GNU Linux-libre 4.14.266-gnu1
[releases.git] / drivers / scsi / mpt3sas / mpt3sas_ctl.c
1 /*
2  * Management Module Support for MPT (Message Passing Technology) based
3  * controllers
4  *
5  * This code is based on drivers/scsi/mpt3sas/mpt3sas_ctl.c
6  * Copyright (C) 2012-2014  LSI Corporation
7  * Copyright (C) 2013-2014 Avago Technologies
8  *  (mailto: MPT-FusionLinux.pdl@avagotech.com)
9  *
10  * This program is free software; you can redistribute it and/or
11  * modify it under the terms of the GNU General Public License
12  * as published by the Free Software Foundation; either version 2
13  * of the License, or (at your option) any later version.
14  *
15  * This program is distributed in the hope that it will be useful,
16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  * GNU General Public License for more details.
19  *
20  * NO WARRANTY
21  * THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR
22  * CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT
23  * LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT,
24  * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is
25  * solely responsible for determining the appropriateness of using and
26  * distributing the Program and assumes all risks associated with its
27  * exercise of rights under this Agreement, including but not limited to
28  * the risks and costs of program errors, damage to or loss of data,
29  * programs or equipment, and unavailability or interruption of operations.
30
31  * DISCLAIMER OF LIABILITY
32  * NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY
33  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
34  * DAMAGES (INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND
35  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
36  * TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
37  * USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED
38  * HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES
39
40  * You should have received a copy of the GNU General Public License
41  * along with this program; if not, write to the Free Software
42  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301,
43  * USA.
44  */
45
46 #include <linux/kernel.h>
47 #include <linux/module.h>
48 #include <linux/errno.h>
49 #include <linux/init.h>
50 #include <linux/slab.h>
51 #include <linux/types.h>
52 #include <linux/pci.h>
53 #include <linux/delay.h>
54 #include <linux/compat.h>
55 #include <linux/poll.h>
56
57 #include <linux/io.h>
58 #include <linux/uaccess.h>
59
60 #include "mpt3sas_base.h"
61 #include "mpt3sas_ctl.h"
62
63
64 static struct fasync_struct *async_queue;
65 static DECLARE_WAIT_QUEUE_HEAD(ctl_poll_wait);
66
67
68 /**
69  * enum block_state - blocking state
70  * @NON_BLOCKING: non blocking
71  * @BLOCKING: blocking
72  *
73  * These states are for ioctls that need to wait for a response
74  * from firmware, so they probably require sleep.
75  */
76 enum block_state {
77         NON_BLOCKING,
78         BLOCKING,
79 };
80
81 /**
82  * _ctl_sas_device_find_by_handle - sas device search
83  * @ioc: per adapter object
84  * @handle: sas device handle (assigned by firmware)
85  * Context: Calling function should acquire ioc->sas_device_lock
86  *
87  * This searches for sas_device based on sas_address, then return sas_device
88  * object.
89  */
90 static struct _sas_device *
91 _ctl_sas_device_find_by_handle(struct MPT3SAS_ADAPTER *ioc, u16 handle)
92 {
93         struct _sas_device *sas_device, *r;
94
95         r = NULL;
96         list_for_each_entry(sas_device, &ioc->sas_device_list, list) {
97                 if (sas_device->handle != handle)
98                         continue;
99                 r = sas_device;
100                 goto out;
101         }
102
103  out:
104         return r;
105 }
106
107 /**
108  * _ctl_display_some_debug - debug routine
109  * @ioc: per adapter object
110  * @smid: system request message index
111  * @calling_function_name: string pass from calling function
112  * @mpi_reply: reply message frame
113  * Context: none.
114  *
115  * Function for displaying debug info helpful when debugging issues
116  * in this module.
117  */
118 static void
119 _ctl_display_some_debug(struct MPT3SAS_ADAPTER *ioc, u16 smid,
120         char *calling_function_name, MPI2DefaultReply_t *mpi_reply)
121 {
122         Mpi2ConfigRequest_t *mpi_request;
123         char *desc = NULL;
124
125         if (!(ioc->logging_level & MPT_DEBUG_IOCTL))
126                 return;
127
128         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
129         switch (mpi_request->Function) {
130         case MPI2_FUNCTION_SCSI_IO_REQUEST:
131         {
132                 Mpi2SCSIIORequest_t *scsi_request =
133                     (Mpi2SCSIIORequest_t *)mpi_request;
134
135                 snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
136                     "scsi_io, cmd(0x%02x), cdb_len(%d)",
137                     scsi_request->CDB.CDB32[0],
138                     le16_to_cpu(scsi_request->IoFlags) & 0xF);
139                 desc = ioc->tmp_string;
140                 break;
141         }
142         case MPI2_FUNCTION_SCSI_TASK_MGMT:
143                 desc = "task_mgmt";
144                 break;
145         case MPI2_FUNCTION_IOC_INIT:
146                 desc = "ioc_init";
147                 break;
148         case MPI2_FUNCTION_IOC_FACTS:
149                 desc = "ioc_facts";
150                 break;
151         case MPI2_FUNCTION_CONFIG:
152         {
153                 Mpi2ConfigRequest_t *config_request =
154                     (Mpi2ConfigRequest_t *)mpi_request;
155
156                 snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
157                     "config, type(0x%02x), ext_type(0x%02x), number(%d)",
158                     (config_request->Header.PageType &
159                      MPI2_CONFIG_PAGETYPE_MASK), config_request->ExtPageType,
160                     config_request->Header.PageNumber);
161                 desc = ioc->tmp_string;
162                 break;
163         }
164         case MPI2_FUNCTION_PORT_FACTS:
165                 desc = "port_facts";
166                 break;
167         case MPI2_FUNCTION_PORT_ENABLE:
168                 desc = "port_enable";
169                 break;
170         case MPI2_FUNCTION_EVENT_NOTIFICATION:
171                 desc = "event_notification";
172                 break;
173         case MPI2_FUNCTION_FW_DOWNLOAD:
174                 desc = "fw_download";
175                 break;
176         case MPI2_FUNCTION_FW_UPLOAD:
177                 desc = "fw_upload";
178                 break;
179         case MPI2_FUNCTION_RAID_ACTION:
180                 desc = "raid_action";
181                 break;
182         case MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
183         {
184                 Mpi2SCSIIORequest_t *scsi_request =
185                     (Mpi2SCSIIORequest_t *)mpi_request;
186
187                 snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
188                     "raid_pass, cmd(0x%02x), cdb_len(%d)",
189                     scsi_request->CDB.CDB32[0],
190                     le16_to_cpu(scsi_request->IoFlags) & 0xF);
191                 desc = ioc->tmp_string;
192                 break;
193         }
194         case MPI2_FUNCTION_SAS_IO_UNIT_CONTROL:
195                 desc = "sas_iounit_cntl";
196                 break;
197         case MPI2_FUNCTION_SATA_PASSTHROUGH:
198                 desc = "sata_pass";
199                 break;
200         case MPI2_FUNCTION_DIAG_BUFFER_POST:
201                 desc = "diag_buffer_post";
202                 break;
203         case MPI2_FUNCTION_DIAG_RELEASE:
204                 desc = "diag_release";
205                 break;
206         case MPI2_FUNCTION_SMP_PASSTHROUGH:
207                 desc = "smp_passthrough";
208                 break;
209         }
210
211         if (!desc)
212                 return;
213
214         pr_info(MPT3SAS_FMT "%s: %s, smid(%d)\n",
215             ioc->name, calling_function_name, desc, smid);
216
217         if (!mpi_reply)
218                 return;
219
220         if (mpi_reply->IOCStatus || mpi_reply->IOCLogInfo)
221                 pr_info(MPT3SAS_FMT
222                     "\tiocstatus(0x%04x), loginfo(0x%08x)\n",
223                     ioc->name, le16_to_cpu(mpi_reply->IOCStatus),
224                     le32_to_cpu(mpi_reply->IOCLogInfo));
225
226         if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
227             mpi_request->Function ==
228             MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
229                 Mpi2SCSIIOReply_t *scsi_reply =
230                     (Mpi2SCSIIOReply_t *)mpi_reply;
231                 struct _sas_device *sas_device = NULL;
232                 unsigned long flags;
233
234                 spin_lock_irqsave(&ioc->sas_device_lock, flags);
235                 sas_device = _ctl_sas_device_find_by_handle(ioc,
236                     le16_to_cpu(scsi_reply->DevHandle));
237                 if (sas_device) {
238                         pr_warn(MPT3SAS_FMT "\tsas_address(0x%016llx), phy(%d)\n",
239                                 ioc->name, (unsigned long long)
240                             sas_device->sas_address, sas_device->phy);
241                         pr_warn(MPT3SAS_FMT
242                             "\tenclosure_logical_id(0x%016llx), slot(%d)\n",
243                             ioc->name, (unsigned long long)
244                             sas_device->enclosure_logical_id, sas_device->slot);
245                 }
246                 spin_unlock_irqrestore(&ioc->sas_device_lock, flags);
247                 if (scsi_reply->SCSIState || scsi_reply->SCSIStatus)
248                         pr_info(MPT3SAS_FMT
249                             "\tscsi_state(0x%02x), scsi_status"
250                             "(0x%02x)\n", ioc->name,
251                             scsi_reply->SCSIState,
252                             scsi_reply->SCSIStatus);
253         }
254 }
255
256 /**
257  * mpt3sas_ctl_done - ctl module completion routine
258  * @ioc: per adapter object
259  * @smid: system request message index
260  * @msix_index: MSIX table index supplied by the OS
261  * @reply: reply message frame(lower 32bit addr)
262  * Context: none.
263  *
264  * The callback handler when using ioc->ctl_cb_idx.
265  *
266  * Return 1 meaning mf should be freed from _base_interrupt
267  *        0 means the mf is freed from this function.
268  */
269 u8
270 mpt3sas_ctl_done(struct MPT3SAS_ADAPTER *ioc, u16 smid, u8 msix_index,
271         u32 reply)
272 {
273         MPI2DefaultReply_t *mpi_reply;
274         Mpi2SCSIIOReply_t *scsiio_reply;
275         const void *sense_data;
276         u32 sz;
277
278         if (ioc->ctl_cmds.status == MPT3_CMD_NOT_USED)
279                 return 1;
280         if (ioc->ctl_cmds.smid != smid)
281                 return 1;
282         ioc->ctl_cmds.status |= MPT3_CMD_COMPLETE;
283         mpi_reply = mpt3sas_base_get_reply_virt_addr(ioc, reply);
284         if (mpi_reply) {
285                 memcpy(ioc->ctl_cmds.reply, mpi_reply, mpi_reply->MsgLength*4);
286                 ioc->ctl_cmds.status |= MPT3_CMD_REPLY_VALID;
287                 /* get sense data */
288                 if (mpi_reply->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
289                     mpi_reply->Function ==
290                     MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
291                         scsiio_reply = (Mpi2SCSIIOReply_t *)mpi_reply;
292                         if (scsiio_reply->SCSIState &
293                             MPI2_SCSI_STATE_AUTOSENSE_VALID) {
294                                 sz = min_t(u32, SCSI_SENSE_BUFFERSIZE,
295                                     le32_to_cpu(scsiio_reply->SenseCount));
296                                 sense_data = mpt3sas_base_get_sense_buffer(ioc,
297                                     smid);
298                                 memcpy(ioc->ctl_cmds.sense, sense_data, sz);
299                         }
300                 }
301         }
302         _ctl_display_some_debug(ioc, smid, "ctl_done", mpi_reply);
303         ioc->ctl_cmds.status &= ~MPT3_CMD_PENDING;
304         complete(&ioc->ctl_cmds.done);
305         return 1;
306 }
307
308 /**
309  * _ctl_check_event_type - determines when an event needs logging
310  * @ioc: per adapter object
311  * @event: firmware event
312  *
313  * The bitmask in ioc->event_type[] indicates which events should be
314  * be saved in the driver event_log.  This bitmask is set by application.
315  *
316  * Returns 1 when event should be captured, or zero means no match.
317  */
318 static int
319 _ctl_check_event_type(struct MPT3SAS_ADAPTER *ioc, u16 event)
320 {
321         u16 i;
322         u32 desired_event;
323
324         if (event >= 128 || !event || !ioc->event_log)
325                 return 0;
326
327         desired_event = (1 << (event % 32));
328         if (!desired_event)
329                 desired_event = 1;
330         i = event / 32;
331         return desired_event & ioc->event_type[i];
332 }
333
334 /**
335  * mpt3sas_ctl_add_to_event_log - add event
336  * @ioc: per adapter object
337  * @mpi_reply: reply message frame
338  *
339  * Return nothing.
340  */
341 void
342 mpt3sas_ctl_add_to_event_log(struct MPT3SAS_ADAPTER *ioc,
343         Mpi2EventNotificationReply_t *mpi_reply)
344 {
345         struct MPT3_IOCTL_EVENTS *event_log;
346         u16 event;
347         int i;
348         u32 sz, event_data_sz;
349         u8 send_aen = 0;
350
351         if (!ioc->event_log)
352                 return;
353
354         event = le16_to_cpu(mpi_reply->Event);
355
356         if (_ctl_check_event_type(ioc, event)) {
357
358                 /* insert entry into circular event_log */
359                 i = ioc->event_context % MPT3SAS_CTL_EVENT_LOG_SIZE;
360                 event_log = ioc->event_log;
361                 event_log[i].event = event;
362                 event_log[i].context = ioc->event_context++;
363
364                 event_data_sz = le16_to_cpu(mpi_reply->EventDataLength)*4;
365                 sz = min_t(u32, event_data_sz, MPT3_EVENT_DATA_SIZE);
366                 memset(event_log[i].data, 0, MPT3_EVENT_DATA_SIZE);
367                 memcpy(event_log[i].data, mpi_reply->EventData, sz);
368                 send_aen = 1;
369         }
370
371         /* This aen_event_read_flag flag is set until the
372          * application has read the event log.
373          * For MPI2_EVENT_LOG_ENTRY_ADDED, we always notify.
374          */
375         if (event == MPI2_EVENT_LOG_ENTRY_ADDED ||
376             (send_aen && !ioc->aen_event_read_flag)) {
377                 ioc->aen_event_read_flag = 1;
378                 wake_up_interruptible(&ctl_poll_wait);
379                 if (async_queue)
380                         kill_fasync(&async_queue, SIGIO, POLL_IN);
381         }
382 }
383
384 /**
385  * mpt3sas_ctl_event_callback - firmware event handler (called at ISR time)
386  * @ioc: per adapter object
387  * @msix_index: MSIX table index supplied by the OS
388  * @reply: reply message frame(lower 32bit addr)
389  * Context: interrupt.
390  *
391  * This function merely adds a new work task into ioc->firmware_event_thread.
392  * The tasks are worked from _firmware_event_work in user context.
393  *
394  * Return 1 meaning mf should be freed from _base_interrupt
395  *        0 means the mf is freed from this function.
396  */
397 u8
398 mpt3sas_ctl_event_callback(struct MPT3SAS_ADAPTER *ioc, u8 msix_index,
399         u32 reply)
400 {
401         Mpi2EventNotificationReply_t *mpi_reply;
402
403         mpi_reply = mpt3sas_base_get_reply_virt_addr(ioc, reply);
404         if (mpi_reply)
405                 mpt3sas_ctl_add_to_event_log(ioc, mpi_reply);
406         return 1;
407 }
408
409 /**
410  * _ctl_verify_adapter - validates ioc_number passed from application
411  * @ioc: per adapter object
412  * @iocpp: The ioc pointer is returned in this.
413  * @mpi_version: will be MPI2_VERSION for mpt2ctl ioctl device &
414  * MPI25_VERSION | MPI26_VERSION for mpt3ctl ioctl device.
415  *
416  * Return (-1) means error, else ioc_number.
417  */
418 static int
419 _ctl_verify_adapter(int ioc_number, struct MPT3SAS_ADAPTER **iocpp,
420                                                         int mpi_version)
421 {
422         struct MPT3SAS_ADAPTER *ioc;
423         int version = 0;
424         /* global ioc lock to protect controller on list operations */
425         spin_lock(&gioc_lock);
426         list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
427                 if (ioc->id != ioc_number)
428                         continue;
429                 /* Check whether this ioctl command is from right
430                  * ioctl device or not, if not continue the search.
431                  */
432                 version = ioc->hba_mpi_version_belonged;
433                 /* MPI25_VERSION and MPI26_VERSION uses same ioctl
434                  * device.
435                  */
436                 if (mpi_version == (MPI25_VERSION | MPI26_VERSION)) {
437                         if ((version == MPI25_VERSION) ||
438                                 (version == MPI26_VERSION))
439                                 goto out;
440                         else
441                                 continue;
442                 } else {
443                         if (version != mpi_version)
444                                 continue;
445                 }
446 out:
447                 spin_unlock(&gioc_lock);
448                 *iocpp = ioc;
449                 return ioc_number;
450         }
451         spin_unlock(&gioc_lock);
452         *iocpp = NULL;
453         return -1;
454 }
455
456 /**
457  * mpt3sas_ctl_reset_handler - reset callback handler (for ctl)
458  * @ioc: per adapter object
459  * @reset_phase: phase
460  *
461  * The handler for doing any required cleanup or initialization.
