Linux Audio

Check our new training course

Loading...
Note: File does not exist in v3.1.
   1/* Target based USB-Gadget
   2 *
   3 * UAS protocol handling, target callbacks, configfs handling,
   4 * BBB (USB Mass Storage Class Bulk-Only (BBB) and Transport protocol handling.
   5 *
   6 * Author: Sebastian Andrzej Siewior <bigeasy at linutronix dot de>
   7 * License: GPLv2 as published by FSF.
   8 */
   9#include <linux/kernel.h>
  10#include <linux/module.h>
  11#include <linux/types.h>
  12#include <linux/string.h>
  13#include <linux/configfs.h>
  14#include <linux/ctype.h>
  15#include <linux/usb/ch9.h>
  16#include <linux/usb/composite.h>
  17#include <linux/usb/gadget.h>
  18#include <linux/usb/storage.h>
  19#include <scsi/scsi_tcq.h>
  20#include <target/target_core_base.h>
  21#include <target/target_core_fabric.h>
  22#include <asm/unaligned.h>
  23
  24#include "tcm.h"
  25#include "u_tcm.h"
  26#include "configfs.h"
  27
  28#define TPG_INSTANCES		1
  29
  30struct tpg_instance {
  31	struct usb_function_instance	*func_inst;
  32	struct usbg_tpg			*tpg;
  33};
  34
  35static struct tpg_instance tpg_instances[TPG_INSTANCES];
  36
  37static DEFINE_MUTEX(tpg_instances_lock);
  38
  39static inline struct f_uas *to_f_uas(struct usb_function *f)
  40{
  41	return container_of(f, struct f_uas, function);
  42}
  43
  44/* Start bot.c code */
  45
  46static int bot_enqueue_cmd_cbw(struct f_uas *fu)
  47{
  48	int ret;
  49
  50	if (fu->flags & USBG_BOT_CMD_PEND)
  51		return 0;
  52
  53	ret = usb_ep_queue(fu->ep_out, fu->cmd.req, GFP_ATOMIC);
  54	if (!ret)
  55		fu->flags |= USBG_BOT_CMD_PEND;
  56	return ret;
  57}
  58
  59static void bot_status_complete(struct usb_ep *ep, struct usb_request *req)
  60{
  61	struct usbg_cmd *cmd = req->context;
  62	struct f_uas *fu = cmd->fu;
  63
  64	transport_generic_free_cmd(&cmd->se_cmd, 0);
  65	if (req->status < 0) {
  66		pr_err("ERR %s(%d)\n", __func__, __LINE__);
  67		return;
  68	}
  69
  70	/* CSW completed, wait for next CBW */
  71	bot_enqueue_cmd_cbw(fu);
  72}
  73
  74static void bot_enqueue_sense_code(struct f_uas *fu, struct usbg_cmd *cmd)
  75{
  76	struct bulk_cs_wrap *csw = &fu->bot_status.csw;
  77	int ret;
  78	unsigned int csw_stat;
  79
  80	csw_stat = cmd->csw_code;
  81	csw->Tag = cmd->bot_tag;
  82	csw->Status = csw_stat;
  83	fu->bot_status.req->context = cmd;
  84	ret = usb_ep_queue(fu->ep_in, fu->bot_status.req, GFP_ATOMIC);
  85	if (ret)
  86		pr_err("%s(%d) ERR: %d\n", __func__, __LINE__, ret);
  87}
  88
  89static void bot_err_compl(struct usb_ep *ep, struct usb_request *req)
  90{
  91	struct usbg_cmd *cmd = req->context;
  92	struct f_uas *fu = cmd->fu;
  93
  94	if (req->status < 0)
  95		pr_err("ERR %s(%d)\n", __func__, __LINE__);
  96
  97	if (cmd->data_len) {
  98		if (cmd->data_len > ep->maxpacket) {
  99			req->length = ep->maxpacket;
 100			cmd->data_len -= ep->maxpacket;
 101		} else {
 102			req->length = cmd->data_len;
 103			cmd->data_len = 0;
 104		}
 105
 106		usb_ep_queue(ep, req, GFP_ATOMIC);
 107		return;
 108	}
 109	bot_enqueue_sense_code(fu, cmd);
 110}
 111
 112static void bot_send_bad_status(struct usbg_cmd *cmd)
 113{
 114	struct f_uas *fu = cmd->fu;
 115	struct bulk_cs_wrap *csw = &fu->bot_status.csw;
 116	struct usb_request *req;
 117	struct usb_ep *ep;
 118
 119	csw->Residue = cpu_to_le32(cmd->data_len);
 120
 121	if (cmd->data_len) {
 122		if (cmd->is_read) {
 123			ep = fu->ep_in;
 124			req = fu->bot_req_in;
 125		} else {
 126			ep = fu->ep_out;
 127			req = fu->bot_req_out;
 128		}
 129
 130		if (cmd->data_len > fu->ep_in->maxpacket) {
 131			req->length = ep->maxpacket;
 132			cmd->data_len -= ep->maxpacket;
 133		} else {
 134			req->length = cmd->data_len;
 135			cmd->data_len = 0;
 136		}
 137		req->complete = bot_err_compl;
 138		req->context = cmd;
 139		req->buf = fu->cmd.buf;
 140		usb_ep_queue(ep, req, GFP_KERNEL);
 141	} else {
 142		bot_enqueue_sense_code(fu, cmd);
 143	}
 144}
 145
 146static int bot_send_status(struct usbg_cmd *cmd, bool moved_data)
 147{
 148	struct f_uas *fu = cmd->fu;
 149	struct bulk_cs_wrap *csw = &fu->bot_status.csw;
 150	int ret;
 151
 152	if (cmd->se_cmd.scsi_status == SAM_STAT_GOOD) {
 153		if (!moved_data && cmd->data_len) {
 154			/*
 155			 * the host wants to move data, we don't. Fill / empty
 156			 * the pipe and then send the csw with reside set.
 157			 */
 158			cmd->csw_code = US_BULK_STAT_OK;
 159			bot_send_bad_status(cmd);
 160			return 0;
 161		}
 162
 163		csw->Tag = cmd->bot_tag;
 164		csw->Residue = cpu_to_le32(0);
 165		csw->Status = US_BULK_STAT_OK;
 166		fu->bot_status.req->context = cmd;
 167
 168		ret = usb_ep_queue(fu->ep_in, fu->bot_status.req, GFP_KERNEL);
 169		if (ret)
 170			pr_err("%s(%d) ERR: %d\n", __func__, __LINE__, ret);
 171	} else {
 172		cmd->csw_code = US_BULK_STAT_FAIL;
 173		bot_send_bad_status(cmd);
 174	}
 175	return 0;
 176}
 177
 178/*
 179 * Called after command (no data transfer) or after the write (to device)
 180 * operation is completed
 181 */
 182static int bot_send_status_response(struct usbg_cmd *cmd)
 183{
 184	bool moved_data = false;
 185
 186	if (!cmd->is_read)
 187		moved_data = true;
 188	return bot_send_status(cmd, moved_data);
 189}
 190
 191/* Read request completed, now we have to send the CSW */
 192static void bot_read_compl(struct usb_ep *ep, struct usb_request *req)
 193{
 194	struct usbg_cmd *cmd = req->context;
 195
 196	if (req->status < 0)
 197		pr_err("ERR %s(%d)\n", __func__, __LINE__);
 198
 199	bot_send_status(cmd, true);
 200}
 201
 202static int bot_send_read_response(struct usbg_cmd *cmd)
 203{
 204	struct f_uas *fu = cmd->fu;
 205	struct se_cmd *se_cmd = &cmd->se_cmd;
 206	struct usb_gadget *gadget = fuas_to_gadget(fu);
 207	int ret;
 208
 209	if (!cmd->data_len) {
 210		cmd->csw_code = US_BULK_STAT_PHASE;
 211		bot_send_bad_status(cmd);
 212		return 0;
 213	}
 214
 215	if (!gadget->sg_supported) {
 216		cmd->data_buf = kmalloc(se_cmd->data_length, GFP_ATOMIC);
 217		if (!cmd->data_buf)
 218			return -ENOMEM;
 219
 220		sg_copy_to_buffer(se_cmd->t_data_sg,
 221				se_cmd->t_data_nents,
 222				cmd->data_buf,
 223				se_cmd->data_length);
 224
 225		fu->bot_req_in->buf = cmd->data_buf;
 226	} else {
 227		fu->bot_req_in->buf = NULL;
 228		fu->bot_req_in->num_sgs = se_cmd->t_data_nents;
 229		fu->bot_req_in->sg = se_cmd->t_data_sg;
 230	}
 231
 232	fu->bot_req_in->complete = bot_read_compl;
 233	fu->bot_req_in->length = se_cmd->data_length;
 234	fu->bot_req_in->context = cmd;
 235	ret = usb_ep_queue(fu->ep_in, fu->bot_req_in, GFP_ATOMIC);
 236	if (ret)
 237		pr_err("%s(%d)\n", __func__, __LINE__);
 238	return 0;
 239}
 240
 241static void usbg_data_write_cmpl(struct usb_ep *, struct usb_request *);
 242static int usbg_prepare_w_request(struct usbg_cmd *, struct usb_request *);
 243
 244static int bot_send_write_request(struct usbg_cmd *cmd)
 245{
 246	struct f_uas *fu = cmd->fu;
 247	struct se_cmd *se_cmd = &cmd->se_cmd;
 248	struct usb_gadget *gadget = fuas_to_gadget(fu);
 249	int ret;
 250
 251	init_completion(&cmd->write_complete);
 252	cmd->fu = fu;
 253
 254	if (!cmd->data_len) {
 255		cmd->csw_code = US_BULK_STAT_PHASE;
 256		return -EINVAL;
 257	}
 258
 259	if (!gadget->sg_supported) {
 260		cmd->data_buf = kmalloc(se_cmd->data_length, GFP_KERNEL);
 261		if (!cmd->data_buf)
 262			return -ENOMEM;
 263
 264		fu->bot_req_out->buf = cmd->data_buf;
 265	} else {
 266		fu->bot_req_out->buf = NULL;
 267		fu->bot_req_out->num_sgs = se_cmd->t_data_nents;
 268		fu->bot_req_out->sg = se_cmd->t_data_sg;
 269	}
 270
 271	fu->bot_req_out->complete = usbg_data_write_cmpl;
 272	fu->bot_req_out->length = se_cmd->data_length;
 273	fu->bot_req_out->context = cmd;
 274
 275	ret = usbg_prepare_w_request(cmd, fu->bot_req_out);
 276	if (ret)
 277		goto cleanup;
 278	ret = usb_ep_queue(fu->ep_out, fu->bot_req_out, GFP_KERNEL);
 279	if (ret)
 280		pr_err("%s(%d)\n", __func__, __LINE__);
 281
 282	wait_for_completion(&cmd->write_complete);
 283	target_execute_cmd(se_cmd);
 284cleanup:
 285	return ret;
 286}
 287
