drivers/nvme/target/admin-cmd.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * NVMe admin command implementation.
   4  * Copyright (c) 2015-2016 HGST, a Western Digital Company.
   5  */
   6 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
   7 #include <linux/module.h>
   8 #include <linux/rculist.h>
   9 #include <linux/part_stat.h>
  10
  11 #include <generated/utsrelease.h>
  12 #include <asm/unaligned.h>
  13 #include "nvmet.h"
  14
  15 u32 nvmet_get_log_page_len(struct nvme_command *cmd)
  16 {
  17         u32 len = le16_to_cpu(cmd->get_log_page.numdu);
  18
  19         len <<= 16;
  20         len += le16_to_cpu(cmd->get_log_page.numdl);
  21         /* NUMD is a 0's based value */
  22         len += 1;
  23         len *= sizeof(u32);
  24
  25         return len;
  26 }
  27
  28 static u32 nvmet_feat_data_len(struct nvmet_req *req, u32 cdw10)
  29 {
  30         switch (cdw10 & 0xff) {
  31         case NVME_FEAT_HOST_ID:
  32                 return sizeof(req->sq->ctrl->hostid);
  33         default:
  34                 return 0;
  35         }
  36 }
  37
  38 u64 nvmet_get_log_page_offset(struct nvme_command *cmd)
  39 {
  40         return le64_to_cpu(cmd->get_log_page.lpo);
  41 }
  42
  43 static void nvmet_execute_get_log_page_noop(struct nvmet_req *req)
  44 {
  45         nvmet_req_complete(req, nvmet_zero_sgl(req, 0, req->transfer_len));
  46 }
  47
  48 static void nvmet_execute_get_log_page_error(struct nvmet_req *req)
  49 {
  50         struct nvmet_ctrl *ctrl = req->sq->ctrl;
  51         unsigned long flags;
  52         off_t offset = 0;
  53         u64 slot;
  54         u64 i;
  55
  56         spin_lock_irqsave(&ctrl->error_lock, flags);
  57         slot = ctrl->err_counter % NVMET_ERROR_LOG_SLOTS;
  58
  59         for (i = 0; i < NVMET_ERROR_LOG_SLOTS; i++) {
  60                 if (nvmet_copy_to_sgl(req, offset, &ctrl->slots[slot],
  61                                 sizeof(struct nvme_error_slot)))
  62                         break;
  63
  64                 if (slot == 0)
  65                         slot = NVMET_ERROR_LOG_SLOTS - 1;
  66                 else
  67                         slot--;
  68                 offset += sizeof(struct nvme_error_slot);
  69         }
  70         spin_unlock_irqrestore(&ctrl->error_lock, flags);
  71         nvmet_req_complete(req, 0);
  72 }
  73
  74 static u16 nvmet_get_smart_log_nsid(struct nvmet_req *req,
  75                 struct nvme_smart_log *slog)
  76 {
  77         u64 host_reads, host_writes, data_units_read, data_units_written;
  78         u16 status;
  79
  80         status = nvmet_req_find_ns(req);
  81         if (status)
  82                 return status;
  83
  84         /* we don't have the right data for file backed ns */
  85         if (!req->ns->bdev)
  86                 return NVME_SC_SUCCESS;
  87
  88         host_reads = part_stat_read(req->ns->bdev, ios[READ]);
  89         data_units_read =
  90                 DIV_ROUND_UP(part_stat_read(req->ns->bdev, sectors[READ]), 1000);
  91         host_writes = part_stat_read(req->ns->bdev, ios[WRITE]);
  92         data_units_written =
  93                 DIV_ROUND_UP(part_stat_read(req->ns->bdev, sectors[WRITE]), 1000);
  94
  95         put_unaligned_le64(host_reads, &slog->host_reads[0]);
  96         put_unaligned_le64(data_units_read, &slog->data_units_read[0]);
  97         put_unaligned_le64(host_writes, &slog->host_writes[0]);
  98         put_unaligned_le64(data_units_written, &slog->data_units_written[0]);
  99
 100         return NVME_SC_SUCCESS;
 101 }
 102
 103 static u16 nvmet_get_smart_log_all(struct nvmet_req *req,
 104                 struct nvme_smart_log *slog)
 105 {
 106         u64 host_reads = 0, host_writes = 0;
 107         u64 data_units_read = 0, data_units_written = 0;
 108         struct nvmet_ns *ns;
 109         struct nvmet_ctrl *ctrl;
 110         unsigned long idx;
 111
 112         ctrl = req->sq->ctrl;
 113         xa_for_each(&ctrl->subsys->namespaces, idx, ns) {
 114                 /* we don't have the right data for file backed ns */
 115                 if (!ns->bdev)
 116                         continue;
 117                 host_reads += part_stat_read(ns->bdev, ios[READ]);
 118                 data_units_read += DIV_ROUND_UP(
 119                         part_stat_read(ns->bdev, sectors[READ]), 1000);
 120                 host_writes += part_stat_read(ns->bdev, ios[WRITE]);
 121                 data_units_written += DIV_ROUND_UP(
