pci.c 56.4 KB
Newer Older
M
Matthew Wilcox 已提交
1 2
/*
 * NVM Express device driver
3
 * Copyright (c) 2011-2014, Intel Corporation.
M
Matthew Wilcox 已提交
4 5 6 7 8 9 10 11 12 13 14
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms and conditions of the GNU General Public License,
 * version 2, as published by the Free Software Foundation.
 *
 * This program is distributed in the hope it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 */

K
Keith Busch 已提交
15
#include <linux/aer.h>
16
#include <linux/bitops.h>
M
Matthew Wilcox 已提交
17
#include <linux/blkdev.h>
M
Matias Bjørling 已提交
18
#include <linux/blk-mq.h>
K
Keith Busch 已提交
19
#include <linux/cpu.h>
20
#include <linux/delay.h>
M
Matthew Wilcox 已提交
21 22 23
#include <linux/errno.h>
#include <linux/fs.h>
#include <linux/genhd.h>
K
Keith Busch 已提交
24
#include <linux/hdreg.h>
25
#include <linux/idr.h>
M
Matthew Wilcox 已提交
26 27 28 29
#include <linux/init.h>
#include <linux/interrupt.h>
#include <linux/io.h>
#include <linux/kdev_t.h>
30
#include <linux/kthread.h>
M
Matthew Wilcox 已提交
31 32 33 34
#include <linux/kernel.h>
#include <linux/mm.h>
#include <linux/module.h>
#include <linux/moduleparam.h>
35
#include <linux/mutex.h>
M
Matthew Wilcox 已提交
36
#include <linux/pci.h>
37
#include <linux/poison.h>
38
#include <linux/ptrace.h>
M
Matthew Wilcox 已提交
39 40
#include <linux/sched.h>
#include <linux/slab.h>
K
Keith Busch 已提交
41
#include <linux/t10-pi.h>
M
Matthew Wilcox 已提交
42
#include <linux/types.h>
43
#include <linux/io-64-nonatomic-lo-hi.h>
K
Keith Busch 已提交
44
#include <asm/unaligned.h>
45

46 47
#include "nvme.h"

48
#define NVME_Q_DEPTH		1024
J
Jens Axboe 已提交
49
#define NVME_AQ_DEPTH		256
M
Matthew Wilcox 已提交
50 51
#define SQ_SIZE(depth)		(depth * sizeof(struct nvme_command))
#define CQ_SIZE(depth)		(depth * sizeof(struct nvme_completion))
52 53 54 55 56 57 58
		
/*
 * We handle AEN commands ourselves and don't even let the
 * block layer know about them.
 */
#define NVME_NR_AEN_COMMANDS	1
#define NVME_AQ_BLKMQ_DEPTH	(NVME_AQ_DEPTH - NVME_NR_AEN_COMMANDS)
59

60
unsigned char admin_timeout = 60;
61 62
module_param(admin_timeout, byte, 0644);
MODULE_PARM_DESC(admin_timeout, "timeout in seconds for admin commands");
M
Matthew Wilcox 已提交
63

64 65
unsigned char nvme_io_timeout = 30;
module_param_named(io_timeout, nvme_io_timeout, byte, 0644);
66
MODULE_PARM_DESC(io_timeout, "timeout in seconds for I/O");
M
Matthew Wilcox 已提交
67

68
unsigned char shutdown_timeout = 5;
69 70 71
module_param(shutdown_timeout, byte, 0644);
MODULE_PARM_DESC(shutdown_timeout, "timeout in seconds for controller shutdown");

72 73 74
static int use_threaded_interrupts;
module_param(use_threaded_interrupts, int, 0);

75 76 77 78
static bool use_cmb_sqes = true;
module_param(use_cmb_sqes, bool, 0644);
MODULE_PARM_DESC(use_cmb_sqes, "use controller's memory buffer for I/O SQes");

79 80
static LIST_HEAD(dev_list);
static struct task_struct *nvme_thread;
K
Keith Busch 已提交
81
static struct workqueue_struct *nvme_workq;
82
static wait_queue_head_t nvme_kthread_wait;
83

84 85
struct nvme_dev;
struct nvme_queue;
86

87
static int nvme_reset(struct nvme_dev *dev);
J
Jens Axboe 已提交
88
static void nvme_process_cq(struct nvme_queue *nvmeq);
89
static void nvme_remove_dead_ctrl(struct nvme_dev *dev);
90
static void nvme_dev_disable(struct nvme_dev *dev, bool shutdown);
91

92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112
/*
 * Represents an NVM Express device.  Each nvme_dev is a PCI function.
 */
struct nvme_dev {
	struct list_head node;
	struct nvme_queue **queues;
	struct blk_mq_tag_set tagset;
	struct blk_mq_tag_set admin_tagset;
	u32 __iomem *dbs;
	struct device *dev;
	struct dma_pool *prp_page_pool;
	struct dma_pool *prp_small_pool;
	unsigned queue_count;
	unsigned online_queues;
	unsigned max_qid;
	int q_depth;
	u32 db_stride;
	struct msix_entry *entry;
	void __iomem *bar;
	struct work_struct reset_work;
	struct work_struct scan_work;
113
	struct work_struct remove_work;
114
	struct mutex shutdown_lock;
115 116 117 118 119
	bool subsystem;
	void __iomem *cmb;
	dma_addr_t cmb_dma_addr;
	u64 cmb_size;
	u32 cmbsz;
120
	unsigned long flags;
K
Keith Busch 已提交
121

122
#define NVME_CTRL_RESETTING    0
123
#define NVME_CTRL_REMOVING     1
124 125

	struct nvme_ctrl ctrl;
K
Keith Busch 已提交
126
	struct completion ioq_wait;
K
Keith Busch 已提交
127
};
128

129 130 131 132 133
static inline struct nvme_dev *to_nvme_dev(struct nvme_ctrl *ctrl)
{
	return container_of(ctrl, struct nvme_dev, ctrl);
}

M
Matthew Wilcox 已提交
134 135 136 137 138 139
/*
 * An NVM Express queue.  Each device has at least two (one for admin
 * commands and one for I/O commands).
 */
struct nvme_queue {
	struct device *q_dmadev;
M
Matthew Wilcox 已提交
140
	struct nvme_dev *dev;
141
	char irqname[24];	/* nvme4294967295-65535\0 */
M
Matthew Wilcox 已提交
142 143
	spinlock_t q_lock;
	struct nvme_command *sq_cmds;
144
	struct nvme_command __iomem *sq_cmds_io;
M
Matthew Wilcox 已提交
145
	volatile struct nvme_completion *cqes;
146
	struct blk_mq_tags **tags;
M
Matthew Wilcox 已提交
147 148 149 150
	dma_addr_t sq_dma_addr;
	dma_addr_t cq_dma_addr;
	u32 __iomem *q_db;
	u16 q_depth;
J
Jens Axboe 已提交
151
	s16 cq_vector;
M
Matthew Wilcox 已提交
152 153 154
	u16 sq_head;
	u16 sq_tail;
	u16 cq_head;
K
Keith Busch 已提交
155
	u16 qid;
156 157
	u8 cq_phase;
	u8 cqe_seen;
M
Matthew Wilcox 已提交
158 159
};

160 161 162
/*
 * The nvme_iod describes the data in an I/O, including the list of PRP
 * entries.  You can't see it in this data structure because C doesn't let
C
Christoph Hellwig 已提交
163
 * me express that.  Use nvme_init_iod to ensure there's enough space
164 165 166
 * allocated to store the PRP list.
 */
struct nvme_iod {
C
Christoph Hellwig 已提交
167 168
	struct nvme_queue *nvmeq;
	int aborted;
169 170 171 172
	int npages;		/* In the PRP list. 0 means small pool in use */
	int nents;		/* Used in scatterlist */
	int length;		/* Of data, in bytes */
	dma_addr_t first_dma;
173
	struct scatterlist meta_sg; /* metadata requires single contiguous buffer */
C
Christoph Hellwig 已提交
174 175
	struct scatterlist *sg;
	struct scatterlist inline_sg[0];
M
Matthew Wilcox 已提交
176 177 178 179 180 181 182 183 184 185 186 187
};

/*
 * Check we didin't inadvertently grow the command struct
 */
static inline void _nvme_check_size(void)
{
	BUILD_BUG_ON(sizeof(struct nvme_rw_command) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_create_cq) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_create_sq) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_delete_queue) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_features) != 64);
188
	BUILD_BUG_ON(sizeof(struct nvme_format_cmd) != 64);
K
Keith Busch 已提交
189
	BUILD_BUG_ON(sizeof(struct nvme_abort_cmd) != 64);
M
Matthew Wilcox 已提交
190 191 192 193
	BUILD_BUG_ON(sizeof(struct nvme_command) != 64);
	BUILD_BUG_ON(sizeof(struct nvme_id_ctrl) != 4096);
	BUILD_BUG_ON(sizeof(struct nvme_id_ns) != 4096);
	BUILD_BUG_ON(sizeof(struct nvme_lba_range_type) != 64);
K
Keith Busch 已提交
194
	BUILD_BUG_ON(sizeof(struct nvme_smart_log) != 512);
M
Matthew Wilcox 已提交
195 196
}

197 198 199 200
/*
 * Max size of iod being embedded in the request payload
 */
#define NVME_INT_PAGES		2
201
#define NVME_INT_BYTES(dev)	(NVME_INT_PAGES * (dev)->ctrl.page_size)
202 203 204 205 206 207 208 209

/*
 * Will slightly overestimate the number of pages needed.  This is OK
 * as it only leads to a small amount of wasted memory for the lifetime of
 * the I/O.
 */
static int nvme_npages(unsigned size, struct nvme_dev *dev)
{
210 211
	unsigned nprps = DIV_ROUND_UP(size + dev->ctrl.page_size,
				      dev->ctrl.page_size);
212 213 214
	return DIV_ROUND_UP(8 * nprps, PAGE_SIZE - 8);
}

C
Christoph Hellwig 已提交
215 216
static unsigned int nvme_iod_alloc_size(struct nvme_dev *dev,
		unsigned int size, unsigned int nseg)
217
{
C
Christoph Hellwig 已提交
218 219 220
	return sizeof(__le64 *) * nvme_npages(size, dev) +
			sizeof(struct scatterlist) * nseg;
}
221

C
Christoph Hellwig 已提交
222 223 224 225
static unsigned int nvme_cmd_size(struct nvme_dev *dev)
{
	return sizeof(struct nvme_iod) +
		nvme_iod_alloc_size(dev, NVME_INT_BYTES(dev), NVME_INT_PAGES);
226 227
}

M
Matias Bjørling 已提交
228 229
static int nvme_admin_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
				unsigned int hctx_idx)
230
{
M
Matias Bjørling 已提交
231 232 233
	struct nvme_dev *dev = data;
	struct nvme_queue *nvmeq = dev->queues[0];

234 235 236 237
	WARN_ON(hctx_idx != 0);
	WARN_ON(dev->admin_tagset.tags[0] != hctx->tags);
	WARN_ON(nvmeq->tags);

M
Matias Bjørling 已提交
238
	hctx->driver_data = nvmeq;
239
	nvmeq->tags = &dev->admin_tagset.tags[0];
M
Matias Bjørling 已提交
240
	return 0;
241 242
}

243 244 245 246 247 248 249
static void nvme_admin_exit_hctx(struct blk_mq_hw_ctx *hctx, unsigned int hctx_idx)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	nvmeq->tags = NULL;
}

M
Matias Bjørling 已提交
250 251 252
static int nvme_admin_init_request(void *data, struct request *req,
				unsigned int hctx_idx, unsigned int rq_idx,
				unsigned int numa_node)
253
{
M
Matias Bjørling 已提交
254
	struct nvme_dev *dev = data;
C
Christoph Hellwig 已提交
255
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
M
Matias Bjørling 已提交
256 257 258
	struct nvme_queue *nvmeq = dev->queues[0];

	BUG_ON(!nvmeq);
C
Christoph Hellwig 已提交
259
	iod->nvmeq = nvmeq;
M
Matias Bjørling 已提交
260
	return 0;
261 262
}

M
Matias Bjørling 已提交
263 264
static int nvme_init_hctx(struct blk_mq_hw_ctx *hctx, void *data,
			  unsigned int hctx_idx)
M
Matthew Wilcox 已提交
265
{
M
Matias Bjørling 已提交
266
	struct nvme_dev *dev = data;
267
	struct nvme_queue *nvmeq = dev->queues[hctx_idx + 1];
M
Matias Bjørling 已提交
268

269 270
	if (!nvmeq->tags)
		nvmeq->tags = &dev->tagset.tags[hctx_idx];
M
Matthew Wilcox 已提交
271

272
	WARN_ON(dev->tagset.tags[hctx_idx] != hctx->tags);
M
Matias Bjørling 已提交
273 274
	hctx->driver_data = nvmeq;
	return 0;
M
Matthew Wilcox 已提交
275 276
}

M
Matias Bjørling 已提交
277 278 279
static int nvme_init_request(void *data, struct request *req,
				unsigned int hctx_idx, unsigned int rq_idx,
				unsigned int numa_node)
M
Matthew Wilcox 已提交
280
{
M
Matias Bjørling 已提交
281
	struct nvme_dev *dev = data;
C
Christoph Hellwig 已提交
282
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
M
Matias Bjørling 已提交
283 284 285
	struct nvme_queue *nvmeq = dev->queues[hctx_idx + 1];

