]> git.karo-electronics.de Git - karo-tx-linux.git/commitdiff
Merge remote-tracking branch 'block/for-next'
authorThierry Reding <treding@nvidia.com>
Thu, 24 Oct 2013 12:36:26 +0000 (14:36 +0200)
committerThierry Reding <treding@nvidia.com>
Thu, 24 Oct 2013 12:36:26 +0000 (14:36 +0200)
32 files changed:
block/blk-core.c
block/blk-iopoll.c
block/blk-settings.c
block/blk-softirq.c
block/blk-timeout.c
block/elevator.c
drivers/block/Kconfig
drivers/block/Makefile
drivers/block/brd.c
drivers/block/drbd/drbd_int.h
drivers/block/drbd/drbd_main.c
drivers/block/drbd/drbd_nl.c
drivers/block/drbd/drbd_receiver.c
drivers/block/drbd/drbd_req.c
drivers/block/loop.c
drivers/block/mg_disk.c
drivers/block/mtip32xx/mtip32xx.c
drivers/block/mtip32xx/mtip32xx.h
drivers/block/rsxx/core.c
drivers/block/rsxx/dev.c
drivers/block/rsxx/dma.c
drivers/block/rsxx/rsxx_priv.h
drivers/block/skd_main.c [new file with mode: 0644]
drivers/block/skd_s1120.h [new file with mode: 0644]
drivers/block/xen-blkback/blkback.c
drivers/block/xen-blkfront.c
fs/char_dev.c
fs/fscache/object.c
include/linux/backing-dev.h
include/linux/blktrace_api.h
kernel/trace/blktrace.c
mm/swap.c

index 0a00e4ecf87cae37a3d310c8dfd32869ac24c161..25f13479f552562bc2e406f3ebed2bf150e93fe9 100644 (file)
@@ -645,10 +645,12 @@ struct request_queue *blk_alloc_queue_node(gfp_t gfp_mask, int node_id)
        __set_bit(QUEUE_FLAG_BYPASS, &q->queue_flags);
 
        if (blkcg_init_queue(q))
-               goto fail_id;
+               goto fail_bdi;
 
        return q;
 
+fail_bdi:
+       bdi_destroy(&q->backing_dev_info);
 fail_id:
        ida_simple_remove(&blk_queue_ida, q->id);
 fail_q:
@@ -739,9 +741,17 @@ blk_init_allocated_queue(struct request_queue *q, request_fn_proc *rfn,
 
        q->sg_reserved_size = INT_MAX;
 
+       /* Protect q->elevator from elevator_change */
+       mutex_lock(&q->sysfs_lock);
+
        /* init elevator */
-       if (elevator_init(q, NULL))
+       if (elevator_init(q, NULL)) {
+               mutex_unlock(&q->sysfs_lock);
                return NULL;
+       }
+
+       mutex_unlock(&q->sysfs_lock);
+
        return q;
 }
 EXPORT_SYMBOL(blk_init_allocated_queue);
@@ -1419,6 +1429,9 @@ static bool attempt_plug_merge(struct request_queue *q, struct bio *bio,
        struct request *rq;
        bool ret = false;
 
+       if (blk_queue_nomerges(q))
+               goto out;
+
        plug = current->plug;
        if (!plug)
                goto out;
@@ -2227,6 +2240,7 @@ void blk_start_request(struct request *req)
        if (unlikely(blk_bidi_rq(req)))
                req->next_rq->resid_len = blk_rq_bytes(req->next_rq);
 
+       BUG_ON(test_bit(REQ_ATOM_COMPLETE, &req->atomic_flags));
        blk_add_timer(req);
 }
 EXPORT_SYMBOL(blk_start_request);
index 4b8d9b541112017e14e0f72755124a2f3cf91f47..1855bf51edb028e253e26cce1b979a799c9de54b 100644 (file)
@@ -35,7 +35,7 @@ void blk_iopoll_sched(struct blk_iopoll *iop)
        unsigned long flags;
 
        local_irq_save(flags);
-       list_add_tail(&iop->list, &__get_cpu_var(blk_cpu_iopoll));
+       list_add_tail(&iop->list, this_cpu_ptr(&blk_cpu_iopoll));
        __raise_softirq_irqoff(BLOCK_IOPOLL_SOFTIRQ);
        local_irq_restore(flags);
 }
@@ -79,7 +79,7 @@ EXPORT_SYMBOL(blk_iopoll_complete);
 
 static void blk_iopoll_softirq(struct softirq_action *h)
 {
-       struct list_head *list = &__get_cpu_var(blk_cpu_iopoll);
+       struct list_head *list = this_cpu_ptr(&blk_cpu_iopoll);
        int rearm = 0, budget = blk_iopoll_budget;
        unsigned long start_time = jiffies;
 
@@ -201,7 +201,7 @@ static int blk_iopoll_cpu_notify(struct notifier_block *self,
 
                local_irq_disable();
                list_splice_init(&per_cpu(blk_cpu_iopoll, cpu),
-                                &__get_cpu_var(blk_cpu_iopoll));
+                                this_cpu_ptr(&blk_cpu_iopoll));
                __raise_softirq_irqoff(BLOCK_IOPOLL_SOFTIRQ);
                local_irq_enable();
        }
index 026c1517505f2aaab4780a15735850104abbf7eb..05e826793e4e36b2e6c8de29802674767e3bd4d8 100644 (file)
@@ -144,6 +144,7 @@ void blk_set_stacking_limits(struct queue_limits *lim)
        lim->discard_zeroes_data = 1;
        lim->max_segments = USHRT_MAX;
        lim->max_hw_sectors = UINT_MAX;
+       lim->max_segment_size = UINT_MAX;
        lim->max_sectors = UINT_MAX;
        lim->max_write_same_sectors = UINT_MAX;
 }
index ec9e60636f4335c8e6af0617f9fbc61335c9fea5..ce4b8bfd3d279b0e6dc219d722420368bf969b25 100644 (file)
@@ -23,7 +23,7 @@ static void blk_done_softirq(struct softirq_action *h)
        struct list_head *cpu_list, local_list;
 
        local_irq_disable();
-       cpu_list = &__get_cpu_var(blk_cpu_done);
+       cpu_list = this_cpu_ptr(&blk_cpu_done);
        list_replace_init(cpu_list, &local_list);
        local_irq_enable();
 
@@ -44,7 +44,7 @@ static void trigger_softirq(void *data)
        struct list_head *list;
 
        local_irq_save(flags);
-       list = &__get_cpu_var(blk_cpu_done);
+       list = this_cpu_ptr(&blk_cpu_done);
        list_add_tail(&rq->csd.list, list);
 
        if (list->next == &rq->csd.list)
@@ -90,7 +90,7 @@ static int blk_cpu_notify(struct notifier_block *self, unsigned long action,
 
                local_irq_disable();
                list_splice_init(&per_cpu(blk_cpu_done, cpu),
-                                &__get_cpu_var(blk_cpu_done));
+                                this_cpu_ptr(&blk_cpu_done));
                raise_softirq_irqoff(BLOCK_SOFTIRQ);
                local_irq_enable();
        }
@@ -135,7 +135,7 @@ void __blk_complete_request(struct request *req)
        if (ccpu == cpu || shared) {
                struct list_head *list;
 do_local:
-               list = &__get_cpu_var(blk_cpu_done);
+               list = this_cpu_ptr(&blk_cpu_done);
                list_add_tail(&req->csd.list, list);
 
                /*
index 65f103563969bf32391c7bb3d6f4e4859ed1459a..655ba909cd6a6c6826cb57be9055da25df3b8cec 100644 (file)
@@ -91,8 +91,8 @@ static void blk_rq_timed_out(struct request *req)
                __blk_complete_request(req);
                break;
        case BLK_EH_RESET_TIMER:
-               blk_clear_rq_complete(req);
                blk_add_timer(req);
+               blk_clear_rq_complete(req);
                break;
        case BLK_EH_NOT_HANDLED:
                /*
@@ -174,7 +174,6 @@ void blk_add_timer(struct request *req)
                return;
 
        BUG_ON(!list_empty(&req->timeout_list));
-       BUG_ON(test_bit(REQ_ATOM_COMPLETE, &req->atomic_flags));
 
        /*
         * Some LLDs, like scsi, peek at the timeout to prevent a
index 2bcbd8cc14d4b23780a3cfc262857a87f7c5d67e..b7ff2861b6bdc0bd8e57528ac776fc9b923b5c70 100644 (file)
@@ -186,6 +186,12 @@ int elevator_init(struct request_queue *q, char *name)
        struct elevator_type *e = NULL;
        int err;
 
+       /*
+        * q->sysfs_lock must be held to provide mutual exclusion between
+        * elevator_switch() and here.
+        */
+       lockdep_assert_held(&q->sysfs_lock);
+
        if (unlikely(q->elevator))
                return 0;
 
@@ -959,7 +965,7 @@ fail_init:
 /*
  * Switch this queue to the given IO scheduler.
  */
-int elevator_change(struct request_queue *q, const char *name)
+static int __elevator_change(struct request_queue *q, const char *name)
 {
        char elevator_name[ELV_NAME_MAX];
        struct elevator_type *e;
@@ -981,6 +987,18 @@ int elevator_change(struct request_queue *q, const char *name)
 
        return elevator_switch(q, e);
 }
+
+int elevator_change(struct request_queue *q, const char *name)
+{
+       int ret;
+
+       /* Protect q->elevator from elevator_init() */
+       mutex_lock(&q->sysfs_lock);
+       ret = __elevator_change(q, name);
+       mutex_unlock(&q->sysfs_lock);
+
+       return ret;
+}
 EXPORT_SYMBOL(elevator_change);
 
 ssize_t elv_iosched_store(struct request_queue *q, const char *name,
@@ -991,7 +1009,7 @@ ssize_t elv_iosched_store(struct request_queue *q, const char *name,
        if (!q->elevator)
                return count;
 
-       ret = elevator_change(q, name);
+       ret = __elevator_change(q, name);
        if (!ret)
                return count;
 
index e07a5fd58ad7463f8775f7334fd692c7e51df2ad..f616109a57a66be4ab4f429e8204fa69b06f21d1 100644 (file)
@@ -107,7 +107,7 @@ source "drivers/block/mtip32xx/Kconfig"
 
 config BLK_CPQ_DA
        tristate "Compaq SMART2 support"
-       depends on PCI && VIRT_TO_BUS
+       depends on PCI && VIRT_TO_BUS && 0
        help
          This is the driver for Compaq Smart Array controllers.  Everyone
          using these boards should say Y here.  See the file
@@ -316,6 +316,16 @@ config BLK_DEV_NVME
          To compile this driver as a module, choose M here: the
          module will be called nvme.
 
+config BLK_DEV_SKD
+       tristate "STEC S1120 Block Driver"
+       depends on PCI
+       depends on 64BIT
+       ---help---
+       Saying Y or M here will enable support for the
+       STEC, Inc. S1120 PCIe SSD.
+
+       Use device /dev/skd$N amd /dev/skd$Np$M.
+
 config BLK_DEV_OSD
        tristate "OSD object-as-blkdev support"
        depends on SCSI_OSD_ULD
index ca07399a8d99efb2d11b80bc266c52c496c902e3..f33b3669428901ec252422e39266f19eaad1a613 100644 (file)
@@ -23,6 +23,7 @@ obj-$(CONFIG_CDROM_PKTCDVD)   += pktcdvd.o
 obj-$(CONFIG_MG_DISK)          += mg_disk.o
 obj-$(CONFIG_SUNVDC)           += sunvdc.o
 obj-$(CONFIG_BLK_DEV_NVME)     += nvme.o
+obj-$(CONFIG_BLK_DEV_SKD)      += skd.o
 obj-$(CONFIG_BLK_DEV_OSD)      += osdblk.o
 
 obj-$(CONFIG_BLK_DEV_UMEM)     += umem.o
@@ -43,4 +44,5 @@ obj-$(CONFIG_BLK_DEV_PCIESSD_MTIP32XX)        += mtip32xx/
 obj-$(CONFIG_BLK_DEV_RSXX) += rsxx/
 
 nvme-y         := nvme-core.o nvme-scsi.o
+skd-y          := skd_main.o
 swim_mod-y     := swim.o swim_asm.o
index 9bf4371755f22fa93d4ccbe7d2bb605ec56a4048..d91f1a56e8617f56c019bfb6389bb79f71fa8ad2 100644 (file)
@@ -545,7 +545,7 @@ static struct kobject *brd_probe(dev_t dev, int *part, void *data)
 
        mutex_lock(&brd_devices_mutex);
        brd = brd_init_one(MINOR(dev) >> part_shift);
-       kobj = brd ? get_disk(brd->brd_disk) : ERR_PTR(-ENOMEM);
+       kobj = brd ? get_disk(brd->brd_disk) : NULL;
        mutex_unlock(&brd_devices_mutex);
 
        *part = 0;
index 2d7f608d181ce8cf2eb26ab3859dcccb0ec38474..0e06f0c5dd1e60d8d4a4656160f23ed0d6f4cde1 100644 (file)
@@ -1474,7 +1474,8 @@ enum determine_dev_size {
        DS_ERROR = -1,
        DS_UNCHANGED = 0,
        DS_SHRUNK = 1,
-       DS_GREW = 2
+       DS_GREW = 2,
+       DS_GREW_FROM_ZERO = 3,
 };
 extern enum determine_dev_size
 drbd_determine_dev_size(struct drbd_conf *, enum dds_flags, struct resize_parms *) __must_hold(local);
index 55635edf563be741d56cccda715ab70ff23248a4..9e3818b1bc8321e5883a1ef1b3dfe9542e7ea619 100644 (file)
@@ -2750,13 +2750,6 @@ int __init drbd_init(void)
                return err;
        }
 
-       err = drbd_genl_register();
-       if (err) {
-               printk(KERN_ERR "drbd: unable to register generic netlink family\n");
-               goto fail;
-       }
-
-
        register_reboot_notifier(&drbd_notifier);
 
        /*
@@ -2767,6 +2760,15 @@ int __init drbd_init(void)
        drbd_proc = NULL; /* play safe for drbd_cleanup */
        idr_init(&minors);
 
+       rwlock_init(&global_state_lock);
+       INIT_LIST_HEAD(&drbd_tconns);
+
+       err = drbd_genl_register();
+       if (err) {
+               printk(KERN_ERR "drbd: unable to register generic netlink family\n");
+               goto fail;
+       }
+
        err = drbd_create_mempools();
        if (err)
                goto fail;
@@ -2778,9 +2780,6 @@ int __init drbd_init(void)
                goto fail;
        }
 
-       rwlock_init(&global_state_lock);
-       INIT_LIST_HEAD(&drbd_tconns);
-
        retry.wq = create_singlethread_workqueue("drbd-reissue");
        if (!retry.wq) {
                printk(KERN_ERR "drbd: unable to create retry workqueue\n");
index 8cc1e640f485b4620ff39d8f3de915d36a38487e..c706d50a8b0674aeabd58a548551b8898168b88e 100644 (file)
@@ -955,7 +955,7 @@ drbd_determine_dev_size(struct drbd_conf *mdev, enum dds_flags flags, struct res
        }
 
        if (size > la_size_sect)
-               rv = DS_GREW;
+               rv = la_size_sect ? DS_GREW : DS_GREW_FROM_ZERO;
        if (size < la_size_sect)
                rv = DS_SHRUNK;
 
@@ -1132,9 +1132,9 @@ void drbd_reconsider_max_bio_size(struct drbd_conf *mdev)
        /* We may ignore peer limits if the peer is modern enough.
           Because new from 8.3.8 onwards the peer can use multiple
           BIOs for a single peer_request */
-       if (mdev->state.conn >= C_CONNECTED) {
+       if (mdev->state.conn >= C_WF_REPORT_PARAMS) {
                if (mdev->tconn->agreed_pro_version < 94)
-                       peer = min( mdev->peer_max_bio_size, DRBD_MAX_SIZE_H80_PACKET);
+                       peer = min(mdev->peer_max_bio_size, DRBD_MAX_SIZE_H80_PACKET);
                        /* Correct old drbd (up to 8.3.7) if it believes it can do more than 32KiB */
                else if (mdev->tconn->agreed_pro_version == 94)
                        peer = DRBD_MAX_SIZE_H80_PACKET;
index cc29cd3bf78b6a758f85255f56f6cdeca1b2cc4b..6fa6673b36b396765b58142e8e8abcdc4beaae05 100644 (file)
@@ -1890,29 +1890,11 @@ static u32 seq_max(u32 a, u32 b)
        return seq_greater(a, b) ? a : b;
 }
 
-static bool need_peer_seq(struct drbd_conf *mdev)
-{
-       struct drbd_tconn *tconn = mdev->tconn;
-       int tp;
-
-       /*
-        * We only need to keep track of the last packet_seq number of our peer
-        * if we are in dual-primary mode and we have the resolve-conflicts flag set; see
-        * handle_write_conflicts().
-        */
-
-       rcu_read_lock();
-       tp = rcu_dereference(mdev->tconn->net_conf)->two_primaries;
-       rcu_read_unlock();
-
-       return tp && test_bit(RESOLVE_CONFLICTS, &tconn->flags);
-}
-
 static void update_peer_seq(struct drbd_conf *mdev, unsigned int peer_seq)
 {
        unsigned int newest_peer_seq;
 
-       if (need_peer_seq(mdev)) {
+       if (test_bit(RESOLVE_CONFLICTS, &mdev->tconn->flags)) {
                spin_lock(&mdev->peer_seq_lock);
                newest_peer_seq = seq_max(mdev->peer_seq, peer_seq);
                mdev->peer_seq = newest_peer_seq;
@@ -1972,22 +1954,31 @@ static int wait_for_and_update_peer_seq(struct drbd_conf *mdev, const u32 peer_s
 {
        DEFINE_WAIT(wait);
        long timeout;
-       int ret;
+       int ret = 0, tp;
 
-       if (!need_peer_seq(mdev))
+       if (!test_bit(RESOLVE_CONFLICTS, &mdev->tconn->flags))
                return 0;
 
        spin_lock(&mdev->peer_seq_lock);
        for (;;) {
                if (!seq_greater(peer_seq - 1, mdev->peer_seq)) {
                        mdev->peer_seq = seq_max(mdev->peer_seq, peer_seq);
-                       ret = 0;
                        break;
                }
+
                if (signal_pending(current)) {
                        ret = -ERESTARTSYS;
                        break;
                }
+
+               rcu_read_lock();
+               tp = rcu_dereference(mdev->tconn->net_conf)->two_primaries;
+               rcu_read_unlock();
+
+               if (!tp)
+                       break;
+
+               /* Only need to wait if two_primaries is enabled */
                prepare_to_wait(&mdev->seq_wait, &wait, TASK_INTERRUPTIBLE);
                spin_unlock(&mdev->peer_seq_lock);
                rcu_read_lock();
@@ -2228,8 +2219,10 @@ static int receive_Data(struct drbd_tconn *tconn, struct packet_info *pi)
                        }
                        goto out_interrupted;
                }
-       } else
+       } else {
+               update_peer_seq(mdev, peer_seq);
                spin_lock_irq(&mdev->tconn->req_lock);
+       }
        list_add(&peer_req->w.list, &mdev->active_ee);
        spin_unlock_irq(&mdev->tconn->req_lock);
 
@@ -4132,7 +4125,11 @@ recv_bm_rle_bits(struct drbd_conf *mdev,
                                (unsigned int)bs.buf_len);
                        return -EIO;
                }
-               look_ahead >>= bits;
+               /* if we consumed all 64 bits, assign 0; >> 64 is "undefined"; */
+               if (likely(bits < 64))
+                       look_ahead >>= bits;
+               else
+                       look_ahead = 0;
                have -= bits;
 
                bits = bitstream_get_bits(&bs, &tmp, 64 - have);
index c24379ffd4e309cb0344f138854a131e12cc804e..fec7bef44994cf8b76e595f69b5e34b42cdaf230 100644 (file)
@@ -1306,6 +1306,7 @@ int drbd_merge_bvec(struct request_queue *q, struct bvec_merge_data *bvm, struct
        int backing_limit;
 
        if (bio_size && get_ldev(mdev)) {
+               unsigned int max_hw_sectors = queue_max_hw_sectors(q);
                struct request_queue * const b =
                        mdev->ldev->backing_bdev->bd_disk->queue;
                if (b->merge_bvec_fn) {
@@ -1313,6 +1314,8 @@ int drbd_merge_bvec(struct request_queue *q, struct bvec_merge_data *bvm, struct
                        limit = min(limit, backing_limit);
                }
                put_ldev(mdev);
+               if ((limit >> 9) > max_hw_sectors)
+                       limit = max_hw_sectors << 9;
        }
        return limit;
 }
index e5647690a751ef1f1ea6bcd09ee24dc758a1e292..abe147aee19d2b7b3c243a46b38cb3b0c55831a7 100644 (file)
@@ -962,13 +962,6 @@ static int loop_set_fd(struct loop_device *lo, fmode_t mode,
 
        bio_list_init(&lo->lo_bio_list);
 
-       /*
-        * set queue make_request_fn, and add limits based on lower level
-        * device
-        */
-       blk_queue_make_request(lo->lo_queue, loop_make_request);
-       lo->lo_queue->queuedata = lo;
-
        if (!(lo_flags & LO_FLAGS_READ_ONLY) && file->f_op->fsync)
                blk_queue_flush(lo->lo_queue, REQ_FLUSH);
 
@@ -1696,6 +1689,8 @@ static int loop_add(struct loop_device **l, int i)
        if (!lo)
                goto out;
 
+       lo->lo_state = Lo_unbound;
+
        /* allocate id, if @id >= 0, we're requesting that specific id */
        if (i >= 0) {
                err = idr_alloc(&loop_index_idr, lo, i, i + 1, GFP_KERNEL);
@@ -1711,7 +1706,13 @@ static int loop_add(struct loop_device **l, int i)
        err = -ENOMEM;
        lo->lo_queue = blk_alloc_queue(GFP_KERNEL);
        if (!lo->lo_queue)
-               goto out_free_dev;
+               goto out_free_idr;
+
+       /*
+        * set queue make_request_fn
+        */
+       blk_queue_make_request(lo->lo_queue, loop_make_request);
+       lo->lo_queue->queuedata = lo;
 
        disk = lo->lo_disk = alloc_disk(1 << part_shift);
        if (!disk)
@@ -1756,6 +1757,8 @@ static int loop_add(struct loop_device **l, int i)
 
 out_free_queue:
        blk_cleanup_queue(lo->lo_queue);
+out_free_idr:
+       idr_remove(&loop_index_idr, i);
 out_free_dev:
        kfree(lo);
 out:
@@ -1819,7 +1822,7 @@ static struct kobject *loop_probe(dev_t dev, int *part, void *data)
        if (err < 0)
                err = loop_add(&lo, MINOR(dev) >> part_shift);
        if (err < 0)
-               kobj = ERR_PTR(err);
+               kobj = NULL;
        else
                kobj = get_disk(lo->lo_disk);
        mutex_unlock(&loop_index_mutex);
index 77a60bedd7a3216d1a10c7b8e37ca2d35ff22bf8..7bc363f1ee82241227452594a78a1e7c5c2d3eca 100644 (file)
@@ -936,7 +936,7 @@ static int mg_probe(struct platform_device *plat_dev)
                        goto probe_err_3b;
                }
                err = request_irq(host->irq, mg_irq,
-                               IRQF_DISABLED | IRQF_TRIGGER_RISING,
+                               IRQF_TRIGGER_RISING,
                                MG_DEV_NAME, host);
                if (err) {
                        printk(KERN_ERR "%s:%d fail (request_irq err=%d)\n",
index 952dbfe2212661cb62bd8ef49af11e90f92d391a..050c71267f146340281992e341ab86c93d79c33d 100644 (file)
@@ -126,64 +126,30 @@ struct mtip_compat_ide_task_request_s {
 static bool mtip_check_surprise_removal(struct pci_dev *pdev)
 {
        u16 vendor_id = 0;
+       struct driver_data *dd = pci_get_drvdata(pdev);
+
+       if (dd->sr)
+               return true;
 
        /* Read the vendorID from the configuration space */
        pci_read_config_word(pdev, 0x00, &vendor_id);
-       if (vendor_id == 0xFFFF)
+       if (vendor_id == 0xFFFF) {
+               dd->sr = true;
+               if (dd->queue)
+                       set_bit(QUEUE_FLAG_DEAD, &dd->queue->queue_flags);
+               else
+                       dev_warn(&dd->pdev->dev,
+                               "%s: dd->queue is NULL\n", __func__);
+               if (dd->port) {
+                       set_bit(MTIP_PF_SR_CLEANUP_BIT, &dd->port->flags);
+                       wake_up_interruptible(&dd->port->svc_wait);
+               } else
+                       dev_warn(&dd->pdev->dev,
+                               "%s: dd->port is NULL\n", __func__);
                return true; /* device removed */
-
-       return false; /* device present */
-}
-
-/*
- * This function is called for clean the pending command in the
- * command slot during the surprise removal of device and return
- * error to the upper layer.
- *
- * @dd Pointer to the DRIVER_DATA structure.
- *
- * return value
- *     None
- */
-static void mtip_command_cleanup(struct driver_data *dd)
-{
-       int group = 0, commandslot = 0, commandindex = 0;
-       struct mtip_cmd *command;
-       struct mtip_port *port = dd->port;
-       static int in_progress;
-
-       if (in_progress)
-               return;
-
-       in_progress = 1;
-
-       for (group = 0; group < 4; group++) {
-               for (commandslot = 0; commandslot < 32; commandslot++) {
-                       if (!(port->allocated[group] & (1 << commandslot)))
-                               continue;
-
-                       commandindex = group << 5 | commandslot;
-                       command = &port->commands[commandindex];
-
-                       if (atomic_read(&command->active)
-                           && (command->async_callback)) {
-                               command->async_callback(command->async_data,
-                                       -ENODEV);
-                               command->async_callback = NULL;
-                               command->async_data = NULL;
-                       }
-
-                       dma_unmap_sg(&port->dd->pdev->dev,
-                               command->sg,
-                               command->scatter_ents,
-                               command->direction);
-               }
        }
 
-       up(&port->cmd_slot);
-
-       set_bit(MTIP_DDF_CLEANUP_BIT, &dd->dd_flag);
-       in_progress = 0;
+       return false; /* device present */
 }
 
 /*
@@ -222,10 +188,7 @@ static int get_slot(struct mtip_port *port)
        }
        dev_warn(&port->dd->pdev->dev, "Failed to get a tag.\n");
 
-       if (mtip_check_surprise_removal(port->dd->pdev)) {
-               /* Device not present, clean outstanding commands */
-               mtip_command_cleanup(port->dd);
-       }
+       mtip_check_surprise_removal(port->dd->pdev);
        return -1;
 }
 
@@ -245,6 +208,107 @@ static inline void release_slot(struct mtip_port *port, int tag)
        smp_mb__after_clear_bit();
 }
 
+/*
+ * IO completion function.
+ *
+ * This completion function is called by the driver ISR when a
+ * command that was issued by the kernel completes. It first calls the
+ * asynchronous completion function which normally calls back into the block
+ * layer passing the asynchronous callback data, then unmaps the
+ * scatter list associated with the completed command, and finally
+ * clears the allocated bit associated with the completed command.
+ *
+ * @port   Pointer to the port data structure.
+ * @tag    Tag of the command.
+ * @data   Pointer to driver_data.
+ * @status Completion status.
+ *
+ * return value
+ *     None
+ */
+static void mtip_async_complete(struct mtip_port *port,
+                               int tag,
+                               void *data,
+                               int status)
+{
+       struct mtip_cmd *command;
+       struct driver_data *dd = data;
+       int cb_status = status ? -EIO : 0;
+
+       if (unlikely(!dd) || unlikely(!port))
+               return;
+
+       command = &port->commands[tag];
+
+       if (unlikely(status == PORT_IRQ_TF_ERR)) {
+               dev_warn(&port->dd->pdev->dev,
+                       "Command tag %d failed due to TFE\n", tag);
+       }
+
+       /* Upper layer callback */
+       if (likely(command->async_callback))
+               command->async_callback(command->async_data, cb_status);
+
+       command->async_callback = NULL;
+       command->comp_func = NULL;
+
+       /* Unmap the DMA scatter list entries */
+       dma_unmap_sg(&dd->pdev->dev,
+               command->sg,
+               command->scatter_ents,
+               command->direction);
+
+       /* Clear the allocated and active bits for the command */
+       atomic_set(&port->commands[tag].active, 0);
+       release_slot(port, tag);
+
+       up(&port->cmd_slot);
+}
+
+/*
+ * This function is called for clean the pending command in the
+ * command slot during the surprise removal of device and return
+ * error to the upper layer.
+ *
+ * @dd Pointer to the DRIVER_DATA structure.
+ *
+ * return value
+ *     None
+ */
+static void mtip_command_cleanup(struct driver_data *dd)
+{
+       int tag = 0;
+       struct mtip_cmd *cmd;
+       struct mtip_port *port = dd->port;
+       unsigned int num_cmd_slots = dd->slot_groups * 32;
+
+       if (!test_bit(MTIP_DDF_INIT_DONE_BIT, &dd->dd_flag))
+               return;
+
+       if (!port)
+               return;
+
+       cmd = &port->commands[MTIP_TAG_INTERNAL];
+       if (atomic_read(&cmd->active))
+               if (readl(port->cmd_issue[MTIP_TAG_INTERNAL]) &
+                                       (1 << MTIP_TAG_INTERNAL))
+                       if (cmd->comp_func)
+                               cmd->comp_func(port, MTIP_TAG_INTERNAL,
+                                        cmd->comp_data, -ENODEV);
+
+       while (1) {
+               tag = find_next_bit(port->allocated, num_cmd_slots, tag);
+               if (tag >= num_cmd_slots)
+                       break;
+
+               cmd = &port->commands[tag];
+               if (atomic_read(&cmd->active))
+                       mtip_async_complete(port, tag, dd, -ENODEV);
+       }
+
+       set_bit(MTIP_DDF_CLEANUP_BIT, &dd->dd_flag);
+}
+
 /*
  * Reset the HBA (without sleeping)
  *
@@ -584,6 +648,9 @@ static void mtip_timeout_function(unsigned long int data)
        if (unlikely(!port))
                return;
 
+       if (unlikely(port->dd->sr))
+               return;
+
        if (test_bit(MTIP_DDF_RESUME_BIT, &port->dd->dd_flag)) {
                mod_timer(&port->cmd_timer,
                        jiffies + msecs_to_jiffies(30000));
@@ -674,66 +741,6 @@ static void mtip_timeout_function(unsigned long int data)
                jiffies + msecs_to_jiffies(MTIP_TIMEOUT_CHECK_PERIOD));
 }
 
-/*
- * IO completion function.
- *
- * This completion function is called by the driver ISR when a
- * command that was issued by the kernel completes. It first calls the
- * asynchronous completion function which normally calls back into the block
- * layer passing the asynchronous callback data, then unmaps the
- * scatter list associated with the completed command, and finally
- * clears the allocated bit associated with the completed command.
- *
- * @port   Pointer to the port data structure.
- * @tag    Tag of the command.
- * @data   Pointer to driver_data.
- * @status Completion status.
- *
- * return value
- *     None
- */
-static void mtip_async_complete(struct mtip_port *port,
-                               int tag,
-                               void *data,
-                               int status)
-{
-       struct mtip_cmd *command;
-       struct driver_data *dd = data;
-       int cb_status = status ? -EIO : 0;
-
-       if (unlikely(!dd) || unlikely(!port))
-               return;
-
-       command = &port->commands[tag];
-
-       if (unlikely(status == PORT_IRQ_TF_ERR)) {
-               dev_warn(&port->dd->pdev->dev,
-                       "Command tag %d failed due to TFE\n", tag);
-       }
-
-       /* Upper layer callback */
-       if (likely(command->async_callback))
-               command->async_callback(command->async_data, cb_status);
-
-       command->async_callback = NULL;
-       command->comp_func = NULL;
-
-       /* Unmap the DMA scatter list entries */
-       dma_unmap_sg(&dd->pdev->dev,
-               command->sg,
-               command->scatter_ents,
-               command->direction);
-
-       /* Clear the allocated and active bits for the command */
-       atomic_set(&port->commands[tag].active, 0);
-       release_slot(port, tag);
-
-       if (unlikely(command->unaligned))
-               up(&port->cmd_slot_unal);
-       else
-               up(&port->cmd_slot);
-}
-
 /*
  * Internal command completion callback function.
  *
@@ -854,7 +861,6 @@ static void mtip_handle_tfe(struct driver_data *dd)
                                        "Missing completion func for tag %d",
                                        tag);
                                if (mtip_check_surprise_removal(dd->pdev)) {
-                                       mtip_command_cleanup(dd);
                                        /* don't proceed further */
                                        return;
                                }
@@ -1018,14 +1024,12 @@ static inline void mtip_workq_sdbfx(struct mtip_port *port, int group,
                                        command->comp_data,
                                        0);
                        } else {
-                               dev_warn(&dd->pdev->dev,
-                                       "Null completion "
-                                       "for tag %d",
+                               dev_dbg(&dd->pdev->dev,
+                                       "Null completion for tag %d",
                                        tag);
 
                                if (mtip_check_surprise_removal(
                                        dd->pdev)) {
-                                       mtip_command_cleanup(dd);
                                        return;
                                }
                        }
@@ -1145,7 +1149,6 @@ static inline irqreturn_t mtip_handle_irq(struct driver_data *data)
 
                if (unlikely(port_stat & PORT_IRQ_ERR)) {
                        if (unlikely(mtip_check_surprise_removal(dd->pdev))) {
-                               mtip_command_cleanup(dd);
                                /* don't proceed further */
                                return IRQ_HANDLED;
                        }
@@ -2806,34 +2809,51 @@ static ssize_t show_device_status(struct device_driver *drv, char *buf)
 static ssize_t mtip_hw_read_device_status(struct file *f, char __user *ubuf,
                                                size_t len, loff_t *offset)
 {
+       struct driver_data *dd =  (struct driver_data *)f->private_data;
        int size = *offset;
-       char buf[MTIP_DFS_MAX_BUF_SIZE];
+       char *buf;
+       int rv = 0;
 
        if (!len || *offset)
                return 0;
 
+       buf = kzalloc(MTIP_DFS_MAX_BUF_SIZE, GFP_KERNEL);
+       if (!buf) {
+               dev_err(&dd->pdev->dev,
+                       "Memory allocation: status buffer\n");
+               return -ENOMEM;
+       }
+
        size += show_device_status(NULL, buf);
 
        *offset = size <= len ? size : len;
        size = copy_to_user(ubuf, buf, *offset);
        if (size)
-               return -EFAULT;
+               rv = -EFAULT;
 
-       return *offset;
+       kfree(buf);
+       return rv ? rv : *offset;
 }
 
 static ssize_t mtip_hw_read_registers(struct file *f, char __user *ubuf,
                                  size_t len, loff_t *offset)
 {
        struct driver_data *dd =  (struct driver_data *)f->private_data;
-       char buf[MTIP_DFS_MAX_BUF_SIZE];
+       char *buf;
        u32 group_allocated;
        int size = *offset;
-       int n;
+       int n, rv = 0;
 
        if (!len || size)
                return 0;
 
+       buf = kzalloc(MTIP_DFS_MAX_BUF_SIZE, GFP_KERNEL);
+       if (!buf) {
+               dev_err(&dd->pdev->dev,
+                       "Memory allocation: register buffer\n");
+               return -ENOMEM;
+       }
+
        size += sprintf(&buf[size], "H/ S ACTive      : [ 0x");
 
        for (n = dd->slot_groups-1; n >= 0; n--)
@@ -2888,21 +2908,30 @@ static ssize_t mtip_hw_read_registers(struct file *f, char __user *ubuf,
        *offset = size <= len ? size : len;
        size = copy_to_user(ubuf, buf, *offset);
        if (size)
-               return -EFAULT;
+               rv = -EFAULT;
 
-       return *offset;
+       kfree(buf);
+       return rv ? rv : *offset;
 }
 
 static ssize_t mtip_hw_read_flags(struct file *f, char __user *ubuf,
                                  size_t len, loff_t *offset)
 {
        struct driver_data *dd =  (struct driver_data *)f->private_data;
-       char buf[MTIP_DFS_MAX_BUF_SIZE];
+       char *buf;
        int size = *offset;
+       int rv = 0;
 
        if (!len || size)
                return 0;
 
+       buf = kzalloc(MTIP_DFS_MAX_BUF_SIZE, GFP_KERNEL);
+       if (!buf) {
+               dev_err(&dd->pdev->dev,
+                       "Memory allocation: flag buffer\n");
+               return -ENOMEM;
+       }
+
        size += sprintf(&buf[size], "Flag-port : [ %08lX ]\n",
                                                        dd->port->flags);
        size += sprintf(&buf[size], "Flag-dd   : [ %08lX ]\n",
@@ -2911,9 +2940,10 @@ static ssize_t mtip_hw_read_flags(struct file *f, char __user *ubuf,
        *offset = size <= len ? size : len;
        size = copy_to_user(ubuf, buf, *offset);
        if (size)
-               return -EFAULT;
+               rv = -EFAULT;
 
-       return *offset;
+       kfree(buf);
+       return rv ? rv : *offset;
 }
 
 static const struct file_operations mtip_device_status_fops = {
@@ -3006,6 +3036,46 @@ static void mtip_hw_debugfs_exit(struct driver_data *dd)
                debugfs_remove_recursive(dd->dfs_node);
 }
 
+static int mtip_free_orphan(struct driver_data *dd)
+{
+       struct kobject *kobj;
+
+       if (dd->bdev) {
+               if (dd->bdev->bd_holders >= 1)
+                       return -2;
+
+               bdput(dd->bdev);
+               dd->bdev = NULL;
+       }
+
+       mtip_hw_debugfs_exit(dd);
+
+       spin_lock(&rssd_index_lock);
+       ida_remove(&rssd_index_ida, dd->index);
+       spin_unlock(&rssd_index_lock);
+
+       if (!test_bit(MTIP_DDF_INIT_DONE_BIT, &dd->dd_flag) &&
+                       test_bit(MTIP_DDF_REBUILD_FAILED_BIT, &dd->dd_flag)) {
+               put_disk(dd->disk);
+       } else {
+               if (dd->disk) {
+                       kobj = kobject_get(&disk_to_dev(dd->disk)->kobj);
+                       if (kobj) {
+                               mtip_hw_sysfs_exit(dd, kobj);
+                               kobject_put(kobj);
+                       }
+                       del_gendisk(dd->disk);
+                       dd->disk = NULL;
+               }
+               if (dd->queue) {
+                       dd->queue->queuedata = NULL;
+                       blk_cleanup_queue(dd->queue);
+                       dd->queue = NULL;
+               }
+       }
+       kfree(dd);
+       return 0;
+}
 
