xref: /openbmc/linux/drivers/scsi/scsi_debug.c (revision c55d267d)
1 /*
2  * vvvvvvvvvvvvvvvvvvvvvvv Original vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
3  *  Copyright (C) 1992  Eric Youngdale
4  *  Simulate a host adapter with 2 disks attached.  Do a lot of checking
5  *  to make sure that we are not getting blocks mixed up, and PANIC if
6  *  anything out of the ordinary is seen.
7  * ^^^^^^^^^^^^^^^^^^^^^^^ Original ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
8  *
9  *  This version is more generic, simulating a variable number of disk
10  *  (or disk like devices) sharing a common amount of RAM. To be more
11  *  realistic, the simulated devices have the transport attributes of
12  *  SAS disks.
13  *
14  *
15  *  For documentation see http://sg.danny.cz/sg/sdebug26.html
16  *
17  *   D. Gilbert (dpg) work for Magneto-Optical device test [20010421]
18  *   dpg: work for devfs large number of disks [20010809]
19  *        forked for lk 2.5 series [20011216, 20020101]
20  *        use vmalloc() more inquiry+mode_sense [20020302]
21  *        add timers for delayed responses [20020721]
22  *   Patrick Mansfield <patmans@us.ibm.com> max_luns+scsi_level [20021031]
23  *   Mike Anderson <andmike@us.ibm.com> sysfs work [20021118]
24  *   dpg: change style of boot options to "scsi_debug.num_tgts=2" and
25  *        module options to "modprobe scsi_debug num_tgts=2" [20021221]
26  */
27 
28 #include <linux/module.h>
29 
30 #include <linux/kernel.h>
31 #include <linux/errno.h>
32 #include <linux/timer.h>
33 #include <linux/slab.h>
34 #include <linux/types.h>
35 #include <linux/string.h>
36 #include <linux/genhd.h>
37 #include <linux/fs.h>
38 #include <linux/init.h>
39 #include <linux/proc_fs.h>
40 #include <linux/vmalloc.h>
41 #include <linux/moduleparam.h>
42 #include <linux/scatterlist.h>
43 #include <linux/blkdev.h>
44 #include <linux/crc-t10dif.h>
45 
46 #include <net/checksum.h>
47 
48 #include <asm/unaligned.h>
49 
50 #include <scsi/scsi.h>
51 #include <scsi/scsi_cmnd.h>
52 #include <scsi/scsi_device.h>
53 #include <scsi/scsi_host.h>
54 #include <scsi/scsicam.h>
55 #include <scsi/scsi_eh.h>
56 #include <scsi/scsi_dbg.h>
57 
58 #include "sd.h"
59 #include "scsi_logging.h"
60 
61 #define SCSI_DEBUG_VERSION "1.82"
62 static const char * scsi_debug_version_date = "20100324";
63 
64 /* Additional Sense Code (ASC) */
65 #define NO_ADDITIONAL_SENSE 0x0
66 #define LOGICAL_UNIT_NOT_READY 0x4
67 #define UNRECOVERED_READ_ERR 0x11
68 #define PARAMETER_LIST_LENGTH_ERR 0x1a
69 #define INVALID_OPCODE 0x20
70 #define ADDR_OUT_OF_RANGE 0x21
71 #define INVALID_COMMAND_OPCODE 0x20
72 #define INVALID_FIELD_IN_CDB 0x24
73 #define INVALID_FIELD_IN_PARAM_LIST 0x26
74 #define POWERON_RESET 0x29
75 #define SAVING_PARAMS_UNSUP 0x39
76 #define TRANSPORT_PROBLEM 0x4b
77 #define THRESHOLD_EXCEEDED 0x5d
78 #define LOW_POWER_COND_ON 0x5e
79 
80 /* Additional Sense Code Qualifier (ASCQ) */
81 #define ACK_NAK_TO 0x3
82 
83 #define SDEBUG_TAGGED_QUEUING 0 /* 0 | MSG_SIMPLE_TAG | MSG_ORDERED_TAG */
84 
85 /* Default values for driver parameters */
86 #define DEF_NUM_HOST   1
87 #define DEF_NUM_TGTS   1
88 #define DEF_MAX_LUNS   1
89 /* With these defaults, this driver will make 1 host with 1 target
90  * (id 0) containing 1 logical unit (lun 0). That is 1 device.
91  */
92 #define DEF_ATO 1
93 #define DEF_DELAY   1
94 #define DEF_DEV_SIZE_MB   8
95 #define DEF_DIF 0
96 #define DEF_DIX 0
97 #define DEF_D_SENSE   0
98 #define DEF_EVERY_NTH   0
99 #define DEF_FAKE_RW	0
100 #define DEF_GUARD 0
101 #define DEF_LBPU 0
102 #define DEF_LBPWS 0
103 #define DEF_LBPWS10 0
104 #define DEF_LOWEST_ALIGNED 0
105 #define DEF_NO_LUN_0   0
106 #define DEF_NUM_PARTS   0
107 #define DEF_OPTS   0
108 #define DEF_OPT_BLKS 64
109 #define DEF_PHYSBLK_EXP 0
110 #define DEF_PTYPE   0
111 #define DEF_SCSI_LEVEL   5    /* INQUIRY, byte2 [5->SPC-3] */
112 #define DEF_SECTOR_SIZE 512
113 #define DEF_UNMAP_ALIGNMENT 0
114 #define DEF_UNMAP_GRANULARITY 1
115 #define DEF_UNMAP_MAX_BLOCKS 0xFFFFFFFF
116 #define DEF_UNMAP_MAX_DESC 256
117 #define DEF_VIRTUAL_GB   0
118 #define DEF_VPD_USE_HOSTNO 1
119 #define DEF_WRITESAME_LENGTH 0xFFFF
120 
121 /* bit mask values for scsi_debug_opts */
122 #define SCSI_DEBUG_OPT_NOISE   1
123 #define SCSI_DEBUG_OPT_MEDIUM_ERR   2
124 #define SCSI_DEBUG_OPT_TIMEOUT   4
125 #define SCSI_DEBUG_OPT_RECOVERED_ERR   8
126 #define SCSI_DEBUG_OPT_TRANSPORT_ERR   16
127 #define SCSI_DEBUG_OPT_DIF_ERR   32
128 #define SCSI_DEBUG_OPT_DIX_ERR   64
129 /* When "every_nth" > 0 then modulo "every_nth" commands:
130  *   - a no response is simulated if SCSI_DEBUG_OPT_TIMEOUT is set
131  *   - a RECOVERED_ERROR is simulated on successful read and write
132  *     commands if SCSI_DEBUG_OPT_RECOVERED_ERR is set.
133  *   - a TRANSPORT_ERROR is simulated on successful read and write
134  *     commands if SCSI_DEBUG_OPT_TRANSPORT_ERR is set.
135  *
136  * When "every_nth" < 0 then after "- every_nth" commands:
137  *   - a no response is simulated if SCSI_DEBUG_OPT_TIMEOUT is set
138  *   - a RECOVERED_ERROR is simulated on successful read and write
139  *     commands if SCSI_DEBUG_OPT_RECOVERED_ERR is set.
140  *   - a TRANSPORT_ERROR is simulated on successful read and write
141  *     commands if SCSI_DEBUG_OPT_TRANSPORT_ERR is set.
142  * This will continue until some other action occurs (e.g. the user
143  * writing a new value (other than -1 or 1) to every_nth via sysfs).
144  */
145 
146 /* when 1==SCSI_DEBUG_OPT_MEDIUM_ERR, a medium error is simulated at this
147  * sector on read commands: */
148 #define OPT_MEDIUM_ERR_ADDR   0x1234 /* that's sector 4660 in decimal */
149 #define OPT_MEDIUM_ERR_NUM    10     /* number of consecutive medium errs */
150 
151 /* If REPORT LUNS has luns >= 256 it can choose "flat space" (value 1)
152  * or "peripheral device" addressing (value 0) */
153 #define SAM2_LUN_ADDRESS_METHOD 0
154 #define SAM2_WLUN_REPORT_LUNS 0xc101
155 
156 /* Can queue up to this number of commands. Typically commands that
157  * that have a non-zero delay are queued. */
158 #define SCSI_DEBUG_CANQUEUE  255
159 
160 static int scsi_debug_add_host = DEF_NUM_HOST;
161 static int scsi_debug_ato = DEF_ATO;
162 static int scsi_debug_delay = DEF_DELAY;
163 static int scsi_debug_dev_size_mb = DEF_DEV_SIZE_MB;
164 static int scsi_debug_dif = DEF_DIF;
165 static int scsi_debug_dix = DEF_DIX;
166 static int scsi_debug_dsense = DEF_D_SENSE;
167 static int scsi_debug_every_nth = DEF_EVERY_NTH;
168 static int scsi_debug_fake_rw = DEF_FAKE_RW;
169 static int scsi_debug_guard = DEF_GUARD;
170 static int scsi_debug_lowest_aligned = DEF_LOWEST_ALIGNED;
171 static int scsi_debug_max_luns = DEF_MAX_LUNS;
172 static int scsi_debug_max_queue = SCSI_DEBUG_CANQUEUE;
173 static int scsi_debug_no_lun_0 = DEF_NO_LUN_0;
174 static int scsi_debug_no_uld = 0;
175 static int scsi_debug_num_parts = DEF_NUM_PARTS;
176 static int scsi_debug_num_tgts = DEF_NUM_TGTS; /* targets per host */
177 static int scsi_debug_opt_blks = DEF_OPT_BLKS;
178 static int scsi_debug_opts = DEF_OPTS;
179 static int scsi_debug_physblk_exp = DEF_PHYSBLK_EXP;
180 static int scsi_debug_ptype = DEF_PTYPE; /* SCSI peripheral type (0==disk) */
181 static int scsi_debug_scsi_level = DEF_SCSI_LEVEL;
182 static int scsi_debug_sector_size = DEF_SECTOR_SIZE;
183 static int scsi_debug_virtual_gb = DEF_VIRTUAL_GB;
184 static int scsi_debug_vpd_use_hostno = DEF_VPD_USE_HOSTNO;
185 static unsigned int scsi_debug_lbpu = DEF_LBPU;
186 static unsigned int scsi_debug_lbpws = DEF_LBPWS;
187 static unsigned int scsi_debug_lbpws10 = DEF_LBPWS10;
188 static unsigned int scsi_debug_unmap_alignment = DEF_UNMAP_ALIGNMENT;
189 static unsigned int scsi_debug_unmap_granularity = DEF_UNMAP_GRANULARITY;
190 static unsigned int scsi_debug_unmap_max_blocks = DEF_UNMAP_MAX_BLOCKS;
191 static unsigned int scsi_debug_unmap_max_desc = DEF_UNMAP_MAX_DESC;
192 static unsigned int scsi_debug_write_same_length = DEF_WRITESAME_LENGTH;
193 
194 static int scsi_debug_cmnd_count = 0;
195 
196 #define DEV_READONLY(TGT)      (0)
197 #define DEV_REMOVEABLE(TGT)    (0)
198 
199 static unsigned int sdebug_store_sectors;
200 static sector_t sdebug_capacity;	/* in sectors */
201 
202 /* old BIOS stuff, kernel may get rid of them but some mode sense pages
203    may still need them */
204 static int sdebug_heads;		/* heads per disk */
205 static int sdebug_cylinders_per;	/* cylinders per surface */
206 static int sdebug_sectors_per;		/* sectors per cylinder */
207 
208 #define SDEBUG_MAX_PARTS 4
209 
210 #define SDEBUG_SENSE_LEN 32
211 
212 #define SCSI_DEBUG_MAX_CMD_LEN 32
213 
214 static unsigned int scsi_debug_lbp(void)
215 {
216 	return scsi_debug_lbpu | scsi_debug_lbpws | scsi_debug_lbpws10;
217 }
218 
219 struct sdebug_dev_info {
220 	struct list_head dev_list;
221 	unsigned char sense_buff[SDEBUG_SENSE_LEN];	/* weak nexus */
222 	unsigned int channel;
223 	unsigned int target;
224 	unsigned int lun;
225 	struct sdebug_host_info *sdbg_host;
226 	unsigned int wlun;
227 	char reset;
228 	char stopped;
229 	char used;
230 };
231 
232 struct sdebug_host_info {
233 	struct list_head host_list;
234 	struct Scsi_Host *shost;
235 	struct device dev;
236 	struct list_head dev_info_list;
237 };
238 
239 #define to_sdebug_host(d)	\
240 	container_of(d, struct sdebug_host_info, dev)
241 
242 static LIST_HEAD(sdebug_host_list);
243 static DEFINE_SPINLOCK(sdebug_host_list_lock);
244 
245 typedef void (* done_funct_t) (struct scsi_cmnd *);
246 
247 struct sdebug_queued_cmd {
248 	int in_use;
249 	struct timer_list cmnd_timer;
250 	done_funct_t done_funct;
251 	struct scsi_cmnd * a_cmnd;
252 	int scsi_result;
253 };
254 static struct sdebug_queued_cmd queued_arr[SCSI_DEBUG_CANQUEUE];
255 
256 static unsigned char * fake_storep;	/* ramdisk storage */
257 static unsigned char *dif_storep;	/* protection info */
258 static void *map_storep;		/* provisioning map */
259 
260 static unsigned long map_size;
261 static int num_aborts = 0;
262 static int num_dev_resets = 0;
263 static int num_bus_resets = 0;
264 static int num_host_resets = 0;
265 static int dix_writes;
266 static int dix_reads;
267 static int dif_errors;
268 
269 static DEFINE_SPINLOCK(queued_arr_lock);
270 static DEFINE_RWLOCK(atomic_rw);
271 
272 static char sdebug_proc_name[] = "scsi_debug";
273 
274 static struct bus_type pseudo_lld_bus;
275 
276 static inline sector_t dif_offset(sector_t sector)
277 {
278 	return sector << 3;
279 }
280 
281 static struct device_driver sdebug_driverfs_driver = {
282 	.name 		= sdebug_proc_name,
283 	.bus		= &pseudo_lld_bus,
284 };
285 
286 static const int check_condition_result =
287 		(DRIVER_SENSE << 24) | SAM_STAT_CHECK_CONDITION;
288 
289 static const int illegal_condition_result =
290 	(DRIVER_SENSE << 24) | (DID_ABORT << 16) | SAM_STAT_CHECK_CONDITION;
291 
292 static unsigned char ctrl_m_pg[] = {0xa, 10, 2, 0, 0, 0, 0, 0,
293 				    0, 0, 0x2, 0x4b};
294 static unsigned char iec_m_pg[] = {0x1c, 0xa, 0x08, 0, 0, 0, 0, 0,
295 			           0, 0, 0x0, 0x0};
296 
297 static int sdebug_add_adapter(void);
298 static void sdebug_remove_adapter(void);
299 
300 static void sdebug_max_tgts_luns(void)
301 {
302 	struct sdebug_host_info *sdbg_host;
303 	struct Scsi_Host *hpnt;
304 
305 	spin_lock(&sdebug_host_list_lock);
306 	list_for_each_entry(sdbg_host, &sdebug_host_list, host_list) {
307 		hpnt = sdbg_host->shost;
308 		if ((hpnt->this_id >= 0) &&
309 		    (scsi_debug_num_tgts > hpnt->this_id))
310 			hpnt->max_id = scsi_debug_num_tgts + 1;
311 		else
312 			hpnt->max_id = scsi_debug_num_tgts;
313 		/* scsi_debug_max_luns; */
314 		hpnt->max_lun = SAM2_WLUN_REPORT_LUNS;
315 	}
316 	spin_unlock(&sdebug_host_list_lock);
317 }
318 
319 static void mk_sense_buffer(struct sdebug_dev_info *devip, int key,
320 			    int asc, int asq)
321 {
322 	unsigned char *sbuff;
323 
324 	sbuff = devip->sense_buff;
325 	memset(sbuff, 0, SDEBUG_SENSE_LEN);
326 
327 	scsi_build_sense_buffer(scsi_debug_dsense, sbuff, key, asc, asq);
328 
329 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
330 		printk(KERN_INFO "scsi_debug:    [sense_key,asc,ascq]: "
331 		      "[0x%x,0x%x,0x%x]\n", key, asc, asq);
332 }
333 
334 static void get_data_transfer_info(unsigned char *cmd,
335 				   unsigned long long *lba, unsigned int *num,
336 				   u32 *ei_lba)
337 {
338 	*ei_lba = 0;
339 
340 	switch (*cmd) {
341 	case VARIABLE_LENGTH_CMD:
342 		*lba = (u64)cmd[19] | (u64)cmd[18] << 8 |
343 			(u64)cmd[17] << 16 | (u64)cmd[16] << 24 |
344 			(u64)cmd[15] << 32 | (u64)cmd[14] << 40 |
345 			(u64)cmd[13] << 48 | (u64)cmd[12] << 56;
346 
347 		*ei_lba = (u32)cmd[23] | (u32)cmd[22] << 8 |
348 			(u32)cmd[21] << 16 | (u32)cmd[20] << 24;
349 
350 		*num = (u32)cmd[31] | (u32)cmd[30] << 8 | (u32)cmd[29] << 16 |
351 			(u32)cmd[28] << 24;
352 		break;
353 
354 	case WRITE_SAME_16:
355 	case WRITE_16:
356 	case READ_16:
357 		*lba = (u64)cmd[9] | (u64)cmd[8] << 8 |
358 			(u64)cmd[7] << 16 | (u64)cmd[6] << 24 |
359 			(u64)cmd[5] << 32 | (u64)cmd[4] << 40 |
360 			(u64)cmd[3] << 48 | (u64)cmd[2] << 56;
361 
362 		*num = (u32)cmd[13] | (u32)cmd[12] << 8 | (u32)cmd[11] << 16 |
363 			(u32)cmd[10] << 24;
364 		break;
365 	case WRITE_12:
366 	case READ_12:
367 		*lba = (u32)cmd[5] | (u32)cmd[4] << 8 | (u32)cmd[3] << 16 |
368 			(u32)cmd[2] << 24;
369 
370 		*num = (u32)cmd[9] | (u32)cmd[8] << 8 | (u32)cmd[7] << 16 |
371 			(u32)cmd[6] << 24;
372 		break;
373 	case WRITE_SAME:
374 	case WRITE_10:
375 	case READ_10:
376 	case XDWRITEREAD_10:
377 		*lba = (u32)cmd[5] | (u32)cmd[4] << 8 |	(u32)cmd[3] << 16 |
378 			(u32)cmd[2] << 24;
379 
380 		*num = (u32)cmd[8] | (u32)cmd[7] << 8;
381 		break;
382 	case WRITE_6:
383 	case READ_6:
384 		*lba = (u32)cmd[3] | (u32)cmd[2] << 8 |
385 			(u32)(cmd[1] & 0x1f) << 16;
386 		*num = (0 == cmd[4]) ? 256 : cmd[4];
387 		break;
388 	default:
389 		break;
390 	}
391 }
392 
393 static int scsi_debug_ioctl(struct scsi_device *dev, int cmd, void __user *arg)
394 {
395 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) {
396 		printk(KERN_INFO "scsi_debug: ioctl: cmd=0x%x\n", cmd);
397 	}
398 	return -EINVAL;
399 	/* return -ENOTTY; // correct return but upsets fdisk */
400 }
401 
402 static int check_readiness(struct scsi_cmnd * SCpnt, int reset_only,
403 			   struct sdebug_dev_info * devip)
404 {
405 	if (devip->reset) {
406 		if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
407 			printk(KERN_INFO "scsi_debug: Reporting Unit "
408 			       "attention: power on reset\n");
409 		devip->reset = 0;
410 		mk_sense_buffer(devip, UNIT_ATTENTION, POWERON_RESET, 0);
411 		return check_condition_result;
412 	}
413 	if ((0 == reset_only) && devip->stopped) {
414 		if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
415 			printk(KERN_INFO "scsi_debug: Reporting Not "
416 			       "ready: initializing command required\n");
417 		mk_sense_buffer(devip, NOT_READY, LOGICAL_UNIT_NOT_READY,
418 				0x2);
419 		return check_condition_result;
420 	}
421 	return 0;
422 }
423 
424 /* Returns 0 if ok else (DID_ERROR << 16). Sets scp->resid . */
425 static int fill_from_dev_buffer(struct scsi_cmnd *scp, unsigned char *arr,
426 				int arr_len)
427 {
428 	int act_len;
429 	struct scsi_data_buffer *sdb = scsi_in(scp);
430 
431 	if (!sdb->length)
432 		return 0;
433 	if (!(scsi_bidi_cmnd(scp) || scp->sc_data_direction == DMA_FROM_DEVICE))
434 		return (DID_ERROR << 16);
435 
436 	act_len = sg_copy_from_buffer(sdb->table.sgl, sdb->table.nents,
437 				      arr, arr_len);
438 	if (sdb->resid)
439 		sdb->resid -= act_len;
440 	else
441 		sdb->resid = scsi_bufflen(scp) - act_len;
442 
443 	return 0;
444 }
445 
446 /* Returns number of bytes fetched into 'arr' or -1 if error. */
447 static int fetch_to_dev_buffer(struct scsi_cmnd *scp, unsigned char *arr,
448 			       int arr_len)
449 {
450 	if (!scsi_bufflen(scp))
451 		return 0;
452 	if (!(scsi_bidi_cmnd(scp) || scp->sc_data_direction == DMA_TO_DEVICE))
453 		return -1;
454 
455 	return scsi_sg_copy_to_buffer(scp, arr, arr_len);
456 }
457 
458 
459 static const char * inq_vendor_id = "Linux   ";
460 static const char * inq_product_id = "scsi_debug      ";
461 static const char * inq_product_rev = "0004";
462 
463 static int inquiry_evpd_83(unsigned char * arr, int port_group_id,
464 			   int target_dev_id, int dev_id_num,
465 			   const char * dev_id_str,
466 			   int dev_id_str_len)
467 {
468 	int num, port_a;
469 	char b[32];
470 
471 	port_a = target_dev_id + 1;
472 	/* T10 vendor identifier field format (faked) */
473 	arr[0] = 0x2;	/* ASCII */
474 	arr[1] = 0x1;
475 	arr[2] = 0x0;
476 	memcpy(&arr[4], inq_vendor_id, 8);
477 	memcpy(&arr[12], inq_product_id, 16);
478 	memcpy(&arr[28], dev_id_str, dev_id_str_len);
479 	num = 8 + 16 + dev_id_str_len;
480 	arr[3] = num;
481 	num += 4;
482 	if (dev_id_num >= 0) {
483 		/* NAA-5, Logical unit identifier (binary) */
484 		arr[num++] = 0x1;	/* binary (not necessarily sas) */
485 		arr[num++] = 0x3;	/* PIV=0, lu, naa */
486 		arr[num++] = 0x0;
487 		arr[num++] = 0x8;
488 		arr[num++] = 0x53;  /* naa-5 ieee company id=0x333333 (fake) */
489 		arr[num++] = 0x33;
490 		arr[num++] = 0x33;
491 		arr[num++] = 0x30;
492 		arr[num++] = (dev_id_num >> 24);
493 		arr[num++] = (dev_id_num >> 16) & 0xff;
494 		arr[num++] = (dev_id_num >> 8) & 0xff;
495 		arr[num++] = dev_id_num & 0xff;
496 		/* Target relative port number */
497 		arr[num++] = 0x61;	/* proto=sas, binary */
498 		arr[num++] = 0x94;	/* PIV=1, target port, rel port */
499 		arr[num++] = 0x0;	/* reserved */
500 		arr[num++] = 0x4;	/* length */
501 		arr[num++] = 0x0;	/* reserved */
502 		arr[num++] = 0x0;	/* reserved */
503 		arr[num++] = 0x0;
504 		arr[num++] = 0x1;	/* relative port A */
505 	}
506 	/* NAA-5, Target port identifier */
507 	arr[num++] = 0x61;	/* proto=sas, binary */
508 	arr[num++] = 0x93;	/* piv=1, target port, naa */
509 	arr[num++] = 0x0;
510 	arr[num++] = 0x8;
511 	arr[num++] = 0x52;	/* naa-5, company id=0x222222 (fake) */
512 	arr[num++] = 0x22;
513 	arr[num++] = 0x22;
514 	arr[num++] = 0x20;
515 	arr[num++] = (port_a >> 24);
516 	arr[num++] = (port_a >> 16) & 0xff;
517 	arr[num++] = (port_a >> 8) & 0xff;
518 	arr[num++] = port_a & 0xff;
519 	/* NAA-5, Target port group identifier */
520 	arr[num++] = 0x61;	/* proto=sas, binary */
521 	arr[num++] = 0x95;	/* piv=1, target port group id */
522 	arr[num++] = 0x0;
523 	arr[num++] = 0x4;
524 	arr[num++] = 0;
525 	arr[num++] = 0;
526 	arr[num++] = (port_group_id >> 8) & 0xff;
527 	arr[num++] = port_group_id & 0xff;
528 	/* NAA-5, Target device identifier */
529 	arr[num++] = 0x61;	/* proto=sas, binary */
530 	arr[num++] = 0xa3;	/* piv=1, target device, naa */
531 	arr[num++] = 0x0;
532 	arr[num++] = 0x8;
533 	arr[num++] = 0x52;	/* naa-5, company id=0x222222 (fake) */
534 	arr[num++] = 0x22;
535 	arr[num++] = 0x22;
536 	arr[num++] = 0x20;
537 	arr[num++] = (target_dev_id >> 24);
538 	arr[num++] = (target_dev_id >> 16) & 0xff;
539 	arr[num++] = (target_dev_id >> 8) & 0xff;
540 	arr[num++] = target_dev_id & 0xff;
541 	/* SCSI name string: Target device identifier */
542 	arr[num++] = 0x63;	/* proto=sas, UTF-8 */
543 	arr[num++] = 0xa8;	/* piv=1, target device, SCSI name string */
544 	arr[num++] = 0x0;
545 	arr[num++] = 24;
546 	memcpy(arr + num, "naa.52222220", 12);
547 	num += 12;
548 	snprintf(b, sizeof(b), "%08X", target_dev_id);
549 	memcpy(arr + num, b, 8);
550 	num += 8;
551 	memset(arr + num, 0, 4);
552 	num += 4;
553 	return num;
554 }
555 
556 
557 static unsigned char vpd84_data[] = {
558 /* from 4th byte */ 0x22,0x22,0x22,0x0,0xbb,0x0,
