task.c 47.3 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
/*
 * This file is provided under a dual BSD/GPLv2 license.  When using or
 * redistributing this file, you may do so under either license.
 *
 * GPL LICENSE SUMMARY
 *
 * Copyright(c) 2008 - 2011 Intel Corporation. All rights reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
 * The full GNU General Public License is included in this distribution
 * in the file called LICENSE.GPL.
 *
 * BSD LICENSE
 *
 * Copyright(c) 2008 - 2011 Intel Corporation. All rights reserved.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 *   * Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 *   * Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in
 *     the documentation and/or other materials provided with the
 *     distribution.
 *   * Neither the name of Intel Corporation nor the names of its
 *     contributors may be used to endorse or promote products derived
 *     from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include <linux/completion.h>
57
#include <linux/irqflags.h>
58
#include "sas.h"
59
#include <scsi/libsas.h>
60 61
#include "remote_device.h"
#include "remote_node_context.h"
62 63 64 65
#include "isci.h"
#include "request.h"
#include "sata.h"
#include "task.h"
66
#include "host.h"
67

68
/**
69 70 71 72 73 74
* isci_task_refuse() - complete the request to the upper layer driver in
*     the case where an I/O needs to be completed back in the submit path.
* @ihost: host on which the the request was queued
* @task: request to complete
* @response: response code for the completed task.
* @status: status code for the completed task.
75 76
*
*/
77 78 79 80
static void isci_task_refuse(struct isci_host *ihost, struct sas_task *task,
			     enum service_response response,
			     enum exec_status status)

81
{
82
	enum isci_completion_selection disposition;
83

84 85 86
	disposition = isci_perform_normal_io_completion;
	disposition = isci_task_set_completion_status(task, response, status,
						      disposition);
87 88

	/* Tasks aborted specifically by a call to the lldd_abort_task
89 90 91
	 * function should not be completed to the host in the regular path.
	 */
	switch (disposition) {
92 93
		case isci_perform_normal_io_completion:
			/* Normal notification (task_done) */
94
			dev_dbg(&ihost->pdev->dev,
95 96
				"%s: Normal - task = %p, response=%d, "
				"status=%d\n",
97 98
				__func__, task, response, status);

99
			task->lldd_task = NULL;
100

101
			isci_execpath_callback(ihost, task, task->task_done);
102 103 104 105 106 107
			break;

		case isci_perform_aborted_io_completion:
			/* No notification because this request is already in the
			* abort path.
			*/
108
			dev_warn(&ihost->pdev->dev,
109 110
				 "%s: Aborted - task = %p, response=%d, "
				"status=%d\n",
111 112 113 114 115
				 __func__, task, response, status);
			break;

		case isci_perform_error_io_completion:
			/* Use sas_task_abort */
116
			dev_warn(&ihost->pdev->dev,
117 118
				 "%s: Error - task = %p, response=%d, "
				"status=%d\n",
119
				 __func__, task, response, status);
120 121

			isci_execpath_callback(ihost, task, sas_task_abort);
122 123 124
			break;

		default:
125
			dev_warn(&ihost->pdev->dev,
126 127 128 129 130 131
				 "%s: isci task notification default case!",
				 __func__);
			sas_task_abort(task);
			break;
	}
}
132

133 134 135 136
#define for_each_sas_task(num, task) \
	for (; num > 0; num--,\
	     task = list_entry(task->list.next, struct sas_task, list))

137 138 139 140 141 142 143 144 145

static inline int isci_device_io_ready(struct isci_remote_device *idev,
				       struct sas_task *task)
{
	return idev ? test_bit(IDEV_IO_READY, &idev->flags) ||
		      (test_bit(IDEV_IO_NCQERROR, &idev->flags) &&
		       isci_task_is_ncq_recovery(task))
		    : 0;
}
146 147 148 149 150 151 152 153 154 155 156 157
/**
 * isci_task_execute_task() - This function is one of the SAS Domain Template
 *    functions. This function is called by libsas to send a task down to
 *    hardware.
 * @task: This parameter specifies the SAS task to send.
 * @num: This parameter specifies the number of tasks to queue.
 * @gfp_flags: This parameter specifies the context of this call.
 *
 * status, zero indicates success.
 */
int isci_task_execute_task(struct sas_task *task, int num, gfp_t gfp_flags)
{
158
	struct isci_host *ihost = dev_to_ihost(task->dev);
159
	struct isci_remote_device *idev;
160
	unsigned long flags;
161
	bool io_ready;
162
	u16 tag;
163

164
	dev_dbg(&ihost->pdev->dev, "%s: num=%d\n", __func__, num);
165

166
	for_each_sas_task(num, task) {
167 168
		enum sci_status status = SCI_FAILURE;

169 170
		spin_lock_irqsave(&ihost->scic_lock, flags);
		idev = isci_lookup_device(task->dev);
171
		io_ready = isci_device_io_ready(idev, task);
172
		tag = isci_alloc_tag(ihost);
173
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
174

175 176 177 178
		dev_dbg(&ihost->pdev->dev,
			"task: %p, num: %d dev: %p idev: %p:%#lx cmd = %p\n",
			task, num, task->dev, idev, idev ? idev->flags : 0,
			task->uldd_task);
179

180 181 182
		if (!idev) {
			isci_task_refuse(ihost, task, SAS_TASK_UNDELIVERED,
					 SAS_DEVICE_UNKNOWN);
183
		} else if (!io_ready || tag == SCI_CONTROLLER_INVALID_IO_TAG) {
184 185 186 187 188
			/* Indicate QUEUE_FULL so that the scsi midlayer
			 * retries.
			  */
			isci_task_refuse(ihost, task, SAS_TASK_COMPLETE,
					 SAS_QUEUE_FULL);
189 190 191
		} else {
			/* There is a device and it's ready for I/O. */
			spin_lock_irqsave(&task->task_state_lock, flags);
192

193
			if (task->task_state_flags & SAS_TASK_STATE_ABORTED) {
194
				/* The I/O was aborted. */
195 196
				spin_unlock_irqrestore(&task->task_state_lock,
						       flags);
197

198 199 200
				isci_task_refuse(ihost, task,
						 SAS_TASK_UNDELIVERED,
						 SAM_STAT_TASK_ABORTED);
201
			} else {
202 203
				task->task_state_flags |= SAS_TASK_AT_INITIATOR;
				spin_unlock_irqrestore(&task->task_state_lock, flags);
204 205

				/* build and send the request. */
D
Dan Williams 已提交
206
				status = isci_request_execute(ihost, idev, task, tag);
207 208 209 210 211 212 213 214 215 216 217 218 219 220 221

				if (status != SCI_SUCCESS) {

					spin_lock_irqsave(&task->task_state_lock, flags);
					/* Did not really start this command. */
					task->task_state_flags &= ~SAS_TASK_AT_INITIATOR;
					spin_unlock_irqrestore(&task->task_state_lock, flags);

					/* Indicate QUEUE_FULL so that the scsi
					* midlayer retries. if the request
					* failed for remote device reasons,
					* it gets returned as
					* SAS_TASK_UNDELIVERED next time
					* through.
					*/
222 223 224
					isci_task_refuse(ihost, task,
							 SAS_TASK_COMPLETE,
							 SAS_QUEUE_FULL);
225
				}
226 227
			}
		}
228 229 230 231 232 233 234 235
		if (status != SCI_SUCCESS && tag != SCI_CONTROLLER_INVALID_IO_TAG) {
			spin_lock_irqsave(&ihost->scic_lock, flags);
			/* command never hit the device, so just free
			 * the tci and skip the sequence increment
			 */
			isci_tci_free(ihost, ISCI_TAG_TCI(tag));
			spin_unlock_irqrestore(&ihost->scic_lock, flags);
		}
236
		isci_put_device(idev);
237
	}
238 239 240
	return 0;
}

