xref: /openbmc/linux/drivers/scsi/qla2xxx/qla_bsg.c (revision 8795a739)
1 /*
2  * QLogic Fibre Channel HBA Driver
3  * Copyright (c)  2003-2014 QLogic Corporation
4  *
5  * See LICENSE.qla2xxx for copyright and licensing details.
6  */
7 #include "qla_def.h"
8 
9 #include <linux/kthread.h>
10 #include <linux/vmalloc.h>
11 #include <linux/delay.h>
12 #include <linux/bsg-lib.h>
13 
14 /* BSG support for ELS/CT pass through */
15 void qla2x00_bsg_job_done(srb_t *sp, int res)
16 {
17 	struct bsg_job *bsg_job = sp->u.bsg_job;
18 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
19 
20 	bsg_reply->result = res;
21 	bsg_job_done(bsg_job, bsg_reply->result,
22 		       bsg_reply->reply_payload_rcv_len);
23 	sp->free(sp);
24 }
25 
26 void qla2x00_bsg_sp_free(srb_t *sp)
27 {
28 	struct qla_hw_data *ha = sp->vha->hw;
29 	struct bsg_job *bsg_job = sp->u.bsg_job;
30 	struct fc_bsg_request *bsg_request = bsg_job->request;
31 	struct qla_mt_iocb_rqst_fx00 *piocb_rqst;
32 
33 	if (sp->type == SRB_FXIOCB_BCMD) {
34 		piocb_rqst = (struct qla_mt_iocb_rqst_fx00 *)
35 		    &bsg_request->rqst_data.h_vendor.vendor_cmd[1];
36 
37 		if (piocb_rqst->flags & SRB_FXDISC_REQ_DMA_VALID)
38 			dma_unmap_sg(&ha->pdev->dev,
39 			    bsg_job->request_payload.sg_list,
40 			    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
41 
42 		if (piocb_rqst->flags & SRB_FXDISC_RESP_DMA_VALID)
43 			dma_unmap_sg(&ha->pdev->dev,
44 			    bsg_job->reply_payload.sg_list,
45 			    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
46 	} else {
47 		dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
48 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
49 
50 		dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
51 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
52 	}
53 
54 	if (sp->type == SRB_CT_CMD ||
55 	    sp->type == SRB_FXIOCB_BCMD ||
56 	    sp->type == SRB_ELS_CMD_HST)
57 		kfree(sp->fcport);
58 	qla2x00_rel_sp(sp);
59 }
60 
61 int
62 qla24xx_fcp_prio_cfg_valid(scsi_qla_host_t *vha,
63 	struct qla_fcp_prio_cfg *pri_cfg, uint8_t flag)
64 {
65 	int i, ret, num_valid;
66 	uint8_t *bcode;
67 	struct qla_fcp_prio_entry *pri_entry;
68 	uint32_t *bcode_val_ptr, bcode_val;
69 
70 	ret = 1;
71 	num_valid = 0;
72 	bcode = (uint8_t *)pri_cfg;
73 	bcode_val_ptr = (uint32_t *)pri_cfg;
74 	bcode_val = (uint32_t)(*bcode_val_ptr);
75 
76 	if (bcode_val == 0xFFFFFFFF) {
77 		/* No FCP Priority config data in flash */
78 		ql_dbg(ql_dbg_user, vha, 0x7051,
79 		    "No FCP Priority config data.\n");
80 		return 0;
81 	}
82 
83 	if (memcmp(bcode, "HQOS", 4)) {
84 		/* Invalid FCP priority data header*/
85 		ql_dbg(ql_dbg_user, vha, 0x7052,
86 		    "Invalid FCP Priority data header. bcode=0x%x.\n",
87 		    bcode_val);
88 		return 0;
89 	}
90 	if (flag != 1)
91 		return ret;
92 
93 	pri_entry = &pri_cfg->entry[0];
94 	for (i = 0; i < pri_cfg->num_entries; i++) {
95 		if (pri_entry->flags & FCP_PRIO_ENTRY_TAG_VALID)
96 			num_valid++;
97 		pri_entry++;
98 	}
99 
100 	if (num_valid == 0) {
101 		/* No valid FCP priority data entries */
102 		ql_dbg(ql_dbg_user, vha, 0x7053,
103 		    "No valid FCP Priority data entries.\n");
104 		ret = 0;
105 	} else {
106 		/* FCP priority data is valid */
107 		ql_dbg(ql_dbg_user, vha, 0x7054,
108 		    "Valid FCP priority data. num entries = %d.\n",
109 		    num_valid);
110 	}
111 
112 	return ret;
113 }
114 
115 static int
116 qla24xx_proc_fcp_prio_cfg_cmd(struct bsg_job *bsg_job)
117 {
118 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
119 	struct fc_bsg_request *bsg_request = bsg_job->request;
120 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
121 	scsi_qla_host_t *vha = shost_priv(host);
122 	struct qla_hw_data *ha = vha->hw;
123 	int ret = 0;
124 	uint32_t len;
125 	uint32_t oper;
126 
127 	if (!(IS_QLA24XX_TYPE(ha) || IS_QLA25XX(ha) || IS_P3P_TYPE(ha))) {
128 		ret = -EINVAL;
129 		goto exit_fcp_prio_cfg;
130 	}
131 
132 	/* Get the sub command */
133 	oper = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
134 
135 	/* Only set config is allowed if config memory is not allocated */
136 	if (!ha->fcp_prio_cfg && (oper != QLFC_FCP_PRIO_SET_CONFIG)) {
137 		ret = -EINVAL;
138 		goto exit_fcp_prio_cfg;
139 	}
140 	switch (oper) {
141 	case QLFC_FCP_PRIO_DISABLE:
142 		if (ha->flags.fcp_prio_enabled) {
143 			ha->flags.fcp_prio_enabled = 0;
144 			ha->fcp_prio_cfg->attributes &=
145 				~FCP_PRIO_ATTR_ENABLE;
146 			qla24xx_update_all_fcp_prio(vha);
147 			bsg_reply->result = DID_OK;
148 		} else {
149 			ret = -EINVAL;
150 			bsg_reply->result = (DID_ERROR << 16);
151 			goto exit_fcp_prio_cfg;
152 		}
153 		break;
154 
155 	case QLFC_FCP_PRIO_ENABLE:
156 		if (!ha->flags.fcp_prio_enabled) {
157 			if (ha->fcp_prio_cfg) {
158 				ha->flags.fcp_prio_enabled = 1;
159 				ha->fcp_prio_cfg->attributes |=
160 				    FCP_PRIO_ATTR_ENABLE;
161 				qla24xx_update_all_fcp_prio(vha);
162 				bsg_reply->result = DID_OK;
163 			} else {
164 				ret = -EINVAL;
165 				bsg_reply->result = (DID_ERROR << 16);
166 				goto exit_fcp_prio_cfg;
167 			}
168 		}
169 		break;
170 
171 	case QLFC_FCP_PRIO_GET_CONFIG:
172 		len = bsg_job->reply_payload.payload_len;
173 		if (!len || len > FCP_PRIO_CFG_SIZE) {
174 			ret = -EINVAL;
175 			bsg_reply->result = (DID_ERROR << 16);
176 			goto exit_fcp_prio_cfg;
177 		}
178 
179 		bsg_reply->result = DID_OK;
180 		bsg_reply->reply_payload_rcv_len =
181 			sg_copy_from_buffer(
182 			bsg_job->reply_payload.sg_list,
183 			bsg_job->reply_payload.sg_cnt, ha->fcp_prio_cfg,
184 			len);
185 
186 		break;
187 
188 	case QLFC_FCP_PRIO_SET_CONFIG:
189 		len = bsg_job->request_payload.payload_len;
190 		if (!len || len > FCP_PRIO_CFG_SIZE) {
191 			bsg_reply->result = (DID_ERROR << 16);
192 			ret = -EINVAL;
193 			goto exit_fcp_prio_cfg;
194 		}
195 
196 		if (!ha->fcp_prio_cfg) {
197 			ha->fcp_prio_cfg = vmalloc(FCP_PRIO_CFG_SIZE);
198 			if (!ha->fcp_prio_cfg) {
199 				ql_log(ql_log_warn, vha, 0x7050,
200 				    "Unable to allocate memory for fcp prio "
201 				    "config data (%x).\n", FCP_PRIO_CFG_SIZE);
202 				bsg_reply->result = (DID_ERROR << 16);
203 				ret = -ENOMEM;
204 				goto exit_fcp_prio_cfg;
205 			}
206 		}
207 
208 		memset(ha->fcp_prio_cfg, 0, FCP_PRIO_CFG_SIZE);
209 		sg_copy_to_buffer(bsg_job->request_payload.sg_list,
210 		bsg_job->request_payload.sg_cnt, ha->fcp_prio_cfg,
211 			FCP_PRIO_CFG_SIZE);
212 
213 		/* validate fcp priority data */
214 
215 		if (!qla24xx_fcp_prio_cfg_valid(vha,
216 		    (struct qla_fcp_prio_cfg *) ha->fcp_prio_cfg, 1)) {
217 			bsg_reply->result = (DID_ERROR << 16);
218 			ret = -EINVAL;
219 			/* If buffer was invalidatic int
220 			 * fcp_prio_cfg is of no use
221 			 */
222 			vfree(ha->fcp_prio_cfg);
223 			ha->fcp_prio_cfg = NULL;
224 			goto exit_fcp_prio_cfg;
225 		}
226 
227 		ha->flags.fcp_prio_enabled = 0;
228 		if (ha->fcp_prio_cfg->attributes & FCP_PRIO_ATTR_ENABLE)
229 			ha->flags.fcp_prio_enabled = 1;
230 		qla24xx_update_all_fcp_prio(vha);
231 		bsg_reply->result = DID_OK;
232 		break;
233 	default:
234 		ret = -EINVAL;
235 		break;
236 	}
237 exit_fcp_prio_cfg:
238 	if (!ret)
239 		bsg_job_done(bsg_job, bsg_reply->result,
240 			       bsg_reply->reply_payload_rcv_len);
241 	return ret;
242 }
243 
244 static int
245 qla2x00_process_els(struct bsg_job *bsg_job)
246 {
247 	struct fc_bsg_request *bsg_request = bsg_job->request;
248 	struct fc_rport *rport;
249 	fc_port_t *fcport = NULL;
250 	struct Scsi_Host *host;
251 	scsi_qla_host_t *vha;
252 	struct qla_hw_data *ha;
253 	srb_t *sp;
254 	const char *type;
255 	int req_sg_cnt, rsp_sg_cnt;
256 	int rval =  (DRIVER_ERROR << 16);
257 	uint16_t nextlid = 0;
258 
259 	if (bsg_request->msgcode == FC_BSG_RPT_ELS) {
260 		rport = fc_bsg_to_rport(bsg_job);
261 		fcport = *(fc_port_t **) rport->dd_data;
262 		host = rport_to_shost(rport);
263 		vha = shost_priv(host);
264 		ha = vha->hw;
265 		type = "FC_BSG_RPT_ELS";
266 	} else {
267 		host = fc_bsg_to_shost(bsg_job);
268 		vha = shost_priv(host);
269 		ha = vha->hw;
270 		type = "FC_BSG_HST_ELS_NOLOGIN";
271 	}
272 
273 	if (!vha->flags.online) {
274 		ql_log(ql_log_warn, vha, 0x7005, "Host not online.\n");
275 		rval = -EIO;
276 		goto done;
277 	}
278 
279 	/* pass through is supported only for ISP 4Gb or higher */
280 	if (!IS_FWI2_CAPABLE(ha)) {
281 		ql_dbg(ql_dbg_user, vha, 0x7001,
282 		    "ELS passthru not supported for ISP23xx based adapters.\n");
283 		rval = -EPERM;
284 		goto done;
285 	}
286 
287 	/*  Multiple SG's are not supported for ELS requests */
288 	if (bsg_job->request_payload.sg_cnt > 1 ||
289 		bsg_job->reply_payload.sg_cnt > 1) {
290 		ql_dbg(ql_dbg_user, vha, 0x7002,
291 		    "Multiple SG's are not supported for ELS requests, "
292 		    "request_sg_cnt=%x reply_sg_cnt=%x.\n",
293 		    bsg_job->request_payload.sg_cnt,
294 		    bsg_job->reply_payload.sg_cnt);
295 		rval = -EPERM;
296 		goto done;
297 	}
298 
299 	/* ELS request for rport */
300 	if (bsg_request->msgcode == FC_BSG_RPT_ELS) {
301 		/* make sure the rport is logged in,
302 		 * if not perform fabric login
303 		 */
304 		if (qla2x00_fabric_login(vha, fcport, &nextlid)) {
305 			ql_dbg(ql_dbg_user, vha, 0x7003,
306 			    "Failed to login port %06X for ELS passthru.\n",
307 			    fcport->d_id.b24);
308 			rval = -EIO;
309 			goto done;
310 		}
311 	} else {
312 		/* Allocate a dummy fcport structure, since functions
313 		 * preparing the IOCB and mailbox command retrieves port
314 		 * specific information from fcport structure. For Host based
315 		 * ELS commands there will be no fcport structure allocated
316 		 */
317 		fcport = qla2x00_alloc_fcport(vha, GFP_KERNEL);
318 		if (!fcport) {
319 			rval = -ENOMEM;
320 			goto done;
321 		}
322 
323 		/* Initialize all required  fields of fcport */
324 		fcport->vha = vha;
325 		fcport->d_id.b.al_pa =
326 			bsg_request->rqst_data.h_els.port_id[0];
327 		fcport->d_id.b.area =
328 			bsg_request->rqst_data.h_els.port_id[1];
329 		fcport->d_id.b.domain =
330 			bsg_request->rqst_data.h_els.port_id[2];
331 		fcport->loop_id =
332 			(fcport->d_id.b.al_pa == 0xFD) ?
