linux/Documentation/userspace-api/ioctl/ioctl-decoding.rst

==============================
Decoding an IOCTL Magic Number
==============================

To decode a hex IOCTL code:

Most architectures use this generic format, but check
include/ARCH/ioctl.h for specifics, e.g. powerpc
uses 3 bits to encode read/write and 13 bits for size.

 ====== ==================================
 bits   meaning
 ====== ==================================
 31-30	00 - no parameters: uses _IO macro
	10 - read: _IOR
	01 - write: _IOW
	11 - read/write: _IOWR

 29-16	size of arguments

 15-8	ascii character supposedly
	unique to each driver

 7-0	function #
 ====== ==================================


So for example 0x82187201 is a read with arg length of 0x218,
character 'r' function 1. Grepping the source reveals this is::

	#define VFAT_IOCTL_READDIR_BOTH         _IOR('r', 1, struct dirent [2])