xref: /freebsd/sys/dev/usb/net/if_ure.c (revision b197d4b893974c9eb4d7b38704c6d5c486235d6f)
1 /*-
2  * Copyright (c) 2015-2016 Kevin Lo <kevlo@FreeBSD.org>
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  */
26 
27 #include <sys/cdefs.h>
28 __FBSDID("$FreeBSD$");
29 
30 #include <sys/param.h>
31 #include <sys/systm.h>
32 #include <sys/bus.h>
33 #include <sys/condvar.h>
34 #include <sys/kernel.h>
35 #include <sys/lock.h>
36 #include <sys/module.h>
37 #include <sys/mutex.h>
38 #include <sys/sbuf.h>
39 #include <sys/socket.h>
40 #include <sys/sysctl.h>
41 #include <sys/unistd.h>
42 
43 #include <net/if.h>
44 #include <net/if_var.h>
45 #include <net/if_media.h>
46 
47 /* needed for checksum offload */
48 #include <netinet/in.h>
49 #include <netinet/ip.h>
50 
51 #include <dev/mii/mii.h>
52 #include <dev/mii/miivar.h>
53 
54 #include <dev/usb/usb.h>
55 #include <dev/usb/usbdi.h>
56 #include <dev/usb/usbdi_util.h>
57 #include "usbdevs.h"
58 
59 #define USB_DEBUG_VAR	ure_debug
60 #include <dev/usb/usb_debug.h>
61 #include <dev/usb/usb_process.h>
62 
63 #include <dev/usb/net/usb_ethernet.h>
64 #include <dev/usb/net/if_urereg.h>
65 
66 #include "miibus_if.h"
67 
68 #include "opt_inet6.h"
69 
70 #ifdef USB_DEBUG
71 static int ure_debug = 0;
72 
73 static SYSCTL_NODE(_hw_usb, OID_AUTO, ure, CTLFLAG_RW | CTLFLAG_MPSAFE, 0,
74     "USB ure");
75 SYSCTL_INT(_hw_usb_ure, OID_AUTO, debug, CTLFLAG_RWTUN, &ure_debug, 0,
76     "Debug level");
77 #endif
78 
79 #ifdef USB_DEBUG_VAR
80 #ifdef USB_DEBUG
81 #define DEVPRINTFN(n,dev,fmt,...) do {			\
82 	if ((USB_DEBUG_VAR) >= (n)) {			\
83 		device_printf((dev), "%s: " fmt,	\
84 		    __FUNCTION__ ,##__VA_ARGS__);	\
85 	}						\
86 } while (0)
87 #define DEVPRINTF(...)    DEVPRINTFN(1, __VA_ARGS__)
88 #else
89 #define DEVPRINTF(...) do { } while (0)
90 #define DEVPRINTFN(...) do { } while (0)
91 #endif
92 #endif
93 
94 /*
95  * Various supported device vendors/products.
96  */
97 static const STRUCT_USB_HOST_ID ure_devs[] = {
98 #define	URE_DEV(v,p,i)	{ \
99   USB_VPI(USB_VENDOR_##v, USB_PRODUCT_##v##_##p, i), \
100   USB_IFACE_CLASS(UICLASS_VENDOR), \
101   USB_IFACE_SUBCLASS(UISUBCLASS_VENDOR) }
102 	URE_DEV(LENOVO, RTL8153, URE_FLAG_8153),
103 	URE_DEV(LENOVO, TBT3LAN, 0),
104 	URE_DEV(LENOVO, TBT3LANGEN2, 0),
105 	URE_DEV(LENOVO, ONELINK, 0),
106 	URE_DEV(LENOVO, RTL8153_04, URE_FLAG_8153),
107 	URE_DEV(LENOVO, USBCLAN, 0),
108 	URE_DEV(LENOVO, USBCLANGEN2, 0),
109 	URE_DEV(NVIDIA, RTL8153, URE_FLAG_8153),
110 	URE_DEV(REALTEK, RTL8152, URE_FLAG_8152),
111 	URE_DEV(REALTEK, RTL8153, URE_FLAG_8153),
112 	URE_DEV(TPLINK, RTL8153, URE_FLAG_8153),
113 	URE_DEV(REALTEK, RTL8156, URE_FLAG_8156),
114 #undef URE_DEV
115 };
116 
117 static device_probe_t ure_probe;
118 static device_attach_t ure_attach;
119 static device_detach_t ure_detach;
120 
121 static usb_callback_t ure_bulk_read_callback;
122 static usb_callback_t ure_bulk_write_callback;
123 
124 static miibus_readreg_t ure_miibus_readreg;
125 static miibus_writereg_t ure_miibus_writereg;
126 static miibus_statchg_t ure_miibus_statchg;
127 
128 static uether_fn_t ure_attach_post;
129 static uether_fn_t ure_init;
130 static uether_fn_t ure_stop;
131 static uether_fn_t ure_start;
132 static uether_fn_t ure_tick;
133 static uether_fn_t ure_rxfilter;
134 
135 static int	ure_ctl(struct ure_softc *, uint8_t, uint16_t, uint16_t,
136 		    void *, int);
137 static int	ure_read_mem(struct ure_softc *, uint16_t, uint16_t, void *,
138 		    int);
139 static int	ure_write_mem(struct ure_softc *, uint16_t, uint16_t, void *,
140 		    int);
141 static uint8_t	ure_read_1(struct ure_softc *, uint16_t, uint16_t);
142 static uint16_t	ure_read_2(struct ure_softc *, uint16_t, uint16_t);
143 static uint32_t	ure_read_4(struct ure_softc *, uint16_t, uint16_t);
144 static int	ure_write_1(struct ure_softc *, uint16_t, uint16_t, uint32_t);
145 static int	ure_write_2(struct ure_softc *, uint16_t, uint16_t, uint32_t);
146 static int	ure_write_4(struct ure_softc *, uint16_t, uint16_t, uint32_t);
147 static uint16_t	ure_ocp_reg_read(struct ure_softc *, uint16_t);
148 static void	ure_ocp_reg_write(struct ure_softc *, uint16_t, uint16_t);
149 static void	ure_sram_write(struct ure_softc *, uint16_t, uint16_t);
150 
151 static int	ure_sysctl_chipver(SYSCTL_HANDLER_ARGS);
152 
153 static void	ure_read_chipver(struct ure_softc *);
154 static int	ure_attach_post_sub(struct usb_ether *);
155 static void	ure_reset(struct ure_softc *);
156 static int	ure_ifmedia_upd(struct ifnet *);
157 static void	ure_ifmedia_sts(struct ifnet *, struct ifmediareq *);
158 static void	ure_add_media_types(struct ure_softc *);
159 static void	ure_link_state(struct ure_softc *sc);
160 static int		ure_get_link_status(struct ure_softc *);
161 static int		ure_ioctl(struct ifnet *, u_long, caddr_t);
162 static void	ure_rtl8152_init(struct ure_softc *);
163 static void	ure_rtl8152_nic_reset(struct ure_softc *);
164 static void	ure_rtl8153_init(struct ure_softc *);
165 static void	ure_rtl8153b_init(struct ure_softc *);
166 static void	ure_rtl8153b_nic_reset(struct ure_softc *);
167 static void	ure_disable_teredo(struct ure_softc *);
168 static void	ure_enable_aldps(struct ure_softc *, bool);
169 static uint16_t	ure_phy_status(struct ure_softc *, uint16_t);
170 static void	ure_rxcsum(int capenb, struct ure_rxpkt *rp, struct mbuf *m);
171 static int	ure_txcsum(struct mbuf *m, int caps, uint32_t *regout);
172 
173 static device_method_t ure_methods[] = {
174 	/* Device interface. */
175 	DEVMETHOD(device_probe, ure_probe),
176 	DEVMETHOD(device_attach, ure_attach),
177 	DEVMETHOD(device_detach, ure_detach),
178 
179 	/* MII interface. */
180 	DEVMETHOD(miibus_readreg, ure_miibus_readreg),
181 	DEVMETHOD(miibus_writereg, ure_miibus_writereg),
182 	DEVMETHOD(miibus_statchg, ure_miibus_statchg),
183 
184 	DEVMETHOD_END
185 };
186 
187 static driver_t ure_driver = {
188 	.name = "ure",
189 	.methods = ure_methods,
190 	.size = sizeof(struct ure_softc),
191 };
192 
193 DRIVER_MODULE(ure, uhub, ure_driver, NULL, NULL);
194 DRIVER_MODULE(miibus, ure, miibus_driver, NULL, NULL);
195 MODULE_DEPEND(ure, uether, 1, 1, 1);
196 MODULE_DEPEND(ure, usb, 1, 1, 1);
197 MODULE_DEPEND(ure, ether, 1, 1, 1);
198 MODULE_DEPEND(ure, miibus, 1, 1, 1);
199 MODULE_VERSION(ure, 1);
200 USB_PNP_HOST_INFO(ure_devs);
201 
202 static const struct usb_ether_methods ure_ue_methods = {
203 	.ue_attach_post = ure_attach_post,
204 	.ue_attach_post_sub = ure_attach_post_sub,
205 	.ue_start = ure_start,
206 	.ue_init = ure_init,
207 	.ue_stop = ure_stop,
208 	.ue_tick = ure_tick,
209 	.ue_setmulti = ure_rxfilter,
210 	.ue_setpromisc = ure_rxfilter,
211 	.ue_mii_upd = ure_ifmedia_upd,
212 	.ue_mii_sts = ure_ifmedia_sts,
213 };
214 
215 #define	URE_SETBIT_1(sc, reg, index, x) \
216 	ure_write_1(sc, reg, index, ure_read_1(sc, reg, index) | (x))
217 #define	URE_SETBIT_2(sc, reg, index, x) \
218 	ure_write_2(sc, reg, index, ure_read_2(sc, reg, index) | (x))
219 #define	URE_SETBIT_4(sc, reg, index, x) \
220 	ure_write_4(sc, reg, index, ure_read_4(sc, reg, index) | (x))
221 
222 #define	URE_CLRBIT_1(sc, reg, index, x) \
223 	ure_write_1(sc, reg, index, ure_read_1(sc, reg, index) & ~(x))
224 #define	URE_CLRBIT_2(sc, reg, index, x) \
225 	ure_write_2(sc, reg, index, ure_read_2(sc, reg, index) & ~(x))
226 #define	URE_CLRBIT_4(sc, reg, index, x) \
227 	ure_write_4(sc, reg, index, ure_read_4(sc, reg, index) & ~(x))
228 
229 static int
230 ure_ctl(struct ure_softc *sc, uint8_t rw, uint16_t val, uint16_t index,
231     void *buf, int len)
232 {
233 	struct usb_device_request req;
234 
235 	URE_LOCK_ASSERT(sc, MA_OWNED);
236 
237 	if (rw == URE_CTL_WRITE)
238 		req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
239 	else
240 		req.bmRequestType = UT_READ_VENDOR_DEVICE;
241 	req.bRequest = UR_SET_ADDRESS;
242 	USETW(req.wValue, val);
243 	USETW(req.wIndex, index);
244 	USETW(req.wLength, len);
245 
246 	return (uether_do_request(&sc->sc_ue, &req, buf, 1000));
247 }
248 
249 static int
250 ure_read_mem(struct ure_softc *sc, uint16_t addr, uint16_t index,
251     void *buf, int len)
252 {
253 
254 	return (ure_ctl(sc, URE_CTL_READ, addr, index, buf, len));
255 }
256 
257 static int
258 ure_write_mem(struct ure_softc *sc, uint16_t addr, uint16_t index,
259     void *buf, int len)
260 {
261 
262 	return (ure_ctl(sc, URE_CTL_WRITE, addr, index, buf, len));
263 }
264 
265 static uint8_t
266 ure_read_1(struct ure_softc *sc, uint16_t reg, uint16_t index)
267 {
268 	uint32_t val;
269 	uint8_t temp[4];
270 	uint8_t shift;
271 
272 	shift = (reg & 3) << 3;
273 	reg &= ~3;
274 
275 	ure_read_mem(sc, reg, index, &temp, 4);
276 	val = UGETDW(temp);
277 	val >>= shift;
278 
279 	return (val & 0xff);
280 }
281 
282 static uint16_t
283 ure_read_2(struct ure_softc *sc, uint16_t reg, uint16_t index)
284 {
285 	uint32_t val;
286 	uint8_t temp[4];
287 	uint8_t shift;
288 
289 	shift = (reg & 2) << 3;
290 	reg &= ~3;
291 
292 	ure_read_mem(sc, reg, index, &temp, 4);
293 	val = UGETDW(temp);
294 	val >>= shift;
295 
296 	return (val & 0xffff);
297 }
298 
299 static uint32_t
300 ure_read_4(struct ure_softc *sc, uint16_t reg, uint16_t index)
301 {
302 	uint8_t temp[4];
303 
304 	ure_read_mem(sc, reg, index, &temp, 4);
305 	return (UGETDW(temp));
306 }
307 
308 static int
309 ure_write_1(struct ure_softc *sc, uint16_t reg, uint16_t index, uint32_t val)
310 {
311 	uint16_t byen;
312 	uint8_t temp[4];
313 	uint8_t shift;
314 
315 	byen = URE_BYTE_EN_BYTE;
316 	shift = reg & 3;
317 	val &= 0xff;
318 
319 	if (reg & 3) {
320 		byen <<= shift;
321 		val <<= (shift << 3);
322 		reg &= ~3;
323 	}
324 
325 	USETDW(temp, val);
