xref: /dragonfly/sys/dev/raid/hptiop/hptiop.c (revision 783d47c4)
1 /*
2  * HighPoint RR3xxx/4xxx RAID Driver for FreeBSD
3  * Copyright (C) 2007-2008 HighPoint Technologies, Inc. All Rights Reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  * $FreeBSD: src/sys/dev/hptiop/hptiop.c,v 1.11 2011/11/23 21:43:51 marius Exp $
27  */
28 
29 #include <sys/param.h>
30 #include <sys/types.h>
31 #include <sys/cons.h>
32 #include <sys/time.h>
33 #include <sys/systm.h>
34 
35 #include <sys/stat.h>
36 #include <sys/malloc.h>
37 #include <sys/conf.h>
38 #include <sys/libkern.h>
39 #include <sys/kernel.h>
40 
41 #include <sys/kthread.h>
42 #include <sys/lock.h>
43 #include <sys/module.h>
44 
45 #include <sys/eventhandler.h>
46 #include <sys/bus.h>
47 #include <sys/taskqueue.h>
48 #include <sys/device.h>
49 #include <sys/mplock2.h>
50 
51 #include <machine/stdarg.h>
52 #include <sys/rman.h>
53 
54 #include <vm/vm.h>
55 #include <vm/pmap.h>
56 
57 #include <bus/pci/pcireg.h>
58 #include <bus/pci/pcivar.h>
59 
60 #include <bus/cam/cam.h>
61 #include <bus/cam/cam_ccb.h>
62 #include <bus/cam/cam_sim.h>
63 #include <bus/cam/cam_xpt_periph.h>
64 #include <bus/cam/cam_xpt_sim.h>
65 #include <bus/cam/cam_debug.h>
66 #include <bus/cam/cam_periph.h>
67 #include <bus/cam/scsi/scsi_all.h>
68 #include <bus/cam/scsi/scsi_message.h>
69 
70 #include <dev/raid/hptiop/hptiop.h>
71 
72 static char driver_name[] = "hptiop";
73 static char driver_version[] = "v1.3 (010208)";
74 
75 static devclass_t hptiop_devclass;
76 
77 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
78 				u_int32_t msg, u_int32_t millisec);
79 static void hptiop_request_callback_itl(struct hpt_iop_hba *hba,
80 							u_int32_t req);
81 static void hptiop_request_callback_mv(struct hpt_iop_hba *hba, u_int64_t req);
82 static void hptiop_os_message_callback(struct hpt_iop_hba *hba, u_int32_t msg);
83 static int  hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
84 				struct hpt_iop_ioctl_param *pParams);
85 static int  hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
86 				struct hpt_iop_ioctl_param *pParams);
87 static void hptiop_bus_scan_cb(struct cam_periph *periph, union ccb *ccb);
88 static int  hptiop_rescan_bus(struct hpt_iop_hba *hba);
89 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba);
90 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba);
91 static int hptiop_get_config_itl(struct hpt_iop_hba *hba,
92 				struct hpt_iop_request_get_config *config);
93 static int hptiop_get_config_mv(struct hpt_iop_hba *hba,
94 				struct hpt_iop_request_get_config *config);
95 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
96 				struct hpt_iop_request_set_config *config);
97 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
98 				struct hpt_iop_request_set_config *config);
99 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba);
100 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba);
101 static int  hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
102 			u_int32_t req32, struct hpt_iop_ioctl_param *pParams);
103 static int  hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
104 				struct hpt_iop_request_ioctl_command *req,
105 				struct hpt_iop_ioctl_param *pParams);
106 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
107 				struct hpt_iop_srb *srb,
108 				bus_dma_segment_t *segs, int nsegs);
109 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
110 				struct hpt_iop_srb *srb,
111 				bus_dma_segment_t *segs, int nsegs);
112 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg);
113 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg);
114 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba);
115 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba);
116 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba);
117 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba);
118 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb);
119 static int  hptiop_os_query_remove_device(struct hpt_iop_hba *hba, int tid);
120 static int  hptiop_probe(device_t dev);
121 static int  hptiop_attach(device_t dev);
122 static int  hptiop_detach(device_t dev);
123 static int  hptiop_shutdown(device_t dev);
124 static void hptiop_action(struct cam_sim *sim, union ccb *ccb);
125 static void hptiop_poll(struct cam_sim *sim);
126 static void hptiop_async(void *callback_arg, u_int32_t code,
127 					struct cam_path *path, void *arg);
128 static void hptiop_pci_intr(void *arg);
129 static void hptiop_release_resource(struct hpt_iop_hba *hba);
130 static int  hptiop_reset_adapter(struct hpt_iop_hba *hba);
131 
132 static d_open_t hptiop_open;
133 static d_close_t hptiop_close;
134 static d_ioctl_t hptiop_ioctl;
135 
136 static struct dev_ops hptiop_ops = {
137 	{ driver_name, 0, 0 },
138 	.d_open = hptiop_open,
139 	.d_close = hptiop_close,
140 	.d_ioctl = hptiop_ioctl,
141 };
142 
143 #define hba_from_dev(dev) ((struct hpt_iop_hba *)(dev)->si_drv1)
144 
145 #define BUS_SPACE_WRT4_ITL(offset, value) bus_space_write_4(hba->bar0t,\
146 		hba->bar0h, offsetof(struct hpt_iopmu_itl, offset), (value))
147 #define BUS_SPACE_RD4_ITL(offset) bus_space_read_4(hba->bar0t,\
148 		hba->bar0h, offsetof(struct hpt_iopmu_itl, offset))
149 
150 #define BUS_SPACE_WRT4_MV0(offset, value) bus_space_write_4(hba->bar0t,\
151 		hba->bar0h, offsetof(struct hpt_iopmv_regs, offset), value)
152 #define BUS_SPACE_RD4_MV0(offset) bus_space_read_4(hba->bar0t,\
153 		hba->bar0h, offsetof(struct hpt_iopmv_regs, offset))
154 #define BUS_SPACE_WRT4_MV2(offset, value) bus_space_write_4(hba->bar2t,\
155 		hba->bar2h, offsetof(struct hpt_iopmu_mv, offset), value)
156 #define BUS_SPACE_RD4_MV2(offset) bus_space_read_4(hba->bar2t,\
157 		hba->bar2h, offsetof(struct hpt_iopmu_mv, offset))
158 
159 static int hptiop_open(struct dev_open_args *ap)
160 {
161 	cdev_t dev = ap->a_head.a_dev;
162 	struct hpt_iop_hba *hba = hba_from_dev(dev);
163 
164 	if (hba==NULL)
165 		return ENXIO;
166 	if (hba->flag & HPT_IOCTL_FLAG_OPEN)
167 		return EBUSY;
168 	hba->flag |= HPT_IOCTL_FLAG_OPEN;
169 	return 0;
170 }
171 
172 static int hptiop_close(struct dev_close_args *ap)
173 {
174 	cdev_t dev = ap->a_head.a_dev;
175 	struct hpt_iop_hba *hba = hba_from_dev(dev);
176 	hba->flag &= ~(u_int32_t)HPT_IOCTL_FLAG_OPEN;
177 	return 0;
178 }
179 
180 static int hptiop_ioctl(struct dev_ioctl_args *ap)
181 {
182 	cdev_t dev = ap->a_head.a_dev;
183 	u_long cmd = ap->a_cmd;
184 	caddr_t data = ap->a_data;
185 	int ret = EFAULT;
186 	struct hpt_iop_hba *hba = hba_from_dev(dev);
187 
188 	get_mplock();
189 
190 	switch (cmd) {
191 	case HPT_DO_IOCONTROL:
192 		ret = hba->ops->do_ioctl(hba,
193 				(struct hpt_iop_ioctl_param *)data);
194 		break;
195 	case HPT_SCAN_BUS:
196 		ret = hptiop_rescan_bus(hba);
197 		break;
198 	}
199 
200 	rel_mplock();
201 
202 	return ret;
203 }
204 
205 static u_int64_t hptiop_mv_outbound_read(struct hpt_iop_hba *hba)
206 {
207 	u_int64_t p;
208 	u_int32_t outbound_tail = BUS_SPACE_RD4_MV2(outbound_tail);
209 	u_int32_t outbound_head = BUS_SPACE_RD4_MV2(outbound_head);
210 
211 	if (outbound_tail != outbound_head) {
212 		bus_space_read_region_4(hba->bar2t, hba->bar2h,
213 			offsetof(struct hpt_iopmu_mv,
214 				outbound_q[outbound_tail]),
215 			(u_int32_t *)&p, 2);
216 
217 		outbound_tail++;
218 
219 		if (outbound_tail == MVIOP_QUEUE_LEN)
220 			outbound_tail = 0;
221 
222 		BUS_SPACE_WRT4_MV2(outbound_tail, outbound_tail);
223 		return p;
224 	} else
225 		return 0;
226 }
227 
228 static void hptiop_mv_inbound_write(u_int64_t p, struct hpt_iop_hba *hba)
229 {
230 	u_int32_t inbound_head = BUS_SPACE_RD4_MV2(inbound_head);
231 	u_int32_t head = inbound_head + 1;
232 
233 	if (head == MVIOP_QUEUE_LEN)
234 		head = 0;
235 
236 	bus_space_write_region_4(hba->bar2t, hba->bar2h,
237 			offsetof(struct hpt_iopmu_mv, inbound_q[inbound_head]),
238 			(u_int32_t *)&p, 2);
239 	BUS_SPACE_WRT4_MV2(inbound_head, head);
240 	BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_POSTQUEUE);
241 }
242 
243 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg)
244 {
245 	BUS_SPACE_WRT4_ITL(inbound_msgaddr0, msg);
246 	BUS_SPACE_RD4_ITL(outbound_intstatus);
247 }
248 
249 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg)
250 {
251 
252 	BUS_SPACE_WRT4_MV2(inbound_msg, msg);
253 	BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_MSG);
254 
255 	BUS_SPACE_RD4_MV0(outbound_intmask);
256 }
257 
