text: /*
   * Copyright 2008 Cisco Systems, Inc.  All rights reserved.
   * Copyright 2007 Nuova Systems, Inc.  All rights reserved.
   *
   * This program is free software; you may redistribute it and/or modify
   * it under the terms of the GNU General Public License as published by
   * the Free Software Foundation; version 2 of the License.
   *
   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
   * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
   * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
   * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
   * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
   * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
   * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
   * SOFTWARE.
   */
  #include <linux/mempool.h>
  #include <linux/errno.h>
  #include <linux/init.h>
  #include <linux/workqueue.h>
  #include <linux/pci.h>
  #include <linux/scatterlist.h>
  #include <linux/skbuff.h>
  #include <linux/spinlock.h>
  #include <linux/etherdevice.h>
  #include <linux/if_ether.h>
  #include <linux/if_vlan.h>
  #include <linux/delay.h>
  #include <linux/gfp.h>
  #include <scsi/scsi.h>
  #include <scsi/scsi_host.h>
  #include <scsi/scsi_device.h>
  #include <scsi/scsi_cmnd.h>
  #include <scsi/scsi_tcq.h>
  #include <scsi/fc/fc_els.h>
  #include <scsi/fc/fc_fcoe.h>
  #include <scsi/libfc.h>
  #include <scsi/fc_frame.h>
  #include "fnic_io.h"
  #include "fnic.h"
  
  const char *fnic_state_str[] = {
  	[FNIC_IN_FC_MODE] =           "FNIC_IN_FC_MODE",
  	[FNIC_IN_FC_TRANS_ETH_MODE] = "FNIC_IN_FC_TRANS_ETH_MODE",
  	[FNIC_IN_ETH_MODE] =          "FNIC_IN_ETH_MODE",
  	[FNIC_IN_ETH_TRANS_FC_MODE] = "FNIC_IN_ETH_TRANS_FC_MODE",
  };
  
  static const char *fnic_ioreq_state_str[] = {
  	[FNIC_IOREQ_NOT_INITED] = "FNIC_IOREQ_NOT_INITED",
  	[FNIC_IOREQ_CMD_PENDING] = "FNIC_IOREQ_CMD_PENDING",
  	[FNIC_IOREQ_ABTS_PENDING] = "FNIC_IOREQ_ABTS_PENDING",
  	[FNIC_IOREQ_ABTS_COMPLETE] = "FNIC_IOREQ_ABTS_COMPLETE",
  	[FNIC_IOREQ_CMD_COMPLETE] = "FNIC_IOREQ_CMD_COMPLETE",
  };
  
  static const char *fcpio_status_str[] =  {
  	[FCPIO_SUCCESS] = "FCPIO_SUCCESS", /*0x0*/
  	[FCPIO_INVALID_HEADER] = "FCPIO_INVALID_HEADER",
  	[FCPIO_OUT_OF_RESOURCE] = "FCPIO_OUT_OF_RESOURCE",
  	[FCPIO_INVALID_PARAM] = "FCPIO_INVALID_PARAM]",
  	[FCPIO_REQ_NOT_SUPPORTED] = "FCPIO_REQ_NOT_SUPPORTED",
  	[FCPIO_IO_NOT_FOUND] = "FCPIO_IO_NOT_FOUND",
  	[FCPIO_ABORTED] = "FCPIO_ABORTED", /*0x41*/
  	[FCPIO_TIMEOUT] = "FCPIO_TIMEOUT",
  	[FCPIO_SGL_INVALID] = "FCPIO_SGL_INVALID",
  	[FCPIO_MSS_INVALID] = "FCPIO_MSS_INVALID",
  	[FCPIO_DATA_CNT_MISMATCH] = "FCPIO_DATA_CNT_MISMATCH",
  	[FCPIO_FW_ERR] = "FCPIO_FW_ERR",
  	[FCPIO_ITMF_REJECTED] = "FCPIO_ITMF_REJECTED",
  	[FCPIO_ITMF_FAILED] = "FCPIO_ITMF_FAILED",
  	[FCPIO_ITMF_INCORRECT_LUN] = "FCPIO_ITMF_INCORRECT_LUN",
  	[FCPIO_CMND_REJECTED] = "FCPIO_CMND_REJECTED",
  	[FCPIO_NO_PATH_AVAIL] = "FCPIO_NO_PATH_AVAIL",
  	[FCPIO_PATH_FAILED] = "FCPIO_PATH_FAILED",
  	[FCPIO_LUNMAP_CHNG_PEND] = "FCPIO_LUNHMAP_CHNG_PEND",
  };
  
  const char *fnic_state_to_str(unsigned int state)
  {
  	if (state >= ARRAY_SIZE(fnic_state_str) || !fnic_state_str[state])
  		return "unknown";
  
  	return fnic_state_str[state];
  }
  
  static const char *fnic_ioreq_state_to_str(unsigned int state)
  {
  	if (state >= ARRAY_SIZE(fnic_ioreq_state_str) ||
  	    !fnic_ioreq_state_str[state])
  		return "unknown";
  
  	return fnic_ioreq_state_str[state];
  }
  
  static const char *fnic_fcpio_status_to_str(unsigned int status)
  {
  	if (status >= ARRAY_SIZE(fcpio_status_str) || !fcpio_status_str[status])
  		return "unknown";
  
  	return fcpio_status_str[status];
  }
  
  static void fnic_cleanup_io(struct fnic *fnic, int exclude_id);
  
  static inline spinlock_t *fnic_io_lock_hash(struct fnic *fnic,
  					    struct scsi_cmnd *sc)
  {
  	u32 hash = sc->request->tag & (FNIC_IO_LOCKS - 1);
  
  	return &fnic->io_req_lock[hash];
  }
  
  static inline spinlock_t *fnic_io_lock_tag(struct fnic *fnic,
  					    int tag)
  {
  	return &fnic->io_req_lock[tag & (FNIC_IO_LOCKS - 1)];
  }
  
  /*
   * Unmap the data buffer and sense buffer for an io_req,
   * also unmap and free the device-private scatter/gather list.
   */
  static void fnic_release_ioreq_buf(struct fnic *fnic,
  				   struct fnic_io_req *io_req,
  				   struct scsi_cmnd *sc)
  {
  	if (io_req->sgl_list_pa)
  		dma_unmap_single(&fnic->pdev->dev, io_req->sgl_list_pa,
  				 sizeof(io_req->sgl_list[0]) * io_req->sgl_cnt,
  				 DMA_TO_DEVICE);
  	scsi_dma_unmap(sc);
  
  	if (io_req->sgl_cnt)
  		mempool_free(io_req->sgl_list_alloc,
  			     fnic->io_sgl_pool[io_req->sgl_type]);
  	if (io_req->sense_buf_pa)
  		dma_unmap_single(&fnic->pdev->dev, io_req->sense_buf_pa,
  				 SCSI_SENSE_BUFFERSIZE, DMA_FROM_DEVICE);
  }
  
  /* Free up Copy Wq descriptors. Called with copy_wq lock held */
  static int free_wq_copy_descs(struct fnic *fnic, struct vnic_wq_copy *wq)
  {
  	/* if no Ack received from firmware, then nothing to clean */
  	if (!fnic->fw_ack_recd[0])
  		return 1;
  
  	/*
  	 * Update desc_available count based on number of freed descriptors
  	 * Account for wraparound
  	 */
  	if (wq->to_clean_index <= fnic->fw_ack_index[0])
  		wq->ring.desc_avail += (fnic->fw_ack_index[0]
  					- wq->to_clean_index + 1);
  	else
  		wq->ring.desc_avail += (wq->ring.desc_count
  					- wq->to_clean_index
  					+ fnic->fw_ack_index[0] + 1);
  
  	/*
  	 * just bump clean index to ack_index+1 accounting for wraparound
  	 * this will essentially free up all descriptors between
  	 * to_clean_index and fw_ack_index, both inclusive
  	 */
  	wq->to_clean_index =
  		(fnic->fw_ack_index[0] + 1) % wq->ring.desc_count;
  
  	/* we have processed the acks received so far */
  	fnic->fw_ack_recd[0] = 0;
  	return 0;
  }
  
  
  /**
   * __fnic_set_state_flags
   * Sets/Clears bits in fnic's state_flags
   **/
  void
  __fnic_set_state_flags(struct fnic *fnic, unsigned long st_flags,
  			unsigned long clearbits)
  {
  	unsigned long flags = 0;
  	unsigned long host_lock_flags = 0;
  
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  	spin_lock_irqsave(fnic->lport->host->host_lock, host_lock_flags);
  
  	if (clearbits)
  		fnic->state_flags &= ~st_flags;
  	else
  		fnic->state_flags |= st_flags;
  
  	spin_unlock_irqrestore(fnic->lport->host->host_lock, host_lock_flags);
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  	return;
  }
  
  
  /*
   * fnic_fw_reset_handler
   * Routine to send reset msg to fw
   */
  int fnic_fw_reset_handler(struct fnic *fnic)
  {
  	struct vnic_wq_copy *wq = &fnic->wq_copy[0];
  	int ret = 0;
  	unsigned long flags;
  
  	/* indicate fwreset to io path */
  	fnic_set_state_flags(fnic, FNIC_FLAGS_FWRESET);
  
  	skb_queue_purge(&fnic->frame_queue);
  	skb_queue_purge(&fnic->tx_queue);
  
  	/* wait for io cmpl */
  	while (atomic_read(&fnic->in_flight))
  		schedule_timeout(msecs_to_jiffies(1));
  
  	spin_lock_irqsave(&fnic->wq_copy_lock[0], flags);
  
  	if (vnic_wq_copy_desc_avail(wq) <= fnic->wq_copy_desc_low[0])
  		free_wq_copy_descs(fnic, wq);
  
  	if (!vnic_wq_copy_desc_avail(wq))
  		ret = -EAGAIN;
  	else {
  		fnic_queue_wq_copy_desc_fw_reset(wq, SCSI_NO_TAG);
  		atomic64_inc(&fnic->fnic_stats.fw_stats.active_fw_reqs);
  		if (atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs) >
  			  atomic64_read(&fnic->fnic_stats.fw_stats.max_fw_reqs))
  			atomic64_set(&fnic->fnic_stats.fw_stats.max_fw_reqs,
  				atomic64_read(
  				  &fnic->fnic_stats.fw_stats.active_fw_reqs));
  	}
  
  	spin_unlock_irqrestore(&fnic->wq_copy_lock[0], flags);
  
  	if (!ret) {
  		atomic64_inc(&fnic->fnic_stats.reset_stats.fw_resets);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "Issued fw reset\n");
  	} else {
  		fnic_clear_state_flags(fnic, FNIC_FLAGS_FWRESET);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "Failed to issue fw reset\n");
  	}
  
  	return ret;
  }
  
  
  /*
   * fnic_flogi_reg_handler
   * Routine to send flogi register msg to fw
   */
  int fnic_flogi_reg_handler(struct fnic *fnic, u32 fc_id)
  {
  	struct vnic_wq_copy *wq = &fnic->wq_copy[0];
  	enum fcpio_flogi_reg_format_type format;
  	struct fc_lport *lp = fnic->lport;
  	u8 gw_mac[ETH_ALEN];
  	int ret = 0;
  	unsigned long flags;
  
  	spin_lock_irqsave(&fnic->wq_copy_lock[0], flags);
  
  	if (vnic_wq_copy_desc_avail(wq) <= fnic->wq_copy_desc_low[0])
  		free_wq_copy_descs(fnic, wq);
  
  	if (!vnic_wq_copy_desc_avail(wq)) {
  		ret = -EAGAIN;
  		goto flogi_reg_ioreq_end;
  	}
  
  	if (fnic->ctlr.map_dest) {
  		eth_broadcast_addr(gw_mac);
  		format = FCPIO_FLOGI_REG_DEF_DEST;
  	} else {
  		memcpy(gw_mac, fnic->ctlr.dest_addr, ETH_ALEN);
  		format = FCPIO_FLOGI_REG_GW_DEST;
  	}
  
  	if ((fnic->config.flags & VFCF_FIP_CAPABLE) && !fnic->ctlr.map_dest) {
  		fnic_queue_wq_copy_desc_fip_reg(wq, SCSI_NO_TAG,
  						fc_id, gw_mac,
  						fnic->data_src_addr,
  						lp->r_a_tov, lp->e_d_tov);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "FLOGI FIP reg issued fcid %x src %pM dest %pM\n",
  			      fc_id, fnic->data_src_addr, gw_mac);
  	} else {
  		fnic_queue_wq_copy_desc_flogi_reg(wq, SCSI_NO_TAG,
  						  format, fc_id, gw_mac);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "FLOGI reg issued fcid %x map %d dest %pM\n",
  			      fc_id, fnic->ctlr.map_dest, gw_mac);
  	}
  
  	atomic64_inc(&fnic->fnic_stats.fw_stats.active_fw_reqs);
  	if (atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs) >
  		  atomic64_read(&fnic->fnic_stats.fw_stats.max_fw_reqs))
  		atomic64_set(&fnic->fnic_stats.fw_stats.max_fw_reqs,
  		  atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs));
  
  flogi_reg_ioreq_end:
  	spin_unlock_irqrestore(&fnic->wq_copy_lock[0], flags);
  	return ret;
  }
  
