GNU Linux-libre 4.14.259-gnu1
[releases.git] / drivers / scsi / ibmvscsi / ibmvscsi.c
1 /* ------------------------------------------------------------
2  * ibmvscsi.c
3  * (C) Copyright IBM Corporation 1994, 2004
4  * Authors: Colin DeVilbiss (devilbis@us.ibm.com)
5  *          Santiago Leon (santil@us.ibm.com)
6  *          Dave Boutcher (sleddog@us.ibm.com)
7  *
8  * This program is free software; you can redistribute it and/or modify
9  * it under the terms of the GNU General Public License as published by
10  * the Free Software Foundation; either version 2 of the License, or
11  * (at your option) any later version.
12  *
13  * This program is distributed in the hope that it will be useful,
14  * but WITHOUT ANY WARRANTY; without even the implied warranty of
15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16  * GNU General Public License for more details.
17  *
18  * You should have received a copy of the GNU General Public License
19  * along with this program; if not, write to the Free Software
20  * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307
21  * USA
22  *
23  * ------------------------------------------------------------
24  * Emulation of a SCSI host adapter for Virtual I/O devices
25  *
26  * This driver supports the SCSI adapter implemented by the IBM
27  * Power5 firmware.  That SCSI adapter is not a physical adapter,
28  * but allows Linux SCSI peripheral drivers to directly
29  * access devices in another logical partition on the physical system.
30  *
31  * The virtual adapter(s) are present in the open firmware device
32  * tree just like real adapters.
33  *
34  * One of the capabilities provided on these systems is the ability
35  * to DMA between partitions.  The architecture states that for VSCSI,
36  * the server side is allowed to DMA to and from the client.  The client
37  * is never trusted to DMA to or from the server directly.
38  *
39  * Messages are sent between partitions on a "Command/Response Queue" 
40  * (CRQ), which is just a buffer of 16 byte entries in the receiver's 
41  * Senders cannot access the buffer directly, but send messages by
42  * making a hypervisor call and passing in the 16 bytes.  The hypervisor
43  * puts the message in the next 16 byte space in round-robin fashion,
44  * turns on the high order bit of the message (the valid bit), and 
45  * generates an interrupt to the receiver (if interrupts are turned on.) 
46  * The receiver just turns off the valid bit when they have copied out
47  * the message.
48  *
49  * The VSCSI client builds a SCSI Remote Protocol (SRP) Information Unit
50  * (IU) (as defined in the T10 standard available at www.t10.org), gets 
51  * a DMA address for the message, and sends it to the server as the
52  * payload of a CRQ message.  The server DMAs the SRP IU and processes it,
53  * including doing any additional data transfers.  When it is done, it
54  * DMAs the SRP response back to the same address as the request came from,
55  * and sends a CRQ message back to inform the client that the request has
56  * completed.
57  *
58  * TODO: This is currently pretty tied to the IBM pSeries hypervisor
59  * interfaces.  It would be really nice to abstract this above an RDMA
60  * layer.
61  */
62
63 #include <linux/module.h>
64 #include <linux/moduleparam.h>
65 #include <linux/dma-mapping.h>
66 #include <linux/delay.h>
67 #include <linux/slab.h>
68 #include <linux/of.h>
69 #include <linux/pm.h>
70 #include <linux/kthread.h>
71 #include <asm/firmware.h>
72 #include <asm/vio.h>
73 #include <scsi/scsi.h>
74 #include <scsi/scsi_cmnd.h>
75 #include <scsi/scsi_host.h>
76 #include <scsi/scsi_device.h>
77 #include <scsi/scsi_transport_srp.h>
78 #include "ibmvscsi.h"
79
80 /* The values below are somewhat arbitrary default values, but 
81  * OS/400 will use 3 busses (disks, CDs, tapes, I think.)
82  * Note that there are 3 bits of channel value, 6 bits of id, and
83  * 5 bits of LUN.
84  */
85 static int max_id = 64;
86 static int max_channel = 3;
87 static int init_timeout = 300;
88 static int login_timeout = 60;
89 static int info_timeout = 30;
90 static int abort_timeout = 60;
91 static int reset_timeout = 60;
92 static int max_requests = IBMVSCSI_MAX_REQUESTS_DEFAULT;
93 static int max_events = IBMVSCSI_MAX_REQUESTS_DEFAULT + 2;
94 static int fast_fail = 1;
95 static int client_reserve = 1;
96 static char partition_name[96] = "UNKNOWN";
97 static unsigned int partition_number = -1;
98 static LIST_HEAD(ibmvscsi_head);
99 static DEFINE_SPINLOCK(ibmvscsi_driver_lock);
100
101 static struct scsi_transport_template *ibmvscsi_transport_template;
102
103 #define IBMVSCSI_VERSION "1.5.9"
104
105 MODULE_DESCRIPTION("IBM Virtual SCSI");
106 MODULE_AUTHOR("Dave Boutcher");
107 MODULE_LICENSE("GPL");
108 MODULE_VERSION(IBMVSCSI_VERSION);
109
110 module_param_named(max_id, max_id, int, S_IRUGO | S_IWUSR);
111 MODULE_PARM_DESC(max_id, "Largest ID value for each channel [Default=64]");
112 module_param_named(max_channel, max_channel, int, S_IRUGO | S_IWUSR);
113 MODULE_PARM_DESC(max_channel, "Largest channel value [Default=3]");
114 module_param_named(init_timeout, init_timeout, int, S_IRUGO | S_IWUSR);
115 MODULE_PARM_DESC(init_timeout, "Initialization timeout in seconds");
116 module_param_named(max_requests, max_requests, int, S_IRUGO);
117 MODULE_PARM_DESC(max_requests, "Maximum requests for this adapter");
118 module_param_named(fast_fail, fast_fail, int, S_IRUGO | S_IWUSR);
119 MODULE_PARM_DESC(fast_fail, "Enable fast fail. [Default=1]");
120 module_param_named(client_reserve, client_reserve, int, S_IRUGO );
121 MODULE_PARM_DESC(client_reserve, "Attempt client managed reserve/release");
122
123 static void ibmvscsi_handle_crq(struct viosrp_crq *crq,
124                                 struct ibmvscsi_host_data *hostdata);
125
126 /* ------------------------------------------------------------
127  * Routines for managing the command/response queue
128  */
129 /**
130  * ibmvscsi_handle_event: - Interrupt handler for crq events
131  * @irq:        number of irq to handle, not used
132  * @dev_instance: ibmvscsi_host_data of host that received interrupt
133  *
134  * Disables interrupts and schedules srp_task
135  * Always returns IRQ_HANDLED
136  */
137 static irqreturn_t ibmvscsi_handle_event(int irq, void *dev_instance)
138 {
139         struct ibmvscsi_host_data *hostdata =
140             (struct ibmvscsi_host_data *)dev_instance;
141         vio_disable_interrupts(to_vio_dev(hostdata->dev));
142         tasklet_schedule(&hostdata->srp_task);
143         return IRQ_HANDLED;
144 }
145
146 /**
147  * release_crq_queue: - Deallocates data and unregisters CRQ
148  * @queue:      crq_queue to initialize and register
149  * @host_data:  ibmvscsi_host_data of host
150  *
151  * Frees irq, deallocates a page for messages, unmaps dma, and unregisters
152  * the crq with the hypervisor.
153  */
154 static void ibmvscsi_release_crq_queue(struct crq_queue *queue,
155                                        struct ibmvscsi_host_data *hostdata,
156                                        int max_requests)
157 {
158         long rc = 0;
159         struct vio_dev *vdev = to_vio_dev(hostdata->dev);
160         free_irq(vdev->irq, (void *)hostdata);
161         tasklet_kill(&hostdata->srp_task);
162         do {
163                 if (rc)
164                         msleep(100);
165                 rc = plpar_hcall_norets(H_FREE_CRQ, vdev->unit_address);
166         } while ((rc == H_BUSY) || (H_IS_LONG_BUSY(rc)));
167         dma_unmap_single(hostdata->dev,
168                          queue->msg_token,
169                          queue->size * sizeof(*queue->msgs), DMA_BIDIRECTIONAL);
170         free_page((unsigned long)queue->msgs);
171 }
172
173 /**
174  * crq_queue_next_crq: - Returns the next entry in message queue
175  * @queue:      crq_queue to use
176  *
177  * Returns pointer to next entry in queue, or NULL if there are no new
178  * entried in the CRQ.
179  */
180 static struct viosrp_crq *crq_queue_next_crq(struct crq_queue *queue)
181 {
182         struct viosrp_crq *crq;
183         unsigned long flags;
184
185         spin_lock_irqsave(&queue->lock, flags);
186         crq = &queue->msgs[queue->cur];
187         if (crq->valid != VIOSRP_CRQ_FREE) {
188                 if (++queue->cur == queue->size)
189                         queue->cur = 0;
190
191                 /* Ensure the read of the valid bit occurs before reading any
192                  * other bits of the CRQ entry
193                  */
194                 rmb();
195         } else
196                 crq = NULL;
197         spin_unlock_irqrestore(&queue->lock, flags);
198
199         return crq;
200 }
201
202 /**
203  * ibmvscsi_send_crq: - Send a CRQ
204  * @hostdata:   the adapter
205  * @word1:      the first 64 bits of the data
206  * @word2:      the second 64 bits of the data
207  */
208 static int ibmvscsi_send_crq(struct ibmvscsi_host_data *hostdata,
209                              u64 word1, u64 word2)
210 {
211         struct vio_dev *vdev = to_vio_dev(hostdata->dev);
212
213         /*
214          * Ensure the command buffer is flushed to memory before handing it
215          * over to the VIOS to prevent it from fetching any stale data.
216          */
217         mb();
218         return plpar_hcall_norets(H_SEND_CRQ, vdev->unit_address, word1, word2);
219 }
220
221 /**
222  * ibmvscsi_task: - Process srps asynchronously
223  * @data:       ibmvscsi_host_data of host
224  */
225 static void ibmvscsi_task(void *data)
226 {
227         struct ibmvscsi_host_data *hostdata = (struct ibmvscsi_host_data *)data;
228         struct vio_dev *vdev = to_vio_dev(hostdata->dev);
229         struct viosrp_crq *crq;
230         int done = 0;
231
232         while (!done) {
233                 /* Pull all the valid messages off the CRQ */
234                 while ((crq = crq_queue_next_crq(&hostdata->queue)) != NULL) {
235                         ibmvscsi_handle_crq(crq, hostdata);
236                         crq->valid = VIOSRP_CRQ_FREE;
237                         wmb();
238                 }
239
240                 vio_enable_interrupts(vdev);
241                 crq = crq_queue_next_crq(&hostdata->queue);
242                 if (crq != NULL) {
243                         vio_disable_interrupts(vdev);
244                         ibmvscsi_handle_crq(crq, hostdata);
245                         crq->valid = VIOSRP_CRQ_FREE;
246                         wmb();
247                 } else {
248                         done = 1;
249                 }
250         }
251 }
252
253 static void gather_partition_info(void)
254 {
255         const char *ppartition_name;
256         const __be32 *p_number_ptr;
257
258         /* Retrieve information about this partition */
259         if (!of_root)
260                 return;
261
262         of_node_get(of_root);
263
264         ppartition_name = of_get_property(of_root, "ibm,partition-name", NULL);
265         if (ppartition_name)
266                 strlcpy(partition_name, ppartition_name,
267                                 sizeof(partition_name));
268         p_number_ptr = of_get_property(of_root, "ibm,partition-no", NULL);
269         if (p_number_ptr)
270                 partition_number = of_read_number(p_number_ptr, 1);
271         of_node_put(of_root);
272 }
273
274 static void set_adapter_info(struct ibmvscsi_host_data *hostdata)
275 {
276         memset(&hostdata->madapter_info, 0x00,
277                         sizeof(hostdata->madapter_info));
278
279         dev_info(hostdata->dev, "SRP_VERSION: %s\n", SRP_VERSION);
280         strcpy(hostdata->madapter_info.srp_version, SRP_VERSION);
281
282         strncpy(hostdata->madapter_info.partition_name, partition_name,
283                         sizeof(hostdata->madapter_info.partition_name));
284
285         hostdata->madapter_info.partition_number =
286                                         cpu_to_be32(partition_number);
287
288         hostdata->madapter_info.mad_version = cpu_to_be32(SRP_MAD_VERSION_1);
289         hostdata->madapter_info.os_type = cpu_to_be32(SRP_MAD_OS_LINUX);
290 }
291
292 /**
293  * reset_crq_queue: - resets a crq after a failure
294  * @queue:      crq_queue to initialize and register
295  * @hostdata:   ibmvscsi_host_data of host
296  *
297  */
298 static int ibmvscsi_reset_crq_queue(struct crq_queue *queue,
299                                     struct ibmvscsi_host_data *hostdata)
300 {
301         int rc = 0;
302         struct vio_dev *vdev = to_vio_dev(hostdata->dev);
303
304         /* Close the CRQ */
305         do {
306                 if (rc)
307                         msleep(100);
308                 rc = plpar_hcall_norets(H_FREE_CRQ, vdev->unit_address);
309         } while ((rc == H_BUSY) || (H_IS_LONG_BUSY(rc)));
310
311         /* Clean out the queue */
312         memset(queue->msgs, 0x00, PAGE_SIZE);
313         queue->cur = 0;
314
315         set_adapter_info(hostdata);
316
317         /* And re-open it again */
318         rc = plpar_hcall_norets(H_REG_CRQ,
319                                 vdev->unit_address,
320                                 queue->msg_token, PAGE_SIZE);
321         if (rc == H_CLOSED) {
322                 /* Adapter is good, but other end is not ready */
323                 dev_warn(hostdata->dev, "Partner adapter not ready\n");
324         } else if (rc != 0) {
325                 dev_warn(hostdata->dev, "couldn't register crq--rc 0x%x\n", rc);
326         }
327         return rc;
328 }
329
330 /**
331  * initialize_crq_queue: - Initializes and registers CRQ with hypervisor
332  * @queue:      crq_queue to initialize and register
333  * @hostdata:   ibmvscsi_host_data of host
334  *
335  * Allocates a page for messages, maps it for dma, and registers
336  * the crq with the hypervisor.