258 static int hptiop_wait_ready_itl(struct hpt_iop_hba * hba, u_int32_t millisec)
259 {
260 	u_int32_t req=0;
261 	int i;
262 
263 	for (i = 0; i < millisec; i++) {
264 		req = BUS_SPACE_RD4_ITL(inbound_queue);
265 		if (req != IOPMU_QUEUE_EMPTY)
266 			break;
267 		DELAY(1000);
268 	}
269 
270 	if (req!=IOPMU_QUEUE_EMPTY) {
271 		BUS_SPACE_WRT4_ITL(outbound_queue, req);
272 		BUS_SPACE_RD4_ITL(outbound_intstatus);
273 		return 0;
274 	}
275 
276 	return -1;
277 }
278 
279 static int hptiop_wait_ready_mv(struct hpt_iop_hba * hba, u_int32_t millisec)
280 {
281 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_NOP, millisec))
282 		return -1;
283 
284 	return 0;
285 }
286 
287 static void hptiop_request_callback_itl(struct hpt_iop_hba * hba,
288 							u_int32_t index)
289 {
290 	struct hpt_iop_srb *srb;
291 	struct hpt_iop_request_scsi_command *req=NULL;
292 	union ccb *ccb;
293 	u_int8_t *cdb;
294 	u_int32_t result, temp, dxfer;
295 	u_int64_t temp64;
296 
297 	if (index & IOPMU_QUEUE_MASK_HOST_BITS) { /*host req*/
298 		if (hba->firmware_version > 0x01020000 ||
299 			hba->interface_version > 0x01020000) {
300 			srb = hba->srb[index & ~(u_int32_t)
301 				(IOPMU_QUEUE_ADDR_HOST_BIT
302 				| IOPMU_QUEUE_REQUEST_RESULT_BIT)];
303 			req = (struct hpt_iop_request_scsi_command *)srb;
304 			if (index & IOPMU_QUEUE_REQUEST_RESULT_BIT)
305 				result = IOP_RESULT_SUCCESS;
306 			else
307 				result = req->header.result;
308 		} else {
309 			srb = hba->srb[index &
310 				~(u_int32_t)IOPMU_QUEUE_ADDR_HOST_BIT];
311 			req = (struct hpt_iop_request_scsi_command *)srb;
312 			result = req->header.result;
313 		}
314 		dxfer = req->dataxfer_length;
315 		goto srb_complete;
316 	}
317 
318 	/*iop req*/
319 	temp = bus_space_read_4(hba->bar0t, hba->bar0h, index +
320 		offsetof(struct hpt_iop_request_header, type));
321 	result = bus_space_read_4(hba->bar0t, hba->bar0h, index +
322 		offsetof(struct hpt_iop_request_header, result));
323 	switch(temp) {
324 	case IOP_REQUEST_TYPE_IOCTL_COMMAND:
325 	{
326 		temp64 = 0;
327 		bus_space_write_region_4(hba->bar0t, hba->bar0h, index +
328 			offsetof(struct hpt_iop_request_header, context),
329 			(u_int32_t *)&temp64, 2);
330 		wakeup((void *)((unsigned long)hba->u.itl.mu + index));
331 		break;
332 	}
333 
334 	case IOP_REQUEST_TYPE_SCSI_COMMAND:
335 		bus_space_read_region_4(hba->bar0t, hba->bar0h, index +
336 			offsetof(struct hpt_iop_request_header, context),
337 			(u_int32_t *)&temp64, 2);
338 		srb = (struct hpt_iop_srb *)(unsigned long)temp64;
339 		dxfer = bus_space_read_4(hba->bar0t, hba->bar0h,
340 				index + offsetof(struct hpt_iop_request_scsi_command,
341 				dataxfer_length));
342 srb_complete:
343 		ccb = (union ccb *)srb->ccb;
344 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
345 			cdb = ccb->csio.cdb_io.cdb_ptr;
346 		else
347 			cdb = ccb->csio.cdb_io.cdb_bytes;
348 
349 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
350 			ccb->ccb_h.status = CAM_REQ_CMP;
351 			goto scsi_done;
352 		}
353 
354 		switch (result) {
355 		case IOP_RESULT_SUCCESS:
356 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
357 			case CAM_DIR_IN:
358 				bus_dmamap_sync(hba->io_dmat,
359 					srb->dma_map, BUS_DMASYNC_POSTREAD);
360 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
361 				break;
362 			case CAM_DIR_OUT:
363 				bus_dmamap_sync(hba->io_dmat,
364 					srb->dma_map, BUS_DMASYNC_POSTWRITE);
365 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
366 				break;
367 			}
368 
369 			ccb->ccb_h.status = CAM_REQ_CMP;
370 			break;
371 
372 		case IOP_RESULT_BAD_TARGET:
373 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
374 			break;
375 		case IOP_RESULT_BUSY:
376 			ccb->ccb_h.status = CAM_BUSY;
377 			break;
378 		case IOP_RESULT_INVALID_REQUEST:
379 			ccb->ccb_h.status = CAM_REQ_INVALID;
380 			break;
381 		case IOP_RESULT_FAIL:
382 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
383 			break;
384 		case IOP_RESULT_RESET:
385 			ccb->ccb_h.status = CAM_BUSY;
386 			break;
387 		case IOP_RESULT_CHECK_CONDITION:
388 			memset(&ccb->csio.sense_data, 0,
389 			    sizeof(ccb->csio.sense_data));
390 			if (dxfer < ccb->csio.sense_len)
391 				ccb->csio.sense_resid = ccb->csio.sense_len -
392 				    dxfer;
393 			else
394 				ccb->csio.sense_resid = 0;
395 			if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {/*iop*/
396 				bus_space_read_region_1(hba->bar0t, hba->bar0h,
397 					index + offsetof(struct hpt_iop_request_scsi_command,
398 					sg_list), (u_int8_t *)&ccb->csio.sense_data,
399 					MIN(dxfer, sizeof(ccb->csio.sense_data)));
400 			} else {
401 				memcpy(&ccb->csio.sense_data, &req->sg_list,
402 					MIN(dxfer, sizeof(ccb->csio.sense_data)));
403 			}
404 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
405 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
406 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
407 			break;
408 		default:
409 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
410 			break;
411 		}
412 scsi_done:
413 		if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS)
414 			BUS_SPACE_WRT4_ITL(outbound_queue, index);
415 
416 		ccb->csio.resid = ccb->csio.dxfer_len - dxfer;
417 
418 		hptiop_free_srb(hba, srb);
419 		xpt_done(ccb);
420 		break;
421 	}
422 }
423 
424 static void hptiop_drain_outbound_queue_itl(struct hpt_iop_hba *hba)
425 {
426 	u_int32_t req, temp;
427 
428 	while ((req = BUS_SPACE_RD4_ITL(outbound_queue)) !=IOPMU_QUEUE_EMPTY) {
429 		if (req & IOPMU_QUEUE_MASK_HOST_BITS)
430 			hptiop_request_callback_itl(hba, req);
431 		else {
432 			temp = bus_space_read_4(hba->bar0t,
433 					hba->bar0h,req +
434 					offsetof(struct hpt_iop_request_header,
435 						flags));
436 			if (temp & IOP_REQUEST_FLAG_SYNC_REQUEST) {
437 				u_int64_t temp64;
438 				bus_space_read_region_4(hba->bar0t,
439 					hba->bar0h,req +
440 					offsetof(struct hpt_iop_request_header,
441 						context),
442 					(u_int32_t *)&temp64, 2);
443 				if (temp64) {
444 					hptiop_request_callback_itl(hba, req);
445 				} else {
446 					temp64 = 1;
447 					bus_space_write_region_4(hba->bar0t,
448 						hba->bar0h,req +
449 						offsetof(struct hpt_iop_request_header,
450 							context),
451 						(u_int32_t *)&temp64, 2);
452 				}
453 			} else
454 				hptiop_request_callback_itl(hba, req);
455 		}
456 	}
457 }
458 
459 static int hptiop_intr_itl(struct hpt_iop_hba * hba)
460 {
461 	u_int32_t status;
462 	int ret = 0;
463 
464 	status = BUS_SPACE_RD4_ITL(outbound_intstatus);
465 
466 	if (status & IOPMU_OUTBOUND_INT_MSG0) {
467 		u_int32_t msg = BUS_SPACE_RD4_ITL(outbound_msgaddr0);
468 		KdPrint(("hptiop: received outbound msg %x\n", msg));
469 		BUS_SPACE_WRT4_ITL(outbound_intstatus, IOPMU_OUTBOUND_INT_MSG0);
470 		hptiop_os_message_callback(hba, msg);
471 		ret = 1;
472 	}
473 
474 	if (status & IOPMU_OUTBOUND_INT_POSTQUEUE) {
475 		hptiop_drain_outbound_queue_itl(hba);
476 		ret = 1;
477 	}
478 
479 	return ret;
480 }
481 
482 static void hptiop_request_callback_mv(struct hpt_iop_hba * hba,
483 							u_int64_t _tag)
484 {
485 	u_int32_t context = (u_int32_t)_tag;
486 
487 	if (context & MVIOP_CMD_TYPE_SCSI) {
488 		struct hpt_iop_srb *srb;
489 		struct hpt_iop_request_scsi_command *req;
490 		union ccb *ccb;
491 		u_int8_t *cdb;
492 
493 		srb = hba->srb[context >> MVIOP_REQUEST_NUMBER_START_BIT];
494 		req = (struct hpt_iop_request_scsi_command *)srb;
495 		ccb = (union ccb *)srb->ccb;
496 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
497 			cdb = ccb->csio.cdb_io.cdb_ptr;
498 		else
499 			cdb = ccb->csio.cdb_io.cdb_bytes;
500 
501 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
502 			ccb->ccb_h.status = CAM_REQ_CMP;
503 			goto scsi_done;
504 		}
505 		if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
506 			req->header.result = IOP_RESULT_SUCCESS;
507 
508 		switch (req->header.result) {
509 		case IOP_RESULT_SUCCESS:
510 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
511 			case CAM_DIR_IN:
512 				bus_dmamap_sync(hba->io_dmat,
513 					srb->dma_map, BUS_DMASYNC_POSTREAD);
514 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
515 				break;
516 			case CAM_DIR_OUT:
517 				bus_dmamap_sync(hba->io_dmat,
518 					srb->dma_map, BUS_DMASYNC_POSTWRITE);
519 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
520 				break;
521 			}
522 			ccb->ccb_h.status = CAM_REQ_CMP;
523 			break;
