xref: /dragonfly/sys/dev/raid/hptiop/hptiop.c (revision 20c2db9a)
1 /*
2  * HighPoint RR3xxx/4xxx RAID Driver for FreeBSD
3  * Copyright (C) 2007-2012 HighPoint Technologies, Inc. All Rights Reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  * $FreeBSD: src/sys/dev/hptiop/hptiop.c,v 1.15 2012/10/25 17:29:11 delphij Exp $
27  */
28 
29 #include <sys/param.h>
30 #include <sys/types.h>
31 #include <sys/cons.h>
32 #include <sys/time.h>
33 #include <sys/systm.h>
34 
35 #include <sys/stat.h>
36 #include <sys/malloc.h>
37 #include <sys/conf.h>
38 #include <sys/libkern.h>
39 #include <sys/kernel.h>
40 
41 #include <sys/kthread.h>
42 #include <sys/lock.h>
43 #include <sys/module.h>
44 
45 #include <sys/eventhandler.h>
46 #include <sys/bus.h>
47 #include <sys/taskqueue.h>
48 #include <sys/device.h>
49 #include <sys/mplock2.h>
50 
51 #include <machine/stdarg.h>
52 #include <sys/rman.h>
53 
54 #include <vm/vm.h>
55 #include <vm/pmap.h>
56 
57 #include <bus/pci/pcireg.h>
58 #include <bus/pci/pcivar.h>
59 
60 #include <bus/cam/cam.h>
61 #include <bus/cam/cam_ccb.h>
62 #include <bus/cam/cam_sim.h>
63 #include <bus/cam/cam_xpt_periph.h>
64 #include <bus/cam/cam_xpt_sim.h>
65 #include <bus/cam/cam_debug.h>
66 #include <bus/cam/cam_periph.h>
67 #include <bus/cam/scsi/scsi_all.h>
68 #include <bus/cam/scsi/scsi_message.h>
69 
70 #include <dev/raid/hptiop/hptiop.h>
71 
72 static const char driver_name[] = "hptiop";
73 static const char driver_version[] = "v1.8";
74 
75 static devclass_t hptiop_devclass;
76 
77 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
78 				u_int32_t msg, u_int32_t millisec);
79 static void hptiop_request_callback_itl(struct hpt_iop_hba *hba,
80 							u_int32_t req);
81 static void hptiop_request_callback_mv(struct hpt_iop_hba *hba, u_int64_t req);
82 static void hptiop_request_callback_mvfrey(struct hpt_iop_hba *hba,
83 							u_int32_t req);
84 static void hptiop_os_message_callback(struct hpt_iop_hba *hba, u_int32_t msg);
85 static int  hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
86 				struct hpt_iop_ioctl_param *pParams);
87 static int  hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
88 				struct hpt_iop_ioctl_param *pParams);
89 static int  hptiop_do_ioctl_mvfrey(struct hpt_iop_hba *hba,
90 				struct hpt_iop_ioctl_param *pParams);
91 static void hptiop_bus_scan_cb(struct cam_periph *periph, union ccb *ccb);
92 static int  hptiop_rescan_bus(struct hpt_iop_hba *hba);
93 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba);
94 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba);
95 static int hptiop_alloc_pci_res_mvfrey(struct hpt_iop_hba *hba);
96 static int hptiop_get_config_itl(struct hpt_iop_hba *hba,
97 				struct hpt_iop_request_get_config *config);
98 static int hptiop_get_config_mv(struct hpt_iop_hba *hba,
99 				struct hpt_iop_request_get_config *config);
100 static int hptiop_get_config_mvfrey(struct hpt_iop_hba *hba,
101 				struct hpt_iop_request_get_config *config);
102 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
103 				struct hpt_iop_request_set_config *config);
104 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
105 				struct hpt_iop_request_set_config *config);
106 static int hptiop_set_config_mvfrey(struct hpt_iop_hba *hba,
107 				struct hpt_iop_request_set_config *config);
108 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba);
109 static int hptiop_internal_memalloc_mvfrey(struct hpt_iop_hba *hba);
110 static int hptiop_internal_memfree_itl(struct hpt_iop_hba *hba);
111 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba);
112 static int hptiop_internal_memfree_mvfrey(struct hpt_iop_hba *hba);
113 static int  hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
114 			u_int32_t req32, struct hpt_iop_ioctl_param *pParams);
115 static int  hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
116 				struct hpt_iop_request_ioctl_command *req,
117 				struct hpt_iop_ioctl_param *pParams);
118 static int  hptiop_post_ioctl_command_mvfrey(struct hpt_iop_hba *hba,
119 				struct hpt_iop_request_ioctl_command *req,
120 				struct hpt_iop_ioctl_param *pParams);
121 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
122 				struct hpt_iop_srb *srb,
123 				bus_dma_segment_t *segs, int nsegs);
124 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
125 				struct hpt_iop_srb *srb,
126 				bus_dma_segment_t *segs, int nsegs);
127 static void hptiop_post_req_mvfrey(struct hpt_iop_hba *hba,
128 				struct hpt_iop_srb *srb,
129 				bus_dma_segment_t *segs, int nsegs);
130 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg);
131 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg);
132 static void hptiop_post_msg_mvfrey(struct hpt_iop_hba *hba, u_int32_t msg);
133 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba);
134 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba);
135 static void hptiop_enable_intr_mvfrey(struct hpt_iop_hba *hba);
136 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba);
137 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba);
138 static void hptiop_disable_intr_mvfrey(struct hpt_iop_hba *hba);
139 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb);
140 static int  hptiop_os_query_remove_device(struct hpt_iop_hba *hba, int tid);
141 static int  hptiop_probe(device_t dev);
142 static int  hptiop_attach(device_t dev);
143 static int  hptiop_detach(device_t dev);
144 static int  hptiop_shutdown(device_t dev);
145 static void hptiop_action(struct cam_sim *sim, union ccb *ccb);
146 static void hptiop_poll(struct cam_sim *sim);
147 static void hptiop_async(void *callback_arg, u_int32_t code,
148 					struct cam_path *path, void *arg);
149 static void hptiop_pci_intr(void *arg);
150 static void hptiop_release_resource(struct hpt_iop_hba *hba);
151 static void hptiop_reset_adapter(void *argv);
152 static d_open_t hptiop_open;
153 static d_close_t hptiop_close;
154 static d_ioctl_t hptiop_ioctl;
155 
156 static struct dev_ops hptiop_ops = {
157 	{ driver_name, 0, 0 },
158 	.d_open = hptiop_open,
159 	.d_close = hptiop_close,
160 	.d_ioctl = hptiop_ioctl,
161 };
162 
163 #define hba_from_dev(dev) ((struct hpt_iop_hba *)(dev)->si_drv1)
164 
165 #define BUS_SPACE_WRT4_ITL(offset, value) bus_space_write_4(hba->bar0t,\
166 		hba->bar0h, offsetof(struct hpt_iopmu_itl, offset), (value))
167 #define BUS_SPACE_RD4_ITL(offset) bus_space_read_4(hba->bar0t,\
168 		hba->bar0h, offsetof(struct hpt_iopmu_itl, offset))
169 
170 #define BUS_SPACE_WRT4_MV0(offset, value) bus_space_write_4(hba->bar0t,\
171 		hba->bar0h, offsetof(struct hpt_iopmv_regs, offset), value)
172 #define BUS_SPACE_RD4_MV0(offset) bus_space_read_4(hba->bar0t,\
173 		hba->bar0h, offsetof(struct hpt_iopmv_regs, offset))
174 #define BUS_SPACE_WRT4_MV2(offset, value) bus_space_write_4(hba->bar2t,\
175 		hba->bar2h, offsetof(struct hpt_iopmu_mv, offset), value)
176 #define BUS_SPACE_RD4_MV2(offset) bus_space_read_4(hba->bar2t,\
177 		hba->bar2h, offsetof(struct hpt_iopmu_mv, offset))
178 
179 #define BUS_SPACE_WRT4_MVFREY2(offset, value) bus_space_write_4(hba->bar2t,\
180 		hba->bar2h, offsetof(struct hpt_iopmu_mvfrey, offset), value)
181 #define BUS_SPACE_RD4_MVFREY2(offset) bus_space_read_4(hba->bar2t,\
182 		hba->bar2h, offsetof(struct hpt_iopmu_mvfrey, offset))
183 
184 static int hptiop_open(struct dev_open_args *ap)
185 {
186 	cdev_t dev = ap->a_head.a_dev;
187 	struct hpt_iop_hba *hba = hba_from_dev(dev);
188 
189 	if (hba==NULL)
190 		return ENXIO;
191 	if (hba->flag & HPT_IOCTL_FLAG_OPEN)
192 		return EBUSY;
193 	hba->flag |= HPT_IOCTL_FLAG_OPEN;
194 	return 0;
195 }
196 
197 static int hptiop_close(struct dev_close_args *ap)
198 {
199 	cdev_t dev = ap->a_head.a_dev;
200 	struct hpt_iop_hba *hba = hba_from_dev(dev);
201 	hba->flag &= ~(u_int32_t)HPT_IOCTL_FLAG_OPEN;
202 	return 0;
203 }
204 
205 static int hptiop_ioctl(struct dev_ioctl_args *ap)
206 {
207 	cdev_t dev = ap->a_head.a_dev;
208 	u_long cmd = ap->a_cmd;
209 	caddr_t data = ap->a_data;
210 	int ret = EFAULT;
211 	struct hpt_iop_hba *hba = hba_from_dev(dev);
212 
213 	get_mplock();
214 
215 	switch (cmd) {
216 	case HPT_DO_IOCONTROL:
217 		ret = hba->ops->do_ioctl(hba,
218 				(struct hpt_iop_ioctl_param *)data);
219 		break;
220 	case HPT_SCAN_BUS:
221 		ret = hptiop_rescan_bus(hba);
222 		break;
223 	}
224 
225 	rel_mplock();
226 
227 	return ret;
228 }
229 
230 static u_int64_t hptiop_mv_outbound_read(struct hpt_iop_hba *hba)
231 {
232 	u_int64_t p;
233 	u_int32_t outbound_tail = BUS_SPACE_RD4_MV2(outbound_tail);
234 	u_int32_t outbound_head = BUS_SPACE_RD4_MV2(outbound_head);
235 
236 	if (outbound_tail != outbound_head) {
237 		bus_space_read_region_4(hba->bar2t, hba->bar2h,
238 			offsetof(struct hpt_iopmu_mv,
239 				outbound_q[outbound_tail]),
240 			(u_int32_t *)&p, 2);
241 
242 		outbound_tail++;
243 
244 		if (outbound_tail == MVIOP_QUEUE_LEN)
245 			outbound_tail = 0;
246 
247 		BUS_SPACE_WRT4_MV2(outbound_tail, outbound_tail);
248 		return p;
249 	} else
250 		return 0;
251 }
252 
253 static void hptiop_mv_inbound_write(u_int64_t p, struct hpt_iop_hba *hba)
254 {
255 	u_int32_t inbound_head = BUS_SPACE_RD4_MV2(inbound_head);
256 	u_int32_t head = inbound_head + 1;
257 
258 	if (head == MVIOP_QUEUE_LEN)
259 		head = 0;
260 
261 	bus_space_write_region_4(hba->bar2t, hba->bar2h,
262 			offsetof(struct hpt_iopmu_mv, inbound_q[inbound_head]),
263 			(u_int32_t *)&p, 2);
264 	BUS_SPACE_WRT4_MV2(inbound_head, head);
265 	BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_POSTQUEUE);
266 }
267 
268 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg)
269 {
270 	BUS_SPACE_WRT4_ITL(inbound_msgaddr0, msg);
271 	BUS_SPACE_RD4_ITL(outbound_intstatus);
272 }
273 
274 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg)
275 {
276 
277 	BUS_SPACE_WRT4_MV2(inbound_msg, msg);
278 	BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_MSG);
279 
280 	BUS_SPACE_RD4_MV0(outbound_intmask);
281 }
282 
283 static void hptiop_post_msg_mvfrey(struct hpt_iop_hba *hba, u_int32_t msg)
284 {
285 	BUS_SPACE_WRT4_MVFREY2(f0_to_cpu_msg_a, msg);
286 	BUS_SPACE_RD4_MVFREY2(f0_to_cpu_msg_a);
287 }
288 
289 static int hptiop_wait_ready_itl(struct hpt_iop_hba * hba, u_int32_t millisec)
290 {
291 	u_int32_t req=0;
292 	int i;
293 
294 	for (i = 0; i < millisec; i++) {
295 		req = BUS_SPACE_RD4_ITL(inbound_queue);
296 		if (req != IOPMU_QUEUE_EMPTY)
297 			break;
298 		DELAY(1000);
299 	}
300 
301 	if (req!=IOPMU_QUEUE_EMPTY) {
302 		BUS_SPACE_WRT4_ITL(outbound_queue, req);
303 		BUS_SPACE_RD4_ITL(outbound_intstatus);
304 		return 0;
305 	}
306 
307 	return -1;
308 }
309 
310 static int hptiop_wait_ready_mv(struct hpt_iop_hba * hba, u_int32_t millisec)
311 {
312 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_NOP, millisec))
313 		return -1;
314 
315 	return 0;
316 }
317 
318 static int hptiop_wait_ready_mvfrey(struct hpt_iop_hba * hba,
319 							u_int32_t millisec)
320 {
321 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_NOP, millisec))
322 		return -1;
323 
324 	return 0;
325 }
326 
327 static void hptiop_request_callback_itl(struct hpt_iop_hba * hba,
328 							u_int32_t index)
329 {
330 	struct hpt_iop_srb *srb;
331 	struct hpt_iop_request_scsi_command *req=NULL;
332 	union ccb *ccb;
333 	u_int8_t *cdb;
334 	u_int32_t result, temp, dxfer;
335 	u_int64_t temp64;
336 
337 	if (index & IOPMU_QUEUE_MASK_HOST_BITS) { /*host req*/
338 		if (hba->firmware_version > 0x01020000 ||
339 			hba->interface_version > 0x01020000) {
340 			srb = hba->srb[index & ~(u_int32_t)
341 				(IOPMU_QUEUE_ADDR_HOST_BIT
