xref: /freebsd/sys/dev/hptiop/hptiop.c (revision 7778ab7e0cc22f0824eb1d1047a7ef8b4785267a)
1 /*
2  * HighPoint RR3xxx/4xxx RAID Driver for FreeBSD
3  * Copyright (C) 2007-2008 HighPoint Technologies, Inc. All Rights Reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  */
26 
27 #include <sys/cdefs.h>
28 __FBSDID("$FreeBSD$");
29 
30 #include <sys/param.h>
31 #include <sys/types.h>
32 #include <sys/cons.h>
33 #if (__FreeBSD_version >= 500000)
34 #include <sys/time.h>
35 #include <sys/systm.h>
36 #else
37 #include <machine/clock.h>
38 #endif
39 
40 #include <sys/stat.h>
41 #include <sys/malloc.h>
42 #include <sys/conf.h>
43 #include <sys/libkern.h>
44 #include <sys/kernel.h>
45 
46 #if (__FreeBSD_version >= 500000)
47 #include <sys/kthread.h>
48 #include <sys/mutex.h>
49 #include <sys/module.h>
50 #endif
51 
52 #include <sys/eventhandler.h>
53 #include <sys/bus.h>
54 #include <sys/taskqueue.h>
55 #include <sys/ioccom.h>
56 
57 #include <machine/resource.h>
58 #include <machine/bus.h>
59 #include <machine/stdarg.h>
60 #include <sys/rman.h>
61 
62 #include <vm/vm.h>
63 #include <vm/pmap.h>
64 
65 #if (__FreeBSD_version >= 500000)
66 #include <dev/pci/pcireg.h>
67 #include <dev/pci/pcivar.h>
68 #else
69 #include <pci/pcivar.h>
70 #include <pci/pcireg.h>
71 #endif
72 
73 #if (__FreeBSD_version <= 500043)
74 #include <sys/devicestat.h>
75 #endif
76 
77 #include <cam/cam.h>
78 #include <cam/cam_ccb.h>
79 #include <cam/cam_sim.h>
80 #include <cam/cam_xpt_sim.h>
81 #include <cam/cam_debug.h>
82 #include <cam/cam_periph.h>
83 #include <cam/scsi/scsi_all.h>
84 #include <cam/scsi/scsi_message.h>
85 
86 #if (__FreeBSD_version < 500043)
87 #include <sys/bus_private.h>
88 #endif
89 
90 #include <dev/hptiop/hptiop.h>
91 
92 static char driver_name[] = "hptiop";
93 static char driver_version[] = "v1.3 (010208)";
94 
95 static devclass_t hptiop_devclass;
96 
97 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
98 				u_int32_t msg, u_int32_t millisec);
99 static void hptiop_request_callback_itl(struct hpt_iop_hba *hba,
100 							u_int32_t req);
101 static void hptiop_request_callback_mv(struct hpt_iop_hba *hba, u_int64_t req);
102 static void hptiop_os_message_callback(struct hpt_iop_hba *hba, u_int32_t msg);
103 static int  hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
104 				struct hpt_iop_ioctl_param *pParams);
105 static int  hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
106 				struct hpt_iop_ioctl_param *pParams);
107 static int  hptiop_rescan_bus(struct hpt_iop_hba *hba);
108 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba);
109 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba);
110 static int hptiop_get_config_itl(struct hpt_iop_hba *hba,
111 				struct hpt_iop_request_get_config *config);
112 static int hptiop_get_config_mv(struct hpt_iop_hba *hba,
113 				struct hpt_iop_request_get_config *config);
114 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
115 				struct hpt_iop_request_set_config *config);
116 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
117 				struct hpt_iop_request_set_config *config);
118 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba);
119 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba);
120 static int  hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
121 			u_int32_t req32, struct hpt_iop_ioctl_param *pParams);
122 static int  hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
123 				struct hpt_iop_request_ioctl_command *req,
124 				struct hpt_iop_ioctl_param *pParams);
125 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
126 				struct hpt_iop_srb *srb,
127 				bus_dma_segment_t *segs, int nsegs);
128 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
129 				struct hpt_iop_srb *srb,
130 				bus_dma_segment_t *segs, int nsegs);
131 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg);
132 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg);
133 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba);
134 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba);
135 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba);
136 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba);
137 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb);
138 static int  hptiop_os_query_remove_device(struct hpt_iop_hba *hba, int tid);
139 static int  hptiop_probe(device_t dev);
140 static int  hptiop_attach(device_t dev);
141 static int  hptiop_detach(device_t dev);
142 static int  hptiop_shutdown(device_t dev);
143 static void hptiop_action(struct cam_sim *sim, union ccb *ccb);
144 static void hptiop_poll(struct cam_sim *sim);
145 static void hptiop_async(void *callback_arg, u_int32_t code,
146 					struct cam_path *path, void *arg);
147 static void hptiop_pci_intr(void *arg);
148 static void hptiop_release_resource(struct hpt_iop_hba *hba);
149 static int  hptiop_reset_adapter(struct hpt_iop_hba *hba);
150 
151 static d_open_t hptiop_open;
152 static d_close_t hptiop_close;
153 static d_ioctl_t hptiop_ioctl;
154 
155 static struct cdevsw hptiop_cdevsw = {
156 	.d_open = hptiop_open,
157 	.d_close = hptiop_close,
158 	.d_ioctl = hptiop_ioctl,
159 	.d_name = driver_name,
160 #if __FreeBSD_version>=503000
161 	.d_version = D_VERSION,
162 #endif
163 #if (__FreeBSD_version>=503000 && __FreeBSD_version<600034)
164 	.d_flags = D_NEEDGIANT,
165 #endif
166 #if __FreeBSD_version<600034
167 #if __FreeBSD_version>=501000
168 	.d_maj = MAJOR_AUTO,
169 #else
170 	.d_maj = HPT_DEV_MAJOR,
171 #endif
172 #endif
173 };
174 
175 #if __FreeBSD_version < 503000
176 #define hba_from_dev(dev) ((struct hpt_iop_hba *)(dev)->si_drv1)
177 #else
178 #define hba_from_dev(dev) \
179 	((struct hpt_iop_hba *)devclass_get_softc(hptiop_devclass, dev2unit(dev)))
180 #endif
181 
182 #define BUS_SPACE_WRT4_ITL(offset, value) bus_space_write_4(hba->bar0t,\
183 		hba->bar0h, offsetof(struct hpt_iopmu_itl, offset), (value))
184 #define BUS_SPACE_RD4_ITL(offset) bus_space_read_4(hba->bar0t,\
185 		hba->bar0h, offsetof(struct hpt_iopmu_itl, offset))
186 
187 #define BUS_SPACE_WRT4_MV0(offset, value) bus_space_write_4(hba->bar0t,\
188 		hba->bar0h, offsetof(struct hpt_iopmv_regs, offset), value)
189 #define BUS_SPACE_RD4_MV0(offset) bus_space_read_4(hba->bar0t,\
190 		hba->bar0h, offsetof(struct hpt_iopmv_regs, offset))
191 #define BUS_SPACE_WRT4_MV2(offset, value) bus_space_write_4(hba->bar2t,\
192 		hba->bar2h, offsetof(struct hpt_iopmu_mv, offset), value)
193 #define BUS_SPACE_RD4_MV2(offset) bus_space_read_4(hba->bar2t,\
194 		hba->bar2h, offsetof(struct hpt_iopmu_mv, offset))
195 
196 static int hptiop_open(ioctl_dev_t dev, int flags,
197 					int devtype, ioctl_thread_t proc)
198 {
199 	struct hpt_iop_hba *hba = hba_from_dev(dev);
200 
201 	if (hba==NULL)
202 		return ENXIO;
203 	if (hba->flag & HPT_IOCTL_FLAG_OPEN)
204 		return EBUSY;
205 	hba->flag |= HPT_IOCTL_FLAG_OPEN;
206 	return 0;
207 }
208 
209 static int hptiop_close(ioctl_dev_t dev, int flags,
210 					int devtype, ioctl_thread_t proc)
211 {
212 	struct hpt_iop_hba *hba = hba_from_dev(dev);
213 	hba->flag &= ~(u_int32_t)HPT_IOCTL_FLAG_OPEN;
214 	return 0;
215 }
216 
217 static int hptiop_ioctl(ioctl_dev_t dev, u_long cmd, caddr_t data,
218 					int flags, ioctl_thread_t proc)
219 {
220 	int ret = EFAULT;
221 	struct hpt_iop_hba *hba = hba_from_dev(dev);
222 
223 #if (__FreeBSD_version >= 500000)
224 	mtx_lock(&Giant);
225 #endif
226 
227 	switch (cmd) {
228 	case HPT_DO_IOCONTROL:
229 		ret = hba->ops->do_ioctl(hba,
230 				(struct hpt_iop_ioctl_param *)data);
231 		break;
232 	case HPT_SCAN_BUS:
233 		ret = hptiop_rescan_bus(hba);
234 		break;
235 	}
236 
237 #if (__FreeBSD_version >= 500000)
238 	mtx_unlock(&Giant);
239 #endif
240 
241 	return ret;
242 }
243 
244 static u_int64_t hptiop_mv_outbound_read(struct hpt_iop_hba *hba)
245 {
246 	u_int64_t p;
247 	u_int32_t outbound_tail = BUS_SPACE_RD4_MV2(outbound_tail);
248 	u_int32_t outbound_head = BUS_SPACE_RD4_MV2(outbound_head);
249 
250 	if (outbound_tail != outbound_head) {
251 		bus_space_read_region_4(hba->bar2t, hba->bar2h,
252 			offsetof(struct hpt_iopmu_mv,
253 				outbound_q[outbound_tail]),
254 			(u_int32_t *)&p, 2);
255 
256 		outbound_tail++;
257 
258 		if (outbound_tail == MVIOP_QUEUE_LEN)
259 			outbound_tail = 0;
260 
261 		BUS_SPACE_WRT4_MV2(outbound_tail, outbound_tail);
262 		return p;
263 	} else
264 		return 0;
265 }
266 
267 static void hptiop_mv_inbound_write(u_int64_t p, struct hpt_iop_hba *hba)
268 {
269 	u_int32_t inbound_head = BUS_SPACE_RD4_MV2(inbound_head);
270 	u_int32_t head = inbound_head + 1;
271 
272 	if (head == MVIOP_QUEUE_LEN)
273 		head = 0;