337  * Returns zero on success.
338  */
339 static int ibmvscsi_init_crq_queue(struct crq_queue *queue,
340                                    struct ibmvscsi_host_data *hostdata,
341                                    int max_requests)
342 {
343         int rc;
344         int retrc;
345         struct vio_dev *vdev = to_vio_dev(hostdata->dev);
346
347         queue->msgs = (struct viosrp_crq *)get_zeroed_page(GFP_KERNEL);
348
349         if (!queue->msgs)
350                 goto malloc_failed;
351         queue->size = PAGE_SIZE / sizeof(*queue->msgs);
352
353         queue->msg_token = dma_map_single(hostdata->dev, queue->msgs,
354                                           queue->size * sizeof(*queue->msgs),
355                                           DMA_BIDIRECTIONAL);
356
357         if (dma_mapping_error(hostdata->dev, queue->msg_token))
358                 goto map_failed;
359
360         gather_partition_info();
361         set_adapter_info(hostdata);
362
363         retrc = rc = plpar_hcall_norets(H_REG_CRQ,
364                                 vdev->unit_address,
365                                 queue->msg_token, PAGE_SIZE);
366         if (rc == H_RESOURCE)
367                 /* maybe kexecing and resource is busy. try a reset */
368                 rc = ibmvscsi_reset_crq_queue(queue,
369                                               hostdata);
370
371         if (rc == H_CLOSED) {
372                 /* Adapter is good, but other end is not ready */
373                 dev_warn(hostdata->dev, "Partner adapter not ready\n");
374                 retrc = 0;
375         } else if (rc != 0) {
376                 dev_warn(hostdata->dev, "Error %d opening adapter\n", rc);
377                 goto reg_crq_failed;
378         }
379
380         queue->cur = 0;
381         spin_lock_init(&queue->lock);
382
383         tasklet_init(&hostdata->srp_task, (void *)ibmvscsi_task,
384                      (unsigned long)hostdata);
385
386         if (request_irq(vdev->irq,
387                         ibmvscsi_handle_event,
388                         0, "ibmvscsi", (void *)hostdata) != 0) {
389                 dev_err(hostdata->dev, "couldn't register irq 0x%x\n",
390                         vdev->irq);
391                 goto req_irq_failed;
392         }
393
394         rc = vio_enable_interrupts(vdev);
395         if (rc != 0) {
396                 dev_err(hostdata->dev, "Error %d enabling interrupts!!!\n", rc);
397                 goto req_irq_failed;
398         }
399
400         return retrc;
401
402       req_irq_failed:
403         tasklet_kill(&hostdata->srp_task);
404         rc = 0;
405         do {
406                 if (rc)
407                         msleep(100);
408                 rc = plpar_hcall_norets(H_FREE_CRQ, vdev->unit_address);
409         } while ((rc == H_BUSY) || (H_IS_LONG_BUSY(rc)));
410       reg_crq_failed:
411         dma_unmap_single(hostdata->dev,
412                          queue->msg_token,
413                          queue->size * sizeof(*queue->msgs), DMA_BIDIRECTIONAL);
414       map_failed:
415         free_page((unsigned long)queue->msgs);
416       malloc_failed:
417         return -1;
418 }
419
420 /**
421  * reenable_crq_queue: - reenables a crq after
422  * @queue:      crq_queue to initialize and register
423  * @hostdata:   ibmvscsi_host_data of host
424  *
425  */
426 static int ibmvscsi_reenable_crq_queue(struct crq_queue *queue,
427                                        struct ibmvscsi_host_data *hostdata)
428 {
429         int rc = 0;
430         struct vio_dev *vdev = to_vio_dev(hostdata->dev);
431
432         set_adapter_info(hostdata);
433
434         /* Re-enable the CRQ */
435         do {
436                 if (rc)
437                         msleep(100);
438                 rc = plpar_hcall_norets(H_ENABLE_CRQ, vdev->unit_address);
439         } while ((rc == H_IN_PROGRESS) || (rc == H_BUSY) || (H_IS_LONG_BUSY(rc)));
440
441         if (rc)
442                 dev_err(hostdata->dev, "Error %d enabling adapter\n", rc);
443         return rc;
444 }
445
446 /* ------------------------------------------------------------
447  * Routines for the event pool and event structs
448  */
449 /**
450  * initialize_event_pool: - Allocates and initializes the event pool for a host
451  * @pool:       event_pool to be initialized
452  * @size:       Number of events in pool
453  * @hostdata:   ibmvscsi_host_data who owns the event pool
454  *
455  * Returns zero on success.
456 */
457 static int initialize_event_pool(struct event_pool *pool,
458                                  int size, struct ibmvscsi_host_data *hostdata)
459 {
460         int i;
461
462         pool->size = size;
463         pool->next = 0;
464         pool->events = kcalloc(pool->size, sizeof(*pool->events), GFP_KERNEL);
465         if (!pool->events)
466                 return -ENOMEM;
467
468         pool->iu_storage =
469             dma_alloc_coherent(hostdata->dev,
470                                pool->size * sizeof(*pool->iu_storage),
471                                &pool->iu_token, 0);
472         if (!pool->iu_storage) {
473                 kfree(pool->events);
474                 return -ENOMEM;
475         }
476
477         for (i = 0; i < pool->size; ++i) {
478                 struct srp_event_struct *evt = &pool->events[i];
479                 memset(&evt->crq, 0x00, sizeof(evt->crq));
480                 atomic_set(&evt->free, 1);
481                 evt->crq.valid = VIOSRP_CRQ_CMD_RSP;
482                 evt->crq.IU_length = cpu_to_be16(sizeof(*evt->xfer_iu));
483                 evt->crq.IU_data_ptr = cpu_to_be64(pool->iu_token +
484                         sizeof(*evt->xfer_iu) * i);
485                 evt->xfer_iu = pool->iu_storage + i;
486                 evt->hostdata = hostdata;
487                 evt->ext_list = NULL;
488                 evt->ext_list_token = 0;
489         }
490
491         return 0;
492 }
493
494 /**
495  * release_event_pool: - Frees memory of an event pool of a host
496  * @pool:       event_pool to be released
497  * @hostdata:   ibmvscsi_host_data who owns the even pool
498  *
499  * Returns zero on success.
500 */
501 static void release_event_pool(struct event_pool *pool,
502                                struct ibmvscsi_host_data *hostdata)
503 {
504         int i, in_use = 0;
505         for (i = 0; i < pool->size; ++i) {
506                 if (atomic_read(&pool->events[i].free) != 1)
507                         ++in_use;
508                 if (pool->events[i].ext_list) {
509                         dma_free_coherent(hostdata->dev,
510                                   SG_ALL * sizeof(struct srp_direct_buf),
511                                   pool->events[i].ext_list,
512                                   pool->events[i].ext_list_token);
513                 }
514         }
515         if (in_use)
516                 dev_warn(hostdata->dev, "releasing event pool with %d "
517                          "events still in use?\n", in_use);
518         kfree(pool->events);
519         dma_free_coherent(hostdata->dev,
520                           pool->size * sizeof(*pool->iu_storage),
521                           pool->iu_storage, pool->iu_token);
522 }
523
524 /**
525  * valid_event_struct: - Determines if event is valid.
526  * @pool:       event_pool that contains the event
527  * @evt:        srp_event_struct to be checked for validity
528  *
529  * Returns zero if event is invalid, one otherwise.
530 */
531 static int valid_event_struct(struct event_pool *pool,
532                                 struct srp_event_struct *evt)
533 {
534         int index = evt - pool->events;
535         if (index < 0 || index >= pool->size)   /* outside of bounds */
536                 return 0;
537         if (evt != pool->events + index)        /* unaligned */
538                 return 0;
539         return 1;
540 }
541
542 /**
543  * ibmvscsi_free-event_struct: - Changes status of event to "free"
544  * @pool:       event_pool that contains the event
545  * @evt:        srp_event_struct to be modified
546  *
547 */
548 static void free_event_struct(struct event_pool *pool,
549                                        struct srp_event_struct *evt)
550 {
551         if (!valid_event_struct(pool, evt)) {
552                 dev_err(evt->hostdata->dev, "Freeing invalid event_struct %p "
553                         "(not in pool %p)\n", evt, pool->events);
554                 return;
555         }
556         if (atomic_inc_return(&evt->free) != 1) {
557                 dev_err(evt->hostdata->dev, "Freeing event_struct %p "
558                         "which is not in use!\n", evt);
559                 return;
560         }
561 }
562
563 /**
564  * get_evt_struct: - Gets the next free event in pool
565  * @pool:       event_pool that contains the events to be searched
566  *
567  * Returns the next event in "free" state, and NULL if none are free.
568  * Note that no synchronization is done here, we assume the host_lock
569  * will syncrhonze things.
570 */
571 static struct srp_event_struct *get_event_struct(struct event_pool *pool)
572 {
573         int i;
574         int poolsize = pool->size;
575         int offset = pool->next;
576
577         for (i = 0; i < poolsize; i++) {
578                 offset = (offset + 1) % poolsize;
579                 if (!atomic_dec_if_positive(&pool->events[offset].free)) {
580                         pool->next = offset;
581                         return &pool->events[offset];
582                 }
583         }
584
585         printk(KERN_ERR "ibmvscsi: found no event struct in pool!\n");
586         return NULL;
587 }
588
589 /**
590  * init_event_struct: Initialize fields in an event struct that are always 
591  *                    required.
