1 /*
2  * Management Module Support for MPT (Message Passing Technology) based
3  * controllers
4  *
5  * This code is based on drivers/scsi/mpt3sas/mpt3sas_ctl.c
6  * Copyright (C) 2012-2014  LSI Corporation
7  * Copyright (C) 2013-2014 Avago Technologies
8  *  (mailto: MPT-FusionLinux.pdl@avagotech.com)
9  *
10  * This program is free software; you can redistribute it and/or
11  * modify it under the terms of the GNU General Public License
12  * as published by the Free Software Foundation; either version 2
13  * of the License, or (at your option) any later version.
14  *
15  * This program is distributed in the hope that it will be useful,
16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18  * GNU General Public License for more details.
19  *
20  * NO WARRANTY
21  * THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR
22  * CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT
23  * LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT,
24  * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is
25  * solely responsible for determining the appropriateness of using and
26  * distributing the Program and assumes all risks associated with its
27  * exercise of rights under this Agreement, including but not limited to
28  * the risks and costs of program errors, damage to or loss of data,
29  * programs or equipment, and unavailability or interruption of operations.
30 
31  * DISCLAIMER OF LIABILITY
32  * NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY
33  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
34  * DAMAGES (INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND
35  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
36  * TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
37  * USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED
38  * HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES
39 
40  * You should have received a copy of the GNU General Public License
41  * along with this program; if not, write to the Free Software
42  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301,
43  * USA.
44  */
45 
46 #include <linux/kernel.h>
47 #include <linux/module.h>
48 #include <linux/errno.h>
49 #include <linux/init.h>
50 #include <linux/slab.h>
51 #include <linux/types.h>
52 #include <linux/pci.h>
53 #include <linux/delay.h>
54 #include <linux/compat.h>
55 #include <linux/poll.h>
56 
57 #include <linux/io.h>
58 #include <linux/uaccess.h>
59 
60 #include "mpt3sas_base.h"
61 #include "mpt3sas_ctl.h"
62 
63 
64 static struct fasync_struct *async_queue;
65 static DECLARE_WAIT_QUEUE_HEAD(ctl_poll_wait);
66 
67 
68 /**
69  * enum block_state - blocking state
70  * @NON_BLOCKING: non blocking
71  * @BLOCKING: blocking
72  *
73  * These states are for ioctls that need to wait for a response
74  * from firmware, so they probably require sleep.
75  */
76 enum block_state {
77 	NON_BLOCKING,
78 	BLOCKING,
79 };
80 
81 /**
82  * _ctl_sas_device_find_by_handle - sas device search
83  * @ioc: per adapter object
84  * @handle: sas device handle (assigned by firmware)
85  * Context: Calling function should acquire ioc->sas_device_lock
86  *
87  * This searches for sas_device based on sas_address, then return sas_device
88  * object.
89  */
90 static struct _sas_device *
91 _ctl_sas_device_find_by_handle(struct MPT3SAS_ADAPTER *ioc, u16 handle)
92 {
93 	struct _sas_device *sas_device, *r;
94 
95 	r = NULL;
96 	list_for_each_entry(sas_device, &ioc->sas_device_list, list) {
97 		if (sas_device->handle != handle)
98 			continue;
99 		r = sas_device;
100 		goto out;
101 	}
102 
103  out:
104 	return r;
105 }
106 
107 /**
108  * _ctl_display_some_debug - debug routine
109  * @ioc: per adapter object
110  * @smid: system request message index
111  * @calling_function_name: string pass from calling function
112  * @mpi_reply: reply message frame
113  * Context: none.
114  *
115  * Function for displaying debug info helpful when debugging issues
116  * in this module.
117  */
118 static void
119 _ctl_display_some_debug(struct MPT3SAS_ADAPTER *ioc, u16 smid,
120 	char *calling_function_name, MPI2DefaultReply_t *mpi_reply)
121 {
122 	Mpi2ConfigRequest_t *mpi_request;
123 	char *desc = NULL;
124 
125 	if (!(ioc->logging_level & MPT_DEBUG_IOCTL))
126 		return;
127 
128 	mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
129 	switch (mpi_request->Function) {
130 	case MPI2_FUNCTION_SCSI_IO_REQUEST:
131 	{
132 		Mpi2SCSIIORequest_t *scsi_request =
133 		    (Mpi2SCSIIORequest_t *)mpi_request;
134 
135 		snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
136 		    "scsi_io, cmd(0x%02x), cdb_len(%d)",
137 		    scsi_request->CDB.CDB32[0],
138 		    le16_to_cpu(scsi_request->IoFlags) & 0xF);
139 		desc = ioc->tmp_string;
140 		break;
141 	}
142 	case MPI2_FUNCTION_SCSI_TASK_MGMT:
143 		desc = "task_mgmt";
144 		break;
145 	case MPI2_FUNCTION_IOC_INIT:
146 		desc = "ioc_init";
147 		break;
148 	case MPI2_FUNCTION_IOC_FACTS:
149 		desc = "ioc_facts";
150 		break;
151 	case MPI2_FUNCTION_CONFIG:
152 	{
153 		Mpi2ConfigRequest_t *config_request =
154 		    (Mpi2ConfigRequest_t *)mpi_request;
155 
156 		snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
157 		    "config, type(0x%02x), ext_type(0x%02x), number(%d)",
158 		    (config_request->Header.PageType &
159 		     MPI2_CONFIG_PAGETYPE_MASK), config_request->ExtPageType,
160 		    config_request->Header.PageNumber);
161 		desc = ioc->tmp_string;
162 		break;
163 	}
164 	case MPI2_FUNCTION_PORT_FACTS:
165 		desc = "port_facts";
166 		break;
167 	case MPI2_FUNCTION_PORT_ENABLE:
168 		desc = "port_enable";
169 		break;
170 	case MPI2_FUNCTION_EVENT_NOTIFICATION:
171 		desc = "event_notification";
172 		break;
173 	case MPI2_FUNCTION_FW_DOWNLOAD:
174 		desc = "fw_download";
175 		break;
176 	case MPI2_FUNCTION_FW_UPLOAD:
177 		desc = "fw_upload";
178 		break;
179 	case MPI2_FUNCTION_RAID_ACTION:
180 		desc = "raid_action";
181 		break;
182 	case MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
183 	{
184 		Mpi2SCSIIORequest_t *scsi_request =
185 		    (Mpi2SCSIIORequest_t *)mpi_request;
186 
187 		snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
188 		    "raid_pass, cmd(0x%02x), cdb_len(%d)",
189 		    scsi_request->CDB.CDB32[0],
190 		    le16_to_cpu(scsi_request->IoFlags) & 0xF);
191 		desc = ioc->tmp_string;
192 		break;
193 	}
194 	case MPI2_FUNCTION_SAS_IO_UNIT_CONTROL:
195 		desc = "sas_iounit_cntl";
196 		break;
197 	case MPI2_FUNCTION_SATA_PASSTHROUGH:
198 		desc = "sata_pass";
199 		break;
200 	case MPI2_FUNCTION_DIAG_BUFFER_POST:
201 		desc = "diag_buffer_post";
202 		break;
203 	case MPI2_FUNCTION_DIAG_RELEASE:
204 		desc = "diag_release";
205 		break;
206 	case MPI2_FUNCTION_SMP_PASSTHROUGH:
207 		desc = "smp_passthrough";
208 		break;
209 	}
210 
211 	if (!desc)
212 		return;
213 
214 	pr_info(MPT3SAS_FMT "%s: %s, smid(%d)\n",
215 	    ioc->name, calling_function_name, desc, smid);
216 
217 	if (!mpi_reply)
218 		return;
219 
220 	if (mpi_reply->IOCStatus || mpi_reply->IOCLogInfo)
221 		pr_info(MPT3SAS_FMT
222 		    "\tiocstatus(0x%04x), loginfo(0x%08x)\n",
223 		    ioc->name, le16_to_cpu(mpi_reply->IOCStatus),
224 		    le32_to_cpu(mpi_reply->IOCLogInfo));
225 
226 	if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
227 	    mpi_request->Function ==
228 	    MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
229 		Mpi2SCSIIOReply_t *scsi_reply =
230 		    (Mpi2SCSIIOReply_t *)mpi_reply;
231 		struct _sas_device *sas_device = NULL;
232 		unsigned long flags;
233 
234 		spin_lock_irqsave(&ioc->sas_device_lock, flags);
235 		sas_device = _ctl_sas_device_find_by_handle(ioc,
236 		    le16_to_cpu(scsi_reply->DevHandle));
237 		if (sas_device) {
238 			pr_warn(MPT3SAS_FMT "\tsas_address(0x%016llx), phy(%d)\n",
239 				ioc->name, (unsigned long long)
240 			    sas_device->sas_address, sas_device->phy);
241 			pr_warn(MPT3SAS_FMT
242 			    "\tenclosure_logical_id(0x%016llx), slot(%d)\n",
243 			    ioc->name, (unsigned long long)
244 			    sas_device->enclosure_logical_id, sas_device->slot);
245 		}
246 		spin_unlock_irqrestore(&ioc->sas_device_lock, flags);
247 		if (scsi_reply->SCSIState || scsi_reply->SCSIStatus)
248 			pr_info(MPT3SAS_FMT
249 			    "\tscsi_state(0x%02x), scsi_status"
250 			    "(0x%02x)\n", ioc->name,
251 			    scsi_reply->SCSIState,
252 			    scsi_reply->SCSIStatus);
253 	}
254 }
255 
256 /**
257  * mpt3sas_ctl_done - ctl module completion routine
258  * @ioc: per adapter object
259  * @smid: system request message index
260  * @msix_index: MSIX table index supplied by the OS
261  * @reply: reply message frame(lower 32bit addr)
262  * Context: none.
263  *
264  * The callback handler when using ioc->ctl_cb_idx.
265  *
266  * Return 1 meaning mf should be freed from _base_interrupt
267  *        0 means the mf is freed from this function.
268  */
269 u8
270 mpt3sas_ctl_done(struct MPT3SAS_ADAPTER *ioc, u16 smid, u8 msix_index,
271 	u32 reply)
272 {
273 	MPI2DefaultReply_t *mpi_reply;
274 	Mpi2SCSIIOReply_t *scsiio_reply;
275 	const void *sense_data;
276 	u32 sz;
277 
278 	if (ioc->ctl_cmds.status == MPT3_CMD_NOT_USED)
279 		return 1;
280 	if (ioc->ctl_cmds.smid != smid)
281 		return 1;
282 	ioc->ctl_cmds.status |= MPT3_CMD_COMPLETE;
283 	mpi_reply = mpt3sas_base_get_reply_virt_addr(ioc, reply);
284 	if (mpi_reply) {
285 		memcpy(ioc->ctl_cmds.reply, mpi_reply, mpi_reply->MsgLength*4);
286 		ioc->ctl_cmds.status |= MPT3_CMD_REPLY_VALID;
287 		/* get sense data */
288 		if (mpi_reply->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
289 		    mpi_reply->Function ==
290 		    MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
291 			scsiio_reply = (Mpi2SCSIIOReply_t *)mpi_reply;
292 			if (scsiio_reply->SCSIState &
293 			    MPI2_SCSI_STATE_AUTOSENSE_VALID) {
294 				sz = min_t(u32, SCSI_SENSE_BUFFERSIZE,
295 				    le32_to_cpu(scsiio_reply->SenseCount));
296 				sense_data = mpt3sas_base_get_sense_buffer(ioc,
297 				    smid);
298 				memcpy(ioc->ctl_cmds.sense, sense_data, sz);
299 			}
300 		}
301 	}
302 	_ctl_display_some_debug(ioc, smid, "ctl_done", mpi_reply);
303 	ioc->ctl_cmds.status &= ~MPT3_CMD_PENDING;
304 	complete(&ioc->ctl_cmds.done);
305 	return 1;
306 }
307 
308 /**
309  * _ctl_check_event_type - determines when an event needs logging
310  * @ioc: per adapter object
311  * @event: firmware event
312  *
313  * The bitmask in ioc->event_type[] indicates which events should be
314  * be saved in the driver event_log.  This bitmask is set by application.
315  *
316  * Returns 1 when event should be captured, or zero means no match.
317  */
318 static int
319 _ctl_check_event_type(struct MPT3SAS_ADAPTER *ioc, u16 event)
320 {
321 	u16 i;
322 	u32 desired_event;
323 
324 	if (event >= 128 || !event || !ioc->event_log)
325 		return 0;
326 
327 	desired_event = (1 << (event % 32));
328 	if (!desired_event)
329 		desired_event = 1;
330 	i = event / 32;
331 	return desired_event & ioc->event_type[i];
332 }
333 
334 /**
335  * mpt3sas_ctl_add_to_event_log - add event
336  * @ioc: per adapter object
337  * @mpi_reply: reply message frame
338  *
339  * Return nothing.
340  */
341 void
342 mpt3sas_ctl_add_to_event_log(struct MPT3SAS_ADAPTER *ioc,
343 	Mpi2EventNotificationReply_t *mpi_reply)
344 {
345 	struct MPT3_IOCTL_EVENTS *event_log;
346 	u16 event;
347 	int i;
348 	u32 sz, event_data_sz;
349 	u8 send_aen = 0;
350 
351 	if (!ioc->event_log)
352 		return;
353 
354 	event = le16_to_cpu(mpi_reply->Event);
355 
356 	if (_ctl_check_event_type(ioc, event)) {
357 
358 		/* insert entry into circular event_log */
359 		i = ioc->event_context % MPT3SAS_CTL_EVENT_LOG_SIZE;
360 		event_log = ioc->event_log;
361 		event_log[i].event = event;
362 		event_log[i].context = ioc->event_context++;
363 
364 		event_data_sz = le16_to_cpu(mpi_reply->EventDataLength)*4;
365 		sz = min_t(u32, event_data_sz, MPT3_EVENT_DATA_SIZE);
366 		memset(event_log[i].data, 0, MPT3_EVENT_DATA_SIZE);
367 		memcpy(event_log[i].data, mpi_reply->EventData, sz);
368 		send_aen = 1;
369 	}
370 
371 	/* This aen_event_read_flag flag is set until the
372 	 * application has read the event log.
373 	 * For MPI2_EVENT_LOG_ENTRY_ADDED, we always notify.
374 	 */
375 	if (event == MPI2_EVENT_LOG_ENTRY_ADDED ||
376 	    (send_aen && !ioc->aen_event_read_flag)) {
377 		ioc->aen_event_read_flag = 1;
378 		wake_up_interruptible(&ctl_poll_wait);
379 		if (async_queue)
380 			kill_fasync(&async_queue, SIGIO, POLL_IN);
381 	}
382 }
383 
384 /**
385  * mpt3sas_ctl_event_callback - firmware event handler (called at ISR time)
386  * @ioc: per adapter object
387  * @msix_index: MSIX table index supplied by the OS
388  * @reply: reply message frame(lower 32bit addr)
389  * Context: interrupt.
390  *
391  * This function merely adds a new work task into ioc->firmware_event_thread.
392  * The tasks are worked from _firmware_event_work in user context.
393  *
394  * Return 1 meaning mf should be freed from _base_interrupt
395  *        0 means the mf is freed from this function.
396  */
397 u8
398 mpt3sas_ctl_event_callback(struct MPT3SAS_ADAPTER *ioc, u8 msix_index,
399 	u32 reply)
400 {
401 	Mpi2EventNotificationReply_t *mpi_reply;
402 
403 	mpi_reply = mpt3sas_base_get_reply_virt_addr(ioc, reply);
404 	mpt3sas_ctl_add_to_event_log(ioc, mpi_reply);
405 	return 1;
406 }
407 
408 /**
409  * _ctl_verify_adapter - validates ioc_number passed from application
410  * @ioc: per adapter object
411  * @iocpp: The ioc pointer is returned in this.
412  * @mpi_version: will be MPI2_VERSION for mpt2ctl ioctl device &
413  *		MPI25_VERSION for mpt3ctl ioctl device.
414  *
415  * Return (-1) means error, else ioc_number.
416  */
417 static int
418 _ctl_verify_adapter(int ioc_number, struct MPT3SAS_ADAPTER **iocpp,
419 							int mpi_version)
420 {
421 	struct MPT3SAS_ADAPTER *ioc;
422 	/* global ioc lock to protect controller on list operations */
423 	spin_lock(&gioc_lock);
424 	list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
425 		if (ioc->id != ioc_number)
426 			continue;
427 		/* Check whether this ioctl command is from right
428 		 * ioctl device or not, if not continue the search.
429 		 */
430 		if (ioc->hba_mpi_version_belonged != mpi_version)
431 			continue;
432 		spin_unlock(&gioc_lock);
433 		*iocpp = ioc;
434 		return ioc_number;
435 	}
436 	spin_unlock(&gioc_lock);
437 	*iocpp = NULL;
438 	return -1;
439 }
440 
441 /**
442  * mpt3sas_ctl_reset_handler - reset callback handler (for ctl)
443  * @ioc: per adapter object
444  * @reset_phase: phase
445  *
446  * The handler for doing any required cleanup or initialization.