559     0x22,0x22,0x22,0x0,0xbb,0x1,
560     0x22,0x22,0x22,0x0,0xbb,0x2,
561 };
562 
563 static int inquiry_evpd_84(unsigned char * arr)
564 {
565 	memcpy(arr, vpd84_data, sizeof(vpd84_data));
566 	return sizeof(vpd84_data);
567 }
568 
569 static int inquiry_evpd_85(unsigned char * arr)
570 {
571 	int num = 0;
572 	const char * na1 = "https://www.kernel.org/config";
573 	const char * na2 = "http://www.kernel.org/log";
574 	int plen, olen;
575 
576 	arr[num++] = 0x1;	/* lu, storage config */
577 	arr[num++] = 0x0;	/* reserved */
578 	arr[num++] = 0x0;
579 	olen = strlen(na1);
580 	plen = olen + 1;
581 	if (plen % 4)
582 		plen = ((plen / 4) + 1) * 4;
583 	arr[num++] = plen;	/* length, null termianted, padded */
584 	memcpy(arr + num, na1, olen);
585 	memset(arr + num + olen, 0, plen - olen);
586 	num += plen;
587 
588 	arr[num++] = 0x4;	/* lu, logging */
589 	arr[num++] = 0x0;	/* reserved */
590 	arr[num++] = 0x0;
591 	olen = strlen(na2);
592 	plen = olen + 1;
593 	if (plen % 4)
594 		plen = ((plen / 4) + 1) * 4;
595 	arr[num++] = plen;	/* length, null terminated, padded */
596 	memcpy(arr + num, na2, olen);
597 	memset(arr + num + olen, 0, plen - olen);
598 	num += plen;
599 
600 	return num;
601 }
602 
603 /* SCSI ports VPD page */
604 static int inquiry_evpd_88(unsigned char * arr, int target_dev_id)
605 {
606 	int num = 0;
607 	int port_a, port_b;
608 
609 	port_a = target_dev_id + 1;
610 	port_b = port_a + 1;
611 	arr[num++] = 0x0;	/* reserved */
612 	arr[num++] = 0x0;	/* reserved */
613 	arr[num++] = 0x0;
614 	arr[num++] = 0x1;	/* relative port 1 (primary) */
615 	memset(arr + num, 0, 6);
616 	num += 6;
617 	arr[num++] = 0x0;
618 	arr[num++] = 12;	/* length tp descriptor */
619 	/* naa-5 target port identifier (A) */
620 	arr[num++] = 0x61;	/* proto=sas, binary */
621 	arr[num++] = 0x93;	/* PIV=1, target port, NAA */
622 	arr[num++] = 0x0;	/* reserved */
623 	arr[num++] = 0x8;	/* length */
624 	arr[num++] = 0x52;	/* NAA-5, company_id=0x222222 (fake) */
625 	arr[num++] = 0x22;
626 	arr[num++] = 0x22;
627 	arr[num++] = 0x20;
628 	arr[num++] = (port_a >> 24);
629 	arr[num++] = (port_a >> 16) & 0xff;
630 	arr[num++] = (port_a >> 8) & 0xff;
631 	arr[num++] = port_a & 0xff;
632 
633 	arr[num++] = 0x0;	/* reserved */
634 	arr[num++] = 0x0;	/* reserved */
635 	arr[num++] = 0x0;
636 	arr[num++] = 0x2;	/* relative port 2 (secondary) */
637 	memset(arr + num, 0, 6);
638 	num += 6;
639 	arr[num++] = 0x0;
640 	arr[num++] = 12;	/* length tp descriptor */
641 	/* naa-5 target port identifier (B) */
642 	arr[num++] = 0x61;	/* proto=sas, binary */
643 	arr[num++] = 0x93;	/* PIV=1, target port, NAA */
644 	arr[num++] = 0x0;	/* reserved */
645 	arr[num++] = 0x8;	/* length */
646 	arr[num++] = 0x52;	/* NAA-5, company_id=0x222222 (fake) */
647 	arr[num++] = 0x22;
648 	arr[num++] = 0x22;
649 	arr[num++] = 0x20;
650 	arr[num++] = (port_b >> 24);
651 	arr[num++] = (port_b >> 16) & 0xff;
652 	arr[num++] = (port_b >> 8) & 0xff;
653 	arr[num++] = port_b & 0xff;
654 
655 	return num;
656 }
657 
658 
659 static unsigned char vpd89_data[] = {
660 /* from 4th byte */ 0,0,0,0,
661 'l','i','n','u','x',' ',' ',' ',
662 'S','A','T',' ','s','c','s','i','_','d','e','b','u','g',' ',' ',
663 '1','2','3','4',
664 0x34,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
665 0xec,0,0,0,
666 0x5a,0xc,0xff,0x3f,0x37,0xc8,0x10,0,0,0,0,0,0x3f,0,0,0,
667 0,0,0,0,0x58,0x58,0x58,0x58,0x58,0x58,0x58,0x58,0x20,0x20,0x20,0x20,
668 0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0,0,0,0x40,0x4,0,0x2e,0x33,
669 0x38,0x31,0x20,0x20,0x20,0x20,0x54,0x53,0x38,0x33,0x30,0x30,0x33,0x31,
670 0x53,0x41,
671 0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,
672 0x20,0x20,
673 0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,
674 0x10,0x80,
675 0,0,0,0x2f,0,0,0,0x2,0,0x2,0x7,0,0xff,0xff,0x1,0,
676 0x3f,0,0xc1,0xff,0x3e,0,0x10,0x1,0xb0,0xf8,0x50,0x9,0,0,0x7,0,
677 0x3,0,0x78,0,0x78,0,0xf0,0,0x78,0,0,0,0,0,0,0,
678 0,0,0,0,0,0,0,0,0x2,0,0,0,0,0,0,0,
679 0x7e,0,0x1b,0,0x6b,0x34,0x1,0x7d,0x3,0x40,0x69,0x34,0x1,0x3c,0x3,0x40,
680 0x7f,0x40,0,0,0,0,0xfe,0xfe,0,0,0,0,0,0xfe,0,0,
681 0,0,0,0,0,0,0,0,0xb0,0xf8,0x50,0x9,0,0,0,0,
682 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
683 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
684 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
685 0x1,0,0xb0,0xf8,0x50,0x9,0xb0,0xf8,0x50,0x9,0x20,0x20,0x2,0,0xb6,0x42,
686 0,0x80,0x8a,0,0x6,0x3c,0xa,0x3c,0xff,0xff,0xc6,0x7,0,0x1,0,0x8,
687 0xf0,0xf,0,0x10,0x2,0,0x30,0,0,0,0,0,0,0,0x6,0xfe,
688 0,0,0x2,0,0x50,0,0x8a,0,0x4f,0x95,0,0,0x21,0,0xb,0,
689 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
690 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
691 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
692 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
693 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
694 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
695 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
696 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
697 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
698 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
699 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
700 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0xa5,0x51,
701 };
702 
703 static int inquiry_evpd_89(unsigned char * arr)
704 {
705 	memcpy(arr, vpd89_data, sizeof(vpd89_data));
706 	return sizeof(vpd89_data);
707 }
708 
709 
710 /* Block limits VPD page (SBC-3) */
711 static unsigned char vpdb0_data[] = {
712 	/* from 4th byte */ 0,0,0,4, 0,0,0x4,0, 0,0,0,64,
713 	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
714 	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
715 	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
716 };
717 
718 static int inquiry_evpd_b0(unsigned char * arr)
719 {
720 	unsigned int gran;
721 
722 	memcpy(arr, vpdb0_data, sizeof(vpdb0_data));
723 
724 	/* Optimal transfer length granularity */
725 	gran = 1 << scsi_debug_physblk_exp;
726 	arr[2] = (gran >> 8) & 0xff;
727 	arr[3] = gran & 0xff;
728 
729 	/* Maximum Transfer Length */
730 	if (sdebug_store_sectors > 0x400) {
731 		arr[4] = (sdebug_store_sectors >> 24) & 0xff;
732 		arr[5] = (sdebug_store_sectors >> 16) & 0xff;
733 		arr[6] = (sdebug_store_sectors >> 8) & 0xff;
734 		arr[7] = sdebug_store_sectors & 0xff;
735 	}
736 
737 	/* Optimal Transfer Length */
738 	put_unaligned_be32(scsi_debug_opt_blks, &arr[8]);
739 
740 	if (scsi_debug_lbpu) {
741 		/* Maximum Unmap LBA Count */
742 		put_unaligned_be32(scsi_debug_unmap_max_blocks, &arr[16]);
743 
744 		/* Maximum Unmap Block Descriptor Count */
745 		put_unaligned_be32(scsi_debug_unmap_max_desc, &arr[20]);
746 	}
747 
748 	/* Unmap Granularity Alignment */
749 	if (scsi_debug_unmap_alignment) {
750 		put_unaligned_be32(scsi_debug_unmap_alignment, &arr[28]);
751 		arr[28] |= 0x80; /* UGAVALID */
752 	}
753 
754 	/* Optimal Unmap Granularity */
755 	put_unaligned_be32(scsi_debug_unmap_granularity, &arr[24]);
756 
757 	/* Maximum WRITE SAME Length */
758 	put_unaligned_be64(scsi_debug_write_same_length, &arr[32]);
759 
760 	return 0x3c; /* Mandatory page length for Logical Block Provisioning */
761 
762 	return sizeof(vpdb0_data);
763 }
764 
765 /* Block device characteristics VPD page (SBC-3) */
766 static int inquiry_evpd_b1(unsigned char *arr)
767 {
768 	memset(arr, 0, 0x3c);
769 	arr[0] = 0;
770 	arr[1] = 1;	/* non rotating medium (e.g. solid state) */
771 	arr[2] = 0;
772 	arr[3] = 5;	/* less than 1.8" */
773 
774 	return 0x3c;
775 }
776 
777 /* Thin provisioning VPD page (SBC-3) */
778 static int inquiry_evpd_b2(unsigned char *arr)
779 {
780 	memset(arr, 0, 0x8);
781 	arr[0] = 0;			/* threshold exponent */
782 
783 	if (scsi_debug_lbpu)
784 		arr[1] = 1 << 7;
785 
786 	if (scsi_debug_lbpws)
787 		arr[1] |= 1 << 6;
788 
789 	if (scsi_debug_lbpws10)
790 		arr[1] |= 1 << 5;
791 
792 	return 0x8;
793 }
794 
795 #define SDEBUG_LONG_INQ_SZ 96
796 #define SDEBUG_MAX_INQ_ARR_SZ 584
797 
798 static int resp_inquiry(struct scsi_cmnd * scp, int target,
799 			struct sdebug_dev_info * devip)
800 {
801 	unsigned char pq_pdt;
802 	unsigned char * arr;
803 	unsigned char *cmd = (unsigned char *)scp->cmnd;
804 	int alloc_len, n, ret;
805 
806 	alloc_len = (cmd[3] << 8) + cmd[4];
807 	arr = kzalloc(SDEBUG_MAX_INQ_ARR_SZ, GFP_ATOMIC);
808 	if (! arr)
809 		return DID_REQUEUE << 16;
810 	if (devip->wlun)
811 		pq_pdt = 0x1e;	/* present, wlun */
812 	else if (scsi_debug_no_lun_0 && (0 == devip->lun))
813 		pq_pdt = 0x7f;	/* not present, no device type */
814 	else
815 		pq_pdt = (scsi_debug_ptype & 0x1f);
816 	arr[0] = pq_pdt;
817 	if (0x2 & cmd[1]) {  /* CMDDT bit set */
818 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
819 			       	0);
820 		kfree(arr);
821 		return check_condition_result;
822 	} else if (0x1 & cmd[1]) {  /* EVPD bit set */
823 		int lu_id_num, port_group_id, target_dev_id, len;
824 		char lu_id_str[6];
825 		int host_no = devip->sdbg_host->shost->host_no;
826 
827 		port_group_id = (((host_no + 1) & 0x7f) << 8) +
828 		    (devip->channel & 0x7f);
829 		if (0 == scsi_debug_vpd_use_hostno)
830 			host_no = 0;
831 		lu_id_num = devip->wlun ? -1 : (((host_no + 1) * 2000) +
832 			    (devip->target * 1000) + devip->lun);
833 		target_dev_id = ((host_no + 1) * 2000) +
834 				 (devip->target * 1000) - 3;
835 		len = scnprintf(lu_id_str, 6, "%d", lu_id_num);
836 		if (0 == cmd[2]) { /* supported vital product data pages */
837 			arr[1] = cmd[2];	/*sanity */
838 			n = 4;
839 			arr[n++] = 0x0;   /* this page */
840 			arr[n++] = 0x80;  /* unit serial number */
841 			arr[n++] = 0x83;  /* device identification */
842 			arr[n++] = 0x84;  /* software interface ident. */
843 			arr[n++] = 0x85;  /* management network addresses */
844 			arr[n++] = 0x86;  /* extended inquiry */
845 			arr[n++] = 0x87;  /* mode page policy */
846 			arr[n++] = 0x88;  /* SCSI ports */
847 			arr[n++] = 0x89;  /* ATA information */
848 			arr[n++] = 0xb0;  /* Block limits (SBC) */
849 			arr[n++] = 0xb1;  /* Block characteristics (SBC) */
850 			if (scsi_debug_lbp()) /* Logical Block Prov. (SBC) */
851 				arr[n++] = 0xb2;
852 			arr[3] = n - 4;	  /* number of supported VPD pages */
853 		} else if (0x80 == cmd[2]) { /* unit serial number */
854 			arr[1] = cmd[2];	/*sanity */
855 			arr[3] = len;
856 			memcpy(&arr[4], lu_id_str, len);
857 		} else if (0x83 == cmd[2]) { /* device identification */
858 			arr[1] = cmd[2];	/*sanity */
859 			arr[3] = inquiry_evpd_83(&arr[4], port_group_id,
860 						 target_dev_id, lu_id_num,
861 						 lu_id_str, len);
862 		} else if (0x84 == cmd[2]) { /* Software interface ident. */
863 			arr[1] = cmd[2];	/*sanity */
864 			arr[3] = inquiry_evpd_84(&arr[4]);
865 		} else if (0x85 == cmd[2]) { /* Management network addresses */
866 			arr[1] = cmd[2];	/*sanity */
867 			arr[3] = inquiry_evpd_85(&arr[4]);
868 		} else if (0x86 == cmd[2]) { /* extended inquiry */
869 			arr[1] = cmd[2];	/*sanity */
870 			arr[3] = 0x3c;	/* number of following entries */
871 			if (scsi_debug_dif == SD_DIF_TYPE3_PROTECTION)
872 				arr[4] = 0x4;	/* SPT: GRD_CHK:1 */
873 			else if (scsi_debug_dif)
874 				arr[4] = 0x5;   /* SPT: GRD_CHK:1, REF_CHK:1 */
875 			else
876 				arr[4] = 0x0;   /* no protection stuff */
877 			arr[5] = 0x7;   /* head of q, ordered + simple q's */
878 		} else if (0x87 == cmd[2]) { /* mode page policy */
879 			arr[1] = cmd[2];	/*sanity */
880 			arr[3] = 0x8;	/* number of following entries */
881 			arr[4] = 0x2;	/* disconnect-reconnect mp */
882 			arr[6] = 0x80;	/* mlus, shared */
883 			arr[8] = 0x18;	 /* protocol specific lu */
884 			arr[10] = 0x82;	 /* mlus, per initiator port */
885 		} else if (0x88 == cmd[2]) { /* SCSI Ports */
886 			arr[1] = cmd[2];	/*sanity */
887 			arr[3] = inquiry_evpd_88(&arr[4], target_dev_id);
888 		} else if (0x89 == cmd[2]) { /* ATA information */
889 			arr[1] = cmd[2];        /*sanity */
890 			n = inquiry_evpd_89(&arr[4]);
891 			arr[2] = (n >> 8);
892 			arr[3] = (n & 0xff);
893 		} else if (0xb0 == cmd[2]) { /* Block limits (SBC) */
894 			arr[1] = cmd[2];        /*sanity */
895 			arr[3] = inquiry_evpd_b0(&arr[4]);
896 		} else if (0xb1 == cmd[2]) { /* Block characteristics (SBC) */
897 			arr[1] = cmd[2];        /*sanity */
898 			arr[3] = inquiry_evpd_b1(&arr[4]);
899 		} else if (0xb2 == cmd[2]) { /* Logical Block Prov. (SBC) */
900 			arr[1] = cmd[2];        /*sanity */
901 			arr[3] = inquiry_evpd_b2(&arr[4]);
902 		} else {
903 			/* Illegal request, invalid field in cdb */
904 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
905 					INVALID_FIELD_IN_CDB, 0);
906 			kfree(arr);
907 			return check_condition_result;
908 		}
909 		len = min(((arr[2] << 8) + arr[3]) + 4, alloc_len);
910 		ret = fill_from_dev_buffer(scp, arr,
911 			    min(len, SDEBUG_MAX_INQ_ARR_SZ));
912 		kfree(arr);
913 		return ret;
914 	}
915 	/* drops through here for a standard inquiry */
916 	arr[1] = DEV_REMOVEABLE(target) ? 0x80 : 0;	/* Removable disk */
917 	arr[2] = scsi_debug_scsi_level;
918 	arr[3] = 2;    /* response_data_format==2 */
919 	arr[4] = SDEBUG_LONG_INQ_SZ - 5;
920 	arr[5] = scsi_debug_dif ? 1 : 0; /* PROTECT bit */
921 	if (0 == scsi_debug_vpd_use_hostno)
922 		arr[5] = 0x10; /* claim: implicit TGPS */
923 	arr[6] = 0x10; /* claim: MultiP */
924 	/* arr[6] |= 0x40; ... claim: EncServ (enclosure services) */
925 	arr[7] = 0xa; /* claim: LINKED + CMDQUE */
926 	memcpy(&arr[8], inq_vendor_id, 8);
927 	memcpy(&arr[16], inq_product_id, 16);
928 	memcpy(&arr[32], inq_product_rev, 4);
929 	/* version descriptors (2 bytes each) follow */
930 	arr[58] = 0x0; arr[59] = 0x77; /* SAM-3 ANSI */
931 	arr[60] = 0x3; arr[61] = 0x14;  /* SPC-3 ANSI */
932 	n = 62;
933 	if (scsi_debug_ptype == 0) {
934 		arr[n++] = 0x3; arr[n++] = 0x3d; /* SBC-2 ANSI */
935 	} else if (scsi_debug_ptype == 1) {
936 		arr[n++] = 0x3; arr[n++] = 0x60; /* SSC-2 no version */
937 	}
938 	arr[n++] = 0xc; arr[n++] = 0xf;  /* SAS-1.1 rev 10 */
939 	ret = fill_from_dev_buffer(scp, arr,
940 			    min(alloc_len, SDEBUG_LONG_INQ_SZ));
941 	kfree(arr);
942 	return ret;
943 }
944 
945 static int resp_requests(struct scsi_cmnd * scp,
946 			 struct sdebug_dev_info * devip)
947 {
948 	unsigned char * sbuff;
949 	unsigned char *cmd = (unsigned char *)scp->cmnd;
950 	unsigned char arr[SDEBUG_SENSE_LEN];
951 	int want_dsense;
952 	int len = 18;
953 
954 	memset(arr, 0, sizeof(arr));
955 	if (devip->reset == 1)
956 		mk_sense_buffer(devip, 0, NO_ADDITIONAL_SENSE, 0);
957 	want_dsense = !!(cmd[1] & 1) || scsi_debug_dsense;
958 	sbuff = devip->sense_buff;
959 	if ((iec_m_pg[2] & 0x4) && (6 == (iec_m_pg[3] & 0xf))) {
960 		if (want_dsense) {
961 			arr[0] = 0x72;
962 			arr[1] = 0x0;		/* NO_SENSE in sense_key */
963 			arr[2] = THRESHOLD_EXCEEDED;
964 			arr[3] = 0xff;		/* TEST set and MRIE==6 */
965 		} else {
966 			arr[0] = 0x70;
967 			arr[2] = 0x0;		/* NO_SENSE in sense_key */
968 			arr[7] = 0xa;   	/* 18 byte sense buffer */
969 			arr[12] = THRESHOLD_EXCEEDED;
970 			arr[13] = 0xff;		/* TEST set and MRIE==6 */
971 		}
972 	} else {
973 		memcpy(arr, sbuff, SDEBUG_SENSE_LEN);
974 		if ((cmd[1] & 1) && (! scsi_debug_dsense)) {
975 			/* DESC bit set and sense_buff in fixed format */
976 			memset(arr, 0, sizeof(arr));
977 			arr[0] = 0x72;
978 			arr[1] = sbuff[2];     /* sense key */
979 			arr[2] = sbuff[12];    /* asc */
980 			arr[3] = sbuff[13];    /* ascq */
981 			len = 8;
982 		}
983 	}
984 	mk_sense_buffer(devip, 0, NO_ADDITIONAL_SENSE, 0);
985 	return fill_from_dev_buffer(scp, arr, len);
986 }
987 
988 static int resp_start_stop(struct scsi_cmnd * scp,
989 			   struct sdebug_dev_info * devip)
990 {
991 	unsigned char *cmd = (unsigned char *)scp->cmnd;
992 	int power_cond, errsts, start;
993 
994 	if ((errsts = check_readiness(scp, 1, devip)))
995 		return errsts;
996 	power_cond = (cmd[4] & 0xf0) >> 4;
997 	if (power_cond) {
998 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
999 			       	0);
1000 		return check_condition_result;
1001 	}
1002 	start = cmd[4] & 1;
1003 	if (start == devip->stopped)
1004 		devip->stopped = !start;
1005 	return 0;
1006 }
1007 
1008 static sector_t get_sdebug_capacity(void)
1009 {
1010 	if (scsi_debug_virtual_gb > 0)
1011 		return (sector_t)scsi_debug_virtual_gb *
1012 			(1073741824 / scsi_debug_sector_size);
1013 	else
1014 		return sdebug_store_sectors;
1015 }
1016 
1017 #define SDEBUG_READCAP_ARR_SZ 8
1018 static int resp_readcap(struct scsi_cmnd * scp,
1019 			struct sdebug_dev_info * devip)
1020 {
1021 	unsigned char arr[SDEBUG_READCAP_ARR_SZ];
1022 	unsigned int capac;
1023 	int errsts;
1024 
1025 	if ((errsts = check_readiness(scp, 1, devip)))
1026 		return errsts;
1027 	/* following just in case virtual_gb changed */
1028 	sdebug_capacity = get_sdebug_capacity();
1029 	memset(arr, 0, SDEBUG_READCAP_ARR_SZ);
1030 	if (sdebug_capacity < 0xffffffff) {
1031 		capac = (unsigned int)sdebug_capacity - 1;
1032 		arr[0] = (capac >> 24);
1033 		arr[1] = (capac >> 16) & 0xff;
1034 		arr[2] = (capac >> 8) & 0xff;
1035 		arr[3] = capac & 0xff;
1036 	} else {
1037 		arr[0] = 0xff;
1038 		arr[1] = 0xff;
1039 		arr[2] = 0xff;
1040 		arr[3] = 0xff;
1041 	}
1042 	arr[6] = (scsi_debug_sector_size >> 8) & 0xff;
1043 	arr[7] = scsi_debug_sector_size & 0xff;
1044 	return fill_from_dev_buffer(scp, arr, SDEBUG_READCAP_ARR_SZ);
1045 }
1046 
1047 #define SDEBUG_READCAP16_ARR_SZ 32
1048 static int resp_readcap16(struct scsi_cmnd * scp,
1049 			  struct sdebug_dev_info * devip)
1050 {
1051 	unsigned char *cmd = (unsigned char *)scp->cmnd;
1052 	unsigned char arr[SDEBUG_READCAP16_ARR_SZ];
1053 	unsigned long long capac;
1054 	int errsts, k, alloc_len;
1055 
1056 	if ((errsts = check_readiness(scp, 1, devip)))
1057 		return errsts;
1058 	alloc_len = ((cmd[10] << 24) + (cmd[11] << 16) + (cmd[12] << 8)
1059 		     + cmd[13]);
1060 	/* following just in case virtual_gb changed */
1061 	sdebug_capacity = get_sdebug_capacity();
1062 	memset(arr, 0, SDEBUG_READCAP16_ARR_SZ);
1063 	capac = sdebug_capacity - 1;
1064 	for (k = 0; k < 8; ++k, capac >>= 8)
1065 		arr[7 - k] = capac & 0xff;
1066 	arr[8] = (scsi_debug_sector_size >> 24) & 0xff;
1067 	arr[9] = (scsi_debug_sector_size >> 16) & 0xff;
1068 	arr[10] = (scsi_debug_sector_size >> 8) & 0xff;
1069 	arr[11] = scsi_debug_sector_size & 0xff;
1070 	arr[13] = scsi_debug_physblk_exp & 0xf;
1071 	arr[14] = (scsi_debug_lowest_aligned >> 8) & 0x3f;
1072 
1073 	if (scsi_debug_lbp())
1074 		arr[14] |= 0x80; /* LBPME */
1075 
1076 	arr[15] = scsi_debug_lowest_aligned & 0xff;
1077 
1078 	if (scsi_debug_dif) {
1079 		arr[12] = (scsi_debug_dif - 1) << 1; /* P_TYPE */
1080 		arr[12] |= 1; /* PROT_EN */
1081 	}
1082 
1083 	return fill_from_dev_buffer(scp, arr,
1084 				    min(alloc_len, SDEBUG_READCAP16_ARR_SZ));
1085 }
1086 
1087 #define SDEBUG_MAX_TGTPGS_ARR_SZ 1412
1088 
1089 static int resp_report_tgtpgs(struct scsi_cmnd * scp,
1090 			      struct sdebug_dev_info * devip)
1091 {
1092 	unsigned char *cmd = (unsigned char *)scp->cmnd;
1093 	unsigned char * arr;
1094 	int host_no = devip->sdbg_host->shost->host_no;
1095 	int n, ret, alen, rlen;
1096 	int port_group_a, port_group_b, port_a, port_b;
1097 
1098 	alen = ((cmd[6] << 24) + (cmd[7] << 16) + (cmd[8] << 8)
1099 		+ cmd[9]);
1100 
1101 	arr = kzalloc(SDEBUG_MAX_TGTPGS_ARR_SZ, GFP_ATOMIC);
1102 	if (! arr)
1103 		return DID_REQUEUE << 16;
1104 	/*
1105 	 * EVPD page 0x88 states we have two ports, one
1106 	 * real and a fake port with no device connected.