524 		case IOP_RESULT_BAD_TARGET:
525 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
526 			break;
527 		case IOP_RESULT_BUSY:
528 			ccb->ccb_h.status = CAM_BUSY;
529 			break;
530 		case IOP_RESULT_INVALID_REQUEST:
531 			ccb->ccb_h.status = CAM_REQ_INVALID;
532 			break;
533 		case IOP_RESULT_FAIL:
534 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
535 			break;
536 		case IOP_RESULT_RESET:
537 			ccb->ccb_h.status = CAM_BUSY;
538 			break;
539 		case IOP_RESULT_CHECK_CONDITION:
540 			memset(&ccb->csio.sense_data, 0,
541 			    sizeof(ccb->csio.sense_data));
542 			if (req->dataxfer_length < ccb->csio.sense_len)
543 				ccb->csio.sense_resid = ccb->csio.sense_len -
544 				    req->dataxfer_length;
545 			else
546 				ccb->csio.sense_resid = 0;
547 			memcpy(&ccb->csio.sense_data, &req->sg_list,
548 				MIN(req->dataxfer_length, sizeof(ccb->csio.sense_data)));
549 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
550 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
551 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
552 			break;
553 		default:
554 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
555 			break;
556 		}
557 scsi_done:
558 		ccb->csio.resid = ccb->csio.dxfer_len - req->dataxfer_length;
559 
560 		hptiop_free_srb(hba, srb);
561 		xpt_done(ccb);
562 	} else if (context & MVIOP_CMD_TYPE_IOCTL) {
563 		struct hpt_iop_request_ioctl_command *req = hba->ctlcfg_ptr;
564 		if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
565 			hba->config_done = 1;
566 		else
567 			hba->config_done = -1;
568 		wakeup(req);
569 	} else if (context &
570 			(MVIOP_CMD_TYPE_SET_CONFIG |
571 				MVIOP_CMD_TYPE_GET_CONFIG))
572 		hba->config_done = 1;
573 	else {
574 		device_printf(hba->pcidev, "wrong callback type\n");
575 	}
576 }
577 
578 static void hptiop_drain_outbound_queue_mv(struct hpt_iop_hba * hba)
579 {
580 	u_int64_t req;
581 
582 	while ((req = hptiop_mv_outbound_read(hba))) {
583 		if (req & MVIOP_MU_QUEUE_ADDR_HOST_BIT) {
584 			if (req & MVIOP_MU_QUEUE_REQUEST_RETURN_CONTEXT) {
585 				hptiop_request_callback_mv(hba, req);
586 			}
587 		}
588 	}
589 }
590 
591 static int hptiop_intr_mv(struct hpt_iop_hba * hba)
592 {
593 	u_int32_t status;
594 	int ret = 0;
595 
596 	status = BUS_SPACE_RD4_MV0(outbound_doorbell);
597 
598 	if (status)
599 		BUS_SPACE_WRT4_MV0(outbound_doorbell, ~status);
600 
601 	if (status & MVIOP_MU_OUTBOUND_INT_MSG) {
602 		u_int32_t msg = BUS_SPACE_RD4_MV2(outbound_msg);
603 		KdPrint(("hptiop: received outbound msg %x\n", msg));
604 		hptiop_os_message_callback(hba, msg);
605 		ret = 1;
606 	}
607 
608 	if (status & MVIOP_MU_OUTBOUND_INT_POSTQUEUE) {
609 		hptiop_drain_outbound_queue_mv(hba);
610 		ret = 1;
611 	}
612 
613 	return ret;
614 }
615 
616 static int hptiop_send_sync_request_itl(struct hpt_iop_hba * hba,
617 					u_int32_t req32, u_int32_t millisec)
618 {
619 	u_int32_t i;
620 	u_int64_t temp64;
621 
622 	BUS_SPACE_WRT4_ITL(inbound_queue, req32);
623 	BUS_SPACE_RD4_ITL(outbound_intstatus);
624 
625 	for (i = 0; i < millisec; i++) {
626 		hptiop_intr_itl(hba);
627 		bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
628 			offsetof(struct hpt_iop_request_header, context),
629 			(u_int32_t *)&temp64, 2);
630 		if (temp64)
631 			return 0;
632 		DELAY(1000);
633 	}
634 
635 	return -1;
636 }
637 
638 static int hptiop_send_sync_request_mv(struct hpt_iop_hba *hba,
639 					void *req, u_int32_t millisec)
640 {
641 	u_int32_t i;
642 	u_int64_t phy_addr;
643 	hba->config_done = 0;
644 
645 	phy_addr = hba->ctlcfgcmd_phy |
646 			(u_int64_t)MVIOP_MU_QUEUE_ADDR_HOST_BIT;
647 	((struct hpt_iop_request_get_config *)req)->header.flags |=
648 		IOP_REQUEST_FLAG_SYNC_REQUEST |
649 		IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
650 	hptiop_mv_inbound_write(phy_addr, hba);
651 	BUS_SPACE_RD4_MV0(outbound_intmask);
652 
653 	for (i = 0; i < millisec; i++) {
654 		hptiop_intr_mv(hba);
655 		if (hba->config_done)
656 			return 0;
657 		DELAY(1000);
658 	}
659 	return -1;
660 }
661 
662 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
663 					u_int32_t msg, u_int32_t millisec)
664 {
665 	u_int32_t i;
666 
667 	hba->msg_done = 0;
668 	hba->ops->post_msg(hba, msg);
669 
670 	for (i=0; i<millisec; i++) {
671 		hba->ops->iop_intr(hba);
672 		if (hba->msg_done)
673 			break;
674 		DELAY(1000);
675 	}
676 
677 	return hba->msg_done? 0 : -1;
678 }
679 
680 static int hptiop_get_config_itl(struct hpt_iop_hba * hba,
681 				struct hpt_iop_request_get_config * config)
682 {
683 	u_int32_t req32;
684 
685 	config->header.size = sizeof(struct hpt_iop_request_get_config);
686 	config->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
687 	config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
688 	config->header.result = IOP_RESULT_PENDING;
689 	config->header.context = 0;
690 
691 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
692 	if (req32 == IOPMU_QUEUE_EMPTY)
693 		return -1;
694 
695 	bus_space_write_region_4(hba->bar0t, hba->bar0h,
696 			req32, (u_int32_t *)config,
697 			sizeof(struct hpt_iop_request_header) >> 2);
698 
699 	if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
700 		KdPrint(("hptiop: get config send cmd failed"));
701 		return -1;
702 	}
703 
704 	bus_space_read_region_4(hba->bar0t, hba->bar0h,
705 			req32, (u_int32_t *)config,
706 			sizeof(struct hpt_iop_request_get_config) >> 2);
707 
708 	BUS_SPACE_WRT4_ITL(outbound_queue, req32);
709 
710 	return 0;
711 }
712 
713 static int hptiop_get_config_mv(struct hpt_iop_hba * hba,
714 				struct hpt_iop_request_get_config * config)
715 {
716 	struct hpt_iop_request_get_config *req;
717 
718 	if (!(req = hba->ctlcfg_ptr))
719 		return -1;
720 
721 	req->header.flags = 0;
722 	req->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
723 	req->header.size = sizeof(struct hpt_iop_request_get_config);
724 	req->header.result = IOP_RESULT_PENDING;
725 	req->header.context = MVIOP_CMD_TYPE_GET_CONFIG;
726 
727 	if (hptiop_send_sync_request_mv(hba, req, 20000)) {
728 		KdPrint(("hptiop: get config send cmd failed"));
729 		return -1;
730 	}
731 
732 	*config = *req;
733 	return 0;
734 }
735 
736 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
737 				struct hpt_iop_request_set_config *config)
738 {
739 	u_int32_t req32;
740 
741 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
742 
743 	if (req32 == IOPMU_QUEUE_EMPTY)
744 		return -1;
745 
746 	config->header.size = sizeof(struct hpt_iop_request_set_config);
747 	config->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
748 	config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
749 	config->header.result = IOP_RESULT_PENDING;
750 	config->header.context = 0;
751 
752 	bus_space_write_region_4(hba->bar0t, hba->bar0h, req32,
753 		(u_int32_t *)config,
754 		sizeof(struct hpt_iop_request_set_config) >> 2);
755 
756 	if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
757 		KdPrint(("hptiop: set config send cmd failed"));
758 		return -1;
759 	}
760 
761 	BUS_SPACE_WRT4_ITL(outbound_queue, req32);
762 
763 	return 0;
764 }
765 
766 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
767 				struct hpt_iop_request_set_config *config)
768 {
769 	struct hpt_iop_request_set_config *req;
770 
771 	if (!(req = hba->ctlcfg_ptr))
772 		return -1;
773 
774 	memcpy((u_int8_t *)req + sizeof(struct hpt_iop_request_header),
775 		(u_int8_t *)config + sizeof(struct hpt_iop_request_header),
776 		sizeof(struct hpt_iop_request_set_config) -
777 			sizeof(struct hpt_iop_request_header));
778 
779 	req->header.flags = 0;
780 	req->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
781 	req->header.size = sizeof(struct hpt_iop_request_set_config);
782 	req->header.result = IOP_RESULT_PENDING;
783 	req->header.context = MVIOP_CMD_TYPE_SET_CONFIG;
784 
785 	if (hptiop_send_sync_request_mv(hba, req, 20000)) {
786 		KdPrint(("hptiop: set config send cmd failed"));
787 		return -1;
788 	}
789 
790 	return 0;
791 }
792 
793 static int hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
794 				u_int32_t req32,
795 				struct hpt_iop_ioctl_param *pParams)
796 {
797 	u_int64_t temp64;
798 	struct hpt_iop_request_ioctl_command req;
799 
800 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
801 			(hba->max_request_size -
802 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
803 		device_printf(hba->pcidev, "request size beyond max value");
804 		return -1;
805 	}
