xref: /linux/drivers/scsi/scsi_scan.c (revision 14b42963f64b98ab61fa9723c03d71aa5ef4f862)
1 /*
2  * scsi_scan.c
3  *
4  * Copyright (C) 2000 Eric Youngdale,
5  * Copyright (C) 2002 Patrick Mansfield
6  *
7  * The general scanning/probing algorithm is as follows, exceptions are
8  * made to it depending on device specific flags, compilation options, and
9  * global variable (boot or module load time) settings.
10  *
11  * A specific LUN is scanned via an INQUIRY command; if the LUN has a
12  * device attached, a scsi_device is allocated and setup for it.
13  *
14  * For every id of every channel on the given host:
15  *
16  * 	Scan LUN 0; if the target responds to LUN 0 (even if there is no
17  * 	device or storage attached to LUN 0):
18  *
19  * 		If LUN 0 has a device attached, allocate and setup a
20  * 		scsi_device for it.
21  *
22  * 		If target is SCSI-3 or up, issue a REPORT LUN, and scan
23  * 		all of the LUNs returned by the REPORT LUN; else,
24  * 		sequentially scan LUNs up until some maximum is reached,
25  * 		or a LUN is seen that cannot have a device attached to it.
26  */
27 
28 #include <linux/module.h>
29 #include <linux/moduleparam.h>
30 #include <linux/init.h>
31 #include <linux/blkdev.h>
32 #include <asm/semaphore.h>
33 
34 #include <scsi/scsi.h>
35 #include <scsi/scsi_cmnd.h>
36 #include <scsi/scsi_device.h>
37 #include <scsi/scsi_driver.h>
38 #include <scsi/scsi_devinfo.h>
39 #include <scsi/scsi_host.h>
40 #include <scsi/scsi_transport.h>
41 #include <scsi/scsi_eh.h>
42 
43 #include "scsi_priv.h"
44 #include "scsi_logging.h"
45 
46 #define ALLOC_FAILURE_MSG	KERN_ERR "%s: Allocation failure during" \
47 	" SCSI scanning, some SCSI devices might not be configured\n"
48 
49 /*
50  * Default timeout
51  */
52 #define SCSI_TIMEOUT (2*HZ)
53 
54 /*
55  * Prefix values for the SCSI id's (stored in driverfs name field)
56  */
57 #define SCSI_UID_SER_NUM 'S'
58 #define SCSI_UID_UNKNOWN 'Z'
59 
60 /*
61  * Return values of some of the scanning functions.
62  *
63  * SCSI_SCAN_NO_RESPONSE: no valid response received from the target, this
64  * includes allocation or general failures preventing IO from being sent.
65  *
66  * SCSI_SCAN_TARGET_PRESENT: target responded, but no device is available
67  * on the given LUN.
68  *
69  * SCSI_SCAN_LUN_PRESENT: target responded, and a device is available on a
70  * given LUN.
71  */
72 #define SCSI_SCAN_NO_RESPONSE		0
73 #define SCSI_SCAN_TARGET_PRESENT	1
74 #define SCSI_SCAN_LUN_PRESENT		2
75 
76 static const char *scsi_null_device_strs = "nullnullnullnull";
77 
78 #define MAX_SCSI_LUNS	512
79 
80 #ifdef CONFIG_SCSI_MULTI_LUN
81 static unsigned int max_scsi_luns = MAX_SCSI_LUNS;
82 #else
83 static unsigned int max_scsi_luns = 1;
84 #endif
85 
86 module_param_named(max_luns, max_scsi_luns, int, S_IRUGO|S_IWUSR);
87 MODULE_PARM_DESC(max_luns,
88 		 "last scsi LUN (should be between 1 and 2^32-1)");
89 
90 /*
91  * max_scsi_report_luns: the maximum number of LUNS that will be
92  * returned from the REPORT LUNS command. 8 times this value must
93  * be allocated. In theory this could be up to an 8 byte value, but
94  * in practice, the maximum number of LUNs suppored by any device
95  * is about 16k.
96  */
97 static unsigned int max_scsi_report_luns = 511;
98 
99 module_param_named(max_report_luns, max_scsi_report_luns, int, S_IRUGO|S_IWUSR);
100 MODULE_PARM_DESC(max_report_luns,
101 		 "REPORT LUNS maximum number of LUNS received (should be"
102 		 " between 1 and 16384)");
103 
104 static unsigned int scsi_inq_timeout = SCSI_TIMEOUT/HZ+3;
105 
106 module_param_named(inq_timeout, scsi_inq_timeout, int, S_IRUGO|S_IWUSR);
107 MODULE_PARM_DESC(inq_timeout,
108 		 "Timeout (in seconds) waiting for devices to answer INQUIRY."
109 		 " Default is 5. Some non-compliant devices need more.");
110 
111 /**
112  * scsi_unlock_floptical - unlock device via a special MODE SENSE command
113  * @sdev:	scsi device to send command to
114  * @result:	area to store the result of the MODE SENSE
115  *
116  * Description:
117  *     Send a vendor specific MODE SENSE (not a MODE SELECT) command.
118  *     Called for BLIST_KEY devices.
119  **/
120 static void scsi_unlock_floptical(struct scsi_device *sdev,
121 				  unsigned char *result)
122 {
123 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
124 
125 	printk(KERN_NOTICE "scsi: unlocking floptical drive\n");
126 	scsi_cmd[0] = MODE_SENSE;
127 	scsi_cmd[1] = 0;
128 	scsi_cmd[2] = 0x2e;
129 	scsi_cmd[3] = 0;
130 	scsi_cmd[4] = 0x2a;     /* size */
131 	scsi_cmd[5] = 0;
132 	scsi_execute_req(sdev, scsi_cmd, DMA_FROM_DEVICE, result, 0x2a, NULL,
133 			 SCSI_TIMEOUT, 3);
134 }
135 
136 /**
137  * print_inquiry - printk the inquiry information
138  * @inq_result:	printk this SCSI INQUIRY
139  *
140  * Description:
141  *     printk the vendor, model, and other information found in the
142  *     INQUIRY data in @inq_result.
143  *
144  * Notes:
145  *     Remove this, and replace with a hotplug event that logs any
146  *     relevant information.
147  **/
148 static void print_inquiry(unsigned char *inq_result)
149 {
150 	int i;
151 
152 	printk(KERN_NOTICE "  Vendor: ");
153 	for (i = 8; i < 16; i++)
154 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
155 			printk("%c", inq_result[i]);
156 		else
157 			printk(" ");
158 
159 	printk("  Model: ");
160 	for (i = 16; i < 32; i++)
161 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
162 			printk("%c", inq_result[i]);
163 		else
164 			printk(" ");
165 
166 	printk("  Rev: ");
167 	for (i = 32; i < 36; i++)
168 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
169 			printk("%c", inq_result[i]);
170 		else
171 			printk(" ");
172 
173 	printk("\n");
174 
175 	i = inq_result[0] & 0x1f;
176 
177 	printk(KERN_NOTICE "  Type:   %s ",
178 	       i <
179 	       MAX_SCSI_DEVICE_CODE ? scsi_device_types[i] :
180 	       "Unknown          ");
181 	printk("                 ANSI SCSI revision: %02x",
182 	       inq_result[2] & 0x07);
183 	if ((inq_result[2] & 0x07) == 1 && (inq_result[3] & 0x0f) == 1)
184 		printk(" CCS\n");
185 	else
186 		printk("\n");
187 }
188 
189 /**
190  * scsi_alloc_sdev - allocate and setup a scsi_Device
191  *
192  * Description:
193  *     Allocate, initialize for io, and return a pointer to a scsi_Device.
194  *     Stores the @shost, @channel, @id, and @lun in the scsi_Device, and
195  *     adds scsi_Device to the appropriate list.
196  *
197  * Return value:
198  *     scsi_Device pointer, or NULL on failure.