D
Dan Williams 已提交
241
static struct isci_request *isci_task_request_build(struct isci_host *ihost,
242
						    struct isci_remote_device *idev,
243
						    u16 tag, struct isci_tmf *isci_tmf)
244 245
{
	enum sci_status status = SCI_FAILURE;
D
Dan Williams 已提交
246
	struct isci_request *ireq = NULL;
247
	struct domain_device *dev;
248

D
Dan Williams 已提交
249
	dev_dbg(&ihost->pdev->dev,
250 251
		"%s: isci_tmf = %p\n", __func__, isci_tmf);

D
Dan Williams 已提交
252
	dev = idev->domain_dev;
253 254

	/* do common allocation and init of request object. */
D
Dan Williams 已提交
255
	ireq = isci_tmf_request_from_tag(ihost, isci_tmf, tag);
D
Dan Williams 已提交
256 257
	if (!ireq)
		return NULL;
258 259

	/* let the core do it's construct. */
260
	status = sci_task_request_construct(ihost, idev, tag,
261
					     ireq);
262 263

	if (status != SCI_SUCCESS) {
D
Dan Williams 已提交
264
		dev_warn(&ihost->pdev->dev,
265
			 "%s: sci_task_request_construct failed - "
266 267 268
			 "status = 0x%x\n",
			 __func__,
			 status);
D
Dan Williams 已提交
269
		return NULL;
270 271
	}

272 273
	/* XXX convert to get this from task->tproto like other drivers */
	if (dev->dev_type == SAS_END_DEV) {
274
		isci_tmf->proto = SAS_PROTOCOL_SSP;
275
		status = sci_task_request_construct_ssp(ireq);
276
		if (status != SCI_SUCCESS)
D
Dan Williams 已提交
277
			return NULL;
278 279
	}

280
	if (dev->dev_type == SATA_DEV || (dev->tproto & SAS_PROTOCOL_STP)) {
281
		isci_tmf->proto = SAS_PROTOCOL_SATA;
D
Dan Williams 已提交
282
		status = isci_sata_management_task_request_build(ireq);
283 284

		if (status != SCI_SUCCESS)
D
Dan Williams 已提交
285
			return NULL;
286
	}
D
Dan Williams 已提交
287
	return ireq;
288 289
}

290
int isci_task_execute_tmf(struct isci_host *ihost,
291
			  struct isci_remote_device *idev,
292
			  struct isci_tmf *tmf, unsigned long timeout_ms)
293 294
{
	DECLARE_COMPLETION_ONSTACK(completion);
295
	enum sci_task_status status = SCI_TASK_FAILURE;
D
Dan Williams 已提交
296
	struct isci_request *ireq;
297 298
	int ret = TMF_RESP_FUNC_FAILED;
	unsigned long flags;
E
Edmund Nadolski 已提交
299
	unsigned long timeleft;
300 301 302 303 304 305 306 307
	u16 tag;

	spin_lock_irqsave(&ihost->scic_lock, flags);
	tag = isci_alloc_tag(ihost);
	spin_unlock_irqrestore(&ihost->scic_lock, flags);

	if (tag == SCI_CONTROLLER_INVALID_IO_TAG)
		return ret;
308 309 310 311

	/* sanity check, return TMF_RESP_FUNC_FAILED
	 * if the device is not there and ready.
	 */
312 313 314
	if (!idev ||
	    (!test_bit(IDEV_IO_READY, &idev->flags) &&
	     !test_bit(IDEV_IO_NCQERROR, &idev->flags))) {
D
Dan Williams 已提交
315
		dev_dbg(&ihost->pdev->dev,
316
			"%s: idev = %p not ready (%#lx)\n",
317
			__func__,
318
			idev, idev ? idev->flags : 0);
319
		goto err_tci;
320
	} else
D
Dan Williams 已提交
321
		dev_dbg(&ihost->pdev->dev,
322 323
			"%s: idev = %p\n",
			__func__, idev);
324 325 326 327

	/* Assign the pointer to the TMF's completion kernel wait structure. */
	tmf->complete = &completion;

328
	ireq = isci_task_request_build(ihost, idev, tag, tmf);
329 330
	if (!ireq)
		goto err_tci;
331

D
Dan Williams 已提交
332
	spin_lock_irqsave(&ihost->scic_lock, flags);
333 334

	/* start the TMF io. */
335
	status = sci_controller_start_task(ihost, idev, ireq);
336

337
	if (status != SCI_TASK_SUCCESS) {
D
Dan Williams 已提交
338
		dev_warn(&ihost->pdev->dev,
339 340 341
			 "%s: start_io failed - status = 0x%x, request = %p\n",
			 __func__,
			 status,
D
Dan Williams 已提交
342 343
			 ireq);
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
D
Dan Williams 已提交
344
		goto err_tci;
345 346 347 348 349
	}

	if (tmf->cb_state_func != NULL)
		tmf->cb_state_func(isci_tmf_started, tmf, tmf->cb_data);

D
Dan Williams 已提交
350
	isci_request_change_state(ireq, started);
351 352

	/* add the request to the remote device request list. */
353
	list_add(&ireq->dev_node, &idev->reqs_in_process);
354

D
Dan Williams 已提交
355
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
356 357

	/* Wait for the TMF to complete, or a timeout. */
E
Edmund Nadolski 已提交
358
	timeleft = wait_for_completion_timeout(&completion,
359
					       msecs_to_jiffies(timeout_ms));
E
Edmund Nadolski 已提交
360 361

	if (timeleft == 0) {
D
Dan Williams 已提交
362
		spin_lock_irqsave(&ihost->scic_lock, flags);
E
Edmund Nadolski 已提交
363 364 365 366

		if (tmf->cb_state_func != NULL)
			tmf->cb_state_func(isci_tmf_timed_out, tmf, tmf->cb_data);

367
		sci_controller_terminate_request(ihost,
368
						  idev,
369
						  ireq);
E
Edmund Nadolski 已提交
370

D
Dan Williams 已提交
371
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
372 373

		wait_for_completion(tmf->complete);
E
Edmund Nadolski 已提交
374
	}
375 376 377 378 379 380

	isci_print_tmf(tmf);

	if (tmf->status == SCI_SUCCESS)
		ret =  TMF_RESP_FUNC_COMPLETE;
	else if (tmf->status == SCI_FAILURE_IO_RESPONSE_VALID) {
D
Dan Williams 已提交
381
		dev_dbg(&ihost->pdev->dev,
382 383 384 385 386 387 388
			"%s: tmf.status == "
			"SCI_FAILURE_IO_RESPONSE_VALID\n",
			__func__);
		ret =  TMF_RESP_FUNC_COMPLETE;
	}
	/* Else - leave the default "failed" status alone. */