 122                         part_stat_read(ns->bdev, sectors[WRITE]), 1000);
 123         }
 124
 125         put_unaligned_le64(host_reads, &slog->host_reads[0]);
 126         put_unaligned_le64(data_units_read, &slog->data_units_read[0]);
 127         put_unaligned_le64(host_writes, &slog->host_writes[0]);
 128         put_unaligned_le64(data_units_written, &slog->data_units_written[0]);
 129
 130         return NVME_SC_SUCCESS;
 131 }
 132
 133 static void nvmet_execute_get_log_page_smart(struct nvmet_req *req)
 134 {
 135         struct nvme_smart_log *log;
 136         u16 status = NVME_SC_INTERNAL;
 137         unsigned long flags;
 138
 139         if (req->transfer_len != sizeof(*log))
 140                 goto out;
 141
 142         log = kzalloc(sizeof(*log), GFP_KERNEL);
 143         if (!log)
 144                 goto out;
 145
 146         if (req->cmd->get_log_page.nsid == cpu_to_le32(NVME_NSID_ALL))
 147                 status = nvmet_get_smart_log_all(req, log);
 148         else
 149                 status = nvmet_get_smart_log_nsid(req, log);
 150         if (status)
 151                 goto out_free_log;
 152
 153         spin_lock_irqsave(&req->sq->ctrl->error_lock, flags);
 154         put_unaligned_le64(req->sq->ctrl->err_counter,
 155                         &log->num_err_log_entries);
 156         spin_unlock_irqrestore(&req->sq->ctrl->error_lock, flags);
 157
 158         status = nvmet_copy_to_sgl(req, 0, log, sizeof(*log));
 159 out_free_log:
 160         kfree(log);
 161 out:
 162         nvmet_req_complete(req, status);
 163 }
 164
 165 static void nvmet_execute_get_log_cmd_effects_ns(struct nvmet_req *req)
 166 {
 167         u16 status = NVME_SC_INTERNAL;
 168         struct nvme_effects_log *log;
 169
 170         log = kzalloc(sizeof(*log), GFP_KERNEL);
 171         if (!log)
 172                 goto out;
 173
 174         log->acs[nvme_admin_get_log_page]       = cpu_to_le32(1 << 0);
 175         log->acs[nvme_admin_identify]           = cpu_to_le32(1 << 0);
 176         log->acs[nvme_admin_abort_cmd]          = cpu_to_le32(1 << 0);
 177         log->acs[nvme_admin_set_features]       = cpu_to_le32(1 << 0);
 178         log->acs[nvme_admin_get_features]       = cpu_to_le32(1 << 0);
 179         log->acs[nvme_admin_async_event]        = cpu_to_le32(1 << 0);
 180         log->acs[nvme_admin_keep_alive]         = cpu_to_le32(1 << 0);
 181
 182         log->iocs[nvme_cmd_read]                = cpu_to_le32(1 << 0);
 183         log->iocs[nvme_cmd_write]               = cpu_to_le32(1 << 0);
 184         log->iocs[nvme_cmd_flush]               = cpu_to_le32(1 << 0);
 185         log->iocs[nvme_cmd_dsm]                 = cpu_to_le32(1 << 0);
 186         log->iocs[nvme_cmd_write_zeroes]        = cpu_to_le32(1 << 0);
 187
 188         status = nvmet_copy_to_sgl(req, 0, log, sizeof(*log));
 189
 190         kfree(log);
 191 out:
 192         nvmet_req_complete(req, status);
 193 }
 194
 195 static void nvmet_execute_get_log_changed_ns(struct nvmet_req *req)
 196 {
 197         struct nvmet_ctrl *ctrl = req->sq->ctrl;
 198         u16 status = NVME_SC_INTERNAL;
 199         size_t len;
 200
 201         if (req->transfer_len != NVME_MAX_CHANGED_NAMESPACES * sizeof(__le32))
 202                 goto out;
 203
 204         mutex_lock(&ctrl->lock);
 205         if (ctrl->nr_changed_ns == U32_MAX)
 206                 len = sizeof(__le32);
 207         else
 208                 len = ctrl->nr_changed_ns * sizeof(__le32);
 209         status = nvmet_copy_to_sgl(req, 0, ctrl->changed_ns_list, len);
 210         if (!status)
 211                 status = nvmet_zero_sgl(req, len, req->transfer_len - len);
 212         ctrl->nr_changed_ns = 0;
 213         nvmet_clear_aen_bit(req, NVME_AEN_BIT_NS_ATTR);
 214         mutex_unlock(&ctrl->lock);
 215 out:
 216         nvmet_req_complete(req, status);
 217 }
 218
 219 static u32 nvmet_format_ana_group(struct nvmet_req *req, u32 grpid,
 220                 struct nvme_ana_group_desc *desc)
 221 {
 222         struct nvmet_ctrl *ctrl = req->sq->ctrl;
 223         struct nvmet_ns *ns;
 224         unsigned long idx;
 225         u32 count = 0;
 226
 227         if (!(req->cmd->get_log_page.lsp & NVME_ANA_LOG_RGO)) {
 228                 xa_for_each(&ctrl->subsys->namespaces, idx, ns)
 229                         if (ns->anagrpid == grpid)
 230                                 desc->nsids[count++] = cpu_to_le32(ns->nsid);
 231         }
 232
