/*
 * Driver for the Micron P320 SSD
 *   Copyright (C) 2011 Micron Technology, Inc.
 *
 * Portions of this code were derived from works subjected to the
 * following copyright:
 *    Copyright (C) 2009 Integrated Device Technology, Inc.
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 */

#include <linux/pci.h>
#include <linux/interrupt.h>
#include <linux/ata.h>
#include <linux/delay.h>
#include <linux/hdreg.h>
#include <linux/uaccess.h>
#include <linux/random.h>
#include <linux/smp.h>
#include <linux/compat.h>
#include <linux/fs.h>
#include <linux/module.h>
#include <linux/genhd.h>
#include <linux/blkdev.h>
#include <linux/bio.h>
#include <linux/dma-mapping.h>
#include <linux/idr.h>
#include <linux/kthread.h>
#include <../drivers/ata/ahci.h>
#include <linux/export.h>
#include <linux/debugfs.h>
#include "mtip32xx.h"

#define HW_CMD_SLOT_SZ          (MTIP_MAX_COMMAND_SLOTS * 32)

/* DMA region containing RX Fis, Identify, RLE10, and SMART buffers */
#define AHCI_RX_FIS_SZ          0x100
#define AHCI_RX_FIS_OFFSET      0x0
#define AHCI_IDFY_SZ            ATA_SECT_SIZE
#define AHCI_IDFY_OFFSET        0x400
#define AHCI_SECTBUF_SZ         ATA_SECT_SIZE
#define AHCI_SECTBUF_OFFSET     0x800
#define AHCI_SMARTBUF_SZ        ATA_SECT_SIZE
#define AHCI_SMARTBUF_OFFSET    0xC00
/* 0x100 + 0x200 + 0x200 + 0x200 is smaller than 4k but we pad it out */
#define BLOCK_DMA_ALLOC_SZ      4096

/* DMA region containing command table (should be 8192 bytes) */
#define AHCI_CMD_SLOT_SZ        sizeof(struct mtip_cmd_hdr)
#define AHCI_CMD_TBL_SZ         (MTIP_MAX_COMMAND_SLOTS * AHCI_CMD_SLOT_SZ)
#define AHCI_CMD_TBL_OFFSET     0x0

/* DMA region per command (contains header and SGL) */
#define AHCI_CMD_TBL_HDR_SZ     0x80
#define AHCI_CMD_TBL_HDR_OFFSET 0x0
#define AHCI_CMD_TBL_SGL_SZ     (MTIP_MAX_SG * sizeof(struct mtip_cmd_sg))
#define AHCI_CMD_TBL_SGL_OFFSET AHCI_CMD_TBL_HDR_SZ
#define CMD_DMA_ALLOC_SZ        (AHCI_CMD_TBL_SGL_SZ + AHCI_CMD_TBL_HDR_SZ)


#define HOST_CAP_NZDMA          (1 << 19)
#define HOST_HSORG              0xFC
#define HSORG_DISABLE_SLOTGRP_INTR (1<<24)
#define HSORG_DISABLE_SLOTGRP_PXIS (1<<16)
#define HSORG_HWREV             0xFF00
#define HSORG_STYLE             0x8
#define HSORG_SLOTGROUPS        0x7

#define PORT_COMMAND_ISSUE      0x38
#define PORT_SDBV               0x7C

#define PORT_OFFSET             0x100
#define PORT_MEM_SIZE           0x80

#define PORT_IRQ_ERR \
        (PORT_IRQ_HBUS_ERR | PORT_IRQ_IF_ERR | PORT_IRQ_CONNECT | \
         PORT_IRQ_PHYRDY | PORT_IRQ_UNK_FIS | PORT_IRQ_BAD_PMP | \
         PORT_IRQ_TF_ERR | PORT_IRQ_HBUS_DATA_ERR | PORT_IRQ_IF_NONFATAL | \
         PORT_IRQ_OVERFLOW)
#define PORT_IRQ_LEGACY \
        (PORT_IRQ_PIOS_FIS | PORT_IRQ_D2H_REG_FIS)
#define PORT_IRQ_HANDLED \
        (PORT_IRQ_SDB_FIS | PORT_IRQ_LEGACY | \
         PORT_IRQ_TF_ERR | PORT_IRQ_IF_ERR | \
         PORT_IRQ_CONNECT | PORT_IRQ_PHYRDY)
#define DEF_PORT_IRQ \
        (PORT_IRQ_ERR | PORT_IRQ_LEGACY | PORT_IRQ_SDB_FIS)

/* product numbers */
#define MTIP_PRODUCT_UNKNOWN    0x00
#define MTIP_PRODUCT_ASICFPGA   0x11

/* Device instance number, incremented each time a device is probed. */
static int instance;

struct list_head online_list;
struct list_head removing_list;
spinlock_t dev_lock;

/*
 * Global variable used to hold the major block device number
 * allocated in mtip_init().
 */
static int mtip_major;
static struct dentry *dfs_parent;
static struct dentry *dfs_device_status;

static u32 cpu_use[NR_CPUS];

static DEFINE_SPINLOCK(rssd_index_lock);
static DEFINE_IDA(rssd_index_ida);

static int mtip_block_initialize(struct driver_data *dd);

#ifdef CONFIG_COMPAT
struct mtip_compat_ide_task_request_s {
        __u8            io_ports[8];
        __u8            hob_ports[8];
        ide_reg_valid_t out_flags;
        ide_reg_valid_t in_flags;
        int             data_phase;
        int             req_cmd;
        compat_ulong_t  out_size;
        compat_ulong_t  in_size;
};
#endif

/*
 * This function check_for_surprise_removal is called
 * while card is removed from the system and it will
 * read the vendor id from the configration space
 *
 * @pdev Pointer to the pci_dev structure.
 *
 * return value
 *       true if device removed, else false
 */
static bool mtip_check_surprise_removal(struct pci_dev *pdev)
{
        u16 vendor_id = 0;
        struct driver_data *dd = pci_get_drvdata(pdev);

        if (dd->sr)
                return true;

       /* Read the vendorID from the configuration space */
        pci_read_config_word(pdev, 0x00, &vendor_id);
        if (vendor_id == 0xFFFF) {
                dd->sr = true;
                if (dd->queue)
                        set_bit(QUEUE_FLAG_DEAD, &dd->queue->queue_flags);
                else
                        dev_warn(&dd->pdev->dev,
                                "%s: dd->queue is NULL\n", __func__);
                if (dd->port) {
                        set_bit(MTIP_PF_SR_CLEANUP_BIT, &dd->port->flags);
                        wake_up_interruptible(&dd->port->svc_wait);
                } else
                        dev_warn(&dd->pdev->dev,
                                "%s: dd->port is NULL\n", __func__);
                return true; /* device removed */
        }

        return false; /* device present */
}

/*
 * Obtain an empty command slot.
 *
 * This function needs to be reentrant since it could be called
 * at the same time on multiple CPUs. The allocation of the
 * command slot must be atomic.
 *
 * @port Pointer to the port data structure.
 *
 * return value
 *      >= 0    Index of command slot obtained.
 *      -1      No command slots available.
 */
static int get_slot(struct mtip_port *port)
{
        int slot, i;
        unsigned int num_command_slots = port->dd->slot_groups * 32;

        /*
         * Try 10 times, because there is a small race here.
         *  that's ok, because it's still cheaper than a lock.
         *
         * Race: Since this section is not protected by lock, same bit
         * could be chosen by different process contexts running in
         * different processor. So instead of costly lock, we are going
         * with loop.
         */
        for (i = 0; i < 10; i++) {
                slot = find_next_zero_bit(port->allocated,
                                         num_command_slots, 1);
                if ((slot < num_command_slots) &&
                    (!test_and_set_bit(slot, port->allocated)))
                        return slot;
        }
        dev_warn(&port->dd->pdev->dev, "Failed to get a tag.\n");

        mtip_check_surprise_removal(port->dd->pdev);
        return -1;
}

/*
 * Release a command slot.
 *
 * @port Pointer to the port data structure.
 * @tag  Tag of command to release
 *
 * return value
 *      None
 */
static inline void release_slot(struct mtip_port *port, int tag)
{
        smp_mb__before_clear_bit();
        clear_bit(tag, port->allocated);
        smp_mb__after_clear_bit();
}

/*
 * IO completion function.
 *
 * This completion function is called by the driver ISR when a
 * command that was issued by the kernel completes. It first calls the
 * asynchronous completion function which normally calls back into the block
 * layer passing the asynchronous callback data, then unmaps the
 * scatter list associated with the completed command, and finally
 * clears the allocated bit associated with the completed command.
 *
 * @port   Pointer to the port data structure.
 * @tag    Tag of the command.
 * @data   Pointer to driver_data.
 * @status Completion status.
 *
 * return value
 *      None
 */
static void mtip_async_complete(struct mtip_port *port,
                                int tag,
                                void *data,
                                int status)
{
        struct mtip_cmd *cmd;
        struct driver_data *dd = data;
        int unaligned, cb_status = status ? -EIO : 0;
        void (*func)(void *, int);

        if (unlikely(!dd) || unlikely(!port))
                return;

        cmd = &port->commands[tag];

        if (unlikely(status == PORT_IRQ_TF_ERR)) {
                dev_warn(&port->dd->pdev->dev,
                        "Command tag %d failed due to TFE\n", tag);
        }

        /* Clear the active flag */
        atomic_set(&port->commands[tag].active, 0);

        /* Upper layer callback */
        func = cmd->async_callback;
        if (likely(func && cmpxchg(&cmd->async_callback, func, 0) == func)) {

                /* Unmap the DMA scatter list entries */
                dma_unmap_sg(&dd->pdev->dev,
                        cmd->sg,
                        cmd->scatter_ents,
                        cmd->direction);

                func(cmd->async_data, cb_status);
                unaligned = cmd->unaligned;

                /* Clear the allocated bit for the command */
                release_slot(port, tag);

                if (unlikely(unaligned))
                        up(&port->cmd_slot_unal);
                else
                        up(&port->cmd_slot);
        }
}

/*
 * This function is called for clean the pending command in the
 * command slot during the surprise removal of device and return
 * error to the upper layer.
 *
 * @dd Pointer to the DRIVER_DATA structure.
 *
 * return value
 *      None
 */
static void mtip_command_cleanup(struct driver_data *dd)
{
        int tag = 0;
        struct mtip_cmd *cmd;
        struct mtip_port *port = dd->port;
        unsigned int num_cmd_slots = dd->slot_groups * 32;

        if (!test_bit(MTIP_DDF_INIT_DONE_BIT, &dd->dd_flag))
                return;

        if (!port)
                return;

        cmd = &port->commands[MTIP_TAG_INTERNAL];
        if (atomic_read(&cmd->active))
                if (readl(port->cmd_issue[MTIP_TAG_INTERNAL]) &
                                        (1 << MTIP_TAG_INTERNAL))
                        if (cmd->comp_func)
                                cmd->comp_func(port, MTIP_TAG_INTERNAL,
                                         cmd->comp_data, -ENODEV);

        while (1) {
                tag = find_next_bit(port->allocated, num_cmd_slots, tag);
                if (tag >= num_cmd_slots)
                        break;

                cmd = &port->commands[tag];
                if (atomic_read(&cmd->active))
                        mtip_async_complete(port, tag, dd, -ENODEV);
        }

        set_bit(MTIP_DDF_CLEANUP_BIT, &dd->dd_flag);
}

/*
 * Reset the HBA (without sleeping)
 *
 * @dd Pointer to the driver data structure.
 *
 * return value
 *      0       The reset was successful.
 *      -1      The HBA Reset bit did not clear.
 */
static int mtip_hba_reset(struct driver_data *dd)
{
        unsigned long timeout;

        /* Set the reset bit */
        writel(HOST_RESET, dd->mmio + HOST_CTL);

        /* Flush */
        readl(dd->mmio + HOST_CTL);

        /* Spin for up to 2 seconds, waiting for reset acknowledgement */
        timeout = jiffies + msecs_to_jiffies(2000);
        do {
                mdelay(10);
                if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &dd->dd_flag))
                        return -1;