  /*
   * fnic_queue_wq_copy_desc
   * Routine to enqueue a wq copy desc
   */
  static inline int fnic_queue_wq_copy_desc(struct fnic *fnic,
  					  struct vnic_wq_copy *wq,
  					  struct fnic_io_req *io_req,
  					  struct scsi_cmnd *sc,
  					  int sg_count)
  {
  	struct scatterlist *sg;
  	struct fc_rport *rport = starget_to_rport(scsi_target(sc->device));
  	struct fc_rport_libfc_priv *rp = rport->dd_data;
  	struct host_sg_desc *desc;
  	struct misc_stats *misc_stats = &fnic->fnic_stats.misc_stats;
  	unsigned int i;
  	unsigned long intr_flags;
  	int flags;
  	u8 exch_flags;
  	struct scsi_lun fc_lun;
  
  	if (sg_count) {
  		/* For each SGE, create a device desc entry */
  		desc = io_req->sgl_list;
  		for_each_sg(scsi_sglist(sc), sg, sg_count, i) {
  			desc->addr = cpu_to_le64(sg_dma_address(sg));
  			desc->len = cpu_to_le32(sg_dma_len(sg));
  			desc->_resvd = 0;
  			desc++;
  		}
  
  		io_req->sgl_list_pa = dma_map_single(&fnic->pdev->dev,
  				io_req->sgl_list,
  				sizeof(io_req->sgl_list[0]) * sg_count,
  				DMA_TO_DEVICE);
  		if (dma_mapping_error(&fnic->pdev->dev, io_req->sgl_list_pa)) {
  			printk(KERN_ERR "DMA mapping failed\n");
  			return SCSI_MLQUEUE_HOST_BUSY;
  		}
  	}
  
  	io_req->sense_buf_pa = dma_map_single(&fnic->pdev->dev,
  					      sc->sense_buffer,
  					      SCSI_SENSE_BUFFERSIZE,
  					      DMA_FROM_DEVICE);
  	if (dma_mapping_error(&fnic->pdev->dev, io_req->sense_buf_pa)) {
  		dma_unmap_single(&fnic->pdev->dev, io_req->sgl_list_pa,
  				sizeof(io_req->sgl_list[0]) * sg_count,
  				DMA_TO_DEVICE);
  		printk(KERN_ERR "DMA mapping failed\n");
  		return SCSI_MLQUEUE_HOST_BUSY;
  	}
  
  	int_to_scsilun(sc->device->lun, &fc_lun);
  
  	/* Enqueue the descriptor in the Copy WQ */
  	spin_lock_irqsave(&fnic->wq_copy_lock[0], intr_flags);
  
  	if (vnic_wq_copy_desc_avail(wq) <= fnic->wq_copy_desc_low[0])
  		free_wq_copy_descs(fnic, wq);
  
  	if (unlikely(!vnic_wq_copy_desc_avail(wq))) {
  		spin_unlock_irqrestore(&fnic->wq_copy_lock[0], intr_flags);
  		FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  			  "fnic_queue_wq_copy_desc failure - no descriptors\n");
  		atomic64_inc(&misc_stats->io_cpwq_alloc_failures);
  		return SCSI_MLQUEUE_HOST_BUSY;
  	}
  
  	flags = 0;
  	if (sc->sc_data_direction == DMA_FROM_DEVICE)
  		flags = FCPIO_ICMND_RDDATA;
  	else if (sc->sc_data_direction == DMA_TO_DEVICE)
  		flags = FCPIO_ICMND_WRDATA;
  
  	exch_flags = 0;
  	if ((fnic->config.flags & VFCF_FCP_SEQ_LVL_ERR) &&
  	    (rp->flags & FC_RP_FLAGS_RETRY))
  		exch_flags |= FCPIO_ICMND_SRFLAG_RETRY;
  
  	fnic_queue_wq_copy_desc_icmnd_16(wq, sc->request->tag,
  					 0, exch_flags, io_req->sgl_cnt,
  					 SCSI_SENSE_BUFFERSIZE,
  					 io_req->sgl_list_pa,
  					 io_req->sense_buf_pa,
  					 0, /* scsi cmd ref, always 0 */
  					 FCPIO_ICMND_PTA_SIMPLE,
  					 	/* scsi pri and tag */
  					 flags,	/* command flags */
  					 sc->cmnd, sc->cmd_len,
  					 scsi_bufflen(sc),
  					 fc_lun.scsi_lun, io_req->port_id,
  					 rport->maxframe_size, rp->r_a_tov,
  					 rp->e_d_tov);
  
  	atomic64_inc(&fnic->fnic_stats.fw_stats.active_fw_reqs);
  	if (atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs) >
  		  atomic64_read(&fnic->fnic_stats.fw_stats.max_fw_reqs))
  		atomic64_set(&fnic->fnic_stats.fw_stats.max_fw_reqs,
  		  atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs));
  
  	spin_unlock_irqrestore(&fnic->wq_copy_lock[0], intr_flags);
  	return 0;
  }
  
  /*
   * fnic_queuecommand
   * Routine to send a scsi cdb
   * Called with host_lock held and interrupts disabled.
   */
  static int fnic_queuecommand_lck(struct scsi_cmnd *sc, void (*done)(struct scsi_cmnd *))
  {
  	struct fc_lport *lp = shost_priv(sc->device->host);
  	struct fc_rport *rport;
  	struct fnic_io_req *io_req = NULL;
  	struct fnic *fnic = lport_priv(lp);
  	struct fnic_stats *fnic_stats = &fnic->fnic_stats;
  	struct vnic_wq_copy *wq;
  	int ret;
  	u64 cmd_trace;
  	int sg_count = 0;
  	unsigned long flags = 0;
  	unsigned long ptr;
  	spinlock_t *io_lock = NULL;
  	int io_lock_acquired = 0;
  	struct fc_rport_libfc_priv *rp;
  
  	if (unlikely(fnic_chk_state_flags_locked(fnic, FNIC_FLAGS_IO_BLOCKED)))
  		return SCSI_MLQUEUE_HOST_BUSY;
  
  	if (unlikely(fnic_chk_state_flags_locked(fnic, FNIC_FLAGS_FWRESET)))
  		return SCSI_MLQUEUE_HOST_BUSY;
  
  	rport = starget_to_rport(scsi_target(sc->device));
  	if (!rport) {
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				"returning DID_NO_CONNECT for IO as rport is NULL\n");
  		sc->result = DID_NO_CONNECT << 16;
  		done(sc);
  		return 0;
  	}
  
  	ret = fc_remote_port_chkready(rport);
  	if (ret) {
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				"rport is not ready\n");
  		atomic64_inc(&fnic_stats->misc_stats.rport_not_ready);
  		sc->result = ret;
  		done(sc);
  		return 0;
  	}
  
  	rp = rport->dd_data;
  	if (!rp || rp->rp_state == RPORT_ST_DELETE) {
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"rport 0x%x removed, returning DID_NO_CONNECT\n",
  			rport->port_id);
  
  		atomic64_inc(&fnic_stats->misc_stats.rport_not_ready);
  		sc->result = DID_NO_CONNECT<<16;
  		done(sc);
  		return 0;
  	}
  
  	if (rp->rp_state != RPORT_ST_READY) {
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"rport 0x%x in state 0x%x, returning DID_IMM_RETRY\n",
  			rport->port_id, rp->rp_state);
  
  		sc->result = DID_IMM_RETRY << 16;
  		done(sc);
  		return 0;
  	}
  
  	if (lp->state != LPORT_ST_READY || !(lp->link_up))
  		return SCSI_MLQUEUE_HOST_BUSY;
  
  	atomic_inc(&fnic->in_flight);
  
  	/*
  	 * Release host lock, use driver resource specific locks from here.
  	 * Don't re-enable interrupts in case they were disabled prior to the
  	 * caller disabling them.
  	 */
  	spin_unlock(lp->host->host_lock);
  	CMD_STATE(sc) = FNIC_IOREQ_NOT_INITED;
  	CMD_FLAGS(sc) = FNIC_NO_FLAGS;
  
  	/* Get a new io_req for this SCSI IO */
  	io_req = mempool_alloc(fnic->io_req_pool, GFP_ATOMIC);
  	if (!io_req) {
  		atomic64_inc(&fnic_stats->io_stats.alloc_failures);
  		ret = SCSI_MLQUEUE_HOST_BUSY;
  		goto out;
  	}
  	memset(io_req, 0, sizeof(*io_req));
  
  	/* Map the data buffer */
  	sg_count = scsi_dma_map(sc);
  	if (sg_count < 0) {
  		FNIC_TRACE(fnic_queuecommand, sc->device->host->host_no,
  			  sc->request->tag, sc, 0, sc->cmnd[0],
  			  sg_count, CMD_STATE(sc));
  		mempool_free(io_req, fnic->io_req_pool);
  		goto out;
  	}
  
  	/* Determine the type of scatter/gather list we need */
  	io_req->sgl_cnt = sg_count;
  	io_req->sgl_type = FNIC_SGL_CACHE_DFLT;
  	if (sg_count > FNIC_DFLT_SG_DESC_CNT)
  		io_req->sgl_type = FNIC_SGL_CACHE_MAX;
  
  	if (sg_count) {
  		io_req->sgl_list =
  			mempool_alloc(fnic->io_sgl_pool[io_req->sgl_type],
  				      GFP_ATOMIC);
  		if (!io_req->sgl_list) {
  			atomic64_inc(&fnic_stats->io_stats.alloc_failures);
  			ret = SCSI_MLQUEUE_HOST_BUSY;
  			scsi_dma_unmap(sc);
  			mempool_free(io_req, fnic->io_req_pool);
  			goto out;
  		}
  
  		/* Cache sgl list allocated address before alignment */
  		io_req->sgl_list_alloc = io_req->sgl_list;
  		ptr = (unsigned long) io_req->sgl_list;
  		if (ptr % FNIC_SG_DESC_ALIGN) {
  			io_req->sgl_list = (struct host_sg_desc *)
  				(((unsigned long) ptr
  				  + FNIC_SG_DESC_ALIGN - 1)
  				 & ~(FNIC_SG_DESC_ALIGN - 1));
  		}
  	}
  
  	/*
  	* Will acquire lock defore setting to IO initialized.
  	*/
  
  	io_lock = fnic_io_lock_hash(fnic, sc);
  	spin_lock_irqsave(io_lock, flags);
  
  	/* initialize rest of io_req */
  	io_lock_acquired = 1;
  	io_req->port_id = rport->port_id;
  	io_req->start_time = jiffies;
  	CMD_STATE(sc) = FNIC_IOREQ_CMD_PENDING;
  	CMD_SP(sc) = (char *)io_req;
  	CMD_FLAGS(sc) |= FNIC_IO_INITIALIZED;
  	sc->scsi_done = done;
  
  	/* create copy wq desc and enqueue it */
  	wq = &fnic->wq_copy[0];
  	ret = fnic_queue_wq_copy_desc(fnic, wq, io_req, sc, sg_count);
  	if (ret) {
  		/*
  		 * In case another thread cancelled the request,
  		 * refetch the pointer under the lock.
  		 */
  		FNIC_TRACE(fnic_queuecommand, sc->device->host->host_no,
  			  sc->request->tag, sc, 0, 0, 0,
  			  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		CMD_SP(sc) = NULL;
  		CMD_STATE(sc) = FNIC_IOREQ_CMD_COMPLETE;
  		spin_unlock_irqrestore(io_lock, flags);
  		if (io_req) {
  			fnic_release_ioreq_buf(fnic, io_req, sc);
  			mempool_free(io_req, fnic->io_req_pool);
  		}
  		atomic_dec(&fnic->in_flight);
  		/* acquire host lock before returning to SCSI */
  		spin_lock(lp->host->host_lock);
  		return ret;
  	} else {
  		atomic64_inc(&fnic_stats->io_stats.active_ios);
  		atomic64_inc(&fnic_stats->io_stats.num_ios);
  		if (atomic64_read(&fnic_stats->io_stats.active_ios) >
  			  atomic64_read(&fnic_stats->io_stats.max_active_ios))
  			atomic64_set(&fnic_stats->io_stats.max_active_ios,
  			     atomic64_read(&fnic_stats->io_stats.active_ios));
  
  		/* REVISIT: Use per IO lock in the final code */
  		CMD_FLAGS(sc) |= FNIC_IO_ISSUED;
  	}
  out:
  	cmd_trace = ((u64)sc->cmnd[0] << 56 | (u64)sc->cmnd[7] << 40 |
  			(u64)sc->cmnd[8] << 32 | (u64)sc->cmnd[2] << 24 |
  			(u64)sc->cmnd[3] << 16 | (u64)sc->cmnd[4] << 8 |
  			sc->cmnd[5]);
  
  	FNIC_TRACE(fnic_queuecommand, sc->device->host->host_no,
  		  sc->request->tag, sc, io_req,
  		  sg_count, cmd_trace,
  		  (((u64)CMD_FLAGS(sc) >> 32) | CMD_STATE(sc)));
  
  	/* if only we issued IO, will we have the io lock */
  	if (io_lock_acquired)
  		spin_unlock_irqrestore(io_lock, flags);
  
  	atomic_dec(&fnic->in_flight);
  	/* acquire host lock before returning to SCSI */
  	spin_lock(lp->host->host_lock);
  	return ret;
  }
  
  DEF_SCSI_QCMD(fnic_queuecommand)
  
  /*
   * fnic_fcpio_fw_reset_cmpl_handler
   * Routine to handle fw reset completion
   */
  static int fnic_fcpio_fw_reset_cmpl_handler(struct fnic *fnic,
  					    struct fcpio_fw_req *desc)
  {
  	u8 type;
  	u8 hdr_status;
  	struct fcpio_tag tag;
  	int ret = 0;
  	unsigned long flags;
  	struct reset_stats *reset_stats = &fnic->fnic_stats.reset_stats;
  
  	fcpio_header_dec(&desc->hdr, &type, &hdr_status, &tag);
  
  	atomic64_inc(&reset_stats->fw_reset_completions);
  
  	/* Clean up all outstanding io requests */
  	fnic_cleanup_io(fnic, SCSI_NO_TAG);
  
  	atomic64_set(&fnic->fnic_stats.fw_stats.active_fw_reqs, 0);
  	atomic64_set(&fnic->fnic_stats.io_stats.active_ios, 0);
  	atomic64_set(&fnic->io_cmpl_skip, 0);
  
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  
  	/* fnic should be in FC_TRANS_ETH_MODE */
  	if (fnic->state == FNIC_IN_FC_TRANS_ETH_MODE) {
  		/* Check status of reset completion */
  		if (!hdr_status) {
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				      "reset cmpl success\n");
  			/* Ready to send flogi out */
  			fnic->state = FNIC_IN_ETH_MODE;
  		} else {
  			FNIC_SCSI_DBG(KERN_DEBUG,
  				      fnic->lport->host,
  				      "fnic fw_reset : failed %s\n",
  				      fnic_fcpio_status_to_str(hdr_status));
  