D
Dan Williams 已提交
389
	dev_dbg(&ihost->pdev->dev,
390 391
		"%s: completed request = %p\n",
		__func__,
D
Dan Williams 已提交
392
		ireq);
393 394

	return ret;
395 396 397 398 399 400 401

 err_tci:
	spin_lock_irqsave(&ihost->scic_lock, flags);
	isci_tci_free(ihost, ISCI_TAG_TCI(tag));
	spin_unlock_irqrestore(&ihost->scic_lock, flags);

	return ret;
402 403 404 405 406 407 408 409
}

void isci_task_build_tmf(
	struct isci_tmf *tmf,
	enum isci_tmf_function_codes code,
	void (*tmf_sent_cb)(enum isci_tmf_cb_state,
			    struct isci_tmf *,
			    void *),
410
	void *cb_data)
411 412 413 414 415
{
	memset(tmf, 0, sizeof(*tmf));

	tmf->tmf_code      = code;
	tmf->cb_state_func = tmf_sent_cb;
416 417
	tmf->cb_data       = cb_data;
}
418

D
Dan Williams 已提交
419
static void isci_task_build_abort_task_tmf(
420 421 422 423 424 425 426
	struct isci_tmf *tmf,
	enum isci_tmf_function_codes code,
	void (*tmf_sent_cb)(enum isci_tmf_cb_state,
			    struct isci_tmf *,
			    void *),
	struct isci_request *old_request)
{
427
	isci_task_build_tmf(tmf, code, tmf_sent_cb,
428 429
			    (void *)old_request);
	tmf->io_tag = old_request->io_tag;
430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466
}

/**
 * isci_task_validate_request_to_abort() - This function checks the given I/O
 *    against the "started" state.  If the request is still "started", it's
 *    state is changed to aborted. NOTE: isci_host->scic_lock MUST BE HELD
 *    BEFORE CALLING THIS FUNCTION.
 * @isci_request: This parameter specifies the request object to control.
 * @isci_host: This parameter specifies the ISCI host object
 * @isci_device: This is the device to which the request is pending.
 * @aborted_io_completion: This is a completion structure that will be added to
 *    the request in case it is changed to aborting; this completion is
 *    triggered when the request is fully completed.
 *
 * Either "started" on successful change of the task status to "aborted", or
 * "unallocated" if the task cannot be controlled.
 */
static enum isci_request_status isci_task_validate_request_to_abort(
	struct isci_request *isci_request,
	struct isci_host *isci_host,
	struct isci_remote_device *isci_device,
	struct completion *aborted_io_completion)
{
	enum isci_request_status old_state = unallocated;

	/* Only abort the task if it's in the
	 *  device's request_in_process list
	 */
	if (isci_request && !list_empty(&isci_request->dev_node)) {
		old_state = isci_request_change_started_to_aborted(
			isci_request, aborted_io_completion);

	}

	return old_state;
}

467 468 469 470 471 472 473 474
/**
* isci_request_cleanup_completed_loiterer() - This function will take care of
*    the final cleanup on any request which has been explicitly terminated.
* @isci_host: This parameter specifies the ISCI host object
* @isci_device: This is the device to which the request is pending.
* @isci_request: This parameter specifies the terminated request object.
* @task: This parameter is the libsas I/O request.
*/
475
static void isci_request_cleanup_completed_loiterer(
476
	struct isci_host          *isci_host,
477
	struct isci_remote_device *isci_device,
478 479
	struct isci_request       *isci_request,
	struct sas_task           *task)
480
{
481
	unsigned long flags;
482 483 484

	dev_dbg(&isci_host->pdev->dev,
		"%s: isci_device=%p, request=%p, task=%p\n",
485
		__func__, isci_device, isci_request, task);
486

487 488 489 490 491
	if (task != NULL) {

		spin_lock_irqsave(&task->task_state_lock, flags);
		task->lldd_task = NULL;

492 493
		task->task_state_flags &= ~SAS_TASK_NEED_DEV_RESET;

494 495 496 497 498 499 500 501 502 503
		isci_set_task_doneflags(task);

		/* If this task is not in the abort path, call task_done. */
		if (!(task->task_state_flags & SAS_TASK_STATE_ABORTED)) {

			spin_unlock_irqrestore(&task->task_state_lock, flags);
			task->task_done(task);
		} else
			spin_unlock_irqrestore(&task->task_state_lock, flags);
	}
504

505 506 507 508
	if (isci_request != NULL) {
		spin_lock_irqsave(&isci_host->scic_lock, flags);
		list_del_init(&isci_request->dev_node);
		spin_unlock_irqrestore(&isci_host->scic_lock, flags);
509 510 511
	}
}

512 513 514 515 516
/**
 * isci_terminate_request_core() - This function will terminate the given
 *    request, and wait for it to complete.  This function must only be called
 *    from a thread that can wait.  Note that the request is terminated and
 *    completed (back to the host, if started there).
517
 * @ihost: This SCU.
518
 * @idev: The target.
519 520 521
 * @isci_request: The I/O request to be terminated.
 *
 */
522 523 524
static void isci_terminate_request_core(struct isci_host *ihost,
					struct isci_remote_device *idev,
					struct isci_request *isci_request)
525
{
526
	enum sci_status status      = SCI_SUCCESS;
527 528 529
	bool was_terminated         = false;
	bool needs_cleanup_handling = false;
	enum isci_request_status request_status;
530 531 532 533
	unsigned long     flags;
	unsigned long     termination_completed = 1;
	struct completion *io_request_completion;
	struct sas_task   *task;
534

535
	dev_dbg(&ihost->pdev->dev,
536
		"%s: device = %p; request = %p\n",
537
		__func__, idev, isci_request);
538

539
	spin_lock_irqsave(&ihost->scic_lock, flags);
540

541 542 543 544 545 546
	io_request_completion = isci_request->io_request_completion;

	task = (isci_request->ttype == io_task)
		? isci_request_access_task(isci_request)
		: NULL;

547
	/* Note that we are not going to control
D
Dan Williams 已提交
548 549 550
	 * the target to abort the request.
	 */
	set_bit(IREQ_COMPLETE_IN_TARGET, &isci_request->flags);
551

552 553 554 555
	/* Make sure the request wasn't just sitting around signalling
	 * device condition (if the request handle is NULL, then the
	 * request completed but needed additional handling here).
	 */
D
Dan Williams 已提交
556
	if (!test_bit(IREQ_TERMINATED, &isci_request->flags)) {
557
		was_terminated = true;
558
		needs_cleanup_handling = true;
559
		status = sci_controller_terminate_request(ihost,
560 561
							   idev,
							   isci_request);
562
	}
563
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
564 565 566 567 568 569

	/*
	 * The only time the request to terminate will
	 * fail is when the io request is completed and
	 * being aborted.
	 */
570
	if (status != SCI_SUCCESS) {
571
		dev_err(&ihost->pdev->dev,
572
			"%s: sci_controller_terminate_request"
573
			" returned = 0x%x\n",
574 575
			__func__, status);

576 577 578
		isci_request->io_request_completion = NULL;

	} else {
579
		if (was_terminated) {
580
			dev_dbg(&ihost->pdev->dev,
581 582
				"%s: before completion wait (%p/%p)\n",
				__func__, isci_request, io_request_completion);
583 584

			/* Wait here for the request to complete. */
585 586
			#define TERMINATION_TIMEOUT_MSEC 500
			termination_completed
587
				= wait_for_completion_timeout(
588
				   io_request_completion,
589 590
				   msecs_to_jiffies(TERMINATION_TIMEOUT_MSEC));

591 592 593
			if (!termination_completed) {

				/* The request to terminate has timed out.  */
594
				spin_lock_irqsave(&ihost->scic_lock,
595 596 597
						  flags);

				/* Check for state changes. */
D
Dan Williams 已提交
598
				if (!test_bit(IREQ_TERMINATED, &isci_request->flags)) {
599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623

