 		hba_irq_rc = lpfc_sli4_hba_intr_handler(irq,
12066 					&phba->sli4_hba.fcp_eq_hdl[fcp_eqidx]);
12067 		if (hba_irq_rc == IRQ_HANDLED)
12068 			hba_handled |= true;
12069 	}
12070 
12071 	return (hba_handled == true) ? IRQ_HANDLED : IRQ_NONE;
12072 } /* lpfc_sli4_intr_handler */
12073 
12074 /**
12075  * lpfc_sli4_queue_free - free a queue structure and associated memory
12076  * @queue: The queue structure to free.
12077  *
12078  * This function frees a queue structure and the DMAable memory used for
12079  * the host resident queue. This function must be called after destroying the
12080  * queue on the HBA.
12081  **/
12082 void
12083 lpfc_sli4_queue_free(struct lpfc_queue *queue)
12084 {
12085 	struct lpfc_dmabuf *dmabuf;
12086 
12087 	if (!queue)
12088 		return;
12089 
12090 	while (!list_empty(&queue->page_list)) {
12091 		list_remove_head(&queue->page_list, dmabuf, struct lpfc_dmabuf,
12092 				 list);
12093 		dma_free_coherent(&queue->phba->pcidev->dev, SLI4_PAGE_SIZE,
12094 				  dmabuf->virt, dmabuf->phys);
12095 		kfree(dmabuf);
12096 	}
12097 	kfree(queue);
12098 	return;
12099 }
12100 
12101 /**
12102  * lpfc_sli4_queue_alloc - Allocate and initialize a queue structure
12103  * @phba: The HBA that this queue is being created on.
12104  * @entry_size: The size of each queue entry for this queue.
12105  * @entry count: The number of entries that this queue will handle.
12106  *
12107  * This function allocates a queue structure and the DMAable memory used for
12108  * the host resident queue. This function must be called before creating the
12109  * queue on the HBA.
12110  **/
12111 struct lpfc_queue *
12112 lpfc_sli4_queue_alloc(struct lpfc_hba *phba, uint32_t entry_size,
12113 		      uint32_t entry_count)
12114 {
12115 	struct lpfc_queue *queue;
12116 	struct lpfc_dmabuf *dmabuf;
12117 	int x, total_qe_count;
12118 	void *dma_pointer;
12119 	uint32_t hw_page_size = phba->sli4_hba.pc_sli4_params.if_page_sz;
12120 
12121 	if (!phba->sli4_hba.pc_sli4_params.supported)
12122 		hw_page_size = SLI4_PAGE_SIZE;
12123 
12124 	queue = kzalloc(sizeof(struct lpfc_queue) +
12125 			(sizeof(union sli4_qe) * entry_count), GFP_KERNEL);
12126 	if (!queue)
12127 		return NULL;
12128 	queue->page_count = (ALIGN(entry_size * entry_count,
12129 			hw_page_size))/hw_page_size;
12130 	INIT_LIST_HEAD(&queue->list);
12131 	INIT_LIST_HEAD(&queue->page_list);
12132 	INIT_LIST_HEAD(&queue->child_list);
12133 	for (x = 0, total_qe_count = 0; x < queue->page_count; x++) {
12134 		dmabuf = kzalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
12135 		if (!dmabuf)
12136 			goto out_fail;
12137 		dmabuf->virt = dma_alloc_coherent(&phba->pcidev->dev,
12138 						  hw_page_size, &dmabuf->phys,
12139 						  GFP_KERNEL);
12140 		if (!dmabuf->virt) {
12141 			kfree(dmabuf);
12142 			goto out_fail;
12143 		}
12144 		memset(dmabuf->virt, 0, hw_page_size);
12145 		dmabuf->buffer_tag = x;
12146 		list_add_tail(&dmabuf->list, &queue->page_list);
12147 		/* initialize queue's entry array */
12148 		dma_pointer = dmabuf->virt;
12149 		for (; total_qe_count < entry_count &&
12150 		     dma_pointer < (hw_page_size + dmabuf->virt);
12151 		     total_qe_count++, dma_pointer += entry_size) {
12152 			queue->qe[total_qe_count].address = dma_pointer;
12153 		}
12154 	}
12155 	queue->entry_size = entry_size;
12156 	queue->entry_count = entry_count;
12157 
12158 	/*
12159 	 * entry_repost is calculated based on the number of entries in the
12160 	 * queue. This works out except for RQs. If buffers are NOT initially
12161 	 * posted for every RQE, entry_repost should be adjusted accordingly.
12162 	 */
12163 	queue->entry_repost = (entry_count >> 3);
12164 	if (queue->entry_repost < LPFC_QUEUE_MIN_REPOST)
12165 		queue->entry_repost = LPFC_QUEUE_MIN_REPOST;
12166 	queue->phba = phba;
12167 
12168 	return queue;
12169 out_fail:
12170 	lpfc_sli4_queue_free(queue);
12171 	return NULL;
12172 }
12173 
12174 /**
12175  * lpfc_dual_chute_pci_bar_map - Map pci base address register to host memory
12176  * @phba: HBA structure that indicates port to create a queue on.
12177  * @pci_barset: PCI BAR set flag.
12178  *
12179  * This function shall perform iomap of the specified PCI BAR address to host
12180  * memory address if not already done so and return it. The returned host
12181  * memory address can be NULL.
12182  */
12183 static void __iomem *
12184 lpfc_dual_chute_pci_bar_map(struct lpfc_hba *phba, uint16_t pci_barset)
12185 {
12186 	struct pci_dev *pdev;
12187 	unsigned long bar_map, bar_map_len;
12188 
12189 	if (!phba->pcidev)
12190 		return NULL;
12191 	else
12192 		pdev = phba->pcidev;
12193 
12194 	switch (pci_barset) {
12195 	case WQ_PCI_BAR_0_AND_1:
12196 		if (!phba->pci_bar0_memmap_p) {
12197 			bar_map = pci_resource_start(pdev, PCI_64BIT_BAR0);
12198 			bar_map_len = pci_resource_len(pdev, PCI_64BIT_BAR0);
12199 			phba->pci_bar0_memmap_p = ioremap(bar_map, bar_map_len);
12200 		}
12201 		return phba->pci_bar0_memmap_p;
12202 	case WQ_PCI_BAR_2_AND_3:
12203 		if (!phba->pci_bar2_memmap_p) {
12204 			bar_map = pci_resource_start(pdev, PCI_64BIT_BAR2);
12205 			bar_map_len = pci_resource_len(pdev, PCI_64BIT_BAR2);
12206 			phba->pci_bar2_memmap_p = ioremap(bar_map, bar_map_len);
12207 		}
12208 		return phba->pci_bar2_memmap_p;
12209 	case WQ_PCI_BAR_4_AND_5:
12210 		if (!phba->pci_bar4_memmap_p) {
12211 			bar_map = pci_resource_start(pdev, PCI_64BIT_BAR4);
12212 			bar_map_len = pci_resource_len(pdev, PCI_64BIT_BAR4);
12213 			phba->pci_bar4_memmap_p = ioremap(bar_map, bar_map_len);
12214 		}
12215 		return phba->pci_bar4_memmap_p;
12216 	default:
12217 		break;
12218 	}
12219 	return NULL;
12220 }
12221 
12222 /**
12223  * lpfc_modify_fcp_eq_delay - Modify Delay Multiplier on FCP EQs
12224  * @phba: HBA structure that indicates port to create a queue on.
12225  * @startq: The starting FCP EQ to modify
12226  *
12227  * This function sends an MODIFY_EQ_DELAY mailbox command to the HBA.
12228  *
12229  * The @phba struct is used to send mailbox command to HBA. The @startq
12230  * is used to get the starting FCP EQ to change.
12231  * This function is asynchronous and will wait for the mailbox
12232  * command to finish before continuing.
12233  *
12234  * On success this function will return a zero. If unable to allocate enough
12235  * memory this function will return -ENOMEM. If the queue create mailbox command
12236  * fails this function will return -ENXIO.
12237  **/
12238 uint32_t
12239 lpfc_modify_fcp_eq_delay(struct lpfc_hba *phba, uint16_t startq)
12240 {
12241 	struct lpfc_mbx_modify_eq_delay *eq_delay;
12242 	LPFC_MBOXQ_t *mbox;
12243 	struct lpfc_queue *eq;
12244 	int cnt, rc, length, status = 0;
12245 	uint32_t shdr_status, shdr_add_status;
12246 	uint32_t result;
12247 	int fcp_eqidx;
12248 	union lpfc_sli4_cfg_shdr *shdr;
12249 	uint16_t dmult;
12250 
12251 	if (startq >= phba->cfg_fcp_io_channel)
12252 		return 0;
12253 
12254 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
12255 	if (!mbox)
12256 		return -ENOMEM;
12257 	length = (sizeof(struct lpfc_mbx_modify_eq_delay) -
12258 		  sizeof(struct lpfc_sli4_cfg_mhdr));
12259 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
12260 			 LPFC_MBOX_OPCODE_MODIFY_EQ_DELAY,
12261 			 length, LPFC_SLI4_MBX_EMBED);
12262 	eq_delay = &mbox->u.mqe.un.eq_delay;
12263 
12264 	/* Calculate delay multiper from maximum interrupt per second */
12265 	result = phba->cfg_fcp_imax / phba->cfg_fcp_io_channel;
12266 	if (result > LPFC_DMULT_CONST)
12267 		dmult = 0;
12268 	else
12269 		dmult = LPFC_DMULT_CONST/result - 1;
12270 
12271 	cnt = 0;
12272 	for (fcp_eqidx = startq; fcp_eqidx < phba->cfg_fcp_io_channel;
12273 	    fcp_eqidx++) {
12274 		eq = phba->sli4_hba.hba_eq[fcp_eqidx];
12275 		if (!eq)
12276 			continue;
12277 		eq_delay->u.request.eq[cnt].eq_id = eq->queue_id;
12278 		eq_delay->u.request.eq[cnt].phase = 0;
12279 		eq_delay->u.request.eq[cnt].delay_multi = dmult;
12280 		cnt++;
12281 		if (cnt >= LPFC_MAX_EQ_DELAY)
12282 			break;
12283 	}
12284 	eq_delay->u.request.num_eq = cnt;
12285 
12286 	mbox->vport = phba->pport;
12287 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
12288 	mbox->context1 = NULL;
12289 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
12290 	shdr = (union lpfc_sli4_cfg_shdr *) &eq_delay->header.cfg_shdr;
12291 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
12292 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
12293 	if (shdr_status || shdr_add_status || rc) {
12294 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12295 				"2512 MODIFY_EQ_DELAY mailbox failed with "
12296 				"status x%x add_status x%x, mbx status x%x\n",
12297 				shdr_status, shdr_add_status, rc);
12298 		status = -ENXIO;
12299 	}
12300 	mempool_free(mbox, phba->mbox_mem_pool);
12301 	return status;
12302 }
12303 
12304 /**
12305  * lpfc_eq_create - Create an Event Queue on the HBA
12306  * @phba: HBA structure that indicates port to create a queue on.
12307  * @eq: The queue structure to use to create the event queue.
12308  * @imax: The maximum interrupt per second limit.
12309  *
12310  * This function creates an event queue, as detailed in @eq, on a port,
12311  * described by @phba by sending an EQ_CREATE mailbox command to the HBA.
12312  *
12313  * The @phba struct is used to send mailbox command to HBA. The @eq struct
12314  * is used to get the entry count and entry size that are necessary to
12315  * determine the number of pages to allocate and use for this queue. This
12316  * function will send the EQ_CREATE mailbox command to the HBA to setup the
12317  * event queue. This function is asynchronous and will wait for the mailbox
12318  * command to finish before continuing.
12319  *
12320  * On success this function will return a zero. If unable to allocate enough
12321  * memory this function will return -ENOMEM. If the queue create mailbox command
12322  * fails this function will return -ENXIO.
12323  **/
12324 uint32_t
12325 lpfc_eq_create(struct lpfc_hba *phba, struct lpfc_queue *eq, uint32_t imax)
12326 {
12327 	struct lpfc_mbx_eq_create *eq_create;
12328 	LPFC_MBOXQ_t *mbox;
12329 	int rc, length, status = 0;
12330 	struct lpfc_dmabuf *dmabuf;
12331 	uint32_t shdr_status, shdr_add_status;
12332 	union lpfc_sli4_cfg_shdr *shdr;
12333 	uint16_t dmult;
12334 	uint32_t hw_page_size = phba->sli4_hba.pc_sli4_params.if_page_sz;
12335 
12336 	/* sanity check on queue memory */
12337 	if (!eq)
12338 		return -ENODEV;
12339 	if (!phba->sli4_hba.pc_sli4_params.supported)
12340 		hw_page_size = SLI4_PAGE_SIZE;
12341 
12342 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
12343 	if (!mbox)
12344 		return -ENOMEM;
12345 	length = (sizeof(struct lpfc_mbx_eq_create) -
12346 		  sizeof(struct lpfc_sli4_cfg_mhdr));
12347 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
12348 			 LPFC_MBOX_OPCODE_EQ_CREATE,
12349 			 length, LPFC_SLI4_MBX_EMBED);
12350 	eq_create = &mbox->u.mqe.un.eq_create;
12351 	bf_set(lpfc_mbx_eq_create_num_pages, &eq_create->u.request,
12352 	       eq->page_count);
12353 	bf_set(lpfc_eq_context_size, &eq_create->u.request.context,
12354 	       LPFC_EQE_SIZE);
12355 	bf_set(lpfc_eq_context_valid, &eq_create->u.request.context, 1);
12356 	/* Calculate delay multiper from maximum interrupt per second */
12357 	if (imax > LPFC_DMULT_CONST)
12358 		dmult = 0;
12359 	else
12360 		dmult = LPFC_DMULT_CONST/imax - 1;
12361 	bf_set(lpfc_eq_context_delay_multi, &eq_create->u.request.context,
12362 	       dmult);
12363 	switch (eq->entry_count) {
12364 	default:
12365 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
12366 				"0360 Unsupported EQ count. (%d)\n",
12367 				eq->entry_count);
12368 		if (eq->entry_count < 256)
12369 			return -EINVAL;
12370 		/* otherwise default to smallest count (drop through) */
12371 	case 256:
12372 		bf_set(lpfc_eq_context_count, &eq_create->u.request.context,
12373 		       LPFC_EQ_CNT_256);
12374 		break;
12375 	case 512:
12376 		bf_set(lpfc_eq_context_count, &eq_create->u.request.context,
12377 		       LPFC_EQ_CNT_512);
12378 		break;
12379 	case 1024:
12380 		bf_set(lpfc_eq_context_count, &eq_create->u.request.context,
12381 		       LPFC_EQ_CNT_1024);
12382 		break;
12383 	case 2048:
12384 		bf_set(lpfc_eq_context_count, &eq_create->u.request.context,
12385 		       LPFC_EQ_CNT_2048);
12386 		break;
12387 	case 4096:
12388 		bf_set(lpfc_eq_context_count, &eq_create->u.request.context,
12389 		       LPFC_EQ_CNT_4096);
12390 		break;
12391 	}
12392 	list_for_each_entry(dmabuf, &eq->page_list, list) {
12393 		memset(dmabuf->virt, 0, hw_page_size);
12394 		eq_create->u.request.page[dmabuf->buffer_tag].addr_lo =
12395 					putPaddrLow(dmabuf->phys);
12396 		eq_create->u.request.page[dmabuf->buffer_tag].addr_hi =
12397 					putPaddrHigh(dmabuf->phys);
12398 	}
12399 	mbox->vport = phba->pport;
12400 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
12401 	mbox->context1 = NULL;
12402 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
12403 	shdr = (union lpfc_sli4_cfg_shdr *) &eq_create->header.cfg_shdr;
12404 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
12405 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
12406 	if (shdr_status || shdr_add_status || rc) {
12407 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12408 				"2500 EQ_CREATE mailbox failed with "
12409 				"status x%x add_status x%x, mbx status x%x\n",
12410 				shdr_status, shdr_add_status, rc);
12411 		status = -ENXIO;
12412 	}
12413 	eq->type = LPFC_EQ;
12414 	eq->subtype = LPFC_NONE;
12415 	eq->queue_id = bf_get(lpfc_mbx_eq_create_q_id, &eq_create->u.response);
12416 	if (eq->queue_id == 0xFFFF)
12417 		status = -ENXIO;
12418 	eq->host_index = 0;
12419 	eq->hba_index = 0;
12420 
12421 	mempool_free(mbox, phba->mbox_mem_pool);
12422 	return status;
12423 }
12424 
12425 /**
12426  * lpfc_cq_create - Create a Completion Queue on the HBA
12427  * @phba: HBA structure that indicates port to create a queue on.
12428  * @cq: The queue structure to use to create the completion queue.
12429  * @eq: The event queue to bind this completion queue to.
12430  *
12431  * This function creates a completion queue, as detailed in @wq, on a port,
12432  * described by @phba by sending a CQ_CREATE mailbox command to the HBA.
12433  *
12434  * The @phba struct is used to send mailbox command to HBA. The @cq struct
12435  * is used to get the entry count and entry size that are necessary to
12436  * determine the number of pages to allocate and use for this queue. The @eq
12437  * is used to indicate which event queue to bind this completion queue to. This
12438  * function will send the CQ_CREATE mailbox command to the HBA to setup the
12439  * completion queue. This function is asynchronous and will wait for the mailbox
12440  * command to finish before continuing.
12441  *
12442  * On success this function will return a zero. If unable to allocate enough
12443  * memory this function will return -ENOMEM. If the queue create mailbox command
12444  * fails this function will return -ENXIO.
12445  **/
12446 uint32_t
12447 lpfc_cq_create(struct lpfc_hba *phba, struct lpfc_queue *cq,
12448 	       struct lpfc_queue *eq, uint32_t type, uint32_t subtype)
12449 {
12450 	struct lpfc_mbx_cq_create *cq_create;
12451 	struct lpfc_dmabuf *dmabuf;
12452 	LPFC_MBOXQ_t *mbox;
12453 	int rc, length, status = 0;
12454 	uint32_t shdr_status, shdr_add_status;
12455 	union lpfc_sli4_cfg_shdr *shdr;
12456 	uint32_t hw_page_size = phba->sli4_hba.pc_sli4_params.if_page_sz;
12457 
12458 	/* sanity check on queue memory */
12459 	if (!cq || !eq)
12460 		return -ENODEV;
12461 	if (!phba->sli4_hba.pc_sli4_params.supported)
12462 		hw_page_size = SLI4_PAGE_SIZE;
12463 
12464 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
12465 	if (!mbox)
12466 		return -ENOMEM;
12467 	length = (sizeof(struct lpfc_mbx_cq_create) -
12468 		  sizeof(struct lpfc_sli4_cfg_mhdr));
12469 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
12470 			 LPFC_MBOX_OPCODE_CQ_CREATE,
12471 			 length, LPFC_SLI4_MBX_EMBED);
12472 	cq_create = &mbox->u.mqe.un.cq_create;
12473 	shdr = (union lpfc_sli4_cfg_shdr *) &cq_create->header.cfg_shdr;
12474 	bf_set(lpfc_mbx_cq_create_num_pages, &cq_create->u.request,
12475 		    cq->page_count);
12476 	bf_set(lpfc_cq_context_event, &cq_create->u.request.context, 1);
12477 	bf_set(lpfc_cq_context_valid, &cq_create->u.request.context, 1);
12478 	bf_set(lpfc_mbox_hdr_version, &shdr->request,
12479 	       phba->sli4_hba.pc_sli4_params.cqv);
12480 	if (phba->sli4_hba.pc_sli4_params.cqv == LPFC_Q_CREATE_VERSION_2) {
12481 		/* FW only supports 1. Should be PAGE_SIZE/SLI4_PAGE_SIZE */
12482 		bf_set(lpfc_mbx_cq_create_page_size, &cq_create->u.request, 1);
12483 		bf_set(lpfc_cq_eq_id_2, &cq_create->u.request.context,
12484 		       eq->queue_id);
12485 	} else {
12486 		bf_set(lpfc_cq_eq_id, &cq_create->u.request.context,
12487 		       eq->queue_id);
12488 	}
12489 	switch (cq->entry_count) {
12490 	default:
12491 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
12492 				"0361 Unsupported CQ count. (%d)\n",
12493 				cq->entry_count);
12494 		if (cq->entry_count < 256) {
12495 			status = -EINVAL;
12496 			goto out;
12497 		}
12498 		/* otherwise default to smallest count (drop through) */
12499 	case 256:
12500 		bf_set(lpfc_cq_context_count, &cq_create->u.request.context,
12501 		       LPFC_CQ_CNT_256);
12502 		break;
12503 	case 512:
12504 		bf_set(lpfc_cq_context_count, &cq_create->u.request.context,
12505 		       LPFC_CQ_CNT_512);
12506 		break;
12507 	case 1024:
12508 		bf_set(lpfc_cq_context_count, &cq_create->u.request.context,
12509 		       LPFC_CQ_CNT_1024);
12510 		break;
12511 	}
12512 	list_for_each_entry(dmabuf, &cq->page_list, list) {
12513 		memset(dmabuf->virt, 0, hw_page_size);
12514 		cq_create->u.request.page[dmabuf->buffer_tag].addr_lo =
12515 					putPaddrLow(dmabuf->phys);
12516 		cq_create->u.request.page[dmabuf->buffer_tag].addr_hi =
12517 					putPaddrHigh(dmabuf->phys);
12518 	}
12519 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
12520 
12521 	/* The IOCTL status is embedded in the mailbox subheader. */
12522 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
12523 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
12524 	if (shdr_status || shdr_add_status || rc) {
12525 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12526 				"2501 CQ_CREATE mailbox failed with "
12527 				"status x%x add_status x%x, mbx status x%x\n",
12528 				shdr_status, shdr_add_status, rc);
12529 		status = -ENXIO;
12530 		goto out;
12531 	}
12532 	cq->queue_id = bf_get(lpfc_mbx_cq_create_q_id, &cq_create->u.response);
12533 	if (cq->queue_id == 0xFFFF) {
12534 		status = -ENXIO;
12535 		goto out;
12536 	}
12537 	/* link the cq onto the parent eq child list */
12538 	list_add_tail(&cq->list, &eq->child_list);
12539 	/* Set up completion queue's type and subtype */
12540 	cq->type = type;
12541 	cq->subtype = subtype;
12542 	cq->queue_id = bf_get(lpfc_mbx_cq_create_q_id, &cq_create->u.response);
12543 	cq->assoc_qid = eq->queue_id;
12544 	cq->host_index = 0;
12545 	cq->hba_index = 0;
12546 
12547 out:
12548 	mempool_free(mbox, phba->mbox_mem_pool);
12549 	return status;
12550 }
12551 
12552 /**
12553  * lpfc_mq_create_fb_init - Send MCC_CREATE without async events registration
12554  * @phba: HBA structure that indicates port to create a queue on.
12555  * @mq: The queue structure to use to create the mailbox queue.
12556  * @mbox: An allocated pointer to type LPFC_MBOXQ_t
12557  * @cq: The completion queue to associate with this cq.
12558  *
12559  * This function provides failback (fb) functionality when the
12560  * mq_create_ext fails on older FW generations.  It's purpose is identical
12561  * to mq_create_ext otherwise.
12562  *
12563  * This routine cannot fail as all attributes were previously accessed and
12564  * initialized in mq_create_ext.
12565  **/
12566 static void
12567 lpfc_mq_create_fb_init(struct lpfc_hba *phba, struct lpfc_queue *mq,
12568 		       LPFC_MBOXQ_t *mbox, struct lpfc_queue *cq)
12569 {
12570 	struct lpfc_mbx_mq_create *mq_create;
12571 	struct lpfc_dmabuf *dmabuf;
12572 	int length;
12573 
12574 	length = (sizeof(struct lpfc_mbx_mq_create) -
12575 		  sizeof(struct lpfc_sli4_cfg_mhdr));
12576 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
12577 			 LPFC_MBOX_OPCODE_MQ_CREATE,
12578 			 length, LPFC_SLI4_MBX_EMBED);
12579 	mq_create = &mbox->u.mqe.un.mq_create;
12580 	bf_set(lpfc_mbx_mq_create_num_pages, &mq_create->u.request,
12581 	       mq->page_count);
12582 	bf_set(lpfc_mq_context_cq_id, &mq_create->u.request.context,
12583 	       cq->queue_id);
12584 	bf_set(lpfc_mq_context_valid, &mq_create->u.request.context, 1);
12585 	switch (mq->entry_count) {
12586 	case 16:
12587 		bf_set(lpfc_mq_context_ring_size, &mq_create->u.request.context,
12588 		       LPFC_MQ_RING_SIZE_16);
12589 		break;
12590 	case 32:
12591 		bf_set(lpfc_mq_context_ring_size, &mq_create->u.request.context,
12592 		       LPFC_MQ_RING_SIZE_32);
12593 		break;
12594 	case 64:
12595 		bf_set(lpfc_mq_context_ring_size, &mq_create->u.request.context,
12596 		       LPFC_MQ_RING_SIZE_64);
12597 		break;
12598 	case 128:
12599 		bf_set(lpfc_mq_context_ring_size, &mq_create->u.request.context,
12600 		       LPFC_MQ_RING_SIZE_128);
12601 		break;
12602 	}
12603 	list_for_each_entry(dmabuf, &mq->page_list, list) {
12604 		mq_create->u.request.page[dmabuf->buffer_tag].addr_lo =
12605 			putPaddrLow(dmabuf->phys);
12606 		mq_create->u.request.page[dmabuf->buffer_tag].addr_hi =
12607 			putPaddrHigh(dmabuf->phys);
12608 	}
12609 }
12610 
12611 /**
12612  * lpfc_mq_create - Create a mailbox Queue on the HBA
12613  * @phba: HBA structure that indicates port to create a queue on.