806 
807 	req.header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
808 		+ pParams->nInBufferSize;
809 	req.header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
810 	req.header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
811 	req.header.result = IOP_RESULT_PENDING;
812 	req.header.context = req32 + (u_int64_t)(unsigned long)hba->u.itl.mu;
813 	req.ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
814 	req.inbuf_size = pParams->nInBufferSize;
815 	req.outbuf_size = pParams->nOutBufferSize;
816 	req.bytes_returned = 0;
817 
818 	bus_space_write_region_4(hba->bar0t, hba->bar0h, req32, (u_int32_t *)&req,
819 		offsetof(struct hpt_iop_request_ioctl_command, buf)>>2);
820 
821 	hptiop_lock_adapter(hba);
822 
823 	BUS_SPACE_WRT4_ITL(inbound_queue, req32);
824 	BUS_SPACE_RD4_ITL(outbound_intstatus);
825 
826 	bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
827 		offsetof(struct hpt_iop_request_ioctl_command, header.context),
828 		(u_int32_t *)&temp64, 2);
829 	while (temp64) {
830 		if (hptiop_sleep(hba, (void *)((unsigned long)hba->u.itl.mu + req32),
831 				0, "hptctl", HPT_OSM_TIMEOUT)==0)
832 			break;
833 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
834 		bus_space_read_region_4(hba->bar0t, hba->bar0h,req32 +
835 			offsetof(struct hpt_iop_request_ioctl_command,
836 				header.context),
837 			(u_int32_t *)&temp64, 2);
838 	}
839 
840 	hptiop_unlock_adapter(hba);
841 	return 0;
842 }
843 
844 static int hptiop_bus_space_copyin(struct hpt_iop_hba *hba, u_int32_t bus, void *user, int size)
845 {
846 	unsigned char byte;
847 	int i;
848 
849 	for (i=0; i<size; i++) {
850 		if (copyin((u_int8_t *)user + i, &byte, 1))
851 			return -1;
852 		bus_space_write_1(hba->bar0t, hba->bar0h, bus + i, byte);
853 	}
854 
855 	return 0;
856 }
857 
858 static int hptiop_bus_space_copyout(struct hpt_iop_hba *hba, u_int32_t bus, void *user, int size)
859 {
860 	unsigned char byte;
861 	int i;
862 
863 	for (i=0; i<size; i++) {
864 		byte = bus_space_read_1(hba->bar0t, hba->bar0h, bus + i);
865 		if (copyout(&byte, (u_int8_t *)user + i, 1))
866 			return -1;
867 	}
868 
869 	return 0;
870 }
871 
872 static int hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
873 				struct hpt_iop_ioctl_param * pParams)
874 {
875 	u_int32_t req32;
876 	u_int32_t result;
877 
878 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
879 		(pParams->Magic != HPT_IOCTL_MAGIC32))
880 		return EFAULT;
881 
882 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
883 	if (req32 == IOPMU_QUEUE_EMPTY)
884 		return EFAULT;
885 
886 	if (pParams->nInBufferSize)
887 		if (hptiop_bus_space_copyin(hba, req32 +
888 			offsetof(struct hpt_iop_request_ioctl_command, buf),
889 			(void *)pParams->lpInBuffer, pParams->nInBufferSize))
890 			goto invalid;
891 
892 	if (hptiop_post_ioctl_command_itl(hba, req32, pParams))
893 		goto invalid;
894 
895 	result = bus_space_read_4(hba->bar0t, hba->bar0h, req32 +
896 			offsetof(struct hpt_iop_request_ioctl_command,
897 				header.result));
898 
899 	if (result == IOP_RESULT_SUCCESS) {
900 		if (pParams->nOutBufferSize)
901 			if (hptiop_bus_space_copyout(hba, req32 +
902 				offsetof(struct hpt_iop_request_ioctl_command, buf) +
903 					((pParams->nInBufferSize + 3) & ~3),
904 				(void *)pParams->lpOutBuffer, pParams->nOutBufferSize))
905 				goto invalid;
906 
907 		if (pParams->lpBytesReturned) {
908 			if (hptiop_bus_space_copyout(hba, req32 +
909 				offsetof(struct hpt_iop_request_ioctl_command, bytes_returned),
910 				(void *)pParams->lpBytesReturned, sizeof(unsigned  long)))
911 				goto invalid;
912 		}
913 
914 		BUS_SPACE_WRT4_ITL(outbound_queue, req32);
915 
916 		return 0;
917 	} else{
918 invalid:
919 		BUS_SPACE_WRT4_ITL(outbound_queue, req32);
920 
921 		return EFAULT;
922 	}
923 }
924 
925 static int hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
926 				struct hpt_iop_request_ioctl_command *req,
927 				struct hpt_iop_ioctl_param *pParams)
928 {
929 	u_int64_t req_phy;
930 	int size = 0;
931 
932 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
933 			(hba->max_request_size -
934 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
935 		device_printf(hba->pcidev, "request size beyond max value");
936 		return -1;
937 	}
938 
939 	req->ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
940 	req->inbuf_size = pParams->nInBufferSize;
941 	req->outbuf_size = pParams->nOutBufferSize;
942 	req->header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
943 					+ pParams->nInBufferSize;
944 	req->header.context = (u_int64_t)MVIOP_CMD_TYPE_IOCTL;
945 	req->header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
946 	req->header.result = IOP_RESULT_PENDING;
947 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
948 	size = req->header.size >> 8;
949 	size = size > 3 ? 3 : size;
950 	req_phy = hba->ctlcfgcmd_phy | MVIOP_MU_QUEUE_ADDR_HOST_BIT | size;
951 	hptiop_mv_inbound_write(req_phy, hba);
952 
953 	BUS_SPACE_RD4_MV0(outbound_intmask);
954 
955 	while (hba->config_done == 0) {
956 		if (hptiop_sleep(hba, req, 0,
957 			"hptctl", HPT_OSM_TIMEOUT)==0)
958 			continue;
959 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
960 	}
961 	return 0;
962 }
963 
964 static int hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
965 				struct hpt_iop_ioctl_param *pParams)
966 {
967 	struct hpt_iop_request_ioctl_command *req;
968 
969 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
970 		(pParams->Magic != HPT_IOCTL_MAGIC32))
971 		return EFAULT;
972 
973 	req = (struct hpt_iop_request_ioctl_command *)(hba->ctlcfg_ptr);
974 	hba->config_done = 0;
975 	hptiop_lock_adapter(hba);
976 	if (pParams->nInBufferSize)
977 		if (copyin((void *)pParams->lpInBuffer,
978 				req->buf, pParams->nInBufferSize))
979 			goto invalid;
980 	if (hptiop_post_ioctl_command_mv(hba, req, pParams))
981 		goto invalid;
982 
983 	if (hba->config_done == 1) {
984 		if (pParams->nOutBufferSize)
985 			if (copyout(req->buf +
986 				((pParams->nInBufferSize + 3) & ~3),
987 				(void *)pParams->lpOutBuffer,
988 				pParams->nOutBufferSize))
989 				goto invalid;
990 
991 		if (pParams->lpBytesReturned)
992 			if (copyout(&req->bytes_returned,
993 				(void*)pParams->lpBytesReturned,
994 				sizeof(u_int32_t)))
995 				goto invalid;
996 		hptiop_unlock_adapter(hba);
997 		return 0;
998 	} else{
999 invalid:
1000 		hptiop_unlock_adapter(hba);
1001 		return EFAULT;
1002 	}
1003 }
1004 
1005 static int  hptiop_rescan_bus(struct hpt_iop_hba * hba)
1006 {
1007 	union ccb           *ccb;
1008 
1009 	if ((ccb = xpt_alloc_ccb()) == NULL)
1010 		return(ENOMEM);
1011 	if (xpt_create_path(&ccb->ccb_h.path, xpt_periph, cam_sim_path(hba->sim),
1012 		CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1013 		xpt_free_ccb(ccb);
1014 		return(EIO);
1015 	}
1016 
1017 	xpt_setup_ccb(&ccb->ccb_h, ccb->ccb_h.path, 5/*priority (low)*/);
1018 	ccb->ccb_h.func_code = XPT_SCAN_BUS;
1019 	ccb->ccb_h.cbfcnp = hptiop_bus_scan_cb;
1020 	ccb->crcn.flags = CAM_FLAG_NONE;
1021 	xpt_action(ccb);
1022 	return(0);
1023 }
1024 
1025 static void hptiop_bus_scan_cb(struct cam_periph *periph, union ccb *ccb)
1026 {
1027 	xpt_free_path(ccb->ccb_h.path);
1028 	kfree(ccb, M_TEMP);
1029 }
1030 
1031 static  bus_dmamap_callback_t   hptiop_map_srb;
1032 static  bus_dmamap_callback_t   hptiop_post_scsi_command;
1033 static  bus_dmamap_callback_t   hptiop_mv_map_ctlcfg;
1034 
1035 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba)
1036 {
1037 	hba->bar0_rid = 0x10;
1038 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1039 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1040 
1041 	if (hba->bar0_res == NULL) {
1042 		device_printf(hba->pcidev,
1043 			"failed to get iop base adrress.\n");
1044 		return -1;
1045 	}
1046 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1047 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1048 	hba->u.itl.mu = (struct hpt_iopmu_itl *)
1049 				rman_get_virtual(hba->bar0_res);
1050 
1051 	if (!hba->u.itl.mu) {
1052 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1053 					hba->bar0_rid, hba->bar0_res);
1054 		device_printf(hba->pcidev, "alloc mem res failed\n");
1055 		return -1;
1056 	}
1057 
1058 	return 0;
1059 }
1060 
1061 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba)
1062 {
1063 	hba->bar0_rid = 0x10;
1064 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1065 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1066 
