[linux-2.6-block.git] / drivers / target / target_core_tmr.c

/*******************************************************************************
 * Filename:  target_core_tmr.c
 *
 * This file contains SPC-3 task management infrastructure
 *
 * (c) Copyright 2009-2013 Datera, Inc.
 *
 * Nicholas A. Bellinger <nab@kernel.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 *
 ******************************************************************************/

#include <linux/slab.h>
#include <linux/spinlock.h>
#include <linux/list.h>
#include <linux/export.h>
#include <scsi/scsi.h>
#include <scsi/scsi_cmnd.h>

#include <target/target_core_base.h>
#include <target/target_core_backend.h>
#include <target/target_core_fabric.h>
#include <target/target_core_configfs.h>

#include "target_core_internal.h"
#include "target_core_alua.h"
#include "target_core_pr.h"

int core_tmr_alloc_req(
	struct se_cmd *se_cmd,
	void *fabric_tmr_ptr,
	u8 function,
	gfp_t gfp_flags)
{
	struct se_tmr_req *tmr;

	tmr = kzalloc(sizeof(struct se_tmr_req), gfp_flags);
	if (!tmr) {
		pr_err("Unable to allocate struct se_tmr_req\n");
		return -ENOMEM;
	}

	se_cmd->se_cmd_flags |= SCF_SCSI_TMR_CDB;
	se_cmd->se_tmr_req = tmr;
	tmr->task_cmd = se_cmd;
	tmr->fabric_tmr_ptr = fabric_tmr_ptr;
	tmr->function = function;
	INIT_LIST_HEAD(&tmr->tmr_list);

	return 0;
}
EXPORT_SYMBOL(core_tmr_alloc_req);

void core_tmr_release_req(
	struct se_tmr_req *tmr)
{
	struct se_device *dev = tmr->tmr_dev;
	unsigned long flags;

	if (!dev) {
		kfree(tmr);
		return;
	}

	spin_lock_irqsave(&dev->se_tmr_lock, flags);
	list_del(&tmr->tmr_list);
	spin_unlock_irqrestore(&dev->se_tmr_lock, flags);

	kfree(tmr);
}

static void core_tmr_handle_tas_abort(
	struct se_node_acl *tmr_nacl,
	struct se_cmd *cmd,
	int tas)
{
	/*
	 * TASK ABORTED status (TAS) bit support
	*/
	if ((tmr_nacl &&
	     (tmr_nacl == cmd->se_sess->se_node_acl)) || tas)
		transport_send_task_abort(cmd);

	transport_cmd_finish_abort(cmd, 0);
}

static int target_check_cdb_and_preempt(struct list_head *list,
		struct se_cmd *cmd)
{
	struct t10_pr_registration *reg;

	if (!list)
		return 0;
	list_for_each_entry(reg, list, pr_reg_abort_list) {
		if (reg->pr_res_key == cmd->pr_res_key)
			return 0;
	}

	return 1;
}

void core_tmr_abort_task(
	struct se_device *dev,
	struct se_tmr_req *tmr,
	struct se_session *se_sess)
{
	struct se_cmd *se_cmd, *tmp_cmd;
	unsigned long flags;
	int ref_tag;

	spin_lock_irqsave(&se_sess->sess_cmd_lock, flags);
	list_for_each_entry_safe(se_cmd, tmp_cmd,
			&se_sess->sess_cmd_list, se_cmd_list) {

		if (dev != se_cmd->se_dev)
			continue;
		ref_tag = se_cmd->se_tfo->get_task_tag(se_cmd);
		if (tmr->ref_task_tag != ref_tag)
			continue;

		printk("ABORT_TASK: Found referenced %s task_tag: %u\n",
			se_cmd->se_tfo->get_fabric_name(), ref_tag);

		spin_lock(&se_cmd->t_state_lock);
		if (se_cmd->transport_state & CMD_T_COMPLETE) {
			printk("ABORT_TASK: ref_tag: %u already complete, skipping\n", ref_tag);
			spin_unlock(&se_cmd->t_state_lock);
			spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
			goto out;
		}
		se_cmd->transport_state |= CMD_T_ABORTED;
		spin_unlock(&se_cmd->t_state_lock);

		list_del_init(&se_cmd->se_cmd_list);
		kref_get(&se_cmd->cmd_kref);
		spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);

