]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/blob - sys/dev/isp/isp.c
Introduce support of SCSI Command Priority.
[FreeBSD/FreeBSD.git] / sys / dev / isp / isp.c
1 /*-
2  * SPDX-License-Identifier: BSD-2-Clause-FreeBSD
3  *
4  *  Copyright (c) 2009-2018 Alexander Motin <mav@FreeBSD.org>
5  *  Copyright (c) 1997-2009 by Matthew Jacob
6  *  All rights reserved.
7  *
8  *  Redistribution and use in source and binary forms, with or without
9  *  modification, are permitted provided that the following conditions
10  *  are met:
11  *
12  *  1. Redistributions of source code must retain the above copyright
13  *     notice, this list of conditions and the following disclaimer.
14  *  2. Redistributions in binary form must reproduce the above copyright
15  *     notice, this list of conditions and the following disclaimer in the
16  *     documentation and/or other materials provided with the distribution.
17  *
18  *  THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND
19  *  ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
20  *  IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
21  *  ARE DISCLAIMED.  IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE
22  *  FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
23  *  DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
24  *  OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
25  *  HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
26  *  LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27  *  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28  *  SUCH DAMAGE.
29  *
30  */
31
32 /*
33  * Machine and OS Independent (well, as best as possible)
34  * code for the Qlogic ISP SCSI and FC-SCSI adapters.
35  */
36
37 /*
38  * Inspiration and ideas about this driver are from Erik Moe's Linux driver
39  * (qlogicisp.c) and Dave Miller's SBus version of same (qlogicisp.c). Some
40  * ideas dredged from the Solaris driver.
41  */
42
43 /*
44  * Include header file appropriate for platform we're building on.
45  */
46 #ifdef  __NetBSD__
47 #include <sys/cdefs.h>
48 __KERNEL_RCSID(0, "$NetBSD$");
49 #include <dev/ic/isp_netbsd.h>
50 #endif
51 #ifdef  __FreeBSD__
52 #include <sys/cdefs.h>
53 __FBSDID("$FreeBSD$");
54 #include <dev/isp/isp_freebsd.h>
55 #endif
56 #ifdef  __OpenBSD__
57 #include <dev/ic/isp_openbsd.h>
58 #endif
59 #ifdef  __linux__
60 #include "isp_linux.h"
61 #endif
62 #ifdef  __svr4__
63 #include "isp_solaris.h"
64 #endif
65
66 /*
67  * General defines
68  */
69 #define MBOX_DELAY_COUNT        1000000 / 100
70
71 /*
72  * Local static data
73  */
74 static const char notresp[] = "Unknown IOCB in RESPONSE Queue (type 0x%x) @ idx %d (next %d)";
75 static const char bun[] = "bad underrun (count %d, resid %d, status %s)";
76 static const char lipd[] = "Chan %d LIP destroyed %d active commands";
77 static const char sacq[] = "unable to acquire scratch area";
78
79 static const uint8_t alpa_map[] = {
80         0xef, 0xe8, 0xe4, 0xe2, 0xe1, 0xe0, 0xdc, 0xda,
81         0xd9, 0xd6, 0xd5, 0xd4, 0xd3, 0xd2, 0xd1, 0xce,
82         0xcd, 0xcc, 0xcb, 0xca, 0xc9, 0xc7, 0xc6, 0xc5,
83         0xc3, 0xbc, 0xba, 0xb9, 0xb6, 0xb5, 0xb4, 0xb3,
84         0xb2, 0xb1, 0xae, 0xad, 0xac, 0xab, 0xaa, 0xa9,
85         0xa7, 0xa6, 0xa5, 0xa3, 0x9f, 0x9e, 0x9d, 0x9b,
86         0x98, 0x97, 0x90, 0x8f, 0x88, 0x84, 0x82, 0x81,
87         0x80, 0x7c, 0x7a, 0x79, 0x76, 0x75, 0x74, 0x73,
88         0x72, 0x71, 0x6e, 0x6d, 0x6c, 0x6b, 0x6a, 0x69,
89         0x67, 0x66, 0x65, 0x63, 0x5c, 0x5a, 0x59, 0x56,
90         0x55, 0x54, 0x53, 0x52, 0x51, 0x4e, 0x4d, 0x4c,
91         0x4b, 0x4a, 0x49, 0x47, 0x46, 0x45, 0x43, 0x3c,
92         0x3a, 0x39, 0x36, 0x35, 0x34, 0x33, 0x32, 0x31,
93         0x2e, 0x2d, 0x2c, 0x2b, 0x2a, 0x29, 0x27, 0x26,
94         0x25, 0x23, 0x1f, 0x1e, 0x1d, 0x1b, 0x18, 0x17,
95         0x10, 0x0f, 0x08, 0x04, 0x02, 0x01, 0x00
96 };
97
98 /*
99  * Local function prototypes.