  			/*
  			 * Unable to change to eth mode, cannot send out flogi
  			 * Change state to fc mode, so that subsequent Flogi
  			 * requests from libFC will cause more attempts to
  			 * reset the firmware. Free the cached flogi
  			 */
  			fnic->state = FNIC_IN_FC_MODE;
  			atomic64_inc(&reset_stats->fw_reset_failures);
  			ret = -1;
  		}
  	} else {
  		FNIC_SCSI_DBG(KERN_DEBUG,
  			      fnic->lport->host,
  			      "Unexpected state %s while processing"
  			      " reset cmpl\n", fnic_state_to_str(fnic->state));
  		atomic64_inc(&reset_stats->fw_reset_failures);
  		ret = -1;
  	}
  
  	/* Thread removing device blocks till firmware reset is complete */
  	if (fnic->remove_wait)
  		complete(fnic->remove_wait);
  
  	/*
  	 * If fnic is being removed, or fw reset failed
  	 * free the flogi frame. Else, send it out
  	 */
  	if (fnic->remove_wait || ret) {
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  		skb_queue_purge(&fnic->tx_queue);
  		goto reset_cmpl_handler_end;
  	}
  
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  	fnic_flush_tx(fnic);
  
   reset_cmpl_handler_end:
  	fnic_clear_state_flags(fnic, FNIC_FLAGS_FWRESET);
  
  	return ret;
  }
  
  /*
   * fnic_fcpio_flogi_reg_cmpl_handler
   * Routine to handle flogi register completion
   */
  static int fnic_fcpio_flogi_reg_cmpl_handler(struct fnic *fnic,
  					     struct fcpio_fw_req *desc)
  {
  	u8 type;
  	u8 hdr_status;
  	struct fcpio_tag tag;
  	int ret = 0;
  	unsigned long flags;
  
  	fcpio_header_dec(&desc->hdr, &type, &hdr_status, &tag);
  
  	/* Update fnic state based on status of flogi reg completion */
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  
  	if (fnic->state == FNIC_IN_ETH_TRANS_FC_MODE) {
  
  		/* Check flogi registration completion status */
  		if (!hdr_status) {
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				      "flog reg succeeded\n");
  			fnic->state = FNIC_IN_FC_MODE;
  		} else {
  			FNIC_SCSI_DBG(KERN_DEBUG,
  				      fnic->lport->host,
  				      "fnic flogi reg :failed %s\n",
  				      fnic_fcpio_status_to_str(hdr_status));
  			fnic->state = FNIC_IN_ETH_MODE;
  			ret = -1;
  		}
  	} else {
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "Unexpected fnic state %s while"
  			      " processing flogi reg completion\n",
  			      fnic_state_to_str(fnic->state));
  		ret = -1;
  	}
  
  	if (!ret) {
  		if (fnic->stop_rx_link_events) {
  			spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  			goto reg_cmpl_handler_end;
  		}
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  		fnic_flush_tx(fnic);
  		queue_work(fnic_event_queue, &fnic->frame_work);
  	} else {
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  	}
  
  reg_cmpl_handler_end:
  	return ret;
  }
  
  static inline int is_ack_index_in_range(struct vnic_wq_copy *wq,
  					u16 request_out)
  {
  	if (wq->to_clean_index <= wq->to_use_index) {
  		/* out of range, stale request_out index */
  		if (request_out < wq->to_clean_index ||
  		    request_out >= wq->to_use_index)
  			return 0;
  	} else {
  		/* out of range, stale request_out index */
  		if (request_out < wq->to_clean_index &&
  		    request_out >= wq->to_use_index)
  			return 0;
  	}
  	/* request_out index is in range */
  	return 1;
  }
  
  
  /*
   * Mark that ack received and store the Ack index. If there are multiple
   * acks received before Tx thread cleans it up, the latest value will be
   * used which is correct behavior. This state should be in the copy Wq
   * instead of in the fnic
   */
  static inline void fnic_fcpio_ack_handler(struct fnic *fnic,
  					  unsigned int cq_index,
  					  struct fcpio_fw_req *desc)
  {
  	struct vnic_wq_copy *wq;
  	u16 request_out = desc->u.ack.request_out;
  	unsigned long flags;
  	u64 *ox_id_tag = (u64 *)(void *)desc;
  
  	/* mark the ack state */
  	wq = &fnic->wq_copy[cq_index - fnic->raw_wq_count - fnic->rq_count];
  	spin_lock_irqsave(&fnic->wq_copy_lock[0], flags);
  
  	fnic->fnic_stats.misc_stats.last_ack_time = jiffies;
  	if (is_ack_index_in_range(wq, request_out)) {
  		fnic->fw_ack_index[0] = request_out;
  		fnic->fw_ack_recd[0] = 1;
  	} else
  		atomic64_inc(
  			&fnic->fnic_stats.misc_stats.ack_index_out_of_range);
  
  	spin_unlock_irqrestore(&fnic->wq_copy_lock[0], flags);
  	FNIC_TRACE(fnic_fcpio_ack_handler,
  		  fnic->lport->host->host_no, 0, 0, ox_id_tag[2], ox_id_tag[3],
  		  ox_id_tag[4], ox_id_tag[5]);
  }
  
  /*
   * fnic_fcpio_icmnd_cmpl_handler
   * Routine to handle icmnd completions
   */
  static void fnic_fcpio_icmnd_cmpl_handler(struct fnic *fnic,
  					 struct fcpio_fw_req *desc)
  {
  	u8 type;
  	u8 hdr_status;
  	struct fcpio_tag tag;
  	u32 id;
  	u64 xfer_len = 0;
  	struct fcpio_icmnd_cmpl *icmnd_cmpl;
  	struct fnic_io_req *io_req;
  	struct scsi_cmnd *sc;
  	struct fnic_stats *fnic_stats = &fnic->fnic_stats;
  	unsigned long flags;
  	spinlock_t *io_lock;
  	u64 cmd_trace;
  	unsigned long start_time;
  	unsigned long io_duration_time;
  
  	/* Decode the cmpl description to get the io_req id */
  	fcpio_header_dec(&desc->hdr, &type, &hdr_status, &tag);
  	fcpio_tag_id_dec(&tag, &id);
  	icmnd_cmpl = &desc->u.icmnd_cmpl;
  
  	if (id >= fnic->fnic_max_tag_id) {
  		shost_printk(KERN_ERR, fnic->lport->host,
  			"Tag out of range tag %x hdr status = %s\n",
  			     id, fnic_fcpio_status_to_str(hdr_status));
  		return;
  	}
  
  	sc = scsi_host_find_tag(fnic->lport->host, id);
  	WARN_ON_ONCE(!sc);
  	if (!sc) {
  		atomic64_inc(&fnic_stats->io_stats.sc_null);
  		shost_printk(KERN_ERR, fnic->lport->host,
  			  "icmnd_cmpl sc is null - "
  			  "hdr status = %s tag = 0x%x desc = 0x%p\n",
  			  fnic_fcpio_status_to_str(hdr_status), id, desc);
  		FNIC_TRACE(fnic_fcpio_icmnd_cmpl_handler,
  			  fnic->lport->host->host_no, id,
  			  ((u64)icmnd_cmpl->_resvd0[1] << 16 |
  			  (u64)icmnd_cmpl->_resvd0[0]),
  			  ((u64)hdr_status << 16 |
  			  (u64)icmnd_cmpl->scsi_status << 8 |
  			  (u64)icmnd_cmpl->flags), desc,
  			  (u64)icmnd_cmpl->residual, 0);
  		return;
  	}
  
  	io_lock = fnic_io_lock_hash(fnic, sc);
  	spin_lock_irqsave(io_lock, flags);
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  	WARN_ON_ONCE(!io_req);
  	if (!io_req) {
  		atomic64_inc(&fnic_stats->io_stats.ioreq_null);
  		CMD_FLAGS(sc) |= FNIC_IO_REQ_NULL;
  		spin_unlock_irqrestore(io_lock, flags);
  		shost_printk(KERN_ERR, fnic->lport->host,
  			  "icmnd_cmpl io_req is null - "
  			  "hdr status = %s tag = 0x%x sc 0x%p\n",
  			  fnic_fcpio_status_to_str(hdr_status), id, sc);
  		return;
  	}
  	start_time = io_req->start_time;
  
  	/* firmware completed the io */
  	io_req->io_completed = 1;
  
  	/*
  	 *  if SCSI-ML has already issued abort on this command,
  	 *  set completion of the IO. The abts path will clean it up
  	 */
  	if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING) {
  
  		/*
  		 * set the FNIC_IO_DONE so that this doesn't get
  		 * flagged as 'out of order' if it was not aborted
  		 */
  		CMD_FLAGS(sc) |= FNIC_IO_DONE;
  		CMD_FLAGS(sc) |= FNIC_IO_ABTS_PENDING;
  		spin_unlock_irqrestore(io_lock, flags);
  		if(FCPIO_ABORTED == hdr_status)
  			CMD_FLAGS(sc) |= FNIC_IO_ABORTED;
  
  		FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  			"icmnd_cmpl abts pending "
  			  "hdr status = %s tag = 0x%x sc = 0x%p "
  			  "scsi_status = %x residual = %d\n",
  			  fnic_fcpio_status_to_str(hdr_status),
  			  id, sc,
  			  icmnd_cmpl->scsi_status,
  			  icmnd_cmpl->residual);
  		return;
  	}
  
  	/* Mark the IO as complete */
  	CMD_STATE(sc) = FNIC_IOREQ_CMD_COMPLETE;
  
  	icmnd_cmpl = &desc->u.icmnd_cmpl;
  
  	switch (hdr_status) {
  	case FCPIO_SUCCESS:
  		sc->result = (DID_OK << 16) | icmnd_cmpl->scsi_status;
  		xfer_len = scsi_bufflen(sc);
  		scsi_set_resid(sc, icmnd_cmpl->residual);
  
  		if (icmnd_cmpl->flags & FCPIO_ICMND_CMPL_RESID_UNDER)
  			xfer_len -= icmnd_cmpl->residual;
  
  		if (icmnd_cmpl->scsi_status == SAM_STAT_CHECK_CONDITION)
  			atomic64_inc(&fnic_stats->misc_stats.check_condition);
  
  		if (icmnd_cmpl->scsi_status == SAM_STAT_TASK_SET_FULL)
  			atomic64_inc(&fnic_stats->misc_stats.queue_fulls);
  		break;
  
  	case FCPIO_TIMEOUT:          /* request was timed out */
  		atomic64_inc(&fnic_stats->misc_stats.fcpio_timeout);
  		sc->result = (DID_TIME_OUT << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_ABORTED:          /* request was aborted */
  		atomic64_inc(&fnic_stats->misc_stats.fcpio_aborted);
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_DATA_CNT_MISMATCH: /* recv/sent more/less data than exp. */
  		atomic64_inc(&fnic_stats->misc_stats.data_count_mismatch);
  		scsi_set_resid(sc, icmnd_cmpl->residual);
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_OUT_OF_RESOURCE:  /* out of resources to complete request */
  		atomic64_inc(&fnic_stats->fw_stats.fw_out_of_resources);
  		sc->result = (DID_REQUEUE << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_IO_NOT_FOUND:     /* requested I/O was not found */
  		atomic64_inc(&fnic_stats->io_stats.io_not_found);
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_SGL_INVALID:      /* request was aborted due to sgl error */
  		atomic64_inc(&fnic_stats->misc_stats.sgl_invalid);
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_FW_ERR:           /* request was terminated due fw error */
  		atomic64_inc(&fnic_stats->fw_stats.io_fw_errs);
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_MSS_INVALID:      /* request was aborted due to mss error */
  		atomic64_inc(&fnic_stats->misc_stats.mss_invalid);
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  
  	case FCPIO_INVALID_HEADER:   /* header contains invalid data */
  	case FCPIO_INVALID_PARAM:    /* some parameter in request invalid */
  	case FCPIO_REQ_NOT_SUPPORTED:/* request type is not supported */
  	default:
  		sc->result = (DID_ERROR << 16) | icmnd_cmpl->scsi_status;
  		break;
  	}
  
  	/* Break link with the SCSI command */
  	CMD_SP(sc) = NULL;
  	CMD_FLAGS(sc) |= FNIC_IO_DONE;
  
  	spin_unlock_irqrestore(io_lock, flags);
  
  	if (hdr_status != FCPIO_SUCCESS) {
  		atomic64_inc(&fnic_stats->io_stats.io_failures);
  		shost_printk(KERN_ERR, fnic->lport->host, "hdr status = %s\n",
  			     fnic_fcpio_status_to_str(hdr_status));
  	}
  
  	fnic_release_ioreq_buf(fnic, io_req, sc);
  
  	mempool_free(io_req, fnic->io_req_pool);
  
  	cmd_trace = ((u64)hdr_status << 56) |
  		  (u64)icmnd_cmpl->scsi_status << 48 |
  		  (u64)icmnd_cmpl->flags << 40 | (u64)sc->cmnd[0] << 32 |
  		  (u64)sc->cmnd[2] << 24 | (u64)sc->cmnd[3] << 16 |
  		  (u64)sc->cmnd[4] << 8 | sc->cmnd[5];
  
