pci.c 76.4 KB
Newer Older
M
Matthew Wilcox 已提交
1 2
/*
 * NVM Express device driver
3
 * Copyright (c) 2011-2014, Intel Corporation.
M
Matthew Wilcox 已提交
4 5 6 7 8 9 10 11 12 13 14
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 */

K
Keith Busch 已提交
15
#include <linux/aer.h>
16
#include <linux/async.h>
M
Matthew Wilcox 已提交
17
#include <linux/blkdev.h>
M
Matias Bjørling 已提交
18
#include <linux/blk-mq.h>
19
#include <linux/blk-mq-pci.h>
20
#include <linux/dmi.h>
M
Matthew Wilcox 已提交
21 22 23 24 25
#include <linux/init.h>
#include <linux/interrupt.h>
#include <linux/io.h>
#include <linux/mm.h>
#include <linux/module.h>
26
#include <linux/mutex.h>
27
#include <linux/once.h>
M
Matthew Wilcox 已提交
28
#include <linux/pci.h>
K
Keith Busch 已提交
29
#include <linux/t10-pi.h>
M
Matthew Wilcox 已提交
30
#include <linux/types.h>
31
#include <linux/io-64-nonatomic-lo-hi.h>
32
#include <linux/sed-opal.h>
33

34 35
#include "nvme.h"

M
Matthew Wilcox 已提交
36 37
#define SQ_SIZE(depth)		(depth * sizeof(struct nvme_command))
#define CQ_SIZE(depth)		(depth * sizeof(struct nvme_completion))
38

C
Chaitanya Kulkarni 已提交
39
#define SGES_PER_PAGE	(PAGE_SIZE / sizeof(struct nvme_sgl_desc))
40

41 42 43 44 45 46 47
/*
 * These can be higher, but we need to ensure that any command doesn't
 * require an sg allocation that needs more than a page of data.
 */
#define NVME_MAX_KB_SZ	4096
#define NVME_MAX_SEGS	127

48 49 50
static int use_threaded_interrupts;
module_param(use_threaded_interrupts, int, 0);

51
static bool use_cmb_sqes = true;
52
module_param(use_cmb_sqes, bool, 0444);
53 54
MODULE_PARM_DESC(use_cmb_sqes, "use controller's memory buffer for I/O SQes");

55 56 57 58
static unsigned int max_host_mem_size_mb = 128;
module_param(max_host_mem_size_mb, uint, 0444);
MODULE_PARM_DESC(max_host_mem_size_mb,
	"Maximum Host Memory Buffer (HMB) size per controller (in MiB)");
59

C
Chaitanya Kulkarni 已提交
60 61 62 63 64 65
static unsigned int sgl_threshold = SZ_32K;
module_param(sgl_threshold, uint, 0644);
MODULE_PARM_DESC(sgl_threshold,
		"Use SGLs when average request segment size is larger or equal to "
		"this size. Use 0 to disable SGLs.");

66 67 68 69 70 71 72 73 74 75
static int io_queue_depth_set(const char *val, const struct kernel_param *kp);
static const struct kernel_param_ops io_queue_depth_ops = {
	.set = io_queue_depth_set,
	.get = param_get_int,
};

static int io_queue_depth = 1024;
module_param_cb(io_queue_depth, &io_queue_depth_ops, &io_queue_depth, 0644);
MODULE_PARM_DESC(io_queue_depth, "set io queue depth, should >= 2");

76 77 78 79 80 81 82 83 84 85 86 87
static int queue_count_set(const char *val, const struct kernel_param *kp);
static const struct kernel_param_ops queue_count_ops = {
	.set = queue_count_set,
	.get = param_get_int,
};

static int write_queues;
module_param_cb(write_queues, &queue_count_ops, &write_queues, 0644);
MODULE_PARM_DESC(write_queues,
	"Number of queues to use for writes. If not set, reads and writes "
	"will share a queue set.");

J
Jens Axboe 已提交
88
static int poll_queues = 0;
J
Jens Axboe 已提交
89 90 91
module_param_cb(poll_queues, &queue_count_ops, &poll_queues, 0644);
MODULE_PARM_DESC(poll_queues, "Number of queues to use for polled IO.");

92 93
struct nvme_dev;
struct nvme_queue;
94

95
static void nvme_dev_disable(struct nvme_dev *dev, bool shutdown);
96

97 98 99 100
/*
 * Represents an NVM Express device.  Each nvme_dev is a PCI function.
 */
struct nvme_dev {
101
	struct nvme_queue *queues;
102 103 104 105 106 107 108 109
	struct blk_mq_tag_set tagset;
	struct blk_mq_tag_set admin_tagset;
	u32 __iomem *dbs;
	struct device *dev;
	struct dma_pool *prp_page_pool;
	struct dma_pool *prp_small_pool;
	unsigned online_queues;
	unsigned max_qid;
110
	unsigned io_queues[HCTX_MAX_TYPES];
111
	unsigned int num_vecs;
112 113 114
	int q_depth;
	u32 db_stride;
	void __iomem *bar;
115
	unsigned long bar_mapped_size;
116
	struct work_struct remove_work;
117
	struct mutex shutdown_lock;
118 119
	bool subsystem;
	void __iomem *cmb;
120
	pci_bus_addr_t cmb_bus_addr;
121 122
	u64 cmb_size;
	u32 cmbsz;
123
	u32 cmbloc;
124
	struct nvme_ctrl ctrl;
K
Keith Busch 已提交
125
	struct completion ioq_wait;
126

127 128
	mempool_t *iod_mempool;

129
	/* shadow doorbell buffer support: */
130 131 132 133
	u32 *dbbuf_dbs;
	dma_addr_t dbbuf_dbs_dma_addr;
	u32 *dbbuf_eis;
	dma_addr_t dbbuf_eis_dma_addr;
134 135 136 137

	/* host memory buffer support: */
	u64 host_mem_size;
	u32 nr_host_mem_descs;
138
	dma_addr_t host_mem_descs_dma;
139 140
	struct nvme_host_mem_buf_desc *host_mem_descs;
	void **host_mem_desc_bufs;
K
Keith Busch 已提交
141
};
142

143 144 145 146 147 148 149 150 151 152 153
static int io_queue_depth_set(const char *val, const struct kernel_param *kp)
{
	int n = 0, ret;

	ret = kstrtoint(val, 10, &n);
	if (ret != 0 || n < 2)
		return -EINVAL;

	return param_set_int(val, kp);
}

154 155 156 157 158
static int queue_count_set(const char *val, const struct kernel_param *kp)
{
	int n = 0, ret;

	ret = kstrtoint(val, 10, &n);
159 160
	if (ret)
		return ret;
161 162 163 164 165 166
	if (n > num_possible_cpus())
		n = num_possible_cpus();

	return param_set_int(val, kp);
}

167 168 169 170 171 172 173 174 175 176
static inline unsigned int sq_idx(unsigned int qid, u32 stride)
{
	return qid * 2 * stride;
}

static inline unsigned int cq_idx(unsigned int qid, u32 stride)
{
	return (qid * 2 + 1) * stride;
}

177 178 179 180 181
static inline struct nvme_dev *to_nvme_dev(struct nvme_ctrl *ctrl)
{
	return container_of(ctrl, struct nvme_dev, ctrl);
}

M
Matthew Wilcox 已提交
182 183 184 185 186 187
/*
 * An NVM Express queue.  Each device has at least two (one for admin
 * commands and one for I/O commands).
 */
struct nvme_queue {
	struct device *q_dmadev;
M
Matthew Wilcox 已提交
188
	struct nvme_dev *dev;
189
	spinlock_t sq_lock;
M
Matthew Wilcox 已提交
190
	struct nvme_command *sq_cmds;
191
	struct nvme_command __iomem *sq_cmds_io;
192
	spinlock_t cq_lock ____cacheline_aligned_in_smp;
M
Matthew Wilcox 已提交
193
	volatile struct nvme_completion *cqes;
194
	struct blk_mq_tags **tags;
M
Matthew Wilcox 已提交
195 196 197 198
	dma_addr_t sq_dma_addr;
	dma_addr_t cq_dma_addr;
	u32 __iomem *q_db;
	u16 q_depth;
J
Jens Axboe 已提交
199
	s16 cq_vector;
M
Matthew Wilcox 已提交
200
	u16 sq_tail;
201
	u16 last_sq_tail;
M
Matthew Wilcox 已提交
202
	u16 cq_head;
203
	u16 last_cq_head;
K
Keith Busch 已提交
204
	u16 qid;
205
	u8 cq_phase;
J
Jens Axboe 已提交
206
	u8 polled;
207 208 209 210
	u32 *dbbuf_sq_db;
	u32 *dbbuf_cq_db;
	u32 *dbbuf_sq_ei;
	u32 *dbbuf_cq_ei;
M
Matthew Wilcox 已提交
211 212
};

213 214 215
/*
 * The nvme_iod describes the data in an I/O, including the list of PRP
 * entries.  You can't see it in this data structure because C doesn't let
C
Christoph Hellwig 已提交
216
 * me express that.  Use nvme_init_iod to ensure there's enough space
217 218 219
 * allocated to store the PRP list.
 */
struct nvme_iod {
220
	struct nvme_request req;
C
Christoph Hellwig 已提交
221
	struct nvme_queue *nvmeq;
C
Chaitanya Kulkarni 已提交
222
	bool use_sgl;
C
Christoph Hellwig 已提交
223
	int aborted;
224 225 226 227
	int npages;		/* In the PRP list. 0 means small pool in use */
	int nents;		/* Used in scatterlist */
	int length;		/* Of data, in bytes */
	dma_addr_t first_dma;
228
	struct scatterlist meta_sg; /* metadata requires single contiguous buffer */
C
Christoph Hellwig 已提交
229 230
	struct scatterlist *sg;
	struct scatterlist inline_sg[0];
M
Matthew Wilcox 已提交
231 232 233 234 235 236 237 238 239 240 241 242
};

/*
 * Check we didin't inadvertently grow the command struct
 */
static inline void _nvme_check_size(void)
{
	BUILD_BUG_ON(sizeof(struct nvme_rw_command) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_create_cq) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_create_sq) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_delete_queue) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_features) != 64);
243
	BUILD_BUG_ON(sizeof(struct nvme_format_cmd) != 64);
K
Keith Busch 已提交
244
	BUILD_BUG_ON(sizeof(struct nvme_abort_cmd) != 64);
M
Matthew Wilcox 已提交
245
	BUILD_BUG_ON(sizeof(struct nvme_command) != 64);
246 247
	BUILD_BUG_ON(sizeof(struct nvme_id_ctrl) != NVME_IDENTIFY_DATA_SIZE);
	BUILD_BUG_ON(sizeof(struct nvme_id_ns) != NVME_IDENTIFY_DATA_SIZE);
M
Matthew Wilcox 已提交
248
	BUILD_BUG_ON(sizeof(struct nvme_lba_range_type) != 64);
K
Keith Busch 已提交
249
	BUILD_BUG_ON(sizeof(struct nvme_smart_log) != 512);
250 251 252
	BUILD_BUG_ON(sizeof(struct nvme_dbbuf) != 64);
}

253 254
static unsigned int max_io_queues(void)
{
J
Jens Axboe 已提交
255
	return num_possible_cpus() + write_queues + poll_queues;
256 257 258 259 260 261 262 263
}

static unsigned int max_queue_count(void)
{
	/* IO queues + admin queue */
	return 1 + max_io_queues();
}

264 265
static inline unsigned int nvme_dbbuf_size(u32 stride)
{
266
	return (max_queue_count() * 8 * stride);
267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334
}

static int nvme_dbbuf_dma_alloc(struct nvme_dev *dev)
{
	unsigned int mem_size = nvme_dbbuf_size(dev->db_stride);

	if (dev->dbbuf_dbs)
		return 0;

	dev->dbbuf_dbs = dma_alloc_coherent(dev->dev, mem_size,
					    &dev->dbbuf_dbs_dma_addr,
					    GFP_KERNEL);
	if (!dev->dbbuf_dbs)
		return -ENOMEM;
	dev->dbbuf_eis = dma_alloc_coherent(dev->dev, mem_size,
					    &dev->dbbuf_eis_dma_addr,
					    GFP_KERNEL);
	if (!dev->dbbuf_eis) {
		dma_free_coherent(dev->dev, mem_size,
				  dev->dbbuf_dbs, dev->dbbuf_dbs_dma_addr);
		dev->dbbuf_dbs = NULL;
		return -ENOMEM;
	}

	return 0;
}

static void nvme_dbbuf_dma_free(struct nvme_dev *dev)
{
	unsigned int mem_size = nvme_dbbuf_size(dev->db_stride);

	if (dev->dbbuf_dbs) {
		dma_free_coherent(dev->dev, mem_size,
				  dev->dbbuf_dbs, dev->dbbuf_dbs_dma_addr);
		dev->dbbuf_dbs = NULL;
	}
	if (dev->dbbuf_eis) {
		dma_free_coherent(dev->dev, mem_size,
				  dev->dbbuf_eis, dev->dbbuf_eis_dma_addr);
		dev->dbbuf_eis = NULL;
	}
}

static void nvme_dbbuf_init(struct nvme_dev *dev,
			    struct nvme_queue *nvmeq, int qid)
{
	if (!dev->dbbuf_dbs || !qid)
		return;

	nvmeq->dbbuf_sq_db = &dev->dbbuf_dbs[sq_idx(qid, dev->db_stride)];
	nvmeq->dbbuf_cq_db = &dev->dbbuf_dbs[cq_idx(qid, dev->db_stride)];
	nvmeq->dbbuf_sq_ei = &dev->dbbuf_eis[sq_idx(qid, dev->db_stride)];
	nvmeq->dbbuf_cq_ei = &dev->dbbuf_eis[cq_idx(qid, dev->db_stride)];
}

static void nvme_dbbuf_set(struct nvme_dev *dev)
{
	struct nvme_command c;

	if (!dev->dbbuf_dbs)
		return;

	memset(&c, 0, sizeof(c));
	c.dbbuf.opcode = nvme_admin_dbbuf;
	c.dbbuf.prp1 = cpu_to_le64(dev->dbbuf_dbs_dma_addr);
	c.dbbuf.prp2 = cpu_to_le64(dev->dbbuf_eis_dma_addr);

	if (nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0)) {
335
		dev_warn(dev->ctrl.device, "unable to set dbbuf\n");
336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361
		/* Free memory and continue on */
		nvme_dbbuf_dma_free(dev);
	}
}

static inline int nvme_dbbuf_need_event(u16 event_idx, u16 new_idx, u16 old)
{
	return (u16)(new_idx - event_idx - 1) < (u16)(new_idx - old);
}

/* Update dbbuf and return true if an MMIO is required */
static bool nvme_dbbuf_update_and_check_event(u16 value, u32 *dbbuf_db,
					      volatile u32 *dbbuf_ei)
{
	if (dbbuf_db) {
		u16 old_value;

		/*
		 * Ensure that the queue is written before updating
		 * the doorbell in memory
		 */
		wmb();

		old_value = *dbbuf_db;
		*dbbuf_db = value;

362 363 364 365 366 367 368 369
		/*
		 * Ensure that the doorbell is updated before reading the event
		 * index from memory.  The controller needs to provide similar
		 * ordering to ensure the envent index is updated before reading
		 * the doorbell.
		 */
		mb();

370 371 372 373 374
		if (!nvme_dbbuf_need_event(*dbbuf_ei, value, old_value))
			return false;
	}

	return true;
M
Matthew Wilcox 已提交
375 376
}

377 378 379 380
/*
 * Max size of iod being embedded in the request payload
 */
#define NVME_INT_PAGES		2
381
#define NVME_INT_BYTES(dev)	(NVME_INT_PAGES * (dev)->ctrl.page_size)
382 383 384 385 386 387 388 389

/*
 * Will slightly overestimate the number of pages needed.  This is OK
 * as it only leads to a small amount of wasted memory for the lifetime of
 * the I/O.
 */
static int nvme_npages(unsigned size, struct nvme_dev *dev)
{
390 391
	unsigned nprps = DIV_ROUND_UP(size + dev->ctrl.page_size,
				      dev->ctrl.page_size);
392 393 394
	return DIV_ROUND_UP(8 * nprps, PAGE_SIZE - 8);
}

C
Chaitanya Kulkarni 已提交
395 396 397 398 399
/*
 * Calculates the number of pages needed for the SGL segments. For example a 4k
 * page can accommodate 256 SGL descriptors.
 */
static int nvme_pci_npages_sgl(unsigned int num_seg)
400
{
C
Chaitanya Kulkarni 已提交
401
	return DIV_ROUND_UP(num_seg * sizeof(struct nvme_sgl_desc), PAGE_SIZE);
C
Christoph Hellwig 已提交
402
}
403

C
Chaitanya Kulkarni 已提交
404 405
static unsigned int nvme_pci_iod_alloc_size(struct nvme_dev *dev,
		unsigned int size, unsigned int nseg, bool use_sgl)
C
Christoph Hellwig 已提交
406
{
C
Chaitanya Kulkarni 已提交
407 408 409 410 411 412 413 414
	size_t alloc_size;

	if (use_sgl)
		alloc_size = sizeof(__le64 *) * nvme_pci_npages_sgl(nseg);
	else
		alloc_size = sizeof(__le64 *) * nvme_npages(size, dev);

	return alloc_size + sizeof(struct scatterlist) * nseg;
C
Christoph Hellwig 已提交
415
}
416

