floppy: cleanup: remove redundant assignment to nr_sectors
[linux-2.6-microblaze.git] / drivers / block / floppy.c
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  *  linux/drivers/block/floppy.c
4  *
5  *  Copyright (C) 1991, 1992  Linus Torvalds
6  *  Copyright (C) 1993, 1994  Alain Knaff
7  *  Copyright (C) 1998 Alan Cox
8  */
9
10 /*
11  * 02.12.91 - Changed to static variables to indicate need for reset
12  * and recalibrate. This makes some things easier (output_byte reset
13  * checking etc), and means less interrupt jumping in case of errors,
14  * so the code is hopefully easier to understand.
15  */
16
17 /*
18  * This file is certainly a mess. I've tried my best to get it working,
19  * but I don't like programming floppies, and I have only one anyway.
20  * Urgel. I should check for more errors, and do more graceful error
21  * recovery. Seems there are problems with several drives. I've tried to
22  * correct them. No promises.
23  */
24
25 /*
26  * As with hd.c, all routines within this file can (and will) be called
27  * by interrupts, so extreme caution is needed. A hardware interrupt
28  * handler may not sleep, or a kernel panic will happen. Thus I cannot
29  * call "floppy-on" directly, but have to set a special timer interrupt
30  * etc.
31  */
32
33 /*
34  * 28.02.92 - made track-buffering routines, based on the routines written
35  * by entropy@wintermute.wpi.edu (Lawrence Foard). Linus.
36  */
37
38 /*
39  * Automatic floppy-detection and formatting written by Werner Almesberger
40  * (almesber@nessie.cs.id.ethz.ch), who also corrected some problems with
41  * the floppy-change signal detection.
42  */
43
44 /*
45  * 1992/7/22 -- Hennus Bergman: Added better error reporting, fixed
46  * FDC data overrun bug, added some preliminary stuff for vertical
47  * recording support.
48  *
49  * 1992/9/17: Added DMA allocation & DMA functions. -- hhb.
50  *
51  * TODO: Errors are still not counted properly.
52  */
53
54 /* 1992/9/20
55  * Modifications for ``Sector Shifting'' by Rob Hooft (hooft@chem.ruu.nl)
56  * modeled after the freeware MS-DOS program fdformat/88 V1.8 by
57  * Christoph H. Hochst\"atter.
58  * I have fixed the shift values to the ones I always use. Maybe a new
59  * ioctl() should be created to be able to modify them.
60  * There is a bug in the driver that makes it impossible to format a
61  * floppy as the first thing after bootup.
62  */
63
64 /*
65  * 1993/4/29 -- Linus -- cleaned up the timer handling in the kernel, and
66  * this helped the floppy driver as well. Much cleaner, and still seems to
67  * work.
68  */
69
70 /* 1994/6/24 --bbroad-- added the floppy table entries and made
71  * minor modifications to allow 2.88 floppies to be run.
72  */
73
74 /* 1994/7/13 -- Paul Vojta -- modified the probing code to allow three or more
75  * disk types.
76  */
77
78 /*
79  * 1994/8/8 -- Alain Knaff -- Switched to fdpatch driver: Support for bigger
80  * format bug fixes, but unfortunately some new bugs too...
81  */
82
83 /* 1994/9/17 -- Koen Holtman -- added logging of physical floppy write
84  * errors to allow safe writing by specialized programs.
85  */
86
87 /* 1995/4/24 -- Dan Fandrich -- added support for Commodore 1581 3.5" disks
88  * by defining bit 1 of the "stretch" parameter to mean put sectors on the
89  * opposite side of the disk, leaving the sector IDs alone (i.e. Commodore's
90  * drives are "upside-down").
91  */
92
93 /*
94  * 1995/8/26 -- Andreas Busse -- added Mips support.
95  */
96
97 /*
98  * 1995/10/18 -- Ralf Baechle -- Portability cleanup; move machine dependent
99  * features to asm/floppy.h.
100  */
101
102 /*
103  * 1998/1/21 -- Richard Gooch <rgooch@atnf.csiro.au> -- devfs support
104  */
105
106 /*
107  * 1998/05/07 -- Russell King -- More portability cleanups; moved definition of
108  * interrupt and dma channel to asm/floppy.h. Cleaned up some formatting &
109  * use of '0' for NULL.
110  */
111
112 /*
113  * 1998/06/07 -- Alan Cox -- Merged the 2.0.34 fixes for resource allocation
114  * failures.
115  */
116
117 /*
118  * 1998/09/20 -- David Weinehall -- Added slow-down code for buggy PS/2-drives.
119  */
120
121 /*
122  * 1999/08/13 -- Paul Slootman -- floppy stopped working on Alpha after 24
123  * days, 6 hours, 32 minutes and 32 seconds (i.e. MAXINT jiffies; ints were
124  * being used to store jiffies, which are unsigned longs).
125  */
126
127 /*
128  * 2000/08/28 -- Arnaldo Carvalho de Melo <acme@conectiva.com.br>
129  * - get rid of check_region
130  * - s/suser/capable/
131  */
132
133 /*
134  * 2001/08/26 -- Paul Gortmaker - fix insmod oops on machines with no
135  * floppy controller (lingering task on list after module is gone... boom.)
136  */
137
138 /*
139  * 2002/02/07 -- Anton Altaparmakov - Fix io ports reservation to correct range
140  * (0x3f2-0x3f5, 0x3f7). This fix is a bit of a hack but the proper fix
141  * requires many non-obvious changes in arch dependent code.
142  */
143
144 /* 2003/07/28 -- Daniele Bellucci <bellucda@tiscali.it>.
145  * Better audit of register_blkdev.
146  */
147
148 #define REALLY_SLOW_IO
149
150 #define DEBUGT 2
151
152 #define DPRINT(format, args...) \
153         pr_info("floppy%d: " format, current_drive, ##args)
154
155 #define DCL_DEBUG               /* debug disk change line */
156 #ifdef DCL_DEBUG
157 #define debug_dcl(test, fmt, args...) \
158         do { if ((test) & FD_DEBUG) DPRINT(fmt, ##args); } while (0)
159 #else
160 #define debug_dcl(test, fmt, args...) \
161         do { if (0) DPRINT(fmt, ##args); } while (0)
162 #endif
163
164 /* do print messages for unexpected interrupts */
165 static int print_unex = 1;
166 #include <linux/module.h>
167 #include <linux/sched.h>
168 #include <linux/fs.h>
169 #include <linux/kernel.h>
170 #include <linux/timer.h>
171 #include <linux/workqueue.h>
172 #include <linux/fdreg.h>
173 #include <linux/fd.h>
174 #include <linux/hdreg.h>
175 #include <linux/errno.h>
176 #include <linux/slab.h>
177 #include <linux/mm.h>
178 #include <linux/bio.h>
179 #include <linux/string.h>
180 #include <linux/jiffies.h>
181 #include <linux/fcntl.h>
182 #include <linux/delay.h>
183 #include <linux/mc146818rtc.h>  /* CMOS defines */
184 #include <linux/ioport.h>
185 #include <linux/interrupt.h>
186 #include <linux/init.h>
187 #include <linux/platform_device.h>
188 #include <linux/mod_devicetable.h>
189 #include <linux/mutex.h>
190 #include <linux/io.h>
191 #include <linux/uaccess.h>
192 #include <linux/async.h>
193 #include <linux/compat.h>
194
195 /*
196  * PS/2 floppies have much slower step rates than regular floppies.
197  * It's been recommended that take about 1/4 of the default speed
198  * in some more extreme cases.
199  */
200 static DEFINE_MUTEX(floppy_mutex);
201 static int slow_floppy;
202
203 #include <asm/dma.h>
204 #include <asm/irq.h>
205
206 static int FLOPPY_IRQ = 6;
207 static int FLOPPY_DMA = 2;
208 static int can_use_virtual_dma = 2;
209 /* =======
210  * can use virtual DMA:
211  * 0 = use of virtual DMA disallowed by config
212  * 1 = use of virtual DMA prescribed by config
213  * 2 = no virtual DMA preference configured.  By default try hard DMA,
214  * but fall back on virtual DMA when not enough memory available
215  */
216
217 static int use_virtual_dma;
218 /* =======
219  * use virtual DMA
220  * 0 using hard DMA
221  * 1 using virtual DMA
222  * This variable is set to virtual when a DMA mem problem arises, and
223  * reset back in floppy_grab_irq_and_dma.
224  * It is not safe to reset it in other circumstances, because the floppy
225  * driver may have several buffers in use at once, and we do currently not
226  * record each buffers capabilities
227  */
228
229 static DEFINE_SPINLOCK(floppy_lock);
230
231 static unsigned short virtual_dma_port = 0x3f0;
232 irqreturn_t floppy_interrupt(int irq, void *dev_id);
233 static int set_dor(int fdc, char mask, char data);
234
235 #define K_64    0x10000         /* 64KB */
236
237 /* the following is the mask of allowed drives. By default units 2 and
238  * 3 of both floppy controllers are disabled, because switching on the
239  * motor of these drives causes system hangs on some PCI computers. drive
240  * 0 is the low bit (0x1), and drive 7 is the high bit (0x80). Bits are on if
241  * a drive is allowed.
242  *
243  * NOTE: This must come before we include the arch floppy header because
244  *       some ports reference this variable from there. -DaveM
245  */
246
247 static int allowed_drive_mask = 0x33;
248
249 #include <asm/floppy.h>
250
251 static int irqdma_allocated;
252
253 #include <linux/blk-mq.h>
254 #include <linux/blkpg.h>
255 #include <linux/cdrom.h>        /* for the compatibility eject ioctl */
256 #include <linux/completion.h>
257
258 static LIST_HEAD(floppy_reqs);
259 static struct request *current_req;
260 static int set_next_request(void);
261
262 #ifndef fd_get_dma_residue
263 #define fd_get_dma_residue() get_dma_residue(FLOPPY_DMA)
264 #endif
265
266 /* Dma Memory related stuff */
267
268 #ifndef fd_dma_mem_free
269 #define fd_dma_mem_free(addr, size) free_pages(addr, get_order(size))
270 #endif
271
272 #ifndef fd_dma_mem_alloc
273 #define fd_dma_mem_alloc(size) __get_dma_pages(GFP_KERNEL, get_order(size))
274 #endif
275
276 #ifndef fd_cacheflush
277 #define fd_cacheflush(addr, size) /* nothing... */
278 #endif
279
280 static inline void fallback_on_nodma_alloc(char **addr, size_t l)
281 {
282 #ifdef FLOPPY_CAN_FALLBACK_ON_NODMA
283         if (*addr)
284                 return;         /* we have the memory */
285         if (can_use_virtual_dma != 2)
286                 return;         /* no fallback allowed */
287         pr_info("DMA memory shortage. Temporarily falling back on virtual DMA\n");
288         *addr = (char *)nodma_mem_alloc(l);
289 #else
290         return;
291 #endif
292 }
293
294 /* End dma memory related stuff */
295
296 static unsigned long fake_change;
297 static bool initialized;
298
299 #define ITYPE(x)        (((x) >> 2) & 0x1f)
300 #define TOMINOR(x)      ((x & 3) | ((x & 4) << 5))
301 #define UNIT(x)         ((x) & 0x03)            /* drive on fdc */
302 #define FDC(x)          (((x) & 0x04) >> 2)     /* fdc of drive */
303         /* reverse mapping from unit and fdc to drive */
304 #define REVDRIVE(fdc, unit) ((unit) + ((fdc) << 2))
305
306 #define PH_HEAD(floppy, head) (((((floppy)->stretch & 2) >> 1) ^ head) << 2)
307 #define STRETCH(floppy) ((floppy)->stretch & FD_STRETCH)
308
309 /* read/write commands */
310 #define COMMAND                 0
311 #define DR_SELECT               1
312 #define TRACK                   2
313 #define HEAD                    3
314 #define SECTOR                  4
315 #define SIZECODE                5
316 #define SECT_PER_TRACK          6
317 #define GAP                     7
318 #define SIZECODE2               8
319 #define NR_RW 9
320
321 /* format commands */
322 #define F_SIZECODE              2
323 #define F_SECT_PER_TRACK        3
324 #define F_GAP                   4
325 #define F_FILL                  5
326 #define NR_F 6
327
328 /*
329  * Maximum disk size (in kilobytes).
330  * This default is used whenever the current disk size is unknown.
331  * [Now it is rather a minimum]
332  */
333 #define MAX_DISK_SIZE 4         /* 3984 */
334
335 /*
336  * globals used by 'result()'
337  */
338 static unsigned char reply_buffer[FD_RAW_REPLY_SIZE];
339 static int inr;         /* size of reply buffer, when called from interrupt */
340 #define ST0             0
341 #define ST1             1
342 #define ST2             2
343 #define ST3             0       /* result of GETSTATUS */
344 #define R_TRACK         3
345 #define R_HEAD          4
346 #define R_SECTOR        5
347 #define R_SIZECODE      6
348
349 #define SEL_DLY         (2 * HZ / 100)
350
351 /*
352  * this struct defines the different floppy drive types.
353  */
354 static struct {
355         struct floppy_drive_params params;
356         const char *name;       /* name printed while booting */
357 } default_drive_params[] = {
358 /* NOTE: the time values in jiffies should be in msec!
359  CMOS drive type
360   |     Maximum data rate supported by drive type
361   |     |   Head load time, msec
362   |     |   |   Head unload time, msec (not used)
363   |     |   |   |     Step rate interval, usec
364   |     |   |   |     |       Time needed for spinup time (jiffies)
365   |     |   |   |     |       |      Timeout for spinning down (jiffies)
366   |     |   |   |     |       |      |   Spindown offset (where disk stops)
367   |     |   |   |     |       |      |   |     Select delay
368   |     |   |   |     |       |      |   |     |     RPS
369   |     |   |   |     |       |      |   |     |     |    Max number of tracks
370   |     |   |   |     |       |      |   |     |     |    |     Interrupt timeout
371   |     |   |   |     |       |      |   |     |     |    |     |   Max nonintlv. sectors
372   |     |   |   |     |       |      |   |     |     |    |     |   | -Max Errors- flags */
373 {{0,  500, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  80, 3*HZ, 20, {3,1,2,0,2}, 0,
374       0, { 7, 4, 8, 2, 1, 5, 3,10}, 3*HZ/2, 0 }, "unknown" },
375
376 {{1,  300, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  40, 3*HZ, 17, {3,1,2,0,2}, 0,
377       0, { 1, 0, 0, 0, 0, 0, 0, 0}, 3*HZ/2, 1 }, "360K PC" }, /*5 1/4 360 KB PC*/
378
379 {{2,  500, 16, 16, 6000, 4*HZ/10, 3*HZ, 14, SEL_DLY, 6,  83, 3*HZ, 17, {3,1,2,0,2}, 0,
380       0, { 2, 5, 6,23,10,20,12, 0}, 3*HZ/2, 2 }, "1.2M" }, /*5 1/4 HD AT*/
381
382 {{3,  250, 16, 16, 3000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
383       0, { 4,22,21,30, 3, 0, 0, 0}, 3*HZ/2, 4 }, "720k" }, /*3 1/2 DD*/
384
385 {{4,  500, 16, 16, 4000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
386       0, { 7, 4,25,22,31,21,29,11}, 3*HZ/2, 7 }, "1.44M" }, /*3 1/2 HD*/
387
388 {{5, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
389       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M AMI BIOS" }, /*3 1/2 ED*/
390
391 {{6, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
392       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M" } /*3 1/2 ED*/
393 /*    |  --autodetected formats---    |      |      |
394  *    read_track                      |      |    Name printed when booting
395  *                                    |     Native format
396  *                  Frequency of disk change checks */
397 };
398
399 static struct floppy_drive_params drive_params[N_DRIVE];
400 static struct floppy_drive_struct drive_state[N_DRIVE];
401 static struct floppy_write_errors write_errors[N_DRIVE];
402 static struct timer_list motor_off_timer[N_DRIVE];
403 static struct blk_mq_tag_set tag_sets[N_DRIVE];
404 static struct block_device *opened_bdev[N_DRIVE];
405 static DEFINE_MUTEX(open_lock);
406 static struct floppy_raw_cmd *raw_cmd, default_raw_cmd;
407
408 /*
409  * This struct defines the different floppy types.
410  *
411  * Bit 0 of 'stretch' tells if the tracks need to be doubled for some
412  * types (e.g. 360kB diskette in 1.2MB drive, etc.).  Bit 1 of 'stretch'
413  * tells if the disk is in Commodore 1581 format, which means side 0 sectors
414  * are located on side 1 of the disk but with a side 0 ID, and vice-versa.
415  * This is the same as the Sharp MZ-80 5.25" CP/M disk format, except that the
416  * 1581's logical side 0 is on physical side 1, whereas the Sharp's logical
417  * side 0 is on physical side 0 (but with the misnamed sector IDs).
418  * 'stretch' should probably be renamed to something more general, like
419  * 'options'.
420  *
421  * Bits 2 through 9 of 'stretch' tell the number of the first sector.
422  * The LSB (bit 2) is flipped. For most disks, the first sector
423  * is 1 (represented by 0x00<<2).  For some CP/M and music sampler
424  * disks (such as Ensoniq EPS 16plus) it is 0 (represented as 0x01<<2).
425  * For Amstrad CPC disks it is 0xC1 (represented as 0xC0<<2).
426  *
427  * Other parameters should be self-explanatory (see also setfdprm(8)).
428  */
429 /*
430             Size
431              |  Sectors per track
432              |  | Head
433              |  | |  Tracks
434              |  | |  | Stretch
435              |  | |  | |  Gap 1 size
436              |  | |  | |    |  Data rate, | 0x40 for perp
437              |  | |  | |    |    |  Spec1 (stepping rate, head unload
438              |  | |  | |    |    |    |    /fmt gap (gap2) */
439 static struct floppy_struct floppy_type[32] = {
440         {    0, 0,0, 0,0,0x00,0x00,0x00,0x00,NULL    }, /*  0 no testing    */
441         {  720, 9,2,40,0,0x2A,0x02,0xDF,0x50,"d360"  }, /*  1 360KB PC      */
442         { 2400,15,2,80,0,0x1B,0x00,0xDF,0x54,"h1200" }, /*  2 1.2MB AT      */
443         {  720, 9,1,80,0,0x2A,0x02,0xDF,0x50,"D360"  }, /*  3 360KB SS 3.5" */
444         { 1440, 9,2,80,0,0x2A,0x02,0xDF,0x50,"D720"  }, /*  4 720KB 3.5"    */
445         {  720, 9,2,40,1,0x23,0x01,0xDF,0x50,"h360"  }, /*  5 360KB AT      */
446         { 1440, 9,2,80,0,0x23,0x01,0xDF,0x50,"h720"  }, /*  6 720KB AT      */
447         { 2880,18,2,80,0,0x1B,0x00,0xCF,0x6C,"H1440" }, /*  7 1.44MB 3.5"   */
448         { 5760,36,2,80,0,0x1B,0x43,0xAF,0x54,"E2880" }, /*  8 2.88MB 3.5"   */
449         { 6240,39,2,80,0,0x1B,0x43,0xAF,0x28,"E3120" }, /*  9 3.12MB 3.5"   */
450
451         { 2880,18,2,80,0,0x25,0x00,0xDF,0x02,"h1440" }, /* 10 1.44MB 5.25"  */
452         { 3360,21,2,80,0,0x1C,0x00,0xCF,0x0C,"H1680" }, /* 11 1.68MB 3.5"   */
453         {  820,10,2,41,1,0x25,0x01,0xDF,0x2E,"h410"  }, /* 12 410KB 5.25"   */
454         { 1640,10,2,82,0,0x25,0x02,0xDF,0x2E,"H820"  }, /* 13 820KB 3.5"    */
455         { 2952,18,2,82,0,0x25,0x00,0xDF,0x02,"h1476" }, /* 14 1.48MB 5.25"  */
456         { 3444,21,2,82,0,0x25,0x00,0xDF,0x0C,"H1722" }, /* 15 1.72MB 3.5"   */
457         {  840,10,2,42,1,0x25,0x01,0xDF,0x2E,"h420"  }, /* 16 420KB 5.25"   */
458         { 1660,10,2,83,0,0x25,0x02,0xDF,0x2E,"H830"  }, /* 17 830KB 3.5"    */
459         { 2988,18,2,83,0,0x25,0x00,0xDF,0x02,"h1494" }, /* 18 1.49MB 5.25"  */
460         { 3486,21,2,83,0,0x25,0x00,0xDF,0x0C,"H1743" }, /* 19 1.74 MB 3.5"  */
461
462         { 1760,11,2,80,0,0x1C,0x09,0xCF,0x00,"h880"  }, /* 20 880KB 5.25"   */
463         { 2080,13,2,80,0,0x1C,0x01,0xCF,0x00,"D1040" }, /* 21 1.04MB 3.5"   */
464         { 2240,14,2,80,0,0x1C,0x19,0xCF,0x00,"D1120" }, /* 22 1.12MB 3.5"   */
465         { 3200,20,2,80,0,0x1C,0x20,0xCF,0x2C,"h1600" }, /* 23 1.6MB 5.25"   */
466         { 3520,22,2,80,0,0x1C,0x08,0xCF,0x2e,"H1760" }, /* 24 1.76MB 3.5"   */
467         { 3840,24,2,80,0,0x1C,0x20,0xCF,0x00,"H1920" }, /* 25 1.92MB 3.5"   */
468         { 6400,40,2,80,0,0x25,0x5B,0xCF,0x00,"E3200" }, /* 26 3.20MB 3.5"   */
469         { 7040,44,2,80,0,0x25,0x5B,0xCF,0x00,"E3520" }, /* 27 3.52MB 3.5"   */
470         { 7680,48,2,80,0,0x25,0x63,0xCF,0x00,"E3840" }, /* 28 3.84MB 3.5"   */
471         { 3680,23,2,80,0,0x1C,0x10,0xCF,0x00,"H1840" }, /* 29 1.84MB 3.5"   */
472
473         { 1600,10,2,80,0,0x25,0x02,0xDF,0x2E,"D800"  }, /* 30 800KB 3.5"    */
474         { 3200,20,2,80,0,0x1C,0x00,0xCF,0x2C,"H1600" }, /* 31 1.6MB 3.5"    */
475 };
476
477 static struct gendisk *disks[N_DRIVE][ARRAY_SIZE(floppy_type)];
478
479 #define SECTSIZE (_FD_SECTSIZE(*floppy))
480
481 /* Auto-detection: Disk type used until the next media change occurs. */
482 static struct floppy_struct *current_type[N_DRIVE];
483
484 /*
485  * User-provided type information. current_type points to
486  * the respective entry of this array.
487  */
488 static struct floppy_struct user_params[N_DRIVE];
489
490 static sector_t floppy_sizes[256];
491
492 static char floppy_device_name[] = "floppy";
493
494 /*
495  * The driver is trying to determine the correct media format
496  * while probing is set. rw_interrupt() clears it after a
497  * successful access.
498  */
499 static int probing;
500
501 /* Synchronization of FDC access. */
502 #define FD_COMMAND_NONE         -1
503 #define FD_COMMAND_ERROR        2
504 #define FD_COMMAND_OKAY         3
505
506 static volatile int command_status = FD_COMMAND_NONE;
507 static unsigned long fdc_busy;
508 static DECLARE_WAIT_QUEUE_HEAD(fdc_wait);
509 static DECLARE_WAIT_QUEUE_HEAD(command_done);
510
511 /* Errors during formatting are counted here. */
512 static int format_errors;
513
514 /* Format request descriptor. */
515 static struct format_descr format_req;
516
517 /*
518  * Rate is 0 for 500kb/s, 1 for 300kbps, 2 for 250kbps
519  * Spec1 is 0xSH, where S is stepping rate (F=1ms, E=2ms, D=3ms etc),
520  * H is head unload time (1=16ms, 2=32ms, etc)
521  */
522
523 /*
524  * Track buffer
525  * Because these are written to by the DMA controller, they must
526  * not contain a 64k byte boundary crossing, or data will be
527  * corrupted/lost.