 233         desc->grpid = cpu_to_le32(grpid);
 234         desc->nnsids = cpu_to_le32(count);
 235         desc->chgcnt = cpu_to_le64(nvmet_ana_chgcnt);
 236         desc->state = req->port->ana_state[grpid];
 237         memset(desc->rsvd17, 0, sizeof(desc->rsvd17));
 238         return sizeof(struct nvme_ana_group_desc) + count * sizeof(__le32);
 239 }
 240
 241 static void nvmet_execute_get_log_page_ana(struct nvmet_req *req)
 242 {
 243         struct nvme_ana_rsp_hdr hdr = { 0, };
 244         struct nvme_ana_group_desc *desc;
 245         size_t offset = sizeof(struct nvme_ana_rsp_hdr); /* start beyond hdr */
 246         size_t len;
 247         u32 grpid;
 248         u16 ngrps = 0;
 249         u16 status;
 250
 251         status = NVME_SC_INTERNAL;
 252         desc = kmalloc(sizeof(struct nvme_ana_group_desc) +
 253                         NVMET_MAX_NAMESPACES * sizeof(__le32), GFP_KERNEL);
 254         if (!desc)
 255                 goto out;
 256
 257         down_read(&nvmet_ana_sem);
 258         for (grpid = 1; grpid <= NVMET_MAX_ANAGRPS; grpid++) {
 259                 if (!nvmet_ana_group_enabled[grpid])
 260                         continue;
 261                 len = nvmet_format_ana_group(req, grpid, desc);
 262                 status = nvmet_copy_to_sgl(req, offset, desc, len);
 263                 if (status)
 264                         break;
 265                 offset += len;
 266                 ngrps++;
 267         }
 268         for ( ; grpid <= NVMET_MAX_ANAGRPS; grpid++) {
 269                 if (nvmet_ana_group_enabled[grpid])
 270                         ngrps++;
 271         }
 272
 273         hdr.chgcnt = cpu_to_le64(nvmet_ana_chgcnt);
 274         hdr.ngrps = cpu_to_le16(ngrps);
 275         nvmet_clear_aen_bit(req, NVME_AEN_BIT_ANA_CHANGE);
 276         up_read(&nvmet_ana_sem);
 277
 278         kfree(desc);
 279
 280         /* copy the header last once we know the number of groups */
 281         status = nvmet_copy_to_sgl(req, 0, &hdr, sizeof(hdr));
 282 out:
 283         nvmet_req_complete(req, status);
 284 }
 285
 286 static void nvmet_execute_get_log_page(struct nvmet_req *req)
 287 {
 288         if (!nvmet_check_transfer_len(req, nvmet_get_log_page_len(req->cmd)))
 289                 return;
 290
 291         switch (req->cmd->get_log_page.lid) {
 292         case NVME_LOG_ERROR:
 293                 return nvmet_execute_get_log_page_error(req);
 294         case NVME_LOG_SMART:
 295                 return nvmet_execute_get_log_page_smart(req);
 296         case NVME_LOG_FW_SLOT:
 297                 /*
 298                  * We only support a single firmware slot which always is
 299                  * active, so we can zero out the whole firmware slot log and
 300                  * still claim to fully implement this mandatory log page.
 301                  */
 302                 return nvmet_execute_get_log_page_noop(req);
 303         case NVME_LOG_CHANGED_NS:
 304                 return nvmet_execute_get_log_changed_ns(req);
 305         case NVME_LOG_CMD_EFFECTS:
 306                 return nvmet_execute_get_log_cmd_effects_ns(req);
 307         case NVME_LOG_ANA:
 308                 return nvmet_execute_get_log_page_ana(req);
 309         }
 310         pr_debug("unhandled lid %d on qid %d\n",
 311                req->cmd->get_log_page.lid, req->sq->qid);
 312         req->error_loc = offsetof(struct nvme_get_log_page_command, lid);
 313         nvmet_req_complete(req, NVME_SC_INVALID_FIELD | NVME_SC_DNR);
 314 }
 315
 316 static u16 nvmet_set_model_number(struct nvmet_subsys *subsys)
 317 {
 318         u16 status = 0;
 319
 320         mutex_lock(&subsys->lock);
 321         if (!subsys->model_number) {
 322                 subsys->model_number =
 323                         kstrdup(NVMET_DEFAULT_CTRL_MODEL, GFP_KERNEL);
 324                 if (!subsys->model_number)
 325                         status = NVME_SC_INTERNAL;
 326         }
 327         mutex_unlock(&subsys->lock);
 328
 329         return status;
 330 }
 331
 332 static void nvmet_execute_identify_ctrl(struct nvmet_req *req)
 333 {
 334         struct nvmet_ctrl *ctrl = req->sq->ctrl;
 335         struct nvmet_subsys *subsys = ctrl->subsys;
 336         struct nvme_id_ctrl *id;
 337         u32 cmd_capsule_size;
 338         u16 status = 0;
 339
 340         /*
 341          * If there is no model number yet, set it now.  It will then remain
 342          * stable for the life time of the subsystem.
