xref: /freebsd/usr.sbin/bhyve/pci_xhci.c (revision 9729f076e4d93c5a37e78d427bfe0f1ab99bbcc6)
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3  *
4  * Copyright (c) 2014 Leon Dang <ldang@nahannisys.com>
5  * All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  *
16  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
26  * SUCH DAMAGE.
27  */
28 /*
29    XHCI options:
30     -s <n>,xhci,{devices}
31 
32    devices:
33      tablet             USB tablet mouse
34  */
35 #include <sys/cdefs.h>
36 __FBSDID("$FreeBSD$");
37 
38 #include <sys/param.h>
39 #include <sys/uio.h>
40 #include <sys/types.h>
41 #include <sys/queue.h>
42 
43 #include <stdio.h>
44 #include <stdlib.h>
45 #include <stdint.h>
46 #include <string.h>
47 #include <errno.h>
48 #include <pthread.h>
49 #include <unistd.h>
50 
51 #include <machine/vmm_snapshot.h>
52 
53 #include <dev/usb/usbdi.h>
54 #include <dev/usb/usb.h>
55 #include <dev/usb/usb_freebsd.h>
56 #include <xhcireg.h>
57 
58 #include "bhyverun.h"
59 #include "config.h"
60 #include "debug.h"
61 #include "pci_emul.h"
62 #include "pci_xhci.h"
63 #include "usb_emul.h"
64 
65 
66 static int xhci_debug = 0;
67 #define	DPRINTF(params) if (xhci_debug) PRINTLN params
68 #define	WPRINTF(params) PRINTLN params
69 
70 
71 #define	XHCI_NAME		"xhci"
72 #define	XHCI_MAX_DEVS		8	/* 4 USB3 + 4 USB2 devs */
73 
74 #define	XHCI_MAX_SLOTS		64	/* min allowed by Windows drivers */
75 
76 /*
77  * XHCI data structures can be up to 64k, but limit paddr_guest2host mapping
78  * to 4k to avoid going over the guest physical memory barrier.
79  */
80 #define	XHCI_PADDR_SZ		4096	/* paddr_guest2host max size */
81 
82 #define	XHCI_ERST_MAX		0	/* max 2^entries event ring seg tbl */
83 
84 #define	XHCI_CAPLEN		(4*8)	/* offset of op register space */
85 #define	XHCI_HCCPRAMS2		0x1C	/* offset of HCCPARAMS2 register */
86 #define	XHCI_PORTREGS_START	0x400
87 #define	XHCI_DOORBELL_MAX	256
88 
89 #define	XHCI_STREAMS_MAX	1	/* 4-15 in XHCI spec */
90 
91 /* caplength and hci-version registers */
92 #define	XHCI_SET_CAPLEN(x)		((x) & 0xFF)
93 #define	XHCI_SET_HCIVERSION(x)		(((x) & 0xFFFF) << 16)
94 #define	XHCI_GET_HCIVERSION(x)		(((x) >> 16) & 0xFFFF)
95 
96 /* hcsparams1 register */
97 #define	XHCI_SET_HCSP1_MAXSLOTS(x)	((x) & 0xFF)
98 #define	XHCI_SET_HCSP1_MAXINTR(x)	(((x) & 0x7FF) << 8)
99 #define	XHCI_SET_HCSP1_MAXPORTS(x)	(((x) & 0xFF) << 24)
100 
101 /* hcsparams2 register */
102 #define	XHCI_SET_HCSP2_IST(x)		((x) & 0x0F)
103 #define	XHCI_SET_HCSP2_ERSTMAX(x)	(((x) & 0x0F) << 4)
104 #define	XHCI_SET_HCSP2_MAXSCRATCH_HI(x)	(((x) & 0x1F) << 21)
105 #define	XHCI_SET_HCSP2_MAXSCRATCH_LO(x)	(((x) & 0x1F) << 27)
106 
107 /* hcsparams3 register */
108 #define	XHCI_SET_HCSP3_U1EXITLATENCY(x)	((x) & 0xFF)
109 #define	XHCI_SET_HCSP3_U2EXITLATENCY(x)	(((x) & 0xFFFF) << 16)
110 
111 /* hccparams1 register */
112 #define	XHCI_SET_HCCP1_AC64(x)		((x) & 0x01)
113 #define	XHCI_SET_HCCP1_BNC(x)		(((x) & 0x01) << 1)
114 #define	XHCI_SET_HCCP1_CSZ(x)		(((x) & 0x01) << 2)
115 #define	XHCI_SET_HCCP1_PPC(x)		(((x) & 0x01) << 3)
116 #define	XHCI_SET_HCCP1_PIND(x)		(((x) & 0x01) << 4)
117 #define	XHCI_SET_HCCP1_LHRC(x)		(((x) & 0x01) << 5)
118 #define	XHCI_SET_HCCP1_LTC(x)		(((x) & 0x01) << 6)
119 #define	XHCI_SET_HCCP1_NSS(x)		(((x) & 0x01) << 7)
120 #define	XHCI_SET_HCCP1_PAE(x)		(((x) & 0x01) << 8)
121 #define	XHCI_SET_HCCP1_SPC(x)		(((x) & 0x01) << 9)
122 #define	XHCI_SET_HCCP1_SEC(x)		(((x) & 0x01) << 10)
123 #define	XHCI_SET_HCCP1_CFC(x)		(((x) & 0x01) << 11)
124 #define	XHCI_SET_HCCP1_MAXPSA(x)	(((x) & 0x0F) << 12)
125 #define	XHCI_SET_HCCP1_XECP(x)		(((x) & 0xFFFF) << 16)
126 
127 /* hccparams2 register */
128 #define	XHCI_SET_HCCP2_U3C(x)		((x) & 0x01)
129 #define	XHCI_SET_HCCP2_CMC(x)		(((x) & 0x01) << 1)
130 #define	XHCI_SET_HCCP2_FSC(x)		(((x) & 0x01) << 2)
131 #define	XHCI_SET_HCCP2_CTC(x)		(((x) & 0x01) << 3)
132 #define	XHCI_SET_HCCP2_LEC(x)		(((x) & 0x01) << 4)
133 #define	XHCI_SET_HCCP2_CIC(x)		(((x) & 0x01) << 5)
134 
135 /* other registers */
136 #define	XHCI_SET_DOORBELL(x)		((x) & ~0x03)
137 #define	XHCI_SET_RTSOFFSET(x)		((x) & ~0x0F)
138 
139 /* register masks */
140 #define	XHCI_PS_PLS_MASK		(0xF << 5)	/* port link state */
141 #define	XHCI_PS_SPEED_MASK		(0xF << 10)	/* port speed */
142 #define	XHCI_PS_PIC_MASK		(0x3 << 14)	/* port indicator */
143 
144 /* port register set */
145 #define	XHCI_PORTREGS_BASE		0x400		/* base offset */
146 #define	XHCI_PORTREGS_PORT0		0x3F0
147 #define	XHCI_PORTREGS_SETSZ		0x10		/* size of a set */
148 
149 #define	MASK_64_HI(x)			((x) & ~0xFFFFFFFFULL)
150 #define	MASK_64_LO(x)			((x) & 0xFFFFFFFFULL)
151 
152 #define	FIELD_REPLACE(a,b,m,s)		(((a) & ~((m) << (s))) | \
153 					(((b) & (m)) << (s)))
154 #define	FIELD_COPY(a,b,m,s)		(((a) & ~((m) << (s))) | \
155 					(((b) & ((m) << (s)))))
156 
157 #define	SNAP_DEV_NAME_LEN 128
158 
159 struct pci_xhci_trb_ring {
160 	uint64_t ringaddr;		/* current dequeue guest address */
161 	uint32_t ccs;			/* consumer cycle state */
162 };
163 
164 /* device endpoint transfer/stream rings */
165 struct pci_xhci_dev_ep {
166 	union {
167 		struct xhci_trb		*_epu_tr;
168 		struct xhci_stream_ctx	*_epu_sctx;
169 	} _ep_trbsctx;
170 #define	ep_tr		_ep_trbsctx._epu_tr
171 #define	ep_sctx		_ep_trbsctx._epu_sctx
172 
173 	/*
174 	 * Caches the value of MaxPStreams from the endpoint context
175 	 * when an endpoint is initialized and is used to validate the
176 	 * use of ep_ringaddr vs ep_sctx_trbs[] as well as the length
177 	 * of ep_sctx_trbs[].
178 	 */
179 	uint32_t ep_MaxPStreams;
180 	union {
181 		struct pci_xhci_trb_ring _epu_trb;
182 		struct pci_xhci_trb_ring *_epu_sctx_trbs;
183 	} _ep_trb_rings;
184 #define	ep_ringaddr	_ep_trb_rings._epu_trb.ringaddr
185 #define	ep_ccs		_ep_trb_rings._epu_trb.ccs
186 #define	ep_sctx_trbs	_ep_trb_rings._epu_sctx_trbs
187 
188 	struct usb_data_xfer *ep_xfer;	/* transfer chain */
189 };
190 
191 /* device context base address array: maps slot->device context */
192 struct xhci_dcbaa {
193 	uint64_t dcba[USB_MAX_DEVICES+1]; /* xhci_dev_ctx ptrs */
194 };
195 
196 /* port status registers */
197 struct pci_xhci_portregs {
198 	uint32_t	portsc;		/* port status and control */
199 	uint32_t	portpmsc;	/* port pwr mgmt status & control */
200 	uint32_t	portli;		/* port link info */
201 	uint32_t	porthlpmc;	/* port hardware LPM control */
202 } __packed;
203 #define	XHCI_PS_SPEED_SET(x)	(((x) & 0xF) << 10)
204 
205 /* xHC operational registers */
206 struct pci_xhci_opregs {
207 	uint32_t	usbcmd;		/* usb command */
208 	uint32_t	usbsts;		/* usb status */
209 	uint32_t	pgsz;		/* page size */
210 	uint32_t	dnctrl;		/* device notification control */
211 	uint64_t	crcr;		/* command ring control */
212 	uint64_t	dcbaap;		/* device ctx base addr array ptr */
213 	uint32_t	config;		/* configure */
214 
215 	/* guest mapped addresses: */
216 	struct xhci_trb	*cr_p;		/* crcr dequeue */
217 	struct xhci_dcbaa *dcbaa_p;	/* dev ctx array ptr */
218 };
219 
220 /* xHC runtime registers */
221 struct pci_xhci_rtsregs {
222 	uint32_t	mfindex;	/* microframe index */
223 	struct {			/* interrupter register set */
224 		uint32_t	iman;	/* interrupter management */
225 		uint32_t	imod;	/* interrupter moderation */
226 		uint32_t	erstsz;	/* event ring segment table size */
227 		uint32_t	rsvd;
228 		uint64_t	erstba;	/* event ring seg-tbl base addr */
229 		uint64_t	erdp;	/* event ring dequeue ptr */
230 	} intrreg __packed;
231 
232 	/* guest mapped addresses */
233 	struct xhci_event_ring_seg *erstba_p;
234 	struct xhci_trb *erst_p;	/* event ring segment tbl */
235 	int		er_deq_seg;	/* event ring dequeue segment */
236 	int		er_enq_idx;	/* event ring enqueue index - xHCI */
237 	int		er_enq_seg;	/* event ring enqueue segment */
238 	uint32_t	er_events_cnt;	/* number of events in ER */
239 	uint32_t	event_pcs;	/* producer cycle state flag */
240 };
241 
242 
243 struct pci_xhci_softc;
244 
245 
246 /*
247  * USB device emulation container.
248  * This is referenced from usb_hci->hci_sc; 1 pci_xhci_dev_emu for each
249  * emulated device instance.
250  */
251 struct pci_xhci_dev_emu {
252 	struct pci_xhci_softc	*xsc;
253 
254 	/* XHCI contexts */
255 	struct xhci_dev_ctx	*dev_ctx;
256 	struct pci_xhci_dev_ep	eps[XHCI_MAX_ENDPOINTS];
257 	int			dev_slotstate;
258 
259 	struct usb_devemu	*dev_ue;	/* USB emulated dev */
260 	void			*dev_sc;	/* device's softc */
261 
262 	struct usb_hci		hci;
263 };
264 
265 struct pci_xhci_softc {
266 	struct pci_devinst *xsc_pi;
267 
268 	pthread_mutex_t	mtx;
269 
270 	uint32_t	caplength;	/* caplen & hciversion */
271 	uint32_t	hcsparams1;	/* structural parameters 1 */
272 	uint32_t	hcsparams2;	/* structural parameters 2 */
273 	uint32_t	hcsparams3;	/* structural parameters 3 */
274 	uint32_t	hccparams1;	/* capability parameters 1 */
275 	uint32_t	dboff;		/* doorbell offset */
276 	uint32_t	rtsoff;		/* runtime register space offset */
277 	uint32_t	hccparams2;	/* capability parameters 2 */
278 
279 	uint32_t	regsend;	/* end of configuration registers */
280 
281 	struct pci_xhci_opregs  opregs;
282 	struct pci_xhci_rtsregs rtsregs;
283 
284 	struct pci_xhci_portregs *portregs;
285 	struct pci_xhci_dev_emu  **devices; /* XHCI[port] = device */
286 	struct pci_xhci_dev_emu  **slots;   /* slots assigned from 1 */
287 
288 	int		usb2_port_start;
289 	int		usb3_port_start;
290 };
291 
292 
293 /* portregs and devices arrays are set up to start from idx=1 */
294 #define	XHCI_PORTREG_PTR(x,n)	&(x)->portregs[(n)]
295 #define	XHCI_DEVINST_PTR(x,n)	(x)->devices[(n)]
296 #define	XHCI_SLOTDEV_PTR(x,n)	(x)->slots[(n)]
297 
298 #define	XHCI_HALTED(sc)		((sc)->opregs.usbsts & XHCI_STS_HCH)
299 
300 #define	XHCI_GADDR_SIZE(a)	(XHCI_PADDR_SZ - \
301 				    (((uint64_t) (a)) & (XHCI_PADDR_SZ - 1)))
302 #define	XHCI_GADDR(sc,a)	paddr_guest2host((sc)->xsc_pi->pi_vmctx, \
303 				    (a), XHCI_GADDR_SIZE(a))
304 
305 static int xhci_in_use;
306 
307 /* map USB errors to XHCI */
308 static const int xhci_usb_errors[USB_ERR_MAX] = {
309 	[USB_ERR_NORMAL_COMPLETION]	= XHCI_TRB_ERROR_SUCCESS,
310 	[USB_ERR_PENDING_REQUESTS]	= XHCI_TRB_ERROR_RESOURCE,
311 	[USB_ERR_NOT_STARTED]		= XHCI_TRB_ERROR_ENDP_NOT_ON,
312 	[USB_ERR_INVAL]			= XHCI_TRB_ERROR_INVALID,
313 	[USB_ERR_NOMEM]			= XHCI_TRB_ERROR_RESOURCE,
314 	[USB_ERR_CANCELLED]		= XHCI_TRB_ERROR_STOPPED,
315 	[USB_ERR_BAD_ADDRESS]		= XHCI_TRB_ERROR_PARAMETER,
316 	[USB_ERR_BAD_BUFSIZE]		= XHCI_TRB_ERROR_PARAMETER,
317 	[USB_ERR_BAD_FLAG]		= XHCI_TRB_ERROR_PARAMETER,
318 	[USB_ERR_NO_CALLBACK]		= XHCI_TRB_ERROR_STALL,
319 	[USB_ERR_IN_USE]		= XHCI_TRB_ERROR_RESOURCE,
320 	[USB_ERR_NO_ADDR]		= XHCI_TRB_ERROR_RESOURCE,
321 	[USB_ERR_NO_PIPE]               = XHCI_TRB_ERROR_RESOURCE,
322 	[USB_ERR_ZERO_NFRAMES]          = XHCI_TRB_ERROR_UNDEFINED,
323 	[USB_ERR_ZERO_MAXP]             = XHCI_TRB_ERROR_UNDEFINED,
324 	[USB_ERR_SET_ADDR_FAILED]       = XHCI_TRB_ERROR_RESOURCE,
325 	[USB_ERR_NO_POWER]              = XHCI_TRB_ERROR_ENDP_NOT_ON,
326 	[USB_ERR_TOO_DEEP]              = XHCI_TRB_ERROR_RESOURCE,
327 	[USB_ERR_IOERROR]               = XHCI_TRB_ERROR_TRB,
328 	[USB_ERR_NOT_CONFIGURED]        = XHCI_TRB_ERROR_ENDP_NOT_ON,
329 	[USB_ERR_TIMEOUT]               = XHCI_TRB_ERROR_CMD_ABORTED,
330 	[USB_ERR_SHORT_XFER]            = XHCI_TRB_ERROR_SHORT_PKT,
331 	[USB_ERR_STALLED]               = XHCI_TRB_ERROR_STALL,
332 	[USB_ERR_INTERRUPTED]           = XHCI_TRB_ERROR_CMD_ABORTED,
333 	[USB_ERR_DMA_LOAD_FAILED]       = XHCI_TRB_ERROR_DATA_BUF,
334 	[USB_ERR_BAD_CONTEXT]           = XHCI_TRB_ERROR_TRB,
335 	[USB_ERR_NO_ROOT_HUB]           = XHCI_TRB_ERROR_UNDEFINED,
336 	[USB_ERR_NO_INTR_THREAD]        = XHCI_TRB_ERROR_UNDEFINED,
337 	[USB_ERR_NOT_LOCKED]            = XHCI_TRB_ERROR_UNDEFINED,
338 };
339 #define	USB_TO_XHCI_ERR(e)	((e) < USB_ERR_MAX ? xhci_usb_errors[(e)] : \
340 				XHCI_TRB_ERROR_INVALID)
341 
342 static int pci_xhci_insert_event(struct pci_xhci_softc *sc,
343     struct xhci_trb *evtrb, int do_intr);
344 static void pci_xhci_dump_trb(struct xhci_trb *trb);
345 static void pci_xhci_assert_interrupt(struct pci_xhci_softc *sc);
346 static void pci_xhci_reset_slot(struct pci_xhci_softc *sc, int slot);
347 static void pci_xhci_reset_port(struct pci_xhci_softc *sc, int portn, int warm);
348 static void pci_xhci_update_ep_ring(struct pci_xhci_softc *sc,