100  */
101 static void isp_parse_async(ispsoftc_t *, uint16_t);
102 static void isp_parse_async_fc(ispsoftc_t *, uint16_t);
103 static int isp_handle_other_response(ispsoftc_t *, int, isphdr_t *, uint32_t *);
104 static void isp_parse_status(ispsoftc_t *, ispstatusreq_t *, XS_T *, uint32_t *);
105 static void isp_parse_status_24xx(ispsoftc_t *, isp24xx_statusreq_t *, XS_T *, uint32_t *);
106 static void isp_fastpost_complete(ispsoftc_t *, uint32_t);
107 static void isp_scsi_init(ispsoftc_t *);
108 static void isp_scsi_channel_init(ispsoftc_t *, int);
109 static void isp_fibre_init(ispsoftc_t *);
110 static void isp_fibre_init_2400(ispsoftc_t *);
111 static void isp_clear_portdb(ispsoftc_t *, int);
112 static void isp_mark_portdb(ispsoftc_t *, int);
113 static int isp_plogx(ispsoftc_t *, int, uint16_t, uint32_t, int);
114 static int isp_port_login(ispsoftc_t *, uint16_t, uint32_t);
115 static int isp_port_logout(ispsoftc_t *, uint16_t, uint32_t);
116 static int isp_getpdb(ispsoftc_t *, int, uint16_t, isp_pdb_t *);
117 static int isp_gethandles(ispsoftc_t *, int, uint16_t *, int *, int);
118 static void isp_dump_chip_portdb(ispsoftc_t *, int);
119 static uint64_t isp_get_wwn(ispsoftc_t *, int, int, int);
120 static int isp_fclink_test(ispsoftc_t *, int, int);
121 static int isp_pdb_sync(ispsoftc_t *, int);
122 static int isp_scan_loop(ispsoftc_t *, int);
123 static int isp_gid_pt(ispsoftc_t *, int);
124 static int isp_scan_fabric(ispsoftc_t *, int);
125 static int isp_login_device(ispsoftc_t *, int, uint32_t, isp_pdb_t *, uint16_t *);
126 static int isp_send_change_request(ispsoftc_t *, int);
127 static int isp_register_fc4_type(ispsoftc_t *, int);
128 static int isp_register_fc4_features_24xx(ispsoftc_t *, int);
129 static int isp_register_port_name_24xx(ispsoftc_t *, int);
130 static int isp_register_node_name_24xx(ispsoftc_t *, int);
131 static uint16_t isp_next_handle(ispsoftc_t *, uint16_t *);
132 static int isp_fw_state(ispsoftc_t *, int);
133 static void isp_mboxcmd(ispsoftc_t *, mbreg_t *);
134
135 static void isp_spi_update(ispsoftc_t *, int);
136 static void isp_setdfltsdparm(ispsoftc_t *);
137 static void isp_setdfltfcparm(ispsoftc_t *, int);
138 static int isp_read_nvram(ispsoftc_t *, int);
139 static int isp_read_nvram_2400(ispsoftc_t *, uint8_t *);
140 static void isp_rdnvram_word(ispsoftc_t *, int, uint16_t *);
141 static void isp_rd_2400_nvram(ispsoftc_t *, uint32_t, uint32_t *);
142 static void isp_parse_nvram_1020(ispsoftc_t *, uint8_t *);
143 static void isp_parse_nvram_1080(ispsoftc_t *, int, uint8_t *);
144 static void isp_parse_nvram_12160(ispsoftc_t *, int, uint8_t *);
145 static void isp_parse_nvram_2100(ispsoftc_t *, uint8_t *);
146 static void isp_parse_nvram_2400(ispsoftc_t *, uint8_t *);
147
148 static void
149 isp_change_fw_state(ispsoftc_t *isp, int chan, int state)
150 {
151         fcparam *fcp = FCPARAM(isp, chan);
152
153         if (fcp->isp_fwstate == state)
154                 return;
155         isp_prt(isp, ISP_LOGCONFIG|ISP_LOG_SANCFG,
156             "Chan %d Firmware state <%s->%s>", chan,
157             isp_fc_fw_statename(fcp->isp_fwstate), isp_fc_fw_statename(state));
158         fcp->isp_fwstate = state;
159 }
160
161 /*
162  * Reset Hardware.