447  *
448  * The reset phase can be MPT3_IOC_PRE_RESET, MPT3_IOC_AFTER_RESET,
449  * MPT3_IOC_DONE_RESET
450  */
451 void
452 mpt3sas_ctl_reset_handler(struct MPT3SAS_ADAPTER *ioc, int reset_phase)
453 {
454 	int i;
455 	u8 issue_reset;
456 
457 	switch (reset_phase) {
458 	case MPT3_IOC_PRE_RESET:
459 		dtmprintk(ioc, pr_info(MPT3SAS_FMT
460 			"%s: MPT3_IOC_PRE_RESET\n", ioc->name, __func__));
461 		for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
462 			if (!(ioc->diag_buffer_status[i] &
463 			    MPT3_DIAG_BUFFER_IS_REGISTERED))
464 				continue;
465 			if ((ioc->diag_buffer_status[i] &
466 			    MPT3_DIAG_BUFFER_IS_RELEASED))
467 				continue;
468 			mpt3sas_send_diag_release(ioc, i, &issue_reset);
469 		}
470 		break;
471 	case MPT3_IOC_AFTER_RESET:
472 		dtmprintk(ioc, pr_info(MPT3SAS_FMT
473 			"%s: MPT3_IOC_AFTER_RESET\n", ioc->name, __func__));
474 		if (ioc->ctl_cmds.status & MPT3_CMD_PENDING) {
475 			ioc->ctl_cmds.status |= MPT3_CMD_RESET;
476 			mpt3sas_base_free_smid(ioc, ioc->ctl_cmds.smid);
477 			complete(&ioc->ctl_cmds.done);
478 		}
479 		break;
480 	case MPT3_IOC_DONE_RESET:
481 		dtmprintk(ioc, pr_info(MPT3SAS_FMT
482 			"%s: MPT3_IOC_DONE_RESET\n", ioc->name, __func__));
483 
484 		for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
485 			if (!(ioc->diag_buffer_status[i] &
486 			    MPT3_DIAG_BUFFER_IS_REGISTERED))
487 				continue;
488 			if ((ioc->diag_buffer_status[i] &
489 			    MPT3_DIAG_BUFFER_IS_RELEASED))
490 				continue;
491 			ioc->diag_buffer_status[i] |=
492 			    MPT3_DIAG_BUFFER_IS_DIAG_RESET;
493 		}
494 		break;
495 	}
496 }
497 
498 /**
499  * _ctl_fasync -
500  * @fd -
501  * @filep -
502  * @mode -
503  *
504  * Called when application request fasyn callback handler.
505  */
506 int
507 _ctl_fasync(int fd, struct file *filep, int mode)
508 {
509 	return fasync_helper(fd, filep, mode, &async_queue);
510 }
511 
512 /**
513  * _ctl_poll -
514  * @file -
515  * @wait -
516  *
517  */
518 unsigned int
519 _ctl_poll(struct file *filep, poll_table *wait)
520 {
521 	struct MPT3SAS_ADAPTER *ioc;
522 
523 	poll_wait(filep, &ctl_poll_wait, wait);
524 
525 	/* global ioc lock to protect controller on list operations */
526 	spin_lock(&gioc_lock);
527 	list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
528 		if (ioc->aen_event_read_flag) {
529 			spin_unlock(&gioc_lock);
530 			return POLLIN | POLLRDNORM;
531 		}
532 	}
533 	spin_unlock(&gioc_lock);
534 	return 0;
535 }
536 
537 /**
538  * _ctl_set_task_mid - assign an active smid to tm request
539  * @ioc: per adapter object
540  * @karg - (struct mpt3_ioctl_command)
541  * @tm_request - pointer to mf from user space
542  *
543  * Returns 0 when an smid if found, else fail.
544  * during failure, the reply frame is filled.
545  */
546 static int
547 _ctl_set_task_mid(struct MPT3SAS_ADAPTER *ioc, struct mpt3_ioctl_command *karg,
548 	Mpi2SCSITaskManagementRequest_t *tm_request)
549 {
550 	u8 found = 0;
551 	u16 i;
552 	u16 handle;
553 	struct scsi_cmnd *scmd;
554 	struct MPT3SAS_DEVICE *priv_data;
555 	unsigned long flags;
556 	Mpi2SCSITaskManagementReply_t *tm_reply;
557 	u32 sz;
558 	u32 lun;
559 	char *desc = NULL;
560 
561 	if (tm_request->TaskType == MPI2_SCSITASKMGMT_TASKTYPE_ABORT_TASK)
562 		desc = "abort_task";
563 	else if (tm_request->TaskType == MPI2_SCSITASKMGMT_TASKTYPE_QUERY_TASK)
564 		desc = "query_task";
565 	else
566 		return 0;
567 
568 	lun = scsilun_to_int((struct scsi_lun *)tm_request->LUN);
569 
570 	handle = le16_to_cpu(tm_request->DevHandle);
571 	spin_lock_irqsave(&ioc->scsi_lookup_lock, flags);
572 	for (i = ioc->scsiio_depth; i && !found; i--) {
573 		scmd = ioc->scsi_lookup[i - 1].scmd;
574 		if (scmd == NULL || scmd->device == NULL ||
575 		    scmd->device->hostdata == NULL)
576 			continue;
577 		if (lun != scmd->device->lun)
578 			continue;
579 		priv_data = scmd->device->hostdata;
580 		if (priv_data->sas_target == NULL)
581 			continue;
582 		if (priv_data->sas_target->handle != handle)
583 			continue;
584 		tm_request->TaskMID = cpu_to_le16(ioc->scsi_lookup[i - 1].smid);
585 		found = 1;
586 	}
587 	spin_unlock_irqrestore(&ioc->scsi_lookup_lock, flags);
588 
589 	if (!found) {
590 		dctlprintk(ioc, pr_info(MPT3SAS_FMT
591 			"%s: handle(0x%04x), lun(%d), no active mid!!\n",
592 			ioc->name,
593 		    desc, le16_to_cpu(tm_request->DevHandle), lun));
594 		tm_reply = ioc->ctl_cmds.reply;
595 		tm_reply->DevHandle = tm_request->DevHandle;
596 		tm_reply->Function = MPI2_FUNCTION_SCSI_TASK_MGMT;
597 		tm_reply->TaskType = tm_request->TaskType;
598 		tm_reply->MsgLength = sizeof(Mpi2SCSITaskManagementReply_t)/4;
599 		tm_reply->VP_ID = tm_request->VP_ID;
600 		tm_reply->VF_ID = tm_request->VF_ID;
601 		sz = min_t(u32, karg->max_reply_bytes, ioc->reply_sz);
602 		if (copy_to_user(karg->reply_frame_buf_ptr, ioc->ctl_cmds.reply,
603 		    sz))
604 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
605 			    __LINE__, __func__);
606 		return 1;
607 	}
608 
609 	dctlprintk(ioc, pr_info(MPT3SAS_FMT
610 		"%s: handle(0x%04x), lun(%d), task_mid(%d)\n", ioc->name,
611 	    desc, le16_to_cpu(tm_request->DevHandle), lun,
612 	     le16_to_cpu(tm_request->TaskMID)));
613 	return 0;
614 }
615 
616 /**
617  * _ctl_do_mpt_command - main handler for MPT3COMMAND opcode
618  * @ioc: per adapter object
619  * @karg - (struct mpt3_ioctl_command)
620  * @mf - pointer to mf in user space
621  */
622 static long
623 _ctl_do_mpt_command(struct MPT3SAS_ADAPTER *ioc, struct mpt3_ioctl_command karg,
624 	void __user *mf)
625 {
626 	MPI2RequestHeader_t *mpi_request = NULL, *request;
627 	MPI2DefaultReply_t *mpi_reply;
628 	u32 ioc_state;
629 	u16 ioc_status;
630 	u16 smid;
631 	unsigned long timeout, timeleft;
632 	u8 issue_reset;
633 	u32 sz;
634 	void *psge;
635 	void *data_out = NULL;
636 	dma_addr_t data_out_dma = 0;
637 	size_t data_out_sz = 0;
638 	void *data_in = NULL;
639 	dma_addr_t data_in_dma = 0;
640 	size_t data_in_sz = 0;
641 	long ret;
642 	u16 wait_state_count;
643 
644 	issue_reset = 0;
645 
646 	if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
647 		pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
648 		    ioc->name, __func__);
649 		ret = -EAGAIN;
650 		goto out;
651 	}
652 
653 	wait_state_count = 0;
654 	ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
655 	while (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
656 		if (wait_state_count++ == 10) {
657 			pr_err(MPT3SAS_FMT
658 			    "%s: failed due to ioc not operational\n",
659 			    ioc->name, __func__);
660 			ret = -EFAULT;
661 			goto out;
662 		}
663 		ssleep(1);
664 		ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
665 		pr_info(MPT3SAS_FMT
666 			"%s: waiting for operational state(count=%d)\n",
667 			ioc->name,
668 		    __func__, wait_state_count);
669 	}
670 	if (wait_state_count)
671 		pr_info(MPT3SAS_FMT "%s: ioc is operational\n",
672 		    ioc->name, __func__);
673 
674 	mpi_request = kzalloc(ioc->request_sz, GFP_KERNEL);
675 	if (!mpi_request) {
676 		pr_err(MPT3SAS_FMT
677 			"%s: failed obtaining a memory for mpi_request\n",
678 			ioc->name, __func__);
679 		ret = -ENOMEM;
680 		goto out;
681 	}
682 
683 	/* Check for overflow and wraparound */
684 	if (karg.data_sge_offset * 4 > ioc->request_sz ||
685 	    karg.data_sge_offset > (UINT_MAX / 4)) {
686 		ret = -EINVAL;
687 		goto out;
688 	}
689 
690 	/* copy in request message frame from user */
691 	if (copy_from_user(mpi_request, mf, karg.data_sge_offset*4)) {
692 		pr_err("failure at %s:%d/%s()!\n", __FILE__, __LINE__,
693 		    __func__);
694 		ret = -EFAULT;
695 		goto out;
696 	}
697 
698 	if (mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT) {
699 		smid = mpt3sas_base_get_smid_hpr(ioc, ioc->ctl_cb_idx);
700 		if (!smid) {
701 			pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
702 			    ioc->name, __func__);
703 			ret = -EAGAIN;
704 			goto out;
705 		}
706 	} else {
707 
708 		smid = mpt3sas_base_get_smid_scsiio(ioc, ioc->ctl_cb_idx, NULL);
709 		if (!smid) {
710 			pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
711 			    ioc->name, __func__);
712 			ret = -EAGAIN;
713 			goto out;
714 		}
715 	}
716 
717 	ret = 0;
718 	ioc->ctl_cmds.status = MPT3_CMD_PENDING;
719 	memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
720 	request = mpt3sas_base_get_msg_frame(ioc, smid);
721 	memcpy(request, mpi_request, karg.data_sge_offset*4);
722 	ioc->ctl_cmds.smid = smid;
723 	data_out_sz = karg.data_out_size;
724 	data_in_sz = karg.data_in_size;
725 
726 	if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
727 	    mpi_request->Function == MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
728 		if (!le16_to_cpu(mpi_request->FunctionDependent1) ||
729 		    le16_to_cpu(mpi_request->FunctionDependent1) >
730 		    ioc->facts.MaxDevHandle) {
731 			ret = -EINVAL;
732 			mpt3sas_base_free_smid(ioc, smid);
733 			goto out;
734 		}
735 	}
736 
737 	/* obtain dma-able memory for data transfer */
738 	if (data_out_sz) /* WRITE */ {
739 		data_out = pci_alloc_consistent(ioc->pdev, data_out_sz,
740 		    &data_out_dma);
741 		if (!data_out) {
742 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
743 			    __LINE__, __func__);
744 			ret = -ENOMEM;
745 			mpt3sas_base_free_smid(ioc, smid);
746 			goto out;
747 		}
748 		if (copy_from_user(data_out, karg.data_out_buf_ptr,
749 			data_out_sz)) {
750 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
751 			    __LINE__, __func__);
752 			ret =  -EFAULT;
753 			mpt3sas_base_free_smid(ioc, smid);
754 			goto out;
755 		}
756 	}
757 
758 	if (data_in_sz) /* READ */ {
759 		data_in = pci_alloc_consistent(ioc->pdev, data_in_sz,
760 		    &data_in_dma);
761 		if (!data_in) {
762 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
763 			    __LINE__, __func__);
764 			ret = -ENOMEM;
765 			mpt3sas_base_free_smid(ioc, smid);
766 			goto out;
767 		}
768 	}
769 
770 	psge = (void *)request + (karg.data_sge_offset*4);
771 
772 	/* send command to firmware */
773 	_ctl_display_some_debug(ioc, smid, "ctl_request", NULL);
774 
775 	init_completion(&ioc->ctl_cmds.done);
776 	switch (mpi_request->Function) {
777 	case MPI2_FUNCTION_SCSI_IO_REQUEST:
778 	case MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
779 	{
780 		Mpi2SCSIIORequest_t *scsiio_request =
781 		    (Mpi2SCSIIORequest_t *)request;
782 		scsiio_request->SenseBufferLength = SCSI_SENSE_BUFFERSIZE;
783 		scsiio_request->SenseBufferLowAddress =
784 		    mpt3sas_base_get_sense_buffer_dma(ioc, smid);
785 		memset(ioc->ctl_cmds.sense, 0, SCSI_SENSE_BUFFERSIZE);
786 		ioc->build_sg(ioc, psge, data_out_dma, data_out_sz,
787 		    data_in_dma, data_in_sz);
788 
789 		if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST)
790 			mpt3sas_base_put_smid_scsi_io(ioc, smid,
791 			    le16_to_cpu(mpi_request->FunctionDependent1));
792 		else
793 			mpt3sas_base_put_smid_default(ioc, smid);
794 		break;
795 	}
796 	case MPI2_FUNCTION_SCSI_TASK_MGMT:
797 	{
798 		Mpi2SCSITaskManagementRequest_t *tm_request =
799 		    (Mpi2SCSITaskManagementRequest_t *)request;
800 
801 		dtmprintk(ioc, pr_info(MPT3SAS_FMT
802 			"TASK_MGMT: handle(0x%04x), task_type(0x%02x)\n",
803 			ioc->name,
804 		    le16_to_cpu(tm_request->DevHandle), tm_request->TaskType));
805 
806 		if (tm_request->TaskType ==
807 		    MPI2_SCSITASKMGMT_TASKTYPE_ABORT_TASK ||
808 		    tm_request->TaskType ==
809 		    MPI2_SCSITASKMGMT_TASKTYPE_QUERY_TASK) {
810 			if (_ctl_set_task_mid(ioc, &karg, tm_request)) {
811 				mpt3sas_base_free_smid(ioc, smid);
812 				goto out;
813 			}
814 		}
815 
816 		mpt3sas_scsih_set_tm_flag(ioc, le16_to_cpu(
817 		    tm_request->DevHandle));
818 		ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
819 		    data_in_dma, data_in_sz);