349     struct pci_xhci_dev_emu *dev, struct pci_xhci_dev_ep *devep,
350     struct xhci_endp_ctx *ep_ctx, uint32_t streamid,
351     uint64_t ringaddr, int ccs);
352 
353 static void
354 pci_xhci_set_evtrb(struct xhci_trb *evtrb, uint64_t port, uint32_t errcode,
355     uint32_t evtype)
356 {
357 	evtrb->qwTrb0 = port << 24;
358 	evtrb->dwTrb2 = XHCI_TRB_2_ERROR_SET(errcode);
359 	evtrb->dwTrb3 = XHCI_TRB_3_TYPE_SET(evtype);
360 }
361 
362 
363 /* controller reset */
364 static void
365 pci_xhci_reset(struct pci_xhci_softc *sc)
366 {
367 	int i;
368 
369 	sc->rtsregs.er_enq_idx = 0;
370 	sc->rtsregs.er_events_cnt = 0;
371 	sc->rtsregs.event_pcs = 1;
372 
373 	for (i = 1; i <= XHCI_MAX_SLOTS; i++) {
374 		pci_xhci_reset_slot(sc, i);
375 	}
376 }
377 
378 static uint32_t
379 pci_xhci_usbcmd_write(struct pci_xhci_softc *sc, uint32_t cmd)
380 {
381 	int do_intr = 0;
382 	int i;
383 
384 	if (cmd & XHCI_CMD_RS) {
385 		do_intr = (sc->opregs.usbcmd & XHCI_CMD_RS) == 0;
386 
387 		sc->opregs.usbcmd |= XHCI_CMD_RS;
388 		sc->opregs.usbsts &= ~XHCI_STS_HCH;
389 		sc->opregs.usbsts |= XHCI_STS_PCD;
390 
391 		/* Queue port change event on controller run from stop */
392 		if (do_intr)
393 			for (i = 1; i <= XHCI_MAX_DEVS; i++) {
394 				struct pci_xhci_dev_emu *dev;
395 				struct pci_xhci_portregs *port;
396 				struct xhci_trb		evtrb;
397 
398 				if ((dev = XHCI_DEVINST_PTR(sc, i)) == NULL)
399 					continue;
400 
401 				port = XHCI_PORTREG_PTR(sc, i);
402 				port->portsc |= XHCI_PS_CSC | XHCI_PS_CCS;
403 				port->portsc &= ~XHCI_PS_PLS_MASK;
404 
405 				/*
406 				 * XHCI 4.19.3 USB2 RxDetect->Polling,
407 				 *             USB3 Polling->U0
408 				 */
409 				if (dev->dev_ue->ue_usbver == 2)
410 					port->portsc |=
411 					    XHCI_PS_PLS_SET(UPS_PORT_LS_POLL);
412 				else
413 					port->portsc |=
414 					    XHCI_PS_PLS_SET(UPS_PORT_LS_U0);
415 
416 				pci_xhci_set_evtrb(&evtrb, i,
417 				    XHCI_TRB_ERROR_SUCCESS,
418 				    XHCI_TRB_EVENT_PORT_STS_CHANGE);
419 
420 				if (pci_xhci_insert_event(sc, &evtrb, 0) !=
421 				    XHCI_TRB_ERROR_SUCCESS)
422 					break;
423 			}
424 	} else {
425 		sc->opregs.usbcmd &= ~XHCI_CMD_RS;
426 		sc->opregs.usbsts |= XHCI_STS_HCH;
427 		sc->opregs.usbsts &= ~XHCI_STS_PCD;
428 	}
429 
430 	/* start execution of schedule; stop when set to 0 */
431 	cmd |= sc->opregs.usbcmd & XHCI_CMD_RS;
432 
433 	if (cmd & XHCI_CMD_HCRST) {
434 		/* reset controller */
435 		pci_xhci_reset(sc);
436 		cmd &= ~XHCI_CMD_HCRST;
437 	}
438 
439 	cmd &= ~(XHCI_CMD_CSS | XHCI_CMD_CRS);
440 
441 	if (do_intr)
442 		pci_xhci_assert_interrupt(sc);
443 
444 	return (cmd);
445 }
446 
447 static void
448 pci_xhci_portregs_write(struct pci_xhci_softc *sc, uint64_t offset,
449     uint64_t value)
450 {
451 	struct xhci_trb		evtrb;
452 	struct pci_xhci_portregs *p;
453 	int port;
454 	uint32_t oldpls, newpls;
455 
456 	if (sc->portregs == NULL)
457 		return;
458 
459 	port = (offset - XHCI_PORTREGS_PORT0) / XHCI_PORTREGS_SETSZ;
460 	offset = (offset - XHCI_PORTREGS_PORT0) % XHCI_PORTREGS_SETSZ;
461 
462 	DPRINTF(("pci_xhci: portregs wr offset 0x%lx, port %u: 0x%lx",
463 	        offset, port, value));
464 
465 	assert(port >= 0);
466 
467 	if (port > XHCI_MAX_DEVS) {
468 		DPRINTF(("pci_xhci: portregs_write port %d > ndevices",
469 		    port));
470 		return;
471 	}
472 
473 	if (XHCI_DEVINST_PTR(sc, port) == NULL) {
474 		DPRINTF(("pci_xhci: portregs_write to unattached port %d",
475 		     port));
476 	}
477 
478 	p = XHCI_PORTREG_PTR(sc, port);
479 	switch (offset) {
480 	case 0:
481 		/* port reset or warm reset */
482 		if (value & (XHCI_PS_PR | XHCI_PS_WPR)) {
483 			pci_xhci_reset_port(sc, port, value & XHCI_PS_WPR);
484 			break;
485 		}
486 
487 		if ((p->portsc & XHCI_PS_PP) == 0) {
488 			WPRINTF(("pci_xhci: portregs_write to unpowered "
489 			         "port %d", port));
490 			break;
491 		}
492 
493 		/* Port status and control register  */
494 		oldpls = XHCI_PS_PLS_GET(p->portsc);
495 		newpls = XHCI_PS_PLS_GET(value);
496 
497 		p->portsc &= XHCI_PS_PED | XHCI_PS_PLS_MASK |
498 		             XHCI_PS_SPEED_MASK | XHCI_PS_PIC_MASK;
499 
500 		if (XHCI_DEVINST_PTR(sc, port))
501 			p->portsc |= XHCI_PS_CCS;
502 
503 		p->portsc |= (value &
504 		              ~(XHCI_PS_OCA |
505 		                XHCI_PS_PR  |
506 			        XHCI_PS_PED |
507 			        XHCI_PS_PLS_MASK   |	/* link state */
508 			        XHCI_PS_SPEED_MASK |
509 			        XHCI_PS_PIC_MASK   |	/* port indicator */
510 			        XHCI_PS_LWS | XHCI_PS_DR | XHCI_PS_WPR));
511 
512 		/* clear control bits */
513 		p->portsc &= ~(value &
514 		               (XHCI_PS_CSC |
515 		                XHCI_PS_PEC |
516 		                XHCI_PS_WRC |
517 		                XHCI_PS_OCC |
518 		                XHCI_PS_PRC |
519 		                XHCI_PS_PLC |
520 		                XHCI_PS_CEC |
521 		                XHCI_PS_CAS));
522 
523 		/* port disable request; for USB3, don't care */
524 		if (value & XHCI_PS_PED)
525 			DPRINTF(("Disable port %d request", port));
526 
527 		if (!(value & XHCI_PS_LWS))
528 			break;
529 
530 		DPRINTF(("Port new PLS: %d", newpls));
531 		switch (newpls) {
532 		case 0: /* U0 */
533 		case 3: /* U3 */
534 			if (oldpls != newpls) {
535 				p->portsc &= ~XHCI_PS_PLS_MASK;
536 				p->portsc |= XHCI_PS_PLS_SET(newpls) |
537 				             XHCI_PS_PLC;
538 
539 				if (oldpls != 0 && newpls == 0) {
540 					pci_xhci_set_evtrb(&evtrb, port,
541 					    XHCI_TRB_ERROR_SUCCESS,
542 					    XHCI_TRB_EVENT_PORT_STS_CHANGE);
543 
544 					pci_xhci_insert_event(sc, &evtrb, 1);
545 				}
546 			}
547 			break;
548 
549 		default:
550 			DPRINTF(("Unhandled change port %d PLS %u",
551 			         port, newpls));
552 			break;
553 		}
554 		break;
555 	case 4:
556 		/* Port power management status and control register  */
557 		p->portpmsc = value;
558 		break;
559 	case 8:
560 		/* Port link information register */
561 		DPRINTF(("pci_xhci attempted write to PORTLI, port %d",
562 		        port));
563 		break;
564 	case 12:
565 		/*
566 		 * Port hardware LPM control register.
567 		 * For USB3, this register is reserved.
568 		 */
569 		p->porthlpmc = value;
570 		break;
571 	}
572 }
573 
574 static struct xhci_dev_ctx *
575 pci_xhci_get_dev_ctx(struct pci_xhci_softc *sc, uint32_t slot)
576 {
577 	uint64_t devctx_addr;
578 	struct xhci_dev_ctx *devctx;
579 
580 	assert(slot > 0 && slot <= XHCI_MAX_DEVS);
581 	assert(XHCI_SLOTDEV_PTR(sc, slot) != NULL);
582 	assert(sc->opregs.dcbaa_p != NULL);
583 
584 	devctx_addr = sc->opregs.dcbaa_p->dcba[slot];
585 
586 	if (devctx_addr == 0) {
587 		DPRINTF(("get_dev_ctx devctx_addr == 0"));
588 		return (NULL);
589 	}
590 
591 	DPRINTF(("pci_xhci: get dev ctx, slot %u devctx addr %016lx",
592 	        slot, devctx_addr));
593 	devctx = XHCI_GADDR(sc, devctx_addr & ~0x3FUL);
594 
595 	return (devctx);
596 }
597 
598 static struct xhci_trb *
599 pci_xhci_trb_next(struct pci_xhci_softc *sc, struct xhci_trb *curtrb,
600     uint64_t *guestaddr)
601 {
602 	struct xhci_trb *next;
603 
604 	assert(curtrb != NULL);
605 
606 	if (XHCI_TRB_3_TYPE_GET(curtrb->dwTrb3) == XHCI_TRB_TYPE_LINK) {
607 		if (guestaddr)
608 			*guestaddr = curtrb->qwTrb0 & ~0xFUL;
609 
610 		next = XHCI_GADDR(sc, curtrb->qwTrb0 & ~0xFUL);
611 	} else {
612 		if (guestaddr)
613 			*guestaddr += sizeof(struct xhci_trb) & ~0xFUL;
614 
615 		next = curtrb + 1;
616 	}
617 
618 	return (next);
619 }
620 
621 static void
622 pci_xhci_assert_interrupt(struct pci_xhci_softc *sc)
623 {
624 
625 	sc->rtsregs.intrreg.erdp |= XHCI_ERDP_LO_BUSY;
626 	sc->rtsregs.intrreg.iman |= XHCI_IMAN_INTR_PEND;
627 	sc->opregs.usbsts |= XHCI_STS_EINT;
628 
629 	/* only trigger interrupt if permitted */
630 	if ((sc->opregs.usbcmd & XHCI_CMD_INTE) &&
631 	    (sc->rtsregs.intrreg.iman & XHCI_IMAN_INTR_ENA)) {
632 		if (pci_msi_enabled(sc->xsc_pi))
633 			pci_generate_msi(sc->xsc_pi, 0);
634 		else
635 			pci_lintr_assert(sc->xsc_pi);
636 	}
637 }
638 
639 static void
640 pci_xhci_deassert_interrupt(struct pci_xhci_softc *sc)
641 {
642 
643 	if (!pci_msi_enabled(sc->xsc_pi))
644 		pci_lintr_assert(sc->xsc_pi);
645 }
646 
647 static void
648 pci_xhci_init_ep(struct pci_xhci_dev_emu *dev, int epid)
649 {
650 	struct xhci_dev_ctx    *dev_ctx;
651 	struct pci_xhci_dev_ep *devep;
652 	struct xhci_endp_ctx   *ep_ctx;
653 	uint32_t	i, pstreams;
654 
655 	dev_ctx = dev->dev_ctx;
656 	ep_ctx = &dev_ctx->ctx_ep[epid];
657 	devep = &dev->eps[epid];
658 	pstreams = XHCI_EPCTX_0_MAXP_STREAMS_GET(ep_ctx->dwEpCtx0);
659 	if (pstreams > 0) {
660 		DPRINTF(("init_ep %d with pstreams %d", epid, pstreams));
661 		assert(devep->ep_sctx_trbs == NULL);
662 
663 		devep->ep_sctx = XHCI_GADDR(dev->xsc, ep_ctx->qwEpCtx2 &
664 		                            XHCI_EPCTX_2_TR_DQ_PTR_MASK);
665 		devep->ep_sctx_trbs = calloc(pstreams,
666 		                      sizeof(struct pci_xhci_trb_ring));
667 		for (i = 0; i < pstreams; i++) {
668 			devep->ep_sctx_trbs[i].ringaddr =
669 			                         devep->ep_sctx[i].qwSctx0 &
670 			                         XHCI_SCTX_0_TR_DQ_PTR_MASK;
671 			devep->ep_sctx_trbs[i].ccs =
672 			     XHCI_SCTX_0_DCS_GET(devep->ep_sctx[i].qwSctx0);
673 		}
674 	} else {
675 		DPRINTF(("init_ep %d with no pstreams", epid));
676 		devep->ep_ringaddr = ep_ctx->qwEpCtx2 &
677 		                     XHCI_EPCTX_2_TR_DQ_PTR_MASK;
678 		devep->ep_ccs = XHCI_EPCTX_2_DCS_GET(ep_ctx->qwEpCtx2);
679 		devep->ep_tr = XHCI_GADDR(dev->xsc, devep->ep_ringaddr);
680 		DPRINTF(("init_ep tr DCS %x", devep->ep_ccs));
681 	}
682 	devep->ep_MaxPStreams = pstreams;
683 
684 	if (devep->ep_xfer == NULL) {
685 		devep->ep_xfer = malloc(sizeof(struct usb_data_xfer));
686 		USB_DATA_XFER_INIT(devep->ep_xfer);
687 	}
688 }
689 
690 static void
691 pci_xhci_disable_ep(struct pci_xhci_dev_emu *dev, int epid)
692 {
693 	struct xhci_dev_ctx    *dev_ctx;
694 	struct pci_xhci_dev_ep *devep;
695 	struct xhci_endp_ctx   *ep_ctx;
696 
697 	DPRINTF(("pci_xhci disable_ep %d", epid));
698 
699 	dev_ctx = dev->dev_ctx;
700 	ep_ctx = &dev_ctx->ctx_ep[epid];
701 	ep_ctx->dwEpCtx0 = (ep_ctx->dwEpCtx0 & ~0x7) | XHCI_ST_EPCTX_DISABLED;
702 
703 	devep = &dev->eps[epid];
704 	if (devep->ep_MaxPStreams > 0)
705 		free(devep->ep_sctx_trbs);
706 
707 	if (devep->ep_xfer != NULL) {
708 		free(devep->ep_xfer);
709 		devep->ep_xfer = NULL;
710 	}
711 
712 	memset(devep, 0, sizeof(struct pci_xhci_dev_ep));
713 }
714 
715 
716 /* reset device at slot and data structures related to it */
717 static void
718 pci_xhci_reset_slot(struct pci_xhci_softc *sc, int slot)
719 {
720 	struct pci_xhci_dev_emu *dev;
721 
722 	dev = XHCI_SLOTDEV_PTR(sc, slot);
723 
724 	if (!dev) {
725 		DPRINTF(("xhci reset unassigned slot (%d)?", slot));
726 	} else {
727 		dev->dev_slotstate = XHCI_ST_DISABLED;
728 	}
729 
730 	/* TODO: reset ring buffer pointers */
731 }
732 
733 static int
734 pci_xhci_insert_event(struct pci_xhci_softc *sc, struct xhci_trb *evtrb,
735     int do_intr)
736 {
737 	struct pci_xhci_rtsregs *rts;
738 	uint64_t	erdp;
739 	int		erdp_idx;
740 	int		err;
741 	struct xhci_trb *evtrbptr;
742 
743 	err = XHCI_TRB_ERROR_SUCCESS;
744 
745 	rts = &sc->rtsregs;
746 
747 	erdp = rts->intrreg.erdp & ~0xF;
748 	erdp_idx = (erdp - rts->erstba_p[rts->er_deq_seg].qwEvrsTablePtr) /
749 	           sizeof(struct xhci_trb);
750 
751 	DPRINTF(("pci_xhci: insert event 0[%lx] 2[%x] 3[%x]",
752 	         evtrb->qwTrb0, evtrb->dwTrb2, evtrb->dwTrb3));
753 	DPRINTF(("\terdp idx %d/seg %d, enq idx %d/seg %d, pcs %u",
754 	         erdp_idx, rts->er_deq_seg, rts->er_enq_idx,
755 	         rts->er_enq_seg, rts->event_pcs));
756 	DPRINTF(("\t(erdp=0x%lx, erst=0x%lx, tblsz=%u, do_intr %d)",
757 		 erdp, rts->erstba_p->qwEvrsTablePtr,
758 	         rts->erstba_p->dwEvrsTableSize, do_intr));
759 
760 	evtrbptr = &rts->erst_p[rts->er_enq_idx];
761 
762 	/* TODO: multi-segment table */
763 	if (rts->er_events_cnt >= rts->erstba_p->dwEvrsTableSize) {
764 		DPRINTF(("pci_xhci[%d] cannot insert event; ring full",
765 		         __LINE__));
766 		err = XHCI_TRB_ERROR_EV_RING_FULL;
767 		goto done;
768 	}
769 
770 	if (rts->er_events_cnt == rts->erstba_p->dwEvrsTableSize - 1) {
771 		struct xhci_trb	errev;
772 
773 		if ((evtrbptr->dwTrb3 & 0x1) == (rts->event_pcs & 0x1)) {
