xref: /linux/drivers/scsi/scsi_scan.c (revision 60b2737de1b1ddfdb90f3ba622634eb49d6f3603)
1 /*
2  * scsi_scan.c
3  *
4  * Copyright (C) 2000 Eric Youngdale,
5  * Copyright (C) 2002 Patrick Mansfield
6  *
7  * The general scanning/probing algorithm is as follows, exceptions are
8  * made to it depending on device specific flags, compilation options, and
9  * global variable (boot or module load time) settings.
10  *
11  * A specific LUN is scanned via an INQUIRY command; if the LUN has a
12  * device attached, a Scsi_Device is allocated and setup for it.
13  *
14  * For every id of every channel on the given host:
15  *
16  * 	Scan LUN 0; if the target responds to LUN 0 (even if there is no
17  * 	device or storage attached to LUN 0):
18  *
19  * 		If LUN 0 has a device attached, allocate and setup a
20  * 		Scsi_Device for it.
21  *
22  * 		If target is SCSI-3 or up, issue a REPORT LUN, and scan
23  * 		all of the LUNs returned by the REPORT LUN; else,
24  * 		sequentially scan LUNs up until some maximum is reached,
25  * 		or a LUN is seen that cannot have a device attached to it.
26  */
27 
28 #include <linux/config.h>
29 #include <linux/module.h>
30 #include <linux/moduleparam.h>
31 #include <linux/init.h>
32 #include <linux/blkdev.h>
33 #include <asm/semaphore.h>
34 
35 #include <scsi/scsi.h>
36 #include <scsi/scsi_device.h>
37 #include <scsi/scsi_driver.h>
38 #include <scsi/scsi_devinfo.h>
39 #include <scsi/scsi_host.h>
40 #include <scsi/scsi_request.h>
41 #include <scsi/scsi_transport.h>
42 #include <scsi/scsi_eh.h>
43 
44 #include "scsi_priv.h"
45 #include "scsi_logging.h"
46 
47 #define ALLOC_FAILURE_MSG	KERN_ERR "%s: Allocation failure during" \
48 	" SCSI scanning, some SCSI devices might not be configured\n"
49 
50 /*
51  * Default timeout
52  */
53 #define SCSI_TIMEOUT (2*HZ)
54 
55 /*
56  * Prefix values for the SCSI id's (stored in driverfs name field)
57  */
58 #define SCSI_UID_SER_NUM 'S'
59 #define SCSI_UID_UNKNOWN 'Z'
60 
61 /*
62  * Return values of some of the scanning functions.
63  *
64  * SCSI_SCAN_NO_RESPONSE: no valid response received from the target, this
65  * includes allocation or general failures preventing IO from being sent.
66  *
67  * SCSI_SCAN_TARGET_PRESENT: target responded, but no device is available
68  * on the given LUN.
69  *
70  * SCSI_SCAN_LUN_PRESENT: target responded, and a device is available on a
71  * given LUN.
72  */
73 #define SCSI_SCAN_NO_RESPONSE		0
74 #define SCSI_SCAN_TARGET_PRESENT	1
75 #define SCSI_SCAN_LUN_PRESENT		2
76 
77 static char *scsi_null_device_strs = "nullnullnullnull";
78 
79 #define MAX_SCSI_LUNS	512
80 
81 #ifdef CONFIG_SCSI_MULTI_LUN
82 static unsigned int max_scsi_luns = MAX_SCSI_LUNS;
83 #else
84 static unsigned int max_scsi_luns = 1;
85 #endif
86 
87 module_param_named(max_luns, max_scsi_luns, int, S_IRUGO|S_IWUSR);
88 MODULE_PARM_DESC(max_luns,
89 		 "last scsi LUN (should be between 1 and 2^32-1)");
90 
91 /*
92  * max_scsi_report_luns: the maximum number of LUNS that will be
93  * returned from the REPORT LUNS command. 8 times this value must
94  * be allocated. In theory this could be up to an 8 byte value, but
95  * in practice, the maximum number of LUNs suppored by any device
96  * is about 16k.
97  */
98 static unsigned int max_scsi_report_luns = 511;
99 
100 module_param_named(max_report_luns, max_scsi_report_luns, int, S_IRUGO|S_IWUSR);
101 MODULE_PARM_DESC(max_report_luns,
102 		 "REPORT LUNS maximum number of LUNS received (should be"
103 		 " between 1 and 16384)");
104 
105 static unsigned int scsi_inq_timeout = SCSI_TIMEOUT/HZ+3;
106 
107 module_param_named(inq_timeout, scsi_inq_timeout, int, S_IRUGO|S_IWUSR);
108 MODULE_PARM_DESC(inq_timeout,
109 		 "Timeout (in seconds) waiting for devices to answer INQUIRY."
110 		 " Default is 5. Some non-compliant devices need more.");
111 
112 /**
113  * scsi_unlock_floptical - unlock device via a special MODE SENSE command
114  * @sreq:	used to send the command
115  * @result:	area to store the result of the MODE SENSE
116  *
117  * Description:
118  *     Send a vendor specific MODE SENSE (not a MODE SELECT) command using
119  *     @sreq to unlock a device, storing the (unused) results into result.
120  *     Called for BLIST_KEY devices.
121  **/
122 static void scsi_unlock_floptical(struct scsi_request *sreq,
123 				  unsigned char *result)
124 {
125 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
126 
127 	printk(KERN_NOTICE "scsi: unlocking floptical drive\n");
128 	scsi_cmd[0] = MODE_SENSE;
129 	scsi_cmd[1] = 0;
130 	scsi_cmd[2] = 0x2e;
131 	scsi_cmd[3] = 0;
132 	scsi_cmd[4] = 0x2a;	/* size */
133 	scsi_cmd[5] = 0;
134 	sreq->sr_cmd_len = 0;
135 	sreq->sr_data_direction = DMA_FROM_DEVICE;
136 	scsi_wait_req(sreq, scsi_cmd, result, 0x2a /* size */, SCSI_TIMEOUT, 3);
137 }
138 
139 /**
140  * print_inquiry - printk the inquiry information
141  * @inq_result:	printk this SCSI INQUIRY
142  *
143  * Description:
144  *     printk the vendor, model, and other information found in the
145  *     INQUIRY data in @inq_result.
146  *
147  * Notes:
148  *     Remove this, and replace with a hotplug event that logs any
149  *     relevant information.
150  **/
151 static void print_inquiry(unsigned char *inq_result)
152 {
153 	int i;
154 
155 	printk(KERN_NOTICE "  Vendor: ");
156 	for (i = 8; i < 16; i++)
157 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
158 			printk("%c", inq_result[i]);
159 		else
160 			printk(" ");
161 
162 	printk("  Model: ");
163 	for (i = 16; i < 32; i++)
164 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
165 			printk("%c", inq_result[i]);
166 		else
167 			printk(" ");
168 
169 	printk("  Rev: ");
170 	for (i = 32; i < 36; i++)
171 		if (inq_result[i] >= 0x20 && i < inq_result[4] + 5)
172 			printk("%c", inq_result[i]);
173 		else
174 			printk(" ");
175 
176 	printk("\n");
177 
178 	i = inq_result[0] & 0x1f;
179 
180 	printk(KERN_NOTICE "  Type:   %s ",
181 	       i <
182 	       MAX_SCSI_DEVICE_CODE ? scsi_device_types[i] :
183 	       "Unknown          ");
184 	printk("                 ANSI SCSI revision: %02x",
185 	       inq_result[2] & 0x07);
186 	if ((inq_result[2] & 0x07) == 1 && (inq_result[3] & 0x0f) == 1)
187 		printk(" CCS\n");
188 	else
189 		printk("\n");
190 }
191 
192 /**
193  * scsi_alloc_sdev - allocate and setup a scsi_Device
194  *
195  * Description:
196  *     Allocate, initialize for io, and return a pointer to a scsi_Device.