	BUG_ON(!nvmeq);
C
Christoph Hellwig 已提交
286
	iod->nvmeq = nvmeq;
M
Matias Bjørling 已提交
287 288 289
	return 0;
}

290 291 292 293 294 295 296 297 298 299 300
static void nvme_queue_scan(struct nvme_dev *dev)
{
	/*
	 * Do not queue new scan work when a controller is reset during
	 * removal.
	 */
	if (test_bit(NVME_CTRL_REMOVING, &dev->flags))
		return;
	queue_work(nvme_workq, &dev->scan_work);
}

301 302
static void nvme_complete_async_event(struct nvme_dev *dev,
		struct nvme_completion *cqe)
M
Matias Bjørling 已提交
303
{
304 305
	u16 status = le16_to_cpu(cqe->status) >> 1;
	u32 result = le32_to_cpu(cqe->result);
M
Matias Bjørling 已提交
306 307

	if (status == NVME_SC_SUCCESS || status == NVME_SC_ABORT_REQ)
308
		++dev->ctrl.event_limit;
K
Keith Busch 已提交
309 310 311 312 313
	if (status != NVME_SC_SUCCESS)
		return;

	switch (result & 0xff07) {
	case NVME_AER_NOTICE_NS_CHANGED:
314
		dev_info(dev->dev, "rescanning\n");
315
		nvme_queue_scan(dev);
K
Keith Busch 已提交
316
	default:
317
		dev_warn(dev->dev, "async event result %08x\n", result);
M
Matias Bjørling 已提交
318
	}
M
Matthew Wilcox 已提交
319 320 321
}

/**
322
 * __nvme_submit_cmd() - Copy a command into a queue and ring the doorbell
M
Matthew Wilcox 已提交
323 324 325 326 327
 * @nvmeq: The queue to use
 * @cmd: The command to send
 *
 * Safe to use from interrupt context
 */
328 329
static void __nvme_submit_cmd(struct nvme_queue *nvmeq,
						struct nvme_command *cmd)
M
Matthew Wilcox 已提交
330
{
M
Matias Bjørling 已提交
331 332
	u16 tail = nvmeq->sq_tail;

333 334 335 336 337
	if (nvmeq->sq_cmds_io)
		memcpy_toio(&nvmeq->sq_cmds_io[tail], cmd, sizeof(*cmd));
	else
		memcpy(&nvmeq->sq_cmds[tail], cmd, sizeof(*cmd));

M
Matthew Wilcox 已提交
338 339
	if (++tail == nvmeq->q_depth)
		tail = 0;
340
	writel(tail, nvmeq->q_db);
M
Matthew Wilcox 已提交
341 342 343
	nvmeq->sq_tail = tail;
}

C
Christoph Hellwig 已提交
344
static __le64 **iod_list(struct request *req)
M
Matthew Wilcox 已提交
345
{
C
Christoph Hellwig 已提交
346 347
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	return (__le64 **)(iod->sg + req->nr_phys_segments);
M
Matthew Wilcox 已提交
348 349
}

C
Christoph Hellwig 已提交
350
static int nvme_init_iod(struct request *rq, struct nvme_dev *dev)
351
{
C
Christoph Hellwig 已提交
352 353 354
	struct nvme_iod *iod = blk_mq_rq_to_pdu(rq);
	int nseg = rq->nr_phys_segments;
	unsigned size;
355

C
Christoph Hellwig 已提交
356 357 358 359
	if (rq->cmd_flags & REQ_DISCARD)
		size = sizeof(struct nvme_dsm_range);
	else
		size = blk_rq_bytes(rq);
360

C
Christoph Hellwig 已提交
361 362 363 364 365 366
	if (nseg > NVME_INT_PAGES || size > NVME_INT_BYTES(dev)) {
		iod->sg = kmalloc(nvme_iod_alloc_size(dev, size, nseg), GFP_ATOMIC);
		if (!iod->sg)
			return BLK_MQ_RQ_QUEUE_BUSY;
	} else {
		iod->sg = iod->inline_sg;
367 368
	}

C
Christoph Hellwig 已提交
369 370 371 372 373
	iod->aborted = 0;
	iod->npages = -1;
	iod->nents = 0;
	iod->length = size;
	return 0;
374 375
}

C
Christoph Hellwig 已提交
376
static void nvme_free_iod(struct nvme_dev *dev, struct request *req)
M
Matthew Wilcox 已提交
377
{
C
Christoph Hellwig 已提交
378
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
379
	const int last_prp = dev->ctrl.page_size / 8 - 1;
380
	int i;
C
Christoph Hellwig 已提交
381
	__le64 **list = iod_list(req);
382 383 384 385 386 387 388 389 390 391
	dma_addr_t prp_dma = iod->first_dma;

	if (iod->npages == 0)
		dma_pool_free(dev->prp_small_pool, list[0], prp_dma);
	for (i = 0; i < iod->npages; i++) {
		__le64 *prp_list = list[i];
		dma_addr_t next_prp_dma = le64_to_cpu(prp_list[last_prp]);
		dma_pool_free(dev->prp_page_pool, prp_list, prp_dma);
		prp_dma = next_prp_dma;
	}
392

C
Christoph Hellwig 已提交
393 394
	if (iod->sg != iod->inline_sg)
		kfree(iod->sg);
K
Keith Busch 已提交
395 396
}

397
#ifdef CONFIG_BLK_DEV_INTEGRITY
K
Keith Busch 已提交
398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441
static void nvme_dif_prep(u32 p, u32 v, struct t10_pi_tuple *pi)
{
	if (be32_to_cpu(pi->ref_tag) == v)
		pi->ref_tag = cpu_to_be32(p);
}

static void nvme_dif_complete(u32 p, u32 v, struct t10_pi_tuple *pi)
{
	if (be32_to_cpu(pi->ref_tag) == p)
		pi->ref_tag = cpu_to_be32(v);
}

/**
 * nvme_dif_remap - remaps ref tags to bip seed and physical lba
 *
 * The virtual start sector is the one that was originally submitted by the
 * block layer.	Due to partitioning, MD/DM cloning, etc. the actual physical
 * start sector may be different. Remap protection information to match the
 * physical LBA on writes, and back to the original seed on reads.
 *
 * Type 0 and 3 do not have a ref tag, so no remapping required.
 */
static void nvme_dif_remap(struct request *req,
			void (*dif_swap)(u32 p, u32 v, struct t10_pi_tuple *pi))
{
	struct nvme_ns *ns = req->rq_disk->private_data;
	struct bio_integrity_payload *bip;
	struct t10_pi_tuple *pi;
	void *p, *pmap;
	u32 i, nlb, ts, phys, virt;

	if (!ns->pi_type || ns->pi_type == NVME_NS_DPS_PI_TYPE3)
		return;

	bip = bio_integrity(req->bio);
	if (!bip)
		return;

	pmap = kmap_atomic(bip->bip_vec->bv_page) + bip->bip_vec->bv_offset;

	p = pmap;
	virt = bip_get_seed(bip);
	phys = nvme_block_nr(ns, blk_rq_pos(req));
	nlb = (blk_rq_bytes(req) >> ns->lba_shift);
442
	ts = ns->disk->queue->integrity.tuple_size;
K
Keith Busch 已提交
443 444 445 446 447 448 449 450

	for (i = 0; i < nlb; i++, virt++, phys++) {
		pi = (struct t10_pi_tuple *)p;
		dif_swap(phys, virt, pi);
		p += ts;
	}
	kunmap_atomic(pmap);
}
451 452 453 454 455 456 457 458 459 460 461 462 463
#else /* CONFIG_BLK_DEV_INTEGRITY */
static void nvme_dif_remap(struct request *req,
			void (*dif_swap)(u32 p, u32 v, struct t10_pi_tuple *pi))
{
}
static void nvme_dif_prep(u32 p, u32 v, struct t10_pi_tuple *pi)
{
}
static void nvme_dif_complete(u32 p, u32 v, struct t10_pi_tuple *pi)
{
}
#endif

C
Christoph Hellwig 已提交
464
static bool nvme_setup_prps(struct nvme_dev *dev, struct request *req,
465
		int total_len)
M
Matthew Wilcox 已提交
466
{
C
Christoph Hellwig 已提交
467
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
468
	struct dma_pool *pool;
469 470
	int length = total_len;
	struct scatterlist *sg = iod->sg;
M
Matthew Wilcox 已提交
471 472
	int dma_len = sg_dma_len(sg);
	u64 dma_addr = sg_dma_address(sg);
473
	u32 page_size = dev->ctrl.page_size;
474
	int offset = dma_addr & (page_size - 1);
475
	__le64 *prp_list;
C
Christoph Hellwig 已提交
476
	__le64 **list = iod_list(req);
477
	dma_addr_t prp_dma;
478
	int nprps, i;
M
Matthew Wilcox 已提交
479

480
	length -= (page_size - offset);
M
Matthew Wilcox 已提交
481
	if (length <= 0)
482
		return true;
M
Matthew Wilcox 已提交
483

484
	dma_len -= (page_size - offset);
M
Matthew Wilcox 已提交
485
	if (dma_len) {
486
		dma_addr += (page_size - offset);
M
Matthew Wilcox 已提交
487 488 489 490 491 492
	} else {
		sg = sg_next(sg);
		dma_addr = sg_dma_address(sg);
		dma_len = sg_dma_len(sg);
	}

493
	if (length <= page_size) {
494
		iod->first_dma = dma_addr;
495
		return true;
496 497
	}

498
	nprps = DIV_ROUND_UP(length, page_size);
499 500
	if (nprps <= (256 / 8)) {
		pool = dev->prp_small_pool;
501
		iod->npages = 0;
502 503
	} else {
		pool = dev->prp_page_pool;
504
		iod->npages = 1;
505 506
	}

507
	prp_list = dma_pool_alloc(pool, GFP_ATOMIC, &prp_dma);
508
	if (!prp_list) {
509
		iod->first_dma = dma_addr;
510
		iod->npages = -1;
511
		return false;
512
	}
513 514
	list[0] = prp_list;
	iod->first_dma = prp_dma;
515 516
	i = 0;
	for (;;) {
517
		if (i == page_size >> 3) {
518
			__le64 *old_prp_list = prp_list;
519
			prp_list = dma_pool_alloc(pool, GFP_ATOMIC, &prp_dma);
520
			if (!prp_list)
521
				return false;
522
			list[iod->npages++] = prp_list;
523 524 525
			prp_list[0] = old_prp_list[i - 1];
			old_prp_list[i - 1] = cpu_to_le64(prp_dma);
			i = 1;
526 527
		}
		prp_list[i++] = cpu_to_le64(dma_addr);
528 529 530
		dma_len -= page_size;
		dma_addr += page_size;
		length -= page_size;
531 532 533 534 535 536 537 538
		if (length <= 0)
			break;
		if (dma_len > 0)
			continue;
		BUG_ON(dma_len < 0);
		sg = sg_next(sg);
		dma_addr = sg_dma_address(sg);
		dma_len = sg_dma_len(sg);
M
Matthew Wilcox 已提交
539 540
	}

541
	return true;
M
Matthew Wilcox 已提交
542 543
}

C
Christoph Hellwig 已提交
544
static int nvme_map_data(struct nvme_dev *dev, struct request *req,
C
Christoph Hellwig 已提交
545
		struct nvme_command *cmnd)
546
{
C
Christoph Hellwig 已提交
547
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Christoph Hellwig 已提交
548 549 550 551
	struct request_queue *q = req->q;
	enum dma_data_direction dma_dir = rq_data_dir(req) ?
			DMA_TO_DEVICE : DMA_FROM_DEVICE;
	int ret = BLK_MQ_RQ_QUEUE_ERROR;
552

C
Christoph Hellwig 已提交
553 554 555 556
	sg_init_table(iod->sg, req->nr_phys_segments);
	iod->nents = blk_rq_map_sg(q, req, iod->sg);
	if (!iod->nents)
		goto out;
557

C
Christoph Hellwig 已提交
558 559 560
	ret = BLK_MQ_RQ_QUEUE_BUSY;
	if (!dma_map_sg(dev->dev, iod->sg, iod->nents, dma_dir))
		goto out;
561

C
Christoph Hellwig 已提交
562
	if (!nvme_setup_prps(dev, req, blk_rq_bytes(req)))
C
Christoph Hellwig 已提交
563
		goto out_unmap;
564

C
Christoph Hellwig 已提交
565 566 567 568
	ret = BLK_MQ_RQ_QUEUE_ERROR;
	if (blk_integrity_rq(req)) {
		if (blk_rq_count_integrity_sg(q, req->bio) != 1)
			goto out_unmap;
569

570 571
		sg_init_table(&iod->meta_sg, 1);
		if (blk_rq_map_integrity_sg(q, req->bio, &iod->meta_sg) != 1)
C
Christoph Hellwig 已提交
572
			goto out_unmap;
573

C
Christoph Hellwig 已提交
574 575
		if (rq_data_dir(req))
			nvme_dif_remap(req, nvme_dif_prep);
576

577
		if (!dma_map_sg(dev->dev, &iod->meta_sg, 1, dma_dir))
C
Christoph Hellwig 已提交
578
			goto out_unmap;
579
	}
M
Matthew Wilcox 已提交
580