 288static int bot_submit_command(struct f_uas *, void *, unsigned int);
 289
 290static void bot_cmd_complete(struct usb_ep *ep, struct usb_request *req)
 291{
 292	struct f_uas *fu = req->context;
 293	int ret;
 294
 295	fu->flags &= ~USBG_BOT_CMD_PEND;
 296
 297	if (req->status < 0)
 298		return;
 299
 300	ret = bot_submit_command(fu, req->buf, req->actual);
 301	if (ret)
 302		pr_err("%s(%d): %d\n", __func__, __LINE__, ret);
 303}
 304
 305static int bot_prepare_reqs(struct f_uas *fu)
 306{
 307	int ret;
 308
 309	fu->bot_req_in = usb_ep_alloc_request(fu->ep_in, GFP_KERNEL);
 310	if (!fu->bot_req_in)
 311		goto err;
 312
 313	fu->bot_req_out = usb_ep_alloc_request(fu->ep_out, GFP_KERNEL);
 314	if (!fu->bot_req_out)
 315		goto err_out;
 316
 317	fu->cmd.req = usb_ep_alloc_request(fu->ep_out, GFP_KERNEL);
 318	if (!fu->cmd.req)
 319		goto err_cmd;
 320
 321	fu->bot_status.req = usb_ep_alloc_request(fu->ep_in, GFP_KERNEL);
 322	if (!fu->bot_status.req)
 323		goto err_sts;
 324
 325	fu->bot_status.req->buf = &fu->bot_status.csw;
 326	fu->bot_status.req->length = US_BULK_CS_WRAP_LEN;
 327	fu->bot_status.req->complete = bot_status_complete;
 328	fu->bot_status.csw.Signature = cpu_to_le32(US_BULK_CS_SIGN);
 329
 330	fu->cmd.buf = kmalloc(fu->ep_out->maxpacket, GFP_KERNEL);
 331	if (!fu->cmd.buf)
 332		goto err_buf;
 333
 334	fu->cmd.req->complete = bot_cmd_complete;
 335	fu->cmd.req->buf = fu->cmd.buf;
 336	fu->cmd.req->length = fu->ep_out->maxpacket;
 337	fu->cmd.req->context = fu;
 338
 339	ret = bot_enqueue_cmd_cbw(fu);
 340	if (ret)
 341		goto err_queue;
 342	return 0;
 343err_queue:
 344	kfree(fu->cmd.buf);
 345	fu->cmd.buf = NULL;
 346err_buf:
 347	usb_ep_free_request(fu->ep_in, fu->bot_status.req);
 348err_sts:
 349	usb_ep_free_request(fu->ep_out, fu->cmd.req);
 350	fu->cmd.req = NULL;
 351err_cmd:
 352	usb_ep_free_request(fu->ep_out, fu->bot_req_out);
 353	fu->bot_req_out = NULL;
 354err_out:
 355	usb_ep_free_request(fu->ep_in, fu->bot_req_in);
 356	fu->bot_req_in = NULL;
 357err:
 358	pr_err("BOT: endpoint setup failed\n");
 359	return -ENOMEM;
 360}
 361
 362static void bot_cleanup_old_alt(struct f_uas *fu)
 363{
 364	if (!(fu->flags & USBG_ENABLED))
 365		return;
 366
 367	usb_ep_disable(fu->ep_in);
 368	usb_ep_disable(fu->ep_out);
 369
 370	if (!fu->bot_req_in)
 371		return;
 372
 373	usb_ep_free_request(fu->ep_in, fu->bot_req_in);
 374	usb_ep_free_request(fu->ep_out, fu->bot_req_out);
 375	usb_ep_free_request(fu->ep_out, fu->cmd.req);
 376	usb_ep_free_request(fu->ep_out, fu->bot_status.req);
 377
 378	kfree(fu->cmd.buf);
 379
 380	fu->bot_req_in = NULL;
 381	fu->bot_req_out = NULL;
 382	fu->cmd.req = NULL;
 383	fu->bot_status.req = NULL;
 384	fu->cmd.buf = NULL;
 385}
 386
 387static void bot_set_alt(struct f_uas *fu)
 388{
 389	struct usb_function *f = &fu->function;
 390	struct usb_gadget *gadget = f->config->cdev->gadget;
 391	int ret;
 392
 393	fu->flags = USBG_IS_BOT;
 394
 395	config_ep_by_speed(gadget, f, fu->ep_in);
 396	ret = usb_ep_enable(fu->ep_in);
 397	if (ret)
 398		goto err_b_in;
 399
 400	config_ep_by_speed(gadget, f, fu->ep_out);
 401	ret = usb_ep_enable(fu->ep_out);
 402	if (ret)
 403		goto err_b_out;
 404
 405	ret = bot_prepare_reqs(fu);
 406	if (ret)
 407		goto err_wq;
 408	fu->flags |= USBG_ENABLED;
 409	pr_info("Using the BOT protocol\n");
 410	return;
 411err_wq:
 412	usb_ep_disable(fu->ep_out);
 413err_b_out:
 414	usb_ep_disable(fu->ep_in);
 415err_b_in:
 416	fu->flags = USBG_IS_BOT;
 417}
 418
 419static int usbg_bot_setup(struct usb_function *f,
 420		const struct usb_ctrlrequest *ctrl)
 421{
 422	struct f_uas *fu = to_f_uas(f);
 423	struct usb_composite_dev *cdev = f->config->cdev;
 424	u16 w_value = le16_to_cpu(ctrl->wValue);
 425	u16 w_length = le16_to_cpu(ctrl->wLength);
 426	int luns;
 427	u8 *ret_lun;
 428
 429	switch (ctrl->bRequest) {
 430	case US_BULK_GET_MAX_LUN:
 431		if (ctrl->bRequestType != (USB_DIR_IN | USB_TYPE_CLASS |
 432					USB_RECIP_INTERFACE))
 433			return -ENOTSUPP;
 434
 435		if (w_length < 1)
 436			return -EINVAL;
 437		if (w_value != 0)
 438			return -EINVAL;
 439		luns = atomic_read(&fu->tpg->tpg_port_count);
 440		if (!luns) {
 441			pr_err("No LUNs configured?\n");
 442			return -EINVAL;
 443		}
 444		/*
 445		 * If 4 LUNs are present we return 3 i.e. LUN 0..3 can be
 446		 * accessed. The upper limit is 0xf
 447		 */
 448		luns--;
 449		if (luns > 0xf) {
 450			pr_info_once("Limiting the number of luns to 16\n");
 451			luns = 0xf;
 452		}
 453		ret_lun = cdev->req->buf;
 454		*ret_lun = luns;
 455		cdev->req->length = 1;
 456		return usb_ep_queue(cdev->gadget->ep0, cdev->req, GFP_ATOMIC);
 457
 458	case US_BULK_RESET_REQUEST:
 459		/* XXX maybe we should remove previous requests for IN + OUT */
 460		bot_enqueue_cmd_cbw(fu);
 461		return 0;
 462	}
 463	return -ENOTSUPP;
 464}
 465
 466/* Start uas.c code */
 467
 468static void uasp_cleanup_one_stream(struct f_uas *fu, struct uas_stream *stream)
 469{
 470	/* We have either all three allocated or none */
 471	if (!stream->req_in)
 472		return;
 473
 474	usb_ep_free_request(fu->ep_in, stream->req_in);
 475	usb_ep_free_request(fu->ep_out, stream->req_out);
 476	usb_ep_free_request(fu->ep_status, stream->req_status);
 477
 478	stream->req_in = NULL;
 479	stream->req_out = NULL;
 480	stream->req_status = NULL;
 481}
 482
 483static void uasp_free_cmdreq(struct f_uas *fu)
 484{
 485	usb_ep_free_request(fu->ep_cmd, fu->cmd.req);
 486	kfree(fu->cmd.buf);
 487	fu->cmd.req = NULL;
 488	fu->cmd.buf = NULL;
 489}
 490
 491static void uasp_cleanup_old_alt(struct f_uas *fu)
 492{
 493	int i;
 494
 495	if (!(fu->flags & USBG_ENABLED))
 496		return;
 497
 498	usb_ep_disable(fu->ep_in);
 499	usb_ep_disable(fu->ep_out);
 500	usb_ep_disable(fu->ep_status);
 501	usb_ep_disable(fu->ep_cmd);
 502
 503	for (i = 0; i < UASP_SS_EP_COMP_NUM_STREAMS; i++)
 504		uasp_cleanup_one_stream(fu, &fu->stream[i]);
 505	uasp_free_cmdreq(fu);
 506}
 507
 508static void uasp_status_data_cmpl(struct usb_ep *ep, struct usb_request *req);
 509
 510static int uasp_prepare_r_request(struct usbg_cmd *cmd)
 511{
 512	struct se_cmd *se_cmd = &cmd->se_cmd;
 513	struct f_uas *fu = cmd->fu;
 514	struct usb_gadget *gadget = fuas_to_gadget(fu);
 515	struct uas_stream *stream = cmd->stream;
 516
 517	if (!gadget->sg_supported) {
 518		cmd->data_buf = kmalloc(se_cmd->data_length, GFP_ATOMIC);
 519		if (!cmd->data_buf)
 520			return -ENOMEM;
 521
 522		sg_copy_to_buffer(se_cmd->t_data_sg,
 523				se_cmd->t_data_nents,
 524				cmd->data_buf,
 525				se_cmd->data_length);
 526
 527		stream->req_in->buf = cmd->data_buf;
 528	} else {
 529		stream->req_in->buf = NULL;
 530		stream->req_in->num_sgs = se_cmd->t_data_nents;
 531		stream->req_in->sg = se_cmd->t_data_sg;
 532	}
 533
 534	stream->req_in->complete = uasp_status_data_cmpl;
 535	stream->req_in->length = se_cmd->data_length;
 536	stream->req_in->context = cmd;
 537
 538	cmd->state = UASP_SEND_STATUS;
 539	return 0;
 540}
 541
 542static void uasp_prepare_status(struct usbg_cmd *cmd)
 543{
 544	struct se_cmd *se_cmd = &cmd->se_cmd;
 545	struct sense_iu *iu = &cmd->sense_iu;
 546	struct uas_stream *stream = cmd->stream;
 547
 548	cmd->state = UASP_QUEUE_COMMAND;
 549	iu->iu_id = IU_ID_STATUS;
 550	iu->tag = cpu_to_be16(cmd->tag);
 551
 552	/*
 553	 * iu->status_qual = cpu_to_be16(STATUS QUALIFIER SAM-4. Where R U?);
 554	 */
 555	iu->len = cpu_to_be16(se_cmd->scsi_sense_length);
 556	iu->status = se_cmd->scsi_status;
 557	stream->req_status->context = cmd;
 558	stream->req_status->length = se_cmd->scsi_sense_length + 16;
 559	stream->req_status->buf = iu;
 560	stream->req_status->complete = uasp_status_data_cmpl;
 561}
 562
 563static void uasp_status_data_cmpl(struct usb_ep *ep, struct usb_request *req)
 564{
 565	struct usbg_cmd *cmd = req->context;
 566	struct uas_stream *stream = cmd->stream;
 567	struct f_uas *fu = cmd->fu;
 568	int ret;
 569
 570	if (req->status < 0)
 571		goto cleanup;
 572
 573	switch (cmd->state) {
 574	case UASP_SEND_DATA:
 575		ret = uasp_prepare_r_request(cmd);
 576		if (ret)
 577			goto cleanup;
