]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - drivers/target/target_core_transport.c
target: remove some smp_mb__after_atomic()s
[mirror_ubuntu-bionic-kernel.git] / drivers / target / target_core_transport.c
CommitLineData
c66ac9db
NB
1/*******************************************************************************
2 * Filename: target_core_transport.c
3 *
4 * This file contains the Generic Target Engine Core.
5 *
4c76251e 6 * (c) Copyright 2002-2013 Datera, Inc.
c66ac9db
NB
7 *
8 * Nicholas A. Bellinger <nab@kernel.org>
9 *
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License as published by
12 * the Free Software Foundation; either version 2 of the License, or
13 * (at your option) any later version.
14 *
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
19 *
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
23 *
24 ******************************************************************************/
25
c66ac9db
NB
26#include <linux/net.h>
27#include <linux/delay.h>
28#include <linux/string.h>
29#include <linux/timer.h>
30#include <linux/slab.h>
c66ac9db 31#include <linux/spinlock.h>
c66ac9db
NB
32#include <linux/kthread.h>
33#include <linux/in.h>
34#include <linux/cdrom.h>
827509e3 35#include <linux/module.h>
015487b8 36#include <linux/ratelimit.h>
c66ac9db
NB
37#include <asm/unaligned.h>
38#include <net/sock.h>
39#include <net/tcp.h>
40#include <scsi/scsi.h>
41#include <scsi/scsi_cmnd.h>
e66ecd50 42#include <scsi/scsi_tcq.h>
c66ac9db
NB
43
44#include <target/target_core_base.h>
c4795fb2
CH
45#include <target/target_core_backend.h>
46#include <target/target_core_fabric.h>
c66ac9db
NB
47#include <target/target_core_configfs.h>
48
e26d99ae 49#include "target_core_internal.h"
c66ac9db 50#include "target_core_alua.h"
c66ac9db 51#include "target_core_pr.h"
c66ac9db
NB
52#include "target_core_ua.h"
53
e5c0d6ad
RD
54#define CREATE_TRACE_POINTS
55#include <trace/events/target.h>
56
35e0e757 57static struct workqueue_struct *target_completion_wq;
c66ac9db 58static struct kmem_cache *se_sess_cache;
c66ac9db 59struct kmem_cache *se_ua_cache;
c66ac9db
NB
60struct kmem_cache *t10_pr_reg_cache;
61struct kmem_cache *t10_alua_lu_gp_cache;
62struct kmem_cache *t10_alua_lu_gp_mem_cache;
63struct kmem_cache *t10_alua_tg_pt_gp_cache;
64struct kmem_cache *t10_alua_tg_pt_gp_mem_cache;
229d4f11
HR
65struct kmem_cache *t10_alua_lba_map_cache;
66struct kmem_cache *t10_alua_lba_map_mem_cache;
c66ac9db 67
c66ac9db 68static void transport_complete_task_attr(struct se_cmd *cmd);
07bde79a 69static void transport_handle_queue_full(struct se_cmd *cmd,
e057f533 70 struct se_device *dev);
d5ddad41 71static int transport_put_cmd(struct se_cmd *cmd);
35e0e757 72static void target_complete_ok_work(struct work_struct *work);
c66ac9db 73
e3d6f909 74int init_se_kmem_caches(void)
c66ac9db 75{
c66ac9db
NB
76 se_sess_cache = kmem_cache_create("se_sess_cache",
77 sizeof(struct se_session), __alignof__(struct se_session),
78 0, NULL);
6708bb27
AG
79 if (!se_sess_cache) {
80 pr_err("kmem_cache_create() for struct se_session"
c66ac9db 81 " failed\n");
c8e31f26 82 goto out;
c66ac9db
NB
83 }
84 se_ua_cache = kmem_cache_create("se_ua_cache",
85 sizeof(struct se_ua), __alignof__(struct se_ua),
86 0, NULL);
6708bb27
AG
87 if (!se_ua_cache) {
88 pr_err("kmem_cache_create() for struct se_ua failed\n");
35e0e757 89 goto out_free_sess_cache;
c66ac9db 90 }
c66ac9db
NB
91 t10_pr_reg_cache = kmem_cache_create("t10_pr_reg_cache",
92 sizeof(struct t10_pr_registration),
93 __alignof__(struct t10_pr_registration), 0, NULL);
6708bb27
AG
94 if (!t10_pr_reg_cache) {
95 pr_err("kmem_cache_create() for struct t10_pr_registration"
c66ac9db 96 " failed\n");
35e0e757 97 goto out_free_ua_cache;
c66ac9db
NB
98 }
99 t10_alua_lu_gp_cache = kmem_cache_create("t10_alua_lu_gp_cache",
100 sizeof(struct t10_alua_lu_gp), __alignof__(struct t10_alua_lu_gp),
101 0, NULL);
6708bb27
AG
102 if (!t10_alua_lu_gp_cache) {
103 pr_err("kmem_cache_create() for t10_alua_lu_gp_cache"
c66ac9db 104 " failed\n");
35e0e757 105 goto out_free_pr_reg_cache;
c66ac9db
NB
106 }
107 t10_alua_lu_gp_mem_cache = kmem_cache_create("t10_alua_lu_gp_mem_cache",
108 sizeof(struct t10_alua_lu_gp_member),
109 __alignof__(struct t10_alua_lu_gp_member), 0, NULL);
6708bb27
AG
110 if (!t10_alua_lu_gp_mem_cache) {
111 pr_err("kmem_cache_create() for t10_alua_lu_gp_mem_"
c66ac9db 112 "cache failed\n");
35e0e757 113 goto out_free_lu_gp_cache;
c66ac9db
NB
114 }
115 t10_alua_tg_pt_gp_cache = kmem_cache_create("t10_alua_tg_pt_gp_cache",
116 sizeof(struct t10_alua_tg_pt_gp),
117 __alignof__(struct t10_alua_tg_pt_gp), 0, NULL);
6708bb27
AG
118 if (!t10_alua_tg_pt_gp_cache) {
119 pr_err("kmem_cache_create() for t10_alua_tg_pt_gp_"
c66ac9db 120 "cache failed\n");
35e0e757 121 goto out_free_lu_gp_mem_cache;
c66ac9db
NB
122 }
123 t10_alua_tg_pt_gp_mem_cache = kmem_cache_create(
124 "t10_alua_tg_pt_gp_mem_cache",
125 sizeof(struct t10_alua_tg_pt_gp_member),
126 __alignof__(struct t10_alua_tg_pt_gp_member),
127 0, NULL);
6708bb27
AG
128 if (!t10_alua_tg_pt_gp_mem_cache) {
129 pr_err("kmem_cache_create() for t10_alua_tg_pt_gp_"
c66ac9db 130 "mem_t failed\n");
35e0e757 131 goto out_free_tg_pt_gp_cache;
c66ac9db 132 }
229d4f11
HR
133 t10_alua_lba_map_cache = kmem_cache_create(
134 "t10_alua_lba_map_cache",
135 sizeof(struct t10_alua_lba_map),
136 __alignof__(struct t10_alua_lba_map), 0, NULL);
137 if (!t10_alua_lba_map_cache) {
138 pr_err("kmem_cache_create() for t10_alua_lba_map_"
139 "cache failed\n");
140 goto out_free_tg_pt_gp_mem_cache;
141 }
142 t10_alua_lba_map_mem_cache = kmem_cache_create(
143 "t10_alua_lba_map_mem_cache",
144 sizeof(struct t10_alua_lba_map_member),
145 __alignof__(struct t10_alua_lba_map_member), 0, NULL);
146 if (!t10_alua_lba_map_mem_cache) {
147 pr_err("kmem_cache_create() for t10_alua_lba_map_mem_"
148 "cache failed\n");
149 goto out_free_lba_map_cache;
150 }
c66ac9db 151
35e0e757
CH
152 target_completion_wq = alloc_workqueue("target_completion",
153 WQ_MEM_RECLAIM, 0);
154 if (!target_completion_wq)
229d4f11 155 goto out_free_lba_map_mem_cache;
35e0e757 156
c66ac9db 157 return 0;
35e0e757 158
229d4f11
HR
159out_free_lba_map_mem_cache:
160 kmem_cache_destroy(t10_alua_lba_map_mem_cache);
161out_free_lba_map_cache:
162 kmem_cache_destroy(t10_alua_lba_map_cache);
35e0e757
CH
163out_free_tg_pt_gp_mem_cache:
164 kmem_cache_destroy(t10_alua_tg_pt_gp_mem_cache);
165out_free_tg_pt_gp_cache:
166 kmem_cache_destroy(t10_alua_tg_pt_gp_cache);
167out_free_lu_gp_mem_cache:
168 kmem_cache_destroy(t10_alua_lu_gp_mem_cache);
169out_free_lu_gp_cache:
170 kmem_cache_destroy(t10_alua_lu_gp_cache);
171out_free_pr_reg_cache:
172 kmem_cache_destroy(t10_pr_reg_cache);
173out_free_ua_cache:
174 kmem_cache_destroy(se_ua_cache);
175out_free_sess_cache:
176 kmem_cache_destroy(se_sess_cache);
c66ac9db 177out:
e3d6f909 178 return -ENOMEM;
c66ac9db
NB
179}
180
e3d6f909 181void release_se_kmem_caches(void)
c66ac9db 182{
35e0e757 183 destroy_workqueue(target_completion_wq);
c66ac9db
NB
184 kmem_cache_destroy(se_sess_cache);
185 kmem_cache_destroy(se_ua_cache);
c66ac9db
NB
186 kmem_cache_destroy(t10_pr_reg_cache);
187 kmem_cache_destroy(t10_alua_lu_gp_cache);
188 kmem_cache_destroy(t10_alua_lu_gp_mem_cache);
189 kmem_cache_destroy(t10_alua_tg_pt_gp_cache);
190 kmem_cache_destroy(t10_alua_tg_pt_gp_mem_cache);
229d4f11
HR
191 kmem_cache_destroy(t10_alua_lba_map_cache);
192 kmem_cache_destroy(t10_alua_lba_map_mem_cache);
c66ac9db
NB
193}
194
e3d6f909
AG
195/* This code ensures unique mib indexes are handed out. */
196static DEFINE_SPINLOCK(scsi_mib_index_lock);
197static u32 scsi_mib_index[SCSI_INDEX_TYPE_MAX];
e89d15ee
NB
198
199/*
200 * Allocate a new row index for the entry type specified
201 */
202u32 scsi_get_new_index(scsi_index_t type)
203{
204 u32 new_index;
205
e3d6f909 206 BUG_ON((type < 0) || (type >= SCSI_INDEX_TYPE_MAX));
e89d15ee 207
e3d6f909
AG
208 spin_lock(&scsi_mib_index_lock);
209 new_index = ++scsi_mib_index[type];
210 spin_unlock(&scsi_mib_index_lock);
e89d15ee
NB
211
212 return new_index;
213}
214
dbc5623e 215void transport_subsystem_check_init(void)
c66ac9db
NB
216{
217 int ret;
283669d2 218 static int sub_api_initialized;
c66ac9db 219
dbc5623e
NB
220 if (sub_api_initialized)
221 return;
222
c66ac9db
NB
223 ret = request_module("target_core_iblock");
224 if (ret != 0)
6708bb27 225 pr_err("Unable to load target_core_iblock\n");
c66ac9db
NB
226
227 ret = request_module("target_core_file");
228 if (ret != 0)
6708bb27 229 pr_err("Unable to load target_core_file\n");
c66ac9db
NB
230
231 ret = request_module("target_core_pscsi");
232 if (ret != 0)
6708bb27 233 pr_err("Unable to load target_core_pscsi\n");
c66ac9db 234
e3d6f909 235 sub_api_initialized = 1;
c66ac9db
NB
236}
237
e70beee7 238struct se_session *transport_init_session(enum target_prot_op sup_prot_ops)
c66ac9db
NB
239{
240 struct se_session *se_sess;
241
242 se_sess = kmem_cache_zalloc(se_sess_cache, GFP_KERNEL);
6708bb27
AG
243 if (!se_sess) {
244 pr_err("Unable to allocate struct se_session from"
c66ac9db
NB
245 " se_sess_cache\n");
246 return ERR_PTR(-ENOMEM);
247 }
248 INIT_LIST_HEAD(&se_sess->sess_list);
249 INIT_LIST_HEAD(&se_sess->sess_acl_list);
a17f091d 250 INIT_LIST_HEAD(&se_sess->sess_cmd_list);
9b31a328 251 INIT_LIST_HEAD(&se_sess->sess_wait_list);
a17f091d 252 spin_lock_init(&se_sess->sess_cmd_lock);
41ac82b6 253 kref_init(&se_sess->sess_kref);
e70beee7 254 se_sess->sup_prot_ops = sup_prot_ops;
c66ac9db
NB
255
256 return se_sess;
257}
258EXPORT_SYMBOL(transport_init_session);
259
c0add7fd
NB
260int transport_alloc_session_tags(struct se_session *se_sess,
261 unsigned int tag_num, unsigned int tag_size)
262{
263 int rc;
264
8c7f6e9b
NB
265 se_sess->sess_cmd_map = kzalloc(tag_num * tag_size,
266 GFP_KERNEL | __GFP_NOWARN | __GFP_REPEAT);
c0add7fd 267 if (!se_sess->sess_cmd_map) {
8c7f6e9b
NB
268 se_sess->sess_cmd_map = vzalloc(tag_num * tag_size);
269 if (!se_sess->sess_cmd_map) {
270 pr_err("Unable to allocate se_sess->sess_cmd_map\n");
271 return -ENOMEM;
272 }
c0add7fd
NB
273 }
274
275 rc = percpu_ida_init(&se_sess->sess_tag_pool, tag_num);
276 if (rc < 0) {
277 pr_err("Unable to init se_sess->sess_tag_pool,"
278 " tag_num: %u\n", tag_num);
8c7f6e9b
NB
279 if (is_vmalloc_addr(se_sess->sess_cmd_map))
280 vfree(se_sess->sess_cmd_map);
281 else
282 kfree(se_sess->sess_cmd_map);
c0add7fd
NB
283 se_sess->sess_cmd_map = NULL;
284 return -ENOMEM;
285 }
286
287 return 0;
288}
289EXPORT_SYMBOL(transport_alloc_session_tags);
290
291struct se_session *transport_init_session_tags(unsigned int tag_num,
e70beee7
NB
292 unsigned int tag_size,
293 enum target_prot_op sup_prot_ops)
c0add7fd
NB
294{
295 struct se_session *se_sess;
296 int rc;
297
e70beee7 298 se_sess = transport_init_session(sup_prot_ops);
c0add7fd
NB
299 if (IS_ERR(se_sess))
300 return se_sess;
301
302 rc = transport_alloc_session_tags(se_sess, tag_num, tag_size);
303 if (rc < 0) {
304 transport_free_session(se_sess);
305 return ERR_PTR(-ENOMEM);
306 }
307
308 return se_sess;
309}
310EXPORT_SYMBOL(transport_init_session_tags);
311
c66ac9db 312/*
140854cb 313 * Called with spin_lock_irqsave(&struct se_portal_group->session_lock called.
c66ac9db
NB
314 */
315void __transport_register_session(
316 struct se_portal_group *se_tpg,
317 struct se_node_acl *se_nacl,
318 struct se_session *se_sess,
319 void *fabric_sess_ptr)
320{
321 unsigned char buf[PR_REG_ISID_LEN];
322
323 se_sess->se_tpg = se_tpg;
324 se_sess->fabric_sess_ptr = fabric_sess_ptr;
325 /*
326 * Used by struct se_node_acl's under ConfigFS to locate active se_session-t
327 *
328 * Only set for struct se_session's that will actually be moving I/O.
329 * eg: *NOT* discovery sessions.
330 */
331 if (se_nacl) {
332 /*
333 * If the fabric module supports an ISID based TransportID,
334 * save this value in binary from the fabric I_T Nexus now.
335 */
e3d6f909 336 if (se_tpg->se_tpg_tfo->sess_get_initiator_sid != NULL) {
c66ac9db 337 memset(&buf[0], 0, PR_REG_ISID_LEN);
e3d6f909 338 se_tpg->se_tpg_tfo->sess_get_initiator_sid(se_sess,
c66ac9db
NB
339 &buf[0], PR_REG_ISID_LEN);
340 se_sess->sess_bin_isid = get_unaligned_be64(&buf[0]);
341 }
afb999ff
NB
342 kref_get(&se_nacl->acl_kref);
343
c66ac9db
NB
344 spin_lock_irq(&se_nacl->nacl_sess_lock);
345 /*
346 * The se_nacl->nacl_sess pointer will be set to the
347 * last active I_T Nexus for each struct se_node_acl.