 /*
  * Perform any init/resume time hardware setup
@@ -3154,6 +3224,7 @@ static int mtip_service_thread(void *data)
        unsigned long slot, slot_start, slot_wrap;
        unsigned int num_cmd_slots = dd->slot_groups * 32;
        struct mtip_port *port = dd->port;
+       int ret;
 
        while (1) {
                /*
@@ -3164,13 +3235,18 @@ static int mtip_service_thread(void *data)
                        !(port->flags & MTIP_PF_PAUSE_IO));
 
                if (kthread_should_stop())
+                       goto st_out;
+
+               set_bit(MTIP_PF_SVC_THD_ACTIVE_BIT, &port->flags);
+
+               /* If I am an orphan, start self cleanup */
+               if (test_bit(MTIP_PF_SR_CLEANUP_BIT, &port->flags))
                        break;
 
                if (unlikely(test_bit(MTIP_DDF_REMOVE_PENDING_BIT,
                                &dd->dd_flag)))
-                       break;
+                       goto st_out;
 
-               set_bit(MTIP_PF_SVC_THD_ACTIVE_BIT, &port->flags);
                if (test_bit(MTIP_PF_ISSUE_CMDS_BIT, &port->flags)) {
                        slot = 1;
                        /* used to restrict the loop to one iteration */
@@ -3201,7 +3277,7 @@ static int mtip_service_thread(void *data)
 
                        clear_bit(MTIP_PF_ISSUE_CMDS_BIT, &port->flags);
                } else if (test_bit(MTIP_PF_REBUILD_BIT, &port->flags)) {
-                       if (!mtip_ftl_rebuild_poll(dd))
+                       if (mtip_ftl_rebuild_poll(dd) < 0)
                                set_bit(MTIP_DDF_REBUILD_FAILED_BIT,
                                                        &dd->dd_flag);
                        clear_bit(MTIP_PF_REBUILD_BIT, &port->flags);
@@ -3209,8 +3285,30 @@ static int mtip_service_thread(void *data)
                clear_bit(MTIP_PF_SVC_THD_ACTIVE_BIT, &port->flags);
 
                if (test_bit(MTIP_PF_SVC_THD_STOP_BIT, &port->flags))
+                       goto st_out;
+       }
+
+       /* wait for pci remove to exit */
+       while (1) {
+               if (test_bit(MTIP_DDF_REMOVE_DONE_BIT, &dd->dd_flag))
                        break;
+               msleep_interruptible(1000);
+               if (kthread_should_stop())
+                       goto st_out;
+       }
+
+       while (1) {
+               ret = mtip_free_orphan(dd);
+               if (!ret) {
+                       /* NOTE: All data structures are invalid, do not
+                        * access any here */
+                       return 0;
+               }
+               msleep_interruptible(1000);
+               if (kthread_should_stop())
+                       goto st_out;
        }
+st_out:
        return 0;
 }
 
@@ -3437,13 +3535,13 @@ static int mtip_hw_init(struct driver_data *dd)
                rv = -EFAULT;
                goto out3;
        }
+       mtip_dump_identify(dd->port);
 
        if (*(dd->port->identify + MTIP_FTL_REBUILD_OFFSET) ==
                MTIP_FTL_REBUILD_MAGIC) {
                set_bit(MTIP_PF_REBUILD_BIT, &dd->port->flags);
                return MTIP_FTL_REBUILD_MAGIC;
        }
-       mtip_dump_identify(dd->port);
 
        /* check write protect, over temp and rebuild statuses */
        rv = mtip_read_log_page(dd->port, ATA_LOG_SATA_NCQ,
@@ -3467,8 +3565,8 @@ static int mtip_hw_init(struct driver_data *dd)
                }
                if (buf[288] == 0xBF) {
                        dev_info(&dd->pdev->dev,
-                               "Drive indicates rebuild has failed.\n");
-                       /* TODO */
+                               "Drive is in security locked state.\n");
+                       set_bit(MTIP_DDF_SEC_LOCK_BIT, &dd->dd_flag);
                }
        }
 
@@ -3523,9 +3621,8 @@ static int mtip_hw_exit(struct driver_data *dd)
         * Send standby immediate (E0h) to the drive so that it
         * saves its state.
         */
-       if (!test_bit(MTIP_DDF_CLEANUP_BIT, &dd->dd_flag)) {
-
-               if (!test_bit(MTIP_PF_REBUILD_BIT, &dd->port->flags))
+       if (!dd->sr) {
+               if (!test_bit(MTIP_DDF_REBUILD_FAILED_BIT, &dd->dd_flag))
                        if (mtip_standby_immediate(dd->port))
                                dev_warn(&dd->pdev->dev,
                                        "STANDBY IMMEDIATE failed\n");
@@ -3551,6 +3648,7 @@ static int mtip_hw_exit(struct driver_data *dd)
                        dd->port->command_list_dma);
        /* Free the memory allocated for the for structure. */
        kfree(dd->port);
+       dd->port = NULL;
 
        return 0;
 }
@@ -3572,7 +3670,8 @@ static int mtip_hw_shutdown(struct driver_data *dd)
         * Send standby immediate (E0h) to the drive so that it
         * saves its state.
         */
-       mtip_standby_immediate(dd->port);
+       if (!dd->sr && dd->port)
+               mtip_standby_immediate(dd->port);
 
        return 0;
 }
@@ -3887,6 +3986,10 @@ static void mtip_make_request(struct request_queue *queue, struct bio *bio)
                        bio_endio(bio, -ENODATA);
                        return;
                }
+               if (test_bit(MTIP_DDF_REBUILD_FAILED_BIT, &dd->dd_flag)) {
+                       bio_endio(bio, -ENXIO);
+                       return;
+               }
        }
 
        if (unlikely(bio->bi_rw & REQ_DISCARD)) {
@@ -4010,6 +4113,8 @@ static int mtip_block_initialize(struct driver_data *dd)
        dd->disk->private_data  = dd;
        dd->index               = index;
 
+       mtip_hw_debugfs_init(dd);
+
        /*
         * if rebuild pending, start the service thread, and delay the block
         * queue creation and add_disk()
@@ -4068,6 +4173,7 @@ skip_create_disk:
        /* Enable the block device and add it to /dev */
        add_disk(dd->disk);
 
+       dd->bdev = bdget_disk(dd->disk, 0);
        /*
         * Now that the disk is active, initialize any sysfs attributes
         * managed by the protocol layer.
@@ -4077,7 +4183,6 @@ skip_create_disk:
                mtip_hw_sysfs_init(dd, kobj);
                kobject_put(kobj);
        }
-       mtip_hw_debugfs_init(dd);
 
        if (dd->mtip_svc_handler) {
                set_bit(MTIP_DDF_INIT_DONE_BIT, &dd->dd_flag);
@@ -4103,7 +4208,8 @@ start_service_thread:
        return rv;
 
 kthread_run_error:
-       mtip_hw_debugfs_exit(dd);
+       bdput(dd->bdev);
+       dd->bdev = NULL;
 
        /* Delete our gendisk. This also removes the device from /dev */
        del_gendisk(dd->disk);
@@ -4112,6 +4218,7 @@ read_capacity_error:
        blk_cleanup_queue(dd->queue);
 
 block_queue_alloc_init_error:
+       mtip_hw_debugfs_exit(dd);
 disk_index_error:
        spin_lock(&rssd_index_lock);
        ida_remove(&rssd_index_ida, index);
@@ -4141,40 +4248,48 @@ static int mtip_block_remove(struct driver_data *dd)
 {
        struct kobject *kobj;
 
-       if (dd->mtip_svc_handler) {
-               set_bit(MTIP_PF_SVC_THD_STOP_BIT, &dd->port->flags);
-               wake_up_interruptible(&dd->port->svc_wait);
-               kthread_stop(dd->mtip_svc_handler);
-       }
+       if (!dd->sr) {
+               mtip_hw_debugfs_exit(dd);
 
-       /* Clean up the sysfs attributes, if created */
-       if (test_bit(MTIP_DDF_INIT_DONE_BIT, &dd->dd_flag)) {
-               kobj = kobject_get(&disk_to_dev(dd->disk)->kobj);
-               if (kobj) {
-                       mtip_hw_sysfs_exit(dd, kobj);
-                       kobject_put(kobj);
+               if (dd->mtip_svc_handler) {
+                       set_bit(MTIP_PF_SVC_THD_STOP_BIT, &dd->port->flags);
+                       wake_up_interruptible(&dd->port->svc_wait);
+                       kthread_stop(dd->mtip_svc_handler);
                }
-       }
-       mtip_hw_debugfs_exit(dd);
 
-       /*
-        * Delete our gendisk structure. This also removes the device
-        * from /dev
-        */
-       if (dd->disk) {
-               if (dd->disk->queue)
-                       del_gendisk(dd->disk);
-               else
-                       put_disk(dd->disk);
-       }
-
-       spin_lock(&rssd_index_lock);
-       ida_remove(&rssd_index_ida, dd->index);
-       spin_unlock(&rssd_index_lock);
+               /* Clean up the sysfs attributes, if created */
+               if (test_bit(MTIP_DDF_INIT_DONE_BIT, &dd->dd_flag)) {
+                       kobj = kobject_get(&disk_to_dev(dd->disk)->kobj);
+                       if (kobj) {
+                               mtip_hw_sysfs_exit(dd, kobj);
+                               kobject_put(kobj);
+                       }
+               }
+               /*
+                * Delete our gendisk structure. This also removes the device
+                * from /dev
+                */
+               if (dd->bdev) {
+                       bdput(dd->bdev);
+                       dd->bdev = NULL;
+               }
+               if (dd->disk) {
+                       if (dd->disk->queue) {
+                               del_gendisk(dd->disk);
+                               blk_cleanup_queue(dd->queue);
+                               dd->queue = NULL;
+                       } else
+                               put_disk(dd->disk);
+               }
+               dd->disk  = NULL;
 
-       blk_cleanup_queue(dd->queue);
-       dd->disk  = NULL;
-       dd->queue = NULL;
+               spin_lock(&rssd_index_lock);
+               ida_remove(&rssd_index_ida, dd->index);
+               spin_unlock(&rssd_index_lock);
+       } else {
+               dev_info(&dd->pdev->dev, "device %s surprise removal\n",
+                                               dd->disk->disk_name);
+       }
 
        /* De-initialize the protocol layer. */
        mtip_hw_exit(dd);
@@ -4490,8 +4605,7 @@ done:
 static void mtip_pci_remove(struct pci_dev *pdev)
 {
        struct driver_data *dd = pci_get_drvdata(pdev);
-       int counter = 0;
-       unsigned long flags;
+       unsigned long flags, to;
 
        set_bit(MTIP_DDF_REMOVE_PENDING_BIT, &dd->dd_flag);
 
@@ -4500,17 +4614,22 @@ static void mtip_pci_remove(struct pci_dev *pdev)
        list_add(&dd->remove_list, &removing_list);
        spin_unlock_irqrestore(&dev_lock, flags);
 
-       if (mtip_check_surprise_removal(pdev)) {
-               while (!test_bit(MTIP_DDF_CLEANUP_BIT, &dd->dd_flag)) {
-                       counter++;
-                       msleep(20);
-                       if (counter == 10) {
-                               /* Cleanup the outstanding commands */
-                               mtip_command_cleanup(dd);
-                               break;
-                       }
-               }
+       mtip_check_surprise_removal(pdev);
+       synchronize_irq(dd->pdev->irq);
+
+       /* Spin until workers are done */
+       to = jiffies + msecs_to_jiffies(4000);
+       do {
+               msleep(20);
+       } while (atomic_read(&dd->irq_workers_active) != 0 &&
+               time_before(jiffies, to));
+
+       if (atomic_read(&dd->irq_workers_active) != 0) {
+               dev_warn(&dd->pdev->dev,
+                       "Completion workers still active!\n");
        }
+       /* Cleanup the outstanding commands */
+       mtip_command_cleanup(dd);
 
        /* Clean up the block layer. */
        mtip_block_remove(dd);
@@ -4529,8 +4648,15 @@ static void mtip_pci_remove(struct pci_dev *pdev)
        list_del_init(&dd->remove_list);
        spin_unlock_irqrestore(&dev_lock, flags);
 
-       kfree(dd);
+       if (!dd->sr)
+               kfree(dd);
+       else
+               set_bit(MTIP_DDF_REMOVE_DONE_BIT, &dd->dd_flag);
+
        pcim_iounmap_regions(pdev, 1 << MTIP_ABAR);
+       pci_set_drvdata(pdev, NULL);
+       pci_dev_put(pdev);
+
 }
 
 /*
index 3bb8a295fbe4d96d51b429812748ebe293ebb98d..9be7a1582ad3471a5400237b7db57b6a976cb2d9 100644 (file)
@@ -140,6 +140,7 @@ enum {
        MTIP_PF_SVC_THD_ACTIVE_BIT  = 4,
        MTIP_PF_ISSUE_CMDS_BIT      = 5,
        MTIP_PF_REBUILD_BIT         = 6,
+       MTIP_PF_SR_CLEANUP_BIT      = 7,
        MTIP_PF_SVC_THD_STOP_BIT    = 8,
 
        /* below are bit numbers in 'dd_flag' defined in driver_data */
@@ -147,15 +148,18 @@ enum {
        MTIP_DDF_REMOVE_PENDING_BIT = 1,
        MTIP_DDF_OVER_TEMP_BIT      = 2,
        MTIP_DDF_WRITE_PROTECT_BIT  = 3,
-       MTIP_DDF_STOP_IO      = ((1 << MTIP_DDF_REMOVE_PENDING_BIT) |
-                               (1 << MTIP_DDF_SEC_LOCK_BIT) |
-                               (1 << MTIP_DDF_OVER_TEMP_BIT) |
-                               (1 << MTIP_DDF_WRITE_PROTECT_BIT)),
-
+       MTIP_DDF_REMOVE_DONE_BIT    = 4,
        MTIP_DDF_CLEANUP_BIT        = 5,
        MTIP_DDF_RESUME_BIT         = 6,
        MTIP_DDF_INIT_DONE_BIT      = 7,
        MTIP_DDF_REBUILD_FAILED_BIT = 8,
+
+       MTIP_DDF_STOP_IO      = ((1 << MTIP_DDF_REMOVE_PENDING_BIT) |
+                               (1 << MTIP_DDF_SEC_LOCK_BIT) |
+                               (1 << MTIP_DDF_OVER_TEMP_BIT) |
+                               (1 << MTIP_DDF_WRITE_PROTECT_BIT) |
+                               (1 << MTIP_DDF_REBUILD_FAILED_BIT)),
+
 };
 
 struct smart_attr {
@@ -499,6 +503,8 @@ struct driver_data {
 
        bool trim_supp; /* flag indicating trim support */
 
+       bool sr;
+
        int numa_node; /* NUMA support */
 
        char workq_name[32];
@@ -511,6 +517,8 @@ struct driver_data {
 
        int isr_binding;
 
+       struct block_device *bdev;
+
        int unal_qdepth; /* qdepth of unaligned IO queue */
 
        struct list_head online_list; /* linkage for online list */
index 6e85e21445eb13896d19f16a58a0107b4f9baa4e..a8de2eec6ff3011313c44717353f69a64f0f4f00 100644 (file)
@@ -654,7 +654,8 @@ static void rsxx_eeh_failure(struct pci_dev *dev)
        for (i = 0; i < card->n_targets; i++) {
                spin_lock_bh(&card->ctrl[i].queue_lock);
                cnt = rsxx_cleanup_dma_queue(&card->ctrl[i],
-                                            &card->ctrl[i].queue);
+                                            &card->ctrl[i].queue,
+                                            COMPLETE_DMA);
                spin_unlock_bh(&card->ctrl[i].queue_lock);
 
                cnt += rsxx_dma_cancel(&card->ctrl[i]);
@@ -748,10 +749,6 @@ static pci_ers_result_t rsxx_slot_reset(struct pci_dev *dev)
 
        card->eeh_state = 0;
 
-       st = rsxx_eeh_remap_dmas(card);
-       if (st)
-               goto failed_remap_dmas;
-
        spin_lock_irqsave(&card->irq_lock, flags);
        if (card->n_targets & RSXX_MAX_TARGETS)
                rsxx_enable_ier_and_isr(card, CR_INTR_ALL_G);
@@ -778,7 +775,6 @@ static pci_ers_result_t rsxx_slot_reset(struct pci_dev *dev)
        return PCI_ERS_RESULT_RECOVERED;
 
 failed_hw_buffers_init:
-failed_remap_dmas:
        for (i = 0; i < card->n_targets; i++) {
                if (card->ctrl[i].status.buf)
                        pci_free_consistent(card->dev,
index d7af441880befc1c6aeb7cdd4dbfc128a8014bb8..2284f5d3a54ad00dd05c512b30b7bfed30411482 100644 (file)
@@ -295,13 +295,15 @@ int rsxx_setup_dev(struct rsxx_cardinfo *card)
                return -ENOMEM;
        }
 
-       blk_size = card->config.data.block_size;
+       if (card->config_valid) {
+               blk_size = card->config.data.block_size;
+               blk_queue_dma_alignment(card->queue, blk_size - 1);
+               blk_queue_logical_block_size(card->queue, blk_size);
+       }
 
        blk_queue_make_request(card->queue, rsxx_make_request);
        blk_queue_bounce_limit(card->queue, BLK_BOUNCE_ANY);
-       blk_queue_dma_alignment(card->queue, blk_size - 1);
        blk_queue_max_hw_sectors(card->queue, blkdev_max_hw_sectors);
-       blk_queue_logical_block_size(card->queue, blk_size);
        blk_queue_physical_block_size(card->queue, RSXX_HW_BLK_SIZE);
 
        queue_flag_set_unlocked(QUEUE_FLAG_NONROT, card->queue);
index bed32f16b084bdd46f7b881b32f95775effaa499..fc88ba3e1bd27835ecf170d5ba321cf8313a6cea 100644 (file)
@@ -221,6 +221,21 @@ static void dma_intr_coal_auto_tune(struct rsxx_cardinfo *card)
 }
 
 /*----------------- RSXX DMA Handling -------------------*/
+static void rsxx_free_dma(struct rsxx_dma_ctrl *ctrl, struct rsxx_dma *dma)
+{
+       if (dma->cmd != HW_CMD_BLK_DISCARD) {
+               if (!pci_dma_mapping_error(ctrl->card->dev, dma->dma_addr)) {
+                       pci_unmap_page(ctrl->card->dev, dma->dma_addr,
+                                      get_dma_size(dma),
+                                      dma->cmd == HW_CMD_BLK_WRITE ?
+                                                  PCI_DMA_TODEVICE :
+                                                  PCI_DMA_FROMDEVICE);
+               }
+       }
+
+       kmem_cache_free(rsxx_dma_pool, dma);
+}
+
 static void rsxx_complete_dma(struct rsxx_dma_ctrl *ctrl,
                                  struct rsxx_dma *dma,
                                  unsigned int status)
@@ -232,21 +247,14 @@ static void rsxx_complete_dma(struct rsxx_dma_ctrl *ctrl,
        if (status & DMA_CANCELLED)
                ctrl->stats.dma_cancelled++;
 
-       if (dma->dma_addr)
-               pci_unmap_page(ctrl->card->dev, dma->dma_addr,
-                              get_dma_size(dma),
-                              dma->cmd == HW_CMD_BLK_WRITE ?
-                                          PCI_DMA_TODEVICE :
-                                          PCI_DMA_FROMDEVICE);
-
        if (dma->cb)
                dma->cb(ctrl->card, dma->cb_data, status ? 1 : 0);
 
-       kmem_cache_free(rsxx_dma_pool, dma);
+       rsxx_free_dma(ctrl, dma);
 }
 
 int rsxx_cleanup_dma_queue(struct rsxx_dma_ctrl *ctrl,
-                          struct list_head *q)
+                          struct list_head *q, unsigned int done)
 {
        struct rsxx_dma *dma;
        struct rsxx_dma *tmp;
@@ -254,7 +262,10 @@ int rsxx_cleanup_dma_queue(struct rsxx_dma_ctrl *ctrl,
 
        list_for_each_entry_safe(dma, tmp, q, list) {
                list_del(&dma->list);
-               rsxx_complete_dma(ctrl, dma, DMA_CANCELLED);
+               if (done & COMPLETE_DMA)
+                       rsxx_complete_dma(ctrl, dma, DMA_CANCELLED);
+               else
+                       rsxx_free_dma(ctrl, dma);
                cnt++;
        }
 
@@ -370,7 +381,7 @@ static void dma_engine_stalled(unsigned long data)
 
                /* Clean up the DMA queue */
                spin_lock(&ctrl->queue_lock);
-               cnt = rsxx_cleanup_dma_queue(ctrl, &ctrl->queue);
+               cnt = rsxx_cleanup_dma_queue(ctrl, &ctrl->queue, COMPLETE_DMA);
                spin_unlock(&ctrl->queue_lock);
 
                cnt += rsxx_dma_cancel(ctrl);
@@ -388,6 +399,7 @@ static void rsxx_issue_dmas(struct rsxx_dma_ctrl *ctrl)
        int tag;
        int cmds_pending = 0;
        struct hw_cmd *hw_cmd_buf;
+       int dir;
 
        hw_cmd_buf = ctrl->cmd.buf;
 
@@ -424,6 +436,31 @@ static void rsxx_issue_dmas(struct rsxx_dma_ctrl *ctrl)
                        continue;
                }
 
+               if (dma->cmd != HW_CMD_BLK_DISCARD) {
+                       if (dma->cmd == HW_CMD_BLK_WRITE)
+                               dir = PCI_DMA_TODEVICE;
+                       else
+                               dir = PCI_DMA_FROMDEVICE;
+
+                       /*
+                        * The function pci_map_page is placed here because we
+                        * can only, by design, issue up to 255 commands to the
+                        * hardware at one time per DMA channel. So the maximum
+                        * amount of mapped memory would be 255 * 4 channels *
+                        * 4096 Bytes which is less than 2GB, the limit of a x8
+                        * Non-HWWD PCIe slot. This way the pci_map_page
+                        * function should never fail because of a lack of
+                        * mappable memory.
+                        */
+                       dma->dma_addr = pci_map_page(ctrl->card->dev, dma->page,
+                                       dma->pg_off, dma->sub_page.cnt << 9, dir);
+                       if (pci_dma_mapping_error(ctrl->card->dev, dma->dma_addr)) {
+                               push_tracker(ctrl->trackers, tag);
+                               rsxx_complete_dma(ctrl, dma, DMA_CANCELLED);
+                               continue;
+                       }
+               }
+
                set_tracker_dma(ctrl->trackers, tag, dma);
                hw_cmd_buf[ctrl->cmd.idx].command  = dma->cmd;
                hw_cmd_buf[ctrl->cmd.idx].tag      = tag;
@@ -620,14 +657,6 @@ static int rsxx_queue_dma(struct rsxx_cardinfo *card,
        if (!dma)
                return -ENOMEM;
 
-       dma->dma_addr = pci_map_page(card->dev, page, pg_off, dma_len,
-                                    dir ? PCI_DMA_TODEVICE :
-                                    PCI_DMA_FROMDEVICE);
-       if (!dma->dma_addr) {
-               kmem_cache_free(rsxx_dma_pool, dma);
-               return -ENOMEM;
-       }
-
        dma->cmd          = dir ? HW_CMD_BLK_WRITE : HW_CMD_BLK_READ;
        dma->laddr        = laddr;
        dma->sub_page.off = (dma_off >> 9);
@@ -736,11 +765,9 @@ int rsxx_dma_queue_bio(struct rsxx_cardinfo *card,
        return 0;
 
 bvec_err:
-       for (i = 0; i < card->n_targets; i++) {
-               spin_lock_bh(&card->ctrl[i].queue_lock);
-               rsxx_cleanup_dma_queue(&card->ctrl[i], &dma_list[i]);
-               spin_unlock_bh(&card->ctrl[i].queue_lock);
-       }
+       for (i = 0; i < card->n_targets; i++)
+               rsxx_cleanup_dma_queue(&card->ctrl[i], &dma_list[i],
+                                       FREE_DMA);
 
        return st;
 }
@@ -990,7 +1017,7 @@ void rsxx_dma_destroy(struct rsxx_cardinfo *card)
 
                /* Clean up the DMA queue */
                spin_lock_bh(&ctrl->queue_lock);
-               rsxx_cleanup_dma_queue(ctrl, &ctrl->queue);
+               rsxx_cleanup_dma_queue(ctrl, &ctrl->queue, COMPLETE_DMA);
                spin_unlock_bh(&ctrl->queue_lock);
 
                rsxx_dma_cancel(ctrl);
@@ -1032,6 +1059,14 @@ int rsxx_eeh_save_issued_dmas(struct rsxx_cardinfo *card)
                        else
                                card->ctrl[i].stats.reads_issued--;
 
+                       if (dma->cmd != HW_CMD_BLK_DISCARD) {
+                               pci_unmap_page(card->dev, dma->dma_addr,
+                                              get_dma_size(dma),
+                                              dma->cmd == HW_CMD_BLK_WRITE ?
+                                              PCI_DMA_TODEVICE :
+                                              PCI_DMA_FROMDEVICE);
+                       }
+
                        list_add_tail(&dma->list, &issued_dmas[i]);
                        push_tracker(card->ctrl[i].trackers, j);
                        cnt++;
@@ -1043,15 +1078,6 @@ int rsxx_eeh_save_issued_dmas(struct rsxx_cardinfo *card)
                atomic_sub(cnt, &card->ctrl[i].stats.hw_q_depth);
                card->ctrl[i].stats.sw_q_depth += cnt;
                card->ctrl[i].e_cnt = 0;
-
-               list_for_each_entry(dma, &card->ctrl[i].queue, list) {
-                       if (dma->dma_addr)
-                               pci_unmap_page(card->dev, dma->dma_addr,
-                                              get_dma_size(dma),
-                                              dma->cmd == HW_CMD_BLK_WRITE ?
-                                              PCI_DMA_TODEVICE :
-                                              PCI_DMA_FROMDEVICE);
-               }
                spin_unlock_bh(&card->ctrl[i].queue_lock);
        }
 
@@ -1060,31 +1086,6 @@ int rsxx_eeh_save_issued_dmas(struct rsxx_cardinfo *card)
        return 0;
 }
 
-int rsxx_eeh_remap_dmas(struct rsxx_cardinfo *card)
-{
-       struct rsxx_dma *dma;
-       int i;
-
-       for (i = 0; i < card->n_targets; i++) {
-               spin_lock_bh(&card->ctrl[i].queue_lock);
-               list_for_each_entry(dma, &card->ctrl[i].queue, list) {
-                       dma->dma_addr = pci_map_page(card->dev, dma->page,
-                                       dma->pg_off, get_dma_size(dma),
-                                       dma->cmd == HW_CMD_BLK_WRITE ?
-                                       PCI_DMA_TODEVICE :
-                                       PCI_DMA_FROMDEVICE);
-                       if (!dma->dma_addr) {
-                               spin_unlock_bh(&card->ctrl[i].queue_lock);
-                               kmem_cache_free(rsxx_dma_pool, dma);
-                               return -ENOMEM;
-                       }
-               }
-               spin_unlock_bh(&card->ctrl[i].queue_lock);
-       }
-
-       return 0;
-}
-
 int rsxx_dma_init(void)
 {
        rsxx_dma_pool = KMEM_CACHE(rsxx_dma, SLAB_HWCACHE_ALIGN);
index 5ad5055a4104d9341fc1f55054d1c872c58467d1..6bbc64d0f69042033614e05f15f5d2dd2d878768 100644 (file)
@@ -52,7 +52,7 @@ struct proc_cmd;
 #define RS70_PCI_REV_SUPPORTED 4
 
 #define DRIVER_NAME "rsxx"
-#define DRIVER_VERSION "4.0"
+#define DRIVER_VERSION "4.0.3.2516"
 
 /* Block size is 4096 */
 #define RSXX_HW_BLK_SHIFT              12
@@ -345,6 +345,11 @@ enum rsxx_creg_stat {
        CREG_STAT_TAG_MASK      = 0x0000ff00,
 };
 