274 
275 	bus_space_write_region_4(hba->bar2t, hba->bar2h,
276 			offsetof(struct hpt_iopmu_mv, inbound_q[inbound_head]),
277 			(u_int32_t *)&p, 2);
278 	BUS_SPACE_WRT4_MV2(inbound_head, head);
279 	BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_POSTQUEUE);
280 }
281 
282 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg)
283 {
284 	BUS_SPACE_WRT4_ITL(inbound_msgaddr0, msg);
285 	BUS_SPACE_RD4_ITL(outbound_intstatus);
286 }
287 
288 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg)
289 {
290 
291 	BUS_SPACE_WRT4_MV2(inbound_msg, msg);
292 	BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_MSG);
293 
294 	BUS_SPACE_RD4_MV0(outbound_intmask);
295 }
296 
297 static int hptiop_wait_ready_itl(struct hpt_iop_hba * hba, u_int32_t millisec)
298 {
299 	u_int32_t req=0;
300 	int i;
301 
302 	for (i = 0; i < millisec; i++) {
303 		req = BUS_SPACE_RD4_ITL(inbound_queue);
304 		if (req != IOPMU_QUEUE_EMPTY)
305 			break;
306 		DELAY(1000);
307 	}
308 
309 	if (req!=IOPMU_QUEUE_EMPTY) {
310 		BUS_SPACE_WRT4_ITL(outbound_queue, req);
311 		BUS_SPACE_RD4_ITL(outbound_intstatus);
312 		return 0;
313 	}
314 
315 	return -1;
316 }
317 
318 static int hptiop_wait_ready_mv(struct hpt_iop_hba * hba, u_int32_t millisec)
319 {
320 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_NOP, millisec))
321 		return -1;
322 
323 	return 0;
324 }
325 
326 static void hptiop_request_callback_itl(struct hpt_iop_hba * hba,
327 							u_int32_t index)
328 {
329 	struct hpt_iop_srb *srb;
330 	struct hpt_iop_request_scsi_command *req=0;
331 	union ccb *ccb;
332 	u_int8_t *cdb;
333 	u_int32_t result, temp, dxfer;
334 	u_int64_t temp64;
335 
336 	if (index & IOPMU_QUEUE_MASK_HOST_BITS) { /*host req*/
337 		if (hba->firmware_version > 0x01020000 ||
338 			hba->interface_version > 0x01020000) {
339 			srb = hba->srb[index & ~(u_int32_t)
340 				(IOPMU_QUEUE_ADDR_HOST_BIT
341 				| IOPMU_QUEUE_REQUEST_RESULT_BIT)];
342 			req = (struct hpt_iop_request_scsi_command *)srb;
343 			if (index & IOPMU_QUEUE_REQUEST_RESULT_BIT)
344 				result = IOP_RESULT_SUCCESS;
345 			else
346 				result = req->header.result;
347 		} else {
348 			srb = hba->srb[index &
349 				~(u_int32_t)IOPMU_QUEUE_ADDR_HOST_BIT];
350 			req = (struct hpt_iop_request_scsi_command *)srb;
351 			result = req->header.result;
352 		}
353 		dxfer = req->dataxfer_length;
354 		goto srb_complete;
355 	}
356 
357 	/*iop req*/
358 	temp = bus_space_read_4(hba->bar0t, hba->bar0h, index +
359 		offsetof(struct hpt_iop_request_header, type));
360 	result = bus_space_read_4(hba->bar0t, hba->bar0h, index +
361 		offsetof(struct hpt_iop_request_header, result));
362 	switch(temp) {
363 	case IOP_REQUEST_TYPE_IOCTL_COMMAND:
364 	{
365 		temp64 = 0;
366 		bus_space_write_region_4(hba->bar0t, hba->bar0h, index +
367 			offsetof(struct hpt_iop_request_header, context),
368 			(u_int32_t *)&temp64, 2);
369 		wakeup((void *)((unsigned long)hba->u.itl.mu + index));
370 		break;
371 	}
372 
373 	case IOP_REQUEST_TYPE_SCSI_COMMAND:
374 		bus_space_read_region_4(hba->bar0t, hba->bar0h, index +
375 			offsetof(struct hpt_iop_request_header, context),
376 			(u_int32_t *)&temp64, 2);
377 		srb = (struct hpt_iop_srb *)(unsigned long)temp64;
378 		dxfer = bus_space_read_4(hba->bar0t, hba->bar0h,
379 				index + offsetof(struct hpt_iop_request_scsi_command,
380 				dataxfer_length));
381 srb_complete:
382 		ccb = (union ccb *)srb->ccb;
383 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
384 			cdb = ccb->csio.cdb_io.cdb_ptr;
385 		else
386 			cdb = ccb->csio.cdb_io.cdb_bytes;
387 
388 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
389 			ccb->ccb_h.status = CAM_REQ_CMP;
390 			goto scsi_done;
391 		}
392 
393 		switch (result) {
394 		case IOP_RESULT_SUCCESS:
395 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
396 			case CAM_DIR_IN:
397 				bus_dmamap_sync(hba->io_dmat,
398 					srb->dma_map, BUS_DMASYNC_POSTREAD);
399 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
400 				break;
401 			case CAM_DIR_OUT:
402 				bus_dmamap_sync(hba->io_dmat,
403 					srb->dma_map, BUS_DMASYNC_POSTWRITE);
404 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
405 				break;
406 			}
407 
408 			ccb->ccb_h.status = CAM_REQ_CMP;
409 			break;
410 
411 		case IOP_RESULT_BAD_TARGET:
412 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
413 			break;
414 		case IOP_RESULT_BUSY:
415 			ccb->ccb_h.status = CAM_BUSY;
416 			break;
417 		case IOP_RESULT_INVALID_REQUEST:
418 			ccb->ccb_h.status = CAM_REQ_INVALID;
419 			break;
420 		case IOP_RESULT_FAIL:
421 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
422 			break;
423 		case IOP_RESULT_RESET:
424 			ccb->ccb_h.status = CAM_BUSY;
425 			break;
426 		case IOP_RESULT_CHECK_CONDITION:
427 			if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {/*iop*/
428 				bus_space_read_region_1(hba->bar0t, hba->bar0h,
429 					index + offsetof(struct hpt_iop_request_scsi_command,
430 					sg_list), (u_int8_t *)&ccb->csio.sense_data,
431 					MIN(dxfer, sizeof(ccb->csio.sense_data)));
432 			} else {
433 				memcpy(&ccb->csio.sense_data, &req->sg_list,
434 					MIN(dxfer, sizeof(ccb->csio.sense_data)));
435 			}
436 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
437 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
438 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
439 			break;
440 		default:
441 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
442 			break;
443 		}
444 scsi_done:
445 		if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS)
446 			BUS_SPACE_WRT4_ITL(outbound_queue, index);
447 
448 		ccb->csio.resid = ccb->csio.dxfer_len - dxfer;
449 
450 		hptiop_free_srb(hba, srb);
451 		xpt_done(ccb);
452 		break;
453 	}
454 }
455 
456 static void hptiop_drain_outbound_queue_itl(struct hpt_iop_hba *hba)
457 {
458 	u_int32_t req, temp;
459 
460 	while ((req = BUS_SPACE_RD4_ITL(outbound_queue)) !=IOPMU_QUEUE_EMPTY) {
461 		if (req & IOPMU_QUEUE_MASK_HOST_BITS)
462 			hptiop_request_callback_itl(hba, req);
463 		else {
464 			struct hpt_iop_request_header *p;
465 
466 			p = (struct hpt_iop_request_header *)
467 				((char *)hba->u.itl.mu + req);
468 			temp = bus_space_read_4(hba->bar0t,
469 					hba->bar0h,req +
470 					offsetof(struct hpt_iop_request_header,
471 						flags));
472 			if (temp & IOP_REQUEST_FLAG_SYNC_REQUEST) {
473 				u_int64_t temp64;
474 				bus_space_read_region_4(hba->bar0t,
475 					hba->bar0h,req +
476 					offsetof(struct hpt_iop_request_header,
477 						context),
478 					(u_int32_t *)&temp64, 2);
479 				if (temp64) {
480 					hptiop_request_callback_itl(hba, req);
481 				} else {
482 					temp64 = 1;
483 					bus_space_write_region_4(hba->bar0t,
484 						hba->bar0h,req +
485 						offsetof(struct hpt_iop_request_header,
486 							context),
487 						(u_int32_t *)&temp64, 2);
488 				}
489 			} else
490 				hptiop_request_callback_itl(hba, req);
491 		}
492 	}
493 }
494 
495 static int hptiop_intr_itl(struct hpt_iop_hba * hba)
496 {
497 	u_int32_t status;
498 	int ret = 0;
499 
500 	status = BUS_SPACE_RD4_ITL(outbound_intstatus);
501 
502 	if (status & IOPMU_OUTBOUND_INT_MSG0) {
503 		u_int32_t msg = BUS_SPACE_RD4_ITL(outbound_msgaddr0);
504 		KdPrint(("hptiop: received outbound msg %x\n", msg));
505 		BUS_SPACE_WRT4_ITL(outbound_intstatus, IOPMU_OUTBOUND_INT_MSG0);
506 		hptiop_os_message_callback(hba, msg);
507 		ret = 1;
508 	}
509 
510 	if (status & IOPMU_OUTBOUND_INT_POSTQUEUE) {
511 		hptiop_drain_outbound_queue_itl(hba);
512 		ret = 1;
513 	}
514 
515 	return ret;
516 }
517 
518 static void hptiop_request_callback_mv(struct hpt_iop_hba * hba,
519 							u_int64_t _tag)
520 {
521 	u_int32_t context = (u_int32_t)_tag;
522 
523 	if (context & MVIOP_CMD_TYPE_SCSI) {
524 		struct hpt_iop_srb *srb;
525 		struct hpt_iop_request_scsi_command *req;
526 		union ccb *ccb;
527 		u_int8_t *cdb;
528 
529 		srb = hba->srb[context >> MVIOP_REQUEST_NUMBER_START_BIT];
530 		req = (struct hpt_iop_request_scsi_command *)srb;
531 		ccb = (union ccb *)srb->ccb;
532 		if (ccb->ccb_h.flags & CAM_CDB_POINTER)
533 			cdb = ccb->csio.cdb_io.cdb_ptr;
534 		else
535 			cdb = ccb->csio.cdb_io.cdb_bytes;
536 
537 		if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
538 			ccb->ccb_h.status = CAM_REQ_CMP;
539 			goto scsi_done;
540 		}
541 		if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
542 			req->header.result = IOP_RESULT_SUCCESS;
543 
544 		switch (req->header.result) {
545 		case IOP_RESULT_SUCCESS:
546 			switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
547 			case CAM_DIR_IN:
548 				bus_dmamap_sync(hba->io_dmat,
