1 // SPDX-License-Identifier: GPL-2.0
4 * Note that this is not the same as the USB Mass Storage driver
6 * Copyright Hans de Goede <hdegoede@redhat.com> for Red Hat, Inc. 2013 - 2016
7 * Copyright Matthew Wilcox for Intel Corp, 2010
8 * Copyright Sarah Sharp for Intel Corp, 2010
11 #include <linux/blkdev.h>
12 #include <linux/slab.h>
13 #include <linux/types.h>
14 #include <linux/module.h>
15 #include <linux/usb.h>
16 #include <linux/usb_usual.h>
17 #include <linux/usb/hcd.h>
18 #include <linux/usb/storage.h>
19 #include <linux/usb/uas.h>
21 #include <scsi/scsi.h>
22 #include <scsi/scsi_eh.h>
23 #include <scsi/scsi_dbg.h>
24 #include <scsi/scsi_cmnd.h>
25 #include <scsi/scsi_device.h>
26 #include <scsi/scsi_host.h>
27 #include <scsi/scsi_tcq.h>
29 #include "uas-detect.h"
35 struct usb_interface
*intf
;
36 struct usb_device
*udev
;
37 struct usb_anchor cmd_urbs
;
38 struct usb_anchor sense_urbs
;
39 struct usb_anchor data_urbs
;
41 int qdepth
, resetting
;
42 unsigned cmd_pipe
, status_pipe
, data_in_pipe
, data_out_pipe
;
43 unsigned use_streams
:1;
45 struct scsi_cmnd
*cmnd
[MAX_CMNDS
];
47 struct work_struct work
;
51 SUBMIT_STATUS_URB
= BIT(1),
52 ALLOC_DATA_IN_URB
= BIT(2),
53 SUBMIT_DATA_IN_URB
= BIT(3),
54 ALLOC_DATA_OUT_URB
= BIT(4),
55 SUBMIT_DATA_OUT_URB
= BIT(5),
56 ALLOC_CMD_URB
= BIT(6),
57 SUBMIT_CMD_URB
= BIT(7),
58 COMMAND_INFLIGHT
= BIT(8),
59 DATA_IN_URB_INFLIGHT
= BIT(9),
60 DATA_OUT_URB_INFLIGHT
= BIT(10),
61 COMMAND_ABORTED
= BIT(11),
62 IS_IN_WORK_LIST
= BIT(12),
65 /* Overrides scsi_pointer */
70 struct urb
*data_in_urb
;
71 struct urb
*data_out_urb
;
74 /* I hate forward declarations, but I actually have a loop */
75 static int uas_submit_urbs(struct scsi_cmnd
*cmnd
,
76 struct uas_dev_info
*devinfo
);
77 static void uas_do_work(struct work_struct
*work
);
78 static int uas_try_complete(struct scsi_cmnd
*cmnd
, const char *caller
);
79 static void uas_free_streams(struct uas_dev_info
*devinfo
);
80 static void uas_log_cmd_state(struct scsi_cmnd
*cmnd
, const char *prefix
,
83 static void uas_do_work(struct work_struct
*work
)
85 struct uas_dev_info
*devinfo
=
86 container_of(work
, struct uas_dev_info
, work
);
87 struct uas_cmd_info
*cmdinfo
;
88 struct scsi_cmnd
*cmnd
;
92 spin_lock_irqsave(&devinfo
->lock
, flags
);
94 if (devinfo
->resetting
)
97 for (i
= 0; i
< devinfo
->qdepth
; i
++) {
98 if (!devinfo
->cmnd
[i
])
101 cmnd
= devinfo
->cmnd
[i
];
102 cmdinfo
= (void *)&cmnd
->SCp
;
104 if (!(cmdinfo
->state
& IS_IN_WORK_LIST
))
107 err
= uas_submit_urbs(cmnd
, cmnd
->device
->hostdata
);
109 cmdinfo
->state
&= ~IS_IN_WORK_LIST
;
111 schedule_work(&devinfo
->work
);
114 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
117 static void uas_add_work(struct uas_cmd_info
*cmdinfo
)
119 struct scsi_pointer
*scp
= (void *)cmdinfo
;
120 struct scsi_cmnd
*cmnd
= container_of(scp
, struct scsi_cmnd
, SCp
);
121 struct uas_dev_info
*devinfo
= cmnd
->device
->hostdata
;
123 lockdep_assert_held(&devinfo
->lock
);
124 cmdinfo
->state
|= IS_IN_WORK_LIST
;
125 schedule_work(&devinfo
->work
);
128 static void uas_zap_pending(struct uas_dev_info
*devinfo
, int result
)
130 struct uas_cmd_info
*cmdinfo
;
131 struct scsi_cmnd
*cmnd
;
135 spin_lock_irqsave(&devinfo
->lock
, flags
);
136 for (i
= 0; i
< devinfo
->qdepth
; i
++) {
137 if (!devinfo
->cmnd
[i
])
140 cmnd
= devinfo
->cmnd
[i
];
141 cmdinfo
= (void *)&cmnd
->SCp
;
142 uas_log_cmd_state(cmnd
, __func__
, 0);
143 /* Sense urbs were killed, clear COMMAND_INFLIGHT manually */
144 cmdinfo
->state
&= ~COMMAND_INFLIGHT
;
145 cmnd
->result
= result
<< 16;
146 err
= uas_try_complete(cmnd
, __func__
);
