xref: /freebsd/sys/dev/mrsas/mrsas_cam.c (revision 63cbe8d1d95f97e93929ec66f1138693d08dd9f6)
1 /*
2  * Copyright (c) 2015, AVAGO Tech. All rights reserved. Author: Marian Choy
3  * Copyright (c) 2014, LSI Corp. All rights reserved. Author: Marian Choy
4  * Support: freebsdraid@avagotech.com
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions are
8  * met:
9  *
10  * 1. Redistributions of source code must retain the above copyright notice,
11  * this list of conditions and the following disclaimer. 2. Redistributions
12  * in binary form must reproduce the above copyright notice, this list of
13  * conditions and the following disclaimer in the documentation and/or other
14  * materials provided with the distribution. 3. Neither the name of the
15  * <ORGANIZATION> nor the names of its contributors may be used to endorse or
16  * promote products derived from this software without specific prior written
17  * permission.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
20  * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22  * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
23  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29  * POSSIBILITY OF SUCH DAMAGE.
30  *
31  */
32 
33 #include <sys/cdefs.h>
34 __FBSDID("$FreeBSD$");
35 
36 #include "dev/mrsas/mrsas.h"
37 
38 #include <cam/cam.h>
39 #include <cam/cam_ccb.h>
40 #include <cam/cam_sim.h>
41 #include <cam/cam_xpt_sim.h>
42 #include <cam/cam_debug.h>
43 #include <cam/cam_periph.h>
44 #include <cam/cam_xpt_periph.h>
45 
46 #include <cam/scsi/scsi_all.h>
47 #include <cam/scsi/scsi_message.h>
48 #include <sys/taskqueue.h>
49 #include <sys/kernel.h>
50 
51 
52 #include <sys/time.h>			/* XXX for pcpu.h */
53 #include <sys/pcpu.h>			/* XXX for PCPU_GET */
54 
55 #define	smp_processor_id()  PCPU_GET(cpuid)
56 
57 /*
58  * Function prototypes
59  */
60 int	mrsas_cam_attach(struct mrsas_softc *sc);
61 int	mrsas_find_io_type(struct cam_sim *sim, union ccb *ccb);
62 int	mrsas_bus_scan(struct mrsas_softc *sc);
63 int	mrsas_bus_scan_sim(struct mrsas_softc *sc, struct cam_sim *sim);
64 int
65 mrsas_map_request(struct mrsas_softc *sc,
66     struct mrsas_mpt_cmd *cmd, union ccb *ccb);
67 int
68 mrsas_build_ldio_rw(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
69     union ccb *ccb);
70 int
71 mrsas_build_ldio_nonrw(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
72     union ccb *ccb);
73 int
74 mrsas_build_syspdio(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
75     union ccb *ccb, struct cam_sim *sim, u_int8_t fp_possible);
76 int
77 mrsas_setup_io(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
78     union ccb *ccb, u_int32_t device_id,
79     MRSAS_RAID_SCSI_IO_REQUEST * io_request);
80 void	mrsas_xpt_freeze(struct mrsas_softc *sc);
81 void	mrsas_xpt_release(struct mrsas_softc *sc);
82 void	mrsas_cam_detach(struct mrsas_softc *sc);
83 void	mrsas_release_mpt_cmd(struct mrsas_mpt_cmd *cmd);
84 void	mrsas_unmap_request(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd);
85 void	mrsas_cmd_done(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd);
86 void
87 mrsas_fire_cmd(struct mrsas_softc *sc, u_int32_t req_desc_lo,
88     u_int32_t req_desc_hi);
89 void
90 mrsas_set_pd_lba(MRSAS_RAID_SCSI_IO_REQUEST * io_request,
91     u_int8_t cdb_len, struct IO_REQUEST_INFO *io_info, union ccb *ccb,
92     MR_DRV_RAID_MAP_ALL * local_map_ptr, u_int32_t ref_tag,
93     u_int32_t ld_block_size);
94 static void mrsas_freeze_simq(struct mrsas_mpt_cmd *cmd, struct cam_sim *sim);
95 static void mrsas_cam_poll(struct cam_sim *sim);
96 static void mrsas_action(struct cam_sim *sim, union ccb *ccb);
97 static void mrsas_scsiio_timeout(void *data);
98 static int mrsas_track_scsiio(struct mrsas_softc *sc, target_id_t id, u_int32_t bus_id);
99 static void mrsas_tm_response_code(struct mrsas_softc *sc,
100     MPI2_SCSI_TASK_MANAGE_REPLY *mpi_reply);
101 static int mrsas_issue_tm(struct mrsas_softc *sc,
102     MRSAS_REQUEST_DESCRIPTOR_UNION *req_desc);
103 static void
104 mrsas_data_load_cb(void *arg, bus_dma_segment_t *segs,
105     int nseg, int error);
106 static int32_t
107 mrsas_startio(struct mrsas_softc *sc, struct cam_sim *sim,
108     union ccb *ccb);
109 struct mrsas_mpt_cmd *mrsas_get_mpt_cmd(struct mrsas_softc *sc);
110 MRSAS_REQUEST_DESCRIPTOR_UNION *
111 	mrsas_get_request_desc(struct mrsas_softc *sc, u_int16_t index);
112 
113 extern void
114 mrsas_map_mpt_cmd_status(struct mrsas_mpt_cmd *cmd, u_int8_t status,
115     u_int8_t extStatus);
116 extern int mrsas_reset_targets(struct mrsas_softc *sc);
117 extern u_int16_t MR_TargetIdToLdGet(u_int32_t ldTgtId, MR_DRV_RAID_MAP_ALL * map);
118 extern u_int32_t
119 MR_LdBlockSizeGet(u_int32_t ldTgtId, MR_DRV_RAID_MAP_ALL * map);
120 extern void mrsas_isr(void *arg);
121 extern void mrsas_aen_handler(struct mrsas_softc *sc);
122 extern u_int8_t
123 MR_BuildRaidContext(struct mrsas_softc *sc,
124     struct IO_REQUEST_INFO *io_info, RAID_CONTEXT * pRAID_Context,
125     MR_DRV_RAID_MAP_ALL * map);
126 extern u_int16_t
127 MR_LdSpanArrayGet(u_int32_t ld, u_int32_t span,
128     MR_DRV_RAID_MAP_ALL * map);
129 extern u_int16_t
130 mrsas_get_updated_dev_handle(struct mrsas_softc *sc,
131     PLD_LOAD_BALANCE_INFO lbInfo, struct IO_REQUEST_INFO *io_info);
132 extern u_int8_t
133 megasas_get_best_arm(PLD_LOAD_BALANCE_INFO lbInfo, u_int8_t arm,
134     u_int64_t block, u_int32_t count);
135 extern int mrsas_complete_cmd(struct mrsas_softc *sc, u_int32_t MSIxIndex);
136 extern MR_LD_RAID *MR_LdRaidGet(u_int32_t ld, MR_DRV_RAID_MAP_ALL * map);
137 extern void mrsas_disable_intr(struct mrsas_softc *sc);
138 extern void mrsas_enable_intr(struct mrsas_softc *sc);
139 
140 
141 /*
142  * mrsas_cam_attach:	Main entry to CAM subsystem
143  * input:				Adapter instance soft state
144  *
145  * This function is called from mrsas_attach() during initialization to perform
146  * SIM allocations and XPT bus registration.  If the kernel version is 7.4 or
147  * earlier, it would also initiate a bus scan.
148  */
149 int
150 mrsas_cam_attach(struct mrsas_softc *sc)
151 {
152 	struct cam_devq *devq;
153 	int mrsas_cam_depth;
154 
155 	mrsas_cam_depth = sc->max_fw_cmds - MRSAS_INTERNAL_CMDS;
156 
157 	if ((devq = cam_simq_alloc(mrsas_cam_depth)) == NULL) {
158 		device_printf(sc->mrsas_dev, "Cannot allocate SIM queue\n");
159 		return (ENOMEM);
160 	}
161 	/*
162 	 * Create SIM for bus 0 and register, also create path
163 	 */
164 	sc->sim_0 = cam_sim_alloc(mrsas_action, mrsas_cam_poll, "mrsas", sc,
165 	    device_get_unit(sc->mrsas_dev), &sc->sim_lock, mrsas_cam_depth,
166 	    mrsas_cam_depth, devq);
167 	if (sc->sim_0 == NULL) {
168 		cam_simq_free(devq);
169 		device_printf(sc->mrsas_dev, "Cannot register SIM\n");
170 		return (ENXIO);
171 	}
172 	/* Initialize taskqueue for Event Handling */
173 	TASK_INIT(&sc->ev_task, 0, (void *)mrsas_aen_handler, sc);
174 	sc->ev_tq = taskqueue_create("mrsas_taskq", M_NOWAIT | M_ZERO,
175 	    taskqueue_thread_enqueue, &sc->ev_tq);
176 
177 	/* Run the task queue with lowest priority */
178 	taskqueue_start_threads(&sc->ev_tq, 1, 255, "%s taskq",
179 	    device_get_nameunit(sc->mrsas_dev));
180 	mtx_lock(&sc->sim_lock);
181 	if (xpt_bus_register(sc->sim_0, sc->mrsas_dev, 0) != CAM_SUCCESS) {
182 		cam_sim_free(sc->sim_0, TRUE);	/* passing true frees the devq */
183 		mtx_unlock(&sc->sim_lock);
184 		return (ENXIO);
185 	}
186 	if (xpt_create_path(&sc->path_0, NULL, cam_sim_path(sc->sim_0),
187 	    CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
188 		xpt_bus_deregister(cam_sim_path(sc->sim_0));
189 		cam_sim_free(sc->sim_0, TRUE);	/* passing true will free the
190 						 * devq */
191 		mtx_unlock(&sc->sim_lock);
192 		return (ENXIO);
193 	}
194 	mtx_unlock(&sc->sim_lock);
195 
196 	/*
197 	 * Create SIM for bus 1 and register, also create path
198 	 */
199 	sc->sim_1 = cam_sim_alloc(mrsas_action, mrsas_cam_poll, "mrsas", sc,
200 	    device_get_unit(sc->mrsas_dev), &sc->sim_lock, mrsas_cam_depth,
201 	    mrsas_cam_depth, devq);
202 	if (sc->sim_1 == NULL) {
203 		cam_simq_free(devq);
204 		device_printf(sc->mrsas_dev, "Cannot register SIM\n");
205 		return (ENXIO);
206 	}
207 	mtx_lock(&sc->sim_lock);
208 	if (xpt_bus_register(sc->sim_1, sc->mrsas_dev, 1) != CAM_SUCCESS) {
209 		cam_sim_free(sc->sim_1, TRUE);	/* passing true frees the devq */
210 		mtx_unlock(&sc->sim_lock);
211 		return (ENXIO);
212 	}
213 	if (xpt_create_path(&sc->path_1, NULL, cam_sim_path(sc->sim_1),
214 	    CAM_TARGET_WILDCARD,
215 	    CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
216 		xpt_bus_deregister(cam_sim_path(sc->sim_1));
217 		cam_sim_free(sc->sim_1, TRUE);
218 		mtx_unlock(&sc->sim_lock);
219 		return (ENXIO);
220 	}
221 	mtx_unlock(&sc->sim_lock);
222 
223 #if (__FreeBSD_version <= 704000)
224 	if (mrsas_bus_scan(sc)) {
225 		device_printf(sc->mrsas_dev, "Error in bus scan.\n");
226 		return (1);
227 	}
228 #endif
229 	return (0);
230 }
231 
232 /*
233  * mrsas_cam_detach:	De-allocates and teardown CAM
234  * input:				Adapter instance soft state
235  *
236  * De-registers and frees the paths and SIMs.
