task.c 47.7 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56
/*
 * This file is provided under a dual BSD/GPLv2 license.  When using or
 * redistributing this file, you may do so under either license.
 *
 * GPL LICENSE SUMMARY
 *
 * Copyright(c) 2008 - 2011 Intel Corporation. All rights reserved.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
 * The full GNU General Public License is included in this distribution
 * in the file called LICENSE.GPL.
 *
 * BSD LICENSE
 *
 * Copyright(c) 2008 - 2011 Intel Corporation. All rights reserved.
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 *   * Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 *   * Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in
 *     the documentation and/or other materials provided with the
 *     distribution.
 *   * Neither the name of Intel Corporation nor the names of its
 *     contributors may be used to endorse or promote products derived
 *     from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include <linux/completion.h>
57
#include <linux/irqflags.h>
58
#include "sas.h"
59
#include <scsi/libsas.h>
60 61
#include "remote_device.h"
#include "remote_node_context.h"
62 63 64 65
#include "isci.h"
#include "request.h"
#include "sata.h"
#include "task.h"
66

67
/**
68 69 70 71 72 73
* isci_task_refuse() - complete the request to the upper layer driver in
*     the case where an I/O needs to be completed back in the submit path.
* @ihost: host on which the the request was queued
* @task: request to complete
* @response: response code for the completed task.
* @status: status code for the completed task.
74 75
*
*/
76 77 78 79
static void isci_task_refuse(struct isci_host *ihost, struct sas_task *task,
			     enum service_response response,
			     enum exec_status status)

80
{
81
	enum isci_completion_selection disposition;
82

83 84 85
	disposition = isci_perform_normal_io_completion;
	disposition = isci_task_set_completion_status(task, response, status,
						      disposition);
86 87

	/* Tasks aborted specifically by a call to the lldd_abort_task
88 89 90
	 * function should not be completed to the host in the regular path.
	 */
	switch (disposition) {
91 92
		case isci_perform_normal_io_completion:
			/* Normal notification (task_done) */
93
			dev_dbg(&ihost->pdev->dev,
94 95
				"%s: Normal - task = %p, response=%d, "
				"status=%d\n",
96 97
				__func__, task, response, status);

98
			task->lldd_task = NULL;
99

100
			isci_execpath_callback(ihost, task, task->task_done);
101 102 103 104 105 106
			break;

		case isci_perform_aborted_io_completion:
			/* No notification because this request is already in the
			* abort path.
			*/
107
			dev_warn(&ihost->pdev->dev,
108 109
				 "%s: Aborted - task = %p, response=%d, "
				"status=%d\n",
110 111 112 113 114
				 __func__, task, response, status);
			break;

		case isci_perform_error_io_completion:
			/* Use sas_task_abort */
115
			dev_warn(&ihost->pdev->dev,
116 117
				 "%s: Error - task = %p, response=%d, "
				"status=%d\n",
118
				 __func__, task, response, status);
119 120

			isci_execpath_callback(ihost, task, sas_task_abort);
121 122 123
			break;

		default:
124
			dev_warn(&ihost->pdev->dev,
125 126 127 128 129 130
				 "%s: isci task notification default case!",
				 __func__);
			sas_task_abort(task);
			break;
	}
}
131

132 133 134 135
#define for_each_sas_task(num, task) \
	for (; num > 0; num--,\
	     task = list_entry(task->list.next, struct sas_task, list))

136 137 138 139 140 141 142 143 144 145 146 147
/**
 * isci_task_execute_task() - This function is one of the SAS Domain Template
 *    functions. This function is called by libsas to send a task down to
 *    hardware.
 * @task: This parameter specifies the SAS task to send.
 * @num: This parameter specifies the number of tasks to queue.
 * @gfp_flags: This parameter specifies the context of this call.
 *
 * status, zero indicates success.
 */
int isci_task_execute_task(struct sas_task *task, int num, gfp_t gfp_flags)
{
148
	struct isci_host *ihost = dev_to_ihost(task->dev);
149
	struct isci_remote_device *idev;
150 151 152
	unsigned long flags;
	int ret;
	enum sci_status status;
153
	enum isci_status device_status;
154

155
	dev_dbg(&ihost->pdev->dev, "%s: num=%d\n", __func__, num);
156 157

	/* Check if we have room for more tasks */
158
	ret = isci_host_can_queue(ihost, num);
159 160

	if (ret) {
161
		dev_warn(&ihost->pdev->dev, "%s: queue full\n", __func__);
162 163 164
		return ret;
	}

165 166
	for_each_sas_task(num, task) {
		dev_dbg(&ihost->pdev->dev,
167 168
			"task = %p, num = %d; dev = %p; cmd = %p\n",
			    task, num, task->dev, task->uldd_task);
169 170 171
		spin_lock_irqsave(&ihost->scic_lock, flags);
		idev = isci_lookup_device(task->dev);
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
172

173 174
		if (idev)
			device_status = idev->status;
175 176 177 178 179 180 181 182 183
		else
			device_status = isci_freed;

		/* From this point onward, any process that needs to guarantee
		 * that there is no kernel I/O being started will have to wait
		 * for the quiesce spinlock.
		 */

		if (device_status != isci_ready_for_io) {
184 185

			/* Forces a retry from scsi mid layer. */
186 187 188 189 190 191
			dev_dbg(&ihost->pdev->dev,
				"%s: task %p: isci_host->status = %d, "
				"device = %p; device_status = 0x%x\n\n",
				__func__,
				task,
				isci_host_get_state(ihost),
192
				idev,
193
				device_status);
194

195 196 197 198
			if (device_status == isci_ready) {
				/* Indicate QUEUE_FULL so that the scsi midlayer
				* retries.
				*/
199 200 201
				isci_task_refuse(ihost, task,
						 SAS_TASK_COMPLETE,
						 SAS_QUEUE_FULL);
202 203
			} else {
				/* Else, the device is going down. */
204 205 206
				isci_task_refuse(ihost, task,
						 SAS_TASK_UNDELIVERED,
						 SAS_DEVICE_UNKNOWN);
207
			}
208
			isci_host_can_dequeue(ihost, 1);
209 210 211
		} else {
			/* There is a device and it's ready for I/O. */
			spin_lock_irqsave(&task->task_state_lock, flags);
212

213
			if (task->task_state_flags & SAS_TASK_STATE_ABORTED) {
214

215 216
				spin_unlock_irqrestore(&task->task_state_lock,
						       flags);
217

218 219 220
				isci_task_refuse(ihost, task,
						 SAS_TASK_UNDELIVERED,
						 SAM_STAT_TASK_ABORTED);
221

222
				/* The I/O was aborted. */
223

224
			} else {
225 226
				task->task_state_flags |= SAS_TASK_AT_INITIATOR;
				spin_unlock_irqrestore(&task->task_state_lock, flags);
227 228

				/* build and send the request. */
229
				status = isci_request_execute(ihost, idev, task, gfp_flags);
230 231 232 233 234 235 236 237 238 239 240 241 242 243 244

				if (status != SCI_SUCCESS) {

					spin_lock_irqsave(&task->task_state_lock, flags);
					/* Did not really start this command. */
					task->task_state_flags &= ~SAS_TASK_AT_INITIATOR;
					spin_unlock_irqrestore(&task->task_state_lock, flags);

