xref: /openbmc/linux/drivers/scsi/qla2xxx/qla_bsg.c (revision 63705da3)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * QLogic Fibre Channel HBA Driver
4  * Copyright (c)  2003-2014 QLogic Corporation
5  */
6 #include "qla_def.h"
7 #include "qla_gbl.h"
8 
9 #include <linux/kthread.h>
10 #include <linux/vmalloc.h>
11 #include <linux/delay.h>
12 #include <linux/bsg-lib.h>
13 
14 static void qla2xxx_free_fcport_work(struct work_struct *work)
15 {
16 	struct fc_port *fcport = container_of(work, typeof(*fcport),
17 	    free_work);
18 
19 	qla2x00_free_fcport(fcport);
20 }
21 
22 /* BSG support for ELS/CT pass through */
23 void qla2x00_bsg_job_done(srb_t *sp, int res)
24 {
25 	struct bsg_job *bsg_job = sp->u.bsg_job;
26 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
27 
28 	ql_dbg(ql_dbg_user, sp->vha, 0x7009,
29 	    "%s: sp hdl %x, result=%x bsg ptr %p\n",
30 	    __func__, sp->handle, res, bsg_job);
31 
32 	sp->free(sp);
33 
34 	bsg_reply->result = res;
35 	bsg_job_done(bsg_job, bsg_reply->result,
36 		       bsg_reply->reply_payload_rcv_len);
37 }
38 
39 void qla2x00_bsg_sp_free(srb_t *sp)
40 {
41 	struct qla_hw_data *ha = sp->vha->hw;
42 	struct bsg_job *bsg_job = sp->u.bsg_job;
43 	struct fc_bsg_request *bsg_request = bsg_job->request;
44 	struct qla_mt_iocb_rqst_fx00 *piocb_rqst;
45 
46 	if (sp->type == SRB_FXIOCB_BCMD) {
47 		piocb_rqst = (struct qla_mt_iocb_rqst_fx00 *)
48 		    &bsg_request->rqst_data.h_vendor.vendor_cmd[1];
49 
50 		if (piocb_rqst->flags & SRB_FXDISC_REQ_DMA_VALID)
51 			dma_unmap_sg(&ha->pdev->dev,
52 			    bsg_job->request_payload.sg_list,
53 			    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
54 
55 		if (piocb_rqst->flags & SRB_FXDISC_RESP_DMA_VALID)
56 			dma_unmap_sg(&ha->pdev->dev,
57 			    bsg_job->reply_payload.sg_list,
58 			    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
59 	} else {
60 
61 		if (sp->remap.remapped) {
62 			dma_pool_free(ha->purex_dma_pool, sp->remap.rsp.buf,
63 			    sp->remap.rsp.dma);
64 			dma_pool_free(ha->purex_dma_pool, sp->remap.req.buf,
65 			    sp->remap.req.dma);
66 		} else {
67 			dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
68 				bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
69 
70 			dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
71 				bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
72 		}
73 	}
74 
75 	if (sp->type == SRB_CT_CMD ||
76 	    sp->type == SRB_FXIOCB_BCMD ||
77 	    sp->type == SRB_ELS_CMD_HST) {
78 		INIT_WORK(&sp->fcport->free_work, qla2xxx_free_fcport_work);
79 		queue_work(ha->wq, &sp->fcport->free_work);
80 	}
81 
82 	qla2x00_rel_sp(sp);
83 }
84 
85 int
86 qla24xx_fcp_prio_cfg_valid(scsi_qla_host_t *vha,
87 	struct qla_fcp_prio_cfg *pri_cfg, uint8_t flag)
88 {
89 	int i, ret, num_valid;
90 	uint8_t *bcode;
91 	struct qla_fcp_prio_entry *pri_entry;
92 	uint32_t *bcode_val_ptr, bcode_val;
93 
94 	ret = 1;
95 	num_valid = 0;
96 	bcode = (uint8_t *)pri_cfg;
97 	bcode_val_ptr = (uint32_t *)pri_cfg;
98 	bcode_val = (uint32_t)(*bcode_val_ptr);
99 
100 	if (bcode_val == 0xFFFFFFFF) {
101 		/* No FCP Priority config data in flash */
102 		ql_dbg(ql_dbg_user, vha, 0x7051,
103 		    "No FCP Priority config data.\n");
104 		return 0;
105 	}
106 
107 	if (memcmp(bcode, "HQOS", 4)) {
108 		/* Invalid FCP priority data header*/
109 		ql_dbg(ql_dbg_user, vha, 0x7052,
110 		    "Invalid FCP Priority data header. bcode=0x%x.\n",
111 		    bcode_val);
112 		return 0;
113 	}
114 	if (flag != 1)
115 		return ret;
116 
117 	pri_entry = &pri_cfg->entry[0];
118 	for (i = 0; i < pri_cfg->num_entries; i++) {
119 		if (pri_entry->flags & FCP_PRIO_ENTRY_TAG_VALID)
120 			num_valid++;
121 		pri_entry++;
122 	}
123 
124 	if (num_valid == 0) {
125 		/* No valid FCP priority data entries */
126 		ql_dbg(ql_dbg_user, vha, 0x7053,
127 		    "No valid FCP Priority data entries.\n");
128 		ret = 0;
129 	} else {
130 		/* FCP priority data is valid */
131 		ql_dbg(ql_dbg_user, vha, 0x7054,
132 		    "Valid FCP priority data. num entries = %d.\n",
133 		    num_valid);
134 	}
135 
136 	return ret;
137 }
138 
139 static int
140 qla24xx_proc_fcp_prio_cfg_cmd(struct bsg_job *bsg_job)
141 {
142 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
143 	struct fc_bsg_request *bsg_request = bsg_job->request;
144 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
145 	scsi_qla_host_t *vha = shost_priv(host);
146 	struct qla_hw_data *ha = vha->hw;
147 	int ret = 0;
148 	uint32_t len;
149 	uint32_t oper;
150 
151 	if (!(IS_QLA24XX_TYPE(ha) || IS_QLA25XX(ha) || IS_P3P_TYPE(ha))) {
152 		ret = -EINVAL;
153 		goto exit_fcp_prio_cfg;
154 	}
155 
156 	/* Get the sub command */
157 	oper = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
158 
159 	/* Only set config is allowed if config memory is not allocated */
160 	if (!ha->fcp_prio_cfg && (oper != QLFC_FCP_PRIO_SET_CONFIG)) {
161 		ret = -EINVAL;
162 		goto exit_fcp_prio_cfg;
163 	}
164 	switch (oper) {
165 	case QLFC_FCP_PRIO_DISABLE:
166 		if (ha->flags.fcp_prio_enabled) {
167 			ha->flags.fcp_prio_enabled = 0;
168 			ha->fcp_prio_cfg->attributes &=
169 				~FCP_PRIO_ATTR_ENABLE;
170 			qla24xx_update_all_fcp_prio(vha);
171 			bsg_reply->result = DID_OK;
172 		} else {
173 			ret = -EINVAL;
174 			bsg_reply->result = (DID_ERROR << 16);
175 			goto exit_fcp_prio_cfg;
176 		}
177 		break;
178 
179 	case QLFC_FCP_PRIO_ENABLE:
180 		if (!ha->flags.fcp_prio_enabled) {
181 			if (ha->fcp_prio_cfg) {
182 				ha->flags.fcp_prio_enabled = 1;
183 				ha->fcp_prio_cfg->attributes |=
184 				    FCP_PRIO_ATTR_ENABLE;
185 				qla24xx_update_all_fcp_prio(vha);
186 				bsg_reply->result = DID_OK;
187 			} else {
188 				ret = -EINVAL;
189 				bsg_reply->result = (DID_ERROR << 16);
190 				goto exit_fcp_prio_cfg;
191 			}
192 		}
193 		break;
194 
195 	case QLFC_FCP_PRIO_GET_CONFIG:
196 		len = bsg_job->reply_payload.payload_len;
197 		if (!len || len > FCP_PRIO_CFG_SIZE) {
198 			ret = -EINVAL;
199 			bsg_reply->result = (DID_ERROR << 16);
200 			goto exit_fcp_prio_cfg;
201 		}
202 
203 		bsg_reply->result = DID_OK;
204 		bsg_reply->reply_payload_rcv_len =
205 			sg_copy_from_buffer(
206 			bsg_job->reply_payload.sg_list,
207 			bsg_job->reply_payload.sg_cnt, ha->fcp_prio_cfg,
208 			len);
209 
210 		break;
211 
212 	case QLFC_FCP_PRIO_SET_CONFIG:
213 		len = bsg_job->request_payload.payload_len;
214 		if (!len || len > FCP_PRIO_CFG_SIZE) {
215 			bsg_reply->result = (DID_ERROR << 16);
216 			ret = -EINVAL;
217 			goto exit_fcp_prio_cfg;
218 		}
219 
220 		if (!ha->fcp_prio_cfg) {
221 			ha->fcp_prio_cfg = vmalloc(FCP_PRIO_CFG_SIZE);
222 			if (!ha->fcp_prio_cfg) {
223 				ql_log(ql_log_warn, vha, 0x7050,
224 				    "Unable to allocate memory for fcp prio "
225 				    "config data (%x).\n", FCP_PRIO_CFG_SIZE);
226 				bsg_reply->result = (DID_ERROR << 16);
227 				ret = -ENOMEM;
228 				goto exit_fcp_prio_cfg;
229 			}
230 		}
231 
232 		memset(ha->fcp_prio_cfg, 0, FCP_PRIO_CFG_SIZE);
233 		sg_copy_to_buffer(bsg_job->request_payload.sg_list,
234 		bsg_job->request_payload.sg_cnt, ha->fcp_prio_cfg,
235 			FCP_PRIO_CFG_SIZE);
236 
237 		/* validate fcp priority data */
238 
239 		if (!qla24xx_fcp_prio_cfg_valid(vha, ha->fcp_prio_cfg, 1)) {
240 			bsg_reply->result = (DID_ERROR << 16);
241 			ret = -EINVAL;
242 			/* If buffer was invalidatic int
243 			 * fcp_prio_cfg is of no use
244 			 */
245 			vfree(ha->fcp_prio_cfg);
246 			ha->fcp_prio_cfg = NULL;
247 			goto exit_fcp_prio_cfg;
248 		}
249 
250 		ha->flags.fcp_prio_enabled = 0;
251 		if (ha->fcp_prio_cfg->attributes & FCP_PRIO_ATTR_ENABLE)
252 			ha->flags.fcp_prio_enabled = 1;
253 		qla24xx_update_all_fcp_prio(vha);
254 		bsg_reply->result = DID_OK;
255 		break;
256 	default:
257 		ret = -EINVAL;
258 		break;
259 	}
260 exit_fcp_prio_cfg:
261 	if (!ret)
262 		bsg_job_done(bsg_job, bsg_reply->result,
263 			       bsg_reply->reply_payload_rcv_len);
264 	return ret;
265 }
266 
267 static int
268 qla2x00_process_els(struct bsg_job *bsg_job)
269 {
270 	struct fc_bsg_request *bsg_request = bsg_job->request;
271 	struct fc_rport *rport;
272 	fc_port_t *fcport = NULL;
273 	struct Scsi_Host *host;
274 	scsi_qla_host_t *vha;
275 	struct qla_hw_data *ha;
276 	srb_t *sp;
277 	const char *type;
278 	int req_sg_cnt, rsp_sg_cnt;
279 	int rval =  (DID_ERROR << 16);
280 	uint16_t nextlid = 0;
281 	uint32_t els_cmd = 0;
282 
283 	if (bsg_request->msgcode == FC_BSG_RPT_ELS) {
284 		rport = fc_bsg_to_rport(bsg_job);
285 		fcport = *(fc_port_t **) rport->dd_data;
286 		host = rport_to_shost(rport);
287 		vha = shost_priv(host);
288 		ha = vha->hw;
289 		type = "FC_BSG_RPT_ELS";
290 	} else {
291 		host = fc_bsg_to_shost(bsg_job);
292 		vha = shost_priv(host);
293 		ha = vha->hw;
294 		type = "FC_BSG_HST_ELS_NOLOGIN";
295 		els_cmd = bsg_request->rqst_data.h_els.command_code;
296 		if (els_cmd == ELS_AUTH_ELS)
297 			return qla_edif_process_els(vha, bsg_job);
298 	}
299 
300 	if (!vha->flags.online) {
301 		ql_log(ql_log_warn, vha, 0x7005, "Host not online.\n");
302 		rval = -EIO;
303 		goto done;
304 	}
305 
306 	/* pass through is supported only for ISP 4Gb or higher */
307 	if (!IS_FWI2_CAPABLE(ha)) {
308 		ql_dbg(ql_dbg_user, vha, 0x7001,
309 		    "ELS passthru not supported for ISP23xx based adapters.\n");
310 		rval = -EPERM;
311 		goto done;
312 	}
313 
314 	/*  Multiple SG's are not supported for ELS requests */
315 	if (bsg_job->request_payload.sg_cnt > 1 ||
316 		bsg_job->reply_payload.sg_cnt > 1) {
317 		ql_dbg(ql_dbg_user, vha, 0x7002,
318 		    "Multiple SG's are not supported for ELS requests, "
319 		    "request_sg_cnt=%x reply_sg_cnt=%x.\n",
320 		    bsg_job->request_payload.sg_cnt,
321 		    bsg_job->reply_payload.sg_cnt);
322 		rval = -EPERM;
323 		goto done;
324 	}
325 
326 	/* ELS request for rport */
327 	if (bsg_request->msgcode == FC_BSG_RPT_ELS) {
328 		/* make sure the rport is logged in,
329 		 * if not perform fabric login
330 		 */
331 		if (qla2x00_fabric_login(vha, fcport, &nextlid)) {
332 			ql_dbg(ql_dbg_user, vha, 0x7003,
333 			    "Failed to login port %06X for ELS passthru.\n",
334 			    fcport->d_id.b24);
335 			rval = -EIO;
336 			goto done;
337 		}
338 	} else {
339 		/* Allocate a dummy fcport structure, since functions
340 		 * preparing the IOCB and mailbox command retrieves port
341 		 * specific information from fcport structure. For Host based
342 		 * ELS commands there will be no fcport structure allocated
343 		 */
344 		fcport = qla2x00_alloc_fcport(vha, GFP_KERNEL);
345 		if (!fcport) {
346 			rval = -ENOMEM;
347 			goto done;
348 		}
349 
350 		/* Initialize all required  fields of fcport */
351 		fcport->vha = vha;
352 		fcport->d_id.b.al_pa =
353 			bsg_request->rqst_data.h_els.port_id[0];
354 		fcport->d_id.b.area =
355 			bsg_request->rqst_data.h_els.port_id[1];
356 		fcport->d_id.b.domain =
357 			bsg_request->rqst_data.h_els.port_id[2];
358 		fcport->loop_id =
359 			(fcport->d_id.b.al_pa == 0xFD) ?
360 			NPH_FABRIC_CONTROLLER : NPH_F_PORT;
361 	}
362 
363 	req_sg_cnt =
364 		dma_map_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
365 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
366 	if (!req_sg_cnt) {
367 		dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
368 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
369 		rval = -ENOMEM;
370 		goto done_free_fcport;
371 	}
372 
373 	rsp_sg_cnt = dma_map_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
374 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
375         if (!rsp_sg_cnt) {
376 		dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
377 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
378 		rval = -ENOMEM;
379 		goto done_free_fcport;
380 	}
381 
382 	if ((req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
383 		(rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
384 		ql_log(ql_log_warn, vha, 0x7008,
385 		    "dma mapping resulted in different sg counts, "
386 		    "request_sg_cnt: %x dma_request_sg_cnt:%x reply_sg_cnt:%x "
387 		    "dma_reply_sg_cnt:%x.\n", bsg_job->request_payload.sg_cnt,
388 		    req_sg_cnt, bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
389 		rval = -EAGAIN;
390 		goto done_unmap_sg;
391 	}
392 
393 	/* Alloc SRB structure */
394 	sp = qla2x00_get_sp(vha, fcport, GFP_KERNEL);
395 	if (!sp) {
396 		rval = -ENOMEM;
397 		goto done_unmap_sg;
398 	}
399 
400 	sp->type =
401 		(bsg_request->msgcode == FC_BSG_RPT_ELS ?