12614  * @mq: The queue structure to use to create the mailbox queue.
12615  * @cq: The completion queue to associate with this cq.
12616  * @subtype: The queue's subtype.
12617  *
12618  * This function creates a mailbox queue, as detailed in @mq, on a port,
12619  * described by @phba by sending a MQ_CREATE mailbox command to the HBA.
12620  *
12621  * The @phba struct is used to send mailbox command to HBA. The @cq struct
12622  * is used to get the entry count and entry size that are necessary to
12623  * determine the number of pages to allocate and use for this queue. This
12624  * function will send the MQ_CREATE mailbox command to the HBA to setup the
12625  * mailbox queue. This function is asynchronous and will wait for the mailbox
12626  * command to finish before continuing.
12627  *
12628  * On success this function will return a zero. If unable to allocate enough
12629  * memory this function will return -ENOMEM. If the queue create mailbox command
12630  * fails this function will return -ENXIO.
12631  **/
12632 int32_t
12633 lpfc_mq_create(struct lpfc_hba *phba, struct lpfc_queue *mq,
12634 	       struct lpfc_queue *cq, uint32_t subtype)
12635 {
12636 	struct lpfc_mbx_mq_create *mq_create;
12637 	struct lpfc_mbx_mq_create_ext *mq_create_ext;
12638 	struct lpfc_dmabuf *dmabuf;
12639 	LPFC_MBOXQ_t *mbox;
12640 	int rc, length, status = 0;
12641 	uint32_t shdr_status, shdr_add_status;
12642 	union lpfc_sli4_cfg_shdr *shdr;
12643 	uint32_t hw_page_size = phba->sli4_hba.pc_sli4_params.if_page_sz;
12644 
12645 	/* sanity check on queue memory */
12646 	if (!mq || !cq)
12647 		return -ENODEV;
12648 	if (!phba->sli4_hba.pc_sli4_params.supported)
12649 		hw_page_size = SLI4_PAGE_SIZE;
12650 
12651 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
12652 	if (!mbox)
12653 		return -ENOMEM;
12654 	length = (sizeof(struct lpfc_mbx_mq_create_ext) -
12655 		  sizeof(struct lpfc_sli4_cfg_mhdr));
12656 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
12657 			 LPFC_MBOX_OPCODE_MQ_CREATE_EXT,
12658 			 length, LPFC_SLI4_MBX_EMBED);
12659 
12660 	mq_create_ext = &mbox->u.mqe.un.mq_create_ext;
12661 	shdr = (union lpfc_sli4_cfg_shdr *) &mq_create_ext->header.cfg_shdr;
12662 	bf_set(lpfc_mbx_mq_create_ext_num_pages,
12663 	       &mq_create_ext->u.request, mq->page_count);
12664 	bf_set(lpfc_mbx_mq_create_ext_async_evt_link,
12665 	       &mq_create_ext->u.request, 1);
12666 	bf_set(lpfc_mbx_mq_create_ext_async_evt_fip,
12667 	       &mq_create_ext->u.request, 1);
12668 	bf_set(lpfc_mbx_mq_create_ext_async_evt_group5,
12669 	       &mq_create_ext->u.request, 1);
12670 	bf_set(lpfc_mbx_mq_create_ext_async_evt_fc,
12671 	       &mq_create_ext->u.request, 1);
12672 	bf_set(lpfc_mbx_mq_create_ext_async_evt_sli,
12673 	       &mq_create_ext->u.request, 1);
12674 	bf_set(lpfc_mq_context_valid, &mq_create_ext->u.request.context, 1);
12675 	bf_set(lpfc_mbox_hdr_version, &shdr->request,
12676 	       phba->sli4_hba.pc_sli4_params.mqv);
12677 	if (phba->sli4_hba.pc_sli4_params.mqv == LPFC_Q_CREATE_VERSION_1)
12678 		bf_set(lpfc_mbx_mq_create_ext_cq_id, &mq_create_ext->u.request,
12679 		       cq->queue_id);
12680 	else
12681 		bf_set(lpfc_mq_context_cq_id, &mq_create_ext->u.request.context,
12682 		       cq->queue_id);
12683 	switch (mq->entry_count) {
12684 	default:
12685 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
12686 				"0362 Unsupported MQ count. (%d)\n",
12687 				mq->entry_count);
12688 		if (mq->entry_count < 16) {
12689 			status = -EINVAL;
12690 			goto out;
12691 		}
12692 		/* otherwise default to smallest count (drop through) */
12693 	case 16:
12694 		bf_set(lpfc_mq_context_ring_size,
12695 		       &mq_create_ext->u.request.context,
12696 		       LPFC_MQ_RING_SIZE_16);
12697 		break;
12698 	case 32:
12699 		bf_set(lpfc_mq_context_ring_size,
12700 		       &mq_create_ext->u.request.context,
12701 		       LPFC_MQ_RING_SIZE_32);
12702 		break;
12703 	case 64:
12704 		bf_set(lpfc_mq_context_ring_size,
12705 		       &mq_create_ext->u.request.context,
12706 		       LPFC_MQ_RING_SIZE_64);
12707 		break;
12708 	case 128:
12709 		bf_set(lpfc_mq_context_ring_size,
12710 		       &mq_create_ext->u.request.context,
12711 		       LPFC_MQ_RING_SIZE_128);
12712 		break;
12713 	}
12714 	list_for_each_entry(dmabuf, &mq->page_list, list) {
12715 		memset(dmabuf->virt, 0, hw_page_size);
12716 		mq_create_ext->u.request.page[dmabuf->buffer_tag].addr_lo =
12717 					putPaddrLow(dmabuf->phys);
12718 		mq_create_ext->u.request.page[dmabuf->buffer_tag].addr_hi =
12719 					putPaddrHigh(dmabuf->phys);
12720 	}
12721 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
12722 	mq->queue_id = bf_get(lpfc_mbx_mq_create_q_id,
12723 			      &mq_create_ext->u.response);
12724 	if (rc != MBX_SUCCESS) {
12725 		lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
12726 				"2795 MQ_CREATE_EXT failed with "
12727 				"status x%x. Failback to MQ_CREATE.\n",
12728 				rc);
12729 		lpfc_mq_create_fb_init(phba, mq, mbox, cq);
12730 		mq_create = &mbox->u.mqe.un.mq_create;
12731 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
12732 		shdr = (union lpfc_sli4_cfg_shdr *) &mq_create->header.cfg_shdr;
12733 		mq->queue_id = bf_get(lpfc_mbx_mq_create_q_id,
12734 				      &mq_create->u.response);
12735 	}
12736 
12737 	/* The IOCTL status is embedded in the mailbox subheader. */
12738 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
12739 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
12740 	if (shdr_status || shdr_add_status || rc) {
12741 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12742 				"2502 MQ_CREATE mailbox failed with "
12743 				"status x%x add_status x%x, mbx status x%x\n",
12744 				shdr_status, shdr_add_status, rc);
12745 		status = -ENXIO;
12746 		goto out;
12747 	}
12748 	if (mq->queue_id == 0xFFFF) {
12749 		status = -ENXIO;
12750 		goto out;
12751 	}
12752 	mq->type = LPFC_MQ;
12753 	mq->assoc_qid = cq->queue_id;
12754 	mq->subtype = subtype;
12755 	mq->host_index = 0;
12756 	mq->hba_index = 0;
12757 
12758 	/* link the mq onto the parent cq child list */
12759 	list_add_tail(&mq->list, &cq->child_list);
12760 out:
12761 	mempool_free(mbox, phba->mbox_mem_pool);
12762 	return status;
12763 }
12764 
12765 /**
12766  * lpfc_wq_create - Create a Work Queue on the HBA
12767  * @phba: HBA structure that indicates port to create a queue on.
12768  * @wq: The queue structure to use to create the work queue.
12769  * @cq: The completion queue to bind this work queue to.
12770  * @subtype: The subtype of the work queue indicating its functionality.
12771  *
12772  * This function creates a work queue, as detailed in @wq, on a port, described
12773  * by @phba by sending a WQ_CREATE mailbox command to the HBA.
12774  *
12775  * The @phba struct is used to send mailbox command to HBA. The @wq struct
12776  * is used to get the entry count and entry size that are necessary to
12777  * determine the number of pages to allocate and use for this queue. The @cq
12778  * is used to indicate which completion queue to bind this work queue to. This
12779  * function will send the WQ_CREATE mailbox command to the HBA to setup the
12780  * work queue. This function is asynchronous and will wait for the mailbox
12781  * command to finish before continuing.
12782  *
12783  * On success this function will return a zero. If unable to allocate enough
12784  * memory this function will return -ENOMEM. If the queue create mailbox command
12785  * fails this function will return -ENXIO.
12786  **/
12787 uint32_t
12788 lpfc_wq_create(struct lpfc_hba *phba, struct lpfc_queue *wq,
12789 	       struct lpfc_queue *cq, uint32_t subtype)
12790 {
12791 	struct lpfc_mbx_wq_create *wq_create;
12792 	struct lpfc_dmabuf *dmabuf;
12793 	LPFC_MBOXQ_t *mbox;
12794 	int rc, length, status = 0;
12795 	uint32_t shdr_status, shdr_add_status;
12796 	union lpfc_sli4_cfg_shdr *shdr;
12797 	uint32_t hw_page_size = phba->sli4_hba.pc_sli4_params.if_page_sz;
12798 	struct dma_address *page;
12799 	void __iomem *bar_memmap_p;
12800 	uint32_t db_offset;
12801 	uint16_t pci_barset;
12802 
12803 	/* sanity check on queue memory */
12804 	if (!wq || !cq)
12805 		return -ENODEV;
12806 	if (!phba->sli4_hba.pc_sli4_params.supported)
12807 		hw_page_size = SLI4_PAGE_SIZE;
12808 
12809 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
12810 	if (!mbox)
12811 		return -ENOMEM;
12812 	length = (sizeof(struct lpfc_mbx_wq_create) -
12813 		  sizeof(struct lpfc_sli4_cfg_mhdr));
12814 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
12815 			 LPFC_MBOX_OPCODE_FCOE_WQ_CREATE,
12816 			 length, LPFC_SLI4_MBX_EMBED);
12817 	wq_create = &mbox->u.mqe.un.wq_create;
12818 	shdr = (union lpfc_sli4_cfg_shdr *) &wq_create->header.cfg_shdr;
12819 	bf_set(lpfc_mbx_wq_create_num_pages, &wq_create->u.request,
12820 		    wq->page_count);
12821 	bf_set(lpfc_mbx_wq_create_cq_id, &wq_create->u.request,
12822 		    cq->queue_id);
12823 	bf_set(lpfc_mbox_hdr_version, &shdr->request,
12824 	       phba->sli4_hba.pc_sli4_params.wqv);
12825 
12826 	if (phba->sli4_hba.pc_sli4_params.wqv == LPFC_Q_CREATE_VERSION_1) {
12827 		bf_set(lpfc_mbx_wq_create_wqe_count, &wq_create->u.request_1,
12828 		       wq->entry_count);
12829 		switch (wq->entry_size) {
12830 		default:
12831 		case 64:
12832 			bf_set(lpfc_mbx_wq_create_wqe_size,
12833 			       &wq_create->u.request_1,
12834 			       LPFC_WQ_WQE_SIZE_64);
12835 			break;
12836 		case 128:
12837 			bf_set(lpfc_mbx_wq_create_wqe_size,
12838 			       &wq_create->u.request_1,
12839 			       LPFC_WQ_WQE_SIZE_128);
12840 			break;
12841 		}
12842 		bf_set(lpfc_mbx_wq_create_page_size, &wq_create->u.request_1,
12843 		       (PAGE_SIZE/SLI4_PAGE_SIZE));
12844 		page = wq_create->u.request_1.page;
12845 	} else {
12846 		page = wq_create->u.request.page;
12847 	}
12848 	list_for_each_entry(dmabuf, &wq->page_list, list) {
12849 		memset(dmabuf->virt, 0, hw_page_size);
12850 		page[dmabuf->buffer_tag].addr_lo = putPaddrLow(dmabuf->phys);
12851 		page[dmabuf->buffer_tag].addr_hi = putPaddrHigh(dmabuf->phys);
12852 	}
12853 
12854 	if (phba->sli4_hba.fw_func_mode & LPFC_DUA_MODE)
12855 		bf_set(lpfc_mbx_wq_create_dua, &wq_create->u.request, 1);
12856 
12857 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
12858 	/* The IOCTL status is embedded in the mailbox subheader. */
12859 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
12860 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
12861 	if (shdr_status || shdr_add_status || rc) {
12862 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12863 				"2503 WQ_CREATE mailbox failed with "
12864 				"status x%x add_status x%x, mbx status x%x\n",
12865 				shdr_status, shdr_add_status, rc);
12866 		status = -ENXIO;
12867 		goto out;
12868 	}
12869 	wq->queue_id = bf_get(lpfc_mbx_wq_create_q_id, &wq_create->u.response);
12870 	if (wq->queue_id == 0xFFFF) {
12871 		status = -ENXIO;
12872 		goto out;
12873 	}
12874 	if (phba->sli4_hba.fw_func_mode & LPFC_DUA_MODE) {
12875 		wq->db_format = bf_get(lpfc_mbx_wq_create_db_format,
12876 				       &wq_create->u.response);
12877 		if ((wq->db_format != LPFC_DB_LIST_FORMAT) &&
12878 		    (wq->db_format != LPFC_DB_RING_FORMAT)) {
12879 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12880 					"3265 WQ[%d] doorbell format not "
12881 					"supported: x%x\n", wq->queue_id,
12882 					wq->db_format);
12883 			status = -EINVAL;
12884 			goto out;
12885 		}
12886 		pci_barset = bf_get(lpfc_mbx_wq_create_bar_set,
12887 				    &wq_create->u.response);
12888 		bar_memmap_p = lpfc_dual_chute_pci_bar_map(phba, pci_barset);
12889 		if (!bar_memmap_p) {
12890 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12891 					"3263 WQ[%d] failed to memmap pci "
12892 					"barset:x%x\n", wq->queue_id,
12893 					pci_barset);
12894 			status = -ENOMEM;
12895 			goto out;
12896 		}
12897 		db_offset = wq_create->u.response.doorbell_offset;
12898 		if ((db_offset != LPFC_ULP0_WQ_DOORBELL) &&
12899 		    (db_offset != LPFC_ULP1_WQ_DOORBELL)) {
12900 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
12901 					"3252 WQ[%d] doorbell offset not "
12902 					"supported: x%x\n", wq->queue_id,
12903 					db_offset);
12904 			status = -EINVAL;
12905 			goto out;
12906 		}
12907 		wq->db_regaddr = bar_memmap_p + db_offset;
12908 		lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
12909 				"3264 WQ[%d]: barset:x%x, offset:x%x, "
12910 				"format:x%x\n", wq->queue_id, pci_barset,
12911 				db_offset, wq->db_format);
12912 	} else {
12913 		wq->db_format = LPFC_DB_LIST_FORMAT;
12914 		wq->db_regaddr = phba->sli4_hba.WQDBregaddr;
12915 	}
12916 	wq->type = LPFC_WQ;
12917 	wq->assoc_qid = cq->queue_id;
12918 	wq->subtype = subtype;
12919 	wq->host_index = 0;
12920 	wq->hba_index = 0;
12921 	wq->entry_repost = LPFC_RELEASE_NOTIFICATION_INTERVAL;
12922 
12923 	/* link the wq onto the parent cq child list */
12924 	list_add_tail(&wq->list, &cq->child_list);
12925 out:
12926 	mempool_free(mbox, phba->mbox_mem_pool);
12927 	return status;
12928 }
12929 
12930 /**
12931  * lpfc_rq_adjust_repost - Adjust entry_repost for an RQ
12932  * @phba: HBA structure that indicates port to create a queue on.
12933  * @rq:   The queue structure to use for the receive queue.
12934  * @qno:  The associated HBQ number
12935  *
12936  *
12937  * For SLI4 we need to adjust the RQ repost value based on
12938  * the number of buffers that are initially posted to the RQ.
12939  */
12940 void
12941 lpfc_rq_adjust_repost(struct lpfc_hba *phba, struct lpfc_queue *rq, int qno)
12942 {
12943 	uint32_t cnt;
12944 
12945 	/* sanity check on queue memory */
12946 	if (!rq)
12947 		return;
12948 	cnt = lpfc_hbq_defs[qno]->entry_count;
12949 
12950 	/* Recalc repost for RQs based on buffers initially posted */
12951 	cnt = (cnt >> 3);
12952 	if (cnt < LPFC_QUEUE_MIN_REPOST)
12953 		cnt = LPFC_QUEUE_MIN_REPOST;
12954 
12955 	rq->entry_repost = cnt;
12956 }
12957 
12958 /**
12959  * lpfc_rq_create - Create a Receive Queue on the HBA
12960  * @phba: HBA structure that indicates port to create a queue on.
12961  * @hrq: The queue structure to use to create the header receive queue.
12962  * @drq: The queue structure to use to create the data receive queue.
12963  * @cq: The completion queue to bind this work queue to.
12964  *
12965  * This function creates a receive buffer queue pair , as detailed in @hrq and
12966  * @drq, on a port, described by @phba by sending a RQ_CREATE mailbox command
12967  * to the HBA.
12968  *
12969  * The @phba struct is used to send mailbox command to HBA. The @drq and @hrq
12970  * struct is used to get the entry count that is necessary to determine the
12971  * number of pages to use for this queue. The @cq is used to indicate which
12972  * completion queue to bind received buffers that are posted to these queues to.
12973  * This function will send the RQ_CREATE mailbox command to the HBA to setup the
12974  * receive queue pair. This function is asynchronous and will wait for the
12975  * mailbox command to finish before continuing.
12976  *
12977  * On success this function will return a zero. If unable to allocate enough
12978  * memory this function will return -ENOMEM. If the queue create mailbox command
12979  * fails this function will return -ENXIO.
12980  **/
12981 uint32_t
12982 lpfc_rq_create(struct lpfc_hba *phba, struct lpfc_queue *hrq,
12983 	       struct lpfc_queue *drq, struct lpfc_queue *cq, uint32_t subtype)
12984 {
12985 	struct lpfc_mbx_rq_create *rq_create;
12986 	struct lpfc_dmabuf *dmabuf;
12987 	LPFC_MBOXQ_t *mbox;
12988 	int rc, length, status = 0;
12989 	uint32_t shdr_status, shdr_add_status;
12990 	union lpfc_sli4_cfg_shdr *shdr;
12991 	uint32_t hw_page_size = phba->sli4_hba.pc_sli4_params.if_page_sz;
12992 	void __iomem *bar_memmap_p;
12993 	uint32_t db_offset;
12994 	uint16_t pci_barset;
12995 
12996 	/* sanity check on queue memory */
12997 	if (!hrq || !drq || !cq)
12998 		return -ENODEV;
12999 	if (!phba->sli4_hba.pc_sli4_params.supported)
13000 		hw_page_size = SLI4_PAGE_SIZE;
13001 
13002 	if (hrq->entry_count != drq->entry_count)
13003 		return -EINVAL;
13004 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
13005 	if (!mbox)
13006 		return -ENOMEM;
13007 	length = (sizeof(struct lpfc_mbx_rq_create) -
13008 		  sizeof(struct lpfc_sli4_cfg_mhdr));
13009 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13010 			 LPFC_MBOX_OPCODE_FCOE_RQ_CREATE,
13011 			 length, LPFC_SLI4_MBX_EMBED);
13012 	rq_create = &mbox->u.mqe.un.rq_create;
13013 	shdr = (union lpfc_sli4_cfg_shdr *) &rq_create->header.cfg_shdr;
13014 	bf_set(lpfc_mbox_hdr_version, &shdr->request,
13015 	       phba->sli4_hba.pc_sli4_params.rqv);
13016 	if (phba->sli4_hba.pc_sli4_params.rqv == LPFC_Q_CREATE_VERSION_1) {
13017 		bf_set(lpfc_rq_context_rqe_count_1,
13018 		       &rq_create->u.request.context,
13019 		       hrq->entry_count);
13020 		rq_create->u.request.context.buffer_size = LPFC_HDR_BUF_SIZE;
13021 		bf_set(lpfc_rq_context_rqe_size,
13022 		       &rq_create->u.request.context,
13023 		       LPFC_RQE_SIZE_8);
13024 		bf_set(lpfc_rq_context_page_size,
13025 		       &rq_create->u.request.context,
13026 		       (PAGE_SIZE/SLI4_PAGE_SIZE));
13027 	} else {
13028 		switch (hrq->entry_count) {
13029 		default:
13030 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
13031 					"2535 Unsupported RQ count. (%d)\n",
13032 					hrq->entry_count);
13033 			if (hrq->entry_count < 512) {
13034 				status = -EINVAL;
13035 				goto out;
13036 			}
13037 			/* otherwise default to smallest count (drop through) */
13038 		case 512:
13039 			bf_set(lpfc_rq_context_rqe_count,
13040 			       &rq_create->u.request.context,
13041 			       LPFC_RQ_RING_SIZE_512);
13042 			break;
13043 		case 1024:
13044 			bf_set(lpfc_rq_context_rqe_count,
13045 			       &rq_create->u.request.context,
13046 			       LPFC_RQ_RING_SIZE_1024);
13047 			break;
13048 		case 2048:
13049 			bf_set(lpfc_rq_context_rqe_count,
13050 			       &rq_create->u.request.context,
13051 			       LPFC_RQ_RING_SIZE_2048);
13052 			break;
13053 		case 4096:
13054 			bf_set(lpfc_rq_context_rqe_count,
13055 			       &rq_create->u.request.context,
13056 			       LPFC_RQ_RING_SIZE_4096);
13057 			break;
13058 		}
13059 		bf_set(lpfc_rq_context_buf_size, &rq_create->u.request.context,
13060 		       LPFC_HDR_BUF_SIZE);
13061 	}
13062 	bf_set(lpfc_rq_context_cq_id, &rq_create->u.request.context,
13063 	       cq->queue_id);
13064 	bf_set(lpfc_mbx_rq_create_num_pages, &rq_create->u.request,
13065 	       hrq->page_count);
13066 	list_for_each_entry(dmabuf, &hrq->page_list, list) {
13067 		memset(dmabuf->virt, 0, hw_page_size);
13068 		rq_create->u.request.page[dmabuf->buffer_tag].addr_lo =
13069 					putPaddrLow(dmabuf->phys);
13070 		rq_create->u.request.page[dmabuf->buffer_tag].addr_hi =
13071 					putPaddrHigh(dmabuf->phys);
13072 	}
13073 	if (phba->sli4_hba.fw_func_mode & LPFC_DUA_MODE)
13074 		bf_set(lpfc_mbx_rq_create_dua, &rq_create->u.request, 1);
13075 
13076 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
13077 	/* The IOCTL status is embedded in the mailbox subheader. */
13078 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13079 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13080 	if (shdr_status || shdr_add_status || rc) {
13081 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13082 				"2504 RQ_CREATE mailbox failed with "
13083 				"status x%x add_status x%x, mbx status x%x\n",
13084 				shdr_status, shdr_add_status, rc);
13085 		status = -ENXIO;
13086 		goto out;
13087 	}
13088 	hrq->queue_id = bf_get(lpfc_mbx_rq_create_q_id, &rq_create->u.response);
13089 	if (hrq->queue_id == 0xFFFF) {
13090 		status = -ENXIO;
13091 		goto out;
13092 	}
13093 
13094 	if (phba->sli4_hba.fw_func_mode & LPFC_DUA_MODE) {
13095 		hrq->db_format = bf_get(lpfc_mbx_rq_create_db_format,
13096 					&rq_create->u.response);
13097 		if ((hrq->db_format != LPFC_DB_LIST_FORMAT) &&
13098 		    (hrq->db_format != LPFC_DB_RING_FORMAT)) {
13099 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13100 					"3262 RQ [%d] doorbell format not "
13101 					"supported: x%x\n", hrq->queue_id,
13102 					hrq->db_format);
13103 			status = -EINVAL;
13104 			goto out;
13105 		}
13106 
13107 		pci_barset = bf_get(lpfc_mbx_rq_create_bar_set,
13108 				    &rq_create->u.response);
13109 		bar_memmap_p = lpfc_dual_chute_pci_bar_map(phba, pci_barset);
13110 		if (!bar_memmap_p) {
13111 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13112 					"3269 RQ[%d] failed to memmap pci "
13113 					"barset:x%x\n", hrq->queue_id,
13114 					pci_barset);
13115 			status = -ENOMEM;
13116 			goto out;
13117 		}
13118 
13119 		db_offset = rq_create->u.response.doorbell_offset;
13120 		if ((db_offset != LPFC_ULP0_RQ_DOORBELL) &&
13121 		    (db_offset != LPFC_ULP1_RQ_DOORBELL)) {
13122 			lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13123 					"3270 RQ[%d] doorbell offset not "
13124 					"supported: x%x\n", hrq->queue_id,
13125 					db_offset);
13126 			status = -EINVAL;
13127 			goto out;
13128 		}
13129 		hrq->db_regaddr = bar_memmap_p + db_offset;
13130 		lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
13131 				"3266 RQ[qid:%d]: barset:x%x, offset:x%x, "
13132 				"format:x%x\n", hrq->queue_id, pci_barset,
13133 				db_offset, hrq->db_format);
13134 	} else {
13135 		hrq->db_format = LPFC_DB_RING_FORMAT;
13136 		hrq->db_regaddr = phba->sli4_hba.RQDBregaddr;
13137 	}
13138 	hrq->type = LPFC_HRQ;
13139 	hrq->assoc_qid = cq->queue_id;
13140 	hrq->subtype = subtype;
13141 	hrq->host_index = 0;
13142 	hrq->hba_index = 0;
13143 
13144 	/* now create the data queue */
13145 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13146 			 LPFC_MBOX_OPCODE_FCOE_RQ_CREATE,
13147 			 length, LPFC_SLI4_MBX_EMBED);
13148 	bf_set(lpfc_mbox_hdr_version, &shdr->request,
13149 	       phba->sli4_hba.pc_sli4_params.rqv);
13150 	if (phba->sli4_hba.pc_sli4_params.rqv == LPFC_Q_CREATE_VERSION_1) {
13151 		bf_set(lpfc_rq_context_rqe_count_1,
13152 		       &rq_create->u.request.context, hrq->entry_count);
13153 		rq_create->u.request.context.buffer_size = LPFC_DATA_BUF_SIZE;
13154 		bf_set(lpfc_rq_context_rqe_size, &rq_create->u.request.context,
13155 		       LPFC_RQE_SIZE_8);
13156 		bf_set(lpfc_rq_context_page_size, &rq_create->u.request.context,
13157 		       (PAGE_SIZE/SLI4_PAGE_SIZE));
13158 	} else {
13159 		switch (drq->entry_count) {
13160 		default:
13161 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
13162 					"2536 Unsupported RQ count. (%d)\n",
13163 					drq->entry_count);
13164 			if (drq->entry_count < 512) {
13165 				status = -EINVAL;
13166 				goto out;
13167 			}
13168 			/* otherwise default to smallest count (drop through) */
13169 		case 512:
13170 			bf_set(lpfc_rq_context_rqe_count,
13171 			       &rq_create->u.request.context,
13172 			       LPFC_RQ_RING_SIZE_512);
13173 			break;
13174 		case 1024:
13175 			bf_set(lpfc_rq_context_rqe_count,
13176 			       &rq_create->u.request.context,
13177 			       LPFC_RQ_RING_SIZE_1024);
13178 			break;
13179 		case 2048:
13180 			bf_set(lpfc_rq_context_rqe_count,
13181 			       &rq_create->u.request.context,
13182 			       LPFC_RQ_RING_SIZE_2048);
13183 			break;
13184 		case 4096:
13185 			bf_set(lpfc_rq_context_rqe_count,
13186 			       &rq_create->u.request.context,
13187 			       LPFC_RQ_RING_SIZE_4096);
13188 			break;
13189 		}
13190 		bf_set(lpfc_rq_context_buf_size, &rq_create->u.request.context,
13191 		       LPFC_DATA_BUF_SIZE);
13192 	}
13193 	bf_set(lpfc_rq_context_cq_id, &rq_create->u.request.context,
13194 	       cq->queue_id);
13195 	bf_set(lpfc_mbx_rq_create_num_pages, &rq_create->u.request,
13196 	       drq->page_count);
13197 	list_for_each_entry(dmabuf, &drq->page_list, list) {
13198 		rq_create->u.request.page[dmabuf->buffer_tag].addr_lo =
13199 					putPaddrLow(dmabuf->phys);
13200 		rq_create->u.request.page[dmabuf->buffer_tag].addr_hi =
13201 					putPaddrHigh(dmabuf->phys);
13202 	}
13203 	if (phba->sli4_hba.fw_func_mode & LPFC_DUA_MODE)
13204 		bf_set(lpfc_mbx_rq_create_dua, &rq_create->u.request, 1);
13205 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
13206 	/* The IOCTL status is embedded in the mailbox subheader. */
13207 	shdr = (union lpfc_sli4_cfg_shdr *) &rq_create->header.cfg_shdr;
13208 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13209 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13210 	if (shdr_status || shdr_add_status || rc) {
13211 		status = -ENXIO;
13212 		goto out;
13213 	}
13214 	drq->queue_id = bf_get(lpfc_mbx_rq_create_q_id, &rq_create->u.response);
13215 	if (drq->queue_id == 0xFFFF) {
13216 		status = -ENXIO;
13217 		goto out;
13218 	}
13219 	drq->type = LPFC_DRQ;
13220 	drq->assoc_qid = cq->queue_id;
13221 	drq->subtype = subtype;
13222 	drq->host_index = 0;
13223 	drq->hba_index = 0;
13224 
13225 	/* link the header and data RQs onto the parent cq child list */
13226 	list_add_tail(&hrq->list, &cq->child_list);
13227 	list_add_tail(&drq->list, &cq->child_list);
13228 
13229 out:
13230 	mempool_free(mbox, phba->mbox_mem_pool);
13231 	return status;
13232 }
13233 
13234 /**
13235  * lpfc_eq_destroy - Destroy an event Queue on the HBA
13236  * @eq: The queue structure associated with the queue to destroy.
