]> git.karo-electronics.de Git - karo-tx-linux.git/blobdiff - drivers/usb/storage/uas.c
uas: Remove cmnd reference from the cmd urb
[karo-tx-linux.git] / drivers / usb / storage / uas.c
index 3f42785f653c09585d5e6a0461bbb03044b7677d..8421dcd8ed4434e5622d51f006cb2a8876acf0cf 100644 (file)
@@ -2,7 +2,7 @@
  * USB Attached SCSI
  * Note that this is not the same as the USB Mass Storage driver
  *
- * Copyright Hans de Goede <hdegoede@redhat.com> for Red Hat, Inc. 2013
+ * Copyright Hans de Goede <hdegoede@redhat.com> for Red Hat, Inc. 2013 - 2014
  * Copyright Matthew Wilcox for Intel Corp, 2010
  * Copyright Sarah Sharp for Intel Corp, 2010
  *
@@ -28,6 +28,9 @@
 #include <scsi/scsi_tcq.h>
 
 #include "uas-detect.h"
+#include "scsiglue.h"
+
+#define MAX_CMNDS 256
 
 /*
  * The r00-r01c specs define this version of the SENSE IU data structure.
@@ -49,18 +52,15 @@ struct uas_dev_info {
        struct usb_anchor cmd_urbs;
        struct usb_anchor sense_urbs;
        struct usb_anchor data_urbs;
+       unsigned long flags;
        int qdepth, resetting;
-       struct response_iu response;
        unsigned cmd_pipe, status_pipe, data_in_pipe, data_out_pipe;
        unsigned use_streams:1;
        unsigned uas_sense_old:1;
-       unsigned running_task:1;
        unsigned shutdown:1;
-       struct scsi_cmnd *cmnd;
+       struct scsi_cmnd *cmnd[MAX_CMNDS];
        spinlock_t lock;
        struct work_struct work;
-       struct list_head inflight_list;
-       struct list_head dead_list;
 };
 
 enum {
@@ -76,8 +76,7 @@ enum {
        DATA_OUT_URB_INFLIGHT   = (1 << 10),
        COMMAND_COMPLETED       = (1 << 11),
        COMMAND_ABORTED         = (1 << 12),
-       UNLINK_DATA_URBS        = (1 << 13),
-       IS_IN_WORK_LIST         = (1 << 14),
+       IS_IN_WORK_LIST         = (1 << 13),
 };
 
 /* Overrides scsi_pointer */
@@ -87,7 +86,6 @@ struct uas_cmd_info {
        struct urb *cmd_urb;
        struct urb *data_in_urb;
        struct urb *data_out_urb;
-       struct list_head list;
 };
 
 /* I hate forward declarations, but I actually have a loop */
@@ -98,41 +96,26 @@ static int uas_try_complete(struct scsi_cmnd *cmnd, const char *caller);
 static void uas_free_streams(struct uas_dev_info *devinfo);
 static void uas_log_cmd_state(struct scsi_cmnd *cmnd, const char *caller);
 
-/* Must be called with devinfo->lock held, will temporary unlock the lock */
-static void uas_unlink_data_urbs(struct uas_dev_info *devinfo,
-                                struct uas_cmd_info *cmdinfo,
-                                unsigned long *lock_flags)
-{
-       /*
-        * The UNLINK_DATA_URBS flag makes sure uas_try_complete
-        * (called by urb completion) doesn't release cmdinfo
-        * underneath us.
-        */
-       cmdinfo->state |= UNLINK_DATA_URBS;
-       spin_unlock_irqrestore(&devinfo->lock, *lock_flags);
-
-       if (cmdinfo->data_in_urb)
-               usb_unlink_urb(cmdinfo->data_in_urb);
-       if (cmdinfo->data_out_urb)
-               usb_unlink_urb(cmdinfo->data_out_urb);
-
-       spin_lock_irqsave(&devinfo->lock, *lock_flags);
-       cmdinfo->state &= ~UNLINK_DATA_URBS;
-}
-
 static void uas_do_work(struct work_struct *work)
 {
        struct uas_dev_info *devinfo =
                container_of(work, struct uas_dev_info, work);
        struct uas_cmd_info *cmdinfo;
+       struct scsi_cmnd *cmnd;
        unsigned long flags;
-       int err;
+       int i, err;
 
