1 /*
2 * Copyright (c) 2010 Cisco Systems, Inc.
3 *
4 * This program is free software; you can redistribute it and/or modify it
5 * under the terms and conditions of the GNU General Public License,
6 * version 2, as published by the Free Software Foundation.
7 *
8 * This program is distributed in the hope it will be useful, but WITHOUT
9 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
10 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
11 * more details.
12 *
13 * You should have received a copy of the GNU General Public License along with
14 * this program; if not, write to the Free Software Foundation, Inc.,
15 * 51 Franklin St - Fifth Floor, Boston, MA 02110-1301 USA.
16 */
17
18 /* XXX TBD some includes may be extraneous */
19
20 #include <linux/module.h>
21 #include <linux/moduleparam.h>
22 #include <generated/utsrelease.h>
23 #include <linux/utsname.h>
24 #include <linux/init.h>
25 #include <linux/slab.h>
26 #include <linux/kthread.h>
27 #include <linux/types.h>
28 #include <linux/string.h>
29 #include <linux/configfs.h>
30 #include <linux/ctype.h>
31 #include <linux/hash.h>
32 #include <asm/unaligned.h>
33 #include <scsi/scsi.h>
34 #include <scsi/scsi_host.h>
35 #include <scsi/scsi_device.h>
36 #include <scsi/scsi_cmnd.h>
37 #include <scsi/scsi_tcq.h>
38 #include <scsi/libfc.h>
39 #include <scsi/fc_encode.h>
40
41 #include <target/target_core_base.h>
42 #include <target/target_core_fabric.h>
43 #include <target/target_core_configfs.h>
44 #include <target/configfs_macros.h>
45
46 #include "tcm_fc.h"
47
48 /*
49 * Dump cmd state for debugging.
50 */
ft_dump_cmd(struct ft_cmd * cmd,const char * caller)51 void ft_dump_cmd(struct ft_cmd *cmd, const char *caller)
52 {
53 struct fc_exch *ep;
54 struct fc_seq *sp;
55 struct se_cmd *se_cmd;
56 struct scatterlist *sg;
57 int count;
58
59 se_cmd = &cmd->se_cmd;
60 pr_debug("%s: cmd %p sess %p seq %p se_cmd %p\n",
61 caller, cmd, cmd->sess, cmd->seq, se_cmd);
62 pr_debug("%s: cmd %p cdb %p\n",
63 caller, cmd, cmd->cdb);
64 pr_debug("%s: cmd %p lun %d\n", caller, cmd, cmd->lun);
65
66 pr_debug("%s: cmd %p data_nents %u len %u se_cmd_flags <0x%x>\n",
67 caller, cmd, se_cmd->t_data_nents,
68 se_cmd->data_length, se_cmd->se_cmd_flags);
69
70 for_each_sg(se_cmd->t_data_sg, sg, se_cmd->t_data_nents, count)
71 pr_debug("%s: cmd %p sg %p page %p "
72 "len 0x%x off 0x%x\n",
73 caller, cmd, sg,
74 sg_page(sg), sg->length, sg->offset);
75
76 sp = cmd->seq;
77 if (sp) {
78 ep = fc_seq_exch(sp);
79 pr_debug("%s: cmd %p sid %x did %x "
80 "ox_id %x rx_id %x seq_id %x e_stat %x\n",
81 caller, cmd, ep->sid, ep->did, ep->oxid, ep->rxid,
82 sp->id, ep->esb_stat);
83 }
84 print_hex_dump(KERN_INFO, "ft_dump_cmd ", DUMP_PREFIX_NONE,
85 16, 4, cmd->cdb, MAX_COMMAND_SIZE, 0);
86 }
87
ft_free_cmd(struct ft_cmd * cmd)88 static void ft_free_cmd(struct ft_cmd *cmd)
89 {
90 struct fc_frame *fp;
91 struct fc_lport *lport;
92
93 if (!cmd)
94 return;
95 fp = cmd->req_frame;
96 lport = fr_dev(fp);
97 if (fr_seq(fp))
98 lport->tt.seq_release(fr_seq(fp));
99 fc_frame_free(fp);
100 ft_sess_put(cmd->sess); /* undo get from lookup at recv */
101 kfree(cmd);
102 }
103
ft_release_cmd(struct se_cmd * se_cmd)104 void ft_release_cmd(struct se_cmd *se_cmd)
105 {
106 struct ft_cmd *cmd = container_of(se_cmd, struct ft_cmd, se_cmd);
107
108 ft_free_cmd(cmd);
109 }
110
ft_check_stop_free(struct se_cmd * se_cmd)111 int ft_check_stop_free(struct se_cmd *se_cmd)
112 {
113 transport_generic_free_cmd(se_cmd, 0);
114 return 1;
115 }
116
117 /*
118 * Send response.