402 		 SRB_ELS_CMD_RPT : SRB_ELS_CMD_HST);
403 	sp->name =
404 		(bsg_request->msgcode == FC_BSG_RPT_ELS ?
405 		 "bsg_els_rpt" : "bsg_els_hst");
406 	sp->u.bsg_job = bsg_job;
407 	sp->free = qla2x00_bsg_sp_free;
408 	sp->done = qla2x00_bsg_job_done;
409 
410 	ql_dbg(ql_dbg_user, vha, 0x700a,
411 	    "bsg rqst type: %s els type: %x - loop-id=%x "
412 	    "portid=%-2x%02x%02x.\n", type,
413 	    bsg_request->rqst_data.h_els.command_code, fcport->loop_id,
414 	    fcport->d_id.b.domain, fcport->d_id.b.area, fcport->d_id.b.al_pa);
415 
416 	rval = qla2x00_start_sp(sp);
417 	if (rval != QLA_SUCCESS) {
418 		ql_log(ql_log_warn, vha, 0x700e,
419 		    "qla2x00_start_sp failed = %d\n", rval);
420 		qla2x00_rel_sp(sp);
421 		rval = -EIO;
422 		goto done_unmap_sg;
423 	}
424 	return rval;
425 
426 done_unmap_sg:
427 	dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
428 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
429 	dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
430 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
431 	goto done_free_fcport;
432 
433 done_free_fcport:
434 	if (bsg_request->msgcode != FC_BSG_RPT_ELS)
435 		qla2x00_free_fcport(fcport);
436 done:
437 	return rval;
438 }
439 
440 static inline uint16_t
441 qla24xx_calc_ct_iocbs(uint16_t dsds)
442 {
443 	uint16_t iocbs;
444 
445 	iocbs = 1;
446 	if (dsds > 2) {
447 		iocbs += (dsds - 2) / 5;
448 		if ((dsds - 2) % 5)
449 			iocbs++;
450 	}
451 	return iocbs;
452 }
453 
454 static int
455 qla2x00_process_ct(struct bsg_job *bsg_job)
456 {
457 	srb_t *sp;
458 	struct fc_bsg_request *bsg_request = bsg_job->request;
459 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
460 	scsi_qla_host_t *vha = shost_priv(host);
461 	struct qla_hw_data *ha = vha->hw;
462 	int rval = (DID_ERROR << 16);
463 	int req_sg_cnt, rsp_sg_cnt;
464 	uint16_t loop_id;
465 	struct fc_port *fcport;
466 	char  *type = "FC_BSG_HST_CT";
467 
468 	req_sg_cnt =
469 		dma_map_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
470 			bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
471 	if (!req_sg_cnt) {
472 		ql_log(ql_log_warn, vha, 0x700f,
473 		    "dma_map_sg return %d for request\n", req_sg_cnt);
474 		rval = -ENOMEM;
475 		goto done;
476 	}
477 
478 	rsp_sg_cnt = dma_map_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
479 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
480 	if (!rsp_sg_cnt) {
481 		ql_log(ql_log_warn, vha, 0x7010,
482 		    "dma_map_sg return %d for reply\n", rsp_sg_cnt);
483 		rval = -ENOMEM;
484 		goto done;
485 	}
486 
487 	if ((req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
488 	    (rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
489 		ql_log(ql_log_warn, vha, 0x7011,
490 		    "request_sg_cnt: %x dma_request_sg_cnt: %x reply_sg_cnt:%x "
491 		    "dma_reply_sg_cnt: %x\n", bsg_job->request_payload.sg_cnt,
492 		    req_sg_cnt, bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
493 		rval = -EAGAIN;
494 		goto done_unmap_sg;
495 	}
496 
497 	if (!vha->flags.online) {
498 		ql_log(ql_log_warn, vha, 0x7012,
499 		    "Host is not online.\n");
500 		rval = -EIO;
501 		goto done_unmap_sg;
502 	}
503 
504 	loop_id =
505 		(bsg_request->rqst_data.h_ct.preamble_word1 & 0xFF000000)
506 			>> 24;
507 	switch (loop_id) {
508 	case 0xFC:
509 		loop_id = NPH_SNS;
510 		break;
511 	case 0xFA:
512 		loop_id = vha->mgmt_svr_loop_id;
513 		break;
514 	default:
515 		ql_dbg(ql_dbg_user, vha, 0x7013,
516 		    "Unknown loop id: %x.\n", loop_id);
517 		rval = -EINVAL;
518 		goto done_unmap_sg;
519 	}
520 
521 	/* Allocate a dummy fcport structure, since functions preparing the
522 	 * IOCB and mailbox command retrieves port specific information
523 	 * from fcport structure. For Host based ELS commands there will be
524 	 * no fcport structure allocated
525 	 */
526 	fcport = qla2x00_alloc_fcport(vha, GFP_KERNEL);
527 	if (!fcport) {
528 		ql_log(ql_log_warn, vha, 0x7014,
529 		    "Failed to allocate fcport.\n");
530 		rval = -ENOMEM;
531 		goto done_unmap_sg;
532 	}
533 
534 	/* Initialize all required  fields of fcport */
535 	fcport->vha = vha;
536 	fcport->d_id.b.al_pa = bsg_request->rqst_data.h_ct.port_id[0];
537 	fcport->d_id.b.area = bsg_request->rqst_data.h_ct.port_id[1];
538 	fcport->d_id.b.domain = bsg_request->rqst_data.h_ct.port_id[2];
539 	fcport->loop_id = loop_id;
540 
541 	/* Alloc SRB structure */
542 	sp = qla2x00_get_sp(vha, fcport, GFP_KERNEL);
543 	if (!sp) {
544 		ql_log(ql_log_warn, vha, 0x7015,
545 		    "qla2x00_get_sp failed.\n");
546 		rval = -ENOMEM;
547 		goto done_free_fcport;
548 	}
549 
550 	sp->type = SRB_CT_CMD;
551 	sp->name = "bsg_ct";
552 	sp->iocbs = qla24xx_calc_ct_iocbs(req_sg_cnt + rsp_sg_cnt);
553 	sp->u.bsg_job = bsg_job;
554 	sp->free = qla2x00_bsg_sp_free;
555 	sp->done = qla2x00_bsg_job_done;
556 
557 	ql_dbg(ql_dbg_user, vha, 0x7016,
558 	    "bsg rqst type: %s else type: %x - "
559 	    "loop-id=%x portid=%02x%02x%02x.\n", type,
560 	    (bsg_request->rqst_data.h_ct.preamble_word2 >> 16),
561 	    fcport->loop_id, fcport->d_id.b.domain, fcport->d_id.b.area,
562 	    fcport->d_id.b.al_pa);
563 
564 	rval = qla2x00_start_sp(sp);
565 	if (rval != QLA_SUCCESS) {
566 		ql_log(ql_log_warn, vha, 0x7017,
567 		    "qla2x00_start_sp failed=%d.\n", rval);
568 		qla2x00_rel_sp(sp);
569 		rval = -EIO;
570 		goto done_free_fcport;
571 	}
572 	return rval;
573 
574 done_free_fcport:
575 	qla2x00_free_fcport(fcport);
576 done_unmap_sg:
577 	dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
578 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
579 	dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
580 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
581 done:
582 	return rval;
583 }
584 
585 /* Disable loopback mode */
586 static inline int
587 qla81xx_reset_loopback_mode(scsi_qla_host_t *vha, uint16_t *config,
588 			    int wait, int wait2)
589 {
590 	int ret = 0;
591 	int rval = 0;
592 	uint16_t new_config[4];
593 	struct qla_hw_data *ha = vha->hw;
594 
595 	if (!IS_QLA81XX(ha) && !IS_QLA8031(ha) && !IS_QLA8044(ha))
596 		goto done_reset_internal;
597 
598 	memset(new_config, 0 , sizeof(new_config));
599 	if ((config[0] & INTERNAL_LOOPBACK_MASK) >> 1 ==
600 	    ENABLE_INTERNAL_LOOPBACK ||
601 	    (config[0] & INTERNAL_LOOPBACK_MASK) >> 1 ==
602 	    ENABLE_EXTERNAL_LOOPBACK) {
603 		new_config[0] = config[0] & ~INTERNAL_LOOPBACK_MASK;
604 		ql_dbg(ql_dbg_user, vha, 0x70bf, "new_config[0]=%02x\n",
605 		    (new_config[0] & INTERNAL_LOOPBACK_MASK));
606 		memcpy(&new_config[1], &config[1], sizeof(uint16_t) * 3) ;
607 
608 		ha->notify_dcbx_comp = wait;
609 		ha->notify_lb_portup_comp = wait2;
610 
611 		ret = qla81xx_set_port_config(vha, new_config);
612 		if (ret != QLA_SUCCESS) {
613 			ql_log(ql_log_warn, vha, 0x7025,
614 			    "Set port config failed.\n");
615 			ha->notify_dcbx_comp = 0;
616 			ha->notify_lb_portup_comp = 0;
617 			rval = -EINVAL;
618 			goto done_reset_internal;
619 		}
620 
621 		/* Wait for DCBX complete event */
622 		if (wait && !wait_for_completion_timeout(&ha->dcbx_comp,
623 			(DCBX_COMP_TIMEOUT * HZ))) {
624 			ql_dbg(ql_dbg_user, vha, 0x7026,
625 			    "DCBX completion not received.\n");
626 			ha->notify_dcbx_comp = 0;
627 			ha->notify_lb_portup_comp = 0;
628 			rval = -EINVAL;
629 			goto done_reset_internal;
630 		} else
631 			ql_dbg(ql_dbg_user, vha, 0x7027,
632 			    "DCBX completion received.\n");
633 
634 		if (wait2 &&
635 		    !wait_for_completion_timeout(&ha->lb_portup_comp,
636 		    (LB_PORTUP_COMP_TIMEOUT * HZ))) {
637 			ql_dbg(ql_dbg_user, vha, 0x70c5,
638 			    "Port up completion not received.\n");
639 			ha->notify_lb_portup_comp = 0;
640 			rval = -EINVAL;
641 			goto done_reset_internal;
642 		} else
643 			ql_dbg(ql_dbg_user, vha, 0x70c6,
644 			    "Port up completion received.\n");
645 
646 		ha->notify_dcbx_comp = 0;
647 		ha->notify_lb_portup_comp = 0;
648 	}
649 done_reset_internal:
650 	return rval;
651 }
652 
653 /*
654  * Set the port configuration to enable the internal or external loopback
655  * depending on the loopback mode.
656  */
657 static inline int
658 qla81xx_set_loopback_mode(scsi_qla_host_t *vha, uint16_t *config,
659 	uint16_t *new_config, uint16_t mode)
660 {
661 	int ret = 0;
662 	int rval = 0;
663 	unsigned long rem_tmo = 0, current_tmo = 0;
664 	struct qla_hw_data *ha = vha->hw;
665 
666 	if (!IS_QLA81XX(ha) && !IS_QLA8031(ha) && !IS_QLA8044(ha))
667 		goto done_set_internal;
668 
669 	if (mode == INTERNAL_LOOPBACK)
670 		new_config[0] = config[0] | (ENABLE_INTERNAL_LOOPBACK << 1);
671 	else if (mode == EXTERNAL_LOOPBACK)
672 		new_config[0] = config[0] | (ENABLE_EXTERNAL_LOOPBACK << 1);
673 	ql_dbg(ql_dbg_user, vha, 0x70be,
674 	     "new_config[0]=%02x\n", (new_config[0] & INTERNAL_LOOPBACK_MASK));
675 
676 	memcpy(&new_config[1], &config[1], sizeof(uint16_t) * 3);
677 
678 	ha->notify_dcbx_comp = 1;
679 	ret = qla81xx_set_port_config(vha, new_config);
680 	if (ret != QLA_SUCCESS) {
681 		ql_log(ql_log_warn, vha, 0x7021,
682 		    "set port config failed.\n");
683 		ha->notify_dcbx_comp = 0;
684 		rval = -EINVAL;
685 		goto done_set_internal;
686 	}
687 
688 	/* Wait for DCBX complete event */
689 	current_tmo = DCBX_COMP_TIMEOUT * HZ;
690 	while (1) {
691 		rem_tmo = wait_for_completion_timeout(&ha->dcbx_comp,
692 		    current_tmo);
693 		if (!ha->idc_extend_tmo || rem_tmo) {
694 			ha->idc_extend_tmo = 0;
695 			break;
696 		}
697 		current_tmo = ha->idc_extend_tmo * HZ;
698 		ha->idc_extend_tmo = 0;
699 	}
700 
701 	if (!rem_tmo) {
702 		ql_dbg(ql_dbg_user, vha, 0x7022,
703 		    "DCBX completion not received.\n");
704 		ret = qla81xx_reset_loopback_mode(vha, new_config, 0, 0);
705 		/*
706 		 * If the reset of the loopback mode doesn't work take a FCoE
707 		 * dump and reset the chip.