163  *
164  * Hit the chip over the head, download new f/w if available and set it running.
165  *
166  * Locking done elsewhere.
167  */
168
169 void
170 isp_reset(ispsoftc_t *isp, int do_load_defaults)
171 {
172         mbreg_t mbs;
173         char *buf;
174         uint64_t fwt;
175         uint32_t code_org, val;
176         int loops, i, dodnld = 1;
177         const char *btype = "????";
178         static const char dcrc[] = "Downloaded RISC Code Checksum Failure";
179
180         /*
181          * Basic types (SCSI, FibreChannel and PCI or SBus)
182          * have been set in the MD code. We figure out more
183          * here. Possibly more refined types based upon PCI
184          * identification. Chip revision has been gathered.
185          *
186          * After we've fired this chip up, zero out the conf1 register
187          * for SCSI adapters and do other settings for the 2100.
188          */
189
190         isp->isp_state = ISP_NILSTATE;
191         ISP_DISABLE_INTS(isp);
192
193         /*
194          * Put the board into PAUSE mode (so we can read the SXP registers
195          * or write FPM/FBM registers).
196          */
197         if (IS_24XX(isp)) {
198                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_CLEAR_HOST_INT);
199                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_CLEAR_RISC_INT);
200                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_PAUSE);
201         } else {
202                 ISP_WRITE(isp, HCCR, HCCR_CMD_PAUSE);
203         }
204
205         if (IS_FC(isp)) {
206                 switch (isp->isp_type) {
207                 case ISP_HA_FC_2100:
208                         btype = "2100";
209                         break;
210                 case ISP_HA_FC_2200:
211                         btype = "2200";
212                         break;
213                 case ISP_HA_FC_2300:
214                         btype = "2300";
215                         break;
216                 case ISP_HA_FC_2312:
217                         btype = "2312";
218                         break;
219                 case ISP_HA_FC_2322:
220                         btype = "2322";
221                         break;
222                 case ISP_HA_FC_2400:
223                         btype = "2422";
224                         break;
225                 case ISP_HA_FC_2500:
226                         btype = "2532";
227                         break;
228                 case ISP_HA_FC_2600:
229                         btype = "2600";
230                         break;
231                 case ISP_HA_FC_2700:
232                         btype = "2700";
233                         break;
234                 default:
235                         break;
236                 }
237
238                 if (!IS_24XX(isp)) {
239                         /*
240                          * While we're paused, reset the FPM module and FBM
241                          * fifos.
242                          */
243                         ISP_WRITE(isp, BIU2100_CSR, BIU2100_FPM0_REGS);
244                         ISP_WRITE(isp, FPM_DIAG_CONFIG, FPM_SOFT_RESET);
245                         ISP_WRITE(isp, BIU2100_CSR, BIU2100_FB_REGS);
246                         ISP_WRITE(isp, FBM_CMD, FBMCMD_FIFO_RESET_ALL);
247                         ISP_WRITE(isp, BIU2100_CSR, BIU2100_RISC_REGS);
248                 }
249         } else if (IS_1240(isp)) {
250                 sdparam *sdp;
251
252                 btype = "1240";
253                 isp->isp_clock = 60;
254                 sdp = SDPARAM(isp, 0);
255                 sdp->isp_ultramode = 1;
256                 sdp = SDPARAM(isp, 1);
257                 sdp->isp_ultramode = 1;
258                 /*
259                  * XXX: Should probably do some bus sensing.