820 		mpt3sas_base_put_smid_hi_priority(ioc, smid);
821 		break;
822 	}
823 	case MPI2_FUNCTION_SMP_PASSTHROUGH:
824 	{
825 		Mpi2SmpPassthroughRequest_t *smp_request =
826 		    (Mpi2SmpPassthroughRequest_t *)mpi_request;
827 		u8 *data;
828 
829 		/* ioc determines which port to use */
830 		smp_request->PhysicalPort = 0xFF;
831 		if (smp_request->PassthroughFlags &
832 		    MPI2_SMP_PT_REQ_PT_FLAGS_IMMEDIATE)
833 			data = (u8 *)&smp_request->SGL;
834 		else {
835 			if (unlikely(data_out == NULL)) {
836 				pr_err("failure at %s:%d/%s()!\n",
837 				    __FILE__, __LINE__, __func__);
838 				mpt3sas_base_free_smid(ioc, smid);
839 				ret = -EINVAL;
840 				goto out;
841 			}
842 			data = data_out;
843 		}
844 
845 		if (data[1] == 0x91 && (data[10] == 1 || data[10] == 2)) {
846 			ioc->ioc_link_reset_in_progress = 1;
847 			ioc->ignore_loginfos = 1;
848 		}
849 		ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
850 		    data_in_sz);
851 		mpt3sas_base_put_smid_default(ioc, smid);
852 		break;
853 	}
854 	case MPI2_FUNCTION_SATA_PASSTHROUGH:
855 	case MPI2_FUNCTION_FW_DOWNLOAD:
856 	case MPI2_FUNCTION_FW_UPLOAD:
857 	{
858 		ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
859 		    data_in_sz);
860 		mpt3sas_base_put_smid_default(ioc, smid);
861 		break;
862 	}
863 	case MPI2_FUNCTION_TOOLBOX:
864 	{
865 		Mpi2ToolboxCleanRequest_t *toolbox_request =
866 			(Mpi2ToolboxCleanRequest_t *)mpi_request;
867 
868 		if (toolbox_request->Tool == MPI2_TOOLBOX_DIAGNOSTIC_CLI_TOOL) {
869 			ioc->build_sg(ioc, psge, data_out_dma, data_out_sz,
870 				data_in_dma, data_in_sz);
871 		} else {
872 			ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
873 				data_in_dma, data_in_sz);
874 		}
875 		mpt3sas_base_put_smid_default(ioc, smid);
876 		break;
877 	}
878 	case MPI2_FUNCTION_SAS_IO_UNIT_CONTROL:
879 	{
880 		Mpi2SasIoUnitControlRequest_t *sasiounit_request =
881 		    (Mpi2SasIoUnitControlRequest_t *)mpi_request;
882 
883 		if (sasiounit_request->Operation == MPI2_SAS_OP_PHY_HARD_RESET
884 		    || sasiounit_request->Operation ==
885 		    MPI2_SAS_OP_PHY_LINK_RESET) {
886 			ioc->ioc_link_reset_in_progress = 1;
887 			ioc->ignore_loginfos = 1;
888 		}
889 		/* drop to default case for posting the request */
890 	}
891 	default:
892 		ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
893 		    data_in_dma, data_in_sz);
894 		mpt3sas_base_put_smid_default(ioc, smid);
895 		break;
896 	}
897 
898 	if (karg.timeout < MPT3_IOCTL_DEFAULT_TIMEOUT)
899 		timeout = MPT3_IOCTL_DEFAULT_TIMEOUT;
900 	else
901 		timeout = karg.timeout;
902 	timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
903 	    timeout*HZ);
904 	if (mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT) {
905 		Mpi2SCSITaskManagementRequest_t *tm_request =
906 		    (Mpi2SCSITaskManagementRequest_t *)mpi_request;
907 		mpt3sas_scsih_clear_tm_flag(ioc, le16_to_cpu(
908 		    tm_request->DevHandle));
909 		mpt3sas_trigger_master(ioc, MASTER_TRIGGER_TASK_MANAGMENT);
910 	} else if ((mpi_request->Function == MPI2_FUNCTION_SMP_PASSTHROUGH ||
911 	    mpi_request->Function == MPI2_FUNCTION_SAS_IO_UNIT_CONTROL) &&
912 		ioc->ioc_link_reset_in_progress) {
913 		ioc->ioc_link_reset_in_progress = 0;
914 		ioc->ignore_loginfos = 0;
915 	}
916 	if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
917 		pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
918 		    __func__);
919 		_debug_dump_mf(mpi_request, karg.data_sge_offset);
920 		if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
921 			issue_reset = 1;
922 		goto issue_host_reset;
923 	}
924 
925 	mpi_reply = ioc->ctl_cmds.reply;
926 	ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
927 
928 	if (mpi_reply->Function == MPI2_FUNCTION_SCSI_TASK_MGMT &&
929 	    (ioc->logging_level & MPT_DEBUG_TM)) {
930 		Mpi2SCSITaskManagementReply_t *tm_reply =
931 		    (Mpi2SCSITaskManagementReply_t *)mpi_reply;
932 
933 		pr_info(MPT3SAS_FMT "TASK_MGMT: " \
934 		    "IOCStatus(0x%04x), IOCLogInfo(0x%08x), "
935 		    "TerminationCount(0x%08x)\n", ioc->name,
936 		    le16_to_cpu(tm_reply->IOCStatus),
937 		    le32_to_cpu(tm_reply->IOCLogInfo),
938 		    le32_to_cpu(tm_reply->TerminationCount));
939 	}
940 
941 	/* copy out xdata to user */
942 	if (data_in_sz) {
943 		if (copy_to_user(karg.data_in_buf_ptr, data_in,
944 		    data_in_sz)) {
945 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
946 			    __LINE__, __func__);
947 			ret = -ENODATA;
948 			goto out;
949 		}
950 	}
951 
952 	/* copy out reply message frame to user */
953 	if (karg.max_reply_bytes) {
954 		sz = min_t(u32, karg.max_reply_bytes, ioc->reply_sz);
955 		if (copy_to_user(karg.reply_frame_buf_ptr, ioc->ctl_cmds.reply,
956 		    sz)) {
957 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
958 			    __LINE__, __func__);
959 			ret = -ENODATA;
960 			goto out;
961 		}
962 	}
963 
964 	/* copy out sense to user */
965 	if (karg.max_sense_bytes && (mpi_request->Function ==
966 	    MPI2_FUNCTION_SCSI_IO_REQUEST || mpi_request->Function ==
967 	    MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH)) {
968 		sz = min_t(u32, karg.max_sense_bytes, SCSI_SENSE_BUFFERSIZE);
969 		if (copy_to_user(karg.sense_data_ptr, ioc->ctl_cmds.sense,
970 		    sz)) {
971 			pr_err("failure at %s:%d/%s()!\n", __FILE__,
972 			    __LINE__, __func__);
973 			ret = -ENODATA;
974 			goto out;
975 		}
976 	}
977 
978  issue_host_reset:
979 	if (issue_reset) {
980 		ret = -ENODATA;
981 		if ((mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
982 		    mpi_request->Function ==
983 		    MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH ||
984 		    mpi_request->Function == MPI2_FUNCTION_SATA_PASSTHROUGH)) {
985 			pr_info(MPT3SAS_FMT "issue target reset: handle = (0x%04x)\n",
986 				ioc->name,
987 				le16_to_cpu(mpi_request->FunctionDependent1));
988 			mpt3sas_halt_firmware(ioc);
989 			mpt3sas_scsih_issue_tm(ioc,
990 			    le16_to_cpu(mpi_request->FunctionDependent1), 0, 0,
991 			    0, MPI2_SCSITASKMGMT_TASKTYPE_TARGET_RESET, 0, 30,
992 			    TM_MUTEX_ON);
993 		} else
994 			mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
995 			    FORCE_BIG_HAMMER);
996 	}
997 
998  out:
999 
1000 	/* free memory associated with sg buffers */
1001 	if (data_in)
1002 		pci_free_consistent(ioc->pdev, data_in_sz, data_in,
1003 		    data_in_dma);
1004 
1005 	if (data_out)
1006 		pci_free_consistent(ioc->pdev, data_out_sz, data_out,
1007 		    data_out_dma);
1008 
1009 	kfree(mpi_request);
1010 	ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1011 	return ret;
1012 }
1013 
1014 /**
1015  * _ctl_getiocinfo - main handler for MPT3IOCINFO opcode
1016  * @ioc: per adapter object
1017  * @arg - user space buffer containing ioctl content
1018  */
1019 static long
1020 _ctl_getiocinfo(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1021 {
1022 	struct mpt3_ioctl_iocinfo karg;
1023 
1024 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1025 		pr_err("failure at %s:%d/%s()!\n",
1026 		    __FILE__, __LINE__, __func__);
1027 		return -EFAULT;
1028 	}
1029 
1030 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1031 	    __func__));
1032 
1033 	memset(&karg, 0 , sizeof(karg));
1034 	if (ioc->pfacts)
1035 		karg.port_number = ioc->pfacts[0].PortNumber;
1036 	karg.hw_rev = ioc->pdev->revision;
1037 	karg.pci_id = ioc->pdev->device;
1038 	karg.subsystem_device = ioc->pdev->subsystem_device;
1039 	karg.subsystem_vendor = ioc->pdev->subsystem_vendor;
1040 	karg.pci_information.u.bits.bus = ioc->pdev->bus->number;
1041 	karg.pci_information.u.bits.device = PCI_SLOT(ioc->pdev->devfn);
1042 	karg.pci_information.u.bits.function = PCI_FUNC(ioc->pdev->devfn);
1043 	karg.pci_information.segment_id = pci_domain_nr(ioc->pdev->bus);
1044 	karg.firmware_version = ioc->facts.FWVersion.Word;
1045 	strcpy(karg.driver_version, ioc->driver_name);
1046 	strcat(karg.driver_version, "-");
1047 	switch  (ioc->hba_mpi_version_belonged) {
1048 	case MPI2_VERSION:
1049 		if (ioc->is_warpdrive)
1050 			karg.adapter_type = MPT2_IOCTL_INTERFACE_SAS2_SSS6200;
1051 		else
1052 			karg.adapter_type = MPT2_IOCTL_INTERFACE_SAS2;
1053 		strcat(karg.driver_version, MPT2SAS_DRIVER_VERSION);
1054 		break;
1055 	case MPI25_VERSION:
1056 		karg.adapter_type = MPT3_IOCTL_INTERFACE_SAS3;
1057 		strcat(karg.driver_version, MPT3SAS_DRIVER_VERSION);
1058 		break;
1059 	}
1060 	karg.bios_version = le32_to_cpu(ioc->bios_pg3.BiosVersion);
1061 
1062 	if (copy_to_user(arg, &karg, sizeof(karg))) {
1063 		pr_err("failure at %s:%d/%s()!\n",
1064 		    __FILE__, __LINE__, __func__);
1065 		return -EFAULT;
1066 	}
1067 	return 0;
1068 }
1069 
1070 /**
1071  * _ctl_eventquery - main handler for MPT3EVENTQUERY opcode
1072  * @ioc: per adapter object
1073  * @arg - user space buffer containing ioctl content
1074  */
1075 static long
1076 _ctl_eventquery(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1077 {
1078 	struct mpt3_ioctl_eventquery karg;
1079 
1080 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1081 		pr_err("failure at %s:%d/%s()!\n",
1082 		    __FILE__, __LINE__, __func__);
1083 		return -EFAULT;
1084 	}
1085 
1086 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1087 	    __func__));
1088 
1089 	karg.event_entries = MPT3SAS_CTL_EVENT_LOG_SIZE;
1090 	memcpy(karg.event_types, ioc->event_type,
1091 	    MPI2_EVENT_NOTIFY_EVENTMASK_WORDS * sizeof(u32));
1092 
1093 	if (copy_to_user(arg, &karg, sizeof(karg))) {
1094 		pr_err("failure at %s:%d/%s()!\n",
1095 		    __FILE__, __LINE__, __func__);
1096 		return -EFAULT;
1097 	}
1098 	return 0;
1099 }
1100 
1101 /**
1102  * _ctl_eventenable - main handler for MPT3EVENTENABLE opcode
1103  * @ioc: per adapter object
1104  * @arg - user space buffer containing ioctl content
1105  */
1106 static long
1107 _ctl_eventenable(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1108 {
1109 	struct mpt3_ioctl_eventenable karg;
1110 
1111 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1112 		pr_err("failure at %s:%d/%s()!\n",
1113 		    __FILE__, __LINE__, __func__);
1114 		return -EFAULT;
1115 	}
1116 
1117 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1118 	    __func__));
1119 
1120 	memcpy(ioc->event_type, karg.event_types,
1121 	    MPI2_EVENT_NOTIFY_EVENTMASK_WORDS * sizeof(u32));
1122 	mpt3sas_base_validate_event_type(ioc, ioc->event_type);
1123 
1124 	if (ioc->event_log)
1125 		return 0;
1126 	/* initialize event_log */
1127 	ioc->event_context = 0;
1128 	ioc->aen_event_read_flag = 0;
1129 	ioc->event_log = kcalloc(MPT3SAS_CTL_EVENT_LOG_SIZE,
1130 	    sizeof(struct MPT3_IOCTL_EVENTS), GFP_KERNEL);
1131 	if (!ioc->event_log) {
1132 		pr_err("failure at %s:%d/%s()!\n",
1133 		    __FILE__, __LINE__, __func__);
1134 		return -ENOMEM;
1135 	}
1136 	return 0;
1137 }
1138 
1139 /**
1140  * _ctl_eventreport - main handler for MPT3EVENTREPORT opcode
1141  * @ioc: per adapter object
1142  * @arg - user space buffer containing ioctl content
1143  */
1144 static long
1145 _ctl_eventreport(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1146 {
1147 	struct mpt3_ioctl_eventreport karg;
1148 	u32 number_bytes, max_events, max;
1149 	struct mpt3_ioctl_eventreport __user *uarg = arg;
1150 
1151 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1152 		pr_err("failure at %s:%d/%s()!\n",
1153 		    __FILE__, __LINE__, __func__);
1154 		return -EFAULT;
1155 	}
1156 
1157 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1158 	    __func__));
1159 
1160 	number_bytes = karg.hdr.max_data_size -
1161 	    sizeof(struct mpt3_ioctl_header);
1162 	max_events = number_bytes/sizeof(struct MPT3_IOCTL_EVENTS);
1163 	max = min_t(u32, MPT3SAS_CTL_EVENT_LOG_SIZE, max_events);
1164 
1165 	/* If fewer than 1 event is requested, there must have
1166 	 * been some type of error.