		cancel_work_sync(&se_cmd->work);
		transport_wait_for_tasks(se_cmd);
		/*
		 * Now send SAM_STAT_TASK_ABORTED status for the referenced
		 * se_cmd descriptor..
		 */
		transport_send_task_abort(se_cmd);
		/*
		 * Also deal with possible extra acknowledge reference..
		 */
		if (se_cmd->se_cmd_flags & SCF_ACK_KREF)
			target_put_sess_cmd(se_sess, se_cmd);

		target_put_sess_cmd(se_sess, se_cmd);

		printk("ABORT_TASK: Sending TMR_FUNCTION_COMPLETE for"
				" ref_tag: %d\n", ref_tag);
		tmr->response = TMR_FUNCTION_COMPLETE;
		return;
	}
	spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);

out:
	printk("ABORT_TASK: Sending TMR_TASK_DOES_NOT_EXIST for ref_tag: %d\n",
			tmr->ref_task_tag);
	tmr->response = TMR_TASK_DOES_NOT_EXIST;
}

static void core_tmr_drain_tmr_list(
	struct se_device *dev,
	struct se_tmr_req *tmr,
	struct list_head *preempt_and_abort_list)
{
	LIST_HEAD(drain_tmr_list);
	struct se_tmr_req *tmr_p, *tmr_pp;
	struct se_cmd *cmd;
	unsigned long flags;
	/*
	 * Release all pending and outgoing TMRs aside from the received
	 * LUN_RESET tmr..
	 */
	spin_lock_irqsave(&dev->se_tmr_lock, flags);
	list_for_each_entry_safe(tmr_p, tmr_pp, &dev->dev_tmr_list, tmr_list) {
		/*
		 * Allow the received TMR to return with FUNCTION_COMPLETE.
		 */
		if (tmr_p == tmr)
			continue;

		cmd = tmr_p->task_cmd;
		if (!cmd) {
			pr_err("Unable to locate struct se_cmd for TMR\n");
			continue;
		}
		/*
		 * If this function was called with a valid pr_res_key
		 * parameter (eg: for PROUT PREEMPT_AND_ABORT service action
		 * skip non regisration key matching TMRs.
		 */
		if (target_check_cdb_and_preempt(preempt_and_abort_list, cmd))
			continue;

		spin_lock(&cmd->t_state_lock);
		if (!(cmd->transport_state & CMD_T_ACTIVE)) {
			spin_unlock(&cmd->t_state_lock);
			continue;
		}
		if (cmd->t_state == TRANSPORT_ISTATE_PROCESSING) {
			spin_unlock(&cmd->t_state_lock);
			continue;
		}
		spin_unlock(&cmd->t_state_lock);

		list_move_tail(&tmr_p->tmr_list, &drain_tmr_list);
	}
	spin_unlock_irqrestore(&dev->se_tmr_lock, flags);

	list_for_each_entry_safe(tmr_p, tmr_pp, &drain_tmr_list, tmr_list) {
		list_del_init(&tmr_p->tmr_list);
		cmd = tmr_p->task_cmd;

		pr_debug("LUN_RESET: %s releasing TMR %p Function: 0x%02x,"
			" Response: 0x%02x, t_state: %d\n",
			(preempt_and_abort_list) ? "Preempt" : "", tmr_p,
			tmr_p->function, tmr_p->response, cmd->t_state);

		transport_cmd_finish_abort(cmd, 1);
	}
}

static void core_tmr_drain_state_list(
	struct se_device *dev,
	struct se_cmd *prout_cmd,
	struct se_node_acl *tmr_nacl,
	int tas,
	struct list_head *preempt_and_abort_list)
{
	LIST_HEAD(drain_task_list);
	struct se_cmd *cmd, *next;
	unsigned long flags;