149 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
152 static void uas_sense(struct urb
*urb
, struct scsi_cmnd
*cmnd
)
154 struct sense_iu
*sense_iu
= urb
->transfer_buffer
;
155 struct scsi_device
*sdev
= cmnd
->device
;
157 if (urb
->actual_length
> 16) {
158 unsigned len
= be16_to_cpup(&sense_iu
->len
);
159 if (len
+ 16 != urb
->actual_length
) {
160 int newlen
= min(len
+ 16, urb
->actual_length
) - 16;
163 sdev_printk(KERN_INFO
, sdev
, "%s: urb length %d "
164 "disagrees with IU sense data length %d, "
165 "using %d bytes of sense data\n", __func__
,
166 urb
->actual_length
, len
, newlen
);
169 memcpy(cmnd
->sense_buffer
, sense_iu
->sense
, len
);
172 cmnd
->result
= sense_iu
->status
;
175 static void uas_log_cmd_state(struct scsi_cmnd
*cmnd
, const char *prefix
,
178 struct uas_cmd_info
*ci
= (void *)&cmnd
->SCp
;
179 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
181 scmd_printk(KERN_INFO
, cmnd
,
182 "%s %d uas-tag %d inflight:%s%s%s%s%s%s%s%s%s%s%s%s ",
183 prefix
, status
, cmdinfo
->uas_tag
,
184 (ci
->state
& SUBMIT_STATUS_URB
) ? " s-st" : "",
185 (ci
->state
& ALLOC_DATA_IN_URB
) ? " a-in" : "",
186 (ci
->state
& SUBMIT_DATA_IN_URB
) ? " s-in" : "",
187 (ci
->state
& ALLOC_DATA_OUT_URB
) ? " a-out" : "",
188 (ci
->state
& SUBMIT_DATA_OUT_URB
) ? " s-out" : "",
189 (ci
->state
& ALLOC_CMD_URB
) ? " a-cmd" : "",
190 (ci
->state
& SUBMIT_CMD_URB
) ? " s-cmd" : "",
191 (ci
->state
& COMMAND_INFLIGHT
) ? " CMD" : "",
192 (ci
->state
& DATA_IN_URB_INFLIGHT
) ? " IN" : "",
193 (ci
->state
& DATA_OUT_URB_INFLIGHT
) ? " OUT" : "",
194 (ci
->state
& COMMAND_ABORTED
) ? " abort" : "",
195 (ci
->state
& IS_IN_WORK_LIST
) ? " work" : "");
196 scsi_print_command(cmnd
);
199 static void uas_free_unsubmitted_urbs(struct scsi_cmnd
*cmnd
)
201 struct uas_cmd_info
*cmdinfo
;
206 cmdinfo
= (void *)&cmnd
->SCp
;
208 if (cmdinfo
->state
& SUBMIT_CMD_URB
)
209 usb_free_urb(cmdinfo
->cmd_urb
);
211 /* data urbs may have never gotten their submit flag set */
212 if (!(cmdinfo
->state
& DATA_IN_URB_INFLIGHT
))
213 usb_free_urb(cmdinfo
->data_in_urb
);
214 if (!(cmdinfo
->state
& DATA_OUT_URB_INFLIGHT
))
215 usb_free_urb(cmdinfo
->data_out_urb
);
218 static int uas_try_complete(struct scsi_cmnd
*cmnd
, const char *caller
)
220 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
221 struct uas_dev_info
*devinfo
= (void *)cmnd
->device
->hostdata
;
223 lockdep_assert_held(&devinfo
->lock
);
224 if (cmdinfo
->state
& (COMMAND_INFLIGHT
|
225 DATA_IN_URB_INFLIGHT
|
226 DATA_OUT_URB_INFLIGHT
|
229 devinfo
->cmnd
[cmdinfo
->uas_tag
- 1] = NULL
;
230 uas_free_unsubmitted_urbs(cmnd
);
231 cmnd
->scsi_done(cmnd
);
235 static void uas_xfer_data(struct urb
*urb
, struct scsi_cmnd
*cmnd
,
238 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
241 cmdinfo
->state
|= direction
| SUBMIT_STATUS_URB
;
242 err
= uas_submit_urbs(cmnd
, cmnd
->device
->hostdata
);
244 uas_add_work(cmdinfo
);
248 static bool uas_evaluate_response_iu(struct response_iu
*riu
, struct scsi_cmnd
*cmnd
)
250 u8 response_code
= riu
->response_code
;
252 switch (response_code
) {
253 case RC_INCORRECT_LUN
:
254 cmnd
->result
= DID_BAD_TARGET
<< 16;
256 case RC_TMF_SUCCEEDED
:
257 cmnd
->result
= DID_OK
<< 16;
259 case RC_TMF_NOT_SUPPORTED
:
260 cmnd
->result
= DID_TARGET_FAILURE
<< 16;
263 uas_log_cmd_state(cmnd
, "response iu", response_code
);
264 cmnd
->result
= DID_ERROR
<< 16;
268 return response_code
== RC_TMF_SUCCEEDED
;
271 static void uas_stat_cmplt(struct urb
*urb
)
273 struct iu
*iu
= urb
->transfer_buffer
;
274 struct Scsi_Host
*shost
= urb
->context
;
275 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