462  *
463  * The reset phase can be MPT3_IOC_PRE_RESET, MPT3_IOC_AFTER_RESET,
464  * MPT3_IOC_DONE_RESET
465  */
466 void
467 mpt3sas_ctl_reset_handler(struct MPT3SAS_ADAPTER *ioc, int reset_phase)
468 {
469         int i;
470         u8 issue_reset;
471
472         switch (reset_phase) {
473         case MPT3_IOC_PRE_RESET:
474                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
475                         "%s: MPT3_IOC_PRE_RESET\n", ioc->name, __func__));
476                 for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
477                         if (!(ioc->diag_buffer_status[i] &
478                             MPT3_DIAG_BUFFER_IS_REGISTERED))
479                                 continue;
480                         if ((ioc->diag_buffer_status[i] &
481                             MPT3_DIAG_BUFFER_IS_RELEASED))
482                                 continue;
483                         mpt3sas_send_diag_release(ioc, i, &issue_reset);
484                 }
485                 break;
486         case MPT3_IOC_AFTER_RESET:
487                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
488                         "%s: MPT3_IOC_AFTER_RESET\n", ioc->name, __func__));
489                 if (ioc->ctl_cmds.status & MPT3_CMD_PENDING) {
490                         ioc->ctl_cmds.status |= MPT3_CMD_RESET;
491                         mpt3sas_base_free_smid(ioc, ioc->ctl_cmds.smid);
492                         complete(&ioc->ctl_cmds.done);
493                 }
494                 break;
495         case MPT3_IOC_DONE_RESET:
496                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
497                         "%s: MPT3_IOC_DONE_RESET\n", ioc->name, __func__));
498
499                 for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
500                         if (!(ioc->diag_buffer_status[i] &
501                             MPT3_DIAG_BUFFER_IS_REGISTERED))
502                                 continue;
503                         if ((ioc->diag_buffer_status[i] &
504                             MPT3_DIAG_BUFFER_IS_RELEASED))
505                                 continue;
506                         ioc->diag_buffer_status[i] |=
507                             MPT3_DIAG_BUFFER_IS_DIAG_RESET;
508                 }
509                 break;
510         }
511 }
512
513 /**
514  * _ctl_fasync -
515  * @fd -
516  * @filep -
517  * @mode -
518  *
519  * Called when application request fasyn callback handler.
520  */
521 static int
522 _ctl_fasync(int fd, struct file *filep, int mode)
523 {
524         return fasync_helper(fd, filep, mode, &async_queue);
525 }
526
527 /**
528  * _ctl_poll -
529  * @file -
530  * @wait -
531  *
532  */
533 static unsigned int
534 _ctl_poll(struct file *filep, poll_table *wait)
535 {
536         struct MPT3SAS_ADAPTER *ioc;
537
538         poll_wait(filep, &ctl_poll_wait, wait);
539
540         /* global ioc lock to protect controller on list operations */
541         spin_lock(&gioc_lock);
542         list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
543                 if (ioc->aen_event_read_flag) {
544                         spin_unlock(&gioc_lock);
545                         return POLLIN | POLLRDNORM;
546                 }
547         }
548         spin_unlock(&gioc_lock);
549         return 0;
550 }
551
552 /**
553  * _ctl_set_task_mid - assign an active smid to tm request
554  * @ioc: per adapter object
555  * @karg - (struct mpt3_ioctl_command)
556  * @tm_request - pointer to mf from user space
557  *
558  * Returns 0 when an smid if found, else fail.
559  * during failure, the reply frame is filled.
560  */
561 static int
562 _ctl_set_task_mid(struct MPT3SAS_ADAPTER *ioc, struct mpt3_ioctl_command *karg,
563         Mpi2SCSITaskManagementRequest_t *tm_request)
564 {
565         u8 found = 0;
566         u16 i;
567         u16 handle;
568         struct scsi_cmnd *scmd;
569         struct MPT3SAS_DEVICE *priv_data;
570         unsigned long flags;
571         Mpi2SCSITaskManagementReply_t *tm_reply;
572         u32 sz;
573         u32 lun;
574         char *desc = NULL;
575
576         if (tm_request->TaskType == MPI2_SCSITASKMGMT_TASKTYPE_ABORT_TASK)
577                 desc = "abort_task";
578         else if (tm_request->TaskType == MPI2_SCSITASKMGMT_TASKTYPE_QUERY_TASK)
579                 desc = "query_task";
580         else
581                 return 0;
582
583         lun = scsilun_to_int((struct scsi_lun *)tm_request->LUN);
584
585         handle = le16_to_cpu(tm_request->DevHandle);
586         spin_lock_irqsave(&ioc->scsi_lookup_lock, flags);
587         for (i = ioc->scsiio_depth; i && !found; i--) {
588                 scmd = ioc->scsi_lookup[i - 1].scmd;
589                 if (scmd == NULL || scmd->device == NULL ||
590                     scmd->device->hostdata == NULL)
591                         continue;
592                 if (lun != scmd->device->lun)
593                         continue;
594                 priv_data = scmd->device->hostdata;
595                 if (priv_data->sas_target == NULL)
596                         continue;
597                 if (priv_data->sas_target->handle != handle)
598                         continue;
599                 tm_request->TaskMID = cpu_to_le16(ioc->scsi_lookup[i - 1].smid);
600                 found = 1;
601         }
602         spin_unlock_irqrestore(&ioc->scsi_lookup_lock, flags);
603
604         if (!found) {
605                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
606                         "%s: handle(0x%04x), lun(%d), no active mid!!\n",
607                         ioc->name,
608                     desc, le16_to_cpu(tm_request->DevHandle), lun));
609                 tm_reply = ioc->ctl_cmds.reply;
610                 tm_reply->DevHandle = tm_request->DevHandle;
611                 tm_reply->Function = MPI2_FUNCTION_SCSI_TASK_MGMT;
612                 tm_reply->TaskType = tm_request->TaskType;
613                 tm_reply->MsgLength = sizeof(Mpi2SCSITaskManagementReply_t)/4;
614                 tm_reply->VP_ID = tm_request->VP_ID;
615                 tm_reply->VF_ID = tm_request->VF_ID;
616                 sz = min_t(u32, karg->max_reply_bytes, ioc->reply_sz);
617                 if (copy_to_user(karg->reply_frame_buf_ptr, ioc->ctl_cmds.reply,
618                     sz))
619                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
620                             __LINE__, __func__);
621                 return 1;
622         }
623
624         dctlprintk(ioc, pr_info(MPT3SAS_FMT
625                 "%s: handle(0x%04x), lun(%d), task_mid(%d)\n", ioc->name,
626             desc, le16_to_cpu(tm_request->DevHandle), lun,
627              le16_to_cpu(tm_request->TaskMID)));
628         return 0;
629 }
630
631 /**
632  * _ctl_do_mpt_command - main handler for MPT3COMMAND opcode
633  * @ioc: per adapter object
634  * @karg - (struct mpt3_ioctl_command)
635  * @mf - pointer to mf in user space
636  */
637 static long
638 _ctl_do_mpt_command(struct MPT3SAS_ADAPTER *ioc, struct mpt3_ioctl_command karg,
639         void __user *mf)
640 {
641         MPI2RequestHeader_t *mpi_request = NULL, *request;
642         MPI2DefaultReply_t *mpi_reply;
643         u32 ioc_state;
644         u16 smid;
645         unsigned long timeout;
646         u8 issue_reset;
647         u32 sz;
648         void *psge;
649         void *data_out = NULL;
650         dma_addr_t data_out_dma = 0;
651         size_t data_out_sz = 0;
652         void *data_in = NULL;
653         dma_addr_t data_in_dma = 0;
654         size_t data_in_sz = 0;
655         long ret;
656         u16 wait_state_count;
657         u16 device_handle = MPT3SAS_INVALID_DEVICE_HANDLE;
658
659         issue_reset = 0;
660
661         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
662                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
663                     ioc->name, __func__);
664                 ret = -EAGAIN;
665                 goto out;
666         }
667
668         wait_state_count = 0;
669         ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
670         while (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
671                 if (wait_state_count++ == 10) {
672                         pr_err(MPT3SAS_FMT
673                             "%s: failed due to ioc not operational\n",
674                             ioc->name, __func__);
675                         ret = -EFAULT;
676                         goto out;
677                 }
678                 ssleep(1);
679                 ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
680                 pr_info(MPT3SAS_FMT
681                         "%s: waiting for operational state(count=%d)\n",
682                         ioc->name,
683                     __func__, wait_state_count);
684         }
685         if (wait_state_count)
686                 pr_info(MPT3SAS_FMT "%s: ioc is operational\n",
687                     ioc->name, __func__);
688
689         mpi_request = kzalloc(ioc->request_sz, GFP_KERNEL);
690         if (!mpi_request) {
691                 pr_err(MPT3SAS_FMT
692                         "%s: failed obtaining a memory for mpi_request\n",
693                         ioc->name, __func__);
694                 ret = -ENOMEM;
695                 goto out;
696         }
697
698         /* Check for overflow and wraparound */
699         if (karg.data_sge_offset * 4 > ioc->request_sz ||
700             karg.data_sge_offset > (UINT_MAX / 4)) {
701                 ret = -EINVAL;
702                 goto out;
703         }
704
705         /* copy in request message frame from user */
706         if (copy_from_user(mpi_request, mf, karg.data_sge_offset*4)) {
707                 pr_err("failure at %s:%d/%s()!\n", __FILE__, __LINE__,
708                     __func__);
709                 ret = -EFAULT;
710                 goto out;
711         }
712
713         if (mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT) {
714                 smid = mpt3sas_base_get_smid_hpr(ioc, ioc->ctl_cb_idx);
715                 if (!smid) {
716                         pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
717                             ioc->name, __func__);
718                         ret = -EAGAIN;
719                         goto out;
720                 }
721         } else {
722
723                 smid = mpt3sas_base_get_smid_scsiio(ioc, ioc->ctl_cb_idx, NULL);
724                 if (!smid) {
725                         pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
726                             ioc->name, __func__);
727                         ret = -EAGAIN;
728                         goto out;
729                 }
730         }
731
732         ret = 0;
733         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
734         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
735         request = mpt3sas_base_get_msg_frame(ioc, smid);
736         memcpy(request, mpi_request, karg.data_sge_offset*4);
737         ioc->ctl_cmds.smid = smid;
738         data_out_sz = karg.data_out_size;
739         data_in_sz = karg.data_in_size;
740
741         if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
742             mpi_request->Function == MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH ||
743             mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT ||
744             mpi_request->Function == MPI2_FUNCTION_SATA_PASSTHROUGH) {
745
746                 device_handle = le16_to_cpu(mpi_request->FunctionDependent1);
747                 if (!device_handle || (device_handle >
748                     ioc->facts.MaxDevHandle)) {
749                         ret = -EINVAL;
750                         mpt3sas_base_free_smid(ioc, smid);
751                         goto out;
752                 }
753         }
754
755         /* obtain dma-able memory for data transfer */
756         if (data_out_sz) /* WRITE */ {
757                 data_out = pci_alloc_consistent(ioc->pdev, data_out_sz,
758                     &data_out_dma);
759                 if (!data_out) {
760                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
761                             __LINE__, __func__);
762                         ret = -ENOMEM;
763                         mpt3sas_base_free_smid(ioc, smid);
764                         goto out;
765                 }
766                 if (copy_from_user(data_out, karg.data_out_buf_ptr,
767                         data_out_sz)) {
768                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
769                             __LINE__, __func__);
770                         ret =  -EFAULT;
771                         mpt3sas_base_free_smid(ioc, smid);
772                         goto out;
773                 }
774         }
775
776         if (data_in_sz) /* READ */ {
777                 data_in = pci_alloc_consistent(ioc->pdev, data_in_sz,
778                     &data_in_dma);
779                 if (!data_in) {
780                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
781                             __LINE__, __func__);
782                         ret = -ENOMEM;
783                         mpt3sas_base_free_smid(ioc, smid);
784                         goto out;
785                 }
786         }
787
788         psge = (void *)request + (karg.data_sge_offset*4);
789
790         /* send command to firmware */
791         _ctl_display_some_debug(ioc, smid, "ctl_request", NULL);
792
793         init_completion(&ioc->ctl_cmds.done);
794         switch (mpi_request->Function) {
795         case MPI2_FUNCTION_SCSI_IO_REQUEST:
796         case MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
797         {
798                 Mpi2SCSIIORequest_t *scsiio_request =
799                     (Mpi2SCSIIORequest_t *)request;
800                 scsiio_request->SenseBufferLength = SCSI_SENSE_BUFFERSIZE;
801                 scsiio_request->SenseBufferLowAddress =
802                     mpt3sas_base_get_sense_buffer_dma(ioc, smid);
803                 memset(ioc->ctl_cmds.sense, 0, SCSI_SENSE_BUFFERSIZE);
804                 if (test_bit(device_handle, ioc->device_remove_in_progress)) {
805                         dtmprintk(ioc, pr_info(MPT3SAS_FMT
806                                 "handle(0x%04x) :ioctl failed due to device removal in progress\n",
807                                 ioc->name, device_handle));
808                         mpt3sas_base_free_smid(ioc, smid);
809                         ret = -EINVAL;
810                         goto out;
811                 }
812                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz,
813                     data_in_dma, data_in_sz);
814                 if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST)
815                         ioc->put_smid_scsi_io(ioc, smid, device_handle);
816                 else
817                         ioc->put_smid_default(ioc, smid);
818                 break;
819         }
820         case MPI2_FUNCTION_SCSI_TASK_MGMT:
821         {
822                 Mpi2SCSITaskManagementRequest_t *tm_request =
823                     (Mpi2SCSITaskManagementRequest_t *)request;
824
825                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
826                         "TASK_MGMT: handle(0x%04x), task_type(0x%02x)\n",
827                         ioc->name,
828                     le16_to_cpu(tm_request->DevHandle), tm_request->TaskType));
829                 ioc->got_task_abort_from_ioctl = 1;
830                 if (tm_request->TaskType ==
831                     MPI2_SCSITASKMGMT_TASKTYPE_ABORT_TASK ||
832                     tm_request->TaskType ==
833                     MPI2_SCSITASKMGMT_TASKTYPE_QUERY_TASK) {
834                         if (_ctl_set_task_mid(ioc, &karg, tm_request)) {
835                                 mpt3sas_base_free_smid(ioc, smid);
836                                 ioc->got_task_abort_from_ioctl = 0;
837                                 goto out;
838                         }
839                 }
840                 ioc->got_task_abort_from_ioctl = 0;
841
842                 if (test_bit(device_handle, ioc->device_remove_in_progress)) {
843                         dtmprintk(ioc, pr_info(MPT3SAS_FMT