260                  */
261         } else if (IS_ULTRA3(isp)) {
262                 sdparam *sdp = isp->isp_param;
263
264                 isp->isp_clock = 100;
265
266                 if (IS_10160(isp))
267                         btype = "10160";
268                 else if (IS_12160(isp))
269                         btype = "12160";
270                 else
271                         btype = "<UNKLVD>";
272                 sdp->isp_lvdmode = 1;
273
274                 if (IS_DUALBUS(isp)) {
275                         sdp++;
276                         sdp->isp_lvdmode = 1;
277                 }
278         } else if (IS_ULTRA2(isp)) {
279                 static const char m[] = "bus %d is in %s Mode";
280                 uint16_t l;
281                 sdparam *sdp = SDPARAM(isp, 0);
282
283                 isp->isp_clock = 100;
284
285                 if (IS_1280(isp))
286                         btype = "1280";
287                 else if (IS_1080(isp))
288                         btype = "1080";
289                 else
290                         btype = "<UNKLVD>";
291
292                 l = ISP_READ(isp, SXP_PINS_DIFF) & ISP1080_MODE_MASK;
293                 switch (l) {
294                 case ISP1080_LVD_MODE:
295                         sdp->isp_lvdmode = 1;
296                         isp_prt(isp, ISP_LOGCONFIG, m, 0, "LVD");
297                         break;
298                 case ISP1080_HVD_MODE:
299                         sdp->isp_diffmode = 1;
300                         isp_prt(isp, ISP_LOGCONFIG, m, 0, "Differential");
301                         break;
302                 case ISP1080_SE_MODE:
303                         sdp->isp_ultramode = 1;
304                         isp_prt(isp, ISP_LOGCONFIG, m, 0, "Single-Ended");
305                         break;
306                 default:
307                         isp_prt(isp, ISP_LOGERR,
308                             "unknown mode on bus %d (0x%x)", 0, l);
309                         break;
310                 }
311
312                 if (IS_DUALBUS(isp)) {
313                         sdp = SDPARAM(isp, 1);
314                         l = ISP_READ(isp, SXP_PINS_DIFF|SXP_BANK1_SELECT);
315                         l &= ISP1080_MODE_MASK;
316                         switch (l) {
317                         case ISP1080_LVD_MODE:
318                                 sdp->isp_lvdmode = 1;
319                                 isp_prt(isp, ISP_LOGCONFIG, m, 1, "LVD");
320                                 break;
321                         case ISP1080_HVD_MODE:
322                                 sdp->isp_diffmode = 1;
323                                 isp_prt(isp, ISP_LOGCONFIG,
324                                     m, 1, "Differential");
325                                 break;
326                         case ISP1080_SE_MODE:
327                                 sdp->isp_ultramode = 1;
328                                 isp_prt(isp, ISP_LOGCONFIG,
329                                     m, 1, "Single-Ended");
330                                 break;
331                         default:
332                                 isp_prt(isp, ISP_LOGERR,
333                                     "unknown mode on bus %d (0x%x)", 1, l);
334                                 break;
335                         }
336                 }
337         } else {
338                 sdparam *sdp = SDPARAM(isp, 0);
339                 i = ISP_READ(isp, BIU_CONF0) & BIU_CONF0_HW_MASK;
340                 switch (i) {
341                 default:
342                         isp_prt(isp, ISP_LOGALL, "Unknown Chip Type 0x%x", i);
343                         /* FALLTHROUGH */
344                 case 1:
345                         btype = "1020";
346                         isp->isp_type = ISP_HA_SCSI_1020;
347                         isp->isp_clock = 40;
348                         break;
349                 case 2:
350                         /*
351                          * Some 1020A chips are Ultra Capable, but don't
352                          * run the clock rate up for that unless told to
353                          * do so by the Ultra Capable bits being set.
354                          */
355                         btype = "1020A";
356                         isp->isp_type = ISP_HA_SCSI_1020A;
357                         isp->isp_clock = 40;
358                         break;
359                 case 3:
360                         btype = "1040";
361                         isp->isp_type = ISP_HA_SCSI_1040;
362                         isp->isp_clock = 60;
363                         break;
364                 case 4:
365                         btype = "1040A";
366                         isp->isp_type = ISP_HA_SCSI_1040A;
367                         isp->isp_clock = 60;
368                         break;
369                 case 5:
370                         btype = "1040B";
371                         isp->isp_type = ISP_HA_SCSI_1040B;
372                         isp->isp_clock = 60;
373                         break;
374                 case 6:
375                         btype = "1040C";
376                         isp->isp_type = ISP_HA_SCSI_1040C;
377                         isp->isp_clock = 60;
378                         break;
379                 }
380                 /*
381                  * Now, while we're at it, gather info about ultra
382                  * and/or differential mode.