119 */
ft_queue_status(struct se_cmd * se_cmd)120 int ft_queue_status(struct se_cmd *se_cmd)
121 {
122 struct ft_cmd *cmd = container_of(se_cmd, struct ft_cmd, se_cmd);
123 struct fc_frame *fp;
124 struct fcp_resp_with_ext *fcp;
125 struct fc_lport *lport;
126 struct fc_exch *ep;
127 size_t len;
128
129 ft_dump_cmd(cmd, __func__);
130 ep = fc_seq_exch(cmd->seq);
131 lport = ep->lp;
132 len = sizeof(*fcp) + se_cmd->scsi_sense_length;
133 fp = fc_frame_alloc(lport, len);
134 if (!fp) {
135 /* XXX shouldn't just drop it - requeue and retry? */
136 return 0;
137 }
138 fcp = fc_frame_payload_get(fp, len);
139 memset(fcp, 0, len);
140 fcp->resp.fr_status = se_cmd->scsi_status;
141
142 len = se_cmd->scsi_sense_length;
143 if (len) {
144 fcp->resp.fr_flags |= FCP_SNS_LEN_VAL;
145 fcp->ext.fr_sns_len = htonl(len);
146 memcpy((fcp + 1), se_cmd->sense_buffer, len);
147 }
148
149 /*
150 * Test underflow and overflow with one mask. Usually both are off.
151 * Bidirectional commands are not handled yet.
152 */
153 if (se_cmd->se_cmd_flags & (SCF_OVERFLOW_BIT | SCF_UNDERFLOW_BIT)) {
154 if (se_cmd->se_cmd_flags & SCF_OVERFLOW_BIT)
155 fcp->resp.fr_flags |= FCP_RESID_OVER;
156 else
157 fcp->resp.fr_flags |= FCP_RESID_UNDER;
158 fcp->ext.fr_resid = cpu_to_be32(se_cmd->residual_count);
159 }
160
161 /*
162 * Send response.
163 */
164 cmd->seq = lport->tt.seq_start_next(cmd->seq);
165 fc_fill_fc_hdr(fp, FC_RCTL_DD_CMD_STATUS, ep->did, ep->sid, FC_TYPE_FCP,
166 FC_FC_EX_CTX | FC_FC_LAST_SEQ | FC_FC_END_SEQ, 0);
167
168 lport->tt.seq_send(lport, cmd->seq, fp);
169 lport->tt.exch_done(cmd->seq);
170 return 0;
171 }
172
ft_write_pending_status(struct se_cmd * se_cmd)173 int ft_write_pending_status(struct se_cmd *se_cmd)
174 {
175 struct ft_cmd *cmd = container_of(se_cmd, struct ft_cmd, se_cmd);
176
177 return cmd->write_data_len != se_cmd->data_length;
178 }
179
180 /*
181 * Send TX_RDY (transfer ready).