C
Chaitanya Kulkarni 已提交
417
static unsigned int nvme_pci_cmd_size(struct nvme_dev *dev, bool use_sgl)
C
Christoph Hellwig 已提交
418
{
C
Chaitanya Kulkarni 已提交
419 420 421 422 423
	unsigned int alloc_size = nvme_pci_iod_alloc_size(dev,
				    NVME_INT_BYTES(dev), NVME_INT_PAGES,
				    use_sgl);

	return sizeof(struct nvme_iod) + alloc_size;
424 425
}

M
Matias Bjørling 已提交
426 427
static int nvme_admin_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
				unsigned int hctx_idx)
428
{
M
Matias Bjørling 已提交
429
	struct nvme_dev *dev = data;
430
	struct nvme_queue *nvmeq = &dev->queues[0];
M
Matias Bjørling 已提交
431

432 433 434 435
	WARN_ON(hctx_idx != 0);
	WARN_ON(dev->admin_tagset.tags[0] != hctx->tags);
	WARN_ON(nvmeq->tags);

M
Matias Bjørling 已提交
436
	hctx->driver_data = nvmeq;
437
	nvmeq->tags = &dev->admin_tagset.tags[0];
M
Matias Bjørling 已提交
438
	return 0;
439 440
}

441 442 443 444 445 446 447
static void nvme_admin_exit_hctx(struct blk_mq_hw_ctx *hctx, unsigned int hctx_idx)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	nvmeq->tags = NULL;
}

M
Matias Bjørling 已提交
448 449
static int nvme_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
			  unsigned int hctx_idx)
M
Matthew Wilcox 已提交
450
{
M
Matias Bjørling 已提交
451
	struct nvme_dev *dev = data;
452
	struct nvme_queue *nvmeq = &dev->queues[hctx_idx + 1];
M
Matias Bjørling 已提交
453

454 455
	if (!nvmeq->tags)
		nvmeq->tags = &dev->tagset.tags[hctx_idx];
M
Matthew Wilcox 已提交
456

457
	WARN_ON(dev->tagset.tags[hctx_idx] != hctx->tags);
M
Matias Bjørling 已提交
458 459
	hctx->driver_data = nvmeq;
	return 0;
M
Matthew Wilcox 已提交
460 461
}

462 463
static int nvme_init_request(struct blk_mq_tag_set *set, struct request *req,
		unsigned int hctx_idx, unsigned int numa_node)
M
Matthew Wilcox 已提交
464
{
465
	struct nvme_dev *dev = set->driver_data;
C
Christoph Hellwig 已提交
466
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
467
	int queue_idx = (set == &dev->tagset) ? hctx_idx + 1 : 0;
468
	struct nvme_queue *nvmeq = &dev->queues[queue_idx];
M
Matias Bjørling 已提交
469 470

	BUG_ON(!nvmeq);
C
Christoph Hellwig 已提交
471
	iod->nvmeq = nvmeq;
472 473

	nvme_req(req)->ctrl = &dev->ctrl;
M
Matias Bjørling 已提交
474 475 476
	return 0;
}

477 478 479 480 481 482 483 484 485
static int queue_irq_offset(struct nvme_dev *dev)
{
	/* if we have more than 1 vec, admin queue offsets us by 1 */
	if (dev->num_vecs > 1)
		return 1;

	return 0;
}

486 487 488
static int nvme_pci_map_queues(struct blk_mq_tag_set *set)
{
	struct nvme_dev *dev = set->driver_data;
489 490 491 492 493 494 495 496
	int i, qoff, offset;

	offset = queue_irq_offset(dev);
	for (i = 0, qoff = 0; i < set->nr_maps; i++) {
		struct blk_mq_queue_map *map = &set->map[i];

		map->nr_queues = dev->io_queues[i];
		if (!map->nr_queues) {
497
			BUG_ON(i == HCTX_TYPE_DEFAULT);
498 499

			/* shared set, resuse read set parameters */
500
			map->nr_queues = dev->io_queues[HCTX_TYPE_DEFAULT];
501 502 503 504
			qoff = 0;
			offset = queue_irq_offset(dev);
		}

J
Jens Axboe 已提交
505 506 507 508
		/*
		 * The poll queue(s) doesn't have an IRQ (and hence IRQ
		 * affinity), so use the regular blk-mq cpu mapping
		 */
509
		map->queue_offset = qoff;
510
		if (i != HCTX_TYPE_POLL)
J
Jens Axboe 已提交
511 512 513
			blk_mq_pci_map_queues(map, to_pci_dev(dev->dev), offset);
		else
			blk_mq_map_queues(map);
514 515 516
		qoff += map->nr_queues;
		offset += map->nr_queues;
	}
517

518
	return 0;
519 520
}

521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540
/*
 * Write sq tail if we are asked to, or if the next command would wrap.
 */
static inline void nvme_write_sq_db(struct nvme_queue *nvmeq, bool write_sq)
{
	if (!write_sq) {
		u16 next_tail = nvmeq->sq_tail + 1;

		if (next_tail == nvmeq->q_depth)
			next_tail = 0;
		if (next_tail != nvmeq->last_sq_tail)
			return;
	}

	if (nvme_dbbuf_update_and_check_event(nvmeq->sq_tail,
			nvmeq->dbbuf_sq_db, nvmeq->dbbuf_sq_ei))
		writel(nvmeq->sq_tail, nvmeq->q_db);
	nvmeq->last_sq_tail = nvmeq->sq_tail;
}

M
Matthew Wilcox 已提交
541
/**
542
 * nvme_submit_cmd() - Copy a command into a queue and ring the doorbell
M
Matthew Wilcox 已提交
543 544
 * @nvmeq: The queue to use
 * @cmd: The command to send
545
 * @write_sq: whether to write to the SQ doorbell
M
Matthew Wilcox 已提交
546
 */
547 548
static void nvme_submit_cmd(struct nvme_queue *nvmeq, struct nvme_command *cmd,
			    bool write_sq)
M
Matthew Wilcox 已提交
549
{
550
	spin_lock(&nvmeq->sq_lock);
551
	if (nvmeq->sq_cmds_io)
552 553
		memcpy_toio(&nvmeq->sq_cmds_io[nvmeq->sq_tail], cmd,
				sizeof(*cmd));
554
	else
555
		memcpy(&nvmeq->sq_cmds[nvmeq->sq_tail], cmd, sizeof(*cmd));
556

557 558
	if (++nvmeq->sq_tail == nvmeq->q_depth)
		nvmeq->sq_tail = 0;
559 560 561 562 563 564 565 566 567 568 569
	nvme_write_sq_db(nvmeq, write_sq);
	spin_unlock(&nvmeq->sq_lock);
}

static void nvme_commit_rqs(struct blk_mq_hw_ctx *hctx)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	spin_lock(&nvmeq->sq_lock);
	if (nvmeq->sq_tail != nvmeq->last_sq_tail)
		nvme_write_sq_db(nvmeq, true);
570
	spin_unlock(&nvmeq->sq_lock);
M
Matthew Wilcox 已提交
571 572
}

C
Chaitanya Kulkarni 已提交
573
static void **nvme_pci_iod_list(struct request *req)
M
Matthew Wilcox 已提交
574
{
C
Christoph Hellwig 已提交
575
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Chaitanya Kulkarni 已提交
576
	return (void **)(iod->sg + blk_rq_nr_phys_segments(req));
M
Matthew Wilcox 已提交
577 578
}

579 580 581
static inline bool nvme_pci_use_sgls(struct nvme_dev *dev, struct request *req)
{
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
582
	int nseg = blk_rq_nr_phys_segments(req);
583 584
	unsigned int avg_seg_size;

585 586 587 588
	if (nseg == 0)
		return false;

	avg_seg_size = DIV_ROUND_UP(blk_rq_payload_bytes(req), nseg);
589 590 591 592 593 594 595 596 597 598

	if (!(dev->ctrl.sgls & ((1 << 0) | (1 << 1))))
		return false;
	if (!iod->nvmeq->qid)
		return false;
	if (!sgl_threshold || avg_seg_size < sgl_threshold)
		return false;
	return true;
}

599
static blk_status_t nvme_init_iod(struct request *rq, struct nvme_dev *dev)
600
{
C
Christoph Hellwig 已提交
601
	struct nvme_iod *iod = blk_mq_rq_to_pdu(rq);
602
	int nseg = blk_rq_nr_phys_segments(rq);
603
	unsigned int size = blk_rq_payload_bytes(rq);
604

605 606
	iod->use_sgl = nvme_pci_use_sgls(dev, rq);

C
Christoph Hellwig 已提交
607
	if (nseg > NVME_INT_PAGES || size > NVME_INT_BYTES(dev)) {
608
		iod->sg = mempool_alloc(dev->iod_mempool, GFP_ATOMIC);
C
Christoph Hellwig 已提交
609
		if (!iod->sg)
610
			return BLK_STS_RESOURCE;
C
Christoph Hellwig 已提交
611 612
	} else {
		iod->sg = iod->inline_sg;
613 614
	}

C
Christoph Hellwig 已提交
615 616 617 618
	iod->aborted = 0;
	iod->npages = -1;
	iod->nents = 0;
	iod->length = size;
K
Keith Busch 已提交
619

620
	return BLK_STS_OK;
621 622
}

C
Christoph Hellwig 已提交
623
static void nvme_free_iod(struct nvme_dev *dev, struct request *req)
M
Matthew Wilcox 已提交
624
{
C
Christoph Hellwig 已提交
625
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Chaitanya Kulkarni 已提交
626 627 628
	const int last_prp = dev->ctrl.page_size / sizeof(__le64) - 1;
	dma_addr_t dma_addr = iod->first_dma, next_dma_addr;

629 630 631
	int i;

	if (iod->npages == 0)
C
Chaitanya Kulkarni 已提交
632 633 634
		dma_pool_free(dev->prp_small_pool, nvme_pci_iod_list(req)[0],
			dma_addr);

635
	for (i = 0; i < iod->npages; i++) {
C
Chaitanya Kulkarni 已提交
636 637 638 639 640 641 642 643 644 645 646 647 648 649 650
		void *addr = nvme_pci_iod_list(req)[i];

		if (iod->use_sgl) {
			struct nvme_sgl_desc *sg_list = addr;

			next_dma_addr =
			    le64_to_cpu((sg_list[SGES_PER_PAGE - 1]).addr);
		} else {
			__le64 *prp_list = addr;

			next_dma_addr = le64_to_cpu(prp_list[last_prp]);
		}

		dma_pool_free(dev->prp_page_pool, addr, dma_addr);
		dma_addr = next_dma_addr;
651
	}
652

C
Christoph Hellwig 已提交
653
	if (iod->sg != iod->inline_sg)
654
		mempool_free(iod->sg, dev->iod_mempool);
K
Keith Busch 已提交
655 656
}

657 658 659 660 661 662 663 664 665 666 667 668 669 670
static void nvme_print_sgl(struct scatterlist *sgl, int nents)
{
	int i;
	struct scatterlist *sg;

	for_each_sg(sgl, sg, nents, i) {
		dma_addr_t phys = sg_phys(sg);
		pr_warn("sg[%d] phys_addr:%pad offset:%d length:%d "
			"dma_address:%pad dma_length:%d\n",
			i, &phys, sg->offset, sg->length, &sg_dma_address(sg),
			sg_dma_len(sg));
	}
}

C
Chaitanya Kulkarni 已提交
671 672
static blk_status_t nvme_pci_setup_prps(struct nvme_dev *dev,
		struct request *req, struct nvme_rw_command *cmnd)
M
Matthew Wilcox 已提交
673
{
C
Christoph Hellwig 已提交
674
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
675
	struct dma_pool *pool;
676
	int length = blk_rq_payload_bytes(req);
677
	struct scatterlist *sg = iod->sg;
M
Matthew Wilcox 已提交
678 679
	int dma_len = sg_dma_len(sg);
	u64 dma_addr = sg_dma_address(sg);
680
	u32 page_size = dev->ctrl.page_size;
681
	int offset = dma_addr & (page_size - 1);
682
	__le64 *prp_list;
C
Chaitanya Kulkarni 已提交
683
	void **list = nvme_pci_iod_list(req);
684
	dma_addr_t prp_dma;
685
	int nprps, i;
M
Matthew Wilcox 已提交
686

687
	length -= (page_size - offset);
688 689
	if (length <= 0) {
		iod->first_dma = 0;
C
Chaitanya Kulkarni 已提交
690
		goto done;
691
	}
M
Matthew Wilcox 已提交
692

693
	dma_len -= (page_size - offset);
M
Matthew Wilcox 已提交
694
	if (dma_len) {
695
		dma_addr += (page_size - offset);
M
Matthew Wilcox 已提交
696 697 698 699 700 701
	} else {
		sg = sg_next(sg);
		dma_addr = sg_dma_address(sg);
		dma_len = sg_dma_len(sg);
	}

702
	if (length <= page_size) {
703
		iod->first_dma = dma_addr;
C
Chaitanya Kulkarni 已提交
704
		goto done;
705 706
	}

707
	nprps = DIV_ROUND_UP(length, page_size);
708 709
	if (nprps <= (256 / 8)) {
		pool = dev->prp_small_pool;
710
		iod->npages = 0;
711 712
	} else {
		pool = dev->prp_page_pool;
713
		iod->npages = 1;
714 715
	}

716
	prp_list = dma_pool_alloc(pool, GFP_ATOMIC, &prp_dma);
717
	if (!prp_list) {
718
		iod->first_dma = dma_addr;
719
		iod->npages = -1;
720
		return BLK_STS_RESOURCE;
721
	}
722 723
	list[0] = prp_list;
	iod->first_dma = prp_dma;
724 725
	i = 0;
	for (;;) {
726
		if (i == page_size >> 3) {
727
			__le64 *old_prp_list = prp_list;
728
			prp_list = dma_pool_alloc(pool, GFP_ATOMIC, &prp_dma);
729
			if (!prp_list)
730
				return BLK_STS_RESOURCE;
731
			list[iod->npages++] = prp_list;
732 733 734
			prp_list[0] = old_prp_list[i - 1];
			old_prp_list[i - 1] = cpu_to_le64(prp_dma);
			i = 1;
735 736
		}
		prp_list[i++] = cpu_to_le64(dma_addr);
737 738 739
		dma_len -= page_size;
		dma_addr += page_size;
		length -= page_size;
740 741 742 743
		if (length <= 0)
			break;
		if (dma_len > 0)
			continue;
744 745
		if (unlikely(dma_len < 0))
			goto bad_sgl;
746 747 748
		sg = sg_next(sg);
		dma_addr = sg_dma_address(sg);
		dma_len = sg_dma_len(sg);
M
Matthew Wilcox 已提交
749 750
	}

C
Chaitanya Kulkarni 已提交
751 752 753 754
done:
	cmnd->dptr.prp1 = cpu_to_le64(sg_dma_address(iod->sg));
	cmnd->dptr.prp2 = cpu_to_le64(iod->first_dma);

755 756 757
	return BLK_STS_OK;

 bad_sgl:
758 759 760
	WARN(DO_ONCE(nvme_print_sgl, iod->sg, iod->nents),
			"Invalid SGL for payload:%d nents:%d\n",
			blk_rq_payload_bytes(req), iod->nents);
761
	return BLK_STS_IOERR;
M
Matthew Wilcox 已提交
762 763
}

C
Chaitanya Kulkarni 已提交
764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785
static void nvme_pci_sgl_set_data(struct nvme_sgl_desc *sge,
		struct scatterlist *sg)
{
	sge->addr = cpu_to_le64(sg_dma_address(sg));
	sge->length = cpu_to_le32(sg_dma_len(sg));
	sge->type = NVME_SGL_FMT_DATA_DESC << 4;
}

static void nvme_pci_sgl_set_seg(struct nvme_sgl_desc *sge,
		dma_addr_t dma_addr, int entries)
{
	sge->addr = cpu_to_le64(dma_addr);
	if (entries < SGES_PER_PAGE) {
		sge->length = cpu_to_le32(entries * sizeof(*sge));
		sge->type = NVME_SGL_FMT_LAST_SEG_DESC << 4;
	} else {
		sge->length = cpu_to_le32(PAGE_SIZE);
		sge->type = NVME_SGL_FMT_SEG_DESC << 4;
	}
}

static blk_status_t nvme_pci_setup_sgls(struct nvme_dev *dev,
786
		struct request *req, struct nvme_rw_command *cmd, int entries)
C
Chaitanya Kulkarni 已提交
787 788 789 790 791 792
{
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct dma_pool *pool;
	struct nvme_sgl_desc *sg_list;
	struct scatterlist *sg = iod->sg;
	dma_addr_t sgl_dma;
793
	int i = 0;
C
Chaitanya Kulkarni 已提交
794 795 796 797

	/* setting the transfer type as SGL */
	cmd->flags = NVME_CMD_SGL_METABUF;