					/* Indicate QUEUE_FULL so that the scsi
					* midlayer retries. if the request
					* failed for remote device reasons,
					* it gets returned as
					* SAS_TASK_UNDELIVERED next time
					* through.
					*/
245 246 247 248
					isci_task_refuse(ihost, task,
							 SAS_TASK_COMPLETE,
							 SAS_QUEUE_FULL);
					isci_host_can_dequeue(ihost, 1);
249
				}
250 251
			}
		}
252
		isci_put_device(idev);
253
	}
254 255 256
	return 0;
}

D
Dan Williams 已提交
257
static struct isci_request *isci_task_request_build(struct isci_host *ihost,
258
						    struct isci_remote_device *idev,
D
Dan Williams 已提交
259
						    struct isci_tmf *isci_tmf)
260 261
{
	enum sci_status status = SCI_FAILURE;
D
Dan Williams 已提交
262
	struct isci_request *ireq = NULL;
263
	struct domain_device *dev;
264

D
Dan Williams 已提交
265
	dev_dbg(&ihost->pdev->dev,
266 267
		"%s: isci_tmf = %p\n", __func__, isci_tmf);

D
Dan Williams 已提交
268
	dev = idev->domain_dev;
269 270

	/* do common allocation and init of request object. */
271
	ireq = isci_request_alloc_tmf(ihost, isci_tmf, GFP_ATOMIC);
D
Dan Williams 已提交
272 273
	if (!ireq)
		return NULL;
274 275

	/* let the core do it's construct. */
276
	status = scic_task_request_construct(&ihost->sci, &idev->sci,
277
					     SCI_CONTROLLER_INVALID_IO_TAG,
D
Dan Williams 已提交
278
					     &ireq->sci);
279 280

	if (status != SCI_SUCCESS) {
D
Dan Williams 已提交
281
		dev_warn(&ihost->pdev->dev,
282 283 284 285 286 287 288
			 "%s: scic_task_request_construct failed - "
			 "status = 0x%x\n",
			 __func__,
			 status);
		goto errout;
	}

289 290
	/* XXX convert to get this from task->tproto like other drivers */
	if (dev->dev_type == SAS_END_DEV) {
291
		isci_tmf->proto = SAS_PROTOCOL_SSP;
D
Dan Williams 已提交
292
		status = scic_task_request_construct_ssp(&ireq->sci);
293 294 295 296
		if (status != SCI_SUCCESS)
			goto errout;
	}

297
	if (dev->dev_type == SATA_DEV || (dev->tproto & SAS_PROTOCOL_STP)) {
298
		isci_tmf->proto = SAS_PROTOCOL_SATA;
D
Dan Williams 已提交
299
		status = isci_sata_management_task_request_build(ireq);
300 301 302 303

		if (status != SCI_SUCCESS)
			goto errout;
	}
D
Dan Williams 已提交
304
	return ireq;
305
 errout:
D
Dan Williams 已提交
306 307 308
	isci_request_free(ihost, ireq);
	ireq = NULL;
	return ireq;
309 310
}

311 312 313
int isci_task_execute_tmf(struct isci_host *ihost,
			  struct isci_remote_device *isci_device,
			  struct isci_tmf *tmf, unsigned long timeout_ms)
314 315
{
	DECLARE_COMPLETION_ONSTACK(completion);
316
	enum sci_task_status status = SCI_TASK_FAILURE;
317
	struct scic_sds_remote_device *sci_device;
D
Dan Williams 已提交
318
	struct isci_request *ireq;
319 320
	int ret = TMF_RESP_FUNC_FAILED;
	unsigned long flags;
E
Edmund Nadolski 已提交
321
	unsigned long timeleft;
322 323 324 325

	/* sanity check, return TMF_RESP_FUNC_FAILED
	 * if the device is not there and ready.
	 */
326
	if (!isci_device || isci_device->status != isci_ready_for_io) {
D
Dan Williams 已提交
327
		dev_dbg(&ihost->pdev->dev,
328 329
			"%s: isci_device = %p not ready (%d)\n",
			__func__,
330
			isci_device, isci_device->status);
331 332
		return TMF_RESP_FUNC_FAILED;
	} else
D
Dan Williams 已提交
333
		dev_dbg(&ihost->pdev->dev,
334 335 336
			"%s: isci_device = %p\n",
			__func__, isci_device);

337
	sci_device = &isci_device->sci;
338 339 340 341

	/* Assign the pointer to the TMF's completion kernel wait structure. */
	tmf->complete = &completion;

342
	ireq = isci_task_request_build(ihost, isci_device, tmf);
D
Dan Williams 已提交
343 344
	if (!ireq) {
		dev_warn(&ihost->pdev->dev,
345 346 347 348 349
			"%s: isci_task_request_build failed\n",
			__func__);
		return TMF_RESP_FUNC_FAILED;
	}

D
Dan Williams 已提交
350
	spin_lock_irqsave(&ihost->scic_lock, flags);
351 352 353

	/* start the TMF io. */
	status = scic_controller_start_task(
D
Dan Williams 已提交
354
		&ihost->sci,
355
		sci_device,
D
Dan Williams 已提交
356
		&ireq->sci,
357
		SCI_CONTROLLER_INVALID_IO_TAG);
358

359
	if (status != SCI_TASK_SUCCESS) {
D
Dan Williams 已提交
360
		dev_warn(&ihost->pdev->dev,
361 362 363
			 "%s: start_io failed - status = 0x%x, request = %p\n",
			 __func__,
			 status,
D
Dan Williams 已提交
364 365
			 ireq);
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
366 367 368 369 370 371
		goto cleanup_request;
	}

	if (tmf->cb_state_func != NULL)
		tmf->cb_state_func(isci_tmf_started, tmf, tmf->cb_data);

D
Dan Williams 已提交
372
	isci_request_change_state(ireq, started);
373 374

	/* add the request to the remote device request list. */
D
Dan Williams 已提交
375
	list_add(&ireq->dev_node, &isci_device->reqs_in_process);
376

D
Dan Williams 已提交
377
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
378 379

	/* Wait for the TMF to complete, or a timeout. */
E
Edmund Nadolski 已提交
380 381 382 383
	timeleft = wait_for_completion_timeout(&completion,
				       jiffies + msecs_to_jiffies(timeout_ms));

	if (timeleft == 0) {
D
Dan Williams 已提交
384
		spin_lock_irqsave(&ihost->scic_lock, flags);
E
Edmund Nadolski 已提交
385 386 387 388

		if (tmf->cb_state_func != NULL)
			tmf->cb_state_func(isci_tmf_timed_out, tmf, tmf->cb_data);

389 390 391
		status = scic_controller_terminate_request(&ihost->sci,
							   &isci_device->sci,
							   &ireq->sci);
E
Edmund Nadolski 已提交
392

D
Dan Williams 已提交
393
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
E
Edmund Nadolski 已提交
394
	}
395 396 397 398 399 400

	isci_print_tmf(tmf);

	if (tmf->status == SCI_SUCCESS)
		ret =  TMF_RESP_FUNC_COMPLETE;
	else if (tmf->status == SCI_FAILURE_IO_RESPONSE_VALID) {
D
Dan Williams 已提交
401
		dev_dbg(&ihost->pdev->dev,
402 403 404 405 406 407 408
			"%s: tmf.status == "
			"SCI_FAILURE_IO_RESPONSE_VALID\n",
			__func__);
		ret =  TMF_RESP_FUNC_COMPLETE;
	}
	/* Else - leave the default "failed" status alone. */

D
Dan Williams 已提交
409
	dev_dbg(&ihost->pdev->dev,
410 411
		"%s: completed request = %p\n",
		__func__,
D
Dan Williams 已提交
412
		ireq);
413