237  */
238 void
239 mrsas_cam_detach(struct mrsas_softc *sc)
240 {
241 	if (sc->ev_tq != NULL)
242 		taskqueue_free(sc->ev_tq);
243 	mtx_lock(&sc->sim_lock);
244 	if (sc->path_0)
245 		xpt_free_path(sc->path_0);
246 	if (sc->sim_0) {
247 		xpt_bus_deregister(cam_sim_path(sc->sim_0));
248 		cam_sim_free(sc->sim_0, FALSE);
249 	}
250 	if (sc->path_1)
251 		xpt_free_path(sc->path_1);
252 	if (sc->sim_1) {
253 		xpt_bus_deregister(cam_sim_path(sc->sim_1));
254 		cam_sim_free(sc->sim_1, TRUE);
255 	}
256 	mtx_unlock(&sc->sim_lock);
257 }
258 
259 /*
260  * mrsas_action:	SIM callback entry point
261  * input:			pointer to SIM pointer to CAM Control Block
262  *
263  * This function processes CAM subsystem requests. The type of request is stored
264  * in ccb->ccb_h.func_code.  The preprocessor #ifdef is necessary because
265  * ccb->cpi.maxio is not supported for FreeBSD version 7.4 or earlier.
266  */
267 static void
268 mrsas_action(struct cam_sim *sim, union ccb *ccb)
269 {
270 	struct mrsas_softc *sc = (struct mrsas_softc *)cam_sim_softc(sim);
271 	struct ccb_hdr *ccb_h = &(ccb->ccb_h);
272 	u_int32_t device_id;
273 
274 	/*
275      * Check if the system going down
276      * or the adapter is in unrecoverable critical error
277      */
278     if (sc->remove_in_progress ||
279         (sc->adprecovery == MRSAS_HW_CRITICAL_ERROR)) {
280         ccb->ccb_h.status |= CAM_DEV_NOT_THERE;
281         xpt_done(ccb);
282         return;
283     }
284 
285 	switch (ccb->ccb_h.func_code) {
286 	case XPT_SCSI_IO:
287 		{
288 			device_id = ccb_h->target_id;
289 
290 			/*
291 			 * bus 0 is LD, bus 1 is for system-PD
292 			 */
293 			if (cam_sim_bus(sim) == 1 &&
294 			    sc->pd_list[device_id].driveState != MR_PD_STATE_SYSTEM) {
295 				ccb->ccb_h.status |= CAM_DEV_NOT_THERE;
296 				xpt_done(ccb);
297 			} else {
298 				if (mrsas_startio(sc, sim, ccb)) {
299 					ccb->ccb_h.status |= CAM_REQ_INVALID;
300 					xpt_done(ccb);
301 				}
302 			}
303 			break;
304 		}
305 	case XPT_ABORT:
306 		{
307 			ccb->ccb_h.status = CAM_UA_ABORT;
308 			xpt_done(ccb);
309 			break;
310 		}
311 	case XPT_RESET_BUS:
312 		{
313 			xpt_done(ccb);
314 			break;
315 		}
316 	case XPT_GET_TRAN_SETTINGS:
317 		{
318 			ccb->cts.protocol = PROTO_SCSI;
319 			ccb->cts.protocol_version = SCSI_REV_2;
320 			ccb->cts.transport = XPORT_SPI;
321 			ccb->cts.transport_version = 2;
322 			ccb->cts.xport_specific.spi.valid = CTS_SPI_VALID_DISC;
323 			ccb->cts.xport_specific.spi.flags = CTS_SPI_FLAGS_DISC_ENB;
324 			ccb->cts.proto_specific.scsi.valid = CTS_SCSI_VALID_TQ;
325 			ccb->cts.proto_specific.scsi.flags = CTS_SCSI_FLAGS_TAG_ENB;
326 			ccb->ccb_h.status = CAM_REQ_CMP;
327 			xpt_done(ccb);
328 			break;
329 		}
330 	case XPT_SET_TRAN_SETTINGS:
331 		{
332 			ccb->ccb_h.status = CAM_FUNC_NOTAVAIL;
333 			xpt_done(ccb);
334 			break;
335 		}
336 	case XPT_CALC_GEOMETRY:
337 		{
338 			cam_calc_geometry(&ccb->ccg, 1);
339 			xpt_done(ccb);
340 			break;
341 		}
342 	case XPT_PATH_INQ:
343 		{
344 			ccb->cpi.version_num = 1;
345 			ccb->cpi.hba_inquiry = 0;
346 			ccb->cpi.target_sprt = 0;
347 #if (__FreeBSD_version >= 902001)
348 			ccb->cpi.hba_misc = PIM_UNMAPPED;
349 #else
350 			ccb->cpi.hba_misc = 0;
351 #endif
352 			ccb->cpi.hba_eng_cnt = 0;
353 			ccb->cpi.max_lun = MRSAS_SCSI_MAX_LUNS;
354 			ccb->cpi.unit_number = cam_sim_unit(sim);
355 			ccb->cpi.bus_id = cam_sim_bus(sim);
356 			ccb->cpi.initiator_id = MRSAS_SCSI_INITIATOR_ID;
357 			ccb->cpi.base_transfer_speed = 150000;
358 			strlcpy(ccb->cpi.sim_vid, "FreeBSD", SIM_IDLEN);
359 			strlcpy(ccb->cpi.hba_vid, "AVAGO", HBA_IDLEN);
360 			strlcpy(ccb->cpi.dev_name, cam_sim_name(sim), DEV_IDLEN);
361 			ccb->cpi.transport = XPORT_SPI;
362 			ccb->cpi.transport_version = 2;
363 			ccb->cpi.protocol = PROTO_SCSI;
364 			ccb->cpi.protocol_version = SCSI_REV_2;
365 			if (ccb->cpi.bus_id == 0)
366 				ccb->cpi.max_target = MRSAS_MAX_PD - 1;
367 			else
368 				ccb->cpi.max_target = MRSAS_MAX_LD_IDS - 1;
369 #if (__FreeBSD_version > 704000)
370 			ccb->cpi.maxio = sc->max_num_sge * MRSAS_PAGE_SIZE;
371 #endif
372 			ccb->ccb_h.status = CAM_REQ_CMP;
373 			xpt_done(ccb);
374 			break;
375 		}
376 	default:
377 		{
378 			ccb->ccb_h.status = CAM_REQ_INVALID;
379 			xpt_done(ccb);
380 			break;
381 		}
382 	}
383 }
384 
385 /*
386  * mrsas_scsiio_timeout:	Callback function for IO timed out
387  * input:					mpt command context
388  *
389  * This function will execute after timeout value provided by ccb header from
390  * CAM layer, if timer expires. Driver will run timer for all DCDM and LDIO
391  * coming from CAM layer. This function is callback function for IO timeout
392  * and it runs in no-sleep context. Set do_timedout_reset in Adapter context
393  * so that it will execute OCR/Kill adpter from ocr_thread context.
394  */
395 static void
396 mrsas_scsiio_timeout(void *data)
397 {
398 	struct mrsas_mpt_cmd *cmd;
399 	struct mrsas_softc *sc;
400 	u_int32_t target_id;
401 
402 	if (!data)
403 		return;
404 
405 	cmd = (struct mrsas_mpt_cmd *)data;
406 	sc = cmd->sc;
407 
408 	if (cmd->ccb_ptr == NULL) {
409 		printf("command timeout with NULL ccb\n");
410 		return;
411 	}
412 
413 	/*
414 	 * Below callout is dummy entry so that it will be cancelled from
415 	 * mrsas_cmd_done(). Now Controller will go to OCR/Kill Adapter based
416 	 * on OCR enable/disable property of Controller from ocr_thread
417 	 * context.
