xref: /linux/drivers/scsi/scsi_scan.c (revision 13abf8130139c2ccd4962a7e5a8902be5e6cb5a7)
1 /*
2  * scsi_scan.c
3  *
4  * Copyright (C) 2000 Eric Youngdale,
5  * Copyright (C) 2002 Patrick Mansfield
6  *
7  * The general scanning/probing algorithm is as follows, exceptions are
8  * made to it depending on device specific flags, compilation options, and
9  * global variable (boot or module load time) settings.
10  *
11  * A specific LUN is scanned via an INQUIRY command; if the LUN has a
12  * device attached, a Scsi_Device is allocated and setup for it.
13  *
14  * For every id of every channel on the given host:
15  *
16  * 	Scan LUN 0; if the target responds to LUN 0 (even if there is no
17  * 	device or storage attached to LUN 0):
18  *
19  * 		If LUN 0 has a device attached, allocate and setup a
20  * 		Scsi_Device for it.
21  *
22  * 		If target is SCSI-3 or up, issue a REPORT LUN, and scan
23  * 		all of the LUNs returned by the REPORT LUN; else,
24  * 		sequentially scan LUNs up until some maximum is reached,
25  * 		or a LUN is seen that cannot have a device attached to it.
26  */
27 
28 #include <linux/config.h>
29 #include <linux/module.h>
30 #include <linux/moduleparam.h>
31 #include <linux/init.h>
32 #include <linux/blkdev.h>
33 #include <asm/semaphore.h>
34 
35 #include <scsi/scsi.h>
36 #include <scsi/scsi_device.h>
37 #include <scsi/scsi_driver.h>
38 #include <scsi/scsi_devinfo.h>
39 #include <scsi/scsi_host.h>
40 #include <scsi/scsi_request.h>
41 #include <scsi/scsi_transport.h>
42 #include <scsi/scsi_eh.h>
43 
44 #include "scsi_priv.h"
45 #include "scsi_logging.h"
46 
47 #define ALLOC_FAILURE_MSG	KERN_ERR "%s: Allocation failure during" \
48 	" SCSI scanning, some SCSI devices might not be configured\n"
49 
50 /*
51  * Default timeout
52  */
53 #define SCSI_TIMEOUT (2*HZ)
54 
55 /*
56  * Prefix values for the SCSI id's (stored in driverfs name field)
57  */
58 #define SCSI_UID_SER_NUM 'S'
59 #define SCSI_UID_UNKNOWN 'Z'
60 
61 /*
62  * Return values of some of the scanning functions.
63  *
64  * SCSI_SCAN_NO_RESPONSE: no valid response received from the target, this
65  * includes allocation or general failures preventing IO from being sent.
66  *
67  * SCSI_SCAN_TARGET_PRESENT: target responded, but no device is available
68  * on the given LUN.
69  *
70  * SCSI_SCAN_LUN_PRESENT: target responded, and a device is available on a
71  * given LUN.
72  */
73 #define SCSI_SCAN_NO_RESPONSE		0
74 #define SCSI_SCAN_TARGET_PRESENT	1
75 #define SCSI_SCAN_LUN_PRESENT		2
76 
77 static char *scsi_null_device_strs = "nullnullnullnull";
78 
79 #define MAX_SCSI_LUNS	512
80 
81 #ifdef CONFIG_SCSI_MULTI_LUN
82 static unsigned int max_scsi_luns = MAX_SCSI_LUNS;
83 #else
84 static unsigned int max_scsi_luns = 1;
85 #endif
86 
87 module_param_named(max_luns, max_scsi_luns, int, S_IRUGO|S_IWUSR);
88 MODULE_PARM_DESC(max_luns,
89 		 "last scsi LUN (should be between 1 and 2^32-1)");
90 
91 /*
92  * max_scsi_report_luns: the maximum number of LUNS that will be
93  * returned from the REPORT LUNS command. 8 times this value must
94  * be allocated. In theory this could be up to an 8 byte value, but
95  * in practice, the maximum number of LUNs suppored by any device
96  * is about 16k.
97  */
98 static unsigned int max_scsi_report_luns = 511;
99 
100 module_param_named(max_report_luns, max_scsi_report_luns, int, S_IRUGO|S_IWUSR);
101 MODULE_PARM_DESC(max_report_luns,
102 		 "REPORT LUNS maximum number of LUNS received (should be"
103 		 " between 1 and 16384)");
104 
105 static unsigned int scsi_inq_timeout = SCSI_TIMEOUT/HZ+3;
106 
107 module_param_named(inq_timeout, scsi_inq_timeout, int, S_IRUGO|S_IWUSR);
108 MODULE_PARM_DESC(inq_timeout,
109 		 "Timeout (in seconds) waiting for devices to answer INQUIRY."
110 		 " Default is 5. Some non-compliant devices need more.");
111 
112 /**
113  * scsi_unlock_floptical - unlock device via a special MODE SENSE command
114  * @sreq:	used to send the command
115  * @result:	area to store the result of the MODE SENSE
116  *
117  * Description:
118  *     Send a vendor specific MODE SENSE (not a MODE SELECT) command using
119  *     @sreq to unlock a device, storing the (unused) results into result.
120  *     Called for BLIST_KEY devices.
121  **/
122 static void scsi_unlock_floptical(struct scsi_request *sreq,
123 				  unsigned char *result)
124 {
125 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
126 
127 	printk(KERN_NOTICE "scsi: unlocking floptical drive\n");
128 	scsi_cmd[0] = MODE_SENSE;
129 	scsi_cmd[1] = 0;
130 	scsi_cmd[2] = 0x2e;
131 	scsi_cmd[3] = 0;
132 	scsi_cmd[4] = 0x2a;	/* size */
133 	scsi_cmd[5] = 0;
134 	sreq->sr_cmd_len = 0;
135 	sreq->sr_data_direction = DMA_FROM_DEVICE;
136 	scsi_wait_req(sreq, scsi_cmd, result, 0x2a /* size */, SCSI_TIMEOUT, 3);
137 }
138 
139 /**
140  * print_inquiry - printk the inquiry information
141  * @inq_result:	printk this SCSI INQUIRY
142  *
143  * Description:
144  *     printk the vendor, model, and other information found in the
145  *     INQUIRY data in @inq_result.
146  *
147  * Notes:
148  *     Remove this, and replace with a hotplug event that logs any
149  *     relevant information.
150  **/
151 static void print_inquiry(unsigned char *inq_result)
152 {
153 	int i;
154 
155 	printk(KERN_NOTICE "  Vendor: ");
156 	for (i = 8; i < 16; i++)
157 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
158 			printk("%c", inq_result[i]);
159 		else
160 			printk(" ");
161 
162 	printk("  Model: ");
163 	for (i = 16; i < 32; i++)
164 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
165 			printk("%c", inq_result[i]);
166 		else
167 			printk(" ");
168 
169 	printk("  Rev: ");
170 	for (i = 32; i < 36; i++)
171 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
172 			printk("%c", inq_result[i]);
173 		else
174 			printk(" ");
175 
176 	printk("\n");
177 
178 	i = inq_result[0] & 0x1f;
179 
180 	printk(KERN_NOTICE "  Type:   %s ",
181 	       i <
182 	       MAX_SCSI_DEVICE_CODE ? scsi_device_types[i] :
183 	       "Unknown          ");
184 	printk("                 ANSI SCSI revision: %02x",
185 	       inq_result[2] & 0x07);
186 	if ((inq_result[2] & 0x07) == 1 && (inq_result[3] & 0x0f) == 1)
187 		printk(" CCS\n");
188 	else
189 		printk("\n");
190 }
191 
192 /**
193  * scsi_alloc_sdev - allocate and setup a scsi_Device
194  *
195  * Description:
196  *     Allocate, initialize for io, and return a pointer to a scsi_Device.