1107 	 * So we create two port groups with one port each
1108 	 * and set the group with port B to unavailable.
1109 	 */
1110 	port_a = 0x1; /* relative port A */
1111 	port_b = 0x2; /* relative port B */
1112 	port_group_a = (((host_no + 1) & 0x7f) << 8) +
1113 	    (devip->channel & 0x7f);
1114 	port_group_b = (((host_no + 1) & 0x7f) << 8) +
1115 	    (devip->channel & 0x7f) + 0x80;
1116 
1117 	/*
1118 	 * The asymmetric access state is cycled according to the host_id.
1119 	 */
1120 	n = 4;
1121 	if (0 == scsi_debug_vpd_use_hostno) {
1122 	    arr[n++] = host_no % 3; /* Asymm access state */
1123 	    arr[n++] = 0x0F; /* claim: all states are supported */
1124 	} else {
1125 	    arr[n++] = 0x0; /* Active/Optimized path */
1126 	    arr[n++] = 0x01; /* claim: only support active/optimized paths */
1127 	}
1128 	arr[n++] = (port_group_a >> 8) & 0xff;
1129 	arr[n++] = port_group_a & 0xff;
1130 	arr[n++] = 0;    /* Reserved */
1131 	arr[n++] = 0;    /* Status code */
1132 	arr[n++] = 0;    /* Vendor unique */
1133 	arr[n++] = 0x1;  /* One port per group */
1134 	arr[n++] = 0;    /* Reserved */
1135 	arr[n++] = 0;    /* Reserved */
1136 	arr[n++] = (port_a >> 8) & 0xff;
1137 	arr[n++] = port_a & 0xff;
1138 	arr[n++] = 3;    /* Port unavailable */
1139 	arr[n++] = 0x08; /* claim: only unavailalbe paths are supported */
1140 	arr[n++] = (port_group_b >> 8) & 0xff;
1141 	arr[n++] = port_group_b & 0xff;
1142 	arr[n++] = 0;    /* Reserved */
1143 	arr[n++] = 0;    /* Status code */
1144 	arr[n++] = 0;    /* Vendor unique */
1145 	arr[n++] = 0x1;  /* One port per group */
1146 	arr[n++] = 0;    /* Reserved */
1147 	arr[n++] = 0;    /* Reserved */
1148 	arr[n++] = (port_b >> 8) & 0xff;
1149 	arr[n++] = port_b & 0xff;
1150 
1151 	rlen = n - 4;
1152 	arr[0] = (rlen >> 24) & 0xff;
1153 	arr[1] = (rlen >> 16) & 0xff;
1154 	arr[2] = (rlen >> 8) & 0xff;
1155 	arr[3] = rlen & 0xff;
1156 
1157 	/*
1158 	 * Return the smallest value of either
1159 	 * - The allocated length
1160 	 * - The constructed command length
1161 	 * - The maximum array size
1162 	 */
1163 	rlen = min(alen,n);
1164 	ret = fill_from_dev_buffer(scp, arr,
1165 				   min(rlen, SDEBUG_MAX_TGTPGS_ARR_SZ));
1166 	kfree(arr);
1167 	return ret;
1168 }
1169 
1170 /* <<Following mode page info copied from ST318451LW>> */
1171 
1172 static int resp_err_recov_pg(unsigned char * p, int pcontrol, int target)
1173 {	/* Read-Write Error Recovery page for mode_sense */
1174 	unsigned char err_recov_pg[] = {0x1, 0xa, 0xc0, 11, 240, 0, 0, 0,
1175 					5, 0, 0xff, 0xff};
1176 
1177 	memcpy(p, err_recov_pg, sizeof(err_recov_pg));
1178 	if (1 == pcontrol)
1179 		memset(p + 2, 0, sizeof(err_recov_pg) - 2);
1180 	return sizeof(err_recov_pg);
1181 }
1182 
1183 static int resp_disconnect_pg(unsigned char * p, int pcontrol, int target)
1184 { 	/* Disconnect-Reconnect page for mode_sense */
1185 	unsigned char disconnect_pg[] = {0x2, 0xe, 128, 128, 0, 10, 0, 0,
1186 					 0, 0, 0, 0, 0, 0, 0, 0};
1187 
1188 	memcpy(p, disconnect_pg, sizeof(disconnect_pg));
1189 	if (1 == pcontrol)
1190 		memset(p + 2, 0, sizeof(disconnect_pg) - 2);
1191 	return sizeof(disconnect_pg);
1192 }
1193 
1194 static int resp_format_pg(unsigned char * p, int pcontrol, int target)
1195 {       /* Format device page for mode_sense */
1196 	unsigned char format_pg[] = {0x3, 0x16, 0, 0, 0, 0, 0, 0,
1197 				     0, 0, 0, 0, 0, 0, 0, 0,
1198 				     0, 0, 0, 0, 0x40, 0, 0, 0};
1199 
1200 	memcpy(p, format_pg, sizeof(format_pg));
1201 	p[10] = (sdebug_sectors_per >> 8) & 0xff;
1202 	p[11] = sdebug_sectors_per & 0xff;
1203 	p[12] = (scsi_debug_sector_size >> 8) & 0xff;
1204 	p[13] = scsi_debug_sector_size & 0xff;
1205 	if (DEV_REMOVEABLE(target))
1206 		p[20] |= 0x20; /* should agree with INQUIRY */
1207 	if (1 == pcontrol)
1208 		memset(p + 2, 0, sizeof(format_pg) - 2);
1209 	return sizeof(format_pg);
1210 }
1211 
1212 static int resp_caching_pg(unsigned char * p, int pcontrol, int target)
1213 { 	/* Caching page for mode_sense */
1214 	unsigned char caching_pg[] = {0x8, 18, 0x14, 0, 0xff, 0xff, 0, 0,
1215 		0xff, 0xff, 0xff, 0xff, 0x80, 0x14, 0, 0,     0, 0, 0, 0};
1216 
1217 	memcpy(p, caching_pg, sizeof(caching_pg));
1218 	if (1 == pcontrol)
1219 		memset(p + 2, 0, sizeof(caching_pg) - 2);
1220 	return sizeof(caching_pg);
1221 }
1222 
1223 static int resp_ctrl_m_pg(unsigned char * p, int pcontrol, int target)
1224 { 	/* Control mode page for mode_sense */
1225 	unsigned char ch_ctrl_m_pg[] = {/* 0xa, 10, */ 0x6, 0, 0, 0, 0, 0,
1226 				        0, 0, 0, 0};
1227 	unsigned char d_ctrl_m_pg[] = {0xa, 10, 2, 0, 0, 0, 0, 0,
1228 				     0, 0, 0x2, 0x4b};
1229 
1230 	if (scsi_debug_dsense)
1231 		ctrl_m_pg[2] |= 0x4;
1232 	else
1233 		ctrl_m_pg[2] &= ~0x4;
1234 
1235 	if (scsi_debug_ato)
1236 		ctrl_m_pg[5] |= 0x80; /* ATO=1 */
1237 
1238 	memcpy(p, ctrl_m_pg, sizeof(ctrl_m_pg));
1239 	if (1 == pcontrol)
1240 		memcpy(p + 2, ch_ctrl_m_pg, sizeof(ch_ctrl_m_pg));
1241 	else if (2 == pcontrol)
1242 		memcpy(p, d_ctrl_m_pg, sizeof(d_ctrl_m_pg));
1243 	return sizeof(ctrl_m_pg);
1244 }
1245 
1246 
1247 static int resp_iec_m_pg(unsigned char * p, int pcontrol, int target)
1248 {	/* Informational Exceptions control mode page for mode_sense */
1249 	unsigned char ch_iec_m_pg[] = {/* 0x1c, 0xa, */ 0x4, 0xf, 0, 0, 0, 0,
1250 				       0, 0, 0x0, 0x0};
1251 	unsigned char d_iec_m_pg[] = {0x1c, 0xa, 0x08, 0, 0, 0, 0, 0,
1252 				      0, 0, 0x0, 0x0};
1253 
1254 	memcpy(p, iec_m_pg, sizeof(iec_m_pg));
1255 	if (1 == pcontrol)
1256 		memcpy(p + 2, ch_iec_m_pg, sizeof(ch_iec_m_pg));
1257 	else if (2 == pcontrol)
1258 		memcpy(p, d_iec_m_pg, sizeof(d_iec_m_pg));
1259 	return sizeof(iec_m_pg);
1260 }
1261 
1262 static int resp_sas_sf_m_pg(unsigned char * p, int pcontrol, int target)
1263 {	/* SAS SSP mode page - short format for mode_sense */
1264 	unsigned char sas_sf_m_pg[] = {0x19, 0x6,
1265 		0x6, 0x0, 0x7, 0xd0, 0x0, 0x0};
1266 
1267 	memcpy(p, sas_sf_m_pg, sizeof(sas_sf_m_pg));
1268 	if (1 == pcontrol)
1269 		memset(p + 2, 0, sizeof(sas_sf_m_pg) - 2);
1270 	return sizeof(sas_sf_m_pg);
1271 }
1272 
1273 
1274 static int resp_sas_pcd_m_spg(unsigned char * p, int pcontrol, int target,
1275 			      int target_dev_id)
1276 {	/* SAS phy control and discover mode page for mode_sense */
1277 	unsigned char sas_pcd_m_pg[] = {0x59, 0x1, 0, 0x64, 0, 0x6, 0, 2,
1278 		    0, 0, 0, 0, 0x10, 0x9, 0x8, 0x0,
1279 		    0x52, 0x22, 0x22, 0x20, 0x0, 0x0, 0x0, 0x0,
1280 		    0x51, 0x11, 0x11, 0x10, 0x0, 0x0, 0x0, 0x1,
1281 		    0x2, 0, 0, 0, 0, 0, 0, 0,
1282 		    0x88, 0x99, 0, 0, 0, 0, 0, 0,
1283 		    0, 0, 0, 0, 0, 0, 0, 0,
1284 		    0, 1, 0, 0, 0x10, 0x9, 0x8, 0x0,
1285 		    0x52, 0x22, 0x22, 0x20, 0x0, 0x0, 0x0, 0x0,
1286 		    0x51, 0x11, 0x11, 0x10, 0x0, 0x0, 0x0, 0x1,
1287 		    0x3, 0, 0, 0, 0, 0, 0, 0,
1288 		    0x88, 0x99, 0, 0, 0, 0, 0, 0,
1289 		    0, 0, 0, 0, 0, 0, 0, 0,
1290 		};
1291 	int port_a, port_b;
1292 
1293 	port_a = target_dev_id + 1;
1294 	port_b = port_a + 1;
1295 	memcpy(p, sas_pcd_m_pg, sizeof(sas_pcd_m_pg));
1296 	p[20] = (port_a >> 24);
1297 	p[21] = (port_a >> 16) & 0xff;
1298 	p[22] = (port_a >> 8) & 0xff;
1299 	p[23] = port_a & 0xff;
1300 	p[48 + 20] = (port_b >> 24);
1301 	p[48 + 21] = (port_b >> 16) & 0xff;
1302 	p[48 + 22] = (port_b >> 8) & 0xff;
1303 	p[48 + 23] = port_b & 0xff;
1304 	if (1 == pcontrol)
1305 		memset(p + 4, 0, sizeof(sas_pcd_m_pg) - 4);
1306 	return sizeof(sas_pcd_m_pg);
1307 }
1308 
1309 static int resp_sas_sha_m_spg(unsigned char * p, int pcontrol)
1310 {	/* SAS SSP shared protocol specific port mode subpage */
1311 	unsigned char sas_sha_m_pg[] = {0x59, 0x2, 0, 0xc, 0, 0x6, 0x10, 0,
1312 		    0, 0, 0, 0, 0, 0, 0, 0,
1313 		};
1314 
1315 	memcpy(p, sas_sha_m_pg, sizeof(sas_sha_m_pg));
1316 	if (1 == pcontrol)
1317 		memset(p + 4, 0, sizeof(sas_sha_m_pg) - 4);
1318 	return sizeof(sas_sha_m_pg);
1319 }
1320 
1321 #define SDEBUG_MAX_MSENSE_SZ 256
1322 
1323 static int resp_mode_sense(struct scsi_cmnd * scp, int target,
1324 			   struct sdebug_dev_info * devip)
1325 {
1326 	unsigned char dbd, llbaa;
1327 	int pcontrol, pcode, subpcode, bd_len;
1328 	unsigned char dev_spec;
1329 	int k, alloc_len, msense_6, offset, len, errsts, target_dev_id;
1330 	unsigned char * ap;
1331 	unsigned char arr[SDEBUG_MAX_MSENSE_SZ];
1332 	unsigned char *cmd = (unsigned char *)scp->cmnd;
1333 
1334 	if ((errsts = check_readiness(scp, 1, devip)))
1335 		return errsts;
1336 	dbd = !!(cmd[1] & 0x8);
1337 	pcontrol = (cmd[2] & 0xc0) >> 6;
1338 	pcode = cmd[2] & 0x3f;
1339 	subpcode = cmd[3];
1340 	msense_6 = (MODE_SENSE == cmd[0]);
1341 	llbaa = msense_6 ? 0 : !!(cmd[1] & 0x10);
1342 	if ((0 == scsi_debug_ptype) && (0 == dbd))
1343 		bd_len = llbaa ? 16 : 8;
1344 	else
1345 		bd_len = 0;
1346 	alloc_len = msense_6 ? cmd[4] : ((cmd[7] << 8) | cmd[8]);
1347 	memset(arr, 0, SDEBUG_MAX_MSENSE_SZ);
1348 	if (0x3 == pcontrol) {  /* Saving values not supported */
1349 		mk_sense_buffer(devip, ILLEGAL_REQUEST, SAVING_PARAMS_UNSUP,
1350 			       	0);
1351 		return check_condition_result;
1352 	}
1353 	target_dev_id = ((devip->sdbg_host->shost->host_no + 1) * 2000) +
1354 			(devip->target * 1000) - 3;
1355 	/* set DPOFUA bit for disks */
1356 	if (0 == scsi_debug_ptype)
1357 		dev_spec = (DEV_READONLY(target) ? 0x80 : 0x0) | 0x10;
1358 	else
1359 		dev_spec = 0x0;
1360 	if (msense_6) {
1361 		arr[2] = dev_spec;
1362 		arr[3] = bd_len;
1363 		offset = 4;
1364 	} else {
1365 		arr[3] = dev_spec;
1366 		if (16 == bd_len)
1367 			arr[4] = 0x1;	/* set LONGLBA bit */
1368 		arr[7] = bd_len;	/* assume 255 or less */
1369 		offset = 8;
1370 	}
1371 	ap = arr + offset;
1372 	if ((bd_len > 0) && (!sdebug_capacity))
1373 		sdebug_capacity = get_sdebug_capacity();
1374 
1375 	if (8 == bd_len) {
1376 		if (sdebug_capacity > 0xfffffffe) {
1377 			ap[0] = 0xff;
1378 			ap[1] = 0xff;
1379 			ap[2] = 0xff;
1380 			ap[3] = 0xff;
1381 		} else {
1382 			ap[0] = (sdebug_capacity >> 24) & 0xff;
1383 			ap[1] = (sdebug_capacity >> 16) & 0xff;
1384 			ap[2] = (sdebug_capacity >> 8) & 0xff;
1385 			ap[3] = sdebug_capacity & 0xff;
1386 		}
1387 		ap[6] = (scsi_debug_sector_size >> 8) & 0xff;
1388 		ap[7] = scsi_debug_sector_size & 0xff;
1389 		offset += bd_len;
1390 		ap = arr + offset;
1391 	} else if (16 == bd_len) {
1392 		unsigned long long capac = sdebug_capacity;
1393 
1394         	for (k = 0; k < 8; ++k, capac >>= 8)
1395                 	ap[7 - k] = capac & 0xff;
1396 		ap[12] = (scsi_debug_sector_size >> 24) & 0xff;
1397 		ap[13] = (scsi_debug_sector_size >> 16) & 0xff;
1398 		ap[14] = (scsi_debug_sector_size >> 8) & 0xff;
1399 		ap[15] = scsi_debug_sector_size & 0xff;
1400 		offset += bd_len;
1401 		ap = arr + offset;
1402 	}
1403 
1404 	if ((subpcode > 0x0) && (subpcode < 0xff) && (0x19 != pcode)) {
1405 		/* TODO: Control Extension page */
1406 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1407 			       	0);
1408 		return check_condition_result;
1409 	}
1410 	switch (pcode) {
1411 	case 0x1:	/* Read-Write error recovery page, direct access */
1412 		len = resp_err_recov_pg(ap, pcontrol, target);
1413 		offset += len;
1414 		break;
1415 	case 0x2:	/* Disconnect-Reconnect page, all devices */
1416 		len = resp_disconnect_pg(ap, pcontrol, target);
1417 		offset += len;
1418 		break;
1419         case 0x3:       /* Format device page, direct access */
1420                 len = resp_format_pg(ap, pcontrol, target);
1421                 offset += len;
1422                 break;
1423 	case 0x8:	/* Caching page, direct access */
1424 		len = resp_caching_pg(ap, pcontrol, target);
1425 		offset += len;
1426 		break;
1427 	case 0xa:	/* Control Mode page, all devices */
1428 		len = resp_ctrl_m_pg(ap, pcontrol, target);
1429 		offset += len;
1430 		break;
1431 	case 0x19:	/* if spc==1 then sas phy, control+discover */
1432 		if ((subpcode > 0x2) && (subpcode < 0xff)) {
1433 		        mk_sense_buffer(devip, ILLEGAL_REQUEST,
1434 					INVALID_FIELD_IN_CDB, 0);
1435 			return check_condition_result;
1436 	        }
1437 		len = 0;
1438 		if ((0x0 == subpcode) || (0xff == subpcode))
1439 			len += resp_sas_sf_m_pg(ap + len, pcontrol, target);
1440 		if ((0x1 == subpcode) || (0xff == subpcode))
1441 			len += resp_sas_pcd_m_spg(ap + len, pcontrol, target,
1442 						  target_dev_id);
1443 		if ((0x2 == subpcode) || (0xff == subpcode))
1444 			len += resp_sas_sha_m_spg(ap + len, pcontrol);
1445 		offset += len;
1446 		break;
1447 	case 0x1c:	/* Informational Exceptions Mode page, all devices */
1448 		len = resp_iec_m_pg(ap, pcontrol, target);
1449 		offset += len;
1450 		break;
1451 	case 0x3f:	/* Read all Mode pages */
1452 		if ((0 == subpcode) || (0xff == subpcode)) {
1453 			len = resp_err_recov_pg(ap, pcontrol, target);
1454 			len += resp_disconnect_pg(ap + len, pcontrol, target);
1455 			len += resp_format_pg(ap + len, pcontrol, target);
1456 			len += resp_caching_pg(ap + len, pcontrol, target);
1457 			len += resp_ctrl_m_pg(ap + len, pcontrol, target);
1458 			len += resp_sas_sf_m_pg(ap + len, pcontrol, target);
1459 			if (0xff == subpcode) {
1460 				len += resp_sas_pcd_m_spg(ap + len, pcontrol,
1461 						  target, target_dev_id);
1462 				len += resp_sas_sha_m_spg(ap + len, pcontrol);
1463 			}
1464 			len += resp_iec_m_pg(ap + len, pcontrol, target);
1465 		} else {
1466 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
1467 					INVALID_FIELD_IN_CDB, 0);
1468 			return check_condition_result;
1469                 }
1470 		offset += len;
1471 		break;
1472 	default:
1473 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1474 			       	0);
1475 		return check_condition_result;
1476 	}
1477 	if (msense_6)
1478 		arr[0] = offset - 1;
1479 	else {
1480 		arr[0] = ((offset - 2) >> 8) & 0xff;
1481 		arr[1] = (offset - 2) & 0xff;
1482 	}
1483 	return fill_from_dev_buffer(scp, arr, min(alloc_len, offset));
1484 }
1485 
1486 #define SDEBUG_MAX_MSELECT_SZ 512
1487 
1488 static int resp_mode_select(struct scsi_cmnd * scp, int mselect6,
1489 			    struct sdebug_dev_info * devip)
1490 {
1491 	int pf, sp, ps, md_len, bd_len, off, spf, pg_len;
1492 	int param_len, res, errsts, mpage;
1493 	unsigned char arr[SDEBUG_MAX_MSELECT_SZ];
1494 	unsigned char *cmd = (unsigned char *)scp->cmnd;
1495 
1496 	if ((errsts = check_readiness(scp, 1, devip)))
1497 		return errsts;
1498 	memset(arr, 0, sizeof(arr));
1499 	pf = cmd[1] & 0x10;
1500 	sp = cmd[1] & 0x1;
1501 	param_len = mselect6 ? cmd[4] : ((cmd[7] << 8) + cmd[8]);
1502 	if ((0 == pf) || sp || (param_len > SDEBUG_MAX_MSELECT_SZ)) {
1503 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
1504 				INVALID_FIELD_IN_CDB, 0);
1505 		return check_condition_result;
1506 	}
1507         res = fetch_to_dev_buffer(scp, arr, param_len);
1508         if (-1 == res)
1509                 return (DID_ERROR << 16);
1510         else if ((res < param_len) &&
1511                  (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts))
1512                 printk(KERN_INFO "scsi_debug: mode_select: cdb indicated=%d, "
1513                        " IO sent=%d bytes\n", param_len, res);
1514 	md_len = mselect6 ? (arr[0] + 1) : ((arr[0] << 8) + arr[1] + 2);
1515 	bd_len = mselect6 ? arr[3] : ((arr[6] << 8) + arr[7]);
1516 	if (md_len > 2) {
1517 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
1518 				INVALID_FIELD_IN_PARAM_LIST, 0);
1519 		return check_condition_result;
1520 	}
1521 	off = bd_len + (mselect6 ? 4 : 8);
1522 	mpage = arr[off] & 0x3f;
1523 	ps = !!(arr[off] & 0x80);
1524 	if (ps) {
1525 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
1526 				INVALID_FIELD_IN_PARAM_LIST, 0);
1527 		return check_condition_result;
1528 	}
1529 	spf = !!(arr[off] & 0x40);
1530 	pg_len = spf ? ((arr[off + 2] << 8) + arr[off + 3] + 4) :
1531 		       (arr[off + 1] + 2);
1532 	if ((pg_len + off) > param_len) {
1533 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
1534 				PARAMETER_LIST_LENGTH_ERR, 0);
1535 		return check_condition_result;
1536 	}
1537 	switch (mpage) {
1538 	case 0xa:      /* Control Mode page */
1539 		if (ctrl_m_pg[1] == arr[off + 1]) {
1540 			memcpy(ctrl_m_pg + 2, arr + off + 2,
1541 			       sizeof(ctrl_m_pg) - 2);
1542 			scsi_debug_dsense = !!(ctrl_m_pg[2] & 0x4);
1543 			return 0;
1544 		}
1545 		break;
1546 	case 0x1c:      /* Informational Exceptions Mode page */
1547 		if (iec_m_pg[1] == arr[off + 1]) {
1548 			memcpy(iec_m_pg + 2, arr + off + 2,
1549 			       sizeof(iec_m_pg) - 2);
1550 			return 0;
1551 		}
1552 		break;
1553 	default:
1554 		break;
1555 	}
1556 	mk_sense_buffer(devip, ILLEGAL_REQUEST,
1557 			INVALID_FIELD_IN_PARAM_LIST, 0);
1558 	return check_condition_result;
1559 }
1560 
1561 static int resp_temp_l_pg(unsigned char * arr)
1562 {
1563 	unsigned char temp_l_pg[] = {0x0, 0x0, 0x3, 0x2, 0x0, 38,
1564 				     0x0, 0x1, 0x3, 0x2, 0x0, 65,
1565 		};
1566 
1567         memcpy(arr, temp_l_pg, sizeof(temp_l_pg));
1568         return sizeof(temp_l_pg);
1569 }
1570 