418 	 */
419 #if (__FreeBSD_version >= 1000510)
420 	callout_reset_sbt(&cmd->cm_callout, SBT_1S * 180, 0,
421 	    mrsas_scsiio_timeout, cmd, 0);
422 #else
423 	callout_reset(&cmd->cm_callout, (180000 * hz) / 1000,
424 	    mrsas_scsiio_timeout, cmd);
425 #endif
426 
427 	if (cmd->ccb_ptr->cpi.bus_id == 0)
428 		target_id = cmd->ccb_ptr->ccb_h.target_id;
429 	else
430 		target_id = (cmd->ccb_ptr->ccb_h.target_id + (MRSAS_MAX_PD - 1));
431 
432 	/* Save the cmd to be processed for TM, if it is not there in the array */
433 	if (sc->target_reset_pool[target_id] == NULL) {
434 		sc->target_reset_pool[target_id] = cmd;
435 		mrsas_atomic_inc(&sc->target_reset_outstanding);
436 	}
437 
438 	return;
439 }
440 
441 /*
442  * mrsas_startio:	SCSI IO entry point
443  * input:			Adapter instance soft state
444  * 					pointer to CAM Control Block
445  *
446  * This function is the SCSI IO entry point and it initiates IO processing. It
447  * copies the IO and depending if the IO is read/write or inquiry, it would
448  * call mrsas_build_ldio() or mrsas_build_dcdb(), respectively.  It returns 0
449  * if the command is sent to firmware successfully, otherwise it returns 1.
450  */
451 static int32_t
452 mrsas_startio(struct mrsas_softc *sc, struct cam_sim *sim,
453     union ccb *ccb)
454 {
455 	struct mrsas_mpt_cmd *cmd;
456 	struct ccb_hdr *ccb_h = &(ccb->ccb_h);
457 	struct ccb_scsiio *csio = &(ccb->csio);
458 	MRSAS_REQUEST_DESCRIPTOR_UNION *req_desc;
459 	u_int8_t cmd_type;
460 
461 	if ((csio->cdb_io.cdb_bytes[0]) == SYNCHRONIZE_CACHE &&
462 		(!sc->fw_sync_cache_support)) {
463 		ccb->ccb_h.status = CAM_REQ_CMP;
464 		xpt_done(ccb);
465 		return (0);
466 	}
467 	ccb_h->status |= CAM_SIM_QUEUED;
468 	cmd = mrsas_get_mpt_cmd(sc);
469 
470 	if (!cmd) {
471 		ccb_h->status |= CAM_REQUEUE_REQ;
472 		xpt_done(ccb);
473 		return (0);
474 	}
475 	if ((ccb_h->flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
476 		if (ccb_h->flags & CAM_DIR_IN)
477 			cmd->flags |= MRSAS_DIR_IN;
478 		if (ccb_h->flags & CAM_DIR_OUT)
479 			cmd->flags |= MRSAS_DIR_OUT;
480 	} else
481 		cmd->flags = MRSAS_DIR_NONE;	/* no data */
482 
483 /* For FreeBSD 9.2 and higher */
484 #if (__FreeBSD_version >= 902001)
485 	/*
486 	 * XXX We don't yet support physical addresses here.
487 	 */
488 	switch ((ccb->ccb_h.flags & CAM_DATA_MASK)) {
489 	case CAM_DATA_PADDR:
490 	case CAM_DATA_SG_PADDR:
491 		device_printf(sc->mrsas_dev, "%s: physical addresses not supported\n",
492 		    __func__);
493 		mrsas_release_mpt_cmd(cmd);
494 		ccb_h->status = CAM_REQ_INVALID;
495 		ccb_h->status &= ~CAM_SIM_QUEUED;
496 		goto done;
497 	case CAM_DATA_SG:
498 		device_printf(sc->mrsas_dev, "%s: scatter gather is not supported\n",
499 		    __func__);
500 		mrsas_release_mpt_cmd(cmd);
501 		ccb_h->status = CAM_REQ_INVALID;
502 		goto done;
503 	case CAM_DATA_VADDR:
504 		if (csio->dxfer_len > (sc->max_num_sge * MRSAS_PAGE_SIZE)) {
505 			mrsas_release_mpt_cmd(cmd);
506 			ccb_h->status = CAM_REQ_TOO_BIG;
507 			goto done;
508 		}
509 		cmd->length = csio->dxfer_len;
510 		if (cmd->length)
511 			cmd->data = csio->data_ptr;
512 		break;
513 	case CAM_DATA_BIO:
514 		if (csio->dxfer_len > (sc->max_num_sge * MRSAS_PAGE_SIZE)) {
515 			mrsas_release_mpt_cmd(cmd);
516 			ccb_h->status = CAM_REQ_TOO_BIG;
517 			goto done;
518 		}
519 		cmd->length = csio->dxfer_len;
520 		if (cmd->length)
521 			cmd->data = csio->data_ptr;
522 		break;
523 	default:
524 		ccb->ccb_h.status = CAM_REQ_INVALID;
525 		goto done;
526 	}
527 #else
528 	if (!(ccb_h->flags & CAM_DATA_PHYS)) {	/* Virtual data address */
529 		if (!(ccb_h->flags & CAM_SCATTER_VALID)) {
530 			if (csio->dxfer_len > (sc->max_num_sge * MRSAS_PAGE_SIZE)) {
531 				mrsas_release_mpt_cmd(cmd);
532 				ccb_h->status = CAM_REQ_TOO_BIG;
533 				goto done;
534 			}
535 			cmd->length = csio->dxfer_len;
536 			if (cmd->length)
537 				cmd->data = csio->data_ptr;
538 		} else {
539 			mrsas_release_mpt_cmd(cmd);
540 			ccb_h->status = CAM_REQ_INVALID;
541 			goto done;
542 		}
543 	} else {			/* Data addresses are physical. */
544 		mrsas_release_mpt_cmd(cmd);
545 		ccb_h->status = CAM_REQ_INVALID;
546 		ccb_h->status &= ~CAM_SIM_QUEUED;
547 		goto done;
548 	}
549 #endif
550 	/* save ccb ptr */
551 	cmd->ccb_ptr = ccb;
552 
553 	req_desc = mrsas_get_request_desc(sc, (cmd->index) - 1);
554 	if (!req_desc) {
555 		device_printf(sc->mrsas_dev, "Cannot get request_descriptor.\n");
556 		return (FAIL);
557 	}
558 	memset(req_desc, 0, sizeof(MRSAS_REQUEST_DESCRIPTOR_UNION));
559 	cmd->request_desc = req_desc;
560 
561 	if (ccb_h->flags & CAM_CDB_POINTER)
562 		bcopy(csio->cdb_io.cdb_ptr, cmd->io_request->CDB.CDB32, csio->cdb_len);
563 	else
564 		bcopy(csio->cdb_io.cdb_bytes, cmd->io_request->CDB.CDB32, csio->cdb_len);
565 	mtx_lock(&sc->raidmap_lock);
566 
567 	/* Check for IO type READ-WRITE targeted for Logical Volume */
568 	cmd_type = mrsas_find_io_type(sim, ccb);
569 	switch (cmd_type) {
570 	case READ_WRITE_LDIO:
571 		/* Build READ-WRITE IO for Logical Volume  */
572 		if (mrsas_build_ldio_rw(sc, cmd, ccb)) {
573 			device_printf(sc->mrsas_dev, "Build RW LDIO failed.\n");
574 			mtx_unlock(&sc->raidmap_lock);
575 			return (1);
576 		}
577 		break;
578 	case NON_READ_WRITE_LDIO:
579 		/* Build NON READ-WRITE IO for Logical Volume  */
580 		if (mrsas_build_ldio_nonrw(sc, cmd, ccb)) {
581 			device_printf(sc->mrsas_dev, "Build NON-RW LDIO failed.\n");
582 			mtx_unlock(&sc->raidmap_lock);
583 			return (1);
584 		}
585 		break;
586 	case READ_WRITE_SYSPDIO:
587 	case NON_READ_WRITE_SYSPDIO:
588 		if (sc->secure_jbod_support &&
589 		    (cmd_type == NON_READ_WRITE_SYSPDIO)) {
590 			/* Build NON-RW IO for JBOD */
591 			if (mrsas_build_syspdio(sc, cmd, ccb, sim, 0)) {
592 				device_printf(sc->mrsas_dev,
593 				    "Build SYSPDIO failed.\n");
594 				mtx_unlock(&sc->raidmap_lock);
595 				return (1);
596 			}
597 		} else {
598 			/* Build RW IO for JBOD */
599 			if (mrsas_build_syspdio(sc, cmd, ccb, sim, 1)) {
600 				device_printf(sc->mrsas_dev,
601 				    "Build SYSPDIO failed.\n");
602 				mtx_unlock(&sc->raidmap_lock);
603 				return (1);
604 			}
605 		}
606 	}
607 	mtx_unlock(&sc->raidmap_lock);
608 
609 	if (cmd->flags == MRSAS_DIR_IN)	/* from device */
610 		cmd->io_request->Control |= MPI2_SCSIIO_CONTROL_READ;
611 	else if (cmd->flags == MRSAS_DIR_OUT)	/* to device */
612 		cmd->io_request->Control |= MPI2_SCSIIO_CONTROL_WRITE;
613 
614 	cmd->io_request->SGLFlags = MPI2_SGE_FLAGS_64_BIT_ADDRESSING;
615 	cmd->io_request->SGLOffset0 = offsetof(MRSAS_RAID_SCSI_IO_REQUEST, SGL) / 4;
616 	cmd->io_request->SenseBufferLowAddress = cmd->sense_phys_addr;
617 	cmd->io_request->SenseBufferLength = MRSAS_SCSI_SENSE_BUFFERSIZE;
618 
619 	req_desc = cmd->request_desc;
620 	req_desc->SCSIIO.SMID = cmd->index;
621 
622 	/*
623 	 * Start timer for IO timeout. Default timeout value is 90 second.
624 	 */
625 #if (__FreeBSD_version >= 1000510)
626 	callout_reset_sbt(&cmd->cm_callout, SBT_1S * 180, 0,
627 	    mrsas_scsiio_timeout, cmd, 0);
628 #else
629 	callout_reset(&cmd->cm_callout, (180000 * hz) / 1000,
630 	    mrsas_scsiio_timeout, cmd);
631 #endif
632 	mrsas_atomic_inc(&sc->fw_outstanding);
633 
634 	if (mrsas_atomic_read(&sc->fw_outstanding) > sc->io_cmds_highwater)
635 		sc->io_cmds_highwater++;
636 
637 	mrsas_fire_cmd(sc, req_desc->addr.u.low, req_desc->addr.u.high);
638 	return (0);
639 
640 done:
641 	xpt_done(ccb);
642 	return (0);
643 }
644 
645 /*
646  * mrsas_find_io_type:	Determines if IO is read/write or inquiry
647  * input:			pointer to CAM Control Block
648  *
649  * This function determines if the IO is read/write or inquiry.  It returns a 1
650  * if the IO is read/write and 0 if it is inquiry.