549 					srb->dma_map, BUS_DMASYNC_POSTREAD);
550 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
551 				break;
552 			case CAM_DIR_OUT:
553 				bus_dmamap_sync(hba->io_dmat,
554 					srb->dma_map, BUS_DMASYNC_POSTWRITE);
555 				bus_dmamap_unload(hba->io_dmat, srb->dma_map);
556 				break;
557 			}
558 			ccb->ccb_h.status = CAM_REQ_CMP;
559 			break;
560 		case IOP_RESULT_BAD_TARGET:
561 			ccb->ccb_h.status = CAM_DEV_NOT_THERE;
562 			break;
563 		case IOP_RESULT_BUSY:
564 			ccb->ccb_h.status = CAM_BUSY;
565 			break;
566 		case IOP_RESULT_INVALID_REQUEST:
567 			ccb->ccb_h.status = CAM_REQ_INVALID;
568 			break;
569 		case IOP_RESULT_FAIL:
570 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
571 			break;
572 		case IOP_RESULT_RESET:
573 			ccb->ccb_h.status = CAM_BUSY;
574 			break;
575 		case IOP_RESULT_CHECK_CONDITION:
576 			memcpy(&ccb->csio.sense_data, &req->sg_list,
577 				MIN(req->dataxfer_length, sizeof(ccb->csio.sense_data)));
578 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
579 			ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
580 			ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
581 			break;
582 		default:
583 			ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
584 			break;
585 		}
586 scsi_done:
587 		ccb->csio.resid = ccb->csio.dxfer_len - req->dataxfer_length;
588 
589 		hptiop_free_srb(hba, srb);
590 		xpt_done(ccb);
591 	} else if (context & MVIOP_CMD_TYPE_IOCTL) {
592 		struct hpt_iop_request_ioctl_command *req = hba->ctlcfg_ptr;
593 		if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
594 			hba->config_done = 1;
595 		else
596 			hba->config_done = -1;
597 		wakeup(req);
598 	} else if (context &
599 			(MVIOP_CMD_TYPE_SET_CONFIG |
600 				MVIOP_CMD_TYPE_GET_CONFIG))
601 		hba->config_done = 1;
602 	else {
603 		device_printf(hba->pcidev, "wrong callback type\n");
604 	}
605 }
606 
607 static void hptiop_drain_outbound_queue_mv(struct hpt_iop_hba * hba)
608 {
609 	u_int64_t req;
610 
611 	while ((req = hptiop_mv_outbound_read(hba))) {
612 		if (req & MVIOP_MU_QUEUE_ADDR_HOST_BIT) {
613 			if (req & MVIOP_MU_QUEUE_REQUEST_RETURN_CONTEXT) {
614 				hptiop_request_callback_mv(hba, req);
615 			}
616 	    	}
617 	}
618 }
619 
620 static int hptiop_intr_mv(struct hpt_iop_hba * hba)
621 {
622 	u_int32_t status;
623 	int ret = 0;
624 
625 	status = BUS_SPACE_RD4_MV0(outbound_doorbell);
626 
627 	if (status)
628 		BUS_SPACE_WRT4_MV0(outbound_doorbell, ~status);
629 
630 	if (status & MVIOP_MU_OUTBOUND_INT_MSG) {
631 		u_int32_t msg = BUS_SPACE_RD4_MV2(outbound_msg);
632 		KdPrint(("hptiop: received outbound msg %x\n", msg));
633 		hptiop_os_message_callback(hba, msg);
634 		ret = 1;
635 	}
636 
637 	if (status & MVIOP_MU_OUTBOUND_INT_POSTQUEUE) {
638 		hptiop_drain_outbound_queue_mv(hba);
639 		ret = 1;
640 	}
641 
642 	return ret;
643 }
644 
645 static int hptiop_send_sync_request_itl(struct hpt_iop_hba * hba,
646 					u_int32_t req32, u_int32_t millisec)
647 {
648 	u_int32_t i;
649 	u_int64_t temp64;
650 
651 	BUS_SPACE_WRT4_ITL(inbound_queue, req32);
652 	BUS_SPACE_RD4_ITL(outbound_intstatus);
653 
654 	for (i = 0; i < millisec; i++) {
655 		hptiop_intr_itl(hba);
656 		bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
657 			offsetof(struct hpt_iop_request_header, context),
658 			(u_int32_t *)&temp64, 2);
659 		if (temp64)
660 			return 0;
661 		DELAY(1000);
662 	}
663 
664 	return -1;
665 }
666 
667 static int hptiop_send_sync_request_mv(struct hpt_iop_hba *hba,
668 					void *req, u_int32_t millisec)
669 {
670 	u_int32_t i;
671 	u_int64_t phy_addr;
672 	hba->config_done = 0;
673 
674 	phy_addr = hba->ctlcfgcmd_phy |
675 			(u_int64_t)MVIOP_MU_QUEUE_ADDR_HOST_BIT;
676 	((struct hpt_iop_request_get_config *)req)->header.flags |=
677 		IOP_REQUEST_FLAG_SYNC_REQUEST |
678 		IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
679 	hptiop_mv_inbound_write(phy_addr, hba);
680 	BUS_SPACE_RD4_MV0(outbound_intmask);
681 
682 	for (i = 0; i < millisec; i++) {
683 		hptiop_intr_mv(hba);
684 		if (hba->config_done)
685 			return 0;
686 		DELAY(1000);
687 	}
688 	return -1;
689 }
690 
691 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
692 					u_int32_t msg, u_int32_t millisec)
693 {
694 	u_int32_t i;
695 
696 	hba->msg_done = 0;
697 	hba->ops->post_msg(hba, msg);
698 
699 	for (i=0; i<millisec; i++) {
700 		hba->ops->iop_intr(hba);
701 		if (hba->msg_done)
702 			break;
703 		DELAY(1000);
704 	}
705 
706 	return hba->msg_done? 0 : -1;
707 }
708 
709 static int hptiop_get_config_itl(struct hpt_iop_hba * hba,
710 				struct hpt_iop_request_get_config * config)
711 {
712 	u_int32_t req32;
713 
714 	config->header.size = sizeof(struct hpt_iop_request_get_config);
715 	config->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
716 	config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
717 	config->header.result = IOP_RESULT_PENDING;
718 	config->header.context = 0;
719 
720 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
721 	if (req32 == IOPMU_QUEUE_EMPTY)
722 		return -1;
723 
724 	bus_space_write_region_4(hba->bar0t, hba->bar0h,
725 			req32, (u_int32_t *)config,
726 			sizeof(struct hpt_iop_request_header) >> 2);
727 
728 	if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
729 		KdPrint(("hptiop: get config send cmd failed"));
730 		return -1;
731 	}
732 
733 	bus_space_read_region_4(hba->bar0t, hba->bar0h,
734 			req32, (u_int32_t *)config,
735 			sizeof(struct hpt_iop_request_get_config) >> 2);
736 
737 	BUS_SPACE_WRT4_ITL(outbound_queue, req32);
738 
739 	return 0;
740 }
741 
742 static int hptiop_get_config_mv(struct hpt_iop_hba * hba,
743 				struct hpt_iop_request_get_config * config)
744 {
745 	struct hpt_iop_request_get_config *req;
746 
747 	if (!(req = hba->ctlcfg_ptr))
748 		return -1;
749 
750 	req->header.flags = 0;
751 	req->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
752 	req->header.size = sizeof(struct hpt_iop_request_get_config);
753 	req->header.result = IOP_RESULT_PENDING;
754 	req->header.context = MVIOP_CMD_TYPE_GET_CONFIG;
755 
756 	if (hptiop_send_sync_request_mv(hba, req, 20000)) {
757 		KdPrint(("hptiop: get config send cmd failed"));
758 		return -1;
759 	}
760 
761 	*config = *req;
762 	return 0;
763 }
764 
765 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
766 				struct hpt_iop_request_set_config *config)
767 {
768 	u_int32_t req32;
769 
770 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
771 
772 	if (req32 == IOPMU_QUEUE_EMPTY)
773 		return -1;
774 
775 	config->header.size = sizeof(struct hpt_iop_request_set_config);
776 	config->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
777 	config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
778 	config->header.result = IOP_RESULT_PENDING;
779 	config->header.context = 0;
780 
781 	bus_space_write_region_4(hba->bar0t, hba->bar0h, req32,
782 		(u_int32_t *)config,
783 		sizeof(struct hpt_iop_request_set_config) >> 2);
784 
785 	if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
786 		KdPrint(("hptiop: set config send cmd failed"));
787 		return -1;
788 	}
789 
790 	BUS_SPACE_WRT4_ITL(outbound_queue, req32);
791 
792 	return 0;
793 }
794 
795 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
796 				struct hpt_iop_request_set_config *config)
797 {
798 	struct hpt_iop_request_set_config *req;
799 
800 	if (!(req = hba->ctlcfg_ptr))
801 		return -1;
802 
803 	memcpy((u_int8_t *)req + sizeof(struct hpt_iop_request_header),
804 		(u_int8_t *)config + sizeof(struct hpt_iop_request_header),
805 		sizeof(struct hpt_iop_request_set_config) -
806 			sizeof(struct hpt_iop_request_header));
807 
808 	req->header.flags = 0;
809 	req->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
810 	req->header.size = sizeof(struct hpt_iop_request_set_config);
811 	req->header.result = IOP_RESULT_PENDING;
812 	req->header.context = MVIOP_CMD_TYPE_SET_CONFIG;
813 
814 	if (hptiop_send_sync_request_mv(hba, req, 20000)) {
815 		KdPrint(("hptiop: set config send cmd failed"));
816 		return -1;
817 	}
818 
819 	return 0;
820 }
821 
822 static int hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
823 				u_int32_t req32,
824 				struct hpt_iop_ioctl_param *pParams)
825 {
826 	u_int64_t temp64;
827 	struct hpt_iop_request_ioctl_command req;
828 
829 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
830 			(hba->max_request_size -
831 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
832 		device_printf(hba->pcidev, "request size beyond max value");
833 		return -1;
834 	}
835 
836 	req.header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
837 		+ pParams->nInBufferSize;
