sys/dev/nvme/nvme_qpair.c

   1 /*-
   2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
   3  *
   4  * Copyright (C) 2012-2014 Intel Corporation
   5  * All rights reserved.
   6  *
   7  * Redistribution and use in source and binary forms, with or without
   8  * modification, are permitted provided that the following conditions
   9  * are met:
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  * 2. Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in the
  14  *    documentation and/or other materials provided with the distribution.
  15  *
  16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  26  * SUCH DAMAGE.
  27  */
  28
  29 #include <sys/cdefs.h>
  30 __FBSDID("$FreeBSD$");
  31
  32 #include <sys/param.h>
  33 #include <sys/bus.h>
  34 #include <sys/conf.h>
  35 #include <sys/domainset.h>
  36 #include <sys/proc.h>
  37
  38 #include <dev/pci/pcivar.h>
  39
  40 #include "nvme_private.h"
  41
  42 typedef enum error_print { ERROR_PRINT_NONE, ERROR_PRINT_NO_RETRY, ERROR_PRINT_ALL } error_print_t;
  43 #define DO_NOT_RETRY    1
  44
  45 static void     _nvme_qpair_submit_request(struct nvme_qpair *qpair,
  46                                            struct nvme_request *req);
  47 static void     nvme_qpair_destroy(struct nvme_qpair *qpair);
  48
  49 struct nvme_opcode_string {
  50
  51         uint16_t        opc;
  52         const char *    str;
  53 };
  54
  55 static struct nvme_opcode_string admin_opcode[] = {
  56         { NVME_OPC_DELETE_IO_SQ, "DELETE IO SQ" },
  57         { NVME_OPC_CREATE_IO_SQ, "CREATE IO SQ" },
  58         { NVME_OPC_GET_LOG_PAGE, "GET LOG PAGE" },
  59         { NVME_OPC_DELETE_IO_CQ, "DELETE IO CQ" },
  60         { NVME_OPC_CREATE_IO_CQ, "CREATE IO CQ" },
  61         { NVME_OPC_IDENTIFY, "IDENTIFY" },
  62         { NVME_OPC_ABORT, "ABORT" },
  63         { NVME_OPC_SET_FEATURES, "SET FEATURES" },
  64         { NVME_OPC_GET_FEATURES, "GET FEATURES" },
  65         { NVME_OPC_ASYNC_EVENT_REQUEST, "ASYNC EVENT REQUEST" },
  66         { NVME_OPC_FIRMWARE_ACTIVATE, "FIRMWARE ACTIVATE" },
  67         { NVME_OPC_FIRMWARE_IMAGE_DOWNLOAD, "FIRMWARE IMAGE DOWNLOAD" },
  68         { NVME_OPC_DEVICE_SELF_TEST, "DEVICE SELF-TEST" },
  69         { NVME_OPC_NAMESPACE_ATTACHMENT, "NAMESPACE ATTACHMENT" },
  70         { NVME_OPC_KEEP_ALIVE, "KEEP ALIVE" },
  71         { NVME_OPC_DIRECTIVE_SEND, "DIRECTIVE SEND" },
  72         { NVME_OPC_DIRECTIVE_RECEIVE, "DIRECTIVE RECEIVE" },
  73         { NVME_OPC_VIRTUALIZATION_MANAGEMENT, "VIRTUALIZATION MANAGEMENT" },
  74         { NVME_OPC_NVME_MI_SEND, "NVME-MI SEND" },
  75         { NVME_OPC_NVME_MI_RECEIVE, "NVME-MI RECEIVE" },
  76         { NVME_OPC_DOORBELL_BUFFER_CONFIG, "DOORBELL BUFFER CONFIG" },
  77         { NVME_OPC_FORMAT_NVM, "FORMAT NVM" },
  78         { NVME_OPC_SECURITY_SEND, "SECURITY SEND" },
  79         { NVME_OPC_SECURITY_RECEIVE, "SECURITY RECEIVE" },
  80         { NVME_OPC_SANITIZE, "SANITIZE" },
  81         { NVME_OPC_GET_LBA_STATUS, "GET LBA STATUS" },
  82         { 0xFFFF, "ADMIN COMMAND" }
  83 };
  84
  85 static struct nvme_opcode_string io_opcode[] = {
  86         { NVME_OPC_FLUSH, "FLUSH" },
  87         { NVME_OPC_WRITE, "WRITE" },
  88         { NVME_OPC_READ, "READ" },
  89         { NVME_OPC_WRITE_UNCORRECTABLE, "WRITE UNCORRECTABLE" },
  90         { NVME_OPC_COMPARE, "COMPARE" },
  91         { NVME_OPC_WRITE_ZEROES, "WRITE ZEROES" },
  92         { NVME_OPC_DATASET_MANAGEMENT, "DATASET MANAGEMENT" },
  93         { NVME_OPC_VERIFY, "VERIFY" },
  94         { NVME_OPC_RESERVATION_REGISTER, "RESERVATION REGISTER" },
  95         { NVME_OPC_RESERVATION_REPORT, "RESERVATION REPORT" },
  96         { NVME_OPC_RESERVATION_ACQUIRE, "RESERVATION ACQUIRE" },
  97         { NVME_OPC_RESERVATION_RELEASE, "RESERVATION RELEASE" },
  98         { 0xFFFF, "IO COMMAND" }
  99 };
 100
 101 static const char *
 102 get_admin_opcode_string(uint16_t opc)
 103 {
 104         struct nvme_opcode_string *entry;
 105
 106         entry = admin_opcode;
 107
 108         while (entry->opc != 0xFFFF) {
 109                 if (entry->opc == opc)
 110                         return (entry->str);
 111                 entry++;
 112         }
 113         return (entry->str);
 114 }
 115
 116 static const char *
 117 get_io_opcode_string(uint16_t opc)
 118 {
 119         struct nvme_opcode_string *entry;
 120
 121         entry = io_opcode;
 122
 123         while (entry->opc != 0xFFFF) {
 124                 if (entry->opc == opc)
 125                         return (entry->str);
 126                 entry++;
 127         }
 128         return (entry->str);
 129 }
 130
 131
 132 static void
 133 nvme_admin_qpair_print_command(struct nvme_qpair *qpair,
 134     struct nvme_command *cmd)
 135 {
 136
 137         nvme_printf(qpair->ctrlr, "%s (%02x) sqid:%d cid:%d nsid:%x "
 138             "cdw10:%08x cdw11:%08x\n",
 139             get_admin_opcode_string(cmd->opc), cmd->opc, qpair->id, cmd->cid,
 140             le32toh(cmd->nsid), le32toh(cmd->cdw10), le32toh(cmd->cdw11));
 141 }
 142
 143 static void
 144 nvme_io_qpair_print_command(struct nvme_qpair *qpair,
 145     struct nvme_command *cmd)
 146 {
 147
 148         switch (cmd->opc) {
 149         case NVME_OPC_WRITE:
 150         case NVME_OPC_READ:
 151         case NVME_OPC_WRITE_UNCORRECTABLE:
 152         case NVME_OPC_COMPARE:
 153         case NVME_OPC_WRITE_ZEROES:
 154         case NVME_OPC_VERIFY:
 155                 nvme_printf(qpair->ctrlr, "%s sqid:%d cid:%d nsid:%d "
 156                     "lba:%llu len:%d\n",
 157                     get_io_opcode_string(cmd->opc), qpair->id, cmd->cid, le32toh(cmd->nsid),
 158                     ((unsigned long long)le32toh(cmd->cdw11) << 32) + le32toh(cmd->cdw10),
 159                     (le32toh(cmd->cdw12) & 0xFFFF) + 1);