+enum rsxx_dma_finish {
+       FREE_DMA        = 0x0,
+       COMPLETE_DMA    = 0x1,
+};
+
 static inline unsigned int CREG_DATA(int N)
 {
        return CREG_DATA0 + (N << 2);
@@ -379,7 +384,9 @@ typedef void (*rsxx_dma_cb)(struct rsxx_cardinfo *card,
 int rsxx_dma_setup(struct rsxx_cardinfo *card);
 void rsxx_dma_destroy(struct rsxx_cardinfo *card);
 int rsxx_dma_init(void);
-int rsxx_cleanup_dma_queue(struct rsxx_dma_ctrl *ctrl, struct list_head *q);
+int rsxx_cleanup_dma_queue(struct rsxx_dma_ctrl *ctrl,
+                               struct list_head *q,
+                               unsigned int done);
 int rsxx_dma_cancel(struct rsxx_dma_ctrl *ctrl);
 void rsxx_dma_cleanup(void);
 void rsxx_dma_queue_reset(struct rsxx_cardinfo *card);
diff --git a/drivers/block/skd_main.c b/drivers/block/skd_main.c
new file mode 100644 (file)
index 0000000..308bf47
--- /dev/null
@@ -0,0 +1,5826 @@
+/* Copyright 2012 STEC, Inc.
+ *
+ * This file is licensed under the terms of the 3-clause
+ * BSD License (http://opensource.org/licenses/BSD-3-Clause)
+ * or the GNU GPL-2.0 (http://www.gnu.org/licenses/gpl-2.0.html),
+ * at your option. Both licenses are also available in the LICENSE file
+ * distributed with this project. This file may not be copied, modified,
+ * or distributed except in accordance with those terms.
+ * Gordoni Waidhofer <gwaidhofer@stec-inc.com>
+ * Initial Driver Design!
+ * Thomas Swann <tswann@stec-inc.com>
+ * Interrupt handling.
+ * Ramprasad Chinthekindi <rchinthekindi@stec-inc.com>
+ * biomode implementation.
+ * Akhil Bhansali <abhansali@stec-inc.com>
+ * Added support for DISCARD / FLUSH and FUA.
+ */
+
+#include <linux/kernel.h>
+#include <linux/module.h>
+#include <linux/init.h>
+#include <linux/pci.h>
+#include <linux/slab.h>
+#include <linux/spinlock.h>
+#include <linux/blkdev.h>
+#include <linux/sched.h>
+#include <linux/interrupt.h>
+#include <linux/compiler.h>
+#include <linux/workqueue.h>
+#include <linux/bitops.h>
+#include <linux/delay.h>
+#include <linux/time.h>
+#include <linux/hdreg.h>
+#include <linux/dma-mapping.h>
+#include <linux/completion.h>
+#include <linux/scatterlist.h>
+#include <linux/version.h>
+#include <linux/err.h>
+#include <linux/scatterlist.h>
+#include <linux/aer.h>
+#include <linux/ctype.h>
+#include <linux/wait.h>
+#include <linux/uio.h>
+#include <scsi/scsi.h>
+#include <scsi/scsi_host.h>
+#include <scsi/scsi_tcq.h>
+#include <scsi/scsi_cmnd.h>
+#include <scsi/sg.h>
+#include <linux/io.h>
+#include <linux/uaccess.h>
+#include <asm-generic/unaligned.h>
+
+#include "skd_s1120.h"
+
+static int skd_dbg_level;
+static int skd_isr_comp_limit = 4;
+
+enum {
+       STEC_LINK_2_5GTS = 0,
+       STEC_LINK_5GTS = 1,
+       STEC_LINK_8GTS = 2,
+       STEC_LINK_UNKNOWN = 0xFF
+};
+
+enum {
+       SKD_FLUSH_INITIALIZER,
+       SKD_FLUSH_ZERO_SIZE_FIRST,
+       SKD_FLUSH_DATA_SECOND,
+};
+
+#define DPRINTK(skdev, fmt, args ...) \
+       do { \
+               if (unlikely((skdev)->dbg_level > 0)) { \
+                       pr_err("%s:%s:%d " fmt, (skdev)->name,  \
+                              __func__, __LINE__, ## args); \
+               } \
+       } while (0)
+
+#define SKD_ASSERT(expr) \
+       do { \
+               if (unlikely(!(expr))) { \
+                       pr_err("Assertion failed! %s,%s,%s,line=%d\n",  \
+                              # expr, __FILE__, __func__, __LINE__); \
+               } \
+       } while (0)
+
+#define VPRINTK(skdev, fmt, args ...) \
+       do { \
+               if (unlikely((skdev)->dbg_level > 1)) { \
+                       pr_err("%s:%s:%d " fmt, (skdev)->name,  \
+                              __func__, __LINE__, ## args); \
+               } \
+       } while (0)
+
+
+#define DRV_NAME "skd"
+#define DRV_VERSION "2.2.1"
+#define DRV_BUILD_ID "0260"
+#define PFX DRV_NAME ": "
+#define DRV_BIN_VERSION 0x100
+#define DRV_VER_COMPL   "2.2.1." DRV_BUILD_ID
+
+MODULE_AUTHOR("bug-reports: support@stec-inc.com");
+MODULE_LICENSE("Dual BSD/GPL");
+
+MODULE_DESCRIPTION("STEC s1120 PCIe SSD block/BIO driver (b" DRV_BUILD_ID ")");
+MODULE_VERSION(DRV_VERSION "-" DRV_BUILD_ID);
+
+#define PCI_VENDOR_ID_STEC      0x1B39
+#define PCI_DEVICE_ID_S1120     0x0001
+
+#define SKD_FUA_NV             (1 << 1)
+#define SKD_MINORS_PER_DEVICE   16
+
+#define SKD_MAX_QUEUE_DEPTH     200u
+
+#define SKD_PAUSE_TIMEOUT       (5 * 1000)
+
+#define SKD_N_FITMSG_BYTES      (512u)
+
+#define SKD_N_SPECIAL_CONTEXT   32u
+#define SKD_N_SPECIAL_FITMSG_BYTES      (128u)
+
+/* SG elements are 32 bytes, so we can make this 4096 and still be under the
+ * 128KB limit.  That allows 4096*4K = 16M xfer size
+ */
+#define SKD_N_SG_PER_REQ_DEFAULT 256u
+#define SKD_N_SG_PER_SPECIAL    256u
+
+#define SKD_N_COMPLETION_ENTRY  256u
+#define SKD_N_READ_CAP_BYTES    (8u)
+
+#define SKD_N_INTERNAL_BYTES    (512u)
+
+/* 5 bits of uniqifier, 0xF800 */
+#define SKD_ID_INCR             (0x400)
+#define SKD_ID_TABLE_MASK       (3u << 8u)
+#define  SKD_ID_RW_REQUEST      (0u << 8u)
+#define  SKD_ID_INTERNAL        (1u << 8u)
+#define  SKD_ID_SPECIAL_REQUEST (2u << 8u)
+#define  SKD_ID_FIT_MSG         (3u << 8u)
+#define SKD_ID_SLOT_MASK        0x00FFu
+#define SKD_ID_SLOT_AND_TABLE_MASK 0x03FFu
+
+#define SKD_N_TIMEOUT_SLOT      4u
+#define SKD_TIMEOUT_SLOT_MASK   3u
+
+#define SKD_N_MAX_SECTORS 2048u
+
+#define SKD_MAX_RETRIES 2u
+
+#define SKD_TIMER_SECONDS(seconds) (seconds)
+#define SKD_TIMER_MINUTES(minutes) ((minutes) * (60))
+
+#define INQ_STD_NBYTES 36
+#define SKD_DISCARD_CDB_LENGTH 24
+
+enum skd_drvr_state {
+       SKD_DRVR_STATE_LOAD,
+       SKD_DRVR_STATE_IDLE,
+       SKD_DRVR_STATE_BUSY,
+       SKD_DRVR_STATE_STARTING,
+       SKD_DRVR_STATE_ONLINE,
+       SKD_DRVR_STATE_PAUSING,
+       SKD_DRVR_STATE_PAUSED,
+       SKD_DRVR_STATE_DRAINING_TIMEOUT,
+       SKD_DRVR_STATE_RESTARTING,
+       SKD_DRVR_STATE_RESUMING,
+       SKD_DRVR_STATE_STOPPING,
+       SKD_DRVR_STATE_FAULT,
+       SKD_DRVR_STATE_DISAPPEARED,
+       SKD_DRVR_STATE_PROTOCOL_MISMATCH,
+       SKD_DRVR_STATE_BUSY_ERASE,
+       SKD_DRVR_STATE_BUSY_SANITIZE,
+       SKD_DRVR_STATE_BUSY_IMMINENT,
+       SKD_DRVR_STATE_WAIT_BOOT,
+       SKD_DRVR_STATE_SYNCING,
+};
+
+#define SKD_WAIT_BOOT_TIMO      SKD_TIMER_SECONDS(90u)
+#define SKD_STARTING_TIMO       SKD_TIMER_SECONDS(8u)
+#define SKD_RESTARTING_TIMO     SKD_TIMER_MINUTES(4u)
+#define SKD_DRAINING_TIMO       SKD_TIMER_SECONDS(6u)
+#define SKD_BUSY_TIMO           SKD_TIMER_MINUTES(20u)
+#define SKD_STARTED_BUSY_TIMO   SKD_TIMER_SECONDS(60u)
+#define SKD_START_WAIT_SECONDS  90u
+
+enum skd_req_state {
+       SKD_REQ_STATE_IDLE,
+       SKD_REQ_STATE_SETUP,
+       SKD_REQ_STATE_BUSY,
+       SKD_REQ_STATE_COMPLETED,
+       SKD_REQ_STATE_TIMEOUT,
+       SKD_REQ_STATE_ABORTED,
+};
+
+enum skd_fit_msg_state {
+       SKD_MSG_STATE_IDLE,
+       SKD_MSG_STATE_BUSY,
+};
+
+enum skd_check_status_action {
+       SKD_CHECK_STATUS_REPORT_GOOD,
+       SKD_CHECK_STATUS_REPORT_SMART_ALERT,
+       SKD_CHECK_STATUS_REQUEUE_REQUEST,
+       SKD_CHECK_STATUS_REPORT_ERROR,
+       SKD_CHECK_STATUS_BUSY_IMMINENT,
+};
+
+struct skd_fitmsg_context {
+       enum skd_fit_msg_state state;
+
+       struct skd_fitmsg_context *next;
+
+       u32 id;
+       u16 outstanding;
+
+       u32 length;
+       u32 offset;
+
+       u8 *msg_buf;
+       dma_addr_t mb_dma_address;
+};
+
+struct skd_request_context {
+       enum skd_req_state state;
+
+       struct skd_request_context *next;
+
+       u16 id;
+       u32 fitmsg_id;
+
+       struct request *req;
+       struct bio *bio;
+       unsigned long start_time;
+       u8 flush_cmd;
+       u8 discard_page;
+
+       u32 timeout_stamp;
+       u8 sg_data_dir;
+       struct scatterlist *sg;
+       u32 n_sg;
+       u32 sg_byte_count;
+
+       struct fit_sg_descriptor *sksg_list;
+       dma_addr_t sksg_dma_address;
+
+       struct fit_completion_entry_v1 completion;
+
+       struct fit_comp_error_info err_info;
+
+};
+#define SKD_DATA_DIR_HOST_TO_CARD       1
+#define SKD_DATA_DIR_CARD_TO_HOST       2
+#define SKD_DATA_DIR_NONE              3       /* especially for DISCARD requests. */
+
+struct skd_special_context {
+       struct skd_request_context req;
+
+       u8 orphaned;
+
+       void *data_buf;
+       dma_addr_t db_dma_address;
+
+       u8 *msg_buf;
+       dma_addr_t mb_dma_address;
+};
+
+struct skd_sg_io {
+       fmode_t mode;
+       void __user *argp;
+
+       struct sg_io_hdr sg;
+
+       u8 cdb[16];
+
+       u32 dxfer_len;
+       u32 iovcnt;
+       struct sg_iovec *iov;
+       struct sg_iovec no_iov_iov;
+
+       struct skd_special_context *skspcl;
+};
+
+typedef enum skd_irq_type {
+       SKD_IRQ_LEGACY,
+       SKD_IRQ_MSI,
+       SKD_IRQ_MSIX
+} skd_irq_type_t;
+
+#define SKD_MAX_BARS                    2
+
+struct skd_device {
+       volatile void __iomem *mem_map[SKD_MAX_BARS];
+       resource_size_t mem_phys[SKD_MAX_BARS];
+       u32 mem_size[SKD_MAX_BARS];
+
+       skd_irq_type_t irq_type;
+       u32 msix_count;
+       struct skd_msix_entry *msix_entries;
+
+       struct pci_dev *pdev;
+       int pcie_error_reporting_is_enabled;
+
+       spinlock_t lock;
+       struct gendisk *disk;
+       struct request_queue *queue;
+       struct device *class_dev;
+       int gendisk_on;
+       int sync_done;
+
+       atomic_t device_count;
+       u32 devno;
+       u32 major;
+       char name[32];
+       char isr_name[30];
+
+       enum skd_drvr_state state;
+       u32 drive_state;
+
+       u32 in_flight;
+       u32 cur_max_queue_depth;
+       u32 queue_low_water_mark;
+       u32 dev_max_queue_depth;
+
+       u32 num_fitmsg_context;
+       u32 num_req_context;
+
+       u32 timeout_slot[SKD_N_TIMEOUT_SLOT];
+       u32 timeout_stamp;
+       struct skd_fitmsg_context *skmsg_free_list;
+       struct skd_fitmsg_context *skmsg_table;
+
+       struct skd_request_context *skreq_free_list;
+       struct skd_request_context *skreq_table;
+
+       struct skd_special_context *skspcl_free_list;
+       struct skd_special_context *skspcl_table;
+
+       struct skd_special_context internal_skspcl;
+       u32 read_cap_blocksize;
+       u32 read_cap_last_lba;
+       int read_cap_is_valid;
+       int inquiry_is_valid;
+       u8 inq_serial_num[13];  /*12 chars plus null term */
+       u8 id_str[80];          /* holds a composite name (pci + sernum) */
+
+       u8 skcomp_cycle;
+       u32 skcomp_ix;
+       struct fit_completion_entry_v1 *skcomp_table;
+       struct fit_comp_error_info *skerr_table;
+       dma_addr_t cq_dma_address;
+
+       wait_queue_head_t waitq;
+
+       struct timer_list timer;
+       u32 timer_countdown;
+       u32 timer_substate;
+
+       int n_special;
+       int sgs_per_request;
+       u32 last_mtd;
+
+       u32 proto_ver;
+
+       int dbg_level;
+       u32 connect_time_stamp;
+       int connect_retries;
+#define SKD_MAX_CONNECT_RETRIES 16
+       u32 drive_jiffies;
+
+       u32 timo_slot;
+
+
+       struct work_struct completion_worker;
+
+       struct bio_list bio_queue;
+       int queue_stopped;
+
+       struct list_head flush_list;
+};
+
+#define SKD_FLUSH_JOB   "skd-flush-jobs"
+struct kmem_cache *skd_flush_slab;
+
+/*
+ * These commands hold "nonzero size FLUSH bios",
+ * which are enqueud in skdev->flush_list during
+ * completion of "zero size FLUSH commands".
+ * It will be active in biomode.
+ */
+struct skd_flush_cmd {
+       void *cmd;
+       struct list_head flist;
+};
+
+#define SKD_WRITEL(DEV, VAL, OFF) skd_reg_write32(DEV, VAL, OFF)
+#define SKD_READL(DEV, OFF)      skd_reg_read32(DEV, OFF)
+#define SKD_WRITEQ(DEV, VAL, OFF) skd_reg_write64(DEV, VAL, OFF)
+
+static inline u32 skd_reg_read32(struct skd_device *skdev, u32 offset)
+{
+       u32 val;
+
+       if (likely(skdev->dbg_level < 2))
+               return readl(skdev->mem_map[1] + offset);
+       else {
+               barrier();
+               val = readl(skdev->mem_map[1] + offset);
+               barrier();
+               VPRINTK(skdev, "offset %x = %x\n", offset, val);
+               return val;
+       }
+
+}
+
+static inline void skd_reg_write32(struct skd_device *skdev, u32 val,
+                                  u32 offset)
+{
+       if (likely(skdev->dbg_level < 2)) {
+               writel(val, skdev->mem_map[1] + offset);
+               barrier();
+       } else {
+               barrier();
+               writel(val, skdev->mem_map[1] + offset);
+               barrier();
+               VPRINTK(skdev, "offset %x = %x\n", offset, val);
+       }
+}
+
+static inline void skd_reg_write64(struct skd_device *skdev, u64 val,
+                                  u32 offset)
+{
+       if (likely(skdev->dbg_level < 2)) {
+               writeq(val, skdev->mem_map[1] + offset);
+               barrier();
+       } else {
+               barrier();
+               writeq(val, skdev->mem_map[1] + offset);
+               barrier();
+               VPRINTK(skdev, "offset %x = %016llx\n", offset, val);
+       }
+}
+
+
+#define SKD_IRQ_DEFAULT SKD_IRQ_MSI
+static int skd_isr_type = SKD_IRQ_DEFAULT;
+
+module_param(skd_isr_type, int, 0444);
+MODULE_PARM_DESC(skd_isr_type, "Interrupt type capability."
+                " (0==legacy, 1==MSI, 2==MSI-X, default==1)");
+
+#define SKD_MAX_REQ_PER_MSG_DEFAULT 1
+static int skd_max_req_per_msg = SKD_MAX_REQ_PER_MSG_DEFAULT;
+
+module_param(skd_max_req_per_msg, int, 0444);
+MODULE_PARM_DESC(skd_max_req_per_msg,
+                "Maximum SCSI requests packed in a single message."
+                " (1-14, default==1)");
+
+#define SKD_MAX_QUEUE_DEPTH_DEFAULT 64
+#define SKD_MAX_QUEUE_DEPTH_DEFAULT_STR "64"
+static int skd_max_queue_depth = SKD_MAX_QUEUE_DEPTH_DEFAULT;
+
+module_param(skd_max_queue_depth, int, 0444);
+MODULE_PARM_DESC(skd_max_queue_depth,
+                "Maximum SCSI requests issued to s1120."
+                " (1-200, default==" SKD_MAX_QUEUE_DEPTH_DEFAULT_STR ")");
+
+static int skd_sgs_per_request = SKD_N_SG_PER_REQ_DEFAULT;
+module_param(skd_sgs_per_request, int, 0444);
+MODULE_PARM_DESC(skd_sgs_per_request,
+                "Maximum SG elements per block request."
+                " (1-4096, default==256)");
+
+static int skd_max_pass_thru = SKD_N_SPECIAL_CONTEXT;
+module_param(skd_max_pass_thru, int, 0444);
+MODULE_PARM_DESC(skd_max_pass_thru,
+                "Maximum SCSI pass-thru at a time." " (1-50, default==32)");
+
+module_param(skd_dbg_level, int, 0444);
+MODULE_PARM_DESC(skd_dbg_level, "s1120 debug level (0,1,2)");
+
+module_param(skd_isr_comp_limit, int, 0444);
+MODULE_PARM_DESC(skd_isr_comp_limit, "s1120 isr comp limit (0=none) default=4");
+
+static int skd_bio;
+module_param(skd_bio, int, 0444);
+MODULE_PARM_DESC(skd_bio,
+                "Register as a bio device instead of block (0, 1) default=0");
+
+/* Major device number dynamically assigned. */
+static u32 skd_major;
+
+static struct skd_device *skd_construct(struct pci_dev *pdev);
+static void skd_destruct(struct skd_device *skdev);
+static const struct block_device_operations skd_blockdev_ops;
+static void skd_send_fitmsg(struct skd_device *skdev,
+                           struct skd_fitmsg_context *skmsg);
+static void skd_send_special_fitmsg(struct skd_device *skdev,
+                                   struct skd_special_context *skspcl);
+static void skd_request_fn(struct request_queue *rq);
+static void skd_end_request(struct skd_device *skdev,
+                           struct skd_request_context *skreq, int error);
+static int skd_preop_sg_list(struct skd_device *skdev,
+                            struct skd_request_context *skreq);
+static void skd_postop_sg_list(struct skd_device *skdev,
+                              struct skd_request_context *skreq);
+
+static void skd_restart_device(struct skd_device *skdev);
+static int skd_quiesce_dev(struct skd_device *skdev);
+static int skd_unquiesce_dev(struct skd_device *skdev);
+static void skd_release_special(struct skd_device *skdev,
+                               struct skd_special_context *skspcl);
+static void skd_disable_interrupts(struct skd_device *skdev);
+static void skd_isr_fwstate(struct skd_device *skdev);
+static void skd_recover_requests(struct skd_device *skdev, int requeue);
+static void skd_soft_reset(struct skd_device *skdev);
+
+static const char *skd_name(struct skd_device *skdev);
+const char *skd_drive_state_to_str(int state);
+const char *skd_skdev_state_to_str(enum skd_drvr_state state);
+static void skd_log_skdev(struct skd_device *skdev, const char *event);
+static void skd_log_skmsg(struct skd_device *skdev,
+                         struct skd_fitmsg_context *skmsg, const char *event);
+static void skd_log_skreq(struct skd_device *skdev,
+                         struct skd_request_context *skreq, const char *event);
+
+/* FLUSH FUA flag handling. */
+static int skd_flush_cmd_enqueue(struct skd_device *, void *);
+static void *skd_flush_cmd_dequeue(struct skd_device *);
+
+
+/*
+ *****************************************************************************
+ * READ/WRITE REQUESTS
+ *****************************************************************************
+ */
+static void skd_stop_queue(struct skd_device *skdev)
+{
+       if (!skd_bio)
+               blk_stop_queue(skdev->queue);
+       else
+               skdev->queue_stopped = 1;
+}
+
+static void skd_unstop_queue(struct skd_device *skdev)
+{
+       if (!skd_bio)
+               queue_flag_clear(QUEUE_FLAG_STOPPED, skdev->queue);
+       else
+               skdev->queue_stopped = 0;
+}
+
+static void skd_start_queue(struct skd_device *skdev)
+{
+       if (!skd_bio) {
+               blk_start_queue(skdev->queue);
+       } else {
+               pr_err("(%s): Starting queue\n", skd_name(skdev));
+               skdev->queue_stopped = 0;
+               skd_request_fn(skdev->queue);
+       }
+}
+
+static int skd_queue_stopped(struct skd_device *skdev)
+{
+       if (!skd_bio)
+               return blk_queue_stopped(skdev->queue);
+       else
+               return skdev->queue_stopped;
+}
+
+static void skd_fail_all_pending_blk(struct skd_device *skdev)
+{
+       struct request_queue *q = skdev->queue;
+       struct request *req;
+
+       for (;; ) {
+               req = blk_peek_request(q);
+               if (req == NULL)
+                       break;
+               blk_start_request(req);
+               __blk_end_request_all(req, -EIO);
+       }
+}
+
+static void skd_fail_all_pending_bio(struct skd_device *skdev)
+{
+       struct bio *bio;
+       int error = -EIO;
+
+       for (;; ) {
+               bio = bio_list_pop(&skdev->bio_queue);
+
+               if (bio == NULL)
+                       break;
+
+               bio_endio(bio, error);
+       }
+}
+
+static void skd_fail_all_pending(struct skd_device *skdev)
+{
+       if (!skd_bio)
+               skd_fail_all_pending_blk(skdev);
+       else
+               skd_fail_all_pending_bio(skdev);
+}
+
+static void skd_make_request(struct request_queue *q, struct bio *bio)
+{
+       struct skd_device *skdev = q->queuedata;
+       unsigned long flags;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+
+       bio_list_add(&skdev->bio_queue, bio);
+       skd_request_fn(skdev->queue);
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+}
+
+static void
+skd_prep_rw_cdb(struct skd_scsi_request *scsi_req,
+               int data_dir, unsigned lba,
+               unsigned count)
+{
+       if (data_dir == READ)
+               scsi_req->cdb[0] = 0x28;
+       else
+               scsi_req->cdb[0] = 0x2a;
+
+       scsi_req->cdb[1] = 0;
+       scsi_req->cdb[2] = (lba & 0xff000000) >> 24;
+       scsi_req->cdb[3] = (lba & 0xff0000) >> 16;
+       scsi_req->cdb[4] = (lba & 0xff00) >> 8;
+       scsi_req->cdb[5] = (lba & 0xff);
+       scsi_req->cdb[6] = 0;
+       scsi_req->cdb[7] = (count & 0xff00) >> 8;
+       scsi_req->cdb[8] = count & 0xff;
+       scsi_req->cdb[9] = 0;
+}
+
+static void
+skd_prep_zerosize_flush_cdb(struct skd_scsi_request *scsi_req,
+                       struct skd_request_context *skreq)
+{
+       skreq->flush_cmd = 1;
+
+       scsi_req->cdb[0] = 0x35;
+       scsi_req->cdb[1] = 0;
+       scsi_req->cdb[2] = 0;
+       scsi_req->cdb[3] = 0;
+       scsi_req->cdb[4] = 0;
+       scsi_req->cdb[5] = 0;
+       scsi_req->cdb[6] = 0;
+       scsi_req->cdb[7] = 0;
+       scsi_req->cdb[8] = 0;
+       scsi_req->cdb[9] = 0;
+}
+
+static void
+skd_prep_discard_cdb(struct skd_scsi_request *scsi_req,
+                       struct skd_request_context *skreq,
+                       struct page *page,
+                       u32 lba, u32 count)
+{
+       char *buf;
+       unsigned long len;
+       struct request *req;
+
+       buf = page_address(page);
+       len = SKD_DISCARD_CDB_LENGTH;
+
+       scsi_req->cdb[0] = UNMAP;
+       scsi_req->cdb[8] = len;
+
+       put_unaligned_be16(6 + 16, &buf[0]);
+       put_unaligned_be16(16, &buf[2]);
+       put_unaligned_be64(lba, &buf[8]);
+       put_unaligned_be32(count, &buf[16]);
+
+       if (!skd_bio) {
+               req = skreq->req;
+               blk_add_request_payload(req, page, len);
+               req->buffer = buf;
+       } else {
+               skreq->bio->bi_io_vec->bv_page = page;
+               skreq->bio->bi_io_vec->bv_offset = 0;
+               skreq->bio->bi_io_vec->bv_len = len;
+
+               skreq->bio->bi_vcnt = 1;
+               skreq->bio->bi_phys_segments = 1;
+       }
+}
+
+static void skd_request_fn_not_online(struct request_queue *q);
+
+static void skd_request_fn(struct request_queue *q)
+{
+       struct skd_device *skdev = q->queuedata;
+       struct skd_fitmsg_context *skmsg = NULL;
+       struct fit_msg_hdr *fmh = NULL;
+       struct skd_request_context *skreq;
+       struct request *req = NULL;
+       struct bio *bio = NULL;
+       struct skd_scsi_request *scsi_req;
+       struct page *page;
+       unsigned long io_flags;
+       int error;
+       u32 lba;
+       u32 count;
+       int data_dir;
+       u32 be_lba;
+       u32 be_count;
+       u64 be_dmaa;
+       u64 cmdctxt;
+       u32 timo_slot;
+       void *cmd_ptr;
+       int flush, fua;
+
+       if (skdev->state != SKD_DRVR_STATE_ONLINE) {
+               skd_request_fn_not_online(q);
+               return;
+       }
+
+       if (skd_queue_stopped(skdev)) {
+               if (skdev->skmsg_free_list == NULL ||
+                   skdev->skreq_free_list == NULL ||
+                   skdev->in_flight >= skdev->queue_low_water_mark)
+                       /* There is still some kind of shortage */
+                       return;
+
+               skd_unstop_queue(skdev);
+       }
+
+       /*
+        * Stop conditions:
+        *  - There are no more native requests
+        *  - There are already the maximum number of requests in progress
+        *  - There are no more skd_request_context entries
+        *  - There are no more FIT msg buffers
+        */
+       for (;; ) {
+
+               flush = fua = 0;
+
+               if (!skd_bio) {
+                       req = blk_peek_request(q);
+
+                       /* Are there any native requests to start? */
+                       if (req == NULL)
+                               break;
+
+                       lba = (u32)blk_rq_pos(req);
+                       count = blk_rq_sectors(req);
+                       data_dir = rq_data_dir(req);
+                       io_flags = req->cmd_flags;
+
+                       if (io_flags & REQ_FLUSH)
+                               flush++;
+
+                       if (io_flags & REQ_FUA)
+                               fua++;
+
+                       VPRINTK(skdev,
+                               "new req=%p lba=%u(0x%x) count=%u(0x%x) dir=%d\n",
+                               req, lba, lba, count, count, data_dir);
+               } else {
+                       if (!list_empty(&skdev->flush_list)) {
+                               /* Process data part of FLUSH request. */
+                               bio = (struct bio *)skd_flush_cmd_dequeue(skdev);
+                               flush++;
+                               VPRINTK(skdev, "processing FLUSH request with data.\n");
+                       } else {
+                               /* peek at our bio queue */
+                               bio = bio_list_peek(&skdev->bio_queue);
+                       }
+
+                       /* Are there any native requests to start? */
+                       if (bio == NULL)
+                               break;
+
+                       lba = (u32)bio->bi_sector;
+                       count = bio_sectors(bio);
+                       data_dir = bio_data_dir(bio);
+                       io_flags = bio->bi_rw;
+
+                       VPRINTK(skdev,
+                               "new bio=%p lba=%u(0x%x) count=%u(0x%x) dir=%d\n",
+                               bio, lba, lba, count, count, data_dir);
+
+                       if (io_flags & REQ_FLUSH)
+                               flush++;
+
+                       if (io_flags & REQ_FUA)
+                               fua++;
+               }
+
+               /* At this point we know there is a request
+                * (from our bio q or req q depending on the way
+                * the driver is built do checks for resources.
+                */
+
+               /* Are too many requets already in progress? */
+               if (skdev->in_flight >= skdev->cur_max_queue_depth) {
+                       VPRINTK(skdev, "qdepth %d, limit %d\n",
+                               skdev->in_flight, skdev->cur_max_queue_depth);
+                       break;
+               }
+
+               /* Is a skd_request_context available? */
+               skreq = skdev->skreq_free_list;
+               if (skreq == NULL) {
+                       VPRINTK(skdev, "Out of req=%p\n", q);
+                       break;
+               }
+               SKD_ASSERT(skreq->state == SKD_REQ_STATE_IDLE);
+               SKD_ASSERT((skreq->id & SKD_ID_INCR) == 0);
+
+               /* Now we check to see if we can get a fit msg */
+               if (skmsg == NULL) {
+                       if (skdev->skmsg_free_list == NULL) {
+                               VPRINTK(skdev, "Out of msg\n");
+                               break;
+                       }
+               }
+
+               skreq->flush_cmd = 0;
+               skreq->n_sg = 0;
+               skreq->sg_byte_count = 0;
+               skreq->discard_page = 0;
+
+               /*
+                * OK to now dequeue request from either bio or q.
+                *
+                * At this point we are comitted to either start or reject
+                * the native request. Note that skd_request_context is
+                * available but is still at the head of the free list.
+                */
+               if (!skd_bio) {
+                       blk_start_request(req);
+                       skreq->req = req;
+                       skreq->fitmsg_id = 0;
+               } else {
+                       if (unlikely(flush == SKD_FLUSH_DATA_SECOND)) {
+                               skreq->bio = bio;
+                       } else {
+                               skreq->bio = bio_list_pop(&skdev->bio_queue);
+                               SKD_ASSERT(skreq->bio == bio);
+                               skreq->start_time = jiffies;
+                               part_inc_in_flight(&skdev->disk->part0,
+                                                  bio_data_dir(bio));
+                       }
+
+                       skreq->fitmsg_id = 0;
+               }
+
+               /* Either a FIT msg is in progress or we have to start one. */
+               if (skmsg == NULL) {
+                       /* Are there any FIT msg buffers available? */
+                       skmsg = skdev->skmsg_free_list;
+                       if (skmsg == NULL) {
+                               VPRINTK(skdev, "Out of msg skdev=%p\n", skdev);
+                               break;
+                       }
+                       SKD_ASSERT(skmsg->state == SKD_MSG_STATE_IDLE);
+                       SKD_ASSERT((skmsg->id & SKD_ID_INCR) == 0);
+
+                       skdev->skmsg_free_list = skmsg->next;
+
+                       skmsg->state = SKD_MSG_STATE_BUSY;
+                       skmsg->id += SKD_ID_INCR;
+
+                       /* Initialize the FIT msg header */
+                       fmh = (struct fit_msg_hdr *)skmsg->msg_buf;
+                       memset(fmh, 0, sizeof(*fmh));
+                       fmh->protocol_id = FIT_PROTOCOL_ID_SOFIT;
+                       skmsg->length = sizeof(*fmh);
+               }
+
+               skreq->fitmsg_id = skmsg->id;
+
+               /*
+                * Note that a FIT msg may have just been started
+                * but contains no SoFIT requests yet.
+                */
+
+               /*
+                * Transcode the request, checking as we go. The outcome of
+                * the transcoding is represented by the error variable.
+                */
+               cmd_ptr = &skmsg->msg_buf[skmsg->length];
+               memset(cmd_ptr, 0, 32);
+
+               be_lba = cpu_to_be32(lba);
+               be_count = cpu_to_be32(count);
+               be_dmaa = cpu_to_be64((u64)skreq->sksg_dma_address);
+               cmdctxt = skreq->id + SKD_ID_INCR;
+
+               scsi_req = cmd_ptr;
+               scsi_req->hdr.tag = cmdctxt;
+               scsi_req->hdr.sg_list_dma_address = be_dmaa;
+
+               if (data_dir == READ)
+                       skreq->sg_data_dir = SKD_DATA_DIR_CARD_TO_HOST;
+               else
+                       skreq->sg_data_dir = SKD_DATA_DIR_HOST_TO_CARD;
+
+               if (io_flags & REQ_DISCARD) {
+                       page = alloc_page(GFP_ATOMIC | __GFP_ZERO);
+                       if (!page) {
+                               pr_err("request_fn:Page allocation failed.\n");
+                               skd_end_request(skdev, skreq, -ENOMEM);
+                               break;
+                       }
+                       skreq->discard_page = 1;
+                       skd_prep_discard_cdb(scsi_req, skreq, page, lba, count);
+
+               } else if (flush == SKD_FLUSH_ZERO_SIZE_FIRST) {
+                       skd_prep_zerosize_flush_cdb(scsi_req, skreq);
+                       SKD_ASSERT(skreq->flush_cmd == 1);
+
+               } else {
+                       skd_prep_rw_cdb(scsi_req, data_dir, lba, count);
+               }
+
+               if (fua)
+                       scsi_req->cdb[1] |= SKD_FUA_NV;
+
+               if ((!skd_bio && !req->bio) ||
+                       (skd_bio && flush == SKD_FLUSH_ZERO_SIZE_FIRST))
+                       goto skip_sg;
+
+               error = skd_preop_sg_list(skdev, skreq);
+
+               if (error != 0) {
+                       /*
+                        * Complete the native request with error.
+                        * Note that the request context is still at the
+                        * head of the free list, and that the SoFIT request
+                        * was encoded into the FIT msg buffer but the FIT
+                        * msg length has not been updated. In short, the
+                        * only resource that has been allocated but might
+                        * not be used is that the FIT msg could be empty.
+                        */
+                       DPRINTK(skdev, "error Out\n");
+                       skd_end_request(skdev, skreq, error);
+                       continue;
+               }
+
+skip_sg:
+               scsi_req->hdr.sg_list_len_bytes =
+                       cpu_to_be32(skreq->sg_byte_count);
+
+               /* Complete resource allocations. */
+               skdev->skreq_free_list = skreq->next;
+               skreq->state = SKD_REQ_STATE_BUSY;
+               skreq->id += SKD_ID_INCR;
+
+               skmsg->length += sizeof(struct skd_scsi_request);
+               fmh->num_protocol_cmds_coalesced++;
+
+               /*
+                * Update the active request counts.
+                * Capture the timeout timestamp.
+                */
+               skreq->timeout_stamp = skdev->timeout_stamp;
+               timo_slot = skreq->timeout_stamp & SKD_TIMEOUT_SLOT_MASK;
+               skdev->timeout_slot[timo_slot]++;
+               skdev->in_flight++;
+               VPRINTK(skdev, "req=0x%x busy=%d\n",
+                       skreq->id, skdev->in_flight);
+
+               /*
+                * If the FIT msg buffer is full send it.
+                */
+               if (skmsg->length >= SKD_N_FITMSG_BYTES ||
+                   fmh->num_protocol_cmds_coalesced >= skd_max_req_per_msg) {
+                       skd_send_fitmsg(skdev, skmsg);
+                       skmsg = NULL;
+                       fmh = NULL;
+               }
+       }
+
+       /*
+        * Is a FIT msg in progress? If it is empty put the buffer back
+        * on the free list. If it is non-empty send what we got.
+        * This minimizes latency when there are fewer requests than
+        * what fits in a FIT msg.
+        */
+       if (skmsg != NULL) {
+               /* Bigger than just a FIT msg header? */
+               if (skmsg->length > sizeof(struct fit_msg_hdr)) {
+                       VPRINTK(skdev, "sending msg=%p, len %d\n",
+                               skmsg, skmsg->length);
+                       skd_send_fitmsg(skdev, skmsg);
+               } else {
+                       /*
+                        * The FIT msg is empty. It means we got started
+                        * on the msg, but the requests were rejected.
+                        */
+                       skmsg->state = SKD_MSG_STATE_IDLE;
+                       skmsg->id += SKD_ID_INCR;
+                       skmsg->next = skdev->skmsg_free_list;
+                       skdev->skmsg_free_list = skmsg;
+               }
+               skmsg = NULL;
+               fmh = NULL;
+       }
+
+       /*
+        * If req is non-NULL it means there is something to do but
+        * we are out of a resource.
+        */
+       if (((!skd_bio) && req) ||
+           ((skd_bio) && bio_list_peek(&skdev->bio_queue)))
+               skd_stop_queue(skdev);
+}
+
+static void skd_end_request_blk(struct skd_device *skdev,
+                               struct skd_request_context *skreq, int error)
+{
+       struct request *req = skreq->req;
+       unsigned int io_flags = req->cmd_flags;
+
+       if ((io_flags & REQ_DISCARD) &&
+               (skreq->discard_page == 1)) {
+               VPRINTK(skdev, "skd_end_request_blk, free the page!");
+               free_page((unsigned long)req->buffer);
+               req->buffer = NULL;
+       }
+
+       if (unlikely(error)) {
+               struct request *req = skreq->req;
+               char *cmd = (rq_data_dir(req) == READ) ? "read" : "write";
+               u32 lba = (u32)blk_rq_pos(req);
+               u32 count = blk_rq_sectors(req);
+
+               pr_err("(%s): Error cmd=%s sect=%u count=%u id=0x%x\n",
+                      skd_name(skdev), cmd, lba, count, skreq->id);
+       } else
+               VPRINTK(skdev, "id=0x%x error=%d\n", skreq->id, error);
+
+       __blk_end_request_all(skreq->req, error);
+}
+
+static int skd_preop_sg_list_blk(struct skd_device *skdev,
+                                struct skd_request_context *skreq)
+{
+       struct request *req = skreq->req;
+       int writing = skreq->sg_data_dir == SKD_DATA_DIR_HOST_TO_CARD;
+       int pci_dir = writing ? PCI_DMA_TODEVICE : PCI_DMA_FROMDEVICE;
+       struct scatterlist *sg = &skreq->sg[0];
+       int n_sg;
+       int i;
+
+       skreq->sg_byte_count = 0;
+
+       /* SKD_ASSERT(skreq->sg_data_dir == SKD_DATA_DIR_HOST_TO_CARD ||
+                  skreq->sg_data_dir == SKD_DATA_DIR_CARD_TO_HOST); */
+
+       n_sg = blk_rq_map_sg(skdev->queue, req, sg);
+       if (n_sg <= 0)
+               return -EINVAL;
+
+       /*
+        * Map scatterlist to PCI bus addresses.
+        * Note PCI might change the number of entries.
+        */
+       n_sg = pci_map_sg(skdev->pdev, sg, n_sg, pci_dir);
+       if (n_sg <= 0)
+               return -EINVAL;
+
+       SKD_ASSERT(n_sg <= skdev->sgs_per_request);
+
+       skreq->n_sg = n_sg;
+
+       for (i = 0; i < n_sg; i++) {
+               struct fit_sg_descriptor *sgd = &skreq->sksg_list[i];
+               u32 cnt = sg_dma_len(&sg[i]);
+               uint64_t dma_addr = sg_dma_address(&sg[i]);
+
+               sgd->control = FIT_SGD_CONTROL_NOT_LAST;
+               sgd->byte_count = cnt;
+               skreq->sg_byte_count += cnt;
+               sgd->host_side_addr = dma_addr;
+               sgd->dev_side_addr = 0;
+       }
+
+       skreq->sksg_list[n_sg - 1].next_desc_ptr = 0LL;
+       skreq->sksg_list[n_sg - 1].control = FIT_SGD_CONTROL_LAST;
+
+       if (unlikely(skdev->dbg_level > 1)) {
+               VPRINTK(skdev, "skreq=%x sksg_list=%p sksg_dma=%llx\n",
+                       skreq->id, skreq->sksg_list, skreq->sksg_dma_address);
+               for (i = 0; i < n_sg; i++) {
+                       struct fit_sg_descriptor *sgd = &skreq->sksg_list[i];
+                       VPRINTK(skdev, "  sg[%d] count=%u ctrl=0x%x "
+                               "addr=0x%llx next=0x%llx\n",
+                               i, sgd->byte_count, sgd->control,
+                               sgd->host_side_addr, sgd->next_desc_ptr);
+               }
+       }
+
+       return 0;
+}
+
+static void skd_postop_sg_list_blk(struct skd_device *skdev,
+                                  struct skd_request_context *skreq)
+{
+       int writing = skreq->sg_data_dir == SKD_DATA_DIR_HOST_TO_CARD;
+       int pci_dir = writing ? PCI_DMA_TODEVICE : PCI_DMA_FROMDEVICE;
+
+       /*
+        * restore the next ptr for next IO request so we
+        * don't have to set it every time.
+        */
+       skreq->sksg_list[skreq->n_sg - 1].next_desc_ptr =
+               skreq->sksg_dma_address +
+               ((skreq->n_sg) * sizeof(struct fit_sg_descriptor));
+       pci_unmap_sg(skdev->pdev, &skreq->sg[0], skreq->n_sg, pci_dir);
+}
+
+static void skd_end_request_bio(struct skd_device *skdev,
+                               struct skd_request_context *skreq, int error)
+{
+       struct bio *bio = skreq->bio;
+       int rw = bio_data_dir(bio);
+       unsigned long io_flags = bio->bi_rw;
+
+       if ((io_flags & REQ_DISCARD) &&
+               (skreq->discard_page == 1)) {
+               VPRINTK(skdev, "biomode: skd_end_request: freeing DISCARD page.\n");
+               free_page((unsigned long)page_address(bio->bi_io_vec->bv_page));
+       }
+
+       if (unlikely(error)) {
+               u32 lba = (u32)skreq->bio->bi_sector;
+               u32 count = bio_sectors(skreq->bio);
+               char *cmd = (rw == WRITE) ? "write" : "read";
+               pr_err("(%s): Error cmd=%s sect=%u count=%u id=0x%x\n",
+                      skd_name(skdev), cmd, lba, count, skreq->id);
+       }
+       {
+               int cpu = part_stat_lock();
+
+               if (likely(!error)) {
+                       part_stat_inc(cpu, &skdev->disk->part0, ios[rw]);
+                       part_stat_add(cpu, &skdev->disk->part0, sectors[rw],
+                                     bio_sectors(bio));
+               }
+               part_stat_add(cpu, &skdev->disk->part0, ticks[rw],
+                             jiffies - skreq->start_time);
+               part_dec_in_flight(&skdev->disk->part0, rw);
+               part_stat_unlock();
+       }
+
+       VPRINTK(skdev, "id=0x%x error=%d\n", skreq->id, error);
+
+       bio_endio(skreq->bio, error);
+}
+
+static int skd_preop_sg_list_bio(struct skd_device *skdev,
+                                struct skd_request_context *skreq)
+{
+       struct bio *bio = skreq->bio;
+       int writing = skreq->sg_data_dir == SKD_DATA_DIR_HOST_TO_CARD;
+       int pci_dir = writing ? PCI_DMA_TODEVICE : PCI_DMA_FROMDEVICE;
+       int n_sg;
+       int i;
+       struct bio_vec *vec;
+       struct fit_sg_descriptor *sgd;
+       u64 dma_addr;
+       u32 count;
+       int errs = 0;
+       unsigned int io_flags = 0;
+       io_flags |= bio->bi_rw;
+
+       skreq->sg_byte_count = 0;
+       n_sg = skreq->n_sg = skreq->bio->bi_vcnt;
+
+       if (n_sg <= 0)
+               return -EINVAL;
+
+       if (n_sg > skdev->sgs_per_request) {
+               pr_err("(%s): sg overflow n=%d\n",
+                      skd_name(skdev), n_sg);
+               skreq->n_sg = 0;
+               return -EIO;
+       }
+
+       for (i = 0; i < skreq->n_sg; i++) {
+               vec = bio_iovec_idx(bio, i);
+               dma_addr = pci_map_page(skdev->pdev,
+                                       vec->bv_page,
+                                       vec->bv_offset, vec->bv_len, pci_dir);
+               count = vec->bv_len;
+
+               if (count == 0 || count > 64u * 1024u || (count & 3) != 0
+                   || (dma_addr & 3) != 0) {
+                       pr_err(
+                              "(%s): Bad sg ix=%d count=%d addr=0x%llx\n",
+                              skd_name(skdev), i, count, dma_addr);
+                       errs++;
+               }
+
+               sgd = &skreq->sksg_list[i];
+
+               sgd->control = FIT_SGD_CONTROL_NOT_LAST;
+               sgd->byte_count = vec->bv_len;
+               skreq->sg_byte_count += vec->bv_len;
+               sgd->host_side_addr = dma_addr;
+               sgd->dev_side_addr = 0; /* not used */
+       }
+
+       skreq->sksg_list[n_sg - 1].next_desc_ptr = 0LL;
+       skreq->sksg_list[n_sg - 1].control = FIT_SGD_CONTROL_LAST;
+
+
+        if (!(io_flags & REQ_DISCARD)) {
+               count = bio_sectors(bio) << 9u;
+               if (count != skreq->sg_byte_count) {
+                       pr_err("(%s): mismatch count sg=%d req=%d\n",
+                              skd_name(skdev), skreq->sg_byte_count, count);
+                       errs++;
+               }
+       }
+
+       if (unlikely(skdev->dbg_level > 1)) {
+               VPRINTK(skdev, "skreq=%x sksg_list=%p sksg_dma=%llx\n",
+                       skreq->id, skreq->sksg_list, skreq->sksg_dma_address);
+               for (i = 0; i < n_sg; i++) {
+                       struct fit_sg_descriptor *sgd = &skreq->sksg_list[i];
+                       VPRINTK(skdev, "  sg[%d] count=%u ctrl=0x%x "
+                               "addr=0x%llx next=0x%llx\n",
+                               i, sgd->byte_count, sgd->control,
+                               sgd->host_side_addr, sgd->next_desc_ptr);
+               }
+       }
+
+       if (errs != 0) {
+               skd_postop_sg_list(skdev, skreq);
+               skreq->n_sg = 0;
+               return -EIO;
+       }
+
+       return 0;
+}
+
+static int skd_preop_sg_list(struct skd_device *skdev,
+                            struct skd_request_context *skreq)
+{
+       if (!skd_bio)
+               return skd_preop_sg_list_blk(skdev, skreq);
+       else
+               return skd_preop_sg_list_bio(skdev, skreq);
+}
+
+static void skd_postop_sg_list_bio(struct skd_device *skdev,
+                                  struct skd_request_context *skreq)
+{
+       int writing = skreq->sg_data_dir == SKD_DATA_DIR_HOST_TO_CARD;
+       int pci_dir = writing ? PCI_DMA_TODEVICE : PCI_DMA_FROMDEVICE;
+       int i;
+       struct fit_sg_descriptor *sgd;
+
+       /*
+        * restore the next ptr for next IO request so we
+        * don't have to set it every time.
+        */
+       skreq->sksg_list[skreq->n_sg - 1].next_desc_ptr =
+               skreq->sksg_dma_address +
+               ((skreq->n_sg) * sizeof(struct fit_sg_descriptor));
+
+       for (i = 0; i < skreq->n_sg; i++) {
+               sgd = &skreq->sksg_list[i];
+               pci_unmap_page(skdev->pdev, sgd->host_side_addr,
+                              sgd->byte_count, pci_dir);
+       }
+}
+
+static void skd_postop_sg_list(struct skd_device *skdev,
+                              struct skd_request_context *skreq)
+{
+       if (!skd_bio)
+               skd_postop_sg_list_blk(skdev, skreq);
+       else
+               skd_postop_sg_list_bio(skdev, skreq);
+}
+
+static void skd_end_request(struct skd_device *skdev,
+                           struct skd_request_context *skreq, int error)
+{
+       if (likely(!skd_bio))
+               skd_end_request_blk(skdev, skreq, error);
+       else
+               skd_end_request_bio(skdev, skreq, error);
+}
+
+static void skd_request_fn_not_online(struct request_queue *q)
+{
+       struct skd_device *skdev = q->queuedata;
+       int error;
+
+       SKD_ASSERT(skdev->state != SKD_DRVR_STATE_ONLINE);
+
+       skd_log_skdev(skdev, "req_not_online");
+       switch (skdev->state) {
+       case SKD_DRVR_STATE_PAUSING:
+       case SKD_DRVR_STATE_PAUSED:
+       case SKD_DRVR_STATE_STARTING:
+       case SKD_DRVR_STATE_RESTARTING:
+       case SKD_DRVR_STATE_WAIT_BOOT:
+       /* In case of starting, we haven't started the queue,
+        * so we can't get here... but requests are
+        * possibly hanging out waiting for us because we
+        * reported the dev/skd0 already.  They'll wait
+        * forever if connect doesn't complete.
+        * What to do??? delay dev/skd0 ??
+        */
+       case SKD_DRVR_STATE_BUSY:
+       case SKD_DRVR_STATE_BUSY_IMMINENT:
+       case SKD_DRVR_STATE_BUSY_ERASE:
+       case SKD_DRVR_STATE_DRAINING_TIMEOUT:
+               return;
+
+       case SKD_DRVR_STATE_BUSY_SANITIZE:
+       case SKD_DRVR_STATE_STOPPING:
+       case SKD_DRVR_STATE_SYNCING:
+       case SKD_DRVR_STATE_FAULT:
+       case SKD_DRVR_STATE_DISAPPEARED:
+       default:
+               error = -EIO;
+               break;
+       }
+
+       /* If we get here, terminate all pending block requeusts
+        * with EIO and any scsi pass thru with appropriate sense
+        */
+
+       skd_fail_all_pending(skdev);
+}
+
+/*
+ *****************************************************************************
+ * TIMER
+ *****************************************************************************
+ */
+
+static void skd_timer_tick_not_online(struct skd_device *skdev);
+
+static void skd_timer_tick(ulong arg)
+{
+       struct skd_device *skdev = (struct skd_device *)arg;
+
+       u32 timo_slot;
+       u32 overdue_timestamp;
+       unsigned long reqflags;
+       u32 state;
+
+       if (skdev->state == SKD_DRVR_STATE_FAULT)
+               /* The driver has declared fault, and we want it to
+                * stay that way until driver is reloaded.
+                */
+               return;
+
+       spin_lock_irqsave(&skdev->lock, reqflags);
+
+       state = SKD_READL(skdev, FIT_STATUS);
+       state &= FIT_SR_DRIVE_STATE_MASK;
+       if (state != skdev->drive_state)
+               skd_isr_fwstate(skdev);
+
+       if (skdev->state != SKD_DRVR_STATE_ONLINE) {
+               skd_timer_tick_not_online(skdev);
+               goto timer_func_out;
+       }
+       skdev->timeout_stamp++;
+       timo_slot = skdev->timeout_stamp & SKD_TIMEOUT_SLOT_MASK;
+
+       /*
+        * All requests that happened during the previous use of
+        * this slot should be done by now. The previous use was
+        * over 7 seconds ago.
+        */
+       if (skdev->timeout_slot[timo_slot] == 0)
+               goto timer_func_out;
+
+       /* Something is overdue */
+       overdue_timestamp = skdev->timeout_stamp - SKD_N_TIMEOUT_SLOT;
+
+       DPRINTK(skdev, "found %d timeouts, draining busy=%d\n",
+               skdev->timeout_slot[timo_slot], skdev->in_flight);
+       pr_err("(%s): Overdue IOs (%d), busy %d\n",
+              skd_name(skdev), skdev->timeout_slot[timo_slot],
+              skdev->in_flight);
+
+       skdev->timer_countdown = SKD_DRAINING_TIMO;
+       skdev->state = SKD_DRVR_STATE_DRAINING_TIMEOUT;
+       skdev->timo_slot = timo_slot;
+       skd_stop_queue(skdev);
+
+timer_func_out:
+       mod_timer(&skdev->timer, (jiffies + HZ));
+
+       spin_unlock_irqrestore(&skdev->lock, reqflags);
+}
+
+static void skd_timer_tick_not_online(struct skd_device *skdev)
+{
+       switch (skdev->state) {
+       case SKD_DRVR_STATE_IDLE:
+       case SKD_DRVR_STATE_LOAD:
+               break;
+       case SKD_DRVR_STATE_BUSY_SANITIZE:
+               VPRINTK(skdev, "drive busy sanitize[%x], driver[%x]\n",
+                       skdev->drive_state, skdev->state);
+               /* If we've been in sanitize for 3 seconds, we figure we're not
+                * going to get anymore completions, so recover requests now
+                */
+               if (skdev->timer_countdown > 0) {
+                       skdev->timer_countdown--;
+                       return;
+               }
+               skd_recover_requests(skdev, 0);
+               break;
+
+       case SKD_DRVR_STATE_BUSY:
+       case SKD_DRVR_STATE_BUSY_IMMINENT:
+       case SKD_DRVR_STATE_BUSY_ERASE:
+               VPRINTK(skdev, "busy[%x], countdown=%d\n",
+                       skdev->state, skdev->timer_countdown);
+               if (skdev->timer_countdown > 0) {
+                       skdev->timer_countdown--;
+                       return;
+               }
+               DPRINTK(skdev, "busy[%x], timedout=%d, restarting device.",
+                       skdev->state, skdev->timer_countdown);
+               skd_restart_device(skdev);
+               break;
+
+       case SKD_DRVR_STATE_WAIT_BOOT:
+       case SKD_DRVR_STATE_STARTING:
+               if (skdev->timer_countdown > 0) {
+                       skdev->timer_countdown--;
+                       return;
+               }
+               /* For now, we fault the drive.  Could attempt resets to
+                * revcover at some point. */
+               skdev->state = SKD_DRVR_STATE_FAULT;
+
+               pr_err("(%s): DriveFault Connect Timeout (%x)\n",
+                      skd_name(skdev), skdev->drive_state);
+
+               /*start the queue so we can respond with error to requests */
+               /* wakeup anyone waiting for startup complete */
+               skd_start_queue(skdev);
+               skdev->gendisk_on = -1;
+               wake_up_interruptible(&skdev->waitq);
+               break;
+
+       case SKD_DRVR_STATE_ONLINE:
+               /* shouldn't get here. */
+               break;
+
+       case SKD_DRVR_STATE_PAUSING:
+       case SKD_DRVR_STATE_PAUSED:
+               break;
+
+       case SKD_DRVR_STATE_DRAINING_TIMEOUT:
+               DPRINTK(skdev,
+                       "draining busy [%d] tick[%d] qdb[%d] tmls[%d]\n",
+                       skdev->timo_slot,
+                       skdev->timer_countdown,
+                       skdev->in_flight,
+                       skdev->timeout_slot[skdev->timo_slot]);
+               /* if the slot has cleared we can let the I/O continue */
+               if (skdev->timeout_slot[skdev->timo_slot] == 0) {
+                       DPRINTK(skdev, "Slot drained, starting queue.\n");
+                       skdev->state = SKD_DRVR_STATE_ONLINE;
+                       skd_start_queue(skdev);
+                       return;
+               }
+               if (skdev->timer_countdown > 0) {
+                       skdev->timer_countdown--;
+                       return;
+               }
+               skd_restart_device(skdev);
+               break;
+
+       case SKD_DRVR_STATE_RESTARTING:
+               if (skdev->timer_countdown > 0) {
+                       skdev->timer_countdown--;
+                       return;
+               }
+               /* For now, we fault the drive. Could attempt resets to
+                * revcover at some point. */
+               skdev->state = SKD_DRVR_STATE_FAULT;
+               pr_err("(%s): DriveFault Reconnect Timeout (%x)\n",
+                      skd_name(skdev), skdev->drive_state);
+
+               /*
+                * Recovering does two things:
+                * 1. completes IO with error
+                * 2. reclaims dma resources
+                * When is it safe to recover requests?
+                * - if the drive state is faulted
+                * - if the state is still soft reset after out timeout
+                * - if the drive registers are dead (state = FF)
+                * If it is "unsafe", we still need to recover, so we will
+                * disable pci bus mastering and disable our interrupts.
+                */
+
+               if ((skdev->drive_state == FIT_SR_DRIVE_SOFT_RESET) ||
+                   (skdev->drive_state == FIT_SR_DRIVE_FAULT) ||
+                   (skdev->drive_state == FIT_SR_DRIVE_STATE_MASK))
+                       /* It never came out of soft reset. Try to
+                        * recover the requests and then let them
+                        * fail. This is to mitigate hung processes. */
+                       skd_recover_requests(skdev, 0);
+               else {
+                       pr_err("(%s): Disable BusMaster (%x)\n",
+                              skd_name(skdev), skdev->drive_state);
+                       pci_disable_device(skdev->pdev);
+                       skd_disable_interrupts(skdev);
+                       skd_recover_requests(skdev, 0);
+               }
+
+               /*start the queue so we can respond with error to requests */
+               /* wakeup anyone waiting for startup complete */
+               skd_start_queue(skdev);
+               skdev->gendisk_on = -1;
+               wake_up_interruptible(&skdev->waitq);
+               break;
+
+       case SKD_DRVR_STATE_RESUMING:
+       case SKD_DRVR_STATE_STOPPING:
+       case SKD_DRVR_STATE_SYNCING:
+       case SKD_DRVR_STATE_FAULT:
+       case SKD_DRVR_STATE_DISAPPEARED:
+       default:
+               break;
+       }
+}
+
+static int skd_start_timer(struct skd_device *skdev)
+{
+       int rc;
+
+       init_timer(&skdev->timer);
+       setup_timer(&skdev->timer, skd_timer_tick, (ulong)skdev);
+
+       rc = mod_timer(&skdev->timer, (jiffies + HZ));
+       if (rc)
+               pr_err("%s: failed to start timer %d\n",