182 */
ft_write_pending(struct se_cmd * se_cmd)183 int ft_write_pending(struct se_cmd *se_cmd)
184 {
185 struct ft_cmd *cmd = container_of(se_cmd, struct ft_cmd, se_cmd);
186 struct fc_frame *fp;
187 struct fcp_txrdy *txrdy;
188 struct fc_lport *lport;
189 struct fc_exch *ep;
190 struct fc_frame_header *fh;
191 u32 f_ctl;
192
193 ft_dump_cmd(cmd, __func__);
194
195 ep = fc_seq_exch(cmd->seq);
196 lport = ep->lp;
197 fp = fc_frame_alloc(lport, sizeof(*txrdy));
198 if (!fp)
199 return -ENOMEM; /* Signal QUEUE_FULL */
200
201 txrdy = fc_frame_payload_get(fp, sizeof(*txrdy));
202 memset(txrdy, 0, sizeof(*txrdy));
203 txrdy->ft_burst_len = htonl(se_cmd->data_length);
204
205 cmd->seq = lport->tt.seq_start_next(cmd->seq);
206 fc_fill_fc_hdr(fp, FC_RCTL_DD_DATA_DESC, ep->did, ep->sid, FC_TYPE_FCP,
207 FC_FC_EX_CTX | FC_FC_END_SEQ | FC_FC_SEQ_INIT, 0);
208
209 fh = fc_frame_header_get(fp);
210 f_ctl = ntoh24(fh->fh_f_ctl);
211
212 /* Only if it is 'Exchange Responder' */
213 if (f_ctl & FC_FC_EX_CTX) {
214 /* Target is 'exchange responder' and sending XFER_READY
215 * to 'exchange initiator (initiator)'
216 */
217 if ((ep->xid <= lport->lro_xid) &&
218 (fh->fh_r_ctl == FC_RCTL_DD_DATA_DESC)) {
219 if (se_cmd->se_cmd_flags & SCF_SCSI_DATA_SG_IO_CDB) {
220 /*
221 * cmd may have been broken up into multiple
222 * tasks. Link their sgs together so we can
223 * operate on them all at once.
224 */
225 transport_do_task_sg_chain(se_cmd);
226 cmd->sg = se_cmd->t_tasks_sg_chained;
227 cmd->sg_cnt =
228 se_cmd->t_tasks_sg_chained_no;
229 }
230 if (cmd->sg && lport->tt.ddp_target(lport, ep->xid,
231 cmd->sg,
232 cmd->sg_cnt))
233 cmd->was_ddp_setup = 1;
234 }
235 }
236 lport->tt.seq_send(lport, cmd->seq, fp);
237 return 0;
238 }
239
ft_get_task_tag(struct se_cmd * se_cmd)240 u32 ft_get_task_tag(struct se_cmd *se_cmd)
241 {
242 struct ft_cmd *cmd = container_of(se_cmd, struct ft_cmd, se_cmd);
243
244 return fc_seq_exch(cmd->seq)->rxid;
245 }
246
ft_get_cmd_state(struct se_cmd * se_cmd)247 int ft_get_cmd_state(struct se_cmd *se_cmd)
248 {
249 return 0;
250 }
251
ft_is_state_remove(struct se_cmd * se_cmd)252 int ft_is_state_remove(struct se_cmd *se_cmd)
253 {
254 return 0; /* XXX TBD */
255 }
256
257 /*
258 * FC sequence response handler for follow-on sequences (data) and aborts.
259 */
ft_recv_seq(struct fc_seq * sp,struct fc_frame * fp,void * arg)260 static void ft_recv_seq(struct fc_seq *sp, struct fc_frame *fp, void *arg)
261 {
262 struct ft_cmd *cmd = arg;
263 struct fc_frame_header *fh;
264
265 if (IS_ERR(fp)) {
266 /* XXX need to find cmd if queued */
267 cmd->seq = NULL;
268 transport_generic_free_cmd(&cmd->se_cmd, 0);
269 return;
270 }
271
272 fh = fc_frame_header_get(fp);
273
274 switch (fh->fh_r_ctl) {
275 case FC_RCTL_DD_SOL_DATA: /* write data */
276 ft_recv_write_data(cmd, fp);
277 break;
278 case FC_RCTL_DD_UNSOL_CTL: /* command */
279 case FC_RCTL_DD_SOL_CTL: /* transfer ready */
280 case FC_RCTL_DD_DATA_DESC: /* transfer ready */
281 default:
282 pr_debug("%s: unhandled frame r_ctl %x\n",
283 __func__, fh->fh_r_ctl);
284 ft_invl_hw_context(cmd);
285 fc_frame_free(fp);
286 transport_generic_free_cmd(&cmd->se_cmd, 0);
287 break;
288 }
289 }
290
291 /*
292 * Send a FCP response including SCSI status and optional FCP rsp_code.
293 * status is SAM_STAT_GOOD (zero) iff code is valid.
294 * This is used in error cases, such as allocation failures.