  	FNIC_TRACE(fnic_fcpio_icmnd_cmpl_handler,
  		  sc->device->host->host_no, id, sc,
  		  ((u64)icmnd_cmpl->_resvd0[1] << 56 |
  		  (u64)icmnd_cmpl->_resvd0[0] << 48 |
  		  jiffies_to_msecs(jiffies - start_time)),
  		  desc, cmd_trace,
  		  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  
  	if (sc->sc_data_direction == DMA_FROM_DEVICE) {
  		fnic->lport->host_stats.fcp_input_requests++;
  		fnic->fcp_input_bytes += xfer_len;
  	} else if (sc->sc_data_direction == DMA_TO_DEVICE) {
  		fnic->lport->host_stats.fcp_output_requests++;
  		fnic->fcp_output_bytes += xfer_len;
  	} else
  		fnic->lport->host_stats.fcp_control_requests++;
  
  	atomic64_dec(&fnic_stats->io_stats.active_ios);
  	if (atomic64_read(&fnic->io_cmpl_skip))
  		atomic64_dec(&fnic->io_cmpl_skip);
  	else
  		atomic64_inc(&fnic_stats->io_stats.io_completions);
  
  
  	io_duration_time = jiffies_to_msecs(jiffies) -
  						jiffies_to_msecs(start_time);
  
  	if(io_duration_time <= 10)
  		atomic64_inc(&fnic_stats->io_stats.io_btw_0_to_10_msec);
  	else if(io_duration_time <= 100)
  		atomic64_inc(&fnic_stats->io_stats.io_btw_10_to_100_msec);
  	else if(io_duration_time <= 500)
  		atomic64_inc(&fnic_stats->io_stats.io_btw_100_to_500_msec);
  	else if(io_duration_time <= 5000)
  		atomic64_inc(&fnic_stats->io_stats.io_btw_500_to_5000_msec);
  	else if(io_duration_time <= 10000)
  		atomic64_inc(&fnic_stats->io_stats.io_btw_5000_to_10000_msec);
  	else if(io_duration_time <= 30000)
  		atomic64_inc(&fnic_stats->io_stats.io_btw_10000_to_30000_msec);
  	else {
  		atomic64_inc(&fnic_stats->io_stats.io_greater_than_30000_msec);
  
  		if(io_duration_time > atomic64_read(&fnic_stats->io_stats.current_max_io_time))
  			atomic64_set(&fnic_stats->io_stats.current_max_io_time, io_duration_time);
  	}
  
  	/* Call SCSI completion function to complete the IO */
  	if (sc->scsi_done)
  		sc->scsi_done(sc);
  }
  
  /* fnic_fcpio_itmf_cmpl_handler
   * Routine to handle itmf completions
   */
  static void fnic_fcpio_itmf_cmpl_handler(struct fnic *fnic,
  					struct fcpio_fw_req *desc)
  {
  	u8 type;
  	u8 hdr_status;
  	struct fcpio_tag tag;
  	u32 id;
  	struct scsi_cmnd *sc;
  	struct fnic_io_req *io_req;
  	struct fnic_stats *fnic_stats = &fnic->fnic_stats;
  	struct abort_stats *abts_stats = &fnic->fnic_stats.abts_stats;
  	struct terminate_stats *term_stats = &fnic->fnic_stats.term_stats;
  	struct misc_stats *misc_stats = &fnic->fnic_stats.misc_stats;
  	unsigned long flags;
  	spinlock_t *io_lock;
  	unsigned long start_time;
  
  	fcpio_header_dec(&desc->hdr, &type, &hdr_status, &tag);
  	fcpio_tag_id_dec(&tag, &id);
  
  	if ((id & FNIC_TAG_MASK) >= fnic->fnic_max_tag_id) {
  		shost_printk(KERN_ERR, fnic->lport->host,
  		"Tag out of range tag %x hdr status = %s\n",
  		id, fnic_fcpio_status_to_str(hdr_status));
  		return;
  	}
  
  	sc = scsi_host_find_tag(fnic->lport->host, id & FNIC_TAG_MASK);
  	WARN_ON_ONCE(!sc);
  	if (!sc) {
  		atomic64_inc(&fnic_stats->io_stats.sc_null);
  		shost_printk(KERN_ERR, fnic->lport->host,
  			  "itmf_cmpl sc is null - hdr status = %s tag = 0x%x\n",
  			  fnic_fcpio_status_to_str(hdr_status), id);
  		return;
  	}
  	io_lock = fnic_io_lock_hash(fnic, sc);
  	spin_lock_irqsave(io_lock, flags);
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  	WARN_ON_ONCE(!io_req);
  	if (!io_req) {
  		atomic64_inc(&fnic_stats->io_stats.ioreq_null);
  		spin_unlock_irqrestore(io_lock, flags);
  		CMD_FLAGS(sc) |= FNIC_IO_ABT_TERM_REQ_NULL;
  		shost_printk(KERN_ERR, fnic->lport->host,
  			  "itmf_cmpl io_req is null - "
  			  "hdr status = %s tag = 0x%x sc 0x%p\n",
  			  fnic_fcpio_status_to_str(hdr_status), id, sc);
  		return;
  	}
  	start_time = io_req->start_time;
  
  	if ((id & FNIC_TAG_ABORT) && (id & FNIC_TAG_DEV_RST)) {
  		/* Abort and terminate completion of device reset req */
  		/* REVISIT : Add asserts about various flags */
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "dev reset abts cmpl recd. id %x status %s\n",
  			      id, fnic_fcpio_status_to_str(hdr_status));
  		CMD_STATE(sc) = FNIC_IOREQ_ABTS_COMPLETE;
  		CMD_ABTS_STATUS(sc) = hdr_status;
  		CMD_FLAGS(sc) |= FNIC_DEV_RST_DONE;
  		if (io_req->abts_done)
  			complete(io_req->abts_done);
  		spin_unlock_irqrestore(io_lock, flags);
  	} else if (id & FNIC_TAG_ABORT) {
  		/* Completion of abort cmd */
  		switch (hdr_status) {
  		case FCPIO_SUCCESS:
  			break;
  		case FCPIO_TIMEOUT:
  			if (CMD_FLAGS(sc) & FNIC_IO_ABTS_ISSUED)
  				atomic64_inc(&abts_stats->abort_fw_timeouts);
  			else
  				atomic64_inc(
  					&term_stats->terminate_fw_timeouts);
  			break;
  		case FCPIO_ITMF_REJECTED:
  			FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  				"abort reject recd. id %d\n",
  				(int)(id & FNIC_TAG_MASK));
  			break;
  		case FCPIO_IO_NOT_FOUND:
  			if (CMD_FLAGS(sc) & FNIC_IO_ABTS_ISSUED)
  				atomic64_inc(&abts_stats->abort_io_not_found);
  			else
  				atomic64_inc(
  					&term_stats->terminate_io_not_found);
  			break;
  		default:
  			if (CMD_FLAGS(sc) & FNIC_IO_ABTS_ISSUED)
  				atomic64_inc(&abts_stats->abort_failures);
  			else
  				atomic64_inc(
  					&term_stats->terminate_failures);
  			break;
  		}
  		if (CMD_STATE(sc) != FNIC_IOREQ_ABTS_PENDING) {
  			/* This is a late completion. Ignore it */
  			spin_unlock_irqrestore(io_lock, flags);
  			return;
  		}
  
  		CMD_FLAGS(sc) |= FNIC_IO_ABT_TERM_DONE;
  		CMD_ABTS_STATUS(sc) = hdr_status;
  
  		/* If the status is IO not found consider it as success */
  		if (hdr_status == FCPIO_IO_NOT_FOUND)
  			CMD_ABTS_STATUS(sc) = FCPIO_SUCCESS;
  
  		if (!(CMD_FLAGS(sc) & (FNIC_IO_ABORTED | FNIC_IO_DONE)))
  			atomic64_inc(&misc_stats->no_icmnd_itmf_cmpls);
  
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "abts cmpl recd. id %d status %s\n",
  			      (int)(id & FNIC_TAG_MASK),
  			      fnic_fcpio_status_to_str(hdr_status));
  
  		/*
  		 * If scsi_eh thread is blocked waiting for abts to complete,
  		 * signal completion to it. IO will be cleaned in the thread
  		 * else clean it in this context
  		 */
  		if (io_req->abts_done) {
  			complete(io_req->abts_done);
  			spin_unlock_irqrestore(io_lock, flags);
  		} else {
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				      "abts cmpl, completing IO\n");
  			CMD_SP(sc) = NULL;
  			sc->result = (DID_ERROR << 16);
  
  			spin_unlock_irqrestore(io_lock, flags);
  
  			fnic_release_ioreq_buf(fnic, io_req, sc);
  			mempool_free(io_req, fnic->io_req_pool);
  			if (sc->scsi_done) {
  				FNIC_TRACE(fnic_fcpio_itmf_cmpl_handler,
  					sc->device->host->host_no, id,
  					sc,
  					jiffies_to_msecs(jiffies - start_time),
  					desc,
  					(((u64)hdr_status << 40) |
  					(u64)sc->cmnd[0] << 32 |
  					(u64)sc->cmnd[2] << 24 |
  					(u64)sc->cmnd[3] << 16 |
  					(u64)sc->cmnd[4] << 8 | sc->cmnd[5]),
  					(((u64)CMD_FLAGS(sc) << 32) |
  					CMD_STATE(sc)));
  				sc->scsi_done(sc);
  				atomic64_dec(&fnic_stats->io_stats.active_ios);
  				if (atomic64_read(&fnic->io_cmpl_skip))
  					atomic64_dec(&fnic->io_cmpl_skip);
  				else
  					atomic64_inc(&fnic_stats->io_stats.io_completions);
  			}
  		}
  
  	} else if (id & FNIC_TAG_DEV_RST) {
  		/* Completion of device reset */
  		CMD_LR_STATUS(sc) = hdr_status;
  		if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING) {
  			spin_unlock_irqrestore(io_lock, flags);
  			CMD_FLAGS(sc) |= FNIC_DEV_RST_ABTS_PENDING;
  			FNIC_TRACE(fnic_fcpio_itmf_cmpl_handler,
  				  sc->device->host->host_no, id, sc,
  				  jiffies_to_msecs(jiffies - start_time),
  				  desc, 0,
  				  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				"Terminate pending "
  				"dev reset cmpl recd. id %d status %s\n",
  				(int)(id & FNIC_TAG_MASK),
  				fnic_fcpio_status_to_str(hdr_status));
  			return;
  		}
  		if (CMD_FLAGS(sc) & FNIC_DEV_RST_TIMED_OUT) {
  			/* Need to wait for terminate completion */
  			spin_unlock_irqrestore(io_lock, flags);
  			FNIC_TRACE(fnic_fcpio_itmf_cmpl_handler,
  				  sc->device->host->host_no, id, sc,
  				  jiffies_to_msecs(jiffies - start_time),
  				  desc, 0,
  				  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				"dev reset cmpl recd after time out. "
  				"id %d status %s\n",
  				(int)(id & FNIC_TAG_MASK),
  				fnic_fcpio_status_to_str(hdr_status));
  			return;
  		}
  		CMD_STATE(sc) = FNIC_IOREQ_CMD_COMPLETE;
  		CMD_FLAGS(sc) |= FNIC_DEV_RST_DONE;
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "dev reset cmpl recd. id %d status %s\n",
  			      (int)(id & FNIC_TAG_MASK),
  			      fnic_fcpio_status_to_str(hdr_status));
  		if (io_req->dr_done)
  			complete(io_req->dr_done);
  		spin_unlock_irqrestore(io_lock, flags);
  
  	} else {
  		shost_printk(KERN_ERR, fnic->lport->host,
  			     "Unexpected itmf io state %s tag %x\n",
  			     fnic_ioreq_state_to_str(CMD_STATE(sc)), id);
  		spin_unlock_irqrestore(io_lock, flags);
  	}
  
  }
  
  /*
   * fnic_fcpio_cmpl_handler
   * Routine to service the cq for wq_copy
   */
  static int fnic_fcpio_cmpl_handler(struct vnic_dev *vdev,
  				   unsigned int cq_index,
  				   struct fcpio_fw_req *desc)
  {
  	struct fnic *fnic = vnic_dev_priv(vdev);
  
  	switch (desc->hdr.type) {
  	case FCPIO_ICMND_CMPL: /* fw completed a command */
  	case FCPIO_ITMF_CMPL: /* fw completed itmf (abort cmd, lun reset)*/
  	case FCPIO_FLOGI_REG_CMPL: /* fw completed flogi_reg */
  	case FCPIO_FLOGI_FIP_REG_CMPL: /* fw completed flogi_fip_reg */
  	case FCPIO_RESET_CMPL: /* fw completed reset */
  		atomic64_dec(&fnic->fnic_stats.fw_stats.active_fw_reqs);
  		break;
  	default:
  		break;
  	}
  
  	switch (desc->hdr.type) {
  	case FCPIO_ACK: /* fw copied copy wq desc to its queue */
  		fnic_fcpio_ack_handler(fnic, cq_index, desc);
  		break;
  
  	case FCPIO_ICMND_CMPL: /* fw completed a command */
  		fnic_fcpio_icmnd_cmpl_handler(fnic, desc);
  		break;
  
  	case FCPIO_ITMF_CMPL: /* fw completed itmf (abort cmd, lun reset)*/
  		fnic_fcpio_itmf_cmpl_handler(fnic, desc);
  		break;
  
  	case FCPIO_FLOGI_REG_CMPL: /* fw completed flogi_reg */
  	case FCPIO_FLOGI_FIP_REG_CMPL: /* fw completed flogi_fip_reg */
  		fnic_fcpio_flogi_reg_cmpl_handler(fnic, desc);
  		break;
  
  	case FCPIO_RESET_CMPL: /* fw completed reset */
  		fnic_fcpio_fw_reset_cmpl_handler(fnic, desc);
  		break;
  
  	default:
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "firmware completion type %d\n",
  			      desc->hdr.type);
  		break;
  	}
  
  	return 0;
  }
  
  /*
   * fnic_wq_copy_cmpl_handler
   * Routine to process wq copy
   */
  int fnic_wq_copy_cmpl_handler(struct fnic *fnic, int copy_work_to_do)
  {
  	unsigned int wq_work_done = 0;
  	unsigned int i, cq_index;
  	unsigned int cur_work_done;
  	struct misc_stats *misc_stats = &fnic->fnic_stats.misc_stats;
  	u64 start_jiffies = 0;
  	u64 end_jiffies = 0;
  	u64 delta_jiffies = 0;
  	u64 delta_ms = 0;
  
  	for (i = 0; i < fnic->wq_copy_count; i++) {
  		cq_index = i + fnic->raw_wq_count + fnic->rq_count;
  