+                      __func__, rc);
+       return rc;
+}
+
+static void skd_kill_timer(struct skd_device *skdev)
+{
+       del_timer_sync(&skdev->timer);
+}
+
+/*
+ *****************************************************************************
+ * IOCTL
+ *****************************************************************************
+ */
+static int skd_ioctl_sg_io(struct skd_device *skdev,
+                          fmode_t mode, void __user *argp);
+static int skd_sg_io_get_and_check_args(struct skd_device *skdev,
+                                       struct skd_sg_io *sksgio);
+static int skd_sg_io_obtain_skspcl(struct skd_device *skdev,
+                                  struct skd_sg_io *sksgio);
+static int skd_sg_io_prep_buffering(struct skd_device *skdev,
+                                   struct skd_sg_io *sksgio);
+static int skd_sg_io_copy_buffer(struct skd_device *skdev,
+                                struct skd_sg_io *sksgio, int dxfer_dir);
+static int skd_sg_io_send_fitmsg(struct skd_device *skdev,
+                                struct skd_sg_io *sksgio);
+static int skd_sg_io_await(struct skd_device *skdev, struct skd_sg_io *sksgio);
+static int skd_sg_io_release_skspcl(struct skd_device *skdev,
+                                   struct skd_sg_io *sksgio);
+static int skd_sg_io_put_status(struct skd_device *skdev,
+                               struct skd_sg_io *sksgio);
+
+static void skd_complete_special(struct skd_device *skdev,
+                                volatile struct fit_completion_entry_v1
+                                *skcomp,
+                                volatile struct fit_comp_error_info *skerr,
+                                struct skd_special_context *skspcl);
+
+static int skd_bdev_ioctl(struct block_device *bdev, fmode_t mode,
+                         uint cmd_in, ulong arg)
+{
+       int rc = 0;
+       struct gendisk *disk = bdev->bd_disk;
+       struct skd_device *skdev = disk->private_data;
+       void __user *p = (void *)arg;
+
+       DPRINTK(skdev, "%s: CMD[%s] ioctl  mode 0x%x, cmd 0x%x arg %0lx\n",
+               disk->disk_name, current->comm, mode, cmd_in, arg);
+
+       if (!capable(CAP_SYS_ADMIN))
+               return -EPERM;
+
+       switch (cmd_in) {
+       case SG_SET_TIMEOUT:
+       case SG_GET_TIMEOUT:
+       case SG_GET_VERSION_NUM:
+               rc = scsi_cmd_ioctl(disk->queue, disk, mode, cmd_in, p);
+               break;
+       case SG_IO:
+               rc = skd_ioctl_sg_io(skdev, mode, p);
+               break;
+
+       default:
+               rc = -ENOTTY;
+               break;
+       }
+
+       DPRINTK(skdev, "%s:  completion rc %d\n", disk->disk_name, rc);
+       return rc;
+}
+
+static int skd_ioctl_sg_io(struct skd_device *skdev, fmode_t mode,
+                          void __user *argp)
+{
+       int rc;
+       struct skd_sg_io sksgio;
+
+       memset(&sksgio, 0, sizeof(sksgio));
+       sksgio.mode = mode;
+       sksgio.argp = argp;
+       sksgio.iov = &sksgio.no_iov_iov;
+
+       switch (skdev->state) {
+       case SKD_DRVR_STATE_ONLINE:
+       case SKD_DRVR_STATE_BUSY_IMMINENT:
+               break;
+
+       default:
+               DPRINTK(skdev, "drive not online\n");
+               rc = -ENXIO;
+               goto out;
+       }
+
+       rc = skd_sg_io_get_and_check_args(skdev, &sksgio);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_obtain_skspcl(skdev, &sksgio);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_prep_buffering(skdev, &sksgio);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_copy_buffer(skdev, &sksgio, SG_DXFER_TO_DEV);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_send_fitmsg(skdev, &sksgio);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_await(skdev, &sksgio);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_copy_buffer(skdev, &sksgio, SG_DXFER_FROM_DEV);
+       if (rc)
+               goto out;
+
+       rc = skd_sg_io_put_status(skdev, &sksgio);
+       if (rc)
+               goto out;
+
+       rc = 0;
+
+out:
+       skd_sg_io_release_skspcl(skdev, &sksgio);
+
+       if (sksgio.iov != NULL && sksgio.iov != &sksgio.no_iov_iov)
+               kfree(sksgio.iov);
+       return rc;
+}
+
+static int skd_sg_io_get_and_check_args(struct skd_device *skdev,
+                                       struct skd_sg_io *sksgio)
+{
+       struct sg_io_hdr *sgp = &sksgio->sg;
+       int i, acc;
+
+       if (!access_ok(VERIFY_WRITE, sksgio->argp, sizeof(sg_io_hdr_t))) {
+               DPRINTK(skdev, "access sg failed %p\n", sksgio->argp);
+               return -EFAULT;
+       }
+
+       if (__copy_from_user(sgp, sksgio->argp, sizeof(sg_io_hdr_t))) {
+               DPRINTK(skdev, "copy_from_user sg failed %p\n", sksgio->argp);
+               return -EFAULT;
+       }
+
+       if (sgp->interface_id != SG_INTERFACE_ID_ORIG) {
+               DPRINTK(skdev, "interface_id invalid 0x%x\n",
+                       sgp->interface_id);
+               return -EINVAL;
+       }
+
+       if (sgp->cmd_len > sizeof(sksgio->cdb)) {
+               DPRINTK(skdev, "cmd_len invalid %d\n", sgp->cmd_len);
+               return -EINVAL;
+       }
+
+       if (sgp->iovec_count > 256) {
+               DPRINTK(skdev, "iovec_count invalid %d\n", sgp->iovec_count);
+               return -EINVAL;
+       }
+
+       if (sgp->dxfer_len > (PAGE_SIZE * SKD_N_SG_PER_SPECIAL)) {
+               DPRINTK(skdev, "dxfer_len invalid %d\n", sgp->dxfer_len);
+               return -EINVAL;
+       }
+
+       switch (sgp->dxfer_direction) {
+       case SG_DXFER_NONE:
+               acc = -1;
+               break;
+
+       case SG_DXFER_TO_DEV:
+               acc = VERIFY_READ;
+               break;
+
+       case SG_DXFER_FROM_DEV:
+       case SG_DXFER_TO_FROM_DEV:
+               acc = VERIFY_WRITE;
+               break;
+
+       default:
+               DPRINTK(skdev, "dxfer_dir invalid %d\n", sgp->dxfer_direction);
+               return -EINVAL;
+       }
+
+       if (copy_from_user(sksgio->cdb, sgp->cmdp, sgp->cmd_len)) {
+               DPRINTK(skdev, "copy_from_user cmdp failed %p\n", sgp->cmdp);
+               return -EFAULT;
+       }
+
+       if (sgp->mx_sb_len != 0) {
+               if (!access_ok(VERIFY_WRITE, sgp->sbp, sgp->mx_sb_len)) {
+                       DPRINTK(skdev, "access sbp failed %p\n", sgp->sbp);
+                       return -EFAULT;
+               }
+       }
+
+       if (sgp->iovec_count == 0) {
+               sksgio->iov[0].iov_base = sgp->dxferp;
+               sksgio->iov[0].iov_len = sgp->dxfer_len;
+               sksgio->iovcnt = 1;
+               sksgio->dxfer_len = sgp->dxfer_len;
+       } else {
+               struct sg_iovec *iov;
+               uint nbytes = sizeof(*iov) * sgp->iovec_count;
+               size_t iov_data_len;
+
+               iov = kmalloc(nbytes, GFP_KERNEL);
+               if (iov == NULL) {
+                       DPRINTK(skdev, "alloc iovec failed %d\n",
+                               sgp->iovec_count);
+                       return -ENOMEM;
+               }
+               sksgio->iov = iov;
+               sksgio->iovcnt = sgp->iovec_count;
+
+               if (copy_from_user(iov, sgp->dxferp, nbytes)) {
+                       DPRINTK(skdev, "copy_from_user iovec failed %p\n",
+                               sgp->dxferp);
+                       return -EFAULT;
+               }
+
+               /*
+                * Sum up the vecs, making sure they don't overflow
+                */
+               iov_data_len = 0;
+               for (i = 0; i < sgp->iovec_count; i++) {
+                       if (iov_data_len + iov[i].iov_len < iov_data_len)
+                               return -EINVAL;
+                       iov_data_len += iov[i].iov_len;
+               }
+
+               /* SG_IO howto says that the shorter of the two wins */
+               if (sgp->dxfer_len < iov_data_len) {
+                       sksgio->iovcnt = iov_shorten((struct iovec *)iov,
+                                                    sgp->iovec_count,
+                                                    sgp->dxfer_len);
+                       sksgio->dxfer_len = sgp->dxfer_len;
+               } else
+                       sksgio->dxfer_len = iov_data_len;
+       }
+
+       if (sgp->dxfer_direction != SG_DXFER_NONE) {
+               struct sg_iovec *iov = sksgio->iov;
+               for (i = 0; i < sksgio->iovcnt; i++, iov++) {
+                       if (!access_ok(acc, iov->iov_base, iov->iov_len)) {
+                               DPRINTK(skdev, "access data failed %p/%d\n",
+                                       iov->iov_base, (int)iov->iov_len);
+                               return -EFAULT;
+                       }
+               }
+       }
+
+       return 0;
+}
+
+static int skd_sg_io_obtain_skspcl(struct skd_device *skdev,
+                                  struct skd_sg_io *sksgio)
+{
+       struct skd_special_context *skspcl = NULL;
+       int rc;
+
+       for (;; ) {
+               ulong flags;
+
+               spin_lock_irqsave(&skdev->lock, flags);
+               skspcl = skdev->skspcl_free_list;
+               if (skspcl != NULL) {
+                       skdev->skspcl_free_list =
+                               (struct skd_special_context *)skspcl->req.next;
+                       skspcl->req.id += SKD_ID_INCR;
+                       skspcl->req.state = SKD_REQ_STATE_SETUP;
+                       skspcl->orphaned = 0;
+                       skspcl->req.n_sg = 0;
+               }
+               spin_unlock_irqrestore(&skdev->lock, flags);
+
+               if (skspcl != NULL) {
+                       rc = 0;
+                       break;
+               }
+
+               DPRINTK(skdev, "blocking\n");
+
+               rc = wait_event_interruptible_timeout(
+                               skdev->waitq,
+                               (skdev->skspcl_free_list != NULL),
+                               msecs_to_jiffies(sksgio->sg.timeout));
+
+               DPRINTK(skdev, "unblocking, rc=%d\n", rc);
+
+               if (rc <= 0) {
+                       if (rc == 0)
+                               rc = -ETIMEDOUT;
+                       else
+                               rc = -EINTR;
+                       break;
+               }
+               /*
+                * If we get here rc > 0 meaning the timeout to
+                * wait_event_interruptible_timeout() had time left, hence the
+                * sought event -- non-empty free list -- happened.
+                * Retry the allocation.
+                */
+       }
+       sksgio->skspcl = skspcl;
+
+       return rc;
+}
+
+static int skd_skreq_prep_buffering(struct skd_device *skdev,
+                                   struct skd_request_context *skreq,
+                                   u32 dxfer_len)
+{
+       u32 resid = dxfer_len;
+
+       /*
+        * The DMA engine must have aligned addresses and byte counts.
+        */
+       resid += (-resid) & 3;
+       skreq->sg_byte_count = resid;
+
+       skreq->n_sg = 0;
+
+       while (resid > 0) {
+               u32 nbytes = PAGE_SIZE;
+               u32 ix = skreq->n_sg;
+               struct scatterlist *sg = &skreq->sg[ix];
+               struct fit_sg_descriptor *sksg = &skreq->sksg_list[ix];
+               struct page *page;
+
+               if (nbytes > resid)
+                       nbytes = resid;
+
+               page = alloc_page(GFP_KERNEL);
+               if (page == NULL)
+                       return -ENOMEM;
+
+               sg_set_page(sg, page, nbytes, 0);
+
+               /* TODO: This should be going through a pci_???()
+                * routine to do proper mapping. */
+               sksg->control = FIT_SGD_CONTROL_NOT_LAST;
+               sksg->byte_count = nbytes;
+
+               sksg->host_side_addr = sg_phys(sg);
+
+               sksg->dev_side_addr = 0;
+               sksg->next_desc_ptr = skreq->sksg_dma_address +
+                                     (ix + 1) * sizeof(*sksg);
+
+               skreq->n_sg++;
+               resid -= nbytes;
+       }
+
+       if (skreq->n_sg > 0) {
+               u32 ix = skreq->n_sg - 1;
+               struct fit_sg_descriptor *sksg = &skreq->sksg_list[ix];
+
+               sksg->control = FIT_SGD_CONTROL_LAST;
+               sksg->next_desc_ptr = 0;
+       }
+
+       if (unlikely(skdev->dbg_level > 1)) {
+               u32 i;
+
+               VPRINTK(skdev, "skreq=%x sksg_list=%p sksg_dma=%llx\n",
+                       skreq->id, skreq->sksg_list, skreq->sksg_dma_address);
+               for (i = 0; i < skreq->n_sg; i++) {
+                       struct fit_sg_descriptor *sgd = &skreq->sksg_list[i];
+
+                       VPRINTK(skdev, "  sg[%d] count=%u ctrl=0x%x "
+                               "addr=0x%llx next=0x%llx\n",
+                               i, sgd->byte_count, sgd->control,
+                               sgd->host_side_addr, sgd->next_desc_ptr);
+               }
+       }
+
+       return 0;
+}
+
+static int skd_sg_io_prep_buffering(struct skd_device *skdev,
+                                   struct skd_sg_io *sksgio)
+{
+       struct skd_special_context *skspcl = sksgio->skspcl;
+       struct skd_request_context *skreq = &skspcl->req;
+       u32 dxfer_len = sksgio->dxfer_len;
+       int rc;
+
+       rc = skd_skreq_prep_buffering(skdev, skreq, dxfer_len);
+       /*
+        * Eventually, errors or not, skd_release_special() is called
+        * to recover allocations including partial allocations.
+        */
+       return rc;
+}
+
+static int skd_sg_io_copy_buffer(struct skd_device *skdev,
+                                struct skd_sg_io *sksgio, int dxfer_dir)
+{
+       struct skd_special_context *skspcl = sksgio->skspcl;
+       u32 iov_ix = 0;
+       struct sg_iovec curiov;
+       u32 sksg_ix = 0;
+       u8 *bufp = NULL;
+       u32 buf_len = 0;
+       u32 resid = sksgio->dxfer_len;
+       int rc;
+
+       curiov.iov_len = 0;
+       curiov.iov_base = NULL;
+
+       if (dxfer_dir != sksgio->sg.dxfer_direction) {
+               if (dxfer_dir != SG_DXFER_TO_DEV ||
+                   sksgio->sg.dxfer_direction != SG_DXFER_TO_FROM_DEV)
+                       return 0;
+       }
+
+       while (resid > 0) {
+               u32 nbytes = PAGE_SIZE;
+
+               if (curiov.iov_len == 0) {
+                       curiov = sksgio->iov[iov_ix++];
+                       continue;
+               }
+
+               if (buf_len == 0) {
+                       struct page *page;
+                       page = sg_page(&skspcl->req.sg[sksg_ix++]);
+                       bufp = page_address(page);
+                       buf_len = PAGE_SIZE;
+               }
+
+               nbytes = min_t(u32, nbytes, resid);
+               nbytes = min_t(u32, nbytes, curiov.iov_len);
+               nbytes = min_t(u32, nbytes, buf_len);
+
+               if (dxfer_dir == SG_DXFER_TO_DEV)
+                       rc = __copy_from_user(bufp, curiov.iov_base, nbytes);
+               else
+                       rc = __copy_to_user(curiov.iov_base, bufp, nbytes);
+
+               if (rc)
+                       return -EFAULT;
+
+               resid -= nbytes;
+               curiov.iov_len -= nbytes;
+               curiov.iov_base += nbytes;
+               buf_len -= nbytes;
+       }
+
+       return 0;
+}
+
+static int skd_sg_io_send_fitmsg(struct skd_device *skdev,
+                                struct skd_sg_io *sksgio)
+{
+       struct skd_special_context *skspcl = sksgio->skspcl;
+       struct fit_msg_hdr *fmh = (struct fit_msg_hdr *)skspcl->msg_buf;
+       struct skd_scsi_request *scsi_req = (struct skd_scsi_request *)&fmh[1];
+
+       memset(skspcl->msg_buf, 0, SKD_N_SPECIAL_FITMSG_BYTES);
+
+       /* Initialize the FIT msg header */
+       fmh->protocol_id = FIT_PROTOCOL_ID_SOFIT;
+       fmh->num_protocol_cmds_coalesced = 1;
+
+       /* Initialize the SCSI request */
+       if (sksgio->sg.dxfer_direction != SG_DXFER_NONE)
+               scsi_req->hdr.sg_list_dma_address =
+                       cpu_to_be64(skspcl->req.sksg_dma_address);
+       scsi_req->hdr.tag = skspcl->req.id;
+       scsi_req->hdr.sg_list_len_bytes =
+               cpu_to_be32(skspcl->req.sg_byte_count);
+       memcpy(scsi_req->cdb, sksgio->cdb, sizeof(scsi_req->cdb));
+
+       skspcl->req.state = SKD_REQ_STATE_BUSY;
+       skd_send_special_fitmsg(skdev, skspcl);
+
+       return 0;
+}
+
+static int skd_sg_io_await(struct skd_device *skdev, struct skd_sg_io *sksgio)
+{
+       unsigned long flags;
+       int rc;
+
+       rc = wait_event_interruptible_timeout(skdev->waitq,
+                                             (sksgio->skspcl->req.state !=
+                                              SKD_REQ_STATE_BUSY),
+                                             msecs_to_jiffies(sksgio->sg.
+                                                              timeout));
+
+       spin_lock_irqsave(&skdev->lock, flags);
+
+       if (sksgio->skspcl->req.state == SKD_REQ_STATE_ABORTED) {
+               DPRINTK(skdev, "skspcl %p aborted\n", sksgio->skspcl);
+
+               /* Build check cond, sense and let command finish. */
+               /* For a timeout, we must fabricate completion and sense
+                * data to complete the command */
+               sksgio->skspcl->req.completion.status =
+                       SAM_STAT_CHECK_CONDITION;
+
+               memset(&sksgio->skspcl->req.err_info, 0,
+                      sizeof(sksgio->skspcl->req.err_info));
+               sksgio->skspcl->req.err_info.type = 0x70;
+               sksgio->skspcl->req.err_info.key = ABORTED_COMMAND;
+               sksgio->skspcl->req.err_info.code = 0x44;
+               sksgio->skspcl->req.err_info.qual = 0;
+               rc = 0;
+       } else if (sksgio->skspcl->req.state != SKD_REQ_STATE_BUSY)
+               /* No longer on the adapter. We finish. */
+               rc = 0;
+       else {
+               /* Something's gone wrong. Still busy. Timeout or
+                * user interrupted (control-C). Mark as an orphan
+                * so it will be disposed when completed. */
+               sksgio->skspcl->orphaned = 1;
+               sksgio->skspcl = NULL;
+               if (rc == 0) {
+                       DPRINTK(skdev, "timed out %p (%u ms)\n", sksgio,
+                               sksgio->sg.timeout);
+                       rc = -ETIMEDOUT;
+               } else {
+                       DPRINTK(skdev, "cntlc %p\n", sksgio);
+                       rc = -EINTR;
+               }
+       }
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+
+       return rc;
+}
+
+static int skd_sg_io_put_status(struct skd_device *skdev,
+                               struct skd_sg_io *sksgio)
+{
+       struct sg_io_hdr *sgp = &sksgio->sg;
+       struct skd_special_context *skspcl = sksgio->skspcl;
+       int resid = 0;
+
+       u32 nb = be32_to_cpu(skspcl->req.completion.num_returned_bytes);
+
+       sgp->status = skspcl->req.completion.status;
+       resid = sksgio->dxfer_len - nb;
+
+       sgp->masked_status = sgp->status & STATUS_MASK;
+       sgp->msg_status = 0;
+       sgp->host_status = 0;
+       sgp->driver_status = 0;
+       sgp->resid = resid;
+       if (sgp->masked_status || sgp->host_status || sgp->driver_status)
+               sgp->info |= SG_INFO_CHECK;
+
+       DPRINTK(skdev, "status %x masked %x resid 0x%x\n", sgp->status,
+               sgp->masked_status, sgp->resid);
+
+       if (sgp->masked_status == SAM_STAT_CHECK_CONDITION) {
+               if (sgp->mx_sb_len > 0) {
+                       struct fit_comp_error_info *ei = &skspcl->req.err_info;
+                       u32 nbytes = sizeof(*ei);
+
+                       nbytes = min_t(u32, nbytes, sgp->mx_sb_len);
+
+                       sgp->sb_len_wr = nbytes;
+
+                       if (__copy_to_user(sgp->sbp, ei, nbytes)) {
+                               DPRINTK(skdev, "copy_to_user sense failed %p\n",
+                                       sgp->sbp);
+                               return -EFAULT;
+                       }
+               }
+       }
+
+       if (__copy_to_user(sksgio->argp, sgp, sizeof(sg_io_hdr_t))) {
+               DPRINTK(skdev, "copy_to_user sg failed %p\n", sksgio->argp);
+               return -EFAULT;
+       }
+
+       return 0;
+}
+
+static int skd_sg_io_release_skspcl(struct skd_device *skdev,
+                                   struct skd_sg_io *sksgio)
+{
+       struct skd_special_context *skspcl = sksgio->skspcl;
+
+       if (skspcl != NULL) {
+               ulong flags;
+
+               sksgio->skspcl = NULL;
+
+               spin_lock_irqsave(&skdev->lock, flags);
+               skd_release_special(skdev, skspcl);
+               spin_unlock_irqrestore(&skdev->lock, flags);
+       }
+
+       return 0;
+}
+
+/*
+ *****************************************************************************
+ * INTERNAL REQUESTS -- generated by driver itself
+ *****************************************************************************
+ */
+
+static int skd_format_internal_skspcl(struct skd_device *skdev)
+{
+       struct skd_special_context *skspcl = &skdev->internal_skspcl;
+       struct fit_sg_descriptor *sgd = &skspcl->req.sksg_list[0];
+       struct fit_msg_hdr *fmh;
+       uint64_t dma_address;
+       struct skd_scsi_request *scsi;
+
+       fmh = (struct fit_msg_hdr *)&skspcl->msg_buf[0];
+       fmh->protocol_id = FIT_PROTOCOL_ID_SOFIT;
+       fmh->num_protocol_cmds_coalesced = 1;
+
+       scsi = (struct skd_scsi_request *)&skspcl->msg_buf[64];
+       memset(scsi, 0, sizeof(*scsi));
+       dma_address = skspcl->req.sksg_dma_address;
+       scsi->hdr.sg_list_dma_address = cpu_to_be64(dma_address);
+       sgd->control = FIT_SGD_CONTROL_LAST;
+       sgd->byte_count = 0;
+       sgd->host_side_addr = skspcl->db_dma_address;
+       sgd->dev_side_addr = 0;
+       sgd->next_desc_ptr = 0LL;
+
+       return 1;
+}
+
+#define WR_BUF_SIZE SKD_N_INTERNAL_BYTES
+
+static void skd_send_internal_skspcl(struct skd_device *skdev,
+                                    struct skd_special_context *skspcl,
+                                    u8 opcode)
+{
+       struct fit_sg_descriptor *sgd = &skspcl->req.sksg_list[0];
+       struct skd_scsi_request *scsi;
+       unsigned char *buf = skspcl->data_buf;
+       int i;
+
+       if (skspcl->req.state != SKD_REQ_STATE_IDLE)
+               /*
+                * A refresh is already in progress.
+                * Just wait for it to finish.
+                */
+               return;
+
+       SKD_ASSERT((skspcl->req.id & SKD_ID_INCR) == 0);
+       skspcl->req.state = SKD_REQ_STATE_BUSY;
+       skspcl->req.id += SKD_ID_INCR;
+
+       scsi = (struct skd_scsi_request *)&skspcl->msg_buf[64];
+       scsi->hdr.tag = skspcl->req.id;
+
+       memset(scsi->cdb, 0, sizeof(scsi->cdb));
+
+       switch (opcode) {
+       case TEST_UNIT_READY:
+               scsi->cdb[0] = TEST_UNIT_READY;
+               sgd->byte_count = 0;
+               scsi->hdr.sg_list_len_bytes = 0;
+               break;
+
+       case READ_CAPACITY:
+               scsi->cdb[0] = READ_CAPACITY;
+               sgd->byte_count = SKD_N_READ_CAP_BYTES;
+               scsi->hdr.sg_list_len_bytes = cpu_to_be32(sgd->byte_count);
+               break;
+
+       case INQUIRY:
+               scsi->cdb[0] = INQUIRY;
+               scsi->cdb[1] = 0x01;    /* evpd */
+               scsi->cdb[2] = 0x80;    /* serial number page */
+               scsi->cdb[4] = 0x10;
+               sgd->byte_count = 16;
+               scsi->hdr.sg_list_len_bytes = cpu_to_be32(sgd->byte_count);
+               break;
+
+       case SYNCHRONIZE_CACHE:
+               scsi->cdb[0] = SYNCHRONIZE_CACHE;
+               sgd->byte_count = 0;
+               scsi->hdr.sg_list_len_bytes = 0;
+               break;
+
+       case WRITE_BUFFER:
+               scsi->cdb[0] = WRITE_BUFFER;
+               scsi->cdb[1] = 0x02;
+               scsi->cdb[7] = (WR_BUF_SIZE & 0xFF00) >> 8;
+               scsi->cdb[8] = WR_BUF_SIZE & 0xFF;
+               sgd->byte_count = WR_BUF_SIZE;
+               scsi->hdr.sg_list_len_bytes = cpu_to_be32(sgd->byte_count);
+               /* fill incrementing byte pattern */
+               for (i = 0; i < sgd->byte_count; i++)
+                       buf[i] = i & 0xFF;
+               break;
+
+       case READ_BUFFER:
+               scsi->cdb[0] = READ_BUFFER;
+               scsi->cdb[1] = 0x02;
+               scsi->cdb[7] = (WR_BUF_SIZE & 0xFF00) >> 8;
+               scsi->cdb[8] = WR_BUF_SIZE & 0xFF;
+               sgd->byte_count = WR_BUF_SIZE;
+               scsi->hdr.sg_list_len_bytes = cpu_to_be32(sgd->byte_count);
+               memset(skspcl->data_buf, 0, sgd->byte_count);
+               break;
+
+       default:
+               SKD_ASSERT("Don't know what to send");
+               return;
+
+       }
+       skd_send_special_fitmsg(skdev, skspcl);
+}
+
+static void skd_refresh_device_data(struct skd_device *skdev)
+{
+       struct skd_special_context *skspcl = &skdev->internal_skspcl;
+
+       skd_send_internal_skspcl(skdev, skspcl, TEST_UNIT_READY);
+}
+
+static int skd_chk_read_buf(struct skd_device *skdev,
+                           struct skd_special_context *skspcl)
+{
+       unsigned char *buf = skspcl->data_buf;
+       int i;
+
+       /* check for incrementing byte pattern */
+       for (i = 0; i < WR_BUF_SIZE; i++)
+               if (buf[i] != (i & 0xFF))
+                       return 1;
+
+       return 0;
+}
+
+static void skd_log_check_status(struct skd_device *skdev, u8 status, u8 key,
+                                u8 code, u8 qual, u8 fruc)
+{
+       /* If the check condition is of special interest, log a message */
+       if ((status == SAM_STAT_CHECK_CONDITION) && (key == 0x02)
+           && (code == 0x04) && (qual == 0x06)) {
+               pr_err("(%s): *** LOST_WRITE_DATA ERROR *** key/asc/"
+                      "ascq/fruc %02x/%02x/%02x/%02x\n",
+                      skd_name(skdev), key, code, qual, fruc);
+       }
+}
+
+static void skd_complete_internal(struct skd_device *skdev,
+                                 volatile struct fit_completion_entry_v1
+                                 *skcomp,
+                                 volatile struct fit_comp_error_info *skerr,
+                                 struct skd_special_context *skspcl)
+{
+       u8 *buf = skspcl->data_buf;
+       u8 status;
+       int i;
+       struct skd_scsi_request *scsi =
+               (struct skd_scsi_request *)&skspcl->msg_buf[64];
+
+       SKD_ASSERT(skspcl == &skdev->internal_skspcl);
+
+       DPRINTK(skdev, "complete internal %x\n", scsi->cdb[0]);
+
+       skspcl->req.completion = *skcomp;
+       skspcl->req.state = SKD_REQ_STATE_IDLE;
+       skspcl->req.id += SKD_ID_INCR;
+
+       status = skspcl->req.completion.status;
+
+       skd_log_check_status(skdev, status, skerr->key, skerr->code,
+                            skerr->qual, skerr->fruc);
+
+       switch (scsi->cdb[0]) {
+       case TEST_UNIT_READY:
+               if (status == SAM_STAT_GOOD)
+                       skd_send_internal_skspcl(skdev, skspcl, WRITE_BUFFER);
+               else if ((status == SAM_STAT_CHECK_CONDITION) &&
+                        (skerr->key == MEDIUM_ERROR))
+                       skd_send_internal_skspcl(skdev, skspcl, WRITE_BUFFER);
+               else {
+                       if (skdev->state == SKD_DRVR_STATE_STOPPING) {
+                               VPRINTK(skdev, "TUR failed, don't send anymore"
+                                       "state 0x%x\n", skdev->state);
+                               return;
+                       }
+                       DPRINTK(skdev, "**** TUR failed, retry skerr\n");
+                       skd_send_internal_skspcl(skdev, skspcl, 0x00);
+               }
+               break;
+
+       case WRITE_BUFFER:
+               if (status == SAM_STAT_GOOD)
+                       skd_send_internal_skspcl(skdev, skspcl, READ_BUFFER);
+               else {
+                       if (skdev->state == SKD_DRVR_STATE_STOPPING) {
+                               VPRINTK(skdev, "write buffer failed, don't send"
+                                       " anymore state 0x%x\n", skdev->state);
+                               return;
+                       }
+                       DPRINTK(skdev,
+                               "**** write buffer failed, retry skerr\n");
+                       skd_send_internal_skspcl(skdev, skspcl, 0x00);
+               }
+               break;
+
+       case READ_BUFFER:
+               if (status == SAM_STAT_GOOD) {
+                       if (skd_chk_read_buf(skdev, skspcl) == 0)
+                               skd_send_internal_skspcl(skdev, skspcl,
+                                                        READ_CAPACITY);
+                       else {
+                               pr_err(
+                                      "(%s):*** W/R Buffer mismatch %d ***\n",
+                                      skd_name(skdev), skdev->connect_retries);
+                               if (skdev->connect_retries <
+                                   SKD_MAX_CONNECT_RETRIES) {
+                                       skdev->connect_retries++;
+                                       skd_soft_reset(skdev);
+                               } else {
+                                       pr_err(
+                                              "(%s): W/R Buffer Connect Error\n",
+                                              skd_name(skdev));
+                                       return;
+                               }
+                       }
+
+               } else {
+                       if (skdev->state == SKD_DRVR_STATE_STOPPING) {
+                               VPRINTK(skdev,
+                                       "read buffer failed, don't send anymore"
+                                       "state 0x%x\n", skdev->state);
+                               return;
+                       }
+                       DPRINTK(skdev,
+                               "**** read buffer failed, retry skerr\n");
+                       skd_send_internal_skspcl(skdev, skspcl, 0x00);
+               }
+               break;
+
+       case READ_CAPACITY:
+               skdev->read_cap_is_valid = 0;
+               if (status == SAM_STAT_GOOD) {
+                       skdev->read_cap_last_lba =
+                               (buf[0] << 24) | (buf[1] << 16) |
+                               (buf[2] << 8) | buf[3];
+                       skdev->read_cap_blocksize =
+                               (buf[4] << 24) | (buf[5] << 16) |
+                               (buf[6] << 8) | buf[7];
+
+                       DPRINTK(skdev, "last lba %d, bs %d\n",
+                               skdev->read_cap_last_lba,
+                               skdev->read_cap_blocksize);
+
+                       set_capacity(skdev->disk, skdev->read_cap_last_lba + 1);
+
+                       skdev->read_cap_is_valid = 1;
+
+                       skd_send_internal_skspcl(skdev, skspcl, INQUIRY);
+               } else if ((status == SAM_STAT_CHECK_CONDITION) &&
+                          (skerr->key == MEDIUM_ERROR)) {
+                       skdev->read_cap_last_lba = ~0;
+                       set_capacity(skdev->disk, skdev->read_cap_last_lba + 1);
+                       DPRINTK(skdev,
+                               "**** MEDIUM ERROR caused READCAP to fail, ignore failure and continue to inquiry\n");
+                       skd_send_internal_skspcl(skdev, skspcl, INQUIRY);
+               } else {
+                       DPRINTK(skdev, "**** READCAP failed, retry TUR\n");
+                       skd_send_internal_skspcl(skdev, skspcl,
+                                                TEST_UNIT_READY);
+               }
+               break;
+
+       case INQUIRY:
+               skdev->inquiry_is_valid = 0;
+               if (status == SAM_STAT_GOOD) {
+                       skdev->inquiry_is_valid = 1;
+
+                       for (i = 0; i < 12; i++)
+                               skdev->inq_serial_num[i] = buf[i + 4];
+                       skdev->inq_serial_num[12] = 0;
+               }
+
+               if (skd_unquiesce_dev(skdev) < 0)
+                       DPRINTK(skdev, "**** failed, to ONLINE device\n");
+                /* connection is complete */
+               skdev->connect_retries = 0;
+               break;
+
+       case SYNCHRONIZE_CACHE:
+               if (status == SAM_STAT_GOOD)
+                       skdev->sync_done = 1;
+               else
+                       skdev->sync_done = -1;
+               wake_up_interruptible(&skdev->waitq);
+               break;
+
+       default:
+               SKD_ASSERT("we didn't send this");
+       }
+}
+
+/*
+ *****************************************************************************
+ * FIT MESSAGES
+ *****************************************************************************
+ */
+
+static void skd_send_fitmsg(struct skd_device *skdev,
+                           struct skd_fitmsg_context *skmsg)
+{
+       u64 qcmd;
+       struct fit_msg_hdr *fmh;
+
+       VPRINTK(skdev, "dma address 0x%llx, busy=%d\n",
+               skmsg->mb_dma_address, skdev->in_flight);
+       VPRINTK(skdev, "msg_buf 0x%p, offset %x\n",
+               skmsg->msg_buf, skmsg->offset);
+
+       qcmd = skmsg->mb_dma_address;
+       qcmd |= FIT_QCMD_QID_NORMAL;
+
+       fmh = (struct fit_msg_hdr *)skmsg->msg_buf;
+       skmsg->outstanding = fmh->num_protocol_cmds_coalesced;
+
+       if (unlikely(skdev->dbg_level > 1)) {
+               u8 *bp = (u8 *)skmsg->msg_buf;
+               int i;
+               for (i = 0; i < skmsg->length; i += 8) {
+                       VPRINTK(skdev, "  msg[%2d] %02x %02x %02x %02x "
+                               "%02x %02x %02x %02x\n",
+                               i, bp[i + 0], bp[i + 1], bp[i + 2],
+                               bp[i + 3], bp[i + 4], bp[i + 5],
+                               bp[i + 6], bp[i + 7]);
+                       if (i == 0)
+                               i = 64 - 8;
+               }
+       }
+
+       if (skmsg->length > 256)
+               qcmd |= FIT_QCMD_MSGSIZE_512;
+       else if (skmsg->length > 128)
+               qcmd |= FIT_QCMD_MSGSIZE_256;
+       else if (skmsg->length > 64)
+               qcmd |= FIT_QCMD_MSGSIZE_128;
+       else
+               /*
+                * This makes no sense because the FIT msg header is
+                * 64 bytes. If the msg is only 64 bytes long it has
+                * no payload.
+                */
+               qcmd |= FIT_QCMD_MSGSIZE_64;
+
+       SKD_WRITEQ(skdev, qcmd, FIT_Q_COMMAND);
+
+}
+
+static void skd_send_special_fitmsg(struct skd_device *skdev,
+                                   struct skd_special_context *skspcl)
+{
+       u64 qcmd;
+
+       if (unlikely(skdev->dbg_level > 1)) {
+               u8 *bp = (u8 *)skspcl->msg_buf;
+               int i;
+
+               for (i = 0; i < SKD_N_SPECIAL_FITMSG_BYTES; i += 8) {
+                       VPRINTK(skdev,
+                               "  spcl[%2d] %02x %02x %02x %02x  "
+                               "%02x %02x %02x %02x\n", i,
+                               bp[i + 0], bp[i + 1], bp[i + 2], bp[i + 3],
+                               bp[i + 4], bp[i + 5], bp[i + 6], bp[i + 7]);
+                       if (i == 0)
+                               i = 64 - 8;
+               }
+
+               VPRINTK(skdev, "skspcl=%p id=%04x sksg_list=%p sksg_dma=%llx\n",
+                       skspcl, skspcl->req.id, skspcl->req.sksg_list,
+                       skspcl->req.sksg_dma_address);
+               for (i = 0; i < skspcl->req.n_sg; i++) {
+                       struct fit_sg_descriptor *sgd =
+                               &skspcl->req.sksg_list[i];
+
+                       VPRINTK(skdev, "  sg[%d] count=%u ctrl=0x%x "
+                               "addr=0x%llx next=0x%llx\n",
+                               i, sgd->byte_count, sgd->control,
+                               sgd->host_side_addr, sgd->next_desc_ptr);
+               }
+       }
+
+       /*
+        * Special FIT msgs are always 128 bytes: a 64-byte FIT hdr
+        * and one 64-byte SSDI command.
+        */
+       qcmd = skspcl->mb_dma_address;
+       qcmd |= FIT_QCMD_QID_NORMAL + FIT_QCMD_MSGSIZE_128;
+
+       SKD_WRITEQ(skdev, qcmd, FIT_Q_COMMAND);
+}
+
+/*
+ *****************************************************************************
+ * COMPLETION QUEUE
+ *****************************************************************************
+ */
+
+static void skd_complete_other(struct skd_device *skdev,
+                              volatile struct fit_completion_entry_v1 *skcomp,
+                              volatile struct fit_comp_error_info *skerr);
+
+
+static void skd_requeue_request(struct skd_device *skdev,
+                               struct skd_request_context *skreq);
+
+struct sns_info {
+       u8 type;
+       u8 stat;
+       u8 key;
+       u8 asc;
+       u8 ascq;
+       u8 mask;
+       enum skd_check_status_action action;
+};
+
+static struct sns_info skd_chkstat_table[] = {
+       /* Good */
+       { 0x70, 0x02, RECOVERED_ERROR, 0,    0,    0x1c,
+         SKD_CHECK_STATUS_REPORT_GOOD },
+
+       /* Smart alerts */
+       { 0x70, 0x02, NO_SENSE,        0x0B, 0x00, 0x1E,        /* warnings */
+         SKD_CHECK_STATUS_REPORT_SMART_ALERT },
+       { 0x70, 0x02, NO_SENSE,        0x5D, 0x00, 0x1E,        /* thresholds */
+         SKD_CHECK_STATUS_REPORT_SMART_ALERT },
+       { 0x70, 0x02, RECOVERED_ERROR, 0x0B, 0x01, 0x1F,        /* temperature over trigger */
+         SKD_CHECK_STATUS_REPORT_SMART_ALERT },
+
+       /* Retry (with limits) */
+       { 0x70, 0x02, 0x0B,            0,    0,    0x1C,        /* This one is for DMA ERROR */
+         SKD_CHECK_STATUS_REQUEUE_REQUEST },
+       { 0x70, 0x02, 0x06,            0x0B, 0x00, 0x1E,        /* warnings */
+         SKD_CHECK_STATUS_REQUEUE_REQUEST },
+       { 0x70, 0x02, 0x06,            0x5D, 0x00, 0x1E,        /* thresholds */
+         SKD_CHECK_STATUS_REQUEUE_REQUEST },
+       { 0x70, 0x02, 0x06,            0x80, 0x30, 0x1F,        /* backup power */
+         SKD_CHECK_STATUS_REQUEUE_REQUEST },
+
+       /* Busy (or about to be) */
+       { 0x70, 0x02, 0x06,            0x3f, 0x01, 0x1F, /* fw changed */
+         SKD_CHECK_STATUS_BUSY_IMMINENT },
+};
+
+/*
+ * Look up status and sense data to decide how to handle the error
+ * from the device.
+ * mask says which fields must match e.g., mask=0x18 means check
+ * type and stat, ignore key, asc, ascq.
+ */
+
+static enum skd_check_status_action skd_check_status(struct skd_device *skdev,
+                               u8 cmp_status,
+                               volatile struct fit_comp_error_info *skerr)
+{
+       int i, n;
+
+       pr_err("(%s): key/asc/ascq/fruc %02x/%02x/%02x/%02x\n",
+              skd_name(skdev), skerr->key, skerr->code, skerr->qual,
+              skerr->fruc);
+
+       VPRINTK(skdev, "stat: t=%02x stat=%02x k=%02x c=%02x q=%02x "
+               "fruc=%02x\n", skerr->type, cmp_status, skerr->key,
+               skerr->code, skerr->qual, skerr->fruc);
+
+       /* Does the info match an entry in the good category? */
+       n = sizeof(skd_chkstat_table) / sizeof(skd_chkstat_table[0]);
+       for (i = 0; i < n; i++) {
+               struct sns_info *sns = &skd_chkstat_table[i];
+
+               if (sns->mask & 0x10)
+                       if (skerr->type != sns->type)
+                               continue;
+
+               if (sns->mask & 0x08)
+                       if (cmp_status != sns->stat)
+                               continue;
+
+               if (sns->mask & 0x04)
+                       if (skerr->key != sns->key)
+                               continue;
+
+               if (sns->mask & 0x02)
+                       if (skerr->code != sns->asc)
+                               continue;
+
+               if (sns->mask & 0x01)
+                       if (skerr->qual != sns->ascq)
+                               continue;
+
+               if (sns->action == SKD_CHECK_STATUS_REPORT_SMART_ALERT) {
+                       pr_err("(%s): SMART Alert: sense key/asc/ascq "
+                              "%02x/%02x/%02x\n",
+                              skd_name(skdev), skerr->key,
+                              skerr->code, skerr->qual);
+               }
+               return sns->action;
+       }
+
+       /* No other match, so nonzero status means error,
+        * zero status means good
+        */
+       if (cmp_status) {
+               DPRINTK(skdev, "status check: error\n");
+               return SKD_CHECK_STATUS_REPORT_ERROR;
+       }
+
+       DPRINTK(skdev, "status check good default\n");
+       return SKD_CHECK_STATUS_REPORT_GOOD;
+}
+
+static void skd_resolve_req_exception(struct skd_device *skdev,
+                                     struct skd_request_context *skreq)
+{
+       u8 cmp_status = skreq->completion.status;
+
+       switch (skd_check_status(skdev, cmp_status, &skreq->err_info)) {
+       case SKD_CHECK_STATUS_REPORT_GOOD:
+       case SKD_CHECK_STATUS_REPORT_SMART_ALERT:
+               skd_end_request(skdev, skreq, 0);
+               break;
+
+       case SKD_CHECK_STATUS_BUSY_IMMINENT:
+               skd_log_skreq(skdev, skreq, "retry(busy)");
+               skd_requeue_request(skdev, skreq);
+               pr_info("(%s) drive BUSY imminent\n", skd_name(skdev));
+               skdev->state = SKD_DRVR_STATE_BUSY_IMMINENT;
+               skdev->timer_countdown = SKD_TIMER_MINUTES(20);
+               skd_quiesce_dev(skdev);
+               break;
+
+       case SKD_CHECK_STATUS_REQUEUE_REQUEST:
+               if (!skd_bio) {
+                       if ((unsigned long) ++skreq->req->special <
+                           SKD_MAX_RETRIES) {
+                               skd_log_skreq(skdev, skreq, "retry");
+                               skd_requeue_request(skdev, skreq);
+                               break;
+                       }
+               }
+       /* fall through to report error */
+
+       case SKD_CHECK_STATUS_REPORT_ERROR:
+       default:
+               skd_end_request(skdev, skreq, -EIO);
+               break;
+       }
+}
+
+static void skd_requeue_request(struct skd_device *skdev,
+                               struct skd_request_context *skreq)
+{
+       if (!skd_bio) {
+               blk_requeue_request(skdev->queue, skreq->req);
+       } else {
+               bio_list_add_head(&skdev->bio_queue, skreq->bio);
+               skreq->bio = NULL;
+       }
+}
+
+
+
+/* assume spinlock is already held */
+static void skd_release_skreq(struct skd_device *skdev,
+                             struct skd_request_context *skreq)
+{
+       u32 msg_slot;
+       struct skd_fitmsg_context *skmsg;
+
+       u32 timo_slot;
+
+       /*
+        * Reclaim the FIT msg buffer if this is
+        * the first of the requests it carried to
+        * be completed. The FIT msg buffer used to
+        * send this request cannot be reused until
+        * we are sure the s1120 card has copied
+        * it to its memory. The FIT msg might have
+        * contained several requests. As soon as
+        * any of them are completed we know that
+        * the entire FIT msg was transferred.
+        * Only the first completed request will
+        * match the FIT msg buffer id. The FIT
+        * msg buffer id is immediately updated.
+        * When subsequent requests complete the FIT
+        * msg buffer id won't match, so we know
+        * quite cheaply that it is already done.
+        */
+       msg_slot = skreq->fitmsg_id & SKD_ID_SLOT_MASK;
+       SKD_ASSERT(msg_slot < skdev->num_fitmsg_context);
+
+       skmsg = &skdev->skmsg_table[msg_slot];
+       if (skmsg->id == skreq->fitmsg_id) {
+               SKD_ASSERT(skmsg->state == SKD_MSG_STATE_BUSY);
+               SKD_ASSERT(skmsg->outstanding > 0);
+               skmsg->outstanding--;
+               if (skmsg->outstanding == 0) {
+                       skmsg->state = SKD_MSG_STATE_IDLE;
+                       skmsg->id += SKD_ID_INCR;
+                       skmsg->next = skdev->skmsg_free_list;
+                       skdev->skmsg_free_list = skmsg;
+               }
+       }
+
+       /*
+        * Decrease the number of active requests.
+        * Also decrements the count in the timeout slot.
+        */
+       SKD_ASSERT(skdev->in_flight > 0);
+       skdev->in_flight -= 1;
+
+       timo_slot = skreq->timeout_stamp & SKD_TIMEOUT_SLOT_MASK;
+       SKD_ASSERT(skdev->timeout_slot[timo_slot] > 0);
+       skdev->timeout_slot[timo_slot] -= 1;
+
+       /*
+        * Reset backpointer
+        */
+       if (likely(!skd_bio))
+               skreq->req = NULL;
+       else
+               skreq->bio = NULL;
+
+
+       /*
+        * Reclaim the skd_request_context
+        */
+       skreq->state = SKD_REQ_STATE_IDLE;
+       skreq->id += SKD_ID_INCR;
+       skreq->next = skdev->skreq_free_list;
+       skdev->skreq_free_list = skreq;
+}
+
+#define DRIVER_INQ_EVPD_PAGE_CODE   0xDA
+
+static void skd_do_inq_page_00(struct skd_device *skdev,
+                              volatile struct fit_completion_entry_v1 *skcomp,
+                              volatile struct fit_comp_error_info *skerr,
+                              uint8_t *cdb, uint8_t *buf)
+{
+       uint16_t insert_pt, max_bytes, drive_pages, drive_bytes, new_size;
+
+       /* Caller requested "supported pages".  The driver needs to insert
+        * its page.
+        */
+       VPRINTK(skdev, "skd_do_driver_inquiry: modify supported pages.\n");
+
+       /* If the device rejected the request because the CDB was
+        * improperly formed, then just leave.
+        */
+       if (skcomp->status == SAM_STAT_CHECK_CONDITION &&
+           skerr->key == ILLEGAL_REQUEST && skerr->code == 0x24)
+               return;
+
+       /* Get the amount of space the caller allocated */
+       max_bytes = (cdb[3] << 8) | cdb[4];
+
+       /* Get the number of pages actually returned by the device */
+       drive_pages = (buf[2] << 8) | buf[3];
+       drive_bytes = drive_pages + 4;
+       new_size = drive_pages + 1;
+
+       /* Supported pages must be in numerical order, so find where
+        * the driver page needs to be inserted into the list of
+        * pages returned by the device.
+        */
+       for (insert_pt = 4; insert_pt < drive_bytes; insert_pt++) {
+               if (buf[insert_pt] == DRIVER_INQ_EVPD_PAGE_CODE)
+                       return; /* Device using this page code. abort */
+               else if (buf[insert_pt] > DRIVER_INQ_EVPD_PAGE_CODE)
+                       break;
+       }
+
+       if (insert_pt < max_bytes) {
+               uint16_t u;
+
+               /* Shift everything up one byte to make room. */
+               for (u = new_size + 3; u > insert_pt; u--)
+                       buf[u] = buf[u - 1];
+               buf[insert_pt] = DRIVER_INQ_EVPD_PAGE_CODE;
+
+               /* SCSI byte order increment of num_returned_bytes by 1 */
+               skcomp->num_returned_bytes =
+                       be32_to_cpu(skcomp->num_returned_bytes) + 1;
+               skcomp->num_returned_bytes =
+                       be32_to_cpu(skcomp->num_returned_bytes);
+       }
+
+       /* update page length field to reflect the driver's page too */
+       buf[2] = (uint8_t)((new_size >> 8) & 0xFF);
+       buf[3] = (uint8_t)((new_size >> 0) & 0xFF);
+}
+
+static void skd_get_link_info(struct pci_dev *pdev, u8 *speed, u8 *width)
+{
+       int pcie_reg;
+       u16 pci_bus_speed;
+       u8 pci_lanes;
+
+       pcie_reg = pci_find_capability(pdev, PCI_CAP_ID_EXP);
+       if (pcie_reg) {
+               u16 linksta;
+               pci_read_config_word(pdev, pcie_reg + PCI_EXP_LNKSTA, &linksta);
+
+               pci_bus_speed = linksta & 0xF;
+               pci_lanes = (linksta & 0x3F0) >> 4;
+       } else {
+               *speed = STEC_LINK_UNKNOWN;
+               *width = 0xFF;
+               return;
+       }
+
+       switch (pci_bus_speed) {
+       case 1:
+               *speed = STEC_LINK_2_5GTS;
+               break;
+       case 2:
+               *speed = STEC_LINK_5GTS;
+               break;
+       case 3:
+               *speed = STEC_LINK_8GTS;
+               break;
+       default:
+               *speed = STEC_LINK_UNKNOWN;
+               break;
+       }
+
+       if (pci_lanes <= 0x20)
+               *width = pci_lanes;
+       else
+               *width = 0xFF;
+}
+
+static void skd_do_inq_page_da(struct skd_device *skdev,
+                              volatile struct fit_completion_entry_v1 *skcomp,
+                              volatile struct fit_comp_error_info *skerr,
+                              uint8_t *cdb, uint8_t *buf)
+{
+       unsigned max_bytes;
+       struct driver_inquiry_data inq;
+       u16 val;
+
+       VPRINTK(skdev, "skd_do_driver_inquiry: return driver page\n");
+
+       memset(&inq, 0, sizeof(inq));
+
+       inq.page_code = DRIVER_INQ_EVPD_PAGE_CODE;
+
+       if (skdev->pdev && skdev->pdev->bus) {
+               skd_get_link_info(skdev->pdev,
+                                 &inq.pcie_link_speed, &inq.pcie_link_lanes);
+               inq.pcie_bus_number = cpu_to_be16(skdev->pdev->bus->number);
+               inq.pcie_device_number = PCI_SLOT(skdev->pdev->devfn);
+               inq.pcie_function_number = PCI_FUNC(skdev->pdev->devfn);
+
+               pci_read_config_word(skdev->pdev, PCI_VENDOR_ID, &val);
+               inq.pcie_vendor_id = cpu_to_be16(val);
+
+               pci_read_config_word(skdev->pdev, PCI_DEVICE_ID, &val);
+               inq.pcie_device_id = cpu_to_be16(val);
+
+               pci_read_config_word(skdev->pdev, PCI_SUBSYSTEM_VENDOR_ID,
+                                    &val);
+               inq.pcie_subsystem_vendor_id = cpu_to_be16(val);
+
+               pci_read_config_word(skdev->pdev, PCI_SUBSYSTEM_ID, &val);
+               inq.pcie_subsystem_device_id = cpu_to_be16(val);
+       } else {
+               inq.pcie_bus_number = 0xFFFF;
+               inq.pcie_device_number = 0xFF;
+               inq.pcie_function_number = 0xFF;
+               inq.pcie_link_speed = 0xFF;
+               inq.pcie_link_lanes = 0xFF;
+               inq.pcie_vendor_id = 0xFFFF;
+               inq.pcie_device_id = 0xFFFF;
+               inq.pcie_subsystem_vendor_id = 0xFFFF;
+               inq.pcie_subsystem_device_id = 0xFFFF;
+       }
+
+       /* Driver version, fixed lenth, padded with spaces on the right */
+       inq.driver_version_length = sizeof(inq.driver_version);
+       memset(&inq.driver_version, ' ', sizeof(inq.driver_version));
+       memcpy(inq.driver_version, DRV_VER_COMPL,
+              min(sizeof(inq.driver_version), strlen(DRV_VER_COMPL)));
+
+       inq.page_length = cpu_to_be16((sizeof(inq) - 4));
+
+       /* Clear the error set by the device */
+       skcomp->status = SAM_STAT_GOOD;
+       memset((void *)skerr, 0, sizeof(*skerr));
+
+       /* copy response into output buffer */
+       max_bytes = (cdb[3] << 8) | cdb[4];
+       memcpy(buf, &inq, min_t(unsigned, max_bytes, sizeof(inq)));
+
+       skcomp->num_returned_bytes =
+               be32_to_cpu(min_t(uint16_t, max_bytes, sizeof(inq)));
+}
+
+static void skd_do_driver_inq(struct skd_device *skdev,
+                             volatile struct fit_completion_entry_v1 *skcomp,
+                             volatile struct fit_comp_error_info *skerr,
+                             uint8_t *cdb, uint8_t *buf)
+{
+       if (!buf)
+               return;
+       else if (cdb[0] != INQUIRY)
+               return;         /* Not an INQUIRY */
+       else if ((cdb[1] & 1) == 0)
+               return;         /* EVPD not set */
+       else if (cdb[2] == 0)
+               /* Need to add driver's page to supported pages list */
+               skd_do_inq_page_00(skdev, skcomp, skerr, cdb, buf);
+       else if (cdb[2] == DRIVER_INQ_EVPD_PAGE_CODE)
+               /* Caller requested driver's page */
+               skd_do_inq_page_da(skdev, skcomp, skerr, cdb, buf);
+}
+
+static unsigned char *skd_sg_1st_page_ptr(struct scatterlist *sg)
+{
+       if (!sg)
+               return NULL;
+       if (!sg_page(sg))
+               return NULL;
+       return sg_virt(sg);
+}
+
+static void skd_process_scsi_inq(struct skd_device *skdev,
+                                volatile struct fit_completion_entry_v1
+                                *skcomp,
+                                volatile struct fit_comp_error_info *skerr,
+                                struct skd_special_context *skspcl)
+{
+       uint8_t *buf;
+       struct fit_msg_hdr *fmh = (struct fit_msg_hdr *)skspcl->msg_buf;
+       struct skd_scsi_request *scsi_req = (struct skd_scsi_request *)&fmh[1];
+
+       dma_sync_sg_for_cpu(skdev->class_dev, skspcl->req.sg, skspcl->req.n_sg,
+                           skspcl->req.sg_data_dir);
+       buf = skd_sg_1st_page_ptr(skspcl->req.sg);
+
+       if (buf)
+               skd_do_driver_inq(skdev, skcomp, skerr, scsi_req->cdb, buf);
+}
+
+
+static int skd_isr_completion_posted(struct skd_device *skdev,
+                                       int limit, int *enqueued)
+{
+       volatile struct fit_completion_entry_v1 *skcmp = NULL;
+       volatile struct fit_comp_error_info *skerr;
+       u16 req_id;
+       u32 req_slot;
+       struct skd_request_context *skreq;
+       u16 cmp_cntxt = 0;
+       u8 cmp_status = 0;
+       u8 cmp_cycle = 0;
+       u32 cmp_bytes = 0;
+       int rc = 0;
+       int processed = 0;
+       int ret;
+
+
+       for (;; ) {
+               SKD_ASSERT(skdev->skcomp_ix < SKD_N_COMPLETION_ENTRY);
+
+               skcmp = &skdev->skcomp_table[skdev->skcomp_ix];
+               cmp_cycle = skcmp->cycle;
+               cmp_cntxt = skcmp->tag;
+               cmp_status = skcmp->status;