333 			NPH_FABRIC_CONTROLLER : NPH_F_PORT;
334 	}
335 
336 	req_sg_cnt =
337 		dma_map_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
338 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
339 	if (!req_sg_cnt) {
340 		dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
341 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
342 		rval = -ENOMEM;
343 		goto done_free_fcport;
344 	}
345 
346 	rsp_sg_cnt = dma_map_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
347 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
348         if (!rsp_sg_cnt) {
349 		dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
350 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
351 		rval = -ENOMEM;
352 		goto done_free_fcport;
353 	}
354 
355 	if ((req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
356 		(rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
357 		ql_log(ql_log_warn, vha, 0x7008,
358 		    "dma mapping resulted in different sg counts, "
359 		    "request_sg_cnt: %x dma_request_sg_cnt:%x reply_sg_cnt:%x "
360 		    "dma_reply_sg_cnt:%x.\n", bsg_job->request_payload.sg_cnt,
361 		    req_sg_cnt, bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
362 		rval = -EAGAIN;
363 		goto done_unmap_sg;
364 	}
365 
366 	/* Alloc SRB structure */
367 	sp = qla2x00_get_sp(vha, fcport, GFP_KERNEL);
368 	if (!sp) {
369 		rval = -ENOMEM;
370 		goto done_unmap_sg;
371 	}
372 
373 	sp->type =
374 		(bsg_request->msgcode == FC_BSG_RPT_ELS ?
375 		 SRB_ELS_CMD_RPT : SRB_ELS_CMD_HST);
376 	sp->name =
377 		(bsg_request->msgcode == FC_BSG_RPT_ELS ?
378 		 "bsg_els_rpt" : "bsg_els_hst");
379 	sp->u.bsg_job = bsg_job;
380 	sp->free = qla2x00_bsg_sp_free;
381 	sp->done = qla2x00_bsg_job_done;
382 
383 	ql_dbg(ql_dbg_user, vha, 0x700a,
384 	    "bsg rqst type: %s els type: %x - loop-id=%x "
385 	    "portid=%-2x%02x%02x.\n", type,
386 	    bsg_request->rqst_data.h_els.command_code, fcport->loop_id,
387 	    fcport->d_id.b.domain, fcport->d_id.b.area, fcport->d_id.b.al_pa);
388 
389 	rval = qla2x00_start_sp(sp);
390 	if (rval != QLA_SUCCESS) {
391 		ql_log(ql_log_warn, vha, 0x700e,
392 		    "qla2x00_start_sp failed = %d\n", rval);
393 		qla2x00_rel_sp(sp);
394 		rval = -EIO;
395 		goto done_unmap_sg;
396 	}
397 	return rval;
398 
399 done_unmap_sg:
400 	dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
401 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
402 	dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
403 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
404 	goto done_free_fcport;
405 
406 done_free_fcport:
407 	if (bsg_request->msgcode == FC_BSG_RPT_ELS)
408 		kfree(fcport);
409 done:
410 	return rval;
411 }
412 
413 static inline uint16_t
414 qla24xx_calc_ct_iocbs(uint16_t dsds)
415 {
416 	uint16_t iocbs;
417 
418 	iocbs = 1;
419 	if (dsds > 2) {
420 		iocbs += (dsds - 2) / 5;
421 		if ((dsds - 2) % 5)
422 			iocbs++;
423 	}
424 	return iocbs;
425 }
426 
427 static int
428 qla2x00_process_ct(struct bsg_job *bsg_job)
429 {
430 	srb_t *sp;
431 	struct fc_bsg_request *bsg_request = bsg_job->request;
432 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
433 	scsi_qla_host_t *vha = shost_priv(host);
434 	struct qla_hw_data *ha = vha->hw;
435 	int rval = (DRIVER_ERROR << 16);
436 	int req_sg_cnt, rsp_sg_cnt;
437 	uint16_t loop_id;
438 	struct fc_port *fcport;
439 	char  *type = "FC_BSG_HST_CT";
440 
441 	req_sg_cnt =
442 		dma_map_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
443 			bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
444 	if (!req_sg_cnt) {
445 		ql_log(ql_log_warn, vha, 0x700f,
446 		    "dma_map_sg return %d for request\n", req_sg_cnt);
447 		rval = -ENOMEM;
448 		goto done;
449 	}
450 
451 	rsp_sg_cnt = dma_map_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
452 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
453 	if (!rsp_sg_cnt) {
454 		ql_log(ql_log_warn, vha, 0x7010,
455 		    "dma_map_sg return %d for reply\n", rsp_sg_cnt);
456 		rval = -ENOMEM;
457 		goto done;
458 	}
459 
460 	if ((req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
461 	    (rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
462 		ql_log(ql_log_warn, vha, 0x7011,
463 		    "request_sg_cnt: %x dma_request_sg_cnt: %x reply_sg_cnt:%x "
464 		    "dma_reply_sg_cnt: %x\n", bsg_job->request_payload.sg_cnt,
465 		    req_sg_cnt, bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
466 		rval = -EAGAIN;
467 		goto done_unmap_sg;
468 	}
469 
470 	if (!vha->flags.online) {
471 		ql_log(ql_log_warn, vha, 0x7012,
472 		    "Host is not online.\n");
473 		rval = -EIO;
474 		goto done_unmap_sg;
475 	}
476 
477 	loop_id =
478 		(bsg_request->rqst_data.h_ct.preamble_word1 & 0xFF000000)
479 			>> 24;
480 	switch (loop_id) {
481 	case 0xFC:
482 		loop_id = cpu_to_le16(NPH_SNS);
483 		break;
484 	case 0xFA:
485 		loop_id = vha->mgmt_svr_loop_id;
486 		break;
487 	default:
488 		ql_dbg(ql_dbg_user, vha, 0x7013,
489 		    "Unknown loop id: %x.\n", loop_id);
490 		rval = -EINVAL;
491 		goto done_unmap_sg;
492 	}
493 
494 	/* Allocate a dummy fcport structure, since functions preparing the
495 	 * IOCB and mailbox command retrieves port specific information
496 	 * from fcport structure. For Host based ELS commands there will be
497 	 * no fcport structure allocated
498 	 */
499 	fcport = qla2x00_alloc_fcport(vha, GFP_KERNEL);
500 	if (!fcport) {
501 		ql_log(ql_log_warn, vha, 0x7014,
502 		    "Failed to allocate fcport.\n");
503 		rval = -ENOMEM;
504 		goto done_unmap_sg;
505 	}
506 
507 	/* Initialize all required  fields of fcport */
508 	fcport->vha = vha;
509 	fcport->d_id.b.al_pa = bsg_request->rqst_data.h_ct.port_id[0];
510 	fcport->d_id.b.area = bsg_request->rqst_data.h_ct.port_id[1];
511 	fcport->d_id.b.domain = bsg_request->rqst_data.h_ct.port_id[2];
512 	fcport->loop_id = loop_id;
513 
514 	/* Alloc SRB structure */
515 	sp = qla2x00_get_sp(vha, fcport, GFP_KERNEL);
516 	if (!sp) {
517 		ql_log(ql_log_warn, vha, 0x7015,
518 		    "qla2x00_get_sp failed.\n");
519 		rval = -ENOMEM;
520 		goto done_free_fcport;
521 	}
522 
523 	sp->type = SRB_CT_CMD;
524 	sp->name = "bsg_ct";
525 	sp->iocbs = qla24xx_calc_ct_iocbs(req_sg_cnt + rsp_sg_cnt);
526 	sp->u.bsg_job = bsg_job;
527 	sp->free = qla2x00_bsg_sp_free;
528 	sp->done = qla2x00_bsg_job_done;
529 
530 	ql_dbg(ql_dbg_user, vha, 0x7016,
531 	    "bsg rqst type: %s else type: %x - "
532 	    "loop-id=%x portid=%02x%02x%02x.\n", type,
533 	    (bsg_request->rqst_data.h_ct.preamble_word2 >> 16),
534 	    fcport->loop_id, fcport->d_id.b.domain, fcport->d_id.b.area,
535 	    fcport->d_id.b.al_pa);
536 
537 	rval = qla2x00_start_sp(sp);
538 	if (rval != QLA_SUCCESS) {
539 		ql_log(ql_log_warn, vha, 0x7017,
540 		    "qla2x00_start_sp failed=%d.\n", rval);
541 		qla2x00_rel_sp(sp);
542 		rval = -EIO;
543 		goto done_free_fcport;
544 	}
545 	return rval;
546 
547 done_free_fcport:
548 	kfree(fcport);
549 done_unmap_sg:
550 	dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
551 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
552 	dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
553 		bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
554 done:
555 	return rval;
556 }
557 
558 /* Disable loopback mode */
559 static inline int
560 qla81xx_reset_loopback_mode(scsi_qla_host_t *vha, uint16_t *config,
561 			    int wait, int wait2)
562 {
563 	int ret = 0;
564 	int rval = 0;
565 	uint16_t new_config[4];
566 	struct qla_hw_data *ha = vha->hw;
567 
568 	if (!IS_QLA81XX(ha) && !IS_QLA8031(ha) && !IS_QLA8044(ha))
569 		goto done_reset_internal;
570 
571 	memset(new_config, 0 , sizeof(new_config));
572 	if ((config[0] & INTERNAL_LOOPBACK_MASK) >> 1 ==
573 	    ENABLE_INTERNAL_LOOPBACK ||
574 	    (config[0] & INTERNAL_LOOPBACK_MASK) >> 1 ==
575 	    ENABLE_EXTERNAL_LOOPBACK) {
576 		new_config[0] = config[0] & ~INTERNAL_LOOPBACK_MASK;
577 		ql_dbg(ql_dbg_user, vha, 0x70bf, "new_config[0]=%02x\n",
578 		    (new_config[0] & INTERNAL_LOOPBACK_MASK));
579 		memcpy(&new_config[1], &config[1], sizeof(uint16_t) * 3) ;
580 
581 		ha->notify_dcbx_comp = wait;
582 		ha->notify_lb_portup_comp = wait2;
583 
584 		ret = qla81xx_set_port_config(vha, new_config);
585 		if (ret != QLA_SUCCESS) {
586 			ql_log(ql_log_warn, vha, 0x7025,
587 			    "Set port config failed.\n");
588 			ha->notify_dcbx_comp = 0;
589 			ha->notify_lb_portup_comp = 0;
590 			rval = -EINVAL;
591 			goto done_reset_internal;
592 		}
593 
594 		/* Wait for DCBX complete event */
595 		if (wait && !wait_for_completion_timeout(&ha->dcbx_comp,
596 			(DCBX_COMP_TIMEOUT * HZ))) {
597 			ql_dbg(ql_dbg_user, vha, 0x7026,
598 			    "DCBX completion not received.\n");
599 			ha->notify_dcbx_comp = 0;
600 			ha->notify_lb_portup_comp = 0;
601 			rval = -EINVAL;
602 			goto done_reset_internal;
603 		} else
604 			ql_dbg(ql_dbg_user, vha, 0x7027,
605 			    "DCBX completion received.\n");
606 
607 		if (wait2 &&
608 		    !wait_for_completion_timeout(&ha->lb_portup_comp,
609 		    (LB_PORTUP_COMP_TIMEOUT * HZ))) {
610 			ql_dbg(ql_dbg_user, vha, 0x70c5,
611 			    "Port up completion not received.\n");
612 			ha->notify_lb_portup_comp = 0;
613 			rval = -EINVAL;
614 			goto done_reset_internal;
615 		} else
616 			ql_dbg(ql_dbg_user, vha, 0x70c6,
617 			    "Port up completion received.\n");
618 
619 		ha->notify_dcbx_comp = 0;
620 		ha->notify_lb_portup_comp = 0;
621 	}
622 done_reset_internal:
623 	return rval;
624 }
625 
626 /*
627  * Set the port configuration to enable the internal or external loopback
628  * depending on the loopback mode.
629  */
630 static inline int
631 qla81xx_set_loopback_mode(scsi_qla_host_t *vha, uint16_t *config,
632 	uint16_t *new_config, uint16_t mode)
633 {
634 	int ret = 0;
635 	int rval = 0;
636 	unsigned long rem_tmo = 0, current_tmo = 0;
637 	struct qla_hw_data *ha = vha->hw;
638 
639 	if (!IS_QLA81XX(ha) && !IS_QLA8031(ha) && !IS_QLA8044(ha))
640 		goto done_set_internal;
641 
642 	if (mode == INTERNAL_LOOPBACK)
643 		new_config[0] = config[0] | (ENABLE_INTERNAL_LOOPBACK << 1);
644 	else if (mode == EXTERNAL_LOOPBACK)
645 		new_config[0] = config[0] | (ENABLE_EXTERNAL_LOOPBACK << 1);
646 	ql_dbg(ql_dbg_user, vha, 0x70be,
647 	     "new_config[0]=%02x\n", (new_config[0] & INTERNAL_LOOPBACK_MASK));
648 
649 	memcpy(&new_config[1], &config[1], sizeof(uint16_t) * 3);
650 
651 	ha->notify_dcbx_comp = 1;
652 	ret = qla81xx_set_port_config(vha, new_config);
653 	if (ret != QLA_SUCCESS) {
654 		ql_log(ql_log_warn, vha, 0x7021,
655 		    "set port config failed.\n");
656 		ha->notify_dcbx_comp = 0;
657 		rval = -EINVAL;
658 		goto done_set_internal;
659 	}
660 
661 	/* Wait for DCBX complete event */
662 	current_tmo = DCBX_COMP_TIMEOUT * HZ;
663 	while (1) {
664 		rem_tmo = wait_for_completion_timeout(&ha->dcbx_comp,
665 		    current_tmo);
666 		if (!ha->idc_extend_tmo || rem_tmo) {
667 			ha->idc_extend_tmo = 0;
668 			break;
669 		}
670 		current_tmo = ha->idc_extend_tmo * HZ;
671 		ha->idc_extend_tmo = 0;
672 	}
673 
674 	if (!rem_tmo) {
675 		ql_dbg(ql_dbg_user, vha, 0x7022,
676 		    "DCBX completion not received.\n");
677 		ret = qla81xx_reset_loopback_mode(vha, new_config, 0, 0);
678 		/*
679 		 * If the reset of the loopback mode doesn't work take a FCoE
680 		 * dump and reset the chip.