 343          */
 344         if (!subsys->model_number) {
 345                 status = nvmet_set_model_number(subsys);
 346                 if (status)
 347                         goto out;
 348         }
 349
 350         id = kzalloc(sizeof(*id), GFP_KERNEL);
 351         if (!id) {
 352                 status = NVME_SC_INTERNAL;
 353                 goto out;
 354         }
 355
 356         /* XXX: figure out how to assign real vendors IDs. */
 357         id->vid = 0;
 358         id->ssvid = 0;
 359
 360         memset(id->sn, ' ', sizeof(id->sn));
 361         bin2hex(id->sn, &ctrl->subsys->serial,
 362                 min(sizeof(ctrl->subsys->serial), sizeof(id->sn) / 2));
 363         memcpy_and_pad(id->mn, sizeof(id->mn), subsys->model_number,
 364                        strlen(subsys->model_number), ' ');
 365         memcpy_and_pad(id->fr, sizeof(id->fr),
 366                        UTS_RELEASE, strlen(UTS_RELEASE), ' ');
 367
 368         id->rab = 6;
 369
 370         /*
 371          * XXX: figure out how we can assign a IEEE OUI, but until then
 372          * the safest is to leave it as zeroes.
 373          */
 374
 375         /* we support multiple ports, multiples hosts and ANA: */
 376         id->cmic = (1 << 0) | (1 << 1) | (1 << 3);
 377
 378         /* Limit MDTS according to transport capability */
 379         if (ctrl->ops->get_mdts)
 380                 id->mdts = ctrl->ops->get_mdts(ctrl);
 381         else
 382                 id->mdts = 0;
 383
 384         id->cntlid = cpu_to_le16(ctrl->cntlid);
 385         id->ver = cpu_to_le32(ctrl->subsys->ver);
 386
 387         /* XXX: figure out what to do about RTD3R/RTD3 */
 388         id->oaes = cpu_to_le32(NVMET_AEN_CFG_OPTIONAL);
 389         id->ctratt = cpu_to_le32(NVME_CTRL_ATTR_HID_128_BIT |
 390                 NVME_CTRL_ATTR_TBKAS);
 391
 392         id->oacs = 0;
 393
 394         /*
 395          * We don't really have a practical limit on the number of abort
 396          * comands.  But we don't do anything useful for abort either, so
 397          * no point in allowing more abort commands than the spec requires.
 398          */
 399         id->acl = 3;
 400
 401         id->aerl = NVMET_ASYNC_EVENTS - 1;
 402
 403         /* first slot is read-only, only one slot supported */
 404         id->frmw = (1 << 0) | (1 << 1);
 405         id->lpa = (1 << 0) | (1 << 1) | (1 << 2);
 406         id->elpe = NVMET_ERROR_LOG_SLOTS - 1;
 407         id->npss = 0;
 408
 409         /* We support keep-alive timeout in granularity of seconds */
 410         id->kas = cpu_to_le16(NVMET_KAS);
 411
 412         id->sqes = (0x6 << 4) | 0x6;
 413         id->cqes = (0x4 << 4) | 0x4;
 414
 415         /* no enforcement soft-limit for maxcmd - pick arbitrary high value */
 416         id->maxcmd = cpu_to_le16(NVMET_MAX_CMD);
 417
 418         id->nn = cpu_to_le32(ctrl->subsys->max_nsid);
 419         id->mnan = cpu_to_le32(NVMET_MAX_NAMESPACES);
 420         id->oncs = cpu_to_le16(NVME_CTRL_ONCS_DSM |
 421                         NVME_CTRL_ONCS_WRITE_ZEROES);
 422
 423         /* XXX: don't report vwc if the underlying device is write through */
 424         id->vwc = NVME_CTRL_VWC_PRESENT;
 425
 426         /*
 427          * We can't support atomic writes bigger than a LBA without support
 428          * from the backend device.
 429          */
 430         id->awun = 0;
 431         id->awupf = 0;
 432
 433         id->sgls = cpu_to_le32(1 << 0); /* we always support SGLs */
 434         if (ctrl->ops->flags & NVMF_KEYED_SGLS)
 435                 id->sgls |= cpu_to_le32(1 << 2);
 436         if (req->port->inline_data_size)
 437                 id->sgls |= cpu_to_le32(1 << 20);
 438
 439         strlcpy(id->subnqn, ctrl->subsys->subsysnqn, sizeof(id->subnqn));
 440
 441         /*
 442          * Max command capsule size is sqe + in-capsule data size.
 443          * Disable in-capsule data for Metadata capable controllers.
 444          */
 445         cmd_capsule_size = sizeof(struct nvme_command);
 446         if (!ctrl->pi_support)
 447                 cmd_capsule_size += req->port->inline_data_size;
 448         id->ioccsz = cpu_to_le32(cmd_capsule_size / 16);
 449
 450         /* Max response capsule size is cqe */
 451         id->iorcsz = cpu_to_le32(sizeof(struct nvme_completion) / 16);
 452
 453         id->msdbd = ctrl->ops->msdbd;
 454
 455         id->anacap = (1 << 0) | (1 << 1) | (1 << 2) | (1 << 3) | (1 << 4);
 456         id->anatt = 10; /* random value */
 457         id->anagrpmax = cpu_to_le32(NVMET_MAX_ANAGRPS);
 458         id->nanagrpid = cpu_to_le32(NVMET_MAX_ANAGRPS);
 459
 460         /*
 461          * Meh, we don't really support any power state.  Fake up the same
 462          * values that qemu does.