	/*
	 * Complete outstanding commands with TASK_ABORTED SAM status.
	 *
	 * This is following sam4r17, section 5.6 Aborting commands, Table 38
	 * for TMR LUN_RESET:
	 *
	 * a) "Yes" indicates that each command that is aborted on an I_T nexus
	 * other than the one that caused the SCSI device condition is
	 * completed with TASK ABORTED status, if the TAS bit is set to one in
	 * the Control mode page (see SPC-4). "No" indicates that no status is
	 * returned for aborted commands.
	 *
	 * d) If the logical unit reset is caused by a particular I_T nexus
	 * (e.g., by a LOGICAL UNIT RESET task management function), then "yes"
	 * (TASK_ABORTED status) applies.
	 *
	 * Otherwise (e.g., if triggered by a hard reset), "no"
	 * (no TASK_ABORTED SAM status) applies.
	 *
	 * Note that this seems to be independent of TAS (Task Aborted Status)
	 * in the Control Mode Page.
	 */
	spin_lock_irqsave(&dev->execute_task_lock, flags);
	list_for_each_entry_safe(cmd, next, &dev->state_list, state_list) {
		/*
		 * For PREEMPT_AND_ABORT usage, only process commands
		 * with a matching reservation key.
		 */
		if (target_check_cdb_and_preempt(preempt_and_abort_list, cmd))
			continue;

		/*
		 * Not aborting PROUT PREEMPT_AND_ABORT CDB..
		 */
		if (prout_cmd == cmd)
			continue;

		list_move_tail(&cmd->state_list, &drain_task_list);
		cmd->state_active = false;
	}
	spin_unlock_irqrestore(&dev->execute_task_lock, flags);

	while (!list_empty(&drain_task_list)) {
		cmd = list_entry(drain_task_list.next, struct se_cmd, state_list);
		list_del(&cmd->state_list);

		pr_debug("LUN_RESET: %s cmd: %p"
			" ITT/CmdSN: 0x%08x/0x%08x, i_state: %d, t_state: %d"
			"cdb: 0x%02x\n",
			(preempt_and_abort_list) ? "Preempt" : "", cmd,
			cmd->se_tfo->get_task_tag(cmd), 0,
			cmd->se_tfo->get_cmd_state(cmd), cmd->t_state,
			cmd->t_task_cdb[0]);
		pr_debug("LUN_RESET: ITT[0x%08x] - pr_res_key: 0x%016Lx"
			" -- CMD_T_ACTIVE: %d"
			" CMD_T_STOP: %d CMD_T_SENT: %d\n",
			cmd->se_tfo->get_task_tag(cmd), cmd->pr_res_key,
			(cmd->transport_state & CMD_T_ACTIVE) != 0,
			(cmd->transport_state & CMD_T_STOP) != 0,
			(cmd->transport_state & CMD_T_SENT) != 0);

		/*
		 * If the command may be queued onto a workqueue cancel it now.
		 *
		 * This is equivalent to removal from the execute queue in the
		 * loop above, but we do it down here given that
		 * cancel_work_sync may block.
		 */
		if (cmd->t_state == TRANSPORT_COMPLETE)
			cancel_work_sync(&cmd->work);

		spin_lock_irqsave(&cmd->t_state_lock, flags);
		target_stop_cmd(cmd, &flags);

		cmd->transport_state |= CMD_T_ABORTED;
		spin_unlock_irqrestore(&cmd->t_state_lock, flags);

		core_tmr_handle_tas_abort(tmr_nacl, cmd, tas);
	}
}

int core_tmr_lun_reset(
        struct se_device *dev,
        struct se_tmr_req *tmr,
        struct list_head *preempt_and_abort_list,
        struct se_cmd *prout_cmd)
{
	struct se_node_acl *tmr_nacl = NULL;
	struct se_portal_group *tmr_tpg = NULL;
	int tas;
        /*
	 * TASK_ABORTED status bit, this is configurable via ConfigFS
	 * struct se_device attributes.  spc4r17 section 7.4.6 Control mode page
	 *
	 * A task aborted status (TAS) bit set to zero specifies that aborted
	 * tasks shall be terminated by the device server without any response
	 * to the application client. A TAS bit set to one specifies that tasks
	 * aborted by the actions of an I_T nexus other than the I_T nexus on
	 * which the command was received shall be completed with TASK ABORTED
	 * status (see SAM-4).
	 */
	tas = dev->dev_attrib.emulate_tas;
	/*
	 * Determine if this se_tmr is coming from a $FABRIC_MOD
	 * or struct se_device passthrough..
	 */
	if (tmr && tmr->task_cmd && tmr->task_cmd->se_sess) {
		tmr_nacl = tmr->task_cmd->se_sess->se_node_acl;
		tmr_tpg = tmr->task_cmd->se_sess->se_tpg;
		if (tmr_nacl && tmr_tpg) {
			pr_debug("LUN_RESET: TMR caller fabric: %s"
				" initiator port %s\n",
				tmr_tpg->se_tpg_tfo->get_fabric_name(),
				tmr_nacl->initiatorname);
		}
	}
	pr_debug("LUN_RESET: %s starting for [%s], tas: %d\n",
		(preempt_and_abort_list) ? "Preempt" : "TMR",
		dev->transport->name, tas);

	core_tmr_drain_tmr_list(dev, tmr, preempt_and_abort_list);
	core_tmr_drain_state_list(dev, prout_cmd, tmr_nacl, tas,
				preempt_and_abort_list);