  		start_jiffies = jiffies;
  		cur_work_done = vnic_cq_copy_service(&fnic->cq[cq_index],
  						     fnic_fcpio_cmpl_handler,
  						     copy_work_to_do);
  		end_jiffies = jiffies;
  
  		wq_work_done += cur_work_done;
  		delta_jiffies = end_jiffies - start_jiffies;
  		if (delta_jiffies >
  			(u64) atomic64_read(&misc_stats->max_isr_jiffies)) {
  			atomic64_set(&misc_stats->max_isr_jiffies,
  					delta_jiffies);
  			delta_ms = jiffies_to_msecs(delta_jiffies);
  			atomic64_set(&misc_stats->max_isr_time_ms, delta_ms);
  			atomic64_set(&misc_stats->corr_work_done,
  					cur_work_done);
  		}
  	}
  	return wq_work_done;
  }
  
  static void fnic_cleanup_io(struct fnic *fnic, int exclude_id)
  {
  	int i;
  	struct fnic_io_req *io_req;
  	unsigned long flags = 0;
  	struct scsi_cmnd *sc;
  	spinlock_t *io_lock;
  	unsigned long start_time = 0;
  	struct fnic_stats *fnic_stats = &fnic->fnic_stats;
  
  	for (i = 0; i < fnic->fnic_max_tag_id; i++) {
  		if (i == exclude_id)
  			continue;
  
  		io_lock = fnic_io_lock_tag(fnic, i);
  		spin_lock_irqsave(io_lock, flags);
  		sc = scsi_host_find_tag(fnic->lport->host, i);
  		if (!sc) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		if ((CMD_FLAGS(sc) & FNIC_DEVICE_RESET) &&
  			!(CMD_FLAGS(sc) & FNIC_DEV_RST_DONE)) {
  			/*
  			 * We will be here only when FW completes reset
  			 * without sending completions for outstanding ios.
  			 */
  			CMD_FLAGS(sc) |= FNIC_DEV_RST_DONE;
  			if (io_req && io_req->dr_done)
  				complete(io_req->dr_done);
  			else if (io_req && io_req->abts_done)
  				complete(io_req->abts_done);
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		} else if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  		if (!io_req) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		CMD_SP(sc) = NULL;
  
  		spin_unlock_irqrestore(io_lock, flags);
  
  		/*
  		 * If there is a scsi_cmnd associated with this io_req, then
  		 * free the corresponding state
  		 */
  		start_time = io_req->start_time;
  		fnic_release_ioreq_buf(fnic, io_req, sc);
  		mempool_free(io_req, fnic->io_req_pool);
  
  		sc->result = DID_TRANSPORT_DISRUPTED << 16;
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "%s: tag:0x%x : sc:0x%p duration = %lu DID_TRANSPORT_DISRUPTED\n",
  			      __func__, sc->request->tag, sc,
  			      (jiffies - start_time));
  
  		if (atomic64_read(&fnic->io_cmpl_skip))
  			atomic64_dec(&fnic->io_cmpl_skip);
  		else
  			atomic64_inc(&fnic_stats->io_stats.io_completions);
  
  		/* Complete the command to SCSI */
  		if (sc->scsi_done) {
  			if (!(CMD_FLAGS(sc) & FNIC_IO_ISSUED))
  				shost_printk(KERN_ERR, fnic->lport->host,
  				"Calling done for IO not issued to fw: tag:0x%x sc:0x%p\n",
  				 sc->request->tag, sc);
  
  			FNIC_TRACE(fnic_cleanup_io,
  				  sc->device->host->host_no, i, sc,
  				  jiffies_to_msecs(jiffies - start_time),
  				  0, ((u64)sc->cmnd[0] << 32 |
  				  (u64)sc->cmnd[2] << 24 |
  				  (u64)sc->cmnd[3] << 16 |
  				  (u64)sc->cmnd[4] << 8 | sc->cmnd[5]),
  				  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  
  			sc->scsi_done(sc);
  		}
  	}
  }
  
  void fnic_wq_copy_cleanup_handler(struct vnic_wq_copy *wq,
  				  struct fcpio_host_req *desc)
  {
  	u32 id;
  	struct fnic *fnic = vnic_dev_priv(wq->vdev);
  	struct fnic_io_req *io_req;
  	struct scsi_cmnd *sc;
  	unsigned long flags;
  	spinlock_t *io_lock;
  	unsigned long start_time = 0;
  
  	/* get the tag reference */
  	fcpio_tag_id_dec(&desc->hdr.tag, &id);
  	id &= FNIC_TAG_MASK;
  
  	if (id >= fnic->fnic_max_tag_id)
  		return;
  
  	sc = scsi_host_find_tag(fnic->lport->host, id);
  	if (!sc)
  		return;
  
  	io_lock = fnic_io_lock_hash(fnic, sc);
  	spin_lock_irqsave(io_lock, flags);
  
  	/* Get the IO context which this desc refers to */
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  
  	/* fnic interrupts are turned off by now */
  
  	if (!io_req) {
  		spin_unlock_irqrestore(io_lock, flags);
  		goto wq_copy_cleanup_scsi_cmd;
  	}
  
  	CMD_SP(sc) = NULL;
  
  	spin_unlock_irqrestore(io_lock, flags);
  
  	start_time = io_req->start_time;
  	fnic_release_ioreq_buf(fnic, io_req, sc);
  	mempool_free(io_req, fnic->io_req_pool);
  
  wq_copy_cleanup_scsi_cmd:
  	sc->result = DID_NO_CONNECT << 16;
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host, "wq_copy_cleanup_handler:"
  		      " DID_NO_CONNECT\n");
  
  	if (sc->scsi_done) {
  		FNIC_TRACE(fnic_wq_copy_cleanup_handler,
  			  sc->device->host->host_no, id, sc,
  			  jiffies_to_msecs(jiffies - start_time),
  			  0, ((u64)sc->cmnd[0] << 32 |
  			  (u64)sc->cmnd[2] << 24 | (u64)sc->cmnd[3] << 16 |
  			  (u64)sc->cmnd[4] << 8 | sc->cmnd[5]),
  			  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  
  		sc->scsi_done(sc);
  	}
  }
  
  static inline int fnic_queue_abort_io_req(struct fnic *fnic, int tag,
  					  u32 task_req, u8 *fc_lun,
  					  struct fnic_io_req *io_req)
  {
  	struct vnic_wq_copy *wq = &fnic->wq_copy[0];
  	struct Scsi_Host *host = fnic->lport->host;
  	struct misc_stats *misc_stats = &fnic->fnic_stats.misc_stats;
  	unsigned long flags;
  
  	spin_lock_irqsave(host->host_lock, flags);
  	if (unlikely(fnic_chk_state_flags_locked(fnic,
  						FNIC_FLAGS_IO_BLOCKED))) {
  		spin_unlock_irqrestore(host->host_lock, flags);
  		return 1;
  	} else
  		atomic_inc(&fnic->in_flight);
  	spin_unlock_irqrestore(host->host_lock, flags);
  
  	spin_lock_irqsave(&fnic->wq_copy_lock[0], flags);
  
  	if (vnic_wq_copy_desc_avail(wq) <= fnic->wq_copy_desc_low[0])
  		free_wq_copy_descs(fnic, wq);
  
  	if (!vnic_wq_copy_desc_avail(wq)) {
  		spin_unlock_irqrestore(&fnic->wq_copy_lock[0], flags);
  		atomic_dec(&fnic->in_flight);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"fnic_queue_abort_io_req: failure: no descriptors\n");
  		atomic64_inc(&misc_stats->abts_cpwq_alloc_failures);
  		return 1;
  	}
  	fnic_queue_wq_copy_desc_itmf(wq, tag | FNIC_TAG_ABORT,
  				     0, task_req, tag, fc_lun, io_req->port_id,
  				     fnic->config.ra_tov, fnic->config.ed_tov);
  
  	atomic64_inc(&fnic->fnic_stats.fw_stats.active_fw_reqs);
  	if (atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs) >
  		  atomic64_read(&fnic->fnic_stats.fw_stats.max_fw_reqs))
  		atomic64_set(&fnic->fnic_stats.fw_stats.max_fw_reqs,
  		  atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs));
  
  	spin_unlock_irqrestore(&fnic->wq_copy_lock[0], flags);
  	atomic_dec(&fnic->in_flight);
  
  	return 0;
  }
  
  static void fnic_rport_exch_reset(struct fnic *fnic, u32 port_id)
  {
  	int tag;
  	int abt_tag;
  	int term_cnt = 0;
  	struct fnic_io_req *io_req;
  	spinlock_t *io_lock;
  	unsigned long flags;
  	struct scsi_cmnd *sc;
  	struct reset_stats *reset_stats = &fnic->fnic_stats.reset_stats;
  	struct terminate_stats *term_stats = &fnic->fnic_stats.term_stats;
  	struct scsi_lun fc_lun;
  	enum fnic_ioreq_state old_ioreq_state;
  
  	FNIC_SCSI_DBG(KERN_DEBUG,
  		      fnic->lport->host,
  		      "fnic_rport_exch_reset called portid 0x%06x\n",
  		      port_id);
  
  	if (fnic->in_remove)
  		return;
  
  	for (tag = 0; tag < fnic->fnic_max_tag_id; tag++) {
  		abt_tag = tag;
  		io_lock = fnic_io_lock_tag(fnic, tag);
  		spin_lock_irqsave(io_lock, flags);
  		sc = scsi_host_find_tag(fnic->lport->host, tag);
  		if (!sc) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  
  		if (!io_req || io_req->port_id != port_id) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		if ((CMD_FLAGS(sc) & FNIC_DEVICE_RESET) &&
  			(!(CMD_FLAGS(sc) & FNIC_DEV_RST_ISSUED))) {
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"fnic_rport_exch_reset dev rst not pending sc 0x%p\n",
  			sc);
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		/*
  		 * Found IO that is still pending with firmware and
  		 * belongs to rport that went away
  		 */
  		if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  		if (io_req->abts_done) {
  			shost_printk(KERN_ERR, fnic->lport->host,
  			"fnic_rport_exch_reset: io_req->abts_done is set "
  			"state is %s\n",
  			fnic_ioreq_state_to_str(CMD_STATE(sc)));
  		}
  
  		if (!(CMD_FLAGS(sc) & FNIC_IO_ISSUED)) {
  			shost_printk(KERN_ERR, fnic->lport->host,
  				  "rport_exch_reset "
  				  "IO not yet issued %p tag 0x%x flags "
  				  "%x state %d\n",
  				  sc, tag, CMD_FLAGS(sc), CMD_STATE(sc));
  		}
  		old_ioreq_state = CMD_STATE(sc);
  		CMD_STATE(sc) = FNIC_IOREQ_ABTS_PENDING;
  		CMD_ABTS_STATUS(sc) = FCPIO_INVALID_CODE;
  		if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET) {
  			atomic64_inc(&reset_stats->device_reset_terminates);
  			abt_tag = (tag | FNIC_TAG_DEV_RST);
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"fnic_rport_exch_reset dev rst sc 0x%p\n",
  			sc);
  		}
  
  		BUG_ON(io_req->abts_done);
  
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "fnic_rport_reset_exch: Issuing abts\n");
  
  		spin_unlock_irqrestore(io_lock, flags);
  
  		/* Now queue the abort command to firmware */
  		int_to_scsilun(sc->device->lun, &fc_lun);
  
  		if (fnic_queue_abort_io_req(fnic, abt_tag,
  					    FCPIO_ITMF_ABT_TASK_TERM,
  					    fc_lun.scsi_lun, io_req)) {
  			/*
  			 * Revert the cmd state back to old state, if
  			 * it hasn't changed in between. This cmd will get
  			 * aborted later by scsi_eh, or cleaned up during
  			 * lun reset
  			 */
  			spin_lock_irqsave(io_lock, flags);
  			if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING)
  				CMD_STATE(sc) = old_ioreq_state;
  			spin_unlock_irqrestore(io_lock, flags);
  		} else {
  			spin_lock_irqsave(io_lock, flags);
  			if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET)
  				CMD_FLAGS(sc) |= FNIC_DEV_RST_TERM_ISSUED;
  			else
  				CMD_FLAGS(sc) |= FNIC_IO_INTERNAL_TERM_ISSUED;
  			spin_unlock_irqrestore(io_lock, flags);
  			atomic64_inc(&term_stats->terminates);
  			term_cnt++;
  		}
  	}
  	if (term_cnt > atomic64_read(&term_stats->max_terminates))
  		atomic64_set(&term_stats->max_terminates, term_cnt);
  