        } while ((readl(dd->mmio + HOST_CTL) & HOST_RESET)
                 && time_before(jiffies, timeout));

        if (readl(dd->mmio + HOST_CTL) & HOST_RESET)
                return -1;

        return 0;
}

/*
 * Issue a command to the hardware.
 *
 * Set the appropriate bit in the s_active and Command Issue hardware
 * registers, causing hardware command processing to begin.
 *
 * @port Pointer to the port structure.
 * @tag  The tag of the command to be issued.
 *
 * return value
 *      None
 */
static inline void mtip_issue_ncq_command(struct mtip_port *port, int tag)
{
        int group = tag >> 5;

        atomic_set(&port->commands[tag].active, 1);

        /* guard SACT and CI registers */
        spin_lock(&port->cmd_issue_lock[group]);
        writel((1 << MTIP_TAG_BIT(tag)),
                        port->s_active[MTIP_TAG_INDEX(tag)]);
        writel((1 << MTIP_TAG_BIT(tag)),
                        port->cmd_issue[MTIP_TAG_INDEX(tag)]);
        spin_unlock(&port->cmd_issue_lock[group]);

        /* Set the command's timeout value.*/
        port->commands[tag].comp_time = jiffies + msecs_to_jiffies(
                                        MTIP_NCQ_COMMAND_TIMEOUT_MS);
}

/*
 * Enable/disable the reception of FIS
 *
 * @port   Pointer to the port data structure
 * @enable 1 to enable, 0 to disable
 *
 * return value
 *      Previous state: 1 enabled, 0 disabled
 */
static int mtip_enable_fis(struct mtip_port *port, int enable)
{
        u32 tmp;

        /* enable FIS reception */
        tmp = readl(port->mmio + PORT_CMD);
        if (enable)
                writel(tmp | PORT_CMD_FIS_RX, port->mmio + PORT_CMD);
        else
                writel(tmp & ~PORT_CMD_FIS_RX, port->mmio + PORT_CMD);

        /* Flush */
        readl(port->mmio + PORT_CMD);

        return (((tmp & PORT_CMD_FIS_RX) == PORT_CMD_FIS_RX));
}

/*
 * Enable/disable the DMA engine
 *
 * @port   Pointer to the port data structure
 * @enable 1 to enable, 0 to disable
 *
 * return value
 *      Previous state: 1 enabled, 0 disabled.
 */
static int mtip_enable_engine(struct mtip_port *port, int enable)
{
        u32 tmp;

        /* enable FIS reception */
        tmp = readl(port->mmio + PORT_CMD);
        if (enable)
                writel(tmp | PORT_CMD_START, port->mmio + PORT_CMD);
        else
                writel(tmp & ~PORT_CMD_START, port->mmio + PORT_CMD);

        readl(port->mmio + PORT_CMD);
        return (((tmp & PORT_CMD_START) == PORT_CMD_START));
}

/*
 * Enables the port DMA engine and FIS reception.
 *
 * return value
 *      None
 */
static inline void mtip_start_port(struct mtip_port *port)
{
        /* Enable FIS reception */
        mtip_enable_fis(port, 1);

        /* Enable the DMA engine */
        mtip_enable_engine(port, 1);
}

/*
 * Deinitialize a port by disabling port interrupts, the DMA engine,
 * and FIS reception.
 *
 * @port Pointer to the port structure
 *
 * return value
 *      None
 */
static inline void mtip_deinit_port(struct mtip_port *port)
{
        /* Disable interrupts on this port */
        writel(0, port->mmio + PORT_IRQ_MASK);

        /* Disable the DMA engine */
        mtip_enable_engine(port, 0);

        /* Disable FIS reception */
        mtip_enable_fis(port, 0);
}

/*
 * Initialize a port.
 *
 * This function deinitializes the port by calling mtip_deinit_port() and
 * then initializes it by setting the command header and RX FIS addresses,
 * clearing the SError register and any pending port interrupts before
 * re-enabling the default set of port interrupts.
 *
 * @port Pointer to the port structure.
 *
 * return value
 *      None
 */
static void mtip_init_port(struct mtip_port *port)
{
        int i;
        mtip_deinit_port(port);

        /* Program the command list base and FIS base addresses */
        if (readl(port->dd->mmio + HOST_CAP) & HOST_CAP_64) {
                writel((port->command_list_dma >> 16) >> 16,
                         port->mmio + PORT_LST_ADDR_HI);
                writel((port->rxfis_dma >> 16) >> 16,
                         port->mmio + PORT_FIS_ADDR_HI);
        }

        writel(port->command_list_dma & 0xFFFFFFFF,
                        port->mmio + PORT_LST_ADDR);
        writel(port->rxfis_dma & 0xFFFFFFFF, port->mmio + PORT_FIS_ADDR);

        /* Clear SError */
        writel(readl(port->mmio + PORT_SCR_ERR), port->mmio + PORT_SCR_ERR);

        /* reset the completed registers.*/
        for (i = 0; i < port->dd->slot_groups; i++)
                writel(0xFFFFFFFF, port->completed[i]);

        /* Clear any pending interrupts for this port */
        writel(readl(port->mmio + PORT_IRQ_STAT), port->mmio + PORT_IRQ_STAT);

        /* Clear any pending interrupts on the HBA. */
        writel(readl(port->dd->mmio + HOST_IRQ_STAT),
                                        port->dd->mmio + HOST_IRQ_STAT);

        /* Enable port interrupts */
        writel(DEF_PORT_IRQ, port->mmio + PORT_IRQ_MASK);
}

/*
 * Restart a port
 *
 * @port Pointer to the port data structure.
 *
 * return value
 *      None
 */
static void mtip_restart_port(struct mtip_port *port)
{
        unsigned long timeout;

        /* Disable the DMA engine */
        mtip_enable_engine(port, 0);

        /* Chip quirk: wait up to 500ms for PxCMD.CR == 0 */
        timeout = jiffies + msecs_to_jiffies(500);
        while ((readl(port->mmio + PORT_CMD) & PORT_CMD_LIST_ON)
                 && time_before(jiffies, timeout))
                ;

        if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &port->dd->dd_flag))
                return;

        /*
         * Chip quirk: escalate to hba reset if
         * PxCMD.CR not clear after 500 ms
         */
        if (readl(port->mmio + PORT_CMD) & PORT_CMD_LIST_ON) {
                dev_warn(&port->dd->pdev->dev,
                        "PxCMD.CR not clear, escalating reset\n");

                if (mtip_hba_reset(port->dd))
                        dev_err(&port->dd->pdev->dev,
                                "HBA reset escalation failed.\n");

                /* 30 ms delay before com reset to quiesce chip */
                mdelay(30);
        }

        dev_warn(&port->dd->pdev->dev, "Issuing COM reset\n");

        /* Set PxSCTL.DET */
        writel(readl(port->mmio + PORT_SCR_CTL) |
                         1, port->mmio + PORT_SCR_CTL);
        readl(port->mmio + PORT_SCR_CTL);

        /* Wait 1 ms to quiesce chip function */
        timeout = jiffies + msecs_to_jiffies(1);
        while (time_before(jiffies, timeout))
                ;

        if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &port->dd->dd_flag))
                return;

        /* Clear PxSCTL.DET */
        writel(readl(port->mmio + PORT_SCR_CTL) & ~1,
                         port->mmio + PORT_SCR_CTL);
        readl(port->mmio + PORT_SCR_CTL);

        /* Wait 500 ms for bit 0 of PORT_SCR_STS to be set */
        timeout = jiffies + msecs_to_jiffies(500);
        while (((readl(port->mmio + PORT_SCR_STAT) & 0x01) == 0)
                         && time_before(jiffies, timeout))
                ;

        if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &port->dd->dd_flag))
                return;

        if ((readl(port->mmio + PORT_SCR_STAT) & 0x01) == 0)
                dev_warn(&port->dd->pdev->dev,
                        "COM reset failed\n");

        mtip_init_port(port);
        mtip_start_port(port);

}

static int mtip_device_reset(struct driver_data *dd)
{
        int rv = 0;

        if (mtip_check_surprise_removal(dd->pdev))
                return 0;

        if (mtip_hba_reset(dd) < 0)
                rv = -EFAULT;

        mdelay(1);
        mtip_init_port(dd->port);
        mtip_start_port(dd->port);

        /* Enable interrupts on the HBA. */
        writel(readl(dd->mmio + HOST_CTL) | HOST_IRQ_EN,
                                        dd->mmio + HOST_CTL);
        return rv;
}

/*
 * Helper function for tag logging
 */
static void print_tags(struct driver_data *dd,
                        char *msg,
                        unsigned long *tagbits,
                        int cnt)
{
        unsigned char tagmap[128];
        int group, tagmap_len = 0;

        memset(tagmap, 0, sizeof(tagmap));
        for (group = SLOTBITS_IN_LONGS; group > 0; group--)
                tagmap_len = sprintf(tagmap + tagmap_len, "%016lX ",
                                                tagbits[group-1]);
        dev_warn(&dd->pdev->dev,
                        "%d command(s) %s: tagmap [%s]", cnt, msg, tagmap);
}

/*
 * Called periodically to see if any read/write commands are
 * taking too long to complete.
 *
 * @data Pointer to the PORT data structure.
 *
 * return value
 *      None
 */
static void mtip_timeout_function(unsigned long int data)
{
        struct mtip_port *port = (struct mtip_port *) data;
        struct host_to_dev_fis *fis;
        struct mtip_cmd *cmd;
        int unaligned, tag, cmdto_cnt = 0;
        unsigned int bit, group;
        unsigned int num_command_slots;
        unsigned long to, tagaccum[SLOTBITS_IN_LONGS];
        void (*func)(void *, int);

        if (unlikely(!port))
                return;

        if (unlikely(port->dd->sr))
                return;

        if (test_bit(MTIP_DDF_RESUME_BIT, &port->dd->dd_flag)) {
                mod_timer(&port->cmd_timer,
                        jiffies + msecs_to_jiffies(30000));
                return;
        }
        /* clear the tag accumulator */
        memset(tagaccum, 0, SLOTBITS_IN_LONGS * sizeof(long));
        num_command_slots = port->dd->slot_groups * 32;

        for (tag = 0; tag < num_command_slots; tag++) {
                /*
                 * Skip internal command slot as it has
                 * its own timeout mechanism
                 */
                if (tag == MTIP_TAG_INTERNAL)
                        continue;

                if (atomic_read(&port->commands[tag].active) &&
                   (time_after(jiffies, port->commands[tag].comp_time))) {
                        group = tag >> 5;
                        bit = tag & 0x1F;

                        cmd = &port->commands[tag];
                        fis = (struct host_to_dev_fis *) cmd->command;

                        set_bit(tag, tagaccum);
                        cmdto_cnt++;
                        if (cmdto_cnt == 1)
                                set_bit(MTIP_PF_EH_ACTIVE_BIT, &port->flags);

                        /*
                         * Clear the completed bit. This should prevent
                         *  any interrupt handlers from trying to retire
                         *  the command.
                         */
                        writel(1 << bit, port->completed[group]);

                        /* Clear the active flag for the command */
                        atomic_set(&port->commands[tag].active, 0);

                        func = cmd->async_callback;
                        if (func &&
                            cmpxchg(&cmd->async_callback, func, 0) == func) {

                                /* Unmap the DMA scatter list entries */
                                dma_unmap_sg(&port->dd->pdev->dev,
                                                cmd->sg,
                                                cmd->scatter_ents,
                                                cmd->direction);

                                func(cmd->async_data, -EIO);
                                unaligned = cmd->unaligned;

                                /* Clear the allocated bit for the command. */
                                release_slot(port, tag);