1571 static int resp_ie_l_pg(unsigned char * arr)
1572 {
1573 	unsigned char ie_l_pg[] = {0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 38,
1574 		};
1575 
1576         memcpy(arr, ie_l_pg, sizeof(ie_l_pg));
1577 	if (iec_m_pg[2] & 0x4) {	/* TEST bit set */
1578 		arr[4] = THRESHOLD_EXCEEDED;
1579 		arr[5] = 0xff;
1580 	}
1581         return sizeof(ie_l_pg);
1582 }
1583 
1584 #define SDEBUG_MAX_LSENSE_SZ 512
1585 
1586 static int resp_log_sense(struct scsi_cmnd * scp,
1587                           struct sdebug_dev_info * devip)
1588 {
1589 	int ppc, sp, pcontrol, pcode, subpcode, alloc_len, errsts, len, n;
1590 	unsigned char arr[SDEBUG_MAX_LSENSE_SZ];
1591 	unsigned char *cmd = (unsigned char *)scp->cmnd;
1592 
1593 	if ((errsts = check_readiness(scp, 1, devip)))
1594 		return errsts;
1595 	memset(arr, 0, sizeof(arr));
1596 	ppc = cmd[1] & 0x2;
1597 	sp = cmd[1] & 0x1;
1598 	if (ppc || sp) {
1599 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
1600 				INVALID_FIELD_IN_CDB, 0);
1601 		return check_condition_result;
1602 	}
1603 	pcontrol = (cmd[2] & 0xc0) >> 6;
1604 	pcode = cmd[2] & 0x3f;
1605 	subpcode = cmd[3] & 0xff;
1606 	alloc_len = (cmd[7] << 8) + cmd[8];
1607 	arr[0] = pcode;
1608 	if (0 == subpcode) {
1609 		switch (pcode) {
1610 		case 0x0:	/* Supported log pages log page */
1611 			n = 4;
1612 			arr[n++] = 0x0;		/* this page */
1613 			arr[n++] = 0xd;		/* Temperature */
1614 			arr[n++] = 0x2f;	/* Informational exceptions */
1615 			arr[3] = n - 4;
1616 			break;
1617 		case 0xd:	/* Temperature log page */
1618 			arr[3] = resp_temp_l_pg(arr + 4);
1619 			break;
1620 		case 0x2f:	/* Informational exceptions log page */
1621 			arr[3] = resp_ie_l_pg(arr + 4);
1622 			break;
1623 		default:
1624 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
1625 					INVALID_FIELD_IN_CDB, 0);
1626 			return check_condition_result;
1627 		}
1628 	} else if (0xff == subpcode) {
1629 		arr[0] |= 0x40;
1630 		arr[1] = subpcode;
1631 		switch (pcode) {
1632 		case 0x0:	/* Supported log pages and subpages log page */
1633 			n = 4;
1634 			arr[n++] = 0x0;
1635 			arr[n++] = 0x0;		/* 0,0 page */
1636 			arr[n++] = 0x0;
1637 			arr[n++] = 0xff;	/* this page */
1638 			arr[n++] = 0xd;
1639 			arr[n++] = 0x0;		/* Temperature */
1640 			arr[n++] = 0x2f;
1641 			arr[n++] = 0x0;	/* Informational exceptions */
1642 			arr[3] = n - 4;
1643 			break;
1644 		case 0xd:	/* Temperature subpages */
1645 			n = 4;
1646 			arr[n++] = 0xd;
1647 			arr[n++] = 0x0;		/* Temperature */
1648 			arr[3] = n - 4;
1649 			break;
1650 		case 0x2f:	/* Informational exceptions subpages */
1651 			n = 4;
1652 			arr[n++] = 0x2f;
1653 			arr[n++] = 0x0;		/* Informational exceptions */
1654 			arr[3] = n - 4;
1655 			break;
1656 		default:
1657 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
1658 					INVALID_FIELD_IN_CDB, 0);
1659 			return check_condition_result;
1660 		}
1661 	} else {
1662 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
1663 				INVALID_FIELD_IN_CDB, 0);
1664 		return check_condition_result;
1665 	}
1666 	len = min(((arr[2] << 8) + arr[3]) + 4, alloc_len);
1667 	return fill_from_dev_buffer(scp, arr,
1668 		    min(len, SDEBUG_MAX_INQ_ARR_SZ));
1669 }
1670 
1671 static int check_device_access_params(struct sdebug_dev_info *devi,
1672 				      unsigned long long lba, unsigned int num)
1673 {
1674 	if (lba + num > sdebug_capacity) {
1675 		mk_sense_buffer(devi, ILLEGAL_REQUEST, ADDR_OUT_OF_RANGE, 0);
1676 		return check_condition_result;
1677 	}
1678 	/* transfer length excessive (tie in to block limits VPD page) */
1679 	if (num > sdebug_store_sectors) {
1680 		mk_sense_buffer(devi, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB, 0);
1681 		return check_condition_result;
1682 	}
1683 	return 0;
1684 }
1685 
1686 static int do_device_access(struct scsi_cmnd *scmd,
1687 			    struct sdebug_dev_info *devi,
1688 			    unsigned long long lba, unsigned int num, int write)
1689 {
1690 	int ret;
1691 	unsigned long long block, rest = 0;
1692 	int (*func)(struct scsi_cmnd *, unsigned char *, int);
1693 
1694 	func = write ? fetch_to_dev_buffer : fill_from_dev_buffer;
1695 
1696 	block = do_div(lba, sdebug_store_sectors);
1697 	if (block + num > sdebug_store_sectors)
1698 		rest = block + num - sdebug_store_sectors;
1699 
1700 	ret = func(scmd, fake_storep + (block * scsi_debug_sector_size),
1701 		   (num - rest) * scsi_debug_sector_size);
1702 	if (!ret && rest)
1703 		ret = func(scmd, fake_storep, rest * scsi_debug_sector_size);
1704 
1705 	return ret;
1706 }
1707 
1708 static int prot_verify_read(struct scsi_cmnd *SCpnt, sector_t start_sec,
1709 			    unsigned int sectors, u32 ei_lba)
1710 {
1711 	unsigned int i, resid;
1712 	struct scatterlist *psgl;
1713 	struct sd_dif_tuple *sdt;
1714 	sector_t sector;
1715 	sector_t tmp_sec = start_sec;
1716 	void *paddr;
1717 
1718 	start_sec = do_div(tmp_sec, sdebug_store_sectors);
1719 
1720 	sdt = (struct sd_dif_tuple *)(dif_storep + dif_offset(start_sec));
1721 
1722 	for (i = 0 ; i < sectors ; i++) {
1723 		u16 csum;
1724 
1725 		if (sdt[i].app_tag == 0xffff)
1726 			continue;
1727 
1728 		sector = start_sec + i;
1729 
1730 		switch (scsi_debug_guard) {
1731 		case 1:
1732 			csum = ip_compute_csum(fake_storep +
1733 					       sector * scsi_debug_sector_size,
1734 					       scsi_debug_sector_size);
1735 			break;
1736 		case 0:
1737 			csum = crc_t10dif(fake_storep +
1738 					  sector * scsi_debug_sector_size,
1739 					  scsi_debug_sector_size);
1740 			csum = cpu_to_be16(csum);
1741 			break;
1742 		default:
1743 			BUG();
1744 		}
1745 
1746 		if (sdt[i].guard_tag != csum) {
1747 			printk(KERN_ERR "%s: GUARD check failed on sector %lu" \
1748 			       " rcvd 0x%04x, data 0x%04x\n", __func__,
1749 			       (unsigned long)sector,
1750 			       be16_to_cpu(sdt[i].guard_tag),
1751 			       be16_to_cpu(csum));
1752 			dif_errors++;
1753 			return 0x01;
1754 		}
1755 
1756 		if (scsi_debug_dif == SD_DIF_TYPE1_PROTECTION &&
1757 		    be32_to_cpu(sdt[i].ref_tag) != (sector & 0xffffffff)) {
1758 			printk(KERN_ERR "%s: REF check failed on sector %lu\n",
1759 			       __func__, (unsigned long)sector);
1760 			dif_errors++;
1761 			return 0x03;
1762 		}
1763 
1764 		if (scsi_debug_dif == SD_DIF_TYPE2_PROTECTION &&
1765 		    be32_to_cpu(sdt[i].ref_tag) != ei_lba) {
1766 			printk(KERN_ERR "%s: REF check failed on sector %lu\n",
1767 			       __func__, (unsigned long)sector);
1768 			dif_errors++;
1769 			return 0x03;
1770 		}
1771 
1772 		ei_lba++;
1773 	}
1774 
1775 	resid = sectors * 8; /* Bytes of protection data to copy into sgl */
1776 	sector = start_sec;
1777 
1778 	scsi_for_each_prot_sg(SCpnt, psgl, scsi_prot_sg_count(SCpnt), i) {
1779 		int len = min(psgl->length, resid);
1780 
1781 		paddr = kmap_atomic(sg_page(psgl), KM_IRQ0) + psgl->offset;
1782 		memcpy(paddr, dif_storep + dif_offset(sector), len);
1783 
1784 		sector += len >> 3;
1785 		if (sector >= sdebug_store_sectors) {
1786 			/* Force wrap */
1787 			tmp_sec = sector;
1788 			sector = do_div(tmp_sec, sdebug_store_sectors);
1789 		}
1790 		resid -= len;
1791 		kunmap_atomic(paddr, KM_IRQ0);
1792 	}
1793 
1794 	dix_reads++;
1795 
1796 	return 0;
1797 }
1798 
1799 static int resp_read(struct scsi_cmnd *SCpnt, unsigned long long lba,
1800 		     unsigned int num, struct sdebug_dev_info *devip,
1801 		     u32 ei_lba)
1802 {
1803 	unsigned long iflags;
1804 	int ret;
1805 
1806 	ret = check_device_access_params(devip, lba, num);
1807 	if (ret)
1808 		return ret;
1809 
1810 	if ((SCSI_DEBUG_OPT_MEDIUM_ERR & scsi_debug_opts) &&
1811 	    (lba <= (OPT_MEDIUM_ERR_ADDR + OPT_MEDIUM_ERR_NUM - 1)) &&
1812 	    ((lba + num) > OPT_MEDIUM_ERR_ADDR)) {
1813 		/* claim unrecoverable read error */
1814 		mk_sense_buffer(devip, MEDIUM_ERROR, UNRECOVERED_READ_ERR, 0);
1815 		/* set info field and valid bit for fixed descriptor */
1816 		if (0x70 == (devip->sense_buff[0] & 0x7f)) {
1817 			devip->sense_buff[0] |= 0x80;	/* Valid bit */
1818 			ret = (lba < OPT_MEDIUM_ERR_ADDR)
1819 			      ? OPT_MEDIUM_ERR_ADDR : (int)lba;
1820 			devip->sense_buff[3] = (ret >> 24) & 0xff;
1821 			devip->sense_buff[4] = (ret >> 16) & 0xff;
1822 			devip->sense_buff[5] = (ret >> 8) & 0xff;
1823 			devip->sense_buff[6] = ret & 0xff;
1824 		}
1825 	        scsi_set_resid(SCpnt, scsi_bufflen(SCpnt));
1826 		return check_condition_result;
1827 	}
1828 
1829 	/* DIX + T10 DIF */
1830 	if (scsi_debug_dix && scsi_prot_sg_count(SCpnt)) {
1831 		int prot_ret = prot_verify_read(SCpnt, lba, num, ei_lba);
1832 
1833 		if (prot_ret) {
1834 			mk_sense_buffer(devip, ABORTED_COMMAND, 0x10, prot_ret);
1835 			return illegal_condition_result;
1836 		}
1837 	}
1838 
1839 	read_lock_irqsave(&atomic_rw, iflags);
1840 	ret = do_device_access(SCpnt, devip, lba, num, 0);
1841 	read_unlock_irqrestore(&atomic_rw, iflags);
1842 	return ret;
1843 }
1844 
1845 void dump_sector(unsigned char *buf, int len)
1846 {
1847 	int i, j;
1848 
1849 	printk(KERN_ERR ">>> Sector Dump <<<\n");
1850 
1851 	for (i = 0 ; i < len ; i += 16) {
1852 		printk(KERN_ERR "%04d: ", i);
1853 
1854 		for (j = 0 ; j < 16 ; j++) {
1855 			unsigned char c = buf[i+j];
1856 			if (c >= 0x20 && c < 0x7e)
1857 				printk(" %c ", buf[i+j]);
1858 			else
1859 				printk("%02x ", buf[i+j]);
1860 		}
1861 
1862 		printk("\n");
1863 	}
1864 }
1865 
1866 static int prot_verify_write(struct scsi_cmnd *SCpnt, sector_t start_sec,
1867 			     unsigned int sectors, u32 ei_lba)
1868 {
1869 	int i, j, ret;
1870 	struct sd_dif_tuple *sdt;
1871 	struct scatterlist *dsgl = scsi_sglist(SCpnt);
1872 	struct scatterlist *psgl = scsi_prot_sglist(SCpnt);
1873 	void *daddr, *paddr;
1874 	sector_t tmp_sec = start_sec;
1875 	sector_t sector;
1876 	int ppage_offset;
1877 	unsigned short csum;
1878 
1879 	sector = do_div(tmp_sec, sdebug_store_sectors);
1880 
1881 	BUG_ON(scsi_sg_count(SCpnt) == 0);
1882 	BUG_ON(scsi_prot_sg_count(SCpnt) == 0);
1883 
1884 	paddr = kmap_atomic(sg_page(psgl), KM_IRQ1) + psgl->offset;
1885 	ppage_offset = 0;
1886 
1887 	/* For each data page */
1888 	scsi_for_each_sg(SCpnt, dsgl, scsi_sg_count(SCpnt), i) {
1889 		daddr = kmap_atomic(sg_page(dsgl), KM_IRQ0) + dsgl->offset;
1890 
1891 		/* For each sector-sized chunk in data page */
1892 		for (j = 0 ; j < dsgl->length ; j += scsi_debug_sector_size) {
1893 
1894 			/* If we're at the end of the current
1895 			 * protection page advance to the next one
1896 			 */
1897 			if (ppage_offset >= psgl->length) {
1898 				kunmap_atomic(paddr, KM_IRQ1);
1899 				psgl = sg_next(psgl);
1900 				BUG_ON(psgl == NULL);
1901 				paddr = kmap_atomic(sg_page(psgl), KM_IRQ1)
1902 					+ psgl->offset;
1903 				ppage_offset = 0;
1904 			}
1905 
1906 			sdt = paddr + ppage_offset;
1907 
1908 			switch (scsi_debug_guard) {
1909 			case 1:
1910 				csum = ip_compute_csum(daddr,
1911 						       scsi_debug_sector_size);
1912 				break;
1913 			case 0:
1914 				csum = cpu_to_be16(crc_t10dif(daddr,
1915 						      scsi_debug_sector_size));
1916 				break;
1917 			default:
1918 				BUG();
1919 				ret = 0;
1920 				goto out;
1921 			}
1922 
1923 			if (sdt->guard_tag != csum) {
1924 				printk(KERN_ERR
1925 				       "%s: GUARD check failed on sector %lu " \
1926 				       "rcvd 0x%04x, calculated 0x%04x\n",
1927 				       __func__, (unsigned long)sector,
1928 				       be16_to_cpu(sdt->guard_tag),
1929 				       be16_to_cpu(csum));
1930 				ret = 0x01;
1931 				dump_sector(daddr, scsi_debug_sector_size);
1932 				goto out;
1933 			}
1934 
1935 			if (scsi_debug_dif == SD_DIF_TYPE1_PROTECTION &&
1936 			    be32_to_cpu(sdt->ref_tag)
1937 			    != (start_sec & 0xffffffff)) {
1938 				printk(KERN_ERR
1939 				       "%s: REF check failed on sector %lu\n",
1940 				       __func__, (unsigned long)sector);
1941 				ret = 0x03;
1942 				dump_sector(daddr, scsi_debug_sector_size);
1943 				goto out;
1944 			}
1945 
1946 			if (scsi_debug_dif == SD_DIF_TYPE2_PROTECTION &&
1947 			    be32_to_cpu(sdt->ref_tag) != ei_lba) {
1948 				printk(KERN_ERR
1949 				       "%s: REF check failed on sector %lu\n",
1950 				       __func__, (unsigned long)sector);
1951 				ret = 0x03;
1952 				dump_sector(daddr, scsi_debug_sector_size);
1953 				goto out;
1954 			}
1955 
1956 			/* Would be great to copy this in bigger
1957 			 * chunks.  However, for the sake of
1958 			 * correctness we need to verify each sector
1959 			 * before writing it to "stable" storage
1960 			 */
1961 			memcpy(dif_storep + dif_offset(sector), sdt, 8);
1962 
1963 			sector++;
1964 
1965 			if (sector == sdebug_store_sectors)
1966 				sector = 0;	/* Force wrap */
1967 
1968 			start_sec++;
1969 			ei_lba++;
1970 			daddr += scsi_debug_sector_size;
1971 			ppage_offset += sizeof(struct sd_dif_tuple);
1972 		}
1973 
1974 		kunmap_atomic(daddr, KM_IRQ0);
1975 	}
1976 
1977 	kunmap_atomic(paddr, KM_IRQ1);
1978 
1979 	dix_writes++;
1980 
1981 	return 0;
1982 
1983 out:
1984 	dif_errors++;
1985 	kunmap_atomic(daddr, KM_IRQ0);
1986 	kunmap_atomic(paddr, KM_IRQ1);
1987 	return ret;
1988 }
1989 
1990 static unsigned int map_state(sector_t lba, unsigned int *num)
1991 {
1992 	unsigned int granularity, alignment, mapped;
1993 	sector_t block, next, end;
1994 
1995 	granularity = scsi_debug_unmap_granularity;
1996 	alignment = granularity - scsi_debug_unmap_alignment;
1997 	block = lba + alignment;
1998 	do_div(block, granularity);
1999 
2000 	mapped = test_bit(block, map_storep);
2001 
2002 	if (mapped)
2003 		next = find_next_zero_bit(map_storep, map_size, block);
2004 	else
2005 		next = find_next_bit(map_storep, map_size, block);
2006 
2007 	end = next * granularity - scsi_debug_unmap_alignment;
2008 	*num = end - lba;
2009 
2010 	return mapped;
2011 }
2012 
2013 static void map_region(sector_t lba, unsigned int len)
2014 {
2015 	unsigned int granularity, alignment;
2016 	sector_t end = lba + len;
2017 
2018 	granularity = scsi_debug_unmap_granularity;
2019 	alignment = granularity - scsi_debug_unmap_alignment;
2020 
2021 	while (lba < end) {
2022 		sector_t block, rem;
2023 
2024 		block = lba + alignment;
2025 		rem = do_div(block, granularity);
2026 
2027 		if (block < map_size)
2028 			set_bit(block, map_storep);
2029 
2030 		lba += granularity - rem;
2031 	}
2032 }
2033 
2034 static void unmap_region(sector_t lba, unsigned int len)
2035 {
2036 	unsigned int granularity, alignment;
2037 	sector_t end = lba + len;
2038 
2039 	granularity = scsi_debug_unmap_granularity;
2040 	alignment = granularity - scsi_debug_unmap_alignment;
2041 
2042 	while (lba < end) {
2043 		sector_t block, rem;
2044 
2045 		block = lba + alignment;
2046 		rem = do_div(block, granularity);
2047 
2048 		if (rem == 0 && lba + granularity <= end &&
2049 		    block < map_size)
2050 			clear_bit(block, map_storep);
2051 
2052 		lba += granularity - rem;
2053 	}
2054 }
2055 
2056 static int resp_write(struct scsi_cmnd *SCpnt, unsigned long long lba,
2057 		      unsigned int num, struct sdebug_dev_info *devip,
2058 		      u32 ei_lba)
2059 {
2060 	unsigned long iflags;
2061 	int ret;
2062 
2063 	ret = check_device_access_params(devip, lba, num);
2064 	if (ret)
2065 		return ret;
2066 
2067 	/* DIX + T10 DIF */
2068 	if (scsi_debug_dix && scsi_prot_sg_count(SCpnt)) {
2069 		int prot_ret = prot_verify_write(SCpnt, lba, num, ei_lba);
2070 
2071 		if (prot_ret) {
2072 			mk_sense_buffer(devip, ILLEGAL_REQUEST, 0x10, prot_ret);
2073 			return illegal_condition_result;
2074 		}
2075 	}
2076 
2077 	write_lock_irqsave(&atomic_rw, iflags);
2078 	ret = do_device_access(SCpnt, devip, lba, num, 1);
2079 	if (scsi_debug_unmap_granularity)
2080 		map_region(lba, num);
2081 	write_unlock_irqrestore(&atomic_rw, iflags);
2082 	if (-1 == ret)
2083 		return (DID_ERROR << 16);
2084 	else if ((ret < (num * scsi_debug_sector_size)) &&
2085 		 (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts))
2086 		printk(KERN_INFO "scsi_debug: write: cdb indicated=%u, "
2087 		       " IO sent=%d bytes\n", num * scsi_debug_sector_size, ret);
2088 
2089 	return 0;
2090 }
2091 
2092 static int resp_write_same(struct scsi_cmnd *scmd, unsigned long long lba,
2093 		      unsigned int num, struct sdebug_dev_info *devip,
2094 			   u32 ei_lba, unsigned int unmap)
2095 {
2096 	unsigned long iflags;
2097 	unsigned long long i;
2098 	int ret;
2099 
2100 	ret = check_device_access_params(devip, lba, num);
2101 	if (ret)
2102 		return ret;
2103 
2104 	if (num > scsi_debug_write_same_length) {
2105 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
2106 				0);
2107 		return check_condition_result;
2108 	}
2109 
2110 	write_lock_irqsave(&atomic_rw, iflags);
2111 
2112 	if (unmap && scsi_debug_unmap_granularity) {
2113 		unmap_region(lba, num);
2114 		goto out;
2115 	}
2116 
2117 	/* Else fetch one logical block */
2118 	ret = fetch_to_dev_buffer(scmd,
2119 				  fake_storep + (lba * scsi_debug_sector_size),
2120 				  scsi_debug_sector_size);
2121 
2122 	if (-1 == ret) {
2123 		write_unlock_irqrestore(&atomic_rw, iflags);