 160                 break;
 161         case NVME_OPC_FLUSH:
 162         case NVME_OPC_DATASET_MANAGEMENT:
 163         case NVME_OPC_RESERVATION_REGISTER:
 164         case NVME_OPC_RESERVATION_REPORT:
 165         case NVME_OPC_RESERVATION_ACQUIRE:
 166         case NVME_OPC_RESERVATION_RELEASE:
 167                 nvme_printf(qpair->ctrlr, "%s sqid:%d cid:%d nsid:%d\n",
 168                     get_io_opcode_string(cmd->opc), qpair->id, cmd->cid, le32toh(cmd->nsid));
 169                 break;
 170         default:
 171                 nvme_printf(qpair->ctrlr, "%s (%02x) sqid:%d cid:%d nsid:%d\n",
 172                     get_io_opcode_string(cmd->opc), cmd->opc, qpair->id,
 173                     cmd->cid, le32toh(cmd->nsid));
 174                 break;
 175         }
 176 }
 177
 178 static void
 179 nvme_qpair_print_command(struct nvme_qpair *qpair, struct nvme_command *cmd)
 180 {
 181         if (qpair->id == 0)
 182                 nvme_admin_qpair_print_command(qpair, cmd);
 183         else
 184                 nvme_io_qpair_print_command(qpair, cmd);
 185         if (nvme_verbose_cmd_dump) {
 186                 nvme_printf(qpair->ctrlr,
 187                     "nsid:%#x rsvd2:%#x rsvd3:%#x mptr:%#jx prp1:%#jx prp2:%#jx\n",
 188                     cmd->nsid, cmd->rsvd2, cmd->rsvd3, (uintmax_t)cmd->mptr,
 189                     (uintmax_t)cmd->prp1, (uintmax_t)cmd->prp2);
 190                 nvme_printf(qpair->ctrlr,
 191                     "cdw10: %#x cdw11:%#x cdw12:%#x cdw13:%#x cdw14:%#x cdw15:%#x\n",
 192                     cmd->cdw10, cmd->cdw11, cmd->cdw12, cmd->cdw13, cmd->cdw14,
 193                     cmd->cdw15);
 194         }
 195 }
 196
 197 struct nvme_status_string {
 198
 199         uint16_t        sc;
 200         const char *    str;
 201 };
 202
 203 static struct nvme_status_string generic_status[] = {
 204         { NVME_SC_SUCCESS, "SUCCESS" },
 205         { NVME_SC_INVALID_OPCODE, "INVALID OPCODE" },
 206         { NVME_SC_INVALID_FIELD, "INVALID_FIELD" },
 207         { NVME_SC_COMMAND_ID_CONFLICT, "COMMAND ID CONFLICT" },
 208         { NVME_SC_DATA_TRANSFER_ERROR, "DATA TRANSFER ERROR" },
 209         { NVME_SC_ABORTED_POWER_LOSS, "ABORTED - POWER LOSS" },
 210         { NVME_SC_INTERNAL_DEVICE_ERROR, "INTERNAL DEVICE ERROR" },
 211         { NVME_SC_ABORTED_BY_REQUEST, "ABORTED - BY REQUEST" },
 212         { NVME_SC_ABORTED_SQ_DELETION, "ABORTED - SQ DELETION" },
 213         { NVME_SC_ABORTED_FAILED_FUSED, "ABORTED - FAILED FUSED" },
 214         { NVME_SC_ABORTED_MISSING_FUSED, "ABORTED - MISSING FUSED" },
 215         { NVME_SC_INVALID_NAMESPACE_OR_FORMAT, "INVALID NAMESPACE OR FORMAT" },
 216         { NVME_SC_COMMAND_SEQUENCE_ERROR, "COMMAND SEQUENCE ERROR" },
 217         { NVME_SC_INVALID_SGL_SEGMENT_DESCR, "INVALID SGL SEGMENT DESCRIPTOR" },
 218         { NVME_SC_INVALID_NUMBER_OF_SGL_DESCR, "INVALID NUMBER OF SGL DESCRIPTORS" },
 219         { NVME_SC_DATA_SGL_LENGTH_INVALID, "DATA SGL LENGTH INVALID" },
 220         { NVME_SC_METADATA_SGL_LENGTH_INVALID, "METADATA SGL LENGTH INVALID" },
 221         { NVME_SC_SGL_DESCRIPTOR_TYPE_INVALID, "SGL DESCRIPTOR TYPE INVALID" },
 222         { NVME_SC_INVALID_USE_OF_CMB, "INVALID USE OF CONTROLLER MEMORY BUFFER" },
 223         { NVME_SC_PRP_OFFET_INVALID, "PRP OFFET INVALID" },
 224         { NVME_SC_ATOMIC_WRITE_UNIT_EXCEEDED, "ATOMIC WRITE UNIT EXCEEDED" },
 225         { NVME_SC_OPERATION_DENIED, "OPERATION DENIED" },
 226         { NVME_SC_SGL_OFFSET_INVALID, "SGL OFFSET INVALID" },
 227         { NVME_SC_HOST_ID_INCONSISTENT_FORMAT, "HOST IDENTIFIER INCONSISTENT FORMAT" },
 228         { NVME_SC_KEEP_ALIVE_TIMEOUT_EXPIRED, "KEEP ALIVE TIMEOUT EXPIRED" },
 229         { NVME_SC_KEEP_ALIVE_TIMEOUT_INVALID, "KEEP ALIVE TIMEOUT INVALID" },
 230         { NVME_SC_ABORTED_DUE_TO_PREEMPT, "COMMAND ABORTED DUE TO PREEMPT AND ABORT" },
 231         { NVME_SC_SANITIZE_FAILED, "SANITIZE FAILED" },
 232         { NVME_SC_SANITIZE_IN_PROGRESS, "SANITIZE IN PROGRESS" },
 233         { NVME_SC_SGL_DATA_BLOCK_GRAN_INVALID, "SGL_DATA_BLOCK_GRANULARITY_INVALID" },
 234         { NVME_SC_NOT_SUPPORTED_IN_CMB, "COMMAND NOT SUPPORTED FOR QUEUE IN CMB" },
 235         { NVME_SC_NAMESPACE_IS_WRITE_PROTECTED, "NAMESPACE IS WRITE PROTECTED" },
 236         { NVME_SC_COMMAND_INTERRUPTED, "COMMAND INTERRUPTED" },
 237         { NVME_SC_TRANSIENT_TRANSPORT_ERROR, "TRANSIENT TRANSPORT ERROR" },
 238
 239         { NVME_SC_LBA_OUT_OF_RANGE, "LBA OUT OF RANGE" },
 240         { NVME_SC_CAPACITY_EXCEEDED, "CAPACITY EXCEEDED" },
 241         { NVME_SC_NAMESPACE_NOT_READY, "NAMESPACE NOT READY" },
 242         { NVME_SC_RESERVATION_CONFLICT, "RESERVATION CONFLICT" },
 243         { NVME_SC_FORMAT_IN_PROGRESS, "FORMAT IN PROGRESS" },
 244         { 0xFFFF, "GENERIC" }
 245 };
 246
 247 static struct nvme_status_string command_specific_status[] = {
 248         { NVME_SC_COMPLETION_QUEUE_INVALID, "INVALID COMPLETION QUEUE" },
 249         { NVME_SC_INVALID_QUEUE_IDENTIFIER, "INVALID QUEUE IDENTIFIER" },
 250         { NVME_SC_MAXIMUM_QUEUE_SIZE_EXCEEDED, "MAX QUEUE SIZE EXCEEDED" },
 251         { NVME_SC_ABORT_COMMAND_LIMIT_EXCEEDED, "ABORT CMD LIMIT EXCEEDED" },
 252         { NVME_SC_ASYNC_EVENT_REQUEST_LIMIT_EXCEEDED, "ASYNC LIMIT EXCEEDED" },
 253         { NVME_SC_INVALID_FIRMWARE_SLOT, "INVALID FIRMWARE SLOT" },
 254         { NVME_SC_INVALID_FIRMWARE_IMAGE, "INVALID FIRMWARE IMAGE" },
 255         { NVME_SC_INVALID_INTERRUPT_VECTOR, "INVALID INTERRUPT VECTOR" },
 256         { NVME_SC_INVALID_LOG_PAGE, "INVALID LOG PAGE" },
 257         { NVME_SC_INVALID_FORMAT, "INVALID FORMAT" },
 258         { NVME_SC_FIRMWARE_REQUIRES_RESET, "FIRMWARE REQUIRES RESET" },
 259         { NVME_SC_INVALID_QUEUE_DELETION, "INVALID QUEUE DELETION" },