1067 	if (hba->bar0_res == NULL) {
1068 		device_printf(hba->pcidev, "failed to get iop bar0.\n");
1069 		return -1;
1070 	}
1071 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1072 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1073 	hba->u.mv.regs = (struct hpt_iopmv_regs *)
1074 				rman_get_virtual(hba->bar0_res);
1075 
1076 	if (!hba->u.mv.regs) {
1077 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1078 					hba->bar0_rid, hba->bar0_res);
1079 		device_printf(hba->pcidev, "alloc bar0 mem res failed\n");
1080 		return -1;
1081 	}
1082 
1083 	hba->bar2_rid = 0x18;
1084 	hba->bar2_res = bus_alloc_resource_any(hba->pcidev,
1085 			SYS_RES_MEMORY, &hba->bar2_rid, RF_ACTIVE);
1086 
1087 	if (hba->bar2_res == NULL) {
1088 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1089 					hba->bar0_rid, hba->bar0_res);
1090 		device_printf(hba->pcidev, "failed to get iop bar2.\n");
1091 		return -1;
1092 	}
1093 
1094 	hba->bar2t = rman_get_bustag(hba->bar2_res);
1095 	hba->bar2h = rman_get_bushandle(hba->bar2_res);
1096 	hba->u.mv.mu = (struct hpt_iopmu_mv *)rman_get_virtual(hba->bar2_res);
1097 
1098 	if (!hba->u.mv.mu) {
1099 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1100 					hba->bar0_rid, hba->bar0_res);
1101 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1102 					hba->bar2_rid, hba->bar2_res);
1103 		device_printf(hba->pcidev, "alloc mem bar2 res failed\n");
1104 		return -1;
1105 	}
1106 
1107 	return 0;
1108 }
1109 
1110 static void hptiop_release_pci_res_itl(struct hpt_iop_hba *hba)
1111 {
1112 	if (hba->bar0_res)
1113 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1114 			hba->bar0_rid, hba->bar0_res);
1115 }
1116 
1117 static void hptiop_release_pci_res_mv(struct hpt_iop_hba *hba)
1118 {
1119 	if (hba->bar0_res)
1120 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1121 			hba->bar0_rid, hba->bar0_res);
1122 	if (hba->bar2_res)
1123 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1124 			hba->bar2_rid, hba->bar2_res);
1125 }
1126 
1127 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba)
1128 {
1129 	if (bus_dma_tag_create(hba->parent_dmat,
1130 				1,
1131 				0,
1132 				BUS_SPACE_MAXADDR_32BIT,
1133 				BUS_SPACE_MAXADDR,
1134 				NULL, NULL,
1135 				0x800 - 0x8,
1136 				1,
1137 				BUS_SPACE_MAXSIZE_32BIT,
1138 				BUS_DMA_ALLOCNOW,
1139 				&hba->ctlcfg_dmat)) {
1140 		device_printf(hba->pcidev, "alloc ctlcfg_dmat failed\n");
1141 		return -1;
1142 	}
1143 
1144 	if (bus_dmamem_alloc(hba->ctlcfg_dmat, (void **)&hba->ctlcfg_ptr,
1145 		BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1146 		&hba->ctlcfg_dmamap) != 0) {
1147 			device_printf(hba->pcidev,
1148 					"bus_dmamem_alloc failed!\n");
1149 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1150 			return -1;
1151 	}
1152 
1153 	if (bus_dmamap_load(hba->ctlcfg_dmat,
1154 			hba->ctlcfg_dmamap, hba->ctlcfg_ptr,
1155 			MVIOP_IOCTLCFG_SIZE,
1156 			hptiop_mv_map_ctlcfg, hba, 0)) {
1157 		device_printf(hba->pcidev, "bus_dmamap_load failed!\n");
1158 		if (hba->ctlcfg_dmat) {
1159 			bus_dmamem_free(hba->ctlcfg_dmat,
1160 				hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1161 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1162 		}
1163 		return -1;
1164 	}
1165 
1166 	return 0;
1167 }
1168 
1169 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba)
1170 {
1171 	if (hba->ctlcfg_dmat) {
1172 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
1173 		bus_dmamem_free(hba->ctlcfg_dmat,
1174 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1175 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
1176 	}
1177 
1178 	return 0;
1179 }
1180 
1181 /*
1182  * CAM driver interface
1183  */
1184 static device_method_t driver_methods[] = {
1185 	/* Device interface */
1186 	DEVMETHOD(device_probe,     hptiop_probe),
1187 	DEVMETHOD(device_attach,    hptiop_attach),
1188 	DEVMETHOD(device_detach,    hptiop_detach),
1189 	DEVMETHOD(device_shutdown,  hptiop_shutdown),
1190 	{ 0, 0 }
1191 };
1192 
1193 static struct hptiop_adapter_ops hptiop_itl_ops = {
1194 	.iop_wait_ready    = hptiop_wait_ready_itl,
1195 	.internal_memalloc = 0,
1196 	.internal_memfree  = 0,
1197 	.alloc_pci_res     = hptiop_alloc_pci_res_itl,
1198 	.release_pci_res   = hptiop_release_pci_res_itl,
1199 	.enable_intr       = hptiop_enable_intr_itl,
1200 	.disable_intr      = hptiop_disable_intr_itl,
1201 	.get_config        = hptiop_get_config_itl,
1202 	.set_config        = hptiop_set_config_itl,
1203 	.iop_intr          = hptiop_intr_itl,
1204 	.post_msg          = hptiop_post_msg_itl,
1205 	.post_req          = hptiop_post_req_itl,
1206 	.do_ioctl          = hptiop_do_ioctl_itl,
1207 };
1208 
1209 static struct hptiop_adapter_ops hptiop_mv_ops = {
1210 	.iop_wait_ready    = hptiop_wait_ready_mv,
1211 	.internal_memalloc = hptiop_internal_memalloc_mv,
1212 	.internal_memfree  = hptiop_internal_memfree_mv,
1213 	.alloc_pci_res     = hptiop_alloc_pci_res_mv,
1214 	.release_pci_res   = hptiop_release_pci_res_mv,
1215 	.enable_intr       = hptiop_enable_intr_mv,
1216 	.disable_intr      = hptiop_disable_intr_mv,
1217 	.get_config        = hptiop_get_config_mv,
1218 	.set_config        = hptiop_set_config_mv,
1219 	.iop_intr          = hptiop_intr_mv,
1220 	.post_msg          = hptiop_post_msg_mv,
1221 	.post_req          = hptiop_post_req_mv,
1222 	.do_ioctl          = hptiop_do_ioctl_mv,
1223 };
1224 
1225 static driver_t hptiop_pci_driver = {
1226 	driver_name,
1227 	driver_methods,
1228 	sizeof(struct hpt_iop_hba)
1229 };
1230 
1231 DRIVER_MODULE(hptiop, pci, hptiop_pci_driver, hptiop_devclass, NULL, NULL);
1232 MODULE_VERSION(hptiop, 1);
1233 
1234 static int hptiop_probe(device_t dev)
1235 {
1236 	struct hpt_iop_hba *hba;
1237 	u_int32_t id;
1238 	static char buf[256];
1239 	int sas = 0;
1240 	struct hptiop_adapter_ops *ops;
1241 
1242 	if (pci_get_vendor(dev) != 0x1103)
1243 		return (ENXIO);
1244 
1245 	id = pci_get_device(dev);
1246 
1247 	switch (id) {
1248 		case 0x4322:
1249 		case 0x4321:
1250 		case 0x4320:
1251 			sas = 1;
1252 		case 0x3220:
1253 		case 0x3320:
1254 		case 0x3410:
1255 		case 0x3520:
1256 		case 0x3510:
1257 		case 0x3511:
1258 		case 0x3521:
1259 		case 0x3522:
1260 		case 0x3540:
1261 			ops = &hptiop_itl_ops;
1262 			break;
1263 		case 0x3120:
1264 		case 0x3122:
1265 		case 0x3020:
1266 			ops = &hptiop_mv_ops;
1267 			break;
1268 		default:
1269 			return (ENXIO);
1270 	}
1271 
1272 	device_printf(dev, "adapter at PCI %d:%d:%d, IRQ %d\n",
1273 		pci_get_bus(dev), pci_get_slot(dev),
1274 		pci_get_function(dev), pci_get_irq(dev));
1275 
1276 	ksprintf(buf, "RocketRAID %x %s Controller",
1277 				id, sas ? "SAS" : "SATA");
1278 	device_set_desc_copy(dev, buf);
1279 
1280 	hba = (struct hpt_iop_hba *)device_get_softc(dev);
1281 	bzero(hba, sizeof(struct hpt_iop_hba));
1282 	hba->ops = ops;
1283 
1284 	KdPrint(("hba->ops=%p\n", hba->ops));
1285 	return 0;
1286 }
1287 
1288 static int hptiop_attach(device_t dev)
1289 {
1290 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)device_get_softc(dev);
1291 	struct hpt_iop_request_get_config  iop_config;
1292 	struct hpt_iop_request_set_config  set_config;
1293 	int rid = 0;
1294 	struct cam_devq *devq;
1295 	struct ccb_setasync ccb;
1296 	u_int32_t unit = device_get_unit(dev);
1297 
1298 	device_printf(dev, "RocketRAID 3xxx/4xxx controller driver %s\n",
1299 	    driver_version);
1300 
1301 	KdPrint(("hptiop: attach(%d, %d/%d/%d) ops=%p\n", unit,
1302 		pci_get_bus(dev), pci_get_slot(dev),
1303 		pci_get_function(dev), hba->ops));
1304 
1305 	pci_enable_busmaster(dev);
1306 	hba->pcidev = dev;
1307 
1308 	if (hba->ops->alloc_pci_res(hba))
1309 		return ENXIO;
1310 
1311 	if (hba->ops->iop_wait_ready(hba, 2000)) {
1312 		device_printf(dev, "adapter is not ready\n");
1313 		goto release_pci_res;
1314 	}
1315 
1316 	lockinit(&hba->lock, "hptioplock", 0, LK_CANRECURSE);
1317 
1318 	if (bus_dma_tag_create(NULL,/* parent */
1319 			1,  /* alignment */
1320 			0, /* boundary */
1321 			BUS_SPACE_MAXADDR,  /* lowaddr */
1322 			BUS_SPACE_MAXADDR,  /* highaddr */
1323 			NULL, NULL,         /* filter, filterarg */
1324 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsize */
1325 			BUS_SPACE_UNRESTRICTED, /* nsegments */
1326 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1327 			0,      /* flags */
1328 			&hba->parent_dmat   /* tag */))
1329 	{