	/*
	 * Clear any legacy SPC-2 reservation when called during
	 * LOGICAL UNIT RESET
	 */
	if (!preempt_and_abort_list &&
	     (dev->dev_reservation_flags & DRF_SPC2_RESERVATIONS)) {
		spin_lock(&dev->dev_reservation_lock);
		dev->dev_reserved_node_acl = NULL;
		dev->dev_reservation_flags &= ~DRF_SPC2_RESERVATIONS;
		spin_unlock(&dev->dev_reservation_lock);
		pr_debug("LUN_RESET: SCSI-2 Released reservation\n");
	}

	spin_lock_irq(&dev->stats_lock);
	dev->num_resets++;
	spin_unlock_irq(&dev->stats_lock);

	pr_debug("LUN_RESET: %s for [%s] Complete\n",
			(preempt_and_abort_list) ? "Preempt" : "TMR",
			dev->transport->name);
	return 0;
}
Commit	Line	Data
c66ac9db NB	1	/*******************************************************************************
	2	* Filename: target_core_tmr.c
	3	*
	4	* This file contains SPC-3 task management infrastructure
	5	*
4c76251e	6	* (c) Copyright 2009-2013 Datera, Inc.
c66ac9db NB	7	*
	8	* Nicholas A. Bellinger <nab@kernel.org>
	9	*
	10	* This program is free software; you can redistribute it and/or modify
	11	* it under the terms of the GNU General Public License as published by
	12	* the Free Software Foundation; either version 2 of the License, or
	13	* (at your option) any later version.
	14	*
	15	* This program is distributed in the hope that it will be useful,
	16	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	17	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
	18	* GNU General Public License for more details.
	19	*
	20	* You should have received a copy of the GNU General Public License
	21	* along with this program; if not, write to the Free Software
	22	* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
	23	*
	24	******************************************************************************/
	25
c66ac9db NB	26	#include <linux/slab.h>
	27	#include <linux/spinlock.h>
	28	#include <linux/list.h>
c53181af	29	#include <linux/export.h>
c66ac9db NB	30	#include <scsi/scsi.h>
	31	#include <scsi/scsi_cmnd.h>
	32
	33	#include <target/target_core_base.h>
c4795fb2 CH	34	#include <target/target_core_backend.h>
c4795fb2 CH	35	#include <target/target_core_fabric.h>
c66ac9db NB	36	#include <target/target_core_configfs.h>
c66ac9db NB	37
e26d99ae	38	#include "target_core_internal.h"
c66ac9db NB	39	#include "target_core_alua.h"
	40	#include "target_core_pr.h"
	41
c8e31f26	42	int core_tmr_alloc_req(
c66ac9db NB	43	struct se_cmd *se_cmd,
c66ac9db NB	44	void *fabric_tmr_ptr,
dd503a5f RD	45	u8 function,
dd503a5f RD	46	gfp_t gfp_flags)
c66ac9db NB	47	{
	48	struct se_tmr_req *tmr;
	49
c8e31f26	50	tmr = kzalloc(sizeof(struct se_tmr_req), gfp_flags);
6708bb27 AG	51	if (!tmr) {
6708bb27 AG	52	pr_err("Unable to allocate struct se_tmr_req\n");
c8e31f26	53	return -ENOMEM;
c66ac9db	54	}
c8e31f26 AG	55
	56	se_cmd->se_cmd_flags \|= SCF_SCSI_TMR_CDB;
	57	se_cmd->se_tmr_req = tmr;
c66ac9db NB	58	tmr->task_cmd = se_cmd;
	59	tmr->fabric_tmr_ptr = fabric_tmr_ptr;
	60	tmr->function = function;
	61	INIT_LIST_HEAD(&tmr->tmr_list);