1167 	 */
1168 	if (!max || !ioc->event_log)
1169 		return -ENODATA;
1170 
1171 	number_bytes = max * sizeof(struct MPT3_IOCTL_EVENTS);
1172 	if (copy_to_user(uarg->event_data, ioc->event_log, number_bytes)) {
1173 		pr_err("failure at %s:%d/%s()!\n",
1174 		    __FILE__, __LINE__, __func__);
1175 		return -EFAULT;
1176 	}
1177 
1178 	/* reset flag so SIGIO can restart */
1179 	ioc->aen_event_read_flag = 0;
1180 	return 0;
1181 }
1182 
1183 /**
1184  * _ctl_do_reset - main handler for MPT3HARDRESET opcode
1185  * @ioc: per adapter object
1186  * @arg - user space buffer containing ioctl content
1187  */
1188 static long
1189 _ctl_do_reset(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1190 {
1191 	struct mpt3_ioctl_diag_reset karg;
1192 	int retval;
1193 
1194 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1195 		pr_err("failure at %s:%d/%s()!\n",
1196 		    __FILE__, __LINE__, __func__);
1197 		return -EFAULT;
1198 	}
1199 
1200 	if (ioc->shost_recovery || ioc->pci_error_recovery ||
1201 	    ioc->is_driver_loading)
1202 		return -EAGAIN;
1203 
1204 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1205 	    __func__));
1206 
1207 	retval = mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
1208 	    FORCE_BIG_HAMMER);
1209 	pr_info(MPT3SAS_FMT "host reset: %s\n",
1210 	    ioc->name, ((!retval) ? "SUCCESS" : "FAILED"));
1211 	return 0;
1212 }
1213 
1214 /**
1215  * _ctl_btdh_search_sas_device - searching for sas device
1216  * @ioc: per adapter object
1217  * @btdh: btdh ioctl payload
1218  */
1219 static int
1220 _ctl_btdh_search_sas_device(struct MPT3SAS_ADAPTER *ioc,
1221 	struct mpt3_ioctl_btdh_mapping *btdh)
1222 {
1223 	struct _sas_device *sas_device;
1224 	unsigned long flags;
1225 	int rc = 0;
1226 
1227 	if (list_empty(&ioc->sas_device_list))
1228 		return rc;
1229 
1230 	spin_lock_irqsave(&ioc->sas_device_lock, flags);
1231 	list_for_each_entry(sas_device, &ioc->sas_device_list, list) {
1232 		if (btdh->bus == 0xFFFFFFFF && btdh->id == 0xFFFFFFFF &&
1233 		    btdh->handle == sas_device->handle) {
1234 			btdh->bus = sas_device->channel;
1235 			btdh->id = sas_device->id;
1236 			rc = 1;
1237 			goto out;
1238 		} else if (btdh->bus == sas_device->channel && btdh->id ==
1239 		    sas_device->id && btdh->handle == 0xFFFF) {
1240 			btdh->handle = sas_device->handle;
1241 			rc = 1;
1242 			goto out;
1243 		}
1244 	}
1245  out:
1246 	spin_unlock_irqrestore(&ioc->sas_device_lock, flags);
1247 	return rc;
1248 }
1249 
1250 /**
1251  * _ctl_btdh_search_raid_device - searching for raid device
1252  * @ioc: per adapter object
1253  * @btdh: btdh ioctl payload
1254  */
1255 static int
1256 _ctl_btdh_search_raid_device(struct MPT3SAS_ADAPTER *ioc,
1257 	struct mpt3_ioctl_btdh_mapping *btdh)
1258 {
1259 	struct _raid_device *raid_device;
1260 	unsigned long flags;
1261 	int rc = 0;
1262 
1263 	if (list_empty(&ioc->raid_device_list))
1264 		return rc;
1265 
1266 	spin_lock_irqsave(&ioc->raid_device_lock, flags);
1267 	list_for_each_entry(raid_device, &ioc->raid_device_list, list) {
1268 		if (btdh->bus == 0xFFFFFFFF && btdh->id == 0xFFFFFFFF &&
1269 		    btdh->handle == raid_device->handle) {
1270 			btdh->bus = raid_device->channel;
1271 			btdh->id = raid_device->id;
1272 			rc = 1;
1273 			goto out;
1274 		} else if (btdh->bus == raid_device->channel && btdh->id ==
1275 		    raid_device->id && btdh->handle == 0xFFFF) {
1276 			btdh->handle = raid_device->handle;
1277 			rc = 1;
1278 			goto out;
1279 		}
1280 	}
1281  out:
1282 	spin_unlock_irqrestore(&ioc->raid_device_lock, flags);
1283 	return rc;
1284 }
1285 
1286 /**
1287  * _ctl_btdh_mapping - main handler for MPT3BTDHMAPPING opcode
1288  * @ioc: per adapter object
1289  * @arg - user space buffer containing ioctl content
1290  */
1291 static long
1292 _ctl_btdh_mapping(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1293 {
1294 	struct mpt3_ioctl_btdh_mapping karg;
1295 	int rc;
1296 
1297 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1298 		pr_err("failure at %s:%d/%s()!\n",
1299 		    __FILE__, __LINE__, __func__);
1300 		return -EFAULT;
1301 	}
1302 
1303 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1304 	    __func__));
1305 
1306 	rc = _ctl_btdh_search_sas_device(ioc, &karg);
1307 	if (!rc)
1308 		_ctl_btdh_search_raid_device(ioc, &karg);
1309 
1310 	if (copy_to_user(arg, &karg, sizeof(karg))) {
1311 		pr_err("failure at %s:%d/%s()!\n",
1312 		    __FILE__, __LINE__, __func__);
1313 		return -EFAULT;
1314 	}
1315 	return 0;
1316 }
1317 
1318 /**
1319  * _ctl_diag_capability - return diag buffer capability
1320  * @ioc: per adapter object
1321  * @buffer_type: specifies either TRACE, SNAPSHOT, or EXTENDED
1322  *
1323  * returns 1 when diag buffer support is enabled in firmware
1324  */
1325 static u8
1326 _ctl_diag_capability(struct MPT3SAS_ADAPTER *ioc, u8 buffer_type)
1327 {
1328 	u8 rc = 0;
1329 
1330 	switch (buffer_type) {
1331 	case MPI2_DIAG_BUF_TYPE_TRACE:
1332 		if (ioc->facts.IOCCapabilities &
1333 		    MPI2_IOCFACTS_CAPABILITY_DIAG_TRACE_BUFFER)
1334 			rc = 1;
1335 		break;
1336 	case MPI2_DIAG_BUF_TYPE_SNAPSHOT:
1337 		if (ioc->facts.IOCCapabilities &
1338 		    MPI2_IOCFACTS_CAPABILITY_SNAPSHOT_BUFFER)
1339 			rc = 1;
1340 		break;
1341 	case MPI2_DIAG_BUF_TYPE_EXTENDED:
1342 		if (ioc->facts.IOCCapabilities &
1343 		    MPI2_IOCFACTS_CAPABILITY_EXTENDED_BUFFER)
1344 			rc = 1;
1345 	}
1346 
1347 	return rc;
1348 }
1349 
1350 
1351 /**
1352  * _ctl_diag_register_2 - wrapper for registering diag buffer support
1353  * @ioc: per adapter object
1354  * @diag_register: the diag_register struct passed in from user space
1355  *
1356  */
1357 static long
1358 _ctl_diag_register_2(struct MPT3SAS_ADAPTER *ioc,
1359 	struct mpt3_diag_register *diag_register)
1360 {
1361 	int rc, i;
1362 	void *request_data = NULL;
1363 	dma_addr_t request_data_dma;
1364 	u32 request_data_sz = 0;
1365 	Mpi2DiagBufferPostRequest_t *mpi_request;
1366 	Mpi2DiagBufferPostReply_t *mpi_reply;
1367 	u8 buffer_type;
1368 	unsigned long timeleft;
1369 	u16 smid;
1370 	u16 ioc_status;
1371 	u32 ioc_state;
1372 	u8 issue_reset = 0;
1373 
1374 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1375 	    __func__));
1376 
1377 	ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
1378 	if (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
1379 		pr_err(MPT3SAS_FMT
1380 		    "%s: failed due to ioc not operational\n",
1381 		    ioc->name, __func__);
1382 		rc = -EAGAIN;
1383 		goto out;
1384 	}
1385 
1386 	if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
1387 		pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
1388 		    ioc->name, __func__);
1389 		rc = -EAGAIN;
1390 		goto out;
1391 	}
1392 
1393 	buffer_type = diag_register->buffer_type;
1394 	if (!_ctl_diag_capability(ioc, buffer_type)) {
1395 		pr_err(MPT3SAS_FMT
1396 			"%s: doesn't have capability for buffer_type(0x%02x)\n",
1397 			ioc->name, __func__, buffer_type);
1398 		return -EPERM;
1399 	}
1400 
1401 	if (ioc->diag_buffer_status[buffer_type] &
1402 	    MPT3_DIAG_BUFFER_IS_REGISTERED) {
1403 		pr_err(MPT3SAS_FMT
1404 			"%s: already has a registered buffer for buffer_type(0x%02x)\n",
1405 			ioc->name, __func__,
1406 		    buffer_type);
1407 		return -EINVAL;
1408 	}
1409 
1410 	if (diag_register->requested_buffer_size % 4)  {
1411 		pr_err(MPT3SAS_FMT
1412 			"%s: the requested_buffer_size is not 4 byte aligned\n",
1413 			ioc->name, __func__);
1414 		return -EINVAL;
1415 	}
1416 
1417 	smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
1418 	if (!smid) {
1419 		pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
1420 		    ioc->name, __func__);
1421 		rc = -EAGAIN;
1422 		goto out;
1423 	}
1424 
1425 	rc = 0;
1426 	ioc->ctl_cmds.status = MPT3_CMD_PENDING;
1427 	memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
1428 	mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
1429 	ioc->ctl_cmds.smid = smid;
1430 
1431 	request_data = ioc->diag_buffer[buffer_type];
1432 	request_data_sz = diag_register->requested_buffer_size;
1433 	ioc->unique_id[buffer_type] = diag_register->unique_id;
1434 	ioc->diag_buffer_status[buffer_type] = 0;
1435 	memcpy(ioc->product_specific[buffer_type],
1436 	    diag_register->product_specific, MPT3_PRODUCT_SPECIFIC_DWORDS);
1437 	ioc->diagnostic_flags[buffer_type] = diag_register->diagnostic_flags;
1438 
1439 	if (request_data) {
1440 		request_data_dma = ioc->diag_buffer_dma[buffer_type];
1441 		if (request_data_sz != ioc->diag_buffer_sz[buffer_type]) {
1442 			pci_free_consistent(ioc->pdev,
1443 			    ioc->diag_buffer_sz[buffer_type],
1444 			    request_data, request_data_dma);
1445 			request_data = NULL;
1446 		}
1447 	}
1448 
1449 	if (request_data == NULL) {
1450 		ioc->diag_buffer_sz[buffer_type] = 0;
1451 		ioc->diag_buffer_dma[buffer_type] = 0;
1452 		request_data = pci_alloc_consistent(
1453 			ioc->pdev, request_data_sz, &request_data_dma);
1454 		if (request_data == NULL) {
1455 			pr_err(MPT3SAS_FMT "%s: failed allocating memory" \
1456 			    " for diag buffers, requested size(%d)\n",
1457 			    ioc->name, __func__, request_data_sz);
1458 			mpt3sas_base_free_smid(ioc, smid);
1459 			return -ENOMEM;
1460 		}
1461 		ioc->diag_buffer[buffer_type] = request_data;
1462 		ioc->diag_buffer_sz[buffer_type] = request_data_sz;
1463 		ioc->diag_buffer_dma[buffer_type] = request_data_dma;
1464 	}
1465 
1466 	mpi_request->Function = MPI2_FUNCTION_DIAG_BUFFER_POST;
1467 	mpi_request->BufferType = diag_register->buffer_type;
1468 	mpi_request->Flags = cpu_to_le32(diag_register->diagnostic_flags);
1469 	mpi_request->BufferAddress = cpu_to_le64(request_data_dma);
1470 	mpi_request->BufferLength = cpu_to_le32(request_data_sz);
1471 	mpi_request->VF_ID = 0; /* TODO */
1472 	mpi_request->VP_ID = 0;
1473 
1474 	dctlprintk(ioc, pr_info(MPT3SAS_FMT
1475 		"%s: diag_buffer(0x%p), dma(0x%llx), sz(%d)\n",
1476 		ioc->name, __func__, request_data,
1477 	    (unsigned long long)request_data_dma,
1478 	    le32_to_cpu(mpi_request->BufferLength)));
1479 
1480 	for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
1481 		mpi_request->ProductSpecific[i] =
1482 			cpu_to_le32(ioc->product_specific[buffer_type][i]);
1483 
1484 	init_completion(&ioc->ctl_cmds.done);
1485 	mpt3sas_base_put_smid_default(ioc, smid);
1486 	timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
1487 	    MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
1488 
1489 	if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
1490 		pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
1491 		    __func__);
1492 		_debug_dump_mf(mpi_request,
1493 		    sizeof(Mpi2DiagBufferPostRequest_t)/4);
1494 		if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
1495 			issue_reset = 1;
1496 		goto issue_host_reset;
1497 	}
1498 
1499 	/* process the completed Reply Message Frame */
1500 	if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
1501 		pr_err(MPT3SAS_FMT "%s: no reply message\n",
1502 		    ioc->name, __func__);
1503 		rc = -EFAULT;
1504 		goto out;
1505 	}
1506 
1507 	mpi_reply = ioc->ctl_cmds.reply;
1508 	ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
1509 
1510 	if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
1511 		ioc->diag_buffer_status[buffer_type] |=
1512 			MPT3_DIAG_BUFFER_IS_REGISTERED;
1513 		dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
1514 		    ioc->name, __func__));
1515 	} else {
1516 		pr_info(MPT3SAS_FMT
1517 			"%s: ioc_status(0x%04x) log_info(0x%08x)\n",
1518 			ioc->name, __func__,
1519 		    ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
1520 		rc = -EFAULT;
1521 	}
1522 
1523  issue_host_reset:
1524 	if (issue_reset)
1525 		mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
1526 		    FORCE_BIG_HAMMER);
1527 
1528  out:
1529 
1530 	if (rc && request_data)
1531 		pci_free_consistent(ioc->pdev, request_data_sz,
1532 		    request_data, request_data_dma);
1533 
1534 	ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1535 	return rc;
1536 }
1537 
1538 /**
1539  * mpt3sas_enable_diag_buffer - enabling diag_buffers support driver load time
1540  * @ioc: per adapter object
1541  * @bits_to_register: bitwise field where trace is bit 0, and snapshot is bit 1
1542  *
1543  * This is called when command line option diag_buffer_enable is enabled
1544  * at driver load time.
1545  */
1546 void
1547 mpt3sas_enable_diag_buffer(struct MPT3SAS_ADAPTER *ioc, u8 bits_to_register)
1548 {
1549 	struct mpt3_diag_register diag_register;
1550 
1551 	memset(&diag_register, 0, sizeof(struct mpt3_diag_register));
1552 
1553 	if (bits_to_register & 1) {
1554 		pr_info(MPT3SAS_FMT "registering trace buffer support\n",
1555 		    ioc->name);
1556 		ioc->diag_trigger_master.MasterData =
1557 		    (MASTER_TRIGGER_FW_FAULT + MASTER_TRIGGER_ADAPTER_RESET);
1558 		diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_TRACE;
1559 		/* register for 2MB buffers  */
1560 		diag_register.requested_buffer_size = 2 * (1024 * 1024);
1561 		diag_register.unique_id = 0x7075900;
1562 		_ctl_diag_register_2(ioc,  &diag_register);
1563 	}
1564 
1565 	if (bits_to_register & 2) {
1566 		pr_info(MPT3SAS_FMT "registering snapshot buffer support\n",
1567 		    ioc->name);
1568 		diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_SNAPSHOT;
1569 		/* register for 2MB buffers  */
1570 		diag_register.requested_buffer_size = 2 * (1024 * 1024);
1571 		diag_register.unique_id = 0x7075901;
1572 		_ctl_diag_register_2(ioc,  &diag_register);
1573 	}
1574 
1575 	if (bits_to_register & 4) {
1576 		pr_info(MPT3SAS_FMT "registering extended buffer support\n",
1577 		    ioc->name);
1578 		diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_EXTENDED;
1579 		/* register for 2MB buffers  */
1580 		diag_register.requested_buffer_size = 2 * (1024 * 1024);
1581 		diag_register.unique_id = 0x7075901;
1582 		_ctl_diag_register_2(ioc,  &diag_register);
1583 	}
1584 }
1585 
1586 /**
1587  * _ctl_diag_register - application register with driver
1588  * @ioc: per adapter object
1589  * @arg - user space buffer containing ioctl content
1590  *
1591  * This will allow the driver to setup any required buffers that will be
1592  * needed by firmware to communicate with the driver.
1593  */
1594 static long
1595 _ctl_diag_register(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1596 {
1597 	struct mpt3_diag_register karg;
1598 	long rc;
1599 
1600 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1601 		pr_err("failure at %s:%d/%s()!\n",
1602 		    __FILE__, __LINE__, __func__);
1603 		return -EFAULT;
1604 	}
1605 
1606 	rc = _ctl_diag_register_2(ioc, &karg);
1607 	return rc;
1608 }
1609 
1610 /**
1611  * _ctl_diag_unregister - application unregister with driver
1612  * @ioc: per adapter object
1613  * @arg - user space buffer containing ioctl content
1614  *
1615  * This will allow the driver to cleanup any memory allocated for diag
1616  * messages and to free up any resources.
1617  */
1618 static long
1619 _ctl_diag_unregister(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1620 {
1621 	struct mpt3_diag_unregister karg;
1622 	void *request_data;
1623 	dma_addr_t request_data_dma;
1624 	u32 request_data_sz;
1625 	u8 buffer_type;
1626 
1627 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1628 		pr_err("failure at %s:%d/%s()!\n",
1629 		    __FILE__, __LINE__, __func__);
1630 		return -EFAULT;
1631 	}
1632 
1633 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1634 	    __func__));
1635 
1636 	buffer_type = karg.unique_id & 0x000000ff;
1637 	if (!_ctl_diag_capability(ioc, buffer_type)) {
1638 		pr_err(MPT3SAS_FMT
1639 			"%s: doesn't have capability for buffer_type(0x%02x)\n",
1640 			ioc->name, __func__, buffer_type);
1641 		return -EPERM;
1642 	}
1643 
1644 	if ((ioc->diag_buffer_status[buffer_type] &
1645 	    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1646 		pr_err(MPT3SAS_FMT
1647 			"%s: buffer_type(0x%02x) is not registered\n",
1648 			ioc->name, __func__, buffer_type);
1649 		return -EINVAL;
1650 	}
1651 	if ((ioc->diag_buffer_status[buffer_type] &
1652 	    MPT3_DIAG_BUFFER_IS_RELEASED) == 0) {
1653 		pr_err(MPT3SAS_FMT
1654 			"%s: buffer_type(0x%02x) has not been released\n",
1655 			ioc->name, __func__, buffer_type);
1656 		return -EINVAL;
1657 	}
1658 
1659 	if (karg.unique_id != ioc->unique_id[buffer_type]) {
1660 		pr_err(MPT3SAS_FMT
1661 			"%s: unique_id(0x%08x) is not registered\n",
1662 			ioc->name, __func__, karg.unique_id);
1663 		return -EINVAL;
1664 	}
1665 
1666 	request_data = ioc->diag_buffer[buffer_type];
1667 	if (!request_data) {
1668 		pr_err(MPT3SAS_FMT
1669 			"%s: doesn't have memory allocated for buffer_type(0x%02x)\n",
1670 			ioc->name, __func__, buffer_type);
1671 		return -ENOMEM;
1672 	}
1673 
1674 	request_data_sz = ioc->diag_buffer_sz[buffer_type];
1675 	request_data_dma = ioc->diag_buffer_dma[buffer_type];
1676 	pci_free_consistent(ioc->pdev, request_data_sz,
1677 	    request_data, request_data_dma);
1678 	ioc->diag_buffer[buffer_type] = NULL;
1679 	ioc->diag_buffer_status[buffer_type] = 0;
1680 	return 0;
1681 }
1682 
1683 /**
1684  * _ctl_diag_query - query relevant info associated with diag buffers
1685  * @ioc: per adapter object
1686  * @arg - user space buffer containing ioctl content
1687  *
1688  * The application will send only buffer_type and unique_id.  Driver will
1689  * inspect unique_id first, if valid, fill in all the info.  If unique_id is
1690  * 0x00, the driver will return info specified by Buffer Type.