 578		ret = usb_ep_queue(fu->ep_in, stream->req_in, GFP_ATOMIC);
 579		if (ret)
 580			pr_err("%s(%d) => %d\n", __func__, __LINE__, ret);
 581		break;
 582
 583	case UASP_RECEIVE_DATA:
 584		ret = usbg_prepare_w_request(cmd, stream->req_out);
 585		if (ret)
 586			goto cleanup;
 587		ret = usb_ep_queue(fu->ep_out, stream->req_out, GFP_ATOMIC);
 588		if (ret)
 589			pr_err("%s(%d) => %d\n", __func__, __LINE__, ret);
 590		break;
 591
 592	case UASP_SEND_STATUS:
 593		uasp_prepare_status(cmd);
 594		ret = usb_ep_queue(fu->ep_status, stream->req_status,
 595				GFP_ATOMIC);
 596		if (ret)
 597			pr_err("%s(%d) => %d\n", __func__, __LINE__, ret);
 598		break;
 599
 600	case UASP_QUEUE_COMMAND:
 601		transport_generic_free_cmd(&cmd->se_cmd, 0);
 602		usb_ep_queue(fu->ep_cmd, fu->cmd.req, GFP_ATOMIC);
 603		break;
 604
 605	default:
 606		BUG();
 607	}
 608	return;
 609
 610cleanup:
 611	transport_generic_free_cmd(&cmd->se_cmd, 0);
 612}
 613
 614static int uasp_send_status_response(struct usbg_cmd *cmd)
 615{
 616	struct f_uas *fu = cmd->fu;
 617	struct uas_stream *stream = cmd->stream;
 618	struct sense_iu *iu = &cmd->sense_iu;
 619
 620	iu->tag = cpu_to_be16(cmd->tag);
 621	stream->req_status->complete = uasp_status_data_cmpl;
 622	stream->req_status->context = cmd;
 623	cmd->fu = fu;
 624	uasp_prepare_status(cmd);
 625	return usb_ep_queue(fu->ep_status, stream->req_status, GFP_ATOMIC);
 626}
 627
 628static int uasp_send_read_response(struct usbg_cmd *cmd)
 629{
 630	struct f_uas *fu = cmd->fu;
 631	struct uas_stream *stream = cmd->stream;
 632	struct sense_iu *iu = &cmd->sense_iu;
 633	int ret;
 634
 635	cmd->fu = fu;
 636
 637	iu->tag = cpu_to_be16(cmd->tag);
 638	if (fu->flags & USBG_USE_STREAMS) {
 639
 640		ret = uasp_prepare_r_request(cmd);
 641		if (ret)
 642			goto out;
 643		ret = usb_ep_queue(fu->ep_in, stream->req_in, GFP_ATOMIC);
 644		if (ret) {
 645			pr_err("%s(%d) => %d\n", __func__, __LINE__, ret);
 646			kfree(cmd->data_buf);
 647			cmd->data_buf = NULL;
 648		}
 649
 650	} else {
 651
 652		iu->iu_id = IU_ID_READ_READY;
 653		iu->tag = cpu_to_be16(cmd->tag);
 654
 655		stream->req_status->complete = uasp_status_data_cmpl;
 656		stream->req_status->context = cmd;
 657
 658		cmd->state = UASP_SEND_DATA;
 659		stream->req_status->buf = iu;
 660		stream->req_status->length = sizeof(struct iu);
 661
 662		ret = usb_ep_queue(fu->ep_status, stream->req_status,
 663				GFP_ATOMIC);
 664		if (ret)
 665			pr_err("%s(%d) => %d\n", __func__, __LINE__, ret);
 666	}
 667out:
 668	return ret;
 669}
 670
 671static int uasp_send_write_request(struct usbg_cmd *cmd)
 672{
 673	struct f_uas *fu = cmd->fu;
 674	struct se_cmd *se_cmd = &cmd->se_cmd;
 675	struct uas_stream *stream = cmd->stream;
 676	struct sense_iu *iu = &cmd->sense_iu;
 677	int ret;
 678
 679	init_completion(&cmd->write_complete);
 680	cmd->fu = fu;
 681
 682	iu->tag = cpu_to_be16(cmd->tag);
 683
 684	if (fu->flags & USBG_USE_STREAMS) {
 685
 686		ret = usbg_prepare_w_request(cmd, stream->req_out);
 687		if (ret)
 688			goto cleanup;
 689		ret = usb_ep_queue(fu->ep_out, stream->req_out, GFP_ATOMIC);
 690		if (ret)
 691			pr_err("%s(%d)\n", __func__, __LINE__);
 692
 693	} else {
 694
 695		iu->iu_id = IU_ID_WRITE_READY;
 696		iu->tag = cpu_to_be16(cmd->tag);
 697
 698		stream->req_status->complete = uasp_status_data_cmpl;
 699		stream->req_status->context = cmd;
 700
 701		cmd->state = UASP_RECEIVE_DATA;
 702		stream->req_status->buf = iu;
 703		stream->req_status->length = sizeof(struct iu);
 704
 705		ret = usb_ep_queue(fu->ep_status, stream->req_status,
 706				GFP_ATOMIC);
 707		if (ret)
 708			pr_err("%s(%d)\n", __func__, __LINE__);
 709	}
 710
 711	wait_for_completion(&cmd->write_complete);
 712	target_execute_cmd(se_cmd);
 713cleanup:
 714	return ret;
 715}
 716
 717static int usbg_submit_command(struct f_uas *, void *, unsigned int);
 718
 719static void uasp_cmd_complete(struct usb_ep *ep, struct usb_request *req)
 720{
 721	struct f_uas *fu = req->context;
 722	int ret;
 723
 724	if (req->status < 0)
 725		return;
 726
 727	ret = usbg_submit_command(fu, req->buf, req->actual);
 728	/*
 729	 * Once we tune for performance enqueue the command req here again so
 730	 * we can receive a second command while we processing this one. Pay
 731	 * attention to properly sync STAUS endpoint with DATA IN + OUT so you
 732	 * don't break HS.
 733	 */
 734	if (!ret)
 735		return;
 736	usb_ep_queue(fu->ep_cmd, fu->cmd.req, GFP_ATOMIC);
 737}
 738
 739static int uasp_alloc_stream_res(struct f_uas *fu, struct uas_stream *stream)
 740{
 741	stream->req_in = usb_ep_alloc_request(fu->ep_in, GFP_KERNEL);
 742	if (!stream->req_in)
 743		goto out;
 744
 745	stream->req_out = usb_ep_alloc_request(fu->ep_out, GFP_KERNEL);
 746	if (!stream->req_out)
 747		goto err_out;
 748
 749	stream->req_status = usb_ep_alloc_request(fu->ep_status, GFP_KERNEL);
 750	if (!stream->req_status)
 751		goto err_sts;
 752
 753	return 0;
 754err_sts:
 755	usb_ep_free_request(fu->ep_status, stream->req_status);
 756	stream->req_status = NULL;
 757err_out:
 758	usb_ep_free_request(fu->ep_out, stream->req_out);
 759	stream->req_out = NULL;
 760out:
 761	return -ENOMEM;
 762}
 763
 764static int uasp_alloc_cmd(struct f_uas *fu)
 765{
 766	fu->cmd.req = usb_ep_alloc_request(fu->ep_cmd, GFP_KERNEL);
 767	if (!fu->cmd.req)
 768		goto err;
 769
 770	fu->cmd.buf = kmalloc(fu->ep_cmd->maxpacket, GFP_KERNEL);
 771	if (!fu->cmd.buf)
 772		goto err_buf;
 773
 774	fu->cmd.req->complete = uasp_cmd_complete;
 775	fu->cmd.req->buf = fu->cmd.buf;
 776	fu->cmd.req->length = fu->ep_cmd->maxpacket;
 777	fu->cmd.req->context = fu;
 778	return 0;
 779
 780err_buf:
 781	usb_ep_free_request(fu->ep_cmd, fu->cmd.req);
 782err:
 783	return -ENOMEM;
 784}
 785
 786static void uasp_setup_stream_res(struct f_uas *fu, int max_streams)
 787{
 788	int i;
 789
 790	for (i = 0; i < max_streams; i++) {
 791		struct uas_stream *s = &fu->stream[i];
 792
 793		s->req_in->stream_id = i + 1;
 794		s->req_out->stream_id = i + 1;
 795		s->req_status->stream_id = i + 1;
 796	}
 797}
 798
 799static int uasp_prepare_reqs(struct f_uas *fu)
 800{
 801	int ret;
 802	int i;
 803	int max_streams;
 804
 805	if (fu->flags & USBG_USE_STREAMS)
 806		max_streams = UASP_SS_EP_COMP_NUM_STREAMS;
 807	else
 808		max_streams = 1;
 809
 810	for (i = 0; i < max_streams; i++) {
 811		ret = uasp_alloc_stream_res(fu, &fu->stream[i]);
 812		if (ret)
 813			goto err_cleanup;
 814	}
 815
 816	ret = uasp_alloc_cmd(fu);
 817	if (ret)
 818		goto err_free_stream;
 819	uasp_setup_stream_res(fu, max_streams);
 820
 821	ret = usb_ep_queue(fu->ep_cmd, fu->cmd.req, GFP_ATOMIC);
 822	if (ret)
 823		goto err_free_stream;
 824
 825	return 0;
 826
 827err_free_stream:
 828	uasp_free_cmdreq(fu);
 829
 830err_cleanup:
 831	if (i) {
 832		do {
 833			uasp_cleanup_one_stream(fu, &fu->stream[i - 1]);
 834			i--;
 835		} while (i);
 836	}
 837	pr_err("UASP: endpoint setup failed\n");
 838	return ret;
 839}
 840
 841static void uasp_set_alt(struct f_uas *fu)
 842{
 843	struct usb_function *f = &fu->function;
 844	struct usb_gadget *gadget = f->config->cdev->gadget;
 845	int ret;
 846
 847	fu->flags = USBG_IS_UAS;
 848
 849	if (gadget->speed == USB_SPEED_SUPER)
 850		fu->flags |= USBG_USE_STREAMS;
 851
 852	config_ep_by_speed(gadget, f, fu->ep_in);
 853	ret = usb_ep_enable(fu->ep_in);
 854	if (ret)
 855		goto err_b_in;
 856
 857	config_ep_by_speed(gadget, f, fu->ep_out);
 858	ret = usb_ep_enable(fu->ep_out);
 859	if (ret)
 860		goto err_b_out;
 861
 862	config_ep_by_speed(gadget, f, fu->ep_cmd);
 863	ret = usb_ep_enable(fu->ep_cmd);
 864	if (ret)
 865		goto err_cmd;
 866	config_ep_by_speed(gadget, f, fu->ep_status);
 867	ret = usb_ep_enable(fu->ep_status);
 868	if (ret)
 869		goto err_status;
 870
 871	ret = uasp_prepare_reqs(fu);
 872	if (ret)
 873		goto err_wq;
 874	fu->flags |= USBG_ENABLED;
 875
 876	pr_info("Using the UAS protocol\n");
 877	return;
 878err_wq:
 879	usb_ep_disable(fu->ep_status);
 880err_status:
 881	usb_ep_disable(fu->ep_cmd);
 882err_cmd:
 883	usb_ep_disable(fu->ep_out);
 884err_b_out:
 885	usb_ep_disable(fu->ep_in);
 886err_b_in:
 887	fu->flags = 0;
 888}
 889
 890static int get_cmd_dir(const unsigned char *cdb)
 891{
 892	int ret;
 893
 894	switch (cdb[0]) {
 895	case READ_6:
 896	case READ_10:
 897	case READ_12:
 898	case READ_16:
 899	case INQUIRY:
 900	case MODE_SENSE:
 901	case MODE_SENSE_10:
 902	case SERVICE_ACTION_IN_16:
 903	case MAINTENANCE_IN:
 904	case PERSISTENT_RESERVE_IN:
 905	case SECURITY_PROTOCOL_IN:
 906	case ACCESS_CONTROL_IN:
 907	case REPORT_LUNS:
 908	case READ_BLOCK_LIMITS:
 909	case READ_POSITION:
 910	case READ_CAPACITY:
 911	case READ_TOC:
 912	case READ_FORMAT_CAPACITIES:
 913	case REQUEST_SENSE:
 914		ret = DMA_FROM_DEVICE;
 915		break;
 916
 917	case WRITE_6:
 918	case WRITE_10:
 919	case WRITE_12:
 920	case WRITE_16:
 921	case MODE_SELECT:
 922	case MODE_SELECT_10:
 923	case WRITE_VERIFY:
 924	case WRITE_VERIFY_12:
 925	case PERSISTENT_RESERVE_OUT:
 926	case MAINTENANCE_OUT:
 927	case SECURITY_PROTOCOL_OUT:
 928	case ACCESS_CONTROL_OUT:
 929		ret = DMA_TO_DEVICE;
 930		break;
 931	case ALLOW_MEDIUM_REMOVAL:
 932	case TEST_UNIT_READY:
 933	case SYNCHRONIZE_CACHE:
 934	case START_STOP:
 935	case ERASE:
 936	case REZERO_UNIT:
 937	case SEEK_10:
 938	case SPACE:
 939	case VERIFY:
 940	case WRITE_FILEMARKS:
 941		ret = DMA_NONE;
 942		break;
 943	default:
 944#define CMD_DIR_MSG "target: Unknown data direction for SCSI Opcode 0x%02x\n"
 945		pr_warn(CMD_DIR_MSG, cdb[0]);
 946#undef CMD_DIR_MSG
 947		ret = -EINVAL;
 948	}
 949	return ret;
 950}
 951
 952static void usbg_data_write_cmpl(struct usb_ep *ep, struct usb_request *req)
 953{
 954	struct usbg_cmd *cmd = req->context;
 955	struct se_cmd *se_cmd = &cmd->se_cmd;
 956
 957	if (req->status < 0) {
 958		pr_err("%s() state %d transfer failed\n", __func__, cmd->state);
 959		goto cleanup;
 960	}
 961
 962	if (req->num_sgs == 0) {
 963		sg_copy_from_buffer(se_cmd->t_data_sg,
 964				se_cmd->t_data_nents,
 965				cmd->data_buf,
 966				se_cmd->data_length);
 967	}
 968
 969	complete(&cmd->write_complete);
 970	return;
 971
 972cleanup:
 973	transport_generic_free_cmd(&cmd->se_cmd, 0);
 974}
 975
 976static int usbg_prepare_w_request(struct usbg_cmd *cmd, struct usb_request *req)
 977{
 978	struct se_cmd *se_cmd = &cmd->se_cmd;
 979	struct f_uas *fu = cmd->fu;
 980	struct usb_gadget *gadget = fuas_to_gadget(fu);
 981
 982	if (!gadget->sg_supported) {
 983		cmd->data_buf = kmalloc(se_cmd->data_length, GFP_ATOMIC);
 984		if (!cmd->data_buf)
 985			return -ENOMEM;
 986
 987		req->buf = cmd->data_buf;
 988	} else {
 989		req->buf = NULL;
 990		req->num_sgs = se_cmd->t_data_nents;
 991		req->sg = se_cmd->t_data_sg;
 992	}
 993
 994	req->complete = usbg_data_write_cmpl;
 995	req->length = se_cmd->data_length;
 996	req->context = cmd;
 997	return 0;
 998}
 999
1000static int usbg_send_status_response(struct se_cmd *se_cmd)
1001{
1002	struct usbg_cmd *cmd = container_of(se_cmd, struct usbg_cmd,
1003			se_cmd);
1004	struct f_uas *fu = cmd->fu;
1005
1006	if (fu->flags & USBG_IS_BOT)
1007		return bot_send_status_response(cmd);
1008	else
1009		return uasp_send_status_response(cmd);
1010}
1011
1012static int usbg_send_write_request(struct se_cmd *se_cmd)
1013{
1014	struct usbg_cmd *cmd = container_of(se_cmd, struct usbg_cmd,
1015			se_cmd);
1016	struct f_uas *fu = cmd->fu;
1017
1018	if (fu->flags & USBG_IS_BOT)
1019		return bot_send_write_request(cmd);
1020	else
1021		return uasp_send_write_request(cmd);
1022}
1023
1024static int usbg_send_read_response(struct se_cmd *se_cmd)
1025{
1026	struct usbg_cmd *cmd = container_of(se_cmd, struct usbg_cmd,
1027			se_cmd);
1028	struct f_uas *fu = cmd->fu;
1029
1030	if (fu->flags & USBG_IS_BOT)
1031		return bot_send_read_response(cmd);
1032	else
1033		return uasp_send_read_response(cmd);
1034}
1035
1036static void usbg_cmd_work(struct work_struct *work)
1037{
1038	struct usbg_cmd *cmd = container_of(work, struct usbg_cmd, work);
1039	struct se_cmd *se_cmd;
1040	struct tcm_usbg_nexus *tv_nexus;
1041	struct usbg_tpg *tpg;
1042	int dir, flags = (TARGET_SCF_UNKNOWN_SIZE | TARGET_SCF_ACK_KREF);
1043
1044	se_cmd = &cmd->se_cmd;
1045	tpg = cmd->fu->tpg;
1046	tv_nexus = tpg->tpg_nexus;
1047	dir = get_cmd_dir(cmd->cmd_buf);
1048	if (dir < 0) {
1049		transport_init_se_cmd(se_cmd,
1050				tv_nexus->tvn_se_sess->se_tpg->se_tpg_tfo,
1051				tv_nexus->tvn_se_sess, cmd->data_len, DMA_NONE,
1052				cmd->prio_attr, cmd->sense_iu.sense);
1053		goto out;
1054	}
1055
1056	if (target_submit_cmd(se_cmd, tv_nexus->tvn_se_sess, cmd->cmd_buf,
1057			      cmd->sense_iu.sense, cmd->unpacked_lun, 0,
1058			      cmd->prio_attr, dir, flags) < 0)
1059		goto out;
1060
1061	return;
1062
1063out:
1064	transport_send_check_condition_and_sense(se_cmd,
1065			TCM_UNSUPPORTED_SCSI_OPCODE, 1);
1066	transport_generic_free_cmd(&cmd->se_cmd, 0);
1067}
1068
1069static struct usbg_cmd *usbg_get_cmd(struct f_uas *fu,
1070		struct tcm_usbg_nexus *tv_nexus, u32 scsi_tag)
1071{
1072	struct se_session *se_sess = tv_nexus->tvn_se_sess;
1073	struct usbg_cmd *cmd;
1074	int tag;
1075
1076	tag = percpu_ida_alloc(&se_sess->sess_tag_pool, GFP_ATOMIC);
1077	if (tag < 0)
1078		return ERR_PTR(-ENOMEM);
1079
1080	cmd = &((struct usbg_cmd *)se_sess->sess_cmd_map)[tag];
1081	memset(cmd, 0, sizeof(*cmd));
1082	cmd->se_cmd.map_tag = tag;
1083	cmd->se_cmd.tag = cmd->tag = scsi_tag;
1084	cmd->fu = fu;
1085
1086	return cmd;
1087}
1088
1089static void usbg_release_cmd(struct se_cmd *);
1090
1091static int usbg_submit_command(struct f_uas *fu,
1092		void *cmdbuf, unsigned int len)
1093{
1094	struct command_iu *cmd_iu = cmdbuf;
1095	struct usbg_cmd *cmd;
1096	struct usbg_tpg *tpg = fu->tpg;
1097	struct tcm_usbg_nexus *tv_nexus = tpg->tpg_nexus;
1098	u32 cmd_len;
1099	u16 scsi_tag;
1100
1101	if (cmd_iu->iu_id != IU_ID_COMMAND) {
1102		pr_err("Unsupported type %d\n", cmd_iu->iu_id);
1103		return -EINVAL;
1104	}
1105
1106	tv_nexus = tpg->tpg_nexus;
1107	if (!tv_nexus) {
1108		pr_err("Missing nexus, ignoring command\n");
1109		return -EINVAL;
1110	}
1111
1112	cmd_len = (cmd_iu->len & ~0x3) + 16;
1113	if (cmd_len > USBG_MAX_CMD)
1114		return -EINVAL;
1115
1116	scsi_tag = be16_to_cpup(&cmd_iu->tag);
1117	cmd = usbg_get_cmd(fu, tv_nexus, scsi_tag);
1118	if (IS_ERR(cmd)) {
1119		pr_err("usbg_get_cmd failed\n");
1120		return -ENOMEM;
1121	}
1122	memcpy(cmd->cmd_buf, cmd_iu->cdb, cmd_len);
1123
1124	if (fu->flags & USBG_USE_STREAMS) {
1125		if (cmd->tag > UASP_SS_EP_COMP_NUM_STREAMS)
1126			goto err;
1127		if (!cmd->tag)
1128			cmd->stream = &fu->stream[0];
1129		else
1130			cmd->stream = &fu->stream[cmd->tag - 1];
1131	} else {
1132		cmd->stream = &fu->stream[0];
1133	}
1134
1135	switch (cmd_iu->prio_attr & 0x7) {
1136	case UAS_HEAD_TAG:
1137		cmd->prio_attr = TCM_HEAD_TAG;
1138		break;
1139	case UAS_ORDERED_TAG:
1140		cmd->prio_attr = TCM_ORDERED_TAG;
1141		break;
1142	case UAS_ACA:
1143		cmd->prio_attr = TCM_ACA_TAG;
1144		break;
1145	default:
1146		pr_debug_once("Unsupported prio_attr: %02x.\n",
1147				cmd_iu->prio_attr);
1148	case UAS_SIMPLE_TAG:
1149		cmd->prio_attr = TCM_SIMPLE_TAG;
1150		break;
1151	}
1152
1153	cmd->unpacked_lun = scsilun_to_int(&cmd_iu->lun);
1154
1155	INIT_WORK(&cmd->work, usbg_cmd_work);
1156	queue_work(tpg->workqueue, &cmd->work);
1157
1158	return 0;
1159err:
1160	usbg_release_cmd(&cmd->se_cmd);
1161	return -EINVAL;
1162}
1163
1164static void bot_cmd_work(struct work_struct *work)
1165{
1166	struct usbg_cmd *cmd = container_of(work, struct usbg_cmd, work);
1167	struct se_cmd *se_cmd;
1168	struct tcm_usbg_nexus *tv_nexus;
1169	struct usbg_tpg *tpg;
1170	int dir;
1171
1172	se_cmd = &cmd->se_cmd;
1173	tpg = cmd->fu->tpg;
1174	tv_nexus = tpg->tpg_nexus;
1175	dir = get_cmd_dir(cmd->cmd_buf);
1176	if (dir < 0) {
1177		transport_init_se_cmd(se_cmd,
1178				tv_nexus->tvn_se_sess->se_tpg->se_tpg_tfo,
1179				tv_nexus->tvn_se_sess, cmd->data_len, DMA_NONE,
1180				cmd->prio_attr, cmd->sense_iu.sense);
1181		goto out;
1182	}
1183
1184	if (target_submit_cmd(se_cmd, tv_nexus->tvn_se_sess,
1185			cmd->cmd_buf, cmd->sense_iu.sense, cmd->unpacked_lun,