651  */
652 int
653 mrsas_find_io_type(struct cam_sim *sim, union ccb *ccb)
654 {
655 	struct ccb_scsiio *csio = &(ccb->csio);
656 
657 	switch (csio->cdb_io.cdb_bytes[0]) {
658 	case READ_10:
659 	case WRITE_10:
660 	case READ_12:
661 	case WRITE_12:
662 	case READ_6:
663 	case WRITE_6:
664 	case READ_16:
665 	case WRITE_16:
666 		return (cam_sim_bus(sim) ?
667 		    READ_WRITE_SYSPDIO : READ_WRITE_LDIO);
668 	default:
669 		return (cam_sim_bus(sim) ?
670 		    NON_READ_WRITE_SYSPDIO : NON_READ_WRITE_LDIO);
671 	}
672 }
673 
674 /*
675  * mrsas_get_mpt_cmd:	Get a cmd from free command pool
676  * input:				Adapter instance soft state
677  *
678  * This function removes an MPT command from the command free list and
679  * initializes it.
680  */
681 struct mrsas_mpt_cmd *
682 mrsas_get_mpt_cmd(struct mrsas_softc *sc)
683 {
684 	struct mrsas_mpt_cmd *cmd = NULL;
685 
686 	mtx_lock(&sc->mpt_cmd_pool_lock);
687 	if (!TAILQ_EMPTY(&sc->mrsas_mpt_cmd_list_head)) {
688 		cmd = TAILQ_FIRST(&sc->mrsas_mpt_cmd_list_head);
689 		TAILQ_REMOVE(&sc->mrsas_mpt_cmd_list_head, cmd, next);
690 	} else {
691 		goto out;
692 	}
693 
694 	memset((uint8_t *)cmd->io_request, 0, MRSAS_MPI2_RAID_DEFAULT_IO_FRAME_SIZE);
695 	cmd->data = NULL;
696 	cmd->length = 0;
697 	cmd->flags = 0;
698 	cmd->error_code = 0;
699 	cmd->load_balance = 0;
700 	cmd->ccb_ptr = NULL;
701 
702 out:
703 	mtx_unlock(&sc->mpt_cmd_pool_lock);
704 	return cmd;
705 }
706 
707 /*
708  * mrsas_release_mpt_cmd:	Return a cmd to free command pool
709  * input:					Command packet for return to free command pool
710  *
711  * This function returns an MPT command to the free command list.
712  */
713 void
714 mrsas_release_mpt_cmd(struct mrsas_mpt_cmd *cmd)
715 {
716 	struct mrsas_softc *sc = cmd->sc;
717 
718 	mtx_lock(&sc->mpt_cmd_pool_lock);
719 	cmd->sync_cmd_idx = (u_int32_t)MRSAS_ULONG_MAX;
720 	TAILQ_INSERT_HEAD(&(sc->mrsas_mpt_cmd_list_head), cmd, next);
721 	mtx_unlock(&sc->mpt_cmd_pool_lock);
722 
723 	return;
724 }
725 
726 /*
727  * mrsas_get_request_desc:	Get request descriptor from array
728  * input:					Adapter instance soft state
729  * 							SMID index
730  *
731  * This function returns a pointer to the request descriptor.
732  */
733 MRSAS_REQUEST_DESCRIPTOR_UNION *
734 mrsas_get_request_desc(struct mrsas_softc *sc, u_int16_t index)
735 {
736 	u_int8_t *p;
737 
738 	if (index >= sc->max_fw_cmds) {
739 		device_printf(sc->mrsas_dev, "Invalid SMID (0x%x)request for desc\n", index);
740 		return NULL;
741 	}
742 	p = sc->req_desc + sizeof(MRSAS_REQUEST_DESCRIPTOR_UNION) * index;
743 
744 	return (MRSAS_REQUEST_DESCRIPTOR_UNION *) p;
745 }
746 
747 /*
748  * mrsas_build_ldio_rw:	Builds an LDIO command
749  * input:				Adapter instance soft state
750  * 						Pointer to command packet
751  * 						Pointer to CCB
752  *
753  * This function builds the LDIO command packet.  It returns 0 if the command is
754  * built successfully, otherwise it returns a 1.
755  */
756 int
757 mrsas_build_ldio_rw(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
758     union ccb *ccb)
759 {
760 	struct ccb_hdr *ccb_h = &(ccb->ccb_h);
761 	struct ccb_scsiio *csio = &(ccb->csio);
762 	u_int32_t device_id;
763 	MRSAS_RAID_SCSI_IO_REQUEST *io_request;
764 
765 	device_id = ccb_h->target_id;
766 
767 	io_request = cmd->io_request;
768 	io_request->RaidContext.VirtualDiskTgtId = device_id;
769 	io_request->RaidContext.status = 0;
770 	io_request->RaidContext.exStatus = 0;
771 
772 	/* just the cdb len, other flags zero, and ORed-in later for FP */
773 	io_request->IoFlags = csio->cdb_len;
774 
775 	if (mrsas_setup_io(sc, cmd, ccb, device_id, io_request) != SUCCESS)
776 		device_printf(sc->mrsas_dev, "Build ldio or fpio error\n");
777 
778 	io_request->DataLength = cmd->length;
779 
780 	if (mrsas_map_request(sc, cmd, ccb) == SUCCESS) {
781 		if (cmd->sge_count > sc->max_num_sge) {
782 			device_printf(sc->mrsas_dev, "Error: sge_count (0x%x) exceeds"
783 			    "max (0x%x) allowed\n", cmd->sge_count, sc->max_num_sge);
784 			return (FAIL);
785 		}
786 		/*
787 		 * numSGE store lower 8 bit of sge_count. numSGEExt store
788 		 * higher 8 bit of sge_count
789 		 */
790 		io_request->RaidContext.numSGE = cmd->sge_count;
791 		io_request->RaidContext.numSGEExt = (uint8_t)(cmd->sge_count >> 8);
792 
793 	} else {
794 		device_printf(sc->mrsas_dev, "Data map/load failed.\n");
795 		return (FAIL);
796 	}
797 	return (0);
798 }
799 
800 /*
801  * mrsas_setup_io:	Set up data including Fast Path I/O
802  * input:			Adapter instance soft state
803  * 					Pointer to command packet
804  * 					Pointer to CCB
805  *
806  * This function builds the DCDB inquiry command.  It returns 0 if the command
807  * is built successfully, otherwise it returns a 1.
808  */
809 int
810 mrsas_setup_io(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
811     union ccb *ccb, u_int32_t device_id,
812     MRSAS_RAID_SCSI_IO_REQUEST * io_request)
813 {
814 	struct ccb_hdr *ccb_h = &(ccb->ccb_h);
815 	struct ccb_scsiio *csio = &(ccb->csio);
816 	struct IO_REQUEST_INFO io_info;
817 	MR_DRV_RAID_MAP_ALL *map_ptr;
818 	MR_LD_RAID *raid;
819 	u_int8_t fp_possible;
820 	u_int32_t start_lba_hi, start_lba_lo, ld_block_size, ld;
821 	u_int32_t datalength = 0;
822 
823 	start_lba_lo = 0;
824 	start_lba_hi = 0;
825 	fp_possible = 0;
826 
827 	/*
828 	 * READ_6 (0x08) or WRITE_6 (0x0A) cdb
829 	 */
830 	if (csio->cdb_len == 6) {
831 		datalength = (u_int32_t)csio->cdb_io.cdb_bytes[4];
832 		start_lba_lo = ((u_int32_t)csio->cdb_io.cdb_bytes[1] << 16) |
833 		    ((u_int32_t)csio->cdb_io.cdb_bytes[2] << 8) |
834 		    (u_int32_t)csio->cdb_io.cdb_bytes[3];
835 		start_lba_lo &= 0x1FFFFF;
836 	}
837 	/*
838 	 * READ_10 (0x28) or WRITE_6 (0x2A) cdb
839 	 */
840 	else if (csio->cdb_len == 10) {
841 		datalength = (u_int32_t)csio->cdb_io.cdb_bytes[8] |
842 		    ((u_int32_t)csio->cdb_io.cdb_bytes[7] << 8);
843 		start_lba_lo = ((u_int32_t)csio->cdb_io.cdb_bytes[2] << 24) |
844 		    ((u_int32_t)csio->cdb_io.cdb_bytes[3] << 16) |
845 		    (u_int32_t)csio->cdb_io.cdb_bytes[4] << 8 |
846 		    ((u_int32_t)csio->cdb_io.cdb_bytes[5]);
847 	}
848 	/*
849 	 * READ_12 (0xA8) or WRITE_12 (0xAA) cdb
850 	 */
851 	else if (csio->cdb_len == 12) {
852 		datalength = (u_int32_t)csio->cdb_io.cdb_bytes[6] << 24 |
853 		    ((u_int32_t)csio->cdb_io.cdb_bytes[7] << 16) |
854 		    ((u_int32_t)csio->cdb_io.cdb_bytes[8] << 8) |
855 		    ((u_int32_t)csio->cdb_io.cdb_bytes[9]);
856 		start_lba_lo = ((u_int32_t)csio->cdb_io.cdb_bytes[2] << 24) |
857 		    ((u_int32_t)csio->cdb_io.cdb_bytes[3] << 16) |
858 		    (u_int32_t)csio->cdb_io.cdb_bytes[4] << 8 |
859 		    ((u_int32_t)csio->cdb_io.cdb_bytes[5]);
860 	}
861 	/*
862 	 * READ_16 (0x88) or WRITE_16 (0xx8A) cdb