  }
  
  void fnic_terminate_rport_io(struct fc_rport *rport)
  {
  	int tag;
  	int abt_tag;
  	int term_cnt = 0;
  	struct fnic_io_req *io_req;
  	spinlock_t *io_lock;
  	unsigned long flags;
  	struct scsi_cmnd *sc;
  	struct scsi_lun fc_lun;
  	struct fc_rport_libfc_priv *rdata;
  	struct fc_lport *lport;
  	struct fnic *fnic;
  	struct fc_rport *cmd_rport;
  	struct reset_stats *reset_stats;
  	struct terminate_stats *term_stats;
  	enum fnic_ioreq_state old_ioreq_state;
  
  	if (!rport) {
  		printk(KERN_ERR "fnic_terminate_rport_io: rport is NULL\n");
  		return;
  	}
  	rdata = rport->dd_data;
  
  	if (!rdata) {
  		printk(KERN_ERR "fnic_terminate_rport_io: rdata is NULL\n");
  		return;
  	}
  	lport = rdata->local_port;
  
  	if (!lport) {
  		printk(KERN_ERR "fnic_terminate_rport_io: lport is NULL\n");
  		return;
  	}
  	fnic = lport_priv(lport);
  	FNIC_SCSI_DBG(KERN_DEBUG,
  		      fnic->lport->host, "fnic_terminate_rport_io called"
  		      " wwpn 0x%llx, wwnn0x%llx, rport 0x%p, portid 0x%06x\n",
  		      rport->port_name, rport->node_name, rport,
  		      rport->port_id);
  
  	if (fnic->in_remove)
  		return;
  
  	reset_stats = &fnic->fnic_stats.reset_stats;
  	term_stats = &fnic->fnic_stats.term_stats;
  
  	for (tag = 0; tag < fnic->fnic_max_tag_id; tag++) {
  		abt_tag = tag;
  		io_lock = fnic_io_lock_tag(fnic, tag);
  		spin_lock_irqsave(io_lock, flags);
  		sc = scsi_host_find_tag(fnic->lport->host, tag);
  		if (!sc) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		cmd_rport = starget_to_rport(scsi_target(sc->device));
  		if (rport != cmd_rport) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  
  		if (!io_req || rport != cmd_rport) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		if ((CMD_FLAGS(sc) & FNIC_DEVICE_RESET) &&
  			(!(CMD_FLAGS(sc) & FNIC_DEV_RST_ISSUED))) {
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"fnic_terminate_rport_io dev rst not pending sc 0x%p\n",
  			sc);
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  		/*
  		 * Found IO that is still pending with firmware and
  		 * belongs to rport that went away
  		 */
  		if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  		if (io_req->abts_done) {
  			shost_printk(KERN_ERR, fnic->lport->host,
  			"fnic_terminate_rport_io: io_req->abts_done is set "
  			"state is %s\n",
  			fnic_ioreq_state_to_str(CMD_STATE(sc)));
  		}
  		if (!(CMD_FLAGS(sc) & FNIC_IO_ISSUED)) {
  			FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  				  "fnic_terminate_rport_io "
  				  "IO not yet issued %p tag 0x%x flags "
  				  "%x state %d\n",
  				  sc, tag, CMD_FLAGS(sc), CMD_STATE(sc));
  		}
  		old_ioreq_state = CMD_STATE(sc);
  		CMD_STATE(sc) = FNIC_IOREQ_ABTS_PENDING;
  		CMD_ABTS_STATUS(sc) = FCPIO_INVALID_CODE;
  		if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET) {
  			atomic64_inc(&reset_stats->device_reset_terminates);
  			abt_tag = (tag | FNIC_TAG_DEV_RST);
  			FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"fnic_terminate_rport_io dev rst sc 0x%p\n", sc);
  		}
  
  		BUG_ON(io_req->abts_done);
  
  		FNIC_SCSI_DBG(KERN_DEBUG,
  			      fnic->lport->host,
  			      "fnic_terminate_rport_io: Issuing abts\n");
  
  		spin_unlock_irqrestore(io_lock, flags);
  
  		/* Now queue the abort command to firmware */
  		int_to_scsilun(sc->device->lun, &fc_lun);
  
  		if (fnic_queue_abort_io_req(fnic, abt_tag,
  					    FCPIO_ITMF_ABT_TASK_TERM,
  					    fc_lun.scsi_lun, io_req)) {
  			/*
  			 * Revert the cmd state back to old state, if
  			 * it hasn't changed in between. This cmd will get
  			 * aborted later by scsi_eh, or cleaned up during
  			 * lun reset
  			 */
  			spin_lock_irqsave(io_lock, flags);
  			if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING)
  				CMD_STATE(sc) = old_ioreq_state;
  			spin_unlock_irqrestore(io_lock, flags);
  		} else {
  			spin_lock_irqsave(io_lock, flags);
  			if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET)
  				CMD_FLAGS(sc) |= FNIC_DEV_RST_TERM_ISSUED;
  			else
  				CMD_FLAGS(sc) |= FNIC_IO_INTERNAL_TERM_ISSUED;
  			spin_unlock_irqrestore(io_lock, flags);
  			atomic64_inc(&term_stats->terminates);
  			term_cnt++;
  		}
  	}
  	if (term_cnt > atomic64_read(&term_stats->max_terminates))
  		atomic64_set(&term_stats->max_terminates, term_cnt);
  
  }
  
  /*
   * This function is exported to SCSI for sending abort cmnds.
   * A SCSI IO is represented by a io_req in the driver.
   * The ioreq is linked to the SCSI Cmd, thus a link with the ULP's IO.
   */
  int fnic_abort_cmd(struct scsi_cmnd *sc)
  {
  	struct fc_lport *lp;
  	struct fnic *fnic;
  	struct fnic_io_req *io_req = NULL;
  	struct fc_rport *rport;
  	spinlock_t *io_lock;
  	unsigned long flags;
  	unsigned long start_time = 0;
  	int ret = SUCCESS;
  	u32 task_req = 0;
  	struct scsi_lun fc_lun;
  	struct fnic_stats *fnic_stats;
  	struct abort_stats *abts_stats;
  	struct terminate_stats *term_stats;
  	enum fnic_ioreq_state old_ioreq_state;
  	int tag;
  	unsigned long abt_issued_time;
  	DECLARE_COMPLETION_ONSTACK(tm_done);
  
  	/* Wait for rport to unblock */
  	fc_block_scsi_eh(sc);
  
  	/* Get local-port, check ready and link up */
  	lp = shost_priv(sc->device->host);
  
  	fnic = lport_priv(lp);
  	fnic_stats = &fnic->fnic_stats;
  	abts_stats = &fnic->fnic_stats.abts_stats;
  	term_stats = &fnic->fnic_stats.term_stats;
  
  	rport = starget_to_rport(scsi_target(sc->device));
  	tag = sc->request->tag;
  	FNIC_SCSI_DBG(KERN_DEBUG,
  		fnic->lport->host,
  		"Abort Cmd called FCID 0x%x, LUN 0x%llx TAG %x flags %x\n",
  		rport->port_id, sc->device->lun, tag, CMD_FLAGS(sc));
  
  	CMD_FLAGS(sc) = FNIC_NO_FLAGS;
  
  	if (lp->state != LPORT_ST_READY || !(lp->link_up)) {
  		ret = FAILED;
  		goto fnic_abort_cmd_end;
  	}
  
  	/*
  	 * Avoid a race between SCSI issuing the abort and the device
  	 * completing the command.
  	 *
  	 * If the command is already completed by the fw cmpl code,
  	 * we just return SUCCESS from here. This means that the abort
  	 * succeeded. In the SCSI ML, since the timeout for command has
  	 * happened, the completion wont actually complete the command
  	 * and it will be considered as an aborted command
  	 *
  	 * The CMD_SP will not be cleared except while holding io_req_lock.
  	 */
  	io_lock = fnic_io_lock_hash(fnic, sc);
  	spin_lock_irqsave(io_lock, flags);
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  	if (!io_req) {
  		spin_unlock_irqrestore(io_lock, flags);
  		goto fnic_abort_cmd_end;
  	}
  
  	io_req->abts_done = &tm_done;
  
  	if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING) {
  		spin_unlock_irqrestore(io_lock, flags);
  		goto wait_pending;
  	}
  
  	abt_issued_time = jiffies_to_msecs(jiffies) - jiffies_to_msecs(io_req->start_time);
  	if (abt_issued_time <= 6000)
  		atomic64_inc(&abts_stats->abort_issued_btw_0_to_6_sec);
  	else if (abt_issued_time > 6000 && abt_issued_time <= 20000)
  		atomic64_inc(&abts_stats->abort_issued_btw_6_to_20_sec);
  	else if (abt_issued_time > 20000 && abt_issued_time <= 30000)
  		atomic64_inc(&abts_stats->abort_issued_btw_20_to_30_sec);
  	else if (abt_issued_time > 30000 && abt_issued_time <= 40000)
  		atomic64_inc(&abts_stats->abort_issued_btw_30_to_40_sec);
  	else if (abt_issued_time > 40000 && abt_issued_time <= 50000)
  		atomic64_inc(&abts_stats->abort_issued_btw_40_to_50_sec);
  	else if (abt_issued_time > 50000 && abt_issued_time <= 60000)
  		atomic64_inc(&abts_stats->abort_issued_btw_50_to_60_sec);
  	else
  		atomic64_inc(&abts_stats->abort_issued_greater_than_60_sec);
  
  	FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  		"CBD Opcode: %02x Abort issued time: %lu msec\n", sc->cmnd[0], abt_issued_time);
  	/*
  	 * Command is still pending, need to abort it
  	 * If the firmware completes the command after this point,
  	 * the completion wont be done till mid-layer, since abort
  	 * has already started.
  	 */
  	old_ioreq_state = CMD_STATE(sc);
  	CMD_STATE(sc) = FNIC_IOREQ_ABTS_PENDING;
  	CMD_ABTS_STATUS(sc) = FCPIO_INVALID_CODE;
  
  	spin_unlock_irqrestore(io_lock, flags);
  
  	/*
  	 * Check readiness of the remote port. If the path to remote
  	 * port is up, then send abts to the remote port to terminate
  	 * the IO. Else, just locally terminate the IO in the firmware
  	 */
  	if (fc_remote_port_chkready(rport) == 0)
  		task_req = FCPIO_ITMF_ABT_TASK;
  	else {
  		atomic64_inc(&fnic_stats->misc_stats.rport_not_ready);
  		task_req = FCPIO_ITMF_ABT_TASK_TERM;
  	}
  
  	/* Now queue the abort command to firmware */
  	int_to_scsilun(sc->device->lun, &fc_lun);
  
  	if (fnic_queue_abort_io_req(fnic, sc->request->tag, task_req,
  				    fc_lun.scsi_lun, io_req)) {
  		spin_lock_irqsave(io_lock, flags);
  		if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING)
  			CMD_STATE(sc) = old_ioreq_state;
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		if (io_req)
  			io_req->abts_done = NULL;
  		spin_unlock_irqrestore(io_lock, flags);
  		ret = FAILED;
  		goto fnic_abort_cmd_end;
  	}
  	if (task_req == FCPIO_ITMF_ABT_TASK) {
  		CMD_FLAGS(sc) |= FNIC_IO_ABTS_ISSUED;
  		atomic64_inc(&fnic_stats->abts_stats.aborts);
  	} else {
  		CMD_FLAGS(sc) |= FNIC_IO_TERM_ISSUED;
  		atomic64_inc(&fnic_stats->term_stats.terminates);
  	}
  
  	/*
  	 * We queued an abort IO, wait for its completion.
  	 * Once the firmware completes the abort command, it will
  	 * wake up this thread.
  	 */
   wait_pending:
  	wait_for_completion_timeout(&tm_done,
  				    msecs_to_jiffies
  				    (2 * fnic->config.ra_tov +
  				     fnic->config.ed_tov));
  
  	/* Check the abort status */
  	spin_lock_irqsave(io_lock, flags);
  
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  	if (!io_req) {
  		atomic64_inc(&fnic_stats->io_stats.ioreq_null);
  		spin_unlock_irqrestore(io_lock, flags);
  		CMD_FLAGS(sc) |= FNIC_IO_ABT_TERM_REQ_NULL;
  		ret = FAILED;
  		goto fnic_abort_cmd_end;
  	}
  	io_req->abts_done = NULL;
  
  	/* fw did not complete abort, timed out */
  	if (CMD_ABTS_STATUS(sc) == FCPIO_INVALID_CODE) {
  		spin_unlock_irqrestore(io_lock, flags);
  		if (task_req == FCPIO_ITMF_ABT_TASK) {
  			atomic64_inc(&abts_stats->abort_drv_timeouts);
  		} else {
  			atomic64_inc(&term_stats->terminate_drv_timeouts);
  		}
  		CMD_FLAGS(sc) |= FNIC_IO_ABT_TERM_TIMED_OUT;
  		ret = FAILED;
  		goto fnic_abort_cmd_end;
  	}
  
  	/* IO out of order */
  
  	if (!(CMD_FLAGS(sc) & (FNIC_IO_ABORTED | FNIC_IO_DONE))) {
  		spin_unlock_irqrestore(io_lock, flags);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"Issuing Host reset due to out of order IO\n");
  
  		ret = FAILED;
  		goto fnic_abort_cmd_end;
  	}
  
  	CMD_STATE(sc) = FNIC_IOREQ_ABTS_COMPLETE;
  
  	start_time = io_req->start_time;
  	/*
  	 * firmware completed the abort, check the status,
  	 * free the io_req if successful. If abort fails,
  	 * Device reset will clean the I/O.
  	 */
  	if (CMD_ABTS_STATUS(sc) == FCPIO_SUCCESS)
  		CMD_SP(sc) = NULL;
  	else {
  		ret = FAILED;
  		spin_unlock_irqrestore(io_lock, flags);
  		goto fnic_abort_cmd_end;
  	}
  
  	spin_unlock_irqrestore(io_lock, flags);
  
  	fnic_release_ioreq_buf(fnic, io_req, sc);
  	mempool_free(io_req, fnic->io_req_pool);
  
  	if (sc->scsi_done) {
  	/* Call SCSI completion function to complete the IO */
  		sc->result = (DID_ABORT << 16);
  		sc->scsi_done(sc);
  		atomic64_dec(&fnic_stats->io_stats.active_ios);
  		if (atomic64_read(&fnic->io_cmpl_skip))
  			atomic64_dec(&fnic->io_cmpl_skip);
  		else
  			atomic64_inc(&fnic_stats->io_stats.io_completions);
  	}
  
  fnic_abort_cmd_end:
  	FNIC_TRACE(fnic_abort_cmd, sc->device->host->host_no,
  		  sc->request->tag, sc,
  		  jiffies_to_msecs(jiffies - start_time),
  		  0, ((u64)sc->cmnd[0] << 32 |
  		  (u64)sc->cmnd[2] << 24 | (u64)sc->cmnd[3] << 16 |
  		  (u64)sc->cmnd[4] << 8 | sc->cmnd[5]),
  		  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  		      "Returning from abort cmd type %x %s\n", task_req,
  		      (ret == SUCCESS) ?
  		      "SUCCESS" : "FAILED");
  	return ret;
  }
  
  static inline int fnic_queue_dr_io_req(struct fnic *fnic,
  				       struct scsi_cmnd *sc,
  				       struct fnic_io_req *io_req)
  {
  	struct vnic_wq_copy *wq = &fnic->wq_copy[0];
  	struct Scsi_Host *host = fnic->lport->host;
  	struct misc_stats *misc_stats = &fnic->fnic_stats.misc_stats;
  	struct scsi_lun fc_lun;
  	int ret = 0;
  	unsigned long intr_flags;
  
  	spin_lock_irqsave(host->host_lock, intr_flags);
  	if (unlikely(fnic_chk_state_flags_locked(fnic,
  						FNIC_FLAGS_IO_BLOCKED))) {
  		spin_unlock_irqrestore(host->host_lock, intr_flags);
  		return FAILED;
  	} else
  		atomic_inc(&fnic->in_flight);
  	spin_unlock_irqrestore(host->host_lock, intr_flags);
  
  	spin_lock_irqsave(&fnic->wq_copy_lock[0], intr_flags);
  
  	if (vnic_wq_copy_desc_avail(wq) <= fnic->wq_copy_desc_low[0])
  		free_wq_copy_descs(fnic, wq);
  
  	if (!vnic_wq_copy_desc_avail(wq)) {
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			  "queue_dr_io_req failure - no descriptors\n");
  		atomic64_inc(&misc_stats->devrst_cpwq_alloc_failures);
  		ret = -EAGAIN;
  		goto lr_io_req_end;
  	}
  
