pci.c 76.6 KB
Newer Older
M
Matthew Wilcox 已提交
1 2
/*
 * NVM Express device driver
3
 * Copyright (c) 2011-2014, Intel Corporation.
M
Matthew Wilcox 已提交
4 5 6 7 8 9 10 11 12 13 14
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 */

K
Keith Busch 已提交
15
#include <linux/aer.h>
16
#include <linux/async.h>
M
Matthew Wilcox 已提交
17
#include <linux/blkdev.h>
M
Matias Bjørling 已提交
18
#include <linux/blk-mq.h>
19
#include <linux/blk-mq-pci.h>
20
#include <linux/dmi.h>
M
Matthew Wilcox 已提交
21 22 23 24 25
#include <linux/init.h>
#include <linux/interrupt.h>
#include <linux/io.h>
#include <linux/mm.h>
#include <linux/module.h>
26
#include <linux/mutex.h>
27
#include <linux/once.h>
M
Matthew Wilcox 已提交
28
#include <linux/pci.h>
K
Keith Busch 已提交
29
#include <linux/t10-pi.h>
M
Matthew Wilcox 已提交
30
#include <linux/types.h>
31
#include <linux/io-64-nonatomic-lo-hi.h>
32
#include <linux/sed-opal.h>
33

34 35
#include "nvme.h"

M
Matthew Wilcox 已提交
36 37
#define SQ_SIZE(depth)		(depth * sizeof(struct nvme_command))
#define CQ_SIZE(depth)		(depth * sizeof(struct nvme_completion))
38

C
Chaitanya Kulkarni 已提交
39
#define SGES_PER_PAGE	(PAGE_SIZE / sizeof(struct nvme_sgl_desc))
40

41 42 43 44 45 46 47
/*
 * These can be higher, but we need to ensure that any command doesn't
 * require an sg allocation that needs more than a page of data.
 */
#define NVME_MAX_KB_SZ	4096
#define NVME_MAX_SEGS	127

48 49 50
static int use_threaded_interrupts;
module_param(use_threaded_interrupts, int, 0);

51
static bool use_cmb_sqes = true;
52
module_param(use_cmb_sqes, bool, 0444);
53 54
MODULE_PARM_DESC(use_cmb_sqes, "use controller's memory buffer for I/O SQes");

55 56 57 58
static unsigned int max_host_mem_size_mb = 128;
module_param(max_host_mem_size_mb, uint, 0444);
MODULE_PARM_DESC(max_host_mem_size_mb,
	"Maximum Host Memory Buffer (HMB) size per controller (in MiB)");
59

C
Chaitanya Kulkarni 已提交
60 61 62 63 64 65
static unsigned int sgl_threshold = SZ_32K;
module_param(sgl_threshold, uint, 0644);
MODULE_PARM_DESC(sgl_threshold,
		"Use SGLs when average request segment size is larger or equal to "
		"this size. Use 0 to disable SGLs.");

66 67 68 69 70 71 72 73 74 75
static int io_queue_depth_set(const char *val, const struct kernel_param *kp);
static const struct kernel_param_ops io_queue_depth_ops = {
	.set = io_queue_depth_set,
	.get = param_get_int,
};

static int io_queue_depth = 1024;
module_param_cb(io_queue_depth, &io_queue_depth_ops, &io_queue_depth, 0644);
MODULE_PARM_DESC(io_queue_depth, "set io queue depth, should >= 2");

76 77 78 79 80 81 82 83 84 85 86 87
static int queue_count_set(const char *val, const struct kernel_param *kp);
static const struct kernel_param_ops queue_count_ops = {
	.set = queue_count_set,
	.get = param_get_int,
};

static int write_queues;
module_param_cb(write_queues, &queue_count_ops, &write_queues, 0644);
MODULE_PARM_DESC(write_queues,
	"Number of queues to use for writes. If not set, reads and writes "
	"will share a queue set.");

J
Jens Axboe 已提交
88
static int poll_queues = 0;
J
Jens Axboe 已提交
89 90 91
module_param_cb(poll_queues, &queue_count_ops, &poll_queues, 0644);
MODULE_PARM_DESC(poll_queues, "Number of queues to use for polled IO.");

92 93
struct nvme_dev;
struct nvme_queue;
94

95
static void nvme_dev_disable(struct nvme_dev *dev, bool shutdown);
96

97 98 99 100
/*
 * Represents an NVM Express device.  Each nvme_dev is a PCI function.
 */
struct nvme_dev {
101
	struct nvme_queue *queues;
102 103 104 105 106 107 108 109
	struct blk_mq_tag_set tagset;
	struct blk_mq_tag_set admin_tagset;
	u32 __iomem *dbs;
	struct device *dev;
	struct dma_pool *prp_page_pool;
	struct dma_pool *prp_small_pool;
	unsigned online_queues;
	unsigned max_qid;
110
	unsigned io_queues[HCTX_MAX_TYPES];
111
	unsigned int num_vecs;
112 113 114
	int q_depth;
	u32 db_stride;
	void __iomem *bar;
115
	unsigned long bar_mapped_size;
116
	struct work_struct remove_work;
117
	struct mutex shutdown_lock;
118 119
	bool subsystem;
	void __iomem *cmb;
120
	pci_bus_addr_t cmb_bus_addr;
121 122
	u64 cmb_size;
	u32 cmbsz;
123
	u32 cmbloc;
124
	struct nvme_ctrl ctrl;
K
Keith Busch 已提交
125
	struct completion ioq_wait;
126

127 128
	mempool_t *iod_mempool;

129
	/* shadow doorbell buffer support: */
130 131 132 133
	u32 *dbbuf_dbs;
	dma_addr_t dbbuf_dbs_dma_addr;
	u32 *dbbuf_eis;
	dma_addr_t dbbuf_eis_dma_addr;
134 135 136 137

	/* host memory buffer support: */
	u64 host_mem_size;
	u32 nr_host_mem_descs;
138
	dma_addr_t host_mem_descs_dma;
139 140
	struct nvme_host_mem_buf_desc *host_mem_descs;
	void **host_mem_desc_bufs;
K
Keith Busch 已提交
141
};
142

143 144 145 146 147 148 149 150 151 152 153
static int io_queue_depth_set(const char *val, const struct kernel_param *kp)
{
	int n = 0, ret;

	ret = kstrtoint(val, 10, &n);
	if (ret != 0 || n < 2)
		return -EINVAL;

	return param_set_int(val, kp);
}

154 155 156 157 158
static int queue_count_set(const char *val, const struct kernel_param *kp)
{
	int n = 0, ret;

	ret = kstrtoint(val, 10, &n);
159 160
	if (ret)
		return ret;
161 162 163 164 165 166
	if (n > num_possible_cpus())
		n = num_possible_cpus();

	return param_set_int(val, kp);
}

167 168 169 170 171 172 173 174 175 176
static inline unsigned int sq_idx(unsigned int qid, u32 stride)
{
	return qid * 2 * stride;
}

static inline unsigned int cq_idx(unsigned int qid, u32 stride)
{
	return (qid * 2 + 1) * stride;
}

177 178 179 180 181
static inline struct nvme_dev *to_nvme_dev(struct nvme_ctrl *ctrl)
{
	return container_of(ctrl, struct nvme_dev, ctrl);
}

M
Matthew Wilcox 已提交
182 183 184 185 186 187
/*
 * An NVM Express queue.  Each device has at least two (one for admin
 * commands and one for I/O commands).
 */
struct nvme_queue {
	struct device *q_dmadev;
M
Matthew Wilcox 已提交
188
	struct nvme_dev *dev;
189
	spinlock_t sq_lock;
M
Matthew Wilcox 已提交
190
	struct nvme_command *sq_cmds;
191
	struct nvme_command __iomem *sq_cmds_io;
192
	spinlock_t cq_lock ____cacheline_aligned_in_smp;
M
Matthew Wilcox 已提交
193
	volatile struct nvme_completion *cqes;
194
	struct blk_mq_tags **tags;
M
Matthew Wilcox 已提交
195 196 197 198
	dma_addr_t sq_dma_addr;
	dma_addr_t cq_dma_addr;
	u32 __iomem *q_db;
	u16 q_depth;
J
Jens Axboe 已提交
199
	s16 cq_vector;
M
Matthew Wilcox 已提交
200
	u16 sq_tail;
201
	u16 last_sq_tail;
M
Matthew Wilcox 已提交
202
	u16 cq_head;
203
	u16 last_cq_head;
K
Keith Busch 已提交
204
	u16 qid;
205
	u8 cq_phase;
J
Jens Axboe 已提交
206
	u8 polled;
207 208 209 210
	u32 *dbbuf_sq_db;
	u32 *dbbuf_cq_db;
	u32 *dbbuf_sq_ei;
	u32 *dbbuf_cq_ei;
M
Matthew Wilcox 已提交
211 212
};

213 214 215
/*
 * The nvme_iod describes the data in an I/O, including the list of PRP
 * entries.  You can't see it in this data structure because C doesn't let
C
Christoph Hellwig 已提交
216
 * me express that.  Use nvme_init_iod to ensure there's enough space
217 218 219
 * allocated to store the PRP list.
 */
struct nvme_iod {
220
	struct nvme_request req;
C
Christoph Hellwig 已提交
221
	struct nvme_queue *nvmeq;
C
Chaitanya Kulkarni 已提交
222
	bool use_sgl;
C
Christoph Hellwig 已提交
223
	int aborted;
224 225 226 227
	int npages;		/* In the PRP list. 0 means small pool in use */
	int nents;		/* Used in scatterlist */
	int length;		/* Of data, in bytes */
	dma_addr_t first_dma;
228
	struct scatterlist meta_sg; /* metadata requires single contiguous buffer */
C
Christoph Hellwig 已提交
229 230
	struct scatterlist *sg;
	struct scatterlist inline_sg[0];
M
Matthew Wilcox 已提交
231 232 233 234 235 236 237 238 239 240 241 242
};

/*
 * Check we didin't inadvertently grow the command struct
 */
static inline void _nvme_check_size(void)
{
	BUILD_BUG_ON(sizeof(struct nvme_rw_command) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_create_cq) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_create_sq) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_delete_queue) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_features) != 64);
243
	BUILD_BUG_ON(sizeof(struct nvme_format_cmd) != 64);
K
Keith Busch 已提交
244
	BUILD_BUG_ON(sizeof(struct nvme_abort_cmd) != 64);
M
Matthew Wilcox 已提交
245
	BUILD_BUG_ON(sizeof(struct nvme_command) != 64);
246 247
	BUILD_BUG_ON(sizeof(struct nvme_id_ctrl) != NVME_IDENTIFY_DATA_SIZE);
	BUILD_BUG_ON(sizeof(struct nvme_id_ns) != NVME_IDENTIFY_DATA_SIZE);
M
Matthew Wilcox 已提交
248
	BUILD_BUG_ON(sizeof(struct nvme_lba_range_type) != 64);
K
Keith Busch 已提交
249
	BUILD_BUG_ON(sizeof(struct nvme_smart_log) != 512);
250 251 252
	BUILD_BUG_ON(sizeof(struct nvme_dbbuf) != 64);
}

253 254
static unsigned int max_io_queues(void)
{
J
Jens Axboe 已提交
255
	return num_possible_cpus() + write_queues + poll_queues;
256 257 258 259 260 261 262 263
}

static unsigned int max_queue_count(void)
{
	/* IO queues + admin queue */
	return 1 + max_io_queues();
}

264 265
static inline unsigned int nvme_dbbuf_size(u32 stride)
{
266
	return (max_queue_count() * 8 * stride);
267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334
}

static int nvme_dbbuf_dma_alloc(struct nvme_dev *dev)
{
	unsigned int mem_size = nvme_dbbuf_size(dev->db_stride);

	if (dev->dbbuf_dbs)
		return 0;

	dev->dbbuf_dbs = dma_alloc_coherent(dev->dev, mem_size,
					    &dev->dbbuf_dbs_dma_addr,
					    GFP_KERNEL);
	if (!dev->dbbuf_dbs)
		return -ENOMEM;
	dev->dbbuf_eis = dma_alloc_coherent(dev->dev, mem_size,
					    &dev->dbbuf_eis_dma_addr,
					    GFP_KERNEL);
	if (!dev->dbbuf_eis) {
		dma_free_coherent(dev->dev, mem_size,
				  dev->dbbuf_dbs, dev->dbbuf_dbs_dma_addr);
		dev->dbbuf_dbs = NULL;
		return -ENOMEM;
	}

	return 0;
}

static void nvme_dbbuf_dma_free(struct nvme_dev *dev)
{
	unsigned int mem_size = nvme_dbbuf_size(dev->db_stride);

	if (dev->dbbuf_dbs) {
		dma_free_coherent(dev->dev, mem_size,
				  dev->dbbuf_dbs, dev->dbbuf_dbs_dma_addr);
		dev->dbbuf_dbs = NULL;
	}
	if (dev->dbbuf_eis) {
		dma_free_coherent(dev->dev, mem_size,
				  dev->dbbuf_eis, dev->dbbuf_eis_dma_addr);
		dev->dbbuf_eis = NULL;
	}
}

static void nvme_dbbuf_init(struct nvme_dev *dev,
			    struct nvme_queue *nvmeq, int qid)
{
	if (!dev->dbbuf_dbs || !qid)
		return;

	nvmeq->dbbuf_sq_db = &dev->dbbuf_dbs[sq_idx(qid, dev->db_stride)];
	nvmeq->dbbuf_cq_db = &dev->dbbuf_dbs[cq_idx(qid, dev->db_stride)];
	nvmeq->dbbuf_sq_ei = &dev->dbbuf_eis[sq_idx(qid, dev->db_stride)];
	nvmeq->dbbuf_cq_ei = &dev->dbbuf_eis[cq_idx(qid, dev->db_stride)];
}

static void nvme_dbbuf_set(struct nvme_dev *dev)
{
	struct nvme_command c;

	if (!dev->dbbuf_dbs)
		return;

	memset(&c, 0, sizeof(c));
	c.dbbuf.opcode = nvme_admin_dbbuf;
	c.dbbuf.prp1 = cpu_to_le64(dev->dbbuf_dbs_dma_addr);
	c.dbbuf.prp2 = cpu_to_le64(dev->dbbuf_eis_dma_addr);

	if (nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0)) {
335
		dev_warn(dev->ctrl.device, "unable to set dbbuf\n");
336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361
		/* Free memory and continue on */
		nvme_dbbuf_dma_free(dev);
	}
}

static inline int nvme_dbbuf_need_event(u16 event_idx, u16 new_idx, u16 old)
{
	return (u16)(new_idx - event_idx - 1) < (u16)(new_idx - old);
}

/* Update dbbuf and return true if an MMIO is required */
static bool nvme_dbbuf_update_and_check_event(u16 value, u32 *dbbuf_db,
					      volatile u32 *dbbuf_ei)
{
	if (dbbuf_db) {
		u16 old_value;

		/*
		 * Ensure that the queue is written before updating
		 * the doorbell in memory
		 */
		wmb();

		old_value = *dbbuf_db;
		*dbbuf_db = value;

362 363 364 365 366 367 368 369
		/*
		 * Ensure that the doorbell is updated before reading the event
		 * index from memory.  The controller needs to provide similar
		 * ordering to ensure the envent index is updated before reading
		 * the doorbell.
		 */
		mb();

370 371 372 373 374
		if (!nvme_dbbuf_need_event(*dbbuf_ei, value, old_value))
			return false;
	}

	return true;
M
Matthew Wilcox 已提交
375 376
}

377 378 379 380
/*
 * Max size of iod being embedded in the request payload
 */
#define NVME_INT_PAGES		2
381
#define NVME_INT_BYTES(dev)	(NVME_INT_PAGES * (dev)->ctrl.page_size)
382 383 384 385 386 387 388 389

/*
 * Will slightly overestimate the number of pages needed.  This is OK
 * as it only leads to a small amount of wasted memory for the lifetime of
 * the I/O.
 */
static int nvme_npages(unsigned size, struct nvme_dev *dev)
{
390 391
	unsigned nprps = DIV_ROUND_UP(size + dev->ctrl.page_size,
				      dev->ctrl.page_size);
392 393 394
	return DIV_ROUND_UP(8 * nprps, PAGE_SIZE - 8);
}

C
Chaitanya Kulkarni 已提交
395 396 397 398 399
/*
 * Calculates the number of pages needed for the SGL segments. For example a 4k
 * page can accommodate 256 SGL descriptors.
 */
static int nvme_pci_npages_sgl(unsigned int num_seg)
400
{
C
Chaitanya Kulkarni 已提交
401
	return DIV_ROUND_UP(num_seg * sizeof(struct nvme_sgl_desc), PAGE_SIZE);
C
Christoph Hellwig 已提交
402
}
403

C
Chaitanya Kulkarni 已提交
404 405
static unsigned int nvme_pci_iod_alloc_size(struct nvme_dev *dev,
		unsigned int size, unsigned int nseg, bool use_sgl)
C
Christoph Hellwig 已提交
406
{
C
Chaitanya Kulkarni 已提交
407 408 409 410 411 412 413 414
	size_t alloc_size;

	if (use_sgl)
		alloc_size = sizeof(__le64 *) * nvme_pci_npages_sgl(nseg);
	else
		alloc_size = sizeof(__le64 *) * nvme_npages(size, dev);

	return alloc_size + sizeof(struct scatterlist) * nseg;
C
Christoph Hellwig 已提交
415
}
416