 260         { NVME_SC_FEATURE_NOT_SAVEABLE, "FEATURE IDENTIFIER NOT SAVEABLE" },
 261         { NVME_SC_FEATURE_NOT_CHANGEABLE, "FEATURE NOT CHANGEABLE" },
 262         { NVME_SC_FEATURE_NOT_NS_SPECIFIC, "FEATURE NOT NAMESPACE SPECIFIC" },
 263         { NVME_SC_FW_ACT_REQUIRES_NVMS_RESET, "FIRMWARE ACTIVATION REQUIRES NVM SUBSYSTEM RESET" },
 264         { NVME_SC_FW_ACT_REQUIRES_RESET, "FIRMWARE ACTIVATION REQUIRES RESET" },
 265         { NVME_SC_FW_ACT_REQUIRES_TIME, "FIRMWARE ACTIVATION REQUIRES MAXIMUM TIME VIOLATION" },
 266         { NVME_SC_FW_ACT_PROHIBITED, "FIRMWARE ACTIVATION PROHIBITED" },
 267         { NVME_SC_OVERLAPPING_RANGE, "OVERLAPPING RANGE" },
 268         { NVME_SC_NS_INSUFFICIENT_CAPACITY, "NAMESPACE INSUFFICIENT CAPACITY" },
 269         { NVME_SC_NS_ID_UNAVAILABLE, "NAMESPACE IDENTIFIER UNAVAILABLE" },
 270         { NVME_SC_NS_ALREADY_ATTACHED, "NAMESPACE ALREADY ATTACHED" },
 271         { NVME_SC_NS_IS_PRIVATE, "NAMESPACE IS PRIVATE" },
 272         { NVME_SC_NS_NOT_ATTACHED, "NS NOT ATTACHED" },
 273         { NVME_SC_THIN_PROV_NOT_SUPPORTED, "THIN PROVISIONING NOT SUPPORTED" },
 274         { NVME_SC_CTRLR_LIST_INVALID, "CONTROLLER LIST INVALID" },
 275         { NVME_SC_SELT_TEST_IN_PROGRESS, "DEVICE SELT-TEST IN PROGRESS" },
 276         { NVME_SC_BOOT_PART_WRITE_PROHIB, "BOOT PARTITION WRITE PROHIBITED" },
 277         { NVME_SC_INVALID_CTRLR_ID, "INVALID CONTROLLER IDENTIFIER" },
 278         { NVME_SC_INVALID_SEC_CTRLR_STATE, "INVALID SECONDARY CONTROLLER STATE" },
 279         { NVME_SC_INVALID_NUM_OF_CTRLR_RESRC, "INVALID NUMBER OF CONTROLLER RESOURCES" },
 280         { NVME_SC_INVALID_RESOURCE_ID, "INVALID RESOURCE IDENTIFIER" },
 281         { NVME_SC_SANITIZE_PROHIBITED_WPMRE, "SANITIZE PROHIBITED WRITE PERSISTENT MEMORY REGION ENABLED" },
 282         { NVME_SC_ANA_GROUP_ID_INVALID, "ANA GROUP IDENTIFIED INVALID" },
 283         { NVME_SC_ANA_ATTACH_FAILED, "ANA ATTACH FAILED" },
 284
 285         { NVME_SC_CONFLICTING_ATTRIBUTES, "CONFLICTING ATTRIBUTES" },
 286         { NVME_SC_INVALID_PROTECTION_INFO, "INVALID PROTECTION INFO" },
 287         { NVME_SC_ATTEMPTED_WRITE_TO_RO_PAGE, "WRITE TO RO PAGE" },
 288         { 0xFFFF, "COMMAND SPECIFIC" }
 289 };
 290
 291 static struct nvme_status_string media_error_status[] = {
 292         { NVME_SC_WRITE_FAULTS, "WRITE FAULTS" },
 293         { NVME_SC_UNRECOVERED_READ_ERROR, "UNRECOVERED READ ERROR" },
 294         { NVME_SC_GUARD_CHECK_ERROR, "GUARD CHECK ERROR" },
 295         { NVME_SC_APPLICATION_TAG_CHECK_ERROR, "APPLICATION TAG CHECK ERROR" },
 296         { NVME_SC_REFERENCE_TAG_CHECK_ERROR, "REFERENCE TAG CHECK ERROR" },
 297         { NVME_SC_COMPARE_FAILURE, "COMPARE FAILURE" },
 298         { NVME_SC_ACCESS_DENIED, "ACCESS DENIED" },
 299         { NVME_SC_DEALLOCATED_OR_UNWRITTEN, "DEALLOCATED OR UNWRITTEN LOGICAL BLOCK" },
 300         { 0xFFFF, "MEDIA ERROR" }
 301 };
 302
 303 static struct nvme_status_string path_related_status[] = {
 304         { NVME_SC_INTERNAL_PATH_ERROR, "INTERNAL PATH ERROR" },
 305         { NVME_SC_ASYMMETRIC_ACCESS_PERSISTENT_LOSS, "ASYMMETRIC ACCESS PERSISTENT LOSS" },
 306         { NVME_SC_ASYMMETRIC_ACCESS_INACCESSIBLE, "ASYMMETRIC ACCESS INACCESSIBLE" },
 307         { NVME_SC_ASYMMETRIC_ACCESS_TRANSITION, "ASYMMETRIC ACCESS TRANSITION" },
 308         { NVME_SC_CONTROLLER_PATHING_ERROR, "CONTROLLER PATHING ERROR" },
 309         { NVME_SC_HOST_PATHING_ERROR, "HOST PATHING ERROR" },
 310         { NVME_SC_COMMAND_ABOTHED_BY_HOST, "COMMAND ABOTHED BY HOST" },
 311         { 0xFFFF, "PATH RELATED" },
 312 };
 313
 314 static const char *
 315 get_status_string(uint16_t sct, uint16_t sc)
 316 {
 317         struct nvme_status_string *entry;
 318
 319         switch (sct) {
 320         case NVME_SCT_GENERIC:
 321                 entry = generic_status;
 322                 break;
 323         case NVME_SCT_COMMAND_SPECIFIC:
 324                 entry = command_specific_status;
 325                 break;
 326         case NVME_SCT_MEDIA_ERROR:
 327                 entry = media_error_status;
 328                 break;
 329         case NVME_SCT_PATH_RELATED:
 330                 entry = path_related_status;
 331                 break;
 332         case NVME_SCT_VENDOR_SPECIFIC:
 333                 return ("VENDOR SPECIFIC");
 334         default:
 335                 return ("RESERVED");
 336         }
 337
 338         while (entry->sc != 0xFFFF) {
 339                 if (entry->sc == sc)
 340                         return (entry->str);
 341                 entry++;
 342         }
 343         return (entry->str);
 344 }
 345
 346 static void
 347 nvme_qpair_print_completion(struct nvme_qpair *qpair,
 348     struct nvme_completion *cpl)
 349 {
 350         uint16_t sct, sc;
 351
 352         sct = NVME_STATUS_GET_SCT(cpl->status);
 353         sc = NVME_STATUS_GET_SC(cpl->status);
 354
 355         nvme_printf(qpair->ctrlr, "%s (%02x/%02x) sqid:%d cid:%d cdw0:%x\n",
 356             get_status_string(sct, sc), sct, sc, cpl->sqid, cpl->cid,
 357             cpl->cdw0);
 358 }
 359
 360 static bool
 361 nvme_completion_is_retry(const struct nvme_completion *cpl)
 362 {
 363         uint8_t sct, sc, dnr;
 364
 365         sct = NVME_STATUS_GET_SCT(cpl->status);
 366         sc = NVME_STATUS_GET_SC(cpl->status);
 367         dnr = NVME_STATUS_GET_DNR(cpl->status); /* Do Not Retry Bit */
 368
 369         /*
 370          * TODO: spec is not clear how commands that are aborted due
 371          *  to TLER will be marked.  So for now, it seems
 372          *  NAMESPACE_NOT_READY is the only case where we should
 373          *  look at the DNR bit. Requests failed with ABORTED_BY_REQUEST
 374          *  set the DNR bit correctly since the driver controls that.