774 
775 			DPRINTF(("pci_xhci[%d] insert evt err: ring full",
776 			         __LINE__));
777 
778 			errev.qwTrb0 = 0;
779 			errev.dwTrb2 = XHCI_TRB_2_ERROR_SET(
780 			                    XHCI_TRB_ERROR_EV_RING_FULL);
781 			errev.dwTrb3 = XHCI_TRB_3_TYPE_SET(
782 			                    XHCI_TRB_EVENT_HOST_CTRL) |
783 			               rts->event_pcs;
784 			rts->er_events_cnt++;
785 			memcpy(&rts->erst_p[rts->er_enq_idx], &errev,
786 			       sizeof(struct xhci_trb));
787 			rts->er_enq_idx = (rts->er_enq_idx + 1) %
788 			                  rts->erstba_p->dwEvrsTableSize;
789 			err = XHCI_TRB_ERROR_EV_RING_FULL;
790 			do_intr = 1;
791 
792 			goto done;
793 		}
794 	} else {
795 		rts->er_events_cnt++;
796 	}
797 
798 	evtrb->dwTrb3 &= ~XHCI_TRB_3_CYCLE_BIT;
799 	evtrb->dwTrb3 |= rts->event_pcs;
800 
801 	memcpy(&rts->erst_p[rts->er_enq_idx], evtrb, sizeof(struct xhci_trb));
802 	rts->er_enq_idx = (rts->er_enq_idx + 1) %
803 	                  rts->erstba_p->dwEvrsTableSize;
804 
805 	if (rts->er_enq_idx == 0)
806 		rts->event_pcs ^= 1;
807 
808 done:
809 	if (do_intr)
810 		pci_xhci_assert_interrupt(sc);
811 
812 	return (err);
813 }
814 
815 static uint32_t
816 pci_xhci_cmd_enable_slot(struct pci_xhci_softc *sc, uint32_t *slot)
817 {
818 	struct pci_xhci_dev_emu *dev;
819 	uint32_t	cmderr;
820 	int		i;
821 
822 	cmderr = XHCI_TRB_ERROR_NO_SLOTS;
823 	if (sc->portregs != NULL)
824 		for (i = 1; i <= XHCI_MAX_SLOTS; i++) {
825 			dev = XHCI_SLOTDEV_PTR(sc, i);
826 			if (dev && dev->dev_slotstate == XHCI_ST_DISABLED) {
827 				*slot = i;
828 				dev->dev_slotstate = XHCI_ST_ENABLED;
829 				cmderr = XHCI_TRB_ERROR_SUCCESS;
830 				dev->hci.hci_address = i;
831 				break;
832 			}
833 		}
834 
835 	DPRINTF(("pci_xhci enable slot (error=%d) slot %u",
836 		cmderr != XHCI_TRB_ERROR_SUCCESS, *slot));
837 
838 	return (cmderr);
839 }
840 
841 static uint32_t
842 pci_xhci_cmd_disable_slot(struct pci_xhci_softc *sc, uint32_t slot)
843 {
844 	struct pci_xhci_dev_emu *dev;
845 	uint32_t cmderr;
846 
847 	DPRINTF(("pci_xhci disable slot %u", slot));
848 
849 	cmderr = XHCI_TRB_ERROR_NO_SLOTS;
850 	if (sc->portregs == NULL)
851 		goto done;
852 
853 	if (slot > XHCI_MAX_SLOTS) {
854 		cmderr = XHCI_TRB_ERROR_SLOT_NOT_ON;
855 		goto done;
856 	}
857 
858 	dev = XHCI_SLOTDEV_PTR(sc, slot);
859 	if (dev) {
860 		if (dev->dev_slotstate == XHCI_ST_DISABLED) {
861 			cmderr = XHCI_TRB_ERROR_SLOT_NOT_ON;
862 		} else {
863 			dev->dev_slotstate = XHCI_ST_DISABLED;
864 			cmderr = XHCI_TRB_ERROR_SUCCESS;
865 			/* TODO: reset events and endpoints */
866 		}
867 	} else
868 		cmderr = XHCI_TRB_ERROR_SLOT_NOT_ON;
869 
870 done:
871 	return (cmderr);
872 }
873 
874 static uint32_t
875 pci_xhci_cmd_reset_device(struct pci_xhci_softc *sc, uint32_t slot)
876 {
877 	struct pci_xhci_dev_emu *dev;
878 	struct xhci_dev_ctx     *dev_ctx;
879 	struct xhci_endp_ctx    *ep_ctx;
880 	uint32_t	cmderr;
881 	int		i;
882 
883 	cmderr = XHCI_TRB_ERROR_NO_SLOTS;
884 	if (sc->portregs == NULL)
885 		goto done;
886 
887 	DPRINTF(("pci_xhci reset device slot %u", slot));
888 
889 	dev = XHCI_SLOTDEV_PTR(sc, slot);
890 	if (!dev || dev->dev_slotstate == XHCI_ST_DISABLED)
891 		cmderr = XHCI_TRB_ERROR_SLOT_NOT_ON;
892 	else {
893 		dev->dev_slotstate = XHCI_ST_DEFAULT;
894 
895 		dev->hci.hci_address = 0;
896 		dev_ctx = pci_xhci_get_dev_ctx(sc, slot);
897 
898 		/* slot state */
899 		dev_ctx->ctx_slot.dwSctx3 = FIELD_REPLACE(
900 		    dev_ctx->ctx_slot.dwSctx3, XHCI_ST_SLCTX_DEFAULT,
901 		    0x1F, 27);
902 
903 		/* number of contexts */
904 		dev_ctx->ctx_slot.dwSctx0 = FIELD_REPLACE(
905 		    dev_ctx->ctx_slot.dwSctx0, 1, 0x1F, 27);
906 
907 		/* reset all eps other than ep-0 */
908 		for (i = 2; i <= 31; i++) {
909 			ep_ctx = &dev_ctx->ctx_ep[i];
910 			ep_ctx->dwEpCtx0 = FIELD_REPLACE( ep_ctx->dwEpCtx0,
911 			    XHCI_ST_EPCTX_DISABLED, 0x7, 0);
912 		}
913 
914 		cmderr = XHCI_TRB_ERROR_SUCCESS;
915 	}
916 
917 	pci_xhci_reset_slot(sc, slot);
918 
919 done:
920 	return (cmderr);
921 }
922 
923 static uint32_t
924 pci_xhci_cmd_address_device(struct pci_xhci_softc *sc, uint32_t slot,
925     struct xhci_trb *trb)
926 {
927 	struct pci_xhci_dev_emu	*dev;
928 	struct xhci_input_dev_ctx *input_ctx;
929 	struct xhci_slot_ctx	*islot_ctx;
930 	struct xhci_dev_ctx	*dev_ctx;
931 	struct xhci_endp_ctx	*ep0_ctx;
932 	uint32_t		cmderr;
933 
934 	input_ctx = XHCI_GADDR(sc, trb->qwTrb0 & ~0xFUL);
935 	islot_ctx = &input_ctx->ctx_slot;
936 	ep0_ctx = &input_ctx->ctx_ep[1];
937 
938 	cmderr = XHCI_TRB_ERROR_SUCCESS;
939 
940 	DPRINTF(("pci_xhci: address device, input ctl: D 0x%08x A 0x%08x,",
941 	        input_ctx->ctx_input.dwInCtx0, input_ctx->ctx_input.dwInCtx1));
942 	DPRINTF(("          slot %08x %08x %08x %08x",
943 	        islot_ctx->dwSctx0, islot_ctx->dwSctx1,
944 	        islot_ctx->dwSctx2, islot_ctx->dwSctx3));
945 	DPRINTF(("          ep0  %08x %08x %016lx %08x",
946 	        ep0_ctx->dwEpCtx0, ep0_ctx->dwEpCtx1, ep0_ctx->qwEpCtx2,
947 	        ep0_ctx->dwEpCtx4));
948 
949 	/* when setting address: drop-ctx=0, add-ctx=slot+ep0 */
950 	if ((input_ctx->ctx_input.dwInCtx0 != 0) ||
951 	    (input_ctx->ctx_input.dwInCtx1 & 0x03) != 0x03) {
952 		DPRINTF(("pci_xhci: address device, input ctl invalid"));
953 		cmderr = XHCI_TRB_ERROR_TRB;
954 		goto done;
955 	}
956 
957 	/* assign address to slot */
958 	dev_ctx = pci_xhci_get_dev_ctx(sc, slot);
959 
960 	DPRINTF(("pci_xhci: address device, dev ctx"));
961 	DPRINTF(("          slot %08x %08x %08x %08x",
962 	        dev_ctx->ctx_slot.dwSctx0, dev_ctx->ctx_slot.dwSctx1,
963 	        dev_ctx->ctx_slot.dwSctx2, dev_ctx->ctx_slot.dwSctx3));
964 
965 	dev = XHCI_SLOTDEV_PTR(sc, slot);
966 	assert(dev != NULL);
967 
968 	dev->hci.hci_address = slot;
969 	dev->dev_ctx = dev_ctx;
970 
971 	if (dev->dev_ue->ue_reset == NULL ||
972 	    dev->dev_ue->ue_reset(dev->dev_sc) < 0) {
973 		cmderr = XHCI_TRB_ERROR_ENDP_NOT_ON;
974 		goto done;
975 	}
976 
977 	memcpy(&dev_ctx->ctx_slot, islot_ctx, sizeof(struct xhci_slot_ctx));
978 
979 	dev_ctx->ctx_slot.dwSctx3 =
980 	    XHCI_SCTX_3_SLOT_STATE_SET(XHCI_ST_SLCTX_ADDRESSED) |
981 	    XHCI_SCTX_3_DEV_ADDR_SET(slot);
982 
983 	memcpy(&dev_ctx->ctx_ep[1], ep0_ctx, sizeof(struct xhci_endp_ctx));
984 	ep0_ctx = &dev_ctx->ctx_ep[1];
985 	ep0_ctx->dwEpCtx0 = (ep0_ctx->dwEpCtx0 & ~0x7) |
986 	    XHCI_EPCTX_0_EPSTATE_SET(XHCI_ST_EPCTX_RUNNING);
987 
988 	pci_xhci_init_ep(dev, 1);
989 
990 	dev->dev_slotstate = XHCI_ST_ADDRESSED;
991 
992 	DPRINTF(("pci_xhci: address device, output ctx"));
993 	DPRINTF(("          slot %08x %08x %08x %08x",
994 	        dev_ctx->ctx_slot.dwSctx0, dev_ctx->ctx_slot.dwSctx1,
995 	        dev_ctx->ctx_slot.dwSctx2, dev_ctx->ctx_slot.dwSctx3));
996 	DPRINTF(("          ep0  %08x %08x %016lx %08x",
997 	        ep0_ctx->dwEpCtx0, ep0_ctx->dwEpCtx1, ep0_ctx->qwEpCtx2,
998 	        ep0_ctx->dwEpCtx4));
999 
1000 done:
1001 	return (cmderr);
1002 }
1003 
1004 static uint32_t
1005 pci_xhci_cmd_config_ep(struct pci_xhci_softc *sc, uint32_t slot,
1006     struct xhci_trb *trb)
1007 {
1008 	struct xhci_input_dev_ctx *input_ctx;
1009 	struct pci_xhci_dev_emu	*dev;
1010 	struct xhci_dev_ctx	*dev_ctx;
1011 	struct xhci_endp_ctx	*ep_ctx, *iep_ctx;
1012 	uint32_t	cmderr;
1013 	int		i;
1014 
1015 	cmderr = XHCI_TRB_ERROR_SUCCESS;
1016 
1017 	DPRINTF(("pci_xhci config_ep slot %u", slot));
1018 
1019 	dev = XHCI_SLOTDEV_PTR(sc, slot);
1020 	assert(dev != NULL);
1021 
1022 	if ((trb->dwTrb3 & XHCI_TRB_3_DCEP_BIT) != 0) {
1023 		DPRINTF(("pci_xhci config_ep - deconfigure ep slot %u",
1024 		        slot));
1025 		if (dev->dev_ue->ue_stop != NULL)
1026 			dev->dev_ue->ue_stop(dev->dev_sc);
1027 
1028 		dev->dev_slotstate = XHCI_ST_ADDRESSED;
1029 
1030 		dev->hci.hci_address = 0;
1031 		dev_ctx = pci_xhci_get_dev_ctx(sc, slot);
1032 
1033 		/* number of contexts */
1034 		dev_ctx->ctx_slot.dwSctx0 = FIELD_REPLACE(
1035 		    dev_ctx->ctx_slot.dwSctx0, 1, 0x1F, 27);
1036 
1037 		/* slot state */
1038 		dev_ctx->ctx_slot.dwSctx3 = FIELD_REPLACE(
1039 		    dev_ctx->ctx_slot.dwSctx3, XHCI_ST_SLCTX_ADDRESSED,
1040 		    0x1F, 27);
1041 
1042 		/* disable endpoints */
1043 		for (i = 2; i < 32; i++)
1044 			pci_xhci_disable_ep(dev, i);
1045 
1046 		cmderr = XHCI_TRB_ERROR_SUCCESS;
1047 
1048 		goto done;
1049 	}
1050 
1051 	if (dev->dev_slotstate < XHCI_ST_ADDRESSED) {
1052 		DPRINTF(("pci_xhci: config_ep slotstate x%x != addressed",
1053 		        dev->dev_slotstate));
1054 		cmderr = XHCI_TRB_ERROR_SLOT_NOT_ON;
1055 		goto done;
1056 	}
1057 
1058 	/* In addressed/configured state;
1059 	 * for each drop endpoint ctx flag:
1060 	 *   ep->state = DISABLED
1061 	 * for each add endpoint ctx flag:
1062 	 *   cp(ep-in, ep-out)
1063 	 *   ep->state = RUNNING
1064 	 * for each drop+add endpoint flag:
1065 	 *   reset ep resources
1066 	 *   cp(ep-in, ep-out)
1067 	 *   ep->state = RUNNING
1068 	 * if input->DisabledCtx[2-31] < 30: (at least 1 ep not disabled)
1069 	 *   slot->state = configured
1070 	 */
1071 
1072 	input_ctx = XHCI_GADDR(sc, trb->qwTrb0 & ~0xFUL);
1073 	dev_ctx = dev->dev_ctx;
1074 	DPRINTF(("pci_xhci: config_ep inputctx: D:x%08x A:x%08x 7:x%08x",
1075 		input_ctx->ctx_input.dwInCtx0, input_ctx->ctx_input.dwInCtx1,
1076 	        input_ctx->ctx_input.dwInCtx7));
1077 
1078 	for (i = 2; i <= 31; i++) {
1079 		ep_ctx = &dev_ctx->ctx_ep[i];
1080 
1081 		if (input_ctx->ctx_input.dwInCtx0 &
1082 		    XHCI_INCTX_0_DROP_MASK(i)) {
1083 			DPRINTF((" config ep - dropping ep %d", i));
1084 			pci_xhci_disable_ep(dev, i);
1085 		}
1086 
1087 		if (input_ctx->ctx_input.dwInCtx1 &
1088 		    XHCI_INCTX_1_ADD_MASK(i)) {
1089 			iep_ctx = &input_ctx->ctx_ep[i];
1090 
1091 			DPRINTF((" enable ep[%d]  %08x %08x %016lx %08x",
1092 			   i, iep_ctx->dwEpCtx0, iep_ctx->dwEpCtx1,
1093 			   iep_ctx->qwEpCtx2, iep_ctx->dwEpCtx4));
1094 
1095 			memcpy(ep_ctx, iep_ctx, sizeof(struct xhci_endp_ctx));
1096 
1097 			pci_xhci_init_ep(dev, i);
1098 
1099 			/* ep state */
1100 			ep_ctx->dwEpCtx0 = FIELD_REPLACE(
1101 			    ep_ctx->dwEpCtx0, XHCI_ST_EPCTX_RUNNING, 0x7, 0);
1102 		}
1103 	}
1104 
1105 	/* slot state to configured */
1106 	dev_ctx->ctx_slot.dwSctx3 = FIELD_REPLACE(
1107 	    dev_ctx->ctx_slot.dwSctx3, XHCI_ST_SLCTX_CONFIGURED, 0x1F, 27);
1108 	dev_ctx->ctx_slot.dwSctx0 = FIELD_COPY(
1109 	    dev_ctx->ctx_slot.dwSctx0, input_ctx->ctx_slot.dwSctx0, 0x1F, 27);
1110 	dev->dev_slotstate = XHCI_ST_CONFIGURED;
1111 
1112 	DPRINTF(("EP configured; slot %u [0]=0x%08x [1]=0x%08x [2]=0x%08x "
1113 	         "[3]=0x%08x",
1114 	    slot, dev_ctx->ctx_slot.dwSctx0, dev_ctx->ctx_slot.dwSctx1,
1115 	    dev_ctx->ctx_slot.dwSctx2, dev_ctx->ctx_slot.dwSctx3));
1116 
1117 done:
1118 	return (cmderr);
1119 }
1120 
1121 static uint32_t
1122 pci_xhci_cmd_reset_ep(struct pci_xhci_softc *sc, uint32_t slot,
1123     struct xhci_trb *trb)
1124 {
1125 	struct pci_xhci_dev_emu	*dev;
1126 	struct pci_xhci_dev_ep *devep;
1127 	struct xhci_dev_ctx	*dev_ctx;
1128 	struct xhci_endp_ctx	*ep_ctx;
1129 	uint32_t	cmderr, epid;
1130 	uint32_t	type;
1131 
1132 	epid = XHCI_TRB_3_EP_GET(trb->dwTrb3);
1133 
1134 	DPRINTF(("pci_xhci: reset ep %u: slot %u", epid, slot));
1135 
1136 	cmderr = XHCI_TRB_ERROR_SUCCESS;
1137 
1138 	type = XHCI_TRB_3_TYPE_GET(trb->dwTrb3);
1139 
1140 	dev = XHCI_SLOTDEV_PTR(sc, slot);
1141 	assert(dev != NULL);
1142 
1143 	if (type == XHCI_TRB_TYPE_STOP_EP &&
1144 	    (trb->dwTrb3 & XHCI_TRB_3_SUSP_EP_BIT) != 0) {
1145 		/* XXX suspend endpoint for 10ms */
1146 	}
1147 
1148 	if (epid < 1 || epid > 31) {
1149 		DPRINTF(("pci_xhci: reset ep: invalid epid %u", epid));
1150 		cmderr = XHCI_TRB_ERROR_TRB;
1151 		goto done;
1152 	}
1153 
1154 	devep = &dev->eps[epid];
1155 	if (devep->ep_xfer != NULL)
1156 		USB_DATA_XFER_RESET(devep->ep_xfer);
1157 
1158 	dev_ctx = dev->dev_ctx;
1159 	assert(dev_ctx != NULL);
1160 
1161 	ep_ctx = &dev_ctx->ctx_ep[epid];
1162 
1163 	ep_ctx->dwEpCtx0 = (ep_ctx->dwEpCtx0 & ~0x7) | XHCI_ST_EPCTX_STOPPED;
1164 
1165 	if (devep->ep_MaxPStreams == 0)
1166 		ep_ctx->qwEpCtx2 = devep->ep_ringaddr | devep->ep_ccs;
1167 
1168 	DPRINTF(("pci_xhci: reset ep[%u] %08x %08x %016lx %08x",
1169 	        epid, ep_ctx->dwEpCtx0, ep_ctx->dwEpCtx1, ep_ctx->qwEpCtx2,
1170 	        ep_ctx->dwEpCtx4));
1171 