681 		 */
682 		if (ret) {
683 			ha->isp_ops->fw_dump(vha, 0);
684 			set_bit(ISP_ABORT_NEEDED, &vha->dpc_flags);
685 		}
686 		rval = -EINVAL;
687 	} else {
688 		if (ha->flags.idc_compl_status) {
689 			ql_dbg(ql_dbg_user, vha, 0x70c3,
690 			    "Bad status in IDC Completion AEN\n");
691 			rval = -EINVAL;
692 			ha->flags.idc_compl_status = 0;
693 		} else
694 			ql_dbg(ql_dbg_user, vha, 0x7023,
695 			    "DCBX completion received.\n");
696 	}
697 
698 	ha->notify_dcbx_comp = 0;
699 	ha->idc_extend_tmo = 0;
700 
701 done_set_internal:
702 	return rval;
703 }
704 
705 static int
706 qla2x00_process_loopback(struct bsg_job *bsg_job)
707 {
708 	struct fc_bsg_request *bsg_request = bsg_job->request;
709 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
710 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
711 	scsi_qla_host_t *vha = shost_priv(host);
712 	struct qla_hw_data *ha = vha->hw;
713 	int rval;
714 	uint8_t command_sent;
715 	char *type;
716 	struct msg_echo_lb elreq;
717 	uint16_t response[MAILBOX_REGISTER_COUNT];
718 	uint16_t config[4], new_config[4];
719 	uint8_t *fw_sts_ptr;
720 	uint8_t *req_data = NULL;
721 	dma_addr_t req_data_dma;
722 	uint32_t req_data_len;
723 	uint8_t *rsp_data = NULL;
724 	dma_addr_t rsp_data_dma;
725 	uint32_t rsp_data_len;
726 
727 	if (!vha->flags.online) {
728 		ql_log(ql_log_warn, vha, 0x7019, "Host is not online.\n");
729 		return -EIO;
730 	}
731 
732 	memset(&elreq, 0, sizeof(elreq));
733 
734 	elreq.req_sg_cnt = dma_map_sg(&ha->pdev->dev,
735 		bsg_job->request_payload.sg_list, bsg_job->request_payload.sg_cnt,
736 		DMA_TO_DEVICE);
737 
738 	if (!elreq.req_sg_cnt) {
739 		ql_log(ql_log_warn, vha, 0x701a,
740 		    "dma_map_sg returned %d for request.\n", elreq.req_sg_cnt);
741 		return -ENOMEM;
742 	}
743 
744 	elreq.rsp_sg_cnt = dma_map_sg(&ha->pdev->dev,
745 		bsg_job->reply_payload.sg_list, bsg_job->reply_payload.sg_cnt,
746 		DMA_FROM_DEVICE);
747 
748 	if (!elreq.rsp_sg_cnt) {
749 		ql_log(ql_log_warn, vha, 0x701b,
750 		    "dma_map_sg returned %d for reply.\n", elreq.rsp_sg_cnt);
751 		rval = -ENOMEM;
752 		goto done_unmap_req_sg;
753 	}
754 
755 	if ((elreq.req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
756 		(elreq.rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
757 		ql_log(ql_log_warn, vha, 0x701c,
758 		    "dma mapping resulted in different sg counts, "
759 		    "request_sg_cnt: %x dma_request_sg_cnt: %x "
760 		    "reply_sg_cnt: %x dma_reply_sg_cnt: %x.\n",
761 		    bsg_job->request_payload.sg_cnt, elreq.req_sg_cnt,
762 		    bsg_job->reply_payload.sg_cnt, elreq.rsp_sg_cnt);
763 		rval = -EAGAIN;
764 		goto done_unmap_sg;
765 	}
766 	req_data_len = rsp_data_len = bsg_job->request_payload.payload_len;
767 	req_data = dma_alloc_coherent(&ha->pdev->dev, req_data_len,
768 		&req_data_dma, GFP_KERNEL);
769 	if (!req_data) {
770 		ql_log(ql_log_warn, vha, 0x701d,
771 		    "dma alloc failed for req_data.\n");
772 		rval = -ENOMEM;
773 		goto done_unmap_sg;
774 	}
775 
776 	rsp_data = dma_alloc_coherent(&ha->pdev->dev, rsp_data_len,
777 		&rsp_data_dma, GFP_KERNEL);
778 	if (!rsp_data) {
779 		ql_log(ql_log_warn, vha, 0x7004,
780 		    "dma alloc failed for rsp_data.\n");
781 		rval = -ENOMEM;
782 		goto done_free_dma_req;
783 	}
784 
785 	/* Copy the request buffer in req_data now */
786 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
787 		bsg_job->request_payload.sg_cnt, req_data, req_data_len);
788 
789 	elreq.send_dma = req_data_dma;
790 	elreq.rcv_dma = rsp_data_dma;
791 	elreq.transfer_size = req_data_len;
792 
793 	elreq.options = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
794 	elreq.iteration_count =
795 	    bsg_request->rqst_data.h_vendor.vendor_cmd[2];
796 
797 	if (atomic_read(&vha->loop_state) == LOOP_READY &&
798 	    (ha->current_topology == ISP_CFG_F ||
799 	    (le32_to_cpu(*(uint32_t *)req_data) == ELS_OPCODE_BYTE &&
800 	     req_data_len == MAX_ELS_FRAME_PAYLOAD)) &&
801 	    elreq.options == EXTERNAL_LOOPBACK) {
802 		type = "FC_BSG_HST_VENDOR_ECHO_DIAG";
803 		ql_dbg(ql_dbg_user, vha, 0x701e,
804 		    "BSG request type: %s.\n", type);
805 		command_sent = INT_DEF_LB_ECHO_CMD;
806 		rval = qla2x00_echo_test(vha, &elreq, response);
807 	} else {
808 		if (IS_QLA81XX(ha) || IS_QLA8031(ha) || IS_QLA8044(ha)) {
809 			memset(config, 0, sizeof(config));
810 			memset(new_config, 0, sizeof(new_config));
811 
812 			if (qla81xx_get_port_config(vha, config)) {
813 				ql_log(ql_log_warn, vha, 0x701f,
814 				    "Get port config failed.\n");
815 				rval = -EPERM;
816 				goto done_free_dma_rsp;
817 			}
818 
819 			if ((config[0] & INTERNAL_LOOPBACK_MASK) != 0) {
820 				ql_dbg(ql_dbg_user, vha, 0x70c4,
821 				    "Loopback operation already in "
822 				    "progress.\n");
823 				rval = -EAGAIN;
824 				goto done_free_dma_rsp;
825 			}
826 
827 			ql_dbg(ql_dbg_user, vha, 0x70c0,
828 			    "elreq.options=%04x\n", elreq.options);
829 
830 			if (elreq.options == EXTERNAL_LOOPBACK)
831 				if (IS_QLA8031(ha) || IS_QLA8044(ha))
832 					rval = qla81xx_set_loopback_mode(vha,
833 					    config, new_config, elreq.options);
834 				else
835 					rval = qla81xx_reset_loopback_mode(vha,
836 					    config, 1, 0);
837 			else
838 				rval = qla81xx_set_loopback_mode(vha, config,
839 				    new_config, elreq.options);
840 
841 			if (rval) {
842 				rval = -EPERM;
843 				goto done_free_dma_rsp;
844 			}
845 
846 			type = "FC_BSG_HST_VENDOR_LOOPBACK";
847 			ql_dbg(ql_dbg_user, vha, 0x7028,
848 			    "BSG request type: %s.\n", type);
849 
850 			command_sent = INT_DEF_LB_LOOPBACK_CMD;
851 			rval = qla2x00_loopback_test(vha, &elreq, response);
852 
853 			if (response[0] == MBS_COMMAND_ERROR &&
854 					response[1] == MBS_LB_RESET) {
855 				ql_log(ql_log_warn, vha, 0x7029,
856 				    "MBX command error, Aborting ISP.\n");
857 				set_bit(ISP_ABORT_NEEDED, &vha->dpc_flags);
858 				qla2xxx_wake_dpc(vha);
859 				qla2x00_wait_for_chip_reset(vha);
860 				/* Also reset the MPI */
861 				if (IS_QLA81XX(ha)) {
862 					if (qla81xx_restart_mpi_firmware(vha) !=
863 					    QLA_SUCCESS) {
864 						ql_log(ql_log_warn, vha, 0x702a,
865 						    "MPI reset failed.\n");
866 					}
867 				}
868 
869 				rval = -EIO;
870 				goto done_free_dma_rsp;
871 			}
872 
873 			if (new_config[0]) {
874 				int ret;
875 
876 				/* Revert back to original port config
877 				 * Also clear internal loopback
878 				 */
879 				ret = qla81xx_reset_loopback_mode(vha,
880 				    new_config, 0, 1);
881 				if (ret) {
882 					/*
883 					 * If the reset of the loopback mode
884 					 * doesn't work take FCoE dump and then
885 					 * reset the chip.
886 					 */
887 					ha->isp_ops->fw_dump(vha, 0);
888 					set_bit(ISP_ABORT_NEEDED,
889 					    &vha->dpc_flags);
890 				}
891 
892 			}
893 
894 		} else {
895 			type = "FC_BSG_HST_VENDOR_LOOPBACK";
896 			ql_dbg(ql_dbg_user, vha, 0x702b,
897 			    "BSG request type: %s.\n", type);
898 			command_sent = INT_DEF_LB_LOOPBACK_CMD;
899 			rval = qla2x00_loopback_test(vha, &elreq, response);
900 		}
901 	}
902 
903 	if (rval) {
904 		ql_log(ql_log_warn, vha, 0x702c,
905 		    "Vendor request %s failed.\n", type);
906 
907 		rval = 0;
908 		bsg_reply->result = (DID_ERROR << 16);
909 		bsg_reply->reply_payload_rcv_len = 0;
910 	} else {
911 		ql_dbg(ql_dbg_user, vha, 0x702d,
912 		    "Vendor request %s completed.\n", type);
913 		bsg_reply->result = (DID_OK << 16);
914 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
915 			bsg_job->reply_payload.sg_cnt, rsp_data,
916 			rsp_data_len);
917 	}
918 
919 	bsg_job->reply_len = sizeof(struct fc_bsg_reply) +
920 	    sizeof(response) + sizeof(uint8_t);
921 	fw_sts_ptr = bsg_job->reply + sizeof(struct fc_bsg_reply);
922 	memcpy(bsg_job->reply + sizeof(struct fc_bsg_reply), response,
923 			sizeof(response));
924 	fw_sts_ptr += sizeof(response);
925 	*fw_sts_ptr = command_sent;
926 
927 done_free_dma_rsp:
928 	dma_free_coherent(&ha->pdev->dev, rsp_data_len,
929 		rsp_data, rsp_data_dma);
930 done_free_dma_req:
931 	dma_free_coherent(&ha->pdev->dev, req_data_len,
932 		req_data, req_data_dma);
933 done_unmap_sg:
934 	dma_unmap_sg(&ha->pdev->dev,
935 	    bsg_job->reply_payload.sg_list,
936 	    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
937 done_unmap_req_sg:
938 	dma_unmap_sg(&ha->pdev->dev,
939 	    bsg_job->request_payload.sg_list,
940 	    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
941 	if (!rval)
942 		bsg_job_done(bsg_job, bsg_reply->result,
943 			       bsg_reply->reply_payload_rcv_len);
944 	return rval;
945 }
946 
947 static int
948 qla84xx_reset(struct bsg_job *bsg_job)
949 {
950 	struct fc_bsg_request *bsg_request = bsg_job->request;
951 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
952 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
953 	scsi_qla_host_t *vha = shost_priv(host);
954 	struct qla_hw_data *ha = vha->hw;
955 	int rval = 0;
956 	uint32_t flag;
957 
958 	if (!IS_QLA84XX(ha)) {
959 		ql_dbg(ql_dbg_user, vha, 0x702f, "Not 84xx, exiting.\n");
960 		return -EINVAL;
961 	}
962 
963 	flag = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
964 
965 	rval = qla84xx_reset_chip(vha, flag == A84_ISSUE_RESET_DIAG_FW);
966 
967 	if (rval) {
968 		ql_log(ql_log_warn, vha, 0x7030,
969 		    "Vendor request 84xx reset failed.\n");
970 		rval = (DID_ERROR << 16);
971 
972 	} else {
973 		ql_dbg(ql_dbg_user, vha, 0x7031,
974 		    "Vendor request 84xx reset completed.\n");
975 		bsg_reply->result = DID_OK;
976 		bsg_job_done(bsg_job, bsg_reply->result,
977 			       bsg_reply->reply_payload_rcv_len);
978 	}
979 
980 	return rval;
981 }
982 
983 static int
984 qla84xx_updatefw(struct bsg_job *bsg_job)
985 {
986 	struct fc_bsg_request *bsg_request = bsg_job->request;
987 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
988 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
989 	scsi_qla_host_t *vha = shost_priv(host);
990 	struct qla_hw_data *ha = vha->hw;
991 	struct verify_chip_entry_84xx *mn = NULL;
992 	dma_addr_t mn_dma, fw_dma;
993 	void *fw_buf = NULL;
994 	int rval = 0;
995 	uint32_t sg_cnt;
996 	uint32_t data_len;
997 	uint16_t options;
998 	uint32_t flag;
999 	uint32_t fw_ver;
1000 
1001 	if (!IS_QLA84XX(ha)) {
1002 		ql_dbg(ql_dbg_user, vha, 0x7032,
1003 		    "Not 84xx, exiting.\n");
1004 		return -EINVAL;
1005 	}
1006 
1007 	sg_cnt = dma_map_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