1186			cmd->data_len, cmd->prio_attr, dir, 0) < 0)
1187		goto out;
1188
1189	return;
1190
1191out:
1192	transport_send_check_condition_and_sense(se_cmd,
1193				TCM_UNSUPPORTED_SCSI_OPCODE, 1);
1194	transport_generic_free_cmd(&cmd->se_cmd, 0);
1195}
1196
1197static int bot_submit_command(struct f_uas *fu,
1198		void *cmdbuf, unsigned int len)
1199{
1200	struct bulk_cb_wrap *cbw = cmdbuf;
1201	struct usbg_cmd *cmd;
1202	struct usbg_tpg *tpg = fu->tpg;
1203	struct tcm_usbg_nexus *tv_nexus;
1204	u32 cmd_len;
1205
1206	if (cbw->Signature != cpu_to_le32(US_BULK_CB_SIGN)) {
1207		pr_err("Wrong signature on CBW\n");
1208		return -EINVAL;
1209	}
1210	if (len != 31) {
1211		pr_err("Wrong length for CBW\n");
1212		return -EINVAL;
1213	}
1214
1215	cmd_len = cbw->Length;
1216	if (cmd_len < 1 || cmd_len > 16)
1217		return -EINVAL;
1218
1219	tv_nexus = tpg->tpg_nexus;
1220	if (!tv_nexus) {
1221		pr_err("Missing nexus, ignoring command\n");
1222		return -ENODEV;
1223	}
1224
1225	cmd = usbg_get_cmd(fu, tv_nexus, cbw->Tag);
1226	if (IS_ERR(cmd)) {
1227		pr_err("usbg_get_cmd failed\n");
1228		return -ENOMEM;
1229	}
1230	memcpy(cmd->cmd_buf, cbw->CDB, cmd_len);
1231
1232	cmd->bot_tag = cbw->Tag;
1233	cmd->prio_attr = TCM_SIMPLE_TAG;
1234	cmd->unpacked_lun = cbw->Lun;
1235	cmd->is_read = cbw->Flags & US_BULK_FLAG_IN ? 1 : 0;
1236	cmd->data_len = le32_to_cpu(cbw->DataTransferLength);
1237	cmd->se_cmd.tag = le32_to_cpu(cmd->bot_tag);
1238
1239	INIT_WORK(&cmd->work, bot_cmd_work);
1240	queue_work(tpg->workqueue, &cmd->work);
1241
1242	return 0;
1243}
1244
1245/* Start fabric.c code */
1246
1247static int usbg_check_true(struct se_portal_group *se_tpg)
1248{
1249	return 1;
1250}
1251
1252static int usbg_check_false(struct se_portal_group *se_tpg)
1253{
1254	return 0;
1255}
1256
1257static char *usbg_get_fabric_name(void)
1258{
1259	return "usb_gadget";
1260}
1261
1262static char *usbg_get_fabric_wwn(struct se_portal_group *se_tpg)
1263{
1264	struct usbg_tpg *tpg = container_of(se_tpg,
1265				struct usbg_tpg, se_tpg);
1266	struct usbg_tport *tport = tpg->tport;
1267
1268	return &tport->tport_name[0];
1269}
1270
1271static u16 usbg_get_tag(struct se_portal_group *se_tpg)
1272{
1273	struct usbg_tpg *tpg = container_of(se_tpg,
1274				struct usbg_tpg, se_tpg);
1275	return tpg->tport_tpgt;
1276}
1277
1278static u32 usbg_tpg_get_inst_index(struct se_portal_group *se_tpg)
1279{
1280	return 1;
1281}
1282
1283static void usbg_release_cmd(struct se_cmd *se_cmd)
1284{
1285	struct usbg_cmd *cmd = container_of(se_cmd, struct usbg_cmd,
1286			se_cmd);
1287	struct se_session *se_sess = se_cmd->se_sess;
1288
1289	kfree(cmd->data_buf);
1290	percpu_ida_free(&se_sess->sess_tag_pool, se_cmd->map_tag);
1291}
1292
1293static int usbg_shutdown_session(struct se_session *se_sess)
1294{
1295	return 0;
1296}
1297
1298static void usbg_close_session(struct se_session *se_sess)
1299{
1300}
1301
1302static u32 usbg_sess_get_index(struct se_session *se_sess)
1303{
1304	return 0;
1305}
1306
1307/*
1308 * XXX Error recovery: return != 0 if we expect writes. Dunno when that could be
1309 */
1310static int usbg_write_pending_status(struct se_cmd *se_cmd)
1311{
1312	return 0;
1313}
1314
1315static void usbg_set_default_node_attrs(struct se_node_acl *nacl)
1316{
1317}
1318
1319static int usbg_get_cmd_state(struct se_cmd *se_cmd)
1320{
1321	return 0;
1322}
1323
1324static void usbg_queue_tm_rsp(struct se_cmd *se_cmd)
1325{
1326}
1327
1328static void usbg_aborted_task(struct se_cmd *se_cmd)
1329{
1330}
1331
1332static const char *usbg_check_wwn(const char *name)
1333{
1334	const char *n;
1335	unsigned int len;
1336
1337	n = strstr(name, "naa.");
1338	if (!n)
1339		return NULL;
1340	n += 4;
1341	len = strlen(n);
1342	if (len == 0 || len > USBG_NAMELEN - 1)
1343		return NULL;
1344	return n;
1345}
1346
1347static int usbg_init_nodeacl(struct se_node_acl *se_nacl, const char *name)
1348{
1349	if (!usbg_check_wwn(name))
1350		return -EINVAL;
1351	return 0;
1352}
1353
1354static struct se_portal_group *usbg_make_tpg(
1355	struct se_wwn *wwn,
1356	struct config_group *group,
1357	const char *name)
1358{
1359	struct usbg_tport *tport = container_of(wwn, struct usbg_tport,
1360			tport_wwn);
1361	struct usbg_tpg *tpg;
1362	unsigned long tpgt;
1363	int ret;
1364	struct f_tcm_opts *opts;
1365	unsigned i;
1366
1367	if (strstr(name, "tpgt_") != name)
1368		return ERR_PTR(-EINVAL);
1369	if (kstrtoul(name + 5, 0, &tpgt) || tpgt > UINT_MAX)
1370		return ERR_PTR(-EINVAL);
1371	ret = -ENODEV;
1372	mutex_lock(&tpg_instances_lock);
1373	for (i = 0; i < TPG_INSTANCES; ++i)
1374		if (tpg_instances[i].func_inst && !tpg_instances[i].tpg)
1375			break;
1376	if (i == TPG_INSTANCES)
1377		goto unlock_inst;
1378
1379	opts = container_of(tpg_instances[i].func_inst, struct f_tcm_opts,
1380		func_inst);
1381	mutex_lock(&opts->dep_lock);
1382	if (!opts->ready)
1383		goto unlock_dep;
1384
1385	if (opts->has_dep) {
1386		if (!try_module_get(opts->dependent))
1387			goto unlock_dep;
1388	} else {
1389		ret = configfs_depend_item_unlocked(
1390			group->cg_subsys,
1391			&opts->func_inst.group.cg_item);
1392		if (ret)
1393			goto unlock_dep;
1394	}
1395
1396	tpg = kzalloc(sizeof(struct usbg_tpg), GFP_KERNEL);
1397	ret = -ENOMEM;
1398	if (!tpg)
1399		goto unref_dep;
1400	mutex_init(&tpg->tpg_mutex);
1401	atomic_set(&tpg->tpg_port_count, 0);
1402	tpg->workqueue = alloc_workqueue("tcm_usb_gadget", 0, 1);
1403	if (!tpg->workqueue)
1404		goto free_tpg;
1405
1406	tpg->tport = tport;
1407	tpg->tport_tpgt = tpgt;
1408
1409	/*
1410	 * SPC doesn't assign a protocol identifier for USB-SCSI, so we
1411	 * pretend to be SAS..
1412	 */
1413	ret = core_tpg_register(wwn, &tpg->se_tpg, SCSI_PROTOCOL_SAS);
1414	if (ret < 0)
1415		goto free_workqueue;
1416
1417	tpg_instances[i].tpg = tpg;
1418	tpg->fi = tpg_instances[i].func_inst;
1419	mutex_unlock(&opts->dep_lock);
1420	mutex_unlock(&tpg_instances_lock);
1421	return &tpg->se_tpg;
1422
1423free_workqueue:
1424	destroy_workqueue(tpg->workqueue);
1425free_tpg:
1426	kfree(tpg);
1427unref_dep:
1428	if (opts->has_dep)
1429		module_put(opts->dependent);
1430	else
1431		configfs_undepend_item_unlocked(&opts->func_inst.group.cg_item);
1432unlock_dep:
1433	mutex_unlock(&opts->dep_lock);
1434unlock_inst:
1435	mutex_unlock(&tpg_instances_lock);
1436
1437	return ERR_PTR(ret);
1438}
1439
1440static int tcm_usbg_drop_nexus(struct usbg_tpg *);
1441
1442static void usbg_drop_tpg(struct se_portal_group *se_tpg)
1443{
1444	struct usbg_tpg *tpg = container_of(se_tpg,
1445				struct usbg_tpg, se_tpg);
1446	unsigned i;
1447	struct f_tcm_opts *opts;
1448
1449	tcm_usbg_drop_nexus(tpg);
1450	core_tpg_deregister(se_tpg);
1451	destroy_workqueue(tpg->workqueue);
1452
1453	mutex_lock(&tpg_instances_lock);
1454	for (i = 0; i < TPG_INSTANCES; ++i)
1455		if (tpg_instances[i].tpg == tpg)
1456			break;
1457	if (i < TPG_INSTANCES)
1458		tpg_instances[i].tpg = NULL;
1459	opts = container_of(tpg_instances[i].func_inst,
1460		struct f_tcm_opts, func_inst);
1461	mutex_lock(&opts->dep_lock);
1462	if (opts->has_dep)
1463		module_put(opts->dependent);
1464	else
1465		configfs_undepend_item_unlocked(&opts->func_inst.group.cg_item);
1466	mutex_unlock(&opts->dep_lock);
1467	mutex_unlock(&tpg_instances_lock);
1468
1469	kfree(tpg);
1470}
1471
1472static struct se_wwn *usbg_make_tport(
1473	struct target_fabric_configfs *tf,
1474	struct config_group *group,
1475	const char *name)
1476{
1477	struct usbg_tport *tport;
1478	const char *wnn_name;
1479	u64 wwpn = 0;
1480
1481	wnn_name = usbg_check_wwn(name);
1482	if (!wnn_name)
1483		return ERR_PTR(-EINVAL);
1484
1485	tport = kzalloc(sizeof(struct usbg_tport), GFP_KERNEL);
1486	if (!(tport))
1487		return ERR_PTR(-ENOMEM);
1488
1489	tport->tport_wwpn = wwpn;
1490	snprintf(tport->tport_name, sizeof(tport->tport_name), "%s", wnn_name);
1491	return &tport->tport_wwn;
1492}
1493
1494static void usbg_drop_tport(struct se_wwn *wwn)
1495{
1496	struct usbg_tport *tport = container_of(wwn,
1497				struct usbg_tport, tport_wwn);
1498	kfree(tport);
1499}
1500
1501/*
1502 * If somebody feels like dropping the version property, go ahead.