592  * @evt:        The event
593  * @done:       Routine to call when the event is responded to
594  * @format:     SRP or MAD format
595  * @timeout:    timeout value set in the CRQ
596  */
597 static void init_event_struct(struct srp_event_struct *evt_struct,
598                               void (*done) (struct srp_event_struct *),
599                               u8 format,
600                               int timeout)
601 {
602         evt_struct->cmnd = NULL;
603         evt_struct->cmnd_done = NULL;
604         evt_struct->sync_srp = NULL;
605         evt_struct->crq.format = format;
606         evt_struct->crq.timeout = cpu_to_be16(timeout);
607         evt_struct->done = done;
608 }
609
610 /* ------------------------------------------------------------
611  * Routines for receiving SCSI responses from the hosting partition
612  */
613
614 /**
615  * set_srp_direction: Set the fields in the srp related to data
616  *     direction and number of buffers based on the direction in
617  *     the scsi_cmnd and the number of buffers
618  */
619 static void set_srp_direction(struct scsi_cmnd *cmd,
620                               struct srp_cmd *srp_cmd, 
621                               int numbuf)
622 {
623         u8 fmt;
624
625         if (numbuf == 0)
626                 return;
627         
628         if (numbuf == 1)
629                 fmt = SRP_DATA_DESC_DIRECT;
630         else {
631                 fmt = SRP_DATA_DESC_INDIRECT;
632                 numbuf = min(numbuf, MAX_INDIRECT_BUFS);
633
634                 if (cmd->sc_data_direction == DMA_TO_DEVICE)
635                         srp_cmd->data_out_desc_cnt = numbuf;
636                 else
637                         srp_cmd->data_in_desc_cnt = numbuf;
638         }
639
640         if (cmd->sc_data_direction == DMA_TO_DEVICE)
641                 srp_cmd->buf_fmt = fmt << 4;
642         else
643                 srp_cmd->buf_fmt = fmt;
644 }
645
646 /**
647  * unmap_cmd_data: - Unmap data pointed in srp_cmd based on the format
648  * @cmd:        srp_cmd whose additional_data member will be unmapped
649  * @dev:        device for which the memory is mapped
650  *
651 */
652 static void unmap_cmd_data(struct srp_cmd *cmd,
653                            struct srp_event_struct *evt_struct,
654                            struct device *dev)
655 {
656         u8 out_fmt, in_fmt;
657
658         out_fmt = cmd->buf_fmt >> 4;
659         in_fmt = cmd->buf_fmt & ((1U << 4) - 1);
660
661         if (out_fmt == SRP_NO_DATA_DESC && in_fmt == SRP_NO_DATA_DESC)
662                 return;
663
664         if (evt_struct->cmnd)
665                 scsi_dma_unmap(evt_struct->cmnd);
666 }
667
668 static int map_sg_list(struct scsi_cmnd *cmd, int nseg,
669                        struct srp_direct_buf *md)
670 {
671         int i;
672         struct scatterlist *sg;
673         u64 total_length = 0;
674
675         scsi_for_each_sg(cmd, sg, nseg, i) {
676                 struct srp_direct_buf *descr = md + i;
677                 descr->va = cpu_to_be64(sg_dma_address(sg));
678                 descr->len = cpu_to_be32(sg_dma_len(sg));
679                 descr->key = 0;
680                 total_length += sg_dma_len(sg);
681         }
682         return total_length;
683 }
684
685 /**
686  * map_sg_data: - Maps dma for a scatterlist and initializes decriptor fields
687  * @cmd:        Scsi_Cmnd with the scatterlist
688  * @srp_cmd:    srp_cmd that contains the memory descriptor
689  * @dev:        device for which to map dma memory
690  *
691  * Called by map_data_for_srp_cmd() when building srp cmd from scsi cmd.
692  * Returns 1 on success.
693 */
694 static int map_sg_data(struct scsi_cmnd *cmd,
695                        struct srp_event_struct *evt_struct,
696                        struct srp_cmd *srp_cmd, struct device *dev)
697 {
698
699         int sg_mapped;
700         u64 total_length = 0;
701         struct srp_direct_buf *data =
702                 (struct srp_direct_buf *) srp_cmd->add_data;
703         struct srp_indirect_buf *indirect =
704                 (struct srp_indirect_buf *) data;
705
706         sg_mapped = scsi_dma_map(cmd);
707         if (!sg_mapped)
708                 return 1;
709         else if (sg_mapped < 0)
710                 return 0;
711
712         set_srp_direction(cmd, srp_cmd, sg_mapped);
713
714         /* special case; we can use a single direct descriptor */
715         if (sg_mapped == 1) {
716                 map_sg_list(cmd, sg_mapped, data);
717                 return 1;
718         }
719
720         indirect->table_desc.va = 0;
721         indirect->table_desc.len = cpu_to_be32(sg_mapped *
722                                                sizeof(struct srp_direct_buf));
723         indirect->table_desc.key = 0;
724
725         if (sg_mapped <= MAX_INDIRECT_BUFS) {
726                 total_length = map_sg_list(cmd, sg_mapped,
727                                            &indirect->desc_list[0]);
728                 indirect->len = cpu_to_be32(total_length);
729                 return 1;
730         }
731
732         /* get indirect table */
733         if (!evt_struct->ext_list) {
734                 evt_struct->ext_list = (struct srp_direct_buf *)
735                         dma_alloc_coherent(dev,
736                                            SG_ALL * sizeof(struct srp_direct_buf),
737                                            &evt_struct->ext_list_token, 0);
738                 if (!evt_struct->ext_list) {
739                         if (!firmware_has_feature(FW_FEATURE_CMO))
740                                 sdev_printk(KERN_ERR, cmd->device,
741                                             "Can't allocate memory "
742                                             "for indirect table\n");
743                         scsi_dma_unmap(cmd);
744                         return 0;
745                 }
746         }
747
748         total_length = map_sg_list(cmd, sg_mapped, evt_struct->ext_list);
749
750         indirect->len = cpu_to_be32(total_length);
751         indirect->table_desc.va = cpu_to_be64(evt_struct->ext_list_token);
752         indirect->table_desc.len = cpu_to_be32(sg_mapped *
753                                                sizeof(indirect->desc_list[0]));
754         memcpy(indirect->desc_list, evt_struct->ext_list,
755                MAX_INDIRECT_BUFS * sizeof(struct srp_direct_buf));
756         return 1;
757 }
758
759 /**
760  * map_data_for_srp_cmd: - Calls functions to map data for srp cmds
761  * @cmd:        struct scsi_cmnd with the memory to be mapped
762  * @srp_cmd:    srp_cmd that contains the memory descriptor
763  * @dev:        dma device for which to map dma memory
764  *
765  * Called by scsi_cmd_to_srp_cmd() when converting scsi cmds to srp cmds 
766  * Returns 1 on success.
767 */
768 static int map_data_for_srp_cmd(struct scsi_cmnd *cmd,
769                                 struct srp_event_struct *evt_struct,
770                                 struct srp_cmd *srp_cmd, struct device *dev)
771 {
772         switch (cmd->sc_data_direction) {
773         case DMA_FROM_DEVICE:
774         case DMA_TO_DEVICE:
775                 break;
776         case DMA_NONE:
777                 return 1;
778         case DMA_BIDIRECTIONAL:
779                 sdev_printk(KERN_ERR, cmd->device,
780                             "Can't map DMA_BIDIRECTIONAL to read/write\n");
781                 return 0;
782         default:
783                 sdev_printk(KERN_ERR, cmd->device,
784                             "Unknown data direction 0x%02x; can't map!\n",
785                             cmd->sc_data_direction);
786                 return 0;
787         }
788
789         return map_sg_data(cmd, evt_struct, srp_cmd, dev);
790 }
791
792 /**
793  * purge_requests: Our virtual adapter just shut down.  purge any sent requests
794  * @hostdata:    the adapter
795  */
796 static void purge_requests(struct ibmvscsi_host_data *hostdata, int error_code)
797 {
798         struct srp_event_struct *evt;
799         unsigned long flags;
800
801         spin_lock_irqsave(hostdata->host->host_lock, flags);
802         while (!list_empty(&hostdata->sent)) {
803                 evt = list_first_entry(&hostdata->sent, struct srp_event_struct, list);
804                 list_del(&evt->list);
805                 del_timer(&evt->timer);
806
807                 spin_unlock_irqrestore(hostdata->host->host_lock, flags);
808                 if (evt->cmnd) {
809                         evt->cmnd->result = (error_code << 16);
810                         unmap_cmd_data(&evt->iu.srp.cmd, evt,
811                                        evt->hostdata->dev);
812                         if (evt->cmnd_done)
813                                 evt->cmnd_done(evt->cmnd);
814                 } else if (evt->done && evt->crq.format != VIOSRP_MAD_FORMAT &&
815                            evt->iu.srp.login_req.opcode != SRP_LOGIN_REQ)
816                         evt->done(evt);
817                 free_event_struct(&evt->hostdata->pool, evt);
818                 spin_lock_irqsave(hostdata->host->host_lock, flags);
819         }
820         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
821 }
822
823 /**
824  * ibmvscsi_reset_host - Reset the connection to the server
825  * @hostdata:   struct ibmvscsi_host_data to reset
826 */
827 static void ibmvscsi_reset_host(struct ibmvscsi_host_data *hostdata)
828 {
829         scsi_block_requests(hostdata->host);
830         atomic_set(&hostdata->request_limit, 0);
831
832         purge_requests(hostdata, DID_ERROR);
833         hostdata->reset_crq = 1;
834         wake_up(&hostdata->work_wait_q);
835 }
836
837 /**
838  * ibmvscsi_timeout - Internal command timeout handler
839  * @evt_struct: struct srp_event_struct that timed out
840  *
841  * Called when an internally generated command times out
842 */
843 static void ibmvscsi_timeout(struct srp_event_struct *evt_struct)
844 {
845         struct ibmvscsi_host_data *hostdata = evt_struct->hostdata;
846
847         dev_err(hostdata->dev, "Command timed out (%x). Resetting connection\n",
848                 evt_struct->iu.srp.cmd.opcode);
849
850         ibmvscsi_reset_host(hostdata);
851 }
852
853
854 /* ------------------------------------------------------------
855  * Routines for sending and receiving SRPs
856  */
857 /**
858  * ibmvscsi_send_srp_event: - Transforms event to u64 array and calls send_crq()
859  * @evt_struct: evt_struct to be sent
860  * @hostdata:   ibmvscsi_host_data of host
861  * @timeout:    timeout in seconds - 0 means do not time command
862  *
863  * Returns the value returned from ibmvscsi_send_crq(). (Zero for success)
864  * Note that this routine assumes that host_lock is held for synchronization
865 */
866 static int ibmvscsi_send_srp_event(struct srp_event_struct *evt_struct,
867                                    struct ibmvscsi_host_data *hostdata,
868                                    unsigned long timeout)
869 {
870         __be64 *crq_as_u64 = (__be64 *)&evt_struct->crq;
871         int request_status = 0;
872         int rc;
873         int srp_req = 0;
874
875         /* If we have exhausted our request limit, just fail this request,
876          * unless it is for a reset or abort.
877          * Note that there are rare cases involving driver generated requests 
878          * (such as task management requests) that the mid layer may think we
879          * can handle more requests (can_queue) when we actually can't
880          */
881         if (evt_struct->crq.format == VIOSRP_SRP_FORMAT) {
882                 srp_req = 1;
883                 request_status =
884                         atomic_dec_if_positive(&hostdata->request_limit);
885                 /* If request limit was -1 when we started, it is now even
886                  * less than that
887                  */
888                 if (request_status < -1)
889                         goto send_error;
890                 /* Otherwise, we may have run out of requests. */
891                 /* If request limit was 0 when we started the adapter is in the
892                  * process of performing a login with the server adapter, or
893                  * we may have run out of requests.
894                  */
895                 else if (request_status == -1 &&
896                          evt_struct->iu.srp.login_req.opcode != SRP_LOGIN_REQ)
897                         goto send_busy;
898                 /* Abort and reset calls should make it through.
899                  * Nothing except abort and reset should use the last two
900                  * slots unless we had two or less to begin with.
901                  */
902                 else if (request_status < 2 &&
903                          evt_struct->iu.srp.cmd.opcode != SRP_TSK_MGMT) {
904                         /* In the case that we have less than two requests
905                          * available, check the server limit as a combination
906                          * of the request limit and the number of requests
907                          * in-flight (the size of the send list).  If the
908                          * server limit is greater than 2, return busy so
909                          * that the last two are reserved for reset and abort.
910                          */
911                         int server_limit = request_status;
912                         struct srp_event_struct *tmp_evt;
913
914                         list_for_each_entry(tmp_evt, &hostdata->sent, list) {
915                                 server_limit++;
916                         }
917
918                         if (server_limit > 2)
919                                 goto send_busy;
920                 }
921         }
922
923         /* Copy the IU into the transfer area */
924         *evt_struct->xfer_iu = evt_struct->iu;
925         evt_struct->xfer_iu->srp.rsp.tag = (u64)evt_struct;
926
927         /* Add this to the sent list.  We need to do this 
928          * before we actually send 
929          * in case it comes back REALLY fast
930          */
931         list_add_tail(&evt_struct->list, &hostdata->sent);
932
933         init_timer(&evt_struct->timer);
934         if (timeout) {
935                 evt_struct->timer.data = (unsigned long) evt_struct;
936                 evt_struct->timer.expires = jiffies + (timeout * HZ);
937                 evt_struct->timer.function = (void (*)(unsigned long))ibmvscsi_timeout;
938                 add_timer(&evt_struct->timer);
939         }
940
941         rc = ibmvscsi_send_crq(hostdata, be64_to_cpu(crq_as_u64[0]),
942                                be64_to_cpu(crq_as_u64[1]));
943         if (rc != 0) {
944                 list_del(&evt_struct->list);
945                 del_timer(&evt_struct->timer);
946
947                 /* If send_crq returns H_CLOSED, return SCSI_MLQUEUE_HOST_BUSY.