199  **/
200 static struct scsi_device *scsi_alloc_sdev(struct scsi_target *starget,
201 					   unsigned int lun, void *hostdata)
202 {
203 	struct scsi_device *sdev;
204 	int display_failure_msg = 1, ret;
205 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
206 
207 	sdev = kzalloc(sizeof(*sdev) + shost->transportt->device_size,
208 		       GFP_ATOMIC);
209 	if (!sdev)
210 		goto out;
211 
212 	sdev->vendor = scsi_null_device_strs;
213 	sdev->model = scsi_null_device_strs;
214 	sdev->rev = scsi_null_device_strs;
215 	sdev->host = shost;
216 	sdev->id = starget->id;
217 	sdev->lun = lun;
218 	sdev->channel = starget->channel;
219 	sdev->sdev_state = SDEV_CREATED;
220 	INIT_LIST_HEAD(&sdev->siblings);
221 	INIT_LIST_HEAD(&sdev->same_target_siblings);
222 	INIT_LIST_HEAD(&sdev->cmd_list);
223 	INIT_LIST_HEAD(&sdev->starved_entry);
224 	spin_lock_init(&sdev->list_lock);
225 
226 	sdev->sdev_gendev.parent = get_device(&starget->dev);
227 	sdev->sdev_target = starget;
228 
229 	/* usually NULL and set by ->slave_alloc instead */
230 	sdev->hostdata = hostdata;
231 
232 	/* if the device needs this changing, it may do so in the
233 	 * slave_configure function */
234 	sdev->max_device_blocked = SCSI_DEFAULT_DEVICE_BLOCKED;
235 
236 	/*
237 	 * Some low level driver could use device->type
238 	 */
239 	sdev->type = -1;
240 
241 	/*
242 	 * Assume that the device will have handshaking problems,
243 	 * and then fix this field later if it turns out it
244 	 * doesn't
245 	 */
246 	sdev->borken = 1;
247 
248 	sdev->request_queue = scsi_alloc_queue(sdev);
249 	if (!sdev->request_queue) {
250 		/* release fn is set up in scsi_sysfs_device_initialise, so
251 		 * have to free and put manually here */
252 		put_device(&starget->dev);
253 		kfree(sdev);
254 		goto out;
255 	}
256 
257 	sdev->request_queue->queuedata = sdev;
258 	scsi_adjust_queue_depth(sdev, 0, sdev->host->cmd_per_lun);
259 
260 	scsi_sysfs_device_initialize(sdev);
261 
262 	if (shost->hostt->slave_alloc) {
263 		ret = shost->hostt->slave_alloc(sdev);
264 		if (ret) {
265 			/*
266 			 * if LLDD reports slave not present, don't clutter
267 			 * console with alloc failure messages
268 			 */
269 			if (ret == -ENXIO)
270 				display_failure_msg = 0;
271 			goto out_device_destroy;
272 		}
273 	}
274 
275 	return sdev;
276 
277 out_device_destroy:
278 	transport_destroy_device(&sdev->sdev_gendev);
279 	put_device(&sdev->sdev_gendev);
280 out:
281 	if (display_failure_msg)
282 		printk(ALLOC_FAILURE_MSG, __FUNCTION__);
283 	return NULL;
284 }
285 
286 static void scsi_target_dev_release(struct device *dev)
287 {
288 	struct device *parent = dev->parent;
289 	struct scsi_target *starget = to_scsi_target(dev);
290 
291 	kfree(starget);
292 	put_device(parent);
293 }
294 
295 int scsi_is_target_device(const struct device *dev)
296 {
297 	return dev->release == scsi_target_dev_release;
298 }
299 EXPORT_SYMBOL(scsi_is_target_device);
300 
301 static struct scsi_target *__scsi_find_target(struct device *parent,
302 					      int channel, uint id)
303 {
304 	struct scsi_target *starget, *found_starget = NULL;
305 	struct Scsi_Host *shost = dev_to_shost(parent);
306 	/*
307 	 * Search for an existing target for this sdev.
308 	 */
309 	list_for_each_entry(starget, &shost->__targets, siblings) {
310 		if (starget->id == id &&
311 		    starget->channel == channel) {
312 			found_starget = starget;
313 			break;
314 		}
315 	}
316 	if (found_starget)
317 		get_device(&found_starget->dev);
318 
319 	return found_starget;
320 }
321 
322 static struct scsi_target *scsi_alloc_target(struct device *parent,
323 					     int channel, uint id)
324 {
325 	struct Scsi_Host *shost = dev_to_shost(parent);
326 	struct device *dev = NULL;
327 	unsigned long flags;
328 	const int size = sizeof(struct scsi_target)
329 		+ shost->transportt->target_size;
330 	struct scsi_target *starget;
331 	struct scsi_target *found_target;
332 	int error;
333 
334 	starget = kzalloc(size, GFP_KERNEL);
335 	if (!starget) {
336 		printk(KERN_ERR "%s: allocation failure\n", __FUNCTION__);
337 		return NULL;
338 	}
339 	dev = &starget->dev;
340 	device_initialize(dev);
341 	starget->reap_ref = 1;
342 	dev->parent = get_device(parent);
343 	dev->release = scsi_target_dev_release;
344 	sprintf(dev->bus_id, "target%d:%d:%d",
345 		shost->host_no, channel, id);
346 	starget->id = id;
347 	starget->channel = channel;
348 	INIT_LIST_HEAD(&starget->siblings);
349 	INIT_LIST_HEAD(&starget->devices);
350 	starget->state = STARGET_RUNNING;
351  retry:
352 	spin_lock_irqsave(shost->host_lock, flags);
353 
354 	found_target = __scsi_find_target(parent, channel, id);
355 	if (found_target)
356 		goto found;
357 
358 	list_add_tail(&starget->siblings, &shost->__targets);
359 	spin_unlock_irqrestore(shost->host_lock, flags);
360 	/* allocate and add */
361 	transport_setup_device(dev);
362 	error = device_add(dev);
363 	if (error) {
364 		dev_err(dev, "target device_add failed, error %d\n", error);
365 		spin_lock_irqsave(shost->host_lock, flags);
366 		list_del_init(&starget->siblings);
367 		spin_unlock_irqrestore(shost->host_lock, flags);
368 		transport_destroy_device(dev);
369 		put_device(parent);
370 		kfree(starget);
371 		return NULL;
372 	}
373 	transport_add_device(dev);
374 	if (shost->hostt->target_alloc) {
375 		error = shost->hostt->target_alloc(starget);
376 
377 		if(error) {
378 			dev_printk(KERN_ERR, dev, "target allocation failed, error %d\n", error);
379 			/* don't want scsi_target_reap to do the final
380 			 * put because it will be under the host lock */
381 			get_device(dev);
382 			scsi_target_reap(starget);
383 			put_device(dev);
384 			return NULL;
385 		}
386 	}
387 
388 	return starget;
389 
390  found:
391 	found_target->reap_ref++;
392 	spin_unlock_irqrestore(shost->host_lock, flags);
393 	put_device(parent);
394 	if (found_target->state != STARGET_DEL) {
395 		kfree(starget);
396 		return found_target;
397 	}
398 	/* Unfortunately, we found a dying target; need to
399 	 * wait until it's dead before we can get a new one */
400 	put_device(&found_target->dev);
401 	flush_scheduled_work();
402 	goto retry;
403 }
404 
405 static void scsi_target_reap_usercontext(void *data)
406 {
407 	struct scsi_target *starget = data;
408 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
409 	unsigned long flags;
410 
411 	transport_remove_device(&starget->dev);
412 	device_del(&starget->dev);
413 	transport_destroy_device(&starget->dev);
414 	spin_lock_irqsave(shost->host_lock, flags);
415 	if (shost->hostt->target_destroy)
416 		shost->hostt->target_destroy(starget);
417 	list_del_init(&starget->siblings);
418 	spin_unlock_irqrestore(shost->host_lock, flags);
419 	put_device(&starget->dev);
420 }
421 
422 /**
423  * scsi_target_reap - check to see if target is in use and destroy if not
424  *
425  * @starget: target to be checked
426  *
427  * This is used after removing a LUN or doing a last put of the target
428  * it checks atomically that nothing is using the target and removes
429  * it if so.