863 	 */
864 	else if (csio->cdb_len == 16) {
865 		datalength = (u_int32_t)csio->cdb_io.cdb_bytes[10] << 24 |
866 		    ((u_int32_t)csio->cdb_io.cdb_bytes[11] << 16) |
867 		    ((u_int32_t)csio->cdb_io.cdb_bytes[12] << 8) |
868 		    ((u_int32_t)csio->cdb_io.cdb_bytes[13]);
869 		start_lba_lo = ((u_int32_t)csio->cdb_io.cdb_bytes[6] << 24) |
870 		    ((u_int32_t)csio->cdb_io.cdb_bytes[7] << 16) |
871 		    (u_int32_t)csio->cdb_io.cdb_bytes[8] << 8 |
872 		    ((u_int32_t)csio->cdb_io.cdb_bytes[9]);
873 		start_lba_hi = ((u_int32_t)csio->cdb_io.cdb_bytes[2] << 24) |
874 		    ((u_int32_t)csio->cdb_io.cdb_bytes[3] << 16) |
875 		    (u_int32_t)csio->cdb_io.cdb_bytes[4] << 8 |
876 		    ((u_int32_t)csio->cdb_io.cdb_bytes[5]);
877 	}
878 	memset(&io_info, 0, sizeof(struct IO_REQUEST_INFO));
879 	io_info.ldStartBlock = ((u_int64_t)start_lba_hi << 32) | start_lba_lo;
880 	io_info.numBlocks = datalength;
881 	io_info.ldTgtId = device_id;
882 
883 	switch (ccb_h->flags & CAM_DIR_MASK) {
884 	case CAM_DIR_IN:
885 		io_info.isRead = 1;
886 		break;
887 	case CAM_DIR_OUT:
888 		io_info.isRead = 0;
889 		break;
890 	case CAM_DIR_NONE:
891 	default:
892 		mrsas_dprint(sc, MRSAS_TRACE, "From %s : DMA Flag is %d \n", __func__, ccb_h->flags & CAM_DIR_MASK);
893 		break;
894 	}
895 
896 	map_ptr = sc->ld_drv_map[(sc->map_id & 1)];
897 	ld_block_size = MR_LdBlockSizeGet(device_id, map_ptr);
898 
899 	ld = MR_TargetIdToLdGet(device_id, map_ptr);
900 	if ((ld >= MAX_LOGICAL_DRIVES_EXT) || (!sc->fast_path_io)) {
901 		io_request->RaidContext.regLockFlags = 0;
902 		fp_possible = 0;
903 	} else {
904 		if (MR_BuildRaidContext(sc, &io_info, &io_request->RaidContext, map_ptr))
905 			fp_possible = io_info.fpOkForIo;
906 	}
907 
908 	raid = MR_LdRaidGet(ld, map_ptr);
909 	/* Store the TM capability value in cmd */
910 	cmd->tmCapable = raid->capability.tmCapable;
911 
912 	cmd->request_desc->SCSIIO.MSIxIndex =
913 	    sc->msix_vectors ? smp_processor_id() % sc->msix_vectors : 0;
914 
915 
916 	if (fp_possible) {
917 		mrsas_set_pd_lba(io_request, csio->cdb_len, &io_info, ccb, map_ptr,
918 		    start_lba_lo, ld_block_size);
919 		io_request->Function = MPI2_FUNCTION_SCSI_IO_REQUEST;
920 		cmd->request_desc->SCSIIO.RequestFlags =
921 		    (MPI2_REQ_DESCRIPT_FLAGS_FP_IO <<
922 		    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
923 		if (sc->mrsas_gen3_ctrl) {
924 			if (io_request->RaidContext.regLockFlags == REGION_TYPE_UNUSED)
925 				cmd->request_desc->SCSIIO.RequestFlags =
926 				    (MRSAS_REQ_DESCRIPT_FLAGS_NO_LOCK <<
927 				    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
928 			io_request->RaidContext.Type = MPI2_TYPE_CUDA;
929 			io_request->RaidContext.nseg = 0x1;
930 			io_request->IoFlags |= MPI25_SAS_DEVICE0_FLAGS_ENABLED_FAST_PATH;
931 			io_request->RaidContext.regLockFlags |=
932 			    (MR_RL_FLAGS_GRANT_DESTINATION_CUDA |
933 			    MR_RL_FLAGS_SEQ_NUM_ENABLE);
934 		}
935 		if ((sc->load_balance_info[device_id].loadBalanceFlag) &&
936 		    (io_info.isRead)) {
937 			io_info.devHandle =
938 			    mrsas_get_updated_dev_handle(sc,
939 			    &sc->load_balance_info[device_id], &io_info);
940 			cmd->load_balance = MRSAS_LOAD_BALANCE_FLAG;
941 			cmd->pd_r1_lb = io_info.pd_after_lb;
942 		} else
943 			cmd->load_balance = 0;
944 		cmd->request_desc->SCSIIO.DevHandle = io_info.devHandle;
945 		io_request->DevHandle = io_info.devHandle;
946 	} else {
947 		/* Not FP IO */
948 		io_request->RaidContext.timeoutValue = map_ptr->raidMap.fpPdIoTimeoutSec;
949 		cmd->request_desc->SCSIIO.RequestFlags =
950 		    (MRSAS_REQ_DESCRIPT_FLAGS_LD_IO <<
951 		    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
952 		if (sc->mrsas_gen3_ctrl) {
953 			if (io_request->RaidContext.regLockFlags == REGION_TYPE_UNUSED)
954 				cmd->request_desc->SCSIIO.RequestFlags =
955 				    (MRSAS_REQ_DESCRIPT_FLAGS_NO_LOCK <<
956 				    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
957 			io_request->RaidContext.Type = MPI2_TYPE_CUDA;
958 			io_request->RaidContext.regLockFlags |=
959 			    (MR_RL_FLAGS_GRANT_DESTINATION_CPU0 |
960 			    MR_RL_FLAGS_SEQ_NUM_ENABLE);
961 			io_request->RaidContext.nseg = 0x1;
962 		}
963 		io_request->Function = MRSAS_MPI2_FUNCTION_LD_IO_REQUEST;
964 		io_request->DevHandle = device_id;
965 	}
966 	return (0);
967 }
968 
969 /*
970  * mrsas_build_ldio_nonrw:	Builds an LDIO command
971  * input:				Adapter instance soft state
972  * 						Pointer to command packet
973  * 						Pointer to CCB
974  *
975  * This function builds the LDIO command packet.  It returns 0 if the command is
976  * built successfully, otherwise it returns a 1.
977  */
978 int
979 mrsas_build_ldio_nonrw(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
980     union ccb *ccb)
981 {
982 	struct ccb_hdr *ccb_h = &(ccb->ccb_h);
983 	u_int32_t device_id, ld;
984 	MR_DRV_RAID_MAP_ALL *map_ptr;
985 	MR_LD_RAID *raid;
986 	MRSAS_RAID_SCSI_IO_REQUEST *io_request;
987 
988 	io_request = cmd->io_request;
989 	device_id = ccb_h->target_id;
990 
991 	map_ptr = sc->ld_drv_map[(sc->map_id & 1)];
992 	ld = MR_TargetIdToLdGet(device_id, map_ptr);
993 	raid = MR_LdRaidGet(ld, map_ptr);
994 	/* Store the TM capability value in cmd */
995 	cmd->tmCapable = raid->capability.tmCapable;
996 
997 	/* FW path for LD Non-RW (SCSI management commands) */
998 	io_request->Function = MRSAS_MPI2_FUNCTION_LD_IO_REQUEST;
999 	io_request->DevHandle = device_id;
1000 	cmd->request_desc->SCSIIO.RequestFlags =
1001 	    (MPI2_REQ_DESCRIPT_FLAGS_SCSI_IO <<
1002 	    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
1003 
1004 	io_request->RaidContext.VirtualDiskTgtId = device_id;
1005 	io_request->LUN[1] = ccb_h->target_lun & 0xF;
1006 	io_request->DataLength = cmd->length;
1007 
1008 	if (mrsas_map_request(sc, cmd, ccb) == SUCCESS) {
1009 		if (cmd->sge_count > sc->max_num_sge) {
1010 			device_printf(sc->mrsas_dev, "Error: sge_count (0x%x) exceeds"
1011 			    "max (0x%x) allowed\n", cmd->sge_count, sc->max_num_sge);
1012 			return (1);
1013 		}
1014 		/*
1015 		 * numSGE store lower 8 bit of sge_count. numSGEExt store
1016 		 * higher 8 bit of sge_count
1017 		 */
1018 		io_request->RaidContext.numSGE = cmd->sge_count;
1019 		io_request->RaidContext.numSGEExt = (uint8_t)(cmd->sge_count >> 8);
1020 	} else {
1021 		device_printf(sc->mrsas_dev, "Data map/load failed.\n");
1022 		return (1);
1023 	}
1024 	return (0);
1025 }
1026 
1027 /*
1028  * mrsas_build_syspdio:	Builds an DCDB command
1029  * input:				Adapter instance soft state
1030  * 						Pointer to command packet
1031  * 						Pointer to CCB
1032  *
1033  * This function builds the DCDB inquiry command.  It returns 0 if the command
1034  * is built successfully, otherwise it returns a 1.