342 				| IOPMU_QUEUE_REQUEST_RESULT_BIT)];
343 			req = (struct hpt_iop_request_scsi_command *)srb;
344 			if (index & IOPMU_QUEUE_REQUEST_RESULT_BIT)
345 				result = IOP_RESULT_SUCCESS;
346 			else
347 				result = req->header.result;
348 		} else {
349 			srb = hba->srb[index &
350 				~(u_int32_t)IOPMU_QUEUE_ADDR_HOST_BIT];
351 			req = (struct hpt_iop_request_scsi_command *)srb;
352 			result = req->header.result;
353 		}
354 		dxfer = req->dataxfer_length;
355 		goto srb_complete;
356 	}
357 
358 	/*iop req*/
359 	temp = bus_space_read_4(hba->bar0t, hba->bar0h, index +
360 		offsetof(struct hpt_iop_request_header, type));
361 	result = bus_space_read_4(hba->bar0t, hba->bar0h, index +
362 		offsetof(struct hpt_iop_request_header, result));
363 	switch(temp) {
364 	case IOP_REQUEST_TYPE_IOCTL_COMMAND:
365 	{
366 		temp64 = 0;
367 		bus_space_write_region_4(hba->bar0t, hba->bar0h, index +
368 			offsetof(struct hpt_iop_request_header, context),
369 			(u_int32_t *)&temp64, 2);
370 		wakeup((void *)((unsigned long)hba->u.itl.mu + index));
371 		break;
372 	}
373 
374 	case IOP_REQUEST_TYPE_SCSI_COMMAND:
375 		bus_space_read_region_4(hba->bar0t, hba->bar0h, index +
376 			offsetof(struct hpt_iop_request_header, context),
377 			(u_int32_t *)&temp64, 2);
378 		srb = (struct hpt_iop_srb *)(unsigned long)temp64;
379 		dxfer = bus_space_read_4(hba->bar0t, hba->bar0h,
380 				index + offsetof(struct hpt_iop_request_scsi_command,
381 				dataxfer_length));
382 srb_complete:
383 		ccb = (union ccb *)srb->ccb;
384 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
385 			cdb = ccb->csio.cdb_io.cdb_ptr;
386 		else
387 			cdb = ccb->csio.cdb_io.cdb_bytes;
388 
389 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
390 			ccb->ccb_h.status = CAM_REQ_CMP;
391 			goto scsi_done;
392 		}
393 
394 		switch (result) {
395 		case IOP_RESULT_SUCCESS:
396 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
397 			case CAM_DIR_IN:
398 				bus_dmamap_sync(hba->io_dmat,
399 					srb->dma_map, BUS_DMASYNC_POSTREAD);
400 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
401 				break;
402 			case CAM_DIR_OUT:
403 				bus_dmamap_sync(hba->io_dmat,
404 					srb->dma_map, BUS_DMASYNC_POSTWRITE);
405 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
406 				break;
407 			}
408 
409 			ccb->ccb_h.status = CAM_REQ_CMP;
410 			break;
411 
412 		case IOP_RESULT_BAD_TARGET:
413 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
414 			break;
415 		case IOP_RESULT_BUSY:
416 			ccb->ccb_h.status = CAM_BUSY;
417 			break;
418 		case IOP_RESULT_INVALID_REQUEST:
419 			ccb->ccb_h.status = CAM_REQ_INVALID;
420 			break;
421 		case IOP_RESULT_FAIL:
422 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
423 			break;
424 		case IOP_RESULT_RESET:
425 			ccb->ccb_h.status = CAM_BUSY;
426 			break;
427 		case IOP_RESULT_CHECK_CONDITION:
428 			memset(&ccb->csio.sense_data, 0,
429 			    sizeof(ccb->csio.sense_data));
430 			if (dxfer < ccb->csio.sense_len)
431 				ccb->csio.sense_resid = ccb->csio.sense_len -
432 				    dxfer;
433 			else
434 				ccb->csio.sense_resid = 0;
435 			if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {/*iop*/
436 				bus_space_read_region_1(hba->bar0t, hba->bar0h,
437 					index + offsetof(struct hpt_iop_request_scsi_command,
438 					sg_list), (u_int8_t *)&ccb->csio.sense_data,
439 					MIN(dxfer, sizeof(ccb->csio.sense_data)));
440 			} else {
441 				memcpy(&ccb->csio.sense_data, &req->sg_list,
442 					MIN(dxfer, sizeof(ccb->csio.sense_data)));
443 			}
444 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
445 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
446 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
447 			break;
448 		default:
449 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
450 			break;
451 		}
452 scsi_done:
453 		if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS)
454 			BUS_SPACE_WRT4_ITL(outbound_queue, index);
455 
456 		ccb->csio.resid = ccb->csio.dxfer_len - dxfer;
457 
458 		hptiop_free_srb(hba, srb);
459 		xpt_done(ccb);
460 		break;
461 	}
462 }
463 
464 static void hptiop_drain_outbound_queue_itl(struct hpt_iop_hba *hba)
465 {
466 	u_int32_t req, temp;
467 
468 	while ((req = BUS_SPACE_RD4_ITL(outbound_queue)) !=IOPMU_QUEUE_EMPTY) {
469 		if (req & IOPMU_QUEUE_MASK_HOST_BITS)
470 			hptiop_request_callback_itl(hba, req);
471 		else {
472 			temp = bus_space_read_4(hba->bar0t,
473 					hba->bar0h,req +
474 					offsetof(struct hpt_iop_request_header,
475 						flags));
476 			if (temp & IOP_REQUEST_FLAG_SYNC_REQUEST) {
477 				u_int64_t temp64;
478 				bus_space_read_region_4(hba->bar0t,
479 					hba->bar0h,req +
480 					offsetof(struct hpt_iop_request_header,
481 						context),
482 					(u_int32_t *)&temp64, 2);
483 				if (temp64) {
484 					hptiop_request_callback_itl(hba, req);
485 				} else {
486 					temp64 = 1;
487 					bus_space_write_region_4(hba->bar0t,
488 						hba->bar0h,req +
489 						offsetof(struct hpt_iop_request_header,
490 							context),
491 						(u_int32_t *)&temp64, 2);
492 				}
493 			} else
494 				hptiop_request_callback_itl(hba, req);
495 		}
496 	}
497 }
498 
499 static int hptiop_intr_itl(struct hpt_iop_hba * hba)
500 {
501 	u_int32_t status;
502 	int ret = 0;
503 
504 	status = BUS_SPACE_RD4_ITL(outbound_intstatus);
505 
506 	if (status & IOPMU_OUTBOUND_INT_MSG0) {
507 		u_int32_t msg = BUS_SPACE_RD4_ITL(outbound_msgaddr0);
508 		KdPrint(("hptiop: received outbound msg %x\n", msg));
509 		BUS_SPACE_WRT4_ITL(outbound_intstatus, IOPMU_OUTBOUND_INT_MSG0);
510 		hptiop_os_message_callback(hba, msg);
511 		ret = 1;
512 	}
513 
514 	if (status & IOPMU_OUTBOUND_INT_POSTQUEUE) {
515 		hptiop_drain_outbound_queue_itl(hba);
516 		ret = 1;
517 	}
518 
519 	return ret;
520 }
521 
522 static void hptiop_request_callback_mv(struct hpt_iop_hba * hba,
523 							u_int64_t _tag)
524 {
525 	u_int32_t context = (u_int32_t)_tag;
526 
527 	if (context & MVIOP_CMD_TYPE_SCSI) {
528 		struct hpt_iop_srb *srb;
529 		struct hpt_iop_request_scsi_command *req;
530 		union ccb *ccb;
531 		u_int8_t *cdb;
532 
533 		srb = hba->srb[context >> MVIOP_REQUEST_NUMBER_START_BIT];
534 		req = (struct hpt_iop_request_scsi_command *)srb;
535 		ccb = (union ccb *)srb->ccb;
536 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
537 			cdb = ccb->csio.cdb_io.cdb_ptr;
538 		else
539 			cdb = ccb->csio.cdb_io.cdb_bytes;
540 
541 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
542 			ccb->ccb_h.status = CAM_REQ_CMP;
543 			goto scsi_done;
544 		}
545 		if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
546 			req->header.result = IOP_RESULT_SUCCESS;
547 
548 		switch (req->header.result) {
549 		case IOP_RESULT_SUCCESS:
550 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
551 			case CAM_DIR_IN:
552 				bus_dmamap_sync(hba->io_dmat,
553 					srb->dma_map, BUS_DMASYNC_POSTREAD);
554 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
555 				break;
556 			case CAM_DIR_OUT:
557 				bus_dmamap_sync(hba->io_dmat,
558 					srb->dma_map, BUS_DMASYNC_POSTWRITE);
559 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
560 				break;
561 			}
562 			ccb->ccb_h.status = CAM_REQ_CMP;
563 			break;
564 		case IOP_RESULT_BAD_TARGET:
565 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
566 			break;
567 		case IOP_RESULT_BUSY:
568 			ccb->ccb_h.status = CAM_BUSY;
569 			break;
570 		case IOP_RESULT_INVALID_REQUEST:
571 			ccb->ccb_h.status = CAM_REQ_INVALID;
572 			break;
573 		case IOP_RESULT_FAIL:
574 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
575 			break;
576 		case IOP_RESULT_RESET:
577 			ccb->ccb_h.status = CAM_BUSY;
578 			break;
579 		case IOP_RESULT_CHECK_CONDITION:
580 			memset(&ccb->csio.sense_data, 0,
581 			    sizeof(ccb->csio.sense_data));
582 			if (req->dataxfer_length < ccb->csio.sense_len)
583 				ccb->csio.sense_resid = ccb->csio.sense_len -
584 				    req->dataxfer_length;
585 			else
586 				ccb->csio.sense_resid = 0;
587 			memcpy(&ccb->csio.sense_data, &req->sg_list,
588 				MIN(req->dataxfer_length, sizeof(ccb->csio.sense_data)));
589 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
590 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
591 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
592 			break;
593 		default:
594 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
595 			break;
596 		}
597 scsi_done:
598 		ccb->csio.resid = ccb->csio.dxfer_len - req->dataxfer_length;
599 
600 		hptiop_free_srb(hba, srb);
601 		xpt_done(ccb);
602 	} else if (context & MVIOP_CMD_TYPE_IOCTL) {
603 		struct hpt_iop_request_ioctl_command *req = hba->ctlcfg_ptr;
604 		if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
605 			hba->config_done = 1;
606 		else
607 			hba->config_done = -1;
608 		wakeup(req);
609 	} else if (context &
610 			(MVIOP_CMD_TYPE_SET_CONFIG |
611 				MVIOP_CMD_TYPE_GET_CONFIG))
612 		hba->config_done = 1;
613 	else {
614 		device_printf(hba->pcidev, "wrong callback type\n");
615 	}
616 }
617 
618 static void hptiop_request_callback_mvfrey(struct hpt_iop_hba * hba,
619 				u_int32_t _tag)
620 {
621 	u_int32_t req_type = _tag & 0xf;
622 
623 	struct hpt_iop_srb *srb;
624 	struct hpt_iop_request_scsi_command *req;
625 	union ccb *ccb;
626 	u_int8_t *cdb;
627 
628 	switch (req_type) {
629 	case IOP_REQUEST_TYPE_GET_CONFIG:
630 	case IOP_REQUEST_TYPE_SET_CONFIG:
631 		hba->config_done = 1;
632 		break;
633 
634 	case IOP_REQUEST_TYPE_SCSI_COMMAND:
635 		srb = hba->srb[(_tag >> 4) & 0xff];
636 		req = (struct hpt_iop_request_scsi_command *)srb;
637 
638 		ccb = (union ccb *)srb->ccb;
639 
640 		callout_stop(&ccb->ccb_h.timeout_ch);
641 
642 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
643 			cdb = ccb->csio.cdb_io.cdb_ptr;
644 		else
645 			cdb = ccb->csio.cdb_io.cdb_bytes;
646 
647 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
648 			ccb->ccb_h.status = CAM_REQ_CMP;
649 			goto scsi_done;
650 		}
651 
652 		if (_tag & MVFREYIOPMU_QUEUE_REQUEST_RESULT_BIT)
653 			req->header.result = IOP_RESULT_SUCCESS;
654 
655 		switch (req->header.result) {
656 		case IOP_RESULT_SUCCESS:
657 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
658 			case CAM_DIR_IN:
659 				bus_dmamap_sync(hba->io_dmat,
660 						srb->dma_map, BUS_DMASYNC_POSTREAD);
661 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
662 				break;
663 			case CAM_DIR_OUT:
664 				bus_dmamap_sync(hba->io_dmat,
665 						srb->dma_map, BUS_DMASYNC_POSTWRITE);
666 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
667 				break;
668 			}
669 			ccb->ccb_h.status = CAM_REQ_CMP;
670 			break;
671 		case IOP_RESULT_BAD_TARGET:
672 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
673 			break;
674 		case IOP_RESULT_BUSY:
675 			ccb->ccb_h.status = CAM_BUSY;
676 			break;
677 		case IOP_RESULT_INVALID_REQUEST:
678 			ccb->ccb_h.status = CAM_REQ_INVALID;
679 			break;
680 		case IOP_RESULT_FAIL:
681 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
682 			break;
683 		case IOP_RESULT_RESET:
684 			ccb->ccb_h.status = CAM_BUSY;
685 			break;
686 		case IOP_RESULT_CHECK_CONDITION:
687 			memset(&ccb->csio.sense_data, 0,
688 			       sizeof(ccb->csio.sense_data));
689 			if (req->dataxfer_length < ccb->csio.sense_len)
690 				ccb->csio.sense_resid = ccb->csio.sense_len -
691 				req->dataxfer_length;
692 			else
693 				ccb->csio.sense_resid = 0;
694 			memcpy(&ccb->csio.sense_data, &req->sg_list,
695 			       MIN(req->dataxfer_length, sizeof(ccb->csio.sense_data)));
696 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
697 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