326 	return (ure_write_mem(sc, reg, index | byen, &temp, 4));
327 }
328 
329 static int
330 ure_write_2(struct ure_softc *sc, uint16_t reg, uint16_t index, uint32_t val)
331 {
332 	uint16_t byen;
333 	uint8_t temp[4];
334 	uint8_t shift;
335 
336 	byen = URE_BYTE_EN_WORD;
337 	shift = reg & 2;
338 	val &= 0xffff;
339 
340 	if (reg & 2) {
341 		byen <<= shift;
342 		val <<= (shift << 3);
343 		reg &= ~3;
344 	}
345 
346 	USETDW(temp, val);
347 	return (ure_write_mem(sc, reg, index | byen, &temp, 4));
348 }
349 
350 static int
351 ure_write_4(struct ure_softc *sc, uint16_t reg, uint16_t index, uint32_t val)
352 {
353 	uint8_t temp[4];
354 
355 	USETDW(temp, val);
356 	return (ure_write_mem(sc, reg, index | URE_BYTE_EN_DWORD, &temp, 4));
357 }
358 
359 static uint16_t
360 ure_ocp_reg_read(struct ure_softc *sc, uint16_t addr)
361 {
362 	uint16_t reg;
363 
364 	ure_write_2(sc, URE_PLA_OCP_GPHY_BASE, URE_MCU_TYPE_PLA, addr & 0xf000);
365 	reg = (addr & 0x0fff) | 0xb000;
366 
367 	return (ure_read_2(sc, reg, URE_MCU_TYPE_PLA));
368 }
369 
370 static void
371 ure_ocp_reg_write(struct ure_softc *sc, uint16_t addr, uint16_t data)
372 {
373 	uint16_t reg;
374 
375 	ure_write_2(sc, URE_PLA_OCP_GPHY_BASE, URE_MCU_TYPE_PLA, addr & 0xf000);
376 	reg = (addr & 0x0fff) | 0xb000;
377 
378 	ure_write_2(sc, reg, URE_MCU_TYPE_PLA, data);
379 }
380 
381 static void
382 ure_sram_write(struct ure_softc *sc, uint16_t addr, uint16_t data)
383 {
384 	ure_ocp_reg_write(sc, URE_OCP_SRAM_ADDR, addr);
385 	ure_ocp_reg_write(sc, URE_OCP_SRAM_DATA, data);
386 }
387 
388 static int
389 ure_miibus_readreg(device_t dev, int phy, int reg)
390 {
391 	struct ure_softc *sc;
392 	uint16_t val;
393 	int locked;
394 
395 	sc = device_get_softc(dev);
396 	locked = mtx_owned(&sc->sc_mtx);
397 	if (!locked)
398 		URE_LOCK(sc);
399 
400 	/* Let the rgephy driver read the URE_GMEDIASTAT register. */
401 	if (reg == URE_GMEDIASTAT) {
402 		if (!locked)
403 			URE_UNLOCK(sc);
404 		return (ure_read_1(sc, URE_GMEDIASTAT, URE_MCU_TYPE_PLA));
405 	}
406 
407 	val = ure_ocp_reg_read(sc, URE_OCP_BASE_MII + reg * 2);
408 
409 	if (!locked)
410 		URE_UNLOCK(sc);
411 	return (val);
412 }
413 
414 static int
415 ure_miibus_writereg(device_t dev, int phy, int reg, int val)
416 {
417 	struct ure_softc *sc;
418 	int locked;
419 
420 	sc = device_get_softc(dev);
421 	if (sc->sc_phyno != phy)
422 		return (0);
423 
424 	locked = mtx_owned(&sc->sc_mtx);
425 	if (!locked)
426 		URE_LOCK(sc);
427 
428 	ure_ocp_reg_write(sc, URE_OCP_BASE_MII + reg * 2, val);
429 
430 	if (!locked)
431 		URE_UNLOCK(sc);
432 	return (0);
433 }
434 
435 static void
436 ure_miibus_statchg(device_t dev)
437 {
438 	struct ure_softc *sc;
439 	struct mii_data *mii;
440 	struct ifnet *ifp;
441 	int locked;
442 
443 	sc = device_get_softc(dev);
444 	mii = GET_MII(sc);
445 	locked = mtx_owned(&sc->sc_mtx);
446 	if (!locked)
447 		URE_LOCK(sc);
448 
449 	ifp = uether_getifp(&sc->sc_ue);
450 	if (mii == NULL || ifp == NULL ||
451 	    (ifp->if_drv_flags & IFF_DRV_RUNNING) == 0)
452 		goto done;
453 
454 	sc->sc_flags &= ~URE_FLAG_LINK;
455 	if ((mii->mii_media_status & (IFM_ACTIVE | IFM_AVALID)) ==
456 	    (IFM_ACTIVE | IFM_AVALID)) {
457 		switch (IFM_SUBTYPE(mii->mii_media_active)) {
458 		case IFM_10_T:
459 		case IFM_100_TX:
460 			sc->sc_flags |= URE_FLAG_LINK;
461 			sc->sc_rxstarted = 0;
462 			break;
463 		case IFM_1000_T:
464 			if ((sc->sc_flags & URE_FLAG_8152) != 0)
465 				break;
466 			sc->sc_flags |= URE_FLAG_LINK;
467 			sc->sc_rxstarted = 0;
468 			break;
469 		default:
470 			break;
471 		}
472 	}
473 
474 	/* Lost link, do nothing. */
475 	if ((sc->sc_flags & URE_FLAG_LINK) == 0)
476 		goto done;
477 done:
478 	if (!locked)
479 		URE_UNLOCK(sc);
480 }
481 
482 /*
483  * Probe for a RTL8152/RTL8153 chip.
484  */
485 static int
486 ure_probe(device_t dev)
487 {
488 	struct usb_attach_arg *uaa;
489 
490 	uaa = device_get_ivars(dev);
491 	if (uaa->usb_mode != USB_MODE_HOST)
492 		return (ENXIO);
493 	if (uaa->info.bIfaceIndex != URE_IFACE_IDX)
494 		return (ENXIO);
495 
496 	return (usbd_lookup_id_by_uaa(ure_devs, sizeof(ure_devs), uaa));
497 }
498 
499 /*
500  * Attach the interface. Allocate softc structures, do ifmedia
501  * setup and ethernet/BPF attach.
502  */
503 static int
504 ure_attach(device_t dev)
505 {
506 	struct usb_attach_arg *uaa = device_get_ivars(dev);
507 	struct ure_softc *sc = device_get_softc(dev);
508 	struct usb_ether *ue = &sc->sc_ue;
509 	struct usb_config ure_config_rx[URE_MAX_RX];
510 	struct usb_config ure_config_tx[URE_MAX_TX];
511 	uint8_t iface_index;
512 	int error;
513 	int i;
514 
515 	sc->sc_flags = USB_GET_DRIVER_INFO(uaa);
516 	device_set_usb_desc(dev);
517 	mtx_init(&sc->sc_mtx, device_get_nameunit(dev), NULL, MTX_DEF);
518 
519 	iface_index = URE_IFACE_IDX;
520 
521 	if (sc->sc_flags & (URE_FLAG_8153 | URE_FLAG_8153B))
522 		sc->sc_rxbufsz = URE_8153_RX_BUFSZ;
523 	else if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B))
524 		sc->sc_rxbufsz = URE_8156_RX_BUFSZ;
525 	else
526 		sc->sc_rxbufsz = URE_8152_RX_BUFSZ;
527 
528 	for (i = 0; i < URE_MAX_RX; i++) {
529 		ure_config_rx[i] = (struct usb_config) {
530 			.type = UE_BULK,
531 			.endpoint = UE_ADDR_ANY,
532 			.direction = UE_DIR_IN,
533 			.bufsize = sc->sc_rxbufsz,
534 			.flags = {.pipe_bof = 1,.short_xfer_ok = 1,},
535 			.callback = ure_bulk_read_callback,
536 			.timeout = 0,	/* no timeout */
537 		};
538 	}
539 	error = usbd_transfer_setup(uaa->device, &iface_index, sc->sc_rx_xfer,
540 	    ure_config_rx, URE_MAX_RX, sc, &sc->sc_mtx);
541 	if (error != 0) {
542 		device_printf(dev, "allocating USB RX transfers failed\n");
543 		goto detach;
544 	}
545 
546 	for (i = 0; i < URE_MAX_TX; i++) {
547 		ure_config_tx[i] = (struct usb_config) {
548 			.type = UE_BULK,
549 			.endpoint = UE_ADDR_ANY,
550 			.direction = UE_DIR_OUT,
551 			.bufsize = URE_TX_BUFSZ,
552 			.flags = {.pipe_bof = 1,.force_short_xfer = 1,},
553 			.callback = ure_bulk_write_callback,
554 			.timeout = 10000,	/* 10 seconds */
555 		};
556 	}
557 	error = usbd_transfer_setup(uaa->device, &iface_index, sc->sc_tx_xfer,
558 	    ure_config_tx, URE_MAX_TX, sc, &sc->sc_mtx);
559 	if (error != 0) {
560 		usbd_transfer_unsetup(sc->sc_rx_xfer, URE_MAX_RX);
561 		device_printf(dev, "allocating USB TX transfers failed\n");
562 		goto detach;
563 	}
564 
565 	ue->ue_sc = sc;
566 	ue->ue_dev = dev;
567 	ue->ue_udev = uaa->device;
568 	ue->ue_mtx = &sc->sc_mtx;
569 	ue->ue_methods = &ure_ue_methods;
570 
571 	error = uether_ifattach(ue);
572 	if (error != 0) {
573 		device_printf(dev, "could not attach interface\n");
574 		goto detach;
575 	}
576 	return (0);			/* success */
577 
578 detach:
579 	ure_detach(dev);
580 	return (ENXIO);			/* failure */
581 }
582 
583 static int
584 ure_detach(device_t dev)
585 {
586 	struct ure_softc *sc = device_get_softc(dev);
587 	struct usb_ether *ue = &sc->sc_ue;
588 
589 	usbd_transfer_unsetup(sc->sc_tx_xfer, URE_MAX_TX);
590 	usbd_transfer_unsetup(sc->sc_rx_xfer, URE_MAX_RX);
591 	uether_ifdetach(ue);
592 	mtx_destroy(&sc->sc_mtx);
593 
594 	return (0);
595 }
596 
597 /*
598  * Copy from USB buffers to a new mbuf chain with pkt header.
599  *
600  * This will use m_getm2 to get a mbuf chain w/ properly sized mbuf
601  * clusters as necessary.
602  */
603 static struct mbuf *
604 ure_makembuf(struct usb_page_cache *pc, usb_frlength_t offset,
605     usb_frlength_t len)
606 {
607 	struct usb_page_search_res;
608 	struct mbuf *m, *mb;
609 	usb_frlength_t tlen;
610 
611 	m = m_getm2(NULL, len + ETHER_ALIGN, M_NOWAIT, MT_DATA, M_PKTHDR);
612 	if (m == NULL)
613 		return (m);
614 
615 	/* uether_newbuf does this. */
616 	m_adj(m, ETHER_ALIGN);
617 
618 	m->m_pkthdr.len = len;
619 
620 	for (mb = m; len > 0; mb = mb->m_next) {
621 		tlen = MIN(len, M_TRAILINGSPACE(mb));
622 
623 		usbd_copy_out(pc, offset, mtod(mb, uint8_t *), tlen);
624 		mb->m_len = tlen;
625 
626 		offset += tlen;
627 		len -= tlen;
628 	}
629 
630 	return (m);
631 }
632 
633 static void
634 ure_bulk_read_callback(struct usb_xfer *xfer, usb_error_t error)
635 {
636 	struct ure_softc *sc = usbd_xfer_softc(xfer);
637 	struct usb_ether *ue = &sc->sc_ue;
638 	struct ifnet *ifp = uether_getifp(ue);
639 	struct usb_page_cache *pc;
640 	struct mbuf *m;
641 	struct ure_rxpkt pkt;
642 	int actlen, off, len;
643 	int caps;
644 	uint32_t pktcsum;
645 
646 	usbd_xfer_status(xfer, &actlen, NULL, NULL, NULL);
647 
648 	switch (USB_GET_STATE(xfer)) {
649 	case USB_ST_TRANSFERRED:
650 		off = 0;
651 		pc = usbd_xfer_get_frame(xfer, 0);
652 		caps = if_getcapenable(ifp);
653 		DEVPRINTFN(13, sc->sc_ue.ue_dev, "rcb start\n");
654 		while (actlen > 0) {
655 			if (actlen < (int)(sizeof(pkt))) {
656 				if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
657 				goto tr_setup;
658 			}
659 			usbd_copy_out(pc, off, &pkt, sizeof(pkt));
660 
661 			off += sizeof(pkt);
662 			actlen -= sizeof(pkt);
663 
664 			len = le32toh(pkt.ure_pktlen) & URE_RXPKT_LEN_MASK;
665 
666 			DEVPRINTFN(13, sc->sc_ue.ue_dev,
667 			    "rxpkt: %#x, %#x, %#x, %#x, %#x, %#x\n",
668 			    pkt.ure_pktlen, pkt.ure_csum, pkt.ure_misc,
669 			    pkt.ure_rsvd2, pkt.ure_rsvd3, pkt.ure_rsvd4);
670 			DEVPRINTFN(13, sc->sc_ue.ue_dev, "len: %d\n", len);
671 
672 			if (len >= URE_RXPKT_LEN_MASK) {
673 				/*
674 				 * drop the rest of this segment.  With out
675 				 * more information, we cannot know where next
676 				 * packet starts.  Blindly continuing would
677 				 * cause a packet in packet attack, allowing
678 				 * one VLAN to inject packets w/o a VLAN tag,
679 				 * or injecting packets into other VLANs.