348 */
349 se_nacl->nacl_sess = se_sess;
350
351 list_add_tail(&se_sess->sess_acl_list,
352 &se_nacl->acl_sess_list);
353 spin_unlock_irq(&se_nacl->nacl_sess_lock);
354 }
355 list_add_tail(&se_sess->sess_list, &se_tpg->tpg_sess_list);
356
6708bb27 357 pr_debug("TARGET_CORE[%s]: Registered fabric_sess_ptr: %p\n",
e3d6f909 358 se_tpg->se_tpg_tfo->get_fabric_name(), se_sess->fabric_sess_ptr);
c66ac9db
NB
359}
360EXPORT_SYMBOL(__transport_register_session);
361
362void transport_register_session(
363 struct se_portal_group *se_tpg,
364 struct se_node_acl *se_nacl,
365 struct se_session *se_sess,
366 void *fabric_sess_ptr)
367{
140854cb
NB
368 unsigned long flags;
369
370 spin_lock_irqsave(&se_tpg->session_lock, flags);
c66ac9db 371 __transport_register_session(se_tpg, se_nacl, se_sess, fabric_sess_ptr);
140854cb 372 spin_unlock_irqrestore(&se_tpg->session_lock, flags);
c66ac9db
NB
373}
374EXPORT_SYMBOL(transport_register_session);
375
ecf0dd66 376static void target_release_session(struct kref *kref)
41ac82b6
NB
377{
378 struct se_session *se_sess = container_of(kref,
379 struct se_session, sess_kref);
380 struct se_portal_group *se_tpg = se_sess->se_tpg;
381
382 se_tpg->se_tpg_tfo->close_session(se_sess);
383}
384
385void target_get_session(struct se_session *se_sess)
386{
387 kref_get(&se_sess->sess_kref);
388}
389EXPORT_SYMBOL(target_get_session);
390
33933a0e 391void target_put_session(struct se_session *se_sess)
41ac82b6 392{
4149268e
JE
393 struct se_portal_group *tpg = se_sess->se_tpg;
394
395 if (tpg->se_tpg_tfo->put_session != NULL) {
396 tpg->se_tpg_tfo->put_session(se_sess);
397 return;
398 }
33933a0e 399 kref_put(&se_sess->sess_kref, target_release_session);
41ac82b6
NB
400}
401EXPORT_SYMBOL(target_put_session);
402
afb999ff
NB
403static void target_complete_nacl(struct kref *kref)
404{
405 struct se_node_acl *nacl = container_of(kref,
406 struct se_node_acl, acl_kref);
407
408 complete(&nacl->acl_free_comp);
409}
410
411void target_put_nacl(struct se_node_acl *nacl)
412{
413 kref_put(&nacl->acl_kref, target_complete_nacl);
414}
415
c66ac9db
NB
416void transport_deregister_session_configfs(struct se_session *se_sess)
417{
418 struct se_node_acl *se_nacl;
23388864 419 unsigned long flags;
c66ac9db
NB
420 /*
421 * Used by struct se_node_acl's under ConfigFS to locate active struct se_session
422 */
423 se_nacl = se_sess->se_node_acl;
6708bb27 424 if (se_nacl) {
23388864 425 spin_lock_irqsave(&se_nacl->nacl_sess_lock, flags);
337c0607
NB
426 if (se_nacl->acl_stop == 0)
427 list_del(&se_sess->sess_acl_list);
c66ac9db
NB
428 /*
429 * If the session list is empty, then clear the pointer.
430 * Otherwise, set the struct se_session pointer from the tail
431 * element of the per struct se_node_acl active session list.
432 */
433 if (list_empty(&se_nacl->acl_sess_list))
434 se_nacl->nacl_sess = NULL;
435 else {
436 se_nacl->nacl_sess = container_of(
437 se_nacl->acl_sess_list.prev,
438 struct se_session, sess_acl_list);
439 }
23388864 440 spin_unlock_irqrestore(&se_nacl->nacl_sess_lock, flags);
c66ac9db
NB
441 }
442}
443EXPORT_SYMBOL(transport_deregister_session_configfs);
444
445void transport_free_session(struct se_session *se_sess)
446{
c0add7fd
NB
447 if (se_sess->sess_cmd_map) {
448 percpu_ida_destroy(&se_sess->sess_tag_pool);
8c7f6e9b
NB
449 if (is_vmalloc_addr(se_sess->sess_cmd_map))
450 vfree(se_sess->sess_cmd_map);
451 else
452 kfree(se_sess->sess_cmd_map);
c0add7fd 453 }
c66ac9db
NB
454 kmem_cache_free(se_sess_cache, se_sess);
455}
456EXPORT_SYMBOL(transport_free_session);
457
458void transport_deregister_session(struct se_session *se_sess)
459{
460 struct se_portal_group *se_tpg = se_sess->se_tpg;
01468346 461 struct target_core_fabric_ops *se_tfo;
c66ac9db 462 struct se_node_acl *se_nacl;
e63a8e19 463 unsigned long flags;
01468346 464 bool comp_nacl = true;
c66ac9db 465
6708bb27 466 if (!se_tpg) {
c66ac9db
NB
467 transport_free_session(se_sess);
468 return;
469 }
01468346 470 se_tfo = se_tpg->se_tpg_tfo;
c66ac9db 471
e63a8e19 472 spin_lock_irqsave(&se_tpg->session_lock, flags);
c66ac9db
NB
473 list_del(&se_sess->sess_list);
474 se_sess->se_tpg = NULL;
475 se_sess->fabric_sess_ptr = NULL;
e63a8e19 476 spin_unlock_irqrestore(&se_tpg->session_lock, flags);
c66ac9db
NB
477
478 /*
479 * Determine if we need to do extra work for this initiator node's
480 * struct se_node_acl if it had been previously dynamically generated.
481 */
482 se_nacl = se_sess->se_node_acl;
01468346
NB
483
484 spin_lock_irqsave(&se_tpg->acl_node_lock, flags);
485 if (se_nacl && se_nacl->dynamic_node_acl) {
486 if (!se_tfo->tpg_check_demo_mode_cache(se_tpg)) {
487 list_del(&se_nacl->acl_list);
488 se_tpg->num_node_acls--;
489 spin_unlock_irqrestore(&se_tpg->acl_node_lock, flags);
490 core_tpg_wait_for_nacl_pr_ref(se_nacl);
491 core_free_device_list_for_node(se_nacl, se_tpg);
492 se_tfo->tpg_release_fabric_acl(se_tpg, se_nacl);
493
494 comp_nacl = false;
495 spin_lock_irqsave(&se_tpg->acl_node_lock, flags);
c66ac9db 496 }
c66ac9db 497 }
01468346 498 spin_unlock_irqrestore(&se_tpg->acl_node_lock, flags);
c66ac9db 499
6708bb27 500 pr_debug("TARGET_CORE[%s]: Deregistered fabric_sess\n",
e3d6f909 501 se_tpg->se_tpg_tfo->get_fabric_name());
01468346 502 /*
125d0119 503 * If last kref is dropping now for an explicit NodeACL, awake sleeping
afb999ff
NB
504 * ->acl_free_comp caller to wakeup configfs se_node_acl->acl_group
505 * removal context.
01468346 506 */
0bcc297e 507 if (se_nacl && comp_nacl)
afb999ff 508 target_put_nacl(se_nacl);
01468346 509
afb999ff 510 transport_free_session(se_sess);
c66ac9db
NB
511}
512EXPORT_SYMBOL(transport_deregister_session);
513
514/*
a1d8b49a 515 * Called with cmd->t_state_lock held.
c66ac9db 516 */
cf572a96 517static void target_remove_from_state_list(struct se_cmd *cmd)
c66ac9db 518{
42bf829e 519 struct se_device *dev = cmd->se_dev;
c66ac9db
NB
520 unsigned long flags;
521
42bf829e
CH
522 if (!dev)
523 return;
c66ac9db 524
cf572a96
CH
525 if (cmd->transport_state & CMD_T_BUSY)
526 return;
c66ac9db 527
cf572a96
CH
528 spin_lock_irqsave(&dev->execute_task_lock, flags);
529 if (cmd->state_active) {
530 list_del(&cmd->state_list);
cf572a96 531 cmd->state_active = false;
c66ac9db 532 }
cf572a96 533 spin_unlock_irqrestore(&dev->execute_task_lock, flags);
c66ac9db
NB
534}
535
862e6389
NB
536static int transport_cmd_check_stop(struct se_cmd *cmd, bool remove_from_lists,
537 bool write_pending)
c66ac9db
NB
538{
539 unsigned long flags;
540
a1d8b49a 541 spin_lock_irqsave(&cmd->t_state_lock, flags);
862e6389
NB
542 if (write_pending)
543 cmd->t_state = TRANSPORT_WRITE_PENDING;
544
f7113a47
CH
545 if (remove_from_lists) {
546 target_remove_from_state_list(cmd);
547
548 /*
549 * Clear struct se_cmd->se_lun before the handoff to FE.
550 */
551 cmd->se_lun = NULL;
552 }
553
c66ac9db
NB
554 /*
555 * Determine if frontend context caller is requesting the stopping of
e3d6f909 556 * this command for frontend exceptions.
c66ac9db 557 */
7d680f3b
CH
558 if (cmd->transport_state & CMD_T_STOP) {
559 pr_debug("%s:%d CMD_T_STOP for ITT: 0x%08x\n",
560 __func__, __LINE__,
e3d6f909 561 cmd->se_tfo->get_task_tag(cmd));
c66ac9db 562
a1d8b49a 563 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db 564
a95d6511 565 complete_all(&cmd->t_transport_stop_comp);
c66ac9db
NB
566 return 1;
567 }
f7113a47
CH
568
569 cmd->transport_state &= ~CMD_T_ACTIVE;
570 if (remove_from_lists) {
571 /*
572 * Some fabric modules like tcm_loop can release
573 * their internally allocated I/O reference now and
574 * struct se_cmd now.
575 *
576 * Fabric modules are expected to return '1' here if the
577 * se_cmd being passed is released at this point,
578 * or zero if not being released.
579 */
580 if (cmd->se_tfo->check_stop_free != NULL) {
581 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
582 return cmd->se_tfo->check_stop_free(cmd);
c66ac9db 583 }
f7113a47 584 }
c66ac9db 585
a1d8b49a 586 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db
NB
587 return 0;
588}
589
590static int transport_cmd_check_stop_to_fabric(struct se_cmd *cmd)
591{
862e6389 592 return transport_cmd_check_stop(cmd, true, false);
c66ac9db
NB
593}
594
595static void transport_lun_remove_cmd(struct se_cmd *cmd)
596{
e3d6f909 597 struct se_lun *lun = cmd->se_lun;
c66ac9db 598
5259a06e 599 if (!lun)
c66ac9db
NB
600 return;
601
5259a06e
NB
602 if (cmpxchg(&cmd->lun_ref_active, true, false))
603 percpu_ref_put(&lun->lun_ref);
c66ac9db
NB
604}
605
606void transport_cmd_finish_abort(struct se_cmd *cmd, int remove)
607{
68259b5a
AL
608 if (cmd->se_cmd_flags & SCF_SE_LUN_CMD)
609 transport_lun_remove_cmd(cmd);
131e6abc
NB
610 /*
611 * Allow the fabric driver to unmap any resources before
612 * releasing the descriptor via TFO->release_cmd()
613 */
614 if (remove)
615 cmd->se_tfo->aborted_task(cmd);
68259b5a 616
c66ac9db
NB
617 if (transport_cmd_check_stop_to_fabric(cmd))
618 return;
af877292 619 if (remove)
e6a2573f 620 transport_put_cmd(cmd);
c66ac9db
NB
621}
622
35e0e757
CH
623static void target_complete_failure_work(struct work_struct *work)
624{
625 struct se_cmd *cmd = container_of(work, struct se_cmd, work);
626
de103c93
CH
627 transport_generic_request_failure(cmd,
628 TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE);
35e0e757
CH
629}
630
6138ed2a 631/*
d5829eac
PB
632 * Used when asking transport to copy Sense Data from the underlying
633 * Linux/SCSI struct scsi_cmnd
6138ed2a 634 */
d5829eac 635static unsigned char *transport_get_sense_buffer(struct se_cmd *cmd)
6138ed2a 636{
6138ed2a 637 struct se_device *dev = cmd->se_dev;
6138ed2a
PB
638
639 WARN_ON(!cmd->se_lun);
640
641 if (!dev)
d5829eac 642 return NULL;
6138ed2a 643
d5829eac
PB
644 if (cmd->se_cmd_flags & SCF_SENT_CHECK_CONDITION)
645 return NULL;
6138ed2a 646
9c58b7dd 647 cmd->scsi_sense_length = TRANSPORT_SENSE_BUFFER;
6138ed2a 648
d5829eac 649 pr_debug("HBA_[%u]_PLUG[%s]: Requesting sense for SAM STATUS: 0x%02x\n",
6138ed2a 650 dev->se_hba->hba_id, dev->transport->name, cmd->scsi_status);
9c58b7dd 651 return cmd->sense_buffer;
6138ed2a
PB
652}
653
5787cacd 654void target_complete_cmd(struct se_cmd *cmd, u8 scsi_status)
c66ac9db 655{
42bf829e 656 struct se_device *dev = cmd->se_dev;
5787cacd 657 int success = scsi_status == GOOD;
c66ac9db 658 unsigned long flags;
c66ac9db 659
5787cacd
CH
660 cmd->scsi_status = scsi_status;
661
662
a1d8b49a 663 spin_lock_irqsave(&cmd->t_state_lock, flags);
cf572a96 664 cmd->transport_state &= ~CMD_T_BUSY;
c66ac9db 665
c66ac9db 666 if (dev && dev->transport->transport_complete) {
d5829eac
PB
667 dev->transport->transport_complete(cmd,
668 cmd->t_data_sg,
669 transport_get_sense_buffer(cmd));
670 if (cmd->se_cmd_flags & SCF_TRANSPORT_TASK_SENSE)
c66ac9db 671 success = 1;
c66ac9db
NB
672 }
673
674 /*
5787cacd 675 * See if we are waiting to complete for an exception condition.
c66ac9db 676 */
cf572a96 677 if (cmd->transport_state & CMD_T_REQUEST_STOP) {
a1d8b49a 678 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
cf572a96 679 complete(&cmd->task_stop_comp);
c66ac9db
NB
680 return;
681 }
2235007c 682
3d28934a 683 /*
125d0119 684 * Check for case where an explicit ABORT_TASK has been received
3d28934a
NB
685 * and transport_wait_for_tasks() will be waiting for completion..
686 */
687 if (cmd->transport_state & CMD_T_ABORTED &&
688 cmd->transport_state & CMD_T_STOP) {
689 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
a95d6511 690 complete_all(&cmd->t_transport_stop_comp);
3d28934a 691 return;
3dca1471 692 } else if (!success) {
35e0e757 693 INIT_WORK(&cmd->work, target_complete_failure_work);
c66ac9db 694 } else {
35e0e757 695 INIT_WORK(&cmd->work, target_complete_ok_work);
c66ac9db 696 }
35e0e757 697
35e0e757 698 cmd->t_state = TRANSPORT_COMPLETE;
3d28934a 699 cmd->transport_state |= (CMD_T_COMPLETE | CMD_T_ACTIVE);
a1d8b49a 700 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db 701
35e0e757 702 queue_work(target_completion_wq, &cmd->work);
c66ac9db 703}
6bb35e00
CH
704EXPORT_SYMBOL(target_complete_cmd);
705
2426bd45
RD
706void target_complete_cmd_with_length(struct se_cmd *cmd, u8 scsi_status, int length)
707{
708 if (scsi_status == SAM_STAT_GOOD && length < cmd->data_length) {
709 if (cmd->se_cmd_flags & SCF_UNDERFLOW_BIT) {
710 cmd->residual_count += cmd->data_length - length;
711 } else {
712 cmd->se_cmd_flags |= SCF_UNDERFLOW_BIT;
713 cmd->residual_count = cmd->data_length - length;
714 }
715
716 cmd->data_length = length;
717 }
718
719 target_complete_cmd(cmd, scsi_status);
720}
721EXPORT_SYMBOL(target_complete_cmd_with_length);
722
cf572a96 723static void target_add_to_state_list(struct se_cmd *cmd)
c66ac9db 724{
cf572a96
CH
725 struct se_device *dev = cmd->se_dev;
726 unsigned long flags;
c66ac9db 727
cf572a96
CH
728 spin_lock_irqsave(&dev->execute_task_lock, flags);
729 if (!cmd->state_active) {
730 list_add_tail(&cmd->state_list, &dev->state_list);
731 cmd->state_active = true;
c66ac9db 732 }
cf572a96 733 spin_unlock_irqrestore(&dev->execute_task_lock, flags);
c66ac9db
NB
734}
735
07bde79a 736/*
f147abb4 737 * Handle QUEUE_FULL / -EAGAIN and -ENOMEM status
07bde79a 738 */
7a6f0a1e
CH
739static void transport_write_pending_qf(struct se_cmd *cmd);
740static void transport_complete_qf(struct se_cmd *cmd);
07bde79a 741
0fd97ccf 742void target_qf_do_work(struct work_struct *work)
07bde79a
NB
743{
744 struct se_device *dev = container_of(work, struct se_device,
745 qf_work_queue);
bcac364a 746 LIST_HEAD(qf_cmd_list);
07bde79a
NB
747 struct se_cmd *cmd, *cmd_tmp;
748
749 spin_lock_irq(&dev->qf_cmd_lock);
bcac364a
RD
750 list_splice_init(&dev->qf_cmd_list, &qf_cmd_list);
751 spin_unlock_irq(&dev->qf_cmd_lock);
07bde79a 752
bcac364a 753 list_for_each_entry_safe(cmd, cmd_tmp, &qf_cmd_list, se_qf_node) {
07bde79a
NB
754 list_del(&cmd->se_qf_node);
755 atomic_dec(&dev->dev_qf_count);
4e857c58 756 smp_mb__after_atomic();
07bde79a 757
6708bb27 758 pr_debug("Processing %s cmd: %p QUEUE_FULL in work queue"
07bde79a 759 " context: %s\n", cmd->se_tfo->get_fabric_name(), cmd,
e057f533 760 (cmd->t_state == TRANSPORT_COMPLETE_QF_OK) ? "COMPLETE_OK" :
07bde79a
NB
761 (cmd->t_state == TRANSPORT_COMPLETE_QF_WP) ? "WRITE_PENDING"
762 : "UNKNOWN");
f7a5cc0b 763
7a6f0a1e
CH
764 if (cmd->t_state == TRANSPORT_COMPLETE_QF_WP)
765 transport_write_pending_qf(cmd);
766 else if (cmd->t_state == TRANSPORT_COMPLETE_QF_OK)
767 transport_complete_qf(cmd);
07bde79a 768 }
07bde79a
NB
769}
770
c66ac9db
NB
771unsigned char *transport_dump_cmd_direction(struct se_cmd *cmd)
772{
773 switch (cmd->data_direction) {
774 case DMA_NONE:
775 return "NONE";
776 case DMA_FROM_DEVICE:
777 return "READ";
778 case DMA_TO_DEVICE:
779 return "WRITE";
780 case DMA_BIDIRECTIONAL:
781 return "BIDI";
782 default:
783 break;
784 }
785
786 return "UNKNOWN";
787}
788
789void transport_dump_dev_state(
790 struct se_device *dev,
791 char *b,
792 int *bl)
793{
794 *bl += sprintf(b + *bl, "Status: ");
0fd97ccf 795 if (dev->export_count)
c66ac9db 796 *bl += sprintf(b + *bl, "ACTIVATED");
0fd97ccf 797 else
c66ac9db 798 *bl += sprintf(b + *bl, "DEACTIVATED");
c66ac9db 799
5f41a31d 800 *bl += sprintf(b + *bl, " Max Queue Depth: %d", dev->queue_depth);
11e764bd 801 *bl += sprintf(b + *bl, " SectorSize: %u HwMaxSectors: %u\n",
0fd97ccf
CH
802 dev->dev_attrib.block_size,
803 dev->dev_attrib.hw_max_sectors);
c66ac9db
NB
804 *bl += sprintf(b + *bl, " ");
805}
806
c66ac9db
NB
807void transport_dump_vpd_proto_id(
808 struct t10_vpd *vpd,
809 unsigned char *p_buf,
810 int p_buf_len)
811{
812 unsigned char buf[VPD_TMP_BUF_SIZE];
813 int len;
814
815 memset(buf, 0, VPD_TMP_BUF_SIZE);
816 len = sprintf(buf, "T10 VPD Protocol Identifier: ");
817
818 switch (vpd->protocol_identifier) {
819 case 0x00:
820 sprintf(buf+len, "Fibre Channel\n");
821 break;
822 case 0x10:
823 sprintf(buf+len, "Parallel SCSI\n");
824 break;
825 case 0x20:
826 sprintf(buf+len, "SSA\n");
827 break;
828 case 0x30:
829 sprintf(buf+len, "IEEE 1394\n");
830 break;
831 case 0x40:
832 sprintf(buf+len, "SCSI Remote Direct Memory Access"
833 " Protocol\n");
834 break;
835 case 0x50:
836 sprintf(buf+len, "Internet SCSI (iSCSI)\n");
837 break;
838 case 0x60:
839 sprintf(buf+len, "SAS Serial SCSI Protocol\n");
840 break;
841 case 0x70:
842 sprintf(buf+len, "Automation/Drive Interface Transport"
843 " Protocol\n");
844 break;
845 case 0x80:
846 sprintf(buf+len, "AT Attachment Interface ATA/ATAPI\n");
847 break;
848 default:
849 sprintf(buf+len, "Unknown 0x%02x\n",
850 vpd->protocol_identifier);
851 break;
852 }
853
854 if (p_buf)
855 strncpy(p_buf, buf, p_buf_len);
856 else
6708bb27 857 pr_debug("%s", buf);
c66ac9db
NB
858}
859
860void
861transport_set_vpd_proto_id(struct t10_vpd *vpd, unsigned char *page_83)
862{
863 /*
864 * Check if the Protocol Identifier Valid (PIV) bit is set..