295 */
ft_send_resp_status(struct fc_lport * lport,const struct fc_frame * rx_fp,u32 status,enum fcp_resp_rsp_codes code)296 static void ft_send_resp_status(struct fc_lport *lport,
297 const struct fc_frame *rx_fp,
298 u32 status, enum fcp_resp_rsp_codes code)
299 {
300 struct fc_frame *fp;
301 struct fc_seq *sp;
302 const struct fc_frame_header *fh;
303 size_t len;
304 struct fcp_resp_with_ext *fcp;
305 struct fcp_resp_rsp_info *info;
306
307 fh = fc_frame_header_get(rx_fp);
308 pr_debug("FCP error response: did %x oxid %x status %x code %x\n",
309 ntoh24(fh->fh_s_id), ntohs(fh->fh_ox_id), status, code);
310 len = sizeof(*fcp);
311 if (status == SAM_STAT_GOOD)
312 len += sizeof(*info);
313 fp = fc_frame_alloc(lport, len);
314 if (!fp)
315 return;
316 fcp = fc_frame_payload_get(fp, len);
317 memset(fcp, 0, len);
318 fcp->resp.fr_status = status;
319 if (status == SAM_STAT_GOOD) {
320 fcp->ext.fr_rsp_len = htonl(sizeof(*info));
321 fcp->resp.fr_flags |= FCP_RSP_LEN_VAL;
322 info = (struct fcp_resp_rsp_info *)(fcp + 1);
323 info->rsp_code = code;
324 }
325
326 fc_fill_reply_hdr(fp, rx_fp, FC_RCTL_DD_CMD_STATUS, 0);
327 sp = fr_seq(fp);
328 if (sp)
329 lport->tt.seq_send(lport, sp, fp);
330 else
331 lport->tt.frame_send(lport, fp);
332 }
333
334 /*
335 * Send error or task management response.
336 */
ft_send_resp_code(struct ft_cmd * cmd,enum fcp_resp_rsp_codes code)337 static void ft_send_resp_code(struct ft_cmd *cmd,
338 enum fcp_resp_rsp_codes code)
339 {
340 ft_send_resp_status(cmd->sess->tport->lport,
341 cmd->req_frame, SAM_STAT_GOOD, code);
342 }
343
344
345 /*
346 * Send error or task management response.
347 * Always frees the cmd and associated state.
348 */
ft_send_resp_code_and_free(struct ft_cmd * cmd,enum fcp_resp_rsp_codes code)349 static void ft_send_resp_code_and_free(struct ft_cmd *cmd,
350 enum fcp_resp_rsp_codes code)
351 {
352 ft_send_resp_code(cmd, code);
353 ft_free_cmd(cmd);
354 }
355
356 /*
357 * Handle Task Management Request.
358 */
ft_send_tm(struct ft_cmd * cmd)359 static void ft_send_tm(struct ft_cmd *cmd)
360 {
361 struct se_tmr_req *tmr;
362 struct fcp_cmnd *fcp;
363 struct ft_sess *sess;
364 u8 tm_func;
365
366 transport_init_se_cmd(&cmd->se_cmd, &ft_configfs->tf_ops,
367 cmd->sess->se_sess, 0, DMA_NONE, 0,
368 &cmd->ft_sense_buffer[0]);
369 target_get_sess_cmd(cmd->sess->se_sess, &cmd->se_cmd, false);
370
371 fcp = fc_frame_payload_get(cmd->req_frame, sizeof(*fcp));
372
373 switch (fcp->fc_tm_flags) {
374 case FCP_TMF_LUN_RESET:
375 tm_func = TMR_LUN_RESET;
376 break;
377 case FCP_TMF_TGT_RESET:
378 tm_func = TMR_TARGET_WARM_RESET;
379 break;
380 case FCP_TMF_CLR_TASK_SET:
381 tm_func = TMR_CLEAR_TASK_SET;
382 break;
383 case FCP_TMF_ABT_TASK_SET:
384 tm_func = TMR_ABORT_TASK_SET;
385 break;
386 case FCP_TMF_CLR_ACA:
387 tm_func = TMR_CLEAR_ACA;
388 break;
389 default:
390 /*
391 * FCP4r01 indicates having a combination of
392 * tm_flags set is invalid.