        spin_lock_irqsave(&devinfo->lock, flags);
-       list_for_each_entry(cmdinfo, &devinfo->inflight_list, list) {
-               struct scsi_pointer *scp = (void *)cmdinfo;
-               struct scsi_cmnd *cmnd = container_of(scp, struct scsi_cmnd,
-                                                     SCp);
+
+       if (devinfo->resetting)
+               goto out;
+
+       for (i = 0; i < devinfo->qdepth; i++) {
+               if (!devinfo->cmnd[i])
+                       continue;
+
+               cmnd = devinfo->cmnd[i];
+               cmdinfo = (void *)&cmnd->SCp;
 
                if (!(cmdinfo->state & IS_IN_WORK_LIST))
                        continue;
@@ -143,35 +126,7 @@ static void uas_do_work(struct work_struct *work)
                else
                        schedule_work(&devinfo->work);
        }
-       spin_unlock_irqrestore(&devinfo->lock, flags);
-}
-
-static void uas_mark_cmd_dead(struct uas_dev_info *devinfo,
-                             struct uas_cmd_info *cmdinfo,
-                             int result, const char *caller)
-{
-       struct scsi_pointer *scp = (void *)cmdinfo;
-       struct scsi_cmnd *cmnd = container_of(scp, struct scsi_cmnd, SCp);
-
-       uas_log_cmd_state(cmnd, caller);
-       WARN_ON_ONCE(!spin_is_locked(&devinfo->lock));
-       WARN_ON_ONCE(cmdinfo->state & COMMAND_ABORTED);
-       cmdinfo->state |= COMMAND_ABORTED;
-       cmdinfo->state &= ~IS_IN_WORK_LIST;
-       cmnd->result = result << 16;
-       list_move_tail(&cmdinfo->list, &devinfo->dead_list);
-}
-
-static void uas_abort_inflight(struct uas_dev_info *devinfo, int result,
-                              const char *caller)
-{
-       struct uas_cmd_info *cmdinfo;
-       struct uas_cmd_info *temp;
-       unsigned long flags;
-
-       spin_lock_irqsave(&devinfo->lock, flags);
-       list_for_each_entry_safe(cmdinfo, temp, &devinfo->inflight_list, list)
-               uas_mark_cmd_dead(devinfo, cmdinfo, result, caller);
+out:
        spin_unlock_irqrestore(&devinfo->lock, flags);
 }
 
@@ -181,31 +136,32 @@ static void uas_add_work(struct uas_cmd_info *cmdinfo)
        struct scsi_cmnd *cmnd = container_of(scp, struct scsi_cmnd, SCp);
        struct uas_dev_info *devinfo = cmnd->device->hostdata;
 
-       WARN_ON_ONCE(!spin_is_locked(&devinfo->lock));
+       lockdep_assert_held(&devinfo->lock);
        cmdinfo->state |= IS_IN_WORK_LIST;
        schedule_work(&devinfo->work);
 }
 
-static void uas_zap_dead(struct uas_dev_info *devinfo)
+static void uas_zap_pending(struct uas_dev_info *devinfo, int result)
 {
        struct uas_cmd_info *cmdinfo;
-       struct uas_cmd_info *temp;
+       struct scsi_cmnd *cmnd;
        unsigned long flags;
+       int i, err;
 
        spin_lock_irqsave(&devinfo->lock, flags);
-       list_for_each_entry_safe(cmdinfo, temp, &devinfo->dead_list, list) {
-               struct scsi_pointer *scp = (void *)cmdinfo;
-               struct scsi_cmnd *cmnd = container_of(scp, struct scsi_cmnd,
-                                                     SCp);
+       for (i = 0; i < devinfo->qdepth; i++) {
+               if (!devinfo->cmnd[i])
+                       continue;
+
+               cmnd = devinfo->cmnd[i];
+               cmdinfo = (void *)&cmnd->SCp;
                uas_log_cmd_state(cmnd, __func__);
-               WARN_ON_ONCE(!(cmdinfo->state & COMMAND_ABORTED));
-               /* all urbs are killed, clear inflight bits */
-               cmdinfo->state &= ~(COMMAND_INFLIGHT |
-                                   DATA_IN_URB_INFLIGHT |
-                                   DATA_OUT_URB_INFLIGHT);
-               uas_try_complete(cmnd, __func__);
+               /* Sense urbs were killed, clear COMMAND_INFLIGHT manually */
+               cmdinfo->state &= ~COMMAND_INFLIGHT;
+               cmnd->result = result << 16;
+               err = uas_try_complete(cmnd, __func__);
+               WARN_ON(err != 0);
        }
-       devinfo->running_task = 0;
        spin_unlock_irqrestore(&devinfo->lock, flags);
 }
 