2124 		return (DID_ERROR << 16);
2125 	} else if ((ret < (num * scsi_debug_sector_size)) &&
2126 		 (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts))
2127 		printk(KERN_INFO "scsi_debug: write same: cdb indicated=%u, "
2128 		       " IO sent=%d bytes\n", num * scsi_debug_sector_size, ret);
2129 
2130 	/* Copy first sector to remaining blocks */
2131 	for (i = 1 ; i < num ; i++)
2132 		memcpy(fake_storep + ((lba + i) * scsi_debug_sector_size),
2133 		       fake_storep + (lba * scsi_debug_sector_size),
2134 		       scsi_debug_sector_size);
2135 
2136 	if (scsi_debug_unmap_granularity)
2137 		map_region(lba, num);
2138 out:
2139 	write_unlock_irqrestore(&atomic_rw, iflags);
2140 
2141 	return 0;
2142 }
2143 
2144 struct unmap_block_desc {
2145 	__be64	lba;
2146 	__be32	blocks;
2147 	__be32	__reserved;
2148 };
2149 
2150 static int resp_unmap(struct scsi_cmnd * scmd, struct sdebug_dev_info * devip)
2151 {
2152 	unsigned char *buf;
2153 	struct unmap_block_desc *desc;
2154 	unsigned int i, payload_len, descriptors;
2155 	int ret;
2156 
2157 	ret = check_readiness(scmd, 1, devip);
2158 	if (ret)
2159 		return ret;
2160 
2161 	payload_len = get_unaligned_be16(&scmd->cmnd[7]);
2162 	BUG_ON(scsi_bufflen(scmd) != payload_len);
2163 
2164 	descriptors = (payload_len - 8) / 16;
2165 
2166 	buf = kmalloc(scsi_bufflen(scmd), GFP_ATOMIC);
2167 	if (!buf)
2168 		return check_condition_result;
2169 
2170 	scsi_sg_copy_to_buffer(scmd, buf, scsi_bufflen(scmd));
2171 
2172 	BUG_ON(get_unaligned_be16(&buf[0]) != payload_len - 2);
2173 	BUG_ON(get_unaligned_be16(&buf[2]) != descriptors * 16);
2174 
2175 	desc = (void *)&buf[8];
2176 
2177 	for (i = 0 ; i < descriptors ; i++) {
2178 		unsigned long long lba = get_unaligned_be64(&desc[i].lba);
2179 		unsigned int num = get_unaligned_be32(&desc[i].blocks);
2180 
2181 		ret = check_device_access_params(devip, lba, num);
2182 		if (ret)
2183 			goto out;
2184 
2185 		unmap_region(lba, num);
2186 	}
2187 
2188 	ret = 0;
2189 
2190 out:
2191 	kfree(buf);
2192 
2193 	return ret;
2194 }
2195 
2196 #define SDEBUG_GET_LBA_STATUS_LEN 32
2197 
2198 static int resp_get_lba_status(struct scsi_cmnd * scmd,
2199 			       struct sdebug_dev_info * devip)
2200 {
2201 	unsigned long long lba;
2202 	unsigned int alloc_len, mapped, num;
2203 	unsigned char arr[SDEBUG_GET_LBA_STATUS_LEN];
2204 	int ret;
2205 
2206 	ret = check_readiness(scmd, 1, devip);
2207 	if (ret)
2208 		return ret;
2209 
2210 	lba = get_unaligned_be64(&scmd->cmnd[2]);
2211 	alloc_len = get_unaligned_be32(&scmd->cmnd[10]);
2212 
2213 	if (alloc_len < 24)
2214 		return 0;
2215 
2216 	ret = check_device_access_params(devip, lba, 1);
2217 	if (ret)
2218 		return ret;
2219 
2220 	mapped = map_state(lba, &num);
2221 
2222 	memset(arr, 0, SDEBUG_GET_LBA_STATUS_LEN);
2223 	put_unaligned_be32(16, &arr[0]);	/* Parameter Data Length */
2224 	put_unaligned_be64(lba, &arr[8]);	/* LBA */
2225 	put_unaligned_be32(num, &arr[16]);	/* Number of blocks */
2226 	arr[20] = !mapped;			/* mapped = 0, unmapped = 1 */
2227 
2228 	return fill_from_dev_buffer(scmd, arr, SDEBUG_GET_LBA_STATUS_LEN);
2229 }
2230 
2231 #define SDEBUG_RLUN_ARR_SZ 256
2232 
2233 static int resp_report_luns(struct scsi_cmnd * scp,
2234 			    struct sdebug_dev_info * devip)
2235 {
2236 	unsigned int alloc_len;
2237 	int lun_cnt, i, upper, num, n, wlun, lun;
2238 	unsigned char *cmd = (unsigned char *)scp->cmnd;
2239 	int select_report = (int)cmd[2];
2240 	struct scsi_lun *one_lun;
2241 	unsigned char arr[SDEBUG_RLUN_ARR_SZ];
2242 	unsigned char * max_addr;
2243 
2244 	alloc_len = cmd[9] + (cmd[8] << 8) + (cmd[7] << 16) + (cmd[6] << 24);
2245 	if ((alloc_len < 4) || (select_report > 2)) {
2246 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
2247 			       	0);
2248 		return check_condition_result;
2249 	}
2250 	/* can produce response with up to 16k luns (lun 0 to lun 16383) */
2251 	memset(arr, 0, SDEBUG_RLUN_ARR_SZ);
2252 	lun_cnt = scsi_debug_max_luns;
2253 	if (1 == select_report)
2254 		lun_cnt = 0;
2255 	else if (scsi_debug_no_lun_0 && (lun_cnt > 0))
2256 		--lun_cnt;
2257 	wlun = (select_report > 0) ? 1 : 0;
2258 	num = lun_cnt + wlun;
2259 	arr[2] = ((sizeof(struct scsi_lun) * num) >> 8) & 0xff;
2260 	arr[3] = (sizeof(struct scsi_lun) * num) & 0xff;
2261 	n = min((int)((SDEBUG_RLUN_ARR_SZ - 8) /
2262 			    sizeof(struct scsi_lun)), num);
2263 	if (n < num) {
2264 		wlun = 0;
2265 		lun_cnt = n;
2266 	}
2267 	one_lun = (struct scsi_lun *) &arr[8];
2268 	max_addr = arr + SDEBUG_RLUN_ARR_SZ;
2269 	for (i = 0, lun = (scsi_debug_no_lun_0 ? 1 : 0);
2270              ((i < lun_cnt) && ((unsigned char *)(one_lun + i) < max_addr));
2271 	     i++, lun++) {
2272 		upper = (lun >> 8) & 0x3f;
2273 		if (upper)
2274 			one_lun[i].scsi_lun[0] =
2275 			    (upper | (SAM2_LUN_ADDRESS_METHOD << 6));
2276 		one_lun[i].scsi_lun[1] = lun & 0xff;
2277 	}
2278 	if (wlun) {
2279 		one_lun[i].scsi_lun[0] = (SAM2_WLUN_REPORT_LUNS >> 8) & 0xff;
2280 		one_lun[i].scsi_lun[1] = SAM2_WLUN_REPORT_LUNS & 0xff;
2281 		i++;
2282 	}
2283 	alloc_len = (unsigned char *)(one_lun + i) - arr;
2284 	return fill_from_dev_buffer(scp, arr,
2285 				    min((int)alloc_len, SDEBUG_RLUN_ARR_SZ));
2286 }
2287 
2288 static int resp_xdwriteread(struct scsi_cmnd *scp, unsigned long long lba,
2289 			    unsigned int num, struct sdebug_dev_info *devip)
2290 {
2291 	int i, j, ret = -1;
2292 	unsigned char *kaddr, *buf;
2293 	unsigned int offset;
2294 	struct scatterlist *sg;
2295 	struct scsi_data_buffer *sdb = scsi_in(scp);
2296 
2297 	/* better not to use temporary buffer. */
2298 	buf = kmalloc(scsi_bufflen(scp), GFP_ATOMIC);
2299 	if (!buf)
2300 		return ret;
2301 
2302 	scsi_sg_copy_to_buffer(scp, buf, scsi_bufflen(scp));
2303 
2304 	offset = 0;
2305 	for_each_sg(sdb->table.sgl, sg, sdb->table.nents, i) {
2306 		kaddr = (unsigned char *)kmap_atomic(sg_page(sg), KM_USER0);
2307 		if (!kaddr)
2308 			goto out;
2309 
2310 		for (j = 0; j < sg->length; j++)
2311 			*(kaddr + sg->offset + j) ^= *(buf + offset + j);
2312 
2313 		offset += sg->length;
2314 		kunmap_atomic(kaddr, KM_USER0);
2315 	}
2316 	ret = 0;
2317 out:
2318 	kfree(buf);
2319 
2320 	return ret;
2321 }
2322 
2323 /* When timer goes off this function is called. */
2324 static void timer_intr_handler(unsigned long indx)
2325 {
2326 	struct sdebug_queued_cmd * sqcp;
2327 	unsigned long iflags;
2328 
2329 	if (indx >= scsi_debug_max_queue) {
2330 		printk(KERN_ERR "scsi_debug:timer_intr_handler: indx too "
2331 		       "large\n");
2332 		return;
2333 	}
2334 	spin_lock_irqsave(&queued_arr_lock, iflags);
2335 	sqcp = &queued_arr[(int)indx];
2336 	if (! sqcp->in_use) {
2337 		printk(KERN_ERR "scsi_debug:timer_intr_handler: Unexpected "
2338 		       "interrupt\n");
2339 		spin_unlock_irqrestore(&queued_arr_lock, iflags);
2340 		return;
2341 	}
2342 	sqcp->in_use = 0;
2343 	if (sqcp->done_funct) {
2344 		sqcp->a_cmnd->result = sqcp->scsi_result;
2345 		sqcp->done_funct(sqcp->a_cmnd); /* callback to mid level */
2346 	}
2347 	sqcp->done_funct = NULL;
2348 	spin_unlock_irqrestore(&queued_arr_lock, iflags);
2349 }
2350 
2351 
2352 static struct sdebug_dev_info *
2353 sdebug_device_create(struct sdebug_host_info *sdbg_host, gfp_t flags)
2354 {
2355 	struct sdebug_dev_info *devip;
2356 
2357 	devip = kzalloc(sizeof(*devip), flags);
2358 	if (devip) {
2359 		devip->sdbg_host = sdbg_host;
2360 		list_add_tail(&devip->dev_list, &sdbg_host->dev_info_list);
2361 	}
2362 	return devip;
2363 }
2364 
2365 static struct sdebug_dev_info * devInfoReg(struct scsi_device * sdev)
2366 {
2367 	struct sdebug_host_info * sdbg_host;
2368 	struct sdebug_dev_info * open_devip = NULL;
2369 	struct sdebug_dev_info * devip =
2370 			(struct sdebug_dev_info *)sdev->hostdata;
2371 
2372 	if (devip)
2373 		return devip;
2374 	sdbg_host = *(struct sdebug_host_info **)shost_priv(sdev->host);
2375 	if (!sdbg_host) {
2376                 printk(KERN_ERR "Host info NULL\n");
2377 		return NULL;
2378         }
2379 	list_for_each_entry(devip, &sdbg_host->dev_info_list, dev_list) {
2380 		if ((devip->used) && (devip->channel == sdev->channel) &&
2381                     (devip->target == sdev->id) &&
2382                     (devip->lun == sdev->lun))
2383                         return devip;
2384 		else {
2385 			if ((!devip->used) && (!open_devip))
2386 				open_devip = devip;
2387 		}
2388 	}
2389 	if (!open_devip) { /* try and make a new one */
2390 		open_devip = sdebug_device_create(sdbg_host, GFP_ATOMIC);
2391 		if (!open_devip) {
2392 			printk(KERN_ERR "%s: out of memory at line %d\n",
2393 				__func__, __LINE__);
2394 			return NULL;
2395 		}
2396 	}
2397 
2398 	open_devip->channel = sdev->channel;
2399 	open_devip->target = sdev->id;
2400 	open_devip->lun = sdev->lun;
2401 	open_devip->sdbg_host = sdbg_host;
2402 	open_devip->reset = 1;
2403 	open_devip->used = 1;
2404 	memset(open_devip->sense_buff, 0, SDEBUG_SENSE_LEN);
2405 	if (scsi_debug_dsense)
2406 		open_devip->sense_buff[0] = 0x72;
2407 	else {
2408 		open_devip->sense_buff[0] = 0x70;
2409 		open_devip->sense_buff[7] = 0xa;
2410 	}
2411 	if (sdev->lun == SAM2_WLUN_REPORT_LUNS)
2412 		open_devip->wlun = SAM2_WLUN_REPORT_LUNS & 0xff;
2413 
2414 	return open_devip;
2415 }
2416 
2417 static int scsi_debug_slave_alloc(struct scsi_device *sdp)
2418 {
2419 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2420 		printk(KERN_INFO "scsi_debug: slave_alloc <%u %u %u %u>\n",
2421 		       sdp->host->host_no, sdp->channel, sdp->id, sdp->lun);
2422 	queue_flag_set_unlocked(QUEUE_FLAG_BIDI, sdp->request_queue);
2423 	return 0;
2424 }
2425 
2426 static int scsi_debug_slave_configure(struct scsi_device *sdp)
2427 {
2428 	struct sdebug_dev_info *devip;
2429 
2430 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2431 		printk(KERN_INFO "scsi_debug: slave_configure <%u %u %u %u>\n",
2432 		       sdp->host->host_no, sdp->channel, sdp->id, sdp->lun);
2433 	if (sdp->host->max_cmd_len != SCSI_DEBUG_MAX_CMD_LEN)
2434 		sdp->host->max_cmd_len = SCSI_DEBUG_MAX_CMD_LEN;
2435 	devip = devInfoReg(sdp);
2436 	if (NULL == devip)
2437 		return 1;	/* no resources, will be marked offline */
2438 	sdp->hostdata = devip;
2439 	if (sdp->host->cmd_per_lun)
2440 		scsi_adjust_queue_depth(sdp, SDEBUG_TAGGED_QUEUING,
2441 					sdp->host->cmd_per_lun);
2442 	blk_queue_max_segment_size(sdp->request_queue, 256 * 1024);
2443 	if (scsi_debug_no_uld)
2444 		sdp->no_uld_attach = 1;
2445 	return 0;
2446 }
2447 
2448 static void scsi_debug_slave_destroy(struct scsi_device *sdp)
2449 {
2450 	struct sdebug_dev_info *devip =
2451 		(struct sdebug_dev_info *)sdp->hostdata;
2452 
2453 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2454 		printk(KERN_INFO "scsi_debug: slave_destroy <%u %u %u %u>\n",
2455 		       sdp->host->host_no, sdp->channel, sdp->id, sdp->lun);
2456 	if (devip) {
2457 		/* make this slot avaliable for re-use */
2458 		devip->used = 0;
2459 		sdp->hostdata = NULL;
2460 	}
2461 }
2462 
2463 /* Returns 1 if found 'cmnd' and deleted its timer. else returns 0 */
2464 static int stop_queued_cmnd(struct scsi_cmnd *cmnd)
2465 {
2466 	unsigned long iflags;
2467 	int k;
2468 	struct sdebug_queued_cmd *sqcp;
2469 
2470 	spin_lock_irqsave(&queued_arr_lock, iflags);
2471 	for (k = 0; k < scsi_debug_max_queue; ++k) {
2472 		sqcp = &queued_arr[k];
2473 		if (sqcp->in_use && (cmnd == sqcp->a_cmnd)) {
2474 			del_timer_sync(&sqcp->cmnd_timer);
2475 			sqcp->in_use = 0;
2476 			sqcp->a_cmnd = NULL;
2477 			break;
2478 		}
2479 	}
2480 	spin_unlock_irqrestore(&queued_arr_lock, iflags);
2481 	return (k < scsi_debug_max_queue) ? 1 : 0;
2482 }
2483 
2484 /* Deletes (stops) timers of all queued commands */
2485 static void stop_all_queued(void)
2486 {
2487 	unsigned long iflags;
2488 	int k;
2489 	struct sdebug_queued_cmd *sqcp;
2490 
2491 	spin_lock_irqsave(&queued_arr_lock, iflags);
2492 	for (k = 0; k < scsi_debug_max_queue; ++k) {
2493 		sqcp = &queued_arr[k];
2494 		if (sqcp->in_use && sqcp->a_cmnd) {
2495 			del_timer_sync(&sqcp->cmnd_timer);
2496 			sqcp->in_use = 0;
2497 			sqcp->a_cmnd = NULL;
2498 		}
2499 	}
2500 	spin_unlock_irqrestore(&queued_arr_lock, iflags);
2501 }
2502 
2503 static int scsi_debug_abort(struct scsi_cmnd * SCpnt)
2504 {
2505 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2506 		printk(KERN_INFO "scsi_debug: abort\n");
2507 	++num_aborts;
2508 	stop_queued_cmnd(SCpnt);
2509 	return SUCCESS;
2510 }
2511 
2512 static int scsi_debug_biosparam(struct scsi_device *sdev,
2513 		struct block_device * bdev, sector_t capacity, int *info)
2514 {
2515 	int res;
2516 	unsigned char *buf;
2517 
2518 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2519 		printk(KERN_INFO "scsi_debug: biosparam\n");
2520 	buf = scsi_bios_ptable(bdev);
2521 	if (buf) {
2522 		res = scsi_partsize(buf, capacity,
2523 				    &info[2], &info[0], &info[1]);
2524 		kfree(buf);
2525 		if (! res)
2526 			return res;
2527 	}
2528 	info[0] = sdebug_heads;
2529 	info[1] = sdebug_sectors_per;
2530 	info[2] = sdebug_cylinders_per;
2531 	return 0;
2532 }
2533 
2534 static int scsi_debug_device_reset(struct scsi_cmnd * SCpnt)
2535 {
2536 	struct sdebug_dev_info * devip;
2537 
2538 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2539 		printk(KERN_INFO "scsi_debug: device_reset\n");
2540 	++num_dev_resets;
2541 	if (SCpnt) {
2542 		devip = devInfoReg(SCpnt->device);
2543 		if (devip)
2544 			devip->reset = 1;
2545 	}
2546 	return SUCCESS;
2547 }
2548 
2549 static int scsi_debug_bus_reset(struct scsi_cmnd * SCpnt)
2550 {
2551 	struct sdebug_host_info *sdbg_host;
2552         struct sdebug_dev_info * dev_info;
2553         struct scsi_device * sdp;
2554         struct Scsi_Host * hp;
2555 
2556 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2557 		printk(KERN_INFO "scsi_debug: bus_reset\n");
2558 	++num_bus_resets;
2559 	if (SCpnt && ((sdp = SCpnt->device)) && ((hp = sdp->host))) {
2560 		sdbg_host = *(struct sdebug_host_info **)shost_priv(hp);
2561 		if (sdbg_host) {
2562 			list_for_each_entry(dev_info,
2563                                             &sdbg_host->dev_info_list,
2564                                             dev_list)
2565 				dev_info->reset = 1;
2566 		}
2567 	}
2568 	return SUCCESS;
2569 }
2570 
2571 static int scsi_debug_host_reset(struct scsi_cmnd * SCpnt)
2572 {
2573 	struct sdebug_host_info * sdbg_host;
2574         struct sdebug_dev_info * dev_info;
2575 
2576 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2577 		printk(KERN_INFO "scsi_debug: host_reset\n");
2578 	++num_host_resets;
2579         spin_lock(&sdebug_host_list_lock);
2580         list_for_each_entry(sdbg_host, &sdebug_host_list, host_list) {
2581                 list_for_each_entry(dev_info, &sdbg_host->dev_info_list,
2582                                     dev_list)
2583                         dev_info->reset = 1;
2584         }
2585         spin_unlock(&sdebug_host_list_lock);
2586 	stop_all_queued();
2587 	return SUCCESS;
2588 }
2589 
2590 /* Initializes timers in queued array */
2591 static void __init init_all_queued(void)
2592 {
2593 	unsigned long iflags;
2594 	int k;
2595 	struct sdebug_queued_cmd * sqcp;
2596 
2597 	spin_lock_irqsave(&queued_arr_lock, iflags);
2598 	for (k = 0; k < scsi_debug_max_queue; ++k) {
2599 		sqcp = &queued_arr[k];
2600 		init_timer(&sqcp->cmnd_timer);
2601 		sqcp->in_use = 0;
2602 		sqcp->a_cmnd = NULL;
2603 	}
2604 	spin_unlock_irqrestore(&queued_arr_lock, iflags);
2605 }
2606 
2607 static void __init sdebug_build_parts(unsigned char *ramp,
2608 				      unsigned long store_size)
2609 {
2610 	struct partition * pp;
2611 	int starts[SDEBUG_MAX_PARTS + 2];
2612 	int sectors_per_part, num_sectors, k;
2613 	int heads_by_sects, start_sec, end_sec;
2614 
2615 	/* assume partition table already zeroed */
2616 	if ((scsi_debug_num_parts < 1) || (store_size < 1048576))
2617 		return;
2618 	if (scsi_debug_num_parts > SDEBUG_MAX_PARTS) {
2619 		scsi_debug_num_parts = SDEBUG_MAX_PARTS;
2620 		printk(KERN_WARNING "scsi_debug:build_parts: reducing "
2621 				    "partitions to %d\n", SDEBUG_MAX_PARTS);
2622 	}
2623 	num_sectors = (int)sdebug_store_sectors;
2624 	sectors_per_part = (num_sectors - sdebug_sectors_per)
2625 			   / scsi_debug_num_parts;
2626 	heads_by_sects = sdebug_heads * sdebug_sectors_per;
2627         starts[0] = sdebug_sectors_per;
2628 	for (k = 1; k < scsi_debug_num_parts; ++k)
2629 		starts[k] = ((k * sectors_per_part) / heads_by_sects)
2630 			    * heads_by_sects;
2631 	starts[scsi_debug_num_parts] = num_sectors;
2632 	starts[scsi_debug_num_parts + 1] = 0;
2633 
2634 	ramp[510] = 0x55;	/* magic partition markings */
2635 	ramp[511] = 0xAA;
2636 	pp = (struct partition *)(ramp + 0x1be);
2637 	for (k = 0; starts[k + 1]; ++k, ++pp) {
2638 		start_sec = starts[k];
2639 		end_sec = starts[k + 1] - 1;
2640 		pp->boot_ind = 0;
2641 
2642 		pp->cyl = start_sec / heads_by_sects;
2643 		pp->head = (start_sec - (pp->cyl * heads_by_sects))
2644 			   / sdebug_sectors_per;