                                if (unaligned)
                                        up(&port->cmd_slot_unal);
                                else
                                        up(&port->cmd_slot);
                        }
                }
        }

        if (cmdto_cnt) {
                print_tags(port->dd, "timed out", tagaccum, cmdto_cnt);
                if (!test_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags)) {
                        mtip_device_reset(port->dd);
                        wake_up_interruptible(&port->svc_wait);
                }
                clear_bit(MTIP_PF_EH_ACTIVE_BIT, &port->flags);
        }

        if (port->ic_pause_timer) {
                to  = port->ic_pause_timer + msecs_to_jiffies(1000);
                if (time_after(jiffies, to)) {
                        if (!test_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags)) {
                                port->ic_pause_timer = 0;
                                clear_bit(MTIP_PF_SE_ACTIVE_BIT, &port->flags);
                                clear_bit(MTIP_PF_DM_ACTIVE_BIT, &port->flags);
                                clear_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags);
                                wake_up_interruptible(&port->svc_wait);
                        }


                }
        }

        /* Restart the timer */
        mod_timer(&port->cmd_timer,
                jiffies + msecs_to_jiffies(MTIP_TIMEOUT_CHECK_PERIOD));
}

/*
 * Internal command completion callback function.
 *
 * This function is normally called by the driver ISR when an internal
 * command completed. This function signals the command completion by
 * calling complete().
 *
 * @port   Pointer to the port data structure.
 * @tag    Tag of the command that has completed.
 * @data   Pointer to a completion structure.
 * @status Completion status.
 *
 * return value
 *      None
 */
static void mtip_completion(struct mtip_port *port,
                            int tag,
                            void *data,
                            int status)
{
        struct mtip_cmd *command = &port->commands[tag];
        struct completion *waiting = data;
        if (unlikely(status == PORT_IRQ_TF_ERR))
                dev_warn(&port->dd->pdev->dev,
                        "Internal command %d completed with TFE\n", tag);

        command->async_callback = NULL;
        command->comp_func = NULL;

        complete(waiting);
}

static void mtip_null_completion(struct mtip_port *port,
                            int tag,
                            void *data,
                            int status)
{
        return;
}

static int mtip_read_log_page(struct mtip_port *port, u8 page, u16 *buffer,
                                dma_addr_t buffer_dma, unsigned int sectors);
static int mtip_get_smart_attr(struct mtip_port *port, unsigned int id,
                                                struct smart_attr *attrib);
/*
 * Handle an error.
 *
 * @dd Pointer to the DRIVER_DATA structure.
 *
 * return value
 *      None
 */
static void mtip_handle_tfe(struct driver_data *dd)
{
        int group, tag, bit, reissue, rv;
        struct mtip_port *port;
        struct mtip_cmd  *cmd;
        u32 completed;
        struct host_to_dev_fis *fis;
        unsigned long tagaccum[SLOTBITS_IN_LONGS];
        unsigned int cmd_cnt = 0;
        unsigned char *buf;
        char *fail_reason = NULL;
        int fail_all_ncq_write = 0, fail_all_ncq_cmds = 0;

        dev_warn(&dd->pdev->dev, "Taskfile error\n");

        port = dd->port;

        /* Stop the timer to prevent command timeouts. */
        del_timer(&port->cmd_timer);
        set_bit(MTIP_PF_EH_ACTIVE_BIT, &port->flags);

        if (test_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags) &&
                        test_bit(MTIP_TAG_INTERNAL, port->allocated)) {
                cmd = &port->commands[MTIP_TAG_INTERNAL];
                dbg_printk(MTIP_DRV_NAME " TFE for the internal command\n");

                atomic_inc(&cmd->active); /* active > 1 indicates error */
                if (cmd->comp_data && cmd->comp_func) {
                        cmd->comp_func(port, MTIP_TAG_INTERNAL,
                                        cmd->comp_data, PORT_IRQ_TF_ERR);
                }
                goto handle_tfe_exit;
        }

        /* clear the tag accumulator */
        memset(tagaccum, 0, SLOTBITS_IN_LONGS * sizeof(long));

        /* Loop through all the groups */
        for (group = 0; group < dd->slot_groups; group++) {
                completed = readl(port->completed[group]);

                /* clear completed status register in the hardware.*/
                writel(completed, port->completed[group]);

                /* Process successfully completed commands */
                for (bit = 0; bit < 32 && completed; bit++) {
                        if (!(completed & (1<<bit)))
                                continue;
                        tag = (group << 5) + bit;

                        /* Skip the internal command slot */
                        if (tag == MTIP_TAG_INTERNAL)
                                continue;

                        cmd = &port->commands[tag];
                        if (likely(cmd->comp_func)) {
                                set_bit(tag, tagaccum);
                                cmd_cnt++;
                                atomic_set(&cmd->active, 0);
                                cmd->comp_func(port,
                                         tag,
                                         cmd->comp_data,
                                         0);
                        } else {
                                dev_err(&port->dd->pdev->dev,
                                        "Missing completion func for tag %d",
                                        tag);
                                if (mtip_check_surprise_removal(dd->pdev)) {
                                        /* don't proceed further */
                                        return;
                                }
                        }
                }
        }

        print_tags(dd, "completed (TFE)", tagaccum, cmd_cnt);

        /* Restart the port */
        mdelay(20);
        mtip_restart_port(port);

        /* Trying to determine the cause of the error */
        rv = mtip_read_log_page(dd->port, ATA_LOG_SATA_NCQ,
                                dd->port->log_buf,
                                dd->port->log_buf_dma, 1);
        if (rv) {
                dev_warn(&dd->pdev->dev,
                        "Error in READ LOG EXT (10h) command\n");
                /* non-critical error, don't fail the load */
        } else {
                buf = (unsigned char *)dd->port->log_buf;
                if (buf[259] & 0x1) {
                        dev_info(&dd->pdev->dev,
                                "Write protect bit is set.\n");
                        set_bit(MTIP_DDF_WRITE_PROTECT_BIT, &dd->dd_flag);
                        fail_all_ncq_write = 1;
                        fail_reason = "write protect";
                }
                if (buf[288] == 0xF7) {
                        dev_info(&dd->pdev->dev,
                                "Exceeded Tmax, drive in thermal shutdown.\n");
                        set_bit(MTIP_DDF_OVER_TEMP_BIT, &dd->dd_flag);
                        fail_all_ncq_cmds = 1;
                        fail_reason = "thermal shutdown";
                }
                if (buf[288] == 0xBF) {
                        set_bit(MTIP_DDF_SEC_LOCK_BIT, &dd->dd_flag);
                        dev_info(&dd->pdev->dev,
                                "Drive indicates rebuild has failed. Secure erase required.\n");
                        fail_all_ncq_cmds = 1;
                        fail_reason = "rebuild failed";
                }
        }

        /* clear the tag accumulator */
        memset(tagaccum, 0, SLOTBITS_IN_LONGS * sizeof(long));

        /* Loop through all the groups */
        for (group = 0; group < dd->slot_groups; group++) {
                for (bit = 0; bit < 32; bit++) {
                        reissue = 1;
                        tag = (group << 5) + bit;
                        cmd = &port->commands[tag];

                        /* If the active bit is set re-issue the command */
                        if (atomic_read(&cmd->active) == 0)
                                continue;

                        fis = (struct host_to_dev_fis *)cmd->command;

                        /* Should re-issue? */
                        if (tag == MTIP_TAG_INTERNAL ||
                            fis->command == ATA_CMD_SET_FEATURES)
                                reissue = 0;
                        else {
                                if (fail_all_ncq_cmds ||
                                        (fail_all_ncq_write &&
                                        fis->command == ATA_CMD_FPDMA_WRITE)) {
                                        dev_warn(&dd->pdev->dev,
                                        "  Fail: %s w/tag %d [%s].\n",
                                        fis->command == ATA_CMD_FPDMA_WRITE ?
                                                "write" : "read",
                                        tag,
                                        fail_reason != NULL ?
                                                fail_reason : "unknown");
                                        atomic_set(&cmd->active, 0);
                                        if (cmd->comp_func) {
                                                cmd->comp_func(port, tag,
                                                        cmd->comp_data,
                                                        -ENODATA);
                                        }
                                        continue;
                                }
                        }

                        /*
                         * First check if this command has
                         *  exceeded its retries.
                         */
                        if (reissue && (cmd->retries-- > 0)) {

                                set_bit(tag, tagaccum);

                                /* Re-issue the command. */
                                mtip_issue_ncq_command(port, tag);

                                continue;
                        }

                        /* Retire a command that will not be reissued */
                        dev_warn(&port->dd->pdev->dev,
                                "retiring tag %d\n", tag);
                        atomic_set(&cmd->active, 0);

                        if (cmd->comp_func)
                                cmd->comp_func(
                                        port,
                                        tag,
                                        cmd->comp_data,
                                        PORT_IRQ_TF_ERR);
                        else
                                dev_warn(&port->dd->pdev->dev,
                                        "Bad completion for tag %d\n",
                                        tag);
                }
        }
        print_tags(dd, "reissued (TFE)", tagaccum, cmd_cnt);

handle_tfe_exit:
        /* clear eh_active */
        clear_bit(MTIP_PF_EH_ACTIVE_BIT, &port->flags);
        wake_up_interruptible(&port->svc_wait);

        mod_timer(&port->cmd_timer,
                 jiffies + msecs_to_jiffies(MTIP_TIMEOUT_CHECK_PERIOD));
}

/*
 * Handle a set device bits interrupt
 */
static inline void mtip_workq_sdbfx(struct mtip_port *port, int group,
                                                        u32 completed)
{
        struct driver_data *dd = port->dd;
        int tag, bit;
        struct mtip_cmd *command;

        if (!completed) {
                WARN_ON_ONCE(!completed);
                return;
        }
        /* clear completed status register in the hardware.*/
        writel(completed, port->completed[group]);

        /* Process completed commands. */
        for (bit = 0; (bit < 32) && completed; bit++) {
                if (completed & 0x01) {
                        tag = (group << 5) | bit;

                        /* skip internal command slot. */
                        if (unlikely(tag == MTIP_TAG_INTERNAL))
                                continue;

                        command = &port->commands[tag];
                        /* make internal callback */
                        if (likely(command->comp_func)) {
                                command->comp_func(
                                        port,
                                        tag,
                                        command->comp_data,
                                        0);
                        } else {
                                dev_dbg(&dd->pdev->dev,
                                        "Null completion for tag %d",
                                        tag);

                                if (mtip_check_surprise_removal(
                                        dd->pdev)) {
                                        return;
                                }
                        }
                }
                completed >>= 1;
        }

        /* If last, re-enable interrupts */
        if (atomic_dec_return(&dd->irq_workers_active) == 0)
                writel(0xffffffff, dd->mmio + HOST_IRQ_STAT);
}

/*
 * Process legacy pio and d2h interrupts
 */
static inline void mtip_process_legacy(struct driver_data *dd, u32 port_stat)
{
        struct mtip_port *port = dd->port;
        struct mtip_cmd *cmd = &port->commands[MTIP_TAG_INTERNAL];

        if (test_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags) &&
            (cmd != NULL) && !(readl(port->cmd_issue[MTIP_TAG_INTERNAL])
                & (1 << MTIP_TAG_INTERNAL))) {
                if (cmd->comp_func) {
                        cmd->comp_func(port,
                                MTIP_TAG_INTERNAL,
                                cmd->comp_data,
                                0);
                        return;
                }
        }

        return;
}

/*
 * Demux and handle errors
 */
static inline void mtip_process_errors(struct driver_data *dd, u32 port_stat)
{
        if (likely(port_stat & (PORT_IRQ_TF_ERR | PORT_IRQ_IF_ERR)))
                mtip_handle_tfe(dd);

        if (unlikely(port_stat & PORT_IRQ_CONNECT)) {
                dev_warn(&dd->pdev->dev,
                        "Clearing PxSERR.DIAG.x\n");
                writel((1 << 26), dd->port->mmio + PORT_SCR_ERR);
        }

        if (unlikely(port_stat & PORT_IRQ_PHYRDY)) {
                dev_warn(&dd->pdev->dev,
                        "Clearing PxSERR.DIAG.n\n");
                writel((1 << 16), dd->port->mmio + PORT_SCR_ERR);
        }

        if (unlikely(port_stat & ~PORT_IRQ_HANDLED)) {
                dev_warn(&dd->pdev->dev,
                        "Port stat errors %x unhandled\n",
                        (port_stat & ~PORT_IRQ_HANDLED));
        }
}

static inline irqreturn_t mtip_handle_irq(struct driver_data *data)
{
        struct driver_data *dd = (struct driver_data *) data;
        struct mtip_port *port = dd->port;
        u32 hba_stat, port_stat;
        int rv = IRQ_NONE;
        int do_irq_enable = 1, i, workers;
        struct mtip_work *twork;

        hba_stat = readl(dd->mmio + HOST_IRQ_STAT);
        if (hba_stat) {
                rv = IRQ_HANDLED;