C
Christoph Hellwig 已提交
581 582 583
	cmnd->rw.prp1 = cpu_to_le64(sg_dma_address(iod->sg));
	cmnd->rw.prp2 = cpu_to_le64(iod->first_dma);
	if (blk_integrity_rq(req))
584
		cmnd->rw.metadata = cpu_to_le64(sg_dma_address(&iod->meta_sg));
C
Christoph Hellwig 已提交
585
	return BLK_MQ_RQ_QUEUE_OK;
M
Matthew Wilcox 已提交
586

C
Christoph Hellwig 已提交
587 588 589 590
out_unmap:
	dma_unmap_sg(dev->dev, iod->sg, iod->nents, dma_dir);
out:
	return ret;
M
Matthew Wilcox 已提交
591 592
}

C
Christoph Hellwig 已提交
593
static void nvme_unmap_data(struct nvme_dev *dev, struct request *req)
M
Matthew Wilcox 已提交
594
{
C
Christoph Hellwig 已提交
595
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
596 597 598 599 600 601 602 603
	enum dma_data_direction dma_dir = rq_data_dir(req) ?
			DMA_TO_DEVICE : DMA_FROM_DEVICE;

	if (iod->nents) {
		dma_unmap_sg(dev->dev, iod->sg, iod->nents, dma_dir);
		if (blk_integrity_rq(req)) {
			if (!rq_data_dir(req))
				nvme_dif_remap(req, nvme_dif_complete);
604
			dma_unmap_sg(dev->dev, &iod->meta_sg, 1, dma_dir);
K
Keith Busch 已提交
605
		}
606
	}
K
Keith Busch 已提交
607

C
Christoph Hellwig 已提交
608
	nvme_free_iod(dev, req);
609
}
M
Matthew Wilcox 已提交
610

M
Matias Bjørling 已提交
611 612 613 614 615
/*
 * We reuse the small pool to allocate the 16-byte range here as it is not
 * worth having a special pool for these or additional cases to handle freeing
 * the iod.
 */
C
Christoph Hellwig 已提交
616
static int nvme_setup_discard(struct nvme_queue *nvmeq, struct nvme_ns *ns,
C
Christoph Hellwig 已提交
617
		struct request *req, struct nvme_command *cmnd)
618
{
C
Christoph Hellwig 已提交
619
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
C
Christoph Hellwig 已提交
620
	struct nvme_dsm_range *range;
M
Matthew Wilcox 已提交
621

C
Christoph Hellwig 已提交
622 623 624 625
	range = dma_pool_alloc(nvmeq->dev->prp_small_pool, GFP_ATOMIC,
						&iod->first_dma);
	if (!range)
		return BLK_MQ_RQ_QUEUE_BUSY;
C
Christoph Hellwig 已提交
626
	iod_list(req)[0] = (__le64 *)range;
C
Christoph Hellwig 已提交
627
	iod->npages = 0;
628 629

	range->cattr = cpu_to_le32(0);
M
Matias Bjørling 已提交
630 631
	range->nlb = cpu_to_le32(blk_rq_bytes(req) >> ns->lba_shift);
	range->slba = cpu_to_le64(nvme_block_nr(ns, blk_rq_pos(req)));
632

C
Christoph Hellwig 已提交
633 634 635 636 637 638 639
	memset(cmnd, 0, sizeof(*cmnd));
	cmnd->dsm.opcode = nvme_cmd_dsm;
	cmnd->dsm.nsid = cpu_to_le32(ns->ns_id);
	cmnd->dsm.prp1 = cpu_to_le64(iod->first_dma);
	cmnd->dsm.nr = 0;
	cmnd->dsm.attributes = cpu_to_le32(NVME_DSMGMT_AD);
	return BLK_MQ_RQ_QUEUE_OK;
640 641
}

642 643 644
/*
 * NOTE: ns is NULL when called on the admin queue.
 */
M
Matias Bjørling 已提交
645 646
static int nvme_queue_rq(struct blk_mq_hw_ctx *hctx,
			 const struct blk_mq_queue_data *bd)
647
{
M
Matias Bjørling 已提交
648 649
	struct nvme_ns *ns = hctx->queue->queuedata;
	struct nvme_queue *nvmeq = hctx->driver_data;
650
	struct nvme_dev *dev = nvmeq->dev;
M
Matias Bjørling 已提交
651
	struct request *req = bd->rq;
C
Christoph Hellwig 已提交
652 653
	struct nvme_command cmnd;
	int ret = BLK_MQ_RQ_QUEUE_OK;
654

K
Keith Busch 已提交
655 656 657 658 659
	/*
	 * If formated with metadata, require the block layer provide a buffer
	 * unless this namespace is formated such that the metadata can be
	 * stripped/generated by the controller with PRACT=1.
	 */
660
	if (ns && ns->ms && !blk_integrity_rq(req)) {
661 662
		if (!(ns->pi_type && ns->ms == 8) &&
					req->cmd_type != REQ_TYPE_DRV_PRIV) {
663
			blk_mq_end_request(req, -EFAULT);
K
Keith Busch 已提交
664 665 666 667
			return BLK_MQ_RQ_QUEUE_OK;
		}
	}

C
Christoph Hellwig 已提交
668 669 670
	ret = nvme_init_iod(req, dev);
	if (ret)
		return ret;
M
Matias Bjørling 已提交
671 672

	if (req->cmd_flags & REQ_DISCARD) {
C
Christoph Hellwig 已提交
673
		ret = nvme_setup_discard(nvmeq, ns, req, &cmnd);
C
Christoph Hellwig 已提交
674 675 676 677 678 679 680
	} else {
		if (req->cmd_type == REQ_TYPE_DRV_PRIV)
			memcpy(&cmnd, req->cmd, sizeof(cmnd));
		else if (req->cmd_flags & REQ_FLUSH)
			nvme_setup_flush(ns, &cmnd);
		else
			nvme_setup_rw(ns, req, &cmnd);
M
Matias Bjørling 已提交
681

C
Christoph Hellwig 已提交
682
		if (req->nr_phys_segments)
C
Christoph Hellwig 已提交
683
			ret = nvme_map_data(dev, req, &cmnd);
684
	}
M
Matias Bjørling 已提交
685

C
Christoph Hellwig 已提交
686 687
	if (ret)
		goto out;
M
Matias Bjørling 已提交
688

C
Christoph Hellwig 已提交
689
	cmnd.common.command_id = req->tag;
690
	blk_mq_start_request(req);
M
Matias Bjørling 已提交
691

C
Christoph Hellwig 已提交
692
	spin_lock_irq(&nvmeq->q_lock);
693 694 695 696 697
	if (unlikely(nvmeq->cq_vector < 0)) {
		ret = BLK_MQ_RQ_QUEUE_BUSY;
		spin_unlock_irq(&nvmeq->q_lock);
		goto out;
	}
C
Christoph Hellwig 已提交
698
	__nvme_submit_cmd(nvmeq, &cmnd);
M
Matias Bjørling 已提交
699 700 701
	nvme_process_cq(nvmeq);
	spin_unlock_irq(&nvmeq->q_lock);
	return BLK_MQ_RQ_QUEUE_OK;
C
Christoph Hellwig 已提交
702
out:
C
Christoph Hellwig 已提交
703
	nvme_free_iod(dev, req);
C
Christoph Hellwig 已提交
704
	return ret;
M
Matthew Wilcox 已提交
705
}
K
Keith Busch 已提交
706

707 708
static void nvme_complete_rq(struct request *req)
{
C
Christoph Hellwig 已提交
709 710
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_dev *dev = iod->nvmeq->dev;
711
	int error = 0;
K
Keith Busch 已提交
712

C
Christoph Hellwig 已提交
713
	nvme_unmap_data(dev, req);
K
Keith Busch 已提交
714

715 716 717 718
	if (unlikely(req->errors)) {
		if (nvme_req_needs_retry(req, req->errors)) {
			nvme_requeue_req(req);
			return;
K
Keith Busch 已提交
719
		}
720

721 722 723 724 725
		if (req->cmd_type == REQ_TYPE_DRV_PRIV)
			error = req->errors;
		else
			error = nvme_error_status(req->errors);
	}
M
Matias Bjørling 已提交
726

C
Christoph Hellwig 已提交
727
	if (unlikely(iod->aborted)) {
728 729 730 731
		dev_warn(dev->dev,
			"completing aborted command with status: %04x\n",
			req->errors);
	}
M
Matias Bjørling 已提交
732

733
	blk_mq_end_request(req, error);
M
Matthew Wilcox 已提交
734 735
}

J
Jens Axboe 已提交
736
static void __nvme_process_cq(struct nvme_queue *nvmeq, unsigned int *tag)
M
Matthew Wilcox 已提交
737
{
M
Matthew Wilcox 已提交
738
	u16 head, phase;
M
Matthew Wilcox 已提交
739 740

	head = nvmeq->cq_head;
M
Matthew Wilcox 已提交
741
	phase = nvmeq->cq_phase;
M
Matthew Wilcox 已提交
742 743 744

	for (;;) {
		struct nvme_completion cqe = nvmeq->cqes[head];
745
		u16 status = le16_to_cpu(cqe.status);
746
		struct request *req;
747 748

		if ((status & 1) != phase)
M
Matthew Wilcox 已提交
749 750 751 752
			break;
		nvmeq->sq_head = le16_to_cpu(cqe.sq_head);
		if (++head == nvmeq->q_depth) {
			head = 0;
M
Matthew Wilcox 已提交
753
			phase = !phase;
M
Matthew Wilcox 已提交
754
		}
755

J
Jens Axboe 已提交
756 757
		if (tag && *tag == cqe.command_id)
			*tag = -1;
758

759 760 761 762 763 764 765
		if (unlikely(cqe.command_id >= nvmeq->q_depth)) {
			dev_warn(nvmeq->q_dmadev,
				"invalid id %d completed on queue %d\n",
				cqe.command_id, le16_to_cpu(cqe.sq_id));
			continue;
		}

766 767 768 769 770 771 772 773 774 775 776 777
		/*
		 * AEN requests are special as they don't time out and can
		 * survive any kind of queue freeze and often don't respond to
		 * aborts.  We don't even bother to allocate a struct request
		 * for them but rather special case them here.
		 */
		if (unlikely(nvmeq->qid == 0 &&
				cqe.command_id >= NVME_AQ_BLKMQ_DEPTH)) {
			nvme_complete_async_event(nvmeq->dev, &cqe);
			continue;
		}

778 779 780 781 782 783 784
		req = blk_mq_tag_to_rq(*nvmeq->tags, cqe.command_id);
		if (req->cmd_type == REQ_TYPE_DRV_PRIV) {
			u32 result = le32_to_cpu(cqe.result);
			req->special = (void *)(uintptr_t)result;
		}
		blk_mq_complete_request(req, status >> 1);

M
Matthew Wilcox 已提交
785 786 787 788 789 790 791 792
	}

	/* If the controller ignores the cq head doorbell and continuously
	 * writes to the queue, it is theoretically possible to wrap around
	 * the queue twice and mistakenly return IRQ_NONE.  Linux only
	 * requires that 0.1% of your interrupts are handled, so this isn't
	 * a big problem.
	 */
M
Matthew Wilcox 已提交
793
	if (head == nvmeq->cq_head && phase == nvmeq->cq_phase)
J
Jens Axboe 已提交
794
		return;
M
Matthew Wilcox 已提交
795

796 797
	if (likely(nvmeq->cq_vector >= 0))
		writel(head, nvmeq->q_db + nvmeq->dev->db_stride);
M
Matthew Wilcox 已提交
798
	nvmeq->cq_head = head;
M
Matthew Wilcox 已提交
799
	nvmeq->cq_phase = phase;
M
Matthew Wilcox 已提交
800

801
	nvmeq->cqe_seen = 1;
J
Jens Axboe 已提交
802 803 804 805 806
}

static void nvme_process_cq(struct nvme_queue *nvmeq)
{
	__nvme_process_cq(nvmeq, NULL);
M
Matthew Wilcox 已提交
807 808 809
}

static irqreturn_t nvme_irq(int irq, void *data)
810 811 812 813
{
	irqreturn_t result;
	struct nvme_queue *nvmeq = data;
	spin_lock(&nvmeq->q_lock);
814 815 816
	nvme_process_cq(nvmeq);
	result = nvmeq->cqe_seen ? IRQ_HANDLED : IRQ_NONE;
	nvmeq->cqe_seen = 0;
817 818 819 820 821 822 823 824 825 826 827 828 829
	spin_unlock(&nvmeq->q_lock);
	return result;
}

static irqreturn_t nvme_irq_check(int irq, void *data)
{
	struct nvme_queue *nvmeq = data;
	struct nvme_completion cqe = nvmeq->cqes[nvmeq->cq_head];
	if ((le16_to_cpu(cqe.status) & 1) != nvmeq->cq_phase)
		return IRQ_NONE;
	return IRQ_WAKE_THREAD;
}

J
Jens Axboe 已提交
830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846
static int nvme_poll(struct blk_mq_hw_ctx *hctx, unsigned int tag)
{
	struct nvme_queue *nvmeq = hctx->driver_data;

	if ((le16_to_cpu(nvmeq->cqes[nvmeq->cq_head].status) & 1) ==
	    nvmeq->cq_phase) {
		spin_lock_irq(&nvmeq->q_lock);
		__nvme_process_cq(nvmeq, &tag);
		spin_unlock_irq(&nvmeq->q_lock);

		if (tag == -1)
			return 1;
	}

	return 0;
}

847
static void nvme_submit_async_event(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
848
{
M
Matias Bjørling 已提交
849
	struct nvme_command c;
M
Matthew Wilcox 已提交
850