708 		 */
709 		if (ret) {
710 			qla2xxx_dump_fw(vha);
711 			set_bit(ISP_ABORT_NEEDED, &vha->dpc_flags);
712 		}
713 		rval = -EINVAL;
714 	} else {
715 		if (ha->flags.idc_compl_status) {
716 			ql_dbg(ql_dbg_user, vha, 0x70c3,
717 			    "Bad status in IDC Completion AEN\n");
718 			rval = -EINVAL;
719 			ha->flags.idc_compl_status = 0;
720 		} else
721 			ql_dbg(ql_dbg_user, vha, 0x7023,
722 			    "DCBX completion received.\n");
723 	}
724 
725 	ha->notify_dcbx_comp = 0;
726 	ha->idc_extend_tmo = 0;
727 
728 done_set_internal:
729 	return rval;
730 }
731 
732 static int
733 qla2x00_process_loopback(struct bsg_job *bsg_job)
734 {
735 	struct fc_bsg_request *bsg_request = bsg_job->request;
736 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
737 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
738 	scsi_qla_host_t *vha = shost_priv(host);
739 	struct qla_hw_data *ha = vha->hw;
740 	int rval;
741 	uint8_t command_sent;
742 	char *type;
743 	struct msg_echo_lb elreq;
744 	uint16_t response[MAILBOX_REGISTER_COUNT];
745 	uint16_t config[4], new_config[4];
746 	uint8_t *fw_sts_ptr;
747 	void *req_data = NULL;
748 	dma_addr_t req_data_dma;
749 	uint32_t req_data_len;
750 	uint8_t *rsp_data = NULL;
751 	dma_addr_t rsp_data_dma;
752 	uint32_t rsp_data_len;
753 
754 	if (!vha->flags.online) {
755 		ql_log(ql_log_warn, vha, 0x7019, "Host is not online.\n");
756 		return -EIO;
757 	}
758 
759 	memset(&elreq, 0, sizeof(elreq));
760 
761 	elreq.req_sg_cnt = dma_map_sg(&ha->pdev->dev,
762 		bsg_job->request_payload.sg_list, bsg_job->request_payload.sg_cnt,
763 		DMA_TO_DEVICE);
764 
765 	if (!elreq.req_sg_cnt) {
766 		ql_log(ql_log_warn, vha, 0x701a,
767 		    "dma_map_sg returned %d for request.\n", elreq.req_sg_cnt);
768 		return -ENOMEM;
769 	}
770 
771 	elreq.rsp_sg_cnt = dma_map_sg(&ha->pdev->dev,
772 		bsg_job->reply_payload.sg_list, bsg_job->reply_payload.sg_cnt,
773 		DMA_FROM_DEVICE);
774 
775 	if (!elreq.rsp_sg_cnt) {
776 		ql_log(ql_log_warn, vha, 0x701b,
777 		    "dma_map_sg returned %d for reply.\n", elreq.rsp_sg_cnt);
778 		rval = -ENOMEM;
779 		goto done_unmap_req_sg;
780 	}
781 
782 	if ((elreq.req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
783 		(elreq.rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
784 		ql_log(ql_log_warn, vha, 0x701c,
785 		    "dma mapping resulted in different sg counts, "
786 		    "request_sg_cnt: %x dma_request_sg_cnt: %x "
787 		    "reply_sg_cnt: %x dma_reply_sg_cnt: %x.\n",
788 		    bsg_job->request_payload.sg_cnt, elreq.req_sg_cnt,
789 		    bsg_job->reply_payload.sg_cnt, elreq.rsp_sg_cnt);
790 		rval = -EAGAIN;
791 		goto done_unmap_sg;
792 	}
793 	req_data_len = rsp_data_len = bsg_job->request_payload.payload_len;
794 	req_data = dma_alloc_coherent(&ha->pdev->dev, req_data_len,
795 		&req_data_dma, GFP_KERNEL);
796 	if (!req_data) {
797 		ql_log(ql_log_warn, vha, 0x701d,
798 		    "dma alloc failed for req_data.\n");
799 		rval = -ENOMEM;
800 		goto done_unmap_sg;
801 	}
802 
803 	rsp_data = dma_alloc_coherent(&ha->pdev->dev, rsp_data_len,
804 		&rsp_data_dma, GFP_KERNEL);
805 	if (!rsp_data) {
806 		ql_log(ql_log_warn, vha, 0x7004,
807 		    "dma alloc failed for rsp_data.\n");
808 		rval = -ENOMEM;
809 		goto done_free_dma_req;
810 	}
811 
812 	/* Copy the request buffer in req_data now */
813 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
814 		bsg_job->request_payload.sg_cnt, req_data, req_data_len);
815 
816 	elreq.send_dma = req_data_dma;
817 	elreq.rcv_dma = rsp_data_dma;
818 	elreq.transfer_size = req_data_len;
819 
820 	elreq.options = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
821 	elreq.iteration_count =
822 	    bsg_request->rqst_data.h_vendor.vendor_cmd[2];
823 
824 	if (atomic_read(&vha->loop_state) == LOOP_READY &&
825 	    ((ha->current_topology == ISP_CFG_F && (elreq.options & 7) >= 2) ||
826 	    ((IS_QLA81XX(ha) || IS_QLA8031(ha) || IS_QLA8044(ha)) &&
827 	    get_unaligned_le32(req_data) == ELS_OPCODE_BYTE &&
828 	    req_data_len == MAX_ELS_FRAME_PAYLOAD &&
829 	    elreq.options == EXTERNAL_LOOPBACK))) {
830 		type = "FC_BSG_HST_VENDOR_ECHO_DIAG";
831 		ql_dbg(ql_dbg_user, vha, 0x701e,
832 		    "BSG request type: %s.\n", type);
833 		command_sent = INT_DEF_LB_ECHO_CMD;
834 		rval = qla2x00_echo_test(vha, &elreq, response);
835 	} else {
836 		if (IS_QLA81XX(ha) || IS_QLA8031(ha) || IS_QLA8044(ha)) {
837 			memset(config, 0, sizeof(config));
838 			memset(new_config, 0, sizeof(new_config));
839 
840 			if (qla81xx_get_port_config(vha, config)) {
841 				ql_log(ql_log_warn, vha, 0x701f,
842 				    "Get port config failed.\n");
843 				rval = -EPERM;
844 				goto done_free_dma_rsp;
845 			}
846 
847 			if ((config[0] & INTERNAL_LOOPBACK_MASK) != 0) {
848 				ql_dbg(ql_dbg_user, vha, 0x70c4,
849 				    "Loopback operation already in "
850 				    "progress.\n");
851 				rval = -EAGAIN;
852 				goto done_free_dma_rsp;
853 			}
854 
855 			ql_dbg(ql_dbg_user, vha, 0x70c0,
856 			    "elreq.options=%04x\n", elreq.options);
857 
858 			if (elreq.options == EXTERNAL_LOOPBACK)
859 				if (IS_QLA8031(ha) || IS_QLA8044(ha))
860 					rval = qla81xx_set_loopback_mode(vha,
861 					    config, new_config, elreq.options);
862 				else
863 					rval = qla81xx_reset_loopback_mode(vha,
864 					    config, 1, 0);
865 			else
866 				rval = qla81xx_set_loopback_mode(vha, config,
867 				    new_config, elreq.options);
868 
869 			if (rval) {
870 				rval = -EPERM;
871 				goto done_free_dma_rsp;
872 			}
873 
874 			type = "FC_BSG_HST_VENDOR_LOOPBACK";
875 			ql_dbg(ql_dbg_user, vha, 0x7028,
876 			    "BSG request type: %s.\n", type);
877 
878 			command_sent = INT_DEF_LB_LOOPBACK_CMD;
879 			rval = qla2x00_loopback_test(vha, &elreq, response);
880 
881 			if (response[0] == MBS_COMMAND_ERROR &&
882 					response[1] == MBS_LB_RESET) {
883 				ql_log(ql_log_warn, vha, 0x7029,
884 				    "MBX command error, Aborting ISP.\n");
885 				set_bit(ISP_ABORT_NEEDED, &vha->dpc_flags);
886 				qla2xxx_wake_dpc(vha);
887 				qla2x00_wait_for_chip_reset(vha);
888 				/* Also reset the MPI */
889 				if (IS_QLA81XX(ha)) {
890 					if (qla81xx_restart_mpi_firmware(vha) !=
891 					    QLA_SUCCESS) {
892 						ql_log(ql_log_warn, vha, 0x702a,
893 						    "MPI reset failed.\n");
894 					}
895 				}
896 
897 				rval = -EIO;
898 				goto done_free_dma_rsp;
899 			}
900 
901 			if (new_config[0]) {
902 				int ret;
903 
904 				/* Revert back to original port config
905 				 * Also clear internal loopback
906 				 */
907 				ret = qla81xx_reset_loopback_mode(vha,
908 				    new_config, 0, 1);
909 				if (ret) {
910 					/*
911 					 * If the reset of the loopback mode
912 					 * doesn't work take FCoE dump and then
913 					 * reset the chip.
914 					 */
915 					qla2xxx_dump_fw(vha);
916 					set_bit(ISP_ABORT_NEEDED,
917 					    &vha->dpc_flags);
918 				}
919 
920 			}
921 
922 		} else {
923 			type = "FC_BSG_HST_VENDOR_LOOPBACK";
924 			ql_dbg(ql_dbg_user, vha, 0x702b,
925 			    "BSG request type: %s.\n", type);
926 			command_sent = INT_DEF_LB_LOOPBACK_CMD;
927 			rval = qla2x00_loopback_test(vha, &elreq, response);
928 		}
929 	}
930 
931 	if (rval) {
932 		ql_log(ql_log_warn, vha, 0x702c,
933 		    "Vendor request %s failed.\n", type);
934 
935 		rval = 0;
936 		bsg_reply->result = (DID_ERROR << 16);
937 		bsg_reply->reply_payload_rcv_len = 0;
938 	} else {
939 		ql_dbg(ql_dbg_user, vha, 0x702d,
940 		    "Vendor request %s completed.\n", type);
941 		bsg_reply->result = (DID_OK << 16);
942 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
943 			bsg_job->reply_payload.sg_cnt, rsp_data,
944 			rsp_data_len);
945 	}
946 
947 	bsg_job->reply_len = sizeof(struct fc_bsg_reply) +
948 	    sizeof(response) + sizeof(uint8_t);
949 	fw_sts_ptr = bsg_job->reply + sizeof(struct fc_bsg_reply);
950 	memcpy(bsg_job->reply + sizeof(struct fc_bsg_reply), response,
951 			sizeof(response));
952 	fw_sts_ptr += sizeof(response);
953 	*fw_sts_ptr = command_sent;
954 
955 done_free_dma_rsp:
956 	dma_free_coherent(&ha->pdev->dev, rsp_data_len,
957 		rsp_data, rsp_data_dma);
958 done_free_dma_req:
959 	dma_free_coherent(&ha->pdev->dev, req_data_len,
960 		req_data, req_data_dma);
961 done_unmap_sg:
962 	dma_unmap_sg(&ha->pdev->dev,
963 	    bsg_job->reply_payload.sg_list,
964 	    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
965 done_unmap_req_sg:
966 	dma_unmap_sg(&ha->pdev->dev,
967 	    bsg_job->request_payload.sg_list,
968 	    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
969 	if (!rval)
970 		bsg_job_done(bsg_job, bsg_reply->result,
971 			       bsg_reply->reply_payload_rcv_len);
972 	return rval;
973 }
974 
975 static int
976 qla84xx_reset(struct bsg_job *bsg_job)
977 {
978 	struct fc_bsg_request *bsg_request = bsg_job->request;
979 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
980 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
981 	scsi_qla_host_t *vha = shost_priv(host);
982 	struct qla_hw_data *ha = vha->hw;
983 	int rval = 0;
984 	uint32_t flag;
985 
986 	if (!IS_QLA84XX(ha)) {
987 		ql_dbg(ql_dbg_user, vha, 0x702f, "Not 84xx, exiting.\n");
988 		return -EINVAL;
989 	}
990 
991 	flag = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
992 
993 	rval = qla84xx_reset_chip(vha, flag == A84_ISSUE_RESET_DIAG_FW);
994 
995 	if (rval) {
996 		ql_log(ql_log_warn, vha, 0x7030,
997 		    "Vendor request 84xx reset failed.\n");
998 		rval = (DID_ERROR << 16);
999 
1000 	} else {
1001 		ql_dbg(ql_dbg_user, vha, 0x7031,
1002 		    "Vendor request 84xx reset completed.\n");
1003 		bsg_reply->result = DID_OK;
1004 		bsg_job_done(bsg_job, bsg_reply->result,
1005 			       bsg_reply->reply_payload_rcv_len);
1006 	}
1007 
1008 	return rval;
1009 }
1010 
1011 static int
1012 qla84xx_updatefw(struct bsg_job *bsg_job)
1013 {
1014 	struct fc_bsg_request *bsg_request = bsg_job->request;
1015 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1016 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1017 	scsi_qla_host_t *vha = shost_priv(host);
1018 	struct qla_hw_data *ha = vha->hw;
1019 	struct verify_chip_entry_84xx *mn = NULL;
1020 	dma_addr_t mn_dma, fw_dma;
1021 	void *fw_buf = NULL;
1022 	int rval = 0;
1023 	uint32_t sg_cnt;
1024 	uint32_t data_len;
1025 	uint16_t options;
1026 	uint32_t flag;
1027 	uint32_t fw_ver;
1028 
1029 	if (!IS_QLA84XX(ha)) {
1030 		ql_dbg(ql_dbg_user, vha, 0x7032,
1031 		    "Not 84xx, exiting.\n");
1032 		return -EINVAL;
1033 	}
1034 
1035 	sg_cnt = dma_map_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
1036 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1037 	if (!sg_cnt) {
1038 		ql_log(ql_log_warn, vha, 0x7033,
1039 		    "dma_map_sg returned %d for request.\n", sg_cnt);
1040 		return -ENOMEM;
1041 	}
1042 
1043 	if (sg_cnt != bsg_job->request_payload.sg_cnt) {
1044 		ql_log(ql_log_warn, vha, 0x7034,
1045 		    "DMA mapping resulted in different sg counts, "
1046 		    "request_sg_cnt: %x dma_request_sg_cnt: %x.\n",
1047 		    bsg_job->request_payload.sg_cnt, sg_cnt);
1048 		rval = -EAGAIN;
1049 		goto done_unmap_sg;
1050 	}
1051 
1052 	data_len = bsg_job->request_payload.payload_len;
1053 	fw_buf = dma_alloc_coherent(&ha->pdev->dev, data_len,
1054 		&fw_dma, GFP_KERNEL);
1055 	if (!fw_buf) {
1056 		ql_log(ql_log_warn, vha, 0x7035,
1057 		    "DMA alloc failed for fw_buf.\n");
1058 		rval = -ENOMEM;
1059 		goto done_unmap_sg;
1060 	}
1061 
1062 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1063 		bsg_job->request_payload.sg_cnt, fw_buf, data_len);
1064 
1065 	mn = dma_pool_zalloc(ha->s_dma_pool, GFP_KERNEL, &mn_dma);
1066 	if (!mn) {
1067 		ql_log(ql_log_warn, vha, 0x7036,
1068 		    "DMA alloc failed for fw buffer.\n");
1069 		rval = -ENOMEM;
1070 		goto done_free_fw_buf;
1071 	}
1072 
1073 	flag = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
1074 	fw_ver = get_unaligned_le32((uint32_t *)fw_buf + 2);
1075 
1076 	mn->entry_type = VERIFY_CHIP_IOCB_TYPE;
1077 	mn->entry_count = 1;
1078 
1079 	options = VCO_FORCE_UPDATE | VCO_END_OF_DATA;
1080 	if (flag == A84_ISSUE_UPDATE_DIAGFW_CMD)
1081 		options |= VCO_DIAG_FW;
1082 
1083 	mn->options = cpu_to_le16(options);