                /* Acknowledge the interrupt status on the port.*/
                port_stat = readl(port->mmio + PORT_IRQ_STAT);
                writel(port_stat, port->mmio + PORT_IRQ_STAT);

                /* Demux port status */
                if (likely(port_stat & PORT_IRQ_SDB_FIS)) {
                        do_irq_enable = 0;
                        WARN_ON_ONCE(atomic_read(&dd->irq_workers_active) != 0);

                        /* Start at 1: group zero is always local? */
                        for (i = 0, workers = 0; i < MTIP_MAX_SLOT_GROUPS;
                                                                        i++) {
                                twork = &dd->work[i];
                                twork->completed = readl(port->completed[i]);
                                if (twork->completed)
                                        workers++;
                        }

                        atomic_set(&dd->irq_workers_active, workers);
                        if (workers) {
                                for (i = 1; i < MTIP_MAX_SLOT_GROUPS; i++) {
                                        twork = &dd->work[i];
                                        if (twork->completed)
                                                queue_work_on(
                                                        twork->cpu_binding,
                                                        dd->isr_workq,
                                                        &twork->work);
                                }

                                if (likely(dd->work[0].completed))
                                        mtip_workq_sdbfx(port, 0,
                                                        dd->work[0].completed);

                        } else {
                                /*
                                 * Chip quirk: SDB interrupt but nothing
                                 * to complete
                                 */
                                do_irq_enable = 1;
                        }
                }

                if (unlikely(port_stat & PORT_IRQ_ERR)) {
                        if (unlikely(mtip_check_surprise_removal(dd->pdev))) {
                                /* don't proceed further */
                                return IRQ_HANDLED;
                        }
                        if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT,
                                                        &dd->dd_flag))
                                return rv;

                        mtip_process_errors(dd, port_stat & PORT_IRQ_ERR);
                }

                if (unlikely(port_stat & PORT_IRQ_LEGACY))
                        mtip_process_legacy(dd, port_stat & PORT_IRQ_LEGACY);
        }

        /* acknowledge interrupt */
        if (unlikely(do_irq_enable))
                writel(hba_stat, dd->mmio + HOST_IRQ_STAT);

        return rv;
}

/*
 * HBA interrupt subroutine.
 *
 * @irq         IRQ number.
 * @instance    Pointer to the driver data structure.
 *
 * return value
 *      IRQ_HANDLED     A HBA interrupt was pending and handled.
 *      IRQ_NONE        This interrupt was not for the HBA.
 */
static irqreturn_t mtip_irq_handler(int irq, void *instance)
{
        struct driver_data *dd = instance;

        return mtip_handle_irq(dd);
}

static void mtip_issue_non_ncq_command(struct mtip_port *port, int tag)
{
        atomic_set(&port->commands[tag].active, 1);
        writel(1 << MTIP_TAG_BIT(tag),
                port->cmd_issue[MTIP_TAG_INDEX(tag)]);
}

static bool mtip_pause_ncq(struct mtip_port *port,
                                struct host_to_dev_fis *fis)
{
        struct host_to_dev_fis *reply;
        unsigned long task_file_data;

        reply = port->rxfis + RX_FIS_D2H_REG;
        task_file_data = readl(port->mmio+PORT_TFDATA);

        if (fis->command == ATA_CMD_SEC_ERASE_UNIT)
                clear_bit(MTIP_DDF_SEC_LOCK_BIT, &port->dd->dd_flag);

        if ((task_file_data & 1))
                return false;

        if (fis->command == ATA_CMD_SEC_ERASE_PREP) {
                set_bit(MTIP_PF_SE_ACTIVE_BIT, &port->flags);
                set_bit(MTIP_DDF_SEC_LOCK_BIT, &port->dd->dd_flag);
                port->ic_pause_timer = jiffies;
                return true;
        } else if ((fis->command == ATA_CMD_DOWNLOAD_MICRO) &&
                                        (fis->features == 0x03)) {
                set_bit(MTIP_PF_DM_ACTIVE_BIT, &port->flags);
                port->ic_pause_timer = jiffies;
                return true;
        } else if ((fis->command == ATA_CMD_SEC_ERASE_UNIT) ||
                ((fis->command == 0xFC) &&
                        (fis->features == 0x27 || fis->features == 0x72 ||
                         fis->features == 0x62 || fis->features == 0x26))) {
                /* Com reset after secure erase or lowlevel format */
                mtip_restart_port(port);
                return false;
        }

        return false;
}

/*
 * Wait for port to quiesce
 *
 * @port    Pointer to port data structure
 * @timeout Max duration to wait (ms)
 *
 * return value
 *      0       Success
 *      -EBUSY  Commands still active
 */
static int mtip_quiesce_io(struct mtip_port *port, unsigned long timeout)
{
        unsigned long to;
        unsigned int n;
        unsigned int active = 1;

        to = jiffies + msecs_to_jiffies(timeout);
        do {
                if (test_bit(MTIP_PF_SVC_THD_ACTIVE_BIT, &port->flags) &&
                        test_bit(MTIP_PF_ISSUE_CMDS_BIT, &port->flags)) {
                        msleep(20);
                        continue; /* svc thd is actively issuing commands */
                }
                if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &port->dd->dd_flag))
                        return -EFAULT;
                /*
                 * Ignore s_active bit 0 of array element 0.
                 * This bit will always be set
                 */
                active = readl(port->s_active[0]) & 0xFFFFFFFE;
                for (n = 1; n < port->dd->slot_groups; n++)
                        active |= readl(port->s_active[n]);

                if (!active)
                        break;

                msleep(20);
        } while (time_before(jiffies, to));

        return active ? -EBUSY : 0;
}

/*
 * Execute an internal command and wait for the completion.
 *
 * @port    Pointer to the port data structure.
 * @fis     Pointer to the FIS that describes the command.
 * @fis_len  Length in WORDS of the FIS.
 * @buffer  DMA accessible for command data.
 * @buf_len  Length, in bytes, of the data buffer.
 * @opts    Command header options, excluding the FIS length
 *             and the number of PRD entries.
 * @timeout Time in ms to wait for the command to complete.
 *
 * return value
 *      0        Command completed successfully.
 *      -EFAULT  The buffer address is not correctly aligned.
 *      -EBUSY   Internal command or other IO in progress.
 *      -EAGAIN  Time out waiting for command to complete.
 */
static int mtip_exec_internal_command(struct mtip_port *port,
                                        struct host_to_dev_fis *fis,
                                        int fis_len,
                                        dma_addr_t buffer,
                                        int buf_len,
                                        u32 opts,
                                        gfp_t atomic,
                                        unsigned long timeout)
{
        struct mtip_cmd_sg *command_sg;
        DECLARE_COMPLETION_ONSTACK(wait);
        int rv = 0, ready2go = 1;
        struct mtip_cmd *int_cmd = &port->commands[MTIP_TAG_INTERNAL];
        unsigned long to;
        struct driver_data *dd = port->dd;

        /* Make sure the buffer is 8 byte aligned. This is asic specific. */
        if (buffer & 0x00000007) {
                dev_err(&dd->pdev->dev, "SG buffer is not 8 byte aligned\n");
                return -EFAULT;
        }

        to = jiffies + msecs_to_jiffies(timeout);
        do {
                ready2go = !test_and_set_bit(MTIP_TAG_INTERNAL,
                                                port->allocated);
                if (ready2go)
                        break;
                mdelay(100);
        } while (time_before(jiffies, to));
        if (!ready2go) {
                dev_warn(&dd->pdev->dev,
                        "Internal cmd active. new cmd [%02X]\n", fis->command);
                return -EBUSY;
        }
        set_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags);
        port->ic_pause_timer = 0;

        clear_bit(MTIP_PF_SE_ACTIVE_BIT, &port->flags);
        clear_bit(MTIP_PF_DM_ACTIVE_BIT, &port->flags);

        if (atomic == GFP_KERNEL) {
                if (fis->command != ATA_CMD_STANDBYNOW1) {
                        /* wait for io to complete if non atomic */
                        if (mtip_quiesce_io(port, 5000) < 0) {
                                dev_warn(&dd->pdev->dev,
                                        "Failed to quiesce IO\n");
                                release_slot(port, MTIP_TAG_INTERNAL);
                                clear_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags);
                                wake_up_interruptible(&port->svc_wait);
                                return -EBUSY;
                        }
                }

                /* Set the completion function and data for the command. */
                int_cmd->comp_data = &wait;
                int_cmd->comp_func = mtip_completion;

        } else {
                /* Clear completion - we're going to poll */
                int_cmd->comp_data = NULL;
                int_cmd->comp_func = mtip_null_completion;
        }

        /* Copy the command to the command table */
        memcpy(int_cmd->command, fis, fis_len*4);

        /* Populate the SG list */
        int_cmd->command_header->opts =
                 __force_bit2int cpu_to_le32(opts | fis_len);
        if (buf_len) {
                command_sg = int_cmd->command + AHCI_CMD_TBL_HDR_SZ;

                command_sg->info =
                        __force_bit2int cpu_to_le32((buf_len-1) & 0x3FFFFF);
                command_sg->dba =
                        __force_bit2int cpu_to_le32(buffer & 0xFFFFFFFF);
                command_sg->dba_upper =
                        __force_bit2int cpu_to_le32((buffer >> 16) >> 16);

                int_cmd->command_header->opts |=
                        __force_bit2int cpu_to_le32((1 << 16));
        }

        /* Populate the command header */
        int_cmd->command_header->byte_count = 0;

        /* Issue the command to the hardware */
        mtip_issue_non_ncq_command(port, MTIP_TAG_INTERNAL);

        if (atomic == GFP_KERNEL) {
                /* Wait for the command to complete or timeout. */
                if (wait_for_completion_interruptible_timeout(
                                &wait,
                                msecs_to_jiffies(timeout)) <= 0) {
                        if (rv == -ERESTARTSYS) { /* interrupted */
                                dev_err(&dd->pdev->dev,
                                        "Internal command [%02X] was interrupted after %lu ms\n",
                                        fis->command, timeout);
                                rv = -EINTR;
                                goto exec_ic_exit;
                        } else if (rv == 0) /* timeout */
                                dev_err(&dd->pdev->dev,
                                        "Internal command did not complete [%02X] within timeout of  %lu ms\n",
                                        fis->command, timeout);
                        else
                                dev_err(&dd->pdev->dev,
                                        "Internal command [%02X] wait returned code [%d] after %lu ms - unhandled\n",
                                        fis->command, rv, timeout);

                        if (mtip_check_surprise_removal(dd->pdev) ||
                                test_bit(MTIP_DDF_REMOVE_PENDING_BIT,
                                                &dd->dd_flag)) {
                                dev_err(&dd->pdev->dev,
                                        "Internal command [%02X] wait returned due to SR\n",
                                        fis->command);
                                rv = -ENXIO;
                                goto exec_ic_exit;
                        }
                        mtip_device_reset(dd); /* recover from timeout issue */
                        rv = -EAGAIN;
                        goto exec_ic_exit;
                }
        } else {
                u32 hba_stat, port_stat;

                /* Spin for <timeout> checking if command still outstanding */
                timeout = jiffies + msecs_to_jiffies(timeout);
                while ((readl(port->cmd_issue[MTIP_TAG_INTERNAL])
                                & (1 << MTIP_TAG_INTERNAL))
                                && time_before(jiffies, timeout)) {
                        if (mtip_check_surprise_removal(dd->pdev)) {
                                rv = -ENXIO;
                                goto exec_ic_exit;
                        }
                        if ((fis->command != ATA_CMD_STANDBYNOW1) &&
                                test_bit(MTIP_DDF_REMOVE_PENDING_BIT,
                                                &dd->dd_flag)) {
                                rv = -ENXIO;
                                goto exec_ic_exit;
                        }
                        port_stat = readl(port->mmio + PORT_IRQ_STAT);
                        if (!port_stat)
                                continue;