1172 	if (type == XHCI_TRB_TYPE_RESET_EP &&
1173 	    (dev->dev_ue->ue_reset == NULL ||
1174 	    dev->dev_ue->ue_reset(dev->dev_sc) < 0)) {
1175 		cmderr = XHCI_TRB_ERROR_ENDP_NOT_ON;
1176 		goto done;
1177 	}
1178 
1179 done:
1180 	return (cmderr);
1181 }
1182 
1183 
1184 static uint32_t
1185 pci_xhci_find_stream(struct pci_xhci_softc *sc, struct xhci_endp_ctx *ep,
1186     struct pci_xhci_dev_ep *devep, uint32_t streamid,
1187     struct xhci_stream_ctx **osctx)
1188 {
1189 	struct xhci_stream_ctx *sctx;
1190 
1191 	if (devep->ep_MaxPStreams == 0)
1192 		return (XHCI_TRB_ERROR_TRB);
1193 
1194 	if (devep->ep_MaxPStreams > XHCI_STREAMS_MAX)
1195 		return (XHCI_TRB_ERROR_INVALID_SID);
1196 
1197 	if (XHCI_EPCTX_0_LSA_GET(ep->dwEpCtx0) == 0) {
1198 		DPRINTF(("pci_xhci: find_stream; LSA bit not set"));
1199 		return (XHCI_TRB_ERROR_INVALID_SID);
1200 	}
1201 
1202 	/* only support primary stream */
1203 	if (streamid > devep->ep_MaxPStreams)
1204 		return (XHCI_TRB_ERROR_STREAM_TYPE);
1205 
1206 	sctx = XHCI_GADDR(sc, ep->qwEpCtx2 & ~0xFUL) + streamid;
1207 	if (!XHCI_SCTX_0_SCT_GET(sctx->qwSctx0))
1208 		return (XHCI_TRB_ERROR_STREAM_TYPE);
1209 
1210 	*osctx = sctx;
1211 
1212 	return (XHCI_TRB_ERROR_SUCCESS);
1213 }
1214 
1215 
1216 static uint32_t
1217 pci_xhci_cmd_set_tr(struct pci_xhci_softc *sc, uint32_t slot,
1218     struct xhci_trb *trb)
1219 {
1220 	struct pci_xhci_dev_emu	*dev;
1221 	struct pci_xhci_dev_ep	*devep;
1222 	struct xhci_dev_ctx	*dev_ctx;
1223 	struct xhci_endp_ctx	*ep_ctx;
1224 	uint32_t	cmderr, epid;
1225 	uint32_t	streamid;
1226 
1227 	cmderr = XHCI_TRB_ERROR_SUCCESS;
1228 
1229 	dev = XHCI_SLOTDEV_PTR(sc, slot);
1230 	assert(dev != NULL);
1231 
1232 	DPRINTF(("pci_xhci set_tr: new-tr x%016lx, SCT %u DCS %u",
1233 	         (trb->qwTrb0 & ~0xF),  (uint32_t)((trb->qwTrb0 >> 1) & 0x7),
1234 	         (uint32_t)(trb->qwTrb0 & 0x1)));
1235 	DPRINTF(("                 stream-id %u, slot %u, epid %u, C %u",
1236 		 (trb->dwTrb2 >> 16) & 0xFFFF,
1237 	         XHCI_TRB_3_SLOT_GET(trb->dwTrb3),
1238 	         XHCI_TRB_3_EP_GET(trb->dwTrb3), trb->dwTrb3 & 0x1));
1239 
1240 	epid = XHCI_TRB_3_EP_GET(trb->dwTrb3);
1241 	if (epid < 1 || epid > 31) {
1242 		DPRINTF(("pci_xhci: set_tr_deq: invalid epid %u", epid));
1243 		cmderr = XHCI_TRB_ERROR_TRB;
1244 		goto done;
1245 	}
1246 
1247 	dev_ctx = dev->dev_ctx;
1248 	assert(dev_ctx != NULL);
1249 
1250 	ep_ctx = &dev_ctx->ctx_ep[epid];
1251 	devep = &dev->eps[epid];
1252 
1253 	switch (XHCI_EPCTX_0_EPSTATE_GET(ep_ctx->dwEpCtx0)) {
1254 	case XHCI_ST_EPCTX_STOPPED:
1255 	case XHCI_ST_EPCTX_ERROR:
1256 		break;
1257 	default:
1258 		DPRINTF(("pci_xhci cmd set_tr invalid state %x",
1259 		        XHCI_EPCTX_0_EPSTATE_GET(ep_ctx->dwEpCtx0)));
1260 		cmderr = XHCI_TRB_ERROR_CONTEXT_STATE;
1261 		goto done;
1262 	}
1263 
1264 	streamid = XHCI_TRB_2_STREAM_GET(trb->dwTrb2);
1265 	if (devep->ep_MaxPStreams > 0) {
1266 		struct xhci_stream_ctx *sctx;
1267 
1268 		sctx = NULL;
1269 		cmderr = pci_xhci_find_stream(sc, ep_ctx, devep, streamid,
1270 		    &sctx);
1271 		if (sctx != NULL) {
1272 			assert(devep->ep_sctx != NULL);
1273 
1274 			devep->ep_sctx[streamid].qwSctx0 = trb->qwTrb0;
1275 			devep->ep_sctx_trbs[streamid].ringaddr =
1276 			    trb->qwTrb0 & ~0xF;
1277 			devep->ep_sctx_trbs[streamid].ccs =
1278 			    XHCI_EPCTX_2_DCS_GET(trb->qwTrb0);
1279 		}
1280 	} else {
1281 		if (streamid != 0) {
1282 			DPRINTF(("pci_xhci cmd set_tr streamid %x != 0",
1283 			        streamid));
1284 		}
1285 		ep_ctx->qwEpCtx2 = trb->qwTrb0 & ~0xFUL;
1286 		devep->ep_ringaddr = ep_ctx->qwEpCtx2 & ~0xFUL;
1287 		devep->ep_ccs = trb->qwTrb0 & 0x1;
1288 		devep->ep_tr = XHCI_GADDR(sc, devep->ep_ringaddr);
1289 
1290 		DPRINTF(("pci_xhci set_tr first TRB:"));
1291 		pci_xhci_dump_trb(devep->ep_tr);
1292 	}
1293 	ep_ctx->dwEpCtx0 = (ep_ctx->dwEpCtx0 & ~0x7) | XHCI_ST_EPCTX_STOPPED;
1294 
1295 done:
1296 	return (cmderr);
1297 }
1298 
1299 static uint32_t
1300 pci_xhci_cmd_eval_ctx(struct pci_xhci_softc *sc, uint32_t slot,
1301     struct xhci_trb *trb)
1302 {
1303 	struct xhci_input_dev_ctx *input_ctx;
1304 	struct xhci_slot_ctx      *islot_ctx;
1305 	struct xhci_dev_ctx       *dev_ctx;
1306 	struct xhci_endp_ctx      *ep0_ctx;
1307 	uint32_t cmderr;
1308 
1309 	input_ctx = XHCI_GADDR(sc, trb->qwTrb0 & ~0xFUL);
1310 	islot_ctx = &input_ctx->ctx_slot;
1311 	ep0_ctx = &input_ctx->ctx_ep[1];
1312 
1313 	cmderr = XHCI_TRB_ERROR_SUCCESS;
1314 	DPRINTF(("pci_xhci: eval ctx, input ctl: D 0x%08x A 0x%08x,",
1315 	        input_ctx->ctx_input.dwInCtx0, input_ctx->ctx_input.dwInCtx1));
1316 	DPRINTF(("          slot %08x %08x %08x %08x",
1317 	        islot_ctx->dwSctx0, islot_ctx->dwSctx1,
1318 	        islot_ctx->dwSctx2, islot_ctx->dwSctx3));
1319 	DPRINTF(("          ep0  %08x %08x %016lx %08x",
1320 	        ep0_ctx->dwEpCtx0, ep0_ctx->dwEpCtx1, ep0_ctx->qwEpCtx2,
1321 	        ep0_ctx->dwEpCtx4));
1322 
1323 	/* this command expects drop-ctx=0 & add-ctx=slot+ep0 */
1324 	if ((input_ctx->ctx_input.dwInCtx0 != 0) ||
1325 	    (input_ctx->ctx_input.dwInCtx1 & 0x03) == 0) {
1326 		DPRINTF(("pci_xhci: eval ctx, input ctl invalid"));
1327 		cmderr = XHCI_TRB_ERROR_TRB;
1328 		goto done;
1329 	}
1330 
1331 	/* assign address to slot; in this emulation, slot_id = address */
1332 	dev_ctx = pci_xhci_get_dev_ctx(sc, slot);
1333 
1334 	DPRINTF(("pci_xhci: eval ctx, dev ctx"));
1335 	DPRINTF(("          slot %08x %08x %08x %08x",
1336 	        dev_ctx->ctx_slot.dwSctx0, dev_ctx->ctx_slot.dwSctx1,
1337 	        dev_ctx->ctx_slot.dwSctx2, dev_ctx->ctx_slot.dwSctx3));
1338 
1339 	if (input_ctx->ctx_input.dwInCtx1 & 0x01) {	/* slot ctx */
1340 		/* set max exit latency */
1341 		dev_ctx->ctx_slot.dwSctx1 = FIELD_COPY(
1342 		    dev_ctx->ctx_slot.dwSctx1, input_ctx->ctx_slot.dwSctx1,
1343 		    0xFFFF, 0);
1344 
1345 		/* set interrupter target */
1346 		dev_ctx->ctx_slot.dwSctx2 = FIELD_COPY(
1347 		    dev_ctx->ctx_slot.dwSctx2, input_ctx->ctx_slot.dwSctx2,
1348 		    0x3FF, 22);
1349 	}
1350 	if (input_ctx->ctx_input.dwInCtx1 & 0x02) {	/* control ctx */
1351 		/* set max packet size */
1352 		dev_ctx->ctx_ep[1].dwEpCtx1 = FIELD_COPY(
1353 		    dev_ctx->ctx_ep[1].dwEpCtx1, ep0_ctx->dwEpCtx1,
1354 		    0xFFFF, 16);
1355 
1356 		ep0_ctx = &dev_ctx->ctx_ep[1];
1357 	}
1358 
1359 	DPRINTF(("pci_xhci: eval ctx, output ctx"));
1360 	DPRINTF(("          slot %08x %08x %08x %08x",
1361 	        dev_ctx->ctx_slot.dwSctx0, dev_ctx->ctx_slot.dwSctx1,
1362 	        dev_ctx->ctx_slot.dwSctx2, dev_ctx->ctx_slot.dwSctx3));
1363 	DPRINTF(("          ep0  %08x %08x %016lx %08x",
1364 	        ep0_ctx->dwEpCtx0, ep0_ctx->dwEpCtx1, ep0_ctx->qwEpCtx2,
1365 	        ep0_ctx->dwEpCtx4));
1366 
1367 done:
1368 	return (cmderr);
1369 }
1370 
1371 static int
1372 pci_xhci_complete_commands(struct pci_xhci_softc *sc)
1373 {
1374 	struct xhci_trb	evtrb;
1375 	struct xhci_trb	*trb;
1376 	uint64_t	crcr;
1377 	uint32_t	ccs;		/* cycle state (XHCI 4.9.2) */
1378 	uint32_t	type;
1379 	uint32_t	slot;
1380 	uint32_t	cmderr;
1381 	int		error;
1382 
1383 	error = 0;
1384 	sc->opregs.crcr |= XHCI_CRCR_LO_CRR;
1385 
1386 	trb = sc->opregs.cr_p;
1387 	ccs = sc->opregs.crcr & XHCI_CRCR_LO_RCS;
1388 	crcr = sc->opregs.crcr & ~0xF;
1389 
1390 	while (1) {
1391 		sc->opregs.cr_p = trb;
1392 
1393 		type = XHCI_TRB_3_TYPE_GET(trb->dwTrb3);
1394 
1395 		if ((trb->dwTrb3 & XHCI_TRB_3_CYCLE_BIT) !=
1396 		    (ccs & XHCI_TRB_3_CYCLE_BIT))
1397 			break;
1398 
1399 		DPRINTF(("pci_xhci: cmd type 0x%x, Trb0 x%016lx dwTrb2 x%08x"
1400 		        " dwTrb3 x%08x, TRB_CYCLE %u/ccs %u",
1401 		        type, trb->qwTrb0, trb->dwTrb2, trb->dwTrb3,
1402 		        trb->dwTrb3 & XHCI_TRB_3_CYCLE_BIT, ccs));
1403 
1404 		cmderr = XHCI_TRB_ERROR_SUCCESS;
1405 		evtrb.dwTrb2 = 0;
1406 		evtrb.dwTrb3 = (ccs & XHCI_TRB_3_CYCLE_BIT) |
1407 		      XHCI_TRB_3_TYPE_SET(XHCI_TRB_EVENT_CMD_COMPLETE);
1408 		slot = 0;
1409 
1410 		switch (type) {
1411 		case XHCI_TRB_TYPE_LINK:			/* 0x06 */
1412 			if (trb->dwTrb3 & XHCI_TRB_3_TC_BIT)
1413 				ccs ^= XHCI_CRCR_LO_RCS;
1414 			break;
1415 
1416 		case XHCI_TRB_TYPE_ENABLE_SLOT:			/* 0x09 */
1417 			cmderr = pci_xhci_cmd_enable_slot(sc, &slot);
1418 			break;
1419 
1420 		case XHCI_TRB_TYPE_DISABLE_SLOT:		/* 0x0A */
1421 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1422 			cmderr = pci_xhci_cmd_disable_slot(sc, slot);
1423 			break;
1424 
1425 		case XHCI_TRB_TYPE_ADDRESS_DEVICE:		/* 0x0B */
1426 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1427 			cmderr = pci_xhci_cmd_address_device(sc, slot, trb);
1428 			break;
1429 
1430 		case XHCI_TRB_TYPE_CONFIGURE_EP:		/* 0x0C */
1431 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1432 			cmderr = pci_xhci_cmd_config_ep(sc, slot, trb);
1433 			break;
1434 
1435 		case XHCI_TRB_TYPE_EVALUATE_CTX:		/* 0x0D */
1436 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1437 			cmderr = pci_xhci_cmd_eval_ctx(sc, slot, trb);
1438 			break;
1439 
1440 		case XHCI_TRB_TYPE_RESET_EP:			/* 0x0E */
1441 			DPRINTF(("Reset Endpoint on slot %d", slot));
1442 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1443 			cmderr = pci_xhci_cmd_reset_ep(sc, slot, trb);
1444 			break;
1445 
1446 		case XHCI_TRB_TYPE_STOP_EP:			/* 0x0F */
1447 			DPRINTF(("Stop Endpoint on slot %d", slot));
1448 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1449 			cmderr = pci_xhci_cmd_reset_ep(sc, slot, trb);
1450 			break;
1451 
1452 		case XHCI_TRB_TYPE_SET_TR_DEQUEUE:		/* 0x10 */
1453 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1454 			cmderr = pci_xhci_cmd_set_tr(sc, slot, trb);
1455 			break;
1456 
1457 		case XHCI_TRB_TYPE_RESET_DEVICE:		/* 0x11 */
1458 			slot = XHCI_TRB_3_SLOT_GET(trb->dwTrb3);
1459 			cmderr = pci_xhci_cmd_reset_device(sc, slot);
1460 			break;
1461 
1462 		case XHCI_TRB_TYPE_FORCE_EVENT:			/* 0x12 */
1463 			/* TODO: */
1464 			break;
1465 
1466 		case XHCI_TRB_TYPE_NEGOTIATE_BW:		/* 0x13 */
1467 			break;
1468 
1469 		case XHCI_TRB_TYPE_SET_LATENCY_TOL:		/* 0x14 */
1470 			break;
1471 
1472 		case XHCI_TRB_TYPE_GET_PORT_BW:			/* 0x15 */
1473 			break;
1474 
1475 		case XHCI_TRB_TYPE_FORCE_HEADER:		/* 0x16 */
1476 			break;
1477 
1478 		case XHCI_TRB_TYPE_NOOP_CMD:			/* 0x17 */
1479 			break;
1480 
1481 		default:
1482 			DPRINTF(("pci_xhci: unsupported cmd %x", type));
1483 			break;
1484 		}
1485 
1486 		if (type != XHCI_TRB_TYPE_LINK) {
1487 			/*
1488 			 * insert command completion event and assert intr
1489 			 */
1490 			evtrb.qwTrb0 = crcr;
1491 			evtrb.dwTrb2 |= XHCI_TRB_2_ERROR_SET(cmderr);
1492 			evtrb.dwTrb3 |= XHCI_TRB_3_SLOT_SET(slot);
1493 			DPRINTF(("pci_xhci: command 0x%x result: 0x%x",
1494 			        type, cmderr));
1495 			pci_xhci_insert_event(sc, &evtrb, 1);
1496 		}
1497 
1498 		trb = pci_xhci_trb_next(sc, trb, &crcr);
1499 	}
1500 
1501 	sc->opregs.crcr = crcr | (sc->opregs.crcr & XHCI_CRCR_LO_CA) | ccs;
1502 	sc->opregs.crcr &= ~XHCI_CRCR_LO_CRR;
1503 	return (error);
1504 }
1505 
1506 static void
1507 pci_xhci_dump_trb(struct xhci_trb *trb)
1508 {
1509 	static const char *trbtypes[] = {
1510 		"RESERVED",
1511 		"NORMAL",
1512 		"SETUP_STAGE",
1513 		"DATA_STAGE",
1514 		"STATUS_STAGE",
1515 		"ISOCH",
1516 		"LINK",
1517 		"EVENT_DATA",
1518 		"NOOP",
1519 		"ENABLE_SLOT",
1520 		"DISABLE_SLOT",
1521 		"ADDRESS_DEVICE",
1522 		"CONFIGURE_EP",
1523 		"EVALUATE_CTX",
1524 		"RESET_EP",
1525 		"STOP_EP",
1526 		"SET_TR_DEQUEUE",
1527 		"RESET_DEVICE",
1528 		"FORCE_EVENT",
1529 		"NEGOTIATE_BW",
1530 		"SET_LATENCY_TOL",
1531 		"GET_PORT_BW",
1532 		"FORCE_HEADER",
1533 		"NOOP_CMD"
1534 	};
1535 	uint32_t type;
1536 
1537 	type = XHCI_TRB_3_TYPE_GET(trb->dwTrb3);
1538 	DPRINTF(("pci_xhci: trb[@%p] type x%02x %s 0:x%016lx 2:x%08x 3:x%08x",
1539 	         trb, type,
1540 	         type <= XHCI_TRB_TYPE_NOOP_CMD ? trbtypes[type] : "INVALID",
1541 	         trb->qwTrb0, trb->dwTrb2, trb->dwTrb3));
1542 }
1543 
1544 static int
1545 pci_xhci_xfer_complete(struct pci_xhci_softc *sc, struct usb_data_xfer *xfer,
1546      uint32_t slot, uint32_t epid, int *do_intr)
1547 {
1548 	struct pci_xhci_dev_emu *dev;
1549 	struct pci_xhci_dev_ep	*devep;
1550 	struct xhci_dev_ctx	*dev_ctx;
1551 	struct xhci_endp_ctx	*ep_ctx;
1552 	struct xhci_trb		*trb;
1553 	struct xhci_trb		evtrb;