528  */
529 static char *floppy_track_buffer;
530 static int max_buffer_sectors;
531
532 static int *errors;
533 typedef void (*done_f)(int);
534 static const struct cont_t {
535         void (*interrupt)(void);
536                                 /* this is called after the interrupt of the
537                                  * main command */
538         void (*redo)(void);     /* this is called to retry the operation */
539         void (*error)(void);    /* this is called to tally an error */
540         done_f done;            /* this is called to say if the operation has
541                                  * succeeded/failed */
542 } *cont;
543
544 static void floppy_ready(void);
545 static void floppy_start(void);
546 static void process_fd_request(void);
547 static void recalibrate_floppy(void);
548 static void floppy_shutdown(struct work_struct *);
549
550 static int floppy_request_regions(int);
551 static void floppy_release_regions(int);
552 static int floppy_grab_irq_and_dma(void);
553 static void floppy_release_irq_and_dma(void);
554
555 /*
556  * The "reset" variable should be tested whenever an interrupt is scheduled,
557  * after the commands have been sent. This is to ensure that the driver doesn't
558  * get wedged when the interrupt doesn't come because of a failed command.
559  * reset doesn't need to be tested before sending commands, because
560  * output_byte is automatically disabled when reset is set.
561  */
562 static void reset_fdc(void);
563 static int floppy_revalidate(struct gendisk *disk);
564
565 /*
566  * These are global variables, as that's the easiest way to give
567  * information to interrupts. They are the data used for the current
568  * request.
569  */
570 #define NO_TRACK        -1
571 #define NEED_1_RECAL    -2
572 #define NEED_2_RECAL    -3
573
574 static atomic_t usage_count = ATOMIC_INIT(0);
575
576 /* buffer related variables */
577 static int buffer_track = -1;
578 static int buffer_drive = -1;
579 static int buffer_min = -1;
580 static int buffer_max = -1;
581
582 /* fdc related variables, should end up in a struct */
583 static struct floppy_fdc_state fdc_state[N_FDC];
584 static int current_fdc;                 /* current fdc */
585
586 static struct workqueue_struct *floppy_wq;
587
588 static struct floppy_struct *_floppy = floppy_type;
589 static unsigned char current_drive;
590 static long current_count_sectors;
591 static unsigned char fsector_t; /* sector in track */
592 static unsigned char in_sector_offset;  /* offset within physical sector,
593                                          * expressed in units of 512 bytes */
594
595 static inline unsigned char fdc_inb(int fdc, int reg)
596 {
597         return fd_inb(fdc_state[fdc].address, reg);
598 }
599
600 static inline void fdc_outb(unsigned char value, int fdc, int reg)
601 {
602         fd_outb(value, fdc_state[fdc].address, reg);
603 }
604
605 static inline bool drive_no_geom(int drive)
606 {
607         return !current_type[drive] && !ITYPE(drive_state[drive].fd_device);
608 }
609
610 #ifndef fd_eject
611 static inline int fd_eject(int drive)
612 {
613         return -EINVAL;
614 }
615 #endif
616
617 /*
618  * Debugging
619  * =========
620  */
621 #ifdef DEBUGT
622 static long unsigned debugtimer;
623
624 static inline void set_debugt(void)
625 {
626         debugtimer = jiffies;
627 }
628
629 static inline void debugt(const char *func, const char *msg)
630 {
631         if (drive_params[current_drive].flags & DEBUGT)
632                 pr_info("%s:%s dtime=%lu\n", func, msg, jiffies - debugtimer);
633 }
634 #else
635 static inline void set_debugt(void) { }
636 static inline void debugt(const char *func, const char *msg) { }
637 #endif /* DEBUGT */
638
639
640 static DECLARE_DELAYED_WORK(fd_timeout, floppy_shutdown);
641 static const char *timeout_message;
642
643 static void is_alive(const char *func, const char *message)
644 {
645         /* this routine checks whether the floppy driver is "alive" */
646         if (test_bit(0, &fdc_busy) && command_status < 2 &&
647             !delayed_work_pending(&fd_timeout)) {
648                 DPRINT("%s: timeout handler died.  %s\n", func, message);
649         }
650 }
651
652 static void (*do_floppy)(void) = NULL;
653
654 #define OLOGSIZE 20
655
656 static void (*lasthandler)(void);
657 static unsigned long interruptjiffies;
658 static unsigned long resultjiffies;
659 static int resultsize;
660 static unsigned long lastredo;
661
662 static struct output_log {
663         unsigned char data;
664         unsigned char status;
665         unsigned long jiffies;
666 } output_log[OLOGSIZE];
667
668 static int output_log_pos;
669
670 #define MAXTIMEOUT -2
671
672 static void __reschedule_timeout(int drive, const char *message)
673 {
674         unsigned long delay;
675
676         if (drive < 0 || drive >= N_DRIVE) {
677                 delay = 20UL * HZ;
678                 drive = 0;
679         } else
680                 delay = drive_params[drive].timeout;
681
682         mod_delayed_work(floppy_wq, &fd_timeout, delay);
683         if (drive_params[drive].flags & FD_DEBUG)
684                 DPRINT("reschedule timeout %s\n", message);
685         timeout_message = message;
686 }
687
688 static void reschedule_timeout(int drive, const char *message)
689 {
690         unsigned long flags;
691
692         spin_lock_irqsave(&floppy_lock, flags);
693         __reschedule_timeout(drive, message);
694         spin_unlock_irqrestore(&floppy_lock, flags);
695 }
696
697 #define INFBOUND(a, b) (a) = max_t(int, a, b)
698 #define SUPBOUND(a, b) (a) = min_t(int, a, b)
699
700 /*
701  * Bottom half floppy driver.
702  * ==========================
703  *
704  * This part of the file contains the code talking directly to the hardware,
705  * and also the main service loop (seek-configure-spinup-command)
706  */
707
708 /*
709  * disk change.
710  * This routine is responsible for maintaining the FD_DISK_CHANGE flag,
711  * and the last_checked date.
712  *
713  * last_checked is the date of the last check which showed 'no disk change'
714  * FD_DISK_CHANGE is set under two conditions:
715  * 1. The floppy has been changed after some i/o to that floppy already
716  *    took place.
717  * 2. No floppy disk is in the drive. This is done in order to ensure that
718  *    requests are quickly flushed in case there is no disk in the drive. It
719  *    follows that FD_DISK_CHANGE can only be cleared if there is a disk in
720  *    the drive.
721  *
722  * For 1., maxblock is observed. Maxblock is 0 if no i/o has taken place yet.
723  * For 2., FD_DISK_NEWCHANGE is watched. FD_DISK_NEWCHANGE is cleared on
724  *  each seek. If a disk is present, the disk change line should also be
725  *  cleared on each seek. Thus, if FD_DISK_NEWCHANGE is clear, but the disk
726  *  change line is set, this means either that no disk is in the drive, or
727  *  that it has been removed since the last seek.
728  *
729  * This means that we really have a third possibility too:
730  *  The floppy has been changed after the last seek.
731  */
732
733 static int disk_change(int drive)
734 {
735         int fdc = FDC(drive);
736
737         if (time_before(jiffies, drive_state[drive].select_date + drive_params[drive].select_delay))
738                 DPRINT("WARNING disk change called early\n");
739         if (!(fdc_state[fdc].dor & (0x10 << UNIT(drive))) ||
740             (fdc_state[fdc].dor & 3) != UNIT(drive) || fdc != FDC(drive)) {
741                 DPRINT("probing disk change on unselected drive\n");
742                 DPRINT("drive=%d fdc=%d dor=%x\n", drive, FDC(drive),
743                        (unsigned int)fdc_state[fdc].dor);
744         }
745
746         debug_dcl(drive_params[drive].flags,
747                   "checking disk change line for drive %d\n", drive);
748         debug_dcl(drive_params[drive].flags, "jiffies=%lu\n", jiffies);
749         debug_dcl(drive_params[drive].flags, "disk change line=%x\n",
750                   fdc_inb(fdc, FD_DIR) & 0x80);
751         debug_dcl(drive_params[drive].flags, "flags=%lx\n",
752                   drive_state[drive].flags);
753
754         if (drive_params[drive].flags & FD_BROKEN_DCL)
755                 return test_bit(FD_DISK_CHANGED_BIT,
756                                 &drive_state[drive].flags);
757         if ((fdc_inb(fdc, FD_DIR) ^ drive_params[drive].flags) & 0x80) {
758                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
759                                         /* verify write protection */
760
761                 if (drive_state[drive].maxblock)        /* mark it changed */
762                         set_bit(FD_DISK_CHANGED_BIT,
763                                 &drive_state[drive].flags);
764
765                 /* invalidate its geometry */
766                 if (drive_state[drive].keep_data >= 0) {
767                         if ((drive_params[drive].flags & FTD_MSG) &&
768                             current_type[drive] != NULL)
769                                 DPRINT("Disk type is undefined after disk change\n");
770                         current_type[drive] = NULL;
771                         floppy_sizes[TOMINOR(drive)] = MAX_DISK_SIZE << 1;
772                 }
773
774                 return 1;
775         } else {
776                 drive_state[drive].last_checked = jiffies;
777                 clear_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[drive].flags);
778         }
779         return 0;
780 }
781
782 static inline int is_selected(int dor, int unit)
783 {
784         return ((dor & (0x10 << unit)) && (dor & 3) == unit);
785 }
786
787 static bool is_ready_state(int status)
788 {
789         int state = status & (STATUS_READY | STATUS_DIR | STATUS_DMA);
790         return state == STATUS_READY;
791 }
792
793 static int set_dor(int fdc, char mask, char data)
794 {
795         unsigned char unit;
796         unsigned char drive;
797         unsigned char newdor;
798         unsigned char olddor;
799
800         if (fdc_state[fdc].address == -1)
801                 return -1;
802
803         olddor = fdc_state[fdc].dor;
804         newdor = (olddor & mask) | data;
805         if (newdor != olddor) {
806                 unit = olddor & 0x3;
807                 if (is_selected(olddor, unit) && !is_selected(newdor, unit)) {
808                         drive = REVDRIVE(fdc, unit);
809                         debug_dcl(drive_params[drive].flags,
810                                   "calling disk change from set_dor\n");
811                         disk_change(drive);
812                 }
813                 fdc_state[fdc].dor = newdor;
814                 fdc_outb(newdor, fdc, FD_DOR);
815
816                 unit = newdor & 0x3;
817                 if (!is_selected(olddor, unit) && is_selected(newdor, unit)) {
818                         drive = REVDRIVE(fdc, unit);
819                         drive_state[drive].select_date = jiffies;
820                 }
821         }
822         return olddor;
823 }
824
825 static void twaddle(int fdc, int drive)
826 {
827         if (drive_params[drive].select_delay)
828                 return;
829         fdc_outb(fdc_state[fdc].dor & ~(0x10 << UNIT(drive)),
830                  fdc, FD_DOR);
831         fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
832         drive_state[drive].select_date = jiffies;
833 }
834
835 /*
836  * Reset all driver information about the specified fdc.
837  * This is needed after a reset, and after a raw command.
838  */
839 static void reset_fdc_info(int fdc, int mode)
840 {
841         int drive;
842
843         fdc_state[fdc].spec1 = fdc_state[fdc].spec2 = -1;
844         fdc_state[fdc].need_configure = 1;
845         fdc_state[fdc].perp_mode = 1;
846         fdc_state[fdc].rawcmd = 0;
847         for (drive = 0; drive < N_DRIVE; drive++)
848                 if (FDC(drive) == fdc &&
849                     (mode || drive_state[drive].track != NEED_1_RECAL))
850                         drive_state[drive].track = NEED_2_RECAL;
851 }
852
853 /*
854  * selects the fdc and drive, and enables the fdc's input/dma.
855  * Both current_drive and current_fdc are changed to match the new drive.
856  */
857 static void set_fdc(int drive)
858 {
859         unsigned int fdc;
860
861         if (drive < 0 || drive >= N_DRIVE) {
862                 pr_info("bad drive value %d\n", drive);
863                 return;
864         }
865
866         fdc = FDC(drive);
867         if (fdc >= N_FDC) {
868                 pr_info("bad fdc value\n");
869                 return;
870         }
871
872         set_dor(fdc, ~0, 8);
873 #if N_FDC > 1
874         set_dor(1 - fdc, ~8, 0);
875 #endif
876         if (fdc_state[fdc].rawcmd == 2)
877                 reset_fdc_info(fdc, 1);
878         if (fdc_inb(fdc, FD_STATUS) != STATUS_READY)
879                 fdc_state[fdc].reset = 1;
880
881         current_drive = drive;
882         current_fdc = fdc;
883 }
884
885 /*
886  * locks the driver.
887  * Both current_drive and current_fdc are changed to match the new drive.
888  */
889 static int lock_fdc(int drive)
890 {
891         if (WARN(atomic_read(&usage_count) == 0,
892                  "Trying to lock fdc while usage count=0\n"))
893                 return -1;
894
895         if (wait_event_interruptible(fdc_wait, !test_and_set_bit(0, &fdc_busy)))
896                 return -EINTR;
897
898         command_status = FD_COMMAND_NONE;
899
900         reschedule_timeout(drive, "lock fdc");
901         set_fdc(drive);
902         return 0;
903 }
904
905 /* unlocks the driver */
906 static void unlock_fdc(void)
907 {
908         if (!test_bit(0, &fdc_busy))
909                 DPRINT("FDC access conflict!\n");
910
911         raw_cmd = NULL;
912         command_status = FD_COMMAND_NONE;
913         cancel_delayed_work(&fd_timeout);
914         do_floppy = NULL;
915         cont = NULL;
916         clear_bit(0, &fdc_busy);
917         wake_up(&fdc_wait);
918 }
919
920 /* switches the motor off after a given timeout */
921 static void motor_off_callback(struct timer_list *t)
922 {
923         unsigned long nr = t - motor_off_timer;
924         unsigned char mask = ~(0x10 << UNIT(nr));
925
926         if (WARN_ON_ONCE(nr >= N_DRIVE))
927                 return;
928
929         set_dor(FDC(nr), mask, 0);
930 }
931
932 /* schedules motor off */
933 static void floppy_off(unsigned int drive)
934 {
935         unsigned long volatile delta;
936         int fdc = FDC(drive);
937
938         if (!(fdc_state[fdc].dor & (0x10 << UNIT(drive))))
939                 return;
940
941         del_timer(motor_off_timer + drive);
942
943         /* make spindle stop in a position which minimizes spinup time
944          * next time */
945         if (drive_params[drive].rps) {
946                 delta = jiffies - drive_state[drive].first_read_date + HZ -
947                     drive_params[drive].spindown_offset;
948                 delta = ((delta * drive_params[drive].rps) % HZ) / drive_params[drive].rps;
949                 motor_off_timer[drive].expires =
950                     jiffies + drive_params[drive].spindown - delta;
951         }
952         add_timer(motor_off_timer + drive);
953 }
954
955 /*
956  * cycle through all N_DRIVE floppy drives, for disk change testing.
957  * stopping at current drive. This is done before any long operation, to
958  * be sure to have up to date disk change information.
959  */
960 static void scandrives(void)
961 {
962         int i;
963         int drive;
964         int saved_drive;
965
966         if (drive_params[current_drive].select_delay)
967                 return;
968
969         saved_drive = current_drive;
970         for (i = 0; i < N_DRIVE; i++) {
971                 drive = (saved_drive + i + 1) % N_DRIVE;
972                 if (drive_state[drive].fd_ref == 0 || drive_params[drive].select_delay != 0)
973                         continue;       /* skip closed drives */
974                 set_fdc(drive);
975                 if (!(set_dor(current_fdc, ~3, UNIT(drive) | (0x10 << UNIT(drive))) &
976                       (0x10 << UNIT(drive))))
977                         /* switch the motor off again, if it was off to
978                          * begin with */
979                         set_dor(current_fdc, ~(0x10 << UNIT(drive)), 0);
980         }
981         set_fdc(saved_drive);
982 }
983
984 static void empty(void)
985 {
986 }
987
988 static void (*floppy_work_fn)(void);
989
990 static void floppy_work_workfn(struct work_struct *work)
991 {
992         floppy_work_fn();
993 }
994
995 static DECLARE_WORK(floppy_work, floppy_work_workfn);
996
997 static void schedule_bh(void (*handler)(void))
998 {
999         WARN_ON(work_pending(&floppy_work));
1000
1001         floppy_work_fn = handler;
1002         queue_work(floppy_wq, &floppy_work);
1003 }
1004
1005 static void (*fd_timer_fn)(void) = NULL;
1006
1007 static void fd_timer_workfn(struct work_struct *work)
1008 {
1009         fd_timer_fn();
1010 }
1011
1012 static DECLARE_DELAYED_WORK(fd_timer, fd_timer_workfn);
1013
1014 static void cancel_activity(void)
1015 {
1016         do_floppy = NULL;
1017         cancel_delayed_work_sync(&fd_timer);
1018         cancel_work_sync(&floppy_work);
1019 }
1020
1021 /* this function makes sure that the disk stays in the drive during the
1022  * transfer */
1023 static void fd_watchdog(void)
1024 {
1025         debug_dcl(drive_params[current_drive].flags,
1026                   "calling disk change from watchdog\n");
1027
1028         if (disk_change(current_drive)) {
1029                 DPRINT("disk removed during i/o\n");
1030                 cancel_activity();
1031                 cont->done(0);
1032                 reset_fdc();
1033         } else {
1034                 cancel_delayed_work(&fd_timer);
1035                 fd_timer_fn = fd_watchdog;
1036                 queue_delayed_work(floppy_wq, &fd_timer, HZ / 10);
1037         }
1038 }
1039
1040 static void main_command_interrupt(void)
1041 {
1042         cancel_delayed_work(&fd_timer);
1043         cont->interrupt();
1044 }
1045
1046 /* waits for a delay (spinup or select) to pass */
1047 static int fd_wait_for_completion(unsigned long expires,
1048                                   void (*function)(void))
1049 {
1050         if (fdc_state[current_fdc].reset) {
1051                 reset_fdc();    /* do the reset during sleep to win time
1052                                  * if we don't need to sleep, it's a good
1053                                  * occasion anyways */
1054                 return 1;
1055         }
1056
1057         if (time_before(jiffies, expires)) {
1058                 cancel_delayed_work(&fd_timer);
1059                 fd_timer_fn = function;
1060                 queue_delayed_work(floppy_wq, &fd_timer, expires - jiffies);
1061                 return 1;
1062         }
1063         return 0;
1064 }
1065
1066 static void setup_DMA(void)
1067 {
1068         unsigned long f;
1069
1070         if (raw_cmd->length == 0) {
1071                 print_hex_dump(KERN_INFO, "zero dma transfer size: ",
1072                                DUMP_PREFIX_NONE, 16, 1,
1073                                raw_cmd->fullcmd, raw_cmd->cmd_count, false);
1074                 cont->done(0);
1075                 fdc_state[current_fdc].reset = 1;
1076                 return;
1077         }
1078         if (((unsigned long)raw_cmd->kernel_data) % 512) {
1079                 pr_info("non aligned address: %p\n", raw_cmd->kernel_data);
1080                 cont->done(0);
1081                 fdc_state[current_fdc].reset = 1;
1082                 return;
1083         }
1084         f = claim_dma_lock();
1085         fd_disable_dma();
1086 #ifdef fd_dma_setup
1087         if (fd_dma_setup(raw_cmd->kernel_data, raw_cmd->length,
1088                          (raw_cmd->flags & FD_RAW_READ) ?
1089                          DMA_MODE_READ : DMA_MODE_WRITE,
1090                          fdc_state[current_fdc].address) < 0) {
1091                 release_dma_lock(f);
1092                 cont->done(0);
1093                 fdc_state[current_fdc].reset = 1;
1094                 return;
1095         }
1096         release_dma_lock(f);
1097 #else
1098         fd_clear_dma_ff();
1099         fd_cacheflush(raw_cmd->kernel_data, raw_cmd->length);
1100         fd_set_dma_mode((raw_cmd->flags & FD_RAW_READ) ?
1101                         DMA_MODE_READ : DMA_MODE_WRITE);
1102         fd_set_dma_addr(raw_cmd->kernel_data);
1103         fd_set_dma_count(raw_cmd->length);
1104         virtual_dma_port = fdc_state[current_fdc].address;
1105         fd_enable_dma();
1106         release_dma_lock(f);
1107 #endif
1108 }
1109
1110 static void show_floppy(int fdc);
1111
1112 /* waits until the fdc becomes ready */
1113 static int wait_til_ready(int fdc)
1114 {
1115         int status;
1116         int counter;
1117
1118         if (fdc_state[fdc].reset)
1119                 return -1;
1120         for (counter = 0; counter < 10000; counter++) {
1121                 status = fdc_inb(fdc, FD_STATUS);
1122                 if (status & STATUS_READY)
1123                         return status;
1124         }
1125         if (initialized) {
1126                 DPRINT("Getstatus times out (%x) on fdc %d\n", status, fdc);
1127                 show_floppy(fdc);
1128         }
1129         fdc_state[fdc].reset = 1;
1130         return -1;
1131 }
1132
1133 /* sends a command byte to the fdc */
1134 static int output_byte(int fdc, char byte)
1135 {
1136         int status = wait_til_ready(fdc);
1137
1138         if (status < 0)
1139                 return -1;
1140
1141         if (is_ready_state(status)) {
1142                 fdc_outb(byte, fdc, FD_DATA);
1143                 output_log[output_log_pos].data = byte;
1144                 output_log[output_log_pos].status = status;
1145                 output_log[output_log_pos].jiffies = jiffies;
1146                 output_log_pos = (output_log_pos + 1) % OLOGSIZE;
1147                 return 0;
1148         }
1149         fdc_state[fdc].reset = 1;
1150         if (initialized) {
1151                 DPRINT("Unable to send byte %x to FDC. Fdc=%x Status=%x\n",
1152                        byte, fdc, status);
1153                 show_floppy(fdc);
1154         }
1155         return -1;
1156 }
1157
1158 /* gets the response from the fdc */
1159 static int result(int fdc)
1160 {
1161         int i;
1162         int status = 0;
1163
1164         for (i = 0; i < FD_RAW_REPLY_SIZE; i++) {
1165                 status = wait_til_ready(fdc);
1166                 if (status < 0)
1167                         break;
1168                 status &= STATUS_DIR | STATUS_READY | STATUS_BUSY | STATUS_DMA;
1169                 if ((status & ~STATUS_BUSY) == STATUS_READY) {
1170                         resultjiffies = jiffies;
1171                         resultsize = i;
1172                         return i;
1173                 }
1174                 if (status == (STATUS_DIR | STATUS_READY | STATUS_BUSY))
1175                         reply_buffer[i] = fdc_inb(fdc, FD_DATA);
1176                 else
1177                         break;
1178         }
1179         if (initialized) {
1180                 DPRINT("get result error. Fdc=%d Last status=%x Read bytes=%d\n",
1181                        fdc, status, i);
1182                 show_floppy(fdc);
1183         }
1184         fdc_state[fdc].reset = 1;
1185         return -1;
1186 }
1187
1188 #define MORE_OUTPUT -2
1189 /* does the fdc need more output? */
1190 static int need_more_output(int fdc)
1191 {
1192         int status = wait_til_ready(fdc);
1193
1194         if (status < 0)
1195                 return -1;
1196
1197         if (is_ready_state(status))
1198                 return MORE_OUTPUT;
1199
1200         return result(fdc);
1201 }
1202
1203 /* Set perpendicular mode as required, based on data rate, if supported.
1204  * 82077 Now tested. 1Mbps data rate only possible with 82077-1.
1205  */
1206 static void perpendicular_mode(int fdc)
1207 {
1208         unsigned char perp_mode;
1209
1210         if (raw_cmd->rate & 0x40) {
1211                 switch (raw_cmd->rate & 3) {
1212                 case 0:
1213                         perp_mode = 2;
1214                         break;
1215                 case 3:
1216                         perp_mode = 3;
1217                         break;
1218                 default:
1219                         DPRINT("Invalid data rate for perpendicular mode!\n");
1220                         cont->done(0);
1221                         fdc_state[fdc].reset = 1;
1222                                         /*
1223                                          * convenient way to return to
1224                                          * redo without too much hassle
1225                                          * (deep stack et al.)