865 *
866 * from spc3r23.pdf section 7.5.1
867 */
868 if (page_83[1] & 0x80) {
869 vpd->protocol_identifier = (page_83[0] & 0xf0);
870 vpd->protocol_identifier_set = 1;
871 transport_dump_vpd_proto_id(vpd, NULL, 0);
872 }
873}
874EXPORT_SYMBOL(transport_set_vpd_proto_id);
875
876int transport_dump_vpd_assoc(
877 struct t10_vpd *vpd,
878 unsigned char *p_buf,
879 int p_buf_len)
880{
881 unsigned char buf[VPD_TMP_BUF_SIZE];
e3d6f909
AG
882 int ret = 0;
883 int len;
c66ac9db
NB
884
885 memset(buf, 0, VPD_TMP_BUF_SIZE);
886 len = sprintf(buf, "T10 VPD Identifier Association: ");
887
888 switch (vpd->association) {
889 case 0x00:
890 sprintf(buf+len, "addressed logical unit\n");
891 break;
892 case 0x10:
893 sprintf(buf+len, "target port\n");
894 break;
895 case 0x20:
896 sprintf(buf+len, "SCSI target device\n");
897 break;
898 default:
899 sprintf(buf+len, "Unknown 0x%02x\n", vpd->association);
e3d6f909 900 ret = -EINVAL;
c66ac9db
NB
901 break;
902 }
903
904 if (p_buf)
905 strncpy(p_buf, buf, p_buf_len);
906 else
6708bb27 907 pr_debug("%s", buf);
c66ac9db
NB
908
909 return ret;
910}
911
912int transport_set_vpd_assoc(struct t10_vpd *vpd, unsigned char *page_83)
913{
914 /*
915 * The VPD identification association..
916 *
917 * from spc3r23.pdf Section 7.6.3.1 Table 297
918 */
919 vpd->association = (page_83[1] & 0x30);
920 return transport_dump_vpd_assoc(vpd, NULL, 0);
921}
922EXPORT_SYMBOL(transport_set_vpd_assoc);
923
924int transport_dump_vpd_ident_type(
925 struct t10_vpd *vpd,
926 unsigned char *p_buf,
927 int p_buf_len)
928{
929 unsigned char buf[VPD_TMP_BUF_SIZE];
e3d6f909
AG
930 int ret = 0;
931 int len;
c66ac9db
NB
932
933 memset(buf, 0, VPD_TMP_BUF_SIZE);
934 len = sprintf(buf, "T10 VPD Identifier Type: ");
935
936 switch (vpd->device_identifier_type) {
937 case 0x00:
938 sprintf(buf+len, "Vendor specific\n");
939 break;
940 case 0x01:
941 sprintf(buf+len, "T10 Vendor ID based\n");
942 break;
943 case 0x02:
944 sprintf(buf+len, "EUI-64 based\n");
945 break;
946 case 0x03:
947 sprintf(buf+len, "NAA\n");
948 break;
949 case 0x04:
950 sprintf(buf+len, "Relative target port identifier\n");
951 break;
952 case 0x08:
953 sprintf(buf+len, "SCSI name string\n");
954 break;
955 default:
956 sprintf(buf+len, "Unsupported: 0x%02x\n",
957 vpd->device_identifier_type);
e3d6f909 958 ret = -EINVAL;
c66ac9db
NB
959 break;
960 }
961
e3d6f909
AG
962 if (p_buf) {
963 if (p_buf_len < strlen(buf)+1)
964 return -EINVAL;
c66ac9db 965 strncpy(p_buf, buf, p_buf_len);
e3d6f909 966 } else {
6708bb27 967 pr_debug("%s", buf);
e3d6f909 968 }
c66ac9db
NB
969
970 return ret;
971}
972
973int transport_set_vpd_ident_type(struct t10_vpd *vpd, unsigned char *page_83)
974{
975 /*
976 * The VPD identifier type..
977 *
978 * from spc3r23.pdf Section 7.6.3.1 Table 298
979 */
980 vpd->device_identifier_type = (page_83[1] & 0x0f);
981 return transport_dump_vpd_ident_type(vpd, NULL, 0);
982}
983EXPORT_SYMBOL(transport_set_vpd_ident_type);
984
985int transport_dump_vpd_ident(
986 struct t10_vpd *vpd,
987 unsigned char *p_buf,
988 int p_buf_len)
989{
990 unsigned char buf[VPD_TMP_BUF_SIZE];
991 int ret = 0;
992
993 memset(buf, 0, VPD_TMP_BUF_SIZE);
994
995 switch (vpd->device_identifier_code_set) {
996 case 0x01: /* Binary */
703d641d
DC
997 snprintf(buf, sizeof(buf),
998 "T10 VPD Binary Device Identifier: %s\n",
c66ac9db
NB
999 &vpd->device_identifier[0]);
1000 break;
1001 case 0x02: /* ASCII */
703d641d
DC
1002 snprintf(buf, sizeof(buf),
1003 "T10 VPD ASCII Device Identifier: %s\n",
c66ac9db
NB
1004 &vpd->device_identifier[0]);
1005 break;
1006 case 0x03: /* UTF-8 */
703d641d
DC
1007 snprintf(buf, sizeof(buf),
1008 "T10 VPD UTF-8 Device Identifier: %s\n",
c66ac9db
NB
1009 &vpd->device_identifier[0]);
1010 break;
1011 default:
1012 sprintf(buf, "T10 VPD Device Identifier encoding unsupported:"
1013 " 0x%02x", vpd->device_identifier_code_set);
e3d6f909 1014 ret = -EINVAL;
c66ac9db
NB
1015 break;
1016 }
1017
1018 if (p_buf)
1019 strncpy(p_buf, buf, p_buf_len);
1020 else
6708bb27 1021 pr_debug("%s", buf);
c66ac9db
NB
1022
1023 return ret;
1024}
1025
1026int
1027transport_set_vpd_ident(struct t10_vpd *vpd, unsigned char *page_83)
1028{
1029 static const char hex_str[] = "0123456789abcdef";
35d1efe8 1030 int j = 0, i = 4; /* offset to start of the identifier */
c66ac9db
NB
1031
1032 /*
1033 * The VPD Code Set (encoding)
1034 *
1035 * from spc3r23.pdf Section 7.6.3.1 Table 296
1036 */
1037 vpd->device_identifier_code_set = (page_83[0] & 0x0f);
1038 switch (vpd->device_identifier_code_set) {
1039 case 0x01: /* Binary */
1040 vpd->device_identifier[j++] =
1041 hex_str[vpd->device_identifier_type];
1042 while (i < (4 + page_83[3])) {
1043 vpd->device_identifier[j++] =
1044 hex_str[(page_83[i] & 0xf0) >> 4];
1045 vpd->device_identifier[j++] =
1046 hex_str[page_83[i] & 0x0f];
1047 i++;
1048 }
1049 break;
1050 case 0x02: /* ASCII */
1051 case 0x03: /* UTF-8 */
1052 while (i < (4 + page_83[3]))
1053 vpd->device_identifier[j++] = page_83[i++];
1054 break;
1055 default:
1056 break;
1057 }
1058
1059 return transport_dump_vpd_ident(vpd, NULL, 0);
1060}
1061EXPORT_SYMBOL(transport_set_vpd_ident);
1062
de103c93
CH
1063sense_reason_t
1064target_cmd_size_check(struct se_cmd *cmd, unsigned int size)
9b3b8041
CH
1065{
1066 struct se_device *dev = cmd->se_dev;
1067
1068 if (cmd->unknown_data_length) {
1069 cmd->data_length = size;
1070 } else if (size != cmd->data_length) {
1071 pr_warn("TARGET_CORE[%s]: Expected Transfer Length:"
1072 " %u does not match SCSI CDB Length: %u for SAM Opcode:"
1073 " 0x%02x\n", cmd->se_tfo->get_fabric_name(),
1074 cmd->data_length, size, cmd->t_task_cdb[0]);
1075
9b3b8041
CH
1076 if (cmd->data_direction == DMA_TO_DEVICE) {
1077 pr_err("Rejecting underflow/overflow"
1078 " WRITE data\n");
de103c93 1079 return TCM_INVALID_CDB_FIELD;
9b3b8041
CH
1080 }
1081 /*
1082 * Reject READ_* or WRITE_* with overflow/underflow for
1083 * type SCF_SCSI_DATA_CDB.
1084 */
0fd97ccf 1085 if (dev->dev_attrib.block_size != 512) {
9b3b8041
CH
1086 pr_err("Failing OVERFLOW/UNDERFLOW for LBA op"
1087 " CDB on non 512-byte sector setup subsystem"
1088 " plugin: %s\n", dev->transport->name);
1089 /* Returns CHECK_CONDITION + INVALID_CDB_FIELD */
de103c93 1090 return TCM_INVALID_CDB_FIELD;
9b3b8041 1091 }
4c054ba6
NB
1092 /*
1093 * For the overflow case keep the existing fabric provided
1094 * ->data_length. Otherwise for the underflow case, reset
1095 * ->data_length to the smaller SCSI expected data transfer
1096 * length.
1097 */
9b3b8041
CH
1098 if (size > cmd->data_length) {
1099 cmd->se_cmd_flags |= SCF_OVERFLOW_BIT;
1100 cmd->residual_count = (size - cmd->data_length);
1101 } else {
1102 cmd->se_cmd_flags |= SCF_UNDERFLOW_BIT;
1103 cmd->residual_count = (cmd->data_length - size);
4c054ba6 1104 cmd->data_length = size;
9b3b8041 1105 }
9b3b8041
CH
1106 }
1107
1108 return 0;
1109
9b3b8041
CH
1110}
1111
c66ac9db
NB
1112/*
1113 * Used by fabric modules containing a local struct se_cmd within their
1114 * fabric dependent per I/O descriptor.
1115 */
1116void transport_init_se_cmd(
1117 struct se_cmd *cmd,
1118 struct target_core_fabric_ops *tfo,
1119 struct se_session *se_sess,
1120 u32 data_length,
1121 int data_direction,
1122 int task_attr,
1123 unsigned char *sense_buffer)
1124{
5951146d 1125 INIT_LIST_HEAD(&cmd->se_delayed_node);
07bde79a 1126 INIT_LIST_HEAD(&cmd->se_qf_node);
a17f091d 1127 INIT_LIST_HEAD(&cmd->se_cmd_list);
cf572a96 1128 INIT_LIST_HEAD(&cmd->state_list);
a1d8b49a 1129 init_completion(&cmd->t_transport_stop_comp);
a17f091d 1130 init_completion(&cmd->cmd_wait_comp);
cf572a96 1131 init_completion(&cmd->task_stop_comp);
a1d8b49a 1132 spin_lock_init(&cmd->t_state_lock);
1e1110c4 1133 kref_init(&cmd->cmd_kref);
7d680f3b 1134 cmd->transport_state = CMD_T_DEV_ACTIVE;
c66ac9db
NB
1135
1136 cmd->se_tfo = tfo;
1137 cmd->se_sess = se_sess;
1138 cmd->data_length = data_length;
1139 cmd->data_direction = data_direction;
1140 cmd->sam_task_attr = task_attr;
1141 cmd->sense_buffer = sense_buffer;
cf572a96
CH
1142
1143 cmd->state_active = false;
c66ac9db
NB
1144}
1145EXPORT_SYMBOL(transport_init_se_cmd);
1146
de103c93
CH
1147static sense_reason_t
1148transport_check_alloc_task_attr(struct se_cmd *cmd)
c66ac9db 1149{
019c4ca6
CH
1150 struct se_device *dev = cmd->se_dev;
1151
c66ac9db
NB
1152 /*
1153 * Check if SAM Task Attribute emulation is enabled for this
1154 * struct se_device storage object
1155 */
019c4ca6 1156 if (dev->transport->transport_type == TRANSPORT_PLUGIN_PHBA_PDEV)
c66ac9db
NB
1157 return 0;
1158
e66ecd50 1159 if (cmd->sam_task_attr == MSG_ACA_TAG) {
6708bb27 1160 pr_debug("SAM Task Attribute ACA"
c66ac9db 1161 " emulation is not supported\n");
de103c93 1162 return TCM_INVALID_CDB_FIELD;
c66ac9db
NB
1163 }
1164 /*
1165 * Used to determine when ORDERED commands should go from
1166 * Dormant to Active status.
1167 */
019c4ca6 1168 cmd->se_ordered_id = atomic_inc_return(&dev->dev_ordered_id);
6708bb27 1169 pr_debug("Allocated se_ordered_id: %u for Task Attr: 0x%02x on %s\n",
c66ac9db 1170 cmd->se_ordered_id, cmd->sam_task_attr,
019c4ca6 1171 dev->transport->name);
c66ac9db
NB
1172 return 0;
1173}
1174
de103c93
CH
1175sense_reason_t
1176target_setup_cmd_from_cdb(struct se_cmd *cmd, unsigned char *cdb)
c66ac9db 1177{
0fd97ccf 1178 struct se_device *dev = cmd->se_dev;
de103c93 1179 sense_reason_t ret;
c66ac9db 1180
c66ac9db
NB
1181 /*
1182 * Ensure that the received CDB is less than the max (252 + 8) bytes
1183 * for VARIABLE_LENGTH_CMD
1184 */
1185 if (scsi_command_size(cdb) > SCSI_MAX_VARLEN_CDB_SIZE) {
6708bb27 1186 pr_err("Received SCSI CDB with command_size: %d that"
c66ac9db
NB
1187 " exceeds SCSI_MAX_VARLEN_CDB_SIZE: %d\n",
1188 scsi_command_size(cdb), SCSI_MAX_VARLEN_CDB_SIZE);
de103c93 1189 return TCM_INVALID_CDB_FIELD;
c66ac9db
NB
1190 }
1191 /*
1192 * If the received CDB is larger than TCM_MAX_COMMAND_SIZE,
1193 * allocate the additional extended CDB buffer now.. Otherwise
1194 * setup the pointer from __t_task_cdb to t_task_cdb.