1554 	uint32_t trbflags;
1555 	uint32_t edtla;
1556 	int i, err;
1557 
1558 	dev = XHCI_SLOTDEV_PTR(sc, slot);
1559 	devep = &dev->eps[epid];
1560 	dev_ctx = pci_xhci_get_dev_ctx(sc, slot);
1561 
1562 	assert(dev_ctx != NULL);
1563 
1564 	ep_ctx = &dev_ctx->ctx_ep[epid];
1565 
1566 	err = XHCI_TRB_ERROR_SUCCESS;
1567 	*do_intr = 0;
1568 	edtla = 0;
1569 
1570 	/* go through list of TRBs and insert event(s) */
1571 	for (i = xfer->head; xfer->ndata > 0; ) {
1572 		evtrb.qwTrb0 = (uint64_t)xfer->data[i].hci_data;
1573 		trb = XHCI_GADDR(sc, evtrb.qwTrb0);
1574 		trbflags = trb->dwTrb3;
1575 
1576 		DPRINTF(("pci_xhci: xfer[%d] done?%u:%d trb %x %016lx %x "
1577 		         "(err %d) IOC?%d",
1578 		     i, xfer->data[i].processed, xfer->data[i].blen,
1579 		     XHCI_TRB_3_TYPE_GET(trbflags), evtrb.qwTrb0,
1580 		     trbflags, err,
1581 		     trb->dwTrb3 & XHCI_TRB_3_IOC_BIT ? 1 : 0));
1582 
1583 		if (!xfer->data[i].processed) {
1584 			xfer->head = i;
1585 			break;
1586 		}
1587 
1588 		xfer->ndata--;
1589 		edtla += xfer->data[i].bdone;
1590 
1591 		trb->dwTrb3 = (trb->dwTrb3 & ~0x1) | (xfer->data[i].ccs);
1592 
1593 		pci_xhci_update_ep_ring(sc, dev, devep, ep_ctx,
1594 		    xfer->data[i].streamid, xfer->data[i].trbnext,
1595 		    xfer->data[i].ccs);
1596 
1597 		/* Only interrupt if IOC or short packet */
1598 		if (!(trb->dwTrb3 & XHCI_TRB_3_IOC_BIT) &&
1599 		    !((err == XHCI_TRB_ERROR_SHORT_PKT) &&
1600 		      (trb->dwTrb3 & XHCI_TRB_3_ISP_BIT))) {
1601 
1602 			i = (i + 1) % USB_MAX_XFER_BLOCKS;
1603 			continue;
1604 		}
1605 
1606 		evtrb.dwTrb2 = XHCI_TRB_2_ERROR_SET(err) |
1607 		               XHCI_TRB_2_REM_SET(xfer->data[i].blen);
1608 
1609 		evtrb.dwTrb3 = XHCI_TRB_3_TYPE_SET(XHCI_TRB_EVENT_TRANSFER) |
1610 		    XHCI_TRB_3_SLOT_SET(slot) | XHCI_TRB_3_EP_SET(epid);
1611 
1612 		if (XHCI_TRB_3_TYPE_GET(trbflags) == XHCI_TRB_TYPE_EVENT_DATA) {
1613 			DPRINTF(("pci_xhci EVENT_DATA edtla %u", edtla));
1614 			evtrb.qwTrb0 = trb->qwTrb0;
1615 			evtrb.dwTrb2 = (edtla & 0xFFFFF) |
1616 			         XHCI_TRB_2_ERROR_SET(err);
1617 			evtrb.dwTrb3 |= XHCI_TRB_3_ED_BIT;
1618 			edtla = 0;
1619 		}
1620 
1621 		*do_intr = 1;
1622 
1623 		err = pci_xhci_insert_event(sc, &evtrb, 0);
1624 		if (err != XHCI_TRB_ERROR_SUCCESS) {
1625 			break;
1626 		}
1627 
1628 		i = (i + 1) % USB_MAX_XFER_BLOCKS;
1629 	}
1630 
1631 	return (err);
1632 }
1633 
1634 static void
1635 pci_xhci_update_ep_ring(struct pci_xhci_softc *sc,
1636     struct pci_xhci_dev_emu *dev __unused, struct pci_xhci_dev_ep *devep,
1637     struct xhci_endp_ctx *ep_ctx, uint32_t streamid, uint64_t ringaddr, int ccs)
1638 {
1639 
1640 	if (devep->ep_MaxPStreams != 0) {
1641 		devep->ep_sctx[streamid].qwSctx0 = (ringaddr & ~0xFUL) |
1642 		                                   (ccs & 0x1);
1643 
1644 		devep->ep_sctx_trbs[streamid].ringaddr = ringaddr & ~0xFUL;
1645 		devep->ep_sctx_trbs[streamid].ccs = ccs & 0x1;
1646 		ep_ctx->qwEpCtx2 = (ep_ctx->qwEpCtx2 & ~0x1) | (ccs & 0x1);
1647 
1648 		DPRINTF(("xhci update ep-ring stream %d, addr %lx",
1649 		    streamid, devep->ep_sctx[streamid].qwSctx0));
1650 	} else {
1651 		devep->ep_ringaddr = ringaddr & ~0xFUL;
1652 		devep->ep_ccs = ccs & 0x1;
1653 		devep->ep_tr = XHCI_GADDR(sc, ringaddr & ~0xFUL);
1654 		ep_ctx->qwEpCtx2 = (ringaddr & ~0xFUL) | (ccs & 0x1);
1655 
1656 		DPRINTF(("xhci update ep-ring, addr %lx",
1657 		    (devep->ep_ringaddr | devep->ep_ccs)));
1658 	}
1659 }
1660 
1661 /*
1662  * Outstanding transfer still in progress (device NAK'd earlier) so retry
1663  * the transfer again to see if it succeeds.
1664  */
1665 static int
1666 pci_xhci_try_usb_xfer(struct pci_xhci_softc *sc,
1667     struct pci_xhci_dev_emu *dev, struct pci_xhci_dev_ep *devep,
1668     struct xhci_endp_ctx *ep_ctx, uint32_t slot, uint32_t epid)
1669 {
1670 	struct usb_data_xfer *xfer;
1671 	int		err;
1672 	int		do_intr;
1673 
1674 	ep_ctx->dwEpCtx0 = FIELD_REPLACE(
1675 		    ep_ctx->dwEpCtx0, XHCI_ST_EPCTX_RUNNING, 0x7, 0);
1676 
1677 	err = 0;
1678 	do_intr = 0;
1679 
1680 	xfer = devep->ep_xfer;
1681 	USB_DATA_XFER_LOCK(xfer);
1682 
1683 	/* outstanding requests queued up */
1684 	if (dev->dev_ue->ue_data != NULL) {
1685 		err = dev->dev_ue->ue_data(dev->dev_sc, xfer,
1686 		            epid & 0x1 ? USB_XFER_IN : USB_XFER_OUT, epid/2);
1687 		if (err == USB_ERR_CANCELLED) {
1688 			if (USB_DATA_GET_ERRCODE(&xfer->data[xfer->head]) ==
1689 			    USB_NAK)
1690 				err = XHCI_TRB_ERROR_SUCCESS;
1691 		} else {
1692 			err = pci_xhci_xfer_complete(sc, xfer, slot, epid,
1693 			                             &do_intr);
1694 			if (err == XHCI_TRB_ERROR_SUCCESS && do_intr) {
1695 				pci_xhci_assert_interrupt(sc);
1696 			}
1697 
1698 
1699 			/* XXX should not do it if error? */
1700 			USB_DATA_XFER_RESET(xfer);
1701 		}
1702 	}
1703 
1704 	USB_DATA_XFER_UNLOCK(xfer);
1705 
1706 
1707 	return (err);
1708 }
1709 
1710 
1711 static int
1712 pci_xhci_handle_transfer(struct pci_xhci_softc *sc,
1713     struct pci_xhci_dev_emu *dev, struct pci_xhci_dev_ep *devep,
1714     struct xhci_endp_ctx *ep_ctx, struct xhci_trb *trb, uint32_t slot,
1715     uint32_t epid, uint64_t addr, uint32_t ccs, uint32_t streamid)
1716 {
1717 	struct xhci_trb *setup_trb;
1718 	struct usb_data_xfer *xfer;
1719 	struct usb_data_xfer_block *xfer_block;
1720 	uint64_t	val;
1721 	uint32_t	trbflags;
1722 	int		do_intr, err;
1723 	int		do_retry;
1724 
1725 	ep_ctx->dwEpCtx0 = FIELD_REPLACE(ep_ctx->dwEpCtx0,
1726 	                                 XHCI_ST_EPCTX_RUNNING, 0x7, 0);
1727 
1728 	xfer = devep->ep_xfer;
1729 	USB_DATA_XFER_LOCK(xfer);
1730 
1731 	DPRINTF(("pci_xhci handle_transfer slot %u", slot));
1732 
1733 retry:
1734 	err = 0;
1735 	do_retry = 0;
1736 	do_intr = 0;
1737 	setup_trb = NULL;
1738 
1739 	while (1) {
1740 		pci_xhci_dump_trb(trb);
1741 
1742 		trbflags = trb->dwTrb3;
1743 
1744 		if (XHCI_TRB_3_TYPE_GET(trbflags) != XHCI_TRB_TYPE_LINK &&
1745 		    (trbflags & XHCI_TRB_3_CYCLE_BIT) !=
1746 		    (ccs & XHCI_TRB_3_CYCLE_BIT)) {
1747 			DPRINTF(("Cycle-bit changed trbflags %x, ccs %x",
1748 			    trbflags & XHCI_TRB_3_CYCLE_BIT, ccs));
1749 			break;
1750 		}
1751 
1752 		xfer_block = NULL;
1753 
1754 		switch (XHCI_TRB_3_TYPE_GET(trbflags)) {
1755 		case XHCI_TRB_TYPE_LINK:
1756 			if (trb->dwTrb3 & XHCI_TRB_3_TC_BIT)
1757 				ccs ^= 0x1;
1758 
1759 			xfer_block = usb_data_xfer_append(xfer, NULL, 0,
1760 			                                  (void *)addr, ccs);
1761 			xfer_block->processed = 1;
1762 			break;
1763 
1764 		case XHCI_TRB_TYPE_SETUP_STAGE:
1765 			if ((trbflags & XHCI_TRB_3_IDT_BIT) == 0 ||
1766 			    XHCI_TRB_2_BYTES_GET(trb->dwTrb2) != 8) {
1767 				DPRINTF(("pci_xhci: invalid setup trb"));
1768 				err = XHCI_TRB_ERROR_TRB;
1769 				goto errout;
1770 			}
1771 			setup_trb = trb;
1772 
1773 			val = trb->qwTrb0;
1774 			if (!xfer->ureq)
1775 				xfer->ureq = malloc(
1776 				           sizeof(struct usb_device_request));
1777 			memcpy(xfer->ureq, &val,
1778 			       sizeof(struct usb_device_request));
1779 
1780 			xfer_block = usb_data_xfer_append(xfer, NULL, 0,
1781 			                                  (void *)addr, ccs);
1782 			xfer_block->processed = 1;
1783 			break;
1784 
1785 		case XHCI_TRB_TYPE_NORMAL:
1786 		case XHCI_TRB_TYPE_ISOCH:
1787 			if (setup_trb != NULL) {
1788 				DPRINTF(("pci_xhci: trb not supposed to be in "
1789 				         "ctl scope"));
1790 				err = XHCI_TRB_ERROR_TRB;
1791 				goto errout;
1792 			}
1793 			/* fall through */
1794 
1795 		case XHCI_TRB_TYPE_DATA_STAGE:
1796 			xfer_block = usb_data_xfer_append(xfer,
1797 			     (void *)(trbflags & XHCI_TRB_3_IDT_BIT ?
1798 			         &trb->qwTrb0 : XHCI_GADDR(sc, trb->qwTrb0)),
1799 			     trb->dwTrb2 & 0x1FFFF, (void *)addr, ccs);
1800 			break;
1801 
1802 		case XHCI_TRB_TYPE_STATUS_STAGE:
1803 			xfer_block = usb_data_xfer_append(xfer, NULL, 0,
1804 			                                  (void *)addr, ccs);
1805 			break;
1806 
1807 		case XHCI_TRB_TYPE_NOOP:
1808 			xfer_block = usb_data_xfer_append(xfer, NULL, 0,
1809 			                                  (void *)addr, ccs);
1810 			xfer_block->processed = 1;
1811 			break;
1812 
1813 		case XHCI_TRB_TYPE_EVENT_DATA:
1814 			xfer_block = usb_data_xfer_append(xfer, NULL, 0,
1815 			                                  (void *)addr, ccs);
1816 			if ((epid > 1) && (trbflags & XHCI_TRB_3_IOC_BIT)) {
1817 				xfer_block->processed = 1;
1818 			}
1819 			break;
1820 
1821 		default:
1822 			DPRINTF(("pci_xhci: handle xfer unexpected trb type "
1823 			         "0x%x",
1824 			         XHCI_TRB_3_TYPE_GET(trbflags)));
1825 			err = XHCI_TRB_ERROR_TRB;
1826 			goto errout;
1827 		}
1828 
1829 		trb = pci_xhci_trb_next(sc, trb, &addr);
1830 
1831 		DPRINTF(("pci_xhci: next trb: 0x%lx", (uint64_t)trb));
1832 
1833 		if (xfer_block) {
1834 			xfer_block->trbnext = addr;
1835 			xfer_block->streamid = streamid;
1836 		}
1837 
1838 		if (!setup_trb && !(trbflags & XHCI_TRB_3_CHAIN_BIT) &&
1839 		    XHCI_TRB_3_TYPE_GET(trbflags) != XHCI_TRB_TYPE_LINK) {
1840 			break;
1841 		}
1842 
1843 		/* handle current batch that requires interrupt on complete */
1844 		if (trbflags & XHCI_TRB_3_IOC_BIT) {
1845 			DPRINTF(("pci_xhci: trb IOC bit set"));
1846 			if (epid == 1)
1847 				do_retry = 1;
1848 			break;
1849 		}
1850 	}
1851 
1852 	DPRINTF(("pci_xhci[%d]: xfer->ndata %u", __LINE__, xfer->ndata));
1853 
1854 	if (xfer->ndata <= 0)
1855 		goto errout;
1856 
1857 	if (epid == 1) {
1858 		err = USB_ERR_NOT_STARTED;
1859 		if (dev->dev_ue->ue_request != NULL)
1860 			err = dev->dev_ue->ue_request(dev->dev_sc, xfer);
1861 		setup_trb = NULL;
1862 	} else {
1863 		/* handle data transfer */
1864 		pci_xhci_try_usb_xfer(sc, dev, devep, ep_ctx, slot, epid);
1865 		err = XHCI_TRB_ERROR_SUCCESS;
1866 		goto errout;
1867 	}
1868 
1869 	err = USB_TO_XHCI_ERR(err);
1870 	if ((err == XHCI_TRB_ERROR_SUCCESS) ||
1871 	    (err == XHCI_TRB_ERROR_STALL) ||
1872 	    (err == XHCI_TRB_ERROR_SHORT_PKT)) {
1873 		err = pci_xhci_xfer_complete(sc, xfer, slot, epid, &do_intr);
1874 		if (err != XHCI_TRB_ERROR_SUCCESS)
1875 			do_retry = 0;
1876 	}
1877 
1878 errout:
1879 	if (err == XHCI_TRB_ERROR_EV_RING_FULL)
1880 		DPRINTF(("pci_xhci[%d]: event ring full", __LINE__));
1881 
1882 	if (!do_retry)
1883 		USB_DATA_XFER_UNLOCK(xfer);
1884 
1885 	if (do_intr)
1886 		pci_xhci_assert_interrupt(sc);
1887 
1888 	if (do_retry) {
1889 		USB_DATA_XFER_RESET(xfer);
1890 		DPRINTF(("pci_xhci[%d]: retry:continuing with next TRBs",
1891 		         __LINE__));
1892 		goto retry;
1893 	}
1894 
1895 	if (epid == 1)
1896 		USB_DATA_XFER_RESET(xfer);
1897 
1898 	return (err);
1899 }
1900 
1901 static void
1902 pci_xhci_device_doorbell(struct pci_xhci_softc *sc, uint32_t slot,
1903     uint32_t epid, uint32_t streamid)
1904 {
1905 	struct pci_xhci_dev_emu *dev;
1906 	struct pci_xhci_dev_ep	*devep;
1907 	struct xhci_dev_ctx	*dev_ctx;
1908 	struct xhci_endp_ctx	*ep_ctx;
1909 	struct pci_xhci_trb_ring *sctx_tr;
1910 	struct xhci_trb	*trb;
1911 	uint64_t	ringaddr;
1912 	uint32_t	ccs;
1913 
1914 	DPRINTF(("pci_xhci doorbell slot %u epid %u stream %u",
1915 	    slot, epid, streamid));
1916 
1917 	if (slot == 0 || slot > XHCI_MAX_SLOTS) {
1918 		DPRINTF(("pci_xhci: invalid doorbell slot %u", slot));
1919 		return;
1920 	}
1921 
1922 	if (epid == 0 || epid >= XHCI_MAX_ENDPOINTS) {
1923 		DPRINTF(("pci_xhci: invalid endpoint %u", epid));
1924 		return;
1925 	}
1926 
1927 	dev = XHCI_SLOTDEV_PTR(sc, slot);
1928 	devep = &dev->eps[epid];
1929 	dev_ctx = pci_xhci_get_dev_ctx(sc, slot);
1930 	if (!dev_ctx) {
1931 		return;
1932 	}
1933 	ep_ctx = &dev_ctx->ctx_ep[epid];
1934 
1935 	sctx_tr = NULL;
1936 
1937 	DPRINTF(("pci_xhci: device doorbell ep[%u] %08x %08x %016lx %08x",
1938 	        epid, ep_ctx->dwEpCtx0, ep_ctx->dwEpCtx1, ep_ctx->qwEpCtx2,
1939 	        ep_ctx->dwEpCtx4));
1940 
1941 	if (ep_ctx->qwEpCtx2 == 0)
1942 		return;
1943 
1944 	/* handle pending transfers */
1945 	if (devep->ep_xfer->ndata > 0) {
1946 		pci_xhci_try_usb_xfer(sc, dev, devep, ep_ctx, slot, epid);
1947 		return;
1948 	}
1949 
1950 	/* get next trb work item */
1951 	if (devep->ep_MaxPStreams != 0) {
1952 		struct xhci_stream_ctx *sctx;
1953 
1954 		/*
1955 		 * Stream IDs of 0, 65535 (any stream), and 65534
1956 		 * (prime) are invalid.