                        if (port_stat & PORT_IRQ_ERR) {
                                dev_err(&dd->pdev->dev,
                                        "Internal command [%02X] failed\n",
                                        fis->command);
                                mtip_device_reset(dd);
                                rv = -EIO;
                                goto exec_ic_exit;
                        } else {
                                writel(port_stat, port->mmio + PORT_IRQ_STAT);
                                hba_stat = readl(dd->mmio + HOST_IRQ_STAT);
                                if (hba_stat)
                                        writel(hba_stat,
                                                dd->mmio + HOST_IRQ_STAT);
                        }
                        break;
                }
        }

        if (readl(port->cmd_issue[MTIP_TAG_INTERNAL])
                        & (1 << MTIP_TAG_INTERNAL)) {
                rv = -ENXIO;
                if (!test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &dd->dd_flag)) {
                        mtip_device_reset(dd);
                        rv = -EAGAIN;
                }
        }
exec_ic_exit:
        /* Clear the allocated and active bits for the internal command. */
        atomic_set(&int_cmd->active, 0);
        release_slot(port, MTIP_TAG_INTERNAL);
        if (rv >= 0 && mtip_pause_ncq(port, fis)) {
                /* NCQ paused */
                return rv;
        }
        clear_bit(MTIP_PF_IC_ACTIVE_BIT, &port->flags);
        wake_up_interruptible(&port->svc_wait);

        return rv;
}

/*
 * Byte-swap ATA ID strings.
 *
 * ATA identify data contains strings in byte-swapped 16-bit words.
 * They must be swapped (on all architectures) to be usable as C strings.
 * This function swaps bytes in-place.
 *
 * @buf The buffer location of the string
 * @len The number of bytes to swap
 *
 * return value
 *      None
 */
static inline void ata_swap_string(u16 *buf, unsigned int len)
{
        int i;
        for (i = 0; i < (len/2); i++)
                be16_to_cpus(&buf[i]);
}

/*
 * Request the device identity information.
 *
 * If a user space buffer is not specified, i.e. is NULL, the
 * identify information is still read from the drive and placed
 * into the identify data buffer (@e port->identify) in the
 * port data structure.
 * When the identify buffer contains valid identify information @e
 * port->identify_valid is non-zero.
 *
 * @port         Pointer to the port structure.
 * @user_buffer  A user space buffer where the identify data should be
 *                    copied.
 *
 * return value
 *      0       Command completed successfully.
 *      -EFAULT An error occurred while coping data to the user buffer.
 *      -1      Command failed.
 */
static int mtip_get_identify(struct mtip_port *port, void __user *user_buffer)
{
        int rv = 0;
        struct host_to_dev_fis fis;

        if (test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &port->dd->dd_flag))
                return -EFAULT;

        /* Build the FIS. */
        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = ATA_CMD_ID_ATA;

        /* Set the identify information as invalid. */
        port->identify_valid = 0;

        /* Clear the identify information. */
        memset(port->identify, 0, sizeof(u16) * ATA_ID_WORDS);

        /* Execute the command. */
        if (mtip_exec_internal_command(port,
                                &fis,
                                5,
                                port->identify_dma,
                                sizeof(u16) * ATA_ID_WORDS,
                                0,
                                GFP_KERNEL,
                                MTIP_INTERNAL_COMMAND_TIMEOUT_MS)
                                < 0) {
                rv = -1;
                goto out;
        }

        /*
         * Perform any necessary byte-swapping.  Yes, the kernel does in fact
         * perform field-sensitive swapping on the string fields.
         * See the kernel use of ata_id_string() for proof of this.
         */
#ifdef __LITTLE_ENDIAN
        ata_swap_string(port->identify + 27, 40);  /* model string*/
        ata_swap_string(port->identify + 23, 8);   /* firmware string*/
        ata_swap_string(port->identify + 10, 20);  /* serial# string*/
#else
        {
                int i;
                for (i = 0; i < ATA_ID_WORDS; i++)
                        port->identify[i] = le16_to_cpu(port->identify[i]);
        }
#endif

        /* Check security locked state */
        if (port->identify[128] & 0x4)
                set_bit(MTIP_DDF_SEC_LOCK_BIT, &port->dd->dd_flag);
        else
                clear_bit(MTIP_DDF_SEC_LOCK_BIT, &port->dd->dd_flag);

#ifdef MTIP_TRIM /* Disabling TRIM support temporarily */
        /* Demux ID.DRAT & ID.RZAT to determine trim support */
        if (port->identify[69] & (1 << 14) && port->identify[69] & (1 << 5))
                port->dd->trim_supp = true;
        else
#endif
                port->dd->trim_supp = false;

        /* Set the identify buffer as valid. */
        port->identify_valid = 1;

        if (user_buffer) {
                if (copy_to_user(
                        user_buffer,
                        port->identify,
                        ATA_ID_WORDS * sizeof(u16))) {
                        rv = -EFAULT;
                        goto out;
                }
        }

out:
        return rv;
}

/*
 * Issue a standby immediate command to the device.
 *
 * @port Pointer to the port structure.
 *
 * return value
 *      0       Command was executed successfully.
 *      -1      An error occurred while executing the command.
 */
static int mtip_standby_immediate(struct mtip_port *port)
{
        int rv;
        struct host_to_dev_fis  fis;
        unsigned long start;

        /* Build the FIS. */
        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = ATA_CMD_STANDBYNOW1;

        start = jiffies;
        rv = mtip_exec_internal_command(port,
                                        &fis,
                                        5,
                                        0,
                                        0,
                                        0,
                                        GFP_ATOMIC,
                                        15000);
        dbg_printk(MTIP_DRV_NAME "Time taken to complete standby cmd: %d ms\n",
                        jiffies_to_msecs(jiffies - start));
        if (rv)
                dev_warn(&port->dd->pdev->dev,
                        "STANDBY IMMEDIATE command failed.\n");

        return rv;
}

/*
 * Issue a READ LOG EXT command to the device.
 *
 * @port        pointer to the port structure.
 * @page        page number to fetch
 * @buffer      pointer to buffer
 * @buffer_dma  dma address corresponding to @buffer
 * @sectors     page length to fetch, in sectors
 *
 * return value
 *      @rv     return value from mtip_exec_internal_command()
 */
static int mtip_read_log_page(struct mtip_port *port, u8 page, u16 *buffer,
                                dma_addr_t buffer_dma, unsigned int sectors)
{
        struct host_to_dev_fis fis;

        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = ATA_CMD_READ_LOG_EXT;
        fis.sect_count  = sectors & 0xFF;
        fis.sect_cnt_ex = (sectors >> 8) & 0xFF;
        fis.lba_low     = page;
        fis.lba_mid     = 0;
        fis.device      = ATA_DEVICE_OBS;

        memset(buffer, 0, sectors * ATA_SECT_SIZE);

        return mtip_exec_internal_command(port,
                                        &fis,
                                        5,
                                        buffer_dma,
                                        sectors * ATA_SECT_SIZE,
                                        0,
                                        GFP_ATOMIC,
                                        MTIP_INTERNAL_COMMAND_TIMEOUT_MS);
}

/*
 * Issue a SMART READ DATA command to the device.
 *
 * @port        pointer to the port structure.
 * @buffer      pointer to buffer
 * @buffer_dma  dma address corresponding to @buffer
 *
 * return value
 *      @rv     return value from mtip_exec_internal_command()
 */
static int mtip_get_smart_data(struct mtip_port *port, u8 *buffer,
                                        dma_addr_t buffer_dma)
{
        struct host_to_dev_fis fis;

        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = ATA_CMD_SMART;
        fis.features    = 0xD0;
        fis.sect_count  = 1;
        fis.lba_mid     = 0x4F;
        fis.lba_hi      = 0xC2;
        fis.device      = ATA_DEVICE_OBS;

        return mtip_exec_internal_command(port,
                                        &fis,
                                        5,
                                        buffer_dma,
                                        ATA_SECT_SIZE,
                                        0,
                                        GFP_ATOMIC,
                                        15000);
}

/*
 * Get the value of a smart attribute
 *
 * @port        pointer to the port structure
 * @id          attribute number
 * @attrib      pointer to return attrib information corresponding to @id
 *
 * return value
 *      -EINVAL NULL buffer passed or unsupported attribute @id.
 *      -EPERM  Identify data not valid, SMART not supported or not enabled
 */
static int mtip_get_smart_attr(struct mtip_port *port, unsigned int id,
                                                struct smart_attr *attrib)
{
        int rv, i;
        struct smart_attr *pattr;

        if (!attrib)
                return -EINVAL;

        if (!port->identify_valid) {
                dev_warn(&port->dd->pdev->dev, "IDENTIFY DATA not valid\n");
                return -EPERM;
        }
        if (!(port->identify[82] & 0x1)) {
                dev_warn(&port->dd->pdev->dev, "SMART not supported\n");
                return -EPERM;
        }
        if (!(port->identify[85] & 0x1)) {
                dev_warn(&port->dd->pdev->dev, "SMART not enabled\n");
                return -EPERM;
        }

        memset(port->smart_buf, 0, ATA_SECT_SIZE);
        rv = mtip_get_smart_data(port, port->smart_buf, port->smart_buf_dma);
        if (rv) {
                dev_warn(&port->dd->pdev->dev, "Failed to ge SMART data\n");
                return rv;
        }

        pattr = (struct smart_attr *)(port->smart_buf + 2);
        for (i = 0; i < 29; i++, pattr++)
                if (pattr->attr_id == id) {
                        memcpy(attrib, pattr, sizeof(struct smart_attr));
                        break;
                }

        if (i == 29) {
                dev_warn(&port->dd->pdev->dev,
                        "Query for invalid SMART attribute ID\n");
                rv = -EINVAL;
        }

        return rv;
}

/*
 * Trim unused sectors
 *
 * @dd          pointer to driver_data structure
 * @lba         starting lba
 * @len         # of 512b sectors to trim
 *
 * return value
 *      -ENOMEM         Out of dma memory
 *      -EINVAL         Invalid parameters passed in, trim not supported
 *      -EIO            Error submitting trim request to hw
 */
static int mtip_send_trim(struct driver_data *dd, unsigned int lba,
                                unsigned int len)
{
        int i, rv = 0;
        u64 tlba, tlen, sect_left;
        struct mtip_trim_entry *buf;
        dma_addr_t dma_addr;
        struct host_to_dev_fis fis;

        if (!len || dd->trim_supp == false)
                return -EINVAL;

        /* Trim request too big */
        WARN_ON(len > (MTIP_MAX_TRIM_ENTRY_LEN * MTIP_MAX_TRIM_ENTRIES));

        /* Trim request not aligned on 4k boundary */
        WARN_ON(len % 8 != 0);

        /* Warn if vu_trim structure is too big */
        WARN_ON(sizeof(struct mtip_trim) > ATA_SECT_SIZE);

        /* Allocate a DMA buffer for the trim structure */
        buf = dmam_alloc_coherent(&dd->pdev->dev, ATA_SECT_SIZE, &dma_addr,
                                                                GFP_KERNEL);
        if (!buf)
                return -ENOMEM;
        memset(buf, 0, ATA_SECT_SIZE);

        for (i = 0, sect_left = len, tlba = lba;
                        i < MTIP_MAX_TRIM_ENTRIES && sect_left;
                        i++) {
                tlen = (sect_left >= MTIP_MAX_TRIM_ENTRY_LEN ?
                                        MTIP_MAX_TRIM_ENTRY_LEN :
                                        sect_left);
                buf[i].lba = __force_bit2int cpu_to_le32(tlba);
                buf[i].range = __force_bit2int cpu_to_le16(tlen);
                tlba += tlen;
                sect_left -= tlen;
        }
        WARN_ON(sect_left != 0);