+               cmp_bytes = be32_to_cpu(skcmp->num_returned_bytes);
+
+               skerr = &skdev->skerr_table[skdev->skcomp_ix];
+
+               VPRINTK(skdev,
+                       "cycle=%d ix=%d got cycle=%d cmdctxt=0x%x stat=%d "
+                       "busy=%d rbytes=0x%x proto=%d\n", skdev->skcomp_cycle,
+                       skdev->skcomp_ix, cmp_cycle, cmp_cntxt, cmp_status,
+                       skdev->in_flight, cmp_bytes, skdev->proto_ver);
+
+               if (cmp_cycle != skdev->skcomp_cycle) {
+                       VPRINTK(skdev, "end of completions\n");
+                       break;
+               }
+               /*
+                * Update the completion queue head index and possibly
+                * the completion cycle count. 8-bit wrap-around.
+                */
+               skdev->skcomp_ix++;
+               if (skdev->skcomp_ix >= SKD_N_COMPLETION_ENTRY) {
+                       skdev->skcomp_ix = 0;
+                       skdev->skcomp_cycle++;
+               }
+
+               /*
+                * The command context is a unique 32-bit ID. The low order
+                * bits help locate the request. The request is usually a
+                * r/w request (see skd_start() above) or a special request.
+                */
+               req_id = cmp_cntxt;
+               req_slot = req_id & SKD_ID_SLOT_AND_TABLE_MASK;
+
+               /* Is this other than a r/w request? */
+               if (req_slot >= skdev->num_req_context) {
+                       /*
+                        * This is not a completion for a r/w request.
+                        */
+                       skd_complete_other(skdev, skcmp, skerr);
+                       continue;
+               }
+
+               skreq = &skdev->skreq_table[req_slot];
+
+               /*
+                * Make sure the request ID for the slot matches.
+                */
+               if (skreq->id != req_id) {
+                       DPRINTK(skdev, "mismatch comp_id=0x%x req_id=0x%x\n",
+                               req_id, skreq->id);
+                       {
+                               u16 new_id = cmp_cntxt;
+                               pr_err("(%s): Completion mismatch "
+                                      "comp_id=0x%04x skreq=0x%04x new=0x%04x\n",
+                                      skd_name(skdev), req_id,
+                                      skreq->id, new_id);
+
+                               continue;
+                       }
+               }
+
+               SKD_ASSERT(skreq->state == SKD_REQ_STATE_BUSY);
+
+               if (skreq->state == SKD_REQ_STATE_ABORTED) {
+                       DPRINTK(skdev, "reclaim req %p id=%04x\n",
+                               skreq, skreq->id);
+                       /* a previously timed out command can
+                        * now be cleaned up */
+                       skd_release_skreq(skdev, skreq);
+                       continue;
+               }
+
+               skreq->completion = *skcmp;
+               if (unlikely(cmp_status == SAM_STAT_CHECK_CONDITION)) {
+                       skreq->err_info = *skerr;
+                       skd_log_check_status(skdev, cmp_status, skerr->key,
+                                            skerr->code, skerr->qual,
+                                            skerr->fruc);
+               }
+               /* Release DMA resources for the request. */
+               if (skreq->n_sg > 0)
+                       skd_postop_sg_list(skdev, skreq);
+
+               if (((!skd_bio) && !skreq->req) ||
+                   ((skd_bio) && !skreq->bio)) {
+                       DPRINTK(skdev, "NULL backptr skdreq %p, "
+                               "req=0x%x req_id=0x%x\n",
+                               skreq, skreq->id, req_id);
+               } else {
+                       /*
+                        * Capture the outcome and post it back to the
+                        * native request.
+                        */
+                       if (likely(cmp_status == SAM_STAT_GOOD)) {
+                               if (unlikely(skreq->flush_cmd)) {
+                                       if (skd_bio) {
+                                               /* if empty size bio, we are all done */
+                                               if (bio_sectors(skreq->bio) == 0) {
+                                                       skd_end_request(skdev, skreq, 0);
+                                               } else {
+                                                       ret = skd_flush_cmd_enqueue(skdev, (void *)skreq->bio);
+                                                       if (ret != 0) {
+                                                               pr_err("Failed to enqueue flush bio with Data. Err=%d.\n", ret);
+                                                               skd_end_request(skdev, skreq, ret);
+                                                       } else {
+                                                               ((*enqueued)++);
+                                                       }
+                                               }
+                                       } else {
+                                               skd_end_request(skdev, skreq, 0);
+                                       }
+                               } else {
+                                       skd_end_request(skdev, skreq, 0);
+                               }
+                       } else {
+                               skd_resolve_req_exception(skdev, skreq);
+                       }
+               }
+
+               /*
+                * Release the skreq, its FIT msg (if one), timeout slot,
+                * and queue depth.
+                */
+               skd_release_skreq(skdev, skreq);
+
+               /* skd_isr_comp_limit equal zero means no limit */
+               if (limit) {
+                       if (++processed >= limit) {
+                               rc = 1;
+                               break;
+                       }
+               }
+       }
+
+       if ((skdev->state == SKD_DRVR_STATE_PAUSING)
+               && (skdev->in_flight) == 0) {
+               skdev->state = SKD_DRVR_STATE_PAUSED;
+               wake_up_interruptible(&skdev->waitq);
+       }
+
+       return rc;
+}
+
+static void skd_complete_other(struct skd_device *skdev,
+                              volatile struct fit_completion_entry_v1 *skcomp,
+                              volatile struct fit_comp_error_info *skerr)
+{
+       u32 req_id = 0;
+       u32 req_table;
+       u32 req_slot;
+       struct skd_special_context *skspcl;
+
+       req_id = skcomp->tag;
+       req_table = req_id & SKD_ID_TABLE_MASK;
+       req_slot = req_id & SKD_ID_SLOT_MASK;
+
+       DPRINTK(skdev, "table=0x%x id=0x%x slot=%d\n", req_table, req_id,
+               req_slot);
+
+       /*
+        * Based on the request id, determine how to dispatch this completion.
+        * This swich/case is finding the good cases and forwarding the
+        * completion entry. Errors are reported below the switch.
+        */
+       switch (req_table) {
+       case SKD_ID_RW_REQUEST:
+               /*
+                * The caller, skd_completion_posted_isr() above,
+                * handles r/w requests. The only way we get here
+                * is if the req_slot is out of bounds.
+                */
+               break;
+
+       case SKD_ID_SPECIAL_REQUEST:
+               /*
+                * Make sure the req_slot is in bounds and that the id
+                * matches.
+                */
+               if (req_slot < skdev->n_special) {
+                       skspcl = &skdev->skspcl_table[req_slot];
+                       if (skspcl->req.id == req_id &&
+                           skspcl->req.state == SKD_REQ_STATE_BUSY) {
+                               skd_complete_special(skdev,
+                                                    skcomp, skerr, skspcl);
+                               return;
+                       }
+               }
+               break;
+
+       case SKD_ID_INTERNAL:
+               if (req_slot == 0) {
+                       skspcl = &skdev->internal_skspcl;
+                       if (skspcl->req.id == req_id &&
+                           skspcl->req.state == SKD_REQ_STATE_BUSY) {
+                               skd_complete_internal(skdev,
+                                                     skcomp, skerr, skspcl);
+                               return;
+                       }
+               }
+               break;
+
+       case SKD_ID_FIT_MSG:
+               /*
+                * These id's should never appear in a completion record.
+                */
+               break;
+
+       default:
+               /*
+                * These id's should never appear anywhere;
+                */
+               break;
+       }
+
+       /*
+        * If we get here it is a bad or stale id.
+        */
+}
+
+static void skd_complete_special(struct skd_device *skdev,
+                                volatile struct fit_completion_entry_v1
+                                *skcomp,
+                                volatile struct fit_comp_error_info *skerr,
+                                struct skd_special_context *skspcl)
+{
+       DPRINTK(skdev, " completing special request %p\n", skspcl);
+       if (skspcl->orphaned) {
+               /* Discard orphaned request */
+               /* ?: Can this release directly or does it need
+                * to use a worker? */
+               DPRINTK(skdev, "release orphaned %p\n", skspcl);
+               skd_release_special(skdev, skspcl);
+               return;
+       }
+
+       skd_process_scsi_inq(skdev, skcomp, skerr, skspcl);
+
+       skspcl->req.state = SKD_REQ_STATE_COMPLETED;
+       skspcl->req.completion = *skcomp;
+       skspcl->req.err_info = *skerr;
+
+       skd_log_check_status(skdev, skspcl->req.completion.status, skerr->key,
+                            skerr->code, skerr->qual, skerr->fruc);
+
+       wake_up_interruptible(&skdev->waitq);
+}
+
+/* assume spinlock is already held */
+static void skd_release_special(struct skd_device *skdev,
+                               struct skd_special_context *skspcl)
+{
+       int i, was_depleted;
+
+       for (i = 0; i < skspcl->req.n_sg; i++) {
+
+               struct page *page = sg_page(&skspcl->req.sg[i]);
+               __free_page(page);
+       }
+
+       was_depleted = (skdev->skspcl_free_list == NULL);
+
+       skspcl->req.state = SKD_REQ_STATE_IDLE;
+       skspcl->req.id += SKD_ID_INCR;
+       skspcl->req.next =
+               (struct skd_request_context *)skdev->skspcl_free_list;
+       skdev->skspcl_free_list = (struct skd_special_context *)skspcl;
+
+       if (was_depleted) {
+               DPRINTK(skdev, "skspcl was depleted\n");
+               /* Free list was depleted. Their might be waiters. */
+               wake_up_interruptible(&skdev->waitq);
+       }
+}
+
+static void skd_reset_skcomp(struct skd_device *skdev)
+{
+       u32 nbytes;
+       struct fit_completion_entry_v1 *skcomp;
+
+       nbytes = sizeof(*skcomp) * SKD_N_COMPLETION_ENTRY;
+       nbytes += sizeof(struct fit_comp_error_info) * SKD_N_COMPLETION_ENTRY;
+
+       memset(skdev->skcomp_table, 0, nbytes);
+
+       skdev->skcomp_ix = 0;
+       skdev->skcomp_cycle = 1;
+}
+
+/*
+ *****************************************************************************
+ * INTERRUPTS
+ *****************************************************************************
+ */
+static void skd_completion_worker(struct work_struct *work)
+{
+       struct skd_device *skdev =
+               container_of(work, struct skd_device, completion_worker);
+       unsigned long flags;
+       int flush_enqueued = 0;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+
+       /*
+        * pass in limit=0, which means no limit..
+        * process everything in compq
+        */
+       skd_isr_completion_posted(skdev, 0, &flush_enqueued);
+       skd_request_fn(skdev->queue);
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+}
+
+static void skd_isr_msg_from_dev(struct skd_device *skdev);
+
+irqreturn_t
+static skd_isr(int irq, void *ptr)
+{
+       struct skd_device *skdev;
+       u32 intstat;
+       u32 ack;
+       int rc = 0;
+       int deferred = 0;
+       int flush_enqueued = 0;
+
+       skdev = (struct skd_device *)ptr;
+       spin_lock(&skdev->lock);
+
+       for (;; ) {
+               intstat = SKD_READL(skdev, FIT_INT_STATUS_HOST);
+
+               ack = FIT_INT_DEF_MASK;
+               ack &= intstat;
+
+               VPRINTK(skdev, "intstat=0x%x ack=0x%x\n", intstat, ack);
+
+               /* As long as there is an int pending on device, keep
+                * running loop.  When none, get out, but if we've never
+                * done any processing, call completion handler?
+                */
+               if (ack == 0) {
+                       /* No interrupts on device, but run the completion
+                        * processor anyway?
+                        */
+                       if (rc == 0)
+                               if (likely (skdev->state
+                                       == SKD_DRVR_STATE_ONLINE))
+                                       deferred = 1;
+                       break;
+               }
+
+               rc = IRQ_HANDLED;
+
+               SKD_WRITEL(skdev, ack, FIT_INT_STATUS_HOST);
+
+               if (likely((skdev->state != SKD_DRVR_STATE_LOAD) &&
+                          (skdev->state != SKD_DRVR_STATE_STOPPING))) {
+                       if (intstat & FIT_ISH_COMPLETION_POSTED) {
+                               /*
+                                * If we have already deferred completion
+                                * processing, don't bother running it again
+                                */
+                               if (deferred == 0)
+                                       deferred =
+                                               skd_isr_completion_posted(skdev,
+                                               skd_isr_comp_limit, &flush_enqueued);
+                       }
+
+                       if (intstat & FIT_ISH_FW_STATE_CHANGE) {
+                               skd_isr_fwstate(skdev);
+                               if (skdev->state == SKD_DRVR_STATE_FAULT ||
+                                   skdev->state ==
+                                   SKD_DRVR_STATE_DISAPPEARED) {
+                                       spin_unlock(&skdev->lock);
+                                       return rc;
+                               }
+                       }
+
+                       if (intstat & FIT_ISH_MSG_FROM_DEV)
+                               skd_isr_msg_from_dev(skdev);
+               }
+       }
+
+       if (unlikely(flush_enqueued))
+               skd_request_fn(skdev->queue);
+
+       if (deferred)
+               schedule_work(&skdev->completion_worker);
+       else if (!flush_enqueued)
+               skd_request_fn(skdev->queue);
+
+       spin_unlock(&skdev->lock);
+
+       return rc;
+}
+
+
+static void skd_drive_fault(struct skd_device *skdev)
+{
+       skdev->state = SKD_DRVR_STATE_FAULT;
+       pr_err("(%s): Drive FAULT\n", skd_name(skdev));
+}
+
+static void skd_drive_disappeared(struct skd_device *skdev)
+{
+       skdev->state = SKD_DRVR_STATE_DISAPPEARED;
+       pr_err("(%s): Drive DISAPPEARED\n", skd_name(skdev));
+}
+
+static void skd_isr_fwstate(struct skd_device *skdev)
+{
+       u32 sense;
+       u32 state;
+       u32 mtd;
+       int prev_driver_state = skdev->state;
+
+       sense = SKD_READL(skdev, FIT_STATUS);
+       state = sense & FIT_SR_DRIVE_STATE_MASK;
+
+       pr_err("(%s): s1120 state %s(%d)=>%s(%d)\n",
+              skd_name(skdev),
+              skd_drive_state_to_str(skdev->drive_state), skdev->drive_state,
+              skd_drive_state_to_str(state), state);
+
+       skdev->drive_state = state;
+
+       switch (skdev->drive_state) {
+       case FIT_SR_DRIVE_INIT:
+               if (skdev->state == SKD_DRVR_STATE_PROTOCOL_MISMATCH) {
+                       skd_disable_interrupts(skdev);
+                       break;
+               }
+               if (skdev->state == SKD_DRVR_STATE_RESTARTING)
+                       skd_recover_requests(skdev, 0);
+               if (skdev->state == SKD_DRVR_STATE_WAIT_BOOT) {
+                       skdev->timer_countdown = SKD_STARTING_TIMO;
+                       skdev->state = SKD_DRVR_STATE_STARTING;
+                       skd_soft_reset(skdev);
+                       break;
+               }
+               mtd = FIT_MXD_CONS(FIT_MTD_FITFW_INIT, 0, 0);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_SR_DRIVE_ONLINE:
+               skdev->cur_max_queue_depth = skd_max_queue_depth;
+               if (skdev->cur_max_queue_depth > skdev->dev_max_queue_depth)
+                       skdev->cur_max_queue_depth = skdev->dev_max_queue_depth;
+
+               skdev->queue_low_water_mark =
+                       skdev->cur_max_queue_depth * 2 / 3 + 1;
+               if (skdev->queue_low_water_mark < 1)
+                       skdev->queue_low_water_mark = 1;
+               pr_info(
+                      "(%s): Queue depth limit=%d dev=%d lowat=%d\n",
+                      skd_name(skdev),
+                      skdev->cur_max_queue_depth,
+                      skdev->dev_max_queue_depth, skdev->queue_low_water_mark);
+
+               skd_refresh_device_data(skdev);
+               break;
+
+       case FIT_SR_DRIVE_BUSY:
+               skdev->state = SKD_DRVR_STATE_BUSY;
+               skdev->timer_countdown = SKD_BUSY_TIMO;
+               skd_quiesce_dev(skdev);
+               break;
+       case FIT_SR_DRIVE_BUSY_SANITIZE:
+               /* set timer for 3 seconds, we'll abort any unfinished
+                * commands after that expires
+                */
+               skdev->state = SKD_DRVR_STATE_BUSY_SANITIZE;
+               skdev->timer_countdown = SKD_TIMER_SECONDS(3);
+               skd_start_queue(skdev);
+               break;
+       case FIT_SR_DRIVE_BUSY_ERASE:
+               skdev->state = SKD_DRVR_STATE_BUSY_ERASE;
+               skdev->timer_countdown = SKD_BUSY_TIMO;
+               break;
+       case FIT_SR_DRIVE_OFFLINE:
+               skdev->state = SKD_DRVR_STATE_IDLE;
+               break;
+       case FIT_SR_DRIVE_SOFT_RESET:
+               switch (skdev->state) {
+               case SKD_DRVR_STATE_STARTING:
+               case SKD_DRVR_STATE_RESTARTING:
+                       /* Expected by a caller of skd_soft_reset() */
+                       break;
+               default:
+                       skdev->state = SKD_DRVR_STATE_RESTARTING;
+                       break;
+               }
+               break;
+       case FIT_SR_DRIVE_FW_BOOTING:
+               VPRINTK(skdev, "ISR FIT_SR_DRIVE_FW_BOOTING %s\n", skdev->name);
+               skdev->state = SKD_DRVR_STATE_WAIT_BOOT;
+               skdev->timer_countdown = SKD_WAIT_BOOT_TIMO;
+               break;
+
+       case FIT_SR_DRIVE_DEGRADED:
+       case FIT_SR_PCIE_LINK_DOWN:
+       case FIT_SR_DRIVE_NEED_FW_DOWNLOAD:
+               break;
+
+       case FIT_SR_DRIVE_FAULT:
+               skd_drive_fault(skdev);
+               skd_recover_requests(skdev, 0);
+               skd_start_queue(skdev);
+               break;
+
+       /* PCIe bus returned all Fs? */
+       case 0xFF:
+               pr_info("(%s): state=0x%x sense=0x%x\n",
+                      skd_name(skdev), state, sense);
+               skd_drive_disappeared(skdev);
+               skd_recover_requests(skdev, 0);
+               skd_start_queue(skdev);
+               break;
+       default:
+               /*
+                * Uknown FW State. Wait for a state we recognize.
+                */
+               break;
+       }
+       pr_err("(%s): Driver state %s(%d)=>%s(%d)\n",
+              skd_name(skdev),
+              skd_skdev_state_to_str(prev_driver_state), prev_driver_state,
+              skd_skdev_state_to_str(skdev->state), skdev->state);
+}
+
+static void skd_recover_requests(struct skd_device *skdev, int requeue)
+{
+       int i;
+
+       for (i = 0; i < skdev->num_req_context; i++) {
+               struct skd_request_context *skreq = &skdev->skreq_table[i];
+
+               if (skreq->state == SKD_REQ_STATE_BUSY) {
+                       skd_log_skreq(skdev, skreq, "recover");
+
+                       SKD_ASSERT((skreq->id & SKD_ID_INCR) != 0);
+                       if (!skd_bio)
+                               SKD_ASSERT(skreq->req != NULL);
+                       else
+                               SKD_ASSERT(skreq->bio != NULL);
+
+                       /* Release DMA resources for the request. */
+                       if (skreq->n_sg > 0)
+                               skd_postop_sg_list(skdev, skreq);
+
+                       if (!skd_bio) {
+                               if (requeue &&
+                                   (unsigned long) ++skreq->req->special <
+                                   SKD_MAX_RETRIES)
+                                       skd_requeue_request(skdev, skreq);
+                               else
+                               skd_end_request(skdev, skreq, -EIO);
+                       } else
+                               skd_end_request(skdev, skreq, -EIO);
+
+                       if (!skd_bio)
+                               skreq->req = NULL;
+                       else
+                               skreq->bio = NULL;
+
+                       skreq->state = SKD_REQ_STATE_IDLE;
+                       skreq->id += SKD_ID_INCR;
+
+
+               }
+               if (i > 0)
+                       skreq[-1].next = skreq;
+               skreq->next = NULL;
+       }
+       skdev->skreq_free_list = skdev->skreq_table;
+
+       for (i = 0; i < skdev->num_fitmsg_context; i++) {
+               struct skd_fitmsg_context *skmsg = &skdev->skmsg_table[i];
+
+               if (skmsg->state == SKD_MSG_STATE_BUSY) {
+                       skd_log_skmsg(skdev, skmsg, "salvaged");
+                       SKD_ASSERT((skmsg->id & SKD_ID_INCR) != 0);
+                       skmsg->state = SKD_MSG_STATE_IDLE;
+                       skmsg->id += SKD_ID_INCR;
+               }
+               if (i > 0)
+                       skmsg[-1].next = skmsg;
+               skmsg->next = NULL;
+       }
+       skdev->skmsg_free_list = skdev->skmsg_table;
+
+       for (i = 0; i < skdev->n_special; i++) {
+               struct skd_special_context *skspcl = &skdev->skspcl_table[i];
+
+               /* If orphaned, reclaim it because it has already been reported
+                * to the process as an error (it was just waiting for
+                * a completion that didn't come, and now it will never come)
+                * If busy, change to a state that will cause it to error
+                * out in the wait routine and let it do the normal
+                * reporting and reclaiming
+                */
+               if (skspcl->req.state == SKD_REQ_STATE_BUSY) {
+                       if (skspcl->orphaned) {
+                               DPRINTK(skdev, "orphaned %p\n", skspcl);
+                               skd_release_special(skdev, skspcl);
+                       } else {
+                               DPRINTK(skdev, "not orphaned %p\n", skspcl);
+                               skspcl->req.state = SKD_REQ_STATE_ABORTED;
+                       }
+               }
+       }
+       skdev->skspcl_free_list = skdev->skspcl_table;
+
+       for (i = 0; i < SKD_N_TIMEOUT_SLOT; i++)
+               skdev->timeout_slot[i] = 0;
+
+       skdev->in_flight = 0;
+}
+
+static void skd_isr_msg_from_dev(struct skd_device *skdev)
+{
+       u32 mfd;
+       u32 mtd;
+       u32 data;
+
+       mfd = SKD_READL(skdev, FIT_MSG_FROM_DEVICE);
+
+       DPRINTK(skdev, "mfd=0x%x last_mtd=0x%x\n", mfd, skdev->last_mtd);
+
+       /* ignore any mtd that is an ack for something we didn't send */
+       if (FIT_MXD_TYPE(mfd) != FIT_MXD_TYPE(skdev->last_mtd))
+               return;
+
+       switch (FIT_MXD_TYPE(mfd)) {
+       case FIT_MTD_FITFW_INIT:
+               skdev->proto_ver = FIT_PROTOCOL_MAJOR_VER(mfd);
+
+               if (skdev->proto_ver != FIT_PROTOCOL_VERSION_1) {
+                       pr_err("(%s): protocol mismatch\n",
+                              skdev->name);
+                       pr_err("(%s):   got=%d support=%d\n",
+                              skdev->name, skdev->proto_ver,
+                              FIT_PROTOCOL_VERSION_1);
+                       pr_err("(%s):   please upgrade driver\n",
+                              skdev->name);
+                       skdev->state = SKD_DRVR_STATE_PROTOCOL_MISMATCH;
+                       skd_soft_reset(skdev);
+                       break;
+               }
+               mtd = FIT_MXD_CONS(FIT_MTD_GET_CMDQ_DEPTH, 0, 0);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_MTD_GET_CMDQ_DEPTH:
+               skdev->dev_max_queue_depth = FIT_MXD_DATA(mfd);
+               mtd = FIT_MXD_CONS(FIT_MTD_SET_COMPQ_DEPTH, 0,
+                                  SKD_N_COMPLETION_ENTRY);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_MTD_SET_COMPQ_DEPTH:
+               SKD_WRITEQ(skdev, skdev->cq_dma_address, FIT_MSG_TO_DEVICE_ARG);
+               mtd = FIT_MXD_CONS(FIT_MTD_SET_COMPQ_ADDR, 0, 0);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_MTD_SET_COMPQ_ADDR:
+               skd_reset_skcomp(skdev);
+               mtd = FIT_MXD_CONS(FIT_MTD_CMD_LOG_HOST_ID, 0, skdev->devno);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_MTD_CMD_LOG_HOST_ID:
+               skdev->connect_time_stamp = get_seconds();
+               data = skdev->connect_time_stamp & 0xFFFF;
+               mtd = FIT_MXD_CONS(FIT_MTD_CMD_LOG_TIME_STAMP_LO, 0, data);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_MTD_CMD_LOG_TIME_STAMP_LO:
+               skdev->drive_jiffies = FIT_MXD_DATA(mfd);
+               data = (skdev->connect_time_stamp >> 16) & 0xFFFF;
+               mtd = FIT_MXD_CONS(FIT_MTD_CMD_LOG_TIME_STAMP_HI, 0, data);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+               break;
+
+       case FIT_MTD_CMD_LOG_TIME_STAMP_HI:
+               skdev->drive_jiffies |= (FIT_MXD_DATA(mfd) << 16);
+               mtd = FIT_MXD_CONS(FIT_MTD_ARM_QUEUE, 0, 0);
+               SKD_WRITEL(skdev, mtd, FIT_MSG_TO_DEVICE);
+               skdev->last_mtd = mtd;
+
+               pr_err("(%s): Time sync driver=0x%x device=0x%x\n",
+                      skd_name(skdev),
+                      skdev->connect_time_stamp, skdev->drive_jiffies);
+               break;
+
+       case FIT_MTD_ARM_QUEUE:
+               skdev->last_mtd = 0;
+               /*
+                * State should be, or soon will be, FIT_SR_DRIVE_ONLINE.
+                */
+               break;
+
+       default:
+               break;
+       }
+}
+
+static void skd_disable_interrupts(struct skd_device *skdev)
+{
+       u32 sense;
+
+       sense = SKD_READL(skdev, FIT_CONTROL);
+       sense &= ~FIT_CR_ENABLE_INTERRUPTS;
+       SKD_WRITEL(skdev, sense, FIT_CONTROL);
+       DPRINTK(skdev, "sense 0x%x\n", sense);
+
+       /* Note that the 1s is written. A 1-bit means
+        * disable, a 0 means enable.
+        */
+       SKD_WRITEL(skdev, ~0, FIT_INT_MASK_HOST);
+}
+
+static void skd_enable_interrupts(struct skd_device *skdev)
+{
+       u32 val;
+
+       /* unmask interrupts first */
+       val = FIT_ISH_FW_STATE_CHANGE +
+             FIT_ISH_COMPLETION_POSTED + FIT_ISH_MSG_FROM_DEV;
+
+       /* Note that the compliment of mask is written. A 1-bit means
+        * disable, a 0 means enable. */
+       SKD_WRITEL(skdev, ~val, FIT_INT_MASK_HOST);
+       DPRINTK(skdev, "interrupt mask=0x%x\n", ~val);
+
+       val = SKD_READL(skdev, FIT_CONTROL);
+       val |= FIT_CR_ENABLE_INTERRUPTS;
+       DPRINTK(skdev, "control=0x%x\n", val);
+       SKD_WRITEL(skdev, val, FIT_CONTROL);
+}
+
+/*
+ *****************************************************************************
+ * START, STOP, RESTART, QUIESCE, UNQUIESCE
+ *****************************************************************************
+ */
+
+static void skd_soft_reset(struct skd_device *skdev)
+{
+       u32 val;
+
+       val = SKD_READL(skdev, FIT_CONTROL);
+       val |= (FIT_CR_SOFT_RESET);
+       DPRINTK(skdev, "control=0x%x\n", val);
+       SKD_WRITEL(skdev, val, FIT_CONTROL);
+}
+
+static void skd_start_device(struct skd_device *skdev)
+{
+       unsigned long flags;
+       u32 sense;
+       u32 state;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+
+       /* ack all ghost interrupts */
+       SKD_WRITEL(skdev, FIT_INT_DEF_MASK, FIT_INT_STATUS_HOST);
+
+       sense = SKD_READL(skdev, FIT_STATUS);
+
+       DPRINTK(skdev, "initial status=0x%x\n", sense);
+
+       state = sense & FIT_SR_DRIVE_STATE_MASK;
+       skdev->drive_state = state;
+       skdev->last_mtd = 0;
+
+       skdev->state = SKD_DRVR_STATE_STARTING;
+       skdev->timer_countdown = SKD_STARTING_TIMO;
+
+       skd_enable_interrupts(skdev);
+
+       switch (skdev->drive_state) {
+       case FIT_SR_DRIVE_OFFLINE:
+               pr_err("(%s): Drive offline...\n", skd_name(skdev));
+               break;
+
+       case FIT_SR_DRIVE_FW_BOOTING:
+               VPRINTK(skdev, "FIT_SR_DRIVE_FW_BOOTING %s\n", skdev->name);
+               skdev->state = SKD_DRVR_STATE_WAIT_BOOT;
+               skdev->timer_countdown = SKD_WAIT_BOOT_TIMO;
+               break;
+
+       case FIT_SR_DRIVE_BUSY_SANITIZE:
+               pr_info("(%s): Start: BUSY_SANITIZE\n",
+                      skd_name(skdev));
+               skdev->state = SKD_DRVR_STATE_BUSY_SANITIZE;
+               skdev->timer_countdown = SKD_STARTED_BUSY_TIMO;
+               break;
+
+       case FIT_SR_DRIVE_BUSY_ERASE:
+               pr_info("(%s): Start: BUSY_ERASE\n", skd_name(skdev));
+               skdev->state = SKD_DRVR_STATE_BUSY_ERASE;
+               skdev->timer_countdown = SKD_STARTED_BUSY_TIMO;
+               break;
+
+       case FIT_SR_DRIVE_INIT:
+       case FIT_SR_DRIVE_ONLINE:
+               skd_soft_reset(skdev);
+               break;
+
+       case FIT_SR_DRIVE_BUSY:
+               pr_err("(%s): Drive Busy...\n", skd_name(skdev));
+               skdev->state = SKD_DRVR_STATE_BUSY;
+               skdev->timer_countdown = SKD_STARTED_BUSY_TIMO;
+               break;
+
+       case FIT_SR_DRIVE_SOFT_RESET:
+               pr_err("(%s) drive soft reset in prog\n",
+                      skd_name(skdev));
+               break;
+
+       case FIT_SR_DRIVE_FAULT:
+               /* Fault state is bad...soft reset won't do it...
+                * Hard reset, maybe, but does it work on device?
+                * For now, just fault so the system doesn't hang.
+                */
+               skd_drive_fault(skdev);
+               /*start the queue so we can respond with error to requests */
+               VPRINTK(skdev, "starting %s queue\n", skdev->name);
+               skd_start_queue(skdev);
+               skdev->gendisk_on = -1;
+               wake_up_interruptible(&skdev->waitq);
+               break;
+
+       case 0xFF:
+               /* Most likely the device isn't there or isn't responding
+                * to the BAR1 addresses. */
+               skd_drive_disappeared(skdev);
+               /*start the queue so we can respond with error to requests */
+               VPRINTK(skdev, "starting %s queue to error-out reqs\n",
+                       skdev->name);
+               skd_start_queue(skdev);
+               skdev->gendisk_on = -1;
+               wake_up_interruptible(&skdev->waitq);
+               break;
+
+       default:
+               pr_err("(%s) Start: unknown state %x\n",
+                      skd_name(skdev), skdev->drive_state);
+               break;
+       }
+
+       state = SKD_READL(skdev, FIT_CONTROL);
+       DPRINTK(skdev, "FIT Control Status=0x%x\n", state);
+
+       state = SKD_READL(skdev, FIT_INT_STATUS_HOST);
+       DPRINTK(skdev, "Intr Status=0x%x\n", state);
+
+       state = SKD_READL(skdev, FIT_INT_MASK_HOST);
+       DPRINTK(skdev, "Intr Mask=0x%x\n", state);
+
+       state = SKD_READL(skdev, FIT_MSG_FROM_DEVICE);
+       DPRINTK(skdev, "Msg from Dev=0x%x\n", state);
+
+       state = SKD_READL(skdev, FIT_HW_VERSION);
+       DPRINTK(skdev, "HW version=0x%x\n", state);
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+}
+
+static void skd_stop_device(struct skd_device *skdev)
+{
+       unsigned long flags;
+       struct skd_special_context *skspcl = &skdev->internal_skspcl;
+       u32 dev_state;
+       int i;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+
+       if (skdev->state != SKD_DRVR_STATE_ONLINE) {
+               pr_err("(%s): skd_stop_device not online no sync\n",
+                      skd_name(skdev));
+               goto stop_out;
+       }
+
+       if (skspcl->req.state != SKD_REQ_STATE_IDLE) {
+               pr_err("(%s): skd_stop_device no special\n",
+                      skd_name(skdev));
+               goto stop_out;
+       }
+
+       skdev->state = SKD_DRVR_STATE_SYNCING;
+       skdev->sync_done = 0;
+
+       skd_send_internal_skspcl(skdev, skspcl, SYNCHRONIZE_CACHE);
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+
+       wait_event_interruptible_timeout(skdev->waitq,
+                                        (skdev->sync_done), (10 * HZ));
+
+       spin_lock_irqsave(&skdev->lock, flags);
+
+       switch (skdev->sync_done) {
+       case 0:
+               pr_err("(%s): skd_stop_device no sync\n",
+                      skd_name(skdev));
+               break;
+       case 1:
+               pr_err("(%s): skd_stop_device sync done\n",
+                      skd_name(skdev));
+               break;
+       default:
+               pr_err("(%s): skd_stop_device sync error\n",
+                      skd_name(skdev));
+       }
+
+stop_out:
+       skdev->state = SKD_DRVR_STATE_STOPPING;
+       spin_unlock_irqrestore(&skdev->lock, flags);
+
+       skd_kill_timer(skdev);
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       skd_disable_interrupts(skdev);
+
+       /* ensure all ints on device are cleared */
+       /* soft reset the device to unload with a clean slate */
+       SKD_WRITEL(skdev, FIT_INT_DEF_MASK, FIT_INT_STATUS_HOST);
+       SKD_WRITEL(skdev, FIT_CR_SOFT_RESET, FIT_CONTROL);
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+
+       /* poll every 100ms, 1 second timeout */
+       for (i = 0; i < 10; i++) {
+               dev_state =
+                       SKD_READL(skdev, FIT_STATUS) & FIT_SR_DRIVE_STATE_MASK;
+               if (dev_state == FIT_SR_DRIVE_INIT)
+                       break;
+               set_current_state(TASK_INTERRUPTIBLE);
+               schedule_timeout(msecs_to_jiffies(100));
+       }
+
+       if (dev_state != FIT_SR_DRIVE_INIT)
+               pr_err("(%s): skd_stop_device state error 0x%02x\n",
+                      skd_name(skdev), dev_state);
+}
+
+/* assume spinlock is held */
+static void skd_restart_device(struct skd_device *skdev)
+{
+       u32 state;
+
+       /* ack all ghost interrupts */
+       SKD_WRITEL(skdev, FIT_INT_DEF_MASK, FIT_INT_STATUS_HOST);
+
+       state = SKD_READL(skdev, FIT_STATUS);
+
+       DPRINTK(skdev, "drive status=0x%x\n", state);
+
+       state &= FIT_SR_DRIVE_STATE_MASK;
+       skdev->drive_state = state;
+       skdev->last_mtd = 0;
+
+       skdev->state = SKD_DRVR_STATE_RESTARTING;
+       skdev->timer_countdown = SKD_RESTARTING_TIMO;
+
+       skd_soft_reset(skdev);
+}
+
+/* assume spinlock is held */
+static int skd_quiesce_dev(struct skd_device *skdev)
+{
+       int rc = 0;
+
+       switch (skdev->state) {
+       case SKD_DRVR_STATE_BUSY:
+       case SKD_DRVR_STATE_BUSY_IMMINENT:
+               VPRINTK(skdev, "stopping %s queue\n", skdev->name);
+               skd_stop_queue(skdev);
+               break;
+       case SKD_DRVR_STATE_ONLINE:
+       case SKD_DRVR_STATE_STOPPING:
+       case SKD_DRVR_STATE_SYNCING:
+       case SKD_DRVR_STATE_PAUSING:
+       case SKD_DRVR_STATE_PAUSED:
+       case SKD_DRVR_STATE_STARTING:
+       case SKD_DRVR_STATE_RESTARTING:
+       case SKD_DRVR_STATE_RESUMING:
+       default:
+               rc = -EINVAL;
+               VPRINTK(skdev, "state [%d] not implemented\n", skdev->state);
+       }
+       return rc;
+}
+
+/* assume spinlock is held */
+static int skd_unquiesce_dev(struct skd_device *skdev)
+{
+       int prev_driver_state = skdev->state;
+
+       skd_log_skdev(skdev, "unquiesce");
+       if (skdev->state == SKD_DRVR_STATE_ONLINE) {
+               DPRINTK(skdev, "**** device already ONLINE\n");
+               return 0;
+       }
+       if (skdev->drive_state != FIT_SR_DRIVE_ONLINE) {
+               /*
+                * If there has been an state change to other than
+                * ONLINE, we will rely on controller state change
+                * to come back online and restart the queue.
+                * The BUSY state means that driver is ready to
+                * continue normal processing but waiting for controller
+                * to become available.
+                */
+               skdev->state = SKD_DRVR_STATE_BUSY;
+               DPRINTK(skdev, "drive BUSY state\n");
+               return 0;
+       }
+
+       /*
+        * Drive has just come online, driver is either in startup,
+        * paused performing a task, or bust waiting for hardware.
+        */
+       switch (skdev->state) {
+       case SKD_DRVR_STATE_PAUSED:
+       case SKD_DRVR_STATE_BUSY:
+       case SKD_DRVR_STATE_BUSY_IMMINENT:
+       case SKD_DRVR_STATE_BUSY_ERASE:
+       case SKD_DRVR_STATE_STARTING:
+       case SKD_DRVR_STATE_RESTARTING:
+       case SKD_DRVR_STATE_FAULT:
+       case SKD_DRVR_STATE_IDLE:
+       case SKD_DRVR_STATE_LOAD:
+               skdev->state = SKD_DRVR_STATE_ONLINE;
+               pr_err("(%s): Driver state %s(%d)=>%s(%d)\n",
+                      skd_name(skdev),
+                      skd_skdev_state_to_str(prev_driver_state),
+                      prev_driver_state, skd_skdev_state_to_str(skdev->state),
+                      skdev->state);
+               DPRINTK(skdev, "**** device ONLINE...starting block queue\n");
+               VPRINTK(skdev, "starting %s queue\n", skdev->name);
+               pr_info("(%s): STEC s1120 ONLINE\n", skd_name(skdev));
+               skd_start_queue(skdev);
+               skdev->gendisk_on = 1;
+               wake_up_interruptible(&skdev->waitq);
+               break;
+
+       case SKD_DRVR_STATE_DISAPPEARED:
+       default:
+               DPRINTK(skdev, "**** driver state %d, not implemented \n",
+                       skdev->state);
+               return -EBUSY;
+       }
+       return 0;
+}
+
+/*
+ *****************************************************************************
+ * PCIe MSI/MSI-X INTERRUPT HANDLERS
+ *****************************************************************************
+ */
+
+static irqreturn_t skd_reserved_isr(int irq, void *skd_host_data)
+{
+       struct skd_device *skdev = skd_host_data;
+       unsigned long flags;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       VPRINTK(skdev, "MSIX = 0x%x\n", SKD_READL(skdev, FIT_INT_STATUS_HOST));
+       pr_err("(%s): MSIX reserved irq %d = 0x%x\n", skd_name(skdev),
+              irq, SKD_READL(skdev, FIT_INT_STATUS_HOST));
+       SKD_WRITEL(skdev, FIT_INT_RESERVED_MASK, FIT_INT_STATUS_HOST);
+       spin_unlock_irqrestore(&skdev->lock, flags);
+       return IRQ_HANDLED;
+}
+
+static irqreturn_t skd_statec_isr(int irq, void *skd_host_data)
+{
+       struct skd_device *skdev = skd_host_data;
+       unsigned long flags;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       VPRINTK(skdev, "MSIX = 0x%x\n", SKD_READL(skdev, FIT_INT_STATUS_HOST));
+       SKD_WRITEL(skdev, FIT_ISH_FW_STATE_CHANGE, FIT_INT_STATUS_HOST);
+       skd_isr_fwstate(skdev);
+       spin_unlock_irqrestore(&skdev->lock, flags);
+       return IRQ_HANDLED;
+}
+
+static irqreturn_t skd_comp_q(int irq, void *skd_host_data)
+{
+       struct skd_device *skdev = skd_host_data;
+       unsigned long flags;
+       int flush_enqueued = 0;
+       int deferred;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       VPRINTK(skdev, "MSIX = 0x%x\n", SKD_READL(skdev, FIT_INT_STATUS_HOST));
+       SKD_WRITEL(skdev, FIT_ISH_COMPLETION_POSTED, FIT_INT_STATUS_HOST);
+       deferred = skd_isr_completion_posted(skdev, skd_isr_comp_limit,
+                                               &flush_enqueued);
+
+       if (flush_enqueued)
+               skd_request_fn(skdev->queue);
+
+       if (deferred)
+               schedule_work(&skdev->completion_worker);
+       else if (!flush_enqueued)
+               skd_request_fn(skdev->queue);
+
+       spin_unlock_irqrestore(&skdev->lock, flags);
+
+       return IRQ_HANDLED;
+}
+
+static irqreturn_t skd_msg_isr(int irq, void *skd_host_data)
+{
+       struct skd_device *skdev = skd_host_data;
+       unsigned long flags;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       VPRINTK(skdev, "MSIX = 0x%x\n", SKD_READL(skdev, FIT_INT_STATUS_HOST));
+       SKD_WRITEL(skdev, FIT_ISH_MSG_FROM_DEV, FIT_INT_STATUS_HOST);
+       skd_isr_msg_from_dev(skdev);
+       spin_unlock_irqrestore(&skdev->lock, flags);
+       return IRQ_HANDLED;
+}
+
+static irqreturn_t skd_qfull_isr(int irq, void *skd_host_data)
+{
+       struct skd_device *skdev = skd_host_data;
+       unsigned long flags;
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       VPRINTK(skdev, "MSIX = 0x%x\n", SKD_READL(skdev, FIT_INT_STATUS_HOST));
+       SKD_WRITEL(skdev, FIT_INT_QUEUE_FULL, FIT_INT_STATUS_HOST);
+       spin_unlock_irqrestore(&skdev->lock, flags);
+       return IRQ_HANDLED;
+}
+
+/*
+ *****************************************************************************
+ * PCIe MSI/MSI-X SETUP
+ *****************************************************************************
+ */
+
+struct skd_msix_entry {
+       int have_irq;
+       u32 vector;
+       u32 entry;
+       struct skd_device *rsp;
+       char isr_name[30];
+};
+
+struct skd_init_msix_entry {
+       const char *name;
+       irq_handler_t handler;
+};
+
+#define SKD_MAX_MSIX_COUNT              13
+#define SKD_MIN_MSIX_COUNT              7
+#define SKD_BASE_MSIX_IRQ               4
+
+static struct skd_init_msix_entry msix_entries[SKD_MAX_MSIX_COUNT] = {
+       { "(DMA 0)",        skd_reserved_isr },
+       { "(DMA 1)",        skd_reserved_isr },
+       { "(DMA 2)",        skd_reserved_isr },
+       { "(DMA 3)",        skd_reserved_isr },
+       { "(State Change)", skd_statec_isr   },
+       { "(COMPL_Q)",      skd_comp_q       },
+       { "(MSG)",          skd_msg_isr      },
+       { "(Reserved)",     skd_reserved_isr },
+       { "(Reserved)",     skd_reserved_isr },
+       { "(Queue Full 0)", skd_qfull_isr    },
+       { "(Queue Full 1)", skd_qfull_isr    },
+       { "(Queue Full 2)", skd_qfull_isr    },
+       { "(Queue Full 3)", skd_qfull_isr    },
+};
+
+static void skd_release_msix(struct skd_device *skdev)
+{
+       struct skd_msix_entry *qentry;
+       int i;
+
+       if (skdev->msix_entries == NULL)
+               return;
+       for (i = 0; i < skdev->msix_count; i++) {
+               qentry = &skdev->msix_entries[i];
+               skdev = qentry->rsp;
+
+               if (qentry->have_irq)
+                       devm_free_irq(&skdev->pdev->dev,
+                                     qentry->vector, qentry->rsp);
+       }
+       pci_disable_msix(skdev->pdev);
+       kfree(skdev->msix_entries);
+       skdev->msix_count = 0;
+       skdev->msix_entries = NULL;
+}
+
+static int skd_acquire_msix(struct skd_device *skdev)
+{
+       int i, rc;
+       struct pci_dev *pdev;
+       struct msix_entry *entries = NULL;
+       struct skd_msix_entry *qentry;
+
+       pdev = skdev->pdev;
+       skdev->msix_count = SKD_MAX_MSIX_COUNT;
+       entries = kzalloc(sizeof(struct msix_entry) * SKD_MAX_MSIX_COUNT,
+                         GFP_KERNEL);
+       if (!entries)
+               return -ENOMEM;
+
+       for (i = 0; i < SKD_MAX_MSIX_COUNT; i++)
+               entries[i].entry = i;
+
+       rc = pci_enable_msix(pdev, entries, SKD_MAX_MSIX_COUNT);
+       if (rc < 0)
+               goto msix_out;
+       if (rc) {
+               if (rc < SKD_MIN_MSIX_COUNT) {
+                       pr_err("(%s): failed to enable MSI-X %d\n",
+                              skd_name(skdev), rc);
+                       goto msix_out;
+               }
+               DPRINTK(skdev, "%s: <%s> allocated %d MSI-X vectors\n",
+                       pci_name(pdev), skdev->name, rc);
+
+               skdev->msix_count = rc;
+               rc = pci_enable_msix(pdev, entries, skdev->msix_count);
+               if (rc) {
+                       pr_err("(%s): failed to enable MSI-X "
+                              "support (%d) %d\n",
+                              skd_name(skdev), skdev->msix_count, rc);
+                       goto msix_out;
+               }
+       }
+       skdev->msix_entries = kzalloc(sizeof(struct skd_msix_entry) *
+                                     skdev->msix_count, GFP_KERNEL);
+       if (!skdev->msix_entries) {
+               rc = -ENOMEM;
+               skdev->msix_count = 0;
+               pr_err("(%s): msix table allocation error\n",
+                      skd_name(skdev));
+               goto msix_out;
+       }
+
+       qentry = skdev->msix_entries;
+       for (i = 0; i < skdev->msix_count; i++) {
+               qentry->vector = entries[i].vector;
+               qentry->entry = entries[i].entry;
+               qentry->rsp = NULL;
+               qentry->have_irq = 0;
+               DPRINTK(skdev, "%s: <%s> msix (%d) vec %d, entry %x\n",
+                       pci_name(pdev), skdev->name,
+                       i, qentry->vector, qentry->entry);
+               qentry++;
+       }
+
+       /* Enable MSI-X vectors for the base queue */
+       for (i = 0; i < SKD_MAX_MSIX_COUNT; i++) {
+               qentry = &skdev->msix_entries[i];
+               snprintf(qentry->isr_name, sizeof(qentry->isr_name),
+                        "%s%d-msix %s", DRV_NAME, skdev->devno,
+                        msix_entries[i].name);
+               rc = devm_request_irq(&skdev->pdev->dev, qentry->vector,
+                                     msix_entries[i].handler, 0,
+                                     qentry->isr_name, skdev);
+               if (rc) {
+                       pr_err("(%s): Unable to register(%d) MSI-X "
+                              "handler %d: %s\n",
+                              skd_name(skdev), rc, i, qentry->isr_name);
+                       goto msix_out;
+               } else {
+                       qentry->have_irq = 1;
+                       qentry->rsp = skdev;
+               }
+       }
+       DPRINTK(skdev, "%s: <%s> msix %d irq(s) enabled\n",
+               pci_name(pdev), skdev->name, skdev->msix_count);
+       return 0;
+
+msix_out:
+       if (entries)
+               kfree(entries);
+       skd_release_msix(skdev);
+       return rc;
+}
+
+static int skd_acquire_irq(struct skd_device *skdev)
+{
+       int rc;
+       struct pci_dev *pdev;
+
+       pdev = skdev->pdev;
+       skdev->msix_count = 0;
+
+RETRY_IRQ_TYPE:
+       switch (skdev->irq_type) {
+       case SKD_IRQ_MSIX:
+               rc = skd_acquire_msix(skdev);
+               if (!rc)
+                       pr_info("(%s): MSI-X %d irqs enabled\n",
+                              skd_name(skdev), skdev->msix_count);
+               else {
+                       pr_err(
+                              "(%s): failed to enable MSI-X, re-trying with MSI %d\n",
+                              skd_name(skdev), rc);
+                       skdev->irq_type = SKD_IRQ_MSI;
+                       goto RETRY_IRQ_TYPE;
+               }
+               break;
+       case SKD_IRQ_MSI:
+               snprintf(skdev->isr_name, sizeof(skdev->isr_name), "%s%d-msi",
+                        DRV_NAME, skdev->devno);
+               rc = pci_enable_msi(pdev);
+               if (!rc) {
+                       rc = devm_request_irq(&pdev->dev, pdev->irq, skd_isr, 0,
+                                             skdev->isr_name, skdev);
+                       if (rc) {
+                               pci_disable_msi(pdev);
+                               pr_err(
+                                      "(%s): failed to allocate the MSI interrupt %d\n",
+                                      skd_name(skdev), rc);
+                               goto RETRY_IRQ_LEGACY;
+                       }
+                       pr_info("(%s): MSI irq %d enabled\n",
+                              skd_name(skdev), pdev->irq);
+               } else {
+RETRY_IRQ_LEGACY:
+                       pr_err(
+                              "(%s): failed to enable MSI, re-trying with LEGACY %d\n",
+                              skd_name(skdev), rc);
+                       skdev->irq_type = SKD_IRQ_LEGACY;
+                       goto RETRY_IRQ_TYPE;
+               }
+               break;
+       case SKD_IRQ_LEGACY:
+               snprintf(skdev->isr_name, sizeof(skdev->isr_name),
+                        "%s%d-legacy", DRV_NAME, skdev->devno);
+               rc = devm_request_irq(&pdev->dev, pdev->irq, skd_isr,
+                                     IRQF_SHARED, skdev->isr_name, skdev);
+               if (!rc)
+                       pr_info("(%s): LEGACY irq %d enabled\n",
+                              skd_name(skdev), pdev->irq);
+               else
+                       pr_err("(%s): request LEGACY irq error %d\n",
+                              skd_name(skdev), rc);
+               break;
+       default:
+               pr_info("(%s): irq_type %d invalid, re-set to %d\n",
+                      skd_name(skdev), skdev->irq_type, SKD_IRQ_DEFAULT);
+               skdev->irq_type = SKD_IRQ_LEGACY;
+               goto RETRY_IRQ_TYPE;
+       }
+       return rc;
+}
+
+static void skd_release_irq(struct skd_device *skdev)
+{
+       switch (skdev->irq_type) {
+       case SKD_IRQ_MSIX:
+               skd_release_msix(skdev);
+               break;
+       case SKD_IRQ_MSI:
+               devm_free_irq(&skdev->pdev->dev, skdev->pdev->irq, skdev);
+               pci_disable_msi(skdev->pdev);
+               break;
+       case SKD_IRQ_LEGACY:
+               devm_free_irq(&skdev->pdev->dev, skdev->pdev->irq, skdev);
+               break;
+       default:
+               pr_err("(%s): wrong irq type %d!",
+                      skd_name(skdev), skdev->irq_type);
+               break;
+       }
+}
+
+/*
+ *****************************************************************************
+ * CONSTRUCT
+ *****************************************************************************
+ */
+
+static int skd_cons_skcomp(struct skd_device *skdev);
+static int skd_cons_skmsg(struct skd_device *skdev);
+static int skd_cons_skreq(struct skd_device *skdev);
+static int skd_cons_skspcl(struct skd_device *skdev);
+static int skd_cons_sksb(struct skd_device *skdev);
+static struct fit_sg_descriptor *skd_cons_sg_list(struct skd_device *skdev,
+                                                 u32 n_sg,
+                                                 dma_addr_t *ret_dma_addr);
+static int skd_cons_disk(struct skd_device *skdev);
+
+#define SKD_N_DEV_TABLE         16u
+static u32 skd_next_devno;
+
+static struct skd_device *skd_construct(struct pci_dev *pdev)
+{
+       struct skd_device *skdev;
+       int blk_major = skd_major;
+       int rc;
+
+       skdev = kzalloc(sizeof(*skdev), GFP_KERNEL);
+
+       if (!skdev) {
+               pr_err(PFX "(%s): memory alloc failure\n",
+                      pci_name(pdev));
+               return NULL;
+       }
+
+       skdev->state = SKD_DRVR_STATE_LOAD;
+       skdev->pdev = pdev;
+       skdev->devno = skd_next_devno++;
+       skdev->major = blk_major;
+       skdev->irq_type = skd_isr_type;
+       sprintf(skdev->name, DRV_NAME "%d", skdev->devno);
+       skdev->dev_max_queue_depth = 0;
+
+       skdev->num_req_context = skd_max_queue_depth;
+       skdev->num_fitmsg_context = skd_max_queue_depth;
+       skdev->n_special = skd_max_pass_thru;
+       skdev->cur_max_queue_depth = 1;
+       skdev->queue_low_water_mark = 1;
+       skdev->proto_ver = 99;
+       skdev->sgs_per_request = skd_sgs_per_request;
+       skdev->dbg_level = skd_dbg_level;
+
+       if (skd_bio)
+               bio_list_init(&skdev->bio_queue);
+
+
+       atomic_set(&skdev->device_count, 0);
+
+       spin_lock_init(&skdev->lock);
+
+       INIT_WORK(&skdev->completion_worker, skd_completion_worker);
+       INIT_LIST_HEAD(&skdev->flush_list);
+
+       VPRINTK(skdev, "skcomp\n");
+       rc = skd_cons_skcomp(skdev);
+       if (rc < 0)
+               goto err_out;
+
+       VPRINTK(skdev, "skmsg\n");
+       rc = skd_cons_skmsg(skdev);
+       if (rc < 0)
+               goto err_out;
+
+       VPRINTK(skdev, "skreq\n");
+       rc = skd_cons_skreq(skdev);
+       if (rc < 0)
+               goto err_out;
+
+       VPRINTK(skdev, "skspcl\n");
+       rc = skd_cons_skspcl(skdev);
+       if (rc < 0)
+               goto err_out;
+
+       VPRINTK(skdev, "sksb\n");
+       rc = skd_cons_sksb(skdev);
+       if (rc < 0)
+               goto err_out;
+
+       VPRINTK(skdev, "disk\n");
+       rc = skd_cons_disk(skdev);
+       if (rc < 0)
+               goto err_out;
+
+
+
+       DPRINTK(skdev, "VICTORY\n");
+       return skdev;
+
+err_out:
+       DPRINTK(skdev, "construct failed\n");
+       skd_destruct(skdev);
+       return NULL;
+}
+
+static int skd_cons_skcomp(struct skd_device *skdev)
+{
+       int rc = 0;
+       struct fit_completion_entry_v1 *skcomp;
+       u32 nbytes;
+
+       nbytes = sizeof(*skcomp) * SKD_N_COMPLETION_ENTRY;
+       nbytes += sizeof(struct fit_comp_error_info) * SKD_N_COMPLETION_ENTRY;