2645 		pp->sector = (start_sec % sdebug_sectors_per) + 1;
2646 
2647 		pp->end_cyl = end_sec / heads_by_sects;
2648 		pp->end_head = (end_sec - (pp->end_cyl * heads_by_sects))
2649 			       / sdebug_sectors_per;
2650 		pp->end_sector = (end_sec % sdebug_sectors_per) + 1;
2651 
2652 		pp->start_sect = start_sec;
2653 		pp->nr_sects = end_sec - start_sec + 1;
2654 		pp->sys_ind = 0x83;	/* plain Linux partition */
2655 	}
2656 }
2657 
2658 static int schedule_resp(struct scsi_cmnd * cmnd,
2659 			 struct sdebug_dev_info * devip,
2660 			 done_funct_t done, int scsi_result, int delta_jiff)
2661 {
2662 	if ((SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) && cmnd) {
2663 		if (scsi_result) {
2664 			struct scsi_device * sdp = cmnd->device;
2665 
2666 			printk(KERN_INFO "scsi_debug:    <%u %u %u %u> "
2667 			       "non-zero result=0x%x\n", sdp->host->host_no,
2668 			       sdp->channel, sdp->id, sdp->lun, scsi_result);
2669 		}
2670 	}
2671 	if (cmnd && devip) {
2672 		/* simulate autosense by this driver */
2673 		if (SAM_STAT_CHECK_CONDITION == (scsi_result & 0xff))
2674 			memcpy(cmnd->sense_buffer, devip->sense_buff,
2675 			       (SCSI_SENSE_BUFFERSIZE > SDEBUG_SENSE_LEN) ?
2676 			       SDEBUG_SENSE_LEN : SCSI_SENSE_BUFFERSIZE);
2677 	}
2678 	if (delta_jiff <= 0) {
2679 		if (cmnd)
2680 			cmnd->result = scsi_result;
2681 		if (done)
2682 			done(cmnd);
2683 		return 0;
2684 	} else {
2685 		unsigned long iflags;
2686 		int k;
2687 		struct sdebug_queued_cmd * sqcp = NULL;
2688 
2689 		spin_lock_irqsave(&queued_arr_lock, iflags);
2690 		for (k = 0; k < scsi_debug_max_queue; ++k) {
2691 			sqcp = &queued_arr[k];
2692 			if (! sqcp->in_use)
2693 				break;
2694 		}
2695 		if (k >= scsi_debug_max_queue) {
2696 			spin_unlock_irqrestore(&queued_arr_lock, iflags);
2697 			printk(KERN_WARNING "scsi_debug: can_queue exceeded\n");
2698 			return 1;	/* report busy to mid level */
2699 		}
2700 		sqcp->in_use = 1;
2701 		sqcp->a_cmnd = cmnd;
2702 		sqcp->scsi_result = scsi_result;
2703 		sqcp->done_funct = done;
2704 		sqcp->cmnd_timer.function = timer_intr_handler;
2705 		sqcp->cmnd_timer.data = k;
2706 		sqcp->cmnd_timer.expires = jiffies + delta_jiff;
2707 		add_timer(&sqcp->cmnd_timer);
2708 		spin_unlock_irqrestore(&queued_arr_lock, iflags);
2709 		if (cmnd)
2710 			cmnd->result = 0;
2711 		return 0;
2712 	}
2713 }
2714 /* Note: The following macros create attribute files in the
2715    /sys/module/scsi_debug/parameters directory. Unfortunately this
2716    driver is unaware of a change and cannot trigger auxiliary actions
2717    as it can when the corresponding attribute in the
2718    /sys/bus/pseudo/drivers/scsi_debug directory is changed.
2719  */
2720 module_param_named(add_host, scsi_debug_add_host, int, S_IRUGO | S_IWUSR);
2721 module_param_named(ato, scsi_debug_ato, int, S_IRUGO);
2722 module_param_named(delay, scsi_debug_delay, int, S_IRUGO | S_IWUSR);
2723 module_param_named(dev_size_mb, scsi_debug_dev_size_mb, int, S_IRUGO);
2724 module_param_named(dif, scsi_debug_dif, int, S_IRUGO);
2725 module_param_named(dix, scsi_debug_dix, int, S_IRUGO);
2726 module_param_named(dsense, scsi_debug_dsense, int, S_IRUGO | S_IWUSR);
2727 module_param_named(every_nth, scsi_debug_every_nth, int, S_IRUGO | S_IWUSR);
2728 module_param_named(fake_rw, scsi_debug_fake_rw, int, S_IRUGO | S_IWUSR);
2729 module_param_named(guard, scsi_debug_guard, int, S_IRUGO);
2730 module_param_named(lbpu, scsi_debug_lbpu, int, S_IRUGO);
2731 module_param_named(lbpws, scsi_debug_lbpws, int, S_IRUGO);
2732 module_param_named(lbpws10, scsi_debug_lbpws10, int, S_IRUGO);
2733 module_param_named(lowest_aligned, scsi_debug_lowest_aligned, int, S_IRUGO);
2734 module_param_named(max_luns, scsi_debug_max_luns, int, S_IRUGO | S_IWUSR);
2735 module_param_named(max_queue, scsi_debug_max_queue, int, S_IRUGO | S_IWUSR);
2736 module_param_named(no_lun_0, scsi_debug_no_lun_0, int, S_IRUGO | S_IWUSR);
2737 module_param_named(no_uld, scsi_debug_no_uld, int, S_IRUGO);
2738 module_param_named(num_parts, scsi_debug_num_parts, int, S_IRUGO);
2739 module_param_named(num_tgts, scsi_debug_num_tgts, int, S_IRUGO | S_IWUSR);
2740 module_param_named(opt_blks, scsi_debug_opt_blks, int, S_IRUGO);
2741 module_param_named(opts, scsi_debug_opts, int, S_IRUGO | S_IWUSR);
2742 module_param_named(physblk_exp, scsi_debug_physblk_exp, int, S_IRUGO);
2743 module_param_named(ptype, scsi_debug_ptype, int, S_IRUGO | S_IWUSR);
2744 module_param_named(scsi_level, scsi_debug_scsi_level, int, S_IRUGO);
2745 module_param_named(sector_size, scsi_debug_sector_size, int, S_IRUGO);
2746 module_param_named(unmap_alignment, scsi_debug_unmap_alignment, int, S_IRUGO);
2747 module_param_named(unmap_granularity, scsi_debug_unmap_granularity, int, S_IRUGO);
2748 module_param_named(unmap_max_blocks, scsi_debug_unmap_max_blocks, int, S_IRUGO);
2749 module_param_named(unmap_max_desc, scsi_debug_unmap_max_desc, int, S_IRUGO);
2750 module_param_named(virtual_gb, scsi_debug_virtual_gb, int, S_IRUGO | S_IWUSR);
2751 module_param_named(vpd_use_hostno, scsi_debug_vpd_use_hostno, int,
2752 		   S_IRUGO | S_IWUSR);
2753 module_param_named(write_same_length, scsi_debug_write_same_length, int,
2754 		   S_IRUGO | S_IWUSR);
2755 
2756 MODULE_AUTHOR("Eric Youngdale + Douglas Gilbert");
2757 MODULE_DESCRIPTION("SCSI debug adapter driver");
2758 MODULE_LICENSE("GPL");
2759 MODULE_VERSION(SCSI_DEBUG_VERSION);
2760 
2761 MODULE_PARM_DESC(add_host, "0..127 hosts allowed(def=1)");
2762 MODULE_PARM_DESC(ato, "application tag ownership: 0=disk 1=host (def=1)");
2763 MODULE_PARM_DESC(delay, "# of jiffies to delay response(def=1)");
2764 MODULE_PARM_DESC(dev_size_mb, "size in MB of ram shared by devs(def=8)");
2765 MODULE_PARM_DESC(dif, "data integrity field type: 0-3 (def=0)");
2766 MODULE_PARM_DESC(dix, "data integrity extensions mask (def=0)");
2767 MODULE_PARM_DESC(dsense, "use descriptor sense format(def=0 -> fixed)");
2768 MODULE_PARM_DESC(every_nth, "timeout every nth command(def=0)");
2769 MODULE_PARM_DESC(fake_rw, "fake reads/writes instead of copying (def=0)");
2770 MODULE_PARM_DESC(guard, "protection checksum: 0=crc, 1=ip (def=0)");
2771 MODULE_PARM_DESC(lbpu, "enable LBP, support UNMAP command (def=0)");
2772 MODULE_PARM_DESC(lbpws, "enable LBP, support WRITE SAME(16) with UNMAP bit (def=0)");
2773 MODULE_PARM_DESC(lbpws10, "enable LBP, support WRITE SAME(10) with UNMAP bit (def=0)");
2774 MODULE_PARM_DESC(lowest_aligned, "lowest aligned lba (def=0)");
2775 MODULE_PARM_DESC(max_luns, "number of LUNs per target to simulate(def=1)");
2776 MODULE_PARM_DESC(max_queue, "max number of queued commands (1 to 255(def))");
2777 MODULE_PARM_DESC(no_lun_0, "no LU number 0 (def=0 -> have lun 0)");
2778 MODULE_PARM_DESC(no_uld, "stop ULD (e.g. sd driver) attaching (def=0))");
2779 MODULE_PARM_DESC(num_parts, "number of partitions(def=0)");
2780 MODULE_PARM_DESC(num_tgts, "number of targets per host to simulate(def=1)");
2781 MODULE_PARM_DESC(opt_blks, "optimal transfer length in block (def=64)");
2782 MODULE_PARM_DESC(opts, "1->noise, 2->medium_err, 4->timeout, 8->recovered_err... (def=0)");
2783 MODULE_PARM_DESC(physblk_exp, "physical block exponent (def=0)");
2784 MODULE_PARM_DESC(ptype, "SCSI peripheral type(def=0[disk])");
2785 MODULE_PARM_DESC(scsi_level, "SCSI level to simulate(def=5[SPC-3])");
2786 MODULE_PARM_DESC(sector_size, "logical block size in bytes (def=512)");
2787 MODULE_PARM_DESC(unmap_alignment, "lowest aligned thin provisioning lba (def=0)");
2788 MODULE_PARM_DESC(unmap_granularity, "thin provisioning granularity in blocks (def=1)");
2789 MODULE_PARM_DESC(unmap_max_blocks, "max # of blocks can be unmapped in one cmd (def=0xffffffff)");
2790 MODULE_PARM_DESC(unmap_max_desc, "max # of ranges that can be unmapped in one cmd (def=256)");
2791 MODULE_PARM_DESC(virtual_gb, "virtual gigabyte size (def=0 -> use dev_size_mb)");
2792 MODULE_PARM_DESC(vpd_use_hostno, "0 -> dev ids ignore hostno (def=1 -> unique dev ids)");
2793 MODULE_PARM_DESC(write_same_length, "Maximum blocks per WRITE SAME cmd (def=0xffff)");
2794 
2795 static char sdebug_info[256];
2796 
2797 static const char * scsi_debug_info(struct Scsi_Host * shp)
2798 {
2799 	sprintf(sdebug_info, "scsi_debug, version %s [%s], "
2800 		"dev_size_mb=%d, opts=0x%x", SCSI_DEBUG_VERSION,
2801 		scsi_debug_version_date, scsi_debug_dev_size_mb,
2802 		scsi_debug_opts);
2803 	return sdebug_info;
2804 }
2805 
2806 /* scsi_debug_proc_info
2807  * Used if the driver currently has no own support for /proc/scsi
2808  */
2809 static int scsi_debug_proc_info(struct Scsi_Host *host, char *buffer, char **start, off_t offset,
2810 				int length, int inout)
2811 {
2812 	int len, pos, begin;
2813 	int orig_length;
2814 
2815 	orig_length = length;
2816 
2817 	if (inout == 1) {
2818 		char arr[16];
2819 		int minLen = length > 15 ? 15 : length;
2820 
2821 		if (!capable(CAP_SYS_ADMIN) || !capable(CAP_SYS_RAWIO))
2822 			return -EACCES;
2823 		memcpy(arr, buffer, minLen);
2824 		arr[minLen] = '\0';
2825 		if (1 != sscanf(arr, "%d", &pos))
2826 			return -EINVAL;
2827 		scsi_debug_opts = pos;
2828 		if (scsi_debug_every_nth != 0)
2829                         scsi_debug_cmnd_count = 0;
2830 		return length;
2831 	}
2832 	begin = 0;
2833 	pos = len = sprintf(buffer, "scsi_debug adapter driver, version "
2834 	    "%s [%s]\n"
2835 	    "num_tgts=%d, shared (ram) size=%d MB, opts=0x%x, "
2836 	    "every_nth=%d(curr:%d)\n"
2837 	    "delay=%d, max_luns=%d, scsi_level=%d\n"
2838 	    "sector_size=%d bytes, cylinders=%d, heads=%d, sectors=%d\n"
2839 	    "number of aborts=%d, device_reset=%d, bus_resets=%d, "
2840 	    "host_resets=%d\ndix_reads=%d dix_writes=%d dif_errors=%d\n",
2841 	    SCSI_DEBUG_VERSION, scsi_debug_version_date, scsi_debug_num_tgts,
2842 	    scsi_debug_dev_size_mb, scsi_debug_opts, scsi_debug_every_nth,
2843 	    scsi_debug_cmnd_count, scsi_debug_delay,
2844 	    scsi_debug_max_luns, scsi_debug_scsi_level,
2845 	    scsi_debug_sector_size, sdebug_cylinders_per, sdebug_heads,
2846 	    sdebug_sectors_per, num_aborts, num_dev_resets, num_bus_resets,
2847 	    num_host_resets, dix_reads, dix_writes, dif_errors);
2848 	if (pos < offset) {
2849 		len = 0;
2850 		begin = pos;
2851 	}
2852 	*start = buffer + (offset - begin);	/* Start of wanted data */
2853 	len -= (offset - begin);
2854 	if (len > length)
2855 		len = length;
2856 	return len;
2857 }
2858 
2859 static ssize_t sdebug_delay_show(struct device_driver * ddp, char * buf)
2860 {
2861         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_delay);
2862 }
2863 
2864 static ssize_t sdebug_delay_store(struct device_driver * ddp,
2865 				  const char * buf, size_t count)
2866 {
2867         int delay;
2868 	char work[20];
2869 
2870         if (1 == sscanf(buf, "%10s", work)) {
2871 		if ((1 == sscanf(work, "%d", &delay)) && (delay >= 0)) {
2872 			scsi_debug_delay = delay;
2873 			return count;
2874 		}
2875 	}
2876 	return -EINVAL;
2877 }
2878 DRIVER_ATTR(delay, S_IRUGO | S_IWUSR, sdebug_delay_show,
2879 	    sdebug_delay_store);
2880 
2881 static ssize_t sdebug_opts_show(struct device_driver * ddp, char * buf)
2882 {
2883         return scnprintf(buf, PAGE_SIZE, "0x%x\n", scsi_debug_opts);
2884 }
2885 
2886 static ssize_t sdebug_opts_store(struct device_driver * ddp,
2887 				 const char * buf, size_t count)
2888 {
2889         int opts;
2890 	char work[20];
2891 
2892         if (1 == sscanf(buf, "%10s", work)) {
2893 		if (0 == strnicmp(work,"0x", 2)) {
2894 			if (1 == sscanf(&work[2], "%x", &opts))
2895 				goto opts_done;
2896 		} else {
2897 			if (1 == sscanf(work, "%d", &opts))
2898 				goto opts_done;
2899 		}
2900 	}
2901 	return -EINVAL;
2902 opts_done:
2903 	scsi_debug_opts = opts;
2904 	scsi_debug_cmnd_count = 0;
2905 	return count;
2906 }
2907 DRIVER_ATTR(opts, S_IRUGO | S_IWUSR, sdebug_opts_show,
2908 	    sdebug_opts_store);
2909 
2910 static ssize_t sdebug_ptype_show(struct device_driver * ddp, char * buf)
2911 {
2912         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_ptype);
2913 }
2914 static ssize_t sdebug_ptype_store(struct device_driver * ddp,
2915 				  const char * buf, size_t count)
2916 {
2917         int n;
2918 
2919 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2920 		scsi_debug_ptype = n;
2921 		return count;
2922 	}
2923 	return -EINVAL;
2924 }
2925 DRIVER_ATTR(ptype, S_IRUGO | S_IWUSR, sdebug_ptype_show, sdebug_ptype_store);
2926 
2927 static ssize_t sdebug_dsense_show(struct device_driver * ddp, char * buf)
2928 {
2929         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_dsense);
2930 }
2931 static ssize_t sdebug_dsense_store(struct device_driver * ddp,
2932 				  const char * buf, size_t count)
2933 {
2934         int n;
2935 
2936 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2937 		scsi_debug_dsense = n;
2938 		return count;
2939 	}
2940 	return -EINVAL;
2941 }
2942 DRIVER_ATTR(dsense, S_IRUGO | S_IWUSR, sdebug_dsense_show,
2943 	    sdebug_dsense_store);
2944 
2945 static ssize_t sdebug_fake_rw_show(struct device_driver * ddp, char * buf)
2946 {
2947         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_fake_rw);
2948 }
2949 static ssize_t sdebug_fake_rw_store(struct device_driver * ddp,
2950 				    const char * buf, size_t count)
2951 {
2952         int n;
2953 
2954 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2955 		scsi_debug_fake_rw = n;
2956 		return count;
2957 	}
2958 	return -EINVAL;
2959 }
2960 DRIVER_ATTR(fake_rw, S_IRUGO | S_IWUSR, sdebug_fake_rw_show,
2961 	    sdebug_fake_rw_store);
2962 
2963 static ssize_t sdebug_no_lun_0_show(struct device_driver * ddp, char * buf)
2964 {
2965         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_no_lun_0);
2966 }
2967 static ssize_t sdebug_no_lun_0_store(struct device_driver * ddp,
2968 				     const char * buf, size_t count)
2969 {
2970         int n;
2971 
2972 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2973 		scsi_debug_no_lun_0 = n;
2974 		return count;
2975 	}
2976 	return -EINVAL;
2977 }
2978 DRIVER_ATTR(no_lun_0, S_IRUGO | S_IWUSR, sdebug_no_lun_0_show,
2979 	    sdebug_no_lun_0_store);
2980 
2981 static ssize_t sdebug_num_tgts_show(struct device_driver * ddp, char * buf)
2982 {
2983         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_num_tgts);
2984 }
2985 static ssize_t sdebug_num_tgts_store(struct device_driver * ddp,
2986 				     const char * buf, size_t count)
2987 {
2988         int n;
2989 
2990 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2991 		scsi_debug_num_tgts = n;
2992 		sdebug_max_tgts_luns();
2993 		return count;
2994 	}
2995 	return -EINVAL;
2996 }
2997 DRIVER_ATTR(num_tgts, S_IRUGO | S_IWUSR, sdebug_num_tgts_show,
2998 	    sdebug_num_tgts_store);
2999 
3000 static ssize_t sdebug_dev_size_mb_show(struct device_driver * ddp, char * buf)
3001 {
3002         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_dev_size_mb);
3003 }
3004 DRIVER_ATTR(dev_size_mb, S_IRUGO, sdebug_dev_size_mb_show, NULL);
3005 
3006 static ssize_t sdebug_num_parts_show(struct device_driver * ddp, char * buf)
3007 {
3008         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_num_parts);
3009 }
3010 DRIVER_ATTR(num_parts, S_IRUGO, sdebug_num_parts_show, NULL);
3011 
3012 static ssize_t sdebug_every_nth_show(struct device_driver * ddp, char * buf)
3013 {
3014         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_every_nth);
3015 }
3016 static ssize_t sdebug_every_nth_store(struct device_driver * ddp,
3017 				      const char * buf, size_t count)
3018 {
3019         int nth;
3020 
3021 	if ((count > 0) && (1 == sscanf(buf, "%d", &nth))) {
3022 		scsi_debug_every_nth = nth;
3023 		scsi_debug_cmnd_count = 0;
3024 		return count;
3025 	}
3026 	return -EINVAL;
3027 }
3028 DRIVER_ATTR(every_nth, S_IRUGO | S_IWUSR, sdebug_every_nth_show,
3029 	    sdebug_every_nth_store);
3030 
3031 static ssize_t sdebug_max_luns_show(struct device_driver * ddp, char * buf)
3032 {
3033         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_max_luns);
3034 }
3035 static ssize_t sdebug_max_luns_store(struct device_driver * ddp,
3036 				     const char * buf, size_t count)
3037 {
3038         int n;
3039 
3040 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
3041 		scsi_debug_max_luns = n;
3042 		sdebug_max_tgts_luns();
3043 		return count;
3044 	}
3045 	return -EINVAL;
3046 }
3047 DRIVER_ATTR(max_luns, S_IRUGO | S_IWUSR, sdebug_max_luns_show,
3048 	    sdebug_max_luns_store);
3049 
3050 static ssize_t sdebug_max_queue_show(struct device_driver * ddp, char * buf)
3051 {
3052         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_max_queue);
3053 }
3054 static ssize_t sdebug_max_queue_store(struct device_driver * ddp,
3055 				      const char * buf, size_t count)
3056 {
3057         int n;
3058 
3059 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n > 0) &&
3060 	    (n <= SCSI_DEBUG_CANQUEUE)) {
3061 		scsi_debug_max_queue = n;