D
Dan Williams 已提交
414
	if (ireq->io_request_completion != NULL) {
E
Edmund Nadolski 已提交
415
		/* A thread is waiting for this TMF to finish. */
D
Dan Williams 已提交
416
		complete(ireq->io_request_completion);
417 418 419
	}

 cleanup_request:
D
Dan Williams 已提交
420
	isci_request_free(ihost, ireq);
421 422 423 424 425 426 427 428 429
	return ret;
}

void isci_task_build_tmf(
	struct isci_tmf *tmf,
	enum isci_tmf_function_codes code,
	void (*tmf_sent_cb)(enum isci_tmf_cb_state,
			    struct isci_tmf *,
			    void *),
430
	void *cb_data)
431 432 433 434 435
{
	memset(tmf, 0, sizeof(*tmf));

	tmf->tmf_code      = code;
	tmf->cb_state_func = tmf_sent_cb;
436 437
	tmf->cb_data       = cb_data;
}
438

D
Dan Williams 已提交
439
static void isci_task_build_abort_task_tmf(
440 441 442 443 444 445 446
	struct isci_tmf *tmf,
	enum isci_tmf_function_codes code,
	void (*tmf_sent_cb)(enum isci_tmf_cb_state,
			    struct isci_tmf *,
			    void *),
	struct isci_request *old_request)
{
447
	isci_task_build_tmf(tmf, code, tmf_sent_cb,
448 449
			    (void *)old_request);
	tmf->io_tag = old_request->io_tag;
450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486
}

/**
 * isci_task_validate_request_to_abort() - This function checks the given I/O
 *    against the "started" state.  If the request is still "started", it's
 *    state is changed to aborted. NOTE: isci_host->scic_lock MUST BE HELD
 *    BEFORE CALLING THIS FUNCTION.
 * @isci_request: This parameter specifies the request object to control.
 * @isci_host: This parameter specifies the ISCI host object
 * @isci_device: This is the device to which the request is pending.
 * @aborted_io_completion: This is a completion structure that will be added to
 *    the request in case it is changed to aborting; this completion is
 *    triggered when the request is fully completed.
 *
 * Either "started" on successful change of the task status to "aborted", or
 * "unallocated" if the task cannot be controlled.
 */
static enum isci_request_status isci_task_validate_request_to_abort(
	struct isci_request *isci_request,
	struct isci_host *isci_host,
	struct isci_remote_device *isci_device,
	struct completion *aborted_io_completion)
{
	enum isci_request_status old_state = unallocated;

	/* Only abort the task if it's in the
	 *  device's request_in_process list
	 */
	if (isci_request && !list_empty(&isci_request->dev_node)) {
		old_state = isci_request_change_started_to_aborted(
			isci_request, aborted_io_completion);

	}

	return old_state;
}

487 488 489 490 491 492 493 494
/**
* isci_request_cleanup_completed_loiterer() - This function will take care of
*    the final cleanup on any request which has been explicitly terminated.
* @isci_host: This parameter specifies the ISCI host object
* @isci_device: This is the device to which the request is pending.
* @isci_request: This parameter specifies the terminated request object.
* @task: This parameter is the libsas I/O request.
*/
495
static void isci_request_cleanup_completed_loiterer(
496
	struct isci_host          *isci_host,
497
	struct isci_remote_device *isci_device,
498 499
	struct isci_request       *isci_request,
	struct sas_task           *task)
500
{
501
	unsigned long flags;
502 503 504

	dev_dbg(&isci_host->pdev->dev,
		"%s: isci_device=%p, request=%p, task=%p\n",
505
		__func__, isci_device, isci_request, task);
506

507 508 509 510 511
	if (task != NULL) {

		spin_lock_irqsave(&task->task_state_lock, flags);
		task->lldd_task = NULL;

512 513
		task->task_state_flags &= ~SAS_TASK_NEED_DEV_RESET;

514 515 516 517 518 519 520 521 522 523
		isci_set_task_doneflags(task);

		/* If this task is not in the abort path, call task_done. */
		if (!(task->task_state_flags & SAS_TASK_STATE_ABORTED)) {

			spin_unlock_irqrestore(&task->task_state_lock, flags);
			task->task_done(task);
		} else
			spin_unlock_irqrestore(&task->task_state_lock, flags);
	}
524

525 526 527 528
	if (isci_request != NULL) {
		spin_lock_irqsave(&isci_host->scic_lock, flags);
		list_del_init(&isci_request->dev_node);
		spin_unlock_irqrestore(&isci_host->scic_lock, flags);
529

530
		isci_request_free(isci_host, isci_request);
531 532 533
	}
}

534 535 536 537 538 539 540 541 542 543 544 545 546
/**
 * isci_terminate_request_core() - This function will terminate the given
 *    request, and wait for it to complete.  This function must only be called
 *    from a thread that can wait.  Note that the request is terminated and
 *    completed (back to the host, if started there).
 * @isci_host: This SCU.
 * @isci_device: The target.
 * @isci_request: The I/O request to be terminated.
 *
 */
static void isci_terminate_request_core(
	struct isci_host *isci_host,
	struct isci_remote_device *isci_device,
547
	struct isci_request *isci_request)
548
{
549
	enum sci_status status      = SCI_SUCCESS;
550 551 552
	bool was_terminated         = false;
	bool needs_cleanup_handling = false;
	enum isci_request_status request_status;
553 554 555 556
	unsigned long     flags;
	unsigned long     termination_completed = 1;
	struct completion *io_request_completion;
	struct sas_task   *task;
557 558 559 560 561 562

	dev_dbg(&isci_host->pdev->dev,
		"%s: device = %p; request = %p\n",
		__func__, isci_device, isci_request);

	spin_lock_irqsave(&isci_host->scic_lock, flags);
563

564 565 566 567 568 569
	io_request_completion = isci_request->io_request_completion;

	task = (isci_request->ttype == io_task)
		? isci_request_access_task(isci_request)
		: NULL;

570 571 572 573 574
	/* Note that we are not going to control
	* the target to abort the request.
	*/
	isci_request->complete_in_target = true;

575 576 577 578
	/* Make sure the request wasn't just sitting around signalling
	 * device condition (if the request handle is NULL, then the
	 * request completed but needed additional handling here).
	 */
579
	if (!isci_request->terminated) {
580
		was_terminated = true;
581
		needs_cleanup_handling = true;
582
		status = scic_controller_terminate_request(
583
			&isci_host->sci,
584
			&isci_device->sci,
585
			&isci_request->sci);
586 587 588 589 590 591 592 593
	}
	spin_unlock_irqrestore(&isci_host->scic_lock, flags);

	/*
	 * The only time the request to terminate will
	 * fail is when the io request is completed and
	 * being aborted.
	 */
594
	if (status != SCI_SUCCESS) {
595 596 597
		dev_err(&isci_host->pdev->dev,
			"%s: scic_controller_terminate_request"
			" returned = 0x%x\n",
598 599
			__func__, status);

600 601 602
		isci_request->io_request_completion = NULL;

	} else {
603 604
		if (was_terminated) {
			dev_dbg(&isci_host->pdev->dev,
605 606
				"%s: before completion wait (%p/%p)\n",
				__func__, isci_request, io_request_completion);
607 608

			/* Wait here for the request to complete. */
609 610
			#define TERMINATION_TIMEOUT_MSEC 500
			termination_completed
611
				= wait_for_completion_timeout(
612
				   io_request_completion,
613 614
				   msecs_to_jiffies(TERMINATION_TIMEOUT_MSEC));

615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649
			if (!termination_completed) {