	62
c8e31f26	63	return 0;
c66ac9db NB	64	}
	65	EXPORT_SYMBOL(core_tmr_alloc_req);
	66
	67	void core_tmr_release_req(
	68	struct se_tmr_req *tmr)
	69	{
	70	struct se_device *dev = tmr->tmr_dev;
d050ffb9	71	unsigned long flags;
c66ac9db	72
7fd29aa9	73	if (!dev) {
c8e31f26	74	kfree(tmr);
7fd29aa9 NB	75	return;
	76	}
	77
d050ffb9	78	spin_lock_irqsave(&dev->se_tmr_lock, flags);
c66ac9db	79	list_del(&tmr->tmr_list);
d050ffb9	80	spin_unlock_irqrestore(&dev->se_tmr_lock, flags);
7fd29aa9	81
c8e31f26	82	kfree(tmr);
c66ac9db NB	83	}
	84
	85	static void core_tmr_handle_tas_abort(
	86	struct se_node_acl *tmr_nacl,
	87	struct se_cmd *cmd,
c1c35d52	88	int tas)
c66ac9db	89	{
c66ac9db NB	90	/*
	91	* TASK ABORTED status (TAS) bit support
	92	*/
6708bb27	93	if ((tmr_nacl &&
c66ac9db NB	94	(tmr_nacl == cmd->se_sess->se_node_acl)) \|\| tas)
	95	transport_send_task_abort(cmd);
	96
	97	transport_cmd_finish_abort(cmd, 0);
	98	}
	99
feae8564 JE	100	static int target_check_cdb_and_preempt(struct list_head *list,
feae8564 JE	101	struct se_cmd *cmd)
c165f69c	102	{
feae8564	103	struct t10_pr_registration *reg;
c165f69c	104
feae8564 JE	105	if (!list)
	106	return 0;
	107	list_for_each_entry(reg, list, pr_reg_abort_list) {
	108	if (reg->pr_res_key == cmd->pr_res_key)
c165f69c JE	109	return 0;
	110	}
	111
	112	return 1;
	113	}
	114
3d28934a NB	115	void core_tmr_abort_task(
	116	struct se_device *dev,
	117	struct se_tmr_req *tmr,
	118	struct se_session *se_sess)
	119	{
	120	struct se_cmd se_cmd, tmp_cmd;
	121	unsigned long flags;
	122	int ref_tag;
	123
	124	spin_lock_irqsave(&se_sess->sess_cmd_lock, flags);
	125	list_for_each_entry_safe(se_cmd, tmp_cmd,
	126	&se_sess->sess_cmd_list, se_cmd_list) {
	127
	128	if (dev != se_cmd->se_dev)
	129	continue;
	130	ref_tag = se_cmd->se_tfo->get_task_tag(se_cmd);
	131	if (tmr->ref_task_tag != ref_tag)
	132	continue;
	133
	134	printk("ABORT_TASK: Found referenced %s task_tag: %u\n",
	135	se_cmd->se_tfo->get_fabric_name(), ref_tag);
	136
ab74b3d6	137	spin_lock(&se_cmd->t_state_lock);
3d28934a NB	138	if (se_cmd->transport_state & CMD_T_COMPLETE) {
3d28934a NB	139	printk("ABORT_TASK: ref_tag: %u already complete, skipping\n", ref_tag);
ab74b3d6	140	spin_unlock(&se_cmd->t_state_lock);
3d28934a NB	141	spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
	142	goto out;
	143	}
	144	se_cmd->transport_state \|= CMD_T_ABORTED;
ab74b3d6	145	spin_unlock(&se_cmd->t_state_lock);
3d28934a NB	146
	147	list_del_init(&se_cmd->se_cmd_list);
	148	kref_get(&se_cmd->cmd_kref);
	149	spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
	150
	151	cancel_work_sync(&se_cmd->work);
	152	transport_wait_for_tasks(se_cmd);
	153	/*
	154	* Now send SAM_STAT_TASK_ABORTED status for the referenced
	155	* se_cmd descriptor..
	156	*/
	157	transport_send_task_abort(se_cmd);
	158	/*
	159	* Also deal with possible extra acknowledge reference..
	160	*/
	161	if (se_cmd->se_cmd_flags & SCF_ACK_KREF)
	162	target_put_sess_cmd(se_sess, se_cmd);
	163
	164	target_put_sess_cmd(se_sess, se_cmd);