  	/* fill in the lun info */
  	int_to_scsilun(sc->device->lun, &fc_lun);
  
  	fnic_queue_wq_copy_desc_itmf(wq, sc->request->tag | FNIC_TAG_DEV_RST,
  				     0, FCPIO_ITMF_LUN_RESET, SCSI_NO_TAG,
  				     fc_lun.scsi_lun, io_req->port_id,
  				     fnic->config.ra_tov, fnic->config.ed_tov);
  
  	atomic64_inc(&fnic->fnic_stats.fw_stats.active_fw_reqs);
  	if (atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs) >
  		  atomic64_read(&fnic->fnic_stats.fw_stats.max_fw_reqs))
  		atomic64_set(&fnic->fnic_stats.fw_stats.max_fw_reqs,
  		  atomic64_read(&fnic->fnic_stats.fw_stats.active_fw_reqs));
  
  lr_io_req_end:
  	spin_unlock_irqrestore(&fnic->wq_copy_lock[0], intr_flags);
  	atomic_dec(&fnic->in_flight);
  
  	return ret;
  }
  
  /*
   * Clean up any pending aborts on the lun
   * For each outstanding IO on this lun, whose abort is not completed by fw,
   * issue a local abort. Wait for abort to complete. Return 0 if all commands
   * successfully aborted, 1 otherwise
   */
  static int fnic_clean_pending_aborts(struct fnic *fnic,
  				     struct scsi_cmnd *lr_sc,
  					 bool new_sc)
  
  {
  	int tag, abt_tag;
  	struct fnic_io_req *io_req;
  	spinlock_t *io_lock;
  	unsigned long flags;
  	int ret = 0;
  	struct scsi_cmnd *sc;
  	struct scsi_lun fc_lun;
  	struct scsi_device *lun_dev = lr_sc->device;
  	DECLARE_COMPLETION_ONSTACK(tm_done);
  	enum fnic_ioreq_state old_ioreq_state;
  
  	for (tag = 0; tag < fnic->fnic_max_tag_id; tag++) {
  		io_lock = fnic_io_lock_tag(fnic, tag);
  		spin_lock_irqsave(io_lock, flags);
  		sc = scsi_host_find_tag(fnic->lport->host, tag);
  		/*
  		 * ignore this lun reset cmd if issued using new SC
  		 * or cmds that do not belong to this lun
  		 */
  		if (!sc || ((sc == lr_sc) && new_sc) || sc->device != lun_dev) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  
  		if (!io_req || sc->device != lun_dev) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		/*
  		 * Found IO that is still pending with firmware and
  		 * belongs to the LUN that we are resetting
  		 */
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "Found IO in %s on lun\n",
  			      fnic_ioreq_state_to_str(CMD_STATE(sc)));
  
  		if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  		if ((CMD_FLAGS(sc) & FNIC_DEVICE_RESET) &&
  			(!(CMD_FLAGS(sc) & FNIC_DEV_RST_ISSUED))) {
  			FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  				"%s dev rst not pending sc 0x%p\n", __func__,
  				sc);
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		if (io_req->abts_done)
  			shost_printk(KERN_ERR, fnic->lport->host,
  			  "%s: io_req->abts_done is set state is %s\n",
  			  __func__, fnic_ioreq_state_to_str(CMD_STATE(sc)));
  		old_ioreq_state = CMD_STATE(sc);
  		/*
  		 * Any pending IO issued prior to reset is expected to be
  		 * in abts pending state, if not we need to set
  		 * FNIC_IOREQ_ABTS_PENDING to indicate the IO is abort pending.
  		 * When IO is completed, the IO will be handed over and
  		 * handled in this function.
  		 */
  		CMD_STATE(sc) = FNIC_IOREQ_ABTS_PENDING;
  
  		BUG_ON(io_req->abts_done);
  
  		abt_tag = tag;
  		if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET) {
  			abt_tag |= FNIC_TAG_DEV_RST;
  			FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  				  "%s: dev rst sc 0x%p\n", __func__, sc);
  		}
  
  		CMD_ABTS_STATUS(sc) = FCPIO_INVALID_CODE;
  		io_req->abts_done = &tm_done;
  		spin_unlock_irqrestore(io_lock, flags);
  
  		/* Now queue the abort command to firmware */
  		int_to_scsilun(sc->device->lun, &fc_lun);
  
  		if (fnic_queue_abort_io_req(fnic, abt_tag,
  					    FCPIO_ITMF_ABT_TASK_TERM,
  					    fc_lun.scsi_lun, io_req)) {
  			spin_lock_irqsave(io_lock, flags);
  			io_req = (struct fnic_io_req *)CMD_SP(sc);
  			if (io_req)
  				io_req->abts_done = NULL;
  			if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING)
  				CMD_STATE(sc) = old_ioreq_state;
  			spin_unlock_irqrestore(io_lock, flags);
  			ret = 1;
  			goto clean_pending_aborts_end;
  		} else {
  			spin_lock_irqsave(io_lock, flags);
  			if (CMD_FLAGS(sc) & FNIC_DEVICE_RESET)
  				CMD_FLAGS(sc) |= FNIC_DEV_RST_TERM_ISSUED;
  			spin_unlock_irqrestore(io_lock, flags);
  		}
  		CMD_FLAGS(sc) |= FNIC_IO_INTERNAL_TERM_ISSUED;
  
  		wait_for_completion_timeout(&tm_done,
  					    msecs_to_jiffies
  					    (fnic->config.ed_tov));
  
  		/* Recheck cmd state to check if it is now aborted */
  		spin_lock_irqsave(io_lock, flags);
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		if (!io_req) {
  			spin_unlock_irqrestore(io_lock, flags);
  			CMD_FLAGS(sc) |= FNIC_IO_ABT_TERM_REQ_NULL;
  			continue;
  		}
  
  		io_req->abts_done = NULL;
  
  		/* if abort is still pending with fw, fail */
  		if (CMD_ABTS_STATUS(sc) == FCPIO_INVALID_CODE) {
  			spin_unlock_irqrestore(io_lock, flags);
  			CMD_FLAGS(sc) |= FNIC_IO_ABT_TERM_DONE;
  			ret = 1;
  			goto clean_pending_aborts_end;
  		}
  		CMD_STATE(sc) = FNIC_IOREQ_ABTS_COMPLETE;
  
  		/* original sc used for lr is handled by dev reset code */
  		if (sc != lr_sc)
  			CMD_SP(sc) = NULL;
  		spin_unlock_irqrestore(io_lock, flags);
  
  		/* original sc used for lr is handled by dev reset code */
  		if (sc != lr_sc) {
  			fnic_release_ioreq_buf(fnic, io_req, sc);
  			mempool_free(io_req, fnic->io_req_pool);
  		}
  
  		/*
  		 * Any IO is returned during reset, it needs to call scsi_done
  		 * to return the scsi_cmnd to upper layer.
  		 */
  		if (sc->scsi_done) {
  			/* Set result to let upper SCSI layer retry */
  			sc->result = DID_RESET << 16;
  			sc->scsi_done(sc);
  		}
  	}
  
  	schedule_timeout(msecs_to_jiffies(2 * fnic->config.ed_tov));
  
  	/* walk again to check, if IOs are still pending in fw */
  	if (fnic_is_abts_pending(fnic, lr_sc))
  		ret = FAILED;
  
  clean_pending_aborts_end:
  	return ret;
  }
  
  /**
   * fnic_scsi_host_start_tag
   * Allocates tagid from host's tag list
   **/
  static inline int
  fnic_scsi_host_start_tag(struct fnic *fnic, struct scsi_cmnd *sc)
  {
  	struct request_queue *q = sc->request->q;
  	struct request *dummy;
  
  	dummy = blk_mq_alloc_request(q, REQ_OP_WRITE, BLK_MQ_REQ_NOWAIT);
  	if (IS_ERR(dummy))
  		return SCSI_NO_TAG;
  
  	sc->tag = sc->request->tag = dummy->tag;
  	sc->host_scribble = (unsigned char *)dummy;
  
  	return dummy->tag;
  }
  
  /**
   * fnic_scsi_host_end_tag
   * frees tag allocated by fnic_scsi_host_start_tag.
   **/
  static inline void
  fnic_scsi_host_end_tag(struct fnic *fnic, struct scsi_cmnd *sc)
  {
  	struct request *dummy = (struct request *)sc->host_scribble;
  
  	blk_mq_free_request(dummy);
  }
  
  /*
   * SCSI Eh thread issues a Lun Reset when one or more commands on a LUN
   * fail to get aborted. It calls driver's eh_device_reset with a SCSI command
   * on the LUN.
   */
  int fnic_device_reset(struct scsi_cmnd *sc)
  {
  	struct fc_lport *lp;
  	struct fnic *fnic;
  	struct fnic_io_req *io_req = NULL;
  	struct fc_rport *rport;
  	int status;
  	int ret = FAILED;
  	spinlock_t *io_lock;
  	unsigned long flags;
  	unsigned long start_time = 0;
  	struct scsi_lun fc_lun;
  	struct fnic_stats *fnic_stats;
  	struct reset_stats *reset_stats;
  	int tag = 0;
  	DECLARE_COMPLETION_ONSTACK(tm_done);
  	int tag_gen_flag = 0;   /*to track tags allocated by fnic driver*/
  	bool new_sc = 0;
  
  	/* Wait for rport to unblock */
  	fc_block_scsi_eh(sc);
  
  	/* Get local-port, check ready and link up */
  	lp = shost_priv(sc->device->host);
  
  	fnic = lport_priv(lp);
  	fnic_stats = &fnic->fnic_stats;
  	reset_stats = &fnic->fnic_stats.reset_stats;
  
  	atomic64_inc(&reset_stats->device_resets);
  
  	rport = starget_to_rport(scsi_target(sc->device));
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  		      "Device reset called FCID 0x%x, LUN 0x%llx sc 0x%p\n",
  		      rport->port_id, sc->device->lun, sc);
  
  	if (lp->state != LPORT_ST_READY || !(lp->link_up))
  		goto fnic_device_reset_end;
  
  	/* Check if remote port up */
  	if (fc_remote_port_chkready(rport)) {
  		atomic64_inc(&fnic_stats->misc_stats.rport_not_ready);
  		goto fnic_device_reset_end;
  	}
  
  	CMD_FLAGS(sc) = FNIC_DEVICE_RESET;
  	/* Allocate tag if not present */
  
  	tag = sc->request->tag;
  	if (unlikely(tag < 0)) {
  		/*
  		 * Really should fix the midlayer to pass in a proper
  		 * request for ioctls...
  		 */
  		tag = fnic_scsi_host_start_tag(fnic, sc);
  		if (unlikely(tag == SCSI_NO_TAG))
  			goto fnic_device_reset_end;
  		tag_gen_flag = 1;
  		new_sc = 1;
  	}
  	io_lock = fnic_io_lock_hash(fnic, sc);
  	spin_lock_irqsave(io_lock, flags);
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  
  	/*
  	 * If there is a io_req attached to this command, then use it,
  	 * else allocate a new one.
  	 */
  	if (!io_req) {
  		io_req = mempool_alloc(fnic->io_req_pool, GFP_ATOMIC);
  		if (!io_req) {
  			spin_unlock_irqrestore(io_lock, flags);
  			goto fnic_device_reset_end;
  		}
  		memset(io_req, 0, sizeof(*io_req));
  		io_req->port_id = rport->port_id;
  		CMD_SP(sc) = (char *)io_req;
  	}
  	io_req->dr_done = &tm_done;
  	CMD_STATE(sc) = FNIC_IOREQ_CMD_PENDING;
  	CMD_LR_STATUS(sc) = FCPIO_INVALID_CODE;
  	spin_unlock_irqrestore(io_lock, flags);
  
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host, "TAG %x\n", tag);
  
  	/*
  	 * issue the device reset, if enqueue failed, clean up the ioreq
  	 * and break assoc with scsi cmd
  	 */
  	if (fnic_queue_dr_io_req(fnic, sc, io_req)) {
  		spin_lock_irqsave(io_lock, flags);
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		if (io_req)
  			io_req->dr_done = NULL;
  		goto fnic_device_reset_clean;
  	}
  	spin_lock_irqsave(io_lock, flags);
  	CMD_FLAGS(sc) |= FNIC_DEV_RST_ISSUED;
  	spin_unlock_irqrestore(io_lock, flags);
  
  	/*
  	 * Wait on the local completion for LUN reset.  The io_req may be
  	 * freed while we wait since we hold no lock.
  	 */
  	wait_for_completion_timeout(&tm_done,
  				    msecs_to_jiffies(FNIC_LUN_RESET_TIMEOUT));
  
  	spin_lock_irqsave(io_lock, flags);
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  	if (!io_req) {
  		spin_unlock_irqrestore(io_lock, flags);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				"io_req is null tag 0x%x sc 0x%p\n", tag, sc);
  		goto fnic_device_reset_end;
  	}
  	io_req->dr_done = NULL;
  
  	status = CMD_LR_STATUS(sc);
  