680 				 */
681 				if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
682 				goto tr_setup;
683 			}
684 
685 			if (actlen < len) {
686 				if_inc_counter(ifp, IFCOUNTER_IERRORS, 1);
687 				goto tr_setup;
688 			}
689 
690 			if (len >= (ETHER_HDR_LEN + ETHER_CRC_LEN))
691 				m = ure_makembuf(pc, off, len - ETHER_CRC_LEN);
692 			else
693 				m = NULL;
694 			if (m == NULL) {
695 				if_inc_counter(ifp, IFCOUNTER_IQDROPS, 1);
696 			} else {
697 				/* make mbuf and queue */
698 				pktcsum = le32toh(pkt.ure_csum);
699 				if (caps & IFCAP_VLAN_HWTAGGING &&
700 				    pktcsum & URE_RXPKT_RX_VLAN_TAG) {
701 					m->m_pkthdr.ether_vtag =
702 					    bswap16(pktcsum &
703 					    URE_RXPKT_VLAN_MASK);
704 					m->m_flags |= M_VLANTAG;
705 				}
706 
707 				/* set the necessary flags for rx checksum */
708 				ure_rxcsum(caps, &pkt, m);
709 
710 				uether_rxmbuf(ue, m, len - ETHER_CRC_LEN);
711 			}
712 
713 			off += roundup(len, URE_RXPKT_ALIGN);
714 			actlen -= roundup(len, URE_RXPKT_ALIGN);
715 		}
716 		DEVPRINTFN(13, sc->sc_ue.ue_dev, "rcb end\n");
717 
718 		/* FALLTHROUGH */
719 	case USB_ST_SETUP:
720 tr_setup:
721 		usbd_xfer_set_frame_len(xfer, 0, usbd_xfer_max_len(xfer));
722 		usbd_transfer_submit(xfer);
723 		uether_rxflush(ue);
724 		return;
725 
726 	default:			/* Error */
727 		DPRINTF("bulk read error, %s\n",
728 		    usbd_errstr(error));
729 
730 		if (error != USB_ERR_CANCELLED) {
731 			/* try to clear stall first */
732 			usbd_xfer_set_stall(xfer);
733 			goto tr_setup;
734 		}
735 		return;
736 	}
737 }
738 
739 static void
740 ure_bulk_write_callback(struct usb_xfer *xfer, usb_error_t error)
741 {
742 	struct ure_softc *sc = usbd_xfer_softc(xfer);
743 	struct ifnet *ifp = uether_getifp(&sc->sc_ue);
744 	struct usb_page_cache *pc;
745 	struct mbuf *m;
746 	struct ure_txpkt txpkt;
747 	uint32_t regtmp;
748 	int len, pos;
749 	int rem;
750 	int caps;
751 
752 	switch (USB_GET_STATE(xfer)) {
753 	case USB_ST_TRANSFERRED:
754 		DPRINTFN(11, "transfer complete\n");
755 		ifp->if_drv_flags &= ~IFF_DRV_OACTIVE;
756 
757 		/* FALLTHROUGH */
758 	case USB_ST_SETUP:
759 tr_setup:
760 		if ((sc->sc_flags & URE_FLAG_LINK) == 0) {
761 			/* don't send anything if there is no link! */
762 			break;
763 		}
764 
765 		pc = usbd_xfer_get_frame(xfer, 0);
766 		caps = if_getcapenable(ifp);
767 
768 		pos = 0;
769 		rem = URE_TX_BUFSZ;
770 		while (rem > sizeof(txpkt)) {
771 			IFQ_DRV_DEQUEUE(&ifp->if_snd, m);
772 			if (m == NULL)
773 				break;
774 
775 			/*
776 			 * make sure we don't ever send too large of a
777 			 * packet
778 			 */
779 			len = m->m_pkthdr.len;
780 			if ((len & URE_TXPKT_LEN_MASK) != len) {
781 				device_printf(sc->sc_ue.ue_dev,
782 				    "pkt len too large: %#x", len);
783 pkterror:
784 				if_inc_counter(ifp, IFCOUNTER_OERRORS, 1);
785 				m_freem(m);
786 				continue;
787 			}
788 
789 			if (sizeof(txpkt) +
790 			    roundup(len, URE_TXPKT_ALIGN) > rem) {
791 				/* out of space */
792 				IFQ_DRV_PREPEND(&ifp->if_snd, m);
793 				m = NULL;
794 				break;
795 			}
796 
797 			txpkt = (struct ure_txpkt){};
798 			txpkt.ure_pktlen = htole32((len & URE_TXPKT_LEN_MASK) |
799 			    URE_TKPKT_TX_FS | URE_TKPKT_TX_LS);
800 			if (m->m_flags & M_VLANTAG) {
801 				txpkt.ure_csum = htole32(
802 				    bswap16(m->m_pkthdr.ether_vtag &
803 				    URE_TXPKT_VLAN_MASK) | URE_TXPKT_VLAN);
804 			}
805 			if (ure_txcsum(m, caps, &regtmp)) {
806 				device_printf(sc->sc_ue.ue_dev,
807 				    "pkt l4 off too large");
808 				goto pkterror;
809 			}
810 			txpkt.ure_csum |= htole32(regtmp);
811 
812 			DEVPRINTFN(13, sc->sc_ue.ue_dev,
813 			    "txpkt: mbflg: %#x, %#x, %#x\n",
814 			    m->m_pkthdr.csum_flags, le32toh(txpkt.ure_pktlen),
815 			    le32toh(txpkt.ure_csum));
816 
817 			usbd_copy_in(pc, pos, &txpkt, sizeof(txpkt));
818 
819 			pos += sizeof(txpkt);
820 			rem -= sizeof(txpkt);
821 
822 			usbd_m_copy_in(pc, pos, m, 0, len);
823 
824 			pos += roundup(len, URE_TXPKT_ALIGN);
825 			rem -= roundup(len, URE_TXPKT_ALIGN);
826 
827 			if_inc_counter(ifp, IFCOUNTER_OPACKETS, 1);
828 
829 			/*
830 			 * If there's a BPF listener, bounce a copy
831 			 * of this frame to him.
832 			 */
833 			BPF_MTAP(ifp, m);
834 
835 			m_freem(m);
836 		}
837 
838 		/* no packets to send */
839 		if (pos == 0)
840 			break;
841 
842 		/* Set frame length. */
843 		usbd_xfer_set_frame_len(xfer, 0, pos);
844 
845 		usbd_transfer_submit(xfer);
846 
847 		return;
848 
849 	default:			/* Error */
850 		DPRINTFN(11, "transfer error, %s\n",
851 		    usbd_errstr(error));
852 
853 		if_inc_counter(ifp, IFCOUNTER_OERRORS, 1);
854 		ifp->if_drv_flags &= ~IFF_DRV_OACTIVE;
855 
856 		if (error == USB_ERR_TIMEOUT) {
857 			DEVPRINTFN(12, sc->sc_ue.ue_dev,
858 			    "pkt tx timeout\n");
859 		}
860 
861 		if (error != USB_ERR_CANCELLED) {
862 			/* try to clear stall first */
863 			usbd_xfer_set_stall(xfer);
864 			goto tr_setup;
865 		}
866 	}
867 }
868 
869 static void
870 ure_read_chipver(struct ure_softc *sc)
871 {
872 	uint16_t ver;
873 
874 	ver = ure_read_2(sc, URE_PLA_TCR1, URE_MCU_TYPE_PLA) & URE_VERSION_MASK;
875 	sc->sc_ver = ver;
876 	switch (ver) {
877 	case 0x4c00:
878 		sc->sc_chip |= URE_CHIP_VER_4C00;
879 		sc->sc_flags = URE_FLAG_8152;
880 		break;
881 	case 0x4c10:
882 		sc->sc_chip |= URE_CHIP_VER_4C10;
883 		sc->sc_flags = URE_FLAG_8152;
884 		break;
885 	case 0x5c00:
886 		sc->sc_chip |= URE_CHIP_VER_5C00;
887 		sc->sc_flags = URE_FLAG_8153;
888 		break;
889 	case 0x5c10:
890 		sc->sc_chip |= URE_CHIP_VER_5C10;
891 		sc->sc_flags = URE_FLAG_8153;
892 		break;
893 	case 0x5c20:
894 		sc->sc_chip |= URE_CHIP_VER_5C20;
895 		sc->sc_flags = URE_FLAG_8153;
896 		break;
897 	case 0x5c30:
898 		sc->sc_chip |= URE_CHIP_VER_5C30;
899 		sc->sc_flags = URE_FLAG_8153;
900 		break;
901 	case 0x6000:
902 		sc->sc_flags = URE_FLAG_8153B;
903 		sc->sc_chip |= URE_CHIP_VER_6000;
904 		break;
905 	case 0x6010:
906 		sc->sc_flags = URE_FLAG_8153B;
907 		sc->sc_chip |= URE_CHIP_VER_6010;
908 		break;
909 	case 0x7020:
910 		sc->sc_flags = URE_FLAG_8156;
911 		sc->sc_chip |= URE_CHIP_VER_7020;
912 		break;
913 	case 0x7030:
914 		sc->sc_flags = URE_FLAG_8156;
915 		sc->sc_chip |= URE_CHIP_VER_7030;
916 		break;
917 	case 0x7400:
918 		sc->sc_flags = URE_FLAG_8156B;
919 		sc->sc_chip |= URE_CHIP_VER_7400;
920 		break;
921 	case 0x7410:
922 		sc->sc_flags = URE_FLAG_8156B;
923 		sc->sc_chip |= URE_CHIP_VER_7410;
924 		break;
925 	default:
926 		device_printf(sc->sc_ue.ue_dev,
927 		    "unknown version 0x%04x\n", ver);
928 		break;
929 	}
930 }
931 
932 static int
933 ure_sysctl_chipver(SYSCTL_HANDLER_ARGS)
934 {
935 	struct sbuf sb;
936 	struct ure_softc *sc = arg1;
937 	int error;
938 
939 	sbuf_new_for_sysctl(&sb, NULL, 0, req);
940 
941 	sbuf_printf(&sb, "%04x", sc->sc_ver);
942 
943 	error = sbuf_finish(&sb);
944 	sbuf_delete(&sb);
945 
946 	return (error);
947 }
948 
949 static void
950 ure_attach_post(struct usb_ether *ue)
951 {
952 	struct ure_softc *sc = uether_getsc(ue);
953 
954 	sc->sc_rxstarted = 0;
955 	sc->sc_phyno = 0;
956 
957 	/* Determine the chip version. */
958 	ure_read_chipver(sc);
959 
960 	/* Initialize controller and get station address. */
961 	if (sc->sc_flags & URE_FLAG_8152)
962 		ure_rtl8152_init(sc);
963 	else if (sc->sc_flags & (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B))
964 		ure_rtl8153b_init(sc);
965 	else
966 		ure_rtl8153_init(sc);
967 
968 	if ((sc->sc_chip & URE_CHIP_VER_4C00) ||
969 	    (sc->sc_chip & URE_CHIP_VER_4C10))
970 		ure_read_mem(sc, URE_PLA_IDR, URE_MCU_TYPE_PLA,
971 		    ue->ue_eaddr, 8);
972 	else
973 		ure_read_mem(sc, URE_PLA_BACKUP, URE_MCU_TYPE_PLA,
974 		    ue->ue_eaddr, 8);
975 
976 	if (ETHER_IS_ZERO(sc->sc_ue.ue_eaddr)) {
977 		device_printf(sc->sc_ue.ue_dev, "MAC assigned randomly\n");
978 		arc4rand(sc->sc_ue.ue_eaddr, ETHER_ADDR_LEN, 0);
979 		sc->sc_ue.ue_eaddr[0] &= ~0x01; /* unicast */
980 		sc->sc_ue.ue_eaddr[0] |= 0x02;  /* locally administered */
981 	}
982 }
983 
984 static int
985 ure_attach_post_sub(struct usb_ether *ue)
986 {
987 	struct sysctl_ctx_list *sctx;
988 	struct sysctl_oid *soid;
989 	struct ure_softc *sc;
990 	struct ifnet *ifp;
991 	int error;
992 
993 	sc = uether_getsc(ue);
994 	ifp = ue->ue_ifp;
995 	ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
996 	ifp->if_start = uether_start;
997 	ifp->if_ioctl = ure_ioctl;
998 	ifp->if_init = uether_init;
999 	IFQ_SET_MAXLEN(&ifp->if_snd, ifqmaxlen);
1000 	/*
1001 	 * Try to keep two transfers full at a time.