+
+       VPRINTK(skdev, "comp pci_alloc, total bytes %d entries %d\n", nbytes,
+               SKD_N_COMPLETION_ENTRY);
+
+       skcomp = pci_alloc_consistent(skdev->pdev, nbytes,
+                                     &skdev->cq_dma_address);
+
+       if (skcomp == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       memset(skcomp, 0, nbytes);
+
+       skdev->skcomp_table = skcomp;
+       skdev->skerr_table = (struct fit_comp_error_info *)((char *)skcomp +
+                                                          sizeof(*skcomp) *
+                                                          SKD_N_COMPLETION_ENTRY);
+
+err_out:
+       return rc;
+}
+
+static int skd_cons_skmsg(struct skd_device *skdev)
+{
+       int rc = 0;
+       u32 i;
+
+       VPRINTK(skdev, "skmsg_table kzalloc, struct %lu, count %u total %lu\n",
+               sizeof(struct skd_fitmsg_context),
+               skdev->num_fitmsg_context,
+               sizeof(struct skd_fitmsg_context) * skdev->num_fitmsg_context);
+
+       skdev->skmsg_table = kzalloc(sizeof(struct skd_fitmsg_context)
+                                    *skdev->num_fitmsg_context, GFP_KERNEL);
+       if (skdev->skmsg_table == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       for (i = 0; i < skdev->num_fitmsg_context; i++) {
+               struct skd_fitmsg_context *skmsg;
+
+               skmsg = &skdev->skmsg_table[i];
+
+               skmsg->id = i + SKD_ID_FIT_MSG;
+
+               skmsg->state = SKD_MSG_STATE_IDLE;
+               skmsg->msg_buf = pci_alloc_consistent(skdev->pdev,
+                                                     SKD_N_FITMSG_BYTES + 64,
+                                                     &skmsg->mb_dma_address);
+
+               if (skmsg->msg_buf == NULL) {
+                       rc = -ENOMEM;
+                       goto err_out;
+               }
+
+               skmsg->offset = (u32)((u64)skmsg->msg_buf &
+                                     (~FIT_QCMD_BASE_ADDRESS_MASK));
+               skmsg->msg_buf += ~FIT_QCMD_BASE_ADDRESS_MASK;
+               skmsg->msg_buf = (u8 *)((u64)skmsg->msg_buf &
+                                      FIT_QCMD_BASE_ADDRESS_MASK);
+               skmsg->mb_dma_address += ~FIT_QCMD_BASE_ADDRESS_MASK;
+               skmsg->mb_dma_address &= FIT_QCMD_BASE_ADDRESS_MASK;
+               memset(skmsg->msg_buf, 0, SKD_N_FITMSG_BYTES);
+
+               skmsg->next = &skmsg[1];
+       }
+
+       /* Free list is in order starting with the 0th entry. */
+       skdev->skmsg_table[i - 1].next = NULL;
+       skdev->skmsg_free_list = skdev->skmsg_table;
+
+err_out:
+       return rc;
+}
+
+static int skd_cons_skreq(struct skd_device *skdev)
+{
+       int rc = 0;
+       u32 i;
+
+       VPRINTK(skdev, "skreq_table kzalloc, struct %lu, count %u total %lu\n",
+               sizeof(struct skd_request_context),
+               skdev->num_req_context,
+               sizeof(struct skd_request_context) * skdev->num_req_context);
+
+       skdev->skreq_table = kzalloc(sizeof(struct skd_request_context)
+                                    * skdev->num_req_context, GFP_KERNEL);
+       if (skdev->skreq_table == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       VPRINTK(skdev, "alloc sg_table sg_per_req %u scatlist %lu total %lu\n",
+               skdev->sgs_per_request, sizeof(struct scatterlist),
+               skdev->sgs_per_request * sizeof(struct scatterlist));
+
+       for (i = 0; i < skdev->num_req_context; i++) {
+               struct skd_request_context *skreq;
+
+               skreq = &skdev->skreq_table[i];
+
+               skreq->id = i + SKD_ID_RW_REQUEST;
+               skreq->state = SKD_REQ_STATE_IDLE;
+
+               skreq->sg = kzalloc(sizeof(struct scatterlist) *
+                                   skdev->sgs_per_request, GFP_KERNEL);
+               if (skreq->sg == NULL) {
+                       rc = -ENOMEM;
+                       goto err_out;
+               }
+               sg_init_table(skreq->sg, skdev->sgs_per_request);
+
+               skreq->sksg_list = skd_cons_sg_list(skdev,
+                                                   skdev->sgs_per_request,
+                                                   &skreq->sksg_dma_address);
+
+               if (skreq->sksg_list == NULL) {
+                       rc = -ENOMEM;
+                       goto err_out;
+               }
+
+               skreq->next = &skreq[1];
+       }
+
+       /* Free list is in order starting with the 0th entry. */
+       skdev->skreq_table[i - 1].next = NULL;
+       skdev->skreq_free_list = skdev->skreq_table;
+
+err_out:
+       return rc;
+}
+
+static int skd_cons_skspcl(struct skd_device *skdev)
+{
+       int rc = 0;
+       u32 i, nbytes;
+
+       VPRINTK(skdev, "skspcl_table kzalloc, struct %lu, count %u total %lu\n",
+               sizeof(struct skd_special_context),
+               skdev->n_special,
+               sizeof(struct skd_special_context) * skdev->n_special);
+
+       skdev->skspcl_table = kzalloc(sizeof(struct skd_special_context)
+                                     * skdev->n_special, GFP_KERNEL);
+       if (skdev->skspcl_table == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       for (i = 0; i < skdev->n_special; i++) {
+               struct skd_special_context *skspcl;
+
+               skspcl = &skdev->skspcl_table[i];
+
+               skspcl->req.id = i + SKD_ID_SPECIAL_REQUEST;
+               skspcl->req.state = SKD_REQ_STATE_IDLE;
+
+               skspcl->req.next = &skspcl[1].req;
+
+               nbytes = SKD_N_SPECIAL_FITMSG_BYTES;
+
+               skspcl->msg_buf = pci_alloc_consistent(skdev->pdev, nbytes,
+                                                      &skspcl->mb_dma_address);
+               if (skspcl->msg_buf == NULL) {
+                       rc = -ENOMEM;
+                       goto err_out;
+               }
+
+               memset(skspcl->msg_buf, 0, nbytes);
+
+               skspcl->req.sg = kzalloc(sizeof(struct scatterlist) *
+                                        SKD_N_SG_PER_SPECIAL, GFP_KERNEL);
+               if (skspcl->req.sg == NULL) {
+                       rc = -ENOMEM;
+                       goto err_out;
+               }
+
+               skspcl->req.sksg_list = skd_cons_sg_list(skdev,
+                                                        SKD_N_SG_PER_SPECIAL,
+                                                        &skspcl->req.
+                                                        sksg_dma_address);
+               if (skspcl->req.sksg_list == NULL) {
+                       rc = -ENOMEM;
+                       goto err_out;
+               }
+       }
+
+       /* Free list is in order starting with the 0th entry. */
+       skdev->skspcl_table[i - 1].req.next = NULL;
+       skdev->skspcl_free_list = skdev->skspcl_table;
+
+       return rc;
+
+err_out:
+       return rc;
+}
+
+static int skd_cons_sksb(struct skd_device *skdev)
+{
+       int rc = 0;
+       struct skd_special_context *skspcl;
+       u32 nbytes;
+
+       skspcl = &skdev->internal_skspcl;
+
+       skspcl->req.id = 0 + SKD_ID_INTERNAL;
+       skspcl->req.state = SKD_REQ_STATE_IDLE;
+
+       nbytes = SKD_N_INTERNAL_BYTES;
+
+       skspcl->data_buf = pci_alloc_consistent(skdev->pdev, nbytes,
+                                               &skspcl->db_dma_address);
+       if (skspcl->data_buf == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       memset(skspcl->data_buf, 0, nbytes);
+
+       nbytes = SKD_N_SPECIAL_FITMSG_BYTES;
+       skspcl->msg_buf = pci_alloc_consistent(skdev->pdev, nbytes,
+                                              &skspcl->mb_dma_address);
+       if (skspcl->msg_buf == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       memset(skspcl->msg_buf, 0, nbytes);
+
+       skspcl->req.sksg_list = skd_cons_sg_list(skdev, 1,
+                                                &skspcl->req.sksg_dma_address);
+       if (skspcl->req.sksg_list == NULL) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       if (!skd_format_internal_skspcl(skdev)) {
+               rc = -EINVAL;
+               goto err_out;
+       }
+
+err_out:
+       return rc;
+}
+
+static struct fit_sg_descriptor *skd_cons_sg_list(struct skd_device *skdev,
+                                                 u32 n_sg,
+                                                 dma_addr_t *ret_dma_addr)
+{
+       struct fit_sg_descriptor *sg_list;
+       u32 nbytes;
+
+       nbytes = sizeof(*sg_list) * n_sg;
+
+       sg_list = pci_alloc_consistent(skdev->pdev, nbytes, ret_dma_addr);
+
+       if (sg_list != NULL) {
+               uint64_t dma_address = *ret_dma_addr;
+               u32 i;
+
+               memset(sg_list, 0, nbytes);
+
+               for (i = 0; i < n_sg - 1; i++) {
+                       uint64_t ndp_off;
+                       ndp_off = (i + 1) * sizeof(struct fit_sg_descriptor);
+
+                       sg_list[i].next_desc_ptr = dma_address + ndp_off;
+               }
+               sg_list[i].next_desc_ptr = 0LL;
+       }
+
+       return sg_list;
+}
+
+static int skd_cons_disk(struct skd_device *skdev)
+{
+       int rc = 0;
+       struct gendisk *disk;
+       struct request_queue *q;
+       unsigned long flags;
+
+       disk = alloc_disk(SKD_MINORS_PER_DEVICE);
+       if (!disk) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       skdev->disk = disk;
+       sprintf(disk->disk_name, DRV_NAME "%u", skdev->devno);
+
+       disk->major = skdev->major;
+       disk->first_minor = skdev->devno * SKD_MINORS_PER_DEVICE;
+       disk->fops = &skd_blockdev_ops;
+       disk->private_data = skdev;
+
+       if (!skd_bio) {
+               q = blk_init_queue(skd_request_fn, &skdev->lock);
+       } else {
+               q = blk_alloc_queue(GFP_KERNEL);
+               q->queue_flags = QUEUE_FLAG_IO_STAT | QUEUE_FLAG_STACKABLE;
+       }
+
+       if (!q) {
+               rc = -ENOMEM;
+               goto err_out;
+       }
+
+       skdev->queue = q;
+       disk->queue = q;
+       q->queuedata = skdev;
+
+       if (skd_bio) {
+               q->queue_lock = &skdev->lock;
+               blk_queue_make_request(q, skd_make_request);
+       }
+
+       blk_queue_flush(q, REQ_FLUSH | REQ_FUA);
+       blk_queue_max_segments(q, skdev->sgs_per_request);
+       blk_queue_max_hw_sectors(q, SKD_N_MAX_SECTORS);
+
+       /* set sysfs ptimal_io_size to 8K */
+       blk_queue_io_opt(q, 8192);
+
+       /* DISCARD Flag initialization. */
+       q->limits.discard_granularity = 8192;
+       q->limits.discard_alignment = 0;
+       q->limits.max_discard_sectors = UINT_MAX >> 9;
+       q->limits.discard_zeroes_data = 1;
+       queue_flag_set_unlocked(QUEUE_FLAG_DISCARD, q);
+       queue_flag_set_unlocked(QUEUE_FLAG_NONROT, q);
+
+       spin_lock_irqsave(&skdev->lock, flags);
+       VPRINTK(skdev, "stopping %s queue\n", skdev->name);
+       skd_stop_queue(skdev);
+       spin_unlock_irqrestore(&skdev->lock, flags);
+
+err_out:
+       return rc;
+}
+
+/*
+ *****************************************************************************
+ * DESTRUCT (FREE)
+ *****************************************************************************
+ */
+
+static void skd_free_skcomp(struct skd_device *skdev);
+static void skd_free_skmsg(struct skd_device *skdev);
+static void skd_free_skreq(struct skd_device *skdev);
+static void skd_free_skspcl(struct skd_device *skdev);
+static void skd_free_sksb(struct skd_device *skdev);
+static void skd_free_sg_list(struct skd_device *skdev,
+                            struct fit_sg_descriptor *sg_list,
+                            u32 n_sg, dma_addr_t dma_addr);
+static void skd_free_disk(struct skd_device *skdev);
+
+static void skd_destruct(struct skd_device *skdev)
+{
+       if (skdev == NULL)
+               return;
+
+
+       VPRINTK(skdev, "disk\n");
+       skd_free_disk(skdev);
+
+       VPRINTK(skdev, "sksb\n");
+       skd_free_sksb(skdev);
+
+       VPRINTK(skdev, "skspcl\n");
+       skd_free_skspcl(skdev);
+
+       VPRINTK(skdev, "skreq\n");
+       skd_free_skreq(skdev);
+
+       VPRINTK(skdev, "skmsg\n");
+       skd_free_skmsg(skdev);
+
+       VPRINTK(skdev, "skcomp\n");
+       skd_free_skcomp(skdev);
+
+       VPRINTK(skdev, "skdev\n");
+       kfree(skdev);
+}
+
+static void skd_free_skcomp(struct skd_device *skdev)
+{
+       if (skdev->skcomp_table != NULL) {
+               u32 nbytes;
+
+               nbytes = sizeof(skdev->skcomp_table[0]) *
+                        SKD_N_COMPLETION_ENTRY;
+               pci_free_consistent(skdev->pdev, nbytes,
+                                   skdev->skcomp_table, skdev->cq_dma_address);
+       }
+
+       skdev->skcomp_table = NULL;
+       skdev->cq_dma_address = 0;
+}
+
+static void skd_free_skmsg(struct skd_device *skdev)
+{
+       u32 i;
+
+       if (skdev->skmsg_table == NULL)
+               return;
+
+       for (i = 0; i < skdev->num_fitmsg_context; i++) {
+               struct skd_fitmsg_context *skmsg;
+
+               skmsg = &skdev->skmsg_table[i];
+
+               if (skmsg->msg_buf != NULL) {
+                       skmsg->msg_buf += skmsg->offset;
+                       skmsg->mb_dma_address += skmsg->offset;
+                       pci_free_consistent(skdev->pdev, SKD_N_FITMSG_BYTES,
+                                           skmsg->msg_buf,
+                                           skmsg->mb_dma_address);
+               }
+               skmsg->msg_buf = NULL;
+               skmsg->mb_dma_address = 0;
+       }
+
+       kfree(skdev->skmsg_table);
+       skdev->skmsg_table = NULL;
+}
+
+static void skd_free_skreq(struct skd_device *skdev)
+{
+       u32 i;
+
+       if (skdev->skreq_table == NULL)
+               return;
+
+       for (i = 0; i < skdev->num_req_context; i++) {
+               struct skd_request_context *skreq;
+
+               skreq = &skdev->skreq_table[i];
+
+               skd_free_sg_list(skdev, skreq->sksg_list,
+                                skdev->sgs_per_request,
+                                skreq->sksg_dma_address);
+
+               skreq->sksg_list = NULL;
+               skreq->sksg_dma_address = 0;
+
+               kfree(skreq->sg);
+       }
+
+       kfree(skdev->skreq_table);
+       skdev->skreq_table = NULL;
+}
+
+static void skd_free_skspcl(struct skd_device *skdev)
+{
+       u32 i;
+       u32 nbytes;
+
+       if (skdev->skspcl_table == NULL)
+               return;
+
+       for (i = 0; i < skdev->n_special; i++) {
+               struct skd_special_context *skspcl;
+
+               skspcl = &skdev->skspcl_table[i];
+
+               if (skspcl->msg_buf != NULL) {
+                       nbytes = SKD_N_SPECIAL_FITMSG_BYTES;
+                       pci_free_consistent(skdev->pdev, nbytes,
+                                           skspcl->msg_buf,
+                                           skspcl->mb_dma_address);
+               }
+
+               skspcl->msg_buf = NULL;
+               skspcl->mb_dma_address = 0;
+
+               skd_free_sg_list(skdev, skspcl->req.sksg_list,
+                                SKD_N_SG_PER_SPECIAL,
+                                skspcl->req.sksg_dma_address);
+
+               skspcl->req.sksg_list = NULL;
+               skspcl->req.sksg_dma_address = 0;
+
+               kfree(skspcl->req.sg);
+       }
+
+       kfree(skdev->skspcl_table);
+       skdev->skspcl_table = NULL;
+}
+
+static void skd_free_sksb(struct skd_device *skdev)
+{
+       struct skd_special_context *skspcl;
+       u32 nbytes;
+
+       skspcl = &skdev->internal_skspcl;
+
+       if (skspcl->data_buf != NULL) {
+               nbytes = SKD_N_INTERNAL_BYTES;
+
+               pci_free_consistent(skdev->pdev, nbytes,
+                                   skspcl->data_buf, skspcl->db_dma_address);
+       }
+
+       skspcl->data_buf = NULL;
+       skspcl->db_dma_address = 0;
+
+       if (skspcl->msg_buf != NULL) {
+               nbytes = SKD_N_SPECIAL_FITMSG_BYTES;
+               pci_free_consistent(skdev->pdev, nbytes,
+                                   skspcl->msg_buf, skspcl->mb_dma_address);
+       }
+
+       skspcl->msg_buf = NULL;
+       skspcl->mb_dma_address = 0;
+
+       skd_free_sg_list(skdev, skspcl->req.sksg_list, 1,
+                        skspcl->req.sksg_dma_address);
+
+       skspcl->req.sksg_list = NULL;
+       skspcl->req.sksg_dma_address = 0;
+}
+
+static void skd_free_sg_list(struct skd_device *skdev,
+                            struct fit_sg_descriptor *sg_list,
+                            u32 n_sg, dma_addr_t dma_addr)
+{
+       if (sg_list != NULL) {
+               u32 nbytes;
+
+               nbytes = sizeof(*sg_list) * n_sg;
+
+               pci_free_consistent(skdev->pdev, nbytes, sg_list, dma_addr);
+       }
+}
+
+static void skd_free_disk(struct skd_device *skdev)
+{
+       struct gendisk *disk = skdev->disk;
+
+       if (disk != NULL) {
+               struct request_queue *q = disk->queue;
+
+               if (disk->flags & GENHD_FL_UP)
+                       del_gendisk(disk);
+               if (q)
+                       blk_cleanup_queue(q);
+               put_disk(disk);
+       }
+       skdev->disk = NULL;
+}
+
+
+
+/*
+ *****************************************************************************
+ * BLOCK DEVICE (BDEV) GLUE
+ *****************************************************************************
+ */
+
+static int skd_bdev_getgeo(struct block_device *bdev, struct hd_geometry *geo)
+{
+       struct skd_device *skdev;
+       u64 capacity;
+
+       skdev = bdev->bd_disk->private_data;
+
+       DPRINTK(skdev, "%s: CMD[%s] getgeo device\n",
+               bdev->bd_disk->disk_name, current->comm);
+
+       if (skdev->read_cap_is_valid) {
+               capacity = get_capacity(skdev->disk);
+               geo->heads = 64;
+               geo->sectors = 255;
+               geo->cylinders = (capacity) / (255 * 64);
+
+               return 0;
+       }
+       return -EIO;
+}
+
+static int skd_bdev_attach(struct skd_device *skdev)
+{
+       DPRINTK(skdev, "add_disk\n");
+       add_disk(skdev->disk);
+       return 0;
+}
+
+static const struct block_device_operations skd_blockdev_ops = {
+       .owner          = THIS_MODULE,
+       .ioctl          = skd_bdev_ioctl,
+       .getgeo         = skd_bdev_getgeo,
+};
+
+
+/*
+ *****************************************************************************
+ * PCIe DRIVER GLUE
+ *****************************************************************************
+ */
+
+static DEFINE_PCI_DEVICE_TABLE(skd_pci_tbl) = {
+       { PCI_VENDOR_ID_STEC, PCI_DEVICE_ID_S1120,
+         PCI_ANY_ID, PCI_ANY_ID, 0, 0, },
+       { 0 }                     /* terminate list */
+};
+
+MODULE_DEVICE_TABLE(pci, skd_pci_tbl);
+
+static char *skd_pci_info(struct skd_device *skdev, char *str)
+{
+       int pcie_reg;
+
+       strcpy(str, "PCIe (");
+       pcie_reg = pci_find_capability(skdev->pdev, PCI_CAP_ID_EXP);
+
+       if (pcie_reg) {
+
+               char lwstr[6];
+               uint16_t pcie_lstat, lspeed, lwidth;
+
+               pcie_reg += 0x12;
+               pci_read_config_word(skdev->pdev, pcie_reg, &pcie_lstat);
+               lspeed = pcie_lstat & (0xF);
+               lwidth = (pcie_lstat & 0x3F0) >> 4;
+
+               if (lspeed == 1)
+                       strcat(str, "2.5GT/s ");
+               else if (lspeed == 2)
+                       strcat(str, "5.0GT/s ");
+               else
+                       strcat(str, "<unknown> ");
+               snprintf(lwstr, sizeof(lwstr), "%dX)", lwidth);
+               strcat(str, lwstr);
+       }
+       return str;
+}
+
+static int skd_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
+{
+       int i;
+       int rc = 0;
+       char pci_str[32];
+       struct skd_device *skdev;
+
+       pr_info("STEC s1120 Driver(%s) version %s-b%s\n",
+              DRV_NAME, DRV_VERSION, DRV_BUILD_ID);
+       pr_info("(skd?:??:[%s]): vendor=%04X device=%04x\n",
+              pci_name(pdev), pdev->vendor, pdev->device);
+
+       rc = pci_enable_device(pdev);
+       if (rc)
+               return rc;
+       rc = pci_request_regions(pdev, DRV_NAME);
+       if (rc)
+               goto err_out;
+       rc = pci_set_dma_mask(pdev, DMA_BIT_MASK(64));
+       if (!rc) {
+               if (pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(64))) {
+
+                       pr_err("(%s): consistent DMA mask error %d\n",
+                              pci_name(pdev), rc);
+               }
+       } else {
+               (rc = pci_set_dma_mask(pdev, DMA_BIT_MASK(32)));
+               if (rc) {
+
+                       pr_err("(%s): DMA mask error %d\n",
+                              pci_name(pdev), rc);
+                       goto err_out_regions;
+               }
+       }
+
+       skdev = skd_construct(pdev);
+       if (skdev == NULL)
+               goto err_out_regions;
+
+       skd_pci_info(skdev, pci_str);
+       pr_info("(%s): %s 64bit\n", skd_name(skdev), pci_str);
+
+       pci_set_master(pdev);
+       rc = pci_enable_pcie_error_reporting(pdev);
+       if (rc) {
+               pr_err(
+                      "(%s): bad enable of PCIe error reporting rc=%d\n",
+                      skd_name(skdev), rc);
+               skdev->pcie_error_reporting_is_enabled = 0;
+       } else
+               skdev->pcie_error_reporting_is_enabled = 1;
+
+
+       pci_set_drvdata(pdev, skdev);
+       skdev->pdev = pdev;
+       skdev->disk->driverfs_dev = &pdev->dev;
+
+       for (i = 0; i < SKD_MAX_BARS; i++) {
+               skdev->mem_phys[i] = pci_resource_start(pdev, i);
+               skdev->mem_size[i] = (u32)pci_resource_len(pdev, i);
+               skdev->mem_map[i] = ioremap(skdev->mem_phys[i],
+                                           skdev->mem_size[i]);
+               if (!skdev->mem_map[i]) {
+                       pr_err("(%s): Unable to map adapter memory!\n",
+                              skd_name(skdev));
+                       rc = -ENODEV;
+                       goto err_out_iounmap;
+               }
+               DPRINTK(skdev, "mem_map=%p, phyd=%016llx, size=%d\n",
+                       skdev->mem_map[i],
+                       (uint64_t)skdev->mem_phys[i], skdev->mem_size[i]);
+       }
+
+       rc = skd_acquire_irq(skdev);
+       if (rc) {
+               pr_err("(%s): interrupt resource error %d\n",
+                      skd_name(skdev), rc);
+               goto err_out_iounmap;
+       }
+
+       rc = skd_start_timer(skdev);
+       if (rc)
+               goto err_out_timer;
+
+       init_waitqueue_head(&skdev->waitq);
+
+       skd_start_device(skdev);
+
+       rc = wait_event_interruptible_timeout(skdev->waitq,
+                                             (skdev->gendisk_on),
+                                             (SKD_START_WAIT_SECONDS * HZ));
+       if (skdev->gendisk_on > 0) {
+               /* device came on-line after reset */
+               skd_bdev_attach(skdev);
+               rc = 0;
+       } else {
+               /* we timed out, something is wrong with the device,
+                  don't add the disk structure */
+               pr_err(
+                      "(%s): error: waiting for s1120 timed out %d!\n",
+                      skd_name(skdev), rc);
+               /* in case of no error; we timeout with ENXIO */
+               if (!rc)
+                       rc = -ENXIO;
+               goto err_out_timer;
+       }
+
+
+#ifdef SKD_VMK_POLL_HANDLER
+       if (skdev->irq_type == SKD_IRQ_MSIX) {
+               /* MSIX completion handler is being used for coredump */
+               vmklnx_scsi_register_poll_handler(skdev->scsi_host,
+                                                 skdev->msix_entries[5].vector,
+                                                 skd_comp_q, skdev);
+       } else {
+               vmklnx_scsi_register_poll_handler(skdev->scsi_host,
+                                                 skdev->pdev->irq, skd_isr,
+                                                 skdev);
+       }
+#endif  /* SKD_VMK_POLL_HANDLER */
+
+       return rc;
+
+err_out_timer:
+       skd_stop_device(skdev);
+       skd_release_irq(skdev);
+
+err_out_iounmap:
+       for (i = 0; i < SKD_MAX_BARS; i++)
+               if (skdev->mem_map[i])
+                       iounmap(skdev->mem_map[i]);
+
+       if (skdev->pcie_error_reporting_is_enabled)
+               pci_disable_pcie_error_reporting(pdev);
+
+       skd_destruct(skdev);
+
+err_out_regions:
+       pci_release_regions(pdev);
+
+err_out:
+       pci_disable_device(pdev);
+       pci_set_drvdata(pdev, NULL);
+       return rc;
+}
+
+static void skd_pci_remove(struct pci_dev *pdev)
+{
+       int i;
+       struct skd_device *skdev;
+
+       skdev = pci_get_drvdata(pdev);
+       if (!skdev) {
+               pr_err("%s: no device data for PCI\n", pci_name(pdev));
+               return;
+       }
+       skd_stop_device(skdev);
+       skd_release_irq(skdev);
+
+       for (i = 0; i < SKD_MAX_BARS; i++)
+               if (skdev->mem_map[i])
+                       iounmap((u32 *)skdev->mem_map[i]);
+
+       if (skdev->pcie_error_reporting_is_enabled)
+               pci_disable_pcie_error_reporting(pdev);
+
+       skd_destruct(skdev);
+
+       pci_release_regions(pdev);
+       pci_disable_device(pdev);
+       pci_set_drvdata(pdev, NULL);
+
+       return;
+}
+
+static int skd_pci_suspend(struct pci_dev *pdev, pm_message_t state)
+{
+       int i;
+       struct skd_device *skdev;
+
+       skdev = pci_get_drvdata(pdev);
+       if (!skdev) {
+               pr_err("%s: no device data for PCI\n", pci_name(pdev));
+               return -EIO;
+       }
+
+       skd_stop_device(skdev);
+
+       skd_release_irq(skdev);
+
+       for (i = 0; i < SKD_MAX_BARS; i++)
+               if (skdev->mem_map[i])
+                       iounmap((u32 *)skdev->mem_map[i]);
+
+       if (skdev->pcie_error_reporting_is_enabled)
+               pci_disable_pcie_error_reporting(pdev);
+
+       pci_release_regions(pdev);
+       pci_save_state(pdev);
+       pci_disable_device(pdev);
+       pci_set_power_state(pdev, pci_choose_state(pdev, state));
+       return 0;
+}
+
+static int skd_pci_resume(struct pci_dev *pdev)
+{
+       int i;
+       int rc = 0;
+       struct skd_device *skdev;
+
+       skdev = pci_get_drvdata(pdev);
+       if (!skdev) {
+               pr_err("%s: no device data for PCI\n", pci_name(pdev));
+               return -1;
+       }
+
+       pci_set_power_state(pdev, PCI_D0);
+       pci_enable_wake(pdev, PCI_D0, 0);
+       pci_restore_state(pdev);
+
+       rc = pci_enable_device(pdev);
+       if (rc)
+               return rc;
+       rc = pci_request_regions(pdev, DRV_NAME);
+       if (rc)
+               goto err_out;
+       rc = pci_set_dma_mask(pdev, DMA_BIT_MASK(64));
+       if (!rc) {
+               if (pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(64))) {
+
+                       pr_err("(%s): consistent DMA mask error %d\n",
+                              pci_name(pdev), rc);
+               }
+       } else {
+               rc = pci_set_dma_mask(pdev, DMA_BIT_MASK(32));
+               if (rc) {
+
+                       pr_err("(%s): DMA mask error %d\n",
+                              pci_name(pdev), rc);
+                       goto err_out_regions;
+               }
+       }
+
+       pci_set_master(pdev);
+       rc = pci_enable_pcie_error_reporting(pdev);
+       if (rc) {
+               pr_err("(%s): bad enable of PCIe error reporting rc=%d\n",
+                      skdev->name, rc);
+               skdev->pcie_error_reporting_is_enabled = 0;
+       } else
+               skdev->pcie_error_reporting_is_enabled = 1;
+
+       for (i = 0; i < SKD_MAX_BARS; i++) {
+
+               skdev->mem_phys[i] = pci_resource_start(pdev, i);
+               skdev->mem_size[i] = (u32)pci_resource_len(pdev, i);
+               skdev->mem_map[i] = ioremap(skdev->mem_phys[i],
+                                           skdev->mem_size[i]);
+               if (!skdev->mem_map[i]) {
+                       pr_err("(%s): Unable to map adapter memory!\n",
+                              skd_name(skdev));
+                       rc = -ENODEV;
+                       goto err_out_iounmap;
+               }
+               DPRINTK(skdev, "mem_map=%p, phyd=%016llx, size=%d\n",
+                       skdev->mem_map[i],
+                       (uint64_t)skdev->mem_phys[i], skdev->mem_size[i]);
+       }
+       rc = skd_acquire_irq(skdev);
+       if (rc) {
+
+               pr_err("(%s): interrupt resource error %d\n",
+                      pci_name(pdev), rc);
+               goto err_out_iounmap;
+       }
+
+       rc = skd_start_timer(skdev);
+       if (rc)
+               goto err_out_timer;
+
+       init_waitqueue_head(&skdev->waitq);
+
+       skd_start_device(skdev);
+
+       return rc;
+
+err_out_timer:
+       skd_stop_device(skdev);
+       skd_release_irq(skdev);
+
+err_out_iounmap:
+       for (i = 0; i < SKD_MAX_BARS; i++)
+               if (skdev->mem_map[i])
+                       iounmap(skdev->mem_map[i]);
+
+       if (skdev->pcie_error_reporting_is_enabled)
+               pci_disable_pcie_error_reporting(pdev);
+
+err_out_regions:
+       pci_release_regions(pdev);
+
+err_out:
+       pci_disable_device(pdev);
+       return rc;
+}
+
+static void skd_pci_shutdown(struct pci_dev *pdev)
+{
+       struct skd_device *skdev;
+
+       pr_err("skd_pci_shutdown called\n");
+
+       skdev = pci_get_drvdata(pdev);
+       if (!skdev) {
+               pr_err("%s: no device data for PCI\n", pci_name(pdev));
+               return;
+       }
+
+       pr_err("%s: calling stop\n", skd_name(skdev));
+       skd_stop_device(skdev);
+}
+
+static struct pci_driver skd_driver = {
+       .name           = DRV_NAME,
+       .id_table       = skd_pci_tbl,
+       .probe          = skd_pci_probe,
+       .remove         = skd_pci_remove,
+       .suspend        = skd_pci_suspend,
+       .resume         = skd_pci_resume,
+       .shutdown       = skd_pci_shutdown,
+};
+
+/*
+ *****************************************************************************
+ * LOGGING SUPPORT
+ *****************************************************************************
+ */
+
+static const char *skd_name(struct skd_device *skdev)
+{
+       memset(skdev->id_str, 0, sizeof(skdev->id_str));
+
+       if (skdev->inquiry_is_valid)
+               snprintf(skdev->id_str, sizeof(skdev->id_str), "%s:%s:[%s]",
+                        skdev->name, skdev->inq_serial_num,
+                        pci_name(skdev->pdev));
+       else
+               snprintf(skdev->id_str, sizeof(skdev->id_str), "%s:??:[%s]",
+                        skdev->name, pci_name(skdev->pdev));
+
+       return skdev->id_str;
+}
+
+const char *skd_drive_state_to_str(int state)
+{
+       switch (state) {
+       case FIT_SR_DRIVE_OFFLINE:
+               return "OFFLINE";
+       case FIT_SR_DRIVE_INIT:
+               return "INIT";
+       case FIT_SR_DRIVE_ONLINE:
+               return "ONLINE";
+       case FIT_SR_DRIVE_BUSY:
+               return "BUSY";
+       case FIT_SR_DRIVE_FAULT:
+               return "FAULT";
+       case FIT_SR_DRIVE_DEGRADED:
+               return "DEGRADED";
+       case FIT_SR_PCIE_LINK_DOWN:
+               return "INK_DOWN";
+       case FIT_SR_DRIVE_SOFT_RESET:
+               return "SOFT_RESET";
+       case FIT_SR_DRIVE_NEED_FW_DOWNLOAD:
+               return "NEED_FW";
+       case FIT_SR_DRIVE_INIT_FAULT:
+               return "INIT_FAULT";
+       case FIT_SR_DRIVE_BUSY_SANITIZE:
+               return "BUSY_SANITIZE";
+       case FIT_SR_DRIVE_BUSY_ERASE:
+               return "BUSY_ERASE";
+       case FIT_SR_DRIVE_FW_BOOTING:
+               return "FW_BOOTING";
+       default:
+               return "???";
+       }
+}
+
+const char *skd_skdev_state_to_str(enum skd_drvr_state state)
+{
+       switch (state) {
+       case SKD_DRVR_STATE_LOAD:
+               return "LOAD";
+       case SKD_DRVR_STATE_IDLE:
+               return "IDLE";
+       case SKD_DRVR_STATE_BUSY:
+               return "BUSY";
+       case SKD_DRVR_STATE_STARTING:
+               return "STARTING";
+       case SKD_DRVR_STATE_ONLINE:
+               return "ONLINE";
+       case SKD_DRVR_STATE_PAUSING:
+               return "PAUSING";
+       case SKD_DRVR_STATE_PAUSED:
+               return "PAUSED";
+       case SKD_DRVR_STATE_DRAINING_TIMEOUT:
+               return "DRAINING_TIMEOUT";
+       case SKD_DRVR_STATE_RESTARTING:
+               return "RESTARTING";
+       case SKD_DRVR_STATE_RESUMING:
+               return "RESUMING";
+       case SKD_DRVR_STATE_STOPPING:
+               return "STOPPING";
+       case SKD_DRVR_STATE_SYNCING:
+               return "SYNCING";
+       case SKD_DRVR_STATE_FAULT:
+               return "FAULT";
+       case SKD_DRVR_STATE_DISAPPEARED:
+               return "DISAPPEARED";
+       case SKD_DRVR_STATE_BUSY_ERASE:
+               return "BUSY_ERASE";
+       case SKD_DRVR_STATE_BUSY_SANITIZE:
+               return "BUSY_SANITIZE";
+       case SKD_DRVR_STATE_BUSY_IMMINENT:
+               return "BUSY_IMMINENT";
+       case SKD_DRVR_STATE_WAIT_BOOT:
+               return "WAIT_BOOT";
+
+       default:
+               return "???";
+       }
+}
+
+const char *skd_skmsg_state_to_str(enum skd_fit_msg_state state)
+{
+       switch (state) {
+       case SKD_MSG_STATE_IDLE:
+               return "IDLE";
+       case SKD_MSG_STATE_BUSY:
+               return "BUSY";
+       default:
+               return "???";
+       }
+}
+
+const char *skd_skreq_state_to_str(enum skd_req_state state)
+{
+       switch (state) {
+       case SKD_REQ_STATE_IDLE:
+               return "IDLE";
+       case SKD_REQ_STATE_SETUP:
+               return "SETUP";
+       case SKD_REQ_STATE_BUSY:
+               return "BUSY";
+       case SKD_REQ_STATE_COMPLETED:
+               return "COMPLETED";
+       case SKD_REQ_STATE_TIMEOUT:
+               return "TIMEOUT";
+       case SKD_REQ_STATE_ABORTED:
+               return "ABORTED";
+       default:
+               return "???";
+       }
+}
+
+static void skd_log_skdev(struct skd_device *skdev, const char *event)
+{
+       DPRINTK(skdev, "(%s) skdev=%p event='%s'\n", skdev->name, skdev, event);
+       DPRINTK(skdev, "  drive_state=%s(%d) driver_state=%s(%d)\n",
+               skd_drive_state_to_str(skdev->drive_state), skdev->drive_state,
+               skd_skdev_state_to_str(skdev->state), skdev->state);
+       DPRINTK(skdev, "  busy=%d limit=%d dev=%d lowat=%d\n",
+               skdev->in_flight, skdev->cur_max_queue_depth,
+               skdev->dev_max_queue_depth, skdev->queue_low_water_mark);
+       DPRINTK(skdev, "  timestamp=0x%x cycle=%d cycle_ix=%d\n",
+               skdev->timeout_stamp, skdev->skcomp_cycle, skdev->skcomp_ix);
+}
+
+static void skd_log_skmsg(struct skd_device *skdev,
+                         struct skd_fitmsg_context *skmsg, const char *event)
+{
+       DPRINTK(skdev, "(%s) skmsg=%p event='%s'\n", skdev->name, skmsg, event);
+       DPRINTK(skdev, "  state=%s(%d) id=0x%04x length=%d\n",
+               skd_skmsg_state_to_str(skmsg->state), skmsg->state,
+               skmsg->id, skmsg->length);
+}
+
+static void skd_log_skreq(struct skd_device *skdev,
+                         struct skd_request_context *skreq, const char *event)
+{
+       DPRINTK(skdev, "(%s) skreq=%p event='%s'\n", skdev->name, skreq, event);
+       DPRINTK(skdev, "  state=%s(%d) id=0x%04x fitmsg=0x%04x\n",
+               skd_skreq_state_to_str(skreq->state), skreq->state,
+               skreq->id, skreq->fitmsg_id);
+       DPRINTK(skdev, "  timo=0x%x sg_dir=%d n_sg=%d\n",
+               skreq->timeout_stamp, skreq->sg_data_dir, skreq->n_sg);
+
+       if (!skd_bio) {
+               if (skreq->req != NULL) {
+                       struct request *req = skreq->req;
+                       u32 lba = (u32)blk_rq_pos(req);
+                       u32 count = blk_rq_sectors(req);
+
+                       DPRINTK(skdev,
+                               "  req=%p lba=%u(0x%x) count=%u(0x%x) dir=%d\n",
+                               req, lba, lba, count, count,
+                               (int)rq_data_dir(req));
+               } else
+                       DPRINTK(skdev, "  req=NULL\n");
+       } else {
+               if (skreq->bio != NULL) {
+                       struct bio *bio = skreq->bio;
+                       u32 lba = (u32)bio->bi_sector;
+                       u32 count = bio_sectors(bio);
+
+                       DPRINTK(skdev,
+                               "  bio=%p lba=%u(0x%x) count=%u(0x%x) dir=%d\n",
+                               bio, lba, lba, count, count,
+                               (int)bio_data_dir(bio));
+               } else
+                       DPRINTK(skdev, "  req=NULL\n");
+       }
+}
+
+/*
+ *****************************************************************************
+ * MODULE GLUE
+ *****************************************************************************
+ */
+
+static int __init skd_init(void)
+{
+       int rc = 0;
+
+       pr_info(PFX " v%s-b%s loaded\n", DRV_VERSION, DRV_BUILD_ID);
+
+       switch (skd_isr_type) {
+       case SKD_IRQ_LEGACY:
+       case SKD_IRQ_MSI:
+       case SKD_IRQ_MSIX:
+               break;
+       default:
+               pr_info("skd_isr_type %d invalid, re-set to %d\n",
+                      skd_isr_type, SKD_IRQ_DEFAULT);
+               skd_isr_type = SKD_IRQ_DEFAULT;
+       }
+
+       skd_flush_slab = kmem_cache_create(SKD_FLUSH_JOB,
+                                               sizeof(struct skd_flush_cmd),
+                                               0, 0, NULL);
+
+       if (!skd_flush_slab) {
+               pr_err("failed to allocated flush slab.\n");
+               return -ENOMEM;
+       }
+
+       if (skd_max_queue_depth < 1
+           || skd_max_queue_depth > SKD_MAX_QUEUE_DEPTH) {
+               pr_info(
+                      "skd_max_queue_depth %d invalid, re-set to %d\n",
+                      skd_max_queue_depth, SKD_MAX_QUEUE_DEPTH_DEFAULT);
+               skd_max_queue_depth = SKD_MAX_QUEUE_DEPTH_DEFAULT;
+       }
+
+       if (skd_max_req_per_msg < 1 || skd_max_req_per_msg > 14) {
+               pr_info(
+                      "skd_max_req_per_msg %d invalid, re-set to %d\n",
+                      skd_max_req_per_msg, SKD_MAX_REQ_PER_MSG_DEFAULT);
+               skd_max_req_per_msg = SKD_MAX_REQ_PER_MSG_DEFAULT;
+       }
+
+       if (skd_sgs_per_request < 1 || skd_sgs_per_request > 4096) {
+               pr_info(
+                      "skd_sg_per_request %d invalid, re-set to %d\n",
+                      skd_sgs_per_request, SKD_N_SG_PER_REQ_DEFAULT);
+               skd_sgs_per_request = SKD_N_SG_PER_REQ_DEFAULT;
+       }
+
+       if (skd_dbg_level < 0 || skd_dbg_level > 2) {
+               pr_info("skd_dbg_level %d invalid, re-set to %d\n",
+                      skd_dbg_level, 0);
+               skd_dbg_level = 0;
+       }
+
+       if (skd_isr_comp_limit < 0) {
+               pr_info("skd_isr_comp_limit %d invalid, set to %d\n",
+                      skd_isr_comp_limit, 0);
+               skd_isr_comp_limit = 0;
+       }
+
+       if (skd_max_pass_thru < 1 || skd_max_pass_thru > 50) {
+               pr_info("skd_max_pass_thru %d invalid, re-set to %d\n",
+                      skd_max_pass_thru, SKD_N_SPECIAL_CONTEXT);
+               skd_max_pass_thru = SKD_N_SPECIAL_CONTEXT;
+       }
+
+       /* Obtain major device number. */
+       rc = register_blkdev(0, DRV_NAME);
+       if (rc < 0)
+               return rc;
+
+       skd_major = rc;
+
+       return pci_register_driver(&skd_driver);
+
+}
+
+static void __exit skd_exit(void)
+{
+       pr_info(PFX " v%s-b%s unloading\n", DRV_VERSION, DRV_BUILD_ID);
+
+       unregister_blkdev(skd_major, DRV_NAME);
+       pci_unregister_driver(&skd_driver);
+
+       kmem_cache_destroy(skd_flush_slab);
+}
+
+static int
+skd_flush_cmd_enqueue(struct skd_device *skdev, void *cmd)
+{
+       struct skd_flush_cmd *item;
+
+       item = kmem_cache_zalloc(skd_flush_slab, GFP_ATOMIC);
+       if (!item) {
+               pr_err("skd_flush_cmd_enqueue: Failed to allocated item.\n");
+               return -ENOMEM;
+       }
+
+       item->cmd = cmd;
+       list_add_tail(&item->flist, &skdev->flush_list);
+       return 0;
+}
+
+static void *
+skd_flush_cmd_dequeue(struct skd_device *skdev)
+{
+       void *cmd;
+       struct skd_flush_cmd *item;
+
+       item = list_entry(skdev->flush_list.next, struct skd_flush_cmd, flist);
+       list_del_init(&item->flist);
+       cmd = item->cmd;
+       kmem_cache_free(skd_flush_slab, item);
+       return cmd;
+}
+
+module_init(skd_init);
+module_exit(skd_exit);
diff --git a/drivers/block/skd_s1120.h b/drivers/block/skd_s1120.h
new file mode 100644 (file)
index 0000000..bf01941
--- /dev/null
@@ -0,0 +1,354 @@
+/* Copyright 2012 STEC, Inc.
+ *
+ * This file is licensed under the terms of the 3-clause
+ * BSD License (http://opensource.org/licenses/BSD-3-Clause)
+ * or the GNU GPL-2.0 (http://www.gnu.org/licenses/gpl-2.0.html),
+ * at your option. Both licenses are also available in the LICENSE file
+ * distributed with this project. This file may not be copied, modified,
+ * or distributed except in accordance with those terms.
+ */
+
+
+#ifndef SKD_S1120_H
+#define SKD_S1120_H
+
+#pragma pack(push, s1120_h, 1)
+
+/*
+ * Q-channel, 64-bit r/w
+ */
+#define FIT_Q_COMMAND               0x400u
+#define  FIT_QCMD_QID_MASK              (0x3 << 1)
+#define  FIT_QCMD_QID0                  (0x0 << 1)
+#define  FIT_QCMD_QID_NORMAL            FIT_QCMD_QID0
+#ifndef SKD_OMIT_FROM_SRC_DIST
+#define  FIT_QCMD_QID1                  (0x1 << 1)
+#define  FIT_QCMD_QID2                  (0x2 << 1)
+#define  FIT_QCMD_QID3                  (0x3 << 1)
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+#define  FIT_QCMD_FLUSH_QUEUE           (0ull)      /* add QID */
+#define  FIT_QCMD_MSGSIZE_MASK          (0x3 << 4)
+#define  FIT_QCMD_MSGSIZE_64            (0x0 << 4)
+#define  FIT_QCMD_MSGSIZE_128           (0x1 << 4)
+#define  FIT_QCMD_MSGSIZE_256           (0x2 << 4)
+#define  FIT_QCMD_MSGSIZE_512           (0x3 << 4)
+#define  FIT_QCMD_BASE_ADDRESS_MASK     (0xFFFFFFFFFFFFFFC0ull)
+
+
+/*
+ * Control, 32-bit r/w
+ */
+#define FIT_CONTROL                 0x500u
+#ifndef SKD_OMIT_FROM_SRC_DIST
+#define  FIT_CR_HARD_RESET              (1u << 0u)
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+#define  FIT_CR_SOFT_RESET              (1u << 1u)
+#ifndef SKD_OMIT_FROM_SRC_DIST
+#define         FIT_CR_DIS_TIMESTAMPS          (1u << 6u)
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+#define  FIT_CR_ENABLE_INTERRUPTS       (1u << 7u)
+
+/*
+ * Status, 32-bit, r/o
+ */
+#define FIT_STATUS                     0x510u
+#define FIT_SR_DRIVE_STATE_MASK                0x000000FFu
+#ifndef SKD_OMIT_FROM_SRC_DIST
+#define        FIT_SR_SIGNATURE                (0xFF << 8)
+#define        FIT_SR_PIO_DMA                  (1 << 16)
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+#define FIT_SR_DRIVE_OFFLINE           0x00
+#define FIT_SR_DRIVE_INIT              0x01
+/* #define FIT_SR_DRIVE_READY          0x02 */
+#define FIT_SR_DRIVE_ONLINE            0x03
+#define FIT_SR_DRIVE_BUSY              0x04
+#define FIT_SR_DRIVE_FAULT             0x05
+#define FIT_SR_DRIVE_DEGRADED          0x06
+#define FIT_SR_PCIE_LINK_DOWN          0x07
+#define FIT_SR_DRIVE_SOFT_RESET                0x08
+#define FIT_SR_DRIVE_INIT_FAULT                0x09
+#define FIT_SR_DRIVE_BUSY_SANITIZE     0x0A
+#define FIT_SR_DRIVE_BUSY_ERASE                0x0B
+#define FIT_SR_DRIVE_FW_BOOTING                0x0C
+#define FIT_SR_DRIVE_NEED_FW_DOWNLOAD  0xFE
+#define FIT_SR_DEVICE_MISSING           0xFF
+#define FIT_SR__RESERVED               0xFFFFFF00u
+
+#ifndef SKD_OMIT_FROM_SRC_DIST
+/*
+ * FIT_STATUS - Status register data definition
+ */
+#define        FIT_SR_STATE_MASK               (0xFF << 0)
+#define        FIT_SR_SIGNATURE                (0xFF << 8)
+#define        FIT_SR_PIO_DMA                  (1 << 16)
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+
+
+/*
+ * Interrupt status, 32-bit r/w1c (w1c ==> write 1 to clear)
+ */
+#define FIT_INT_STATUS_HOST         0x520u
+#define  FIT_ISH_FW_STATE_CHANGE        (1u << 0u)
+#define  FIT_ISH_COMPLETION_POSTED      (1u << 1u)
+#define  FIT_ISH_MSG_FROM_DEV           (1u << 2u)
+#define  FIT_ISH_UNDEFINED_3            (1u << 3u)
+#define  FIT_ISH_UNDEFINED_4            (1u << 4u)
+#define  FIT_ISH_Q0_FULL                (1u << 5u)
+#define  FIT_ISH_Q1_FULL                (1u << 6u)
+#define  FIT_ISH_Q2_FULL                (1u << 7u)
+#define  FIT_ISH_Q3_FULL                (1u << 8u)
+#define  FIT_ISH_QCMD_FIFO_OVERRUN      (1u << 9u)
+#define  FIT_ISH_BAD_EXP_ROM_READ       (1u << 10u)
+
+
+#define FIT_INT_DEF_MASK       \
+               (FIT_ISH_FW_STATE_CHANGE | \
+                FIT_ISH_COMPLETION_POSTED | \
+                FIT_ISH_MSG_FROM_DEV | \
+                FIT_ISH_Q0_FULL | \
+                FIT_ISH_Q1_FULL | \
+                FIT_ISH_Q2_FULL | \
+                FIT_ISH_Q3_FULL | \
+                FIT_ISH_QCMD_FIFO_OVERRUN | \
+                FIT_ISH_BAD_EXP_ROM_READ)
+
+#define FIT_INT_QUEUE_FULL     \
+               (FIT_ISH_Q0_FULL | \
+               FIT_ISH_Q1_FULL | \
+               FIT_ISH_Q2_FULL | \
+               FIT_ISH_Q3_FULL)
+
+
+#define MSI_MSG_NWL_ERROR_0             0x00000000
+#define MSI_MSG_NWL_ERROR_1             0x00000001
+#define MSI_MSG_NWL_ERROR_2             0x00000002
+#define MSI_MSG_NWL_ERROR_3             0x00000003
+#define MSI_MSG_STATE_CHANGE            0x00000004
+#define MSI_MSG_COMPLETION_POSTED       0x00000005
+#define MSI_MSG_MSG_FROM_DEV            0x00000006
+#define MSI_MSG_RESERVED_0              0x00000007
+#define MSI_MSG_RESERVED_1              0x00000008
+#define MSI_MSG_QUEUE_0_FULL            0x00000009
+#define MSI_MSG_QUEUE_1_FULL            0x0000000A
+#define MSI_MSG_QUEUE_2_FULL            0x0000000B
+#define MSI_MSG_QUEUE_3_FULL            0x0000000C
+
+
+
+#define FIT_INT_RESERVED_MASK  \
+               (FIT_ISH_UNDEFINED_3 | \
+               FIT_ISH_UNDEFINED_4)
+/*
+ * Interrupt mask, 32-bit r/w
+ * Bit definitions are the same as FIT_INT_STATUS_HOST
+ */
+#define FIT_INT_MASK_HOST           0x528u
+
+
+/*
+ * Message to device, 32-bit r/w
+ */
+#define FIT_MSG_TO_DEVICE           0x540u
+
+/*
+ * Message from device, 32-bit, r/o
+ */
+#define FIT_MSG_FROM_DEVICE         0x548u
+
+
+/*
+ * 32-bit messages to/from device, composition/extraction macros
+ */
+#define FIT_MXD_CONS(TYPE, PARAM, DATA) \
+       ((((TYPE)  & 0xFFu) << 24u) | \
+       (((PARAM) & 0xFFu) << 16u) | \
+       (((DATA)  & 0xFFFFu) << 0u))
+#define FIT_MXD_TYPE(MXD)               (((MXD) >> 24u) & 0xFFu)
+#define FIT_MXD_PARAM(MXD)              (((MXD) >> 16u) & 0xFFu)
+#define FIT_MXD_DATA(MXD)               (((MXD) >> 0u) & 0xFFFFu)
+
+
+/*
+ * Types of messages to/from device
+ */
+#define FIT_MTD_FITFW_INIT              0x01u
+#define FIT_MTD_GET_CMDQ_DEPTH          0x02u
+#define FIT_MTD_SET_COMPQ_DEPTH         0x03u
+#define FIT_MTD_SET_COMPQ_ADDR          0x04u
+#define FIT_MTD_ARM_QUEUE               0x05u
+#define FIT_MTD_CMD_LOG_HOST_ID         0x07u
+#define FIT_MTD_CMD_LOG_TIME_STAMP_LO   0x08u
+#define FIT_MTD_CMD_LOG_TIME_STAMP_HI   0x09u
+#define FIT_MFD_SMART_EXCEEDED          0x10u
+#define FIT_MFD_POWER_DOWN                     0x11u
+#define FIT_MFD_OFFLINE                                0x12u
+#define FIT_MFD_ONLINE                         0x13u
+#define FIT_MFD_FW_RESTARTING              0x14u
+#define FIT_MFD_PM_ACTIVE                      0x15u
+#define FIT_MFD_PM_STANDBY                     0x16u
+#define FIT_MFD_PM_SLEEP                       0x17u
+#define FIT_MFD_CMD_PROGRESS               0x18u
+
+#ifndef SKD_OMIT_FROM_SRC_DIST
+#define FIT_MTD_DEBUG                   0xFEu
+#define FIT_MFD_DEBUG                   0xFFu
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+
+#define FIT_MFD_MASK                   (0xFFu)
+#define FIT_MFD_DATA_MASK              (0xFFu)
+#define FIT_MFD_MSG(x)                 (((x) >> 24) & FIT_MFD_MASK)
+#define FIT_MFD_DATA(x)                        ((x) & FIT_MFD_MASK)
+
+
+/*
+ * Extra arg to FIT_MSG_TO_DEVICE, 64-bit r/w
+ * Used to set completion queue address (FIT_MTD_SET_COMPQ_ADDR)
+ * (was Response buffer in docs)
+ */
+#define FIT_MSG_TO_DEVICE_ARG       0x580u
+
+/*
+ * Hardware (ASIC) version, 32-bit r/o
+ */
+#define FIT_HW_VERSION              0x588u
+
+/*
+ * Scatter/gather list descriptor.
+ * 32-bytes and must be aligned on a 32-byte boundary.
+ * All fields are in little endian order.
+ */
+struct fit_sg_descriptor {
+       uint32_t control;
+       uint32_t byte_count;
+       uint64_t host_side_addr;
+       uint64_t dev_side_addr;
+       uint64_t next_desc_ptr;
+};
+
+#define FIT_SGD_CONTROL_NOT_LAST    0x000u
+#define FIT_SGD_CONTROL_LAST        0x40Eu
+
+/*
+ * Header at the beginning of a FIT message. The header
+ * is followed by SSDI requests each 64 bytes.
+ * A FIT message can be up to 512 bytes long and must start
+ * on a 64-byte boundary.
+ */
+struct fit_msg_hdr {
+       uint8_t protocol_id;
+       uint8_t num_protocol_cmds_coalesced;
+       uint8_t _reserved[62];
+};
+
+#define FIT_PROTOCOL_ID_FIT     1
+#define FIT_PROTOCOL_ID_SSDI    2
+#define FIT_PROTOCOL_ID_SOFIT   3
+
+
+#define FIT_PROTOCOL_MINOR_VER(mtd_val) ((mtd_val >> 16) & 0xF)
+#define FIT_PROTOCOL_MAJOR_VER(mtd_val) ((mtd_val >> 20) & 0xF)
+
+#ifndef SKD_OMIT_FROM_SRC_DIST
+/*
+ * Format of a completion entry. The completion queue is circular
+ * and must have at least as many entries as the maximum number
+ * of commands that may be issued to the device.
+ *
+ * There are no head/tail pointers. The cycle value is used to
+ * infer the presence of new completion records.
+ * Initially the cycle in all entries is 0, the index is 0, and
+ * the cycle value to expect is 1. When completions are added
+ * their cycle values are set to 1. When the index wraps the
+ * cycle value to expect is incremented.
+ *
+ * Command_context is opaque and taken verbatim from the SSDI command.
+ * All other fields are big endian.
+ */
+#endif /* SKD_OMIT_FROM_SRC_DIST */
+#define FIT_PROTOCOL_VERSION_0          0
+
+/*
+ *  Protocol major version 1 completion entry.
+ *  The major protocol version is found in bits
+ *  20-23 of the FIT_MTD_FITFW_INIT response.
+ */
+struct fit_completion_entry_v1 {
+       uint32_t        num_returned_bytes;
+       uint16_t        tag;
+       uint8_t         status;  /* SCSI status */
+       uint8_t         cycle;
+};
+#define FIT_PROTOCOL_VERSION_1          1
+#define FIT_PROTOCOL_VERSION_CURRENT    FIT_PROTOCOL_VERSION_1
+
+struct fit_comp_error_info {
+       uint8_t         type:7; /* 00: Bits0-6 indicates the type of sense data. */
+       uint8_t         valid:1; /* 00: Bit 7 := 1 ==> info field is valid. */
+       uint8_t         reserved0; /* 01: Obsolete field */
+       uint8_t         key:4; /* 02: Bits0-3 indicate the sense key. */
+       uint8_t         reserved2:1; /* 02: Reserved bit. */
+       uint8_t         bad_length:1; /* 02: Incorrect Length Indicator */
+       uint8_t         end_medium:1; /* 02: End of Medium */
+       uint8_t         file_mark:1; /* 02: Filemark */
+       uint8_t         info[4]; /* 03: */
+       uint8_t         reserved1; /* 07: Additional Sense Length */
+       uint8_t         cmd_spec[4]; /* 08: Command Specific Information */
+       uint8_t         code; /* 0C: Additional Sense Code */
+       uint8_t         qual; /* 0D: Additional Sense Code Qualifier */
+       uint8_t         fruc; /* 0E: Field Replaceable Unit Code */
+       uint8_t         sks_high:7; /* 0F: Sense Key Specific (MSB) */
+       uint8_t         sks_valid:1; /* 0F: Sense Key Specific Valid */
+       uint16_t        sks_low; /* 10: Sense Key Specific (LSW) */
+       uint16_t        reserved3; /* 12: Part of additional sense bytes (unused) */
+       uint16_t        uec; /* 14: Additional Sense Bytes */
+       uint64_t        per; /* 16: Additional Sense Bytes */
+       uint8_t         reserved4[2]; /* 1E: Additional Sense Bytes (unused) */
+};
+
+
+/* Task management constants */
+#define SOFT_TASK_SIMPLE            0x00
+#define SOFT_TASK_HEAD_OF_QUEUE     0x01
+#define SOFT_TASK_ORDERED           0x02
+
+
+/* Version zero has the last 32 bits reserved,
+ * Version one has the last 32 bits sg_list_len_bytes;
+ */
+struct skd_command_header {
+       uint64_t        sg_list_dma_address;
+       uint16_t        tag;
+       uint8_t         attribute;
+       uint8_t         add_cdb_len;     /* In 32 bit words */
+       uint32_t        sg_list_len_bytes;
+};
+
+struct skd_scsi_request {
+       struct          skd_command_header hdr;
+       unsigned char   cdb[16];
+/*     unsigned char _reserved[16]; */
+};
+
+struct driver_inquiry_data {
+       uint8_t         peripheral_device_type:5;
+       uint8_t         qualifier:3;
+       uint8_t         page_code;
+       uint16_t        page_length;
+       uint16_t        pcie_bus_number;
+       uint8_t         pcie_device_number;
+       uint8_t         pcie_function_number;
+       uint8_t         pcie_link_speed;
+       uint8_t         pcie_link_lanes;
+       uint16_t        pcie_vendor_id;
+       uint16_t        pcie_device_id;
+       uint16_t        pcie_subsystem_vendor_id;
+       uint16_t        pcie_subsystem_device_id;
+       uint8_t         reserved1[2];
+       uint8_t         reserved2[3];
+       uint8_t         driver_version_length;
+       uint8_t         driver_version[0x14];
+};
+
+#pragma pack(pop, s1120_h)
+
+#endif /* SKD_S1120_H */
index bf4b9d282c042ec4d5b3c31a9d3192bd059afcc5..6620b73d04906191132d771dade31f9e00043e07 100644 (file)
@@ -887,6 +887,8 @@ static int dispatch_discard_io(struct xen_blkif *blkif,
        unsigned long secure;
        struct phys_req preq;
 