430  */
431 void scsi_target_reap(struct scsi_target *starget)
432 {
433 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
434 	unsigned long flags;
435 
436 	spin_lock_irqsave(shost->host_lock, flags);
437 
438 	if (--starget->reap_ref == 0 && list_empty(&starget->devices)) {
439 		BUG_ON(starget->state == STARGET_DEL);
440 		starget->state = STARGET_DEL;
441 		spin_unlock_irqrestore(shost->host_lock, flags);
442 		execute_in_process_context(scsi_target_reap_usercontext,
443 					   starget, &starget->ew);
444 		return;
445 
446 	}
447 	spin_unlock_irqrestore(shost->host_lock, flags);
448 
449 	return;
450 }
451 
452 /**
453  * scsi_probe_lun - probe a single LUN using a SCSI INQUIRY
454  * @sdev:	scsi_device to probe
455  * @inq_result:	area to store the INQUIRY result
456  * @result_len: len of inq_result
457  * @bflags:	store any bflags found here
458  *
459  * Description:
460  *     Probe the lun associated with @req using a standard SCSI INQUIRY;
461  *
462  *     If the INQUIRY is successful, zero is returned and the
463  *     INQUIRY data is in @inq_result; the scsi_level and INQUIRY length
464  *     are copied to the scsi_device any flags value is stored in *@bflags.
465  **/
466 static int scsi_probe_lun(struct scsi_device *sdev, char *inq_result,
467 			  int result_len, int *bflags)
468 {
469 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
470 	int first_inquiry_len, try_inquiry_len, next_inquiry_len;
471 	int response_len = 0;
472 	int pass, count, result;
473 	struct scsi_sense_hdr sshdr;
474 
475 	*bflags = 0;
476 
477 	/* Perform up to 3 passes.  The first pass uses a conservative
478 	 * transfer length of 36 unless sdev->inquiry_len specifies a
479 	 * different value. */
480 	first_inquiry_len = sdev->inquiry_len ? sdev->inquiry_len : 36;
481 	try_inquiry_len = first_inquiry_len;
482 	pass = 1;
483 
484  next_pass:
485 	SCSI_LOG_SCAN_BUS(3, sdev_printk(KERN_INFO, sdev,
486 				"scsi scan: INQUIRY pass %d length %d\n",
487 				pass, try_inquiry_len));
488 
489 	/* Each pass gets up to three chances to ignore Unit Attention */
490 	for (count = 0; count < 3; ++count) {
491 		memset(scsi_cmd, 0, 6);
492 		scsi_cmd[0] = INQUIRY;
493 		scsi_cmd[4] = (unsigned char) try_inquiry_len;
494 
495 		memset(inq_result, 0, try_inquiry_len);
496 
497 		result = scsi_execute_req(sdev,  scsi_cmd, DMA_FROM_DEVICE,
498 					  inq_result, try_inquiry_len, &sshdr,
499 					  HZ / 2 + HZ * scsi_inq_timeout, 3);
500 
501 		SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: INQUIRY %s "
502 				"with code 0x%x\n",
503 				result ? "failed" : "successful", result));
504 
505 		if (result) {
506 			/*
507 			 * not-ready to ready transition [asc/ascq=0x28/0x0]
508 			 * or power-on, reset [asc/ascq=0x29/0x0], continue.
509 			 * INQUIRY should not yield UNIT_ATTENTION
510 			 * but many buggy devices do so anyway.
511 			 */
512 			if ((driver_byte(result) & DRIVER_SENSE) &&
513 			    scsi_sense_valid(&sshdr)) {
514 				if ((sshdr.sense_key == UNIT_ATTENTION) &&
515 				    ((sshdr.asc == 0x28) ||
516 				     (sshdr.asc == 0x29)) &&
517 				    (sshdr.ascq == 0))
518 					continue;
519 			}
520 		}
521 		break;
522 	}
523 
524 	if (result == 0) {
525 		response_len = (unsigned char) inq_result[4] + 5;
526 		if (response_len > 255)
527 			response_len = first_inquiry_len;	/* sanity */
528 
529 		/*
530 		 * Get any flags for this device.
531 		 *
532 		 * XXX add a bflags to scsi_device, and replace the
533 		 * corresponding bit fields in scsi_device, so bflags
534 		 * need not be passed as an argument.
535 		 */
536 		*bflags = scsi_get_device_flags(sdev, &inq_result[8],
537 				&inq_result[16]);
538 
539 		/* When the first pass succeeds we gain information about
540 		 * what larger transfer lengths might work. */
541 		if (pass == 1) {
542 			if (BLIST_INQUIRY_36 & *bflags)
543 				next_inquiry_len = 36;
544 			else if (BLIST_INQUIRY_58 & *bflags)
545 				next_inquiry_len = 58;
546 			else if (sdev->inquiry_len)
547 				next_inquiry_len = sdev->inquiry_len;
548 			else
549 				next_inquiry_len = response_len;
550 
551 			/* If more data is available perform the second pass */
552 			if (next_inquiry_len > try_inquiry_len) {
553 				try_inquiry_len = next_inquiry_len;
554 				pass = 2;
555 				goto next_pass;
556 			}
557 		}
558 
559 	} else if (pass == 2) {
560 		printk(KERN_INFO "scsi scan: %d byte inquiry failed.  "
561 				"Consider BLIST_INQUIRY_36 for this device\n",
562 				try_inquiry_len);
563 
564 		/* If this pass failed, the third pass goes back and transfers
565 		 * the same amount as we successfully got in the first pass. */
566 		try_inquiry_len = first_inquiry_len;
567 		pass = 3;
568 		goto next_pass;
569 	}
570 
571 	/* If the last transfer attempt got an error, assume the
572 	 * peripheral doesn't exist or is dead. */
573 	if (result)
574 		return -EIO;
575 
576 	/* Don't report any more data than the device says is valid */
577 	sdev->inquiry_len = min(try_inquiry_len, response_len);
578 
579 	/*
580 	 * XXX Abort if the response length is less than 36? If less than
581 	 * 32, the lookup of the device flags (above) could be invalid,
582 	 * and it would be possible to take an incorrect action - we do
583 	 * not want to hang because of a short INQUIRY. On the flip side,
584 	 * if the device is spun down or becoming ready (and so it gives a
585 	 * short INQUIRY), an abort here prevents any further use of the
586 	 * device, including spin up.
587 	 *
588 	 * Related to the above issue:
589 	 *
590 	 * XXX Devices (disk or all?) should be sent a TEST UNIT READY,
591 	 * and if not ready, sent a START_STOP to start (maybe spin up) and
592 	 * then send the INQUIRY again, since the INQUIRY can change after
593 	 * a device is initialized.
594 	 *
595 	 * Ideally, start a device if explicitly asked to do so.  This
596 	 * assumes that a device is spun up on power on, spun down on
597 	 * request, and then spun up on request.
598 	 */
599 
600 	/*
601 	 * The scanning code needs to know the scsi_level, even if no
602 	 * device is attached at LUN 0 (SCSI_SCAN_TARGET_PRESENT) so
603 	 * non-zero LUNs can be scanned.
604 	 */
605 	sdev->scsi_level = inq_result[2] & 0x07;
606 	if (sdev->scsi_level >= 2 ||
607 	    (sdev->scsi_level == 1 && (inq_result[3] & 0x0f) == 1))
608 		sdev->scsi_level++;
609 	sdev->sdev_target->scsi_level = sdev->scsi_level;
610 
611 	return 0;
612 }
613 
614 /**
615  * scsi_add_lun - allocate and fully initialze a scsi_device
616  * @sdevscan:	holds information to be stored in the new scsi_device
617  * @sdevnew:	store the address of the newly allocated scsi_device
618  * @inq_result:	holds the result of a previous INQUIRY to the LUN
619  * @bflags:	black/white list flag
620  *
621  * Description:
622  *     Allocate and initialize a scsi_device matching sdevscan. Optionally
623  *     set fields based on values in *@bflags. If @sdevnew is not
624  *     NULL, store the address of the new scsi_device in *@sdevnew (needed
625  *     when scanning a particular LUN).