383                  */
384                 if (ISP_READ(isp, SXP_PINS_DIFF) & SXP_PINS_DIFF_MODE) {
385                         isp_prt(isp, ISP_LOGCONFIG, "Differential Mode");
386                         sdp->isp_diffmode = 1;
387                 } else {
388                         sdp->isp_diffmode = 0;
389                 }
390                 i = ISP_READ(isp, RISC_PSR);
391                 if (isp->isp_bustype == ISP_BT_SBUS) {
392                         i &= RISC_PSR_SBUS_ULTRA;
393                 } else {
394                         i &= RISC_PSR_PCI_ULTRA;
395                 }
396                 if (i != 0) {
397                         isp_prt(isp, ISP_LOGCONFIG, "Ultra Mode Capable");
398                         sdp->isp_ultramode = 1;
399                         /*
400                          * If we're in Ultra Mode, we have to be 60MHz clock-
401                          * even for the SBus version.
402                          */
403                         isp->isp_clock = 60;
404                 } else {
405                         sdp->isp_ultramode = 0;
406                         /*
407                          * Clock is known. Gronk.
408                          */
409                 }
410
411                 /*
412                  * Machine dependent clock (if set) overrides
413                  * our generic determinations.
414                  */
415                 if (isp->isp_mdvec->dv_clock) {
416                         if (isp->isp_mdvec->dv_clock < isp->isp_clock) {
417                                 isp->isp_clock = isp->isp_mdvec->dv_clock;
418                         }
419                 }
420         }
421
422         /*
423          * Hit the chip over the head with hammer,
424          * and give it a chance to recover.
425          */
426
427         if (IS_SCSI(isp)) {
428                 ISP_WRITE(isp, BIU_ICR, BIU_ICR_SOFT_RESET);
429                 /*
430                  * A slight delay...
431                  */
432                 ISP_DELAY(100);
433
434                 /*
435                  * Clear data && control DMA engines.
436                  */
437                 ISP_WRITE(isp, CDMA_CONTROL, DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
438                 ISP_WRITE(isp, DDMA_CONTROL, DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
439
440
441         } else if (IS_24XX(isp)) {
442                 /*
443                  * Stop DMA and wait for it to stop.
444                  */
445                 ISP_WRITE(isp, BIU2400_CSR, BIU2400_DMA_STOP|(3 << 4));
446                 for (val = loops = 0; loops < 30000; loops++) {
447                         ISP_DELAY(10);
448                         val = ISP_READ(isp, BIU2400_CSR);
449                         if ((val & BIU2400_DMA_ACTIVE) == 0) {
450                                 break;
451                         }
452                 }
453                 if (val & BIU2400_DMA_ACTIVE) {
454                         isp_prt(isp, ISP_LOGERR, "DMA Failed to Stop on Reset");
455                         return;
456                 }
457                 /*
458                  * Hold it in SOFT_RESET and STOP state for 100us.
459                  */
460                 ISP_WRITE(isp, BIU2400_CSR, BIU2400_SOFT_RESET|BIU2400_DMA_STOP|(3 << 4));
461                 ISP_DELAY(100);
462                 for (loops = 0; loops < 10000; loops++) {
463                         ISP_DELAY(5);
464                         val = ISP_READ(isp, OUTMAILBOX0);
465                 }
466                 for (val = loops = 0; loops < 500000; loops ++) {
467                         val = ISP_READ(isp, BIU2400_CSR);
468                         if ((val & BIU2400_SOFT_RESET) == 0) {
469                                 break;
470                         }
471                 }
472                 if (val & BIU2400_SOFT_RESET) {
473                         isp_prt(isp, ISP_LOGERR, "Failed to come out of reset");
474                         return;
475                 }
476         } else {
477                 ISP_WRITE(isp, BIU2100_CSR, BIU2100_SOFT_RESET);
478                 /*
479                  * A slight delay...