798
	if (entries == 1) {
C
Chaitanya Kulkarni 已提交
799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838
		nvme_pci_sgl_set_data(&cmd->dptr.sgl, sg);
		return BLK_STS_OK;
	}

	if (entries <= (256 / sizeof(struct nvme_sgl_desc))) {
		pool = dev->prp_small_pool;
		iod->npages = 0;
	} else {
		pool = dev->prp_page_pool;
		iod->npages = 1;
	}

	sg_list = dma_pool_alloc(pool, GFP_ATOMIC, &sgl_dma);
	if (!sg_list) {
		iod->npages = -1;
		return BLK_STS_RESOURCE;
	}

	nvme_pci_iod_list(req)[0] = sg_list;
	iod->first_dma = sgl_dma;

	nvme_pci_sgl_set_seg(&cmd->dptr.sgl, sgl_dma, entries);

	do {
		if (i == SGES_PER_PAGE) {
			struct nvme_sgl_desc *old_sg_desc = sg_list;
			struct nvme_sgl_desc *link = &old_sg_desc[i - 1];

			sg_list = dma_pool_alloc(pool, GFP_ATOMIC, &sgl_dma);
			if (!sg_list)
				return BLK_STS_RESOURCE;

			i = 0;
			nvme_pci_iod_list(req)[iod->npages++] = sg_list;
			sg_list[i++] = *link;
			nvme_pci_sgl_set_seg(link, sgl_dma, entries);
		}

		nvme_pci_sgl_set_data(&sg_list[i++], sg);
		sg = sg_next(sg);
839
	} while (--entries > 0);
C
Chaitanya Kulkarni 已提交
840 841 842 843

	return BLK_STS_OK;
}

844
static blk_status_t nvme_map_data(struct nvme_dev *dev, struct request *req,
845
		struct nvme_command *cmnd)
846
{
C
Christoph Hellwig 已提交
847
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Christoph Hellwig 已提交
848 849 850
	struct request_queue *q = req->q;
	enum dma_data_direction dma_dir = rq_data_dir(req) ?
			DMA_TO_DEVICE : DMA_FROM_DEVICE;
851
	blk_status_t ret = BLK_STS_IOERR;
852
	int nr_mapped;
853

854
	sg_init_table(iod->sg, blk_rq_nr_phys_segments(req));
C
Christoph Hellwig 已提交
855 856 857
	iod->nents = blk_rq_map_sg(q, req, iod->sg);
	if (!iod->nents)
		goto out;
858

859
	ret = BLK_STS_RESOURCE;
860 861 862
	nr_mapped = dma_map_sg_attrs(dev->dev, iod->sg, iod->nents, dma_dir,
			DMA_ATTR_NO_WARN);
	if (!nr_mapped)
C
Christoph Hellwig 已提交
863
		goto out;
864

865
	if (iod->use_sgl)
866
		ret = nvme_pci_setup_sgls(dev, req, &cmnd->rw, nr_mapped);
C
Chaitanya Kulkarni 已提交
867 868 869
	else
		ret = nvme_pci_setup_prps(dev, req, &cmnd->rw);

870
	if (ret != BLK_STS_OK)
C
Christoph Hellwig 已提交
871
		goto out_unmap;
872

873
	ret = BLK_STS_IOERR;
C
Christoph Hellwig 已提交
874 875 876
	if (blk_integrity_rq(req)) {
		if (blk_rq_count_integrity_sg(q, req->bio) != 1)
			goto out_unmap;
877

878 879
		sg_init_table(&iod->meta_sg, 1);
		if (blk_rq_map_integrity_sg(q, req->bio, &iod->meta_sg) != 1)
C
Christoph Hellwig 已提交
880
			goto out_unmap;
881

882
		if (!dma_map_sg(dev->dev, &iod->meta_sg, 1, dma_dir))
C
Christoph Hellwig 已提交
883
			goto out_unmap;
884
	}
M
Matthew Wilcox 已提交
885

C
Christoph Hellwig 已提交
886
	if (blk_integrity_rq(req))
887
		cmnd->rw.metadata = cpu_to_le64(sg_dma_address(&iod->meta_sg));
888
	return BLK_STS_OK;
M
Matthew Wilcox 已提交
889

C
Christoph Hellwig 已提交
890 891 892 893
out_unmap:
	dma_unmap_sg(dev->dev, iod->sg, iod->nents, dma_dir);
out:
	return ret;
M
Matthew Wilcox 已提交
894 895
}

C
Christoph Hellwig 已提交
896
static void nvme_unmap_data(struct nvme_dev *dev, struct request *req)
M
Matthew Wilcox 已提交
897
{
C
Christoph Hellwig 已提交
898
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
899 900 901 902 903
	enum dma_data_direction dma_dir = rq_data_dir(req) ?
			DMA_TO_DEVICE : DMA_FROM_DEVICE;

	if (iod->nents) {
		dma_unmap_sg(dev->dev, iod->sg, iod->nents, dma_dir);
904
		if (blk_integrity_rq(req))
905
			dma_unmap_sg(dev->dev, &iod->meta_sg, 1, dma_dir);
906
	}
K
Keith Busch 已提交
907

908
	nvme_cleanup_cmd(req);
C
Christoph Hellwig 已提交
909
	nvme_free_iod(dev, req);
910
}
M
Matthew Wilcox 已提交
911

912 913 914
/*
 * NOTE: ns is NULL when called on the admin queue.
 */
915
static blk_status_t nvme_queue_rq(struct blk_mq_hw_ctx *hctx,
M
Matias Bjørling 已提交
916
			 const struct blk_mq_queue_data *bd)
917
{
M
Matias Bjørling 已提交
918 919
	struct nvme_ns *ns = hctx->queue->queuedata;
	struct nvme_queue *nvmeq = hctx->driver_data;
920
	struct nvme_dev *dev = nvmeq->dev;
M
Matias Bjørling 已提交
921
	struct request *req = bd->rq;
C
Christoph Hellwig 已提交
922
	struct nvme_command cmnd;
923
	blk_status_t ret;
K
Keith Busch 已提交
924

925 926 927 928
	/*
	 * We should not need to do this, but we're still using this to
	 * ensure we can drain requests on a dying queue.
	 */
J
Jens Axboe 已提交
929
	if (unlikely(nvmeq->cq_vector < 0 && !nvmeq->polled))
930 931
		return BLK_STS_IOERR;

932
	ret = nvme_setup_cmd(ns, req, &cmnd);
933
	if (ret)
C
Christoph Hellwig 已提交
934
		return ret;
M
Matias Bjørling 已提交
935

936
	ret = nvme_init_iod(req, dev);
937
	if (ret)
938
		goto out_free_cmd;
M
Matias Bjørling 已提交
939

940
	if (blk_rq_nr_phys_segments(req)) {
941
		ret = nvme_map_data(dev, req, &cmnd);
942 943 944
		if (ret)
			goto out_cleanup_iod;
	}
M
Matias Bjørling 已提交
945

946
	blk_mq_start_request(req);
947
	nvme_submit_cmd(nvmeq, &cmnd, bd->last);
948
	return BLK_STS_OK;
949
out_cleanup_iod:
C
Christoph Hellwig 已提交
950
	nvme_free_iod(dev, req);
951 952
out_free_cmd:
	nvme_cleanup_cmd(req);
C
Christoph Hellwig 已提交
953
	return ret;
M
Matthew Wilcox 已提交
954
}
K
Keith Busch 已提交
955

956
static void nvme_pci_complete_rq(struct request *req)
957
{
C
Christoph Hellwig 已提交
958
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
M
Matias Bjørling 已提交
959

960 961
	nvme_unmap_data(iod->nvmeq->dev, req);
	nvme_complete_rq(req);
M
Matthew Wilcox 已提交
962 963
}

964
/* We read the CQE phase first to check if the rest of the entry is valid */
965
static inline bool nvme_cqe_pending(struct nvme_queue *nvmeq)
966
{
967 968
	return (le16_to_cpu(nvmeq->cqes[nvmeq->cq_head].status) & 1) ==
			nvmeq->cq_phase;
969 970
}

971
static inline void nvme_ring_cq_doorbell(struct nvme_queue *nvmeq)
M
Matthew Wilcox 已提交
972
{
973
	u16 head = nvmeq->cq_head;
974

975 976 977
	if (nvme_dbbuf_update_and_check_event(head, nvmeq->dbbuf_cq_db,
					      nvmeq->dbbuf_cq_ei))
		writel(head, nvmeq->q_db + nvmeq->dev->db_stride);
978
}
979

980
static inline void nvme_handle_cqe(struct nvme_queue *nvmeq, u16 idx)
981
{
982
	volatile struct nvme_completion *cqe = &nvmeq->cqes[idx];
983
	struct request *req;
984

985 986 987 988 989
	if (unlikely(cqe->command_id >= nvmeq->q_depth)) {
		dev_warn(nvmeq->dev->ctrl.device,
			"invalid id %d completed on queue %d\n",
			cqe->command_id, le16_to_cpu(cqe->sq_id));
		return;
M
Matthew Wilcox 已提交
990 991
	}

992 993 994 995 996 997 998
	/*
	 * AEN requests are special as they don't time out and can
	 * survive any kind of queue freeze and often don't respond to
	 * aborts.  We don't even bother to allocate a struct request
	 * for them but rather special case them here.
	 */
	if (unlikely(nvmeq->qid == 0 &&
K
Keith Busch 已提交
999
			cqe->command_id >= NVME_AQ_BLK_MQ_DEPTH)) {
1000 1001
		nvme_complete_async_event(&nvmeq->dev->ctrl,
				cqe->status, &cqe->result);
J
Jens Axboe 已提交
1002
		return;
1003
	}
M
Matthew Wilcox 已提交
1004

1005 1006 1007
	req = blk_mq_tag_to_rq(*nvmeq->tags, cqe->command_id);
	nvme_end_request(req, cqe->status, cqe->result);
}
M
Matthew Wilcox 已提交
1008

1009
static void nvme_complete_cqes(struct nvme_queue *nvmeq, u16 start, u16 end)
M
Matthew Wilcox 已提交
1010
{
1011 1012 1013 1014 1015 1016
	while (start != end) {
		nvme_handle_cqe(nvmeq, start);
		if (++start == nvmeq->q_depth)
			start = 0;
	}
}
1017

1018 1019
static inline void nvme_update_cq_head(struct nvme_queue *nvmeq)
{
1020
	if (nvmeq->cq_head == nvmeq->q_depth - 1) {
1021 1022
		nvmeq->cq_head = 0;
		nvmeq->cq_phase = !nvmeq->cq_phase;
1023 1024
	} else {
		nvmeq->cq_head++;
M
Matthew Wilcox 已提交
1025
	}
J
Jens Axboe 已提交
1026 1027
}

1028 1029
static inline int nvme_process_cq(struct nvme_queue *nvmeq, u16 *start,
				  u16 *end, unsigned int tag)
J
Jens Axboe 已提交
1030
{
1031
	int found = 0;
M
Matthew Wilcox 已提交
1032

1033
	*start = nvmeq->cq_head;
1034 1035 1036
	while (nvme_cqe_pending(nvmeq)) {
		if (tag == -1U || nvmeq->cqes[nvmeq->cq_head].command_id == tag)
			found++;
1037
		nvme_update_cq_head(nvmeq);
1038
	}
1039
	*end = nvmeq->cq_head;
1040

1041
	if (*start != *end)
1042
		nvme_ring_cq_doorbell(nvmeq);
1043
	return found;
M
Matthew Wilcox 已提交
1044 1045 1046
}

static irqreturn_t nvme_irq(int irq, void *data)
1047 1048
{
	struct nvme_queue *nvmeq = data;
1049
	irqreturn_t ret = IRQ_NONE;
1050 1051
	u16 start, end;

1052
	spin_lock(&nvmeq->cq_lock);
1053 1054
	if (nvmeq->cq_head != nvmeq->last_cq_head)
		ret = IRQ_HANDLED;
1055
	nvme_process_cq(nvmeq, &start, &end, -1);
1056
	nvmeq->last_cq_head = nvmeq->cq_head;
1057
	spin_unlock(&nvmeq->cq_lock);
1058

1059 1060 1061 1062 1063 1064
	if (start != end) {
		nvme_complete_cqes(nvmeq, start, end);
		return IRQ_HANDLED;
	}

	return ret;
1065 1066 1067 1068 1069
}

static irqreturn_t nvme_irq_check(int irq, void *data)
{
	struct nvme_queue *nvmeq = data;
1070
	if (nvme_cqe_pending(nvmeq))
1071 1072
		return IRQ_WAKE_THREAD;
	return IRQ_NONE;
1073 1074
}

K
Keith Busch 已提交
1075
static int __nvme_poll(struct nvme_queue *nvmeq, unsigned int tag)
J
Jens Axboe 已提交
1076
{
1077
	u16 start, end;
1078
	int found;
J
Jens Axboe 已提交
1079

1080
	if (!nvme_cqe_pending(nvmeq))
1081
		return 0;
J
Jens Axboe 已提交
1082

1083
	spin_lock_irq(&nvmeq->cq_lock);
1084
	found = nvme_process_cq(nvmeq, &start, &end, tag);
1085
	spin_unlock_irq(&nvmeq->cq_lock);
1086

1087
	nvme_complete_cqes(nvmeq, start, end);
1088
	return found;
J
Jens Axboe 已提交
1089 1090
}

K
Keith Busch 已提交
1091 1092 1093 1094 1095 1096 1097
static int nvme_poll(struct blk_mq_hw_ctx *hctx, unsigned int tag)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	return __nvme_poll(nvmeq, tag);
}

1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114
static int nvme_poll_noirq(struct blk_mq_hw_ctx *hctx, unsigned int tag)
{
	struct nvme_queue *nvmeq = hctx->driver_data;
	u16 start, end;
	bool found;

	if (!nvme_cqe_pending(nvmeq))
		return 0;

	spin_lock(&nvmeq->cq_lock);
	found = nvme_process_cq(nvmeq, &start, &end, tag);
	spin_unlock(&nvmeq->cq_lock);

	nvme_complete_cqes(nvmeq, start, end);
	return found;
}

1115
static void nvme_pci_submit_async_event(struct nvme_ctrl *ctrl)
M
Matthew Wilcox 已提交
1116
{
1117
	struct nvme_dev *dev = to_nvme_dev(ctrl);
1118
	struct nvme_queue *nvmeq = &dev->queues[0];
M
Matias Bjørling 已提交
1119
	struct nvme_command c;
M
Matthew Wilcox 已提交
1120

M
Matias Bjørling 已提交
1121 1122
	memset(&c, 0, sizeof(c));
	c.common.opcode = nvme_admin_async_event;
1123
	c.common.command_id = NVME_AQ_BLK_MQ_DEPTH;
1124
	nvme_submit_cmd(nvmeq, &c, true);
1125 1126
}

M
Matthew Wilcox 已提交
1127
static int adapter_delete_queue(struct nvme_dev *dev, u8 opcode, u16 id)
1128
{
M
Matthew Wilcox 已提交
1129 1130 1131 1132 1133 1134
	struct nvme_command c;

	memset(&c, 0, sizeof(c));
	c.delete_queue.opcode = opcode;
	c.delete_queue.qid = cpu_to_le16(id);

1135
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
1136 1137 1138
}

static int adapter_alloc_cq(struct nvme_dev *dev, u16 qid,
1139
		struct nvme_queue *nvmeq, s16 vector)
M
Matthew Wilcox 已提交
1140 1141
{
	struct nvme_command c;
J
Jens Axboe 已提交
1142 1143 1144 1145
	int flags = NVME_QUEUE_PHYS_CONTIG;

	if (vector != -1)
		flags |= NVME_CQ_IRQ_ENABLED;
M
Matthew Wilcox 已提交
1146

1147
	/*
M
Minwoo Im 已提交
1148
	 * Note: we (ab)use the fact that the prp fields survive if no data
1149 1150
	 * is attached to the request.
	 */
M
Matthew Wilcox 已提交
1151 1152 1153 1154 1155 1156
	memset(&c, 0, sizeof(c));
	c.create_cq.opcode = nvme_admin_create_cq;
	c.create_cq.prp1 = cpu_to_le64(nvmeq->cq_dma_addr);
	c.create_cq.cqid = cpu_to_le16(qid);
	c.create_cq.qsize = cpu_to_le16(nvmeq->q_depth - 1);
	c.create_cq.cq_flags = cpu_to_le16(flags);
J
Jens Axboe 已提交
1157 1158 1159 1160
	if (vector != -1)
		c.create_cq.irq_vector = cpu_to_le16(vector);
	else
		c.create_cq.irq_vector = 0;
M
Matthew Wilcox 已提交
1161

1162
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
1163 1164 1165 1166 1167
}

static int adapter_alloc_sq(struct nvme_dev *dev, u16 qid,
						struct nvme_queue *nvmeq)
{
1168
	struct nvme_ctrl *ctrl = &dev->ctrl;
M
Matthew Wilcox 已提交
1169
	struct nvme_command c;
1170
	int flags = NVME_QUEUE_PHYS_CONTIG;
M
Matthew Wilcox 已提交
1171

1172 1173 1174 1175 1176 1177 1178 1179
	/*
	 * Some drives have a bug that auto-enables WRRU if MEDIUM isn't
	 * set. Since URGENT priority is zeroes, it makes all queues
	 * URGENT.
	 */
	if (ctrl->quirks & NVME_QUIRK_MEDIUM_PRIO_SQ)
		flags |= NVME_SQ_PRIO_MEDIUM;