838 	req.header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
839 	req.header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
840 	req.header.result = IOP_RESULT_PENDING;
841 	req.header.context = req32 + (u_int64_t)(unsigned long)hba->u.itl.mu;
842 	req.ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
843 	req.inbuf_size = pParams->nInBufferSize;
844 	req.outbuf_size = pParams->nOutBufferSize;
845 	req.bytes_returned = 0;
846 
847 	bus_space_write_region_4(hba->bar0t, hba->bar0h, req32, (u_int32_t *)&req,
848 		offsetof(struct hpt_iop_request_ioctl_command, buf)>>2);
849 
850 	hptiop_lock_adapter(hba);
851 
852 	BUS_SPACE_WRT4_ITL(inbound_queue, req32);
853 	BUS_SPACE_RD4_ITL(outbound_intstatus);
854 
855 	bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
856 		offsetof(struct hpt_iop_request_ioctl_command, header.context),
857 		(u_int32_t *)&temp64, 2);
858 	while (temp64) {
859 		if (hptiop_sleep(hba, (void *)((unsigned long)hba->u.itl.mu + req32),
860 				PPAUSE, "hptctl", HPT_OSM_TIMEOUT)==0)
861 			break;
862 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
863 		bus_space_read_region_4(hba->bar0t, hba->bar0h,req32 +
864 			offsetof(struct hpt_iop_request_ioctl_command,
865 				header.context),
866 			(u_int32_t *)&temp64, 2);
867 	}
868 
869 	hptiop_unlock_adapter(hba);
870 	return 0;
871 }
872 
873 static int hptiop_bus_space_copyin(struct hpt_iop_hba *hba, u_int32_t bus, void *user, int size)
874 {
875 	unsigned char byte;
876 	int i;
877 
878 	for (i=0; i<size; i++) {
879 		if (copyin((u_int8_t *)user + i, &byte, 1))
880 			return -1;
881 		bus_space_write_1(hba->bar0t, hba->bar0h, bus + i, byte);
882 	}
883 
884 	return 0;
885 }
886 
887 static int hptiop_bus_space_copyout(struct hpt_iop_hba *hba, u_int32_t bus, void *user, int size)
888 {
889 	unsigned char byte;
890 	int i;
891 
892 	for (i=0; i<size; i++) {
893 		byte = bus_space_read_1(hba->bar0t, hba->bar0h, bus + i);
894 		if (copyout(&byte, (u_int8_t *)user + i, 1))
895 			return -1;
896 	}
897 
898 	return 0;
899 }
900 
901 static int hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
902 				struct hpt_iop_ioctl_param * pParams)
903 {
904 	u_int32_t req32;
905 	u_int32_t result;
906 
907 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
908 		(pParams->Magic != HPT_IOCTL_MAGIC32))
909 		return EFAULT;
910 
911 	req32 = BUS_SPACE_RD4_ITL(inbound_queue);
912 	if (req32 == IOPMU_QUEUE_EMPTY)
913 		return EFAULT;
914 
915 	if (pParams->nInBufferSize)
916 		if (hptiop_bus_space_copyin(hba, req32 +
917 			offsetof(struct hpt_iop_request_ioctl_command, buf),
918 			(void *)pParams->lpInBuffer, pParams->nInBufferSize))
919 			goto invalid;
920 
921 	if (hptiop_post_ioctl_command_itl(hba, req32, pParams))
922 		goto invalid;
923 
924 	result = bus_space_read_4(hba->bar0t, hba->bar0h, req32 +
925 			offsetof(struct hpt_iop_request_ioctl_command,
926 				header.result));
927 
928 	if (result == IOP_RESULT_SUCCESS) {
929 		if (pParams->nOutBufferSize)
930 			if (hptiop_bus_space_copyout(hba, req32 +
931 				offsetof(struct hpt_iop_request_ioctl_command, buf) +
932 					((pParams->nInBufferSize + 3) & ~3),
933 				(void *)pParams->lpOutBuffer, pParams->nOutBufferSize))
934 				goto invalid;
935 
936 		if (pParams->lpBytesReturned) {
937 			if (hptiop_bus_space_copyout(hba, req32 +
938 				offsetof(struct hpt_iop_request_ioctl_command, bytes_returned),
939 				(void *)pParams->lpBytesReturned, sizeof(unsigned  long)))
940 				goto invalid;
941 		}
942 
943 		BUS_SPACE_WRT4_ITL(outbound_queue, req32);
944 
945 		return 0;
946 	} else{
947 invalid:
948 		BUS_SPACE_WRT4_ITL(outbound_queue, req32);
949 
950 		return EFAULT;
951 	}
952 }
953 
954 static int hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
955 				struct hpt_iop_request_ioctl_command *req,
956 				struct hpt_iop_ioctl_param *pParams)
957 {
958 	u_int64_t req_phy;
959 	int size = 0;
960 
961 	if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
962 			(hba->max_request_size -
963 			offsetof(struct hpt_iop_request_ioctl_command, buf))) {
964 		device_printf(hba->pcidev, "request size beyond max value");
965 		return -1;
966 	}
967 
968 	req->ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
969 	req->inbuf_size = pParams->nInBufferSize;
970 	req->outbuf_size = pParams->nOutBufferSize;
971 	req->header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
972 					+ pParams->nInBufferSize;
973 	req->header.context = (u_int64_t)MVIOP_CMD_TYPE_IOCTL;
974 	req->header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
975 	req->header.result = IOP_RESULT_PENDING;
976 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
977 	size = req->header.size >> 8;
978 	size = size > 3 ? 3 : size;
979 	req_phy = hba->ctlcfgcmd_phy | MVIOP_MU_QUEUE_ADDR_HOST_BIT | size;
980 	hptiop_mv_inbound_write(req_phy, hba);
981 
982 	BUS_SPACE_RD4_MV0(outbound_intmask);
983 
984 	while (hba->config_done == 0) {
985 		if (hptiop_sleep(hba, req, PPAUSE,
986 			"hptctl", HPT_OSM_TIMEOUT)==0)
987 			continue;
988 		hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
989 	}
990 	return 0;
991 }
992 
993 static int hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
994 				struct hpt_iop_ioctl_param *pParams)
995 {
996 	struct hpt_iop_request_ioctl_command *req;
997 
998 	if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
999 		(pParams->Magic != HPT_IOCTL_MAGIC32))
1000 		return EFAULT;
1001 
1002 	req = (struct hpt_iop_request_ioctl_command *)(hba->ctlcfg_ptr);
1003 	hba->config_done = 0;
1004 	hptiop_lock_adapter(hba);
1005 	if (pParams->nInBufferSize)
1006 		if (copyin((void *)pParams->lpInBuffer,
1007 				req->buf, pParams->nInBufferSize))
1008 			goto invalid;
1009 	if (hptiop_post_ioctl_command_mv(hba, req, pParams))
1010 		goto invalid;
1011 
1012 	if (hba->config_done == 1) {
1013 		if (pParams->nOutBufferSize)
1014 			if (copyout(req->buf +
1015 				((pParams->nInBufferSize + 3) & ~3),
1016 				(void *)pParams->lpOutBuffer,
1017 				pParams->nOutBufferSize))
1018 				goto invalid;
1019 
1020 		if (pParams->lpBytesReturned)
1021 			if (copyout(&req->bytes_returned,
1022 				(void*)pParams->lpBytesReturned,
1023 				sizeof(u_int32_t)))
1024 				goto invalid;
1025 		hptiop_unlock_adapter(hba);
1026 		return 0;
1027 	} else{
1028 invalid:
1029 		hptiop_unlock_adapter(hba);
1030 		return EFAULT;
1031 	}
1032 }
1033 
1034 static int  hptiop_rescan_bus(struct hpt_iop_hba * hba)
1035 {
1036 	union ccb           *ccb;
1037 
1038 	if ((ccb = xpt_alloc_ccb()) == NULL)
1039 		return(ENOMEM);
1040 	if (xpt_create_path(&ccb->ccb_h.path, xpt_periph, cam_sim_path(hba->sim),
1041 		CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1042 		xpt_free_ccb(ccb);
1043 		return(EIO);
1044 	}
1045 	xpt_rescan(ccb);
1046 	return(0);
1047 }
1048 
1049 static  bus_dmamap_callback_t   hptiop_map_srb;
1050 static  bus_dmamap_callback_t   hptiop_post_scsi_command;
1051 static  bus_dmamap_callback_t   hptiop_mv_map_ctlcfg;
1052 
1053 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba)
1054 {
1055 	hba->bar0_rid = 0x10;
1056 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1057 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1058 
1059 	if (hba->bar0_res == NULL) {
1060 		device_printf(hba->pcidev,
1061 			"failed to get iop base adrress.\n");
1062 		return -1;
1063 	}
1064 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1065 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1066 	hba->u.itl.mu = (struct hpt_iopmu_itl *)
1067 				rman_get_virtual(hba->bar0_res);
1068 
1069 	if (!hba->u.itl.mu) {
1070 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1071 					hba->bar0_rid, hba->bar0_res);
1072 		device_printf(hba->pcidev, "alloc mem res failed\n");
1073 		return -1;
1074 	}
1075 
1076 	return 0;
1077 }
1078 
1079 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba)
1080 {
1081 	hba->bar0_rid = 0x10;
1082 	hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1083 			SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1084 
1085 	if (hba->bar0_res == NULL) {
1086 		device_printf(hba->pcidev, "failed to get iop bar0.\n");
1087 		return -1;
1088 	}
1089 	hba->bar0t = rman_get_bustag(hba->bar0_res);
1090 	hba->bar0h = rman_get_bushandle(hba->bar0_res);
1091 	hba->u.mv.regs = (struct hpt_iopmv_regs *)
1092 				rman_get_virtual(hba->bar0_res);
1093 
1094 	if (!hba->u.mv.regs) {
1095 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1096 					hba->bar0_rid, hba->bar0_res);
1097 		device_printf(hba->pcidev, "alloc bar0 mem res failed\n");
1098 		return -1;
1099 	}
1100 
1101 	hba->bar2_rid = 0x18;