+       xen_blkif_get(blkif);
+
        preq.sector_number = req->u.discard.sector_number;
        preq.nr_sects      = req->u.discard.nr_sectors;
 
@@ -899,7 +901,6 @@ static int dispatch_discard_io(struct xen_blkif *blkif,
        }
        blkif->st_ds_req++;
 
-       xen_blkif_get(blkif);
        secure = (blkif->vbd.discard_secure &&
                 (req->u.discard.flag & BLKIF_DISCARD_SECURE)) ?
                 BLKDEV_DISCARD_SECURE : 0;
index a4660bbee8a6279bd4cc1a6def776ddc85bcf169..65531331fe9c57df6a595b5c07641252e54a474b 100644 (file)
@@ -400,10 +400,13 @@ static int blkif_queue_request(struct request *req)
        if (unlikely(info->connected != BLKIF_STATE_CONNECTED))
                return 1;
 
-       max_grefs = info->max_indirect_segments ?
-                   info->max_indirect_segments +
-                   INDIRECT_GREFS(info->max_indirect_segments) :
-                   BLKIF_MAX_SEGMENTS_PER_REQUEST;
+       max_grefs = req->nr_phys_segments;
+       if (max_grefs > BLKIF_MAX_SEGMENTS_PER_REQUEST)
+               /*
+                * If we are using indirect segments we need to account
+                * for the indirect grefs used in the request.
+                */
+               max_grefs += INDIRECT_GREFS(req->nr_phys_segments);
 