1195 */
a1d8b49a
AG
1196 if (scsi_command_size(cdb) > sizeof(cmd->__t_task_cdb)) {
1197 cmd->t_task_cdb = kzalloc(scsi_command_size(cdb),
c66ac9db 1198 GFP_KERNEL);
6708bb27
AG
1199 if (!cmd->t_task_cdb) {
1200 pr_err("Unable to allocate cmd->t_task_cdb"
a1d8b49a 1201 " %u > sizeof(cmd->__t_task_cdb): %lu ops\n",
c66ac9db 1202 scsi_command_size(cdb),
a1d8b49a 1203 (unsigned long)sizeof(cmd->__t_task_cdb));
de103c93 1204 return TCM_OUT_OF_RESOURCES;
c66ac9db
NB
1205 }
1206 } else
a1d8b49a 1207 cmd->t_task_cdb = &cmd->__t_task_cdb[0];
c66ac9db 1208 /*
a1d8b49a 1209 * Copy the original CDB into cmd->
c66ac9db 1210 */
a1d8b49a 1211 memcpy(cmd->t_task_cdb, cdb, scsi_command_size(cdb));
cb4f4d3c 1212
e5c0d6ad
RD
1213 trace_target_sequencer_start(cmd);
1214
cb4f4d3c
CH
1215 /*
1216 * Check for an existing UNIT ATTENTION condition
1217 */
de103c93
CH
1218 ret = target_scsi3_ua_check(cmd);
1219 if (ret)
1220 return ret;
cb4f4d3c 1221
c87fbd56 1222 ret = target_alua_state_check(cmd);
de103c93
CH
1223 if (ret)
1224 return ret;
cb4f4d3c 1225
d977f437 1226 ret = target_check_reservation(cmd);
f85eda8d
NB
1227 if (ret) {
1228 cmd->scsi_status = SAM_STAT_RESERVATION_CONFLICT;
d977f437 1229 return ret;
f85eda8d 1230 }
cb4f4d3c 1231
0fd97ccf 1232 ret = dev->transport->parse_cdb(cmd);
de103c93
CH
1233 if (ret)
1234 return ret;
1235
1236 ret = transport_check_alloc_task_attr(cmd);
1237 if (ret)
c66ac9db 1238 return ret;
cb4f4d3c 1239
cb4f4d3c 1240 cmd->se_cmd_flags |= SCF_SUPPORTED_SAM_OPCODE;
cb4f4d3c 1241
c66ac9db
NB
1242 spin_lock(&cmd->se_lun->lun_sep_lock);
1243 if (cmd->se_lun->lun_sep)
1244 cmd->se_lun->lun_sep->sep_stats.cmd_pdus++;
1245 spin_unlock(&cmd->se_lun->lun_sep_lock);
1246 return 0;
1247}
a12f41f8 1248EXPORT_SYMBOL(target_setup_cmd_from_cdb);
c66ac9db 1249
695434e1
NB
1250/*
1251 * Used by fabric module frontends to queue tasks directly.
1252 * Many only be used from process context only
1253 */
1254int transport_handle_cdb_direct(
1255 struct se_cmd *cmd)
1256{
de103c93 1257 sense_reason_t ret;
dd8ae59d 1258
695434e1
NB
1259 if (!cmd->se_lun) {
1260 dump_stack();
6708bb27 1261 pr_err("cmd->se_lun is NULL\n");
695434e1
NB
1262 return -EINVAL;
1263 }
1264 if (in_interrupt()) {
1265 dump_stack();
6708bb27 1266 pr_err("transport_generic_handle_cdb cannot be called"
695434e1
NB
1267 " from interrupt context\n");
1268 return -EINVAL;
1269 }
dd8ae59d 1270 /*
af877292
CH
1271 * Set TRANSPORT_NEW_CMD state and CMD_T_ACTIVE to ensure that
1272 * outstanding descriptors are handled correctly during shutdown via
1273 * transport_wait_for_tasks()
dd8ae59d
NB
1274 *
1275 * Also, we don't take cmd->t_state_lock here as we only expect
1276 * this to be called for initial descriptor submission.
1277 */
1278 cmd->t_state = TRANSPORT_NEW_CMD;
7d680f3b
CH
1279 cmd->transport_state |= CMD_T_ACTIVE;
1280
dd8ae59d
NB
1281 /*
1282 * transport_generic_new_cmd() is already handling QUEUE_FULL,
1283 * so follow TRANSPORT_NEW_CMD processing thread context usage
1284 * and call transport_generic_request_failure() if necessary..
1285 */
1286 ret = transport_generic_new_cmd(cmd);
de103c93
CH
1287 if (ret)
1288 transport_generic_request_failure(cmd, ret);
dd8ae59d 1289 return 0;
695434e1
NB
1290}
1291EXPORT_SYMBOL(transport_handle_cdb_direct);
1292
c5ff8d6b 1293sense_reason_t
de103c93
CH
1294transport_generic_map_mem_to_cmd(struct se_cmd *cmd, struct scatterlist *sgl,
1295 u32 sgl_count, struct scatterlist *sgl_bidi, u32 sgl_bidi_count)
1296{
1297 if (!sgl || !sgl_count)
1298 return 0;
1299
1300 /*
1301 * Reject SCSI data overflow with map_mem_to_cmd() as incoming
1302 * scatterlists already have been set to follow what the fabric
1303 * passes for the original expected data transfer length.
1304 */
1305 if (cmd->se_cmd_flags & SCF_OVERFLOW_BIT) {
1306 pr_warn("Rejecting SCSI DATA overflow for fabric using"
1307 " SCF_PASSTHROUGH_SG_TO_MEM_NOALLOC\n");
1308 return TCM_INVALID_CDB_FIELD;
1309 }
1310
1311 cmd->t_data_sg = sgl;
1312 cmd->t_data_nents = sgl_count;
1313
1314 if (sgl_bidi && sgl_bidi_count) {
1315 cmd->t_bidi_data_sg = sgl_bidi;
1316 cmd->t_bidi_data_nents = sgl_bidi_count;
1317 }
1318 cmd->se_cmd_flags |= SCF_PASSTHROUGH_SG_TO_MEM_NOALLOC;
1319 return 0;
1320}
1321
a026757f
NB
1322/*
1323 * target_submit_cmd_map_sgls - lookup unpacked lun and submit uninitialized
1324 * se_cmd + use pre-allocated SGL memory.
a6360785
NB
1325 *
1326 * @se_cmd: command descriptor to submit
1327 * @se_sess: associated se_sess for endpoint
1328 * @cdb: pointer to SCSI CDB
1329 * @sense: pointer to SCSI sense buffer
1330 * @unpacked_lun: unpacked LUN to reference for struct se_lun
1331 * @data_length: fabric expected data transfer length
1332 * @task_addr: SAM task attribute
1333 * @data_dir: DMA data direction
1334 * @flags: flags for command submission from target_sc_flags_tables
a026757f
NB
1335 * @sgl: struct scatterlist memory for unidirectional mapping
1336 * @sgl_count: scatterlist count for unidirectional mapping
1337 * @sgl_bidi: struct scatterlist memory for bidirectional READ mapping
1338 * @sgl_bidi_count: scatterlist count for bidirectional READ mapping
def2b339
NB
1339 * @sgl_prot: struct scatterlist memory protection information
1340 * @sgl_prot_count: scatterlist count for protection information
a6360785 1341 *
d6dfc868
RD
1342 * Returns non zero to signal active I/O shutdown failure. All other
1343 * setup exceptions will be returned as a SCSI CHECK_CONDITION response,
1344 * but still return zero here.
1345 *
a6360785
NB
1346 * This may only be called from process context, and also currently
1347 * assumes internal allocation of fabric payload buffer by target-core.
a026757f
NB
1348 */
1349int target_submit_cmd_map_sgls(struct se_cmd *se_cmd, struct se_session *se_sess,
a6360785 1350 unsigned char *cdb, unsigned char *sense, u32 unpacked_lun,
a026757f
NB
1351 u32 data_length, int task_attr, int data_dir, int flags,
1352 struct scatterlist *sgl, u32 sgl_count,
def2b339
NB
1353 struct scatterlist *sgl_bidi, u32 sgl_bidi_count,
1354 struct scatterlist *sgl_prot, u32 sgl_prot_count)
a6360785
NB
1355{
1356 struct se_portal_group *se_tpg;
de103c93
CH
1357 sense_reason_t rc;
1358 int ret;
a6360785
NB
1359
1360 se_tpg = se_sess->se_tpg;
1361 BUG_ON(!se_tpg);
1362 BUG_ON(se_cmd->se_tfo || se_cmd->se_sess);
1363 BUG_ON(in_interrupt());
1364 /*
1365 * Initialize se_cmd for target operation. From this point
1366 * exceptions are handled by sending exception status via
1367 * target_core_fabric_ops->queue_status() callback
1368 */
1369 transport_init_se_cmd(se_cmd, se_tpg->se_tpg_tfo, se_sess,
1370 data_length, data_dir, task_attr, sense);
b0d79946
SAS
1371 if (flags & TARGET_SCF_UNKNOWN_SIZE)
1372 se_cmd->unknown_data_length = 1;
a6360785
NB
1373 /*
1374 * Obtain struct se_cmd->cmd_kref reference and add new cmd to
1375 * se_sess->sess_cmd_list. A second kref_get here is necessary
1376 * for fabrics using TARGET_SCF_ACK_KREF that expect a second
1377 * kref_put() to happen during fabric packet acknowledgement.
1378 */
de103c93
CH
1379 ret = target_get_sess_cmd(se_sess, se_cmd, (flags & TARGET_SCF_ACK_KREF));
1380 if (ret)
1381 return ret;
a6360785
NB
1382 /*
1383 * Signal bidirectional data payloads to target-core
1384 */
1385 if (flags & TARGET_SCF_BIDI_OP)
1386 se_cmd->se_cmd_flags |= SCF_BIDI;
1387 /*
1388 * Locate se_lun pointer and attach it to struct se_cmd
1389 */
de103c93
CH
1390 rc = transport_lookup_cmd_lun(se_cmd, unpacked_lun);
1391 if (rc) {
1392 transport_send_check_condition_and_sense(se_cmd, rc, 0);
735703ca 1393 target_put_sess_cmd(se_sess, se_cmd);
d6dfc868 1394 return 0;
735703ca 1395 }
b5b8e298
SG
1396
1397 rc = target_setup_cmd_from_cdb(se_cmd, cdb);
1398 if (rc != 0) {
1399 transport_generic_request_failure(se_cmd, rc);
1400 return 0;
1401 }
1402
def2b339
NB
1403 /*
1404 * Save pointers for SGLs containing protection information,
1405 * if present.
1406 */
1407 if (sgl_prot_count) {
1408 se_cmd->t_prot_sg = sgl_prot;
1409 se_cmd->t_prot_nents = sgl_prot_count;
1410 }
d6e0175c 1411
a026757f
NB
1412 /*
1413 * When a non zero sgl_count has been passed perform SGL passthrough
1414 * mapping for pre-allocated fabric memory instead of having target
1415 * core perform an internal SGL allocation..
1416 */
1417 if (sgl_count != 0) {
1418 BUG_ON(!sgl);
1419
944981c7
NB
1420 /*
1421 * A work-around for tcm_loop as some userspace code via
1422 * scsi-generic do not memset their associated read buffers,
1423 * so go ahead and do that here for type non-data CDBs. Also
1424 * note that this is currently guaranteed to be a single SGL
1425 * for this case by target core in target_setup_cmd_from_cdb()
1426 * -> transport_generic_cmd_sequencer().
1427 */
1428 if (!(se_cmd->se_cmd_flags & SCF_SCSI_DATA_CDB) &&
1429 se_cmd->data_direction == DMA_FROM_DEVICE) {
1430 unsigned char *buf = NULL;
1431
1432 if (sgl)
1433 buf = kmap(sg_page(sgl)) + sgl->offset;
1434
1435 if (buf) {
1436 memset(buf, 0, sgl->length);
1437 kunmap(sg_page(sgl));
1438 }
1439 }
1440
a026757f
NB
1441 rc = transport_generic_map_mem_to_cmd(se_cmd, sgl, sgl_count,
1442 sgl_bidi, sgl_bidi_count);
1443 if (rc != 0) {
de103c93 1444 transport_generic_request_failure(se_cmd, rc);
a026757f
NB
1445 return 0;
1446 }
1447 }
def2b339 1448
11e319ed
AG
1449 /*
1450 * Check if we need to delay processing because of ALUA
1451 * Active/NonOptimized primary access state..
1452 */
1453 core_alua_check_nonop_delay(se_cmd);
1454
a6360785 1455 transport_handle_cdb_direct(se_cmd);
d6dfc868 1456 return 0;
a6360785 1457}
a026757f
NB
1458EXPORT_SYMBOL(target_submit_cmd_map_sgls);
1459
1460/*
1461 * target_submit_cmd - lookup unpacked lun and submit uninitialized se_cmd
1462 *
1463 * @se_cmd: command descriptor to submit
1464 * @se_sess: associated se_sess for endpoint
1465 * @cdb: pointer to SCSI CDB
1466 * @sense: pointer to SCSI sense buffer
1467 * @unpacked_lun: unpacked LUN to reference for struct se_lun
1468 * @data_length: fabric expected data transfer length
1469 * @task_addr: SAM task attribute
1470 * @data_dir: DMA data direction
1471 * @flags: flags for command submission from target_sc_flags_tables
1472 *
1473 * Returns non zero to signal active I/O shutdown failure. All other
1474 * setup exceptions will be returned as a SCSI CHECK_CONDITION response,
1475 * but still return zero here.
1476 *
1477 * This may only be called from process context, and also currently
1478 * assumes internal allocation of fabric payload buffer by target-core.
1479 *
1480 * It also assumes interal target core SGL memory allocation.
1481 */
1482int target_submit_cmd(struct se_cmd *se_cmd, struct se_session *se_sess,
1483 unsigned char *cdb, unsigned char *sense, u32 unpacked_lun,
1484 u32 data_length, int task_attr, int data_dir, int flags)
1485{
1486 return target_submit_cmd_map_sgls(se_cmd, se_sess, cdb, sense,
1487 unpacked_lun, data_length, task_attr, data_dir,
def2b339 1488 flags, NULL, 0, NULL, 0, NULL, 0);
a026757f 1489}
a6360785
NB
1490EXPORT_SYMBOL(target_submit_cmd);
1491
9f0d05c2
NB
1492static void target_complete_tmr_failure(struct work_struct *work)
1493{
1494 struct se_cmd *se_cmd = container_of(work, struct se_cmd, work);
1495
1496 se_cmd->se_tmr_req->response = TMR_LUN_DOES_NOT_EXIST;
1497 se_cmd->se_tfo->queue_tm_rsp(se_cmd);
5a3b6fc0
RD
1498
1499 transport_cmd_check_stop_to_fabric(se_cmd);
9f0d05c2
NB
1500}
1501
ea98d7f9
AG
1502/**
1503 * target_submit_tmr - lookup unpacked lun and submit uninitialized se_cmd
1504 * for TMR CDBs
1505 *
1506 * @se_cmd: command descriptor to submit
1507 * @se_sess: associated se_sess for endpoint
1508 * @sense: pointer to SCSI sense buffer
1509 * @unpacked_lun: unpacked LUN to reference for struct se_lun
1510 * @fabric_context: fabric context for TMR req
1511 * @tm_type: Type of TM request
c0974f89
NB
1512 * @gfp: gfp type for caller
1513 * @tag: referenced task tag for TMR_ABORT_TASK
c7042cae 1514 * @flags: submit cmd flags
ea98d7f9
AG
1515 *
1516 * Callable from all contexts.
1517 **/
1518
c7042cae 1519int target_submit_tmr(struct se_cmd *se_cmd, struct se_session *se_sess,
ea98d7f9 1520 unsigned char *sense, u32 unpacked_lun,
c0974f89
NB
1521 void *fabric_tmr_ptr, unsigned char tm_type,
1522 gfp_t gfp, unsigned int tag, int flags)
ea98d7f9
AG
1523{
1524 struct se_portal_group *se_tpg;
1525 int ret;
1526
1527 se_tpg = se_sess->se_tpg;
1528 BUG_ON(!se_tpg);
1529
1530 transport_init_se_cmd(se_cmd, se_tpg->se_tpg_tfo, se_sess,
1531 0, DMA_NONE, MSG_SIMPLE_TAG, sense);
c7042cae
NB
1532 /*
1533 * FIXME: Currently expect caller to handle se_cmd->se_tmr_req
1534 * allocation failure.
1535 */
c0974f89 1536 ret = core_tmr_alloc_req(se_cmd, fabric_tmr_ptr, tm_type, gfp);
c7042cae
NB
1537 if (ret < 0)
1538 return -ENOMEM;
ea98d7f9 1539
c0974f89
NB
1540 if (tm_type == TMR_ABORT_TASK)
1541 se_cmd->se_tmr_req->ref_task_tag = tag;
1542
ea98d7f9 1543 /* See target_submit_cmd for commentary */
bc187ea6
RD
1544 ret = target_get_sess_cmd(se_sess, se_cmd, (flags & TARGET_SCF_ACK_KREF));
1545 if (ret) {
1546 core_tmr_release_req(se_cmd->se_tmr_req);
1547 return ret;
1548 }
ea98d7f9 1549
ea98d7f9
AG
1550 ret = transport_lookup_tmr_lun(se_cmd, unpacked_lun);
1551 if (ret) {
9f0d05c2
NB
1552 /*
1553 * For callback during failure handling, push this work off
1554 * to process context with TMR_LUN_DOES_NOT_EXIST status.
1555 */
1556 INIT_WORK(&se_cmd->work, target_complete_tmr_failure);
1557 schedule_work(&se_cmd->work);
c7042cae 1558 return 0;
ea98d7f9
AG
1559 }
1560 transport_generic_handle_tmr(se_cmd);
c7042cae 1561 return 0;
ea98d7f9
AG
1562}
1563EXPORT_SYMBOL(target_submit_tmr);
1564
cdbb70bb 1565/*
cf572a96 1566 * If the cmd is active, request it to be stopped and sleep until it
cdbb70bb
CH
1567 * has completed.