197  *     Stores the @shost, @channel, @id, and @lun in the scsi_Device, and
198  *     adds scsi_Device to the appropriate list.
199  *
200  * Return value:
201  *     scsi_Device pointer, or NULL on failure.
202  **/
203 static struct scsi_device *scsi_alloc_sdev(struct scsi_target *starget,
204 					   unsigned int lun, void *hostdata)
205 {
206 	struct scsi_device *sdev;
207 	int display_failure_msg = 1, ret;
208 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
209 
210 	sdev = kmalloc(sizeof(*sdev) + shost->transportt->device_size,
211 		       GFP_ATOMIC);
212 	if (!sdev)
213 		goto out;
214 
215 	memset(sdev, 0, sizeof(*sdev));
216 	sdev->vendor = scsi_null_device_strs;
217 	sdev->model = scsi_null_device_strs;
218 	sdev->rev = scsi_null_device_strs;
219 	sdev->host = shost;
220 	sdev->id = starget->id;
221 	sdev->lun = lun;
222 	sdev->channel = starget->channel;
223 	sdev->sdev_state = SDEV_CREATED;
224 	INIT_LIST_HEAD(&sdev->siblings);
225 	INIT_LIST_HEAD(&sdev->same_target_siblings);
226 	INIT_LIST_HEAD(&sdev->cmd_list);
227 	INIT_LIST_HEAD(&sdev->starved_entry);
228 	spin_lock_init(&sdev->list_lock);
229 
230 	sdev->sdev_gendev.parent = get_device(&starget->dev);
231 	sdev->sdev_target = starget;
232 
233 	/* usually NULL and set by ->slave_alloc instead */
234 	sdev->hostdata = hostdata;
235 
236 	/* if the device needs this changing, it may do so in the
237 	 * slave_configure function */
238 	sdev->max_device_blocked = SCSI_DEFAULT_DEVICE_BLOCKED;
239 
240 	/*
241 	 * Some low level driver could use device->type
242 	 */
243 	sdev->type = -1;
244 
245 	/*
246 	 * Assume that the device will have handshaking problems,
247 	 * and then fix this field later if it turns out it
248 	 * doesn't
249 	 */
250 	sdev->borken = 1;
251 
252 	sdev->request_queue = scsi_alloc_queue(sdev);
253 	if (!sdev->request_queue) {
254 		/* release fn is set up in scsi_sysfs_device_initialise, so
255 		 * have to free and put manually here */
256 		put_device(&starget->dev);
257 		goto out;
258 	}
259 
260 	sdev->request_queue->queuedata = sdev;
261 	scsi_adjust_queue_depth(sdev, 0, sdev->host->cmd_per_lun);
262 
263 	scsi_sysfs_device_initialize(sdev);
264 
265 	if (shost->hostt->slave_alloc) {
266 		ret = shost->hostt->slave_alloc(sdev);
267 		if (ret) {
268 			/*
269 			 * if LLDD reports slave not present, don't clutter
270 			 * console with alloc failure messages
271 
272 
273 			 */
274 			if (ret == -ENXIO)
275 				display_failure_msg = 0;
276 			goto out_device_destroy;
277 		}
278 	}
279 
280 	return sdev;
281 
282 out_device_destroy:
283 	transport_destroy_device(&sdev->sdev_gendev);
284 	scsi_free_queue(sdev->request_queue);
285 	put_device(&sdev->sdev_gendev);
286 out:
287 	if (display_failure_msg)
288 		printk(ALLOC_FAILURE_MSG, __FUNCTION__);
289 	return NULL;
290 }
291 
292 static void scsi_target_dev_release(struct device *dev)
293 {
294 	struct device *parent = dev->parent;
295 	struct scsi_target *starget = to_scsi_target(dev);
296 	struct Scsi_Host *shost = dev_to_shost(parent);
297 
298 	if (shost->hostt->target_destroy)
299 		shost->hostt->target_destroy(starget);
300 	kfree(starget);
301 	put_device(parent);
302 }
303 
304 int scsi_is_target_device(const struct device *dev)
305 {
306 	return dev->release == scsi_target_dev_release;
307 }
308 EXPORT_SYMBOL(scsi_is_target_device);
309 
310 static struct scsi_target *__scsi_find_target(struct device *parent,
311 					      int channel, uint id)
312 {
313 	struct scsi_target *starget, *found_starget = NULL;
314 	struct Scsi_Host *shost = dev_to_shost(parent);
315 	/*
316 	 * Search for an existing target for this sdev.
317 	 */
318 	list_for_each_entry(starget, &shost->__targets, siblings) {
319 		if (starget->id == id &&
320 		    starget->channel == channel) {
321 			found_starget = starget;
322 			break;
323 		}
324 	}
325 	if (found_starget)
326 		get_device(&found_starget->dev);
327 
328 	return found_starget;
329 }
330 
331 static struct scsi_target *scsi_alloc_target(struct device *parent,
332 					     int channel, uint id)
333 {
334 	struct Scsi_Host *shost = dev_to_shost(parent);
335 	struct device *dev = NULL;
336 	unsigned long flags;
337 	const int size = sizeof(struct scsi_target)
338 		+ shost->transportt->target_size;
339 	struct scsi_target *starget = kmalloc(size, GFP_ATOMIC);
340 	struct scsi_target *found_target;
341 
342 	if (!starget) {
343 		printk(KERN_ERR "%s: allocation failure\n", __FUNCTION__);
344 		return NULL;
345 	}
346 	memset(starget, 0, size);
347 	dev = &starget->dev;
348 	device_initialize(dev);
349 	starget->reap_ref = 1;
350 	dev->parent = get_device(parent);
351 	dev->release = scsi_target_dev_release;
352 	sprintf(dev->bus_id, "target%d:%d:%d",
353 		shost->host_no, channel, id);
354 	starget->id = id;
355 	starget->channel = channel;
356 	INIT_LIST_HEAD(&starget->siblings);
357 	INIT_LIST_HEAD(&starget->devices);
358 	spin_lock_irqsave(shost->host_lock, flags);
359 
360 	found_target = __scsi_find_target(parent, channel, id);
361 	if (found_target)
362 		goto found;
363 
364 	list_add_tail(&starget->siblings, &shost->__targets);
365 	spin_unlock_irqrestore(shost->host_lock, flags);
366 	/* allocate and add */
367 	transport_setup_device(dev);
368 	device_add(dev);
369 	transport_add_device(dev);
370 	if (shost->hostt->target_alloc) {
371 		int error = shost->hostt->target_alloc(starget);
372 
373 		if(error) {
374 			dev_printk(KERN_ERR, dev, "target allocation failed, error %d\n", error);
375 			/* don't want scsi_target_reap to do the final
376 			 * put because it will be under the host lock */
377 			get_device(dev);
378 			scsi_target_reap(starget);
379 			put_device(dev);
380 			return NULL;
381 		}
382 	}
383 
384 	return starget;
385 
386  found:
387 	found_target->reap_ref++;
388 	spin_unlock_irqrestore(shost->host_lock, flags);
389 	put_device(parent);
390 	kfree(starget);
391 	return found_target;
392 }
393 
394 /**
395  * scsi_target_reap - check to see if target is in use and destroy if not
396  *
397  * @starget: target to be checked
398  *
399  * This is used after removing a LUN or doing a last put of the target
400  * it checks atomically that nothing is using the target and removes
401  * it if so.