1002 	 * ~(TRANSFER_SIZE / 80 bytes/pkt * 2 buffers in flight)
1003 	 */
1004 	ifp->if_snd.ifq_drv_maxlen = 512;
1005 	IFQ_SET_READY(&ifp->if_snd);
1006 
1007 	if_setcapabilitiesbit(ifp, IFCAP_VLAN_MTU, 0);
1008 	if_setcapabilitiesbit(ifp, IFCAP_VLAN_HWTAGGING, 0);
1009 	if_setcapabilitiesbit(ifp, IFCAP_VLAN_HWCSUM|IFCAP_HWCSUM, 0);
1010 	if_sethwassist(ifp, CSUM_IP|CSUM_IP_UDP|CSUM_IP_TCP);
1011 #ifdef INET6
1012 	if_setcapabilitiesbit(ifp, IFCAP_HWCSUM_IPV6, 0);
1013 #endif
1014 	if_setcapenable(ifp, if_getcapabilities(ifp));
1015 
1016 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1017 		ifmedia_init(&sc->sc_ifmedia, IFM_IMASK, ure_ifmedia_upd,
1018 		    ure_ifmedia_sts);
1019 		ure_add_media_types(sc);
1020 		ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_AUTO, 0, NULL);
1021 		ifmedia_set(&sc->sc_ifmedia, IFM_ETHER | IFM_AUTO);
1022 		sc->sc_ifmedia.ifm_media = IFM_ETHER | IFM_AUTO;
1023 		error = 0;
1024 	} else {
1025 		bus_topo_lock();
1026 		error = mii_attach(ue->ue_dev, &ue->ue_miibus, ifp,
1027 		    uether_ifmedia_upd, ue->ue_methods->ue_mii_sts,
1028 		    BMSR_DEFCAPMASK, sc->sc_phyno, MII_OFFSET_ANY, 0);
1029 		bus_topo_unlock();
1030 	}
1031 
1032 	sctx = device_get_sysctl_ctx(sc->sc_ue.ue_dev);
1033 	soid = device_get_sysctl_tree(sc->sc_ue.ue_dev);
1034 	SYSCTL_ADD_PROC(sctx, SYSCTL_CHILDREN(soid), OID_AUTO, "chipver",
1035 	    CTLTYPE_STRING | CTLFLAG_RD | CTLFLAG_MPSAFE, sc, 0,
1036 	    ure_sysctl_chipver, "A",
1037 	    "Return string with chip version.");
1038 
1039 	return (error);
1040 }
1041 
1042 static void
1043 ure_init(struct usb_ether *ue)
1044 {
1045 	struct ure_softc *sc = uether_getsc(ue);
1046 	struct ifnet *ifp = uether_getifp(ue);
1047 	uint16_t cpcr;
1048 	uint32_t reg;
1049 
1050 	URE_LOCK_ASSERT(sc, MA_OWNED);
1051 
1052 	if ((ifp->if_drv_flags & IFF_DRV_RUNNING) != 0)
1053 		return;
1054 
1055 	/* Cancel pending I/O. */
1056 	ure_stop(ue);
1057 
1058 	if (sc->sc_flags & (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B))
1059 		ure_rtl8153b_nic_reset(sc);
1060 	else
1061 		ure_reset(sc);
1062 
1063 	/* Set MAC address. */
1064 	ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_CONFIG);
1065 	ure_write_mem(sc, URE_PLA_IDR, URE_MCU_TYPE_PLA | URE_BYTE_EN_SIX_BYTES,
1066 	    IF_LLADDR(ifp), 8);
1067 	ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_NORAML);
1068 
1069 	/* Set RX EARLY timeout and size */
1070 	if (sc->sc_flags & URE_FLAG_8153) {
1071 		switch (usbd_get_speed(sc->sc_ue.ue_udev)) {
1072 		case USB_SPEED_SUPER:
1073 			reg = URE_COALESCE_SUPER / 8;
1074 			break;
1075 		case USB_SPEED_HIGH:
1076 			reg = URE_COALESCE_HIGH / 8;
1077 			break;
1078 		default:
1079 			reg = URE_COALESCE_SLOW / 8;
1080 			break;
1081 		}
1082 		ure_write_2(sc, URE_USB_RX_EARLY_AGG, URE_MCU_TYPE_USB, reg);
1083 		reg = URE_8153_RX_BUFSZ - (URE_FRAMELEN(if_getmtu(ifp)) +
1084 		    sizeof(struct ure_rxpkt) + URE_RXPKT_ALIGN);
1085 		ure_write_2(sc, URE_USB_RX_EARLY_SIZE, URE_MCU_TYPE_USB, reg / 4);
1086 	} else if (sc->sc_flags & URE_FLAG_8153B) {
1087 		ure_write_2(sc, URE_USB_RX_EARLY_AGG, URE_MCU_TYPE_USB, 158);
1088 		ure_write_2(sc, URE_USB_RX_EXTRA_AGG_TMR, URE_MCU_TYPE_USB, 1875);
1089 		reg = URE_8153_RX_BUFSZ - (URE_FRAMELEN(if_getmtu(ifp)) +
1090 		    sizeof(struct ure_rxpkt) + URE_RXPKT_ALIGN);
1091 		ure_write_2(sc, URE_USB_RX_EARLY_SIZE, URE_MCU_TYPE_USB, reg / 8);
1092 		ure_write_1(sc, URE_USB_UPT_RXDMA_OWN, URE_MCU_TYPE_USB,
1093 		    URE_OWN_UPDATE | URE_OWN_CLEAR);
1094 	} else if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1095 		ure_write_2(sc, URE_USB_RX_EARLY_AGG, URE_MCU_TYPE_USB, 80);
1096 		ure_write_2(sc, URE_USB_RX_EXTRA_AGG_TMR, URE_MCU_TYPE_USB, 1875);
1097 		reg = URE_8156_RX_BUFSZ - (URE_FRAMELEN(if_getmtu(ifp)) +
1098 		    sizeof(struct ure_rxpkt) + URE_RXPKT_ALIGN);
1099 		ure_write_2(sc, URE_USB_RX_EARLY_SIZE, URE_MCU_TYPE_USB, reg / 8);
1100 		ure_write_1(sc, URE_USB_UPT_RXDMA_OWN, URE_MCU_TYPE_USB,
1101 		    URE_OWN_UPDATE | URE_OWN_CLEAR);
1102 	}
1103 
1104 	if (sc->sc_flags & URE_FLAG_8156B) {
1105 		URE_CLRBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB, URE_FC_PATCH_TASK);
1106 		uether_pause(&sc->sc_ue, hz / 500);
1107 		URE_SETBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB, URE_FC_PATCH_TASK);
1108 	}
1109 
1110 	/* Reset the packet filter. */
1111 	URE_CLRBIT_2(sc, URE_PLA_FMC, URE_MCU_TYPE_PLA, URE_FMC_FCR_MCU_EN);
1112 	URE_SETBIT_2(sc, URE_PLA_FMC, URE_MCU_TYPE_PLA, URE_FMC_FCR_MCU_EN);
1113 
1114 	/* Enable RX VLANs if enabled */
1115 	cpcr = ure_read_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA);
1116 	if (if_getcapenable(ifp) & IFCAP_VLAN_HWTAGGING) {
1117 		DEVPRINTFN(12, sc->sc_ue.ue_dev, "enabled hw vlan tag\n");
1118 		cpcr |= URE_CPCR_RX_VLAN;
1119 	} else {
1120 		DEVPRINTFN(12, sc->sc_ue.ue_dev, "disabled hw vlan tag\n");
1121 		cpcr &= ~URE_CPCR_RX_VLAN;
1122 	}
1123 	ure_write_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA, cpcr);
1124 
1125 	/* Enable transmit and receive. */
1126 	URE_SETBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_RE | URE_CR_TE);
1127 
1128 	URE_CLRBIT_2(sc, URE_PLA_MISC_1, URE_MCU_TYPE_PLA, URE_RXDY_GATED_EN);
1129 
1130 	/*  Configure RX filters. */
1131 	ure_rxfilter(ue);
1132 
1133 	usbd_xfer_set_stall(sc->sc_tx_xfer[0]);
1134 
1135 	/* Indicate we are up and running. */
1136 	ifp->if_drv_flags |= IFF_DRV_RUNNING;
1137 
1138 	/* Switch to selected media. */
1139 	ure_ifmedia_upd(ifp);
1140 }
1141 
1142 static void
1143 ure_tick(struct usb_ether *ue)
1144 {
1145 	struct ure_softc *sc = uether_getsc(ue);
1146 	struct ifnet *ifp = uether_getifp(ue);
1147 	struct mii_data *mii;
1148 
1149 	URE_LOCK_ASSERT(sc, MA_OWNED);
1150 
1151 	(void)ifp;
1152 	for (int i = 0; i < URE_MAX_RX; i++)
1153 		DEVPRINTFN(13, sc->sc_ue.ue_dev,
1154 		    "rx[%d] = %d\n", i, USB_GET_STATE(sc->sc_rx_xfer[i]));
1155 
1156 	for (int i = 0; i < URE_MAX_TX; i++)
1157 		DEVPRINTFN(13, sc->sc_ue.ue_dev,
1158 		    "tx[%d] = %d\n", i, USB_GET_STATE(sc->sc_tx_xfer[i]));
1159 
1160 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1161 		ure_link_state(sc);
1162 	} else {
1163 		mii = GET_MII(sc);
1164 		mii_tick(mii);
1165 		if ((sc->sc_flags & URE_FLAG_LINK) == 0
1166 			&& mii->mii_media_status & IFM_ACTIVE &&
1167 			IFM_SUBTYPE(mii->mii_media_active) != IFM_NONE) {
1168 			sc->sc_flags |= URE_FLAG_LINK;
1169 			sc->sc_rxstarted = 0;
1170 			ure_start(ue);
1171 		}
1172 	}
1173 }
1174 
1175 static u_int
1176 ure_hash_maddr(void *arg, struct sockaddr_dl *sdl, u_int cnt)
1177 {
1178 	uint32_t h, *hashes = arg;
1179 
1180 	h = ether_crc32_be(LLADDR(sdl), ETHER_ADDR_LEN) >> 26;
1181 	if (h < 32)
1182 		hashes[0] |= (1 << h);
1183 	else
1184 		hashes[1] |= (1 << (h - 32));
1185 	return (1);
1186 }
1187 
1188 /*
1189  * Program the 64-bit multicast hash filter.
1190  */
1191 static void
1192 ure_rxfilter(struct usb_ether *ue)
1193 {
1194 	struct ure_softc *sc = uether_getsc(ue);
1195 	struct ifnet *ifp = uether_getifp(ue);
1196 	uint32_t rxmode;
1197 	uint32_t h, hashes[2] = { 0, 0 };
1198 
1199 	URE_LOCK_ASSERT(sc, MA_OWNED);
1200 
1201 	rxmode = ure_read_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA);
1202 	rxmode &= ~(URE_RCR_AAP | URE_RCR_AM);
1203 	rxmode |= URE_RCR_APM;	/* accept physical match packets */
1204 	rxmode |= URE_RCR_AB;	/* always accept broadcasts */
1205 	if (ifp->if_flags & (IFF_ALLMULTI | IFF_PROMISC)) {
1206 		if (ifp->if_flags & IFF_PROMISC)
1207 			rxmode |= URE_RCR_AAP;
1208 		rxmode |= URE_RCR_AM;
1209 		hashes[0] = hashes[1] = 0xffffffff;
1210 		goto done;
1211 	}
1212 
1213 	/* calculate multicast masks */
1214 	if_foreach_llmaddr(ifp, ure_hash_maddr, &hashes);
1215 
1216 	h = bswap32(hashes[0]);
1217 	hashes[0] = bswap32(hashes[1]);
1218 	hashes[1] = h;
1219 	rxmode |= URE_RCR_AM;	/* accept multicast packets */
1220 
1221 done:
1222 	DEVPRINTFN(14, ue->ue_dev, "rxfilt: RCR: %#x\n",
1223 	    ure_read_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA));
1224 	ure_write_4(sc, URE_PLA_MAR0, URE_MCU_TYPE_PLA, hashes[0]);
1225 	ure_write_4(sc, URE_PLA_MAR4, URE_MCU_TYPE_PLA, hashes[1]);
1226 	ure_write_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, rxmode);
1227 }
1228 
1229 static void
1230 ure_start(struct usb_ether *ue)
1231 {
1232 	struct ure_softc *sc = uether_getsc(ue);
1233 	unsigned i;
1234 
1235 	URE_LOCK_ASSERT(sc, MA_OWNED);
1236 
1237 	if (!sc->sc_rxstarted) {
1238 		sc->sc_rxstarted = 1;
1239 		for (i = 0; i != URE_MAX_RX; i++)
1240 			usbd_transfer_start(sc->sc_rx_xfer[i]);
1241 	}
1242 
1243 	for (i = 0; i != URE_MAX_TX; i++)
1244 		usbd_transfer_start(sc->sc_tx_xfer[i]);
1245 }
1246 
1247 static void
1248 ure_reset(struct ure_softc *sc)
1249 {
1250 	int i;
1251 
1252 	ure_write_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_RST);
1253 
1254 	for (i = 0; i < URE_TIMEOUT; i++) {
1255 		if (!(ure_read_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA) &
1256 		    URE_CR_RST))
1257 			break;
1258 		uether_pause(&sc->sc_ue, hz / 100);
1259 	}
1260 	if (i == URE_TIMEOUT)
1261 		device_printf(sc->sc_ue.ue_dev, "reset never completed\n");
1262 }
1263 
1264 /*
1265  * Set media options.