948                  * Firmware will send a CRQ with a transport event (0xFF) to
949                  * tell this client what has happened to the transport.  This
950                  * will be handled in ibmvscsi_handle_crq()
951                  */
952                 if (rc == H_CLOSED) {
953                         dev_warn(hostdata->dev, "send warning. "
954                                  "Receive queue closed, will retry.\n");
955                         goto send_busy;
956                 }
957                 dev_err(hostdata->dev, "send error %d\n", rc);
958                 if (srp_req)
959                         atomic_inc(&hostdata->request_limit);
960                 goto send_error;
961         }
962
963         return 0;
964
965  send_busy:
966         unmap_cmd_data(&evt_struct->iu.srp.cmd, evt_struct, hostdata->dev);
967
968         free_event_struct(&hostdata->pool, evt_struct);
969         if (srp_req && request_status != -1)
970                 atomic_inc(&hostdata->request_limit);
971         return SCSI_MLQUEUE_HOST_BUSY;
972
973  send_error:
974         unmap_cmd_data(&evt_struct->iu.srp.cmd, evt_struct, hostdata->dev);
975
976         if (evt_struct->cmnd != NULL) {
977                 evt_struct->cmnd->result = DID_ERROR << 16;
978                 evt_struct->cmnd_done(evt_struct->cmnd);
979         } else if (evt_struct->done)
980                 evt_struct->done(evt_struct);
981
982         free_event_struct(&hostdata->pool, evt_struct);
983         return 0;
984 }
985
986 /**
987  * handle_cmd_rsp: -  Handle responses from commands
988  * @evt_struct: srp_event_struct to be handled
989  *
990  * Used as a callback by when sending scsi cmds.
991  * Gets called by ibmvscsi_handle_crq()
992 */
993 static void handle_cmd_rsp(struct srp_event_struct *evt_struct)
994 {
995         struct srp_rsp *rsp = &evt_struct->xfer_iu->srp.rsp;
996         struct scsi_cmnd *cmnd = evt_struct->cmnd;
997
998         if (unlikely(rsp->opcode != SRP_RSP)) {
999                 if (printk_ratelimit())
1000                         dev_warn(evt_struct->hostdata->dev,
1001                                  "bad SRP RSP type %#02x\n", rsp->opcode);
1002         }
1003         
1004         if (cmnd) {
1005                 cmnd->result |= rsp->status;
1006                 if (((cmnd->result >> 1) & 0x1f) == CHECK_CONDITION)
1007                         memcpy(cmnd->sense_buffer,
1008                                rsp->data,
1009                                be32_to_cpu(rsp->sense_data_len));
1010                 unmap_cmd_data(&evt_struct->iu.srp.cmd, 
1011                                evt_struct, 
1012                                evt_struct->hostdata->dev);
1013
1014                 if (rsp->flags & SRP_RSP_FLAG_DOOVER)
1015                         scsi_set_resid(cmnd,
1016                                        be32_to_cpu(rsp->data_out_res_cnt));
1017                 else if (rsp->flags & SRP_RSP_FLAG_DIOVER)
1018                         scsi_set_resid(cmnd, be32_to_cpu(rsp->data_in_res_cnt));
1019         }
1020
1021         if (evt_struct->cmnd_done)
1022                 evt_struct->cmnd_done(cmnd);
1023 }
1024
1025 /**
1026  * lun_from_dev: - Returns the lun of the scsi device
1027  * @dev:        struct scsi_device
1028  *
1029 */
1030 static inline u16 lun_from_dev(struct scsi_device *dev)
1031 {
1032         return (0x2 << 14) | (dev->id << 8) | (dev->channel << 5) | dev->lun;
1033 }
1034
1035 /**
1036  * ibmvscsi_queue: - The queuecommand function of the scsi template 
1037  * @cmd:        struct scsi_cmnd to be executed
1038  * @done:       Callback function to be called when cmd is completed
1039 */
1040 static int ibmvscsi_queuecommand_lck(struct scsi_cmnd *cmnd,
1041                                  void (*done) (struct scsi_cmnd *))
1042 {
1043         struct srp_cmd *srp_cmd;
1044         struct srp_event_struct *evt_struct;
1045         struct srp_indirect_buf *indirect;
1046         struct ibmvscsi_host_data *hostdata = shost_priv(cmnd->device->host);
1047         u16 lun = lun_from_dev(cmnd->device);
1048         u8 out_fmt, in_fmt;
1049
1050         cmnd->result = (DID_OK << 16);
1051         evt_struct = get_event_struct(&hostdata->pool);
1052         if (!evt_struct)
1053                 return SCSI_MLQUEUE_HOST_BUSY;
1054
1055         /* Set up the actual SRP IU */
1056         srp_cmd = &evt_struct->iu.srp.cmd;
1057         memset(srp_cmd, 0x00, SRP_MAX_IU_LEN);
1058         srp_cmd->opcode = SRP_CMD;
1059         memcpy(srp_cmd->cdb, cmnd->cmnd, sizeof(srp_cmd->cdb));
1060         int_to_scsilun(lun, &srp_cmd->lun);
1061
1062         if (!map_data_for_srp_cmd(cmnd, evt_struct, srp_cmd, hostdata->dev)) {
1063                 if (!firmware_has_feature(FW_FEATURE_CMO))
1064                         sdev_printk(KERN_ERR, cmnd->device,
1065                                     "couldn't convert cmd to srp_cmd\n");
1066                 free_event_struct(&hostdata->pool, evt_struct);
1067                 return SCSI_MLQUEUE_HOST_BUSY;
1068         }
1069
1070         init_event_struct(evt_struct,
1071                           handle_cmd_rsp,
1072                           VIOSRP_SRP_FORMAT,
1073                           cmnd->request->timeout/HZ);
1074
1075         evt_struct->cmnd = cmnd;
1076         evt_struct->cmnd_done = done;
1077
1078         /* Fix up dma address of the buffer itself */
1079         indirect = (struct srp_indirect_buf *) srp_cmd->add_data;
1080         out_fmt = srp_cmd->buf_fmt >> 4;
1081         in_fmt = srp_cmd->buf_fmt & ((1U << 4) - 1);
1082         if ((in_fmt == SRP_DATA_DESC_INDIRECT ||
1083              out_fmt == SRP_DATA_DESC_INDIRECT) &&
1084             indirect->table_desc.va == 0) {
1085                 indirect->table_desc.va =
1086                         cpu_to_be64(be64_to_cpu(evt_struct->crq.IU_data_ptr) +
1087                         offsetof(struct srp_cmd, add_data) +
1088                         offsetof(struct srp_indirect_buf, desc_list));
1089         }
1090
1091         return ibmvscsi_send_srp_event(evt_struct, hostdata, 0);
1092 }
1093
1094 static DEF_SCSI_QCMD(ibmvscsi_queuecommand)
1095
1096 /* ------------------------------------------------------------
1097  * Routines for driver initialization
1098  */
1099
1100 /**
1101  * map_persist_bufs: - Pre-map persistent data for adapter logins
1102  * @hostdata:   ibmvscsi_host_data of host
1103  *
1104  * Map the capabilities and adapter info DMA buffers to avoid runtime failures.
1105  * Return 1 on error, 0 on success.
1106  */
1107 static int map_persist_bufs(struct ibmvscsi_host_data *hostdata)
1108 {
1109
1110         hostdata->caps_addr = dma_map_single(hostdata->dev, &hostdata->caps,
1111                                              sizeof(hostdata->caps), DMA_BIDIRECTIONAL);
1112
1113         if (dma_mapping_error(hostdata->dev, hostdata->caps_addr)) {
1114                 dev_err(hostdata->dev, "Unable to map capabilities buffer!\n");
1115                 return 1;
1116         }
1117
1118         hostdata->adapter_info_addr = dma_map_single(hostdata->dev,
1119                                                      &hostdata->madapter_info,
1120                                                      sizeof(hostdata->madapter_info),
1121                                                      DMA_BIDIRECTIONAL);
1122         if (dma_mapping_error(hostdata->dev, hostdata->adapter_info_addr)) {
1123                 dev_err(hostdata->dev, "Unable to map adapter info buffer!\n");
1124                 dma_unmap_single(hostdata->dev, hostdata->caps_addr,
1125                                  sizeof(hostdata->caps), DMA_BIDIRECTIONAL);
1126                 return 1;
1127         }
1128
1129         return 0;
1130 }
1131
1132 /**
1133  * unmap_persist_bufs: - Unmap persistent data needed for adapter logins
1134  * @hostdata:   ibmvscsi_host_data of host
1135  *
1136  * Unmap the capabilities and adapter info DMA buffers
1137  */
1138 static void unmap_persist_bufs(struct ibmvscsi_host_data *hostdata)
1139 {
1140         dma_unmap_single(hostdata->dev, hostdata->caps_addr,
1141                          sizeof(hostdata->caps), DMA_BIDIRECTIONAL);
1142
1143         dma_unmap_single(hostdata->dev, hostdata->adapter_info_addr,
1144                          sizeof(hostdata->madapter_info), DMA_BIDIRECTIONAL);
1145 }
1146
1147 /**
1148  * login_rsp: - Handle response to SRP login request
1149  * @evt_struct: srp_event_struct with the response
1150  *
1151  * Used as a "done" callback by when sending srp_login. Gets called
1152  * by ibmvscsi_handle_crq()
1153 */
1154 static void login_rsp(struct srp_event_struct *evt_struct)
1155 {
1156         struct ibmvscsi_host_data *hostdata = evt_struct->hostdata;
1157         switch (evt_struct->xfer_iu->srp.login_rsp.opcode) {
1158         case SRP_LOGIN_RSP:     /* it worked! */
1159                 break;
1160         case SRP_LOGIN_REJ:     /* refused! */
1161                 dev_info(hostdata->dev, "SRP_LOGIN_REJ reason %u\n",
1162                          evt_struct->xfer_iu->srp.login_rej.reason);
1163                 /* Login failed.  */
1164                 atomic_set(&hostdata->request_limit, -1);
1165                 return;
1166         default:
1167                 dev_err(hostdata->dev, "Invalid login response typecode 0x%02x!\n",
1168                         evt_struct->xfer_iu->srp.login_rsp.opcode);
1169                 /* Login failed.  */
1170                 atomic_set(&hostdata->request_limit, -1);
1171                 return;
1172         }
1173
1174         dev_info(hostdata->dev, "SRP_LOGIN succeeded\n");
1175         hostdata->client_migrated = 0;
1176
1177         /* Now we know what the real request-limit is.
1178          * This value is set rather than added to request_limit because
1179          * request_limit could have been set to -1 by this client.
1180          */
1181         atomic_set(&hostdata->request_limit,
1182                    be32_to_cpu(evt_struct->xfer_iu->srp.login_rsp.req_lim_delta));
1183
1184         /* If we had any pending I/Os, kick them */
1185         scsi_unblock_requests(hostdata->host);
1186 }
1187
1188 /**
1189  * send_srp_login: - Sends the srp login
1190  * @hostdata:   ibmvscsi_host_data of host
1191  *
1192  * Returns zero if successful.
1193 */
1194 static int send_srp_login(struct ibmvscsi_host_data *hostdata)
1195 {
1196         int rc;
1197         unsigned long flags;
1198         struct srp_login_req *login;
1199         struct srp_event_struct *evt_struct = get_event_struct(&hostdata->pool);
1200
1201         BUG_ON(!evt_struct);
1202         init_event_struct(evt_struct, login_rsp,
1203                           VIOSRP_SRP_FORMAT, login_timeout);
1204
1205         login = &evt_struct->iu.srp.login_req;
1206         memset(login, 0, sizeof(*login));
1207         login->opcode = SRP_LOGIN_REQ;
1208         login->req_it_iu_len = cpu_to_be32(sizeof(union srp_iu));
1209         login->req_buf_fmt = cpu_to_be16(SRP_BUF_FORMAT_DIRECT |
1210                                          SRP_BUF_FORMAT_INDIRECT);
1211
1212         spin_lock_irqsave(hostdata->host->host_lock, flags);
1213         /* Start out with a request limit of 0, since this is negotiated in
1214          * the login request we are just sending and login requests always
1215          * get sent by the driver regardless of request_limit.