402  */
403 void scsi_target_reap(struct scsi_target *starget)
404 {
405 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
406 	unsigned long flags;
407 	spin_lock_irqsave(shost->host_lock, flags);
408 
409 	if (--starget->reap_ref == 0 && list_empty(&starget->devices)) {
410 		list_del_init(&starget->siblings);
411 		spin_unlock_irqrestore(shost->host_lock, flags);
412 		device_del(&starget->dev);
413 		transport_unregister_device(&starget->dev);
414 		put_device(&starget->dev);
415 		return;
416 	}
417 	spin_unlock_irqrestore(shost->host_lock, flags);
418 }
419 
420 /**
421  * scsi_probe_lun - probe a single LUN using a SCSI INQUIRY
422  * @sreq:	used to send the INQUIRY
423  * @inq_result:	area to store the INQUIRY result
424  * @bflags:	store any bflags found here
425  *
426  * Description:
427  *     Probe the lun associated with @sreq using a standard SCSI INQUIRY;
428  *
429  *     If the INQUIRY is successful, sreq->sr_result is zero and: the
430  *     INQUIRY data is in @inq_result; the scsi_level and INQUIRY length
431  *     are copied to the Scsi_Device at @sreq->sr_device (sdev);
432  *     any flags value is stored in *@bflags.
433  **/
434 static void scsi_probe_lun(struct scsi_request *sreq, char *inq_result,
435 			   int *bflags)
436 {
437 	struct scsi_device *sdev = sreq->sr_device;	/* a bit ugly */
438 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
439 	int first_inquiry_len, try_inquiry_len, next_inquiry_len;
440 	int response_len = 0;
441 	int pass, count;
442 	struct scsi_sense_hdr sshdr;
443 
444 	*bflags = 0;
445 
446 	/* Perform up to 3 passes.  The first pass uses a conservative
447 	 * transfer length of 36 unless sdev->inquiry_len specifies a
448 	 * different value. */
449 	first_inquiry_len = sdev->inquiry_len ? sdev->inquiry_len : 36;
450 	try_inquiry_len = first_inquiry_len;
451 	pass = 1;
452 
453  next_pass:
454 	SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: INQUIRY pass %d "
455 			"to host %d channel %d id %d lun %d, length %d\n",
456 			pass, sdev->host->host_no, sdev->channel,
457 			sdev->id, sdev->lun, try_inquiry_len));
458 
459 	/* Each pass gets up to three chances to ignore Unit Attention */
460 	for (count = 0; count < 3; ++count) {
461 		memset(scsi_cmd, 0, 6);
462 		scsi_cmd[0] = INQUIRY;
463 		scsi_cmd[4] = (unsigned char) try_inquiry_len;
464 		sreq->sr_cmd_len = 0;
465 		sreq->sr_data_direction = DMA_FROM_DEVICE;
466 
467 		memset(inq_result, 0, try_inquiry_len);
468 		scsi_wait_req(sreq, (void *) scsi_cmd, (void *) inq_result,
469 				try_inquiry_len,
470 				HZ/2 + HZ*scsi_inq_timeout, 3);
471 
472 		SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: INQUIRY %s "
473 				"with code 0x%x\n",
474 				sreq->sr_result ? "failed" : "successful",
475 				sreq->sr_result));
476 
477 		if (sreq->sr_result) {
478 			/*
479 			 * not-ready to ready transition [asc/ascq=0x28/0x0]
480 			 * or power-on, reset [asc/ascq=0x29/0x0], continue.
481 			 * INQUIRY should not yield UNIT_ATTENTION
482 			 * but many buggy devices do so anyway.
483 			 */
484 			if ((driver_byte(sreq->sr_result) & DRIVER_SENSE) &&
485 			    scsi_request_normalize_sense(sreq, &sshdr)) {
486 				if ((sshdr.sense_key == UNIT_ATTENTION) &&
487 				    ((sshdr.asc == 0x28) ||
488 				     (sshdr.asc == 0x29)) &&
489 				    (sshdr.ascq == 0))
490 					continue;
491 			}
492 		}
493 		break;
494 	}
495 
496 	if (sreq->sr_result == 0) {
497 		response_len = (unsigned char) inq_result[4] + 5;
498 		if (response_len > 255)
499 			response_len = first_inquiry_len;	/* sanity */
500 
501 		/*
502 		 * Get any flags for this device.
503 		 *
504 		 * XXX add a bflags to Scsi_Device, and replace the
505 		 * corresponding bit fields in Scsi_Device, so bflags
506 		 * need not be passed as an argument.
507 		 */
508 		*bflags = scsi_get_device_flags(sdev, &inq_result[8],
509 				&inq_result[16]);
510 
511 		/* When the first pass succeeds we gain information about
512 		 * what larger transfer lengths might work. */
513 		if (pass == 1) {
514 			if (BLIST_INQUIRY_36 & *bflags)
515 				next_inquiry_len = 36;
516 			else if (BLIST_INQUIRY_58 & *bflags)
517 				next_inquiry_len = 58;
518 			else if (sdev->inquiry_len)
519 				next_inquiry_len = sdev->inquiry_len;
520 			else
521 				next_inquiry_len = response_len;
522 
523 			/* If more data is available perform the second pass */
524 			if (next_inquiry_len > try_inquiry_len) {
525 				try_inquiry_len = next_inquiry_len;
526 				pass = 2;
527 				goto next_pass;
528 			}
529 		}
530 
531 	} else if (pass == 2) {
532 		printk(KERN_INFO "scsi scan: %d byte inquiry failed.  "
533 				"Consider BLIST_INQUIRY_36 for this device\n",
534 				try_inquiry_len);
535 
536 		/* If this pass failed, the third pass goes back and transfers
537 		 * the same amount as we successfully got in the first pass. */
538 		try_inquiry_len = first_inquiry_len;
539 		pass = 3;
540 		goto next_pass;
541 	}
542 
543 	/* If the last transfer attempt got an error, assume the
544 	 * peripheral doesn't exist or is dead. */
545 	if (sreq->sr_result)
546 		return;
547 
548 	/* Don't report any more data than the device says is valid */
549 	sdev->inquiry_len = min(try_inquiry_len, response_len);
550 
551 	/*
552 	 * XXX Abort if the response length is less than 36? If less than
553 	 * 32, the lookup of the device flags (above) could be invalid,
554 	 * and it would be possible to take an incorrect action - we do
555 	 * not want to hang because of a short INQUIRY. On the flip side,
556 	 * if the device is spun down or becoming ready (and so it gives a
557 	 * short INQUIRY), an abort here prevents any further use of the
558 	 * device, including spin up.
559 	 *
560 	 * Related to the above issue:
561 	 *
562 	 * XXX Devices (disk or all?) should be sent a TEST UNIT READY,
563 	 * and if not ready, sent a START_STOP to start (maybe spin up) and
564 	 * then send the INQUIRY again, since the INQUIRY can change after
565 	 * a device is initialized.
566 	 *
567 	 * Ideally, start a device if explicitly asked to do so.  This
568 	 * assumes that a device is spun up on power on, spun down on
569 	 * request, and then spun up on request.
570 	 */
571 
572 	/*
573 	 * The scanning code needs to know the scsi_level, even if no
574 	 * device is attached at LUN 0 (SCSI_SCAN_TARGET_PRESENT) so
575 	 * non-zero LUNs can be scanned.