13237  *
13238  * This function destroys a queue, as detailed in @eq by sending an mailbox
13239  * command, specific to the type of queue, to the HBA.
13240  *
13241  * The @eq struct is used to get the queue ID of the queue to destroy.
13242  *
13243  * On success this function will return a zero. If the queue destroy mailbox
13244  * command fails this function will return -ENXIO.
13245  **/
13246 uint32_t
13247 lpfc_eq_destroy(struct lpfc_hba *phba, struct lpfc_queue *eq)
13248 {
13249 	LPFC_MBOXQ_t *mbox;
13250 	int rc, length, status = 0;
13251 	uint32_t shdr_status, shdr_add_status;
13252 	union lpfc_sli4_cfg_shdr *shdr;
13253 
13254 	/* sanity check on queue memory */
13255 	if (!eq)
13256 		return -ENODEV;
13257 	mbox = mempool_alloc(eq->phba->mbox_mem_pool, GFP_KERNEL);
13258 	if (!mbox)
13259 		return -ENOMEM;
13260 	length = (sizeof(struct lpfc_mbx_eq_destroy) -
13261 		  sizeof(struct lpfc_sli4_cfg_mhdr));
13262 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
13263 			 LPFC_MBOX_OPCODE_EQ_DESTROY,
13264 			 length, LPFC_SLI4_MBX_EMBED);
13265 	bf_set(lpfc_mbx_eq_destroy_q_id, &mbox->u.mqe.un.eq_destroy.u.request,
13266 	       eq->queue_id);
13267 	mbox->vport = eq->phba->pport;
13268 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
13269 
13270 	rc = lpfc_sli_issue_mbox(eq->phba, mbox, MBX_POLL);
13271 	/* The IOCTL status is embedded in the mailbox subheader. */
13272 	shdr = (union lpfc_sli4_cfg_shdr *)
13273 		&mbox->u.mqe.un.eq_destroy.header.cfg_shdr;
13274 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13275 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13276 	if (shdr_status || shdr_add_status || rc) {
13277 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13278 				"2505 EQ_DESTROY mailbox failed with "
13279 				"status x%x add_status x%x, mbx status x%x\n",
13280 				shdr_status, shdr_add_status, rc);
13281 		status = -ENXIO;
13282 	}
13283 
13284 	/* Remove eq from any list */
13285 	list_del_init(&eq->list);
13286 	mempool_free(mbox, eq->phba->mbox_mem_pool);
13287 	return status;
13288 }
13289 
13290 /**
13291  * lpfc_cq_destroy - Destroy a Completion Queue on the HBA
13292  * @cq: The queue structure associated with the queue to destroy.
13293  *
13294  * This function destroys a queue, as detailed in @cq by sending an mailbox
13295  * command, specific to the type of queue, to the HBA.
13296  *
13297  * The @cq struct is used to get the queue ID of the queue to destroy.
13298  *
13299  * On success this function will return a zero. If the queue destroy mailbox
13300  * command fails this function will return -ENXIO.
13301  **/
13302 uint32_t
13303 lpfc_cq_destroy(struct lpfc_hba *phba, struct lpfc_queue *cq)
13304 {
13305 	LPFC_MBOXQ_t *mbox;
13306 	int rc, length, status = 0;
13307 	uint32_t shdr_status, shdr_add_status;
13308 	union lpfc_sli4_cfg_shdr *shdr;
13309 
13310 	/* sanity check on queue memory */
13311 	if (!cq)
13312 		return -ENODEV;
13313 	mbox = mempool_alloc(cq->phba->mbox_mem_pool, GFP_KERNEL);
13314 	if (!mbox)
13315 		return -ENOMEM;
13316 	length = (sizeof(struct lpfc_mbx_cq_destroy) -
13317 		  sizeof(struct lpfc_sli4_cfg_mhdr));
13318 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
13319 			 LPFC_MBOX_OPCODE_CQ_DESTROY,
13320 			 length, LPFC_SLI4_MBX_EMBED);
13321 	bf_set(lpfc_mbx_cq_destroy_q_id, &mbox->u.mqe.un.cq_destroy.u.request,
13322 	       cq->queue_id);
13323 	mbox->vport = cq->phba->pport;
13324 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
13325 	rc = lpfc_sli_issue_mbox(cq->phba, mbox, MBX_POLL);
13326 	/* The IOCTL status is embedded in the mailbox subheader. */
13327 	shdr = (union lpfc_sli4_cfg_shdr *)
13328 		&mbox->u.mqe.un.wq_create.header.cfg_shdr;
13329 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13330 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13331 	if (shdr_status || shdr_add_status || rc) {
13332 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13333 				"2506 CQ_DESTROY mailbox failed with "
13334 				"status x%x add_status x%x, mbx status x%x\n",
13335 				shdr_status, shdr_add_status, rc);
13336 		status = -ENXIO;
13337 	}
13338 	/* Remove cq from any list */
13339 	list_del_init(&cq->list);
13340 	mempool_free(mbox, cq->phba->mbox_mem_pool);
13341 	return status;
13342 }
13343 
13344 /**
13345  * lpfc_mq_destroy - Destroy a Mailbox Queue on the HBA
13346  * @qm: The queue structure associated with the queue to destroy.
13347  *
13348  * This function destroys a queue, as detailed in @mq by sending an mailbox
13349  * command, specific to the type of queue, to the HBA.
13350  *
13351  * The @mq struct is used to get the queue ID of the queue to destroy.
13352  *
13353  * On success this function will return a zero. If the queue destroy mailbox
13354  * command fails this function will return -ENXIO.
13355  **/
13356 uint32_t
13357 lpfc_mq_destroy(struct lpfc_hba *phba, struct lpfc_queue *mq)
13358 {
13359 	LPFC_MBOXQ_t *mbox;
13360 	int rc, length, status = 0;
13361 	uint32_t shdr_status, shdr_add_status;
13362 	union lpfc_sli4_cfg_shdr *shdr;
13363 
13364 	/* sanity check on queue memory */
13365 	if (!mq)
13366 		return -ENODEV;
13367 	mbox = mempool_alloc(mq->phba->mbox_mem_pool, GFP_KERNEL);
13368 	if (!mbox)
13369 		return -ENOMEM;
13370 	length = (sizeof(struct lpfc_mbx_mq_destroy) -
13371 		  sizeof(struct lpfc_sli4_cfg_mhdr));
13372 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
13373 			 LPFC_MBOX_OPCODE_MQ_DESTROY,
13374 			 length, LPFC_SLI4_MBX_EMBED);
13375 	bf_set(lpfc_mbx_mq_destroy_q_id, &mbox->u.mqe.un.mq_destroy.u.request,
13376 	       mq->queue_id);
13377 	mbox->vport = mq->phba->pport;
13378 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
13379 	rc = lpfc_sli_issue_mbox(mq->phba, mbox, MBX_POLL);
13380 	/* The IOCTL status is embedded in the mailbox subheader. */
13381 	shdr = (union lpfc_sli4_cfg_shdr *)
13382 		&mbox->u.mqe.un.mq_destroy.header.cfg_shdr;
13383 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13384 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13385 	if (shdr_status || shdr_add_status || rc) {
13386 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13387 				"2507 MQ_DESTROY mailbox failed with "
13388 				"status x%x add_status x%x, mbx status x%x\n",
13389 				shdr_status, shdr_add_status, rc);
13390 		status = -ENXIO;
13391 	}
13392 	/* Remove mq from any list */
13393 	list_del_init(&mq->list);
13394 	mempool_free(mbox, mq->phba->mbox_mem_pool);
13395 	return status;
13396 }
13397 
13398 /**
13399  * lpfc_wq_destroy - Destroy a Work Queue on the HBA
13400  * @wq: The queue structure associated with the queue to destroy.
13401  *
13402  * This function destroys a queue, as detailed in @wq by sending an mailbox
13403  * command, specific to the type of queue, to the HBA.
13404  *
13405  * The @wq struct is used to get the queue ID of the queue to destroy.
13406  *
13407  * On success this function will return a zero. If the queue destroy mailbox
13408  * command fails this function will return -ENXIO.
13409  **/
13410 uint32_t
13411 lpfc_wq_destroy(struct lpfc_hba *phba, struct lpfc_queue *wq)
13412 {
13413 	LPFC_MBOXQ_t *mbox;
13414 	int rc, length, status = 0;
13415 	uint32_t shdr_status, shdr_add_status;
13416 	union lpfc_sli4_cfg_shdr *shdr;
13417 
13418 	/* sanity check on queue memory */
13419 	if (!wq)
13420 		return -ENODEV;
13421 	mbox = mempool_alloc(wq->phba->mbox_mem_pool, GFP_KERNEL);
13422 	if (!mbox)
13423 		return -ENOMEM;
13424 	length = (sizeof(struct lpfc_mbx_wq_destroy) -
13425 		  sizeof(struct lpfc_sli4_cfg_mhdr));
13426 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13427 			 LPFC_MBOX_OPCODE_FCOE_WQ_DESTROY,
13428 			 length, LPFC_SLI4_MBX_EMBED);
13429 	bf_set(lpfc_mbx_wq_destroy_q_id, &mbox->u.mqe.un.wq_destroy.u.request,
13430 	       wq->queue_id);
13431 	mbox->vport = wq->phba->pport;
13432 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
13433 	rc = lpfc_sli_issue_mbox(wq->phba, mbox, MBX_POLL);
13434 	shdr = (union lpfc_sli4_cfg_shdr *)
13435 		&mbox->u.mqe.un.wq_destroy.header.cfg_shdr;
13436 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13437 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13438 	if (shdr_status || shdr_add_status || rc) {
13439 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13440 				"2508 WQ_DESTROY mailbox failed with "
13441 				"status x%x add_status x%x, mbx status x%x\n",
13442 				shdr_status, shdr_add_status, rc);
13443 		status = -ENXIO;
13444 	}
13445 	/* Remove wq from any list */
13446 	list_del_init(&wq->list);
13447 	mempool_free(mbox, wq->phba->mbox_mem_pool);
13448 	return status;
13449 }
13450 
13451 /**
13452  * lpfc_rq_destroy - Destroy a Receive Queue on the HBA
13453  * @rq: The queue structure associated with the queue to destroy.
13454  *
13455  * This function destroys a queue, as detailed in @rq by sending an mailbox
13456  * command, specific to the type of queue, to the HBA.
13457  *
13458  * The @rq struct is used to get the queue ID of the queue to destroy.
13459  *
13460  * On success this function will return a zero. If the queue destroy mailbox
13461  * command fails this function will return -ENXIO.
13462  **/
13463 uint32_t
13464 lpfc_rq_destroy(struct lpfc_hba *phba, struct lpfc_queue *hrq,
13465 		struct lpfc_queue *drq)
13466 {
13467 	LPFC_MBOXQ_t *mbox;
13468 	int rc, length, status = 0;
13469 	uint32_t shdr_status, shdr_add_status;
13470 	union lpfc_sli4_cfg_shdr *shdr;
13471 
13472 	/* sanity check on queue memory */
13473 	if (!hrq || !drq)
13474 		return -ENODEV;
13475 	mbox = mempool_alloc(hrq->phba->mbox_mem_pool, GFP_KERNEL);
13476 	if (!mbox)
13477 		return -ENOMEM;
13478 	length = (sizeof(struct lpfc_mbx_rq_destroy) -
13479 		  sizeof(struct lpfc_sli4_cfg_mhdr));
13480 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13481 			 LPFC_MBOX_OPCODE_FCOE_RQ_DESTROY,
13482 			 length, LPFC_SLI4_MBX_EMBED);
13483 	bf_set(lpfc_mbx_rq_destroy_q_id, &mbox->u.mqe.un.rq_destroy.u.request,
13484 	       hrq->queue_id);
13485 	mbox->vport = hrq->phba->pport;
13486 	mbox->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
13487 	rc = lpfc_sli_issue_mbox(hrq->phba, mbox, MBX_POLL);
13488 	/* The IOCTL status is embedded in the mailbox subheader. */
13489 	shdr = (union lpfc_sli4_cfg_shdr *)
13490 		&mbox->u.mqe.un.rq_destroy.header.cfg_shdr;
13491 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13492 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13493 	if (shdr_status || shdr_add_status || rc) {
13494 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13495 				"2509 RQ_DESTROY mailbox failed with "
13496 				"status x%x add_status x%x, mbx status x%x\n",
13497 				shdr_status, shdr_add_status, rc);
13498 		if (rc != MBX_TIMEOUT)
13499 			mempool_free(mbox, hrq->phba->mbox_mem_pool);
13500 		return -ENXIO;
13501 	}
13502 	bf_set(lpfc_mbx_rq_destroy_q_id, &mbox->u.mqe.un.rq_destroy.u.request,
13503 	       drq->queue_id);
13504 	rc = lpfc_sli_issue_mbox(drq->phba, mbox, MBX_POLL);
13505 	shdr = (union lpfc_sli4_cfg_shdr *)
13506 		&mbox->u.mqe.un.rq_destroy.header.cfg_shdr;
13507 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13508 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13509 	if (shdr_status || shdr_add_status || rc) {
13510 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13511 				"2510 RQ_DESTROY mailbox failed with "
13512 				"status x%x add_status x%x, mbx status x%x\n",
13513 				shdr_status, shdr_add_status, rc);
13514 		status = -ENXIO;
13515 	}
13516 	list_del_init(&hrq->list);
13517 	list_del_init(&drq->list);
13518 	mempool_free(mbox, hrq->phba->mbox_mem_pool);
13519 	return status;
13520 }
13521 
13522 /**
13523  * lpfc_sli4_post_sgl - Post scatter gather list for an XRI to HBA
13524  * @phba: The virtual port for which this call being executed.
13525  * @pdma_phys_addr0: Physical address of the 1st SGL page.
13526  * @pdma_phys_addr1: Physical address of the 2nd SGL page.
13527  * @xritag: the xritag that ties this io to the SGL pages.
13528  *
13529  * This routine will post the sgl pages for the IO that has the xritag
13530  * that is in the iocbq structure. The xritag is assigned during iocbq
13531  * creation and persists for as long as the driver is loaded.
13532  * if the caller has fewer than 256 scatter gather segments to map then
13533  * pdma_phys_addr1 should be 0.
13534  * If the caller needs to map more than 256 scatter gather segment then
13535  * pdma_phys_addr1 should be a valid physical address.
13536  * physical address for SGLs must be 64 byte aligned.
13537  * If you are going to map 2 SGL's then the first one must have 256 entries
13538  * the second sgl can have between 1 and 256 entries.
13539  *
13540  * Return codes:
13541  * 	0 - Success
13542  * 	-ENXIO, -ENOMEM - Failure
13543  **/
13544 int
13545 lpfc_sli4_post_sgl(struct lpfc_hba *phba,
13546 		dma_addr_t pdma_phys_addr0,
13547 		dma_addr_t pdma_phys_addr1,
13548 		uint16_t xritag)
13549 {
13550 	struct lpfc_mbx_post_sgl_pages *post_sgl_pages;
13551 	LPFC_MBOXQ_t *mbox;
13552 	int rc;
13553 	uint32_t shdr_status, shdr_add_status;
13554 	uint32_t mbox_tmo;
13555 	union lpfc_sli4_cfg_shdr *shdr;
13556 
13557 	if (xritag == NO_XRI) {
13558 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
13559 				"0364 Invalid param:\n");
13560 		return -EINVAL;
13561 	}
13562 
13563 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
13564 	if (!mbox)
13565 		return -ENOMEM;
13566 
13567 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13568 			LPFC_MBOX_OPCODE_FCOE_POST_SGL_PAGES,
13569 			sizeof(struct lpfc_mbx_post_sgl_pages) -
13570 			sizeof(struct lpfc_sli4_cfg_mhdr), LPFC_SLI4_MBX_EMBED);
13571 
13572 	post_sgl_pages = (struct lpfc_mbx_post_sgl_pages *)
13573 				&mbox->u.mqe.un.post_sgl_pages;
13574 	bf_set(lpfc_post_sgl_pages_xri, post_sgl_pages, xritag);
13575 	bf_set(lpfc_post_sgl_pages_xricnt, post_sgl_pages, 1);
13576 
13577 	post_sgl_pages->sgl_pg_pairs[0].sgl_pg0_addr_lo	=
13578 				cpu_to_le32(putPaddrLow(pdma_phys_addr0));
13579 	post_sgl_pages->sgl_pg_pairs[0].sgl_pg0_addr_hi =
13580 				cpu_to_le32(putPaddrHigh(pdma_phys_addr0));
13581 
13582 	post_sgl_pages->sgl_pg_pairs[0].sgl_pg1_addr_lo	=
13583 				cpu_to_le32(putPaddrLow(pdma_phys_addr1));
13584 	post_sgl_pages->sgl_pg_pairs[0].sgl_pg1_addr_hi =
13585 				cpu_to_le32(putPaddrHigh(pdma_phys_addr1));
13586 	if (!phba->sli4_hba.intr_enable)
13587 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
13588 	else {
13589 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
13590 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
13591 	}
13592 	/* The IOCTL status is embedded in the mailbox subheader. */
13593 	shdr = (union lpfc_sli4_cfg_shdr *) &post_sgl_pages->header.cfg_shdr;
13594 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13595 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13596 	if (rc != MBX_TIMEOUT)
13597 		mempool_free(mbox, phba->mbox_mem_pool);
13598 	if (shdr_status || shdr_add_status || rc) {
13599 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13600 				"2511 POST_SGL mailbox failed with "
13601 				"status x%x add_status x%x, mbx status x%x\n",
13602 				shdr_status, shdr_add_status, rc);
13603 		rc = -ENXIO;
13604 	}
13605 	return 0;
13606 }
13607 
13608 /**
13609  * lpfc_sli4_alloc_xri - Get an available rpi in the device's range
13610  * @phba: pointer to lpfc hba data structure.
13611  *
13612  * This routine is invoked to post rpi header templates to the
13613  * HBA consistent with the SLI-4 interface spec.  This routine
13614  * posts a SLI4_PAGE_SIZE memory region to the port to hold up to
13615  * SLI4_PAGE_SIZE modulo 64 rpi context headers.
13616  *
13617  * Returns
13618  *	A nonzero rpi defined as rpi_base <= rpi < max_rpi if successful
13619  *	LPFC_RPI_ALLOC_ERROR if no rpis are available.
13620  **/
13621 uint16_t
13622 lpfc_sli4_alloc_xri(struct lpfc_hba *phba)
13623 {
13624 	unsigned long xri;
13625 
13626 	/*
13627 	 * Fetch the next logical xri.  Because this index is logical,
13628 	 * the driver starts at 0 each time.
13629 	 */
13630 	spin_lock_irq(&phba->hbalock);
13631 	xri = find_next_zero_bit(phba->sli4_hba.xri_bmask,
13632 				 phba->sli4_hba.max_cfg_param.max_xri, 0);
13633 	if (xri >= phba->sli4_hba.max_cfg_param.max_xri) {
13634 		spin_unlock_irq(&phba->hbalock);
13635 		return NO_XRI;
13636 	} else {
13637 		set_bit(xri, phba->sli4_hba.xri_bmask);
13638 		phba->sli4_hba.max_cfg_param.xri_used++;
13639 	}
13640 	spin_unlock_irq(&phba->hbalock);
13641 	return xri;
13642 }
13643 
13644 /**
13645  * lpfc_sli4_free_xri - Release an xri for reuse.
13646  * @phba: pointer to lpfc hba data structure.
13647  *
13648  * This routine is invoked to release an xri to the pool of
13649  * available rpis maintained by the driver.
13650  **/
13651 void
13652 __lpfc_sli4_free_xri(struct lpfc_hba *phba, int xri)
13653 {
13654 	if (test_and_clear_bit(xri, phba->sli4_hba.xri_bmask)) {
13655 		phba->sli4_hba.max_cfg_param.xri_used--;
13656 	}
13657 }
13658 
13659 /**
13660  * lpfc_sli4_free_xri - Release an xri for reuse.
13661  * @phba: pointer to lpfc hba data structure.
13662  *
13663  * This routine is invoked to release an xri to the pool of
13664  * available rpis maintained by the driver.
13665  **/
13666 void
13667 lpfc_sli4_free_xri(struct lpfc_hba *phba, int xri)
13668 {
13669 	spin_lock_irq(&phba->hbalock);
13670 	__lpfc_sli4_free_xri(phba, xri);
13671 	spin_unlock_irq(&phba->hbalock);
13672 }
13673 
13674 /**
13675  * lpfc_sli4_next_xritag - Get an xritag for the io
13676  * @phba: Pointer to HBA context object.
13677  *
13678  * This function gets an xritag for the iocb. If there is no unused xritag
13679  * it will return 0xffff.
13680  * The function returns the allocated xritag if successful, else returns zero.
13681  * Zero is not a valid xritag.
13682  * The caller is not required to hold any lock.