844                                 "handle(0x%04x) :ioctl failed due to device removal in progress\n",
845                                 ioc->name, device_handle));
846                         mpt3sas_base_free_smid(ioc, smid);
847                         ret = -EINVAL;
848                         goto out;
849                 }
850                 mpt3sas_scsih_set_tm_flag(ioc, le16_to_cpu(
851                     tm_request->DevHandle));
852                 ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
853                     data_in_dma, data_in_sz);
854                 ioc->put_smid_hi_priority(ioc, smid, 0);
855                 break;
856         }
857         case MPI2_FUNCTION_SMP_PASSTHROUGH:
858         {
859                 Mpi2SmpPassthroughRequest_t *smp_request =
860                     (Mpi2SmpPassthroughRequest_t *)mpi_request;
861                 u8 *data;
862
863                 /* ioc determines which port to use */
864                 smp_request->PhysicalPort = 0xFF;
865                 if (smp_request->PassthroughFlags &
866                     MPI2_SMP_PT_REQ_PT_FLAGS_IMMEDIATE)
867                         data = (u8 *)&smp_request->SGL;
868                 else {
869                         if (unlikely(data_out == NULL)) {
870                                 pr_err("failure at %s:%d/%s()!\n",
871                                     __FILE__, __LINE__, __func__);
872                                 mpt3sas_base_free_smid(ioc, smid);
873                                 ret = -EINVAL;
874                                 goto out;
875                         }
876                         data = data_out;
877                 }
878
879                 if (data[1] == 0x91 && (data[10] == 1 || data[10] == 2)) {
880                         ioc->ioc_link_reset_in_progress = 1;
881                         ioc->ignore_loginfos = 1;
882                 }
883                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
884                     data_in_sz);
885                 ioc->put_smid_default(ioc, smid);
886                 break;
887         }
888         case MPI2_FUNCTION_SATA_PASSTHROUGH:
889         {
890                 if (test_bit(device_handle, ioc->device_remove_in_progress)) {
891                         dtmprintk(ioc, pr_info(MPT3SAS_FMT
892                                 "handle(0x%04x) :ioctl failed due to device removal in progress\n",
893                                 ioc->name, device_handle));
894                         mpt3sas_base_free_smid(ioc, smid);
895                         ret = -EINVAL;
896                         goto out;
897                 }
898                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
899                     data_in_sz);
900                 ioc->put_smid_default(ioc, smid);
901                 break;
902         }
903         case MPI2_FUNCTION_FW_DOWNLOAD:
904         case MPI2_FUNCTION_FW_UPLOAD:
905         {
906                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
907                     data_in_sz);
908                 ioc->put_smid_default(ioc, smid);
909                 break;
910         }
911         case MPI2_FUNCTION_TOOLBOX:
912         {
913                 Mpi2ToolboxCleanRequest_t *toolbox_request =
914                         (Mpi2ToolboxCleanRequest_t *)mpi_request;
915
916                 if (toolbox_request->Tool == MPI2_TOOLBOX_DIAGNOSTIC_CLI_TOOL) {
917                         ioc->build_sg(ioc, psge, data_out_dma, data_out_sz,
918                                 data_in_dma, data_in_sz);
919                 } else {
920                         ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
921                                 data_in_dma, data_in_sz);
922                 }
923                 ioc->put_smid_default(ioc, smid);
924                 break;
925         }
926         case MPI2_FUNCTION_SAS_IO_UNIT_CONTROL:
927         {
928                 Mpi2SasIoUnitControlRequest_t *sasiounit_request =
929                     (Mpi2SasIoUnitControlRequest_t *)mpi_request;
930
931                 if (sasiounit_request->Operation == MPI2_SAS_OP_PHY_HARD_RESET
932                     || sasiounit_request->Operation ==
933                     MPI2_SAS_OP_PHY_LINK_RESET) {
934                         ioc->ioc_link_reset_in_progress = 1;
935                         ioc->ignore_loginfos = 1;
936                 }
937                 /* drop to default case for posting the request */
938         }
939         default:
940                 ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
941                     data_in_dma, data_in_sz);
942                 ioc->put_smid_default(ioc, smid);
943                 break;
944         }
945
946         if (karg.timeout < MPT3_IOCTL_DEFAULT_TIMEOUT)
947                 timeout = MPT3_IOCTL_DEFAULT_TIMEOUT;
948         else
949                 timeout = karg.timeout;
950         wait_for_completion_timeout(&ioc->ctl_cmds.done, timeout*HZ);
951         if (mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT) {
952                 Mpi2SCSITaskManagementRequest_t *tm_request =
953                     (Mpi2SCSITaskManagementRequest_t *)mpi_request;
954                 mpt3sas_scsih_clear_tm_flag(ioc, le16_to_cpu(
955                     tm_request->DevHandle));
956                 mpt3sas_trigger_master(ioc, MASTER_TRIGGER_TASK_MANAGMENT);
957         } else if ((mpi_request->Function == MPI2_FUNCTION_SMP_PASSTHROUGH ||
958             mpi_request->Function == MPI2_FUNCTION_SAS_IO_UNIT_CONTROL) &&
959                 ioc->ioc_link_reset_in_progress) {
960                 ioc->ioc_link_reset_in_progress = 0;
961                 ioc->ignore_loginfos = 0;
962         }
963         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
964                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
965                     __func__);
966                 _debug_dump_mf(mpi_request, karg.data_sge_offset);
967                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
968                         issue_reset = 1;
969                 goto issue_host_reset;
970         }
971
972         mpi_reply = ioc->ctl_cmds.reply;
973
974         if (mpi_reply->Function == MPI2_FUNCTION_SCSI_TASK_MGMT &&
975             (ioc->logging_level & MPT_DEBUG_TM)) {
976                 Mpi2SCSITaskManagementReply_t *tm_reply =
977                     (Mpi2SCSITaskManagementReply_t *)mpi_reply;
978
979                 pr_info(MPT3SAS_FMT "TASK_MGMT: " \
980                     "IOCStatus(0x%04x), IOCLogInfo(0x%08x), "
981                     "TerminationCount(0x%08x)\n", ioc->name,
982                     le16_to_cpu(tm_reply->IOCStatus),
983                     le32_to_cpu(tm_reply->IOCLogInfo),
984                     le32_to_cpu(tm_reply->TerminationCount));
985         }
986
987         /* copy out xdata to user */
988         if (data_in_sz) {
989                 if (copy_to_user(karg.data_in_buf_ptr, data_in,
990                     data_in_sz)) {
991                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
992                             __LINE__, __func__);
993                         ret = -ENODATA;
994                         goto out;
995                 }
996         }
997
998         /* copy out reply message frame to user */
999         if (karg.max_reply_bytes) {
1000                 sz = min_t(u32, karg.max_reply_bytes, ioc->reply_sz);
1001                 if (copy_to_user(karg.reply_frame_buf_ptr, ioc->ctl_cmds.reply,
1002                     sz)) {
1003                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
1004                             __LINE__, __func__);
1005                         ret = -ENODATA;
1006                         goto out;
1007                 }
1008         }
1009
1010         /* copy out sense to user */
1011         if (karg.max_sense_bytes && (mpi_request->Function ==
1012             MPI2_FUNCTION_SCSI_IO_REQUEST || mpi_request->Function ==
1013             MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH)) {
1014                 sz = min_t(u32, karg.max_sense_bytes, SCSI_SENSE_BUFFERSIZE);
1015                 if (copy_to_user(karg.sense_data_ptr, ioc->ctl_cmds.sense,
1016                     sz)) {
1017                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
1018                             __LINE__, __func__);
1019                         ret = -ENODATA;
1020                         goto out;
1021                 }
1022         }
1023
1024  issue_host_reset:
1025         if (issue_reset) {
1026                 ret = -ENODATA;
1027                 if ((mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
1028                     mpi_request->Function ==
1029                     MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH ||
1030                     mpi_request->Function == MPI2_FUNCTION_SATA_PASSTHROUGH)) {
1031                         pr_info(MPT3SAS_FMT "issue target reset: handle = (0x%04x)\n",
1032                                 ioc->name,
1033                                 le16_to_cpu(mpi_request->FunctionDependent1));
1034                         mpt3sas_halt_firmware(ioc);
1035                         mpt3sas_scsih_issue_locked_tm(ioc,
1036                             le16_to_cpu(mpi_request->FunctionDependent1), 0, 0,
1037                             0, MPI2_SCSITASKMGMT_TASKTYPE_TARGET_RESET, 0, 30);
1038                 } else
1039                         mpt3sas_base_hard_reset_handler(ioc, FORCE_BIG_HAMMER);
1040         }
1041
1042  out:
1043
1044         /* free memory associated with sg buffers */
1045         if (data_in)
1046                 pci_free_consistent(ioc->pdev, data_in_sz, data_in,
1047                     data_in_dma);
1048
1049         if (data_out)
1050                 pci_free_consistent(ioc->pdev, data_out_sz, data_out,
1051                     data_out_dma);
1052
1053         kfree(mpi_request);
1054         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1055         return ret;
1056 }
1057
1058 /**
1059  * _ctl_getiocinfo - main handler for MPT3IOCINFO opcode
1060  * @ioc: per adapter object
1061  * @arg - user space buffer containing ioctl content
1062  */
1063 static long
1064 _ctl_getiocinfo(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1065 {
1066         struct mpt3_ioctl_iocinfo karg;
1067
1068         if (copy_from_user(&karg, arg, sizeof(karg))) {
1069                 pr_err("failure at %s:%d/%s()!\n",
1070                     __FILE__, __LINE__, __func__);
1071                 return -EFAULT;
1072         }
1073
1074         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1075             __func__));
1076
1077         memset(&karg, 0 , sizeof(karg));
1078         if (ioc->pfacts)
1079                 karg.port_number = ioc->pfacts[0].PortNumber;
1080         karg.hw_rev = ioc->pdev->revision;
1081         karg.pci_id = ioc->pdev->device;
1082         karg.subsystem_device = ioc->pdev->subsystem_device;
1083         karg.subsystem_vendor = ioc->pdev->subsystem_vendor;
1084         karg.pci_information.u.bits.bus = ioc->pdev->bus->number;
1085         karg.pci_information.u.bits.device = PCI_SLOT(ioc->pdev->devfn);
1086         karg.pci_information.u.bits.function = PCI_FUNC(ioc->pdev->devfn);
1087         karg.pci_information.segment_id = pci_domain_nr(ioc->pdev->bus);
1088         karg.firmware_version = ioc->facts.FWVersion.Word;
1089         strcpy(karg.driver_version, ioc->driver_name);
1090         strcat(karg.driver_version, "-");
1091         switch  (ioc->hba_mpi_version_belonged) {
1092         case MPI2_VERSION:
1093                 if (ioc->is_warpdrive)
1094                         karg.adapter_type = MPT2_IOCTL_INTERFACE_SAS2_SSS6200;
1095                 else
1096                         karg.adapter_type = MPT2_IOCTL_INTERFACE_SAS2;
1097                 strcat(karg.driver_version, MPT2SAS_DRIVER_VERSION);
1098                 break;
1099         case MPI25_VERSION:
1100         case MPI26_VERSION:
1101                 if (ioc->is_gen35_ioc)
1102                         karg.adapter_type = MPT3_IOCTL_INTERFACE_SAS35;
1103                 else
1104                         karg.adapter_type = MPT3_IOCTL_INTERFACE_SAS3;
1105                 strcat(karg.driver_version, MPT3SAS_DRIVER_VERSION);
1106                 break;
1107         }
1108         karg.bios_version = le32_to_cpu(ioc->bios_pg3.BiosVersion);
1109
1110         if (copy_to_user(arg, &karg, sizeof(karg))) {
1111                 pr_err("failure at %s:%d/%s()!\n",
1112                     __FILE__, __LINE__, __func__);
1113                 return -EFAULT;
1114         }
1115         return 0;
1116 }
1117
1118 /**
1119  * _ctl_eventquery - main handler for MPT3EVENTQUERY opcode
1120  * @ioc: per adapter object
1121  * @arg - user space buffer containing ioctl content
1122  */
1123 static long
1124 _ctl_eventquery(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1125 {
1126         struct mpt3_ioctl_eventquery karg;
1127
1128         if (copy_from_user(&karg, arg, sizeof(karg))) {
1129                 pr_err("failure at %s:%d/%s()!\n",
1130                     __FILE__, __LINE__, __func__);
1131                 return -EFAULT;
1132         }
1133
1134         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1135             __func__));
1136
1137         karg.event_entries = MPT3SAS_CTL_EVENT_LOG_SIZE;
1138         memcpy(karg.event_types, ioc->event_type,
1139             MPI2_EVENT_NOTIFY_EVENTMASK_WORDS * sizeof(u32));
1140
1141         if (copy_to_user(arg, &karg, sizeof(karg))) {
1142                 pr_err("failure at %s:%d/%s()!\n",
1143                     __FILE__, __LINE__, __func__);
1144                 return -EFAULT;
1145         }
1146         return 0;
1147 }
1148
1149 /**
1150  * _ctl_eventenable - main handler for MPT3EVENTENABLE opcode
1151  * @ioc: per adapter object
1152  * @arg - user space buffer containing ioctl content
1153  */
1154 static long
1155 _ctl_eventenable(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1156 {
1157         struct mpt3_ioctl_eventenable karg;
1158
1159         if (copy_from_user(&karg, arg, sizeof(karg))) {
1160                 pr_err("failure at %s:%d/%s()!\n",
1161                     __FILE__, __LINE__, __func__);
1162                 return -EFAULT;
1163         }
1164
1165         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1166             __func__));
1167
1168         memcpy(ioc->event_type, karg.event_types,
1169             MPI2_EVENT_NOTIFY_EVENTMASK_WORDS * sizeof(u32));
1170         mpt3sas_base_validate_event_type(ioc, ioc->event_type);
1171
1172         if (ioc->event_log)
1173                 return 0;
1174         /* initialize event_log */
1175         ioc->event_context = 0;
1176         ioc->aen_event_read_flag = 0;
1177         ioc->event_log = kcalloc(MPT3SAS_CTL_EVENT_LOG_SIZE,
1178             sizeof(struct MPT3_IOCTL_EVENTS), GFP_KERNEL);
1179         if (!ioc->event_log) {
1180                 pr_err("failure at %s:%d/%s()!\n",
1181                     __FILE__, __LINE__, __func__);
1182                 return -ENOMEM;
1183         }
1184         return 0;
1185 }
1186
1187 /**
1188  * _ctl_eventreport - main handler for MPT3EVENTREPORT opcode
1189  * @ioc: per adapter object
1190  * @arg - user space buffer containing ioctl content
1191  */
1192 static long
1193 _ctl_eventreport(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1194 {
1195         struct mpt3_ioctl_eventreport karg;
1196         u32 number_bytes, max_events, max;
1197         struct mpt3_ioctl_eventreport __user *uarg = arg;
1198
1199         if (copy_from_user(&karg, arg, sizeof(karg))) {
1200                 pr_err("failure at %s:%d/%s()!\n",
1201                     __FILE__, __LINE__, __func__);
1202                 return -EFAULT;
1203         }
1204
1205         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1206             __func__));
1207
1208         number_bytes = karg.hdr.max_data_size -
1209             sizeof(struct mpt3_ioctl_header);
1210         max_events = number_bytes/sizeof(struct MPT3_IOCTL_EVENTS);
1211         max = min_t(u32, MPT3SAS_CTL_EVENT_LOG_SIZE, max_events);
1212
1213         /* If fewer than 1 event is requested, there must have
1214          * been some type of error.