1957 		 */
1958 		if (streamid == 0 || streamid == 65534 || streamid == 65535) {
1959 			DPRINTF(("pci_xhci: invalid stream %u", streamid));
1960 			return;
1961 		}
1962 
1963 		sctx = NULL;
1964 		pci_xhci_find_stream(sc, ep_ctx, devep, streamid, &sctx);
1965 		if (sctx == NULL) {
1966 			DPRINTF(("pci_xhci: invalid stream %u", streamid));
1967 			return;
1968 		}
1969 		sctx_tr = &devep->ep_sctx_trbs[streamid];
1970 		ringaddr = sctx_tr->ringaddr;
1971 		ccs = sctx_tr->ccs;
1972 		trb = XHCI_GADDR(sc, sctx_tr->ringaddr & ~0xFUL);
1973 		DPRINTF(("doorbell, stream %u, ccs %lx, trb ccs %x",
1974 		        streamid, ep_ctx->qwEpCtx2 & XHCI_TRB_3_CYCLE_BIT,
1975 		        trb->dwTrb3 & XHCI_TRB_3_CYCLE_BIT));
1976 	} else {
1977 		if (streamid != 0) {
1978 			DPRINTF(("pci_xhci: invalid stream %u", streamid));
1979 			return;
1980 		}
1981 		ringaddr = devep->ep_ringaddr;
1982 		ccs = devep->ep_ccs;
1983 		trb = devep->ep_tr;
1984 		DPRINTF(("doorbell, ccs %lx, trb ccs %x",
1985 		        ep_ctx->qwEpCtx2 & XHCI_TRB_3_CYCLE_BIT,
1986 		        trb->dwTrb3 & XHCI_TRB_3_CYCLE_BIT));
1987 	}
1988 
1989 	if (XHCI_TRB_3_TYPE_GET(trb->dwTrb3) == 0) {
1990 		DPRINTF(("pci_xhci: ring %lx trb[%lx] EP %u is RESERVED?",
1991 		        ep_ctx->qwEpCtx2, devep->ep_ringaddr, epid));
1992 		return;
1993 	}
1994 
1995 	pci_xhci_handle_transfer(sc, dev, devep, ep_ctx, trb, slot, epid,
1996 	                         ringaddr, ccs, streamid);
1997 }
1998 
1999 static void
2000 pci_xhci_dbregs_write(struct pci_xhci_softc *sc, uint64_t offset,
2001     uint64_t value)
2002 {
2003 
2004 	offset = (offset - sc->dboff) / sizeof(uint32_t);
2005 
2006 	DPRINTF(("pci_xhci: doorbell write offset 0x%lx: 0x%lx",
2007 	        offset, value));
2008 
2009 	if (XHCI_HALTED(sc)) {
2010 		DPRINTF(("pci_xhci: controller halted"));
2011 		return;
2012 	}
2013 
2014 	if (offset == 0)
2015 		pci_xhci_complete_commands(sc);
2016 	else if (sc->portregs != NULL)
2017 		pci_xhci_device_doorbell(sc, offset,
2018 		   XHCI_DB_TARGET_GET(value), XHCI_DB_SID_GET(value));
2019 }
2020 
2021 static void
2022 pci_xhci_rtsregs_write(struct pci_xhci_softc *sc, uint64_t offset,
2023     uint64_t value)
2024 {
2025 	struct pci_xhci_rtsregs *rts;
2026 
2027 	offset -= sc->rtsoff;
2028 
2029 	if (offset == 0) {
2030 		DPRINTF(("pci_xhci attempted write to MFINDEX"));
2031 		return;
2032 	}
2033 
2034 	DPRINTF(("pci_xhci: runtime regs write offset 0x%lx: 0x%lx",
2035 	        offset, value));
2036 
2037 	offset -= 0x20;		/* start of intrreg */
2038 
2039 	rts = &sc->rtsregs;
2040 
2041 	switch (offset) {
2042 	case 0x00:
2043 		if (value & XHCI_IMAN_INTR_PEND)
2044 			rts->intrreg.iman &= ~XHCI_IMAN_INTR_PEND;
2045 		rts->intrreg.iman = (value & XHCI_IMAN_INTR_ENA) |
2046 		                    (rts->intrreg.iman & XHCI_IMAN_INTR_PEND);
2047 
2048 		if (!(value & XHCI_IMAN_INTR_ENA))
2049 			pci_xhci_deassert_interrupt(sc);
2050 
2051 		break;
2052 
2053 	case 0x04:
2054 		rts->intrreg.imod = value;
2055 		break;
2056 
2057 	case 0x08:
2058 		rts->intrreg.erstsz = value & 0xFFFF;
2059 		break;
2060 
2061 	case 0x10:
2062 		/* ERSTBA low bits */
2063 		rts->intrreg.erstba = MASK_64_HI(sc->rtsregs.intrreg.erstba) |
2064 		                      (value & ~0x3F);
2065 		break;
2066 
2067 	case 0x14:
2068 		/* ERSTBA high bits */
2069 		rts->intrreg.erstba = (value << 32) |
2070 		    MASK_64_LO(sc->rtsregs.intrreg.erstba);
2071 
2072 		rts->erstba_p = XHCI_GADDR(sc,
2073 		                        sc->rtsregs.intrreg.erstba & ~0x3FUL);
2074 
2075 		rts->erst_p = XHCI_GADDR(sc,
2076 		              sc->rtsregs.erstba_p->qwEvrsTablePtr & ~0x3FUL);
2077 
2078 		rts->er_enq_idx = 0;
2079 		rts->er_events_cnt = 0;
2080 
2081 		DPRINTF(("pci_xhci: wr erstba erst (%p) ptr 0x%lx, sz %u",
2082 		        rts->erstba_p,
2083 		        rts->erstba_p->qwEvrsTablePtr,
2084 		        rts->erstba_p->dwEvrsTableSize));
2085 		break;
2086 
2087 	case 0x18:
2088 		/* ERDP low bits */
2089 		rts->intrreg.erdp =
2090 		    MASK_64_HI(sc->rtsregs.intrreg.erdp) |
2091 		    (rts->intrreg.erdp & XHCI_ERDP_LO_BUSY) |
2092 		    (value & ~0xF);
2093 		if (value & XHCI_ERDP_LO_BUSY) {
2094 			rts->intrreg.erdp &= ~XHCI_ERDP_LO_BUSY;
2095 			rts->intrreg.iman &= ~XHCI_IMAN_INTR_PEND;
2096 		}
2097 
2098 		rts->er_deq_seg = XHCI_ERDP_LO_SINDEX(value);
2099 
2100 		break;
2101 
2102 	case 0x1C:
2103 		/* ERDP high bits */
2104 		rts->intrreg.erdp = (value << 32) |
2105 		    MASK_64_LO(sc->rtsregs.intrreg.erdp);
2106 
2107 		if (rts->er_events_cnt > 0) {
2108 			uint64_t erdp;
2109 			int erdp_i;
2110 
2111 			erdp = rts->intrreg.erdp & ~0xF;
2112 			erdp_i = (erdp - rts->erstba_p->qwEvrsTablePtr) /
2113 			           sizeof(struct xhci_trb);
2114 
2115 			if (erdp_i <= rts->er_enq_idx)
2116 				rts->er_events_cnt = rts->er_enq_idx - erdp_i;
2117 			else
2118 				rts->er_events_cnt =
2119 				          rts->erstba_p->dwEvrsTableSize -
2120 				          (erdp_i - rts->er_enq_idx);
2121 
2122 			DPRINTF(("pci_xhci: erdp 0x%lx, events cnt %u",
2123 			        erdp, rts->er_events_cnt));
2124 		}
2125 
2126 		break;
2127 
2128 	default:
2129 		DPRINTF(("pci_xhci attempted write to RTS offset 0x%lx",
2130 		        offset));
2131 		break;
2132 	}
2133 }
2134 
2135 static uint64_t
2136 pci_xhci_portregs_read(struct pci_xhci_softc *sc, uint64_t offset)
2137 {
2138 	int port;
2139 	uint32_t *p;
2140 
2141 	if (sc->portregs == NULL)
2142 		return (0);
2143 
2144 	port = (offset - 0x3F0) / 0x10;
2145 
2146 	if (port > XHCI_MAX_DEVS) {
2147 		DPRINTF(("pci_xhci: portregs_read port %d >= XHCI_MAX_DEVS",
2148 		    port));
2149 
2150 		/* return default value for unused port */
2151 		return (XHCI_PS_SPEED_SET(3));
2152 	}
2153 
2154 	offset = (offset - 0x3F0) % 0x10;
2155 
2156 	p = &sc->portregs[port].portsc;
2157 	p += offset / sizeof(uint32_t);
2158 
2159 	DPRINTF(("pci_xhci: portregs read offset 0x%lx port %u -> 0x%x",
2160 	        offset, port, *p));
2161 
2162 	return (*p);
2163 }
2164 
2165 static void
2166 pci_xhci_hostop_write(struct pci_xhci_softc *sc, uint64_t offset,
2167     uint64_t value)
2168 {
2169 	offset -= XHCI_CAPLEN;
2170 
2171 	if (offset < 0x400)
2172 		DPRINTF(("pci_xhci: hostop write offset 0x%lx: 0x%lx",
2173 		         offset, value));
2174 
2175 	switch (offset) {
2176 	case XHCI_USBCMD:
2177 		sc->opregs.usbcmd = pci_xhci_usbcmd_write(sc, value & 0x3F0F);
2178 		break;
2179 
2180 	case XHCI_USBSTS:
2181 		/* clear bits on write */
2182 		sc->opregs.usbsts &= ~(value &
2183 		      (XHCI_STS_HSE|XHCI_STS_EINT|XHCI_STS_PCD|XHCI_STS_SSS|
2184 		       XHCI_STS_RSS|XHCI_STS_SRE|XHCI_STS_CNR));
2185 		break;
2186 
2187 	case XHCI_PAGESIZE:
2188 		/* read only */
2189 		break;
2190 
2191 	case XHCI_DNCTRL:
2192 		sc->opregs.dnctrl = value & 0xFFFF;
2193 		break;
2194 
2195 	case XHCI_CRCR_LO:
2196 		if (sc->opregs.crcr & XHCI_CRCR_LO_CRR) {
2197 			sc->opregs.crcr &= ~(XHCI_CRCR_LO_CS|XHCI_CRCR_LO_CA);
2198 			sc->opregs.crcr |= value &
2199 			                   (XHCI_CRCR_LO_CS|XHCI_CRCR_LO_CA);
2200 		} else {
2201 			sc->opregs.crcr = MASK_64_HI(sc->opregs.crcr) |
2202 			           (value & (0xFFFFFFC0 | XHCI_CRCR_LO_RCS));
2203 		}
2204 		break;
2205 
2206 	case XHCI_CRCR_HI:
2207 		if (!(sc->opregs.crcr & XHCI_CRCR_LO_CRR)) {
2208 			sc->opregs.crcr = MASK_64_LO(sc->opregs.crcr) |
2209 			                  (value << 32);
2210 
2211 			sc->opregs.cr_p = XHCI_GADDR(sc,
2212 			                  sc->opregs.crcr & ~0xF);
2213 		}
2214 
2215 		if (sc->opregs.crcr & XHCI_CRCR_LO_CS) {
2216 			/* Stop operation of Command Ring */
2217 		}
2218 
2219 		if (sc->opregs.crcr & XHCI_CRCR_LO_CA) {
2220 			/* Abort command */
2221 		}
2222 
2223 		break;
2224 
2225 	case XHCI_DCBAAP_LO:
2226 		sc->opregs.dcbaap = MASK_64_HI(sc->opregs.dcbaap) |
2227 		                    (value & 0xFFFFFFC0);
2228 		break;
2229 
2230 	case XHCI_DCBAAP_HI:
2231 		sc->opregs.dcbaap =  MASK_64_LO(sc->opregs.dcbaap) |
2232 		                     (value << 32);
2233 		sc->opregs.dcbaa_p = XHCI_GADDR(sc, sc->opregs.dcbaap & ~0x3FUL);
2234 
2235 		DPRINTF(("pci_xhci: opregs dcbaap = 0x%lx (vaddr 0x%lx)",
2236 		    sc->opregs.dcbaap, (uint64_t)sc->opregs.dcbaa_p));
2237 		break;
2238 
2239 	case XHCI_CONFIG:
2240 		sc->opregs.config = value & 0x03FF;
2241 		break;
2242 
2243 	default:
2244 		if (offset >= 0x400)
2245 			pci_xhci_portregs_write(sc, offset, value);
2246 
2247 		break;
2248 	}
2249 }
2250 
2251 
2252 static void
2253 pci_xhci_write(struct vmctx *ctx __unused, int vcpu __unused,
2254     struct pci_devinst *pi, int baridx, uint64_t offset, int size __unused,
2255     uint64_t value)
2256 {
2257 	struct pci_xhci_softc *sc;
2258 
2259 	sc = pi->pi_arg;
2260 
2261 	assert(baridx == 0);
2262 
2263 	pthread_mutex_lock(&sc->mtx);
2264 	if (offset < XHCI_CAPLEN)	/* read only registers */
2265 		WPRINTF(("pci_xhci: write RO-CAPs offset %ld", offset));
2266 	else if (offset < sc->dboff)
2267 		pci_xhci_hostop_write(sc, offset, value);
2268 	else if (offset < sc->rtsoff)
2269 		pci_xhci_dbregs_write(sc, offset, value);
2270 	else if (offset < sc->regsend)
2271 		pci_xhci_rtsregs_write(sc, offset, value);
2272 	else
2273 		WPRINTF(("pci_xhci: write invalid offset %ld", offset));
2274 
2275 	pthread_mutex_unlock(&sc->mtx);
2276 }
2277 
2278 static uint64_t
2279 pci_xhci_hostcap_read(struct pci_xhci_softc *sc, uint64_t offset)
2280 {
2281 	uint64_t	value;
2282 
2283 	switch (offset) {
2284 	case XHCI_CAPLENGTH:	/* 0x00 */
2285 		value = sc->caplength;
2286 		break;
2287 
2288 	case XHCI_HCSPARAMS1:	/* 0x04 */
2289 		value = sc->hcsparams1;
2290 		break;
2291 
2292 	case XHCI_HCSPARAMS2:	/* 0x08 */
2293 		value = sc->hcsparams2;
2294 		break;
2295 
2296 	case XHCI_HCSPARAMS3:	/* 0x0C */
2297 		value = sc->hcsparams3;
2298 		break;
2299 
2300 	case XHCI_HCSPARAMS0:	/* 0x10 */
2301 		value = sc->hccparams1;
2302 		break;
2303 
2304 	case XHCI_DBOFF:	/* 0x14 */
2305 		value = sc->dboff;
2306 		break;
2307 
2308 	case XHCI_RTSOFF:	/* 0x18 */
2309 		value = sc->rtsoff;
2310 		break;
2311 
2312 	case XHCI_HCCPRAMS2:	/* 0x1C */
2313 		value = sc->hccparams2;
2314 		break;
2315 
2316 	default:
2317 		value = 0;
2318 		break;
2319 	}
2320 
2321 	DPRINTF(("pci_xhci: hostcap read offset 0x%lx -> 0x%lx",
2322 	        offset, value));
2323 
2324 	return (value);
2325 }
2326 
2327 static uint64_t
2328 pci_xhci_hostop_read(struct pci_xhci_softc *sc, uint64_t offset)
2329 {
2330 	uint64_t value;
2331 
2332 	offset = (offset - XHCI_CAPLEN);
2333 
2334 	switch (offset) {
2335 	case XHCI_USBCMD:	/* 0x00 */
2336 		value = sc->opregs.usbcmd;
2337 		break;
2338 
2339 	case XHCI_USBSTS:	/* 0x04 */
2340 		value = sc->opregs.usbsts;
2341 		break;
2342 
2343 	case XHCI_PAGESIZE:	/* 0x08 */
2344 		value = sc->opregs.pgsz;
2345 		break;
2346 
2347 	case XHCI_DNCTRL:	/* 0x14 */
2348 		value = sc->opregs.dnctrl;
2349 		break;
2350 
2351 	case XHCI_CRCR_LO:	/* 0x18 */
2352 		value = sc->opregs.crcr & XHCI_CRCR_LO_CRR;
2353 		break;
2354 
2355 	case XHCI_CRCR_HI:	/* 0x1C */
2356 		value = 0;
2357 		break;
2358 
2359 	case XHCI_DCBAAP_LO:	/* 0x30 */
2360 		value = sc->opregs.dcbaap & 0xFFFFFFFF;
2361 		break;
2362 
2363 	case XHCI_DCBAAP_HI:	/* 0x34 */
2364 		value = (sc->opregs.dcbaap >> 32) & 0xFFFFFFFF;
2365 		break;
2366 
2367 	case XHCI_CONFIG:	/* 0x38 */
2368 		value = sc->opregs.config;
2369 		break;
2370 
2371 	default:
2372 		if (offset >= 0x400)
2373 			value = pci_xhci_portregs_read(sc, offset);
2374 		else
2375 			value = 0;
2376 
2377 		break;
2378 	}
2379 
2380 	if (offset < 0x400)
2381 		DPRINTF(("pci_xhci: hostop read offset 0x%lx -> 0x%lx",
2382 		        offset, value));
2383 
2384 	return (value);
2385 }
2386 
2387 static uint64_t
2388 pci_xhci_dbregs_read(struct pci_xhci_softc *sc __unused,
2389     uint64_t offset __unused)
2390 {
2391 	/* read doorbell always returns 0 */
2392 	return (0);
2393 }
2394 
2395 static uint64_t
2396 pci_xhci_rtsregs_read(struct pci_xhci_softc *sc, uint64_t offset)
2397 {
2398 	uint32_t	value;
2399 
2400 	offset -= sc->rtsoff;
2401 	value = 0;
2402 
2403 	if (offset == XHCI_MFINDEX) {
2404 		value = sc->rtsregs.mfindex;
2405 	} else if (offset >= 0x20) {
2406 		int item;
2407 		uint32_t *p;
2408 
2409 		offset -= 0x20;
2410 		item = offset % 32;
2411 
2412 		assert(offset < sizeof(sc->rtsregs.intrreg));
2413 
2414 		p = &sc->rtsregs.intrreg.iman;
2415 		p += item / sizeof(uint32_t);
2416 		value = *p;
2417 	}
2418 
2419 	DPRINTF(("pci_xhci: rtsregs read offset 0x%lx -> 0x%x",
2420 	        offset, value));
2421 
2422 	return (value);
2423 }
2424 
2425 static uint64_t
2426 pci_xhci_xecp_read(struct pci_xhci_softc *sc, uint64_t offset)
2427 {
2428 	uint32_t	value;
2429 
2430 	offset -= sc->regsend;
2431 	value = 0;
2432 
2433 	switch (offset) {
2434 	case 0:
2435 		/* rev major | rev minor | next-cap | cap-id */
2436 		value = (0x02 << 24) | (4 << 8) | XHCI_ID_PROTOCOLS;
2437 		break;
2438 	case 4:
2439 		/* name string = "USB" */
2440 		value = 0x20425355;
2441 		break;
2442 	case 8:
2443 		/* psic | proto-defined | compat # | compat offset */
2444 		value = ((XHCI_MAX_DEVS/2) << 8) | sc->usb2_port_start;
2445 		break;
2446 	case 12:
2447 		break;
2448 	case 16:
2449 		/* rev major | rev minor | next-cap | cap-id */
2450 		value = (0x03 << 24) | XHCI_ID_PROTOCOLS;
2451 		break;
2452 	case 20:
2453 		/* name string = "USB" */
2454 		value = 0x20425355;
2455 		break;
2456 	case 24:
2457 		/* psic | proto-defined | compat # | compat offset */