13683  **/
13684 uint16_t
13685 lpfc_sli4_next_xritag(struct lpfc_hba *phba)
13686 {
13687 	uint16_t xri_index;
13688 
13689 	xri_index = lpfc_sli4_alloc_xri(phba);
13690 	if (xri_index == NO_XRI)
13691 		lpfc_printf_log(phba, KERN_WARNING, LOG_SLI,
13692 				"2004 Failed to allocate XRI.last XRITAG is %d"
13693 				" Max XRI is %d, Used XRI is %d\n",
13694 				xri_index,
13695 				phba->sli4_hba.max_cfg_param.max_xri,
13696 				phba->sli4_hba.max_cfg_param.xri_used);
13697 	return xri_index;
13698 }
13699 
13700 /**
13701  * lpfc_sli4_post_els_sgl_list - post a block of ELS sgls to the port.
13702  * @phba: pointer to lpfc hba data structure.
13703  * @post_sgl_list: pointer to els sgl entry list.
13704  * @count: number of els sgl entries on the list.
13705  *
13706  * This routine is invoked to post a block of driver's sgl pages to the
13707  * HBA using non-embedded mailbox command. No Lock is held. This routine
13708  * is only called when the driver is loading and after all IO has been
13709  * stopped.
13710  **/
13711 static int
13712 lpfc_sli4_post_els_sgl_list(struct lpfc_hba *phba,
13713 			    struct list_head *post_sgl_list,
13714 			    int post_cnt)
13715 {
13716 	struct lpfc_sglq *sglq_entry = NULL, *sglq_next = NULL;
13717 	struct lpfc_mbx_post_uembed_sgl_page1 *sgl;
13718 	struct sgl_page_pairs *sgl_pg_pairs;
13719 	void *viraddr;
13720 	LPFC_MBOXQ_t *mbox;
13721 	uint32_t reqlen, alloclen, pg_pairs;
13722 	uint32_t mbox_tmo;
13723 	uint16_t xritag_start = 0;
13724 	int rc = 0;
13725 	uint32_t shdr_status, shdr_add_status;
13726 	union lpfc_sli4_cfg_shdr *shdr;
13727 
13728 	reqlen = phba->sli4_hba.els_xri_cnt * sizeof(struct sgl_page_pairs) +
13729 		 sizeof(union lpfc_sli4_cfg_shdr) + sizeof(uint32_t);
13730 	if (reqlen > SLI4_PAGE_SIZE) {
13731 		lpfc_printf_log(phba, KERN_WARNING, LOG_INIT,
13732 				"2559 Block sgl registration required DMA "
13733 				"size (%d) great than a page\n", reqlen);
13734 		return -ENOMEM;
13735 	}
13736 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
13737 	if (!mbox)
13738 		return -ENOMEM;
13739 
13740 	/* Allocate DMA memory and set up the non-embedded mailbox command */
13741 	alloclen = lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13742 			 LPFC_MBOX_OPCODE_FCOE_POST_SGL_PAGES, reqlen,
13743 			 LPFC_SLI4_MBX_NEMBED);
13744 
13745 	if (alloclen < reqlen) {
13746 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13747 				"0285 Allocated DMA memory size (%d) is "
13748 				"less than the requested DMA memory "
13749 				"size (%d)\n", alloclen, reqlen);
13750 		lpfc_sli4_mbox_cmd_free(phba, mbox);
13751 		return -ENOMEM;
13752 	}
13753 	/* Set up the SGL pages in the non-embedded DMA pages */
13754 	viraddr = mbox->sge_array->addr[0];
13755 	sgl = (struct lpfc_mbx_post_uembed_sgl_page1 *)viraddr;
13756 	sgl_pg_pairs = &sgl->sgl_pg_pairs;
13757 
13758 	pg_pairs = 0;
13759 	list_for_each_entry_safe(sglq_entry, sglq_next, post_sgl_list, list) {
13760 		/* Set up the sge entry */
13761 		sgl_pg_pairs->sgl_pg0_addr_lo =
13762 				cpu_to_le32(putPaddrLow(sglq_entry->phys));
13763 		sgl_pg_pairs->sgl_pg0_addr_hi =
13764 				cpu_to_le32(putPaddrHigh(sglq_entry->phys));
13765 		sgl_pg_pairs->sgl_pg1_addr_lo =
13766 				cpu_to_le32(putPaddrLow(0));
13767 		sgl_pg_pairs->sgl_pg1_addr_hi =
13768 				cpu_to_le32(putPaddrHigh(0));
13769 
13770 		/* Keep the first xritag on the list */
13771 		if (pg_pairs == 0)
13772 			xritag_start = sglq_entry->sli4_xritag;
13773 		sgl_pg_pairs++;
13774 		pg_pairs++;
13775 	}
13776 
13777 	/* Complete initialization and perform endian conversion. */
13778 	bf_set(lpfc_post_sgl_pages_xri, sgl, xritag_start);
13779 	bf_set(lpfc_post_sgl_pages_xricnt, sgl, phba->sli4_hba.els_xri_cnt);
13780 	sgl->word0 = cpu_to_le32(sgl->word0);
13781 	if (!phba->sli4_hba.intr_enable)
13782 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
13783 	else {
13784 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
13785 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
13786 	}
13787 	shdr = (union lpfc_sli4_cfg_shdr *) &sgl->cfg_shdr;
13788 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13789 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13790 	if (rc != MBX_TIMEOUT)
13791 		lpfc_sli4_mbox_cmd_free(phba, mbox);
13792 	if (shdr_status || shdr_add_status || rc) {
13793 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
13794 				"2513 POST_SGL_BLOCK mailbox command failed "
13795 				"status x%x add_status x%x mbx status x%x\n",
13796 				shdr_status, shdr_add_status, rc);
13797 		rc = -ENXIO;
13798 	}
13799 	return rc;
13800 }
13801 
13802 /**
13803  * lpfc_sli4_post_scsi_sgl_block - post a block of scsi sgl list to firmware
13804  * @phba: pointer to lpfc hba data structure.
13805  * @sblist: pointer to scsi buffer list.
13806  * @count: number of scsi buffers on the list.
13807  *
13808  * This routine is invoked to post a block of @count scsi sgl pages from a
13809  * SCSI buffer list @sblist to the HBA using non-embedded mailbox command.
13810  * No Lock is held.
13811  *
13812  **/
13813 int
13814 lpfc_sli4_post_scsi_sgl_block(struct lpfc_hba *phba,
13815 			      struct list_head *sblist,
13816 			      int count)
13817 {
13818 	struct lpfc_scsi_buf *psb;
13819 	struct lpfc_mbx_post_uembed_sgl_page1 *sgl;
13820 	struct sgl_page_pairs *sgl_pg_pairs;
13821 	void *viraddr;
13822 	LPFC_MBOXQ_t *mbox;
13823 	uint32_t reqlen, alloclen, pg_pairs;
13824 	uint32_t mbox_tmo;
13825 	uint16_t xritag_start = 0;
13826 	int rc = 0;
13827 	uint32_t shdr_status, shdr_add_status;
13828 	dma_addr_t pdma_phys_bpl1;
13829 	union lpfc_sli4_cfg_shdr *shdr;
13830 
13831 	/* Calculate the requested length of the dma memory */
13832 	reqlen = count * sizeof(struct sgl_page_pairs) +
13833 		 sizeof(union lpfc_sli4_cfg_shdr) + sizeof(uint32_t);
13834 	if (reqlen > SLI4_PAGE_SIZE) {
13835 		lpfc_printf_log(phba, KERN_WARNING, LOG_INIT,
13836 				"0217 Block sgl registration required DMA "
13837 				"size (%d) great than a page\n", reqlen);
13838 		return -ENOMEM;
13839 	}
13840 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
13841 	if (!mbox) {
13842 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13843 				"0283 Failed to allocate mbox cmd memory\n");
13844 		return -ENOMEM;
13845 	}
13846 
13847 	/* Allocate DMA memory and set up the non-embedded mailbox command */
13848 	alloclen = lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
13849 				LPFC_MBOX_OPCODE_FCOE_POST_SGL_PAGES, reqlen,
13850 				LPFC_SLI4_MBX_NEMBED);
13851 
13852 	if (alloclen < reqlen) {
13853 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
13854 				"2561 Allocated DMA memory size (%d) is "
13855 				"less than the requested DMA memory "
13856 				"size (%d)\n", alloclen, reqlen);
13857 		lpfc_sli4_mbox_cmd_free(phba, mbox);
13858 		return -ENOMEM;
13859 	}
13860 
13861 	/* Get the first SGE entry from the non-embedded DMA memory */
13862 	viraddr = mbox->sge_array->addr[0];
13863 
13864 	/* Set up the SGL pages in the non-embedded DMA pages */
13865 	sgl = (struct lpfc_mbx_post_uembed_sgl_page1 *)viraddr;
13866 	sgl_pg_pairs = &sgl->sgl_pg_pairs;
13867 
13868 	pg_pairs = 0;
13869 	list_for_each_entry(psb, sblist, list) {
13870 		/* Set up the sge entry */
13871 		sgl_pg_pairs->sgl_pg0_addr_lo =
13872 			cpu_to_le32(putPaddrLow(psb->dma_phys_bpl));
13873 		sgl_pg_pairs->sgl_pg0_addr_hi =
13874 			cpu_to_le32(putPaddrHigh(psb->dma_phys_bpl));
13875 		if (phba->cfg_sg_dma_buf_size > SGL_PAGE_SIZE)
13876 			pdma_phys_bpl1 = psb->dma_phys_bpl + SGL_PAGE_SIZE;
13877 		else
13878 			pdma_phys_bpl1 = 0;
13879 		sgl_pg_pairs->sgl_pg1_addr_lo =
13880 			cpu_to_le32(putPaddrLow(pdma_phys_bpl1));
13881 		sgl_pg_pairs->sgl_pg1_addr_hi =
13882 			cpu_to_le32(putPaddrHigh(pdma_phys_bpl1));
13883 		/* Keep the first xritag on the list */
13884 		if (pg_pairs == 0)
13885 			xritag_start = psb->cur_iocbq.sli4_xritag;
13886 		sgl_pg_pairs++;
13887 		pg_pairs++;
13888 	}
13889 	bf_set(lpfc_post_sgl_pages_xri, sgl, xritag_start);
13890 	bf_set(lpfc_post_sgl_pages_xricnt, sgl, pg_pairs);
13891 	/* Perform endian conversion if necessary */
13892 	sgl->word0 = cpu_to_le32(sgl->word0);
13893 
13894 	if (!phba->sli4_hba.intr_enable)
13895 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
13896 	else {
13897 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
13898 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
13899 	}
13900 	shdr = (union lpfc_sli4_cfg_shdr *) &sgl->cfg_shdr;
13901 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
13902 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
13903 	if (rc != MBX_TIMEOUT)
13904 		lpfc_sli4_mbox_cmd_free(phba, mbox);
13905 	if (shdr_status || shdr_add_status || rc) {
13906 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
13907 				"2564 POST_SGL_BLOCK mailbox command failed "
13908 				"status x%x add_status x%x mbx status x%x\n",
13909 				shdr_status, shdr_add_status, rc);
13910 		rc = -ENXIO;
13911 	}
13912 	return rc;
13913 }
13914 
13915 /**
13916  * lpfc_fc_frame_check - Check that this frame is a valid frame to handle
13917  * @phba: pointer to lpfc_hba struct that the frame was received on
13918  * @fc_hdr: A pointer to the FC Header data (In Big Endian Format)
13919  *
13920  * This function checks the fields in the @fc_hdr to see if the FC frame is a
13921  * valid type of frame that the LPFC driver will handle. This function will
13922  * return a zero if the frame is a valid frame or a non zero value when the
13923  * frame does not pass the check.
13924  **/
13925 static int
13926 lpfc_fc_frame_check(struct lpfc_hba *phba, struct fc_frame_header *fc_hdr)
13927 {
13928 	/*  make rctl_names static to save stack space */
13929 	static char *rctl_names[] = FC_RCTL_NAMES_INIT;
13930 	char *type_names[] = FC_TYPE_NAMES_INIT;
13931 	struct fc_vft_header *fc_vft_hdr;
13932 	uint32_t *header = (uint32_t *) fc_hdr;
13933 
13934 	switch (fc_hdr->fh_r_ctl) {
13935 	case FC_RCTL_DD_UNCAT:		/* uncategorized information */
13936 	case FC_RCTL_DD_SOL_DATA:	/* solicited data */
13937 	case FC_RCTL_DD_UNSOL_CTL:	/* unsolicited control */
13938 	case FC_RCTL_DD_SOL_CTL:	/* solicited control or reply */
13939 	case FC_RCTL_DD_UNSOL_DATA:	/* unsolicited data */
13940 	case FC_RCTL_DD_DATA_DESC:	/* data descriptor */
13941 	case FC_RCTL_DD_UNSOL_CMD:	/* unsolicited command */
13942 	case FC_RCTL_DD_CMD_STATUS:	/* command status */
13943 	case FC_RCTL_ELS_REQ:	/* extended link services request */
13944 	case FC_RCTL_ELS_REP:	/* extended link services reply */
13945 	case FC_RCTL_ELS4_REQ:	/* FC-4 ELS request */
13946 	case FC_RCTL_ELS4_REP:	/* FC-4 ELS reply */
13947 	case FC_RCTL_BA_NOP:  	/* basic link service NOP */
13948 	case FC_RCTL_BA_ABTS: 	/* basic link service abort */
13949 	case FC_RCTL_BA_RMC: 	/* remove connection */
13950 	case FC_RCTL_BA_ACC:	/* basic accept */
13951 	case FC_RCTL_BA_RJT:	/* basic reject */
13952 	case FC_RCTL_BA_PRMT:
13953 	case FC_RCTL_ACK_1:	/* acknowledge_1 */
13954 	case FC_RCTL_ACK_0:	/* acknowledge_0 */
13955 	case FC_RCTL_P_RJT:	/* port reject */
13956 	case FC_RCTL_F_RJT:	/* fabric reject */
13957 	case FC_RCTL_P_BSY:	/* port busy */
13958 	case FC_RCTL_F_BSY:	/* fabric busy to data frame */
13959 	case FC_RCTL_F_BSYL:	/* fabric busy to link control frame */
13960 	case FC_RCTL_LCR:	/* link credit reset */
13961 	case FC_RCTL_END:	/* end */
13962 		break;
13963 	case FC_RCTL_VFTH:	/* Virtual Fabric tagging Header */
13964 		fc_vft_hdr = (struct fc_vft_header *)fc_hdr;
13965 		fc_hdr = &((struct fc_frame_header *)fc_vft_hdr)[1];
13966 		return lpfc_fc_frame_check(phba, fc_hdr);
13967 	default:
13968 		goto drop;
13969 	}
13970 	switch (fc_hdr->fh_type) {
13971 	case FC_TYPE_BLS:
13972 	case FC_TYPE_ELS:
13973 	case FC_TYPE_FCP:
13974 	case FC_TYPE_CT:
13975 		break;
13976 	case FC_TYPE_IP:
13977 	case FC_TYPE_ILS:
13978 	default:
13979 		goto drop;
13980 	}
13981 
13982 	lpfc_printf_log(phba, KERN_INFO, LOG_ELS,
13983 			"2538 Received frame rctl:%s (x%x), type:%s (x%x), "
13984 			"frame Data:%08x %08x %08x %08x %08x %08x %08x\n",
13985 			rctl_names[fc_hdr->fh_r_ctl], fc_hdr->fh_r_ctl,
13986 			type_names[fc_hdr->fh_type], fc_hdr->fh_type,
13987 			be32_to_cpu(header[0]), be32_to_cpu(header[1]),
13988 			be32_to_cpu(header[2]), be32_to_cpu(header[3]),
13989 			be32_to_cpu(header[4]), be32_to_cpu(header[5]),
13990 			be32_to_cpu(header[6]));
13991 	return 0;
13992 drop:
13993 	lpfc_printf_log(phba, KERN_WARNING, LOG_ELS,
13994 			"2539 Dropped frame rctl:%s type:%s\n",
13995 			rctl_names[fc_hdr->fh_r_ctl],
13996 			type_names[fc_hdr->fh_type]);
13997 	return 1;
13998 }
13999 
14000 /**
14001  * lpfc_fc_hdr_get_vfi - Get the VFI from an FC frame
14002  * @fc_hdr: A pointer to the FC Header data (In Big Endian Format)
14003  *
14004  * This function processes the FC header to retrieve the VFI from the VF
14005  * header, if one exists. This function will return the VFI if one exists
14006  * or 0 if no VSAN Header exists.
14007  **/
14008 static uint32_t
14009 lpfc_fc_hdr_get_vfi(struct fc_frame_header *fc_hdr)
14010 {
14011 	struct fc_vft_header *fc_vft_hdr = (struct fc_vft_header *)fc_hdr;
14012 
14013 	if (fc_hdr->fh_r_ctl != FC_RCTL_VFTH)
14014 		return 0;
14015 	return bf_get(fc_vft_hdr_vf_id, fc_vft_hdr);
14016 }
14017 
14018 /**
14019  * lpfc_fc_frame_to_vport - Finds the vport that a frame is destined to
14020  * @phba: Pointer to the HBA structure to search for the vport on
14021  * @fc_hdr: A pointer to the FC Header data (In Big Endian Format)
14022  * @fcfi: The FC Fabric ID that the frame came from
14023  *
14024  * This function searches the @phba for a vport that matches the content of the
14025  * @fc_hdr passed in and the @fcfi. This function uses the @fc_hdr to fetch the
14026  * VFI, if the Virtual Fabric Tagging Header exists, and the DID. This function
14027  * returns the matching vport pointer or NULL if unable to match frame to a
14028  * vport.
14029  **/
14030 static struct lpfc_vport *
14031 lpfc_fc_frame_to_vport(struct lpfc_hba *phba, struct fc_frame_header *fc_hdr,
14032 		       uint16_t fcfi)
14033 {
14034 	struct lpfc_vport **vports;
14035 	struct lpfc_vport *vport = NULL;
14036 	int i;
14037 	uint32_t did = (fc_hdr->fh_d_id[0] << 16 |
14038 			fc_hdr->fh_d_id[1] << 8 |
14039 			fc_hdr->fh_d_id[2]);
14040 
14041 	if (did == Fabric_DID)
14042 		return phba->pport;
14043 	if ((phba->pport->fc_flag & FC_PT2PT) &&
14044 		!(phba->link_state == LPFC_HBA_READY))
14045 		return phba->pport;
14046 
14047 	vports = lpfc_create_vport_work_array(phba);
14048 	if (vports != NULL)
14049 		for (i = 0; i <= phba->max_vpi && vports[i] != NULL; i++) {
14050 			if (phba->fcf.fcfi == fcfi &&
14051 			    vports[i]->vfi == lpfc_fc_hdr_get_vfi(fc_hdr) &&
14052 			    vports[i]->fc_myDID == did) {
14053 				vport = vports[i];
14054 				break;
14055 			}
14056 		}
14057 	lpfc_destroy_vport_work_array(phba, vports);
14058 	return vport;
14059 }
14060 
14061 /**
14062  * lpfc_update_rcv_time_stamp - Update vport's rcv seq time stamp
14063  * @vport: The vport to work on.
14064  *
14065  * This function updates the receive sequence time stamp for this vport. The
14066  * receive sequence time stamp indicates the time that the last frame of the
14067  * the sequence that has been idle for the longest amount of time was received.
14068  * the driver uses this time stamp to indicate if any received sequences have
14069  * timed out.
14070  **/
14071 void
14072 lpfc_update_rcv_time_stamp(struct lpfc_vport *vport)
14073 {
14074 	struct lpfc_dmabuf *h_buf;
14075 	struct hbq_dmabuf *dmabuf = NULL;
14076 
14077 	/* get the oldest sequence on the rcv list */
14078 	h_buf = list_get_first(&vport->rcv_buffer_list,
14079 			       struct lpfc_dmabuf, list);
14080 	if (!h_buf)
14081 		return;
14082 	dmabuf = container_of(h_buf, struct hbq_dmabuf, hbuf);
14083 	vport->rcv_buffer_time_stamp = dmabuf->time_stamp;
14084 }
14085 
14086 /**
14087  * lpfc_cleanup_rcv_buffers - Cleans up all outstanding receive sequences.
14088  * @vport: The vport that the received sequences were sent to.
14089  *
14090  * This function cleans up all outstanding received sequences. This is called
14091  * by the driver when a link event or user action invalidates all the received
14092  * sequences.
14093  **/
14094 void
14095 lpfc_cleanup_rcv_buffers(struct lpfc_vport *vport)
14096 {
14097 	struct lpfc_dmabuf *h_buf, *hnext;
14098 	struct lpfc_dmabuf *d_buf, *dnext;
14099 	struct hbq_dmabuf *dmabuf = NULL;
14100 
14101 	/* start with the oldest sequence on the rcv list */
14102 	list_for_each_entry_safe(h_buf, hnext, &vport->rcv_buffer_list, list) {
14103 		dmabuf = container_of(h_buf, struct hbq_dmabuf, hbuf);
14104 		list_del_init(&dmabuf->hbuf.list);
14105 		list_for_each_entry_safe(d_buf, dnext,
14106 					 &dmabuf->dbuf.list, list) {
14107 			list_del_init(&d_buf->list);
14108 			lpfc_in_buf_free(vport->phba, d_buf);
14109 		}
14110 		lpfc_in_buf_free(vport->phba, &dmabuf->dbuf);
14111 	}
14112 }
14113 
14114 /**
14115  * lpfc_rcv_seq_check_edtov - Cleans up timed out receive sequences.
14116  * @vport: The vport that the received sequences were sent to.
14117  *
14118  * This function determines whether any received sequences have timed out by
14119  * first checking the vport's rcv_buffer_time_stamp. If this time_stamp
14120  * indicates that there is at least one timed out sequence this routine will
14121  * go through the received sequences one at a time from most inactive to most
14122  * active to determine which ones need to be cleaned up. Once it has determined
14123  * that a sequence needs to be cleaned up it will simply free up the resources
14124  * without sending an abort.
14125  **/
14126 void
14127 lpfc_rcv_seq_check_edtov(struct lpfc_vport *vport)
14128 {
14129 	struct lpfc_dmabuf *h_buf, *hnext;
14130 	struct lpfc_dmabuf *d_buf, *dnext;
14131 	struct hbq_dmabuf *dmabuf = NULL;
14132 	unsigned long timeout;
14133 	int abort_count = 0;
14134 
14135 	timeout = (msecs_to_jiffies(vport->phba->fc_edtov) +
14136 		   vport->rcv_buffer_time_stamp);
14137 	if (list_empty(&vport->rcv_buffer_list) ||
14138 	    time_before(jiffies, timeout))
14139 		return;
14140 	/* start with the oldest sequence on the rcv list */
14141 	list_for_each_entry_safe(h_buf, hnext, &vport->rcv_buffer_list, list) {
14142 		dmabuf = container_of(h_buf, struct hbq_dmabuf, hbuf);
14143 		timeout = (msecs_to_jiffies(vport->phba->fc_edtov) +
14144 			   dmabuf->time_stamp);
14145 		if (time_before(jiffies, timeout))
14146 			break;
14147 		abort_count++;
14148 		list_del_init(&dmabuf->hbuf.list);
14149 		list_for_each_entry_safe(d_buf, dnext,
14150 					 &dmabuf->dbuf.list, list) {
14151 			list_del_init(&d_buf->list);
14152 			lpfc_in_buf_free(vport->phba, d_buf);
14153 		}
14154 		lpfc_in_buf_free(vport->phba, &dmabuf->dbuf);
14155 	}
14156 	if (abort_count)
14157 		lpfc_update_rcv_time_stamp(vport);
14158 }
14159 
14160 /**
14161  * lpfc_fc_frame_add - Adds a frame to the vport's list of received sequences
14162  * @dmabuf: pointer to a dmabuf that describes the hdr and data of the FC frame
14163  *
14164  * This function searches through the existing incomplete sequences that have
14165  * been sent to this @vport. If the frame matches one of the incomplete
14166  * sequences then the dbuf in the @dmabuf is added to the list of frames that
14167  * make up that sequence. If no sequence is found that matches this frame then
14168  * the function will add the hbuf in the @dmabuf to the @vport's rcv_buffer_list
14169  * This function returns a pointer to the first dmabuf in the sequence list that
14170  * the frame was linked to.
14171  **/
14172 static struct hbq_dmabuf *
14173 lpfc_fc_frame_add(struct lpfc_vport *vport, struct hbq_dmabuf *dmabuf)
14174 {
14175 	struct fc_frame_header *new_hdr;
14176 	struct fc_frame_header *temp_hdr;
14177 	struct lpfc_dmabuf *d_buf;
14178 	struct lpfc_dmabuf *h_buf;
14179 	struct hbq_dmabuf *seq_dmabuf = NULL;
14180 	struct hbq_dmabuf *temp_dmabuf = NULL;
14181 
14182 	INIT_LIST_HEAD(&dmabuf->dbuf.list);
14183 	dmabuf->time_stamp = jiffies;
14184 	new_hdr = (struct fc_frame_header *)dmabuf->hbuf.virt;
14185 	/* Use the hdr_buf to find the sequence that this frame belongs to */
14186 	list_for_each_entry(h_buf, &vport->rcv_buffer_list, list) {
14187 		temp_hdr = (struct fc_frame_header *)h_buf->virt;
14188 		if ((temp_hdr->fh_seq_id != new_hdr->fh_seq_id) ||
14189 		    (temp_hdr->fh_ox_id != new_hdr->fh_ox_id) ||
14190 		    (memcmp(&temp_hdr->fh_s_id, &new_hdr->fh_s_id, 3)))
14191 			continue;
14192 		/* found a pending sequence that matches this frame */
14193 		seq_dmabuf = container_of(h_buf, struct hbq_dmabuf, hbuf);
14194 		break;
14195 	}
14196 	if (!seq_dmabuf) {
14197 		/*
14198 		 * This indicates first frame received for this sequence.