C
Chaitanya Kulkarni 已提交
417
static unsigned int nvme_pci_cmd_size(struct nvme_dev *dev, bool use_sgl)
C
Christoph Hellwig 已提交
418
{
C
Chaitanya Kulkarni 已提交
419 420 421 422 423
	unsigned int alloc_size = nvme_pci_iod_alloc_size(dev,
				    NVME_INT_BYTES(dev), NVME_INT_PAGES,
				    use_sgl);

	return sizeof(struct nvme_iod) + alloc_size;
424 425
}

M
Matias Bjørling 已提交
426 427
static int nvme_admin_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
				unsigned int hctx_idx)
428
{
M
Matias Bjørling 已提交
429
	struct nvme_dev *dev = data;
430
	struct nvme_queue *nvmeq = &dev->queues[0];
M
Matias Bjørling 已提交
431

432 433 434 435
	WARN_ON(hctx_idx != 0);
	WARN_ON(dev->admin_tagset.tags[0] != hctx->tags);
	WARN_ON(nvmeq->tags);

M
Matias Bjørling 已提交
436
	hctx->driver_data = nvmeq;
437
	nvmeq->tags = &dev->admin_tagset.tags[0];
M
Matias Bjørling 已提交
438
	return 0;
439 440
}

441 442 443 444 445 446 447
static void nvme_admin_exit_hctx(struct blk_mq_hw_ctx *hctx, unsigned int hctx_idx)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	nvmeq->tags = NULL;
}

M
Matias Bjørling 已提交
448 449
static int nvme_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
			  unsigned int hctx_idx)
M
Matthew Wilcox 已提交
450
{
M
Matias Bjørling 已提交
451
	struct nvme_dev *dev = data;
452
	struct nvme_queue *nvmeq = &dev->queues[hctx_idx + 1];
M
Matias Bjørling 已提交
453

454 455
	if (!nvmeq->tags)
		nvmeq->tags = &dev->tagset.tags[hctx_idx];
M
Matthew Wilcox 已提交
456

457
	WARN_ON(dev->tagset.tags[hctx_idx] != hctx->tags);
M
Matias Bjørling 已提交
458 459
	hctx->driver_data = nvmeq;
	return 0;
M
Matthew Wilcox 已提交
460 461
}

462 463
static int nvme_init_request(struct blk_mq_tag_set *set, struct request *req,
		unsigned int hctx_idx, unsigned int numa_node)
M
Matthew Wilcox 已提交
464
{
465
	struct nvme_dev *dev = set->driver_data;
C
Christoph Hellwig 已提交
466
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
467
	int queue_idx = (set == &dev->tagset) ? hctx_idx + 1 : 0;
468
	struct nvme_queue *nvmeq = &dev->queues[queue_idx];
M
Matias Bjørling 已提交
469 470

	BUG_ON(!nvmeq);
C
Christoph Hellwig 已提交
471
	iod->nvmeq = nvmeq;
472 473

	nvme_req(req)->ctrl = &dev->ctrl;
M
Matias Bjørling 已提交
474 475 476
	return 0;
}

477 478 479 480 481 482 483 484 485
static int queue_irq_offset(struct nvme_dev *dev)
{
	/* if we have more than 1 vec, admin queue offsets us by 1 */
	if (dev->num_vecs > 1)
		return 1;

	return 0;
}

486 487 488
static int nvme_pci_map_queues(struct blk_mq_tag_set *set)
{
	struct nvme_dev *dev = set->driver_data;
489 490 491 492 493 494 495 496
	int i, qoff, offset;

	offset = queue_irq_offset(dev);
	for (i = 0, qoff = 0; i < set->nr_maps; i++) {
		struct blk_mq_queue_map *map = &set->map[i];

		map->nr_queues = dev->io_queues[i];
		if (!map->nr_queues) {
497
			BUG_ON(i == HCTX_TYPE_DEFAULT);
498 499

			/* shared set, resuse read set parameters */
500
			map->nr_queues = dev->io_queues[HCTX_TYPE_DEFAULT];
501 502 503 504
			qoff = 0;
			offset = queue_irq_offset(dev);
		}

J
Jens Axboe 已提交
505 506 507 508
		/*
		 * The poll queue(s) doesn't have an IRQ (and hence IRQ
		 * affinity), so use the regular blk-mq cpu mapping
		 */
509
		map->queue_offset = qoff;
510
		if (i != HCTX_TYPE_POLL)
J
Jens Axboe 已提交
511 512 513
			blk_mq_pci_map_queues(map, to_pci_dev(dev->dev), offset);
		else
			blk_mq_map_queues(map);
514 515 516
		qoff += map->nr_queues;
		offset += map->nr_queues;
	}
517

518
	return 0;
519 520
}

521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540
/*
 * Write sq tail if we are asked to, or if the next command would wrap.
 */
static inline void nvme_write_sq_db(struct nvme_queue *nvmeq, bool write_sq)
{
	if (!write_sq) {
		u16 next_tail = nvmeq->sq_tail + 1;

		if (next_tail == nvmeq->q_depth)
			next_tail = 0;
		if (next_tail != nvmeq->last_sq_tail)
			return;
	}

	if (nvme_dbbuf_update_and_check_event(nvmeq->sq_tail,
			nvmeq->dbbuf_sq_db, nvmeq->dbbuf_sq_ei))
		writel(nvmeq->sq_tail, nvmeq->q_db);
	nvmeq->last_sq_tail = nvmeq->sq_tail;
}

M
Matthew Wilcox 已提交
541
/**
542
 * nvme_submit_cmd() - Copy a command into a queue and ring the doorbell
M
Matthew Wilcox 已提交
543 544
 * @nvmeq: The queue to use
 * @cmd: The command to send
545
 * @write_sq: whether to write to the SQ doorbell
M
Matthew Wilcox 已提交
546
 */
547 548
static void nvme_submit_cmd(struct nvme_queue *nvmeq, struct nvme_command *cmd,
			    bool write_sq)
M
Matthew Wilcox 已提交
549
{
550
	spin_lock(&nvmeq->sq_lock);
551
	if (nvmeq->sq_cmds_io)
552 553
		memcpy_toio(&nvmeq->sq_cmds_io[nvmeq->sq_tail], cmd,
				sizeof(*cmd));
554
	else
555
		memcpy(&nvmeq->sq_cmds[nvmeq->sq_tail], cmd, sizeof(*cmd));
556

557 558
	if (++nvmeq->sq_tail == nvmeq->q_depth)
		nvmeq->sq_tail = 0;
559 560 561 562 563 564 565 566 567 568 569
	nvme_write_sq_db(nvmeq, write_sq);
	spin_unlock(&nvmeq->sq_lock);
}

static void nvme_commit_rqs(struct blk_mq_hw_ctx *hctx)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	spin_lock(&nvmeq->sq_lock);
	if (nvmeq->sq_tail != nvmeq->last_sq_tail)
		nvme_write_sq_db(nvmeq, true);
570
	spin_unlock(&nvmeq->sq_lock);
M
Matthew Wilcox 已提交
571 572
}

C
Chaitanya Kulkarni 已提交
573
static void **nvme_pci_iod_list(struct request *req)
M
Matthew Wilcox 已提交
574
{
C
Christoph Hellwig 已提交
575
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Chaitanya Kulkarni 已提交
576
	return (void **)(iod->sg + blk_rq_nr_phys_segments(req));
M
Matthew Wilcox 已提交
577 578
}

579 580 581
static inline bool nvme_pci_use_sgls(struct nvme_dev *dev, struct request *req)
{
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
582
	int nseg = blk_rq_nr_phys_segments(req);
583 584
	unsigned int avg_seg_size;

585 586 587 588
	if (nseg == 0)
		return false;

	avg_seg_size = DIV_ROUND_UP(blk_rq_payload_bytes(req), nseg);
589 590 591 592 593 594 595 596 597 598

	if (!(dev->ctrl.sgls & ((1 << 0) | (1 << 1))))
		return false;
	if (!iod->nvmeq->qid)
		return false;
	if (!sgl_threshold || avg_seg_size < sgl_threshold)
		return false;
	return true;
}

599
static blk_status_t nvme_init_iod(struct request *rq, struct nvme_dev *dev)
600
{
C
Christoph Hellwig 已提交
601
	struct nvme_iod *iod = blk_mq_rq_to_pdu(rq);
602
	int nseg = blk_rq_nr_phys_segments(rq);
603
	unsigned int size = blk_rq_payload_bytes(rq);
604

605 606
	iod->use_sgl = nvme_pci_use_sgls(dev, rq);

C
Christoph Hellwig 已提交
607
	if (nseg > NVME_INT_PAGES || size > NVME_INT_BYTES(dev)) {
608
		iod->sg = mempool_alloc(dev->iod_mempool, GFP_ATOMIC);
C
Christoph Hellwig 已提交
609
		if (!iod->sg)
610
			return BLK_STS_RESOURCE;
C
Christoph Hellwig 已提交
611 612
	} else {
		iod->sg = iod->inline_sg;
613 614
	}

C
Christoph Hellwig 已提交
615 616 617 618
	iod->aborted = 0;
	iod->npages = -1;
	iod->nents = 0;
	iod->length = size;
K
Keith Busch 已提交
619

620
	return BLK_STS_OK;
621 622
}

C
Christoph Hellwig 已提交
623
static void nvme_free_iod(struct nvme_dev *dev, struct request *req)
M
Matthew Wilcox 已提交
624
{
C
Christoph Hellwig 已提交
625
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Chaitanya Kulkarni 已提交
626 627 628
	const int last_prp = dev->ctrl.page_size / sizeof(__le64) - 1;
	dma_addr_t dma_addr = iod->first_dma, next_dma_addr;

629 630 631
	int i;

	if (iod->npages == 0)
C
Chaitanya Kulkarni 已提交
632 633 634
		dma_pool_free(dev->prp_small_pool, nvme_pci_iod_list(req)[0],
			dma_addr);

635
	for (i = 0; i < iod->npages; i++) {
C
Chaitanya Kulkarni 已提交
636 637 638 639 640 641 642 643 644 645 646 647 648 649 650
		void *addr = nvme_pci_iod_list(req)[i];

		if (iod->use_sgl) {
			struct nvme_sgl_desc *sg_list = addr;

			next_dma_addr =
			    le64_to_cpu((sg_list[SGES_PER_PAGE - 1]).addr);
		} else {
			__le64 *prp_list = addr;

			next_dma_addr = le64_to_cpu(prp_list[last_prp]);
		}

		dma_pool_free(dev->prp_page_pool, addr, dma_addr);
		dma_addr = next_dma_addr;
651
	}
652

C
Christoph Hellwig 已提交
653
	if (iod->sg != iod->inline_sg)
654
		mempool_free(iod->sg, dev->iod_mempool);
K
Keith Busch 已提交
655 656
}

657 658 659 660 661 662 663 664 665 666 667 668 669 670
static void nvme_print_sgl(struct scatterlist *sgl, int nents)
{
	int i;
	struct scatterlist *sg;

	for_each_sg(sgl, sg, nents, i) {
		dma_addr_t phys = sg_phys(sg);
		pr_warn("sg[%d] phys_addr:%pad offset:%d length:%d "
			"dma_address:%pad dma_length:%d\n",
			i, &phys, sg->offset, sg->length, &sg_dma_address(sg),
			sg_dma_len(sg));
	}
}

C
Chaitanya Kulkarni 已提交
671 672
static blk_status_t nvme_pci_setup_prps(struct nvme_dev *dev,
		struct request *req, struct nvme_rw_command *cmnd)
M
Matthew Wilcox 已提交
673
{
C
Christoph Hellwig 已提交
674
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
675
	struct dma_pool *pool;
676
	int length = blk_rq_payload_bytes(req);
677
	struct scatterlist *sg = iod->sg;
M
Matthew Wilcox 已提交
678 679
	int dma_len = sg_dma_len(sg);
	u64 dma_addr = sg_dma_address(sg);
680
	u32 page_size = dev->ctrl.page_size;
681
	int offset = dma_addr & (page_size - 1);
682
	__le64 *prp_list;
C
Chaitanya Kulkarni 已提交
683
	void **list = nvme_pci_iod_list(req);
684
	dma_addr_t prp_dma;
685
	int nprps, i;
M
Matthew Wilcox 已提交
686

687
	length -= (page_size - offset);
688 689
	if (length <= 0) {
		iod->first_dma = 0;
C
Chaitanya Kulkarni 已提交
690
		goto done;
691
	}
M
Matthew Wilcox 已提交
692

693
	dma_len -= (page_size - offset);
M
Matthew Wilcox 已提交
694
	if (dma_len) {
695
		dma_addr += (page_size - offset);
M
Matthew Wilcox 已提交
696 697 698 699 700 701
	} else {
		sg = sg_next(sg);
		dma_addr = sg_dma_address(sg);
		dma_len = sg_dma_len(sg);
	}

702
	if (length <= page_size) {
703
		iod->first_dma = dma_addr;
C
Chaitanya Kulkarni 已提交
704
		goto done;
705 706
	}

707
	nprps = DIV_ROUND_UP(length, page_size);
708 709
	if (nprps <= (256 / 8)) {
		pool = dev->prp_small_pool;
710
		iod->npages = 0;
711 712
	} else {
		pool = dev->prp_page_pool;
713
		iod->npages = 1;
714 715
	}

716
	prp_list = dma_pool_alloc(pool, GFP_ATOMIC, &prp_dma);
717
	if (!prp_list) {
718
		iod->first_dma = dma_addr;
719
		iod->npages = -1;
720
		return BLK_STS_RESOURCE;
721
	}
722 723
	list[0] = prp_list;
	iod->first_dma = prp_dma;
724 725
	i = 0;
	for (;;) {
726
		if (i == page_size >> 3) {
727
			__le64 *old_prp_list = prp_list;
728
			prp_list = dma_pool_alloc(pool, GFP_ATOMIC, &prp_dma);
729
			if (!prp_list)
730
				return BLK_STS_RESOURCE;
731
			list[iod->npages++] = prp_list;
732 733 734
			prp_list[0] = old_prp_list[i - 1];
			old_prp_list[i - 1] = cpu_to_le64(prp_dma);
			i = 1;
735 736
		}
		prp_list[i++] = cpu_to_le64(dma_addr);
737 738 739
		dma_len -= page_size;
		dma_addr += page_size;
		length -= page_size;
740 741 742 743
		if (length <= 0)
			break;
		if (dma_len > 0)
			continue;
744 745
		if (unlikely(dma_len < 0))
			goto bad_sgl;
746 747 748
		sg = sg_next(sg);
		dma_addr = sg_dma_address(sg);
		dma_len = sg_dma_len(sg);
M
Matthew Wilcox 已提交
749 750
	}

C
Chaitanya Kulkarni 已提交
751 752 753 754
done:
	cmnd->dptr.prp1 = cpu_to_le64(sg_dma_address(iod->sg));
	cmnd->dptr.prp2 = cpu_to_le64(iod->first_dma);

755 756 757
	return BLK_STS_OK;

 bad_sgl:
758 759 760
	WARN(DO_ONCE(nvme_print_sgl, iod->sg, iod->nents),
			"Invalid SGL for payload:%d nents:%d\n",
			blk_rq_payload_bytes(req), iod->nents);
761
	return BLK_STS_IOERR;
M
Matthew Wilcox 已提交
762 763
}

C
Chaitanya Kulkarni 已提交
764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785
static void nvme_pci_sgl_set_data(struct nvme_sgl_desc *sge,
		struct scatterlist *sg)
{
	sge->addr = cpu_to_le64(sg_dma_address(sg));
	sge->length = cpu_to_le32(sg_dma_len(sg));
	sge->type = NVME_SGL_FMT_DATA_DESC << 4;
}

static void nvme_pci_sgl_set_seg(struct nvme_sgl_desc *sge,
		dma_addr_t dma_addr, int entries)
{
	sge->addr = cpu_to_le64(dma_addr);
	if (entries < SGES_PER_PAGE) {
		sge->length = cpu_to_le32(entries * sizeof(*sge));
		sge->type = NVME_SGL_FMT_LAST_SEG_DESC << 4;
	} else {
		sge->length = cpu_to_le32(PAGE_SIZE);
		sge->type = NVME_SGL_FMT_SEG_DESC << 4;
	}
}

static blk_status_t nvme_pci_setup_sgls(struct nvme_dev *dev,
786
		struct request *req, struct nvme_rw_command *cmd, int entries)
C
Chaitanya Kulkarni 已提交
787 788 789 790 791 792
{
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct dma_pool *pool;
	struct nvme_sgl_desc *sg_list;
	struct scatterlist *sg = iod->sg;
	dma_addr_t sgl_dma;
793
	int i = 0;
C
Chaitanya Kulkarni 已提交
794 795 796 797

	/* setting the transfer type as SGL */
	cmd->flags = NVME_CMD_SGL_METABUF;