197  *     Stores the @shost, @channel, @id, and @lun in the scsi_Device, and
198  *     adds scsi_Device to the appropriate list.
199  *
200  * Return value:
201  *     scsi_Device pointer, or NULL on failure.
202  **/
203 static struct scsi_device *scsi_alloc_sdev(struct scsi_target *starget,
204 					   unsigned int lun, void *hostdata)
205 {
206 	struct scsi_device *sdev;
207 	int display_failure_msg = 1, ret;
208 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
209 
210 	sdev = kmalloc(sizeof(*sdev) + shost->transportt->device_size,
211 		       GFP_ATOMIC);
212 	if (!sdev)
213 		goto out;
214 
215 	memset(sdev, 0, sizeof(*sdev));
216 	sdev->vendor = scsi_null_device_strs;
217 	sdev->model = scsi_null_device_strs;
218 	sdev->rev = scsi_null_device_strs;
219 	sdev->host = shost;
220 	sdev->id = starget->id;
221 	sdev->lun = lun;
222 	sdev->channel = starget->channel;
223 	sdev->sdev_state = SDEV_CREATED;
224 	INIT_LIST_HEAD(&sdev->siblings);
225 	INIT_LIST_HEAD(&sdev->same_target_siblings);
226 	INIT_LIST_HEAD(&sdev->cmd_list);
227 	INIT_LIST_HEAD(&sdev->starved_entry);
228 	spin_lock_init(&sdev->list_lock);
229 
230 	sdev->sdev_gendev.parent = get_device(&starget->dev);
231 	sdev->sdev_target = starget;
232 
233 	/* usually NULL and set by ->slave_alloc instead */
234 	sdev->hostdata = hostdata;
235 
236 	/* if the device needs this changing, it may do so in the
237 	 * slave_configure function */
238 	sdev->max_device_blocked = SCSI_DEFAULT_DEVICE_BLOCKED;
239 
240 	/*
241 	 * Some low level driver could use device->type
242 	 */
243 	sdev->type = -1;
244 
245 	/*
246 	 * Assume that the device will have handshaking problems,
247 	 * and then fix this field later if it turns out it
248 	 * doesn't
249 	 */
250 	sdev->borken = 1;
251 
252 	sdev->request_queue = scsi_alloc_queue(sdev);
253 	if (!sdev->request_queue) {
254 		/* release fn is set up in scsi_sysfs_device_initialise, so
255 		 * have to free and put manually here */
256 		put_device(&starget->dev);
257 		goto out;
258 	}
259 
260 	sdev->request_queue->queuedata = sdev;
261 	scsi_adjust_queue_depth(sdev, 0, sdev->host->cmd_per_lun);
262 
263 	scsi_sysfs_device_initialize(sdev);
264 
265 	if (shost->hostt->slave_alloc) {
266 		ret = shost->hostt->slave_alloc(sdev);
267 		if (ret) {
268 			/*
269 			 * if LLDD reports slave not present, don't clutter
270 			 * console with alloc failure messages
271 
272 
273 			 */
274 			if (ret == -ENXIO)
275 				display_failure_msg = 0;
276 			goto out_device_destroy;
277 		}
278 	}
279 
280 	return sdev;
281 
282 out_device_destroy:
283 	transport_destroy_device(&sdev->sdev_gendev);
284 	scsi_free_queue(sdev->request_queue);
285 	put_device(&sdev->sdev_gendev);
286 out:
287 	if (display_failure_msg)
288 		printk(ALLOC_FAILURE_MSG, __FUNCTION__);
289 	return NULL;
290 }
291 
292 static void scsi_target_dev_release(struct device *dev)
293 {
294 	struct device *parent = dev->parent;
295 	struct scsi_target *starget = to_scsi_target(dev);
296 	struct Scsi_Host *shost = dev_to_shost(parent);
297 
298 	if (shost->hostt->target_destroy)
299 		shost->hostt->target_destroy(starget);
300 	kfree(starget);
301 	put_device(parent);
302 }
303 
304 int scsi_is_target_device(const struct device *dev)
305 {
306 	return dev->release == scsi_target_dev_release;
307 }
308 EXPORT_SYMBOL(scsi_is_target_device);
309 
310 static struct scsi_target *__scsi_find_target(struct device *parent,
311 					      int channel, uint id)
312 {
313 	struct scsi_target *starget, *found_starget = NULL;
314 	struct Scsi_Host *shost = dev_to_shost(parent);
315 	/*
316 	 * Search for an existing target for this sdev.
317 	 */
318 	list_for_each_entry(starget, &shost->__targets, siblings) {
319 		if (starget->id == id &&
320 		    starget->channel == channel) {
321 			found_starget = starget;
322 			break;
323 		}
324 	}
325 	if (found_starget)
326 		get_device(&found_starget->dev);
327 
328 	return found_starget;
329 }
330 
331 static struct scsi_target *scsi_alloc_target(struct device *parent,
332 					     int channel, uint id)
333 {
334 	struct Scsi_Host *shost = dev_to_shost(parent);
335 	struct device *dev = NULL;
336 	unsigned long flags;
337 	const int size = sizeof(struct scsi_target)
338 		+ shost->transportt->target_size;
339 	struct scsi_target *starget;
340 	struct scsi_target *found_target;
341 
342 	/*
343 	 * Obtain the real parent from the transport. The transport
344 	 * is allowed to fail (no error) if there is nothing at that
345 	 * target id.
346 	 */
347 	if (shost->transportt->target_parent) {
348 		spin_lock_irqsave(shost->host_lock, flags);
349 		parent = shost->transportt->target_parent(shost, channel, id);
350 		spin_unlock_irqrestore(shost->host_lock, flags);
351 		if (!parent)
352 			return NULL;
353 	}
354 
355 	starget = kmalloc(size, GFP_KERNEL);
356 	if (!starget) {
357 		printk(KERN_ERR "%s: allocation failure\n", __FUNCTION__);
358 		return NULL;
359 	}
360 	memset(starget, 0, size);
361 	dev = &starget->dev;
362 	device_initialize(dev);
363 	starget->reap_ref = 1;
364 	dev->parent = get_device(parent);
365 	dev->release = scsi_target_dev_release;
366 	sprintf(dev->bus_id, "target%d:%d:%d",
367 		shost->host_no, channel, id);
368 	starget->id = id;
369 	starget->channel = channel;
370 	INIT_LIST_HEAD(&starget->siblings);
371 	INIT_LIST_HEAD(&starget->devices);
372 	spin_lock_irqsave(shost->host_lock, flags);
373 
374 	found_target = __scsi_find_target(parent, channel, id);
375 	if (found_target)
376 		goto found;
377 
378 	list_add_tail(&starget->siblings, &shost->__targets);
379 	spin_unlock_irqrestore(shost->host_lock, flags);
380 	/* allocate and add */
381 	transport_setup_device(dev);
382 	device_add(dev);
383 	transport_add_device(dev);
384 	if (shost->hostt->target_alloc) {
385 		int error = shost->hostt->target_alloc(starget);
386 
387 		if(error) {
388 			dev_printk(KERN_ERR, dev, "target allocation failed, error %d\n", error);
389 			/* don't want scsi_target_reap to do the final
390 			 * put because it will be under the host lock */
391 			get_device(dev);
392 			scsi_target_reap(starget);
393 			put_device(dev);
394 			return NULL;
395 		}
396 	}
397 
398 	return starget;
399 
400  found:
401 	found_target->reap_ref++;
402 	spin_unlock_irqrestore(shost->host_lock, flags);
403 	put_device(parent);
404 	kfree(starget);
405 	return found_target;
406 }
407 
408 /**
409  * scsi_target_reap - check to see if target is in use and destroy if not
410  *
411  * @starget: target to be checked
412  *
413  * This is used after removing a LUN or doing a last put of the target
414  * it checks atomically that nothing is using the target and removes
415  * it if so.