276 struct urb
*data_in_urb
= NULL
;
277 struct urb
*data_out_urb
= NULL
;
278 struct scsi_cmnd
*cmnd
;
279 struct uas_cmd_info
*cmdinfo
;
282 int status
= urb
->status
;
285 spin_lock_irqsave(&devinfo
->lock
, flags
);
287 if (devinfo
->resetting
)
291 if (status
!= -ENOENT
&& status
!= -ECONNRESET
&& status
!= -ESHUTDOWN
)
292 dev_err(&urb
->dev
->dev
, "stat urb: status %d\n", status
);
296 idx
= be16_to_cpup(&iu
->tag
) - 1;
297 if (idx
>= MAX_CMNDS
|| !devinfo
->cmnd
[idx
]) {
298 dev_err(&urb
->dev
->dev
,
299 "stat urb: no pending cmd for uas-tag %d\n", idx
+ 1);
303 cmnd
= devinfo
->cmnd
[idx
];
304 cmdinfo
= (void *)&cmnd
->SCp
;
306 if (!(cmdinfo
->state
& COMMAND_INFLIGHT
)) {
307 uas_log_cmd_state(cmnd
, "unexpected status cmplt", 0);
313 uas_sense(urb
, cmnd
);
314 if (cmnd
->result
!= 0) {
315 /* cancel data transfers on error */
316 data_in_urb
= usb_get_urb(cmdinfo
->data_in_urb
);
317 data_out_urb
= usb_get_urb(cmdinfo
->data_out_urb
);
319 cmdinfo
->state
&= ~COMMAND_INFLIGHT
;
320 uas_try_complete(cmnd
, __func__
);
322 case IU_ID_READ_READY
:
323 if (!cmdinfo
->data_in_urb
||
324 (cmdinfo
->state
& DATA_IN_URB_INFLIGHT
)) {
325 uas_log_cmd_state(cmnd
, "unexpected read rdy", 0);
328 uas_xfer_data(urb
, cmnd
, SUBMIT_DATA_IN_URB
);
330 case IU_ID_WRITE_READY
:
331 if (!cmdinfo
->data_out_urb
||
332 (cmdinfo
->state
& DATA_OUT_URB_INFLIGHT
)) {
333 uas_log_cmd_state(cmnd
, "unexpected write rdy", 0);
336 uas_xfer_data(urb
, cmnd
, SUBMIT_DATA_OUT_URB
);
339 cmdinfo
->state
&= ~COMMAND_INFLIGHT
;
340 success
= uas_evaluate_response_iu((struct response_iu
*)iu
, cmnd
);
342 /* Error, cancel data transfers */
343 data_in_urb
= usb_get_urb(cmdinfo
->data_in_urb
);
344 data_out_urb
= usb_get_urb(cmdinfo
->data_out_urb
);
346 uas_try_complete(cmnd
, __func__
);
349 uas_log_cmd_state(cmnd
, "bogus IU", iu
->iu_id
);
353 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
355 /* Unlinking of data urbs must be done without holding the lock */
357 usb_unlink_urb(data_in_urb
);
358 usb_put_urb(data_in_urb
);
361 usb_unlink_urb(data_out_urb
);
362 usb_put_urb(data_out_urb
);
366 static void uas_data_cmplt(struct urb
*urb
)
368 struct scsi_cmnd
*cmnd
= urb
->context
;
369 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
370 struct uas_dev_info
*devinfo
= (void *)cmnd
->device
->hostdata
;
371 struct scsi_data_buffer
*sdb
= NULL
;
373 int status
= urb
->status
;
375 spin_lock_irqsave(&devinfo
->lock
, flags
);
377 if (cmdinfo
->data_in_urb
== urb
) {
379 cmdinfo
->state
&= ~DATA_IN_URB_INFLIGHT
;
380 cmdinfo
->data_in_urb
= NULL
;
381 } else if (cmdinfo
->data_out_urb
== urb
) {
382 sdb
= scsi_out(cmnd
);
383 cmdinfo
->state
&= ~DATA_OUT_URB_INFLIGHT
;
384 cmdinfo
->data_out_urb
= NULL
;
391 if (devinfo
->resetting
)
394 /* Data urbs should not complete before the cmd urb is submitted */
395 if (cmdinfo
->state
& SUBMIT_CMD_URB
) {
396 uas_log_cmd_state(cmnd
, "unexpected data cmplt", 0);
401 if (status
!= -ENOENT
&& status
!= -ECONNRESET
&& status
!= -ESHUTDOWN
)
402 uas_log_cmd_state(cmnd
, "data cmplt err", status
);
403 /* error: no data transfered */
404 sdb
->resid
= sdb
->length
;
406 sdb
->resid
= sdb
->length
- urb
->actual_length
;
408 uas_try_complete(cmnd
, __func__
);
411 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
414 static void uas_cmd_cmplt(struct urb
*urb
)
417 dev_err(&urb
->dev
->dev
, "cmd cmplt err %d\n", urb
->status
);
422 static struct urb
*uas_alloc_data_urb(struct uas_dev_info
*devinfo
, gfp_t gfp
,
423 struct scsi_cmnd
*cmnd
,
424 enum dma_data_direction dir
)
426 struct usb_device
*udev
= devinfo
->udev
;