1226                                          */
1227                         return;
1228                 }
1229         } else
1230                 perp_mode = 0;
1231
1232         if (fdc_state[fdc].perp_mode == perp_mode)
1233                 return;
1234         if (fdc_state[fdc].version >= FDC_82077_ORIG) {
1235                 output_byte(fdc, FD_PERPENDICULAR);
1236                 output_byte(fdc, perp_mode);
1237                 fdc_state[fdc].perp_mode = perp_mode;
1238         } else if (perp_mode) {
1239                 DPRINT("perpendicular mode not supported by this FDC.\n");
1240         }
1241 }                               /* perpendicular_mode */
1242
1243 static int fifo_depth = 0xa;
1244 static int no_fifo;
1245
1246 static int fdc_configure(int fdc)
1247 {
1248         /* Turn on FIFO */
1249         output_byte(fdc, FD_CONFIGURE);
1250         if (need_more_output(fdc) != MORE_OUTPUT)
1251                 return 0;
1252         output_byte(fdc, 0);
1253         output_byte(fdc, 0x10 | (no_fifo & 0x20) | (fifo_depth & 0xf));
1254         output_byte(fdc, 0);    /* pre-compensation from track 0 upwards */
1255         return 1;
1256 }
1257
1258 #define NOMINAL_DTR 500
1259
1260 /* Issue a "SPECIFY" command to set the step rate time, head unload time,
1261  * head load time, and DMA disable flag to values needed by floppy.
1262  *
1263  * The value "dtr" is the data transfer rate in Kbps.  It is needed
1264  * to account for the data rate-based scaling done by the 82072 and 82077
1265  * FDC types.  This parameter is ignored for other types of FDCs (i.e.
1266  * 8272a).
1267  *
1268  * Note that changing the data transfer rate has a (probably deleterious)
1269  * effect on the parameters subject to scaling for 82072/82077 FDCs, so
1270  * fdc_specify is called again after each data transfer rate
1271  * change.
1272  *
1273  * srt: 1000 to 16000 in microseconds
1274  * hut: 16 to 240 milliseconds
1275  * hlt: 2 to 254 milliseconds
1276  *
1277  * These values are rounded up to the next highest available delay time.
1278  */
1279 static void fdc_specify(int fdc, int drive)
1280 {
1281         unsigned char spec1;
1282         unsigned char spec2;
1283         unsigned long srt;
1284         unsigned long hlt;
1285         unsigned long hut;
1286         unsigned long dtr = NOMINAL_DTR;
1287         unsigned long scale_dtr = NOMINAL_DTR;
1288         int hlt_max_code = 0x7f;
1289         int hut_max_code = 0xf;
1290
1291         if (fdc_state[fdc].need_configure &&
1292             fdc_state[fdc].version >= FDC_82072A) {
1293                 fdc_configure(fdc);
1294                 fdc_state[fdc].need_configure = 0;
1295         }
1296
1297         switch (raw_cmd->rate & 0x03) {
1298         case 3:
1299                 dtr = 1000;
1300                 break;
1301         case 1:
1302                 dtr = 300;
1303                 if (fdc_state[fdc].version >= FDC_82078) {
1304                         /* chose the default rate table, not the one
1305                          * where 1 = 2 Mbps */
1306                         output_byte(fdc, FD_DRIVESPEC);
1307                         if (need_more_output(fdc) == MORE_OUTPUT) {
1308                                 output_byte(fdc, UNIT(drive));
1309                                 output_byte(fdc, 0xc0);
1310                         }
1311                 }
1312                 break;
1313         case 2:
1314                 dtr = 250;
1315                 break;
1316         }
1317
1318         if (fdc_state[fdc].version >= FDC_82072) {
1319                 scale_dtr = dtr;
1320                 hlt_max_code = 0x00;    /* 0==256msec*dtr0/dtr (not linear!) */
1321                 hut_max_code = 0x0;     /* 0==256msec*dtr0/dtr (not linear!) */
1322         }
1323
1324         /* Convert step rate from microseconds to milliseconds and 4 bits */
1325         srt = 16 - DIV_ROUND_UP(drive_params[drive].srt * scale_dtr / 1000,
1326                                 NOMINAL_DTR);
1327         if (slow_floppy)
1328                 srt = srt / 4;
1329
1330         SUPBOUND(srt, 0xf);
1331         INFBOUND(srt, 0);
1332
1333         hlt = DIV_ROUND_UP(drive_params[drive].hlt * scale_dtr / 2,
1334                            NOMINAL_DTR);
1335         if (hlt < 0x01)
1336                 hlt = 0x01;
1337         else if (hlt > 0x7f)
1338                 hlt = hlt_max_code;
1339
1340         hut = DIV_ROUND_UP(drive_params[drive].hut * scale_dtr / 16,
1341                            NOMINAL_DTR);
1342         if (hut < 0x1)
1343                 hut = 0x1;
1344         else if (hut > 0xf)
1345                 hut = hut_max_code;
1346
1347         spec1 = (srt << 4) | hut;
1348         spec2 = (hlt << 1) | (use_virtual_dma & 1);
1349
1350         /* If these parameters did not change, just return with success */
1351         if (fdc_state[fdc].spec1 != spec1 ||
1352             fdc_state[fdc].spec2 != spec2) {
1353                 /* Go ahead and set spec1 and spec2 */
1354                 output_byte(fdc, FD_SPECIFY);
1355                 output_byte(fdc, fdc_state[fdc].spec1 = spec1);
1356                 output_byte(fdc, fdc_state[fdc].spec2 = spec2);
1357         }
1358 }                               /* fdc_specify */
1359
1360 /* Set the FDC's data transfer rate on behalf of the specified drive.
1361  * NOTE: with 82072/82077 FDCs, changing the data rate requires a reissue
1362  * of the specify command (i.e. using the fdc_specify function).
1363  */
1364 static int fdc_dtr(void)
1365 {
1366         /* If data rate not already set to desired value, set it. */
1367         if ((raw_cmd->rate & 3) == fdc_state[current_fdc].dtr)
1368                 return 0;
1369
1370         /* Set dtr */
1371         fdc_outb(raw_cmd->rate & 3, current_fdc, FD_DCR);
1372
1373         /* TODO: some FDC/drive combinations (C&T 82C711 with TEAC 1.2MB)
1374          * need a stabilization period of several milliseconds to be
1375          * enforced after data rate changes before R/W operations.
1376          * Pause 5 msec to avoid trouble. (Needs to be 2 jiffies)
1377          */
1378         fdc_state[current_fdc].dtr = raw_cmd->rate & 3;
1379         return fd_wait_for_completion(jiffies + 2UL * HZ / 100, floppy_ready);
1380 }                               /* fdc_dtr */
1381
1382 static void tell_sector(void)
1383 {
1384         pr_cont(": track %d, head %d, sector %d, size %d",
1385                 reply_buffer[R_TRACK], reply_buffer[R_HEAD],
1386                 reply_buffer[R_SECTOR],
1387                 reply_buffer[R_SIZECODE]);
1388 }                               /* tell_sector */
1389
1390 static void print_errors(void)
1391 {
1392         DPRINT("");
1393         if (reply_buffer[ST0] & ST0_ECE) {
1394                 pr_cont("Recalibrate failed!");
1395         } else if (reply_buffer[ST2] & ST2_CRC) {
1396                 pr_cont("data CRC error");
1397                 tell_sector();
1398         } else if (reply_buffer[ST1] & ST1_CRC) {
1399                 pr_cont("CRC error");
1400                 tell_sector();
1401         } else if ((reply_buffer[ST1] & (ST1_MAM | ST1_ND)) ||
1402                    (reply_buffer[ST2] & ST2_MAM)) {
1403                 if (!probing) {
1404                         pr_cont("sector not found");
1405                         tell_sector();
1406                 } else
1407                         pr_cont("probe failed...");
1408         } else if (reply_buffer[ST2] & ST2_WC) {        /* seek error */
1409                 pr_cont("wrong cylinder");
1410         } else if (reply_buffer[ST2] & ST2_BC) {        /* cylinder marked as bad */
1411                 pr_cont("bad cylinder");
1412         } else {
1413                 pr_cont("unknown error. ST[0..2] are: 0x%x 0x%x 0x%x",
1414                         reply_buffer[ST0], reply_buffer[ST1],
1415                         reply_buffer[ST2]);
1416                 tell_sector();
1417         }
1418         pr_cont("\n");
1419 }
1420
1421 /*
1422  * OK, this error interpreting routine is called after a
1423  * DMA read/write has succeeded
1424  * or failed, so we check the results, and copy any buffers.
1425  * hhb: Added better error reporting.
1426  * ak: Made this into a separate routine.
1427  */
1428 static int interpret_errors(void)
1429 {
1430         char bad;
1431
1432         if (inr != 7) {
1433                 DPRINT("-- FDC reply error\n");
1434                 fdc_state[current_fdc].reset = 1;
1435                 return 1;
1436         }
1437
1438         /* check IC to find cause of interrupt */
1439         switch (reply_buffer[ST0] & ST0_INTR) {
1440         case 0x40:              /* error occurred during command execution */
1441                 if (reply_buffer[ST1] & ST1_EOC)
1442                         return 0;       /* occurs with pseudo-DMA */
1443                 bad = 1;
1444                 if (reply_buffer[ST1] & ST1_WP) {
1445                         DPRINT("Drive is write protected\n");
1446                         clear_bit(FD_DISK_WRITABLE_BIT,
1447                                   &drive_state[current_drive].flags);
1448                         cont->done(0);
1449                         bad = 2;
1450                 } else if (reply_buffer[ST1] & ST1_ND) {
1451                         set_bit(FD_NEED_TWADDLE_BIT,
1452                                 &drive_state[current_drive].flags);
1453                 } else if (reply_buffer[ST1] & ST1_OR) {
1454                         if (drive_params[current_drive].flags & FTD_MSG)
1455                                 DPRINT("Over/Underrun - retrying\n");
1456                         bad = 0;
1457                 } else if (*errors >= drive_params[current_drive].max_errors.reporting) {
1458                         print_errors();
1459                 }
1460                 if (reply_buffer[ST2] & ST2_WC || reply_buffer[ST2] & ST2_BC)
1461                         /* wrong cylinder => recal */
1462                         drive_state[current_drive].track = NEED_2_RECAL;
1463                 return bad;
1464         case 0x80:              /* invalid command given */
1465                 DPRINT("Invalid FDC command given!\n");
1466                 cont->done(0);
1467                 return 2;
1468         case 0xc0:
1469                 DPRINT("Abnormal termination caused by polling\n");
1470                 cont->error();
1471                 return 2;
1472         default:                /* (0) Normal command termination */
1473                 return 0;
1474         }
1475 }
1476
1477 /*
1478  * This routine is called when everything should be correctly set up
1479  * for the transfer (i.e. floppy motor is on, the correct floppy is
1480  * selected, and the head is sitting on the right track).
1481  */
1482 static void setup_rw_floppy(void)
1483 {
1484         int i;
1485         int r;
1486         int flags;
1487         unsigned long ready_date;
1488         void (*function)(void);
1489
1490         flags = raw_cmd->flags;
1491         if (flags & (FD_RAW_READ | FD_RAW_WRITE))
1492                 flags |= FD_RAW_INTR;
1493
1494         if ((flags & FD_RAW_SPIN) && !(flags & FD_RAW_NO_MOTOR)) {
1495                 ready_date = drive_state[current_drive].spinup_date + drive_params[current_drive].spinup;
1496                 /* If spinup will take a long time, rerun scandrives
1497                  * again just before spinup completion. Beware that
1498                  * after scandrives, we must again wait for selection.
1499                  */
1500                 if (time_after(ready_date, jiffies + drive_params[current_drive].select_delay)) {
1501                         ready_date -= drive_params[current_drive].select_delay;
1502                         function = floppy_start;
1503                 } else
1504                         function = setup_rw_floppy;
1505
1506                 /* wait until the floppy is spinning fast enough */
1507                 if (fd_wait_for_completion(ready_date, function))
1508                         return;
1509         }
1510         if ((flags & FD_RAW_READ) || (flags & FD_RAW_WRITE))
1511                 setup_DMA();
1512
1513         if (flags & FD_RAW_INTR)
1514                 do_floppy = main_command_interrupt;
1515
1516         r = 0;
1517         for (i = 0; i < raw_cmd->cmd_count; i++)
1518                 r |= output_byte(current_fdc, raw_cmd->fullcmd[i]);
1519
1520         debugt(__func__, "rw_command");
1521
1522         if (r) {
1523                 cont->error();
1524                 reset_fdc();
1525                 return;
1526         }
1527
1528         if (!(flags & FD_RAW_INTR)) {
1529                 inr = result(current_fdc);
1530                 cont->interrupt();
1531         } else if (flags & FD_RAW_NEED_DISK)
1532                 fd_watchdog();
1533 }
1534
1535 static int blind_seek;
1536
1537 /*
1538  * This is the routine called after every seek (or recalibrate) interrupt
1539  * from the floppy controller.
1540  */
1541 static void seek_interrupt(void)
1542 {
1543         debugt(__func__, "");
1544         if (inr != 2 || (reply_buffer[ST0] & 0xF8) != 0x20) {
1545                 DPRINT("seek failed\n");
1546                 drive_state[current_drive].track = NEED_2_RECAL;
1547                 cont->error();
1548                 cont->redo();
1549                 return;
1550         }
1551         if (drive_state[current_drive].track >= 0 &&
1552             drive_state[current_drive].track != reply_buffer[ST1] &&
1553             !blind_seek) {
1554                 debug_dcl(drive_params[current_drive].flags,
1555                           "clearing NEWCHANGE flag because of effective seek\n");
1556                 debug_dcl(drive_params[current_drive].flags, "jiffies=%lu\n",
1557                           jiffies);
1558                 clear_bit(FD_DISK_NEWCHANGE_BIT,
1559                           &drive_state[current_drive].flags);
1560                                         /* effective seek */
1561                 drive_state[current_drive].select_date = jiffies;
1562         }
1563         drive_state[current_drive].track = reply_buffer[ST1];
1564         floppy_ready();
1565 }
1566
1567 static void check_wp(int fdc, int drive)
1568 {
1569         if (test_bit(FD_VERIFY_BIT, &drive_state[drive].flags)) {
1570                                         /* check write protection */
1571                 output_byte(fdc, FD_GETSTATUS);
1572                 output_byte(fdc, UNIT(drive));
1573                 if (result(fdc) != 1) {
1574                         fdc_state[fdc].reset = 1;
1575                         return;
1576                 }
1577                 clear_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
1578                 clear_bit(FD_NEED_TWADDLE_BIT,
1579                           &drive_state[drive].flags);
1580                 debug_dcl(drive_params[drive].flags,
1581                           "checking whether disk is write protected\n");
1582                 debug_dcl(drive_params[drive].flags, "wp=%x\n",
1583                           reply_buffer[ST3] & 0x40);
1584                 if (!(reply_buffer[ST3] & 0x40))
1585                         set_bit(FD_DISK_WRITABLE_BIT,
1586                                 &drive_state[drive].flags);
1587                 else
1588                         clear_bit(FD_DISK_WRITABLE_BIT,
1589                                   &drive_state[drive].flags);
1590         }
1591 }
1592
1593 static void seek_floppy(void)
1594 {
1595         int track;
1596
1597         blind_seek = 0;
1598
1599         debug_dcl(drive_params[current_drive].flags,
1600                   "calling disk change from %s\n", __func__);
1601
1602         if (!test_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags) &&
1603             disk_change(current_drive) && (raw_cmd->flags & FD_RAW_NEED_DISK)) {
1604                 /* the media changed flag should be cleared after the seek.
1605                  * If it isn't, this means that there is really no disk in
1606                  * the drive.
1607                  */
1608                 set_bit(FD_DISK_CHANGED_BIT,
1609                         &drive_state[current_drive].flags);
1610                 cont->done(0);
1611                 cont->redo();
1612                 return;
1613         }
1614         if (drive_state[current_drive].track <= NEED_1_RECAL) {
1615                 recalibrate_floppy();
1616                 return;
1617         } else if (test_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags) &&
1618                    (raw_cmd->flags & FD_RAW_NEED_DISK) &&
1619                    (drive_state[current_drive].track <= NO_TRACK || drive_state[current_drive].track == raw_cmd->track)) {
1620                 /* we seek to clear the media-changed condition. Does anybody
1621                  * know a more elegant way, which works on all drives? */
1622                 if (raw_cmd->track)
1623                         track = raw_cmd->track - 1;
1624                 else {
1625                         if (drive_params[current_drive].flags & FD_SILENT_DCL_CLEAR) {
1626                                 set_dor(current_fdc, ~(0x10 << UNIT(current_drive)), 0);
1627                                 blind_seek = 1;
1628                                 raw_cmd->flags |= FD_RAW_NEED_SEEK;
1629                         }
1630                         track = 1;
1631                 }
1632         } else {
1633                 check_wp(current_fdc, current_drive);
1634                 if (raw_cmd->track != drive_state[current_drive].track &&
1635                     (raw_cmd->flags & FD_RAW_NEED_SEEK))
1636                         track = raw_cmd->track;
1637                 else {
1638                         setup_rw_floppy();
1639                         return;
1640                 }
1641         }
1642
1643         do_floppy = seek_interrupt;
1644         output_byte(current_fdc, FD_SEEK);
1645         output_byte(current_fdc, UNIT(current_drive));
1646         if (output_byte(current_fdc, track) < 0) {
1647                 reset_fdc();
1648                 return;
1649         }
1650         debugt(__func__, "");
1651 }
1652
1653 static void recal_interrupt(void)
1654 {
1655         debugt(__func__, "");
1656         if (inr != 2)
1657                 fdc_state[current_fdc].reset = 1;
1658         else if (reply_buffer[ST0] & ST0_ECE) {
1659                 switch (drive_state[current_drive].track) {
1660                 case NEED_1_RECAL:
1661                         debugt(__func__, "need 1 recal");
1662                         /* after a second recalibrate, we still haven't
1663                          * reached track 0. Probably no drive. Raise an
1664                          * error, as failing immediately might upset
1665                          * computers possessed by the Devil :-) */
1666                         cont->error();
1667                         cont->redo();
1668                         return;
1669                 case NEED_2_RECAL:
1670                         debugt(__func__, "need 2 recal");
1671                         /* If we already did a recalibrate,
1672                          * and we are not at track 0, this
1673                          * means we have moved. (The only way
1674                          * not to move at recalibration is to
1675                          * be already at track 0.) Clear the
1676                          * new change flag */
1677                         debug_dcl(drive_params[current_drive].flags,
1678                                   "clearing NEWCHANGE flag because of second recalibrate\n");
1679
1680                         clear_bit(FD_DISK_NEWCHANGE_BIT,
1681                                   &drive_state[current_drive].flags);
1682                         drive_state[current_drive].select_date = jiffies;
1683                         fallthrough;
1684                 default:
1685                         debugt(__func__, "default");
1686                         /* Recalibrate moves the head by at
1687                          * most 80 steps. If after one
1688                          * recalibrate we don't have reached
1689                          * track 0, this might mean that we
1690                          * started beyond track 80.  Try
1691                          * again.  */
1692                         drive_state[current_drive].track = NEED_1_RECAL;
1693                         break;
1694                 }
1695         } else
1696                 drive_state[current_drive].track = reply_buffer[ST1];
1697         floppy_ready();
1698 }
1699
1700 static void print_result(char *message, int inr)
1701 {
1702         int i;
1703
1704         DPRINT("%s ", message);
1705         if (inr >= 0)
1706                 for (i = 0; i < inr; i++)
1707                         pr_cont("repl[%d]=%x ", i, reply_buffer[i]);
1708         pr_cont("\n");
1709 }
1710
1711 /* interrupt handler. Note that this can be called externally on the Sparc */
1712 irqreturn_t floppy_interrupt(int irq, void *dev_id)
1713 {
1714         int do_print;
1715         unsigned long f;
1716         void (*handler)(void) = do_floppy;
1717
1718         lasthandler = handler;
1719         interruptjiffies = jiffies;
1720
1721         f = claim_dma_lock();
1722         fd_disable_dma();
1723         release_dma_lock(f);
1724
1725         do_floppy = NULL;
1726         if (current_fdc >= N_FDC || fdc_state[current_fdc].address == -1) {
1727                 /* we don't even know which FDC is the culprit */
1728                 pr_info("DOR0=%x\n", fdc_state[0].dor);
1729                 pr_info("floppy interrupt on bizarre fdc %d\n", current_fdc);
1730                 pr_info("handler=%ps\n", handler);
1731                 is_alive(__func__, "bizarre fdc");
1732                 return IRQ_NONE;
1733         }
1734
1735         fdc_state[current_fdc].reset = 0;
1736         /* We have to clear the reset flag here, because apparently on boxes
1737          * with level triggered interrupts (PS/2, Sparc, ...), it is needed to
1738          * emit SENSEI's to clear the interrupt line. And fdc_state[fdc].reset
1739          * blocks the emission of the SENSEI's.
1740          * It is OK to emit floppy commands because we are in an interrupt
1741          * handler here, and thus we have to fear no interference of other
1742          * activity.
1743          */
1744
1745         do_print = !handler && print_unex && initialized;
1746
1747         inr = result(current_fdc);
1748         if (do_print)
1749                 print_result("unexpected interrupt", inr);
1750         if (inr == 0) {
1751                 int max_sensei = 4;
1752                 do {
1753                         output_byte(current_fdc, FD_SENSEI);
1754                         inr = result(current_fdc);
1755                         if (do_print)
1756                                 print_result("sensei", inr);
1757                         max_sensei--;
1758                 } while ((reply_buffer[ST0] & 0x83) != UNIT(current_drive) &&
1759                          inr == 2 && max_sensei);
1760         }
1761         if (!handler) {
1762                 fdc_state[current_fdc].reset = 1;
1763                 return IRQ_NONE;
1764         }
1765         schedule_bh(handler);
1766         is_alive(__func__, "normal interrupt end");
1767
1768         /* FIXME! Was it really for us? */
1769         return IRQ_HANDLED;
1770 }
1771
1772 static void recalibrate_floppy(void)
1773 {
1774         debugt(__func__, "");
1775         do_floppy = recal_interrupt;
1776         output_byte(current_fdc, FD_RECALIBRATE);
1777         if (output_byte(current_fdc, UNIT(current_drive)) < 0)
1778                 reset_fdc();
1779 }
1780
1781 /*
1782  * Must do 4 FD_SENSEIs after reset because of ``drive polling''.
1783  */
1784 static void reset_interrupt(void)
1785 {
1786         debugt(__func__, "");
1787         result(current_fdc);            /* get the status ready for set_fdc */
1788         if (fdc_state[current_fdc].reset) {
1789                 pr_info("reset set in interrupt, calling %ps\n", cont->error);
1790                 cont->error();  /* a reset just after a reset. BAD! */
1791         }
1792         cont->redo();
1793 }
1794
1795 /*
1796  * reset is done by pulling bit 2 of DOR low for a while (old FDCs),
1797  * or by setting the self clearing bit 7 of STATUS (newer FDCs).
1798  * This WILL trigger an interrupt, causing the handlers in the current
1799  * cont's ->redo() to be called via reset_interrupt().