480                  */
481                 ISP_DELAY(100);
482
483                 /*
484                  * Clear data && control DMA engines.
485                  */
486                 ISP_WRITE(isp, CDMA2100_CONTROL, DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
487                 ISP_WRITE(isp, TDMA2100_CONTROL, DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
488                 ISP_WRITE(isp, RDMA2100_CONTROL, DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
489         }
490
491         /*
492          * Wait for ISP to be ready to go...
493          */
494         loops = MBOX_DELAY_COUNT;
495         for (;;) {
496                 if (IS_SCSI(isp)) {
497                         if (!(ISP_READ(isp, BIU_ICR) & BIU_ICR_SOFT_RESET)) {
498                                 break;
499                         }
500                 } else if (IS_24XX(isp)) {
501                         if (ISP_READ(isp, OUTMAILBOX0) == 0) {
502                                 break;
503                         }
504                 } else {
505                         if (!(ISP_READ(isp, BIU2100_CSR) & BIU2100_SOFT_RESET))
506                                 break;
507                 }
508                 ISP_DELAY(100);
509                 if (--loops < 0) {
510                         ISP_DUMPREGS(isp, "chip reset timed out");
511                         return;
512                 }
513         }
514
515         /*
516          * After we've fired this chip up, zero out the conf1 register
517          * for SCSI adapters and other settings for the 2100.
518          */
519
520         if (IS_SCSI(isp)) {
521                 ISP_WRITE(isp, BIU_CONF1, 0);
522         } else if (!IS_24XX(isp)) {
523                 ISP_WRITE(isp, BIU2100_CSR, 0);
524         }
525
526         /*
527          * Reset RISC Processor
528          */
529         if (IS_24XX(isp)) {
530                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_RESET);
531                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_RELEASE);
532                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_CLEAR_RESET);
533         } else {
534                 ISP_WRITE(isp, HCCR, HCCR_CMD_RESET);
535                 ISP_DELAY(100);
536                 ISP_WRITE(isp, BIU_SEMA, 0);
537         }
538
539         /*
540          * Post-RISC Reset stuff.
541          */
542         if (IS_24XX(isp)) {
543                 for (val = loops = 0; loops < 5000000; loops++) {
544                         ISP_DELAY(5);
545                         val = ISP_READ(isp, OUTMAILBOX0);
546                         if (val == 0) {
547                                 break;
548                         }
549                 }
550                 if (val != 0) {
551                         isp_prt(isp, ISP_LOGERR, "reset didn't clear");
552                         return;
553                 }
554         } else if (IS_SCSI(isp)) {
555                 uint16_t tmp = isp->isp_mdvec->dv_conf1;
556                 /*
557                  * Busted FIFO. Turn off all but burst enables.
558                  */
559                 if (isp->isp_type == ISP_HA_SCSI_1040A) {
560                         tmp &= BIU_BURST_ENABLE;
561                 }
562                 ISP_SETBITS(isp, BIU_CONF1, tmp);
563                 if (tmp & BIU_BURST_ENABLE) {
564                         ISP_SETBITS(isp, CDMA_CONF, DMA_ENABLE_BURST);
565                         ISP_SETBITS(isp, DDMA_CONF, DMA_ENABLE_BURST);
566                 }
567                 if (SDPARAM(isp, 0)->isp_ptisp) {
568                         if (SDPARAM(isp, 0)->isp_ultramode) {
569                                 while (ISP_READ(isp, RISC_MTR) != 0x1313) {
570                                         ISP_WRITE(isp, RISC_MTR, 0x1313);
571                                         ISP_WRITE(isp, HCCR, HCCR_CMD_STEP);
572                                 }
573                         } else {
574                                 ISP_WRITE(isp, RISC_MTR, 0x1212);
575                         }
576                         /*
577                          * PTI specific register
578                          */
579                         ISP_WRITE(isp, RISC_EMB, DUAL_BANK);
580                 } else {
581                         ISP_WRITE(isp, RISC_MTR, 0x1212);
582                 }
583                 ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE);
584         } else {
585                 ISP_WRITE(isp, RISC_MTR2100, 0x1212);
586                 if (IS_2200(isp) || IS_23XX(isp)) {
587                         ISP_WRITE(isp, HCCR, HCCR_2X00_DISABLE_PARITY_PAUSE);
588                 }
589                 ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE);
590         }
591
592         /*
593          * Set up default request/response queue in-pointer/out-pointer
594          * register indices.