        /* Build the fis */
        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type       = 0x27;
        fis.opts       = 1 << 7;
        fis.command    = 0xfb;
        fis.features   = 0x60;
        fis.sect_count = 1;
        fis.device     = ATA_DEVICE_OBS;

        if (mtip_exec_internal_command(dd->port,
                                        &fis,
                                        5,
                                        dma_addr,
                                        ATA_SECT_SIZE,
                                        0,
                                        GFP_KERNEL,
                                        MTIP_TRIM_TIMEOUT_MS) < 0)
                rv = -EIO;

        dmam_free_coherent(&dd->pdev->dev, ATA_SECT_SIZE, buf, dma_addr);
        return rv;
}

/*
 * Get the drive capacity.
 *
 * @dd      Pointer to the device data structure.
 * @sectors Pointer to the variable that will receive the sector count.
 *
 * return value
 *      1 Capacity was returned successfully.
 *      0 The identify information is invalid.
 */
static bool mtip_hw_get_capacity(struct driver_data *dd, sector_t *sectors)
{
        struct mtip_port *port = dd->port;
        u64 total, raw0, raw1, raw2, raw3;
        raw0 = port->identify[100];
        raw1 = port->identify[101];
        raw2 = port->identify[102];
        raw3 = port->identify[103];
        total = raw0 | raw1<<16 | raw2<<32 | raw3<<48;
        *sectors = total;
        return (bool) !!port->identify_valid;
}

/*
 * Display the identify command data.
 *
 * @port Pointer to the port data structure.
 *
 * return value
 *      None
 */
static void mtip_dump_identify(struct mtip_port *port)
{
        sector_t sectors;
        unsigned short revid;
        char cbuf[42];

        if (!port->identify_valid)
                return;

        strlcpy(cbuf, (char *)(port->identify+10), 21);
        dev_info(&port->dd->pdev->dev,
                "Serial No.: %s\n", cbuf);

        strlcpy(cbuf, (char *)(port->identify+23), 9);
        dev_info(&port->dd->pdev->dev,
                "Firmware Ver.: %s\n", cbuf);

        strlcpy(cbuf, (char *)(port->identify+27), 41);
        dev_info(&port->dd->pdev->dev, "Model: %s\n", cbuf);

        dev_info(&port->dd->pdev->dev, "Security: %04x %s\n",
                port->identify[128],
                port->identify[128] & 0x4 ? "(LOCKED)" : "");

        if (mtip_hw_get_capacity(port->dd, &sectors))
                dev_info(&port->dd->pdev->dev,
                        "Capacity: %llu sectors (%llu MB)\n",
                         (u64)sectors,
                         ((u64)sectors) * ATA_SECT_SIZE >> 20);

        pci_read_config_word(port->dd->pdev, PCI_REVISION_ID, &revid);
        switch (revid & 0xFF) {
        case 0x1:
                strlcpy(cbuf, "A0", 3);
                break;
        case 0x3:
                strlcpy(cbuf, "A2", 3);
                break;
        default:
                strlcpy(cbuf, "?", 2);
                break;
        }
        dev_info(&port->dd->pdev->dev,
                "Card Type: %s\n", cbuf);
}

/*
 * Map the commands scatter list into the command table.
 *
 * @command Pointer to the command.
 * @nents Number of scatter list entries.
 *
 * return value
 *      None
 */
static inline void fill_command_sg(struct driver_data *dd,
                                struct mtip_cmd *command,
                                int nents)
{
        int n;
        unsigned int dma_len;
        struct mtip_cmd_sg *command_sg;
        struct scatterlist *sg = command->sg;

        command_sg = command->command + AHCI_CMD_TBL_HDR_SZ;

        for (n = 0; n < nents; n++) {
                dma_len = sg_dma_len(sg);
                if (dma_len > 0x400000)
                        dev_err(&dd->pdev->dev,
                                "DMA segment length truncated\n");
                command_sg->info = __force_bit2int
                        cpu_to_le32((dma_len-1) & 0x3FFFFF);
                command_sg->dba = __force_bit2int
                        cpu_to_le32(sg_dma_address(sg));
                command_sg->dba_upper = __force_bit2int
                        cpu_to_le32((sg_dma_address(sg) >> 16) >> 16);
                command_sg++;
                sg++;
        }
}

/*
 * @brief Execute a drive command.
 *
 * return value 0 The command completed successfully.
 * return value -1 An error occurred while executing the command.
 */
static int exec_drive_task(struct mtip_port *port, u8 *command)
{
        struct host_to_dev_fis  fis;
        struct host_to_dev_fis *reply = (port->rxfis + RX_FIS_D2H_REG);

        /* Build the FIS. */
        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = command[0];
        fis.features    = command[1];
        fis.sect_count  = command[2];
        fis.sector      = command[3];
        fis.cyl_low     = command[4];
        fis.cyl_hi      = command[5];
        fis.device      = command[6] & ~0x10; /* Clear the dev bit*/

        dbg_printk(MTIP_DRV_NAME " %s: User Command: cmd %x, feat %x, nsect %x, sect %x, lcyl %x, hcyl %x, sel %x\n",
                __func__,
                command[0],
                command[1],
                command[2],
                command[3],
                command[4],
                command[5],
                command[6]);

        /* Execute the command. */
        if (mtip_exec_internal_command(port,
                                 &fis,
                                 5,
                                 0,
                                 0,
                                 0,
                                 GFP_KERNEL,
                                 MTIP_IOCTL_COMMAND_TIMEOUT_MS) < 0) {
                return -1;
        }

        command[0] = reply->command; /* Status*/
        command[1] = reply->features; /* Error*/
        command[4] = reply->cyl_low;
        command[5] = reply->cyl_hi;

        dbg_printk(MTIP_DRV_NAME " %s: Completion Status: stat %x, err %x , cyl_lo %x cyl_hi %x\n",
                __func__,
                command[0],
                command[1],
                command[4],
                command[5]);

        return 0;
}

/*
 * @brief Execute a drive command.
 *
 * @param port Pointer to the port data structure.
 * @param command Pointer to the user specified command parameters.
 * @param user_buffer Pointer to the user space buffer where read sector
 *                   data should be copied.
 *
 * return value 0 The command completed successfully.
 * return value -EFAULT An error occurred while copying the completion
 *                 data to the user space buffer.
 * return value -1 An error occurred while executing the command.
 */
static int exec_drive_command(struct mtip_port *port, u8 *command,
                                void __user *user_buffer)
{
        struct host_to_dev_fis  fis;
        struct host_to_dev_fis *reply;
        u8 *buf = NULL;
        dma_addr_t dma_addr = 0;
        int rv = 0, xfer_sz = command[3];

        if (xfer_sz) {
                if (!user_buffer)
                        return -EFAULT;

                buf = dmam_alloc_coherent(&port->dd->pdev->dev,
                                ATA_SECT_SIZE * xfer_sz,
                                &dma_addr,
                                GFP_KERNEL);
                if (!buf) {
                        dev_err(&port->dd->pdev->dev,
                                "Memory allocation failed (%d bytes)\n",
                                ATA_SECT_SIZE * xfer_sz);
                        return -ENOMEM;
                }
                memset(buf, 0, ATA_SECT_SIZE * xfer_sz);
        }

        /* Build the FIS. */
        memset(&fis, 0, sizeof(struct host_to_dev_fis));
        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = command[0];
        fis.features    = command[2];
        fis.sect_count  = command[3];
        if (fis.command == ATA_CMD_SMART) {
                fis.sector      = command[1];
                fis.cyl_low     = 0x4F;
                fis.cyl_hi      = 0xC2;
        }

        if (xfer_sz)
                reply = (port->rxfis + RX_FIS_PIO_SETUP);
        else
                reply = (port->rxfis + RX_FIS_D2H_REG);

        dbg_printk(MTIP_DRV_NAME
                " %s: User Command: cmd %x, sect %x, "
                "feat %x, sectcnt %x\n",
                __func__,
                command[0],
                command[1],
                command[2],
                command[3]);

        /* Execute the command. */
        if (mtip_exec_internal_command(port,
                                &fis,
                                 5,
                                 (xfer_sz ? dma_addr : 0),
                                 (xfer_sz ? ATA_SECT_SIZE * xfer_sz : 0),
                                 0,
                                 GFP_KERNEL,
                                 MTIP_IOCTL_COMMAND_TIMEOUT_MS)
                                 < 0) {
                rv = -EFAULT;
                goto exit_drive_command;
        }

        /* Collect the completion status. */
        command[0] = reply->command; /* Status*/
        command[1] = reply->features; /* Error*/
        command[2] = reply->sect_count;

        dbg_printk(MTIP_DRV_NAME
                " %s: Completion Status: stat %x, "
                "err %x, nsect %x\n",
                __func__,
                command[0],
                command[1],
                command[2]);

        if (xfer_sz) {
                if (copy_to_user(user_buffer,
                                 buf,
                                 ATA_SECT_SIZE * command[3])) {
                        rv = -EFAULT;
                        goto exit_drive_command;
                }
        }
exit_drive_command:
        if (buf)
                dmam_free_coherent(&port->dd->pdev->dev,
                                ATA_SECT_SIZE * xfer_sz, buf, dma_addr);
        return rv;
}

/*
 *  Indicates whether a command has a single sector payload.
 *
 *  @command passed to the device to perform the certain event.
 *  @features passed to the device to perform the certain event.
 *
 *  return value
 *      1       command is one that always has a single sector payload,
 *              regardless of the value in the Sector Count field.
 *      0       otherwise
 *
 */
static unsigned int implicit_sector(unsigned char command,
                                    unsigned char features)
{
        unsigned int rv = 0;

        /* list of commands that have an implicit sector count of 1 */
        switch (command) {
        case ATA_CMD_SEC_SET_PASS:
        case ATA_CMD_SEC_UNLOCK:
        case ATA_CMD_SEC_ERASE_PREP:
        case ATA_CMD_SEC_ERASE_UNIT:
        case ATA_CMD_SEC_FREEZE_LOCK:
        case ATA_CMD_SEC_DISABLE_PASS:
        case ATA_CMD_PMP_READ:
        case ATA_CMD_PMP_WRITE:
                rv = 1;
                break;
        case ATA_CMD_SET_MAX:
                if (features == ATA_SET_MAX_UNLOCK)
                        rv = 1;
                break;
        case ATA_CMD_SMART:
                if ((features == ATA_SMART_READ_VALUES) ||
                                (features == ATA_SMART_READ_THRESHOLDS))
                        rv = 1;
                break;
        case ATA_CMD_CONF_OVERLAY:
                if ((features == ATA_DCO_IDENTIFY) ||
                                (features == ATA_DCO_SET))
                        rv = 1;
                break;
        }
        return rv;
}
static void mtip_set_timeout(struct driver_data *dd,
                                        struct host_to_dev_fis *fis,
                                        unsigned int *timeout, u8 erasemode)
{
        switch (fis->command) {
        case ATA_CMD_DOWNLOAD_MICRO:
                *timeout = 120000; /* 2 minutes */
                break;
        case ATA_CMD_SEC_ERASE_UNIT:
        case 0xFC:
                if (erasemode)
                        *timeout = ((*(dd->port->identify + 90) * 2) * 60000);
                else
                        *timeout = ((*(dd->port->identify + 89) * 2) * 60000);
                break;
        case ATA_CMD_STANDBYNOW1:
                *timeout = 120000;  /* 2 minutes */
                break;
        case 0xF7:
        case 0xFA:
                *timeout = 60000;  /* 60 seconds */
                break;
        case ATA_CMD_SMART:
                *timeout = 15000;  /* 15 seconds */
                break;
        default:
                *timeout = MTIP_IOCTL_COMMAND_TIMEOUT_MS;
                break;
        }
}