1800  */
1801 static void reset_fdc(void)
1802 {
1803         unsigned long flags;
1804
1805         do_floppy = reset_interrupt;
1806         fdc_state[current_fdc].reset = 0;
1807         reset_fdc_info(current_fdc, 0);
1808
1809         /* Pseudo-DMA may intercept 'reset finished' interrupt.  */
1810         /* Irrelevant for systems with true DMA (i386).          */
1811
1812         flags = claim_dma_lock();
1813         fd_disable_dma();
1814         release_dma_lock(flags);
1815
1816         if (fdc_state[current_fdc].version >= FDC_82072A)
1817                 fdc_outb(0x80 | (fdc_state[current_fdc].dtr & 3),
1818                          current_fdc, FD_STATUS);
1819         else {
1820                 fdc_outb(fdc_state[current_fdc].dor & ~0x04, current_fdc, FD_DOR);
1821                 udelay(FD_RESET_DELAY);
1822                 fdc_outb(fdc_state[current_fdc].dor, current_fdc, FD_DOR);
1823         }
1824 }
1825
1826 static void show_floppy(int fdc)
1827 {
1828         int i;
1829
1830         pr_info("\n");
1831         pr_info("floppy driver state\n");
1832         pr_info("-------------------\n");
1833         pr_info("now=%lu last interrupt=%lu diff=%lu last called handler=%ps\n",
1834                 jiffies, interruptjiffies, jiffies - interruptjiffies,
1835                 lasthandler);
1836
1837         pr_info("timeout_message=%s\n", timeout_message);
1838         pr_info("last output bytes:\n");
1839         for (i = 0; i < OLOGSIZE; i++)
1840                 pr_info("%2x %2x %lu\n",
1841                         output_log[(i + output_log_pos) % OLOGSIZE].data,
1842                         output_log[(i + output_log_pos) % OLOGSIZE].status,
1843                         output_log[(i + output_log_pos) % OLOGSIZE].jiffies);
1844         pr_info("last result at %lu\n", resultjiffies);
1845         pr_info("last redo_fd_request at %lu\n", lastredo);
1846         print_hex_dump(KERN_INFO, "", DUMP_PREFIX_NONE, 16, 1,
1847                        reply_buffer, resultsize, true);
1848
1849         pr_info("status=%x\n", fdc_inb(fdc, FD_STATUS));
1850         pr_info("fdc_busy=%lu\n", fdc_busy);
1851         if (do_floppy)
1852                 pr_info("do_floppy=%ps\n", do_floppy);
1853         if (work_pending(&floppy_work))
1854                 pr_info("floppy_work.func=%ps\n", floppy_work.func);
1855         if (delayed_work_pending(&fd_timer))
1856                 pr_info("delayed work.function=%p expires=%ld\n",
1857                        fd_timer.work.func,
1858                        fd_timer.timer.expires - jiffies);
1859         if (delayed_work_pending(&fd_timeout))
1860                 pr_info("timer_function=%p expires=%ld\n",
1861                        fd_timeout.work.func,
1862                        fd_timeout.timer.expires - jiffies);
1863
1864         pr_info("cont=%p\n", cont);
1865         pr_info("current_req=%p\n", current_req);
1866         pr_info("command_status=%d\n", command_status);
1867         pr_info("\n");
1868 }
1869
1870 static void floppy_shutdown(struct work_struct *arg)
1871 {
1872         unsigned long flags;
1873
1874         if (initialized)
1875                 show_floppy(current_fdc);
1876         cancel_activity();
1877
1878         flags = claim_dma_lock();
1879         fd_disable_dma();
1880         release_dma_lock(flags);
1881
1882         /* avoid dma going to a random drive after shutdown */
1883
1884         if (initialized)
1885                 DPRINT("floppy timeout called\n");
1886         fdc_state[current_fdc].reset = 1;
1887         if (cont) {
1888                 cont->done(0);
1889                 cont->redo();   /* this will recall reset when needed */
1890         } else {
1891                 pr_info("no cont in shutdown!\n");
1892                 process_fd_request();
1893         }
1894         is_alive(__func__, "");
1895 }
1896
1897 /* start motor, check media-changed condition and write protection */
1898 static int start_motor(void (*function)(void))
1899 {
1900         int mask;
1901         int data;
1902
1903         mask = 0xfc;
1904         data = UNIT(current_drive);
1905         if (!(raw_cmd->flags & FD_RAW_NO_MOTOR)) {
1906                 if (!(fdc_state[current_fdc].dor & (0x10 << UNIT(current_drive)))) {
1907                         set_debugt();
1908                         /* no read since this drive is running */
1909                         drive_state[current_drive].first_read_date = 0;
1910                         /* note motor start time if motor is not yet running */
1911                         drive_state[current_drive].spinup_date = jiffies;
1912                         data |= (0x10 << UNIT(current_drive));
1913                 }
1914         } else if (fdc_state[current_fdc].dor & (0x10 << UNIT(current_drive)))
1915                 mask &= ~(0x10 << UNIT(current_drive));
1916
1917         /* starts motor and selects floppy */
1918         del_timer(motor_off_timer + current_drive);
1919         set_dor(current_fdc, mask, data);
1920
1921         /* wait_for_completion also schedules reset if needed. */
1922         return fd_wait_for_completion(drive_state[current_drive].select_date + drive_params[current_drive].select_delay,
1923                                       function);
1924 }
1925
1926 static void floppy_ready(void)
1927 {
1928         if (fdc_state[current_fdc].reset) {
1929                 reset_fdc();
1930                 return;
1931         }
1932         if (start_motor(floppy_ready))
1933                 return;
1934         if (fdc_dtr())
1935                 return;
1936
1937         debug_dcl(drive_params[current_drive].flags,
1938                   "calling disk change from floppy_ready\n");
1939         if (!(raw_cmd->flags & FD_RAW_NO_MOTOR) &&
1940             disk_change(current_drive) && !drive_params[current_drive].select_delay)
1941                 twaddle(current_fdc, current_drive);    /* this clears the dcl on certain
1942                                  * drive/controller combinations */
1943
1944 #ifdef fd_chose_dma_mode
1945         if ((raw_cmd->flags & FD_RAW_READ) || (raw_cmd->flags & FD_RAW_WRITE)) {
1946                 unsigned long flags = claim_dma_lock();
1947                 fd_chose_dma_mode(raw_cmd->kernel_data, raw_cmd->length);
1948                 release_dma_lock(flags);
1949         }
1950 #endif
1951
1952         if (raw_cmd->flags & (FD_RAW_NEED_SEEK | FD_RAW_NEED_DISK)) {
1953                 perpendicular_mode(current_fdc);
1954                 fdc_specify(current_fdc, current_drive); /* must be done here because of hut, hlt ... */
1955                 seek_floppy();
1956         } else {
1957                 if ((raw_cmd->flags & FD_RAW_READ) ||
1958                     (raw_cmd->flags & FD_RAW_WRITE))
1959                         fdc_specify(current_fdc, current_drive);
1960                 setup_rw_floppy();
1961         }
1962 }
1963
1964 static void floppy_start(void)
1965 {
1966         reschedule_timeout(current_drive, "floppy start");
1967
1968         scandrives();
1969         debug_dcl(drive_params[current_drive].flags,
1970                   "setting NEWCHANGE in floppy_start\n");
1971         set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags);
1972         floppy_ready();
1973 }
1974
1975 /*
1976  * ========================================================================
1977  * here ends the bottom half. Exported routines are:
1978  * floppy_start, floppy_off, floppy_ready, lock_fdc, unlock_fdc, set_fdc,
1979  * start_motor, reset_fdc, reset_fdc_info, interpret_errors.
1980  * Initialization also uses output_byte, result, set_dor, floppy_interrupt
1981  * and set_dor.
1982  * ========================================================================
1983  */
1984 /*
1985  * General purpose continuations.
1986  * ==============================
1987  */
1988
1989 static void do_wakeup(void)
1990 {
1991         reschedule_timeout(MAXTIMEOUT, "do wakeup");
1992         cont = NULL;
1993         command_status += 2;
1994         wake_up(&command_done);
1995 }
1996
1997 static const struct cont_t wakeup_cont = {
1998         .interrupt      = empty,
1999         .redo           = do_wakeup,
2000         .error          = empty,
2001         .done           = (done_f)empty
2002 };
2003
2004 static const struct cont_t intr_cont = {
2005         .interrupt      = empty,
2006         .redo           = process_fd_request,
2007         .error          = empty,
2008         .done           = (done_f)empty
2009 };
2010
2011 /* schedules handler, waiting for completion. May be interrupted, will then
2012  * return -EINTR, in which case the driver will automatically be unlocked.
2013  */
2014 static int wait_til_done(void (*handler)(void), bool interruptible)
2015 {
2016         int ret;
2017
2018         schedule_bh(handler);
2019
2020         if (interruptible)
2021                 wait_event_interruptible(command_done, command_status >= 2);
2022         else
2023                 wait_event(command_done, command_status >= 2);
2024
2025         if (command_status < 2) {
2026                 cancel_activity();
2027                 cont = &intr_cont;
2028                 reset_fdc();
2029                 return -EINTR;
2030         }
2031
2032         if (fdc_state[current_fdc].reset)
2033                 command_status = FD_COMMAND_ERROR;
2034         if (command_status == FD_COMMAND_OKAY)
2035                 ret = 0;
2036         else
2037                 ret = -EIO;
2038         command_status = FD_COMMAND_NONE;
2039         return ret;
2040 }
2041
2042 static void generic_done(int result)
2043 {
2044         command_status = result;
2045         cont = &wakeup_cont;
2046 }
2047
2048 static void generic_success(void)
2049 {
2050         cont->done(1);
2051 }
2052
2053 static void generic_failure(void)
2054 {
2055         cont->done(0);
2056 }
2057
2058 static void success_and_wakeup(void)
2059 {
2060         generic_success();
2061         cont->redo();
2062 }
2063
2064 /*
2065  * formatting and rw support.
2066  * ==========================
2067  */
2068
2069 static int next_valid_format(int drive)
2070 {
2071         int probed_format;
2072
2073         probed_format = drive_state[drive].probed_format;
2074         while (1) {
2075                 if (probed_format >= FD_AUTODETECT_SIZE ||
2076                     !drive_params[drive].autodetect[probed_format]) {
2077                         drive_state[drive].probed_format = 0;
2078                         return 1;
2079                 }
2080                 if (floppy_type[drive_params[drive].autodetect[probed_format]].sect) {
2081                         drive_state[drive].probed_format = probed_format;
2082                         return 0;
2083                 }
2084                 probed_format++;
2085         }
2086 }
2087
2088 static void bad_flp_intr(void)
2089 {
2090         int err_count;
2091
2092         if (probing) {
2093                 drive_state[current_drive].probed_format++;
2094                 if (!next_valid_format(current_drive))
2095                         return;
2096         }
2097         err_count = ++(*errors);
2098         INFBOUND(write_errors[current_drive].badness, err_count);
2099         if (err_count > drive_params[current_drive].max_errors.abort)
2100                 cont->done(0);
2101         if (err_count > drive_params[current_drive].max_errors.reset)
2102                 fdc_state[current_fdc].reset = 1;
2103         else if (err_count > drive_params[current_drive].max_errors.recal)
2104                 drive_state[current_drive].track = NEED_2_RECAL;
2105 }
2106
2107 static void set_floppy(int drive)
2108 {
2109         int type = ITYPE(drive_state[drive].fd_device);
2110
2111         if (type)
2112                 _floppy = floppy_type + type;
2113         else
2114                 _floppy = current_type[drive];
2115 }
2116
2117 /*
2118  * formatting support.
2119  * ===================
2120  */
2121 static void format_interrupt(void)
2122 {
2123         switch (interpret_errors()) {
2124         case 1:
2125                 cont->error();
2126         case 2:
2127                 break;
2128         case 0:
2129                 cont->done(1);
2130         }
2131         cont->redo();
2132 }
2133
2134 #define FM_MODE(x, y) ((y) & ~(((x)->rate & 0x80) >> 1))
2135 #define CT(x) ((x) | 0xc0)
2136
2137 static void setup_format_params(int track)
2138 {
2139         int n;
2140         int il;
2141         int count;
2142         int head_shift;
2143         int track_shift;
2144         struct fparm {
2145                 unsigned char track, head, sect, size;
2146         } *here = (struct fparm *)floppy_track_buffer;
2147
2148         raw_cmd = &default_raw_cmd;
2149         raw_cmd->track = track;
2150
2151         raw_cmd->flags = (FD_RAW_WRITE | FD_RAW_INTR | FD_RAW_SPIN |
2152                           FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK);
2153         raw_cmd->rate = _floppy->rate & 0x43;
2154         raw_cmd->cmd_count = NR_F;
2155         raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_FORMAT);
2156         raw_cmd->cmd[DR_SELECT] = UNIT(current_drive) + PH_HEAD(_floppy, format_req.head);
2157         raw_cmd->cmd[F_SIZECODE] = FD_SIZECODE(_floppy);
2158         raw_cmd->cmd[F_SECT_PER_TRACK] = _floppy->sect << 2 >> raw_cmd->cmd[F_SIZECODE];
2159         raw_cmd->cmd[F_GAP] = _floppy->fmt_gap;
2160         raw_cmd->cmd[F_FILL] = FD_FILL_BYTE;
2161
2162         raw_cmd->kernel_data = floppy_track_buffer;
2163         raw_cmd->length = 4 * raw_cmd->cmd[F_SECT_PER_TRACK];
2164
2165         if (!raw_cmd->cmd[F_SECT_PER_TRACK])
2166                 return;
2167
2168         /* allow for about 30ms for data transport per track */
2169         head_shift = (raw_cmd->cmd[F_SECT_PER_TRACK] + 5) / 6;
2170
2171         /* a ``cylinder'' is two tracks plus a little stepping time */
2172         track_shift = 2 * head_shift + 3;
2173
2174         /* position of logical sector 1 on this track */
2175         n = (track_shift * format_req.track + head_shift * format_req.head)
2176             % raw_cmd->cmd[F_SECT_PER_TRACK];
2177
2178         /* determine interleave */
2179         il = 1;
2180         if (_floppy->fmt_gap < 0x22)
2181                 il++;
2182
2183         /* initialize field */
2184         for (count = 0; count < raw_cmd->cmd[F_SECT_PER_TRACK]; ++count) {
2185                 here[count].track = format_req.track;
2186                 here[count].head = format_req.head;
2187                 here[count].sect = 0;
2188                 here[count].size = raw_cmd->cmd[F_SIZECODE];
2189         }
2190         /* place logical sectors */
2191         for (count = 1; count <= raw_cmd->cmd[F_SECT_PER_TRACK]; ++count) {
2192                 here[n].sect = count;
2193                 n = (n + il) % raw_cmd->cmd[F_SECT_PER_TRACK];
2194                 if (here[n].sect) {     /* sector busy, find next free sector */
2195                         ++n;
2196                         if (n >= raw_cmd->cmd[F_SECT_PER_TRACK]) {
2197                                 n -= raw_cmd->cmd[F_SECT_PER_TRACK];
2198                                 while (here[n].sect)
2199                                         ++n;
2200                         }
2201                 }
2202         }
2203         if (_floppy->stretch & FD_SECTBASEMASK) {
2204                 for (count = 0; count < raw_cmd->cmd[F_SECT_PER_TRACK]; count++)
2205                         here[count].sect += FD_SECTBASE(_floppy) - 1;
2206         }
2207 }
2208
2209 static void redo_format(void)
2210 {
2211         buffer_track = -1;
2212         setup_format_params(format_req.track << STRETCH(_floppy));
2213         floppy_start();
2214         debugt(__func__, "queue format request");
2215 }
2216
2217 static const struct cont_t format_cont = {
2218         .interrupt      = format_interrupt,
2219         .redo           = redo_format,
2220         .error          = bad_flp_intr,
2221         .done           = generic_done
2222 };
2223
2224 static int do_format(int drive, struct format_descr *tmp_format_req)
2225 {
2226         int ret;
2227
2228         if (lock_fdc(drive))
2229                 return -EINTR;
2230
2231         set_floppy(drive);
2232         if (!_floppy ||
2233             _floppy->track > drive_params[current_drive].tracks ||
2234             tmp_format_req->track >= _floppy->track ||
2235             tmp_format_req->head >= _floppy->head ||
2236             (_floppy->sect << 2) % (1 << FD_SIZECODE(_floppy)) ||
2237             !_floppy->fmt_gap) {
2238                 process_fd_request();
2239                 return -EINVAL;
2240         }
2241         format_req = *tmp_format_req;
2242         format_errors = 0;
2243         cont = &format_cont;
2244         errors = &format_errors;
2245         ret = wait_til_done(redo_format, true);
2246         if (ret == -EINTR)
2247                 return -EINTR;
2248         process_fd_request();
2249         return ret;
2250 }
2251
2252 /*
2253  * Buffer read/write and support
2254  * =============================
2255  */
2256
2257 static void floppy_end_request(struct request *req, blk_status_t error)
2258 {
2259         unsigned int nr_sectors = current_count_sectors;
2260         unsigned int drive = (unsigned long)req->rq_disk->private_data;
2261
2262         /* current_count_sectors can be zero if transfer failed */
2263         if (error)
2264                 nr_sectors = blk_rq_cur_sectors(req);
2265         if (blk_update_request(req, error, nr_sectors << 9))
2266                 return;
2267         __blk_mq_end_request(req, error);
2268
2269         /* We're done with the request */
2270         floppy_off(drive);
2271         current_req = NULL;
2272 }
2273
2274 /* new request_done. Can handle physical sectors which are smaller than a
2275  * logical buffer */
2276 static void request_done(int uptodate)
2277 {
2278         struct request *req = current_req;
2279         int block;
2280         char msg[sizeof("request done ") + sizeof(int) * 3];
2281
2282         probing = 0;
2283         snprintf(msg, sizeof(msg), "request done %d", uptodate);
2284         reschedule_timeout(MAXTIMEOUT, msg);
2285
2286         if (!req) {
2287                 pr_info("floppy.c: no request in request_done\n");
2288                 return;
2289         }
2290
2291         if (uptodate) {
2292                 /* maintain values for invalidation on geometry
2293                  * change */
2294                 block = current_count_sectors + blk_rq_pos(req);
2295                 INFBOUND(drive_state[current_drive].maxblock, block);
2296                 if (block > _floppy->sect)
2297                         drive_state[current_drive].maxtrack = 1;
2298
2299                 floppy_end_request(req, 0);
2300         } else {
2301                 if (rq_data_dir(req) == WRITE) {
2302                         /* record write error information */
2303                         write_errors[current_drive].write_errors++;
2304                         if (write_errors[current_drive].write_errors == 1) {
2305                                 write_errors[current_drive].first_error_sector = blk_rq_pos(req);
2306                                 write_errors[current_drive].first_error_generation = drive_state[current_drive].generation;
2307                         }
2308                         write_errors[current_drive].last_error_sector = blk_rq_pos(req);
2309                         write_errors[current_drive].last_error_generation = drive_state[current_drive].generation;
2310                 }
2311                 floppy_end_request(req, BLK_STS_IOERR);
2312         }
2313 }
2314
2315 /* Interrupt handler evaluating the result of the r/w operation */
2316 static void rw_interrupt(void)
2317 {
2318         int eoc;
2319         int ssize;
2320         int heads;
2321         int nr_sectors;
2322
2323         if (reply_buffer[R_HEAD] >= 2) {
2324                 /* some Toshiba floppy controllers occasionnally seem to
2325                  * return bogus interrupts after read/write operations, which
2326                  * can be recognized by a bad head number (>= 2) */
2327                 return;
2328         }
2329
2330         if (!drive_state[current_drive].first_read_date)
2331                 drive_state[current_drive].first_read_date = jiffies;
2332
2333         ssize = DIV_ROUND_UP(1 << raw_cmd->cmd[SIZECODE], 4);
2334
2335         if (reply_buffer[ST1] & ST1_EOC)
2336                 eoc = 1;
2337         else
2338                 eoc = 0;
2339
2340         if (raw_cmd->cmd[COMMAND] & 0x80)
2341                 heads = 2;
2342         else
2343                 heads = 1;
2344
2345         nr_sectors = (((reply_buffer[R_TRACK] - raw_cmd->cmd[TRACK]) * heads +
2346                        reply_buffer[R_HEAD] - raw_cmd->cmd[HEAD]) * raw_cmd->cmd[SECT_PER_TRACK] +
2347                       reply_buffer[R_SECTOR] - raw_cmd->cmd[SECTOR] + eoc) << raw_cmd->cmd[SIZECODE] >> 2;
2348
2349         if (nr_sectors / ssize >
2350             DIV_ROUND_UP(in_sector_offset + current_count_sectors, ssize)) {
2351                 DPRINT("long rw: %x instead of %lx\n",
2352                        nr_sectors, current_count_sectors);
2353                 pr_info("rs=%d s=%d\n", reply_buffer[R_SECTOR],
2354                         raw_cmd->cmd[SECTOR]);
2355                 pr_info("rh=%d h=%d\n", reply_buffer[R_HEAD],
2356                         raw_cmd->cmd[HEAD]);
2357                 pr_info("rt=%d t=%d\n", reply_buffer[R_TRACK],
2358                         raw_cmd->cmd[TRACK]);
2359                 pr_info("heads=%d eoc=%d\n", heads, eoc);
2360                 pr_info("spt=%d st=%d ss=%d\n",
2361                         raw_cmd->cmd[SECT_PER_TRACK], fsector_t, ssize);
2362                 pr_info("in_sector_offset=%d\n", in_sector_offset);
2363         }
2364
2365         nr_sectors -= in_sector_offset;
2366         INFBOUND(nr_sectors, 0);
2367         SUPBOUND(current_count_sectors, nr_sectors);
2368
2369         switch (interpret_errors()) {
2370         case 2:
2371                 cont->redo();
2372                 return;
2373         case 1:
2374                 if (!current_count_sectors) {
2375                         cont->error();
2376                         cont->redo();
2377                         return;
2378                 }
2379                 break;
2380         case 0:
2381                 if (!current_count_sectors) {
2382                         cont->redo();
2383                         return;
2384                 }
2385                 current_type[current_drive] = _floppy;
2386                 floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2387                 break;
2388         }
2389
2390         if (probing) {
2391                 if (drive_params[current_drive].flags & FTD_MSG)
2392                         DPRINT("Auto-detected floppy type %s in fd%d\n",
2393                                _floppy->name, current_drive);
2394                 current_type[current_drive] = _floppy;
2395                 floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2396                 probing = 0;
2397         }
2398
2399         if (CT(raw_cmd->cmd[COMMAND]) != FD_READ) {
2400                 /* transfer directly from buffer */
2401                 cont->done(1);
2402         } else {
2403                 buffer_track = raw_cmd->track;
2404                 buffer_drive = current_drive;
2405                 INFBOUND(buffer_max, nr_sectors + fsector_t);
2406         }
2407         cont->redo();
2408 }
2409
2410 /* Compute the maximal transfer size */
2411 static int transfer_size(int ssize, int max_sector, int max_size)
2412 {
2413         SUPBOUND(max_sector, fsector_t + max_size);
2414
2415         /* alignment */
2416         max_sector -= (max_sector % _floppy->sect) % ssize;
2417
2418         /* transfer size, beginning not aligned */
2419         current_count_sectors = max_sector - fsector_t;
2420
2421         return max_sector;
2422 }
2423
2424 /*
2425  * Move data from/to the track buffer to/from the buffer cache.
2426  */
2427 static void copy_buffer(int ssize, int max_sector, int max_sector_2)
2428 {
2429         int remaining;          /* number of transferred 512-byte sectors */
2430         struct bio_vec bv;
2431         char *dma_buffer;
2432         int size;
2433         struct req_iterator iter;
2434
2435         max_sector = transfer_size(ssize,
2436                                    min(max_sector, max_sector_2),
2437                                    blk_rq_sectors(current_req));
2438
2439         if (current_count_sectors <= 0 && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE &&
2440             buffer_max > fsector_t + blk_rq_sectors(current_req))
2441                 current_count_sectors = min_t(int, buffer_max - fsector_t,
2442                                               blk_rq_sectors(current_req));
2443
2444         remaining = current_count_sectors << 9;
2445         if (remaining > blk_rq_bytes(current_req) && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2446                 DPRINT("in copy buffer\n");
2447                 pr_info("current_count_sectors=%ld\n", current_count_sectors);
2448                 pr_info("remaining=%d\n", remaining >> 9);
2449                 pr_info("current_req->nr_sectors=%u\n",
2450                         blk_rq_sectors(current_req));
2451                 pr_info("current_req->current_nr_sectors=%u\n",
2452                         blk_rq_cur_sectors(current_req));
2453                 pr_info("max_sector=%d\n", max_sector);
2454                 pr_info("ssize=%d\n", ssize);
2455         }
2456
2457         buffer_max = max(max_sector, buffer_max);
2458
2459         dma_buffer = floppy_track_buffer + ((fsector_t - buffer_min) << 9);
2460
2461         size = blk_rq_cur_bytes(current_req);
2462
2463         rq_for_each_segment(bv, current_req, iter) {
2464                 if (!remaining)
2465                         break;
2466
2467                 size = bv.bv_len;
2468                 SUPBOUND(size, remaining);
2469                 if (dma_buffer + size >
2470                     floppy_track_buffer + (max_buffer_sectors << 10) ||
2471                     dma_buffer < floppy_track_buffer) {
2472                         DPRINT("buffer overrun in copy buffer %d\n",
2473                                (int)((floppy_track_buffer - dma_buffer) >> 9));
2474                         pr_info("fsector_t=%d buffer_min=%d\n",
2475                                 fsector_t, buffer_min);
2476                         pr_info("current_count_sectors=%ld\n",
2477                                 current_count_sectors);
2478                         if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2479                                 pr_info("read\n");
2480                         if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE)
2481                                 pr_info("write\n");
2482                         break;
2483                 }
2484
2485                 if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2486                         memcpy_to_page(bv.bv_page, bv.bv_offset, dma_buffer,
2487                                        size);
2488                 else
2489                         memcpy_from_page(dma_buffer, bv.bv_page, bv.bv_offset,
2490                                          size);
2491
2492                 remaining -= size;
2493                 dma_buffer += size;
2494         }
2495         if (remaining) {
2496                 if (remaining > 0)
2497                         max_sector -= remaining >> 9;
2498                 DPRINT("weirdness: remaining %d\n", remaining >> 9);
2499         }
2500 }
2501
2502 /* work around a bug in pseudo DMA
2503  * (on some FDCs) pseudo DMA does not stop when the CPU stops
2504  * sending data.  Hence we need a different way to signal the
2505  * transfer length:  We use raw_cmd->cmd[SECT_PER_TRACK].  Unfortunately, this
2506  * does not work with MT, hence we can only transfer one head at
2507  * a time
2508  */
2509 static void virtualdmabug_workaround(void)
2510 {
2511         int hard_sectors;
2512         int end_sector;
2513
2514         if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2515                 raw_cmd->cmd[COMMAND] &= ~0x80; /* switch off multiple track mode */
2516
2517                 hard_sectors = raw_cmd->length >> (7 + raw_cmd->cmd[SIZECODE]);
2518                 end_sector = raw_cmd->cmd[SECTOR] + hard_sectors - 1;
2519                 if (end_sector > raw_cmd->cmd[SECT_PER_TRACK]) {
2520                         pr_info("too many sectors %d > %d\n",
2521                                 end_sector, raw_cmd->cmd[SECT_PER_TRACK]);
2522                         return;
2523                 }
2524                 raw_cmd->cmd[SECT_PER_TRACK] = end_sector;
2525                                         /* make sure raw_cmd->cmd[SECT_PER_TRACK]
2526                                          * points to end of transfer */
2527         }
2528 }
2529
2530 /*
2531  * Formulate a read/write request.