@@ -255,13 +211,29 @@ static void uas_sense_old(struct urb *urb, struct scsi_cmnd *cmnd)
        cmnd->result = sense_iu->status;
 }
 
+/*
+ * scsi-tags go from 0 - (nr_tags - 1), uas tags need to match stream-ids,
+ * which go from 1 - nr_streams. And we use 1 for untagged commands.
+ */
+static int uas_get_tag(struct scsi_cmnd *cmnd)
+{
+       int tag;
+
+       if (blk_rq_tagged(cmnd->request))
+               tag = cmnd->request->tag + 2;
+       else
+               tag = 1;
+
+       return tag;
+}
+
 static void uas_log_cmd_state(struct scsi_cmnd *cmnd, const char *caller)
 {
        struct uas_cmd_info *ci = (void *)&cmnd->SCp;
 
-       scmd_printk(KERN_INFO, cmnd, "%s %p tag %d, inflight:"
-                   "%s%s%s%s%s%s%s%s%s%s%s%s%s%s\n",
-                   caller, cmnd, cmnd->request->tag,
+       scmd_printk(KERN_INFO, cmnd,
+                   "%s %p tag %d, inflight:%s%s%s%s%s%s%s%s%s%s%s%s%s\n",
+                   caller, cmnd, uas_get_tag(cmnd),
                    (ci->state & SUBMIT_STATUS_URB)     ? " s-st"  : "",
                    (ci->state & ALLOC_DATA_IN_URB)     ? " a-in"  : "",
                    (ci->state & SUBMIT_DATA_IN_URB)    ? " s-in"  : "",
@@ -274,7 +246,6 @@ static void uas_log_cmd_state(struct scsi_cmnd *cmnd, const char *caller)
                    (ci->state & DATA_OUT_URB_INFLIGHT) ? " OUT"   : "",
                    (ci->state & COMMAND_COMPLETED)     ? " done"  : "",
                    (ci->state & COMMAND_ABORTED)       ? " abort" : "",
-                   (ci->state & UNLINK_DATA_URBS)      ? " unlink": "",
                    (ci->state & IS_IN_WORK_LIST)       ? " work"  : "");
 }
 
@@ -283,19 +254,16 @@ static int uas_try_complete(struct scsi_cmnd *cmnd, const char *caller)
        struct uas_cmd_info *cmdinfo = (void *)&cmnd->SCp;
        struct uas_dev_info *devinfo = (void *)cmnd->device->hostdata;
 
-       WARN_ON_ONCE(!spin_is_locked(&devinfo->lock));
+       lockdep_assert_held(&devinfo->lock);
        if (cmdinfo->state & (COMMAND_INFLIGHT |
                              DATA_IN_URB_INFLIGHT |
-                             DATA_OUT_URB_INFLIGHT |
-                             UNLINK_DATA_URBS))
+                             DATA_OUT_URB_INFLIGHT))
                return -EBUSY;
        WARN_ON_ONCE(cmdinfo->state & COMMAND_COMPLETED);
        cmdinfo->state |= COMMAND_COMPLETED;
-       usb_free_urb(cmdinfo->data_in_urb);
-       usb_free_urb(cmdinfo->data_out_urb);
        if (cmdinfo->state & COMMAND_ABORTED)
                scmd_printk(KERN_INFO, cmnd, "abort completed\n");
-       list_del(&cmdinfo->list);
+       devinfo->cmnd[uas_get_tag(cmnd) - 1] = NULL;
        cmnd->scsi_done(cmnd);
        return 0;
 }
@@ -318,10 +286,17 @@ static void uas_stat_cmplt(struct urb *urb)
        struct iu *iu = urb->transfer_buffer;
        struct Scsi_Host *shost = urb->context;
        struct uas_dev_info *devinfo = (struct uas_dev_info *)shost->hostdata;
+       struct urb *data_in_urb = NULL;
+       struct urb *data_out_urb = NULL;
        struct scsi_cmnd *cmnd;
        struct uas_cmd_info *cmdinfo;
        unsigned long flags;
-       u16 tag;
+       unsigned int idx;
+
+       spin_lock_irqsave(&devinfo->lock, flags);
+
+       if (devinfo->resetting)
+               goto out;
 
        if (urb->status) {
                if (urb->status == -ENOENT) {
@@ -331,41 +306,26 @@ static void uas_stat_cmplt(struct urb *urb)
                        dev_err(&urb->dev->dev, "stat urb: status %d\n",
                                urb->status);
                }
-               usb_free_urb(urb);
-               return;
+               goto out;
        }
 