					/* The best we can do is to have the
					 * request die a silent death if it
					 * ever really completes.
					 *
					 * Set the request state to "dead",
					 * and clear the task pointer so that
					 * an actual completion event callback
					 * doesn't do anything.
					 */
					isci_request->status = dead;
					isci_request->io_request_completion
						= NULL;

					if (isci_request->ttype == io_task) {

						/* Break links with the
						* sas_task.
						*/
						isci_request->ttype_ptr.io_task_ptr
							= NULL;
					}
				} else
					termination_completed = 1;

624
				spin_unlock_irqrestore(&ihost->scic_lock,
625
						       flags);
626

627
				if (!termination_completed) {
628

629
					dev_err(&ihost->pdev->dev,
630 631 632 633
						"%s: *** Timeout waiting for "
						"termination(%p/%p)\n",
						__func__, io_request_completion,
						isci_request);
634

635 636 637 638 639 640 641 642
					/* The request can no longer be referenced
					 * safely since it may go away if the
					 * termination every really does complete.
					 */
					isci_request = NULL;
				}
			}
			if (termination_completed)
643
				dev_dbg(&ihost->pdev->dev,
644 645
					"%s: after completion wait (%p/%p)\n",
					__func__, isci_request, io_request_completion);
646 647
		}

648
		if (termination_completed) {
649

650
			isci_request->io_request_completion = NULL;
651

652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674
			/* Peek at the status of the request.  This will tell
			 * us if there was special handling on the request such that it
			 * needs to be detached and freed here.
			 */
			spin_lock_irqsave(&isci_request->state_lock, flags);
			request_status = isci_request_get_state(isci_request);

			if ((isci_request->ttype == io_task) /* TMFs are in their own thread */
			    && ((request_status == aborted)
				|| (request_status == aborting)
				|| (request_status == terminating)
				|| (request_status == completed)
				|| (request_status == dead)
				)
			    ) {

				/* The completion routine won't free a request in
				 * the aborted/aborting/etc. states, so we do
				 * it here.
				 */
				needs_cleanup_handling = true;
			}
			spin_unlock_irqrestore(&isci_request->state_lock, flags);
675

676 677 678
		}
		if (needs_cleanup_handling)
			isci_request_cleanup_completed_loiterer(
679
				ihost, idev, isci_request, task);
680
	}
681 682 683 684 685 686 687 688 689
}

/**
 * isci_terminate_pending_requests() - This function will change the all of the
 *    requests on the given device's state to "aborting", will terminate the
 *    requests, and wait for them to complete.  This function must only be
 *    called from a thread that can wait.  Note that the requests are all
 *    terminated and completed (back to the host, if started there).
 * @isci_host: This parameter specifies SCU.
690
 * @idev: This parameter specifies the target.
691 692
 *
 */
693 694
void isci_terminate_pending_requests(struct isci_host *ihost,
				     struct isci_remote_device *idev)
695
{
696
	struct completion request_completion;
697
	enum isci_request_status old_state;
698 699
	unsigned long flags;
	LIST_HEAD(list);
700

701 702
	spin_lock_irqsave(&ihost->scic_lock, flags);
	list_splice_init(&idev->reqs_in_process, &list);
703

704 705 706
	/* assumes that isci_terminate_request_core deletes from the list */
	while (!list_empty(&list)) {
		struct isci_request *ireq = list_entry(list.next, typeof(*ireq), dev_node);
707

708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727
		/* Change state to "terminating" if it is currently
		 * "started".
		 */
		old_state = isci_request_change_started_to_newstate(ireq,
								    &request_completion,
								    terminating);
		switch (old_state) {
		case started:
		case completed:
		case aborting:
			break;
		default:
			/* termination in progress, or otherwise dispositioned.
			 * We know the request was on 'list' so should be safe
			 * to move it back to reqs_in_process
			 */
			list_move(&ireq->dev_node, &idev->reqs_in_process);
			ireq = NULL;
			break;
		}
728

729 730 731
		if (!ireq)
			continue;
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
732

733
		init_completion(&request_completion);
734

735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762
		dev_dbg(&ihost->pdev->dev,
			 "%s: idev=%p request=%p; task=%p old_state=%d\n",
			 __func__, idev, ireq,
			ireq->ttype == io_task ? isci_request_access_task(ireq) : NULL,
			old_state);

		/* If the old_state is started:
		 * This request was not already being aborted. If it had been,
		 * then the aborting I/O (ie. the TMF request) would not be in
		 * the aborting state, and thus would be terminated here.  Note
		 * that since the TMF completion's call to the kernel function
		 * "complete()" does not happen until the pending I/O request
		 * terminate fully completes, we do not have to implement a
		 * special wait here for already aborting requests - the
		 * termination of the TMF request will force the request
		 * to finish it's already started terminate.
		 *
		 * If old_state == completed:
		 * This request completed from the SCU hardware perspective
		 * and now just needs cleaning up in terms of freeing the
		 * request and potentially calling up to libsas.
		 *
		 * If old_state == aborting:
		 * This request has already gone through a TMF timeout, but may
		 * not have been terminated; needs cleaning up at least.
		 */
		isci_terminate_request_core(ihost, idev, ireq);
		spin_lock_irqsave(&ihost->scic_lock, flags);
763
	}
764
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789
}

/**
 * isci_task_send_lu_reset_sas() - This function is called by of the SAS Domain
 *    Template functions.
 * @lun: This parameter specifies the lun to be reset.
 *
 * status, zero indicates success.
 */
static int isci_task_send_lu_reset_sas(
	struct isci_host *isci_host,
	struct isci_remote_device *isci_device,
	u8 *lun)
{
	struct isci_tmf tmf;
	int ret = TMF_RESP_FUNC_FAILED;

	dev_dbg(&isci_host->pdev->dev,
		"%s: isci_host = %p, isci_device = %p\n",
		__func__, isci_host, isci_device);
	/* Send the LUN reset to the target.  By the time the call returns,
	 * the TMF has fully exected in the target (in which case the return
	 * value is "TMF_RESP_FUNC_COMPLETE", or the request timed-out (or
	 * was otherwise unable to be executed ("TMF_RESP_FUNC_FAILED").
	 */
790
	isci_task_build_tmf(&tmf, isci_tmf_ssp_lun_reset, NULL, NULL);
791 792

	#define ISCI_LU_RESET_TIMEOUT_MS 2000 /* 2 second timeout. */
793
	ret = isci_task_execute_tmf(isci_host, isci_device, &tmf, ISCI_LU_RESET_TIMEOUT_MS);
794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813 814 815

	if (ret == TMF_RESP_FUNC_COMPLETE)
		dev_dbg(&isci_host->pdev->dev,
			"%s: %p: TMF_LU_RESET passed\n",
			__func__, isci_device);
	else
		dev_dbg(&isci_host->pdev->dev,
			"%s: %p: TMF_LU_RESET failed (%x)\n",
			__func__, isci_device, ret);

	return ret;
}

/**
 * isci_task_lu_reset() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas,
 *    to reset the given lun. Note the assumption that while this call is
 *    executing, no I/O will be sent by the host to the device.
 * @lun: This parameter specifies the lun to be reset.
 *
 * status, zero indicates success.
 */
816
int isci_task_lu_reset(struct domain_device *domain_device, u8 *lun)
817
{
818
	struct isci_host *isci_host = dev_to_ihost(domain_device);
819 820
	struct isci_remote_device *isci_device;
	unsigned long flags;
821 822
	int ret;