14199 		 * Queue the buffer on the vport's rcv_buffer_list.
14200 		 */
14201 		list_add_tail(&dmabuf->hbuf.list, &vport->rcv_buffer_list);
14202 		lpfc_update_rcv_time_stamp(vport);
14203 		return dmabuf;
14204 	}
14205 	temp_hdr = seq_dmabuf->hbuf.virt;
14206 	if (be16_to_cpu(new_hdr->fh_seq_cnt) <
14207 		be16_to_cpu(temp_hdr->fh_seq_cnt)) {
14208 		list_del_init(&seq_dmabuf->hbuf.list);
14209 		list_add_tail(&dmabuf->hbuf.list, &vport->rcv_buffer_list);
14210 		list_add_tail(&dmabuf->dbuf.list, &seq_dmabuf->dbuf.list);
14211 		lpfc_update_rcv_time_stamp(vport);
14212 		return dmabuf;
14213 	}
14214 	/* move this sequence to the tail to indicate a young sequence */
14215 	list_move_tail(&seq_dmabuf->hbuf.list, &vport->rcv_buffer_list);
14216 	seq_dmabuf->time_stamp = jiffies;
14217 	lpfc_update_rcv_time_stamp(vport);
14218 	if (list_empty(&seq_dmabuf->dbuf.list)) {
14219 		temp_hdr = dmabuf->hbuf.virt;
14220 		list_add_tail(&dmabuf->dbuf.list, &seq_dmabuf->dbuf.list);
14221 		return seq_dmabuf;
14222 	}
14223 	/* find the correct place in the sequence to insert this frame */
14224 	list_for_each_entry_reverse(d_buf, &seq_dmabuf->dbuf.list, list) {
14225 		temp_dmabuf = container_of(d_buf, struct hbq_dmabuf, dbuf);
14226 		temp_hdr = (struct fc_frame_header *)temp_dmabuf->hbuf.virt;
14227 		/*
14228 		 * If the frame's sequence count is greater than the frame on
14229 		 * the list then insert the frame right after this frame
14230 		 */
14231 		if (be16_to_cpu(new_hdr->fh_seq_cnt) >
14232 			be16_to_cpu(temp_hdr->fh_seq_cnt)) {
14233 			list_add(&dmabuf->dbuf.list, &temp_dmabuf->dbuf.list);
14234 			return seq_dmabuf;
14235 		}
14236 	}
14237 	return NULL;
14238 }
14239 
14240 /**
14241  * lpfc_sli4_abort_partial_seq - Abort partially assembled unsol sequence
14242  * @vport: pointer to a vitural port
14243  * @dmabuf: pointer to a dmabuf that describes the FC sequence
14244  *
14245  * This function tries to abort from the partially assembed sequence, described
14246  * by the information from basic abbort @dmabuf. It checks to see whether such
14247  * partially assembled sequence held by the driver. If so, it shall free up all
14248  * the frames from the partially assembled sequence.
14249  *
14250  * Return
14251  * true  -- if there is matching partially assembled sequence present and all
14252  *          the frames freed with the sequence;
14253  * false -- if there is no matching partially assembled sequence present so
14254  *          nothing got aborted in the lower layer driver
14255  **/
14256 static bool
14257 lpfc_sli4_abort_partial_seq(struct lpfc_vport *vport,
14258 			    struct hbq_dmabuf *dmabuf)
14259 {
14260 	struct fc_frame_header *new_hdr;
14261 	struct fc_frame_header *temp_hdr;
14262 	struct lpfc_dmabuf *d_buf, *n_buf, *h_buf;
14263 	struct hbq_dmabuf *seq_dmabuf = NULL;
14264 
14265 	/* Use the hdr_buf to find the sequence that matches this frame */
14266 	INIT_LIST_HEAD(&dmabuf->dbuf.list);
14267 	INIT_LIST_HEAD(&dmabuf->hbuf.list);
14268 	new_hdr = (struct fc_frame_header *)dmabuf->hbuf.virt;
14269 	list_for_each_entry(h_buf, &vport->rcv_buffer_list, list) {
14270 		temp_hdr = (struct fc_frame_header *)h_buf->virt;
14271 		if ((temp_hdr->fh_seq_id != new_hdr->fh_seq_id) ||
14272 		    (temp_hdr->fh_ox_id != new_hdr->fh_ox_id) ||
14273 		    (memcmp(&temp_hdr->fh_s_id, &new_hdr->fh_s_id, 3)))
14274 			continue;
14275 		/* found a pending sequence that matches this frame */
14276 		seq_dmabuf = container_of(h_buf, struct hbq_dmabuf, hbuf);
14277 		break;
14278 	}
14279 
14280 	/* Free up all the frames from the partially assembled sequence */
14281 	if (seq_dmabuf) {
14282 		list_for_each_entry_safe(d_buf, n_buf,
14283 					 &seq_dmabuf->dbuf.list, list) {
14284 			list_del_init(&d_buf->list);
14285 			lpfc_in_buf_free(vport->phba, d_buf);
14286 		}
14287 		return true;
14288 	}
14289 	return false;
14290 }
14291 
14292 /**
14293  * lpfc_sli4_abort_ulp_seq - Abort assembled unsol sequence from ulp
14294  * @vport: pointer to a vitural port
14295  * @dmabuf: pointer to a dmabuf that describes the FC sequence
14296  *
14297  * This function tries to abort from the assembed sequence from upper level
14298  * protocol, described by the information from basic abbort @dmabuf. It
14299  * checks to see whether such pending context exists at upper level protocol.
14300  * If so, it shall clean up the pending context.
14301  *
14302  * Return
14303  * true  -- if there is matching pending context of the sequence cleaned
14304  *          at ulp;
14305  * false -- if there is no matching pending context of the sequence present
14306  *          at ulp.
14307  **/
14308 static bool
14309 lpfc_sli4_abort_ulp_seq(struct lpfc_vport *vport, struct hbq_dmabuf *dmabuf)
14310 {
14311 	struct lpfc_hba *phba = vport->phba;
14312 	int handled;
14313 
14314 	/* Accepting abort at ulp with SLI4 only */
14315 	if (phba->sli_rev < LPFC_SLI_REV4)
14316 		return false;
14317 
14318 	/* Register all caring upper level protocols to attend abort */
14319 	handled = lpfc_ct_handle_unsol_abort(phba, dmabuf);
14320 	if (handled)
14321 		return true;
14322 
14323 	return false;
14324 }
14325 
14326 /**
14327  * lpfc_sli4_seq_abort_rsp_cmpl - BLS ABORT RSP seq abort iocb complete handler
14328  * @phba: Pointer to HBA context object.
14329  * @cmd_iocbq: pointer to the command iocbq structure.
14330  * @rsp_iocbq: pointer to the response iocbq structure.
14331  *
14332  * This function handles the sequence abort response iocb command complete
14333  * event. It properly releases the memory allocated to the sequence abort
14334  * accept iocb.
14335  **/
14336 static void
14337 lpfc_sli4_seq_abort_rsp_cmpl(struct lpfc_hba *phba,
14338 			     struct lpfc_iocbq *cmd_iocbq,
14339 			     struct lpfc_iocbq *rsp_iocbq)
14340 {
14341 	struct lpfc_nodelist *ndlp;
14342 
14343 	if (cmd_iocbq) {
14344 		ndlp = (struct lpfc_nodelist *)cmd_iocbq->context1;
14345 		lpfc_nlp_put(ndlp);
14346 		lpfc_nlp_not_used(ndlp);
14347 		lpfc_sli_release_iocbq(phba, cmd_iocbq);
14348 	}
14349 
14350 	/* Failure means BLS ABORT RSP did not get delivered to remote node*/
14351 	if (rsp_iocbq && rsp_iocbq->iocb.ulpStatus)
14352 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
14353 			"3154 BLS ABORT RSP failed, data:  x%x/x%x\n",
14354 			rsp_iocbq->iocb.ulpStatus,
14355 			rsp_iocbq->iocb.un.ulpWord[4]);
14356 }
14357 
14358 /**
14359  * lpfc_sli4_xri_inrange - check xri is in range of xris owned by driver.
14360  * @phba: Pointer to HBA context object.
14361  * @xri: xri id in transaction.
14362  *
14363  * This function validates the xri maps to the known range of XRIs allocated an
14364  * used by the driver.
14365  **/
14366 uint16_t
14367 lpfc_sli4_xri_inrange(struct lpfc_hba *phba,
14368 		      uint16_t xri)
14369 {
14370 	int i;
14371 
14372 	for (i = 0; i < phba->sli4_hba.max_cfg_param.max_xri; i++) {
14373 		if (xri == phba->sli4_hba.xri_ids[i])
14374 			return i;
14375 	}
14376 	return NO_XRI;
14377 }
14378 
14379 /**
14380  * lpfc_sli4_seq_abort_rsp - bls rsp to sequence abort
14381  * @phba: Pointer to HBA context object.
14382  * @fc_hdr: pointer to a FC frame header.
14383  *
14384  * This function sends a basic response to a previous unsol sequence abort
14385  * event after aborting the sequence handling.
14386  **/
14387 static void
14388 lpfc_sli4_seq_abort_rsp(struct lpfc_vport *vport,
14389 			struct fc_frame_header *fc_hdr, bool aborted)
14390 {
14391 	struct lpfc_hba *phba = vport->phba;
14392 	struct lpfc_iocbq *ctiocb = NULL;
14393 	struct lpfc_nodelist *ndlp;
14394 	uint16_t oxid, rxid, xri, lxri;
14395 	uint32_t sid, fctl;
14396 	IOCB_t *icmd;
14397 	int rc;
14398 
14399 	if (!lpfc_is_link_up(phba))
14400 		return;
14401 
14402 	sid = sli4_sid_from_fc_hdr(fc_hdr);
14403 	oxid = be16_to_cpu(fc_hdr->fh_ox_id);
14404 	rxid = be16_to_cpu(fc_hdr->fh_rx_id);
14405 
14406 	ndlp = lpfc_findnode_did(vport, sid);
14407 	if (!ndlp) {
14408 		ndlp = mempool_alloc(phba->nlp_mem_pool, GFP_KERNEL);
14409 		if (!ndlp) {
14410 			lpfc_printf_vlog(vport, KERN_WARNING, LOG_ELS,
14411 					 "1268 Failed to allocate ndlp for "
14412 					 "oxid:x%x SID:x%x\n", oxid, sid);
14413 			return;
14414 		}
14415 		lpfc_nlp_init(vport, ndlp, sid);
14416 		/* Put ndlp onto pport node list */
14417 		lpfc_enqueue_node(vport, ndlp);
14418 	} else if (!NLP_CHK_NODE_ACT(ndlp)) {
14419 		/* re-setup ndlp without removing from node list */
14420 		ndlp = lpfc_enable_node(vport, ndlp, NLP_STE_UNUSED_NODE);
14421 		if (!ndlp) {
14422 			lpfc_printf_vlog(vport, KERN_WARNING, LOG_ELS,
14423 					 "3275 Failed to active ndlp found "
14424 					 "for oxid:x%x SID:x%x\n", oxid, sid);
14425 			return;
14426 		}
14427 	}
14428 
14429 	/* Allocate buffer for rsp iocb */
14430 	ctiocb = lpfc_sli_get_iocbq(phba);
14431 	if (!ctiocb)
14432 		return;
14433 
14434 	/* Extract the F_CTL field from FC_HDR */
14435 	fctl = sli4_fctl_from_fc_hdr(fc_hdr);
14436 
14437 	icmd = &ctiocb->iocb;
14438 	icmd->un.xseq64.bdl.bdeSize = 0;
14439 	icmd->un.xseq64.bdl.ulpIoTag32 = 0;
14440 	icmd->un.xseq64.w5.hcsw.Dfctl = 0;
14441 	icmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_BA_ACC;
14442 	icmd->un.xseq64.w5.hcsw.Type = FC_TYPE_BLS;
14443 
14444 	/* Fill in the rest of iocb fields */
14445 	icmd->ulpCommand = CMD_XMIT_BLS_RSP64_CX;
14446 	icmd->ulpBdeCount = 0;
14447 	icmd->ulpLe = 1;
14448 	icmd->ulpClass = CLASS3;
14449 	icmd->ulpContext = phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
14450 	ctiocb->context1 = lpfc_nlp_get(ndlp);
14451 
14452 	ctiocb->iocb_cmpl = NULL;
14453 	ctiocb->vport = phba->pport;
14454 	ctiocb->iocb_cmpl = lpfc_sli4_seq_abort_rsp_cmpl;
14455 	ctiocb->sli4_lxritag = NO_XRI;
14456 	ctiocb->sli4_xritag = NO_XRI;
14457 
14458 	if (fctl & FC_FC_EX_CTX)
14459 		/* Exchange responder sent the abort so we
14460 		 * own the oxid.
14461 		 */
14462 		xri = oxid;
14463 	else
14464 		xri = rxid;
14465 	lxri = lpfc_sli4_xri_inrange(phba, xri);
14466 	if (lxri != NO_XRI)
14467 		lpfc_set_rrq_active(phba, ndlp, lxri,
14468 			(xri == oxid) ? rxid : oxid, 0);
14469 	/* For BA_ABTS from exchange responder, if the logical xri with
14470 	 * the oxid maps to the FCP XRI range, the port no longer has
14471 	 * that exchange context, send a BLS_RJT. Override the IOCB for
14472 	 * a BA_RJT.
14473 	 */
14474 	if ((fctl & FC_FC_EX_CTX) &&
14475 	    (lxri > lpfc_sli4_get_els_iocb_cnt(phba))) {
14476 		icmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_BA_RJT;
14477 		bf_set(lpfc_vndr_code, &icmd->un.bls_rsp, 0);
14478 		bf_set(lpfc_rsn_expln, &icmd->un.bls_rsp, FC_BA_RJT_INV_XID);
14479 		bf_set(lpfc_rsn_code, &icmd->un.bls_rsp, FC_BA_RJT_UNABLE);
14480 	}
14481 
14482 	/* If BA_ABTS failed to abort a partially assembled receive sequence,
14483 	 * the driver no longer has that exchange, send a BLS_RJT. Override
14484 	 * the IOCB for a BA_RJT.
14485 	 */
14486 	if (aborted == false) {
14487 		icmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_BA_RJT;
14488 		bf_set(lpfc_vndr_code, &icmd->un.bls_rsp, 0);
14489 		bf_set(lpfc_rsn_expln, &icmd->un.bls_rsp, FC_BA_RJT_INV_XID);
14490 		bf_set(lpfc_rsn_code, &icmd->un.bls_rsp, FC_BA_RJT_UNABLE);
14491 	}
14492 
14493 	if (fctl & FC_FC_EX_CTX) {
14494 		/* ABTS sent by responder to CT exchange, construction
14495 		 * of BA_ACC will use OX_ID from ABTS for the XRI_TAG
14496 		 * field and RX_ID from ABTS for RX_ID field.
14497 		 */
14498 		bf_set(lpfc_abts_orig, &icmd->un.bls_rsp, LPFC_ABTS_UNSOL_RSP);
14499 	} else {
14500 		/* ABTS sent by initiator to CT exchange, construction
14501 		 * of BA_ACC will need to allocate a new XRI as for the
14502 		 * XRI_TAG field.
14503 		 */
14504 		bf_set(lpfc_abts_orig, &icmd->un.bls_rsp, LPFC_ABTS_UNSOL_INT);
14505 	}
14506 	bf_set(lpfc_abts_rxid, &icmd->un.bls_rsp, rxid);
14507 	bf_set(lpfc_abts_oxid, &icmd->un.bls_rsp, oxid);
14508 
14509 	/* Xmit CT abts response on exchange <xid> */
14510 	lpfc_printf_vlog(vport, KERN_INFO, LOG_ELS,
14511 			 "1200 Send BLS cmd x%x on oxid x%x Data: x%x\n",
14512 			 icmd->un.xseq64.w5.hcsw.Rctl, oxid, phba->link_state);
14513 
14514 	rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, ctiocb, 0);
14515 	if (rc == IOCB_ERROR) {
14516 		lpfc_printf_vlog(vport, KERN_ERR, LOG_ELS,
14517 				 "2925 Failed to issue CT ABTS RSP x%x on "
14518 				 "xri x%x, Data x%x\n",
14519 				 icmd->un.xseq64.w5.hcsw.Rctl, oxid,
14520 				 phba->link_state);
14521 		lpfc_nlp_put(ndlp);
14522 		ctiocb->context1 = NULL;
14523 		lpfc_sli_release_iocbq(phba, ctiocb);
14524 	}
14525 }
14526 
14527 /**
14528  * lpfc_sli4_handle_unsol_abort - Handle sli-4 unsolicited abort event
14529  * @vport: Pointer to the vport on which this sequence was received
14530  * @dmabuf: pointer to a dmabuf that describes the FC sequence
14531  *
14532  * This function handles an SLI-4 unsolicited abort event. If the unsolicited
14533  * receive sequence is only partially assembed by the driver, it shall abort
14534  * the partially assembled frames for the sequence. Otherwise, if the
14535  * unsolicited receive sequence has been completely assembled and passed to
14536  * the Upper Layer Protocol (UPL), it then mark the per oxid status for the
14537  * unsolicited sequence has been aborted. After that, it will issue a basic
14538  * accept to accept the abort.
14539  **/
14540 void
14541 lpfc_sli4_handle_unsol_abort(struct lpfc_vport *vport,
14542 			     struct hbq_dmabuf *dmabuf)
14543 {
14544 	struct lpfc_hba *phba = vport->phba;
14545 	struct fc_frame_header fc_hdr;
14546 	uint32_t fctl;
14547 	bool aborted;
14548 
14549 	/* Make a copy of fc_hdr before the dmabuf being released */
14550 	memcpy(&fc_hdr, dmabuf->hbuf.virt, sizeof(struct fc_frame_header));
14551 	fctl = sli4_fctl_from_fc_hdr(&fc_hdr);
14552 
14553 	if (fctl & FC_FC_EX_CTX) {
14554 		/* ABTS by responder to exchange, no cleanup needed */
14555 		aborted = true;
14556 	} else {
14557 		/* ABTS by initiator to exchange, need to do cleanup */
14558 		aborted = lpfc_sli4_abort_partial_seq(vport, dmabuf);
14559 		if (aborted == false)
14560 			aborted = lpfc_sli4_abort_ulp_seq(vport, dmabuf);
14561 	}
14562 	lpfc_in_buf_free(phba, &dmabuf->dbuf);
14563 
14564 	/* Respond with BA_ACC or BA_RJT accordingly */
14565 	lpfc_sli4_seq_abort_rsp(vport, &fc_hdr, aborted);
14566 }
14567 
14568 /**
14569  * lpfc_seq_complete - Indicates if a sequence is complete
14570  * @dmabuf: pointer to a dmabuf that describes the FC sequence
14571  *
14572  * This function checks the sequence, starting with the frame described by
14573  * @dmabuf, to see if all the frames associated with this sequence are present.
14574  * the frames associated with this sequence are linked to the @dmabuf using the
14575  * dbuf list. This function looks for two major things. 1) That the first frame
14576  * has a sequence count of zero. 2) There is a frame with last frame of sequence
14577  * set. 3) That there are no holes in the sequence count. The function will
14578  * return 1 when the sequence is complete, otherwise it will return 0.
14579  **/
14580 static int
14581 lpfc_seq_complete(struct hbq_dmabuf *dmabuf)
14582 {
14583 	struct fc_frame_header *hdr;
14584 	struct lpfc_dmabuf *d_buf;
14585 	struct hbq_dmabuf *seq_dmabuf;
14586 	uint32_t fctl;
14587 	int seq_count = 0;
14588 
14589 	hdr = (struct fc_frame_header *)dmabuf->hbuf.virt;
14590 	/* make sure first fame of sequence has a sequence count of zero */
14591 	if (hdr->fh_seq_cnt != seq_count)
14592 		return 0;
14593 	fctl = (hdr->fh_f_ctl[0] << 16 |
14594 		hdr->fh_f_ctl[1] << 8 |
14595 		hdr->fh_f_ctl[2]);
14596 	/* If last frame of sequence we can return success. */
14597 	if (fctl & FC_FC_END_SEQ)
14598 		return 1;
14599 	list_for_each_entry(d_buf, &dmabuf->dbuf.list, list) {
14600 		seq_dmabuf = container_of(d_buf, struct hbq_dmabuf, dbuf);
14601 		hdr = (struct fc_frame_header *)seq_dmabuf->hbuf.virt;
14602 		/* If there is a hole in the sequence count then fail. */
14603 		if (++seq_count != be16_to_cpu(hdr->fh_seq_cnt))
14604 			return 0;
14605 		fctl = (hdr->fh_f_ctl[0] << 16 |
14606 			hdr->fh_f_ctl[1] << 8 |
14607 			hdr->fh_f_ctl[2]);
14608 		/* If last frame of sequence we can return success. */
14609 		if (fctl & FC_FC_END_SEQ)
14610 			return 1;
14611 	}
14612 	return 0;
14613 }
14614 
14615 /**
14616  * lpfc_prep_seq - Prep sequence for ULP processing
14617  * @vport: Pointer to the vport on which this sequence was received
14618  * @dmabuf: pointer to a dmabuf that describes the FC sequence
14619  *
14620  * This function takes a sequence, described by a list of frames, and creates
14621  * a list of iocbq structures to describe the sequence. This iocbq list will be
14622  * used to issue to the generic unsolicited sequence handler. This routine
14623  * returns a pointer to the first iocbq in the list. If the function is unable
14624  * to allocate an iocbq then it throw out the received frames that were not
14625  * able to be described and return a pointer to the first iocbq. If unable to
14626  * allocate any iocbqs (including the first) this function will return NULL.