1503 */
1504static ssize_t usbg_wwn_version_show(struct config_item *item,  char *page)
1505{
1506	return sprintf(page, "usb-gadget fabric module\n");
1507}
1508
1509CONFIGFS_ATTR_RO(usbg_wwn_, version);
1510
1511static struct configfs_attribute *usbg_wwn_attrs[] = {
1512	&usbg_wwn_attr_version,
1513	NULL,
1514};
1515
1516static ssize_t tcm_usbg_tpg_enable_show(struct config_item *item, char *page)
1517{
1518	struct se_portal_group *se_tpg = to_tpg(item);
1519	struct usbg_tpg  *tpg = container_of(se_tpg, struct usbg_tpg, se_tpg);
1520
1521	return snprintf(page, PAGE_SIZE, "%u\n", tpg->gadget_connect);
1522}
1523
1524static int usbg_attach(struct usbg_tpg *);
1525static void usbg_detach(struct usbg_tpg *);
1526
1527static ssize_t tcm_usbg_tpg_enable_store(struct config_item *item,
1528		const char *page, size_t count)
1529{
1530	struct se_portal_group *se_tpg = to_tpg(item);
1531	struct usbg_tpg  *tpg = container_of(se_tpg, struct usbg_tpg, se_tpg);
1532	bool op;
1533	ssize_t ret;
1534
1535	ret = strtobool(page, &op);
1536	if (ret)
1537		return ret;
1538
1539	if ((op && tpg->gadget_connect) || (!op && !tpg->gadget_connect))
1540		return -EINVAL;
1541
1542	if (op)
1543		ret = usbg_attach(tpg);
1544	else
1545		usbg_detach(tpg);
1546	if (ret)
1547		return ret;
1548
1549	tpg->gadget_connect = op;
1550
1551	return count;
1552}
1553
1554static ssize_t tcm_usbg_tpg_nexus_show(struct config_item *item, char *page)
1555{
1556	struct se_portal_group *se_tpg = to_tpg(item);
1557	struct usbg_tpg *tpg = container_of(se_tpg, struct usbg_tpg, se_tpg);
1558	struct tcm_usbg_nexus *tv_nexus;
1559	ssize_t ret;
1560
1561	mutex_lock(&tpg->tpg_mutex);
1562	tv_nexus = tpg->tpg_nexus;
1563	if (!tv_nexus) {
1564		ret = -ENODEV;
1565		goto out;
1566	}
1567	ret = snprintf(page, PAGE_SIZE, "%s\n",
1568			tv_nexus->tvn_se_sess->se_node_acl->initiatorname);
1569out:
1570	mutex_unlock(&tpg->tpg_mutex);
1571	return ret;
1572}
1573
1574static int usbg_alloc_sess_cb(struct se_portal_group *se_tpg,
1575			      struct se_session *se_sess, void *p)
1576{
1577	struct usbg_tpg *tpg = container_of(se_tpg,
1578				struct usbg_tpg, se_tpg);
1579
1580	tpg->tpg_nexus = p;
1581	return 0;
1582}
1583
1584static int tcm_usbg_make_nexus(struct usbg_tpg *tpg, char *name)
1585{
1586	struct tcm_usbg_nexus *tv_nexus;
1587	int ret = 0;
1588
1589	mutex_lock(&tpg->tpg_mutex);
1590	if (tpg->tpg_nexus) {
1591		ret = -EEXIST;
1592		pr_debug("tpg->tpg_nexus already exists\n");
1593		goto out_unlock;
1594	}
1595
1596	tv_nexus = kzalloc(sizeof(*tv_nexus), GFP_KERNEL);
1597	if (!tv_nexus) {
1598		ret = -ENOMEM;
1599		goto out_unlock;
1600	}
1601
1602	tv_nexus->tvn_se_sess = target_alloc_session(&tpg->se_tpg,
1603						     USB_G_DEFAULT_SESSION_TAGS,
1604						     sizeof(struct usbg_cmd),
1605						     TARGET_PROT_NORMAL, name,
1606						     tv_nexus, usbg_alloc_sess_cb);
1607	if (IS_ERR(tv_nexus->tvn_se_sess)) {
1608#define MAKE_NEXUS_MSG "core_tpg_check_initiator_node_acl() failed for %s\n"
1609		pr_debug(MAKE_NEXUS_MSG, name);
1610#undef MAKE_NEXUS_MSG
1611		ret = PTR_ERR(tv_nexus->tvn_se_sess);
1612		kfree(tv_nexus);
1613	}
1614
1615out_unlock:
1616	mutex_unlock(&tpg->tpg_mutex);
1617	return ret;
1618}
1619
1620static int tcm_usbg_drop_nexus(struct usbg_tpg *tpg)
1621{
1622	struct se_session *se_sess;
1623	struct tcm_usbg_nexus *tv_nexus;
1624	int ret = -ENODEV;
1625
1626	mutex_lock(&tpg->tpg_mutex);
1627	tv_nexus = tpg->tpg_nexus;
1628	if (!tv_nexus)
1629		goto out;
1630
1631	se_sess = tv_nexus->tvn_se_sess;
1632	if (!se_sess)
1633		goto out;
1634
1635	if (atomic_read(&tpg->tpg_port_count)) {
1636		ret = -EPERM;
1637#define MSG "Unable to remove Host I_T Nexus with active TPG port count: %d\n"
1638		pr_err(MSG, atomic_read(&tpg->tpg_port_count));
1639#undef MSG
1640		goto out;
1641	}
1642
1643	pr_debug("Removing I_T Nexus to Initiator Port: %s\n",
1644			tv_nexus->tvn_se_sess->se_node_acl->initiatorname);
1645	/*
1646	 * Release the SCSI I_T Nexus to the emulated vHost Target Port
1647	 */
1648	transport_deregister_session(tv_nexus->tvn_se_sess);
1649	tpg->tpg_nexus = NULL;
1650
1651	kfree(tv_nexus);
1652	ret = 0;
1653out:
1654	mutex_unlock(&tpg->tpg_mutex);
1655	return ret;
1656}
1657
1658static ssize_t tcm_usbg_tpg_nexus_store(struct config_item *item,
1659		const char *page, size_t count)
1660{
1661	struct se_portal_group *se_tpg = to_tpg(item);
1662	struct usbg_tpg *tpg = container_of(se_tpg, struct usbg_tpg, se_tpg);
1663	unsigned char i_port[USBG_NAMELEN], *ptr;
1664	int ret;
1665
1666	if (!strncmp(page, "NULL", 4)) {
1667		ret = tcm_usbg_drop_nexus(tpg);
1668		return (!ret) ? count : ret;
1669	}
1670	if (strlen(page) >= USBG_NAMELEN) {
1671
1672#define NEXUS_STORE_MSG "Emulated NAA Sas Address: %s, exceeds max: %d\n"
1673		pr_err(NEXUS_STORE_MSG, page, USBG_NAMELEN);
1674#undef NEXUS_STORE_MSG
1675		return -EINVAL;
1676	}
1677	snprintf(i_port, USBG_NAMELEN, "%s", page);
1678
1679	ptr = strstr(i_port, "naa.");
1680	if (!ptr) {
1681		pr_err("Missing 'naa.' prefix\n");
1682		return -EINVAL;
1683	}
1684
1685	if (i_port[strlen(i_port) - 1] == '\n')
1686		i_port[strlen(i_port) - 1] = '\0';
1687
1688	ret = tcm_usbg_make_nexus(tpg, &i_port[0]);
1689	if (ret < 0)
1690		return ret;
1691	return count;
1692}
1693
1694CONFIGFS_ATTR(tcm_usbg_tpg_, enable);
1695CONFIGFS_ATTR(tcm_usbg_tpg_, nexus);
1696
1697static struct configfs_attribute *usbg_base_attrs[] = {
1698	&tcm_usbg_tpg_attr_enable,
1699	&tcm_usbg_tpg_attr_nexus,
1700	NULL,
1701};
1702
1703static int usbg_port_link(struct se_portal_group *se_tpg, struct se_lun *lun)
1704{
1705	struct usbg_tpg *tpg = container_of(se_tpg, struct usbg_tpg, se_tpg);
1706
1707	atomic_inc(&tpg->tpg_port_count);
1708	smp_mb__after_atomic();
1709	return 0;
1710}
1711
1712static void usbg_port_unlink(struct se_portal_group *se_tpg,
1713		struct se_lun *se_lun)
1714{
1715	struct usbg_tpg *tpg = container_of(se_tpg, struct usbg_tpg, se_tpg);
1716
1717	atomic_dec(&tpg->tpg_port_count);
1718	smp_mb__after_atomic();
1719}
1720
1721static int usbg_check_stop_free(struct se_cmd *se_cmd)
1722{
1723	return target_put_sess_cmd(se_cmd);
1724}
1725
1726static const struct target_core_fabric_ops usbg_ops = {
1727	.module				= THIS_MODULE,
1728	.name				= "usb_gadget",
1729	.get_fabric_name		= usbg_get_fabric_name,
1730	.tpg_get_wwn			= usbg_get_fabric_wwn,
1731	.tpg_get_tag			= usbg_get_tag,
1732	.tpg_check_demo_mode		= usbg_check_true,
1733	.tpg_check_demo_mode_cache	= usbg_check_false,
1734	.tpg_check_demo_mode_write_protect = usbg_check_false,
1735	.tpg_check_prod_mode_write_protect = usbg_check_false,
1736	.tpg_get_inst_index		= usbg_tpg_get_inst_index,
1737	.release_cmd			= usbg_release_cmd,
1738	.shutdown_session		= usbg_shutdown_session,
1739	.close_session			= usbg_close_session,
1740	.sess_get_index			= usbg_sess_get_index,
1741	.sess_get_initiator_sid		= NULL,
1742	.write_pending			= usbg_send_write_request,
1743	.write_pending_status		= usbg_write_pending_status,
1744	.set_default_node_attributes	= usbg_set_default_node_attrs,
1745	.get_cmd_state			= usbg_get_cmd_state,
1746	.queue_data_in			= usbg_send_read_response,
1747	.queue_status			= usbg_send_status_response,
1748	.queue_tm_rsp			= usbg_queue_tm_rsp,
1749	.aborted_task			= usbg_aborted_task,
1750	.check_stop_free		= usbg_check_stop_free,
1751
1752	.fabric_make_wwn		= usbg_make_tport,
1753	.fabric_drop_wwn		= usbg_drop_tport,
1754	.fabric_make_tpg		= usbg_make_tpg,
1755	.fabric_drop_tpg		= usbg_drop_tpg,
1756	.fabric_post_link		= usbg_port_link,
1757	.fabric_pre_unlink		= usbg_port_unlink,
1758	.fabric_init_nodeacl		= usbg_init_nodeacl,
1759
1760	.tfc_wwn_attrs			= usbg_wwn_attrs,
1761	.tfc_tpg_base_attrs		= usbg_base_attrs,
1762};
1763
1764/* Start gadget.c code */
1765
1766static struct usb_interface_descriptor bot_intf_desc = {
1767	.bLength =              sizeof(bot_intf_desc),
1768	.bDescriptorType =      USB_DT_INTERFACE,
1769	.bNumEndpoints =        2,
1770	.bAlternateSetting =	USB_G_ALT_INT_BBB,
1771	.bInterfaceClass =      USB_CLASS_MASS_STORAGE,
1772	.bInterfaceSubClass =   USB_SC_SCSI,
1773	.bInterfaceProtocol =   USB_PR_BULK,
1774};
1775
1776static struct usb_interface_descriptor uasp_intf_desc = {
1777	.bLength =		sizeof(uasp_intf_desc),
1778	.bDescriptorType =	USB_DT_INTERFACE,
1779	.bNumEndpoints =	4,
1780	.bAlternateSetting =	USB_G_ALT_INT_UAS,
1781	.bInterfaceClass =	USB_CLASS_MASS_STORAGE,
1782	.bInterfaceSubClass =	USB_SC_SCSI,
1783	.bInterfaceProtocol =	USB_PR_UAS,
1784};
1785
1786static struct usb_endpoint_descriptor uasp_bi_desc = {
1787	.bLength =		USB_DT_ENDPOINT_SIZE,
1788	.bDescriptorType =	USB_DT_ENDPOINT,
1789	.bEndpointAddress =	USB_DIR_IN,
1790	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1791	.wMaxPacketSize =	cpu_to_le16(512),
1792};
1793
1794static struct usb_endpoint_descriptor uasp_fs_bi_desc = {
1795	.bLength =		USB_DT_ENDPOINT_SIZE,
1796	.bDescriptorType =	USB_DT_ENDPOINT,