595          */
596         if (IS_24XX(isp)) {
597                 isp->isp_rqstinrp = BIU2400_REQINP;
598                 isp->isp_rqstoutrp = BIU2400_REQOUTP;
599                 isp->isp_respinrp = BIU2400_RSPINP;
600                 isp->isp_respoutrp = BIU2400_RSPOUTP;
601         } else if (IS_23XX(isp)) {
602                 isp->isp_rqstinrp = BIU_REQINP;
603                 isp->isp_rqstoutrp = BIU_REQOUTP;
604                 isp->isp_respinrp = BIU_RSPINP;
605                 isp->isp_respoutrp = BIU_RSPOUTP;
606         } else {
607                 isp->isp_rqstinrp = INMAILBOX4;
608                 isp->isp_rqstoutrp = OUTMAILBOX4;
609                 isp->isp_respinrp = OUTMAILBOX5;
610                 isp->isp_respoutrp = INMAILBOX5;
611         }
612         ISP_WRITE(isp, isp->isp_rqstinrp, 0);
613         ISP_WRITE(isp, isp->isp_rqstoutrp, 0);
614         ISP_WRITE(isp, isp->isp_respinrp, 0);
615         ISP_WRITE(isp, isp->isp_respoutrp, 0);
616         if (IS_24XX(isp)) {
617                 if (!IS_26XX(isp)) {
618                         ISP_WRITE(isp, BIU2400_PRI_REQINP, 0);
619                         ISP_WRITE(isp, BIU2400_PRI_REQOUTP, 0);
620                 }
621                 ISP_WRITE(isp, BIU2400_ATIO_RSPINP, 0);
622                 ISP_WRITE(isp, BIU2400_ATIO_RSPOUTP, 0);
623         }
624
625         if (!IS_24XX(isp) && isp->isp_bustype == ISP_BT_PCI) {
626                 /* Make sure the BIOS is disabled */
627                 ISP_WRITE(isp, HCCR, PCI_HCCR_CMD_BIOS);
628         }
629
630         /*
631          * Wait for everything to finish firing up.
632          *
633          * Avoid doing this on early 2312s because you can generate a PCI
634          * parity error (chip breakage).
635          */
636         if (IS_2312(isp) && isp->isp_revision < 2) {
637                 ISP_DELAY(100);
638         } else {
639                 loops = MBOX_DELAY_COUNT;
640                 while (ISP_READ(isp, OUTMAILBOX0) == MBOX_BUSY) {
641                         ISP_DELAY(100);
642                         if (--loops < 0) {
643                                 isp_prt(isp, ISP_LOGERR, "MBOX_BUSY never cleared on reset");
644                                 return;
645                         }
646                 }
647         }
648
649         /*
650          * Up until this point we've done everything by just reading or
651          * setting registers. From this point on we rely on at least *some*
652          * kind of firmware running in the card.
653          */
654
655         /*
656          * Do some sanity checking by running a NOP command.
657          * If it succeeds, the ROM firmware is now running.
658          */
659         MBSINIT(&mbs, MBOX_NO_OP, MBLOGALL, 0);
660         isp_mboxcmd(isp, &mbs);
661         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
662                 isp_prt(isp, ISP_LOGERR, "NOP command failed (%x)", mbs.param[0]);
663                 return;
664         }
665
666         /*
667          * Do some operational tests
668          */
669         if (IS_SCSI(isp) || IS_24XX(isp)) {
670                 static const uint16_t patterns[MAX_MAILBOX] = {
671                         0x0000, 0xdead, 0xbeef, 0xffff,
672                         0xa5a5, 0x5a5a, 0x7f7f, 0x7ff7,
673                         0x3421, 0xabcd, 0xdcba, 0xfeef,
674                         0xbead, 0xdebe, 0x2222, 0x3333,
675                         0x5555, 0x6666, 0x7777, 0xaaaa,
676                         0xffff, 0xdddd, 0x9999, 0x1fbc,
677                         0x6666, 0x6677, 0x1122, 0x33ff,
678                         0x0000, 0x0001, 0x1000, 0x1010,
679                 };
680                 int nmbox = ISP_NMBOX(isp);
681                 if (IS_SCSI(isp))
682                         nmbox = 6;
683                 MBSINIT(&mbs, MBOX_MAILBOX_REG_TEST, MBLOGALL, 0);
684                 for (i = 1; i < nmbox; i++) {
685                         mbs.param[i] = patterns[i];
686                 }
687                 isp_mboxcmd(isp, &mbs);
688                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
689                         return;
690                 }
691                 for (i = 1; i < nmbox; i++) {
692                         if (mbs.param[i] != patterns[i]) {
693                                 isp_prt(isp, ISP_LOGERR, "Register Test Failed at Register %d: should have 0x%04x but got 0x%04x", i, patterns[i], mbs.param[i]);
694                                 return;
695                         }
696                 }
697         }
698
699         /*
700          * Download new Firmware, unless requested not to do so.