14627  **/
14628 static struct lpfc_iocbq *
14629 lpfc_prep_seq(struct lpfc_vport *vport, struct hbq_dmabuf *seq_dmabuf)
14630 {
14631 	struct hbq_dmabuf *hbq_buf;
14632 	struct lpfc_dmabuf *d_buf, *n_buf;
14633 	struct lpfc_iocbq *first_iocbq, *iocbq;
14634 	struct fc_frame_header *fc_hdr;
14635 	uint32_t sid;
14636 	uint32_t len, tot_len;
14637 	struct ulp_bde64 *pbde;
14638 
14639 	fc_hdr = (struct fc_frame_header *)seq_dmabuf->hbuf.virt;
14640 	/* remove from receive buffer list */
14641 	list_del_init(&seq_dmabuf->hbuf.list);
14642 	lpfc_update_rcv_time_stamp(vport);
14643 	/* get the Remote Port's SID */
14644 	sid = sli4_sid_from_fc_hdr(fc_hdr);
14645 	tot_len = 0;
14646 	/* Get an iocbq struct to fill in. */
14647 	first_iocbq = lpfc_sli_get_iocbq(vport->phba);
14648 	if (first_iocbq) {
14649 		/* Initialize the first IOCB. */
14650 		first_iocbq->iocb.unsli3.rcvsli3.acc_len = 0;
14651 		first_iocbq->iocb.ulpStatus = IOSTAT_SUCCESS;
14652 
14653 		/* Check FC Header to see what TYPE of frame we are rcv'ing */
14654 		if (sli4_type_from_fc_hdr(fc_hdr) == FC_TYPE_ELS) {
14655 			first_iocbq->iocb.ulpCommand = CMD_IOCB_RCV_ELS64_CX;
14656 			first_iocbq->iocb.un.rcvels.parmRo =
14657 				sli4_did_from_fc_hdr(fc_hdr);
14658 			first_iocbq->iocb.ulpPU = PARM_NPIV_DID;
14659 		} else
14660 			first_iocbq->iocb.ulpCommand = CMD_IOCB_RCV_SEQ64_CX;
14661 		first_iocbq->iocb.ulpContext = NO_XRI;
14662 		first_iocbq->iocb.unsli3.rcvsli3.ox_id =
14663 			be16_to_cpu(fc_hdr->fh_ox_id);
14664 		/* iocbq is prepped for internal consumption.  Physical vpi. */
14665 		first_iocbq->iocb.unsli3.rcvsli3.vpi =
14666 			vport->phba->vpi_ids[vport->vpi];
14667 		/* put the first buffer into the first IOCBq */
14668 		first_iocbq->context2 = &seq_dmabuf->dbuf;
14669 		first_iocbq->context3 = NULL;
14670 		first_iocbq->iocb.ulpBdeCount = 1;
14671 		first_iocbq->iocb.un.cont64[0].tus.f.bdeSize =
14672 							LPFC_DATA_BUF_SIZE;
14673 		first_iocbq->iocb.un.rcvels.remoteID = sid;
14674 		tot_len = bf_get(lpfc_rcqe_length,
14675 				       &seq_dmabuf->cq_event.cqe.rcqe_cmpl);
14676 		first_iocbq->iocb.unsli3.rcvsli3.acc_len = tot_len;
14677 	}
14678 	iocbq = first_iocbq;
14679 	/*
14680 	 * Each IOCBq can have two Buffers assigned, so go through the list
14681 	 * of buffers for this sequence and save two buffers in each IOCBq
14682 	 */
14683 	list_for_each_entry_safe(d_buf, n_buf, &seq_dmabuf->dbuf.list, list) {
14684 		if (!iocbq) {
14685 			lpfc_in_buf_free(vport->phba, d_buf);
14686 			continue;
14687 		}
14688 		if (!iocbq->context3) {
14689 			iocbq->context3 = d_buf;
14690 			iocbq->iocb.ulpBdeCount++;
14691 			pbde = (struct ulp_bde64 *)
14692 					&iocbq->iocb.unsli3.sli3Words[4];
14693 			pbde->tus.f.bdeSize = LPFC_DATA_BUF_SIZE;
14694 
14695 			/* We need to get the size out of the right CQE */
14696 			hbq_buf = container_of(d_buf, struct hbq_dmabuf, dbuf);
14697 			len = bf_get(lpfc_rcqe_length,
14698 				       &hbq_buf->cq_event.cqe.rcqe_cmpl);
14699 			iocbq->iocb.unsli3.rcvsli3.acc_len += len;
14700 			tot_len += len;
14701 		} else {
14702 			iocbq = lpfc_sli_get_iocbq(vport->phba);
14703 			if (!iocbq) {
14704 				if (first_iocbq) {
14705 					first_iocbq->iocb.ulpStatus =
14706 							IOSTAT_FCP_RSP_ERROR;
14707 					first_iocbq->iocb.un.ulpWord[4] =
14708 							IOERR_NO_RESOURCES;
14709 				}
14710 				lpfc_in_buf_free(vport->phba, d_buf);
14711 				continue;
14712 			}
14713 			iocbq->context2 = d_buf;
14714 			iocbq->context3 = NULL;
14715 			iocbq->iocb.ulpBdeCount = 1;
14716 			iocbq->iocb.un.cont64[0].tus.f.bdeSize =
14717 							LPFC_DATA_BUF_SIZE;
14718 
14719 			/* We need to get the size out of the right CQE */
14720 			hbq_buf = container_of(d_buf, struct hbq_dmabuf, dbuf);
14721 			len = bf_get(lpfc_rcqe_length,
14722 				       &hbq_buf->cq_event.cqe.rcqe_cmpl);
14723 			tot_len += len;
14724 			iocbq->iocb.unsli3.rcvsli3.acc_len = tot_len;
14725 
14726 			iocbq->iocb.un.rcvels.remoteID = sid;
14727 			list_add_tail(&iocbq->list, &first_iocbq->list);
14728 		}
14729 	}
14730 	return first_iocbq;
14731 }
14732 
14733 static void
14734 lpfc_sli4_send_seq_to_ulp(struct lpfc_vport *vport,
14735 			  struct hbq_dmabuf *seq_dmabuf)
14736 {
14737 	struct fc_frame_header *fc_hdr;
14738 	struct lpfc_iocbq *iocbq, *curr_iocb, *next_iocb;
14739 	struct lpfc_hba *phba = vport->phba;
14740 
14741 	fc_hdr = (struct fc_frame_header *)seq_dmabuf->hbuf.virt;
14742 	iocbq = lpfc_prep_seq(vport, seq_dmabuf);
14743 	if (!iocbq) {
14744 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
14745 				"2707 Ring %d handler: Failed to allocate "
14746 				"iocb Rctl x%x Type x%x received\n",
14747 				LPFC_ELS_RING,
14748 				fc_hdr->fh_r_ctl, fc_hdr->fh_type);
14749 		return;
14750 	}
14751 	if (!lpfc_complete_unsol_iocb(phba,
14752 				      &phba->sli.ring[LPFC_ELS_RING],
14753 				      iocbq, fc_hdr->fh_r_ctl,
14754 				      fc_hdr->fh_type))
14755 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
14756 				"2540 Ring %d handler: unexpected Rctl "
14757 				"x%x Type x%x received\n",
14758 				LPFC_ELS_RING,
14759 				fc_hdr->fh_r_ctl, fc_hdr->fh_type);
14760 
14761 	/* Free iocb created in lpfc_prep_seq */
14762 	list_for_each_entry_safe(curr_iocb, next_iocb,
14763 		&iocbq->list, list) {
14764 		list_del_init(&curr_iocb->list);
14765 		lpfc_sli_release_iocbq(phba, curr_iocb);
14766 	}
14767 	lpfc_sli_release_iocbq(phba, iocbq);
14768 }
14769 
14770 /**
14771  * lpfc_sli4_handle_received_buffer - Handle received buffers from firmware
14772  * @phba: Pointer to HBA context object.
14773  *
14774  * This function is called with no lock held. This function processes all
14775  * the received buffers and gives it to upper layers when a received buffer
14776  * indicates that it is the final frame in the sequence. The interrupt
14777  * service routine processes received buffers at interrupt contexts and adds
14778  * received dma buffers to the rb_pend_list queue and signals the worker thread.
14779  * Worker thread calls lpfc_sli4_handle_received_buffer, which will call the
14780  * appropriate receive function when the final frame in a sequence is received.
14781  **/
14782 void
14783 lpfc_sli4_handle_received_buffer(struct lpfc_hba *phba,
14784 				 struct hbq_dmabuf *dmabuf)
14785 {
14786 	struct hbq_dmabuf *seq_dmabuf;
14787 	struct fc_frame_header *fc_hdr;
14788 	struct lpfc_vport *vport;
14789 	uint32_t fcfi;
14790 	uint32_t did;
14791 
14792 	/* Process each received buffer */
14793 	fc_hdr = (struct fc_frame_header *)dmabuf->hbuf.virt;
14794 	/* check to see if this a valid type of frame */
14795 	if (lpfc_fc_frame_check(phba, fc_hdr)) {
14796 		lpfc_in_buf_free(phba, &dmabuf->dbuf);
14797 		return;
14798 	}
14799 	if ((bf_get(lpfc_cqe_code,
14800 		    &dmabuf->cq_event.cqe.rcqe_cmpl) == CQE_CODE_RECEIVE_V1))
14801 		fcfi = bf_get(lpfc_rcqe_fcf_id_v1,
14802 			      &dmabuf->cq_event.cqe.rcqe_cmpl);
14803 	else
14804 		fcfi = bf_get(lpfc_rcqe_fcf_id,
14805 			      &dmabuf->cq_event.cqe.rcqe_cmpl);
14806 
14807 	vport = lpfc_fc_frame_to_vport(phba, fc_hdr, fcfi);
14808 	if (!vport) {
14809 		/* throw out the frame */
14810 		lpfc_in_buf_free(phba, &dmabuf->dbuf);
14811 		return;
14812 	}
14813 
14814 	/* d_id this frame is directed to */
14815 	did = sli4_did_from_fc_hdr(fc_hdr);
14816 
14817 	/* vport is registered unless we rcv a FLOGI directed to Fabric_DID */
14818 	if (!(vport->vpi_state & LPFC_VPI_REGISTERED) &&
14819 		(did != Fabric_DID)) {
14820 		/*
14821 		 * Throw out the frame if we are not pt2pt.
14822 		 * The pt2pt protocol allows for discovery frames
14823 		 * to be received without a registered VPI.
14824 		 */
14825 		if (!(vport->fc_flag & FC_PT2PT) ||
14826 			(phba->link_state == LPFC_HBA_READY)) {
14827 			lpfc_in_buf_free(phba, &dmabuf->dbuf);
14828 			return;
14829 		}
14830 	}
14831 
14832 	/* Handle the basic abort sequence (BA_ABTS) event */
14833 	if (fc_hdr->fh_r_ctl == FC_RCTL_BA_ABTS) {
14834 		lpfc_sli4_handle_unsol_abort(vport, dmabuf);
14835 		return;
14836 	}
14837 
14838 	/* Link this frame */
14839 	seq_dmabuf = lpfc_fc_frame_add(vport, dmabuf);
14840 	if (!seq_dmabuf) {
14841 		/* unable to add frame to vport - throw it out */
14842 		lpfc_in_buf_free(phba, &dmabuf->dbuf);
14843 		return;
14844 	}
14845 	/* If not last frame in sequence continue processing frames. */
14846 	if (!lpfc_seq_complete(seq_dmabuf))
14847 		return;
14848 
14849 	/* Send the complete sequence to the upper layer protocol */
14850 	lpfc_sli4_send_seq_to_ulp(vport, seq_dmabuf);
14851 }
14852 
14853 /**
14854  * lpfc_sli4_post_all_rpi_hdrs - Post the rpi header memory region to the port
14855  * @phba: pointer to lpfc hba data structure.
14856  *
14857  * This routine is invoked to post rpi header templates to the
14858  * HBA consistent with the SLI-4 interface spec.  This routine
14859  * posts a SLI4_PAGE_SIZE memory region to the port to hold up to
14860  * SLI4_PAGE_SIZE modulo 64 rpi context headers.
14861  *
14862  * This routine does not require any locks.  It's usage is expected
14863  * to be driver load or reset recovery when the driver is
14864  * sequential.
14865  *
14866  * Return codes
14867  * 	0 - successful
14868  *      -EIO - The mailbox failed to complete successfully.
14869  * 	When this error occurs, the driver is not guaranteed
14870  *	to have any rpi regions posted to the device and
14871  *	must either attempt to repost the regions or take a
14872  *	fatal error.
14873  **/
14874 int
14875 lpfc_sli4_post_all_rpi_hdrs(struct lpfc_hba *phba)
14876 {
14877 	struct lpfc_rpi_hdr *rpi_page;
14878 	uint32_t rc = 0;
14879 	uint16_t lrpi = 0;
14880 
14881 	/* SLI4 ports that support extents do not require RPI headers. */
14882 	if (!phba->sli4_hba.rpi_hdrs_in_use)
14883 		goto exit;
14884 	if (phba->sli4_hba.extents_in_use)
14885 		return -EIO;
14886 
14887 	list_for_each_entry(rpi_page, &phba->sli4_hba.lpfc_rpi_hdr_list, list) {
14888 		/*
14889 		 * Assign the rpi headers a physical rpi only if the driver
14890 		 * has not initialized those resources.  A port reset only
14891 		 * needs the headers posted.
14892 		 */
14893 		if (bf_get(lpfc_rpi_rsrc_rdy, &phba->sli4_hba.sli4_flags) !=
14894 		    LPFC_RPI_RSRC_RDY)
14895 			rpi_page->start_rpi = phba->sli4_hba.rpi_ids[lrpi];
14896 
14897 		rc = lpfc_sli4_post_rpi_hdr(phba, rpi_page);
14898 		if (rc != MBX_SUCCESS) {
14899 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
14900 					"2008 Error %d posting all rpi "
14901 					"headers\n", rc);
14902 			rc = -EIO;
14903 			break;
14904 		}
14905 	}
14906 
14907  exit:
14908 	bf_set(lpfc_rpi_rsrc_rdy, &phba->sli4_hba.sli4_flags,
14909 	       LPFC_RPI_RSRC_RDY);
14910 	return rc;
14911 }
14912 
14913 /**
14914  * lpfc_sli4_post_rpi_hdr - Post an rpi header memory region to the port
14915  * @phba: pointer to lpfc hba data structure.
14916  * @rpi_page:  pointer to the rpi memory region.
14917  *
14918  * This routine is invoked to post a single rpi header to the
14919  * HBA consistent with the SLI-4 interface spec.  This memory region
14920  * maps up to 64 rpi context regions.
14921  *
14922  * Return codes
14923  * 	0 - successful
14924  * 	-ENOMEM - No available memory
14925  *      -EIO - The mailbox failed to complete successfully.
14926  **/
14927 int
14928 lpfc_sli4_post_rpi_hdr(struct lpfc_hba *phba, struct lpfc_rpi_hdr *rpi_page)
14929 {
14930 	LPFC_MBOXQ_t *mboxq;
14931 	struct lpfc_mbx_post_hdr_tmpl *hdr_tmpl;
14932 	uint32_t rc = 0;
14933 	uint32_t shdr_status, shdr_add_status;
14934 	union lpfc_sli4_cfg_shdr *shdr;
14935 
14936 	/* SLI4 ports that support extents do not require RPI headers. */
14937 	if (!phba->sli4_hba.rpi_hdrs_in_use)
14938 		return rc;
14939 	if (phba->sli4_hba.extents_in_use)
14940 		return -EIO;
14941 
14942 	/* The port is notified of the header region via a mailbox command. */
14943 	mboxq = (LPFC_MBOXQ_t *) mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
14944 	if (!mboxq) {
14945 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
14946 				"2001 Unable to allocate memory for issuing "
14947 				"SLI_CONFIG_SPECIAL mailbox command\n");
14948 		return -ENOMEM;
14949 	}
14950 
14951 	/* Post all rpi memory regions to the port. */
14952 	hdr_tmpl = &mboxq->u.mqe.un.hdr_tmpl;
14953 	lpfc_sli4_config(phba, mboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
14954 			 LPFC_MBOX_OPCODE_FCOE_POST_HDR_TEMPLATE,
14955 			 sizeof(struct lpfc_mbx_post_hdr_tmpl) -
14956 			 sizeof(struct lpfc_sli4_cfg_mhdr),
14957 			 LPFC_SLI4_MBX_EMBED);
14958 
14959 
14960 	/* Post the physical rpi to the port for this rpi header. */
14961 	bf_set(lpfc_mbx_post_hdr_tmpl_rpi_offset, hdr_tmpl,
14962 	       rpi_page->start_rpi);
14963 	bf_set(lpfc_mbx_post_hdr_tmpl_page_cnt,
14964 	       hdr_tmpl, rpi_page->page_count);
14965 
14966 	hdr_tmpl->rpi_paddr_lo = putPaddrLow(rpi_page->dmabuf->phys);
14967 	hdr_tmpl->rpi_paddr_hi = putPaddrHigh(rpi_page->dmabuf->phys);
14968 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
14969 	shdr = (union lpfc_sli4_cfg_shdr *) &hdr_tmpl->header.cfg_shdr;
14970 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
14971 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
14972 	if (rc != MBX_TIMEOUT)
14973 		mempool_free(mboxq, phba->mbox_mem_pool);
14974 	if (shdr_status || shdr_add_status || rc) {
14975 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
14976 				"2514 POST_RPI_HDR mailbox failed with "
14977 				"status x%x add_status x%x, mbx status x%x\n",
14978 				shdr_status, shdr_add_status, rc);
14979 		rc = -ENXIO;
14980 	}
14981 	return rc;
14982 }
14983 
14984 /**
14985  * lpfc_sli4_alloc_rpi - Get an available rpi in the device's range
14986  * @phba: pointer to lpfc hba data structure.
14987  *
14988  * This routine is invoked to post rpi header templates to the
14989  * HBA consistent with the SLI-4 interface spec.  This routine
14990  * posts a SLI4_PAGE_SIZE memory region to the port to hold up to
14991  * SLI4_PAGE_SIZE modulo 64 rpi context headers.
14992  *
14993  * Returns
14994  * 	A nonzero rpi defined as rpi_base <= rpi < max_rpi if successful
14995  * 	LPFC_RPI_ALLOC_ERROR if no rpis are available.
14996  **/
14997 int
14998 lpfc_sli4_alloc_rpi(struct lpfc_hba *phba)
14999 {
15000 	unsigned long rpi;
15001 	uint16_t max_rpi, rpi_limit;
15002 	uint16_t rpi_remaining, lrpi = 0;
15003 	struct lpfc_rpi_hdr *rpi_hdr;
15004 
15005 	max_rpi = phba->sli4_hba.max_cfg_param.max_rpi;
15006 	rpi_limit = phba->sli4_hba.next_rpi;
15007 
15008 	/*
15009 	 * Fetch the next logical rpi.  Because this index is logical,
15010 	 * the  driver starts at 0 each time.
15011 	 */
15012 	spin_lock_irq(&phba->hbalock);
15013 	rpi = find_next_zero_bit(phba->sli4_hba.rpi_bmask, rpi_limit, 0);
15014 	if (rpi >= rpi_limit)
15015 		rpi = LPFC_RPI_ALLOC_ERROR;
15016 	else {
15017 		set_bit(rpi, phba->sli4_hba.rpi_bmask);
15018 		phba->sli4_hba.max_cfg_param.rpi_used++;
15019 		phba->sli4_hba.rpi_count++;
15020 	}
15021 
15022 	/*
15023 	 * Don't try to allocate more rpi header regions if the device limit
15024 	 * has been exhausted.
15025 	 */
15026 	if ((rpi == LPFC_RPI_ALLOC_ERROR) &&
15027 	    (phba->sli4_hba.rpi_count >= max_rpi)) {
15028 		spin_unlock_irq(&phba->hbalock);
15029 		return rpi;
15030 	}
15031 
15032 	/*
15033 	 * RPI header postings are not required for SLI4 ports capable of
15034 	 * extents.
15035 	 */
15036 	if (!phba->sli4_hba.rpi_hdrs_in_use) {
15037 		spin_unlock_irq(&phba->hbalock);
15038 		return rpi;
15039 	}
15040 
15041 	/*
15042 	 * If the driver is running low on rpi resources, allocate another
15043 	 * page now.  Note that the next_rpi value is used because
15044 	 * it represents how many are actually in use whereas max_rpi notes
15045 	 * how many are supported max by the device.
15046 	 */
15047 	rpi_remaining = phba->sli4_hba.next_rpi - phba->sli4_hba.rpi_count;
15048 	spin_unlock_irq(&phba->hbalock);
15049 	if (rpi_remaining < LPFC_RPI_LOW_WATER_MARK) {
15050 		rpi_hdr = lpfc_sli4_create_rpi_hdr(phba);
15051 		if (!rpi_hdr) {
15052 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
15053 					"2002 Error Could not grow rpi "
15054 					"count\n");
15055 		} else {
15056 			lrpi = rpi_hdr->start_rpi;
15057 			rpi_hdr->start_rpi = phba->sli4_hba.rpi_ids[lrpi];
15058 			lpfc_sli4_post_rpi_hdr(phba, rpi_hdr);
15059 		}
15060 	}
15061 
15062 	return rpi;
15063 }
15064 
15065 /**
15066  * lpfc_sli4_free_rpi - Release an rpi for reuse.
15067  * @phba: pointer to lpfc hba data structure.
15068  *
15069  * This routine is invoked to release an rpi to the pool of
15070  * available rpis maintained by the driver.
15071  **/
15072 void
15073 __lpfc_sli4_free_rpi(struct lpfc_hba *phba, int rpi)
15074 {
15075 	if (test_and_clear_bit(rpi, phba->sli4_hba.rpi_bmask)) {
15076 		phba->sli4_hba.rpi_count--;
15077 		phba->sli4_hba.max_cfg_param.rpi_used--;
15078 	}
15079 }
15080 
15081 /**
15082  * lpfc_sli4_free_rpi - Release an rpi for reuse.
15083  * @phba: pointer to lpfc hba data structure.
15084  *
15085  * This routine is invoked to release an rpi to the pool of
15086  * available rpis maintained by the driver.
15087  **/
15088 void
15089 lpfc_sli4_free_rpi(struct lpfc_hba *phba, int rpi)
15090 {
15091 	spin_lock_irq(&phba->hbalock);
15092 	__lpfc_sli4_free_rpi(phba, rpi);
15093 	spin_unlock_irq(&phba->hbalock);
15094 }
15095 
15096 /**
15097  * lpfc_sli4_remove_rpis - Remove the rpi bitmask region
15098  * @phba: pointer to lpfc hba data structure.
15099  *
15100  * This routine is invoked to remove the memory region that
15101  * provided rpi via a bitmask.
15102  **/
15103 void
15104 lpfc_sli4_remove_rpis(struct lpfc_hba *phba)
15105 {
15106 	kfree(phba->sli4_hba.rpi_bmask);
15107 	kfree(phba->sli4_hba.rpi_ids);
15108 	bf_set(lpfc_rpi_rsrc_rdy, &phba->sli4_hba.sli4_flags, 0);
15109 }
15110 
15111 /**
15112  * lpfc_sli4_resume_rpi - Remove the rpi bitmask region
15113  * @phba: pointer to lpfc hba data structure.
15114  *
15115  * This routine is invoked to remove the memory region that
15116  * provided rpi via a bitmask.
15117  **/
15118 int
15119 lpfc_sli4_resume_rpi(struct lpfc_nodelist *ndlp,
15120 	void (*cmpl)(struct lpfc_hba *, LPFC_MBOXQ_t *), void *arg)
15121 {
15122 	LPFC_MBOXQ_t *mboxq;
15123 	struct lpfc_hba *phba = ndlp->phba;
15124 	int rc;
15125 
15126 	/* The port is notified of the header region via a mailbox command. */
15127 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15128 	if (!mboxq)
15129 		return -ENOMEM;
15130 
15131 	/* Post all rpi memory regions to the port. */
15132 	lpfc_resume_rpi(mboxq, ndlp);
15133 	if (cmpl) {
15134 		mboxq->mbox_cmpl = cmpl;
15135 		mboxq->context1 = arg;
15136 		mboxq->context2 = ndlp;
15137 	} else
15138 		mboxq->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
15139 	mboxq->vport = ndlp->vport;
15140 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_NOWAIT);
15141 	if (rc == MBX_NOT_FINISHED) {
15142 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
15143 				"2010 Resume RPI Mailbox failed "
15144 				"status %d, mbxStatus x%x\n", rc,
15145 				bf_get(lpfc_mqe_status, &mboxq->u.mqe));
15146 		mempool_free(mboxq, phba->mbox_mem_pool);
15147 		return -EIO;
15148 	}
15149 	return 0;
15150 }
15151 
15152 /**
15153  * lpfc_sli4_init_vpi - Initialize a vpi with the port
15154  * @vport: Pointer to the vport for which the vpi is being initialized
15155  *
15156  * This routine is invoked to activate a vpi with the port.
15157  *
15158  * Returns:
15159  *    0 success
15160  *    -Evalue otherwise
15161  **/
15162 int
15163 lpfc_sli4_init_vpi(struct lpfc_vport *vport)
15164 {
15165 	LPFC_MBOXQ_t *mboxq;
15166 	int rc = 0;
15167 	int retval = MBX_SUCCESS;
15168 	uint32_t mbox_tmo;
15169 	struct lpfc_hba *phba = vport->phba;
15170 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15171 	if (!mboxq)
15172 		return -ENOMEM;
15173 	lpfc_init_vpi(phba, mboxq, vport->vpi);
15174 	mbox_tmo = lpfc_mbox_tmo_val(phba, mboxq);
15175 	rc = lpfc_sli_issue_mbox_wait(phba, mboxq, mbox_tmo);
15176 	if (rc != MBX_SUCCESS) {
15177 		lpfc_printf_vlog(vport, KERN_ERR, LOG_SLI,
15178 				"2022 INIT VPI Mailbox failed "
15179 				"status %d, mbxStatus x%x\n", rc,
15180 				bf_get(lpfc_mqe_status, &mboxq->u.mqe));
15181 		retval = -EIO;
15182 	}
15183 	if (rc != MBX_TIMEOUT)
15184 		mempool_free(mboxq, vport->phba->mbox_mem_pool);
15185 
15186 	return retval;
15187 }
15188 
15189 /**
15190  * lpfc_mbx_cmpl_add_fcf_record - add fcf mbox completion handler.
15191  * @phba: pointer to lpfc hba data structure.
15192  * @mboxq: Pointer to mailbox object.
15193  *
15194  * This routine is invoked to manually add a single FCF record. The caller
15195  * must pass a completely initialized FCF_Record.  This routine takes
15196  * care of the nonembedded mailbox operations.
15197  **/
15198 static void
15199 lpfc_mbx_cmpl_add_fcf_record(struct lpfc_hba *phba, LPFC_MBOXQ_t *mboxq)
15200 {
15201 	void *virt_addr;
15202 	union lpfc_sli4_cfg_shdr *shdr;
15203 	uint32_t shdr_status, shdr_add_status;
15204 
15205 	virt_addr = mboxq->sge_array->addr[0];
15206 	/* The IOCTL status is embedded in the mailbox subheader. */
15207 	shdr = (union lpfc_sli4_cfg_shdr *) virt_addr;
15208 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
15209 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
15210 
15211 	if ((shdr_status || shdr_add_status) &&
15212 		(shdr_status != STATUS_FCF_IN_USE))
15213 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15214 			"2558 ADD_FCF_RECORD mailbox failed with "
15215 			"status x%x add_status x%x\n",
15216 			shdr_status, shdr_add_status);
15217 
15218 	lpfc_sli4_mbox_cmd_free(phba, mboxq);
15219 }
15220 
15221 /**
15222  * lpfc_sli4_add_fcf_record - Manually add an FCF Record.
15223  * @phba: pointer to lpfc hba data structure.
15224  * @fcf_record:  pointer to the initialized fcf record to add.
15225  *
15226  * This routine is invoked to manually add a single FCF record. The caller
15227  * must pass a completely initialized FCF_Record.  This routine takes
15228  * care of the nonembedded mailbox operations.
15229  **/
15230 int
15231 lpfc_sli4_add_fcf_record(struct lpfc_hba *phba, struct fcf_record *fcf_record)
15232 {
15233 	int rc = 0;
15234 	LPFC_MBOXQ_t *mboxq;
15235 	uint8_t *bytep;
15236 	void *virt_addr;
15237 	dma_addr_t phys_addr;
15238 	struct lpfc_mbx_sge sge;
15239 	uint32_t alloc_len, req_len;
15240 	uint32_t fcfindex;
15241 
15242 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15243 	if (!mboxq) {
15244 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15245 			"2009 Failed to allocate mbox for ADD_FCF cmd\n");
15246 		return -ENOMEM;
15247 	}
15248 
15249 	req_len = sizeof(struct fcf_record) + sizeof(union lpfc_sli4_cfg_shdr) +
15250 		  sizeof(uint32_t);
15251 
15252 	/* Allocate DMA memory and set up the non-embedded mailbox command */
15253 	alloc_len = lpfc_sli4_config(phba, mboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
15254 				     LPFC_MBOX_OPCODE_FCOE_ADD_FCF,
15255 				     req_len, LPFC_SLI4_MBX_NEMBED);
15256 	if (alloc_len < req_len) {
15257 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15258 			"2523 Allocated DMA memory size (x%x) is "
15259 			"less than the requested DMA memory "
15260 			"size (x%x)\n", alloc_len, req_len);
15261 		lpfc_sli4_mbox_cmd_free(phba, mboxq);
15262 		return -ENOMEM;
15263 	}
15264 
15265 	/*
15266 	 * Get the first SGE entry from the non-embedded DMA memory.  This
15267 	 * routine only uses a single SGE.