626  *
627  * Return:
628  *     SCSI_SCAN_NO_RESPONSE: could not allocate or setup a scsi_device
629  *     SCSI_SCAN_LUN_PRESENT: a new scsi_device was allocated and initialized
630  **/
631 static int scsi_add_lun(struct scsi_device *sdev, char *inq_result, int *bflags)
632 {
633 	/*
634 	 * XXX do not save the inquiry, since it can change underneath us,
635 	 * save just vendor/model/rev.
636 	 *
637 	 * Rather than save it and have an ioctl that retrieves the saved
638 	 * value, have an ioctl that executes the same INQUIRY code used
639 	 * in scsi_probe_lun, let user level programs doing INQUIRY
640 	 * scanning run at their own risk, or supply a user level program
641 	 * that can correctly scan.
642 	 */
643 	sdev->inquiry = kmalloc(sdev->inquiry_len, GFP_ATOMIC);
644 	if (sdev->inquiry == NULL) {
645 		return SCSI_SCAN_NO_RESPONSE;
646 	}
647 
648 	memcpy(sdev->inquiry, inq_result, sdev->inquiry_len);
649 	sdev->vendor = (char *) (sdev->inquiry + 8);
650 	sdev->model = (char *) (sdev->inquiry + 16);
651 	sdev->rev = (char *) (sdev->inquiry + 32);
652 
653 	if (*bflags & BLIST_ISROM) {
654 		/*
655 		 * It would be better to modify sdev->type, and set
656 		 * sdev->removable, but then the print_inquiry() output
657 		 * would not show TYPE_ROM; if print_inquiry() is removed
658 		 * the issue goes away.
659 		 */
660 		inq_result[0] = TYPE_ROM;
661 		inq_result[1] |= 0x80;	/* removable */
662 	} else if (*bflags & BLIST_NO_ULD_ATTACH)
663 		sdev->no_uld_attach = 1;
664 
665 	switch (sdev->type = (inq_result[0] & 0x1f)) {
666 	case TYPE_TAPE:
667 	case TYPE_DISK:
668 	case TYPE_PRINTER:
669 	case TYPE_MOD:
670 	case TYPE_PROCESSOR:
671 	case TYPE_SCANNER:
672 	case TYPE_MEDIUM_CHANGER:
673 	case TYPE_ENCLOSURE:
674 	case TYPE_COMM:
675 	case TYPE_RAID:
676 	case TYPE_RBC:
677 		sdev->writeable = 1;
678 		break;
679 	case TYPE_WORM:
680 	case TYPE_ROM:
681 		sdev->writeable = 0;
682 		break;
683 	default:
684 		printk(KERN_INFO "scsi: unknown device type %d\n", sdev->type);
685 	}
686 
687 	print_inquiry(inq_result);
688 
689 	/*
690 	 * For a peripheral qualifier (PQ) value of 1 (001b), the SCSI
691 	 * spec says: The device server is capable of supporting the
692 	 * specified peripheral device type on this logical unit. However,
693 	 * the physical device is not currently connected to this logical
694 	 * unit.
695 	 *
696 	 * The above is vague, as it implies that we could treat 001 and
697 	 * 011 the same. Stay compatible with previous code, and create a
698 	 * scsi_device for a PQ of 1
699 	 *
700 	 * Don't set the device offline here; rather let the upper
701 	 * level drivers eval the PQ to decide whether they should
702 	 * attach. So remove ((inq_result[0] >> 5) & 7) == 1 check.
703 	 */
704 
705 	sdev->inq_periph_qual = (inq_result[0] >> 5) & 7;
706 	sdev->removable = (0x80 & inq_result[1]) >> 7;
707 	sdev->lockable = sdev->removable;
708 	sdev->soft_reset = (inq_result[7] & 1) && ((inq_result[3] & 7) == 2);
709 
710 	if (sdev->scsi_level >= SCSI_3 || (sdev->inquiry_len > 56 &&
711 		inq_result[56] & 0x04))
712 		sdev->ppr = 1;
713 	if (inq_result[7] & 0x60)
714 		sdev->wdtr = 1;
715 	if (inq_result[7] & 0x10)
716 		sdev->sdtr = 1;
717 
718 	/*
719 	 * End sysfs code.
720 	 */
721 
722 	if ((sdev->scsi_level >= SCSI_2) && (inq_result[7] & 2) &&
723 	    !(*bflags & BLIST_NOTQ))
724 		sdev->tagged_supported = 1;
725 	/*
726 	 * Some devices (Texel CD ROM drives) have handshaking problems
727 	 * when used with the Seagate controllers. borken is initialized
728 	 * to 1, and then set it to 0 here.
729 	 */
730 	if ((*bflags & BLIST_BORKEN) == 0)
731 		sdev->borken = 0;
732 
733 	/*
734 	 * Apparently some really broken devices (contrary to the SCSI
735 	 * standards) need to be selected without asserting ATN
736 	 */
737 	if (*bflags & BLIST_SELECT_NO_ATN)
738 		sdev->select_no_atn = 1;
739 
740 	/*
741 	 * Maximum 512 sector transfer length
742 	 * broken RA4x00 Compaq Disk Array
743 	 */
744 	if (*bflags & BLIST_MAX_512)
745 		blk_queue_max_sectors(sdev->request_queue, 512);
746 
747 	/*
748 	 * Some devices may not want to have a start command automatically
749 	 * issued when a device is added.
750 	 */
751 	if (*bflags & BLIST_NOSTARTONADD)
752 		sdev->no_start_on_add = 1;
753 
754 	if (*bflags & BLIST_SINGLELUN)
755 		sdev->single_lun = 1;
756 
757 
758 	sdev->use_10_for_rw = 1;
759 
760 	if (*bflags & BLIST_MS_SKIP_PAGE_08)
761 		sdev->skip_ms_page_8 = 1;
762 
763 	if (*bflags & BLIST_MS_SKIP_PAGE_3F)
764 		sdev->skip_ms_page_3f = 1;
765 
766 	if (*bflags & BLIST_USE_10_BYTE_MS)
767 		sdev->use_10_for_ms = 1;
768 
769 	/* set the device running here so that slave configure
770 	 * may do I/O */
771 	scsi_device_set_state(sdev, SDEV_RUNNING);
772 
773 	if (*bflags & BLIST_MS_192_BYTES_FOR_3F)
774 		sdev->use_192_bytes_for_3f = 1;
775 
776 	if (*bflags & BLIST_NOT_LOCKABLE)
777 		sdev->lockable = 0;
778 
779 	if (*bflags & BLIST_RETRY_HWERROR)
780 		sdev->retry_hwerror = 1;
781 
782 	transport_configure_device(&sdev->sdev_gendev);
783 
784 	if (sdev->host->hostt->slave_configure) {
785 		int ret = sdev->host->hostt->slave_configure(sdev);
786 		if (ret) {
787 			/*
788 			 * if LLDD reports slave not present, don't clutter
789 			 * console with alloc failure messages
790 			 */
791 			if (ret != -ENXIO) {
792 				sdev_printk(KERN_ERR, sdev,
793 					"failed to configure device\n");
794 			}
795 			return SCSI_SCAN_NO_RESPONSE;
796 		}
797 	}
798 
799 	/*
800 	 * Ok, the device is now all set up, we can
801 	 * register it and tell the rest of the kernel
802 	 * about it.