1084 	mn->fw_ver =  cpu_to_le32(fw_ver);
1085 	mn->fw_size =  cpu_to_le32(data_len);
1086 	mn->fw_seq_size =  cpu_to_le32(data_len);
1087 	put_unaligned_le64(fw_dma, &mn->dsd.address);
1088 	mn->dsd.length = cpu_to_le32(data_len);
1089 	mn->data_seg_cnt = cpu_to_le16(1);
1090 
1091 	rval = qla2x00_issue_iocb_timeout(vha, mn, mn_dma, 0, 120);
1092 
1093 	if (rval) {
1094 		ql_log(ql_log_warn, vha, 0x7037,
1095 		    "Vendor request 84xx updatefw failed.\n");
1096 
1097 		rval = (DID_ERROR << 16);
1098 	} else {
1099 		ql_dbg(ql_dbg_user, vha, 0x7038,
1100 		    "Vendor request 84xx updatefw completed.\n");
1101 
1102 		bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1103 		bsg_reply->result = DID_OK;
1104 	}
1105 
1106 	dma_pool_free(ha->s_dma_pool, mn, mn_dma);
1107 
1108 done_free_fw_buf:
1109 	dma_free_coherent(&ha->pdev->dev, data_len, fw_buf, fw_dma);
1110 
1111 done_unmap_sg:
1112 	dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
1113 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1114 
1115 	if (!rval)
1116 		bsg_job_done(bsg_job, bsg_reply->result,
1117 			       bsg_reply->reply_payload_rcv_len);
1118 	return rval;
1119 }
1120 
1121 static int
1122 qla84xx_mgmt_cmd(struct bsg_job *bsg_job)
1123 {
1124 	struct fc_bsg_request *bsg_request = bsg_job->request;
1125 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1126 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1127 	scsi_qla_host_t *vha = shost_priv(host);
1128 	struct qla_hw_data *ha = vha->hw;
1129 	struct access_chip_84xx *mn = NULL;
1130 	dma_addr_t mn_dma, mgmt_dma;
1131 	void *mgmt_b = NULL;
1132 	int rval = 0;
1133 	struct qla_bsg_a84_mgmt *ql84_mgmt;
1134 	uint32_t sg_cnt;
1135 	uint32_t data_len = 0;
1136 	uint32_t dma_direction = DMA_NONE;
1137 
1138 	if (!IS_QLA84XX(ha)) {
1139 		ql_log(ql_log_warn, vha, 0x703a,
1140 		    "Not 84xx, exiting.\n");
1141 		return -EINVAL;
1142 	}
1143 
1144 	mn = dma_pool_zalloc(ha->s_dma_pool, GFP_KERNEL, &mn_dma);
1145 	if (!mn) {
1146 		ql_log(ql_log_warn, vha, 0x703c,
1147 		    "DMA alloc failed for fw buffer.\n");
1148 		return -ENOMEM;
1149 	}
1150 
1151 	mn->entry_type = ACCESS_CHIP_IOCB_TYPE;
1152 	mn->entry_count = 1;
1153 	ql84_mgmt = (void *)bsg_request + sizeof(struct fc_bsg_request);
1154 	switch (ql84_mgmt->mgmt.cmd) {
1155 	case QLA84_MGMT_READ_MEM:
1156 	case QLA84_MGMT_GET_INFO:
1157 		sg_cnt = dma_map_sg(&ha->pdev->dev,
1158 			bsg_job->reply_payload.sg_list,
1159 			bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1160 		if (!sg_cnt) {
1161 			ql_log(ql_log_warn, vha, 0x703d,
1162 			    "dma_map_sg returned %d for reply.\n", sg_cnt);
1163 			rval = -ENOMEM;
1164 			goto exit_mgmt;
1165 		}
1166 
1167 		dma_direction = DMA_FROM_DEVICE;
1168 
1169 		if (sg_cnt != bsg_job->reply_payload.sg_cnt) {
1170 			ql_log(ql_log_warn, vha, 0x703e,
1171 			    "DMA mapping resulted in different sg counts, "
1172 			    "reply_sg_cnt: %x dma_reply_sg_cnt: %x.\n",
1173 			    bsg_job->reply_payload.sg_cnt, sg_cnt);
1174 			rval = -EAGAIN;
1175 			goto done_unmap_sg;
1176 		}
1177 
1178 		data_len = bsg_job->reply_payload.payload_len;
1179 
1180 		mgmt_b = dma_alloc_coherent(&ha->pdev->dev, data_len,
1181 		    &mgmt_dma, GFP_KERNEL);
1182 		if (!mgmt_b) {
1183 			ql_log(ql_log_warn, vha, 0x703f,
1184 			    "DMA alloc failed for mgmt_b.\n");
1185 			rval = -ENOMEM;
1186 			goto done_unmap_sg;
1187 		}
1188 
1189 		if (ql84_mgmt->mgmt.cmd == QLA84_MGMT_READ_MEM) {
1190 			mn->options = cpu_to_le16(ACO_DUMP_MEMORY);
1191 			mn->parameter1 =
1192 				cpu_to_le32(
1193 				ql84_mgmt->mgmt.mgmtp.u.mem.start_addr);
1194 
1195 		} else if (ql84_mgmt->mgmt.cmd == QLA84_MGMT_GET_INFO) {
1196 			mn->options = cpu_to_le16(ACO_REQUEST_INFO);
1197 			mn->parameter1 =
1198 				cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.info.type);
1199 
1200 			mn->parameter2 =
1201 				cpu_to_le32(
1202 				ql84_mgmt->mgmt.mgmtp.u.info.context);
1203 		}
1204 		break;
1205 
1206 	case QLA84_MGMT_WRITE_MEM:
1207 		sg_cnt = dma_map_sg(&ha->pdev->dev,
1208 			bsg_job->request_payload.sg_list,
1209 			bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1210 
1211 		if (!sg_cnt) {
1212 			ql_log(ql_log_warn, vha, 0x7040,
1213 			    "dma_map_sg returned %d.\n", sg_cnt);
1214 			rval = -ENOMEM;
1215 			goto exit_mgmt;
1216 		}
1217 
1218 		dma_direction = DMA_TO_DEVICE;
1219 
1220 		if (sg_cnt != bsg_job->request_payload.sg_cnt) {
1221 			ql_log(ql_log_warn, vha, 0x7041,
1222 			    "DMA mapping resulted in different sg counts, "
1223 			    "request_sg_cnt: %x dma_request_sg_cnt: %x.\n",
1224 			    bsg_job->request_payload.sg_cnt, sg_cnt);
1225 			rval = -EAGAIN;
1226 			goto done_unmap_sg;
1227 		}
1228 
1229 		data_len = bsg_job->request_payload.payload_len;
1230 		mgmt_b = dma_alloc_coherent(&ha->pdev->dev, data_len,
1231 			&mgmt_dma, GFP_KERNEL);
1232 		if (!mgmt_b) {
1233 			ql_log(ql_log_warn, vha, 0x7042,
1234 			    "DMA alloc failed for mgmt_b.\n");
1235 			rval = -ENOMEM;
1236 			goto done_unmap_sg;
1237 		}
1238 
1239 		sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1240 			bsg_job->request_payload.sg_cnt, mgmt_b, data_len);
1241 
1242 		mn->options = cpu_to_le16(ACO_LOAD_MEMORY);
1243 		mn->parameter1 =
1244 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.mem.start_addr);
1245 		break;
1246 
1247 	case QLA84_MGMT_CHNG_CONFIG:
1248 		mn->options = cpu_to_le16(ACO_CHANGE_CONFIG_PARAM);
1249 		mn->parameter1 =
1250 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.config.id);
1251 
1252 		mn->parameter2 =
1253 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.config.param0);
1254 
1255 		mn->parameter3 =
1256 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.config.param1);
1257 		break;
1258 
1259 	default:
1260 		rval = -EIO;
1261 		goto exit_mgmt;
1262 	}
1263 
1264 	if (ql84_mgmt->mgmt.cmd != QLA84_MGMT_CHNG_CONFIG) {
1265 		mn->total_byte_cnt = cpu_to_le32(ql84_mgmt->mgmt.len);
1266 		mn->dseg_count = cpu_to_le16(1);
1267 		put_unaligned_le64(mgmt_dma, &mn->dsd.address);
1268 		mn->dsd.length = cpu_to_le32(ql84_mgmt->mgmt.len);
1269 	}
1270 
1271 	rval = qla2x00_issue_iocb(vha, mn, mn_dma, 0);
1272 
1273 	if (rval) {
1274 		ql_log(ql_log_warn, vha, 0x7043,
1275 		    "Vendor request 84xx mgmt failed.\n");
1276 
1277 		rval = (DID_ERROR << 16);
1278 
1279 	} else {
1280 		ql_dbg(ql_dbg_user, vha, 0x7044,
1281 		    "Vendor request 84xx mgmt completed.\n");
1282 
1283 		bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1284 		bsg_reply->result = DID_OK;
1285 
1286 		if ((ql84_mgmt->mgmt.cmd == QLA84_MGMT_READ_MEM) ||
1287 			(ql84_mgmt->mgmt.cmd == QLA84_MGMT_GET_INFO)) {
1288 			bsg_reply->reply_payload_rcv_len =
1289 				bsg_job->reply_payload.payload_len;
1290 
1291 			sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1292 				bsg_job->reply_payload.sg_cnt, mgmt_b,
1293 				data_len);
1294 		}
1295 	}
1296 
1297 done_unmap_sg:
1298 	if (mgmt_b)
1299 		dma_free_coherent(&ha->pdev->dev, data_len, mgmt_b, mgmt_dma);
1300 
1301 	if (dma_direction == DMA_TO_DEVICE)
1302 		dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
1303 			bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1304 	else if (dma_direction == DMA_FROM_DEVICE)
1305 		dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
1306 			bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1307 
1308 exit_mgmt:
1309 	dma_pool_free(ha->s_dma_pool, mn, mn_dma);
1310 
1311 	if (!rval)
1312 		bsg_job_done(bsg_job, bsg_reply->result,
1313 			       bsg_reply->reply_payload_rcv_len);
1314 	return rval;
1315 }
1316 
1317 static int
1318 qla24xx_iidma(struct bsg_job *bsg_job)
1319 {
1320 	struct fc_bsg_request *bsg_request = bsg_job->request;
1321 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1322 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1323 	scsi_qla_host_t *vha = shost_priv(host);
1324 	int rval = 0;
1325 	struct qla_port_param *port_param = NULL;
1326 	fc_port_t *fcport = NULL;
1327 	int found = 0;
1328 	uint16_t mb[MAILBOX_REGISTER_COUNT];
1329 	uint8_t *rsp_ptr = NULL;
1330 
1331 	if (!IS_IIDMA_CAPABLE(vha->hw)) {
1332 		ql_log(ql_log_info, vha, 0x7046, "iiDMA not supported.\n");
1333 		return -EINVAL;
1334 	}
1335 
1336 	port_param = (void *)bsg_request + sizeof(struct fc_bsg_request);
1337 	if (port_param->fc_scsi_addr.dest_type != EXT_DEF_TYPE_WWPN) {
1338 		ql_log(ql_log_warn, vha, 0x7048,
1339 		    "Invalid destination type.\n");
1340 		return -EINVAL;
1341 	}
1342 
1343 	list_for_each_entry(fcport, &vha->vp_fcports, list) {
1344 		if (fcport->port_type != FCT_TARGET)
1345 			continue;
1346 
1347 		if (memcmp(port_param->fc_scsi_addr.dest_addr.wwpn,
1348 			fcport->port_name, sizeof(fcport->port_name)))
1349 			continue;
1350 
1351 		found = 1;
1352 		break;
1353 	}
1354 
1355 	if (!found) {
1356 		ql_log(ql_log_warn, vha, 0x7049,
1357 		    "Failed to find port.\n");
1358 		return -EINVAL;
1359 	}
1360 
1361 	if (atomic_read(&fcport->state) != FCS_ONLINE) {
1362 		ql_log(ql_log_warn, vha, 0x704a,
1363 		    "Port is not online.\n");
1364 		return -EINVAL;
1365 	}
1366 
1367 	if (fcport->flags & FCF_LOGIN_NEEDED) {
1368 		ql_log(ql_log_warn, vha, 0x704b,
1369 		    "Remote port not logged in flags = 0x%x.\n", fcport->flags);
1370 		return -EINVAL;
1371 	}
1372 
1373 	if (port_param->mode)
1374 		rval = qla2x00_set_idma_speed(vha, fcport->loop_id,
1375 			port_param->speed, mb);
1376 	else
1377 		rval = qla2x00_get_idma_speed(vha, fcport->loop_id,
1378 			&port_param->speed, mb);
1379 
1380 	if (rval) {
1381 		ql_log(ql_log_warn, vha, 0x704c,
1382 		    "iiDMA cmd failed for %8phN -- "
1383 		    "%04x %x %04x %04x.\n", fcport->port_name,
1384 		    rval, fcport->fp_speed, mb[0], mb[1]);
1385 		rval = (DID_ERROR << 16);
1386 	} else {
1387 		if (!port_param->mode) {
1388 			bsg_job->reply_len = sizeof(struct fc_bsg_reply) +
1389 				sizeof(struct qla_port_param);
1390 
1391 			rsp_ptr = ((uint8_t *)bsg_reply) +
1392 				sizeof(struct fc_bsg_reply);
1393 
1394 			memcpy(rsp_ptr, port_param,
1395 				sizeof(struct qla_port_param));
1396 		}
1397 
1398 		bsg_reply->result = DID_OK;
1399 		bsg_job_done(bsg_job, bsg_reply->result,
1400 			       bsg_reply->reply_payload_rcv_len);
1401 	}
1402 
1403 	return rval;
1404 }
1405 
1406 static int
1407 qla2x00_optrom_setup(struct bsg_job *bsg_job, scsi_qla_host_t *vha,
1408 	uint8_t is_update)
1409 {
1410 	struct fc_bsg_request *bsg_request = bsg_job->request;
1411 	uint32_t start = 0;
1412 	int valid = 0;
1413 	struct qla_hw_data *ha = vha->hw;
1414 
1415 	if (unlikely(pci_channel_offline(ha->pdev)))
1416 		return -EINVAL;
1417 
1418 	start = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
1419 	if (start > ha->optrom_size) {
1420 		ql_log(ql_log_warn, vha, 0x7055,
1421 		    "start %d > optrom_size %d.\n", start, ha->optrom_size);
1422 		return -EINVAL;
1423 	}
1424 
1425 	if (ha->optrom_state != QLA_SWAITING) {
1426 		ql_log(ql_log_info, vha, 0x7056,
1427 		    "optrom_state %d.\n", ha->optrom_state);
1428 		return -EBUSY;
1429 	}
1430 
1431 	ha->optrom_region_start = start;
1432 	ql_dbg(ql_dbg_user, vha, 0x7057, "is_update=%d.\n", is_update);
1433 	if (is_update) {
1434 		if (ha->optrom_size == OPTROM_SIZE_2300 && start == 0)
1435 			valid = 1;
1436 		else if (start == (ha->flt_region_boot * 4) ||
1437 		    start == (ha->flt_region_fw * 4))
1438 			valid = 1;
1439 		else if (IS_QLA24XX_TYPE(ha) || IS_QLA25XX(ha) ||
1440 		    IS_CNA_CAPABLE(ha) || IS_QLA2031(ha) || IS_QLA27XX(ha) ||
1441 		    IS_QLA28XX(ha))
1442 			valid = 1;
1443 		if (!valid) {
1444 			ql_log(ql_log_warn, vha, 0x7058,
1445 			    "Invalid start region 0x%x/0x%x.\n", start,
1446 			    bsg_job->request_payload.payload_len);
1447 			return -EINVAL;
1448 		}
1449 
1450 		ha->optrom_region_size = start +
1451 		    bsg_job->request_payload.payload_len > ha->optrom_size ?
1452 		    ha->optrom_size - start :
1453 		    bsg_job->request_payload.payload_len;
1454 		ha->optrom_state = QLA_SWRITING;
1455 	} else {
1456 		ha->optrom_region_size = start +
1457 		    bsg_job->reply_payload.payload_len > ha->optrom_size ?