 463          */
 464         id->psd[0].max_power = cpu_to_le16(0x9c4);
 465         id->psd[0].entry_lat = cpu_to_le32(0x10);
 466         id->psd[0].exit_lat = cpu_to_le32(0x4);
 467
 468         id->nwpc = 1 << 0; /* write protect and no write protect */
 469
 470         status = nvmet_copy_to_sgl(req, 0, id, sizeof(*id));
 471
 472         kfree(id);
 473 out:
 474         nvmet_req_complete(req, status);
 475 }
 476
 477 static void nvmet_execute_identify_ns(struct nvmet_req *req)
 478 {
 479         struct nvme_id_ns *id;
 480         u16 status;
 481
 482         if (le32_to_cpu(req->cmd->identify.nsid) == NVME_NSID_ALL) {
 483                 req->error_loc = offsetof(struct nvme_identify, nsid);
 484                 status = NVME_SC_INVALID_NS | NVME_SC_DNR;
 485                 goto out;
 486         }
 487
 488         id = kzalloc(sizeof(*id), GFP_KERNEL);
 489         if (!id) {
 490                 status = NVME_SC_INTERNAL;
 491                 goto out;
 492         }
 493
 494         /* return an all zeroed buffer if we can't find an active namespace */
 495         status = nvmet_req_find_ns(req);
 496         if (status) {
 497                 status = 0;
 498                 goto done;
 499         }
 500
 501         nvmet_ns_revalidate(req->ns);
 502
 503         /*
 504          * nuse = ncap = nsze isn't always true, but we have no way to find
 505          * that out from the underlying device.
 506          */
 507         id->ncap = id->nsze =
 508                 cpu_to_le64(req->ns->size >> req->ns->blksize_shift);
 509         switch (req->port->ana_state[req->ns->anagrpid]) {
 510         case NVME_ANA_INACCESSIBLE:
 511         case NVME_ANA_PERSISTENT_LOSS:
 512                 break;
 513         default:
 514                 id->nuse = id->nsze;
 515                 break;
 516         }
 517
 518         if (req->ns->bdev)
 519                 nvmet_bdev_set_limits(req->ns->bdev, id);
 520
 521         /*
 522          * We just provide a single LBA format that matches what the
 523          * underlying device reports.
 524          */
 525         id->nlbaf = 0;
 526         id->flbas = 0;
 527
 528         /*
 529          * Our namespace might always be shared.  Not just with other
 530          * controllers, but also with any other user of the block device.
 531          */
 532         id->nmic = (1 << 0);
 533         id->anagrpid = cpu_to_le32(req->ns->anagrpid);
 534
 535         memcpy(&id->nguid, &req->ns->nguid, sizeof(id->nguid));
 536
 537         id->lbaf[0].ds = req->ns->blksize_shift;
 538
 539         if (req->sq->ctrl->pi_support && nvmet_ns_has_pi(req->ns)) {
 540                 id->dpc = NVME_NS_DPC_PI_FIRST | NVME_NS_DPC_PI_LAST |
 541                           NVME_NS_DPC_PI_TYPE1 | NVME_NS_DPC_PI_TYPE2 |
 542                           NVME_NS_DPC_PI_TYPE3;
 543                 id->mc = NVME_MC_EXTENDED_LBA;
 544                 id->dps = req->ns->pi_type;
 545                 id->flbas = NVME_NS_FLBAS_META_EXT;
 546                 id->lbaf[0].ms = cpu_to_le16(req->ns->metadata_size);
 547         }
 548
 549         if (req->ns->readonly)
 550                 id->nsattr |= (1 << 0);
 551 done:
 552         if (!status)
 553                 status = nvmet_copy_to_sgl(req, 0, id, sizeof(*id));
 554
 555         kfree(id);
 556 out:
 557         nvmet_req_complete(req, status);
 558 }
 559
 560 static void nvmet_execute_identify_nslist(struct nvmet_req *req)
 561 {
 562         static const int buf_size = NVME_IDENTIFY_DATA_SIZE;
 563         struct nvmet_ctrl *ctrl = req->sq->ctrl;
 564         struct nvmet_ns *ns;
 565         unsigned long idx;
 566         u32 min_nsid = le32_to_cpu(req->cmd->identify.nsid);
 567         __le32 *list;
 568         u16 status = 0;
 569         int i = 0;
 570
 571         list = kzalloc(buf_size, GFP_KERNEL);
 572         if (!list) {
 573                 status = NVME_SC_INTERNAL;
 574                 goto out;
 575         }
 576
 577         xa_for_each(&ctrl->subsys->namespaces, idx, ns) {
 578                 if (ns->nsid <= min_nsid)
 579                         continue;
 580                 list[i++] = cpu_to_le32(ns->nsid);
 581                 if (i == buf_size / sizeof(__le32))
 582                         break;
 583         }
 584
 585         status = nvmet_copy_to_sgl(req, 0, list, buf_size);
 586
 587         kfree(list);
 588 out:
 589         nvmet_req_complete(req, status);
 590 }
 591
 592 static u16 nvmet_copy_ns_identifier(struct nvmet_req *req, u8 type, u8 len,