576 	 */
577 	sdev->scsi_level = inq_result[2] & 0x07;
578 	if (sdev->scsi_level >= 2 ||
579 	    (sdev->scsi_level == 1 && (inq_result[3] & 0x0f) == 1))
580 		sdev->scsi_level++;
581 
582 	return;
583 }
584 
585 /**
586  * scsi_add_lun - allocate and fully initialze a Scsi_Device
587  * @sdevscan:	holds information to be stored in the new Scsi_Device
588  * @sdevnew:	store the address of the newly allocated Scsi_Device
589  * @inq_result:	holds the result of a previous INQUIRY to the LUN
590  * @bflags:	black/white list flag
591  *
592  * Description:
593  *     Allocate and initialize a Scsi_Device matching sdevscan. Optionally
594  *     set fields based on values in *@bflags. If @sdevnew is not
595  *     NULL, store the address of the new Scsi_Device in *@sdevnew (needed
596  *     when scanning a particular LUN).
597  *
598  * Return:
599  *     SCSI_SCAN_NO_RESPONSE: could not allocate or setup a Scsi_Device
600  *     SCSI_SCAN_LUN_PRESENT: a new Scsi_Device was allocated and initialized
601  **/
602 static int scsi_add_lun(struct scsi_device *sdev, char *inq_result, int *bflags)
603 {
604 	/*
605 	 * XXX do not save the inquiry, since it can change underneath us,
606 	 * save just vendor/model/rev.
607 	 *
608 	 * Rather than save it and have an ioctl that retrieves the saved
609 	 * value, have an ioctl that executes the same INQUIRY code used
610 	 * in scsi_probe_lun, let user level programs doing INQUIRY
611 	 * scanning run at their own risk, or supply a user level program
612 	 * that can correctly scan.
613 	 */
614 	sdev->inquiry = kmalloc(sdev->inquiry_len, GFP_ATOMIC);
615 	if (sdev->inquiry == NULL) {
616 		return SCSI_SCAN_NO_RESPONSE;
617 	}
618 
619 	memcpy(sdev->inquiry, inq_result, sdev->inquiry_len);
620 	sdev->vendor = (char *) (sdev->inquiry + 8);
621 	sdev->model = (char *) (sdev->inquiry + 16);
622 	sdev->rev = (char *) (sdev->inquiry + 32);
623 
624 	if (*bflags & BLIST_ISROM) {
625 		/*
626 		 * It would be better to modify sdev->type, and set
627 		 * sdev->removable, but then the print_inquiry() output
628 		 * would not show TYPE_ROM; if print_inquiry() is removed
629 		 * the issue goes away.
630 		 */
631 		inq_result[0] = TYPE_ROM;
632 		inq_result[1] |= 0x80;	/* removable */
633 	} else if (*bflags & BLIST_NO_ULD_ATTACH)
634 		sdev->no_uld_attach = 1;
635 
636 	switch (sdev->type = (inq_result[0] & 0x1f)) {
637 	case TYPE_TAPE:
638 	case TYPE_DISK:
639 	case TYPE_PRINTER:
640 	case TYPE_MOD:
641 	case TYPE_PROCESSOR:
642 	case TYPE_SCANNER:
643 	case TYPE_MEDIUM_CHANGER:
644 	case TYPE_ENCLOSURE:
645 	case TYPE_COMM:
646 	case TYPE_RBC:
647 		sdev->writeable = 1;
648 		break;
649 	case TYPE_WORM:
650 	case TYPE_ROM:
651 		sdev->writeable = 0;
652 		break;
653 	default:
654 		printk(KERN_INFO "scsi: unknown device type %d\n", sdev->type);
655 	}
656 
657 	print_inquiry(inq_result);
658 
659 	/*
660 	 * For a peripheral qualifier (PQ) value of 1 (001b), the SCSI
661 	 * spec says: The device server is capable of supporting the
662 	 * specified peripheral device type on this logical unit. However,
663 	 * the physical device is not currently connected to this logical
664 	 * unit.
665 	 *
666 	 * The above is vague, as it implies that we could treat 001 and
667 	 * 011 the same. Stay compatible with previous code, and create a
668 	 * Scsi_Device for a PQ of 1
669 	 *
670 	 * Don't set the device offline here; rather let the upper
671 	 * level drivers eval the PQ to decide whether they should
672 	 * attach. So remove ((inq_result[0] >> 5) & 7) == 1 check.
673 	 */
674 
675 	sdev->inq_periph_qual = (inq_result[0] >> 5) & 7;
676 	sdev->removable = (0x80 & inq_result[1]) >> 7;
677 	sdev->lockable = sdev->removable;
678 	sdev->soft_reset = (inq_result[7] & 1) && ((inq_result[3] & 7) == 2);
679 
680 	if (sdev->scsi_level >= SCSI_3 || (sdev->inquiry_len > 56 &&
681 		inq_result[56] & 0x04))
682 		sdev->ppr = 1;
683 	if (inq_result[7] & 0x60)
684 		sdev->wdtr = 1;
685 	if (inq_result[7] & 0x10)
686 		sdev->sdtr = 1;
687 
688 	sprintf(sdev->devfs_name, "scsi/host%d/bus%d/target%d/lun%d",
689 				sdev->host->host_no, sdev->channel,
690 				sdev->id, sdev->lun);
691 
692 	/*
693 	 * End driverfs/devfs code.
694 	 */
695 
696 	if ((sdev->scsi_level >= SCSI_2) && (inq_result[7] & 2) &&
697 	    !(*bflags & BLIST_NOTQ))
698 		sdev->tagged_supported = 1;
699 	/*
700 	 * Some devices (Texel CD ROM drives) have handshaking problems
701 	 * when used with the Seagate controllers. borken is initialized
702 	 * to 1, and then set it to 0 here.
703 	 */
704 	if ((*bflags & BLIST_BORKEN) == 0)
705 		sdev->borken = 0;
706 
707 	/*
708 	 * Apparently some really broken devices (contrary to the SCSI
709 	 * standards) need to be selected without asserting ATN
710 	 */
711 	if (*bflags & BLIST_SELECT_NO_ATN)
712 		sdev->select_no_atn = 1;
713 
714 	/*
715 	 * Some devices may not want to have a start command automatically
716 	 * issued when a device is added.
717 	 */
718 	if (*bflags & BLIST_NOSTARTONADD)
719 		sdev->no_start_on_add = 1;
720 
721 	if (*bflags & BLIST_SINGLELUN)
722 		sdev->single_lun = 1;
723 
724 
725 	sdev->use_10_for_rw = 1;
726 
727 	if (*bflags & BLIST_MS_SKIP_PAGE_08)
728 		sdev->skip_ms_page_8 = 1;
729 
730 	if (*bflags & BLIST_MS_SKIP_PAGE_3F)
731 		sdev->skip_ms_page_3f = 1;
732 
733 	if (*bflags & BLIST_USE_10_BYTE_MS)
734 		sdev->use_10_for_ms = 1;
735 
736 	/* set the device running here so that slave configure
737 	 * may do I/O */
738 	scsi_device_set_state(sdev, SDEV_RUNNING);
739 
740 	if (*bflags & BLIST_MS_192_BYTES_FOR_3F)
741 		sdev->use_192_bytes_for_3f = 1;
742 
743 	if (*bflags & BLIST_NOT_LOCKABLE)
744 		sdev->lockable = 0;
745 
746 	if (*bflags & BLIST_RETRY_HWERROR)
747 		sdev->retry_hwerror = 1;
748 
749 	transport_configure_device(&sdev->sdev_gendev);
750 
751 	if (sdev->host->hostt->slave_configure)
752 		sdev->host->hostt->slave_configure(sdev);
753 
754 	/*
755 	 * Ok, the device is now all set up, we can
756 	 * register it and tell the rest of the kernel
757 	 * about it.
