loop/usb/vhost-scsi/xen-scsiback: Fix use of __transport_register_session
[sfrench/cifs-2.6.git] / drivers / vhost / scsi.c
1 /*******************************************************************************
2  * Vhost kernel TCM fabric driver for virtio SCSI initiators
3  *
4  * (C) Copyright 2010-2013 Datera, Inc.
5  * (C) Copyright 2010-2012 IBM Corp.
6  *
7  * Licensed to the Linux Foundation under the General Public License (GPL) version 2.
8  *
9  * Authors: Nicholas A. Bellinger <nab@daterainc.com>
10  *          Stefan Hajnoczi <stefanha@linux.vnet.ibm.com>
11  *
12  * This program is free software; you can redistribute it and/or modify
13  * it under the terms of the GNU General Public License as published by
14  * the Free Software Foundation; either version 2 of the License, or
15  * (at your option) any later version.
16  *
17  * This program is distributed in the hope that it will be useful,
18  * but WITHOUT ANY WARRANTY; without even the implied warranty of
19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
20  * GNU General Public License for more details.
21  *
22  ****************************************************************************/
23
24 #include <linux/module.h>
25 #include <linux/moduleparam.h>
26 #include <generated/utsrelease.h>
27 #include <linux/utsname.h>
28 #include <linux/init.h>
29 #include <linux/slab.h>
30 #include <linux/kthread.h>
31 #include <linux/types.h>
32 #include <linux/string.h>
33 #include <linux/configfs.h>
34 #include <linux/ctype.h>
35 #include <linux/compat.h>
36 #include <linux/eventfd.h>
37 #include <linux/fs.h>
38 #include <linux/miscdevice.h>
39 #include <asm/unaligned.h>
40 #include <scsi/scsi.h>
41 #include <target/target_core_base.h>
42 #include <target/target_core_fabric.h>
43 #include <target/target_core_fabric_configfs.h>
44 #include <target/target_core_configfs.h>
45 #include <target/configfs_macros.h>
46 #include <linux/vhost.h>
47 #include <linux/virtio_scsi.h>
48 #include <linux/llist.h>
49 #include <linux/bitmap.h>
50 #include <linux/percpu_ida.h>
51
52 #include "vhost.h"
53
54 #define VHOST_SCSI_VERSION  "v0.1"
55 #define VHOST_SCSI_NAMELEN 256
56 #define VHOST_SCSI_MAX_CDB_SIZE 32
57 #define VHOST_SCSI_DEFAULT_TAGS 256
58 #define VHOST_SCSI_PREALLOC_SGLS 2048
59 #define VHOST_SCSI_PREALLOC_UPAGES 2048
60 #define VHOST_SCSI_PREALLOC_PROT_SGLS 512
61
62 struct vhost_scsi_inflight {
63         /* Wait for the flush operation to finish */
64         struct completion comp;
65         /* Refcount for the inflight reqs */
66         struct kref kref;
67 };
68
69 struct vhost_scsi_cmd {
70         /* Descriptor from vhost_get_vq_desc() for virt_queue segment */
71         int tvc_vq_desc;
72         /* virtio-scsi initiator task attribute */
73         int tvc_task_attr;
74         /* virtio-scsi response incoming iovecs */
75         int tvc_in_iovs;
76         /* virtio-scsi initiator data direction */
77         enum dma_data_direction tvc_data_direction;
78         /* Expected data transfer length from virtio-scsi header */
79         u32 tvc_exp_data_len;
80         /* The Tag from include/linux/virtio_scsi.h:struct virtio_scsi_cmd_req */
81         u64 tvc_tag;
82         /* The number of scatterlists associated with this cmd */
83         u32 tvc_sgl_count;
84         u32 tvc_prot_sgl_count;
85         /* Saved unpacked SCSI LUN for vhost_scsi_submission_work() */
86         u32 tvc_lun;
87         /* Pointer to the SGL formatted memory from virtio-scsi */
88         struct scatterlist *tvc_sgl;
89         struct scatterlist *tvc_prot_sgl;
90         struct page **tvc_upages;
91         /* Pointer to response header iovec */
92         struct iovec *tvc_resp_iov;
93         /* Pointer to vhost_scsi for our device */
94         struct vhost_scsi *tvc_vhost;
95         /* Pointer to vhost_virtqueue for the cmd */
96         struct vhost_virtqueue *tvc_vq;
97         /* Pointer to vhost nexus memory */
98         struct vhost_scsi_nexus *tvc_nexus;
99         /* The TCM I/O descriptor that is accessed via container_of() */
100         struct se_cmd tvc_se_cmd;
101         /* work item used for cmwq dispatch to vhost_scsi_submission_work() */
102         struct work_struct work;
103         /* Copy of the incoming SCSI command descriptor block (CDB) */
104         unsigned char tvc_cdb[VHOST_SCSI_MAX_CDB_SIZE];
105         /* Sense buffer that will be mapped into outgoing status */
106         unsigned char tvc_sense_buf[TRANSPORT_SENSE_BUFFER];
107         /* Completed commands list, serviced from vhost worker thread */
108         struct llist_node tvc_completion_list;
109         /* Used to track inflight cmd */
110         struct vhost_scsi_inflight *inflight;
111 };
112
113 struct vhost_scsi_nexus {
114         /* Pointer to TCM session for I_T Nexus */
115         struct se_session *tvn_se_sess;
116 };
117
118 struct vhost_scsi_nacl {
119         /* Binary World Wide unique Port Name for Vhost Initiator port */
120         u64 iport_wwpn;
121         /* ASCII formatted WWPN for Sas Initiator port */
122         char iport_name[VHOST_SCSI_NAMELEN];
123         /* Returned by vhost_scsi_make_nodeacl() */
124         struct se_node_acl se_node_acl;
125 };
126
127 struct vhost_scsi_tpg {
128         /* Vhost port target portal group tag for TCM */
129         u16 tport_tpgt;
130         /* Used to track number of TPG Port/Lun Links wrt to explict I_T Nexus shutdown */
131         int tv_tpg_port_count;
132         /* Used for vhost_scsi device reference to tpg_nexus, protected by tv_tpg_mutex */
133         int tv_tpg_vhost_count;
134         /* list for vhost_scsi_list */
135         struct list_head tv_tpg_list;
136         /* Used to protect access for tpg_nexus */
137         struct mutex tv_tpg_mutex;
138         /* Pointer to the TCM VHost I_T Nexus for this TPG endpoint */
139         struct vhost_scsi_nexus *tpg_nexus;
140         /* Pointer back to vhost_scsi_tport */
141         struct vhost_scsi_tport *tport;
142         /* Returned by vhost_scsi_make_tpg() */
143         struct se_portal_group se_tpg;
144         /* Pointer back to vhost_scsi, protected by tv_tpg_mutex */
145         struct vhost_scsi *vhost_scsi;
146 };
147
148 struct vhost_scsi_tport {
149         /* SCSI protocol the tport is providing */
150         u8 tport_proto_id;
151         /* Binary World Wide unique Port Name for Vhost Target port */
152         u64 tport_wwpn;
153         /* ASCII formatted WWPN for Vhost Target port */
154         char tport_name[VHOST_SCSI_NAMELEN];
155         /* Returned by vhost_scsi_make_tport() */
156         struct se_wwn tport_wwn;
157 };
158
159 struct vhost_scsi_evt {
160         /* event to be sent to guest */
161         struct virtio_scsi_event event;
162         /* event list, serviced from vhost worker thread */
163         struct llist_node list;
164 };
165
166 enum {
167         VHOST_SCSI_VQ_CTL = 0,
168         VHOST_SCSI_VQ_EVT = 1,
169         VHOST_SCSI_VQ_IO = 2,
170 };
171
172 /* Note: can't set VIRTIO_F_VERSION_1 yet, since that implies ANY_LAYOUT. */
173 enum {
174         VHOST_SCSI_FEATURES = VHOST_FEATURES | (1ULL << VIRTIO_SCSI_F_HOTPLUG) |
175                                                (1ULL << VIRTIO_SCSI_F_T10_PI) |
176                                                (1ULL << VIRTIO_F_ANY_LAYOUT) |
177                                                (1ULL << VIRTIO_F_VERSION_1)
178 };
179
180 #define VHOST_SCSI_MAX_TARGET   256
181 #define VHOST_SCSI_MAX_VQ       128
182 #define VHOST_SCSI_MAX_EVENT    128
183
184 struct vhost_scsi_virtqueue {
185         struct vhost_virtqueue vq;
186         /*
187          * Reference counting for inflight reqs, used for flush operation. At
188          * each time, one reference tracks new commands submitted, while we
189          * wait for another one to reach 0.
190          */
191         struct vhost_scsi_inflight inflights[2];
192         /*
193          * Indicate current inflight in use, protected by vq->mutex.
194          * Writers must also take dev mutex and flush under it.
195          */
196         int inflight_idx;
197 };
198
199 struct vhost_scsi {
200         /* Protected by vhost_scsi->dev.mutex */
201         struct vhost_scsi_tpg **vs_tpg;
202         char vs_vhost_wwpn[TRANSPORT_IQN_LEN];
203
204         struct vhost_dev dev;
205         struct vhost_scsi_virtqueue vqs[VHOST_SCSI_MAX_VQ];
206
207         struct vhost_work vs_completion_work; /* cmd completion work item */
208         struct llist_head vs_completion_list; /* cmd completion queue */
209
210         struct vhost_work vs_event_work; /* evt injection work item */
211         struct llist_head vs_event_list; /* evt injection queue */
212
213         bool vs_events_missed; /* any missed events, protected by vq->mutex */
214         int vs_events_nr; /* num of pending events, protected by vq->mutex */
215 };
216
217 /* Local pointer to allocated TCM configfs fabric module */
218 static struct target_fabric_configfs *vhost_scsi_fabric_configfs;
219
220 static struct workqueue_struct *vhost_scsi_workqueue;
221
222 /* Global spinlock to protect vhost_scsi TPG list for vhost IOCTL access */
223 static DEFINE_MUTEX(vhost_scsi_mutex);
224 static LIST_HEAD(vhost_scsi_list);
225
226 static int iov_num_pages(void __user *iov_base, size_t iov_len)
227 {
228         return (PAGE_ALIGN((unsigned long)iov_base + iov_len) -
229                ((unsigned long)iov_base & PAGE_MASK)) >> PAGE_SHIFT;
230 }
231
232 static void vhost_scsi_done_inflight(struct kref *kref)
233 {
234         struct vhost_scsi_inflight *inflight;
235
236         inflight = container_of(kref, struct vhost_scsi_inflight, kref);
237         complete(&inflight->comp);
238 }
239
240 static void vhost_scsi_init_inflight(struct vhost_scsi *vs,
241                                     struct vhost_scsi_inflight *old_inflight[])
242 {
243         struct vhost_scsi_inflight *new_inflight;
244         struct vhost_virtqueue *vq;
245         int idx, i;
246
247         for (i = 0; i < VHOST_SCSI_MAX_VQ; i++) {
248                 vq = &vs->vqs[i].vq;
249
250                 mutex_lock(&vq->mutex);
251
252                 /* store old infight */
253                 idx = vs->vqs[i].inflight_idx;
254                 if (old_inflight)
255                         old_inflight[i] = &vs->vqs[i].inflights[idx];
256
257                 /* setup new infight */
258                 vs->vqs[i].inflight_idx = idx ^ 1;
259                 new_inflight = &vs->vqs[i].inflights[idx ^ 1];
260                 kref_init(&new_inflight->kref);
261                 init_completion(&new_inflight->comp);
262
263                 mutex_unlock(&vq->mutex);
264         }
265 }
266
267 static struct vhost_scsi_inflight *
268 vhost_scsi_get_inflight(struct vhost_virtqueue *vq)
269 {
270         struct vhost_scsi_inflight *inflight;
271         struct vhost_scsi_virtqueue *svq;
272
273         svq = container_of(vq, struct vhost_scsi_virtqueue, vq);
274         inflight = &svq->inflights[svq->inflight_idx];
275         kref_get(&inflight->kref);
276
277         return inflight;
278 }
279
280 static void vhost_scsi_put_inflight(struct vhost_scsi_inflight *inflight)
281 {
282         kref_put(&inflight->kref, vhost_scsi_done_inflight);
283 }
284
285 static int vhost_scsi_check_true(struct se_portal_group *se_tpg)
286 {
287         return 1;
288 }
289
290 static int vhost_scsi_check_false(struct se_portal_group *se_tpg)
291 {
292         return 0;
293 }
294
295 static char *vhost_scsi_get_fabric_name(void)
296 {
297         return "vhost";
298 }
299
300 static u8 vhost_scsi_get_fabric_proto_ident(struct se_portal_group *se_tpg)
301 {
302         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
303                                 struct vhost_scsi_tpg, se_tpg);
304         struct vhost_scsi_tport *tport = tpg->tport;
305
306         switch (tport->tport_proto_id) {
307         case SCSI_PROTOCOL_SAS:
308                 return sas_get_fabric_proto_ident(se_tpg);
309         case SCSI_PROTOCOL_FCP:
310                 return fc_get_fabric_proto_ident(se_tpg);
311         case SCSI_PROTOCOL_ISCSI:
312                 return iscsi_get_fabric_proto_ident(se_tpg);
313         default:
314                 pr_err("Unknown tport_proto_id: 0x%02x, using"
315                         " SAS emulation\n", tport->tport_proto_id);
316                 break;
317         }
318
319         return sas_get_fabric_proto_ident(se_tpg);
320 }
321
322 static char *vhost_scsi_get_fabric_wwn(struct se_portal_group *se_tpg)
323 {
324         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