1180
	/*
M
Minwoo Im 已提交
1181
	 * Note: we (ab)use the fact that the prp fields survive if no data
1182 1183
	 * is attached to the request.
	 */
M
Matthew Wilcox 已提交
1184 1185 1186 1187 1188 1189 1190 1191
	memset(&c, 0, sizeof(c));
	c.create_sq.opcode = nvme_admin_create_sq;
	c.create_sq.prp1 = cpu_to_le64(nvmeq->sq_dma_addr);
	c.create_sq.sqid = cpu_to_le16(qid);
	c.create_sq.qsize = cpu_to_le16(nvmeq->q_depth - 1);
	c.create_sq.sq_flags = cpu_to_le16(flags);
	c.create_sq.cqid = cpu_to_le16(qid);

1192
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204
}

static int adapter_delete_cq(struct nvme_dev *dev, u16 cqid)
{
	return adapter_delete_queue(dev, nvme_admin_delete_cq, cqid);
}

static int adapter_delete_sq(struct nvme_dev *dev, u16 sqid)
{
	return adapter_delete_queue(dev, nvme_admin_delete_sq, sqid);
}

1205
static void abort_endio(struct request *req, blk_status_t error)
1206
{
C
Christoph Hellwig 已提交
1207 1208
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_queue *nvmeq = iod->nvmeq;
1209

1210 1211
	dev_warn(nvmeq->dev->ctrl.device,
		 "Abort status: 0x%x", nvme_req(req)->status);
1212 1213
	atomic_inc(&nvmeq->dev->ctrl.abort_limit);
	blk_mq_free_request(req);
1214 1215
}

K
Keith Busch 已提交
1216 1217 1218 1219 1220 1221 1222 1223
static bool nvme_should_reset(struct nvme_dev *dev, u32 csts)
{

	/* If true, indicates loss of adapter communication, possibly by a
	 * NVMe Subsystem reset.
	 */
	bool nssro = dev->subsystem && (csts & NVME_CSTS_NSSRO);

1224 1225 1226
	/* If there is a reset/reinit ongoing, we shouldn't reset again. */
	switch (dev->ctrl.state) {
	case NVME_CTRL_RESETTING:
1227
	case NVME_CTRL_CONNECTING:
K
Keith Busch 已提交
1228
		return false;
1229 1230 1231
	default:
		break;
	}
K
Keith Busch 已提交
1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259

	/* We shouldn't reset unless the controller is on fatal error state
	 * _or_ if we lost the communication with it.
	 */
	if (!(csts & NVME_CSTS_CFS) && !nssro)
		return false;

	return true;
}

static void nvme_warn_reset(struct nvme_dev *dev, u32 csts)
{
	/* Read a config register to help see what died. */
	u16 pci_status;
	int result;

	result = pci_read_config_word(to_pci_dev(dev->dev), PCI_STATUS,
				      &pci_status);
	if (result == PCIBIOS_SUCCESSFUL)
		dev_warn(dev->ctrl.device,
			 "controller is down; will reset: CSTS=0x%x, PCI_STATUS=0x%hx\n",
			 csts, pci_status);
	else
		dev_warn(dev->ctrl.device,
			 "controller is down; will reset: CSTS=0x%x, PCI_STATUS read failed (%d)\n",
			 csts, result);
}

1260
static enum blk_eh_timer_return nvme_timeout(struct request *req, bool reserved)
K
Keith Busch 已提交
1261
{
C
Christoph Hellwig 已提交
1262 1263
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_queue *nvmeq = iod->nvmeq;
K
Keith Busch 已提交
1264
	struct nvme_dev *dev = nvmeq->dev;
M
Matias Bjørling 已提交
1265 1266
	struct request *abort_req;
	struct nvme_command cmd;
1267
	bool shutdown = false;
K
Keith Busch 已提交
1268 1269
	u32 csts = readl(dev->bar + NVME_REG_CSTS);

W
Wen Xiong 已提交
1270 1271 1272 1273 1274 1275 1276
	/* If PCI error recovery process is happening, we cannot reset or
	 * the recovery mechanism will surely fail.
	 */
	mb();
	if (pci_channel_offline(to_pci_dev(dev->dev)))
		return BLK_EH_RESET_TIMER;

K
Keith Busch 已提交
1277 1278 1279 1280 1281 1282
	/*
	 * Reset immediately if the controller is failed
	 */
	if (nvme_should_reset(dev, csts)) {
		nvme_warn_reset(dev, csts);
		nvme_dev_disable(dev, false);
1283
		nvme_reset_ctrl(&dev->ctrl);
1284
		return BLK_EH_DONE;
K
Keith Busch 已提交
1285
	}
K
Keith Busch 已提交
1286

K
Keith Busch 已提交
1287 1288 1289 1290 1291 1292 1293
	/*
	 * Did we miss an interrupt?
	 */
	if (__nvme_poll(nvmeq, req->tag)) {
		dev_warn(dev->ctrl.device,
			 "I/O %d QID %d timeout, completion polled\n",
			 req->tag, nvmeq->qid);
1294
		return BLK_EH_DONE;
K
Keith Busch 已提交
1295 1296
	}

1297
	/*
1298 1299 1300
	 * Shutdown immediately if controller times out while starting. The
	 * reset work will see the pci device disabled when it gets the forced
	 * cancellation error. All outstanding requests are completed on
1301
	 * shutdown, so we return BLK_EH_DONE.
1302
	 */
1303
	switch (dev->ctrl.state) {
1304 1305
	case NVME_CTRL_DELETING:
		shutdown = true;
1306 1307
	case NVME_CTRL_CONNECTING:
	case NVME_CTRL_RESETTING:
1308
		dev_warn_ratelimited(dev->ctrl.device,
1309 1310
			 "I/O %d QID %d timeout, disable controller\n",
			 req->tag, nvmeq->qid);
1311
		nvme_dev_disable(dev, shutdown);
1312
		nvme_req(req)->flags |= NVME_REQ_CANCELLED;
1313
		return BLK_EH_DONE;
1314 1315
	default:
		break;
K
Keith Busch 已提交
1316 1317
	}

1318 1319 1320 1321
	/*
 	 * Shutdown the controller immediately and schedule a reset if the
 	 * command was already aborted once before and still hasn't been
 	 * returned to the driver, or if this is the admin queue.
1322
	 */
C
Christoph Hellwig 已提交
1323
	if (!nvmeq->qid || iod->aborted) {
1324
		dev_warn(dev->ctrl.device,
1325 1326
			 "I/O %d QID %d timeout, reset controller\n",
			 req->tag, nvmeq->qid);
1327
		nvme_dev_disable(dev, false);
1328
		nvme_reset_ctrl(&dev->ctrl);
K
Keith Busch 已提交
1329

1330
		nvme_req(req)->flags |= NVME_REQ_CANCELLED;
1331
		return BLK_EH_DONE;
K
Keith Busch 已提交
1332 1333
	}

1334
	if (atomic_dec_return(&dev->ctrl.abort_limit) < 0) {
1335
		atomic_inc(&dev->ctrl.abort_limit);
1336
		return BLK_EH_RESET_TIMER;
1337
	}
1338
	iod->aborted = 1;
M
Matias Bjørling 已提交
1339

K
Keith Busch 已提交
1340 1341
	memset(&cmd, 0, sizeof(cmd));
	cmd.abort.opcode = nvme_admin_abort_cmd;
M
Matias Bjørling 已提交
1342
	cmd.abort.cid = req->tag;
K
Keith Busch 已提交
1343 1344
	cmd.abort.sqid = cpu_to_le16(nvmeq->qid);

1345 1346 1347
	dev_warn(nvmeq->dev->ctrl.device,
		"I/O %d QID %d timeout, aborting\n",
		 req->tag, nvmeq->qid);
1348 1349

	abort_req = nvme_alloc_request(dev->ctrl.admin_q, &cmd,
1350
			BLK_MQ_REQ_NOWAIT, NVME_QID_ANY);
1351 1352 1353 1354 1355 1356 1357 1358
	if (IS_ERR(abort_req)) {
		atomic_inc(&dev->ctrl.abort_limit);
		return BLK_EH_RESET_TIMER;
	}

	abort_req->timeout = ADMIN_TIMEOUT;
	abort_req->end_io_data = NULL;
	blk_execute_rq_nowait(abort_req->q, NULL, abort_req, 0, abort_endio);
K
Keith Busch 已提交
1359

1360 1361 1362 1363 1364 1365
	/*
	 * The aborted req will be completed on receiving the abort req.
	 * We enable the timer again. If hit twice, it'll cause a device reset,
	 * as the device then is in a faulty state.
	 */
	return BLK_EH_RESET_TIMER;
K
Keith Busch 已提交
1366 1367
}

M
Matias Bjørling 已提交
1368 1369
static void nvme_free_queue(struct nvme_queue *nvmeq)
{
1370 1371
	dma_free_coherent(nvmeq->q_dmadev, CQ_SIZE(nvmeq->q_depth),
				(void *)nvmeq->cqes, nvmeq->cq_dma_addr);
1372 1373
	if (nvmeq->sq_cmds)
		dma_free_coherent(nvmeq->q_dmadev, SQ_SIZE(nvmeq->q_depth),
1374 1375 1376
					nvmeq->sq_cmds, nvmeq->sq_dma_addr);
}

1377
static void nvme_free_queues(struct nvme_dev *dev, int lowest)
1378 1379 1380
{
	int i;

1381 1382
	for (i = dev->ctrl.queue_count - 1; i >= lowest; i--) {
		dev->ctrl.queue_count--;
1383
		nvme_free_queue(&dev->queues[i]);
1384
	}
1385 1386
}

K
Keith Busch 已提交
1387 1388 1389 1390 1391
/**
 * nvme_suspend_queue - put queue into suspended state
 * @nvmeq - queue to suspend
 */
static int nvme_suspend_queue(struct nvme_queue *nvmeq)
M
Matthew Wilcox 已提交
1392
{
K
Keith Busch 已提交
1393
	int vector;
M
Matthew Wilcox 已提交
1394

1395
	spin_lock_irq(&nvmeq->cq_lock);
J
Jens Axboe 已提交
1396
	if (nvmeq->cq_vector == -1 && !nvmeq->polled) {
1397
		spin_unlock_irq(&nvmeq->cq_lock);
K
Keith Busch 已提交
1398 1399
		return 1;
	}
1400
	vector = nvmeq->cq_vector;
K
Keith Busch 已提交
1401
	nvmeq->dev->online_queues--;
K
Keith Busch 已提交
1402
	nvmeq->cq_vector = -1;
J
Jens Axboe 已提交
1403
	nvmeq->polled = false;
1404
	spin_unlock_irq(&nvmeq->cq_lock);
1405

1406 1407 1408 1409 1410
	/*
	 * Ensure that nvme_queue_rq() sees it ->cq_vector == -1 without
	 * having to grab the lock.
	 */
	mb();
1411

1412
	if (!nvmeq->qid && nvmeq->dev->ctrl.admin_q)
1413
		blk_mq_quiesce_queue(nvmeq->dev->ctrl.admin_q);
1414

J
Jens Axboe 已提交
1415 1416
	if (vector != -1)
		pci_free_irq(to_pci_dev(nvmeq->dev->dev), vector, nvmeq);
M
Matthew Wilcox 已提交
1417

K
Keith Busch 已提交
1418 1419
	return 0;
}
M
Matthew Wilcox 已提交
1420

1421
static void nvme_disable_admin_queue(struct nvme_dev *dev, bool shutdown)
K
Keith Busch 已提交
1422
{
1423
	struct nvme_queue *nvmeq = &dev->queues[0];
1424
	u16 start, end;
K
Keith Busch 已提交
1425

1426 1427 1428
	if (shutdown)
		nvme_shutdown_ctrl(&dev->ctrl);
	else
1429
		nvme_disable_ctrl(&dev->ctrl, dev->ctrl.cap);
1430

1431
	spin_lock_irq(&nvmeq->cq_lock);
1432
	nvme_process_cq(nvmeq, &start, &end, -1);
1433
	spin_unlock_irq(&nvmeq->cq_lock);
1434 1435

	nvme_complete_cqes(nvmeq, start, end);
M
Matthew Wilcox 已提交
1436 1437
}

1438 1439 1440 1441
static int nvme_cmb_qdepth(struct nvme_dev *dev, int nr_io_queues,
				int entry_size)
{
	int q_depth = dev->q_depth;
1442 1443
	unsigned q_size_aligned = roundup(q_depth * entry_size,
					  dev->ctrl.page_size);
1444 1445

	if (q_size_aligned * nr_io_queues > dev->cmb_size) {
1446
		u64 mem_per_q = div_u64(dev->cmb_size, nr_io_queues);
1447
		mem_per_q = round_down(mem_per_q, dev->ctrl.page_size);
1448
		q_depth = div_u64(mem_per_q, entry_size);
1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464

		/*
		 * Ensure the reduced q_depth is above some threshold where it
		 * would be better to map queues in system memory with the
		 * original depth
		 */
		if (q_depth < 64)
			return -ENOMEM;
	}

	return q_depth;
}

static int nvme_alloc_sq_cmds(struct nvme_dev *dev, struct nvme_queue *nvmeq,
				int qid, int depth)
{
1465 1466 1467
	/* CMB SQEs will be mapped before creation */
	if (qid && dev->cmb && use_cmb_sqes && (dev->cmbsz & NVME_CMBSZ_SQS))
		return 0;
1468

1469 1470 1471 1472
	nvmeq->sq_cmds = dma_alloc_coherent(dev->dev, SQ_SIZE(depth),
					    &nvmeq->sq_dma_addr, GFP_KERNEL);
	if (!nvmeq->sq_cmds)
		return -ENOMEM;
1473 1474 1475
	return 0;
}

1476
static int nvme_alloc_queue(struct nvme_dev *dev, int qid, int depth)
M
Matthew Wilcox 已提交
1477
{
1478
	struct nvme_queue *nvmeq = &dev->queues[qid];
M
Matthew Wilcox 已提交
1479

1480 1481
	if (dev->ctrl.queue_count > qid)
		return 0;
M
Matthew Wilcox 已提交
1482

1483
	nvmeq->cqes = dma_zalloc_coherent(dev->dev, CQ_SIZE(depth),
J
Joe Perches 已提交
1484
					  &nvmeq->cq_dma_addr, GFP_KERNEL);
M
Matthew Wilcox 已提交
1485 1486 1487
	if (!nvmeq->cqes)
		goto free_nvmeq;

1488
	if (nvme_alloc_sq_cmds(dev, nvmeq, qid, depth))
M
Matthew Wilcox 已提交
1489 1490
		goto free_cqdma;

1491
	nvmeq->q_dmadev = dev->dev;
M
Matthew Wilcox 已提交
1492
	nvmeq->dev = dev;
1493 1494
	spin_lock_init(&nvmeq->sq_lock);
	spin_lock_init(&nvmeq->cq_lock);
M
Matthew Wilcox 已提交
1495
	nvmeq->cq_head = 0;
M
Matthew Wilcox 已提交
1496
	nvmeq->cq_phase = 1;
1497
	nvmeq->q_db = &dev->dbs[qid * 2 * dev->db_stride];
M
Matthew Wilcox 已提交
1498
	nvmeq->q_depth = depth;
K
Keith Busch 已提交
1499
	nvmeq->qid = qid;
1500
	nvmeq->cq_vector = -1;
1501
	dev->ctrl.queue_count++;
1502

1503
	return 0;
M
Matthew Wilcox 已提交
1504 1505

 free_cqdma:
1506
	dma_free_coherent(dev->dev, CQ_SIZE(depth), (void *)nvmeq->cqes,
M
Matthew Wilcox 已提交
1507 1508
							nvmeq->cq_dma_addr);
 free_nvmeq:
1509
	return -ENOMEM;
M
Matthew Wilcox 已提交
1510 1511
}

1512
static int queue_request_irq(struct nvme_queue *nvmeq)
1513
{
1514 1515 1516 1517 1518 1519 1520 1521 1522 1523
	struct pci_dev *pdev = to_pci_dev(nvmeq->dev->dev);
	int nr = nvmeq->dev->ctrl.instance;

	if (use_threaded_interrupts) {
		return pci_request_irq(pdev, nvmeq->cq_vector, nvme_irq_check,
				nvme_irq, nvmeq, "nvme%dq%d", nr, nvmeq->qid);
	} else {
		return pci_request_irq(pdev, nvmeq->cq_vector, nvme_irq,
				NULL, nvmeq, "nvme%dq%d", nr, nvmeq->qid);
	}
1524 1525
}

1526
static void nvme_init_queue(struct nvme_queue *nvmeq, u16 qid)
M
Matthew Wilcox 已提交
1527
{
1528
	struct nvme_dev *dev = nvmeq->dev;
M
Matthew Wilcox 已提交
1529