1266  */
1267 static int
1268 ure_ifmedia_upd(struct ifnet *ifp)
1269 {
1270 	struct ure_softc *sc = ifp->if_softc;
1271 	struct ifmedia *ifm;
1272 	struct mii_data *mii;
1273 	struct mii_softc *miisc;
1274 	int gig;
1275 	int reg;
1276 	int anar;
1277 	int locked;
1278 	int error;
1279 
1280 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1281 		ifm = &sc->sc_ifmedia;
1282 		if (IFM_TYPE(ifm->ifm_media) != IFM_ETHER)
1283 			return (EINVAL);
1284 
1285 		locked = mtx_owned(&sc->sc_mtx);
1286 		if (!locked)
1287 			URE_LOCK(sc);
1288 		reg = ure_ocp_reg_read(sc, 0xa5d4);
1289 		reg &= ~URE_ADV_2500TFDX;
1290 
1291 		anar = gig = 0;
1292 		switch (IFM_SUBTYPE(ifm->ifm_media)) {
1293 		case IFM_AUTO:
1294 			anar |= ANAR_TX_FD | ANAR_TX | ANAR_10_FD | ANAR_10;
1295 			gig |= GTCR_ADV_1000TFDX | GTCR_ADV_1000THDX;
1296 			reg |= URE_ADV_2500TFDX;
1297 			break;
1298 		case IFM_2500_T:
1299 			anar |= ANAR_TX_FD | ANAR_TX | ANAR_10_FD | ANAR_10;
1300 			gig |= GTCR_ADV_1000TFDX | GTCR_ADV_1000THDX;
1301 			reg |= URE_ADV_2500TFDX;
1302 			ifp->if_baudrate = IF_Mbps(2500);
1303 			break;
1304 		case IFM_1000_T:
1305 			anar |= ANAR_TX_FD | ANAR_TX | ANAR_10_FD | ANAR_10;
1306 			gig |= GTCR_ADV_1000TFDX | GTCR_ADV_1000THDX;
1307 			ifp->if_baudrate = IF_Gbps(1);
1308 			break;
1309 		case IFM_100_TX:
1310 			anar |= ANAR_TX | ANAR_TX_FD;
1311 			ifp->if_baudrate = IF_Mbps(100);
1312 			break;
1313 		case IFM_10_T:
1314 			anar |= ANAR_10 | ANAR_10_FD;
1315 			ifp->if_baudrate = IF_Mbps(10);
1316 			break;
1317 		default:
1318 			device_printf(sc->sc_ue.ue_dev, "unsupported media type\n");
1319 			if (!locked)
1320 				URE_UNLOCK(sc);
1321 			return (EINVAL);
1322 		}
1323 
1324 		ure_ocp_reg_write(sc, URE_OCP_BASE_MII + MII_ANAR * 2,
1325 		    anar | ANAR_PAUSE_ASYM | ANAR_FC);
1326 		ure_ocp_reg_write(sc, URE_OCP_BASE_MII + MII_100T2CR * 2, gig);
1327 		ure_ocp_reg_write(sc, 0xa5d4, reg);
1328 		ure_ocp_reg_write(sc, URE_OCP_BASE_MII + MII_BMCR,
1329 		    BMCR_AUTOEN | BMCR_STARTNEG);
1330 		if (!locked)
1331 			URE_UNLOCK(sc);
1332 		return (0);
1333 	}
1334 
1335 	mii = GET_MII(sc);
1336 
1337 	URE_LOCK_ASSERT(sc, MA_OWNED);
1338 	LIST_FOREACH(miisc, &mii->mii_phys, mii_list)
1339 		PHY_RESET(miisc);
1340 	error = mii_mediachg(mii);
1341 	return (error);
1342 }
1343 
1344 /*
1345  * Report current media status.
1346  */
1347 static void
1348 ure_ifmedia_sts(struct ifnet *ifp, struct ifmediareq *ifmr)
1349 {
1350 	struct ure_softc *sc;
1351 	struct mii_data *mii;
1352 	uint16_t status;
1353 
1354 	sc = ifp->if_softc;
1355 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1356 		URE_LOCK(sc);
1357 		ifmr->ifm_status = IFM_AVALID;
1358 		if (ure_get_link_status(sc)) {
1359 			ifmr->ifm_status |= IFM_ACTIVE;
1360 			status = ure_read_2(sc, URE_PLA_PHYSTATUS,
1361 			    URE_MCU_TYPE_PLA);
1362 			if ((status & URE_PHYSTATUS_FDX) ||
1363 			    (status & URE_PHYSTATUS_2500MBPS))
1364 				ifmr->ifm_active |= IFM_FDX;
1365 			else
1366 				ifmr->ifm_active |= IFM_HDX;
1367 			if (status & URE_PHYSTATUS_10MBPS)
1368 				ifmr->ifm_active |= IFM_10_T;
1369 			else if (status & URE_PHYSTATUS_100MBPS)
1370 				ifmr->ifm_active |= IFM_100_TX;
1371 			else if (status & URE_PHYSTATUS_1000MBPS)
1372 				ifmr->ifm_active |= IFM_1000_T;
1373 			else if (status & URE_PHYSTATUS_2500MBPS)
1374 				ifmr->ifm_active |= IFM_2500_T;
1375 		}
1376 		URE_UNLOCK(sc);
1377 		return;
1378 	}
1379 
1380 	mii = GET_MII(sc);
1381 
1382 	URE_LOCK(sc);
1383 	mii_pollstat(mii);
1384 	ifmr->ifm_active = mii->mii_media_active;
1385 	ifmr->ifm_status = mii->mii_media_status;
1386 	URE_UNLOCK(sc);
1387 }
1388 
1389 static void
1390 ure_add_media_types(struct ure_softc *sc)
1391 {
1392 	ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_10_T, 0, NULL);
1393 	ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_10_T | IFM_FDX, 0, NULL);
1394 	ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_100_TX, 0, NULL);
1395 	ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_100_TX | IFM_FDX, 0, NULL);
1396 	ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_1000_T | IFM_FDX, 0, NULL);
1397 	ifmedia_add(&sc->sc_ifmedia, IFM_ETHER | IFM_2500_T | IFM_FDX, 0, NULL);
1398 }
1399 
1400 static void
1401 ure_link_state(struct ure_softc *sc)
1402 {
1403 	struct ifnet *ifp = uether_getifp(&sc->sc_ue);
1404 
1405 	if (ure_get_link_status(sc)) {
1406 		if (ifp->if_link_state != LINK_STATE_UP) {
1407 			if_link_state_change(ifp, LINK_STATE_UP);
1408 			/* Enable transmit and receive. */
1409 			URE_SETBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_RE | URE_CR_TE);
1410 
1411 			if (ure_read_2(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA) &
1412 			    URE_PHYSTATUS_2500MBPS)
1413 				URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL4, URE_MCU_TYPE_PLA, 0x40);
1414 			else
1415 				URE_SETBIT_2(sc, URE_PLA_MAC_PWR_CTRL4, URE_MCU_TYPE_PLA, 0x40);
1416 		}
1417 	} else {
1418 		if (ifp->if_link_state != LINK_STATE_DOWN) {
1419 			if_link_state_change(ifp, LINK_STATE_DOWN);
1420 		}
1421 	}
1422 }
1423 
1424 static int
1425 ure_get_link_status(struct ure_softc *sc)
1426 {
1427 	if (ure_read_2(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA) &
1428 	    URE_PHYSTATUS_LINK) {
1429 		sc->sc_flags |= URE_FLAG_LINK;
1430 		return (1);
1431 	} else {
1432 		sc->sc_flags &= ~URE_FLAG_LINK;
1433 		return (0);
1434 	}
1435 }
1436 
1437 static int
1438 ure_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
1439 {
1440 	struct usb_ether *ue = ifp->if_softc;
1441 	struct ure_softc *sc;
1442 	struct ifreq *ifr;
1443 	int error, mask, reinit;
1444 
1445 	sc = uether_getsc(ue);
1446 	ifr = (struct ifreq *)data;
1447 	error = 0;
1448 	reinit = 0;
1449 	switch (cmd) {
1450 	case SIOCSIFCAP:
1451 		URE_LOCK(sc);
1452 		mask = ifr->ifr_reqcap ^ ifp->if_capenable;
1453 		if ((mask & IFCAP_VLAN_HWTAGGING) != 0 &&
1454 		    (ifp->if_capabilities & IFCAP_VLAN_HWTAGGING) != 0) {
1455 			ifp->if_capenable ^= IFCAP_VLAN_HWTAGGING;
1456 			reinit++;
1457 		}
1458 		if ((mask & IFCAP_TXCSUM) != 0 &&
1459 		    (ifp->if_capabilities & IFCAP_TXCSUM) != 0) {
1460 			ifp->if_capenable ^= IFCAP_TXCSUM;
1461 		}
1462 		if ((mask & IFCAP_RXCSUM) != 0 &&
1463 		    (ifp->if_capabilities & IFCAP_RXCSUM) != 0) {
1464 			ifp->if_capenable ^= IFCAP_RXCSUM;
1465 		}
1466 		if ((mask & IFCAP_TXCSUM_IPV6) != 0 &&
1467 		    (ifp->if_capabilities & IFCAP_TXCSUM_IPV6) != 0) {
1468 			ifp->if_capenable ^= IFCAP_TXCSUM_IPV6;
1469 		}
1470 		if ((mask & IFCAP_RXCSUM_IPV6) != 0 &&
1471 		    (ifp->if_capabilities & IFCAP_RXCSUM_IPV6) != 0) {
1472 			ifp->if_capenable ^= IFCAP_RXCSUM_IPV6;
1473 		}
1474 		if (reinit > 0 && ifp->if_drv_flags & IFF_DRV_RUNNING)
1475 			ifp->if_drv_flags &= ~IFF_DRV_RUNNING;
1476 		else
1477 			reinit = 0;
1478 		URE_UNLOCK(sc);
1479 		if (reinit > 0)
1480 			uether_init(ue);
1481 		break;
1482 
1483 	case SIOCSIFMTU:
1484 		/*
1485 		 * in testing large MTUs "crashes" the device, it
1486 		 * leaves the device w/ a broken state where link
1487 		 * is in a bad state.