 593                                     void *id, off_t *off)
 594 {
 595         struct nvme_ns_id_desc desc = {
 596                 .nidt = type,
 597                 .nidl = len,
 598         };
 599         u16 status;
 600
 601         status = nvmet_copy_to_sgl(req, *off, &desc, sizeof(desc));
 602         if (status)
 603                 return status;
 604         *off += sizeof(desc);
 605
 606         status = nvmet_copy_to_sgl(req, *off, id, len);
 607         if (status)
 608                 return status;
 609         *off += len;
 610
 611         return 0;
 612 }
 613
 614 static void nvmet_execute_identify_desclist(struct nvmet_req *req)
 615 {
 616         off_t off = 0;
 617         u16 status;
 618
 619         status = nvmet_req_find_ns(req);
 620         if (status)
 621                 goto out;
 622
 623         if (memchr_inv(&req->ns->uuid, 0, sizeof(req->ns->uuid))) {
 624                 status = nvmet_copy_ns_identifier(req, NVME_NIDT_UUID,
 625                                                   NVME_NIDT_UUID_LEN,
 626                                                   &req->ns->uuid, &off);
 627                 if (status)
 628                         goto out;
 629         }
 630         if (memchr_inv(req->ns->nguid, 0, sizeof(req->ns->nguid))) {
 631                 status = nvmet_copy_ns_identifier(req, NVME_NIDT_NGUID,
 632                                                   NVME_NIDT_NGUID_LEN,
 633                                                   &req->ns->nguid, &off);
 634                 if (status)
 635                         goto out;
 636         }
 637
 638         if (sg_zero_buffer(req->sg, req->sg_cnt, NVME_IDENTIFY_DATA_SIZE - off,
 639                         off) != NVME_IDENTIFY_DATA_SIZE - off)
 640                 status = NVME_SC_INTERNAL | NVME_SC_DNR;
 641
 642 out:
 643         nvmet_req_complete(req, status);
 644 }
 645
 646 static void nvmet_execute_identify(struct nvmet_req *req)
 647 {
 648         if (!nvmet_check_transfer_len(req, NVME_IDENTIFY_DATA_SIZE))
 649                 return;
 650
 651         switch (req->cmd->identify.cns) {
 652         case NVME_ID_CNS_NS:
 653                 return nvmet_execute_identify_ns(req);
 654         case NVME_ID_CNS_CTRL:
 655                 return nvmet_execute_identify_ctrl(req);
 656         case NVME_ID_CNS_NS_ACTIVE_LIST:
 657                 return nvmet_execute_identify_nslist(req);
 658         case NVME_ID_CNS_NS_DESC_LIST:
 659                 return nvmet_execute_identify_desclist(req);
 660         }
 661
 662         pr_debug("unhandled identify cns %d on qid %d\n",
 663                req->cmd->identify.cns, req->sq->qid);
 664         req->error_loc = offsetof(struct nvme_identify, cns);
 665         nvmet_req_complete(req, NVME_SC_INVALID_FIELD | NVME_SC_DNR);
 666 }
 667
 668 /*
 669  * A "minimum viable" abort implementation: the command is mandatory in the
 670  * spec, but we are not required to do any useful work.  We couldn't really
 671  * do a useful abort, so don't bother even with waiting for the command
 672  * to be exectuted and return immediately telling the command to abort
 673  * wasn't found.
 674  */
 675 static void nvmet_execute_abort(struct nvmet_req *req)
 676 {
 677         if (!nvmet_check_transfer_len(req, 0))
 678                 return;
 679         nvmet_set_result(req, 1);
 680         nvmet_req_complete(req, 0);
 681 }
 682
 683 static u16 nvmet_write_protect_flush_sync(struct nvmet_req *req)
 684 {
 685         u16 status;
 686
 687         if (req->ns->file)
 688                 status = nvmet_file_flush(req);
 689         else
 690                 status = nvmet_bdev_flush(req);
 691
 692         if (status)
 693                 pr_err("write protect flush failed nsid: %u\n", req->ns->nsid);
 694         return status;
 695 }
 696
 697 static u16 nvmet_set_feat_write_protect(struct nvmet_req *req)
 698 {
 699         u32 write_protect = le32_to_cpu(req->cmd->common.cdw11);
 700         struct nvmet_subsys *subsys = nvmet_req_subsys(req);
 701         u16 status;
 702
 703         status = nvmet_req_find_ns(req);
 704         if (status)
 705                 return status;
 706
 707         mutex_lock(&subsys->lock);
 708         switch (write_protect) {
 709         case NVME_NS_WRITE_PROTECT:
 710                 req->ns->readonly = true;
 711                 status = nvmet_write_protect_flush_sync(req);
 712                 if (status)
 713                         req->ns->readonly = false;
 714                 break;