698 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
699 			break;
700 		default:
701 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
702 			break;
703 		}
704 scsi_done:
705 		ccb->csio.resid = ccb->csio.dxfer_len - req->dataxfer_length;
706 
707 		hptiop_free_srb(hba, srb);
708 		xpt_done(ccb);
709 		break;
710 	case IOP_REQUEST_TYPE_IOCTL_COMMAND:
711 		if (_tag & MVFREYIOPMU_QUEUE_REQUEST_RESULT_BIT)
712 			hba->config_done = 1;
713 		else
714 			hba->config_done = -1;
715 		wakeup((struct hpt_iop_request_ioctl_command *)hba->ctlcfg_ptr);
716 		break;
717 	default:
718 		device_printf(hba->pcidev, "wrong callback type\n");
719 		break;
720 	}
721 }
722 
723 static void hptiop_drain_outbound_queue_mv(struct hpt_iop_hba * hba)
724 {
725 	u_int64_t req;
726 
727 	while ((req = hptiop_mv_outbound_read(hba))) {
728 		if (req & MVIOP_MU_QUEUE_ADDR_HOST_BIT) {
729 			if (req & MVIOP_MU_QUEUE_REQUEST_RETURN_CONTEXT) {
730 				hptiop_request_callback_mv(hba, req);
731 			}
732 		}
733 	}
734 }
735 
736 static int hptiop_intr_mv(struct hpt_iop_hba * hba)
737 {
738 	u_int32_t status;
739 	int ret = 0;
740 
741 	status = BUS_SPACE_RD4_MV0(outbound_doorbell);
742 
743 	if (status)
744 		BUS_SPACE_WRT4_MV0(outbound_doorbell, ~status);
745 
746 	if (status & MVIOP_MU_OUTBOUND_INT_MSG) {
747 		u_int32_t msg = BUS_SPACE_RD4_MV2(outbound_msg);
748 		KdPrint(("hptiop: received outbound msg %x\n", msg));
749 		hptiop_os_message_callback(hba, msg);
750 		ret = 1;
751 	}
752 
753 	if (status & MVIOP_MU_OUTBOUND_INT_POSTQUEUE) {
754 		hptiop_drain_outbound_queue_mv(hba);
755 		ret = 1;
756 	}
757 
758 	return ret;
759 }
760 
761 static int hptiop_intr_mvfrey(struct hpt_iop_hba * hba)
762 {
763 	u_int32_t status, _tag, cptr;
764 	int ret = 0;
765 
766 	if (hba->initialized) {
767 		BUS_SPACE_WRT4_MVFREY2(pcie_f0_int_enable, 0);
768 	}
769 
770 	status = BUS_SPACE_RD4_MVFREY2(f0_doorbell);
771 	if (status) {
772 		BUS_SPACE_WRT4_MVFREY2(f0_doorbell, status);
773 		if (status & CPU_TO_F0_DRBL_MSG_A_BIT) {
774 			u_int32_t msg = BUS_SPACE_RD4_MVFREY2(cpu_to_f0_msg_a);
775 			hptiop_os_message_callback(hba, msg);
776 		}
777 		ret = 1;
778 	}
779 
780 	status = BUS_SPACE_RD4_MVFREY2(isr_cause);
781 	if (status) {
782 		BUS_SPACE_WRT4_MVFREY2(isr_cause, status);
783 		do {
784 			cptr = *hba->u.mvfrey.outlist_cptr & 0xff;
785 			while (hba->u.mvfrey.outlist_rptr != cptr) {
786 				hba->u.mvfrey.outlist_rptr++;
787 				if (hba->u.mvfrey.outlist_rptr == hba->u.mvfrey.list_count) {
788 					hba->u.mvfrey.outlist_rptr = 0;
789 				}
790 
791 				_tag = hba->u.mvfrey.outlist[hba->u.mvfrey.outlist_rptr].val;
792 				hptiop_request_callback_mvfrey(hba, _tag);
793 				ret = 2;
794 			}
795 		} while (cptr != (*hba->u.mvfrey.outlist_cptr & 0xff));
796 	}
797 
798 	if (hba->initialized) {
799 		BUS_SPACE_WRT4_MVFREY2(pcie_f0_int_enable, 0x1010);
800 	}
801 
802 	return ret;
803 }
804 
805 static int hptiop_send_sync_request_itl(struct hpt_iop_hba * hba,
806 					u_int32_t req32, u_int32_t millisec)
807 {
808 	u_int32_t i;
809 	u_int64_t temp64;
810 
811 	BUS_SPACE_WRT4_ITL(inbound_queue, req32);
812 	BUS_SPACE_RD4_ITL(outbound_intstatus);
813 
814 	for (i = 0; i < millisec; i++) {
815 		hptiop_intr_itl(hba);
816 		bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
817 			offsetof(struct hpt_iop_request_header, context),
818 			(u_int32_t *)&temp64, 2);
819 		if (temp64)
820 			return 0;
821 		DELAY(1000);
822 	}
823 
824 	return -1;
825 }
826 
827 static int hptiop_send_sync_request_mv(struct hpt_iop_hba *hba,
828 					void *req, u_int32_t millisec)
829 {
830 	u_int32_t i;
831 	u_int64_t phy_addr;
832 	hba->config_done = 0;
833 
834 	phy_addr = hba->ctlcfgcmd_phy |
835 			(u_int64_t)MVIOP_MU_QUEUE_ADDR_HOST_BIT;
836 	((struct hpt_iop_request_get_config *)req)->header.flags |=
837 		IOP_REQUEST_FLAG_SYNC_REQUEST |
838 		IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
839 	hptiop_mv_inbound_write(phy_addr, hba);
840 	BUS_SPACE_RD4_MV0(outbound_intmask);
841 
842 	for (i = 0; i < millisec; i++) {
843 		hptiop_intr_mv(hba);
844 		if (hba->config_done)
845 			return 0;
846 		DELAY(1000);
847 	}
848 	return -1;
849 }
850 
851 static int hptiop_send_sync_request_mvfrey(struct hpt_iop_hba *hba,
852 					void *req, u_int32_t millisec)
853 {
854 	u_int32_t i, index;
855 	u_int64_t phy_addr;
856 	struct hpt_iop_request_header *reqhdr =	(struct hpt_iop_request_header *)req;
857 
858 	hba->config_done = 0;
859 
860 	phy_addr = hba->ctlcfgcmd_phy;
861 	reqhdr->flags = IOP_REQUEST_FLAG_SYNC_REQUEST
862 					| IOP_REQUEST_FLAG_OUTPUT_CONTEXT
863 					| IOP_REQUEST_FLAG_ADDR_BITS
864 					| ((phy_addr >> 16) & 0xffff0000);
865 	reqhdr->context = ((phy_addr & 0xffffffff) << 32 )
866 					| IOPMU_QUEUE_ADDR_HOST_BIT | reqhdr->type;
867 
868 	hba->u.mvfrey.inlist_wptr++;
869 	index = hba->u.mvfrey.inlist_wptr & 0x3fff;
870 
871 	if (index == hba->u.mvfrey.list_count) {
872 		index = 0;
873 		hba->u.mvfrey.inlist_wptr &= ~0x3fff;
874 		hba->u.mvfrey.inlist_wptr ^= CL_POINTER_TOGGLE;
875 	}
876 
877 	hba->u.mvfrey.inlist[index].addr = phy_addr;
878 	hba->u.mvfrey.inlist[index].intrfc_len = (reqhdr->size + 3) / 4;
879 
880 	BUS_SPACE_WRT4_MVFREY2(inbound_write_ptr, hba->u.mvfrey.inlist_wptr);
881 	BUS_SPACE_RD4_MVFREY2(inbound_write_ptr);
882 
883 	for (i = 0; i < millisec; i++) {
884 		hptiop_intr_mvfrey(hba);
885 		if (hba->config_done)
886 			return 0;
887 		DELAY(1000);
888 	}
889 	return -1;
890 }
891 
892 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
893 					u_int32_t msg, u_int32_t millisec)
894 {
895 	u_int32_t i;
896 
897 	hba->msg_done = 0;
898 	hba->ops->post_msg(hba, msg);
899 
900 	for (i=0; i<millisec; i++) {
901 		hba->ops->iop_intr(hba);
902 		if (hba->msg_done)
903 			break;
904 		DELAY(1000);
905 	}
906 
907 	return hba->msg_done? 0 : -1;
908 }
909 
910 static int hptiop_get_config_itl(struct hpt_iop_hba * hba,
911 				struct hpt_iop_request_get_config * config)
912 {
913 	u_int32_t req32;
914 
915 	config->header.size = sizeof(struct hpt_iop_request_get_config);
916 	config->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
917 	config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
918 	config->header.result = IOP_RESULT_PENDING;
919 	config->header.context = 0;
920 
921 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
922 	if (req32 == IOPMU_QUEUE_EMPTY)
923 		return -1;
924 
925 	bus_space_write_region_4(hba->bar0t, hba->bar0h,
926 			req32, (u_int32_t *)config,
927 			sizeof(struct hpt_iop_request_header) >> 2);
928 
929 	if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
930 		KdPrint(("hptiop: get config send cmd failed"));
931 		return -1;
932 	}
933 
934 	bus_space_read_region_4(hba->bar0t, hba->bar0h,
935 			req32, (u_int32_t *)config,
936 			sizeof(struct hpt_iop_request_get_config) >> 2);
937 
938 	BUS_SPACE_WRT4_ITL(outbound_queue, req32);
939 
940 	return 0;
941 }
942 
943 static int hptiop_get_config_mv(struct hpt_iop_hba * hba,
944 				struct hpt_iop_request_get_config * config)
945 {
946 	struct hpt_iop_request_get_config *req;
947 
948 	if (!(req = hba->ctlcfg_ptr))
949 		return -1;
950 
951 	req->header.flags = 0;
952 	req->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
953 	req->header.size = sizeof(struct hpt_iop_request_get_config);
954 	req->header.result = IOP_RESULT_PENDING;
955 	req->header.context = MVIOP_CMD_TYPE_GET_CONFIG;
956 
957 	if (hptiop_send_sync_request_mv(hba, req, 20000)) {
958 		KdPrint(("hptiop: get config send cmd failed"));
959 		return -1;
960 	}
961 
962 	*config = *req;
963 	return 0;
964 }
965 
966 static int hptiop_get_config_mvfrey(struct hpt_iop_hba * hba,
967 				struct hpt_iop_request_get_config * config)
968 {
969 	struct hpt_iop_request_get_config *info = hba->u.mvfrey.config;
970 
971 	if (info->header.size != sizeof(struct hpt_iop_request_get_config) ||
972 	    info->header.type != IOP_REQUEST_TYPE_GET_CONFIG) {
973 		KdPrint(("hptiop: header size %x/%x type %x/%x",
974 			 info->header.size, (int)sizeof(struct hpt_iop_request_get_config),
975 			 info->header.type, IOP_REQUEST_TYPE_GET_CONFIG));
976 		return -1;
977 	}
978 
979 	config->interface_version = info->interface_version;
980 	config->firmware_version = info->firmware_version;
981 	config->max_requests = info->max_requests;
982 	config->request_size = info->request_size;
983 	config->max_sg_count = info->max_sg_count;
984 	config->data_transfer_length = info->data_transfer_length;
985 	config->alignment_mask = info->alignment_mask;
986 	config->max_devices = info->max_devices;
987 	config->sdram_size = info->sdram_size;
988 
989 	KdPrint(("hptiop: maxreq %x reqsz %x datalen %x maxdev %x sdram %x",
990 		 config->max_requests, config->request_size,
991 		 config->data_transfer_length, config->max_devices,
992 		 config->sdram_size));
993 
994 	return 0;
995 }
996 
997 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
998 				struct hpt_iop_request_set_config *config)
999 {
1000 	u_int32_t req32;
1001 
1002 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
1003 
1004 	if (req32 == IOPMU_QUEUE_EMPTY)
1005 		return -1;
1006 
1007 	config->header.size = sizeof(struct hpt_iop_request_set_config);
1008 	config->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
1009 	config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
1010 	config->header.result = IOP_RESULT_PENDING;
1011 	config->header.context = 0;
1012 
1013 	bus_space_write_region_4(hba->bar0t, hba->bar0h, req32,
1014 		(u_int32_t *)config,
1015 		sizeof(struct hpt_iop_request_set_config) >> 2);
1016 
1017 	if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
1018 		KdPrint(("hptiop: set config send cmd failed"));
1019 		return -1;
1020 	}
1021 
1022 	BUS_SPACE_WRT4_ITL(outbound_queue, req32);
1023 
1024 	return 0;
1025 }
1026 
1027 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
1028 				struct hpt_iop_request_set_config *config)
1029 {
1030 	struct hpt_iop_request_set_config *req;
1031 
1032 	if (!(req = hba->ctlcfg_ptr))
1033 		return -1;
1034 
1035 	memcpy((u_int8_t *)req + sizeof(struct hpt_iop_request_header),
1036 		(u_int8_t *)config + sizeof(struct hpt_iop_request_header),
1037 		sizeof(struct hpt_iop_request_set_config) -
1038 			sizeof(struct hpt_iop_request_header));
1039 
1040 	req->header.flags = 0;
1041 	req->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
1042 	req->header.size = sizeof(struct hpt_iop_request_set_config);
1043 	req->header.result = IOP_RESULT_PENDING;
1044 	req->header.context = MVIOP_CMD_TYPE_SET_CONFIG;
1045 
1046 	if (hptiop_send_sync_request_mv(hba, req, 20000)) {
1047 		KdPrint(("hptiop: set config send cmd failed"));
1048 		return -1;
1049 	}
1050 
1051 	return 0;
1052 }
1053 
1054 static int hptiop_set_config_mvfrey(struct hpt_iop_hba *hba,
1055 				struct hpt_iop_request_set_config *config)
1056 {
1057 	struct hpt_iop_request_set_config *req;
1058 
1059 	if (!(req = hba->ctlcfg_ptr))
1060 		return -1;
1061 
1062 	memcpy((u_int8_t *)req + sizeof(struct hpt_iop_request_header),
1063 		(u_int8_t *)config + sizeof(struct hpt_iop_request_header),
1064 		sizeof(struct hpt_iop_request_set_config) -
1065 			sizeof(struct hpt_iop_request_header));
1066 
1067 	req->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
1068 	req->header.size = sizeof(struct hpt_iop_request_set_config);
1069 	req->header.result = IOP_RESULT_PENDING;
1070 
1071 	if (hptiop_send_sync_request_mvfrey(hba, req, 20000)) {
1072 		KdPrint(("hptiop: set config send cmd failed"));
1073 		return -1;
1074 	}
1075 
1076 	return 0;
1077 }
1078 