1215          */
1216         if (!max || !ioc->event_log)
1217                 return -ENODATA;
1218
1219         number_bytes = max * sizeof(struct MPT3_IOCTL_EVENTS);
1220         if (copy_to_user(uarg->event_data, ioc->event_log, number_bytes)) {
1221                 pr_err("failure at %s:%d/%s()!\n",
1222                     __FILE__, __LINE__, __func__);
1223                 return -EFAULT;
1224         }
1225
1226         /* reset flag so SIGIO can restart */
1227         ioc->aen_event_read_flag = 0;
1228         return 0;
1229 }
1230
1231 /**
1232  * _ctl_do_reset - main handler for MPT3HARDRESET opcode
1233  * @ioc: per adapter object
1234  * @arg - user space buffer containing ioctl content
1235  */
1236 static long
1237 _ctl_do_reset(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1238 {
1239         struct mpt3_ioctl_diag_reset karg;
1240         int retval;
1241
1242         if (copy_from_user(&karg, arg, sizeof(karg))) {
1243                 pr_err("failure at %s:%d/%s()!\n",
1244                     __FILE__, __LINE__, __func__);
1245                 return -EFAULT;
1246         }
1247
1248         if (ioc->shost_recovery || ioc->pci_error_recovery ||
1249             ioc->is_driver_loading)
1250                 return -EAGAIN;
1251
1252         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1253             __func__));
1254
1255         retval = mpt3sas_base_hard_reset_handler(ioc, FORCE_BIG_HAMMER);
1256         pr_info(MPT3SAS_FMT "host reset: %s\n",
1257             ioc->name, ((!retval) ? "SUCCESS" : "FAILED"));
1258         return 0;
1259 }
1260
1261 /**
1262  * _ctl_btdh_search_sas_device - searching for sas device
1263  * @ioc: per adapter object
1264  * @btdh: btdh ioctl payload
1265  */
1266 static int
1267 _ctl_btdh_search_sas_device(struct MPT3SAS_ADAPTER *ioc,
1268         struct mpt3_ioctl_btdh_mapping *btdh)
1269 {
1270         struct _sas_device *sas_device;
1271         unsigned long flags;
1272         int rc = 0;
1273
1274         if (list_empty(&ioc->sas_device_list))
1275                 return rc;
1276
1277         spin_lock_irqsave(&ioc->sas_device_lock, flags);
1278         list_for_each_entry(sas_device, &ioc->sas_device_list, list) {
1279                 if (btdh->bus == 0xFFFFFFFF && btdh->id == 0xFFFFFFFF &&
1280                     btdh->handle == sas_device->handle) {
1281                         btdh->bus = sas_device->channel;
1282                         btdh->id = sas_device->id;
1283                         rc = 1;
1284                         goto out;
1285                 } else if (btdh->bus == sas_device->channel && btdh->id ==
1286                     sas_device->id && btdh->handle == 0xFFFF) {
1287                         btdh->handle = sas_device->handle;
1288                         rc = 1;
1289                         goto out;
1290                 }
1291         }
1292  out:
1293         spin_unlock_irqrestore(&ioc->sas_device_lock, flags);
1294         return rc;
1295 }
1296
1297 /**
1298  * _ctl_btdh_search_raid_device - searching for raid device
1299  * @ioc: per adapter object
1300  * @btdh: btdh ioctl payload
1301  */
1302 static int
1303 _ctl_btdh_search_raid_device(struct MPT3SAS_ADAPTER *ioc,
1304         struct mpt3_ioctl_btdh_mapping *btdh)
1305 {
1306         struct _raid_device *raid_device;
1307         unsigned long flags;
1308         int rc = 0;
1309
1310         if (list_empty(&ioc->raid_device_list))
1311                 return rc;
1312
1313         spin_lock_irqsave(&ioc->raid_device_lock, flags);
1314         list_for_each_entry(raid_device, &ioc->raid_device_list, list) {
1315                 if (btdh->bus == 0xFFFFFFFF && btdh->id == 0xFFFFFFFF &&
1316                     btdh->handle == raid_device->handle) {
1317                         btdh->bus = raid_device->channel;
1318                         btdh->id = raid_device->id;
1319                         rc = 1;
1320                         goto out;
1321                 } else if (btdh->bus == raid_device->channel && btdh->id ==
1322                     raid_device->id && btdh->handle == 0xFFFF) {
1323                         btdh->handle = raid_device->handle;
1324                         rc = 1;
1325                         goto out;
1326                 }
1327         }
1328  out:
1329         spin_unlock_irqrestore(&ioc->raid_device_lock, flags);
1330         return rc;
1331 }
1332
1333 /**
1334  * _ctl_btdh_mapping - main handler for MPT3BTDHMAPPING opcode
1335  * @ioc: per adapter object
1336  * @arg - user space buffer containing ioctl content
1337  */
1338 static long
1339 _ctl_btdh_mapping(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1340 {
1341         struct mpt3_ioctl_btdh_mapping karg;
1342         int rc;
1343
1344         if (copy_from_user(&karg, arg, sizeof(karg))) {
1345                 pr_err("failure at %s:%d/%s()!\n",
1346                     __FILE__, __LINE__, __func__);
1347                 return -EFAULT;
1348         }
1349
1350         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1351             __func__));
1352
1353         rc = _ctl_btdh_search_sas_device(ioc, &karg);
1354         if (!rc)
1355                 _ctl_btdh_search_raid_device(ioc, &karg);
1356
1357         if (copy_to_user(arg, &karg, sizeof(karg))) {
1358                 pr_err("failure at %s:%d/%s()!\n",
1359                     __FILE__, __LINE__, __func__);
1360                 return -EFAULT;
1361         }
1362         return 0;
1363 }
1364
1365 /**
1366  * _ctl_diag_capability - return diag buffer capability
1367  * @ioc: per adapter object
1368  * @buffer_type: specifies either TRACE, SNAPSHOT, or EXTENDED
1369  *
1370  * returns 1 when diag buffer support is enabled in firmware
1371  */
1372 static u8
1373 _ctl_diag_capability(struct MPT3SAS_ADAPTER *ioc, u8 buffer_type)
1374 {
1375         u8 rc = 0;
1376
1377         switch (buffer_type) {
1378         case MPI2_DIAG_BUF_TYPE_TRACE:
1379                 if (ioc->facts.IOCCapabilities &
1380                     MPI2_IOCFACTS_CAPABILITY_DIAG_TRACE_BUFFER)
1381                         rc = 1;
1382                 break;
1383         case MPI2_DIAG_BUF_TYPE_SNAPSHOT:
1384                 if (ioc->facts.IOCCapabilities &
1385                     MPI2_IOCFACTS_CAPABILITY_SNAPSHOT_BUFFER)
1386                         rc = 1;
1387                 break;
1388         case MPI2_DIAG_BUF_TYPE_EXTENDED:
1389                 if (ioc->facts.IOCCapabilities &
1390                     MPI2_IOCFACTS_CAPABILITY_EXTENDED_BUFFER)
1391                         rc = 1;
1392         }
1393
1394         return rc;
1395 }
1396
1397
1398 /**
1399  * _ctl_diag_register_2 - wrapper for registering diag buffer support
1400  * @ioc: per adapter object
1401  * @diag_register: the diag_register struct passed in from user space
1402  *
1403  */
1404 static long
1405 _ctl_diag_register_2(struct MPT3SAS_ADAPTER *ioc,
1406         struct mpt3_diag_register *diag_register)
1407 {
1408         int rc, i;
1409         void *request_data = NULL;
1410         dma_addr_t request_data_dma;
1411         u32 request_data_sz = 0;
1412         Mpi2DiagBufferPostRequest_t *mpi_request;
1413         Mpi2DiagBufferPostReply_t *mpi_reply;
1414         u8 buffer_type;
1415         u16 smid;
1416         u16 ioc_status;
1417         u32 ioc_state;
1418         u8 issue_reset = 0;
1419
1420         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1421             __func__));
1422
1423         ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
1424         if (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
1425                 pr_err(MPT3SAS_FMT
1426                     "%s: failed due to ioc not operational\n",
1427                     ioc->name, __func__);
1428                 rc = -EAGAIN;
1429                 goto out;
1430         }
1431
1432         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
1433                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
1434                     ioc->name, __func__);
1435                 rc = -EAGAIN;
1436                 goto out;
1437         }
1438
1439         buffer_type = diag_register->buffer_type;
1440         if (!_ctl_diag_capability(ioc, buffer_type)) {
1441                 pr_err(MPT3SAS_FMT
1442                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1443                         ioc->name, __func__, buffer_type);
1444                 return -EPERM;
1445         }
1446
1447         if (ioc->diag_buffer_status[buffer_type] &
1448             MPT3_DIAG_BUFFER_IS_REGISTERED) {
1449                 pr_err(MPT3SAS_FMT
1450                         "%s: already has a registered buffer for buffer_type(0x%02x)\n",
1451                         ioc->name, __func__,
1452                     buffer_type);
1453                 return -EINVAL;
1454         }
1455
1456         if (diag_register->requested_buffer_size % 4)  {
1457                 pr_err(MPT3SAS_FMT
1458                         "%s: the requested_buffer_size is not 4 byte aligned\n",
1459                         ioc->name, __func__);
1460                 return -EINVAL;
1461         }
1462
1463         smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
1464         if (!smid) {
1465                 pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
1466                     ioc->name, __func__);
1467                 rc = -EAGAIN;
1468                 goto out;
1469         }
1470
1471         rc = 0;
1472         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
1473         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
1474         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
1475         ioc->ctl_cmds.smid = smid;
1476
1477         request_data = ioc->diag_buffer[buffer_type];
1478         request_data_sz = diag_register->requested_buffer_size;
1479         ioc->unique_id[buffer_type] = diag_register->unique_id;
1480         ioc->diag_buffer_status[buffer_type] = 0;
1481         memcpy(ioc->product_specific[buffer_type],
1482             diag_register->product_specific, MPT3_PRODUCT_SPECIFIC_DWORDS);
1483         ioc->diagnostic_flags[buffer_type] = diag_register->diagnostic_flags;
1484
1485         if (request_data) {
1486                 request_data_dma = ioc->diag_buffer_dma[buffer_type];
1487                 if (request_data_sz != ioc->diag_buffer_sz[buffer_type]) {
1488                         pci_free_consistent(ioc->pdev,
1489                             ioc->diag_buffer_sz[buffer_type],
1490                             request_data, request_data_dma);
1491                         request_data = NULL;
1492                 }
1493         }
1494
1495         if (request_data == NULL) {
1496                 ioc->diag_buffer_sz[buffer_type] = 0;
1497                 ioc->diag_buffer_dma[buffer_type] = 0;
1498                 request_data = pci_alloc_consistent(
1499                         ioc->pdev, request_data_sz, &request_data_dma);
1500                 if (request_data == NULL) {
1501                         pr_err(MPT3SAS_FMT "%s: failed allocating memory" \
1502                             " for diag buffers, requested size(%d)\n",
1503                             ioc->name, __func__, request_data_sz);
1504                         mpt3sas_base_free_smid(ioc, smid);
1505                         rc = -ENOMEM;
1506                         goto out;
1507                 }
1508                 ioc->diag_buffer[buffer_type] = request_data;
1509                 ioc->diag_buffer_sz[buffer_type] = request_data_sz;
1510                 ioc->diag_buffer_dma[buffer_type] = request_data_dma;
1511         }
1512
1513         mpi_request->Function = MPI2_FUNCTION_DIAG_BUFFER_POST;
1514         mpi_request->BufferType = diag_register->buffer_type;
1515         mpi_request->Flags = cpu_to_le32(diag_register->diagnostic_flags);
1516         mpi_request->BufferAddress = cpu_to_le64(request_data_dma);
1517         mpi_request->BufferLength = cpu_to_le32(request_data_sz);
1518         mpi_request->VF_ID = 0; /* TODO */
1519         mpi_request->VP_ID = 0;
1520
1521         dctlprintk(ioc, pr_info(MPT3SAS_FMT
1522                 "%s: diag_buffer(0x%p), dma(0x%llx), sz(%d)\n",
1523                 ioc->name, __func__, request_data,
1524             (unsigned long long)request_data_dma,
1525             le32_to_cpu(mpi_request->BufferLength)));
1526
1527         for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
1528                 mpi_request->ProductSpecific[i] =
1529                         cpu_to_le32(ioc->product_specific[buffer_type][i]);
1530
1531         init_completion(&ioc->ctl_cmds.done);
1532         ioc->put_smid_default(ioc, smid);
1533         wait_for_completion_timeout(&ioc->ctl_cmds.done,
1534             MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
1535
1536         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
1537                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
1538                     __func__);
1539                 _debug_dump_mf(mpi_request,
1540                     sizeof(Mpi2DiagBufferPostRequest_t)/4);
1541                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
1542                         issue_reset = 1;
1543                 goto issue_host_reset;
1544         }
1545
1546         /* process the completed Reply Message Frame */
1547         if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
1548                 pr_err(MPT3SAS_FMT "%s: no reply message\n",
1549                     ioc->name, __func__);
1550                 rc = -EFAULT;
1551                 goto out;
1552         }
1553
1554         mpi_reply = ioc->ctl_cmds.reply;
1555         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
1556
1557         if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
1558                 ioc->diag_buffer_status[buffer_type] |=
1559                         MPT3_DIAG_BUFFER_IS_REGISTERED;
1560                 dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
1561                     ioc->name, __func__));
1562         } else {
1563                 pr_info(MPT3SAS_FMT
1564                         "%s: ioc_status(0x%04x) log_info(0x%08x)\n",
1565                         ioc->name, __func__,
1566                     ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
1567                 rc = -EFAULT;
1568         }
1569
1570  issue_host_reset:
1571         if (issue_reset)
1572                 mpt3sas_base_hard_reset_handler(ioc, FORCE_BIG_HAMMER);
1573
1574  out:
1575
1576         if (rc && request_data)
1577                 pci_free_consistent(ioc->pdev, request_data_sz,
1578                     request_data, request_data_dma);
1579
1580         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1581         return rc;
1582 }
1583
1584 /**
1585  * mpt3sas_enable_diag_buffer - enabling diag_buffers support driver load time
1586  * @ioc: per adapter object
1587  * @bits_to_register: bitwise field where trace is bit 0, and snapshot is bit 1
1588  *
1589  * This is called when command line option diag_buffer_enable is enabled
1590  * at driver load time.
1591  */
1592 void
1593 mpt3sas_enable_diag_buffer(struct MPT3SAS_ADAPTER *ioc, u8 bits_to_register)
1594 {
1595         struct mpt3_diag_register diag_register;
1596
1597         memset(&diag_register, 0, sizeof(struct mpt3_diag_register));
1598
1599         if (bits_to_register & 1) {
1600                 pr_info(MPT3SAS_FMT "registering trace buffer support\n",
1601                     ioc->name);
1602                 ioc->diag_trigger_master.MasterData =
1603                     (MASTER_TRIGGER_FW_FAULT + MASTER_TRIGGER_ADAPTER_RESET);
1604                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_TRACE;
1605                 /* register for 2MB buffers  */
1606                 diag_register.requested_buffer_size = 2 * (1024 * 1024);
1607                 diag_register.unique_id = 0x7075900;
1608                 _ctl_diag_register_2(ioc,  &diag_register);
1609         }
1610
1611         if (bits_to_register & 2) {
1612                 pr_info(MPT3SAS_FMT "registering snapshot buffer support\n",
1613                     ioc->name);
1614                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_SNAPSHOT;
1615                 /* register for 2MB buffers  */
1616                 diag_register.requested_buffer_size = 2 * (1024 * 1024);
1617                 diag_register.unique_id = 0x7075901;
1618                 _ctl_diag_register_2(ioc,  &diag_register);
1619         }
1620
1621         if (bits_to_register & 4) {
1622                 pr_info(MPT3SAS_FMT "registering extended buffer support\n",
1623                     ioc->name);
1624                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_EXTENDED;
1625                 /* register for 2MB buffers  */
1626                 diag_register.requested_buffer_size = 2 * (1024 * 1024);
1627                 diag_register.unique_id = 0x7075901;
1628                 _ctl_diag_register_2(ioc,  &diag_register);
1629         }
1630 }
1631
1632 /**
1633  * _ctl_diag_register - application register with driver
1634  * @ioc: per adapter object
1635  * @arg - user space buffer containing ioctl content
1636  *
1637  * This will allow the driver to setup any required buffers that will be
1638  * needed by firmware to communicate with the driver.
1639  */
1640 static long
1641 _ctl_diag_register(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1642 {
1643         struct mpt3_diag_register karg;
1644         long rc;
1645
1646         if (copy_from_user(&karg, arg, sizeof(karg))) {
1647                 pr_err("failure at %s:%d/%s()!\n",
1648                     __FILE__, __LINE__, __func__);
1649                 return -EFAULT;
1650         }
1651
1652         rc = _ctl_diag_register_2(ioc, &karg);
1653         return rc;
1654 }
1655
1656 /**
1657  * _ctl_diag_unregister - application unregister with driver
1658  * @ioc: per adapter object
1659  * @arg - user space buffer containing ioctl content
1660  *
1661  * This will allow the driver to cleanup any memory allocated for diag
1662  * messages and to free up any resources.
1663  */
1664 static long
1665 _ctl_diag_unregister(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1666 {
1667         struct mpt3_diag_unregister karg;
1668         void *request_data;
1669         dma_addr_t request_data_dma;
1670         u32 request_data_sz;
1671         u8 buffer_type;
1672
1673         if (copy_from_user(&karg, arg, sizeof(karg))) {
1674                 pr_err("failure at %s:%d/%s()!\n",
1675                     __FILE__, __LINE__, __func__);
1676                 return -EFAULT;
1677         }
1678
1679         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1680             __func__));
1681
1682         buffer_type = karg.unique_id & 0x000000ff;
1683         if (!_ctl_diag_capability(ioc, buffer_type)) {
1684                 pr_err(MPT3SAS_FMT
1685                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1686                         ioc->name, __func__, buffer_type);
1687                 return -EPERM;
1688         }
1689
1690         if ((ioc->diag_buffer_status[buffer_type] &
1691             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1692                 pr_err(MPT3SAS_FMT
1693                         "%s: buffer_type(0x%02x) is not registered\n",
1694                         ioc->name, __func__, buffer_type);
1695                 return -EINVAL;
1696         }
1697         if ((ioc->diag_buffer_status[buffer_type] &
1698             MPT3_DIAG_BUFFER_IS_RELEASED) == 0) {
1699                 pr_err(MPT3SAS_FMT
1700                         "%s: buffer_type(0x%02x) has not been released\n",
1701                         ioc->name, __func__, buffer_type);
1702                 return -EINVAL;
1703         }
1704
1705         if (karg.unique_id != ioc->unique_id[buffer_type]) {
1706                 pr_err(MPT3SAS_FMT
1707                         "%s: unique_id(0x%08x) is not registered\n",
1708                         ioc->name, __func__, karg.unique_id);
1709                 return -EINVAL;
1710         }
1711
1712         request_data = ioc->diag_buffer[buffer_type];
1713         if (!request_data) {
1714                 pr_err(MPT3SAS_FMT
1715                         "%s: doesn't have memory allocated for buffer_type(0x%02x)\n",
1716                         ioc->name, __func__, buffer_type);
1717                 return -ENOMEM;
1718         }
1719
1720         request_data_sz = ioc->diag_buffer_sz[buffer_type];
1721         request_data_dma = ioc->diag_buffer_dma[buffer_type];
1722         pci_free_consistent(ioc->pdev, request_data_sz,
1723             request_data, request_data_dma);
1724         ioc->diag_buffer[buffer_type] = NULL;
1725         ioc->diag_buffer_status[buffer_type] = 0;
1726         return 0;
1727 }
1728
1729 /**
1730  * _ctl_diag_query - query relevant info associated with diag buffers
1731  * @ioc: per adapter object
1732  * @arg - user space buffer containing ioctl content
1733  *
1734  * The application will send only buffer_type and unique_id.  Driver will
1735  * inspect unique_id first, if valid, fill in all the info.  If unique_id is
1736  * 0x00, the driver will return info specified by Buffer Type.