1458 		    ha->optrom_size - start :
1459 		    bsg_job->reply_payload.payload_len;
1460 		ha->optrom_state = QLA_SREADING;
1461 	}
1462 
1463 	ha->optrom_buffer = vzalloc(ha->optrom_region_size);
1464 	if (!ha->optrom_buffer) {
1465 		ql_log(ql_log_warn, vha, 0x7059,
1466 		    "Read: Unable to allocate memory for optrom retrieval "
1467 		    "(%x)\n", ha->optrom_region_size);
1468 
1469 		ha->optrom_state = QLA_SWAITING;
1470 		return -ENOMEM;
1471 	}
1472 
1473 	return 0;
1474 }
1475 
1476 static int
1477 qla2x00_read_optrom(struct bsg_job *bsg_job)
1478 {
1479 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1480 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1481 	scsi_qla_host_t *vha = shost_priv(host);
1482 	struct qla_hw_data *ha = vha->hw;
1483 	int rval = 0;
1484 
1485 	if (ha->flags.nic_core_reset_hdlr_active)
1486 		return -EBUSY;
1487 
1488 	mutex_lock(&ha->optrom_mutex);
1489 	rval = qla2x00_optrom_setup(bsg_job, vha, 0);
1490 	if (rval) {
1491 		mutex_unlock(&ha->optrom_mutex);
1492 		return rval;
1493 	}
1494 
1495 	ha->isp_ops->read_optrom(vha, ha->optrom_buffer,
1496 	    ha->optrom_region_start, ha->optrom_region_size);
1497 
1498 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1499 	    bsg_job->reply_payload.sg_cnt, ha->optrom_buffer,
1500 	    ha->optrom_region_size);
1501 
1502 	bsg_reply->reply_payload_rcv_len = ha->optrom_region_size;
1503 	bsg_reply->result = DID_OK;
1504 	vfree(ha->optrom_buffer);
1505 	ha->optrom_buffer = NULL;
1506 	ha->optrom_state = QLA_SWAITING;
1507 	mutex_unlock(&ha->optrom_mutex);
1508 	bsg_job_done(bsg_job, bsg_reply->result,
1509 		       bsg_reply->reply_payload_rcv_len);
1510 	return rval;
1511 }
1512 
1513 static int
1514 qla2x00_update_optrom(struct bsg_job *bsg_job)
1515 {
1516 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1517 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1518 	scsi_qla_host_t *vha = shost_priv(host);
1519 	struct qla_hw_data *ha = vha->hw;
1520 	int rval = 0;
1521 
1522 	mutex_lock(&ha->optrom_mutex);
1523 	rval = qla2x00_optrom_setup(bsg_job, vha, 1);
1524 	if (rval) {
1525 		mutex_unlock(&ha->optrom_mutex);
1526 		return rval;
1527 	}
1528 
1529 	/* Set the isp82xx_no_md_cap not to capture minidump */
1530 	ha->flags.isp82xx_no_md_cap = 1;
1531 
1532 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1533 	    bsg_job->request_payload.sg_cnt, ha->optrom_buffer,
1534 	    ha->optrom_region_size);
1535 
1536 	rval = ha->isp_ops->write_optrom(vha, ha->optrom_buffer,
1537 	    ha->optrom_region_start, ha->optrom_region_size);
1538 
1539 	if (rval) {
1540 		bsg_reply->result = -EINVAL;
1541 		rval = -EINVAL;
1542 	} else {
1543 		bsg_reply->result = DID_OK;
1544 	}
1545 	vfree(ha->optrom_buffer);
1546 	ha->optrom_buffer = NULL;
1547 	ha->optrom_state = QLA_SWAITING;
1548 	mutex_unlock(&ha->optrom_mutex);
1549 	bsg_job_done(bsg_job, bsg_reply->result,
1550 		       bsg_reply->reply_payload_rcv_len);
1551 	return rval;
1552 }
1553 
1554 static int
1555 qla2x00_update_fru_versions(struct bsg_job *bsg_job)
1556 {
1557 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1558 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1559 	scsi_qla_host_t *vha = shost_priv(host);
1560 	struct qla_hw_data *ha = vha->hw;
1561 	int rval = 0;
1562 	uint8_t bsg[DMA_POOL_SIZE];
1563 	struct qla_image_version_list *list = (void *)bsg;
1564 	struct qla_image_version *image;
1565 	uint32_t count;
1566 	dma_addr_t sfp_dma;
1567 	void *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1568 
1569 	if (!sfp) {
1570 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1571 		    EXT_STATUS_NO_MEMORY;
1572 		goto done;
1573 	}
1574 
1575 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1576 	    bsg_job->request_payload.sg_cnt, list, sizeof(bsg));
1577 
1578 	image = list->version;
1579 	count = list->count;
1580 	while (count--) {
1581 		memcpy(sfp, &image->field_info, sizeof(image->field_info));
1582 		rval = qla2x00_write_sfp(vha, sfp_dma, sfp,
1583 		    image->field_address.device, image->field_address.offset,
1584 		    sizeof(image->field_info), image->field_address.option);
1585 		if (rval) {
1586 			bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1587 			    EXT_STATUS_MAILBOX;
1588 			goto dealloc;
1589 		}
1590 		image++;
1591 	}
1592 
1593 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1594 
1595 dealloc:
1596 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1597 
1598 done:
1599 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1600 	bsg_reply->result = DID_OK << 16;
1601 	bsg_job_done(bsg_job, bsg_reply->result,
1602 		       bsg_reply->reply_payload_rcv_len);
1603 
1604 	return 0;
1605 }
1606 
1607 static int
1608 qla2x00_read_fru_status(struct bsg_job *bsg_job)
1609 {
1610 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1611 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1612 	scsi_qla_host_t *vha = shost_priv(host);
1613 	struct qla_hw_data *ha = vha->hw;
1614 	int rval = 0;
1615 	uint8_t bsg[DMA_POOL_SIZE];
1616 	struct qla_status_reg *sr = (void *)bsg;
1617 	dma_addr_t sfp_dma;
1618 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1619 
1620 	if (!sfp) {
1621 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1622 		    EXT_STATUS_NO_MEMORY;
1623 		goto done;
1624 	}
1625 
1626 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1627 	    bsg_job->request_payload.sg_cnt, sr, sizeof(*sr));
1628 
1629 	rval = qla2x00_read_sfp(vha, sfp_dma, sfp,
1630 	    sr->field_address.device, sr->field_address.offset,
1631 	    sizeof(sr->status_reg), sr->field_address.option);
1632 	sr->status_reg = *sfp;
1633 
1634 	if (rval) {
1635 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1636 		    EXT_STATUS_MAILBOX;
1637 		goto dealloc;
1638 	}
1639 
1640 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1641 	    bsg_job->reply_payload.sg_cnt, sr, sizeof(*sr));
1642 
1643 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1644 
1645 dealloc:
1646 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1647 
1648 done:
1649 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1650 	bsg_reply->reply_payload_rcv_len = sizeof(*sr);
1651 	bsg_reply->result = DID_OK << 16;
1652 	bsg_job_done(bsg_job, bsg_reply->result,
1653 		       bsg_reply->reply_payload_rcv_len);
1654 
1655 	return 0;
1656 }
1657 
1658 static int
1659 qla2x00_write_fru_status(struct bsg_job *bsg_job)
1660 {
1661 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1662 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1663 	scsi_qla_host_t *vha = shost_priv(host);
1664 	struct qla_hw_data *ha = vha->hw;
1665 	int rval = 0;
1666 	uint8_t bsg[DMA_POOL_SIZE];
1667 	struct qla_status_reg *sr = (void *)bsg;
1668 	dma_addr_t sfp_dma;
1669 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1670 
1671 	if (!sfp) {
1672 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1673 		    EXT_STATUS_NO_MEMORY;
1674 		goto done;
1675 	}
1676 
1677 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1678 	    bsg_job->request_payload.sg_cnt, sr, sizeof(*sr));
1679 
1680 	*sfp = sr->status_reg;
1681 	rval = qla2x00_write_sfp(vha, sfp_dma, sfp,
1682 	    sr->field_address.device, sr->field_address.offset,
1683 	    sizeof(sr->status_reg), sr->field_address.option);
1684 
1685 	if (rval) {
1686 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1687 		    EXT_STATUS_MAILBOX;
1688 		goto dealloc;
1689 	}
1690 
1691 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1692 
1693 dealloc:
1694 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1695 
1696 done:
1697 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1698 	bsg_reply->result = DID_OK << 16;
1699 	bsg_job_done(bsg_job, bsg_reply->result,
1700 		       bsg_reply->reply_payload_rcv_len);
1701 
1702 	return 0;
1703 }
1704 
1705 static int
1706 qla2x00_write_i2c(struct bsg_job *bsg_job)
1707 {
1708 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1709 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1710 	scsi_qla_host_t *vha = shost_priv(host);
1711 	struct qla_hw_data *ha = vha->hw;
1712 	int rval = 0;
1713 	uint8_t bsg[DMA_POOL_SIZE];
1714 	struct qla_i2c_access *i2c = (void *)bsg;
1715 	dma_addr_t sfp_dma;
1716 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1717 
1718 	if (!sfp) {
1719 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1720 		    EXT_STATUS_NO_MEMORY;
1721 		goto done;
1722 	}
1723 
1724 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1725 	    bsg_job->request_payload.sg_cnt, i2c, sizeof(*i2c));
1726 
1727 	memcpy(sfp, i2c->buffer, i2c->length);
1728 	rval = qla2x00_write_sfp(vha, sfp_dma, sfp,
1729 	    i2c->device, i2c->offset, i2c->length, i2c->option);
1730 
1731 	if (rval) {
1732 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1733 		    EXT_STATUS_MAILBOX;
1734 		goto dealloc;
1735 	}
1736 
1737 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1738 
1739 dealloc:
1740 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1741 
1742 done:
1743 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1744 	bsg_reply->result = DID_OK << 16;
1745 	bsg_job_done(bsg_job, bsg_reply->result,
1746 		       bsg_reply->reply_payload_rcv_len);
1747 
1748 	return 0;
1749 }
1750 
1751 static int
1752 qla2x00_read_i2c(struct bsg_job *bsg_job)
1753 {
1754 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1755 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1756 	scsi_qla_host_t *vha = shost_priv(host);
1757 	struct qla_hw_data *ha = vha->hw;
1758 	int rval = 0;
1759 	uint8_t bsg[DMA_POOL_SIZE];
1760 	struct qla_i2c_access *i2c = (void *)bsg;
1761 	dma_addr_t sfp_dma;
1762 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1763 
1764 	if (!sfp) {
1765 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1766 		    EXT_STATUS_NO_MEMORY;
1767 		goto done;
1768 	}
1769 
1770 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1771 	    bsg_job->request_payload.sg_cnt, i2c, sizeof(*i2c));
1772 
1773 	rval = qla2x00_read_sfp(vha, sfp_dma, sfp,
1774 		i2c->device, i2c->offset, i2c->length, i2c->option);
1775 
1776 	if (rval) {
1777 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1778 		    EXT_STATUS_MAILBOX;
1779 		goto dealloc;
1780 	}
1781 
1782 	memcpy(i2c->buffer, sfp, i2c->length);
1783 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1784 	    bsg_job->reply_payload.sg_cnt, i2c, sizeof(*i2c));
1785 
1786 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1787 
1788 dealloc:
1789 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1790 
1791 done:
1792 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1793 	bsg_reply->reply_payload_rcv_len = sizeof(*i2c);
1794 	bsg_reply->result = DID_OK << 16;
1795 	bsg_job_done(bsg_job, bsg_reply->result,
1796 		       bsg_reply->reply_payload_rcv_len);
1797 
1798 	return 0;
1799 }
1800 
1801 static int
1802 qla24xx_process_bidir_cmd(struct bsg_job *bsg_job)
1803 {
1804 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1805 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1806 	scsi_qla_host_t *vha = shost_priv(host);
1807 	struct qla_hw_data *ha = vha->hw;
1808 	uint32_t rval = EXT_STATUS_OK;
1809 	uint16_t req_sg_cnt = 0;
1810 	uint16_t rsp_sg_cnt = 0;
1811 	uint16_t nextlid = 0;
1812 	uint32_t tot_dsds;
1813 	srb_t *sp = NULL;
1814 	uint32_t req_data_len;
1815 	uint32_t rsp_data_len;
1816 
1817 	/* Check the type of the adapter */
1818 	if (!IS_BIDI_CAPABLE(ha)) {
1819 		ql_log(ql_log_warn, vha, 0x70a0,
1820 			"This adapter is not supported\n");
1821 		rval = EXT_STATUS_NOT_SUPPORTED;
1822 		goto done;
1823 	}
1824 
1825 	if (test_bit(ISP_ABORT_NEEDED, &vha->dpc_flags) ||
1826 		test_bit(ABORT_ISP_ACTIVE, &vha->dpc_flags) ||
1827 		test_bit(ISP_ABORT_RETRY, &vha->dpc_flags)) {
1828 		rval =  EXT_STATUS_BUSY;
1829 		goto done;
1830 	}
1831 
1832 	/* Check if host is online */
1833 	if (!vha->flags.online) {
1834 		ql_log(ql_log_warn, vha, 0x70a1,
1835 			"Host is not online\n");
1836 		rval = EXT_STATUS_DEVICE_OFFLINE;
1837 		goto done;
1838 	}
1839 
1840 	/* Check if cable is plugged in or not */
1841 	if (vha->device_flags & DFLG_NO_CABLE) {
1842 		ql_log(ql_log_warn, vha, 0x70a2,
1843 			"Cable is unplugged...\n");
1844 		rval = EXT_STATUS_INVALID_CFG;
1845 		goto done;
1846 	}
1847 
1848 	/* Check if the switch is connected or not */
1849 	if (ha->current_topology != ISP_CFG_F) {
1850 		ql_log(ql_log_warn, vha, 0x70a3,
1851 			"Host is not connected to the switch\n");
1852 		rval = EXT_STATUS_INVALID_CFG;
1853 		goto done;
1854 	}
1855 
1856 	/* Check if operating mode is P2P */
1857 	if (ha->operating_mode != P2P) {
1858 		ql_log(ql_log_warn, vha, 0x70a4,
1859 		    "Host operating mode is not P2p\n");
1860 		rval = EXT_STATUS_INVALID_CFG;
1861 		goto done;
1862 	}
1863 
1864 	mutex_lock(&ha->selflogin_lock);
1865 	if (vha->self_login_loop_id == 0) {
1866 		/* Initialize all required  fields of fcport */
1867 		vha->bidir_fcport.vha = vha;
1868 		vha->bidir_fcport.d_id.b.al_pa = vha->d_id.b.al_pa;
1869 		vha->bidir_fcport.d_id.b.area = vha->d_id.b.area;
1870 		vha->bidir_fcport.d_id.b.domain = vha->d_id.b.domain;
1871 		vha->bidir_fcport.loop_id = vha->loop_id;