15268 	 */
15269 	lpfc_sli4_mbx_sge_get(mboxq, 0, &sge);
15270 	phys_addr = getPaddr(sge.pa_hi, sge.pa_lo);
15271 	virt_addr = mboxq->sge_array->addr[0];
15272 	/*
15273 	 * Configure the FCF record for FCFI 0.  This is the driver's
15274 	 * hardcoded default and gets used in nonFIP mode.
15275 	 */
15276 	fcfindex = bf_get(lpfc_fcf_record_fcf_index, fcf_record);
15277 	bytep = virt_addr + sizeof(union lpfc_sli4_cfg_shdr);
15278 	lpfc_sli_pcimem_bcopy(&fcfindex, bytep, sizeof(uint32_t));
15279 
15280 	/*
15281 	 * Copy the fcf_index and the FCF Record Data. The data starts after
15282 	 * the FCoE header plus word10. The data copy needs to be endian
15283 	 * correct.
15284 	 */
15285 	bytep += sizeof(uint32_t);
15286 	lpfc_sli_pcimem_bcopy(fcf_record, bytep, sizeof(struct fcf_record));
15287 	mboxq->vport = phba->pport;
15288 	mboxq->mbox_cmpl = lpfc_mbx_cmpl_add_fcf_record;
15289 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_NOWAIT);
15290 	if (rc == MBX_NOT_FINISHED) {
15291 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15292 			"2515 ADD_FCF_RECORD mailbox failed with "
15293 			"status 0x%x\n", rc);
15294 		lpfc_sli4_mbox_cmd_free(phba, mboxq);
15295 		rc = -EIO;
15296 	} else
15297 		rc = 0;
15298 
15299 	return rc;
15300 }
15301 
15302 /**
15303  * lpfc_sli4_build_dflt_fcf_record - Build the driver's default FCF Record.
15304  * @phba: pointer to lpfc hba data structure.
15305  * @fcf_record:  pointer to the fcf record to write the default data.
15306  * @fcf_index: FCF table entry index.
15307  *
15308  * This routine is invoked to build the driver's default FCF record.  The
15309  * values used are hardcoded.  This routine handles memory initialization.
15310  *
15311  **/
15312 void
15313 lpfc_sli4_build_dflt_fcf_record(struct lpfc_hba *phba,
15314 				struct fcf_record *fcf_record,
15315 				uint16_t fcf_index)
15316 {
15317 	memset(fcf_record, 0, sizeof(struct fcf_record));
15318 	fcf_record->max_rcv_size = LPFC_FCOE_MAX_RCV_SIZE;
15319 	fcf_record->fka_adv_period = LPFC_FCOE_FKA_ADV_PER;
15320 	fcf_record->fip_priority = LPFC_FCOE_FIP_PRIORITY;
15321 	bf_set(lpfc_fcf_record_mac_0, fcf_record, phba->fc_map[0]);
15322 	bf_set(lpfc_fcf_record_mac_1, fcf_record, phba->fc_map[1]);
15323 	bf_set(lpfc_fcf_record_mac_2, fcf_record, phba->fc_map[2]);
15324 	bf_set(lpfc_fcf_record_mac_3, fcf_record, LPFC_FCOE_FCF_MAC3);
15325 	bf_set(lpfc_fcf_record_mac_4, fcf_record, LPFC_FCOE_FCF_MAC4);
15326 	bf_set(lpfc_fcf_record_mac_5, fcf_record, LPFC_FCOE_FCF_MAC5);
15327 	bf_set(lpfc_fcf_record_fc_map_0, fcf_record, phba->fc_map[0]);
15328 	bf_set(lpfc_fcf_record_fc_map_1, fcf_record, phba->fc_map[1]);
15329 	bf_set(lpfc_fcf_record_fc_map_2, fcf_record, phba->fc_map[2]);
15330 	bf_set(lpfc_fcf_record_fcf_valid, fcf_record, 1);
15331 	bf_set(lpfc_fcf_record_fcf_avail, fcf_record, 1);
15332 	bf_set(lpfc_fcf_record_fcf_index, fcf_record, fcf_index);
15333 	bf_set(lpfc_fcf_record_mac_addr_prov, fcf_record,
15334 		LPFC_FCF_FPMA | LPFC_FCF_SPMA);
15335 	/* Set the VLAN bit map */
15336 	if (phba->valid_vlan) {
15337 		fcf_record->vlan_bitmap[phba->vlan_id / 8]
15338 			= 1 << (phba->vlan_id % 8);
15339 	}
15340 }
15341 
15342 /**
15343  * lpfc_sli4_fcf_scan_read_fcf_rec - Read hba fcf record for fcf scan.
15344  * @phba: pointer to lpfc hba data structure.
15345  * @fcf_index: FCF table entry offset.
15346  *
15347  * This routine is invoked to scan the entire FCF table by reading FCF
15348  * record and processing it one at a time starting from the @fcf_index
15349  * for initial FCF discovery or fast FCF failover rediscovery.
15350  *
15351  * Return 0 if the mailbox command is submitted successfully, none 0
15352  * otherwise.
15353  **/
15354 int
15355 lpfc_sli4_fcf_scan_read_fcf_rec(struct lpfc_hba *phba, uint16_t fcf_index)
15356 {
15357 	int rc = 0, error;
15358 	LPFC_MBOXQ_t *mboxq;
15359 
15360 	phba->fcoe_eventtag_at_fcf_scan = phba->fcoe_eventtag;
15361 	phba->fcoe_cvl_eventtag_attn = phba->fcoe_cvl_eventtag;
15362 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15363 	if (!mboxq) {
15364 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15365 				"2000 Failed to allocate mbox for "
15366 				"READ_FCF cmd\n");
15367 		error = -ENOMEM;
15368 		goto fail_fcf_scan;
15369 	}
15370 	/* Construct the read FCF record mailbox command */
15371 	rc = lpfc_sli4_mbx_read_fcf_rec(phba, mboxq, fcf_index);
15372 	if (rc) {
15373 		error = -EINVAL;
15374 		goto fail_fcf_scan;
15375 	}
15376 	/* Issue the mailbox command asynchronously */
15377 	mboxq->vport = phba->pport;
15378 	mboxq->mbox_cmpl = lpfc_mbx_cmpl_fcf_scan_read_fcf_rec;
15379 
15380 	spin_lock_irq(&phba->hbalock);
15381 	phba->hba_flag |= FCF_TS_INPROG;
15382 	spin_unlock_irq(&phba->hbalock);
15383 
15384 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_NOWAIT);
15385 	if (rc == MBX_NOT_FINISHED)
15386 		error = -EIO;
15387 	else {
15388 		/* Reset eligible FCF count for new scan */
15389 		if (fcf_index == LPFC_FCOE_FCF_GET_FIRST)
15390 			phba->fcf.eligible_fcf_cnt = 0;
15391 		error = 0;
15392 	}
15393 fail_fcf_scan:
15394 	if (error) {
15395 		if (mboxq)
15396 			lpfc_sli4_mbox_cmd_free(phba, mboxq);
15397 		/* FCF scan failed, clear FCF_TS_INPROG flag */
15398 		spin_lock_irq(&phba->hbalock);
15399 		phba->hba_flag &= ~FCF_TS_INPROG;
15400 		spin_unlock_irq(&phba->hbalock);
15401 	}
15402 	return error;
15403 }
15404 
15405 /**
15406  * lpfc_sli4_fcf_rr_read_fcf_rec - Read hba fcf record for roundrobin fcf.
15407  * @phba: pointer to lpfc hba data structure.
15408  * @fcf_index: FCF table entry offset.
15409  *
15410  * This routine is invoked to read an FCF record indicated by @fcf_index
15411  * and to use it for FLOGI roundrobin FCF failover.
15412  *
15413  * Return 0 if the mailbox command is submitted successfully, none 0
15414  * otherwise.
15415  **/
15416 int
15417 lpfc_sli4_fcf_rr_read_fcf_rec(struct lpfc_hba *phba, uint16_t fcf_index)
15418 {
15419 	int rc = 0, error;
15420 	LPFC_MBOXQ_t *mboxq;
15421 
15422 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15423 	if (!mboxq) {
15424 		lpfc_printf_log(phba, KERN_ERR, LOG_FIP | LOG_INIT,
15425 				"2763 Failed to allocate mbox for "
15426 				"READ_FCF cmd\n");
15427 		error = -ENOMEM;
15428 		goto fail_fcf_read;
15429 	}
15430 	/* Construct the read FCF record mailbox command */
15431 	rc = lpfc_sli4_mbx_read_fcf_rec(phba, mboxq, fcf_index);
15432 	if (rc) {
15433 		error = -EINVAL;
15434 		goto fail_fcf_read;
15435 	}
15436 	/* Issue the mailbox command asynchronously */
15437 	mboxq->vport = phba->pport;
15438 	mboxq->mbox_cmpl = lpfc_mbx_cmpl_fcf_rr_read_fcf_rec;
15439 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_NOWAIT);
15440 	if (rc == MBX_NOT_FINISHED)
15441 		error = -EIO;
15442 	else
15443 		error = 0;
15444 
15445 fail_fcf_read:
15446 	if (error && mboxq)
15447 		lpfc_sli4_mbox_cmd_free(phba, mboxq);
15448 	return error;
15449 }
15450 
15451 /**
15452  * lpfc_sli4_read_fcf_rec - Read hba fcf record for update eligible fcf bmask.
15453  * @phba: pointer to lpfc hba data structure.
15454  * @fcf_index: FCF table entry offset.
15455  *
15456  * This routine is invoked to read an FCF record indicated by @fcf_index to
15457  * determine whether it's eligible for FLOGI roundrobin failover list.
15458  *
15459  * Return 0 if the mailbox command is submitted successfully, none 0
15460  * otherwise.
15461  **/
15462 int
15463 lpfc_sli4_read_fcf_rec(struct lpfc_hba *phba, uint16_t fcf_index)
15464 {
15465 	int rc = 0, error;
15466 	LPFC_MBOXQ_t *mboxq;
15467 
15468 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15469 	if (!mboxq) {
15470 		lpfc_printf_log(phba, KERN_ERR, LOG_FIP | LOG_INIT,
15471 				"2758 Failed to allocate mbox for "
15472 				"READ_FCF cmd\n");
15473 				error = -ENOMEM;
15474 				goto fail_fcf_read;
15475 	}
15476 	/* Construct the read FCF record mailbox command */
15477 	rc = lpfc_sli4_mbx_read_fcf_rec(phba, mboxq, fcf_index);
15478 	if (rc) {
15479 		error = -EINVAL;
15480 		goto fail_fcf_read;
15481 	}
15482 	/* Issue the mailbox command asynchronously */
15483 	mboxq->vport = phba->pport;
15484 	mboxq->mbox_cmpl = lpfc_mbx_cmpl_read_fcf_rec;
15485 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_NOWAIT);
15486 	if (rc == MBX_NOT_FINISHED)
15487 		error = -EIO;
15488 	else
15489 		error = 0;
15490 
15491 fail_fcf_read:
15492 	if (error && mboxq)
15493 		lpfc_sli4_mbox_cmd_free(phba, mboxq);
15494 	return error;
15495 }
15496 
15497 /**
15498  * lpfc_check_next_fcf_pri
15499  * phba pointer to the lpfc_hba struct for this port.
15500  * This routine is called from the lpfc_sli4_fcf_rr_next_index_get
15501  * routine when the rr_bmask is empty. The FCF indecies are put into the
15502  * rr_bmask based on their priority level. Starting from the highest priority
15503  * to the lowest. The most likely FCF candidate will be in the highest
15504  * priority group. When this routine is called it searches the fcf_pri list for
15505  * next lowest priority group and repopulates the rr_bmask with only those
15506  * fcf_indexes.
15507  * returns:
15508  * 1=success 0=failure
15509  **/
15510 int
15511 lpfc_check_next_fcf_pri_level(struct lpfc_hba *phba)
15512 {
15513 	uint16_t next_fcf_pri;
15514 	uint16_t last_index;
15515 	struct lpfc_fcf_pri *fcf_pri;
15516 	int rc;
15517 	int ret = 0;
15518 
15519 	last_index = find_first_bit(phba->fcf.fcf_rr_bmask,
15520 			LPFC_SLI4_FCF_TBL_INDX_MAX);
15521 	lpfc_printf_log(phba, KERN_INFO, LOG_FIP,
15522 			"3060 Last IDX %d\n", last_index);
15523 
15524 	/* Verify the priority list has 2 or more entries */
15525 	spin_lock_irq(&phba->hbalock);
15526 	if (list_empty(&phba->fcf.fcf_pri_list) ||
15527 	    list_is_singular(&phba->fcf.fcf_pri_list)) {
15528 		spin_unlock_irq(&phba->hbalock);
15529 		lpfc_printf_log(phba, KERN_ERR, LOG_FIP,
15530 			"3061 Last IDX %d\n", last_index);
15531 		return 0; /* Empty rr list */
15532 	}
15533 	spin_unlock_irq(&phba->hbalock);
15534 
15535 	next_fcf_pri = 0;
15536 	/*
15537 	 * Clear the rr_bmask and set all of the bits that are at this
15538 	 * priority.
15539 	 */
15540 	memset(phba->fcf.fcf_rr_bmask, 0,
15541 			sizeof(*phba->fcf.fcf_rr_bmask));
15542 	spin_lock_irq(&phba->hbalock);
15543 	list_for_each_entry(fcf_pri, &phba->fcf.fcf_pri_list, list) {
15544 		if (fcf_pri->fcf_rec.flag & LPFC_FCF_FLOGI_FAILED)
15545 			continue;
15546 		/*
15547 		 * the 1st priority that has not FLOGI failed
15548 		 * will be the highest.
15549 		 */
15550 		if (!next_fcf_pri)
15551 			next_fcf_pri = fcf_pri->fcf_rec.priority;
15552 		spin_unlock_irq(&phba->hbalock);
15553 		if (fcf_pri->fcf_rec.priority == next_fcf_pri) {
15554 			rc = lpfc_sli4_fcf_rr_index_set(phba,
15555 						fcf_pri->fcf_rec.fcf_index);
15556 			if (rc)
15557 				return 0;
15558 		}
15559 		spin_lock_irq(&phba->hbalock);
15560 	}
15561 	/*
15562 	 * if next_fcf_pri was not set above and the list is not empty then
15563 	 * we have failed flogis on all of them. So reset flogi failed
15564 	 * and start at the beginning.
15565 	 */
15566 	if (!next_fcf_pri && !list_empty(&phba->fcf.fcf_pri_list)) {
15567 		list_for_each_entry(fcf_pri, &phba->fcf.fcf_pri_list, list) {
15568 			fcf_pri->fcf_rec.flag &= ~LPFC_FCF_FLOGI_FAILED;
15569 			/*
15570 			 * the 1st priority that has not FLOGI failed
15571 			 * will be the highest.
15572 			 */
15573 			if (!next_fcf_pri)
15574 				next_fcf_pri = fcf_pri->fcf_rec.priority;
15575 			spin_unlock_irq(&phba->hbalock);
15576 			if (fcf_pri->fcf_rec.priority == next_fcf_pri) {
15577 				rc = lpfc_sli4_fcf_rr_index_set(phba,
15578 						fcf_pri->fcf_rec.fcf_index);
15579 				if (rc)
15580 					return 0;
15581 			}
15582 			spin_lock_irq(&phba->hbalock);
15583 		}
15584 	} else
15585 		ret = 1;
15586 	spin_unlock_irq(&phba->hbalock);
15587 
15588 	return ret;
15589 }
15590 /**
15591  * lpfc_sli4_fcf_rr_next_index_get - Get next eligible fcf record index
15592  * @phba: pointer to lpfc hba data structure.
15593  *
15594  * This routine is to get the next eligible FCF record index in a round
15595  * robin fashion. If the next eligible FCF record index equals to the
15596  * initial roundrobin FCF record index, LPFC_FCOE_FCF_NEXT_NONE (0xFFFF)
15597  * shall be returned, otherwise, the next eligible FCF record's index
15598  * shall be returned.
15599  **/
15600 uint16_t
15601 lpfc_sli4_fcf_rr_next_index_get(struct lpfc_hba *phba)
15602 {
15603 	uint16_t next_fcf_index;
15604 
15605 initial_priority:
15606 	/* Search start from next bit of currently registered FCF index */
15607 	next_fcf_index = phba->fcf.current_rec.fcf_indx;
15608 
15609 next_priority:
15610 	/* Determine the next fcf index to check */
15611 	next_fcf_index = (next_fcf_index + 1) % LPFC_SLI4_FCF_TBL_INDX_MAX;
15612 	next_fcf_index = find_next_bit(phba->fcf.fcf_rr_bmask,
15613 				       LPFC_SLI4_FCF_TBL_INDX_MAX,
15614 				       next_fcf_index);
15615 
15616 	/* Wrap around condition on phba->fcf.fcf_rr_bmask */
15617 	if (next_fcf_index >= LPFC_SLI4_FCF_TBL_INDX_MAX) {
15618 		/*
15619 		 * If we have wrapped then we need to clear the bits that
15620 		 * have been tested so that we can detect when we should
15621 		 * change the priority level.
15622 		 */
15623 		next_fcf_index = find_next_bit(phba->fcf.fcf_rr_bmask,
15624 					       LPFC_SLI4_FCF_TBL_INDX_MAX, 0);
15625 	}
15626 
15627 
15628 	/* Check roundrobin failover list empty condition */
15629 	if (next_fcf_index >= LPFC_SLI4_FCF_TBL_INDX_MAX ||
15630 		next_fcf_index == phba->fcf.current_rec.fcf_indx) {
15631 		/*
15632 		 * If next fcf index is not found check if there are lower
15633 		 * Priority level fcf's in the fcf_priority list.
15634 		 * Set up the rr_bmask with all of the avaiable fcf bits
15635 		 * at that level and continue the selection process.
15636 		 */
15637 		if (lpfc_check_next_fcf_pri_level(phba))
15638 			goto initial_priority;
15639 		lpfc_printf_log(phba, KERN_WARNING, LOG_FIP,
15640 				"2844 No roundrobin failover FCF available\n");
15641 		if (next_fcf_index >= LPFC_SLI4_FCF_TBL_INDX_MAX)
15642 			return LPFC_FCOE_FCF_NEXT_NONE;
15643 		else {
15644 			lpfc_printf_log(phba, KERN_WARNING, LOG_FIP,
15645 				"3063 Only FCF available idx %d, flag %x\n",
15646 				next_fcf_index,
15647 			phba->fcf.fcf_pri[next_fcf_index].fcf_rec.flag);
15648 			return next_fcf_index;
15649 		}
15650 	}
15651 
15652 	if (next_fcf_index < LPFC_SLI4_FCF_TBL_INDX_MAX &&
15653 		phba->fcf.fcf_pri[next_fcf_index].fcf_rec.flag &
15654 		LPFC_FCF_FLOGI_FAILED)
15655 		goto next_priority;
15656 
15657 	lpfc_printf_log(phba, KERN_INFO, LOG_FIP,
15658 			"2845 Get next roundrobin failover FCF (x%x)\n",
15659 			next_fcf_index);
15660 
15661 	return next_fcf_index;
15662 }
15663 
15664 /**
15665  * lpfc_sli4_fcf_rr_index_set - Set bmask with eligible fcf record index
15666  * @phba: pointer to lpfc hba data structure.
15667  *
15668  * This routine sets the FCF record index in to the eligible bmask for
15669  * roundrobin failover search. It checks to make sure that the index
15670  * does not go beyond the range of the driver allocated bmask dimension
15671  * before setting the bit.
15672  *
15673  * Returns 0 if the index bit successfully set, otherwise, it returns
15674  * -EINVAL.
15675  **/
15676 int
15677 lpfc_sli4_fcf_rr_index_set(struct lpfc_hba *phba, uint16_t fcf_index)
15678 {
15679 	if (fcf_index >= LPFC_SLI4_FCF_TBL_INDX_MAX) {
15680 		lpfc_printf_log(phba, KERN_ERR, LOG_FIP,
15681 				"2610 FCF (x%x) reached driver's book "
15682 				"keeping dimension:x%x\n",
15683 				fcf_index, LPFC_SLI4_FCF_TBL_INDX_MAX);
15684 		return -EINVAL;
15685 	}
15686 	/* Set the eligible FCF record index bmask */
15687 	set_bit(fcf_index, phba->fcf.fcf_rr_bmask);
15688 
15689 	lpfc_printf_log(phba, KERN_INFO, LOG_FIP,
15690 			"2790 Set FCF (x%x) to roundrobin FCF failover "
15691 			"bmask\n", fcf_index);
15692 
15693 	return 0;
15694 }
15695 
15696 /**
15697  * lpfc_sli4_fcf_rr_index_clear - Clear bmask from eligible fcf record index
15698  * @phba: pointer to lpfc hba data structure.
15699  *
15700  * This routine clears the FCF record index from the eligible bmask for
15701  * roundrobin failover search. It checks to make sure that the index
15702  * does not go beyond the range of the driver allocated bmask dimension
15703  * before clearing the bit.
15704  **/
15705 void
15706 lpfc_sli4_fcf_rr_index_clear(struct lpfc_hba *phba, uint16_t fcf_index)
15707 {
15708 	struct lpfc_fcf_pri *fcf_pri;
15709 	if (fcf_index >= LPFC_SLI4_FCF_TBL_INDX_MAX) {
15710 		lpfc_printf_log(phba, KERN_ERR, LOG_FIP,
15711 				"2762 FCF (x%x) reached driver's book "
15712 				"keeping dimension:x%x\n",
15713 				fcf_index, LPFC_SLI4_FCF_TBL_INDX_MAX);
15714 		return;
15715 	}
15716 	/* Clear the eligible FCF record index bmask */
15717 	spin_lock_irq(&phba->hbalock);
15718 	list_for_each_entry(fcf_pri, &phba->fcf.fcf_pri_list, list) {
15719 		if (fcf_pri->fcf_rec.fcf_index == fcf_index) {
15720 			list_del_init(&fcf_pri->list);
15721 			break;
15722 		}
15723 	}
15724 	spin_unlock_irq(&phba->hbalock);
15725 	clear_bit(fcf_index, phba->fcf.fcf_rr_bmask);
15726 
15727 	lpfc_printf_log(phba, KERN_INFO, LOG_FIP,
15728 			"2791 Clear FCF (x%x) from roundrobin failover "
15729 			"bmask\n", fcf_index);
15730 }
15731 
15732 /**
15733  * lpfc_mbx_cmpl_redisc_fcf_table - completion routine for rediscover FCF table
15734  * @phba: pointer to lpfc hba data structure.
15735  *
15736  * This routine is the completion routine for the rediscover FCF table mailbox
15737  * command. If the mailbox command returned failure, it will try to stop the
15738  * FCF rediscover wait timer.
15739  **/
15740 void
15741 lpfc_mbx_cmpl_redisc_fcf_table(struct lpfc_hba *phba, LPFC_MBOXQ_t *mbox)
15742 {
15743 	struct lpfc_mbx_redisc_fcf_tbl *redisc_fcf;
15744 	uint32_t shdr_status, shdr_add_status;
15745 
15746 	redisc_fcf = &mbox->u.mqe.un.redisc_fcf_tbl;
15747 
15748 	shdr_status = bf_get(lpfc_mbox_hdr_status,
15749 			     &redisc_fcf->header.cfg_shdr.response);
15750 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status,
15751 			     &redisc_fcf->header.cfg_shdr.response);
15752 	if (shdr_status || shdr_add_status) {
15753 		lpfc_printf_log(phba, KERN_ERR, LOG_FIP,
15754 				"2746 Requesting for FCF rediscovery failed "
15755 				"status x%x add_status x%x\n",
15756 				shdr_status, shdr_add_status);
15757 		if (phba->fcf.fcf_flag & FCF_ACVL_DISC) {
15758 			spin_lock_irq(&phba->hbalock);
15759 			phba->fcf.fcf_flag &= ~FCF_ACVL_DISC;
15760 			spin_unlock_irq(&phba->hbalock);
15761 			/*
15762 			 * CVL event triggered FCF rediscover request failed,
15763 			 * last resort to re-try current registered FCF entry.
15764 			 */
15765 			lpfc_retry_pport_discovery(phba);
15766 		} else {
15767 			spin_lock_irq(&phba->hbalock);
15768 			phba->fcf.fcf_flag &= ~FCF_DEAD_DISC;
15769 			spin_unlock_irq(&phba->hbalock);
15770 			/*
15771 			 * DEAD FCF event triggered FCF rediscover request
15772 			 * failed, last resort to fail over as a link down
15773 			 * to FCF registration.
15774 			 */
15775 			lpfc_sli4_fcf_dead_failthrough(phba);
15776 		}
15777 	} else {
15778 		lpfc_printf_log(phba, KERN_INFO, LOG_FIP,
15779 				"2775 Start FCF rediscover quiescent timer\n");
15780 		/*
15781 		 * Start FCF rediscovery wait timer for pending FCF
15782 		 * before rescan FCF record table.