2532  * this routine decides where to load the data (directly to buffer, or to
2533  * tmp floppy area), how much data to load (the size of the buffer, the whole
2534  * track, or a single sector)
2535  * All floppy_track_buffer handling goes in here. If we ever add track buffer
2536  * allocation on the fly, it should be done here. No other part should need
2537  * modification.
2538  */
2539
2540 static int make_raw_rw_request(void)
2541 {
2542         int aligned_sector_t;
2543         int max_sector;
2544         int max_size;
2545         int tracksize;
2546         int ssize;
2547
2548         if (WARN(max_buffer_sectors == 0, "VFS: Block I/O scheduled on unopened device\n"))
2549                 return 0;
2550
2551         set_fdc((long)current_req->rq_disk->private_data);
2552
2553         raw_cmd = &default_raw_cmd;
2554         raw_cmd->flags = FD_RAW_SPIN | FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK;
2555         raw_cmd->cmd_count = NR_RW;
2556         if (rq_data_dir(current_req) == READ) {
2557                 raw_cmd->flags |= FD_RAW_READ;
2558                 raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_READ);
2559         } else if (rq_data_dir(current_req) == WRITE) {
2560                 raw_cmd->flags |= FD_RAW_WRITE;
2561                 raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_WRITE);
2562         } else {
2563                 DPRINT("%s: unknown command\n", __func__);
2564                 return 0;
2565         }
2566
2567         max_sector = _floppy->sect * _floppy->head;
2568
2569         raw_cmd->cmd[TRACK] = (int)blk_rq_pos(current_req) / max_sector;
2570         fsector_t = (int)blk_rq_pos(current_req) % max_sector;
2571         if (_floppy->track && raw_cmd->cmd[TRACK] >= _floppy->track) {
2572                 if (blk_rq_cur_sectors(current_req) & 1) {
2573                         current_count_sectors = 1;
2574                         return 1;
2575                 } else
2576                         return 0;
2577         }
2578         raw_cmd->cmd[HEAD] = fsector_t / _floppy->sect;
2579
2580         if (((_floppy->stretch & (FD_SWAPSIDES | FD_SECTBASEMASK)) ||
2581              test_bit(FD_NEED_TWADDLE_BIT, &drive_state[current_drive].flags)) &&
2582             fsector_t < _floppy->sect)
2583                 max_sector = _floppy->sect;
2584
2585         /* 2M disks have phantom sectors on the first track */
2586         if ((_floppy->rate & FD_2M) && (!raw_cmd->cmd[TRACK]) && (!raw_cmd->cmd[HEAD])) {
2587                 max_sector = 2 * _floppy->sect / 3;
2588                 if (fsector_t >= max_sector) {
2589                         current_count_sectors =
2590                             min_t(int, _floppy->sect - fsector_t,
2591                                   blk_rq_sectors(current_req));
2592                         return 1;
2593                 }
2594                 raw_cmd->cmd[SIZECODE] = 2;
2595         } else
2596                 raw_cmd->cmd[SIZECODE] = FD_SIZECODE(_floppy);
2597         raw_cmd->rate = _floppy->rate & 0x43;
2598         if ((_floppy->rate & FD_2M) &&
2599             (raw_cmd->cmd[TRACK] || raw_cmd->cmd[HEAD]) && raw_cmd->rate == 2)
2600                 raw_cmd->rate = 1;
2601
2602         if (raw_cmd->cmd[SIZECODE])
2603                 raw_cmd->cmd[SIZECODE2] = 0xff;
2604         else
2605                 raw_cmd->cmd[SIZECODE2] = 0x80;
2606         raw_cmd->track = raw_cmd->cmd[TRACK] << STRETCH(_floppy);
2607         raw_cmd->cmd[DR_SELECT] = UNIT(current_drive) + PH_HEAD(_floppy, raw_cmd->cmd[HEAD]);
2608         raw_cmd->cmd[GAP] = _floppy->gap;
2609         ssize = DIV_ROUND_UP(1 << raw_cmd->cmd[SIZECODE], 4);
2610         raw_cmd->cmd[SECT_PER_TRACK] = _floppy->sect << 2 >> raw_cmd->cmd[SIZECODE];
2611         raw_cmd->cmd[SECTOR] = ((fsector_t % _floppy->sect) << 2 >> raw_cmd->cmd[SIZECODE]) +
2612             FD_SECTBASE(_floppy);
2613
2614         /* tracksize describes the size which can be filled up with sectors
2615          * of size ssize.
2616          */
2617         tracksize = _floppy->sect - _floppy->sect % ssize;
2618         if (tracksize < _floppy->sect) {
2619                 raw_cmd->cmd[SECT_PER_TRACK]++;
2620                 if (tracksize <= fsector_t % _floppy->sect)
2621                         raw_cmd->cmd[SECTOR]--;
2622
2623                 /* if we are beyond tracksize, fill up using smaller sectors */
2624                 while (tracksize <= fsector_t % _floppy->sect) {
2625                         while (tracksize + ssize > _floppy->sect) {
2626                                 raw_cmd->cmd[SIZECODE]--;
2627                                 ssize >>= 1;
2628                         }
2629                         raw_cmd->cmd[SECTOR]++;
2630                         raw_cmd->cmd[SECT_PER_TRACK]++;
2631                         tracksize += ssize;
2632                 }
2633                 max_sector = raw_cmd->cmd[HEAD] * _floppy->sect + tracksize;
2634         } else if (!raw_cmd->cmd[TRACK] && !raw_cmd->cmd[HEAD] && !(_floppy->rate & FD_2M) && probing) {
2635                 max_sector = _floppy->sect;
2636         } else if (!raw_cmd->cmd[HEAD] && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2637                 /* for virtual DMA bug workaround */
2638                 max_sector = _floppy->sect;
2639         }
2640
2641         in_sector_offset = (fsector_t % _floppy->sect) % ssize;
2642         aligned_sector_t = fsector_t - in_sector_offset;
2643         max_size = blk_rq_sectors(current_req);
2644         if ((raw_cmd->track == buffer_track) &&
2645             (current_drive == buffer_drive) &&
2646             (fsector_t >= buffer_min) && (fsector_t < buffer_max)) {
2647                 /* data already in track buffer */
2648                 if (CT(raw_cmd->cmd[COMMAND]) == FD_READ) {
2649                         copy_buffer(1, max_sector, buffer_max);
2650                         return 1;
2651                 }
2652         } else if (in_sector_offset || blk_rq_sectors(current_req) < ssize) {
2653                 if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2654                         unsigned int sectors;
2655
2656                         sectors = fsector_t + blk_rq_sectors(current_req);
2657                         if (sectors > ssize && sectors < ssize + ssize)
2658                                 max_size = ssize + ssize;
2659                         else
2660                                 max_size = ssize;
2661                 }
2662                 raw_cmd->flags &= ~FD_RAW_WRITE;
2663                 raw_cmd->flags |= FD_RAW_READ;
2664                 raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_READ);
2665         }
2666
2667         if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2668                 max_size = max_sector;  /* unbounded */
2669
2670         /* claim buffer track if needed */
2671         if (buffer_track != raw_cmd->track ||   /* bad track */
2672             buffer_drive != current_drive ||    /* bad drive */
2673             fsector_t > buffer_max ||
2674             fsector_t < buffer_min ||
2675             ((CT(raw_cmd->cmd[COMMAND]) == FD_READ ||
2676               (!in_sector_offset && blk_rq_sectors(current_req) >= ssize)) &&
2677              max_sector > 2 * max_buffer_sectors + buffer_min &&
2678              max_size + fsector_t > 2 * max_buffer_sectors + buffer_min)) {
2679                 /* not enough space */
2680                 buffer_track = -1;
2681                 buffer_drive = current_drive;
2682                 buffer_max = buffer_min = aligned_sector_t;
2683         }
2684         raw_cmd->kernel_data = floppy_track_buffer +
2685                 ((aligned_sector_t - buffer_min) << 9);
2686
2687         if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2688                 /* copy write buffer to track buffer.
2689                  * if we get here, we know that the write
2690                  * is either aligned or the data already in the buffer
2691                  * (buffer will be overwritten) */
2692                 if (in_sector_offset && buffer_track == -1)
2693                         DPRINT("internal error offset !=0 on write\n");
2694                 buffer_track = raw_cmd->track;
2695                 buffer_drive = current_drive;
2696                 copy_buffer(ssize, max_sector,
2697                             2 * max_buffer_sectors + buffer_min);
2698         } else
2699                 transfer_size(ssize, max_sector,
2700                               2 * max_buffer_sectors + buffer_min -
2701                               aligned_sector_t);
2702
2703         /* round up current_count_sectors to get dma xfer size */
2704         raw_cmd->length = in_sector_offset + current_count_sectors;
2705         raw_cmd->length = ((raw_cmd->length - 1) | (ssize - 1)) + 1;
2706         raw_cmd->length <<= 9;
2707         if ((raw_cmd->length < current_count_sectors << 9) ||
2708             (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE &&
2709              (aligned_sector_t + (raw_cmd->length >> 9) > buffer_max ||
2710               aligned_sector_t < buffer_min)) ||
2711             raw_cmd->length % (128 << raw_cmd->cmd[SIZECODE]) ||
2712             raw_cmd->length <= 0 || current_count_sectors <= 0) {
2713                 DPRINT("fractionary current count b=%lx s=%lx\n",
2714                        raw_cmd->length, current_count_sectors);
2715                 pr_info("addr=%d, length=%ld\n",
2716                         (int)((raw_cmd->kernel_data -
2717                                floppy_track_buffer) >> 9),
2718                         current_count_sectors);
2719                 pr_info("st=%d ast=%d mse=%d msi=%d\n",
2720                         fsector_t, aligned_sector_t, max_sector, max_size);
2721                 pr_info("ssize=%x SIZECODE=%d\n", ssize, raw_cmd->cmd[SIZECODE]);
2722                 pr_info("command=%x SECTOR=%d HEAD=%d, TRACK=%d\n",
2723                         raw_cmd->cmd[COMMAND], raw_cmd->cmd[SECTOR],
2724                         raw_cmd->cmd[HEAD], raw_cmd->cmd[TRACK]);
2725                 pr_info("buffer drive=%d\n", buffer_drive);
2726                 pr_info("buffer track=%d\n", buffer_track);
2727                 pr_info("buffer_min=%d\n", buffer_min);
2728                 pr_info("buffer_max=%d\n", buffer_max);
2729                 return 0;
2730         }
2731
2732         if (raw_cmd->kernel_data < floppy_track_buffer ||
2733             current_count_sectors < 0 ||
2734             raw_cmd->length < 0 ||
2735             raw_cmd->kernel_data + raw_cmd->length >
2736             floppy_track_buffer + (max_buffer_sectors << 10)) {
2737                 DPRINT("buffer overrun in schedule dma\n");
2738                 pr_info("fsector_t=%d buffer_min=%d current_count=%ld\n",
2739                         fsector_t, buffer_min, raw_cmd->length >> 9);
2740                 pr_info("current_count_sectors=%ld\n",
2741                         current_count_sectors);
2742                 if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2743                         pr_info("read\n");
2744                 if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE)
2745                         pr_info("write\n");
2746                 return 0;
2747         }
2748         if (raw_cmd->length == 0) {
2749                 DPRINT("zero dma transfer attempted from make_raw_request\n");
2750                 return 0;
2751         }
2752
2753         virtualdmabug_workaround();
2754         return 2;
2755 }
2756
2757 static int set_next_request(void)
2758 {
2759         current_req = list_first_entry_or_null(&floppy_reqs, struct request,
2760                                                queuelist);
2761         if (current_req) {
2762                 current_req->error_count = 0;
2763                 list_del_init(&current_req->queuelist);
2764         }
2765         return current_req != NULL;
2766 }
2767
2768 /* Starts or continues processing request. Will automatically unlock the
2769  * driver at end of request.
2770  */
2771 static void redo_fd_request(void)
2772 {
2773         int drive;
2774         int tmp;
2775
2776         lastredo = jiffies;
2777         if (current_drive < N_DRIVE)
2778                 floppy_off(current_drive);
2779
2780 do_request:
2781         if (!current_req) {
2782                 int pending;
2783
2784                 spin_lock_irq(&floppy_lock);
2785                 pending = set_next_request();
2786                 spin_unlock_irq(&floppy_lock);
2787                 if (!pending) {
2788                         do_floppy = NULL;
2789                         unlock_fdc();
2790                         return;
2791                 }
2792         }
2793         drive = (long)current_req->rq_disk->private_data;
2794         set_fdc(drive);
2795         reschedule_timeout(current_drive, "redo fd request");
2796
2797         set_floppy(drive);
2798         raw_cmd = &default_raw_cmd;
2799         raw_cmd->flags = 0;
2800         if (start_motor(redo_fd_request))
2801                 return;
2802
2803         disk_change(current_drive);
2804         if (test_bit(current_drive, &fake_change) ||
2805             test_bit(FD_DISK_CHANGED_BIT, &drive_state[current_drive].flags)) {
2806                 DPRINT("disk absent or changed during operation\n");
2807                 request_done(0);
2808                 goto do_request;
2809         }
2810         if (!_floppy) { /* Autodetection */
2811                 if (!probing) {
2812                         drive_state[current_drive].probed_format = 0;
2813                         if (next_valid_format(current_drive)) {
2814                                 DPRINT("no autodetectable formats\n");
2815                                 _floppy = NULL;
2816                                 request_done(0);
2817                                 goto do_request;
2818                         }
2819                 }
2820                 probing = 1;
2821                 _floppy = floppy_type + drive_params[current_drive].autodetect[drive_state[current_drive].probed_format];
2822         } else
2823                 probing = 0;
2824         errors = &(current_req->error_count);
2825         tmp = make_raw_rw_request();
2826         if (tmp < 2) {
2827                 request_done(tmp);
2828                 goto do_request;
2829         }
2830
2831         if (test_bit(FD_NEED_TWADDLE_BIT, &drive_state[current_drive].flags))
2832                 twaddle(current_fdc, current_drive);
2833         schedule_bh(floppy_start);
2834         debugt(__func__, "queue fd request");
2835         return;
2836 }
2837
2838 static const struct cont_t rw_cont = {
2839         .interrupt      = rw_interrupt,
2840         .redo           = redo_fd_request,
2841         .error          = bad_flp_intr,
2842         .done           = request_done
2843 };
2844
2845 /* schedule the request and automatically unlock the driver on completion */
2846 static void process_fd_request(void)
2847 {
2848         cont = &rw_cont;
2849         schedule_bh(redo_fd_request);
2850 }
2851
2852 static blk_status_t floppy_queue_rq(struct blk_mq_hw_ctx *hctx,
2853                                     const struct blk_mq_queue_data *bd)
2854 {
2855         blk_mq_start_request(bd->rq);
2856
2857         if (WARN(max_buffer_sectors == 0,
2858                  "VFS: %s called on non-open device\n", __func__))
2859                 return BLK_STS_IOERR;
2860
2861         if (WARN(atomic_read(&usage_count) == 0,
2862                  "warning: usage count=0, current_req=%p sect=%ld flags=%llx\n",
2863                  current_req, (long)blk_rq_pos(current_req),
2864                  (unsigned long long) current_req->cmd_flags))
2865                 return BLK_STS_IOERR;
2866
2867         if (test_and_set_bit(0, &fdc_busy)) {
2868                 /* fdc busy, this new request will be treated when the
2869                    current one is done */
2870                 is_alive(__func__, "old request running");
2871                 return BLK_STS_RESOURCE;
2872         }
2873
2874         spin_lock_irq(&floppy_lock);
2875         list_add_tail(&bd->rq->queuelist, &floppy_reqs);
2876         spin_unlock_irq(&floppy_lock);
2877
2878         command_status = FD_COMMAND_NONE;
2879         __reschedule_timeout(MAXTIMEOUT, "fd_request");
2880         set_fdc(0);
2881         process_fd_request();
2882         is_alive(__func__, "");
2883         return BLK_STS_OK;
2884 }
2885
2886 static const struct cont_t poll_cont = {
2887         .interrupt      = success_and_wakeup,
2888         .redo           = floppy_ready,
2889         .error          = generic_failure,
2890         .done           = generic_done
2891 };
2892
2893 static int poll_drive(bool interruptible, int flag)
2894 {
2895         /* no auto-sense, just clear dcl */
2896         raw_cmd = &default_raw_cmd;
2897         raw_cmd->flags = flag;
2898         raw_cmd->track = 0;
2899         raw_cmd->cmd_count = 0;
2900         cont = &poll_cont;
2901         debug_dcl(drive_params[current_drive].flags,
2902                   "setting NEWCHANGE in poll_drive\n");
2903         set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags);
2904
2905         return wait_til_done(floppy_ready, interruptible);
2906 }
2907
2908 /*
2909  * User triggered reset
2910  * ====================
2911  */
2912
2913 static void reset_intr(void)
2914 {
2915         pr_info("weird, reset interrupt called\n");
2916 }
2917
2918 static const struct cont_t reset_cont = {
2919         .interrupt      = reset_intr,
2920         .redo           = success_and_wakeup,
2921         .error          = generic_failure,
2922         .done           = generic_done
2923 };
2924
2925 /*
2926  * Resets the FDC connected to drive <drive>.
2927  * Both current_drive and current_fdc are changed to match the new drive.
2928  */
2929 static int user_reset_fdc(int drive, int arg, bool interruptible)
2930 {
2931         int ret;
2932
2933         if (lock_fdc(drive))
2934                 return -EINTR;
2935
2936         if (arg == FD_RESET_ALWAYS)
2937                 fdc_state[current_fdc].reset = 1;
2938         if (fdc_state[current_fdc].reset) {
2939                 /* note: reset_fdc will take care of unlocking the driver
2940                  * on completion.