2458 		value = ((XHCI_MAX_DEVS/2) << 8) | sc->usb3_port_start;
2459 		break;
2460 	case 28:
2461 		break;
2462 	default:
2463 		DPRINTF(("pci_xhci: xecp invalid offset 0x%lx", offset));
2464 		break;
2465 	}
2466 
2467 	DPRINTF(("pci_xhci: xecp read offset 0x%lx -> 0x%x",
2468 	        offset, value));
2469 
2470 	return (value);
2471 }
2472 
2473 
2474 static uint64_t
2475 pci_xhci_read(struct vmctx *ctx __unused, int vcpu __unused,
2476     struct pci_devinst *pi, int baridx, uint64_t offset, int size)
2477 {
2478 	struct pci_xhci_softc *sc;
2479 	uint32_t	value;
2480 
2481 	sc = pi->pi_arg;
2482 
2483 	assert(baridx == 0);
2484 
2485 	pthread_mutex_lock(&sc->mtx);
2486 	if (offset < XHCI_CAPLEN)
2487 		value = pci_xhci_hostcap_read(sc, offset);
2488 	else if (offset < sc->dboff)
2489 		value = pci_xhci_hostop_read(sc, offset);
2490 	else if (offset < sc->rtsoff)
2491 		value = pci_xhci_dbregs_read(sc, offset);
2492 	else if (offset < sc->regsend)
2493 		value = pci_xhci_rtsregs_read(sc, offset);
2494 	else if (offset < (sc->regsend + 4*32))
2495 		value = pci_xhci_xecp_read(sc, offset);
2496 	else {
2497 		value = 0;
2498 		WPRINTF(("pci_xhci: read invalid offset %ld", offset));
2499 	}
2500 
2501 	pthread_mutex_unlock(&sc->mtx);
2502 
2503 	switch (size) {
2504 	case 1:
2505 		value &= 0xFF;
2506 		break;
2507 	case 2:
2508 		value &= 0xFFFF;
2509 		break;
2510 	case 4:
2511 		value &= 0xFFFFFFFF;
2512 		break;
2513 	}
2514 
2515 	return (value);
2516 }
2517 
2518 static void
2519 pci_xhci_reset_port(struct pci_xhci_softc *sc, int portn, int warm)
2520 {
2521 	struct pci_xhci_portregs *port;
2522 	struct pci_xhci_dev_emu	*dev;
2523 	struct xhci_trb		evtrb;
2524 	int	error;
2525 
2526 	assert(portn <= XHCI_MAX_DEVS);
2527 
2528 	DPRINTF(("xhci reset port %d", portn));
2529 
2530 	port = XHCI_PORTREG_PTR(sc, portn);
2531 	dev = XHCI_DEVINST_PTR(sc, portn);
2532 	if (dev) {
2533 		port->portsc &= ~(XHCI_PS_PLS_MASK | XHCI_PS_PR | XHCI_PS_PRC);
2534 		port->portsc |= XHCI_PS_PED |
2535 		    XHCI_PS_SPEED_SET(dev->dev_ue->ue_usbspeed);
2536 
2537 		if (warm && dev->dev_ue->ue_usbver == 3) {
2538 			port->portsc |= XHCI_PS_WRC;
2539 		}
2540 
2541 		if ((port->portsc & XHCI_PS_PRC) == 0) {
2542 			port->portsc |= XHCI_PS_PRC;
2543 
2544 			pci_xhci_set_evtrb(&evtrb, portn,
2545 			     XHCI_TRB_ERROR_SUCCESS,
2546 			     XHCI_TRB_EVENT_PORT_STS_CHANGE);
2547 			error = pci_xhci_insert_event(sc, &evtrb, 1);
2548 			if (error != XHCI_TRB_ERROR_SUCCESS)
2549 				DPRINTF(("xhci reset port insert event "
2550 				         "failed"));
2551 		}
2552 	}
2553 }
2554 
2555 static void
2556 pci_xhci_init_port(struct pci_xhci_softc *sc, int portn)
2557 {
2558 	struct pci_xhci_portregs *port;
2559 	struct pci_xhci_dev_emu	*dev;
2560 
2561 	port = XHCI_PORTREG_PTR(sc, portn);
2562 	dev = XHCI_DEVINST_PTR(sc, portn);
2563 	if (dev) {
2564 		port->portsc = XHCI_PS_CCS |		/* connected */
2565 		               XHCI_PS_PP;		/* port power */
2566 
2567 		if (dev->dev_ue->ue_usbver == 2) {
2568 			port->portsc |= XHCI_PS_PLS_SET(UPS_PORT_LS_POLL) |
2569 		               XHCI_PS_SPEED_SET(dev->dev_ue->ue_usbspeed);
2570 		} else {
2571 			port->portsc |= XHCI_PS_PLS_SET(UPS_PORT_LS_U0) |
2572 		               XHCI_PS_PED |		/* enabled */
2573 		               XHCI_PS_SPEED_SET(dev->dev_ue->ue_usbspeed);
2574 		}
2575 
2576 		DPRINTF(("Init port %d 0x%x", portn, port->portsc));
2577 	} else {
2578 		port->portsc = XHCI_PS_PLS_SET(UPS_PORT_LS_RX_DET) | XHCI_PS_PP;
2579 		DPRINTF(("Init empty port %d 0x%x", portn, port->portsc));
2580 	}
2581 }
2582 
2583 static int
2584 pci_xhci_dev_intr(struct usb_hci *hci, int epctx)
2585 {
2586 	struct pci_xhci_dev_emu *dev;
2587 	struct xhci_dev_ctx	*dev_ctx;
2588 	struct xhci_trb		evtrb;
2589 	struct pci_xhci_softc	*sc;
2590 	struct pci_xhci_portregs *p;
2591 	struct xhci_endp_ctx	*ep_ctx;
2592 	int	error = 0;
2593 	int	dir_in;
2594 	int	epid;
2595 
2596 	dir_in = epctx & 0x80;
2597 	epid = epctx & ~0x80;
2598 
2599 	/* HW endpoint contexts are 0-15; convert to epid based on dir */
2600 	epid = (epid * 2) + (dir_in ? 1 : 0);
2601 
2602 	assert(epid >= 1 && epid <= 31);
2603 
2604 	dev = hci->hci_sc;
2605 	sc = dev->xsc;
2606 
2607 	/* check if device is ready; OS has to initialise it */
2608 	if (sc->rtsregs.erstba_p == NULL ||
2609 	    (sc->opregs.usbcmd & XHCI_CMD_RS) == 0 ||
2610 	    dev->dev_ctx == NULL)
2611 		return (0);
2612 
2613 	p = XHCI_PORTREG_PTR(sc, hci->hci_port);
2614 
2615 	/* raise event if link U3 (suspended) state */
2616 	if (XHCI_PS_PLS_GET(p->portsc) == 3) {
2617 		p->portsc &= ~XHCI_PS_PLS_MASK;
2618 		p->portsc |= XHCI_PS_PLS_SET(UPS_PORT_LS_RESUME);
2619 		if ((p->portsc & XHCI_PS_PLC) != 0)
2620 			return (0);
2621 
2622 		p->portsc |= XHCI_PS_PLC;
2623 
2624 		pci_xhci_set_evtrb(&evtrb, hci->hci_port,
2625 		      XHCI_TRB_ERROR_SUCCESS, XHCI_TRB_EVENT_PORT_STS_CHANGE);
2626 		error = pci_xhci_insert_event(sc, &evtrb, 0);
2627 		if (error != XHCI_TRB_ERROR_SUCCESS)
2628 			goto done;
2629 	}
2630 
2631 	dev_ctx = dev->dev_ctx;
2632 	ep_ctx = &dev_ctx->ctx_ep[epid];
2633 	if ((ep_ctx->dwEpCtx0 & 0x7) == XHCI_ST_EPCTX_DISABLED) {
2634 		DPRINTF(("xhci device interrupt on disabled endpoint %d",
2635 		         epid));
2636 		return (0);
2637 	}
2638 
2639 	DPRINTF(("xhci device interrupt on endpoint %d", epid));
2640 
2641 	pci_xhci_device_doorbell(sc, hci->hci_port, epid, 0);
2642 
2643 done:
2644 	return (error);
2645 }
2646 
2647 static int
2648 pci_xhci_dev_event(struct usb_hci *hci, enum hci_usbev evid __unused,
2649     void *param __unused)
2650 {
2651 	DPRINTF(("xhci device event port %d", hci->hci_port));
2652 	return (0);
2653 }
2654 
2655 /*
2656  * Each controller contains a "slot" node which contains a list of
2657  * child nodes each of which is a device.  Each slot node's name
2658  * corresponds to a specific controller slot.  These nodes
2659  * contain a "device" variable identifying the device model of the
2660  * USB device.  For example:
2661  *
2662  * pci.0.1.0
2663  *          .device="xhci"
2664  *          .slot
2665  *               .1
2666  *                 .device="tablet"
2667  */
2668 static int
2669 pci_xhci_legacy_config(nvlist_t *nvl, const char *opts)
2670 {
2671 	char node_name[16];
2672 	nvlist_t *slots_nvl, *slot_nvl;
2673 	char *cp, *opt, *str, *tofree;
2674 	int slot;
2675 
2676 	if (opts == NULL)
2677 		return (0);
2678 
2679 	slots_nvl = create_relative_config_node(nvl, "slot");
2680 	slot = 1;
2681 	tofree = str = strdup(opts);
2682 	while ((opt = strsep(&str, ",")) != NULL) {
2683 		/* device[=<config>] */
2684 		cp = strchr(opt, '=');
2685 		if (cp != NULL) {
2686 			*cp = '\0';
2687 			cp++;
2688 		}
2689 
2690 		snprintf(node_name, sizeof(node_name), "%d", slot);
2691 		slot++;
2692 		slot_nvl = create_relative_config_node(slots_nvl, node_name);
2693 		set_config_value_node(slot_nvl, "device", opt);
2694 
2695 		/*
2696 		 * NB: Given that we split on commas above, the legacy
2697 		 * format only supports a single option.
2698 		 */
2699 		if (cp != NULL && *cp != '\0')
2700 			pci_parse_legacy_config(slot_nvl, cp);
2701 	}
2702 	free(tofree);
2703 	return (0);
2704 }
2705 
2706 static int
2707 pci_xhci_parse_devices(struct pci_xhci_softc *sc, nvlist_t *nvl)
2708 {
2709 	struct pci_xhci_dev_emu	*dev;
2710 	struct usb_devemu	*ue;
2711 	const nvlist_t *slots_nvl, *slot_nvl;
2712 	const char *name, *device;
2713 	char	*cp;
2714 	void	*devsc, *cookie;
2715 	long	slot;
2716 	int	type, usb3_port, usb2_port, i, ndevices;
2717 
2718 	usb3_port = sc->usb3_port_start;
2719 	usb2_port = sc->usb2_port_start;
2720 
2721 	sc->devices = calloc(XHCI_MAX_DEVS, sizeof(struct pci_xhci_dev_emu *));
2722 	sc->slots = calloc(XHCI_MAX_SLOTS, sizeof(struct pci_xhci_dev_emu *));
2723 
2724 	/* port and slot numbering start from 1 */
2725 	sc->devices--;
2726 	sc->slots--;
2727 
2728 	ndevices = 0;
2729 
2730 	slots_nvl = find_relative_config_node(nvl, "slot");
2731 	if (slots_nvl == NULL)
2732 		goto portsfinal;
2733 
2734 	cookie = NULL;
2735 	while ((name = nvlist_next(slots_nvl, &type, &cookie)) != NULL) {
2736 		if (usb2_port == ((sc->usb2_port_start) + XHCI_MAX_DEVS/2) ||
2737 		    usb3_port == ((sc->usb3_port_start) + XHCI_MAX_DEVS/2)) {
2738 			WPRINTF(("pci_xhci max number of USB 2 or 3 "
2739 			     "devices reached, max %d", XHCI_MAX_DEVS/2));
2740 			goto bad;
2741 		}
2742 
2743 		if (type != NV_TYPE_NVLIST) {
2744 			EPRINTLN(
2745 			    "pci_xhci: config variable '%s' under slot node",
2746 			     name);
2747 			goto bad;
2748 		}
2749 
2750 		slot = strtol(name, &cp, 0);
2751 		if (*cp != '\0' || slot <= 0 || slot > XHCI_MAX_SLOTS) {
2752 			EPRINTLN("pci_xhci: invalid slot '%s'", name);
2753 			goto bad;
2754 		}
2755 
2756 		if (XHCI_SLOTDEV_PTR(sc, slot) != NULL) {
2757 			EPRINTLN("pci_xhci: duplicate slot '%s'", name);
2758 			goto bad;
2759 		}
2760 
2761 		slot_nvl = nvlist_get_nvlist(slots_nvl, name);
2762 		device = get_config_value_node(slot_nvl, "device");
2763 		if (device == NULL) {
2764 			EPRINTLN(
2765 			    "pci_xhci: missing \"device\" value for slot '%s'",
2766 				name);
2767 			goto bad;
2768 		}
2769 
2770 		ue = usb_emu_finddev(device);
2771 		if (ue == NULL) {
2772 			EPRINTLN("pci_xhci: unknown device model \"%s\"",
2773 			    device);
2774 			goto bad;
2775 		}
2776 
2777 		DPRINTF(("pci_xhci adding device %s", device));
2778 
2779 		dev = calloc(1, sizeof(struct pci_xhci_dev_emu));
2780 		dev->xsc = sc;
2781 		dev->hci.hci_sc = dev;
2782 		dev->hci.hci_intr = pci_xhci_dev_intr;
2783 		dev->hci.hci_event = pci_xhci_dev_event;
2784 
2785 		if (ue->ue_usbver == 2) {
2786 			if (usb2_port == sc->usb2_port_start +
2787 			    XHCI_MAX_DEVS / 2) {
2788 				WPRINTF(("pci_xhci max number of USB 2 devices "
2789 				     "reached, max %d", XHCI_MAX_DEVS / 2));
2790 				goto bad;
2791 			}
2792 			dev->hci.hci_port = usb2_port;
2793 			usb2_port++;
2794 		} else {
2795 			if (usb3_port == sc->usb3_port_start +
2796 			    XHCI_MAX_DEVS / 2) {
2797 				WPRINTF(("pci_xhci max number of USB 3 devices "
2798 				     "reached, max %d", XHCI_MAX_DEVS / 2));
2799 				goto bad;
2800 			}
2801 			dev->hci.hci_port = usb3_port;
2802 			usb3_port++;
2803 		}
2804 		XHCI_DEVINST_PTR(sc, dev->hci.hci_port) = dev;
2805 
2806 		dev->hci.hci_address = 0;
2807 		devsc = ue->ue_init(&dev->hci, nvl);
2808 		if (devsc == NULL) {
2809 			goto bad;
2810 		}
2811 
2812 		dev->dev_ue = ue;
2813 		dev->dev_sc = devsc;
2814 
2815 		XHCI_SLOTDEV_PTR(sc, slot) = dev;
2816 		ndevices++;
2817 	}
2818 
2819 portsfinal:
2820 	sc->portregs = calloc(XHCI_MAX_DEVS, sizeof(struct pci_xhci_portregs));
2821 	sc->portregs--;
2822 
2823 	if (ndevices > 0) {
2824 		for (i = 1; i <= XHCI_MAX_DEVS; i++) {
2825 			pci_xhci_init_port(sc, i);
2826 		}
2827 	} else {
2828 		WPRINTF(("pci_xhci no USB devices configured"));
2829 	}
2830 	return (0);
2831 
2832 bad:
2833 	for (i = 1; i <= XHCI_MAX_DEVS; i++) {
2834 		free(XHCI_DEVINST_PTR(sc, i));
2835 	}
2836 
2837 	free(sc->devices + 1);
2838 	free(sc->slots + 1);
2839 
2840 	return (-1);
2841 }
2842 
2843 static int
2844 pci_xhci_init(struct vmctx *ctx __unused, struct pci_devinst *pi, nvlist_t *nvl)
2845 {
2846 	struct pci_xhci_softc *sc;
2847 	int	error;
2848 
2849 	if (xhci_in_use) {
2850 		WPRINTF(("pci_xhci controller already defined"));
2851 		return (-1);
2852 	}
2853 	xhci_in_use = 1;
2854 
2855 	sc = calloc(1, sizeof(struct pci_xhci_softc));
2856 	pi->pi_arg = sc;
2857 	sc->xsc_pi = pi;
2858 
2859 	sc->usb2_port_start = (XHCI_MAX_DEVS/2) + 1;
2860 	sc->usb3_port_start = 1;
2861 
2862 	/* discover devices */
2863 	error = pci_xhci_parse_devices(sc, nvl);
2864 	if (error < 0)
2865 		goto done;
2866 	else
2867 		error = 0;
2868 
2869 	sc->caplength = XHCI_SET_CAPLEN(XHCI_CAPLEN) |
2870 	                XHCI_SET_HCIVERSION(0x0100);
2871 	sc->hcsparams1 = XHCI_SET_HCSP1_MAXPORTS(XHCI_MAX_DEVS) |
2872 	                 XHCI_SET_HCSP1_MAXINTR(1) |	/* interrupters */
2873 	                 XHCI_SET_HCSP1_MAXSLOTS(XHCI_MAX_SLOTS);
2874 	sc->hcsparams2 = XHCI_SET_HCSP2_ERSTMAX(XHCI_ERST_MAX) |
2875 	                 XHCI_SET_HCSP2_IST(0x04);
2876 	sc->hcsparams3 = 0;				/* no latency */
2877 	sc->hccparams1 = XHCI_SET_HCCP1_AC64(1) |	/* 64-bit addrs */
2878 	                 XHCI_SET_HCCP1_NSS(1) |	/* no 2nd-streams */
2879 	                 XHCI_SET_HCCP1_SPC(1) |	/* short packet */
2880 	                 XHCI_SET_HCCP1_MAXPSA(XHCI_STREAMS_MAX);
2881 	sc->hccparams2 = XHCI_SET_HCCP2_LEC(1) |
2882 	                 XHCI_SET_HCCP2_U3C(1);
2883 	sc->dboff = XHCI_SET_DOORBELL(XHCI_CAPLEN + XHCI_PORTREGS_START +
2884 	            XHCI_MAX_DEVS * sizeof(struct pci_xhci_portregs));
2885 
2886 	/* dboff must be 32-bit aligned */
2887 	if (sc->dboff & 0x3)
2888 		sc->dboff = (sc->dboff + 0x3) & ~0x3;
2889 
2890 	/* rtsoff must be 32-bytes aligned */
2891 	sc->rtsoff = XHCI_SET_RTSOFFSET(sc->dboff + (XHCI_MAX_SLOTS+1) * 32);
2892 	if (sc->rtsoff & 0x1F)
2893 		sc->rtsoff = (sc->rtsoff + 0x1F) & ~0x1F;
2894 
2895 	DPRINTF(("pci_xhci dboff: 0x%x, rtsoff: 0x%x", sc->dboff,
2896 	        sc->rtsoff));
2897 
2898 	sc->opregs.usbsts = XHCI_STS_HCH;
2899 	sc->opregs.pgsz = XHCI_PAGESIZE_4K;
2900 
2901 	pci_xhci_reset(sc);
2902 
2903 	sc->regsend = sc->rtsoff + 0x20 + 32;		/* only 1 intrpter */
2904 
2905 	/*
2906 	 * Set extended capabilities pointer to be after regsend;
2907 	 * value of xecp field is 32-bit offset.