393 */
394 pr_debug("invalid FCP tm_flags %x\n", fcp->fc_tm_flags);
395 ft_send_resp_code_and_free(cmd, FCP_CMND_FIELDS_INVALID);
396 return;
397 }
398
399 pr_debug("alloc tm cmd fn %d\n", tm_func);
400 tmr = core_tmr_alloc_req(&cmd->se_cmd, cmd, tm_func, GFP_KERNEL);
401 if (!tmr) {
402 pr_debug("alloc failed\n");
403 ft_send_resp_code_and_free(cmd, FCP_TMF_FAILED);
404 return;
405 }
406 cmd->se_cmd.se_tmr_req = tmr;
407
408 switch (fcp->fc_tm_flags) {
409 case FCP_TMF_LUN_RESET:
410 cmd->lun = scsilun_to_int((struct scsi_lun *)fcp->fc_lun);
411 if (transport_lookup_tmr_lun(&cmd->se_cmd, cmd->lun) < 0) {
412 /*
413 * Make sure to clean up newly allocated TMR request
414 * since "unable to handle TMR request because failed
415 * to get to LUN"
416 */
417 pr_debug("Failed to get LUN for TMR func %d, "
418 "se_cmd %p, unpacked_lun %d\n",
419 tm_func, &cmd->se_cmd, cmd->lun);
420 ft_dump_cmd(cmd, __func__);
421 sess = cmd->sess;
422 transport_send_check_condition_and_sense(&cmd->se_cmd,
423 cmd->se_cmd.scsi_sense_reason, 0);
424 ft_sess_put(sess);
425 return;
426 }
427 break;
428 case FCP_TMF_TGT_RESET:
429 case FCP_TMF_CLR_TASK_SET:
430 case FCP_TMF_ABT_TASK_SET:
431 case FCP_TMF_CLR_ACA:
432 break;
433 default:
434 return;
435 }
436 transport_generic_handle_tmr(&cmd->se_cmd);
437 }
438
439 /*
440 * Send status from completed task management request.
441 */
ft_queue_tm_resp(struct se_cmd * se_cmd)442 int ft_queue_tm_resp(struct se_cmd *se_cmd)
443 {
444 struct ft_cmd *cmd = container_of(se_cmd, struct ft_cmd, se_cmd);
445 struct se_tmr_req *tmr = se_cmd->se_tmr_req;
446 enum fcp_resp_rsp_codes code;
447
448 switch (tmr->response) {
449 case TMR_FUNCTION_COMPLETE:
450 code = FCP_TMF_CMPL;
451 break;
452 case TMR_LUN_DOES_NOT_EXIST:
453 code = FCP_TMF_INVALID_LUN;
454 break;
455 case TMR_FUNCTION_REJECTED:
456 code = FCP_TMF_REJECTED;
457 break;
458 case TMR_TASK_DOES_NOT_EXIST:
459 case TMR_TASK_STILL_ALLEGIANT:
460 case TMR_TASK_FAILOVER_NOT_SUPPORTED:
461 case TMR_TASK_MGMT_FUNCTION_NOT_SUPPORTED:
462 case TMR_FUNCTION_AUTHORIZATION_FAILED:
463 default:
464 code = FCP_TMF_FAILED;
465 break;
466 }
467 pr_debug("tmr fn %d resp %d fcp code %d\n",
468 tmr->function, tmr->response, code);
469 ft_send_resp_code(cmd, code);
470 return 0;
471 }
472
473 static void ft_send_work(struct work_struct *work);
474
475 /*
476 * Handle incoming FCP command.
477 */
ft_recv_cmd(struct ft_sess * sess,struct fc_frame * fp)478 static void ft_recv_cmd(struct ft_sess *sess, struct fc_frame *fp)
479 {
480 struct ft_cmd *cmd;
481 struct fc_lport *lport = sess->tport->lport;
482
483 cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC);
484 if (!cmd)
485 goto busy;
486 cmd->sess = sess;
487 cmd->seq = lport->tt.seq_assign(lport, fp);
488 if (!cmd->seq) {
489 kfree(cmd);
490 goto busy;
491 }
492 cmd->req_frame = fp; /* hold frame during cmd */
493
494 INIT_WORK(&cmd->work, ft_send_work);
495 queue_work(sess->tport->tpg->workqueue, &cmd->work);
496 return;
497
498 busy:
499 pr_debug("cmd or seq allocation failure - sending BUSY\n");
500 ft_send_resp_status(lport, fp, SAM_STAT_BUSY, 0);
501 fc_frame_free(fp);
502 ft_sess_put(sess); /* undo get from lookup */
503 }
504
505
506 /*
507 * Handle incoming FCP frame.
508 * Caller has verified that the frame is type FCP.