/*
 * Executes a taskfile
 * See ide_taskfile_ioctl() for derivation
 */
static int exec_drive_taskfile(struct driver_data *dd,
                               void __user *buf,
                               ide_task_request_t *req_task,
                               int outtotal)
{
        struct host_to_dev_fis  fis;
        struct host_to_dev_fis *reply;
        u8 *outbuf = NULL;
        u8 *inbuf = NULL;
        dma_addr_t outbuf_dma = 0;
        dma_addr_t inbuf_dma = 0;
        dma_addr_t dma_buffer = 0;
        int err = 0;
        unsigned int taskin = 0;
        unsigned int taskout = 0;
        u8 nsect = 0;
        unsigned int timeout;
        unsigned int force_single_sector;
        unsigned int transfer_size;
        unsigned long task_file_data;
        int intotal = outtotal + req_task->out_size;
        int erasemode = 0;

        taskout = req_task->out_size;
        taskin = req_task->in_size;
        /* 130560 = 512 * 0xFF*/
        if (taskin > 130560 || taskout > 130560) {
                err = -EINVAL;
                goto abort;
        }

        if (taskout) {
                outbuf = kzalloc(taskout, GFP_KERNEL);
                if (outbuf == NULL) {
                        err = -ENOMEM;
                        goto abort;
                }
                if (copy_from_user(outbuf, buf + outtotal, taskout)) {
                        err = -EFAULT;
                        goto abort;
                }
                outbuf_dma = pci_map_single(dd->pdev,
                                         outbuf,
                                         taskout,
                                         DMA_TO_DEVICE);
                if (outbuf_dma == 0) {
                        err = -ENOMEM;
                        goto abort;
                }
                dma_buffer = outbuf_dma;
        }

        if (taskin) {
                inbuf = kzalloc(taskin, GFP_KERNEL);
                if (inbuf == NULL) {
                        err = -ENOMEM;
                        goto abort;
                }

                if (copy_from_user(inbuf, buf + intotal, taskin)) {
                        err = -EFAULT;
                        goto abort;
                }
                inbuf_dma = pci_map_single(dd->pdev,
                                         inbuf,
                                         taskin, DMA_FROM_DEVICE);
                if (inbuf_dma == 0) {
                        err = -ENOMEM;
                        goto abort;
                }
                dma_buffer = inbuf_dma;
        }

        /* only supports PIO and non-data commands from this ioctl. */
        switch (req_task->data_phase) {
        case TASKFILE_OUT:
                nsect = taskout / ATA_SECT_SIZE;
                reply = (dd->port->rxfis + RX_FIS_PIO_SETUP);
                break;
        case TASKFILE_IN:
                reply = (dd->port->rxfis + RX_FIS_PIO_SETUP);
                break;
        case TASKFILE_NO_DATA:
                reply = (dd->port->rxfis + RX_FIS_D2H_REG);
                break;
        default:
                err = -EINVAL;
                goto abort;
        }

        /* Build the FIS. */
        memset(&fis, 0, sizeof(struct host_to_dev_fis));

        fis.type        = 0x27;
        fis.opts        = 1 << 7;
        fis.command     = req_task->io_ports[7];
        fis.features    = req_task->io_ports[1];
        fis.sect_count  = req_task->io_ports[2];
        fis.lba_low     = req_task->io_ports[3];
        fis.lba_mid     = req_task->io_ports[4];
        fis.lba_hi      = req_task->io_ports[5];
         /* Clear the dev bit*/
        fis.device      = req_task->io_ports[6] & ~0x10;

        if ((req_task->in_flags.all == 0) && (req_task->out_flags.all & 1)) {
                req_task->in_flags.all  =
                        IDE_TASKFILE_STD_IN_FLAGS |
                        (IDE_HOB_STD_IN_FLAGS << 8);
                fis.lba_low_ex          = req_task->hob_ports[3];
                fis.lba_mid_ex          = req_task->hob_ports[4];
                fis.lba_hi_ex           = req_task->hob_ports[5];
                fis.features_ex         = req_task->hob_ports[1];
                fis.sect_cnt_ex         = req_task->hob_ports[2];

        } else {
                req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
        }

        force_single_sector = implicit_sector(fis.command, fis.features);

        if ((taskin || taskout) && (!fis.sect_count)) {
                if (nsect)
                        fis.sect_count = nsect;
                else {
                        if (!force_single_sector) {
                                dev_warn(&dd->pdev->dev,
                                        "data movement but "
                                        "sect_count is 0\n");
                                        err = -EINVAL;
                                        goto abort;
                        }
                }
        }

        dbg_printk(MTIP_DRV_NAME
                " %s: cmd %x, feat %x, nsect %x,"
                " sect/lbal %x, lcyl/lbam %x, hcyl/lbah %x,"
                " head/dev %x\n",
                __func__,
                fis.command,
                fis.features,
                fis.sect_count,
                fis.lba_low,
                fis.lba_mid,
                fis.lba_hi,
                fis.device);

        /* check for erase mode support during secure erase.*/
        if ((fis.command == ATA_CMD_SEC_ERASE_UNIT) && outbuf &&
                                        (outbuf[0] & MTIP_SEC_ERASE_MODE)) {
                erasemode = 1;
        }

        mtip_set_timeout(dd, &fis, &timeout, erasemode);

        /* Determine the correct transfer size.*/
        if (force_single_sector)
                transfer_size = ATA_SECT_SIZE;
        else
                transfer_size = ATA_SECT_SIZE * fis.sect_count;

        /* Execute the command.*/
        if (mtip_exec_internal_command(dd->port,
                                 &fis,
                                 5,
                                 dma_buffer,
                                 transfer_size,
                                 0,
                                 GFP_KERNEL,
                                 timeout) < 0) {
                err = -EIO;
                goto abort;
        }

        task_file_data = readl(dd->port->mmio+PORT_TFDATA);

        if ((req_task->data_phase == TASKFILE_IN) && !(task_file_data & 1)) {
                reply = dd->port->rxfis + RX_FIS_PIO_SETUP;
                req_task->io_ports[7] = reply->control;
        } else {
                reply = dd->port->rxfis + RX_FIS_D2H_REG;
                req_task->io_ports[7] = reply->command;
        }

        /* reclaim the DMA buffers.*/
        if (inbuf_dma)
                pci_unmap_single(dd->pdev, inbuf_dma,
                        taskin, DMA_FROM_DEVICE);
        if (outbuf_dma)
                pci_unmap_single(dd->pdev, outbuf_dma,
                        taskout, DMA_TO_DEVICE);
        inbuf_dma  = 0;
        outbuf_dma = 0;

        /* return the ATA registers to the caller.*/
        req_task->io_ports[1] = reply->features;
        req_task->io_ports[2] = reply->sect_count;
        req_task->io_ports[3] = reply->lba_low;
        req_task->io_ports[4] = reply->lba_mid;
        req_task->io_ports[5] = reply->lba_hi;
        req_task->io_ports[6] = reply->device;

        if (req_task->out_flags.all & 1)  {

                req_task->hob_ports[3] = reply->lba_low_ex;
                req_task->hob_ports[4] = reply->lba_mid_ex;
                req_task->hob_ports[5] = reply->lba_hi_ex;
                req_task->hob_ports[1] = reply->features_ex;
                req_task->hob_ports[2] = reply->sect_cnt_ex;
        }
        dbg_printk(MTIP_DRV_NAME
                " %s: Completion: stat %x,"
                "err %x, sect_cnt %x, lbalo %x,"
                "lbamid %x, lbahi %x, dev %x\n",
                __func__,
                req_task->io_ports[7],
                req_task->io_ports[1],
                req_task->io_ports[2],
                req_task->io_ports[3],
                req_task->io_ports[4],
                req_task->io_ports[5],
                req_task->io_ports[6]);

        if (taskout) {
                if (copy_to_user(buf + outtotal, outbuf, taskout)) {
                        err = -EFAULT;
                        goto abort;
                }
        }
        if (taskin) {
                if (copy_to_user(buf + intotal, inbuf, taskin)) {
                        err = -EFAULT;
                        goto abort;
                }
        }
abort:
        if (inbuf_dma)
                pci_unmap_single(dd->pdev, inbuf_dma,
                                        taskin, DMA_FROM_DEVICE);
        if (outbuf_dma)
                pci_unmap_single(dd->pdev, outbuf_dma,
                                        taskout, DMA_TO_DEVICE);
        kfree(outbuf);
        kfree(inbuf);

        return err;
}

/*
 * Handle IOCTL calls from the Block Layer.
 *
 * This function is called by the Block Layer when it receives an IOCTL
 * command that it does not understand. If the IOCTL command is not supported
 * this function returns -ENOTTY.
 *
 * @dd  Pointer to the driver data structure.
 * @cmd IOCTL command passed from the Block Layer.
 * @arg IOCTL argument passed from the Block Layer.
 *
 * return value
 *      0       The IOCTL completed successfully.
 *      -ENOTTY The specified command is not supported.
 *      -EFAULT An error occurred copying data to a user space buffer.
 *      -EIO    An error occurred while executing the command.
 */
static int mtip_hw_ioctl(struct driver_data *dd, unsigned int cmd,
                         unsigned long arg)
{
        switch (cmd) {
        case HDIO_GET_IDENTITY:
        {
                if (copy_to_user((void __user *)arg, dd->port->identify,
                                                sizeof(u16) * ATA_ID_WORDS))
                        return -EFAULT;
                break;
        }
        case HDIO_DRIVE_CMD:
        {
                u8 drive_command[4];

                /* Copy the user command info to our buffer. */
                if (copy_from_user(drive_command,
                                         (void __user *) arg,
                                         sizeof(drive_command)))
                        return -EFAULT;

                /* Execute the drive command. */
                if (exec_drive_command(dd->port,
                                         drive_command,
                                         (void __user *) (arg+4)))
                        return -EIO;

                /* Copy the status back to the users buffer. */
                if (copy_to_user((void __user *) arg,
                                         drive_command,
                                         sizeof(drive_command)))
                        return -EFAULT;

                break;
        }
        case HDIO_DRIVE_TASK:
        {
                u8 drive_command[7];

                /* Copy the user command info to our buffer. */
                if (copy_from_user(drive_command,
                                         (void __user *) arg,
                                         sizeof(drive_command)))
                        return -EFAULT;

                /* Execute the drive command. */
                if (exec_drive_task(dd->port, drive_command))
                        return -EIO;

                /* Copy the status back to the users buffer. */
                if (copy_to_user((void __user *) arg,
                                         drive_command,
                                         sizeof(drive_command)))
                        return -EFAULT;

                break;
        }
        case HDIO_DRIVE_TASKFILE: {
                ide_task_request_t req_task;
                int ret, outtotal;

                if (copy_from_user(&req_task, (void __user *) arg,
                                        sizeof(req_task)))
                        return -EFAULT;

                outtotal = sizeof(req_task);

                ret = exec_drive_taskfile(dd, (void __user *) arg,
                                                &req_task, outtotal);

                if (copy_to_user((void __user *) arg, &req_task,
                                                        sizeof(req_task)))
                        return -EFAULT;

                return ret;
        }

        default:
                return -EINVAL;
        }
        return 0;
}

/*
 * Submit an IO to the hw
 *
 * This function is called by the block layer to issue an io
 * to the device. Upon completion, the callback function will
 * be called with the data parameter passed as the callback data.
 *
 * @dd       Pointer to the driver data structure.
 * @start    First sector to read.
 * @nsect    Number of sectors to read.
 * @nents    Number of entries in scatter list for the read command.
 * @tag      The tag of this read command.
 * @callback Pointer to the function that should be called
 *           when the read completes.
 * @data     Callback data passed to the callback function
 *           when the read completes.
 * @dir      Direction (read or write)
 *
 * return value
 *      None
 */
static void mtip_hw_submit_io(struct driver_data *dd, sector_t sector,
                              int nsect, int nents, int tag, void *callback,
                              void *data, int dir, int unaligned)
{
        struct host_to_dev_fis  *fis;
        struct mtip_port *port = dd->port;
        struct mtip_cmd *command = &port->commands[tag];
        int dma_dir = (dir == READ) ? DMA_FROM_DEVICE : DMA_TO_DEVICE;
        u64 start = sector;

        /* Map the scatter list for DMA access */
        nents = dma_map_sg(&dd->pdev->dev, command->sg, nents, dma_dir);

        command->scatter_ents = nents;

        command->unaligned = unaligned;
        /*
         * The number of retries for this command before it is
         * reported as a failure to the upper layers.
         */
        command->retries = MTIP_MAX_RETRIES;

