#include <linux/delay.h>
 #include <linux/sizes.h>
 #include <linux/bits.h>
+#include <asm/unaligned.h>
 #include <cxlmem.h>
 
 #include "trace.h"
                .opcode = cpu_to_le16(CXL_MBOX_OP_GET_HEALTH_INFO),
                .effect = cpu_to_le16(0),
        },
+       {
+               .opcode = cpu_to_le16(CXL_MBOX_OP_GET_POISON),
+               .effect = cpu_to_le16(0),
+       },
 };
 
 /* See CXL 2.0 Table 181 Get Health Info Output Payload */
                        cpu_to_le64(DEV_SIZE / CXL_CAPACITY_MULTIPLIER),
        };
 
+       put_unaligned_le24(CXL_POISON_LIST_MAX, id.poison_list_max_mer);
+
        if (cmd->size_out < sizeof(id))
                return -EINVAL;
 
        return 0;
 }
 
+static int mock_get_poison(struct cxl_dev_state *cxlds,
+                          struct cxl_mbox_cmd *cmd)
+{
+       struct cxl_mbox_poison_in *pi = cmd->payload_in;
+
+       /* Mock one poison record at pi.offset for 64 bytes */
+       struct {
+               struct cxl_mbox_poison_out po;
+               struct cxl_poison_record record;
+       } __packed mock_plist = {
+               .po = {
+                       .count = cpu_to_le16(1),
+               },
+               .record = {
+                       .length = cpu_to_le32(1),
+                       .address = cpu_to_le64(le64_to_cpu(pi->offset) +
+                                              CXL_POISON_SOURCE_INJECTED),
+               },
+       };
+
+       if (cmd->size_out < sizeof(mock_plist))
+               return -EINVAL;
+
+       memcpy(cmd->payload_out, &mock_plist, sizeof(mock_plist));
+       cmd->size_out = sizeof(mock_plist);
+       return 0;
+}
+
 static int cxl_mock_mbox_send(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd *cmd)
 {
        struct device *dev = cxlds->dev;
        case CXL_MBOX_OP_PASSPHRASE_SECURE_ERASE:
                rc = mock_passphrase_secure_erase(cxlds, cmd);
                break;
+       case CXL_MBOX_OP_GET_POISON:
+               rc = mock_get_poison(cxlds, cmd);
+               break;
        default:
                break;
        }
        if (rc)
                return rc;
 
+       rc = cxl_poison_state_init(cxlds);
+       if (rc)
+               return rc;
+
        rc = cxl_dev_state_identify(cxlds);
        if (rc)
                return rc;