1488 		 */
1489 		if (ifr->ifr_mtu < ETHERMIN ||
1490 		    ifr->ifr_mtu > (4096 - ETHER_HDR_LEN -
1491 		    ETHER_VLAN_ENCAP_LEN - ETHER_CRC_LEN)) {
1492 			error = EINVAL;
1493 			break;
1494 		}
1495 		URE_LOCK(sc);
1496 		if (if_getmtu(ifp) != ifr->ifr_mtu)
1497 			if_setmtu(ifp, ifr->ifr_mtu);
1498 		URE_UNLOCK(sc);
1499 		break;
1500 
1501 	case SIOCGIFMEDIA:
1502 	case SIOCSIFMEDIA:
1503 		if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B))
1504 			error = ifmedia_ioctl(ifp, ifr, &sc->sc_ifmedia, cmd);
1505 		else
1506 			error = uether_ioctl(ifp, cmd, data);
1507 		break;
1508 
1509 	default:
1510 		error = uether_ioctl(ifp, cmd, data);
1511 		break;
1512 	}
1513 
1514 	return (error);
1515 }
1516 
1517 static void
1518 ure_rtl8152_init(struct ure_softc *sc)
1519 {
1520 	uint32_t pwrctrl;
1521 
1522 	ure_enable_aldps(sc, false);
1523 
1524 	if (sc->sc_chip & URE_CHIP_VER_4C00) {
1525 		URE_CLRBIT_2(sc, URE_PLA_LED_FEATURE, URE_MCU_TYPE_PLA, URE_LED_MODE_MASK);
1526 	}
1527 
1528 	URE_CLRBIT_2(sc, URE_USB_UPS_CTRL, URE_MCU_TYPE_USB, URE_POWER_CUT);
1529 
1530 	URE_CLRBIT_2(sc, URE_USB_PM_CTRL_STATUS, URE_MCU_TYPE_USB, URE_RESUME_INDICATE);
1531 
1532 	URE_SETBIT_2(sc, URE_PLA_PHY_PWR, URE_MCU_TYPE_PLA, URE_TX_10M_IDLE_EN | URE_PFM_PWM_SWITCH);
1533 
1534 	pwrctrl = ure_read_4(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA);
1535 	pwrctrl &= ~URE_MCU_CLK_RATIO_MASK;
1536 	pwrctrl |= URE_MCU_CLK_RATIO | URE_D3_CLK_GATED_EN;
1537 	ure_write_4(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA, pwrctrl);
1538 	ure_write_2(sc, URE_PLA_GPHY_INTR_IMR, URE_MCU_TYPE_PLA,
1539 	    URE_GPHY_STS_MSK | URE_SPEED_DOWN_MSK | URE_SPDWN_RXDV_MSK |
1540 	    URE_SPDWN_LINKCHG_MSK);
1541 
1542 	/* Enable Rx aggregation. */
1543 	URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB, URE_RX_AGG_DISABLE | URE_RX_ZERO_EN);
1544 
1545 	ure_enable_aldps(sc, false);
1546 
1547 	ure_rtl8152_nic_reset(sc);
1548 
1549 	ure_write_1(sc, URE_USB_TX_AGG, URE_MCU_TYPE_USB,
1550 	    URE_TX_AGG_MAX_THRESHOLD);
1551 	ure_write_4(sc, URE_USB_RX_BUF_TH, URE_MCU_TYPE_USB, URE_RX_THR_HIGH);
1552 	ure_write_4(sc, URE_USB_TX_DMA, URE_MCU_TYPE_USB,
1553 	    URE_TEST_MODE_DISABLE | URE_TX_SIZE_ADJUST1);
1554 }
1555 
1556 static void
1557 ure_rtl8153_init(struct ure_softc *sc)
1558 {
1559 	uint16_t val;
1560 	uint8_t u1u2[8];
1561 	int i;
1562 
1563 	ure_enable_aldps(sc, false);
1564 
1565 	memset(u1u2, 0x00, sizeof(u1u2));
1566 	ure_write_mem(sc, URE_USB_TOLERANCE,
1567 	    URE_MCU_TYPE_USB | URE_BYTE_EN_SIX_BYTES, u1u2, sizeof(u1u2));
1568 
1569 	for (i = 0; i < URE_TIMEOUT; i++) {
1570 		if (ure_read_2(sc, URE_PLA_BOOT_CTRL, URE_MCU_TYPE_PLA) &
1571 		    URE_AUTOLOAD_DONE)
1572 			break;
1573 		uether_pause(&sc->sc_ue, hz / 100);
1574 	}
1575 	if (i == URE_TIMEOUT)
1576 		device_printf(sc->sc_ue.ue_dev,
1577 		    "timeout waiting for chip autoload\n");
1578 
1579 	for (i = 0; i < URE_TIMEOUT; i++) {
1580 		val = ure_ocp_reg_read(sc, URE_OCP_PHY_STATUS) &
1581 		    URE_PHY_STAT_MASK;
1582 		if (val == URE_PHY_STAT_LAN_ON || val == URE_PHY_STAT_PWRDN)
1583 			break;
1584 		uether_pause(&sc->sc_ue, hz / 100);
1585 	}
1586 	if (i == URE_TIMEOUT)
1587 		device_printf(sc->sc_ue.ue_dev,
1588 		    "timeout waiting for phy to stabilize\n");
1589 
1590 	URE_CLRBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);
1591 
1592 	if (sc->sc_chip & URE_CHIP_VER_5C10) {
1593 		val = ure_read_2(sc, URE_USB_SSPHYLINK2, URE_MCU_TYPE_USB);
1594 		val &= ~URE_PWD_DN_SCALE_MASK;
1595 		val |= URE_PWD_DN_SCALE(96);
1596 		ure_write_2(sc, URE_USB_SSPHYLINK2, URE_MCU_TYPE_USB, val);
1597 
1598 		URE_SETBIT_1(sc, URE_USB_USB2PHY, URE_MCU_TYPE_USB, URE_USB2PHY_L1 | URE_USB2PHY_SUSPEND);
1599 	} else if (sc->sc_chip & URE_CHIP_VER_5C20)
1600 		URE_CLRBIT_1(sc, URE_PLA_DMY_REG0, URE_MCU_TYPE_PLA, URE_ECM_ALDPS);
1601 
1602 	if (sc->sc_chip & (URE_CHIP_VER_5C20 | URE_CHIP_VER_5C30)) {
1603 		val = ure_read_1(sc, URE_USB_CSR_DUMMY1, URE_MCU_TYPE_USB);
1604 		if (ure_read_2(sc, URE_USB_BURST_SIZE, URE_MCU_TYPE_USB) ==
1605 		    0)
1606 			val &= ~URE_DYNAMIC_BURST;
1607 		else
1608 			val |= URE_DYNAMIC_BURST;
1609 		ure_write_1(sc, URE_USB_CSR_DUMMY1, URE_MCU_TYPE_USB, val);
1610 	}
1611 
1612 	URE_SETBIT_1(sc, URE_USB_CSR_DUMMY2, URE_MCU_TYPE_USB, URE_EP4_FULL_FC);
1613 
1614 	URE_CLRBIT_2(sc, URE_USB_WDT11_CTRL, URE_MCU_TYPE_USB, URE_TIMER11_EN);
1615 
1616 	URE_CLRBIT_2(sc, URE_PLA_LED_FEATURE, URE_MCU_TYPE_PLA, URE_LED_MODE_MASK);
1617 
1618 	if ((sc->sc_chip & URE_CHIP_VER_5C10) &&
1619 	    usbd_get_speed(sc->sc_ue.ue_udev) != USB_SPEED_SUPER)
1620 		val = URE_LPM_TIMER_500MS;
1621 	else
1622 		val = URE_LPM_TIMER_500US;
1623 	ure_write_1(sc, URE_USB_LPM_CTRL, URE_MCU_TYPE_USB,
1624 	    val | URE_FIFO_EMPTY_1FB | URE_ROK_EXIT_LPM);
1625 
1626 	val = ure_read_2(sc, URE_USB_AFE_CTRL2, URE_MCU_TYPE_USB);
1627 	val &= ~URE_SEN_VAL_MASK;
1628 	val |= URE_SEN_VAL_NORMAL | URE_SEL_RXIDLE;
1629 	ure_write_2(sc, URE_USB_AFE_CTRL2, URE_MCU_TYPE_USB, val);
1630 
1631 	ure_write_2(sc, URE_USB_CONNECT_TIMER, URE_MCU_TYPE_USB, 0x0001);
1632 
1633 	URE_CLRBIT_2(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB, URE_PWR_EN | URE_PHASE2_EN);
1634 
1635 	URE_CLRBIT_2(sc, URE_USB_MISC_0, URE_MCU_TYPE_USB, URE_PCUT_STATUS);
1636 
1637 	memset(u1u2, 0xff, sizeof(u1u2));
1638 	ure_write_mem(sc, URE_USB_TOLERANCE,
1639 	    URE_MCU_TYPE_USB | URE_BYTE_EN_SIX_BYTES, u1u2, sizeof(u1u2));
1640 
1641 	ure_write_2(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA,
1642 	    URE_ALDPS_SPDWN_RATIO);
1643 	ure_write_2(sc, URE_PLA_MAC_PWR_CTRL2, URE_MCU_TYPE_PLA,
1644 	    URE_EEE_SPDWN_RATIO);
1645 	ure_write_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA,
1646 	    URE_PKT_AVAIL_SPDWN_EN | URE_SUSPEND_SPDWN_EN |
1647 	    URE_U1U2_SPDWN_EN | URE_L1_SPDWN_EN);
1648 	ure_write_2(sc, URE_PLA_MAC_PWR_CTRL4, URE_MCU_TYPE_PLA,
1649 	    URE_PWRSAVE_SPDWN_EN | URE_RXDV_SPDWN_EN | URE_TX10MIDLE_EN |
1650 	    URE_TP100_SPDWN_EN | URE_TP500_SPDWN_EN | URE_TP1000_SPDWN_EN |
1651 	    URE_EEE_SPDWN_EN);
1652 
1653 	val = ure_read_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB);
1654 	if (!(sc->sc_chip & (URE_CHIP_VER_5C00 | URE_CHIP_VER_5C10)))
1655 		val |= URE_U2P3_ENABLE;
1656 	else
1657 		val &= ~URE_U2P3_ENABLE;
1658 	ure_write_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, val);
1659 
1660 	memset(u1u2, 0x00, sizeof(u1u2));
1661 	ure_write_mem(sc, URE_USB_TOLERANCE,
1662 	    URE_MCU_TYPE_USB | URE_BYTE_EN_SIX_BYTES, u1u2, sizeof(u1u2));
1663 
1664 	ure_enable_aldps(sc, false);
1665 
1666 	if (sc->sc_chip & (URE_CHIP_VER_5C00 | URE_CHIP_VER_5C10 |
1667 	    URE_CHIP_VER_5C20)) {
1668 		ure_ocp_reg_write(sc, URE_OCP_ADC_CFG,
1669 		    URE_CKADSEL_L | URE_ADC_EN | URE_EN_EMI_L);
1670 	}
1671 	if (sc->sc_chip & URE_CHIP_VER_5C00) {
1672 		ure_ocp_reg_write(sc, URE_OCP_EEE_CFG,
1673 		    ure_ocp_reg_read(sc, URE_OCP_EEE_CFG) &
1674 		    ~URE_CTAP_SHORT_EN);
1675 	}
1676 	ure_ocp_reg_write(sc, URE_OCP_POWER_CFG,
1677 	    ure_ocp_reg_read(sc, URE_OCP_POWER_CFG) |
1678 	    URE_EEE_CLKDIV_EN);
1679 	ure_ocp_reg_write(sc, URE_OCP_DOWN_SPEED,
1680 	    ure_ocp_reg_read(sc, URE_OCP_DOWN_SPEED) |
1681 	    URE_EN_10M_BGOFF);
1682 	ure_ocp_reg_write(sc, URE_OCP_POWER_CFG,
1683 	    ure_ocp_reg_read(sc, URE_OCP_POWER_CFG) |
1684 	    URE_EN_10M_PLLOFF);
1685 	ure_sram_write(sc, URE_SRAM_IMPEDANCE, 0x0b13);
1686 	URE_SETBIT_2(sc, URE_PLA_PHY_PWR, URE_MCU_TYPE_PLA, URE_PFM_PWM_SWITCH);
1687 
1688 	/* Enable LPF corner auto tune. */
1689 	ure_sram_write(sc, URE_SRAM_LPF_CFG, 0xf70f);
1690 
1691 	/* Adjust 10M amplitude. */
1692 	ure_sram_write(sc, URE_SRAM_10M_AMP1, 0x00af);
1693 	ure_sram_write(sc, URE_SRAM_10M_AMP2, 0x0208);
1694 
1695 	ure_rtl8152_nic_reset(sc);
1696 
1697 	/* Enable Rx aggregation. */
1698 	URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB, URE_RX_AGG_DISABLE | URE_RX_ZERO_EN);
1699 
1700 	val = ure_read_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB);
1701 	if (!(sc->sc_chip & (URE_CHIP_VER_5C00 | URE_CHIP_VER_5C10)))
1702 		val |= URE_U2P3_ENABLE;
1703 	else
1704 		val &= ~URE_U2P3_ENABLE;
1705 	ure_write_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, val);
1706 
1707 	memset(u1u2, 0xff, sizeof(u1u2));
1708 	ure_write_mem(sc, URE_USB_TOLERANCE,
1709 	    URE_MCU_TYPE_USB | URE_BYTE_EN_SIX_BYTES, u1u2, sizeof(u1u2));
1710 }
1711 
1712 static void
1713 ure_rtl8153b_init(struct ure_softc *sc)
1714 {
1715 	uint16_t val;
1716 	int i;
1717 
1718 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1719 		URE_CLRBIT_1(sc, 0xd26b, URE_MCU_TYPE_USB, 0x01);
1720 		ure_write_2(sc, 0xd32a, URE_MCU_TYPE_USB, 0);
1721 		URE_SETBIT_2(sc, 0xcfee, URE_MCU_TYPE_USB, 0x0020);
1722 	}
1723 
1724 	if (sc->sc_flags & URE_FLAG_8156B) {
1725 		URE_SETBIT_2(sc, 0xb460, URE_MCU_TYPE_USB, 0x08);
1726 	}
1727 
1728 	ure_enable_aldps(sc, false);
1729 
1730 	/* Disable U1U2 */
1731 	URE_CLRBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB, URE_LPM_U1U2_EN);
1732 