1691  */
1692 static long
1693 _ctl_diag_query(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1694 {
1695 	struct mpt3_diag_query karg;
1696 	void *request_data;
1697 	int i;
1698 	u8 buffer_type;
1699 
1700 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1701 		pr_err("failure at %s:%d/%s()!\n",
1702 		    __FILE__, __LINE__, __func__);
1703 		return -EFAULT;
1704 	}
1705 
1706 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1707 	    __func__));
1708 
1709 	karg.application_flags = 0;
1710 	buffer_type = karg.buffer_type;
1711 
1712 	if (!_ctl_diag_capability(ioc, buffer_type)) {
1713 		pr_err(MPT3SAS_FMT
1714 			"%s: doesn't have capability for buffer_type(0x%02x)\n",
1715 			ioc->name, __func__, buffer_type);
1716 		return -EPERM;
1717 	}
1718 
1719 	if ((ioc->diag_buffer_status[buffer_type] &
1720 	    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1721 		pr_err(MPT3SAS_FMT
1722 			"%s: buffer_type(0x%02x) is not registered\n",
1723 			ioc->name, __func__, buffer_type);
1724 		return -EINVAL;
1725 	}
1726 
1727 	if (karg.unique_id & 0xffffff00) {
1728 		if (karg.unique_id != ioc->unique_id[buffer_type]) {
1729 			pr_err(MPT3SAS_FMT
1730 				"%s: unique_id(0x%08x) is not registered\n",
1731 				ioc->name, __func__, karg.unique_id);
1732 			return -EINVAL;
1733 		}
1734 	}
1735 
1736 	request_data = ioc->diag_buffer[buffer_type];
1737 	if (!request_data) {
1738 		pr_err(MPT3SAS_FMT
1739 			"%s: doesn't have buffer for buffer_type(0x%02x)\n",
1740 			ioc->name, __func__, buffer_type);
1741 		return -ENOMEM;
1742 	}
1743 
1744 	if (ioc->diag_buffer_status[buffer_type] & MPT3_DIAG_BUFFER_IS_RELEASED)
1745 		karg.application_flags = (MPT3_APP_FLAGS_APP_OWNED |
1746 		    MPT3_APP_FLAGS_BUFFER_VALID);
1747 	else
1748 		karg.application_flags = (MPT3_APP_FLAGS_APP_OWNED |
1749 		    MPT3_APP_FLAGS_BUFFER_VALID |
1750 		    MPT3_APP_FLAGS_FW_BUFFER_ACCESS);
1751 
1752 	for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
1753 		karg.product_specific[i] =
1754 		    ioc->product_specific[buffer_type][i];
1755 
1756 	karg.total_buffer_size = ioc->diag_buffer_sz[buffer_type];
1757 	karg.driver_added_buffer_size = 0;
1758 	karg.unique_id = ioc->unique_id[buffer_type];
1759 	karg.diagnostic_flags = ioc->diagnostic_flags[buffer_type];
1760 
1761 	if (copy_to_user(arg, &karg, sizeof(struct mpt3_diag_query))) {
1762 		pr_err(MPT3SAS_FMT
1763 			"%s: unable to write mpt3_diag_query data @ %p\n",
1764 			ioc->name, __func__, arg);
1765 		return -EFAULT;
1766 	}
1767 	return 0;
1768 }
1769 
1770 /**
1771  * mpt3sas_send_diag_release - Diag Release Message
1772  * @ioc: per adapter object
1773  * @buffer_type - specifies either TRACE, SNAPSHOT, or EXTENDED
1774  * @issue_reset - specifies whether host reset is required.
1775  *
1776  */
1777 int
1778 mpt3sas_send_diag_release(struct MPT3SAS_ADAPTER *ioc, u8 buffer_type,
1779 	u8 *issue_reset)
1780 {
1781 	Mpi2DiagReleaseRequest_t *mpi_request;
1782 	Mpi2DiagReleaseReply_t *mpi_reply;
1783 	u16 smid;
1784 	u16 ioc_status;
1785 	u32 ioc_state;
1786 	int rc;
1787 	unsigned long timeleft;
1788 
1789 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1790 	    __func__));
1791 
1792 	rc = 0;
1793 	*issue_reset = 0;
1794 
1795 	ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
1796 	if (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
1797 		if (ioc->diag_buffer_status[buffer_type] &
1798 		    MPT3_DIAG_BUFFER_IS_REGISTERED)
1799 			ioc->diag_buffer_status[buffer_type] |=
1800 			    MPT3_DIAG_BUFFER_IS_RELEASED;
1801 		dctlprintk(ioc, pr_info(MPT3SAS_FMT
1802 			"%s: skipping due to FAULT state\n", ioc->name,
1803 		    __func__));
1804 		rc = -EAGAIN;
1805 		goto out;
1806 	}
1807 
1808 	if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
1809 		pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
1810 		    ioc->name, __func__);
1811 		rc = -EAGAIN;
1812 		goto out;
1813 	}
1814 
1815 	smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
1816 	if (!smid) {
1817 		pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
1818 		    ioc->name, __func__);
1819 		rc = -EAGAIN;
1820 		goto out;
1821 	}
1822 
1823 	ioc->ctl_cmds.status = MPT3_CMD_PENDING;
1824 	memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
1825 	mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
1826 	ioc->ctl_cmds.smid = smid;
1827 
1828 	mpi_request->Function = MPI2_FUNCTION_DIAG_RELEASE;
1829 	mpi_request->BufferType = buffer_type;
1830 	mpi_request->VF_ID = 0; /* TODO */
1831 	mpi_request->VP_ID = 0;
1832 
1833 	init_completion(&ioc->ctl_cmds.done);
1834 	mpt3sas_base_put_smid_default(ioc, smid);
1835 	timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
1836 	    MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
1837 
1838 	if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
1839 		pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
1840 		    __func__);
1841 		_debug_dump_mf(mpi_request,
1842 		    sizeof(Mpi2DiagReleaseRequest_t)/4);
1843 		if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
1844 			*issue_reset = 1;
1845 		rc = -EFAULT;
1846 		goto out;
1847 	}
1848 
1849 	/* process the completed Reply Message Frame */
1850 	if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
1851 		pr_err(MPT3SAS_FMT "%s: no reply message\n",
1852 		    ioc->name, __func__);
1853 		rc = -EFAULT;
1854 		goto out;
1855 	}
1856 
1857 	mpi_reply = ioc->ctl_cmds.reply;
1858 	ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
1859 
1860 	if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
1861 		ioc->diag_buffer_status[buffer_type] |=
1862 		    MPT3_DIAG_BUFFER_IS_RELEASED;
1863 		dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
1864 		    ioc->name, __func__));
1865 	} else {
1866 		pr_info(MPT3SAS_FMT
1867 			"%s: ioc_status(0x%04x) log_info(0x%08x)\n",
1868 			ioc->name, __func__,
1869 		    ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
1870 		rc = -EFAULT;
1871 	}
1872 
1873  out:
1874 	ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1875 	return rc;
1876 }
1877 
1878 /**
1879  * _ctl_diag_release - request to send Diag Release Message to firmware
1880  * @arg - user space buffer containing ioctl content
1881  *
1882  * This allows ownership of the specified buffer to returned to the driver,
1883  * allowing an application to read the buffer without fear that firmware is
1884  * overwritting information in the buffer.
1885  */
1886 static long
1887 _ctl_diag_release(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1888 {
1889 	struct mpt3_diag_release karg;
1890 	void *request_data;
1891 	int rc;
1892 	u8 buffer_type;
1893 	u8 issue_reset = 0;
1894 
1895 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1896 		pr_err("failure at %s:%d/%s()!\n",
1897 		    __FILE__, __LINE__, __func__);
1898 		return -EFAULT;
1899 	}
1900 
1901 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1902 	    __func__));
1903 
1904 	buffer_type = karg.unique_id & 0x000000ff;
1905 	if (!_ctl_diag_capability(ioc, buffer_type)) {
1906 		pr_err(MPT3SAS_FMT
1907 			"%s: doesn't have capability for buffer_type(0x%02x)\n",
1908 			ioc->name, __func__, buffer_type);
1909 		return -EPERM;
1910 	}
1911 
1912 	if ((ioc->diag_buffer_status[buffer_type] &
1913 	    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1914 		pr_err(MPT3SAS_FMT
1915 			"%s: buffer_type(0x%02x) is not registered\n",
1916 			ioc->name, __func__, buffer_type);
1917 		return -EINVAL;
1918 	}
1919 
1920 	if (karg.unique_id != ioc->unique_id[buffer_type]) {
1921 		pr_err(MPT3SAS_FMT
1922 			"%s: unique_id(0x%08x) is not registered\n",
1923 			ioc->name, __func__, karg.unique_id);
1924 		return -EINVAL;
1925 	}
1926 
1927 	if (ioc->diag_buffer_status[buffer_type] &
1928 	    MPT3_DIAG_BUFFER_IS_RELEASED) {
1929 		pr_err(MPT3SAS_FMT
1930 			"%s: buffer_type(0x%02x) is already released\n",
1931 			ioc->name, __func__,
1932 		    buffer_type);
1933 		return 0;
1934 	}
1935 
1936 	request_data = ioc->diag_buffer[buffer_type];
1937 
1938 	if (!request_data) {
1939 		pr_err(MPT3SAS_FMT
1940 			"%s: doesn't have memory allocated for buffer_type(0x%02x)\n",
1941 			ioc->name, __func__, buffer_type);
1942 		return -ENOMEM;
1943 	}
1944 
1945 	/* buffers were released by due to host reset */
1946 	if ((ioc->diag_buffer_status[buffer_type] &
1947 	    MPT3_DIAG_BUFFER_IS_DIAG_RESET)) {
1948 		ioc->diag_buffer_status[buffer_type] |=
1949 		    MPT3_DIAG_BUFFER_IS_RELEASED;
1950 		ioc->diag_buffer_status[buffer_type] &=
1951 		    ~MPT3_DIAG_BUFFER_IS_DIAG_RESET;
1952 		pr_err(MPT3SAS_FMT
1953 			"%s: buffer_type(0x%02x) was released due to host reset\n",
1954 			ioc->name, __func__, buffer_type);
1955 		return 0;
1956 	}
1957 
1958 	rc = mpt3sas_send_diag_release(ioc, buffer_type, &issue_reset);
1959 
1960 	if (issue_reset)
1961 		mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
1962 		    FORCE_BIG_HAMMER);
1963 
1964 	return rc;
1965 }
1966 
1967 /**
1968  * _ctl_diag_read_buffer - request for copy of the diag buffer
1969  * @ioc: per adapter object
1970  * @arg - user space buffer containing ioctl content
1971  */
1972 static long
1973 _ctl_diag_read_buffer(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1974 {
1975 	struct mpt3_diag_read_buffer karg;
1976 	struct mpt3_diag_read_buffer __user *uarg = arg;
1977 	void *request_data, *diag_data;
1978 	Mpi2DiagBufferPostRequest_t *mpi_request;
1979 	Mpi2DiagBufferPostReply_t *mpi_reply;
1980 	int rc, i;
1981 	u8 buffer_type;
1982 	unsigned long timeleft, request_size, copy_size;
1983 	u16 smid;
1984 	u16 ioc_status;
1985 	u8 issue_reset = 0;
1986 
1987 	if (copy_from_user(&karg, arg, sizeof(karg))) {
1988 		pr_err("failure at %s:%d/%s()!\n",
1989 		    __FILE__, __LINE__, __func__);
1990 		return -EFAULT;
1991 	}
1992 
1993 	dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1994 	    __func__));
1995 
1996 	buffer_type = karg.unique_id & 0x000000ff;
1997 	if (!_ctl_diag_capability(ioc, buffer_type)) {
1998 		pr_err(MPT3SAS_FMT
1999 			"%s: doesn't have capability for buffer_type(0x%02x)\n",
2000 			ioc->name, __func__, buffer_type);
2001 		return -EPERM;
2002 	}
2003 
2004 	if (karg.unique_id != ioc->unique_id[buffer_type]) {
2005 		pr_err(MPT3SAS_FMT
2006 			"%s: unique_id(0x%08x) is not registered\n",
2007 			ioc->name, __func__, karg.unique_id);
2008 		return -EINVAL;
2009 	}
2010 
2011 	request_data = ioc->diag_buffer[buffer_type];
2012 	if (!request_data) {
2013 		pr_err(MPT3SAS_FMT
2014 			"%s: doesn't have buffer for buffer_type(0x%02x)\n",
2015 			ioc->name, __func__, buffer_type);
2016 		return -ENOMEM;
2017 	}
2018 
2019 	request_size = ioc->diag_buffer_sz[buffer_type];
2020 
2021 	if ((karg.starting_offset % 4) || (karg.bytes_to_read % 4)) {
2022 		pr_err(MPT3SAS_FMT "%s: either the starting_offset " \
2023 		    "or bytes_to_read are not 4 byte aligned\n", ioc->name,
2024 		    __func__);
2025 		return -EINVAL;
2026 	}
2027 
2028 	if (karg.starting_offset > request_size)
2029 		return -EINVAL;
2030 
2031 	diag_data = (void *)(request_data + karg.starting_offset);
2032 	dctlprintk(ioc, pr_info(MPT3SAS_FMT
2033 		"%s: diag_buffer(%p), offset(%d), sz(%d)\n",
2034 		ioc->name, __func__,
2035 	    diag_data, karg.starting_offset, karg.bytes_to_read));
2036 
2037 	/* Truncate data on requests that are too large */
2038 	if ((diag_data + karg.bytes_to_read < diag_data) ||
2039 	    (diag_data + karg.bytes_to_read > request_data + request_size))
2040 		copy_size = request_size - karg.starting_offset;
2041 	else
2042 		copy_size = karg.bytes_to_read;
2043 
2044 	if (copy_to_user((void __user *)uarg->diagnostic_data,
2045 	    diag_data, copy_size)) {
2046 		pr_err(MPT3SAS_FMT
2047 			"%s: Unable to write mpt_diag_read_buffer_t data @ %p\n",
2048 			ioc->name, __func__, diag_data);
2049 		return -EFAULT;
2050 	}
2051 
2052 	if ((karg.flags & MPT3_FLAGS_REREGISTER) == 0)
2053 		return 0;
2054 
2055 	dctlprintk(ioc, pr_info(MPT3SAS_FMT
2056 		"%s: Reregister buffer_type(0x%02x)\n",
2057 		ioc->name, __func__, buffer_type));
2058 	if ((ioc->diag_buffer_status[buffer_type] &
2059 	    MPT3_DIAG_BUFFER_IS_RELEASED) == 0) {
2060 		dctlprintk(ioc, pr_info(MPT3SAS_FMT
2061 			"%s: buffer_type(0x%02x) is still registered\n",
2062 			ioc->name, __func__, buffer_type));
2063 		return 0;
2064 	}
2065 	/* Get a free request frame and save the message context.
2066 	*/
2067 
2068 	if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
2069 		pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
2070 		    ioc->name, __func__);
2071 		rc = -EAGAIN;
2072 		goto out;
2073 	}
2074 
2075 	smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
2076 	if (!smid) {
2077 		pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
2078 		    ioc->name, __func__);
2079 		rc = -EAGAIN;
2080 		goto out;
2081 	}
2082 
2083 	rc = 0;
2084 	ioc->ctl_cmds.status = MPT3_CMD_PENDING;
2085 	memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
2086 	mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
2087 	ioc->ctl_cmds.smid = smid;
2088 
2089 	mpi_request->Function = MPI2_FUNCTION_DIAG_BUFFER_POST;
2090 	mpi_request->BufferType = buffer_type;
2091 	mpi_request->BufferLength =
2092 	    cpu_to_le32(ioc->diag_buffer_sz[buffer_type]);
2093 	mpi_request->BufferAddress =
2094 	    cpu_to_le64(ioc->diag_buffer_dma[buffer_type]);
2095 	for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
2096 		mpi_request->ProductSpecific[i] =
2097 			cpu_to_le32(ioc->product_specific[buffer_type][i]);
2098 	mpi_request->VF_ID = 0; /* TODO */
2099 	mpi_request->VP_ID = 0;
2100 
2101 	init_completion(&ioc->ctl_cmds.done);
2102 	mpt3sas_base_put_smid_default(ioc, smid);
2103 	timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
2104 	    MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
2105 
2106 	if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
2107 		pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
2108 		    __func__);
2109 		_debug_dump_mf(mpi_request,
2110 		    sizeof(Mpi2DiagBufferPostRequest_t)/4);
2111 		if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
2112 			issue_reset = 1;
2113 		goto issue_host_reset;
2114 	}
2115 
2116 	/* process the completed Reply Message Frame */
2117 	if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
2118 		pr_err(MPT3SAS_FMT "%s: no reply message\n",
2119 		    ioc->name, __func__);
2120 		rc = -EFAULT;
2121 		goto out;
2122 	}
2123 
2124 	mpi_reply = ioc->ctl_cmds.reply;
2125 	ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
2126 
2127 	if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
2128 		ioc->diag_buffer_status[buffer_type] |=
2129 		    MPT3_DIAG_BUFFER_IS_REGISTERED;
2130 		dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
2131 		    ioc->name, __func__));
2132 	} else {
2133 		pr_info(MPT3SAS_FMT
2134 			"%s: ioc_status(0x%04x) log_info(0x%08x)\n",
2135 			ioc->name, __func__,
2136 		    ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
2137 		rc = -EFAULT;
2138 	}
2139 
2140  issue_host_reset:
2141 	if (issue_reset)
2142 		mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
2143 		    FORCE_BIG_HAMMER);
2144 
2145  out:
2146 
2147 	ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
2148 	return rc;
2149 }
2150 
2151 
2152 
2153 #ifdef CONFIG_COMPAT
2154 /**
2155  * _ctl_compat_mpt_command - convert 32bit pointers to 64bit.
2156  * @ioc: per adapter object
2157  * @cmd - ioctl opcode
2158  * @arg - (struct mpt3_ioctl_command32)
2159  *
2160  * MPT3COMMAND32 - Handle 32bit applications running on 64bit os.