823 824 825
	spin_lock_irqsave(&isci_host->scic_lock, flags);
	isci_device = isci_lookup_device(domain_device);
	spin_unlock_irqrestore(&isci_host->scic_lock, flags);
826

827 828
	dev_dbg(&isci_host->pdev->dev,
		"%s: domain_device=%p, isci_host=%p; isci_device=%p\n",
829 830
		 __func__, domain_device, isci_host, isci_device);

831
	if (isci_device)
D
Dan Williams 已提交
832
		set_bit(IDEV_EH, &isci_device->flags);
833 834 835 836 837

	/* If there is a device reset pending on any request in the
	 * device's list, fail this LUN reset request in order to
	 * escalate to the device reset.
	 */
838
	if (!isci_device ||
839
	    isci_device_is_reset_pending(isci_host, isci_device)) {
840
		dev_warn(&isci_host->pdev->dev,
841
			 "%s: No dev (%p), or "
842
			 "RESET PENDING: domain_device=%p\n",
843
			 __func__, isci_device, domain_device);
844 845
		ret = TMF_RESP_FUNC_FAILED;
		goto out;
846 847 848 849
	}

	/* Send the task management part of the reset. */
	if (sas_protocol_ata(domain_device->tproto)) {
850
		ret = isci_task_send_lu_reset_sata(isci_host, isci_device, lun);
851 852 853 854 855 856 857
	} else
		ret = isci_task_send_lu_reset_sas(isci_host, isci_device, lun);

	/* If the LUN reset worked, all the I/O can now be terminated. */
	if (ret == TMF_RESP_FUNC_COMPLETE)
		/* Terminate all I/O now. */
		isci_terminate_pending_requests(isci_host,
858
						isci_device);
859

860 861
 out:
	isci_put_device(isci_device);
862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910
	return ret;
}


/*	 int (*lldd_clear_nexus_port)(struct asd_sas_port *); */
int isci_task_clear_nexus_port(struct asd_sas_port *port)
{
	return TMF_RESP_FUNC_FAILED;
}



int isci_task_clear_nexus_ha(struct sas_ha_struct *ha)
{
	return TMF_RESP_FUNC_FAILED;
}

/* Task Management Functions. Must be called from process context.	 */

/**
 * isci_abort_task_process_cb() - This is a helper function for the abort task
 *    TMF command.  It manages the request state with respect to the successful
 *    transmission / completion of the abort task request.
 * @cb_state: This parameter specifies when this function was called - after
 *    the TMF request has been started and after it has timed-out.
 * @tmf: This parameter specifies the TMF in progress.
 *
 *
 */
static void isci_abort_task_process_cb(
	enum isci_tmf_cb_state cb_state,
	struct isci_tmf *tmf,
	void *cb_data)
{
	struct isci_request *old_request;

	old_request = (struct isci_request *)cb_data;

	dev_dbg(&old_request->isci_host->pdev->dev,
		"%s: tmf=%p, old_request=%p\n",
		__func__, tmf, old_request);

	switch (cb_state) {

	case isci_tmf_started:
		/* The TMF has been started.  Nothing to do here, since the
		 * request state was already set to "aborted" by the abort
		 * task function.
		 */
911 912 913 914 915
		if ((old_request->status != aborted)
			&& (old_request->status != completed))
			dev_err(&old_request->isci_host->pdev->dev,
				"%s: Bad request status (%d): tmf=%p, old_request=%p\n",
				__func__, old_request->status, tmf, old_request);
916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946
		break;

	case isci_tmf_timed_out:

		/* Set the task's state to "aborting", since the abort task
		 * function thread set it to "aborted" (above) in anticipation
		 * of the task management request working correctly.  Since the
		 * timeout has now fired, the TMF request failed.  We set the
		 * state such that the request completion will indicate the
		 * device is no longer present.
		 */
		isci_request_change_state(old_request, aborting);
		break;

	default:
		dev_err(&old_request->isci_host->pdev->dev,
			"%s: Bad cb_state (%d): tmf=%p, old_request=%p\n",
			__func__, cb_state, tmf, old_request);
		break;
	}
}

/**
 * isci_task_abort_task() - This function is one of the SAS Domain Template
 *    functions. This function is called by libsas to abort a specified task.
 * @task: This parameter specifies the SAS task to abort.
 *
 * status, zero indicates success.
 */
int isci_task_abort_task(struct sas_task *task)
{
947
	struct isci_host *isci_host = dev_to_ihost(task->dev);
948
	DECLARE_COMPLETION_ONSTACK(aborted_io_completion);
949 950
	struct isci_request       *old_request = NULL;
	enum isci_request_status  old_state;
951
	struct isci_remote_device *isci_device = NULL;
952 953 954 955
	struct isci_tmf           tmf;
	int                       ret = TMF_RESP_FUNC_FAILED;
	unsigned long             flags;
	bool                      any_dev_reset = false;
956 957 958 959 960 961

	/* Get the isci_request reference from the task.  Note that
	 * this check does not depend on the pending request list
	 * in the device, because tasks driving resets may land here
	 * after completion in the core.
	 */
962 963 964 965 966 967 968 969 970 971 972 973 974
	spin_lock_irqsave(&isci_host->scic_lock, flags);
	spin_lock(&task->task_state_lock);

	old_request = task->lldd_task;

	/* If task is already done, the request isn't valid */
	if (!(task->task_state_flags & SAS_TASK_STATE_DONE) &&
	    (task->task_state_flags & SAS_TASK_AT_INITIATOR) &&
	    old_request)
		isci_device = isci_lookup_device(task->dev);

	spin_unlock(&task->task_state_lock);
	spin_unlock_irqrestore(&isci_host->scic_lock, flags);
975 976 977 978

	dev_dbg(&isci_host->pdev->dev,
		"%s: task = %p\n", __func__, task);

979 980
	if (!isci_device || !old_request)
		goto out;
981

D
Dan Williams 已提交
982 983
	set_bit(IDEV_EH, &isci_device->flags);

984 985 986 987
	/* This version of the driver will fail abort requests for
	 * SATA/STP.  Failing the abort request this way will cause the
	 * SCSI error handler thread to escalate to LUN reset
	 */
988
	if (sas_protocol_ata(task->task_proto)) {
989 990 991 992
		dev_warn(&isci_host->pdev->dev,
			    " task %p is for a STP/SATA device;"
			    " returning TMF_RESP_FUNC_FAILED\n"
			    " to cause a LUN reset...\n", task);
993
		goto out;
994 995 996 997 998
	}

	dev_dbg(&isci_host->pdev->dev,
		"%s: old_request == %p\n", __func__, old_request);

999
	any_dev_reset = isci_device_is_reset_pending(isci_host,isci_device);
1000

1001 1002
	spin_lock_irqsave(&task->task_state_lock, flags);

1003
	any_dev_reset = any_dev_reset || (task->task_state_flags & SAS_TASK_NEED_DEV_RESET);
1004 1005 1006 1007 1008 1009

	/* If the extraction of the request reference from the task
	 * failed, then the request has been completed (or if there is a
	 * pending reset then this abort request function must be failed
	 * in order to escalate to the target reset).
	 */
1010
	if ((old_request == NULL) || any_dev_reset) {
1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022

		/* If the device reset task flag is set, fail the task
		 * management request.  Otherwise, the original request
		 * has completed.
		 */
		if (any_dev_reset) {

			/* Turn off the task's DONE to make sure this
			 * task is escalated to a target reset.
			 */
			task->task_state_flags &= ~SAS_TASK_STATE_DONE;