3062 		return count;
3063 	}
3064 	return -EINVAL;
3065 }
3066 DRIVER_ATTR(max_queue, S_IRUGO | S_IWUSR, sdebug_max_queue_show,
3067 	    sdebug_max_queue_store);
3068 
3069 static ssize_t sdebug_no_uld_show(struct device_driver * ddp, char * buf)
3070 {
3071         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_no_uld);
3072 }
3073 DRIVER_ATTR(no_uld, S_IRUGO, sdebug_no_uld_show, NULL);
3074 
3075 static ssize_t sdebug_scsi_level_show(struct device_driver * ddp, char * buf)
3076 {
3077         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_scsi_level);
3078 }
3079 DRIVER_ATTR(scsi_level, S_IRUGO, sdebug_scsi_level_show, NULL);
3080 
3081 static ssize_t sdebug_virtual_gb_show(struct device_driver * ddp, char * buf)
3082 {
3083         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_virtual_gb);
3084 }
3085 static ssize_t sdebug_virtual_gb_store(struct device_driver * ddp,
3086 				       const char * buf, size_t count)
3087 {
3088         int n;
3089 
3090 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
3091 		scsi_debug_virtual_gb = n;
3092 
3093 		sdebug_capacity = get_sdebug_capacity();
3094 
3095 		return count;
3096 	}
3097 	return -EINVAL;
3098 }
3099 DRIVER_ATTR(virtual_gb, S_IRUGO | S_IWUSR, sdebug_virtual_gb_show,
3100 	    sdebug_virtual_gb_store);
3101 
3102 static ssize_t sdebug_add_host_show(struct device_driver * ddp, char * buf)
3103 {
3104         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_add_host);
3105 }
3106 
3107 static ssize_t sdebug_add_host_store(struct device_driver * ddp,
3108 				     const char * buf, size_t count)
3109 {
3110 	int delta_hosts;
3111 
3112 	if (sscanf(buf, "%d", &delta_hosts) != 1)
3113 		return -EINVAL;
3114 	if (delta_hosts > 0) {
3115 		do {
3116 			sdebug_add_adapter();
3117 		} while (--delta_hosts);
3118 	} else if (delta_hosts < 0) {
3119 		do {
3120 			sdebug_remove_adapter();
3121 		} while (++delta_hosts);
3122 	}
3123 	return count;
3124 }
3125 DRIVER_ATTR(add_host, S_IRUGO | S_IWUSR, sdebug_add_host_show,
3126 	    sdebug_add_host_store);
3127 
3128 static ssize_t sdebug_vpd_use_hostno_show(struct device_driver * ddp,
3129 					  char * buf)
3130 {
3131 	return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_vpd_use_hostno);
3132 }
3133 static ssize_t sdebug_vpd_use_hostno_store(struct device_driver * ddp,
3134 					   const char * buf, size_t count)
3135 {
3136 	int n;
3137 
3138 	if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
3139 		scsi_debug_vpd_use_hostno = n;
3140 		return count;
3141 	}
3142 	return -EINVAL;
3143 }
3144 DRIVER_ATTR(vpd_use_hostno, S_IRUGO | S_IWUSR, sdebug_vpd_use_hostno_show,
3145 	    sdebug_vpd_use_hostno_store);
3146 
3147 static ssize_t sdebug_sector_size_show(struct device_driver * ddp, char * buf)
3148 {
3149 	return scnprintf(buf, PAGE_SIZE, "%u\n", scsi_debug_sector_size);
3150 }
3151 DRIVER_ATTR(sector_size, S_IRUGO, sdebug_sector_size_show, NULL);
3152 
3153 static ssize_t sdebug_dix_show(struct device_driver *ddp, char *buf)
3154 {
3155 	return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_dix);
3156 }
3157 DRIVER_ATTR(dix, S_IRUGO, sdebug_dix_show, NULL);
3158 
3159 static ssize_t sdebug_dif_show(struct device_driver *ddp, char *buf)
3160 {
3161 	return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_dif);
3162 }
3163 DRIVER_ATTR(dif, S_IRUGO, sdebug_dif_show, NULL);
3164 
3165 static ssize_t sdebug_guard_show(struct device_driver *ddp, char *buf)
3166 {
3167 	return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_guard);
3168 }
3169 DRIVER_ATTR(guard, S_IRUGO, sdebug_guard_show, NULL);
3170 
3171 static ssize_t sdebug_ato_show(struct device_driver *ddp, char *buf)
3172 {
3173 	return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_ato);
3174 }
3175 DRIVER_ATTR(ato, S_IRUGO, sdebug_ato_show, NULL);
3176 
3177 static ssize_t sdebug_map_show(struct device_driver *ddp, char *buf)
3178 {
3179 	ssize_t count;
3180 
3181 	if (!scsi_debug_lbp())
3182 		return scnprintf(buf, PAGE_SIZE, "0-%u\n",
3183 				 sdebug_store_sectors);
3184 
3185 	count = bitmap_scnlistprintf(buf, PAGE_SIZE, map_storep, map_size);
3186 
3187 	buf[count++] = '\n';
3188 	buf[count++] = 0;
3189 
3190 	return count;
3191 }
3192 DRIVER_ATTR(map, S_IRUGO, sdebug_map_show, NULL);
3193 
3194 
3195 /* Note: The following function creates attribute files in the
3196    /sys/bus/pseudo/drivers/scsi_debug directory. The advantage of these
3197    files (over those found in the /sys/module/scsi_debug/parameters
3198    directory) is that auxiliary actions can be triggered when an attribute
3199    is changed. For example see: sdebug_add_host_store() above.
3200  */
3201 static int do_create_driverfs_files(void)
3202 {
3203 	int ret;
3204 
3205 	ret = driver_create_file(&sdebug_driverfs_driver, &driver_attr_add_host);
3206 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_delay);
3207 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_dev_size_mb);
3208 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_dsense);
3209 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_every_nth);
3210 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_fake_rw);
3211 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_max_luns);
3212 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_max_queue);
3213 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_no_lun_0);
3214 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_no_uld);
3215 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_num_parts);
3216 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_num_tgts);
3217 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_ptype);
3218 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_opts);
3219 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_scsi_level);
3220 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_virtual_gb);
3221 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_vpd_use_hostno);
3222 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_sector_size);
3223 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_dix);
3224 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_dif);
3225 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_guard);
3226 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_ato);
3227 	ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_map);
3228 	return ret;
3229 }
3230 
3231 static void do_remove_driverfs_files(void)
3232 {
3233 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_map);
3234 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_ato);
3235 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_guard);
3236 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_dif);
3237 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_dix);
3238 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_sector_size);
3239 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_vpd_use_hostno);
3240 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_virtual_gb);
3241 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_scsi_level);
3242 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_opts);
3243 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_ptype);
3244 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_num_tgts);
3245 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_num_parts);
3246 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_no_uld);
3247 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_no_lun_0);
3248 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_max_queue);
3249 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_max_luns);
3250 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_fake_rw);
3251 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_every_nth);
3252 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_dsense);
3253 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_dev_size_mb);
3254 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_delay);
3255 	driver_remove_file(&sdebug_driverfs_driver, &driver_attr_add_host);
3256 }
3257 
3258 struct device *pseudo_primary;
3259 
3260 static int __init scsi_debug_init(void)
3261 {
3262 	unsigned long sz;
3263 	int host_to_add;
3264 	int k;
3265 	int ret;
3266 
3267 	switch (scsi_debug_sector_size) {
3268 	case  512:
3269 	case 1024:
3270 	case 2048:
3271 	case 4096:
3272 		break;
3273 	default:
3274 		printk(KERN_ERR "scsi_debug_init: invalid sector_size %d\n",
3275 		       scsi_debug_sector_size);
3276 		return -EINVAL;
3277 	}
3278 
3279 	switch (scsi_debug_dif) {
3280 
3281 	case SD_DIF_TYPE0_PROTECTION:
3282 	case SD_DIF_TYPE1_PROTECTION:
3283 	case SD_DIF_TYPE2_PROTECTION:
3284 	case SD_DIF_TYPE3_PROTECTION:
3285 		break;
3286 
3287 	default:
3288 		printk(KERN_ERR "scsi_debug_init: dif must be 0, 1, 2 or 3\n");
3289 		return -EINVAL;
3290 	}
3291 
3292 	if (scsi_debug_guard > 1) {
3293 		printk(KERN_ERR "scsi_debug_init: guard must be 0 or 1\n");
3294 		return -EINVAL;
3295 	}
3296 
3297 	if (scsi_debug_ato > 1) {
3298 		printk(KERN_ERR "scsi_debug_init: ato must be 0 or 1\n");
3299 		return -EINVAL;
3300 	}
3301 
3302 	if (scsi_debug_physblk_exp > 15) {
3303 		printk(KERN_ERR "scsi_debug_init: invalid physblk_exp %u\n",
3304 		       scsi_debug_physblk_exp);
3305 		return -EINVAL;
3306 	}
3307 
3308 	if (scsi_debug_lowest_aligned > 0x3fff) {
3309 		printk(KERN_ERR "scsi_debug_init: lowest_aligned too big: %u\n",
3310 		       scsi_debug_lowest_aligned);
3311 		return -EINVAL;
3312 	}
3313 
3314 	if (scsi_debug_dev_size_mb < 1)
3315 		scsi_debug_dev_size_mb = 1;  /* force minimum 1 MB ramdisk */
3316 	sz = (unsigned long)scsi_debug_dev_size_mb * 1048576;
3317 	sdebug_store_sectors = sz / scsi_debug_sector_size;
3318 	sdebug_capacity = get_sdebug_capacity();
3319 
3320 	/* play around with geometry, don't waste too much on track 0 */
3321 	sdebug_heads = 8;
3322 	sdebug_sectors_per = 32;
3323 	if (scsi_debug_dev_size_mb >= 16)
3324 		sdebug_heads = 32;
3325 	else if (scsi_debug_dev_size_mb >= 256)
3326 		sdebug_heads = 64;
3327 	sdebug_cylinders_per = (unsigned long)sdebug_capacity /
3328 			       (sdebug_sectors_per * sdebug_heads);
3329 	if (sdebug_cylinders_per >= 1024) {
3330 		/* other LLDs do this; implies >= 1GB ram disk ... */
3331 		sdebug_heads = 255;
3332 		sdebug_sectors_per = 63;
3333 		sdebug_cylinders_per = (unsigned long)sdebug_capacity /
3334 			       (sdebug_sectors_per * sdebug_heads);
3335 	}
3336 
3337 	fake_storep = vmalloc(sz);
3338 	if (NULL == fake_storep) {
3339 		printk(KERN_ERR "scsi_debug_init: out of memory, 1\n");
3340 		return -ENOMEM;
3341 	}
3342 	memset(fake_storep, 0, sz);
3343 	if (scsi_debug_num_parts > 0)
3344 		sdebug_build_parts(fake_storep, sz);
3345 
3346 	if (scsi_debug_dif) {
3347 		int dif_size;
3348 
3349 		dif_size = sdebug_store_sectors * sizeof(struct sd_dif_tuple);
3350 		dif_storep = vmalloc(dif_size);
3351 
3352 		printk(KERN_ERR "scsi_debug_init: dif_storep %u bytes @ %p\n",
3353 		       dif_size, dif_storep);
3354 
3355 		if (dif_storep == NULL) {
3356 			printk(KERN_ERR "scsi_debug_init: out of mem. (DIX)\n");
3357 			ret = -ENOMEM;
3358 			goto free_vm;
3359 		}
3360 
3361 		memset(dif_storep, 0xff, dif_size);
3362 	}
3363 
3364 	/* Logical Block Provisioning */
3365 	if (scsi_debug_lbp()) {
3366 		unsigned int map_bytes;
3367 
3368 		scsi_debug_unmap_max_blocks =
3369 			clamp(scsi_debug_unmap_max_blocks, 0U, 0xffffffffU);
3370 
3371 		scsi_debug_unmap_max_desc =
3372 			clamp(scsi_debug_unmap_max_desc, 0U, 256U);
3373 
3374 		scsi_debug_unmap_granularity =
3375 			clamp(scsi_debug_unmap_granularity, 1U, 0xffffffffU);
3376 
3377 		if (scsi_debug_unmap_alignment &&
3378 		    scsi_debug_unmap_granularity < scsi_debug_unmap_alignment) {
3379 			printk(KERN_ERR
3380 			       "%s: ERR: unmap_granularity < unmap_alignment\n",
3381 			       __func__);
3382 			return -EINVAL;
3383 		}
3384 
3385 		map_size = (sdebug_store_sectors / scsi_debug_unmap_granularity);
3386 		map_bytes = map_size >> 3;
3387 		map_storep = vmalloc(map_bytes);
3388 
3389 		printk(KERN_INFO "scsi_debug_init: %lu provisioning blocks\n",
3390 		       map_size);
3391 
3392 		if (map_storep == NULL) {
3393 			printk(KERN_ERR "scsi_debug_init: out of mem. (MAP)\n");
3394 			ret = -ENOMEM;
3395 			goto free_vm;
3396 		}
3397 
3398 		memset(map_storep, 0x0, map_bytes);
3399 
3400 		/* Map first 1KB for partition table */
3401 		if (scsi_debug_num_parts)
3402 			map_region(0, 2);
3403 	}
3404 
3405 	pseudo_primary = root_device_register("pseudo_0");
3406 	if (IS_ERR(pseudo_primary)) {
3407 		printk(KERN_WARNING "scsi_debug: root_device_register() error\n");
3408 		ret = PTR_ERR(pseudo_primary);
3409 		goto free_vm;
3410 	}
3411 	ret = bus_register(&pseudo_lld_bus);
3412 	if (ret < 0) {
3413 		printk(KERN_WARNING "scsi_debug: bus_register error: %d\n",
3414 			ret);
3415 		goto dev_unreg;
3416 	}
3417 	ret = driver_register(&sdebug_driverfs_driver);
3418 	if (ret < 0) {
3419 		printk(KERN_WARNING "scsi_debug: driver_register error: %d\n",
3420 			ret);
3421 		goto bus_unreg;
3422 	}
3423 	ret = do_create_driverfs_files();
3424 	if (ret < 0) {
3425 		printk(KERN_WARNING "scsi_debug: driver_create_file error: %d\n",
3426 			ret);
3427 		goto del_files;
3428 	}
3429 
3430 	init_all_queued();
3431 
3432 	host_to_add = scsi_debug_add_host;
3433         scsi_debug_add_host = 0;
3434 
3435         for (k = 0; k < host_to_add; k++) {
3436                 if (sdebug_add_adapter()) {
3437                         printk(KERN_ERR "scsi_debug_init: "
3438                                "sdebug_add_adapter failed k=%d\n", k);
3439                         break;
3440                 }
3441         }
3442 
3443 	if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) {
3444 		printk(KERN_INFO "scsi_debug_init: built %d host(s)\n",
3445 		       scsi_debug_add_host);
3446 	}
3447 	return 0;
3448 
3449 del_files:
3450 	do_remove_driverfs_files();
3451 	driver_unregister(&sdebug_driverfs_driver);
3452 bus_unreg:
3453 	bus_unregister(&pseudo_lld_bus);
3454 dev_unreg:
3455 	root_device_unregister(pseudo_primary);
3456 free_vm:
3457 	if (map_storep)
3458 		vfree(map_storep);
3459 	if (dif_storep)
3460 		vfree(dif_storep);
3461 	vfree(fake_storep);
3462 
3463 	return ret;
3464 }
3465 
3466 static void __exit scsi_debug_exit(void)
3467 {
3468 	int k = scsi_debug_add_host;
3469 
3470 	stop_all_queued();
3471 	for (; k; k--)
3472 		sdebug_remove_adapter();
3473 	do_remove_driverfs_files();
3474 	driver_unregister(&sdebug_driverfs_driver);
3475 	bus_unregister(&pseudo_lld_bus);
3476 	root_device_unregister(pseudo_primary);
3477 
3478 	if (dif_storep)
3479 		vfree(dif_storep);
3480 
3481 	vfree(fake_storep);
3482 }
3483 
3484 device_initcall(scsi_debug_init);
3485 module_exit(scsi_debug_exit);
3486 
3487 static void sdebug_release_adapter(struct device * dev)
3488 {
3489         struct sdebug_host_info *sdbg_host;
3490 
3491 	sdbg_host = to_sdebug_host(dev);
3492         kfree(sdbg_host);
3493 }
3494 
3495 static int sdebug_add_adapter(void)
3496 {
3497 	int k, devs_per_host;
3498         int error = 0;
3499         struct sdebug_host_info *sdbg_host;
3500 	struct sdebug_dev_info *sdbg_devinfo, *tmp;
3501 
3502         sdbg_host = kzalloc(sizeof(*sdbg_host),GFP_KERNEL);
3503         if (NULL == sdbg_host) {
3504                 printk(KERN_ERR "%s: out of memory at line %d\n",
3505                        __func__, __LINE__);
3506                 return -ENOMEM;
3507         }
3508 
3509         INIT_LIST_HEAD(&sdbg_host->dev_info_list);
3510 
3511 	devs_per_host = scsi_debug_num_tgts * scsi_debug_max_luns;
3512         for (k = 0; k < devs_per_host; k++) {
3513 		sdbg_devinfo = sdebug_device_create(sdbg_host, GFP_KERNEL);
3514 		if (!sdbg_devinfo) {
3515                         printk(KERN_ERR "%s: out of memory at line %d\n",
3516                                __func__, __LINE__);
3517                         error = -ENOMEM;
3518 			goto clean;
3519                 }
3520         }
3521 
3522         spin_lock(&sdebug_host_list_lock);
3523         list_add_tail(&sdbg_host->host_list, &sdebug_host_list);
3524         spin_unlock(&sdebug_host_list_lock);
3525 
3526         sdbg_host->dev.bus = &pseudo_lld_bus;
3527         sdbg_host->dev.parent = pseudo_primary;
3528         sdbg_host->dev.release = &sdebug_release_adapter;
3529         dev_set_name(&sdbg_host->dev, "adapter%d", scsi_debug_add_host);
3530 
3531         error = device_register(&sdbg_host->dev);
3532 
3533         if (error)
3534 		goto clean;
3535 
3536 	++scsi_debug_add_host;
3537         return error;
3538 
3539 clean:
3540 	list_for_each_entry_safe(sdbg_devinfo, tmp, &sdbg_host->dev_info_list,
3541 				 dev_list) {
3542 		list_del(&sdbg_devinfo->dev_list);
3543 		kfree(sdbg_devinfo);
3544 	}
3545 
3546 	kfree(sdbg_host);
3547         return error;
3548 }
3549 
3550 static void sdebug_remove_adapter(void)
3551 {
3552         struct sdebug_host_info * sdbg_host = NULL;
3553 