1330 		device_printf(dev, "alloc parent_dmat failed\n");
1331 		goto release_pci_res;
1332 	}
1333 
1334 	if (hba->ops->internal_memalloc) {
1335 		if (hba->ops->internal_memalloc(hba)) {
1336 			device_printf(dev, "alloc srb_dmat failed\n");
1337 			goto destroy_parent_tag;
1338 		}
1339 	}
1340 
1341 	if (hba->ops->get_config(hba, &iop_config)) {
1342 		device_printf(dev, "get iop config failed.\n");
1343 		goto get_config_failed;
1344 	}
1345 
1346 	hba->firmware_version = iop_config.firmware_version;
1347 	hba->interface_version = iop_config.interface_version;
1348 	hba->max_requests = iop_config.max_requests;
1349 	hba->max_devices = iop_config.max_devices;
1350 	hba->max_request_size = iop_config.request_size;
1351 	hba->max_sg_count = iop_config.max_sg_count;
1352 
1353 	if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1354 			4,  /* alignment */
1355 			BUS_SPACE_MAXADDR_32BIT+1, /* boundary */
1356 			BUS_SPACE_MAXADDR,  /* lowaddr */
1357 			BUS_SPACE_MAXADDR,  /* highaddr */
1358 			NULL, NULL,         /* filter, filterarg */
1359 			PAGE_SIZE * (hba->max_sg_count-1),  /* maxsize */
1360 			hba->max_sg_count,  /* nsegments */
1361 			0x20000,    /* maxsegsize */
1362 			BUS_DMA_ALLOCNOW,       /* flags */
1363 			&hba->io_dmat   /* tag */))
1364 	{
1365 		device_printf(dev, "alloc io_dmat failed\n");
1366 		goto get_config_failed;
1367 	}
1368 
1369 	if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1370 			1,  /* alignment */
1371 			0, /* boundary */
1372 			BUS_SPACE_MAXADDR_32BIT,    /* lowaddr */
1373 			BUS_SPACE_MAXADDR,  /* highaddr */
1374 			NULL, NULL,         /* filter, filterarg */
1375 			HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE + 0x20,
1376 			1,  /* nsegments */
1377 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1378 			0,      /* flags */
1379 			&hba->srb_dmat  /* tag */))
1380 	{
1381 		device_printf(dev, "alloc srb_dmat failed\n");
1382 		goto destroy_io_dmat;
1383 	}
1384 
1385 	if (bus_dmamem_alloc(hba->srb_dmat, (void **)&hba->uncached_ptr,
1386 			BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1387 			&hba->srb_dmamap) != 0)
1388 	{
1389 		device_printf(dev, "srb bus_dmamem_alloc failed!\n");
1390 		goto destroy_srb_dmat;
1391 	}
1392 
1393 	if (bus_dmamap_load(hba->srb_dmat,
1394 			hba->srb_dmamap, hba->uncached_ptr,
1395 			(HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE) + 0x20,
1396 			hptiop_map_srb, hba, 0))
1397 	{
1398 		device_printf(dev, "bus_dmamap_load failed!\n");
1399 		goto srb_dmamem_free;
1400 	}
1401 
1402 	if ((devq = cam_simq_alloc(hba->max_requests - 1 )) == NULL) {
1403 		device_printf(dev, "cam_simq_alloc failed\n");
1404 		goto srb_dmamap_unload;
1405 	}
1406 
1407 	hba->sim = cam_sim_alloc(hptiop_action, hptiop_poll, driver_name,
1408 			hba, unit, &sim_mplock, hba->max_requests - 1, 1, devq);
1409 	if (!hba->sim) {
1410 		device_printf(dev, "cam_sim_alloc failed\n");
1411 		cam_simq_release(devq);
1412 		goto srb_dmamap_unload;
1413 	}
1414 	if (xpt_bus_register(hba->sim, 0) != CAM_SUCCESS)
1415 	{
1416 		device_printf(dev, "xpt_bus_register failed\n");
1417 		goto free_cam_sim;
1418 	}
1419 
1420 	if (xpt_create_path(&hba->path, /*periph */ NULL,
1421 			cam_sim_path(hba->sim), CAM_TARGET_WILDCARD,
1422 			CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1423 		device_printf(dev, "xpt_create_path failed\n");
1424 		goto deregister_xpt_bus;
1425 	}
1426 
1427 	bzero(&set_config, sizeof(set_config));
1428 	set_config.iop_id = unit;
1429 	set_config.vbus_id = cam_sim_path(hba->sim);
1430 	set_config.max_host_request_size = HPT_SRB_MAX_REQ_SIZE;
1431 
1432 	if (hba->ops->set_config(hba, &set_config)) {
1433 		device_printf(dev, "set iop config failed.\n");
1434 		goto free_hba_path;
1435 	}
1436 
1437 	xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
1438 	ccb.ccb_h.func_code = XPT_SASYNC_CB;
1439 	ccb.event_enable = (AC_FOUND_DEVICE | AC_LOST_DEVICE);
1440 	ccb.callback = hptiop_async;
1441 	ccb.callback_arg = hba->sim;
1442 	xpt_action((union ccb *)&ccb);
1443 
1444 	rid = 0;
1445 	if ((hba->irq_res = bus_alloc_resource(hba->pcidev, SYS_RES_IRQ,
1446 			&rid, 0, ~0ul, 1, RF_SHAREABLE | RF_ACTIVE)) == NULL) {
1447 		device_printf(dev, "allocate irq failed!\n");
1448 		goto free_hba_path;
1449 	}
1450 
1451 	if (bus_setup_intr(hba->pcidev, hba->irq_res, 0,
1452 				hptiop_pci_intr, hba, &hba->irq_handle, NULL))
1453 	{
1454 		device_printf(dev, "allocate intr function failed!\n");
1455 		goto free_irq_resource;
1456 	}
1457 
1458 	if (hptiop_send_sync_msg(hba,
1459 			IOPMU_INBOUND_MSG0_START_BACKGROUND_TASK, 5000)) {
1460 		device_printf(dev, "fail to start background task\n");
1461 		goto teartown_irq_resource;
1462 	}
1463 
1464 	hba->ops->enable_intr(hba);
1465 
1466 	hba->ioctl_dev = make_dev(&hptiop_ops, unit,
1467 				UID_ROOT, GID_WHEEL /*GID_OPERATOR*/,
1468 				S_IRUSR | S_IWUSR, "%s%d", driver_name, unit);
1469 
1470 	hba->ioctl_dev->si_drv1 = hba;
1471 
1472 	hptiop_rescan_bus(hba);
1473 
1474 	return 0;
1475 
1476 
1477 teartown_irq_resource:
1478 	bus_teardown_intr(dev, hba->irq_res, hba->irq_handle);
1479 
1480 free_irq_resource:
1481 	bus_release_resource(dev, SYS_RES_IRQ, 0, hba->irq_res);
1482 
1483 free_hba_path:
1484 	xpt_free_path(hba->path);
1485 
1486 deregister_xpt_bus:
1487 	xpt_bus_deregister(cam_sim_path(hba->sim));
1488 
1489 free_cam_sim:
1490 	cam_sim_free(hba->sim);
1491 
1492 srb_dmamap_unload:
1493 	if (hba->uncached_ptr)
1494 		bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
1495 
1496 srb_dmamem_free:
1497 	if (hba->uncached_ptr)
1498 		bus_dmamem_free(hba->srb_dmat,
1499 			hba->uncached_ptr, hba->srb_dmamap);
1500 
1501 destroy_srb_dmat:
1502 	if (hba->srb_dmat)
1503 		bus_dma_tag_destroy(hba->srb_dmat);
1504 
1505 destroy_io_dmat:
1506 	if (hba->io_dmat)
1507 		bus_dma_tag_destroy(hba->io_dmat);
1508 
1509 get_config_failed:
1510 	if (hba->ops->internal_memfree)
1511 		hba->ops->internal_memfree(hba);
1512 
1513 destroy_parent_tag:
1514 	if (hba->parent_dmat)
1515 		bus_dma_tag_destroy(hba->parent_dmat);
1516 
1517 release_pci_res:
1518 	if (hba->ops->release_pci_res)
1519 		hba->ops->release_pci_res(hba);
1520 
1521 	return ENXIO;
1522 }
1523 
1524 static int hptiop_detach(device_t dev)
1525 {
1526 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
1527 	int i;
1528 	int error = EBUSY;
1529 
1530 	hptiop_lock_adapter(hba);
1531 	for (i = 0; i < hba->max_devices; i++)
1532 		if (hptiop_os_query_remove_device(hba, i)) {
1533 			device_printf(dev, "file system is busy. id=%d", i);
1534 			goto out;
1535 		}
1536 
1537 	if ((error = hptiop_shutdown(dev)) != 0)
1538 		goto out;
1539 	if (hptiop_send_sync_msg(hba,
1540 		IOPMU_INBOUND_MSG0_STOP_BACKGROUND_TASK, 60000))
1541 		goto out;
1542 
1543 	hptiop_release_resource(hba);
1544 	error = 0;
1545 out:
1546 	hptiop_unlock_adapter(hba);
1547 	return error;
1548 }
1549 
1550 static int hptiop_shutdown(device_t dev)
1551 {
1552 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
1553 
1554 	int error = 0;
1555 
1556 	if (hba->flag & HPT_IOCTL_FLAG_OPEN) {
1557 		device_printf(dev, "device is busy");
1558 		return EBUSY;
1559 	}
1560 
1561 	hba->ops->disable_intr(hba);
1562 
1563 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_SHUTDOWN, 60000))
1564 		error = EBUSY;
1565 
1566 	return error;
1567 }
1568 
1569 static void hptiop_pci_intr(void *arg)
1570 {
1571 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
1572 	hptiop_lock_adapter(hba);
1573 	hba->ops->iop_intr(hba);
1574 	hptiop_unlock_adapter(hba);
1575 }
1576 
1577 static void hptiop_poll(struct cam_sim *sim)
1578 {
1579 	hptiop_pci_intr(cam_sim_softc(sim));
1580 }
1581 
1582 static void hptiop_async(void * callback_arg, u_int32_t code,
1583 					struct cam_path * path, void * arg)
1584 {
1585 }
1586 
1587 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba)
1588 {
1589 	BUS_SPACE_WRT4_ITL(outbound_intmask,
1590 		~(IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0));
1591 }
1592 
1593 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba)
1594 {
1595 	u_int32_t int_mask;
1596 
1597 	int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
1598 
1599 	int_mask |= MVIOP_MU_OUTBOUND_INT_POSTQUEUE
1600 			| MVIOP_MU_OUTBOUND_INT_MSG;
1601 	BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
1602 }
1603 
1604 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba)
1605 {