2161  */
2162 static long
2163 _ctl_compat_mpt_command(struct MPT3SAS_ADAPTER *ioc, unsigned cmd,
2164 	void __user *arg)
2165 {
2166 	struct mpt3_ioctl_command32 karg32;
2167 	struct mpt3_ioctl_command32 __user *uarg;
2168 	struct mpt3_ioctl_command karg;
2169 
2170 	if (_IOC_SIZE(cmd) != sizeof(struct mpt3_ioctl_command32))
2171 		return -EINVAL;
2172 
2173 	uarg = (struct mpt3_ioctl_command32 __user *) arg;
2174 
2175 	if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32))) {
2176 		pr_err("failure at %s:%d/%s()!\n",
2177 		    __FILE__, __LINE__, __func__);
2178 		return -EFAULT;
2179 	}
2180 
2181 	memset(&karg, 0, sizeof(struct mpt3_ioctl_command));
2182 	karg.hdr.ioc_number = karg32.hdr.ioc_number;
2183 	karg.hdr.port_number = karg32.hdr.port_number;
2184 	karg.hdr.max_data_size = karg32.hdr.max_data_size;
2185 	karg.timeout = karg32.timeout;
2186 	karg.max_reply_bytes = karg32.max_reply_bytes;
2187 	karg.data_in_size = karg32.data_in_size;
2188 	karg.data_out_size = karg32.data_out_size;
2189 	karg.max_sense_bytes = karg32.max_sense_bytes;
2190 	karg.data_sge_offset = karg32.data_sge_offset;
2191 	karg.reply_frame_buf_ptr = compat_ptr(karg32.reply_frame_buf_ptr);
2192 	karg.data_in_buf_ptr = compat_ptr(karg32.data_in_buf_ptr);
2193 	karg.data_out_buf_ptr = compat_ptr(karg32.data_out_buf_ptr);
2194 	karg.sense_data_ptr = compat_ptr(karg32.sense_data_ptr);
2195 	return _ctl_do_mpt_command(ioc, karg, &uarg->mf);
2196 }
2197 #endif
2198 
2199 /**
2200  * _ctl_ioctl_main - main ioctl entry point
2201  * @file - (struct file)
2202  * @cmd - ioctl opcode
2203  * @arg - user space data buffer
2204  * @compat - handles 32 bit applications in 64bit os
2205  * @mpi_version: will be MPI2_VERSION for mpt2ctl ioctl device &
2206  *		MPI25_VERSION for mpt3ctl ioctl device.
2207  */
2208 static long
2209 _ctl_ioctl_main(struct file *file, unsigned int cmd, void __user *arg,
2210 	u8 compat, u16 mpi_version)
2211 {
2212 	struct MPT3SAS_ADAPTER *ioc;
2213 	struct mpt3_ioctl_header ioctl_header;
2214 	enum block_state state;
2215 	long ret = -EINVAL;
2216 
2217 	/* get IOCTL header */
2218 	if (copy_from_user(&ioctl_header, (char __user *)arg,
2219 	    sizeof(struct mpt3_ioctl_header))) {
2220 		pr_err("failure at %s:%d/%s()!\n",
2221 		    __FILE__, __LINE__, __func__);
2222 		return -EFAULT;
2223 	}
2224 
2225 	if (_ctl_verify_adapter(ioctl_header.ioc_number,
2226 				&ioc, mpi_version) == -1 || !ioc)
2227 		return -ENODEV;
2228 
2229 	/* pci_access_mutex lock acquired by ioctl path */
2230 	mutex_lock(&ioc->pci_access_mutex);
2231 
2232 	if (ioc->shost_recovery || ioc->pci_error_recovery ||
2233 	    ioc->is_driver_loading || ioc->remove_host) {
2234 		ret = -EAGAIN;
2235 		goto out_unlock_pciaccess;
2236 	}
2237 
2238 	state = (file->f_flags & O_NONBLOCK) ? NON_BLOCKING : BLOCKING;
2239 	if (state == NON_BLOCKING) {
2240 		if (!mutex_trylock(&ioc->ctl_cmds.mutex)) {
2241 			ret = -EAGAIN;
2242 			goto out_unlock_pciaccess;
2243 		}
2244 	} else if (mutex_lock_interruptible(&ioc->ctl_cmds.mutex)) {
2245 		ret = -ERESTARTSYS;
2246 		goto out_unlock_pciaccess;
2247 	}
2248 
2249 
2250 	switch (cmd) {
2251 	case MPT3IOCINFO:
2252 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_iocinfo))
2253 			ret = _ctl_getiocinfo(ioc, arg);
2254 		break;
2255 #ifdef CONFIG_COMPAT
2256 	case MPT3COMMAND32:
2257 #endif
2258 	case MPT3COMMAND:
2259 	{
2260 		struct mpt3_ioctl_command __user *uarg;
2261 		struct mpt3_ioctl_command karg;
2262 
2263 #ifdef CONFIG_COMPAT
2264 		if (compat) {
2265 			ret = _ctl_compat_mpt_command(ioc, cmd, arg);
2266 			break;
2267 		}
2268 #endif
2269 		if (copy_from_user(&karg, arg, sizeof(karg))) {
2270 			pr_err("failure at %s:%d/%s()!\n",
2271 			    __FILE__, __LINE__, __func__);
2272 			ret = -EFAULT;
2273 			break;
2274 		}
2275 
2276 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_command)) {
2277 			uarg = arg;
2278 			ret = _ctl_do_mpt_command(ioc, karg, &uarg->mf);
2279 		}
2280 		break;
2281 	}
2282 	case MPT3EVENTQUERY:
2283 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_eventquery))
2284 			ret = _ctl_eventquery(ioc, arg);
2285 		break;
2286 	case MPT3EVENTENABLE:
2287 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_eventenable))
2288 			ret = _ctl_eventenable(ioc, arg);
2289 		break;
2290 	case MPT3EVENTREPORT:
2291 		ret = _ctl_eventreport(ioc, arg);
2292 		break;
2293 	case MPT3HARDRESET:
2294 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_diag_reset))
2295 			ret = _ctl_do_reset(ioc, arg);
2296 		break;
2297 	case MPT3BTDHMAPPING:
2298 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_btdh_mapping))
2299 			ret = _ctl_btdh_mapping(ioc, arg);
2300 		break;
2301 	case MPT3DIAGREGISTER:
2302 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_register))
2303 			ret = _ctl_diag_register(ioc, arg);
2304 		break;
2305 	case MPT3DIAGUNREGISTER:
2306 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_unregister))
2307 			ret = _ctl_diag_unregister(ioc, arg);
2308 		break;
2309 	case MPT3DIAGQUERY:
2310 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_query))
2311 			ret = _ctl_diag_query(ioc, arg);
2312 		break;
2313 	case MPT3DIAGRELEASE:
2314 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_release))
2315 			ret = _ctl_diag_release(ioc, arg);
2316 		break;
2317 	case MPT3DIAGREADBUFFER:
2318 		if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_read_buffer))
2319 			ret = _ctl_diag_read_buffer(ioc, arg);
2320 		break;
2321 	default:
2322 		dctlprintk(ioc, pr_info(MPT3SAS_FMT
2323 		    "unsupported ioctl opcode(0x%08x)\n", ioc->name, cmd));
2324 		break;
2325 	}
2326 
2327 	mutex_unlock(&ioc->ctl_cmds.mutex);
2328 out_unlock_pciaccess:
2329 	mutex_unlock(&ioc->pci_access_mutex);
2330 	return ret;
2331 }
2332 
2333 /**
2334  * _ctl_ioctl - mpt3ctl main ioctl entry point (unlocked)
2335  * @file - (struct file)
2336  * @cmd - ioctl opcode
2337  * @arg -
2338  */
2339 long
2340 _ctl_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
2341 {
2342 	long ret;
2343 
2344 	/* pass MPI25_VERSION value, to indicate that this ioctl cmd
2345 	 * came from mpt3ctl ioctl device.
2346 	 */
2347 	ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0, MPI25_VERSION);
2348 	return ret;
2349 }
2350 
2351 /**
2352  * _ctl_mpt2_ioctl - mpt2ctl main ioctl entry point (unlocked)
2353  * @file - (struct file)
2354  * @cmd - ioctl opcode
2355  * @arg -
2356  */
2357 long
2358 _ctl_mpt2_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
2359 {
2360 	long ret;
2361 
2362 	/* pass MPI2_VERSION value, to indicate that this ioctl cmd
2363 	 * came from mpt2ctl ioctl device.
2364 	 */
2365 	ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0, MPI2_VERSION);
2366 	return ret;
2367 }
2368 #ifdef CONFIG_COMPAT
2369 /**
2370  *_ ctl_ioctl_compat - main ioctl entry point (compat)
2371  * @file -
2372  * @cmd -
2373  * @arg -
2374  *
2375  * This routine handles 32 bit applications in 64bit os.
2376  */
2377 long
2378 _ctl_ioctl_compat(struct file *file, unsigned cmd, unsigned long arg)
2379 {
2380 	long ret;
2381 
2382 	ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1, MPI25_VERSION);
2383 	return ret;
2384 }
2385 
2386 /**
2387  *_ ctl_mpt2_ioctl_compat - main ioctl entry point (compat)
2388  * @file -
2389  * @cmd -
2390  * @arg -
2391  *
2392  * This routine handles 32 bit applications in 64bit os.
2393  */
2394 long
2395 _ctl_mpt2_ioctl_compat(struct file *file, unsigned cmd, unsigned long arg)
2396 {
2397 	long ret;
2398 
2399 	ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1, MPI2_VERSION);
2400 	return ret;
2401 }
2402 #endif
2403 
2404 /* scsi host attributes */
2405 /**
2406  * _ctl_version_fw_show - firmware version
2407  * @cdev - pointer to embedded class device
2408  * @buf - the buffer returned
2409  *
2410  * A sysfs 'read-only' shost attribute.
2411  */
2412 static ssize_t
2413 _ctl_version_fw_show(struct device *cdev, struct device_attribute *attr,
2414 	char *buf)
2415 {
2416 	struct Scsi_Host *shost = class_to_shost(cdev);
2417 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2418 
2419 	return snprintf(buf, PAGE_SIZE, "%02d.%02d.%02d.%02d\n",
2420 	    (ioc->facts.FWVersion.Word & 0xFF000000) >> 24,
2421 	    (ioc->facts.FWVersion.Word & 0x00FF0000) >> 16,
2422 	    (ioc->facts.FWVersion.Word & 0x0000FF00) >> 8,
2423 	    ioc->facts.FWVersion.Word & 0x000000FF);
2424 }
2425 static DEVICE_ATTR(version_fw, S_IRUGO, _ctl_version_fw_show, NULL);
2426 
2427 /**
2428  * _ctl_version_bios_show - bios version
2429  * @cdev - pointer to embedded class device
2430  * @buf - the buffer returned
2431  *
2432  * A sysfs 'read-only' shost attribute.
2433  */
2434 static ssize_t
2435 _ctl_version_bios_show(struct device *cdev, struct device_attribute *attr,
2436 	char *buf)
2437 {
2438 	struct Scsi_Host *shost = class_to_shost(cdev);
2439 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2440 
2441 	u32 version = le32_to_cpu(ioc->bios_pg3.BiosVersion);
2442 
2443 	return snprintf(buf, PAGE_SIZE, "%02d.%02d.%02d.%02d\n",
2444 	    (version & 0xFF000000) >> 24,
2445 	    (version & 0x00FF0000) >> 16,
2446 	    (version & 0x0000FF00) >> 8,
2447 	    version & 0x000000FF);
2448 }
2449 static DEVICE_ATTR(version_bios, S_IRUGO, _ctl_version_bios_show, NULL);
2450 
2451 /**
2452  * _ctl_version_mpi_show - MPI (message passing interface) version
2453  * @cdev - pointer to embedded class device
2454  * @buf - the buffer returned
2455  *
2456  * A sysfs 'read-only' shost attribute.
2457  */
2458 static ssize_t
2459 _ctl_version_mpi_show(struct device *cdev, struct device_attribute *attr,
2460 	char *buf)
2461 {
2462 	struct Scsi_Host *shost = class_to_shost(cdev);
2463 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2464 
2465 	return snprintf(buf, PAGE_SIZE, "%03x.%02x\n",
2466 	    ioc->facts.MsgVersion, ioc->facts.HeaderVersion >> 8);
2467 }
2468 static DEVICE_ATTR(version_mpi, S_IRUGO, _ctl_version_mpi_show, NULL);
2469 
2470 /**
2471  * _ctl_version_product_show - product name
2472  * @cdev - pointer to embedded class device
2473  * @buf - the buffer returned
2474  *
2475  * A sysfs 'read-only' shost attribute.
2476  */
2477 static ssize_t
2478 _ctl_version_product_show(struct device *cdev, struct device_attribute *attr,
2479 	char *buf)
2480 {
2481 	struct Scsi_Host *shost = class_to_shost(cdev);
2482 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2483 
2484 	return snprintf(buf, 16, "%s\n", ioc->manu_pg0.ChipName);
2485 }
2486 static DEVICE_ATTR(version_product, S_IRUGO, _ctl_version_product_show, NULL);
2487 
2488 /**
2489  * _ctl_version_nvdata_persistent_show - ndvata persistent version
2490  * @cdev - pointer to embedded class device
2491  * @buf - the buffer returned
2492  *
2493  * A sysfs 'read-only' shost attribute.
2494  */
2495 static ssize_t
2496 _ctl_version_nvdata_persistent_show(struct device *cdev,
2497 	struct device_attribute *attr, char *buf)
2498 {
2499 	struct Scsi_Host *shost = class_to_shost(cdev);
2500 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2501 
2502 	return snprintf(buf, PAGE_SIZE, "%08xh\n",
2503 	    le32_to_cpu(ioc->iounit_pg0.NvdataVersionPersistent.Word));
2504 }
2505 static DEVICE_ATTR(version_nvdata_persistent, S_IRUGO,
2506 	_ctl_version_nvdata_persistent_show, NULL);
2507 
2508 /**
2509  * _ctl_version_nvdata_default_show - nvdata default version
2510  * @cdev - pointer to embedded class device
2511  * @buf - the buffer returned
2512  *
2513  * A sysfs 'read-only' shost attribute.
2514  */
2515 static ssize_t
2516 _ctl_version_nvdata_default_show(struct device *cdev, struct device_attribute
2517 	*attr, char *buf)
2518 {
2519 	struct Scsi_Host *shost = class_to_shost(cdev);
2520 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2521 
2522 	return snprintf(buf, PAGE_SIZE, "%08xh\n",
2523 	    le32_to_cpu(ioc->iounit_pg0.NvdataVersionDefault.Word));
2524 }
2525 static DEVICE_ATTR(version_nvdata_default, S_IRUGO,
2526 	_ctl_version_nvdata_default_show, NULL);
2527 
2528 /**
2529  * _ctl_board_name_show - board name
2530  * @cdev - pointer to embedded class device
2531  * @buf - the buffer returned
2532  *
2533  * A sysfs 'read-only' shost attribute.
2534  */
2535 static ssize_t
2536 _ctl_board_name_show(struct device *cdev, struct device_attribute *attr,
2537 	char *buf)
2538 {
2539 	struct Scsi_Host *shost = class_to_shost(cdev);
2540 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2541 
2542 	return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardName);
2543 }
2544 static DEVICE_ATTR(board_name, S_IRUGO, _ctl_board_name_show, NULL);
2545 
2546 /**
2547  * _ctl_board_assembly_show - board assembly name
2548  * @cdev - pointer to embedded class device
2549  * @buf - the buffer returned
2550  *
2551  * A sysfs 'read-only' shost attribute.
2552  */
2553 static ssize_t
2554 _ctl_board_assembly_show(struct device *cdev, struct device_attribute *attr,
2555 	char *buf)
2556 {
2557 	struct Scsi_Host *shost = class_to_shost(cdev);
2558 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2559 
2560 	return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardAssembly);
2561 }
2562 static DEVICE_ATTR(board_assembly, S_IRUGO, _ctl_board_assembly_show, NULL);
2563 
2564 /**
2565  * _ctl_board_tracer_show - board tracer number
2566  * @cdev - pointer to embedded class device
2567  * @buf - the buffer returned
2568  *
2569  * A sysfs 'read-only' shost attribute.
2570  */
2571 static ssize_t
2572 _ctl_board_tracer_show(struct device *cdev, struct device_attribute *attr,
2573 	char *buf)
2574 {
2575 	struct Scsi_Host *shost = class_to_shost(cdev);
2576 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2577 
2578 	return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardTracerNumber);
2579 }
2580 static DEVICE_ATTR(board_tracer, S_IRUGO, _ctl_board_tracer_show, NULL);
2581 
2582 /**
2583  * _ctl_io_delay_show - io missing delay
2584  * @cdev - pointer to embedded class device
2585  * @buf - the buffer returned
2586  *
2587  * This is for firmware implemention for deboucing device
2588  * removal events.
2589  *
2590  * A sysfs 'read-only' shost attribute.
2591  */
2592 static ssize_t
2593 _ctl_io_delay_show(struct device *cdev, struct device_attribute *attr,
2594 	char *buf)
2595 {
2596 	struct Scsi_Host *shost = class_to_shost(cdev);
2597 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2598 
2599 	return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->io_missing_delay);
2600 }
2601 static DEVICE_ATTR(io_delay, S_IRUGO, _ctl_io_delay_show, NULL);
2602 
2603 /**
2604  * _ctl_device_delay_show - device missing delay
2605  * @cdev - pointer to embedded class device
2606  * @buf - the buffer returned
2607  *
2608  * This is for firmware implemention for deboucing device
2609  * removal events.
2610  *
2611  * A sysfs 'read-only' shost attribute.