 375          */
 376         switch (sct) {
 377         case NVME_SCT_GENERIC:
 378                 switch (sc) {
 379                 case NVME_SC_ABORTED_BY_REQUEST:
 380                 case NVME_SC_NAMESPACE_NOT_READY:
 381                         if (dnr)
 382                                 return (0);
 383                         else
 384                                 return (1);
 385                 case NVME_SC_INVALID_OPCODE:
 386                 case NVME_SC_INVALID_FIELD:
 387                 case NVME_SC_COMMAND_ID_CONFLICT:
 388                 case NVME_SC_DATA_TRANSFER_ERROR:
 389                 case NVME_SC_ABORTED_POWER_LOSS:
 390                 case NVME_SC_INTERNAL_DEVICE_ERROR:
 391                 case NVME_SC_ABORTED_SQ_DELETION:
 392                 case NVME_SC_ABORTED_FAILED_FUSED:
 393                 case NVME_SC_ABORTED_MISSING_FUSED:
 394                 case NVME_SC_INVALID_NAMESPACE_OR_FORMAT:
 395                 case NVME_SC_COMMAND_SEQUENCE_ERROR:
 396                 case NVME_SC_LBA_OUT_OF_RANGE:
 397                 case NVME_SC_CAPACITY_EXCEEDED:
 398                 default:
 399                         return (0);
 400                 }
 401         case NVME_SCT_COMMAND_SPECIFIC:
 402         case NVME_SCT_MEDIA_ERROR:
 403                 return (0);
 404         case NVME_SCT_PATH_RELATED:
 405                 switch (sc) {
 406                 case NVME_SC_INTERNAL_PATH_ERROR:
 407                         if (dnr)
 408                                 return (0);
 409                         else
 410                                 return (1);
 411                 default:
 412                         return (0);
 413                 }
 414         case NVME_SCT_VENDOR_SPECIFIC:
 415         default:
 416                 return (0);
 417         }
 418 }
 419
 420 static void
 421 nvme_qpair_complete_tracker(struct nvme_tracker *tr,
 422     struct nvme_completion *cpl, error_print_t print_on_error)
 423 {
 424         struct nvme_qpair * qpair = tr->qpair;
 425         struct nvme_request     *req;
 426         bool                    retry, error, retriable;
 427
 428         req = tr->req;
 429         error = nvme_completion_is_error(cpl);
 430         retriable = nvme_completion_is_retry(cpl);
 431         retry = error && retriable && req->retries < nvme_retry_count;
 432         if (retry)
 433                 qpair->num_retries++;
 434         if (error && req->retries >= nvme_retry_count && retriable)
 435                 qpair->num_failures++;
 436
 437         if (error && (print_on_error == ERROR_PRINT_ALL ||
 438                 (!retry && print_on_error == ERROR_PRINT_NO_RETRY))) {
 439                 nvme_qpair_print_command(qpair, &req->cmd);
 440                 nvme_qpair_print_completion(qpair, cpl);
 441         }
 442
 443         qpair->act_tr[cpl->cid] = NULL;
 444
 445         KASSERT(cpl->cid == req->cmd.cid, ("cpl cid does not match cmd cid\n"));
 446
 447         if (!retry) {
 448                 if (req->type != NVME_REQUEST_NULL) {
 449                         bus_dmamap_sync(qpair->dma_tag_payload,
 450                             tr->payload_dma_map,
 451                             BUS_DMASYNC_POSTREAD | BUS_DMASYNC_POSTWRITE);
 452                 }
 453                 if (req->cb_fn)
 454                         req->cb_fn(req->cb_arg, cpl);
 455         }
 456
 457         mtx_lock(&qpair->lock);
 458         callout_stop(&tr->timer);
 459
 460         if (retry) {
 461                 req->retries++;
 462                 nvme_qpair_submit_tracker(qpair, tr);
 463         } else {
 464                 if (req->type != NVME_REQUEST_NULL) {
 465                         bus_dmamap_unload(qpair->dma_tag_payload,
 466                             tr->payload_dma_map);
 467                 }
 468
 469                 nvme_free_request(req);
 470                 tr->req = NULL;
 471
 472                 TAILQ_REMOVE(&qpair->outstanding_tr, tr, tailq);
 473                 TAILQ_INSERT_HEAD(&qpair->free_tr, tr, tailq);
 474
 475                 /*
 476                  * If the controller is in the middle of resetting, don't
 477                  *  try to submit queued requests here - let the reset logic
 478                  *  handle that instead.
 479                  */
 480                 if (!STAILQ_EMPTY(&qpair->queued_req) &&
 481                     !qpair->ctrlr->is_resetting) {
 482                         req = STAILQ_FIRST(&qpair->queued_req);
 483                         STAILQ_REMOVE_HEAD(&qpair->queued_req, stailq);
 484                         _nvme_qpair_submit_request(qpair, req);
 485                 }
 486         }
 487
 488         mtx_unlock(&qpair->lock);
 489 }
 490
 491 static void
 492 nvme_qpair_manual_complete_tracker(
 493     struct nvme_tracker *tr, uint32_t sct, uint32_t sc, uint32_t dnr,
 494     error_print_t print_on_error)
 495 {
 496         struct nvme_completion  cpl;
 497
 498         memset(&cpl, 0, sizeof(cpl));
 499
 500         struct nvme_qpair * qpair = tr->qpair;
 501
 502         cpl.sqid = qpair->id;
 503         cpl.cid = tr->cid;
 504         cpl.status |= (sct & NVME_STATUS_SCT_MASK) << NVME_STATUS_SCT_SHIFT;
 505         cpl.status |= (sc & NVME_STATUS_SC_MASK) << NVME_STATUS_SC_SHIFT;
 506         cpl.status |= (dnr & NVME_STATUS_DNR_MASK) << NVME_STATUS_DNR_SHIFT;
 507         nvme_qpair_complete_tracker(tr, &cpl, print_on_error);
 508 }
 509
 510 void
 511 nvme_qpair_manual_complete_request(struct nvme_qpair *qpair,
 512     struct nvme_request *req, uint32_t sct, uint32_t sc)
 513 {
 514         struct nvme_completion  cpl;
 515         bool                    error;
 516
 517         memset(&cpl, 0, sizeof(cpl));
 518         cpl.sqid = qpair->id;
 519         cpl.status |= (sct & NVME_STATUS_SCT_MASK) << NVME_STATUS_SCT_SHIFT;
 520         cpl.status |= (sc & NVME_STATUS_SC_MASK) << NVME_STATUS_SC_SHIFT;
 521
 522         error = nvme_completion_is_error(&cpl);
 523
 524         if (error) {
 525                 nvme_qpair_print_command(qpair, &req->cmd);
 526                 nvme_qpair_print_completion(qpair, &cpl);
 527         }
 528
 529         if (req->cb_fn)
 530                 req->cb_fn(req->cb_arg, &cpl);
 531
 532         nvme_free_request(req);
 533 }
 534
 535 bool
 536 nvme_qpair_process_completions(struct nvme_qpair *qpair)
 537 {
 538         struct nvme_tracker     *tr;
 539         struct nvme_completion  cpl;
 540         int done = 0;
 541         bool in_panic = dumping || SCHEDULER_STOPPED();
 542
 543         qpair->num_intr_handler_calls++;
 544
 545         /*
 546          * qpair is not enabled, likely because a controller reset is is in
 547          * progress.  Ignore the interrupt - any I/O that was associated with
 548          * this interrupt will get retried when the reset is complete.
 549          */
 550         if (!qpair->is_enabled)
 551                 return (false);
 552
 553         /*
 554          * A panic can stop the CPU this routine is running on at any point.  If
 555          * we're called during a panic, complete the sq_head wrap protocol for
 556          * the case where we are interrupted just after the increment at 1
 557          * below, but before we can reset cq_head to zero at 2. Also cope with
 558          * the case where we do the zero at 2, but may or may not have done the
 559          * phase adjustment at step 3. The panic machinery flushes all pending
 560          * memory writes, so we can make these strong ordering assumptions
 561          * that would otherwise be unwise if we were racing in real time.