-       if (devinfo->resetting) {
-               usb_free_urb(urb);
-               return;
+       idx = be16_to_cpup(&iu->tag) - 1;
+       if (idx >= MAX_CMNDS || !devinfo->cmnd[idx]) {
+               dev_err(&urb->dev->dev,
+                       "stat urb: no pending cmd for tag %d\n", idx + 1);
+               goto out;
        }
 
-       spin_lock_irqsave(&devinfo->lock, flags);
-       tag = be16_to_cpup(&iu->tag) - 1;
-       if (tag == 0)
-               cmnd = devinfo->cmnd;
-       else
-               cmnd = scsi_host_find_tag(shost, tag - 1);
-
-       if (!cmnd) {
-               if (iu->iu_id == IU_ID_RESPONSE) {
-                       if (!devinfo->running_task)
-                               dev_warn(&urb->dev->dev,
-                                   "stat urb: recv unexpected response iu\n");
-                       /* store results for uas_eh_task_mgmt() */
-                       memcpy(&devinfo->response, iu, sizeof(devinfo->response));
-               }
-               usb_free_urb(urb);
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               return;
+       cmnd = devinfo->cmnd[idx];
+       cmdinfo = (void *)&cmnd->SCp;
+
+       if (!(cmdinfo->state & COMMAND_INFLIGHT)) {
+               scmd_printk(KERN_ERR, cmnd, "unexpected status cmplt\n");
+               goto out;
        }
 
-       cmdinfo = (void *)&cmnd->SCp;
        switch (iu->iu_id) {
        case IU_ID_STATUS:
-               if (devinfo->cmnd == cmnd)
-                       devinfo->cmnd = NULL;
-
                if (urb->actual_length < 16)
                        devinfo->uas_sense_old = 1;
                if (devinfo->uas_sense_old)
@@ -374,7 +334,8 @@ static void uas_stat_cmplt(struct urb *urb)
                        uas_sense(urb, cmnd);
                if (cmnd->result != 0) {
                        /* cancel data transfers on error */
-                       uas_unlink_data_urbs(devinfo, cmdinfo, &flags);
+                       data_in_urb = usb_get_urb(cmdinfo->data_in_urb);
+                       data_out_urb = usb_get_urb(cmdinfo->data_out_urb);
                }
                cmdinfo->state &= ~COMMAND_INFLIGHT;
                uas_try_complete(cmnd, __func__);
@@ -399,8 +360,19 @@ static void uas_stat_cmplt(struct urb *urb)
                scmd_printk(KERN_ERR, cmnd,
                        "Bogus IU (%d) received on status pipe\n", iu->iu_id);
        }
+out:
        usb_free_urb(urb);
        spin_unlock_irqrestore(&devinfo->lock, flags);
+
+       /* Unlinking of data urbs must be done without holding the lock */
+       if (data_in_urb) {
+               usb_unlink_urb(data_in_urb);
+               usb_put_urb(data_in_urb);
+       }
+       if (data_out_urb) {
+               usb_unlink_urb(data_out_urb);
+               usb_put_urb(data_out_urb);
+       }
 }
 
 static void uas_data_cmplt(struct urb *urb)
@@ -412,16 +384,31 @@ static void uas_data_cmplt(struct urb *urb)
        unsigned long flags;
 