798
	if (entries == 1) {
C
Chaitanya Kulkarni 已提交
799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838
		nvme_pci_sgl_set_data(&cmd->dptr.sgl, sg);
		return BLK_STS_OK;
	}

	if (entries <= (256 / sizeof(struct nvme_sgl_desc))) {
		pool = dev->prp_small_pool;
		iod->npages = 0;
	} else {
		pool = dev->prp_page_pool;
		iod->npages = 1;
	}

	sg_list = dma_pool_alloc(pool, GFP_ATOMIC, &sgl_dma);
	if (!sg_list) {
		iod->npages = -1;
		return BLK_STS_RESOURCE;
	}

	nvme_pci_iod_list(req)[0] = sg_list;
	iod->first_dma = sgl_dma;

	nvme_pci_sgl_set_seg(&cmd->dptr.sgl, sgl_dma, entries);

	do {
		if (i == SGES_PER_PAGE) {
			struct nvme_sgl_desc *old_sg_desc = sg_list;
			struct nvme_sgl_desc *link = &old_sg_desc[i - 1];

			sg_list = dma_pool_alloc(pool, GFP_ATOMIC, &sgl_dma);
			if (!sg_list)
				return BLK_STS_RESOURCE;

			i = 0;
			nvme_pci_iod_list(req)[iod->npages++] = sg_list;
			sg_list[i++] = *link;
			nvme_pci_sgl_set_seg(link, sgl_dma, entries);
		}

		nvme_pci_sgl_set_data(&sg_list[i++], sg);
		sg = sg_next(sg);
839
	} while (--entries > 0);
C
Chaitanya Kulkarni 已提交
840 841 842 843

	return BLK_STS_OK;
}

844
static blk_status_t nvme_map_data(struct nvme_dev *dev, struct request *req,
845
		struct nvme_command *cmnd)
846
{
C
Christoph Hellwig 已提交
847
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Christoph Hellwig 已提交
848 849 850
	struct request_queue *q = req->q;
	enum dma_data_direction dma_dir = rq_data_dir(req) ?
			DMA_TO_DEVICE : DMA_FROM_DEVICE;
851
	blk_status_t ret = BLK_STS_IOERR;
852
	int nr_mapped;
853

854
	sg_init_table(iod->sg, blk_rq_nr_phys_segments(req));
C
Christoph Hellwig 已提交
855 856 857
	iod->nents = blk_rq_map_sg(q, req, iod->sg);
	if (!iod->nents)
		goto out;
858

859
	ret = BLK_STS_RESOURCE;
860 861 862
	nr_mapped = dma_map_sg_attrs(dev->dev, iod->sg, iod->nents, dma_dir,
			DMA_ATTR_NO_WARN);
	if (!nr_mapped)
C
Christoph Hellwig 已提交
863
		goto out;
864

865
	if (iod->use_sgl)
866
		ret = nvme_pci_setup_sgls(dev, req, &cmnd->rw, nr_mapped);
C
Chaitanya Kulkarni 已提交
867 868 869
	else
		ret = nvme_pci_setup_prps(dev, req, &cmnd->rw);

870
	if (ret != BLK_STS_OK)
C
Christoph Hellwig 已提交
871
		goto out_unmap;
872

873
	ret = BLK_STS_IOERR;
C
Christoph Hellwig 已提交
874 875 876
	if (blk_integrity_rq(req)) {
		if (blk_rq_count_integrity_sg(q, req->bio) != 1)
			goto out_unmap;
877

878 879
		sg_init_table(&iod->meta_sg, 1);
		if (blk_rq_map_integrity_sg(q, req->bio, &iod->meta_sg) != 1)
C
Christoph Hellwig 已提交
880
			goto out_unmap;
881

882
		if (!dma_map_sg(dev->dev, &iod->meta_sg, 1, dma_dir))
C
Christoph Hellwig 已提交
883
			goto out_unmap;
884
	}
M
Matthew Wilcox 已提交
885

C
Christoph Hellwig 已提交
886
	if (blk_integrity_rq(req))
887
		cmnd->rw.metadata = cpu_to_le64(sg_dma_address(&iod->meta_sg));
888
	return BLK_STS_OK;
M
Matthew Wilcox 已提交
889

C
Christoph Hellwig 已提交
890 891 892 893
out_unmap:
	dma_unmap_sg(dev->dev, iod->sg, iod->nents, dma_dir);
out:
	return ret;
M
Matthew Wilcox 已提交
894 895
}

C
Christoph Hellwig 已提交
896
static void nvme_unmap_data(struct nvme_dev *dev, struct request *req)
M
Matthew Wilcox 已提交
897
{
C
Christoph Hellwig 已提交
898
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
899 900 901 902 903
	enum dma_data_direction dma_dir = rq_data_dir(req) ?
			DMA_TO_DEVICE : DMA_FROM_DEVICE;

	if (iod->nents) {
		dma_unmap_sg(dev->dev, iod->sg, iod->nents, dma_dir);
904
		if (blk_integrity_rq(req))
905
			dma_unmap_sg(dev->dev, &iod->meta_sg, 1, dma_dir);
906
	}
K
Keith Busch 已提交
907

908
	nvme_cleanup_cmd(req);
C
Christoph Hellwig 已提交
909
	nvme_free_iod(dev, req);
910
}
M
Matthew Wilcox 已提交
911

912 913 914
/*
 * NOTE: ns is NULL when called on the admin queue.
 */
915
static blk_status_t nvme_queue_rq(struct blk_mq_hw_ctx *hctx,
M
Matias Bjørling 已提交
916
			 const struct blk_mq_queue_data *bd)
917
{
M
Matias Bjørling 已提交
918 919
	struct nvme_ns *ns = hctx->queue->queuedata;
	struct nvme_queue *nvmeq = hctx->driver_data;
920
	struct nvme_dev *dev = nvmeq->dev;
M
Matias Bjørling 已提交
921
	struct request *req = bd->rq;
C
Christoph Hellwig 已提交
922
	struct nvme_command cmnd;
923
	blk_status_t ret;
K
Keith Busch 已提交
924

925 926 927 928
	/*
	 * We should not need to do this, but we're still using this to
	 * ensure we can drain requests on a dying queue.
	 */
J
Jens Axboe 已提交
929
	if (unlikely(nvmeq->cq_vector < 0 && !nvmeq->polled))
930 931
		return BLK_STS_IOERR;

932
	ret = nvme_setup_cmd(ns, req, &cmnd);
933
	if (ret)
C
Christoph Hellwig 已提交
934
		return ret;
M
Matias Bjørling 已提交
935

936
	ret = nvme_init_iod(req, dev);
937
	if (ret)
938
		goto out_free_cmd;
M
Matias Bjørling 已提交
939

940
	if (blk_rq_nr_phys_segments(req)) {
941
		ret = nvme_map_data(dev, req, &cmnd);
942 943 944
		if (ret)
			goto out_cleanup_iod;
	}
M
Matias Bjørling 已提交
945

946
	blk_mq_start_request(req);
947
	nvme_submit_cmd(nvmeq, &cmnd, bd->last);
948
	return BLK_STS_OK;
949
out_cleanup_iod:
C
Christoph Hellwig 已提交
950
	nvme_free_iod(dev, req);
951 952
out_free_cmd:
	nvme_cleanup_cmd(req);
C
Christoph Hellwig 已提交
953
	return ret;
M
Matthew Wilcox 已提交
954
}
K
Keith Busch 已提交
955

956
static void nvme_pci_complete_rq(struct request *req)
957
{
C
Christoph Hellwig 已提交
958
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
M
Matias Bjørling 已提交
959

960 961
	nvme_unmap_data(iod->nvmeq->dev, req);
	nvme_complete_rq(req);
M
Matthew Wilcox 已提交
962 963
}

964
/* We read the CQE phase first to check if the rest of the entry is valid */
965
static inline bool nvme_cqe_pending(struct nvme_queue *nvmeq)
966
{
967 968
	return (le16_to_cpu(nvmeq->cqes[nvmeq->cq_head].status) & 1) ==
			nvmeq->cq_phase;
969 970
}

971
static inline void nvme_ring_cq_doorbell(struct nvme_queue *nvmeq)
M
Matthew Wilcox 已提交
972
{
973
	u16 head = nvmeq->cq_head;
974

975 976 977
	if (nvme_dbbuf_update_and_check_event(head, nvmeq->dbbuf_cq_db,
					      nvmeq->dbbuf_cq_ei))
		writel(head, nvmeq->q_db + nvmeq->dev->db_stride);
978
}
979

980
static inline void nvme_handle_cqe(struct nvme_queue *nvmeq, u16 idx)
981
{
982
	volatile struct nvme_completion *cqe = &nvmeq->cqes[idx];
983
	struct request *req;
984

985 986 987 988 989
	if (unlikely(cqe->command_id >= nvmeq->q_depth)) {
		dev_warn(nvmeq->dev->ctrl.device,
			"invalid id %d completed on queue %d\n",
			cqe->command_id, le16_to_cpu(cqe->sq_id));
		return;
M
Matthew Wilcox 已提交
990 991
	}

992 993 994 995 996 997 998
	/*
	 * AEN requests are special as they don't time out and can
	 * survive any kind of queue freeze and often don't respond to
	 * aborts.  We don't even bother to allocate a struct request
	 * for them but rather special case them here.
	 */
	if (unlikely(nvmeq->qid == 0 &&
K
Keith Busch 已提交
999
			cqe->command_id >= NVME_AQ_BLK_MQ_DEPTH)) {
1000 1001
		nvme_complete_async_event(&nvmeq->dev->ctrl,
				cqe->status, &cqe->result);
J
Jens Axboe 已提交
1002
		return;
1003
	}
M
Matthew Wilcox 已提交
1004

1005 1006 1007
	req = blk_mq_tag_to_rq(*nvmeq->tags, cqe->command_id);
	nvme_end_request(req, cqe->status, cqe->result);
}
M
Matthew Wilcox 已提交
1008

1009
static void nvme_complete_cqes(struct nvme_queue *nvmeq, u16 start, u16 end)
M
Matthew Wilcox 已提交
1010
{
1011 1012 1013 1014 1015 1016
	while (start != end) {
		nvme_handle_cqe(nvmeq, start);
		if (++start == nvmeq->q_depth)
			start = 0;
	}
}
1017

1018 1019
static inline void nvme_update_cq_head(struct nvme_queue *nvmeq)
{
1020
	if (nvmeq->cq_head == nvmeq->q_depth - 1) {
1021 1022
		nvmeq->cq_head = 0;
		nvmeq->cq_phase = !nvmeq->cq_phase;
1023 1024
	} else {
		nvmeq->cq_head++;
M
Matthew Wilcox 已提交
1025
	}
J
Jens Axboe 已提交
1026 1027
}

1028 1029
static inline int nvme_process_cq(struct nvme_queue *nvmeq, u16 *start,
				  u16 *end, unsigned int tag)
J
Jens Axboe 已提交
1030
{
1031
	int found = 0;
M
Matthew Wilcox 已提交
1032

1033
	*start = nvmeq->cq_head;
1034 1035 1036
	while (nvme_cqe_pending(nvmeq)) {
		if (tag == -1U || nvmeq->cqes[nvmeq->cq_head].command_id == tag)
			found++;
1037
		nvme_update_cq_head(nvmeq);
1038
	}
1039
	*end = nvmeq->cq_head;
1040

1041
	if (*start != *end)
1042
		nvme_ring_cq_doorbell(nvmeq);
1043
	return found;
M
Matthew Wilcox 已提交
1044 1045 1046
}

static irqreturn_t nvme_irq(int irq, void *data)
1047 1048
{
	struct nvme_queue *nvmeq = data;
1049
	irqreturn_t ret = IRQ_NONE;
1050 1051
	u16 start, end;

1052
	spin_lock(&nvmeq->cq_lock);
1053 1054
	if (nvmeq->cq_head != nvmeq->last_cq_head)
		ret = IRQ_HANDLED;
1055
	nvme_process_cq(nvmeq, &start, &end, -1);
1056
	nvmeq->last_cq_head = nvmeq->cq_head;
1057
	spin_unlock(&nvmeq->cq_lock);
1058

1059 1060 1061 1062 1063 1064
	if (start != end) {
		nvme_complete_cqes(nvmeq, start, end);
		return IRQ_HANDLED;
	}

	return ret;
1065 1066 1067 1068 1069
}

static irqreturn_t nvme_irq_check(int irq, void *data)
{
	struct nvme_queue *nvmeq = data;
1070
	if (nvme_cqe_pending(nvmeq))
1071 1072
		return IRQ_WAKE_THREAD;
	return IRQ_NONE;
1073 1074
}

K
Keith Busch 已提交
1075
static int __nvme_poll(struct nvme_queue *nvmeq, unsigned int tag)
J
Jens Axboe 已提交
1076
{
1077
	u16 start, end;
1078
	int found;
J
Jens Axboe 已提交
1079

1080
	if (!nvme_cqe_pending(nvmeq))
1081
		return 0;
J
Jens Axboe 已提交
1082

1083
	spin_lock_irq(&nvmeq->cq_lock);
1084
	found = nvme_process_cq(nvmeq, &start, &end, tag);
1085
	spin_unlock_irq(&nvmeq->cq_lock);
1086

1087
	nvme_complete_cqes(nvmeq, start, end);
1088
	return found;
J
Jens Axboe 已提交
1089 1090
}

K
Keith Busch 已提交
1091 1092 1093 1094 1095 1096 1097
static int nvme_poll(struct blk_mq_hw_ctx *hctx, unsigned int tag)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	return __nvme_poll(nvmeq, tag);
}

1098 1099 1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114
static int nvme_poll_noirq(struct blk_mq_hw_ctx *hctx, unsigned int tag)
{
	struct nvme_queue *nvmeq = hctx->driver_data;
	u16 start, end;
	bool found;

	if (!nvme_cqe_pending(nvmeq))
		return 0;

	spin_lock(&nvmeq->cq_lock);
	found = nvme_process_cq(nvmeq, &start, &end, tag);
	spin_unlock(&nvmeq->cq_lock);

	nvme_complete_cqes(nvmeq, start, end);
	return found;
}

1115
static void nvme_pci_submit_async_event(struct nvme_ctrl *ctrl)
M
Matthew Wilcox 已提交
1116
{
1117
	struct nvme_dev *dev = to_nvme_dev(ctrl);
1118
	struct nvme_queue *nvmeq = &dev->queues[0];
M
Matias Bjørling 已提交
1119
	struct nvme_command c;
M
Matthew Wilcox 已提交
1120

M
Matias Bjørling 已提交
1121 1122
	memset(&c, 0, sizeof(c));
	c.common.opcode = nvme_admin_async_event;
1123
	c.common.command_id = NVME_AQ_BLK_MQ_DEPTH;
1124
	nvme_submit_cmd(nvmeq, &c, true);
1125 1126
}

M
Matthew Wilcox 已提交
1127
static int adapter_delete_queue(struct nvme_dev *dev, u8 opcode, u16 id)
1128
{
M
Matthew Wilcox 已提交
1129 1130 1131 1132 1133 1134
	struct nvme_command c;

	memset(&c, 0, sizeof(c));
	c.delete_queue.opcode = opcode;
	c.delete_queue.qid = cpu_to_le16(id);

1135
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
1136 1137 1138
}

static int adapter_alloc_cq(struct nvme_dev *dev, u16 qid,
1139
		struct nvme_queue *nvmeq, s16 vector)
M
Matthew Wilcox 已提交
1140 1141
{
	struct nvme_command c;
J
Jens Axboe 已提交
1142 1143 1144 1145
	int flags = NVME_QUEUE_PHYS_CONTIG;

	if (vector != -1)
		flags |= NVME_CQ_IRQ_ENABLED;
M
Matthew Wilcox 已提交
1146

1147
	/*
M
Minwoo Im 已提交
1148
	 * Note: we (ab)use the fact that the prp fields survive if no data
1149 1150
	 * is attached to the request.
	 */
M
Matthew Wilcox 已提交
1151 1152 1153 1154 1155 1156
	memset(&c, 0, sizeof(c));
	c.create_cq.opcode = nvme_admin_create_cq;
	c.create_cq.prp1 = cpu_to_le64(nvmeq->cq_dma_addr);
	c.create_cq.cqid = cpu_to_le16(qid);
	c.create_cq.qsize = cpu_to_le16(nvmeq->q_depth - 1);
	c.create_cq.cq_flags = cpu_to_le16(flags);
J
Jens Axboe 已提交
1157 1158 1159 1160
	if (vector != -1)
		c.create_cq.irq_vector = cpu_to_le16(vector);
	else
		c.create_cq.irq_vector = 0;
M
Matthew Wilcox 已提交
1161

1162
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
1163 1164 1165 1166 1167
}

static int adapter_alloc_sq(struct nvme_dev *dev, u16 qid,
						struct nvme_queue *nvmeq)
{
1168
	struct nvme_ctrl *ctrl = &dev->ctrl;
M
Matthew Wilcox 已提交
1169
	struct nvme_command c;
1170
	int flags = NVME_QUEUE_PHYS_CONTIG;
M
Matthew Wilcox 已提交
1171

1172 1173 1174 1175 1176 1177 1178 1179
	/*
	 * Some drives have a bug that auto-enables WRRU if MEDIUM isn't
	 * set. Since URGENT priority is zeroes, it makes all queues
	 * URGENT.
	 */
	if (ctrl->quirks & NVME_QUIRK_MEDIUM_PRIO_SQ)
		flags |= NVME_SQ_PRIO_MEDIUM;