1797	.bEndpointAddress =	USB_DIR_IN,
1798	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1799};
1800
1801static struct usb_pipe_usage_descriptor uasp_bi_pipe_desc = {
1802	.bLength =		sizeof(uasp_bi_pipe_desc),
1803	.bDescriptorType =	USB_DT_PIPE_USAGE,
1804	.bPipeID =		DATA_IN_PIPE_ID,
1805};
1806
1807static struct usb_endpoint_descriptor uasp_ss_bi_desc = {
1808	.bLength =		USB_DT_ENDPOINT_SIZE,
1809	.bDescriptorType =	USB_DT_ENDPOINT,
1810	.bEndpointAddress =	USB_DIR_IN,
1811	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1812	.wMaxPacketSize =	cpu_to_le16(1024),
1813};
1814
1815static struct usb_ss_ep_comp_descriptor uasp_bi_ep_comp_desc = {
1816	.bLength =		sizeof(uasp_bi_ep_comp_desc),
1817	.bDescriptorType =	USB_DT_SS_ENDPOINT_COMP,
1818	.bMaxBurst =		0,
1819	.bmAttributes =		UASP_SS_EP_COMP_LOG_STREAMS,
1820	.wBytesPerInterval =	0,
1821};
1822
1823static struct usb_ss_ep_comp_descriptor bot_bi_ep_comp_desc = {
1824	.bLength =		sizeof(bot_bi_ep_comp_desc),
1825	.bDescriptorType =	USB_DT_SS_ENDPOINT_COMP,
1826	.bMaxBurst =		0,
1827};
1828
1829static struct usb_endpoint_descriptor uasp_bo_desc = {
1830	.bLength =		USB_DT_ENDPOINT_SIZE,
1831	.bDescriptorType =	USB_DT_ENDPOINT,
1832	.bEndpointAddress =	USB_DIR_OUT,
1833	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1834	.wMaxPacketSize =	cpu_to_le16(512),
1835};
1836
1837static struct usb_endpoint_descriptor uasp_fs_bo_desc = {
1838	.bLength =		USB_DT_ENDPOINT_SIZE,
1839	.bDescriptorType =	USB_DT_ENDPOINT,
1840	.bEndpointAddress =	USB_DIR_OUT,
1841	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1842};
1843
1844static struct usb_pipe_usage_descriptor uasp_bo_pipe_desc = {
1845	.bLength =		sizeof(uasp_bo_pipe_desc),
1846	.bDescriptorType =	USB_DT_PIPE_USAGE,
1847	.bPipeID =		DATA_OUT_PIPE_ID,
1848};
1849
1850static struct usb_endpoint_descriptor uasp_ss_bo_desc = {
1851	.bLength =		USB_DT_ENDPOINT_SIZE,
1852	.bDescriptorType =	USB_DT_ENDPOINT,
1853	.bEndpointAddress =	USB_DIR_OUT,
1854	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1855	.wMaxPacketSize =	cpu_to_le16(0x400),
1856};
1857
1858static struct usb_ss_ep_comp_descriptor uasp_bo_ep_comp_desc = {
1859	.bLength =		sizeof(uasp_bo_ep_comp_desc),
1860	.bDescriptorType =	USB_DT_SS_ENDPOINT_COMP,
1861	.bmAttributes =		UASP_SS_EP_COMP_LOG_STREAMS,
1862};
1863
1864static struct usb_ss_ep_comp_descriptor bot_bo_ep_comp_desc = {
1865	.bLength =		sizeof(bot_bo_ep_comp_desc),
1866	.bDescriptorType =	USB_DT_SS_ENDPOINT_COMP,
1867};
1868
1869static struct usb_endpoint_descriptor uasp_status_desc = {
1870	.bLength =		USB_DT_ENDPOINT_SIZE,
1871	.bDescriptorType =	USB_DT_ENDPOINT,
1872	.bEndpointAddress =	USB_DIR_IN,
1873	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1874	.wMaxPacketSize =	cpu_to_le16(512),
1875};
1876
1877static struct usb_endpoint_descriptor uasp_fs_status_desc = {
1878	.bLength =		USB_DT_ENDPOINT_SIZE,
1879	.bDescriptorType =	USB_DT_ENDPOINT,
1880	.bEndpointAddress =	USB_DIR_IN,
1881	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1882};
1883
1884static struct usb_pipe_usage_descriptor uasp_status_pipe_desc = {
1885	.bLength =		sizeof(uasp_status_pipe_desc),
1886	.bDescriptorType =	USB_DT_PIPE_USAGE,
1887	.bPipeID =		STATUS_PIPE_ID,
1888};
1889
1890static struct usb_endpoint_descriptor uasp_ss_status_desc = {
1891	.bLength =		USB_DT_ENDPOINT_SIZE,
1892	.bDescriptorType =	USB_DT_ENDPOINT,
1893	.bEndpointAddress =	USB_DIR_IN,
1894	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1895	.wMaxPacketSize =	cpu_to_le16(1024),
1896};
1897
1898static struct usb_ss_ep_comp_descriptor uasp_status_in_ep_comp_desc = {
1899	.bLength =		sizeof(uasp_status_in_ep_comp_desc),
1900	.bDescriptorType =	USB_DT_SS_ENDPOINT_COMP,
1901	.bmAttributes =		UASP_SS_EP_COMP_LOG_STREAMS,
1902};
1903
1904static struct usb_endpoint_descriptor uasp_cmd_desc = {
1905	.bLength =		USB_DT_ENDPOINT_SIZE,
1906	.bDescriptorType =	USB_DT_ENDPOINT,
1907	.bEndpointAddress =	USB_DIR_OUT,
1908	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1909	.wMaxPacketSize =	cpu_to_le16(512),
1910};
1911
1912static struct usb_endpoint_descriptor uasp_fs_cmd_desc = {
1913	.bLength =		USB_DT_ENDPOINT_SIZE,
1914	.bDescriptorType =	USB_DT_ENDPOINT,
1915	.bEndpointAddress =	USB_DIR_OUT,
1916	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1917};
1918
1919static struct usb_pipe_usage_descriptor uasp_cmd_pipe_desc = {
1920	.bLength =		sizeof(uasp_cmd_pipe_desc),
1921	.bDescriptorType =	USB_DT_PIPE_USAGE,
1922	.bPipeID =		CMD_PIPE_ID,
1923};
1924
1925static struct usb_endpoint_descriptor uasp_ss_cmd_desc = {
1926	.bLength =		USB_DT_ENDPOINT_SIZE,
1927	.bDescriptorType =	USB_DT_ENDPOINT,
1928	.bEndpointAddress =	USB_DIR_OUT,
1929	.bmAttributes =		USB_ENDPOINT_XFER_BULK,
1930	.wMaxPacketSize =	cpu_to_le16(1024),
1931};
1932
1933static struct usb_ss_ep_comp_descriptor uasp_cmd_comp_desc = {
1934	.bLength =		sizeof(uasp_cmd_comp_desc),
1935	.bDescriptorType =	USB_DT_SS_ENDPOINT_COMP,
1936};
1937
1938static struct usb_descriptor_header *uasp_fs_function_desc[] = {
1939	(struct usb_descriptor_header *) &bot_intf_desc,
1940	(struct usb_descriptor_header *) &uasp_fs_bi_desc,
1941	(struct usb_descriptor_header *) &uasp_fs_bo_desc,
1942
1943	(struct usb_descriptor_header *) &uasp_intf_desc,
1944	(struct usb_descriptor_header *) &uasp_fs_bi_desc,
1945	(struct usb_descriptor_header *) &uasp_bi_pipe_desc,
1946	(struct usb_descriptor_header *) &uasp_fs_bo_desc,
1947	(struct usb_descriptor_header *) &uasp_bo_pipe_desc,
1948	(struct usb_descriptor_header *) &uasp_fs_status_desc,
1949	(struct usb_descriptor_header *) &uasp_status_pipe_desc,
1950	(struct usb_descriptor_header *) &uasp_fs_cmd_desc,
1951	(struct usb_descriptor_header *) &uasp_cmd_pipe_desc,
1952	NULL,
1953};
1954
1955static struct usb_descriptor_header *uasp_hs_function_desc[] = {
1956	(struct usb_descriptor_header *) &bot_intf_desc,
1957	(struct usb_descriptor_header *) &uasp_bi_desc,
1958	(struct usb_descriptor_header *) &uasp_bo_desc,
1959
1960	(struct usb_descriptor_header *) &uasp_intf_desc,
1961	(struct usb_descriptor_header *) &uasp_bi_desc,
1962	(struct usb_descriptor_header *) &uasp_bi_pipe_desc,
1963	(struct usb_descriptor_header *) &uasp_bo_desc,
1964	(struct usb_descriptor_header *) &uasp_bo_pipe_desc,
1965	(struct usb_descriptor_header *) &uasp_status_desc,
1966	(struct usb_descriptor_header *) &uasp_status_pipe_desc,
1967	(struct usb_descriptor_header *) &uasp_cmd_desc,
1968	(struct usb_descriptor_header *) &uasp_cmd_pipe_desc,
1969	NULL,
1970};
1971
1972static struct usb_descriptor_header *uasp_ss_function_desc[] = {
1973	(struct usb_descriptor_header *) &bot_intf_desc,
1974	(struct usb_descriptor_header *) &uasp_ss_bi_desc,
1975	(struct usb_descriptor_header *) &bot_bi_ep_comp_desc,
1976	(struct usb_descriptor_header *) &uasp_ss_bo_desc,
1977	(struct usb_descriptor_header *) &bot_bo_ep_comp_desc,
1978
1979	(struct usb_descriptor_header *) &uasp_intf_desc,
1980	(struct usb_descriptor_header *) &uasp_ss_bi_desc,
1981	(struct usb_descriptor_header *) &uasp_bi_ep_comp_desc,
1982	(struct usb_descriptor_header *) &uasp_bi_pipe_desc,
1983	(struct usb_descriptor_header *) &uasp_ss_bo_desc,
1984	(struct usb_descriptor_header *) &uasp_bo_ep_comp_desc,
1985	(struct usb_descriptor_header *) &uasp_bo_pipe_desc,
1986	(struct usb_descriptor_header *) &uasp_ss_status_desc,
1987	(struct usb_descriptor_header *) &uasp_status_in_ep_comp_desc,
1988	(struct usb_descriptor_header *) &uasp_status_pipe_desc,
1989	(struct usb_descriptor_header *) &uasp_ss_cmd_desc,
1990	(struct usb_descriptor_header *) &uasp_cmd_comp_desc,
1991	(struct usb_descriptor_header *) &uasp_cmd_pipe_desc,
1992	NULL,
1993};
1994
1995static struct usb_string	tcm_us_strings[] = {
1996	[USB_G_STR_INT_UAS].s		= "USB Attached SCSI",
1997	[USB_G_STR_INT_BBB].s		= "Bulk Only Transport",
1998	{ },
1999};
2000
2001static struct usb_gadget_strings tcm_stringtab = {
2002	.language = 0x0409,
2003	.strings = tcm_us_strings,
2004};
2005
2006static struct usb_gadget_strings *tcm_strings[] = {
2007	&tcm_stringtab,
2008	NULL,
2009};
2010
2011static int tcm_bind(struct usb_configuration *c, struct usb_function *f)
2012{
2013	struct f_uas		*fu = to_f_uas(f);
2014	struct usb_string	*us;
2015	struct usb_gadget	*gadget = c->cdev->gadget;
2016	struct usb_ep		*ep;
2017	struct f_tcm_opts	*opts;
2018	int			iface;
2019	int			ret;
2020
2021	opts = container_of(f->fi, struct f_tcm_opts, func_inst);
2022
2023	mutex_lock(&opts->dep_lock);
2024	if (!opts->can_attach) {
2025		mutex_unlock(&opts->dep_lock);
2026		return -ENODEV;
2027	}
2028	mutex_unlock(&opts->dep_lock);
2029	us = usb_gstrings_attach(c->cdev, tcm_strings,
2030		ARRAY_SIZE(tcm_us_strings));
2031	if (IS_ERR(us))
2032		return PTR_ERR(us);
2033	bot_intf_desc.iInterface = us[USB_G_STR_INT_BBB].id;
2034	uasp_intf_desc.iInterface = us[USB_G_STR_INT_UAS].id;
2035