1035  */
1036 int
1037 mrsas_build_syspdio(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd,
1038     union ccb *ccb, struct cam_sim *sim, u_int8_t fp_possible)
1039 {
1040 	struct ccb_hdr *ccb_h = &(ccb->ccb_h);
1041 	u_int32_t device_id;
1042 	MR_DRV_RAID_MAP_ALL *local_map_ptr;
1043 	MRSAS_RAID_SCSI_IO_REQUEST *io_request;
1044 	struct MR_PD_CFG_SEQ_NUM_SYNC *pd_sync;
1045 
1046 	io_request = cmd->io_request;
1047 	device_id = ccb_h->target_id;
1048 	local_map_ptr = sc->ld_drv_map[(sc->map_id & 1)];
1049 	io_request->RaidContext.RAIDFlags = MR_RAID_FLAGS_IO_SUB_TYPE_SYSTEM_PD
1050 	    << MR_RAID_CTX_RAID_FLAGS_IO_SUB_TYPE_SHIFT;
1051 	io_request->RaidContext.regLockFlags = 0;
1052 	io_request->RaidContext.regLockRowLBA = 0;
1053 	io_request->RaidContext.regLockLength = 0;
1054 
1055 	/* If FW supports PD sequence number */
1056 	if (sc->use_seqnum_jbod_fp &&
1057 	    sc->pd_list[device_id].driveType == 0x00) {
1058 		//printf("Using Drv seq num\n");
1059 		pd_sync = (void *)sc->jbodmap_mem[(sc->pd_seq_map_id - 1) & 1];
1060 		cmd->tmCapable = pd_sync->seq[device_id].capability.tmCapable;
1061 		io_request->RaidContext.VirtualDiskTgtId = device_id + 255;
1062 		io_request->RaidContext.configSeqNum = pd_sync->seq[device_id].seqNum;
1063 		io_request->DevHandle = pd_sync->seq[device_id].devHandle;
1064 		io_request->RaidContext.regLockFlags |=
1065 		    (MR_RL_FLAGS_SEQ_NUM_ENABLE | MR_RL_FLAGS_GRANT_DESTINATION_CUDA);
1066 		io_request->RaidContext.Type = MPI2_TYPE_CUDA;
1067 		io_request->RaidContext.nseg = 0x1;
1068 	} else if (sc->fast_path_io) {
1069 		//printf("Using LD RAID map\n");
1070 		io_request->RaidContext.VirtualDiskTgtId = device_id;
1071 		io_request->RaidContext.configSeqNum = 0;
1072 		local_map_ptr = sc->ld_drv_map[(sc->map_id & 1)];
1073 		io_request->DevHandle =
1074 		    local_map_ptr->raidMap.devHndlInfo[device_id].curDevHdl;
1075 	} else {
1076 		//printf("Using FW PATH\n");
1077 		/* Want to send all IO via FW path */
1078 		io_request->RaidContext.VirtualDiskTgtId = device_id;
1079 		io_request->RaidContext.configSeqNum = 0;
1080 		io_request->DevHandle = 0xFFFF;
1081 	}
1082 
1083 	cmd->request_desc->SCSIIO.DevHandle = io_request->DevHandle;
1084 	cmd->request_desc->SCSIIO.MSIxIndex =
1085 	    sc->msix_vectors ? smp_processor_id() % sc->msix_vectors : 0;
1086 
1087 	if (!fp_possible) {
1088 		/* system pd firmware path */
1089 		io_request->Function = MRSAS_MPI2_FUNCTION_LD_IO_REQUEST;
1090 		cmd->request_desc->SCSIIO.RequestFlags =
1091 		    (MPI2_REQ_DESCRIPT_FLAGS_SCSI_IO <<
1092 		    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
1093 		io_request->RaidContext.timeoutValue =
1094 		    local_map_ptr->raidMap.fpPdIoTimeoutSec;
1095 		io_request->RaidContext.VirtualDiskTgtId = device_id;
1096 	} else {
1097 		/* system pd fast path */
1098 		io_request->Function = MPI2_FUNCTION_SCSI_IO_REQUEST;
1099 		io_request->RaidContext.timeoutValue = local_map_ptr->raidMap.fpPdIoTimeoutSec;
1100 
1101 		/*
1102 		 * NOTE - For system pd RW cmds only IoFlags will be FAST_PATH
1103 		 * Because the NON RW cmds will now go via FW Queue
1104 		 * and not the Exception queue
1105 		 */
1106 		io_request->IoFlags |= MPI25_SAS_DEVICE0_FLAGS_ENABLED_FAST_PATH;
1107 
1108 		cmd->request_desc->SCSIIO.RequestFlags =
1109 		    (MPI2_REQ_DESCRIPT_FLAGS_FP_IO <<
1110 		    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
1111 	}
1112 
1113 	io_request->LUN[1] = ccb_h->target_lun & 0xF;
1114 	io_request->DataLength = cmd->length;
1115 
1116 	if (mrsas_map_request(sc, cmd, ccb) == SUCCESS) {
1117 		if (cmd->sge_count > sc->max_num_sge) {
1118 			device_printf(sc->mrsas_dev, "Error: sge_count (0x%x) exceeds"
1119 			    "max (0x%x) allowed\n", cmd->sge_count, sc->max_num_sge);
1120 			return (1);
1121 		}
1122 		/*
1123 		 * numSGE store lower 8 bit of sge_count. numSGEExt store
1124 		 * higher 8 bit of sge_count
1125 		 */
1126 		io_request->RaidContext.numSGE = cmd->sge_count;
1127 		io_request->RaidContext.numSGEExt = (uint8_t)(cmd->sge_count >> 8);
1128 	} else {
1129 		device_printf(sc->mrsas_dev, "Data map/load failed.\n");
1130 		return (1);
1131 	}
1132 	return (0);
1133 }
1134 
1135 /*
1136  * mrsas_map_request:	Map and load data
1137  * input:				Adapter instance soft state
1138  * 						Pointer to command packet
1139  *
1140  * For data from OS, map and load the data buffer into bus space.  The SG list
1141  * is built in the callback.  If the  bus dmamap load is not successful,
1142  * cmd->error_code will contain the  error code and a 1 is returned.
1143  */
1144 int
1145 mrsas_map_request(struct mrsas_softc *sc,
1146     struct mrsas_mpt_cmd *cmd, union ccb *ccb)
1147 {
1148 	u_int32_t retcode = 0;
1149 	struct cam_sim *sim;
1150 
1151 	sim = xpt_path_sim(cmd->ccb_ptr->ccb_h.path);
1152 
1153 	if (cmd->data != NULL) {
1154 		/* Map data buffer into bus space */
1155 		mtx_lock(&sc->io_lock);
1156 #if (__FreeBSD_version >= 902001)
1157 		retcode = bus_dmamap_load_ccb(sc->data_tag, cmd->data_dmamap, ccb,
1158 		    mrsas_data_load_cb, cmd, 0);
1159 #else
1160 		retcode = bus_dmamap_load(sc->data_tag, cmd->data_dmamap, cmd->data,
1161 		    cmd->length, mrsas_data_load_cb, cmd, BUS_DMA_NOWAIT);
1162 #endif
1163 		mtx_unlock(&sc->io_lock);
1164 		if (retcode)
1165 			device_printf(sc->mrsas_dev, "bus_dmamap_load(): retcode = %d\n", retcode);
1166 		if (retcode == EINPROGRESS) {
1167 			device_printf(sc->mrsas_dev, "request load in progress\n");
1168 			mrsas_freeze_simq(cmd, sim);
1169 		}
1170 	}
1171 	if (cmd->error_code)
1172 		return (1);
1173 	return (retcode);
1174 }
1175 
1176 /*
1177  * mrsas_unmap_request:	Unmap and unload data
1178  * input:				Adapter instance soft state
1179  * 						Pointer to command packet
1180  *
1181  * This function unmaps and unloads data from OS.
1182  */
1183 void
1184 mrsas_unmap_request(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd)
1185 {
1186 	if (cmd->data != NULL) {
1187 		if (cmd->flags & MRSAS_DIR_IN)
1188 			bus_dmamap_sync(sc->data_tag, cmd->data_dmamap, BUS_DMASYNC_POSTREAD);
1189 		if (cmd->flags & MRSAS_DIR_OUT)
1190 			bus_dmamap_sync(sc->data_tag, cmd->data_dmamap, BUS_DMASYNC_POSTWRITE);
1191 		mtx_lock(&sc->io_lock);
1192 		bus_dmamap_unload(sc->data_tag, cmd->data_dmamap);
1193 		mtx_unlock(&sc->io_lock);
1194 	}
1195 }
1196 
1197 /*
1198  * mrsas_data_load_cb:	Callback entry point
1199  * input:				Pointer to command packet as argument
1200  * 						Pointer to segment
1201  * 						Number of segments Error
1202  *
1203  * This is the callback function of the bus dma map load.  It builds the SG
1204  * list.
1205  */
1206 static void
1207 mrsas_data_load_cb(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1208 {
1209 	struct mrsas_mpt_cmd *cmd = (struct mrsas_mpt_cmd *)arg;
1210 	struct mrsas_softc *sc = cmd->sc;
1211 	MRSAS_RAID_SCSI_IO_REQUEST *io_request;
1212 	pMpi25IeeeSgeChain64_t sgl_ptr;
1213 	int i = 0, sg_processed = 0;
1214 
1215 	if (error) {
1216 		cmd->error_code = error;
1217 		device_printf(sc->mrsas_dev, "mrsas_data_load_cb: error=%d\n", error);
1218 		if (error == EFBIG) {
1219 			cmd->ccb_ptr->ccb_h.status = CAM_REQ_TOO_BIG;
1220 			return;
1221 		}
1222 	}
1223 	if (cmd->flags & MRSAS_DIR_IN)
1224 		bus_dmamap_sync(cmd->sc->data_tag, cmd->data_dmamap,
1225 		    BUS_DMASYNC_PREREAD);
1226 	if (cmd->flags & MRSAS_DIR_OUT)
1227 		bus_dmamap_sync(cmd->sc->data_tag, cmd->data_dmamap,
1228 		    BUS_DMASYNC_PREWRITE);
1229 	if (nseg > sc->max_num_sge) {
1230 		device_printf(sc->mrsas_dev, "SGE count is too large or 0.\n");
1231 		return;
1232 	}
1233 	io_request = cmd->io_request;
1234 	sgl_ptr = (pMpi25IeeeSgeChain64_t)&io_request->SGL;
1235 
1236 	if (sc->mrsas_gen3_ctrl) {
1237 		pMpi25IeeeSgeChain64_t sgl_ptr_end = sgl_ptr;
1238 
1239 		sgl_ptr_end += sc->max_sge_in_main_msg - 1;
1240 		sgl_ptr_end->Flags = 0;
1241 	}
1242 	if (nseg != 0) {
1243 		for (i = 0; i < nseg; i++) {
1244 			sgl_ptr->Address = segs[i].ds_addr;
1245 			sgl_ptr->Length = segs[i].ds_len;
1246 			sgl_ptr->Flags = 0;
1247 			if (sc->mrsas_gen3_ctrl) {
1248 				if (i == nseg - 1)
1249 					sgl_ptr->Flags = IEEE_SGE_FLAGS_END_OF_LIST;
1250 			}
1251 			sgl_ptr++;
1252 			sg_processed = i + 1;
1253 			if ((sg_processed == (sc->max_sge_in_main_msg - 1)) &&
1254 			    (nseg > sc->max_sge_in_main_msg)) {
1255 				pMpi25IeeeSgeChain64_t sg_chain;
1256 
1257 				if (sc->mrsas_gen3_ctrl) {
1258 					if ((cmd->io_request->IoFlags & MPI25_SAS_DEVICE0_FLAGS_ENABLED_FAST_PATH)
1259 					    != MPI25_SAS_DEVICE0_FLAGS_ENABLED_FAST_PATH)
1260 						cmd->io_request->ChainOffset = sc->chain_offset_io_request;
1261 					else
1262 						cmd->io_request->ChainOffset = 0;
1263 				} else
1264 					cmd->io_request->ChainOffset = sc->chain_offset_io_request;
1265 				sg_chain = sgl_ptr;
1266 				if (sc->mrsas_gen3_ctrl)
1267 					sg_chain->Flags = IEEE_SGE_FLAGS_CHAIN_ELEMENT;
1268 				else
1269 					sg_chain->Flags = (IEEE_SGE_FLAGS_CHAIN_ELEMENT | MPI2_IEEE_SGE_FLAGS_IOCPLBNTA_ADDR);
1270 				sg_chain->Length = (sizeof(MPI2_SGE_IO_UNION) * (nseg - sg_processed));
1271 				sg_chain->Address = cmd->chain_frame_phys_addr;
1272 				sgl_ptr = (pMpi25IeeeSgeChain64_t)cmd->chain_frame;
1273 			}
1274 		}
1275 	}
1276 	cmd->sge_count = nseg;
1277 }
1278 
1279 /*
1280  * mrsas_freeze_simq:	Freeze SIM queue
1281  * input:				Pointer to command packet
1282  * 						Pointer to SIM
1283  *
1284  * This function freezes the sim queue.