        spin_lock_irqsave(&devinfo->lock, flags);
+
        if (cmdinfo->data_in_urb == urb) {
                sdb = scsi_in(cmnd);
                cmdinfo->state &= ~DATA_IN_URB_INFLIGHT;
+               cmdinfo->data_in_urb = NULL;
        } else if (cmdinfo->data_out_urb == urb) {
                sdb = scsi_out(cmnd);
                cmdinfo->state &= ~DATA_OUT_URB_INFLIGHT;
+               cmdinfo->data_out_urb = NULL;
        }
        if (sdb == NULL) {
                WARN_ON_ONCE(1);
-       } else if (urb->status) {
+               goto out;
+       }
+
+       if (devinfo->resetting)
+               goto out;
+
+       /* Data urbs should not complete before the cmd urb is submitted */
+       if (cmdinfo->state & SUBMIT_CMD_URB) {
+               scmd_printk(KERN_ERR, cmnd, "unexpected data cmplt\n");
+               goto out;
+       }
+
+       if (urb->status) {
                if (urb->status != -ECONNRESET) {
                        uas_log_cmd_state(cmnd, __func__);
                        scmd_printk(KERN_ERR, cmnd,
@@ -434,17 +421,16 @@ static void uas_data_cmplt(struct urb *urb)
                sdb->resid = sdb->length - urb->actual_length;
        }
        uas_try_complete(cmnd, __func__);
+out:
+       usb_free_urb(urb);
        spin_unlock_irqrestore(&devinfo->lock, flags);
 }
 
 static void uas_cmd_cmplt(struct urb *urb)
 {
-       struct scsi_cmnd *cmnd = urb->context;
+       if (urb->status)
+               dev_err(&urb->dev->dev, "cmd cmplt err %d\n", urb->status);
 
-       if (urb->status) {
-               uas_log_cmd_state(cmnd, __func__);
-               scmd_printk(KERN_ERR, cmnd, "cmd cmplt err %d\n", urb->status);
-       }
        usb_free_urb(urb);
 }
 
@@ -515,17 +501,14 @@ static struct urb *uas_alloc_cmd_urb(struct uas_dev_info *devinfo, gfp_t gfp,
                goto free;
 
        iu->iu_id = IU_ID_COMMAND;
-       if (blk_rq_tagged(cmnd->request))
-               iu->tag = cpu_to_be16(cmnd->request->tag + 2);
-       else
-               iu->tag = cpu_to_be16(1);
+       iu->tag = cpu_to_be16(uas_get_tag(cmnd));
        iu->prio_attr = UAS_SIMPLE_TAG;
        iu->len = len;
        int_to_scsilun(sdev->lun, &iu->lun);
        memcpy(iu->cdb, cmnd->cmnd, cmnd->cmd_len);
 
        usb_fill_bulk_urb(urb, udev, devinfo->cmd_pipe, iu, sizeof(*iu) + len,
-                                                       uas_cmd_cmplt, cmnd);
+                                                       uas_cmd_cmplt, NULL);
        urb->transfer_flags |= URB_FREE_BUFFER;
  out:
        return urb;
@@ -534,56 +517,6 @@ static struct urb *uas_alloc_cmd_urb(struct uas_dev_info *devinfo, gfp_t gfp,
        return NULL;
 }
 
-static int uas_submit_task_urb(struct scsi_cmnd *cmnd, gfp_t gfp,
-                              u8 function, u16 stream_id)
-{
-       struct uas_dev_info *devinfo = (void *)cmnd->device->hostdata;
-       struct usb_device *udev = devinfo->udev;
-       struct urb *urb = usb_alloc_urb(0, gfp);
-       struct task_mgmt_iu *iu;
-       int err = -ENOMEM;
-
-       if (!urb)
-               goto err;
-
-       iu = kzalloc(sizeof(*iu), gfp);
-       if (!iu)
-               goto err;
-
-       iu->iu_id = IU_ID_TASK_MGMT;
-       iu->tag = cpu_to_be16(stream_id);
-       int_to_scsilun(cmnd->device->lun, &iu->lun);
-
-       iu->function = function;
-       switch (function) {
-       case TMF_ABORT_TASK:
-               if (blk_rq_tagged(cmnd->request))
-                       iu->task_tag = cpu_to_be16(cmnd->request->tag + 2);
-               else
-                       iu->task_tag = cpu_to_be16(1);
-               break;
-       }
-
-       usb_fill_bulk_urb(urb, udev, devinfo->cmd_pipe, iu, sizeof(*iu),
-                         uas_cmd_cmplt, cmnd);
-       urb->transfer_flags |= URB_FREE_BUFFER;
-
-       usb_anchor_urb(urb, &devinfo->cmd_urbs);
-       err = usb_submit_urb(urb, gfp);
-       if (err) {
-               usb_unanchor_urb(urb);
-               uas_log_cmd_state(cmnd, __func__);
-               scmd_printk(KERN_ERR, cmnd, "task submission err %d\n", err);
-               goto err;
-       }
-
-       return 0;
-
-err:
-       usb_free_urb(urb);
-       return err;
-}
-
 /*
  * Why should I request the Status IU before sending the Command IU?  Spec
  * says to, but also says the device may receive them in any order.  Seems
@@ -622,7 +555,7 @@ static int uas_submit_urbs(struct scsi_cmnd *cmnd,
        struct urb *urb;
        int err;
 