1180
	/*
M
Minwoo Im 已提交
1181
	 * Note: we (ab)use the fact that the prp fields survive if no data
1182 1183
	 * is attached to the request.
	 */
M
Matthew Wilcox 已提交
1184 1185 1186 1187 1188 1189 1190 1191
	memset(&c, 0, sizeof(c));
	c.create_sq.opcode = nvme_admin_create_sq;
	c.create_sq.prp1 = cpu_to_le64(nvmeq->sq_dma_addr);
	c.create_sq.sqid = cpu_to_le16(qid);
	c.create_sq.qsize = cpu_to_le16(nvmeq->q_depth - 1);
	c.create_sq.sq_flags = cpu_to_le16(flags);
	c.create_sq.cqid = cpu_to_le16(qid);

1192
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204
}

static int adapter_delete_cq(struct nvme_dev *dev, u16 cqid)
{
	return adapter_delete_queue(dev, nvme_admin_delete_cq, cqid);
}

static int adapter_delete_sq(struct nvme_dev *dev, u16 sqid)
{
	return adapter_delete_queue(dev, nvme_admin_delete_sq, sqid);
}

1205
static void abort_endio(struct request *req, blk_status_t error)
1206
{
C
Christoph Hellwig 已提交
1207 1208
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_queue *nvmeq = iod->nvmeq;
1209

1210 1211
	dev_warn(nvmeq->dev->ctrl.device,
		 "Abort status: 0x%x", nvme_req(req)->status);
1212 1213
	atomic_inc(&nvmeq->dev->ctrl.abort_limit);
	blk_mq_free_request(req);
1214 1215
}

K
Keith Busch 已提交
1216 1217 1218 1219 1220 1221 1222 1223
static bool nvme_should_reset(struct nvme_dev *dev, u32 csts)
{

	/* If true, indicates loss of adapter communication, possibly by a
	 * NVMe Subsystem reset.
	 */
	bool nssro = dev->subsystem && (csts & NVME_CSTS_NSSRO);

1224 1225 1226
	/* If there is a reset/reinit ongoing, we shouldn't reset again. */
	switch (dev->ctrl.state) {
	case NVME_CTRL_RESETTING:
1227
	case NVME_CTRL_CONNECTING:
K
Keith Busch 已提交
1228
		return false;
1229 1230 1231
	default:
		break;
	}
K
Keith Busch 已提交
1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259

	/* We shouldn't reset unless the controller is on fatal error state
	 * _or_ if we lost the communication with it.
	 */
	if (!(csts & NVME_CSTS_CFS) && !nssro)
		return false;

	return true;
}

static void nvme_warn_reset(struct nvme_dev *dev, u32 csts)
{
	/* Read a config register to help see what died. */
	u16 pci_status;
	int result;

	result = pci_read_config_word(to_pci_dev(dev->dev), PCI_STATUS,
				      &pci_status);
	if (result == PCIBIOS_SUCCESSFUL)
		dev_warn(dev->ctrl.device,
			 "controller is down; will reset: CSTS=0x%x, PCI_STATUS=0x%hx\n",
			 csts, pci_status);
	else
		dev_warn(dev->ctrl.device,
			 "controller is down; will reset: CSTS=0x%x, PCI_STATUS read failed (%d)\n",
			 csts, result);
}

1260
static enum blk_eh_timer_return nvme_timeout(struct request *req, bool reserved)
K
Keith Busch 已提交
1261
{
C
Christoph Hellwig 已提交
1262 1263
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_queue *nvmeq = iod->nvmeq;
K
Keith Busch 已提交
1264
	struct nvme_dev *dev = nvmeq->dev;
M
Matias Bjørling 已提交
1265 1266
	struct request *abort_req;
	struct nvme_command cmd;
1267
	bool shutdown = false;
K
Keith Busch 已提交
1268 1269
	u32 csts = readl(dev->bar + NVME_REG_CSTS);

W
Wen Xiong 已提交
1270 1271 1272 1273 1274 1275 1276
	/* If PCI error recovery process is happening, we cannot reset or
	 * the recovery mechanism will surely fail.
	 */
	mb();
	if (pci_channel_offline(to_pci_dev(dev->dev)))
		return BLK_EH_RESET_TIMER;

K
Keith Busch 已提交
1277 1278 1279 1280 1281 1282
	/*
	 * Reset immediately if the controller is failed
	 */
	if (nvme_should_reset(dev, csts)) {
		nvme_warn_reset(dev, csts);
		nvme_dev_disable(dev, false);
1283
		nvme_reset_ctrl(&dev->ctrl);
1284
		return BLK_EH_DONE;
K
Keith Busch 已提交
1285
	}
K
Keith Busch 已提交
1286

K
Keith Busch 已提交
1287 1288 1289 1290 1291 1292 1293
	/*
	 * Did we miss an interrupt?
	 */
	if (__nvme_poll(nvmeq, req->tag)) {
		dev_warn(dev->ctrl.device,
			 "I/O %d QID %d timeout, completion polled\n",
			 req->tag, nvmeq->qid);
1294
		return BLK_EH_DONE;
K
Keith Busch 已提交
1295 1296
	}

1297
	/*
1298 1299 1300
	 * Shutdown immediately if controller times out while starting. The
	 * reset work will see the pci device disabled when it gets the forced
	 * cancellation error. All outstanding requests are completed on
1301
	 * shutdown, so we return BLK_EH_DONE.
1302
	 */
1303
	switch (dev->ctrl.state) {
1304 1305
	case NVME_CTRL_DELETING:
		shutdown = true;
1306 1307
	case NVME_CTRL_CONNECTING:
	case NVME_CTRL_RESETTING:
1308
		dev_warn_ratelimited(dev->ctrl.device,
1309 1310
			 "I/O %d QID %d timeout, disable controller\n",
			 req->tag, nvmeq->qid);
1311
		nvme_dev_disable(dev, shutdown);
1312
		nvme_req(req)->flags |= NVME_REQ_CANCELLED;
1313
		return BLK_EH_DONE;
1314 1315
	default:
		break;
K
Keith Busch 已提交
1316 1317
	}

1318 1319 1320 1321
	/*
 	 * Shutdown the controller immediately and schedule a reset if the
 	 * command was already aborted once before and still hasn't been
 	 * returned to the driver, or if this is the admin queue.
1322
	 */
C
Christoph Hellwig 已提交
1323
	if (!nvmeq->qid || iod->aborted) {
1324
		dev_warn(dev->ctrl.device,
1325 1326
			 "I/O %d QID %d timeout, reset controller\n",
			 req->tag, nvmeq->qid);
1327
		nvme_dev_disable(dev, false);
1328
		nvme_reset_ctrl(&dev->ctrl);
K
Keith Busch 已提交
1329

1330
		nvme_req(req)->flags |= NVME_REQ_CANCELLED;
1331
		return BLK_EH_DONE;
K
Keith Busch 已提交
1332 1333
	}

1334
	if (atomic_dec_return(&dev->ctrl.abort_limit) < 0) {
1335
		atomic_inc(&dev->ctrl.abort_limit);
1336
		return BLK_EH_RESET_TIMER;
1337
	}
1338
	iod->aborted = 1;
M
Matias Bjørling 已提交
1339

K
Keith Busch 已提交
1340 1341
	memset(&cmd, 0, sizeof(cmd));
	cmd.abort.opcode = nvme_admin_abort_cmd;
M
Matias Bjørling 已提交
1342
	cmd.abort.cid = req->tag;
K
Keith Busch 已提交
1343 1344
	cmd.abort.sqid = cpu_to_le16(nvmeq->qid);

1345 1346 1347
	dev_warn(nvmeq->dev->ctrl.device,
		"I/O %d QID %d timeout, aborting\n",
		 req->tag, nvmeq->qid);
1348 1349

	abort_req = nvme_alloc_request(dev->ctrl.admin_q, &cmd,
1350
			BLK_MQ_REQ_NOWAIT, NVME_QID_ANY);
1351 1352 1353 1354 1355 1356 1357 1358
	if (IS_ERR(abort_req)) {
		atomic_inc(&dev->ctrl.abort_limit);
		return BLK_EH_RESET_TIMER;
	}

	abort_req->timeout = ADMIN_TIMEOUT;
	abort_req->end_io_data = NULL;
	blk_execute_rq_nowait(abort_req->q, NULL, abort_req, 0, abort_endio);
K
Keith Busch 已提交
1359

1360 1361 1362 1363 1364 1365
	/*
	 * The aborted req will be completed on receiving the abort req.
	 * We enable the timer again. If hit twice, it'll cause a device reset,
	 * as the device then is in a faulty state.
	 */
	return BLK_EH_RESET_TIMER;
K
Keith Busch 已提交
1366 1367
}

M
Matias Bjørling 已提交
1368 1369
static void nvme_free_queue(struct nvme_queue *nvmeq)
{
1370 1371
	dma_free_coherent(nvmeq->q_dmadev, CQ_SIZE(nvmeq->q_depth),
				(void *)nvmeq->cqes, nvmeq->cq_dma_addr);
1372 1373
	if (nvmeq->sq_cmds)
		dma_free_coherent(nvmeq->q_dmadev, SQ_SIZE(nvmeq->q_depth),
1374 1375 1376
					nvmeq->sq_cmds, nvmeq->sq_dma_addr);
}

1377
static void nvme_free_queues(struct nvme_dev *dev, int lowest)
1378 1379 1380
{
	int i;

1381 1382
	for (i = dev->ctrl.queue_count - 1; i >= lowest; i--) {
		dev->ctrl.queue_count--;
1383
		nvme_free_queue(&dev->queues[i]);
1384
	}
1385 1386
}

K
Keith Busch 已提交
1387 1388 1389 1390 1391
/**
 * nvme_suspend_queue - put queue into suspended state
 * @nvmeq - queue to suspend
 */
static int nvme_suspend_queue(struct nvme_queue *nvmeq)
M
Matthew Wilcox 已提交
1392
{
K
Keith Busch 已提交
1393
	int vector;
M
Matthew Wilcox 已提交
1394

1395
	spin_lock_irq(&nvmeq->cq_lock);
J
Jens Axboe 已提交
1396
	if (nvmeq->cq_vector == -1 && !nvmeq->polled) {
1397
		spin_unlock_irq(&nvmeq->cq_lock);
K
Keith Busch 已提交
1398 1399
		return 1;
	}
1400
	vector = nvmeq->cq_vector;
K
Keith Busch 已提交
1401
	nvmeq->dev->online_queues--;
K
Keith Busch 已提交
1402
	nvmeq->cq_vector = -1;
J
Jens Axboe 已提交
1403
	nvmeq->polled = false;
1404
	spin_unlock_irq(&nvmeq->cq_lock);
1405

1406 1407 1408 1409 1410
	/*
	 * Ensure that nvme_queue_rq() sees it ->cq_vector == -1 without
	 * having to grab the lock.
	 */
	mb();
1411

1412
	if (!nvmeq->qid && nvmeq->dev->ctrl.admin_q)
1413
		blk_mq_quiesce_queue(nvmeq->dev->ctrl.admin_q);
1414

J
Jens Axboe 已提交
1415 1416
	if (vector != -1)
		pci_free_irq(to_pci_dev(nvmeq->dev->dev), vector, nvmeq);
M
Matthew Wilcox 已提交
1417

K
Keith Busch 已提交
1418 1419
	return 0;
}
M
Matthew Wilcox 已提交
1420

1421
static void nvme_disable_admin_queue(struct nvme_dev *dev, bool shutdown)
K
Keith Busch 已提交
1422
{
1423
	struct nvme_queue *nvmeq = &dev->queues[0];
1424
	u16 start, end;
K
Keith Busch 已提交
1425

1426 1427 1428
	if (shutdown)
		nvme_shutdown_ctrl(&dev->ctrl);
	else
1429
		nvme_disable_ctrl(&dev->ctrl, dev->ctrl.cap);
1430

1431
	spin_lock_irq(&nvmeq->cq_lock);
1432
	nvme_process_cq(nvmeq, &start, &end, -1);
1433
	spin_unlock_irq(&nvmeq->cq_lock);
1434 1435

	nvme_complete_cqes(nvmeq, start, end);
M
Matthew Wilcox 已提交
1436 1437
}

1438 1439 1440 1441
static int nvme_cmb_qdepth(struct nvme_dev *dev, int nr_io_queues,
				int entry_size)
{
	int q_depth = dev->q_depth;
1442 1443
	unsigned q_size_aligned = roundup(q_depth * entry_size,
					  dev->ctrl.page_size);
1444 1445

	if (q_size_aligned * nr_io_queues > dev->cmb_size) {
1446
		u64 mem_per_q = div_u64(dev->cmb_size, nr_io_queues);
1447
		mem_per_q = round_down(mem_per_q, dev->ctrl.page_size);
1448
		q_depth = div_u64(mem_per_q, entry_size);
1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464

		/*
		 * Ensure the reduced q_depth is above some threshold where it
		 * would be better to map queues in system memory with the
		 * original depth
		 */
		if (q_depth < 64)
			return -ENOMEM;
	}

	return q_depth;
}

static int nvme_alloc_sq_cmds(struct nvme_dev *dev, struct nvme_queue *nvmeq,
				int qid, int depth)
{
1465 1466 1467
	/* CMB SQEs will be mapped before creation */
	if (qid && dev->cmb && use_cmb_sqes && (dev->cmbsz & NVME_CMBSZ_SQS))
		return 0;
1468

1469 1470 1471 1472
	nvmeq->sq_cmds = dma_alloc_coherent(dev->dev, SQ_SIZE(depth),
					    &nvmeq->sq_dma_addr, GFP_KERNEL);
	if (!nvmeq->sq_cmds)
		return -ENOMEM;
1473 1474 1475
	return 0;
}

1476
static int nvme_alloc_queue(struct nvme_dev *dev, int qid, int depth)
M
Matthew Wilcox 已提交
1477
{
1478
	struct nvme_queue *nvmeq = &dev->queues[qid];
M
Matthew Wilcox 已提交
1479

1480 1481
	if (dev->ctrl.queue_count > qid)
		return 0;
M
Matthew Wilcox 已提交
1482

1483
	nvmeq->cqes = dma_zalloc_coherent(dev->dev, CQ_SIZE(depth),
J
Joe Perches 已提交
1484
					  &nvmeq->cq_dma_addr, GFP_KERNEL);
M
Matthew Wilcox 已提交
1485 1486 1487
	if (!nvmeq->cqes)
		goto free_nvmeq;

1488
	if (nvme_alloc_sq_cmds(dev, nvmeq, qid, depth))
M
Matthew Wilcox 已提交
1489 1490
		goto free_cqdma;

1491
	nvmeq->q_dmadev = dev->dev;
M
Matthew Wilcox 已提交
1492
	nvmeq->dev = dev;
1493 1494
	spin_lock_init(&nvmeq->sq_lock);
	spin_lock_init(&nvmeq->cq_lock);
M
Matthew Wilcox 已提交
1495
	nvmeq->cq_head = 0;
M
Matthew Wilcox 已提交
1496
	nvmeq->cq_phase = 1;
1497
	nvmeq->q_db = &dev->dbs[qid * 2 * dev->db_stride];
M
Matthew Wilcox 已提交
1498
	nvmeq->q_depth = depth;
K
Keith Busch 已提交
1499
	nvmeq->qid = qid;
1500
	nvmeq->cq_vector = -1;
1501
	dev->ctrl.queue_count++;
1502

1503
	return 0;
M
Matthew Wilcox 已提交
1504 1505

 free_cqdma:
1506
	dma_free_coherent(dev->dev, CQ_SIZE(depth), (void *)nvmeq->cqes,
M
Matthew Wilcox 已提交
1507 1508
							nvmeq->cq_dma_addr);
 free_nvmeq:
1509
	return -ENOMEM;
M
Matthew Wilcox 已提交
1510 1511
}

1512
static int queue_request_irq(struct nvme_queue *nvmeq)
1513
{
1514 1515 1516 1517 1518 1519 1520 1521 1522 1523
	struct pci_dev *pdev = to_pci_dev(nvmeq->dev->dev);
	int nr = nvmeq->dev->ctrl.instance;

	if (use_threaded_interrupts) {
		return pci_request_irq(pdev, nvmeq->cq_vector, nvme_irq_check,
				nvme_irq, nvmeq, "nvme%dq%d", nr, nvmeq->qid);
	} else {
		return pci_request_irq(pdev, nvmeq->cq_vector, nvme_irq,
				NULL, nvmeq, "nvme%dq%d", nr, nvmeq->qid);
	}
1524 1525
}

1526
static void nvme_init_queue(struct nvme_queue *nvmeq, u16 qid)
M
Matthew Wilcox 已提交
1527
{
1528
	struct nvme_dev *dev = nvmeq->dev;
M
Matthew Wilcox 已提交
1529

1530
	spin_lock_irq(&nvmeq->cq_lock);
1531
	nvmeq->sq_tail = 0;
1532
	nvmeq->last_sq_tail = 0;
1533 1534
	nvmeq->cq_head = 0;
	nvmeq->cq_phase = 1;
1535
	nvmeq->q_db = &dev->dbs[qid * 2 * dev->db_stride];
1536
	memset((void *)nvmeq->cqes, 0, CQ_SIZE(nvmeq->q_depth));
1537
	nvme_dbbuf_init(dev, nvmeq, qid);
K
Keith Busch 已提交
1538
	dev->online_queues++;
1539
	spin_unlock_irq(&nvmeq->cq_lock);
1540 1541
}