325                                 struct vhost_scsi_tpg, se_tpg);
326         struct vhost_scsi_tport *tport = tpg->tport;
327
328         return &tport->tport_name[0];
329 }
330
331 static u16 vhost_scsi_get_tpgt(struct se_portal_group *se_tpg)
332 {
333         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
334                                 struct vhost_scsi_tpg, se_tpg);
335         return tpg->tport_tpgt;
336 }
337
338 static u32 vhost_scsi_get_default_depth(struct se_portal_group *se_tpg)
339 {
340         return 1;
341 }
342
343 static u32
344 vhost_scsi_get_pr_transport_id(struct se_portal_group *se_tpg,
345                               struct se_node_acl *se_nacl,
346                               struct t10_pr_registration *pr_reg,
347                               int *format_code,
348                               unsigned char *buf)
349 {
350         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
351                                 struct vhost_scsi_tpg, se_tpg);
352         struct vhost_scsi_tport *tport = tpg->tport;
353
354         switch (tport->tport_proto_id) {
355         case SCSI_PROTOCOL_SAS:
356                 return sas_get_pr_transport_id(se_tpg, se_nacl, pr_reg,
357                                         format_code, buf);
358         case SCSI_PROTOCOL_FCP:
359                 return fc_get_pr_transport_id(se_tpg, se_nacl, pr_reg,
360                                         format_code, buf);
361         case SCSI_PROTOCOL_ISCSI:
362                 return iscsi_get_pr_transport_id(se_tpg, se_nacl, pr_reg,
363                                         format_code, buf);
364         default:
365                 pr_err("Unknown tport_proto_id: 0x%02x, using"
366                         " SAS emulation\n", tport->tport_proto_id);
367                 break;
368         }
369
370         return sas_get_pr_transport_id(se_tpg, se_nacl, pr_reg,
371                         format_code, buf);
372 }
373
374 static u32
375 vhost_scsi_get_pr_transport_id_len(struct se_portal_group *se_tpg,
376                                   struct se_node_acl *se_nacl,
377                                   struct t10_pr_registration *pr_reg,
378                                   int *format_code)
379 {
380         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
381                                 struct vhost_scsi_tpg, se_tpg);
382         struct vhost_scsi_tport *tport = tpg->tport;
383
384         switch (tport->tport_proto_id) {
385         case SCSI_PROTOCOL_SAS:
386                 return sas_get_pr_transport_id_len(se_tpg, se_nacl, pr_reg,
387                                         format_code);
388         case SCSI_PROTOCOL_FCP:
389                 return fc_get_pr_transport_id_len(se_tpg, se_nacl, pr_reg,
390                                         format_code);
391         case SCSI_PROTOCOL_ISCSI:
392                 return iscsi_get_pr_transport_id_len(se_tpg, se_nacl, pr_reg,
393                                         format_code);
394         default:
395                 pr_err("Unknown tport_proto_id: 0x%02x, using"
396                         " SAS emulation\n", tport->tport_proto_id);
397                 break;
398         }
399
400         return sas_get_pr_transport_id_len(se_tpg, se_nacl, pr_reg,
401                         format_code);
402 }
403
404 static char *
405 vhost_scsi_parse_pr_out_transport_id(struct se_portal_group *se_tpg,
406                                     const char *buf,
407                                     u32 *out_tid_len,
408                                     char **port_nexus_ptr)
409 {
410         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
411                                 struct vhost_scsi_tpg, se_tpg);
412         struct vhost_scsi_tport *tport = tpg->tport;
413
414         switch (tport->tport_proto_id) {
415         case SCSI_PROTOCOL_SAS:
416                 return sas_parse_pr_out_transport_id(se_tpg, buf, out_tid_len,
417                                         port_nexus_ptr);
418         case SCSI_PROTOCOL_FCP:
419                 return fc_parse_pr_out_transport_id(se_tpg, buf, out_tid_len,
420                                         port_nexus_ptr);
421         case SCSI_PROTOCOL_ISCSI:
422                 return iscsi_parse_pr_out_transport_id(se_tpg, buf, out_tid_len,
423                                         port_nexus_ptr);
424         default:
425                 pr_err("Unknown tport_proto_id: 0x%02x, using"
426                         " SAS emulation\n", tport->tport_proto_id);
427                 break;
428         }
429
430         return sas_parse_pr_out_transport_id(se_tpg, buf, out_tid_len,
431                         port_nexus_ptr);
432 }
433
434 static struct se_node_acl *
435 vhost_scsi_alloc_fabric_acl(struct se_portal_group *se_tpg)
436 {
437         struct vhost_scsi_nacl *nacl;
438
439         nacl = kzalloc(sizeof(struct vhost_scsi_nacl), GFP_KERNEL);
440         if (!nacl) {
441                 pr_err("Unable to allocate struct vhost_scsi_nacl\n");
442                 return NULL;
443         }
444
445         return &nacl->se_node_acl;
446 }
447
448 static void
449 vhost_scsi_release_fabric_acl(struct se_portal_group *se_tpg,
450                              struct se_node_acl *se_nacl)
451 {
452         struct vhost_scsi_nacl *nacl = container_of(se_nacl,
453                         struct vhost_scsi_nacl, se_node_acl);
454         kfree(nacl);
455 }
456
457 static u32 vhost_scsi_tpg_get_inst_index(struct se_portal_group *se_tpg)
458 {
459         return 1;
460 }
461
462 static void vhost_scsi_release_cmd(struct se_cmd *se_cmd)
463 {
464         struct vhost_scsi_cmd *tv_cmd = container_of(se_cmd,
465                                 struct vhost_scsi_cmd, tvc_se_cmd);
466         struct se_session *se_sess = tv_cmd->tvc_nexus->tvn_se_sess;
467         int i;
468
469         if (tv_cmd->tvc_sgl_count) {
470                 for (i = 0; i < tv_cmd->tvc_sgl_count; i++)
471                         put_page(sg_page(&tv_cmd->tvc_sgl[i]));
472         }
473         if (tv_cmd->tvc_prot_sgl_count) {
474                 for (i = 0; i < tv_cmd->tvc_prot_sgl_count; i++)
475                         put_page(sg_page(&tv_cmd->tvc_prot_sgl[i]));
476         }
477
478         vhost_scsi_put_inflight(tv_cmd->inflight);
479         percpu_ida_free(&se_sess->sess_tag_pool, se_cmd->map_tag);
480 }
481
482 static int vhost_scsi_shutdown_session(struct se_session *se_sess)
483 {
484         return 0;
485 }
486
487 static void vhost_scsi_close_session(struct se_session *se_sess)
488 {
489         return;
490 }
491
492 static u32 vhost_scsi_sess_get_index(struct se_session *se_sess)
493 {
494         return 0;
495 }
496
497 static int vhost_scsi_write_pending(struct se_cmd *se_cmd)
498 {
499         /* Go ahead and process the write immediately */
500         target_execute_cmd(se_cmd);
501         return 0;
502 }
503
504 static int vhost_scsi_write_pending_status(struct se_cmd *se_cmd)
505 {
506         return 0;
507 }
508
509 static void vhost_scsi_set_default_node_attrs(struct se_node_acl *nacl)
510 {
511         return;
512 }
513
514 static u32 vhost_scsi_get_task_tag(struct se_cmd *se_cmd)
515 {
516         return 0;
517 }
518
519 static int vhost_scsi_get_cmd_state(struct se_cmd *se_cmd)
520 {
521         return 0;
522 }
523
524 static void vhost_scsi_complete_cmd(struct vhost_scsi_cmd *cmd)
525 {
526         struct vhost_scsi *vs = cmd->tvc_vhost;
527
528         llist_add(&cmd->tvc_completion_list, &vs->vs_completion_list);
529
530         vhost_work_queue(&vs->dev, &vs->vs_completion_work);
531 }
532
533 static int vhost_scsi_queue_data_in(struct se_cmd *se_cmd)
534 {
535         struct vhost_scsi_cmd *cmd = container_of(se_cmd,
536                                 struct vhost_scsi_cmd, tvc_se_cmd);
537         vhost_scsi_complete_cmd(cmd);
538         return 0;
539 }
540
541 static int vhost_scsi_queue_status(struct se_cmd *se_cmd)
542 {
543         struct vhost_scsi_cmd *cmd = container_of(se_cmd,
544                                 struct vhost_scsi_cmd, tvc_se_cmd);
545         vhost_scsi_complete_cmd(cmd);
546         return 0;
547 }
548
549 static void vhost_scsi_queue_tm_rsp(struct se_cmd *se_cmd)
550 {
551         return;
552 }
553
554 static void vhost_scsi_aborted_task(struct se_cmd *se_cmd)
555 {
556         return;
557 }
558
559 static void vhost_scsi_free_evt(struct vhost_scsi *vs, struct vhost_scsi_evt *evt)
560 {
561         vs->vs_events_nr--;
562         kfree(evt);
563 }
564
565 static struct vhost_scsi_evt *
566 vhost_scsi_allocate_evt(struct vhost_scsi *vs,
567                        u32 event, u32 reason)
568 {
569         struct vhost_virtqueue *vq = &vs->vqs[VHOST_SCSI_VQ_EVT].vq;
570         struct vhost_scsi_evt *evt;
571
572         if (vs->vs_events_nr > VHOST_SCSI_MAX_EVENT) {
573                 vs->vs_events_missed = true;
574                 return NULL;
575         }
576
577         evt = kzalloc(sizeof(*evt), GFP_KERNEL);
578         if (!evt) {
579                 vq_err(vq, "Failed to allocate vhost_scsi_evt\n");
580                 vs->vs_events_missed = true;
581                 return NULL;
582         }
583
584         evt->event.event = cpu_to_vhost32(vq, event);
585         evt->event.reason = cpu_to_vhost32(vq, reason);
586         vs->vs_events_nr++;
587
588         return evt;
589 }
590
591 static void vhost_scsi_free_cmd(struct vhost_scsi_cmd *cmd)
592 {
593         struct se_cmd *se_cmd = &cmd->tvc_se_cmd;
594
595         /* TODO locking against target/backend threads? */
596         transport_generic_free_cmd(se_cmd, 0);
597
598 }
599
600 static int vhost_scsi_check_stop_free(struct se_cmd *se_cmd)
601 {
602         return target_put_sess_cmd(se_cmd->se_sess, se_cmd);
603 }
604
605 static void
606 vhost_scsi_do_evt_work(struct vhost_scsi *vs, struct vhost_scsi_evt *evt)
607 {
608         struct vhost_virtqueue *vq = &vs->vqs[VHOST_SCSI_VQ_EVT].vq;
609         struct virtio_scsi_event *event = &evt->event;
610         struct virtio_scsi_event __user *eventp;
611         unsigned out, in;
612         int head, ret;
613
614         if (!vq->private_data) {
615                 vs->vs_events_missed = true;
616                 return;
617         }
618
619 again:
620         vhost_disable_notify(&vs->dev, vq);
621         head = vhost_get_vq_desc(vq, vq->iov,
622                         ARRAY_SIZE(vq->iov), &out, &in,
623                         NULL, NULL);
624         if (head < 0) {
625                 vs->vs_events_missed = true;
626                 return;
627         }
628         if (head == vq->num) {
629                 if (vhost_enable_notify(&vs->dev, vq))
630                         goto again;
631                 vs->vs_events_missed = true;
632                 return;
633         }
634
635         if ((vq->iov[out].iov_len != sizeof(struct virtio_scsi_event))) {
636                 vq_err(vq, "Expecting virtio_scsi_event, got %zu bytes\n",
637                                 vq->iov[out].iov_len);
638                 vs->vs_events_missed = true;
639                 return;
640         }
641
642         if (vs->vs_events_missed) {
643                 event->event |= cpu_to_vhost32(vq, VIRTIO_SCSI_T_EVENTS_MISSED);
644                 vs->vs_events_missed = false;
645         }
646
647         eventp = vq->iov[out].iov_base;
648         ret = __copy_to_user(eventp, event, sizeof(*event));
649         if (!ret)
650                 vhost_add_used_and_signal(&vs->dev, vq, head, 0);
651         else
652                 vq_err(vq, "Faulted on vhost_scsi_send_event\n");
653 }
654
655 static void vhost_scsi_evt_work(struct vhost_work *work)
656 {
657         struct vhost_scsi *vs = container_of(work, struct vhost_scsi,
658                                         vs_event_work);
659         struct vhost_virtqueue *vq = &vs->vqs[VHOST_SCSI_VQ_EVT].vq;
660         struct vhost_scsi_evt *evt;
661         struct llist_node *llnode;
662
663         mutex_lock(&vq->mutex);
664         llnode = llist_del_all(&vs->vs_event_list);
665         while (llnode) {
666                 evt = llist_entry(llnode, struct vhost_scsi_evt, list);
667                 llnode = llist_next(llnode);
668                 vhost_scsi_do_evt_work(vs, evt);
669                 vhost_scsi_free_evt(vs, evt);
670         }
671         mutex_unlock(&vq->mutex);
672 }
673
674 /* Fill in status and signal that we are done processing this command
675  *
676  * This is scheduled in the vhost work queue so we are called with the owner
677  * process mm and can access the vring.