416  */
417 void scsi_target_reap(struct scsi_target *starget)
418 {
419 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
420 	unsigned long flags;
421 	spin_lock_irqsave(shost->host_lock, flags);
422 
423 	if (--starget->reap_ref == 0 && list_empty(&starget->devices)) {
424 		list_del_init(&starget->siblings);
425 		spin_unlock_irqrestore(shost->host_lock, flags);
426 		device_del(&starget->dev);
427 		transport_unregister_device(&starget->dev);
428 		put_device(&starget->dev);
429 		return;
430 	}
431 	spin_unlock_irqrestore(shost->host_lock, flags);
432 }
433 
434 /**
435  * scsi_probe_lun - probe a single LUN using a SCSI INQUIRY
436  * @sreq:	used to send the INQUIRY
437  * @inq_result:	area to store the INQUIRY result
438  * @bflags:	store any bflags found here
439  *
440  * Description:
441  *     Probe the lun associated with @sreq using a standard SCSI INQUIRY;
442  *
443  *     If the INQUIRY is successful, sreq->sr_result is zero and: the
444  *     INQUIRY data is in @inq_result; the scsi_level and INQUIRY length
445  *     are copied to the Scsi_Device at @sreq->sr_device (sdev);
446  *     any flags value is stored in *@bflags.
447  **/
448 static void scsi_probe_lun(struct scsi_request *sreq, char *inq_result,
449 			   int *bflags)
450 {
451 	struct scsi_device *sdev = sreq->sr_device;	/* a bit ugly */
452 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
453 	int first_inquiry_len, try_inquiry_len, next_inquiry_len;
454 	int response_len = 0;
455 	int pass, count;
456 	struct scsi_sense_hdr sshdr;
457 
458 	*bflags = 0;
459 
460 	/* Perform up to 3 passes.  The first pass uses a conservative
461 	 * transfer length of 36 unless sdev->inquiry_len specifies a
462 	 * different value. */
463 	first_inquiry_len = sdev->inquiry_len ? sdev->inquiry_len : 36;
464 	try_inquiry_len = first_inquiry_len;
465 	pass = 1;
466 
467  next_pass:
468 	SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: INQUIRY pass %d "
469 			"to host %d channel %d id %d lun %d, length %d\n",
470 			pass, sdev->host->host_no, sdev->channel,
471 			sdev->id, sdev->lun, try_inquiry_len));
472 
473 	/* Each pass gets up to three chances to ignore Unit Attention */
474 	for (count = 0; count < 3; ++count) {
475 		memset(scsi_cmd, 0, 6);
476 		scsi_cmd[0] = INQUIRY;
477 		scsi_cmd[4] = (unsigned char) try_inquiry_len;
478 		sreq->sr_cmd_len = 0;
479 		sreq->sr_data_direction = DMA_FROM_DEVICE;
480 
481 		memset(inq_result, 0, try_inquiry_len);
482 		scsi_wait_req(sreq, (void *) scsi_cmd, (void *) inq_result,
483 				try_inquiry_len,
484 				HZ/2 + HZ*scsi_inq_timeout, 3);
485 
486 		SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: INQUIRY %s "
487 				"with code 0x%x\n",
488 				sreq->sr_result ? "failed" : "successful",
489 				sreq->sr_result));
490 
491 		if (sreq->sr_result) {
492 			/*
493 			 * not-ready to ready transition [asc/ascq=0x28/0x0]
494 			 * or power-on, reset [asc/ascq=0x29/0x0], continue.
495 			 * INQUIRY should not yield UNIT_ATTENTION
496 			 * but many buggy devices do so anyway.
497 			 */
498 			if ((driver_byte(sreq->sr_result) & DRIVER_SENSE) &&
499 			    scsi_request_normalize_sense(sreq, &sshdr)) {
500 				if ((sshdr.sense_key == UNIT_ATTENTION) &&
501 				    ((sshdr.asc == 0x28) ||
502 				     (sshdr.asc == 0x29)) &&
503 				    (sshdr.ascq == 0))
504 					continue;
505 			}
506 		}
507 		break;
508 	}
509 
510 	if (sreq->sr_result == 0) {
511 		response_len = (unsigned char) inq_result[4] + 5;
512 		if (response_len > 255)
513 			response_len = first_inquiry_len;	/* sanity */
514 
515 		/*
516 		 * Get any flags for this device.
517 		 *
518 		 * XXX add a bflags to Scsi_Device, and replace the
519 		 * corresponding bit fields in Scsi_Device, so bflags
520 		 * need not be passed as an argument.
521 		 */
522 		*bflags = scsi_get_device_flags(sdev, &inq_result[8],
523 				&inq_result[16]);
524 
525 		/* When the first pass succeeds we gain information about
526 		 * what larger transfer lengths might work. */
527 		if (pass == 1) {
528 			if (BLIST_INQUIRY_36 & *bflags)
529 				next_inquiry_len = 36;
530 			else if (BLIST_INQUIRY_58 & *bflags)
531 				next_inquiry_len = 58;
532 			else if (sdev->inquiry_len)
533 				next_inquiry_len = sdev->inquiry_len;
534 			else
535 				next_inquiry_len = response_len;
536 
537 			/* If more data is available perform the second pass */
538 			if (next_inquiry_len > try_inquiry_len) {
539 				try_inquiry_len = next_inquiry_len;
540 				pass = 2;
541 				goto next_pass;
542 			}
543 		}
544 
545 	} else if (pass == 2) {
546 		printk(KERN_INFO "scsi scan: %d byte inquiry failed.  "
547 				"Consider BLIST_INQUIRY_36 for this device\n",
548 				try_inquiry_len);
549 
550 		/* If this pass failed, the third pass goes back and transfers
551 		 * the same amount as we successfully got in the first pass. */
552 		try_inquiry_len = first_inquiry_len;
553 		pass = 3;
554 		goto next_pass;
555 	}
556 
557 	/* If the last transfer attempt got an error, assume the
558 	 * peripheral doesn't exist or is dead. */
559 	if (sreq->sr_result)
560 		return;
561 
562 	/* Don't report any more data than the device says is valid */
563 	sdev->inquiry_len = min(try_inquiry_len, response_len);
564 
565 	/*
566 	 * XXX Abort if the response length is less than 36? If less than
567 	 * 32, the lookup of the device flags (above) could be invalid,
568 	 * and it would be possible to take an incorrect action - we do
569 	 * not want to hang because of a short INQUIRY. On the flip side,
570 	 * if the device is spun down or becoming ready (and so it gives a
571 	 * short INQUIRY), an abort here prevents any further use of the
572 	 * device, including spin up.
573 	 *
574 	 * Related to the above issue:
575 	 *
576 	 * XXX Devices (disk or all?) should be sent a TEST UNIT READY,
577 	 * and if not ready, sent a START_STOP to start (maybe spin up) and
578 	 * then send the INQUIRY again, since the INQUIRY can change after
579 	 * a device is initialized.
580 	 *
581 	 * Ideally, start a device if explicitly asked to do so.  This
582 	 * assumes that a device is spun up on power on, spun down on
583 	 * request, and then spun up on request.
584 	 */
585 
586 	/*
587 	 * The scanning code needs to know the scsi_level, even if no
588 	 * device is attached at LUN 0 (SCSI_SCAN_TARGET_PRESENT) so
589 	 * non-zero LUNs can be scanned.