2612  */
2613 static ssize_t
2614 _ctl_device_delay_show(struct device *cdev, struct device_attribute *attr,
2615 	char *buf)
2616 {
2617 	struct Scsi_Host *shost = class_to_shost(cdev);
2618 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2619 
2620 	return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->device_missing_delay);
2621 }
2622 static DEVICE_ATTR(device_delay, S_IRUGO, _ctl_device_delay_show, NULL);
2623 
2624 /**
2625  * _ctl_fw_queue_depth_show - global credits
2626  * @cdev - pointer to embedded class device
2627  * @buf - the buffer returned
2628  *
2629  * This is firmware queue depth limit
2630  *
2631  * A sysfs 'read-only' shost attribute.
2632  */
2633 static ssize_t
2634 _ctl_fw_queue_depth_show(struct device *cdev, struct device_attribute *attr,
2635 	char *buf)
2636 {
2637 	struct Scsi_Host *shost = class_to_shost(cdev);
2638 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2639 
2640 	return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->facts.RequestCredit);
2641 }
2642 static DEVICE_ATTR(fw_queue_depth, S_IRUGO, _ctl_fw_queue_depth_show, NULL);
2643 
2644 /**
2645  * _ctl_sas_address_show - sas address
2646  * @cdev - pointer to embedded class device
2647  * @buf - the buffer returned
2648  *
2649  * This is the controller sas address
2650  *
2651  * A sysfs 'read-only' shost attribute.
2652  */
2653 static ssize_t
2654 _ctl_host_sas_address_show(struct device *cdev, struct device_attribute *attr,
2655 	char *buf)
2656 
2657 {
2658 	struct Scsi_Host *shost = class_to_shost(cdev);
2659 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2660 
2661 	return snprintf(buf, PAGE_SIZE, "0x%016llx\n",
2662 	    (unsigned long long)ioc->sas_hba.sas_address);
2663 }
2664 static DEVICE_ATTR(host_sas_address, S_IRUGO,
2665 	_ctl_host_sas_address_show, NULL);
2666 
2667 /**
2668  * _ctl_logging_level_show - logging level
2669  * @cdev - pointer to embedded class device
2670  * @buf - the buffer returned
2671  *
2672  * A sysfs 'read/write' shost attribute.
2673  */
2674 static ssize_t
2675 _ctl_logging_level_show(struct device *cdev, struct device_attribute *attr,
2676 	char *buf)
2677 {
2678 	struct Scsi_Host *shost = class_to_shost(cdev);
2679 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2680 
2681 	return snprintf(buf, PAGE_SIZE, "%08xh\n", ioc->logging_level);
2682 }
2683 static ssize_t
2684 _ctl_logging_level_store(struct device *cdev, struct device_attribute *attr,
2685 	const char *buf, size_t count)
2686 {
2687 	struct Scsi_Host *shost = class_to_shost(cdev);
2688 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2689 	int val = 0;
2690 
2691 	if (sscanf(buf, "%x", &val) != 1)
2692 		return -EINVAL;
2693 
2694 	ioc->logging_level = val;
2695 	pr_info(MPT3SAS_FMT "logging_level=%08xh\n", ioc->name,
2696 	    ioc->logging_level);
2697 	return strlen(buf);
2698 }
2699 static DEVICE_ATTR(logging_level, S_IRUGO | S_IWUSR, _ctl_logging_level_show,
2700 	_ctl_logging_level_store);
2701 
2702 /**
2703  * _ctl_fwfault_debug_show - show/store fwfault_debug
2704  * @cdev - pointer to embedded class device
2705  * @buf - the buffer returned
2706  *
2707  * mpt3sas_fwfault_debug is command line option
2708  * A sysfs 'read/write' shost attribute.
2709  */
2710 static ssize_t
2711 _ctl_fwfault_debug_show(struct device *cdev, struct device_attribute *attr,
2712 	char *buf)
2713 {
2714 	struct Scsi_Host *shost = class_to_shost(cdev);
2715 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2716 
2717 	return snprintf(buf, PAGE_SIZE, "%d\n", ioc->fwfault_debug);
2718 }
2719 static ssize_t
2720 _ctl_fwfault_debug_store(struct device *cdev, struct device_attribute *attr,
2721 	const char *buf, size_t count)
2722 {
2723 	struct Scsi_Host *shost = class_to_shost(cdev);
2724 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2725 	int val = 0;
2726 
2727 	if (sscanf(buf, "%d", &val) != 1)
2728 		return -EINVAL;
2729 
2730 	ioc->fwfault_debug = val;
2731 	pr_info(MPT3SAS_FMT "fwfault_debug=%d\n", ioc->name,
2732 	    ioc->fwfault_debug);
2733 	return strlen(buf);
2734 }
2735 static DEVICE_ATTR(fwfault_debug, S_IRUGO | S_IWUSR,
2736 	_ctl_fwfault_debug_show, _ctl_fwfault_debug_store);
2737 
2738 /**
2739  * _ctl_ioc_reset_count_show - ioc reset count
2740  * @cdev - pointer to embedded class device
2741  * @buf - the buffer returned
2742  *
2743  * This is firmware queue depth limit
2744  *
2745  * A sysfs 'read-only' shost attribute.
2746  */
2747 static ssize_t
2748 _ctl_ioc_reset_count_show(struct device *cdev, struct device_attribute *attr,
2749 	char *buf)
2750 {
2751 	struct Scsi_Host *shost = class_to_shost(cdev);
2752 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2753 
2754 	return snprintf(buf, PAGE_SIZE, "%d\n", ioc->ioc_reset_count);
2755 }
2756 static DEVICE_ATTR(ioc_reset_count, S_IRUGO, _ctl_ioc_reset_count_show, NULL);
2757 
2758 /**
2759  * _ctl_ioc_reply_queue_count_show - number of reply queues
2760  * @cdev - pointer to embedded class device
2761  * @buf - the buffer returned
2762  *
2763  * This is number of reply queues
2764  *
2765  * A sysfs 'read-only' shost attribute.
2766  */
2767 static ssize_t
2768 _ctl_ioc_reply_queue_count_show(struct device *cdev,
2769 	struct device_attribute *attr, char *buf)
2770 {
2771 	u8 reply_queue_count;
2772 	struct Scsi_Host *shost = class_to_shost(cdev);
2773 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2774 
2775 	if ((ioc->facts.IOCCapabilities &
2776 	    MPI2_IOCFACTS_CAPABILITY_MSI_X_INDEX) && ioc->msix_enable)
2777 		reply_queue_count = ioc->reply_queue_count;
2778 	else
2779 		reply_queue_count = 1;
2780 
2781 	return snprintf(buf, PAGE_SIZE, "%d\n", reply_queue_count);
2782 }
2783 static DEVICE_ATTR(reply_queue_count, S_IRUGO, _ctl_ioc_reply_queue_count_show,
2784 	NULL);
2785 
2786 /**
2787  * _ctl_BRM_status_show - Backup Rail Monitor Status
2788  * @cdev - pointer to embedded class device
2789  * @buf - the buffer returned
2790  *
2791  * This is number of reply queues
2792  *
2793  * A sysfs 'read-only' shost attribute.
2794  */
2795 static ssize_t
2796 _ctl_BRM_status_show(struct device *cdev, struct device_attribute *attr,
2797 	char *buf)
2798 {
2799 	struct Scsi_Host *shost = class_to_shost(cdev);
2800 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2801 	Mpi2IOUnitPage3_t *io_unit_pg3 = NULL;
2802 	Mpi2ConfigReply_t mpi_reply;
2803 	u16 backup_rail_monitor_status = 0;
2804 	u16 ioc_status;
2805 	int sz;
2806 	ssize_t rc = 0;
2807 
2808 	if (!ioc->is_warpdrive) {
2809 		pr_err(MPT3SAS_FMT "%s: BRM attribute is only for"
2810 		    " warpdrive\n", ioc->name, __func__);
2811 		goto out;
2812 	}
2813 	/* pci_access_mutex lock acquired by sysfs show path */
2814 	mutex_lock(&ioc->pci_access_mutex);
2815 	if (ioc->pci_error_recovery || ioc->remove_host) {
2816 		mutex_unlock(&ioc->pci_access_mutex);
2817 		return 0;
2818 	}
2819 
2820 	/* allocate upto GPIOVal 36 entries */
2821 	sz = offsetof(Mpi2IOUnitPage3_t, GPIOVal) + (sizeof(u16) * 36);
2822 	io_unit_pg3 = kzalloc(sz, GFP_KERNEL);
2823 	if (!io_unit_pg3) {
2824 		pr_err(MPT3SAS_FMT "%s: failed allocating memory "
2825 		    "for iounit_pg3: (%d) bytes\n", ioc->name, __func__, sz);
2826 		goto out;
2827 	}
2828 
2829 	if (mpt3sas_config_get_iounit_pg3(ioc, &mpi_reply, io_unit_pg3, sz) !=
2830 	    0) {
2831 		pr_err(MPT3SAS_FMT
2832 		    "%s: failed reading iounit_pg3\n", ioc->name,
2833 		    __func__);
2834 		goto out;
2835 	}
2836 
2837 	ioc_status = le16_to_cpu(mpi_reply.IOCStatus) & MPI2_IOCSTATUS_MASK;
2838 	if (ioc_status != MPI2_IOCSTATUS_SUCCESS) {
2839 		pr_err(MPT3SAS_FMT "%s: iounit_pg3 failed with "
2840 		    "ioc_status(0x%04x)\n", ioc->name, __func__, ioc_status);
2841 		goto out;
2842 	}
2843 
2844 	if (io_unit_pg3->GPIOCount < 25) {
2845 		pr_err(MPT3SAS_FMT "%s: iounit_pg3->GPIOCount less than "
2846 		     "25 entries, detected (%d) entries\n", ioc->name, __func__,
2847 		    io_unit_pg3->GPIOCount);
2848 		goto out;
2849 	}
2850 
2851 	/* BRM status is in bit zero of GPIOVal[24] */
2852 	backup_rail_monitor_status = le16_to_cpu(io_unit_pg3->GPIOVal[24]);
2853 	rc = snprintf(buf, PAGE_SIZE, "%d\n", (backup_rail_monitor_status & 1));
2854 
2855  out:
2856 	kfree(io_unit_pg3);
2857 	mutex_unlock(&ioc->pci_access_mutex);
2858 	return rc;
2859 }
2860 static DEVICE_ATTR(BRM_status, S_IRUGO, _ctl_BRM_status_show, NULL);
2861 
2862 struct DIAG_BUFFER_START {
2863 	__le32	Size;
2864 	__le32	DiagVersion;
2865 	u8	BufferType;
2866 	u8	Reserved[3];
2867 	__le32	Reserved1;
2868 	__le32	Reserved2;
2869 	__le32	Reserved3;
2870 };
2871 
2872 /**
2873  * _ctl_host_trace_buffer_size_show - host buffer size (trace only)
2874  * @cdev - pointer to embedded class device
2875  * @buf - the buffer returned
2876  *
2877  * A sysfs 'read-only' shost attribute.
2878  */
2879 static ssize_t
2880 _ctl_host_trace_buffer_size_show(struct device *cdev,
2881 	struct device_attribute *attr, char *buf)
2882 {
2883 	struct Scsi_Host *shost = class_to_shost(cdev);
2884 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2885 	u32 size = 0;
2886 	struct DIAG_BUFFER_START *request_data;
2887 
2888 	if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) {
2889 		pr_err(MPT3SAS_FMT
2890 			"%s: host_trace_buffer is not registered\n",
2891 			ioc->name, __func__);
2892 		return 0;
2893 	}
2894 
2895 	if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2896 	    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
2897 		pr_err(MPT3SAS_FMT
2898 			"%s: host_trace_buffer is not registered\n",
2899 			ioc->name, __func__);
2900 		return 0;
2901 	}
2902 
2903 	request_data = (struct DIAG_BUFFER_START *)
2904 	    ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE];
2905 	if ((le32_to_cpu(request_data->DiagVersion) == 0x00000000 ||
2906 	    le32_to_cpu(request_data->DiagVersion) == 0x01000000 ||
2907 	    le32_to_cpu(request_data->DiagVersion) == 0x01010000) &&
2908 	    le32_to_cpu(request_data->Reserved3) == 0x4742444c)
2909 		size = le32_to_cpu(request_data->Size);
2910 
2911 	ioc->ring_buffer_sz = size;
2912 	return snprintf(buf, PAGE_SIZE, "%d\n", size);
2913 }
2914 static DEVICE_ATTR(host_trace_buffer_size, S_IRUGO,
2915 	_ctl_host_trace_buffer_size_show, NULL);
2916 
2917 /**
2918  * _ctl_host_trace_buffer_show - firmware ring buffer (trace only)
2919  * @cdev - pointer to embedded class device
2920  * @buf - the buffer returned
2921  *
2922  * A sysfs 'read/write' shost attribute.
2923  *
2924  * You will only be able to read 4k bytes of ring buffer at a time.
2925  * In order to read beyond 4k bytes, you will have to write out the
2926  * offset to the same attribute, it will move the pointer.
2927  */
2928 static ssize_t
2929 _ctl_host_trace_buffer_show(struct device *cdev, struct device_attribute *attr,
2930 	char *buf)
2931 {
2932 	struct Scsi_Host *shost = class_to_shost(cdev);
2933 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2934 	void *request_data;
2935 	u32 size;
2936 
2937 	if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) {
2938 		pr_err(MPT3SAS_FMT
2939 			"%s: host_trace_buffer is not registered\n",
2940 			ioc->name, __func__);
2941 		return 0;
2942 	}
2943 
2944 	if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2945 	    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
2946 		pr_err(MPT3SAS_FMT
2947 			"%s: host_trace_buffer is not registered\n",
2948 			ioc->name, __func__);
2949 		return 0;
2950 	}
2951 
2952 	if (ioc->ring_buffer_offset > ioc->ring_buffer_sz)
2953 		return 0;
2954 
2955 	size = ioc->ring_buffer_sz - ioc->ring_buffer_offset;
2956 	size = (size >= PAGE_SIZE) ? (PAGE_SIZE - 1) : size;
2957 	request_data = ioc->diag_buffer[0] + ioc->ring_buffer_offset;
2958 	memcpy(buf, request_data, size);
2959 	return size;
2960 }
2961 
2962 static ssize_t
2963 _ctl_host_trace_buffer_store(struct device *cdev, struct device_attribute *attr,
2964 	const char *buf, size_t count)
2965 {
2966 	struct Scsi_Host *shost = class_to_shost(cdev);
2967 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2968 	int val = 0;
2969 
2970 	if (sscanf(buf, "%d", &val) != 1)
2971 		return -EINVAL;
2972 
2973 	ioc->ring_buffer_offset = val;
2974 	return strlen(buf);
2975 }
2976 static DEVICE_ATTR(host_trace_buffer, S_IRUGO | S_IWUSR,
2977 	_ctl_host_trace_buffer_show, _ctl_host_trace_buffer_store);
2978 
2979 
2980 /*****************************************/
2981 
2982 /**
2983  * _ctl_host_trace_buffer_enable_show - firmware ring buffer (trace only)
2984  * @cdev - pointer to embedded class device
2985  * @buf - the buffer returned
2986  *
2987  * A sysfs 'read/write' shost attribute.
2988  *
2989  * This is a mechnism to post/release host_trace_buffers
2990  */
2991 static ssize_t
2992 _ctl_host_trace_buffer_enable_show(struct device *cdev,
2993 	struct device_attribute *attr, char *buf)
2994 {
2995 	struct Scsi_Host *shost = class_to_shost(cdev);
2996 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2997 
2998 	if ((!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) ||
2999 	   ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3000 	    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0))
3001 		return snprintf(buf, PAGE_SIZE, "off\n");
3002 	else if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3003 	    MPT3_DIAG_BUFFER_IS_RELEASED))
3004 		return snprintf(buf, PAGE_SIZE, "release\n");
3005 	else
3006 		return snprintf(buf, PAGE_SIZE, "post\n");
3007 }
3008 
3009 static ssize_t
3010 _ctl_host_trace_buffer_enable_store(struct device *cdev,
3011 	struct device_attribute *attr, const char *buf, size_t count)
3012 {
3013 	struct Scsi_Host *shost = class_to_shost(cdev);
3014 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3015 	char str[10] = "";
3016 	struct mpt3_diag_register diag_register;
3017 	u8 issue_reset = 0;
3018 
3019 	/* don't allow post/release occurr while recovery is active */
3020 	if (ioc->shost_recovery || ioc->remove_host ||
3021 	    ioc->pci_error_recovery || ioc->is_driver_loading)
3022 		return -EBUSY;
3023 
3024 	if (sscanf(buf, "%9s", str) != 1)
3025 		return -EINVAL;
3026 
3027 	if (!strcmp(str, "post")) {
3028 		/* exit out if host buffers are already posted */
3029 		if ((ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) &&
3030 		    (ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3031 		    MPT3_DIAG_BUFFER_IS_REGISTERED) &&
3032 		    ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3033 		    MPT3_DIAG_BUFFER_IS_RELEASED) == 0))
3034 			goto out;
3035 		memset(&diag_register, 0, sizeof(struct mpt3_diag_register));
3036 		pr_info(MPT3SAS_FMT "posting host trace buffers\n",
3037 		    ioc->name);
3038 		diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_TRACE;
3039 		diag_register.requested_buffer_size = (1024 * 1024);
3040 		diag_register.unique_id = 0x7075900;
3041 		ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] = 0;
3042 		_ctl_diag_register_2(ioc,  &diag_register);
3043 	} else if (!strcmp(str, "release")) {
3044 		/* exit out if host buffers are already released */
3045 		if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE])
3046 			goto out;
3047 		if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3048 		    MPT3_DIAG_BUFFER_IS_REGISTERED) == 0)
3049 			goto out;
3050 		if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
3051 		    MPT3_DIAG_BUFFER_IS_RELEASED))
3052 			goto out;
3053 		pr_info(MPT3SAS_FMT "releasing host trace buffer\n",
3054 		    ioc->name);
3055 		mpt3sas_send_diag_release(ioc, MPI2_DIAG_BUF_TYPE_TRACE,
3056 		    &issue_reset);
3057 	}
3058 
3059  out:
3060 	return strlen(buf);
3061 }
3062 static DEVICE_ATTR(host_trace_buffer_enable, S_IRUGO | S_IWUSR,
3063 	_ctl_host_trace_buffer_enable_show,
3064 	_ctl_host_trace_buffer_enable_store);
3065 
3066 /*********** diagnostic trigger suppport *********************************/
3067 
3068 /**
3069  * _ctl_diag_trigger_master_show - show the diag_trigger_master attribute
3070  * @cdev - pointer to embedded class device
3071  * @buf - the buffer returned
3072  *
3073  * A sysfs 'read/write' shost attribute.