1872 
1873 		if (qla2x00_fabric_login(vha, &(vha->bidir_fcport), &nextlid)) {
1874 			ql_log(ql_log_warn, vha, 0x70a7,
1875 			    "Failed to login port %06X for bidirectional IOCB\n",
1876 			    vha->bidir_fcport.d_id.b24);
1877 			mutex_unlock(&ha->selflogin_lock);
1878 			rval = EXT_STATUS_MAILBOX;
1879 			goto done;
1880 		}
1881 		vha->self_login_loop_id = nextlid - 1;
1882 
1883 	}
1884 	/* Assign the self login loop id to fcport */
1885 	mutex_unlock(&ha->selflogin_lock);
1886 
1887 	vha->bidir_fcport.loop_id = vha->self_login_loop_id;
1888 
1889 	req_sg_cnt = dma_map_sg(&ha->pdev->dev,
1890 		bsg_job->request_payload.sg_list,
1891 		bsg_job->request_payload.sg_cnt,
1892 		DMA_TO_DEVICE);
1893 
1894 	if (!req_sg_cnt) {
1895 		rval = EXT_STATUS_NO_MEMORY;
1896 		goto done;
1897 	}
1898 
1899 	rsp_sg_cnt = dma_map_sg(&ha->pdev->dev,
1900 		bsg_job->reply_payload.sg_list, bsg_job->reply_payload.sg_cnt,
1901 		DMA_FROM_DEVICE);
1902 
1903 	if (!rsp_sg_cnt) {
1904 		rval = EXT_STATUS_NO_MEMORY;
1905 		goto done_unmap_req_sg;
1906 	}
1907 
1908 	if ((req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
1909 		(rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
1910 		ql_dbg(ql_dbg_user, vha, 0x70a9,
1911 		    "Dma mapping resulted in different sg counts "
1912 		    "[request_sg_cnt: %x dma_request_sg_cnt: %x reply_sg_cnt: "
1913 		    "%x dma_reply_sg_cnt: %x]\n",
1914 		    bsg_job->request_payload.sg_cnt, req_sg_cnt,
1915 		    bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
1916 		rval = EXT_STATUS_NO_MEMORY;
1917 		goto done_unmap_sg;
1918 	}
1919 
1920 	req_data_len = bsg_job->request_payload.payload_len;
1921 	rsp_data_len = bsg_job->reply_payload.payload_len;
1922 
1923 	if (req_data_len != rsp_data_len) {
1924 		rval = EXT_STATUS_BUSY;
1925 		ql_log(ql_log_warn, vha, 0x70aa,
1926 		    "req_data_len != rsp_data_len\n");
1927 		goto done_unmap_sg;
1928 	}
1929 
1930 	/* Alloc SRB structure */
1931 	sp = qla2x00_get_sp(vha, &(vha->bidir_fcport), GFP_KERNEL);
1932 	if (!sp) {
1933 		ql_dbg(ql_dbg_user, vha, 0x70ac,
1934 		    "Alloc SRB structure failed\n");
1935 		rval = EXT_STATUS_NO_MEMORY;
1936 		goto done_unmap_sg;
1937 	}
1938 
1939 	/*Populate srb->ctx with bidir ctx*/
1940 	sp->u.bsg_job = bsg_job;
1941 	sp->free = qla2x00_bsg_sp_free;
1942 	sp->type = SRB_BIDI_CMD;
1943 	sp->done = qla2x00_bsg_job_done;
1944 
1945 	/* Add the read and write sg count */
1946 	tot_dsds = rsp_sg_cnt + req_sg_cnt;
1947 
1948 	rval = qla2x00_start_bidir(sp, vha, tot_dsds);
1949 	if (rval != EXT_STATUS_OK)
1950 		goto done_free_srb;
1951 	/* the bsg request  will be completed in the interrupt handler */
1952 	return rval;
1953 
1954 done_free_srb:
1955 	mempool_free(sp, ha->srb_mempool);
1956 done_unmap_sg:
1957 	dma_unmap_sg(&ha->pdev->dev,
1958 	    bsg_job->reply_payload.sg_list,
1959 	    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1960 done_unmap_req_sg:
1961 	dma_unmap_sg(&ha->pdev->dev,
1962 	    bsg_job->request_payload.sg_list,
1963 	    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1964 done:
1965 
1966 	/* Return an error vendor specific response
1967 	 * and complete the bsg request
1968 	 */
1969 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = rval;
1970 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1971 	bsg_reply->reply_payload_rcv_len = 0;
1972 	bsg_reply->result = (DID_OK) << 16;
1973 	bsg_job_done(bsg_job, bsg_reply->result,
1974 		       bsg_reply->reply_payload_rcv_len);
1975 	/* Always return success, vendor rsp carries correct status */
1976 	return 0;
1977 }
1978 
1979 static int
1980 qlafx00_mgmt_cmd(struct bsg_job *bsg_job)
1981 {
1982 	struct fc_bsg_request *bsg_request = bsg_job->request;
1983 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1984 	scsi_qla_host_t *vha = shost_priv(host);
1985 	struct qla_hw_data *ha = vha->hw;
1986 	int rval = (DID_ERROR << 16);
1987 	struct qla_mt_iocb_rqst_fx00 *piocb_rqst;
1988 	srb_t *sp;
1989 	int req_sg_cnt = 0, rsp_sg_cnt = 0;
1990 	struct fc_port *fcport;
1991 	char  *type = "FC_BSG_HST_FX_MGMT";
1992 
1993 	/* Copy the IOCB specific information */
1994 	piocb_rqst = (struct qla_mt_iocb_rqst_fx00 *)
1995 	    &bsg_request->rqst_data.h_vendor.vendor_cmd[1];
1996 
1997 	/* Dump the vendor information */
1998 	ql_dump_buffer(ql_dbg_user + ql_dbg_verbose , vha, 0x70cf,
1999 	    piocb_rqst, sizeof(*piocb_rqst));
2000 
2001 	if (!vha->flags.online) {
2002 		ql_log(ql_log_warn, vha, 0x70d0,
2003 		    "Host is not online.\n");
2004 		rval = -EIO;
2005 		goto done;
2006 	}
2007 
2008 	if (piocb_rqst->flags & SRB_FXDISC_REQ_DMA_VALID) {
2009 		req_sg_cnt = dma_map_sg(&ha->pdev->dev,
2010 		    bsg_job->request_payload.sg_list,
2011 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
2012 		if (!req_sg_cnt) {
2013 			ql_log(ql_log_warn, vha, 0x70c7,
2014 			    "dma_map_sg return %d for request\n", req_sg_cnt);
2015 			rval = -ENOMEM;
2016 			goto done;
2017 		}
2018 	}
2019 
2020 	if (piocb_rqst->flags & SRB_FXDISC_RESP_DMA_VALID) {
2021 		rsp_sg_cnt = dma_map_sg(&ha->pdev->dev,
2022 		    bsg_job->reply_payload.sg_list,
2023 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
2024 		if (!rsp_sg_cnt) {
2025 			ql_log(ql_log_warn, vha, 0x70c8,
2026 			    "dma_map_sg return %d for reply\n", rsp_sg_cnt);
2027 			rval = -ENOMEM;
2028 			goto done_unmap_req_sg;
2029 		}
2030 	}
2031 
2032 	ql_dbg(ql_dbg_user, vha, 0x70c9,
2033 	    "request_sg_cnt: %x dma_request_sg_cnt: %x reply_sg_cnt:%x "
2034 	    "dma_reply_sg_cnt: %x\n", bsg_job->request_payload.sg_cnt,
2035 	    req_sg_cnt, bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
2036 
2037 	/* Allocate a dummy fcport structure, since functions preparing the
2038 	 * IOCB and mailbox command retrieves port specific information
2039 	 * from fcport structure. For Host based ELS commands there will be
2040 	 * no fcport structure allocated
2041 	 */
2042 	fcport = qla2x00_alloc_fcport(vha, GFP_KERNEL);
2043 	if (!fcport) {
2044 		ql_log(ql_log_warn, vha, 0x70ca,
2045 		    "Failed to allocate fcport.\n");
2046 		rval = -ENOMEM;
2047 		goto done_unmap_rsp_sg;
2048 	}
2049 
2050 	/* Alloc SRB structure */
2051 	sp = qla2x00_get_sp(vha, fcport, GFP_KERNEL);
2052 	if (!sp) {
2053 		ql_log(ql_log_warn, vha, 0x70cb,
2054 		    "qla2x00_get_sp failed.\n");
2055 		rval = -ENOMEM;
2056 		goto done_free_fcport;
2057 	}
2058 
2059 	/* Initialize all required  fields of fcport */
2060 	fcport->vha = vha;
2061 	fcport->loop_id = le32_to_cpu(piocb_rqst->dataword);
2062 
2063 	sp->type = SRB_FXIOCB_BCMD;
2064 	sp->name = "bsg_fx_mgmt";
2065 	sp->iocbs = qla24xx_calc_ct_iocbs(req_sg_cnt + rsp_sg_cnt);
2066 	sp->u.bsg_job = bsg_job;
2067 	sp->free = qla2x00_bsg_sp_free;
2068 	sp->done = qla2x00_bsg_job_done;
2069 
2070 	ql_dbg(ql_dbg_user, vha, 0x70cc,
2071 	    "bsg rqst type: %s fx_mgmt_type: %x id=%x\n",
2072 	    type, piocb_rqst->func_type, fcport->loop_id);
2073 
2074 	rval = qla2x00_start_sp(sp);
2075 	if (rval != QLA_SUCCESS) {
2076 		ql_log(ql_log_warn, vha, 0x70cd,
2077 		    "qla2x00_start_sp failed=%d.\n", rval);
2078 		mempool_free(sp, ha->srb_mempool);
2079 		rval = -EIO;
2080 		goto done_free_fcport;
2081 	}
2082 	return rval;
2083 
2084 done_free_fcport:
2085 	qla2x00_free_fcport(fcport);
2086 
2087 done_unmap_rsp_sg:
2088 	if (piocb_rqst->flags & SRB_FXDISC_RESP_DMA_VALID)
2089 		dma_unmap_sg(&ha->pdev->dev,
2090 		    bsg_job->reply_payload.sg_list,
2091 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
2092 done_unmap_req_sg:
2093 	if (piocb_rqst->flags & SRB_FXDISC_REQ_DMA_VALID)
2094 		dma_unmap_sg(&ha->pdev->dev,
2095 		    bsg_job->request_payload.sg_list,
2096 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
2097 
2098 done:
2099 	return rval;
2100 }
2101 
2102 static int
2103 qla26xx_serdes_op(struct bsg_job *bsg_job)
2104 {
2105 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2106 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2107 	scsi_qla_host_t *vha = shost_priv(host);
2108 	int rval = 0;
2109 	struct qla_serdes_reg sr;
2110 
2111 	memset(&sr, 0, sizeof(sr));
2112 
2113 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2114 	    bsg_job->request_payload.sg_cnt, &sr, sizeof(sr));
2115 
2116 	switch (sr.cmd) {
2117 	case INT_SC_SERDES_WRITE_REG:
2118 		rval = qla2x00_write_serdes_word(vha, sr.addr, sr.val);
2119 		bsg_reply->reply_payload_rcv_len = 0;
2120 		break;
2121 	case INT_SC_SERDES_READ_REG:
2122 		rval = qla2x00_read_serdes_word(vha, sr.addr, &sr.val);
2123 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2124 		    bsg_job->reply_payload.sg_cnt, &sr, sizeof(sr));
2125 		bsg_reply->reply_payload_rcv_len = sizeof(sr);
2126 		break;
2127 	default:
2128 		ql_dbg(ql_dbg_user, vha, 0x708c,
2129 		    "Unknown serdes cmd %x.\n", sr.cmd);
2130 		rval = -EINVAL;
2131 		break;
2132 	}
2133 
2134 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2135 	    rval ? EXT_STATUS_MAILBOX : 0;
2136 
2137 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2138 	bsg_reply->result = DID_OK << 16;
2139 	bsg_job_done(bsg_job, bsg_reply->result,
2140 		       bsg_reply->reply_payload_rcv_len);
2141 	return 0;
2142 }
2143 
2144 static int
2145 qla8044_serdes_op(struct bsg_job *bsg_job)
2146 {
2147 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2148 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2149 	scsi_qla_host_t *vha = shost_priv(host);
2150 	int rval = 0;
2151 	struct qla_serdes_reg_ex sr;
2152 
2153 	memset(&sr, 0, sizeof(sr));
2154 
2155 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2156 	    bsg_job->request_payload.sg_cnt, &sr, sizeof(sr));
2157 
2158 	switch (sr.cmd) {
2159 	case INT_SC_SERDES_WRITE_REG:
2160 		rval = qla8044_write_serdes_word(vha, sr.addr, sr.val);
2161 		bsg_reply->reply_payload_rcv_len = 0;
2162 		break;
2163 	case INT_SC_SERDES_READ_REG:
2164 		rval = qla8044_read_serdes_word(vha, sr.addr, &sr.val);
2165 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2166 		    bsg_job->reply_payload.sg_cnt, &sr, sizeof(sr));
2167 		bsg_reply->reply_payload_rcv_len = sizeof(sr);
2168 		break;
2169 	default:
2170 		ql_dbg(ql_dbg_user, vha, 0x7020,
2171 		    "Unknown serdes cmd %x.\n", sr.cmd);
2172 		rval = -EINVAL;
2173 		break;
2174 	}
2175 
2176 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2177 	    rval ? EXT_STATUS_MAILBOX : 0;
2178 
2179 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2180 	bsg_reply->result = DID_OK << 16;
2181 	bsg_job_done(bsg_job, bsg_reply->result,
2182 		       bsg_reply->reply_payload_rcv_len);
2183 	return 0;
2184 }
2185 
2186 static int
2187 qla27xx_get_flash_upd_cap(struct bsg_job *bsg_job)
2188 {
2189 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2190 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2191 	scsi_qla_host_t *vha = shost_priv(host);
2192 	struct qla_hw_data *ha = vha->hw;
2193 	struct qla_flash_update_caps cap;
2194 
2195 	if (!(IS_QLA27XX(ha)) && !IS_QLA28XX(ha))
2196 		return -EPERM;
2197 
2198 	memset(&cap, 0, sizeof(cap));
2199 	cap.capabilities = (uint64_t)ha->fw_attributes_ext[1] << 48 |
2200 			   (uint64_t)ha->fw_attributes_ext[0] << 32 |
2201 			   (uint64_t)ha->fw_attributes_h << 16 |
2202 			   (uint64_t)ha->fw_attributes;
2203 
2204 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2205 	    bsg_job->reply_payload.sg_cnt, &cap, sizeof(cap));
2206 	bsg_reply->reply_payload_rcv_len = sizeof(cap);
2207 
2208 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2209 	    EXT_STATUS_OK;
2210 
2211 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2212 	bsg_reply->result = DID_OK << 16;
2213 	bsg_job_done(bsg_job, bsg_reply->result,
2214 		       bsg_reply->reply_payload_rcv_len);
2215 	return 0;
2216 }
2217 
2218 static int
2219 qla27xx_set_flash_upd_cap(struct bsg_job *bsg_job)
2220 {
2221 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2222 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2223 	scsi_qla_host_t *vha = shost_priv(host);
2224 	struct qla_hw_data *ha = vha->hw;
2225 	uint64_t online_fw_attr = 0;
2226 	struct qla_flash_update_caps cap;
2227 
2228 	if (!IS_QLA27XX(ha) && !IS_QLA28XX(ha))
2229 		return -EPERM;
2230 
2231 	memset(&cap, 0, sizeof(cap));
2232 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2233 	    bsg_job->request_payload.sg_cnt, &cap, sizeof(cap));
2234 
2235 	online_fw_attr = (uint64_t)ha->fw_attributes_ext[1] << 48 |
2236 			 (uint64_t)ha->fw_attributes_ext[0] << 32 |
2237 			 (uint64_t)ha->fw_attributes_h << 16 |
2238 			 (uint64_t)ha->fw_attributes;
2239 
2240 	if (online_fw_attr != cap.capabilities) {
2241 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2242 		    EXT_STATUS_INVALID_PARAM;
2243 		return -EINVAL;
2244 	}
2245 
2246 	if (cap.outage_duration < MAX_LOOP_TIMEOUT)  {
2247 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2248 		    EXT_STATUS_INVALID_PARAM;
2249 		return -EINVAL;
2250 	}
2251 
2252 	bsg_reply->reply_payload_rcv_len = 0;
2253 
2254 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2255 	    EXT_STATUS_OK;
2256 
2257 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2258 	bsg_reply->result = DID_OK << 16;