1530
	spin_lock_irq(&nvmeq->cq_lock);
1531
	nvmeq->sq_tail = 0;
1532
	nvmeq->last_sq_tail = 0;
1533 1534
	nvmeq->cq_head = 0;
	nvmeq->cq_phase = 1;
1535
	nvmeq->q_db = &dev->dbs[qid * 2 * dev->db_stride];
1536
	memset((void *)nvmeq->cqes, 0, CQ_SIZE(nvmeq->q_depth));
1537
	nvme_dbbuf_init(dev, nvmeq, qid);
K
Keith Busch 已提交
1538
	dev->online_queues++;
1539
	spin_unlock_irq(&nvmeq->cq_lock);
1540 1541
}

J
Jens Axboe 已提交
1542
static int nvme_create_queue(struct nvme_queue *nvmeq, int qid, bool polled)
1543 1544 1545
{
	struct nvme_dev *dev = nvmeq->dev;
	int result;
1546
	s16 vector;
1547

1548 1549 1550 1551 1552 1553 1554
	if (dev->cmb && use_cmb_sqes && (dev->cmbsz & NVME_CMBSZ_SQS)) {
		unsigned offset = (qid - 1) * roundup(SQ_SIZE(nvmeq->q_depth),
						      dev->ctrl.page_size);
		nvmeq->sq_dma_addr = dev->cmb_bus_addr + offset;
		nvmeq->sq_cmds_io = dev->cmb + offset;
	}

1555 1556 1557 1558
	/*
	 * A queue's vector matches the queue identifier unless the controller
	 * has only one vector available.
	 */
J
Jens Axboe 已提交
1559 1560 1561 1562 1563
	if (!polled)
		vector = dev->num_vecs == 1 ? 0 : qid;
	else
		vector = -1;

1564
	result = adapter_alloc_cq(dev, qid, nvmeq, vector);
K
Keith Busch 已提交
1565 1566
	if (result)
		return result;
M
Matthew Wilcox 已提交
1567 1568 1569

	result = adapter_alloc_sq(dev, qid, nvmeq);
	if (result < 0)
K
Keith Busch 已提交
1570 1571
		return result;
	else if (result)
M
Matthew Wilcox 已提交
1572 1573
		goto release_cq;

1574 1575 1576 1577 1578 1579
	/*
	 * Set cq_vector after alloc cq/sq, otherwise nvme_suspend_queue will
	 * invoke free_irq for it and cause a 'Trying to free already-free IRQ
	 * xxx' warning if the create CQ/SQ command times out.
	 */
	nvmeq->cq_vector = vector;
J
Jens Axboe 已提交
1580
	nvmeq->polled = polled;
1581
	nvme_init_queue(nvmeq, qid);
J
Jens Axboe 已提交
1582 1583 1584 1585 1586 1587

	if (vector != -1) {
		result = queue_request_irq(nvmeq);
		if (result < 0)
			goto release_sq;
	}
M
Matthew Wilcox 已提交
1588

1589
	return result;
M
Matthew Wilcox 已提交
1590

1591 1592
release_sq:
	nvmeq->cq_vector = -1;
J
Jens Axboe 已提交
1593
	nvmeq->polled = false;
1594
	dev->online_queues--;
M
Matthew Wilcox 已提交
1595
	adapter_delete_sq(dev, qid);
1596
release_cq:
M
Matthew Wilcox 已提交
1597
	adapter_delete_cq(dev, qid);
1598
	return result;
M
Matthew Wilcox 已提交
1599 1600
}

1601
static const struct blk_mq_ops nvme_mq_admin_ops = {
1602
	.queue_rq	= nvme_queue_rq,
1603
	.complete	= nvme_pci_complete_rq,
M
Matias Bjørling 已提交
1604
	.init_hctx	= nvme_admin_init_hctx,
1605
	.exit_hctx      = nvme_admin_exit_hctx,
1606
	.init_request	= nvme_init_request,
M
Matias Bjørling 已提交
1607 1608 1609
	.timeout	= nvme_timeout,
};

1610 1611 1612 1613 1614 1615 1616 1617 1618
#define NVME_SHARED_MQ_OPS					\
	.queue_rq		= nvme_queue_rq,		\
	.commit_rqs		= nvme_commit_rqs,		\
	.complete		= nvme_pci_complete_rq,		\
	.init_hctx		= nvme_init_hctx,		\
	.init_request		= nvme_init_request,		\
	.map_queues		= nvme_pci_map_queues,		\
	.timeout		= nvme_timeout			\

1619
static const struct blk_mq_ops nvme_mq_ops = {
1620 1621 1622 1623 1624 1625 1626
	NVME_SHARED_MQ_OPS,
	.poll			= nvme_poll,
};

static const struct blk_mq_ops nvme_mq_poll_noirq_ops = {
	NVME_SHARED_MQ_OPS,
	.poll			= nvme_poll_noirq,
M
Matias Bjørling 已提交
1627 1628
};

1629 1630
static void nvme_dev_remove_admin(struct nvme_dev *dev)
{
1631
	if (dev->ctrl.admin_q && !blk_queue_dying(dev->ctrl.admin_q)) {
1632 1633 1634 1635 1636
		/*
		 * If the controller was reset during removal, it's possible
		 * user requests may be waiting on a stopped queue. Start the
		 * queue to flush these to completion.
		 */
1637
		blk_mq_unquiesce_queue(dev->ctrl.admin_q);
1638
		blk_cleanup_queue(dev->ctrl.admin_q);
1639 1640 1641 1642
		blk_mq_free_tag_set(&dev->admin_tagset);
	}
}

M
Matias Bjørling 已提交
1643 1644
static int nvme_alloc_admin_tags(struct nvme_dev *dev)
{
1645
	if (!dev->ctrl.admin_q) {
M
Matias Bjørling 已提交
1646 1647
		dev->admin_tagset.ops = &nvme_mq_admin_ops;
		dev->admin_tagset.nr_hw_queues = 1;
K
Keith Busch 已提交
1648

K
Keith Busch 已提交
1649
		dev->admin_tagset.queue_depth = NVME_AQ_MQ_TAG_DEPTH;
M
Matias Bjørling 已提交
1650
		dev->admin_tagset.timeout = ADMIN_TIMEOUT;
1651
		dev->admin_tagset.numa_node = dev_to_node(dev->dev);
C
Chaitanya Kulkarni 已提交
1652
		dev->admin_tagset.cmd_size = nvme_pci_cmd_size(dev, false);
1653
		dev->admin_tagset.flags = BLK_MQ_F_NO_SCHED;
M
Matias Bjørling 已提交
1654 1655 1656 1657
		dev->admin_tagset.driver_data = dev;

		if (blk_mq_alloc_tag_set(&dev->admin_tagset))
			return -ENOMEM;
1658
		dev->ctrl.admin_tagset = &dev->admin_tagset;
M
Matias Bjørling 已提交
1659

1660 1661
		dev->ctrl.admin_q = blk_mq_init_queue(&dev->admin_tagset);
		if (IS_ERR(dev->ctrl.admin_q)) {
M
Matias Bjørling 已提交
1662 1663 1664
			blk_mq_free_tag_set(&dev->admin_tagset);
			return -ENOMEM;
		}
1665
		if (!blk_get_queue(dev->ctrl.admin_q)) {
1666
			nvme_dev_remove_admin(dev);
1667
			dev->ctrl.admin_q = NULL;
1668 1669
			return -ENODEV;
		}
K
Keith Busch 已提交
1670
	} else
1671
		blk_mq_unquiesce_queue(dev->ctrl.admin_q);
M
Matias Bjørling 已提交
1672 1673 1674 1675

	return 0;
}

1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701
static unsigned long db_bar_size(struct nvme_dev *dev, unsigned nr_io_queues)
{
	return NVME_REG_DBS + ((nr_io_queues + 1) * 8 * dev->db_stride);
}

static int nvme_remap_bar(struct nvme_dev *dev, unsigned long size)
{
	struct pci_dev *pdev = to_pci_dev(dev->dev);

	if (size <= dev->bar_mapped_size)
		return 0;
	if (size > pci_resource_len(pdev, 0))
		return -ENOMEM;
	if (dev->bar)
		iounmap(dev->bar);
	dev->bar = ioremap(pci_resource_start(pdev, 0), size);
	if (!dev->bar) {
		dev->bar_mapped_size = 0;
		return -ENOMEM;
	}
	dev->bar_mapped_size = size;
	dev->dbs = dev->bar + NVME_REG_DBS;

	return 0;
}

1702
static int nvme_pci_configure_admin_queue(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
1703
{
1704
	int result;
M
Matthew Wilcox 已提交
1705 1706 1707
	u32 aqa;
	struct nvme_queue *nvmeq;

1708 1709 1710 1711
	result = nvme_remap_bar(dev, db_bar_size(dev, 0));
	if (result < 0)
		return result;

1712
	dev->subsystem = readl(dev->bar + NVME_REG_VS) >= NVME_VS(1, 1, 0) ?
1713
				NVME_CAP_NSSRC(dev->ctrl.cap) : 0;
1714

1715 1716 1717
	if (dev->subsystem &&
	    (readl(dev->bar + NVME_REG_CSTS) & NVME_CSTS_NSSRO))
		writel(NVME_CSTS_NSSRO, dev->bar + NVME_REG_CSTS);
1718

1719
	result = nvme_disable_ctrl(&dev->ctrl, dev->ctrl.cap);
1720 1721
	if (result < 0)
		return result;
M
Matthew Wilcox 已提交
1722

1723
	result = nvme_alloc_queue(dev, 0, NVME_AQ_DEPTH);
1724 1725
	if (result)
		return result;
M
Matthew Wilcox 已提交
1726

1727
	nvmeq = &dev->queues[0];
M
Matthew Wilcox 已提交
1728 1729 1730
	aqa = nvmeq->q_depth - 1;
	aqa |= aqa << 16;

1731 1732 1733
	writel(aqa, dev->bar + NVME_REG_AQA);
	lo_hi_writeq(nvmeq->sq_dma_addr, dev->bar + NVME_REG_ASQ);
	lo_hi_writeq(nvmeq->cq_dma_addr, dev->bar + NVME_REG_ACQ);
M
Matthew Wilcox 已提交
1734

1735
	result = nvme_enable_ctrl(&dev->ctrl, dev->ctrl.cap);
1736
	if (result)
K
Keith Busch 已提交
1737
		return result;
M
Matias Bjørling 已提交
1738

K
Keith Busch 已提交
1739
	nvmeq->cq_vector = 0;
1740
	nvme_init_queue(nvmeq, 0);
1741
	result = queue_request_irq(nvmeq);
1742 1743
	if (result) {
		nvmeq->cq_vector = -1;
K
Keith Busch 已提交
1744
		return result;
1745
	}
1746

M
Matthew Wilcox 已提交
1747 1748 1749
	return result;
}

1750
static int nvme_create_io_queues(struct nvme_dev *dev)
K
Keith Busch 已提交
1751
{
J
Jens Axboe 已提交
1752
	unsigned i, max, rw_queues;
1753
	int ret = 0;
K
Keith Busch 已提交
1754

1755
	for (i = dev->ctrl.queue_count; i <= dev->max_qid; i++) {
1756
		if (nvme_alloc_queue(dev, i, dev->q_depth)) {
1757
			ret = -ENOMEM;
K
Keith Busch 已提交
1758
			break;
1759 1760
		}
	}
K
Keith Busch 已提交
1761

1762
	max = min(dev->max_qid, dev->ctrl.queue_count - 1);
1763 1764 1765
	if (max != 1 && dev->io_queues[HCTX_TYPE_POLL]) {
		rw_queues = dev->io_queues[HCTX_TYPE_DEFAULT] +
				dev->io_queues[HCTX_TYPE_READ];
J
Jens Axboe 已提交
1766 1767 1768 1769
	} else {
		rw_queues = max;
	}

1770
	for (i = dev->online_queues; i <= max; i++) {
J
Jens Axboe 已提交
1771 1772 1773
		bool polled = i > rw_queues;

		ret = nvme_create_queue(&dev->queues[i], i, polled);
K
Keith Busch 已提交
1774
		if (ret)
K
Keith Busch 已提交
1775
			break;
M
Matthew Wilcox 已提交
1776
	}
1777 1778 1779

	/*
	 * Ignore failing Create SQ/CQ commands, we can continue with less
1780 1781
	 * than the desired amount of queues, and even a controller without
	 * I/O queues can still be used to issue admin commands.  This might
1782 1783 1784
	 * be useful to upgrade a buggy firmware for example.
	 */
	return ret >= 0 ? 0 : ret;
M
Matthew Wilcox 已提交
1785 1786
}

1787 1788 1789 1790 1791 1792
static ssize_t nvme_cmb_show(struct device *dev,
			     struct device_attribute *attr,
			     char *buf)
{
	struct nvme_dev *ndev = to_nvme_dev(dev_get_drvdata(dev));

1793
	return scnprintf(buf, PAGE_SIZE, "cmbloc : x%08x\ncmbsz  : x%08x\n",
1794 1795 1796 1797
		       ndev->cmbloc, ndev->cmbsz);
}
static DEVICE_ATTR(cmb, S_IRUGO, nvme_cmb_show, NULL);

1798
static u64 nvme_cmb_size_unit(struct nvme_dev *dev)
1799
{
1800 1801 1802 1803 1804 1805 1806 1807 1808 1809
	u8 szu = (dev->cmbsz >> NVME_CMBSZ_SZU_SHIFT) & NVME_CMBSZ_SZU_MASK;

	return 1ULL << (12 + 4 * szu);
}

static u32 nvme_cmb_size(struct nvme_dev *dev)
{
	return (dev->cmbsz >> NVME_CMBSZ_SZ_SHIFT) & NVME_CMBSZ_SZ_MASK;
}

1810
static void nvme_map_cmb(struct nvme_dev *dev)
1811
{
1812
	u64 size, offset;
1813 1814
	resource_size_t bar_size;
	struct pci_dev *pdev = to_pci_dev(dev->dev);
1815
	int bar;
1816

1817 1818 1819
	if (dev->cmb_size)
		return;

1820
	dev->cmbsz = readl(dev->bar + NVME_REG_CMBSZ);
1821 1822
	if (!dev->cmbsz)
		return;
1823
	dev->cmbloc = readl(dev->bar + NVME_REG_CMBLOC);
1824

1825
	if (!use_cmb_sqes)
1826
		return;
1827

1828 1829
	size = nvme_cmb_size_unit(dev) * nvme_cmb_size(dev);
	offset = nvme_cmb_size_unit(dev) * NVME_CMB_OFST(dev->cmbloc);
1830 1831
	bar = NVME_CMB_BIR(dev->cmbloc);
	bar_size = pci_resource_len(pdev, bar);
1832 1833

	if (offset > bar_size)
1834
		return;
1835 1836 1837 1838 1839 1840 1841 1842 1843

	/*
	 * Controllers may support a CMB size larger than their BAR,
	 * for example, due to being behind a bridge. Reduce the CMB to
	 * the reported size of the BAR
	 */
	if (size > bar_size - offset)
		size = bar_size - offset;

1844 1845 1846
	dev->cmb = ioremap_wc(pci_resource_start(pdev, bar) + offset, size);
	if (!dev->cmb)
		return;
1847
	dev->cmb_bus_addr = pci_bus_address(pdev, bar) + offset;
1848
	dev->cmb_size = size;
1849 1850 1851 1852 1853

	if (sysfs_add_file_to_group(&dev->ctrl.device->kobj,
				    &dev_attr_cmb.attr, NULL))
		dev_warn(dev->ctrl.device,
			 "failed to add sysfs attribute for CMB\n");
1854 1855 1856 1857 1858 1859 1860
}

static inline void nvme_release_cmb(struct nvme_dev *dev)
{
	if (dev->cmb) {
		iounmap(dev->cmb);
		dev->cmb = NULL;
1861 1862 1863
		sysfs_remove_file_from_group(&dev->ctrl.device->kobj,
					     &dev_attr_cmb.attr, NULL);
		dev->cmbsz = 0;
1864 1865 1866
	}
}

1867 1868
static int nvme_set_host_mem(struct nvme_dev *dev, u32 bits)
{
1869
	u64 dma_addr = dev->host_mem_descs_dma;
1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899
	struct nvme_command c;
	int ret;

	memset(&c, 0, sizeof(c));
	c.features.opcode	= nvme_admin_set_features;
	c.features.fid		= cpu_to_le32(NVME_FEAT_HOST_MEM_BUF);
	c.features.dword11	= cpu_to_le32(bits);
	c.features.dword12	= cpu_to_le32(dev->host_mem_size >>
					      ilog2(dev->ctrl.page_size));
	c.features.dword13	= cpu_to_le32(lower_32_bits(dma_addr));
	c.features.dword14	= cpu_to_le32(upper_32_bits(dma_addr));
	c.features.dword15	= cpu_to_le32(dev->nr_host_mem_descs);

	ret = nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
	if (ret) {
		dev_warn(dev->ctrl.device,
			 "failed to set host mem (err %d, flags %#x).\n",
			 ret, bits);
	}
	return ret;
}

static void nvme_free_host_mem(struct nvme_dev *dev)
{
	int i;

	for (i = 0; i < dev->nr_host_mem_descs; i++) {
		struct nvme_host_mem_buf_desc *desc = &dev->host_mem_descs[i];
		size_t size = le32_to_cpu(desc->size) * dev->ctrl.page_size;