3074  */
3075 static ssize_t
3076 _ctl_diag_trigger_master_show(struct device *cdev,
3077 	struct device_attribute *attr, char *buf)
3078 
3079 {
3080 	struct Scsi_Host *shost = class_to_shost(cdev);
3081 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3082 	unsigned long flags;
3083 	ssize_t rc;
3084 
3085 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3086 	rc = sizeof(struct SL_WH_MASTER_TRIGGER_T);
3087 	memcpy(buf, &ioc->diag_trigger_master, rc);
3088 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3089 	return rc;
3090 }
3091 
3092 /**
3093  * _ctl_diag_trigger_master_store - store the diag_trigger_master attribute
3094  * @cdev - pointer to embedded class device
3095  * @buf - the buffer returned
3096  *
3097  * A sysfs 'read/write' shost attribute.
3098  */
3099 static ssize_t
3100 _ctl_diag_trigger_master_store(struct device *cdev,
3101 	struct device_attribute *attr, const char *buf, size_t count)
3102 
3103 {
3104 	struct Scsi_Host *shost = class_to_shost(cdev);
3105 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3106 	unsigned long flags;
3107 	ssize_t rc;
3108 
3109 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3110 	rc = min(sizeof(struct SL_WH_MASTER_TRIGGER_T), count);
3111 	memset(&ioc->diag_trigger_master, 0,
3112 	    sizeof(struct SL_WH_MASTER_TRIGGER_T));
3113 	memcpy(&ioc->diag_trigger_master, buf, rc);
3114 	ioc->diag_trigger_master.MasterData |=
3115 	    (MASTER_TRIGGER_FW_FAULT + MASTER_TRIGGER_ADAPTER_RESET);
3116 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3117 	return rc;
3118 }
3119 static DEVICE_ATTR(diag_trigger_master, S_IRUGO | S_IWUSR,
3120 	_ctl_diag_trigger_master_show, _ctl_diag_trigger_master_store);
3121 
3122 
3123 /**
3124  * _ctl_diag_trigger_event_show - show the diag_trigger_event attribute
3125  * @cdev - pointer to embedded class device
3126  * @buf - the buffer returned
3127  *
3128  * A sysfs 'read/write' shost attribute.
3129  */
3130 static ssize_t
3131 _ctl_diag_trigger_event_show(struct device *cdev,
3132 	struct device_attribute *attr, char *buf)
3133 {
3134 	struct Scsi_Host *shost = class_to_shost(cdev);
3135 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3136 	unsigned long flags;
3137 	ssize_t rc;
3138 
3139 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3140 	rc = sizeof(struct SL_WH_EVENT_TRIGGERS_T);
3141 	memcpy(buf, &ioc->diag_trigger_event, rc);
3142 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3143 	return rc;
3144 }
3145 
3146 /**
3147  * _ctl_diag_trigger_event_store - store the diag_trigger_event attribute
3148  * @cdev - pointer to embedded class device
3149  * @buf - the buffer returned
3150  *
3151  * A sysfs 'read/write' shost attribute.
3152  */
3153 static ssize_t
3154 _ctl_diag_trigger_event_store(struct device *cdev,
3155 	struct device_attribute *attr, const char *buf, size_t count)
3156 
3157 {
3158 	struct Scsi_Host *shost = class_to_shost(cdev);
3159 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3160 	unsigned long flags;
3161 	ssize_t sz;
3162 
3163 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3164 	sz = min(sizeof(struct SL_WH_EVENT_TRIGGERS_T), count);
3165 	memset(&ioc->diag_trigger_event, 0,
3166 	    sizeof(struct SL_WH_EVENT_TRIGGERS_T));
3167 	memcpy(&ioc->diag_trigger_event, buf, sz);
3168 	if (ioc->diag_trigger_event.ValidEntries > NUM_VALID_ENTRIES)
3169 		ioc->diag_trigger_event.ValidEntries = NUM_VALID_ENTRIES;
3170 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3171 	return sz;
3172 }
3173 static DEVICE_ATTR(diag_trigger_event, S_IRUGO | S_IWUSR,
3174 	_ctl_diag_trigger_event_show, _ctl_diag_trigger_event_store);
3175 
3176 
3177 /**
3178  * _ctl_diag_trigger_scsi_show - show the diag_trigger_scsi attribute
3179  * @cdev - pointer to embedded class device
3180  * @buf - the buffer returned
3181  *
3182  * A sysfs 'read/write' shost attribute.
3183  */
3184 static ssize_t
3185 _ctl_diag_trigger_scsi_show(struct device *cdev,
3186 	struct device_attribute *attr, char *buf)
3187 {
3188 	struct Scsi_Host *shost = class_to_shost(cdev);
3189 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3190 	unsigned long flags;
3191 	ssize_t rc;
3192 
3193 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3194 	rc = sizeof(struct SL_WH_SCSI_TRIGGERS_T);
3195 	memcpy(buf, &ioc->diag_trigger_scsi, rc);
3196 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3197 	return rc;
3198 }
3199 
3200 /**
3201  * _ctl_diag_trigger_scsi_store - store the diag_trigger_scsi attribute
3202  * @cdev - pointer to embedded class device
3203  * @buf - the buffer returned
3204  *
3205  * A sysfs 'read/write' shost attribute.
3206  */
3207 static ssize_t
3208 _ctl_diag_trigger_scsi_store(struct device *cdev,
3209 	struct device_attribute *attr, const char *buf, size_t count)
3210 {
3211 	struct Scsi_Host *shost = class_to_shost(cdev);
3212 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3213 	unsigned long flags;
3214 	ssize_t sz;
3215 
3216 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3217 	sz = min(sizeof(struct SL_WH_SCSI_TRIGGERS_T), count);
3218 	memset(&ioc->diag_trigger_scsi, 0,
3219 	    sizeof(struct SL_WH_EVENT_TRIGGERS_T));
3220 	memcpy(&ioc->diag_trigger_scsi, buf, sz);
3221 	if (ioc->diag_trigger_scsi.ValidEntries > NUM_VALID_ENTRIES)
3222 		ioc->diag_trigger_scsi.ValidEntries = NUM_VALID_ENTRIES;
3223 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3224 	return sz;
3225 }
3226 static DEVICE_ATTR(diag_trigger_scsi, S_IRUGO | S_IWUSR,
3227 	_ctl_diag_trigger_scsi_show, _ctl_diag_trigger_scsi_store);
3228 
3229 
3230 /**
3231  * _ctl_diag_trigger_scsi_show - show the diag_trigger_mpi attribute
3232  * @cdev - pointer to embedded class device
3233  * @buf - the buffer returned
3234  *
3235  * A sysfs 'read/write' shost attribute.
3236  */
3237 static ssize_t
3238 _ctl_diag_trigger_mpi_show(struct device *cdev,
3239 	struct device_attribute *attr, char *buf)
3240 {
3241 	struct Scsi_Host *shost = class_to_shost(cdev);
3242 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3243 	unsigned long flags;
3244 	ssize_t rc;
3245 
3246 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3247 	rc = sizeof(struct SL_WH_MPI_TRIGGERS_T);
3248 	memcpy(buf, &ioc->diag_trigger_mpi, rc);
3249 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3250 	return rc;
3251 }
3252 
3253 /**
3254  * _ctl_diag_trigger_mpi_store - store the diag_trigger_mpi attribute
3255  * @cdev - pointer to embedded class device
3256  * @buf - the buffer returned
3257  *
3258  * A sysfs 'read/write' shost attribute.
3259  */
3260 static ssize_t
3261 _ctl_diag_trigger_mpi_store(struct device *cdev,
3262 	struct device_attribute *attr, const char *buf, size_t count)
3263 {
3264 	struct Scsi_Host *shost = class_to_shost(cdev);
3265 	struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3266 	unsigned long flags;
3267 	ssize_t sz;
3268 
3269 	spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3270 	sz = min(sizeof(struct SL_WH_MPI_TRIGGERS_T), count);
3271 	memset(&ioc->diag_trigger_mpi, 0,
3272 	    sizeof(ioc->diag_trigger_mpi));
3273 	memcpy(&ioc->diag_trigger_mpi, buf, sz);
3274 	if (ioc->diag_trigger_mpi.ValidEntries > NUM_VALID_ENTRIES)
3275 		ioc->diag_trigger_mpi.ValidEntries = NUM_VALID_ENTRIES;
3276 	spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3277 	return sz;
3278 }
3279 
3280 static DEVICE_ATTR(diag_trigger_mpi, S_IRUGO | S_IWUSR,
3281 	_ctl_diag_trigger_mpi_show, _ctl_diag_trigger_mpi_store);
3282 
3283 /*********** diagnostic trigger suppport *** END ****************************/
3284 
3285 
3286 
3287 /*****************************************/
3288 
3289 struct device_attribute *mpt3sas_host_attrs[] = {
3290 	&dev_attr_version_fw,
3291 	&dev_attr_version_bios,
3292 	&dev_attr_version_mpi,
3293 	&dev_attr_version_product,
3294 	&dev_attr_version_nvdata_persistent,
3295 	&dev_attr_version_nvdata_default,
3296 	&dev_attr_board_name,
3297 	&dev_attr_board_assembly,
3298 	&dev_attr_board_tracer,
3299 	&dev_attr_io_delay,
3300 	&dev_attr_device_delay,
3301 	&dev_attr_logging_level,
3302 	&dev_attr_fwfault_debug,
3303 	&dev_attr_fw_queue_depth,
3304 	&dev_attr_host_sas_address,
3305 	&dev_attr_ioc_reset_count,
3306 	&dev_attr_host_trace_buffer_size,
3307 	&dev_attr_host_trace_buffer,
3308 	&dev_attr_host_trace_buffer_enable,
3309 	&dev_attr_reply_queue_count,
3310 	&dev_attr_diag_trigger_master,
3311 	&dev_attr_diag_trigger_event,
3312 	&dev_attr_diag_trigger_scsi,
3313 	&dev_attr_diag_trigger_mpi,
3314 	&dev_attr_BRM_status,
3315 	NULL,
3316 };
3317 
3318 /* device attributes */
3319 
3320 /**
3321  * _ctl_device_sas_address_show - sas address
3322  * @cdev - pointer to embedded class device
3323  * @buf - the buffer returned
3324  *
3325  * This is the sas address for the target
3326  *
3327  * A sysfs 'read-only' shost attribute.
3328  */
3329 static ssize_t
3330 _ctl_device_sas_address_show(struct device *dev, struct device_attribute *attr,
3331 	char *buf)
3332 {
3333 	struct scsi_device *sdev = to_scsi_device(dev);
3334 	struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3335 
3336 	return snprintf(buf, PAGE_SIZE, "0x%016llx\n",
3337 	    (unsigned long long)sas_device_priv_data->sas_target->sas_address);
3338 }
3339 static DEVICE_ATTR(sas_address, S_IRUGO, _ctl_device_sas_address_show, NULL);
3340 
3341 /**
3342  * _ctl_device_handle_show - device handle
3343  * @cdev - pointer to embedded class device
3344  * @buf - the buffer returned
3345  *
3346  * This is the firmware assigned device handle
3347  *
3348  * A sysfs 'read-only' shost attribute.
3349  */
3350 static ssize_t
3351 _ctl_device_handle_show(struct device *dev, struct device_attribute *attr,
3352 	char *buf)
3353 {
3354 	struct scsi_device *sdev = to_scsi_device(dev);
3355 	struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3356 
3357 	return snprintf(buf, PAGE_SIZE, "0x%04x\n",
3358 	    sas_device_priv_data->sas_target->handle);
3359 }
3360 static DEVICE_ATTR(sas_device_handle, S_IRUGO, _ctl_device_handle_show, NULL);
3361 
3362 struct device_attribute *mpt3sas_dev_attrs[] = {
3363 	&dev_attr_sas_address,
3364 	&dev_attr_sas_device_handle,
3365 	NULL,
3366 };
3367 
3368 /* file operations table for mpt3ctl device */
3369 static const struct file_operations ctl_fops = {
3370 	.owner = THIS_MODULE,
3371 	.unlocked_ioctl = _ctl_ioctl,
3372 	.poll = _ctl_poll,
3373 	.fasync = _ctl_fasync,
3374 #ifdef CONFIG_COMPAT
3375 	.compat_ioctl = _ctl_ioctl_compat,
3376 #endif
3377 };
3378 
3379 /* file operations table for mpt2ctl device */
3380 static const struct file_operations ctl_gen2_fops = {
3381 	.owner = THIS_MODULE,
3382 	.unlocked_ioctl = _ctl_mpt2_ioctl,
3383 	.poll = _ctl_poll,
3384 	.fasync = _ctl_fasync,
3385 #ifdef CONFIG_COMPAT
3386 	.compat_ioctl = _ctl_mpt2_ioctl_compat,
3387 #endif
3388 };
3389 
3390 static struct miscdevice ctl_dev = {
3391 	.minor  = MPT3SAS_MINOR,
3392 	.name   = MPT3SAS_DEV_NAME,
3393 	.fops   = &ctl_fops,
3394 };
3395 
3396 static struct miscdevice gen2_ctl_dev = {
3397 	.minor  = MPT2SAS_MINOR,
3398 	.name   = MPT2SAS_DEV_NAME,
3399 	.fops   = &ctl_gen2_fops,
3400 };
3401 
3402 /**
3403  * mpt3sas_ctl_init - main entry point for ctl.
3404  *
3405  */
3406 void
3407 mpt3sas_ctl_init(ushort hbas_to_enumerate)
3408 {
3409 	async_queue = NULL;
3410 
3411 	/* Don't register mpt3ctl ioctl device if
3412 	 * hbas_to_enumarate is one.
3413 	 */
3414 	if (hbas_to_enumerate != 1)
3415 		if (misc_register(&ctl_dev) < 0)
3416 			pr_err("%s can't register misc device [minor=%d]\n",
3417 			    MPT3SAS_DRIVER_NAME, MPT3SAS_MINOR);
3418 
3419 	/* Don't register mpt3ctl ioctl device if
3420 	 * hbas_to_enumarate is two.
3421 	 */
3422 	if (hbas_to_enumerate != 2)
3423 		if (misc_register(&gen2_ctl_dev) < 0)
3424 			pr_err("%s can't register misc device [minor=%d]\n",
3425 			    MPT2SAS_DRIVER_NAME, MPT2SAS_MINOR);
3426 
3427 	init_waitqueue_head(&ctl_poll_wait);
3428 }
3429 
3430 /**
3431  * mpt3sas_ctl_exit - exit point for ctl
3432  *
3433  */
3434 void
3435 mpt3sas_ctl_exit(ushort hbas_to_enumerate)
3436 {
3437 	struct MPT3SAS_ADAPTER *ioc;
3438 	int i;
3439 
3440 	list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
3441 
3442 		/* free memory associated to diag buffers */
3443 		for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
3444 			if (!ioc->diag_buffer[i])
3445 				continue;
3446 			if (!(ioc->diag_buffer_status[i] &
3447 			    MPT3_DIAG_BUFFER_IS_REGISTERED))
3448 				continue;
3449 			if ((ioc->diag_buffer_status[i] &
3450 			    MPT3_DIAG_BUFFER_IS_RELEASED))
3451 				continue;
3452 			pci_free_consistent(ioc->pdev, ioc->diag_buffer_sz[i],
3453 			ioc->diag_buffer[i], ioc->diag_buffer_dma[i]);
3454 			ioc->diag_buffer[i] = NULL;
3455 			ioc->diag_buffer_status[i] = 0;
3456 		}
3457 
3458 		kfree(ioc->event_log);
3459 	}
3460 	if (hbas_to_enumerate != 1)
3461 		misc_deregister(&ctl_dev);
3462 	if (hbas_to_enumerate != 2)
3463 		misc_deregister(&gen2_ctl_dev);
3464 }
3465