3554         spin_lock(&sdebug_host_list_lock);
3555         if (!list_empty(&sdebug_host_list)) {
3556                 sdbg_host = list_entry(sdebug_host_list.prev,
3557                                        struct sdebug_host_info, host_list);
3558 		list_del(&sdbg_host->host_list);
3559 	}
3560         spin_unlock(&sdebug_host_list_lock);
3561 
3562 	if (!sdbg_host)
3563 		return;
3564 
3565         device_unregister(&sdbg_host->dev);
3566         --scsi_debug_add_host;
3567 }
3568 
3569 static
3570 int scsi_debug_queuecommand_lck(struct scsi_cmnd *SCpnt, done_funct_t done)
3571 {
3572 	unsigned char *cmd = (unsigned char *) SCpnt->cmnd;
3573 	int len, k;
3574 	unsigned int num;
3575 	unsigned long long lba;
3576 	u32 ei_lba;
3577 	int errsts = 0;
3578 	int target = SCpnt->device->id;
3579 	struct sdebug_dev_info *devip = NULL;
3580 	int inj_recovered = 0;
3581 	int inj_transport = 0;
3582 	int inj_dif = 0;
3583 	int inj_dix = 0;
3584 	int delay_override = 0;
3585 	int unmap = 0;
3586 
3587 	scsi_set_resid(SCpnt, 0);
3588 	if ((SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) && cmd) {
3589 		printk(KERN_INFO "scsi_debug: cmd ");
3590 		for (k = 0, len = SCpnt->cmd_len; k < len; ++k)
3591 			printk("%02x ", (int)cmd[k]);
3592 		printk("\n");
3593 	}
3594 
3595 	if (target == SCpnt->device->host->hostt->this_id) {
3596 		printk(KERN_INFO "scsi_debug: initiator's id used as "
3597 		       "target!\n");
3598 		return schedule_resp(SCpnt, NULL, done,
3599 				     DID_NO_CONNECT << 16, 0);
3600 	}
3601 
3602 	if ((SCpnt->device->lun >= scsi_debug_max_luns) &&
3603 	    (SCpnt->device->lun != SAM2_WLUN_REPORT_LUNS))
3604 		return schedule_resp(SCpnt, NULL, done,
3605 				     DID_NO_CONNECT << 16, 0);
3606 	devip = devInfoReg(SCpnt->device);
3607 	if (NULL == devip)
3608 		return schedule_resp(SCpnt, NULL, done,
3609 				     DID_NO_CONNECT << 16, 0);
3610 
3611 	if ((scsi_debug_every_nth != 0) &&
3612 	    (++scsi_debug_cmnd_count >= abs(scsi_debug_every_nth))) {
3613 		scsi_debug_cmnd_count = 0;
3614 		if (scsi_debug_every_nth < -1)
3615 			scsi_debug_every_nth = -1;
3616 		if (SCSI_DEBUG_OPT_TIMEOUT & scsi_debug_opts)
3617 			return 0; /* ignore command causing timeout */
3618 		else if (SCSI_DEBUG_OPT_RECOVERED_ERR & scsi_debug_opts)
3619 			inj_recovered = 1; /* to reads and writes below */
3620 		else if (SCSI_DEBUG_OPT_TRANSPORT_ERR & scsi_debug_opts)
3621 			inj_transport = 1; /* to reads and writes below */
3622 		else if (SCSI_DEBUG_OPT_DIF_ERR & scsi_debug_opts)
3623 			inj_dif = 1; /* to reads and writes below */
3624 		else if (SCSI_DEBUG_OPT_DIX_ERR & scsi_debug_opts)
3625 			inj_dix = 1; /* to reads and writes below */
3626 	}
3627 
3628 	if (devip->wlun) {
3629 		switch (*cmd) {
3630 		case INQUIRY:
3631 		case REQUEST_SENSE:
3632 		case TEST_UNIT_READY:
3633 		case REPORT_LUNS:
3634 			break;  /* only allowable wlun commands */
3635 		default:
3636 			if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
3637 				printk(KERN_INFO "scsi_debug: Opcode: 0x%x "
3638 				       "not supported for wlun\n", *cmd);
3639 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3640 					INVALID_OPCODE, 0);
3641 			errsts = check_condition_result;
3642 			return schedule_resp(SCpnt, devip, done, errsts,
3643 					     0);
3644 		}
3645 	}
3646 
3647 	switch (*cmd) {
3648 	case INQUIRY:     /* mandatory, ignore unit attention */
3649 		delay_override = 1;
3650 		errsts = resp_inquiry(SCpnt, target, devip);
3651 		break;
3652 	case REQUEST_SENSE:	/* mandatory, ignore unit attention */
3653 		delay_override = 1;
3654 		errsts = resp_requests(SCpnt, devip);
3655 		break;
3656 	case REZERO_UNIT:	/* actually this is REWIND for SSC */
3657 	case START_STOP:
3658 		errsts = resp_start_stop(SCpnt, devip);
3659 		break;
3660 	case ALLOW_MEDIUM_REMOVAL:
3661 		errsts = check_readiness(SCpnt, 1, devip);
3662 		if (errsts)
3663 			break;
3664 		if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
3665 			printk(KERN_INFO "scsi_debug: Medium removal %s\n",
3666 			       cmd[4] ? "inhibited" : "enabled");
3667 		break;
3668 	case SEND_DIAGNOSTIC:     /* mandatory */
3669 		errsts = check_readiness(SCpnt, 1, devip);
3670 		break;
3671 	case TEST_UNIT_READY:     /* mandatory */
3672 		delay_override = 1;
3673 		errsts = check_readiness(SCpnt, 0, devip);
3674 		break;
3675 	case RESERVE:
3676 		errsts = check_readiness(SCpnt, 1, devip);
3677 		break;
3678 	case RESERVE_10:
3679 		errsts = check_readiness(SCpnt, 1, devip);
3680 		break;
3681 	case RELEASE:
3682 		errsts = check_readiness(SCpnt, 1, devip);
3683 		break;
3684 	case RELEASE_10:
3685 		errsts = check_readiness(SCpnt, 1, devip);
3686 		break;
3687 	case READ_CAPACITY:
3688 		errsts = resp_readcap(SCpnt, devip);
3689 		break;
3690 	case SERVICE_ACTION_IN:
3691 		if (cmd[1] == SAI_READ_CAPACITY_16)
3692 			errsts = resp_readcap16(SCpnt, devip);
3693 		else if (cmd[1] == SAI_GET_LBA_STATUS) {
3694 
3695 			if (scsi_debug_lbp() == 0) {
3696 				mk_sense_buffer(devip, ILLEGAL_REQUEST,
3697 						INVALID_COMMAND_OPCODE, 0);
3698 				errsts = check_condition_result;
3699 			} else
3700 				errsts = resp_get_lba_status(SCpnt, devip);
3701 		} else {
3702 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3703 					INVALID_OPCODE, 0);
3704 			errsts = check_condition_result;
3705 		}
3706 		break;
3707 	case MAINTENANCE_IN:
3708 		if (MI_REPORT_TARGET_PGS != cmd[1]) {
3709 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3710 					INVALID_OPCODE, 0);
3711 			errsts = check_condition_result;
3712 			break;
3713 		}
3714 		errsts = resp_report_tgtpgs(SCpnt, devip);
3715 		break;
3716 	case READ_16:
3717 	case READ_12:
3718 	case READ_10:
3719 		/* READ{10,12,16} and DIF Type 2 are natural enemies */
3720 		if (scsi_debug_dif == SD_DIF_TYPE2_PROTECTION &&
3721 		    cmd[1] & 0xe0) {
3722 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3723 					INVALID_COMMAND_OPCODE, 0);
3724 			errsts = check_condition_result;
3725 			break;
3726 		}
3727 
3728 		if ((scsi_debug_dif == SD_DIF_TYPE1_PROTECTION ||
3729 		     scsi_debug_dif == SD_DIF_TYPE3_PROTECTION) &&
3730 		    (cmd[1] & 0xe0) == 0)
3731 			printk(KERN_ERR "Unprotected RD/WR to DIF device\n");
3732 
3733 		/* fall through */
3734 	case READ_6:
3735 read:
3736 		errsts = check_readiness(SCpnt, 0, devip);
3737 		if (errsts)
3738 			break;
3739 		if (scsi_debug_fake_rw)
3740 			break;
3741 		get_data_transfer_info(cmd, &lba, &num, &ei_lba);
3742 		errsts = resp_read(SCpnt, lba, num, devip, ei_lba);
3743 		if (inj_recovered && (0 == errsts)) {
3744 			mk_sense_buffer(devip, RECOVERED_ERROR,
3745 					THRESHOLD_EXCEEDED, 0);
3746 			errsts = check_condition_result;
3747 		} else if (inj_transport && (0 == errsts)) {
3748 			mk_sense_buffer(devip, ABORTED_COMMAND,
3749 					TRANSPORT_PROBLEM, ACK_NAK_TO);
3750 			errsts = check_condition_result;
3751 		} else if (inj_dif && (0 == errsts)) {
3752 			mk_sense_buffer(devip, ABORTED_COMMAND, 0x10, 1);
3753 			errsts = illegal_condition_result;
3754 		} else if (inj_dix && (0 == errsts)) {
3755 			mk_sense_buffer(devip, ILLEGAL_REQUEST, 0x10, 1);
3756 			errsts = illegal_condition_result;
3757 		}
3758 		break;
3759 	case REPORT_LUNS:	/* mandatory, ignore unit attention */
3760 		delay_override = 1;
3761 		errsts = resp_report_luns(SCpnt, devip);
3762 		break;
3763 	case VERIFY:		/* 10 byte SBC-2 command */
3764 		errsts = check_readiness(SCpnt, 0, devip);
3765 		break;
3766 	case WRITE_16:
3767 	case WRITE_12:
3768 	case WRITE_10:
3769 		/* WRITE{10,12,16} and DIF Type 2 are natural enemies */
3770 		if (scsi_debug_dif == SD_DIF_TYPE2_PROTECTION &&
3771 		    cmd[1] & 0xe0) {
3772 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3773 					INVALID_COMMAND_OPCODE, 0);
3774 			errsts = check_condition_result;
3775 			break;
3776 		}
3777 
3778 		if ((scsi_debug_dif == SD_DIF_TYPE1_PROTECTION ||
3779 		     scsi_debug_dif == SD_DIF_TYPE3_PROTECTION) &&
3780 		    (cmd[1] & 0xe0) == 0)
3781 			printk(KERN_ERR "Unprotected RD/WR to DIF device\n");
3782 
3783 		/* fall through */
3784 	case WRITE_6:
3785 write:
3786 		errsts = check_readiness(SCpnt, 0, devip);
3787 		if (errsts)
3788 			break;
3789 		if (scsi_debug_fake_rw)
3790 			break;
3791 		get_data_transfer_info(cmd, &lba, &num, &ei_lba);
3792 		errsts = resp_write(SCpnt, lba, num, devip, ei_lba);
3793 		if (inj_recovered && (0 == errsts)) {
3794 			mk_sense_buffer(devip, RECOVERED_ERROR,
3795 					THRESHOLD_EXCEEDED, 0);
3796 			errsts = check_condition_result;
3797 		} else if (inj_dif && (0 == errsts)) {
3798 			mk_sense_buffer(devip, ABORTED_COMMAND, 0x10, 1);
3799 			errsts = illegal_condition_result;
3800 		} else if (inj_dix && (0 == errsts)) {
3801 			mk_sense_buffer(devip, ILLEGAL_REQUEST, 0x10, 1);
3802 			errsts = illegal_condition_result;
3803 		}
3804 		break;
3805 	case WRITE_SAME_16:
3806 	case WRITE_SAME:
3807 		if (cmd[1] & 0x8) {
3808 			if ((*cmd == WRITE_SAME_16 && scsi_debug_lbpws == 0) ||
3809 			    (*cmd == WRITE_SAME && scsi_debug_lbpws10 == 0)) {
3810 				mk_sense_buffer(devip, ILLEGAL_REQUEST,
3811 						INVALID_FIELD_IN_CDB, 0);
3812 				errsts = check_condition_result;
3813 			} else
3814 				unmap = 1;
3815 		}
3816 		if (errsts)
3817 			break;
3818 		errsts = check_readiness(SCpnt, 0, devip);
3819 		if (errsts)
3820 			break;
3821 		get_data_transfer_info(cmd, &lba, &num, &ei_lba);
3822 		errsts = resp_write_same(SCpnt, lba, num, devip, ei_lba, unmap);
3823 		break;
3824 	case UNMAP:
3825 		errsts = check_readiness(SCpnt, 0, devip);
3826 		if (errsts)
3827 			break;
3828 
3829 		if (scsi_debug_unmap_max_desc == 0 || scsi_debug_lbpu == 0) {
3830 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3831 					INVALID_COMMAND_OPCODE, 0);
3832 			errsts = check_condition_result;
3833 		} else
3834 			errsts = resp_unmap(SCpnt, devip);
3835 		break;
3836 	case MODE_SENSE:
3837 	case MODE_SENSE_10:
3838 		errsts = resp_mode_sense(SCpnt, target, devip);
3839 		break;
3840 	case MODE_SELECT:
3841 		errsts = resp_mode_select(SCpnt, 1, devip);
3842 		break;
3843 	case MODE_SELECT_10:
3844 		errsts = resp_mode_select(SCpnt, 0, devip);
3845 		break;
3846 	case LOG_SENSE:
3847 		errsts = resp_log_sense(SCpnt, devip);
3848 		break;
3849 	case SYNCHRONIZE_CACHE:
3850 		delay_override = 1;
3851 		errsts = check_readiness(SCpnt, 0, devip);
3852 		break;
3853 	case WRITE_BUFFER:
3854 		errsts = check_readiness(SCpnt, 1, devip);
3855 		break;
3856 	case XDWRITEREAD_10:
3857 		if (!scsi_bidi_cmnd(SCpnt)) {
3858 			mk_sense_buffer(devip, ILLEGAL_REQUEST,
3859 					INVALID_FIELD_IN_CDB, 0);
3860 			errsts = check_condition_result;
3861 			break;
3862 		}
3863 
3864 		errsts = check_readiness(SCpnt, 0, devip);
3865 		if (errsts)
3866 			break;
3867 		if (scsi_debug_fake_rw)
3868 			break;
3869 		get_data_transfer_info(cmd, &lba, &num, &ei_lba);
3870 		errsts = resp_read(SCpnt, lba, num, devip, ei_lba);
3871 		if (errsts)
3872 			break;
3873 		errsts = resp_write(SCpnt, lba, num, devip, ei_lba);
3874 		if (errsts)
3875 			break;
3876 		errsts = resp_xdwriteread(SCpnt, lba, num, devip);
3877 		break;
3878 	case VARIABLE_LENGTH_CMD:
3879 		if (scsi_debug_dif == SD_DIF_TYPE2_PROTECTION) {
3880 
3881 			if ((cmd[10] & 0xe0) == 0)
3882 				printk(KERN_ERR
3883 				       "Unprotected RD/WR to DIF device\n");
3884 
3885 			if (cmd[9] == READ_32) {
3886 				BUG_ON(SCpnt->cmd_len < 32);
3887 				goto read;
3888 			}
3889 
3890 			if (cmd[9] == WRITE_32) {
3891 				BUG_ON(SCpnt->cmd_len < 32);
3892 				goto write;
3893 			}
3894 		}
3895 
3896 		mk_sense_buffer(devip, ILLEGAL_REQUEST,
3897 				INVALID_FIELD_IN_CDB, 0);
3898 		errsts = check_condition_result;
3899 		break;
3900 
3901 	default:
3902 		if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
3903 			printk(KERN_INFO "scsi_debug: Opcode: 0x%x not "
3904 			       "supported\n", *cmd);
3905 		errsts = check_readiness(SCpnt, 1, devip);
3906 		if (errsts)
3907 			break;	/* Unit attention takes precedence */
3908 		mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_OPCODE, 0);
3909 		errsts = check_condition_result;
3910 		break;
3911 	}
3912 	return schedule_resp(SCpnt, devip, done, errsts,
3913 			     (delay_override ? 0 : scsi_debug_delay));
3914 }
3915 
3916 static DEF_SCSI_QCMD(scsi_debug_queuecommand)
3917 
3918 static struct scsi_host_template sdebug_driver_template = {
3919 	.proc_info =		scsi_debug_proc_info,
3920 	.proc_name =		sdebug_proc_name,
3921 	.name =			"SCSI DEBUG",
3922 	.info =			scsi_debug_info,
3923 	.slave_alloc =		scsi_debug_slave_alloc,
3924 	.slave_configure =	scsi_debug_slave_configure,
3925 	.slave_destroy =	scsi_debug_slave_destroy,
3926 	.ioctl =		scsi_debug_ioctl,
3927 	.queuecommand =		scsi_debug_queuecommand,
3928 	.eh_abort_handler =	scsi_debug_abort,
3929 	.eh_bus_reset_handler = scsi_debug_bus_reset,
3930 	.eh_device_reset_handler = scsi_debug_device_reset,
3931 	.eh_host_reset_handler = scsi_debug_host_reset,
3932 	.bios_param =		scsi_debug_biosparam,
3933 	.can_queue =		SCSI_DEBUG_CANQUEUE,
3934 	.this_id =		7,
3935 	.sg_tablesize =		256,
3936 	.cmd_per_lun =		16,
3937 	.max_sectors =		0xffff,
3938 	.use_clustering = 	DISABLE_CLUSTERING,
3939 	.module =		THIS_MODULE,
3940 };
3941 
3942 static int sdebug_driver_probe(struct device * dev)
3943 {
3944         int error = 0;
3945         struct sdebug_host_info *sdbg_host;
3946         struct Scsi_Host *hpnt;
3947 	int host_prot;
3948 
3949 	sdbg_host = to_sdebug_host(dev);
3950 
3951 	sdebug_driver_template.can_queue = scsi_debug_max_queue;
3952 	hpnt = scsi_host_alloc(&sdebug_driver_template, sizeof(sdbg_host));
3953 	if (NULL == hpnt) {
3954 		printk(KERN_ERR "%s: scsi_register failed\n", __func__);
3955 		error = -ENODEV;
3956 		return error;
3957 	}
3958 
3959         sdbg_host->shost = hpnt;
3960 	*((struct sdebug_host_info **)hpnt->hostdata) = sdbg_host;
3961 	if ((hpnt->this_id >= 0) && (scsi_debug_num_tgts > hpnt->this_id))
3962 		hpnt->max_id = scsi_debug_num_tgts + 1;
3963 	else
3964 		hpnt->max_id = scsi_debug_num_tgts;
3965 	hpnt->max_lun = SAM2_WLUN_REPORT_LUNS;	/* = scsi_debug_max_luns; */
3966 
3967 	host_prot = 0;
3968 
3969 	switch (scsi_debug_dif) {
3970 
3971 	case SD_DIF_TYPE1_PROTECTION:
3972 		host_prot = SHOST_DIF_TYPE1_PROTECTION;
3973 		if (scsi_debug_dix)
3974 			host_prot |= SHOST_DIX_TYPE1_PROTECTION;
3975 		break;
3976 
3977 	case SD_DIF_TYPE2_PROTECTION:
3978 		host_prot = SHOST_DIF_TYPE2_PROTECTION;
3979 		if (scsi_debug_dix)
3980 			host_prot |= SHOST_DIX_TYPE2_PROTECTION;
3981 		break;
3982 
3983 	case SD_DIF_TYPE3_PROTECTION:
3984 		host_prot = SHOST_DIF_TYPE3_PROTECTION;
3985 		if (scsi_debug_dix)
3986 			host_prot |= SHOST_DIX_TYPE3_PROTECTION;
3987 		break;
3988 
3989 	default:
3990 		if (scsi_debug_dix)
3991 			host_prot |= SHOST_DIX_TYPE0_PROTECTION;
3992 		break;
3993 	}
3994 
3995 	scsi_host_set_prot(hpnt, host_prot);
3996 
3997 	printk(KERN_INFO "scsi_debug: host protection%s%s%s%s%s%s%s\n",
3998 	       (host_prot & SHOST_DIF_TYPE1_PROTECTION) ? " DIF1" : "",
3999 	       (host_prot & SHOST_DIF_TYPE2_PROTECTION) ? " DIF2" : "",
4000 	       (host_prot & SHOST_DIF_TYPE3_PROTECTION) ? " DIF3" : "",
4001 	       (host_prot & SHOST_DIX_TYPE0_PROTECTION) ? " DIX0" : "",
4002 	       (host_prot & SHOST_DIX_TYPE1_PROTECTION) ? " DIX1" : "",
4003 	       (host_prot & SHOST_DIX_TYPE2_PROTECTION) ? " DIX2" : "",
4004 	       (host_prot & SHOST_DIX_TYPE3_PROTECTION) ? " DIX3" : "");
4005 
4006 	if (scsi_debug_guard == 1)
4007 		scsi_host_set_guard(hpnt, SHOST_DIX_GUARD_IP);
4008 	else
4009 		scsi_host_set_guard(hpnt, SHOST_DIX_GUARD_CRC);
4010 
4011         error = scsi_add_host(hpnt, &sdbg_host->dev);
4012         if (error) {
4013                 printk(KERN_ERR "%s: scsi_add_host failed\n", __func__);
4014                 error = -ENODEV;
4015 		scsi_host_put(hpnt);
4016         } else
4017 		scsi_scan_host(hpnt);
4018 
4019 
4020         return error;
4021 }
4022 
4023 static int sdebug_driver_remove(struct device * dev)
4024 {
4025         struct sdebug_host_info *sdbg_host;
4026 	struct sdebug_dev_info *sdbg_devinfo, *tmp;
4027 
4028 	sdbg_host = to_sdebug_host(dev);
4029 
4030 	if (!sdbg_host) {
4031 		printk(KERN_ERR "%s: Unable to locate host info\n",
4032 		       __func__);
4033 		return -ENODEV;
4034 	}
4035 
4036         scsi_remove_host(sdbg_host->shost);
4037 
4038 	list_for_each_entry_safe(sdbg_devinfo, tmp, &sdbg_host->dev_info_list,
4039 				 dev_list) {
4040                 list_del(&sdbg_devinfo->dev_list);
4041                 kfree(sdbg_devinfo);
4042         }
4043 
4044         scsi_host_put(sdbg_host->shost);
4045         return 0;
4046 }
4047 
4048 static int pseudo_lld_bus_match(struct device *dev,
4049 				struct device_driver *dev_driver)
4050 {
4051 	return 1;
4052 }
4053 
4054 static struct bus_type pseudo_lld_bus = {
4055 	.name = "pseudo",
4056 	.match = pseudo_lld_bus_match,
4057 	.probe = sdebug_driver_probe,
4058 	.remove = sdebug_driver_remove,
4059 };
4060