2036	iface = usb_interface_id(c, f);
2037	if (iface < 0)
2038		return iface;
2039
2040	bot_intf_desc.bInterfaceNumber = iface;
2041	uasp_intf_desc.bInterfaceNumber = iface;
2042	fu->iface = iface;
2043	ep = usb_ep_autoconfig_ss(gadget, &uasp_ss_bi_desc,
2044			&uasp_bi_ep_comp_desc);
2045	if (!ep)
2046		goto ep_fail;
2047
2048	fu->ep_in = ep;
2049
2050	ep = usb_ep_autoconfig_ss(gadget, &uasp_ss_bo_desc,
2051			&uasp_bo_ep_comp_desc);
2052	if (!ep)
2053		goto ep_fail;
2054	fu->ep_out = ep;
2055
2056	ep = usb_ep_autoconfig_ss(gadget, &uasp_ss_status_desc,
2057			&uasp_status_in_ep_comp_desc);
2058	if (!ep)
2059		goto ep_fail;
2060	fu->ep_status = ep;
2061
2062	ep = usb_ep_autoconfig_ss(gadget, &uasp_ss_cmd_desc,
2063			&uasp_cmd_comp_desc);
2064	if (!ep)
2065		goto ep_fail;
2066	fu->ep_cmd = ep;
2067
2068	/* Assume endpoint addresses are the same for both speeds */
2069	uasp_bi_desc.bEndpointAddress =	uasp_ss_bi_desc.bEndpointAddress;
2070	uasp_bo_desc.bEndpointAddress = uasp_ss_bo_desc.bEndpointAddress;
2071	uasp_status_desc.bEndpointAddress =
2072		uasp_ss_status_desc.bEndpointAddress;
2073	uasp_cmd_desc.bEndpointAddress = uasp_ss_cmd_desc.bEndpointAddress;
2074
2075	uasp_fs_bi_desc.bEndpointAddress = uasp_ss_bi_desc.bEndpointAddress;
2076	uasp_fs_bo_desc.bEndpointAddress = uasp_ss_bo_desc.bEndpointAddress;
2077	uasp_fs_status_desc.bEndpointAddress =
2078		uasp_ss_status_desc.bEndpointAddress;
2079	uasp_fs_cmd_desc.bEndpointAddress = uasp_ss_cmd_desc.bEndpointAddress;
2080
2081	ret = usb_assign_descriptors(f, uasp_fs_function_desc,
2082			uasp_hs_function_desc, uasp_ss_function_desc, NULL);
2083	if (ret)
2084		goto ep_fail;
2085
2086	return 0;
2087ep_fail:
2088	pr_err("Can't claim all required eps\n");
2089
2090	return -ENOTSUPP;
2091}
2092
2093struct guas_setup_wq {
2094	struct work_struct work;
2095	struct f_uas *fu;
2096	unsigned int alt;
2097};
2098
2099static void tcm_delayed_set_alt(struct work_struct *wq)
2100{
2101	struct guas_setup_wq *work = container_of(wq, struct guas_setup_wq,
2102			work);
2103	struct f_uas *fu = work->fu;
2104	int alt = work->alt;
2105
2106	kfree(work);
2107
2108	if (fu->flags & USBG_IS_BOT)
2109		bot_cleanup_old_alt(fu);
2110	if (fu->flags & USBG_IS_UAS)
2111		uasp_cleanup_old_alt(fu);
2112
2113	if (alt == USB_G_ALT_INT_BBB)
2114		bot_set_alt(fu);
2115	else if (alt == USB_G_ALT_INT_UAS)
2116		uasp_set_alt(fu);
2117	usb_composite_setup_continue(fu->function.config->cdev);
2118}
2119
2120static int tcm_set_alt(struct usb_function *f, unsigned intf, unsigned alt)
2121{
2122	struct f_uas *fu = to_f_uas(f);
2123
2124	if ((alt == USB_G_ALT_INT_BBB) || (alt == USB_G_ALT_INT_UAS)) {
2125		struct guas_setup_wq *work;
2126
2127		work = kmalloc(sizeof(*work), GFP_ATOMIC);
2128		if (!work)
2129			return -ENOMEM;
2130		INIT_WORK(&work->work, tcm_delayed_set_alt);
2131		work->fu = fu;
2132		work->alt = alt;
2133		schedule_work(&work->work);
2134		return USB_GADGET_DELAYED_STATUS;
2135	}
2136	return -EOPNOTSUPP;
2137}
2138
2139static void tcm_disable(struct usb_function *f)
2140{
2141	struct f_uas *fu = to_f_uas(f);
2142
2143	if (fu->flags & USBG_IS_UAS)
2144		uasp_cleanup_old_alt(fu);
2145	else if (fu->flags & USBG_IS_BOT)
2146		bot_cleanup_old_alt(fu);
2147	fu->flags = 0;
2148}
2149
2150static int tcm_setup(struct usb_function *f,
2151		const struct usb_ctrlrequest *ctrl)
2152{
2153	struct f_uas *fu = to_f_uas(f);
2154
2155	if (!(fu->flags & USBG_IS_BOT))
2156		return -EOPNOTSUPP;
2157
2158	return usbg_bot_setup(f, ctrl);
2159}
2160
2161static inline struct f_tcm_opts *to_f_tcm_opts(struct config_item *item)
2162{
2163	return container_of(to_config_group(item), struct f_tcm_opts,
2164		func_inst.group);
2165}
2166
2167static void tcm_attr_release(struct config_item *item)
2168{
2169	struct f_tcm_opts *opts = to_f_tcm_opts(item);
2170
2171	usb_put_function_instance(&opts->func_inst);
2172}
2173
2174static struct configfs_item_operations tcm_item_ops = {
2175	.release		= tcm_attr_release,
2176};
2177
2178static struct config_item_type tcm_func_type = {
2179	.ct_item_ops	= &tcm_item_ops,
2180	.ct_owner	= THIS_MODULE,
2181};
2182
2183static void tcm_free_inst(struct usb_function_instance *f)
2184{
2185	struct f_tcm_opts *opts;
2186	unsigned i;
2187
2188	opts = container_of(f, struct f_tcm_opts, func_inst);
2189
2190	mutex_lock(&tpg_instances_lock);
2191	for (i = 0; i < TPG_INSTANCES; ++i)
2192		if (tpg_instances[i].func_inst == f)
2193			break;
2194	if (i < TPG_INSTANCES)
2195		tpg_instances[i].func_inst = NULL;
2196	mutex_unlock(&tpg_instances_lock);
2197
2198	kfree(opts);
2199}
2200
2201static int tcm_register_callback(struct usb_function_instance *f)
2202{
2203	struct f_tcm_opts *opts = container_of(f, struct f_tcm_opts, func_inst);
2204
2205	mutex_lock(&opts->dep_lock);
2206	opts->can_attach = true;
2207	mutex_unlock(&opts->dep_lock);
2208
2209	return 0;
2210}
2211
2212static void tcm_unregister_callback(struct usb_function_instance *f)
2213{
2214	struct f_tcm_opts *opts = container_of(f, struct f_tcm_opts, func_inst);
2215
2216	mutex_lock(&opts->dep_lock);
2217	unregister_gadget_item(opts->
2218		func_inst.group.cg_item.ci_parent->ci_parent);
2219	opts->can_attach = false;
2220	mutex_unlock(&opts->dep_lock);
2221}
2222
2223static int usbg_attach(struct usbg_tpg *tpg)
2224{
2225	struct usb_function_instance *f = tpg->fi;
2226	struct f_tcm_opts *opts = container_of(f, struct f_tcm_opts, func_inst);
2227
2228	if (opts->tcm_register_callback)
2229		return opts->tcm_register_callback(f);
2230
2231	return 0;
2232}
2233
2234static void usbg_detach(struct usbg_tpg *tpg)
2235{
2236	struct usb_function_instance *f = tpg->fi;
2237	struct f_tcm_opts *opts = container_of(f, struct f_tcm_opts, func_inst);
2238
2239	if (opts->tcm_unregister_callback)
2240		opts->tcm_unregister_callback(f);
2241}
2242
2243static int tcm_set_name(struct usb_function_instance *f, const char *name)
2244{
2245	struct f_tcm_opts *opts = container_of(f, struct f_tcm_opts, func_inst);
2246
2247	pr_debug("tcm: Activating %s\n", name);
2248
2249	mutex_lock(&opts->dep_lock);
2250	opts->ready = true;
2251	mutex_unlock(&opts->dep_lock);
2252
2253	return 0;
2254}
2255
2256static struct usb_function_instance *tcm_alloc_inst(void)
2257{
2258	struct f_tcm_opts *opts;
2259	int i;
2260
2261
2262	opts = kzalloc(sizeof(*opts), GFP_KERNEL);
2263	if (!opts)
2264		return ERR_PTR(-ENOMEM);
2265
2266	mutex_lock(&tpg_instances_lock);
2267	for (i = 0; i < TPG_INSTANCES; ++i)
2268		if (!tpg_instances[i].func_inst)
2269			break;
2270
2271	if (i == TPG_INSTANCES) {
2272		mutex_unlock(&tpg_instances_lock);
2273		kfree(opts);
2274		return ERR_PTR(-EBUSY);
2275	}
2276	tpg_instances[i].func_inst = &opts->func_inst;
2277	mutex_unlock(&tpg_instances_lock);
2278
2279	mutex_init(&opts->dep_lock);
2280	opts->func_inst.set_inst_name = tcm_set_name;
2281	opts->func_inst.free_func_inst = tcm_free_inst;
2282	opts->tcm_register_callback = tcm_register_callback;
2283	opts->tcm_unregister_callback = tcm_unregister_callback;
2284
2285	config_group_init_type_name(&opts->func_inst.group, "",
2286			&tcm_func_type);
2287
2288	return &opts->func_inst;
2289}
2290
2291static void tcm_free(struct usb_function *f)
2292{
2293	struct f_uas *tcm = to_f_uas(f);
2294
2295	kfree(tcm);
2296}
2297
2298static void tcm_unbind(struct usb_configuration *c, struct usb_function *f)
2299{
2300	usb_free_all_descriptors(f);
2301}
2302
2303static struct usb_function *tcm_alloc(struct usb_function_instance *fi)
2304{
2305	struct f_uas *fu;
2306	unsigned i;
2307
2308	mutex_lock(&tpg_instances_lock);
2309	for (i = 0; i < TPG_INSTANCES; ++i)
2310		if (tpg_instances[i].func_inst == fi)
2311			break;
2312	if (i == TPG_INSTANCES) {
2313		mutex_unlock(&tpg_instances_lock);
2314		return ERR_PTR(-ENODEV);
2315	}
2316
2317	fu = kzalloc(sizeof(*fu), GFP_KERNEL);
2318	if (!fu) {
2319		mutex_unlock(&tpg_instances_lock);
2320		return ERR_PTR(-ENOMEM);
2321	}
2322
2323	fu->function.name = "Target Function";
2324	fu->function.bind = tcm_bind;
2325	fu->function.unbind = tcm_unbind;
2326	fu->function.set_alt = tcm_set_alt;
2327	fu->function.setup = tcm_setup;
2328	fu->function.disable = tcm_disable;
2329	fu->function.free_func = tcm_free;
2330	fu->tpg = tpg_instances[i].tpg;
2331	mutex_unlock(&tpg_instances_lock);
2332
2333	return &fu->function;
2334}
2335
2336DECLARE_USB_FUNCTION(tcm, tcm_alloc_inst, tcm_alloc);
2337
2338static int tcm_init(void)
2339{
2340	int ret;
2341
2342	ret = usb_function_register(&tcmusb_func);
2343	if (ret)
2344		return ret;
2345
2346	ret = target_register_template(&usbg_ops);
2347	if (ret)
2348		usb_function_unregister(&tcmusb_func);
2349
2350	return ret;
2351}
2352module_init(tcm_init);
2353
2354static void tcm_exit(void)
2355{
2356	target_unregister_template(&usbg_ops);
2357	usb_function_unregister(&tcmusb_func);
2358}
2359module_exit(tcm_exit);
2360
2361MODULE_LICENSE("GPL");
2362MODULE_AUTHOR("Sebastian Andrzej Siewior");