 562          */
 563         if (__predict_false(in_panic)) {
 564                 if (qpair->cq_head == qpair->num_entries) {
 565                         /*
 566                          * Here we know that we need to zero cq_head and then negate
 567                          * the phase, which hasn't been assigned if cq_head isn't
 568                          * zero due to the atomic_store_rel.
 569                          */
 570                         qpair->cq_head = 0;
 571                         qpair->phase = !qpair->phase;
 572                 } else if (qpair->cq_head == 0) {
 573                         /*
 574                          * In this case, we know that the assignment at 2
 575                          * happened below, but we don't know if it 3 happened or
 576                          * not. To do this, we look at the last completion
 577                          * entry and set the phase to the opposite phase
 578                          * that it has. This gets us back in sync
 579                          */
 580                         cpl = qpair->cpl[qpair->num_entries - 1];
 581                         nvme_completion_swapbytes(&cpl);
 582                         qpair->phase = !NVME_STATUS_GET_P(cpl.status);
 583                 }
 584         }
 585
 586         bus_dmamap_sync(qpair->dma_tag, qpair->queuemem_map,
 587             BUS_DMASYNC_POSTREAD | BUS_DMASYNC_POSTWRITE);
 588         while (1) {
 589                 cpl = qpair->cpl[qpair->cq_head];
 590
 591                 /* Convert to host endian */
 592                 nvme_completion_swapbytes(&cpl);
 593
 594                 if (NVME_STATUS_GET_P(cpl.status) != qpair->phase)
 595                         break;
 596
 597                 tr = qpair->act_tr[cpl.cid];
 598
 599                 if (tr != NULL) {
 600                         nvme_qpair_complete_tracker(tr, &cpl, ERROR_PRINT_ALL);
 601                         qpair->sq_head = cpl.sqhd;
 602                         done++;
 603                 } else if (!in_panic) {
 604                         /*
 605                          * A missing tracker is normally an error.  However, a
 606                          * panic can stop the CPU this routine is running on
 607                          * after completing an I/O but before updating
 608                          * qpair->cq_head at 1 below.  Later, we re-enter this
 609                          * routine to poll I/O associated with the kernel
 610                          * dump. We find that the tr has been set to null before
 611                          * calling the completion routine.  If it hasn't
 612                          * completed (or it triggers a panic), then '1' below
 613                          * won't have updated cq_head. Rather than panic again,
 614                          * ignore this condition because it's not unexpected.
 615                          */
 616                         nvme_printf(qpair->ctrlr,
 617                             "cpl does not map to outstanding cmd\n");
 618                         /* nvme_dump_completion expects device endianess */
 619                         nvme_dump_completion(&qpair->cpl[qpair->cq_head]);
 620                         KASSERT(0, ("received completion for unknown cmd"));
 621                 }
 622
 623                 /*
 624                  * There's a number of races with the following (see above) when
 625                  * the system panics. We compensate for each one of them by
 626                  * using the atomic store to force strong ordering (at least when
 627                  * viewed in the aftermath of a panic).
 628                  */
 629                 if (++qpair->cq_head == qpair->num_entries) {           /* 1 */
 630                         atomic_store_rel_int(&qpair->cq_head, 0);       /* 2 */
 631                         qpair->phase = !qpair->phase;                   /* 3 */
 632                 }
 633
 634                 bus_space_write_4(qpair->ctrlr->bus_tag, qpair->ctrlr->bus_handle,
 635                     qpair->cq_hdbl_off, qpair->cq_head);
 636         }
 637         return (done != 0);
 638 }
 639
 640 static void
 641 nvme_qpair_msix_handler(void *arg)
 642 {
 643         struct nvme_qpair *qpair = arg;
 644
 645         nvme_qpair_process_completions(qpair);
 646 }
 647
 648 int
 649 nvme_qpair_construct(struct nvme_qpair *qpair,
 650     uint32_t num_entries, uint32_t num_trackers,
 651     struct nvme_controller *ctrlr)
 652 {
 653         struct nvme_tracker     *tr;
 654         size_t                  cmdsz, cplsz, prpsz, allocsz, prpmemsz;
 655         uint64_t                queuemem_phys, prpmem_phys, list_phys;
 656         uint8_t                 *queuemem, *prpmem, *prp_list;
 657         int                     i, err;
 658
 659         qpair->vector = ctrlr->msix_enabled ? qpair->id : 0;
 660         qpair->num_entries = num_entries;
 661         qpair->num_trackers = num_trackers;
 662         qpair->ctrlr = ctrlr;
 663
 664         if (ctrlr->msix_enabled) {
 665
 666                 /*
 667                  * MSI-X vector resource IDs start at 1, so we add one to
 668                  *  the queue's vector to get the corresponding rid to use.
 669                  */
 670                 qpair->rid = qpair->vector + 1;
 671
 672                 qpair->res = bus_alloc_resource_any(ctrlr->dev, SYS_RES_IRQ,
 673                     &qpair->rid, RF_ACTIVE);
 674                 if (bus_setup_intr(ctrlr->dev, qpair->res,
 675                     INTR_TYPE_MISC | INTR_MPSAFE, NULL,
 676                     nvme_qpair_msix_handler, qpair, &qpair->tag) != 0) {
 677                         nvme_printf(ctrlr, "unable to setup intx handler\n");
 678                         goto out;
 679                 }
 680                 if (qpair->id == 0) {
 681                         bus_describe_intr(ctrlr->dev, qpair->res, qpair->tag,
 682                             "admin");
 683                 } else {
 684                         bus_describe_intr(ctrlr->dev, qpair->res, qpair->tag,
 685                             "io%d", qpair->id - 1);
 686                 }
 687         }
 688
 689         mtx_init(&qpair->lock, "nvme qpair lock", NULL, MTX_DEF);
 690
 691         /* Note: NVMe PRP format is restricted to 4-byte alignment. */
 692         err = bus_dma_tag_create(bus_get_dma_tag(ctrlr->dev),
 693             4, PAGE_SIZE, BUS_SPACE_MAXADDR,
 694             BUS_SPACE_MAXADDR, NULL, NULL, NVME_MAX_XFER_SIZE,
 695             (NVME_MAX_XFER_SIZE/PAGE_SIZE)+1, PAGE_SIZE, 0,
 696             NULL, NULL, &qpair->dma_tag_payload);
 697         if (err != 0) {
 698                 nvme_printf(ctrlr, "payload tag create failed %d\n", err);
 699                 goto out;
 700         }
 701
 702         /*
 703          * Each component must be page aligned, and individual PRP lists
 704          * cannot cross a page boundary.