	165
	166	printk("ABORT_TASK: Sending TMR_FUNCTION_COMPLETE for"
	167	" ref_tag: %d\n", ref_tag);
	168	tmr->response = TMR_FUNCTION_COMPLETE;
	169	return;
	170	}
	171	spin_unlock_irqrestore(&se_sess->sess_cmd_lock, flags);
	172
	173	out:
	174	printk("ABORT_TASK: Sending TMR_TASK_DOES_NOT_EXIST for ref_tag: %d\n",
	175	tmr->ref_task_tag);
	176	tmr->response = TMR_TASK_DOES_NOT_EXIST;
	177	}
	178
d050ffb9	179	static void core_tmr_drain_tmr_list(
c66ac9db NB	180	struct se_device *dev,
c66ac9db NB	181	struct se_tmr_req *tmr,
d050ffb9	182	struct list_head *preempt_and_abort_list)
c66ac9db	183	{
d050ffb9	184	LIST_HEAD(drain_tmr_list);
c66ac9db	185	struct se_tmr_req tmr_p, tmr_pp;
d050ffb9	186	struct se_cmd *cmd;
c66ac9db	187	unsigned long flags;
c66ac9db NB	188	/*
	189	* Release all pending and outgoing TMRs aside from the received
	190	* LUN_RESET tmr..
	191	*/
d050ffb9	192	spin_lock_irqsave(&dev->se_tmr_lock, flags);
c66ac9db NB	193	list_for_each_entry_safe(tmr_p, tmr_pp, &dev->dev_tmr_list, tmr_list) {
	194	/*
	195	* Allow the received TMR to return with FUNCTION_COMPLETE.
	196	*/
abc1fd4f	197	if (tmr_p == tmr)
c66ac9db NB	198	continue;
	199
	200	cmd = tmr_p->task_cmd;
6708bb27 AG	201	if (!cmd) {
6708bb27 AG	202	pr_err("Unable to locate struct se_cmd for TMR\n");
c66ac9db NB	203	continue;
	204	}
	205	/*
	206	* If this function was called with a valid pr_res_key
	207	* parameter (eg: for PROUT PREEMPT_AND_ABORT service action
	208	* skip non regisration key matching TMRs.
	209	*/
feae8564	210	if (target_check_cdb_and_preempt(preempt_and_abort_list, cmd))
c66ac9db	211	continue;
c66ac9db	212
d050ffb9	213	spin_lock(&cmd->t_state_lock);
7d680f3b	214	if (!(cmd->transport_state & CMD_T_ACTIVE)) {
d050ffb9	215	spin_unlock(&cmd->t_state_lock);
c66ac9db NB	216	continue;
	217	}
	218	if (cmd->t_state == TRANSPORT_ISTATE_PROCESSING) {
d050ffb9	219	spin_unlock(&cmd->t_state_lock);
c66ac9db NB	220	continue;
c66ac9db NB	221	}
d050ffb9 NB	222	spin_unlock(&cmd->t_state_lock);
d050ffb9 NB	223
6eb40b2a	224	list_move_tail(&tmr_p->tmr_list, &drain_tmr_list);
d050ffb9 NB	225	}
	226	spin_unlock_irqrestore(&dev->se_tmr_lock, flags);
	227
abc1fd4f	228	list_for_each_entry_safe(tmr_p, tmr_pp, &drain_tmr_list, tmr_list) {
b8a11d73	229	list_del_init(&tmr_p->tmr_list);
abc1fd4f	230	cmd = tmr_p->task_cmd;
d050ffb9	231
6708bb27	232	pr_debug("LUN_RESET: %s releasing TMR %p Function: 0x%02x,"
c66ac9db	233	" Response: 0x%02x, t_state: %d\n",
abc1fd4f JE	234	(preempt_and_abort_list) ? "Preempt" : "", tmr_p,
abc1fd4f JE	235	tmr_p->function, tmr_p->response, cmd->t_state);
c66ac9db	236
8dc52b54	237	transport_cmd_finish_abort(cmd, 1);
c66ac9db	238	}
d050ffb9 NB	239	}
d050ffb9 NB	240
cf572a96	241	static void core_tmr_drain_state_list(
d050ffb9 NB	242	struct se_device *dev,
	243	struct se_cmd *prout_cmd,
	244	struct se_node_acl *tmr_nacl,
	245	int tas,
	246	struct list_head *preempt_and_abort_list)
	247	{
	248	LIST_HEAD(drain_task_list);
cf572a96	249	struct se_cmd cmd, next;