1568 */
cf572a96 1569bool target_stop_cmd(struct se_cmd *cmd, unsigned long *flags)
cdbb70bb 1570{
cdbb70bb
CH
1571 bool was_active = false;
1572
cf572a96
CH
1573 if (cmd->transport_state & CMD_T_BUSY) {
1574 cmd->transport_state |= CMD_T_REQUEST_STOP;
cdbb70bb
CH
1575 spin_unlock_irqrestore(&cmd->t_state_lock, *flags);
1576
cf572a96
CH
1577 pr_debug("cmd %p waiting to complete\n", cmd);
1578 wait_for_completion(&cmd->task_stop_comp);
1579 pr_debug("cmd %p stopped successfully\n", cmd);
cdbb70bb
CH
1580
1581 spin_lock_irqsave(&cmd->t_state_lock, *flags);
cf572a96
CH
1582 cmd->transport_state &= ~CMD_T_REQUEST_STOP;
1583 cmd->transport_state &= ~CMD_T_BUSY;
cdbb70bb
CH
1584 was_active = true;
1585 }
1586
cdbb70bb
CH
1587 return was_active;
1588}
1589
c66ac9db
NB
1590/*
1591 * Handle SAM-esque emulation for generic transport request failures.
1592 */
de103c93
CH
1593void transport_generic_request_failure(struct se_cmd *cmd,
1594 sense_reason_t sense_reason)
c66ac9db 1595{
07bde79a
NB
1596 int ret = 0;
1597
6708bb27 1598 pr_debug("-----[ Storage Engine Exception for cmd: %p ITT: 0x%08x"
e3d6f909 1599 " CDB: 0x%02x\n", cmd, cmd->se_tfo->get_task_tag(cmd),
a1d8b49a 1600 cmd->t_task_cdb[0]);
de103c93 1601 pr_debug("-----[ i_state: %d t_state: %d sense_reason: %d\n",
e3d6f909 1602 cmd->se_tfo->get_cmd_state(cmd),
de103c93 1603 cmd->t_state, sense_reason);
d43d6aea 1604 pr_debug("-----[ CMD_T_ACTIVE: %d CMD_T_STOP: %d CMD_T_SENT: %d\n",
7d680f3b
CH
1605 (cmd->transport_state & CMD_T_ACTIVE) != 0,
1606 (cmd->transport_state & CMD_T_STOP) != 0,
1607 (cmd->transport_state & CMD_T_SENT) != 0);
c66ac9db 1608
c66ac9db
NB
1609 /*
1610 * For SAM Task Attribute emulation for failed struct se_cmd
1611 */
019c4ca6 1612 transport_complete_task_attr(cmd);
cf6d1f09
NB
1613 /*
1614 * Handle special case for COMPARE_AND_WRITE failure, where the
1615 * callback is expected to drop the per device ->caw_mutex.
1616 */
1617 if ((cmd->se_cmd_flags & SCF_COMPARE_AND_WRITE) &&
1618 cmd->transport_complete_callback)
1619 cmd->transport_complete_callback(cmd);
c66ac9db 1620
de103c93 1621 switch (sense_reason) {
03e98c9e
NB
1622 case TCM_NON_EXISTENT_LUN:
1623 case TCM_UNSUPPORTED_SCSI_OPCODE:
1624 case TCM_INVALID_CDB_FIELD:
1625 case TCM_INVALID_PARAMETER_LIST:
bb992e72 1626 case TCM_PARAMETER_LIST_LENGTH_ERROR:
03e98c9e
NB
1627 case TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE:
1628 case TCM_UNKNOWN_MODE_PAGE:
1629 case TCM_WRITE_PROTECTED:
e2397c70 1630 case TCM_ADDRESS_OUT_OF_RANGE:
03e98c9e
NB
1631 case TCM_CHECK_CONDITION_ABORT_CMD:
1632 case TCM_CHECK_CONDITION_UNIT_ATTENTION:
1633 case TCM_CHECK_CONDITION_NOT_READY:
94387aa7
NB
1634 case TCM_LOGICAL_BLOCK_GUARD_CHECK_FAILED:
1635 case TCM_LOGICAL_BLOCK_APP_TAG_CHECK_FAILED:
1636 case TCM_LOGICAL_BLOCK_REF_TAG_CHECK_FAILED:
c66ac9db 1637 break;
de103c93
CH
1638 case TCM_OUT_OF_RESOURCES:
1639 sense_reason = TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE;
1640 break;
03e98c9e 1641 case TCM_RESERVATION_CONFLICT:
c66ac9db
NB
1642 /*
1643 * No SENSE Data payload for this case, set SCSI Status
1644 * and queue the response to $FABRIC_MOD.
1645 *
1646 * Uses linux/include/scsi/scsi.h SAM status codes defs
1647 */
1648 cmd->scsi_status = SAM_STAT_RESERVATION_CONFLICT;
1649 /*
1650 * For UA Interlock Code 11b, a RESERVATION CONFLICT will
1651 * establish a UNIT ATTENTION with PREVIOUS RESERVATION
1652 * CONFLICT STATUS.
1653 *
1654 * See spc4r17, section 7.4.6 Control Mode Page, Table 349
1655 */
e3d6f909 1656 if (cmd->se_sess &&
0fd97ccf 1657 cmd->se_dev->dev_attrib.emulate_ua_intlck_ctrl == 2)
e3d6f909 1658 core_scsi3_ua_allocate(cmd->se_sess->se_node_acl,
c66ac9db
NB
1659 cmd->orig_fe_lun, 0x2C,
1660 ASCQ_2CH_PREVIOUS_RESERVATION_CONFLICT_STATUS);
1661
e5c0d6ad
RD
1662 trace_target_cmd_complete(cmd);
1663 ret = cmd->se_tfo-> queue_status(cmd);
f147abb4 1664 if (ret == -EAGAIN || ret == -ENOMEM)
07bde79a 1665 goto queue_full;
c66ac9db 1666 goto check_stop;
c66ac9db 1667 default:
6708bb27 1668 pr_err("Unknown transport error for CDB 0x%02x: %d\n",
de103c93
CH
1669 cmd->t_task_cdb[0], sense_reason);
1670 sense_reason = TCM_UNSUPPORTED_SCSI_OPCODE;
c66ac9db
NB
1671 break;
1672 }
f3146437 1673
de103c93 1674 ret = transport_send_check_condition_and_sense(cmd, sense_reason, 0);
03e98c9e
NB
1675 if (ret == -EAGAIN || ret == -ENOMEM)
1676 goto queue_full;
07bde79a 1677
c66ac9db
NB
1678check_stop:
1679 transport_lun_remove_cmd(cmd);
6708bb27 1680 if (!transport_cmd_check_stop_to_fabric(cmd))
c66ac9db 1681 ;
07bde79a
NB
1682 return;
1683
1684queue_full:
e057f533
CH
1685 cmd->t_state = TRANSPORT_COMPLETE_QF_OK;
1686 transport_handle_queue_full(cmd, cmd->se_dev);
c66ac9db 1687}
2fbff127 1688EXPORT_SYMBOL(transport_generic_request_failure);
c66ac9db 1689
76dde50e 1690void __target_execute_cmd(struct se_cmd *cmd)
c66ac9db 1691{
de103c93 1692 sense_reason_t ret;
5f41a31d 1693
de103c93
CH
1694 if (cmd->execute_cmd) {
1695 ret = cmd->execute_cmd(cmd);
1696 if (ret) {
1697 spin_lock_irq(&cmd->t_state_lock);
1698 cmd->transport_state &= ~(CMD_T_BUSY|CMD_T_SENT);
1699 spin_unlock_irq(&cmd->t_state_lock);
5f41a31d 1700
de103c93
CH
1701 transport_generic_request_failure(cmd, ret);
1702 }
5f41a31d
CH
1703 }
1704}
1705
019c4ca6 1706static bool target_handle_task_attr(struct se_cmd *cmd)
5f41a31d
CH
1707{
1708 struct se_device *dev = cmd->se_dev;
1709
019c4ca6
CH
1710 if (dev->transport->transport_type == TRANSPORT_PLUGIN_PHBA_PDEV)
1711 return false;
5f41a31d 1712
c66ac9db 1713 /*
25985edc 1714 * Check for the existence of HEAD_OF_QUEUE, and if true return 1
c66ac9db
NB
1715 * to allow the passed struct se_cmd list of tasks to the front of the list.
1716 */
5f41a31d
CH
1717 switch (cmd->sam_task_attr) {
1718 case MSG_HEAD_TAG:
1719 pr_debug("Added HEAD_OF_QUEUE for CDB: 0x%02x, "
1720 "se_ordered_id: %u\n",
1721 cmd->t_task_cdb[0], cmd->se_ordered_id);
019c4ca6 1722 return false;
5f41a31d
CH
1723 case MSG_ORDERED_TAG:
1724 atomic_inc(&dev->dev_ordered_sync);
4e857c58 1725 smp_mb__after_atomic();
c66ac9db 1726
5f41a31d
CH
1727 pr_debug("Added ORDERED for CDB: 0x%02x to ordered list, "
1728 " se_ordered_id: %u\n",
1729 cmd->t_task_cdb[0], cmd->se_ordered_id);
1730
c66ac9db 1731 /*
5f41a31d
CH
1732 * Execute an ORDERED command if no other older commands
1733 * exist that need to be completed first.
c66ac9db 1734 */
5f41a31d 1735 if (!atomic_read(&dev->simple_cmds))
019c4ca6 1736 return false;
5f41a31d
CH
1737 break;
1738 default:
c66ac9db
NB
1739 /*
1740 * For SIMPLE and UNTAGGED Task Attribute commands
1741 */
5f41a31d 1742 atomic_inc(&dev->simple_cmds);
4e857c58 1743 smp_mb__after_atomic();
5f41a31d 1744 break;
c66ac9db 1745 }
5f41a31d 1746
019c4ca6
CH
1747 if (atomic_read(&dev->dev_ordered_sync) == 0)
1748 return false;
c66ac9db 1749
019c4ca6
CH
1750 spin_lock(&dev->delayed_cmd_lock);
1751 list_add_tail(&cmd->se_delayed_node, &dev->delayed_cmd_list);
1752 spin_unlock(&dev->delayed_cmd_lock);
1753
1754 pr_debug("Added CDB: 0x%02x Task Attr: 0x%02x to"
1755 " delayed CMD list, se_ordered_id: %u\n",
1756 cmd->t_task_cdb[0], cmd->sam_task_attr,
1757 cmd->se_ordered_id);
1758 return true;
1759}
1760
1761void target_execute_cmd(struct se_cmd *cmd)
1762{
1763 /*
1764 * If the received CDB has aleady been aborted stop processing it here.
1765 */
4a9a6c8d 1766 if (transport_check_aborted_status(cmd, 1))
5f41a31d 1767 return;
c66ac9db 1768
019c4ca6
CH
1769 /*
1770 * Determine if frontend context caller is requesting the stopping of
1771 * this command for frontend exceptions.
1772 */
4a9a6c8d 1773 spin_lock_irq(&cmd->t_state_lock);
019c4ca6
CH
1774 if (cmd->transport_state & CMD_T_STOP) {
1775 pr_debug("%s:%d CMD_T_STOP for ITT: 0x%08x\n",
1776 __func__, __LINE__,
1777 cmd->se_tfo->get_task_tag(cmd));
1778
1779 spin_unlock_irq(&cmd->t_state_lock);
a95d6511 1780 complete_all(&cmd->t_transport_stop_comp);
019c4ca6
CH
1781 return;
1782 }
1783
1784 cmd->t_state = TRANSPORT_PROCESSING;
1a398b97 1785 cmd->transport_state |= CMD_T_ACTIVE|CMD_T_BUSY|CMD_T_SENT;
019c4ca6 1786 spin_unlock_irq(&cmd->t_state_lock);
a84bf9ee
NB
1787 /*
1788 * Perform WRITE_INSERT of PI using software emulation when backend
1789 * device has PI enabled, if the transport has not already generated
1790 * PI using hardware WRITE_INSERT offload.
1791 */
1792 if (cmd->prot_op == TARGET_PROT_DOUT_INSERT) {
1793 if (!(cmd->se_sess->sup_prot_ops & TARGET_PROT_DOUT_INSERT))
1794 sbc_dif_generate(cmd);
1795 }
019c4ca6 1796
1a398b97
NB
1797 if (target_handle_task_attr(cmd)) {
1798 spin_lock_irq(&cmd->t_state_lock);
1799 cmd->transport_state &= ~CMD_T_BUSY|CMD_T_SENT;
1800 spin_unlock_irq(&cmd->t_state_lock);
1801 return;
1802 }
1803
1804 __target_execute_cmd(cmd);
c66ac9db 1805}
70baf0ab 1806EXPORT_SYMBOL(target_execute_cmd);
c66ac9db 1807
5f41a31d
CH
1808/*
1809 * Process all commands up to the last received ORDERED task attribute which
1810 * requires another blocking boundary
1811 */
1812static void target_restart_delayed_cmds(struct se_device *dev)
1813{
1814 for (;;) {
1815 struct se_cmd *cmd;
1816
1817 spin_lock(&dev->delayed_cmd_lock);
1818 if (list_empty(&dev->delayed_cmd_list)) {
1819 spin_unlock(&dev->delayed_cmd_lock);
1820 break;
1821 }
1822
1823 cmd = list_entry(dev->delayed_cmd_list.next,
1824 struct se_cmd, se_delayed_node);
1825 list_del(&cmd->se_delayed_node);
1826 spin_unlock(&dev->delayed_cmd_lock);
1827
1828 __target_execute_cmd(cmd);
1829
1830 if (cmd->sam_task_attr == MSG_ORDERED_TAG)
1831 break;
1832 }
1833}
1834
c66ac9db 1835/*
35e0e757 1836 * Called from I/O completion to determine which dormant/delayed
c66ac9db
NB
1837 * and ordered cmds need to have their tasks added to the execution queue.
1838 */
1839static void transport_complete_task_attr(struct se_cmd *cmd)
1840{
5951146d 1841 struct se_device *dev = cmd->se_dev;
c66ac9db 1842
019c4ca6
CH
1843 if (dev->transport->transport_type == TRANSPORT_PLUGIN_PHBA_PDEV)
1844 return;
1845
e66ecd50 1846 if (cmd->sam_task_attr == MSG_SIMPLE_TAG) {
c66ac9db 1847 atomic_dec(&dev->simple_cmds);
4e857c58 1848 smp_mb__after_atomic();
c66ac9db 1849 dev->dev_cur_ordered_id++;
6708bb27 1850 pr_debug("Incremented dev->dev_cur_ordered_id: %u for"
c66ac9db
NB
1851 " SIMPLE: %u\n", dev->dev_cur_ordered_id,
1852 cmd->se_ordered_id);
e66ecd50 1853 } else if (cmd->sam_task_attr == MSG_HEAD_TAG) {
c66ac9db 1854 dev->dev_cur_ordered_id++;
6708bb27 1855 pr_debug("Incremented dev_cur_ordered_id: %u for"
c66ac9db
NB
1856 " HEAD_OF_QUEUE: %u\n", dev->dev_cur_ordered_id,
1857 cmd->se_ordered_id);
e66ecd50 1858 } else if (cmd->sam_task_attr == MSG_ORDERED_TAG) {
c66ac9db 1859 atomic_dec(&dev->dev_ordered_sync);
4e857c58 1860 smp_mb__after_atomic();
c66ac9db
NB
1861
1862 dev->dev_cur_ordered_id++;
6708bb27 1863 pr_debug("Incremented dev_cur_ordered_id: %u for ORDERED:"
c66ac9db
NB
1864 " %u\n", dev->dev_cur_ordered_id, cmd->se_ordered_id);
1865 }
c66ac9db 1866
5f41a31d 1867 target_restart_delayed_cmds(dev);
c66ac9db
NB
1868}
1869
e057f533 1870static void transport_complete_qf(struct se_cmd *cmd)
07bde79a
NB
1871{
1872 int ret = 0;
1873
019c4ca6 1874 transport_complete_task_attr(cmd);
e057f533
CH
1875
1876 if (cmd->se_cmd_flags & SCF_TRANSPORT_TASK_SENSE) {
e5c0d6ad 1877 trace_target_cmd_complete(cmd);
e057f533
CH
1878 ret = cmd->se_tfo->queue_status(cmd);
1879 if (ret)
1880 goto out;
1881 }
07bde79a
NB
1882
1883 switch (cmd->data_direction) {
1884 case DMA_FROM_DEVICE:
e5c0d6ad 1885 trace_target_cmd_complete(cmd);
07bde79a
NB
1886 ret = cmd->se_tfo->queue_data_in(cmd);
1887 break;
1888 case DMA_TO_DEVICE:
64577407 1889 if (cmd->se_cmd_flags & SCF_BIDI) {
07bde79a
NB
1890 ret = cmd->se_tfo->queue_data_in(cmd);
1891 if (ret < 0)
e057f533 1892 break;
07bde79a
NB
1893 }
1894 /* Fall through for DMA_TO_DEVICE */
1895 case DMA_NONE:
e5c0d6ad 1896 trace_target_cmd_complete(cmd);
07bde79a
NB
1897 ret = cmd->se_tfo->queue_status(cmd);
1898 break;
1899 default:
1900 break;
1901 }
1902
e057f533
CH
1903out:
1904 if (ret < 0) {
1905 transport_handle_queue_full(cmd, cmd->se_dev);
1906 return;
1907 }
1908 transport_lun_remove_cmd(cmd);
1909 transport_cmd_check_stop_to_fabric(cmd);
07bde79a
NB
1910}
1911
1912static void transport_handle_queue_full(
1913 struct se_cmd *cmd,
e057f533 1914 struct se_device *dev)
07bde79a
NB
1915{
1916 spin_lock_irq(&dev->qf_cmd_lock);
07bde79a
NB
1917 list_add_tail(&cmd->se_qf_node, &cmd->se_dev->qf_cmd_list);
1918 atomic_inc(&dev->dev_qf_count);
4e857c58 1919 smp_mb__after_atomic();
07bde79a
NB
1920 spin_unlock_irq(&cmd->se_dev->qf_cmd_lock);
1921
1922 schedule_work(&cmd->se_dev->qf_work_queue);
1923}
1924
bc005869
NB
1925static bool target_check_read_strip(struct se_cmd *cmd)
1926{
1927 sense_reason_t rc;
1928
1929 if (!(cmd->se_sess->sup_prot_ops & TARGET_PROT_DIN_STRIP)) {
1930 rc = sbc_dif_read_strip(cmd);
1931 if (rc) {
1932 cmd->pi_err = rc;
1933 return true;
1934 }
1935 }
1936
1937 return false;
1938}
1939
35e0e757 1940static void target_complete_ok_work(struct work_struct *work)
c66ac9db 1941{
35e0e757 1942 struct se_cmd *cmd = container_of(work, struct se_cmd, work);
27a27099 1943 int ret;
35e0e757 1944
c66ac9db
NB
1945 /*
1946 * Check if we need to move delayed/dormant tasks from cmds on the
1947 * delayed execution list after a HEAD_OF_QUEUE or ORDERED Task
1948 * Attribute.