 705          */
 706         cmdsz = qpair->num_entries * sizeof(struct nvme_command);
 707         cmdsz = roundup2(cmdsz, PAGE_SIZE);
 708         cplsz = qpair->num_entries * sizeof(struct nvme_completion);
 709         cplsz = roundup2(cplsz, PAGE_SIZE);
 710         prpsz = sizeof(uint64_t) * NVME_MAX_PRP_LIST_ENTRIES;
 711         prpmemsz = qpair->num_trackers * prpsz;
 712         allocsz = cmdsz + cplsz + prpmemsz;
 713
 714         err = bus_dma_tag_create(bus_get_dma_tag(ctrlr->dev),
 715             PAGE_SIZE, 0, BUS_SPACE_MAXADDR, BUS_SPACE_MAXADDR, NULL, NULL,
 716             allocsz, 1, allocsz, 0, NULL, NULL, &qpair->dma_tag);
 717         if (err != 0) {
 718                 nvme_printf(ctrlr, "tag create failed %d\n", err);
 719                 goto out;
 720         }
 721         bus_dma_tag_set_domain(qpair->dma_tag, qpair->domain);
 722
 723         if (bus_dmamem_alloc(qpair->dma_tag, (void **)&queuemem,
 724             BUS_DMA_NOWAIT, &qpair->queuemem_map)) {
 725                 nvme_printf(ctrlr, "failed to alloc qpair memory\n");
 726                 goto out;
 727         }
 728
 729         if (bus_dmamap_load(qpair->dma_tag, qpair->queuemem_map,
 730             queuemem, allocsz, nvme_single_map, &queuemem_phys, 0) != 0) {
 731                 nvme_printf(ctrlr, "failed to load qpair memory\n");
 732                 goto out;
 733         }
 734
 735         qpair->num_cmds = 0;
 736         qpair->num_intr_handler_calls = 0;
 737         qpair->num_retries = 0;
 738         qpair->num_failures = 0;
 739         qpair->cmd = (struct nvme_command *)queuemem;
 740         qpair->cpl = (struct nvme_completion *)(queuemem + cmdsz);
 741         prpmem = (uint8_t *)(queuemem + cmdsz + cplsz);
 742         qpair->cmd_bus_addr = queuemem_phys;
 743         qpair->cpl_bus_addr = queuemem_phys + cmdsz;
 744         prpmem_phys = queuemem_phys + cmdsz + cplsz;
 745
 746         /*
 747          * Calcuate the stride of the doorbell register. Many emulators set this
 748          * value to correspond to a cache line. However, some hardware has set
 749          * it to various small values.
 750          */
 751         qpair->sq_tdbl_off = nvme_mmio_offsetof(doorbell[0]) +
 752             (qpair->id << (ctrlr->dstrd + 1));
 753         qpair->cq_hdbl_off = nvme_mmio_offsetof(doorbell[0]) +
 754             (qpair->id << (ctrlr->dstrd + 1)) + (1 << ctrlr->dstrd);
 755
 756         TAILQ_INIT(&qpair->free_tr);
 757         TAILQ_INIT(&qpair->outstanding_tr);
 758         STAILQ_INIT(&qpair->queued_req);
 759
 760         list_phys = prpmem_phys;
 761         prp_list = prpmem;
 762         for (i = 0; i < qpair->num_trackers; i++) {
 763
 764                 if (list_phys + prpsz > prpmem_phys + prpmemsz) {
 765                         qpair->num_trackers = i;
 766                         break;
 767                 }
 768
 769                 /*
 770                  * Make sure that the PRP list for this tracker doesn't
 771                  * overflow to another page.
 772                  */
 773                 if (trunc_page(list_phys) !=
 774                     trunc_page(list_phys + prpsz - 1)) {
 775                         list_phys = roundup2(list_phys, PAGE_SIZE);
 776                         prp_list =
 777                             (uint8_t *)roundup2((uintptr_t)prp_list, PAGE_SIZE);
 778                 }
 779
 780                 tr = malloc_domainset(sizeof(*tr), M_NVME,
 781                     DOMAINSET_PREF(qpair->domain), M_ZERO | M_WAITOK);
 782                 bus_dmamap_create(qpair->dma_tag_payload, 0,
 783                     &tr->payload_dma_map);
 784                 callout_init(&tr->timer, 1);
 785                 tr->cid = i;
 786                 tr->qpair = qpair;
 787                 tr->prp = (uint64_t *)prp_list;
 788                 tr->prp_bus_addr = list_phys;
 789                 TAILQ_INSERT_HEAD(&qpair->free_tr, tr, tailq);
 790                 list_phys += prpsz;
 791                 prp_list += prpsz;
 792         }
 793
 794         if (qpair->num_trackers == 0) {
 795                 nvme_printf(ctrlr, "failed to allocate enough trackers\n");
 796                 goto out;
 797         }
 798
 799         qpair->act_tr = malloc_domainset(sizeof(struct nvme_tracker *) *
 800             qpair->num_entries, M_NVME, DOMAINSET_PREF(qpair->domain),
 801             M_ZERO | M_WAITOK);
 802         return (0);
 803
 804 out:
 805         nvme_qpair_destroy(qpair);
 806         return (ENOMEM);
 807 }
 808
 809 static void
 810 nvme_qpair_destroy(struct nvme_qpair *qpair)
 811 {
 812         struct nvme_tracker     *tr;
 813
 814         if (qpair->tag)
 815                 bus_teardown_intr(qpair->ctrlr->dev, qpair->res, qpair->tag);
 816
 817         if (mtx_initialized(&qpair->lock))
 818                 mtx_destroy(&qpair->lock);
 819
 820         if (qpair->res)
 821                 bus_release_resource(qpair->ctrlr->dev, SYS_RES_IRQ,
 822                     rman_get_rid(qpair->res), qpair->res);
 823
 824         if (qpair->cmd != NULL) {
 825                 bus_dmamap_unload(qpair->dma_tag, qpair->queuemem_map);
 826                 bus_dmamem_free(qpair->dma_tag, qpair->cmd,
 827                     qpair->queuemem_map);
 828         }
 829
 830         if (qpair->act_tr)
 831                 free_domain(qpair->act_tr, M_NVME);
 832
 833         while (!TAILQ_EMPTY(&qpair->free_tr)) {
 834                 tr = TAILQ_FIRST(&qpair->free_tr);
 835                 TAILQ_REMOVE(&qpair->free_tr, tr, tailq);
 836                 bus_dmamap_destroy(qpair->dma_tag_payload,
 837                     tr->payload_dma_map);
 838                 free_domain(tr, M_NVME);
 839         }
 840
 841         if (qpair->dma_tag)
 842                 bus_dma_tag_destroy(qpair->dma_tag);
 843
 844         if (qpair->dma_tag_payload)
 845                 bus_dma_tag_destroy(qpair->dma_tag_payload);
 846 }
 847
 848 static void
 849 nvme_admin_qpair_abort_aers(struct nvme_qpair *qpair)
 850 {
 851         struct nvme_tracker     *tr;
 852
 853         tr = TAILQ_FIRST(&qpair->outstanding_tr);
 854         while (tr != NULL) {
 855                 if (tr->req->cmd.opc == NVME_OPC_ASYNC_EVENT_REQUEST) {
 856                         nvme_qpair_manual_complete_tracker(tr,
 857                             NVME_SCT_GENERIC, NVME_SC_ABORTED_SQ_DELETION, 0,
 858                             ERROR_PRINT_NONE);
 859                         tr = TAILQ_FIRST(&qpair->outstanding_tr);
 860                 } else {
 861                         tr = TAILQ_NEXT(tr, tailq);
 862                 }
 863         }
 864 }
 865
 866 void
 867 nvme_admin_qpair_destroy(struct nvme_qpair *qpair)
 868 {
 869
 870         nvme_admin_qpair_abort_aers(qpair);
 871         nvme_qpair_destroy(qpair);
 872 }
 873
 874 void
 875 nvme_io_qpair_destroy(struct nvme_qpair *qpair)
 876 {
 877
 878         nvme_qpair_destroy(qpair);
 879 }
 880
 881 static void
 882 nvme_abort_complete(void *arg, const struct nvme_completion *status)
 883 {
 884         struct nvme_tracker     *tr = arg;
 885
 886         /*
 887          * If cdw0 == 1, the controller was not able to abort the command
 888          *  we requested.  We still need to check the active tracker array,
 889          *  to cover race where I/O timed out at same time controller was
 890          *  completing the I/O.
 891          */
 892         if (status->cdw0 == 1 && tr->qpair->act_tr[tr->cid] != NULL) {
 893                 /*
 894                  * An I/O has timed out, and the controller was unable to
 895                  *  abort it for some reason.  Construct a fake completion
 896                  *  status, and then complete the I/O's tracker manually.
 897                  */
 898                 nvme_printf(tr->qpair->ctrlr,
 899                     "abort command failed, aborting command manually\n");
 900                 nvme_qpair_manual_complete_tracker(tr,
 901                     NVME_SCT_GENERIC, NVME_SC_ABORTED_BY_REQUEST, 0, ERROR_PRINT_ALL);
 902         }
 903 }
 904
 905 static void
 906 nvme_timeout(void *arg)
 907 {
 908         struct nvme_tracker     *tr = arg;
 909         struct nvme_qpair       *qpair = tr->qpair;
 910         struct nvme_controller  *ctrlr = qpair->ctrlr;
 911         uint32_t                csts;
 912         uint8_t                 cfs;
 913
 914         /*
 915          * Read csts to get value of cfs - controller fatal status.