				/* The request to terminate has timed out.  */
				spin_lock_irqsave(&isci_host->scic_lock,
						  flags);

				/* Check for state changes. */
				if (!isci_request->terminated) {

					/* The best we can do is to have the
					 * request die a silent death if it
					 * ever really completes.
					 *
					 * Set the request state to "dead",
					 * and clear the task pointer so that
					 * an actual completion event callback
					 * doesn't do anything.
					 */
					isci_request->status = dead;
					isci_request->io_request_completion
						= NULL;

					if (isci_request->ttype == io_task) {

						/* Break links with the
						* sas_task.
						*/
						isci_request->ttype_ptr.io_task_ptr
							= NULL;
					}
				} else
					termination_completed = 1;

				spin_unlock_irqrestore(&isci_host->scic_lock,
						       flags);
650

651
				if (!termination_completed) {
652

653 654 655 656 657
					dev_err(&isci_host->pdev->dev,
						"%s: *** Timeout waiting for "
						"termination(%p/%p)\n",
						__func__, io_request_completion,
						isci_request);
658

659 660 661 662 663 664 665 666
					/* The request can no longer be referenced
					 * safely since it may go away if the
					 * termination every really does complete.
					 */
					isci_request = NULL;
				}
			}
			if (termination_completed)
667
				dev_dbg(&isci_host->pdev->dev,
668 669
					"%s: after completion wait (%p/%p)\n",
					__func__, isci_request, io_request_completion);
670 671
		}

672
		if (termination_completed) {
673

674
			isci_request->io_request_completion = NULL;
675

676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698
			/* Peek at the status of the request.  This will tell
			 * us if there was special handling on the request such that it
			 * needs to be detached and freed here.
			 */
			spin_lock_irqsave(&isci_request->state_lock, flags);
			request_status = isci_request_get_state(isci_request);

			if ((isci_request->ttype == io_task) /* TMFs are in their own thread */
			    && ((request_status == aborted)
				|| (request_status == aborting)
				|| (request_status == terminating)
				|| (request_status == completed)
				|| (request_status == dead)
				)
			    ) {

				/* The completion routine won't free a request in
				 * the aborted/aborting/etc. states, so we do
				 * it here.
				 */
				needs_cleanup_handling = true;
			}
			spin_unlock_irqrestore(&isci_request->state_lock, flags);
699

700 701 702 703
		}
		if (needs_cleanup_handling)
			isci_request_cleanup_completed_loiterer(
				isci_host, isci_device, isci_request, task);
704
	}
705 706 707 708 709 710 711 712 713 714 715 716
}

/**
 * isci_terminate_pending_requests() - This function will change the all of the
 *    requests on the given device's state to "aborting", will terminate the
 *    requests, and wait for them to complete.  This function must only be
 *    called from a thread that can wait.  Note that the requests are all
 *    terminated and completed (back to the host, if started there).
 * @isci_host: This parameter specifies SCU.
 * @isci_device: This parameter specifies the target.
 *
 */
717 718
void isci_terminate_pending_requests(struct isci_host *ihost,
				     struct isci_remote_device *idev)
719
{
720
	struct completion request_completion;
721
	enum isci_request_status old_state;
722 723
	unsigned long flags;
	LIST_HEAD(list);
724

725 726
	spin_lock_irqsave(&ihost->scic_lock, flags);
	list_splice_init(&idev->reqs_in_process, &list);
727

728 729 730
	/* assumes that isci_terminate_request_core deletes from the list */
	while (!list_empty(&list)) {
		struct isci_request *ireq = list_entry(list.next, typeof(*ireq), dev_node);
731

732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751
		/* Change state to "terminating" if it is currently
		 * "started".
		 */
		old_state = isci_request_change_started_to_newstate(ireq,
								    &request_completion,
								    terminating);
		switch (old_state) {
		case started:
		case completed:
		case aborting:
			break;
		default:
			/* termination in progress, or otherwise dispositioned.
			 * We know the request was on 'list' so should be safe
			 * to move it back to reqs_in_process
			 */
			list_move(&ireq->dev_node, &idev->reqs_in_process);
			ireq = NULL;
			break;
		}
752

753 754 755
		if (!ireq)
			continue;
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
756

757
		init_completion(&request_completion);
758

759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786
		dev_dbg(&ihost->pdev->dev,
			 "%s: idev=%p request=%p; task=%p old_state=%d\n",
			 __func__, idev, ireq,
			ireq->ttype == io_task ? isci_request_access_task(ireq) : NULL,
			old_state);

		/* If the old_state is started:
		 * This request was not already being aborted. If it had been,
		 * then the aborting I/O (ie. the TMF request) would not be in
		 * the aborting state, and thus would be terminated here.  Note
		 * that since the TMF completion's call to the kernel function
		 * "complete()" does not happen until the pending I/O request
		 * terminate fully completes, we do not have to implement a
		 * special wait here for already aborting requests - the
		 * termination of the TMF request will force the request
		 * to finish it's already started terminate.
		 *
		 * If old_state == completed:
		 * This request completed from the SCU hardware perspective
		 * and now just needs cleaning up in terms of freeing the
		 * request and potentially calling up to libsas.
		 *
		 * If old_state == aborting:
		 * This request has already gone through a TMF timeout, but may
		 * not have been terminated; needs cleaning up at least.
		 */
		isci_terminate_request_core(ihost, idev, ireq);
		spin_lock_irqsave(&ihost->scic_lock, flags);
787
	}
788
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810 811 812 813
}

/**
 * isci_task_send_lu_reset_sas() - This function is called by of the SAS Domain
 *    Template functions.
 * @lun: This parameter specifies the lun to be reset.
 *
 * status, zero indicates success.
 */
static int isci_task_send_lu_reset_sas(
	struct isci_host *isci_host,
	struct isci_remote_device *isci_device,
	u8 *lun)
{
	struct isci_tmf tmf;
	int ret = TMF_RESP_FUNC_FAILED;

	dev_dbg(&isci_host->pdev->dev,
		"%s: isci_host = %p, isci_device = %p\n",
		__func__, isci_host, isci_device);
	/* Send the LUN reset to the target.  By the time the call returns,
	 * the TMF has fully exected in the target (in which case the return
	 * value is "TMF_RESP_FUNC_COMPLETE", or the request timed-out (or
	 * was otherwise unable to be executed ("TMF_RESP_FUNC_FAILED").
	 */
814
	isci_task_build_tmf(&tmf, isci_tmf_ssp_lun_reset, NULL, NULL);
815 816

	#define ISCI_LU_RESET_TIMEOUT_MS 2000 /* 2 second timeout. */
817
	ret = isci_task_execute_tmf(isci_host, isci_device, &tmf, ISCI_LU_RESET_TIMEOUT_MS);
818 819 820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839

	if (ret == TMF_RESP_FUNC_COMPLETE)
		dev_dbg(&isci_host->pdev->dev,
			"%s: %p: TMF_LU_RESET passed\n",
			__func__, isci_device);
	else
		dev_dbg(&isci_host->pdev->dev,
			"%s: %p: TMF_LU_RESET failed (%x)\n",
			__func__, isci_device, ret);

	return ret;
}

/**
 * isci_task_lu_reset() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas,
 *    to reset the given lun. Note the assumption that while this call is
 *    executing, no I/O will be sent by the host to the device.
 * @lun: This parameter specifies the lun to be reset.
 *
 * status, zero indicates success.
 */
840
int isci_task_lu_reset(struct domain_device *domain_device, u8 *lun)
841
{
842
	struct isci_host *isci_host = dev_to_ihost(domain_device);
843 844
	struct isci_remote_device *isci_device;
	unsigned long flags;
845 846
	int ret;