427 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
428 struct urb
*urb
= usb_alloc_urb(0, gfp
);
429 struct scsi_data_buffer
*sdb
= (dir
== DMA_FROM_DEVICE
)
430 ? scsi_in(cmnd
) : scsi_out(cmnd
);
431 unsigned int pipe
= (dir
== DMA_FROM_DEVICE
)
432 ? devinfo
->data_in_pipe
: devinfo
->data_out_pipe
;
436 usb_fill_bulk_urb(urb
, udev
, pipe
, NULL
, sdb
->length
,
437 uas_data_cmplt
, cmnd
);
438 if (devinfo
->use_streams
)
439 urb
->stream_id
= cmdinfo
->uas_tag
;
440 urb
->num_sgs
= udev
->bus
->sg_tablesize
? sdb
->table
.nents
: 0;
441 urb
->sg
= sdb
->table
.sgl
;
446 static struct urb
*uas_alloc_sense_urb(struct uas_dev_info
*devinfo
, gfp_t gfp
,
447 struct scsi_cmnd
*cmnd
)
449 struct usb_device
*udev
= devinfo
->udev
;
450 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
451 struct urb
*urb
= usb_alloc_urb(0, gfp
);
457 iu
= kzalloc(sizeof(*iu
), gfp
);
461 usb_fill_bulk_urb(urb
, udev
, devinfo
->status_pipe
, iu
, sizeof(*iu
),
462 uas_stat_cmplt
, cmnd
->device
->host
);
463 if (devinfo
->use_streams
)
464 urb
->stream_id
= cmdinfo
->uas_tag
;
465 urb
->transfer_flags
|= URB_FREE_BUFFER
;
473 static struct urb
*uas_alloc_cmd_urb(struct uas_dev_info
*devinfo
, gfp_t gfp
,
474 struct scsi_cmnd
*cmnd
)
476 struct usb_device
*udev
= devinfo
->udev
;
477 struct scsi_device
*sdev
= cmnd
->device
;
478 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
479 struct urb
*urb
= usb_alloc_urb(0, gfp
);
480 struct command_iu
*iu
;
486 len
= cmnd
->cmd_len
- 16;
490 iu
= kzalloc(sizeof(*iu
) + len
, gfp
);
494 iu
->iu_id
= IU_ID_COMMAND
;
495 iu
->tag
= cpu_to_be16(cmdinfo
->uas_tag
);
496 iu
->prio_attr
= UAS_SIMPLE_TAG
;
498 int_to_scsilun(sdev
->lun
, &iu
->lun
);
499 memcpy(iu
->cdb
, cmnd
->cmnd
, cmnd
->cmd_len
);
501 usb_fill_bulk_urb(urb
, udev
, devinfo
->cmd_pipe
, iu
, sizeof(*iu
) + len
,
502 uas_cmd_cmplt
, NULL
);
503 urb
->transfer_flags
|= URB_FREE_BUFFER
;
512 * Why should I request the Status IU before sending the Command IU? Spec
513 * says to, but also says the device may receive them in any order. Seems
517 static struct urb
*uas_submit_sense_urb(struct scsi_cmnd
*cmnd
, gfp_t gfp
)
519 struct uas_dev_info
*devinfo
= cmnd
->device
->hostdata
;
523 urb
= uas_alloc_sense_urb(devinfo
, gfp
, cmnd
);
526 usb_anchor_urb(urb
, &devinfo
->sense_urbs
);
527 err
= usb_submit_urb(urb
, gfp
);
529 usb_unanchor_urb(urb
);
530 uas_log_cmd_state(cmnd
, "sense submit err", err
);
537 static int uas_submit_urbs(struct scsi_cmnd
*cmnd
,
538 struct uas_dev_info
*devinfo
)
540 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
544 lockdep_assert_held(&devinfo
->lock
);
545 if (cmdinfo
->state
& SUBMIT_STATUS_URB
) {
546 urb
= uas_submit_sense_urb(cmnd
, GFP_ATOMIC
);
548 return SCSI_MLQUEUE_DEVICE_BUSY
;
549 cmdinfo
->state
&= ~SUBMIT_STATUS_URB
;
552 if (cmdinfo
->state
& ALLOC_DATA_IN_URB
) {
553 cmdinfo
->data_in_urb
= uas_alloc_data_urb(devinfo
, GFP_ATOMIC
,
554 cmnd
, DMA_FROM_DEVICE
);
555 if (!cmdinfo
->data_in_urb
)
556 return SCSI_MLQUEUE_DEVICE_BUSY
;
557 cmdinfo
->state
&= ~ALLOC_DATA_IN_URB
;
560 if (cmdinfo
->state
& SUBMIT_DATA_IN_URB
) {
561 usb_anchor_urb(cmdinfo
->data_in_urb
, &devinfo
->data_urbs
);
562 err
= usb_submit_urb(cmdinfo
->data_in_urb
, GFP_ATOMIC
);
564 usb_unanchor_urb(cmdinfo
->data_in_urb
);
565 uas_log_cmd_state(cmnd
, "data in submit err", err
);
566 return SCSI_MLQUEUE_DEVICE_BUSY
;
568 cmdinfo
->state
&= ~SUBMIT_DATA_IN_URB
;
569 cmdinfo
->state
|= DATA_IN_URB_INFLIGHT
;
572 if (cmdinfo
->state
& ALLOC_DATA_OUT_URB
) {
573 cmdinfo
->data_out_urb
= uas_alloc_data_urb(devinfo
, GFP_ATOMIC
,
574 cmnd
, DMA_TO_DEVICE
);
575 if (!cmdinfo