 715         case NVME_NS_NO_WRITE_PROTECT:
 716                 req->ns->readonly = false;
 717                 status = 0;
 718                 break;
 719         default:
 720                 break;
 721         }
 722
 723         if (!status)
 724                 nvmet_ns_changed(subsys, req->ns->nsid);
 725         mutex_unlock(&subsys->lock);
 726         return status;
 727 }
 728
 729 u16 nvmet_set_feat_kato(struct nvmet_req *req)
 730 {
 731         u32 val32 = le32_to_cpu(req->cmd->common.cdw11);
 732
 733         nvmet_stop_keep_alive_timer(req->sq->ctrl);
 734         req->sq->ctrl->kato = DIV_ROUND_UP(val32, 1000);
 735         nvmet_start_keep_alive_timer(req->sq->ctrl);
 736
 737         nvmet_set_result(req, req->sq->ctrl->kato);
 738
 739         return 0;
 740 }
 741
 742 u16 nvmet_set_feat_async_event(struct nvmet_req *req, u32 mask)
 743 {
 744         u32 val32 = le32_to_cpu(req->cmd->common.cdw11);
 745
 746         if (val32 & ~mask) {
 747                 req->error_loc = offsetof(struct nvme_common_command, cdw11);
 748                 return NVME_SC_INVALID_FIELD | NVME_SC_DNR;
 749         }
 750
 751         WRITE_ONCE(req->sq->ctrl->aen_enabled, val32);
 752         nvmet_set_result(req, val32);
 753
 754         return 0;
 755 }
 756
 757 void nvmet_execute_set_features(struct nvmet_req *req)
 758 {
 759         struct nvmet_subsys *subsys = nvmet_req_subsys(req);
 760         u32 cdw10 = le32_to_cpu(req->cmd->common.cdw10);
 761         u32 cdw11 = le32_to_cpu(req->cmd->common.cdw11);
 762         u16 status = 0;
 763         u16 nsqr;
 764         u16 ncqr;
 765
 766         if (!nvmet_check_transfer_len(req, 0))
 767                 return;
 768
 769         switch (cdw10 & 0xff) {
 770         case NVME_FEAT_NUM_QUEUES:
 771                 ncqr = (cdw11 >> 16) & 0xffff;
 772                 nsqr = cdw11 & 0xffff;
 773                 if (ncqr == 0xffff || nsqr == 0xffff) {
 774                         status = NVME_SC_INVALID_FIELD | NVME_SC_DNR;
 775                         break;
 776                 }
 777                 nvmet_set_result(req,
 778                         (subsys->max_qid - 1) | ((subsys->max_qid - 1) << 16));
 779                 break;
 780         case NVME_FEAT_KATO:
 781                 status = nvmet_set_feat_kato(req);
 782                 break;
 783         case NVME_FEAT_ASYNC_EVENT:
 784                 status = nvmet_set_feat_async_event(req, NVMET_AEN_CFG_ALL);
 785                 break;
 786         case NVME_FEAT_HOST_ID:
 787                 status = NVME_SC_CMD_SEQ_ERROR | NVME_SC_DNR;
 788                 break;
 789         case NVME_FEAT_WRITE_PROTECT:
 790                 status = nvmet_set_feat_write_protect(req);
 791                 break;
 792         default:
 793                 req->error_loc = offsetof(struct nvme_common_command, cdw10);
 794                 status = NVME_SC_INVALID_FIELD | NVME_SC_DNR;
 795                 break;
 796         }
 797
 798         nvmet_req_complete(req, status);
 799 }
 800
 801 static u16 nvmet_get_feat_write_protect(struct nvmet_req *req)
 802 {
 803         struct nvmet_subsys *subsys = nvmet_req_subsys(req);
 804         u32 result;
 805
 806         result = nvmet_req_find_ns(req);
 807         if (result)
 808                 return result;
 809
 810         mutex_lock(&subsys->lock);
 811         if (req->ns->readonly == true)
 812                 result = NVME_NS_WRITE_PROTECT;
 813         else
 814                 result = NVME_NS_NO_WRITE_PROTECT;
 815         nvmet_set_result(req, result);
 816         mutex_unlock(&subsys->lock);
 817
 818         return 0;
 819 }
 820
 821 void nvmet_get_feat_kato(struct nvmet_req *req)
 822 {
 823         nvmet_set_result(req, req->sq->ctrl->kato * 1000);
 824 }
 825
 826 void nvmet_get_feat_async_event(struct nvmet_req *req)
 827 {
 828         nvmet_set_result(req, READ_ONCE(req->sq->ctrl->aen_enabled));
 829 }
 830
 831 void nvmet_execute_get_features(struct nvmet_req *req)
 832 {
 833         struct nvmet_subsys *subsys = nvmet_req_subsys(req);
 834         u32 cdw10 = le32_to_cpu(req->cmd->common.cdw10);
 835         u16 status = 0;
 836
 837         if (!nvmet_check_transfer_len(req, nvmet_feat_data_len(req, cdw10)))
 838                 return;
 839
 840         switch (cdw10 & 0xff) {
 841         /*
 842          * These features are mandatory in the spec, but we don't
 843          * have a useful way to implement them.  We'll eventually
 844          * need to come up with some fake values for these.