1008 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1009 	if (!sg_cnt) {
1010 		ql_log(ql_log_warn, vha, 0x7033,
1011 		    "dma_map_sg returned %d for request.\n", sg_cnt);
1012 		return -ENOMEM;
1013 	}
1014 
1015 	if (sg_cnt != bsg_job->request_payload.sg_cnt) {
1016 		ql_log(ql_log_warn, vha, 0x7034,
1017 		    "DMA mapping resulted in different sg counts, "
1018 		    "request_sg_cnt: %x dma_request_sg_cnt: %x.\n",
1019 		    bsg_job->request_payload.sg_cnt, sg_cnt);
1020 		rval = -EAGAIN;
1021 		goto done_unmap_sg;
1022 	}
1023 
1024 	data_len = bsg_job->request_payload.payload_len;
1025 	fw_buf = dma_alloc_coherent(&ha->pdev->dev, data_len,
1026 		&fw_dma, GFP_KERNEL);
1027 	if (!fw_buf) {
1028 		ql_log(ql_log_warn, vha, 0x7035,
1029 		    "DMA alloc failed for fw_buf.\n");
1030 		rval = -ENOMEM;
1031 		goto done_unmap_sg;
1032 	}
1033 
1034 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1035 		bsg_job->request_payload.sg_cnt, fw_buf, data_len);
1036 
1037 	mn = dma_pool_zalloc(ha->s_dma_pool, GFP_KERNEL, &mn_dma);
1038 	if (!mn) {
1039 		ql_log(ql_log_warn, vha, 0x7036,
1040 		    "DMA alloc failed for fw buffer.\n");
1041 		rval = -ENOMEM;
1042 		goto done_free_fw_buf;
1043 	}
1044 
1045 	flag = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
1046 	fw_ver = get_unaligned_le32((uint32_t *)fw_buf + 2);
1047 
1048 	mn->entry_type = VERIFY_CHIP_IOCB_TYPE;
1049 	mn->entry_count = 1;
1050 
1051 	options = VCO_FORCE_UPDATE | VCO_END_OF_DATA;
1052 	if (flag == A84_ISSUE_UPDATE_DIAGFW_CMD)
1053 		options |= VCO_DIAG_FW;
1054 
1055 	mn->options = cpu_to_le16(options);
1056 	mn->fw_ver =  cpu_to_le32(fw_ver);
1057 	mn->fw_size =  cpu_to_le32(data_len);
1058 	mn->fw_seq_size =  cpu_to_le32(data_len);
1059 	put_unaligned_le64(fw_dma, &mn->dsd.address);
1060 	mn->dsd.length = cpu_to_le32(data_len);
1061 	mn->data_seg_cnt = cpu_to_le16(1);
1062 
1063 	rval = qla2x00_issue_iocb_timeout(vha, mn, mn_dma, 0, 120);
1064 
1065 	if (rval) {
1066 		ql_log(ql_log_warn, vha, 0x7037,
1067 		    "Vendor request 84xx updatefw failed.\n");
1068 
1069 		rval = (DID_ERROR << 16);
1070 	} else {
1071 		ql_dbg(ql_dbg_user, vha, 0x7038,
1072 		    "Vendor request 84xx updatefw completed.\n");
1073 
1074 		bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1075 		bsg_reply->result = DID_OK;
1076 	}
1077 
1078 	dma_pool_free(ha->s_dma_pool, mn, mn_dma);
1079 
1080 done_free_fw_buf:
1081 	dma_free_coherent(&ha->pdev->dev, data_len, fw_buf, fw_dma);
1082 
1083 done_unmap_sg:
1084 	dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
1085 		bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1086 
1087 	if (!rval)
1088 		bsg_job_done(bsg_job, bsg_reply->result,
1089 			       bsg_reply->reply_payload_rcv_len);
1090 	return rval;
1091 }
1092 
1093 static int
1094 qla84xx_mgmt_cmd(struct bsg_job *bsg_job)
1095 {
1096 	struct fc_bsg_request *bsg_request = bsg_job->request;
1097 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1098 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1099 	scsi_qla_host_t *vha = shost_priv(host);
1100 	struct qla_hw_data *ha = vha->hw;
1101 	struct access_chip_84xx *mn = NULL;
1102 	dma_addr_t mn_dma, mgmt_dma;
1103 	void *mgmt_b = NULL;
1104 	int rval = 0;
1105 	struct qla_bsg_a84_mgmt *ql84_mgmt;
1106 	uint32_t sg_cnt;
1107 	uint32_t data_len = 0;
1108 	uint32_t dma_direction = DMA_NONE;
1109 
1110 	if (!IS_QLA84XX(ha)) {
1111 		ql_log(ql_log_warn, vha, 0x703a,
1112 		    "Not 84xx, exiting.\n");
1113 		return -EINVAL;
1114 	}
1115 
1116 	mn = dma_pool_zalloc(ha->s_dma_pool, GFP_KERNEL, &mn_dma);
1117 	if (!mn) {
1118 		ql_log(ql_log_warn, vha, 0x703c,
1119 		    "DMA alloc failed for fw buffer.\n");
1120 		return -ENOMEM;
1121 	}
1122 
1123 	mn->entry_type = ACCESS_CHIP_IOCB_TYPE;
1124 	mn->entry_count = 1;
1125 	ql84_mgmt = (void *)bsg_request + sizeof(struct fc_bsg_request);
1126 	switch (ql84_mgmt->mgmt.cmd) {
1127 	case QLA84_MGMT_READ_MEM:
1128 	case QLA84_MGMT_GET_INFO:
1129 		sg_cnt = dma_map_sg(&ha->pdev->dev,
1130 			bsg_job->reply_payload.sg_list,
1131 			bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1132 		if (!sg_cnt) {
1133 			ql_log(ql_log_warn, vha, 0x703d,
1134 			    "dma_map_sg returned %d for reply.\n", sg_cnt);
1135 			rval = -ENOMEM;
1136 			goto exit_mgmt;
1137 		}
1138 
1139 		dma_direction = DMA_FROM_DEVICE;
1140 
1141 		if (sg_cnt != bsg_job->reply_payload.sg_cnt) {
1142 			ql_log(ql_log_warn, vha, 0x703e,
1143 			    "DMA mapping resulted in different sg counts, "
1144 			    "reply_sg_cnt: %x dma_reply_sg_cnt: %x.\n",
1145 			    bsg_job->reply_payload.sg_cnt, sg_cnt);
1146 			rval = -EAGAIN;
1147 			goto done_unmap_sg;
1148 		}
1149 
1150 		data_len = bsg_job->reply_payload.payload_len;
1151 
1152 		mgmt_b = dma_alloc_coherent(&ha->pdev->dev, data_len,
1153 		    &mgmt_dma, GFP_KERNEL);
1154 		if (!mgmt_b) {
1155 			ql_log(ql_log_warn, vha, 0x703f,
1156 			    "DMA alloc failed for mgmt_b.\n");
1157 			rval = -ENOMEM;
1158 			goto done_unmap_sg;
1159 		}
1160 
1161 		if (ql84_mgmt->mgmt.cmd == QLA84_MGMT_READ_MEM) {
1162 			mn->options = cpu_to_le16(ACO_DUMP_MEMORY);
1163 			mn->parameter1 =
1164 				cpu_to_le32(
1165 				ql84_mgmt->mgmt.mgmtp.u.mem.start_addr);
1166 
1167 		} else if (ql84_mgmt->mgmt.cmd == QLA84_MGMT_GET_INFO) {
1168 			mn->options = cpu_to_le16(ACO_REQUEST_INFO);
1169 			mn->parameter1 =
1170 				cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.info.type);
1171 
1172 			mn->parameter2 =
1173 				cpu_to_le32(
1174 				ql84_mgmt->mgmt.mgmtp.u.info.context);
1175 		}
1176 		break;
1177 
1178 	case QLA84_MGMT_WRITE_MEM:
1179 		sg_cnt = dma_map_sg(&ha->pdev->dev,
1180 			bsg_job->request_payload.sg_list,
1181 			bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1182 
1183 		if (!sg_cnt) {
1184 			ql_log(ql_log_warn, vha, 0x7040,
1185 			    "dma_map_sg returned %d.\n", sg_cnt);
1186 			rval = -ENOMEM;
1187 			goto exit_mgmt;
1188 		}
1189 
1190 		dma_direction = DMA_TO_DEVICE;
1191 
1192 		if (sg_cnt != bsg_job->request_payload.sg_cnt) {
1193 			ql_log(ql_log_warn, vha, 0x7041,
1194 			    "DMA mapping resulted in different sg counts, "
1195 			    "request_sg_cnt: %x dma_request_sg_cnt: %x.\n",
1196 			    bsg_job->request_payload.sg_cnt, sg_cnt);
1197 			rval = -EAGAIN;
1198 			goto done_unmap_sg;
1199 		}
1200 
1201 		data_len = bsg_job->request_payload.payload_len;
1202 		mgmt_b = dma_alloc_coherent(&ha->pdev->dev, data_len,
1203 			&mgmt_dma, GFP_KERNEL);
1204 		if (!mgmt_b) {
1205 			ql_log(ql_log_warn, vha, 0x7042,
1206 			    "DMA alloc failed for mgmt_b.\n");
1207 			rval = -ENOMEM;
1208 			goto done_unmap_sg;
1209 		}
1210 
1211 		sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1212 			bsg_job->request_payload.sg_cnt, mgmt_b, data_len);
1213 
1214 		mn->options = cpu_to_le16(ACO_LOAD_MEMORY);
1215 		mn->parameter1 =
1216 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.mem.start_addr);
1217 		break;
1218 
1219 	case QLA84_MGMT_CHNG_CONFIG:
1220 		mn->options = cpu_to_le16(ACO_CHANGE_CONFIG_PARAM);
1221 		mn->parameter1 =
1222 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.config.id);
1223 
1224 		mn->parameter2 =
1225 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.config.param0);
1226 
1227 		mn->parameter3 =
1228 			cpu_to_le32(ql84_mgmt->mgmt.mgmtp.u.config.param1);
1229 		break;
1230 
1231 	default:
1232 		rval = -EIO;
1233 		goto exit_mgmt;
1234 	}
1235 
1236 	if (ql84_mgmt->mgmt.cmd != QLA84_MGMT_CHNG_CONFIG) {
1237 		mn->total_byte_cnt = cpu_to_le32(ql84_mgmt->mgmt.len);
1238 		mn->dseg_count = cpu_to_le16(1);
1239 		put_unaligned_le64(mgmt_dma, &mn->dsd.address);
1240 		mn->dsd.length = cpu_to_le32(ql84_mgmt->mgmt.len);
1241 	}
1242 
1243 	rval = qla2x00_issue_iocb(vha, mn, mn_dma, 0);
1244 
1245 	if (rval) {
1246 		ql_log(ql_log_warn, vha, 0x7043,
1247 		    "Vendor request 84xx mgmt failed.\n");
1248 
1249 		rval = (DID_ERROR << 16);
1250 
1251 	} else {
1252 		ql_dbg(ql_dbg_user, vha, 0x7044,
1253 		    "Vendor request 84xx mgmt completed.\n");
1254 
1255 		bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1256 		bsg_reply->result = DID_OK;
1257 
1258 		if ((ql84_mgmt->mgmt.cmd == QLA84_MGMT_READ_MEM) ||
1259 			(ql84_mgmt->mgmt.cmd == QLA84_MGMT_GET_INFO)) {
1260 			bsg_reply->reply_payload_rcv_len =
1261 				bsg_job->reply_payload.payload_len;
1262 
1263 			sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1264 				bsg_job->reply_payload.sg_cnt, mgmt_b,
1265 				data_len);
1266 		}
1267 	}
1268 
1269 done_unmap_sg:
1270 	if (mgmt_b)
1271 		dma_free_coherent(&ha->pdev->dev, data_len, mgmt_b, mgmt_dma);
1272 
1273 	if (dma_direction == DMA_TO_DEVICE)
1274 		dma_unmap_sg(&ha->pdev->dev, bsg_job->request_payload.sg_list,
1275 			bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1276 	else if (dma_direction == DMA_FROM_DEVICE)
1277 		dma_unmap_sg(&ha->pdev->dev, bsg_job->reply_payload.sg_list,
1278 			bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1279 
1280 exit_mgmt:
1281 	dma_pool_free(ha->s_dma_pool, mn, mn_dma);
1282 
1283 	if (!rval)
1284 		bsg_job_done(bsg_job, bsg_reply->result,
1285 			       bsg_reply->reply_payload_rcv_len);
1286 	return rval;
1287 }
1288 
1289 static int
1290 qla24xx_iidma(struct bsg_job *bsg_job)
1291 {
1292 	struct fc_bsg_request *bsg_request = bsg_job->request;
1293 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1294 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1295 	scsi_qla_host_t *vha = shost_priv(host);
1296 	int rval = 0;
1297 	struct qla_port_param *port_param = NULL;
1298 	fc_port_t *fcport = NULL;
1299 	int found = 0;
1300 	uint16_t mb[MAILBOX_REGISTER_COUNT];
1301 	uint8_t *rsp_ptr = NULL;
1302 
1303 	if (!IS_IIDMA_CAPABLE(vha->hw)) {
1304 		ql_log(ql_log_info, vha, 0x7046, "iiDMA not supported.\n");
1305 		return -EINVAL;
1306 	}
1307 
1308 	port_param = (void *)bsg_request + sizeof(struct fc_bsg_request);
1309 	if (port_param->fc_scsi_addr.dest_type != EXT_DEF_TYPE_WWPN) {
1310 		ql_log(ql_log_warn, vha, 0x7048,
1311 		    "Invalid destination type.\n");
1312 		return -EINVAL;
1313 	}
1314 
1315 	list_for_each_entry(fcport, &vha->vp_fcports, list) {
1316 		if (fcport->port_type != FCT_TARGET)
1317 			continue;
1318 
1319 		if (memcmp(port_param->fc_scsi_addr.dest_addr.wwpn,
1320 			fcport->port_name, sizeof(fcport->port_name)))
1321 			continue;
1322 
1323 		found = 1;
1324 		break;
1325 	}
1326 
1327 	if (!found) {
1328 		ql_log(ql_log_warn, vha, 0x7049,
1329 		    "Failed to find port.\n");
1330 		return -EINVAL;