J
Jens Axboe 已提交
1542
static int nvme_create_queue(struct nvme_queue *nvmeq, int qid, bool polled)
1543 1544 1545
{
	struct nvme_dev *dev = nvmeq->dev;
	int result;
1546
	s16 vector;
1547

1548 1549 1550 1551 1552 1553 1554
	if (dev->cmb && use_cmb_sqes && (dev->cmbsz & NVME_CMBSZ_SQS)) {
		unsigned offset = (qid - 1) * roundup(SQ_SIZE(nvmeq->q_depth),
						      dev->ctrl.page_size);
		nvmeq->sq_dma_addr = dev->cmb_bus_addr + offset;
		nvmeq->sq_cmds_io = dev->cmb + offset;
	}

1555 1556 1557 1558
	/*
	 * A queue's vector matches the queue identifier unless the controller
	 * has only one vector available.
	 */
J
Jens Axboe 已提交
1559 1560 1561 1562 1563
	if (!polled)
		vector = dev->num_vecs == 1 ? 0 : qid;
	else
		vector = -1;

1564
	result = adapter_alloc_cq(dev, qid, nvmeq, vector);
K
Keith Busch 已提交
1565 1566
	if (result)
		return result;
M
Matthew Wilcox 已提交
1567 1568 1569

	result = adapter_alloc_sq(dev, qid, nvmeq);
	if (result < 0)
K
Keith Busch 已提交
1570 1571
		return result;
	else if (result)
M
Matthew Wilcox 已提交
1572 1573
		goto release_cq;

1574 1575 1576 1577 1578 1579
	/*
	 * Set cq_vector after alloc cq/sq, otherwise nvme_suspend_queue will
	 * invoke free_irq for it and cause a 'Trying to free already-free IRQ
	 * xxx' warning if the create CQ/SQ command times out.
	 */
	nvmeq->cq_vector = vector;
J
Jens Axboe 已提交
1580
	nvmeq->polled = polled;
1581
	nvme_init_queue(nvmeq, qid);
J
Jens Axboe 已提交
1582 1583 1584 1585 1586 1587

	if (vector != -1) {
		result = queue_request_irq(nvmeq);
		if (result < 0)
			goto release_sq;
	}
M
Matthew Wilcox 已提交
1588

1589
	return result;
M
Matthew Wilcox 已提交
1590

1591 1592
release_sq:
	nvmeq->cq_vector = -1;
J
Jens Axboe 已提交
1593
	nvmeq->polled = false;
1594
	dev->online_queues--;
M
Matthew Wilcox 已提交
1595
	adapter_delete_sq(dev, qid);
1596
release_cq:
M
Matthew Wilcox 已提交
1597
	adapter_delete_cq(dev, qid);
1598
	return result;
M
Matthew Wilcox 已提交
1599 1600
}

1601
static const struct blk_mq_ops nvme_mq_admin_ops = {
1602
	.queue_rq	= nvme_queue_rq,
1603
	.complete	= nvme_pci_complete_rq,
M
Matias Bjørling 已提交
1604
	.init_hctx	= nvme_admin_init_hctx,
1605
	.exit_hctx      = nvme_admin_exit_hctx,
1606
	.init_request	= nvme_init_request,
M
Matias Bjørling 已提交
1607 1608 1609
	.timeout	= nvme_timeout,
};

1610 1611 1612 1613 1614 1615 1616 1617 1618
#define NVME_SHARED_MQ_OPS					\
	.queue_rq		= nvme_queue_rq,		\
	.commit_rqs		= nvme_commit_rqs,		\
	.complete		= nvme_pci_complete_rq,		\
	.init_hctx		= nvme_init_hctx,		\
	.init_request		= nvme_init_request,		\
	.map_queues		= nvme_pci_map_queues,		\
	.timeout		= nvme_timeout			\

1619
static const struct blk_mq_ops nvme_mq_ops = {
1620 1621 1622 1623 1624 1625 1626
	NVME_SHARED_MQ_OPS,
	.poll			= nvme_poll,
};

static const struct blk_mq_ops nvme_mq_poll_noirq_ops = {
	NVME_SHARED_MQ_OPS,
	.poll			= nvme_poll_noirq,
M
Matias Bjørling 已提交
1627 1628
};

1629 1630
static void nvme_dev_remove_admin(struct nvme_dev *dev)
{
1631
	if (dev->ctrl.admin_q && !blk_queue_dying(dev->ctrl.admin_q)) {
1632 1633 1634 1635 1636
		/*
		 * If the controller was reset during removal, it's possible
		 * user requests may be waiting on a stopped queue. Start the
		 * queue to flush these to completion.
		 */
1637
		blk_mq_unquiesce_queue(dev->ctrl.admin_q);
1638
		blk_cleanup_queue(dev->ctrl.admin_q);
1639 1640 1641 1642
		blk_mq_free_tag_set(&dev->admin_tagset);
	}
}

M
Matias Bjørling 已提交
1643 1644
static int nvme_alloc_admin_tags(struct nvme_dev *dev)
{
1645
	if (!dev->ctrl.admin_q) {
M
Matias Bjørling 已提交
1646 1647
		dev->admin_tagset.ops = &nvme_mq_admin_ops;
		dev->admin_tagset.nr_hw_queues = 1;
K
Keith Busch 已提交
1648

K
Keith Busch 已提交
1649
		dev->admin_tagset.queue_depth = NVME_AQ_MQ_TAG_DEPTH;
M
Matias Bjørling 已提交
1650
		dev->admin_tagset.timeout = ADMIN_TIMEOUT;
1651
		dev->admin_tagset.numa_node = dev_to_node(dev->dev);
C
Chaitanya Kulkarni 已提交
1652
		dev->admin_tagset.cmd_size = nvme_pci_cmd_size(dev, false);
1653
		dev->admin_tagset.flags = BLK_MQ_F_NO_SCHED;
M
Matias Bjørling 已提交
1654 1655 1656 1657
		dev->admin_tagset.driver_data = dev;

		if (blk_mq_alloc_tag_set(&dev->admin_tagset))
			return -ENOMEM;
1658
		dev->ctrl.admin_tagset = &dev->admin_tagset;
M
Matias Bjørling 已提交
1659

1660 1661
		dev->ctrl.admin_q = blk_mq_init_queue(&dev->admin_tagset);
		if (IS_ERR(dev->ctrl.admin_q)) {
M
Matias Bjørling 已提交
1662 1663 1664
			blk_mq_free_tag_set(&dev->admin_tagset);
			return -ENOMEM;
		}
1665
		if (!blk_get_queue(dev->ctrl.admin_q)) {
1666
			nvme_dev_remove_admin(dev);
1667
			dev->ctrl.admin_q = NULL;
1668 1669
			return -ENODEV;
		}
K
Keith Busch 已提交
1670
	} else
1671
		blk_mq_unquiesce_queue(dev->ctrl.admin_q);
M
Matias Bjørling 已提交
1672 1673 1674 1675

	return 0;
}

1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690 1691 1692 1693 1694 1695 1696 1697 1698 1699 1700 1701
static unsigned long db_bar_size(struct nvme_dev *dev, unsigned nr_io_queues)
{
	return NVME_REG_DBS + ((nr_io_queues + 1) * 8 * dev->db_stride);
}

static int nvme_remap_bar(struct nvme_dev *dev, unsigned long size)
{
	struct pci_dev *pdev = to_pci_dev(dev->dev);

	if (size <= dev->bar_mapped_size)
		return 0;
	if (size > pci_resource_len(pdev, 0))
		return -ENOMEM;
	if (dev->bar)
		iounmap(dev->bar);
	dev->bar = ioremap(pci_resource_start(pdev, 0), size);
	if (!dev->bar) {
		dev->bar_mapped_size = 0;
		return -ENOMEM;
	}
	dev->bar_mapped_size = size;
	dev->dbs = dev->bar + NVME_REG_DBS;

	return 0;
}

1702
static int nvme_pci_configure_admin_queue(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
1703
{
1704
	int result;
M
Matthew Wilcox 已提交
1705 1706 1707
	u32 aqa;
	struct nvme_queue *nvmeq;

1708 1709 1710 1711
	result = nvme_remap_bar(dev, db_bar_size(dev, 0));
	if (result < 0)
		return result;

1712
	dev->subsystem = readl(dev->bar + NVME_REG_VS) >= NVME_VS(1, 1, 0) ?
1713
				NVME_CAP_NSSRC(dev->ctrl.cap) : 0;
1714

1715 1716 1717
	if (dev->subsystem &&
	    (readl(dev->bar + NVME_REG_CSTS) & NVME_CSTS_NSSRO))
		writel(NVME_CSTS_NSSRO, dev->bar + NVME_REG_CSTS);
1718

1719
	result = nvme_disable_ctrl(&dev->ctrl, dev->ctrl.cap);
1720 1721
	if (result < 0)
		return result;
M
Matthew Wilcox 已提交
1722

1723
	result = nvme_alloc_queue(dev, 0, NVME_AQ_DEPTH);
1724 1725
	if (result)
		return result;
M
Matthew Wilcox 已提交
1726

1727
	nvmeq = &dev->queues[0];
M
Matthew Wilcox 已提交
1728 1729 1730
	aqa = nvmeq->q_depth - 1;
	aqa |= aqa << 16;

1731 1732 1733
	writel(aqa, dev->bar + NVME_REG_AQA);
	lo_hi_writeq(nvmeq->sq_dma_addr, dev->bar + NVME_REG_ASQ);
	lo_hi_writeq(nvmeq->cq_dma_addr, dev->bar + NVME_REG_ACQ);
M
Matthew Wilcox 已提交
1734

1735
	result = nvme_enable_ctrl(&dev->ctrl, dev->ctrl.cap);
1736
	if (result)
K
Keith Busch 已提交
1737
		return result;
M
Matias Bjørling 已提交
1738

K
Keith Busch 已提交
1739
	nvmeq->cq_vector = 0;
1740
	nvme_init_queue(nvmeq, 0);
1741
	result = queue_request_irq(nvmeq);
1742 1743
	if (result) {
		nvmeq->cq_vector = -1;
K
Keith Busch 已提交
1744
		return result;
1745
	}
1746

M
Matthew Wilcox 已提交
1747 1748 1749
	return result;
}

1750
static int nvme_create_io_queues(struct nvme_dev *dev)
K
Keith Busch 已提交
1751
{
J
Jens Axboe 已提交
1752
	unsigned i, max, rw_queues;
1753
	int ret = 0;
K
Keith Busch 已提交
1754

1755
	for (i = dev->ctrl.queue_count; i <= dev->max_qid; i++) {
1756
		if (nvme_alloc_queue(dev, i, dev->q_depth)) {
1757
			ret = -ENOMEM;
K
Keith Busch 已提交
1758
			break;
1759 1760
		}
	}
K
Keith Busch 已提交
1761

1762
	max = min(dev->max_qid, dev->ctrl.queue_count - 1);
1763 1764 1765
	if (max != 1 && dev->io_queues[HCTX_TYPE_POLL]) {
		rw_queues = dev->io_queues[HCTX_TYPE_DEFAULT] +
				dev->io_queues[HCTX_TYPE_READ];
J
Jens Axboe 已提交
1766 1767 1768 1769
	} else {
		rw_queues = max;
	}

1770
	for (i = dev->online_queues; i <= max; i++) {
J
Jens Axboe 已提交
1771 1772 1773
		bool polled = i > rw_queues;

		ret = nvme_create_queue(&dev->queues[i], i, polled);
K
Keith Busch 已提交
1774
		if (ret)
K
Keith Busch 已提交
1775
			break;
M
Matthew Wilcox 已提交
1776
	}
1777 1778 1779

	/*
	 * Ignore failing Create SQ/CQ commands, we can continue with less
1780 1781
	 * than the desired amount of queues, and even a controller without
	 * I/O queues can still be used to issue admin commands.  This might
1782 1783 1784
	 * be useful to upgrade a buggy firmware for example.
	 */
	return ret >= 0 ? 0 : ret;
M
Matthew Wilcox 已提交
1785 1786
}

1787 1788 1789 1790 1791 1792
static ssize_t nvme_cmb_show(struct device *dev,
			     struct device_attribute *attr,
			     char *buf)
{
	struct nvme_dev *ndev = to_nvme_dev(dev_get_drvdata(dev));

1793
	return scnprintf(buf, PAGE_SIZE, "cmbloc : x%08x\ncmbsz  : x%08x\n",
1794 1795 1796 1797
		       ndev->cmbloc, ndev->cmbsz);
}
static DEVICE_ATTR(cmb, S_IRUGO, nvme_cmb_show, NULL);

1798
static u64 nvme_cmb_size_unit(struct nvme_dev *dev)
1799
{
1800 1801 1802 1803 1804 1805 1806 1807 1808 1809
	u8 szu = (dev->cmbsz >> NVME_CMBSZ_SZU_SHIFT) & NVME_CMBSZ_SZU_MASK;

	return 1ULL << (12 + 4 * szu);
}

static u32 nvme_cmb_size(struct nvme_dev *dev)
{
	return (dev->cmbsz >> NVME_CMBSZ_SZ_SHIFT) & NVME_CMBSZ_SZ_MASK;
}

1810
static void nvme_map_cmb(struct nvme_dev *dev)
1811
{
1812
	u64 size, offset;
1813 1814
	resource_size_t bar_size;
	struct pci_dev *pdev = to_pci_dev(dev->dev);
1815
	int bar;
1816

1817 1818 1819
	if (dev->cmb_size)
		return;

1820
	dev->cmbsz = readl(dev->bar + NVME_REG_CMBSZ);
1821 1822
	if (!dev->cmbsz)
		return;
1823
	dev->cmbloc = readl(dev->bar + NVME_REG_CMBLOC);
1824

1825
	if (!use_cmb_sqes)
1826
		return;
1827

1828 1829
	size = nvme_cmb_size_unit(dev) * nvme_cmb_size(dev);
	offset = nvme_cmb_size_unit(dev) * NVME_CMB_OFST(dev->cmbloc);
1830 1831
	bar = NVME_CMB_BIR(dev->cmbloc);
	bar_size = pci_resource_len(pdev, bar);
1832 1833

	if (offset > bar_size)
1834
		return;
1835 1836 1837 1838 1839 1840 1841 1842 1843

	/*
	 * Controllers may support a CMB size larger than their BAR,
	 * for example, due to being behind a bridge. Reduce the CMB to
	 * the reported size of the BAR
	 */
	if (size > bar_size - offset)
		size = bar_size - offset;

1844 1845 1846
	dev->cmb = ioremap_wc(pci_resource_start(pdev, bar) + offset, size);
	if (!dev->cmb)
		return;
1847
	dev->cmb_bus_addr = pci_bus_address(pdev, bar) + offset;
1848
	dev->cmb_size = size;
1849 1850 1851 1852 1853

	if (sysfs_add_file_to_group(&dev->ctrl.device->kobj,
				    &dev_attr_cmb.attr, NULL))
		dev_warn(dev->ctrl.device,
			 "failed to add sysfs attribute for CMB\n");
1854 1855 1856 1857 1858 1859 1860
}

static inline void nvme_release_cmb(struct nvme_dev *dev)
{
	if (dev->cmb) {
		iounmap(dev->cmb);
		dev->cmb = NULL;
1861 1862 1863
		sysfs_remove_file_from_group(&dev->ctrl.device->kobj,
					     &dev_attr_cmb.attr, NULL);
		dev->cmbsz = 0;
1864 1865 1866
	}
}

1867 1868
static int nvme_set_host_mem(struct nvme_dev *dev, u32 bits)
{
1869
	u64 dma_addr = dev->host_mem_descs_dma;
1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899
	struct nvme_command c;
	int ret;

	memset(&c, 0, sizeof(c));
	c.features.opcode	= nvme_admin_set_features;
	c.features.fid		= cpu_to_le32(NVME_FEAT_HOST_MEM_BUF);
	c.features.dword11	= cpu_to_le32(bits);
	c.features.dword12	= cpu_to_le32(dev->host_mem_size >>
					      ilog2(dev->ctrl.page_size));
	c.features.dword13	= cpu_to_le32(lower_32_bits(dma_addr));
	c.features.dword14	= cpu_to_le32(upper_32_bits(dma_addr));
	c.features.dword15	= cpu_to_le32(dev->nr_host_mem_descs);

	ret = nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
	if (ret) {
		dev_warn(dev->ctrl.device,
			 "failed to set host mem (err %d, flags %#x).\n",
			 ret, bits);
	}
	return ret;
}

static void nvme_free_host_mem(struct nvme_dev *dev)
{
	int i;

	for (i = 0; i < dev->nr_host_mem_descs; i++) {
		struct nvme_host_mem_buf_desc *desc = &dev->host_mem_descs[i];
		size_t size = le32_to_cpu(desc->size) * dev->ctrl.page_size;

1900 1901 1902
		dma_free_attrs(dev->dev, size, dev->host_mem_desc_bufs[i],
			       le64_to_cpu(desc->addr),
			       DMA_ATTR_NO_KERNEL_MAPPING | DMA_ATTR_NO_WARN);
1903 1904 1905 1906
	}

	kfree(dev->host_mem_desc_bufs);
	dev->host_mem_desc_bufs = NULL;
1907 1908 1909
	dma_free_coherent(dev->dev,
			dev->nr_host_mem_descs * sizeof(*dev->host_mem_descs),
			dev->host_mem_descs, dev->host_mem_descs_dma);
1910
	dev->host_mem_descs = NULL;
1911
	dev->nr_host_mem_descs = 0;
1912 1913
}