803 	 */
804 	if (scsi_sysfs_add_sdev(sdev) != 0)
805 		return SCSI_SCAN_NO_RESPONSE;
806 
807 	return SCSI_SCAN_LUN_PRESENT;
808 }
809 
810 static inline void scsi_destroy_sdev(struct scsi_device *sdev)
811 {
812 	scsi_device_set_state(sdev, SDEV_DEL);
813 	if (sdev->host->hostt->slave_destroy)
814 		sdev->host->hostt->slave_destroy(sdev);
815 	transport_destroy_device(&sdev->sdev_gendev);
816 	put_device(&sdev->sdev_gendev);
817 }
818 
819 #ifdef CONFIG_SCSI_LOGGING
820 /**
821  * scsi_inq_str - print INQUIRY data from min to max index,
822  * strip trailing whitespace
823  * @buf:   Output buffer with at least end-first+1 bytes of space
824  * @inq:   Inquiry buffer (input)
825  * @first: Offset of string into inq
826  * @end:   Index after last character in inq
827  */
828 static unsigned char *scsi_inq_str(unsigned char *buf, unsigned char *inq,
829 				   unsigned first, unsigned end)
830 {
831 	unsigned term = 0, idx;
832 
833 	for (idx = 0; idx + first < end && idx + first < inq[4] + 5; idx++) {
834 		if (inq[idx+first] > ' ') {
835 			buf[idx] = inq[idx+first];
836 			term = idx+1;
837 		} else {
838 			buf[idx] = ' ';
839 		}
840 	}
841 	buf[term] = 0;
842 	return buf;
843 }
844 #endif
845 
846 /**
847  * scsi_probe_and_add_lun - probe a LUN, if a LUN is found add it
848  * @starget:	pointer to target device structure
849  * @lun:	LUN of target device
850  * @sdevscan:	probe the LUN corresponding to this scsi_device
851  * @sdevnew:	store the value of any new scsi_device allocated
852  * @bflagsp:	store bflags here if not NULL
853  *
854  * Description:
855  *     Call scsi_probe_lun, if a LUN with an attached device is found,
856  *     allocate and set it up by calling scsi_add_lun.
857  *
858  * Return:
859  *     SCSI_SCAN_NO_RESPONSE: could not allocate or setup a scsi_device
860  *     SCSI_SCAN_TARGET_PRESENT: target responded, but no device is
861  *         attached at the LUN
862  *     SCSI_SCAN_LUN_PRESENT: a new scsi_device was allocated and initialized
863  **/
864 static int scsi_probe_and_add_lun(struct scsi_target *starget,
865 				  uint lun, int *bflagsp,
866 				  struct scsi_device **sdevp, int rescan,
867 				  void *hostdata)
868 {
869 	struct scsi_device *sdev;
870 	unsigned char *result;
871 	int bflags, res = SCSI_SCAN_NO_RESPONSE, result_len = 256;
872 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
873 
874 	/*
875 	 * The rescan flag is used as an optimization, the first scan of a
876 	 * host adapter calls into here with rescan == 0.
877 	 */
878 	sdev = scsi_device_lookup_by_target(starget, lun);
879 	if (sdev) {
880 		if (rescan || sdev->sdev_state != SDEV_CREATED) {
881 			SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO
882 				"scsi scan: device exists on %s\n",
883 				sdev->sdev_gendev.bus_id));
884 			if (sdevp)
885 				*sdevp = sdev;
886 			else
887 				scsi_device_put(sdev);
888 
889 			if (bflagsp)
890 				*bflagsp = scsi_get_device_flags(sdev,
891 								 sdev->vendor,
892 								 sdev->model);
893 			return SCSI_SCAN_LUN_PRESENT;
894 		}
895 		scsi_device_put(sdev);
896 	} else
897 		sdev = scsi_alloc_sdev(starget, lun, hostdata);
898 	if (!sdev)
899 		goto out;
900 
901 	result = kmalloc(result_len, GFP_ATOMIC |
902 			((shost->unchecked_isa_dma) ? __GFP_DMA : 0));
903 	if (!result)
904 		goto out_free_sdev;
905 
906 	if (scsi_probe_lun(sdev, result, result_len, &bflags))
907 		goto out_free_result;
908 
909 	if (bflagsp)
910 		*bflagsp = bflags;
911 	/*
912 	 * result contains valid SCSI INQUIRY data.
913 	 */
914 	if (((result[0] >> 5) == 3) && !(bflags & BLIST_ATTACH_PQ3)) {
915 		/*
916 		 * For a Peripheral qualifier 3 (011b), the SCSI
917 		 * spec says: The device server is not capable of
918 		 * supporting a physical device on this logical
919 		 * unit.
920 		 *
921 		 * For disks, this implies that there is no
922 		 * logical disk configured at sdev->lun, but there
923 		 * is a target id responding.
924 		 */
925 		SCSI_LOG_SCAN_BUS(2, sdev_printk(KERN_INFO, sdev, "scsi scan:"
926 				   " peripheral qualifier of 3, device not"
927 				   " added\n"))
928 		if (lun == 0) {
929 			SCSI_LOG_SCAN_BUS(1, {
930 				unsigned char vend[9];
931 				unsigned char mod[17];
932 
933 				sdev_printk(KERN_INFO, sdev,
934 					"scsi scan: consider passing scsi_mod."
935 					"dev_flags=%s:%s:0x240 or 0x800240\n",
936 					scsi_inq_str(vend, result, 8, 16),
937 					scsi_inq_str(mod, result, 16, 32));
938 			});
939 		}
940 
941 		res = SCSI_SCAN_TARGET_PRESENT;
942 		goto out_free_result;
943 	}
944 
945 	/*
946 	 * Non-standard SCSI targets may set the PDT to 0x1f (unknown or
947 	 * no device type) instead of using the Peripheral Qualifier to
948 	 * indicate that no LUN is present.  For example, USB UFI does this.
949 	 */
950 	if (starget->pdt_1f_for_no_lun && (result[0] & 0x1f) == 0x1f) {
951 		SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO
952 					"scsi scan: peripheral device type"
953 					" of 31, no device added\n"));
954 		res = SCSI_SCAN_TARGET_PRESENT;
955 		goto out_free_result;
956 	}
957 
958 	res = scsi_add_lun(sdev, result, &bflags);
959 	if (res == SCSI_SCAN_LUN_PRESENT) {
960 		if (bflags & BLIST_KEY) {
961 			sdev->lockable = 0;
962 			scsi_unlock_floptical(sdev, result);
963 		}
964 	}
965 
966  out_free_result:
967 	kfree(result);
968  out_free_sdev:
969 	if (res == SCSI_SCAN_LUN_PRESENT) {
970 		if (sdevp) {
971 			if (scsi_device_get(sdev) == 0) {
972 				*sdevp = sdev;
973 			} else {
974 				__scsi_remove_device(sdev);
975 				res = SCSI_SCAN_NO_RESPONSE;
976 			}
977 		}
978 	} else
979 		scsi_destroy_sdev(sdev);
980  out:
981 	return res;
982 }
983 
984 /**
985  * scsi_sequential_lun_scan - sequentially scan a SCSI target
986  * @starget:	pointer to target structure to scan
987  * @bflags:	black/white list flag for LUN 0
988  *
989  * Description:
990  *     Generally, scan from LUN 1 (LUN 0 is assumed to already have been
991  *     scanned) to some maximum lun until a LUN is found with no device
992  *     attached. Use the bflags to figure out any oddities.
993  *
994  *     Modifies sdevscan->lun.
995  **/
996 static void scsi_sequential_lun_scan(struct scsi_target *starget,
997 				     int bflags, int scsi_level, int rescan)
998 {
999 	unsigned int sparse_lun, lun, max_dev_lun;
1000 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
1001 
1002 	SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: Sequential scan of"
1003 				    "%s\n", starget->dev.bus_id));
1004 
1005 	max_dev_lun = min(max_scsi_luns, shost->max_lun);
1006 	/*
1007 	 * If this device is known to support sparse multiple units,
1008 	 * override the other settings, and scan all of them. Normally,
1009 	 * SCSI-3 devices should be scanned via the REPORT LUNS.
1010 	 */
1011 	if (bflags & BLIST_SPARSELUN) {
1012 		max_dev_lun = shost->max_lun;
1013 		sparse_lun = 1;
1014 	} else
1015 		sparse_lun = 0;
1016 
1017 	/*
1018 	 * If less than SCSI_1_CSS, and no special lun scaning, stop
1019 	 * scanning; this matches 2.4 behaviour, but could just be a bug
1020 	 * (to continue scanning a SCSI_1_CSS device).
1021 	 *
1022 	 * This test is broken.  We might not have any device on lun0 for
1023 	 * a sparselun device, and if that's the case then how would we
1024 	 * know the real scsi_level, eh?  It might make sense to just not
1025 	 * scan any SCSI_1 device for non-0 luns, but that check would best
1026 	 * go into scsi_alloc_sdev() and just have it return null when asked
1027 	 * to alloc an sdev for lun > 0 on an already found SCSI_1 device.