->data_out_urb
)
576 return SCSI_MLQUEUE_DEVICE_BUSY
;
577 cmdinfo
->state
&= ~ALLOC_DATA_OUT_URB
;
580 if (cmdinfo
->state
& SUBMIT_DATA_OUT_URB
) {
581 usb_anchor_urb(cmdinfo
->data_out_urb
, &devinfo
->data_urbs
);
582 err
= usb_submit_urb(cmdinfo
->data_out_urb
, GFP_ATOMIC
);
584 usb_unanchor_urb(cmdinfo
->data_out_urb
);
585 uas_log_cmd_state(cmnd
, "data out submit err", err
);
586 return SCSI_MLQUEUE_DEVICE_BUSY
;
588 cmdinfo
->state
&= ~SUBMIT_DATA_OUT_URB
;
589 cmdinfo
->state
|= DATA_OUT_URB_INFLIGHT
;
592 if (cmdinfo
->state
& ALLOC_CMD_URB
) {
593 cmdinfo
->cmd_urb
= uas_alloc_cmd_urb(devinfo
, GFP_ATOMIC
, cmnd
);
594 if (!cmdinfo
->cmd_urb
)
595 return SCSI_MLQUEUE_DEVICE_BUSY
;
596 cmdinfo
->state
&= ~ALLOC_CMD_URB
;
599 if (cmdinfo
->state
& SUBMIT_CMD_URB
) {
600 usb_anchor_urb(cmdinfo
->cmd_urb
, &devinfo
->cmd_urbs
);
601 err
= usb_submit_urb(cmdinfo
->cmd_urb
, GFP_ATOMIC
);
603 usb_unanchor_urb(cmdinfo
->cmd_urb
);
604 uas_log_cmd_state(cmnd
, "cmd submit err", err
);
605 return SCSI_MLQUEUE_DEVICE_BUSY
;
607 cmdinfo
->cmd_urb
= NULL
;
608 cmdinfo
->state
&= ~SUBMIT_CMD_URB
;
609 cmdinfo
->state
|= COMMAND_INFLIGHT
;
615 static int uas_queuecommand_lck(struct scsi_cmnd
*cmnd
,
616 void (*done
)(struct scsi_cmnd
*))
618 struct scsi_device
*sdev
= cmnd
->device
;
619 struct uas_dev_info
*devinfo
= sdev
->hostdata
;
620 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
624 BUILD_BUG_ON(sizeof(struct uas_cmd_info
) > sizeof(struct scsi_pointer
));
626 /* Re-check scsi_block_requests now that we've the host-lock */
627 if (cmnd
->device
->host
->host_self_blocked
)
628 return SCSI_MLQUEUE_DEVICE_BUSY
;
630 if ((devinfo
->flags
& US_FL_NO_ATA_1X
) &&
631 (cmnd
->cmnd
[0] == ATA_12
|| cmnd
->cmnd
[0] == ATA_16
)) {
632 memcpy(cmnd
->sense_buffer
, usb_stor_sense_invalidCDB
,
633 sizeof(usb_stor_sense_invalidCDB
));
634 cmnd
->result
= SAM_STAT_CHECK_CONDITION
;
635 cmnd
->scsi_done(cmnd
);
639 spin_lock_irqsave(&devinfo
->lock
, flags
);
641 if (devinfo
->resetting
) {
642 cmnd
->result
= DID_ERROR
<< 16;
643 cmnd
->scsi_done(cmnd
);
644 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
648 /* Find a free uas-tag */
649 for (idx
= 0; idx
< devinfo
->qdepth
; idx
++) {
650 if (!devinfo
->cmnd
[idx
])
653 if (idx
== devinfo
->qdepth
) {
654 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
655 return SCSI_MLQUEUE_DEVICE_BUSY
;
658 cmnd
->scsi_done
= done
;
660 memset(cmdinfo
, 0, sizeof(*cmdinfo
));
661 cmdinfo
->uas_tag
= idx
+ 1; /* uas-tag == usb-stream-id, so 1 based */
662 cmdinfo
->state
= SUBMIT_STATUS_URB
| ALLOC_CMD_URB
| SUBMIT_CMD_URB
;
664 switch (cmnd
->sc_data_direction
) {
665 case DMA_FROM_DEVICE
:
666 cmdinfo
->state
|= ALLOC_DATA_IN_URB
| SUBMIT_DATA_IN_URB
;
668 case DMA_BIDIRECTIONAL
:
669 cmdinfo
->state
|= ALLOC_DATA_IN_URB
| SUBMIT_DATA_IN_URB
;
672 cmdinfo
->state
|= ALLOC_DATA_OUT_URB
| SUBMIT_DATA_OUT_URB
;
677 if (!devinfo
->use_streams
)
678 cmdinfo
->state
&= ~(SUBMIT_DATA_IN_URB
| SUBMIT_DATA_OUT_URB
);
680 err
= uas_submit_urbs(cmnd
, devinfo
);
682 /* If we did nothing, give up now */
683 if (cmdinfo
->state
& SUBMIT_STATUS_URB
) {
684 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
685 return SCSI_MLQUEUE_DEVICE_BUSY
;
687 uas_add_work(cmdinfo
);
690 devinfo
->cmnd
[idx
] = cmnd
;
691 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
695 static DEF_SCSI_QCMD(uas_queuecommand
)
698 * For now we do not support actually sending an abort to the device, so
699 * this eh always fails. Still we must define it to make sure that we've
700 * dropped all references to the cmnd in question once this function exits.