590 	 */
591 	sdev->scsi_level = inq_result[2] & 0x07;
592 	if (sdev->scsi_level >= 2 ||
593 	    (sdev->scsi_level == 1 && (inq_result[3] & 0x0f) == 1))
594 		sdev->scsi_level++;
595 
596 	return;
597 }
598 
599 /**
600  * scsi_add_lun - allocate and fully initialze a Scsi_Device
601  * @sdevscan:	holds information to be stored in the new Scsi_Device
602  * @sdevnew:	store the address of the newly allocated Scsi_Device
603  * @inq_result:	holds the result of a previous INQUIRY to the LUN
604  * @bflags:	black/white list flag
605  *
606  * Description:
607  *     Allocate and initialize a Scsi_Device matching sdevscan. Optionally
608  *     set fields based on values in *@bflags. If @sdevnew is not
609  *     NULL, store the address of the new Scsi_Device in *@sdevnew (needed
610  *     when scanning a particular LUN).
611  *
612  * Return:
613  *     SCSI_SCAN_NO_RESPONSE: could not allocate or setup a Scsi_Device
614  *     SCSI_SCAN_LUN_PRESENT: a new Scsi_Device was allocated and initialized
615  **/
616 static int scsi_add_lun(struct scsi_device *sdev, char *inq_result, int *bflags)
617 {
618 	/*
619 	 * XXX do not save the inquiry, since it can change underneath us,
620 	 * save just vendor/model/rev.
621 	 *
622 	 * Rather than save it and have an ioctl that retrieves the saved
623 	 * value, have an ioctl that executes the same INQUIRY code used
624 	 * in scsi_probe_lun, let user level programs doing INQUIRY
625 	 * scanning run at their own risk, or supply a user level program
626 	 * that can correctly scan.
627 	 */
628 	sdev->inquiry = kmalloc(sdev->inquiry_len, GFP_ATOMIC);
629 	if (sdev->inquiry == NULL) {
630 		return SCSI_SCAN_NO_RESPONSE;
631 	}
632 
633 	memcpy(sdev->inquiry, inq_result, sdev->inquiry_len);
634 	sdev->vendor = (char *) (sdev->inquiry + 8);
635 	sdev->model = (char *) (sdev->inquiry + 16);
636 	sdev->rev = (char *) (sdev->inquiry + 32);
637 
638 	if (*bflags & BLIST_ISROM) {
639 		/*
640 		 * It would be better to modify sdev->type, and set
641 		 * sdev->removable, but then the print_inquiry() output
642 		 * would not show TYPE_ROM; if print_inquiry() is removed
643 		 * the issue goes away.
644 		 */
645 		inq_result[0] = TYPE_ROM;
646 		inq_result[1] |= 0x80;	/* removable */
647 	} else if (*bflags & BLIST_NO_ULD_ATTACH)
648 		sdev->no_uld_attach = 1;
649 
650 	switch (sdev->type = (inq_result[0] & 0x1f)) {
651 	case TYPE_TAPE:
652 	case TYPE_DISK:
653 	case TYPE_PRINTER:
654 	case TYPE_MOD:
655 	case TYPE_PROCESSOR:
656 	case TYPE_SCANNER:
657 	case TYPE_MEDIUM_CHANGER:
658 	case TYPE_ENCLOSURE:
659 	case TYPE_COMM:
660 	case TYPE_RBC:
661 		sdev->writeable = 1;
662 		break;
663 	case TYPE_WORM:
664 	case TYPE_ROM:
665 		sdev->writeable = 0;
666 		break;
667 	default:
668 		printk(KERN_INFO "scsi: unknown device type %d\n", sdev->type);
669 	}
670 
671 	print_inquiry(inq_result);
672 
673 	/*
674 	 * For a peripheral qualifier (PQ) value of 1 (001b), the SCSI
675 	 * spec says: The device server is capable of supporting the
676 	 * specified peripheral device type on this logical unit. However,
677 	 * the physical device is not currently connected to this logical
678 	 * unit.
679 	 *
680 	 * The above is vague, as it implies that we could treat 001 and
681 	 * 011 the same. Stay compatible with previous code, and create a
682 	 * Scsi_Device for a PQ of 1
683 	 *
684 	 * Don't set the device offline here; rather let the upper
685 	 * level drivers eval the PQ to decide whether they should
686 	 * attach. So remove ((inq_result[0] >> 5) & 7) == 1 check.
687 	 */
688 
689 	sdev->inq_periph_qual = (inq_result[0] >> 5) & 7;
690 	sdev->removable = (0x80 & inq_result[1]) >> 7;
691 	sdev->lockable = sdev->removable;
692 	sdev->soft_reset = (inq_result[7] & 1) && ((inq_result[3] & 7) == 2);
693 
694 	if (sdev->scsi_level >= SCSI_3 || (sdev->inquiry_len > 56 &&
695 		inq_result[56] & 0x04))
696 		sdev->ppr = 1;
697 	if (inq_result[7] & 0x60)
698 		sdev->wdtr = 1;
699 	if (inq_result[7] & 0x10)
700 		sdev->sdtr = 1;
701 
702 	sprintf(sdev->devfs_name, "scsi/host%d/bus%d/target%d/lun%d",
703 				sdev->host->host_no, sdev->channel,
704 				sdev->id, sdev->lun);
705 
706 	/*
707 	 * End driverfs/devfs code.
708 	 */
709 
710 	if ((sdev->scsi_level >= SCSI_2) && (inq_result[7] & 2) &&
711 	    !(*bflags & BLIST_NOTQ))
712 		sdev->tagged_supported = 1;
713 	/*
714 	 * Some devices (Texel CD ROM drives) have handshaking problems
715 	 * when used with the Seagate controllers. borken is initialized
716 	 * to 1, and then set it to 0 here.
717 	 */
718 	if ((*bflags & BLIST_BORKEN) == 0)
719 		sdev->borken = 0;
720 
721 	/*
722 	 * Apparently some really broken devices (contrary to the SCSI
723 	 * standards) need to be selected without asserting ATN
724 	 */
725 	if (*bflags & BLIST_SELECT_NO_ATN)
726 		sdev->select_no_atn = 1;
727 
728 	/*
729 	 * Some devices may not want to have a start command automatically
730 	 * issued when a device is added.
731 	 */
732 	if (*bflags & BLIST_NOSTARTONADD)
733 		sdev->no_start_on_add = 1;
734 
735 	if (*bflags & BLIST_SINGLELUN)
736 		sdev->single_lun = 1;
737 
738 
739 	sdev->use_10_for_rw = 1;
740 
741 	if (*bflags & BLIST_MS_SKIP_PAGE_08)
742 		sdev->skip_ms_page_8 = 1;
743 
744 	if (*bflags & BLIST_MS_SKIP_PAGE_3F)
745 		sdev->skip_ms_page_3f = 1;
746 
747 	if (*bflags & BLIST_USE_10_BYTE_MS)
748 		sdev->use_10_for_ms = 1;
749 
750 	/* set the device running here so that slave configure
751 	 * may do I/O */
752 	scsi_device_set_state(sdev, SDEV_RUNNING);
753 
754 	if (*bflags & BLIST_MS_192_BYTES_FOR_3F)
755 		sdev->use_192_bytes_for_3f = 1;
756 
757 	if (*bflags & BLIST_NOT_LOCKABLE)
758 		sdev->lockable = 0;
759 
760 	if (*bflags & BLIST_RETRY_HWERROR)
761 		sdev->retry_hwerror = 1;
762 
763 	transport_configure_device(&sdev->sdev_gendev);
764 
765 	if (sdev->host->hostt->slave_configure)
766 		sdev->host->hostt->slave_configure(sdev);
767 
768 	/*
769 	 * Ok, the device is now all set up, we can
770 	 * register it and tell the rest of the kernel
771 	 * about it.
772 	 */
773 	if (scsi_sysfs_add_sdev(sdev) != 0)
774 		return SCSI_SCAN_NO_RESPONSE;
775 
776 	return SCSI_SCAN_LUN_PRESENT;
777 }
778 
779 /**
780  * scsi_probe_and_add_lun - probe a LUN, if a LUN is found add it
781  * @starget:	pointer to target device structure
782  * @lun:	LUN of target device
783  * @sdevscan:	probe the LUN corresponding to this Scsi_Device
784  * @sdevnew:	store the value of any new Scsi_Device allocated
785  * @bflagsp:	store bflags here if not NULL
786  *
787  * Description:
788  *     Call scsi_probe_lun, if a LUN with an attached device is found,
789  *     allocate and set it up by calling scsi_add_lun.