d050ffb9	250	unsigned long flags;
cf572a96	251
c66ac9db	252	/*
cf572a96 CH	253	* Complete outstanding commands with TASK_ABORTED SAM status.
cf572a96 CH	254	*
c66ac9db NB	255	* This is following sam4r17, section 5.6 Aborting commands, Table 38
	256	* for TMR LUN_RESET:
	257	*
	258	* a) "Yes" indicates that each command that is aborted on an I_T nexus
	259	* other than the one that caused the SCSI device condition is
	260	* completed with TASK ABORTED status, if the TAS bit is set to one in
	261	* the Control mode page (see SPC-4). "No" indicates that no status is
	262	* returned for aborted commands.
	263	*
	264	* d) If the logical unit reset is caused by a particular I_T nexus
	265	* (e.g., by a LOGICAL UNIT RESET task management function), then "yes"
	266	* (TASK_ABORTED status) applies.
	267	*
	268	* Otherwise (e.g., if triggered by a hard reset), "no"
	269	* (no TASK_ABORTED SAM status) applies.
	270	*
	271	* Note that this seems to be independent of TAS (Task Aborted Status)
	272	* in the Control Mode Page.
	273	*/
	274	spin_lock_irqsave(&dev->execute_task_lock, flags);
cf572a96	275	list_for_each_entry_safe(cmd, next, &dev->state_list, state_list) {
c66ac9db NB	276	/*
	277	* For PREEMPT_AND_ABORT usage, only process commands
	278	* with a matching reservation key.
	279	*/
feae8564	280	if (target_check_cdb_and_preempt(preempt_and_abort_list, cmd))
c66ac9db	281	continue;
cf572a96	282
c66ac9db NB	283	/*
	284	* Not aborting PROUT PREEMPT_AND_ABORT CDB..
	285	*/
	286	if (prout_cmd == cmd)
	287	continue;
	288
cf572a96 CH	289	list_move_tail(&cmd->state_list, &drain_task_list);
cf572a96 CH	290	cmd->state_active = false;
d050ffb9 NB	291	}
	292	spin_unlock_irqrestore(&dev->execute_task_lock, flags);
	293
	294	while (!list_empty(&drain_task_list)) {
cf572a96 CH	295	cmd = list_entry(drain_task_list.next, struct se_cmd, state_list);
cf572a96 CH	296	list_del(&cmd->state_list);
c66ac9db	297
cf572a96	298	pr_debug("LUN_RESET: %s cmd: %p"
f2da9dbd CH	299	" ITT/CmdSN: 0x%08x/0x%08x, i_state: %d, t_state: %d"
f2da9dbd CH	300	"cdb: 0x%02x\n",
cf572a96	301	(preempt_and_abort_list) ? "Preempt" : "", cmd,
e3d6f909 AG	302	cmd->se_tfo->get_task_tag(cmd), 0,
e3d6f909 AG	303	cmd->se_tfo->get_cmd_state(cmd), cmd->t_state,
f2da9dbd	304	cmd->t_task_cdb[0]);
6708bb27	305	pr_debug("LUN_RESET: ITT[0x%08x] - pr_res_key: 0x%016Lx"
785fdf70	306	" -- CMD_T_ACTIVE: %d"
7d680f3b	307	" CMD_T_STOP: %d CMD_T_SENT: %d\n",
e3d6f909	308	cmd->se_tfo->get_task_tag(cmd), cmd->pr_res_key,
7d680f3b CH	309	(cmd->transport_state & CMD_T_ACTIVE) != 0,
	310	(cmd->transport_state & CMD_T_STOP) != 0,
	311	(cmd->transport_state & CMD_T_SENT) != 0);
c66ac9db	312
35e0e757 CH	313	/*
	314	* If the command may be queued onto a workqueue cancel it now.
	315	*
	316	* This is equivalent to removal from the execute queue in the
	317	* loop above, but we do it down here given that
	318	* cancel_work_sync may block.
	319	*/
	320	if (cmd->t_state == TRANSPORT_COMPLETE)
	321	cancel_work_sync(&cmd->work);