2259 	bsg_job_done(bsg_job, bsg_reply->result,
2260 		       bsg_reply->reply_payload_rcv_len);
2261 	return 0;
2262 }
2263 
2264 static int
2265 qla27xx_get_bbcr_data(struct bsg_job *bsg_job)
2266 {
2267 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2268 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2269 	scsi_qla_host_t *vha = shost_priv(host);
2270 	struct qla_hw_data *ha = vha->hw;
2271 	struct qla_bbcr_data bbcr;
2272 	uint16_t loop_id, topo, sw_cap;
2273 	uint8_t domain, area, al_pa, state;
2274 	int rval;
2275 
2276 	if (!IS_QLA27XX(ha) && !IS_QLA28XX(ha))
2277 		return -EPERM;
2278 
2279 	memset(&bbcr, 0, sizeof(bbcr));
2280 
2281 	if (vha->flags.bbcr_enable)
2282 		bbcr.status = QLA_BBCR_STATUS_ENABLED;
2283 	else
2284 		bbcr.status = QLA_BBCR_STATUS_DISABLED;
2285 
2286 	if (bbcr.status == QLA_BBCR_STATUS_ENABLED) {
2287 		rval = qla2x00_get_adapter_id(vha, &loop_id, &al_pa,
2288 			&area, &domain, &topo, &sw_cap);
2289 		if (rval != QLA_SUCCESS) {
2290 			bbcr.status = QLA_BBCR_STATUS_UNKNOWN;
2291 			bbcr.state = QLA_BBCR_STATE_OFFLINE;
2292 			bbcr.mbx1 = loop_id;
2293 			goto done;
2294 		}
2295 
2296 		state = (vha->bbcr >> 12) & 0x1;
2297 
2298 		if (state) {
2299 			bbcr.state = QLA_BBCR_STATE_OFFLINE;
2300 			bbcr.offline_reason_code = QLA_BBCR_REASON_LOGIN_REJECT;
2301 		} else {
2302 			bbcr.state = QLA_BBCR_STATE_ONLINE;
2303 			bbcr.negotiated_bbscn = (vha->bbcr >> 8) & 0xf;
2304 		}
2305 
2306 		bbcr.configured_bbscn = vha->bbcr & 0xf;
2307 	}
2308 
2309 done:
2310 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2311 		bsg_job->reply_payload.sg_cnt, &bbcr, sizeof(bbcr));
2312 	bsg_reply->reply_payload_rcv_len = sizeof(bbcr);
2313 
2314 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2315 
2316 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2317 	bsg_reply->result = DID_OK << 16;
2318 	bsg_job_done(bsg_job, bsg_reply->result,
2319 		       bsg_reply->reply_payload_rcv_len);
2320 	return 0;
2321 }
2322 
2323 static int
2324 qla2x00_get_priv_stats(struct bsg_job *bsg_job)
2325 {
2326 	struct fc_bsg_request *bsg_request = bsg_job->request;
2327 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2328 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2329 	scsi_qla_host_t *vha = shost_priv(host);
2330 	struct qla_hw_data *ha = vha->hw;
2331 	struct scsi_qla_host *base_vha = pci_get_drvdata(ha->pdev);
2332 	struct link_statistics *stats = NULL;
2333 	dma_addr_t stats_dma;
2334 	int rval;
2335 	uint32_t *cmd = bsg_request->rqst_data.h_vendor.vendor_cmd;
2336 	uint options = cmd[0] == QL_VND_GET_PRIV_STATS_EX ? cmd[1] : 0;
2337 
2338 	if (test_bit(UNLOADING, &vha->dpc_flags))
2339 		return -ENODEV;
2340 
2341 	if (unlikely(pci_channel_offline(ha->pdev)))
2342 		return -ENODEV;
2343 
2344 	if (qla2x00_reset_active(vha))
2345 		return -EBUSY;
2346 
2347 	if (!IS_FWI2_CAPABLE(ha))
2348 		return -EPERM;
2349 
2350 	stats = dma_alloc_coherent(&ha->pdev->dev, sizeof(*stats), &stats_dma,
2351 				   GFP_KERNEL);
2352 	if (!stats) {
2353 		ql_log(ql_log_warn, vha, 0x70e2,
2354 		    "Failed to allocate memory for stats.\n");
2355 		return -ENOMEM;
2356 	}
2357 
2358 	rval = qla24xx_get_isp_stats(base_vha, stats, stats_dma, options);
2359 
2360 	if (rval == QLA_SUCCESS) {
2361 		ql_dump_buffer(ql_dbg_user + ql_dbg_verbose, vha, 0x70e5,
2362 			stats, sizeof(*stats));
2363 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2364 			bsg_job->reply_payload.sg_cnt, stats, sizeof(*stats));
2365 	}
2366 
2367 	bsg_reply->reply_payload_rcv_len = sizeof(*stats);
2368 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2369 	    rval ? EXT_STATUS_MAILBOX : EXT_STATUS_OK;
2370 
2371 	bsg_job->reply_len = sizeof(*bsg_reply);
2372 	bsg_reply->result = DID_OK << 16;
2373 	bsg_job_done(bsg_job, bsg_reply->result,
2374 		       bsg_reply->reply_payload_rcv_len);
2375 
2376 	dma_free_coherent(&ha->pdev->dev, sizeof(*stats),
2377 		stats, stats_dma);
2378 
2379 	return 0;
2380 }
2381 
2382 static int
2383 qla2x00_do_dport_diagnostics(struct bsg_job *bsg_job)
2384 {
2385 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2386 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2387 	scsi_qla_host_t *vha = shost_priv(host);
2388 	int rval;
2389 	struct qla_dport_diag *dd;
2390 
2391 	if (!IS_QLA83XX(vha->hw) && !IS_QLA27XX(vha->hw) &&
2392 	    !IS_QLA28XX(vha->hw))
2393 		return -EPERM;
2394 
2395 	dd = kmalloc(sizeof(*dd), GFP_KERNEL);
2396 	if (!dd) {
2397 		ql_log(ql_log_warn, vha, 0x70db,
2398 		    "Failed to allocate memory for dport.\n");
2399 		return -ENOMEM;
2400 	}
2401 
2402 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2403 	    bsg_job->request_payload.sg_cnt, dd, sizeof(*dd));
2404 
2405 	rval = qla26xx_dport_diagnostics(
2406 	    vha, dd->buf, sizeof(dd->buf), dd->options);
2407 	if (rval == QLA_SUCCESS) {
2408 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2409 		    bsg_job->reply_payload.sg_cnt, dd, sizeof(*dd));
2410 	}
2411 
2412 	bsg_reply->reply_payload_rcv_len = sizeof(*dd);
2413 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2414 	    rval ? EXT_STATUS_MAILBOX : EXT_STATUS_OK;
2415 
2416 	bsg_job->reply_len = sizeof(*bsg_reply);
2417 	bsg_reply->result = DID_OK << 16;
2418 	bsg_job_done(bsg_job, bsg_reply->result,
2419 		       bsg_reply->reply_payload_rcv_len);
2420 
2421 	kfree(dd);
2422 
2423 	return 0;
2424 }
2425 
2426 static int
2427 qla2x00_get_flash_image_status(struct bsg_job *bsg_job)
2428 {
2429 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2430 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2431 	struct qla_hw_data *ha = vha->hw;
2432 	struct qla_active_regions regions = { };
2433 	struct active_regions active_regions = { };
2434 
2435 	qla27xx_get_active_image(vha, &active_regions);
2436 	regions.global_image = active_regions.global;
2437 
2438 	if (IS_QLA28XX(ha)) {
2439 		qla28xx_get_aux_images(vha, &active_regions);
2440 		regions.board_config = active_regions.aux.board_config;
2441 		regions.vpd_nvram = active_regions.aux.vpd_nvram;
2442 		regions.npiv_config_0_1 = active_regions.aux.npiv_config_0_1;
2443 		regions.npiv_config_2_3 = active_regions.aux.npiv_config_2_3;
2444 	}
2445 
2446 	ql_dbg(ql_dbg_user, vha, 0x70e1,
2447 	    "%s(%lu): FW=%u BCFG=%u VPDNVR=%u NPIV01=%u NPIV02=%u\n",
2448 	    __func__, vha->host_no, regions.global_image,
2449 	    regions.board_config, regions.vpd_nvram,
2450 	    regions.npiv_config_0_1, regions.npiv_config_2_3);
2451 
2452 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2453 	    bsg_job->reply_payload.sg_cnt, &regions, sizeof(regions));
2454 
2455 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2456 	bsg_reply->reply_payload_rcv_len = sizeof(regions);
2457 	bsg_reply->result = DID_OK << 16;
2458 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2459 	bsg_job_done(bsg_job, bsg_reply->result,
2460 	    bsg_reply->reply_payload_rcv_len);
2461 
2462 	return 0;
2463 }
2464 
2465 static int
2466 qla2x00_manage_host_stats(struct bsg_job *bsg_job)
2467 {
2468 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2469 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2470 	struct ql_vnd_mng_host_stats_param *req_data;
2471 	struct ql_vnd_mng_host_stats_resp rsp_data;
2472 	u32 req_data_len;
2473 	int ret = 0;
2474 
2475 	if (!vha->flags.online) {
2476 		ql_log(ql_log_warn, vha, 0x0000, "Host is not online.\n");
2477 		return -EIO;
2478 	}
2479 
2480 	req_data_len = bsg_job->request_payload.payload_len;
2481 
2482 	if (req_data_len != sizeof(struct ql_vnd_mng_host_stats_param)) {
2483 		ql_log(ql_log_warn, vha, 0x0000, "req_data_len invalid.\n");
2484 		return -EIO;
2485 	}
2486 
2487 	req_data = kzalloc(sizeof(*req_data), GFP_KERNEL);
2488 	if (!req_data) {
2489 		ql_log(ql_log_warn, vha, 0x0000, "req_data memory allocation failure.\n");
2490 		return -ENOMEM;
2491 	}
2492 
2493 	/* Copy the request buffer in req_data */
2494 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2495 			  bsg_job->request_payload.sg_cnt, req_data,
2496 			  req_data_len);
2497 
2498 	switch (req_data->action) {
2499 	case QLA_STOP:
2500 		ret = qla2xxx_stop_stats(vha->host, req_data->stat_type);
2501 		break;
2502 	case QLA_START:
2503 		ret = qla2xxx_start_stats(vha->host, req_data->stat_type);
2504 		break;
2505 	case QLA_CLEAR:
2506 		ret = qla2xxx_reset_stats(vha->host, req_data->stat_type);
2507 		break;
2508 	default:
2509 		ql_log(ql_log_warn, vha, 0x0000, "Invalid action.\n");
2510 		ret = -EIO;
2511 		break;
2512 	}
2513 
2514 	kfree(req_data);
2515 
2516 	/* Prepare response */
2517 	rsp_data.status = ret;
2518 	bsg_job->reply_payload.payload_len = sizeof(struct ql_vnd_mng_host_stats_resp);
2519 
2520 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2521 	bsg_reply->reply_payload_rcv_len =
2522 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2523 				    bsg_job->reply_payload.sg_cnt,
2524 				    &rsp_data,
2525 				    sizeof(struct ql_vnd_mng_host_stats_resp));
2526 
2527 	bsg_reply->result = DID_OK;
2528 	bsg_job_done(bsg_job, bsg_reply->result,
2529 		     bsg_reply->reply_payload_rcv_len);
2530 
2531 	return ret;
2532 }
2533 
2534 static int
2535 qla2x00_get_host_stats(struct bsg_job *bsg_job)
2536 {
2537 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2538 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2539 	struct ql_vnd_stats_param *req_data;
2540 	struct ql_vnd_host_stats_resp rsp_data;
2541 	u32 req_data_len;
2542 	int ret = 0;
2543 	u64 ini_entry_count = 0;
2544 	u64 entry_count = 0;
2545 	u64 tgt_num = 0;
2546 	u64 tmp_stat_type = 0;
2547 	u64 response_len = 0;
2548 	void *data;
2549 
2550 	req_data_len = bsg_job->request_payload.payload_len;
2551 
2552 	if (req_data_len != sizeof(struct ql_vnd_stats_param)) {
2553 		ql_log(ql_log_warn, vha, 0x0000, "req_data_len invalid.\n");
2554 		return -EIO;
2555 	}
2556 
2557 	req_data = kzalloc(sizeof(*req_data), GFP_KERNEL);
2558 	if (!req_data) {
2559 		ql_log(ql_log_warn, vha, 0x0000, "req_data memory allocation failure.\n");
2560 		return -ENOMEM;
2561 	}
2562 
2563 	/* Copy the request buffer in req_data */
2564 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2565 			  bsg_job->request_payload.sg_cnt, req_data, req_data_len);
2566 
2567 	/* Copy stat type to work on it */
2568 	tmp_stat_type = req_data->stat_type;
2569 
2570 	if (tmp_stat_type & QLA2XX_TGT_SHT_LNK_DOWN) {
2571 		/* Num of tgts connected to this host */
2572 		tgt_num = qla2x00_get_num_tgts(vha);
2573 		/* unset BIT_17 */
2574 		tmp_stat_type &= ~(1 << 17);
2575 	}
2576 
2577 	/* Total ini stats */
2578 	ini_entry_count = qla2x00_count_set_bits(tmp_stat_type);
2579 
2580 	/* Total number of entries */
2581 	entry_count = ini_entry_count + tgt_num;
2582 
2583 	response_len = sizeof(struct ql_vnd_host_stats_resp) +
2584 		(sizeof(struct ql_vnd_stat_entry) * entry_count);
2585 
2586 	if (response_len > bsg_job->reply_payload.payload_len) {
2587 		rsp_data.status = EXT_STATUS_BUFFER_TOO_SMALL;
2588 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_BUFFER_TOO_SMALL;
2589 		bsg_job->reply_payload.payload_len = sizeof(struct ql_vnd_mng_host_stats_resp);
2590 
2591 		bsg_reply->reply_payload_rcv_len =
2592 			sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2593 					    bsg_job->reply_payload.sg_cnt, &rsp_data,
2594 					    sizeof(struct ql_vnd_mng_host_stats_resp));
2595 
2596 		bsg_reply->result = DID_OK;
2597 		bsg_job_done(bsg_job, bsg_reply->result,
2598 			     bsg_reply->reply_payload_rcv_len);
2599 		goto host_stat_out;
2600 	}
2601 
2602 	data = kzalloc(response_len, GFP_KERNEL);
2603 	if (!data) {
2604 		ret = -ENOMEM;
2605 		goto host_stat_out;
2606 	}
2607 
2608 	ret = qla2xxx_get_ini_stats(fc_bsg_to_shost(bsg_job), req_data->stat_type,
2609 				    data, response_len);
2610 
2611 	rsp_data.status = EXT_STATUS_OK;
2612 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2613 
2614 	bsg_reply->reply_payload_rcv_len = sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2615 							       bsg_job->reply_payload.sg_cnt,
2616 							       data, response_len);
2617 	bsg_reply->result = DID_OK;
2618 	bsg_job_done(bsg_job, bsg_reply->result,
2619 		     bsg_reply->reply_payload_rcv_len);
2620 
2621 	kfree(data);
2622 host_stat_out:
2623 	kfree(req_data);
2624 	return ret;
2625 }
2626 
2627 static struct fc_rport *
2628 qla2xxx_find_rport(scsi_qla_host_t *vha, uint32_t tgt_num)
2629 {
2630 	fc_port_t *fcport = NULL;
2631 
2632 	list_for_each_entry(fcport, &vha->vp_fcports, list) {
2633 		if (fcport->rport->number == tgt_num)
2634 			return fcport->rport;
2635 	}
2636 	return NULL;
2637 }
2638 
2639 static int
2640 qla2x00_get_tgt_stats(struct bsg_job *bsg_job)
2641 {
2642 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2643 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2644 	struct ql_vnd_tgt_stats_param *req_data;
2645 	u32 req_data_len;
2646 	int ret = 0;
2647 	u64 response_len = 0;
2648 	struct ql_vnd_tgt_stats_resp *data = NULL;
2649 	struct fc_rport *rport = NULL;
2650 
2651 	if (!vha->flags.online) {
2652 		ql_log(ql_log_warn, vha, 0x0000, "Host is not online.\n");
2653 		return -EIO;
2654 	}
2655 