509 */
ft_recv_req(struct ft_sess * sess,struct fc_frame * fp)510 void ft_recv_req(struct ft_sess *sess, struct fc_frame *fp)
511 {
512 struct fc_frame_header *fh = fc_frame_header_get(fp);
513
514 switch (fh->fh_r_ctl) {
515 case FC_RCTL_DD_UNSOL_CMD: /* command */
516 ft_recv_cmd(sess, fp);
517 break;
518 case FC_RCTL_DD_SOL_DATA: /* write data */
519 case FC_RCTL_DD_UNSOL_CTL:
520 case FC_RCTL_DD_SOL_CTL:
521 case FC_RCTL_DD_DATA_DESC: /* transfer ready */
522 case FC_RCTL_ELS4_REQ: /* SRR, perhaps */
523 default:
524 pr_debug("%s: unhandled frame r_ctl %x\n",
525 __func__, fh->fh_r_ctl);
526 fc_frame_free(fp);
527 ft_sess_put(sess); /* undo get from lookup */
528 break;
529 }
530 }
531
532 /*
533 * Send new command to target.
534 */
ft_send_work(struct work_struct * work)535 static void ft_send_work(struct work_struct *work)
536 {
537 struct ft_cmd *cmd = container_of(work, struct ft_cmd, work);
538 struct fc_frame_header *fh = fc_frame_header_get(cmd->req_frame);
539 struct fcp_cmnd *fcp;
540 int data_dir = 0;
541 u32 data_len;
542 int task_attr;
543
544 fcp = fc_frame_payload_get(cmd->req_frame, sizeof(*fcp));
545 if (!fcp)
546 goto err;
547
548 if (fcp->fc_flags & FCP_CFL_LEN_MASK)
549 goto err; /* not handling longer CDBs yet */
550
551 if (fcp->fc_tm_flags) {
552 task_attr = FCP_PTA_SIMPLE;
553 data_dir = DMA_NONE;
554 data_len = 0;
555 } else {
556 switch (fcp->fc_flags & (FCP_CFL_RDDATA | FCP_CFL_WRDATA)) {
557 case 0:
558 data_dir = DMA_NONE;
559 break;
560 case FCP_CFL_RDDATA:
561 data_dir = DMA_FROM_DEVICE;
562 break;
563 case FCP_CFL_WRDATA:
564 data_dir = DMA_TO_DEVICE;
565 break;
566 case FCP_CFL_WRDATA | FCP_CFL_RDDATA:
567 goto err; /* TBD not supported by tcm_fc yet */
568 }
569 /*
570 * Locate the SAM Task Attr from fc_pri_ta
571 */
572 switch (fcp->fc_pri_ta & FCP_PTA_MASK) {
573 case FCP_PTA_HEADQ:
574 task_attr = MSG_HEAD_TAG;
575 break;
576 case FCP_PTA_ORDERED:
577 task_attr = MSG_ORDERED_TAG;
578 break;
579 case FCP_PTA_ACA:
580 task_attr = MSG_ACA_TAG;
581 break;
582 case FCP_PTA_SIMPLE: /* Fallthrough */
583 default:
584 task_attr = MSG_SIMPLE_TAG;
585 }
586
587
588 task_attr = fcp->fc_pri_ta & FCP_PTA_MASK;
589 data_len = ntohl(fcp->fc_dl);
590 cmd->cdb = fcp->fc_cdb;
591 }
592 /*
593 * Check for FCP task management flags
594 */
595 if (fcp->fc_tm_flags) {
596 ft_send_tm(cmd);
597 return;
598 }
599 fc_seq_exch(cmd->seq)->lp->tt.seq_set_resp(cmd->seq, ft_recv_seq, cmd);
600 cmd->lun = scsilun_to_int((struct scsi_lun *)fcp->fc_lun);
601 /*
602 * Use a single se_cmd->cmd_kref as we expect to release se_cmd
603 * directly from ft_check_stop_free callback in response path.
604 */
605 target_submit_cmd(&cmd->se_cmd, cmd->sess->se_sess, cmd->cdb,
606 &cmd->ft_sense_buffer[0], cmd->lun, data_len,
607 task_attr, data_dir, 0);
608 pr_debug("r_ctl %x alloc target_submit_cmd\n", fh->fh_r_ctl);
609 return;
610
611 err:
612 ft_send_resp_code_and_free(cmd, FCP_CMND_FIELDS_INVALID);
613 }
614