1023 1024 1025 1026 1027
			/* Make the reset happen as soon as possible. */
			task->task_state_flags |= SAS_TASK_NEED_DEV_RESET;

			spin_unlock_irqrestore(&task->task_state_lock, flags);

1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040
			/* Fail the task management request in order to
			 * escalate to the target reset.
			 */
			ret = TMF_RESP_FUNC_FAILED;

			dev_dbg(&isci_host->pdev->dev,
				"%s: Failing task abort in order to "
				"escalate to target reset because\n"
				"SAS_TASK_NEED_DEV_RESET is set for "
				"task %p on dev %p\n",
				__func__, task, isci_device);


1041
		} else {
1042 1043 1044 1045 1046 1047 1048
			/* The request has already completed and there
			 * is nothing to do here other than to set the task
			 * done bit, and indicate that the task abort function
			 * was sucessful.
			 */
			isci_set_task_doneflags(task);

1049
			spin_unlock_irqrestore(&task->task_state_lock, flags);
1050

1051
			ret = TMF_RESP_FUNC_COMPLETE;
1052

1053 1054 1055
			dev_dbg(&isci_host->pdev->dev,
				"%s: abort task not needed for %p\n",
				__func__, task);
1056
		}
1057
		goto out;
1058
	}
1059 1060
	else
		spin_unlock_irqrestore(&task->task_state_lock, flags);
1061 1062 1063

	spin_lock_irqsave(&isci_host->scic_lock, flags);

1064
	/* Check the request status and change to "aborted" if currently
1065
	 * "starting"; if true then set the I/O kernel completion
1066 1067
	 * struct that will be triggered when the request completes.
	 */
1068 1069 1070
	old_state = isci_task_validate_request_to_abort(
				old_request, isci_host, isci_device,
				&aborted_io_completion);
1071 1072 1073
	if ((old_state != started) &&
	    (old_state != completed) &&
	    (old_state != aborting)) {
1074 1075 1076

		spin_unlock_irqrestore(&isci_host->scic_lock, flags);

1077 1078 1079 1080 1081 1082 1083
		/* The request was already being handled by someone else (because
		* they got to set the state away from started).
		*/
		dev_dbg(&isci_host->pdev->dev,
			"%s:  device = %p; old_request %p already being aborted\n",
			__func__,
			isci_device, old_request);
1084 1085
		ret = TMF_RESP_FUNC_COMPLETE;
		goto out;
1086
	}
D
Dan Williams 已提交
1087 1088
	if (task->task_proto == SAS_PROTOCOL_SMP ||
	    test_bit(IREQ_COMPLETE_IN_TARGET, &old_request->flags)) {
1089 1090 1091

		spin_unlock_irqrestore(&isci_host->scic_lock, flags);

1092 1093 1094 1095
		dev_dbg(&isci_host->pdev->dev,
			"%s: SMP request (%d)"
			" or complete_in_target (%d), thus no TMF\n",
			__func__, (task->task_proto == SAS_PROTOCOL_SMP),
D
Dan Williams 已提交
1096
			test_bit(IREQ_COMPLETE_IN_TARGET, &old_request->flags));
1097

1098 1099 1100 1101 1102 1103
		/* Set the state on the task. */
		isci_task_all_done(task);

		ret = TMF_RESP_FUNC_COMPLETE;

		/* Stopping and SMP devices are not sent a TMF, and are not
1104
		 * reset, but the outstanding I/O request is terminated below.
1105 1106 1107
		 */
	} else {
		/* Fill in the tmf stucture */
1108
		isci_task_build_abort_task_tmf(&tmf, isci_tmf_ssp_task_abort,
1109 1110
					       isci_abort_task_process_cb,
					       old_request);
1111 1112 1113 1114

		spin_unlock_irqrestore(&isci_host->scic_lock, flags);

		#define ISCI_ABORT_TASK_TIMEOUT_MS 500 /* half second timeout. */
1115
		ret = isci_task_execute_tmf(isci_host, isci_device, &tmf,
1116 1117
					    ISCI_ABORT_TASK_TIMEOUT_MS);

1118
		if (ret != TMF_RESP_FUNC_COMPLETE)
1119 1120 1121 1122
			dev_err(&isci_host->pdev->dev,
				"%s: isci_task_send_tmf failed\n",
				__func__);
	}
1123
	if (ret == TMF_RESP_FUNC_COMPLETE) {
D
Dan Williams 已提交
1124
		set_bit(IREQ_COMPLETE_IN_TARGET, &old_request->flags);
1125

1126 1127 1128
		/* Clean up the request on our side, and wait for the aborted
		 * I/O to complete.
		 */
1129
		isci_terminate_request_core(isci_host, isci_device, old_request);
1130
	}
1131

1132 1133
	/* Make sure we do not leave a reference to aborted_io_completion */
	old_request->io_request_completion = NULL;
1134 1135
 out:
	isci_put_device(isci_device);
1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213
	return ret;
}

/**
 * isci_task_abort_task_set() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas,
 *    to abort all task for the given lun.
 * @d_device: This parameter specifies the domain device associated with this
 *    request.
 * @lun: This parameter specifies the lun associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_abort_task_set(
	struct domain_device *d_device,
	u8 *lun)
{
	return TMF_RESP_FUNC_FAILED;
}


/**
 * isci_task_clear_aca() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas.
 * @d_device: This parameter specifies the domain device associated with this
 *    request.
 * @lun: This parameter specifies the lun	 associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_clear_aca(
	struct domain_device *d_device,
	u8 *lun)
{
	return TMF_RESP_FUNC_FAILED;
}



/**
 * isci_task_clear_task_set() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas.
 * @d_device: This parameter specifies the domain device associated with this
 *    request.
 * @lun: This parameter specifies the lun	 associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_clear_task_set(
	struct domain_device *d_device,
	u8 *lun)
{
	return TMF_RESP_FUNC_FAILED;
}


/**
 * isci_task_query_task() - This function is implemented to cause libsas to
 *    correctly escalate the failed abort to a LUN or target reset (this is
 *    because sas_scsi_find_task libsas function does not correctly interpret
 *    all return codes from the abort task call).  When TMF_RESP_FUNC_SUCC is
 *    returned, libsas turns this into a LUN reset; when FUNC_FAILED is
 *    returned, libsas will turn this into a target reset
 * @task: This parameter specifies the sas task being queried.
 * @lun: This parameter specifies the lun associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_query_task(
	struct sas_task *task)
{
	/* See if there is a pending device reset for this device. */
	if (task->task_state_flags & SAS_TASK_NEED_DEV_RESET)
		return TMF_RESP_FUNC_FAILED;
	else
		return TMF_RESP_FUNC_SUCC;
}

1214
/*
1215 1216
 * isci_task_request_complete() - This function is called by the sci core when
 *    an task request completes.
1217 1218
 * @ihost: This parameter specifies the ISCI host object
 * @ireq: This parameter is the completed isci_request object.
1219 1220 1221 1222 1223
 * @completion_status: This parameter specifies the completion status from the
 *    sci core.
 *
 * none.
 */
1224 1225 1226 1227
void
isci_task_request_complete(struct isci_host *ihost,
			   struct isci_request *ireq,
			   enum sci_task_status completion_status)
1228
{
1229
	struct isci_tmf *tmf = isci_request_access_tmf(ireq);
1230 1231
	struct completion *tmf_complete;

1232
	dev_dbg(&ihost->pdev->dev,
1233
		"%s: request = %p, status=%d\n",
1234
		__func__, ireq, completion_status);
1235