 916          * If no fatal status, try to call the completion routine, and
 917          * if completes transactions, report a missed interrupt and
 918          * return (this may need to be rate limited). Otherwise, if
 919          * aborts are enabled and the controller is not reporting
 920          * fatal status, abort the command. Otherwise, just reset the
 921          * controller and hope for the best.
 922          */
 923         csts = nvme_mmio_read_4(ctrlr, csts);
 924         cfs = (csts >> NVME_CSTS_REG_CFS_SHIFT) & NVME_CSTS_REG_CFS_MASK;
 925         if (cfs == 0 && nvme_qpair_process_completions(qpair)) {
 926                 nvme_printf(ctrlr, "Missing interrupt\n");
 927                 return;
 928         }
 929         if (ctrlr->enable_aborts && cfs == 0) {
 930                 nvme_printf(ctrlr, "Aborting command due to a timeout.\n");
 931                 nvme_ctrlr_cmd_abort(ctrlr, tr->cid, qpair->id,
 932                     nvme_abort_complete, tr);
 933         } else {
 934                 nvme_printf(ctrlr, "Resetting controller due to a timeout%s.\n",
 935                     (csts == 0xffffffff) ? " and possible hot unplug" :
 936                     (cfs ? " and fatal error status" : ""));
 937                 nvme_ctrlr_reset(ctrlr);
 938         }
 939 }
 940
 941 void
 942 nvme_qpair_submit_tracker(struct nvme_qpair *qpair, struct nvme_tracker *tr)
 943 {
 944         struct nvme_request     *req;
 945         struct nvme_controller  *ctrlr;
 946
 947         mtx_assert(&qpair->lock, MA_OWNED);
 948
 949         req = tr->req;
 950         req->cmd.cid = tr->cid;
 951         qpair->act_tr[tr->cid] = tr;
 952         ctrlr = qpair->ctrlr;
 953
 954         if (req->timeout)
 955                 callout_reset_on(&tr->timer, ctrlr->timeout_period * hz,
 956                     nvme_timeout, tr, qpair->cpu);
 957
 958         /* Copy the command from the tracker to the submission queue. */
 959         memcpy(&qpair->cmd[qpair->sq_tail], &req->cmd, sizeof(req->cmd));
 960
 961         if (++qpair->sq_tail == qpair->num_entries)
 962                 qpair->sq_tail = 0;
 963
 964         bus_dmamap_sync(qpair->dma_tag, qpair->queuemem_map,
 965             BUS_DMASYNC_PREREAD | BUS_DMASYNC_PREWRITE);
 966 #ifndef __powerpc__
 967         /*
 968          * powerpc's bus_dmamap_sync() already includes a heavyweight sync, but
 969          * no other archs do.
 970          */
 971         wmb();
 972 #endif
 973
 974         bus_space_write_4(qpair->ctrlr->bus_tag, qpair->ctrlr->bus_handle,
 975             qpair->sq_tdbl_off, qpair->sq_tail);
 976         qpair->num_cmds++;
 977 }
 978
 979 static void
 980 nvme_payload_map(void *arg, bus_dma_segment_t *seg, int nseg, int error)
 981 {
 982         struct nvme_tracker     *tr = arg;
 983         uint32_t                cur_nseg;
 984
 985         /*
 986          * If the mapping operation failed, return immediately.  The caller
 987          *  is responsible for detecting the error status and failing the
 988          *  tracker manually.
 989          */
 990         if (error != 0) {
 991                 nvme_printf(tr->qpair->ctrlr,
 992                     "nvme_payload_map err %d\n", error);
 993                 return;
 994         }
 995
 996         /*
 997          * Note that we specified PAGE_SIZE for alignment and max
 998          *  segment size when creating the bus dma tags.  So here
 999          *  we can safely just transfer each segment to its
1000          *  associated PRP entry.
1001          */
1002         tr->req->cmd.prp1 = htole64(seg[0].ds_addr);
1003
1004         if (nseg == 2) {
1005                 tr->req->cmd.prp2 = htole64(seg[1].ds_addr);
1006         } else if (nseg > 2) {
1007                 cur_nseg = 1;
1008                 tr->req->cmd.prp2 = htole64((uint64_t)tr->prp_bus_addr);
1009                 while (cur_nseg < nseg) {
1010                         tr->prp[cur_nseg-1] =
1011                             htole64((uint64_t)seg[cur_nseg].ds_addr);
1012                         cur_nseg++;
1013                 }
1014         } else {
1015                 /*
1016                  * prp2 should not be used by the controller
1017                  *  since there is only one segment, but set
1018                  *  to 0 just to be safe.
1019                  */
1020                 tr->req->cmd.prp2 = 0;
1021         }
1022
1023         bus_dmamap_sync(tr->qpair->dma_tag_payload, tr->payload_dma_map,
1024             BUS_DMASYNC_PREREAD | BUS_DMASYNC_PREWRITE);
1025         nvme_qpair_submit_tracker(tr->qpair, tr);
1026 }
1027
1028 static void
1029 _nvme_qpair_submit_request(struct nvme_qpair *qpair, struct nvme_request *req)
1030 {
1031         struct nvme_tracker     *tr;
1032         int                     err = 0;
1033
1034         mtx_assert(&qpair->lock, MA_OWNED);
1035
1036         tr = TAILQ_FIRST(&qpair->free_tr);
1037         req->qpair = qpair;
1038
1039         if (tr == NULL || !qpair->is_enabled) {
1040                 /*
1041                  * No tracker is available, or the qpair is disabled due to
1042                  *  an in-progress controller-level reset or controller
1043                  *  failure.
1044                  */
1045
1046                 if (qpair->ctrlr->is_failed) {
1047                         /*
1048                          * The controller has failed.  Post the request to a
1049                          *  task where it will be aborted, so that we do not
1050                          *  invoke the request's callback in the context
1051                          *  of the submission.
1052                          */
1053                         nvme_ctrlr_post_failed_request(qpair->ctrlr, req);
1054                 } else {
1055                         /*
1056                          * Put the request on the qpair's request queue to be
1057                          *  processed when a tracker frees up via a command
1058                          *  completion or when the controller reset is
1059                          *  completed.
1060                          */
1061                         STAILQ_INSERT_TAIL(&qpair->queued_req, req, stailq);
1062                 }
1063                 return;
1064         }
1065
1066         TAILQ_REMOVE(&qpair->free_tr, tr, tailq);
1067         TAILQ_INSERT_TAIL(&qpair->outstanding_tr, tr, tailq);
1068         tr->req = req;
1069
1070         switch (req->type) {
1071         case NVME_REQUEST_VADDR:
1072                 KASSERT(req->payload_size <= qpair->ctrlr->max_xfer_size,
1073                     ("payload_size (%d) exceeds max_xfer_size (%d)\n",
1074                     req->payload_size, qpair->ctrlr->max_xfer_size));
1075                 err = bus_dmamap_load(tr->qpair->dma_tag_payload,
1076                     tr->payload_dma_map, req->u.payload, req->payload_size,
1077                     nvme_payload_map, tr, 0);
1078                 if (err != 0)
1079                         nvme_printf(qpair->ctrlr,
1080                             "bus_dmamap_load returned 0x%x!\n", err);
1081                 break;
1082         case NVME_REQUEST_NULL:
1083                 nvme_qpair_submit_tracker(tr->qpair, tr);
1084                 break;
1085         case NVME_REQUEST_BIO:
1086                 KASSERT(req->u.bio->bio_bcount <= qpair->ctrlr->max_xfer_size,
1087                     ("bio->bio_bcount (%jd) exceeds max_xfer_size (%d)\n",
1088                     (intmax_t)req->u.bio->bio_bcount,
1089                     qpair->ctrlr->max_xfer_size));
1090                 err = bus_dmamap_load_bio(tr->qpair->dma_tag_payload,
1091                     tr->payload_dma_map, req->u.bio, nvme_payload_map, tr, 0);
1092                 if (err != 0)
1093                         nvme_printf(qpair->ctrlr,
1094                             "bus_dmamap_load_bio returned 0x%x!\n", err);
1095                 break;
1096         case NVME_REQUEST_CCB:
1097                 err = bus_dmamap_load_ccb(tr->qpair->dma_tag_payload,
1098                     tr->payload_dma_map, req->u.payload,
1099                     nvme_payload_map, tr, 0);
1100                 if (err != 0)
1101                         nvme_printf(qpair->ctrlr,
1102                             "bus_dmamap_load_ccb returned 0x%x!\n", err);
1103                 break;
1104         default:
1105                 panic("unknown nvme request type 0x%x\n", req->type);
1106                 break;
1107         }
1108
1109         if (err != 0) {
1110                 /*
1111                  * The dmamap operation failed, so we manually fail the
1112                  *  tracker here with DATA_TRANSFER_ERROR status.