702 static int uas_eh_abort_handler(struct scsi_cmnd
*cmnd
)
704 struct uas_cmd_info
*cmdinfo
= (void *)&cmnd
->SCp
;
705 struct uas_dev_info
*devinfo
= (void *)cmnd
->device
->hostdata
;
706 struct urb
*data_in_urb
= NULL
;
707 struct urb
*data_out_urb
= NULL
;
710 spin_lock_irqsave(&devinfo
->lock
, flags
);
712 uas_log_cmd_state(cmnd
, __func__
, 0);
714 /* Ensure that try_complete does not call scsi_done */
715 cmdinfo
->state
|= COMMAND_ABORTED
;
717 /* Drop all refs to this cmnd, kill data urbs to break their ref */
718 devinfo
->cmnd
[cmdinfo
->uas_tag
- 1] = NULL
;
719 if (cmdinfo
->state
& DATA_IN_URB_INFLIGHT
)
720 data_in_urb
= usb_get_urb(cmdinfo
->data_in_urb
);
721 if (cmdinfo
->state
& DATA_OUT_URB_INFLIGHT
)
722 data_out_urb
= usb_get_urb(cmdinfo
->data_out_urb
);
724 uas_free_unsubmitted_urbs(cmnd
);
726 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
729 usb_kill_urb(data_in_urb
);
730 usb_put_urb(data_in_urb
);
733 usb_kill_urb(data_out_urb
);
734 usb_put_urb(data_out_urb
);
740 static int uas_eh_device_reset_handler(struct scsi_cmnd
*cmnd
)
742 struct scsi_device
*sdev
= cmnd
->device
;
743 struct uas_dev_info
*devinfo
= sdev
->hostdata
;
744 struct usb_device
*udev
= devinfo
->udev
;
748 err
= usb_lock_device_for_reset(udev
, devinfo
->intf
);
750 shost_printk(KERN_ERR
, sdev
->host
,
751 "%s FAILED to get lock err %d\n", __func__
, err
);
755 shost_printk(KERN_INFO
, sdev
->host
, "%s start\n", __func__
);
757 spin_lock_irqsave(&devinfo
->lock
, flags
);
758 devinfo
->resetting
= 1;
759 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
761 usb_kill_anchored_urbs(&devinfo
->cmd_urbs
);
762 usb_kill_anchored_urbs(&devinfo
->sense_urbs
);
763 usb_kill_anchored_urbs(&devinfo
->data_urbs
);
764 uas_zap_pending(devinfo
, DID_RESET
);
766 err
= usb_reset_device(udev
);
768 spin_lock_irqsave(&devinfo
->lock
, flags
);
769 devinfo
->resetting
= 0;
770 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
772 usb_unlock_device(udev
);
775 shost_printk(KERN_INFO
, sdev
->host
, "%s FAILED err %d\n",
780 shost_printk(KERN_INFO
, sdev
->host
, "%s success\n", __func__
);
784 static int uas_target_alloc(struct scsi_target
*starget
)
786 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)
787 dev_to_shost(starget
->dev
.parent
)->hostdata
;
789 if (devinfo
->flags
& US_FL_NO_REPORT_LUNS
)
790 starget
->no_report_luns
= 1;
795 static int uas_slave_alloc(struct scsi_device
*sdev
)
797 struct uas_dev_info
*devinfo
=
798 (struct uas_dev_info
*)sdev
->host
->hostdata
;
800 sdev
->hostdata
= devinfo
;
803 * USB has unusual DMA-alignment requirements: Although the
804 * starting address of each scatter-gather element doesn't matter,
805 * the length of each element except the last must be divisible
806 * by the Bulk maxpacket value. There's currently no way to
807 * express this by block-layer constraints, so we'll cop out
808 * and simply require addresses to be aligned at 512-byte
809 * boundaries. This is okay since most block I/O involves
810 * hardware sectors that are multiples of 512 bytes in length,
811 * and since host controllers up through USB 2.0 have maxpacket
812 * values no larger than 512.
814 * But it doesn't suffice for Wireless USB, where Bulk maxpacket
815 * values can be as large as 2048. To make that work properly
816 * will require changes to the block layer.
818 blk_queue_update_dma_alignment(sdev
->request_queue
, (512 - 1));
820 if (devinfo
->flags
& US_FL_MAX_SECTORS_64
)
821 blk_queue_max_hw_sectors(sdev
->request_queue
, 64);
822 else if (devinfo
->flags
& US_FL_MAX_SECTORS_240
)
823 blk_queue_max_hw_sectors(sdev
->request_queue
, 240);
828 static int uas_slave_configure(struct scsi_device
*sdev
)
830 struct uas_dev_info
*devinfo
= sdev
->hostdata
;
832 if (devinfo
->flags
& US_FL_NO_REPORT_OPCODES
)
833 sdev
->no_report_opcodes
= 1;
835 /* A few buggy USB-ATA bridges don't understand FUA */
836 if (devinfo
->flags
& US_FL_BROKEN_FUA
)
837 sdev
->broken_fua
= 1;
839 /* UAS also needs to support FL_ALWAYS_SYNC */
840 if (devinfo
->flags
& US_FL_ALWAYS_SYNC
) {
841 sdev
->skip_ms_page_3f
= 1;
842 sdev
->skip_ms_page_8
= 1;
843 sdev
->wce_default_on
= 1;
847 * Some disks return the total number of blocks in response
848 * to READ CAPACITY rather than the highest block number.
849 * If this device makes that mistake, tell the sd driver.
851 if (devinfo
->flags
& US_FL_FIX_CAPACITY
)
852 sdev
->fix_capacity
= 1;
855 * Some devices don't like MODE SENSE with page=0x3f,
856 * which is the command used for checking if a device
857 * is write-protected. Now that we tell the sd driver
858 * to do a 192-byte transfer with this command the
859 * majority of devices work fine, but a few still can't
860 * handle it. The sd driver will simply assume those
861 * devices are write-enabled.