15783 		 */
15784 		lpfc_fcf_redisc_wait_start_timer(phba);
15785 	}
15786 
15787 	mempool_free(mbox, phba->mbox_mem_pool);
15788 }
15789 
15790 /**
15791  * lpfc_sli4_redisc_fcf_table - Request to rediscover entire FCF table by port.
15792  * @phba: pointer to lpfc hba data structure.
15793  *
15794  * This routine is invoked to request for rediscovery of the entire FCF table
15795  * by the port.
15796  **/
15797 int
15798 lpfc_sli4_redisc_fcf_table(struct lpfc_hba *phba)
15799 {
15800 	LPFC_MBOXQ_t *mbox;
15801 	struct lpfc_mbx_redisc_fcf_tbl *redisc_fcf;
15802 	int rc, length;
15803 
15804 	/* Cancel retry delay timers to all vports before FCF rediscover */
15805 	lpfc_cancel_all_vport_retry_delay_timer(phba);
15806 
15807 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15808 	if (!mbox) {
15809 		lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
15810 				"2745 Failed to allocate mbox for "
15811 				"requesting FCF rediscover.\n");
15812 		return -ENOMEM;
15813 	}
15814 
15815 	length = (sizeof(struct lpfc_mbx_redisc_fcf_tbl) -
15816 		  sizeof(struct lpfc_sli4_cfg_mhdr));
15817 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_FCOE,
15818 			 LPFC_MBOX_OPCODE_FCOE_REDISCOVER_FCF,
15819 			 length, LPFC_SLI4_MBX_EMBED);
15820 
15821 	redisc_fcf = &mbox->u.mqe.un.redisc_fcf_tbl;
15822 	/* Set count to 0 for invalidating the entire FCF database */
15823 	bf_set(lpfc_mbx_redisc_fcf_count, redisc_fcf, 0);
15824 
15825 	/* Issue the mailbox command asynchronously */
15826 	mbox->vport = phba->pport;
15827 	mbox->mbox_cmpl = lpfc_mbx_cmpl_redisc_fcf_table;
15828 	rc = lpfc_sli_issue_mbox(phba, mbox, MBX_NOWAIT);
15829 
15830 	if (rc == MBX_NOT_FINISHED) {
15831 		mempool_free(mbox, phba->mbox_mem_pool);
15832 		return -EIO;
15833 	}
15834 	return 0;
15835 }
15836 
15837 /**
15838  * lpfc_sli4_fcf_dead_failthrough - Failthrough routine to fcf dead event
15839  * @phba: pointer to lpfc hba data structure.
15840  *
15841  * This function is the failover routine as a last resort to the FCF DEAD
15842  * event when driver failed to perform fast FCF failover.
15843  **/
15844 void
15845 lpfc_sli4_fcf_dead_failthrough(struct lpfc_hba *phba)
15846 {
15847 	uint32_t link_state;
15848 
15849 	/*
15850 	 * Last resort as FCF DEAD event failover will treat this as
15851 	 * a link down, but save the link state because we don't want
15852 	 * it to be changed to Link Down unless it is already down.
15853 	 */
15854 	link_state = phba->link_state;
15855 	lpfc_linkdown(phba);
15856 	phba->link_state = link_state;
15857 
15858 	/* Unregister FCF if no devices connected to it */
15859 	lpfc_unregister_unused_fcf(phba);
15860 }
15861 
15862 /**
15863  * lpfc_sli_get_config_region23 - Get sli3 port region 23 data.
15864  * @phba: pointer to lpfc hba data structure.
15865  * @rgn23_data: pointer to configure region 23 data.
15866  *
15867  * This function gets SLI3 port configure region 23 data through memory dump
15868  * mailbox command. When it successfully retrieves data, the size of the data
15869  * will be returned, otherwise, 0 will be returned.
15870  **/
15871 static uint32_t
15872 lpfc_sli_get_config_region23(struct lpfc_hba *phba, char *rgn23_data)
15873 {
15874 	LPFC_MBOXQ_t *pmb = NULL;
15875 	MAILBOX_t *mb;
15876 	uint32_t offset = 0;
15877 	int rc;
15878 
15879 	if (!rgn23_data)
15880 		return 0;
15881 
15882 	pmb = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15883 	if (!pmb) {
15884 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15885 				"2600 failed to allocate mailbox memory\n");
15886 		return 0;
15887 	}
15888 	mb = &pmb->u.mb;
15889 
15890 	do {
15891 		lpfc_dump_mem(phba, pmb, offset, DMP_REGION_23);
15892 		rc = lpfc_sli_issue_mbox(phba, pmb, MBX_POLL);
15893 
15894 		if (rc != MBX_SUCCESS) {
15895 			lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
15896 					"2601 failed to read config "
15897 					"region 23, rc 0x%x Status 0x%x\n",
15898 					rc, mb->mbxStatus);
15899 			mb->un.varDmp.word_cnt = 0;
15900 		}
15901 		/*
15902 		 * dump mem may return a zero when finished or we got a
15903 		 * mailbox error, either way we are done.
15904 		 */
15905 		if (mb->un.varDmp.word_cnt == 0)
15906 			break;
15907 		if (mb->un.varDmp.word_cnt > DMP_RGN23_SIZE - offset)
15908 			mb->un.varDmp.word_cnt = DMP_RGN23_SIZE - offset;
15909 
15910 		lpfc_sli_pcimem_bcopy(((uint8_t *)mb) + DMP_RSP_OFFSET,
15911 				       rgn23_data + offset,
15912 				       mb->un.varDmp.word_cnt);
15913 		offset += mb->un.varDmp.word_cnt;
15914 	} while (mb->un.varDmp.word_cnt && offset < DMP_RGN23_SIZE);
15915 
15916 	mempool_free(pmb, phba->mbox_mem_pool);
15917 	return offset;
15918 }
15919 
15920 /**
15921  * lpfc_sli4_get_config_region23 - Get sli4 port region 23 data.
15922  * @phba: pointer to lpfc hba data structure.
15923  * @rgn23_data: pointer to configure region 23 data.
15924  *
15925  * This function gets SLI4 port configure region 23 data through memory dump
15926  * mailbox command. When it successfully retrieves data, the size of the data
15927  * will be returned, otherwise, 0 will be returned.
15928  **/
15929 static uint32_t
15930 lpfc_sli4_get_config_region23(struct lpfc_hba *phba, char *rgn23_data)
15931 {
15932 	LPFC_MBOXQ_t *mboxq = NULL;
15933 	struct lpfc_dmabuf *mp = NULL;
15934 	struct lpfc_mqe *mqe;
15935 	uint32_t data_length = 0;
15936 	int rc;
15937 
15938 	if (!rgn23_data)
15939 		return 0;
15940 
15941 	mboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
15942 	if (!mboxq) {
15943 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
15944 				"3105 failed to allocate mailbox memory\n");
15945 		return 0;
15946 	}
15947 
15948 	if (lpfc_sli4_dump_cfg_rg23(phba, mboxq))
15949 		goto out;
15950 	mqe = &mboxq->u.mqe;
15951 	mp = (struct lpfc_dmabuf *) mboxq->context1;
15952 	rc = lpfc_sli_issue_mbox(phba, mboxq, MBX_POLL);
15953 	if (rc)
15954 		goto out;
15955 	data_length = mqe->un.mb_words[5];
15956 	if (data_length == 0)
15957 		goto out;
15958 	if (data_length > DMP_RGN23_SIZE) {
15959 		data_length = 0;
15960 		goto out;
15961 	}
15962 	lpfc_sli_pcimem_bcopy((char *)mp->virt, rgn23_data, data_length);
15963 out:
15964 	mempool_free(mboxq, phba->mbox_mem_pool);
15965 	if (mp) {
15966 		lpfc_mbuf_free(phba, mp->virt, mp->phys);
15967 		kfree(mp);
15968 	}
15969 	return data_length;
15970 }
15971 
15972 /**
15973  * lpfc_sli_read_link_ste - Read region 23 to decide if link is disabled.
15974  * @phba: pointer to lpfc hba data structure.
15975  *
15976  * This function read region 23 and parse TLV for port status to
15977  * decide if the user disaled the port. If the TLV indicates the
15978  * port is disabled, the hba_flag is set accordingly.
15979  **/
15980 void
15981 lpfc_sli_read_link_ste(struct lpfc_hba *phba)
15982 {
15983 	uint8_t *rgn23_data = NULL;
15984 	uint32_t if_type, data_size, sub_tlv_len, tlv_offset;
15985 	uint32_t offset = 0;
15986 
15987 	/* Get adapter Region 23 data */
15988 	rgn23_data = kzalloc(DMP_RGN23_SIZE, GFP_KERNEL);
15989 	if (!rgn23_data)
15990 		goto out;
15991 
15992 	if (phba->sli_rev < LPFC_SLI_REV4)
15993 		data_size = lpfc_sli_get_config_region23(phba, rgn23_data);
15994 	else {
15995 		if_type = bf_get(lpfc_sli_intf_if_type,
15996 				 &phba->sli4_hba.sli_intf);
15997 		if (if_type == LPFC_SLI_INTF_IF_TYPE_0)
15998 			goto out;
15999 		data_size = lpfc_sli4_get_config_region23(phba, rgn23_data);
16000 	}
16001 
16002 	if (!data_size)
16003 		goto out;
16004 
16005 	/* Check the region signature first */
16006 	if (memcmp(&rgn23_data[offset], LPFC_REGION23_SIGNATURE, 4)) {
16007 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
16008 			"2619 Config region 23 has bad signature\n");
16009 			goto out;
16010 	}
16011 	offset += 4;
16012 
16013 	/* Check the data structure version */
16014 	if (rgn23_data[offset] != LPFC_REGION23_VERSION) {
16015 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
16016 			"2620 Config region 23 has bad version\n");
16017 		goto out;
16018 	}
16019 	offset += 4;
16020 
16021 	/* Parse TLV entries in the region */
16022 	while (offset < data_size) {
16023 		if (rgn23_data[offset] == LPFC_REGION23_LAST_REC)
16024 			break;
16025 		/*
16026 		 * If the TLV is not driver specific TLV or driver id is
16027 		 * not linux driver id, skip the record.
16028 		 */
16029 		if ((rgn23_data[offset] != DRIVER_SPECIFIC_TYPE) ||
16030 		    (rgn23_data[offset + 2] != LINUX_DRIVER_ID) ||
16031 		    (rgn23_data[offset + 3] != 0)) {
16032 			offset += rgn23_data[offset + 1] * 4 + 4;
16033 			continue;
16034 		}
16035 
16036 		/* Driver found a driver specific TLV in the config region */
16037 		sub_tlv_len = rgn23_data[offset + 1] * 4;
16038 		offset += 4;
16039 		tlv_offset = 0;
16040 
16041 		/*
16042 		 * Search for configured port state sub-TLV.
16043 		 */
16044 		while ((offset < data_size) &&
16045 			(tlv_offset < sub_tlv_len)) {
16046 			if (rgn23_data[offset] == LPFC_REGION23_LAST_REC) {
16047 				offset += 4;
16048 				tlv_offset += 4;
16049 				break;
16050 			}
16051 			if (rgn23_data[offset] != PORT_STE_TYPE) {
16052 				offset += rgn23_data[offset + 1] * 4 + 4;
16053 				tlv_offset += rgn23_data[offset + 1] * 4 + 4;
16054 				continue;
16055 			}
16056 
16057 			/* This HBA contains PORT_STE configured */
16058 			if (!rgn23_data[offset + 2])
16059 				phba->hba_flag |= LINK_DISABLED;
16060 
16061 			goto out;
16062 		}
16063 	}
16064 
16065 out:
16066 	kfree(rgn23_data);
16067 	return;
16068 }
16069 
16070 /**
16071  * lpfc_wr_object - write an object to the firmware
16072  * @phba: HBA structure that indicates port to create a queue on.
16073  * @dmabuf_list: list of dmabufs to write to the port.
16074  * @size: the total byte value of the objects to write to the port.
16075  * @offset: the current offset to be used to start the transfer.
16076  *
16077  * This routine will create a wr_object mailbox command to send to the port.
16078  * the mailbox command will be constructed using the dma buffers described in
16079  * @dmabuf_list to create a list of BDEs. This routine will fill in as many
16080  * BDEs that the imbedded mailbox can support. The @offset variable will be
16081  * used to indicate the starting offset of the transfer and will also return
16082  * the offset after the write object mailbox has completed. @size is used to
16083  * determine the end of the object and whether the eof bit should be set.
16084  *
16085  * Return 0 is successful and offset will contain the the new offset to use
16086  * for the next write.
16087  * Return negative value for error cases.
16088  **/
16089 int
16090 lpfc_wr_object(struct lpfc_hba *phba, struct list_head *dmabuf_list,
16091 	       uint32_t size, uint32_t *offset)
16092 {
16093 	struct lpfc_mbx_wr_object *wr_object;
16094 	LPFC_MBOXQ_t *mbox;
16095 	int rc = 0, i = 0;
16096 	uint32_t shdr_status, shdr_add_status;
16097 	uint32_t mbox_tmo;
16098 	union lpfc_sli4_cfg_shdr *shdr;
16099 	struct lpfc_dmabuf *dmabuf;
16100 	uint32_t written = 0;
16101 
16102 	mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
16103 	if (!mbox)
16104 		return -ENOMEM;
16105 
16106 	lpfc_sli4_config(phba, mbox, LPFC_MBOX_SUBSYSTEM_COMMON,
16107 			LPFC_MBOX_OPCODE_WRITE_OBJECT,
16108 			sizeof(struct lpfc_mbx_wr_object) -
16109 			sizeof(struct lpfc_sli4_cfg_mhdr), LPFC_SLI4_MBX_EMBED);
16110 
16111 	wr_object = (struct lpfc_mbx_wr_object *)&mbox->u.mqe.un.wr_object;
16112 	wr_object->u.request.write_offset = *offset;
16113 	sprintf((uint8_t *)wr_object->u.request.object_name, "/");
16114 	wr_object->u.request.object_name[0] =
16115 		cpu_to_le32(wr_object->u.request.object_name[0]);
16116 	bf_set(lpfc_wr_object_eof, &wr_object->u.request, 0);
16117 	list_for_each_entry(dmabuf, dmabuf_list, list) {
16118 		if (i >= LPFC_MBX_WR_CONFIG_MAX_BDE || written >= size)
16119 			break;
16120 		wr_object->u.request.bde[i].addrLow = putPaddrLow(dmabuf->phys);
16121 		wr_object->u.request.bde[i].addrHigh =
16122 			putPaddrHigh(dmabuf->phys);
16123 		if (written + SLI4_PAGE_SIZE >= size) {
16124 			wr_object->u.request.bde[i].tus.f.bdeSize =
16125 				(size - written);
16126 			written += (size - written);
16127 			bf_set(lpfc_wr_object_eof, &wr_object->u.request, 1);
16128 		} else {
16129 			wr_object->u.request.bde[i].tus.f.bdeSize =
16130 				SLI4_PAGE_SIZE;
16131 			written += SLI4_PAGE_SIZE;
16132 		}
16133 		i++;
16134 	}
16135 	wr_object->u.request.bde_count = i;
16136 	bf_set(lpfc_wr_object_write_length, &wr_object->u.request, written);
16137 	if (!phba->sli4_hba.intr_enable)
16138 		rc = lpfc_sli_issue_mbox(phba, mbox, MBX_POLL);
16139 	else {
16140 		mbox_tmo = lpfc_mbox_tmo_val(phba, mbox);
16141 		rc = lpfc_sli_issue_mbox_wait(phba, mbox, mbox_tmo);
16142 	}
16143 	/* The IOCTL status is embedded in the mailbox subheader. */
16144 	shdr = (union lpfc_sli4_cfg_shdr *) &wr_object->header.cfg_shdr;
16145 	shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
16146 	shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
16147 	if (rc != MBX_TIMEOUT)
16148 		mempool_free(mbox, phba->mbox_mem_pool);
16149 	if (shdr_status || shdr_add_status || rc) {
16150 		lpfc_printf_log(phba, KERN_ERR, LOG_INIT,
16151 				"3025 Write Object mailbox failed with "
16152 				"status x%x add_status x%x, mbx status x%x\n",
16153 				shdr_status, shdr_add_status, rc);
16154 		rc = -ENXIO;
16155 	} else
16156 		*offset += wr_object->u.response.actual_write_length;
16157 	return rc;
16158 }
16159 
16160 /**
16161  * lpfc_cleanup_pending_mbox - Free up vport discovery mailbox commands.
16162  * @vport: pointer to vport data structure.
16163  *
16164  * This function iterate through the mailboxq and clean up all REG_LOGIN
16165  * and REG_VPI mailbox commands associated with the vport. This function
16166  * is called when driver want to restart discovery of the vport due to
16167  * a Clear Virtual Link event.
16168  **/
16169 void
16170 lpfc_cleanup_pending_mbox(struct lpfc_vport *vport)
16171 {
16172 	struct lpfc_hba *phba = vport->phba;
16173 	LPFC_MBOXQ_t *mb, *nextmb;
16174 	struct lpfc_dmabuf *mp;
16175 	struct lpfc_nodelist *ndlp;
16176 	struct lpfc_nodelist *act_mbx_ndlp = NULL;
16177 	struct Scsi_Host  *shost = lpfc_shost_from_vport(vport);
16178 	LIST_HEAD(mbox_cmd_list);
16179 	uint8_t restart_loop;
16180 
16181 	/* Clean up internally queued mailbox commands with the vport */
16182 	spin_lock_irq(&phba->hbalock);
16183 	list_for_each_entry_safe(mb, nextmb, &phba->sli.mboxq, list) {
16184 		if (mb->vport != vport)
16185 			continue;
16186 
16187 		if ((mb->u.mb.mbxCommand != MBX_REG_LOGIN64) &&
16188 			(mb->u.mb.mbxCommand != MBX_REG_VPI))
16189 			continue;
16190 
16191 		list_del(&mb->list);
16192 		list_add_tail(&mb->list, &mbox_cmd_list);
16193 	}
16194 	/* Clean up active mailbox command with the vport */
16195 	mb = phba->sli.mbox_active;
16196 	if (mb && (mb->vport == vport)) {
16197 		if ((mb->u.mb.mbxCommand == MBX_REG_LOGIN64) ||
16198 			(mb->u.mb.mbxCommand == MBX_REG_VPI))
16199 			mb->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
16200 		if (mb->u.mb.mbxCommand == MBX_REG_LOGIN64) {
16201 			act_mbx_ndlp = (struct lpfc_nodelist *)mb->context2;
16202 			/* Put reference count for delayed processing */
16203 			act_mbx_ndlp = lpfc_nlp_get(act_mbx_ndlp);
16204 			/* Unregister the RPI when mailbox complete */
16205 			mb->mbox_flag |= LPFC_MBX_IMED_UNREG;
16206 		}
16207 	}
16208 	/* Cleanup any mailbox completions which are not yet processed */
16209 	do {
16210 		restart_loop = 0;
16211 		list_for_each_entry(mb, &phba->sli.mboxq_cmpl, list) {
16212 			/*
16213 			 * If this mailox is already processed or it is
16214 			 * for another vport ignore it.
16215 			 */
16216 			if ((mb->vport != vport) ||
16217 				(mb->mbox_flag & LPFC_MBX_IMED_UNREG))
16218 				continue;
16219 
16220 			if ((mb->u.mb.mbxCommand != MBX_REG_LOGIN64) &&
16221 				(mb->u.mb.mbxCommand != MBX_REG_VPI))
16222 				continue;
16223 
16224 			mb->mbox_cmpl = lpfc_sli_def_mbox_cmpl;
16225 			if (mb->u.mb.mbxCommand == MBX_REG_LOGIN64) {
16226 				ndlp = (struct lpfc_nodelist *)mb->context2;
16227 				/* Unregister the RPI when mailbox complete */
16228 				mb->mbox_flag |= LPFC_MBX_IMED_UNREG;
16229 				restart_loop = 1;
16230 				spin_unlock_irq(&phba->hbalock);
16231 				spin_lock(shost->host_lock);
16232 				ndlp->nlp_flag &= ~NLP_IGNR_REG_CMPL;
16233 				spin_unlock(shost->host_lock);
16234 				spin_lock_irq(&phba->hbalock);
16235 				break;
16236 			}
16237 		}
16238 	} while (restart_loop);
16239 
16240 	spin_unlock_irq(&phba->hbalock);
16241 
16242 	/* Release the cleaned-up mailbox commands */
16243 	while (!list_empty(&mbox_cmd_list)) {
16244 		list_remove_head(&mbox_cmd_list, mb, LPFC_MBOXQ_t, list);
16245 		if (mb->u.mb.mbxCommand == MBX_REG_LOGIN64) {
16246 			mp = (struct lpfc_dmabuf *) (mb->context1);
16247 			if (mp) {
16248 				__lpfc_mbuf_free(phba, mp->virt, mp->phys);
16249 				kfree(mp);
16250 			}
16251 			ndlp = (struct lpfc_nodelist *) mb->context2;
16252 			mb->context2 = NULL;
16253 			if (ndlp) {
16254 				spin_lock(shost->host_lock);
16255 				ndlp->nlp_flag &= ~NLP_IGNR_REG_CMPL;
16256 				spin_unlock(shost->host_lock);
16257 				lpfc_nlp_put(ndlp);
16258 			}
16259 		}
16260 		mempool_free(mb, phba->mbox_mem_pool);
16261 	}
16262 
16263 	/* Release the ndlp with the cleaned-up active mailbox command */
16264 	if (act_mbx_ndlp) {
16265 		spin_lock(shost->host_lock);
16266 		act_mbx_ndlp->nlp_flag &= ~NLP_IGNR_REG_CMPL;
16267 		spin_unlock(shost->host_lock);
16268 		lpfc_nlp_put(act_mbx_ndlp);
16269 	}
16270 }
16271 
16272 /**
16273  * lpfc_drain_txq - Drain the txq
16274  * @phba: Pointer to HBA context object.
16275  *
16276  * This function attempt to submit IOCBs on the txq
16277  * to the adapter.  For SLI4 adapters, the txq contains
16278  * ELS IOCBs that have been deferred because the there
16279  * are no SGLs.  This congestion can occur with large
16280  * vport counts during node discovery.
16281  **/
16282 
16283 uint32_t
16284 lpfc_drain_txq(struct lpfc_hba *phba)
16285 {
16286 	LIST_HEAD(completions);
16287 	struct lpfc_sli_ring *pring = &phba->sli.ring[LPFC_ELS_RING];
16288 	struct lpfc_iocbq *piocbq = 0;
16289 	unsigned long iflags = 0;
16290 	char *fail_msg = NULL;
16291 	struct lpfc_sglq *sglq;
16292 	union lpfc_wqe wqe;
16293 	int txq_cnt = 0;
16294 
16295 	spin_lock_irqsave(&pring->ring_lock, iflags);
16296 	list_for_each_entry(piocbq, &pring->txq, list) {
16297 		txq_cnt++;
16298 	}
16299 
16300 	if (txq_cnt > pring->txq_max)
16301 		pring->txq_max = txq_cnt;
16302 
16303 	spin_unlock_irqrestore(&pring->ring_lock, iflags);
16304 
16305 	while (!list_empty(&pring->txq)) {
16306 		spin_lock_irqsave(&pring->ring_lock, iflags);
16307 
16308 		piocbq = lpfc_sli_ringtx_get(phba, pring);
16309 		if (!piocbq) {
16310 			spin_unlock_irqrestore(&pring->ring_lock, iflags);
16311 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
16312 				"2823 txq empty and txq_cnt is %d\n ",
16313 				txq_cnt);
16314 			break;
16315 		}
16316 		sglq = __lpfc_sli_get_sglq(phba, piocbq);
16317 		if (!sglq) {
16318 			__lpfc_sli_ringtx_put(phba, pring, piocbq);
16319 			spin_unlock_irqrestore(&pring->ring_lock, iflags);
16320 			break;
16321 		}
16322 		txq_cnt--;
16323 
16324 		/* The xri and iocb resources secured,
16325 		 * attempt to issue request
16326 		 */
16327 		piocbq->sli4_lxritag = sglq->sli4_lxritag;
16328 		piocbq->sli4_xritag = sglq->sli4_xritag;
16329 		if (NO_XRI == lpfc_sli4_bpl2sgl(phba, piocbq, sglq))
16330 			fail_msg = "to convert bpl to sgl";
16331 		else if (lpfc_sli4_iocb2wqe(phba, piocbq, &wqe))
16332 			fail_msg = "to convert iocb to wqe";
16333 		else if (lpfc_sli4_wq_put(phba->sli4_hba.els_wq, &wqe))
16334 			fail_msg = " - Wq is full";
16335 		else
16336 			lpfc_sli_ringtxcmpl_put(phba, pring, piocbq);
16337 
16338 		if (fail_msg) {
16339 			/* Failed means we can't issue and need to cancel */
16340 			lpfc_printf_log(phba, KERN_ERR, LOG_SLI,
16341 					"2822 IOCB failed %s iotag 0x%x "
16342 					"xri 0x%x\n",
16343 					fail_msg,
16344 					piocbq->iotag, piocbq->sli4_xritag);
16345 			list_add_tail(&piocbq->list, &completions);
16346 		}
16347 		spin_unlock_irqrestore(&pring->ring_lock, iflags);
16348 	}
16349 
16350 	/* Cancel all the IOCBs that cannot be issued */
16351 	lpfc_sli_cancel_iocbs(phba, &completions, IOSTAT_LOCAL_REJECT,
16352 				IOERR_SLI_ABORTED);
16353 
16354 	return txq_cnt;
16355 }
16356