1737  */
1738 static long
1739 _ctl_diag_query(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1740 {
1741         struct mpt3_diag_query karg;
1742         void *request_data;
1743         int i;
1744         u8 buffer_type;
1745
1746         if (copy_from_user(&karg, arg, sizeof(karg))) {
1747                 pr_err("failure at %s:%d/%s()!\n",
1748                     __FILE__, __LINE__, __func__);
1749                 return -EFAULT;
1750         }
1751
1752         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1753             __func__));
1754
1755         karg.application_flags = 0;
1756         buffer_type = karg.buffer_type;
1757
1758         if (!_ctl_diag_capability(ioc, buffer_type)) {
1759                 pr_err(MPT3SAS_FMT
1760                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1761                         ioc->name, __func__, buffer_type);
1762                 return -EPERM;
1763         }
1764
1765         if ((ioc->diag_buffer_status[buffer_type] &
1766             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1767                 pr_err(MPT3SAS_FMT
1768                         "%s: buffer_type(0x%02x) is not registered\n",
1769                         ioc->name, __func__, buffer_type);
1770                 return -EINVAL;
1771         }
1772
1773         if (karg.unique_id & 0xffffff00) {
1774                 if (karg.unique_id != ioc->unique_id[buffer_type]) {
1775                         pr_err(MPT3SAS_FMT
1776                                 "%s: unique_id(0x%08x) is not registered\n",
1777                                 ioc->name, __func__, karg.unique_id);
1778                         return -EINVAL;
1779                 }
1780         }
1781
1782         request_data = ioc->diag_buffer[buffer_type];
1783         if (!request_data) {
1784                 pr_err(MPT3SAS_FMT
1785                         "%s: doesn't have buffer for buffer_type(0x%02x)\n",
1786                         ioc->name, __func__, buffer_type);
1787                 return -ENOMEM;
1788         }
1789
1790         if (ioc->diag_buffer_status[buffer_type] & MPT3_DIAG_BUFFER_IS_RELEASED)
1791                 karg.application_flags = (MPT3_APP_FLAGS_APP_OWNED |
1792                     MPT3_APP_FLAGS_BUFFER_VALID);
1793         else
1794                 karg.application_flags = (MPT3_APP_FLAGS_APP_OWNED |
1795                     MPT3_APP_FLAGS_BUFFER_VALID |
1796                     MPT3_APP_FLAGS_FW_BUFFER_ACCESS);
1797
1798         for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
1799                 karg.product_specific[i] =
1800                     ioc->product_specific[buffer_type][i];
1801
1802         karg.total_buffer_size = ioc->diag_buffer_sz[buffer_type];
1803         karg.driver_added_buffer_size = 0;
1804         karg.unique_id = ioc->unique_id[buffer_type];
1805         karg.diagnostic_flags = ioc->diagnostic_flags[buffer_type];
1806
1807         if (copy_to_user(arg, &karg, sizeof(struct mpt3_diag_query))) {
1808                 pr_err(MPT3SAS_FMT
1809                         "%s: unable to write mpt3_diag_query data @ %p\n",
1810                         ioc->name, __func__, arg);
1811                 return -EFAULT;
1812         }
1813         return 0;
1814 }
1815
1816 /**
1817  * mpt3sas_send_diag_release - Diag Release Message
1818  * @ioc: per adapter object
1819  * @buffer_type - specifies either TRACE, SNAPSHOT, or EXTENDED
1820  * @issue_reset - specifies whether host reset is required.
1821  *
1822  */
1823 int
1824 mpt3sas_send_diag_release(struct MPT3SAS_ADAPTER *ioc, u8 buffer_type,
1825         u8 *issue_reset)
1826 {
1827         Mpi2DiagReleaseRequest_t *mpi_request;
1828         Mpi2DiagReleaseReply_t *mpi_reply;
1829         u16 smid;
1830         u16 ioc_status;
1831         u32 ioc_state;
1832         int rc;
1833
1834         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1835             __func__));
1836
1837         rc = 0;
1838         *issue_reset = 0;
1839
1840         ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
1841         if (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
1842                 if (ioc->diag_buffer_status[buffer_type] &
1843                     MPT3_DIAG_BUFFER_IS_REGISTERED)
1844                         ioc->diag_buffer_status[buffer_type] |=
1845                             MPT3_DIAG_BUFFER_IS_RELEASED;
1846                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
1847                         "%s: skipping due to FAULT state\n", ioc->name,
1848                     __func__));
1849                 rc = -EAGAIN;
1850                 goto out;
1851         }
1852
1853         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
1854                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
1855                     ioc->name, __func__);
1856                 rc = -EAGAIN;
1857                 goto out;
1858         }
1859
1860         smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
1861         if (!smid) {
1862                 pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
1863                     ioc->name, __func__);
1864                 rc = -EAGAIN;
1865                 goto out;
1866         }
1867
1868         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
1869         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
1870         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
1871         ioc->ctl_cmds.smid = smid;
1872
1873         mpi_request->Function = MPI2_FUNCTION_DIAG_RELEASE;
1874         mpi_request->BufferType = buffer_type;
1875         mpi_request->VF_ID = 0; /* TODO */
1876         mpi_request->VP_ID = 0;
1877
1878         init_completion(&ioc->ctl_cmds.done);
1879         ioc->put_smid_default(ioc, smid);
1880         wait_for_completion_timeout(&ioc->ctl_cmds.done,
1881             MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
1882
1883         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
1884                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
1885                     __func__);
1886                 _debug_dump_mf(mpi_request,
1887                     sizeof(Mpi2DiagReleaseRequest_t)/4);
1888                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
1889                         *issue_reset = 1;
1890                 rc = -EFAULT;
1891                 goto out;
1892         }
1893
1894         /* process the completed Reply Message Frame */
1895         if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
1896                 pr_err(MPT3SAS_FMT "%s: no reply message\n",
1897                     ioc->name, __func__);
1898                 rc = -EFAULT;
1899                 goto out;
1900         }
1901
1902         mpi_reply = ioc->ctl_cmds.reply;
1903         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
1904
1905         if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
1906                 ioc->diag_buffer_status[buffer_type] |=
1907                     MPT3_DIAG_BUFFER_IS_RELEASED;
1908                 dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
1909                     ioc->name, __func__));
1910         } else {
1911                 pr_info(MPT3SAS_FMT
1912                         "%s: ioc_status(0x%04x) log_info(0x%08x)\n",
1913                         ioc->name, __func__,
1914                     ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
1915                 rc = -EFAULT;
1916         }
1917
1918  out:
1919         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1920         return rc;
1921 }
1922
1923 /**
1924  * _ctl_diag_release - request to send Diag Release Message to firmware
1925  * @arg - user space buffer containing ioctl content
1926  *
1927  * This allows ownership of the specified buffer to returned to the driver,
1928  * allowing an application to read the buffer without fear that firmware is
1929  * overwriting information in the buffer.
1930  */
1931 static long
1932 _ctl_diag_release(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1933 {
1934         struct mpt3_diag_release karg;
1935         void *request_data;
1936         int rc;
1937         u8 buffer_type;
1938         u8 issue_reset = 0;
1939
1940         if (copy_from_user(&karg, arg, sizeof(karg))) {
1941                 pr_err("failure at %s:%d/%s()!\n",
1942                     __FILE__, __LINE__, __func__);
1943                 return -EFAULT;
1944         }
1945
1946         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1947             __func__));
1948
1949         buffer_type = karg.unique_id & 0x000000ff;
1950         if (!_ctl_diag_capability(ioc, buffer_type)) {
1951                 pr_err(MPT3SAS_FMT
1952                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1953                         ioc->name, __func__, buffer_type);
1954                 return -EPERM;
1955         }
1956
1957         if ((ioc->diag_buffer_status[buffer_type] &
1958             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1959                 pr_err(MPT3SAS_FMT
1960                         "%s: buffer_type(0x%02x) is not registered\n",
1961                         ioc->name, __func__, buffer_type);
1962                 return -EINVAL;
1963         }
1964
1965         if (karg.unique_id != ioc->unique_id[buffer_type]) {
1966                 pr_err(MPT3SAS_FMT
1967                         "%s: unique_id(0x%08x) is not registered\n",
1968                         ioc->name, __func__, karg.unique_id);
1969                 return -EINVAL;
1970         }
1971
1972         if (ioc->diag_buffer_status[buffer_type] &
1973             MPT3_DIAG_BUFFER_IS_RELEASED) {
1974                 pr_err(MPT3SAS_FMT
1975                         "%s: buffer_type(0x%02x) is already released\n",
1976                         ioc->name, __func__,
1977                     buffer_type);
1978                 return 0;
1979         }
1980
1981         request_data = ioc->diag_buffer[buffer_type];
1982
1983         if (!request_data) {
1984                 pr_err(MPT3SAS_FMT
1985                         "%s: doesn't have memory allocated for buffer_type(0x%02x)\n",
1986                         ioc->name, __func__, buffer_type);
1987                 return -ENOMEM;
1988         }
1989
1990         /* buffers were released by due to host reset */
1991         if ((ioc->diag_buffer_status[buffer_type] &
1992             MPT3_DIAG_BUFFER_IS_DIAG_RESET)) {
1993                 ioc->diag_buffer_status[buffer_type] |=
1994                     MPT3_DIAG_BUFFER_IS_RELEASED;
1995                 ioc->diag_buffer_status[buffer_type] &=
1996                     ~MPT3_DIAG_BUFFER_IS_DIAG_RESET;
1997                 pr_err(MPT3SAS_FMT
1998                         "%s: buffer_type(0x%02x) was released due to host reset\n",
1999                         ioc->name, __func__, buffer_type);
2000                 return 0;
2001         }
2002
2003         rc = mpt3sas_send_diag_release(ioc, buffer_type, &issue_reset);
2004
2005         if (issue_reset)
2006                 mpt3sas_base_hard_reset_handler(ioc, FORCE_BIG_HAMMER);
2007
2008         return rc;
2009 }
2010
2011 /**
2012  * _ctl_diag_read_buffer - request for copy of the diag buffer
2013  * @ioc: per adapter object
2014  * @arg - user space buffer containing ioctl content
2015  */
2016 static long
2017 _ctl_diag_read_buffer(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
2018 {
2019         struct mpt3_diag_read_buffer karg;
2020         struct mpt3_diag_read_buffer __user *uarg = arg;
2021         void *request_data, *diag_data;
2022         Mpi2DiagBufferPostRequest_t *mpi_request;
2023         Mpi2DiagBufferPostReply_t *mpi_reply;
2024         int rc, i;
2025         u8 buffer_type;
2026         unsigned long request_size, copy_size;
2027         u16 smid;
2028         u16 ioc_status;
2029         u8 issue_reset = 0;
2030
2031         if (copy_from_user(&karg, arg, sizeof(karg))) {
2032                 pr_err("failure at %s:%d/%s()!\n",
2033                     __FILE__, __LINE__, __func__);
2034                 return -EFAULT;
2035         }
2036
2037         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
2038             __func__));
2039
2040         buffer_type = karg.unique_id & 0x000000ff;
2041         if (!_ctl_diag_capability(ioc, buffer_type)) {
2042                 pr_err(MPT3SAS_FMT
2043                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
2044                         ioc->name, __func__, buffer_type);
2045                 return -EPERM;
2046         }
2047
2048         if (karg.unique_id != ioc->unique_id[buffer_type]) {
2049                 pr_err(MPT3SAS_FMT
2050                         "%s: unique_id(0x%08x) is not registered\n",
2051                         ioc->name, __func__, karg.unique_id);
2052                 return -EINVAL;
2053         }
2054
2055         request_data = ioc->diag_buffer[buffer_type];
2056         if (!request_data) {
2057                 pr_err(MPT3SAS_FMT
2058                         "%s: doesn't have buffer for buffer_type(0x%02x)\n",
2059                         ioc->name, __func__, buffer_type);
2060                 return -ENOMEM;
2061         }
2062
2063         request_size = ioc->diag_buffer_sz[buffer_type];
2064
2065         if ((karg.starting_offset % 4) || (karg.bytes_to_read % 4)) {
2066                 pr_err(MPT3SAS_FMT "%s: either the starting_offset " \
2067                     "or bytes_to_read are not 4 byte aligned\n", ioc->name,
2068                     __func__);
2069                 return -EINVAL;
2070         }
2071
2072         if (karg.starting_offset > request_size)
2073                 return -EINVAL;
2074
2075         diag_data = (void *)(request_data + karg.starting_offset);
2076         dctlprintk(ioc, pr_info(MPT3SAS_FMT
2077                 "%s: diag_buffer(%p), offset(%d), sz(%d)\n",
2078                 ioc->name, __func__,
2079             diag_data, karg.starting_offset, karg.bytes_to_read));
2080
2081         /* Truncate data on requests that are too large */
2082         if ((diag_data + karg.bytes_to_read < diag_data) ||
2083             (diag_data + karg.bytes_to_read > request_data + request_size))
2084                 copy_size = request_size - karg.starting_offset;
2085         else
2086                 copy_size = karg.bytes_to_read;
2087
2088         if (copy_to_user((void __user *)uarg->diagnostic_data,
2089             diag_data, copy_size)) {
2090                 pr_err(MPT3SAS_FMT
2091                         "%s: Unable to write mpt_diag_read_buffer_t data @ %p\n",
2092                         ioc->name, __func__, diag_data);
2093                 return -EFAULT;
2094         }
2095
2096         if ((karg.flags & MPT3_FLAGS_REREGISTER) == 0)
2097                 return 0;
2098
2099         dctlprintk(ioc, pr_info(MPT3SAS_FMT
2100                 "%s: Reregister buffer_type(0x%02x)\n",
2101                 ioc->name, __func__, buffer_type));
2102         if ((ioc->diag_buffer_status[buffer_type] &
2103             MPT3_DIAG_BUFFER_IS_RELEASED) == 0) {
2104                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
2105                         "%s: buffer_type(0x%02x) is still registered\n",
2106                         ioc->name, __func__, buffer_type));
2107                 return 0;
2108         }
2109         /* Get a free request frame and save the message context.
2110         */
2111
2112         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
2113                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
2114                     ioc->name, __func__);
2115                 rc = -EAGAIN;
2116                 goto out;
2117         }
2118
2119         smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
2120         if (!smid) {
2121                 pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
2122                     ioc->name, __func__);
2123                 rc = -EAGAIN;
2124                 goto out;
2125         }
2126
2127         rc = 0;
2128         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
2129         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
2130         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
2131         ioc->ctl_cmds.smid = smid;
2132
2133         mpi_request->Function = MPI2_FUNCTION_DIAG_BUFFER_POST;
2134         mpi_request->BufferType = buffer_type;
2135         mpi_request->BufferLength =
2136             cpu_to_le32(ioc->diag_buffer_sz[buffer_type]);
2137         mpi_request->BufferAddress =
2138             cpu_to_le64(ioc->diag_buffer_dma[buffer_type]);
2139         for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
2140                 mpi_request->ProductSpecific[i] =
2141                         cpu_to_le32(ioc->product_specific[buffer_type][i]);
2142         mpi_request->VF_ID = 0; /* TODO */
2143         mpi_request->VP_ID = 0;
2144
2145         init_completion(&ioc->ctl_cmds.done);
2146         ioc->put_smid_default(ioc, smid);
2147         wait_for_completion_timeout(&ioc->ctl_cmds.done,
2148             MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
2149
2150         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
2151                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
2152                     __func__);
2153                 _debug_dump_mf(mpi_request,
2154                     sizeof(Mpi2DiagBufferPostRequest_t)/4);
2155                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
2156                         issue_reset = 1;
2157                 goto issue_host_reset;
2158         }
2159
2160         /* process the completed Reply Message Frame */
2161         if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
2162                 pr_err(MPT3SAS_FMT "%s: no reply message\n",
2163                     ioc->name, __func__);
2164                 rc = -EFAULT;
2165                 goto out;
2166         }
2167
2168         mpi_reply = ioc->ctl_cmds.reply;
2169         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
2170
2171         if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
2172                 ioc->diag_buffer_status[buffer_type] |=
2173                     MPT3_DIAG_BUFFER_IS_REGISTERED;
2174                 dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
2175                     ioc->name, __func__));
2176         } else {
2177                 pr_info(MPT3SAS_FMT
2178                         "%s: ioc_status(0x%04x) log_info(0x%08x)\n",
2179                         ioc->name, __func__,
2180                     ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
2181                 rc = -EFAULT;
2182         }
2183
2184  issue_host_reset:
2185         if (issue_reset)
2186                 mpt3sas_base_hard_reset_handler(ioc, FORCE_BIG_HAMMER);
2187
2188  out:
2189
2190         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
2191         return rc;
2192 }
2193
2194
2195
2196 #ifdef CONFIG_COMPAT
2197 /**
2198  * _ctl_compat_mpt_command - convert 32bit pointers to 64bit.
2199  * @ioc: per adapter object
2200  * @cmd - ioctl opcode
2201  * @arg - (struct mpt3_ioctl_command32)
2202  *
2203  * MPT3COMMAND32 - Handle 32bit applications running on 64bit os.