1331 	}
1332 
1333 	if (atomic_read(&fcport->state) != FCS_ONLINE) {
1334 		ql_log(ql_log_warn, vha, 0x704a,
1335 		    "Port is not online.\n");
1336 		return -EINVAL;
1337 	}
1338 
1339 	if (fcport->flags & FCF_LOGIN_NEEDED) {
1340 		ql_log(ql_log_warn, vha, 0x704b,
1341 		    "Remote port not logged in flags = 0x%x.\n", fcport->flags);
1342 		return -EINVAL;
1343 	}
1344 
1345 	if (port_param->mode)
1346 		rval = qla2x00_set_idma_speed(vha, fcport->loop_id,
1347 			port_param->speed, mb);
1348 	else
1349 		rval = qla2x00_get_idma_speed(vha, fcport->loop_id,
1350 			&port_param->speed, mb);
1351 
1352 	if (rval) {
1353 		ql_log(ql_log_warn, vha, 0x704c,
1354 		    "iiDMA cmd failed for %8phN -- "
1355 		    "%04x %x %04x %04x.\n", fcport->port_name,
1356 		    rval, fcport->fp_speed, mb[0], mb[1]);
1357 		rval = (DID_ERROR << 16);
1358 	} else {
1359 		if (!port_param->mode) {
1360 			bsg_job->reply_len = sizeof(struct fc_bsg_reply) +
1361 				sizeof(struct qla_port_param);
1362 
1363 			rsp_ptr = ((uint8_t *)bsg_reply) +
1364 				sizeof(struct fc_bsg_reply);
1365 
1366 			memcpy(rsp_ptr, port_param,
1367 				sizeof(struct qla_port_param));
1368 		}
1369 
1370 		bsg_reply->result = DID_OK;
1371 		bsg_job_done(bsg_job, bsg_reply->result,
1372 			       bsg_reply->reply_payload_rcv_len);
1373 	}
1374 
1375 	return rval;
1376 }
1377 
1378 static int
1379 qla2x00_optrom_setup(struct bsg_job *bsg_job, scsi_qla_host_t *vha,
1380 	uint8_t is_update)
1381 {
1382 	struct fc_bsg_request *bsg_request = bsg_job->request;
1383 	uint32_t start = 0;
1384 	int valid = 0;
1385 	struct qla_hw_data *ha = vha->hw;
1386 
1387 	if (unlikely(pci_channel_offline(ha->pdev)))
1388 		return -EINVAL;
1389 
1390 	start = bsg_request->rqst_data.h_vendor.vendor_cmd[1];
1391 	if (start > ha->optrom_size) {
1392 		ql_log(ql_log_warn, vha, 0x7055,
1393 		    "start %d > optrom_size %d.\n", start, ha->optrom_size);
1394 		return -EINVAL;
1395 	}
1396 
1397 	if (ha->optrom_state != QLA_SWAITING) {
1398 		ql_log(ql_log_info, vha, 0x7056,
1399 		    "optrom_state %d.\n", ha->optrom_state);
1400 		return -EBUSY;
1401 	}
1402 
1403 	ha->optrom_region_start = start;
1404 	ql_dbg(ql_dbg_user, vha, 0x7057, "is_update=%d.\n", is_update);
1405 	if (is_update) {
1406 		if (ha->optrom_size == OPTROM_SIZE_2300 && start == 0)
1407 			valid = 1;
1408 		else if (start == (ha->flt_region_boot * 4) ||
1409 		    start == (ha->flt_region_fw * 4))
1410 			valid = 1;
1411 		else if (IS_QLA24XX_TYPE(ha) || IS_QLA25XX(ha) ||
1412 		    IS_CNA_CAPABLE(ha) || IS_QLA2031(ha) || IS_QLA27XX(ha) ||
1413 		    IS_QLA28XX(ha))
1414 			valid = 1;
1415 		if (!valid) {
1416 			ql_log(ql_log_warn, vha, 0x7058,
1417 			    "Invalid start region 0x%x/0x%x.\n", start,
1418 			    bsg_job->request_payload.payload_len);
1419 			return -EINVAL;
1420 		}
1421 
1422 		ha->optrom_region_size = start +
1423 		    bsg_job->request_payload.payload_len > ha->optrom_size ?
1424 		    ha->optrom_size - start :
1425 		    bsg_job->request_payload.payload_len;
1426 		ha->optrom_state = QLA_SWRITING;
1427 	} else {
1428 		ha->optrom_region_size = start +
1429 		    bsg_job->reply_payload.payload_len > ha->optrom_size ?
1430 		    ha->optrom_size - start :
1431 		    bsg_job->reply_payload.payload_len;
1432 		ha->optrom_state = QLA_SREADING;
1433 	}
1434 
1435 	ha->optrom_buffer = vzalloc(ha->optrom_region_size);
1436 	if (!ha->optrom_buffer) {
1437 		ql_log(ql_log_warn, vha, 0x7059,
1438 		    "Read: Unable to allocate memory for optrom retrieval "
1439 		    "(%x)\n", ha->optrom_region_size);
1440 
1441 		ha->optrom_state = QLA_SWAITING;
1442 		return -ENOMEM;
1443 	}
1444 
1445 	return 0;
1446 }
1447 
1448 static int
1449 qla2x00_read_optrom(struct bsg_job *bsg_job)
1450 {
1451 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1452 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1453 	scsi_qla_host_t *vha = shost_priv(host);
1454 	struct qla_hw_data *ha = vha->hw;
1455 	int rval = 0;
1456 
1457 	if (ha->flags.nic_core_reset_hdlr_active)
1458 		return -EBUSY;
1459 
1460 	mutex_lock(&ha->optrom_mutex);
1461 	rval = qla2x00_optrom_setup(bsg_job, vha, 0);
1462 	if (rval) {
1463 		mutex_unlock(&ha->optrom_mutex);
1464 		return rval;
1465 	}
1466 
1467 	ha->isp_ops->read_optrom(vha, ha->optrom_buffer,
1468 	    ha->optrom_region_start, ha->optrom_region_size);
1469 
1470 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1471 	    bsg_job->reply_payload.sg_cnt, ha->optrom_buffer,
1472 	    ha->optrom_region_size);
1473 
1474 	bsg_reply->reply_payload_rcv_len = ha->optrom_region_size;
1475 	bsg_reply->result = DID_OK;
1476 	vfree(ha->optrom_buffer);
1477 	ha->optrom_buffer = NULL;
1478 	ha->optrom_state = QLA_SWAITING;
1479 	mutex_unlock(&ha->optrom_mutex);
1480 	bsg_job_done(bsg_job, bsg_reply->result,
1481 		       bsg_reply->reply_payload_rcv_len);
1482 	return rval;
1483 }
1484 
1485 static int
1486 qla2x00_update_optrom(struct bsg_job *bsg_job)
1487 {
1488 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1489 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1490 	scsi_qla_host_t *vha = shost_priv(host);
1491 	struct qla_hw_data *ha = vha->hw;
1492 	int rval = 0;
1493 
1494 	mutex_lock(&ha->optrom_mutex);
1495 	rval = qla2x00_optrom_setup(bsg_job, vha, 1);
1496 	if (rval) {
1497 		mutex_unlock(&ha->optrom_mutex);
1498 		return rval;
1499 	}
1500 
1501 	/* Set the isp82xx_no_md_cap not to capture minidump */
1502 	ha->flags.isp82xx_no_md_cap = 1;
1503 
1504 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1505 	    bsg_job->request_payload.sg_cnt, ha->optrom_buffer,
1506 	    ha->optrom_region_size);
1507 
1508 	ha->isp_ops->write_optrom(vha, ha->optrom_buffer,
1509 	    ha->optrom_region_start, ha->optrom_region_size);
1510 
1511 	bsg_reply->result = DID_OK;
1512 	vfree(ha->optrom_buffer);
1513 	ha->optrom_buffer = NULL;
1514 	ha->optrom_state = QLA_SWAITING;
1515 	mutex_unlock(&ha->optrom_mutex);
1516 	bsg_job_done(bsg_job, bsg_reply->result,
1517 		       bsg_reply->reply_payload_rcv_len);
1518 	return rval;
1519 }
1520 
1521 static int
1522 qla2x00_update_fru_versions(struct bsg_job *bsg_job)
1523 {
1524 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1525 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1526 	scsi_qla_host_t *vha = shost_priv(host);
1527 	struct qla_hw_data *ha = vha->hw;
1528 	int rval = 0;
1529 	uint8_t bsg[DMA_POOL_SIZE];
1530 	struct qla_image_version_list *list = (void *)bsg;
1531 	struct qla_image_version *image;
1532 	uint32_t count;
1533 	dma_addr_t sfp_dma;
1534 	void *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1535 
1536 	if (!sfp) {
1537 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1538 		    EXT_STATUS_NO_MEMORY;
1539 		goto done;
1540 	}
1541 
1542 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1543 	    bsg_job->request_payload.sg_cnt, list, sizeof(bsg));
1544 
1545 	image = list->version;
1546 	count = list->count;
1547 	while (count--) {
1548 		memcpy(sfp, &image->field_info, sizeof(image->field_info));
1549 		rval = qla2x00_write_sfp(vha, sfp_dma, sfp,
1550 		    image->field_address.device, image->field_address.offset,
1551 		    sizeof(image->field_info), image->field_address.option);
1552 		if (rval) {
1553 			bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1554 			    EXT_STATUS_MAILBOX;
1555 			goto dealloc;
1556 		}
1557 		image++;
1558 	}
1559 
1560 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1561 
1562 dealloc:
1563 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1564 
1565 done:
1566 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1567 	bsg_reply->result = DID_OK << 16;
1568 	bsg_job_done(bsg_job, bsg_reply->result,
1569 		       bsg_reply->reply_payload_rcv_len);
1570 
1571 	return 0;
1572 }
1573 
1574 static int
1575 qla2x00_read_fru_status(struct bsg_job *bsg_job)
1576 {
1577 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1578 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1579 	scsi_qla_host_t *vha = shost_priv(host);
1580 	struct qla_hw_data *ha = vha->hw;
1581 	int rval = 0;
1582 	uint8_t bsg[DMA_POOL_SIZE];
1583 	struct qla_status_reg *sr = (void *)bsg;
1584 	dma_addr_t sfp_dma;
1585 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1586 
1587 	if (!sfp) {
1588 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1589 		    EXT_STATUS_NO_MEMORY;
1590 		goto done;
1591 	}
1592 
1593 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1594 	    bsg_job->request_payload.sg_cnt, sr, sizeof(*sr));
1595 
1596 	rval = qla2x00_read_sfp(vha, sfp_dma, sfp,
1597 	    sr->field_address.device, sr->field_address.offset,
1598 	    sizeof(sr->status_reg), sr->field_address.option);
1599 	sr->status_reg = *sfp;
1600 
1601 	if (rval) {
1602 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1603 		    EXT_STATUS_MAILBOX;
1604 		goto dealloc;
1605 	}
1606 
1607 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1608 	    bsg_job->reply_payload.sg_cnt, sr, sizeof(*sr));
1609 
1610 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1611 
1612 dealloc:
1613 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1614 
1615 done:
1616 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1617 	bsg_reply->reply_payload_rcv_len = sizeof(*sr);
1618 	bsg_reply->result = DID_OK << 16;
1619 	bsg_job_done(bsg_job, bsg_reply->result,
1620 		       bsg_reply->reply_payload_rcv_len);
1621 
1622 	return 0;
1623 }
1624 
1625 static int
1626 qla2x00_write_fru_status(struct bsg_job *bsg_job)
1627 {
1628 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1629 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1630 	scsi_qla_host_t *vha = shost_priv(host);
1631 	struct qla_hw_data *ha = vha->hw;
1632 	int rval = 0;
1633 	uint8_t bsg[DMA_POOL_SIZE];
1634 	struct qla_status_reg *sr = (void *)bsg;
1635 	dma_addr_t sfp_dma;
1636 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1637 
1638 	if (!sfp) {
1639 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1640 		    EXT_STATUS_NO_MEMORY;
1641 		goto done;
1642 	}
1643 
1644 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1645 	    bsg_job->request_payload.sg_cnt, sr, sizeof(*sr));
1646 
1647 	*sfp = sr->status_reg;
1648 	rval = qla2x00_write_sfp(vha, sfp_dma, sfp,
1649 	    sr->field_address.device, sr->field_address.offset,
1650 	    sizeof(sr->status_reg), sr->field_address.option);
1651 
1652 	if (rval) {
1653 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1654 		    EXT_STATUS_MAILBOX;