1216          */
1217         atomic_set(&hostdata->request_limit, 0);
1218
1219         rc = ibmvscsi_send_srp_event(evt_struct, hostdata, login_timeout * 2);
1220         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1221         dev_info(hostdata->dev, "sent SRP login\n");
1222         return rc;
1223 };
1224
1225 /**
1226  * capabilities_rsp: - Handle response to MAD adapter capabilities request
1227  * @evt_struct: srp_event_struct with the response
1228  *
1229  * Used as a "done" callback by when sending adapter_info.
1230  */
1231 static void capabilities_rsp(struct srp_event_struct *evt_struct)
1232 {
1233         struct ibmvscsi_host_data *hostdata = evt_struct->hostdata;
1234
1235         if (evt_struct->xfer_iu->mad.capabilities.common.status) {
1236                 dev_err(hostdata->dev, "error 0x%X getting capabilities info\n",
1237                         evt_struct->xfer_iu->mad.capabilities.common.status);
1238         } else {
1239                 if (hostdata->caps.migration.common.server_support !=
1240                     cpu_to_be16(SERVER_SUPPORTS_CAP))
1241                         dev_info(hostdata->dev, "Partition migration not supported\n");
1242
1243                 if (client_reserve) {
1244                         if (hostdata->caps.reserve.common.server_support ==
1245                             cpu_to_be16(SERVER_SUPPORTS_CAP))
1246                                 dev_info(hostdata->dev, "Client reserve enabled\n");
1247                         else
1248                                 dev_info(hostdata->dev, "Client reserve not supported\n");
1249                 }
1250         }
1251
1252         send_srp_login(hostdata);
1253 }
1254
1255 /**
1256  * send_mad_capabilities: - Sends the mad capabilities request
1257  *      and stores the result so it can be retrieved with
1258  * @hostdata:   ibmvscsi_host_data of host
1259  */
1260 static void send_mad_capabilities(struct ibmvscsi_host_data *hostdata)
1261 {
1262         struct viosrp_capabilities *req;
1263         struct srp_event_struct *evt_struct;
1264         unsigned long flags;
1265         struct device_node *of_node = hostdata->dev->of_node;
1266         const char *location;
1267
1268         evt_struct = get_event_struct(&hostdata->pool);
1269         BUG_ON(!evt_struct);
1270
1271         init_event_struct(evt_struct, capabilities_rsp,
1272                           VIOSRP_MAD_FORMAT, info_timeout);
1273
1274         req = &evt_struct->iu.mad.capabilities;
1275         memset(req, 0, sizeof(*req));
1276
1277         hostdata->caps.flags = cpu_to_be32(CAP_LIST_SUPPORTED);
1278         if (hostdata->client_migrated)
1279                 hostdata->caps.flags |= cpu_to_be32(CLIENT_MIGRATED);
1280
1281         strncpy(hostdata->caps.name, dev_name(&hostdata->host->shost_gendev),
1282                 sizeof(hostdata->caps.name));
1283         hostdata->caps.name[sizeof(hostdata->caps.name) - 1] = '\0';
1284
1285         location = of_get_property(of_node, "ibm,loc-code", NULL);
1286         location = location ? location : dev_name(hostdata->dev);
1287         strncpy(hostdata->caps.loc, location, sizeof(hostdata->caps.loc));
1288         hostdata->caps.loc[sizeof(hostdata->caps.loc) - 1] = '\0';
1289
1290         req->common.type = cpu_to_be32(VIOSRP_CAPABILITIES_TYPE);
1291         req->buffer = cpu_to_be64(hostdata->caps_addr);
1292
1293         hostdata->caps.migration.common.cap_type =
1294                                 cpu_to_be32(MIGRATION_CAPABILITIES);
1295         hostdata->caps.migration.common.length =
1296                                 cpu_to_be16(sizeof(hostdata->caps.migration));
1297         hostdata->caps.migration.common.server_support =
1298                                 cpu_to_be16(SERVER_SUPPORTS_CAP);
1299         hostdata->caps.migration.ecl = cpu_to_be32(1);
1300
1301         if (client_reserve) {
1302                 hostdata->caps.reserve.common.cap_type =
1303                                         cpu_to_be32(RESERVATION_CAPABILITIES);
1304                 hostdata->caps.reserve.common.length =
1305                                 cpu_to_be16(sizeof(hostdata->caps.reserve));
1306                 hostdata->caps.reserve.common.server_support =
1307                                 cpu_to_be16(SERVER_SUPPORTS_CAP);
1308                 hostdata->caps.reserve.type =
1309                                 cpu_to_be32(CLIENT_RESERVE_SCSI_2);
1310                 req->common.length =
1311                                 cpu_to_be16(sizeof(hostdata->caps));
1312         } else
1313                 req->common.length = cpu_to_be16(sizeof(hostdata->caps) -
1314                                                 sizeof(hostdata->caps.reserve));
1315
1316         spin_lock_irqsave(hostdata->host->host_lock, flags);
1317         if (ibmvscsi_send_srp_event(evt_struct, hostdata, info_timeout * 2))
1318                 dev_err(hostdata->dev, "couldn't send CAPABILITIES_REQ!\n");
1319         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1320 };
1321
1322 /**
1323  * fast_fail_rsp: - Handle response to MAD enable fast fail
1324  * @evt_struct: srp_event_struct with the response
1325  *
1326  * Used as a "done" callback by when sending enable fast fail. Gets called
1327  * by ibmvscsi_handle_crq()
1328  */
1329 static void fast_fail_rsp(struct srp_event_struct *evt_struct)
1330 {
1331         struct ibmvscsi_host_data *hostdata = evt_struct->hostdata;
1332         u16 status = be16_to_cpu(evt_struct->xfer_iu->mad.fast_fail.common.status);
1333
1334         if (status == VIOSRP_MAD_NOT_SUPPORTED)
1335                 dev_err(hostdata->dev, "fast_fail not supported in server\n");
1336         else if (status == VIOSRP_MAD_FAILED)
1337                 dev_err(hostdata->dev, "fast_fail request failed\n");
1338         else if (status != VIOSRP_MAD_SUCCESS)
1339                 dev_err(hostdata->dev, "error 0x%X enabling fast_fail\n", status);
1340
1341         send_mad_capabilities(hostdata);
1342 }
1343
1344 /**
1345  * init_host - Start host initialization
1346  * @hostdata:   ibmvscsi_host_data of host
1347  *
1348  * Returns zero if successful.
1349  */
1350 static int enable_fast_fail(struct ibmvscsi_host_data *hostdata)
1351 {
1352         int rc;
1353         unsigned long flags;
1354         struct viosrp_fast_fail *fast_fail_mad;
1355         struct srp_event_struct *evt_struct;
1356
1357         if (!fast_fail) {
1358                 send_mad_capabilities(hostdata);
1359                 return 0;
1360         }
1361
1362         evt_struct = get_event_struct(&hostdata->pool);
1363         BUG_ON(!evt_struct);
1364
1365         init_event_struct(evt_struct, fast_fail_rsp, VIOSRP_MAD_FORMAT, info_timeout);
1366
1367         fast_fail_mad = &evt_struct->iu.mad.fast_fail;
1368         memset(fast_fail_mad, 0, sizeof(*fast_fail_mad));
1369         fast_fail_mad->common.type = cpu_to_be32(VIOSRP_ENABLE_FAST_FAIL);
1370         fast_fail_mad->common.length = cpu_to_be16(sizeof(*fast_fail_mad));
1371
1372         spin_lock_irqsave(hostdata->host->host_lock, flags);
1373         rc = ibmvscsi_send_srp_event(evt_struct, hostdata, info_timeout * 2);
1374         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1375         return rc;
1376 }
1377
1378 /**
1379  * adapter_info_rsp: - Handle response to MAD adapter info request
1380  * @evt_struct: srp_event_struct with the response
1381  *
1382  * Used as a "done" callback by when sending adapter_info. Gets called
1383  * by ibmvscsi_handle_crq()
1384 */
1385 static void adapter_info_rsp(struct srp_event_struct *evt_struct)
1386 {
1387         struct ibmvscsi_host_data *hostdata = evt_struct->hostdata;
1388
1389         if (evt_struct->xfer_iu->mad.adapter_info.common.status) {
1390                 dev_err(hostdata->dev, "error %d getting adapter info\n",
1391                         evt_struct->xfer_iu->mad.adapter_info.common.status);
1392         } else {
1393                 dev_info(hostdata->dev, "host srp version: %s, "
1394                          "host partition %s (%d), OS %d, max io %u\n",
1395                          hostdata->madapter_info.srp_version,
1396                          hostdata->madapter_info.partition_name,
1397                          be32_to_cpu(hostdata->madapter_info.partition_number),
1398                          be32_to_cpu(hostdata->madapter_info.os_type),
1399                          be32_to_cpu(hostdata->madapter_info.port_max_txu[0]));
1400                 
1401                 if (hostdata->madapter_info.port_max_txu[0]) 
1402                         hostdata->host->max_sectors = 
1403                                 be32_to_cpu(hostdata->madapter_info.port_max_txu[0]) >> 9;
1404                 
1405                 if (be32_to_cpu(hostdata->madapter_info.os_type) == SRP_MAD_OS_AIX &&
1406                     strcmp(hostdata->madapter_info.srp_version, "1.6a") <= 0) {
1407                         dev_err(hostdata->dev, "host (Ver. %s) doesn't support large transfers\n",
1408                                 hostdata->madapter_info.srp_version);
1409                         dev_err(hostdata->dev, "limiting scatterlists to %d\n",
1410                                 MAX_INDIRECT_BUFS);
1411                         hostdata->host->sg_tablesize = MAX_INDIRECT_BUFS;
1412                 }
1413
1414                 if (be32_to_cpu(hostdata->madapter_info.os_type) == SRP_MAD_OS_AIX) {
1415                         enable_fast_fail(hostdata);
1416                         return;
1417                 }
1418         }
1419
1420         send_srp_login(hostdata);
1421 }
1422
1423 /**
1424  * send_mad_adapter_info: - Sends the mad adapter info request
1425  *      and stores the result so it can be retrieved with
1426  *      sysfs.  We COULD consider causing a failure if the
1427  *      returned SRP version doesn't match ours.
1428  * @hostdata:   ibmvscsi_host_data of host
1429  * 
1430  * Returns zero if successful.
1431 */
1432 static void send_mad_adapter_info(struct ibmvscsi_host_data *hostdata)
1433 {
1434         struct viosrp_adapter_info *req;
1435         struct srp_event_struct *evt_struct;
1436         unsigned long flags;
1437
1438         evt_struct = get_event_struct(&hostdata->pool);
1439         BUG_ON(!evt_struct);
1440
1441         init_event_struct(evt_struct,
1442                           adapter_info_rsp,
1443                           VIOSRP_MAD_FORMAT,
1444                           info_timeout);
1445         
1446         req = &evt_struct->iu.mad.adapter_info;
1447         memset(req, 0x00, sizeof(*req));
1448         
1449         req->common.type = cpu_to_be32(VIOSRP_ADAPTER_INFO_TYPE);
1450         req->common.length = cpu_to_be16(sizeof(hostdata->madapter_info));
1451         req->buffer = cpu_to_be64(hostdata->adapter_info_addr);
1452
1453         spin_lock_irqsave(hostdata->host->host_lock, flags);
1454         if (ibmvscsi_send_srp_event(evt_struct, hostdata, info_timeout * 2))
1455                 dev_err(hostdata->dev, "couldn't send ADAPTER_INFO_REQ!\n");
1456         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1457 };
1458
1459 /**
1460  * init_adapter: Start virtual adapter initialization sequence
1461  *
1462  */
1463 static void init_adapter(struct ibmvscsi_host_data *hostdata)
1464 {
1465         send_mad_adapter_info(hostdata);
1466 }
1467
1468 /**
1469  * sync_completion: Signal that a synchronous command has completed
1470  * Note that after returning from this call, the evt_struct is freed.