863 if (devinfo
->flags
& US_FL_NO_WP_DETECT
)
864 sdev
->skip_ms_page_3f
= 1;
866 scsi_change_queue_depth(sdev
, devinfo
->qdepth
- 2);
870 static struct scsi_host_template uas_host_template
= {
871 .module
= THIS_MODULE
,
873 .queuecommand
= uas_queuecommand
,
874 .target_alloc
= uas_target_alloc
,
875 .slave_alloc
= uas_slave_alloc
,
876 .slave_configure
= uas_slave_configure
,
877 .eh_abort_handler
= uas_eh_abort_handler
,
878 .eh_device_reset_handler
= uas_eh_device_reset_handler
,
880 .sg_tablesize
= SG_NONE
,
881 .skip_settle_delay
= 1,
884 #define UNUSUAL_DEV(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax, \
885 vendorName, productName, useProtocol, useTransport, \
886 initFunction, flags) \
887 { USB_DEVICE_VER(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax), \
888 .driver_info = (flags) }
890 static struct usb_device_id uas_usb_ids
[] = {
891 # include "unusual_uas.h"
892 { USB_INTERFACE_INFO(USB_CLASS_MASS_STORAGE
, USB_SC_SCSI
, USB_PR_BULK
) },
893 { USB_INTERFACE_INFO(USB_CLASS_MASS_STORAGE
, USB_SC_SCSI
, USB_PR_UAS
) },
896 MODULE_DEVICE_TABLE(usb
, uas_usb_ids
);
900 static int uas_switch_interface(struct usb_device
*udev
,
901 struct usb_interface
*intf
)
903 struct usb_host_interface
*alt
;
905 alt
= uas_find_uas_alt_setting(intf
);
909 return usb_set_interface(udev
, alt
->desc
.bInterfaceNumber
,
910 alt
->desc
.bAlternateSetting
);
913 static int uas_configure_endpoints(struct uas_dev_info
*devinfo
)
915 struct usb_host_endpoint
*eps
[4] = { };
916 struct usb_device
*udev
= devinfo
->udev
;
919 r
= uas_find_endpoints(devinfo
->intf
->cur_altsetting
, eps
);
923 devinfo
->cmd_pipe
= usb_sndbulkpipe(udev
,
924 usb_endpoint_num(&eps
[0]->desc
));
925 devinfo
->status_pipe
= usb_rcvbulkpipe(udev
,
926 usb_endpoint_num(&eps
[1]->desc
));
927 devinfo
->data_in_pipe
= usb_rcvbulkpipe(udev
,
928 usb_endpoint_num(&eps
[2]->desc
));
929 devinfo
->data_out_pipe
= usb_sndbulkpipe(udev
,
930 usb_endpoint_num(&eps
[3]->desc
));
932 if (udev
->speed
< USB_SPEED_SUPER
) {
933 devinfo
->qdepth
= 32;
934 devinfo
->use_streams
= 0;
936 devinfo
->qdepth
= usb_alloc_streams(devinfo
->intf
, eps
+ 1,
937 3, MAX_CMNDS
, GFP_NOIO
);
938 if (devinfo
->qdepth
< 0)
939 return devinfo
->qdepth
;
940 devinfo
->use_streams
= 1;
946 static void uas_free_streams(struct uas_dev_info
*devinfo
)
948 struct usb_device
*udev
= devinfo
->udev
;
949 struct usb_host_endpoint
*eps
[3];
951 eps
[0] = usb_pipe_endpoint(udev
, devinfo
->status_pipe
);
952 eps
[1] = usb_pipe_endpoint(udev
, devinfo
->data_in_pipe
);
953 eps
[2] = usb_pipe_endpoint(udev
, devinfo
->data_out_pipe
);
954 usb_free_streams(devinfo
->intf
, eps
, 3, GFP_NOIO
);
957 static int uas_probe(struct usb_interface
*intf
, const struct usb_device_id
*id
)
959 int result
= -ENOMEM
;
960 struct Scsi_Host
*shost
= NULL
;
961 struct uas_dev_info
*devinfo
;
962 struct usb_device
*udev
= interface_to_usbdev(intf
);
963 unsigned long dev_flags
;
965 if (!uas_use_uas_driver(intf
, id
, &dev_flags
))
968 if (uas_switch_interface(udev
, intf
))
971 shost
= scsi_host_alloc(&uas_host_template
,
972 sizeof(struct uas_dev_info
));
976 shost
->max_cmd_len
= 16 + 252;
978 shost
->max_lun
= 256;
979 shost
->max_channel
= 0;
980 shost
->sg_tablesize
= udev
->bus
->sg_tablesize
;
982 devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
983 devinfo
->intf
= intf
;
984 devinfo
->udev
= udev
;
985 devinfo
->resetting
= 0;
986 devinfo
->shutdown
= 0;
987 devinfo
->flags
= dev_flags
;
988 init_usb_anchor(&devinfo
->cmd_urbs
);
989 init_usb_anchor(&devinfo
->sense_urbs
);
990 init_usb_anchor(&devinfo
->data_urbs
);
991 spin_lock_init(&devinfo
->lock
);
992 INIT_WORK(&devinfo
->work
, uas_do_work
);
994 result
= uas_configure_endpoints(devinfo
);
999 * 1 tag is reserved for untagged commands +
1000 * 1 tag to avoid off by one errors in some bridge firmwares
1002 shost
->can_queue
= devinfo
->qdepth
- 2;
1004 usb_set_intfdata(intf
, shost
);
1005 result
= scsi_add_host(shost
, &intf
->dev
);
1009 scsi_scan_host(shost
);
1013 uas_free_streams(devinfo
);
1014 usb_set_intfdata(intf
, NULL
);
1016 usb_set_interface(udev
, intf
->altsetting
[0].desc
.bInterfaceNumber
, 0);
1018 scsi_host_put(shost
);
1022 static int uas_cmnd_list_empty(struct uas_dev_info
*devinfo
)
1024 unsigned long flags
;
1027 spin_lock_irqsave(&devinfo
->lock
, flags
);
1029 for (i
= 0; i
< devinfo
->qdepth
; i
++) {
1030 if (devinfo
->cmnd
[i
]) {
1031 r
= 0; /* Not empty */
1036 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
1042 * Wait for any pending cmnds to complete, on usb-2 sense_urbs may temporarily
1043 * get empty while there still is more work to do due to sense-urbs completing
1044 * with a READ/WRITE_READY iu code, so keep waiting until the list gets empty.