678  */
679 static void vhost_scsi_complete_cmd_work(struct vhost_work *work)
680 {
681         struct vhost_scsi *vs = container_of(work, struct vhost_scsi,
682                                         vs_completion_work);
683         DECLARE_BITMAP(signal, VHOST_SCSI_MAX_VQ);
684         struct virtio_scsi_cmd_resp v_rsp;
685         struct vhost_scsi_cmd *cmd;
686         struct llist_node *llnode;
687         struct se_cmd *se_cmd;
688         struct iov_iter iov_iter;
689         int ret, vq;
690
691         bitmap_zero(signal, VHOST_SCSI_MAX_VQ);
692         llnode = llist_del_all(&vs->vs_completion_list);
693         while (llnode) {
694                 cmd = llist_entry(llnode, struct vhost_scsi_cmd,
695                                      tvc_completion_list);
696                 llnode = llist_next(llnode);
697                 se_cmd = &cmd->tvc_se_cmd;
698
699                 pr_debug("%s tv_cmd %p resid %u status %#02x\n", __func__,
700                         cmd, se_cmd->residual_count, se_cmd->scsi_status);
701
702                 memset(&v_rsp, 0, sizeof(v_rsp));
703                 v_rsp.resid = cpu_to_vhost32(cmd->tvc_vq, se_cmd->residual_count);
704                 /* TODO is status_qualifier field needed? */
705                 v_rsp.status = se_cmd->scsi_status;
706                 v_rsp.sense_len = cpu_to_vhost32(cmd->tvc_vq,
707                                                  se_cmd->scsi_sense_length);
708                 memcpy(v_rsp.sense, cmd->tvc_sense_buf,
709                        se_cmd->scsi_sense_length);
710
711                 iov_iter_init(&iov_iter, READ, cmd->tvc_resp_iov,
712                               cmd->tvc_in_iovs, sizeof(v_rsp));
713                 ret = copy_to_iter(&v_rsp, sizeof(v_rsp), &iov_iter);
714                 if (likely(ret == sizeof(v_rsp))) {
715                         struct vhost_scsi_virtqueue *q;
716                         vhost_add_used(cmd->tvc_vq, cmd->tvc_vq_desc, 0);
717                         q = container_of(cmd->tvc_vq, struct vhost_scsi_virtqueue, vq);
718                         vq = q - vs->vqs;
719                         __set_bit(vq, signal);
720                 } else
721                         pr_err("Faulted on virtio_scsi_cmd_resp\n");
722
723                 vhost_scsi_free_cmd(cmd);
724         }
725
726         vq = -1;
727         while ((vq = find_next_bit(signal, VHOST_SCSI_MAX_VQ, vq + 1))
728                 < VHOST_SCSI_MAX_VQ)
729                 vhost_signal(&vs->dev, &vs->vqs[vq].vq);
730 }
731
732 static struct vhost_scsi_cmd *
733 vhost_scsi_get_tag(struct vhost_virtqueue *vq, struct vhost_scsi_tpg *tpg,
734                    unsigned char *cdb, u64 scsi_tag, u16 lun, u8 task_attr,
735                    u32 exp_data_len, int data_direction)
736 {
737         struct vhost_scsi_cmd *cmd;
738         struct vhost_scsi_nexus *tv_nexus;
739         struct se_session *se_sess;
740         struct scatterlist *sg, *prot_sg;
741         struct page **pages;
742         int tag;
743
744         tv_nexus = tpg->tpg_nexus;
745         if (!tv_nexus) {
746                 pr_err("Unable to locate active struct vhost_scsi_nexus\n");
747                 return ERR_PTR(-EIO);
748         }
749         se_sess = tv_nexus->tvn_se_sess;
750
751         tag = percpu_ida_alloc(&se_sess->sess_tag_pool, TASK_RUNNING);
752         if (tag < 0) {
753                 pr_err("Unable to obtain tag for vhost_scsi_cmd\n");
754                 return ERR_PTR(-ENOMEM);
755         }
756
757         cmd = &((struct vhost_scsi_cmd *)se_sess->sess_cmd_map)[tag];
758         sg = cmd->tvc_sgl;
759         prot_sg = cmd->tvc_prot_sgl;
760         pages = cmd->tvc_upages;
761         memset(cmd, 0, sizeof(struct vhost_scsi_cmd));
762
763         cmd->tvc_sgl = sg;
764         cmd->tvc_prot_sgl = prot_sg;
765         cmd->tvc_upages = pages;
766         cmd->tvc_se_cmd.map_tag = tag;
767         cmd->tvc_tag = scsi_tag;
768         cmd->tvc_lun = lun;
769         cmd->tvc_task_attr = task_attr;
770         cmd->tvc_exp_data_len = exp_data_len;
771         cmd->tvc_data_direction = data_direction;
772         cmd->tvc_nexus = tv_nexus;
773         cmd->inflight = vhost_scsi_get_inflight(vq);
774
775         memcpy(cmd->tvc_cdb, cdb, VHOST_SCSI_MAX_CDB_SIZE);
776
777         return cmd;
778 }
779
780 /*
781  * Map a user memory range into a scatterlist
782  *
783  * Returns the number of scatterlist entries used or -errno on error.
784  */
785 static int
786 vhost_scsi_map_to_sgl(struct vhost_scsi_cmd *cmd,
787                       void __user *ptr,
788                       size_t len,
789                       struct scatterlist *sgl,
790                       bool write)
791 {
792         unsigned int npages = 0, offset, nbytes;
793         unsigned int pages_nr = iov_num_pages(ptr, len);
794         struct scatterlist *sg = sgl;
795         struct page **pages = cmd->tvc_upages;
796         int ret, i;
797
798         if (pages_nr > VHOST_SCSI_PREALLOC_UPAGES) {
799                 pr_err("vhost_scsi_map_to_sgl() pages_nr: %u greater than"
800                        " preallocated VHOST_SCSI_PREALLOC_UPAGES: %u\n",
801                         pages_nr, VHOST_SCSI_PREALLOC_UPAGES);
802                 return -ENOBUFS;
803         }
804
805         ret = get_user_pages_fast((unsigned long)ptr, pages_nr, write, pages);
806         /* No pages were pinned */
807         if (ret < 0)
808                 goto out;
809         /* Less pages pinned than wanted */
810         if (ret != pages_nr) {
811                 for (i = 0; i < ret; i++)
812                         put_page(pages[i]);
813                 ret = -EFAULT;
814                 goto out;
815         }
816
817         while (len > 0) {
818                 offset = (uintptr_t)ptr & ~PAGE_MASK;
819                 nbytes = min_t(unsigned int, PAGE_SIZE - offset, len);
820                 sg_set_page(sg, pages[npages], nbytes, offset);
821                 ptr += nbytes;
822                 len -= nbytes;
823                 sg++;
824                 npages++;
825         }
826
827 out:
828         return ret;
829 }
830
831 static int
832 vhost_scsi_calc_sgls(struct iov_iter *iter, size_t bytes, int max_sgls)
833 {
834         int sgl_count = 0;
835
836         if (!iter || !iter->iov) {
837                 pr_err("%s: iter->iov is NULL, but expected bytes: %zu"
838                        " present\n", __func__, bytes);
839                 return -EINVAL;
840         }
841
842         sgl_count = iov_iter_npages(iter, 0xffff);
843         if (sgl_count > max_sgls) {
844                 pr_err("%s: requested sgl_count: %d exceeds pre-allocated"
845                        " max_sgls: %d\n", __func__, sgl_count, max_sgls);
846                 return -EINVAL;
847         }
848         return sgl_count;
849 }
850
851 static int
852 vhost_scsi_iov_to_sgl(struct vhost_scsi_cmd *cmd, bool write,
853                       struct iov_iter *iter,
854                       struct scatterlist *sg, int sg_count)
855 {
856         size_t off = iter->iov_offset;
857         int i, ret;
858
859         for (i = 0; i < iter->nr_segs; i++) {
860                 void __user *base = iter->iov[i].iov_base + off;
861                 size_t len = iter->iov[i].iov_len - off;
862
863                 ret = vhost_scsi_map_to_sgl(cmd, base, len, sg, write);
864                 if (ret < 0) {
865                         for (i = 0; i < sg_count; i++) {
866                                 struct page *page = sg_page(&sg[i]);
867                                 if (page)
868                                         put_page(page);
869                         }
870                         return ret;
871                 }
872                 sg += ret;
873                 off = 0;
874         }
875         return 0;
876 }
877
878 static int
879 vhost_scsi_mapal(struct vhost_scsi_cmd *cmd,
880                  size_t prot_bytes, struct iov_iter *prot_iter,
881                  size_t data_bytes, struct iov_iter *data_iter)
882 {
883         int sgl_count, ret;
884         bool write = (cmd->tvc_data_direction == DMA_FROM_DEVICE);
885
886         if (prot_bytes) {
887                 sgl_count = vhost_scsi_calc_sgls(prot_iter, prot_bytes,
888                                                  VHOST_SCSI_PREALLOC_PROT_SGLS);
889                 if (sgl_count < 0)
890                         return sgl_count;
891
892                 sg_init_table(cmd->tvc_prot_sgl, sgl_count);
893                 cmd->tvc_prot_sgl_count = sgl_count;
894                 pr_debug("%s prot_sg %p prot_sgl_count %u\n", __func__,
895                          cmd->tvc_prot_sgl, cmd->tvc_prot_sgl_count);
896
897                 ret = vhost_scsi_iov_to_sgl(cmd, write, prot_iter,
898                                             cmd->tvc_prot_sgl,
899                                             cmd->tvc_prot_sgl_count);
900                 if (ret < 0) {
901                         cmd->tvc_prot_sgl_count = 0;
902                         return ret;
903                 }
904         }
905         sgl_count = vhost_scsi_calc_sgls(data_iter, data_bytes,
906                                          VHOST_SCSI_PREALLOC_SGLS);
907         if (sgl_count < 0)
908                 return sgl_count;
909
910         sg_init_table(cmd->tvc_sgl, sgl_count);
911         cmd->tvc_sgl_count = sgl_count;
912         pr_debug("%s data_sg %p data_sgl_count %u\n", __func__,
913                   cmd->tvc_sgl, cmd->tvc_sgl_count);
914
915         ret = vhost_scsi_iov_to_sgl(cmd, write, data_iter,
916                                     cmd->tvc_sgl, cmd->tvc_sgl_count);
917         if (ret < 0) {
918                 cmd->tvc_sgl_count = 0;
919                 return ret;
920         }
921         return 0;
922 }
923
924 static int vhost_scsi_to_tcm_attr(int attr)
925 {
926         switch (attr) {
927         case VIRTIO_SCSI_S_SIMPLE:
928                 return TCM_SIMPLE_TAG;
929         case VIRTIO_SCSI_S_ORDERED:
930                 return TCM_ORDERED_TAG;
931         case VIRTIO_SCSI_S_HEAD:
932                 return TCM_HEAD_TAG;
933         case VIRTIO_SCSI_S_ACA:
934                 return TCM_ACA_TAG;
935         default:
936                 break;
937         }
938         return TCM_SIMPLE_TAG;
939 }
940
941 static void vhost_scsi_submission_work(struct work_struct *work)
942 {
943         struct vhost_scsi_cmd *cmd =
944                 container_of(work, struct vhost_scsi_cmd, work);
945         struct vhost_scsi_nexus *tv_nexus;
946         struct se_cmd *se_cmd = &cmd->tvc_se_cmd;
947         struct scatterlist *sg_ptr, *sg_prot_ptr = NULL;
948         int rc;
949
950         /* FIXME: BIDI operation */
951         if (cmd->tvc_sgl_count) {
952                 sg_ptr = cmd->tvc_sgl;
953
954                 if (cmd->tvc_prot_sgl_count)
955                         sg_prot_ptr = cmd->tvc_prot_sgl;
956                 else
957                         se_cmd->prot_pto = true;
958         } else {
959                 sg_ptr = NULL;
960         }
961         tv_nexus = cmd->tvc_nexus;
962
963         rc = target_submit_cmd_map_sgls(se_cmd, tv_nexus->tvn_se_sess,
964                         cmd->tvc_cdb, &cmd->tvc_sense_buf[0],
965                         cmd->tvc_lun, cmd->tvc_exp_data_len,
966                         vhost_scsi_to_tcm_attr(cmd->tvc_task_attr),
967                         cmd->tvc_data_direction, TARGET_SCF_ACK_KREF,
968                         sg_ptr, cmd->tvc_sgl_count, NULL, 0, sg_prot_ptr,
969                         cmd->tvc_prot_sgl_count);
970         if (rc < 0) {
971                 transport_send_check_condition_and_sense(se_cmd,
972                                 TCM_LOGICAL_UNIT_COMMUNICATION_FAILURE, 0);
973                 transport_generic_free_cmd(se_cmd, 0);
974         }
975 }
976
977 static void
978 vhost_scsi_send_bad_target(struct vhost_scsi *vs,
979                            struct vhost_virtqueue *vq,
980                            int head, unsigned out)
981 {
982         struct virtio_scsi_cmd_resp __user *resp;
983         struct virtio_scsi_cmd_resp rsp;
984         int ret;
985
986         memset(&rsp, 0, sizeof(rsp));
987         rsp.response = VIRTIO_SCSI_S_BAD_TARGET;
988         resp = vq->iov[out].iov_base;
989         ret = __copy_to_user(resp, &rsp, sizeof(rsp));
990         if (!ret)
991                 vhost_add_used_and_signal(&vs->dev, vq, head, 0);
992         else
993                 pr_err("Faulted on virtio_scsi_cmd_resp\n");
994 }
995
996 static void
997 vhost_scsi_handle_vq(struct vhost_scsi *vs, struct vhost_virtqueue *vq)
998 {
999         struct vhost_scsi_tpg **vs_tpg, *tpg;
1000         struct virtio_scsi_cmd_req v_req;
1001         struct virtio_scsi_cmd_req_pi v_req_pi;
1002         struct vhost_scsi_cmd *cmd;
1003         struct iov_iter out_iter, in_iter, prot_iter, data_iter;
1004         u64 tag;
1005         u32 exp_data_len, data_direction;
1006         unsigned out, in;
1007         int head, ret, prot_bytes;
1008         size_t req_size, rsp_size = sizeof(struct virtio_scsi_cmd_resp);
1009         size_t out_size, in_size;
1010         u16 lun;
1011         u8 *target, *lunp, task_attr;
1012         bool t10_pi = vhost_has_feature(vq, VIRTIO_SCSI_F_T10_PI);
1013         void *req, *cdb;
1014
1015         mutex_lock(&vq->mutex);
1016         /*
1017          * We can handle the vq only after the endpoint is setup by calling the
1018          * VHOST_SCSI_SET_ENDPOINT ioctl.