1655 		goto dealloc;
1656 	}
1657 
1658 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1659 
1660 dealloc:
1661 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1662 
1663 done:
1664 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1665 	bsg_reply->result = DID_OK << 16;
1666 	bsg_job_done(bsg_job, bsg_reply->result,
1667 		       bsg_reply->reply_payload_rcv_len);
1668 
1669 	return 0;
1670 }
1671 
1672 static int
1673 qla2x00_write_i2c(struct bsg_job *bsg_job)
1674 {
1675 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1676 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1677 	scsi_qla_host_t *vha = shost_priv(host);
1678 	struct qla_hw_data *ha = vha->hw;
1679 	int rval = 0;
1680 	uint8_t bsg[DMA_POOL_SIZE];
1681 	struct qla_i2c_access *i2c = (void *)bsg;
1682 	dma_addr_t sfp_dma;
1683 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1684 
1685 	if (!sfp) {
1686 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1687 		    EXT_STATUS_NO_MEMORY;
1688 		goto done;
1689 	}
1690 
1691 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1692 	    bsg_job->request_payload.sg_cnt, i2c, sizeof(*i2c));
1693 
1694 	memcpy(sfp, i2c->buffer, i2c->length);
1695 	rval = qla2x00_write_sfp(vha, sfp_dma, sfp,
1696 	    i2c->device, i2c->offset, i2c->length, i2c->option);
1697 
1698 	if (rval) {
1699 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1700 		    EXT_STATUS_MAILBOX;
1701 		goto dealloc;
1702 	}
1703 
1704 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1705 
1706 dealloc:
1707 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1708 
1709 done:
1710 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1711 	bsg_reply->result = DID_OK << 16;
1712 	bsg_job_done(bsg_job, bsg_reply->result,
1713 		       bsg_reply->reply_payload_rcv_len);
1714 
1715 	return 0;
1716 }
1717 
1718 static int
1719 qla2x00_read_i2c(struct bsg_job *bsg_job)
1720 {
1721 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1722 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1723 	scsi_qla_host_t *vha = shost_priv(host);
1724 	struct qla_hw_data *ha = vha->hw;
1725 	int rval = 0;
1726 	uint8_t bsg[DMA_POOL_SIZE];
1727 	struct qla_i2c_access *i2c = (void *)bsg;
1728 	dma_addr_t sfp_dma;
1729 	uint8_t *sfp = dma_pool_alloc(ha->s_dma_pool, GFP_KERNEL, &sfp_dma);
1730 
1731 	if (!sfp) {
1732 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1733 		    EXT_STATUS_NO_MEMORY;
1734 		goto done;
1735 	}
1736 
1737 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
1738 	    bsg_job->request_payload.sg_cnt, i2c, sizeof(*i2c));
1739 
1740 	rval = qla2x00_read_sfp(vha, sfp_dma, sfp,
1741 		i2c->device, i2c->offset, i2c->length, i2c->option);
1742 
1743 	if (rval) {
1744 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
1745 		    EXT_STATUS_MAILBOX;
1746 		goto dealloc;
1747 	}
1748 
1749 	memcpy(i2c->buffer, sfp, i2c->length);
1750 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
1751 	    bsg_job->reply_payload.sg_cnt, i2c, sizeof(*i2c));
1752 
1753 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = 0;
1754 
1755 dealloc:
1756 	dma_pool_free(ha->s_dma_pool, sfp, sfp_dma);
1757 
1758 done:
1759 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1760 	bsg_reply->reply_payload_rcv_len = sizeof(*i2c);
1761 	bsg_reply->result = DID_OK << 16;
1762 	bsg_job_done(bsg_job, bsg_reply->result,
1763 		       bsg_reply->reply_payload_rcv_len);
1764 
1765 	return 0;
1766 }
1767 
1768 static int
1769 qla24xx_process_bidir_cmd(struct bsg_job *bsg_job)
1770 {
1771 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
1772 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1773 	scsi_qla_host_t *vha = shost_priv(host);
1774 	struct qla_hw_data *ha = vha->hw;
1775 	uint32_t rval = EXT_STATUS_OK;
1776 	uint16_t req_sg_cnt = 0;
1777 	uint16_t rsp_sg_cnt = 0;
1778 	uint16_t nextlid = 0;
1779 	uint32_t tot_dsds;
1780 	srb_t *sp = NULL;
1781 	uint32_t req_data_len;
1782 	uint32_t rsp_data_len;
1783 
1784 	/* Check the type of the adapter */
1785 	if (!IS_BIDI_CAPABLE(ha)) {
1786 		ql_log(ql_log_warn, vha, 0x70a0,
1787 			"This adapter is not supported\n");
1788 		rval = EXT_STATUS_NOT_SUPPORTED;
1789 		goto done;
1790 	}
1791 
1792 	if (test_bit(ISP_ABORT_NEEDED, &vha->dpc_flags) ||
1793 		test_bit(ABORT_ISP_ACTIVE, &vha->dpc_flags) ||
1794 		test_bit(ISP_ABORT_RETRY, &vha->dpc_flags)) {
1795 		rval =  EXT_STATUS_BUSY;
1796 		goto done;
1797 	}
1798 
1799 	/* Check if host is online */
1800 	if (!vha->flags.online) {
1801 		ql_log(ql_log_warn, vha, 0x70a1,
1802 			"Host is not online\n");
1803 		rval = EXT_STATUS_DEVICE_OFFLINE;
1804 		goto done;
1805 	}
1806 
1807 	/* Check if cable is plugged in or not */
1808 	if (vha->device_flags & DFLG_NO_CABLE) {
1809 		ql_log(ql_log_warn, vha, 0x70a2,
1810 			"Cable is unplugged...\n");
1811 		rval = EXT_STATUS_INVALID_CFG;
1812 		goto done;
1813 	}
1814 
1815 	/* Check if the switch is connected or not */
1816 	if (ha->current_topology != ISP_CFG_F) {
1817 		ql_log(ql_log_warn, vha, 0x70a3,
1818 			"Host is not connected to the switch\n");
1819 		rval = EXT_STATUS_INVALID_CFG;
1820 		goto done;
1821 	}
1822 
1823 	/* Check if operating mode is P2P */
1824 	if (ha->operating_mode != P2P) {
1825 		ql_log(ql_log_warn, vha, 0x70a4,
1826 		    "Host operating mode is not P2p\n");
1827 		rval = EXT_STATUS_INVALID_CFG;
1828 		goto done;
1829 	}
1830 
1831 	mutex_lock(&ha->selflogin_lock);
1832 	if (vha->self_login_loop_id == 0) {
1833 		/* Initialize all required  fields of fcport */
1834 		vha->bidir_fcport.vha = vha;
1835 		vha->bidir_fcport.d_id.b.al_pa = vha->d_id.b.al_pa;
1836 		vha->bidir_fcport.d_id.b.area = vha->d_id.b.area;
1837 		vha->bidir_fcport.d_id.b.domain = vha->d_id.b.domain;
1838 		vha->bidir_fcport.loop_id = vha->loop_id;
1839 
1840 		if (qla2x00_fabric_login(vha, &(vha->bidir_fcport), &nextlid)) {
1841 			ql_log(ql_log_warn, vha, 0x70a7,
1842 			    "Failed to login port %06X for bidirectional IOCB\n",
1843 			    vha->bidir_fcport.d_id.b24);
1844 			mutex_unlock(&ha->selflogin_lock);
1845 			rval = EXT_STATUS_MAILBOX;
1846 			goto done;
1847 		}
1848 		vha->self_login_loop_id = nextlid - 1;
1849 
1850 	}
1851 	/* Assign the self login loop id to fcport */
1852 	mutex_unlock(&ha->selflogin_lock);
1853 
1854 	vha->bidir_fcport.loop_id = vha->self_login_loop_id;
1855 
1856 	req_sg_cnt = dma_map_sg(&ha->pdev->dev,
1857 		bsg_job->request_payload.sg_list,
1858 		bsg_job->request_payload.sg_cnt,
1859 		DMA_TO_DEVICE);
1860 
1861 	if (!req_sg_cnt) {
1862 		rval = EXT_STATUS_NO_MEMORY;
1863 		goto done;
1864 	}
1865 
1866 	rsp_sg_cnt = dma_map_sg(&ha->pdev->dev,
1867 		bsg_job->reply_payload.sg_list, bsg_job->reply_payload.sg_cnt,
1868 		DMA_FROM_DEVICE);
1869 
1870 	if (!rsp_sg_cnt) {
1871 		rval = EXT_STATUS_NO_MEMORY;
1872 		goto done_unmap_req_sg;
1873 	}
1874 
1875 	if ((req_sg_cnt !=  bsg_job->request_payload.sg_cnt) ||
1876 		(rsp_sg_cnt != bsg_job->reply_payload.sg_cnt)) {
1877 		ql_dbg(ql_dbg_user, vha, 0x70a9,
1878 		    "Dma mapping resulted in different sg counts "
1879 		    "[request_sg_cnt: %x dma_request_sg_cnt: %x reply_sg_cnt: "
1880 		    "%x dma_reply_sg_cnt: %x]\n",
1881 		    bsg_job->request_payload.sg_cnt, req_sg_cnt,
1882 		    bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
1883 		rval = EXT_STATUS_NO_MEMORY;
1884 		goto done_unmap_sg;
1885 	}
1886 
1887 	req_data_len = bsg_job->request_payload.payload_len;
1888 	rsp_data_len = bsg_job->reply_payload.payload_len;
1889 
1890 	if (req_data_len != rsp_data_len) {
1891 		rval = EXT_STATUS_BUSY;
1892 		ql_log(ql_log_warn, vha, 0x70aa,
1893 		    "req_data_len != rsp_data_len\n");
1894 		goto done_unmap_sg;
1895 	}
1896 
1897 	/* Alloc SRB structure */
1898 	sp = qla2x00_get_sp(vha, &(vha->bidir_fcport), GFP_KERNEL);
1899 	if (!sp) {
1900 		ql_dbg(ql_dbg_user, vha, 0x70ac,
1901 		    "Alloc SRB structure failed\n");
1902 		rval = EXT_STATUS_NO_MEMORY;
1903 		goto done_unmap_sg;
1904 	}
1905 
1906 	/*Populate srb->ctx with bidir ctx*/
1907 	sp->u.bsg_job = bsg_job;
1908 	sp->free = qla2x00_bsg_sp_free;
1909 	sp->type = SRB_BIDI_CMD;
1910 	sp->done = qla2x00_bsg_job_done;
1911 
1912 	/* Add the read and write sg count */
1913 	tot_dsds = rsp_sg_cnt + req_sg_cnt;
1914 
1915 	rval = qla2x00_start_bidir(sp, vha, tot_dsds);
1916 	if (rval != EXT_STATUS_OK)
1917 		goto done_free_srb;
1918 	/* the bsg request  will be completed in the interrupt handler */
1919 	return rval;
1920 
1921 done_free_srb:
1922 	mempool_free(sp, ha->srb_mempool);
1923 done_unmap_sg:
1924 	dma_unmap_sg(&ha->pdev->dev,
1925 	    bsg_job->reply_payload.sg_list,
1926 	    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1927 done_unmap_req_sg:
1928 	dma_unmap_sg(&ha->pdev->dev,
1929 	    bsg_job->request_payload.sg_list,
1930 	    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1931 done:
1932 
1933 	/* Return an error vendor specific response
1934 	 * and complete the bsg request
1935 	 */
1936 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = rval;
1937 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
1938 	bsg_reply->reply_payload_rcv_len = 0;
1939 	bsg_reply->result = (DID_OK) << 16;
1940 	bsg_job_done(bsg_job, bsg_reply->result,
1941 		       bsg_reply->reply_payload_rcv_len);
1942 	/* Always return success, vendor rsp carries correct status */
1943 	return 0;
1944 }
1945 
1946 static int
1947 qlafx00_mgmt_cmd(struct bsg_job *bsg_job)
1948 {
1949 	struct fc_bsg_request *bsg_request = bsg_job->request;
1950 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
1951 	scsi_qla_host_t *vha = shost_priv(host);
1952 	struct qla_hw_data *ha = vha->hw;
1953 	int rval = (DRIVER_ERROR << 16);
1954 	struct qla_mt_iocb_rqst_fx00 *piocb_rqst;
1955 	srb_t *sp;
1956 	int req_sg_cnt = 0, rsp_sg_cnt = 0;
1957 	struct fc_port *fcport;
1958 	char  *type = "FC_BSG_HST_FX_MGMT";
1959 
1960 	/* Copy the IOCB specific information */
1961 	piocb_rqst = (struct qla_mt_iocb_rqst_fx00 *)
1962 	    &bsg_request->rqst_data.h_vendor.vendor_cmd[1];
1963 
1964 	/* Dump the vendor information */
1965 	ql_dump_buffer(ql_dbg_user + ql_dbg_verbose , vha, 0x70cf,
1966 	    piocb_rqst, sizeof(*piocb_rqst));
1967 
1968 	if (!vha->flags.online) {
1969 		ql_log(ql_log_warn, vha, 0x70d0,
1970 		    "Host is not online.\n");
1971 		rval = -EIO;
1972 		goto done;
1973 	}
1974 
1975 	if (piocb_rqst->flags & SRB_FXDISC_REQ_DMA_VALID) {
1976 		req_sg_cnt = dma_map_sg(&ha->pdev->dev,