1733 	/* Wait loading flash */
1734 	if (sc->sc_chip == URE_CHIP_VER_7410) {
1735 		if ((ure_read_2(sc, 0xd3ae, URE_MCU_TYPE_PLA) & 0x0002) &&
1736 		    !(ure_read_2(sc, 0xd284, URE_MCU_TYPE_USB) & 0x0020)) {
1737 			for (i=0; i < 100; i++) {
1738 				if (ure_read_2(sc, 0xd284, URE_MCU_TYPE_USB) & 0x0004)
1739 					break;
1740 				uether_pause(&sc->sc_ue, hz / 1000);
1741 			}
1742 		}
1743 	}
1744 
1745 	for (i = 0; i < URE_TIMEOUT; i++) {
1746 		if (ure_read_2(sc, URE_PLA_BOOT_CTRL, URE_MCU_TYPE_PLA) &
1747 		    URE_AUTOLOAD_DONE)
1748 			break;
1749 		uether_pause(&sc->sc_ue, hz / 100);
1750 	}
1751 	if (i == URE_TIMEOUT)
1752 		device_printf(sc->sc_ue.ue_dev,
1753 		    "timeout waiting for chip autoload\n");
1754 
1755 	val = ure_phy_status(sc, 0);
1756 	if ((val == URE_PHY_STAT_EXT_INIT) &
1757 	    (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B))) {
1758 		ure_ocp_reg_write(sc, 0xa468,
1759 		    ure_ocp_reg_read(sc, 0xa468) & ~0x0a);
1760 		if (sc->sc_flags & URE_FLAG_8156B)
1761 			ure_ocp_reg_write(sc, 0xa466,
1762 				ure_ocp_reg_read(sc, 0xa466) & ~0x01);
1763 	}
1764 
1765 	val = ure_ocp_reg_read(sc, URE_OCP_BASE_MII + MII_BMCR);
1766 	if (val & BMCR_PDOWN) {
1767 		val &= ~BMCR_PDOWN;
1768 		ure_ocp_reg_write(sc, URE_OCP_BASE_MII + MII_BMCR, val);
1769 	}
1770 
1771 	ure_phy_status(sc, URE_PHY_STAT_LAN_ON);
1772 
1773 	/* Disable U2P3 */
1774 	URE_CLRBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);
1775 
1776 	/* MSC timer, 32760 ms. */
1777 	ure_write_2(sc, URE_USB_MSC_TIMER, URE_MCU_TYPE_USB, 0x0fff);
1778 
1779 	/* U1/U2/L1 idle timer, 500 us. */
1780 	ure_write_2(sc, URE_USB_U1U2_TIMER, URE_MCU_TYPE_USB, 500);
1781 
1782 	/* Disable power cut */
1783 	URE_CLRBIT_2(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB, URE_PWR_EN);
1784 	URE_CLRBIT_2(sc, URE_USB_MISC_0, URE_MCU_TYPE_USB, URE_PCUT_STATUS);
1785 
1786 	/* Disable ups */
1787 	URE_CLRBIT_1(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB, URE_UPS_EN | URE_USP_PREWAKE);
1788 	URE_CLRBIT_1(sc, 0xcfff, URE_MCU_TYPE_USB, 0x01);
1789 
1790 	/* Disable queue wake */
1791 	URE_CLRBIT_1(sc, URE_PLA_INDICATE_FALG, URE_MCU_TYPE_USB, URE_UPCOMING_RUNTIME_D3);
1792 	URE_CLRBIT_1(sc, URE_PLA_SUSPEND_FLAG, URE_MCU_TYPE_USB, URE_LINK_CHG_EVENT);
1793 	URE_CLRBIT_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_USB, URE_LINK_CHANGE_FLAG);
1794 
1795 	/* Disable runtime suspend */
1796 	ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_CONFIG);
1797 	URE_CLRBIT_2(sc, URE_PLA_CONFIG34, URE_MCU_TYPE_USB, URE_LINK_OFF_WAKE_EN);
1798 	ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_NORAML);
1799 
1800 	/* Enable U1U2 */
1801 	if (usbd_get_speed(sc->sc_ue.ue_udev) == USB_SPEED_SUPER)
1802 		URE_SETBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB, URE_LPM_U1U2_EN);
1803 
1804 	if (sc->sc_flags & URE_FLAG_8156B) {
1805 		URE_CLRBIT_2(sc, 0xc010, URE_MCU_TYPE_PLA, 0x0800);
1806 		URE_SETBIT_2(sc, 0xe854, URE_MCU_TYPE_PLA, 0x0001);
1807 
1808 		/* enable fc timer and set timer to 600 ms. */
1809 		ure_write_2(sc, URE_USB_FC_TIMER, URE_MCU_TYPE_USB, URE_CTRL_TIMER_EN | (600 / 8));
1810 
1811 		if (!(ure_read_1(sc, 0xdc6b, URE_MCU_TYPE_PLA) & 0x80)) {
1812 			val = ure_read_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB);
1813 			val |= URE_FLOW_CTRL_PATCH_OPT | 0x0100;
1814 			val &= ~0x08;
1815 			ure_write_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB, val);
1816 		}
1817 
1818 		URE_SETBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB, URE_FC_PATCH_TASK);
1819 	}
1820 
1821 	val = ure_read_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA);
1822 	if (ure_get_link_status(sc))
1823 		val |= URE_CUR_LINK_OK;
1824 	else
1825 		val &= ~URE_CUR_LINK_OK;
1826 	val |= URE_POLL_LINK_CHG;
1827 	ure_write_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA, val);
1828 
1829 	/* MAC clock speed down */
1830 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1831 		ure_write_2(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA, 0x0403);
1832 		val = ure_read_2(sc, URE_PLA_MAC_PWR_CTRL2, URE_MCU_TYPE_PLA);
1833 		val &= ~0xff;
1834 		val |= URE_MAC_CLK_SPDWN_EN | 0x03;
1835 		ure_write_2(sc, URE_PLA_MAC_PWR_CTRL2, URE_MCU_TYPE_PLA, val);
1836 	} else {
1837 		URE_SETBIT_2(sc, URE_PLA_MAC_PWR_CTRL2, URE_MCU_TYPE_USB, URE_MAC_CLK_SPDWN_EN);
1838 	}
1839 	URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA, URE_PLA_MCU_SPDWN_EN);
1840 
1841 	/* Enable Rx aggregation. */
1842 	URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB, URE_RX_AGG_DISABLE | URE_RX_ZERO_EN);
1843 
1844 	if (sc->sc_flags & URE_FLAG_8156)
1845 		URE_SETBIT_1(sc, 0xd4b4, URE_MCU_TYPE_USB, 0x02);
1846 
1847 	/* Reset tally */
1848 	URE_SETBIT_2(sc, URE_PLA_RSTTALLY, URE_MCU_TYPE_USB, URE_TALLY_RESET);
1849 }
1850 
1851 static void
1852 ure_rtl8153b_nic_reset(struct ure_softc *sc)
1853 {
1854 	struct ifnet *ifp = uether_getifp(&sc->sc_ue);
1855 	uint16_t val;
1856 	int i;
1857 
1858 	/* Disable U1U2 */
1859 	URE_CLRBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB, URE_LPM_U1U2_EN);
1860 
1861 	/* Disable U2P3 */
1862 	URE_CLRBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);
1863 
1864 	ure_enable_aldps(sc, false);
1865 
1866 	/* Enable rxdy_gated */
1867 	URE_SETBIT_2(sc, URE_PLA_MISC_1, URE_MCU_TYPE_PLA, URE_RXDY_GATED_EN);
1868 
1869 	/* Disable teredo */
1870 	ure_disable_teredo(sc);
1871 
1872 	DEVPRINTFN(14, sc->sc_ue.ue_dev, "rtl8153b_nic_reset: RCR: %#x\n", ure_read_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA));
1873 	URE_CLRBIT_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, URE_RCR_ACPT_ALL);
1874 
1875 	ure_reset(sc);
1876 
1877 	/* Reset BMU */
1878 	URE_CLRBIT_1(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB, URE_BMU_RESET_EP_IN | URE_BMU_RESET_EP_OUT);
1879 	URE_SETBIT_1(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB, URE_BMU_RESET_EP_IN | URE_BMU_RESET_EP_OUT);
1880 
1881 	URE_CLRBIT_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA, URE_NOW_IS_OOB);
1882 	URE_CLRBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_MCU_BORW_EN);
1883 	if (sc->sc_flags & URE_FLAG_8153B) {
1884 		for (i = 0; i < URE_TIMEOUT; i++) {
1885 			if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
1886 			    URE_LINK_LIST_READY)
1887 				break;
1888 			uether_pause(&sc->sc_ue, hz / 100);
1889 		}
1890 		if (i == URE_TIMEOUT)
1891 			device_printf(sc->sc_ue.ue_dev,
1892 			    "timeout waiting for OOB control\n");
1893 
1894 		URE_SETBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_RE_INIT_LL);
1895 		for (i = 0; i < URE_TIMEOUT; i++) {
1896 			if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
1897 			    URE_LINK_LIST_READY)
1898 			break;
1899 			uether_pause(&sc->sc_ue, hz / 100);
1900 		}
1901 		if (i == URE_TIMEOUT)
1902 			device_printf(sc->sc_ue.ue_dev,
1903 			    "timeout waiting for OOB control\n");
1904 	}
1905 
1906 	/* Configure rxvlan */
1907 	val = ure_read_2(sc, 0xc012, URE_MCU_TYPE_PLA);
1908 	val &= ~0x00c0;
1909 	if (ifp->if_capabilities & IFCAP_VLAN_HWTAGGING)
1910 		val |= 0x00c0;
1911 	ure_write_2(sc, 0xc012, URE_MCU_TYPE_PLA, val);
1912 
1913 	val = if_getmtu(ifp);
1914 	ure_write_2(sc, URE_PLA_RMS, URE_MCU_TYPE_PLA, URE_FRAMELEN(val));
1915 	ure_write_1(sc, URE_PLA_MTPS, URE_MCU_TYPE_PLA, URE_MTPS_JUMBO);
1916 
1917 	if (sc->sc_flags & URE_FLAG_8153B) {
1918 		URE_SETBIT_2(sc, URE_PLA_TCR0, URE_MCU_TYPE_PLA, URE_TCR0_AUTO_FIFO);
1919 		ure_reset(sc);
1920 	}
1921 
1922 	/* Configure fc parameter */
1923 	if (sc->sc_flags & URE_FLAG_8156) {
1924 		ure_write_2(sc, 0xc0a6, URE_MCU_TYPE_PLA, 0x0400);
1925 		ure_write_2(sc, 0xc0aa, URE_MCU_TYPE_PLA, 0x0800);
1926 	} else if (sc->sc_flags & URE_FLAG_8156B) {
1927 		ure_write_2(sc, 0xc0a6, URE_MCU_TYPE_PLA, 0x0200);
1928 		ure_write_2(sc, 0xc0aa, URE_MCU_TYPE_PLA, 0x0400);
1929 	}
1930 
1931 	/* Configure Rx FIFO threshold. */
1932 	if (sc->sc_flags & URE_FLAG_8153B) {
1933 		ure_write_4(sc, URE_PLA_RXFIFO_CTRL0, URE_MCU_TYPE_PLA,	URE_RXFIFO_THR1_NORMAL);
1934 		ure_write_2(sc, URE_PLA_RXFIFO_CTRL1, URE_MCU_TYPE_PLA, URE_RXFIFO_THR2_NORMAL);
1935 		ure_write_2(sc, URE_PLA_RXFIFO_CTRL2, URE_MCU_TYPE_PLA, URE_RXFIFO_THR3_NORMAL);
1936 		ure_write_4(sc, URE_USB_RX_BUF_TH, URE_MCU_TYPE_USB, URE_RX_THR_B);
1937 	} else {
1938 		ure_write_2(sc, 0xc0a2, URE_MCU_TYPE_PLA,
1939 		    (ure_read_2(sc, 0xc0a2, URE_MCU_TYPE_PLA) & ~0xfff) | 0x08);
1940 		ure_write_4(sc, URE_USB_RX_BUF_TH, URE_MCU_TYPE_USB, 0x00600400);
1941 	}
1942 
1943 	/* Configure Tx FIFO threshold. */
1944 	if (sc->sc_flags & URE_FLAG_8153B) {
1945 		ure_write_4(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA, URE_TXFIFO_THR_NORMAL2);
1946 	} else if (sc->sc_flags & URE_FLAG_8156) {
1947 		ure_write_2(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA, URE_TXFIFO_THR_NORMAL2);
1948 		URE_SETBIT_2(sc, 0xd4b4, URE_MCU_TYPE_USB, 0x0002);
1949 	} else if (sc->sc_flags & URE_FLAG_8156B) {
1950 		ure_write_2(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA, 0x0008);