1019          */
1020         vs_tpg = vq->private_data;
1021         if (!vs_tpg)
1022                 goto out;
1023
1024         vhost_disable_notify(&vs->dev, vq);
1025
1026         for (;;) {
1027                 head = vhost_get_vq_desc(vq, vq->iov,
1028                                          ARRAY_SIZE(vq->iov), &out, &in,
1029                                          NULL, NULL);
1030                 pr_debug("vhost_get_vq_desc: head: %d, out: %u in: %u\n",
1031                          head, out, in);
1032                 /* On error, stop handling until the next kick. */
1033                 if (unlikely(head < 0))
1034                         break;
1035                 /* Nothing new?  Wait for eventfd to tell us they refilled. */
1036                 if (head == vq->num) {
1037                         if (unlikely(vhost_enable_notify(&vs->dev, vq))) {
1038                                 vhost_disable_notify(&vs->dev, vq);
1039                                 continue;
1040                         }
1041                         break;
1042                 }
1043                 /*
1044                  * Check for a sane response buffer so we can report early
1045                  * errors back to the guest.
1046                  */
1047                 if (unlikely(vq->iov[out].iov_len < rsp_size)) {
1048                         vq_err(vq, "Expecting at least virtio_scsi_cmd_resp"
1049                                 " size, got %zu bytes\n", vq->iov[out].iov_len);
1050                         break;
1051                 }
1052                 /*
1053                  * Setup pointers and values based upon different virtio-scsi
1054                  * request header if T10_PI is enabled in KVM guest.
1055                  */
1056                 if (t10_pi) {
1057                         req = &v_req_pi;
1058                         req_size = sizeof(v_req_pi);
1059                         lunp = &v_req_pi.lun[0];
1060                         target = &v_req_pi.lun[1];
1061                 } else {
1062                         req = &v_req;
1063                         req_size = sizeof(v_req);
1064                         lunp = &v_req.lun[0];
1065                         target = &v_req.lun[1];
1066                 }
1067                 /*
1068                  * FIXME: Not correct for BIDI operation
1069                  */
1070                 out_size = iov_length(vq->iov, out);
1071                 in_size = iov_length(&vq->iov[out], in);
1072
1073                 /*
1074                  * Copy over the virtio-scsi request header, which for a
1075                  * ANY_LAYOUT enabled guest may span multiple iovecs, or a
1076                  * single iovec may contain both the header + outgoing
1077                  * WRITE payloads.
1078                  *
1079                  * copy_from_iter() will advance out_iter, so that it will
1080                  * point at the start of the outgoing WRITE payload, if
1081                  * DMA_TO_DEVICE is set.
1082                  */
1083                 iov_iter_init(&out_iter, WRITE, vq->iov, out, out_size);
1084
1085                 ret = copy_from_iter(req, req_size, &out_iter);
1086                 if (unlikely(ret != req_size)) {
1087                         vq_err(vq, "Faulted on copy_from_iter\n");
1088                         vhost_scsi_send_bad_target(vs, vq, head, out);
1089                         continue;
1090                 }
1091                 /* virtio-scsi spec requires byte 0 of the lun to be 1 */
1092                 if (unlikely(*lunp != 1)) {
1093                         vq_err(vq, "Illegal virtio-scsi lun: %u\n", *lunp);
1094                         vhost_scsi_send_bad_target(vs, vq, head, out);
1095                         continue;
1096                 }
1097
1098                 tpg = ACCESS_ONCE(vs_tpg[*target]);
1099                 if (unlikely(!tpg)) {
1100                         /* Target does not exist, fail the request */
1101                         vhost_scsi_send_bad_target(vs, vq, head, out);
1102                         continue;
1103                 }
1104                 /*
1105                  * Determine data_direction by calculating the total outgoing
1106                  * iovec sizes + incoming iovec sizes vs. virtio-scsi request +
1107                  * response headers respectively.
1108                  *
1109                  * For DMA_TO_DEVICE this is out_iter, which is already pointing
1110                  * to the right place.
1111                  *
1112                  * For DMA_FROM_DEVICE, the iovec will be just past the end
1113                  * of the virtio-scsi response header in either the same
1114                  * or immediately following iovec.
1115                  *
1116                  * Any associated T10_PI bytes for the outgoing / incoming
1117                  * payloads are included in calculation of exp_data_len here.
1118                  */
1119                 prot_bytes = 0;
1120
1121                 if (out_size > req_size) {
1122                         data_direction = DMA_TO_DEVICE;
1123                         exp_data_len = out_size - req_size;
1124                         data_iter = out_iter;
1125                 } else if (in_size > rsp_size) {
1126                         data_direction = DMA_FROM_DEVICE;
1127                         exp_data_len = in_size - rsp_size;
1128
1129                         iov_iter_init(&in_iter, READ, &vq->iov[out], in,
1130                                       rsp_size + exp_data_len);
1131                         iov_iter_advance(&in_iter, rsp_size);
1132                         data_iter = in_iter;
1133                 } else {
1134                         data_direction = DMA_NONE;
1135                         exp_data_len = 0;
1136                 }
1137                 /*
1138                  * If T10_PI header + payload is present, setup prot_iter values
1139                  * and recalculate data_iter for vhost_scsi_mapal() mapping to
1140                  * host scatterlists via get_user_pages_fast().
1141                  */
1142                 if (t10_pi) {
1143                         if (v_req_pi.pi_bytesout) {
1144                                 if (data_direction != DMA_TO_DEVICE) {
1145                                         vq_err(vq, "Received non zero pi_bytesout,"
1146                                                 " but wrong data_direction\n");
1147                                         vhost_scsi_send_bad_target(vs, vq, head, out);
1148                                         continue;
1149                                 }
1150                                 prot_bytes = vhost32_to_cpu(vq, v_req_pi.pi_bytesout);
1151                         } else if (v_req_pi.pi_bytesin) {
1152                                 if (data_direction != DMA_FROM_DEVICE) {
1153                                         vq_err(vq, "Received non zero pi_bytesin,"
1154                                                 " but wrong data_direction\n");
1155                                         vhost_scsi_send_bad_target(vs, vq, head, out);
1156                                         continue;
1157                                 }
1158                                 prot_bytes = vhost32_to_cpu(vq, v_req_pi.pi_bytesin);
1159                         }
1160                         /*
1161                          * Set prot_iter to data_iter, and advance past any
1162                          * preceeding prot_bytes that may be present.
1163                          *
1164                          * Also fix up the exp_data_len to reflect only the
1165                          * actual data payload length.
1166                          */
1167                         if (prot_bytes) {
1168                                 exp_data_len -= prot_bytes;
1169                                 prot_iter = data_iter;
1170                                 iov_iter_advance(&data_iter, prot_bytes);
1171                         }
1172                         tag = vhost64_to_cpu(vq, v_req_pi.tag);
1173                         task_attr = v_req_pi.task_attr;
1174                         cdb = &v_req_pi.cdb[0];
1175                         lun = ((v_req_pi.lun[2] << 8) | v_req_pi.lun[3]) & 0x3FFF;
1176                 } else {
1177                         tag = vhost64_to_cpu(vq, v_req.tag);
1178                         task_attr = v_req.task_attr;
1179                         cdb = &v_req.cdb[0];
1180                         lun = ((v_req.lun[2] << 8) | v_req.lun[3]) & 0x3FFF;
1181                 }
1182                 /*
1183                  * Check that the received CDB size does not exceeded our
1184                  * hardcoded max for vhost-scsi, then get a pre-allocated
1185                  * cmd descriptor for the new virtio-scsi tag.
1186                  *
1187                  * TODO what if cdb was too small for varlen cdb header?
1188                  */
1189                 if (unlikely(scsi_command_size(cdb) > VHOST_SCSI_MAX_CDB_SIZE)) {
1190                         vq_err(vq, "Received SCSI CDB with command_size: %d that"
1191                                 " exceeds SCSI_MAX_VARLEN_CDB_SIZE: %d\n",
1192                                 scsi_command_size(cdb), VHOST_SCSI_MAX_CDB_SIZE);
1193                         vhost_scsi_send_bad_target(vs, vq, head, out);
1194                         continue;
1195                 }
1196                 cmd = vhost_scsi_get_tag(vq, tpg, cdb, tag, lun, task_attr,
1197                                          exp_data_len + prot_bytes,
1198                                          data_direction);
1199                 if (IS_ERR(cmd)) {
1200                         vq_err(vq, "vhost_scsi_get_tag failed %ld\n",
1201                                PTR_ERR(cmd));
1202                         vhost_scsi_send_bad_target(vs, vq, head, out);
1203                         continue;
1204                 }
1205                 cmd->tvc_vhost = vs;
1206                 cmd->tvc_vq = vq;
1207                 cmd->tvc_resp_iov = &vq->iov[out];
1208                 cmd->tvc_in_iovs = in;
1209
1210                 pr_debug("vhost_scsi got command opcode: %#02x, lun: %d\n",
1211                          cmd->tvc_cdb[0], cmd->tvc_lun);
1212                 pr_debug("cmd: %p exp_data_len: %d, prot_bytes: %d data_direction:"
1213                          " %d\n", cmd, exp_data_len, prot_bytes, data_direction);
1214
1215                 if (data_direction != DMA_NONE) {
1216                         ret = vhost_scsi_mapal(cmd,
1217                                                prot_bytes, &prot_iter,
1218                                                exp_data_len, &data_iter);
1219                         if (unlikely(ret)) {
1220                                 vq_err(vq, "Failed to map iov to sgl\n");
1221                                 vhost_scsi_release_cmd(&cmd->tvc_se_cmd);
1222                                 vhost_scsi_send_bad_target(vs, vq, head, out);
1223                                 continue;
1224                         }
1225                 }
1226                 /*
1227                  * Save the descriptor from vhost_get_vq_desc() to be used to
1228                  * complete the virtio-scsi request in TCM callback context via
1229                  * vhost_scsi_queue_data_in() and vhost_scsi_queue_status()
1230                  */
1231                 cmd->tvc_vq_desc = head;
1232                 /*
1233                  * Dispatch cmd descriptor for cmwq execution in process
1234                  * context provided by vhost_scsi_workqueue.  This also ensures
1235                  * cmd is executed on the same kworker CPU as this vhost
1236                  * thread to gain positive L2 cache locality effects.