        /* Fill out fis */
        fis = command->command;
        fis->type        = 0x27;
        fis->opts        = 1 << 7;
        fis->command     =
                (dir == READ ? ATA_CMD_FPDMA_READ : ATA_CMD_FPDMA_WRITE);
        fis->lba_low     = start & 0xFF;
        fis->lba_mid     = (start >> 8) & 0xFF;
        fis->lba_hi      = (start >> 16) & 0xFF;
        fis->lba_low_ex  = (start >> 24) & 0xFF;
        fis->lba_mid_ex  = (start >> 32) & 0xFF;
        fis->lba_hi_ex   = (start >> 40) & 0xFF;
        fis->device      = 1 << 6;
        fis->features    = nsect & 0xFF;
        fis->features_ex = (nsect >> 8) & 0xFF;
        fis->sect_count  = ((tag << 3) | (tag >> 5));
        fis->sect_cnt_ex = 0;
        fis->control     = 0;
        fis->res2        = 0;
        fis->res3        = 0;
        fill_command_sg(dd, command, nents);

        if (unaligned)
                fis->device |= 1 << 7;

        /* Populate the command header */
        command->command_header->opts =
                        __force_bit2int cpu_to_le32(
                                (nents << 16) | 5 | AHCI_CMD_PREFETCH);
        command->command_header->byte_count = 0;

        /*
         * Set the completion function and data for the command
         * within this layer.
         */
        command->comp_data = dd;
        command->comp_func = mtip_async_complete;
        command->direction = dma_dir;

        /*
         * Set the completion function and data for the command passed
         * from the upper layer.
         */
        command->async_data = data;
        command->async_callback = callback;

        /*
         * To prevent this command from being issued
         * if an internal command is in progress or error handling is active.
         */
        if (port->flags & MTIP_PF_PAUSE_IO) {
                set_bit(tag, port->cmds_to_issue);
                set_bit(MTIP_PF_ISSUE_CMDS_BIT, &port->flags);
                return;
        }

        /* Issue the command to the hardware */
        mtip_issue_ncq_command(port, tag);

        return;
}

/*
 * Release a command slot.
 *
 * @dd  Pointer to the driver data structure.
 * @tag Slot tag
 *
 * return value
 *      None
 */
static void mtip_hw_release_scatterlist(struct driver_data *dd, int tag,
                                                                int unaligned)
{
        struct semaphore *sem = unaligned ? &dd->port->cmd_slot_unal :
                                                        &dd->port->cmd_slot;
        release_slot(dd->port, tag);
        up(sem);
}

/*
 * Obtain a command slot and return its associated scatter list.
 *
 * @dd  Pointer to the driver data structure.
 * @tag Pointer to an int that will receive the allocated command
 *            slot tag.
 *
 * return value
 *      Pointer to the scatter list for the allocated command slot
 *      or NULL if no command slots are available.
 */
static struct scatterlist *mtip_hw_get_scatterlist(struct driver_data *dd,
                                                   int *tag, int unaligned)
{
        struct semaphore *sem = unaligned ? &dd->port->cmd_slot_unal :
                                                        &dd->port->cmd_slot;

        /*
         * It is possible that, even with this semaphore, a thread
         * may think that no command slots are available. Therefore, we
         * need to make an attempt to get_slot().
         */
        down(sem);
        *tag = get_slot(dd->port);

        if (unlikely(test_bit(MTIP_DDF_REMOVE_PENDING_BIT, &dd->dd_flag))) {
                up(sem);
                return NULL;
        }
        if (unlikely(*tag < 0)) {
                up(sem);
                return NULL;
        }

        return dd->port->commands[*tag].sg;
}

/*
 * Sysfs status dump.
 *
 * @dev  Pointer to the device structure, passed by the kernrel.
 * @attr Pointer to the device_attribute structure passed by the kernel.
 * @buf  Pointer to the char buffer that will receive the stats info.
 *
 * return value
 *      The size, in bytes, of the data copied into buf.
 */
static ssize_t mtip_hw_show_status(struct device *dev,
                                struct device_attribute *attr,
                                char *buf)
{
        struct driver_data *dd = dev_to_disk(dev)->private_data;
        int size = 0;

        if (test_bit(MTIP_DDF_OVER_TEMP_BIT, &dd->dd_flag))
                size += sprintf(buf, "%s", "thermal_shutdown\n");
        else if (test_bit(MTIP_DDF_WRITE_PROTECT_BIT, &dd->dd_flag))
                size += sprintf(buf, "%s", "write_protect\n");
        else
                size += sprintf(buf, "%s", "online\n");

        return size;
}

static DEVICE_ATTR(status, S_IRUGO, mtip_hw_show_status, NULL);

/* debugsfs entries */

static ssize_t show_device_status(struct device_driver *drv, char *buf)
{
        int size = 0;
        struct driver_data *dd, *tmp;
        unsigned long flags;
        char id_buf[42];
        u16 status = 0;

        spin_lock_irqsave(&dev_lock, flags);
        size += sprintf(&buf[size], "Devices Present:\n");
        list_for_each_entry_safe(dd, tmp, &online_list, online_list) {
                if (dd->pdev) {
                        if (dd->port &&
                            dd->port->identify &&
                            dd->port->identify_valid) {
                                strlcpy(id_buf,
                                        (char *) (dd->port->identify + 10), 21);
                                status = *(dd->port->identify + 141);
                        } else {
                                memset(id_buf, 0, 42);
                                status = 0;
                        }

                        if (dd->port &&
                            test_bit(MTIP_PF_REBUILD_BIT, &dd->port->flags)) {
                                size += sprintf(&buf[size],
                                        " device %s %s (ftl rebuild %d %%)\n",
                                        dev_name(&dd->pdev->dev),
                                        id_buf,
                                        status);
                        } else {
                                size += sprintf(&buf[size],
                                        " device %s %s\n",
                                        dev_name(&dd->pdev->dev),
                                        id_buf);
                        }
                }
        }

        size += sprintf(&buf[size], "Devices Being Removed:\n");
        list_for_each_entry_safe(dd, tmp, &removing_list, remove_list) {
                if (dd->pdev) {
                        if (dd->port &&
                            dd->port->identify &&
                            dd->port->identify_valid) {
                                strlcpy(id_buf,
                                        (char *) (dd->port->identify+10), 21);
                                status = *(dd->port->identify + 141);
                        } else {
                                memset(id_buf, 0, 42);
                                status = 0;
                        }

                        if (dd->port &&
                            test_bit(MTIP_PF_REBUILD_BIT, &dd->port->flags)) {
                                size += sprintf(&buf[size],
                                        " device %s %s (ftl rebuild %d %%)\n",
                                        dev_name(&dd->pdev->dev),
                                        id_buf,
                                        status);
                        } else {
                                size += sprintf(&buf[size],
                                        " device %s %s\n",
                                        dev_name(&dd->pdev->dev),
                                        id_buf);
                        }
                }
        }
        spin_unlock_irqrestore(&dev_lock, flags);

        return size;
}

static ssize_t mtip_hw_read_device_status(struct file *f, char __user *ubuf,
                                                size_t len, loff_t *offset)
{
        struct driver_data *dd =  (struct driver_data *)f->private_data;
        int size = *offset;
        char *buf;
        int rv = 0;

        if (!len || *offset)
                return 0;

        buf = kzalloc(MTIP_DFS_MAX_BUF_SIZE, GFP_KERNEL);
        if (!buf) {
                dev_err(&dd->pdev->dev,
                        "Memory allocation: status buffer\n");
                return -ENOMEM;
        }

        size += show_device_status(NULL, buf);

        *offset = size <= len ? size : len;
        size = copy_to_user(ubuf, buf, *offset);
        if (size)
                rv = -EFAULT;

        kfree(buf);
        return rv ? rv : *offset;
}

static ssize_t mtip_hw_read_registers(struct file *f, char __user *ubuf,
                                  size_t len, loff_t *offset)
{
        struct driver_data *dd =  (struct driver_data *)f->private_data;
        char *buf;
        u32 group_allocated;
        int size = *offset;
        int n, rv = 0;

        if (!len || size)
                return 0;

        buf = kzalloc(MTIP_DFS_MAX_BUF_SIZE, GFP_KERNEL);
        if (!buf) {
                dev_err(&dd->pdev->dev,
                        "Memory allocation: register buffer\n");
                return -ENOMEM;
        }

        size += sprintf(&buf[size], "H/ S ACTive      : [ 0x");

        for (n = dd->slot_groups-1; n >= 0; n--)
                size += sprintf(&buf[size], "%08X ",
                                         readl(dd->port->s_active[n]));

        size += sprintf(&buf[size], "]\n");
        size += sprintf(&buf[size], "H/ Command Issue : [ 0x");

        for (n = dd->slot_groups-1; n >= 0; n--)
                size += sprintf(&buf[size], "%08X ",
                                        readl(dd->port->cmd_issue[n]));

        size += sprintf(&buf[size], "]\n");
        size += sprintf(&buf[size], "H/ Completed     : [ 0x");

        for (n = dd->slot_groups-1; n >= 0; n--)
                size += sprintf(&buf[size], "%08X ",
                                readl(dd->port->completed[n]));

        size += sprintf(&buf[size], "]\n");
        size += sprintf(&buf[size], "H/ PORT IRQ STAT : [ 0x%08X ]\n",
                                readl(dd->port->mmio + PORT_IRQ_STAT));
        size += sprintf(&buf[size], "H/ HOST IRQ STAT : [ 0x%08X ]\n",
                                readl(dd->mmio + HOST_IRQ_STAT));
        size += sprintf(&buf[size], "\n");

        size += sprintf(&buf[size], "L/ Allocated     : [ 0x");

        for (n = dd->slot_groups-1; n >= 0; n--) {
                if (sizeof(long) > sizeof(u32))
                        group_allocated =
                                dd->port->allocated[n/2] >> (32*(n&1));
                else
                        group_allocated = dd->port->allocated[n];
                size += sprintf(&buf[size], "%08X ", group_allocated);
        }
        size += sprintf(&buf[size], "]\n");

        size += sprintf(&buf[size], "L/ Commands in Q : [ 0x");

        for (n = dd->slot_groups-1; n >= 0; n--) {
                if (sizeof(long) > sizeof(u32))
                        group_allocated =
                                dd->port->cmds_to_issue[n/2] >> (32*(n&1));
                else
                        group_allocated = dd->port->cmds_to_issue[n];
                size += sprintf(&buf[size], "%08X ", group_allocated);
        }
        size += sprintf(&buf[size], "]\n");

        *offset = size <= len ? size : len;
        size = copy_to_user(ubuf, buf, *offset);
        if (size)
                rv = -EFAULT;

        kfree(buf);
        return rv ? rv : *offset;
}

static ssize_t mtip_hw_read_flags(struct file *f, char __user *ubuf,
                                  size_t len, loff_t *offset)
{
        struct driver_data *dd =  (struct driver_data *)f->private_data;
        char *buf;
        int size = *offset;
        int rv = 0;

        if (!len || size)
                return 0;

        buf = kzalloc(MTIP_DFS_MAX_BUF_SIZE, GFP_KERNEL);
        if (!buf) {
                dev_err(&dd->pdev->dev,
                        "Memory allocation: flag buffer\n");
                return -ENOMEM;
        }

        size += sprintf(&buf[size], "Flag-port : [ %08lX ]\n",
                                                        dd->port->flags);
        size += sprintf(&buf[size], "Flag-dd   : [ %08lX ]\n",
                                                        dd->dd_flag);

        *offset = size <= len ? size : len;
        size = copy_to_user(ubuf, buf, *offset);
        if (size)
                rv = -EFAULT;

        kfree(buf);
        return rv ? rv : *offset;
}

static const struct file_operations mtip_device_status_fops = {
        .owner  = THIS_MODULE,
        .open   = simple_open,
        .read   = mtip_hw_read_device_status,
        .llseek = no_llseek,
};

static const struct file_operations mtip_regs_fops = {
        .owner  = THIS_MODULE,