1102 	hba->bar2_res = bus_alloc_resource_any(hba->pcidev,
1103 			SYS_RES_MEMORY, &hba->bar2_rid, RF_ACTIVE);
1104 
1105 	if (hba->bar2_res == NULL) {
1106 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1107 					hba->bar0_rid, hba->bar0_res);
1108 		device_printf(hba->pcidev, "failed to get iop bar2.\n");
1109 		return -1;
1110 	}
1111 
1112 	hba->bar2t = rman_get_bustag(hba->bar2_res);
1113 	hba->bar2h = rman_get_bushandle(hba->bar2_res);
1114 	hba->u.mv.mu = (struct hpt_iopmu_mv *)rman_get_virtual(hba->bar2_res);
1115 
1116 	if (!hba->u.mv.mu) {
1117 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1118 					hba->bar0_rid, hba->bar0_res);
1119 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1120 					hba->bar2_rid, hba->bar2_res);
1121 		device_printf(hba->pcidev, "alloc mem bar2 res failed\n");
1122 		return -1;
1123 	}
1124 
1125 	return 0;
1126 }
1127 
1128 static void hptiop_release_pci_res_itl(struct hpt_iop_hba *hba)
1129 {
1130 	if (hba->bar0_res)
1131 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1132 			hba->bar0_rid, hba->bar0_res);
1133 }
1134 
1135 static void hptiop_release_pci_res_mv(struct hpt_iop_hba *hba)
1136 {
1137 	if (hba->bar0_res)
1138 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1139 			hba->bar0_rid, hba->bar0_res);
1140 	if (hba->bar2_res)
1141 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1142 			hba->bar2_rid, hba->bar2_res);
1143 }
1144 
1145 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba)
1146 {
1147 	if (bus_dma_tag_create(hba->parent_dmat,
1148 				1,
1149 				0,
1150 				BUS_SPACE_MAXADDR_32BIT,
1151 				BUS_SPACE_MAXADDR,
1152 				NULL, NULL,
1153 				0x800 - 0x8,
1154 				1,
1155 				BUS_SPACE_MAXSIZE_32BIT,
1156 				BUS_DMA_ALLOCNOW,
1157 #if __FreeBSD_version > 502000
1158 				NULL,
1159 				NULL,
1160 #endif
1161                            		&hba->ctlcfg_dmat)) {
1162 		device_printf(hba->pcidev, "alloc ctlcfg_dmat failed\n");
1163 		return -1;
1164 	}
1165 
1166 	if (bus_dmamem_alloc(hba->ctlcfg_dmat, (void **)&hba->ctlcfg_ptr,
1167 #if __FreeBSD_version>501000
1168 		BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1169 #else
1170 		BUS_DMA_WAITOK,
1171 #endif
1172 		&hba->ctlcfg_dmamap) != 0) {
1173 			device_printf(hba->pcidev,
1174 					"bus_dmamem_alloc failed!\n");
1175 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1176 			return -1;
1177 	}
1178 
1179 	if (bus_dmamap_load(hba->ctlcfg_dmat,
1180 			hba->ctlcfg_dmamap, hba->ctlcfg_ptr,
1181 			MVIOP_IOCTLCFG_SIZE,
1182 			hptiop_mv_map_ctlcfg, hba, 0)) {
1183 		device_printf(hba->pcidev, "bus_dmamap_load failed!\n");
1184 		if (hba->ctlcfg_dmat)
1185 			bus_dmamem_free(hba->ctlcfg_dmat,
1186 				hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1187 			bus_dma_tag_destroy(hba->ctlcfg_dmat);
1188 		return -1;
1189 	}
1190 
1191 	return 0;
1192 }
1193 
1194 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba)
1195 {
1196 	if (hba->ctlcfg_dmat) {
1197 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
1198 		bus_dmamem_free(hba->ctlcfg_dmat,
1199 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1200 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
1201 	}
1202 
1203 	return 0;
1204 }
1205 
1206 /*
1207  * CAM driver interface
1208  */
1209 static device_method_t driver_methods[] = {
1210 	/* Device interface */
1211 	DEVMETHOD(device_probe,     hptiop_probe),
1212 	DEVMETHOD(device_attach,    hptiop_attach),
1213 	DEVMETHOD(device_detach,    hptiop_detach),
1214 	DEVMETHOD(device_shutdown,  hptiop_shutdown),
1215 	{ 0, 0 }
1216 };
1217 
1218 static struct hptiop_adapter_ops hptiop_itl_ops = {
1219 	.iop_wait_ready    = hptiop_wait_ready_itl,
1220 	.internal_memalloc = 0,
1221 	.internal_memfree  = 0,
1222 	.alloc_pci_res     = hptiop_alloc_pci_res_itl,
1223 	.release_pci_res   = hptiop_release_pci_res_itl,
1224 	.enable_intr       = hptiop_enable_intr_itl,
1225 	.disable_intr      = hptiop_disable_intr_itl,
1226 	.get_config        = hptiop_get_config_itl,
1227 	.set_config        = hptiop_set_config_itl,
1228 	.iop_intr          = hptiop_intr_itl,
1229 	.post_msg          = hptiop_post_msg_itl,
1230 	.post_req          = hptiop_post_req_itl,
1231 	.do_ioctl          = hptiop_do_ioctl_itl,
1232 };
1233 
1234 static struct hptiop_adapter_ops hptiop_mv_ops = {
1235 	.iop_wait_ready    = hptiop_wait_ready_mv,
1236 	.internal_memalloc = hptiop_internal_memalloc_mv,
1237 	.internal_memfree  = hptiop_internal_memfree_mv,
1238 	.alloc_pci_res     = hptiop_alloc_pci_res_mv,
1239 	.release_pci_res   = hptiop_release_pci_res_mv,
1240 	.enable_intr       = hptiop_enable_intr_mv,
1241 	.disable_intr      = hptiop_disable_intr_mv,
1242 	.get_config        = hptiop_get_config_mv,
1243 	.set_config        = hptiop_set_config_mv,
1244 	.iop_intr          = hptiop_intr_mv,
1245 	.post_msg          = hptiop_post_msg_mv,
1246 	.post_req          = hptiop_post_req_mv,
1247 	.do_ioctl          = hptiop_do_ioctl_mv,
1248 };
1249 
1250 static driver_t hptiop_pci_driver = {
1251 	driver_name,
1252 	driver_methods,
1253 	sizeof(struct hpt_iop_hba)
1254 };
1255 
1256 DRIVER_MODULE(hptiop, pci, hptiop_pci_driver, hptiop_devclass, 0, 0);
1257 
1258 static int hptiop_probe(device_t dev)
1259 {
1260 	struct hpt_iop_hba *hba;
1261 	u_int32_t id;
1262 	static char buf[256];
1263 	int sas = 0;
1264 	struct hptiop_adapter_ops *ops;
1265 
1266 	if (pci_get_vendor(dev) != 0x1103)
1267 		return (ENXIO);
1268 
1269 	id = pci_get_device(dev);
1270 
1271 	switch (id) {
1272 		case 0x4322:
1273 		case 0x4321:
1274 		case 0x4320:
1275 			sas = 1;
1276 		case 0x3220:
1277 		case 0x3320:
1278 		case 0x3410:
1279 		case 0x3520:
1280 		case 0x3510:
1281 		case 0x3511:
1282 		case 0x3521:
1283 		case 0x3522:
1284 		case 0x3540:
1285 			ops = &hptiop_itl_ops;
1286 			break;
1287 		case 0x3120:
1288 		case 0x3122:
1289 		case 0x3020:
1290 			ops = &hptiop_mv_ops;
1291 			break;
1292 		default:
1293 			return (ENXIO);
1294 	}
1295 
1296 	device_printf(dev, "adapter at PCI %d:%d:%d, IRQ %d\n",
1297 		pci_get_bus(dev), pci_get_slot(dev),
1298 		pci_get_function(dev), pci_get_irq(dev));
1299 
1300 	sprintf(buf, "RocketRAID %x %s Controller\n",
1301 				id, sas ? "SAS" : "SATA");
1302 	device_set_desc_copy(dev, buf);
1303 
1304 	hba = (struct hpt_iop_hba *)device_get_softc(dev);
1305 	bzero(hba, sizeof(struct hpt_iop_hba));
1306 	hba->ops = ops;
1307 
1308 	KdPrint(("hba->ops=%p\n", hba->ops));
1309 	return 0;
1310 }
1311 
1312 static int hptiop_attach(device_t dev)
1313 {
1314 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)device_get_softc(dev);
1315 	struct hpt_iop_request_get_config  iop_config;
1316 	struct hpt_iop_request_set_config  set_config;
1317 	int rid = 0;
1318 	struct cam_devq *devq;
1319 	struct ccb_setasync ccb;
1320 	u_int32_t unit = device_get_unit(dev);
1321 
1322 	device_printf(dev, "%d RocketRAID 3xxx/4xxx controller driver %s\n",
1323 			unit, driver_version);
1324 
1325 	KdPrint(("hptiop: attach(%d, %d/%d/%d) ops=%p\n", unit,
1326 		pci_get_bus(dev), pci_get_slot(dev),
1327 		pci_get_function(dev), hba->ops));
1328 
1329 #if __FreeBSD_version >=440000
1330 	pci_enable_busmaster(dev);
1331 #endif
1332 	hba->pcidev = dev;
1333 	hba->pciunit = unit;
1334 
1335 	if (hba->ops->alloc_pci_res(hba))
1336 		return ENXIO;
1337 
1338 	if (hba->ops->iop_wait_ready(hba, 2000)) {
1339 		device_printf(dev, "adapter is not ready\n");
1340 		goto release_pci_res;
1341 	}
1342 
1343 #if (__FreeBSD_version >= 500000)
1344 	mtx_init(&hba->lock, "hptioplock", NULL, MTX_DEF);
1345 #endif
1346 
1347 	if (bus_dma_tag_create(NULL,/* parent */
1348 			1,  /* alignment */
1349 			0, /* boundary */
1350 			BUS_SPACE_MAXADDR,  /* lowaddr */
1351 			BUS_SPACE_MAXADDR,  /* highaddr */
1352 			NULL, NULL,         /* filter, filterarg */
1353 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsize */
1354 			BUS_SPACE_UNRESTRICTED, /* nsegments */
1355 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1356 			0,      /* flags */
1357 #if __FreeBSD_version>502000
1358 			NULL,   /* lockfunc */
1359 			NULL,       /* lockfuncarg */
1360 #endif
1361 			&hba->parent_dmat   /* tag */))
1362 	{
1363 		device_printf(dev, "alloc parent_dmat failed\n");
1364 		goto release_pci_res;
1365 	}
1366 
1367 	if (hba->ops->internal_memalloc) {
1368 		if (hba->ops->internal_memalloc(hba)) {
1369 			device_printf(dev, "alloc srb_dmat failed\n");
1370 			goto destroy_parent_tag;
1371 		}
1372 	}
1373 
1374 	if (hba->ops->get_config(hba, &iop_config)) {
1375 		device_printf(dev, "get iop config failed.\n");
1376 		goto get_config_failed;
1377 	}
1378 