1237                  */
1238                 INIT_WORK(&cmd->work, vhost_scsi_submission_work);
1239                 queue_work(vhost_scsi_workqueue, &cmd->work);
1240         }
1241 out:
1242         mutex_unlock(&vq->mutex);
1243 }
1244
1245 static void vhost_scsi_ctl_handle_kick(struct vhost_work *work)
1246 {
1247         pr_debug("%s: The handling func for control queue.\n", __func__);
1248 }
1249
1250 static void
1251 vhost_scsi_send_evt(struct vhost_scsi *vs,
1252                    struct vhost_scsi_tpg *tpg,
1253                    struct se_lun *lun,
1254                    u32 event,
1255                    u32 reason)
1256 {
1257         struct vhost_scsi_evt *evt;
1258
1259         evt = vhost_scsi_allocate_evt(vs, event, reason);
1260         if (!evt)
1261                 return;
1262
1263         if (tpg && lun) {
1264                 /* TODO: share lun setup code with virtio-scsi.ko */
1265                 /*
1266                  * Note: evt->event is zeroed when we allocate it and
1267                  * lun[4-7] need to be zero according to virtio-scsi spec.
1268                  */
1269                 evt->event.lun[0] = 0x01;
1270                 evt->event.lun[1] = tpg->tport_tpgt;
1271                 if (lun->unpacked_lun >= 256)
1272                         evt->event.lun[2] = lun->unpacked_lun >> 8 | 0x40 ;
1273                 evt->event.lun[3] = lun->unpacked_lun & 0xFF;
1274         }
1275
1276         llist_add(&evt->list, &vs->vs_event_list);
1277         vhost_work_queue(&vs->dev, &vs->vs_event_work);
1278 }
1279
1280 static void vhost_scsi_evt_handle_kick(struct vhost_work *work)
1281 {
1282         struct vhost_virtqueue *vq = container_of(work, struct vhost_virtqueue,
1283                                                 poll.work);
1284         struct vhost_scsi *vs = container_of(vq->dev, struct vhost_scsi, dev);
1285
1286         mutex_lock(&vq->mutex);
1287         if (!vq->private_data)
1288                 goto out;
1289
1290         if (vs->vs_events_missed)
1291                 vhost_scsi_send_evt(vs, NULL, NULL, VIRTIO_SCSI_T_NO_EVENT, 0);
1292 out:
1293         mutex_unlock(&vq->mutex);
1294 }
1295
1296 static void vhost_scsi_handle_kick(struct vhost_work *work)
1297 {
1298         struct vhost_virtqueue *vq = container_of(work, struct vhost_virtqueue,
1299                                                 poll.work);
1300         struct vhost_scsi *vs = container_of(vq->dev, struct vhost_scsi, dev);
1301
1302         vhost_scsi_handle_vq(vs, vq);
1303 }
1304
1305 static void vhost_scsi_flush_vq(struct vhost_scsi *vs, int index)
1306 {
1307         vhost_poll_flush(&vs->vqs[index].vq.poll);
1308 }
1309
1310 /* Callers must hold dev mutex */
1311 static void vhost_scsi_flush(struct vhost_scsi *vs)
1312 {
1313         struct vhost_scsi_inflight *old_inflight[VHOST_SCSI_MAX_VQ];
1314         int i;
1315
1316         /* Init new inflight and remember the old inflight */
1317         vhost_scsi_init_inflight(vs, old_inflight);
1318
1319         /*
1320          * The inflight->kref was initialized to 1. We decrement it here to
1321          * indicate the start of the flush operation so that it will reach 0
1322          * when all the reqs are finished.
1323          */
1324         for (i = 0; i < VHOST_SCSI_MAX_VQ; i++)
1325                 kref_put(&old_inflight[i]->kref, vhost_scsi_done_inflight);
1326
1327         /* Flush both the vhost poll and vhost work */
1328         for (i = 0; i < VHOST_SCSI_MAX_VQ; i++)
1329                 vhost_scsi_flush_vq(vs, i);
1330         vhost_work_flush(&vs->dev, &vs->vs_completion_work);
1331         vhost_work_flush(&vs->dev, &vs->vs_event_work);
1332
1333         /* Wait for all reqs issued before the flush to be finished */
1334         for (i = 0; i < VHOST_SCSI_MAX_VQ; i++)
1335                 wait_for_completion(&old_inflight[i]->comp);
1336 }
1337
1338 /*
1339  * Called from vhost_scsi_ioctl() context to walk the list of available
1340  * vhost_scsi_tpg with an active struct vhost_scsi_nexus
1341  *
1342  *  The lock nesting rule is:
1343  *    vhost_scsi_mutex -> vs->dev.mutex -> tpg->tv_tpg_mutex -> vq->mutex
1344  */
1345 static int
1346 vhost_scsi_set_endpoint(struct vhost_scsi *vs,
1347                         struct vhost_scsi_target *t)
1348 {
1349         struct se_portal_group *se_tpg;
1350         struct vhost_scsi_tport *tv_tport;
1351         struct vhost_scsi_tpg *tpg;
1352         struct vhost_scsi_tpg **vs_tpg;
1353         struct vhost_virtqueue *vq;
1354         int index, ret, i, len;
1355         bool match = false;
1356
1357         mutex_lock(&vhost_scsi_mutex);
1358         mutex_lock(&vs->dev.mutex);
1359
1360         /* Verify that ring has been setup correctly. */
1361         for (index = 0; index < vs->dev.nvqs; ++index) {
1362                 /* Verify that ring has been setup correctly. */
1363                 if (!vhost_vq_access_ok(&vs->vqs[index].vq)) {
1364                         ret = -EFAULT;
1365                         goto out;
1366                 }
1367         }
1368
1369         len = sizeof(vs_tpg[0]) * VHOST_SCSI_MAX_TARGET;
1370         vs_tpg = kzalloc(len, GFP_KERNEL);
1371         if (!vs_tpg) {
1372                 ret = -ENOMEM;
1373                 goto out;
1374         }
1375         if (vs->vs_tpg)
1376                 memcpy(vs_tpg, vs->vs_tpg, len);
1377
1378         list_for_each_entry(tpg, &vhost_scsi_list, tv_tpg_list) {
1379                 mutex_lock(&tpg->tv_tpg_mutex);
1380                 if (!tpg->tpg_nexus) {
1381                         mutex_unlock(&tpg->tv_tpg_mutex);
1382                         continue;
1383                 }
1384                 if (tpg->tv_tpg_vhost_count != 0) {
1385                         mutex_unlock(&tpg->tv_tpg_mutex);
1386                         continue;
1387                 }
1388                 tv_tport = tpg->tport;
1389
1390                 if (!strcmp(tv_tport->tport_name, t->vhost_wwpn)) {
1391                         if (vs->vs_tpg && vs->vs_tpg[tpg->tport_tpgt]) {
1392                                 kfree(vs_tpg);
1393                                 mutex_unlock(&tpg->tv_tpg_mutex);
1394                                 ret = -EEXIST;
1395                                 goto out;
1396                         }
1397                         /*
1398                          * In order to ensure individual vhost-scsi configfs
1399                          * groups cannot be removed while in use by vhost ioctl,
1400                          * go ahead and take an explicit se_tpg->tpg_group.cg_item
1401                          * dependency now.
1402                          */
1403                         se_tpg = &tpg->se_tpg;
1404                         ret = configfs_depend_item(se_tpg->se_tpg_tfo->tf_subsys,
1405                                                    &se_tpg->tpg_group.cg_item);
1406                         if (ret) {
1407                                 pr_warn("configfs_depend_item() failed: %d\n", ret);
1408                                 kfree(vs_tpg);
1409                                 mutex_unlock(&tpg->tv_tpg_mutex);
1410                                 goto out;
1411                         }
1412                         tpg->tv_tpg_vhost_count++;
1413                         tpg->vhost_scsi = vs;
1414                         vs_tpg[tpg->tport_tpgt] = tpg;
1415                         smp_mb__after_atomic();
1416                         match = true;
1417                 }
1418                 mutex_unlock(&tpg->tv_tpg_mutex);
1419         }
1420
1421         if (match) {
1422                 memcpy(vs->vs_vhost_wwpn, t->vhost_wwpn,
1423                        sizeof(vs->vs_vhost_wwpn));
1424                 for (i = 0; i < VHOST_SCSI_MAX_VQ; i++) {
1425                         vq = &vs->vqs[i].vq;
1426                         mutex_lock(&vq->mutex);
1427                         vq->private_data = vs_tpg;
1428                         vhost_init_used(vq);
1429                         mutex_unlock(&vq->mutex);
1430                 }
1431                 ret = 0;
1432         } else {
1433                 ret = -EEXIST;
1434         }
1435
1436         /*
1437          * Act as synchronize_rcu to make sure access to
1438          * old vs->vs_tpg is finished.
1439          */
1440         vhost_scsi_flush(vs);
1441         kfree(vs->vs_tpg);
1442         vs->vs_tpg = vs_tpg;
1443
1444 out:
1445         mutex_unlock(&vs->dev.mutex);
1446         mutex_unlock(&vhost_scsi_mutex);
1447         return ret;
1448 }
1449
1450 static int
1451 vhost_scsi_clear_endpoint(struct vhost_scsi *vs,
1452                           struct vhost_scsi_target *t)
1453 {
1454         struct se_portal_group *se_tpg;
1455         struct vhost_scsi_tport *tv_tport;
1456         struct vhost_scsi_tpg *tpg;
1457         struct vhost_virtqueue *vq;
1458         bool match = false;
1459         int index, ret, i;
1460         u8 target;
1461
1462         mutex_lock(&vhost_scsi_mutex);
1463         mutex_lock(&vs->dev.mutex);
1464         /* Verify that ring has been setup correctly. */
1465         for (index = 0; index < vs->dev.nvqs; ++index) {
1466                 if (!vhost_vq_access_ok(&vs->vqs[index].vq)) {
1467                         ret = -EFAULT;
1468                         goto err_dev;
1469                 }
1470         }
1471
1472         if (!vs->vs_tpg) {
1473                 ret = 0;
1474                 goto err_dev;
1475         }
1476
1477         for (i = 0; i < VHOST_SCSI_MAX_TARGET; i++) {
1478                 target = i;
1479                 tpg = vs->vs_tpg[target];
1480                 if (!tpg)
1481                         continue;
1482
1483                 mutex_lock(&tpg->tv_tpg_mutex);
1484                 tv_tport = tpg->tport;
1485                 if (!tv_tport) {
1486                         ret = -ENODEV;
1487                         goto err_tpg;
1488                 }
1489
1490                 if (strcmp(tv_tport->tport_name, t->vhost_wwpn)) {
1491                         pr_warn("tv_tport->tport_name: %s, tpg->tport_tpgt: %hu"
1492                                 " does not match t->vhost_wwpn: %s, t->vhost_tpgt: %hu\n",
1493                                 tv_tport->tport_name, tpg->tport_tpgt,
1494                                 t->vhost_wwpn, t->vhost_tpgt);
1495                         ret = -EINVAL;
1496                         goto err_tpg;
1497                 }
1498                 tpg->tv_tpg_vhost_count--;
1499                 tpg->vhost_scsi = NULL;
1500                 vs->vs_tpg[target] = NULL;
1501                 match = true;
1502                 mutex_unlock(&tpg->tv_tpg_mutex);
1503                 /*
1504                  * Release se_tpg->tpg_group.cg_item configfs dependency now
1505                  * to allow vhost-scsi WWPN se_tpg->tpg_group shutdown to occur.
1506                  */
1507                 se_tpg = &tpg->se_tpg;
1508                 configfs_undepend_item(se_tpg->se_tpg_tfo->tf_subsys,
1509                                        &se_tpg->tpg_group.cg_item);
1510         }
1511         if (match) {
1512                 for (i = 0; i < VHOST_SCSI_MAX_VQ; i++) {
1513                         vq = &vs->vqs[i].vq;
1514                         mutex_lock(&vq->mutex);
1515                         vq->private_data = NULL;
1516                         mutex_unlock(&vq->mutex);
1517                 }
1518         }
1519         /*
1520          * Act as synchronize_rcu to make sure access to
1521          * old vs->vs_tpg is finished.