1606 	u_int32_t int_mask;
1607 
1608 	int_mask = BUS_SPACE_RD4_ITL(outbound_intmask);
1609 
1610 	int_mask |= IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0;
1611 	BUS_SPACE_WRT4_ITL(outbound_intmask, int_mask);
1612 	BUS_SPACE_RD4_ITL(outbound_intstatus);
1613 }
1614 
1615 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba)
1616 {
1617 	u_int32_t int_mask;
1618 	int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
1619 
1620 	int_mask &= ~(MVIOP_MU_OUTBOUND_INT_MSG
1621 			| MVIOP_MU_OUTBOUND_INT_POSTQUEUE);
1622 	BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
1623 	BUS_SPACE_RD4_MV0(outbound_intmask);
1624 }
1625 
1626 static int hptiop_reset_adapter(struct hpt_iop_hba * hba)
1627 {
1628 	return hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
1629 }
1630 
1631 static void *hptiop_get_srb(struct hpt_iop_hba * hba)
1632 {
1633 	struct hpt_iop_srb * srb;
1634 
1635 	if (hba->srb_list) {
1636 		srb = hba->srb_list;
1637 		hba->srb_list = srb->next;
1638 		return srb;
1639 	}
1640 
1641 	return NULL;
1642 }
1643 
1644 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb)
1645 {
1646 	srb->next = hba->srb_list;
1647 	hba->srb_list = srb;
1648 }
1649 
1650 static void hptiop_action(struct cam_sim *sim, union ccb *ccb)
1651 {
1652 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)cam_sim_softc(sim);
1653 	struct hpt_iop_srb * srb;
1654 
1655 	switch (ccb->ccb_h.func_code) {
1656 
1657 	case XPT_SCSI_IO:
1658 		hptiop_lock_adapter(hba);
1659 		if (ccb->ccb_h.target_lun != 0 ||
1660 			ccb->ccb_h.target_id >= hba->max_devices ||
1661 			(ccb->ccb_h.flags & CAM_CDB_PHYS))
1662 		{
1663 			ccb->ccb_h.status = CAM_TID_INVALID;
1664 			xpt_done(ccb);
1665 			goto scsi_done;
1666 		}
1667 
1668 		if ((srb = hptiop_get_srb(hba)) == NULL) {
1669 			device_printf(hba->pcidev, "srb allocated failed");
1670 			ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1671 			xpt_done(ccb);
1672 			goto scsi_done;
1673 		}
1674 
1675 		srb->ccb = ccb;
1676 
1677 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_NONE)
1678 			hptiop_post_scsi_command(srb, NULL, 0, 0);
1679 		else if ((ccb->ccb_h.flags & CAM_SCATTER_VALID) == 0) {
1680 			if ((ccb->ccb_h.flags & CAM_DATA_PHYS) == 0) {
1681 				int error;
1682 
1683 				error = bus_dmamap_load(hba->io_dmat,
1684 						srb->dma_map,
1685 						ccb->csio.data_ptr,
1686 						ccb->csio.dxfer_len,
1687 						hptiop_post_scsi_command,
1688 						srb, 0);
1689 
1690 				if (error && error != EINPROGRESS) {
1691 					device_printf(hba->pcidev,
1692 					    "bus_dmamap_load error %d", error);
1693 					xpt_freeze_simq(hba->sim, 1);
1694 					ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1695 invalid:
1696 					hptiop_free_srb(hba, srb);
1697 					xpt_done(ccb);
1698 					goto scsi_done;
1699 				}
1700 			}
1701 			else {
1702 				device_printf(hba->pcidev,
1703 					"CAM_DATA_PHYS not supported");
1704 				ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1705 				goto invalid;
1706 			}
1707 		}
1708 		else {
1709 			struct bus_dma_segment *segs;
1710 
1711 			if ((ccb->ccb_h.flags & CAM_SG_LIST_PHYS) == 0 ||
1712 				(ccb->ccb_h.flags & CAM_DATA_PHYS) != 0) {
1713 				device_printf(hba->pcidev, "SCSI cmd failed");
1714 				ccb->ccb_h.status=CAM_PROVIDE_FAIL;
1715 				goto invalid;
1716 			}
1717 
1718 			segs = (struct bus_dma_segment *)ccb->csio.data_ptr;
1719 			hptiop_post_scsi_command(srb, segs,
1720 						ccb->csio.sglist_cnt, 0);
1721 		}
1722 
1723 scsi_done:
1724 		hptiop_unlock_adapter(hba);
1725 		return;
1726 
1727 	case XPT_RESET_BUS:
1728 		device_printf(hba->pcidev, "reset adapter");
1729 		hptiop_lock_adapter(hba);
1730 		hba->msg_done = 0;
1731 		hptiop_reset_adapter(hba);
1732 		hptiop_unlock_adapter(hba);
1733 		break;
1734 
1735 	case XPT_GET_TRAN_SETTINGS:
1736 	case XPT_SET_TRAN_SETTINGS:
1737 		ccb->ccb_h.status = CAM_FUNC_NOTAVAIL;
1738 		break;
1739 
1740 	case XPT_CALC_GEOMETRY:
1741 		cam_calc_geometry(&ccb->ccg, 1);
1742 		break;
1743 
1744 	case XPT_PATH_INQ:
1745 	{
1746 		struct ccb_pathinq *cpi = &ccb->cpi;
1747 
1748 		cpi->version_num = 1;
1749 		cpi->hba_inquiry = PI_SDTR_ABLE;
1750 		cpi->target_sprt = 0;
1751 		cpi->hba_misc = PIM_NOBUSRESET;
1752 		cpi->hba_eng_cnt = 0;
1753 		cpi->max_target = hba->max_devices;
1754 		cpi->max_lun = 0;
1755 		cpi->unit_number = cam_sim_unit(sim);
1756 		cpi->bus_id = cam_sim_bus(sim);
1757 		cpi->initiator_id = hba->max_devices;
1758 		cpi->base_transfer_speed = 3300;
1759 
1760 		strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
1761 		strncpy(cpi->hba_vid, "HPT   ", HBA_IDLEN);
1762 		strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
1763 		cpi->transport = XPORT_SPI;
1764 		cpi->transport_version = 2;
1765 		cpi->protocol = PROTO_SCSI;
1766 		cpi->protocol_version = SCSI_REV_2;
1767 		cpi->ccb_h.status = CAM_REQ_CMP;
1768 		break;
1769 	}
1770 
1771 	default:
1772 		ccb->ccb_h.status = CAM_REQ_INVALID;
1773 		break;
1774 	}
1775 
1776 	xpt_done(ccb);
1777 	return;
1778 }
1779 
1780 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
1781 				struct hpt_iop_srb *srb,
1782 				bus_dma_segment_t *segs, int nsegs)
1783 {
1784 	int idx;
1785 	union ccb *ccb = srb->ccb;
1786 	u_int8_t *cdb;
1787 
1788 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
1789 		cdb = ccb->csio.cdb_io.cdb_ptr;
1790 	else
1791 		cdb = ccb->csio.cdb_io.cdb_bytes;
1792 
1793 	KdPrint(("ccb=%p %x-%x-%x\n",
1794 		ccb, *(u_int32_t *)cdb, *((u_int32_t *)cdb+1), *((u_int32_t *)cdb+2)));
1795 
1796 	if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {
1797 		u_int32_t iop_req32;
1798 		struct hpt_iop_request_scsi_command req;
1799 
1800 		iop_req32 = BUS_SPACE_RD4_ITL(inbound_queue);
1801 
1802 		if (iop_req32 == IOPMU_QUEUE_EMPTY) {
1803 			device_printf(hba->pcidev, "invaild req offset\n");
1804 			ccb->ccb_h.status = CAM_BUSY;
1805 			bus_dmamap_unload(hba->io_dmat, srb->dma_map);
1806 			hptiop_free_srb(hba, srb);
1807 			xpt_done(ccb);
1808 			return;
1809 		}
1810 
1811 		if (ccb->csio.dxfer_len && nsegs > 0) {
1812 			struct hpt_iopsg *psg = req.sg_list;
1813 			for (idx = 0; idx < nsegs; idx++, psg++) {
1814 				psg->pci_address = (u_int64_t)segs[idx].ds_addr;
1815 				psg->size = segs[idx].ds_len;
1816 				psg->eot = 0;
1817 			}
1818 			psg[-1].eot = 1;
1819 		}
1820 
1821 		bcopy(cdb, req.cdb, ccb->csio.cdb_len);
1822 
1823 		req.header.size = offsetof(struct hpt_iop_request_scsi_command, sg_list)
1824 				+ nsegs*sizeof(struct hpt_iopsg);
1825 		req.header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1826 		req.header.flags = 0;
1827 		req.header.result = IOP_RESULT_PENDING;
1828 		req.header.context = (u_int64_t)(unsigned long)srb;
1829 		req.dataxfer_length = ccb->csio.dxfer_len;
1830 		req.channel =  0;
1831 		req.target =  ccb->ccb_h.target_id;
1832 		req.lun =  ccb->ccb_h.target_lun;
1833 
1834 		bus_space_write_region_1(hba->bar0t, hba->bar0h, iop_req32,
1835 			(u_int8_t *)&req, req.header.size);
1836 
1837 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1838 			bus_dmamap_sync(hba->io_dmat,
1839 				srb->dma_map, BUS_DMASYNC_PREREAD);
1840 		}
1841 		else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
1842 			bus_dmamap_sync(hba->io_dmat,
1843 				srb->dma_map, BUS_DMASYNC_PREWRITE);
1844 
1845 		BUS_SPACE_WRT4_ITL(inbound_queue,iop_req32);
1846 	} else {
1847 		struct hpt_iop_request_scsi_command *req;
1848 
1849 		req = (struct hpt_iop_request_scsi_command *)srb;
1850 		if (ccb->csio.dxfer_len && nsegs > 0) {
1851 			struct hpt_iopsg *psg = req->sg_list;
1852 			for (idx = 0; idx < nsegs; idx++, psg++) {
1853 				psg->pci_address =
1854 					(u_int64_t)segs[idx].ds_addr;
1855 				psg->size = segs[idx].ds_len;
1856 				psg->eot = 0;
1857 			}
1858 			psg[-1].eot = 1;
1859 		}
1860 
1861 		bcopy(cdb, req->cdb, ccb->csio.cdb_len);
1862 
1863 		req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1864 		req->header.result = IOP_RESULT_PENDING;
1865 		req->dataxfer_length = ccb->csio.dxfer_len;
1866 		req->channel =  0;
1867 		req->target =  ccb->ccb_h.target_id;
1868 		req->lun =  ccb->ccb_h.target_lun;
1869 		req->header.size = offsetof(struct hpt_iop_request_scsi_command, sg_list)
1870 			+ nsegs*sizeof(struct hpt_iopsg);
1871 		req->header.context = (u_int64_t)srb->index |
1872 						IOPMU_QUEUE_ADDR_HOST_BIT;
1873 		req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
1874 