847 848 849
	spin_lock_irqsave(&isci_host->scic_lock, flags);
	isci_device = isci_lookup_device(domain_device);
	spin_unlock_irqrestore(&isci_host->scic_lock, flags);
850

851 852
	dev_dbg(&isci_host->pdev->dev,
		"%s: domain_device=%p, isci_host=%p; isci_device=%p\n",
853 854
		 __func__, domain_device, isci_host, isci_device);

855
	if (isci_device)
D
Dan Williams 已提交
856
		set_bit(IDEV_EH, &isci_device->flags);
857 858 859 860 861

	/* If there is a device reset pending on any request in the
	 * device's list, fail this LUN reset request in order to
	 * escalate to the device reset.
	 */
862
	if (!isci_device ||
863
	    isci_device_is_reset_pending(isci_host, isci_device)) {
864
		dev_warn(&isci_host->pdev->dev,
865
			 "%s: No dev (%p), or "
866
			 "RESET PENDING: domain_device=%p\n",
867
			 __func__, isci_device, domain_device);
868 869
		ret = TMF_RESP_FUNC_FAILED;
		goto out;
870 871 872 873
	}

	/* Send the task management part of the reset. */
	if (sas_protocol_ata(domain_device->tproto)) {
874
		ret = isci_task_send_lu_reset_sata(isci_host, isci_device, lun);
875 876 877 878 879 880 881
	} else
		ret = isci_task_send_lu_reset_sas(isci_host, isci_device, lun);

	/* If the LUN reset worked, all the I/O can now be terminated. */
	if (ret == TMF_RESP_FUNC_COMPLETE)
		/* Terminate all I/O now. */
		isci_terminate_pending_requests(isci_host,
882
						isci_device);
883

884 885
 out:
	isci_put_device(isci_device);
886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927 928 929 930 931 932 933 934
	return ret;
}


/*	 int (*lldd_clear_nexus_port)(struct asd_sas_port *); */
int isci_task_clear_nexus_port(struct asd_sas_port *port)
{
	return TMF_RESP_FUNC_FAILED;
}



int isci_task_clear_nexus_ha(struct sas_ha_struct *ha)
{
	return TMF_RESP_FUNC_FAILED;
}

/* Task Management Functions. Must be called from process context.	 */

/**
 * isci_abort_task_process_cb() - This is a helper function for the abort task
 *    TMF command.  It manages the request state with respect to the successful
 *    transmission / completion of the abort task request.
 * @cb_state: This parameter specifies when this function was called - after
 *    the TMF request has been started and after it has timed-out.
 * @tmf: This parameter specifies the TMF in progress.
 *
 *
 */
static void isci_abort_task_process_cb(
	enum isci_tmf_cb_state cb_state,
	struct isci_tmf *tmf,
	void *cb_data)
{
	struct isci_request *old_request;

	old_request = (struct isci_request *)cb_data;

	dev_dbg(&old_request->isci_host->pdev->dev,
		"%s: tmf=%p, old_request=%p\n",
		__func__, tmf, old_request);

	switch (cb_state) {

	case isci_tmf_started:
		/* The TMF has been started.  Nothing to do here, since the
		 * request state was already set to "aborted" by the abort
		 * task function.
		 */
935 936 937 938 939
		if ((old_request->status != aborted)
			&& (old_request->status != completed))
			dev_err(&old_request->isci_host->pdev->dev,
				"%s: Bad request status (%d): tmf=%p, old_request=%p\n",
				__func__, old_request->status, tmf, old_request);
940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970
		break;

	case isci_tmf_timed_out:

		/* Set the task's state to "aborting", since the abort task
		 * function thread set it to "aborted" (above) in anticipation
		 * of the task management request working correctly.  Since the
		 * timeout has now fired, the TMF request failed.  We set the
		 * state such that the request completion will indicate the
		 * device is no longer present.
		 */
		isci_request_change_state(old_request, aborting);
		break;

	default:
		dev_err(&old_request->isci_host->pdev->dev,
			"%s: Bad cb_state (%d): tmf=%p, old_request=%p\n",
			__func__, cb_state, tmf, old_request);
		break;
	}
}

/**
 * isci_task_abort_task() - This function is one of the SAS Domain Template
 *    functions. This function is called by libsas to abort a specified task.
 * @task: This parameter specifies the SAS task to abort.
 *
 * status, zero indicates success.
 */
int isci_task_abort_task(struct sas_task *task)
{
971
	struct isci_host *isci_host = dev_to_ihost(task->dev);
972
	DECLARE_COMPLETION_ONSTACK(aborted_io_completion);
973 974
	struct isci_request       *old_request = NULL;
	enum isci_request_status  old_state;
975
	struct isci_remote_device *isci_device = NULL;
976 977 978 979
	struct isci_tmf           tmf;
	int                       ret = TMF_RESP_FUNC_FAILED;
	unsigned long             flags;
	bool                      any_dev_reset = false;
980 981 982 983 984 985

	/* Get the isci_request reference from the task.  Note that
	 * this check does not depend on the pending request list
	 * in the device, because tasks driving resets may land here
	 * after completion in the core.
	 */
986 987 988 989 990 991 992 993 994 995 996 997 998
	spin_lock_irqsave(&isci_host->scic_lock, flags);
	spin_lock(&task->task_state_lock);

	old_request = task->lldd_task;

	/* If task is already done, the request isn't valid */
	if (!(task->task_state_flags & SAS_TASK_STATE_DONE) &&
	    (task->task_state_flags & SAS_TASK_AT_INITIATOR) &&
	    old_request)
		isci_device = isci_lookup_device(task->dev);

	spin_unlock(&task->task_state_lock);
	spin_unlock_irqrestore(&isci_host->scic_lock, flags);
999 1000 1001 1002

	dev_dbg(&isci_host->pdev->dev,
		"%s: task = %p\n", __func__, task);

1003 1004
	if (!isci_device || !old_request)
		goto out;
1005

D
Dan Williams 已提交
1006 1007
	set_bit(IDEV_EH, &isci_device->flags);

1008 1009 1010 1011
	/* This version of the driver will fail abort requests for
	 * SATA/STP.  Failing the abort request this way will cause the
	 * SCSI error handler thread to escalate to LUN reset
	 */
1012
	if (sas_protocol_ata(task->task_proto)) {
1013 1014 1015 1016
		dev_warn(&isci_host->pdev->dev,
			    " task %p is for a STP/SATA device;"
			    " returning TMF_RESP_FUNC_FAILED\n"
			    " to cause a LUN reset...\n", task);
1017
		goto out;
1018 1019 1020 1021 1022
	}

	dev_dbg(&isci_host->pdev->dev,
		"%s: old_request == %p\n", __func__, old_request);

1023
	any_dev_reset = isci_device_is_reset_pending(isci_host,isci_device);
1024

1025 1026
	spin_lock_irqsave(&task->task_state_lock, flags);

1027
	any_dev_reset = any_dev_reset || (task->task_state_flags & SAS_TASK_NEED_DEV_RESET);
1028 1029 1030 1031 1032 1033

	/* If the extraction of the request reference from the task
	 * failed, then the request has been completed (or if there is a
	 * pending reset then this abort request function must be failed
	 * in order to escalate to the target reset).
	 */
1034
	if ((old_request == NULL) || any_dev_reset) {
1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046

		/* If the device reset task flag is set, fail the task
		 * management request.  Otherwise, the original request
		 * has completed.
		 */
		if (any_dev_reset) {