1522          */
1523         vhost_scsi_flush(vs);
1524         kfree(vs->vs_tpg);
1525         vs->vs_tpg = NULL;
1526         WARN_ON(vs->vs_events_nr);
1527         mutex_unlock(&vs->dev.mutex);
1528         mutex_unlock(&vhost_scsi_mutex);
1529         return 0;
1530
1531 err_tpg:
1532         mutex_unlock(&tpg->tv_tpg_mutex);
1533 err_dev:
1534         mutex_unlock(&vs->dev.mutex);
1535         mutex_unlock(&vhost_scsi_mutex);
1536         return ret;
1537 }
1538
1539 static int vhost_scsi_set_features(struct vhost_scsi *vs, u64 features)
1540 {
1541         struct vhost_virtqueue *vq;
1542         int i;
1543
1544         if (features & ~VHOST_SCSI_FEATURES)
1545                 return -EOPNOTSUPP;
1546
1547         mutex_lock(&vs->dev.mutex);
1548         if ((features & (1 << VHOST_F_LOG_ALL)) &&
1549             !vhost_log_access_ok(&vs->dev)) {
1550                 mutex_unlock(&vs->dev.mutex);
1551                 return -EFAULT;
1552         }
1553
1554         for (i = 0; i < VHOST_SCSI_MAX_VQ; i++) {
1555                 vq = &vs->vqs[i].vq;
1556                 mutex_lock(&vq->mutex);
1557                 vq->acked_features = features;
1558                 mutex_unlock(&vq->mutex);
1559         }
1560         mutex_unlock(&vs->dev.mutex);
1561         return 0;
1562 }
1563
1564 static int vhost_scsi_open(struct inode *inode, struct file *f)
1565 {
1566         struct vhost_scsi *vs;
1567         struct vhost_virtqueue **vqs;
1568         int r = -ENOMEM, i;
1569
1570         vs = kzalloc(sizeof(*vs), GFP_KERNEL | __GFP_NOWARN | __GFP_REPEAT);
1571         if (!vs) {
1572                 vs = vzalloc(sizeof(*vs));
1573                 if (!vs)
1574                         goto err_vs;
1575         }
1576
1577         vqs = kmalloc(VHOST_SCSI_MAX_VQ * sizeof(*vqs), GFP_KERNEL);
1578         if (!vqs)
1579                 goto err_vqs;
1580
1581         vhost_work_init(&vs->vs_completion_work, vhost_scsi_complete_cmd_work);
1582         vhost_work_init(&vs->vs_event_work, vhost_scsi_evt_work);
1583
1584         vs->vs_events_nr = 0;
1585         vs->vs_events_missed = false;
1586
1587         vqs[VHOST_SCSI_VQ_CTL] = &vs->vqs[VHOST_SCSI_VQ_CTL].vq;
1588         vqs[VHOST_SCSI_VQ_EVT] = &vs->vqs[VHOST_SCSI_VQ_EVT].vq;
1589         vs->vqs[VHOST_SCSI_VQ_CTL].vq.handle_kick = vhost_scsi_ctl_handle_kick;
1590         vs->vqs[VHOST_SCSI_VQ_EVT].vq.handle_kick = vhost_scsi_evt_handle_kick;
1591         for (i = VHOST_SCSI_VQ_IO; i < VHOST_SCSI_MAX_VQ; i++) {
1592                 vqs[i] = &vs->vqs[i].vq;
1593                 vs->vqs[i].vq.handle_kick = vhost_scsi_handle_kick;
1594         }
1595         vhost_dev_init(&vs->dev, vqs, VHOST_SCSI_MAX_VQ);
1596
1597         vhost_scsi_init_inflight(vs, NULL);
1598
1599         f->private_data = vs;
1600         return 0;
1601
1602 err_vqs:
1603         kvfree(vs);
1604 err_vs:
1605         return r;
1606 }
1607
1608 static int vhost_scsi_release(struct inode *inode, struct file *f)
1609 {
1610         struct vhost_scsi *vs = f->private_data;
1611         struct vhost_scsi_target t;
1612
1613         mutex_lock(&vs->dev.mutex);
1614         memcpy(t.vhost_wwpn, vs->vs_vhost_wwpn, sizeof(t.vhost_wwpn));
1615         mutex_unlock(&vs->dev.mutex);
1616         vhost_scsi_clear_endpoint(vs, &t);
1617         vhost_dev_stop(&vs->dev);
1618         vhost_dev_cleanup(&vs->dev, false);
1619         /* Jobs can re-queue themselves in evt kick handler. Do extra flush. */
1620         vhost_scsi_flush(vs);
1621         kfree(vs->dev.vqs);
1622         kvfree(vs);
1623         return 0;
1624 }
1625
1626 static long
1627 vhost_scsi_ioctl(struct file *f,
1628                  unsigned int ioctl,
1629                  unsigned long arg)
1630 {
1631         struct vhost_scsi *vs = f->private_data;
1632         struct vhost_scsi_target backend;
1633         void __user *argp = (void __user *)arg;
1634         u64 __user *featurep = argp;
1635         u32 __user *eventsp = argp;
1636         u32 events_missed;
1637         u64 features;
1638         int r, abi_version = VHOST_SCSI_ABI_VERSION;
1639         struct vhost_virtqueue *vq = &vs->vqs[VHOST_SCSI_VQ_EVT].vq;
1640
1641         switch (ioctl) {
1642         case VHOST_SCSI_SET_ENDPOINT:
1643                 if (copy_from_user(&backend, argp, sizeof backend))
1644                         return -EFAULT;
1645                 if (backend.reserved != 0)
1646                         return -EOPNOTSUPP;
1647
1648                 return vhost_scsi_set_endpoint(vs, &backend);
1649         case VHOST_SCSI_CLEAR_ENDPOINT:
1650                 if (copy_from_user(&backend, argp, sizeof backend))
1651                         return -EFAULT;
1652                 if (backend.reserved != 0)
1653                         return -EOPNOTSUPP;
1654
1655                 return vhost_scsi_clear_endpoint(vs, &backend);
1656         case VHOST_SCSI_GET_ABI_VERSION:
1657                 if (copy_to_user(argp, &abi_version, sizeof abi_version))
1658                         return -EFAULT;
1659                 return 0;
1660         case VHOST_SCSI_SET_EVENTS_MISSED:
1661                 if (get_user(events_missed, eventsp))
1662                         return -EFAULT;
1663                 mutex_lock(&vq->mutex);
1664                 vs->vs_events_missed = events_missed;
1665                 mutex_unlock(&vq->mutex);
1666                 return 0;
1667         case VHOST_SCSI_GET_EVENTS_MISSED:
1668                 mutex_lock(&vq->mutex);
1669                 events_missed = vs->vs_events_missed;
1670                 mutex_unlock(&vq->mutex);
1671                 if (put_user(events_missed, eventsp))
1672                         return -EFAULT;
1673                 return 0;
1674         case VHOST_GET_FEATURES:
1675                 features = VHOST_SCSI_FEATURES;
1676                 if (copy_to_user(featurep, &features, sizeof features))
1677                         return -EFAULT;
1678                 return 0;
1679         case VHOST_SET_FEATURES:
1680                 if (copy_from_user(&features, featurep, sizeof features))
1681                         return -EFAULT;
1682                 return vhost_scsi_set_features(vs, features);
1683         default:
1684                 mutex_lock(&vs->dev.mutex);
1685                 r = vhost_dev_ioctl(&vs->dev, ioctl, argp);
1686                 /* TODO: flush backend after dev ioctl. */
1687                 if (r == -ENOIOCTLCMD)
1688                         r = vhost_vring_ioctl(&vs->dev, ioctl, argp);
1689                 mutex_unlock(&vs->dev.mutex);
1690                 return r;
1691         }
1692 }
1693
1694 #ifdef CONFIG_COMPAT
1695 static long vhost_scsi_compat_ioctl(struct file *f, unsigned int ioctl,
1696                                 unsigned long arg)
1697 {
1698         return vhost_scsi_ioctl(f, ioctl, (unsigned long)compat_ptr(arg));
1699 }
1700 #endif
1701
1702 static const struct file_operations vhost_scsi_fops = {
1703         .owner          = THIS_MODULE,
1704         .release        = vhost_scsi_release,
1705         .unlocked_ioctl = vhost_scsi_ioctl,
1706 #ifdef CONFIG_COMPAT
1707         .compat_ioctl   = vhost_scsi_compat_ioctl,
1708 #endif
1709         .open           = vhost_scsi_open,
1710         .llseek         = noop_llseek,
1711 };
1712
1713 static struct miscdevice vhost_scsi_misc = {
1714         MISC_DYNAMIC_MINOR,
1715         "vhost-scsi",
1716         &vhost_scsi_fops,
1717 };
1718
1719 static int __init vhost_scsi_register(void)
1720 {
1721         return misc_register(&vhost_scsi_misc);
1722 }
1723
1724 static int vhost_scsi_deregister(void)
1725 {
1726         return misc_deregister(&vhost_scsi_misc);
1727 }
1728
1729 static char *vhost_scsi_dump_proto_id(struct vhost_scsi_tport *tport)
1730 {
1731         switch (tport->tport_proto_id) {
1732         case SCSI_PROTOCOL_SAS:
1733                 return "SAS";
1734         case SCSI_PROTOCOL_FCP:
1735                 return "FCP";
1736         case SCSI_PROTOCOL_ISCSI:
1737                 return "iSCSI";
1738         default:
1739                 break;
1740         }
1741
1742         return "Unknown";
1743 }
1744
1745 static void
1746 vhost_scsi_do_plug(struct vhost_scsi_tpg *tpg,
1747                   struct se_lun *lun, bool plug)
1748 {
1749
1750         struct vhost_scsi *vs = tpg->vhost_scsi;
1751         struct vhost_virtqueue *vq;
1752         u32 reason;
1753
1754         if (!vs)
1755                 return;
1756
1757         mutex_lock(&vs->dev.mutex);
1758
1759         if (plug)
1760                 reason = VIRTIO_SCSI_EVT_RESET_RESCAN;
1761         else
1762                 reason = VIRTIO_SCSI_EVT_RESET_REMOVED;
1763
1764         vq = &vs->vqs[VHOST_SCSI_VQ_EVT].vq;
1765         mutex_lock(&vq->mutex);
1766         if (vhost_has_feature(vq, VIRTIO_SCSI_F_HOTPLUG))
1767                 vhost_scsi_send_evt(vs, tpg, lun,
1768                                    VIRTIO_SCSI_T_TRANSPORT_RESET, reason);
1769         mutex_unlock(&vq->mutex);
1770         mutex_unlock(&vs->dev.mutex);
1771 }
1772
1773 static void vhost_scsi_hotplug(struct vhost_scsi_tpg *tpg, struct se_lun *lun)
1774 {
1775         vhost_scsi_do_plug(tpg, lun, true);
1776 }
1777
1778 static void vhost_scsi_hotunplug(struct vhost_scsi_tpg *tpg, struct se_lun *lun)
1779 {
1780         vhost_scsi_do_plug(tpg, lun, false);
1781 }
1782
1783 static int vhost_scsi_port_link(struct se_portal_group *se_tpg,
1784                                struct se_lun *lun)
1785 {
1786         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
1787                                 struct vhost_scsi_tpg, se_tpg);
1788
1789         mutex_lock(&vhost_scsi_mutex);
1790
1791         mutex_lock(&tpg->tv_tpg_mutex);
1792         tpg->tv_tpg_port_count++;
1793         mutex_unlock(&tpg->tv_tpg_mutex);
1794
1795         vhost_scsi_hotplug(tpg, lun);
1796
1797         mutex_unlock(&vhost_scsi_mutex);
1798
1799         return 0;
1800 }
1801
1802 static void vhost_scsi_port_unlink(struct se_portal_group *se_tpg,
1803                                   struct se_lun *lun)
1804 {
1805         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
1806                                 struct vhost_scsi_tpg, se_tpg);
1807
1808         mutex_lock(&vhost_scsi_mutex);
1809
1810         mutex_lock(&tpg->tv_tpg_mutex);
1811         tpg->tv_tpg_port_count--;
1812         mutex_unlock(&tpg->tv_tpg_mutex);
1813
1814         vhost_scsi_hotunplug(tpg, lun);
1815
1816         mutex_unlock(&vhost_scsi_mutex);
1817 }
1818
1819 static struct se_node_acl *
1820 vhost_scsi_make_nodeacl(struct se_portal_group *se_tpg,
1821                        struct config_group *group,
1822                        const char *name)
1823 {
1824         struct se_node_acl *se_nacl, *se_nacl_new;
1825         struct vhost_scsi_nacl *nacl;
1826         u64 wwpn = 0;
1827         u32 nexus_depth;
1828
1829         /* vhost_scsi_parse_wwn(name, &wwpn, 1) < 0)
1830                 return ERR_PTR(-EINVAL); */
1831         se_nacl_new = vhost_scsi_alloc_fabric_acl(se_tpg);
1832         if (!se_nacl_new)
1833                 return ERR_PTR(-ENOMEM);
1834
1835         nexus_depth = 1;
1836         /*
1837          * se_nacl_new may be released by core_tpg_add_initiator_node_acl()
1838          * when converting a NodeACL from demo mode -> explict
1839          */
1840         se_nacl = core_tpg_add_initiator_node_acl(se_tpg, se_nacl_new,
1841                                 name, nexus_depth);
1842         if (IS_ERR(se_nacl)) {
1843                 vhost_scsi_release_fabric_acl(se_tpg, se_nacl_new);
1844                 return se_nacl;
1845         }
1846         /*
1847          * Locate our struct vhost_scsi_nacl and set the FC Nport WWPN
1848          */
1849         nacl = container_of(se_nacl, struct vhost_scsi_nacl, se_node_acl);
1850         nacl->iport_wwpn = wwpn;
1851
1852         return se_nacl;
1853 }
1854
1855 static void vhost_scsi_drop_nodeacl(struct se_node_acl *se_acl)
1856 {
1857         struct vhost_scsi_nacl *nacl = container_of(se_acl,
1858                                 struct vhost_scsi_nacl, se_node_acl);
1859         core_tpg_del_initiator_node_acl(se_acl->se_tpg, se_acl, 1);
1860         kfree(nacl);
1861 }
1862
1863 static void vhost_scsi_free_cmd_map_res(struct vhost_scsi_nexus *nexus,
1864                                        struct se_session *se_sess)
1865 {
1866         struct vhost_scsi_cmd *tv_cmd;
1867         unsigned int i;
1868
1869         if (!se_sess->sess_cmd_map)
1870                 return;
1871
1872         for (i = 0; i < VHOST_SCSI_DEFAULT_TAGS; i++) {
1873                 tv_cmd = &((struct vhost_scsi_cmd *)se_sess->sess_cmd_map)[i];
1874
1875                 kfree(tv_cmd->tvc_sgl);
1876                 kfree(tv_cmd->tvc_prot_sgl);
1877                 kfree(tv_cmd->tvc_upages);