1379 	hba->firmware_version = iop_config.firmware_version;
1380 	hba->interface_version = iop_config.interface_version;
1381 	hba->max_requests = iop_config.max_requests;
1382 	hba->max_devices = iop_config.max_devices;
1383 	hba->max_request_size = iop_config.request_size;
1384 	hba->max_sg_count = iop_config.max_sg_count;
1385 
1386 	if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1387 			4,  /* alignment */
1388 			BUS_SPACE_MAXADDR_32BIT+1, /* boundary */
1389 			BUS_SPACE_MAXADDR,  /* lowaddr */
1390 			BUS_SPACE_MAXADDR,  /* highaddr */
1391 			NULL, NULL,         /* filter, filterarg */
1392 			PAGE_SIZE * (hba->max_sg_count-1),  /* maxsize */
1393 			hba->max_sg_count,  /* nsegments */
1394 			0x20000,    /* maxsegsize */
1395 			BUS_DMA_ALLOCNOW,       /* flags */
1396 #if __FreeBSD_version>502000
1397 			busdma_lock_mutex,  /* lockfunc */
1398 			&hba->lock,     /* lockfuncarg */
1399 #endif
1400 			&hba->io_dmat   /* tag */))
1401 	{
1402 		device_printf(dev, "alloc io_dmat failed\n");
1403 		goto get_config_failed;
1404 	}
1405 
1406 	if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1407 			1,  /* alignment */
1408 			0, /* boundary */
1409 			BUS_SPACE_MAXADDR_32BIT,    /* lowaddr */
1410 			BUS_SPACE_MAXADDR,  /* highaddr */
1411 			NULL, NULL,         /* filter, filterarg */
1412 			HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE + 0x20,
1413 			1,  /* nsegments */
1414 			BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1415 			0,      /* flags */
1416 #if __FreeBSD_version>502000
1417 			NULL,   /* lockfunc */
1418 			NULL,       /* lockfuncarg */
1419 #endif
1420 			&hba->srb_dmat  /* tag */))
1421 	{
1422 		device_printf(dev, "alloc srb_dmat failed\n");
1423 		goto destroy_io_dmat;
1424 	}
1425 
1426 	if (bus_dmamem_alloc(hba->srb_dmat, (void **)&hba->uncached_ptr,
1427 #if __FreeBSD_version>501000
1428 			BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1429 #else
1430 			BUS_DMA_WAITOK,
1431 #endif
1432 			&hba->srb_dmamap) != 0)
1433 	{
1434 		device_printf(dev, "srb bus_dmamem_alloc failed!\n");
1435 		goto destroy_srb_dmat;
1436 	}
1437 
1438 	if (bus_dmamap_load(hba->srb_dmat,
1439 			hba->srb_dmamap, hba->uncached_ptr,
1440 			(HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE) + 0x20,
1441 			hptiop_map_srb, hba, 0))
1442 	{
1443 		device_printf(dev, "bus_dmamap_load failed!\n");
1444 		goto srb_dmamem_free;
1445 	}
1446 
1447 	if ((devq = cam_simq_alloc(hba->max_requests - 1 )) == NULL) {
1448 		device_printf(dev, "cam_simq_alloc failed\n");
1449 		goto srb_dmamap_unload;
1450 	}
1451 
1452 #if __FreeBSD_version <700000
1453 	hba->sim = cam_sim_alloc(hptiop_action, hptiop_poll, driver_name,
1454 			hba, unit, hba->max_requests - 1, 1, devq);
1455 #else
1456 	hba->sim = cam_sim_alloc(hptiop_action, hptiop_poll, driver_name,
1457 			hba, unit, &Giant, hba->max_requests - 1, 1, devq);
1458 #endif
1459 	if (!hba->sim) {
1460 		device_printf(dev, "cam_sim_alloc failed\n");
1461 		cam_simq_free(devq);
1462 		goto srb_dmamap_unload;
1463 	}
1464 #if __FreeBSD_version <700000
1465 	if (xpt_bus_register(hba->sim, 0) != CAM_SUCCESS)
1466 #else
1467 	if (xpt_bus_register(hba->sim, dev, 0) != CAM_SUCCESS)
1468 #endif
1469 	{
1470 		device_printf(dev, "xpt_bus_register failed\n");
1471 		goto free_cam_sim;
1472 	}
1473 
1474 	if (xpt_create_path(&hba->path, /*periph */ NULL,
1475 			cam_sim_path(hba->sim), CAM_TARGET_WILDCARD,
1476 			CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1477 		device_printf(dev, "xpt_create_path failed\n");
1478 		goto deregister_xpt_bus;
1479 	}
1480 
1481 	bzero(&set_config, sizeof(set_config));
1482 	set_config.iop_id = unit;
1483 	set_config.vbus_id = cam_sim_path(hba->sim);
1484 	set_config.max_host_request_size = HPT_SRB_MAX_REQ_SIZE;
1485 
1486 	if (hba->ops->set_config(hba, &set_config)) {
1487 		device_printf(dev, "set iop config failed.\n");
1488 		goto free_hba_path;
1489 	}
1490 
1491 	xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
1492 	ccb.ccb_h.func_code = XPT_SASYNC_CB;
1493 	ccb.event_enable = (AC_FOUND_DEVICE | AC_LOST_DEVICE);
1494 	ccb.callback = hptiop_async;
1495 	ccb.callback_arg = hba->sim;
1496 	xpt_action((union ccb *)&ccb);
1497 
1498 	rid = 0;
1499 	if ((hba->irq_res = bus_alloc_resource(hba->pcidev, SYS_RES_IRQ,
1500 			&rid, 0, ~0ul, 1, RF_SHAREABLE | RF_ACTIVE)) == NULL) {
1501 		device_printf(dev, "allocate irq failed!\n");
1502 		goto free_hba_path;
1503 	}
1504 
1505 #if __FreeBSD_version <700000
1506 	if (bus_setup_intr(hba->pcidev, hba->irq_res, INTR_TYPE_CAM,
1507 				hptiop_pci_intr, hba, &hba->irq_handle))
1508 #else
1509 	if (bus_setup_intr(hba->pcidev, hba->irq_res, INTR_TYPE_CAM,
1510 				NULL, hptiop_pci_intr, hba, &hba->irq_handle))
1511 #endif
1512 	{
1513 		device_printf(dev, "allocate intr function failed!\n");
1514 		goto free_irq_resource;
1515 	}
1516 
1517 	if (hptiop_send_sync_msg(hba,
1518 			IOPMU_INBOUND_MSG0_START_BACKGROUND_TASK, 5000)) {
1519 		device_printf(dev, "fail to start background task\n");
1520 		goto teartown_irq_resource;
1521 	}
1522 
1523 	hba->ops->enable_intr(hba);
1524 
1525 	hba->ioctl_dev = make_dev(&hptiop_cdevsw, unit,
1526 				UID_ROOT, GID_WHEEL /*GID_OPERATOR*/,
1527 				S_IRUSR | S_IWUSR, "%s%d", driver_name, unit);
1528 
1529 #if __FreeBSD_version < 503000
1530 	hba->ioctl_dev->si_drv1 = hba;
1531 #endif
1532 
1533 	return 0;
1534 
1535 
1536 teartown_irq_resource:
1537 	bus_teardown_intr(dev, hba->irq_res, hba->irq_handle);
1538 
1539 free_irq_resource:
1540 	bus_release_resource(dev, SYS_RES_IRQ, 0, hba->irq_res);
1541 
1542 free_hba_path:
1543 	xpt_free_path(hba->path);
1544 
1545 deregister_xpt_bus:
1546 	xpt_bus_deregister(cam_sim_path(hba->sim));
1547 
1548 free_cam_sim:
1549 	cam_sim_free(hba->sim, /*free devq*/ TRUE);
1550 
1551 srb_dmamap_unload:
1552 	if (hba->uncached_ptr)
1553 		bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
1554 
1555 srb_dmamem_free:
1556 	if (hba->uncached_ptr)
1557 		bus_dmamem_free(hba->srb_dmat,
1558 			hba->uncached_ptr, hba->srb_dmamap);
1559 
1560 destroy_srb_dmat:
1561 	if (hba->srb_dmat)
1562 		bus_dma_tag_destroy(hba->srb_dmat);
1563 
1564 destroy_io_dmat:
1565 	if (hba->io_dmat)
1566 		bus_dma_tag_destroy(hba->io_dmat);
1567 
1568 get_config_failed:
1569 	if (hba->ops->internal_memfree)
1570 		hba->ops->internal_memfree(hba);
1571 
1572 destroy_parent_tag:
1573 	if (hba->parent_dmat)
1574 		bus_dma_tag_destroy(hba->parent_dmat);
1575 
1576 release_pci_res:
1577 	if (hba->ops->release_pci_res)
1578 		hba->ops->release_pci_res(hba);
1579 
1580 	return ENXIO;
1581 }
1582 
1583 static int hptiop_detach(device_t dev)
1584 {
1585 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
1586 	int i;
1587 	int error = EBUSY;
1588 
1589 	hptiop_lock_adapter(hba);
1590 	for (i = 0; i < hba->max_devices; i++)
1591 		if (hptiop_os_query_remove_device(hba, i)) {
1592 			device_printf(dev, "%d file system is busy. id=%d",
1593 						hba->pciunit, i);
1594 			goto out;
1595 		}
1596 
1597 	if ((error = hptiop_shutdown(dev)) != 0)
1598 		goto out;
1599 	if (hptiop_send_sync_msg(hba,
1600 		IOPMU_INBOUND_MSG0_STOP_BACKGROUND_TASK, 60000))
1601 		goto out;
1602 
1603 	hptiop_release_resource(hba);
1604 	error = 0;
1605 out:
1606 	hptiop_unlock_adapter(hba);
1607 	return error;
1608 }
1609 
1610 static int hptiop_shutdown(device_t dev)
1611 {
1612 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
1613 
1614 	int error = 0;
1615 
1616 	if (hba->flag & HPT_IOCTL_FLAG_OPEN) {
1617 		device_printf(dev, "%d device is busy", hba->pciunit);
1618 		return EBUSY;
1619 	}
1620 
1621 	hba->ops->disable_intr(hba);
1622 
1623 	if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_SHUTDOWN, 60000))
1624 		error = EBUSY;
1625 
1626 	return error;
1627 }
1628 
1629 static void hptiop_pci_intr(void *arg)
1630 {
1631 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
1632 	hptiop_lock_adapter(hba);
1633 	hba->ops->iop_intr(hba);
1634 	hptiop_unlock_adapter(hba);
1635 }
1636 
1637 static void hptiop_poll(struct cam_sim *sim)
1638 {
1639 	hptiop_pci_intr(cam_sim_softc(sim));
1640 }
1641 
1642 static void hptiop_async(void * callback_arg, u_int32_t code,
1643 					struct cam_path * path, void * arg)
1644 {
1645 }
1646 
1647 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba)
1648 {
1649 	BUS_SPACE_WRT4_ITL(outbound_intmask,
1650 		~(IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0));
1651 }
1652 
1653 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba)
1654 {
1655 	u_int32_t int_mask;
1656 
1657 	int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
1658 