1079 static int hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
1080 				u_int32_t req32,
1081 				struct hpt_iop_ioctl_param *pParams)
1082 {
1083 	u_int64_t temp64;
1084 	struct hpt_iop_request_ioctl_command req;
1085 
1086 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
1087 			(hba->max_request_size -
1088 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
1089 		device_printf(hba->pcidev, "request size beyond max value");
1090 		return -1;
1091 	}
1092 
1093 	req.header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
1094 		+ pParams->nInBufferSize;
1095 	req.header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
1096 	req.header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
1097 	req.header.result = IOP_RESULT_PENDING;
1098 	req.header.context = req32 + (u_int64_t)(unsigned long)hba->u.itl.mu;
1099 	req.ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
1100 	req.inbuf_size = pParams->nInBufferSize;
1101 	req.outbuf_size = pParams->nOutBufferSize;
1102 	req.bytes_returned = 0;
1103 
1104 	bus_space_write_region_4(hba->bar0t, hba->bar0h, req32, (u_int32_t *)&req,
1105 		offsetof(struct hpt_iop_request_ioctl_command, buf)>>2);
1106 
1107 	hptiop_lock_adapter(hba);
1108 
1109 	BUS_SPACE_WRT4_ITL(inbound_queue, req32);
1110 	BUS_SPACE_RD4_ITL(outbound_intstatus);
1111 
1112 	bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
1113 		offsetof(struct hpt_iop_request_ioctl_command, header.context),
1114 		(u_int32_t *)&temp64, 2);
1115 	while (temp64) {
1116 		if (hptiop_sleep(hba, (void *)((unsigned long)hba->u.itl.mu + req32),
1117 				0, "hptctl", HPT_OSM_TIMEOUT)==0)
1118 			break;
1119 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
1120 		bus_space_read_region_4(hba->bar0t, hba->bar0h,req32 +
1121 			offsetof(struct hpt_iop_request_ioctl_command,
1122 				header.context),
1123 			(u_int32_t *)&temp64, 2);
1124 	}
1125 
1126 	hptiop_unlock_adapter(hba);
1127 	return 0;
1128 }
1129 
1130 static int hptiop_bus_space_copyin(struct hpt_iop_hba *hba, u_int32_t bus,
1131     void *user, int size)
1132 {
1133 	unsigned char byte;
1134 	int i;
1135 
1136 	for (i=0; i<size; i++) {
1137 		if (copyin((u_int8_t *)user + i, &byte, 1))
1138 			return -1;
1139 		bus_space_write_1(hba->bar0t, hba->bar0h, bus + i, byte);
1140 	}
1141 
1142 	return 0;
1143 }
1144 
1145 static int hptiop_bus_space_copyout(struct hpt_iop_hba *hba, u_int32_t bus,
1146     void *user, int size)
1147 {
1148 	unsigned char byte;
1149 	int i;
1150 
1151 	for (i=0; i<size; i++) {
1152 		byte = bus_space_read_1(hba->bar0t, hba->bar0h, bus + i);
1153 		if (copyout(&byte, (u_int8_t *)user + i, 1))
1154 			return -1;
1155 	}
1156 
1157 	return 0;
1158 }
1159 
1160 static int hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
1161 				struct hpt_iop_ioctl_param * pParams)
1162 {
1163 	u_int32_t req32;
1164 	u_int32_t result;
1165 
1166 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
1167 		(pParams->Magic != HPT_IOCTL_MAGIC32))
1168 		return EFAULT;
1169 
1170 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
1171 	if (req32 == IOPMU_QUEUE_EMPTY)
1172 		return EFAULT;
1173 
1174 	if (pParams->nInBufferSize)
1175 		if (hptiop_bus_space_copyin(hba, req32 +
1176 			offsetof(struct hpt_iop_request_ioctl_command, buf),
1177 			(void *)pParams->lpInBuffer, pParams->nInBufferSize))
1178 			goto invalid;
1179 
1180 	if (hptiop_post_ioctl_command_itl(hba, req32, pParams))
1181 		goto invalid;
1182 
1183 	result = bus_space_read_4(hba->bar0t, hba->bar0h, req32 +
1184 			offsetof(struct hpt_iop_request_ioctl_command,
1185 				header.result));
1186 
1187 	if (result == IOP_RESULT_SUCCESS) {
1188 		if (pParams->nOutBufferSize)
1189 			if (hptiop_bus_space_copyout(hba, req32 +
1190 				offsetof(struct hpt_iop_request_ioctl_command, buf) +
1191 					((pParams->nInBufferSize + 3) & ~3),
1192 				(void *)pParams->lpOutBuffer, pParams->nOutBufferSize))
1193 				goto invalid;
1194 
1195 		if (pParams->lpBytesReturned) {
1196 			if (hptiop_bus_space_copyout(hba, req32 +
1197 				offsetof(struct hpt_iop_request_ioctl_command, bytes_returned),
1198 				(void *)pParams->lpBytesReturned, sizeof(unsigned  long)))
1199 				goto invalid;
1200 		}
1201 
1202 		BUS_SPACE_WRT4_ITL(outbound_queue, req32);
1203 
1204 		return 0;
1205 	} else{
1206 invalid:
1207 		BUS_SPACE_WRT4_ITL(outbound_queue, req32);
1208 
1209 		return EFAULT;
1210 	}
1211 }
1212 
1213 static int hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
1214 				struct hpt_iop_request_ioctl_command *req,
1215 				struct hpt_iop_ioctl_param *pParams)
1216 {
1217 	u_int64_t req_phy;
1218 	int size = 0;
1219 
1220 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
1221 			(hba->max_request_size -
1222 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
1223 		device_printf(hba->pcidev, "request size beyond max value");
1224 		return -1;
1225 	}
1226 
1227 	req->ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
1228 	req->inbuf_size = pParams->nInBufferSize;
1229 	req->outbuf_size = pParams->nOutBufferSize;
1230 	req->header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
1231 					+ pParams->nInBufferSize;
1232 	req->header.context = (u_int64_t)MVIOP_CMD_TYPE_IOCTL;
1233 	req->header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
1234 	req->header.result = IOP_RESULT_PENDING;
1235 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
1236 	size = req->header.size >> 8;
1237 	size = size > 3 ? 3 : size;
1238 	req_phy = hba->ctlcfgcmd_phy | MVIOP_MU_QUEUE_ADDR_HOST_BIT | size;
1239 	hptiop_mv_inbound_write(req_phy, hba);
1240 
1241 	BUS_SPACE_RD4_MV0(outbound_intmask);
1242 
1243 	while (hba->config_done == 0) {
1244 		if (hptiop_sleep(hba, req, 0,
1245 			"hptctl", HPT_OSM_TIMEOUT)==0)
1246 			continue;
1247 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
1248 	}
1249 	return 0;
1250 }
1251 
1252 static int hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
1253 				struct hpt_iop_ioctl_param *pParams)
1254 {
1255 	struct hpt_iop_request_ioctl_command *req;
1256 
1257 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
1258 		(pParams->Magic != HPT_IOCTL_MAGIC32))
1259 		return EFAULT;
1260 
1261 	req = (struct hpt_iop_request_ioctl_command *)(hba->ctlcfg_ptr);
1262 	hba->config_done = 0;
1263 	hptiop_lock_adapter(hba);
1264 	if (pParams->nInBufferSize)
1265 		if (copyin((void *)pParams->lpInBuffer,
1266 				req->buf, pParams->nInBufferSize))
1267 			goto invalid;
1268 	if (hptiop_post_ioctl_command_mv(hba, req, pParams))
1269 		goto invalid;
1270 
1271 	if (hba->config_done == 1) {
1272 		if (pParams->nOutBufferSize)
1273 			if (copyout(req->buf +
1274 				((pParams->nInBufferSize + 3) & ~3),
1275 				(void *)pParams->lpOutBuffer,
1276 				pParams->nOutBufferSize))
1277 				goto invalid;
1278 
1279 		if (pParams->lpBytesReturned)
1280 			if (copyout(&req->bytes_returned,
1281 				(void*)pParams->lpBytesReturned,
1282 				sizeof(u_int32_t)))
1283 				goto invalid;
1284 		hptiop_unlock_adapter(hba);
1285 		return 0;
1286 	} else{
1287 invalid:
1288 		hptiop_unlock_adapter(hba);
1289 		return EFAULT;
1290 	}
1291 }
1292 
1293 static int hptiop_post_ioctl_command_mvfrey(struct hpt_iop_hba *hba,
1294 				struct hpt_iop_request_ioctl_command *req,
1295 				struct hpt_iop_ioctl_param *pParams)
1296 {
1297 	u_int64_t phy_addr;
1298 	u_int32_t index;
1299 
1300 	phy_addr = hba->ctlcfgcmd_phy;
1301 
1302 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
1303 			(hba->max_request_size -
1304 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
1305 		device_printf(hba->pcidev, "request size beyond max value");
1306 		return -1;
1307 	}
1308 
1309 	req->ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
1310 	req->inbuf_size = pParams->nInBufferSize;
1311 	req->outbuf_size = pParams->nOutBufferSize;
1312 	req->header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
1313 					+ pParams->nInBufferSize;
1314 
1315 	req->header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
1316 	req->header.result = IOP_RESULT_PENDING;
1317 
1318 	req->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST
1319 						| IOP_REQUEST_FLAG_OUTPUT_CONTEXT
1320 						| IOP_REQUEST_FLAG_ADDR_BITS
1321 						| ((phy_addr >> 16) & 0xffff0000);
1322 	req->header.context = ((phy_addr & 0xffffffff) << 32 )
1323 						| IOPMU_QUEUE_ADDR_HOST_BIT | req->header.type;
1324 
1325 	hba->u.mvfrey.inlist_wptr++;
1326 	index = hba->u.mvfrey.inlist_wptr & 0x3fff;
1327 
1328 	if (index == hba->u.mvfrey.list_count) {
1329 		index = 0;
1330 		hba->u.mvfrey.inlist_wptr &= ~0x3fff;
1331 		hba->u.mvfrey.inlist_wptr ^= CL_POINTER_TOGGLE;
1332 	}
1333 
1334 	hba->u.mvfrey.inlist[index].addr = phy_addr;
1335 	hba->u.mvfrey.inlist[index].intrfc_len = (req->header.size + 3) / 4;
1336 
1337 	BUS_SPACE_WRT4_MVFREY2(inbound_write_ptr, hba->u.mvfrey.inlist_wptr);
1338 	BUS_SPACE_RD4_MVFREY2(inbound_write_ptr);
1339 
1340 	while (hba->config_done == 0) {
1341 		if (hptiop_sleep(hba, req, 0, "hptctl", HPT_OSM_TIMEOUT) == 0)
1342 			continue;
1343 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
1344 	}
1345 	return 0;
1346 }
1347 
1348 static int hptiop_do_ioctl_mvfrey(struct hpt_iop_hba *hba,
1349 				struct hpt_iop_ioctl_param *pParams)
1350 {
1351 	struct hpt_iop_request_ioctl_command *req;
1352 
1353 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
1354 		(pParams->Magic != HPT_IOCTL_MAGIC32))
1355 		return EFAULT;
1356 
1357 	req = (struct hpt_iop_request_ioctl_command *)(hba->ctlcfg_ptr);
1358 	hba->config_done = 0;
1359 	hptiop_lock_adapter(hba);
1360 	if (pParams->nInBufferSize)
1361 		if (copyin((void *)pParams->lpInBuffer,
1362 				req->buf, pParams->nInBufferSize))
1363 			goto invalid;
1364 	if (hptiop_post_ioctl_command_mvfrey(hba, req, pParams))
1365 		goto invalid;
1366 
1367 	if (hba->config_done == 1) {
1368 		if (pParams->nOutBufferSize)
1369 			if (copyout(req->buf +
1370 				((pParams->nInBufferSize + 3) & ~3),
1371 				(void *)pParams->lpOutBuffer,
1372 				pParams->nOutBufferSize))
1373 				goto invalid;
1374 
1375 		if (pParams->lpBytesReturned)
1376 			if (copyout(&req->bytes_returned,
1377 				(void*)pParams->lpBytesReturned,
1378 				sizeof(u_int32_t)))
1379 				goto invalid;
1380 		hptiop_unlock_adapter(hba);
1381 		return 0;
1382 	} else{
1383 invalid:
1384 		hptiop_unlock_adapter(hba);
1385 		return EFAULT;
1386 	}
1387 }
1388 
1389 static int  hptiop_rescan_bus(struct hpt_iop_hba * hba)
1390 {
1391 	union ccb           *ccb;
1392 
1393 	if ((ccb = xpt_alloc_ccb()) == NULL)
1394 		return(ENOMEM);
1395 	if (xpt_create_path(&ccb->ccb_h.path, xpt_periph, cam_sim_path(hba->sim),
1396 		CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1397 		xpt_free_ccb(ccb);
1398 		return(EIO);
1399 	}
1400 
1401 	xpt_setup_ccb(&ccb->ccb_h, ccb->ccb_h.path, 5/*priority (low)*/);
1402 	ccb->ccb_h.func_code = XPT_SCAN_BUS;
1403 	ccb->ccb_h.cbfcnp = hptiop_bus_scan_cb;
1404 	ccb->crcn.flags = CAM_FLAG_NONE;
1405 	xpt_action(ccb);
1406 	return(0);
1407 }
1408 
1409 static void hptiop_bus_scan_cb(struct cam_periph *periph, union ccb *ccb)
1410 {
1411 	xpt_free_path(ccb->ccb_h.path);
1412 	kfree(ccb, M_TEMP);
1413 }
1414 
1415 static	bus_dmamap_callback_t	hptiop_map_srb;
1416 static	bus_dmamap_callback_t	hptiop_post_scsi_command;
1417 static	bus_dmamap_callback_t	hptiop_mv_map_ctlcfg;
1418 static	bus_dmamap_callback_t	hptiop_mvfrey_map_ctlcfg;
1419 
1420 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba)
1421 {
1422 	hba->bar0_rid = 0x10;
1423 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1424 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1425 