M
Matias Bjørling 已提交
851 852
	memset(&c, 0, sizeof(c));
	c.common.opcode = nvme_admin_async_event;
853
	c.common.command_id = NVME_AQ_BLKMQ_DEPTH + --dev->ctrl.event_limit;
854

855
	__nvme_submit_cmd(dev->queues[0], &c);
856 857
}

M
Matthew Wilcox 已提交
858
static int adapter_delete_queue(struct nvme_dev *dev, u8 opcode, u16 id)
859
{
M
Matthew Wilcox 已提交
860 861 862 863 864 865
	struct nvme_command c;

	memset(&c, 0, sizeof(c));
	c.delete_queue.opcode = opcode;
	c.delete_queue.qid = cpu_to_le16(id);

866
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
867 868 869 870 871 872 873 874
}

static int adapter_alloc_cq(struct nvme_dev *dev, u16 qid,
						struct nvme_queue *nvmeq)
{
	struct nvme_command c;
	int flags = NVME_QUEUE_PHYS_CONTIG | NVME_CQ_IRQ_ENABLED;

875 876 877 878
	/*
	 * Note: we (ab)use the fact the the prp fields survive if no data
	 * is attached to the request.
	 */
M
Matthew Wilcox 已提交
879 880 881 882 883 884 885 886
	memset(&c, 0, sizeof(c));
	c.create_cq.opcode = nvme_admin_create_cq;
	c.create_cq.prp1 = cpu_to_le64(nvmeq->cq_dma_addr);
	c.create_cq.cqid = cpu_to_le16(qid);
	c.create_cq.qsize = cpu_to_le16(nvmeq->q_depth - 1);
	c.create_cq.cq_flags = cpu_to_le16(flags);
	c.create_cq.irq_vector = cpu_to_le16(nvmeq->cq_vector);

887
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
888 889 890 891 892 893 894 895
}

static int adapter_alloc_sq(struct nvme_dev *dev, u16 qid,
						struct nvme_queue *nvmeq)
{
	struct nvme_command c;
	int flags = NVME_QUEUE_PHYS_CONTIG | NVME_SQ_PRIO_MEDIUM;

896 897 898 899
	/*
	 * Note: we (ab)use the fact the the prp fields survive if no data
	 * is attached to the request.
	 */
M
Matthew Wilcox 已提交
900 901 902 903 904 905 906 907
	memset(&c, 0, sizeof(c));
	c.create_sq.opcode = nvme_admin_create_sq;
	c.create_sq.prp1 = cpu_to_le64(nvmeq->sq_dma_addr);
	c.create_sq.sqid = cpu_to_le16(qid);
	c.create_sq.qsize = cpu_to_le16(nvmeq->q_depth - 1);
	c.create_sq.sq_flags = cpu_to_le16(flags);
	c.create_sq.cqid = cpu_to_le16(qid);

908
	return nvme_submit_sync_cmd(dev->ctrl.admin_q, &c, NULL, 0);
M
Matthew Wilcox 已提交
909 910 911 912 913 914 915 916 917 918 919 920
}

static int adapter_delete_cq(struct nvme_dev *dev, u16 cqid)
{
	return adapter_delete_queue(dev, nvme_admin_delete_cq, cqid);
}

static int adapter_delete_sq(struct nvme_dev *dev, u16 sqid)
{
	return adapter_delete_queue(dev, nvme_admin_delete_sq, sqid);
}

921
static void abort_endio(struct request *req, int error)
922
{
C
Christoph Hellwig 已提交
923 924
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_queue *nvmeq = iod->nvmeq;
925 926
	u32 result = (u32)(uintptr_t)req->special;
	u16 status = req->errors;
927

928 929
	dev_warn(nvmeq->q_dmadev, "Abort status:%x result:%x", status, result);
	atomic_inc(&nvmeq->dev->ctrl.abort_limit);
930

931
	blk_mq_free_request(req);
932 933
}

934
static enum blk_eh_timer_return nvme_timeout(struct request *req, bool reserved)
K
Keith Busch 已提交
935
{
C
Christoph Hellwig 已提交
936 937
	struct nvme_iod *iod = blk_mq_rq_to_pdu(req);
	struct nvme_queue *nvmeq = iod->nvmeq;
K
Keith Busch 已提交
938
	struct nvme_dev *dev = nvmeq->dev;
M
Matias Bjørling 已提交
939 940
	struct request *abort_req;
	struct nvme_command cmd;
K
Keith Busch 已提交
941

942
	/*
943 944 945 946 947 948 949 950 951
	 * Shutdown immediately if controller times out while starting. The
	 * reset work will see the pci device disabled when it gets the forced
	 * cancellation error. All outstanding requests are completed on
	 * shutdown, so we return BLK_EH_HANDLED.
	 */
	if (test_bit(NVME_CTRL_RESETTING, &dev->flags)) {
		dev_warn(dev->dev,
			 "I/O %d QID %d timeout, disable controller\n",
			 req->tag, nvmeq->qid);
952
		nvme_dev_disable(dev, false);
953 954
		req->errors = NVME_SC_CANCELLED;
		return BLK_EH_HANDLED;
K
Keith Busch 已提交
955 956
	}

957 958 959 960
	/*
 	 * Shutdown the controller immediately and schedule a reset if the
 	 * command was already aborted once before and still hasn't been
 	 * returned to the driver, or if this is the admin queue.
961
	 */
C
Christoph Hellwig 已提交
962
	if (!nvmeq->qid || iod->aborted) {
963 964 965
		dev_warn(dev->dev,
			 "I/O %d QID %d timeout, reset controller\n",
			 req->tag, nvmeq->qid);
966
		nvme_dev_disable(dev, false);
967
		queue_work(nvme_workq, &dev->reset_work);
K
Keith Busch 已提交
968

969 970 971 972 973 974
		/*
		 * Mark the request as handled, since the inline shutdown
		 * forces all outstanding requests to complete.
		 */
		req->errors = NVME_SC_CANCELLED;
		return BLK_EH_HANDLED;
K
Keith Busch 已提交
975 976
	}

C
Christoph Hellwig 已提交
977
	iod->aborted = 1;
K
Keith Busch 已提交
978

979
	if (atomic_dec_return(&dev->ctrl.abort_limit) < 0) {
980
		atomic_inc(&dev->ctrl.abort_limit);
981
		return BLK_EH_RESET_TIMER;
982
	}
M
Matias Bjørling 已提交
983

K
Keith Busch 已提交
984 985
	memset(&cmd, 0, sizeof(cmd));
	cmd.abort.opcode = nvme_admin_abort_cmd;
M
Matias Bjørling 已提交
986
	cmd.abort.cid = req->tag;
K
Keith Busch 已提交
987 988
	cmd.abort.sqid = cpu_to_le16(nvmeq->qid);

989 990
	dev_warn(nvmeq->q_dmadev, "I/O %d QID %d timeout, aborting\n",
				 req->tag, nvmeq->qid);
991 992 993 994 995 996 997 998 999 1000 1001

	abort_req = nvme_alloc_request(dev->ctrl.admin_q, &cmd,
			BLK_MQ_REQ_NOWAIT);
	if (IS_ERR(abort_req)) {
		atomic_inc(&dev->ctrl.abort_limit);
		return BLK_EH_RESET_TIMER;
	}

	abort_req->timeout = ADMIN_TIMEOUT;
	abort_req->end_io_data = NULL;
	blk_execute_rq_nowait(abort_req->q, NULL, abort_req, 0, abort_endio);
K
Keith Busch 已提交
1002

1003 1004 1005 1006 1007 1008
	/*
	 * The aborted req will be completed on receiving the abort req.
	 * We enable the timer again. If hit twice, it'll cause a device reset,
	 * as the device then is in a faulty state.
	 */
	return BLK_EH_RESET_TIMER;
K
Keith Busch 已提交
1009 1010
}

1011
static void nvme_cancel_queue_ios(struct request *req, void *data, bool reserved)
1012
{
M
Matias Bjørling 已提交
1013
	struct nvme_queue *nvmeq = data;
1014
	int status;
K
Keith Busch 已提交
1015 1016 1017

	if (!blk_mq_request_started(req))
		return;
1018

K
Keith Busch 已提交
1019
	dev_dbg_ratelimited(nvmeq->q_dmadev,
1020
		 "Cancelling I/O %d QID %d\n", req->tag, nvmeq->qid);
M
Matias Bjørling 已提交
1021

1022
	status = NVME_SC_ABORT_REQ;
K
Keith Busch 已提交
1023
	if (blk_queue_dying(req->q))
1024 1025
		status |= NVME_SC_DNR;
	blk_mq_complete_request(req, status);
M
Matias Bjørling 已提交
1026
}
1027

M
Matias Bjørling 已提交
1028 1029
static void nvme_free_queue(struct nvme_queue *nvmeq)
{
1030 1031
	dma_free_coherent(nvmeq->q_dmadev, CQ_SIZE(nvmeq->q_depth),
				(void *)nvmeq->cqes, nvmeq->cq_dma_addr);
1032 1033
	if (nvmeq->sq_cmds)
		dma_free_coherent(nvmeq->q_dmadev, SQ_SIZE(nvmeq->q_depth),
1034 1035 1036 1037
					nvmeq->sq_cmds, nvmeq->sq_dma_addr);
	kfree(nvmeq);
}

1038
static void nvme_free_queues(struct nvme_dev *dev, int lowest)
1039 1040 1041
{
	int i;

1042
	for (i = dev->queue_count - 1; i >= lowest; i--) {
M
Matias Bjørling 已提交
1043
		struct nvme_queue *nvmeq = dev->queues[i];
1044
		dev->queue_count--;
M
Matias Bjørling 已提交
1045
		dev->queues[i] = NULL;
K
Keith Busch 已提交
1046
		nvme_free_queue(nvmeq);
1047
	}
1048 1049
}

K
Keith Busch 已提交
1050 1051 1052 1053 1054
/**
 * nvme_suspend_queue - put queue into suspended state
 * @nvmeq - queue to suspend
 */
static int nvme_suspend_queue(struct nvme_queue *nvmeq)
M
Matthew Wilcox 已提交
1055
{
K
Keith Busch 已提交
1056
	int vector;
M
Matthew Wilcox 已提交
1057

1058
	spin_lock_irq(&nvmeq->q_lock);
K
Keith Busch 已提交
1059 1060 1061 1062 1063
	if (nvmeq->cq_vector == -1) {
		spin_unlock_irq(&nvmeq->q_lock);
		return 1;
	}
	vector = nvmeq->dev->entry[nvmeq->cq_vector].vector;
K
Keith Busch 已提交
1064
	nvmeq->dev->online_queues--;
K
Keith Busch 已提交
1065
	nvmeq->cq_vector = -1;
1066 1067
	spin_unlock_irq(&nvmeq->q_lock);

1068
	if (!nvmeq->qid && nvmeq->dev->ctrl.admin_q)
1069
		blk_mq_stop_hw_queues(nvmeq->dev->ctrl.admin_q);
1070

M
Matthew Wilcox 已提交
1071 1072
	irq_set_affinity_hint(vector, NULL);
	free_irq(vector, nvmeq);
M
Matthew Wilcox 已提交
1073

K
Keith Busch 已提交
1074 1075
	return 0;
}
M
Matthew Wilcox 已提交
1076

K
Keith Busch 已提交
1077 1078
static void nvme_clear_queue(struct nvme_queue *nvmeq)
{
1079
	spin_lock_irq(&nvmeq->q_lock);
1080 1081
	if (nvmeq->tags && *nvmeq->tags)
		blk_mq_all_tag_busy_iter(*nvmeq->tags, nvme_cancel_queue_ios, nvmeq);
1082
	spin_unlock_irq(&nvmeq->q_lock);
M
Matthew Wilcox 已提交
1083 1084
}

1085
static void nvme_disable_admin_queue(struct nvme_dev *dev, bool shutdown)
K
Keith Busch 已提交
1086
{
1087
	struct nvme_queue *nvmeq = dev->queues[0];
K
Keith Busch 已提交
1088 1089 1090 1091 1092 1093

	if (!nvmeq)
		return;
	if (nvme_suspend_queue(nvmeq))
		return;

1094 1095 1096 1097 1098
	if (shutdown)
		nvme_shutdown_ctrl(&dev->ctrl);
	else
		nvme_disable_ctrl(&dev->ctrl, lo_hi_readq(
						dev->bar + NVME_REG_CAP));
1099 1100 1101 1102

	spin_lock_irq(&nvmeq->q_lock);
	nvme_process_cq(nvmeq);
	spin_unlock_irq(&nvmeq->q_lock);
M
Matthew Wilcox 已提交
1103 1104
}

1105 1106 1107 1108
static int nvme_cmb_qdepth(struct nvme_dev *dev, int nr_io_queues,
				int entry_size)
{
	int q_depth = dev->q_depth;
1109 1110
	unsigned q_size_aligned = roundup(q_depth * entry_size,
					  dev->ctrl.page_size);
1111 1112

	if (q_size_aligned * nr_io_queues > dev->cmb_size) {
1113
		u64 mem_per_q = div_u64(dev->cmb_size, nr_io_queues);
1114
		mem_per_q = round_down(mem_per_q, dev->ctrl.page_size);
1115
		q_depth = div_u64(mem_per_q, entry_size);
1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132