1949 */
019c4ca6
CH
1950 transport_complete_task_attr(cmd);
1951
07bde79a
NB
1952 /*
1953 * Check to schedule QUEUE_FULL work, or execute an existing
1954 * cmd->transport_qf_callback()
1955 */
1956 if (atomic_read(&cmd->se_dev->dev_qf_count) != 0)
1957 schedule_work(&cmd->se_dev->qf_work_queue);
1958
c66ac9db 1959 /*
d5829eac 1960 * Check if we need to send a sense buffer from
c66ac9db
NB
1961 * the struct se_cmd in question.
1962 */
1963 if (cmd->se_cmd_flags & SCF_TRANSPORT_TASK_SENSE) {
27a27099 1964 WARN_ON(!cmd->scsi_status);
27a27099
PB
1965 ret = transport_send_check_condition_and_sense(
1966 cmd, 0, 1);
1967 if (ret == -EAGAIN || ret == -ENOMEM)
1968 goto queue_full;
1969
1970 transport_lun_remove_cmd(cmd);
1971 transport_cmd_check_stop_to_fabric(cmd);
1972 return;
c66ac9db
NB
1973 }
1974 /*
25985edc 1975 * Check for a callback, used by amongst other things
a6b0133c 1976 * XDWRITE_READ_10 and COMPARE_AND_WRITE emulation.
c66ac9db 1977 */
a6b0133c
NB
1978 if (cmd->transport_complete_callback) {
1979 sense_reason_t rc;
1980
1981 rc = cmd->transport_complete_callback(cmd);
a2890087 1982 if (!rc && !(cmd->se_cmd_flags & SCF_COMPARE_AND_WRITE_POST)) {
a6b0133c 1983 return;
a2890087
NB
1984 } else if (rc) {
1985 ret = transport_send_check_condition_and_sense(cmd,
1986 rc, 0);
1987 if (ret == -EAGAIN || ret == -ENOMEM)
1988 goto queue_full;
a6b0133c 1989
a2890087
NB
1990 transport_lun_remove_cmd(cmd);
1991 transport_cmd_check_stop_to_fabric(cmd);
1992 return;
1993 }
a6b0133c 1994 }
c66ac9db
NB
1995
1996 switch (cmd->data_direction) {
1997 case DMA_FROM_DEVICE:
1998 spin_lock(&cmd->se_lun->lun_sep_lock);
e3d6f909
AG
1999 if (cmd->se_lun->lun_sep) {
2000 cmd->se_lun->lun_sep->sep_stats.tx_data_octets +=
c66ac9db
NB
2001 cmd->data_length;
2002 }
2003 spin_unlock(&cmd->se_lun->lun_sep_lock);
bc005869
NB
2004 /*
2005 * Perform READ_STRIP of PI using software emulation when
2006 * backend had PI enabled, if the transport will not be
2007 * performing hardware READ_STRIP offload.
2008 */
2009 if (cmd->prot_op == TARGET_PROT_DIN_STRIP &&
2010 target_check_read_strip(cmd)) {
2011 ret = transport_send_check_condition_and_sense(cmd,
2012 cmd->pi_err, 0);
2013 if (ret == -EAGAIN || ret == -ENOMEM)
2014 goto queue_full;
2015
2016 transport_lun_remove_cmd(cmd);
2017 transport_cmd_check_stop_to_fabric(cmd);
2018 return;
2019 }
c66ac9db 2020
e5c0d6ad 2021 trace_target_cmd_complete(cmd);
07bde79a 2022 ret = cmd->se_tfo->queue_data_in(cmd);
f147abb4 2023 if (ret == -EAGAIN || ret == -ENOMEM)
07bde79a 2024 goto queue_full;
c66ac9db
NB
2025 break;
2026 case DMA_TO_DEVICE:
2027 spin_lock(&cmd->se_lun->lun_sep_lock);
e3d6f909
AG
2028 if (cmd->se_lun->lun_sep) {
2029 cmd->se_lun->lun_sep->sep_stats.rx_data_octets +=
c66ac9db
NB
2030 cmd->data_length;
2031 }
2032 spin_unlock(&cmd->se_lun->lun_sep_lock);
2033 /*
2034 * Check if we need to send READ payload for BIDI-COMMAND
2035 */
64577407 2036 if (cmd->se_cmd_flags & SCF_BIDI) {
c66ac9db 2037 spin_lock(&cmd->se_lun->lun_sep_lock);
e3d6f909
AG
2038 if (cmd->se_lun->lun_sep) {
2039 cmd->se_lun->lun_sep->sep_stats.tx_data_octets +=
c66ac9db
NB
2040 cmd->data_length;
2041 }
2042 spin_unlock(&cmd->se_lun->lun_sep_lock);
07bde79a 2043 ret = cmd->se_tfo->queue_data_in(cmd);
f147abb4 2044 if (ret == -EAGAIN || ret == -ENOMEM)
07bde79a 2045 goto queue_full;
c66ac9db
NB
2046 break;
2047 }
2048 /* Fall through for DMA_TO_DEVICE */
2049 case DMA_NONE:
e5c0d6ad 2050 trace_target_cmd_complete(cmd);
07bde79a 2051 ret = cmd->se_tfo->queue_status(cmd);
f147abb4 2052 if (ret == -EAGAIN || ret == -ENOMEM)
07bde79a 2053 goto queue_full;
c66ac9db
NB
2054 break;
2055 default:
2056 break;
2057 }
2058
2059 transport_lun_remove_cmd(cmd);
2060 transport_cmd_check_stop_to_fabric(cmd);
07bde79a
NB
2061 return;
2062
2063queue_full:
6708bb27 2064 pr_debug("Handling complete_ok QUEUE_FULL: se_cmd: %p,"
07bde79a 2065 " data_direction: %d\n", cmd, cmd->data_direction);
e057f533
CH
2066 cmd->t_state = TRANSPORT_COMPLETE_QF_OK;
2067 transport_handle_queue_full(cmd, cmd->se_dev);
c66ac9db
NB
2068}
2069
6708bb27 2070static inline void transport_free_sgl(struct scatterlist *sgl, int nents)
c66ac9db 2071{
ec98f782 2072 struct scatterlist *sg;
ec98f782 2073 int count;
c66ac9db 2074
6708bb27
AG
2075 for_each_sg(sgl, sg, nents, count)
2076 __free_page(sg_page(sg));
c66ac9db 2077
6708bb27
AG
2078 kfree(sgl);
2079}
c66ac9db 2080
47e459e6
NB
2081static inline void transport_reset_sgl_orig(struct se_cmd *cmd)
2082{
2083 /*
2084 * Check for saved t_data_sg that may be used for COMPARE_AND_WRITE
2085 * emulation, and free + reset pointers if necessary..
2086 */
2087 if (!cmd->t_data_sg_orig)
2088 return;
2089
2090 kfree(cmd->t_data_sg);
2091 cmd->t_data_sg = cmd->t_data_sg_orig;
2092 cmd->t_data_sg_orig = NULL;
2093 cmd->t_data_nents = cmd->t_data_nents_orig;
2094 cmd->t_data_nents_orig = 0;
2095}
2096
6708bb27
AG
2097static inline void transport_free_pages(struct se_cmd *cmd)
2098{
47e459e6
NB
2099 if (cmd->se_cmd_flags & SCF_PASSTHROUGH_SG_TO_MEM_NOALLOC) {
2100 transport_reset_sgl_orig(cmd);
6708bb27 2101 return;
47e459e6
NB
2102 }
2103 transport_reset_sgl_orig(cmd);
6708bb27
AG
2104
2105 transport_free_sgl(cmd->t_data_sg, cmd->t_data_nents);
ec98f782
AG
2106 cmd->t_data_sg = NULL;
2107 cmd->t_data_nents = 0;
c66ac9db 2108
6708bb27 2109 transport_free_sgl(cmd->t_bidi_data_sg, cmd->t_bidi_data_nents);
ec98f782
AG
2110 cmd->t_bidi_data_sg = NULL;
2111 cmd->t_bidi_data_nents = 0;
acb2bde3
SG
2112
2113 transport_free_sgl(cmd->t_prot_sg, cmd->t_prot_nents);
2114 cmd->t_prot_sg = NULL;
2115 cmd->t_prot_nents = 0;
c66ac9db
NB
2116}
2117
e26d99ae
CH
2118/**
2119 * transport_release_cmd - free a command
2120 * @cmd: command to free
2121 *
2122 * This routine unconditionally frees a command, and reference counting
2123 * or list removal must be done in the caller.
2124 */
d5ddad41 2125static int transport_release_cmd(struct se_cmd *cmd)
e26d99ae
CH
2126{
2127 BUG_ON(!cmd->se_tfo);
2128
c8e31f26 2129 if (cmd->se_cmd_flags & SCF_SCSI_TMR_CDB)
e26d99ae
CH
2130 core_tmr_release_req(cmd->se_tmr_req);
2131 if (cmd->t_task_cdb != cmd->__t_task_cdb)
2132 kfree(cmd->t_task_cdb);
2133 /*
7481deb4
NB
2134 * If this cmd has been setup with target_get_sess_cmd(), drop
2135 * the kref and call ->release_cmd() in kref callback.
e26d99ae 2136 */
ca24976a 2137 return target_put_sess_cmd(cmd->se_sess, cmd);
e26d99ae
CH
2138}
2139
d3df7825
CH
2140/**
2141 * transport_put_cmd - release a reference to a command
2142 * @cmd: command to release
2143 *
2144 * This routine releases our reference to the command and frees it if possible.
2145 */
d5ddad41 2146static int transport_put_cmd(struct se_cmd *cmd)
c66ac9db 2147{
c66ac9db 2148 transport_free_pages(cmd);
d5ddad41 2149 return transport_release_cmd(cmd);
c66ac9db 2150}
c66ac9db 2151
4949314c 2152void *transport_kmap_data_sg(struct se_cmd *cmd)
05d1c7c0 2153{
ec98f782 2154 struct scatterlist *sg = cmd->t_data_sg;
4949314c
AG
2155 struct page **pages;
2156 int i;
05d1c7c0
AG
2157
2158 /*
ec98f782
AG
2159 * We need to take into account a possible offset here for fabrics like
2160 * tcm_loop who may be using a contig buffer from the SCSI midlayer for
2161 * control CDBs passed as SGLs via transport_generic_map_mem_to_cmd()
05d1c7c0 2162 */
4949314c
AG
2163 if (!cmd->t_data_nents)
2164 return NULL;
3717ef0c
PB
2165
2166 BUG_ON(!sg);
2167 if (cmd->t_data_nents == 1)
4949314c
AG
2168 return kmap(sg_page(sg)) + sg->offset;
2169
2170 /* >1 page. use vmap */
2171 pages = kmalloc(sizeof(*pages) * cmd->t_data_nents, GFP_KERNEL);
de103c93 2172 if (!pages)
4949314c
AG
2173 return NULL;
2174
2175 /* convert sg[] to pages[] */
2176 for_each_sg(cmd->t_data_sg, sg, cmd->t_data_nents, i) {
2177 pages[i] = sg_page(sg);
2178 }
2179
2180 cmd->t_data_vmap = vmap(pages, cmd->t_data_nents, VM_MAP, PAGE_KERNEL);
2181 kfree(pages);
de103c93 2182 if (!cmd->t_data_vmap)
4949314c
AG
2183 return NULL;
2184
2185 return cmd->t_data_vmap + cmd->t_data_sg[0].offset;
05d1c7c0 2186}
4949314c 2187EXPORT_SYMBOL(transport_kmap_data_sg);
05d1c7c0 2188
4949314c 2189void transport_kunmap_data_sg(struct se_cmd *cmd)
05d1c7c0 2190{
a1edf9cf 2191 if (!cmd->t_data_nents) {
4949314c 2192 return;
a1edf9cf 2193 } else if (cmd->t_data_nents == 1) {
4949314c 2194 kunmap(sg_page(cmd->t_data_sg));
a1edf9cf
AG
2195 return;
2196 }
4949314c
AG
2197
2198 vunmap(cmd->t_data_vmap);
2199 cmd->t_data_vmap = NULL;
05d1c7c0 2200}
4949314c 2201EXPORT_SYMBOL(transport_kunmap_data_sg);
05d1c7c0 2202
c5ff8d6b 2203int
20093994
NB
2204target_alloc_sgl(struct scatterlist **sgl, unsigned int *nents, u32 length,
2205 bool zero_page)
c66ac9db 2206{
20093994 2207 struct scatterlist *sg;
ec98f782 2208 struct page *page;
20093994
NB
2209 gfp_t zero_flag = (zero_page) ? __GFP_ZERO : 0;
2210 unsigned int nent;
ec98f782 2211 int i = 0;
c66ac9db 2212
20093994
NB
2213 nent = DIV_ROUND_UP(length, PAGE_SIZE);
2214 sg = kmalloc(sizeof(struct scatterlist) * nent, GFP_KERNEL);
2215 if (!sg)
ec98f782 2216 return -ENOMEM;
c66ac9db 2217
20093994 2218 sg_init_table(sg, nent);
9db9da33 2219
ec98f782
AG
2220 while (length) {
2221 u32 page_len = min_t(u32, length, PAGE_SIZE);
9db9da33 2222 page = alloc_page(GFP_KERNEL | zero_flag);
ec98f782
AG
2223 if (!page)
2224 goto out;
c66ac9db 2225
20093994 2226 sg_set_page(&sg[i], page, page_len, 0);
ec98f782
AG
2227 length -= page_len;
2228 i++;
c66ac9db 2229 }
20093994
NB
2230 *sgl = sg;
2231 *nents = nent;
c66ac9db 2232 return 0;
c66ac9db 2233
ec98f782 2234out:
d0e27c88 2235 while (i > 0) {
ec98f782 2236 i--;
20093994 2237 __free_page(sg_page(&sg[i]));
c66ac9db 2238 }
20093994 2239 kfree(sg);
ec98f782 2240 return -ENOMEM;
c66ac9db
NB
2241}
2242
da0f7619 2243/*
b16a35b0
AG
2244 * Allocate any required resources to execute the command. For writes we
2245 * might not have the payload yet, so notify the fabric via a call to
2246 * ->write_pending instead. Otherwise place it on the execution queue.
c66ac9db 2247 */
de103c93
CH
2248sense_reason_t
2249transport_generic_new_cmd(struct se_cmd *cmd)
c66ac9db 2250{
c66ac9db
NB
2251 int ret = 0;
2252
2253 /*
2254 * Determine is the TCM fabric module has already allocated physical
2255 * memory, and is directly calling transport_generic_map_mem_to_cmd()
ec98f782 2256 * beforehand.
c66ac9db 2257 */
ec98f782
AG
2258 if (!(cmd->se_cmd_flags & SCF_PASSTHROUGH_SG_TO_MEM_NOALLOC) &&
2259 cmd->data_length) {
20093994
NB
2260 bool zero_flag = !(cmd->se_cmd_flags & SCF_SCSI_DATA_CDB);
2261
8cefe07b
NB
2262 if ((cmd->se_cmd_flags & SCF_BIDI) ||
2263 (cmd->se_cmd_flags & SCF_COMPARE_AND_WRITE)) {
2264 u32 bidi_length;
2265
2266 if (cmd->se_cmd_flags & SCF_COMPARE_AND_WRITE)
2267 bidi_length = cmd->t_task_nolb *
2268 cmd->se_dev->dev_attrib.block_size;
2269 else
2270 bidi_length = cmd->data_length;
2271
2272 ret = target_alloc_sgl(&cmd->t_bidi_data_sg,
2273 &cmd->t_bidi_data_nents,
2274 bidi_length, zero_flag);
2275 if (ret < 0)
2276 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE;
2277 }
2278
19f9361a 2279 if (cmd->prot_op != TARGET_PROT_NORMAL) {
acb2bde3
SG
2280 ret = target_alloc_sgl(&cmd->t_prot_sg,
2281 &cmd->t_prot_nents,
2282 cmd->prot_length, true);
2283 if (ret < 0)
2284 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE;
2285 }
2286
20093994
NB
2287 ret = target_alloc_sgl(&cmd->t_data_sg, &cmd->t_data_nents,
2288 cmd->data_length, zero_flag);
c66ac9db 2289 if (ret < 0)
de103c93 2290 return TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE;
c66ac9db 2291 }
c66ac9db 2292 /*
c3196f0c
CH
2293 * If this command is not a write we can execute it right here,
2294 * for write buffers we need to notify the fabric driver first
2295 * and let it call back once the write buffers are ready.