2908 	 */
2909 	sc->hccparams1 |= XHCI_SET_HCCP1_XECP(sc->regsend/4);
2910 
2911 	pci_set_cfgdata16(pi, PCIR_DEVICE, 0x1E31);
2912 	pci_set_cfgdata16(pi, PCIR_VENDOR, 0x8086);
2913 	pci_set_cfgdata8(pi, PCIR_CLASS, PCIC_SERIALBUS);
2914 	pci_set_cfgdata8(pi, PCIR_SUBCLASS, PCIS_SERIALBUS_USB);
2915 	pci_set_cfgdata8(pi, PCIR_PROGIF,PCIP_SERIALBUS_USB_XHCI);
2916 	pci_set_cfgdata8(pi, PCI_USBREV, PCI_USB_REV_3_0);
2917 
2918 	pci_emul_add_msicap(pi, 1);
2919 
2920 	/* regsend + xecp registers */
2921 	pci_emul_alloc_bar(pi, 0, PCIBAR_MEM32, sc->regsend + 4*32);
2922 	DPRINTF(("pci_xhci pci_emu_alloc: %d", sc->regsend + 4*32));
2923 
2924 
2925 	pci_lintr_request(pi);
2926 
2927 	pthread_mutex_init(&sc->mtx, NULL);
2928 
2929 done:
2930 	if (error) {
2931 		free(sc);
2932 	}
2933 
2934 	return (error);
2935 }
2936 
2937 #ifdef BHYVE_SNAPSHOT
2938 static void
2939 pci_xhci_map_devs_slots(struct pci_xhci_softc *sc, int maps[])
2940 {
2941 	int i, j;
2942 	struct pci_xhci_dev_emu *dev, *slot;
2943 
2944 	memset(maps, 0, sizeof(maps[0]) * XHCI_MAX_SLOTS);
2945 
2946 	for (i = 1; i <= XHCI_MAX_SLOTS; i++) {
2947 		for (j = 1; j <= XHCI_MAX_DEVS; j++) {
2948 			slot = XHCI_SLOTDEV_PTR(sc, i);
2949 			dev = XHCI_DEVINST_PTR(sc, j);
2950 
2951 			if (slot == dev)
2952 				maps[i] = j;
2953 		}
2954 	}
2955 }
2956 
2957 static int
2958 pci_xhci_snapshot_ep(struct pci_xhci_softc *sc __unused,
2959     struct pci_xhci_dev_emu *dev, int idx, struct vm_snapshot_meta *meta)
2960 {
2961 	int k;
2962 	int ret;
2963 	struct usb_data_xfer *xfer;
2964 	struct usb_data_xfer_block *xfer_block;
2965 
2966 	/* some sanity checks */
2967 	if (meta->op == VM_SNAPSHOT_SAVE)
2968 		xfer = dev->eps[idx].ep_xfer;
2969 
2970 	SNAPSHOT_VAR_OR_LEAVE(xfer, meta, ret, done);
2971 	if (xfer == NULL) {
2972 		ret = 0;
2973 		goto done;
2974 	}
2975 
2976 	if (meta->op == VM_SNAPSHOT_RESTORE) {
2977 		pci_xhci_init_ep(dev, idx);
2978 		xfer = dev->eps[idx].ep_xfer;
2979 	}
2980 
2981 	/* save / restore proper */
2982 	for (k = 0; k < USB_MAX_XFER_BLOCKS; k++) {
2983 		xfer_block = &xfer->data[k];
2984 
2985 		SNAPSHOT_GUEST2HOST_ADDR_OR_LEAVE(xfer_block->buf,
2986 			XHCI_GADDR_SIZE(xfer_block->buf), true, meta, ret,
2987 			done);
2988 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->blen, meta, ret, done);
2989 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->bdone, meta, ret, done);
2990 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->processed, meta, ret, done);
2991 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->hci_data, meta, ret, done);
2992 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->ccs, meta, ret, done);
2993 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->streamid, meta, ret, done);
2994 		SNAPSHOT_VAR_OR_LEAVE(xfer_block->trbnext, meta, ret, done);
2995 	}
2996 
2997 	SNAPSHOT_VAR_OR_LEAVE(xfer->ureq, meta, ret, done);
2998 	if (xfer->ureq) {
2999 		/* xfer->ureq is not allocated at restore time */
3000 		if (meta->op == VM_SNAPSHOT_RESTORE)
3001 			xfer->ureq = malloc(sizeof(struct usb_device_request));
3002 
3003 		SNAPSHOT_BUF_OR_LEAVE(xfer->ureq,
3004 				      sizeof(struct usb_device_request),
3005 				      meta, ret, done);
3006 	}
3007 
3008 	SNAPSHOT_VAR_OR_LEAVE(xfer->ndata, meta, ret, done);
3009 	SNAPSHOT_VAR_OR_LEAVE(xfer->head, meta, ret, done);
3010 	SNAPSHOT_VAR_OR_LEAVE(xfer->tail, meta, ret, done);
3011 
3012 done:
3013 	return (ret);
3014 }
3015 
3016 static int
3017 pci_xhci_snapshot(struct vm_snapshot_meta *meta)
3018 {
3019 	int i, j;
3020 	int ret;
3021 	int restore_idx;
3022 	struct pci_devinst *pi;
3023 	struct pci_xhci_softc *sc;
3024 	struct pci_xhci_portregs *port;
3025 	struct pci_xhci_dev_emu *dev;
3026 	char dname[SNAP_DEV_NAME_LEN];
3027 	int maps[XHCI_MAX_SLOTS + 1];
3028 
3029 	pi = meta->dev_data;
3030 	sc = pi->pi_arg;
3031 
3032 	SNAPSHOT_VAR_OR_LEAVE(sc->caplength, meta, ret, done);
3033 	SNAPSHOT_VAR_OR_LEAVE(sc->hcsparams1, meta, ret, done);
3034 	SNAPSHOT_VAR_OR_LEAVE(sc->hcsparams2, meta, ret, done);
3035 	SNAPSHOT_VAR_OR_LEAVE(sc->hcsparams3, meta, ret, done);
3036 	SNAPSHOT_VAR_OR_LEAVE(sc->hccparams1, meta, ret, done);
3037 	SNAPSHOT_VAR_OR_LEAVE(sc->dboff, meta, ret, done);
3038 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsoff, meta, ret, done);
3039 	SNAPSHOT_VAR_OR_LEAVE(sc->hccparams2, meta, ret, done);
3040 	SNAPSHOT_VAR_OR_LEAVE(sc->regsend, meta, ret, done);
3041 
3042 	/* opregs */
3043 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.usbcmd, meta, ret, done);
3044 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.usbsts, meta, ret, done);
3045 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.pgsz, meta, ret, done);
3046 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.dnctrl, meta, ret, done);
3047 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.crcr, meta, ret, done);
3048 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.dcbaap, meta, ret, done);
3049 	SNAPSHOT_VAR_OR_LEAVE(sc->opregs.config, meta, ret, done);
3050 
3051 	/* opregs.cr_p */
3052 	SNAPSHOT_GUEST2HOST_ADDR_OR_LEAVE(sc->opregs.cr_p,
3053 		XHCI_GADDR_SIZE(sc->opregs.cr_p), true, meta, ret, done);
3054 
3055 	/* opregs.dcbaa_p */
3056 	SNAPSHOT_GUEST2HOST_ADDR_OR_LEAVE(sc->opregs.dcbaa_p,
3057 		XHCI_GADDR_SIZE(sc->opregs.dcbaa_p), true, meta, ret, done);
3058 
3059 	/* rtsregs */
3060 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.mfindex, meta, ret, done);
3061 
3062 	/* rtsregs.intrreg */
3063 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.intrreg.iman, meta, ret, done);
3064 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.intrreg.imod, meta, ret, done);
3065 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.intrreg.erstsz, meta, ret, done);
3066 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.intrreg.rsvd, meta, ret, done);
3067 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.intrreg.erstba, meta, ret, done);
3068 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.intrreg.erdp, meta, ret, done);
3069 
3070 	/* rtsregs.erstba_p */
3071 	SNAPSHOT_GUEST2HOST_ADDR_OR_LEAVE(sc->rtsregs.erstba_p,
3072 		XHCI_GADDR_SIZE(sc->rtsregs.erstba_p), true, meta, ret, done);
3073 
3074 	/* rtsregs.erst_p */
3075 	SNAPSHOT_GUEST2HOST_ADDR_OR_LEAVE(sc->rtsregs.erst_p,
3076 		XHCI_GADDR_SIZE(sc->rtsregs.erst_p), true, meta, ret, done);
3077 
3078 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.er_deq_seg, meta, ret, done);
3079 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.er_enq_idx, meta, ret, done);
3080 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.er_enq_seg, meta, ret, done);
3081 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.er_events_cnt, meta, ret, done);
3082 	SNAPSHOT_VAR_OR_LEAVE(sc->rtsregs.event_pcs, meta, ret, done);
3083 
3084 	/* sanity checking */
3085 	for (i = 1; i <= XHCI_MAX_DEVS; i++) {
3086 		dev = XHCI_DEVINST_PTR(sc, i);
3087 		if (dev == NULL)
3088 			continue;
3089 
3090 		if (meta->op == VM_SNAPSHOT_SAVE)
3091 			restore_idx = i;
3092 		SNAPSHOT_VAR_OR_LEAVE(restore_idx, meta, ret, done);
3093 
3094 		/* check if the restored device (when restoring) is sane */
3095 		if (restore_idx != i) {
3096 			fprintf(stderr, "%s: idx not matching: actual: %d, "
3097 				"expected: %d\r\n", __func__, restore_idx, i);
3098 			ret = EINVAL;
3099 			goto done;
3100 		}
3101 
3102 		if (meta->op == VM_SNAPSHOT_SAVE) {
3103 			memset(dname, 0, sizeof(dname));
3104 			strncpy(dname, dev->dev_ue->ue_emu, sizeof(dname) - 1);
3105 		}
3106 
3107 		SNAPSHOT_BUF_OR_LEAVE(dname, sizeof(dname), meta, ret, done);
3108 
3109 		if (meta->op == VM_SNAPSHOT_RESTORE) {
3110 			dname[sizeof(dname) - 1] = '\0';
3111 			if (strcmp(dev->dev_ue->ue_emu, dname)) {
3112 				fprintf(stderr, "%s: device names mismatch: "
3113 					"actual: %s, expected: %s\r\n",
3114 					__func__, dname, dev->dev_ue->ue_emu);
3115 
3116 				ret = EINVAL;
3117 				goto done;
3118 			}
3119 		}
3120 	}
3121 
3122 	/* portregs */
3123 	for (i = 1; i <= XHCI_MAX_DEVS; i++) {
3124 		port = XHCI_PORTREG_PTR(sc, i);
3125 		dev = XHCI_DEVINST_PTR(sc, i);
3126 
3127 		if (dev == NULL)
3128 			continue;
3129 
3130 		SNAPSHOT_VAR_OR_LEAVE(port->portsc, meta, ret, done);
3131 		SNAPSHOT_VAR_OR_LEAVE(port->portpmsc, meta, ret, done);
3132 		SNAPSHOT_VAR_OR_LEAVE(port->portli, meta, ret, done);
3133 		SNAPSHOT_VAR_OR_LEAVE(port->porthlpmc, meta, ret, done);
3134 	}
3135 
3136 	/* slots */
3137 	if (meta->op == VM_SNAPSHOT_SAVE)
3138 		pci_xhci_map_devs_slots(sc, maps);
3139 
3140 	for (i = 1; i <= XHCI_MAX_SLOTS; i++) {
3141 		SNAPSHOT_VAR_OR_LEAVE(maps[i], meta, ret, done);
3142 
3143 		if (meta->op == VM_SNAPSHOT_SAVE) {
3144 			dev = XHCI_SLOTDEV_PTR(sc, i);
3145 		} else if (meta->op == VM_SNAPSHOT_RESTORE) {
3146 			if (maps[i] != 0)
3147 				dev = XHCI_DEVINST_PTR(sc, maps[i]);
3148 			else
3149 				dev = NULL;
3150 
3151 			XHCI_SLOTDEV_PTR(sc, i) = dev;
3152 		} else {
3153 			/* error */
3154 			ret = EINVAL;
3155 			goto done;
3156 		}
3157 
3158 		if (dev == NULL)
3159 			continue;
3160 
3161 		SNAPSHOT_GUEST2HOST_ADDR_OR_LEAVE(dev->dev_ctx,
3162 			XHCI_GADDR_SIZE(dev->dev_ctx), true, meta, ret, done);
3163 
3164 		if (dev->dev_ctx != NULL) {
3165 			for (j = 1; j < XHCI_MAX_ENDPOINTS; j++) {
3166 				ret = pci_xhci_snapshot_ep(sc, dev, j, meta);
3167 				if (ret != 0)
3168 					goto done;
3169 			}
3170 		}
3171 
3172 		SNAPSHOT_VAR_OR_LEAVE(dev->dev_slotstate, meta, ret, done);
3173 
3174 		/* devices[i]->dev_sc */
3175 		dev->dev_ue->ue_snapshot(dev->dev_sc, meta);
3176 
3177 		/* devices[i]->hci */
3178 		SNAPSHOT_VAR_OR_LEAVE(dev->hci.hci_address, meta, ret, done);
3179 		SNAPSHOT_VAR_OR_LEAVE(dev->hci.hci_port, meta, ret, done);
3180 	}
3181 
3182 	SNAPSHOT_VAR_OR_LEAVE(sc->usb2_port_start, meta, ret, done);
3183 	SNAPSHOT_VAR_OR_LEAVE(sc->usb3_port_start, meta, ret, done);
3184 
3185 done:
3186 	return (ret);
3187 }
3188 #endif
3189 
3190 static const struct pci_devemu pci_de_xhci = {
3191 	.pe_emu =	"xhci",
3192 	.pe_init =	pci_xhci_init,
3193 	.pe_legacy_config = pci_xhci_legacy_config,
3194 	.pe_barwrite =	pci_xhci_write,
3195 	.pe_barread =	pci_xhci_read,
3196 #ifdef BHYVE_SNAPSHOT
3197 	.pe_snapshot =	pci_xhci_snapshot,
3198 #endif
3199 };
3200 PCI_EMUL_SET(pci_de_xhci);
3201