-       WARN_ON_ONCE(!spin_is_locked(&devinfo->lock));
+       lockdep_assert_held(&devinfo->lock);
        if (cmdinfo->state & SUBMIT_STATUS_URB) {
                urb = uas_submit_sense_urb(cmnd, gfp, cmdinfo->stream);
                if (!urb)
@@ -710,10 +643,20 @@ static int uas_queuecommand_lck(struct scsi_cmnd *cmnd,
        struct uas_dev_info *devinfo = sdev->hostdata;
        struct uas_cmd_info *cmdinfo = (void *)&cmnd->SCp;
        unsigned long flags;
+       unsigned int stream;
        int err;
 
        BUILD_BUG_ON(sizeof(struct uas_cmd_info) > sizeof(struct scsi_pointer));
 
+       if ((devinfo->flags & US_FL_NO_ATA_1X) &&
+                       (cmnd->cmnd[0] == ATA_12 || cmnd->cmnd[0] == ATA_16)) {
+               memcpy(cmnd->sense_buffer, usb_stor_sense_invalidCDB,
+                      sizeof(usb_stor_sense_invalidCDB));
+               cmnd->result = SAM_STAT_CHECK_CONDITION;
+               cmnd->scsi_done(cmnd);
+               return 0;
+       }
+
        spin_lock_irqsave(&devinfo->lock, flags);
 
        if (devinfo->resetting) {
@@ -723,24 +666,17 @@ static int uas_queuecommand_lck(struct scsi_cmnd *cmnd,
                return 0;
        }
 
-       if (devinfo->cmnd) {
+       stream = uas_get_tag(cmnd);
+       if (devinfo->cmnd[stream - 1]) {
                spin_unlock_irqrestore(&devinfo->lock, flags);
                return SCSI_MLQUEUE_DEVICE_BUSY;
        }
 
-       memset(cmdinfo, 0, sizeof(*cmdinfo));
-
-       if (blk_rq_tagged(cmnd->request)) {
-               cmdinfo->stream = cmnd->request->tag + 2;
-       } else {
-               devinfo->cmnd = cmnd;
-               cmdinfo->stream = 1;
-       }
-
        cmnd->scsi_done = done;
 
-       cmdinfo->state = SUBMIT_STATUS_URB |
-                       ALLOC_CMD_URB | SUBMIT_CMD_URB;
+       memset(cmdinfo, 0, sizeof(*cmdinfo));
+       cmdinfo->stream = stream;
+       cmdinfo->state = SUBMIT_STATUS_URB | ALLOC_CMD_URB | SUBMIT_CMD_URB;
 
        switch (cmnd->sc_data_direction) {
        case DMA_FROM_DEVICE:
@@ -769,130 +705,19 @@ static int uas_queuecommand_lck(struct scsi_cmnd *cmnd,
                uas_add_work(cmdinfo);
        }
 
-       list_add_tail(&cmdinfo->list, &devinfo->inflight_list);
+       devinfo->cmnd[stream - 1] = cmnd;
        spin_unlock_irqrestore(&devinfo->lock, flags);
        return 0;
 }
 
 static DEF_SCSI_QCMD(uas_queuecommand)
 