790  *
791  * Return:
792  *     SCSI_SCAN_NO_RESPONSE: could not allocate or setup a Scsi_Device
793  *     SCSI_SCAN_TARGET_PRESENT: target responded, but no device is
794  *         attached at the LUN
795  *     SCSI_SCAN_LUN_PRESENT: a new Scsi_Device was allocated and initialized
796  **/
797 static int scsi_probe_and_add_lun(struct scsi_target *starget,
798 				  uint lun, int *bflagsp,
799 				  struct scsi_device **sdevp, int rescan,
800 				  void *hostdata)
801 {
802 	struct scsi_device *sdev;
803 	struct scsi_request *sreq;
804 	unsigned char *result;
805 	int bflags, res = SCSI_SCAN_NO_RESPONSE;
806 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
807 
808 	/*
809 	 * The rescan flag is used as an optimization, the first scan of a
810 	 * host adapter calls into here with rescan == 0.
811 	 */
812 	if (rescan) {
813 		sdev = scsi_device_lookup_by_target(starget, lun);
814 		if (sdev) {
815 			SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO
816 				"scsi scan: device exists on %s\n",
817 				sdev->sdev_gendev.bus_id));
818 			if (sdevp)
819 				*sdevp = sdev;
820 			else
821 				scsi_device_put(sdev);
822 
823 			if (bflagsp)
824 				*bflagsp = scsi_get_device_flags(sdev,
825 								 sdev->vendor,
826 								 sdev->model);
827 			return SCSI_SCAN_LUN_PRESENT;
828 		}
829 	}
830 
831 	sdev = scsi_alloc_sdev(starget, lun, hostdata);
832 	if (!sdev)
833 		goto out;
834 	sreq = scsi_allocate_request(sdev, GFP_ATOMIC);
835 	if (!sreq)
836 		goto out_free_sdev;
837 	result = kmalloc(256, GFP_ATOMIC |
838 			((shost->unchecked_isa_dma) ? __GFP_DMA : 0));
839 	if (!result)
840 		goto out_free_sreq;
841 
842 	scsi_probe_lun(sreq, result, &bflags);
843 	if (sreq->sr_result)
844 		goto out_free_result;
845 
846 	/*
847 	 * result contains valid SCSI INQUIRY data.
848 	 */
849 	if ((result[0] >> 5) == 3) {
850 		/*
851 		 * For a Peripheral qualifier 3 (011b), the SCSI
852 		 * spec says: The device server is not capable of
853 		 * supporting a physical device on this logical
854 		 * unit.
855 		 *
856 		 * For disks, this implies that there is no
857 		 * logical disk configured at sdev->lun, but there
858 		 * is a target id responding.
859 		 */
860 		SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO
861 					"scsi scan: peripheral qualifier of 3,"
862 					" no device added\n"));
863 		res = SCSI_SCAN_TARGET_PRESENT;
864 		goto out_free_result;
865 	}
866 
867 	res = scsi_add_lun(sdev, result, &bflags);
868 	if (res == SCSI_SCAN_LUN_PRESENT) {
869 		if (bflags & BLIST_KEY) {
870 			sdev->lockable = 0;
871 			scsi_unlock_floptical(sreq, result);
872 		}
873 		if (bflagsp)
874 			*bflagsp = bflags;
875 	}
876 
877  out_free_result:
878 	kfree(result);
879  out_free_sreq:
880 	scsi_release_request(sreq);
881  out_free_sdev:
882 	if (res == SCSI_SCAN_LUN_PRESENT) {
883 		if (sdevp) {
884 			scsi_device_get(sdev);
885 			*sdevp = sdev;
886 		}
887 	} else {
888 		if (sdev->host->hostt->slave_destroy)
889 			sdev->host->hostt->slave_destroy(sdev);
890 		transport_destroy_device(&sdev->sdev_gendev);
891 		put_device(&sdev->sdev_gendev);
892 	}
893  out:
894 	return res;
895 }
896 
897 /**
898  * scsi_sequential_lun_scan - sequentially scan a SCSI target
899  * @starget:	pointer to target structure to scan
900  * @bflags:	black/white list flag for LUN 0
901  * @lun0_res:	result of scanning LUN 0
902  *
903  * Description:
904  *     Generally, scan from LUN 1 (LUN 0 is assumed to already have been
905  *     scanned) to some maximum lun until a LUN is found with no device
906  *     attached. Use the bflags to figure out any oddities.
907  *
908  *     Modifies sdevscan->lun.
909  **/
910 static void scsi_sequential_lun_scan(struct scsi_target *starget,
911 				     int bflags, int lun0_res, int scsi_level,
912 				     int rescan)
913 {
914 	unsigned int sparse_lun, lun, max_dev_lun;
915 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
916 
917 	SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: Sequential scan of"
918 				    "%s\n", starget->dev.bus_id));
919 
920 	max_dev_lun = min(max_scsi_luns, shost->max_lun);
921 	/*
922 	 * If this device is known to support sparse multiple units,
923 	 * override the other settings, and scan all of them. Normally,
924 	 * SCSI-3 devices should be scanned via the REPORT LUNS.
925 	 */
926 	if (bflags & BLIST_SPARSELUN) {
927 		max_dev_lun = shost->max_lun;
928 		sparse_lun = 1;
929 	} else
930 		sparse_lun = 0;
931 
932 	/*
933 	 * If not sparse lun and no device attached at LUN 0 do not scan
934 	 * any further.
935 	 */
936 	if (!sparse_lun && (lun0_res != SCSI_SCAN_LUN_PRESENT))
937 		return;
938 
939 	/*
940 	 * If less than SCSI_1_CSS, and no special lun scaning, stop
941 	 * scanning; this matches 2.4 behaviour, but could just be a bug
942 	 * (to continue scanning a SCSI_1_CSS device).
943 	 *
944 	 * This test is broken.  We might not have any device on lun0 for
945 	 * a sparselun device, and if that's the case then how would we
946 	 * know the real scsi_level, eh?  It might make sense to just not
947 	 * scan any SCSI_1 device for non-0 luns, but that check would best
948 	 * go into scsi_alloc_sdev() and just have it return null when asked
949 	 * to alloc an sdev for lun > 0 on an already found SCSI_1 device.
950 	 *
951 	if ((sdevscan->scsi_level < SCSI_1_CCS) &&
952 	    ((bflags & (BLIST_FORCELUN | BLIST_SPARSELUN | BLIST_MAX5LUN))
953 	     == 0))
954 		return;
955 	 */
956 	/*
957 	 * If this device is known to support multiple units, override
958 	 * the other settings, and scan all of them.
959 	 */
960 	if (bflags & BLIST_FORCELUN)
961 		max_dev_lun = shost->max_lun;
962 	/*
963 	 * REGAL CDC-4X: avoid hang after LUN 4
964 	 */
965 	if (bflags & BLIST_MAX5LUN)
966 		max_dev_lun = min(5U, max_dev_lun);
967 	/*
968 	 * Do not scan SCSI-2 or lower device past LUN 7, unless
969 	 * BLIST_LARGELUN.
970 	 */
971 	if (scsi_level < SCSI_3 && !(bflags & BLIST_LARGELUN))
972 		max_dev_lun = min(8U, max_dev_lun);
973 
974 	/*
975 	 * We have already scanned LUN 0, so start at LUN 1. Keep scanning
976 	 * until we reach the max, or no LUN is found and we are not
977 	 * sparse_lun.