		/*
		 * Ensure the reduced q_depth is above some threshold where it
		 * would be better to map queues in system memory with the
		 * original depth
		 */
		if (q_depth < 64)
			return -ENOMEM;
	}

	return q_depth;
}

static int nvme_alloc_sq_cmds(struct nvme_dev *dev, struct nvme_queue *nvmeq,
				int qid, int depth)
{
	if (qid && dev->cmb && use_cmb_sqes && NVME_CMB_SQS(dev->cmbsz)) {
1133 1134
		unsigned offset = (qid - 1) * roundup(SQ_SIZE(depth),
						      dev->ctrl.page_size);
1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146
		nvmeq->sq_dma_addr = dev->cmb_dma_addr + offset;
		nvmeq->sq_cmds_io = dev->cmb + offset;
	} else {
		nvmeq->sq_cmds = dma_alloc_coherent(dev->dev, SQ_SIZE(depth),
					&nvmeq->sq_dma_addr, GFP_KERNEL);
		if (!nvmeq->sq_cmds)
			return -ENOMEM;
	}

	return 0;
}

M
Matthew Wilcox 已提交
1147
static struct nvme_queue *nvme_alloc_queue(struct nvme_dev *dev, int qid,
K
Keith Busch 已提交
1148
							int depth)
M
Matthew Wilcox 已提交
1149
{
M
Matias Bjørling 已提交
1150
	struct nvme_queue *nvmeq = kzalloc(sizeof(*nvmeq), GFP_KERNEL);
M
Matthew Wilcox 已提交
1151 1152 1153
	if (!nvmeq)
		return NULL;

1154
	nvmeq->cqes = dma_zalloc_coherent(dev->dev, CQ_SIZE(depth),
J
Joe Perches 已提交
1155
					  &nvmeq->cq_dma_addr, GFP_KERNEL);
M
Matthew Wilcox 已提交
1156 1157 1158
	if (!nvmeq->cqes)
		goto free_nvmeq;

1159
	if (nvme_alloc_sq_cmds(dev, nvmeq, qid, depth))
M
Matthew Wilcox 已提交
1160 1161
		goto free_cqdma;

1162
	nvmeq->q_dmadev = dev->dev;
M
Matthew Wilcox 已提交
1163
	nvmeq->dev = dev;
1164
	snprintf(nvmeq->irqname, sizeof(nvmeq->irqname), "nvme%dq%d",
1165
			dev->ctrl.instance, qid);
M
Matthew Wilcox 已提交
1166 1167
	spin_lock_init(&nvmeq->q_lock);
	nvmeq->cq_head = 0;
M
Matthew Wilcox 已提交
1168
	nvmeq->cq_phase = 1;
1169
	nvmeq->q_db = &dev->dbs[qid * 2 * dev->db_stride];
M
Matthew Wilcox 已提交
1170
	nvmeq->q_depth = depth;
K
Keith Busch 已提交
1171
	nvmeq->qid = qid;
1172
	nvmeq->cq_vector = -1;
M
Matias Bjørling 已提交
1173
	dev->queues[qid] = nvmeq;
M
Matthew Wilcox 已提交
1174

1175 1176 1177 1178
	/* make sure queue descriptor is set before queue count, for kthread */
	mb();
	dev->queue_count++;

M
Matthew Wilcox 已提交
1179 1180 1181
	return nvmeq;

 free_cqdma:
1182
	dma_free_coherent(dev->dev, CQ_SIZE(depth), (void *)nvmeq->cqes,
M
Matthew Wilcox 已提交
1183 1184 1185 1186 1187 1188
							nvmeq->cq_dma_addr);
 free_nvmeq:
	kfree(nvmeq);
	return NULL;
}

1189 1190 1191
static int queue_request_irq(struct nvme_dev *dev, struct nvme_queue *nvmeq,
							const char *name)
{
1192 1193
	if (use_threaded_interrupts)
		return request_threaded_irq(dev->entry[nvmeq->cq_vector].vector,
1194
					nvme_irq_check, nvme_irq, IRQF_SHARED,
1195
					name, nvmeq);
1196
	return request_irq(dev->entry[nvmeq->cq_vector].vector, nvme_irq,
1197
				IRQF_SHARED, name, nvmeq);
1198 1199
}

1200
static void nvme_init_queue(struct nvme_queue *nvmeq, u16 qid)
M
Matthew Wilcox 已提交
1201
{
1202
	struct nvme_dev *dev = nvmeq->dev;
M
Matthew Wilcox 已提交
1203

1204
	spin_lock_irq(&nvmeq->q_lock);
1205 1206 1207
	nvmeq->sq_tail = 0;
	nvmeq->cq_head = 0;
	nvmeq->cq_phase = 1;
1208
	nvmeq->q_db = &dev->dbs[qid * 2 * dev->db_stride];
1209
	memset((void *)nvmeq->cqes, 0, CQ_SIZE(nvmeq->q_depth));
K
Keith Busch 已提交
1210
	dev->online_queues++;
1211
	spin_unlock_irq(&nvmeq->q_lock);
1212 1213 1214 1215 1216 1217
}

static int nvme_create_queue(struct nvme_queue *nvmeq, int qid)
{
	struct nvme_dev *dev = nvmeq->dev;
	int result;
1218

K
Keith Busch 已提交
1219
	nvmeq->cq_vector = qid - 1;
M
Matthew Wilcox 已提交
1220 1221
	result = adapter_alloc_cq(dev, qid, nvmeq);
	if (result < 0)
1222
		return result;
M
Matthew Wilcox 已提交
1223 1224 1225 1226 1227

	result = adapter_alloc_sq(dev, qid, nvmeq);
	if (result < 0)
		goto release_cq;

1228
	result = queue_request_irq(dev, nvmeq, nvmeq->irqname);
M
Matthew Wilcox 已提交
1229 1230 1231
	if (result < 0)
		goto release_sq;

1232 1233
	nvme_init_queue(nvmeq, qid);
	return result;
M
Matthew Wilcox 已提交
1234 1235 1236 1237 1238

 release_sq:
	adapter_delete_sq(dev, qid);
 release_cq:
	adapter_delete_cq(dev, qid);
1239
	return result;
M
Matthew Wilcox 已提交
1240 1241
}

M
Matias Bjørling 已提交
1242
static struct blk_mq_ops nvme_mq_admin_ops = {
1243
	.queue_rq	= nvme_queue_rq,
1244
	.complete	= nvme_complete_rq,
M
Matias Bjørling 已提交
1245 1246
	.map_queue	= blk_mq_map_queue,
	.init_hctx	= nvme_admin_init_hctx,
1247
	.exit_hctx      = nvme_admin_exit_hctx,
M
Matias Bjørling 已提交
1248 1249 1250 1251 1252 1253
	.init_request	= nvme_admin_init_request,
	.timeout	= nvme_timeout,
};

static struct blk_mq_ops nvme_mq_ops = {
	.queue_rq	= nvme_queue_rq,
1254
	.complete	= nvme_complete_rq,
M
Matias Bjørling 已提交
1255 1256 1257 1258
	.map_queue	= blk_mq_map_queue,
	.init_hctx	= nvme_init_hctx,
	.init_request	= nvme_init_request,
	.timeout	= nvme_timeout,
J
Jens Axboe 已提交
1259
	.poll		= nvme_poll,
M
Matias Bjørling 已提交
1260 1261
};

1262 1263
static void nvme_dev_remove_admin(struct nvme_dev *dev)
{
1264 1265
	if (dev->ctrl.admin_q && !blk_queue_dying(dev->ctrl.admin_q)) {
		blk_cleanup_queue(dev->ctrl.admin_q);
1266 1267 1268 1269
		blk_mq_free_tag_set(&dev->admin_tagset);
	}
}

M
Matias Bjørling 已提交
1270 1271
static int nvme_alloc_admin_tags(struct nvme_dev *dev)
{
1272
	if (!dev->ctrl.admin_q) {
M
Matias Bjørling 已提交
1273 1274
		dev->admin_tagset.ops = &nvme_mq_admin_ops;
		dev->admin_tagset.nr_hw_queues = 1;
K
Keith Busch 已提交
1275 1276 1277 1278 1279 1280

		/*
		 * Subtract one to leave an empty queue entry for 'Full Queue'
		 * condition. See NVM-Express 1.2 specification, section 4.1.2.
		 */
		dev->admin_tagset.queue_depth = NVME_AQ_BLKMQ_DEPTH - 1;
M
Matias Bjørling 已提交
1281
		dev->admin_tagset.timeout = ADMIN_TIMEOUT;
1282
		dev->admin_tagset.numa_node = dev_to_node(dev->dev);
1283
		dev->admin_tagset.cmd_size = nvme_cmd_size(dev);
M
Matias Bjørling 已提交
1284 1285 1286 1287 1288
		dev->admin_tagset.driver_data = dev;

		if (blk_mq_alloc_tag_set(&dev->admin_tagset))
			return -ENOMEM;

1289 1290
		dev->ctrl.admin_q = blk_mq_init_queue(&dev->admin_tagset);
		if (IS_ERR(dev->ctrl.admin_q)) {
M
Matias Bjørling 已提交
1291 1292 1293
			blk_mq_free_tag_set(&dev->admin_tagset);
			return -ENOMEM;
		}
1294
		if (!blk_get_queue(dev->ctrl.admin_q)) {
1295
			nvme_dev_remove_admin(dev);
1296
			dev->ctrl.admin_q = NULL;
1297 1298
			return -ENODEV;
		}
K
Keith Busch 已提交
1299
	} else
1300
		blk_mq_start_stopped_hw_queues(dev->ctrl.admin_q, true);
M
Matias Bjørling 已提交
1301 1302 1303 1304

	return 0;
}

1305
static int nvme_configure_admin_queue(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
1306
{
1307
	int result;
M
Matthew Wilcox 已提交
1308
	u32 aqa;
1309
	u64 cap = lo_hi_readq(dev->bar + NVME_REG_CAP);
M
Matthew Wilcox 已提交
1310 1311
	struct nvme_queue *nvmeq;

1312
	dev->subsystem = readl(dev->bar + NVME_REG_VS) >= NVME_VS(1, 1) ?
1313 1314
						NVME_CAP_NSSRC(cap) : 0;

1315 1316 1317
	if (dev->subsystem &&
	    (readl(dev->bar + NVME_REG_CSTS) & NVME_CSTS_NSSRO))
		writel(NVME_CSTS_NSSRO, dev->bar + NVME_REG_CSTS);
1318

1319
	result = nvme_disable_ctrl(&dev->ctrl, cap);
1320 1321
	if (result < 0)
		return result;
M
Matthew Wilcox 已提交
1322

M
Matias Bjørling 已提交
1323
	nvmeq = dev->queues[0];
1324
	if (!nvmeq) {
K
Keith Busch 已提交
1325
		nvmeq = nvme_alloc_queue(dev, 0, NVME_AQ_DEPTH);
1326 1327 1328
		if (!nvmeq)
			return -ENOMEM;
	}
M
Matthew Wilcox 已提交
1329 1330 1331 1332

	aqa = nvmeq->q_depth - 1;
	aqa |= aqa << 16;

1333 1334 1335
	writel(aqa, dev->bar + NVME_REG_AQA);
	lo_hi_writeq(nvmeq->sq_dma_addr, dev->bar + NVME_REG_ASQ);
	lo_hi_writeq(nvmeq->cq_dma_addr, dev->bar + NVME_REG_ACQ);
M
Matthew Wilcox 已提交
1336

1337
	result = nvme_enable_ctrl(&dev->ctrl, cap);
1338
	if (result)
M
Matias Bjørling 已提交
1339 1340
		goto free_nvmeq;

K
Keith Busch 已提交
1341
	nvmeq->cq_vector = 0;
1342
	result = queue_request_irq(dev, nvmeq, nvmeq->irqname);
1343 1344
	if (result) {
		nvmeq->cq_vector = -1;
K
Keith Busch 已提交
1345
		goto free_nvmeq;
1346
	}
1347

M
Matthew Wilcox 已提交
1348
	return result;
M
Matias Bjørling 已提交
1349 1350 1351 1352

 free_nvmeq:
	nvme_free_queues(dev, 0);
	return result;
M
Matthew Wilcox 已提交
1353 1354
}

1355 1356
static int nvme_kthread(void *data)
{
1357
	struct nvme_dev *dev, *next;
1358 1359

	while (!kthread_should_stop()) {
1360
		set_current_state(TASK_INTERRUPTIBLE);
1361
		spin_lock(&dev_list_lock);
1362
		list_for_each_entry_safe(dev, next, &dev_list, node) {
1363
			int i;
1364
			u32 csts = readl(dev->bar + NVME_REG_CSTS);
1365