1471  * the caller waiting on this completion shouldn't touch the evt_struct
1472  * again.
1473  */
1474 static void sync_completion(struct srp_event_struct *evt_struct)
1475 {
1476         /* copy the response back */
1477         if (evt_struct->sync_srp)
1478                 *evt_struct->sync_srp = *evt_struct->xfer_iu;
1479         
1480         complete(&evt_struct->comp);
1481 }
1482
1483 /**
1484  * ibmvscsi_abort: Abort a command...from scsi host template
1485  * send this over to the server and wait synchronously for the response
1486  */
1487 static int ibmvscsi_eh_abort_handler(struct scsi_cmnd *cmd)
1488 {
1489         struct ibmvscsi_host_data *hostdata = shost_priv(cmd->device->host);
1490         struct srp_tsk_mgmt *tsk_mgmt;
1491         struct srp_event_struct *evt;
1492         struct srp_event_struct *tmp_evt, *found_evt;
1493         union viosrp_iu srp_rsp;
1494         int rsp_rc;
1495         unsigned long flags;
1496         u16 lun = lun_from_dev(cmd->device);
1497         unsigned long wait_switch = 0;
1498
1499         /* First, find this command in our sent list so we can figure
1500          * out the correct tag
1501          */
1502         spin_lock_irqsave(hostdata->host->host_lock, flags);
1503         wait_switch = jiffies + (init_timeout * HZ);
1504         do {
1505                 found_evt = NULL;
1506                 list_for_each_entry(tmp_evt, &hostdata->sent, list) {
1507                         if (tmp_evt->cmnd == cmd) {
1508                                 found_evt = tmp_evt;
1509                                 break;
1510                         }
1511                 }
1512
1513                 if (!found_evt) {
1514                         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1515                         return SUCCESS;
1516                 }
1517
1518                 evt = get_event_struct(&hostdata->pool);
1519                 if (evt == NULL) {
1520                         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1521                         sdev_printk(KERN_ERR, cmd->device,
1522                                 "failed to allocate abort event\n");
1523                         return FAILED;
1524                 }
1525         
1526                 init_event_struct(evt,
1527                                   sync_completion,
1528                                   VIOSRP_SRP_FORMAT,
1529                                   abort_timeout);
1530
1531                 tsk_mgmt = &evt->iu.srp.tsk_mgmt;
1532         
1533                 /* Set up an abort SRP command */
1534                 memset(tsk_mgmt, 0x00, sizeof(*tsk_mgmt));
1535                 tsk_mgmt->opcode = SRP_TSK_MGMT;
1536                 int_to_scsilun(lun, &tsk_mgmt->lun);
1537                 tsk_mgmt->tsk_mgmt_func = SRP_TSK_ABORT_TASK;
1538                 tsk_mgmt->task_tag = (u64) found_evt;
1539
1540                 evt->sync_srp = &srp_rsp;
1541
1542                 init_completion(&evt->comp);
1543                 rsp_rc = ibmvscsi_send_srp_event(evt, hostdata, abort_timeout * 2);
1544
1545                 if (rsp_rc != SCSI_MLQUEUE_HOST_BUSY)
1546                         break;
1547
1548                 spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1549                 msleep(10);
1550                 spin_lock_irqsave(hostdata->host->host_lock, flags);
1551         } while (time_before(jiffies, wait_switch));
1552
1553         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1554
1555         if (rsp_rc != 0) {
1556                 sdev_printk(KERN_ERR, cmd->device,
1557                             "failed to send abort() event. rc=%d\n", rsp_rc);
1558                 return FAILED;
1559         }
1560
1561         sdev_printk(KERN_INFO, cmd->device,
1562                     "aborting command. lun 0x%llx, tag 0x%llx\n",
1563                     (((u64) lun) << 48), (u64) found_evt);
1564
1565         wait_for_completion(&evt->comp);
1566
1567         /* make sure we got a good response */
1568         if (unlikely(srp_rsp.srp.rsp.opcode != SRP_RSP)) {
1569                 if (printk_ratelimit())
1570                         sdev_printk(KERN_WARNING, cmd->device, "abort bad SRP RSP type %d\n",
1571                                     srp_rsp.srp.rsp.opcode);
1572                 return FAILED;
1573         }
1574
1575         if (srp_rsp.srp.rsp.flags & SRP_RSP_FLAG_RSPVALID)
1576                 rsp_rc = *((int *)srp_rsp.srp.rsp.data);
1577         else
1578                 rsp_rc = srp_rsp.srp.rsp.status;
1579
1580         if (rsp_rc) {
1581                 if (printk_ratelimit())
1582                         sdev_printk(KERN_WARNING, cmd->device,
1583                                     "abort code %d for task tag 0x%llx\n",
1584                                     rsp_rc, tsk_mgmt->task_tag);
1585                 return FAILED;
1586         }
1587
1588         /* Because we dropped the spinlock above, it's possible
1589          * The event is no longer in our list.  Make sure it didn't
1590          * complete while we were aborting
1591          */
1592         spin_lock_irqsave(hostdata->host->host_lock, flags);
1593         found_evt = NULL;
1594         list_for_each_entry(tmp_evt, &hostdata->sent, list) {
1595                 if (tmp_evt->cmnd == cmd) {
1596                         found_evt = tmp_evt;
1597                         break;
1598                 }
1599         }
1600
1601         if (found_evt == NULL) {
1602                 spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1603                 sdev_printk(KERN_INFO, cmd->device, "aborted task tag 0x%llx completed\n",
1604                             tsk_mgmt->task_tag);
1605                 return SUCCESS;
1606         }
1607
1608         sdev_printk(KERN_INFO, cmd->device, "successfully aborted task tag 0x%llx\n",
1609                     tsk_mgmt->task_tag);
1610
1611         cmd->result = (DID_ABORT << 16);
1612         list_del(&found_evt->list);
1613         unmap_cmd_data(&found_evt->iu.srp.cmd, found_evt,
1614                        found_evt->hostdata->dev);
1615         free_event_struct(&found_evt->hostdata->pool, found_evt);
1616         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1617         atomic_inc(&hostdata->request_limit);
1618         return SUCCESS;
1619 }
1620
1621 /**
1622  * ibmvscsi_eh_device_reset_handler: Reset a single LUN...from scsi host 
1623  * template send this over to the server and wait synchronously for the 
1624  * response
1625  */
1626 static int ibmvscsi_eh_device_reset_handler(struct scsi_cmnd *cmd)
1627 {
1628         struct ibmvscsi_host_data *hostdata = shost_priv(cmd->device->host);
1629         struct srp_tsk_mgmt *tsk_mgmt;
1630         struct srp_event_struct *evt;
1631         struct srp_event_struct *tmp_evt, *pos;
1632         union viosrp_iu srp_rsp;
1633         int rsp_rc;
1634         unsigned long flags;
1635         u16 lun = lun_from_dev(cmd->device);
1636         unsigned long wait_switch = 0;
1637
1638         spin_lock_irqsave(hostdata->host->host_lock, flags);
1639         wait_switch = jiffies + (init_timeout * HZ);
1640         do {
1641                 evt = get_event_struct(&hostdata->pool);
1642                 if (evt == NULL) {
1643                         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1644                         sdev_printk(KERN_ERR, cmd->device,
1645                                 "failed to allocate reset event\n");
1646                         return FAILED;
1647                 }
1648         
1649                 init_event_struct(evt,
1650                                   sync_completion,
1651                                   VIOSRP_SRP_FORMAT,
1652                                   reset_timeout);
1653
1654                 tsk_mgmt = &evt->iu.srp.tsk_mgmt;
1655
1656                 /* Set up a lun reset SRP command */
1657                 memset(tsk_mgmt, 0x00, sizeof(*tsk_mgmt));
1658                 tsk_mgmt->opcode = SRP_TSK_MGMT;
1659                 int_to_scsilun(lun, &tsk_mgmt->lun);
1660                 tsk_mgmt->tsk_mgmt_func = SRP_TSK_LUN_RESET;
1661
1662                 evt->sync_srp = &srp_rsp;
1663
1664                 init_completion(&evt->comp);
1665                 rsp_rc = ibmvscsi_send_srp_event(evt, hostdata, reset_timeout * 2);
1666
1667                 if (rsp_rc != SCSI_MLQUEUE_HOST_BUSY)
1668                         break;
1669
1670                 spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1671                 msleep(10);
1672                 spin_lock_irqsave(hostdata->host->host_lock, flags);
1673         } while (time_before(jiffies, wait_switch));
1674
1675         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1676
1677         if (rsp_rc != 0) {
1678                 sdev_printk(KERN_ERR, cmd->device,
1679                             "failed to send reset event. rc=%d\n", rsp_rc);
1680                 return FAILED;
1681         }
1682
1683         sdev_printk(KERN_INFO, cmd->device, "resetting device. lun 0x%llx\n",
1684                     (((u64) lun) << 48));
1685
1686         wait_for_completion(&evt->comp);
1687
1688         /* make sure we got a good response */
1689         if (unlikely(srp_rsp.srp.rsp.opcode != SRP_RSP)) {
1690                 if (printk_ratelimit())
1691                         sdev_printk(KERN_WARNING, cmd->device, "reset bad SRP RSP type %d\n",
1692                                     srp_rsp.srp.rsp.opcode);
1693                 return FAILED;
1694         }
1695
1696         if (srp_rsp.srp.rsp.flags & SRP_RSP_FLAG_RSPVALID)
1697                 rsp_rc = *((int *)srp_rsp.srp.rsp.data);
1698         else
1699                 rsp_rc = srp_rsp.srp.rsp.status;
1700
1701         if (rsp_rc) {
1702                 if (printk_ratelimit())
1703                         sdev_printk(KERN_WARNING, cmd->device,
1704                                     "reset code %d for task tag 0x%llx\n",
1705                                     rsp_rc, tsk_mgmt->task_tag);
1706                 return FAILED;
1707         }
1708
1709         /* We need to find all commands for this LUN that have not yet been
1710          * responded to, and fail them with DID_RESET
1711          */
1712         spin_lock_irqsave(hostdata->host->host_lock, flags);
1713         list_for_each_entry_safe(tmp_evt, pos, &hostdata->sent, list) {
1714                 if ((tmp_evt->cmnd) && (tmp_evt->cmnd->device == cmd->device)) {
1715                         if (tmp_evt->cmnd)
1716                                 tmp_evt->cmnd->result = (DID_RESET << 16);
1717                         list_del(&tmp_evt->list);
1718                         unmap_cmd_data(&tmp_evt->iu.srp.cmd, tmp_evt,
1719                                        tmp_evt->hostdata->dev);
1720                         free_event_struct(&tmp_evt->hostdata->pool,
1721                                                    tmp_evt);
1722                         atomic_inc(&hostdata->request_limit);
1723                         if (tmp_evt->cmnd_done)
1724                                 tmp_evt->cmnd_done(tmp_evt->cmnd);
1725                         else if (tmp_evt->done)
1726                                 tmp_evt->done(tmp_evt);
1727                 }
1728         }
1729         spin_unlock_irqrestore(hostdata->host->host_lock, flags);
1730         return SUCCESS;
1731 }
1732
1733 /**
1734  * ibmvscsi_eh_host_reset_handler - Reset the connection to the server
1735  * @cmd:        struct scsi_cmnd having problems
1736 */
1737 static int ibmvscsi_eh_host_reset_handler(struct scsi_cmnd *cmd)
1738 {
1739         unsigned long wait_switch = 0;
1740         struct ibmvscsi_host_data *hostdata = shost_priv(cmd->device->host);
1741
1742         dev_err(hostdata->dev, "Resetting connection due to error recovery\n");
1743
1744         ibmvscsi_reset_host(hostdata);
1745
1746         for (wait_switch = jiffies + (init_timeout * HZ);
1747              time_before(jiffies, wait_switch) &&
1748                      atomic_read(&hostdata->request_limit) < 2;) {
1749
1750                 msleep(10);
1751         }
1752
1753         if (atomic_read(&hostdata->request_limit) <= 0)
1754                 return FAILED;
1755
1756         return SUCCESS;
1757 }
1758
1759 /**
1760  * ibmvscsi_handle_crq: - Handles and frees received events in the CRQ
1761  * @crq:        Command/Response queue
1762  * @hostdata:   ibmvscsi_host_data of host
1763  *
1764 */
1765 static void ibmvscsi_handle_crq(struct viosrp_crq *crq,
1766                                 struct ibmvscsi_host_data *hostdata)
1767 {
1768         long rc;
1769         unsigned long flags;
1770         /* The hypervisor copies our tag value here so no byteswapping */
1771         struct srp_event_struct *evt_struct =
1772                         (__force struct srp_event_struct *)crq->IU_data_ptr;
1773         switch (crq->valid) {
1774         case VIOSRP_CRQ_INIT_RSP:               /* initialization */