1426 	if (hba->bar0_res == NULL) {
1427 		device_printf(hba->pcidev,
1428 			"failed to get iop base adrress.\n");
1429 		return -1;
1430 	}
1431 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1432 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1433 	hba->u.itl.mu = (struct hpt_iopmu_itl *)
1434 				rman_get_virtual(hba->bar0_res);
1435 
1436 	if (!hba->u.itl.mu) {
1437 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1438 					hba->bar0_rid, hba->bar0_res);
1439 		device_printf(hba->pcidev, "alloc mem res failed\n");
1440 		return -1;
1441 	}
1442 
1443 	return 0;
1444 }
1445 
1446 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba)
1447 {
1448 	hba->bar0_rid = 0x10;
1449 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1450 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1451 
1452 	if (hba->bar0_res == NULL) {
1453 		device_printf(hba->pcidev, "failed to get iop bar0.\n");
1454 		return -1;
1455 	}
1456 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1457 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1458 	hba->u.mv.regs = (struct hpt_iopmv_regs *)
1459 				rman_get_virtual(hba->bar0_res);
1460 
1461 	if (!hba->u.mv.regs) {
1462 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1463 					hba->bar0_rid, hba->bar0_res);
1464 		device_printf(hba->pcidev, "alloc bar0 mem res failed\n");
1465 		return -1;
1466 	}
1467 
1468 	hba->bar2_rid = 0x18;
1469 	hba->bar2_res = bus_alloc_resource_any(hba->pcidev,
1470 			SYS_RES_MEMORY, &hba->bar2_rid, RF_ACTIVE);
1471 
1472 	if (hba->bar2_res == NULL) {
1473 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1474 					hba->bar0_rid, hba->bar0_res);
1475 		device_printf(hba->pcidev, "failed to get iop bar2.\n");
1476 		return -1;
1477 	}
1478 
1479 	hba->bar2t = rman_get_bustag(hba->bar2_res);
1480 	hba->bar2h = rman_get_bushandle(hba->bar2_res);
1481 	hba->u.mv.mu = (struct hpt_iopmu_mv *)rman_get_virtual(hba->bar2_res);
1482 
1483 	if (!hba->u.mv.mu) {
1484 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1485 					hba->bar0_rid, hba->bar0_res);
1486 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1487 					hba->bar2_rid, hba->bar2_res);
1488 		device_printf(hba->pcidev, "alloc mem bar2 res failed\n");
1489 		return -1;
1490 	}
1491 
1492 	return 0;
1493 }
1494 
1495 static int hptiop_alloc_pci_res_mvfrey(struct hpt_iop_hba *hba)
1496 {
1497 	hba->bar0_rid = 0x10;
1498 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1499 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1500 
1501 	if (hba->bar0_res == NULL) {
1502 		device_printf(hba->pcidev, "failed to get iop bar0.\n");
1503 		return -1;
1504 	}
1505 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1506 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1507 	hba->u.mvfrey.config = (struct hpt_iop_request_get_config *)
1508 				rman_get_virtual(hba->bar0_res);
1509 
1510 	if (!hba->u.mvfrey.config) {
1511 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1512 					hba->bar0_rid, hba->bar0_res);
1513 		device_printf(hba->pcidev, "alloc bar0 mem res failed\n");
1514 		return -1;
1515 	}
1516 
1517 	hba->bar2_rid = 0x18;
1518 	hba->bar2_res = bus_alloc_resource_any(hba->pcidev,
1519 			SYS_RES_MEMORY, &hba->bar2_rid, RF_ACTIVE);
1520 
1521 	if (hba->bar2_res == NULL) {
1522 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1523 					hba->bar0_rid, hba->bar0_res);
1524 		device_printf(hba->pcidev, "failed to get iop bar2.\n");
1525 		return -1;
1526 	}
1527 
1528 	hba->bar2t = rman_get_bustag(hba->bar2_res);
1529 	hba->bar2h = rman_get_bushandle(hba->bar2_res);
1530 	hba->u.mvfrey.mu =
1531 					(struct hpt_iopmu_mvfrey *)rman_get_virtual(hba->bar2_res);
1532 
1533 	if (!hba->u.mvfrey.mu) {
1534 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1535 					hba->bar0_rid, hba->bar0_res);
1536 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1537 					hba->bar2_rid, hba->bar2_res);
1538 		device_printf(hba->pcidev, "alloc mem bar2 res failed\n");
1539 		return -1;
1540 	}
1541 
1542 	return 0;
1543 }
1544 
1545 static void hptiop_release_pci_res_itl(struct hpt_iop_hba *hba)
1546 {
1547 	if (hba->bar0_res)
1548 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1549 			hba->bar0_rid, hba->bar0_res);
1550 }
1551 
1552 static void hptiop_release_pci_res_mv(struct hpt_iop_hba *hba)
1553 {
1554 	if (hba->bar0_res)
1555 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1556 			hba->bar0_rid, hba->bar0_res);
1557 	if (hba->bar2_res)
1558 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1559 			hba->bar2_rid, hba->bar2_res);
1560 }
1561 
1562 static void hptiop_release_pci_res_mvfrey(struct hpt_iop_hba *hba)
1563 {
1564 	if (hba->bar0_res)
1565 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1566 			hba->bar0_rid, hba->bar0_res);
1567 	if (hba->bar2_res)
1568 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1569 			hba->bar2_rid, hba->bar2_res);
1570 }
1571 
1572 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba)
1573 {
1574 	if (bus_dma_tag_create(hba->parent_dmat,
1575 				1,
1576 				0,
1577 				BUS_SPACE_MAXADDR_32BIT,
1578 				BUS_SPACE_MAXADDR,
1579 				NULL, NULL,
1580 				0x800 - 0x8,
1581 				1,
1582 				BUS_SPACE_MAXSIZE_32BIT,
1583 				BUS_DMA_ALLOCNOW,
1584 				&hba->ctlcfg_dmat)) {
1585 		device_printf(hba->pcidev, "alloc ctlcfg_dmat failed\n");
1586 		return -1;
1587 	}
1588 
1589 	if (bus_dmamem_alloc(hba->ctlcfg_dmat, (void **)&hba->ctlcfg_ptr,
1590 		BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1591 		&hba->ctlcfg_dmamap) != 0) {
1592 			device_printf(hba->pcidev,
1593 					"bus_dmamem_alloc failed!\n");
1594 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1595 			return -1;
1596 	}
1597 
1598 	if (bus_dmamap_load(hba->ctlcfg_dmat,
1599 			hba->ctlcfg_dmamap, hba->ctlcfg_ptr,
1600 			MVIOP_IOCTLCFG_SIZE,
1601 			hptiop_mv_map_ctlcfg, hba, 0)) {
1602 		device_printf(hba->pcidev, "bus_dmamap_load failed!\n");
1603 		if (hba->ctlcfg_dmat) {
1604 			bus_dmamem_free(hba->ctlcfg_dmat,
1605 				hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1606 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1607 		}
1608 		return -1;
1609 	}
1610 
1611 	return 0;
1612 }
1613 
1614 static int hptiop_internal_memalloc_mvfrey(struct hpt_iop_hba *hba)
1615 {
1616 	u_int32_t list_count = BUS_SPACE_RD4_MVFREY2(inbound_conf_ctl);
1617 
1618 	list_count >>= 16;
1619 
1620 	if (list_count == 0) {
1621 		return -1;
1622 	}
1623 
1624 	hba->u.mvfrey.list_count = list_count;
1625 	hba->u.mvfrey.internal_mem_size = 0x800
1626 							+ list_count * sizeof(struct mvfrey_inlist_entry)
1627 							+ list_count * sizeof(struct mvfrey_outlist_entry)
1628 							+ sizeof(int);
1629 	if (bus_dma_tag_create(hba->parent_dmat,
1630 				1,
1631 				0,
1632 				BUS_SPACE_MAXADDR_32BIT,
1633 				BUS_SPACE_MAXADDR,
1634 				NULL, NULL,
1635 				hba->u.mvfrey.internal_mem_size,
1636 				1,
1637 				BUS_SPACE_MAXSIZE_32BIT,
1638 				BUS_DMA_ALLOCNOW,
1639 				&hba->ctlcfg_dmat)) {
1640 		device_printf(hba->pcidev, "alloc ctlcfg_dmat failed\n");
1641 		return -1;
1642 	}
1643 
1644 	if (bus_dmamem_alloc(hba->ctlcfg_dmat, (void **)&hba->ctlcfg_ptr,
1645 		BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1646 		&hba->ctlcfg_dmamap) != 0) {
1647 			device_printf(hba->pcidev,
1648 					"bus_dmamem_alloc failed!\n");
1649 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1650 			return -1;
1651 	}
1652 
1653 	if (bus_dmamap_load(hba->ctlcfg_dmat,
1654 			hba->ctlcfg_dmamap, hba->ctlcfg_ptr,
1655 			hba->u.mvfrey.internal_mem_size,
1656 			hptiop_mvfrey_map_ctlcfg, hba, 0)) {
1657 		device_printf(hba->pcidev, "bus_dmamap_load failed!\n");
1658 		if (hba->ctlcfg_dmat)
1659 			bus_dmamem_free(hba->ctlcfg_dmat,
1660 				hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1661 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1662 		return -1;
1663 	}
1664 
1665 	return 0;
1666 }
1667 
1668 static int hptiop_internal_memfree_itl(struct hpt_iop_hba *hba) {
1669 	return 0;
1670 }
1671 
1672 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba)
1673 {
1674 	if (hba->ctlcfg_dmat) {
1675 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
1676 		bus_dmamem_free(hba->ctlcfg_dmat,
1677 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1678 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
1679 	}
1680 
1681 	return 0;
1682 }
1683 
1684 static int hptiop_internal_memfree_mvfrey(struct hpt_iop_hba *hba)
1685 {
1686 	if (hba->ctlcfg_dmat) {
1687 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
1688 		bus_dmamem_free(hba->ctlcfg_dmat,
1689 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1690 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
1691 	}
1692 
1693 	return 0;
1694 }
1695 
1696 static int hptiop_reset_comm_mvfrey(struct hpt_iop_hba *hba)
1697 {
1698 	u_int32_t i = 100;
1699 
1700 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET_COMM, 3000))
1701 		return -1;
1702 
1703 	/* wait 100ms for MCU ready */
1704 	while(i--) {
1705 		DELAY(1000);
1706 	}
1707 
1708 	BUS_SPACE_WRT4_MVFREY2(inbound_base,
1709 							hba->u.mvfrey.inlist_phy & 0xffffffff);
1710 	BUS_SPACE_WRT4_MVFREY2(inbound_base_high,
1711 							(hba->u.mvfrey.inlist_phy >> 16) >> 16);
1712 
1713 	BUS_SPACE_WRT4_MVFREY2(outbound_base,
1714 							hba->u.mvfrey.outlist_phy & 0xffffffff);
1715 	BUS_SPACE_WRT4_MVFREY2(outbound_base_high,
1716 							(hba->u.mvfrey.outlist_phy >> 16) >> 16);
1717 
1718 	BUS_SPACE_WRT4_MVFREY2(outbound_shadow_base,
1719 							hba->u.mvfrey.outlist_cptr_phy & 0xffffffff);
1720 	BUS_SPACE_WRT4_MVFREY2(outbound_shadow_base_high,
1721 							(hba->u.mvfrey.outlist_cptr_phy >> 16) >> 16);
1722 
1723 	hba->u.mvfrey.inlist_wptr = (hba->u.mvfrey.list_count - 1)
1724 								| CL_POINTER_TOGGLE;
1725 	*hba->u.mvfrey.outlist_cptr = (hba->u.mvfrey.list_count - 1)
1726 								| CL_POINTER_TOGGLE;
1727 	hba->u.mvfrey.outlist_rptr = hba->u.mvfrey.list_count - 1;
1728 
1729 	return 0;
1730 }
1731 
1732 /*
1733  * CAM driver interface
1734  */
1735 static device_method_t driver_methods[] = {
1736 	/* Device interface */
1737 	DEVMETHOD(device_probe,     hptiop_probe),
1738 	DEVMETHOD(device_attach,    hptiop_attach),
1739 	DEVMETHOD(device_detach,    hptiop_detach),
1740 	DEVMETHOD(device_shutdown,  hptiop_shutdown),
1741 	DEVMETHOD_END
1742 };
1743 
1744 static struct hptiop_adapter_ops hptiop_itl_ops = {
1745 	.family	           = INTEL_BASED_IOP,
1746 	.iop_wait_ready    = hptiop_wait_ready_itl,
1747 	.internal_memalloc = 0,
1748 	.internal_memfree  = hptiop_internal_memfree_itl,
1749 	.alloc_pci_res     = hptiop_alloc_pci_res_itl,
1750 	.release_pci_res   = hptiop_release_pci_res_itl,
1751 	.enable_intr       = hptiop_enable_intr_itl,
1752 	.disable_intr      = hptiop_disable_intr_itl,
1753 	.get_config        = hptiop_get_config_itl,
1754 	.set_config        = hptiop_set_config_itl,
1755 	.iop_intr          = hptiop_intr_itl,
1756 	.post_msg          = hptiop_post_msg_itl,
1757 	.post_req          = hptiop_post_req_itl,
1758 	.do_ioctl          = hptiop_do_ioctl_itl,
1759 	.reset_comm        = 0,
1760 };
1761 
1762 static struct hptiop_adapter_ops hptiop_mv_ops = {
1763 	.family	           = MV_BASED_IOP,
1764 	.iop_wait_ready    = hptiop_wait_ready_mv,
1765 	.internal_memalloc = hptiop_internal_memalloc_mv,
1766 	.internal_memfree  = hptiop_internal_memfree_mv,
1767 	.alloc_pci_res     = hptiop_alloc_pci_res_mv,
1768 	.release_pci_res   = hptiop_release_pci_res_mv,
1769 	.enable_intr       = hptiop_enable_intr_mv,
1770 	.disable_intr      = hptiop_disable_intr_mv,