1028 	 *
1029 	if ((sdevscan->scsi_level < SCSI_1_CCS) &&
1030 	    ((bflags & (BLIST_FORCELUN | BLIST_SPARSELUN | BLIST_MAX5LUN))
1031 	     == 0))
1032 		return;
1033 	 */
1034 	/*
1035 	 * If this device is known to support multiple units, override
1036 	 * the other settings, and scan all of them.
1037 	 */
1038 	if (bflags & BLIST_FORCELUN)
1039 		max_dev_lun = shost->max_lun;
1040 	/*
1041 	 * REGAL CDC-4X: avoid hang after LUN 4
1042 	 */
1043 	if (bflags & BLIST_MAX5LUN)
1044 		max_dev_lun = min(5U, max_dev_lun);
1045 	/*
1046 	 * Do not scan SCSI-2 or lower device past LUN 7, unless
1047 	 * BLIST_LARGELUN.
1048 	 */
1049 	if (scsi_level < SCSI_3 && !(bflags & BLIST_LARGELUN))
1050 		max_dev_lun = min(8U, max_dev_lun);
1051 
1052 	/*
1053 	 * We have already scanned LUN 0, so start at LUN 1. Keep scanning
1054 	 * until we reach the max, or no LUN is found and we are not
1055 	 * sparse_lun.
1056 	 */
1057 	for (lun = 1; lun < max_dev_lun; ++lun)
1058 		if ((scsi_probe_and_add_lun(starget, lun, NULL, NULL, rescan,
1059 					    NULL) != SCSI_SCAN_LUN_PRESENT) &&
1060 		    !sparse_lun)
1061 			return;
1062 }
1063 
1064 /**
1065  * scsilun_to_int: convert a scsi_lun to an int
1066  * @scsilun:	struct scsi_lun to be converted.
1067  *
1068  * Description:
1069  *     Convert @scsilun from a struct scsi_lun to a four byte host byte-ordered
1070  *     integer, and return the result. The caller must check for
1071  *     truncation before using this function.
1072  *
1073  * Notes:
1074  *     The struct scsi_lun is assumed to be four levels, with each level
1075  *     effectively containing a SCSI byte-ordered (big endian) short; the
1076  *     addressing bits of each level are ignored (the highest two bits).
1077  *     For a description of the LUN format, post SCSI-3 see the SCSI
1078  *     Architecture Model, for SCSI-3 see the SCSI Controller Commands.
1079  *
1080  *     Given a struct scsi_lun of: 0a 04 0b 03 00 00 00 00, this function returns
1081  *     the integer: 0x0b030a04
1082  **/
1083 static int scsilun_to_int(struct scsi_lun *scsilun)
1084 {
1085 	int i;
1086 	unsigned int lun;
1087 
1088 	lun = 0;
1089 	for (i = 0; i < sizeof(lun); i += 2)
1090 		lun = lun | (((scsilun->scsi_lun[i] << 8) |
1091 			      scsilun->scsi_lun[i + 1]) << (i * 8));
1092 	return lun;
1093 }
1094 
1095 /**
1096  * int_to_scsilun: reverts an int into a scsi_lun
1097  * @int:        integer to be reverted
1098  * @scsilun:	struct scsi_lun to be set.
1099  *
1100  * Description:
1101  *     Reverts the functionality of the scsilun_to_int, which packed
1102  *     an 8-byte lun value into an int. This routine unpacks the int
1103  *     back into the lun value.
1104  *     Note: the scsilun_to_int() routine does not truly handle all
1105  *     8bytes of the lun value. This functions restores only as much
1106  *     as was set by the routine.
1107  *
1108  * Notes:
1109  *     Given an integer : 0x0b030a04,  this function returns a
1110  *     scsi_lun of : struct scsi_lun of: 0a 04 0b 03 00 00 00 00
1111  *
1112  **/
1113 void int_to_scsilun(unsigned int lun, struct scsi_lun *scsilun)
1114 {
1115 	int i;
1116 
1117 	memset(scsilun->scsi_lun, 0, sizeof(scsilun->scsi_lun));
1118 
1119 	for (i = 0; i < sizeof(lun); i += 2) {
1120 		scsilun->scsi_lun[i] = (lun >> 8) & 0xFF;
1121 		scsilun->scsi_lun[i+1] = lun & 0xFF;
1122 		lun = lun >> 16;
1123 	}
1124 }
1125 EXPORT_SYMBOL(int_to_scsilun);
1126 
1127 /**
1128  * scsi_report_lun_scan - Scan using SCSI REPORT LUN results
1129  * @sdevscan:	scan the host, channel, and id of this scsi_device
1130  *
1131  * Description:
1132  *     If @sdevscan is for a SCSI-3 or up device, send a REPORT LUN
1133  *     command, and scan the resulting list of LUNs by calling
1134  *     scsi_probe_and_add_lun.
1135  *
1136  *     Modifies sdevscan->lun.
1137  *
1138  * Return:
1139  *     0: scan completed (or no memory, so further scanning is futile)
1140  *     1: no report lun scan, or not configured
1141  **/
1142 static int scsi_report_lun_scan(struct scsi_target *starget, int bflags,
1143 				int rescan)
1144 {
1145 	char devname[64];
1146 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
1147 	unsigned int length;
1148 	unsigned int lun;
1149 	unsigned int num_luns;
1150 	unsigned int retries;
1151 	int result;
1152 	struct scsi_lun *lunp, *lun_data;
1153 	u8 *data;
1154 	struct scsi_sense_hdr sshdr;
1155 	struct scsi_device *sdev;
1156 	struct Scsi_Host *shost = dev_to_shost(&starget->dev);
1157 	int ret = 0;
1158 
1159 	/*
1160 	 * Only support SCSI-3 and up devices if BLIST_NOREPORTLUN is not set.
1161 	 * Also allow SCSI-2 if BLIST_REPORTLUN2 is set and host adapter does
1162 	 * support more than 8 LUNs.
1163 	 */
1164 	if (bflags & BLIST_NOREPORTLUN)
1165 		return 1;
1166 	if (starget->scsi_level < SCSI_2 &&
1167 	    starget->scsi_level != SCSI_UNKNOWN)
1168 		return 1;
1169 	if (starget->scsi_level < SCSI_3 &&
1170 	    (!(bflags & BLIST_REPORTLUN2) || shost->max_lun <= 8))
1171 		return 1;
1172 	if (bflags & BLIST_NOLUN)
1173 		return 0;
1174 
1175 	if (!(sdev = scsi_device_lookup_by_target(starget, 0))) {
1176 		sdev = scsi_alloc_sdev(starget, 0, NULL);
1177 		if (!sdev)
1178 			return 0;
1179 		if (scsi_device_get(sdev))
1180 			return 0;
1181 	}
1182 
1183 	sprintf(devname, "host %d channel %d id %d",
1184 		shost->host_no, sdev->channel, sdev->id);
1185 
1186 	/*
1187 	 * Allocate enough to hold the header (the same size as one scsi_lun)
1188 	 * plus the max number of luns we are requesting.
1189 	 *
1190 	 * Reallocating and trying again (with the exact amount we need)
1191 	 * would be nice, but then we need to somehow limit the size
1192 	 * allocated based on the available memory and the limits of
1193 	 * kmalloc - we don't want a kmalloc() failure of a huge value to
1194 	 * prevent us from finding any LUNs on this target.
1195 	 */
1196 	length = (max_scsi_report_luns + 1) * sizeof(struct scsi_lun);
1197 	lun_data = kmalloc(length, GFP_ATOMIC |
1198 			   (sdev->host->unchecked_isa_dma ? __GFP_DMA : 0));
1199 	if (!lun_data) {
1200 		printk(ALLOC_FAILURE_MSG, __FUNCTION__);
1201 		goto out;
1202 	}
1203 
1204 	scsi_cmd[0] = REPORT_LUNS;
1205 
1206 	/*
1207 	 * bytes 1 - 5: reserved, set to zero.
1208 	 */
1209 	memset(&scsi_cmd[1], 0, 5);
1210 
1211 	/*
1212 	 * bytes 6 - 9: length of the command.