2941                  */
2942                 cont = &reset_cont;
2943                 ret = wait_til_done(reset_fdc, interruptible);
2944                 if (ret == -EINTR)
2945                         return -EINTR;
2946         }
2947         process_fd_request();
2948         return 0;
2949 }
2950
2951 /*
2952  * Misc Ioctl's and support
2953  * ========================
2954  */
2955 static inline int fd_copyout(void __user *param, const void *address,
2956                              unsigned long size)
2957 {
2958         return copy_to_user(param, address, size) ? -EFAULT : 0;
2959 }
2960
2961 static inline int fd_copyin(void __user *param, void *address,
2962                             unsigned long size)
2963 {
2964         return copy_from_user(address, param, size) ? -EFAULT : 0;
2965 }
2966
2967 static const char *drive_name(int type, int drive)
2968 {
2969         struct floppy_struct *floppy;
2970
2971         if (type)
2972                 floppy = floppy_type + type;
2973         else {
2974                 if (drive_params[drive].native_format)
2975                         floppy = floppy_type + drive_params[drive].native_format;
2976                 else
2977                         return "(null)";
2978         }
2979         if (floppy->name)
2980                 return floppy->name;
2981         else
2982                 return "(null)";
2983 }
2984
2985 /* raw commands */
2986 static void raw_cmd_done(int flag)
2987 {
2988         if (!flag) {
2989                 raw_cmd->flags |= FD_RAW_FAILURE;
2990                 raw_cmd->flags |= FD_RAW_HARDFAILURE;
2991         } else {
2992                 raw_cmd->reply_count = inr;
2993                 if (raw_cmd->reply_count > FD_RAW_REPLY_SIZE)
2994                         raw_cmd->reply_count = 0;
2995                 memcpy(raw_cmd->reply, reply_buffer, raw_cmd->reply_count);
2996
2997                 if (raw_cmd->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
2998                         unsigned long flags;
2999                         flags = claim_dma_lock();
3000                         raw_cmd->length = fd_get_dma_residue();
3001                         release_dma_lock(flags);
3002                 }
3003
3004                 if ((raw_cmd->flags & FD_RAW_SOFTFAILURE) &&
3005                     (!raw_cmd->reply_count || (raw_cmd->reply[0] & 0xc0)))
3006                         raw_cmd->flags |= FD_RAW_FAILURE;
3007
3008                 if (disk_change(current_drive))
3009                         raw_cmd->flags |= FD_RAW_DISK_CHANGE;
3010                 else
3011                         raw_cmd->flags &= ~FD_RAW_DISK_CHANGE;
3012                 if (raw_cmd->flags & FD_RAW_NO_MOTOR_AFTER)
3013                         motor_off_callback(&motor_off_timer[current_drive]);
3014
3015                 if (raw_cmd->next &&
3016                     (!(raw_cmd->flags & FD_RAW_FAILURE) ||
3017                      !(raw_cmd->flags & FD_RAW_STOP_IF_FAILURE)) &&
3018                     ((raw_cmd->flags & FD_RAW_FAILURE) ||
3019                      !(raw_cmd->flags & FD_RAW_STOP_IF_SUCCESS))) {
3020                         raw_cmd = raw_cmd->next;
3021                         return;
3022                 }
3023         }
3024         generic_done(flag);
3025 }
3026
3027 static const struct cont_t raw_cmd_cont = {
3028         .interrupt      = success_and_wakeup,
3029         .redo           = floppy_start,
3030         .error          = generic_failure,
3031         .done           = raw_cmd_done
3032 };
3033
3034 static int raw_cmd_copyout(int cmd, void __user *param,
3035                                   struct floppy_raw_cmd *ptr)
3036 {
3037         int ret;
3038
3039         while (ptr) {
3040                 struct floppy_raw_cmd cmd = *ptr;
3041                 cmd.next = NULL;
3042                 cmd.kernel_data = NULL;
3043                 ret = copy_to_user(param, &cmd, sizeof(cmd));
3044                 if (ret)
3045                         return -EFAULT;
3046                 param += sizeof(struct floppy_raw_cmd);
3047                 if ((ptr->flags & FD_RAW_READ) && ptr->buffer_length) {
3048                         if (ptr->length >= 0 &&
3049                             ptr->length <= ptr->buffer_length) {
3050                                 long length = ptr->buffer_length - ptr->length;
3051                                 ret = fd_copyout(ptr->data, ptr->kernel_data,
3052                                                  length);
3053                                 if (ret)
3054                                         return ret;
3055                         }
3056                 }
3057                 ptr = ptr->next;
3058         }
3059
3060         return 0;
3061 }
3062
3063 static void raw_cmd_free(struct floppy_raw_cmd **ptr)
3064 {
3065         struct floppy_raw_cmd *next;
3066         struct floppy_raw_cmd *this;
3067
3068         this = *ptr;
3069         *ptr = NULL;
3070         while (this) {
3071                 if (this->buffer_length) {
3072                         fd_dma_mem_free((unsigned long)this->kernel_data,
3073                                         this->buffer_length);
3074                         this->buffer_length = 0;
3075                 }
3076                 next = this->next;
3077                 kfree(this);
3078                 this = next;
3079         }
3080 }
3081
3082 static int raw_cmd_copyin(int cmd, void __user *param,
3083                                  struct floppy_raw_cmd **rcmd)
3084 {
3085         struct floppy_raw_cmd *ptr;
3086         int ret;
3087
3088         *rcmd = NULL;
3089
3090 loop:
3091         ptr = kmalloc(sizeof(struct floppy_raw_cmd), GFP_KERNEL);
3092         if (!ptr)
3093                 return -ENOMEM;
3094         *rcmd = ptr;
3095         ret = copy_from_user(ptr, param, sizeof(*ptr));
3096         ptr->next = NULL;
3097         ptr->buffer_length = 0;
3098         ptr->kernel_data = NULL;
3099         if (ret)
3100                 return -EFAULT;
3101         param += sizeof(struct floppy_raw_cmd);
3102         if (ptr->cmd_count > FD_RAW_CMD_FULLSIZE)
3103                 return -EINVAL;
3104
3105         memset(ptr->reply, 0, FD_RAW_REPLY_SIZE);
3106         ptr->resultcode = 0;
3107
3108         if (ptr->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3109                 if (ptr->length <= 0)
3110                         return -EINVAL;
3111                 ptr->kernel_data = (char *)fd_dma_mem_alloc(ptr->length);
3112                 fallback_on_nodma_alloc(&ptr->kernel_data, ptr->length);
3113                 if (!ptr->kernel_data)
3114                         return -ENOMEM;
3115                 ptr->buffer_length = ptr->length;
3116         }
3117         if (ptr->flags & FD_RAW_WRITE) {
3118                 ret = fd_copyin(ptr->data, ptr->kernel_data, ptr->length);
3119                 if (ret)
3120                         return ret;
3121         }
3122
3123         if (ptr->flags & FD_RAW_MORE) {
3124                 rcmd = &(ptr->next);
3125                 ptr->rate &= 0x43;
3126                 goto loop;
3127         }
3128
3129         return 0;
3130 }
3131
3132 static int raw_cmd_ioctl(int cmd, void __user *param)
3133 {
3134         struct floppy_raw_cmd *my_raw_cmd;
3135         int drive;
3136         int ret2;
3137         int ret;
3138
3139         if (fdc_state[current_fdc].rawcmd <= 1)
3140                 fdc_state[current_fdc].rawcmd = 1;
3141         for (drive = 0; drive < N_DRIVE; drive++) {
3142                 if (FDC(drive) != current_fdc)
3143                         continue;
3144                 if (drive == current_drive) {
3145                         if (drive_state[drive].fd_ref > 1) {
3146                                 fdc_state[current_fdc].rawcmd = 2;
3147                                 break;
3148                         }
3149                 } else if (drive_state[drive].fd_ref) {
3150                         fdc_state[current_fdc].rawcmd = 2;
3151                         break;
3152                 }
3153         }
3154
3155         if (fdc_state[current_fdc].reset)
3156                 return -EIO;
3157
3158         ret = raw_cmd_copyin(cmd, param, &my_raw_cmd);
3159         if (ret) {
3160                 raw_cmd_free(&my_raw_cmd);
3161                 return ret;
3162         }
3163
3164         raw_cmd = my_raw_cmd;
3165         cont = &raw_cmd_cont;
3166         ret = wait_til_done(floppy_start, true);
3167         debug_dcl(drive_params[current_drive].flags,
3168                   "calling disk change from raw_cmd ioctl\n");
3169
3170         if (ret != -EINTR && fdc_state[current_fdc].reset)
3171                 ret = -EIO;
3172
3173         drive_state[current_drive].track = NO_TRACK;
3174
3175         ret2 = raw_cmd_copyout(cmd, param, my_raw_cmd);
3176         if (!ret)
3177                 ret = ret2;
3178         raw_cmd_free(&my_raw_cmd);
3179         return ret;
3180 }
3181
3182 static int invalidate_drive(struct block_device *bdev)
3183 {
3184         /* invalidate the buffer track to force a reread */
3185         set_bit((long)bdev->bd_disk->private_data, &fake_change);
3186         process_fd_request();
3187         if (bdev_check_media_change(bdev))
3188                 floppy_revalidate(bdev->bd_disk);
3189         return 0;
3190 }
3191
3192 static int set_geometry(unsigned int cmd, struct floppy_struct *g,
3193                                int drive, int type, struct block_device *bdev)
3194 {
3195         int cnt;
3196
3197         /* sanity checking for parameters. */
3198         if ((int)g->sect <= 0 ||
3199             (int)g->head <= 0 ||
3200             /* check for overflow in max_sector */
3201             (int)(g->sect * g->head) <= 0 ||
3202             /* check for zero in raw_cmd->cmd[F_SECT_PER_TRACK] */
3203             (unsigned char)((g->sect << 2) >> FD_SIZECODE(g)) == 0 ||
3204             g->track <= 0 || g->track > drive_params[drive].tracks >> STRETCH(g) ||
3205             /* check if reserved bits are set */
3206             (g->stretch & ~(FD_STRETCH | FD_SWAPSIDES | FD_SECTBASEMASK)) != 0)
3207                 return -EINVAL;
3208         if (type) {
3209                 if (!capable(CAP_SYS_ADMIN))
3210                         return -EPERM;
3211                 mutex_lock(&open_lock);
3212                 if (lock_fdc(drive)) {
3213                         mutex_unlock(&open_lock);
3214                         return -EINTR;
3215                 }
3216                 floppy_type[type] = *g;
3217                 floppy_type[type].name = "user format";
3218                 for (cnt = type << 2; cnt < (type << 2) + 4; cnt++)
3219                         floppy_sizes[cnt] = floppy_sizes[cnt + 0x80] =
3220                             floppy_type[type].size + 1;
3221                 process_fd_request();
3222                 for (cnt = 0; cnt < N_DRIVE; cnt++) {
3223                         struct block_device *bdev = opened_bdev[cnt];
3224                         if (!bdev || ITYPE(drive_state[cnt].fd_device) != type)
3225                                 continue;
3226                         __invalidate_device(bdev, true);
3227                 }
3228                 mutex_unlock(&open_lock);
3229         } else {
3230                 int oldStretch;
3231
3232                 if (lock_fdc(drive))
3233                         return -EINTR;
3234                 if (cmd != FDDEFPRM) {
3235                         /* notice a disk change immediately, else
3236                          * we lose our settings immediately*/
3237                         if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3238                                 return -EINTR;
3239                 }
3240                 oldStretch = g->stretch;
3241                 user_params[drive] = *g;
3242                 if (buffer_drive == drive)
3243                         SUPBOUND(buffer_max, user_params[drive].sect);
3244                 current_type[drive] = &user_params[drive];
3245                 floppy_sizes[drive] = user_params[drive].size;
3246                 if (cmd == FDDEFPRM)
3247                         drive_state[current_drive].keep_data = -1;
3248                 else
3249                         drive_state[current_drive].keep_data = 1;
3250                 /* invalidation. Invalidate only when needed, i.e.
3251                  * when there are already sectors in the buffer cache
3252                  * whose number will change. This is useful, because
3253                  * mtools often changes the geometry of the disk after
3254                  * looking at the boot block */
3255                 if (drive_state[current_drive].maxblock > user_params[drive].sect ||
3256                     drive_state[current_drive].maxtrack ||
3257                     ((user_params[drive].sect ^ oldStretch) &
3258                      (FD_SWAPSIDES | FD_SECTBASEMASK)))
3259                         invalidate_drive(bdev);
3260                 else
3261                         process_fd_request();
3262         }
3263         return 0;
3264 }
3265
3266 /* handle obsolete ioctl's */
3267 static unsigned int ioctl_table[] = {
3268         FDCLRPRM,
3269         FDSETPRM,
3270         FDDEFPRM,
3271         FDGETPRM,
3272         FDMSGON,
3273         FDMSGOFF,
3274         FDFMTBEG,
3275         FDFMTTRK,
3276         FDFMTEND,
3277         FDSETEMSGTRESH,
3278         FDFLUSH,
3279         FDSETMAXERRS,
3280         FDGETMAXERRS,
3281         FDGETDRVTYP,
3282         FDSETDRVPRM,
3283         FDGETDRVPRM,
3284         FDGETDRVSTAT,
3285         FDPOLLDRVSTAT,
3286         FDRESET,
3287         FDGETFDCSTAT,
3288         FDWERRORCLR,
3289         FDWERRORGET,
3290         FDRAWCMD,
3291         FDEJECT,
3292         FDTWADDLE
3293 };
3294
3295 static int normalize_ioctl(unsigned int *cmd, int *size)
3296 {
3297         int i;
3298
3299         for (i = 0; i < ARRAY_SIZE(ioctl_table); i++) {
3300                 if ((*cmd & 0xffff) == (ioctl_table[i] & 0xffff)) {
3301                         *size = _IOC_SIZE(*cmd);
3302                         *cmd = ioctl_table[i];
3303                         if (*size > _IOC_SIZE(*cmd)) {
3304                                 pr_info("ioctl not yet supported\n");
3305                                 return -EFAULT;
3306                         }
3307                         return 0;
3308                 }
3309         }
3310         return -EINVAL;
3311 }
3312
3313 static int get_floppy_geometry(int drive, int type, struct floppy_struct **g)
3314 {
3315         if (type)
3316                 *g = &floppy_type[type];
3317         else {
3318                 if (lock_fdc(drive))
3319                         return -EINTR;
3320                 if (poll_drive(false, 0) == -EINTR)
3321                         return -EINTR;
3322                 process_fd_request();
3323                 *g = current_type[drive];
3324         }
3325         if (!*g)
3326                 return -ENODEV;
3327         return 0;
3328 }
3329
3330 static int fd_getgeo(struct block_device *bdev, struct hd_geometry *geo)
3331 {
3332         int drive = (long)bdev->bd_disk->private_data;
3333         int type = ITYPE(drive_state[drive].fd_device);
3334         struct floppy_struct *g;
3335         int ret;
3336
3337         ret = get_floppy_geometry(drive, type, &g);
3338         if (ret)
3339                 return ret;
3340
3341         geo->heads = g->head;
3342         geo->sectors = g->sect;
3343         geo->cylinders = g->track;
3344         return 0;
3345 }
3346
3347 static bool valid_floppy_drive_params(const short autodetect[FD_AUTODETECT_SIZE],
3348                 int native_format)
3349 {
3350         size_t floppy_type_size = ARRAY_SIZE(floppy_type);
3351         size_t i = 0;
3352
3353         for (i = 0; i < FD_AUTODETECT_SIZE; ++i) {
3354                 if (autodetect[i] < 0 ||
3355                     autodetect[i] >= floppy_type_size)
3356                         return false;
3357         }
3358
3359         if (native_format < 0 || native_format >= floppy_type_size)
3360                 return false;
3361
3362         return true;
3363 }
3364
3365 static int fd_locked_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3366                     unsigned long param)
3367 {
3368         int drive = (long)bdev->bd_disk->private_data;
3369         int type = ITYPE(drive_state[drive].fd_device);
3370         int i;
3371         int ret;
3372         int size;
3373         union inparam {
3374                 struct floppy_struct g; /* geometry */
3375                 struct format_descr f;
3376                 struct floppy_max_errors max_errors;
3377                 struct floppy_drive_params dp;
3378         } inparam;              /* parameters coming from user space */
3379         const void *outparam;   /* parameters passed back to user space */
3380
3381         /* convert compatibility eject ioctls into floppy eject ioctl.
3382          * We do this in order to provide a means to eject floppy disks before
3383          * installing the new fdutils package */
3384         if (cmd == CDROMEJECT ||        /* CD-ROM eject */
3385             cmd == 0x6470) {            /* SunOS floppy eject */
3386                 DPRINT("obsolete eject ioctl\n");
3387                 DPRINT("please use floppycontrol --eject\n");
3388                 cmd = FDEJECT;
3389         }
3390
3391         if (!((cmd & 0xff00) == 0x0200))
3392                 return -EINVAL;
3393
3394         /* convert the old style command into a new style command */
3395         ret = normalize_ioctl(&cmd, &size);
3396         if (ret)
3397                 return ret;
3398
3399         /* permission checks */
3400         if (((cmd & 0x40) && !(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL))) ||
3401             ((cmd & 0x80) && !capable(CAP_SYS_ADMIN)))
3402                 return -EPERM;
3403
3404         if (WARN_ON(size < 0 || size > sizeof(inparam)))
3405                 return -EINVAL;
3406
3407         /* copyin */
3408         memset(&inparam, 0, sizeof(inparam));
3409         if (_IOC_DIR(cmd) & _IOC_WRITE) {
3410                 ret = fd_copyin((void __user *)param, &inparam, size);
3411                 if (ret)
3412                         return ret;
3413         }
3414
3415         switch (cmd) {
3416         case FDEJECT:
3417                 if (drive_state[drive].fd_ref != 1)
3418                         /* somebody else has this drive open */
3419                         return -EBUSY;
3420                 if (lock_fdc(drive))
3421                         return -EINTR;
3422
3423                 /* do the actual eject. Fails on
3424                  * non-Sparc architectures */
3425                 ret = fd_eject(UNIT(drive));
3426
3427                 set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
3428                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
3429                 process_fd_request();
3430                 return ret;
3431         case FDCLRPRM:
3432                 if (lock_fdc(drive))
3433                         return -EINTR;
3434                 current_type[drive] = NULL;
3435                 floppy_sizes[drive] = MAX_DISK_SIZE << 1;
3436                 drive_state[drive].keep_data = 0;
3437                 return invalidate_drive(bdev);
3438         case FDSETPRM:
3439         case FDDEFPRM:
3440                 return set_geometry(cmd, &inparam.g, drive, type, bdev);
3441         case FDGETPRM:
3442                 ret = get_floppy_geometry(drive, type,
3443                                           (struct floppy_struct **)&outparam);
3444                 if (ret)
3445                         return ret;
3446                 memcpy(&inparam.g, outparam,
3447                                 offsetof(struct floppy_struct, name));
3448                 outparam = &inparam.g;
3449                 break;
3450         case FDMSGON:
3451                 drive_params[drive].flags |= FTD_MSG;
3452                 return 0;
3453         case FDMSGOFF:
3454                 drive_params[drive].flags &= ~FTD_MSG;
3455                 return 0;
3456         case FDFMTBEG:
3457                 if (lock_fdc(drive))
3458                         return -EINTR;
3459                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3460                         return -EINTR;
3461                 ret = drive_state[drive].flags;
3462                 process_fd_request();
3463                 if (ret & FD_VERIFY)
3464                         return -ENODEV;
3465                 if (!(ret & FD_DISK_WRITABLE))
3466                         return -EROFS;
3467                 return 0;
3468         case FDFMTTRK:
3469                 if (drive_state[drive].fd_ref != 1)
3470                         return -EBUSY;
3471                 return do_format(drive, &inparam.f);
3472         case FDFMTEND:
3473         case FDFLUSH:
3474                 if (lock_fdc(drive))
3475                         return -EINTR;
3476                 return invalidate_drive(bdev);
3477         case FDSETEMSGTRESH:
3478                 drive_params[drive].max_errors.reporting = (unsigned short)(param & 0x0f);
3479                 return 0;
3480         case FDGETMAXERRS:
3481                 outparam = &drive_params[drive].max_errors;
3482                 break;
3483         case FDSETMAXERRS:
3484                 drive_params[drive].max_errors = inparam.max_errors;
3485                 break;
3486         case FDGETDRVTYP:
3487                 outparam = drive_name(type, drive);
3488                 SUPBOUND(size, strlen((const char *)outparam) + 1);
3489                 break;
3490         case FDSETDRVPRM:
3491                 if (!valid_floppy_drive_params(inparam.dp.autodetect,
3492                                 inparam.dp.native_format))
3493                         return -EINVAL;
3494                 drive_params[drive] = inparam.dp;
3495                 break;
3496         case FDGETDRVPRM:
3497                 outparam = &drive_params[drive];
3498                 break;
3499         case FDPOLLDRVSTAT:
3500                 if (lock_fdc(drive))
3501                         return -EINTR;
3502                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3503                         return -EINTR;
3504                 process_fd_request();
3505                 fallthrough;
3506         case FDGETDRVSTAT:
3507                 outparam = &drive_state[drive];
3508                 break;
3509         case FDRESET:
3510                 return user_reset_fdc(drive, (int)param, true);
3511         case FDGETFDCSTAT:
3512                 outparam = &fdc_state[FDC(drive)];
3513                 break;
3514         case FDWERRORCLR:
3515                 memset(&write_errors[drive], 0, sizeof(write_errors[drive]));
3516                 return 0;
3517         case FDWERRORGET:
3518                 outparam = &write_errors[drive];
3519                 break;
3520         case FDRAWCMD:
3521                 if (type)
3522                         return -EINVAL;
3523                 if (lock_fdc(drive))
3524                         return -EINTR;
3525                 set_floppy(drive);
3526                 i = raw_cmd_ioctl(cmd, (void __user *)param);
3527                 if (i == -EINTR)
3528                         return -EINTR;
3529                 process_fd_request();
3530                 return i;
3531         case FDTWADDLE:
3532                 if (lock_fdc(drive))
3533                         return -EINTR;
3534                 twaddle(current_fdc, current_drive);
3535                 process_fd_request();
3536                 return 0;
3537         default:
3538                 return -EINVAL;
3539         }
3540
3541         if (_IOC_DIR(cmd) & _IOC_READ)
3542                 return fd_copyout((void __user *)param, outparam, size);
3543
3544         return 0;
3545 }
3546
3547 static int fd_ioctl(struct block_device *bdev, fmode_t mode,
3548                              unsigned int cmd, unsigned long param)
3549 {
3550         int ret;
3551
3552         mutex_lock(&floppy_mutex);
3553         ret = fd_locked_ioctl(bdev, mode, cmd, param);
3554         mutex_unlock(&floppy_mutex);
3555
3556         return ret;
3557 }
3558
3559 #ifdef CONFIG_COMPAT
3560
3561 struct compat_floppy_drive_params {
3562         char            cmos;
3563         compat_ulong_t  max_dtr;
3564         compat_ulong_t  hlt;
3565         compat_ulong_t  hut;
3566         compat_ulong_t  srt;
3567         compat_ulong_t  spinup;
3568         compat_ulong_t  spindown;
3569         unsigned char   spindown_offset;
3570         unsigned char   select_delay;
3571         unsigned char   rps;
3572         unsigned char   tracks;
3573         compat_ulong_t  timeout;
3574         unsigned char   interleave_sect;
3575         struct floppy_max_errors max_errors;
3576         char            flags;
3577         char            read_track;
3578         short           autodetect[FD_AUTODETECT_SIZE];
3579         compat_int_t    checkfreq;
3580         compat_int_t    native_format;
3581 };
3582
3583 struct compat_floppy_drive_struct {
3584         signed char     flags;
3585         compat_ulong_t  spinup_date;
3586         compat_ulong_t  select_date;
3587         compat_ulong_t  first_read_date;
3588         short           probed_format;
3589         short           track;
3590         short           maxblock;
3591         short           maxtrack;
3592         compat_int_t    generation;
3593         compat_int_t    keep_data;
3594         compat_int_t    fd_ref;
3595         compat_int_t    fd_device;
3596         compat_int_t    last_checked;
3597         compat_caddr_t dmabuf;
3598         compat_int_t    bufblocks;
3599 };
3600
3601 struct compat_floppy_fdc_state {
3602         compat_int_t    spec1;
3603         compat_int_t    spec2;
3604         compat_int_t    dtr;
3605         unsigned char   version;
3606         unsigned char   dor;
3607         compat_ulong_t  address;
3608         unsigned int    rawcmd:2;
3609         unsigned int    reset:1;
3610         unsigned int    need_configure:1;
3611         unsigned int    perp_mode:2;
3612         unsigned int    has_fifo:1;
3613         unsigned int    driver_version;
3614         unsigned char   track[4];
3615 };
3616
3617 struct compat_floppy_write_errors {
3618         unsigned int    write_errors;
3619         compat_ulong_t  first_error_sector;
3620         compat_int_t    first_error_generation;
3621         compat_ulong_t  last_error_sector;
3622         compat_int_t    last_error_generation;
3623         compat_uint_t   badness;
3624 };
3625
3626 #define FDSETPRM32 _IOW(2, 0x42, struct compat_floppy_struct)
3627 #define FDDEFPRM32 _IOW(2, 0x43, struct compat_floppy_struct)
3628 #define FDSETDRVPRM32 _IOW(2, 0x90, struct compat_floppy_drive_params)
3629 #define FDGETDRVPRM32 _IOR(2, 0x11, struct compat_floppy_drive_params)
3630 #define FDGETDRVSTAT32 _IOR(2, 0x12, struct compat_floppy_drive_struct)
3631 #define FDPOLLDRVSTAT32 _IOR(2, 0x13, struct compat_floppy_drive_struct)
3632 #define FDGETFDCSTAT32 _IOR(2, 0x15, struct compat_floppy_fdc_state)
3633 #define FDWERRORGET32  _IOR(2, 0x17, struct compat_floppy_write_errors)
3634
3635 static int compat_set_geometry(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3636                     struct compat_floppy_struct __user *arg)
3637 {
3638         struct floppy_struct v;
3639         int drive, type;
3640         int err;
3641
3642         BUILD_BUG_ON(offsetof(struct floppy_struct, name) !=
3643                      offsetof(struct compat_floppy_struct, name));
3644
3645         if (!(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL)))
3646                 return -EPERM;
3647
3648         memset(&v, 0, sizeof(struct floppy_struct));
3649         if (copy_from_user(&v, arg, offsetof(struct floppy_struct, name)))
3650                 return -EFAULT;
3651
3652         mutex_lock(&floppy_mutex);
3653         drive = (long)bdev->bd_disk->private_data;
3654         type = ITYPE(drive_state[drive].fd_device);
3655         err = set_geometry(cmd == FDSETPRM32 ? FDSETPRM : FDDEFPRM,
3656                         &v, drive, type, bdev);
3657         mutex_unlock(&floppy_mutex);
3658         return err;
3659 }
3660
3661 static int compat_get_prm(int drive,
3662                           struct compat_floppy_struct __user *arg)
3663 {
3664         struct compat_floppy_struct v;
3665         struct floppy_struct *p;
3666         int err;
3667
3668         memset(&v, 0, sizeof(v));
3669         mutex_lock(&floppy_mutex);
3670         err = get_floppy_geometry(drive, ITYPE(drive_state[drive].fd_device),
3671                                   &p);
3672         if (err) {
3673                 mutex_unlock(&floppy_mutex);
3674                 return err;
3675         }
3676         memcpy(&v, p, offsetof(struct floppy_struct, name));
3677         mutex_unlock(&floppy_mutex);
3678         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_struct)))
3679                 return -EFAULT;
3680         return 0;
3681 }
3682
3683 static int compat_setdrvprm(int drive,
3684                             struct compat_floppy_drive_params __user *arg)
3685 {
3686         struct compat_floppy_drive_params v;
3687
3688         if (!capable(CAP_SYS_ADMIN))
3689                 return -EPERM;
3690         if (copy_from_user(&v, arg, sizeof(struct compat_floppy_drive_params)))