c66ac9db 2296 */
5f41a31d 2297 target_add_to_state_list(cmd);
c3196f0c
CH
2298 if (cmd->data_direction != DMA_TO_DEVICE) {
2299 target_execute_cmd(cmd);
2300 return 0;
2301 }
862e6389 2302 transport_cmd_check_stop(cmd, false, true);
c3196f0c
CH
2303
2304 ret = cmd->se_tfo->write_pending(cmd);
2305 if (ret == -EAGAIN || ret == -ENOMEM)
2306 goto queue_full;
2307
de103c93
CH
2308 /* fabric drivers should only return -EAGAIN or -ENOMEM as error */
2309 WARN_ON(ret);
2310
b69c1fcf 2311 return (!ret) ? 0 : TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE;
da0f7619 2312
c3196f0c
CH
2313queue_full:
2314 pr_debug("Handling write_pending QUEUE__FULL: se_cmd: %p\n", cmd);
2315 cmd->t_state = TRANSPORT_COMPLETE_QF_WP;
2316 transport_handle_queue_full(cmd, cmd->se_dev);
2317 return 0;
c66ac9db 2318}
a1d8b49a 2319EXPORT_SYMBOL(transport_generic_new_cmd);
c66ac9db 2320
e057f533 2321static void transport_write_pending_qf(struct se_cmd *cmd)
07bde79a 2322{
f147abb4
NB
2323 int ret;
2324
2325 ret = cmd->se_tfo->write_pending(cmd);
2326 if (ret == -EAGAIN || ret == -ENOMEM) {
e057f533
CH
2327 pr_debug("Handling write_pending QUEUE__FULL: se_cmd: %p\n",
2328 cmd);
2329 transport_handle_queue_full(cmd, cmd->se_dev);
2330 }
07bde79a
NB
2331}
2332
d5ddad41 2333int transport_generic_free_cmd(struct se_cmd *cmd, int wait_for_tasks)
c66ac9db 2334{
c130480b 2335 unsigned long flags;
d5ddad41
NB
2336 int ret = 0;
2337
d14921d6 2338 if (!(cmd->se_cmd_flags & SCF_SE_LUN_CMD)) {
c8e31f26 2339 if (wait_for_tasks && (cmd->se_cmd_flags & SCF_SCSI_TMR_CDB))
d14921d6
NB
2340 transport_wait_for_tasks(cmd);
2341
d5ddad41 2342 ret = transport_release_cmd(cmd);
d14921d6
NB
2343 } else {
2344 if (wait_for_tasks)
2345 transport_wait_for_tasks(cmd);
c130480b
NB
2346 /*
2347 * Handle WRITE failure case where transport_generic_new_cmd()
2348 * has already added se_cmd to state_list, but fabric has
2349 * failed command before I/O submission.
2350 */
2351 if (cmd->state_active) {
2352 spin_lock_irqsave(&cmd->t_state_lock, flags);
2353 target_remove_from_state_list(cmd);
2354 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
2355 }
d14921d6 2356
82f1c8a4 2357 if (cmd->se_lun)
c66ac9db 2358 transport_lun_remove_cmd(cmd);
c66ac9db 2359
d5ddad41 2360 ret = transport_put_cmd(cmd);
c66ac9db 2361 }
d5ddad41 2362 return ret;
c66ac9db
NB
2363}
2364EXPORT_SYMBOL(transport_generic_free_cmd);
2365
a17f091d
NB
2366/* target_get_sess_cmd - Add command to active ->sess_cmd_list
2367 * @se_sess: session to reference
2368 * @se_cmd: command descriptor to add
a6360785 2369 * @ack_kref: Signal that fabric will perform an ack target_put_sess_cmd()
a17f091d 2370 */
20361e69 2371int target_get_sess_cmd(struct se_session *se_sess, struct se_cmd *se_cmd,
bc187ea6 2372 bool ack_kref)
a17f091d
NB
2373{
2374 unsigned long flags;
bc187ea6 2375 int ret = 0;
a17f091d 2376
a6360785
NB
2377 /*
2378 * Add a second kref if the fabric caller is expecting to handle
2379 * fabric acknowledgement that requires two target_put_sess_cmd()
2380 * invocations before se_cmd descriptor release.
2381 */
0bcc297e 2382 if (ack_kref) {
a6360785 2383 kref_get(&se_cmd->cmd_kref);
86715569
NB
2384 se_cmd->se_cmd_flags |= SCF_ACK_KREF;
2385 }
7481deb4 2386
a17f091d 2387 spin_lock_irqsave(&se_sess->sess_cmd_lock, flags);
bc187ea6
RD
2388 if (se_sess->sess_tearing_down) {
2389 ret = -ESHUTDOWN;
2390 goto out;
2391 }
a17f091d 2392 list_add_tail(&se_cmd->se_cmd_list, &se_sess->sess_cmd_list);
bc187ea6 2393out:
a17f091d 2394 spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
bc187ea6 2395 return ret;
a17f091d 2396}
20361e69 2397EXPORT_SYMBOL(target_get_sess_cmd);
a17f091d 2398
7481deb4 2399static void target_release_cmd_kref(struct kref *kref)
a17f091d 2400{
7481deb4
NB
2401 struct se_cmd *se_cmd = container_of(kref, struct se_cmd, cmd_kref);
2402 struct se_session *se_sess = se_cmd->se_sess;
a17f091d 2403
a17f091d 2404 if (list_empty(&se_cmd->se_cmd_list)) {
ccf5ae83 2405 spin_unlock(&se_sess->sess_cmd_lock);
ffc32d52 2406 se_cmd->se_tfo->release_cmd(se_cmd);
7481deb4 2407 return;
a17f091d 2408 }
a17f091d 2409 if (se_sess->sess_tearing_down && se_cmd->cmd_wait_set) {
ccf5ae83 2410 spin_unlock(&se_sess->sess_cmd_lock);
a17f091d 2411 complete(&se_cmd->cmd_wait_comp);
7481deb4 2412 return;
a17f091d
NB
2413 }
2414 list_del(&se_cmd->se_cmd_list);
ccf5ae83 2415 spin_unlock(&se_sess->sess_cmd_lock);
a17f091d 2416
7481deb4
NB
2417 se_cmd->se_tfo->release_cmd(se_cmd);
2418}
2419
2420/* target_put_sess_cmd - Check for active I/O shutdown via kref_put
2421 * @se_sess: session to reference
2422 * @se_cmd: command descriptor to drop
2423 */
2424int target_put_sess_cmd(struct se_session *se_sess, struct se_cmd *se_cmd)
2425{
0ed6e189
NB
2426 if (!se_sess) {
2427 se_cmd->se_tfo->release_cmd(se_cmd);
2428 return 1;
2429 }
ccf5ae83
JE
2430 return kref_put_spinlock_irqsave(&se_cmd->cmd_kref, target_release_cmd_kref,
2431 &se_sess->sess_cmd_lock);
a17f091d
NB
2432}
2433EXPORT_SYMBOL(target_put_sess_cmd);
2434
1c7b13fe
RD
2435/* target_sess_cmd_list_set_waiting - Flag all commands in
2436 * sess_cmd_list to complete cmd_wait_comp. Set
2437 * sess_tearing_down so no more commands are queued.
2438 * @se_sess: session to flag
a17f091d 2439 */
1c7b13fe 2440void target_sess_cmd_list_set_waiting(struct se_session *se_sess)
a17f091d
NB
2441{
2442 struct se_cmd *se_cmd;
2443 unsigned long flags;
2444
a17f091d 2445 spin_lock_irqsave(&se_sess->sess_cmd_lock, flags);
9b31a328
NB
2446 if (se_sess->sess_tearing_down) {
2447 spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
2448 return;
2449 }
1c7b13fe 2450 se_sess->sess_tearing_down = 1;
9b31a328 2451 list_splice_init(&se_sess->sess_cmd_list, &se_sess->sess_wait_list);
a17f091d 2452
9b31a328 2453 list_for_each_entry(se_cmd, &se_sess->sess_wait_list, se_cmd_list)
a17f091d
NB
2454 se_cmd->cmd_wait_set = 1;
2455
2456 spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
2457}
1c7b13fe 2458EXPORT_SYMBOL(target_sess_cmd_list_set_waiting);
a17f091d
NB
2459
2460/* target_wait_for_sess_cmds - Wait for outstanding descriptors
2461 * @se_sess: session to wait for active I/O
a17f091d 2462 */
be646c2d 2463void target_wait_for_sess_cmds(struct se_session *se_sess)
a17f091d
NB
2464{
2465 struct se_cmd *se_cmd, *tmp_cmd;
9b31a328 2466 unsigned long flags;
a17f091d
NB
2467
2468 list_for_each_entry_safe(se_cmd, tmp_cmd,
9b31a328 2469 &se_sess->sess_wait_list, se_cmd_list) {
a17f091d
NB
2470 list_del(&se_cmd->se_cmd_list);
2471
2472 pr_debug("Waiting for se_cmd: %p t_state: %d, fabric state:"
2473 " %d\n", se_cmd, se_cmd->t_state,
2474 se_cmd->se_tfo->get_cmd_state(se_cmd));
2475
be646c2d
JE
2476 wait_for_completion(&se_cmd->cmd_wait_comp);
2477 pr_debug("After cmd_wait_comp: se_cmd: %p t_state: %d"
2478 " fabric state: %d\n", se_cmd, se_cmd->t_state,
2479 se_cmd->se_tfo->get_cmd_state(se_cmd));
a17f091d
NB
2480
2481 se_cmd->se_tfo->release_cmd(se_cmd);
2482 }
9b31a328
NB
2483
2484 spin_lock_irqsave(&se_sess->sess_cmd_lock, flags);
2485 WARN_ON(!list_empty(&se_sess->sess_cmd_list));
2486 spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
2487
a17f091d
NB
2488}
2489EXPORT_SYMBOL(target_wait_for_sess_cmds);
2490
5277797d 2491static int transport_clear_lun_ref_thread(void *p)
c66ac9db 2492{
8359cf43 2493 struct se_lun *lun = p;
c66ac9db 2494
5277797d
NB
2495 percpu_ref_kill(&lun->lun_ref);
2496
2497 wait_for_completion(&lun->lun_ref_comp);
c66ac9db
NB
2498 complete(&lun->lun_shutdown_comp);
2499
2500 return 0;
2501}
2502
5277797d 2503int transport_clear_lun_ref(struct se_lun *lun)
c66ac9db
NB
2504{
2505 struct task_struct *kt;
2506
5277797d 2507 kt = kthread_run(transport_clear_lun_ref_thread, lun,
c66ac9db
NB
2508 "tcm_cl_%u", lun->unpacked_lun);
2509 if (IS_ERR(kt)) {
6708bb27 2510 pr_err("Unable to start clear_lun thread\n");
e3d6f909 2511 return PTR_ERR(kt);
c66ac9db
NB
2512 }
2513 wait_for_completion(&lun->lun_shutdown_comp);
2514
2515 return 0;
2516}
2517
d14921d6
NB
2518/**
2519 * transport_wait_for_tasks - wait for completion to occur
2520 * @cmd: command to wait
c66ac9db 2521 *
d14921d6
NB
2522 * Called from frontend fabric context to wait for storage engine
2523 * to pause and/or release frontend generated struct se_cmd.
c66ac9db 2524 */
a17f091d 2525bool transport_wait_for_tasks(struct se_cmd *cmd)
c66ac9db
NB
2526{
2527 unsigned long flags;
2528
a1d8b49a 2529 spin_lock_irqsave(&cmd->t_state_lock, flags);
c8e31f26
AG
2530 if (!(cmd->se_cmd_flags & SCF_SE_LUN_CMD) &&
2531 !(cmd->se_cmd_flags & SCF_SCSI_TMR_CDB)) {
d14921d6 2532 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
a17f091d 2533 return false;
d14921d6 2534 }
cb4f4d3c 2535
c8e31f26
AG
2536 if (!(cmd->se_cmd_flags & SCF_SUPPORTED_SAM_OPCODE) &&
2537 !(cmd->se_cmd_flags & SCF_SCSI_TMR_CDB)) {
d14921d6 2538 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
a17f091d 2539 return false;
d14921d6 2540 }
7d680f3b 2541
3d28934a 2542 if (!(cmd->transport_state & CMD_T_ACTIVE)) {
d14921d6 2543 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
a17f091d 2544 return false;
d14921d6 2545 }
c66ac9db 2546
7d680f3b 2547 cmd->transport_state |= CMD_T_STOP;
c66ac9db 2548
6708bb27 2549 pr_debug("wait_for_tasks: Stopping %p ITT: 0x%08x"
7d680f3b 2550 " i_state: %d, t_state: %d, CMD_T_STOP\n",
f2da9dbd
CH
2551 cmd, cmd->se_tfo->get_task_tag(cmd),
2552 cmd->se_tfo->get_cmd_state(cmd), cmd->t_state);
c66ac9db 2553
a1d8b49a 2554 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db 2555
a1d8b49a 2556 wait_for_completion(&cmd->t_transport_stop_comp);
c66ac9db 2557
a1d8b49a 2558 spin_lock_irqsave(&cmd->t_state_lock, flags);
7d680f3b 2559 cmd->transport_state &= ~(CMD_T_ACTIVE | CMD_T_STOP);
c66ac9db 2560
35d1efe8 2561 pr_debug("wait_for_tasks: Stopped wait_for_completion("
a1d8b49a 2562 "&cmd->t_transport_stop_comp) for ITT: 0x%08x\n",
e3d6f909 2563 cmd->se_tfo->get_task_tag(cmd));
c66ac9db 2564
d14921d6 2565 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
a17f091d
NB
2566
2567 return true;
c66ac9db 2568}
d14921d6 2569EXPORT_SYMBOL(transport_wait_for_tasks);
c66ac9db
NB
2570
2571static int transport_get_sense_codes(
2572 struct se_cmd *cmd,
2573 u8 *asc,
2574 u8 *ascq)
2575{
2576 *asc = cmd->scsi_asc;
2577 *ascq = cmd->scsi_ascq;
2578
2579 return 0;
2580}
2581
76736db3
SG
2582static
2583void transport_err_sector_info(unsigned char *buffer, sector_t bad_sector)
2584{
2585 /* Place failed LBA in sense data information descriptor 0. */
2586 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 0xc;
2587 buffer[SPC_DESC_TYPE_OFFSET] = 0; /* Information */
2588 buffer[SPC_ADDITIONAL_DESC_LEN_OFFSET] = 0xa;
2589 buffer[SPC_VALIDITY_OFFSET] = 0x80;
2590
2591 /* Descriptor Information: failing sector */
2592 put_unaligned_be64(bad_sector, &buffer[12]);
2593}
2594
de103c93
CH
2595int
2596transport_send_check_condition_and_sense(struct se_cmd *cmd,
2597 sense_reason_t reason, int from_transport)
c66ac9db
NB
2598{
2599 unsigned char *buffer = cmd->sense_buffer;
2600 unsigned long flags;
c66ac9db
NB
2601 u8 asc = 0, ascq = 0;
2602
a1d8b49a 2603 spin_lock_irqsave(&cmd->t_state_lock, flags);
c66ac9db 2604 if (cmd->se_cmd_flags & SCF_SENT_CHECK_CONDITION) {
a1d8b49a 2605 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db
NB
2606 return 0;
2607 }
2608 cmd->se_cmd_flags |= SCF_SENT_CHECK_CONDITION;
a1d8b49a 2609 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db
NB
2610
2611 if (!reason && from_transport)
2612 goto after_reason;
2613
2614 if (!from_transport)
2615 cmd->se_cmd_flags |= SCF_EMULATED_TASK_SENSE;
9c58b7dd 2616
c66ac9db
NB
2617 /*
2618 * Actual SENSE DATA, see SPC-3 7.23.2 SPC_SENSE_KEY_OFFSET uses
2619 * SENSE KEY values from include/scsi/scsi.h
2620 */
2621 switch (reason) {
ba829137
HR
2622 case TCM_NO_SENSE:
2623 /* CURRENT ERROR */
2624 buffer[0] = 0x70;
2625 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
2626 /* Not Ready */
2627 buffer[SPC_SENSE_KEY_OFFSET] = NOT_READY;
2628 /* NO ADDITIONAL SENSE INFORMATION */
2629 buffer[SPC_ASC_KEY_OFFSET] = 0;
2630 buffer[SPC_ASCQ_KEY_OFFSET] = 0;
2631 break;
c66ac9db 2632 case TCM_NON_EXISTENT_LUN:
eb39d340 2633 /* CURRENT ERROR */
9c58b7dd
RD
2634 buffer[0] = 0x70;
2635 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
eb39d340 2636 /* ILLEGAL REQUEST */
9c58b7dd 2637 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
eb39d340 2638 /* LOGICAL UNIT NOT SUPPORTED */
9c58b7dd 2639 buffer[SPC_ASC_KEY_OFFSET] = 0x25;
eb39d340 2640 break;
c66ac9db
NB
2641 case TCM_UNSUPPORTED_SCSI_OPCODE:
2642 case TCM_SECTOR_COUNT_TOO_MANY:
2643 /* CURRENT ERROR */
9c58b7dd
RD
2644 buffer[0] = 0x70;