758 	 */
759 	scsi_sysfs_add_sdev(sdev);
760 
761 	return SCSI_SCAN_LUN_PRESENT;
762 }
763 
764 /**
765  * scsi_probe_and_add_lun - probe a LUN, if a LUN is found add it
766  * @starget:	pointer to target device structure
767  * @lun:	LUN of target device
768  * @sdevscan:	probe the LUN corresponding to this Scsi_Device
769  * @sdevnew:	store the value of any new Scsi_Device allocated
770  * @bflagsp:	store bflags here if not NULL
771  *
772  * Description:
773  *     Call scsi_probe_lun, if a LUN with an attached device is found,
774  *     allocate and set it up by calling scsi_add_lun.
775  *
776  * Return:
777  *     SCSI_SCAN_NO_RESPONSE: could not allocate or setup a Scsi_Device
778  *     SCSI_SCAN_TARGET_PRESENT: target responded, but no device is
779  *         attached at the LUN
780  *     SCSI_SCAN_LUN_PRESENT: a new Scsi_Device was allocated and initialized
781  **/
782 static int scsi_probe_and_add_lun(struct scsi_target *starget,
783 				  uint lun, int *bflagsp,
784 				  struct scsi_device **sdevp, int rescan,
785 				  void *hostdata)
786 {
787 	struct scsi_device *sdev;
788 	struct scsi_request *sreq;
789 	unsigned char *result;
790 	int bflags, res = SCSI_SCAN_NO_RESPONSE;
791 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
792 
793 	/*
794 	 * The rescan flag is used as an optimization, the first scan of a
795 	 * host adapter calls into here with rescan == 0.
796 	 */
797 	if (rescan) {
798 		sdev = scsi_device_lookup_by_target(starget, lun);
799 		if (sdev) {
800 			SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO
801 				"scsi scan: device exists on %s\n",
802 				sdev->sdev_gendev.bus_id));
803 			if (sdevp)
804 				*sdevp = sdev;
805 			else
806 				scsi_device_put(sdev);
807 
808 			if (bflagsp)
809 				*bflagsp = scsi_get_device_flags(sdev,
810 								 sdev->vendor,
811 								 sdev->model);
812 			return SCSI_SCAN_LUN_PRESENT;
813 		}
814 	}
815 
816 	sdev = scsi_alloc_sdev(starget, lun, hostdata);
817 	if (!sdev)
818 		goto out;
819 	sreq = scsi_allocate_request(sdev, GFP_ATOMIC);
820 	if (!sreq)
821 		goto out_free_sdev;
822 	result = kmalloc(256, GFP_ATOMIC |
823 			((shost->unchecked_isa_dma) ? __GFP_DMA : 0));
824 	if (!result)
825 		goto out_free_sreq;
826 
827 	scsi_probe_lun(sreq, result, &bflags);
828 	if (sreq->sr_result)
829 		goto out_free_result;
830 
831 	/*
832 	 * result contains valid SCSI INQUIRY data.
833 	 */
834 	if ((result[0] >> 5) == 3) {
835 		/*
836 		 * For a Peripheral qualifier 3 (011b), the SCSI
837 		 * spec says: The device server is not capable of
838 		 * supporting a physical device on this logical
839 		 * unit.
840 		 *
841 		 * For disks, this implies that there is no
842 		 * logical disk configured at sdev->lun, but there
843 		 * is a target id responding.
844 		 */
845 		SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO
846 					"scsi scan: peripheral qualifier of 3,"
847 					" no device added\n"));
848 		res = SCSI_SCAN_TARGET_PRESENT;
849 		goto out_free_result;
850 	}
851 
852 	res = scsi_add_lun(sdev, result, &bflags);
853 	if (res == SCSI_SCAN_LUN_PRESENT) {
854 		if (bflags & BLIST_KEY) {
855 			sdev->lockable = 0;
856 			scsi_unlock_floptical(sreq, result);
857 		}
858 		if (bflagsp)
859 			*bflagsp = bflags;
860 	}
861 
862  out_free_result:
863 	kfree(result);
864  out_free_sreq:
865 	scsi_release_request(sreq);
866  out_free_sdev:
867 	if (res == SCSI_SCAN_LUN_PRESENT) {
868 		if (sdevp) {
869 			scsi_device_get(sdev);
870 			*sdevp = sdev;
871 		}
872 	} else {
873 		if (sdev->host->hostt->slave_destroy)
874 			sdev->host->hostt->slave_destroy(sdev);
875 		transport_destroy_device(&sdev->sdev_gendev);
876 		put_device(&sdev->sdev_gendev);
877 	}
878  out:
879 	return res;
880 }
881 
882 /**
883  * scsi_sequential_lun_scan - sequentially scan a SCSI target
884  * @starget:	pointer to target structure to scan
885  * @bflags:	black/white list flag for LUN 0
886  * @lun0_res:	result of scanning LUN 0
887  *
888  * Description:
889  *     Generally, scan from LUN 1 (LUN 0 is assumed to already have been
890  *     scanned) to some maximum lun until a LUN is found with no device
891  *     attached. Use the bflags to figure out any oddities.
892  *
893  *     Modifies sdevscan->lun.
894  **/
895 static void scsi_sequential_lun_scan(struct scsi_target *starget,
896 				     int bflags, int lun0_res, int scsi_level,
897 				     int rescan)
898 {
899 	unsigned int sparse_lun, lun, max_dev_lun;
900 	struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
901 
902 	SCSI_LOG_SCAN_BUS(3, printk(KERN_INFO "scsi scan: Sequential scan of"
903 				    "%s\n", starget->dev.bus_id));
904 
905 	max_dev_lun = min(max_scsi_luns, shost->max_lun);
906 	/*
907 	 * If this device is known to support sparse multiple units,
908 	 * override the other settings, and scan all of them. Normally,
909 	 * SCSI-3 devices should be scanned via the REPORT LUNS.
910 	 */
911 	if (bflags & BLIST_SPARSELUN) {
912 		max_dev_lun = shost->max_lun;
913 		sparse_lun = 1;
914 	} else
915 		sparse_lun = 0;
916 
917 	/*
918 	 * If not sparse lun and no device attached at LUN 0 do not scan
919 	 * any further.
920 	 */
921 	if (!sparse_lun && (lun0_res != SCSI_SCAN_LUN_PRESENT))
922 		return;
923 
924 	/*
925 	 * If less than SCSI_1_CSS, and no special lun scaning, stop
926 	 * scanning; this matches 2.4 behaviour, but could just be a bug
927 	 * (to continue scanning a SCSI_1_CSS device).
928 	 *
929 	 * This test is broken.  We might not have any device on lun0 for
930 	 * a sparselun device, and if that's the case then how would we
931 	 * know the real scsi_level, eh?  It might make sense to just not
932 	 * scan any SCSI_1 device for non-0 luns, but that check would best
933 	 * go into scsi_alloc_sdev() and just have it return null when asked
934 	 * to alloc an sdev for lun > 0 on an already found SCSI_1 device.
935 	 *
936 	if ((sdevscan->scsi_level < SCSI_1_CCS) &&
937 	    ((bflags & (BLIST_FORCELUN | BLIST_SPARSELUN | BLIST_MAX5LUN))
938 	     == 0))
939 		return;
940 	 */
941 	/*
942 	 * If this device is known to support multiple units, override
943 	 * the other settings, and scan all of them.
944 	 */
945 	if (bflags & BLIST_FORCELUN)
946 		max_dev_lun = shost->max_lun;
947 	/*
948 	 * REGAL CDC-4X: avoid hang after LUN 4
949 	 */
950 	if (bflags & BLIST_MAX5LUN)
951 		max_dev_lun = min(5U, max_dev_lun);
952 	/*
953 	 * Do not scan SCSI-2 or lower device past LUN 7, unless
954 	 * BLIST_LARGELUN.