1285  */
1286 static void
1287 mrsas_freeze_simq(struct mrsas_mpt_cmd *cmd, struct cam_sim *sim)
1288 {
1289 	union ccb *ccb = (union ccb *)(cmd->ccb_ptr);
1290 
1291 	xpt_freeze_simq(sim, 1);
1292 	ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1293 	ccb->ccb_h.status |= CAM_REQUEUE_REQ;
1294 }
1295 
1296 void
1297 mrsas_xpt_freeze(struct mrsas_softc *sc)
1298 {
1299 	xpt_freeze_simq(sc->sim_0, 1);
1300 	xpt_freeze_simq(sc->sim_1, 1);
1301 }
1302 
1303 void
1304 mrsas_xpt_release(struct mrsas_softc *sc)
1305 {
1306 	xpt_release_simq(sc->sim_0, 1);
1307 	xpt_release_simq(sc->sim_1, 1);
1308 }
1309 
1310 /*
1311  * mrsas_cmd_done:	Perform remaining command completion
1312  * input:			Adapter instance soft state  Pointer to command packet
1313  *
1314  * This function calls ummap request and releases the MPT command.
1315  */
1316 void
1317 mrsas_cmd_done(struct mrsas_softc *sc, struct mrsas_mpt_cmd *cmd)
1318 {
1319 	mrsas_unmap_request(sc, cmd);
1320 
1321 	mtx_lock(&sc->sim_lock);
1322 	callout_stop(&cmd->cm_callout);
1323 	xpt_done(cmd->ccb_ptr);
1324 	cmd->ccb_ptr = NULL;
1325 	mtx_unlock(&sc->sim_lock);
1326 	mrsas_release_mpt_cmd(cmd);
1327 }
1328 
1329 /*
1330  * mrsas_cam_poll:	Polling entry point
1331  * input:			Pointer to SIM
1332  *
1333  * This is currently a stub function.
1334  */
1335 static void
1336 mrsas_cam_poll(struct cam_sim *sim)
1337 {
1338 	int i;
1339 	struct mrsas_softc *sc = (struct mrsas_softc *)cam_sim_softc(sim);
1340 
1341 	if (sc->msix_vectors != 0){
1342 		for (i=0; i<sc->msix_vectors; i++){
1343 			mrsas_complete_cmd(sc, i);
1344 		}
1345 	} else {
1346 		mrsas_complete_cmd(sc, 0);
1347 	}
1348 }
1349 
1350 /*
1351  * mrsas_bus_scan:	Perform bus scan
1352  * input:			Adapter instance soft state
1353  *
1354  * This mrsas_bus_scan function is needed for FreeBSD 7.x.  Also, it should not
1355  * be called in FreeBSD 8.x and later versions, where the bus scan is
1356  * automatic.
1357  */
1358 int
1359 mrsas_bus_scan(struct mrsas_softc *sc)
1360 {
1361 	union ccb *ccb_0;
1362 	union ccb *ccb_1;
1363 
1364 	if ((ccb_0 = xpt_alloc_ccb()) == NULL) {
1365 		return (ENOMEM);
1366 	}
1367 	if ((ccb_1 = xpt_alloc_ccb()) == NULL) {
1368 		xpt_free_ccb(ccb_0);
1369 		return (ENOMEM);
1370 	}
1371 	mtx_lock(&sc->sim_lock);
1372 	if (xpt_create_path(&ccb_0->ccb_h.path, xpt_periph, cam_sim_path(sc->sim_0),
1373 	    CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1374 		xpt_free_ccb(ccb_0);
1375 		xpt_free_ccb(ccb_1);
1376 		mtx_unlock(&sc->sim_lock);
1377 		return (EIO);
1378 	}
1379 	if (xpt_create_path(&ccb_1->ccb_h.path, xpt_periph, cam_sim_path(sc->sim_1),
1380 	    CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1381 		xpt_free_ccb(ccb_0);
1382 		xpt_free_ccb(ccb_1);
1383 		mtx_unlock(&sc->sim_lock);
1384 		return (EIO);
1385 	}
1386 	mtx_unlock(&sc->sim_lock);
1387 	xpt_rescan(ccb_0);
1388 	xpt_rescan(ccb_1);
1389 
1390 	return (0);
1391 }
1392 
1393 /*
1394  * mrsas_bus_scan_sim:	Perform bus scan per SIM
1395  * input:				adapter instance soft state
1396  *
1397  * This function will be called from Event handler on LD creation/deletion,
1398  * JBOD on/off.
1399  */
1400 int
1401 mrsas_bus_scan_sim(struct mrsas_softc *sc, struct cam_sim *sim)
1402 {
1403 	union ccb *ccb;
1404 
1405 	if ((ccb = xpt_alloc_ccb()) == NULL) {
1406 		return (ENOMEM);
1407 	}
1408 	mtx_lock(&sc->sim_lock);
1409 	if (xpt_create_path(&ccb->ccb_h.path, xpt_periph, cam_sim_path(sim),
1410 	    CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1411 		xpt_free_ccb(ccb);
1412 		mtx_unlock(&sc->sim_lock);
1413 		return (EIO);
1414 	}
1415 	mtx_unlock(&sc->sim_lock);
1416 	xpt_rescan(ccb);
1417 
1418 	return (0);
1419 }
1420 
1421 /*
1422  * mrsas_track_scsiio:  Track IOs for a given target in the mpt_cmd_list
1423  * input:           Adapter instance soft state
1424  *                  Target ID of target
1425  *                  Bus ID of the target
1426  *
1427  * This function checks for any pending IO in the whole mpt_cmd_list pool
1428  * with the bus_id and target_id passed in arguments. If some IO is found
1429  * that means target reset is not successfully completed.
1430  *
1431  * Returns FAIL if IOs pending to the target device, else return SUCCESS
1432  */
1433 static int
1434 mrsas_track_scsiio(struct mrsas_softc *sc, target_id_t tgt_id, u_int32_t bus_id)
1435 {
1436 	int i;
1437 	struct mrsas_mpt_cmd *mpt_cmd = NULL;
1438 
1439 	for (i = 0 ; i < sc->max_fw_cmds; i++) {
1440 		mpt_cmd = sc->mpt_cmd_list[i];
1441 
1442 	/*
1443 	 * Check if the target_id and bus_id is same as the timeout IO
1444 	 */
1445 	if (mpt_cmd->ccb_ptr) {
1446 		/* bus_id = 1 denotes a VD */
1447 		if (bus_id == 1)
1448 			tgt_id = (mpt_cmd->ccb_ptr->ccb_h.target_id - (MRSAS_MAX_PD - 1));
1449 
1450 			if (mpt_cmd->ccb_ptr->cpi.bus_id == bus_id &&
1451 			    mpt_cmd->ccb_ptr->ccb_h.target_id == tgt_id) {
1452 				device_printf(sc->mrsas_dev,
1453 				    "IO commands pending to target id %d\n", tgt_id);
1454 				return FAIL;
1455 			}
1456 		}
1457 	}
1458 
1459 	return SUCCESS;
1460 }
1461 
1462 #if TM_DEBUG
1463 /*
1464  * mrsas_tm_response_code: Prints TM response code received from FW
1465  * input:           Adapter instance soft state
1466  *                  MPI reply returned from firmware
1467  *
1468  * Returns nothing.