C
Christoph Hellwig 已提交
1366 1367 1368 1369 1370
			/*
			 * Skip controllers currently under reset.
			 */
			if (work_pending(&dev->reset_work) || work_busy(&dev->reset_work))
				continue;
1371 1372 1373

			if ((dev->subsystem && (csts & NVME_CSTS_NSSRO)) ||
							csts & NVME_CSTS_CFS) {
C
Christoph Hellwig 已提交
1374
				if (queue_work(nvme_workq, &dev->reset_work)) {
1375 1376
					dev_warn(dev->dev,
						"Failed status: %x, reset controller\n",
1377
						readl(dev->bar + NVME_REG_CSTS));
1378
				}
1379 1380
				continue;
			}
1381
			for (i = 0; i < dev->queue_count; i++) {
M
Matias Bjørling 已提交
1382
				struct nvme_queue *nvmeq = dev->queues[i];
1383 1384
				if (!nvmeq)
					continue;
1385
				spin_lock_irq(&nvmeq->q_lock);
1386
				nvme_process_cq(nvmeq);
K
Keith Busch 已提交
1387

1388 1389
				while (i == 0 && dev->ctrl.event_limit > 0)
					nvme_submit_async_event(dev);
1390 1391 1392 1393
				spin_unlock_irq(&nvmeq->q_lock);
			}
		}
		spin_unlock(&dev_list_lock);
1394
		schedule_timeout(round_jiffies_relative(HZ));
1395 1396 1397 1398
	}
	return 0;
}

1399
static int nvme_create_io_queues(struct nvme_dev *dev)
K
Keith Busch 已提交
1400
{
M
Matias Bjørling 已提交
1401
	unsigned i;
1402
	int ret = 0;
K
Keith Busch 已提交
1403

1404 1405 1406
	for (i = dev->queue_count; i <= dev->max_qid; i++) {
		if (!nvme_alloc_queue(dev, i, dev->q_depth)) {
			ret = -ENOMEM;
K
Keith Busch 已提交
1407
			break;
1408 1409
		}
	}
K
Keith Busch 已提交
1410

1411 1412 1413
	for (i = dev->online_queues; i <= dev->queue_count - 1; i++) {
		ret = nvme_create_queue(dev->queues[i], i);
		if (ret) {
1414
			nvme_free_queues(dev, i);
K
Keith Busch 已提交
1415
			break;
1416
		}
M
Matthew Wilcox 已提交
1417
	}
1418 1419 1420 1421 1422 1423 1424 1425

	/*
	 * Ignore failing Create SQ/CQ commands, we can continue with less
	 * than the desired aount of queues, and even a controller without
	 * I/O queues an still be used to issue admin commands.  This might
	 * be useful to upgrade a buggy firmware for example.
	 */
	return ret >= 0 ? 0 : ret;
M
Matthew Wilcox 已提交
1426 1427
}

1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439
static void __iomem *nvme_map_cmb(struct nvme_dev *dev)
{
	u64 szu, size, offset;
	u32 cmbloc;
	resource_size_t bar_size;
	struct pci_dev *pdev = to_pci_dev(dev->dev);
	void __iomem *cmb;
	dma_addr_t dma_addr;

	if (!use_cmb_sqes)
		return NULL;

1440
	dev->cmbsz = readl(dev->bar + NVME_REG_CMBSZ);
1441 1442 1443
	if (!(NVME_CMB_SZ(dev->cmbsz)))
		return NULL;

1444
	cmbloc = readl(dev->bar + NVME_REG_CMBLOC);
1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479

	szu = (u64)1 << (12 + 4 * NVME_CMB_SZU(dev->cmbsz));
	size = szu * NVME_CMB_SZ(dev->cmbsz);
	offset = szu * NVME_CMB_OFST(cmbloc);
	bar_size = pci_resource_len(pdev, NVME_CMB_BIR(cmbloc));

	if (offset > bar_size)
		return NULL;

	/*
	 * Controllers may support a CMB size larger than their BAR,
	 * for example, due to being behind a bridge. Reduce the CMB to
	 * the reported size of the BAR
	 */
	if (size > bar_size - offset)
		size = bar_size - offset;

	dma_addr = pci_resource_start(pdev, NVME_CMB_BIR(cmbloc)) + offset;
	cmb = ioremap_wc(dma_addr, size);
	if (!cmb)
		return NULL;

	dev->cmb_dma_addr = dma_addr;
	dev->cmb_size = size;
	return cmb;
}

static inline void nvme_release_cmb(struct nvme_dev *dev)
{
	if (dev->cmb) {
		iounmap(dev->cmb);
		dev->cmb = NULL;
	}
}

K
Keith Busch 已提交
1480 1481
static size_t db_bar_size(struct nvme_dev *dev, unsigned nr_io_queues)
{
1482
	return 4096 + ((nr_io_queues + 1) * 8 * dev->db_stride);
K
Keith Busch 已提交
1483 1484
}

1485
static int nvme_setup_io_queues(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
1486
{
M
Matias Bjørling 已提交
1487
	struct nvme_queue *adminq = dev->queues[0];
1488
	struct pci_dev *pdev = to_pci_dev(dev->dev);
K
Keith Busch 已提交
1489
	int result, i, vecs, nr_io_queues, size;
M
Matthew Wilcox 已提交
1490

K
Keith Busch 已提交
1491
	nr_io_queues = num_possible_cpus();
C
Christoph Hellwig 已提交
1492 1493
	result = nvme_set_queue_count(&dev->ctrl, &nr_io_queues);
	if (result < 0)
M
Matthew Wilcox 已提交
1494
		return result;
C
Christoph Hellwig 已提交
1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505

	/*
	 * Degraded controllers might return an error when setting the queue
	 * count.  We still want to be able to bring them online and offer
	 * access to the admin queue, as that might be only way to fix them up.
	 */
	if (result > 0) {
		dev_err(dev->dev, "Could not set queue count (%d)\n", result);
		nr_io_queues = 0;
		result = 0;
	}
M
Matthew Wilcox 已提交
1506

1507 1508 1509 1510 1511 1512 1513 1514 1515
	if (dev->cmb && NVME_CMB_SQS(dev->cmbsz)) {
		result = nvme_cmb_qdepth(dev, nr_io_queues,
				sizeof(struct nvme_command));
		if (result > 0)
			dev->q_depth = result;
		else
			nvme_release_cmb(dev);
	}

K
Keith Busch 已提交
1516 1517
	size = db_bar_size(dev, nr_io_queues);
	if (size > 8192) {
1518
		iounmap(dev->bar);
K
Keith Busch 已提交
1519 1520 1521 1522 1523 1524 1525 1526
		do {
			dev->bar = ioremap(pci_resource_start(pdev, 0), size);
			if (dev->bar)
				break;
			if (!--nr_io_queues)
				return -ENOMEM;
			size = db_bar_size(dev, nr_io_queues);
		} while (1);
1527
		dev->dbs = dev->bar + 4096;
1528
		adminq->q_db = dev->dbs;
1529 1530
	}

K
Keith Busch 已提交
1531
	/* Deregister the admin queue's interrupt */
1532
	free_irq(dev->entry[0].vector, adminq);
K
Keith Busch 已提交
1533

1534 1535 1536 1537 1538 1539 1540
	/*
	 * If we enable msix early due to not intx, disable it again before
	 * setting up the full range we need.
	 */
	if (!pdev->irq)
		pci_disable_msix(pdev);

1541
	for (i = 0; i < nr_io_queues; i++)
M
Matthew Wilcox 已提交
1542
		dev->entry[i].entry = i;
1543 1544 1545 1546 1547 1548 1549 1550
	vecs = pci_enable_msix_range(pdev, dev->entry, 1, nr_io_queues);
	if (vecs < 0) {
		vecs = pci_enable_msi_range(pdev, 1, min(nr_io_queues, 32));
		if (vecs < 0) {
			vecs = 1;
		} else {
			for (i = 0; i < vecs; i++)
				dev->entry[i].vector = i + pdev->irq;
R
Ramachandra Rao Gajula 已提交
1551 1552 1553
		}
	}

1554 1555 1556 1557 1558 1559 1560
	/*
	 * Should investigate if there's a performance win from allocating
	 * more queues than interrupt vectors; it might allow the submission
	 * path to scale better, even if the receive path is limited by the
	 * number of interrupts.
	 */
	nr_io_queues = vecs;
K
Keith Busch 已提交
1561
	dev->max_qid = nr_io_queues;
1562

1563
	result = queue_request_irq(dev, adminq, adminq->irqname);
1564 1565
	if (result) {
		adminq->cq_vector = -1;
1566
		goto free_queues;
1567
	}
M
Matthew Wilcox 已提交
1568

1569
	/* Free previously allocated queues that are no longer usable */
K
Keith Busch 已提交
1570
	nvme_free_queues(dev, nr_io_queues + 1);
1571
	return nvme_create_io_queues(dev);
M
Matthew Wilcox 已提交
1572

1573
 free_queues:
1574
	nvme_free_queues(dev, 1);
1575
	return result;
M
Matthew Wilcox 已提交
1576 1577
}

1578
static void nvme_set_irq_hints(struct nvme_dev *dev)
K
Keith Busch 已提交
1579
{
1580 1581
	struct nvme_queue *nvmeq;
	int i;
K
Keith Busch 已提交
1582

1583 1584
	for (i = 0; i < dev->online_queues; i++) {
		nvmeq = dev->queues[i];
K
Keith Busch 已提交
1585

1586 1587
		if (!nvmeq->tags || !(*nvmeq->tags))
			continue;
K
Keith Busch 已提交
1588

1589 1590
		irq_set_affinity_hint(dev->entry[nvmeq->cq_vector].vector,
					blk_mq_tags_cpumask(*nvmeq->tags));
K
Keith Busch 已提交
1591 1592 1593 1594 1595 1596 1597 1598 1599
	}
}

static void nvme_dev_scan(struct work_struct *work)
{
	struct nvme_dev *dev = container_of(work, struct nvme_dev, scan_work);

	if (!dev->tagset.tags)
		return;
1600
	nvme_scan_namespaces(&dev->ctrl);
1601
	nvme_set_irq_hints(dev);
K
Keith Busch 已提交
1602 1603
}

K
Keith Busch 已提交
1604
static void nvme_del_queue_end(struct request *req, int error)
K
Keith Busch 已提交
1605
{
K
Keith Busch 已提交
1606
	struct nvme_queue *nvmeq = req->end_io_data;
1607

K
Keith Busch 已提交
1608 1609
	blk_mq_free_request(req);
	complete(&nvmeq->dev->ioq_wait);
K
Keith Busch 已提交
1610 1611
}

K
Keith Busch 已提交
1612
static void nvme_del_cq_end(struct request *req, int error)
K
Keith Busch 已提交
1613
{
K
Keith Busch 已提交
1614
	struct nvme_queue *nvmeq = req->end_io_data;
K
Keith Busch 已提交
1615

K
Keith Busch 已提交
1616 1617 1618 1619 1620 1621
	if (!error) {
		unsigned long flags;

		spin_lock_irqsave(&nvmeq->q_lock, flags);
		nvme_process_cq(nvmeq);
		spin_unlock_irqrestore(&nvmeq->q_lock, flags);
K
Keith Busch 已提交
1622
	}
K
Keith Busch 已提交
1623 1624

	nvme_del_queue_end(req, error);
K
Keith Busch 已提交
1625 1626
}

K
Keith Busch 已提交
1627
static int nvme_delete_queue(struct nvme_queue *nvmeq, u8 opcode)
1628
{
K
Keith Busch 已提交
1629 1630 1631
	struct request_queue *q = nvmeq->dev->ctrl.admin_q;
	struct request *req;
	struct nvme_command cmd;
1632

K
Keith Busch 已提交
1633 1634 1635
	memset(&cmd, 0, sizeof(cmd));
	cmd.delete_queue.opcode = opcode;
	cmd.delete_queue.qid = cpu_to_le16(nvmeq->qid);
1636

K
Keith Busch 已提交
1637 1638 1639
	req = nvme_alloc_request(q, &cmd, BLK_MQ_REQ_NOWAIT);
	if (IS_ERR(req))
		return PTR_ERR(req);
1640

K
Keith Busch 已提交
1641 1642 1643 1644 1645 1646 1647
	req->timeout = ADMIN_TIMEOUT;
	req->end_io_data = nvmeq;

	blk_execute_rq_nowait(q, NULL, req, false,
			opcode == nvme_admin_delete_cq ?
				nvme_del_cq_end : nvme_del_queue_end);
	return 0;
1648 1649
}

K
Keith Busch 已提交
1650
static void nvme_disable_io_queues(struct nvme_dev *dev)
K
Keith Busch 已提交
1651
{
K
Keith Busch 已提交
1652 1653 1654
	int pass;
	unsigned long timeout;
	u8 opcode = nvme_admin_delete_sq;
K
Keith Busch 已提交
1655

K
Keith Busch 已提交
1656 1657 1658 1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679
	for (pass = 0; pass < 2; pass++) {
		int sent = 0, i = dev->queue_count - 1;

		reinit_completion(&dev->ioq_wait);
 retry:
		timeout = ADMIN_TIMEOUT;
		for (; i > 0; i--) {
			struct nvme_queue *nvmeq = dev->queues[i];

			if (!pass)
				nvme_suspend_queue(nvmeq);
			if (nvme_delete_queue(nvmeq, opcode))
				break;
			++sent;
		}
		while (sent--) {
			timeout = wait_for_completion_io_timeout(&dev->ioq_wait, timeout);
			if (timeout == 0)
				return;
			if (i)
				goto retry;
		}
		opcode = nvme_admin_delete_cq;
	}
K
Keith Busch 已提交
1680 1681
}