1213 	 */
1214 	scsi_cmd[6] = (unsigned char) (length >> 24) & 0xff;
1215 	scsi_cmd[7] = (unsigned char) (length >> 16) & 0xff;
1216 	scsi_cmd[8] = (unsigned char) (length >> 8) & 0xff;
1217 	scsi_cmd[9] = (unsigned char) length & 0xff;
1218 
1219 	scsi_cmd[10] = 0;	/* reserved */
1220 	scsi_cmd[11] = 0;	/* control */
1221 
1222 	/*
1223 	 * We can get a UNIT ATTENTION, for example a power on/reset, so
1224 	 * retry a few times (like sd.c does for TEST UNIT READY).
1225 	 * Experience shows some combinations of adapter/devices get at
1226 	 * least two power on/resets.
1227 	 *
1228 	 * Illegal requests (for devices that do not support REPORT LUNS)
1229 	 * should come through as a check condition, and will not generate
1230 	 * a retry.
1231 	 */
1232 	for (retries = 0; retries < 3; retries++) {
1233 		SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: Sending"
1234 				" REPORT LUNS to %s (try %d)\n", devname,
1235 				retries));
1236 
1237 		result = scsi_execute_req(sdev, scsi_cmd, DMA_FROM_DEVICE,
1238 					  lun_data, length, &sshdr,
1239 					  SCSI_TIMEOUT + 4 * HZ, 3);
1240 
1241 		SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: REPORT LUNS"
1242 				" %s (try %d) result 0x%x\n", result
1243 				?  "failed" : "successful", retries, result));
1244 		if (result == 0)
1245 			break;
1246 		else if (scsi_sense_valid(&sshdr)) {
1247 			if (sshdr.sense_key != UNIT_ATTENTION)
1248 				break;
1249 		}
1250 	}
1251 
1252 	if (result) {
1253 		/*
1254 		 * The device probably does not support a REPORT LUN command
1255 		 */
1256 		ret = 1;
1257 		goto out_err;
1258 	}
1259 
1260 	/*
1261 	 * Get the length from the first four bytes of lun_data.
1262 	 */
1263 	data = (u8 *) lun_data->scsi_lun;
1264 	length = ((data[0] << 24) | (data[1] << 16) |
1265 		  (data[2] << 8) | (data[3] << 0));
1266 
1267 	num_luns = (length / sizeof(struct scsi_lun));
1268 	if (num_luns > max_scsi_report_luns) {
1269 		printk(KERN_WARNING "scsi: On %s only %d (max_scsi_report_luns)"
1270 		       " of %d luns reported, try increasing"
1271 		       " max_scsi_report_luns.\n", devname,
1272 		       max_scsi_report_luns, num_luns);
1273 		num_luns = max_scsi_report_luns;
1274 	}
1275 
1276 	SCSI_LOG_SCAN_BUS(3, sdev_printk (KERN_INFO, sdev,
1277 		"scsi scan: REPORT LUN scan\n"));
1278 
1279 	/*
1280 	 * Scan the luns in lun_data. The entry at offset 0 is really
1281 	 * the header, so start at 1 and go up to and including num_luns.
1282 	 */
1283 	for (lunp = &lun_data[1]; lunp <= &lun_data[num_luns]; lunp++) {
1284 		lun = scsilun_to_int(lunp);
1285 
1286 		/*
1287 		 * Check if the unused part of lunp is non-zero, and so
1288 		 * does not fit in lun.
1289 		 */
1290 		if (memcmp(&lunp->scsi_lun[sizeof(lun)], "\0\0\0\0", 4)) {
1291 			int i;
1292 
1293 			/*
1294 			 * Output an error displaying the LUN in byte order,
1295 			 * this differs from what linux would print for the
1296 			 * integer LUN value.
1297 			 */
1298 			printk(KERN_WARNING "scsi: %s lun 0x", devname);
1299 			data = (char *)lunp->scsi_lun;
1300 			for (i = 0; i < sizeof(struct scsi_lun); i++)
1301 				printk("%02x", data[i]);
1302 			printk(" has a LUN larger than currently supported.\n");
1303 		} else if (lun > sdev->host->max_lun) {
1304 			printk(KERN_WARNING "scsi: %s lun%d has a LUN larger"
1305 			       " than allowed by the host adapter\n",
1306 			       devname, lun);
1307 		} else {
1308 			int res;
1309 
1310 			res = scsi_probe_and_add_lun(starget,
1311 				lun, NULL, NULL, rescan, NULL);
1312 			if (res == SCSI_SCAN_NO_RESPONSE) {
1313 				/*
1314 				 * Got some results, but now none, abort.
1315 				 */
1316 				sdev_printk(KERN_ERR, sdev,
1317 					"Unexpected response"
1318 				        " from lun %d while scanning, scan"
1319 				        " aborted\n", lun);
1320 				break;
1321 			}
1322 		}
1323 	}
1324 
1325  out_err:
1326 	kfree(lun_data);
1327  out:
1328 	scsi_device_put(sdev);
1329 	if (sdev->sdev_state == SDEV_CREATED)
1330 		/*
1331 		 * the sdev we used didn't appear in the report luns scan
1332 		 */
1333 		scsi_destroy_sdev(sdev);
1334 	return ret;
1335 }
1336 
1337 struct scsi_device *__scsi_add_device(struct Scsi_Host *shost, uint channel,
1338 				      uint id, uint lun, void *hostdata)
1339 {
1340 	struct scsi_device *sdev = ERR_PTR(-ENODEV);
1341 	struct device *parent = &shost->shost_gendev;
1342 	struct scsi_target *starget;
1343 
1344 	starget = scsi_alloc_target(parent, channel, id);
1345 	if (!starget)
1346 		return ERR_PTR(-ENOMEM);
1347 
1348 	get_device(&starget->dev);
1349 	mutex_lock(&shost->scan_mutex);
1350 	if (scsi_host_scan_allowed(shost))
1351 		scsi_probe_and_add_lun(starget, lun, NULL, &sdev, 1, hostdata);
1352 	mutex_unlock(&shost->scan_mutex);
1353 	scsi_target_reap(starget);
1354 	put_device(&starget->dev);
1355 
1356 	return sdev;
1357 }
1358 EXPORT_SYMBOL(__scsi_add_device);
1359 
1360 int scsi_add_device(struct Scsi_Host *host, uint channel,
1361 		    uint target, uint lun)
1362 {
1363 	struct scsi_device *sdev =
1364 		__scsi_add_device(host, channel, target, lun, NULL);
1365 	if (IS_ERR(sdev))
1366 		return PTR_ERR(sdev);
1367 
1368 	scsi_device_put(sdev);
1369 	return 0;
1370 }
1371 EXPORT_SYMBOL(scsi_add_device);
1372 
1373 void scsi_rescan_device(struct device *dev)
1374 {
1375 	struct scsi_driver *drv;
1376 
1377 	if (!dev->driver)
1378 		return;
1379 
1380 	drv = to_scsi_driver(dev->driver);
1381 	if (try_module_get(drv->owner)) {
1382 		if (drv->rescan)
1383 			drv->rescan(dev);
1384 		module_put(drv->owner);
1385 	}
1386 }
1387 EXPORT_SYMBOL(scsi_rescan_device);
1388 
1389 static void __scsi_scan_target(struct device *parent, unsigned int channel,
1390 		unsigned int id, unsigned int lun, int rescan)
1391 {
1392 	struct Scsi_Host *shost = dev_to_shost(parent);
1393 	int bflags = 0;
1394 	int res;
1395 	struct scsi_target *starget;
1396 
1397 	if (shost->this_id == id)
1398 		/*
1399 		 * Don't scan the host adapter
1400 		 */
1401 		return;
1402 
1403 	starget = scsi_alloc_target(parent, channel, id);
1404 	if (!starget)
1405 		return;
1406 
1407 	get_device(&starget->dev);
1408 	if (lun != SCAN_WILD_CARD) {
1409 		/*
1410 		 * Scan for a specific host/chan/id/lun.
1411 		 */
1412 		scsi_probe_and_add_lun(starget, lun, NULL, NULL, rescan, NULL);
1413 		goto out_reap;
1414 	}
1415 
1416 	/*
1417 	 * Scan LUN 0, if there is some response, scan further. Ideally, we
1418 	 * would not configure LUN 0 until all LUNs are scanned.