1236
	isci_request_change_state(ireq, completed);
1237 1238

	tmf->status = completion_status;
D
Dan Williams 已提交
1239
	set_bit(IREQ_COMPLETE_IN_TARGET, &ireq->flags);
1240

1241
	if (tmf->proto == SAS_PROTOCOL_SSP) {
1242
		memcpy(&tmf->resp.resp_iu,
1243
		       &ireq->ssp.rsp,
1244 1245
		       SSP_RESP_IU_MAX_SIZE);
	} else if (tmf->proto == SAS_PROTOCOL_SATA) {
1246
		memcpy(&tmf->resp.d2h_fis,
1247
		       &ireq->stp.rsp,
1248
		       sizeof(struct dev_to_host_fis));
1249 1250 1251 1252 1253
	}

	/* PRINT_TMF( ((struct isci_tmf *)request->task)); */
	tmf_complete = tmf->complete;

1254
	sci_controller_complete_io(ihost, ireq->target_device, ireq);
1255
	/* set the 'terminated' flag handle to make sure it cannot be terminated
1256 1257
	 *  or completed again.
	 */
D
Dan Williams 已提交
1258
	set_bit(IREQ_TERMINATED, &ireq->flags);
1259

1260 1261
	isci_request_change_state(ireq, unallocated);
	list_del_init(&ireq->dev_node);
1262 1263 1264 1265 1266

	/* The task management part completes last. */
	complete(tmf_complete);
}

1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504
static void isci_smp_task_timedout(unsigned long _task)
{
	struct sas_task *task = (void *) _task;
	unsigned long flags;

	spin_lock_irqsave(&task->task_state_lock, flags);
	if (!(task->task_state_flags & SAS_TASK_STATE_DONE))
		task->task_state_flags |= SAS_TASK_STATE_ABORTED;
	spin_unlock_irqrestore(&task->task_state_lock, flags);

	complete(&task->completion);
}

static void isci_smp_task_done(struct sas_task *task)
{
	if (!del_timer(&task->timer))
		return;
	complete(&task->completion);
}

static struct sas_task *isci_alloc_task(void)
{
	struct sas_task *task = kzalloc(sizeof(*task), GFP_KERNEL);

	if (task) {
		INIT_LIST_HEAD(&task->list);
		spin_lock_init(&task->task_state_lock);
		task->task_state_flags = SAS_TASK_STATE_PENDING;
		init_timer(&task->timer);
		init_completion(&task->completion);
	}

	return task;
}

static void isci_free_task(struct isci_host *ihost, struct sas_task  *task)
{
	if (task) {
		BUG_ON(!list_empty(&task->list));
		kfree(task);
	}
}

static int isci_smp_execute_task(struct isci_host *ihost,
				 struct domain_device *dev, void *req,
				 int req_size, void *resp, int resp_size)
{
	int res, retry;
	struct sas_task *task = NULL;

	for (retry = 0; retry < 3; retry++) {
		task = isci_alloc_task();
		if (!task)
			return -ENOMEM;

		task->dev = dev;
		task->task_proto = dev->tproto;
		sg_init_one(&task->smp_task.smp_req, req, req_size);
		sg_init_one(&task->smp_task.smp_resp, resp, resp_size);

		task->task_done = isci_smp_task_done;

		task->timer.data = (unsigned long) task;
		task->timer.function = isci_smp_task_timedout;
		task->timer.expires = jiffies + 10*HZ;
		add_timer(&task->timer);

		res = isci_task_execute_task(task, 1, GFP_KERNEL);

		if (res) {
			del_timer(&task->timer);
			dev_err(&ihost->pdev->dev,
				"%s: executing SMP task failed:%d\n",
				__func__, res);
			goto ex_err;
		}

		wait_for_completion(&task->completion);
		res = -ECOMM;
		if ((task->task_state_flags & SAS_TASK_STATE_ABORTED)) {
			dev_err(&ihost->pdev->dev,
				"%s: smp task timed out or aborted\n",
				__func__);
			isci_task_abort_task(task);
			if (!(task->task_state_flags & SAS_TASK_STATE_DONE)) {
				dev_err(&ihost->pdev->dev,
					"%s: SMP task aborted and not done\n",
					__func__);
				goto ex_err;
			}
		}
		if (task->task_status.resp == SAS_TASK_COMPLETE &&
		    task->task_status.stat == SAM_STAT_GOOD) {
			res = 0;
			break;
		}
		if (task->task_status.resp == SAS_TASK_COMPLETE &&
		      task->task_status.stat == SAS_DATA_UNDERRUN) {
			/* no error, but return the number of bytes of
			* underrun */
			res = task->task_status.residual;
			break;
		}
		if (task->task_status.resp == SAS_TASK_COMPLETE &&
		      task->task_status.stat == SAS_DATA_OVERRUN) {
			res = -EMSGSIZE;
			break;
		} else {
			dev_err(&ihost->pdev->dev,
				"%s: task to dev %016llx response: 0x%x "
				"status 0x%x\n", __func__,
				SAS_ADDR(dev->sas_addr),
				task->task_status.resp,
				task->task_status.stat);
			isci_free_task(ihost, task);
			task = NULL;
		}
	}
ex_err:
	BUG_ON(retry == 3 && task != NULL);
	isci_free_task(ihost, task);
	return res;
}

#define DISCOVER_REQ_SIZE  16
#define DISCOVER_RESP_SIZE 56

int isci_smp_get_phy_attached_dev_type(struct isci_host *ihost,
				       struct domain_device *dev,
				       int phy_id, int *adt)
{
	struct smp_resp *disc_resp;
	u8 *disc_req;
	int res;

	disc_resp = kzalloc(DISCOVER_RESP_SIZE, GFP_KERNEL);
	if (!disc_resp)
		return -ENOMEM;

	disc_req = kzalloc(DISCOVER_REQ_SIZE, GFP_KERNEL);
	if (disc_req) {
		disc_req[0] = SMP_REQUEST;
		disc_req[1] = SMP_DISCOVER;
		disc_req[9] = phy_id;
	} else {
		kfree(disc_resp);
		return -ENOMEM;
	}
	res = isci_smp_execute_task(ihost, dev, disc_req, DISCOVER_REQ_SIZE,
				    disc_resp, DISCOVER_RESP_SIZE);
	if (!res) {
		if (disc_resp->result != SMP_RESP_FUNC_ACC)
			res = disc_resp->result;
		else
			*adt = disc_resp->disc.attached_dev_type;
	}
	kfree(disc_req);
	kfree(disc_resp);

	return res;
}

static void isci_wait_for_smp_phy_reset(struct isci_remote_device *idev, int phy_num)
{
	struct domain_device *dev = idev->domain_dev;
	struct isci_port *iport = idev->isci_port;
	struct isci_host *ihost = iport->isci_host;
	int res, iteration = 0, attached_device_type;
	#define STP_WAIT_MSECS 25000
	unsigned long tmo = msecs_to_jiffies(STP_WAIT_MSECS);
	unsigned long deadline = jiffies + tmo;
	enum {
		SMP_PHYWAIT_PHYDOWN,
		SMP_PHYWAIT_PHYUP,
		SMP_PHYWAIT_DONE
	} phy_state = SMP_PHYWAIT_PHYDOWN;

	/* While there is time, wait for the phy to go away and come back */
	while (time_is_after_jiffies(deadline) && phy_state != SMP_PHYWAIT_DONE) {
		int event = atomic_read(&iport->event);