1900 1901 1902
		dma_free_attrs(dev->dev, size, dev->host_mem_desc_bufs[i],
			       le64_to_cpu(desc->addr),
			       DMA_ATTR_NO_KERNEL_MAPPING | DMA_ATTR_NO_WARN);
1903 1904 1905 1906
	}

	kfree(dev->host_mem_desc_bufs);
	dev->host_mem_desc_bufs = NULL;
1907 1908 1909
	dma_free_coherent(dev->dev,
			dev->nr_host_mem_descs * sizeof(*dev->host_mem_descs),
			dev->host_mem_descs, dev->host_mem_descs_dma);
1910
	dev->host_mem_descs = NULL;
1911
	dev->nr_host_mem_descs = 0;
1912 1913
}

1914 1915
static int __nvme_alloc_host_mem(struct nvme_dev *dev, u64 preferred,
		u32 chunk_size)
K
Keith Busch 已提交
1916
{
1917
	struct nvme_host_mem_buf_desc *descs;
1918
	u32 max_entries, len;
1919
	dma_addr_t descs_dma;
1920
	int i = 0;
1921
	void **bufs;
1922
	u64 size, tmp;
1923 1924 1925 1926

	tmp = (preferred + chunk_size - 1);
	do_div(tmp, chunk_size);
	max_entries = tmp;
1927 1928 1929 1930

	if (dev->ctrl.hmmaxd && dev->ctrl.hmmaxd < max_entries)
		max_entries = dev->ctrl.hmmaxd;

1931 1932
	descs = dma_zalloc_coherent(dev->dev, max_entries * sizeof(*descs),
			&descs_dma, GFP_KERNEL);
1933 1934 1935 1936 1937 1938 1939
	if (!descs)
		goto out;

	bufs = kcalloc(max_entries, sizeof(*bufs), GFP_KERNEL);
	if (!bufs)
		goto out_free_descs;

1940
	for (size = 0; size < preferred && i < max_entries; size += len) {
1941 1942
		dma_addr_t dma_addr;

1943
		len = min_t(u64, chunk_size, preferred - size);
1944 1945 1946 1947 1948 1949 1950 1951 1952 1953
		bufs[i] = dma_alloc_attrs(dev->dev, len, &dma_addr, GFP_KERNEL,
				DMA_ATTR_NO_KERNEL_MAPPING | DMA_ATTR_NO_WARN);
		if (!bufs[i])
			break;

		descs[i].addr = cpu_to_le64(dma_addr);
		descs[i].size = cpu_to_le32(len / dev->ctrl.page_size);
		i++;
	}

1954
	if (!size)
1955 1956 1957 1958 1959
		goto out_free_bufs;

	dev->nr_host_mem_descs = i;
	dev->host_mem_size = size;
	dev->host_mem_descs = descs;
1960
	dev->host_mem_descs_dma = descs_dma;
1961 1962 1963 1964 1965 1966 1967
	dev->host_mem_desc_bufs = bufs;
	return 0;

out_free_bufs:
	while (--i >= 0) {
		size_t size = le32_to_cpu(descs[i].size) * dev->ctrl.page_size;

1968 1969 1970
		dma_free_attrs(dev->dev, size, bufs[i],
			       le64_to_cpu(descs[i].addr),
			       DMA_ATTR_NO_KERNEL_MAPPING | DMA_ATTR_NO_WARN);
1971 1972 1973 1974
	}

	kfree(bufs);
out_free_descs:
1975 1976
	dma_free_coherent(dev->dev, max_entries * sizeof(*descs), descs,
			descs_dma);
1977 1978 1979 1980 1981
out:
	dev->host_mem_descs = NULL;
	return -ENOMEM;
}

1982 1983 1984 1985 1986
static int nvme_alloc_host_mem(struct nvme_dev *dev, u64 min, u64 preferred)
{
	u32 chunk_size;

	/* start big and work our way down */
1987
	for (chunk_size = min_t(u64, preferred, PAGE_SIZE * MAX_ORDER_NR_PAGES);
1988
	     chunk_size >= max_t(u32, dev->ctrl.hmminds * 4096, PAGE_SIZE * 2);
1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999
	     chunk_size /= 2) {
		if (!__nvme_alloc_host_mem(dev, preferred, chunk_size)) {
			if (!min || dev->host_mem_size >= min)
				return 0;
			nvme_free_host_mem(dev);
		}
	}

	return -ENOMEM;
}

2000
static int nvme_setup_host_mem(struct nvme_dev *dev)
2001 2002 2003 2004 2005
{
	u64 max = (u64)max_host_mem_size_mb * SZ_1M;
	u64 preferred = (u64)dev->ctrl.hmpre * 4096;
	u64 min = (u64)dev->ctrl.hmmin * 4096;
	u32 enable_bits = NVME_HOST_MEM_ENABLE;
2006
	int ret;
2007 2008 2009 2010 2011 2012 2013

	preferred = min(preferred, max);
	if (min > max) {
		dev_warn(dev->ctrl.device,
			"min host memory (%lld MiB) above limit (%d MiB).\n",
			min >> ilog2(SZ_1M), max_host_mem_size_mb);
		nvme_free_host_mem(dev);
2014
		return 0;
2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027
	}

	/*
	 * If we already have a buffer allocated check if we can reuse it.
	 */
	if (dev->host_mem_descs) {
		if (dev->host_mem_size >= min)
			enable_bits |= NVME_HOST_MEM_RETURN;
		else
			nvme_free_host_mem(dev);
	}

	if (!dev->host_mem_descs) {
2028 2029 2030
		if (nvme_alloc_host_mem(dev, min, preferred)) {
			dev_warn(dev->ctrl.device,
				"failed to allocate host memory buffer.\n");
2031
			return 0; /* controller must work without HMB */
2032 2033 2034 2035 2036
		}

		dev_info(dev->ctrl.device,
			"allocated %lld MiB host memory buffer.\n",
			dev->host_mem_size >> ilog2(SZ_1M));
2037 2038
	}

2039 2040
	ret = nvme_set_host_mem(dev, enable_bits);
	if (ret)
2041
		nvme_free_host_mem(dev);
2042
	return ret;
K
Keith Busch 已提交
2043 2044
}

2045
static void nvme_calc_io_queues(struct nvme_dev *dev, unsigned int irq_queues)
2046 2047 2048 2049 2050 2051
{
	unsigned int this_w_queues = write_queues;

	/*
	 * Setup read/write queue split
	 */
2052
	if (irq_queues == 1) {
2053 2054
		dev->io_queues[HCTX_TYPE_DEFAULT] = 1;
		dev->io_queues[HCTX_TYPE_READ] = 0;
2055 2056 2057 2058 2059 2060 2061
		return;
	}

	/*
	 * If 'write_queues' is set, ensure it leaves room for at least
	 * one read queue
	 */
2062 2063
	if (this_w_queues >= irq_queues)
		this_w_queues = irq_queues - 1;
2064 2065 2066 2067 2068 2069

	/*
	 * If 'write_queues' is set to zero, reads and writes will share
	 * a queue set.
	 */
	if (!this_w_queues) {
2070
		dev->io_queues[HCTX_TYPE_DEFAULT] = irq_queues;
2071
		dev->io_queues[HCTX_TYPE_READ] = 0;
2072
	} else {
2073
		dev->io_queues[HCTX_TYPE_DEFAULT] = this_w_queues;
2074
		dev->io_queues[HCTX_TYPE_READ] = irq_queues - this_w_queues;
2075 2076 2077
	}
}

2078
static int nvme_setup_irqs(struct nvme_dev *dev, unsigned int nr_io_queues)
2079 2080 2081 2082 2083 2084 2085 2086
{
	struct pci_dev *pdev = to_pci_dev(dev->dev);
	int irq_sets[2];
	struct irq_affinity affd = {
		.pre_vectors = 1,
		.nr_sets = ARRAY_SIZE(irq_sets),
		.sets = irq_sets,
	};
2087
	int result = 0;
2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101
	unsigned int irq_queues, this_p_queues;

	/*
	 * Poll queues don't need interrupts, but we need at least one IO
	 * queue left over for non-polled IO.
	 */
	this_p_queues = poll_queues;
	if (this_p_queues >= nr_io_queues) {
		this_p_queues = nr_io_queues - 1;
		irq_queues = 1;
	} else {
		irq_queues = nr_io_queues - this_p_queues;
	}
	dev->io_queues[HCTX_TYPE_POLL] = this_p_queues;
2102 2103 2104 2105 2106 2107 2108

	/*
	 * For irq sets, we have to ask for minvec == maxvec. This passes
	 * any reduction back to us, so we can adjust our queue counts and
	 * IRQ vector needs.
	 */
	do {
2109
		nvme_calc_io_queues(dev, irq_queues);
2110 2111
		irq_sets[0] = dev->io_queues[HCTX_TYPE_DEFAULT];
		irq_sets[1] = dev->io_queues[HCTX_TYPE_READ];
2112 2113 2114 2115
		if (!irq_sets[1])
			affd.nr_sets = 1;

		/*
2116 2117 2118
		 * If we got a failure and we're down to asking for just
		 * 1 + 1 queues, just ask for a single vector. We'll share
		 * that between the single IO queue and the admin queue.
2119
		 */
2120 2121
		if (result >= 0 && irq_queues > 1)
			irq_queues = irq_sets[0] + irq_sets[1] + 1;
2122

2123 2124
		result = pci_alloc_irq_vectors_affinity(pdev, irq_queues,
				irq_queues,
2125 2126 2127
				PCI_IRQ_ALL_TYPES | PCI_IRQ_AFFINITY, &affd);

		/*
2128 2129 2130 2131
		 * Need to reduce our vec counts. If we get ENOSPC, the
		 * platform should support mulitple vecs, we just need
		 * to decrease our ask. If we get EINVAL, the platform
		 * likely does not. Back down to ask for just one vector.
2132 2133
		 */
		if (result == -ENOSPC) {
2134 2135
			irq_queues--;
			if (!irq_queues)
2136 2137
				return result;
			continue;
2138
		} else if (result == -EINVAL) {
2139
			irq_queues = 1;
2140
			continue;
2141 2142 2143 2144 2145 2146 2147 2148
		} else if (result <= 0)
			return -EIO;
		break;
	} while (1);

	return result;
}

2149
static int nvme_setup_io_queues(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
2150
{
2151
	struct nvme_queue *adminq = &dev->queues[0];
2152
	struct pci_dev *pdev = to_pci_dev(dev->dev);
2153 2154
	int result, nr_io_queues;
	unsigned long size;
M
Matthew Wilcox 已提交
2155

2156
	nr_io_queues = max_io_queues();
C
Christoph Hellwig 已提交
2157 2158
	result = nvme_set_queue_count(&dev->ctrl, &nr_io_queues);
	if (result < 0)
M
Matthew Wilcox 已提交
2159
		return result;
C
Christoph Hellwig 已提交
2160

2161
	if (nr_io_queues == 0)
2162
		return 0;
M
Matthew Wilcox 已提交
2163

2164
	if (dev->cmb && (dev->cmbsz & NVME_CMBSZ_SQS)) {
2165 2166 2167 2168 2169 2170 2171 2172
		result = nvme_cmb_qdepth(dev, nr_io_queues,
				sizeof(struct nvme_command));
		if (result > 0)
			dev->q_depth = result;
		else
			nvme_release_cmb(dev);
	}

2173 2174 2175 2176 2177 2178 2179 2180 2181
	do {
		size = db_bar_size(dev, nr_io_queues);
		result = nvme_remap_bar(dev, size);
		if (!result)
			break;
		if (!--nr_io_queues)
			return -ENOMEM;
	} while (1);
	adminq->q_db = dev->dbs;
2182

K
Keith Busch 已提交
2183
	/* Deregister the admin queue's interrupt */
2184
	pci_free_irq(pdev, 0, adminq);
K
Keith Busch 已提交
2185

2186 2187 2188 2189
	/*
	 * If we enable msix early due to not intx, disable it again before
	 * setting up the full range we need.
	 */
2190
	pci_free_irq_vectors(pdev);
2191 2192

	result = nvme_setup_irqs(dev, nr_io_queues);
2193
	if (result <= 0)
2194
		return -EIO;
2195

2196
	dev->num_vecs = result;
J
Jens Axboe 已提交
2197
	result = max(result - 1, 1);
2198
	dev->max_qid = result + dev->io_queues[HCTX_TYPE_POLL];
R
Ramachandra Rao Gajula 已提交
2199

2200 2201 2202 2203
	dev_info(dev->ctrl.device, "%d/%d/%d default/read/poll queues\n",
					dev->io_queues[HCTX_TYPE_DEFAULT],
					dev->io_queues[HCTX_TYPE_READ],
					dev->io_queues[HCTX_TYPE_POLL]);
2204

2205 2206 2207 2208 2209 2210 2211
	/*
	 * Should investigate if there's a performance win from allocating
	 * more queues than interrupt vectors; it might allow the submission
	 * path to scale better, even if the receive path is limited by the
	 * number of interrupts.
	 */

2212
	result = queue_request_irq(adminq);
2213 2214
	if (result) {
		adminq->cq_vector = -1;
K
Keith Busch 已提交
2215
		return result;
2216
	}
2217
	return nvme_create_io_queues(dev);
M
Matthew Wilcox 已提交
2218 2219
}

2220
static void nvme_del_queue_end(struct request *req, blk_status_t error)
K
Keith Busch 已提交
2221
{
K
Keith Busch 已提交
2222
	struct nvme_queue *nvmeq = req->end_io_data;
2223

K
Keith Busch 已提交
2224 2225
	blk_mq_free_request(req);
	complete(&nvmeq->dev->ioq_wait);
K
Keith Busch 已提交
2226 2227
}

2228
static void nvme_del_cq_end(struct request *req, blk_status_t error)
K
Keith Busch 已提交
2229
{
K
Keith Busch 已提交
2230
	struct nvme_queue *nvmeq = req->end_io_data;
2231
	u16 start, end;
K
Keith Busch 已提交
2232

K
Keith Busch 已提交
2233 2234 2235
	if (!error) {
		unsigned long flags;

2236
		spin_lock_irqsave(&nvmeq->cq_lock, flags);
2237
		nvme_process_cq(nvmeq, &start, &end, -1);
2238
		spin_unlock_irqrestore(&nvmeq->cq_lock, flags);
2239 2240

		nvme_complete_cqes(nvmeq, start, end);
K
Keith Busch 已提交
2241
	}
K
Keith Busch 已提交
2242 2243

	nvme_del_queue_end(req, error);
K
Keith Busch 已提交
2244 2245
}

K
Keith Busch 已提交
2246
static int nvme_delete_queue(struct nvme_queue *nvmeq, u8 opcode)
2247
{
K
Keith Busch 已提交
2248 2249 2250
	struct request_queue *q = nvmeq->dev->ctrl.admin_q;
	struct request *req;
	struct nvme_command cmd;
2251

K
Keith Busch 已提交
2252 2253 2254
	memset(&cmd, 0, sizeof(cmd));
	cmd.delete_queue.opcode = opcode;
	cmd.delete_queue.qid = cpu_to_le16(nvmeq->qid);
2255

2256
	req = nvme_alloc_request(q, &cmd, BLK_MQ_REQ_NOWAIT, NVME_QID_ANY);
K
Keith Busch 已提交
2257 2258
	if (IS_ERR(req))
		return PTR_ERR(req);
2259

K
Keith Busch 已提交
2260 2261 2262 2263 2264 2265 2266
	req->timeout = ADMIN_TIMEOUT;
	req->end_io_data = nvmeq;

	blk_execute_rq_nowait(q, NULL, req, false,
			opcode == nvme_admin_delete_cq ?
				nvme_del_cq_end : nvme_del_queue_end);
	return 0;
2267 2268
}

2269
static void nvme_disable_io_queues(struct nvme_dev *dev)
K
Keith Busch 已提交
2270
{
2271
	int pass, queues = dev->online_queues - 1;
K
Keith Busch 已提交
2272 2273
	unsigned long timeout;
	u8 opcode = nvme_admin_delete_sq;
K
Keith Busch 已提交
2274

K
Keith Busch 已提交
2275
	for (pass = 0; pass < 2; pass++) {
K
Keith Busch 已提交
2276
		int sent = 0, i = queues;
K
Keith Busch 已提交
2277 2278 2279 2280

		reinit_completion(&dev->ioq_wait);
 retry:
		timeout = ADMIN_TIMEOUT;
2281
		for (; i > 0; i--, sent++)
2282
			if (nvme_delete_queue(&dev->queues[i], opcode))
K
Keith Busch 已提交
2283
				break;
2284

K
Keith Busch 已提交
2285 2286 2287 2288 2289 2290 2291 2292 2293
		while (sent--) {
			timeout = wait_for_completion_io_timeout(&dev->ioq_wait, timeout);
			if (timeout == 0)
				return;
			if (i)
				goto retry;
		}
		opcode = nvme_admin_delete_cq;
	}
K
Keith Busch 已提交
2294 2295
}

2296
/*
2297
 * return error value only when tagset allocation failed
2298
 */
2299
static int nvme_dev_add(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
2300
{
2301 2302
	int ret;

2303
	if (!dev->ctrl.tagset) {
2304
		if (!dev->io_queues[HCTX_TYPE_POLL])
2305 2306 2307 2308
			dev->tagset.ops = &nvme_mq_ops;
		else
			dev->tagset.ops = &nvme_mq_poll_noirq_ops;