1046 static int uas_wait_for_pending_cmnds(struct uas_dev_info
*devinfo
)
1048 unsigned long start_time
;
1051 start_time
= jiffies
;
1053 flush_work(&devinfo
->work
);
1055 r
= usb_wait_anchor_empty_timeout(&devinfo
->sense_urbs
, 5000);
1059 r
= usb_wait_anchor_empty_timeout(&devinfo
->data_urbs
, 500);
1063 if (time_after(jiffies
, start_time
+ 5 * HZ
))
1065 } while (!uas_cmnd_list_empty(devinfo
));
1070 static int uas_pre_reset(struct usb_interface
*intf
)
1072 struct Scsi_Host
*shost
= usb_get_intfdata(intf
);
1073 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
1074 unsigned long flags
;
1076 if (devinfo
->shutdown
)
1079 /* Block new requests */
1080 spin_lock_irqsave(shost
->host_lock
, flags
);
1081 scsi_block_requests(shost
);
1082 spin_unlock_irqrestore(shost
->host_lock
, flags
);
1084 if (uas_wait_for_pending_cmnds(devinfo
) != 0) {
1085 shost_printk(KERN_ERR
, shost
, "%s: timed out\n", __func__
);
1086 scsi_unblock_requests(shost
);
1090 uas_free_streams(devinfo
);
1095 static int uas_post_reset(struct usb_interface
*intf
)
1097 struct Scsi_Host
*shost
= usb_get_intfdata(intf
);
1098 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
1099 unsigned long flags
;
1102 if (devinfo
->shutdown
)
1105 err
= uas_configure_endpoints(devinfo
);
1106 if (err
&& err
!= -ENODEV
)
1107 shost_printk(KERN_ERR
, shost
,
1108 "%s: alloc streams error %d after reset",
1111 /* we must unblock the host in every case lest we deadlock */
1112 spin_lock_irqsave(shost
->host_lock
, flags
);
1113 scsi_report_bus_reset(shost
, 0);
1114 spin_unlock_irqrestore(shost
->host_lock
, flags
);
1116 scsi_unblock_requests(shost
);
1121 static int uas_suspend(struct usb_interface
*intf
, pm_message_t message
)
1123 struct Scsi_Host
*shost
= usb_get_intfdata(intf
);
1124 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
1126 if (uas_wait_for_pending_cmnds(devinfo
) != 0) {
1127 shost_printk(KERN_ERR
, shost
, "%s: timed out\n", __func__
);
1134 static int uas_resume(struct usb_interface
*intf
)
1139 static int uas_reset_resume(struct usb_interface
*intf
)
1141 struct Scsi_Host
*shost
= usb_get_intfdata(intf
);
1142 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
1143 unsigned long flags
;
1146 err
= uas_configure_endpoints(devinfo
);
1148 shost_printk(KERN_ERR
, shost
,
1149 "%s: alloc streams error %d after reset",
1154 spin_lock_irqsave(shost
->host_lock
, flags
);
1155 scsi_report_bus_reset(shost
, 0);
1156 spin_unlock_irqrestore(shost
->host_lock
, flags
);
1161 static void uas_disconnect(struct usb_interface
*intf
)
1163 struct Scsi_Host
*shost
= usb_get_intfdata(intf
);
1164 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
1165 unsigned long flags
;
1167 spin_lock_irqsave(&devinfo
->lock
, flags
);
1168 devinfo
->resetting
= 1;
1169 spin_unlock_irqrestore(&devinfo
->lock
, flags
);
1171 cancel_work_sync(&devinfo
->work
);
1172 usb_kill_anchored_urbs(&devinfo
->cmd_urbs
);
1173 usb_kill_anchored_urbs(&devinfo
->sense_urbs
);
1174 usb_kill_anchored_urbs(&devinfo
->data_urbs
);
1175 uas_zap_pending(devinfo
, DID_NO_CONNECT
);
1177 scsi_remove_host(shost
);
1178 uas_free_streams(devinfo
);
1179 scsi_host_put(shost
);
1183 * Put the device back in usb-storage mode on shutdown, as some BIOS-es
1184 * hang on reboot when the device is still in uas mode. Note the reset is
1185 * necessary as some devices won't revert to usb-storage mode without it.
1187 static void uas_shutdown(struct device
*dev
)
1189 struct usb_interface
*intf
= to_usb_interface(dev
);
1190 struct usb_device
*udev
= interface_to_usbdev(intf
);
1191 struct Scsi_Host
*shost
= usb_get_intfdata(intf
);
1192 struct uas_dev_info
*devinfo
= (struct uas_dev_info
*)shost
->hostdata
;
1194 if (system_state
!= SYSTEM_RESTART
)
1197 devinfo
->shutdown
= 1;
1198 uas_free_streams(devinfo
);
1199 usb_set_interface(udev
, intf
->altsetting
[0].desc
.bInterfaceNumber
, 0);
1200 usb_reset_device(udev
);
1203 static struct usb_driver uas_driver
= {
1206 .disconnect
= uas_disconnect
,
1207 .pre_reset
= uas_pre_reset
,
1208 .post_reset
= uas_post_reset
,
1209 .suspend
= uas_suspend
,
1210 .resume
= uas_resume
,
1211 .reset_resume
= uas_reset_resume
,
1212 .drvwrap
.driver
.shutdown
= uas_shutdown
,
1213 .id_table
= uas_usb_ids
,
1216 module_usb_driver(uas_driver
);
1218 MODULE_LICENSE("GPL");
1220 "Hans de Goede <hdegoede@redhat.com>, Matthew Wilcox and Sarah Sharp");