1914 1915
static int __nvme_alloc_host_mem(struct nvme_dev *dev, u64 preferred,
		u32 chunk_size)
K
Keith Busch 已提交
1916
{
1917
	struct nvme_host_mem_buf_desc *descs;
1918
	u32 max_entries, len;
1919
	dma_addr_t descs_dma;
1920
	int i = 0;
1921
	void **bufs;
1922
	u64 size, tmp;
1923 1924 1925 1926

	tmp = (preferred + chunk_size - 1);
	do_div(tmp, chunk_size);
	max_entries = tmp;
1927 1928 1929 1930

	if (dev->ctrl.hmmaxd && dev->ctrl.hmmaxd < max_entries)
		max_entries = dev->ctrl.hmmaxd;

1931 1932
	descs = dma_zalloc_coherent(dev->dev, max_entries * sizeof(*descs),
			&descs_dma, GFP_KERNEL);
1933 1934 1935 1936 1937 1938 1939
	if (!descs)
		goto out;

	bufs = kcalloc(max_entries, sizeof(*bufs), GFP_KERNEL);
	if (!bufs)
		goto out_free_descs;

1940
	for (size = 0; size < preferred && i < max_entries; size += len) {
1941 1942
		dma_addr_t dma_addr;

1943
		len = min_t(u64, chunk_size, preferred - size);
1944 1945 1946 1947 1948 1949 1950 1951 1952 1953
		bufs[i] = dma_alloc_attrs(dev->dev, len, &dma_addr, GFP_KERNEL,
				DMA_ATTR_NO_KERNEL_MAPPING | DMA_ATTR_NO_WARN);
		if (!bufs[i])
			break;

		descs[i].addr = cpu_to_le64(dma_addr);
		descs[i].size = cpu_to_le32(len / dev->ctrl.page_size);
		i++;
	}

1954
	if (!size)
1955 1956 1957 1958 1959
		goto out_free_bufs;

	dev->nr_host_mem_descs = i;
	dev->host_mem_size = size;
	dev->host_mem_descs = descs;
1960
	dev->host_mem_descs_dma = descs_dma;
1961 1962 1963 1964 1965 1966 1967
	dev->host_mem_desc_bufs = bufs;
	return 0;

out_free_bufs:
	while (--i >= 0) {
		size_t size = le32_to_cpu(descs[i].size) * dev->ctrl.page_size;

1968 1969 1970
		dma_free_attrs(dev->dev, size, bufs[i],
			       le64_to_cpu(descs[i].addr),
			       DMA_ATTR_NO_KERNEL_MAPPING | DMA_ATTR_NO_WARN);
1971 1972 1973 1974
	}

	kfree(bufs);
out_free_descs:
1975 1976
	dma_free_coherent(dev->dev, max_entries * sizeof(*descs), descs,
			descs_dma);
1977 1978 1979 1980 1981
out:
	dev->host_mem_descs = NULL;
	return -ENOMEM;
}

1982 1983 1984 1985 1986
static int nvme_alloc_host_mem(struct nvme_dev *dev, u64 min, u64 preferred)
{
	u32 chunk_size;

	/* start big and work our way down */
1987
	for (chunk_size = min_t(u64, preferred, PAGE_SIZE * MAX_ORDER_NR_PAGES);
1988
	     chunk_size >= max_t(u32, dev->ctrl.hmminds * 4096, PAGE_SIZE * 2);
1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999
	     chunk_size /= 2) {
		if (!__nvme_alloc_host_mem(dev, preferred, chunk_size)) {
			if (!min || dev->host_mem_size >= min)
				return 0;
			nvme_free_host_mem(dev);
		}
	}

	return -ENOMEM;
}

2000
static int nvme_setup_host_mem(struct nvme_dev *dev)
2001 2002 2003 2004 2005
{
	u64 max = (u64)max_host_mem_size_mb * SZ_1M;
	u64 preferred = (u64)dev->ctrl.hmpre * 4096;
	u64 min = (u64)dev->ctrl.hmmin * 4096;
	u32 enable_bits = NVME_HOST_MEM_ENABLE;
2006
	int ret;
2007 2008 2009 2010 2011 2012 2013

	preferred = min(preferred, max);
	if (min > max) {
		dev_warn(dev->ctrl.device,
			"min host memory (%lld MiB) above limit (%d MiB).\n",
			min >> ilog2(SZ_1M), max_host_mem_size_mb);
		nvme_free_host_mem(dev);
2014
		return 0;
2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027
	}

	/*
	 * If we already have a buffer allocated check if we can reuse it.
	 */
	if (dev->host_mem_descs) {
		if (dev->host_mem_size >= min)
			enable_bits |= NVME_HOST_MEM_RETURN;
		else
			nvme_free_host_mem(dev);
	}

	if (!dev->host_mem_descs) {
2028 2029 2030
		if (nvme_alloc_host_mem(dev, min, preferred)) {
			dev_warn(dev->ctrl.device,
				"failed to allocate host memory buffer.\n");
2031
			return 0; /* controller must work without HMB */
2032 2033 2034 2035 2036
		}

		dev_info(dev->ctrl.device,
			"allocated %lld MiB host memory buffer.\n",
			dev->host_mem_size >> ilog2(SZ_1M));
2037 2038
	}

2039 2040
	ret = nvme_set_host_mem(dev, enable_bits);
	if (ret)
2041
		nvme_free_host_mem(dev);
2042
	return ret;
K
Keith Busch 已提交
2043 2044
}

M
Ming Lei 已提交
2045
/* irq_queues covers admin queue */
2046
static void nvme_calc_io_queues(struct nvme_dev *dev, unsigned int irq_queues)
2047 2048 2049
{
	unsigned int this_w_queues = write_queues;

M
Ming Lei 已提交
2050 2051
	WARN_ON(!irq_queues);

2052
	/*
M
Ming Lei 已提交
2053 2054
	 * Setup read/write queue split, assign admin queue one independent
	 * irq vector if irq_queues is > 1.
2055
	 */
M
Ming Lei 已提交
2056
	if (irq_queues <= 2) {
2057 2058
		dev->io_queues[HCTX_TYPE_DEFAULT] = 1;
		dev->io_queues[HCTX_TYPE_READ] = 0;
2059 2060 2061 2062 2063
		return;
	}

	/*
	 * If 'write_queues' is set, ensure it leaves room for at least
M
Ming Lei 已提交
2064
	 * one read queue and one admin queue
2065
	 */
2066
	if (this_w_queues >= irq_queues)
M
Ming Lei 已提交
2067
		this_w_queues = irq_queues - 2;
2068 2069 2070 2071 2072 2073

	/*
	 * If 'write_queues' is set to zero, reads and writes will share
	 * a queue set.
	 */
	if (!this_w_queues) {
M
Ming Lei 已提交
2074
		dev->io_queues[HCTX_TYPE_DEFAULT] = irq_queues - 1;
2075
		dev->io_queues[HCTX_TYPE_READ] = 0;
2076
	} else {
2077
		dev->io_queues[HCTX_TYPE_DEFAULT] = this_w_queues;
M
Ming Lei 已提交
2078
		dev->io_queues[HCTX_TYPE_READ] = irq_queues - this_w_queues - 1;
2079 2080 2081
	}
}

2082
static int nvme_setup_irqs(struct nvme_dev *dev, unsigned int nr_io_queues)
2083 2084 2085 2086 2087 2088 2089 2090
{
	struct pci_dev *pdev = to_pci_dev(dev->dev);
	int irq_sets[2];
	struct irq_affinity affd = {
		.pre_vectors = 1,
		.nr_sets = ARRAY_SIZE(irq_sets),
		.sets = irq_sets,
	};
2091
	int result = 0;
2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102
	unsigned int irq_queues, this_p_queues;

	/*
	 * Poll queues don't need interrupts, but we need at least one IO
	 * queue left over for non-polled IO.
	 */
	this_p_queues = poll_queues;
	if (this_p_queues >= nr_io_queues) {
		this_p_queues = nr_io_queues - 1;
		irq_queues = 1;
	} else {
M
Ming Lei 已提交
2103
		irq_queues = nr_io_queues - this_p_queues + 1;
2104 2105
	}
	dev->io_queues[HCTX_TYPE_POLL] = this_p_queues;
2106 2107 2108 2109 2110 2111 2112

	/*
	 * For irq sets, we have to ask for minvec == maxvec. This passes
	 * any reduction back to us, so we can adjust our queue counts and
	 * IRQ vector needs.
	 */
	do {
2113
		nvme_calc_io_queues(dev, irq_queues);
2114 2115
		irq_sets[0] = dev->io_queues[HCTX_TYPE_DEFAULT];
		irq_sets[1] = dev->io_queues[HCTX_TYPE_READ];
2116 2117 2118 2119
		if (!irq_sets[1])
			affd.nr_sets = 1;

		/*
2120 2121 2122
		 * If we got a failure and we're down to asking for just
		 * 1 + 1 queues, just ask for a single vector. We'll share
		 * that between the single IO queue and the admin queue.
M
Ming Lei 已提交
2123
		 * Otherwise, we assign one independent vector to admin queue.
2124
		 */
M
Ming Lei 已提交
2125
		if (irq_queues > 1)
2126
			irq_queues = irq_sets[0] + irq_sets[1] + 1;
2127

2128 2129
		result = pci_alloc_irq_vectors_affinity(pdev, irq_queues,
				irq_queues,
2130 2131 2132
				PCI_IRQ_ALL_TYPES | PCI_IRQ_AFFINITY, &affd);

		/*
2133 2134 2135 2136
		 * Need to reduce our vec counts. If we get ENOSPC, the
		 * platform should support mulitple vecs, we just need
		 * to decrease our ask. If we get EINVAL, the platform
		 * likely does not. Back down to ask for just one vector.
2137 2138
		 */
		if (result == -ENOSPC) {
2139 2140
			irq_queues--;
			if (!irq_queues)
2141 2142
				return result;
			continue;
2143
		} else if (result == -EINVAL) {
2144
			irq_queues = 1;
2145
			continue;
2146 2147 2148 2149 2150 2151 2152 2153
		} else if (result <= 0)
			return -EIO;
		break;
	} while (1);

	return result;
}

2154
static int nvme_setup_io_queues(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
2155
{
2156
	struct nvme_queue *adminq = &dev->queues[0];
2157
	struct pci_dev *pdev = to_pci_dev(dev->dev);
2158 2159
	int result, nr_io_queues;
	unsigned long size;
M
Matthew Wilcox 已提交
2160

2161
	nr_io_queues = max_io_queues();
C
Christoph Hellwig 已提交
2162 2163
	result = nvme_set_queue_count(&dev->ctrl, &nr_io_queues);
	if (result < 0)
M
Matthew Wilcox 已提交
2164
		return result;
C
Christoph Hellwig 已提交
2165

2166
	if (nr_io_queues == 0)
2167
		return 0;
M
Matthew Wilcox 已提交
2168

2169
	if (dev->cmb && (dev->cmbsz & NVME_CMBSZ_SQS)) {
2170 2171 2172 2173 2174 2175 2176 2177
		result = nvme_cmb_qdepth(dev, nr_io_queues,
				sizeof(struct nvme_command));
		if (result > 0)
			dev->q_depth = result;
		else
			nvme_release_cmb(dev);
	}

2178 2179 2180 2181 2182 2183 2184 2185 2186
	do {
		size = db_bar_size(dev, nr_io_queues);
		result = nvme_remap_bar(dev, size);
		if (!result)
			break;
		if (!--nr_io_queues)
			return -ENOMEM;
	} while (1);
	adminq->q_db = dev->dbs;
2187

K
Keith Busch 已提交
2188
	/* Deregister the admin queue's interrupt */
2189
	pci_free_irq(pdev, 0, adminq);
K
Keith Busch 已提交
2190

2191 2192 2193 2194
	/*
	 * If we enable msix early due to not intx, disable it again before
	 * setting up the full range we need.
	 */
2195
	pci_free_irq_vectors(pdev);
2196 2197

	result = nvme_setup_irqs(dev, nr_io_queues);
2198
	if (result <= 0)
2199
		return -EIO;
2200

2201
	dev->num_vecs = result;
J
Jens Axboe 已提交
2202
	result = max(result - 1, 1);
2203
	dev->max_qid = result + dev->io_queues[HCTX_TYPE_POLL];
R
Ramachandra Rao Gajula 已提交
2204

2205 2206 2207 2208
	dev_info(dev->ctrl.device, "%d/%d/%d default/read/poll queues\n",
					dev->io_queues[HCTX_TYPE_DEFAULT],
					dev->io_queues[HCTX_TYPE_READ],
					dev->io_queues[HCTX_TYPE_POLL]);
2209

2210 2211 2212 2213 2214 2215 2216
	/*
	 * Should investigate if there's a performance win from allocating
	 * more queues than interrupt vectors; it might allow the submission
	 * path to scale better, even if the receive path is limited by the
	 * number of interrupts.
	 */

2217
	result = queue_request_irq(adminq);
2218 2219
	if (result) {
		adminq->cq_vector = -1;
K
Keith Busch 已提交
2220
		return result;
2221
	}
2222
	return nvme_create_io_queues(dev);
M
Matthew Wilcox 已提交
2223 2224
}

2225
static void nvme_del_queue_end(struct request *req, blk_status_t error)
K
Keith Busch 已提交
2226
{
K
Keith Busch 已提交
2227
	struct nvme_queue *nvmeq = req->end_io_data;
2228

K
Keith Busch 已提交
2229 2230
	blk_mq_free_request(req);
	complete(&nvmeq->dev->ioq_wait);
K
Keith Busch 已提交
2231 2232
}

2233
static void nvme_del_cq_end(struct request *req, blk_status_t error)
K
Keith Busch 已提交
2234
{
K
Keith Busch 已提交
2235
	struct nvme_queue *nvmeq = req->end_io_data;
2236
	u16 start, end;
K
Keith Busch 已提交
2237

K
Keith Busch 已提交
2238 2239 2240
	if (!error) {
		unsigned long flags;

2241
		spin_lock_irqsave(&nvmeq->cq_lock, flags);
2242
		nvme_process_cq(nvmeq, &start, &end, -1);
2243
		spin_unlock_irqrestore(&nvmeq->cq_lock, flags);
2244 2245

		nvme_complete_cqes(nvmeq, start, end);
K
Keith Busch 已提交
2246
	}
K
Keith Busch 已提交
2247 2248

	nvme_del_queue_end(req, error);
K
Keith Busch 已提交
2249 2250
}

K
Keith Busch 已提交
2251
static int nvme_delete_queue(struct nvme_queue *nvmeq, u8 opcode)
2252
{
K
Keith Busch 已提交
2253 2254 2255
	struct request_queue *q = nvmeq->dev->ctrl.admin_q;
	struct request *req;
	struct nvme_command cmd;
2256

K
Keith Busch 已提交
2257 2258 2259
	memset(&cmd, 0, sizeof(cmd));
	cmd.delete_queue.opcode = opcode;
	cmd.delete_queue.qid = cpu_to_le16(nvmeq->qid);
2260

2261
	req = nvme_alloc_request(q, &cmd, BLK_MQ_REQ_NOWAIT, NVME_QID_ANY);
K
Keith Busch 已提交
2262 2263
	if (IS_ERR(req))
		return PTR_ERR(req);
2264

K
Keith Busch 已提交
2265 2266 2267 2268 2269 2270 2271
	req->timeout = ADMIN_TIMEOUT;
	req->end_io_data = nvmeq;

	blk_execute_rq_nowait(q, NULL, req, false,
			opcode == nvme_admin_delete_cq ?
				nvme_del_cq_end : nvme_del_queue_end);
	return 0;
2272 2273
}

2274
static void nvme_disable_io_queues(struct nvme_dev *dev)
K
Keith Busch 已提交
2275
{
2276
	int pass, queues = dev->online_queues - 1;
K
Keith Busch 已提交
2277 2278
	unsigned long timeout;
	u8 opcode = nvme_admin_delete_sq;
K
Keith Busch 已提交
2279

K
Keith Busch 已提交
2280
	for (pass = 0; pass < 2; pass++) {
K
Keith Busch 已提交
2281
		int sent = 0, i = queues;
K
Keith Busch 已提交
2282 2283 2284 2285

		reinit_completion(&dev->ioq_wait);
 retry:
		timeout = ADMIN_TIMEOUT;
2286
		for (; i > 0; i--, sent++)
2287
			if (nvme_delete_queue(&dev->queues[i], opcode))
K
Keith Busch 已提交
2288
				break;
2289

K
Keith Busch 已提交
2290 2291 2292 2293 2294 2295 2296 2297 2298
		while (sent--) {
			timeout = wait_for_completion_io_timeout(&dev->ioq_wait, timeout);
			if (timeout == 0)
				return;
			if (i)
				goto retry;
		}
		opcode = nvme_admin_delete_cq;
	}
K
Keith Busch 已提交
2299 2300
}

2301
/*
2302
 * return error value only when tagset allocation failed
2303
 */
2304
static int nvme_dev_add(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
2305
{
2306 2307
	int ret;