1771 	.get_config        = hptiop_get_config_mv,
1772 	.set_config        = hptiop_set_config_mv,
1773 	.iop_intr          = hptiop_intr_mv,
1774 	.post_msg          = hptiop_post_msg_mv,
1775 	.post_req          = hptiop_post_req_mv,
1776 	.do_ioctl          = hptiop_do_ioctl_mv,
1777 	.reset_comm        = 0,
1778 };
1779 
1780 static struct hptiop_adapter_ops hptiop_mvfrey_ops = {
1781 	.family	           = MVFREY_BASED_IOP,
1782 	.iop_wait_ready    = hptiop_wait_ready_mvfrey,
1783 	.internal_memalloc = hptiop_internal_memalloc_mvfrey,
1784 	.internal_memfree  = hptiop_internal_memfree_mvfrey,
1785 	.alloc_pci_res     = hptiop_alloc_pci_res_mvfrey,
1786 	.release_pci_res   = hptiop_release_pci_res_mvfrey,
1787 	.enable_intr       = hptiop_enable_intr_mvfrey,
1788 	.disable_intr      = hptiop_disable_intr_mvfrey,
1789 	.get_config        = hptiop_get_config_mvfrey,
1790 	.set_config        = hptiop_set_config_mvfrey,
1791 	.iop_intr          = hptiop_intr_mvfrey,
1792 	.post_msg          = hptiop_post_msg_mvfrey,
1793 	.post_req          = hptiop_post_req_mvfrey,
1794 	.do_ioctl          = hptiop_do_ioctl_mvfrey,
1795 	.reset_comm        = hptiop_reset_comm_mvfrey,
1796 };
1797 
1798 static driver_t hptiop_pci_driver = {
1799 	driver_name,
1800 	driver_methods,
1801 	sizeof(struct hpt_iop_hba)
1802 };
1803 
1804 DRIVER_MODULE(hptiop, pci, hptiop_pci_driver, hptiop_devclass, NULL, NULL);
1805 MODULE_DEPEND(hptiop, cam, 1, 1, 1);
1806 MODULE_VERSION(hptiop, 1);
1807 
1808 static int hptiop_probe(device_t dev)
1809 {
1810 	struct hpt_iop_hba *hba;
1811 	u_int32_t id;
1812 	static char buf[256];
1813 	int sas = 0;
1814 	struct hptiop_adapter_ops *ops;
1815 
1816 	if (pci_get_vendor(dev) != 0x1103)
1817 		return (ENXIO);
1818 
1819 	id = pci_get_device(dev);
1820 
1821 	switch (id) {
1822 		case 0x4520:
1823 		case 0x4522:
1824 			sas = 1;
1825 			ops = &hptiop_mvfrey_ops;
1826 			break;
1827 		case 0x4210:
1828 		case 0x4211:
1829 		case 0x4310:
1830 		case 0x4311:
1831 		case 0x4320:
1832 		case 0x4321:
1833 		case 0x4322:
1834 			sas = 1;
1835 		case 0x3220:
1836 		case 0x3320:
1837 		case 0x3410:
1838 		case 0x3520:
1839 		case 0x3510:
1840 		case 0x3511:
1841 		case 0x3521:
1842 		case 0x3522:
1843 		case 0x3530:
1844 		case 0x3540:
1845 		case 0x3560:
1846 			ops = &hptiop_itl_ops;
1847 			break;
1848 		case 0x3020:
1849 		case 0x3120:
1850 		case 0x3122:
1851 			ops = &hptiop_mv_ops;
1852 			break;
1853 		default:
1854 			return (ENXIO);
1855 	}
1856 
1857 	device_printf(dev, "adapter at PCI %d:%d:%d, IRQ %d\n",
1858 		pci_get_bus(dev), pci_get_slot(dev),
1859 		pci_get_function(dev), pci_get_irq(dev));
1860 
1861 	ksprintf(buf, "RocketRAID %x %s Controller",
1862 				id, sas ? "SAS" : "SATA");
1863 	device_set_desc_copy(dev, buf);
1864 
1865 	hba = (struct hpt_iop_hba *)device_get_softc(dev);
1866 	bzero(hba, sizeof(struct hpt_iop_hba));
1867 	hba->ops = ops;
1868 
1869 	KdPrint(("hba->ops=%p\n", hba->ops));
1870 	return 0;
1871 }
1872 
1873 static int hptiop_attach(device_t dev)
1874 {
1875 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)device_get_softc(dev);
1876 	struct hpt_iop_request_get_config  iop_config;
1877 	struct hpt_iop_request_set_config  set_config;
1878 	int rid = 0;
1879 	struct cam_devq *devq;
1880 	struct ccb_setasync ccb;
1881 	u_int32_t unit = device_get_unit(dev);
1882 
1883 	device_printf(dev, "RocketRAID 3xxx/4xxx controller driver %s\n",
1884 	    driver_version);
1885 
1886 	KdPrint(("hptiop: attach(%d, %d/%d/%d) ops=%p\n", unit,
1887 		pci_get_bus(dev), pci_get_slot(dev),
1888 		pci_get_function(dev), hba->ops));
1889 
1890 	pci_enable_busmaster(dev);
1891 	hba->pcidev = dev;
1892 
1893 	if (hba->ops->alloc_pci_res(hba))
1894 		return ENXIO;
1895 
1896 	if (hba->ops->iop_wait_ready(hba, 2000)) {
1897 		device_printf(dev, "adapter is not ready\n");
1898 		goto release_pci_res;
1899 	}
1900 
1901 	lockinit(&hba->lock, "hptioplock", 0, LK_CANRECURSE);
1902 
1903 	if (bus_dma_tag_create(NULL,/* parent */
1904 			1,  /* alignment */
1905 			0, /* boundary */
1906 			BUS_SPACE_MAXADDR,  /* lowaddr */
1907 			BUS_SPACE_MAXADDR,  /* highaddr */
1908 			NULL, NULL,         /* filter, filterarg */
1909 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsize */
1910 			BUS_SPACE_UNRESTRICTED, /* nsegments */
1911 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1912 			0,      /* flags */
1913 			&hba->parent_dmat   /* tag */))
1914 	{
1915 		device_printf(dev, "alloc parent_dmat failed\n");
1916 		goto release_pci_res;
1917 	}
1918 
1919 	if (hba->ops->family == MV_BASED_IOP) {
1920 		if (hba->ops->internal_memalloc(hba)) {
1921 			device_printf(dev, "alloc srb_dmat failed\n");
1922 			goto destroy_parent_tag;
1923 		}
1924 	}
1925 
1926 	if (hba->ops->get_config(hba, &iop_config)) {
1927 		device_printf(dev, "get iop config failed.\n");
1928 		goto get_config_failed;
1929 	}
1930 
1931 	hba->firmware_version = iop_config.firmware_version;
1932 	hba->interface_version = iop_config.interface_version;
1933 	hba->max_requests = iop_config.max_requests;
1934 	hba->max_devices = iop_config.max_devices;
1935 	hba->max_request_size = iop_config.request_size;
1936 	hba->max_sg_count = iop_config.max_sg_count;
1937 
1938 	if (hba->ops->family == MVFREY_BASED_IOP) {
1939 		if (hba->ops->internal_memalloc(hba)) {
1940 			device_printf(dev, "alloc srb_dmat failed\n");
1941 			goto destroy_parent_tag;
1942 		}
1943 		if (hba->ops->reset_comm(hba)) {
1944 			device_printf(dev, "reset comm failed\n");
1945 			goto get_config_failed;
1946 		}
1947 	}
1948 
1949 	if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1950 			4,  /* alignment */
1951 			BUS_SPACE_MAXADDR_32BIT+1, /* boundary */
1952 			BUS_SPACE_MAXADDR,  /* lowaddr */
1953 			BUS_SPACE_MAXADDR,  /* highaddr */
1954 			NULL, NULL,         /* filter, filterarg */
1955 			PAGE_SIZE * (hba->max_sg_count-1),  /* maxsize */
1956 			hba->max_sg_count,  /* nsegments */
1957 			0x20000,    /* maxsegsize */
1958 			BUS_DMA_ALLOCNOW,       /* flags */
1959 			&hba->io_dmat   /* tag */))
1960 	{
1961 		device_printf(dev, "alloc io_dmat failed\n");
1962 		goto get_config_failed;
1963 	}
1964 
1965 	if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1966 			1,  /* alignment */
1967 			0, /* boundary */
1968 			BUS_SPACE_MAXADDR_32BIT,    /* lowaddr */
1969 			BUS_SPACE_MAXADDR,  /* highaddr */
1970 			NULL, NULL,         /* filter, filterarg */
1971 			HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE + 0x20,
1972 			1,  /* nsegments */
1973 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1974 			0,      /* flags */
1975 			&hba->srb_dmat  /* tag */))
1976 	{
1977 		device_printf(dev, "alloc srb_dmat failed\n");
1978 		goto destroy_io_dmat;
1979 	}
1980 
1981 	if (bus_dmamem_alloc(hba->srb_dmat, (void **)&hba->uncached_ptr,
1982 			BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1983 			&hba->srb_dmamap) != 0)
1984 	{
1985 		device_printf(dev, "srb bus_dmamem_alloc failed!\n");
1986 		goto destroy_srb_dmat;
1987 	}
1988 
1989 	if (bus_dmamap_load(hba->srb_dmat,
1990 			hba->srb_dmamap, hba->uncached_ptr,
1991 			(HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE) + 0x20,
1992 			hptiop_map_srb, hba, 0))
1993 	{
1994 		device_printf(dev, "bus_dmamap_load failed!\n");
1995 		goto srb_dmamem_free;
1996 	}
1997 
1998 	if ((devq = cam_simq_alloc(hba->max_requests - 1 )) == NULL) {
1999 		device_printf(dev, "cam_simq_alloc failed\n");
2000 		goto srb_dmamap_unload;
2001 	}
2002 
2003 	hba->sim = cam_sim_alloc(hptiop_action, hptiop_poll, driver_name,
2004 			hba, unit, &sim_mplock, hba->max_requests - 1, 1, devq);
2005 	cam_simq_release(devq);
2006 	if (!hba->sim) {
2007 		device_printf(dev, "cam_sim_alloc failed\n");
2008 		goto srb_dmamap_unload;
2009 	}
2010 	if (xpt_bus_register(hba->sim, 0) != CAM_SUCCESS)
2011 	{
2012 		device_printf(dev, "xpt_bus_register failed\n");
2013 		goto free_cam_sim;
2014 	}
2015 
2016 	if (xpt_create_path(&hba->path, /*periph */ NULL,
2017 			cam_sim_path(hba->sim), CAM_TARGET_WILDCARD,
2018 			CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
2019 		device_printf(dev, "xpt_create_path failed\n");
2020 		goto deregister_xpt_bus;
2021 	}
2022 
2023 	bzero(&set_config, sizeof(set_config));
2024 	set_config.iop_id = unit;
2025 	set_config.vbus_id = cam_sim_path(hba->sim);
2026 	set_config.max_host_request_size = HPT_SRB_MAX_REQ_SIZE;
2027 
2028 	if (hba->ops->set_config(hba, &set_config)) {
2029 		device_printf(dev, "set iop config failed.\n");
2030 		goto free_hba_path;
2031 	}
2032 
2033 	xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
2034 	ccb.ccb_h.func_code = XPT_SASYNC_CB;
2035 	ccb.event_enable = (AC_FOUND_DEVICE | AC_LOST_DEVICE);
2036 	ccb.callback = hptiop_async;
2037 	ccb.callback_arg = hba->sim;
2038 	xpt_action((union ccb *)&ccb);
2039 
2040 	rid = 0;
2041 	if ((hba->irq_res = bus_alloc_resource(hba->pcidev, SYS_RES_IRQ,
2042 			&rid, 0, ~0ul, 1, RF_SHAREABLE | RF_ACTIVE)) == NULL) {
2043 		device_printf(dev, "allocate irq failed!\n");
2044 		goto free_hba_path;
2045 	}
2046 
2047 	if (bus_setup_intr(hba->pcidev, hba->irq_res, 0,
2048 				hptiop_pci_intr, hba, &hba->irq_handle, NULL))
2049 	{
2050 		device_printf(dev, "allocate intr function failed!\n");
2051 		goto free_irq_resource;
2052 	}
2053 
2054 	if (hptiop_send_sync_msg(hba,
2055 			IOPMU_INBOUND_MSG0_START_BACKGROUND_TASK, 5000)) {
2056 		device_printf(dev, "fail to start background task\n");
2057 		goto teartown_irq_resource;
2058 	}
2059 
2060 	hba->ops->enable_intr(hba);
2061 	hba->initialized = 1;
2062 
2063 	hba->ioctl_dev = make_dev(&hptiop_ops, unit,
2064 				UID_ROOT, GID_WHEEL /*GID_OPERATOR*/,
2065 				S_IRUSR | S_IWUSR, "%s%d", driver_name, unit);
2066 
2067 	hba->ioctl_dev->si_drv1 = hba;
2068 
2069 	hptiop_rescan_bus(hba);
2070 
2071 	return 0;
2072 
2073 
2074 teartown_irq_resource:
2075 	bus_teardown_intr(dev, hba->irq_res, hba->irq_handle);
2076 
2077 free_irq_resource:
2078 	bus_release_resource(dev, SYS_RES_IRQ, 0, hba->irq_res);
2079 
2080 free_hba_path:
2081 	xpt_free_path(hba->path);
2082 
2083 deregister_xpt_bus:
2084 	xpt_bus_deregister(cam_sim_path(hba->sim));
2085 
2086 free_cam_sim:
2087 	cam_sim_free(hba->sim);
2088 
2089 srb_dmamap_unload:
2090 	if (hba->uncached_ptr)
2091 		bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
2092 
2093 srb_dmamem_free:
2094 	if (hba->uncached_ptr)
2095 		bus_dmamem_free(hba->srb_dmat,
2096 			hba->uncached_ptr, hba->srb_dmamap);
2097 
2098 destroy_srb_dmat:
2099 	if (hba->srb_dmat)
2100 		bus_dma_tag_destroy(hba->srb_dmat);
2101 
2102 destroy_io_dmat:
2103 	if (hba->io_dmat)
2104 		bus_dma_tag_destroy(hba->io_dmat);
2105 
2106 get_config_failed:
2107 	hba->ops->internal_memfree(hba);
2108 
2109 destroy_parent_tag:
2110 	if (hba->parent_dmat)
2111 		bus_dma_tag_destroy(hba->parent_dmat);
2112 
2113 release_pci_res:
2114 	if (hba->ops->release_pci_res)
2115 		hba->ops->release_pci_res(hba);
2116 
2117 	return ENXIO;
2118 }
2119 
2120 static int hptiop_detach(device_t dev)
2121 {
2122 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
2123 	int i;
2124 	int error = EBUSY;
2125 
2126 	hptiop_lock_adapter(hba);
2127 	for (i = 0; i < hba->max_devices; i++)
2128 		if (hptiop_os_query_remove_device(hba, i)) {
2129 			device_printf(dev, "file system is busy. id=%d", i);
2130 			goto out;
2131 		}
2132 
2133 	if ((error = hptiop_shutdown(dev)) != 0)
2134 		goto out;
2135 	if (hptiop_send_sync_msg(hba,
2136 		IOPMU_INBOUND_MSG0_STOP_BACKGROUND_TASK, 60000))
2137 		goto out;
2138 