			/* Turn off the task's DONE to make sure this
			 * task is escalated to a target reset.
			 */
			task->task_state_flags &= ~SAS_TASK_STATE_DONE;

1047 1048 1049 1050 1051
			/* Make the reset happen as soon as possible. */
			task->task_state_flags |= SAS_TASK_NEED_DEV_RESET;

			spin_unlock_irqrestore(&task->task_state_lock, flags);

1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064
			/* Fail the task management request in order to
			 * escalate to the target reset.
			 */
			ret = TMF_RESP_FUNC_FAILED;

			dev_dbg(&isci_host->pdev->dev,
				"%s: Failing task abort in order to "
				"escalate to target reset because\n"
				"SAS_TASK_NEED_DEV_RESET is set for "
				"task %p on dev %p\n",
				__func__, task, isci_device);


1065
		} else {
1066 1067 1068 1069 1070 1071 1072
			/* The request has already completed and there
			 * is nothing to do here other than to set the task
			 * done bit, and indicate that the task abort function
			 * was sucessful.
			 */
			isci_set_task_doneflags(task);

1073
			spin_unlock_irqrestore(&task->task_state_lock, flags);
1074

1075
			ret = TMF_RESP_FUNC_COMPLETE;
1076

1077 1078 1079
			dev_dbg(&isci_host->pdev->dev,
				"%s: abort task not needed for %p\n",
				__func__, task);
1080
		}
1081
		goto out;
1082
	}
1083 1084
	else
		spin_unlock_irqrestore(&task->task_state_lock, flags);
1085 1086 1087

	spin_lock_irqsave(&isci_host->scic_lock, flags);

1088
	/* Check the request status and change to "aborted" if currently
1089
	 * "starting"; if true then set the I/O kernel completion
1090 1091
	 * struct that will be triggered when the request completes.
	 */
1092 1093 1094
	old_state = isci_task_validate_request_to_abort(
				old_request, isci_host, isci_device,
				&aborted_io_completion);
1095 1096 1097
	if ((old_state != started) &&
	    (old_state != completed) &&
	    (old_state != aborting)) {
1098 1099 1100

		spin_unlock_irqrestore(&isci_host->scic_lock, flags);

1101 1102 1103 1104 1105 1106 1107
		/* The request was already being handled by someone else (because
		* they got to set the state away from started).
		*/
		dev_dbg(&isci_host->pdev->dev,
			"%s:  device = %p; old_request %p already being aborted\n",
			__func__,
			isci_device, old_request);
1108 1109
		ret = TMF_RESP_FUNC_COMPLETE;
		goto out;
1110
	}
1111 1112 1113
	if ((task->task_proto == SAS_PROTOCOL_SMP)
	    || old_request->complete_in_target
	    ) {
1114 1115 1116

		spin_unlock_irqrestore(&isci_host->scic_lock, flags);

1117 1118 1119 1120
		dev_dbg(&isci_host->pdev->dev,
			"%s: SMP request (%d)"
			" or complete_in_target (%d), thus no TMF\n",
			__func__, (task->task_proto == SAS_PROTOCOL_SMP),
1121
			old_request->complete_in_target);
1122

1123 1124 1125 1126 1127 1128
		/* Set the state on the task. */
		isci_task_all_done(task);

		ret = TMF_RESP_FUNC_COMPLETE;

		/* Stopping and SMP devices are not sent a TMF, and are not
1129
		 * reset, but the outstanding I/O request is terminated below.
1130 1131 1132
		 */
	} else {
		/* Fill in the tmf stucture */
1133
		isci_task_build_abort_task_tmf(&tmf, isci_tmf_ssp_task_abort,
1134 1135
					       isci_abort_task_process_cb,
					       old_request);
1136 1137 1138 1139

		spin_unlock_irqrestore(&isci_host->scic_lock, flags);

		#define ISCI_ABORT_TASK_TIMEOUT_MS 500 /* half second timeout. */
1140
		ret = isci_task_execute_tmf(isci_host, isci_device, &tmf,
1141 1142
					    ISCI_ABORT_TASK_TIMEOUT_MS);

1143
		if (ret != TMF_RESP_FUNC_COMPLETE)
1144 1145 1146 1147
			dev_err(&isci_host->pdev->dev,
				"%s: isci_task_send_tmf failed\n",
				__func__);
	}
1148 1149 1150
	if (ret == TMF_RESP_FUNC_COMPLETE) {
		old_request->complete_in_target = true;

1151 1152 1153
		/* Clean up the request on our side, and wait for the aborted
		 * I/O to complete.
		 */
1154
		isci_terminate_request_core(isci_host, isci_device, old_request);
1155
	}
1156

1157 1158
	/* Make sure we do not leave a reference to aborted_io_completion */
	old_request->io_request_completion = NULL;
1159 1160
 out:
	isci_put_device(isci_device);
1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171 1172 1173 1174 1175 1176 1177 1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238
	return ret;
}

/**
 * isci_task_abort_task_set() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas,
 *    to abort all task for the given lun.
 * @d_device: This parameter specifies the domain device associated with this
 *    request.
 * @lun: This parameter specifies the lun associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_abort_task_set(
	struct domain_device *d_device,
	u8 *lun)
{
	return TMF_RESP_FUNC_FAILED;
}


/**
 * isci_task_clear_aca() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas.
 * @d_device: This parameter specifies the domain device associated with this
 *    request.
 * @lun: This parameter specifies the lun	 associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_clear_aca(
	struct domain_device *d_device,
	u8 *lun)
{
	return TMF_RESP_FUNC_FAILED;
}



/**
 * isci_task_clear_task_set() - This function is one of the SAS Domain Template
 *    functions. This is one of the Task Management functoins called by libsas.
 * @d_device: This parameter specifies the domain device associated with this
 *    request.
 * @lun: This parameter specifies the lun	 associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_clear_task_set(
	struct domain_device *d_device,
	u8 *lun)
{
	return TMF_RESP_FUNC_FAILED;
}


/**
 * isci_task_query_task() - This function is implemented to cause libsas to
 *    correctly escalate the failed abort to a LUN or target reset (this is
 *    because sas_scsi_find_task libsas function does not correctly interpret
 *    all return codes from the abort task call).  When TMF_RESP_FUNC_SUCC is
 *    returned, libsas turns this into a LUN reset; when FUNC_FAILED is
 *    returned, libsas will turn this into a target reset
 * @task: This parameter specifies the sas task being queried.
 * @lun: This parameter specifies the lun associated with this request.
 *
 * status, zero indicates success.
 */
int isci_task_query_task(
	struct sas_task *task)
{
	/* See if there is a pending device reset for this device. */
	if (task->task_state_flags & SAS_TASK_NEED_DEV_RESET)
		return TMF_RESP_FUNC_FAILED;
	else
		return TMF_RESP_FUNC_SUCC;
}

1239
/*
1240 1241
 * isci_task_request_complete() - This function is called by the sci core when
 *    an task request completes.
1242 1243
 * @ihost: This parameter specifies the ISCI host object
 * @ireq: This parameter is the completed isci_request object.
1244 1245 1246 1247 1248
 * @completion_status: This parameter specifies the completion status from the
 *    sci core.
 *
 * none.
 */
1249 1250 1251 1252
void
isci_task_request_complete(struct isci_host *ihost,
			   struct isci_request *ireq,
			   enum sci_task_status completion_status)
1253
{
1254
	struct isci_tmf *tmf = isci_request_access_tmf(ireq);
1255
	struct completion *tmf_complete;
1256
	struct scic_sds_request *sci_req = &ireq->sci;
1257