  	/*
  	 * If lun reset not completed, bail out with failed. io_req
  	 * gets cleaned up during higher levels of EH
  	 */
  	if (status == FCPIO_INVALID_CODE) {
  		atomic64_inc(&reset_stats->device_reset_timeouts);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "Device reset timed out\n");
  		CMD_FLAGS(sc) |= FNIC_DEV_RST_TIMED_OUT;
  		spin_unlock_irqrestore(io_lock, flags);
  		int_to_scsilun(sc->device->lun, &fc_lun);
  		/*
  		 * Issue abort and terminate on device reset request.
  		 * If q'ing of terminate fails, retry it after a delay.
  		 */
  		while (1) {
  			spin_lock_irqsave(io_lock, flags);
  			if (CMD_FLAGS(sc) & FNIC_DEV_RST_TERM_ISSUED) {
  				spin_unlock_irqrestore(io_lock, flags);
  				break;
  			}
  			spin_unlock_irqrestore(io_lock, flags);
  			if (fnic_queue_abort_io_req(fnic,
  				tag | FNIC_TAG_DEV_RST,
  				FCPIO_ITMF_ABT_TASK_TERM,
  				fc_lun.scsi_lun, io_req)) {
  				wait_for_completion_timeout(&tm_done,
  				msecs_to_jiffies(FNIC_ABT_TERM_DELAY_TIMEOUT));
  			} else {
  				spin_lock_irqsave(io_lock, flags);
  				CMD_FLAGS(sc) |= FNIC_DEV_RST_TERM_ISSUED;
  				CMD_STATE(sc) = FNIC_IOREQ_ABTS_PENDING;
  				io_req->abts_done = &tm_done;
  				spin_unlock_irqrestore(io_lock, flags);
  				FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  				"Abort and terminate issued on Device reset "
  				"tag 0x%x sc 0x%p\n", tag, sc);
  				break;
  			}
  		}
  		while (1) {
  			spin_lock_irqsave(io_lock, flags);
  			if (!(CMD_FLAGS(sc) & FNIC_DEV_RST_DONE)) {
  				spin_unlock_irqrestore(io_lock, flags);
  				wait_for_completion_timeout(&tm_done,
  				msecs_to_jiffies(FNIC_LUN_RESET_TIMEOUT));
  				break;
  			} else {
  				io_req = (struct fnic_io_req *)CMD_SP(sc);
  				io_req->abts_done = NULL;
  				goto fnic_device_reset_clean;
  			}
  		}
  	} else {
  		spin_unlock_irqrestore(io_lock, flags);
  	}
  
  	/* Completed, but not successful, clean up the io_req, return fail */
  	if (status != FCPIO_SUCCESS) {
  		spin_lock_irqsave(io_lock, flags);
  		FNIC_SCSI_DBG(KERN_DEBUG,
  			      fnic->lport->host,
  			      "Device reset completed - failed\n");
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		goto fnic_device_reset_clean;
  	}
  
  	/*
  	 * Clean up any aborts on this lun that have still not
  	 * completed. If any of these fail, then LUN reset fails.
  	 * clean_pending_aborts cleans all cmds on this lun except
  	 * the lun reset cmd. If all cmds get cleaned, the lun reset
  	 * succeeds
  	 */
  	if (fnic_clean_pending_aborts(fnic, sc, new_sc)) {
  		spin_lock_irqsave(io_lock, flags);
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			      "Device reset failed"
  			      " since could not abort all IOs\n");
  		goto fnic_device_reset_clean;
  	}
  
  	/* Clean lun reset command */
  	spin_lock_irqsave(io_lock, flags);
  	io_req = (struct fnic_io_req *)CMD_SP(sc);
  	if (io_req)
  		/* Completed, and successful */
  		ret = SUCCESS;
  
  fnic_device_reset_clean:
  	if (io_req)
  		CMD_SP(sc) = NULL;
  
  	spin_unlock_irqrestore(io_lock, flags);
  
  	if (io_req) {
  		start_time = io_req->start_time;
  		fnic_release_ioreq_buf(fnic, io_req, sc);
  		mempool_free(io_req, fnic->io_req_pool);
  	}
  
  fnic_device_reset_end:
  	FNIC_TRACE(fnic_device_reset, sc->device->host->host_no,
  		  sc->request->tag, sc,
  		  jiffies_to_msecs(jiffies - start_time),
  		  0, ((u64)sc->cmnd[0] << 32 |
  		  (u64)sc->cmnd[2] << 24 | (u64)sc->cmnd[3] << 16 |
  		  (u64)sc->cmnd[4] << 8 | sc->cmnd[5]),
  		  (((u64)CMD_FLAGS(sc) << 32) | CMD_STATE(sc)));
  
  	/* free tag if it is allocated */
  	if (unlikely(tag_gen_flag))
  		fnic_scsi_host_end_tag(fnic, sc);
  
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  		      "Returning from device reset %s\n",
  		      (ret == SUCCESS) ?
  		      "SUCCESS" : "FAILED");
  
  	if (ret == FAILED)
  		atomic64_inc(&reset_stats->device_reset_failures);
  
  	return ret;
  }
  
  /* Clean up all IOs, clean up libFC local port */
  int fnic_reset(struct Scsi_Host *shost)
  {
  	struct fc_lport *lp;
  	struct fnic *fnic;
  	int ret = 0;
  	struct reset_stats *reset_stats;
  
  	lp = shost_priv(shost);
  	fnic = lport_priv(lp);
  	reset_stats = &fnic->fnic_stats.reset_stats;
  
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  		      "fnic_reset called\n");
  
  	atomic64_inc(&reset_stats->fnic_resets);
  
  	/*
  	 * Reset local port, this will clean up libFC exchanges,
  	 * reset remote port sessions, and if link is up, begin flogi
  	 */
  	ret = fc_lport_reset(lp);
  
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  		      "Returning from fnic reset %s\n",
  		      (ret == 0) ?
  		      "SUCCESS" : "FAILED");
  
  	if (ret == 0)
  		atomic64_inc(&reset_stats->fnic_reset_completions);
  	else
  		atomic64_inc(&reset_stats->fnic_reset_failures);
  
  	return ret;
  }
  
  /*
   * SCSI Error handling calls driver's eh_host_reset if all prior
   * error handling levels return FAILED. If host reset completes
   * successfully, and if link is up, then Fabric login begins.
   *
   * Host Reset is the highest level of error recovery. If this fails, then
   * host is offlined by SCSI.
   *
   */
  int fnic_host_reset(struct scsi_cmnd *sc)
  {
  	int ret;
  	unsigned long wait_host_tmo;
  	struct Scsi_Host *shost = sc->device->host;
  	struct fc_lport *lp = shost_priv(shost);
  	struct fnic *fnic = lport_priv(lp);
  	unsigned long flags;
  
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  	if (!fnic->internal_reset_inprogress) {
  		fnic->internal_reset_inprogress = true;
  	} else {
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  		FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  			"host reset in progress skipping another host reset\n");
  		return SUCCESS;
  	}
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  	/*
  	 * If fnic_reset is successful, wait for fabric login to complete
  	 * scsi-ml tries to send a TUR to every device if host reset is
  	 * successful, so before returning to scsi, fabric should be up
  	 */
  	ret = (fnic_reset(shost) == 0) ? SUCCESS : FAILED;
  	if (ret == SUCCESS) {
  		wait_host_tmo = jiffies + FNIC_HOST_RESET_SETTLE_TIME * HZ;
  		ret = FAILED;
  		while (time_before(jiffies, wait_host_tmo)) {
  			if ((lp->state == LPORT_ST_READY) &&
  			    (lp->link_up)) {
  				ret = SUCCESS;
  				break;
  			}
  			ssleep(1);
  		}
  	}
  
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  	fnic->internal_reset_inprogress = false;
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  	return ret;
  }
  
  /*
   * This fxn is called from libFC when host is removed
   */
  void fnic_scsi_abort_io(struct fc_lport *lp)
  {
  	int err = 0;
  	unsigned long flags;
  	enum fnic_state old_state;
  	struct fnic *fnic = lport_priv(lp);
  	DECLARE_COMPLETION_ONSTACK(remove_wait);
  
  	/* Issue firmware reset for fnic, wait for reset to complete */
  retry_fw_reset:
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  	if (unlikely(fnic->state == FNIC_IN_FC_TRANS_ETH_MODE)) {
  		/* fw reset is in progress, poll for its completion */
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  		schedule_timeout(msecs_to_jiffies(100));
  		goto retry_fw_reset;
  	}
  
  	fnic->remove_wait = &remove_wait;
  	old_state = fnic->state;
  	fnic->state = FNIC_IN_FC_TRANS_ETH_MODE;
  	fnic_update_mac_locked(fnic, fnic->ctlr.ctl_src_addr);
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  	err = fnic_fw_reset_handler(fnic);
  	if (err) {
  		spin_lock_irqsave(&fnic->fnic_lock, flags);
  		if (fnic->state == FNIC_IN_FC_TRANS_ETH_MODE)
  			fnic->state = old_state;
  		fnic->remove_wait = NULL;
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  		return;
  	}
  
  	/* Wait for firmware reset to complete */
  	wait_for_completion_timeout(&remove_wait,
  				    msecs_to_jiffies(FNIC_RMDEVICE_TIMEOUT));
  
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  	fnic->remove_wait = NULL;
  	FNIC_SCSI_DBG(KERN_DEBUG, fnic->lport->host,
  		      "fnic_scsi_abort_io %s\n",
  		      (fnic->state == FNIC_IN_ETH_MODE) ?
  		      "SUCCESS" : "FAILED");
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  }
  
  /*
   * This fxn called from libFC to clean up driver IO state on link down
   */
  void fnic_scsi_cleanup(struct fc_lport *lp)
  {
  	unsigned long flags;
  	enum fnic_state old_state;
  	struct fnic *fnic = lport_priv(lp);
  
  	/* issue fw reset */
  retry_fw_reset:
  	spin_lock_irqsave(&fnic->fnic_lock, flags);
  	if (unlikely(fnic->state == FNIC_IN_FC_TRANS_ETH_MODE)) {
  		/* fw reset is in progress, poll for its completion */
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  		schedule_timeout(msecs_to_jiffies(100));
  		goto retry_fw_reset;
  	}
  	old_state = fnic->state;
  	fnic->state = FNIC_IN_FC_TRANS_ETH_MODE;
  	fnic_update_mac_locked(fnic, fnic->ctlr.ctl_src_addr);
  	spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  
  	if (fnic_fw_reset_handler(fnic)) {
  		spin_lock_irqsave(&fnic->fnic_lock, flags);
  		if (fnic->state == FNIC_IN_FC_TRANS_ETH_MODE)
  			fnic->state = old_state;
  		spin_unlock_irqrestore(&fnic->fnic_lock, flags);
  	}
  
  }
  
  void fnic_empty_scsi_cleanup(struct fc_lport *lp)
  {
  }
  
  void fnic_exch_mgr_reset(struct fc_lport *lp, u32 sid, u32 did)
  {
  	struct fnic *fnic = lport_priv(lp);
  
  	/* Non-zero sid, nothing to do */
  	if (sid)
  		goto call_fc_exch_mgr_reset;
  
  	if (did) {
  		fnic_rport_exch_reset(fnic, did);
  		goto call_fc_exch_mgr_reset;
  	}
  
  	/*
  	 * sid = 0, did = 0
  	 * link down or device being removed
  	 */
  	if (!fnic->in_remove)
  		fnic_scsi_cleanup(lp);
  	else
  		fnic_scsi_abort_io(lp);
  
  	/* call libFC exch mgr reset to reset its exchanges */
  call_fc_exch_mgr_reset:
  	fc_exch_mgr_reset(lp, sid, did);
  
  }
  
  /*
   * fnic_is_abts_pending() is a helper function that
   * walks through tag map to check if there is any IOs pending,if there is one,
   * then it returns 1 (true), otherwise 0 (false)
   * if @lr_sc is non NULL, then it checks IOs specific to particular LUN,
   * otherwise, it checks for all IOs.
   */
  int fnic_is_abts_pending(struct fnic *fnic, struct scsi_cmnd *lr_sc)
  {
  	int tag;
  	struct fnic_io_req *io_req;
  	spinlock_t *io_lock;
  	unsigned long flags;
  	int ret = 0;
  	struct scsi_cmnd *sc;
  	struct scsi_device *lun_dev = NULL;
  
  	if (lr_sc)
  		lun_dev = lr_sc->device;
  
  	/* walk again to check, if IOs are still pending in fw */
  	for (tag = 0; tag < fnic->fnic_max_tag_id; tag++) {
  		sc = scsi_host_find_tag(fnic->lport->host, tag);
  		/*
  		 * ignore this lun reset cmd or cmds that do not belong to
  		 * this lun
  		 */
  		if (!sc || (lr_sc && (sc->device != lun_dev || sc == lr_sc)))
  			continue;
  
  		io_lock = fnic_io_lock_hash(fnic, sc);
  		spin_lock_irqsave(io_lock, flags);
  
  		io_req = (struct fnic_io_req *)CMD_SP(sc);
  
  		if (!io_req || sc->device != lun_dev) {
  			spin_unlock_irqrestore(io_lock, flags);
  			continue;
  		}
  
  		/*
  		 * Found IO that is still pending with firmware and
  		 * belongs to the LUN that we are resetting
  		 */
  		FNIC_SCSI_DBG(KERN_INFO, fnic->lport->host,
  			      "Found IO in %s on lun\n",
  			      fnic_ioreq_state_to_str(CMD_STATE(sc)));
  
  		if (CMD_STATE(sc) == FNIC_IOREQ_ABTS_PENDING)
  			ret = 1;
  		spin_unlock_irqrestore(io_lock, flags);
  	}
  
  	return ret;
  }
  