2204  */
2205 static long
2206 _ctl_compat_mpt_command(struct MPT3SAS_ADAPTER *ioc, unsigned cmd,
2207         void __user *arg)
2208 {
2209         struct mpt3_ioctl_command32 karg32;
2210         struct mpt3_ioctl_command32 __user *uarg;
2211         struct mpt3_ioctl_command karg;
2212
2213         if (_IOC_SIZE(cmd) != sizeof(struct mpt3_ioctl_command32))
2214                 return -EINVAL;
2215
2216         uarg = (struct mpt3_ioctl_command32 __user *) arg;
2217
2218         if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32))) {
2219                 pr_err("failure at %s:%d/%s()!\n",
2220                     __FILE__, __LINE__, __func__);
2221                 return -EFAULT;
2222         }
2223
2224         memset(&karg, 0, sizeof(struct mpt3_ioctl_command));
2225         karg.hdr.ioc_number = karg32.hdr.ioc_number;
2226         karg.hdr.port_number = karg32.hdr.port_number;
2227         karg.hdr.max_data_size = karg32.hdr.max_data_size;
2228         karg.timeout = karg32.timeout;
2229         karg.max_reply_bytes = karg32.max_reply_bytes;
2230         karg.data_in_size = karg32.data_in_size;
2231         karg.data_out_size = karg32.data_out_size;
2232         karg.max_sense_bytes = karg32.max_sense_bytes;
2233         karg.data_sge_offset = karg32.data_sge_offset;
2234         karg.reply_frame_buf_ptr = compat_ptr(karg32.reply_frame_buf_ptr);
2235         karg.data_in_buf_ptr = compat_ptr(karg32.data_in_buf_ptr);
2236         karg.data_out_buf_ptr = compat_ptr(karg32.data_out_buf_ptr);
2237         karg.sense_data_ptr = compat_ptr(karg32.sense_data_ptr);
2238         return _ctl_do_mpt_command(ioc, karg, &uarg->mf);
2239 }
2240 #endif
2241
2242 /**
2243  * _ctl_ioctl_main - main ioctl entry point
2244  * @file - (struct file)
2245  * @cmd - ioctl opcode
2246  * @arg - user space data buffer
2247  * @compat - handles 32 bit applications in 64bit os
2248  * @mpi_version: will be MPI2_VERSION for mpt2ctl ioctl device &
2249  * MPI25_VERSION | MPI26_VERSION for mpt3ctl ioctl device.
2250  */
2251 static long
2252 _ctl_ioctl_main(struct file *file, unsigned int cmd, void __user *arg,
2253         u8 compat, u16 mpi_version)
2254 {
2255         struct MPT3SAS_ADAPTER *ioc;
2256         struct mpt3_ioctl_header ioctl_header;
2257         enum block_state state;
2258         long ret = -EINVAL;
2259
2260         /* get IOCTL header */
2261         if (copy_from_user(&ioctl_header, (char __user *)arg,
2262             sizeof(struct mpt3_ioctl_header))) {
2263                 pr_err("failure at %s:%d/%s()!\n",
2264                     __FILE__, __LINE__, __func__);
2265                 return -EFAULT;
2266         }
2267
2268         if (_ctl_verify_adapter(ioctl_header.ioc_number,
2269                                 &ioc, mpi_version) == -1 || !ioc)
2270                 return -ENODEV;
2271
2272         /* pci_access_mutex lock acquired by ioctl path */
2273         mutex_lock(&ioc->pci_access_mutex);
2274
2275         if (ioc->shost_recovery || ioc->pci_error_recovery ||
2276             ioc->is_driver_loading || ioc->remove_host) {
2277                 ret = -EAGAIN;
2278                 goto out_unlock_pciaccess;
2279         }
2280
2281         state = (file->f_flags & O_NONBLOCK) ? NON_BLOCKING : BLOCKING;
2282         if (state == NON_BLOCKING) {
2283                 if (!mutex_trylock(&ioc->ctl_cmds.mutex)) {
2284                         ret = -EAGAIN;
2285                         goto out_unlock_pciaccess;
2286                 }
2287         } else if (mutex_lock_interruptible(&ioc->ctl_cmds.mutex)) {
2288                 ret = -ERESTARTSYS;
2289                 goto out_unlock_pciaccess;
2290         }
2291
2292
2293         switch (cmd) {
2294         case MPT3IOCINFO:
2295                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_iocinfo))
2296                         ret = _ctl_getiocinfo(ioc, arg);
2297                 break;
2298 #ifdef CONFIG_COMPAT
2299         case MPT3COMMAND32:
2300 #endif
2301         case MPT3COMMAND:
2302         {
2303                 struct mpt3_ioctl_command __user *uarg;
2304                 struct mpt3_ioctl_command karg;
2305
2306 #ifdef CONFIG_COMPAT
2307                 if (compat) {
2308                         ret = _ctl_compat_mpt_command(ioc, cmd, arg);
2309                         break;
2310                 }
2311 #endif
2312                 if (copy_from_user(&karg, arg, sizeof(karg))) {
2313                         pr_err("failure at %s:%d/%s()!\n",
2314                             __FILE__, __LINE__, __func__);
2315                         ret = -EFAULT;
2316                         break;
2317                 }
2318
2319                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_command)) {
2320                         uarg = arg;
2321                         ret = _ctl_do_mpt_command(ioc, karg, &uarg->mf);
2322                 }
2323                 break;
2324         }
2325         case MPT3EVENTQUERY:
2326                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_eventquery))
2327                         ret = _ctl_eventquery(ioc, arg);
2328                 break;
2329         case MPT3EVENTENABLE:
2330                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_eventenable))
2331                         ret = _ctl_eventenable(ioc, arg);
2332                 break;
2333         case MPT3EVENTREPORT:
2334                 ret = _ctl_eventreport(ioc, arg);
2335                 break;
2336         case MPT3HARDRESET:
2337                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_diag_reset))
2338                         ret = _ctl_do_reset(ioc, arg);
2339                 break;
2340         case MPT3BTDHMAPPING:
2341                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_btdh_mapping))
2342                         ret = _ctl_btdh_mapping(ioc, arg);
2343                 break;
2344         case MPT3DIAGREGISTER:
2345                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_register))
2346                         ret = _ctl_diag_register(ioc, arg);
2347                 break;
2348         case MPT3DIAGUNREGISTER:
2349                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_unregister))
2350                         ret = _ctl_diag_unregister(ioc, arg);
2351                 break;
2352         case MPT3DIAGQUERY:
2353                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_query))
2354                         ret = _ctl_diag_query(ioc, arg);
2355                 break;
2356         case MPT3DIAGRELEASE:
2357                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_release))
2358                         ret = _ctl_diag_release(ioc, arg);
2359                 break;
2360         case MPT3DIAGREADBUFFER:
2361                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_read_buffer))
2362                         ret = _ctl_diag_read_buffer(ioc, arg);
2363                 break;
2364         default:
2365                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
2366                     "unsupported ioctl opcode(0x%08x)\n", ioc->name, cmd));
2367                 break;
2368         }
2369
2370         mutex_unlock(&ioc->ctl_cmds.mutex);
2371 out_unlock_pciaccess:
2372         mutex_unlock(&ioc->pci_access_mutex);
2373         return ret;
2374 }
2375
2376 /**
2377  * _ctl_ioctl - mpt3ctl main ioctl entry point (unlocked)
2378  * @file - (struct file)
2379  * @cmd - ioctl opcode
2380  * @arg -
2381  */
2382 static long
2383 _ctl_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
2384 {
2385         long ret;
2386
2387         /* pass MPI25_VERSION | MPI26_VERSION value,
2388          * to indicate that this ioctl cmd
2389          * came from mpt3ctl ioctl device.
2390          */
2391         ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0,
2392                 MPI25_VERSION | MPI26_VERSION);
2393         return ret;
2394 }
2395
2396 /**
2397  * _ctl_mpt2_ioctl - mpt2ctl main ioctl entry point (unlocked)
2398  * @file - (struct file)
2399  * @cmd - ioctl opcode
2400  * @arg -
2401  */
2402 static long
2403 _ctl_mpt2_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
2404 {
2405         long ret;
2406
2407         /* pass MPI2_VERSION value, to indicate that this ioctl cmd
2408          * came from mpt2ctl ioctl device.
2409          */
2410         ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0, MPI2_VERSION);
2411         return ret;
2412 }
2413 #ifdef CONFIG_COMPAT
2414 /**
2415  *_ ctl_ioctl_compat - main ioctl entry point (compat)
2416  * @file -
2417  * @cmd -
2418  * @arg -
2419  *
2420  * This routine handles 32 bit applications in 64bit os.
2421  */
2422 static long
2423 _ctl_ioctl_compat(struct file *file, unsigned cmd, unsigned long arg)
2424 {
2425         long ret;
2426
2427         ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1,
2428                 MPI25_VERSION | MPI26_VERSION);
2429         return ret;
2430 }
2431
2432 /**
2433  *_ ctl_mpt2_ioctl_compat - main ioctl entry point (compat)
2434  * @file -
2435  * @cmd -
2436  * @arg -
2437  *
2438  * This routine handles 32 bit applications in 64bit os.
2439  */
2440 static long
2441 _ctl_mpt2_ioctl_compat(struct file *file, unsigned cmd, unsigned long arg)
2442 {
2443         long ret;
2444
2445         ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1, MPI2_VERSION);
2446         return ret;
2447 }
2448 #endif
2449
2450 /* scsi host attributes */
2451 /**
2452  * _ctl_version_fw_show - firmware version
2453  * @cdev - pointer to embedded class device
2454  * @buf - the buffer returned
2455  *
2456  * A sysfs 'read-only' shost attribute.
2457  */
2458 static ssize_t
2459 _ctl_version_fw_show(struct device *cdev, struct device_attribute *attr,
2460         char *buf)
2461 {
2462         struct Scsi_Host *shost = class_to_shost(cdev);
2463         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2464
2465         return snprintf(buf, PAGE_SIZE, "%02d.%02d.%02d.%02d\n",
2466             (ioc->facts.FWVersion.Word & 0xFF000000) >> 24,
2467             (ioc->facts.FWVersion.Word & 0x00FF0000) >> 16,
2468             (ioc->facts.FWVersion.Word & 0x0000FF00) >> 8,
2469             ioc->facts.FWVersion.Word & 0x000000FF);
2470 }
2471 static DEVICE_ATTR(version_fw, S_IRUGO, _ctl_version_fw_show, NULL);
2472
2473 /**
2474  * _ctl_version_bios_show - bios version
2475  * @cdev - pointer to embedded class device
2476  * @buf - the buffer returned
2477  *
2478  * A sysfs 'read-only' shost attribute.
2479  */
2480 static ssize_t
2481 _ctl_version_bios_show(struct device *cdev, struct device_attribute *attr,
2482         char *buf)
2483 {
2484         struct Scsi_Host *shost = class_to_shost(cdev);
2485         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2486
2487         u32 version = le32_to_cpu(ioc->bios_pg3.BiosVersion);
2488
2489         return snprintf(buf, PAGE_SIZE, "%02d.%02d.%02d.%02d\n",
2490             (version & 0xFF000000) >> 24,
2491             (version & 0x00FF0000) >> 16,
2492             (version & 0x0000FF00) >> 8,
2493             version & 0x000000FF);
2494 }
2495 static DEVICE_ATTR(version_bios, S_IRUGO, _ctl_version_bios_show, NULL);
2496
2497 /**
2498  * _ctl_version_mpi_show - MPI (message passing interface) version
2499  * @cdev - pointer to embedded class device
2500  * @buf - the buffer returned
2501  *
2502  * A sysfs 'read-only' shost attribute.
2503  */
2504 static ssize_t
2505 _ctl_version_mpi_show(struct device *cdev, struct device_attribute *attr,
2506         char *buf)
2507 {
2508         struct Scsi_Host *shost = class_to_shost(cdev);
2509         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2510
2511         return snprintf(buf, PAGE_SIZE, "%03x.%02x\n",
2512             ioc->facts.MsgVersion, ioc->facts.HeaderVersion >> 8);
2513 }
2514 static DEVICE_ATTR(version_mpi, S_IRUGO, _ctl_version_mpi_show, NULL);
2515
2516 /**
2517  * _ctl_version_product_show - product name
2518  * @cdev - pointer to embedded class device
2519  * @buf - the buffer returned
2520  *
2521  * A sysfs 'read-only' shost attribute.
2522  */
2523 static ssize_t
2524 _ctl_version_product_show(struct device *cdev, struct device_attribute *attr,
2525         char *buf)
2526 {
2527         struct Scsi_Host *shost = class_to_shost(cdev);
2528         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2529
2530         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.ChipName);
2531 }
2532 static DEVICE_ATTR(version_product, S_IRUGO, _ctl_version_product_show, NULL);
2533
2534 /**
2535  * _ctl_version_nvdata_persistent_show - ndvata persistent version
2536  * @cdev - pointer to embedded class device
2537  * @buf - the buffer returned
2538  *
2539  * A sysfs 'read-only' shost attribute.
2540  */
2541 static ssize_t
2542 _ctl_version_nvdata_persistent_show(struct device *cdev,
2543         struct device_attribute *attr, char *buf)
2544 {
2545         struct Scsi_Host *shost = class_to_shost(cdev);
2546         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2547
2548         return snprintf(buf, PAGE_SIZE, "%08xh\n",
2549             le32_to_cpu(ioc->iounit_pg0.NvdataVersionPersistent.Word));
2550 }
2551 static DEVICE_ATTR(version_nvdata_persistent, S_IRUGO,
2552         _ctl_version_nvdata_persistent_show, NULL);
2553
2554 /**
2555  * _ctl_version_nvdata_default_show - nvdata default version
2556  * @cdev - pointer to embedded class device
2557  * @buf - the buffer returned
2558  *
2559  * A sysfs 'read-only' shost attribute.
2560  */
2561 static ssize_t
2562 _ctl_version_nvdata_default_show(struct device *cdev, struct device_attribute
2563         *attr, char *buf)
2564 {
2565         struct Scsi_Host *shost = class_to_shost(cdev);
2566         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2567
2568         return snprintf(buf, PAGE_SIZE, "%08xh\n",
2569             le32_to_cpu(ioc->iounit_pg0.NvdataVersionDefault.Word));
2570 }
2571 static DEVICE_ATTR(version_nvdata_default, S_IRUGO,
2572         _ctl_version_nvdata_default_show, NULL);
2573
2574 /**
2575  * _ctl_board_name_show - board name
2576  * @cdev - pointer to embedded class device
2577  * @buf - the buffer returned
2578  *
2579  * A sysfs 'read-only' shost attribute.
2580  */
2581 static ssize_t
2582 _ctl_board_name_show(struct device *cdev, struct device_attribute *attr,
2583         char *buf)
2584 {
2585         struct Scsi_Host *shost = class_to_shost(cdev);
2586         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2587
2588         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardName);
2589 }
2590 static DEVICE_ATTR(board_name, S_IRUGO, _ctl_board_name_show, NULL);
2591
2592 /**
2593  * _ctl_board_assembly_show - board assembly name
2594  * @cdev - pointer to embedded class device
2595  * @buf - the buffer returned
2596  *
2597  * A sysfs 'read-only' shost attribute.
2598  */
2599 static ssize_t
2600 _ctl_board_assembly_show(struct device *cdev, struct device_attribute *attr,
2601         char *buf)
2602 {
2603         struct Scsi_Host *shost = class_to_shost(cdev);
2604         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2605
2606         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardAssembly);
2607 }
2608 static DEVICE_ATTR(board_assembly, S_IRUGO, _ctl_board_assembly_show, NULL);
2609
2610 /**
2611  * _ctl_board_tracer_show - board tracer number
2612  * @cdev - pointer to embedded class device
2613  * @buf - the buffer returned
2614  *
2615  * A sysfs 'read-only' shost attribute.
2616  */
2617 static ssize_t
2618 _ctl_board_tracer_show(struct device *cdev, struct device_attribute *attr,
2619         char *buf)
2620 {
2621         struct Scsi_Host *shost = class_to_shost(cdev);
2622         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2623
2624         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardTracerNumber);
2625 }
2626 static DEVICE_ATTR(board_tracer, S_IRUGO, _ctl_board_tracer_show, NULL);
2627
2628 /**
2629  * _ctl_io_delay_show - io missing delay
2630  * @cdev - pointer to embedded class device
2631  * @buf - the buffer returned
2632  *
2633  * This is for firmware implemention for deboucing device
2634  * removal events.
2635  *
2636  * A sysfs 'read-only' shost attribute.
2637  */
2638 static ssize_t
2639 _ctl_io_delay_show(struct device *cdev, struct device_attribute *attr,
2640         char *buf)
2641 {
2642         struct Scsi_Host *shost = class_to_shost(cdev);
2643         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2644
2645         return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->io_missing_delay);
2646 }
2647 static DEVICE_ATTR(io_delay, S_IRUGO, _ctl_io_delay_show, NULL);
2648
2649 /**
2650  * _ctl_device_delay_show - device missing delay
2651  * @cdev - pointer to embedded class device
2652  * @buf - the buffer returned
2653  *
2654  * This is for firmware implemention for deboucing device
2655  * removal events.
2656  *
2657  * A sysfs 'read-only' shost attribute.
2658  */
2659 static ssize_t
2660 _ctl_device_delay_show(struct device *cdev, struct device_attribute *attr,
2661         char *buf)
2662 {
2663         struct Scsi_Host *shost = class_to_shost(cdev);
2664         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2665
2666         return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->device_missing_delay);
2667 }
2668 static DEVICE_ATTR(device_delay, S_IRUGO, _ctl_device_delay_show, NULL);
2669
2670 /**
2671  * _ctl_fw_queue_depth_show - global credits
2672  * @cdev - pointer to embedded class device
2673  * @buf - the buffer returned
2674  *
2675  * This is firmware queue depth limit
2676  *
2677  * A sysfs 'read-only' shost attribute.