		++iteration;

		tmo = wait_event_timeout(ihost->eventq,
					 event != atomic_read(&iport->event) ||
					 !test_bit(IPORT_BCN_BLOCKED, &iport->flags),
					 tmo);
		/* link down, stop polling */
		if (!test_bit(IPORT_BCN_BLOCKED, &iport->flags))
			break;

		dev_dbg(&ihost->pdev->dev,
			"%s: iport %p, iteration %d,"
			" phase %d: time_remaining %lu, bcns = %d\n",
			__func__, iport, iteration, phy_state,
			tmo, test_bit(IPORT_BCN_PENDING, &iport->flags));

		res = isci_smp_get_phy_attached_dev_type(ihost, dev, phy_num,
							 &attached_device_type);
		tmo = deadline - jiffies;

		if (res) {
			dev_warn(&ihost->pdev->dev,
				 "%s: iteration %d, phase %d:"
				 " SMP error=%d, time_remaining=%lu\n",
				 __func__, iteration, phy_state, res, tmo);
			break;
		}
		dev_dbg(&ihost->pdev->dev,
			"%s: iport %p, iteration %d,"
			" phase %d: time_remaining %lu, bcns = %d, "
			"attdevtype = %x\n",
			__func__, iport, iteration, phy_state,
			tmo, test_bit(IPORT_BCN_PENDING, &iport->flags),
			attached_device_type);

		switch (phy_state) {
		case SMP_PHYWAIT_PHYDOWN:
			/* Has the device gone away? */
			if (!attached_device_type)
				phy_state = SMP_PHYWAIT_PHYUP;

			break;

		case SMP_PHYWAIT_PHYUP:
			/* Has the device come back? */
			if (attached_device_type)
				phy_state = SMP_PHYWAIT_DONE;
			break;

		case SMP_PHYWAIT_DONE:
			break;
		}

	}
	dev_dbg(&ihost->pdev->dev, "%s: done\n",  __func__);
}

1505 1506
static int isci_reset_device(struct isci_host *ihost,
			     struct isci_remote_device *idev, int hard_reset)
1507
{
1508
	struct sas_phy *phy = sas_find_local_phy(idev->domain_dev);
1509
	struct isci_port *iport = idev->isci_port;
1510
	enum sci_status status;
D
Dan Williams 已提交
1511 1512
	unsigned long flags;
	int rc;
1513

D
Dan Williams 已提交
1514
	dev_dbg(&ihost->pdev->dev, "%s: idev %p\n", __func__, idev);
1515

D
Dan Williams 已提交
1516
	spin_lock_irqsave(&ihost->scic_lock, flags);
1517
	status = sci_remote_device_reset(idev);
1518
	if (status != SCI_SUCCESS) {
D
Dan Williams 已提交
1519
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
1520

D
Dan Williams 已提交
1521
		dev_warn(&ihost->pdev->dev,
1522
			 "%s: sci_remote_device_reset(%p) returned %d!\n",
D
Dan Williams 已提交
1523
			 __func__, idev, status);
1524 1525 1526

		return TMF_RESP_FUNC_FAILED;
	}
D
Dan Williams 已提交
1527
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
1528 1529

	/* Make sure all pending requests are able to be fully terminated. */
D
Dan Williams 已提交
1530
	isci_device_clear_reset_pending(ihost, idev);
1531

1532 1533 1534 1535
	/* If this is a device on an expander, disable BCN processing. */
	if (!scsi_is_sas_phy_local(phy))
		set_bit(IPORT_BCN_BLOCKED, &iport->flags);

D
Dan Williams 已提交
1536
	rc = sas_phy_reset(phy, hard_reset);
1537

D
Dan Williams 已提交
1538 1539
	/* Terminate in-progress I/O now. */
	isci_remote_device_nuke_requests(ihost, idev);
1540

1541
	/* Since all pending TCs have been cleaned, resume the RNC. */
D
Dan Williams 已提交
1542
	spin_lock_irqsave(&ihost->scic_lock, flags);
1543
	status = sci_remote_device_reset_complete(idev);
D
Dan Williams 已提交
1544
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
1545

1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559
	/* If this is a device on an expander, bring the phy back up. */
	if (!scsi_is_sas_phy_local(phy)) {
		/* A phy reset will cause the device to go away then reappear.
		 * Since libsas will take action on incoming BCNs (eg. remove
		 * a device going through an SMP phy-control driven reset),
		 * we need to wait until the phy comes back up before letting
		 * discovery proceed in libsas.
		 */
		isci_wait_for_smp_phy_reset(idev, phy->number);

		spin_lock_irqsave(&ihost->scic_lock, flags);
		isci_port_bcn_enable(ihost, idev->isci_port);
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
	}
1560

D
Dan Williams 已提交
1561 1562
	if (status != SCI_SUCCESS) {
		dev_warn(&ihost->pdev->dev,
1563
			 "%s: sci_remote_device_reset_complete(%p) "
D
Dan Williams 已提交
1564
			 "returned %d!\n", __func__, idev, status);
1565 1566
	}

D
Dan Williams 已提交
1567
	dev_dbg(&ihost->pdev->dev, "%s: idev %p complete.\n", __func__, idev);
1568

D
Dan Williams 已提交
1569 1570
	return rc;
}
1571

D
Dan Williams 已提交
1572 1573 1574 1575
int isci_task_I_T_nexus_reset(struct domain_device *dev)
{
	struct isci_host *ihost = dev_to_ihost(dev);
	struct isci_remote_device *idev;
1576
	int ret, hard_reset = 1;
D
Dan Williams 已提交
1577 1578 1579
	unsigned long flags;

	spin_lock_irqsave(&ihost->scic_lock, flags);
1580
	idev = isci_lookup_device(dev);
D
Dan Williams 已提交
1581 1582
	spin_unlock_irqrestore(&ihost->scic_lock, flags);

1583 1584 1585 1586
	if (!idev || !test_bit(IDEV_EH, &idev->flags)) {
		ret = TMF_RESP_FUNC_COMPLETE;
		goto out;
	}
D
Dan Williams 已提交
1587 1588 1589 1590

	if (dev->dev_type == SATA_DEV || (dev->tproto & SAS_PROTOCOL_STP))
		hard_reset = 0;

1591 1592 1593 1594
	ret = isci_reset_device(ihost, idev, hard_reset);
 out:
	isci_put_device(idev);
	return ret;
D
Dan Williams 已提交
1595 1596 1597 1598 1599
}

int isci_bus_reset_handler(struct scsi_cmnd *cmd)
{
	struct domain_device *dev = sdev_to_domain_dev(cmd->device);
1600 1601 1602 1603
	struct isci_host *ihost = dev_to_ihost(dev);
	struct isci_remote_device *idev;
	int ret, hard_reset = 1;
	unsigned long flags;
D
Dan Williams 已提交
1604 1605 1606

	if (dev->dev_type == SATA_DEV || (dev->tproto & SAS_PROTOCOL_STP))
		hard_reset = 0;
1607

1608 1609 1610 1611 1612 1613 1614 1615 1616 1617 1618 1619 1620
	spin_lock_irqsave(&ihost->scic_lock, flags);
	idev = isci_lookup_device(dev);
	spin_unlock_irqrestore(&ihost->scic_lock, flags);

	if (!idev) {
		ret = TMF_RESP_FUNC_COMPLETE;
		goto out;
	}

	ret = isci_reset_device(ihost, idev, hard_reset);
 out:
	isci_put_device(idev);
	return ret;
1621
}