1469  */
1470 static void
1471 mrsas_tm_response_code(struct mrsas_softc *sc,
1472 	MPI2_SCSI_TASK_MANAGE_REPLY *mpi_reply)
1473 {
1474 	char *desc;
1475 
1476 	switch (mpi_reply->ResponseCode) {
1477 	case MPI2_SCSITASKMGMT_RSP_TM_COMPLETE:
1478 		desc = "task management request completed";
1479 		break;
1480 	case MPI2_SCSITASKMGMT_RSP_INVALID_FRAME:
1481 		desc = "invalid frame";
1482 		break;
1483 	case MPI2_SCSITASKMGMT_RSP_TM_NOT_SUPPORTED:
1484 		desc = "task management request not supported";
1485 		break;
1486 	case MPI2_SCSITASKMGMT_RSP_TM_FAILED:
1487 		desc = "task management request failed";
1488 		break;
1489 	case MPI2_SCSITASKMGMT_RSP_TM_SUCCEEDED:
1490 		desc = "task management request succeeded";
1491 		break;
1492 	case MPI2_SCSITASKMGMT_RSP_TM_INVALID_LUN:
1493 		desc = "invalid lun";
1494 		break;
1495 	case 0xA:
1496 		desc = "overlapped tag attempted";
1497 		break;
1498 	case MPI2_SCSITASKMGMT_RSP_IO_QUEUED_ON_IOC:
1499 		desc = "task queued, however not sent to target";
1500 		break;
1501 	default:
1502 		desc = "unknown";
1503 		break;
1504 	}
1505 	device_printf(sc->mrsas_dev, "response_code(%01x): %s\n",
1506 	    mpi_reply->ResponseCode, desc);
1507 	device_printf(sc->mrsas_dev,
1508 	    "TerminationCount/DevHandle/Function/TaskType/IOCStat/IOCLoginfo\n"
1509 	    "0x%x/0x%x/0x%x/0x%x/0x%x/0x%x\n",
1510 	    mpi_reply->TerminationCount, mpi_reply->DevHandle,
1511 	    mpi_reply->Function, mpi_reply->TaskType,
1512 	    mpi_reply->IOCStatus, mpi_reply->IOCLogInfo);
1513 }
1514 #endif
1515 
1516 /*
1517  * mrsas_issue_tm:  Fires the TM command to FW and waits for completion
1518  * input:           Adapter instance soft state
1519  *                  reqest descriptor compiled by mrsas_reset_targets
1520  *
1521  * Returns FAIL if TM command TIMEDOUT from FW else SUCCESS.
1522  */
1523 static int
1524 mrsas_issue_tm(struct mrsas_softc *sc,
1525 	MRSAS_REQUEST_DESCRIPTOR_UNION *req_desc)
1526 {
1527 	int sleep_stat;
1528 
1529 	mrsas_fire_cmd(sc, req_desc->addr.u.low, req_desc->addr.u.high);
1530 	sleep_stat = msleep(&sc->ocr_chan, &sc->sim_lock, PRIBIO, "tm_sleep", 50*hz);
1531 
1532 	if (sleep_stat == EWOULDBLOCK) {
1533 		device_printf(sc->mrsas_dev, "tm cmd TIMEDOUT\n");
1534 		return FAIL;
1535 	}
1536 
1537 	return SUCCESS;
1538 }
1539 
1540 /*
1541  * mrsas_reset_targets : Gathers info to fire a target reset command
1542  * input:           Adapter instance soft state
1543  *
1544  * This function compiles data for a target reset command to be fired to the FW
1545  * and then traverse the target_reset_pool to see targets with TIMEDOUT IOs.
1546  *
1547  * Returns SUCCESS or FAIL
1548  */
1549 int mrsas_reset_targets(struct mrsas_softc *sc)
1550 {
1551 	struct mrsas_mpt_cmd *tm_mpt_cmd = NULL;
1552 	struct mrsas_mpt_cmd *tgt_mpt_cmd = NULL;
1553 	MR_TASK_MANAGE_REQUEST *mr_request;
1554 	MPI2_SCSI_TASK_MANAGE_REQUEST *tm_mpi_request;
1555 	MRSAS_REQUEST_DESCRIPTOR_UNION *req_desc;
1556 	int retCode = FAIL, count, i, outstanding;
1557 	u_int32_t MSIxIndex, bus_id;
1558 	target_id_t tgt_id;
1559 #if TM_DEBUG
1560 	MPI2_SCSI_TASK_MANAGE_REPLY *mpi_reply;
1561 #endif
1562 
1563 	outstanding = mrsas_atomic_read(&sc->fw_outstanding);
1564 
1565 	if (!outstanding) {
1566 		device_printf(sc->mrsas_dev, "NO IOs pending...\n");
1567 		mrsas_atomic_set(&sc->target_reset_outstanding, 0);
1568 		retCode = SUCCESS;
1569 		goto return_status;
1570 	} else if (sc->adprecovery != MRSAS_HBA_OPERATIONAL) {
1571 		device_printf(sc->mrsas_dev, "Controller is not operational\n");
1572 		goto return_status;
1573 	} else {
1574 		/* Some more error checks will be added in future */
1575 	}
1576 
1577 	/* Get an mpt frame and an index to fire the TM cmd */
1578 	tm_mpt_cmd = mrsas_get_mpt_cmd(sc);
1579 	if (!tm_mpt_cmd) {
1580 		retCode = FAIL;
1581 		goto return_status;
1582 	}
1583 
1584 	req_desc = mrsas_get_request_desc(sc, (tm_mpt_cmd->index) - 1);
1585 	if (!req_desc) {
1586 		device_printf(sc->mrsas_dev, "Cannot get request_descriptor for tm.\n");
1587 		retCode = FAIL;
1588 		goto release_mpt;
1589 	}
1590 	memset(req_desc, 0, sizeof(MRSAS_REQUEST_DESCRIPTOR_UNION));
1591 
1592 	req_desc->HighPriority.SMID = tm_mpt_cmd->index;
1593 	req_desc->HighPriority.RequestFlags =
1594 	    (MPI2_REQ_DESCRIPT_FLAGS_HIGH_PRIORITY <<
1595 	    MRSAS_REQ_DESCRIPT_FLAGS_TYPE_SHIFT);
1596 	req_desc->HighPriority.MSIxIndex =  0;
1597 	req_desc->HighPriority.LMID = 0;
1598 	req_desc->HighPriority.Reserved1 = 0;
1599 	tm_mpt_cmd->request_desc = req_desc;
1600 
1601 	mr_request = (MR_TASK_MANAGE_REQUEST *) tm_mpt_cmd->io_request;
1602 	memset(mr_request, 0, sizeof(MR_TASK_MANAGE_REQUEST));
1603 
1604 	tm_mpi_request = (MPI2_SCSI_TASK_MANAGE_REQUEST *) &mr_request->TmRequest;
1605 	tm_mpi_request->Function = MPI2_FUNCTION_SCSI_TASK_MGMT;
1606 	tm_mpi_request->TaskType = MPI2_SCSITASKMGMT_TASKTYPE_TARGET_RESET;
1607 	tm_mpi_request->TaskMID = 0; /* smid task */
1608 	tm_mpi_request->LUN[1] = 0;
1609 
1610 	/* Traverse the tm_mpt pool to get valid entries */
1611 	for (i = 0 ; i < MRSAS_MAX_TM_TARGETS; i++) {
1612 		if(!sc->target_reset_pool[i]) {
1613 			continue;
1614 		} else {
1615 			tgt_mpt_cmd = sc->target_reset_pool[i];
1616 		}
1617 
1618 		tgt_id = i;
1619 
1620 		/* See if the target is tm capable or NOT */
1621 		if (!tgt_mpt_cmd->tmCapable) {
1622 			device_printf(sc->mrsas_dev, "Task management NOT SUPPORTED for "
1623 			    "CAM target:%d\n", tgt_id);
1624 
1625 			retCode = FAIL;
1626 			goto release_mpt;
1627 		}
1628 
1629 		tm_mpi_request->DevHandle = tgt_mpt_cmd->io_request->DevHandle;
1630 
1631 		if (i < (MRSAS_MAX_PD - 1)) {
1632 			mr_request->uTmReqReply.tmReqFlags.isTMForPD = 1;
1633 			bus_id = 0;
1634 		} else {
1635 			mr_request->uTmReqReply.tmReqFlags.isTMForLD = 1;
1636 			bus_id = 1;
1637 		}
1638 
1639 		device_printf(sc->mrsas_dev, "TM will be fired for "
1640 		    "CAM target:%d and bus_id %d\n", tgt_id, bus_id);
1641 
1642 		sc->ocr_chan = (void *)&tm_mpt_cmd;
1643 		retCode = mrsas_issue_tm(sc, req_desc);
1644 		if (retCode == FAIL)
1645 			goto release_mpt;
1646 
1647 #if TM_DEBUG
1648 		mpi_reply =
1649 		    (MPI2_SCSI_TASK_MANAGE_REPLY *) &mr_request->uTmReqReply.TMReply;
1650 		mrsas_tm_response_code(sc, mpi_reply);
1651 #endif
1652 		mrsas_atomic_dec(&sc->target_reset_outstanding);
1653 		sc->target_reset_pool[i] = NULL;
1654 
1655 		/* Check for pending cmds in the mpt_cmd_pool with the tgt_id */
1656 		mrsas_disable_intr(sc);
1657 		/* Wait for 1 second to complete parallel ISR calling same
1658 		 * mrsas_complete_cmd()
1659 		 */
1660 		msleep(&sc->ocr_chan, &sc->sim_lock, PRIBIO, "mrsas_reset_wakeup",
1661 		   1 * hz);
1662 		count = sc->msix_vectors > 0 ? sc->msix_vectors : 1;
1663 		mtx_unlock(&sc->sim_lock);
1664 		for (MSIxIndex = 0; MSIxIndex < count; MSIxIndex++)
1665 		    mrsas_complete_cmd(sc, MSIxIndex);
1666 		mtx_lock(&sc->sim_lock);
1667 		retCode = mrsas_track_scsiio(sc, tgt_id, bus_id);
1668 		mrsas_enable_intr(sc);
1669 
1670 		if (retCode == FAIL)
1671 			goto release_mpt;
1672 	}
1673 
1674 	device_printf(sc->mrsas_dev, "Number of targets outstanding "
1675 	    "after reset: %d\n", mrsas_atomic_read(&sc->target_reset_outstanding));
1676 
1677 release_mpt:
1678 	mrsas_release_mpt_cmd(tm_mpt_cmd);
1679 return_status:
1680 	device_printf(sc->mrsas_dev, "target reset %s!!\n",
1681 		(retCode == SUCCESS) ? "SUCCESS" : "FAIL");
1682 
1683 	return retCode;
1684 }
1685 
1686