1258
	dev_dbg(&ihost->pdev->dev,
1259
		"%s: request = %p, status=%d\n",
1260
		__func__, ireq, completion_status);
1261

1262
	isci_request_change_state(ireq, completed);
1263 1264

	tmf->status = completion_status;
1265
	ireq->complete_in_target = true;
1266

1267
	if (tmf->proto == SAS_PROTOCOL_SSP) {
1268
		memcpy(&tmf->resp.resp_iu,
1269
		       &sci_req->ssp.rsp,
1270 1271
		       SSP_RESP_IU_MAX_SIZE);
	} else if (tmf->proto == SAS_PROTOCOL_SATA) {
1272
		memcpy(&tmf->resp.d2h_fis,
1273
		       &sci_req->stp.rsp,
1274
		       sizeof(struct dev_to_host_fis));
1275 1276 1277 1278 1279
	}

	/* PRINT_TMF( ((struct isci_tmf *)request->task)); */
	tmf_complete = tmf->complete;

1280
	scic_controller_complete_io(&ihost->sci, ireq->sci.target_device, &ireq->sci);
1281
	/* set the 'terminated' flag handle to make sure it cannot be terminated
1282 1283
	 *  or completed again.
	 */
1284
	ireq->terminated = true;;
1285

1286 1287
	isci_request_change_state(ireq, unallocated);
	list_del_init(&ireq->dev_node);
1288 1289 1290 1291 1292

	/* The task management part completes last. */
	complete(tmf_complete);
}

1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530
static void isci_smp_task_timedout(unsigned long _task)
{
	struct sas_task *task = (void *) _task;
	unsigned long flags;

	spin_lock_irqsave(&task->task_state_lock, flags);
	if (!(task->task_state_flags & SAS_TASK_STATE_DONE))
		task->task_state_flags |= SAS_TASK_STATE_ABORTED;
	spin_unlock_irqrestore(&task->task_state_lock, flags);

	complete(&task->completion);
}

static void isci_smp_task_done(struct sas_task *task)
{
	if (!del_timer(&task->timer))
		return;
	complete(&task->completion);
}

static struct sas_task *isci_alloc_task(void)
{
	struct sas_task *task = kzalloc(sizeof(*task), GFP_KERNEL);

	if (task) {
		INIT_LIST_HEAD(&task->list);
		spin_lock_init(&task->task_state_lock);
		task->task_state_flags = SAS_TASK_STATE_PENDING;
		init_timer(&task->timer);
		init_completion(&task->completion);
	}

	return task;
}

static void isci_free_task(struct isci_host *ihost, struct sas_task  *task)
{
	if (task) {
		BUG_ON(!list_empty(&task->list));
		kfree(task);
	}
}

static int isci_smp_execute_task(struct isci_host *ihost,
				 struct domain_device *dev, void *req,
				 int req_size, void *resp, int resp_size)
{
	int res, retry;
	struct sas_task *task = NULL;

	for (retry = 0; retry < 3; retry++) {
		task = isci_alloc_task();
		if (!task)
			return -ENOMEM;

		task->dev = dev;
		task->task_proto = dev->tproto;
		sg_init_one(&task->smp_task.smp_req, req, req_size);
		sg_init_one(&task->smp_task.smp_resp, resp, resp_size);

		task->task_done = isci_smp_task_done;

		task->timer.data = (unsigned long) task;
		task->timer.function = isci_smp_task_timedout;
		task->timer.expires = jiffies + 10*HZ;
		add_timer(&task->timer);

		res = isci_task_execute_task(task, 1, GFP_KERNEL);

		if (res) {
			del_timer(&task->timer);
			dev_err(&ihost->pdev->dev,
				"%s: executing SMP task failed:%d\n",
				__func__, res);
			goto ex_err;
		}

		wait_for_completion(&task->completion);
		res = -ECOMM;
		if ((task->task_state_flags & SAS_TASK_STATE_ABORTED)) {
			dev_err(&ihost->pdev->dev,
				"%s: smp task timed out or aborted\n",
				__func__);
			isci_task_abort_task(task);
			if (!(task->task_state_flags & SAS_TASK_STATE_DONE)) {
				dev_err(&ihost->pdev->dev,
					"%s: SMP task aborted and not done\n",
					__func__);
				goto ex_err;
			}
		}
		if (task->task_status.resp == SAS_TASK_COMPLETE &&
		    task->task_status.stat == SAM_STAT_GOOD) {
			res = 0;
			break;
		}
		if (task->task_status.resp == SAS_TASK_COMPLETE &&
		      task->task_status.stat == SAS_DATA_UNDERRUN) {
			/* no error, but return the number of bytes of
			* underrun */
			res = task->task_status.residual;
			break;
		}
		if (task->task_status.resp == SAS_TASK_COMPLETE &&
		      task->task_status.stat == SAS_DATA_OVERRUN) {
			res = -EMSGSIZE;
			break;
		} else {
			dev_err(&ihost->pdev->dev,
				"%s: task to dev %016llx response: 0x%x "
				"status 0x%x\n", __func__,
				SAS_ADDR(dev->sas_addr),
				task->task_status.resp,
				task->task_status.stat);
			isci_free_task(ihost, task);
			task = NULL;
		}
	}
ex_err:
	BUG_ON(retry == 3 && task != NULL);
	isci_free_task(ihost, task);
	return res;
}

#define DISCOVER_REQ_SIZE  16
#define DISCOVER_RESP_SIZE 56

int isci_smp_get_phy_attached_dev_type(struct isci_host *ihost,
				       struct domain_device *dev,
				       int phy_id, int *adt)
{
	struct smp_resp *disc_resp;
	u8 *disc_req;
	int res;

	disc_resp = kzalloc(DISCOVER_RESP_SIZE, GFP_KERNEL);
	if (!disc_resp)
		return -ENOMEM;

	disc_req = kzalloc(DISCOVER_REQ_SIZE, GFP_KERNEL);
	if (disc_req) {
		disc_req[0] = SMP_REQUEST;
		disc_req[1] = SMP_DISCOVER;
		disc_req[9] = phy_id;
	} else {
		kfree(disc_resp);
		return -ENOMEM;
	}
	res = isci_smp_execute_task(ihost, dev, disc_req, DISCOVER_REQ_SIZE,
				    disc_resp, DISCOVER_RESP_SIZE);
	if (!res) {
		if (disc_resp->result != SMP_RESP_FUNC_ACC)
			res = disc_resp->result;
		else
			*adt = disc_resp->disc.attached_dev_type;
	}
	kfree(disc_req);
	kfree(disc_resp);

	return res;
}

static void isci_wait_for_smp_phy_reset(struct isci_remote_device *idev, int phy_num)
{
	struct domain_device *dev = idev->domain_dev;
	struct isci_port *iport = idev->isci_port;
	struct isci_host *ihost = iport->isci_host;
	int res, iteration = 0, attached_device_type;
	#define STP_WAIT_MSECS 25000
	unsigned long tmo = msecs_to_jiffies(STP_WAIT_MSECS);
	unsigned long deadline = jiffies + tmo;
	enum {
		SMP_PHYWAIT_PHYDOWN,
		SMP_PHYWAIT_PHYUP,
		SMP_PHYWAIT_DONE
	} phy_state = SMP_PHYWAIT_PHYDOWN;

	/* While there is time, wait for the phy to go away and come back */
	while (time_is_after_jiffies(deadline) && phy_state != SMP_PHYWAIT_DONE) {
		int event = atomic_read(&iport->event);