1951 		ure_write_2(sc, 0xe61a, URE_MCU_TYPE_PLA,
1952 		    (URE_FRAMELEN(val) + 0x100) / 16 );
1953 	}
1954 
1955 	URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA, URE_PLA_MCU_SPDWN_EN);
1956 
1957 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B))
1958 		URE_CLRBIT_2(sc, 0xd32a, URE_MCU_TYPE_USB, 0x300);
1959 
1960 	ure_enable_aldps(sc, true);
1961 
1962 	if (sc->sc_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
1963 		/* Enable U2P3 */
1964 		URE_SETBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);
1965 	}
1966 
1967 	/* Enable U1U2 */
1968 	if (usbd_get_speed(sc->sc_ue.ue_udev) == USB_SPEED_SUPER)
1969 		URE_SETBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB, URE_LPM_U1U2_EN);
1970 }
1971 
1972 static void
1973 ure_stop(struct usb_ether *ue)
1974 {
1975 	struct ure_softc *sc = uether_getsc(ue);
1976 	struct ifnet *ifp = uether_getifp(ue);
1977 
1978 	URE_LOCK_ASSERT(sc, MA_OWNED);
1979 
1980 	ifp->if_drv_flags &= ~(IFF_DRV_RUNNING | IFF_DRV_OACTIVE);
1981 	sc->sc_flags &= ~URE_FLAG_LINK;
1982 	sc->sc_rxstarted = 0;
1983 
1984 	/*
1985 	 * stop all the transfers, if not already stopped:
1986 	 */
1987 	for (int i = 0; i < URE_MAX_RX; i++)
1988 		usbd_transfer_stop(sc->sc_rx_xfer[i]);
1989 	for (int i = 0; i < URE_MAX_TX; i++)
1990 		usbd_transfer_stop(sc->sc_tx_xfer[i]);
1991 }
1992 
1993 static void
1994 ure_disable_teredo(struct ure_softc *sc)
1995 {
1996 
1997 	if (sc->sc_flags & (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B))
1998 		ure_write_1(sc, URE_PLA_TEREDO_CFG, URE_MCU_TYPE_PLA, 0xff);
1999 	else {
2000 		URE_CLRBIT_2(sc, URE_PLA_TEREDO_CFG, URE_MCU_TYPE_PLA,
2001 		    (URE_TEREDO_SEL | URE_TEREDO_RS_EVENT_MASK | URE_OOB_TEREDO_EN));
2002 	}
2003 	ure_write_2(sc, URE_PLA_WDT6_CTRL, URE_MCU_TYPE_PLA, URE_WDT6_SET_MODE);
2004 	ure_write_2(sc, URE_PLA_REALWOW_TIMER, URE_MCU_TYPE_PLA, 0);
2005 	ure_write_4(sc, URE_PLA_TEREDO_TIMER, URE_MCU_TYPE_PLA, 0);
2006 }
2007 
2008 static void
2009 ure_enable_aldps(struct ure_softc *sc, bool enable)
2010 {
2011 	int i;
2012 
2013 	if (enable) {
2014 		ure_ocp_reg_write(sc, URE_OCP_POWER_CFG,
2015 			ure_ocp_reg_read(sc, URE_OCP_POWER_CFG) | URE_EN_ALDPS);
2016 	} else {
2017 		ure_ocp_reg_write(sc, URE_OCP_ALDPS_CONFIG, URE_ENPDNPS | URE_LINKENA |
2018 			URE_DIS_SDSAVE);
2019 		for (i = 0; i < 20; i++) {
2020 			uether_pause(&sc->sc_ue, hz / 1000);
2021 			if (ure_ocp_reg_read(sc, 0xe000) & 0x0100)
2022 				break;
2023 		}
2024 	}
2025 }
2026 
2027 static uint16_t
2028 ure_phy_status(struct ure_softc *sc, uint16_t desired)
2029 {
2030 	uint16_t val;
2031 	int i;
2032 
2033 	for (i = 0; i < URE_TIMEOUT; i++) {
2034 		val = ure_ocp_reg_read(sc, URE_OCP_PHY_STATUS) &
2035 		    URE_PHY_STAT_MASK;
2036 		if (desired) {
2037 			if (val == desired)
2038 				break;
2039 		} else {
2040 			if (val == URE_PHY_STAT_LAN_ON ||
2041 				val == URE_PHY_STAT_PWRDN ||
2042 			    val == URE_PHY_STAT_EXT_INIT)
2043 				break;
2044 		}
2045 		uether_pause(&sc->sc_ue, hz / 100);
2046 	}
2047 	if (i == URE_TIMEOUT)
2048 		device_printf(sc->sc_ue.ue_dev,
2049 		    "timeout waiting for phy to stabilize\n");
2050 
2051 	return (val);
2052 }
2053 
2054 static void
2055 ure_rtl8152_nic_reset(struct ure_softc *sc)
2056 {
2057 	uint32_t rx_fifo1, rx_fifo2;
2058 	int i;
2059 
2060 	URE_SETBIT_2(sc, URE_PLA_MISC_1, URE_MCU_TYPE_PLA, URE_RXDY_GATED_EN);
2061 
2062 	ure_disable_teredo(sc);
2063 
2064 	DEVPRINTFN(14, sc->sc_ue.ue_dev, "rtl8152_nic_reset: RCR: %#x\n", ure_read_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA));
2065 	URE_CLRBIT_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, URE_RCR_ACPT_ALL);
2066 
2067 	ure_reset(sc);
2068 
2069 	ure_write_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, 0);
2070 
2071 	URE_CLRBIT_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA, URE_NOW_IS_OOB);
2072 
2073 	URE_CLRBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_MCU_BORW_EN);
2074 	for (i = 0; i < URE_TIMEOUT; i++) {
2075 		if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
2076 		    URE_LINK_LIST_READY)
2077 			break;
2078 		uether_pause(&sc->sc_ue, hz / 100);
2079 	}
2080 	if (i == URE_TIMEOUT)
2081 		device_printf(sc->sc_ue.ue_dev,
2082 		    "timeout waiting for OOB control\n");
2083 	URE_SETBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_RE_INIT_LL);
2084 	for (i = 0; i < URE_TIMEOUT; i++) {
2085 		if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
2086 		    URE_LINK_LIST_READY)
2087 			break;
2088 		uether_pause(&sc->sc_ue, hz / 100);
2089 	}
2090 	if (i == URE_TIMEOUT)
2091 		device_printf(sc->sc_ue.ue_dev,
2092 		    "timeout waiting for OOB control\n");
2093 
2094 	URE_CLRBIT_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA, URE_CPCR_RX_VLAN);
2095 
2096 	URE_SETBIT_2(sc, URE_PLA_TCR0, URE_MCU_TYPE_PLA, URE_TCR0_AUTO_FIFO);
2097 
2098 	/* Configure Rx FIFO threshold. */
2099 	ure_write_4(sc, URE_PLA_RXFIFO_CTRL0, URE_MCU_TYPE_PLA,
2100 	    URE_RXFIFO_THR1_NORMAL);
2101 	if (usbd_get_speed(sc->sc_ue.ue_udev) == USB_SPEED_FULL) {
2102 		rx_fifo1 = URE_RXFIFO_THR2_FULL;
2103 		rx_fifo2 = URE_RXFIFO_THR3_FULL;
2104 	} else {
2105 		rx_fifo1 = URE_RXFIFO_THR2_HIGH;
2106 		rx_fifo2 = URE_RXFIFO_THR3_HIGH;
2107 	}
2108 	ure_write_4(sc, URE_PLA_RXFIFO_CTRL1, URE_MCU_TYPE_PLA, rx_fifo1);
2109 	ure_write_4(sc, URE_PLA_RXFIFO_CTRL2, URE_MCU_TYPE_PLA, rx_fifo2);
2110 
2111 	/* Configure Tx FIFO threshold. */
2112 	ure_write_4(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA,
2113 	    URE_TXFIFO_THR_NORMAL);
2114 }
2115 
2116 /*
2117  * Update mbuf for rx checksum from hardware
2118  */
2119 static void
2120 ure_rxcsum(int capenb, struct ure_rxpkt *rp, struct mbuf *m)
2121 {
2122 	int flags;
2123 	uint32_t csum, misc;
2124 	int tcp, udp;
2125 
2126 	m->m_pkthdr.csum_flags = 0;
2127 
2128 	if (!(capenb & IFCAP_RXCSUM))
2129 		return;
2130 
2131 	csum = le32toh(rp->ure_csum);
2132 	misc = le32toh(rp->ure_misc);
2133 
2134 	tcp = udp = 0;
2135 
2136 	flags = 0;
2137 	if (csum & URE_RXPKT_IPV4_CS)
2138 		flags |= CSUM_IP_CHECKED;
2139 	else if (csum & URE_RXPKT_IPV6_CS)
2140 		flags = 0;
2141 
2142 	tcp = rp->ure_csum & URE_RXPKT_TCP_CS;
2143 	udp = rp->ure_csum & URE_RXPKT_UDP_CS;
2144 
2145 	if (__predict_true((flags & CSUM_IP_CHECKED) &&
2146 	    !(misc & URE_RXPKT_IP_F))) {
2147 		flags |= CSUM_IP_VALID;
2148 	}
2149 	if (__predict_true(
2150 	    (tcp && !(misc & URE_RXPKT_TCP_F)) ||
2151 	    (udp && !(misc & URE_RXPKT_UDP_F)))) {
2152 		flags |= CSUM_DATA_VALID|CSUM_PSEUDO_HDR;
2153 		m->m_pkthdr.csum_data = 0xFFFF;
2154 	}
2155 
2156 	m->m_pkthdr.csum_flags = flags;
2157 }
2158 
2159 /*
2160  * If the L4 checksum offset is larger than 0x7ff (2047), return failure.
2161  * We currently restrict MTU such that it can't happen, and even if we
2162  * did have a large enough MTU, only a very specially crafted IPv6 packet
2163  * with MANY headers could possibly come close.
2164  *
2165  * Returns 0 for success, and 1 if the packet cannot be checksummed and
2166  * should be dropped.
2167  */
2168 static int
2169 ure_txcsum(struct mbuf *m, int caps, uint32_t *regout)
2170 {
2171 	struct ip ip;
2172 	struct ether_header *eh;
2173 	int flags;
2174 	uint32_t data;
2175 	uint32_t reg;
2176 	int l3off, l4off;
2177 	uint16_t type;
2178 
2179 	*regout = 0;
2180 	flags = m->m_pkthdr.csum_flags;
2181 	if (flags == 0)
2182 		return (0);
2183 
2184 	if (__predict_true(m->m_len >= (int)sizeof(*eh))) {
2185 		eh = mtod(m, struct ether_header *);
2186 		type = eh->ether_type;
2187 	} else
2188 		m_copydata(m, offsetof(struct ether_header, ether_type),
2189 		    sizeof(type), (caddr_t)&type);
2190 
2191 	switch (type = htons(type)) {
2192 	case ETHERTYPE_IP:
2193 	case ETHERTYPE_IPV6:
2194 		l3off = ETHER_HDR_LEN;
2195 		break;
2196 	case ETHERTYPE_VLAN:
2197 		/* XXX - what about QinQ? */
2198 		l3off = ETHER_HDR_LEN + ETHER_VLAN_ENCAP_LEN;
2199 		break;
2200 	default:
2201 		return (0);
2202 	}
2203 
2204 	reg = 0;
2205 
2206 	if (flags & CSUM_IP)
2207 		reg |= URE_TXPKT_IPV4_CS;
2208 
2209 	data = m->m_pkthdr.csum_data;
2210 	if (flags & (CSUM_IP_TCP | CSUM_IP_UDP)) {
2211 		m_copydata(m, l3off, sizeof ip, (caddr_t)&ip);
2212 		l4off = l3off + (ip.ip_hl << 2) + data;
2213 		if (__predict_false(l4off > URE_L4_OFFSET_MAX))
2214 			return (1);
2215 
2216 		reg |= URE_TXPKT_IPV4_CS;
2217 		if (flags & CSUM_IP_TCP)
2218 			reg |= URE_TXPKT_TCP_CS;
2219 		else if (flags & CSUM_IP_UDP)
2220 			reg |= URE_TXPKT_UDP_CS;
2221 		reg |= l4off << URE_L4_OFFSET_SHIFT;
2222 	}
2223 #ifdef INET6
2224 	else if (flags & (CSUM_IP6_TCP | CSUM_IP6_UDP)) {
2225 		l4off = l3off + data;
2226 		if (__predict_false(l4off > URE_L4_OFFSET_MAX))
2227 			return (1);
2228 
2229 		reg |= URE_TXPKT_IPV6_CS;
2230 		if (flags & CSUM_IP6_TCP)
2231 			reg |= URE_TXPKT_TCP_CS;
2232 		else if (flags & CSUM_IP6_UDP)
2233 			reg |= URE_TXPKT_UDP_CS;
2234 		reg |= l4off << URE_L4_OFFSET_SHIFT;
2235 	}
2236 #endif
2237 	*regout = reg;
2238 	return 0;
2239 }
2240