2308
	if (!dev->ctrl.tagset) {
2309
		if (!dev->io_queues[HCTX_TYPE_POLL])
2310 2311 2312 2313
			dev->tagset.ops = &nvme_mq_ops;
		else
			dev->tagset.ops = &nvme_mq_poll_noirq_ops;

2314
		dev->tagset.nr_hw_queues = dev->online_queues - 1;
2315
		dev->tagset.nr_maps = HCTX_MAX_TYPES;
2316 2317 2318
		dev->tagset.timeout = NVME_IO_TIMEOUT;
		dev->tagset.numa_node = dev_to_node(dev->dev);
		dev->tagset.queue_depth =
M
Matias Bjørling 已提交
2319
				min_t(int, dev->q_depth, BLK_MQ_MAX_DEPTH) - 1;
C
Chaitanya Kulkarni 已提交
2320 2321 2322 2323 2324
		dev->tagset.cmd_size = nvme_pci_cmd_size(dev, false);
		if ((dev->ctrl.sgls & ((1 << 0) | (1 << 1))) && sgl_threshold) {
			dev->tagset.cmd_size = max(dev->tagset.cmd_size,
					nvme_pci_cmd_size(dev, true));
		}
2325 2326
		dev->tagset.flags = BLK_MQ_F_SHOULD_MERGE;
		dev->tagset.driver_data = dev;
M
Matthew Wilcox 已提交
2327

2328 2329 2330 2331 2332 2333
		ret = blk_mq_alloc_tag_set(&dev->tagset);
		if (ret) {
			dev_warn(dev->ctrl.device,
				"IO queues tagset allocation failed %d\n", ret);
			return ret;
		}
2334
		dev->ctrl.tagset = &dev->tagset;
2335 2336

		nvme_dbbuf_set(dev);
2337 2338 2339 2340 2341
	} else {
		blk_mq_update_nr_hw_queues(&dev->tagset, dev->online_queues - 1);

		/* Free previously allocated queues that are no longer usable */
		nvme_free_queues(dev, dev->online_queues);
2342
	}
2343

K
Keith Busch 已提交
2344
	return 0;
M
Matthew Wilcox 已提交
2345 2346
}

2347
static int nvme_pci_enable(struct nvme_dev *dev)
2348
{
2349
	int result = -ENOMEM;
2350
	struct pci_dev *pdev = to_pci_dev(dev->dev);
2351 2352 2353 2354 2355 2356

	if (pci_enable_device_mem(pdev))
		return result;

	pci_set_master(pdev);

2357 2358
	if (dma_set_mask_and_coherent(dev->dev, DMA_BIT_MASK(64)) &&
	    dma_set_mask_and_coherent(dev->dev, DMA_BIT_MASK(32)))
2359
		goto disable;
2360

2361
	if (readl(dev->bar + NVME_REG_CSTS) == -1) {
K
Keith Busch 已提交
2362
		result = -ENODEV;
2363
		goto disable;
K
Keith Busch 已提交
2364
	}
2365 2366

	/*
2367 2368 2369
	 * Some devices and/or platforms don't advertise or work with INTx
	 * interrupts. Pre-enable a single MSIX or MSI vec for setup. We'll
	 * adjust this later.
2370
	 */
2371 2372 2373
	result = pci_alloc_irq_vectors(pdev, 1, 1, PCI_IRQ_ALL_TYPES);
	if (result < 0)
		return result;
2374

2375
	dev->ctrl.cap = lo_hi_readq(dev->bar + NVME_REG_CAP);
2376

2377
	dev->q_depth = min_t(int, NVME_CAP_MQES(dev->ctrl.cap) + 1,
2378
				io_queue_depth);
2379
	dev->db_stride = 1 << NVME_CAP_STRIDE(dev->ctrl.cap);
2380
	dev->dbs = dev->bar + 4096;
2381 2382 2383 2384 2385 2386 2387

	/*
	 * Temporary fix for the Apple controller found in the MacBook8,1 and
	 * some MacBook7,1 to avoid controller resets and data loss.
	 */
	if (pdev->vendor == PCI_VENDOR_ID_APPLE && pdev->device == 0x2001) {
		dev->q_depth = 2;
2388 2389
		dev_warn(dev->ctrl.device, "detected Apple NVMe controller, "
			"set queue depth=%u to work around controller resets\n",
2390
			dev->q_depth);
2391 2392
	} else if (pdev->vendor == PCI_VENDOR_ID_SAMSUNG &&
		   (pdev->device == 0xa821 || pdev->device == 0xa822) &&
2393
		   NVME_CAP_MQES(dev->ctrl.cap) == 0) {
2394 2395 2396
		dev->q_depth = 64;
		dev_err(dev->ctrl.device, "detected PM1725 NVMe controller, "
                        "set queue depth=%u\n", dev->q_depth);
2397 2398
	}

2399
	nvme_map_cmb(dev);
2400

K
Keith Busch 已提交
2401 2402
	pci_enable_pcie_error_reporting(pdev);
	pci_save_state(pdev);
2403 2404 2405 2406 2407 2408 2409 2410
	return 0;

 disable:
	pci_disable_device(pdev);
	return result;
}

static void nvme_dev_unmap(struct nvme_dev *dev)
2411 2412 2413
{
	if (dev->bar)
		iounmap(dev->bar);
2414
	pci_release_mem_regions(to_pci_dev(dev->dev));
2415 2416 2417
}

static void nvme_pci_disable(struct nvme_dev *dev)
2418
{
2419 2420
	struct pci_dev *pdev = to_pci_dev(dev->dev);

2421
	pci_free_irq_vectors(pdev);
2422

K
Keith Busch 已提交
2423 2424
	if (pci_is_enabled(pdev)) {
		pci_disable_pcie_error_reporting(pdev);
2425
		pci_disable_device(pdev);
K
Keith Busch 已提交
2426 2427 2428
	}
}

2429
static void nvme_dev_disable(struct nvme_dev *dev, bool shutdown)
M
Matthew Wilcox 已提交
2430
{
2431
	int i;
K
Keith Busch 已提交
2432 2433
	bool dead = true;
	struct pci_dev *pdev = to_pci_dev(dev->dev);
2434

2435
	mutex_lock(&dev->shutdown_lock);
K
Keith Busch 已提交
2436 2437 2438
	if (pci_is_enabled(pdev)) {
		u32 csts = readl(dev->bar + NVME_REG_CSTS);

K
Keith Busch 已提交
2439 2440
		if (dev->ctrl.state == NVME_CTRL_LIVE ||
		    dev->ctrl.state == NVME_CTRL_RESETTING)
K
Keith Busch 已提交
2441 2442 2443
			nvme_start_freeze(&dev->ctrl);
		dead = !!((csts & NVME_CSTS_CFS) || !(csts & NVME_CSTS_RDY) ||
			pdev->error_state  != pci_channel_io_normal);
2444
	}
2445

K
Keith Busch 已提交
2446 2447 2448 2449
	/*
	 * Give the controller a chance to complete all entered requests if
	 * doing a safe shutdown.
	 */
2450 2451 2452
	if (!dead) {
		if (shutdown)
			nvme_wait_freeze_timeout(&dev->ctrl, NVME_IO_TIMEOUT);
2453 2454 2455
	}

	nvme_stop_queues(&dev->ctrl);
2456

2457
	if (!dead && dev->ctrl.queue_count > 0) {
2458
		nvme_disable_io_queues(dev);
2459
		nvme_disable_admin_queue(dev, shutdown);
K
Keith Busch 已提交
2460
	}
2461 2462 2463
	for (i = dev->ctrl.queue_count - 1; i >= 0; i--)
		nvme_suspend_queue(&dev->queues[i]);

2464
	nvme_pci_disable(dev);
2465

2466 2467
	blk_mq_tagset_busy_iter(&dev->tagset, nvme_cancel_request, &dev->ctrl);
	blk_mq_tagset_busy_iter(&dev->admin_tagset, nvme_cancel_request, &dev->ctrl);
K
Keith Busch 已提交
2468 2469 2470 2471 2472 2473

	/*
	 * The driver will not be starting up queues again if shutting down so
	 * must flush all entered requests to their failed completion to avoid
	 * deadlocking blk-mq hot-cpu notifier.
	 */
2474
	if (shutdown) {
K
Keith Busch 已提交
2475
		nvme_start_queues(&dev->ctrl);
2476 2477 2478
		if (dev->ctrl.admin_q && !blk_queue_dying(dev->ctrl.admin_q))
			blk_mq_unquiesce_queue(dev->ctrl.admin_q);
	}
2479
	mutex_unlock(&dev->shutdown_lock);
M
Matthew Wilcox 已提交
2480 2481
}

M
Matthew Wilcox 已提交
2482 2483
static int nvme_setup_prp_pools(struct nvme_dev *dev)
{
2484
	dev->prp_page_pool = dma_pool_create("prp list page", dev->dev,
M
Matthew Wilcox 已提交
2485 2486 2487 2488
						PAGE_SIZE, PAGE_SIZE, 0);
	if (!dev->prp_page_pool)
		return -ENOMEM;

2489
	/* Optimisation for I/Os between 4k and 128k */
2490
	dev->prp_small_pool = dma_pool_create("prp list 256", dev->dev,
2491 2492 2493 2494 2495
						256, 256, 0);
	if (!dev->prp_small_pool) {
		dma_pool_destroy(dev->prp_page_pool);
		return -ENOMEM;
	}
M
Matthew Wilcox 已提交
2496 2497 2498 2499 2500 2501
	return 0;
}

static void nvme_release_prp_pools(struct nvme_dev *dev)
{
	dma_pool_destroy(dev->prp_page_pool);
2502
	dma_pool_destroy(dev->prp_small_pool);
M
Matthew Wilcox 已提交
2503 2504
}

2505
static void nvme_pci_free_ctrl(struct nvme_ctrl *ctrl)
2506
{
2507
	struct nvme_dev *dev = to_nvme_dev(ctrl);
2508

2509
	nvme_dbbuf_dma_free(dev);
2510
	put_device(dev->dev);
2511 2512
	if (dev->tagset.tags)
		blk_mq_free_tag_set(&dev->tagset);
2513 2514
	if (dev->ctrl.admin_q)
		blk_put_queue(dev->ctrl.admin_q);
2515
	kfree(dev->queues);
2516
	free_opal_dev(dev->ctrl.opal_dev);
2517
	mempool_destroy(dev->iod_mempool);
2518 2519 2520
	kfree(dev);
}

2521 2522
static void nvme_remove_dead_ctrl(struct nvme_dev *dev, int status)
{
2523
	dev_warn(dev->ctrl.device, "Removing after probe failure status: %d\n", status);
2524

2525
	nvme_get_ctrl(&dev->ctrl);
2526
	nvme_dev_disable(dev, false);
2527
	nvme_kill_queues(&dev->ctrl);
2528
	if (!queue_work(nvme_wq, &dev->remove_work))
2529 2530 2531
		nvme_put_ctrl(&dev->ctrl);
}

2532
static void nvme_reset_work(struct work_struct *work)
2533
{
2534 2535
	struct nvme_dev *dev =
		container_of(work, struct nvme_dev, ctrl.reset_work);
2536
	bool was_suspend = !!(dev->ctrl.ctrl_config & NVME_CC_SHN_NORMAL);
2537
	int result;
2538
	enum nvme_ctrl_state new_state = NVME_CTRL_LIVE;
2539

2540 2541
	if (WARN_ON(dev->ctrl.state != NVME_CTRL_RESETTING)) {
		result = -ENODEV;
2542
		goto out;
2543
	}
2544

2545 2546 2547 2548
	/*
	 * If we're called to reset a live controller first shut it down before
	 * moving on.
	 */
2549
	if (dev->ctrl.ctrl_config & NVME_CC_ENABLE)
2550
		nvme_dev_disable(dev, false);
2551

2552
	mutex_lock(&dev->shutdown_lock);
2553
	result = nvme_pci_enable(dev);
2554
	if (result)
2555
		goto out_unlock;
2556

2557
	result = nvme_pci_configure_admin_queue(dev);
2558
	if (result)
2559
		goto out_unlock;
2560

K
Keith Busch 已提交
2561 2562
	result = nvme_alloc_admin_tags(dev);
	if (result)
2563
		goto out_unlock;
2564

2565 2566 2567 2568 2569 2570
	/*
	 * Limit the max command size to prevent iod->sg allocations going
	 * over a single page.
	 */
	dev->ctrl.max_hw_sectors = NVME_MAX_KB_SZ << 1;
	dev->ctrl.max_segments = NVME_MAX_SEGS;
2571 2572 2573 2574 2575 2576 2577 2578 2579
	mutex_unlock(&dev->shutdown_lock);

	/*
	 * Introduce CONNECTING state from nvme-fc/rdma transports to mark the
	 * initializing procedure here.
	 */
	if (!nvme_change_ctrl_state(&dev->ctrl, NVME_CTRL_CONNECTING)) {
		dev_warn(dev->ctrl.device,
			"failed to mark controller CONNECTING\n");
2580
		result = -EBUSY;
2581 2582
		goto out;
	}
2583

2584 2585
	result = nvme_init_identify(&dev->ctrl);
	if (result)
2586
		goto out;
2587

2588 2589 2590 2591 2592 2593 2594 2595 2596
	if (dev->ctrl.oacs & NVME_CTRL_OACS_SEC_SUPP) {
		if (!dev->ctrl.opal_dev)
			dev->ctrl.opal_dev =
				init_opal_dev(&dev->ctrl, &nvme_sec_submit);
		else if (was_suspend)
			opal_unlock_from_suspend(dev->ctrl.opal_dev);
	} else {
		free_opal_dev(dev->ctrl.opal_dev);
		dev->ctrl.opal_dev = NULL;
2597
	}
2598

2599 2600 2601 2602 2603 2604 2605
	if (dev->ctrl.oacs & NVME_CTRL_OACS_DBBUF_SUPP) {
		result = nvme_dbbuf_dma_alloc(dev);
		if (result)
			dev_warn(dev->dev,
				 "unable to allocate dma for dbbuf\n");
	}

2606 2607 2608 2609 2610
	if (dev->ctrl.hmpre) {
		result = nvme_setup_host_mem(dev);
		if (result < 0)
			goto out;
	}
2611

2612
	result = nvme_setup_io_queues(dev);
2613
	if (result)
2614
		goto out;
2615

2616 2617 2618 2619
	/*
	 * Keep the controller around but remove all namespaces if we don't have
	 * any working I/O queue.
	 */
2620
	if (dev->online_queues < 2) {
2621
		dev_warn(dev->ctrl.device, "IO queues not created\n");
2622
		nvme_kill_queues(&dev->ctrl);
2623
		nvme_remove_namespaces(&dev->ctrl);
2624
		new_state = NVME_CTRL_ADMIN_ONLY;
2625
	} else {
2626
		nvme_start_queues(&dev->ctrl);
K
Keith Busch 已提交
2627
		nvme_wait_freeze(&dev->ctrl);
2628 2629 2630
		/* hit this only when allocate tagset fails */
		if (nvme_dev_add(dev))
			new_state = NVME_CTRL_ADMIN_ONLY;
K
Keith Busch 已提交
2631
		nvme_unfreeze(&dev->ctrl);
2632 2633
	}

2634 2635 2636 2637 2638 2639 2640
	/*
	 * If only admin queue live, keep it to do further investigation or
	 * recovery.
	 */
	if (!nvme_change_ctrl_state(&dev->ctrl, new_state)) {
		dev_warn(dev->ctrl.device,
			"failed to mark controller state %d\n", new_state);
2641
		result = -ENODEV;
2642 2643
		goto out;
	}
2644

2645
	nvme_start_ctrl(&dev->ctrl);
2646
	return;
2647

2648 2649
 out_unlock:
	mutex_unlock(&dev->shutdown_lock);
2650
 out:
2651
	nvme_remove_dead_ctrl(dev, result);
2652 2653
}

2654
static void nvme_remove_dead_ctrl_work(struct work_struct *work)
K
Keith Busch 已提交
2655
{
2656
	struct nvme_dev *dev = container_of(work, struct nvme_dev, remove_work);
2657
	struct pci_dev *pdev = to_pci_dev(dev->dev);
K
Keith Busch 已提交
2658 2659

	if (pci_get_drvdata(pdev))
K
Keith Busch 已提交
2660
		device_release_driver(&pdev->dev);
2661
	nvme_put_ctrl(&dev->ctrl);
K
Keith Busch 已提交
2662 2663
}

2664
static int nvme_pci_reg_read32(struct nvme_ctrl *ctrl, u32 off, u32 *val)
T
Tejun Heo 已提交
2665
{
2666
	*val = readl(to_nvme_dev(ctrl)->bar + off);
2667
	return 0;
T
Tejun Heo 已提交
2668 2669
}

2670
static int nvme_pci_reg_write32(struct nvme_ctrl *ctrl, u32 off, u32 val)
2671
{
2672 2673 2674
	writel(val, to_nvme_dev(ctrl)->bar + off);
	return 0;
}
2675

2676 2677
static int nvme_pci_reg_read64(struct nvme_ctrl *ctrl, u32 off, u64 *val)
{
2678
	*val = lo_hi_readq(to_nvme_dev(ctrl)->bar + off);
2679
	return 0;
2680 2681
}