955 	 */
956 	if (scsi_level < SCSI_3 && !(bflags & BLIST_LARGELUN))
957 		max_dev_lun = min(8U, max_dev_lun);
958 
959 	/*
960 	 * We have already scanned LUN 0, so start at LUN 1. Keep scanning
961 	 * until we reach the max, or no LUN is found and we are not
962 	 * sparse_lun.
963 	 */
964 	for (lun = 1; lun < max_dev_lun; ++lun)
965 		if ((scsi_probe_and_add_lun(starget, lun, NULL, NULL, rescan,
966 					    NULL) != SCSI_SCAN_LUN_PRESENT) &&
967 		    !sparse_lun)
968 			return;
969 }
970 
971 /**
972  * scsilun_to_int: convert a scsi_lun to an int
973  * @scsilun:	struct scsi_lun to be converted.
974  *
975  * Description:
976  *     Convert @scsilun from a struct scsi_lun to a four byte host byte-ordered
977  *     integer, and return the result. The caller must check for
978  *     truncation before using this function.
979  *
980  * Notes:
981  *     The struct scsi_lun is assumed to be four levels, with each level
982  *     effectively containing a SCSI byte-ordered (big endian) short; the
983  *     addressing bits of each level are ignored (the highest two bits).
984  *     For a description of the LUN format, post SCSI-3 see the SCSI
985  *     Architecture Model, for SCSI-3 see the SCSI Controller Commands.
986  *
987  *     Given a struct scsi_lun of: 0a 04 0b 03 00 00 00 00, this function returns
988  *     the integer: 0x0b030a04
989  **/
990 static int scsilun_to_int(struct scsi_lun *scsilun)
991 {
992 	int i;
993 	unsigned int lun;
994 
995 	lun = 0;
996 	for (i = 0; i < sizeof(lun); i += 2)
997 		lun = lun | (((scsilun->scsi_lun[i] << 8) |
998 			      scsilun->scsi_lun[i + 1]) << (i * 8));
999 	return lun;
1000 }
1001 
1002 /**
1003  * scsi_report_lun_scan - Scan using SCSI REPORT LUN results
1004  * @sdevscan:	scan the host, channel, and id of this Scsi_Device
1005  *
1006  * Description:
1007  *     If @sdevscan is for a SCSI-3 or up device, send a REPORT LUN
1008  *     command, and scan the resulting list of LUNs by calling
1009  *     scsi_probe_and_add_lun.
1010  *
1011  *     Modifies sdevscan->lun.
1012  *
1013  * Return:
1014  *     0: scan completed (or no memory, so further scanning is futile)
1015  *     1: no report lun scan, or not configured
1016  **/
1017 static int scsi_report_lun_scan(struct scsi_device *sdev, int bflags,
1018 				int rescan)
1019 {
1020 	char devname[64];
1021 	unsigned char scsi_cmd[MAX_COMMAND_SIZE];
1022 	unsigned int length;
1023 	unsigned int lun;
1024 	unsigned int num_luns;
1025 	unsigned int retries;
1026 	struct scsi_lun *lunp, *lun_data;
1027 	struct scsi_request *sreq;
1028 	u8 *data;
1029 	struct scsi_sense_hdr sshdr;
1030 	struct scsi_target *starget = scsi_target(sdev);
1031 
1032 	/*
1033 	 * Only support SCSI-3 and up devices if BLIST_NOREPORTLUN is not set.
1034 	 * Also allow SCSI-2 if BLIST_REPORTLUN2 is set and host adapter does
1035 	 * support more than 8 LUNs.
1036 	 */
1037 	if ((bflags & BLIST_NOREPORTLUN) ||
1038 	     sdev->scsi_level < SCSI_2 ||
1039 	    (sdev->scsi_level < SCSI_3 &&
1040 	     (!(bflags & BLIST_REPORTLUN2) || sdev->host->max_lun <= 8)) )
1041 		return 1;
1042 	if (bflags & BLIST_NOLUN)
1043 		return 0;
1044 
1045 	sreq = scsi_allocate_request(sdev, GFP_ATOMIC);
1046 	if (!sreq)
1047 		goto out;
1048 
1049 	sprintf(devname, "host %d channel %d id %d",
1050 		sdev->host->host_no, sdev->channel, sdev->id);
1051 
1052 	/*
1053 	 * Allocate enough to hold the header (the same size as one scsi_lun)
1054 	 * plus the max number of luns we are requesting.
1055 	 *
1056 	 * Reallocating and trying again (with the exact amount we need)
1057 	 * would be nice, but then we need to somehow limit the size
1058 	 * allocated based on the available memory and the limits of
1059 	 * kmalloc - we don't want a kmalloc() failure of a huge value to
1060 	 * prevent us from finding any LUNs on this target.
1061 	 */
1062 	length = (max_scsi_report_luns + 1) * sizeof(struct scsi_lun);
1063 	lun_data = kmalloc(length, GFP_ATOMIC |
1064 			   (sdev->host->unchecked_isa_dma ? __GFP_DMA : 0));
1065 	if (!lun_data)
1066 		goto out_release_request;
1067 
1068 	scsi_cmd[0] = REPORT_LUNS;
1069 
1070 	/*
1071 	 * bytes 1 - 5: reserved, set to zero.
1072 	 */
1073 	memset(&scsi_cmd[1], 0, 5);
1074 
1075 	/*
1076 	 * bytes 6 - 9: length of the command.
1077 	 */
1078 	scsi_cmd[6] = (unsigned char) (length >> 24) & 0xff;
1079 	scsi_cmd[7] = (unsigned char) (length >> 16) & 0xff;
1080 	scsi_cmd[8] = (unsigned char) (length >> 8) & 0xff;
1081 	scsi_cmd[9] = (unsigned char) length & 0xff;
1082 
1083 	scsi_cmd[10] = 0;	/* reserved */
1084 	scsi_cmd[11] = 0;	/* control */
1085 	sreq->sr_cmd_len = 0;
1086 	sreq->sr_data_direction = DMA_FROM_DEVICE;
1087 
1088 	/*
1089 	 * We can get a UNIT ATTENTION, for example a power on/reset, so
1090 	 * retry a few times (like sd.c does for TEST UNIT READY).
1091 	 * Experience shows some combinations of adapter/devices get at
1092 	 * least two power on/resets.
1093 	 *
1094 	 * Illegal requests (for devices that do not support REPORT LUNS)
1095 	 * should come through as a check condition, and will not generate
1096 	 * a retry.
1097 	 */
1098 	for (retries = 0; retries < 3; retries++) {
1099 		SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: Sending"
1100 				" REPORT LUNS to %s (try %d)\n", devname,
1101 				retries));
1102 		scsi_wait_req(sreq, scsi_cmd, lun_data, length,
1103 				SCSI_TIMEOUT + 4*HZ, 3);
1104 		SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: REPORT LUNS"
1105 				" %s (try %d) result 0x%x\n", sreq->sr_result
1106 				?  "failed" : "successful", retries,
1107 				sreq->sr_result));
1108 		if (sreq->sr_result == 0)
1109 			break;
1110 		else if (scsi_request_normalize_sense(sreq, &sshdr)) {
1111 			if (sshdr.sense_key != UNIT_ATTENTION)
1112 				break;
1113 		}
1114 	}
1115 
1116 	if (sreq->sr_result) {
1117 		/*
1118 		 * The device probably does not support a REPORT LUN command
1119 		 */
1120 		kfree(lun_data);
1121 		scsi_release_request(sreq);
1122 		return 1;
1123 	}
1124 	scsi_release_request(sreq);
1125 
1126 	/*
1127 	 * Get the length from the first four bytes of lun_data.