1113                  *
1114                  * nvme_qpair_manual_complete_tracker must not be called
1115                  *  with the qpair lock held.
1116                  */
1117                 mtx_unlock(&qpair->lock);
1118                 nvme_qpair_manual_complete_tracker(tr, NVME_SCT_GENERIC,
1119                     NVME_SC_DATA_TRANSFER_ERROR, DO_NOT_RETRY, ERROR_PRINT_ALL);
1120                 mtx_lock(&qpair->lock);
1121         }
1122 }
1123
1124 void
1125 nvme_qpair_submit_request(struct nvme_qpair *qpair, struct nvme_request *req)
1126 {
1127
1128         mtx_lock(&qpair->lock);
1129         _nvme_qpair_submit_request(qpair, req);
1130         mtx_unlock(&qpair->lock);
1131 }
1132
1133 static void
1134 nvme_qpair_enable(struct nvme_qpair *qpair)
1135 {
1136
1137         qpair->is_enabled = true;
1138 }
1139
1140 void
1141 nvme_qpair_reset(struct nvme_qpair *qpair)
1142 {
1143
1144         qpair->sq_head = qpair->sq_tail = qpair->cq_head = 0;
1145
1146         /*
1147          * First time through the completion queue, HW will set phase
1148          *  bit on completions to 1.  So set this to 1 here, indicating
1149          *  we're looking for a 1 to know which entries have completed.
1150          *  we'll toggle the bit each time when the completion queue
1151          *  rolls over.
1152          */
1153         qpair->phase = 1;
1154
1155         memset(qpair->cmd, 0,
1156             qpair->num_entries * sizeof(struct nvme_command));
1157         memset(qpair->cpl, 0,
1158             qpair->num_entries * sizeof(struct nvme_completion));
1159 }
1160
1161 void
1162 nvme_admin_qpair_enable(struct nvme_qpair *qpair)
1163 {
1164         struct nvme_tracker             *tr;
1165         struct nvme_tracker             *tr_temp;
1166
1167         /*
1168          * Manually abort each outstanding admin command.  Do not retry
1169          *  admin commands found here, since they will be left over from
1170          *  a controller reset and its likely the context in which the
1171          *  command was issued no longer applies.
1172          */
1173         TAILQ_FOREACH_SAFE(tr, &qpair->outstanding_tr, tailq, tr_temp) {
1174                 nvme_printf(qpair->ctrlr,
1175                     "aborting outstanding admin command\n");
1176                 nvme_qpair_manual_complete_tracker(tr, NVME_SCT_GENERIC,
1177                     NVME_SC_ABORTED_BY_REQUEST, DO_NOT_RETRY, ERROR_PRINT_ALL);
1178         }
1179
1180         nvme_qpair_enable(qpair);
1181 }
1182
1183 void
1184 nvme_io_qpair_enable(struct nvme_qpair *qpair)
1185 {
1186         STAILQ_HEAD(, nvme_request)     temp;
1187         struct nvme_tracker             *tr;
1188         struct nvme_tracker             *tr_temp;
1189         struct nvme_request             *req;
1190
1191         /*
1192          * Manually abort each outstanding I/O.  This normally results in a
1193          *  retry, unless the retry count on the associated request has
1194          *  reached its limit.
1195          */
1196         TAILQ_FOREACH_SAFE(tr, &qpair->outstanding_tr, tailq, tr_temp) {
1197                 nvme_printf(qpair->ctrlr, "aborting outstanding i/o\n");
1198                 nvme_qpair_manual_complete_tracker(tr, NVME_SCT_GENERIC,
1199                     NVME_SC_ABORTED_BY_REQUEST, 0, ERROR_PRINT_NO_RETRY);
1200         }
1201
1202         mtx_lock(&qpair->lock);
1203
1204         nvme_qpair_enable(qpair);
1205
1206         STAILQ_INIT(&temp);
1207         STAILQ_SWAP(&qpair->queued_req, &temp, nvme_request);
1208
1209         while (!STAILQ_EMPTY(&temp)) {
1210                 req = STAILQ_FIRST(&temp);
1211                 STAILQ_REMOVE_HEAD(&temp, stailq);
1212                 nvme_printf(qpair->ctrlr, "resubmitting queued i/o\n");
1213                 nvme_qpair_print_command(qpair, &req->cmd);
1214                 _nvme_qpair_submit_request(qpair, req);
1215         }
1216
1217         mtx_unlock(&qpair->lock);
1218 }
1219
1220 static void
1221 nvme_qpair_disable(struct nvme_qpair *qpair)
1222 {
1223         struct nvme_tracker *tr;
1224
1225         qpair->is_enabled = false;
1226         mtx_lock(&qpair->lock);
1227         TAILQ_FOREACH(tr, &qpair->outstanding_tr, tailq)
1228                 callout_stop(&tr->timer);
1229         mtx_unlock(&qpair->lock);
1230 }
1231
1232 void
1233 nvme_admin_qpair_disable(struct nvme_qpair *qpair)
1234 {
1235
1236         nvme_qpair_disable(qpair);
1237         nvme_admin_qpair_abort_aers(qpair);
1238 }
1239
1240 void
1241 nvme_io_qpair_disable(struct nvme_qpair *qpair)
1242 {
1243
1244         nvme_qpair_disable(qpair);
1245 }
1246
1247 void
1248 nvme_qpair_fail(struct nvme_qpair *qpair)
1249 {
1250         struct nvme_tracker             *tr;
1251         struct nvme_request             *req;
1252
1253         if (!mtx_initialized(&qpair->lock))
1254                 return;
1255
1256         mtx_lock(&qpair->lock);
1257
1258         while (!STAILQ_EMPTY(&qpair->queued_req)) {
1259                 req = STAILQ_FIRST(&qpair->queued_req);
1260                 STAILQ_REMOVE_HEAD(&qpair->queued_req, stailq);
1261                 nvme_printf(qpair->ctrlr, "failing queued i/o\n");
1262                 mtx_unlock(&qpair->lock);
1263                 nvme_qpair_manual_complete_request(qpair, req, NVME_SCT_GENERIC,
1264                     NVME_SC_ABORTED_BY_REQUEST);
1265                 mtx_lock(&qpair->lock);
1266         }
1267
1268         /* Manually abort each outstanding I/O. */
1269         while (!TAILQ_EMPTY(&qpair->outstanding_tr)) {
1270                 tr = TAILQ_FIRST(&qpair->outstanding_tr);
1271                 /*
1272                  * Do not remove the tracker.  The abort_tracker path will
1273                  *  do that for us.
1274                  */
1275                 nvme_printf(qpair->ctrlr, "failing outstanding i/o\n");
1276                 mtx_unlock(&qpair->lock);
1277                 nvme_qpair_manual_complete_tracker(tr, NVME_SCT_GENERIC,
1278                     NVME_SC_ABORTED_BY_REQUEST, DO_NOT_RETRY, ERROR_PRINT_ALL);
1279                 mtx_lock(&qpair->lock);
1280         }
1281
1282         mtx_unlock(&qpair->lock);
1283 }