1419 	 */
1420 	res = scsi_probe_and_add_lun(starget, 0, &bflags, NULL, rescan, NULL);
1421 	if (res == SCSI_SCAN_LUN_PRESENT || res == SCSI_SCAN_TARGET_PRESENT) {
1422 		if (scsi_report_lun_scan(starget, bflags, rescan) != 0)
1423 			/*
1424 			 * The REPORT LUN did not scan the target,
1425 			 * do a sequential scan.
1426 			 */
1427 			scsi_sequential_lun_scan(starget, bflags,
1428 						 starget->scsi_level, rescan);
1429 	}
1430 
1431  out_reap:
1432 	/* now determine if the target has any children at all
1433 	 * and if not, nuke it */
1434 	scsi_target_reap(starget);
1435 
1436 	put_device(&starget->dev);
1437 }
1438 
1439 /**
1440  * scsi_scan_target - scan a target id, possibly including all LUNs on the
1441  *     target.
1442  * @parent:	host to scan
1443  * @channel:	channel to scan
1444  * @id:		target id to scan
1445  * @lun:	Specific LUN to scan or SCAN_WILD_CARD
1446  * @rescan:	passed to LUN scanning routines
1447  *
1448  * Description:
1449  *     Scan the target id on @parent, @channel, and @id. Scan at least LUN 0,
1450  *     and possibly all LUNs on the target id.
1451  *
1452  *     First try a REPORT LUN scan, if that does not scan the target, do a
1453  *     sequential scan of LUNs on the target id.
1454  **/
1455 void scsi_scan_target(struct device *parent, unsigned int channel,
1456 		      unsigned int id, unsigned int lun, int rescan)
1457 {
1458 	struct Scsi_Host *shost = dev_to_shost(parent);
1459 
1460 	mutex_lock(&shost->scan_mutex);
1461 	if (scsi_host_scan_allowed(shost))
1462 		__scsi_scan_target(parent, channel, id, lun, rescan);
1463 	mutex_unlock(&shost->scan_mutex);
1464 }
1465 EXPORT_SYMBOL(scsi_scan_target);
1466 
1467 static void scsi_scan_channel(struct Scsi_Host *shost, unsigned int channel,
1468 			      unsigned int id, unsigned int lun, int rescan)
1469 {
1470 	uint order_id;
1471 
1472 	if (id == SCAN_WILD_CARD)
1473 		for (id = 0; id < shost->max_id; ++id) {
1474 			/*
1475 			 * XXX adapter drivers when possible (FCP, iSCSI)
1476 			 * could modify max_id to match the current max,
1477 			 * not the absolute max.
1478 			 *
1479 			 * XXX add a shost id iterator, so for example,
1480 			 * the FC ID can be the same as a target id
1481 			 * without a huge overhead of sparse id's.
1482 			 */
1483 			if (shost->reverse_ordering)
1484 				/*
1485 				 * Scan from high to low id.
1486 				 */
1487 				order_id = shost->max_id - id - 1;
1488 			else
1489 				order_id = id;
1490 			__scsi_scan_target(&shost->shost_gendev, channel,
1491 					order_id, lun, rescan);
1492 		}
1493 	else
1494 		__scsi_scan_target(&shost->shost_gendev, channel,
1495 				id, lun, rescan);
1496 }
1497 
1498 int scsi_scan_host_selected(struct Scsi_Host *shost, unsigned int channel,
1499 			    unsigned int id, unsigned int lun, int rescan)
1500 {
1501 	SCSI_LOG_SCAN_BUS(3, shost_printk (KERN_INFO, shost,
1502 		"%s: <%u:%u:%u>\n",
1503 		__FUNCTION__, channel, id, lun));
1504 
1505 	if (((channel != SCAN_WILD_CARD) && (channel > shost->max_channel)) ||
1506 	    ((id != SCAN_WILD_CARD) && (id >= shost->max_id)) ||
1507 	    ((lun != SCAN_WILD_CARD) && (lun > shost->max_lun)))
1508 		return -EINVAL;
1509 
1510 	mutex_lock(&shost->scan_mutex);
1511 	if (scsi_host_scan_allowed(shost)) {
1512 		if (channel == SCAN_WILD_CARD)
1513 			for (channel = 0; channel <= shost->max_channel;
1514 			     channel++)
1515 				scsi_scan_channel(shost, channel, id, lun,
1516 						  rescan);
1517 		else
1518 			scsi_scan_channel(shost, channel, id, lun, rescan);
1519 	}
1520 	mutex_unlock(&shost->scan_mutex);
1521 
1522 	return 0;
1523 }
1524 
1525 /**
1526  * scsi_scan_host - scan the given adapter
1527  * @shost:	adapter to scan
1528  **/
1529 void scsi_scan_host(struct Scsi_Host *shost)
1530 {
1531 	scsi_scan_host_selected(shost, SCAN_WILD_CARD, SCAN_WILD_CARD,
1532 				SCAN_WILD_CARD, 0);
1533 }
1534 EXPORT_SYMBOL(scsi_scan_host);
1535 
1536 void scsi_forget_host(struct Scsi_Host *shost)
1537 {
1538 	struct scsi_device *sdev;
1539 	unsigned long flags;
1540 
1541  restart:
1542 	spin_lock_irqsave(shost->host_lock, flags);
1543 	list_for_each_entry(sdev, &shost->__devices, siblings) {
1544 		if (sdev->sdev_state == SDEV_DEL)
1545 			continue;
1546 		spin_unlock_irqrestore(shost->host_lock, flags);
1547 		__scsi_remove_device(sdev);
1548 		goto restart;
1549 	}
1550 	spin_unlock_irqrestore(shost->host_lock, flags);
1551 }
1552 
1553 /*
1554  * Function:    scsi_get_host_dev()
1555  *
1556  * Purpose:     Create a scsi_device that points to the host adapter itself.
1557  *
1558  * Arguments:   SHpnt   - Host that needs a scsi_device
1559  *
1560  * Lock status: None assumed.
1561  *
1562  * Returns:     The scsi_device or NULL
1563  *
1564  * Notes:
1565  *	Attach a single scsi_device to the Scsi_Host - this should
1566  *	be made to look like a "pseudo-device" that points to the
1567  *	HA itself.
1568  *
1569  *	Note - this device is not accessible from any high-level
1570  *	drivers (including generics), which is probably not
1571  *	optimal.  We can add hooks later to attach
1572  */
1573 struct scsi_device *scsi_get_host_dev(struct Scsi_Host *shost)
1574 {
1575 	struct scsi_device *sdev = NULL;
1576 	struct scsi_target *starget;
1577 
1578 	mutex_lock(&shost->scan_mutex);
1579 	if (!scsi_host_scan_allowed(shost))
1580 		goto out;
1581 	starget = scsi_alloc_target(&shost->shost_gendev, 0, shost->this_id);
1582 	if (!starget)
1583 		goto out;
1584 
1585 	sdev = scsi_alloc_sdev(starget, 0, NULL);
1586 	if (sdev) {
1587 		sdev->sdev_gendev.parent = get_device(&starget->dev);
1588 		sdev->borken = 0;
1589 	}
1590 	put_device(&starget->dev);
1591  out:
1592 	mutex_unlock(&shost->scan_mutex);
1593 	return sdev;
1594 }
1595 EXPORT_SYMBOL(scsi_get_host_dev);
1596 
1597 /*
1598  * Function:    scsi_free_host_dev()
1599  *
1600  * Purpose:     Free a scsi_device that points to the host adapter itself.
1601  *
1602  * Arguments:   SHpnt   - Host that needs a scsi_device
1603  *
1604  * Lock status: None assumed.
1605  *
1606  * Returns:     Nothing
1607  *
1608  * Notes:
1609  */
1610 void scsi_free_host_dev(struct scsi_device *sdev)
1611 {
1612 	BUG_ON(sdev->id != sdev->host->this_id);
1613 
1614 	scsi_destroy_sdev(sdev);
1615 }
1616 EXPORT_SYMBOL(scsi_free_host_dev);
1617 
1618