1878         }
1879 }
1880
1881 static int vhost_scsi_make_nexus(struct vhost_scsi_tpg *tpg,
1882                                 const char *name)
1883 {
1884         struct se_portal_group *se_tpg;
1885         struct se_session *se_sess;
1886         struct vhost_scsi_nexus *tv_nexus;
1887         struct vhost_scsi_cmd *tv_cmd;
1888         unsigned int i;
1889
1890         mutex_lock(&tpg->tv_tpg_mutex);
1891         if (tpg->tpg_nexus) {
1892                 mutex_unlock(&tpg->tv_tpg_mutex);
1893                 pr_debug("tpg->tpg_nexus already exists\n");
1894                 return -EEXIST;
1895         }
1896         se_tpg = &tpg->se_tpg;
1897
1898         tv_nexus = kzalloc(sizeof(struct vhost_scsi_nexus), GFP_KERNEL);
1899         if (!tv_nexus) {
1900                 mutex_unlock(&tpg->tv_tpg_mutex);
1901                 pr_err("Unable to allocate struct vhost_scsi_nexus\n");
1902                 return -ENOMEM;
1903         }
1904         /*
1905          *  Initialize the struct se_session pointer and setup tagpool
1906          *  for struct vhost_scsi_cmd descriptors
1907          */
1908         tv_nexus->tvn_se_sess = transport_init_session_tags(
1909                                         VHOST_SCSI_DEFAULT_TAGS,
1910                                         sizeof(struct vhost_scsi_cmd),
1911                                         TARGET_PROT_DIN_PASS | TARGET_PROT_DOUT_PASS);
1912         if (IS_ERR(tv_nexus->tvn_se_sess)) {
1913                 mutex_unlock(&tpg->tv_tpg_mutex);
1914                 kfree(tv_nexus);
1915                 return -ENOMEM;
1916         }
1917         se_sess = tv_nexus->tvn_se_sess;
1918         for (i = 0; i < VHOST_SCSI_DEFAULT_TAGS; i++) {
1919                 tv_cmd = &((struct vhost_scsi_cmd *)se_sess->sess_cmd_map)[i];
1920
1921                 tv_cmd->tvc_sgl = kzalloc(sizeof(struct scatterlist) *
1922                                         VHOST_SCSI_PREALLOC_SGLS, GFP_KERNEL);
1923                 if (!tv_cmd->tvc_sgl) {
1924                         mutex_unlock(&tpg->tv_tpg_mutex);
1925                         pr_err("Unable to allocate tv_cmd->tvc_sgl\n");
1926                         goto out;
1927                 }
1928
1929                 tv_cmd->tvc_upages = kzalloc(sizeof(struct page *) *
1930                                         VHOST_SCSI_PREALLOC_UPAGES, GFP_KERNEL);
1931                 if (!tv_cmd->tvc_upages) {
1932                         mutex_unlock(&tpg->tv_tpg_mutex);
1933                         pr_err("Unable to allocate tv_cmd->tvc_upages\n");
1934                         goto out;
1935                 }
1936
1937                 tv_cmd->tvc_prot_sgl = kzalloc(sizeof(struct scatterlist) *
1938                                         VHOST_SCSI_PREALLOC_PROT_SGLS, GFP_KERNEL);
1939                 if (!tv_cmd->tvc_prot_sgl) {
1940                         mutex_unlock(&tpg->tv_tpg_mutex);
1941                         pr_err("Unable to allocate tv_cmd->tvc_prot_sgl\n");
1942                         goto out;
1943                 }
1944         }
1945         /*
1946          * Since we are running in 'demo mode' this call with generate a
1947          * struct se_node_acl for the vhost_scsi struct se_portal_group with
1948          * the SCSI Initiator port name of the passed configfs group 'name'.
1949          */
1950         tv_nexus->tvn_se_sess->se_node_acl = core_tpg_check_initiator_node_acl(
1951                                 se_tpg, (unsigned char *)name);
1952         if (!tv_nexus->tvn_se_sess->se_node_acl) {
1953                 mutex_unlock(&tpg->tv_tpg_mutex);
1954                 pr_debug("core_tpg_check_initiator_node_acl() failed"
1955                                 " for %s\n", name);
1956                 goto out;
1957         }
1958         /*
1959          * Now register the TCM vhost virtual I_T Nexus as active.
1960          */
1961         transport_register_session(se_tpg, tv_nexus->tvn_se_sess->se_node_acl,
1962                         tv_nexus->tvn_se_sess, tv_nexus);
1963         tpg->tpg_nexus = tv_nexus;
1964
1965         mutex_unlock(&tpg->tv_tpg_mutex);
1966         return 0;
1967
1968 out:
1969         vhost_scsi_free_cmd_map_res(tv_nexus, se_sess);
1970         transport_free_session(se_sess);
1971         kfree(tv_nexus);
1972         return -ENOMEM;
1973 }
1974
1975 static int vhost_scsi_drop_nexus(struct vhost_scsi_tpg *tpg)
1976 {
1977         struct se_session *se_sess;
1978         struct vhost_scsi_nexus *tv_nexus;
1979
1980         mutex_lock(&tpg->tv_tpg_mutex);
1981         tv_nexus = tpg->tpg_nexus;
1982         if (!tv_nexus) {
1983                 mutex_unlock(&tpg->tv_tpg_mutex);
1984                 return -ENODEV;
1985         }
1986
1987         se_sess = tv_nexus->tvn_se_sess;
1988         if (!se_sess) {
1989                 mutex_unlock(&tpg->tv_tpg_mutex);
1990                 return -ENODEV;
1991         }
1992
1993         if (tpg->tv_tpg_port_count != 0) {
1994                 mutex_unlock(&tpg->tv_tpg_mutex);
1995                 pr_err("Unable to remove TCM_vhost I_T Nexus with"
1996                         " active TPG port count: %d\n",
1997                         tpg->tv_tpg_port_count);
1998                 return -EBUSY;
1999         }
2000
2001         if (tpg->tv_tpg_vhost_count != 0) {
2002                 mutex_unlock(&tpg->tv_tpg_mutex);
2003                 pr_err("Unable to remove TCM_vhost I_T Nexus with"
2004                         " active TPG vhost count: %d\n",
2005                         tpg->tv_tpg_vhost_count);
2006                 return -EBUSY;
2007         }
2008
2009         pr_debug("TCM_vhost_ConfigFS: Removing I_T Nexus to emulated"
2010                 " %s Initiator Port: %s\n", vhost_scsi_dump_proto_id(tpg->tport),
2011                 tv_nexus->tvn_se_sess->se_node_acl->initiatorname);
2012
2013         vhost_scsi_free_cmd_map_res(tv_nexus, se_sess);
2014         /*
2015          * Release the SCSI I_T Nexus to the emulated vhost Target Port
2016          */
2017         transport_deregister_session(tv_nexus->tvn_se_sess);
2018         tpg->tpg_nexus = NULL;
2019         mutex_unlock(&tpg->tv_tpg_mutex);
2020
2021         kfree(tv_nexus);
2022         return 0;
2023 }
2024
2025 static ssize_t vhost_scsi_tpg_show_nexus(struct se_portal_group *se_tpg,
2026                                         char *page)
2027 {
2028         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
2029                                 struct vhost_scsi_tpg, se_tpg);
2030         struct vhost_scsi_nexus *tv_nexus;
2031         ssize_t ret;
2032
2033         mutex_lock(&tpg->tv_tpg_mutex);
2034         tv_nexus = tpg->tpg_nexus;
2035         if (!tv_nexus) {
2036                 mutex_unlock(&tpg->tv_tpg_mutex);
2037                 return -ENODEV;
2038         }
2039         ret = snprintf(page, PAGE_SIZE, "%s\n",
2040                         tv_nexus->tvn_se_sess->se_node_acl->initiatorname);
2041         mutex_unlock(&tpg->tv_tpg_mutex);
2042
2043         return ret;
2044 }
2045
2046 static ssize_t vhost_scsi_tpg_store_nexus(struct se_portal_group *se_tpg,
2047                                          const char *page,
2048                                          size_t count)
2049 {
2050         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
2051                                 struct vhost_scsi_tpg, se_tpg);
2052         struct vhost_scsi_tport *tport_wwn = tpg->tport;
2053         unsigned char i_port[VHOST_SCSI_NAMELEN], *ptr, *port_ptr;
2054         int ret;
2055         /*
2056          * Shutdown the active I_T nexus if 'NULL' is passed..
2057          */
2058         if (!strncmp(page, "NULL", 4)) {
2059                 ret = vhost_scsi_drop_nexus(tpg);
2060                 return (!ret) ? count : ret;
2061         }
2062         /*
2063          * Otherwise make sure the passed virtual Initiator port WWN matches
2064          * the fabric protocol_id set in vhost_scsi_make_tport(), and call
2065          * vhost_scsi_make_nexus().
2066          */
2067         if (strlen(page) >= VHOST_SCSI_NAMELEN) {
2068                 pr_err("Emulated NAA Sas Address: %s, exceeds"
2069                                 " max: %d\n", page, VHOST_SCSI_NAMELEN);
2070                 return -EINVAL;
2071         }
2072         snprintf(&i_port[0], VHOST_SCSI_NAMELEN, "%s", page);
2073
2074         ptr = strstr(i_port, "naa.");
2075         if (ptr) {
2076                 if (tport_wwn->tport_proto_id != SCSI_PROTOCOL_SAS) {
2077                         pr_err("Passed SAS Initiator Port %s does not"
2078                                 " match target port protoid: %s\n", i_port,
2079                                 vhost_scsi_dump_proto_id(tport_wwn));
2080                         return -EINVAL;
2081                 }
2082                 port_ptr = &i_port[0];
2083                 goto check_newline;
2084         }
2085         ptr = strstr(i_port, "fc.");
2086         if (ptr) {
2087                 if (tport_wwn->tport_proto_id != SCSI_PROTOCOL_FCP) {
2088                         pr_err("Passed FCP Initiator Port %s does not"
2089                                 " match target port protoid: %s\n", i_port,
2090                                 vhost_scsi_dump_proto_id(tport_wwn));
2091                         return -EINVAL;
2092                 }
2093                 port_ptr = &i_port[3]; /* Skip over "fc." */
2094                 goto check_newline;
2095         }
2096         ptr = strstr(i_port, "iqn.");
2097         if (ptr) {
2098                 if (tport_wwn->tport_proto_id != SCSI_PROTOCOL_ISCSI) {
2099                         pr_err("Passed iSCSI Initiator Port %s does not"
2100                                 " match target port protoid: %s\n", i_port,
2101                                 vhost_scsi_dump_proto_id(tport_wwn));
2102                         return -EINVAL;
2103                 }
2104                 port_ptr = &i_port[0];
2105                 goto check_newline;
2106         }
2107         pr_err("Unable to locate prefix for emulated Initiator Port:"
2108                         " %s\n", i_port);
2109         return -EINVAL;
2110         /*
2111          * Clear any trailing newline for the NAA WWN
2112          */
2113 check_newline:
2114         if (i_port[strlen(i_port)-1] == '\n')
2115                 i_port[strlen(i_port)-1] = '\0';
2116
2117         ret = vhost_scsi_make_nexus(tpg, port_ptr);
2118         if (ret < 0)
2119                 return ret;
2120
2121         return count;
2122 }
2123
2124 TF_TPG_BASE_ATTR(vhost_scsi, nexus, S_IRUGO | S_IWUSR);
2125
2126 static struct configfs_attribute *vhost_scsi_tpg_attrs[] = {
2127         &vhost_scsi_tpg_nexus.attr,
2128         NULL,
2129 };
2130
2131 static struct se_portal_group *
2132 vhost_scsi_make_tpg(struct se_wwn *wwn,
2133                    struct config_group *group,
2134                    const char *name)
2135 {
2136         struct vhost_scsi_tport *tport = container_of(wwn,
2137                         struct vhost_scsi_tport, tport_wwn);
2138
2139         struct vhost_scsi_tpg *tpg;
2140         u16 tpgt;
2141         int ret;
2142
2143         if (strstr(name, "tpgt_") != name)
2144                 return ERR_PTR(-EINVAL);
2145         if (kstrtou16(name + 5, 10, &tpgt) || tpgt >= VHOST_SCSI_MAX_TARGET)
2146                 return ERR_PTR(-EINVAL);
2147
2148         tpg = kzalloc(sizeof(struct vhost_scsi_tpg), GFP_KERNEL);
2149         if (!tpg) {
2150                 pr_err("Unable to allocate struct vhost_scsi_tpg");
2151                 return ERR_PTR(-ENOMEM);
2152         }
2153         mutex_init(&tpg->tv_tpg_mutex);
2154         INIT_LIST_HEAD(&tpg->tv_tpg_list);
2155         tpg->tport = tport;
2156         tpg->tport_tpgt = tpgt;
2157
2158         ret = core_tpg_register(&vhost_scsi_fabric_configfs->tf_ops, wwn,
2159                                 &tpg->se_tpg, tpg, TRANSPORT_TPG_TYPE_NORMAL);
2160         if (ret < 0) {
2161                 kfree(tpg);
2162                 return NULL;
2163         }
2164         mutex_lock(&vhost_scsi_mutex);
2165         list_add_tail(&tpg->tv_tpg_list, &vhost_scsi_list);
2166         mutex_unlock(&vhost_scsi_mutex);
2167
2168         return &tpg->se_tpg;
2169 }
2170
2171 static void vhost_scsi_drop_tpg(struct se_portal_group *se_tpg)
2172 {
2173         struct vhost_scsi_tpg *tpg = container_of(se_tpg,
2174                                 struct vhost_scsi_tpg, se_tpg);
2175
2176         mutex_lock(&vhost_scsi_mutex);
2177         list_del(&tpg->tv_tpg_list);
2178         mutex_unlock(&vhost_scsi_mutex);
2179         /*
2180          * Release the virtual I_T Nexus for this vhost TPG
2181          */
2182         vhost_scsi_drop_nexus(tpg);
2183         /*
2184          * Deregister the se_tpg from TCM..