2682 2683 2684 2685 2686 2687 2688
static int nvme_pci_get_address(struct nvme_ctrl *ctrl, char *buf, int size)
{
	struct pci_dev *pdev = to_pci_dev(to_nvme_dev(ctrl)->dev);

	return snprintf(buf, size, "%s", dev_name(&pdev->dev));
}

2689
static const struct nvme_ctrl_ops nvme_pci_ctrl_ops = {
M
Ming Lin 已提交
2690
	.name			= "pcie",
2691
	.module			= THIS_MODULE,
2692
	.flags			= NVME_F_METADATA_SUPPORTED,
2693
	.reg_read32		= nvme_pci_reg_read32,
2694
	.reg_write32		= nvme_pci_reg_write32,
2695
	.reg_read64		= nvme_pci_reg_read64,
2696
	.free_ctrl		= nvme_pci_free_ctrl,
2697
	.submit_async_event	= nvme_pci_submit_async_event,
2698
	.get_address		= nvme_pci_get_address,
2699
};
2700

2701 2702 2703 2704
static int nvme_dev_map(struct nvme_dev *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev->dev);

2705
	if (pci_request_mem_regions(pdev, "nvme"))
2706 2707
		return -ENODEV;

2708
	if (nvme_remap_bar(dev, NVME_REG_DBS + 4096))
2709 2710
		goto release;

M
Max Gurtovoy 已提交
2711
	return 0;
2712
  release:
M
Max Gurtovoy 已提交
2713 2714
	pci_release_mem_regions(pdev);
	return -ENODEV;
2715 2716
}

2717
static unsigned long check_vendor_combination_bug(struct pci_dev *pdev)
2718 2719 2720 2721 2722 2723 2724 2725 2726 2727 2728 2729 2730 2731
{
	if (pdev->vendor == 0x144d && pdev->device == 0xa802) {
		/*
		 * Several Samsung devices seem to drop off the PCIe bus
		 * randomly when APST is on and uses the deepest sleep state.
		 * This has been observed on a Samsung "SM951 NVMe SAMSUNG
		 * 256GB", a "PM951 NVMe SAMSUNG 512GB", and a "Samsung SSD
		 * 950 PRO 256GB", but it seems to be restricted to two Dell
		 * laptops.
		 */
		if (dmi_match(DMI_SYS_VENDOR, "Dell Inc.") &&
		    (dmi_match(DMI_PRODUCT_NAME, "XPS 15 9550") ||
		     dmi_match(DMI_PRODUCT_NAME, "Precision 5510")))
			return NVME_QUIRK_NO_DEEPEST_PS;
2732 2733 2734
	} else if (pdev->vendor == 0x144d && pdev->device == 0xa804) {
		/*
		 * Samsung SSD 960 EVO drops off the PCIe bus after system
2735 2736 2737
		 * suspend on a Ryzen board, ASUS PRIME B350M-A, as well as
		 * within few minutes after bootup on a Coffee Lake board -
		 * ASUS PRIME Z370-A
2738 2739
		 */
		if (dmi_match(DMI_BOARD_VENDOR, "ASUSTeK COMPUTER INC.") &&
2740 2741
		    (dmi_match(DMI_BOARD_NAME, "PRIME B350M-A") ||
		     dmi_match(DMI_BOARD_NAME, "PRIME Z370-A")))
2742
			return NVME_QUIRK_NO_APST;
2743 2744 2745 2746 2747
	}

	return 0;
}

2748 2749 2750
static void nvme_async_probe(void *data, async_cookie_t cookie)
{
	struct nvme_dev *dev = data;
2751

2752
	flush_work(&dev->ctrl.reset_work);
2753
	flush_work(&dev->ctrl.scan_work);
2754
	nvme_put_ctrl(&dev->ctrl);
2755 2756
}

2757
static int nvme_probe(struct pci_dev *pdev, const struct pci_device_id *id)
M
Matthew Wilcox 已提交
2758
{
M
Matias Bjørling 已提交
2759
	int node, result = -ENOMEM;
M
Matthew Wilcox 已提交
2760
	struct nvme_dev *dev;
2761
	unsigned long quirks = id->driver_data;
2762
	size_t alloc_size;
M
Matthew Wilcox 已提交
2763

M
Matias Bjørling 已提交
2764 2765
	node = dev_to_node(&pdev->dev);
	if (node == NUMA_NO_NODE)
2766
		set_dev_node(&pdev->dev, first_memory_node);
M
Matias Bjørling 已提交
2767 2768

	dev = kzalloc_node(sizeof(*dev), GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2769 2770
	if (!dev)
		return -ENOMEM;
2771

2772 2773
	dev->queues = kcalloc_node(max_queue_count(), sizeof(struct nvme_queue),
					GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2774 2775 2776
	if (!dev->queues)
		goto free;

2777
	dev->dev = get_device(&pdev->dev);
K
Keith Busch 已提交
2778
	pci_set_drvdata(pdev, dev);
2779

2780 2781
	result = nvme_dev_map(dev);
	if (result)
2782
		goto put_pci;
2783

2784
	INIT_WORK(&dev->ctrl.reset_work, nvme_reset_work);
2785
	INIT_WORK(&dev->remove_work, nvme_remove_dead_ctrl_work);
2786
	mutex_init(&dev->shutdown_lock);
K
Keith Busch 已提交
2787
	init_completion(&dev->ioq_wait);
M
Matthew Wilcox 已提交
2788

M
Matthew Wilcox 已提交
2789 2790
	result = nvme_setup_prp_pools(dev);
	if (result)
2791
		goto unmap;
2792

2793
	quirks |= check_vendor_combination_bug(pdev);
2794

2795 2796 2797 2798 2799 2800 2801 2802 2803 2804 2805 2806 2807 2808 2809 2810 2811
	/*
	 * Double check that our mempool alloc size will cover the biggest
	 * command we support.
	 */
	alloc_size = nvme_pci_iod_alloc_size(dev, NVME_MAX_KB_SZ,
						NVME_MAX_SEGS, true);
	WARN_ON_ONCE(alloc_size > PAGE_SIZE);

	dev->iod_mempool = mempool_create_node(1, mempool_kmalloc,
						mempool_kfree,
						(void *) alloc_size,
						GFP_KERNEL, node);
	if (!dev->iod_mempool) {
		result = -ENOMEM;
		goto release_pools;
	}

2812 2813 2814 2815 2816
	result = nvme_init_ctrl(&dev->ctrl, &pdev->dev, &nvme_pci_ctrl_ops,
			quirks);
	if (result)
		goto release_mempool;

2817 2818
	dev_info(dev->ctrl.device, "pci function %s\n", dev_name(&pdev->dev));

2819
	nvme_reset_ctrl(&dev->ctrl);
2820
	nvme_get_ctrl(&dev->ctrl);
2821
	async_schedule(nvme_async_probe, dev);
2822

M
Matthew Wilcox 已提交
2823 2824
	return 0;

2825 2826
 release_mempool:
	mempool_destroy(dev->iod_mempool);
2827
 release_pools:
M
Matthew Wilcox 已提交
2828
	nvme_release_prp_pools(dev);
2829 2830
 unmap:
	nvme_dev_unmap(dev);
K
Keith Busch 已提交
2831
 put_pci:
2832
	put_device(dev->dev);
M
Matthew Wilcox 已提交
2833 2834 2835 2836 2837 2838
 free:
	kfree(dev->queues);
	kfree(dev);
	return result;
}

2839
static void nvme_reset_prepare(struct pci_dev *pdev)
2840
{
K
Keith Busch 已提交
2841
	struct nvme_dev *dev = pci_get_drvdata(pdev);
2842
	nvme_dev_disable(dev, false);
2843
}
2844

2845 2846
static void nvme_reset_done(struct pci_dev *pdev)
{
2847
	struct nvme_dev *dev = pci_get_drvdata(pdev);
S
Sagi Grimberg 已提交
2848
	nvme_reset_ctrl_sync(&dev->ctrl);
2849 2850
}

2851 2852 2853
static void nvme_shutdown(struct pci_dev *pdev)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);
2854
	nvme_dev_disable(dev, true);
2855 2856
}

2857 2858 2859 2860 2861
/*
 * The driver's remove may be called on a device in a partially initialized
 * state. This function must not have any dependencies on the device state in
 * order to proceed.
 */
2862
static void nvme_remove(struct pci_dev *pdev)
M
Matthew Wilcox 已提交
2863 2864
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);
K
Keith Busch 已提交
2865

2866
	nvme_change_ctrl_state(&dev->ctrl, NVME_CTRL_DELETING);
K
Keith Busch 已提交
2867
	pci_set_drvdata(pdev, NULL);
2868

2869
	if (!pci_device_is_present(pdev)) {
2870
		nvme_change_ctrl_state(&dev->ctrl, NVME_CTRL_DEAD);
2871
		nvme_dev_disable(dev, true);
2872
		nvme_dev_remove_admin(dev);
2873
	}
2874

2875
	flush_work(&dev->ctrl.reset_work);
2876 2877
	nvme_stop_ctrl(&dev->ctrl);
	nvme_remove_namespaces(&dev->ctrl);
2878
	nvme_dev_disable(dev, true);
2879
	nvme_release_cmb(dev);
2880
	nvme_free_host_mem(dev);
M
Matias Bjørling 已提交
2881
	nvme_dev_remove_admin(dev);
2882
	nvme_free_queues(dev, 0);
2883
	nvme_uninit_ctrl(&dev->ctrl);
K
Keith Busch 已提交
2884
	nvme_release_prp_pools(dev);
2885
	nvme_dev_unmap(dev);
2886
	nvme_put_ctrl(&dev->ctrl);
M
Matthew Wilcox 已提交
2887 2888
}

2889
#ifdef CONFIG_PM_SLEEP
2890 2891 2892 2893 2894
static int nvme_suspend(struct device *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev);
	struct nvme_dev *ndev = pci_get_drvdata(pdev);

2895
	nvme_dev_disable(ndev, true);
2896 2897 2898 2899 2900 2901 2902 2903
	return 0;
}

static int nvme_resume(struct device *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev);
	struct nvme_dev *ndev = pci_get_drvdata(pdev);

2904
	nvme_reset_ctrl(&ndev->ctrl);
K
Keith Busch 已提交
2905
	return 0;
2906
}
2907
#endif
2908 2909

static SIMPLE_DEV_PM_OPS(nvme_dev_pm_ops, nvme_suspend, nvme_resume);
M
Matthew Wilcox 已提交
2910

K
Keith Busch 已提交
2911 2912 2913 2914 2915 2916 2917 2918 2919 2920 2921 2922 2923 2924
static pci_ers_result_t nvme_error_detected(struct pci_dev *pdev,
						pci_channel_state_t state)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);

	/*
	 * A frozen channel requires a reset. When detected, this method will
	 * shutdown the controller to quiesce. The controller will be restarted
	 * after the slot reset through driver's slot_reset callback.
	 */
	switch (state) {
	case pci_channel_io_normal:
		return PCI_ERS_RESULT_CAN_RECOVER;
	case pci_channel_io_frozen:
K
Keith Busch 已提交
2925 2926
		dev_warn(dev->ctrl.device,
			"frozen state error detected, reset controller\n");
2927
		nvme_dev_disable(dev, false);
K
Keith Busch 已提交
2928 2929
		return PCI_ERS_RESULT_NEED_RESET;
	case pci_channel_io_perm_failure:
K
Keith Busch 已提交
2930 2931
		dev_warn(dev->ctrl.device,
			"failure state error detected, request disconnect\n");
K
Keith Busch 已提交
2932 2933 2934 2935 2936 2937 2938 2939 2940
		return PCI_ERS_RESULT_DISCONNECT;
	}
	return PCI_ERS_RESULT_NEED_RESET;
}

static pci_ers_result_t nvme_slot_reset(struct pci_dev *pdev)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);

2941
	dev_info(dev->ctrl.device, "restart after slot reset\n");
K
Keith Busch 已提交
2942
	pci_restore_state(pdev);
2943
	nvme_reset_ctrl(&dev->ctrl);
K
Keith Busch 已提交
2944 2945 2946 2947 2948
	return PCI_ERS_RESULT_RECOVERED;
}

static void nvme_error_resume(struct pci_dev *pdev)
{
K
Keith Busch 已提交
2949 2950 2951
	struct nvme_dev *dev = pci_get_drvdata(pdev);

	flush_work(&dev->ctrl.reset_work);
K
Keith Busch 已提交
2952 2953 2954
	pci_cleanup_aer_uncorrect_error_status(pdev);
}

2955
static const struct pci_error_handlers nvme_err_handler = {
M
Matthew Wilcox 已提交
2956 2957 2958
	.error_detected	= nvme_error_detected,
	.slot_reset	= nvme_slot_reset,
	.resume		= nvme_error_resume,
2959 2960
	.reset_prepare	= nvme_reset_prepare,
	.reset_done	= nvme_reset_done,
M
Matthew Wilcox 已提交
2961 2962
};

2963
static const struct pci_device_id nvme_id_table[] = {
2964
	{ PCI_VDEVICE(INTEL, 0x0953),
2965
		.driver_data = NVME_QUIRK_STRIPE_SIZE, },
2966 2967
	{ PCI_VDEVICE(INTEL, 0x0a53),
		.driver_data = NVME_QUIRK_STRIPE_SIZE |
2968
				NVME_QUIRK_DEALLOCATE_ZEROES, },
2969 2970
	{ PCI_VDEVICE(INTEL, 0x0a54),
		.driver_data = NVME_QUIRK_STRIPE_SIZE |
2971
				NVME_QUIRK_DEALLOCATE_ZEROES, },
2972 2973 2974
	{ PCI_VDEVICE(INTEL, 0x0a55),
		.driver_data = NVME_QUIRK_STRIPE_SIZE |
				NVME_QUIRK_DEALLOCATE_ZEROES, },
2975
	{ PCI_VDEVICE(INTEL, 0xf1a5),	/* Intel 600P/P3100 */
2976 2977
		.driver_data = NVME_QUIRK_NO_DEEPEST_PS |
				NVME_QUIRK_MEDIUM_PRIO_SQ },
2978 2979
	{ PCI_VDEVICE(INTEL, 0x5845),	/* Qemu emulated controller */
		.driver_data = NVME_QUIRK_IDENTIFY_CNS, },
2980 2981
	{ PCI_DEVICE(0x1bb1, 0x0100),   /* Seagate Nytro Flash Storage */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2982 2983
	{ PCI_DEVICE(0x1c58, 0x0003),	/* HGST adapter */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2984 2985
	{ PCI_DEVICE(0x1c58, 0x0023),	/* WDC SN200 adapter */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2986 2987
	{ PCI_DEVICE(0x1c5f, 0x0540),	/* Memblaze Pblaze4 adapter */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
2988 2989 2990 2991
	{ PCI_DEVICE(0x144d, 0xa821),   /* Samsung PM1725 */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
	{ PCI_DEVICE(0x144d, 0xa822),   /* Samsung PM1725a */
		.driver_data = NVME_QUIRK_DELAY_BEFORE_CHK_RDY, },
C
Christoph Hellwig 已提交
2992 2993 2994 2995
	{ PCI_DEVICE(0x1d1d, 0x1f1f),	/* LighNVM qemu device */
		.driver_data = NVME_QUIRK_LIGHTNVM, },
	{ PCI_DEVICE(0x1d1d, 0x2807),	/* CNEX WL */
		.driver_data = NVME_QUIRK_LIGHTNVM, },
W
Wei Xu 已提交
2996 2997
	{ PCI_DEVICE(0x1d1d, 0x2601),	/* CNEX Granby */
		.driver_data = NVME_QUIRK_LIGHTNVM, },
M
Matthew Wilcox 已提交
2998
	{ PCI_DEVICE_CLASS(PCI_CLASS_STORAGE_EXPRESS, 0xffffff) },
2999
	{ PCI_DEVICE(PCI_VENDOR_ID_APPLE, 0x2001) },
3000
	{ PCI_DEVICE(PCI_VENDOR_ID_APPLE, 0x2003) },
M
Matthew Wilcox 已提交
3001 3002 3003 3004 3005 3006 3007 3008
	{ 0, }
};
MODULE_DEVICE_TABLE(pci, nvme_id_table);

static struct pci_driver nvme_driver = {
	.name		= "nvme",
	.id_table	= nvme_id_table,
	.probe		= nvme_probe,
3009
	.remove		= nvme_remove,
3010
	.shutdown	= nvme_shutdown,
3011 3012 3013
	.driver		= {
		.pm	= &nvme_dev_pm_ops,
	},
3014
	.sriov_configure = pci_sriov_configure_simple,
M
Matthew Wilcox 已提交
3015 3016 3017 3018 3019
	.err_handler	= &nvme_err_handler,
};

static int __init nvme_init(void)
{
3020
	return pci_register_driver(&nvme_driver);
M
Matthew Wilcox 已提交
3021 3022 3023 3024 3025
}

static void __exit nvme_exit(void)
{
	pci_unregister_driver(&nvme_driver);
3026
	flush_workqueue(nvme_wq);
3027
	_nvme_check_size();
M
Matthew Wilcox 已提交
3028 3029 3030 3031
}

MODULE_AUTHOR("Matthew Wilcox <willy@linux.intel.com>");
MODULE_LICENSE("GPL");
3032
MODULE_VERSION("1.0");
M
Matthew Wilcox 已提交
3033 3034
module_init(nvme_init);
module_exit(nvme_exit);