	322
cdbb70bb	323	spin_lock_irqsave(&cmd->t_state_lock, flags);
cf572a96	324	target_stop_cmd(cmd, &flags);
c66ac9db	325
7d680f3b	326	cmd->transport_state \|= CMD_T_ABORTED;
a1d8b49a	327	spin_unlock_irqrestore(&cmd->t_state_lock, flags);
c66ac9db	328
c1c35d52	329	core_tmr_handle_tas_abort(tmr_nacl, cmd, tas);
c66ac9db	330	}
d050ffb9 NB	331	}
d050ffb9 NB	332
d050ffb9 NB	333	int core_tmr_lun_reset(
	334	struct se_device *dev,
	335	struct se_tmr_req *tmr,
	336	struct list_head *preempt_and_abort_list,
	337	struct se_cmd *prout_cmd)
	338	{
	339	struct se_node_acl *tmr_nacl = NULL;
	340	struct se_portal_group *tmr_tpg = NULL;
	341	int tas;
	342	/*
	343	* TASK_ABORTED status bit, this is configurable via ConfigFS
	344	* struct se_device attributes. spc4r17 section 7.4.6 Control mode page
	345	*
	346	* A task aborted status (TAS) bit set to zero specifies that aborted
	347	* tasks shall be terminated by the device server without any response
	348	* to the application client. A TAS bit set to one specifies that tasks
	349	* aborted by the actions of an I_T nexus other than the I_T nexus on
	350	* which the command was received shall be completed with TASK ABORTED
	351	* status (see SAM-4).
	352	*/
0fd97ccf	353	tas = dev->dev_attrib.emulate_tas;
d050ffb9 NB	354	/*
	355	* Determine if this se_tmr is coming from a $FABRIC_MOD
	356	* or struct se_device passthrough..
	357	*/
	358	if (tmr && tmr->task_cmd && tmr->task_cmd->se_sess) {
	359	tmr_nacl = tmr->task_cmd->se_sess->se_node_acl;
	360	tmr_tpg = tmr->task_cmd->se_sess->se_tpg;
	361	if (tmr_nacl && tmr_tpg) {
	362	pr_debug("LUN_RESET: TMR caller fabric: %s"
	363	" initiator port %s\n",
	364	tmr_tpg->se_tpg_tfo->get_fabric_name(),
	365	tmr_nacl->initiatorname);
	366	}
	367	}
	368	pr_debug("LUN_RESET: %s starting for [%s], tas: %d\n",
	369	(preempt_and_abort_list) ? "Preempt" : "TMR",
	370	dev->transport->name, tas);
	371
	372	core_tmr_drain_tmr_list(dev, tmr, preempt_and_abort_list);
cf572a96	373	core_tmr_drain_state_list(dev, prout_cmd, tmr_nacl, tas,
d050ffb9	374	preempt_and_abort_list);
af877292	375
c66ac9db NB	376	/*
	377	* Clear any legacy SPC-2 reservation when called during
	378	* LOGICAL UNIT RESET
	379	*/
6708bb27	380	if (!preempt_and_abort_list &&
0fd97ccf	381	(dev->dev_reservation_flags & DRF_SPC2_RESERVATIONS)) {
c66ac9db NB	382	spin_lock(&dev->dev_reservation_lock);
c66ac9db NB	383	dev->dev_reserved_node_acl = NULL;
0fd97ccf	384	dev->dev_reservation_flags &= ~DRF_SPC2_RESERVATIONS;
c66ac9db	385	spin_unlock(&dev->dev_reservation_lock);
6708bb27	386	pr_debug("LUN_RESET: SCSI-2 Released reservation\n");
c66ac9db NB	387	}
c66ac9db NB	388
1e7de68c	389	spin_lock_irq(&dev->stats_lock);
c66ac9db	390	dev->num_resets++;
1e7de68c	391	spin_unlock_irq(&dev->stats_lock);
c66ac9db	392
6708bb27	393	pr_debug("LUN_RESET: %s for [%s] Complete\n",
c66ac9db	394	(preempt_and_abort_list) ? "Preempt" : "TMR",
e3d6f909	395	dev->transport->name);
c66ac9db NB	396	return 0;
c66ac9db NB	397	}
d050ffb9	398