978 	 */
979 	for (lun = 1; lun < max_dev_lun; ++lun)
980 		if ((scsi_probe_and_add_lun(starget, lun, NULL, NULL, rescan,
981 					    NULL) != SCSI_SCAN_LUN_PRESENT) &&
982 		    !sparse_lun)
983 			return;
984 }
985 
986 /**
987  * scsilun_to_int: convert a scsi_lun to an int
988  * @scsilun:	struct scsi_lun to be converted.
989  *
990  * Description:
991  *     Convert @scsilun from a struct scsi_lun to a four byte host byte-ordered
992  *     integer, and return the result. The caller must check for
993  *     truncation before using this function.
994  *
995  * Notes:
996  *     The struct scsi_lun is assumed to be four levels, with each level
997  *     effectively containing a SCSI byte-ordered (big endian) short; the
998  *     addressing bits of each level are ignored (the highest two bits).
999  *     For a description of the LUN format, post SCSI-3 see the SCSI
1000  *     Architecture Model, for SCSI-3 see the SCSI Controller Commands.
1001  *
1002  *     Given a struct scsi_lun of: 0a 04 0b 03 00 00 00 00, this function returns
1003  *     the integer: 0x0b030a04
1004  **/
1005 static int scsilun_to_int(struct scsi_lun *scsilun)
1006 {
1007 	int i;
1008 	unsigned int lun;
1009 
1010 	lun = 0;
1011 	for (i = 0; i < sizeof(lun); i += 2)
1012 		lun = lun | (((scsilun->scsi_lun[i] << 8) |
1013 			      scsilun->scsi_lun[i + 1]) << (i * 8));
1014 	return lun;
1015 }
1016 
1017 /**
1018  * int_to_scsilun: reverts an int into a scsi_lun
1019  * @int:        integer to be reverted
1020  * @scsilun:	struct scsi_lun to be set.
1021  *
1022  * Description:
1023  *     Reverts the functionality of the scsilun_to_int, which packed
1024  *     an 8-byte lun value into an int. This routine unpacks the int
1025  *     back into the lun value.
1026  *     Note: the scsilun_to_int() routine does not truly handle all
1027  *     8bytes of the lun value. This functions restores only as much
1028  *     as was set by the routine.
1029  *
1030  * Notes:
1031  *     Given an integer : 0x0b030a04,  this function returns a
1032  *     scsi_lun of : struct scsi_lun of: 0a 04 0b 03 00 00 00 00
1033  *
1034  **/
1035 void int_to_scsilun(unsigned int lun, struct scsi_lun *scsilun)
1036 {
1037 	int i;
1038 
1039 	memset(scsilun->scsi_lun, 0, sizeof(scsilun->scsi_lun));
1040 
1041 	for (i = 0; i < sizeof(lun); i += 2) {
1042 		scsilun->scsi_lun[i] = (lun >> 8) & 0xFF;
1043 		scsilun->scsi_lun[i+1] = lun & 0xFF;
1044 		lun = lun >> 16;
1045 	}
1046 }
1047 EXPORT_SYMBOL(int_to_scsilun);
1048 
1049 /**
1050  * scsi_report_lun_scan - Scan using SCSI REPORT LUN results
1051  * @sdevscan:	scan the host, channel, and id of this Scsi_Device
1052  *
1053  * Description:
1054  *     If @sdevscan is for a SCSI-3 or up device, send a REPORT LUN
1055  *     command, and scan the resulting list of LUNs by calling
1056  *     scsi_probe_and_add_lun.
1057  *
1058  *     Modifies sdevscan->lun.
1059  *
1060  * Return:
1061  *     0: scan completed (or no memory, so further scanning is futile)
1062  *     1: no report lun scan, or not configured
1063  **/
1064 static int scsi_report_lun_scan(struct scsi_device *sdev, int bflags,
1065 				int rescan)
1066 {
1067 	char devname[64];
1068 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
1069 	unsigned int length;
1070 	unsigned int lun;
1071 	unsigned int num_luns;
1072 	unsigned int retries;
1073 	struct scsi_lun *lunp, *lun_data;
1074 	struct scsi_request *sreq;
1075 	u8 *data;
1076 	struct scsi_sense_hdr sshdr;
1077 	struct scsi_target *starget = scsi_target(sdev);
1078 
1079 	/*
1080 	 * Only support SCSI-3 and up devices if BLIST_NOREPORTLUN is not set.
1081 	 * Also allow SCSI-2 if BLIST_REPORTLUN2 is set and host adapter does
1082 	 * support more than 8 LUNs.
1083 	 */
1084 	if ((bflags & BLIST_NOREPORTLUN) ||
1085 	     sdev->scsi_level < SCSI_2 ||
1086 	    (sdev->scsi_level < SCSI_3 &&
1087 	     (!(bflags & BLIST_REPORTLUN2) || sdev->host->max_lun <= 8)) )
1088 		return 1;
1089 	if (bflags & BLIST_NOLUN)
1090 		return 0;
1091 
1092 	sreq = scsi_allocate_request(sdev, GFP_ATOMIC);
1093 	if (!sreq)
1094 		goto out;
1095 
1096 	sprintf(devname, "host %d channel %d id %d",
1097 		sdev->host->host_no, sdev->channel, sdev->id);
1098 
1099 	/*
1100 	 * Allocate enough to hold the header (the same size as one scsi_lun)
1101 	 * plus the max number of luns we are requesting.
1102 	 *
1103 	 * Reallocating and trying again (with the exact amount we need)
1104 	 * would be nice, but then we need to somehow limit the size
1105 	 * allocated based on the available memory and the limits of
1106 	 * kmalloc - we don't want a kmalloc() failure of a huge value to
1107 	 * prevent us from finding any LUNs on this target.
1108 	 */
1109 	length = (max_scsi_report_luns + 1) * sizeof(struct scsi_lun);
1110 	lun_data = kmalloc(length, GFP_ATOMIC |
1111 			   (sdev->host->unchecked_isa_dma ? __GFP_DMA : 0));
1112 	if (!lun_data)
1113 		goto out_release_request;
1114 
1115 	scsi_cmd[0] = REPORT_LUNS;
1116 
1117 	/*
1118 	 * bytes 1 - 5: reserved, set to zero.
1119 	 */
1120 	memset(&scsi_cmd[1], 0, 5);
1121 
1122 	/*
1123 	 * bytes 6 - 9: length of the command.
1124 	 */
1125 	scsi_cmd[6] = (unsigned char) (length >> 24) & 0xff;
1126 	scsi_cmd[7] = (unsigned char) (length >> 16) & 0xff;
1127 	scsi_cmd[8] = (unsigned char) (length >> 8) & 0xff;
1128 	scsi_cmd[9] = (unsigned char) length & 0xff;
1129 
1130 	scsi_cmd[10] = 0;	/* reserved */
1131 	scsi_cmd[11] = 0;	/* control */
1132 	sreq->sr_cmd_len = 0;
1133 	sreq->sr_data_direction = DMA_FROM_DEVICE;
1134 
1135 	/*
1136 	 * We can get a UNIT ATTENTION, for example a power on/reset, so
1137 	 * retry a few times (like sd.c does for TEST UNIT READY).
1138 	 * Experience shows some combinations of adapter/devices get at
1139 	 * least two power on/resets.
1140 	 *
1141 	 * Illegal requests (for devices that do not support REPORT LUNS)
1142 	 * should come through as a check condition, and will not generate
1143 	 * a retry.