2309
		dev->tagset.nr_hw_queues = dev->online_queues - 1;
2310
		dev->tagset.nr_maps = HCTX_MAX_TYPES;
2311 2312 2313
		dev->tagset.timeout = NVME_IO_TIMEOUT;
		dev->tagset.numa_node = dev_to_node(dev->dev);
		dev->tagset.queue_depth =
M
Matias Bjørling 已提交
2314
				min_t(int, dev->q_depth, BLK_MQ_MAX_DEPTH) - 1;
C
Chaitanya Kulkarni 已提交
2315 2316 2317 2318 2319
		dev->tagset.cmd_size = nvme_pci_cmd_size(dev, false);
		if ((dev->ctrl.sgls & ((1 << 0) | (1 << 1))) && sgl_threshold) {
			dev->tagset.cmd_size = max(dev->tagset.cmd_size,
					nvme_pci_cmd_size(dev, true));
		}
2320 2321
		dev->tagset.flags = BLK_MQ_F_SHOULD_MERGE;
		dev->tagset.driver_data = dev;
M
Matthew Wilcox 已提交
2322

2323 2324 2325 2326 2327 2328
		ret = blk_mq_alloc_tag_set(&dev->tagset);
		if (ret) {
			dev_warn(dev->ctrl.device,
				"IO queues tagset allocation failed %d\n", ret);
			return ret;
		}
2329
		dev->ctrl.tagset = &dev->tagset;
2330 2331

		nvme_dbbuf_set(dev);
2332 2333 2334 2335 2336
	} else {
		blk_mq_update_nr_hw_queues(&dev->tagset, dev->online_queues - 1);

		/* Free previously allocated queues that are no longer usable */
		nvme_free_queues(dev, dev->online_queues);
2337
	}
2338

K
Keith Busch 已提交
2339
	return 0;
M
Matthew Wilcox 已提交
2340 2341
}

2342
static int nvme_pci_enable(struct nvme_dev *dev)
2343
{
2344
	int result = -ENOMEM;
2345
	struct pci_dev *pdev = to_pci_dev(dev->dev);
2346 2347 2348 2349 2350 2351

	if (pci_enable_device_mem(pdev))
		return result;

	pci_set_master(pdev);

2352 2353
	if (dma_set_mask_and_coherent(dev->dev, DMA_BIT_MASK(64)) &&
	    dma_set_mask_and_coherent(dev->dev, DMA_BIT_MASK(32)))
2354
		goto disable;
2355

2356
	if (readl(dev->bar + NVME_REG_CSTS) == -1) {
K
Keith Busch 已提交
2357
		result = -ENODEV;
2358
		goto disable;
K
Keith Busch 已提交
2359
	}
2360 2361

	/*
2362 2363 2364
	 * Some devices and/or platforms don't advertise or work with INTx
	 * interrupts. Pre-enable a single MSIX or MSI vec for setup. We'll
	 * adjust this later.
2365
	 */
2366 2367 2368
	result = pci_alloc_irq_vectors(pdev, 1, 1, PCI_IRQ_ALL_TYPES);
	if (result < 0)
		return result;
2369

2370
	dev->ctrl.cap = lo_hi_readq(dev->bar + NVME_REG_CAP);
2371

2372
	dev->q_depth = min_t(int, NVME_CAP_MQES(dev->ctrl.cap) + 1,
2373
				io_queue_depth);
2374
	dev->db_stride = 1 << NVME_CAP_STRIDE(dev->ctrl.cap);
2375
	dev->dbs = dev->bar + 4096;
2376 2377 2378 2379 2380 2381 2382

	/*
	 * Temporary fix for the Apple controller found in the MacBook8,1 and
	 * some MacBook7,1 to avoid controller resets and data loss.
	 */
	if (pdev->vendor == PCI_VENDOR_ID_APPLE && pdev->device == 0x2001) {
		dev->q_depth = 2;
2383 2384
		dev_warn(dev->ctrl.device, "detected Apple NVMe controller, "
			"set queue depth=%u to work around controller resets\n",
2385
			dev->q_depth);
2386 2387
	} else if (pdev->vendor == PCI_VENDOR_ID_SAMSUNG &&
		   (pdev->device == 0xa821 || pdev->device == 0xa822) &&
2388
		   NVME_CAP_MQES(dev->ctrl.cap) == 0) {
2389 2390 2391
		dev->q_depth = 64;
		dev_err(dev->ctrl.device, "detected PM1725 NVMe controller, "
                        "set queue depth=%u\n", dev->q_depth);
2392 2393
	}

2394
	nvme_map_cmb(dev);
2395

K
Keith Busch 已提交
2396 2397
	pci_enable_pcie_error_reporting(pdev);
	pci_save_state(pdev);
2398 2399 2400 2401 2402 2403 2404 2405
	return 0;

 disable:
	pci_disable_device(pdev);
	return result;
}

static void nvme_dev_unmap(struct nvme_dev *dev)
2406 2407 2408
{
	if (dev->bar)
		iounmap(dev->bar);
2409
	pci_release_mem_regions(to_pci_dev(dev->dev));
2410 2411 2412
}

static void nvme_pci_disable(struct nvme_dev *dev)
2413
{
2414 2415
	struct pci_dev *pdev = to_pci_dev(dev->dev);

2416
	pci_free_irq_vectors(pdev);
2417

K
Keith Busch 已提交
2418 2419
	if (pci_is_enabled(pdev)) {
		pci_disable_pcie_error_reporting(pdev);
2420
		pci_disable_device(pdev);
K
Keith Busch 已提交
2421 2422 2423
	}
}

2424
static void nvme_dev_disable(struct nvme_dev *dev, bool shutdown)
M
Matthew Wilcox 已提交
2425
{
2426
	int i;
K
Keith Busch 已提交
2427 2428
	bool dead = true;
	struct pci_dev *pdev = to_pci_dev(dev->dev);
2429

2430
	mutex_lock(&dev->shutdown_lock);
K
Keith Busch 已提交
2431 2432 2433
	if (pci_is_enabled(pdev)) {
		u32 csts = readl(dev->bar + NVME_REG_CSTS);

K
Keith Busch 已提交
2434 2435
		if (dev->ctrl.state == NVME_CTRL_LIVE ||
		    dev->ctrl.state == NVME_CTRL_RESETTING)
K
Keith Busch 已提交
2436 2437 2438
			nvme_start_freeze(&dev->ctrl);
		dead = !!((csts & NVME_CSTS_CFS) || !(csts & NVME_CSTS_RDY) ||
			pdev->error_state  != pci_channel_io_normal);
2439
	}
2440

K
Keith Busch 已提交
2441 2442 2443 2444
	/*
	 * Give the controller a chance to complete all entered requests if
	 * doing a safe shutdown.
	 */
2445 2446 2447
	if (!dead) {
		if (shutdown)
			nvme_wait_freeze_timeout(&dev->ctrl, NVME_IO_TIMEOUT);
2448 2449 2450
	}

	nvme_stop_queues(&dev->ctrl);
2451

2452
	if (!dead && dev->ctrl.queue_count > 0) {
2453
		nvme_disable_io_queues(dev);
2454
		nvme_disable_admin_queue(dev, shutdown);
K
Keith Busch 已提交
2455
	}
2456 2457 2458
	for (i = dev->ctrl.queue_count - 1; i >= 0; i--)
		nvme_suspend_queue(&dev->queues[i]);

2459
	nvme_pci_disable(dev);
2460

2461 2462
	blk_mq_tagset_busy_iter(&dev->tagset, nvme_cancel_request, &dev->ctrl);
	blk_mq_tagset_busy_iter(&dev->admin_tagset, nvme_cancel_request, &dev->ctrl);
K
Keith Busch 已提交
2463 2464 2465 2466 2467 2468

	/*
	 * The driver will not be starting up queues again if shutting down so
	 * must flush all entered requests to their failed completion to avoid
	 * deadlocking blk-mq hot-cpu notifier.
	 */
2469
	if (shutdown) {
K
Keith Busch 已提交
2470
		nvme_start_queues(&dev->ctrl);
2471 2472 2473
		if (dev->ctrl.admin_q && !blk_queue_dying(dev->ctrl.admin_q))
			blk_mq_unquiesce_queue(dev->ctrl.admin_q);
	}
2474
	mutex_unlock(&dev->shutdown_lock);
M
Matthew Wilcox 已提交
2475 2476
}

M
Matthew Wilcox 已提交
2477 2478
static int nvme_setup_prp_pools(struct nvme_dev *dev)
{
2479
	dev->prp_page_pool = dma_pool_create("prp list page", dev->dev,
M
Matthew Wilcox 已提交
2480 2481 2482 2483
						PAGE_SIZE, PAGE_SIZE, 0);
	if (!dev->prp_page_pool)
		return -ENOMEM;

2484
	/* Optimisation for I/Os between 4k and 128k */
2485
	dev->prp_small_pool = dma_pool_create("prp list 256", dev->dev,
2486 2487 2488 2489 2490
						256, 256, 0);
	if (!dev->prp_small_pool) {
		dma_pool_destroy(dev->prp_page_pool);
		return -ENOMEM;
	}
M
Matthew Wilcox 已提交
2491 2492 2493 2494 2495 2496
	return 0;
}

static void nvme_release_prp_pools(struct nvme_dev *dev)
{
	dma_pool_destroy(dev->prp_page_pool);
2497
	dma_pool_destroy(dev->prp_small_pool);
M
Matthew Wilcox 已提交
2498 2499
}

2500
static void nvme_pci_free_ctrl(struct nvme_ctrl *ctrl)
2501
{
2502
	struct nvme_dev *dev = to_nvme_dev(ctrl);
2503

2504
	nvme_dbbuf_dma_free(dev);
2505
	put_device(dev->dev);
2506 2507
	if (dev->tagset.tags)
		blk_mq_free_tag_set(&dev->tagset);
2508 2509
	if (dev->ctrl.admin_q)
		blk_put_queue(dev->ctrl.admin_q);
2510
	kfree(dev->queues);
2511
	free_opal_dev(dev->ctrl.opal_dev);
2512
	mempool_destroy(dev->iod_mempool);
2513 2514 2515
	kfree(dev);
}

2516 2517
static void nvme_remove_dead_ctrl(struct nvme_dev *dev, int status)
{
2518
	dev_warn(dev->ctrl.device, "Removing after probe failure status: %d\n", status);
2519

2520
	nvme_get_ctrl(&dev->ctrl);
2521
	nvme_dev_disable(dev, false);
2522
	nvme_kill_queues(&dev->ctrl);
2523
	if (!queue_work(nvme_wq, &dev->remove_work))
2524 2525 2526
		nvme_put_ctrl(&dev->ctrl);
}

2527
static void nvme_reset_work(struct work_struct *work)
2528
{
2529 2530
	struct nvme_dev *dev =
		container_of(work, struct nvme_dev, ctrl.reset_work);
2531
	bool was_suspend = !!(dev->ctrl.ctrl_config & NVME_CC_SHN_NORMAL);
2532
	int result;
2533
	enum nvme_ctrl_state new_state = NVME_CTRL_LIVE;
2534

2535 2536
	if (WARN_ON(dev->ctrl.state != NVME_CTRL_RESETTING)) {
		result = -ENODEV;
2537
		goto out;
2538
	}
2539

2540 2541 2542 2543
	/*
	 * If we're called to reset a live controller first shut it down before
	 * moving on.
	 */
2544
	if (dev->ctrl.ctrl_config & NVME_CC_ENABLE)
2545
		nvme_dev_disable(dev, false);
2546

2547
	mutex_lock(&dev->shutdown_lock);
2548
	result = nvme_pci_enable(dev);
2549
	if (result)
2550
		goto out_unlock;
2551

2552
	result = nvme_pci_configure_admin_queue(dev);
2553
	if (result)
2554
		goto out_unlock;
2555

K
Keith Busch 已提交
2556 2557
	result = nvme_alloc_admin_tags(dev);
	if (result)
2558
		goto out_unlock;
2559

2560 2561 2562 2563 2564 2565
	/*
	 * Limit the max command size to prevent iod->sg allocations going
	 * over a single page.
	 */
	dev->ctrl.max_hw_sectors = NVME_MAX_KB_SZ << 1;
	dev->ctrl.max_segments = NVME_MAX_SEGS;
2566 2567 2568 2569 2570 2571 2572 2573 2574
	mutex_unlock(&dev->shutdown_lock);

	/*
	 * Introduce CONNECTING state from nvme-fc/rdma transports to mark the
	 * initializing procedure here.
	 */
	if (!nvme_change_ctrl_state(&dev->ctrl, NVME_CTRL_CONNECTING)) {
		dev_warn(dev->ctrl.device,
			"failed to mark controller CONNECTING\n");
2575
		result = -EBUSY;
2576 2577
		goto out;
	}
2578

2579 2580
	result = nvme_init_identify(&dev->ctrl);
	if (result)
2581
		goto out;
2582

2583 2584 2585 2586 2587 2588 2589 2590 2591
	if (dev->ctrl.oacs & NVME_CTRL_OACS_SEC_SUPP) {
		if (!dev->ctrl.opal_dev)
			dev->ctrl.opal_dev =
				init_opal_dev(&dev->ctrl, &nvme_sec_submit);
		else if (was_suspend)
			opal_unlock_from_suspend(dev->ctrl.opal_dev);
	} else {
		free_opal_dev(dev->ctrl.opal_dev);
		dev->ctrl.opal_dev = NULL;
2592
	}
2593

2594 2595 2596 2597 2598 2599 2600
	if (dev->ctrl.oacs & NVME_CTRL_OACS_DBBUF_SUPP) {
		result = nvme_dbbuf_dma_alloc(dev);
		if (result)
			dev_warn(dev->dev,
				 "unable to allocate dma for dbbuf\n");
	}

2601 2602 2603 2604 2605
	if (dev->ctrl.hmpre) {
		result = nvme_setup_host_mem(dev);
		if (result < 0)
			goto out;
	}
2606

2607
	result = nvme_setup_io_queues(dev);
2608
	if (result)
2609
		goto out;
2610

2611 2612 2613 2614
	/*
	 * Keep the controller around but remove all namespaces if we don't have
	 * any working I/O queue.
	 */
2615
	if (dev->online_queues < 2) {
2616
		dev_warn(dev->ctrl.device, "IO queues not created\n");
2617
		nvme_kill_queues(&dev->ctrl);
2618
		nvme_remove_namespaces(&dev->ctrl);
2619
		new_state = NVME_CTRL_ADMIN_ONLY;
2620
	} else {
2621
		nvme_start_queues(&dev->ctrl);
K
Keith Busch 已提交
2622
		nvme_wait_freeze(&dev->ctrl);
2623 2624 2625
		/* hit this only when allocate tagset fails */
		if (nvme_dev_add(dev))
			new_state = NVME_CTRL_ADMIN_ONLY;
K
Keith Busch 已提交
2626
		nvme_unfreeze(&dev->ctrl);
2627 2628
	}

2629 2630 2631 2632 2633 2634 2635
	/*
	 * If only admin queue live, keep it to do further investigation or
	 * recovery.
	 */
	if (!nvme_change_ctrl_state(&dev->ctrl, new_state)) {
		dev_warn(dev->ctrl.device,
			"failed to mark controller state %d\n", new_state);
2636
		result = -ENODEV;
2637 2638
		goto out;
	}
2639

2640
	nvme_start_ctrl(&dev->ctrl);
2641
	return;
2642

2643 2644
 out_unlock:
	mutex_unlock(&dev->shutdown_lock);
2645
 out:
2646
	nvme_remove_dead_ctrl(dev, result);
2647 2648
}

2649
static void nvme_remove_dead_ctrl_work(struct work_struct *work)
K
Keith Busch 已提交
2650
{
2651
	struct nvme_dev *dev = container_of(work, struct nvme_dev, remove_work);
2652
	struct pci_dev *pdev = to_pci_dev(dev->dev);
K
Keith Busch 已提交
2653 2654

	if (pci_get_drvdata(pdev))
K
Keith Busch 已提交
2655
		device_release_driver(&pdev->dev);
2656
	nvme_put_ctrl(&dev->ctrl);
K
Keith Busch 已提交
2657 2658
}

2659
static int nvme_pci_reg_read32(struct nvme_ctrl *ctrl, u32 off, u32 *val)
T
Tejun Heo 已提交
2660
{
2661
	*val = readl(to_nvme_dev(ctrl)->bar + off);
2662
	return 0;
T
Tejun Heo 已提交
2663 2664
}

2665
static int nvme_pci_reg_write32(struct nvme_ctrl *ctrl, u32 off, u32 val)
2666
{
2667 2668 2669
	writel(val, to_nvme_dev(ctrl)->bar + off);
	return 0;
}
2670

2671 2672
static int nvme_pci_reg_read64(struct nvme_ctrl *ctrl, u32 off, u64 *val)
{
2673
	*val = lo_hi_readq(to_nvme_dev(ctrl)->bar + off);
2674
	return 0;
2675 2676
}