2678  */
2679 static ssize_t
2680 _ctl_fw_queue_depth_show(struct device *cdev, struct device_attribute *attr,
2681         char *buf)
2682 {
2683         struct Scsi_Host *shost = class_to_shost(cdev);
2684         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2685
2686         return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->facts.RequestCredit);
2687 }
2688 static DEVICE_ATTR(fw_queue_depth, S_IRUGO, _ctl_fw_queue_depth_show, NULL);
2689
2690 /**
2691  * _ctl_sas_address_show - sas address
2692  * @cdev - pointer to embedded class device
2693  * @buf - the buffer returned
2694  *
2695  * This is the controller sas address
2696  *
2697  * A sysfs 'read-only' shost attribute.
2698  */
2699 static ssize_t
2700 _ctl_host_sas_address_show(struct device *cdev, struct device_attribute *attr,
2701         char *buf)
2702
2703 {
2704         struct Scsi_Host *shost = class_to_shost(cdev);
2705         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2706
2707         return snprintf(buf, PAGE_SIZE, "0x%016llx\n",
2708             (unsigned long long)ioc->sas_hba.sas_address);
2709 }
2710 static DEVICE_ATTR(host_sas_address, S_IRUGO,
2711         _ctl_host_sas_address_show, NULL);
2712
2713 /**
2714  * _ctl_logging_level_show - logging level
2715  * @cdev - pointer to embedded class device
2716  * @buf - the buffer returned
2717  *
2718  * A sysfs 'read/write' shost attribute.
2719  */
2720 static ssize_t
2721 _ctl_logging_level_show(struct device *cdev, struct device_attribute *attr,
2722         char *buf)
2723 {
2724         struct Scsi_Host *shost = class_to_shost(cdev);
2725         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2726
2727         return snprintf(buf, PAGE_SIZE, "%08xh\n", ioc->logging_level);
2728 }
2729 static ssize_t
2730 _ctl_logging_level_store(struct device *cdev, struct device_attribute *attr,
2731         const char *buf, size_t count)
2732 {
2733         struct Scsi_Host *shost = class_to_shost(cdev);
2734         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2735         int val = 0;
2736
2737         if (sscanf(buf, "%x", &val) != 1)
2738                 return -EINVAL;
2739
2740         ioc->logging_level = val;
2741         pr_info(MPT3SAS_FMT "logging_level=%08xh\n", ioc->name,
2742             ioc->logging_level);
2743         return strlen(buf);
2744 }
2745 static DEVICE_ATTR(logging_level, S_IRUGO | S_IWUSR, _ctl_logging_level_show,
2746         _ctl_logging_level_store);
2747
2748 /**
2749  * _ctl_fwfault_debug_show - show/store fwfault_debug
2750  * @cdev - pointer to embedded class device
2751  * @buf - the buffer returned
2752  *
2753  * mpt3sas_fwfault_debug is command line option
2754  * A sysfs 'read/write' shost attribute.
2755  */
2756 static ssize_t
2757 _ctl_fwfault_debug_show(struct device *cdev, struct device_attribute *attr,
2758         char *buf)
2759 {
2760         struct Scsi_Host *shost = class_to_shost(cdev);
2761         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2762
2763         return snprintf(buf, PAGE_SIZE, "%d\n", ioc->fwfault_debug);
2764 }
2765 static ssize_t
2766 _ctl_fwfault_debug_store(struct device *cdev, struct device_attribute *attr,
2767         const char *buf, size_t count)
2768 {
2769         struct Scsi_Host *shost = class_to_shost(cdev);
2770         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2771         int val = 0;
2772
2773         if (sscanf(buf, "%d", &val) != 1)
2774                 return -EINVAL;
2775
2776         ioc->fwfault_debug = val;
2777         pr_info(MPT3SAS_FMT "fwfault_debug=%d\n", ioc->name,
2778             ioc->fwfault_debug);
2779         return strlen(buf);
2780 }
2781 static DEVICE_ATTR(fwfault_debug, S_IRUGO | S_IWUSR,
2782         _ctl_fwfault_debug_show, _ctl_fwfault_debug_store);
2783
2784 /**
2785  * _ctl_ioc_reset_count_show - ioc reset count
2786  * @cdev - pointer to embedded class device
2787  * @buf - the buffer returned
2788  *
2789  * This is firmware queue depth limit
2790  *
2791  * A sysfs 'read-only' shost attribute.
2792  */
2793 static ssize_t
2794 _ctl_ioc_reset_count_show(struct device *cdev, struct device_attribute *attr,
2795         char *buf)
2796 {
2797         struct Scsi_Host *shost = class_to_shost(cdev);
2798         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2799
2800         return snprintf(buf, PAGE_SIZE, "%d\n", ioc->ioc_reset_count);
2801 }
2802 static DEVICE_ATTR(ioc_reset_count, S_IRUGO, _ctl_ioc_reset_count_show, NULL);
2803
2804 /**
2805  * _ctl_ioc_reply_queue_count_show - number of reply queues
2806  * @cdev - pointer to embedded class device
2807  * @buf - the buffer returned
2808  *
2809  * This is number of reply queues
2810  *
2811  * A sysfs 'read-only' shost attribute.
2812  */
2813 static ssize_t
2814 _ctl_ioc_reply_queue_count_show(struct device *cdev,
2815         struct device_attribute *attr, char *buf)
2816 {
2817         u8 reply_queue_count;
2818         struct Scsi_Host *shost = class_to_shost(cdev);
2819         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2820
2821         if ((ioc->facts.IOCCapabilities &
2822             MPI2_IOCFACTS_CAPABILITY_MSI_X_INDEX) && ioc->msix_enable)
2823                 reply_queue_count = ioc->reply_queue_count;
2824         else
2825                 reply_queue_count = 1;
2826
2827         return snprintf(buf, PAGE_SIZE, "%d\n", reply_queue_count);
2828 }
2829 static DEVICE_ATTR(reply_queue_count, S_IRUGO, _ctl_ioc_reply_queue_count_show,
2830         NULL);
2831
2832 /**
2833  * _ctl_BRM_status_show - Backup Rail Monitor Status
2834  * @cdev - pointer to embedded class device
2835  * @buf - the buffer returned
2836  *
2837  * This is number of reply queues
2838  *
2839  * A sysfs 'read-only' shost attribute.
2840  */
2841 static ssize_t
2842 _ctl_BRM_status_show(struct device *cdev, struct device_attribute *attr,
2843         char *buf)
2844 {
2845         struct Scsi_Host *shost = class_to_shost(cdev);
2846         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2847         Mpi2IOUnitPage3_t *io_unit_pg3 = NULL;
2848         Mpi2ConfigReply_t mpi_reply;
2849         u16 backup_rail_monitor_status = 0;
2850         u16 ioc_status;
2851         int sz;
2852         ssize_t rc = 0;
2853
2854         if (!ioc->is_warpdrive) {
2855                 pr_err(MPT3SAS_FMT "%s: BRM attribute is only for"
2856                     " warpdrive\n", ioc->name, __func__);
2857                 goto out;
2858         }
2859         /* pci_access_mutex lock acquired by sysfs show path */
2860         mutex_lock(&ioc->pci_access_mutex);
2861         if (ioc->pci_error_recovery || ioc->remove_host) {
2862                 mutex_unlock(&ioc->pci_access_mutex);
2863                 return 0;
2864         }
2865
2866         /* allocate upto GPIOVal 36 entries */
2867         sz = offsetof(Mpi2IOUnitPage3_t, GPIOVal) + (sizeof(u16) * 36);
2868         io_unit_pg3 = kzalloc(sz, GFP_KERNEL);
2869         if (!io_unit_pg3) {
2870                 pr_err(MPT3SAS_FMT "%s: failed allocating memory "
2871                     "for iounit_pg3: (%d) bytes\n", ioc->name, __func__, sz);
2872                 goto out;
2873         }
2874
2875         if (mpt3sas_config_get_iounit_pg3(ioc, &mpi_reply, io_unit_pg3, sz) !=
2876             0) {
2877                 pr_err(MPT3SAS_FMT
2878                     "%s: failed reading iounit_pg3\n", ioc->name,
2879                     __func__);
2880                 goto out;
2881         }
2882
2883         ioc_status = le16_to_cpu(mpi_reply.IOCStatus) & MPI2_IOCSTATUS_MASK;
2884         if (ioc_status != MPI2_IOCSTATUS_SUCCESS) {
2885                 pr_err(MPT3SAS_FMT "%s: iounit_pg3 failed with "
2886                     "ioc_status(0x%04x)\n", ioc->name, __func__, ioc_status);
2887                 goto out;
2888         }
2889
2890         if (io_unit_pg3->GPIOCount < 25) {
2891                 pr_err(MPT3SAS_FMT "%s: iounit_pg3->GPIOCount less than "
2892                      "25 entries, detected (%d) entries\n", ioc->name, __func__,
2893                     io_unit_pg3->GPIOCount);
2894                 goto out;
2895         }
2896
2897         /* BRM status is in bit zero of GPIOVal[24] */
2898         backup_rail_monitor_status = le16_to_cpu(io_unit_pg3->GPIOVal[24]);
2899         rc = snprintf(buf, PAGE_SIZE, "%d\n", (backup_rail_monitor_status & 1));
2900
2901  out:
2902         kfree(io_unit_pg3);
2903         mutex_unlock(&ioc->pci_access_mutex);
2904         return rc;
2905 }
2906 static DEVICE_ATTR(BRM_status, S_IRUGO, _ctl_BRM_status_show, NULL);
2907
2908 struct DIAG_BUFFER_START {
2909         __le32  Size;
2910         __le32  DiagVersion;
2911         u8      BufferType;
2912         u8      Reserved[3];
2913         __le32  Reserved1;
2914         __le32  Reserved2;
2915         __le32  Reserved3;
2916 };
2917
2918 /**
2919  * _ctl_host_trace_buffer_size_show - host buffer size (trace only)
2920  * @cdev - pointer to embedded class device
2921  * @buf - the buffer returned
2922  *
2923  * A sysfs 'read-only' shost attribute.
2924  */
2925 static ssize_t
2926 _ctl_host_trace_buffer_size_show(struct device *cdev,
2927         struct device_attribute *attr, char *buf)
2928 {
2929         struct Scsi_Host *shost = class_to_shost(cdev);
2930         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2931         u32 size = 0;
2932         struct DIAG_BUFFER_START *request_data;
2933
2934         if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) {
2935                 pr_err(MPT3SAS_FMT
2936                         "%s: host_trace_buffer is not registered\n",
2937                         ioc->name, __func__);
2938                 return 0;
2939         }
2940
2941         if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2942             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
2943                 pr_err(MPT3SAS_FMT
2944                         "%s: host_trace_buffer is not registered\n",
2945                         ioc->name, __func__);
2946                 return 0;
2947         }
2948
2949         request_data = (struct DIAG_BUFFER_START *)
2950             ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE];
2951         if ((le32_to_cpu(request_data->DiagVersion) == 0x00000000 ||
2952             le32_to_cpu(request_data->DiagVersion) == 0x01000000 ||
2953             le32_to_cpu(request_data->DiagVersion) == 0x01010000) &&
2954             le32_to_cpu(request_data->Reserved3) == 0x4742444c)
2955                 size = le32_to_cpu(request_data->Size);
2956
2957         ioc->ring_buffer_sz = size;
2958         return snprintf(buf, PAGE_SIZE, "%d\n", size);
2959 }
2960 static DEVICE_ATTR(host_trace_buffer_size, S_IRUGO,
2961         _ctl_host_trace_buffer_size_show, NULL);
2962
2963 /**
2964  * _ctl_host_trace_buffer_show - firmware ring buffer (trace only)
2965  * @cdev - pointer to embedded class device
2966  * @buf - the buffer returned
2967  *
2968  * A sysfs 'read/write' shost attribute.
2969  *
2970  * You will only be able to read 4k bytes of ring buffer at a time.
2971  * In order to read beyond 4k bytes, you will have to write out the
2972  * offset to the same attribute, it will move the pointer.
2973  */
2974 static ssize_t
2975 _ctl_host_trace_buffer_show(struct device *cdev, struct device_attribute *attr,
2976         char *buf)
2977 {
2978         struct Scsi_Host *shost = class_to_shost(cdev);
2979         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2980         void *request_data;
2981         u32 size;
2982
2983         if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) {
2984                 pr_err(MPT3SAS_FMT
2985                         "%s: host_trace_buffer is not registered\n",
2986                         ioc->name, __func__);
2987                 return 0;
2988         }
2989
2990         if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2991             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
2992                 pr_err(MPT3SAS_FMT
2993                         "%s: host_trace_buffer is not registered\n",
2994                         ioc->name, __func__);
2995                 return 0;
2996         }
2997
2998         if (ioc->ring_buffer_offset > ioc->ring_buffer_sz)
2999                 return 0;
3000
3001         size = ioc->ring_buffer_sz - ioc->ring_buffer_offset;
3002         size = (size >= PAGE_SIZE) ? (PAGE_SIZE - 1) : size;
3003         request_data = ioc->diag_buffer[0] + ioc->ring_buffer_offset;
3004         memcpy(buf, request_data, size);
3005         return size;
3006 }
3007
3008 static ssize_t
3009 _ctl_host_trace_buffer_store(struct device *cdev, struct device_attribute *attr,
3010         const char *buf, size_t count)
3011 {
3012         struct Scsi_Host *shost = class_to_shost(cdev);
3013         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3014         int val = 0;
3015
3016         if (sscanf(buf, "%d", &val) != 1)
3017                 return -EINVAL;
3018
3019         ioc->ring_buffer_offset = val;
3020         return strlen(buf);
3021 }
3022 static DEVICE_ATTR(host_trace_buffer, S_IRUGO | S_IWUSR,
3023         _ctl_host_trace_buffer_show, _ctl_host_trace_buffer_store);
3024
3025
3026 /*****************************************/
3027
3028 /**
3029  * _ctl_host_trace_buffer_enable_show - firmware ring buffer (trace only)
3030  * @cdev - pointer to embedded class device
3031  * @buf - the buffer returned
3032  *
3033  * A sysfs 'read/write' shost attribute.
3034  *
3035  * This is a mechnism to post/release host_trace_buffers
3036  */
3037 static ssize_t
3038 _ctl_host_trace_buffer_enable_show(struct device *cdev,
3039         struct device_attribute *attr, char *buf)
3040 {
3041         struct Scsi_Host *shost = class_to_shost(cdev);
3042         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3043
3044         if ((!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) ||
3045            ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3046             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0))
3047                 return snprintf(buf, PAGE_SIZE, "off\n");
3048         else if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3049             MPT3_DIAG_BUFFER_IS_RELEASED))
3050                 return snprintf(buf, PAGE_SIZE, "release\n");
3051         else
3052                 return snprintf(buf, PAGE_SIZE, "post\n");
3053 }
3054
3055 static ssize_t
3056 _ctl_host_trace_buffer_enable_store(struct device *cdev,
3057         struct device_attribute *attr, const char *buf, size_t count)
3058 {
3059         struct Scsi_Host *shost = class_to_shost(cdev);
3060         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3061         char str[10] = "";
3062         struct mpt3_diag_register diag_register;
3063         u8 issue_reset = 0;
3064
3065         /* don't allow post/release occurr while recovery is active */
3066         if (ioc->shost_recovery || ioc->remove_host ||
3067             ioc->pci_error_recovery || ioc->is_driver_loading)
3068                 return -EBUSY;
3069
3070         if (sscanf(buf, "%9s", str) != 1)
3071                 return -EINVAL;
3072
3073         if (!strcmp(str, "post")) {
3074                 /* exit out if host buffers are already posted */
3075                 if ((ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) &&
3076                     (ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3077                     MPT3_DIAG_BUFFER_IS_REGISTERED) &&
3078                     ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3079                     MPT3_DIAG_BUFFER_IS_RELEASED) == 0))
3080                         goto out;
3081                 memset(&diag_register, 0, sizeof(struct mpt3_diag_register));
3082                 pr_info(MPT3SAS_FMT "posting host trace buffers\n",
3083                     ioc->name);
3084                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_TRACE;
3085                 diag_register.requested_buffer_size = (1024 * 1024);
3086                 diag_register.unique_id = 0x7075900;
3087                 ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] = 0;
3088                 _ctl_diag_register_2(ioc,  &diag_register);
3089         } else if (!strcmp(str, "release")) {
3090                 /* exit out if host buffers are already released */
3091                 if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE])
3092                         goto out;
3093                 if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3094                     MPT3_DIAG_BUFFER_IS_REGISTERED) == 0)
3095                         goto out;
3096                 if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3097                     MPT3_DIAG_BUFFER_IS_RELEASED))
3098                         goto out;
3099                 pr_info(MPT3SAS_FMT "releasing host trace buffer\n",
3100                     ioc->name);
3101                 mpt3sas_send_diag_release(ioc, MPI2_DIAG_BUF_TYPE_TRACE,
3102                     &issue_reset);
3103         }
3104
3105  out:
3106         return strlen(buf);
3107 }
3108 static DEVICE_ATTR(host_trace_buffer_enable, S_IRUGO | S_IWUSR,
3109         _ctl_host_trace_buffer_enable_show,
3110         _ctl_host_trace_buffer_enable_store);
3111
3112 /*********** diagnostic trigger suppport *********************************/
3113
3114 /**
3115  * _ctl_diag_trigger_master_show - show the diag_trigger_master attribute
3116  * @cdev - pointer to embedded class device
3117  * @buf - the buffer returned
3118  *
3119  * A sysfs 'read/write' shost attribute.