2645 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2646 /* ILLEGAL REQUEST */
9c58b7dd 2647 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
c66ac9db 2648 /* INVALID COMMAND OPERATION CODE */
9c58b7dd 2649 buffer[SPC_ASC_KEY_OFFSET] = 0x20;
c66ac9db
NB
2650 break;
2651 case TCM_UNKNOWN_MODE_PAGE:
2652 /* CURRENT ERROR */
9c58b7dd
RD
2653 buffer[0] = 0x70;
2654 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2655 /* ILLEGAL REQUEST */
9c58b7dd 2656 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
c66ac9db 2657 /* INVALID FIELD IN CDB */
9c58b7dd 2658 buffer[SPC_ASC_KEY_OFFSET] = 0x24;
c66ac9db
NB
2659 break;
2660 case TCM_CHECK_CONDITION_ABORT_CMD:
2661 /* CURRENT ERROR */
9c58b7dd
RD
2662 buffer[0] = 0x70;
2663 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2664 /* ABORTED COMMAND */
9c58b7dd 2665 buffer[SPC_SENSE_KEY_OFFSET] = ABORTED_COMMAND;
c66ac9db 2666 /* BUS DEVICE RESET FUNCTION OCCURRED */
9c58b7dd
RD
2667 buffer[SPC_ASC_KEY_OFFSET] = 0x29;
2668 buffer[SPC_ASCQ_KEY_OFFSET] = 0x03;
c66ac9db
NB
2669 break;
2670 case TCM_INCORRECT_AMOUNT_OF_DATA:
2671 /* CURRENT ERROR */
9c58b7dd
RD
2672 buffer[0] = 0x70;
2673 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2674 /* ABORTED COMMAND */
9c58b7dd 2675 buffer[SPC_SENSE_KEY_OFFSET] = ABORTED_COMMAND;
c66ac9db 2676 /* WRITE ERROR */
9c58b7dd 2677 buffer[SPC_ASC_KEY_OFFSET] = 0x0c;
c66ac9db 2678 /* NOT ENOUGH UNSOLICITED DATA */
9c58b7dd 2679 buffer[SPC_ASCQ_KEY_OFFSET] = 0x0d;
c66ac9db
NB
2680 break;
2681 case TCM_INVALID_CDB_FIELD:
2682 /* CURRENT ERROR */
9c58b7dd
RD
2683 buffer[0] = 0x70;
2684 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
9fbc8909 2685 /* ILLEGAL REQUEST */
9c58b7dd 2686 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
c66ac9db 2687 /* INVALID FIELD IN CDB */
9c58b7dd 2688 buffer[SPC_ASC_KEY_OFFSET] = 0x24;
c66ac9db
NB
2689 break;
2690 case TCM_INVALID_PARAMETER_LIST:
2691 /* CURRENT ERROR */
9c58b7dd
RD
2692 buffer[0] = 0x70;
2693 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
9fbc8909 2694 /* ILLEGAL REQUEST */
9c58b7dd 2695 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
c66ac9db 2696 /* INVALID FIELD IN PARAMETER LIST */
9c58b7dd 2697 buffer[SPC_ASC_KEY_OFFSET] = 0x26;
c66ac9db 2698 break;
bb992e72
RD
2699 case TCM_PARAMETER_LIST_LENGTH_ERROR:
2700 /* CURRENT ERROR */
2701 buffer[0] = 0x70;
2702 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
2703 /* ILLEGAL REQUEST */
2704 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
2705 /* PARAMETER LIST LENGTH ERROR */
2706 buffer[SPC_ASC_KEY_OFFSET] = 0x1a;
2707 break;
c66ac9db
NB
2708 case TCM_UNEXPECTED_UNSOLICITED_DATA:
2709 /* CURRENT ERROR */
9c58b7dd
RD
2710 buffer[0] = 0x70;
2711 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2712 /* ABORTED COMMAND */
9c58b7dd 2713 buffer[SPC_SENSE_KEY_OFFSET] = ABORTED_COMMAND;
c66ac9db 2714 /* WRITE ERROR */
9c58b7dd 2715 buffer[SPC_ASC_KEY_OFFSET] = 0x0c;
c66ac9db 2716 /* UNEXPECTED_UNSOLICITED_DATA */
9c58b7dd 2717 buffer[SPC_ASCQ_KEY_OFFSET] = 0x0c;
c66ac9db
NB
2718 break;
2719 case TCM_SERVICE_CRC_ERROR:
2720 /* CURRENT ERROR */
9c58b7dd
RD
2721 buffer[0] = 0x70;
2722 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2723 /* ABORTED COMMAND */
9c58b7dd 2724 buffer[SPC_SENSE_KEY_OFFSET] = ABORTED_COMMAND;
c66ac9db 2725 /* PROTOCOL SERVICE CRC ERROR */
9c58b7dd 2726 buffer[SPC_ASC_KEY_OFFSET] = 0x47;
c66ac9db 2727 /* N/A */
9c58b7dd 2728 buffer[SPC_ASCQ_KEY_OFFSET] = 0x05;
c66ac9db
NB
2729 break;
2730 case TCM_SNACK_REJECTED:
2731 /* CURRENT ERROR */
9c58b7dd
RD
2732 buffer[0] = 0x70;
2733 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2734 /* ABORTED COMMAND */
9c58b7dd 2735 buffer[SPC_SENSE_KEY_OFFSET] = ABORTED_COMMAND;
c66ac9db 2736 /* READ ERROR */
9c58b7dd 2737 buffer[SPC_ASC_KEY_OFFSET] = 0x11;
c66ac9db 2738 /* FAILED RETRANSMISSION REQUEST */
9c58b7dd 2739 buffer[SPC_ASCQ_KEY_OFFSET] = 0x13;
c66ac9db
NB
2740 break;
2741 case TCM_WRITE_PROTECTED:
2742 /* CURRENT ERROR */
9c58b7dd
RD
2743 buffer[0] = 0x70;
2744 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2745 /* DATA PROTECT */
9c58b7dd 2746 buffer[SPC_SENSE_KEY_OFFSET] = DATA_PROTECT;
c66ac9db 2747 /* WRITE PROTECTED */
9c58b7dd 2748 buffer[SPC_ASC_KEY_OFFSET] = 0x27;
c66ac9db 2749 break;
e2397c70
RD
2750 case TCM_ADDRESS_OUT_OF_RANGE:
2751 /* CURRENT ERROR */
9c58b7dd
RD
2752 buffer[0] = 0x70;
2753 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
e2397c70 2754 /* ILLEGAL REQUEST */
9c58b7dd 2755 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
e2397c70 2756 /* LOGICAL BLOCK ADDRESS OUT OF RANGE */
9c58b7dd 2757 buffer[SPC_ASC_KEY_OFFSET] = 0x21;
e2397c70 2758 break;
c66ac9db
NB
2759 case TCM_CHECK_CONDITION_UNIT_ATTENTION:
2760 /* CURRENT ERROR */
9c58b7dd
RD
2761 buffer[0] = 0x70;
2762 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2763 /* UNIT ATTENTION */
9c58b7dd 2764 buffer[SPC_SENSE_KEY_OFFSET] = UNIT_ATTENTION;
c66ac9db 2765 core_scsi3_ua_for_check_condition(cmd, &asc, &ascq);
9c58b7dd
RD
2766 buffer[SPC_ASC_KEY_OFFSET] = asc;
2767 buffer[SPC_ASCQ_KEY_OFFSET] = ascq;
c66ac9db
NB
2768 break;
2769 case TCM_CHECK_CONDITION_NOT_READY:
2770 /* CURRENT ERROR */
9c58b7dd
RD
2771 buffer[0] = 0x70;
2772 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
c66ac9db 2773 /* Not Ready */
9c58b7dd 2774 buffer[SPC_SENSE_KEY_OFFSET] = NOT_READY;
c66ac9db 2775 transport_get_sense_codes(cmd, &asc, &ascq);
9c58b7dd
RD
2776 buffer[SPC_ASC_KEY_OFFSET] = asc;
2777 buffer[SPC_ASCQ_KEY_OFFSET] = ascq;
c66ac9db 2778 break;
818b571c
NB
2779 case TCM_MISCOMPARE_VERIFY:
2780 /* CURRENT ERROR */
2781 buffer[0] = 0x70;
2782 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
2783 buffer[SPC_SENSE_KEY_OFFSET] = MISCOMPARE;
2784 /* MISCOMPARE DURING VERIFY OPERATION */
2785 buffer[SPC_ASC_KEY_OFFSET] = 0x1d;
2786 buffer[SPC_ASCQ_KEY_OFFSET] = 0x00;
2787 break;
fcc4f17b
NB
2788 case TCM_LOGICAL_BLOCK_GUARD_CHECK_FAILED:
2789 /* CURRENT ERROR */
2790 buffer[0] = 0x70;
2791 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
2792 /* ILLEGAL REQUEST */
2793 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
2794 /* LOGICAL BLOCK GUARD CHECK FAILED */
2795 buffer[SPC_ASC_KEY_OFFSET] = 0x10;
2796 buffer[SPC_ASCQ_KEY_OFFSET] = 0x01;
76736db3 2797 transport_err_sector_info(buffer, cmd->bad_sector);
fcc4f17b
NB
2798 break;
2799 case TCM_LOGICAL_BLOCK_APP_TAG_CHECK_FAILED:
2800 /* CURRENT ERROR */
2801 buffer[0] = 0x70;
2802 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
2803 /* ILLEGAL REQUEST */
2804 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
2805 /* LOGICAL BLOCK APPLICATION TAG CHECK FAILED */
2806 buffer[SPC_ASC_KEY_OFFSET] = 0x10;
2807 buffer[SPC_ASCQ_KEY_OFFSET] = 0x02;
76736db3 2808 transport_err_sector_info(buffer, cmd->bad_sector);
fcc4f17b
NB
2809 break;
2810 case TCM_LOGICAL_BLOCK_REF_TAG_CHECK_FAILED:
2811 /* CURRENT ERROR */
2812 buffer[0] = 0x70;
2813 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
2814 /* ILLEGAL REQUEST */
2815 buffer[SPC_SENSE_KEY_OFFSET] = ILLEGAL_REQUEST;
2816 /* LOGICAL BLOCK REFERENCE TAG CHECK FAILED */
2817 buffer[SPC_ASC_KEY_OFFSET] = 0x10;
2818 buffer[SPC_ASCQ_KEY_OFFSET] = 0x03;
76736db3 2819 transport_err_sector_info(buffer, cmd->bad_sector);
fcc4f17b 2820 break;
c66ac9db
NB
2821 case TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE:
2822 default:
2823 /* CURRENT ERROR */
9c58b7dd
RD
2824 buffer[0] = 0x70;
2825 buffer[SPC_ADD_SENSE_LEN_OFFSET] = 10;
ad673282
JE
2826 /*
2827 * Returning ILLEGAL REQUEST would cause immediate IO errors on
2828 * Solaris initiators. Returning NOT READY instead means the
2829 * operations will be retried a finite number of times and we
2830 * can survive intermittent errors.
2831 */
2832 buffer[SPC_SENSE_KEY_OFFSET] = NOT_READY;
c66ac9db 2833 /* LOGICAL UNIT COMMUNICATION FAILURE */
18a9df42 2834 buffer[SPC_ASC_KEY_OFFSET] = 0x08;
c66ac9db
NB
2835 break;
2836 }
2837 /*
2838 * This code uses linux/include/scsi/scsi.h SAM status codes!
2839 */
2840 cmd->scsi_status = SAM_STAT_CHECK_CONDITION;
2841 /*
2842 * Automatically padded, this value is encoded in the fabric's
2843 * data_length response PDU containing the SCSI defined sense data.
2844 */
9c58b7dd 2845 cmd->scsi_sense_length = TRANSPORT_SENSE_BUFFER;
c66ac9db
NB
2846
2847after_reason:
e5c0d6ad 2848 trace_target_cmd_complete(cmd);
07bde79a 2849 return cmd->se_tfo->queue_status(cmd);
c66ac9db
NB
2850}
2851EXPORT_SYMBOL(transport_send_check_condition_and_sense);
2852
2853int transport_check_aborted_status(struct se_cmd *cmd, int send_status)
2854{
c18bc7d8
RD
2855 if (!(cmd->transport_state & CMD_T_ABORTED))
2856 return 0;
c66ac9db 2857
68259b5a
AL
2858 /*
2859 * If cmd has been aborted but either no status is to be sent or it has
2860 * already been sent, just return
2861 */
2862 if (!send_status || !(cmd->se_cmd_flags & SCF_SEND_DELAYED_TAS))
c18bc7d8 2863 return 1;
8b1e1244 2864
c18bc7d8
RD
2865 pr_debug("Sending delayed SAM_STAT_TASK_ABORTED status for CDB: 0x%02x ITT: 0x%08x\n",
2866 cmd->t_task_cdb[0], cmd->se_tfo->get_task_tag(cmd));
8b1e1244 2867
68259b5a 2868 cmd->se_cmd_flags &= ~SCF_SEND_DELAYED_TAS;
29f4c090 2869 cmd->scsi_status = SAM_STAT_TASK_ABORTED;
e5c0d6ad 2870 trace_target_cmd_complete(cmd);
c18bc7d8
RD
2871 cmd->se_tfo->queue_status(cmd);
2872
2873 return 1;
c66ac9db
NB
2874}
2875EXPORT_SYMBOL(transport_check_aborted_status);
2876
2877void transport_send_task_abort(struct se_cmd *cmd)
2878{
c252f003
NB
2879 unsigned long flags;
2880
2881 spin_lock_irqsave(&cmd->t_state_lock, flags);
68259b5a 2882 if (cmd->se_cmd_flags & (SCF_SENT_CHECK_CONDITION)) {
c252f003
NB
2883 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
2884 return;
2885 }
2886 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
2887
c66ac9db
NB
2888 /*
2889 * If there are still expected incoming fabric WRITEs, we wait
2890 * until until they have completed before sending a TASK_ABORTED
2891 * response. This response with TASK_ABORTED status will be
2892 * queued back to fabric module by transport_check_aborted_status().
2893 */
2894 if (cmd->data_direction == DMA_TO_DEVICE) {
e3d6f909 2895 if (cmd->se_tfo->write_pending_status(cmd) != 0) {
7d680f3b 2896 cmd->transport_state |= CMD_T_ABORTED;
68259b5a 2897 cmd->se_cmd_flags |= SCF_SEND_DELAYED_TAS;
29f4c090 2898 return;
c66ac9db
NB
2899 }
2900 }
2901 cmd->scsi_status = SAM_STAT_TASK_ABORTED;
8b1e1244 2902
72b59d6e
RD
2903 transport_lun_remove_cmd(cmd);
2904
6708bb27 2905 pr_debug("Setting SAM_STAT_TASK_ABORTED status for CDB: 0x%02x,"
a1d8b49a 2906 " ITT: 0x%08x\n", cmd->t_task_cdb[0],
e3d6f909 2907 cmd->se_tfo->get_task_tag(cmd));
8b1e1244 2908
e5c0d6ad 2909 trace_target_cmd_complete(cmd);
e3d6f909 2910 cmd->se_tfo->queue_status(cmd);
c66ac9db
NB
2911}
2912
af877292 2913static void target_tmr_work(struct work_struct *work)
c66ac9db 2914{
af877292 2915 struct se_cmd *cmd = container_of(work, struct se_cmd, work);
5951146d 2916 struct se_device *dev = cmd->se_dev;
c66ac9db
NB
2917 struct se_tmr_req *tmr = cmd->se_tmr_req;
2918 int ret;
2919
2920 switch (tmr->function) {
5c6cd613 2921 case TMR_ABORT_TASK:
3d28934a 2922 core_tmr_abort_task(dev, tmr, cmd->se_sess);
c66ac9db 2923 break;
5c6cd613
NB
2924 case TMR_ABORT_TASK_SET:
2925 case TMR_CLEAR_ACA:
2926 case TMR_CLEAR_TASK_SET:
c66ac9db
NB
2927 tmr->response = TMR_TASK_MGMT_FUNCTION_NOT_SUPPORTED;
2928 break;
5c6cd613 2929 case TMR_LUN_RESET:
c66ac9db
NB
2930 ret = core_tmr_lun_reset(dev, tmr, NULL, NULL);
2931 tmr->response = (!ret) ? TMR_FUNCTION_COMPLETE :
2932 TMR_FUNCTION_REJECTED;
2933 break;
5c6cd613 2934 case TMR_TARGET_WARM_RESET:
c66ac9db
NB
2935 tmr->response = TMR_FUNCTION_REJECTED;
2936 break;
5c6cd613 2937 case TMR_TARGET_COLD_RESET:
c66ac9db
NB
2938 tmr->response = TMR_FUNCTION_REJECTED;
2939 break;
c66ac9db 2940 default:
6708bb27 2941 pr_err("Uknown TMR function: 0x%02x.\n",
c66ac9db
NB
2942 tmr->function);
2943 tmr->response = TMR_FUNCTION_REJECTED;
2944 break;
2945 }
2946
2947 cmd->t_state = TRANSPORT_ISTATE_PROCESSING;
e3d6f909 2948 cmd->se_tfo->queue_tm_rsp(cmd);
c66ac9db 2949
b7b8bef7 2950 transport_cmd_check_stop_to_fabric(cmd);
c66ac9db
NB
2951}
2952
af877292
CH
2953int transport_generic_handle_tmr(
2954 struct se_cmd *cmd)
c66ac9db 2955{
f15e9cd9
NB
2956 unsigned long flags;
2957
2958 spin_lock_irqsave(&cmd->t_state_lock, flags);
2959 cmd->transport_state |= CMD_T_ACTIVE;
2960 spin_unlock_irqrestore(&cmd->t_state_lock, flags);
2961
af877292
CH
2962 INIT_WORK(&cmd->work, target_tmr_work);
2963 queue_work(cmd->se_dev->tmr_wq, &cmd->work);
c66ac9db
NB
2964 return 0;
2965}
af877292 2966EXPORT_SYMBOL(transport_generic_handle_tmr);