1775                 switch (crq->format) {
1776                 case VIOSRP_CRQ_INIT:   /* Initialization message */
1777                         dev_info(hostdata->dev, "partner initialized\n");
1778                         /* Send back a response */
1779                         rc = ibmvscsi_send_crq(hostdata, 0xC002000000000000LL, 0);
1780                         if (rc == 0) {
1781                                 /* Now login */
1782                                 init_adapter(hostdata);
1783                         } else {
1784                                 dev_err(hostdata->dev, "Unable to send init rsp. rc=%ld\n", rc);
1785                         }
1786
1787                         break;
1788                 case VIOSRP_CRQ_INIT_COMPLETE:  /* Initialization response */
1789                         dev_info(hostdata->dev, "partner initialization complete\n");
1790
1791                         /* Now login */
1792                         init_adapter(hostdata);
1793                         break;
1794                 default:
1795                         dev_err(hostdata->dev, "unknown crq message type: %d\n", crq->format);
1796                 }
1797                 return;
1798         case VIOSRP_CRQ_XPORT_EVENT:    /* Hypervisor telling us the connection is closed */
1799                 scsi_block_requests(hostdata->host);
1800                 atomic_set(&hostdata->request_limit, 0);
1801                 if (crq->format == 0x06) {
1802                         /* We need to re-setup the interpartition connection */
1803                         dev_info(hostdata->dev, "Re-enabling adapter!\n");
1804                         hostdata->client_migrated = 1;
1805                         hostdata->reenable_crq = 1;
1806                         purge_requests(hostdata, DID_REQUEUE);
1807                         wake_up(&hostdata->work_wait_q);
1808                 } else {
1809                         dev_err(hostdata->dev, "Virtual adapter failed rc %d!\n",
1810                                 crq->format);
1811                         ibmvscsi_reset_host(hostdata);
1812                 }
1813                 return;
1814         case VIOSRP_CRQ_CMD_RSP:                /* real payload */
1815                 break;
1816         default:
1817                 dev_err(hostdata->dev, "got an invalid message type 0x%02x\n",
1818                         crq->valid);
1819                 return;
1820         }
1821
1822         /* The only kind of payload CRQs we should get are responses to
1823          * things we send. Make sure this response is to something we
1824          * actually sent
1825          */
1826         if (!valid_event_struct(&hostdata->pool, evt_struct)) {
1827                 dev_err(hostdata->dev, "returned correlation_token 0x%p is invalid!\n",
1828                        evt_struct);
1829                 return;
1830         }
1831
1832         if (atomic_read(&evt_struct->free)) {
1833                 dev_err(hostdata->dev, "received duplicate correlation_token 0x%p!\n",
1834                         evt_struct);
1835                 return;
1836         }
1837
1838         if (crq->format == VIOSRP_SRP_FORMAT)
1839                 atomic_add(be32_to_cpu(evt_struct->xfer_iu->srp.rsp.req_lim_delta),
1840                            &hostdata->request_limit);
1841
1842         del_timer(&evt_struct->timer);
1843
1844         if ((crq->status != VIOSRP_OK && crq->status != VIOSRP_OK2) && evt_struct->cmnd)
1845                 evt_struct->cmnd->result = DID_ERROR << 16;
1846         if (evt_struct->done)
1847                 evt_struct->done(evt_struct);
1848         else
1849                 dev_err(hostdata->dev, "returned done() is NULL; not running it!\n");
1850
1851         /*
1852          * Lock the host_lock before messing with these structures, since we
1853          * are running in a task context
1854          */
1855         spin_lock_irqsave(evt_struct->hostdata->host->host_lock, flags);
1856         list_del(&evt_struct->list);
1857         free_event_struct(&evt_struct->hostdata->pool, evt_struct);
1858         spin_unlock_irqrestore(evt_struct->hostdata->host->host_lock, flags);
1859 }
1860
1861 /**
1862  * ibmvscsi_slave_configure: Set the "allow_restart" flag for each disk.
1863  * @sdev:       struct scsi_device device to configure
1864  *
1865  * Enable allow_restart for a device if it is a disk.  Adjust the
1866  * queue_depth here also as is required by the documentation for
1867  * struct scsi_host_template.
1868  */
1869 static int ibmvscsi_slave_configure(struct scsi_device *sdev)
1870 {
1871         struct Scsi_Host *shost = sdev->host;
1872         unsigned long lock_flags = 0;
1873
1874         spin_lock_irqsave(shost->host_lock, lock_flags);
1875         if (sdev->type == TYPE_DISK) {
1876                 sdev->allow_restart = 1;
1877                 blk_queue_rq_timeout(sdev->request_queue, 120 * HZ);
1878         }
1879         spin_unlock_irqrestore(shost->host_lock, lock_flags);
1880         return 0;
1881 }
1882
1883 /**
1884  * ibmvscsi_change_queue_depth - Change the device's queue depth
1885  * @sdev:       scsi device struct
1886  * @qdepth:     depth to set
1887  * @reason:     calling context
1888  *
1889  * Return value:
1890  *      actual depth set
1891  **/
1892 static int ibmvscsi_change_queue_depth(struct scsi_device *sdev, int qdepth)
1893 {
1894         if (qdepth > IBMVSCSI_MAX_CMDS_PER_LUN)
1895                 qdepth = IBMVSCSI_MAX_CMDS_PER_LUN;
1896         return scsi_change_queue_depth(sdev, qdepth);
1897 }
1898
1899 /* ------------------------------------------------------------
1900  * sysfs attributes
1901  */
1902 static ssize_t show_host_vhost_loc(struct device *dev,
1903                                    struct device_attribute *attr, char *buf)
1904 {
1905         struct Scsi_Host *shost = class_to_shost(dev);
1906         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
1907         int len;
1908
1909         len = snprintf(buf, sizeof(hostdata->caps.loc), "%s\n",
1910                        hostdata->caps.loc);
1911         return len;
1912 }
1913
1914 static struct device_attribute ibmvscsi_host_vhost_loc = {
1915         .attr = {
1916                  .name = "vhost_loc",
1917                  .mode = S_IRUGO,
1918                  },
1919         .show = show_host_vhost_loc,
1920 };
1921
1922 static ssize_t show_host_vhost_name(struct device *dev,
1923                                     struct device_attribute *attr, char *buf)
1924 {
1925         struct Scsi_Host *shost = class_to_shost(dev);
1926         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
1927         int len;
1928
1929         len = snprintf(buf, sizeof(hostdata->caps.name), "%s\n",
1930                        hostdata->caps.name);
1931         return len;
1932 }
1933
1934 static struct device_attribute ibmvscsi_host_vhost_name = {
1935         .attr = {
1936                  .name = "vhost_name",
1937                  .mode = S_IRUGO,
1938                  },
1939         .show = show_host_vhost_name,
1940 };
1941
1942 static ssize_t show_host_srp_version(struct device *dev,
1943                                      struct device_attribute *attr, char *buf)
1944 {
1945         struct Scsi_Host *shost = class_to_shost(dev);
1946         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
1947         int len;
1948
1949         len = snprintf(buf, PAGE_SIZE, "%s\n",
1950                        hostdata->madapter_info.srp_version);
1951         return len;
1952 }
1953
1954 static struct device_attribute ibmvscsi_host_srp_version = {
1955         .attr = {
1956                  .name = "srp_version",
1957                  .mode = S_IRUGO,
1958                  },
1959         .show = show_host_srp_version,
1960 };
1961
1962 static ssize_t show_host_partition_name(struct device *dev,
1963                                         struct device_attribute *attr,
1964                                         char *buf)
1965 {
1966         struct Scsi_Host *shost = class_to_shost(dev);
1967         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
1968         int len;
1969
1970         len = snprintf(buf, PAGE_SIZE, "%s\n",
1971                        hostdata->madapter_info.partition_name);
1972         return len;
1973 }
1974
1975 static struct device_attribute ibmvscsi_host_partition_name = {
1976         .attr = {
1977                  .name = "partition_name",
1978                  .mode = S_IRUGO,
1979                  },
1980         .show = show_host_partition_name,
1981 };
1982
1983 static ssize_t show_host_partition_number(struct device *dev,
1984                                           struct device_attribute *attr,
1985                                           char *buf)
1986 {
1987         struct Scsi_Host *shost = class_to_shost(dev);
1988         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
1989         int len;
1990
1991         len = snprintf(buf, PAGE_SIZE, "%d\n",
1992                        be32_to_cpu(hostdata->madapter_info.partition_number));
1993         return len;
1994 }
1995
1996 static struct device_attribute ibmvscsi_host_partition_number = {
1997         .attr = {
1998                  .name = "partition_number",
1999                  .mode = S_IRUGO,
2000                  },
2001         .show = show_host_partition_number,
2002 };
2003
2004 static ssize_t show_host_mad_version(struct device *dev,
2005                                      struct device_attribute *attr, char *buf)
2006 {
2007         struct Scsi_Host *shost = class_to_shost(dev);
2008         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
2009         int len;
2010
2011         len = snprintf(buf, PAGE_SIZE, "%d\n",
2012                        be32_to_cpu(hostdata->madapter_info.mad_version));
2013         return len;
2014 }
2015
2016 static struct device_attribute ibmvscsi_host_mad_version = {
2017         .attr = {
2018                  .name = "mad_version",
2019                  .mode = S_IRUGO,
2020                  },
2021         .show = show_host_mad_version,
2022 };
2023
2024 static ssize_t show_host_os_type(struct device *dev,
2025                                  struct device_attribute *attr, char *buf)
2026 {
2027         struct Scsi_Host *shost = class_to_shost(dev);
2028         struct ibmvscsi_host_data *hostdata = shost_priv(shost);
2029         int len;
2030
2031         len = snprintf(buf, PAGE_SIZE, "%d\n",
2032                        be32_to_cpu(hostdata->madapter_info.os_type));
2033         return len;
2034 }
2035
2036 static struct device_attribute ibmvscsi_host_os_type = {
2037         .attr = {
2038                  .name = "os_type",
2039                  .mode = S_IRUGO,
2040                  },
2041         .show = show_host_os_type,
2042 };
2043
2044 static ssize_t show_host_config(struct device *dev,
2045                                 struct device_attribute *attr, char *buf)
2046 {
2047         return 0;
2048 }
2049
2050 static struct device_attribute ibmvscsi_host_config = {
2051         .attr = {
2052                 .name = "config",
2053                 .mode = S_IRUGO,
2054                 },
2055         .show = show_host_config,
2056 };
2057
2058 static struct device_attribute *ibmvscsi_attrs[] = {
2059         &ibmvscsi_host_vhost_loc,
2060         &ibmvscsi_host_vhost_name,
2061         &ibmvscsi_host_srp_version,
2062         &ibmvscsi_host_partition_name,
2063         &ibmvscsi_host_partition_number,
2064         &ibmvscsi_host_mad_version,
2065         &ibmvscsi_host_os_type,
2066         &ibmvscsi_host_config,
2067         NULL
2068 };
2069
2070 /* ------------------------------------------------------------
2071  * SCSI driver registration
2072  */
2073 static struct scsi_host_template driver_template = {
2074         .module = THIS_MODULE,
2075         .name = "IBM POWER Virtual SCSI Adapter " IBMVSCSI_VERSION,
2076         .proc_name = "ibmvscsi",
2077         .queuecommand = ibmvscsi_queuecommand,
2078         .eh_timed_out = srp_timed_out,
2079         .eh_abort_handler = ibmvscsi_eh_abort_handler,
2080         .eh_device_reset_handler = ibmvscsi_eh_device_reset_handler,
2081         .eh_host_reset_handler = ibmvscsi_eh_host_reset_handler,
2082         .slave_configure = ibmvscsi_slave_configure,
2083         .change_queue_depth = ibmvscsi_change_queue_depth,
2084         .cmd_per_lun = IBMVSCSI_CMDS_PER_LUN_DEFAULT,
2085         .can_queue = IBMVSCSI_MAX_REQUESTS_DEFAULT,
2086         .this_id = -1,
2087         .sg_tablesize = SG_ALL,
2088         .use_clustering = ENABLE_CLUSTERING,
2089         .shost_attrs = ibmvscsi_attrs,
2090 };
2091
2092 /**
2093  * ibmvscsi_get_desired_dma - Calculate IO memory desired by the driver
2094  *
2095  * @vdev: struct vio_dev for the device whose desired IO mem is to be returned
2096  *
2097  * Return value:
2098  *      Number of bytes of IO data the driver will need to perform well.