1144 	 */
1145 	for (retries = 0; retries < 3; retries++) {
1146 		SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: Sending"
1147 				" REPORT LUNS to %s (try %d)\n", devname,
1148 				retries));
1149 		scsi_wait_req(sreq, scsi_cmd, lun_data, length,
1150 				SCSI_TIMEOUT + 4*HZ, 3);
1151 		SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: REPORT LUNS"
1152 				" %s (try %d) result 0x%x\n", sreq->sr_result
1153 				?  "failed" : "successful", retries,
1154 				sreq->sr_result));
1155 		if (sreq->sr_result == 0)
1156 			break;
1157 		else if (scsi_request_normalize_sense(sreq, &sshdr)) {
1158 			if (sshdr.sense_key != UNIT_ATTENTION)
1159 				break;
1160 		}
1161 	}
1162 
1163 	if (sreq->sr_result) {
1164 		/*
1165 		 * The device probably does not support a REPORT LUN command
1166 		 */
1167 		kfree(lun_data);
1168 		scsi_release_request(sreq);
1169 		return 1;
1170 	}
1171 	scsi_release_request(sreq);
1172 
1173 	/*
1174 	 * Get the length from the first four bytes of lun_data.
1175 	 */
1176 	data = (u8 *) lun_data->scsi_lun;
1177 	length = ((data[0] << 24) | (data[1] << 16) |
1178 		  (data[2] << 8) | (data[3] << 0));
1179 
1180 	num_luns = (length / sizeof(struct scsi_lun));
1181 	if (num_luns > max_scsi_report_luns) {
1182 		printk(KERN_WARNING "scsi: On %s only %d (max_scsi_report_luns)"
1183 		       " of %d luns reported, try increasing"
1184 		       " max_scsi_report_luns.\n", devname,
1185 		       max_scsi_report_luns, num_luns);
1186 		num_luns = max_scsi_report_luns;
1187 	}
1188 
1189 	SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: REPORT LUN scan of"
1190 			" host %d channel %d id %d\n", sdev->host->host_no,
1191 			sdev->channel, sdev->id));
1192 
1193 	/*
1194 	 * Scan the luns in lun_data. The entry at offset 0 is really
1195 	 * the header, so start at 1 and go up to and including num_luns.
1196 	 */
1197 	for (lunp = &lun_data[1]; lunp <= &lun_data[num_luns]; lunp++) {
1198 		lun = scsilun_to_int(lunp);
1199 
1200 		/*
1201 		 * Check if the unused part of lunp is non-zero, and so
1202 		 * does not fit in lun.
1203 		 */
1204 		if (memcmp(&lunp->scsi_lun[sizeof(lun)], "\0\0\0\0", 4)) {
1205 			int i;
1206 
1207 			/*
1208 			 * Output an error displaying the LUN in byte order,
1209 			 * this differs from what linux would print for the
1210 			 * integer LUN value.
1211 			 */
1212 			printk(KERN_WARNING "scsi: %s lun 0x", devname);
1213 			data = (char *)lunp->scsi_lun;
1214 			for (i = 0; i < sizeof(struct scsi_lun); i++)
1215 				printk("%02x", data[i]);
1216 			printk(" has a LUN larger than currently supported.\n");
1217 		} else if (lun == 0) {
1218 			/*
1219 			 * LUN 0 has already been scanned.
1220 			 */
1221 		} else if (lun > sdev->host->max_lun) {
1222 			printk(KERN_WARNING "scsi: %s lun%d has a LUN larger"
1223 			       " than allowed by the host adapter\n",
1224 			       devname, lun);
1225 		} else {
1226 			int res;
1227 
1228 			res = scsi_probe_and_add_lun(starget,
1229 				lun, NULL, NULL, rescan, NULL);
1230 			if (res == SCSI_SCAN_NO_RESPONSE) {
1231 				/*
1232 				 * Got some results, but now none, abort.
1233 				 */
1234 				printk(KERN_ERR "scsi: Unexpected response"
1235 				       " from %s lun %d while scanning, scan"
1236 				       " aborted\n", devname, lun);
1237 				break;
1238 			}
1239 		}
1240 	}
1241 
1242 	kfree(lun_data);
1243 	return 0;
1244 
1245  out_release_request:
1246 	scsi_release_request(sreq);
1247  out:
1248 	/*
1249 	 * We are out of memory, don't try scanning any further.
1250 	 */
1251 	printk(ALLOC_FAILURE_MSG, __FUNCTION__);
1252 	return 0;
1253 }
1254 
1255 struct scsi_device *__scsi_add_device(struct Scsi_Host *shost, uint channel,
1256 				      uint id, uint lun, void *hostdata)
1257 {
1258 	struct scsi_device *sdev;
1259 	struct device *parent = &shost->shost_gendev;
1260 	int res;
1261 	struct scsi_target *starget = scsi_alloc_target(parent, channel, id);
1262 
1263 	if (!starget)
1264 		return ERR_PTR(-ENOMEM);
1265 
1266 	get_device(&starget->dev);
1267 	down(&shost->scan_mutex);
1268 	res = scsi_probe_and_add_lun(starget, lun, NULL, &sdev, 1, hostdata);
1269 	if (res != SCSI_SCAN_LUN_PRESENT)
1270 		sdev = ERR_PTR(-ENODEV);
1271 	up(&shost->scan_mutex);
1272 	scsi_target_reap(starget);
1273 	put_device(&starget->dev);
1274 
1275 	return sdev;
1276 }
1277 EXPORT_SYMBOL(__scsi_add_device);
1278 
1279 void scsi_rescan_device(struct device *dev)
1280 {
1281 	struct scsi_driver *drv;
1282 
1283 	if (!dev->driver)
1284 		return;
1285 
1286 	drv = to_scsi_driver(dev->driver);
1287 	if (try_module_get(drv->owner)) {
1288 		if (drv->rescan)
1289 			drv->rescan(dev);
1290 		module_put(drv->owner);
1291 	}
1292 }
1293 EXPORT_SYMBOL(scsi_rescan_device);
1294 
1295 /**
1296  * scsi_scan_target - scan a target id, possibly including all LUNs on the
1297  *     target.
1298  * @sdevsca:	Scsi_Device handle for scanning
1299  * @shost:	host to scan
1300  * @channel:	channel to scan
1301  * @id:		target id to scan
1302  *
1303  * Description:
1304  *     Scan the target id on @shost, @channel, and @id. Scan at least LUN
1305  *     0, and possibly all LUNs on the target id.
1306  *
1307  *     Use the pre-allocated @sdevscan as a handle for the scanning. This
1308  *     function sets sdevscan->host, sdevscan->id and sdevscan->lun; the
1309  *     scanning functions modify sdevscan->lun.
1310  *
1311  *     First try a REPORT LUN scan, if that does not scan the target, do a
1312  *     sequential scan of LUNs on the target id.
1313  **/
1314 void scsi_scan_target(struct device *parent, unsigned int channel,
1315 		      unsigned int id, unsigned int lun, int rescan)
1316 {
1317 	struct Scsi_Host *shost = dev_to_shost(parent);
1318 	int bflags = 0;
1319 	int res;
1320 	struct scsi_device *sdev = NULL;
1321 	struct scsi_target *starget;
1322 
1323 	if (shost->this_id == id)
1324 		/*
1325 		 * Don't scan the host adapter
1326 		 */
1327 		return;
1328 
1329 
1330 	starget = scsi_alloc_target(parent, channel, id);
1331 
1332 	if (!starget)
1333 		return;
1334 
1335 	get_device(&starget->dev);
1336 	if (lun != SCAN_WILD_CARD) {
1337 		/*
1338 		 * Scan for a specific host/chan/id/lun.
1339 		 */
1340 		scsi_probe_and_add_lun(starget, lun, NULL, NULL, rescan, NULL);
1341 		goto out_reap;
1342 	}
1343 
1344 	/*
1345 	 * Scan LUN 0, if there is some response, scan further. Ideally, we
1346 	 * would not configure LUN 0 until all LUNs are scanned.
1347 	 */
1348 	res = scsi_probe_and_add_lun(starget, 0, &bflags, &sdev, rescan, NULL);
1349 	if (res == SCSI_SCAN_LUN_PRESENT) {
1350 		if (scsi_report_lun_scan(sdev, bflags, rescan) != 0)
1351 			/*
1352 			 * The REPORT LUN did not scan the target,
1353 			 * do a sequential scan.