3691                 return -EFAULT;
3692         if (!valid_floppy_drive_params(v.autodetect, v.native_format))
3693                 return -EINVAL;
3694         mutex_lock(&floppy_mutex);
3695         drive_params[drive].cmos = v.cmos;
3696         drive_params[drive].max_dtr = v.max_dtr;
3697         drive_params[drive].hlt = v.hlt;
3698         drive_params[drive].hut = v.hut;
3699         drive_params[drive].srt = v.srt;
3700         drive_params[drive].spinup = v.spinup;
3701         drive_params[drive].spindown = v.spindown;
3702         drive_params[drive].spindown_offset = v.spindown_offset;
3703         drive_params[drive].select_delay = v.select_delay;
3704         drive_params[drive].rps = v.rps;
3705         drive_params[drive].tracks = v.tracks;
3706         drive_params[drive].timeout = v.timeout;
3707         drive_params[drive].interleave_sect = v.interleave_sect;
3708         drive_params[drive].max_errors = v.max_errors;
3709         drive_params[drive].flags = v.flags;
3710         drive_params[drive].read_track = v.read_track;
3711         memcpy(drive_params[drive].autodetect, v.autodetect,
3712                sizeof(v.autodetect));
3713         drive_params[drive].checkfreq = v.checkfreq;
3714         drive_params[drive].native_format = v.native_format;
3715         mutex_unlock(&floppy_mutex);
3716         return 0;
3717 }
3718
3719 static int compat_getdrvprm(int drive,
3720                             struct compat_floppy_drive_params __user *arg)
3721 {
3722         struct compat_floppy_drive_params v;
3723
3724         memset(&v, 0, sizeof(struct compat_floppy_drive_params));
3725         mutex_lock(&floppy_mutex);
3726         v.cmos = drive_params[drive].cmos;
3727         v.max_dtr = drive_params[drive].max_dtr;
3728         v.hlt = drive_params[drive].hlt;
3729         v.hut = drive_params[drive].hut;
3730         v.srt = drive_params[drive].srt;
3731         v.spinup = drive_params[drive].spinup;
3732         v.spindown = drive_params[drive].spindown;
3733         v.spindown_offset = drive_params[drive].spindown_offset;
3734         v.select_delay = drive_params[drive].select_delay;
3735         v.rps = drive_params[drive].rps;
3736         v.tracks = drive_params[drive].tracks;
3737         v.timeout = drive_params[drive].timeout;
3738         v.interleave_sect = drive_params[drive].interleave_sect;
3739         v.max_errors = drive_params[drive].max_errors;
3740         v.flags = drive_params[drive].flags;
3741         v.read_track = drive_params[drive].read_track;
3742         memcpy(v.autodetect, drive_params[drive].autodetect,
3743                sizeof(v.autodetect));
3744         v.checkfreq = drive_params[drive].checkfreq;
3745         v.native_format = drive_params[drive].native_format;
3746         mutex_unlock(&floppy_mutex);
3747
3748         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_drive_params)))
3749                 return -EFAULT;
3750         return 0;
3751 }
3752
3753 static int compat_getdrvstat(int drive, bool poll,
3754                             struct compat_floppy_drive_struct __user *arg)
3755 {
3756         struct compat_floppy_drive_struct v;
3757
3758         memset(&v, 0, sizeof(struct compat_floppy_drive_struct));
3759         mutex_lock(&floppy_mutex);
3760
3761         if (poll) {
3762                 if (lock_fdc(drive))
3763                         goto Eintr;
3764                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3765                         goto Eintr;
3766                 process_fd_request();
3767         }
3768         v.spinup_date = drive_state[drive].spinup_date;
3769         v.select_date = drive_state[drive].select_date;
3770         v.first_read_date = drive_state[drive].first_read_date;
3771         v.probed_format = drive_state[drive].probed_format;
3772         v.track = drive_state[drive].track;
3773         v.maxblock = drive_state[drive].maxblock;
3774         v.maxtrack = drive_state[drive].maxtrack;
3775         v.generation = drive_state[drive].generation;
3776         v.keep_data = drive_state[drive].keep_data;
3777         v.fd_ref = drive_state[drive].fd_ref;
3778         v.fd_device = drive_state[drive].fd_device;
3779         v.last_checked = drive_state[drive].last_checked;
3780         v.dmabuf = (uintptr_t) drive_state[drive].dmabuf;
3781         v.bufblocks = drive_state[drive].bufblocks;
3782         mutex_unlock(&floppy_mutex);
3783
3784         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_drive_struct)))
3785                 return -EFAULT;
3786         return 0;
3787 Eintr:
3788         mutex_unlock(&floppy_mutex);
3789         return -EINTR;
3790 }
3791
3792 static int compat_getfdcstat(int drive,
3793                             struct compat_floppy_fdc_state __user *arg)
3794 {
3795         struct compat_floppy_fdc_state v32;
3796         struct floppy_fdc_state v;
3797
3798         mutex_lock(&floppy_mutex);
3799         v = fdc_state[FDC(drive)];
3800         mutex_unlock(&floppy_mutex);
3801
3802         memset(&v32, 0, sizeof(struct compat_floppy_fdc_state));
3803         v32.spec1 = v.spec1;
3804         v32.spec2 = v.spec2;
3805         v32.dtr = v.dtr;
3806         v32.version = v.version;
3807         v32.dor = v.dor;
3808         v32.address = v.address;
3809         v32.rawcmd = v.rawcmd;
3810         v32.reset = v.reset;
3811         v32.need_configure = v.need_configure;
3812         v32.perp_mode = v.perp_mode;
3813         v32.has_fifo = v.has_fifo;
3814         v32.driver_version = v.driver_version;
3815         memcpy(v32.track, v.track, 4);
3816         if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_fdc_state)))
3817                 return -EFAULT;
3818         return 0;
3819 }
3820
3821 static int compat_werrorget(int drive,
3822                             struct compat_floppy_write_errors __user *arg)
3823 {
3824         struct compat_floppy_write_errors v32;
3825         struct floppy_write_errors v;
3826
3827         memset(&v32, 0, sizeof(struct compat_floppy_write_errors));
3828         mutex_lock(&floppy_mutex);
3829         v = write_errors[drive];
3830         mutex_unlock(&floppy_mutex);
3831         v32.write_errors = v.write_errors;
3832         v32.first_error_sector = v.first_error_sector;
3833         v32.first_error_generation = v.first_error_generation;
3834         v32.last_error_sector = v.last_error_sector;
3835         v32.last_error_generation = v.last_error_generation;
3836         v32.badness = v.badness;
3837         if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_write_errors)))
3838                 return -EFAULT;
3839         return 0;
3840 }
3841
3842 static int fd_compat_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3843                     unsigned long param)
3844 {
3845         int drive = (long)bdev->bd_disk->private_data;
3846         switch (cmd) {
3847         case CDROMEJECT: /* CD-ROM eject */
3848         case 0x6470:     /* SunOS floppy eject */
3849
3850         case FDMSGON:
3851         case FDMSGOFF:
3852         case FDSETEMSGTRESH:
3853         case FDFLUSH:
3854         case FDWERRORCLR:
3855         case FDEJECT:
3856         case FDCLRPRM:
3857         case FDFMTBEG:
3858         case FDRESET:
3859         case FDTWADDLE:
3860                 return fd_ioctl(bdev, mode, cmd, param);
3861         case FDSETMAXERRS:
3862         case FDGETMAXERRS:
3863         case FDGETDRVTYP:
3864         case FDFMTEND:
3865         case FDFMTTRK:
3866         case FDRAWCMD:
3867                 return fd_ioctl(bdev, mode, cmd,
3868                                 (unsigned long)compat_ptr(param));
3869         case FDSETPRM32:
3870         case FDDEFPRM32:
3871                 return compat_set_geometry(bdev, mode, cmd, compat_ptr(param));
3872         case FDGETPRM32:
3873                 return compat_get_prm(drive, compat_ptr(param));
3874         case FDSETDRVPRM32:
3875                 return compat_setdrvprm(drive, compat_ptr(param));
3876         case FDGETDRVPRM32:
3877                 return compat_getdrvprm(drive, compat_ptr(param));
3878         case FDPOLLDRVSTAT32:
3879                 return compat_getdrvstat(drive, true, compat_ptr(param));
3880         case FDGETDRVSTAT32:
3881                 return compat_getdrvstat(drive, false, compat_ptr(param));
3882         case FDGETFDCSTAT32:
3883                 return compat_getfdcstat(drive, compat_ptr(param));
3884         case FDWERRORGET32:
3885                 return compat_werrorget(drive, compat_ptr(param));
3886         }
3887         return -EINVAL;
3888 }
3889 #endif
3890
3891 static void __init config_types(void)
3892 {
3893         bool has_drive = false;
3894         int drive;
3895
3896         /* read drive info out of physical CMOS */
3897         drive = 0;
3898         if (!drive_params[drive].cmos)
3899                 drive_params[drive].cmos = FLOPPY0_TYPE;
3900         drive = 1;
3901         if (!drive_params[drive].cmos)
3902                 drive_params[drive].cmos = FLOPPY1_TYPE;
3903
3904         /* FIXME: additional physical CMOS drive detection should go here */
3905
3906         for (drive = 0; drive < N_DRIVE; drive++) {
3907                 unsigned int type = drive_params[drive].cmos;
3908                 struct floppy_drive_params *params;
3909                 const char *name = NULL;
3910                 char temparea[32];
3911
3912                 if (type < ARRAY_SIZE(default_drive_params)) {
3913                         params = &default_drive_params[type].params;
3914                         if (type) {
3915                                 name = default_drive_params[type].name;
3916                                 allowed_drive_mask |= 1 << drive;
3917                         } else
3918                                 allowed_drive_mask &= ~(1 << drive);
3919                 } else {
3920                         params = &default_drive_params[0].params;
3921                         snprintf(temparea, sizeof(temparea),
3922                                  "unknown type %d (usb?)", type);
3923                         name = temparea;
3924                 }
3925                 if (name) {
3926                         const char *prepend;
3927                         if (!has_drive) {
3928                                 prepend = "";
3929                                 has_drive = true;
3930                                 pr_info("Floppy drive(s):");
3931                         } else {
3932                                 prepend = ",";
3933                         }
3934
3935                         pr_cont("%s fd%d is %s", prepend, drive, name);
3936                 }
3937                 drive_params[drive] = *params;
3938         }
3939
3940         if (has_drive)
3941                 pr_cont("\n");
3942 }
3943
3944 static void floppy_release(struct gendisk *disk, fmode_t mode)
3945 {
3946         int drive = (long)disk->private_data;
3947
3948         mutex_lock(&floppy_mutex);
3949         mutex_lock(&open_lock);
3950         if (!drive_state[drive].fd_ref--) {
3951                 DPRINT("floppy_release with fd_ref == 0");
3952                 drive_state[drive].fd_ref = 0;
3953         }
3954         if (!drive_state[drive].fd_ref)
3955                 opened_bdev[drive] = NULL;
3956         mutex_unlock(&open_lock);
3957         mutex_unlock(&floppy_mutex);
3958 }
3959
3960 /*
3961  * floppy_open check for aliasing (/dev/fd0 can be the same as
3962  * /dev/PS0 etc), and disallows simultaneous access to the same
3963  * drive with different device numbers.
3964  */
3965 static int floppy_open(struct block_device *bdev, fmode_t mode)
3966 {
3967         int drive = (long)bdev->bd_disk->private_data;
3968         int old_dev, new_dev;
3969         int try;
3970         int res = -EBUSY;
3971         char *tmp;
3972
3973         mutex_lock(&floppy_mutex);
3974         mutex_lock(&open_lock);
3975         old_dev = drive_state[drive].fd_device;
3976         if (opened_bdev[drive] && opened_bdev[drive] != bdev)
3977                 goto out2;
3978
3979         if (!drive_state[drive].fd_ref && (drive_params[drive].flags & FD_BROKEN_DCL)) {
3980                 set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
3981                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
3982         }
3983
3984         drive_state[drive].fd_ref++;
3985
3986         opened_bdev[drive] = bdev;
3987
3988         res = -ENXIO;
3989
3990         if (!floppy_track_buffer) {
3991                 /* if opening an ED drive, reserve a big buffer,
3992                  * else reserve a small one */
3993                 if ((drive_params[drive].cmos == 6) || (drive_params[drive].cmos == 5))
3994                         try = 64;       /* Only 48 actually useful */
3995                 else
3996                         try = 32;       /* Only 24 actually useful */
3997
3998                 tmp = (char *)fd_dma_mem_alloc(1024 * try);
3999                 if (!tmp && !floppy_track_buffer) {
4000                         try >>= 1;      /* buffer only one side */
4001                         INFBOUND(try, 16);
4002                         tmp = (char *)fd_dma_mem_alloc(1024 * try);
4003                 }
4004                 if (!tmp && !floppy_track_buffer)
4005                         fallback_on_nodma_alloc(&tmp, 2048 * try);
4006                 if (!tmp && !floppy_track_buffer) {
4007                         DPRINT("Unable to allocate DMA memory\n");
4008                         goto out;
4009                 }
4010                 if (floppy_track_buffer) {
4011                         if (tmp)
4012                                 fd_dma_mem_free((unsigned long)tmp, try * 1024);
4013                 } else {
4014                         buffer_min = buffer_max = -1;
4015                         floppy_track_buffer = tmp;
4016                         max_buffer_sectors = try;
4017                 }
4018         }
4019
4020         new_dev = MINOR(bdev->bd_dev);
4021         drive_state[drive].fd_device = new_dev;
4022         set_capacity(disks[drive][ITYPE(new_dev)], floppy_sizes[new_dev]);
4023         if (old_dev != -1 && old_dev != new_dev) {
4024                 if (buffer_drive == drive)
4025                         buffer_track = -1;
4026         }
4027
4028         if (fdc_state[FDC(drive)].rawcmd == 1)
4029                 fdc_state[FDC(drive)].rawcmd = 2;
4030
4031         if (mode & (FMODE_READ|FMODE_WRITE)) {
4032                 drive_state[drive].last_checked = 0;
4033                 clear_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags);
4034                 if (bdev_check_media_change(bdev))
4035                         floppy_revalidate(bdev->bd_disk);
4036                 if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags))
4037                         goto out;
4038                 if (test_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags))
4039                         goto out;
4040         }
4041
4042         res = -EROFS;
4043
4044         if ((mode & FMODE_WRITE) &&
4045                         !test_bit(FD_DISK_WRITABLE_BIT, &drive_state[drive].flags))
4046                 goto out;
4047
4048         mutex_unlock(&open_lock);
4049         mutex_unlock(&floppy_mutex);
4050         return 0;
4051 out:
4052         drive_state[drive].fd_ref--;
4053
4054         if (!drive_state[drive].fd_ref)
4055                 opened_bdev[drive] = NULL;
4056 out2:
4057         mutex_unlock(&open_lock);
4058         mutex_unlock(&floppy_mutex);
4059         return res;
4060 }
4061
4062 /*
4063  * Check if the disk has been changed or if a change has been faked.
4064  */
4065 static unsigned int floppy_check_events(struct gendisk *disk,
4066                                         unsigned int clearing)
4067 {
4068         int drive = (long)disk->private_data;
4069
4070         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4071             test_bit(FD_VERIFY_BIT, &drive_state[drive].flags))
4072                 return DISK_EVENT_MEDIA_CHANGE;
4073
4074         if (time_after(jiffies, drive_state[drive].last_checked + drive_params[drive].checkfreq)) {
4075                 if (lock_fdc(drive))
4076                         return 0;
4077                 poll_drive(false, 0);
4078                 process_fd_request();
4079         }
4080
4081         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4082             test_bit(FD_VERIFY_BIT, &drive_state[drive].flags) ||
4083             test_bit(drive, &fake_change) ||
4084             drive_no_geom(drive))
4085                 return DISK_EVENT_MEDIA_CHANGE;
4086         return 0;
4087 }
4088
4089 /*
4090  * This implements "read block 0" for floppy_revalidate().
4091  * Needed for format autodetection, checking whether there is
4092  * a disk in the drive, and whether that disk is writable.
4093  */
4094
4095 struct rb0_cbdata {
4096         int drive;
4097         struct completion complete;
4098 };
4099
4100 static void floppy_rb0_cb(struct bio *bio)
4101 {
4102         struct rb0_cbdata *cbdata = (struct rb0_cbdata *)bio->bi_private;
4103         int drive = cbdata->drive;
4104
4105         if (bio->bi_status) {
4106                 pr_info("floppy: error %d while reading block 0\n",
4107                         bio->bi_status);
4108                 set_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags);
4109         }
4110         complete(&cbdata->complete);
4111 }
4112
4113 static int __floppy_read_block_0(struct block_device *bdev, int drive)
4114 {
4115         struct bio bio;
4116         struct bio_vec bio_vec;
4117         struct page *page;
4118         struct rb0_cbdata cbdata;
4119
4120         page = alloc_page(GFP_NOIO);
4121         if (!page) {
4122                 process_fd_request();
4123                 return -ENOMEM;
4124         }
4125
4126         cbdata.drive = drive;
4127
4128         bio_init(&bio, &bio_vec, 1);
4129         bio_set_dev(&bio, bdev);
4130         bio_add_page(&bio, page, block_size(bdev), 0);
4131
4132         bio.bi_iter.bi_sector = 0;
4133         bio.bi_flags |= (1 << BIO_QUIET);
4134         bio.bi_private = &cbdata;
4135         bio.bi_end_io = floppy_rb0_cb;
4136         bio_set_op_attrs(&bio, REQ_OP_READ, 0);
4137
4138         init_completion(&cbdata.complete);
4139
4140         submit_bio(&bio);
4141         process_fd_request();
4142
4143         wait_for_completion(&cbdata.complete);
4144
4145         __free_page(page);
4146
4147         return 0;
4148 }
4149
4150 /* revalidate the floppy disk, i.e. trigger format autodetection by reading
4151  * the bootblock (block 0). "Autodetection" is also needed to check whether
4152  * there is a disk in the drive at all... Thus we also do it for fixed
4153  * geometry formats */
4154 static int floppy_revalidate(struct gendisk *disk)
4155 {
4156         int drive = (long)disk->private_data;
4157         int cf;
4158         int res = 0;
4159
4160         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4161             test_bit(FD_VERIFY_BIT, &drive_state[drive].flags) ||
4162             test_bit(drive, &fake_change) ||
4163             drive_no_geom(drive)) {
4164                 if (WARN(atomic_read(&usage_count) == 0,
4165                          "VFS: revalidate called on non-open device.\n"))
4166                         return -EFAULT;
4167
4168                 res = lock_fdc(drive);
4169                 if (res)
4170                         return res;
4171                 cf = (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4172                       test_bit(FD_VERIFY_BIT, &drive_state[drive].flags));
4173                 if (!(cf || test_bit(drive, &fake_change) || drive_no_geom(drive))) {
4174                         process_fd_request();   /*already done by another thread */
4175                         return 0;
4176                 }
4177                 drive_state[drive].maxblock = 0;
4178                 drive_state[drive].maxtrack = 0;
4179                 if (buffer_drive == drive)
4180                         buffer_track = -1;
4181                 clear_bit(drive, &fake_change);
4182                 clear_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4183                 if (cf)
4184                         drive_state[drive].generation++;
4185                 if (drive_no_geom(drive)) {
4186                         /* auto-sensing */
4187                         res = __floppy_read_block_0(opened_bdev[drive], drive);
4188                 } else {
4189                         if (cf)
4190                                 poll_drive(false, FD_RAW_NEED_DISK);
4191                         process_fd_request();
4192                 }
4193         }
4194         set_capacity(disk, floppy_sizes[drive_state[drive].fd_device]);
4195         return res;
4196 }
4197
4198 static const struct block_device_operations floppy_fops = {
4199         .owner                  = THIS_MODULE,
4200         .open                   = floppy_open,
4201         .release                = floppy_release,
4202         .ioctl                  = fd_ioctl,
4203         .getgeo                 = fd_getgeo,
4204         .check_events           = floppy_check_events,
4205 #ifdef CONFIG_COMPAT
4206         .compat_ioctl           = fd_compat_ioctl,
4207 #endif
4208 };
4209
4210 /*
4211  * Floppy Driver initialization
4212  * =============================
4213  */
4214
4215 /* Determine the floppy disk controller type */
4216 /* This routine was written by David C. Niemi */
4217 static char __init get_fdc_version(int fdc)
4218 {
4219         int r;
4220
4221         output_byte(fdc, FD_DUMPREGS);  /* 82072 and better know DUMPREGS */
4222         if (fdc_state[fdc].reset)
4223                 return FDC_NONE;
4224         r = result(fdc);
4225         if (r <= 0x00)
4226                 return FDC_NONE;        /* No FDC present ??? */
4227         if ((r == 1) && (reply_buffer[ST0] == 0x80)) {
4228                 pr_info("FDC %d is an 8272A\n", fdc);
4229                 return FDC_8272A;       /* 8272a/765 don't know DUMPREGS */
4230         }
4231         if (r != 10) {
4232                 pr_info("FDC %d init: DUMPREGS: unexpected return of %d bytes.\n",
4233                         fdc, r);
4234                 return FDC_UNKNOWN;
4235         }
4236
4237         if (!fdc_configure(fdc)) {
4238                 pr_info("FDC %d is an 82072\n", fdc);
4239                 return FDC_82072;       /* 82072 doesn't know CONFIGURE */
4240         }
4241
4242         output_byte(fdc, FD_PERPENDICULAR);
4243         if (need_more_output(fdc) == MORE_OUTPUT) {
4244                 output_byte(fdc, 0);
4245         } else {
4246                 pr_info("FDC %d is an 82072A\n", fdc);
4247                 return FDC_82072A;      /* 82072A as found on Sparcs. */
4248         }
4249
4250         output_byte(fdc, FD_UNLOCK);
4251         r = result(fdc);
4252         if ((r == 1) && (reply_buffer[ST0] == 0x80)) {
4253                 pr_info("FDC %d is a pre-1991 82077\n", fdc);
4254                 return FDC_82077_ORIG;  /* Pre-1991 82077, doesn't know
4255                                          * LOCK/UNLOCK */
4256         }
4257         if ((r != 1) || (reply_buffer[ST0] != 0x00)) {
4258                 pr_info("FDC %d init: UNLOCK: unexpected return of %d bytes.\n",
4259                         fdc, r);
4260                 return FDC_UNKNOWN;
4261         }
4262         output_byte(fdc, FD_PARTID);
4263         r = result(fdc);
4264         if (r != 1) {
4265                 pr_info("FDC %d init: PARTID: unexpected return of %d bytes.\n",
4266                         fdc, r);
4267                 return FDC_UNKNOWN;
4268         }
4269         if (reply_buffer[ST0] == 0x80) {
4270                 pr_info("FDC %d is a post-1991 82077\n", fdc);
4271                 return FDC_82077;       /* Revised 82077AA passes all the tests */
4272         }
4273         switch (reply_buffer[ST0] >> 5) {
4274         case 0x0:
4275                 /* Either a 82078-1 or a 82078SL running at 5Volt */
4276                 pr_info("FDC %d is an 82078.\n", fdc);
4277                 return FDC_82078;
4278         case 0x1:
4279                 pr_info("FDC %d is a 44pin 82078\n", fdc);
4280                 return FDC_82078;
4281         case 0x2:
4282                 pr_info("FDC %d is a S82078B\n", fdc);
4283                 return FDC_S82078B;
4284         case 0x3:
4285                 pr_info("FDC %d is a National Semiconductor PC87306\n", fdc);
4286                 return FDC_87306;
4287         default:
4288                 pr_info("FDC %d init: 82078 variant with unknown PARTID=%d.\n",
4289                         fdc, reply_buffer[ST0] >> 5);
4290                 return FDC_82078_UNKN;
4291         }
4292 }                               /* get_fdc_version */
4293
4294 /* lilo configuration */
4295
4296 static void __init floppy_set_flags(int *ints, int param, int param2)
4297 {
4298         int i;
4299
4300         for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4301                 if (param)
4302                         default_drive_params[i].params.flags |= param2;
4303                 else
4304                         default_drive_params[i].params.flags &= ~param2;
4305         }
4306         DPRINT("%s flag 0x%x\n", param2 ? "Setting" : "Clearing", param);
4307 }
4308
4309 static void __init daring(int *ints, int param, int param2)
4310 {
4311         int i;
4312
4313         for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4314                 if (param) {
4315                         default_drive_params[i].params.select_delay = 0;
4316                         default_drive_params[i].params.flags |=
4317                             FD_SILENT_DCL_CLEAR;
4318                 } else {
4319                         default_drive_params[i].params.select_delay =
4320                             2 * HZ / 100;
4321                         default_drive_params[i].params.flags &=
4322                             ~FD_SILENT_DCL_CLEAR;
4323                 }
4324         }
4325         DPRINT("Assuming %s floppy hardware\n", param ? "standard" : "broken");
4326 }
4327
4328 static void __init set_cmos(int *ints, int dummy, int dummy2)
4329 {
4330         int current_drive = 0;
4331
4332         if (ints[0] != 2) {
4333                 DPRINT("wrong number of parameters for CMOS\n");
4334                 return;
4335         }
4336         current_drive = ints[1];
4337         if (current_drive < 0 || current_drive >= 8) {
4338                 DPRINT("bad drive for set_cmos\n");
4339                 return;
4340         }
4341 #if N_FDC > 1
4342         if (current_drive >= 4 && !FDC2)
4343                 FDC2 = 0x370;
4344 #endif
4345         drive_params[current_drive].cmos = ints[2];
4346         DPRINT("setting CMOS code to %d\n", ints[2]);
4347 }
4348
4349 static struct param_table {
4350         const char *name;
4351         void (*fn) (int *ints, int param, int param2);
4352         int *var;
4353         int def_param;
4354         int param2;
4355 } config_params[] __initdata = {
4356         {"allowed_drive_mask", NULL, &allowed_drive_mask, 0xff, 0}, /* obsolete */
4357         {"all_drives", NULL, &allowed_drive_mask, 0xff, 0},     /* obsolete */
4358         {"asus_pci", NULL, &allowed_drive_mask, 0x33, 0},
4359         {"irq", NULL, &FLOPPY_IRQ, 6, 0},
4360         {"dma", NULL, &FLOPPY_DMA, 2, 0},
4361         {"daring", daring, NULL, 1, 0},
4362 #if N_FDC > 1
4363         {"two_fdc", NULL, &FDC2, 0x370, 0},
4364         {"one_fdc", NULL, &FDC2, 0, 0},
4365 #endif
4366         {"thinkpad", floppy_set_flags, NULL, 1, FD_INVERTED_DCL},
4367         {"broken_dcl", floppy_set_flags, NULL, 1, FD_BROKEN_DCL},
4368         {"messages", floppy_set_flags, NULL, 1, FTD_MSG},
4369         {"silent_dcl_clear", floppy_set_flags, NULL, 1, FD_SILENT_DCL_CLEAR},
4370         {"debug", floppy_set_flags, NULL, 1, FD_DEBUG},
4371         {"nodma", NULL, &can_use_virtual_dma, 1, 0},
4372         {"omnibook", NULL, &can_use_virtual_dma, 1, 0},
4373         {"yesdma", NULL, &can_use_virtual_dma, 0, 0},
4374         {"fifo_depth", NULL, &fifo_depth, 0xa, 0},
4375         {"nofifo", NULL, &no_fifo, 0x20, 0},
4376         {"usefifo", NULL, &no_fifo, 0, 0},
4377         {"cmos", set_cmos, NULL, 0, 0},
4378         {"slow", NULL, &slow_floppy, 1, 0},
4379         {"unexpected_interrupts", NULL, &print_unex, 1, 0},
4380         {"no_unexpected_interrupts", NULL, &print_unex, 0, 0},
4381         {"L40SX", NULL, &print_unex, 0, 0}
4382
4383         EXTRA_FLOPPY_PARAMS
4384 };
4385
4386 static int __init floppy_setup(char *str)
4387 {
4388         int i;
4389         int param;
4390         int ints[11];
4391
4392         str = get_options(str, ARRAY_SIZE(ints), ints);
4393         if (str) {
4394                 for (i = 0; i < ARRAY_SIZE(config_params); i++) {
4395                         if (strcmp(str, config_params[i].name) == 0) {
4396                                 if (ints[0])
4397                                         param = ints[1];
4398                                 else
4399                                         param = config_params[i].def_param;
4400                                 if (config_params[i].fn)
4401                                         config_params[i].fn(ints, param,
4402                                                             config_params[i].