2099  */
2100 static unsigned long ibmvscsi_get_desired_dma(struct vio_dev *vdev)
2101 {
2102         /* iu_storage data allocated in initialize_event_pool */
2103         unsigned long desired_io = max_events * sizeof(union viosrp_iu);
2104
2105         /* add io space for sg data */
2106         desired_io += (IBMVSCSI_MAX_SECTORS_DEFAULT * 512 *
2107                              IBMVSCSI_CMDS_PER_LUN_DEFAULT);
2108
2109         return desired_io;
2110 }
2111
2112 static void ibmvscsi_do_work(struct ibmvscsi_host_data *hostdata)
2113 {
2114         int rc;
2115         char *action = "reset";
2116
2117         if (hostdata->reset_crq) {
2118                 smp_rmb();
2119                 hostdata->reset_crq = 0;
2120
2121                 rc = ibmvscsi_reset_crq_queue(&hostdata->queue, hostdata);
2122                 if (!rc)
2123                         rc = ibmvscsi_send_crq(hostdata, 0xC001000000000000LL, 0);
2124                 vio_enable_interrupts(to_vio_dev(hostdata->dev));
2125         } else if (hostdata->reenable_crq) {
2126                 smp_rmb();
2127                 action = "enable";
2128                 rc = ibmvscsi_reenable_crq_queue(&hostdata->queue, hostdata);
2129                 hostdata->reenable_crq = 0;
2130                 if (!rc)
2131                         rc = ibmvscsi_send_crq(hostdata, 0xC001000000000000LL, 0);
2132         } else
2133                 return;
2134
2135         if (rc) {
2136                 atomic_set(&hostdata->request_limit, -1);
2137                 dev_err(hostdata->dev, "error after %s\n", action);
2138         }
2139
2140         scsi_unblock_requests(hostdata->host);
2141 }
2142
2143 static int ibmvscsi_work_to_do(struct ibmvscsi_host_data *hostdata)
2144 {
2145         if (kthread_should_stop())
2146                 return 1;
2147         else if (hostdata->reset_crq) {
2148                 smp_rmb();
2149                 return 1;
2150         } else if (hostdata->reenable_crq) {
2151                 smp_rmb();
2152                 return 1;
2153         }
2154
2155         return 0;
2156 }
2157
2158 static int ibmvscsi_work(void *data)
2159 {
2160         struct ibmvscsi_host_data *hostdata = data;
2161         int rc;
2162
2163         set_user_nice(current, MIN_NICE);
2164
2165         while (1) {
2166                 rc = wait_event_interruptible(hostdata->work_wait_q,
2167                                               ibmvscsi_work_to_do(hostdata));
2168
2169                 BUG_ON(rc);
2170
2171                 if (kthread_should_stop())
2172                         break;
2173
2174                 ibmvscsi_do_work(hostdata);
2175         }
2176
2177         return 0;
2178 }
2179
2180 /**
2181  * Called by bus code for each adapter
2182  */
2183 static int ibmvscsi_probe(struct vio_dev *vdev, const struct vio_device_id *id)
2184 {
2185         struct ibmvscsi_host_data *hostdata;
2186         struct Scsi_Host *host;
2187         struct device *dev = &vdev->dev;
2188         struct srp_rport_identifiers ids;
2189         struct srp_rport *rport;
2190         unsigned long wait_switch = 0;
2191         int rc;
2192
2193         dev_set_drvdata(&vdev->dev, NULL);
2194
2195         host = scsi_host_alloc(&driver_template, sizeof(*hostdata));
2196         if (!host) {
2197                 dev_err(&vdev->dev, "couldn't allocate host data\n");
2198                 goto scsi_host_alloc_failed;
2199         }
2200
2201         host->transportt = ibmvscsi_transport_template;
2202         hostdata = shost_priv(host);
2203         memset(hostdata, 0x00, sizeof(*hostdata));
2204         INIT_LIST_HEAD(&hostdata->sent);
2205         init_waitqueue_head(&hostdata->work_wait_q);
2206         hostdata->host = host;
2207         hostdata->dev = dev;
2208         atomic_set(&hostdata->request_limit, -1);
2209         hostdata->host->max_sectors = IBMVSCSI_MAX_SECTORS_DEFAULT;
2210
2211         if (map_persist_bufs(hostdata)) {
2212                 dev_err(&vdev->dev, "couldn't map persistent buffers\n");
2213                 goto persist_bufs_failed;
2214         }
2215
2216         hostdata->work_thread = kthread_run(ibmvscsi_work, hostdata, "%s_%d",
2217                                             "ibmvscsi", host->host_no);
2218
2219         if (IS_ERR(hostdata->work_thread)) {
2220                 dev_err(&vdev->dev, "couldn't initialize kthread. rc=%ld\n",
2221                         PTR_ERR(hostdata->work_thread));
2222                 goto init_crq_failed;
2223         }
2224
2225         rc = ibmvscsi_init_crq_queue(&hostdata->queue, hostdata, max_events);
2226         if (rc != 0 && rc != H_RESOURCE) {
2227                 dev_err(&vdev->dev, "couldn't initialize crq. rc=%d\n", rc);
2228                 goto kill_kthread;
2229         }
2230         if (initialize_event_pool(&hostdata->pool, max_events, hostdata) != 0) {
2231                 dev_err(&vdev->dev, "couldn't initialize event pool\n");
2232                 goto init_pool_failed;
2233         }
2234
2235         host->max_lun = IBMVSCSI_MAX_LUN;
2236         host->max_id = max_id;
2237         host->max_channel = max_channel;
2238         host->max_cmd_len = 16;
2239
2240         dev_info(dev,
2241                  "Maximum ID: %d Maximum LUN: %llu Maximum Channel: %d\n",
2242                  host->max_id, host->max_lun, host->max_channel);
2243
2244         if (scsi_add_host(hostdata->host, hostdata->dev))
2245                 goto add_host_failed;
2246
2247         /* we don't have a proper target_port_id so let's use the fake one */
2248         memcpy(ids.port_id, hostdata->madapter_info.partition_name,
2249                sizeof(ids.port_id));
2250         ids.roles = SRP_RPORT_ROLE_TARGET;
2251         rport = srp_rport_add(host, &ids);
2252         if (IS_ERR(rport))
2253                 goto add_srp_port_failed;
2254
2255         /* Try to send an initialization message.  Note that this is allowed
2256          * to fail if the other end is not acive.  In that case we don't
2257          * want to scan
2258          */
2259         if (ibmvscsi_send_crq(hostdata, 0xC001000000000000LL, 0) == 0
2260             || rc == H_RESOURCE) {
2261                 /*
2262                  * Wait around max init_timeout secs for the adapter to finish
2263                  * initializing. When we are done initializing, we will have a
2264                  * valid request_limit.  We don't want Linux scanning before
2265                  * we are ready.
2266                  */
2267                 for (wait_switch = jiffies + (init_timeout * HZ);
2268                      time_before(jiffies, wait_switch) &&
2269                      atomic_read(&hostdata->request_limit) < 2;) {
2270
2271                         msleep(10);
2272                 }
2273
2274                 /* if we now have a valid request_limit, initiate a scan */
2275                 if (atomic_read(&hostdata->request_limit) > 0)
2276                         scsi_scan_host(host);
2277         }
2278
2279         dev_set_drvdata(&vdev->dev, hostdata);
2280         spin_lock(&ibmvscsi_driver_lock);
2281         list_add_tail(&hostdata->host_list, &ibmvscsi_head);
2282         spin_unlock(&ibmvscsi_driver_lock);
2283         return 0;
2284
2285       add_srp_port_failed:
2286         scsi_remove_host(hostdata->host);
2287       add_host_failed:
2288         release_event_pool(&hostdata->pool, hostdata);
2289       init_pool_failed:
2290         ibmvscsi_release_crq_queue(&hostdata->queue, hostdata, max_events);
2291       kill_kthread:
2292       kthread_stop(hostdata->work_thread);
2293       init_crq_failed:
2294         unmap_persist_bufs(hostdata);
2295       persist_bufs_failed:
2296         scsi_host_put(host);
2297       scsi_host_alloc_failed:
2298         return -1;
2299 }
2300
2301 static int ibmvscsi_remove(struct vio_dev *vdev)
2302 {
2303         struct ibmvscsi_host_data *hostdata = dev_get_drvdata(&vdev->dev);
2304
2305         srp_remove_host(hostdata->host);
2306         scsi_remove_host(hostdata->host);
2307
2308         purge_requests(hostdata, DID_ERROR);
2309         release_event_pool(&hostdata->pool, hostdata);
2310
2311         ibmvscsi_release_crq_queue(&hostdata->queue, hostdata,
2312                                         max_events);
2313
2314         kthread_stop(hostdata->work_thread);
2315         unmap_persist_bufs(hostdata);
2316
2317         spin_lock(&ibmvscsi_driver_lock);
2318         list_del(&hostdata->host_list);
2319         spin_unlock(&ibmvscsi_driver_lock);
2320
2321         scsi_host_put(hostdata->host);
2322
2323         return 0;
2324 }
2325
2326 /**
2327  * ibmvscsi_resume: Resume from suspend
2328  * @dev:        device struct
2329  *
2330  * We may have lost an interrupt across suspend/resume, so kick the
2331  * interrupt handler
2332  */
2333 static int ibmvscsi_resume(struct device *dev)
2334 {
2335         struct ibmvscsi_host_data *hostdata = dev_get_drvdata(dev);
2336         vio_disable_interrupts(to_vio_dev(hostdata->dev));
2337         tasklet_schedule(&hostdata->srp_task);
2338
2339         return 0;
2340 }
2341
2342 /**
2343  * ibmvscsi_device_table: Used by vio.c to match devices in the device tree we 
2344  * support.
2345  */
2346 static const struct vio_device_id ibmvscsi_device_table[] = {
2347         {"vscsi", "IBM,v-scsi"},
2348         { "", "" }
2349 };
2350 MODULE_DEVICE_TABLE(vio, ibmvscsi_device_table);
2351
2352 static const struct dev_pm_ops ibmvscsi_pm_ops = {
2353         .resume = ibmvscsi_resume
2354 };
2355
2356 static struct vio_driver ibmvscsi_driver = {
2357         .id_table = ibmvscsi_device_table,
2358         .probe = ibmvscsi_probe,
2359         .remove = ibmvscsi_remove,
2360         .get_desired_dma = ibmvscsi_get_desired_dma,
2361         .name = "ibmvscsi",
2362         .pm = &ibmvscsi_pm_ops,
2363 };
2364
2365 static struct srp_function_template ibmvscsi_transport_functions = {
2366 };
2367
2368 int __init ibmvscsi_module_init(void)
2369 {
2370         int ret;
2371
2372         /* Ensure we have two requests to do error recovery */
2373         driver_template.can_queue = max_requests;
2374         max_events = max_requests + 2;
2375
2376         if (!firmware_has_feature(FW_FEATURE_VIO))
2377                 return -ENODEV;
2378
2379         ibmvscsi_transport_template =
2380                 srp_attach_transport(&ibmvscsi_transport_functions);
2381         if (!ibmvscsi_transport_template)
2382                 return -ENOMEM;
2383
2384         ret = vio_register_driver(&ibmvscsi_driver);
2385         if (ret)
2386                 srp_release_transport(ibmvscsi_transport_template);
2387         return ret;
2388 }
2389
2390 void __exit ibmvscsi_module_exit(void)
2391 {
2392         vio_unregister_driver(&ibmvscsi_driver);
2393         srp_release_transport(ibmvscsi_transport_template);
2394 }
2395
2396 module_init(ibmvscsi_module_init);
2397 module_exit(ibmvscsi_module_exit);