1977 		    bsg_job->request_payload.sg_list,
1978 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
1979 		if (!req_sg_cnt) {
1980 			ql_log(ql_log_warn, vha, 0x70c7,
1981 			    "dma_map_sg return %d for request\n", req_sg_cnt);
1982 			rval = -ENOMEM;
1983 			goto done;
1984 		}
1985 	}
1986 
1987 	if (piocb_rqst->flags & SRB_FXDISC_RESP_DMA_VALID) {
1988 		rsp_sg_cnt = dma_map_sg(&ha->pdev->dev,
1989 		    bsg_job->reply_payload.sg_list,
1990 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
1991 		if (!rsp_sg_cnt) {
1992 			ql_log(ql_log_warn, vha, 0x70c8,
1993 			    "dma_map_sg return %d for reply\n", rsp_sg_cnt);
1994 			rval = -ENOMEM;
1995 			goto done_unmap_req_sg;
1996 		}
1997 	}
1998 
1999 	ql_dbg(ql_dbg_user, vha, 0x70c9,
2000 	    "request_sg_cnt: %x dma_request_sg_cnt: %x reply_sg_cnt:%x "
2001 	    "dma_reply_sg_cnt: %x\n", bsg_job->request_payload.sg_cnt,
2002 	    req_sg_cnt, bsg_job->reply_payload.sg_cnt, rsp_sg_cnt);
2003 
2004 	/* Allocate a dummy fcport structure, since functions preparing the
2005 	 * IOCB and mailbox command retrieves port specific information
2006 	 * from fcport structure. For Host based ELS commands there will be
2007 	 * no fcport structure allocated
2008 	 */
2009 	fcport = qla2x00_alloc_fcport(vha, GFP_KERNEL);
2010 	if (!fcport) {
2011 		ql_log(ql_log_warn, vha, 0x70ca,
2012 		    "Failed to allocate fcport.\n");
2013 		rval = -ENOMEM;
2014 		goto done_unmap_rsp_sg;
2015 	}
2016 
2017 	/* Alloc SRB structure */
2018 	sp = qla2x00_get_sp(vha, fcport, GFP_KERNEL);
2019 	if (!sp) {
2020 		ql_log(ql_log_warn, vha, 0x70cb,
2021 		    "qla2x00_get_sp failed.\n");
2022 		rval = -ENOMEM;
2023 		goto done_free_fcport;
2024 	}
2025 
2026 	/* Initialize all required  fields of fcport */
2027 	fcport->vha = vha;
2028 	fcport->loop_id = piocb_rqst->dataword;
2029 
2030 	sp->type = SRB_FXIOCB_BCMD;
2031 	sp->name = "bsg_fx_mgmt";
2032 	sp->iocbs = qla24xx_calc_ct_iocbs(req_sg_cnt + rsp_sg_cnt);
2033 	sp->u.bsg_job = bsg_job;
2034 	sp->free = qla2x00_bsg_sp_free;
2035 	sp->done = qla2x00_bsg_job_done;
2036 
2037 	ql_dbg(ql_dbg_user, vha, 0x70cc,
2038 	    "bsg rqst type: %s fx_mgmt_type: %x id=%x\n",
2039 	    type, piocb_rqst->func_type, fcport->loop_id);
2040 
2041 	rval = qla2x00_start_sp(sp);
2042 	if (rval != QLA_SUCCESS) {
2043 		ql_log(ql_log_warn, vha, 0x70cd,
2044 		    "qla2x00_start_sp failed=%d.\n", rval);
2045 		mempool_free(sp, ha->srb_mempool);
2046 		rval = -EIO;
2047 		goto done_free_fcport;
2048 	}
2049 	return rval;
2050 
2051 done_free_fcport:
2052 	kfree(fcport);
2053 
2054 done_unmap_rsp_sg:
2055 	if (piocb_rqst->flags & SRB_FXDISC_RESP_DMA_VALID)
2056 		dma_unmap_sg(&ha->pdev->dev,
2057 		    bsg_job->reply_payload.sg_list,
2058 		    bsg_job->reply_payload.sg_cnt, DMA_FROM_DEVICE);
2059 done_unmap_req_sg:
2060 	if (piocb_rqst->flags & SRB_FXDISC_REQ_DMA_VALID)
2061 		dma_unmap_sg(&ha->pdev->dev,
2062 		    bsg_job->request_payload.sg_list,
2063 		    bsg_job->request_payload.sg_cnt, DMA_TO_DEVICE);
2064 
2065 done:
2066 	return rval;
2067 }
2068 
2069 static int
2070 qla26xx_serdes_op(struct bsg_job *bsg_job)
2071 {
2072 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2073 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2074 	scsi_qla_host_t *vha = shost_priv(host);
2075 	int rval = 0;
2076 	struct qla_serdes_reg sr;
2077 
2078 	memset(&sr, 0, sizeof(sr));
2079 
2080 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2081 	    bsg_job->request_payload.sg_cnt, &sr, sizeof(sr));
2082 
2083 	switch (sr.cmd) {
2084 	case INT_SC_SERDES_WRITE_REG:
2085 		rval = qla2x00_write_serdes_word(vha, sr.addr, sr.val);
2086 		bsg_reply->reply_payload_rcv_len = 0;
2087 		break;
2088 	case INT_SC_SERDES_READ_REG:
2089 		rval = qla2x00_read_serdes_word(vha, sr.addr, &sr.val);
2090 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2091 		    bsg_job->reply_payload.sg_cnt, &sr, sizeof(sr));
2092 		bsg_reply->reply_payload_rcv_len = sizeof(sr);
2093 		break;
2094 	default:
2095 		ql_dbg(ql_dbg_user, vha, 0x708c,
2096 		    "Unknown serdes cmd %x.\n", sr.cmd);
2097 		rval = -EINVAL;
2098 		break;
2099 	}
2100 
2101 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2102 	    rval ? EXT_STATUS_MAILBOX : 0;
2103 
2104 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2105 	bsg_reply->result = DID_OK << 16;
2106 	bsg_job_done(bsg_job, bsg_reply->result,
2107 		       bsg_reply->reply_payload_rcv_len);
2108 	return 0;
2109 }
2110 
2111 static int
2112 qla8044_serdes_op(struct bsg_job *bsg_job)
2113 {
2114 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2115 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2116 	scsi_qla_host_t *vha = shost_priv(host);
2117 	int rval = 0;
2118 	struct qla_serdes_reg_ex sr;
2119 
2120 	memset(&sr, 0, sizeof(sr));
2121 
2122 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2123 	    bsg_job->request_payload.sg_cnt, &sr, sizeof(sr));
2124 
2125 	switch (sr.cmd) {
2126 	case INT_SC_SERDES_WRITE_REG:
2127 		rval = qla8044_write_serdes_word(vha, sr.addr, sr.val);
2128 		bsg_reply->reply_payload_rcv_len = 0;
2129 		break;
2130 	case INT_SC_SERDES_READ_REG:
2131 		rval = qla8044_read_serdes_word(vha, sr.addr, &sr.val);
2132 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2133 		    bsg_job->reply_payload.sg_cnt, &sr, sizeof(sr));
2134 		bsg_reply->reply_payload_rcv_len = sizeof(sr);
2135 		break;
2136 	default:
2137 		ql_dbg(ql_dbg_user, vha, 0x7020,
2138 		    "Unknown serdes cmd %x.\n", sr.cmd);
2139 		rval = -EINVAL;
2140 		break;
2141 	}
2142 
2143 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2144 	    rval ? EXT_STATUS_MAILBOX : 0;
2145 
2146 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2147 	bsg_reply->result = DID_OK << 16;
2148 	bsg_job_done(bsg_job, bsg_reply->result,
2149 		       bsg_reply->reply_payload_rcv_len);
2150 	return 0;
2151 }
2152 
2153 static int
2154 qla27xx_get_flash_upd_cap(struct bsg_job *bsg_job)
2155 {
2156 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2157 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2158 	scsi_qla_host_t *vha = shost_priv(host);
2159 	struct qla_hw_data *ha = vha->hw;
2160 	struct qla_flash_update_caps cap;
2161 
2162 	if (!(IS_QLA27XX(ha)) && !IS_QLA28XX(ha))
2163 		return -EPERM;
2164 
2165 	memset(&cap, 0, sizeof(cap));
2166 	cap.capabilities = (uint64_t)ha->fw_attributes_ext[1] << 48 |
2167 			   (uint64_t)ha->fw_attributes_ext[0] << 32 |
2168 			   (uint64_t)ha->fw_attributes_h << 16 |
2169 			   (uint64_t)ha->fw_attributes;
2170 
2171 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2172 	    bsg_job->reply_payload.sg_cnt, &cap, sizeof(cap));
2173 	bsg_reply->reply_payload_rcv_len = sizeof(cap);
2174 
2175 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2176 	    EXT_STATUS_OK;
2177 
2178 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2179 	bsg_reply->result = DID_OK << 16;
2180 	bsg_job_done(bsg_job, bsg_reply->result,
2181 		       bsg_reply->reply_payload_rcv_len);
2182 	return 0;
2183 }
2184 
2185 static int
2186 qla27xx_set_flash_upd_cap(struct bsg_job *bsg_job)
2187 {
2188 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2189 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2190 	scsi_qla_host_t *vha = shost_priv(host);
2191 	struct qla_hw_data *ha = vha->hw;
2192 	uint64_t online_fw_attr = 0;
2193 	struct qla_flash_update_caps cap;
2194 
2195 	if (!IS_QLA27XX(ha) && !IS_QLA28XX(ha))
2196 		return -EPERM;
2197 
2198 	memset(&cap, 0, sizeof(cap));
2199 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2200 	    bsg_job->request_payload.sg_cnt, &cap, sizeof(cap));
2201 
2202 	online_fw_attr = (uint64_t)ha->fw_attributes_ext[1] << 48 |
2203 			 (uint64_t)ha->fw_attributes_ext[0] << 32 |
2204 			 (uint64_t)ha->fw_attributes_h << 16 |
2205 			 (uint64_t)ha->fw_attributes;
2206 
2207 	if (online_fw_attr != cap.capabilities) {
2208 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2209 		    EXT_STATUS_INVALID_PARAM;
2210 		return -EINVAL;
2211 	}
2212 
2213 	if (cap.outage_duration < MAX_LOOP_TIMEOUT)  {
2214 		bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2215 		    EXT_STATUS_INVALID_PARAM;
2216 		return -EINVAL;
2217 	}
2218 
2219 	bsg_reply->reply_payload_rcv_len = 0;
2220 
2221 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2222 	    EXT_STATUS_OK;
2223 
2224 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2225 	bsg_reply->result = DID_OK << 16;
2226 	bsg_job_done(bsg_job, bsg_reply->result,
2227 		       bsg_reply->reply_payload_rcv_len);
2228 	return 0;
2229 }
2230 
2231 static int
2232 qla27xx_get_bbcr_data(struct bsg_job *bsg_job)
2233 {
2234 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2235 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2236 	scsi_qla_host_t *vha = shost_priv(host);
2237 	struct qla_hw_data *ha = vha->hw;
2238 	struct qla_bbcr_data bbcr;
2239 	uint16_t loop_id, topo, sw_cap;
2240 	uint8_t domain, area, al_pa, state;
2241 	int rval;
2242 
2243 	if (!IS_QLA27XX(ha) && !IS_QLA28XX(ha))
2244 		return -EPERM;
2245 
2246 	memset(&bbcr, 0, sizeof(bbcr));
2247 
2248 	if (vha->flags.bbcr_enable)
2249 		bbcr.status = QLA_BBCR_STATUS_ENABLED;
2250 	else
2251 		bbcr.status = QLA_BBCR_STATUS_DISABLED;
2252 
2253 	if (bbcr.status == QLA_BBCR_STATUS_ENABLED) {
2254 		rval = qla2x00_get_adapter_id(vha, &loop_id, &al_pa,
2255 			&area, &domain, &topo, &sw_cap);
2256 		if (rval != QLA_SUCCESS) {
2257 			bbcr.status = QLA_BBCR_STATUS_UNKNOWN;
2258 			bbcr.state = QLA_BBCR_STATE_OFFLINE;
2259 			bbcr.mbx1 = loop_id;
2260 			goto done;
2261 		}
2262 
2263 		state = (vha->bbcr >> 12) & 0x1;
2264 
2265 		if (state) {
2266 			bbcr.state = QLA_BBCR_STATE_OFFLINE;
2267 			bbcr.offline_reason_code = QLA_BBCR_REASON_LOGIN_REJECT;
2268 		} else {
2269 			bbcr.state = QLA_BBCR_STATE_ONLINE;
2270 			bbcr.negotiated_bbscn = (vha->bbcr >> 8) & 0xf;
2271 		}
2272 
2273 		bbcr.configured_bbscn = vha->bbcr & 0xf;
2274 	}
2275 
2276 done:
2277 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2278 		bsg_job->reply_payload.sg_cnt, &bbcr, sizeof(bbcr));
2279 	bsg_reply->reply_payload_rcv_len = sizeof(bbcr);
2280 
2281 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2282 
2283 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2284 	bsg_reply->result = DID_OK << 16;
2285 	bsg_job_done(bsg_job, bsg_reply->result,
2286 		       bsg_reply->reply_payload_rcv_len);
2287 	return 0;
2288 }
2289 
2290 static int
2291 qla2x00_get_priv_stats(struct bsg_job *bsg_job)