1128 	 */
1129 	data = (u8 *) lun_data->scsi_lun;
1130 	length = ((data[0] << 24) | (data[1] << 16) |
1131 		  (data[2] << 8) | (data[3] << 0));
1132 
1133 	num_luns = (length / sizeof(struct scsi_lun));
1134 	if (num_luns > max_scsi_report_luns) {
1135 		printk(KERN_WARNING "scsi: On %s only %d (max_scsi_report_luns)"
1136 		       " of %d luns reported, try increasing"
1137 		       " max_scsi_report_luns.\n", devname,
1138 		       max_scsi_report_luns, num_luns);
1139 		num_luns = max_scsi_report_luns;
1140 	}
1141 
1142 	SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "scsi scan: REPORT LUN scan of"
1143 			" host %d channel %d id %d\n", sdev->host->host_no,
1144 			sdev->channel, sdev->id));
1145 
1146 	/*
1147 	 * Scan the luns in lun_data. The entry at offset 0 is really
1148 	 * the header, so start at 1 and go up to and including num_luns.
1149 	 */
1150 	for (lunp = &lun_data[1]; lunp <= &lun_data[num_luns]; lunp++) {
1151 		lun = scsilun_to_int(lunp);
1152 
1153 		/*
1154 		 * Check if the unused part of lunp is non-zero, and so
1155 		 * does not fit in lun.
1156 		 */
1157 		if (memcmp(&lunp->scsi_lun[sizeof(lun)], "\0\0\0\0", 4)) {
1158 			int i;
1159 
1160 			/*
1161 			 * Output an error displaying the LUN in byte order,
1162 			 * this differs from what linux would print for the
1163 			 * integer LUN value.
1164 			 */
1165 			printk(KERN_WARNING "scsi: %s lun 0x", devname);
1166 			data = (char *)lunp->scsi_lun;
1167 			for (i = 0; i < sizeof(struct scsi_lun); i++)
1168 				printk("%02x", data[i]);
1169 			printk(" has a LUN larger than currently supported.\n");
1170 		} else if (lun == 0) {
1171 			/*
1172 			 * LUN 0 has already been scanned.
1173 			 */
1174 		} else if (lun > sdev->host->max_lun) {
1175 			printk(KERN_WARNING "scsi: %s lun%d has a LUN larger"
1176 			       " than allowed by the host adapter\n",
1177 			       devname, lun);
1178 		} else {
1179 			int res;
1180 
1181 			res = scsi_probe_and_add_lun(starget,
1182 				lun, NULL, NULL, rescan, NULL);
1183 			if (res == SCSI_SCAN_NO_RESPONSE) {
1184 				/*
1185 				 * Got some results, but now none, abort.
1186 				 */
1187 				printk(KERN_ERR "scsi: Unexpected response"
1188 				       " from %s lun %d while scanning, scan"
1189 				       " aborted\n", devname, lun);
1190 				break;
1191 			}
1192 		}
1193 	}
1194 
1195 	kfree(lun_data);
1196 	return 0;
1197 
1198  out_release_request:
1199 	scsi_release_request(sreq);
1200  out:
1201 	/*
1202 	 * We are out of memory, don't try scanning any further.
1203 	 */
1204 	printk(ALLOC_FAILURE_MSG, __FUNCTION__);
1205 	return 0;
1206 }
1207 
1208 struct scsi_device *__scsi_add_device(struct Scsi_Host *shost, uint channel,
1209 				      uint id, uint lun, void *hostdata)
1210 {
1211 	struct scsi_device *sdev;
1212 	struct device *parent = &shost->shost_gendev;
1213 	int res;
1214 	struct scsi_target *starget = scsi_alloc_target(parent, channel, id);
1215 
1216 	if (!starget)
1217 		return ERR_PTR(-ENOMEM);
1218 
1219 	get_device(&starget->dev);
1220 	down(&shost->scan_mutex);
1221 	res = scsi_probe_and_add_lun(starget, lun, NULL, &sdev, 1, hostdata);
1222 	if (res != SCSI_SCAN_LUN_PRESENT)
1223 		sdev = ERR_PTR(-ENODEV);
1224 	up(&shost->scan_mutex);
1225 	scsi_target_reap(starget);
1226 	put_device(&starget->dev);
1227 
1228 	return sdev;
1229 }
1230 EXPORT_SYMBOL(__scsi_add_device);
1231 
1232 void scsi_rescan_device(struct device *dev)
1233 {
1234 	struct scsi_driver *drv;
1235 
1236 	if (!dev->driver)
1237 		return;
1238 
1239 	drv = to_scsi_driver(dev->driver);
1240 	if (try_module_get(drv->owner)) {
1241 		if (drv->rescan)
1242 			drv->rescan(dev);
1243 		module_put(drv->owner);
1244 	}
1245 }
1246 EXPORT_SYMBOL(scsi_rescan_device);
1247 
1248 /**
1249  * scsi_scan_target - scan a target id, possibly including all LUNs on the
1250  *     target.
1251  * @sdevsca:	Scsi_Device handle for scanning
1252  * @shost:	host to scan
1253  * @channel:	channel to scan
1254  * @id:		target id to scan
1255  *
1256  * Description:
1257  *     Scan the target id on @shost, @channel, and @id. Scan at least LUN
1258  *     0, and possibly all LUNs on the target id.
1259  *
1260  *     Use the pre-allocated @sdevscan as a handle for the scanning. This
1261  *     function sets sdevscan->host, sdevscan->id and sdevscan->lun; the
1262  *     scanning functions modify sdevscan->lun.
1263  *
1264  *     First try a REPORT LUN scan, if that does not scan the target, do a
1265  *     sequential scan of LUNs on the target id.
1266  **/
1267 void scsi_scan_target(struct device *parent, unsigned int channel,
1268 		      unsigned int id, unsigned int lun, int rescan)
1269 {
1270 	struct Scsi_Host *shost = dev_to_shost(parent);
1271 	int bflags = 0;
1272 	int res;
1273 	struct scsi_device *sdev = NULL;
1274 	struct scsi_target *starget;
1275 
1276 	if (shost->this_id == id)
1277 		/*
1278 		 * Don't scan the host adapter
1279 		 */
1280 		return;
1281 
1282 
1283 	starget = scsi_alloc_target(parent, channel, id);
1284 
1285 	if (!starget)
1286 		return;
1287 
1288 	get_device(&starget->dev);
1289 	if (lun != SCAN_WILD_CARD) {
1290 		/*
1291 		 * Scan for a specific host/chan/id/lun.
1292 		 */
1293 		scsi_probe_and_add_lun(starget, lun, NULL, NULL, rescan, NULL);
1294 		goto out_reap;
1295 	}
1296 
1297 	/*
1298 	 * Scan LUN 0, if there is some response, scan further. Ideally, we
1299 	 * would not configure LUN 0 until all LUNs are scanned.
1300 	 */
1301 	res = scsi_probe_and_add_lun(starget, 0, &bflags, &sdev, rescan, NULL);
1302 	if (res == SCSI_SCAN_LUN_PRESENT) {
1303 		if (scsi_report_lun_scan(sdev, bflags, rescan) != 0)
1304 			/*
1305 			 * The REPORT LUN did not scan the target,
1306 			 * do a sequential scan.