-static int uas_eh_task_mgmt(struct scsi_cmnd *cmnd,
-                           const char *fname, u8 function)
-{
-       struct Scsi_Host *shost = cmnd->device->host;
-       struct uas_dev_info *devinfo = (struct uas_dev_info *)shost->hostdata;
-       u16 tag = devinfo->qdepth;
-       unsigned long flags;
-       struct urb *sense_urb;
-       int result = SUCCESS;
-
-       spin_lock_irqsave(&devinfo->lock, flags);
-
-       if (devinfo->resetting) {
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               return FAILED;
-       }
-
-       if (devinfo->running_task) {
-               shost_printk(KERN_INFO, shost,
-                            "%s: %s: error already running a task\n",
-                            __func__, fname);
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               return FAILED;
-       }
-
-       devinfo->running_task = 1;
-       memset(&devinfo->response, 0, sizeof(devinfo->response));
-       sense_urb = uas_submit_sense_urb(cmnd, GFP_ATOMIC,
-                                        devinfo->use_streams ? tag : 0);
-       if (!sense_urb) {
-               shost_printk(KERN_INFO, shost,
-                            "%s: %s: submit sense urb failed\n",
-                            __func__, fname);
-               devinfo->running_task = 0;
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               return FAILED;
-       }
-       if (uas_submit_task_urb(cmnd, GFP_ATOMIC, function, tag)) {
-               shost_printk(KERN_INFO, shost,
-                            "%s: %s: submit task mgmt urb failed\n",
-                            __func__, fname);
-               devinfo->running_task = 0;
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               usb_kill_urb(sense_urb);
-               return FAILED;
-       }
-       spin_unlock_irqrestore(&devinfo->lock, flags);
-
-       if (usb_wait_anchor_empty_timeout(&devinfo->sense_urbs, 3000) == 0) {
-               /*
-                * Note we deliberately do not clear running_task here. If we
-                * allow new tasks to be submitted, there is no way to figure
-                * out if a received response_iu is for the failed task or for
-                * the new one. A bus-reset will eventually clear running_task.
-                */
-               shost_printk(KERN_INFO, shost,
-                            "%s: %s timed out\n", __func__, fname);
-               return FAILED;
-       }
-
-       spin_lock_irqsave(&devinfo->lock, flags);
-       devinfo->running_task = 0;
-       if (be16_to_cpu(devinfo->response.tag) != tag) {
-               shost_printk(KERN_INFO, shost,
-                            "%s: %s failed (wrong tag %d/%d)\n", __func__,
-                            fname, be16_to_cpu(devinfo->response.tag), tag);
-               result = FAILED;
-       } else if (devinfo->response.response_code != RC_TMF_COMPLETE) {
-               shost_printk(KERN_INFO, shost,
-                            "%s: %s failed (rc 0x%x)\n", __func__,
-                            fname, devinfo->response.response_code);
-               result = FAILED;
-       }
-       spin_unlock_irqrestore(&devinfo->lock, flags);
-
-       return result;
-}
-
-static int uas_eh_abort_handler(struct scsi_cmnd *cmnd)
-{
-       struct uas_cmd_info *cmdinfo = (void *)&cmnd->SCp;
-       struct uas_dev_info *devinfo = (void *)cmnd->device->hostdata;
-       unsigned long flags;
-       int ret;
-
-       spin_lock_irqsave(&devinfo->lock, flags);
-
-       if (devinfo->resetting) {
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               return FAILED;
-       }
-
-       uas_mark_cmd_dead(devinfo, cmdinfo, DID_ABORT, __func__);
-       if (cmdinfo->state & COMMAND_INFLIGHT) {
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               ret = uas_eh_task_mgmt(cmnd, "ABORT TASK", TMF_ABORT_TASK);
-       } else {
-               uas_unlink_data_urbs(devinfo, cmdinfo, &flags);
-               uas_try_complete(cmnd, __func__);
-               spin_unlock_irqrestore(&devinfo->lock, flags);
-               ret = SUCCESS;
-       }
-       return ret;
-}
-
-static int uas_eh_device_reset_handler(struct scsi_cmnd *cmnd)
-{
-       sdev_printk(KERN_INFO, cmnd->device, "%s\n", __func__);
-       return uas_eh_task_mgmt(cmnd, "LOGICAL UNIT RESET",
-                               TMF_LOGICAL_UNIT_RESET);
-}
-
 static int uas_eh_bus_reset_handler(struct scsi_cmnd *cmnd)
 {
        struct scsi_device *sdev = cmnd->device;
        struct uas_dev_info *devinfo = sdev->hostdata;
        struct usb_device *udev = devinfo->udev;
+       unsigned long flags;
        int err;
 
        err = usb_lock_device_for_reset(udev, devinfo->intf);
@@ -903,14 +728,21 @@ static int uas_eh_bus_reset_handler(struct scsi_cmnd *cmnd)
        }
 
        shost_printk(KERN_INFO, sdev->host, "%s start\n", __func__);
+
+       spin_lock_irqsave(&devinfo->lock, flags);
        devinfo->resetting = 1;
-       uas_abort_inflight(devinfo, DID_RESET, __func__);
+       spin_unlock_irqrestore(&devinfo->lock, flags);
+
        usb_kill_anchored_urbs(&devinfo->cmd_urbs);
        usb_kill_anchored_urbs(&devinfo->sense_urbs);
        usb_kill_anchored_urbs(&devinfo->data_urbs);
-       uas_zap_dead(devinfo);
+       uas_zap_pending(devinfo, DID_RESET);
+
        err = usb_reset_device(udev);
+
+       spin_lock_irqsave(&devinfo->lock, flags);
        devinfo->resetting = 0;
+       spin_unlock_irqrestore(&devinfo->lock, flags);
 
        usb_unlock_device(udev);
 