 845          */
 846 #if 0
 847         case NVME_FEAT_ARBITRATION:
 848                 break;
 849         case NVME_FEAT_POWER_MGMT:
 850                 break;
 851         case NVME_FEAT_TEMP_THRESH:
 852                 break;
 853         case NVME_FEAT_ERR_RECOVERY:
 854                 break;
 855         case NVME_FEAT_IRQ_COALESCE:
 856                 break;
 857         case NVME_FEAT_IRQ_CONFIG:
 858                 break;
 859         case NVME_FEAT_WRITE_ATOMIC:
 860                 break;
 861 #endif
 862         case NVME_FEAT_ASYNC_EVENT:
 863                 nvmet_get_feat_async_event(req);
 864                 break;
 865         case NVME_FEAT_VOLATILE_WC:
 866                 nvmet_set_result(req, 1);
 867                 break;
 868         case NVME_FEAT_NUM_QUEUES:
 869                 nvmet_set_result(req,
 870                         (subsys->max_qid-1) | ((subsys->max_qid-1) << 16));
 871                 break;
 872         case NVME_FEAT_KATO:
 873                 nvmet_get_feat_kato(req);
 874                 break;
 875         case NVME_FEAT_HOST_ID:
 876                 /* need 128-bit host identifier flag */
 877                 if (!(req->cmd->common.cdw11 & cpu_to_le32(1 << 0))) {
 878                         req->error_loc =
 879                                 offsetof(struct nvme_common_command, cdw11);
 880                         status = NVME_SC_INVALID_FIELD | NVME_SC_DNR;
 881                         break;
 882                 }
 883
 884                 status = nvmet_copy_to_sgl(req, 0, &req->sq->ctrl->hostid,
 885                                 sizeof(req->sq->ctrl->hostid));
 886                 break;
 887         case NVME_FEAT_WRITE_PROTECT:
 888                 status = nvmet_get_feat_write_protect(req);
 889                 break;
 890         default:
 891                 req->error_loc =
 892                         offsetof(struct nvme_common_command, cdw10);
 893                 status = NVME_SC_INVALID_FIELD | NVME_SC_DNR;
 894                 break;
 895         }
 896
 897         nvmet_req_complete(req, status);
 898 }
 899
 900 void nvmet_execute_async_event(struct nvmet_req *req)
 901 {
 902         struct nvmet_ctrl *ctrl = req->sq->ctrl;
 903
 904         if (!nvmet_check_transfer_len(req, 0))
 905                 return;
 906
 907         mutex_lock(&ctrl->lock);
 908         if (ctrl->nr_async_event_cmds >= NVMET_ASYNC_EVENTS) {
 909                 mutex_unlock(&ctrl->lock);
 910                 nvmet_req_complete(req, NVME_SC_ASYNC_LIMIT | NVME_SC_DNR);
 911                 return;
 912         }
 913         ctrl->async_event_cmds[ctrl->nr_async_event_cmds++] = req;
 914         mutex_unlock(&ctrl->lock);
 915
 916         schedule_work(&ctrl->async_event_work);
 917 }
 918
 919 void nvmet_execute_keep_alive(struct nvmet_req *req)
 920 {
 921         struct nvmet_ctrl *ctrl = req->sq->ctrl;
 922         u16 status = 0;
 923
 924         if (!nvmet_check_transfer_len(req, 0))
 925                 return;
 926
 927         if (!ctrl->kato) {
 928                 status = NVME_SC_KA_TIMEOUT_INVALID;
 929                 goto out;
 930         }
 931
 932         pr_debug("ctrl %d update keep-alive timer for %d secs\n",
 933                 ctrl->cntlid, ctrl->kato);
 934         mod_delayed_work(system_wq, &ctrl->ka_work, ctrl->kato * HZ);
 935 out:
 936         nvmet_req_complete(req, status);
 937 }
 938
 939 u16 nvmet_parse_admin_cmd(struct nvmet_req *req)
 940 {
 941         struct nvme_command *cmd = req->cmd;
 942         u16 ret;
 943
 944         if (nvme_is_fabrics(cmd))
 945                 return nvmet_parse_fabrics_cmd(req);
 946         if (nvmet_req_subsys(req)->type == NVME_NQN_DISC)
 947                 return nvmet_parse_discovery_cmd(req);
 948
 949         ret = nvmet_check_ctrl_status(req);
 950         if (unlikely(ret))
 951                 return ret;
 952
 953         if (nvmet_req_passthru_ctrl(req))
 954                 return nvmet_parse_passthru_admin_cmd(req);
 955
 956         switch (cmd->common.opcode) {
 957         case nvme_admin_get_log_page:
 958                 req->execute = nvmet_execute_get_log_page;
 959                 return 0;
 960         case nvme_admin_identify:
 961                 req->execute = nvmet_execute_identify;
 962                 return 0;
 963         case nvme_admin_abort_cmd:
 964                 req->execute = nvmet_execute_abort;
 965                 return 0;
 966         case nvme_admin_set_features:
 967                 req->execute = nvmet_execute_set_features;
 968                 return 0;
 969         case nvme_admin_get_features:
 970                 req->execute = nvmet_execute_get_features;
 971                 return 0;
 972         case nvme_admin_async_event:
 973                 req->execute = nvmet_execute_async_event;
 974                 return 0;
 975         case nvme_admin_keep_alive:
 976                 req->execute = nvmet_execute_keep_alive;
 977                 return 0;
 978         }
 979
 980         pr_debug("unhandled cmd %d on qid %d\n", cmd->common.opcode,
 981                req->sq->qid);
 982         req->error_loc = offsetof(struct nvme_common_command, opcode);
 983         return NVME_SC_INVALID_OPCODE | NVME_SC_DNR;
 984 }