2656 	req_data_len = bsg_job->request_payload.payload_len;
2657 
2658 	if (req_data_len != sizeof(struct ql_vnd_stat_entry)) {
2659 		ql_log(ql_log_warn, vha, 0x0000, "req_data_len invalid.\n");
2660 		return -EIO;
2661 	}
2662 
2663 	req_data = kzalloc(sizeof(*req_data), GFP_KERNEL);
2664 	if (!req_data) {
2665 		ql_log(ql_log_warn, vha, 0x0000, "req_data memory allocation failure.\n");
2666 		return -ENOMEM;
2667 	}
2668 
2669 	/* Copy the request buffer in req_data */
2670 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2671 			  bsg_job->request_payload.sg_cnt,
2672 			  req_data, req_data_len);
2673 
2674 	response_len = sizeof(struct ql_vnd_tgt_stats_resp) +
2675 		sizeof(struct ql_vnd_stat_entry);
2676 
2677 	/* structure + size for one entry */
2678 	data = kzalloc(response_len, GFP_KERNEL);
2679 	if (!data) {
2680 		kfree(req_data);
2681 		return -ENOMEM;
2682 	}
2683 
2684 	if (response_len > bsg_job->reply_payload.payload_len) {
2685 		data->status = EXT_STATUS_BUFFER_TOO_SMALL;
2686 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_BUFFER_TOO_SMALL;
2687 		bsg_job->reply_payload.payload_len = sizeof(struct ql_vnd_mng_host_stats_resp);
2688 
2689 		bsg_reply->reply_payload_rcv_len =
2690 			sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2691 					    bsg_job->reply_payload.sg_cnt, data,
2692 					    sizeof(struct ql_vnd_tgt_stats_resp));
2693 
2694 		bsg_reply->result = DID_OK;
2695 		bsg_job_done(bsg_job, bsg_reply->result,
2696 			     bsg_reply->reply_payload_rcv_len);
2697 		goto tgt_stat_out;
2698 	}
2699 
2700 	rport = qla2xxx_find_rport(vha, req_data->tgt_id);
2701 	if (!rport) {
2702 		ql_log(ql_log_warn, vha, 0x0000, "target %d not found.\n", req_data->tgt_id);
2703 		ret = EXT_STATUS_INVALID_PARAM;
2704 		data->status = EXT_STATUS_INVALID_PARAM;
2705 		goto reply;
2706 	}
2707 
2708 	ret = qla2xxx_get_tgt_stats(fc_bsg_to_shost(bsg_job), req_data->stat_type,
2709 				    rport, (void *)data, response_len);
2710 
2711 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2712 reply:
2713 	bsg_reply->reply_payload_rcv_len =
2714 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2715 				    bsg_job->reply_payload.sg_cnt, data,
2716 				    response_len);
2717 	bsg_reply->result = DID_OK;
2718 	bsg_job_done(bsg_job, bsg_reply->result,
2719 		     bsg_reply->reply_payload_rcv_len);
2720 
2721 tgt_stat_out:
2722 	kfree(data);
2723 	kfree(req_data);
2724 
2725 	return ret;
2726 }
2727 
2728 static int
2729 qla2x00_manage_host_port(struct bsg_job *bsg_job)
2730 {
2731 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2732 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2733 	struct ql_vnd_mng_host_port_param *req_data;
2734 	struct ql_vnd_mng_host_port_resp rsp_data;
2735 	u32 req_data_len;
2736 	int ret = 0;
2737 
2738 	req_data_len = bsg_job->request_payload.payload_len;
2739 
2740 	if (req_data_len != sizeof(struct ql_vnd_mng_host_port_param)) {
2741 		ql_log(ql_log_warn, vha, 0x0000, "req_data_len invalid.\n");
2742 		return -EIO;
2743 	}
2744 
2745 	req_data = kzalloc(sizeof(*req_data), GFP_KERNEL);
2746 	if (!req_data) {
2747 		ql_log(ql_log_warn, vha, 0x0000, "req_data memory allocation failure.\n");
2748 		return -ENOMEM;
2749 	}
2750 
2751 	/* Copy the request buffer in req_data */
2752 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2753 			  bsg_job->request_payload.sg_cnt, req_data, req_data_len);
2754 
2755 	switch (req_data->action) {
2756 	case QLA_ENABLE:
2757 		ret = qla2xxx_enable_port(vha->host);
2758 		break;
2759 	case QLA_DISABLE:
2760 		ret = qla2xxx_disable_port(vha->host);
2761 		break;
2762 	default:
2763 		ql_log(ql_log_warn, vha, 0x0000, "Invalid action.\n");
2764 		ret = -EIO;
2765 		break;
2766 	}
2767 
2768 	kfree(req_data);
2769 
2770 	/* Prepare response */
2771 	rsp_data.status = ret;
2772 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2773 	bsg_job->reply_payload.payload_len = sizeof(struct ql_vnd_mng_host_port_resp);
2774 
2775 	bsg_reply->reply_payload_rcv_len =
2776 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2777 				    bsg_job->reply_payload.sg_cnt, &rsp_data,
2778 				    sizeof(struct ql_vnd_mng_host_port_resp));
2779 	bsg_reply->result = DID_OK;
2780 	bsg_job_done(bsg_job, bsg_reply->result,
2781 		     bsg_reply->reply_payload_rcv_len);
2782 
2783 	return ret;
2784 }
2785 
2786 static int
2787 qla2x00_process_vendor_specific(struct scsi_qla_host *vha, struct bsg_job *bsg_job)
2788 {
2789 	struct fc_bsg_request *bsg_request = bsg_job->request;
2790 
2791 	ql_dbg(ql_dbg_edif, vha, 0x911b, "%s FC_BSG_HST_VENDOR cmd[0]=0x%x\n",
2792 	    __func__, bsg_request->rqst_data.h_vendor.vendor_cmd[0]);
2793 
2794 	switch (bsg_request->rqst_data.h_vendor.vendor_cmd[0]) {
2795 	case QL_VND_LOOPBACK:
2796 		return qla2x00_process_loopback(bsg_job);
2797 
2798 	case QL_VND_A84_RESET:
2799 		return qla84xx_reset(bsg_job);
2800 
2801 	case QL_VND_A84_UPDATE_FW:
2802 		return qla84xx_updatefw(bsg_job);
2803 
2804 	case QL_VND_A84_MGMT_CMD:
2805 		return qla84xx_mgmt_cmd(bsg_job);
2806 
2807 	case QL_VND_IIDMA:
2808 		return qla24xx_iidma(bsg_job);
2809 
2810 	case QL_VND_FCP_PRIO_CFG_CMD:
2811 		return qla24xx_proc_fcp_prio_cfg_cmd(bsg_job);
2812 
2813 	case QL_VND_READ_FLASH:
2814 		return qla2x00_read_optrom(bsg_job);
2815 
2816 	case QL_VND_UPDATE_FLASH:
2817 		return qla2x00_update_optrom(bsg_job);
2818 
2819 	case QL_VND_SET_FRU_VERSION:
2820 		return qla2x00_update_fru_versions(bsg_job);
2821 
2822 	case QL_VND_READ_FRU_STATUS:
2823 		return qla2x00_read_fru_status(bsg_job);
2824 
2825 	case QL_VND_WRITE_FRU_STATUS:
2826 		return qla2x00_write_fru_status(bsg_job);
2827 
2828 	case QL_VND_WRITE_I2C:
2829 		return qla2x00_write_i2c(bsg_job);
2830 
2831 	case QL_VND_READ_I2C:
2832 		return qla2x00_read_i2c(bsg_job);
2833 
2834 	case QL_VND_DIAG_IO_CMD:
2835 		return qla24xx_process_bidir_cmd(bsg_job);
2836 
2837 	case QL_VND_FX00_MGMT_CMD:
2838 		return qlafx00_mgmt_cmd(bsg_job);
2839 
2840 	case QL_VND_SERDES_OP:
2841 		return qla26xx_serdes_op(bsg_job);
2842 
2843 	case QL_VND_SERDES_OP_EX:
2844 		return qla8044_serdes_op(bsg_job);
2845 
2846 	case QL_VND_GET_FLASH_UPDATE_CAPS:
2847 		return qla27xx_get_flash_upd_cap(bsg_job);
2848 
2849 	case QL_VND_SET_FLASH_UPDATE_CAPS:
2850 		return qla27xx_set_flash_upd_cap(bsg_job);
2851 
2852 	case QL_VND_GET_BBCR_DATA:
2853 		return qla27xx_get_bbcr_data(bsg_job);
2854 
2855 	case QL_VND_GET_PRIV_STATS:
2856 	case QL_VND_GET_PRIV_STATS_EX:
2857 		return qla2x00_get_priv_stats(bsg_job);
2858 
2859 	case QL_VND_DPORT_DIAGNOSTICS:
2860 		return qla2x00_do_dport_diagnostics(bsg_job);
2861 
2862 	case QL_VND_EDIF_MGMT:
2863 		return qla_edif_app_mgmt(bsg_job);
2864 
2865 	case QL_VND_SS_GET_FLASH_IMAGE_STATUS:
2866 		return qla2x00_get_flash_image_status(bsg_job);
2867 
2868 	case QL_VND_MANAGE_HOST_STATS:
2869 		return qla2x00_manage_host_stats(bsg_job);
2870 
2871 	case QL_VND_GET_HOST_STATS:
2872 		return qla2x00_get_host_stats(bsg_job);
2873 
2874 	case QL_VND_GET_TGT_STATS:
2875 		return qla2x00_get_tgt_stats(bsg_job);
2876 
2877 	case QL_VND_MANAGE_HOST_PORT:
2878 		return qla2x00_manage_host_port(bsg_job);
2879 
2880 	case QL_VND_MBX_PASSTHRU:
2881 		return qla2x00_mailbox_passthru(bsg_job);
2882 
2883 	default:
2884 		return -ENOSYS;
2885 	}
2886 }
2887 
2888 int
2889 qla24xx_bsg_request(struct bsg_job *bsg_job)
2890 {
2891 	struct fc_bsg_request *bsg_request = bsg_job->request;
2892 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2893 	int ret = -EINVAL;
2894 	struct fc_rport *rport;
2895 	struct Scsi_Host *host;
2896 	scsi_qla_host_t *vha;
2897 
2898 	/* In case no data transferred. */
2899 	bsg_reply->reply_payload_rcv_len = 0;
2900 
2901 	if (bsg_request->msgcode == FC_BSG_RPT_ELS) {
2902 		rport = fc_bsg_to_rport(bsg_job);
2903 		host = rport_to_shost(rport);
2904 		vha = shost_priv(host);
2905 	} else {
2906 		host = fc_bsg_to_shost(bsg_job);
2907 		vha = shost_priv(host);
2908 	}
2909 
2910 	/* Disable port will bring down the chip, allow enable command */
2911 	if (bsg_request->rqst_data.h_vendor.vendor_cmd[0] == QL_VND_MANAGE_HOST_PORT ||
2912 	    bsg_request->rqst_data.h_vendor.vendor_cmd[0] == QL_VND_GET_HOST_STATS)
2913 		goto skip_chip_chk;
2914 
2915 	if (vha->hw->flags.port_isolated) {
2916 		bsg_reply->result = DID_ERROR;
2917 		/* operation not permitted */
2918 		return -EPERM;
2919 	}
2920 
2921 	if (qla2x00_chip_is_down(vha)) {
2922 		ql_dbg(ql_dbg_user, vha, 0x709f,
2923 		    "BSG: ISP abort active/needed -- cmd=%d.\n",
2924 		    bsg_request->msgcode);
2925 		SET_DID_STATUS(bsg_reply->result, DID_ERROR);
2926 		return -EBUSY;
2927 	}
2928 
2929 	if (test_bit(PFLG_DRIVER_REMOVING, &vha->pci_flags)) {
2930 		SET_DID_STATUS(bsg_reply->result, DID_ERROR);
2931 		return -EIO;
2932 	}
2933 
2934 skip_chip_chk:
2935 	ql_dbg(ql_dbg_user + ql_dbg_verbose, vha, 0x7000,
2936 	    "Entered %s msgcode=0x%x. bsg ptr %px\n",
2937 	    __func__, bsg_request->msgcode, bsg_job);
2938 
2939 	switch (bsg_request->msgcode) {
2940 	case FC_BSG_RPT_ELS:
2941 	case FC_BSG_HST_ELS_NOLOGIN:
2942 		ret = qla2x00_process_els(bsg_job);
2943 		break;
2944 	case FC_BSG_HST_CT:
2945 		ret = qla2x00_process_ct(bsg_job);
2946 		break;
2947 	case FC_BSG_HST_VENDOR:
2948 		ret = qla2x00_process_vendor_specific(vha, bsg_job);
2949 		break;
2950 	case FC_BSG_HST_ADD_RPORT:
2951 	case FC_BSG_HST_DEL_RPORT:
2952 	case FC_BSG_RPT_CT:
2953 	default:
2954 		ql_log(ql_log_warn, vha, 0x705a, "Unsupported BSG request.\n");
2955 		break;
2956 	}
2957 
2958 	ql_dbg(ql_dbg_user + ql_dbg_verbose, vha, 0x7000,
2959 	    "%s done with return %x\n", __func__, ret);
2960 
2961 	return ret;
2962 }
2963 
2964 int
2965 qla24xx_bsg_timeout(struct bsg_job *bsg_job)
2966 {
2967 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2968 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2969 	struct qla_hw_data *ha = vha->hw;
2970 	srb_t *sp;
2971 	int cnt, que;
2972 	unsigned long flags;
2973 	struct req_que *req;
2974 
2975 	ql_log(ql_log_info, vha, 0x708b, "%s CMD timeout. bsg ptr %p.\n",
2976 	    __func__, bsg_job);
2977 	/* find the bsg job from the active list of commands */
2978 	spin_lock_irqsave(&ha->hardware_lock, flags);
2979 	for (que = 0; que < ha->max_req_queues; que++) {
2980 		req = ha->req_q_map[que];
2981 		if (!req)
2982 			continue;
2983 
2984 		for (cnt = 1; cnt < req->num_outstanding_cmds; cnt++) {
2985 			sp = req->outstanding_cmds[cnt];
2986 			if (sp &&
2987 			    (sp->type == SRB_CT_CMD ||
2988 			     sp->type == SRB_ELS_CMD_HST ||
2989 			     sp->type == SRB_ELS_CMD_HST_NOLOGIN ||
2990 			     sp->type == SRB_FXIOCB_BCMD) &&
2991 			    sp->u.bsg_job == bsg_job) {
2992 				req->outstanding_cmds[cnt] = NULL;
2993 				spin_unlock_irqrestore(&ha->hardware_lock, flags);
2994 				if (ha->isp_ops->abort_command(sp)) {
2995 					ql_log(ql_log_warn, vha, 0x7089,
2996 					    "mbx abort_command failed.\n");
2997 					bsg_reply->result = -EIO;
2998 				} else {
2999 					ql_dbg(ql_dbg_user, vha, 0x708a,
3000 					    "mbx abort_command success.\n");
3001 					bsg_reply->result = 0;
3002 				}
3003 				spin_lock_irqsave(&ha->hardware_lock, flags);
3004 				goto done;
3005 
3006 			}
3007 		}
3008 	}
3009 	spin_unlock_irqrestore(&ha->hardware_lock, flags);
3010 	ql_log(ql_log_info, vha, 0x708b, "SRB not found to abort.\n");
3011 	bsg_reply->result = -ENXIO;
3012 	return 0;
3013 
3014 done:
3015 	spin_unlock_irqrestore(&ha->hardware_lock, flags);
3016 	sp->free(sp);
3017 	return 0;
3018 }
3019 
3020 int qla2x00_mailbox_passthru(struct bsg_job *bsg_job)
3021 {
3022 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
3023 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
3024 	int ret = -EINVAL;
3025 	int ptsize = sizeof(struct qla_mbx_passthru);
3026 	struct qla_mbx_passthru *req_data = NULL;
3027 	uint32_t req_data_len;
3028 
3029 	req_data_len = bsg_job->request_payload.payload_len;
3030 	if (req_data_len != ptsize) {
3031 		ql_log(ql_log_warn, vha, 0xf0a3, "req_data_len invalid.\n");
3032 		return -EIO;
3033 	}
3034 	req_data = kzalloc(ptsize, GFP_KERNEL);
3035 	if (!req_data) {
3036 		ql_log(ql_log_warn, vha, 0xf0a4,
3037 		       "req_data memory allocation failure.\n");
3038 		return -ENOMEM;
3039 	}
3040 
3041 	/* Copy the request buffer in req_data */
3042 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
3043 			  bsg_job->request_payload.sg_cnt, req_data, ptsize);
3044 	ret = qla_mailbox_passthru(vha, req_data->mbx_in, req_data->mbx_out);
3045 
3046 	/* Copy the req_data in  request buffer */
3047 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
3048 			    bsg_job->reply_payload.sg_cnt, req_data, ptsize);
3049 
3050 	bsg_reply->reply_payload_rcv_len = ptsize;
3051 	if (ret == QLA_SUCCESS)
3052 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
3053 	else
3054 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_ERR;
3055 
3056 	bsg_job->reply_len = sizeof(*bsg_job->reply);
3057 	bsg_reply->result = DID_OK << 16;
3058 	bsg_job_done(bsg_job, bsg_reply->result, bsg_reply->reply_payload_rcv_len);
3059 
3060 	kfree(req_data);
3061 
3062 	return ret;
3063 }
3064