3120  */
3121 static ssize_t
3122 _ctl_diag_trigger_master_show(struct device *cdev,
3123         struct device_attribute *attr, char *buf)
3124
3125 {
3126         struct Scsi_Host *shost = class_to_shost(cdev);
3127         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3128         unsigned long flags;
3129         ssize_t rc;
3130
3131         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3132         rc = sizeof(struct SL_WH_MASTER_TRIGGER_T);
3133         memcpy(buf, &ioc->diag_trigger_master, rc);
3134         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3135         return rc;
3136 }
3137
3138 /**
3139  * _ctl_diag_trigger_master_store - store the diag_trigger_master attribute
3140  * @cdev - pointer to embedded class device
3141  * @buf - the buffer returned
3142  *
3143  * A sysfs 'read/write' shost attribute.
3144  */
3145 static ssize_t
3146 _ctl_diag_trigger_master_store(struct device *cdev,
3147         struct device_attribute *attr, const char *buf, size_t count)
3148
3149 {
3150         struct Scsi_Host *shost = class_to_shost(cdev);
3151         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3152         unsigned long flags;
3153         ssize_t rc;
3154
3155         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3156         rc = min(sizeof(struct SL_WH_MASTER_TRIGGER_T), count);
3157         memset(&ioc->diag_trigger_master, 0,
3158             sizeof(struct SL_WH_MASTER_TRIGGER_T));
3159         memcpy(&ioc->diag_trigger_master, buf, rc);
3160         ioc->diag_trigger_master.MasterData |=
3161             (MASTER_TRIGGER_FW_FAULT + MASTER_TRIGGER_ADAPTER_RESET);
3162         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3163         return rc;
3164 }
3165 static DEVICE_ATTR(diag_trigger_master, S_IRUGO | S_IWUSR,
3166         _ctl_diag_trigger_master_show, _ctl_diag_trigger_master_store);
3167
3168
3169 /**
3170  * _ctl_diag_trigger_event_show - show the diag_trigger_event attribute
3171  * @cdev - pointer to embedded class device
3172  * @buf - the buffer returned
3173  *
3174  * A sysfs 'read/write' shost attribute.
3175  */
3176 static ssize_t
3177 _ctl_diag_trigger_event_show(struct device *cdev,
3178         struct device_attribute *attr, char *buf)
3179 {
3180         struct Scsi_Host *shost = class_to_shost(cdev);
3181         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3182         unsigned long flags;
3183         ssize_t rc;
3184
3185         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3186         rc = sizeof(struct SL_WH_EVENT_TRIGGERS_T);
3187         memcpy(buf, &ioc->diag_trigger_event, rc);
3188         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3189         return rc;
3190 }
3191
3192 /**
3193  * _ctl_diag_trigger_event_store - store the diag_trigger_event attribute
3194  * @cdev - pointer to embedded class device
3195  * @buf - the buffer returned
3196  *
3197  * A sysfs 'read/write' shost attribute.
3198  */
3199 static ssize_t
3200 _ctl_diag_trigger_event_store(struct device *cdev,
3201         struct device_attribute *attr, const char *buf, size_t count)
3202
3203 {
3204         struct Scsi_Host *shost = class_to_shost(cdev);
3205         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3206         unsigned long flags;
3207         ssize_t sz;
3208
3209         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3210         sz = min(sizeof(struct SL_WH_EVENT_TRIGGERS_T), count);
3211         memset(&ioc->diag_trigger_event, 0,
3212             sizeof(struct SL_WH_EVENT_TRIGGERS_T));
3213         memcpy(&ioc->diag_trigger_event, buf, sz);
3214         if (ioc->diag_trigger_event.ValidEntries > NUM_VALID_ENTRIES)
3215                 ioc->diag_trigger_event.ValidEntries = NUM_VALID_ENTRIES;
3216         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3217         return sz;
3218 }
3219 static DEVICE_ATTR(diag_trigger_event, S_IRUGO | S_IWUSR,
3220         _ctl_diag_trigger_event_show, _ctl_diag_trigger_event_store);
3221
3222
3223 /**
3224  * _ctl_diag_trigger_scsi_show - show the diag_trigger_scsi attribute
3225  * @cdev - pointer to embedded class device
3226  * @buf - the buffer returned
3227  *
3228  * A sysfs 'read/write' shost attribute.
3229  */
3230 static ssize_t
3231 _ctl_diag_trigger_scsi_show(struct device *cdev,
3232         struct device_attribute *attr, char *buf)
3233 {
3234         struct Scsi_Host *shost = class_to_shost(cdev);
3235         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3236         unsigned long flags;
3237         ssize_t rc;
3238
3239         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3240         rc = sizeof(struct SL_WH_SCSI_TRIGGERS_T);
3241         memcpy(buf, &ioc->diag_trigger_scsi, rc);
3242         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3243         return rc;
3244 }
3245
3246 /**
3247  * _ctl_diag_trigger_scsi_store - store the diag_trigger_scsi attribute
3248  * @cdev - pointer to embedded class device
3249  * @buf - the buffer returned
3250  *
3251  * A sysfs 'read/write' shost attribute.
3252  */
3253 static ssize_t
3254 _ctl_diag_trigger_scsi_store(struct device *cdev,
3255         struct device_attribute *attr, const char *buf, size_t count)
3256 {
3257         struct Scsi_Host *shost = class_to_shost(cdev);
3258         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3259         unsigned long flags;
3260         ssize_t sz;
3261
3262         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3263         sz = min(sizeof(struct SL_WH_SCSI_TRIGGERS_T), count);
3264         memset(&ioc->diag_trigger_scsi, 0,
3265             sizeof(struct SL_WH_EVENT_TRIGGERS_T));
3266         memcpy(&ioc->diag_trigger_scsi, buf, sz);
3267         if (ioc->diag_trigger_scsi.ValidEntries > NUM_VALID_ENTRIES)
3268                 ioc->diag_trigger_scsi.ValidEntries = NUM_VALID_ENTRIES;
3269         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3270         return sz;
3271 }
3272 static DEVICE_ATTR(diag_trigger_scsi, S_IRUGO | S_IWUSR,
3273         _ctl_diag_trigger_scsi_show, _ctl_diag_trigger_scsi_store);
3274
3275
3276 /**
3277  * _ctl_diag_trigger_scsi_show - show the diag_trigger_mpi attribute
3278  * @cdev - pointer to embedded class device
3279  * @buf - the buffer returned
3280  *
3281  * A sysfs 'read/write' shost attribute.
3282  */
3283 static ssize_t
3284 _ctl_diag_trigger_mpi_show(struct device *cdev,
3285         struct device_attribute *attr, char *buf)
3286 {
3287         struct Scsi_Host *shost = class_to_shost(cdev);
3288         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3289         unsigned long flags;
3290         ssize_t rc;
3291
3292         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3293         rc = sizeof(struct SL_WH_MPI_TRIGGERS_T);
3294         memcpy(buf, &ioc->diag_trigger_mpi, rc);
3295         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3296         return rc;
3297 }
3298
3299 /**
3300  * _ctl_diag_trigger_mpi_store - store the diag_trigger_mpi attribute
3301  * @cdev - pointer to embedded class device
3302  * @buf - the buffer returned
3303  *
3304  * A sysfs 'read/write' shost attribute.
3305  */
3306 static ssize_t
3307 _ctl_diag_trigger_mpi_store(struct device *cdev,
3308         struct device_attribute *attr, const char *buf, size_t count)
3309 {
3310         struct Scsi_Host *shost = class_to_shost(cdev);
3311         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3312         unsigned long flags;
3313         ssize_t sz;
3314
3315         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3316         sz = min(sizeof(struct SL_WH_MPI_TRIGGERS_T), count);
3317         memset(&ioc->diag_trigger_mpi, 0,
3318             sizeof(ioc->diag_trigger_mpi));
3319         memcpy(&ioc->diag_trigger_mpi, buf, sz);
3320         if (ioc->diag_trigger_mpi.ValidEntries > NUM_VALID_ENTRIES)
3321                 ioc->diag_trigger_mpi.ValidEntries = NUM_VALID_ENTRIES;
3322         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3323         return sz;
3324 }
3325
3326 static DEVICE_ATTR(diag_trigger_mpi, S_IRUGO | S_IWUSR,
3327         _ctl_diag_trigger_mpi_show, _ctl_diag_trigger_mpi_store);
3328
3329 /*********** diagnostic trigger suppport *** END ****************************/
3330
3331 /*****************************************/
3332
3333 struct device_attribute *mpt3sas_host_attrs[] = {
3334         &dev_attr_version_fw,
3335         &dev_attr_version_bios,
3336         &dev_attr_version_mpi,
3337         &dev_attr_version_product,
3338         &dev_attr_version_nvdata_persistent,
3339         &dev_attr_version_nvdata_default,
3340         &dev_attr_board_name,
3341         &dev_attr_board_assembly,
3342         &dev_attr_board_tracer,
3343         &dev_attr_io_delay,
3344         &dev_attr_device_delay,
3345         &dev_attr_logging_level,
3346         &dev_attr_fwfault_debug,
3347         &dev_attr_fw_queue_depth,
3348         &dev_attr_host_sas_address,
3349         &dev_attr_ioc_reset_count,
3350         &dev_attr_host_trace_buffer_size,
3351         &dev_attr_host_trace_buffer,
3352         &dev_attr_host_trace_buffer_enable,
3353         &dev_attr_reply_queue_count,
3354         &dev_attr_diag_trigger_master,
3355         &dev_attr_diag_trigger_event,
3356         &dev_attr_diag_trigger_scsi,
3357         &dev_attr_diag_trigger_mpi,
3358         &dev_attr_BRM_status,
3359         NULL,
3360 };
3361
3362 /* device attributes */
3363
3364 /**
3365  * _ctl_device_sas_address_show - sas address
3366  * @cdev - pointer to embedded class device
3367  * @buf - the buffer returned
3368  *
3369  * This is the sas address for the target
3370  *
3371  * A sysfs 'read-only' shost attribute.
3372  */
3373 static ssize_t
3374 _ctl_device_sas_address_show(struct device *dev, struct device_attribute *attr,
3375         char *buf)
3376 {
3377         struct scsi_device *sdev = to_scsi_device(dev);
3378         struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3379
3380         return snprintf(buf, PAGE_SIZE, "0x%016llx\n",
3381             (unsigned long long)sas_device_priv_data->sas_target->sas_address);
3382 }
3383 static DEVICE_ATTR(sas_address, S_IRUGO, _ctl_device_sas_address_show, NULL);
3384
3385 /**
3386  * _ctl_device_handle_show - device handle
3387  * @cdev - pointer to embedded class device
3388  * @buf - the buffer returned
3389  *
3390  * This is the firmware assigned device handle
3391  *
3392  * A sysfs 'read-only' shost attribute.
3393  */
3394 static ssize_t
3395 _ctl_device_handle_show(struct device *dev, struct device_attribute *attr,
3396         char *buf)
3397 {
3398         struct scsi_device *sdev = to_scsi_device(dev);
3399         struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3400
3401         return snprintf(buf, PAGE_SIZE, "0x%04x\n",
3402             sas_device_priv_data->sas_target->handle);
3403 }
3404 static DEVICE_ATTR(sas_device_handle, S_IRUGO, _ctl_device_handle_show, NULL);
3405
3406 /**
3407  * _ctl_device_ncq_io_prio_show - send prioritized io commands to device
3408  * @dev - pointer to embedded device
3409  * @buf - the buffer returned
3410  *
3411  * A sysfs 'read/write' sdev attribute, only works with SATA
3412  */
3413 static ssize_t
3414 _ctl_device_ncq_prio_enable_show(struct device *dev,
3415                                  struct device_attribute *attr, char *buf)
3416 {
3417         struct scsi_device *sdev = to_scsi_device(dev);
3418         struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3419
3420         return snprintf(buf, PAGE_SIZE, "%d\n",
3421                         sas_device_priv_data->ncq_prio_enable);
3422 }
3423
3424 static ssize_t
3425 _ctl_device_ncq_prio_enable_store(struct device *dev,
3426                                   struct device_attribute *attr,
3427                                   const char *buf, size_t count)
3428 {
3429         struct scsi_device *sdev = to_scsi_device(dev);
3430         struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3431         bool ncq_prio_enable = 0;
3432
3433         if (kstrtobool(buf, &ncq_prio_enable))
3434                 return -EINVAL;
3435
3436         if (!scsih_ncq_prio_supp(sdev))
3437                 return -EINVAL;
3438
3439         sas_device_priv_data->ncq_prio_enable = ncq_prio_enable;
3440         return strlen(buf);
3441 }
3442 static DEVICE_ATTR(sas_ncq_prio_enable, S_IRUGO | S_IWUSR,
3443                    _ctl_device_ncq_prio_enable_show,
3444                    _ctl_device_ncq_prio_enable_store);
3445
3446 struct device_attribute *mpt3sas_dev_attrs[] = {
3447         &dev_attr_sas_address,
3448         &dev_attr_sas_device_handle,
3449         &dev_attr_sas_ncq_prio_enable,
3450         NULL,
3451 };
3452
3453 /* file operations table for mpt3ctl device */
3454 static const struct file_operations ctl_fops = {
3455         .owner = THIS_MODULE,
3456         .unlocked_ioctl = _ctl_ioctl,
3457         .poll = _ctl_poll,
3458         .fasync = _ctl_fasync,
3459 #ifdef CONFIG_COMPAT
3460         .compat_ioctl = _ctl_ioctl_compat,
3461 #endif
3462 };
3463
3464 /* file operations table for mpt2ctl device */
3465 static const struct file_operations ctl_gen2_fops = {
3466         .owner = THIS_MODULE,
3467         .unlocked_ioctl = _ctl_mpt2_ioctl,
3468         .poll = _ctl_poll,
3469         .fasync = _ctl_fasync,
3470 #ifdef CONFIG_COMPAT
3471         .compat_ioctl = _ctl_mpt2_ioctl_compat,
3472 #endif
3473 };
3474
3475 static struct miscdevice ctl_dev = {
3476         .minor  = MPT3SAS_MINOR,
3477         .name   = MPT3SAS_DEV_NAME,
3478         .fops   = &ctl_fops,
3479 };
3480
3481 static struct miscdevice gen2_ctl_dev = {
3482         .minor  = MPT2SAS_MINOR,
3483         .name   = MPT2SAS_DEV_NAME,
3484         .fops   = &ctl_gen2_fops,
3485 };
3486
3487 /**
3488  * mpt3sas_ctl_init - main entry point for ctl.
3489  *
3490  */
3491 void
3492 mpt3sas_ctl_init(ushort hbas_to_enumerate)
3493 {
3494         async_queue = NULL;
3495
3496         /* Don't register mpt3ctl ioctl device if
3497          * hbas_to_enumarate is one.
3498          */
3499         if (hbas_to_enumerate != 1)
3500                 if (misc_register(&ctl_dev) < 0)
3501                         pr_err("%s can't register misc device [minor=%d]\n",
3502                             MPT3SAS_DRIVER_NAME, MPT3SAS_MINOR);
3503
3504         /* Don't register mpt3ctl ioctl device if
3505          * hbas_to_enumarate is two.
3506          */
3507         if (hbas_to_enumerate != 2)
3508                 if (misc_register(&gen2_ctl_dev) < 0)
3509                         pr_err("%s can't register misc device [minor=%d]\n",
3510                             MPT2SAS_DRIVER_NAME, MPT2SAS_MINOR);
3511
3512         init_waitqueue_head(&ctl_poll_wait);
3513 }
3514
3515 /**
3516  * mpt3sas_ctl_exit - exit point for ctl
3517  *
3518  */
3519 void
3520 mpt3sas_ctl_exit(ushort hbas_to_enumerate)
3521 {
3522         struct MPT3SAS_ADAPTER *ioc;
3523         int i;
3524
3525         list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
3526
3527                 /* free memory associated to diag buffers */
3528                 for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
3529                         if (!ioc->diag_buffer[i])
3530                                 continue;
3531                         if (!(ioc->diag_buffer_status[i] &
3532                             MPT3_DIAG_BUFFER_IS_REGISTERED))
3533                                 continue;
3534                         if ((ioc->diag_buffer_status[i] &
3535                             MPT3_DIAG_BUFFER_IS_RELEASED))
3536                                 continue;
3537                         pci_free_consistent(ioc->pdev, ioc->diag_buffer_sz[i],
3538                         ioc->diag_buffer[i], ioc->diag_buffer_dma[i]);
3539                         ioc->diag_buffer[i] = NULL;
3540                         ioc->diag_buffer_status[i] = 0;
3541                 }
3542
3543                 kfree(ioc->event_log);
3544         }
3545         if (hbas_to_enumerate != 1)
3546                 misc_deregister(&ctl_dev);
3547         if (hbas_to_enumerate != 2)
3548                 misc_deregister(&gen2_ctl_dev);
3549 }