2677 2678 2679 2680 2681 2682 2683
static int nvme_pci_get_address(struct nvme_ctrl *ctrl, char *buf, int size)
{
	struct pci_dev *pdev = to_pci_dev(to_nvme_dev(ctrl)->dev);

	return snprintf(buf, size, "%s", dev_name(&pdev->dev));
}

2684
static const struct nvme_ctrl_ops nvme_pci_ctrl_ops = {
M
Ming Lin 已提交
2685
	.name			= "pcie",
2686
	.module			= THIS_MODULE,
2687
	.flags			= NVME_F_METADATA_SUPPORTED,
2688
	.reg_read32		= nvme_pci_reg_read32,
2689
	.reg_write32		= nvme_pci_reg_write32,
2690
	.reg_read64		= nvme_pci_reg_read64,
2691
	.free_ctrl		= nvme_pci_free_ctrl,
2692
	.submit_async_event	= nvme_pci_submit_async_event,
2693
	.get_address		= nvme_pci_get_address,
2694
};
2695

2696 2697 2698 2699
static int nvme_dev_map(struct nvme_dev *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev->dev);

2700
	if (pci_request_mem_regions(pdev, "nvme"))
2701 2702
		return -ENODEV;

2703
	if (nvme_remap_bar(dev, NVME_REG_DBS + 4096))
2704 2705
		goto release;

M
Max Gurtovoy 已提交
2706
	return 0;
2707
  release:
M
Max Gurtovoy 已提交
2708 2709
	pci_release_mem_regions(pdev);
	return -ENODEV;
2710 2711
}

2712
static unsigned long check_vendor_combination_bug(struct pci_dev *pdev)
2713 2714 2715 2716 2717 2718 2719 2720 2721 2722 2723 2724 2725 2726
{
	if (pdev->vendor == 0x144d && pdev->device == 0xa802) {
		/*
		 * Several Samsung devices seem to drop off the PCIe bus
		 * randomly when APST is on and uses the deepest sleep state.
		 * This has been observed on a Samsung "SM951 NVMe SAMSUNG
		 * 256GB", a "PM951 NVMe SAMSUNG 512GB", and a "Samsung SSD
		 * 950 PRO 256GB", but it seems to be restricted to two Dell
		 * laptops.
		 */
		if (dmi_match(DMI_SYS_VENDOR, "Dell Inc.") &&
		    (dmi_match(DMI_PRODUCT_NAME, "XPS 15 9550") ||
		     dmi_match(DMI_PRODUCT_NAME, "Precision 5510")))
			return NVME_QUIRK_NO_DEEPEST_PS;
2727 2728 2729
	} else if (pdev->vendor == 0x144d && pdev->device == 0xa804) {
		/*
		 * Samsung SSD 960 EVO drops off the PCIe bus after system
2730 2731 2732
		 * suspend on a Ryzen board, ASUS PRIME B350M-A, as well as
		 * within few minutes after bootup on a Coffee Lake board -
		 * ASUS PRIME Z370-A
2733 2734
		 */
		if (dmi_match(DMI_BOARD_VENDOR, "ASUSTeK COMPUTER INC.") &&
2735 2736
		    (dmi_match(DMI_BOARD_NAME, "PRIME B350M-A") ||
		     dmi_match(DMI_BOARD_NAME, "PRIME Z370-A")))
2737
			return NVME_QUIRK_NO_APST;
2738 2739 2740 2741 2742
	}

	return 0;
}

2743 2744 2745
static void nvme_async_probe(void *data, async_cookie_t cookie)
{
	struct nvme_dev *dev = data;
2746

2747
	flush_work(&dev->ctrl.reset_work);
2748
	flush_work(&dev->ctrl.scan_work);
2749
	nvme_put_ctrl(&dev->ctrl);
2750 2751
}

2752
static int nvme_probe(struct pci_dev *pdev, const struct pci_device_id *id)
M
Matthew Wilcox 已提交
2753
{
M
Matias Bjørling 已提交
2754
	int node, result = -ENOMEM;
M
Matthew Wilcox 已提交
2755
	struct nvme_dev *dev;
2756
	unsigned long quirks = id->driver_data;
2757
	size_t alloc_size;
M
Matthew Wilcox 已提交
2758

M
Matias Bjørling 已提交
2759 2760
	node = dev_to_node(&pdev->dev);
	if (node == NUMA_NO_NODE)
2761
		set_dev_node(&pdev->dev, first_memory_node);
M
Matias Bjørling 已提交
2762 2763

	dev = kzalloc_node(sizeof(*dev), GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2764 2765
	if (!dev)
		return -ENOMEM;
2766

2767 2768
	dev->queues = kcalloc_node(max_queue_count(), sizeof(struct nvme_queue),
					GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2769 2770 2771
	if (!dev->queues)
		goto free;

2772
	dev->dev = get_device(&pdev->dev);
K
Keith Busch 已提交
2773
	pci_set_drvdata(pdev, dev);
2774

2775 2776
	result = nvme_dev_map(dev);
	if (result)
2777
		goto put_pci;
2778

2779
	INIT_WORK(&dev->ctrl.reset_work, nvme_reset_work);
2780
	INIT_WORK(&dev->remove_work, nvme_remove_dead_ctrl_work);
2781
	mutex_init(&dev->shutdown_lock);
K
Keith Busch 已提交
2782
	init_completion(&dev->ioq_wait);
M
Matthew Wilcox 已提交
2783

M
Matthew Wilcox 已提交
2784 2785
	result = nvme_setup_prp_pools(dev);
	if (result)
2786
		goto unmap;
2787

2788
	quirks |= check_vendor_combination_bug(pdev);
2789

2790 2791 2792 2793 2794 2795 2796 2797 2798 2799 2800 2801 2802 2803 2804 2805 2806
	/*
	 * Double check that our mempool alloc size will cover the biggest
	 * command we support.
	 */
	alloc_size = nvme_pci_iod_alloc_size(dev, NVME_MAX_KB_SZ,
						NVME_MAX_SEGS, true);
	WARN_ON_ONCE(alloc_size > PAGE_SIZE);

	dev->iod_mempool = mempool_create_node(1, mempool_kmalloc,
						mempool_kfree,
						(void *) alloc_size,
						GFP_KERNEL, node);
	if (!dev->iod_mempool) {
		result = -ENOMEM;
		goto release_pools;
	}

2807 2808 2809 2810 2811
	result = nvme_init_ctrl(&dev->ctrl, &pdev->dev, &nvme_pci_ctrl_ops,
			quirks);
	if (result)
		goto release_mempool;

2812 2813
	dev_info(dev->ctrl.device, "pci function %s\n", dev_name(&pdev->dev));

2814
	nvme_reset_ctrl(&dev->ctrl);
2815
	nvme_get_ctrl(&dev->ctrl);
2816
	async_schedule(nvme_async_probe, dev);
2817

M
Matthew Wilcox 已提交
2818 2819
	return 0;

2820 2821
 release_mempool:
	mempool_destroy(dev->iod_mempool);
2822
 release_pools:
M
Matthew Wilcox 已提交
2823
	nvme_release_prp_pools(dev);
2824 2825
 unmap:
	nvme_dev_unmap(dev);
K
Keith Busch 已提交
2826
 put_pci:
2827
	put_device(dev->dev);
M
Matthew Wilcox 已提交
2828 2829 2830 2831 2832 2833
 free:
	kfree(dev->queues);
	kfree(dev);
	return result;
}

2834
static void nvme_reset_prepare(struct pci_dev *pdev)
2835
{
K
Keith Busch 已提交
2836
	struct nvme_dev *dev = pci_get_drvdata(pdev);
2837
	nvme_dev_disable(dev, false);
2838
}
2839

2840 2841
static void nvme_reset_done(struct pci_dev *pdev)
{
2842
	struct nvme_dev *dev = pci_get_drvdata(pdev);
S
Sagi Grimberg 已提交
2843
	nvme_reset_ctrl_sync(&dev->ctrl);
2844 2845
}

2846 2847 2848
static void nvme_shutdown(struct pci_dev *pdev)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);
2849
	nvme_dev_disable(dev, true);
2850 2851
}

2852 2853 2854 2855 2856
/*
 * The driver's remove may be called on a device in a partially initialized
 * state. This function must not have any dependencies on the device state in
 * order to proceed.
 */
2857
static void nvme_remove(struct pci_dev *pdev)
M
Matthew Wilcox 已提交
2858 2859
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);
K
Keith Busch 已提交
2860

2861
	nvme_change_ctrl_state(&dev->ctrl, NVME_CTRL_DELETING);
K
Keith Busch 已提交
2862
	pci_set_drvdata(pdev, NULL);
2863

2864
	if (!pci_device_is_present(pdev)) {
2865
		nvme_change_ctrl_state(&dev->ctrl, NVME_CTRL_DEAD);
2866
		nvme_dev_disable(dev, true);
2867
		nvme_dev_remove_admin(dev);
2868
	}
2869

2870
	flush_work(&dev->ctrl.reset_work);
2871 2872
	nvme_stop_ctrl(&dev->ctrl);
	nvme_remove_namespaces(&dev->ctrl);
2873
	nvme_dev_disable(dev, true);
2874
	nvme_release_cmb(dev);
2875
	nvme_free_host_mem(dev);
M
Matias Bjørling 已提交
2876
	nvme_dev_remove_admin(dev);
2877
	nvme_free_queues(dev, 0);
2878
	nvme_uninit_ctrl(&dev->ctrl);
K
Keith Busch 已提交
2879
	nvme_release_prp_pools(dev);
2880
	nvme_dev_unmap(dev);
2881
	nvme_put_ctrl(&dev->ctrl);
M
Matthew Wilcox 已提交
2882 2883
}

2884
#ifdef CONFIG_PM_SLEEP
2885 2886 2887 2888 2889
static int nvme_suspend(struct device *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev);
	struct nvme_dev *ndev = pci_get_drvdata(pdev);

2890
	nvme_dev_disable(ndev, true);
2891 2892 2893 2894 2895 2896 2897 2898
	return 0;
}

static int nvme_resume(struct device *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev);
	struct nvme_dev *ndev = pci_get_drvdata(pdev);

2899
	nvme_reset_ctrl(&ndev->ctrl);
K
Keith Busch 已提交
2900
	return 0;
2901
}
2902
#endif
2903 2904

static SIMPLE_DEV_PM_OPS(nvme_dev_pm_ops, nvme_suspend, nvme_resume);
M
Matthew Wilcox 已提交
2905

K
Keith Busch 已提交
2906 2907 2908 2909 2910 2911 2912 2913 2914 2915 2916 2917 2918 2919
static pci_ers_result_t nvme_error_detected(struct pci_dev *pdev,
						pci_channel_state_t state)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);

	/*
	 * A frozen channel requires a reset. When detected, this method will
	 * shutdown the controller to quiesce. The controller will be restarted
	 * after the slot reset through driver's slot_reset callback.
	 */
	switch (state) {
	case pci_channel_io_normal:
		return PCI_ERS_RESULT_CAN_RECOVER;
	case pci_channel_io_frozen:
K
Keith Busch 已提交
2920 2921
		dev_warn(dev->ctrl.device,
			"frozen state error detected, reset controller\n");
2922
		nvme_dev_disable(dev, false);
K
Keith Busch 已提交
2923 2924
		return PCI_ERS_RESULT_NEED_RESET;
	case pci_channel_io_perm_failure:
K
Keith Busch 已提交
2925 2926
		dev_warn(dev->ctrl.device,
			"failure state error detected, request disconnect\n");
K
Keith Busch 已提交
2927 2928 2929 2930 2931 2932 2933 2934 2935
		return PCI_ERS_RESULT_DISCONNECT;
	}
	return PCI_ERS_RESULT_NEED_RESET;
}

static pci_ers_result_t nvme_slot_reset(struct pci_dev *pdev)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);

2936
	dev_info(dev->ctrl.device, "restart after slot reset\n");
K
Keith Busch 已提交
2937
	pci_restore_state(pdev);
2938
	nvme_reset_ctrl(&dev->ctrl);
K
Keith Busch 已提交
2939 2940 2941 2942 2943
	return PCI_ERS_RESULT_RECOVERED;
}

static void nvme_error_resume(struct pci_dev *pdev)
{
K
Keith Busch 已提交
2944 2945 2946
	struct nvme_dev *dev = pci_get_drvdata(pdev);

	flush_work(&dev->ctrl.reset_work);
K
Keith Busch 已提交
2947 2948 2949
	pci_cleanup_aer_uncorrect_error_status(pdev);
}

2950
static const struct pci_error_handlers nvme_err_handler = {
M
Matthew Wilcox 已提交
2951 2952 2953
	.error_detected	= nvme_error_detected,
	.slot_reset	= nvme_slot_reset,
	.resume		= nvme_error_resume,
2954 2955
	.reset_prepare	= nvme_reset_prepare,
	.reset_done	= nvme_reset_done,
M
Matthew Wilcox 已提交
2956 2957
};

2958
static const struct pci_device_id nvme_id_table[] = {
2959
	{ PCI_VDEVICE(INTEL, 0x0953),
2960
		.driver_data = NVME_QUIRK_STRIPE_SIZE, },
2961 2962
	{ PCI_VDEVICE(INTEL, 0x0a53),
		.driver_data = NVME_QUIRK_STRIPE_SIZE |
2963
				NVME_QUIRK_DEALLOCATE_ZEROES, },
2964 2965
	{ PCI_VDEVICE(INTEL, 0x0a54),
		.driver_data = NVME_QUIRK_STRIPE_SIZE |
2966
				NVME_QUIRK_DEALLOCATE_ZEROES, },
2967 2968 2969
	{ PCI_VDEVICE(INTEL, 0x0a55),
		.driver_data = NVME_QUIRK_STRIPE_SIZE |
				NVME_QUIRK_DEALLOCATE_ZEROES, },
2970
	{ PCI_VDEVICE(INTEL, 0xf1a5),	/* Intel 600P/P3100 */
2971 2972
		.driver_data = NVME_QUIRK_NO_DEEPEST_PS |
				NVME_QUIRK_MEDIUM_PRIO_SQ },
2973 2974
	{ PCI_VDEVICE(INTEL, 0x5845),	/* Qemu emulated controller */
		.driver_data = NVME_QUIRK_IDENTIFY_CNS, },
2975 2976
	{ PCI_DEVICE(0x1bb1, 0x0100),   /* Seagate Nytro Flash Storage */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2977 2978
	{ PCI_DEVICE(0x1c58, 0x0003),	/* HGST adapter */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2979 2980
	{ PCI_DEVICE(0x1c58, 0x0023),	/* WDC SN200 adapter */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2981 2982
	{ PCI_DEVICE(0x1c5f, 0x0540),	/* Memblaze Pblaze4 adapter */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2983 2984 2985 2986
	{ PCI_DEVICE(0x144d, 0xa821),   /* Samsung PM1725 */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
	{ PCI_DEVICE(0x144d, 0xa822),   /* Samsung PM1725a */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
C
Christoph Hellwig 已提交
2987 2988 2989 2990
	{ PCI_DEVICE(0x1d1d, 0x1f1f),	/* LighNVM qemu device */
		.driver_data = NVME_QUIRK_LIGHTNVM, },
	{ PCI_DEVICE(0x1d1d, 0x2807),	/* CNEX WL */
		.driver_data = NVME_QUIRK_LIGHTNVM, },
W
Wei Xu 已提交
2991 2992
	{ PCI_DEVICE(0x1d1d, 0x2601),	/* CNEX Granby */
		.driver_data = NVME_QUIRK_LIGHTNVM, },
M
Matthew Wilcox 已提交
2993
	{ PCI_DEVICE_CLASS(PCI_CLASS_STORAGE_EXPRESS, 0xffffff) },
2994
	{ PCI_DEVICE(PCI_VENDOR_ID_APPLE, 0x2001) },
2995
	{ PCI_DEVICE(PCI_VENDOR_ID_APPLE, 0x2003) },
M
Matthew Wilcox 已提交
2996 2997 2998 2999 3000 3001 3002 3003
	{ 0, }
};
MODULE_DEVICE_TABLE(pci, nvme_id_table);

static struct pci_driver nvme_driver = {
	.name		= "nvme",
	.id_table	= nvme_id_table,
	.probe		= nvme_probe,
3004
	.remove		= nvme_remove,
3005
	.shutdown	= nvme_shutdown,
3006 3007 3008
	.driver		= {
		.pm	= &nvme_dev_pm_ops,
	},
3009
	.sriov_configure = pci_sriov_configure_simple,
M
Matthew Wilcox 已提交
3010 3011 3012 3013 3014
	.err_handler	= &nvme_err_handler,
};

static int __init nvme_init(void)
{
3015
	return pci_register_driver(&nvme_driver);
M
Matthew Wilcox 已提交
3016 3017 3018 3019 3020
}

static void __exit nvme_exit(void)
{
	pci_unregister_driver(&nvme_driver);
3021
	flush_workqueue(nvme_wq);
3022
	_nvme_check_size();
M
Matthew Wilcox 已提交
3023 3024 3025 3026
}

MODULE_AUTHOR("Matthew Wilcox <willy@linux.intel.com>");
MODULE_LICENSE("GPL");
3027
MODULE_VERSION("1.0");
M
Matthew Wilcox 已提交
3028 3029
module_init(nvme_init);
module_exit(nvme_exit);