1659 	int_mask |= MVIOP_MU_OUTBOUND_INT_POSTQUEUE
1660 			| MVIOP_MU_OUTBOUND_INT_MSG;
1661     	BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
1662 }
1663 
1664 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba)
1665 {
1666 	u_int32_t int_mask;
1667 
1668 	int_mask = BUS_SPACE_RD4_ITL(outbound_intmask);
1669 
1670 	int_mask |= IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0;
1671 	BUS_SPACE_WRT4_ITL(outbound_intmask, int_mask);
1672 	BUS_SPACE_RD4_ITL(outbound_intstatus);
1673 }
1674 
1675 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba)
1676 {
1677 	u_int32_t int_mask;
1678 	int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
1679 
1680 	int_mask &= ~(MVIOP_MU_OUTBOUND_INT_MSG
1681 			| MVIOP_MU_OUTBOUND_INT_POSTQUEUE);
1682 	BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
1683 	BUS_SPACE_RD4_MV0(outbound_intmask);
1684 }
1685 
1686 static int hptiop_reset_adapter(struct hpt_iop_hba * hba)
1687 {
1688 	return hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
1689 }
1690 
1691 static void *hptiop_get_srb(struct hpt_iop_hba * hba)
1692 {
1693 	struct hpt_iop_srb * srb;
1694 
1695 	if (hba->srb_list) {
1696 		srb = hba->srb_list;
1697 		hba->srb_list = srb->next;
1698 		return srb;
1699 	}
1700 
1701 	return NULL;
1702 }
1703 
1704 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb)
1705 {
1706 	srb->next = hba->srb_list;
1707 	hba->srb_list = srb;
1708 }
1709 
1710 static void hptiop_action(struct cam_sim *sim, union ccb *ccb)
1711 {
1712 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)cam_sim_softc(sim);
1713 	struct hpt_iop_srb * srb;
1714 
1715 	switch (ccb->ccb_h.func_code) {
1716 
1717 	case XPT_SCSI_IO:
1718 		hptiop_lock_adapter(hba);
1719 		if (ccb->ccb_h.target_lun != 0 ||
1720 			ccb->ccb_h.target_id >= hba->max_devices ||
1721 			(ccb->ccb_h.flags & CAM_CDB_PHYS))
1722 		{
1723 			ccb->ccb_h.status = CAM_TID_INVALID;
1724 			xpt_done(ccb);
1725 			goto scsi_done;
1726 		}
1727 
1728 		if ((srb = hptiop_get_srb(hba)) == NULL) {
1729 			device_printf(hba->pcidev, "srb allocated failed");
1730 			ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1731 			xpt_done(ccb);
1732 			goto scsi_done;
1733 		}
1734 
1735 		srb->ccb = ccb;
1736 
1737 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_NONE)
1738 			hptiop_post_scsi_command(srb, NULL, 0, 0);
1739 		else if ((ccb->ccb_h.flags & CAM_SCATTER_VALID) == 0) {
1740 			if ((ccb->ccb_h.flags & CAM_DATA_PHYS) == 0) {
1741 				int error;
1742 
1743 				error = bus_dmamap_load(hba->io_dmat,
1744 						srb->dma_map,
1745 						ccb->csio.data_ptr,
1746 						ccb->csio.dxfer_len,
1747 						hptiop_post_scsi_command,
1748 						srb, 0);
1749 
1750 				if (error && error != EINPROGRESS) {
1751 					device_printf(hba->pcidev,
1752 						"%d bus_dmamap_load error %d",
1753 						hba->pciunit, error);
1754 					xpt_freeze_simq(hba->sim, 1);
1755 					ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1756 invalid:
1757 					hptiop_free_srb(hba, srb);
1758 					xpt_done(ccb);
1759 					goto scsi_done;
1760 				}
1761 			}
1762 			else {
1763 				device_printf(hba->pcidev,
1764 					"CAM_DATA_PHYS not supported");
1765 				ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1766 				goto invalid;
1767 			}
1768 		}
1769 		else {
1770 			struct bus_dma_segment *segs;
1771 
1772 			if ((ccb->ccb_h.flags & CAM_SG_LIST_PHYS) == 0 ||
1773 				(ccb->ccb_h.flags & CAM_DATA_PHYS) != 0) {
1774 				device_printf(hba->pcidev, "SCSI cmd failed");
1775 				ccb->ccb_h.status=CAM_PROVIDE_FAIL;
1776 				goto invalid;
1777 			}
1778 
1779 			segs = (struct bus_dma_segment *)ccb->csio.data_ptr;
1780 			hptiop_post_scsi_command(srb, segs,
1781 						ccb->csio.sglist_cnt, 0);
1782 		}
1783 
1784 scsi_done:
1785 		hptiop_unlock_adapter(hba);
1786 		return;
1787 
1788 	case XPT_RESET_BUS:
1789 		device_printf(hba->pcidev, "reset adapter");
1790 		hptiop_lock_adapter(hba);
1791 		hba->msg_done = 0;
1792 		hptiop_reset_adapter(hba);
1793 		hptiop_unlock_adapter(hba);
1794 		break;
1795 
1796 	case XPT_GET_TRAN_SETTINGS:
1797 	case XPT_SET_TRAN_SETTINGS:
1798 		ccb->ccb_h.status = CAM_FUNC_NOTAVAIL;
1799 		break;
1800 
1801 	case XPT_CALC_GEOMETRY:
1802 		ccb->ccg.heads = 255;
1803 		ccb->ccg.secs_per_track = 63;
1804 		ccb->ccg.cylinders = ccb->ccg.volume_size /
1805 				(ccb->ccg.heads * ccb->ccg.secs_per_track);
1806 		ccb->ccb_h.status = CAM_REQ_CMP;
1807 		break;
1808 
1809 	case XPT_PATH_INQ:
1810 	{
1811 		struct ccb_pathinq *cpi = &ccb->cpi;
1812 
1813 		cpi->version_num = 1;
1814 		cpi->hba_inquiry = PI_SDTR_ABLE;
1815 		cpi->target_sprt = 0;
1816 		cpi->hba_misc = PIM_NOBUSRESET;
1817 		cpi->hba_eng_cnt = 0;
1818 		cpi->max_target = hba->max_devices;
1819 		cpi->max_lun = 0;
1820 		cpi->unit_number = cam_sim_unit(sim);
1821 		cpi->bus_id = cam_sim_bus(sim);
1822 		cpi->initiator_id = hba->max_devices;
1823 		cpi->base_transfer_speed = 3300;
1824 
1825 		strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
1826 		strncpy(cpi->hba_vid, "HPT   ", HBA_IDLEN);
1827 		strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
1828 		cpi->transport = XPORT_SPI;
1829 		cpi->transport_version = 2;
1830 		cpi->protocol = PROTO_SCSI;
1831 		cpi->protocol_version = SCSI_REV_2;
1832 		cpi->ccb_h.status = CAM_REQ_CMP;
1833 		break;
1834 	}
1835 
1836 	default:
1837 		ccb->ccb_h.status = CAM_REQ_INVALID;
1838 		break;
1839 	}
1840 
1841 	xpt_done(ccb);
1842 	return;
1843 }
1844 
1845 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
1846 				struct hpt_iop_srb *srb,
1847 				bus_dma_segment_t *segs, int nsegs)
1848 {
1849 	int idx;
1850 	union ccb *ccb = srb->ccb;
1851 	u_int8_t *cdb;
1852 
1853 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
1854 		cdb = ccb->csio.cdb_io.cdb_ptr;
1855 	else
1856 		cdb = ccb->csio.cdb_io.cdb_bytes;
1857 
1858 	KdPrint(("ccb=%p %x-%x-%x\n",
1859 		ccb, *(u_int32_t *)cdb, *((u_int32_t *)cdb+1), *((u_int32_t *)cdb+2)));
1860 
1861 	if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {
1862 		u_int32_t iop_req32;
1863 		struct hpt_iop_request_scsi_command req;
1864 
1865 		iop_req32 = BUS_SPACE_RD4_ITL(inbound_queue);
1866 
1867 		if (iop_req32 == IOPMU_QUEUE_EMPTY) {
1868 			device_printf(hba->pcidev, "invaild req offset\n");
1869 			ccb->ccb_h.status = CAM_BUSY;
1870 			bus_dmamap_unload(hba->io_dmat, srb->dma_map);
1871 			hptiop_free_srb(hba, srb);
1872 			xpt_done(ccb);
1873 			return;
1874 		}
1875 
1876 		if (ccb->csio.dxfer_len && nsegs > 0) {
1877 			struct hpt_iopsg *psg = req.sg_list;
1878 			for (idx = 0; idx < nsegs; idx++, psg++) {
1879 				psg->pci_address = (u_int64_t)segs[idx].ds_addr;
1880 				psg->size = segs[idx].ds_len;
1881 				psg->eot = 0;
1882 			}
1883 			psg[-1].eot = 1;
1884 		}
1885 
1886 		bcopy(cdb, req.cdb, ccb->csio.cdb_len);
1887 
1888 		req.header.size = offsetof(struct hpt_iop_request_scsi_command, sg_list)
1889 				+ nsegs*sizeof(struct hpt_iopsg);
1890 		req.header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1891 		req.header.flags = 0;
1892 		req.header.result = IOP_RESULT_PENDING;
1893 		req.header.context = (u_int64_t)(unsigned long)srb;
1894 		req.dataxfer_length = ccb->csio.dxfer_len;
1895 		req.channel =  0;
1896 		req.target =  ccb->ccb_h.target_id;
1897 		req.lun =  ccb->ccb_h.target_lun;
1898 
1899 		bus_space_write_region_1(hba->bar0t, hba->bar0h, iop_req32,
1900 			(u_int8_t *)&req, req.header.size);
1901 
1902 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1903 			bus_dmamap_sync(hba->io_dmat,
1904 				srb->dma_map, BUS_DMASYNC_PREREAD);
1905 		}
1906 		else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
1907 			bus_dmamap_sync(hba->io_dmat,
1908 				srb->dma_map, BUS_DMASYNC_PREWRITE);
1909 
1910 		BUS_SPACE_WRT4_ITL(inbound_queue,iop_req32);
1911 	} else {
1912 		struct hpt_iop_request_scsi_command *req;
1913 
1914 		req = (struct hpt_iop_request_scsi_command *)srb;
1915 		if (ccb->csio.dxfer_len && nsegs > 0) {
1916 			struct hpt_iopsg *psg = req->sg_list;
1917 			for (idx = 0; idx < nsegs; idx++, psg++) {
1918 				psg->pci_address =
1919 					(u_int64_t)segs[idx].ds_addr;
1920 				psg->size = segs[idx].ds_len;
1921 				psg->eot = 0;
1922 			}
1923 			psg[-1].eot = 1;
1924 		}
1925 
1926 		bcopy(cdb, req->cdb, ccb->csio.cdb_len);
1927 
1928 		req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1929 		req->header.result = IOP_RESULT_PENDING;
1930 		req->dataxfer_length = ccb->csio.dxfer_len;
1931 		req->channel =  0;
1932 		req->target =  ccb->ccb_h.target_id;
1933 		req->lun =  ccb->ccb_h.target_lun;
1934 		req->header.size = offsetof(struct hpt_iop_request_scsi_command, sg_list)