1682 1683 1684 1685 1686 1687
/*
 * Return: error value if an error occurred setting up the queues or calling
 * Identify Device.  0 if these succeeded, even if adding some of the
 * namespaces failed.  At the moment, these failures are silent.  TBD which
 * failures should be reported.
 */
1688
static int nvme_dev_add(struct nvme_dev *dev)
M
Matthew Wilcox 已提交
1689
{
1690
	if (!dev->ctrl.tagset) {
1691 1692 1693 1694 1695
		dev->tagset.ops = &nvme_mq_ops;
		dev->tagset.nr_hw_queues = dev->online_queues - 1;
		dev->tagset.timeout = NVME_IO_TIMEOUT;
		dev->tagset.numa_node = dev_to_node(dev->dev);
		dev->tagset.queue_depth =
M
Matias Bjørling 已提交
1696
				min_t(int, dev->q_depth, BLK_MQ_MAX_DEPTH) - 1;
1697 1698 1699
		dev->tagset.cmd_size = nvme_cmd_size(dev);
		dev->tagset.flags = BLK_MQ_F_SHOULD_MERGE;
		dev->tagset.driver_data = dev;
M
Matthew Wilcox 已提交
1700

1701 1702
		if (blk_mq_alloc_tag_set(&dev->tagset))
			return 0;
1703
		dev->ctrl.tagset = &dev->tagset;
1704
	}
1705
	nvme_queue_scan(dev);
K
Keith Busch 已提交
1706
	return 0;
M
Matthew Wilcox 已提交
1707 1708
}

1709
static int nvme_pci_enable(struct nvme_dev *dev)
1710
{
K
Keith Busch 已提交
1711
	u64 cap;
1712
	int result = -ENOMEM;
1713
	struct pci_dev *pdev = to_pci_dev(dev->dev);
1714 1715 1716 1717 1718 1719 1720

	if (pci_enable_device_mem(pdev))
		return result;

	dev->entry[0].vector = pdev->irq;
	pci_set_master(pdev);

1721 1722
	if (dma_set_mask_and_coherent(dev->dev, DMA_BIT_MASK(64)) &&
	    dma_set_mask_and_coherent(dev->dev, DMA_BIT_MASK(32)))
1723
		goto disable;
1724

1725
	if (readl(dev->bar + NVME_REG_CSTS) == -1) {
K
Keith Busch 已提交
1726
		result = -ENODEV;
1727
		goto disable;
K
Keith Busch 已提交
1728
	}
1729 1730 1731 1732 1733 1734 1735 1736

	/*
	 * Some devices don't advertse INTx interrupts, pre-enable a single
	 * MSIX vec for setup. We'll adjust this later.
	 */
	if (!pdev->irq) {
		result = pci_enable_msix(pdev, dev->entry, 1);
		if (result < 0)
1737
			goto disable;
1738 1739
	}

1740 1741
	cap = lo_hi_readq(dev->bar + NVME_REG_CAP);

K
Keith Busch 已提交
1742 1743
	dev->q_depth = min_t(int, NVME_CAP_MQES(cap) + 1, NVME_Q_DEPTH);
	dev->db_stride = 1 << NVME_CAP_STRIDE(cap);
1744
	dev->dbs = dev->bar + 4096;
1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756

	/*
	 * Temporary fix for the Apple controller found in the MacBook8,1 and
	 * some MacBook7,1 to avoid controller resets and data loss.
	 */
	if (pdev->vendor == PCI_VENDOR_ID_APPLE && pdev->device == 0x2001) {
		dev->q_depth = 2;
		dev_warn(dev->dev, "detected Apple NVMe controller, set "
			"queue depth=%u to work around controller resets\n",
			dev->q_depth);
	}

1757
	if (readl(dev->bar + NVME_REG_VS) >= NVME_VS(1, 2))
1758
		dev->cmb = nvme_map_cmb(dev);
1759

K
Keith Busch 已提交
1760 1761
	pci_enable_pcie_error_reporting(pdev);
	pci_save_state(pdev);
1762 1763 1764 1765 1766 1767 1768 1769
	return 0;

 disable:
	pci_disable_device(pdev);
	return result;
}

static void nvme_dev_unmap(struct nvme_dev *dev)
1770 1771 1772 1773 1774 1775 1776
{
	if (dev->bar)
		iounmap(dev->bar);
	pci_release_regions(to_pci_dev(dev->dev));
}

static void nvme_pci_disable(struct nvme_dev *dev)
1777
{
1778 1779 1780 1781 1782 1783
	struct pci_dev *pdev = to_pci_dev(dev->dev);

	if (pdev->msi_enabled)
		pci_disable_msi(pdev);
	else if (pdev->msix_enabled)
		pci_disable_msix(pdev);
1784

K
Keith Busch 已提交
1785 1786
	if (pci_is_enabled(pdev)) {
		pci_disable_pcie_error_reporting(pdev);
1787
		pci_disable_device(pdev);
K
Keith Busch 已提交
1788 1789 1790
	}
}

1791
static int nvme_dev_list_add(struct nvme_dev *dev)
K
Keith Busch 已提交
1792
{
1793
	bool start_thread = false;
K
Keith Busch 已提交
1794

1795 1796 1797 1798
	spin_lock(&dev_list_lock);
	if (list_empty(&dev_list) && IS_ERR_OR_NULL(nvme_thread)) {
		start_thread = true;
		nvme_thread = NULL;
K
Keith Busch 已提交
1799
	}
1800 1801
	list_add(&dev->node, &dev_list);
	spin_unlock(&dev_list_lock);
K
Keith Busch 已提交
1802

1803 1804 1805 1806 1807
	if (start_thread) {
		nvme_thread = kthread_run(nvme_kthread, NULL, "nvme");
		wake_up_all(&nvme_kthread_wait);
	} else
		wait_event_killable(nvme_kthread_wait, nvme_thread);
K
Keith Busch 已提交
1808

1809 1810 1811 1812
	if (IS_ERR_OR_NULL(nvme_thread))
		return nvme_thread ? PTR_ERR(nvme_thread) : -EINTR;

	return 0;
K
Keith Busch 已提交
1813 1814
}

1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834
/*
* Remove the node from the device list and check
* for whether or not we need to stop the nvme_thread.
*/
static void nvme_dev_list_remove(struct nvme_dev *dev)
{
	struct task_struct *tmp = NULL;

	spin_lock(&dev_list_lock);
	list_del_init(&dev->node);
	if (list_empty(&dev_list) && !IS_ERR_OR_NULL(nvme_thread)) {
		tmp = nvme_thread;
		nvme_thread = NULL;
	}
	spin_unlock(&dev_list_lock);

	if (tmp)
		kthread_stop(tmp);
}

1835
static void nvme_dev_disable(struct nvme_dev *dev, bool shutdown)
M
Matthew Wilcox 已提交
1836
{
1837
	int i;
1838
	u32 csts = -1;
1839

1840
	nvme_dev_list_remove(dev);
1841

1842
	mutex_lock(&dev->shutdown_lock);
1843
	if (pci_is_enabled(to_pci_dev(dev->dev))) {
1844
		nvme_stop_queues(&dev->ctrl);
1845
		csts = readl(dev->bar + NVME_REG_CSTS);
1846
	}
1847
	if (csts & NVME_CSTS_CFS || !(csts & NVME_CSTS_RDY)) {
K
Keith Busch 已提交
1848
		for (i = dev->queue_count - 1; i >= 0; i--) {
M
Matias Bjørling 已提交
1849
			struct nvme_queue *nvmeq = dev->queues[i];
K
Keith Busch 已提交
1850 1851 1852 1853
			nvme_suspend_queue(nvmeq);
		}
	} else {
		nvme_disable_io_queues(dev);
1854
		nvme_disable_admin_queue(dev, shutdown);
K
Keith Busch 已提交
1855
	}
1856
	nvme_pci_disable(dev);
1857 1858 1859

	for (i = dev->queue_count - 1; i >= 0; i--)
		nvme_clear_queue(dev->queues[i]);
1860
	mutex_unlock(&dev->shutdown_lock);
M
Matthew Wilcox 已提交
1861 1862
}

M
Matthew Wilcox 已提交
1863 1864
static int nvme_setup_prp_pools(struct nvme_dev *dev)
{
1865
	dev->prp_page_pool = dma_pool_create("prp list page", dev->dev,
M
Matthew Wilcox 已提交
1866 1867 1868 1869
						PAGE_SIZE, PAGE_SIZE, 0);
	if (!dev->prp_page_pool)
		return -ENOMEM;

1870
	/* Optimisation for I/Os between 4k and 128k */
1871
	dev->prp_small_pool = dma_pool_create("prp list 256", dev->dev,
1872 1873 1874 1875 1876
						256, 256, 0);
	if (!dev->prp_small_pool) {
		dma_pool_destroy(dev->prp_page_pool);
		return -ENOMEM;
	}
M
Matthew Wilcox 已提交
1877 1878 1879 1880 1881 1882
	return 0;
}

static void nvme_release_prp_pools(struct nvme_dev *dev)
{
	dma_pool_destroy(dev->prp_page_pool);
1883
	dma_pool_destroy(dev->prp_small_pool);
M
Matthew Wilcox 已提交
1884 1885
}

1886
static void nvme_pci_free_ctrl(struct nvme_ctrl *ctrl)
1887
{
1888
	struct nvme_dev *dev = to_nvme_dev(ctrl);
1889

1890
	put_device(dev->dev);
1891 1892
	if (dev->tagset.tags)
		blk_mq_free_tag_set(&dev->tagset);
1893 1894
	if (dev->ctrl.admin_q)
		blk_put_queue(dev->ctrl.admin_q);
1895 1896 1897 1898 1899
	kfree(dev->queues);
	kfree(dev->entry);
	kfree(dev);
}

1900
static void nvme_reset_work(struct work_struct *work)
1901
{
1902
	struct nvme_dev *dev = container_of(work, struct nvme_dev, reset_work);
1903
	int result;
1904

1905 1906
	if (WARN_ON(test_bit(NVME_CTRL_RESETTING, &dev->flags)))
		goto out;
1907

1908 1909 1910 1911
	/*
	 * If we're called to reset a live controller first shut it down before
	 * moving on.
	 */
1912
	if (dev->ctrl.ctrl_config & NVME_CC_ENABLE)
1913
		nvme_dev_disable(dev, false);
1914

1915
	set_bit(NVME_CTRL_RESETTING, &dev->flags);
1916

1917
	result = nvme_pci_enable(dev);
1918
	if (result)
1919
		goto out;
1920 1921 1922 1923 1924

	result = nvme_configure_admin_queue(dev);
	if (result)
		goto unmap;

M
Matias Bjørling 已提交
1925
	nvme_init_queue(dev->queues[0], 0);
K
Keith Busch 已提交
1926 1927 1928
	result = nvme_alloc_admin_tags(dev);
	if (result)
		goto disable;
1929

1930 1931 1932 1933
	result = nvme_init_identify(&dev->ctrl);
	if (result)
		goto free_tags;

1934
	result = nvme_setup_io_queues(dev);
1935
	if (result)
K
Keith Busch 已提交
1936
		goto free_tags;
1937

1938
	dev->ctrl.event_limit = NVME_NR_AEN_COMMANDS;
1939

1940 1941 1942
	result = nvme_dev_list_add(dev);
	if (result)
		goto remove;
1943

1944 1945 1946 1947
	/*
	 * Keep the controller around but remove all namespaces if we don't have
	 * any working I/O queue.
	 */
1948 1949
	if (dev->online_queues < 2) {
		dev_warn(dev->dev, "IO queues not created\n");
1950
		nvme_remove_namespaces(&dev->ctrl);
1951
	} else {
1952
		nvme_start_queues(&dev->ctrl);
1953 1954 1955
		nvme_dev_add(dev);
	}

1956
	clear_bit(NVME_CTRL_RESETTING, &dev->flags);
1957
	return;
1958

1959 1960
 remove:
	nvme_dev_list_remove(dev);
K
Keith Busch 已提交
1961 1962
 free_tags:
	nvme_dev_remove_admin(dev);
1963 1964
	blk_put_queue(dev->ctrl.admin_q);
	dev->ctrl.admin_q = NULL;
1965
	dev->queues[0]->tags = NULL;
1966
 disable:
1967
	nvme_disable_admin_queue(dev, false);
1968 1969
 unmap:
	nvme_dev_unmap(dev);
1970
 out:
1971
	nvme_remove_dead_ctrl(dev);
1972 1973
}

1974
static void nvme_remove_dead_ctrl_work(struct work_struct *work)
K
Keith Busch 已提交
1975
{
1976
	struct nvme_dev *dev = container_of(work, struct nvme_dev, remove_work);
1977
	struct pci_dev *pdev = to_pci_dev(dev->dev);
K
Keith Busch 已提交
1978 1979

	if (pci_get_drvdata(pdev))
1980
		pci_stop_and_remove_bus_device_locked(pdev);
1981
	nvme_put_ctrl(&dev->ctrl);
K
Keith Busch 已提交
1982 1983
}

1984
static void nvme_remove_dead_ctrl(struct nvme_dev *dev)
1985
{
1986
	dev_warn(dev->dev, "Removing after probe failure\n");
1987
	kref_get(&dev->ctrl.kref);
1988
	if (!schedule_work(&dev->remove_work))
1989
		nvme_put_ctrl(&dev->ctrl);
1990 1991
}