2139 	hptiop_release_resource(hba);
2140 	error = 0;
2141 out:
2142 	hptiop_unlock_adapter(hba);
2143 	return error;
2144 }
2145 
2146 static int hptiop_shutdown(device_t dev)
2147 {
2148 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
2149 
2150 	int error = 0;
2151 
2152 	if (hba->flag & HPT_IOCTL_FLAG_OPEN) {
2153 		device_printf(dev, "device is busy");
2154 		return EBUSY;
2155 	}
2156 
2157 	hba->ops->disable_intr(hba);
2158 
2159 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_SHUTDOWN, 60000))
2160 		error = EBUSY;
2161 
2162 	return error;
2163 }
2164 
2165 static void hptiop_pci_intr(void *arg)
2166 {
2167 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
2168 	hptiop_lock_adapter(hba);
2169 	hba->ops->iop_intr(hba);
2170 	hptiop_unlock_adapter(hba);
2171 }
2172 
2173 static void hptiop_poll(struct cam_sim *sim)
2174 {
2175 	hptiop_pci_intr(cam_sim_softc(sim));
2176 }
2177 
2178 static void hptiop_async(void * callback_arg, u_int32_t code,
2179 					struct cam_path * path, void * arg)
2180 {
2181 }
2182 
2183 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba)
2184 {
2185 	BUS_SPACE_WRT4_ITL(outbound_intmask,
2186 		~(IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0));
2187 }
2188 
2189 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba)
2190 {
2191 	u_int32_t int_mask;
2192 
2193 	int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
2194 
2195 	int_mask |= MVIOP_MU_OUTBOUND_INT_POSTQUEUE
2196 			| MVIOP_MU_OUTBOUND_INT_MSG;
2197 	BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
2198 }
2199 
2200 static void hptiop_enable_intr_mvfrey(struct hpt_iop_hba *hba)
2201 {
2202 	BUS_SPACE_WRT4_MVFREY2(f0_doorbell_enable, CPU_TO_F0_DRBL_MSG_A_BIT);
2203 	BUS_SPACE_RD4_MVFREY2(f0_doorbell_enable);
2204 
2205 	BUS_SPACE_WRT4_MVFREY2(isr_enable, 0x1);
2206 	BUS_SPACE_RD4_MVFREY2(isr_enable);
2207 
2208 	BUS_SPACE_WRT4_MVFREY2(pcie_f0_int_enable, 0x1010);
2209 	BUS_SPACE_RD4_MVFREY2(pcie_f0_int_enable);
2210 }
2211 
2212 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba)
2213 {
2214 	u_int32_t int_mask;
2215 
2216 	int_mask = BUS_SPACE_RD4_ITL(outbound_intmask);
2217 
2218 	int_mask |= IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0;
2219 	BUS_SPACE_WRT4_ITL(outbound_intmask, int_mask);
2220 	BUS_SPACE_RD4_ITL(outbound_intstatus);
2221 }
2222 
2223 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba)
2224 {
2225 	u_int32_t int_mask;
2226 	int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
2227 
2228 	int_mask &= ~(MVIOP_MU_OUTBOUND_INT_MSG
2229 			| MVIOP_MU_OUTBOUND_INT_POSTQUEUE);
2230 	BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
2231 	BUS_SPACE_RD4_MV0(outbound_intmask);
2232 }
2233 
2234 static void hptiop_disable_intr_mvfrey(struct hpt_iop_hba *hba)
2235 {
2236 	BUS_SPACE_WRT4_MVFREY2(f0_doorbell_enable, 0);
2237 	BUS_SPACE_RD4_MVFREY2(f0_doorbell_enable);
2238 
2239 	BUS_SPACE_WRT4_MVFREY2(isr_enable, 0);
2240 	BUS_SPACE_RD4_MVFREY2(isr_enable);
2241 
2242 	BUS_SPACE_WRT4_MVFREY2(pcie_f0_int_enable, 0);
2243 	BUS_SPACE_RD4_MVFREY2(pcie_f0_int_enable);
2244 }
2245 
2246 static void hptiop_reset_adapter(void *argv)
2247 {
2248 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)argv;
2249 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000))
2250 		return;
2251 	hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_START_BACKGROUND_TASK, 5000);
2252 }
2253 
2254 static void *hptiop_get_srb(struct hpt_iop_hba * hba)
2255 {
2256 	struct hpt_iop_srb * srb;
2257 
2258 	if (hba->srb_list) {
2259 		srb = hba->srb_list;
2260 		hba->srb_list = srb->next;
2261 		return srb;
2262 	}
2263 
2264 	return NULL;
2265 }
2266 
2267 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb)
2268 {
2269 	srb->next = hba->srb_list;
2270 	hba->srb_list = srb;
2271 }
2272 
2273 static void hptiop_action(struct cam_sim *sim, union ccb *ccb)
2274 {
2275 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)cam_sim_softc(sim);
2276 	struct hpt_iop_srb * srb;
2277 
2278 	switch (ccb->ccb_h.func_code) {
2279 
2280 	case XPT_SCSI_IO:
2281 		hptiop_lock_adapter(hba);
2282 		if (ccb->ccb_h.target_lun != 0 ||
2283 			ccb->ccb_h.target_id >= hba->max_devices ||
2284 			(ccb->ccb_h.flags & CAM_CDB_PHYS))
2285 		{
2286 			ccb->ccb_h.status = CAM_TID_INVALID;
2287 			xpt_done(ccb);
2288 			goto scsi_done;
2289 		}
2290 
2291 		if ((srb = hptiop_get_srb(hba)) == NULL) {
2292 			device_printf(hba->pcidev, "srb allocated failed");
2293 			ccb->ccb_h.status = CAM_REQ_CMP_ERR;
2294 			xpt_done(ccb);
2295 			goto scsi_done;
2296 		}
2297 
2298 		srb->ccb = ccb;
2299 
2300 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_NONE)
2301 			hptiop_post_scsi_command(srb, NULL, 0, 0);
2302 		else if ((ccb->ccb_h.flags & CAM_SCATTER_VALID) == 0) {
2303 			if ((ccb->ccb_h.flags & CAM_DATA_PHYS) == 0) {
2304 				int error;
2305 
2306 				error = bus_dmamap_load(hba->io_dmat,
2307 						srb->dma_map,
2308 						ccb->csio.data_ptr,
2309 						ccb->csio.dxfer_len,
2310 						hptiop_post_scsi_command,
2311 						srb, 0);
2312 
2313 				if (error && error != EINPROGRESS) {
2314 					device_printf(hba->pcidev,
2315 					    "bus_dmamap_load error %d", error);
2316 					xpt_freeze_simq(hba->sim, 1);
2317 					ccb->ccb_h.status = CAM_REQ_CMP_ERR;
2318 invalid:
2319 					hptiop_free_srb(hba, srb);
2320 					xpt_done(ccb);
2321 					goto scsi_done;
2322 				}
2323 			}
2324 			else {
2325 				device_printf(hba->pcidev,
2326 					"CAM_DATA_PHYS not supported");
2327 				ccb->ccb_h.status = CAM_REQ_CMP_ERR;
2328 				goto invalid;
2329 			}
2330 		}
2331 		else {
2332 			struct bus_dma_segment *segs;
2333 
2334 			if ((ccb->ccb_h.flags & CAM_SG_LIST_PHYS) == 0 ||
2335 				(ccb->ccb_h.flags & CAM_DATA_PHYS) != 0) {
2336 				device_printf(hba->pcidev, "SCSI cmd failed");
2337 				ccb->ccb_h.status=CAM_PROVIDE_FAIL;
2338 				goto invalid;
2339 			}
2340 
2341 			segs = (struct bus_dma_segment *)ccb->csio.data_ptr;
2342 			hptiop_post_scsi_command(srb, segs,
2343 						ccb->csio.sglist_cnt, 0);
2344 		}
2345 
2346 scsi_done:
2347 		hptiop_unlock_adapter(hba);
2348 		return;
2349 
2350 	case XPT_RESET_BUS:
2351 		device_printf(hba->pcidev, "reset adapter");
2352 		hptiop_lock_adapter(hba);
2353 		hba->msg_done = 0;
2354 		hptiop_reset_adapter(hba);
2355 		hptiop_unlock_adapter(hba);
2356 		break;
2357 
2358 	case XPT_GET_TRAN_SETTINGS:
2359 	case XPT_SET_TRAN_SETTINGS:
2360 		ccb->ccb_h.status = CAM_FUNC_NOTAVAIL;
2361 		break;
2362 
2363 	case XPT_CALC_GEOMETRY:
2364 		cam_calc_geometry(&ccb->ccg, 1);
2365 		break;
2366 
2367 	case XPT_PATH_INQ:
2368 	{
2369 		struct ccb_pathinq *cpi = &ccb->cpi;
2370 
2371 		cpi->version_num = 1;
2372 		cpi->hba_inquiry = PI_SDTR_ABLE;
2373 		cpi->target_sprt = 0;
2374 		cpi->hba_misc = PIM_NOBUSRESET;
2375 		cpi->hba_eng_cnt = 0;
2376 		cpi->max_target = hba->max_devices;
2377 		cpi->max_lun = 0;
2378 		cpi->unit_number = cam_sim_unit(sim);
2379 		cpi->bus_id = cam_sim_bus(sim);
2380 		cpi->initiator_id = hba->max_devices;
2381 		cpi->base_transfer_speed = 3300;
2382 
2383 		strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
2384 		strncpy(cpi->hba_vid, "HPT   ", HBA_IDLEN);
2385 		strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
2386 		cpi->transport = XPORT_SPI;
2387 		cpi->transport_version = 2;
2388 		cpi->protocol = PROTO_SCSI;
2389 		cpi->protocol_version = SCSI_REV_2;
2390 		cpi->ccb_h.status = CAM_REQ_CMP;
2391 		break;
2392 	}
2393 
2394 	default:
2395 		ccb->ccb_h.status = CAM_REQ_INVALID;
2396 		break;
2397 	}
2398 
2399 	xpt_done(ccb);
2400 	return;
2401 }
2402 
2403 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
2404 				struct hpt_iop_srb *srb,
2405 				bus_dma_segment_t *segs, int nsegs)
2406 {
2407 	int idx;
2408 	union ccb *ccb = srb->ccb;
2409 	u_int8_t *cdb;
2410 
2411 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
2412 		cdb = ccb->csio.cdb_io.cdb_ptr;
2413 	else
2414 		cdb = ccb->csio.cdb_io.cdb_bytes;
2415 
2416 	KdPrint(("ccb=%p %x-%x-%x\n",
2417 		ccb, *(u_int32_t *)cdb, *((u_int32_t *)cdb+1), *((u_int32_t *)cdb+2)));
2418 
2419 	if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {
2420 		u_int32_t iop_req32;
2421 		struct hpt_iop_request_scsi_command req;
2422 
2423 		iop_req32 = BUS_SPACE_RD4_ITL(inbound_queue);
2424 
2425 		if (iop_req32 == IOPMU_QUEUE_EMPTY) {
2426 			device_printf(hba->pcidev, "invaild req offset\n");
2427 			ccb->ccb_h.status = CAM_BUSY;
2428 			bus_dmamap_unload(hba->io_dmat, srb->dma_map);
2429 			hptiop_free_srb(hba, srb);
2430 			xpt_done(ccb);
2431 			return;
2432 		}
2433 
2434 		if (ccb->csio.dxfer_len && nsegs > 0) {
2435 			struct hpt_iopsg *psg = req.sg_list;
2436 			for (idx = 0; idx < nsegs; idx++, psg++) {
2437 				psg->pci_address = (u_int64_t)segs[idx].ds_addr;
2438 				psg->size = segs[idx].ds_len;
2439 				psg->eot = 0;
2440 			}
2441 			psg[-1].eot = 1;
2442 		}
2443 
2444 		bcopy(cdb, req.cdb, ccb->csio.cdb_len);
2445 
2446 		req.header.size =
2447 				offsetof(struct hpt_iop_request_scsi_command, sg_list)
2448 				+ nsegs*sizeof(struct hpt_iopsg);
2449 		req.header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
2450 		req.header.flags = 0;
2451 		req.header.result = IOP_RESULT_PENDING;
2452 		req.header.context = (u_int64_t)(unsigned long)srb;
2453 		req.dataxfer_length = ccb->csio.dxfer_len;
2454 		req.channel =  0;
2455 		req.target =  ccb->ccb_h.target_id;
2456 		req.lun =  ccb->ccb_h.target_lun;
2457 
2458 		bus_space_write_region_1(hba->bar0t, hba->bar0h, iop_req32,
2459 			(u_int8_t *)&req, req.header.size);
2460 
2461 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
2462 			bus_dmamap_sync(hba->io_dmat,
2463 				srb->dma_map, BUS_DMASYNC_PREREAD);
2464 		}
2465 		else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
2466 			bus_dmamap_sync(hba->io_dmat,
2467 				srb->dma_map, BUS_DMASYNC_PREWRITE);
2468 
2469 		BUS_SPACE_WRT4_ITL(inbound_queue,iop_req32);
2470 	} else {
2471 		struct hpt_iop_request_scsi_command *req;
2472 
2473 		req = (struct hpt_iop_request_scsi_command *)srb;
2474 		if (ccb->csio.dxfer_len && nsegs > 0) {
2475 			struct hpt_iopsg *psg = req->sg_list;
2476 			for (idx = 0; idx < nsegs; idx++, psg++) {
2477 				psg->pci_address =
2478 					(u_int64_t)segs[idx].ds_addr;
2479 				psg->size = segs[idx].ds_len;
2480 				psg->eot = 0;
2481 			}
2482 			psg[-1].eot = 1;
2483 		}
2484 
2485 		bcopy(cdb, req->cdb, ccb->csio.cdb_len);
2486 
2487 		req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
2488 		req->header.result = IOP_RESULT_PENDING;
2489 		req->dataxfer_length = ccb->csio.dxfer_len;
2490 		req->channel =  0;
2491 		req->target =  ccb->ccb_h.target_id;
2492 		req->lun =  ccb->ccb_h.target_lun;
2493 		req->header.size =
2494 			offsetof(struct hpt_iop_request_scsi_command, sg_list)
2495 			+ nsegs*sizeof(struct hpt_iopsg);
2496 		req->header.context = (u_int64_t)srb->index |
2497 						IOPMU_QUEUE_ADDR_HOST_BIT;
2498 		req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
2499 
2500 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
2501 			bus_dmamap_sync(hba->io_dmat,
2502 				srb->dma_map, BUS_DMASYNC_PREREAD);
2503 		}else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT) {
2504 			bus_dmamap_sync(hba->io_dmat,
2505 				srb->dma_map, BUS_DMASYNC_PREWRITE);
2506 		}
2507 
2508 		if (hba->firmware_version > 0x01020000
2509 			|| hba->interface_version > 0x01020000) {
2510 			u_int32_t size_bits;
2511 
2512 			if (req->header.size < 256)
2513 				size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT;
2514 			else if (req->header.size < 512)