1875 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1876 			bus_dmamap_sync(hba->io_dmat,
1877 				srb->dma_map, BUS_DMASYNC_PREREAD);
1878 		}else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT) {
1879 			bus_dmamap_sync(hba->io_dmat,
1880 				srb->dma_map, BUS_DMASYNC_PREWRITE);
1881 		}
1882 
1883 		if (hba->firmware_version > 0x01020000
1884 			|| hba->interface_version > 0x01020000) {
1885 			u_int32_t size_bits;
1886 
1887 			if (req->header.size < 256)
1888 				size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT;
1889 			else if (req->header.size < 512)
1890 				size_bits = IOPMU_QUEUE_ADDR_HOST_BIT;
1891 			else
1892 				size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT
1893 						| IOPMU_QUEUE_ADDR_HOST_BIT;
1894 
1895 			BUS_SPACE_WRT4_ITL(inbound_queue,
1896 				(u_int32_t)srb->phy_addr | size_bits);
1897 		} else
1898 			BUS_SPACE_WRT4_ITL(inbound_queue, (u_int32_t)srb->phy_addr
1899 				|IOPMU_QUEUE_ADDR_HOST_BIT);
1900 	}
1901 }
1902 
1903 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
1904 				struct hpt_iop_srb *srb,
1905 				bus_dma_segment_t *segs, int nsegs)
1906 {
1907 	int idx, size;
1908 	union ccb *ccb = srb->ccb;
1909 	u_int8_t *cdb;
1910 	struct hpt_iop_request_scsi_command *req;
1911 	u_int64_t req_phy;
1912 
1913 	req = (struct hpt_iop_request_scsi_command *)srb;
1914 	req_phy = srb->phy_addr;
1915 
1916 	if (ccb->csio.dxfer_len && nsegs > 0) {
1917 		struct hpt_iopsg *psg = req->sg_list;
1918 		for (idx = 0; idx < nsegs; idx++, psg++) {
1919 			psg->pci_address = (u_int64_t)segs[idx].ds_addr;
1920 			psg->size = segs[idx].ds_len;
1921 			psg->eot = 0;
1922 		}
1923 		psg[-1].eot = 1;
1924 	}
1925 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
1926 		cdb = ccb->csio.cdb_io.cdb_ptr;
1927 	else
1928 		cdb = ccb->csio.cdb_io.cdb_bytes;
1929 
1930 	bcopy(cdb, req->cdb, ccb->csio.cdb_len);
1931 	req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1932 	req->header.result = IOP_RESULT_PENDING;
1933 	req->dataxfer_length = ccb->csio.dxfer_len;
1934 	req->channel = 0;
1935 	req->target =  ccb->ccb_h.target_id;
1936 	req->lun =  ccb->ccb_h.target_lun;
1937 	req->header.size = sizeof(struct hpt_iop_request_scsi_command)
1938 				- sizeof(struct hpt_iopsg)
1939 				+ nsegs * sizeof(struct hpt_iopsg);
1940 	if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1941 		bus_dmamap_sync(hba->io_dmat,
1942 			srb->dma_map, BUS_DMASYNC_PREREAD);
1943 	}
1944 	else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
1945 		bus_dmamap_sync(hba->io_dmat,
1946 			srb->dma_map, BUS_DMASYNC_PREWRITE);
1947 	req->header.context = (u_int64_t)srb->index
1948 					<< MVIOP_REQUEST_NUMBER_START_BIT
1949 					| MVIOP_CMD_TYPE_SCSI;
1950 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
1951 	size = req->header.size >> 8;
1952 	hptiop_mv_inbound_write(req_phy
1953 			| MVIOP_MU_QUEUE_ADDR_HOST_BIT
1954 			| (size > 3 ? 3 : size), hba);
1955 }
1956 
1957 static void hptiop_post_scsi_command(void *arg, bus_dma_segment_t *segs,
1958 					int nsegs, int error)
1959 {
1960 	struct hpt_iop_srb *srb = (struct hpt_iop_srb *)arg;
1961 	union ccb *ccb = srb->ccb;
1962 	struct hpt_iop_hba *hba = srb->hba;
1963 
1964 	if (error || nsegs > hba->max_sg_count) {
1965 		KdPrint(("hptiop: func_code=%x tid=%x lun=%x nsegs=%d\n",
1966 			ccb->ccb_h.func_code,
1967 			ccb->ccb_h.target_id,
1968 			ccb->ccb_h.target_lun, nsegs));
1969 		ccb->ccb_h.status = CAM_BUSY;
1970 		bus_dmamap_unload(hba->io_dmat, srb->dma_map);
1971 		hptiop_free_srb(hba, srb);
1972 		xpt_done(ccb);
1973 		return;
1974 	}
1975 
1976 	hba->ops->post_req(hba, srb, segs, nsegs);
1977 }
1978 
1979 static void hptiop_mv_map_ctlcfg(void *arg, bus_dma_segment_t *segs,
1980 				int nsegs, int error)
1981 {
1982 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)arg;
1983 	hba->ctlcfgcmd_phy = ((u_int64_t)segs->ds_addr + 0x1F)
1984 				& ~(u_int64_t)0x1F;
1985 	hba->ctlcfg_ptr = (u_int8_t *)(((unsigned long)hba->ctlcfg_ptr + 0x1F)
1986 				& ~0x1F);
1987 }
1988 
1989 static void hptiop_map_srb(void *arg, bus_dma_segment_t *segs,
1990 				int nsegs, int error)
1991 {
1992 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
1993 	bus_addr_t phy_addr = (segs->ds_addr + 0x1F) & ~(bus_addr_t)0x1F;
1994 	struct hpt_iop_srb *srb, *tmp_srb;
1995 	int i;
1996 
1997 	if (error || nsegs == 0) {
1998 		device_printf(hba->pcidev, "hptiop_map_srb error");
1999 		return;
2000 	}
2001 
2002 	/* map srb */
2003 	srb = (struct hpt_iop_srb *)
2004 		(((unsigned long)hba->uncached_ptr + 0x1F)
2005 		& ~(unsigned long)0x1F);
2006 
2007 	for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2008 		tmp_srb = (struct hpt_iop_srb *)
2009 					((char *)srb + i * HPT_SRB_MAX_SIZE);
2010 		if (((unsigned long)tmp_srb & 0x1F) == 0) {
2011 			if (bus_dmamap_create(hba->io_dmat,
2012 						0, &tmp_srb->dma_map)) {
2013 				device_printf(hba->pcidev, "dmamap create failed");
2014 				return;
2015 			}
2016 
2017 			bzero(tmp_srb, sizeof(struct hpt_iop_srb));
2018 			tmp_srb->hba = hba;
2019 			tmp_srb->index = i;
2020 			if (hba->ctlcfg_ptr == 0) {/*itl iop*/
2021 				tmp_srb->phy_addr = (u_int64_t)(u_int32_t)
2022 							(phy_addr >> 5);
2023 				if (phy_addr & IOPMU_MAX_MEM_SUPPORT_MASK_32G)
2024 					tmp_srb->srb_flag =
2025 						HPT_SRB_FLAG_HIGH_MEM_ACESS;
2026 			} else {
2027 				tmp_srb->phy_addr = phy_addr;
2028 			}
2029 
2030 			hptiop_free_srb(hba, tmp_srb);
2031 			hba->srb[i] = tmp_srb;
2032 			phy_addr += HPT_SRB_MAX_SIZE;
2033 		}
2034 		else {
2035 			device_printf(hba->pcidev, "invalid alignment");
2036 			return;
2037 		}
2038 	}
2039 }
2040 
2041 static void hptiop_os_message_callback(struct hpt_iop_hba * hba, u_int32_t msg)
2042 {
2043 		hba->msg_done = 1;
2044 }
2045 
2046 static  int hptiop_os_query_remove_device(struct hpt_iop_hba * hba,
2047 						int target_id)
2048 {
2049 	struct cam_periph       *periph = NULL;
2050 	struct cam_path         *path;
2051 	int                     status, retval = 0;
2052 
2053 	status = xpt_create_path(&path, NULL, hba->sim->path_id, target_id, 0);
2054 
2055 	if (status == CAM_REQ_CMP) {
2056 		if ((periph = cam_periph_find(path, "da")) != NULL) {
2057 			if (periph->refcount >= 1) {
2058 				device_printf(hba->pcidev, "target_id=0x%x,"
2059 				    "refcount=%d", target_id, periph->refcount);
2060 				retval = -1;
2061 			}
2062 		}
2063 		xpt_free_path(path);
2064 	}
2065 	return retval;
2066 }
2067 
2068 static void hptiop_release_resource(struct hpt_iop_hba *hba)
2069 {
2070 	int i;
2071 	if (hba->path) {
2072 		struct ccb_setasync ccb;
2073 
2074 		xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
2075 		ccb.ccb_h.func_code = XPT_SASYNC_CB;
2076 		ccb.event_enable = 0;
2077 		ccb.callback = hptiop_async;
2078 		ccb.callback_arg = hba->sim;
2079 		xpt_action((union ccb *)&ccb);
2080 		xpt_free_path(hba->path);
2081 	}
2082 
2083 	if (hba->sim) {
2084 		xpt_bus_deregister(cam_sim_path(hba->sim));
2085 		cam_sim_free(hba->sim);
2086 	}
2087 
2088 	if (hba->ctlcfg_dmat) {
2089 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
2090 		bus_dmamem_free(hba->ctlcfg_dmat,
2091 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
2092 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
2093 	}
2094 
2095 	for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2096 		struct hpt_iop_srb *srb = hba->srb[i];
2097 		if (srb->dma_map)
2098 			bus_dmamap_destroy(hba->io_dmat, srb->dma_map);
2099 	}
2100 
2101 	if (hba->srb_dmat) {
2102 		bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
2103 		bus_dmamap_destroy(hba->srb_dmat, hba->srb_dmamap);
2104 		bus_dma_tag_destroy(hba->srb_dmat);
2105 	}
2106 
2107 	if (hba->io_dmat)
2108 		bus_dma_tag_destroy(hba->io_dmat);
2109 
2110 	if (hba->parent_dmat)
2111 		bus_dma_tag_destroy(hba->parent_dmat);
2112 
2113 	if (hba->irq_handle)
2114 		bus_teardown_intr(hba->pcidev, hba->irq_res, hba->irq_handle);
2115 
2116 	if (hba->irq_res)
2117 		bus_release_resource(hba->pcidev, SYS_RES_IRQ,
2118 					0, hba->irq_res);
2119 
2120 	if (hba->bar0_res)
2121 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2122 					hba->bar0_rid, hba->bar0_res);
2123 	if (hba->bar2_res)
2124 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2125 					hba->bar2_rid, hba->bar2_res);
2126 	if (hba->ioctl_dev)
2127 		destroy_dev(hba->ioctl_dev);
2128 	dev_ops_remove_minor(&hptiop_ops, device_get_unit(hba->pcidev));
2129 }
2130