@@ -950,6 +782,10 @@ static int uas_slave_alloc(struct scsi_device *sdev)
 static int uas_slave_configure(struct scsi_device *sdev)
 {
        struct uas_dev_info *devinfo = sdev->hostdata;
+
+       if (devinfo->flags & US_FL_NO_REPORT_OPCODES)
+               sdev->no_report_opcodes = 1;
+
        scsi_set_tag_type(sdev, MSG_ORDERED_TAG);
        scsi_activate_tcq(sdev, devinfo->qdepth - 2);
        return 0;
@@ -961,8 +797,6 @@ static struct scsi_host_template uas_host_template = {
        .queuecommand = uas_queuecommand,
        .slave_alloc = uas_slave_alloc,
        .slave_configure = uas_slave_configure,
-       .eh_abort_handler = uas_eh_abort_handler,
-       .eh_device_reset_handler = uas_eh_device_reset_handler,
        .eh_bus_reset_handler = uas_eh_bus_reset_handler,
        .can_queue = 65536,     /* Is there a limit on the _host_ ? */
        .this_id = -1,
@@ -1010,7 +844,6 @@ static int uas_configure_endpoints(struct uas_dev_info *devinfo)
        int r;
 
        devinfo->uas_sense_old = 0;
-       devinfo->cmnd = NULL;
 
        r = uas_find_endpoints(devinfo->intf->cur_altsetting, eps);
        if (r)
@@ -1030,7 +863,7 @@ static int uas_configure_endpoints(struct uas_dev_info *devinfo)
                devinfo->use_streams = 0;
        } else {
                devinfo->qdepth = usb_alloc_streams(devinfo->intf, eps + 1,
-                                                   3, 256, GFP_NOIO);
+                                                   3, MAX_CMNDS, GFP_NOIO);
                if (devinfo->qdepth < 0)
                        return devinfo->qdepth;
                devinfo->use_streams = 1;
@@ -1078,15 +911,14 @@ static int uas_probe(struct usb_interface *intf, const struct usb_device_id *id)
        devinfo->intf = intf;
        devinfo->udev = udev;
        devinfo->resetting = 0;
-       devinfo->running_task = 0;
        devinfo->shutdown = 0;
+       devinfo->flags = id->driver_info;
+       usb_stor_adjust_quirks(udev, &devinfo->flags);
        init_usb_anchor(&devinfo->cmd_urbs);
        init_usb_anchor(&devinfo->sense_urbs);
        init_usb_anchor(&devinfo->data_urbs);
        spin_lock_init(&devinfo->lock);
        INIT_WORK(&devinfo->work, uas_do_work);
-       INIT_LIST_HEAD(&devinfo->inflight_list);
-       INIT_LIST_HEAD(&devinfo->dead_list);
 
        result = uas_configure_endpoints(devinfo);
        if (result)
@@ -1207,14 +1039,18 @@ static void uas_disconnect(struct usb_interface *intf)
 {
        struct Scsi_Host *shost = usb_get_intfdata(intf);
        struct uas_dev_info *devinfo = (struct uas_dev_info *)shost->hostdata;
+       unsigned long flags;
 
+       spin_lock_irqsave(&devinfo->lock, flags);
        devinfo->resetting = 1;
+       spin_unlock_irqrestore(&devinfo->lock, flags);
+
        cancel_work_sync(&devinfo->work);
-       uas_abort_inflight(devinfo, DID_NO_CONNECT, __func__);
        usb_kill_anchored_urbs(&devinfo->cmd_urbs);
        usb_kill_anchored_urbs(&devinfo->sense_urbs);
        usb_kill_anchored_urbs(&devinfo->data_urbs);
-       uas_zap_dead(devinfo);
+       uas_zap_pending(devinfo, DID_NO_CONNECT);
+
        scsi_remove_host(shost);
        uas_free_streams(devinfo);
        scsi_host_put(shost);