        /* Check if we have enough grants to allocate a requests */
        if (info->persistent_gnts_c < max_grefs) {
@@ -1013,13 +1016,38 @@ static void blkif_completion(struct blk_shadow *s, struct blkfront_info *info,
        }
        /* Add the persistent grant into the list of free grants */
        for (i = 0; i < nseg; i++) {
-               list_add(&s->grants_used[i]->node, &info->persistent_gnts);
-               info->persistent_gnts_c++;
+               if (gnttab_query_foreign_access(s->grants_used[i]->gref)) {
+                       /*
+                        * If the grant is still mapped by the backend (the
+                        * backend has chosen to make this grant persistent)
+                        * we add it at the head of the list, so it will be
+                        * reused first.
+                        */
+                       list_add(&s->grants_used[i]->node, &info->persistent_gnts);
+                       info->persistent_gnts_c++;
+               } else {
+                       /*
+                        * If the grant is not mapped by the backend we end the
+                        * foreign access and add it to the tail of the list,
+                        * so it will not be picked again unless we run out of
+                        * persistent grants.
+                        */
+                       gnttab_end_foreign_access(s->grants_used[i]->gref, 0, 0UL);
+                       s->grants_used[i]->gref = GRANT_INVALID_REF;
+                       list_add_tail(&s->grants_used[i]->node, &info->persistent_gnts);
+               }
        }
        if (s->req.operation == BLKIF_OP_INDIRECT) {
                for (i = 0; i < INDIRECT_GREFS(nseg); i++) {
-                       list_add(&s->indirect_grants[i]->node, &info->persistent_gnts);
-                       info->persistent_gnts_c++;
+                       if (gnttab_query_foreign_access(s->indirect_grants[i]->gref)) {
+                               list_add(&s->indirect_grants[i]->node, &info->persistent_gnts);
+                               info->persistent_gnts_c++;
+                       } else {
+                               gnttab_end_foreign_access(s->indirect_grants[i]->gref, 0, 0UL);
+                               s->indirect_grants[i]->gref = GRANT_INVALID_REF;
+                               list_add_tail(&s->indirect_grants[i]->node,
+                                             &info->persistent_gnts);
+                       }
                }
        }
 }
index afc2bb6917806e85ee916d8b2c25cb2183890055..b9bc05b9513a285e94e097423aa1c044cbe59392 100644 (file)
@@ -574,7 +574,8 @@ static struct kobject *base_probe(dev_t dev, int *part, void *data)
 void __init chrdev_init(void)
 {
        cdev_map = kobj_map_init(base_probe, &chrdevs_lock);
-       bdi_init(&directly_mappable_cdev_bdi);
+       if (bdi_init(&directly_mappable_cdev_bdi))
+               panic("Failed to init directly mappable cdev bdi");
 }
 
 
index dcb8216177747d033731bfd6b4a42ff903af44c5..53d35c5042404738c213233220500feaf7686ae8 100644 (file)
@@ -799,7 +799,7 @@ void fscache_enqueue_object(struct fscache_object *object)
  */
 bool fscache_object_sleep_till_congested(signed long *timeoutp)
 {
-       wait_queue_head_t *cong_wq = &__get_cpu_var(fscache_object_cong_wait);
+       wait_queue_head_t *cong_wq = this_cpu_ptr(&fscache_object_cong_wait);
        DEFINE_WAIT(wait);
 
        if (fscache_object_congested())
index 5f66d519a72640b3c9b874625de9b79808724226..24819001f5c84500ce61dad882e9da2ef331df25 100644 (file)
@@ -109,7 +109,7 @@ struct backing_dev_info {
 #endif
 };
 
-int bdi_init(struct backing_dev_info *bdi);
+int __must_check bdi_init(struct backing_dev_info *bdi);
 void bdi_destroy(struct backing_dev_info *bdi);
 
 __printf(3, 4)
@@ -117,7 +117,7 @@ int bdi_register(struct backing_dev_info *bdi, struct device *parent,
                const char *fmt, ...);
 int bdi_register_dev(struct backing_dev_info *bdi, dev_t dev);
 void bdi_unregister(struct backing_dev_info *bdi);
-int bdi_setup_and_register(struct backing_dev_info *, char *, unsigned int);
+int __must_check bdi_setup_and_register(struct backing_dev_info *, char *, unsigned int);
 void bdi_start_writeback(struct backing_dev_info *bdi, long nr_pages,
                        enum wb_reason reason);
 void bdi_start_background_writeback(struct backing_dev_info *bdi);
index 7c2e030e72f10542612ba34ce79b18f6b1b8ad06..a12f6ed91c84abb65fea5dddd75243094f731585 100644 (file)
@@ -5,6 +5,7 @@
 #include <linux/relay.h>
 #include <linux/compat.h>
 #include <uapi/linux/blktrace_api.h>
+#include <linux/list.h>
 
 #if defined(CONFIG_BLK_DEV_IO_TRACE)
 
@@ -23,6 +24,7 @@ struct blk_trace {
        struct dentry *dir;
        struct dentry *dropped_file;
        struct dentry *msg_file;
+       struct list_head running_list;
        atomic_t dropped;
 };
 
index b8b8560bfb95af43d36817d743f6218f01ed0edb..7f727b34280d7315ba09f6ff9f2b54457e4c1ed7 100644 (file)
@@ -26,6 +26,7 @@
 #include <linux/export.h>
 #include <linux/time.h>
 #include <linux/uaccess.h>
+#include <linux/list.h>
 
 #include <trace/events/block.h>
 
@@ -38,6 +39,9 @@ static unsigned int blktrace_seq __read_mostly = 1;
 static struct trace_array *blk_tr;
 static bool blk_tracer_enabled __read_mostly;
 
+static LIST_HEAD(running_trace_list);
+static __cacheline_aligned_in_smp DEFINE_SPINLOCK(running_trace_lock);
+
 /* Select an alternative, minimalistic output than the original one */
 #define TRACE_BLK_OPT_CLASSIC  0x1
 
@@ -107,10 +111,18 @@ record_it:
  * Send out a notify for this process, if we haven't done so since a trace
  * started
  */
-static void trace_note_tsk(struct blk_trace *bt, struct task_struct *tsk)
+static void trace_note_tsk(struct task_struct *tsk)
 {
+       unsigned long flags;
+       struct blk_trace *bt;
+
        tsk->btrace_seq = blktrace_seq;
-       trace_note(bt, tsk->pid, BLK_TN_PROCESS, tsk->comm, sizeof(tsk->comm));
+       spin_lock_irqsave(&running_trace_lock, flags);
+       list_for_each_entry(bt, &running_trace_list, running_list) {
+               trace_note(bt, tsk->pid, BLK_TN_PROCESS, tsk->comm,
+                          sizeof(tsk->comm));
+       }
+       spin_unlock_irqrestore(&running_trace_lock, flags);
 }
 
 static void trace_note_time(struct blk_trace *bt)
@@ -229,16 +241,15 @@ static void __blk_add_trace(struct blk_trace *bt, sector_t sector, int bytes,
                goto record_it;
        }
 
+       if (unlikely(tsk->btrace_seq != blktrace_seq))
+               trace_note_tsk(tsk);
+
        /*
         * A word about the locking here - we disable interrupts to reserve
         * some space in the relay per-cpu buffer, to prevent an irq
         * from coming in and stepping on our toes.
         */
        local_irq_save(flags);
-
-       if (unlikely(tsk->btrace_seq != blktrace_seq))
-               trace_note_tsk(bt, tsk);
-
        t = relay_reserve(bt->rchan, sizeof(*t) + pdu_len);
        if (t) {
                sequence = per_cpu_ptr(bt->sequence, cpu);
@@ -477,6 +488,7 @@ int do_blk_trace_setup(struct request_queue *q, char *name, dev_t dev,
        bt->dir = dir;
        bt->dev = dev;
        atomic_set(&bt->dropped, 0);
+       INIT_LIST_HEAD(&bt->running_list);
 
        ret = -EIO;
        bt->dropped_file = debugfs_create_file("dropped", 0444, dir, bt,
@@ -601,6 +613,9 @@ int blk_trace_startstop(struct request_queue *q, int start)
                        blktrace_seq++;
                        smp_mb();
                        bt->trace_state = Blktrace_running;
+                       spin_lock_irq(&running_trace_lock);
+                       list_add(&bt->running_list, &running_trace_list);
+                       spin_unlock_irq(&running_trace_lock);
 
                        trace_note_time(bt);
                        ret = 0;
@@ -608,6 +623,9 @@ int blk_trace_startstop(struct request_queue *q, int start)
        } else {
                if (bt->trace_state == Blktrace_running) {
                        bt->trace_state = Blktrace_stopped;
+                       spin_lock_irq(&running_trace_lock);
+                       list_del_init(&bt->running_list);
+                       spin_unlock_irq(&running_trace_lock);
                        relay_flush(bt->rchan);
                        ret = 0;
                }
@@ -1472,6 +1490,9 @@ static int blk_trace_remove_queue(struct request_queue *q)
        if (atomic_dec_and_test(&blk_probes_ref))
                blk_unregister_tracepoints();
 
+       spin_lock_irq(&running_trace_lock);
+       list_del(&bt->running_list);
+       spin_unlock_irq(&running_trace_lock);
        blk_trace_free(bt);
        return 0;
 }
index 759c3caf44bd21bef216c6a011981f150615646b..7a9f80d451f548cd749331bc6143354eab53814d 100644 (file)
--- a/mm/swap.c
+++ b/mm/swap.c
@@ -934,7 +934,8 @@ void __init swap_setup(void)
 #ifdef CONFIG_SWAP
        int i;
 
-       bdi_init(swapper_spaces[0].backing_dev_info);
+       if (bdi_init(swapper_spaces[0].backing_dev_info))
+               panic("Failed to init swap bdi");
        for (i = 0; i < MAX_SWAPFILES; i++) {
                spin_lock_init(&swapper_spaces[i].tree_lock);
                INIT_LIST_HEAD(&swapper_spaces[i].i_mmap_nonlinear);