2515 				size_bits = IOPMU_QUEUE_ADDR_HOST_BIT;
2516 			else
2517 				size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT
2518 						| IOPMU_QUEUE_ADDR_HOST_BIT;
2519 
2520 			BUS_SPACE_WRT4_ITL(inbound_queue,
2521 				(u_int32_t)srb->phy_addr | size_bits);
2522 		} else
2523 			BUS_SPACE_WRT4_ITL(inbound_queue, (u_int32_t)srb->phy_addr
2524 				|IOPMU_QUEUE_ADDR_HOST_BIT);
2525 	}
2526 }
2527 
2528 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
2529 				struct hpt_iop_srb *srb,
2530 				bus_dma_segment_t *segs, int nsegs)
2531 {
2532 	int idx, size;
2533 	union ccb *ccb = srb->ccb;
2534 	u_int8_t *cdb;
2535 	struct hpt_iop_request_scsi_command *req;
2536 	u_int64_t req_phy;
2537 
2538 	req = (struct hpt_iop_request_scsi_command *)srb;
2539 	req_phy = srb->phy_addr;
2540 
2541 	if (ccb->csio.dxfer_len && nsegs > 0) {
2542 		struct hpt_iopsg *psg = req->sg_list;
2543 		for (idx = 0; idx < nsegs; idx++, psg++) {
2544 			psg->pci_address = (u_int64_t)segs[idx].ds_addr;
2545 			psg->size = segs[idx].ds_len;
2546 			psg->eot = 0;
2547 		}
2548 		psg[-1].eot = 1;
2549 	}
2550 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
2551 		cdb = ccb->csio.cdb_io.cdb_ptr;
2552 	else
2553 		cdb = ccb->csio.cdb_io.cdb_bytes;
2554 
2555 	bcopy(cdb, req->cdb, ccb->csio.cdb_len);
2556 	req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
2557 	req->header.result = IOP_RESULT_PENDING;
2558 	req->dataxfer_length = ccb->csio.dxfer_len;
2559 	req->channel = 0;
2560 	req->target =  ccb->ccb_h.target_id;
2561 	req->lun =  ccb->ccb_h.target_lun;
2562 	req->header.size = sizeof(struct hpt_iop_request_scsi_command)
2563 				- sizeof(struct hpt_iopsg)
2564 				+ nsegs * sizeof(struct hpt_iopsg);
2565 	if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
2566 		bus_dmamap_sync(hba->io_dmat,
2567 			srb->dma_map, BUS_DMASYNC_PREREAD);
2568 	}
2569 	else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
2570 		bus_dmamap_sync(hba->io_dmat,
2571 			srb->dma_map, BUS_DMASYNC_PREWRITE);
2572 	req->header.context = (u_int64_t)srb->index
2573 					<< MVIOP_REQUEST_NUMBER_START_BIT
2574 					| MVIOP_CMD_TYPE_SCSI;
2575 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
2576 	size = req->header.size >> 8;
2577 	hptiop_mv_inbound_write(req_phy
2578 			| MVIOP_MU_QUEUE_ADDR_HOST_BIT
2579 			| (size > 3 ? 3 : size), hba);
2580 }
2581 
2582 static void hptiop_post_req_mvfrey(struct hpt_iop_hba *hba,
2583 				struct hpt_iop_srb *srb,
2584 				bus_dma_segment_t *segs, int nsegs)
2585 {
2586 	int idx, index;
2587 	union ccb *ccb = srb->ccb;
2588 	u_int8_t *cdb;
2589 	struct hpt_iop_request_scsi_command *req;
2590 	u_int64_t req_phy;
2591 
2592 	req = (struct hpt_iop_request_scsi_command *)srb;
2593 	req_phy = srb->phy_addr;
2594 
2595 	if (ccb->csio.dxfer_len && nsegs > 0) {
2596 		struct hpt_iopsg *psg = req->sg_list;
2597 		for (idx = 0; idx < nsegs; idx++, psg++) {
2598 			psg->pci_address = (u_int64_t)segs[idx].ds_addr | 1;
2599 			psg->size = segs[idx].ds_len;
2600 			psg->eot = 0;
2601 		}
2602 		psg[-1].eot = 1;
2603 	}
2604 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
2605 		cdb = ccb->csio.cdb_io.cdb_ptr;
2606 	else
2607 		cdb = ccb->csio.cdb_io.cdb_bytes;
2608 
2609 	bcopy(cdb, req->cdb, ccb->csio.cdb_len);
2610 	req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
2611 	req->header.result = IOP_RESULT_PENDING;
2612 	req->dataxfer_length = ccb->csio.dxfer_len;
2613 	req->channel = 0;
2614 	req->target = ccb->ccb_h.target_id;
2615 	req->lun = ccb->ccb_h.target_lun;
2616 	req->header.size = sizeof(struct hpt_iop_request_scsi_command)
2617 				- sizeof(struct hpt_iopsg)
2618 				+ nsegs * sizeof(struct hpt_iopsg);
2619 	if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
2620 		bus_dmamap_sync(hba->io_dmat,
2621 			srb->dma_map, BUS_DMASYNC_PREREAD);
2622 	}
2623 	else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
2624 		bus_dmamap_sync(hba->io_dmat,
2625 			srb->dma_map, BUS_DMASYNC_PREWRITE);
2626 
2627 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT
2628 						| IOP_REQUEST_FLAG_ADDR_BITS
2629 						| ((req_phy >> 16) & 0xffff0000);
2630 	req->header.context = ((req_phy & 0xffffffff) << 32 )
2631 						| srb->index << 4
2632 						| IOPMU_QUEUE_ADDR_HOST_BIT | req->header.type;
2633 
2634 	hba->u.mvfrey.inlist_wptr++;
2635 	index = hba->u.mvfrey.inlist_wptr & 0x3fff;
2636 
2637 	if (index == hba->u.mvfrey.list_count) {
2638 		index = 0;
2639 		hba->u.mvfrey.inlist_wptr &= ~0x3fff;
2640 		hba->u.mvfrey.inlist_wptr ^= CL_POINTER_TOGGLE;
2641 	}
2642 
2643 	hba->u.mvfrey.inlist[index].addr = req_phy;
2644 	hba->u.mvfrey.inlist[index].intrfc_len = (req->header.size + 3) / 4;
2645 
2646 	BUS_SPACE_WRT4_MVFREY2(inbound_write_ptr, hba->u.mvfrey.inlist_wptr);
2647 	BUS_SPACE_RD4_MVFREY2(inbound_write_ptr);
2648 
2649 	if (req->header.type == IOP_REQUEST_TYPE_SCSI_COMMAND) {
2650 		callout_reset(&ccb->ccb_h.timeout_ch, 20*hz,
2651 		    hptiop_reset_adapter, hba);
2652 	}
2653 }
2654 
2655 static void hptiop_post_scsi_command(void *arg, bus_dma_segment_t *segs,
2656 					int nsegs, int error)
2657 {
2658 	struct hpt_iop_srb *srb = (struct hpt_iop_srb *)arg;
2659 	union ccb *ccb = srb->ccb;
2660 	struct hpt_iop_hba *hba = srb->hba;
2661 
2662 	if (error || nsegs > hba->max_sg_count) {
2663 		KdPrint(("hptiop: func_code=%x tid=%x lun=%x nsegs=%d\n",
2664 			ccb->ccb_h.func_code,
2665 			ccb->ccb_h.target_id,
2666 			ccb->ccb_h.target_lun, nsegs));
2667 		ccb->ccb_h.status = CAM_BUSY;
2668 		bus_dmamap_unload(hba->io_dmat, srb->dma_map);
2669 		hptiop_free_srb(hba, srb);
2670 		xpt_done(ccb);
2671 		return;
2672 	}
2673 
2674 	hba->ops->post_req(hba, srb, segs, nsegs);
2675 }
2676 
2677 static void hptiop_mv_map_ctlcfg(void *arg, bus_dma_segment_t *segs,
2678 				int nsegs, int error)
2679 {
2680 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)arg;
2681 	hba->ctlcfgcmd_phy = ((u_int64_t)segs->ds_addr + 0x1F)
2682 				& ~(u_int64_t)0x1F;
2683 	hba->ctlcfg_ptr = (u_int8_t *)(((unsigned long)hba->ctlcfg_ptr + 0x1F)
2684 				& ~0x1F);
2685 }
2686 
2687 static void hptiop_mvfrey_map_ctlcfg(void *arg, bus_dma_segment_t *segs,
2688 				int nsegs, int error)
2689 {
2690 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)arg;
2691 	char *p;
2692 	u_int64_t phy;
2693 	u_int32_t list_count = hba->u.mvfrey.list_count;
2694 
2695 	phy = ((u_int64_t)segs->ds_addr + 0x1F)
2696 				& ~(u_int64_t)0x1F;
2697 	p = (u_int8_t *)(((unsigned long)hba->ctlcfg_ptr + 0x1F)
2698 				& ~0x1F);
2699 
2700 	hba->ctlcfgcmd_phy = phy;
2701 	hba->ctlcfg_ptr = p;
2702 
2703 	p += 0x800;
2704 	phy += 0x800;
2705 
2706 	hba->u.mvfrey.inlist = (struct mvfrey_inlist_entry *)p;
2707 	hba->u.mvfrey.inlist_phy = phy;
2708 
2709 	p += list_count * sizeof(struct mvfrey_inlist_entry);
2710 	phy += list_count * sizeof(struct mvfrey_inlist_entry);
2711 
2712 	hba->u.mvfrey.outlist = (struct mvfrey_outlist_entry *)p;
2713 	hba->u.mvfrey.outlist_phy = phy;
2714 
2715 	p += list_count * sizeof(struct mvfrey_outlist_entry);
2716 	phy += list_count * sizeof(struct mvfrey_outlist_entry);
2717 
2718 	hba->u.mvfrey.outlist_cptr = (u_int32_t *)p;
2719 	hba->u.mvfrey.outlist_cptr_phy = phy;
2720 }
2721 
2722 static void hptiop_map_srb(void *arg, bus_dma_segment_t *segs,
2723 				int nsegs, int error)
2724 {
2725 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
2726 	bus_addr_t phy_addr = (segs->ds_addr + 0x1F) & ~(bus_addr_t)0x1F;
2727 	struct hpt_iop_srb *srb, *tmp_srb;
2728 	int i;
2729 
2730 	if (error || nsegs == 0) {
2731 		device_printf(hba->pcidev, "hptiop_map_srb error");
2732 		return;
2733 	}
2734 
2735 	/* map srb */
2736 	srb = (struct hpt_iop_srb *)
2737 		(((unsigned long)hba->uncached_ptr + 0x1F)
2738 		& ~(unsigned long)0x1F);
2739 
2740 	for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2741 		tmp_srb = (struct hpt_iop_srb *)
2742 					((char *)srb + i * HPT_SRB_MAX_SIZE);
2743 		if (((unsigned long)tmp_srb & 0x1F) == 0) {
2744 			if (bus_dmamap_create(hba->io_dmat,
2745 						0, &tmp_srb->dma_map)) {
2746 				device_printf(hba->pcidev, "dmamap create failed");
2747 				return;
2748 			}
2749 
2750 			bzero(tmp_srb, sizeof(struct hpt_iop_srb));
2751 			tmp_srb->hba = hba;
2752 			tmp_srb->index = i;
2753 			if (hba->ctlcfg_ptr == 0) {/*itl iop*/
2754 				tmp_srb->phy_addr = (u_int64_t)(u_int32_t)
2755 							(phy_addr >> 5);
2756 				if (phy_addr & IOPMU_MAX_MEM_SUPPORT_MASK_32G)
2757 					tmp_srb->srb_flag =
2758 						HPT_SRB_FLAG_HIGH_MEM_ACESS;
2759 			} else {
2760 				tmp_srb->phy_addr = phy_addr;
2761 			}
2762 
2763 			hptiop_free_srb(hba, tmp_srb);
2764 			hba->srb[i] = tmp_srb;
2765 			phy_addr += HPT_SRB_MAX_SIZE;
2766 		}
2767 		else {
2768 			device_printf(hba->pcidev, "invalid alignment");
2769 			return;
2770 		}
2771 	}
2772 }
2773 
2774 static void hptiop_os_message_callback(struct hpt_iop_hba * hba, u_int32_t msg)
2775 {
2776 	hba->msg_done = 1;
2777 }
2778 
2779 static  int hptiop_os_query_remove_device(struct hpt_iop_hba * hba,
2780 						int target_id)
2781 {
2782 	struct cam_periph       *periph = NULL;
2783 	struct cam_path         *path;
2784 	int                     status, retval = 0;
2785 
2786 	status = xpt_create_path(&path, NULL, hba->sim->path_id, target_id, 0);
2787 
2788 	if (status == CAM_REQ_CMP) {
2789 		if ((periph = cam_periph_find(path, "da")) != NULL) {
2790 			if (periph->refcount >= 1) {
2791 				device_printf(hba->pcidev, "target_id=0x%x,"
2792 				    "refcount=%d", target_id, periph->refcount);
2793 				retval = -1;
2794 			}
2795 		}
2796 		xpt_free_path(path);
2797 	}
2798 	return retval;
2799 }
2800 
2801 static void hptiop_release_resource(struct hpt_iop_hba *hba)
2802 {
2803 	int i;
2804 	if (hba->path) {
2805 		struct ccb_setasync ccb;
2806 
2807 		xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
2808 		ccb.ccb_h.func_code = XPT_SASYNC_CB;
2809 		ccb.event_enable = 0;
2810 		ccb.callback = hptiop_async;
2811 		ccb.callback_arg = hba->sim;
2812 		xpt_action((union ccb *)&ccb);
2813 		xpt_free_path(hba->path);
2814 	}
2815 
2816 	if (hba->sim) {
2817 		xpt_bus_deregister(cam_sim_path(hba->sim));
2818 		cam_sim_free(hba->sim);
2819 	}
2820 
2821 	if (hba->ctlcfg_dmat) {
2822 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
2823 		bus_dmamem_free(hba->ctlcfg_dmat,
2824 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
2825 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
2826 	}
2827 
2828 	for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2829 		struct hpt_iop_srb *srb = hba->srb[i];
2830 		if (srb->dma_map)
2831 			bus_dmamap_destroy(hba->io_dmat, srb->dma_map);
2832 	}
2833 
2834 	if (hba->srb_dmat) {
2835 		bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
2836 		bus_dmamap_destroy(hba->srb_dmat, hba->srb_dmamap);
2837 		bus_dma_tag_destroy(hba->srb_dmat);
2838 	}
2839 
2840 	if (hba->io_dmat)
2841 		bus_dma_tag_destroy(hba->io_dmat);
2842 
2843 	if (hba->parent_dmat)
2844 		bus_dma_tag_destroy(hba->parent_dmat);
2845 
2846 	if (hba->irq_handle)
2847 		bus_teardown_intr(hba->pcidev, hba->irq_res, hba->irq_handle);
2848 
2849 	if (hba->irq_res)
2850 		bus_release_resource(hba->pcidev, SYS_RES_IRQ,
2851 					0, hba->irq_res);
2852 
2853 	if (hba->bar0_res)
2854 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2855 					hba->bar0_rid, hba->bar0_res);
2856 	if (hba->bar2_res)
2857 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2858 					hba->bar2_rid, hba->bar2_res);
2859 	if (hba->ioctl_dev)
2860 		destroy_dev(hba->ioctl_dev);
2861 	dev_ops_remove_minor(&hptiop_ops, device_get_unit(hba->pcidev));
2862 }
2863