1307 			 */
1308 			scsi_sequential_lun_scan(starget, bflags,
1309 				       	res, sdev->scsi_level, rescan);
1310 	} else if (res == SCSI_SCAN_TARGET_PRESENT) {
1311 		/*
1312 		 * There's a target here, but lun 0 is offline so we
1313 		 * can't use the report_lun scan.  Fall back to a
1314 		 * sequential lun scan with a bflags of SPARSELUN and
1315 		 * a default scsi level of SCSI_2
1316 		 */
1317 		scsi_sequential_lun_scan(starget, BLIST_SPARSELUN,
1318 				SCSI_SCAN_TARGET_PRESENT, SCSI_2, rescan);
1319 	}
1320 	if (sdev)
1321 		scsi_device_put(sdev);
1322 
1323  out_reap:
1324 	/* now determine if the target has any children at all
1325 	 * and if not, nuke it */
1326 	scsi_target_reap(starget);
1327 
1328 	put_device(&starget->dev);
1329 }
1330 EXPORT_SYMBOL(scsi_scan_target);
1331 
1332 static void scsi_scan_channel(struct Scsi_Host *shost, unsigned int channel,
1333 			      unsigned int id, unsigned int lun, int rescan)
1334 {
1335 	uint order_id;
1336 
1337 	if (id == SCAN_WILD_CARD)
1338 		for (id = 0; id < shost->max_id; ++id) {
1339 			/*
1340 			 * XXX adapter drivers when possible (FCP, iSCSI)
1341 			 * could modify max_id to match the current max,
1342 			 * not the absolute max.
1343 			 *
1344 			 * XXX add a shost id iterator, so for example,
1345 			 * the FC ID can be the same as a target id
1346 			 * without a huge overhead of sparse id's.
1347 			 */
1348 			if (shost->reverse_ordering)
1349 				/*
1350 				 * Scan from high to low id.
1351 				 */
1352 				order_id = shost->max_id - id - 1;
1353 			else
1354 				order_id = id;
1355 			scsi_scan_target(&shost->shost_gendev, channel, order_id, lun, rescan);
1356 		}
1357 	else
1358 		scsi_scan_target(&shost->shost_gendev, channel, id, lun, rescan);
1359 }
1360 
1361 int scsi_scan_host_selected(struct Scsi_Host *shost, unsigned int channel,
1362 			    unsigned int id, unsigned int lun, int rescan)
1363 {
1364 	SCSI_LOG_SCAN_BUS(3, printk (KERN_INFO "%s: <%u:%u:%u:%u>\n",
1365 		__FUNCTION__, shost->host_no, channel, id, lun));
1366 
1367 	if (((channel != SCAN_WILD_CARD) && (channel > shost->max_channel)) ||
1368 	    ((id != SCAN_WILD_CARD) && (id > shost->max_id)) ||
1369 	    ((lun != SCAN_WILD_CARD) && (lun > shost->max_lun)))
1370 		return -EINVAL;
1371 
1372 	down(&shost->scan_mutex);
1373 	if (channel == SCAN_WILD_CARD)
1374 		for (channel = 0; channel <= shost->max_channel; channel++)
1375 			scsi_scan_channel(shost, channel, id, lun, rescan);
1376 	else
1377 		scsi_scan_channel(shost, channel, id, lun, rescan);
1378 	up(&shost->scan_mutex);
1379 
1380 	return 0;
1381 }
1382 
1383 /**
1384  * scsi_scan_host - scan the given adapter
1385  * @shost:	adapter to scan
1386  **/
1387 void scsi_scan_host(struct Scsi_Host *shost)
1388 {
1389 	scsi_scan_host_selected(shost, SCAN_WILD_CARD, SCAN_WILD_CARD,
1390 				SCAN_WILD_CARD, 0);
1391 }
1392 EXPORT_SYMBOL(scsi_scan_host);
1393 
1394 /**
1395  * scsi_scan_single_target - scan the given SCSI target
1396  * @shost:         adapter to scan
1397  * @chan:          channel to scan
1398  * @id:            target id to scan
1399  **/
1400 void scsi_scan_single_target(struct Scsi_Host *shost,
1401 	unsigned int chan, unsigned int id)
1402 {
1403 	scsi_scan_host_selected(shost, chan, id, SCAN_WILD_CARD, 1);
1404 }
1405 EXPORT_SYMBOL(scsi_scan_single_target);
1406 
1407 void scsi_forget_host(struct Scsi_Host *shost)
1408 {
1409 	struct scsi_target *starget, *tmp;
1410 	unsigned long flags;
1411 
1412 	/*
1413 	 * Ok, this look a bit strange.  We always look for the first device
1414 	 * on the list as scsi_remove_device removes them from it - thus we
1415 	 * also have to release the lock.
1416 	 * We don't need to get another reference to the device before
1417 	 * releasing the lock as we already own the reference from
1418 	 * scsi_register_device that's release in scsi_remove_device.  And
1419 	 * after that we don't look at sdev anymore.
1420 	 */
1421 	spin_lock_irqsave(shost->host_lock, flags);
1422 	list_for_each_entry_safe(starget, tmp, &shost->__targets, siblings) {
1423 		spin_unlock_irqrestore(shost->host_lock, flags);
1424 		scsi_remove_target(&starget->dev);
1425 		spin_lock_irqsave(shost->host_lock, flags);
1426 	}
1427 	spin_unlock_irqrestore(shost->host_lock, flags);
1428 }
1429 
1430 /*
1431  * Function:    scsi_get_host_dev()
1432  *
1433  * Purpose:     Create a Scsi_Device that points to the host adapter itself.
1434  *
1435  * Arguments:   SHpnt   - Host that needs a Scsi_Device
1436  *
1437  * Lock status: None assumed.
1438  *
1439  * Returns:     The Scsi_Device or NULL
1440  *
1441  * Notes:
1442  *	Attach a single Scsi_Device to the Scsi_Host - this should
1443  *	be made to look like a "pseudo-device" that points to the
1444  *	HA itself.
1445  *
1446  *	Note - this device is not accessible from any high-level
1447  *	drivers (including generics), which is probably not
1448  *	optimal.  We can add hooks later to attach
1449  */
1450 struct scsi_device *scsi_get_host_dev(struct Scsi_Host *shost)
1451 {
1452 	struct scsi_device *sdev;
1453 	struct scsi_target *starget;
1454 
1455 	starget = scsi_alloc_target(&shost->shost_gendev, 0, shost->this_id);
1456 	if (!starget)
1457 		return NULL;
1458 
1459 	sdev = scsi_alloc_sdev(starget, 0, NULL);
1460 	if (sdev) {
1461 		sdev->sdev_gendev.parent = get_device(&starget->dev);
1462 		sdev->borken = 0;
1463 	}
1464 	put_device(&starget->dev);
1465 	return sdev;
1466 }
1467 EXPORT_SYMBOL(scsi_get_host_dev);
1468 
1469 /*
1470  * Function:    scsi_free_host_dev()
1471  *
1472  * Purpose:     Free a scsi_device that points to the host adapter itself.
1473  *
1474  * Arguments:   SHpnt   - Host that needs a Scsi_Device
1475  *
1476  * Lock status: None assumed.
1477  *
1478  * Returns:     Nothing
1479  *
1480  * Notes:
1481  */
1482 void scsi_free_host_dev(struct scsi_device *sdev)
1483 {
1484 	BUG_ON(sdev->id != sdev->host->this_id);
1485 
1486 	if (sdev->host->hostt->slave_destroy)
1487 		sdev->host->hostt->slave_destroy(sdev);
1488 	transport_destroy_device(&sdev->sdev_gendev);
1489 	put_device(&sdev->sdev_gendev);
1490 }
1491 EXPORT_SYMBOL(scsi_free_host_dev);
1492 
1493