1354 			 */
1355 			scsi_sequential_lun_scan(starget, bflags,
1356 				       	res, sdev->scsi_level, rescan);
1357 	} else if (res == SCSI_SCAN_TARGET_PRESENT) {
1358 		/*
1359 		 * There's a target here, but lun 0 is offline so we
1360 		 * can't use the report_lun scan.  Fall back to a
1361 		 * sequential lun scan with a bflags of SPARSELUN and
1362 		 * a default scsi level of SCSI_2
1363 		 */
1364 		scsi_sequential_lun_scan(starget, BLIST_SPARSELUN,
1365 				SCSI_SCAN_TARGET_PRESENT, SCSI_2, rescan);
1366 	}
1367 	if (sdev)
1368 		scsi_device_put(sdev);
1369 
1370  out_reap:
1371 	/* now determine if the target has any children at all
1372 	 * and if not, nuke it */
1373 	scsi_target_reap(starget);
1374 
1375 	put_device(&starget->dev);
1376 }
1377 EXPORT_SYMBOL(scsi_scan_target);
1378 
1379 static void scsi_scan_channel(struct Scsi_Host *shost, unsigned int channel,
1380 			      unsigned int id, unsigned int lun, int rescan)
1381 {
1382 	uint order_id;
1383 
1384 	if (id == SCAN_WILD_CARD)
1385 		for (id = 0; id < shost->max_id; ++id) {
1386 			/*
1387 			 * XXX adapter drivers when possible (FCP, iSCSI)
1388 			 * could modify max_id to match the current max,
1389 			 * not the absolute max.
1390 			 *
1391 			 * XXX add a shost id iterator, so for example,
1392 			 * the FC ID can be the same as a target id
1393 			 * without a huge overhead of sparse id's.
1394 			 */
1395 			if (shost->reverse_ordering)
1396 				/*
1397 				 * Scan from high to low id.
1398 				 */
1399 				order_id = shost->max_id - id - 1;
1400 			else
1401 				order_id = id;
1402 			scsi_scan_target(&shost->shost_gendev, channel, order_id, lun, rescan);
1403 		}
1404 	else
1405 		scsi_scan_target(&shost->shost_gendev, channel, id, lun, rescan);
1406 }
1407 
1408 int scsi_scan_host_selected(struct Scsi_Host *shost, unsigned int channel,
1409 			    unsigned int id, unsigned int lun, int rescan)
1410 {
1411 	SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "%s: <%u:%u:%u:%u>\n",
1412 		__FUNCTION__, shost->host_no, channel, id, lun));
1413 
1414 	if (((channel != SCAN_WILD_CARD) && (channel > shost->max_channel)) ||
1415 	    ((id != SCAN_WILD_CARD) && (id > shost->max_id)) ||
1416 	    ((lun != SCAN_WILD_CARD) && (lun > shost->max_lun)))
1417 		return -EINVAL;
1418 
1419 	down(&shost->scan_mutex);
1420 	if (channel == SCAN_WILD_CARD)
1421 		for (channel = 0; channel <= shost->max_channel; channel++)
1422 			scsi_scan_channel(shost, channel, id, lun, rescan);
1423 	else
1424 		scsi_scan_channel(shost, channel, id, lun, rescan);
1425 	up(&shost->scan_mutex);
1426 
1427 	return 0;
1428 }
1429 
1430 /**
1431  * scsi_scan_host - scan the given adapter
1432  * @shost:	adapter to scan
1433  **/
1434 void scsi_scan_host(struct Scsi_Host *shost)
1435 {
1436 	scsi_scan_host_selected(shost, SCAN_WILD_CARD, SCAN_WILD_CARD,
1437 				SCAN_WILD_CARD, 0);
1438 }
1439 EXPORT_SYMBOL(scsi_scan_host);
1440 
1441 /**
1442  * scsi_scan_single_target - scan the given SCSI target
1443  * @shost:         adapter to scan
1444  * @chan:          channel to scan
1445  * @id:            target id to scan
1446  **/
1447 void scsi_scan_single_target(struct Scsi_Host *shost,
1448 	unsigned int chan, unsigned int id)
1449 {
1450 	scsi_scan_host_selected(shost, chan, id, SCAN_WILD_CARD, 1);
1451 }
1452 EXPORT_SYMBOL(scsi_scan_single_target);
1453 
1454 void scsi_forget_host(struct Scsi_Host *shost)
1455 {
1456 	struct scsi_target *starget, *tmp;
1457 	unsigned long flags;
1458 
1459 	/*
1460 	 * Ok, this look a bit strange.  We always look for the first device
1461 	 * on the list as scsi_remove_device removes them from it - thus we
1462 	 * also have to release the lock.
1463 	 * We don't need to get another reference to the device before
1464 	 * releasing the lock as we already own the reference from
1465 	 * scsi_register_device that's release in scsi_remove_device.  And
1466 	 * after that we don't look at sdev anymore.
1467 	 */
1468 	spin_lock_irqsave(shost->host_lock, flags);
1469 	list_for_each_entry_safe(starget, tmp, &shost->__targets, siblings) {
1470 		spin_unlock_irqrestore(shost->host_lock, flags);
1471 		scsi_remove_target(&starget->dev);
1472 		spin_lock_irqsave(shost->host_lock, flags);
1473 	}
1474 	spin_unlock_irqrestore(shost->host_lock, flags);
1475 }
1476 
1477 /*
1478  * Function:    scsi_get_host_dev()
1479  *
1480  * Purpose:     Create a Scsi_Device that points to the host adapter itself.
1481  *
1482  * Arguments:   SHpnt   - Host that needs a Scsi_Device
1483  *
1484  * Lock status: None assumed.
1485  *
1486  * Returns:     The Scsi_Device or NULL
1487  *
1488  * Notes:
1489  *	Attach a single Scsi_Device to the Scsi_Host - this should
1490  *	be made to look like a "pseudo-device" that points to the
1491  *	HA itself.
1492  *
1493  *	Note - this device is not accessible from any high-level
1494  *	drivers (including generics), which is probably not
1495  *	optimal.  We can add hooks later to attach
1496  */
1497 struct scsi_device *scsi_get_host_dev(struct Scsi_Host *shost)
1498 {
1499 	struct scsi_device *sdev;
1500 	struct scsi_target *starget;
1501 
1502 	starget = scsi_alloc_target(&shost->shost_gendev, 0, shost->this_id);
1503 	if (!starget)
1504 		return NULL;
1505 
1506 	sdev = scsi_alloc_sdev(starget, 0, NULL);
1507 	if (sdev) {
1508 		sdev->sdev_gendev.parent = get_device(&starget->dev);
1509 		sdev->borken = 0;
1510 	}
1511 	put_device(&starget->dev);
1512 	return sdev;
1513 }
1514 EXPORT_SYMBOL(scsi_get_host_dev);
1515 
1516 /*
1517  * Function:    scsi_free_host_dev()
1518  *
1519  * Purpose:     Free a scsi_device that points to the host adapter itself.
1520  *
1521  * Arguments:   SHpnt   - Host that needs a Scsi_Device
1522  *
1523  * Lock status: None assumed.
1524  *
1525  * Returns:     Nothing
1526  *
1527  * Notes:
1528  */
1529 void scsi_free_host_dev(struct scsi_device *sdev)
1530 {
1531 	BUG_ON(sdev->id != sdev->host->this_id);
1532 
1533 	if (sdev->host->hostt->slave_destroy)
1534 		sdev->host->hostt->slave_destroy(sdev);
1535 	transport_destroy_device(&sdev->sdev_gendev);
1536 	put_device(&sdev->sdev_gendev);
1537 }
1538 EXPORT_SYMBOL(scsi_free_host_dev);
1539 
1540