1935 			+ nsegs*sizeof(struct hpt_iopsg);
1936 		req->header.context = (u_int64_t)srb->index |
1937 						IOPMU_QUEUE_ADDR_HOST_BIT;
1938 		req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
1939 
1940 		if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1941 			bus_dmamap_sync(hba->io_dmat,
1942 				srb->dma_map, BUS_DMASYNC_PREREAD);
1943 		}else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT) {
1944 			bus_dmamap_sync(hba->io_dmat,
1945 				srb->dma_map, BUS_DMASYNC_PREWRITE);
1946 		}
1947 
1948 		if (hba->firmware_version > 0x01020000
1949 			|| hba->interface_version > 0x01020000) {
1950 			u_int32_t size_bits;
1951 
1952 			if (req->header.size < 256)
1953 				size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT;
1954 			else if (req->header.size < 512)
1955 				size_bits = IOPMU_QUEUE_ADDR_HOST_BIT;
1956 			else
1957 				size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT
1958 						| IOPMU_QUEUE_ADDR_HOST_BIT;
1959 
1960 			BUS_SPACE_WRT4_ITL(inbound_queue,
1961 				(u_int32_t)srb->phy_addr | size_bits);
1962 		} else
1963 			BUS_SPACE_WRT4_ITL(inbound_queue, (u_int32_t)srb->phy_addr
1964 				|IOPMU_QUEUE_ADDR_HOST_BIT);
1965 	}
1966 }
1967 
1968 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
1969 				struct hpt_iop_srb *srb,
1970 				bus_dma_segment_t *segs, int nsegs)
1971 {
1972 	int idx, size;
1973 	union ccb *ccb = srb->ccb;
1974 	u_int8_t *cdb;
1975 	struct hpt_iop_request_scsi_command *req;
1976 	u_int64_t req_phy;
1977 
1978     	req = (struct hpt_iop_request_scsi_command *)srb;
1979 	req_phy = srb->phy_addr;
1980 
1981 	if (ccb->csio.dxfer_len && nsegs > 0) {
1982 		struct hpt_iopsg *psg = req->sg_list;
1983 		for (idx = 0; idx < nsegs; idx++, psg++) {
1984 			psg->pci_address = (u_int64_t)segs[idx].ds_addr;
1985 			psg->size = segs[idx].ds_len;
1986 			psg->eot = 0;
1987 		}
1988 		psg[-1].eot = 1;
1989 	}
1990 	if (ccb->ccb_h.flags & CAM_CDB_POINTER)
1991 		cdb = ccb->csio.cdb_io.cdb_ptr;
1992 	else
1993 		cdb = ccb->csio.cdb_io.cdb_bytes;
1994 
1995 	bcopy(cdb, req->cdb, ccb->csio.cdb_len);
1996 	req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1997 	req->header.result = IOP_RESULT_PENDING;
1998 	req->dataxfer_length = ccb->csio.dxfer_len;
1999 	req->channel = 0;
2000 	req->target =  ccb->ccb_h.target_id;
2001 	req->lun =  ccb->ccb_h.target_lun;
2002 	req->header.size = sizeof(struct hpt_iop_request_scsi_command)
2003 				- sizeof(struct hpt_iopsg)
2004 				+ nsegs * sizeof(struct hpt_iopsg);
2005 	if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
2006 		bus_dmamap_sync(hba->io_dmat,
2007 			srb->dma_map, BUS_DMASYNC_PREREAD);
2008 	}
2009 	else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
2010 		bus_dmamap_sync(hba->io_dmat,
2011 			srb->dma_map, BUS_DMASYNC_PREWRITE);
2012 	req->header.context = (u_int64_t)srb->index
2013 					<< MVIOP_REQUEST_NUMBER_START_BIT
2014 					| MVIOP_CMD_TYPE_SCSI;
2015 	req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
2016 	size = req->header.size >> 8;
2017 	hptiop_mv_inbound_write(req_phy
2018 			| MVIOP_MU_QUEUE_ADDR_HOST_BIT
2019 			| (size > 3 ? 3 : size), hba);
2020 }
2021 
2022 static void hptiop_post_scsi_command(void *arg, bus_dma_segment_t *segs,
2023 					int nsegs, int error)
2024 {
2025 	struct hpt_iop_srb *srb = (struct hpt_iop_srb *)arg;
2026 	union ccb *ccb = srb->ccb;
2027 	struct hpt_iop_hba *hba = srb->hba;
2028 
2029 	if (error || nsegs > hba->max_sg_count) {
2030 		KdPrint(("hptiop: func_code=%x tid=%x lun=%x nsegs=%d\n",
2031 			ccb->ccb_h.func_code,
2032 			ccb->ccb_h.target_id,
2033 			ccb->ccb_h.target_lun, nsegs));
2034 		ccb->ccb_h.status = CAM_BUSY;
2035 		bus_dmamap_unload(hba->io_dmat, srb->dma_map);
2036 		hptiop_free_srb(hba, srb);
2037 		xpt_done(ccb);
2038 		return;
2039 	}
2040 
2041 	hba->ops->post_req(hba, srb, segs, nsegs);
2042 }
2043 
2044 static void hptiop_mv_map_ctlcfg(void *arg, bus_dma_segment_t *segs,
2045 				int nsegs, int error)
2046 {
2047 	struct hpt_iop_hba *hba = (struct hpt_iop_hba *)arg;
2048 	hba->ctlcfgcmd_phy = ((u_int64_t)segs->ds_addr + 0x1F)
2049 				& ~(u_int64_t)0x1F;
2050 	hba->ctlcfg_ptr = (u_int8_t *)(((unsigned long)hba->ctlcfg_ptr + 0x1F)
2051 				& ~0x1F);
2052 }
2053 
2054 static void hptiop_map_srb(void *arg, bus_dma_segment_t *segs,
2055 				int nsegs, int error)
2056 {
2057 	struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
2058 	bus_addr_t phy_addr = (segs->ds_addr + 0x1F) & ~(bus_addr_t)0x1F;
2059 	struct hpt_iop_srb *srb, *tmp_srb;
2060 	int i;
2061 
2062 	if (error || nsegs == 0) {
2063 		device_printf(hba->pcidev, "hptiop_map_srb error");
2064 		return;
2065 	}
2066 
2067 	/* map srb */
2068 	srb = (struct hpt_iop_srb *)
2069 		(((unsigned long)hba->uncached_ptr + 0x1F)
2070 		& ~(unsigned long)0x1F);
2071 
2072 	for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2073 		tmp_srb = (struct hpt_iop_srb *)
2074 					((char *)srb + i * HPT_SRB_MAX_SIZE);
2075 		if (((unsigned long)tmp_srb & 0x1F) == 0) {
2076 			if (bus_dmamap_create(hba->io_dmat,
2077 						0, &tmp_srb->dma_map)) {
2078 				device_printf(hba->pcidev, "dmamap create failed");
2079 				return;
2080 			}
2081 
2082 			bzero(tmp_srb, sizeof(struct hpt_iop_srb));
2083 			tmp_srb->hba = hba;
2084 			tmp_srb->index = i;
2085 			if (hba->ctlcfg_ptr == 0) {/*itl iop*/
2086 				tmp_srb->phy_addr = (u_int64_t)(u_int32_t)
2087 							(phy_addr >> 5);
2088 				if (phy_addr & IOPMU_MAX_MEM_SUPPORT_MASK_32G)
2089 					tmp_srb->srb_flag =
2090 						HPT_SRB_FLAG_HIGH_MEM_ACESS;
2091 			} else {
2092 				tmp_srb->phy_addr = phy_addr;
2093 			}
2094 
2095 			hptiop_free_srb(hba, tmp_srb);
2096 			hba->srb[i] = tmp_srb;
2097 			phy_addr += HPT_SRB_MAX_SIZE;
2098 		}
2099 		else {
2100 			device_printf(hba->pcidev, "invalid alignment");
2101 			return;
2102 		}
2103 	}
2104 }
2105 
2106 static void hptiop_os_message_callback(struct hpt_iop_hba * hba, u_int32_t msg)
2107 {
2108 		hba->msg_done = 1;
2109 }
2110 
2111 static  int hptiop_os_query_remove_device(struct hpt_iop_hba * hba,
2112 						int target_id)
2113 {
2114 	struct cam_periph       *periph = NULL;
2115 	struct cam_path         *path;
2116 	int                     status, retval = 0;
2117 
2118 	status = xpt_create_path(&path, NULL, hba->sim->path_id, target_id, 0);
2119 
2120 	if (status == CAM_REQ_CMP) {
2121 		if ((periph = cam_periph_find(path, "da")) != NULL) {
2122 			if (periph->refcount >= 1) {
2123 				device_printf(hba->pcidev, "%d ,"
2124 					"target_id=0x%x,"
2125 					"refcount=%d",
2126 				    hba->pciunit, target_id, periph->refcount);
2127 				retval = -1;
2128 			}
2129 		}
2130 		xpt_free_path(path);
2131 	}
2132 	return retval;
2133 }
2134 
2135 static void hptiop_release_resource(struct hpt_iop_hba *hba)
2136 {
2137 	int i;
2138 	if (hba->path) {
2139 		struct ccb_setasync ccb;
2140 
2141 		xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
2142 		ccb.ccb_h.func_code = XPT_SASYNC_CB;
2143 		ccb.event_enable = 0;
2144 		ccb.callback = hptiop_async;
2145 		ccb.callback_arg = hba->sim;
2146 		xpt_action((union ccb *)&ccb);
2147 		xpt_free_path(hba->path);
2148 	}
2149 
2150 	if (hba->sim) {
2151 		xpt_bus_deregister(cam_sim_path(hba->sim));
2152 		cam_sim_free(hba->sim, TRUE);
2153 	}
2154 
2155 	if (hba->ctlcfg_dmat) {
2156 		bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
2157 		bus_dmamem_free(hba->ctlcfg_dmat,
2158 					hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
2159 		bus_dma_tag_destroy(hba->ctlcfg_dmat);
2160 	}
2161 
2162 	for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2163 		struct hpt_iop_srb *srb = hba->srb[i];
2164 		if (srb->dma_map)
2165 			bus_dmamap_destroy(hba->io_dmat, srb->dma_map);
2166 	}
2167 
2168 	if (hba->srb_dmat) {
2169 		bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
2170 		bus_dmamap_destroy(hba->srb_dmat, hba->srb_dmamap);
2171 		bus_dma_tag_destroy(hba->srb_dmat);
2172 	}
2173 
2174 	if (hba->io_dmat)
2175 		bus_dma_tag_destroy(hba->io_dmat);
2176 
2177 	if (hba->parent_dmat)
2178 		bus_dma_tag_destroy(hba->parent_dmat);
2179 
2180 	if (hba->irq_handle)
2181 		bus_teardown_intr(hba->pcidev, hba->irq_res, hba->irq_handle);
2182 
2183 	if (hba->irq_res)
2184 		bus_release_resource(hba->pcidev, SYS_RES_IRQ,
2185 					0, hba->irq_res);
2186 
2187 	if (hba->bar0_res)
2188 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2189 					hba->bar0_rid, hba->bar0_res);
2190 	if (hba->bar2_res)
2191 		bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2192 					hba->bar2_rid, hba->bar2_res);
2193 	if (hba->ioctl_dev)
2194 		destroy_dev(hba->ioctl_dev);
2195 }
2196