2292 {
2293 	struct fc_bsg_request *bsg_request = bsg_job->request;
2294 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2295 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2296 	scsi_qla_host_t *vha = shost_priv(host);
2297 	struct qla_hw_data *ha = vha->hw;
2298 	struct scsi_qla_host *base_vha = pci_get_drvdata(ha->pdev);
2299 	struct link_statistics *stats = NULL;
2300 	dma_addr_t stats_dma;
2301 	int rval;
2302 	uint32_t *cmd = bsg_request->rqst_data.h_vendor.vendor_cmd;
2303 	uint options = cmd[0] == QL_VND_GET_PRIV_STATS_EX ? cmd[1] : 0;
2304 
2305 	if (test_bit(UNLOADING, &vha->dpc_flags))
2306 		return -ENODEV;
2307 
2308 	if (unlikely(pci_channel_offline(ha->pdev)))
2309 		return -ENODEV;
2310 
2311 	if (qla2x00_reset_active(vha))
2312 		return -EBUSY;
2313 
2314 	if (!IS_FWI2_CAPABLE(ha))
2315 		return -EPERM;
2316 
2317 	stats = dma_alloc_coherent(&ha->pdev->dev, sizeof(*stats), &stats_dma,
2318 				   GFP_KERNEL);
2319 	if (!stats) {
2320 		ql_log(ql_log_warn, vha, 0x70e2,
2321 		    "Failed to allocate memory for stats.\n");
2322 		return -ENOMEM;
2323 	}
2324 
2325 	rval = qla24xx_get_isp_stats(base_vha, stats, stats_dma, options);
2326 
2327 	if (rval == QLA_SUCCESS) {
2328 		ql_dump_buffer(ql_dbg_user + ql_dbg_verbose, vha, 0x70e5,
2329 			stats, sizeof(*stats));
2330 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2331 			bsg_job->reply_payload.sg_cnt, stats, sizeof(*stats));
2332 	}
2333 
2334 	bsg_reply->reply_payload_rcv_len = sizeof(*stats);
2335 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2336 	    rval ? EXT_STATUS_MAILBOX : EXT_STATUS_OK;
2337 
2338 	bsg_job->reply_len = sizeof(*bsg_reply);
2339 	bsg_reply->result = DID_OK << 16;
2340 	bsg_job_done(bsg_job, bsg_reply->result,
2341 		       bsg_reply->reply_payload_rcv_len);
2342 
2343 	dma_free_coherent(&ha->pdev->dev, sizeof(*stats),
2344 		stats, stats_dma);
2345 
2346 	return 0;
2347 }
2348 
2349 static int
2350 qla2x00_do_dport_diagnostics(struct bsg_job *bsg_job)
2351 {
2352 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2353 	struct Scsi_Host *host = fc_bsg_to_shost(bsg_job);
2354 	scsi_qla_host_t *vha = shost_priv(host);
2355 	int rval;
2356 	struct qla_dport_diag *dd;
2357 
2358 	if (!IS_QLA83XX(vha->hw) && !IS_QLA27XX(vha->hw) &&
2359 	    !IS_QLA28XX(vha->hw))
2360 		return -EPERM;
2361 
2362 	dd = kmalloc(sizeof(*dd), GFP_KERNEL);
2363 	if (!dd) {
2364 		ql_log(ql_log_warn, vha, 0x70db,
2365 		    "Failed to allocate memory for dport.\n");
2366 		return -ENOMEM;
2367 	}
2368 
2369 	sg_copy_to_buffer(bsg_job->request_payload.sg_list,
2370 	    bsg_job->request_payload.sg_cnt, dd, sizeof(*dd));
2371 
2372 	rval = qla26xx_dport_diagnostics(
2373 	    vha, dd->buf, sizeof(dd->buf), dd->options);
2374 	if (rval == QLA_SUCCESS) {
2375 		sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2376 		    bsg_job->reply_payload.sg_cnt, dd, sizeof(*dd));
2377 	}
2378 
2379 	bsg_reply->reply_payload_rcv_len = sizeof(*dd);
2380 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] =
2381 	    rval ? EXT_STATUS_MAILBOX : EXT_STATUS_OK;
2382 
2383 	bsg_job->reply_len = sizeof(*bsg_reply);
2384 	bsg_reply->result = DID_OK << 16;
2385 	bsg_job_done(bsg_job, bsg_reply->result,
2386 		       bsg_reply->reply_payload_rcv_len);
2387 
2388 	kfree(dd);
2389 
2390 	return 0;
2391 }
2392 
2393 static int
2394 qla2x00_get_flash_image_status(struct bsg_job *bsg_job)
2395 {
2396 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2397 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2398 	struct qla_hw_data *ha = vha->hw;
2399 	struct qla_active_regions regions = { };
2400 	struct active_regions active_regions = { };
2401 
2402 	qla28xx_get_aux_images(vha, &active_regions);
2403 	regions.global_image = active_regions.global;
2404 
2405 	if (IS_QLA28XX(ha)) {
2406 		qla27xx_get_active_image(vha, &active_regions);
2407 		regions.board_config = active_regions.aux.board_config;
2408 		regions.vpd_nvram = active_regions.aux.vpd_nvram;
2409 		regions.npiv_config_0_1 = active_regions.aux.npiv_config_0_1;
2410 		regions.npiv_config_2_3 = active_regions.aux.npiv_config_2_3;
2411 	}
2412 
2413 	ql_dbg(ql_dbg_user, vha, 0x70e1,
2414 	    "%s(%lu): FW=%u BCFG=%u VPDNVR=%u NPIV01=%u NPIV02=%u\n",
2415 	    __func__, vha->host_no, regions.global_image,
2416 	    regions.board_config, regions.vpd_nvram,
2417 	    regions.npiv_config_0_1, regions.npiv_config_2_3);
2418 
2419 	sg_copy_from_buffer(bsg_job->reply_payload.sg_list,
2420 	    bsg_job->reply_payload.sg_cnt, &regions, sizeof(regions));
2421 
2422 	bsg_reply->reply_data.vendor_reply.vendor_rsp[0] = EXT_STATUS_OK;
2423 	bsg_reply->reply_payload_rcv_len = sizeof(regions);
2424 	bsg_reply->result = DID_OK << 16;
2425 	bsg_job->reply_len = sizeof(struct fc_bsg_reply);
2426 	bsg_job_done(bsg_job, bsg_reply->result,
2427 	    bsg_reply->reply_payload_rcv_len);
2428 
2429 	return 0;
2430 }
2431 
2432 static int
2433 qla2x00_process_vendor_specific(struct bsg_job *bsg_job)
2434 {
2435 	struct fc_bsg_request *bsg_request = bsg_job->request;
2436 
2437 	switch (bsg_request->rqst_data.h_vendor.vendor_cmd[0]) {
2438 	case QL_VND_LOOPBACK:
2439 		return qla2x00_process_loopback(bsg_job);
2440 
2441 	case QL_VND_A84_RESET:
2442 		return qla84xx_reset(bsg_job);
2443 
2444 	case QL_VND_A84_UPDATE_FW:
2445 		return qla84xx_updatefw(bsg_job);
2446 
2447 	case QL_VND_A84_MGMT_CMD:
2448 		return qla84xx_mgmt_cmd(bsg_job);
2449 
2450 	case QL_VND_IIDMA:
2451 		return qla24xx_iidma(bsg_job);
2452 
2453 	case QL_VND_FCP_PRIO_CFG_CMD:
2454 		return qla24xx_proc_fcp_prio_cfg_cmd(bsg_job);
2455 
2456 	case QL_VND_READ_FLASH:
2457 		return qla2x00_read_optrom(bsg_job);
2458 
2459 	case QL_VND_UPDATE_FLASH:
2460 		return qla2x00_update_optrom(bsg_job);
2461 
2462 	case QL_VND_SET_FRU_VERSION:
2463 		return qla2x00_update_fru_versions(bsg_job);
2464 
2465 	case QL_VND_READ_FRU_STATUS:
2466 		return qla2x00_read_fru_status(bsg_job);
2467 
2468 	case QL_VND_WRITE_FRU_STATUS:
2469 		return qla2x00_write_fru_status(bsg_job);
2470 
2471 	case QL_VND_WRITE_I2C:
2472 		return qla2x00_write_i2c(bsg_job);
2473 
2474 	case QL_VND_READ_I2C:
2475 		return qla2x00_read_i2c(bsg_job);
2476 
2477 	case QL_VND_DIAG_IO_CMD:
2478 		return qla24xx_process_bidir_cmd(bsg_job);
2479 
2480 	case QL_VND_FX00_MGMT_CMD:
2481 		return qlafx00_mgmt_cmd(bsg_job);
2482 
2483 	case QL_VND_SERDES_OP:
2484 		return qla26xx_serdes_op(bsg_job);
2485 
2486 	case QL_VND_SERDES_OP_EX:
2487 		return qla8044_serdes_op(bsg_job);
2488 
2489 	case QL_VND_GET_FLASH_UPDATE_CAPS:
2490 		return qla27xx_get_flash_upd_cap(bsg_job);
2491 
2492 	case QL_VND_SET_FLASH_UPDATE_CAPS:
2493 		return qla27xx_set_flash_upd_cap(bsg_job);
2494 
2495 	case QL_VND_GET_BBCR_DATA:
2496 		return qla27xx_get_bbcr_data(bsg_job);
2497 
2498 	case QL_VND_GET_PRIV_STATS:
2499 	case QL_VND_GET_PRIV_STATS_EX:
2500 		return qla2x00_get_priv_stats(bsg_job);
2501 
2502 	case QL_VND_DPORT_DIAGNOSTICS:
2503 		return qla2x00_do_dport_diagnostics(bsg_job);
2504 
2505 	case QL_VND_SS_GET_FLASH_IMAGE_STATUS:
2506 		return qla2x00_get_flash_image_status(bsg_job);
2507 
2508 	default:
2509 		return -ENOSYS;
2510 	}
2511 }
2512 
2513 int
2514 qla24xx_bsg_request(struct bsg_job *bsg_job)
2515 {
2516 	struct fc_bsg_request *bsg_request = bsg_job->request;
2517 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2518 	int ret = -EINVAL;
2519 	struct fc_rport *rport;
2520 	struct Scsi_Host *host;
2521 	scsi_qla_host_t *vha;
2522 
2523 	/* In case no data transferred. */
2524 	bsg_reply->reply_payload_rcv_len = 0;
2525 
2526 	if (bsg_request->msgcode == FC_BSG_RPT_ELS) {
2527 		rport = fc_bsg_to_rport(bsg_job);
2528 		host = rport_to_shost(rport);
2529 		vha = shost_priv(host);
2530 	} else {
2531 		host = fc_bsg_to_shost(bsg_job);
2532 		vha = shost_priv(host);
2533 	}
2534 
2535 	if (qla2x00_chip_is_down(vha)) {
2536 		ql_dbg(ql_dbg_user, vha, 0x709f,
2537 		    "BSG: ISP abort active/needed -- cmd=%d.\n",
2538 		    bsg_request->msgcode);
2539 		return -EBUSY;
2540 	}
2541 
2542 	ql_dbg(ql_dbg_user, vha, 0x7000,
2543 	    "Entered %s msgcode=0x%x.\n", __func__, bsg_request->msgcode);
2544 
2545 	switch (bsg_request->msgcode) {
2546 	case FC_BSG_RPT_ELS:
2547 	case FC_BSG_HST_ELS_NOLOGIN:
2548 		ret = qla2x00_process_els(bsg_job);
2549 		break;
2550 	case FC_BSG_HST_CT:
2551 		ret = qla2x00_process_ct(bsg_job);
2552 		break;
2553 	case FC_BSG_HST_VENDOR:
2554 		ret = qla2x00_process_vendor_specific(bsg_job);
2555 		break;
2556 	case FC_BSG_HST_ADD_RPORT:
2557 	case FC_BSG_HST_DEL_RPORT:
2558 	case FC_BSG_RPT_CT:
2559 	default:
2560 		ql_log(ql_log_warn, vha, 0x705a, "Unsupported BSG request.\n");
2561 		break;
2562 	}
2563 	return ret;
2564 }
2565 
2566 int
2567 qla24xx_bsg_timeout(struct bsg_job *bsg_job)
2568 {
2569 	struct fc_bsg_reply *bsg_reply = bsg_job->reply;
2570 	scsi_qla_host_t *vha = shost_priv(fc_bsg_to_shost(bsg_job));
2571 	struct qla_hw_data *ha = vha->hw;
2572 	srb_t *sp;
2573 	int cnt, que;
2574 	unsigned long flags;
2575 	struct req_que *req;
2576 
2577 	/* find the bsg job from the active list of commands */
2578 	spin_lock_irqsave(&ha->hardware_lock, flags);
2579 	for (que = 0; que < ha->max_req_queues; que++) {
2580 		req = ha->req_q_map[que];
2581 		if (!req)
2582 			continue;
2583 
2584 		for (cnt = 1; cnt < req->num_outstanding_cmds; cnt++) {
2585 			sp = req->outstanding_cmds[cnt];
2586 			if (sp) {
2587 				if (((sp->type == SRB_CT_CMD) ||
2588 					(sp->type == SRB_ELS_CMD_HST) ||
2589 					(sp->type == SRB_FXIOCB_BCMD))
2590 					&& (sp->u.bsg_job == bsg_job)) {
2591 					req->outstanding_cmds[cnt] = NULL;
2592 					spin_unlock_irqrestore(&ha->hardware_lock, flags);
2593 					if (ha->isp_ops->abort_command(sp)) {
2594 						ql_log(ql_log_warn, vha, 0x7089,
2595 						    "mbx abort_command "
2596 						    "failed.\n");
2597 						bsg_reply->result = -EIO;
2598 					} else {
2599 						ql_dbg(ql_dbg_user, vha, 0x708a,
2600 						    "mbx abort_command "
2601 						    "success.\n");
2602 						bsg_reply->result = 0;
2603 					}
2604 					spin_lock_irqsave(&ha->hardware_lock, flags);
2605 					goto done;
2606 				}
2607 			}
2608 		}
2609 	}
2610 	spin_unlock_irqrestore(&ha->hardware_lock, flags);
2611 	ql_log(ql_log_info, vha, 0x708b, "SRB not found to abort.\n");
2612 	bsg_reply->result = -ENXIO;
2613 	return 0;
2614 
2615 done:
2616 	spin_unlock_irqrestore(&ha->hardware_lock, flags);
2617 	sp->free(sp);
2618 	return 0;
2619 }
2620