4403                                                             param2);
4404                                 if (config_params[i].var) {
4405                                         DPRINT("%s=%d\n", str, param);
4406                                         *config_params[i].var = param;
4407                                 }
4408                                 return 1;
4409                         }
4410                 }
4411         }
4412         if (str) {
4413                 DPRINT("unknown floppy option [%s]\n", str);
4414
4415                 DPRINT("allowed options are:");
4416                 for (i = 0; i < ARRAY_SIZE(config_params); i++)
4417                         pr_cont(" %s", config_params[i].name);
4418                 pr_cont("\n");
4419         } else
4420                 DPRINT("botched floppy option\n");
4421         DPRINT("Read Documentation/admin-guide/blockdev/floppy.rst\n");
4422         return 0;
4423 }
4424
4425 static int have_no_fdc = -ENODEV;
4426
4427 static ssize_t floppy_cmos_show(struct device *dev,
4428                                 struct device_attribute *attr, char *buf)
4429 {
4430         struct platform_device *p = to_platform_device(dev);
4431         int drive;
4432
4433         drive = p->id;
4434         return sprintf(buf, "%X\n", drive_params[drive].cmos);
4435 }
4436
4437 static DEVICE_ATTR(cmos, 0444, floppy_cmos_show, NULL);
4438
4439 static struct attribute *floppy_dev_attrs[] = {
4440         &dev_attr_cmos.attr,
4441         NULL
4442 };
4443
4444 ATTRIBUTE_GROUPS(floppy_dev);
4445
4446 static void floppy_device_release(struct device *dev)
4447 {
4448 }
4449
4450 static int floppy_resume(struct device *dev)
4451 {
4452         int fdc;
4453         int saved_drive;
4454
4455         saved_drive = current_drive;
4456         for (fdc = 0; fdc < N_FDC; fdc++)
4457                 if (fdc_state[fdc].address != -1)
4458                         user_reset_fdc(REVDRIVE(fdc, 0), FD_RESET_ALWAYS, false);
4459         set_fdc(saved_drive);
4460         return 0;
4461 }
4462
4463 static const struct dev_pm_ops floppy_pm_ops = {
4464         .resume = floppy_resume,
4465         .restore = floppy_resume,
4466 };
4467
4468 static struct platform_driver floppy_driver = {
4469         .driver = {
4470                    .name = "floppy",
4471                    .pm = &floppy_pm_ops,
4472         },
4473 };
4474
4475 static const struct blk_mq_ops floppy_mq_ops = {
4476         .queue_rq = floppy_queue_rq,
4477 };
4478
4479 static struct platform_device floppy_device[N_DRIVE];
4480
4481 static bool floppy_available(int drive)
4482 {
4483         if (!(allowed_drive_mask & (1 << drive)))
4484                 return false;
4485         if (fdc_state[FDC(drive)].version == FDC_NONE)
4486                 return false;
4487         return true;
4488 }
4489
4490 static int floppy_alloc_disk(unsigned int drive, unsigned int type)
4491 {
4492         struct gendisk *disk;
4493         int err;
4494
4495         disk = alloc_disk(1);
4496         if (!disk)
4497                 return -ENOMEM;
4498
4499         disk->queue = blk_mq_init_queue(&tag_sets[drive]);
4500         if (IS_ERR(disk->queue)) {
4501                 err = PTR_ERR(disk->queue);
4502                 disk->queue = NULL;
4503                 put_disk(disk);
4504                 return err;
4505         }
4506
4507         blk_queue_max_hw_sectors(disk->queue, 64);
4508         disk->major = FLOPPY_MAJOR;
4509         disk->first_minor = TOMINOR(drive) | (type << 2);
4510         disk->fops = &floppy_fops;
4511         disk->events = DISK_EVENT_MEDIA_CHANGE;
4512         if (type)
4513                 sprintf(disk->disk_name, "fd%d_type%d", drive, type);
4514         else
4515                 sprintf(disk->disk_name, "fd%d", drive);
4516         /* to be cleaned up... */
4517         disk->private_data = (void *)(long)drive;
4518         disk->flags |= GENHD_FL_REMOVABLE;
4519
4520         disks[drive][type] = disk;
4521         return 0;
4522 }
4523
4524 static DEFINE_MUTEX(floppy_probe_lock);
4525
4526 static void floppy_probe(dev_t dev)
4527 {
4528         unsigned int drive = (MINOR(dev) & 3) | ((MINOR(dev) & 0x80) >> 5);
4529         unsigned int type = (MINOR(dev) >> 2) & 0x1f;
4530
4531         if (drive >= N_DRIVE || !floppy_available(drive) ||
4532             type >= ARRAY_SIZE(floppy_type))
4533                 return;
4534
4535         mutex_lock(&floppy_probe_lock);
4536         if (!disks[drive][type]) {
4537                 if (floppy_alloc_disk(drive, type) == 0)
4538                         add_disk(disks[drive][type]);
4539         }
4540         mutex_unlock(&floppy_probe_lock);
4541 }
4542
4543 static int __init do_floppy_init(void)
4544 {
4545         int i, unit, drive, err;
4546
4547         set_debugt();
4548         interruptjiffies = resultjiffies = jiffies;
4549
4550 #if defined(CONFIG_PPC)
4551         if (check_legacy_ioport(FDC1))
4552                 return -ENODEV;
4553 #endif
4554
4555         raw_cmd = NULL;
4556
4557         floppy_wq = alloc_ordered_workqueue("floppy", 0);
4558         if (!floppy_wq)
4559                 return -ENOMEM;
4560
4561         for (drive = 0; drive < N_DRIVE; drive++) {
4562                 memset(&tag_sets[drive], 0, sizeof(tag_sets[drive]));
4563                 tag_sets[drive].ops = &floppy_mq_ops;
4564                 tag_sets[drive].nr_hw_queues = 1;
4565                 tag_sets[drive].nr_maps = 1;
4566                 tag_sets[drive].queue_depth = 2;
4567                 tag_sets[drive].numa_node = NUMA_NO_NODE;
4568                 tag_sets[drive].flags = BLK_MQ_F_SHOULD_MERGE;
4569                 err = blk_mq_alloc_tag_set(&tag_sets[drive]);
4570                 if (err)
4571                         goto out_put_disk;
4572
4573                 err = floppy_alloc_disk(drive, 0);
4574                 if (err)
4575                         goto out_put_disk;
4576
4577                 timer_setup(&motor_off_timer[drive], motor_off_callback, 0);
4578         }
4579
4580         err = __register_blkdev(FLOPPY_MAJOR, "fd", floppy_probe);
4581         if (err)
4582                 goto out_put_disk;
4583
4584         err = platform_driver_register(&floppy_driver);
4585         if (err)
4586                 goto out_unreg_blkdev;
4587
4588         for (i = 0; i < 256; i++)
4589                 if (ITYPE(i))
4590                         floppy_sizes[i] = floppy_type[ITYPE(i)].size;
4591                 else
4592                         floppy_sizes[i] = MAX_DISK_SIZE << 1;
4593
4594         reschedule_timeout(MAXTIMEOUT, "floppy init");
4595         config_types();
4596
4597         for (i = 0; i < N_FDC; i++) {
4598                 memset(&fdc_state[i], 0, sizeof(*fdc_state));
4599                 fdc_state[i].dtr = -1;
4600                 fdc_state[i].dor = 0x4;
4601 #if defined(__sparc__) || defined(__mc68000__)
4602         /*sparcs/sun3x don't have a DOR reset which we can fall back on to */
4603 #ifdef __mc68000__
4604                 if (MACH_IS_SUN3X)
4605 #endif
4606                         fdc_state[i].version = FDC_82072A;
4607 #endif
4608         }
4609
4610         use_virtual_dma = can_use_virtual_dma & 1;
4611         fdc_state[0].address = FDC1;
4612         if (fdc_state[0].address == -1) {
4613                 cancel_delayed_work(&fd_timeout);
4614                 err = -ENODEV;
4615                 goto out_unreg_driver;
4616         }
4617 #if N_FDC > 1
4618         fdc_state[1].address = FDC2;
4619 #endif
4620
4621         current_fdc = 0;        /* reset fdc in case of unexpected interrupt */
4622         err = floppy_grab_irq_and_dma();
4623         if (err) {
4624                 cancel_delayed_work(&fd_timeout);
4625                 err = -EBUSY;
4626                 goto out_unreg_driver;
4627         }
4628
4629         /* initialise drive state */
4630         for (drive = 0; drive < N_DRIVE; drive++) {
4631                 memset(&drive_state[drive], 0, sizeof(drive_state[drive]));
4632                 memset(&write_errors[drive], 0, sizeof(write_errors[drive]));
4633                 set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[drive].flags);
4634                 set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4635                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
4636                 drive_state[drive].fd_device = -1;
4637                 floppy_track_buffer = NULL;
4638                 max_buffer_sectors = 0;
4639         }
4640         /*
4641          * Small 10 msec delay to let through any interrupt that
4642          * initialization might have triggered, to not
4643          * confuse detection:
4644          */
4645         msleep(10);
4646
4647         for (i = 0; i < N_FDC; i++) {
4648                 fdc_state[i].driver_version = FD_DRIVER_VERSION;
4649                 for (unit = 0; unit < 4; unit++)
4650                         fdc_state[i].track[unit] = 0;
4651                 if (fdc_state[i].address == -1)
4652                         continue;
4653                 fdc_state[i].rawcmd = 2;
4654                 if (user_reset_fdc(REVDRIVE(i, 0), FD_RESET_ALWAYS, false)) {
4655                         /* free ioports reserved by floppy_grab_irq_and_dma() */
4656                         floppy_release_regions(i);
4657                         fdc_state[i].address = -1;
4658                         fdc_state[i].version = FDC_NONE;
4659                         continue;
4660                 }
4661                 /* Try to determine the floppy controller type */
4662                 fdc_state[i].version = get_fdc_version(i);
4663                 if (fdc_state[i].version == FDC_NONE) {
4664                         /* free ioports reserved by floppy_grab_irq_and_dma() */
4665                         floppy_release_regions(i);
4666                         fdc_state[i].address = -1;
4667                         continue;
4668                 }
4669                 if (can_use_virtual_dma == 2 &&
4670                     fdc_state[i].version < FDC_82072A)
4671                         can_use_virtual_dma = 0;
4672
4673                 have_no_fdc = 0;
4674                 /* Not all FDCs seem to be able to handle the version command
4675                  * properly, so force a reset for the standard FDC clones,
4676                  * to avoid interrupt garbage.
4677                  */
4678                 user_reset_fdc(REVDRIVE(i, 0), FD_RESET_ALWAYS, false);
4679         }
4680         current_fdc = 0;
4681         cancel_delayed_work(&fd_timeout);
4682         current_drive = 0;
4683         initialized = true;
4684         if (have_no_fdc) {
4685                 DPRINT("no floppy controllers found\n");
4686                 err = have_no_fdc;
4687                 goto out_release_dma;
4688         }
4689
4690         for (drive = 0; drive < N_DRIVE; drive++) {
4691                 if (!floppy_available(drive))
4692                         continue;
4693
4694                 floppy_device[drive].name = floppy_device_name;
4695                 floppy_device[drive].id = drive;
4696                 floppy_device[drive].dev.release = floppy_device_release;
4697                 floppy_device[drive].dev.groups = floppy_dev_groups;
4698
4699                 err = platform_device_register(&floppy_device[drive]);
4700                 if (err)
4701                         goto out_remove_drives;
4702
4703                 device_add_disk(&floppy_device[drive].dev, disks[drive][0],
4704                                 NULL);
4705         }
4706
4707         return 0;
4708
4709 out_remove_drives:
4710         while (drive--) {
4711                 if (floppy_available(drive)) {
4712                         del_gendisk(disks[drive][0]);
4713                         platform_device_unregister(&floppy_device[drive]);
4714                 }
4715         }
4716 out_release_dma:
4717         if (atomic_read(&usage_count))
4718                 floppy_release_irq_and_dma();
4719 out_unreg_driver:
4720         platform_driver_unregister(&floppy_driver);
4721 out_unreg_blkdev:
4722         unregister_blkdev(FLOPPY_MAJOR, "fd");
4723 out_put_disk:
4724         destroy_workqueue(floppy_wq);
4725         for (drive = 0; drive < N_DRIVE; drive++) {
4726                 if (!disks[drive][0])
4727                         break;
4728                 del_timer_sync(&motor_off_timer[drive]);
4729                 blk_cleanup_queue(disks[drive][0]->queue);
4730                 disks[drive][0]->queue = NULL;
4731                 blk_mq_free_tag_set(&tag_sets[drive]);
4732                 put_disk(disks[drive][0]);
4733         }
4734         return err;
4735 }
4736
4737 #ifndef MODULE
4738 static __init void floppy_async_init(void *data, async_cookie_t cookie)
4739 {
4740         do_floppy_init();
4741 }
4742 #endif
4743
4744 static int __init floppy_init(void)
4745 {
4746 #ifdef MODULE
4747         return do_floppy_init();
4748 #else
4749         /* Don't hold up the bootup by the floppy initialization */
4750         async_schedule(floppy_async_init, NULL);
4751         return 0;
4752 #endif
4753 }
4754
4755 static const struct io_region {
4756         int offset;
4757         int size;
4758 } io_regions[] = {
4759         { 2, 1 },
4760         /* address + 3 is sometimes reserved by pnp bios for motherboard */
4761         { 4, 2 },
4762         /* address + 6 is reserved, and may be taken by IDE.
4763          * Unfortunately, Adaptec doesn't know this :-(, */
4764         { 7, 1 },
4765 };
4766
4767 static void floppy_release_allocated_regions(int fdc, const struct io_region *p)
4768 {
4769         while (p != io_regions) {
4770                 p--;
4771                 release_region(fdc_state[fdc].address + p->offset, p->size);
4772         }
4773 }
4774
4775 #define ARRAY_END(X) (&((X)[ARRAY_SIZE(X)]))
4776
4777 static int floppy_request_regions(int fdc)
4778 {
4779         const struct io_region *p;
4780
4781         for (p = io_regions; p < ARRAY_END(io_regions); p++) {
4782                 if (!request_region(fdc_state[fdc].address + p->offset,
4783                                     p->size, "floppy")) {
4784                         DPRINT("Floppy io-port 0x%04lx in use\n",
4785                                fdc_state[fdc].address + p->offset);
4786                         floppy_release_allocated_regions(fdc, p);
4787                         return -EBUSY;
4788                 }
4789         }
4790         return 0;
4791 }
4792
4793 static void floppy_release_regions(int fdc)
4794 {
4795         floppy_release_allocated_regions(fdc, ARRAY_END(io_regions));
4796 }
4797
4798 static int floppy_grab_irq_and_dma(void)
4799 {
4800         int fdc;
4801
4802         if (atomic_inc_return(&usage_count) > 1)
4803                 return 0;
4804
4805         /*
4806          * We might have scheduled a free_irq(), wait it to
4807          * drain first:
4808          */
4809         flush_workqueue(floppy_wq);
4810
4811         if (fd_request_irq()) {
4812                 DPRINT("Unable to grab IRQ%d for the floppy driver\n",
4813                        FLOPPY_IRQ);
4814                 atomic_dec(&usage_count);
4815                 return -1;
4816         }
4817         if (fd_request_dma()) {
4818                 DPRINT("Unable to grab DMA%d for the floppy driver\n",
4819                        FLOPPY_DMA);
4820                 if (can_use_virtual_dma & 2)
4821                         use_virtual_dma = can_use_virtual_dma = 1;
4822                 if (!(can_use_virtual_dma & 1)) {
4823                         fd_free_irq();
4824                         atomic_dec(&usage_count);
4825                         return -1;
4826                 }
4827         }
4828
4829         for (fdc = 0; fdc < N_FDC; fdc++) {
4830                 if (fdc_state[fdc].address != -1) {
4831                         if (floppy_request_regions(fdc))
4832                                 goto cleanup;
4833                 }
4834         }
4835         for (fdc = 0; fdc < N_FDC; fdc++) {
4836                 if (fdc_state[fdc].address != -1) {
4837                         reset_fdc_info(fdc, 1);
4838                         fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
4839                 }
4840         }
4841
4842         set_dor(0, ~0, 8);      /* avoid immediate interrupt */
4843
4844         for (fdc = 0; fdc < N_FDC; fdc++)
4845                 if (fdc_state[fdc].address != -1)
4846                         fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
4847         /*
4848          * The driver will try and free resources and relies on us
4849          * to know if they were allocated or not.
4850          */
4851         current_fdc = 0;
4852         irqdma_allocated = 1;
4853         return 0;
4854 cleanup:
4855         fd_free_irq();
4856         fd_free_dma();
4857         while (--fdc >= 0)
4858                 floppy_release_regions(fdc);
4859         current_fdc = 0;
4860         atomic_dec(&usage_count);
4861         return -1;
4862 }
4863
4864 static void floppy_release_irq_and_dma(void)
4865 {
4866         int fdc;
4867 #ifndef __sparc__
4868         int drive;
4869 #endif
4870         long tmpsize;
4871         unsigned long tmpaddr;
4872
4873         if (!atomic_dec_and_test(&usage_count))
4874                 return;
4875
4876         if (irqdma_allocated) {
4877                 fd_disable_dma();
4878                 fd_free_dma();
4879                 fd_free_irq();
4880                 irqdma_allocated = 0;
4881         }
4882         set_dor(0, ~0, 8);
4883 #if N_FDC > 1
4884         set_dor(1, ~8, 0);
4885 #endif
4886
4887         if (floppy_track_buffer && max_buffer_sectors) {
4888                 tmpsize = max_buffer_sectors * 1024;
4889                 tmpaddr = (unsigned long)floppy_track_buffer;
4890                 floppy_track_buffer = NULL;
4891                 max_buffer_sectors = 0;
4892                 buffer_min = buffer_max = -1;
4893                 fd_dma_mem_free(tmpaddr, tmpsize);
4894         }
4895 #ifndef __sparc__
4896         for (drive = 0; drive < N_FDC * 4; drive++)
4897                 if (timer_pending(motor_off_timer + drive))
4898                         pr_info("motor off timer %d still active\n", drive);
4899 #endif
4900
4901         if (delayed_work_pending(&fd_timeout))
4902                 pr_info("floppy timer still active:%s\n", timeout_message);
4903         if (delayed_work_pending(&fd_timer))
4904                 pr_info("auxiliary floppy timer still active\n");
4905         if (work_pending(&floppy_work))
4906                 pr_info("work still pending\n");
4907         for (fdc = 0; fdc < N_FDC; fdc++)
4908                 if (fdc_state[fdc].address != -1)
4909                         floppy_release_regions(fdc);
4910 }
4911
4912 #ifdef MODULE
4913
4914 static char *floppy;
4915
4916 static void __init parse_floppy_cfg_string(char *cfg)
4917 {
4918         char *ptr;
4919
4920         while (*cfg) {
4921                 ptr = cfg;
4922                 while (*cfg && *cfg != ' ' && *cfg != '\t')
4923                         cfg++;
4924                 if (*cfg) {
4925                         *cfg = '\0';
4926                         cfg++;
4927                 }
4928                 if (*ptr)
4929                         floppy_setup(ptr);
4930         }
4931 }
4932
4933 static int __init floppy_module_init(void)
4934 {
4935         if (floppy)
4936                 parse_floppy_cfg_string(floppy);
4937         return floppy_init();
4938 }
4939 module_init(floppy_module_init);
4940
4941 static void __exit floppy_module_exit(void)
4942 {
4943         int drive, i;
4944
4945         unregister_blkdev(FLOPPY_MAJOR, "fd");
4946         platform_driver_unregister(&floppy_driver);
4947
4948         destroy_workqueue(floppy_wq);
4949
4950         for (drive = 0; drive < N_DRIVE; drive++) {
4951                 del_timer_sync(&motor_off_timer[drive]);
4952
4953                 if (floppy_available(drive)) {
4954                         for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4955                                 if (disks[drive][i])
4956                                         del_gendisk(disks[drive][i]);
4957                         }
4958                         platform_device_unregister(&floppy_device[drive]);
4959                 }
4960                 for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4961                         if (disks[drive][i])
4962                                 blk_cleanup_queue(disks[drive][i]->queue);
4963                 }
4964                 blk_mq_free_tag_set(&tag_sets[drive]);
4965
4966                 /*
4967                  * These disks have not called add_disk().  Don't put down
4968                  * queue reference in put_disk().
4969                  */
4970                 if (!(allowed_drive_mask & (1 << drive)) ||
4971                     fdc_state[FDC(drive)].version == FDC_NONE) {
4972                         for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4973                                 if (disks[drive][i])
4974                                         disks[drive][i]->queue = NULL;
4975                         }
4976                 }
4977
4978                 for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4979                         if (disks[drive][i])
4980                                 put_disk(disks[drive][i]);
4981                 }
4982         }
4983
4984         cancel_delayed_work_sync(&fd_timeout);
4985         cancel_delayed_work_sync(&fd_timer);
4986
4987         if (atomic_read(&usage_count))
4988                 floppy_release_irq_and_dma();
4989
4990         /* eject disk, if any */
4991         fd_eject(0);
4992 }
4993
4994 module_exit(floppy_module_exit);
4995
4996 module_param(floppy, charp, 0);
4997 module_param(FLOPPY_IRQ, int, 0);
4998 module_param(FLOPPY_DMA, int, 0);
4999 MODULE_AUTHOR("Alain L. Knaff");
5000 MODULE_LICENSE("GPL");
5001
5002 /* This doesn't actually get used other than for module information */
5003 static const struct pnp_device_id floppy_pnpids[] = {
5004         {"PNP0700", 0},
5005         {}
5006 };
5007
5008 MODULE_DEVICE_TABLE(pnp, floppy_pnpids);
5009
5010 #else
5011
5012 __setup("floppy=", floppy_setup);
5013 module_init(floppy_init)
5014 #endif
5015
5016 MODULE_ALIAS_BLOCKDEV_MAJOR(FLOPPY_MAJOR);