1992
static int nvme_reset(struct nvme_dev *dev)
K
Keith Busch 已提交
1993
{
1994
	if (!dev->ctrl.admin_q || blk_queue_dying(dev->ctrl.admin_q))
1995
		return -ENODEV;
1996

C
Christoph Hellwig 已提交
1997 1998
	if (!queue_work(nvme_workq, &dev->reset_work))
		return -EBUSY;
1999

C
Christoph Hellwig 已提交
2000 2001
	flush_work(&dev->reset_work);
	return 0;
K
Keith Busch 已提交
2002 2003
}

2004
static int nvme_pci_reg_read32(struct nvme_ctrl *ctrl, u32 off, u32 *val)
T
Tejun Heo 已提交
2005
{
2006
	*val = readl(to_nvme_dev(ctrl)->bar + off);
2007
	return 0;
T
Tejun Heo 已提交
2008 2009
}

2010
static int nvme_pci_reg_write32(struct nvme_ctrl *ctrl, u32 off, u32 val)
2011
{
2012 2013 2014
	writel(val, to_nvme_dev(ctrl)->bar + off);
	return 0;
}
2015

2016 2017 2018 2019
static int nvme_pci_reg_read64(struct nvme_ctrl *ctrl, u32 off, u64 *val)
{
	*val = readq(to_nvme_dev(ctrl)->bar + off);
	return 0;
2020 2021
}

2022
static bool nvme_pci_io_incapable(struct nvme_ctrl *ctrl)
2023
{
2024
	struct nvme_dev *dev = to_nvme_dev(ctrl);
2025

2026 2027
	return !dev->bar || dev->online_queues < 2;
}
2028

2029 2030 2031
static int nvme_pci_reset_ctrl(struct nvme_ctrl *ctrl)
{
	return nvme_reset(to_nvme_dev(ctrl));
2032
}
2033

2034 2035
static const struct nvme_ctrl_ops nvme_pci_ctrl_ops = {
	.reg_read32		= nvme_pci_reg_read32,
2036
	.reg_write32		= nvme_pci_reg_write32,
2037
	.reg_read64		= nvme_pci_reg_read64,
2038
	.io_incapable		= nvme_pci_io_incapable,
2039
	.reset_ctrl		= nvme_pci_reset_ctrl,
2040
	.free_ctrl		= nvme_pci_free_ctrl,
2041
};
2042

2043 2044 2045 2046 2047 2048 2049 2050 2051 2052 2053 2054 2055 2056 2057 2058 2059 2060 2061 2062 2063
static int nvme_dev_map(struct nvme_dev *dev)
{
	int bars;
	struct pci_dev *pdev = to_pci_dev(dev->dev);

	bars = pci_select_bars(pdev, IORESOURCE_MEM);
	if (!bars)
		return -ENODEV;
	if (pci_request_selected_regions(pdev, bars, "nvme"))
		return -ENODEV;

	dev->bar = ioremap(pci_resource_start(pdev, 0), 8192);
	if (!dev->bar)
		goto release;

       return 0;
  release:
       pci_release_regions(pdev);
       return -ENODEV;
}

2064
static int nvme_probe(struct pci_dev *pdev, const struct pci_device_id *id)
M
Matthew Wilcox 已提交
2065
{
M
Matias Bjørling 已提交
2066
	int node, result = -ENOMEM;
M
Matthew Wilcox 已提交
2067 2068
	struct nvme_dev *dev;

M
Matias Bjørling 已提交
2069 2070 2071 2072 2073
	node = dev_to_node(&pdev->dev);
	if (node == NUMA_NO_NODE)
		set_dev_node(&pdev->dev, 0);

	dev = kzalloc_node(sizeof(*dev), GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2074 2075
	if (!dev)
		return -ENOMEM;
M
Matias Bjørling 已提交
2076 2077
	dev->entry = kzalloc_node(num_possible_cpus() * sizeof(*dev->entry),
							GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2078 2079
	if (!dev->entry)
		goto free;
M
Matias Bjørling 已提交
2080 2081
	dev->queues = kzalloc_node((num_possible_cpus() + 1) * sizeof(void *),
							GFP_KERNEL, node);
M
Matthew Wilcox 已提交
2082 2083 2084
	if (!dev->queues)
		goto free;

2085
	dev->dev = get_device(&pdev->dev);
K
Keith Busch 已提交
2086
	pci_set_drvdata(pdev, dev);
2087

2088 2089 2090 2091
	result = nvme_dev_map(dev);
	if (result)
		goto free;

2092 2093 2094
	INIT_LIST_HEAD(&dev->node);
	INIT_WORK(&dev->scan_work, nvme_dev_scan);
	INIT_WORK(&dev->reset_work, nvme_reset_work);
2095
	INIT_WORK(&dev->remove_work, nvme_remove_dead_ctrl_work);
2096
	mutex_init(&dev->shutdown_lock);
K
Keith Busch 已提交
2097
	init_completion(&dev->ioq_wait);
M
Matthew Wilcox 已提交
2098

M
Matthew Wilcox 已提交
2099 2100
	result = nvme_setup_prp_pools(dev);
	if (result)
K
Keith Busch 已提交
2101
		goto put_pci;
2102

2103 2104
	result = nvme_init_ctrl(&dev->ctrl, &pdev->dev, &nvme_pci_ctrl_ops,
			id->driver_data);
2105
	if (result)
2106
		goto release_pools;
2107

2108
	queue_work(nvme_workq, &dev->reset_work);
M
Matthew Wilcox 已提交
2109 2110
	return 0;

2111
 release_pools:
M
Matthew Wilcox 已提交
2112
	nvme_release_prp_pools(dev);
K
Keith Busch 已提交
2113
 put_pci:
2114
	put_device(dev->dev);
2115
	nvme_dev_unmap(dev);
M
Matthew Wilcox 已提交
2116 2117 2118 2119 2120 2121 2122
 free:
	kfree(dev->queues);
	kfree(dev->entry);
	kfree(dev);
	return result;
}

2123 2124
static void nvme_reset_notify(struct pci_dev *pdev, bool prepare)
{
K
Keith Busch 已提交
2125
	struct nvme_dev *dev = pci_get_drvdata(pdev);
2126

K
Keith Busch 已提交
2127
	if (prepare)
2128
		nvme_dev_disable(dev, false);
K
Keith Busch 已提交
2129
	else
2130
		queue_work(nvme_workq, &dev->reset_work);
2131 2132
}

2133 2134 2135
static void nvme_shutdown(struct pci_dev *pdev)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);
2136
	nvme_dev_disable(dev, true);
2137 2138
}

2139
static void nvme_remove(struct pci_dev *pdev)
M
Matthew Wilcox 已提交
2140 2141
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);
K
Keith Busch 已提交
2142

2143
	set_bit(NVME_CTRL_REMOVING, &dev->flags);
K
Keith Busch 已提交
2144
	pci_set_drvdata(pdev, NULL);
K
Keith Busch 已提交
2145
	flush_work(&dev->scan_work);
2146
	nvme_remove_namespaces(&dev->ctrl);
2147
	nvme_uninit_ctrl(&dev->ctrl);
2148
	nvme_dev_disable(dev, true);
2149
	flush_work(&dev->reset_work);
M
Matias Bjørling 已提交
2150
	nvme_dev_remove_admin(dev);
2151
	nvme_free_queues(dev, 0);
2152
	nvme_release_cmb(dev);
K
Keith Busch 已提交
2153
	nvme_release_prp_pools(dev);
2154
	nvme_dev_unmap(dev);
2155
	nvme_put_ctrl(&dev->ctrl);
M
Matthew Wilcox 已提交
2156 2157
}

2158
#ifdef CONFIG_PM_SLEEP
2159 2160 2161 2162 2163
static int nvme_suspend(struct device *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev);
	struct nvme_dev *ndev = pci_get_drvdata(pdev);

2164
	nvme_dev_disable(ndev, true);
2165 2166 2167 2168 2169 2170 2171 2172
	return 0;
}

static int nvme_resume(struct device *dev)
{
	struct pci_dev *pdev = to_pci_dev(dev);
	struct nvme_dev *ndev = pci_get_drvdata(pdev);

2173
	queue_work(nvme_workq, &ndev->reset_work);
K
Keith Busch 已提交
2174
	return 0;
2175
}
2176
#endif
2177 2178

static SIMPLE_DEV_PM_OPS(nvme_dev_pm_ops, nvme_suspend, nvme_resume);
M
Matthew Wilcox 已提交
2179

K
Keith Busch 已提交
2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194
static pci_ers_result_t nvme_error_detected(struct pci_dev *pdev,
						pci_channel_state_t state)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);

	/*
	 * A frozen channel requires a reset. When detected, this method will
	 * shutdown the controller to quiesce. The controller will be restarted
	 * after the slot reset through driver's slot_reset callback.
	 */
	dev_warn(&pdev->dev, "error detected: state:%d\n", state);
	switch (state) {
	case pci_channel_io_normal:
		return PCI_ERS_RESULT_CAN_RECOVER;
	case pci_channel_io_frozen:
2195
		nvme_dev_disable(dev, false);
K
Keith Busch 已提交
2196 2197 2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217
		return PCI_ERS_RESULT_NEED_RESET;
	case pci_channel_io_perm_failure:
		return PCI_ERS_RESULT_DISCONNECT;
	}
	return PCI_ERS_RESULT_NEED_RESET;
}

static pci_ers_result_t nvme_slot_reset(struct pci_dev *pdev)
{
	struct nvme_dev *dev = pci_get_drvdata(pdev);

	dev_info(&pdev->dev, "restart after slot reset\n");
	pci_restore_state(pdev);
	queue_work(nvme_workq, &dev->reset_work);
	return PCI_ERS_RESULT_RECOVERED;
}

static void nvme_error_resume(struct pci_dev *pdev)
{
	pci_cleanup_aer_uncorrect_error_status(pdev);
}

2218
static const struct pci_error_handlers nvme_err_handler = {
M
Matthew Wilcox 已提交
2219 2220 2221
	.error_detected	= nvme_error_detected,
	.slot_reset	= nvme_slot_reset,
	.resume		= nvme_error_resume,
2222
	.reset_notify	= nvme_reset_notify,
M
Matthew Wilcox 已提交
2223 2224 2225 2226 2227
};

/* Move to pci_ids.h later */
#define PCI_CLASS_STORAGE_EXPRESS	0x010802

2228
static const struct pci_device_id nvme_id_table[] = {
2229 2230
	{ PCI_VDEVICE(INTEL, 0x0953),
		.driver_data = NVME_QUIRK_STRIPE_SIZE, },
2231 2232
	{ PCI_VDEVICE(INTEL, 0x5845),	/* Qemu emulated controller */
		.driver_data = NVME_QUIRK_IDENTIFY_CNS, },
M
Matthew Wilcox 已提交
2233
	{ PCI_DEVICE_CLASS(PCI_CLASS_STORAGE_EXPRESS, 0xffffff) },
2234
	{ PCI_DEVICE(PCI_VENDOR_ID_APPLE, 0x2001) },
M
Matthew Wilcox 已提交
2235 2236 2237 2238 2239 2240 2241 2242
	{ 0, }
};
MODULE_DEVICE_TABLE(pci, nvme_id_table);

static struct pci_driver nvme_driver = {
	.name		= "nvme",
	.id_table	= nvme_id_table,
	.probe		= nvme_probe,
2243
	.remove		= nvme_remove,
2244
	.shutdown	= nvme_shutdown,
2245 2246 2247
	.driver		= {
		.pm	= &nvme_dev_pm_ops,
	},
M
Matthew Wilcox 已提交
2248 2249 2250 2251 2252
	.err_handler	= &nvme_err_handler,
};

static int __init nvme_init(void)
{
2253
	int result;
2254

2255
	init_waitqueue_head(&nvme_kthread_wait);
M
Matthew Wilcox 已提交
2256

2257
	nvme_workq = alloc_workqueue("nvme", WQ_UNBOUND | WQ_MEM_RECLAIM, 0);
K
Keith Busch 已提交
2258
	if (!nvme_workq)
2259
		return -ENOMEM;
K
Keith Busch 已提交
2260

2261
	result = nvme_core_init();
2262
	if (result < 0)
K
Keith Busch 已提交
2263
		goto kill_workq;
2264

2265 2266
	result = pci_register_driver(&nvme_driver);
	if (result)
2267
		goto core_exit;
2268
	return 0;
M
Matthew Wilcox 已提交
2269

2270
 core_exit:
2271
	nvme_core_exit();
K
Keith Busch 已提交
2272 2273
 kill_workq:
	destroy_workqueue(nvme_workq);
M
Matthew Wilcox 已提交
2274 2275 2276 2277 2278 2279
	return result;
}

static void __exit nvme_exit(void)
{
	pci_unregister_driver(&nvme_driver);
2280
	nvme_core_exit();
K
Keith Busch 已提交
2281
	destroy_workqueue(nvme_workq);
2282
	BUG_ON(nvme_thread && !IS_ERR(nvme_thread));
2283
	_nvme_check_size();
M
Matthew Wilcox 已提交
2284 2285 2286 2287
}

MODULE_AUTHOR("Matthew Wilcox <willy@linux.intel.com>");
MODULE_LICENSE("GPL");
2288
MODULE_VERSION("1.0");
M
Matthew Wilcox 已提交
2289 2290
module_init(nvme_init);
module_exit(nvme_exit);