2185          */
2186         core_tpg_deregister(se_tpg);
2187         kfree(tpg);
2188 }
2189
2190 static struct se_wwn *
2191 vhost_scsi_make_tport(struct target_fabric_configfs *tf,
2192                      struct config_group *group,
2193                      const char *name)
2194 {
2195         struct vhost_scsi_tport *tport;
2196         char *ptr;
2197         u64 wwpn = 0;
2198         int off = 0;
2199
2200         /* if (vhost_scsi_parse_wwn(name, &wwpn, 1) < 0)
2201                 return ERR_PTR(-EINVAL); */
2202
2203         tport = kzalloc(sizeof(struct vhost_scsi_tport), GFP_KERNEL);
2204         if (!tport) {
2205                 pr_err("Unable to allocate struct vhost_scsi_tport");
2206                 return ERR_PTR(-ENOMEM);
2207         }
2208         tport->tport_wwpn = wwpn;
2209         /*
2210          * Determine the emulated Protocol Identifier and Target Port Name
2211          * based on the incoming configfs directory name.
2212          */
2213         ptr = strstr(name, "naa.");
2214         if (ptr) {
2215                 tport->tport_proto_id = SCSI_PROTOCOL_SAS;
2216                 goto check_len;
2217         }
2218         ptr = strstr(name, "fc.");
2219         if (ptr) {
2220                 tport->tport_proto_id = SCSI_PROTOCOL_FCP;
2221                 off = 3; /* Skip over "fc." */
2222                 goto check_len;
2223         }
2224         ptr = strstr(name, "iqn.");
2225         if (ptr) {
2226                 tport->tport_proto_id = SCSI_PROTOCOL_ISCSI;
2227                 goto check_len;
2228         }
2229
2230         pr_err("Unable to locate prefix for emulated Target Port:"
2231                         " %s\n", name);
2232         kfree(tport);
2233         return ERR_PTR(-EINVAL);
2234
2235 check_len:
2236         if (strlen(name) >= VHOST_SCSI_NAMELEN) {
2237                 pr_err("Emulated %s Address: %s, exceeds"
2238                         " max: %d\n", name, vhost_scsi_dump_proto_id(tport),
2239                         VHOST_SCSI_NAMELEN);
2240                 kfree(tport);
2241                 return ERR_PTR(-EINVAL);
2242         }
2243         snprintf(&tport->tport_name[0], VHOST_SCSI_NAMELEN, "%s", &name[off]);
2244
2245         pr_debug("TCM_VHost_ConfigFS: Allocated emulated Target"
2246                 " %s Address: %s\n", vhost_scsi_dump_proto_id(tport), name);
2247
2248         return &tport->tport_wwn;
2249 }
2250
2251 static void vhost_scsi_drop_tport(struct se_wwn *wwn)
2252 {
2253         struct vhost_scsi_tport *tport = container_of(wwn,
2254                                 struct vhost_scsi_tport, tport_wwn);
2255
2256         pr_debug("TCM_VHost_ConfigFS: Deallocating emulated Target"
2257                 " %s Address: %s\n", vhost_scsi_dump_proto_id(tport),
2258                 tport->tport_name);
2259
2260         kfree(tport);
2261 }
2262
2263 static ssize_t
2264 vhost_scsi_wwn_show_attr_version(struct target_fabric_configfs *tf,
2265                                 char *page)
2266 {
2267         return sprintf(page, "TCM_VHOST fabric module %s on %s/%s"
2268                 "on "UTS_RELEASE"\n", VHOST_SCSI_VERSION, utsname()->sysname,
2269                 utsname()->machine);
2270 }
2271
2272 TF_WWN_ATTR_RO(vhost_scsi, version);
2273
2274 static struct configfs_attribute *vhost_scsi_wwn_attrs[] = {
2275         &vhost_scsi_wwn_version.attr,
2276         NULL,
2277 };
2278
2279 static struct target_core_fabric_ops vhost_scsi_ops = {
2280         .get_fabric_name                = vhost_scsi_get_fabric_name,
2281         .get_fabric_proto_ident         = vhost_scsi_get_fabric_proto_ident,
2282         .tpg_get_wwn                    = vhost_scsi_get_fabric_wwn,
2283         .tpg_get_tag                    = vhost_scsi_get_tpgt,
2284         .tpg_get_default_depth          = vhost_scsi_get_default_depth,
2285         .tpg_get_pr_transport_id        = vhost_scsi_get_pr_transport_id,
2286         .tpg_get_pr_transport_id_len    = vhost_scsi_get_pr_transport_id_len,
2287         .tpg_parse_pr_out_transport_id  = vhost_scsi_parse_pr_out_transport_id,
2288         .tpg_check_demo_mode            = vhost_scsi_check_true,
2289         .tpg_check_demo_mode_cache      = vhost_scsi_check_true,
2290         .tpg_check_demo_mode_write_protect = vhost_scsi_check_false,
2291         .tpg_check_prod_mode_write_protect = vhost_scsi_check_false,
2292         .tpg_alloc_fabric_acl           = vhost_scsi_alloc_fabric_acl,
2293         .tpg_release_fabric_acl         = vhost_scsi_release_fabric_acl,
2294         .tpg_get_inst_index             = vhost_scsi_tpg_get_inst_index,
2295         .release_cmd                    = vhost_scsi_release_cmd,
2296         .check_stop_free                = vhost_scsi_check_stop_free,
2297         .shutdown_session               = vhost_scsi_shutdown_session,
2298         .close_session                  = vhost_scsi_close_session,
2299         .sess_get_index                 = vhost_scsi_sess_get_index,
2300         .sess_get_initiator_sid         = NULL,
2301         .write_pending                  = vhost_scsi_write_pending,
2302         .write_pending_status           = vhost_scsi_write_pending_status,
2303         .set_default_node_attributes    = vhost_scsi_set_default_node_attrs,
2304         .get_task_tag                   = vhost_scsi_get_task_tag,
2305         .get_cmd_state                  = vhost_scsi_get_cmd_state,
2306         .queue_data_in                  = vhost_scsi_queue_data_in,
2307         .queue_status                   = vhost_scsi_queue_status,
2308         .queue_tm_rsp                   = vhost_scsi_queue_tm_rsp,
2309         .aborted_task                   = vhost_scsi_aborted_task,
2310         /*
2311          * Setup callers for generic logic in target_core_fabric_configfs.c
2312          */
2313         .fabric_make_wwn                = vhost_scsi_make_tport,
2314         .fabric_drop_wwn                = vhost_scsi_drop_tport,
2315         .fabric_make_tpg                = vhost_scsi_make_tpg,
2316         .fabric_drop_tpg                = vhost_scsi_drop_tpg,
2317         .fabric_post_link               = vhost_scsi_port_link,
2318         .fabric_pre_unlink              = vhost_scsi_port_unlink,
2319         .fabric_make_np                 = NULL,
2320         .fabric_drop_np                 = NULL,
2321         .fabric_make_nodeacl            = vhost_scsi_make_nodeacl,
2322         .fabric_drop_nodeacl            = vhost_scsi_drop_nodeacl,
2323 };
2324
2325 static int vhost_scsi_register_configfs(void)
2326 {
2327         struct target_fabric_configfs *fabric;
2328         int ret;
2329
2330         pr_debug("vhost-scsi fabric module %s on %s/%s"
2331                 " on "UTS_RELEASE"\n", VHOST_SCSI_VERSION, utsname()->sysname,
2332                 utsname()->machine);
2333         /*
2334          * Register the top level struct config_item_type with TCM core
2335          */
2336         fabric = target_fabric_configfs_init(THIS_MODULE, "vhost");
2337         if (IS_ERR(fabric)) {
2338                 pr_err("target_fabric_configfs_init() failed\n");
2339                 return PTR_ERR(fabric);
2340         }
2341         /*
2342          * Setup fabric->tf_ops from our local vhost_scsi_ops
2343          */
2344         fabric->tf_ops = vhost_scsi_ops;
2345         /*
2346          * Setup default attribute lists for various fabric->tf_cit_tmpl
2347          */
2348         fabric->tf_cit_tmpl.tfc_wwn_cit.ct_attrs = vhost_scsi_wwn_attrs;
2349         fabric->tf_cit_tmpl.tfc_tpg_base_cit.ct_attrs = vhost_scsi_tpg_attrs;
2350         fabric->tf_cit_tmpl.tfc_tpg_attrib_cit.ct_attrs = NULL;
2351         fabric->tf_cit_tmpl.tfc_tpg_param_cit.ct_attrs = NULL;
2352         fabric->tf_cit_tmpl.tfc_tpg_np_base_cit.ct_attrs = NULL;
2353         fabric->tf_cit_tmpl.tfc_tpg_nacl_base_cit.ct_attrs = NULL;
2354         fabric->tf_cit_tmpl.tfc_tpg_nacl_attrib_cit.ct_attrs = NULL;
2355         fabric->tf_cit_tmpl.tfc_tpg_nacl_auth_cit.ct_attrs = NULL;
2356         fabric->tf_cit_tmpl.tfc_tpg_nacl_param_cit.ct_attrs = NULL;
2357         /*
2358          * Register the fabric for use within TCM
2359          */
2360         ret = target_fabric_configfs_register(fabric);
2361         if (ret < 0) {
2362                 pr_err("target_fabric_configfs_register() failed"
2363                                 " for TCM_VHOST\n");
2364                 return ret;
2365         }
2366         /*
2367          * Setup our local pointer to *fabric
2368          */
2369         vhost_scsi_fabric_configfs = fabric;
2370         pr_debug("TCM_VHOST[0] - Set fabric -> vhost_scsi_fabric_configfs\n");
2371         return 0;
2372 };
2373
2374 static void vhost_scsi_deregister_configfs(void)
2375 {
2376         if (!vhost_scsi_fabric_configfs)
2377                 return;
2378
2379         target_fabric_configfs_deregister(vhost_scsi_fabric_configfs);
2380         vhost_scsi_fabric_configfs = NULL;
2381         pr_debug("TCM_VHOST[0] - Cleared vhost_scsi_fabric_configfs\n");
2382 };
2383
2384 static int __init vhost_scsi_init(void)
2385 {
2386         int ret = -ENOMEM;
2387         /*
2388          * Use our own dedicated workqueue for submitting I/O into
2389          * target core to avoid contention within system_wq.
2390          */
2391         vhost_scsi_workqueue = alloc_workqueue("vhost_scsi", 0, 0);
2392         if (!vhost_scsi_workqueue)
2393                 goto out;
2394
2395         ret = vhost_scsi_register();
2396         if (ret < 0)
2397                 goto out_destroy_workqueue;
2398
2399         ret = vhost_scsi_register_configfs();
2400         if (ret < 0)
2401                 goto out_vhost_scsi_deregister;
2402
2403         return 0;
2404
2405 out_vhost_scsi_deregister:
2406         vhost_scsi_deregister();
2407 out_destroy_workqueue:
2408         destroy_workqueue(vhost_scsi_workqueue);
2409 out:
2410         return ret;
2411 };
2412
2413 static void vhost_scsi_exit(void)
2414 {
2415         vhost_scsi_deregister_configfs();
2416         vhost_scsi_deregister();
2417         destroy_workqueue(vhost_scsi_workqueue);
2418 };
2419
2420 MODULE_DESCRIPTION("VHOST_SCSI series fabric driver");
2421 MODULE_ALIAS("tcm_vhost");
2422 MODULE_LICENSE("GPL");
2423 module_init(vhost_scsi_init);
2424 module_exit(vhost_scsi_exit);