		++iteration;

		tmo = wait_event_timeout(ihost->eventq,
					 event != atomic_read(&iport->event) ||
					 !test_bit(IPORT_BCN_BLOCKED, &iport->flags),
					 tmo);
		/* link down, stop polling */
		if (!test_bit(IPORT_BCN_BLOCKED, &iport->flags))
			break;

		dev_dbg(&ihost->pdev->dev,
			"%s: iport %p, iteration %d,"
			" phase %d: time_remaining %lu, bcns = %d\n",
			__func__, iport, iteration, phy_state,
			tmo, test_bit(IPORT_BCN_PENDING, &iport->flags));

		res = isci_smp_get_phy_attached_dev_type(ihost, dev, phy_num,
							 &attached_device_type);
		tmo = deadline - jiffies;

		if (res) {
			dev_warn(&ihost->pdev->dev,
				 "%s: iteration %d, phase %d:"
				 " SMP error=%d, time_remaining=%lu\n",
				 __func__, iteration, phy_state, res, tmo);
			break;
		}
		dev_dbg(&ihost->pdev->dev,
			"%s: iport %p, iteration %d,"
			" phase %d: time_remaining %lu, bcns = %d, "
			"attdevtype = %x\n",
			__func__, iport, iteration, phy_state,
			tmo, test_bit(IPORT_BCN_PENDING, &iport->flags),
			attached_device_type);

		switch (phy_state) {
		case SMP_PHYWAIT_PHYDOWN:
			/* Has the device gone away? */
			if (!attached_device_type)
				phy_state = SMP_PHYWAIT_PHYUP;

			break;

		case SMP_PHYWAIT_PHYUP:
			/* Has the device come back? */
			if (attached_device_type)
				phy_state = SMP_PHYWAIT_DONE;
			break;

		case SMP_PHYWAIT_DONE:
			break;
		}

	}
	dev_dbg(&ihost->pdev->dev, "%s: done\n",  __func__);
}

1531 1532
static int isci_reset_device(struct isci_host *ihost,
			     struct isci_remote_device *idev, int hard_reset)
1533
{
1534
	struct sas_phy *phy = sas_find_local_phy(idev->domain_dev);
1535
	struct isci_port *iport = idev->isci_port;
1536
	enum sci_status status;
D
Dan Williams 已提交
1537 1538
	unsigned long flags;
	int rc;
1539

D
Dan Williams 已提交
1540
	dev_dbg(&ihost->pdev->dev, "%s: idev %p\n", __func__, idev);
1541

D
Dan Williams 已提交
1542 1543
	spin_lock_irqsave(&ihost->scic_lock, flags);
	status = scic_remote_device_reset(&idev->sci);
1544
	if (status != SCI_SUCCESS) {
D
Dan Williams 已提交
1545
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
1546

D
Dan Williams 已提交
1547 1548 1549
		dev_warn(&ihost->pdev->dev,
			 "%s: scic_remote_device_reset(%p) returned %d!\n",
			 __func__, idev, status);
1550 1551 1552

		return TMF_RESP_FUNC_FAILED;
	}
D
Dan Williams 已提交
1553
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
1554 1555

	/* Make sure all pending requests are able to be fully terminated. */
D
Dan Williams 已提交
1556
	isci_device_clear_reset_pending(ihost, idev);
1557

1558 1559 1560 1561
	/* If this is a device on an expander, disable BCN processing. */
	if (!scsi_is_sas_phy_local(phy))
		set_bit(IPORT_BCN_BLOCKED, &iport->flags);

D
Dan Williams 已提交
1562
	rc = sas_phy_reset(phy, hard_reset);
1563

D
Dan Williams 已提交
1564 1565
	/* Terminate in-progress I/O now. */
	isci_remote_device_nuke_requests(ihost, idev);
1566

1567
	/* Since all pending TCs have been cleaned, resume the RNC. */
D
Dan Williams 已提交
1568 1569 1570
	spin_lock_irqsave(&ihost->scic_lock, flags);
	status = scic_remote_device_reset_complete(&idev->sci);
	spin_unlock_irqrestore(&ihost->scic_lock, flags);
1571

1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585
	/* If this is a device on an expander, bring the phy back up. */
	if (!scsi_is_sas_phy_local(phy)) {
		/* A phy reset will cause the device to go away then reappear.
		 * Since libsas will take action on incoming BCNs (eg. remove
		 * a device going through an SMP phy-control driven reset),
		 * we need to wait until the phy comes back up before letting
		 * discovery proceed in libsas.
		 */
		isci_wait_for_smp_phy_reset(idev, phy->number);

		spin_lock_irqsave(&ihost->scic_lock, flags);
		isci_port_bcn_enable(ihost, idev->isci_port);
		spin_unlock_irqrestore(&ihost->scic_lock, flags);
	}
1586

D
Dan Williams 已提交
1587 1588 1589 1590
	if (status != SCI_SUCCESS) {
		dev_warn(&ihost->pdev->dev,
			 "%s: scic_remote_device_reset_complete(%p) "
			 "returned %d!\n", __func__, idev, status);
1591 1592
	}

D
Dan Williams 已提交
1593
	dev_dbg(&ihost->pdev->dev, "%s: idev %p complete.\n", __func__, idev);
1594

D
Dan Williams 已提交
1595 1596
	return rc;
}
1597

D
Dan Williams 已提交
1598 1599 1600 1601
int isci_task_I_T_nexus_reset(struct domain_device *dev)
{
	struct isci_host *ihost = dev_to_ihost(dev);
	struct isci_remote_device *idev;
1602
	int ret, hard_reset = 1;
D
Dan Williams 已提交
1603 1604 1605
	unsigned long flags;

	spin_lock_irqsave(&ihost->scic_lock, flags);
1606
	idev = isci_lookup_device(dev);
D
Dan Williams 已提交
1607 1608
	spin_unlock_irqrestore(&ihost->scic_lock, flags);

1609 1610 1611 1612
	if (!idev || !test_bit(IDEV_EH, &idev->flags)) {
		ret = TMF_RESP_FUNC_COMPLETE;
		goto out;
	}
D
Dan Williams 已提交
1613 1614 1615 1616

	if (dev->dev_type == SATA_DEV || (dev->tproto & SAS_PROTOCOL_STP))
		hard_reset = 0;

1617 1618 1619 1620
	ret = isci_reset_device(ihost, idev, hard_reset);
 out:
	isci_put_device(idev);
	return ret;
D
Dan Williams 已提交
1621 1622 1623 1624 1625
}

int isci_bus_reset_handler(struct scsi_cmnd *cmd)
{
	struct domain_device *dev = sdev_to_domain_dev(cmd->device);
1626 1627 1628 1629
	struct isci_host *ihost = dev_to_ihost(dev);
	struct isci_remote_device *idev;
	int ret, hard_reset = 1;
	unsigned long flags;
D
Dan Williams 已提交
1630 1631 1632

	if (dev->dev_type == SATA_DEV || (dev->tproto & SAS_PROTOCOL_STP))
		hard_reset = 0;
1633

1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646
	spin_lock_irqsave(&ihost->scic_lock, flags);
	idev = isci_lookup_device(dev);
	spin_unlock_irqrestore(&ihost->scic_lock, flags);

	if (!idev) {
		ret = TMF_RESP_FUNC_COMPLETE;
		goto out;
	}

	ret = isci_reset_device(ihost, idev, hard_reset);
 out:
	isci_put_device(idev);
	return ret;
1647
}