701          * This is made slightly trickier in some cases where the
702          * firmware of the ROM revision is newer than the revision
703          * compiled into the driver. So, where we used to compare
704          * versions of our f/w and the ROM f/w, now we just see
705          * whether we have f/w at all and whether a config flag
706          * has disabled our download.
707          */
708         if ((isp->isp_mdvec->dv_ispfw == NULL) || (isp->isp_confopts & ISP_CFG_NORELOAD)) {
709                 dodnld = 0;
710         } else {
711
712                 /*
713                  * Set up DMA for the request and response queues.
714                  * We do this now so we can use the request queue
715                  * for dma to load firmware from.
716                  */
717                 if (ISP_MBOXDMASETUP(isp) != 0) {
718                         isp_prt(isp, ISP_LOGERR, "Cannot setup DMA");
719                         return;
720                 }
721         }
722
723         if (IS_24XX(isp)) {
724                 code_org = ISP_CODE_ORG_2400;
725         } else if (IS_23XX(isp)) {
726                 code_org = ISP_CODE_ORG_2300;
727         } else {
728                 code_org = ISP_CODE_ORG;
729         }
730
731         isp->isp_loaded_fw = 0;
732         if (dodnld && IS_24XX(isp)) {
733                 const uint32_t *ptr = isp->isp_mdvec->dv_ispfw;
734                 uint32_t la, wi, wl;
735
736                 /*
737                  * Keep loading until we run out of f/w.
738                  */
739                 code_org = ptr[2];      /* 1st load address is our start addr */
740
741                 for (;;) {
742
743                         isp_prt(isp, ISP_LOGDEBUG0, "load 0x%x words of code at load address 0x%x", ptr[3], ptr[2]);
744
745                         wi = 0;
746                         la = ptr[2];
747                         wl = ptr[3];
748                         while (wi < ptr[3]) {
749                                 uint32_t *cp;
750                                 uint32_t nw;
751
752                                 nw = min(wl, ISP_QUEUE_SIZE(RQUEST_QUEUE_LEN(isp)) / 4);
753                                 cp = isp->isp_rquest;
754                                 for (i = 0; i < nw; i++)
755                                         ISP_IOXPUT_32(isp, ptr[wi + i], &cp[i]);
756                                 MEMORYBARRIER(isp, SYNC_REQUEST, 0, ISP_QUEUE_SIZE(RQUEST_QUEUE_LEN(isp)), -1);
757                                 MBSINIT(&mbs, MBOX_LOAD_RISC_RAM, MBLOGALL, 0);
758                                 mbs.param[1] = la;
759                                 mbs.param[2] = DMA_WD1(isp->isp_rquest_dma);
760                                 mbs.param[3] = DMA_WD0(isp->isp_rquest_dma);
761                                 mbs.param[4] = nw >> 16;
762                                 mbs.param[5] = nw;
763                                 mbs.param[6] = DMA_WD3(isp->isp_rquest_dma);
764                                 mbs.param[7] = DMA_WD2(isp->isp_rquest_dma);
765                                 mbs.param[8] = la >> 16;
766                                 isp_prt(isp, ISP_LOGDEBUG0, "LOAD RISC RAM %u words at load address 0x%x", nw, la);
767                                 isp_mboxcmd(isp, &mbs);
768                                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
769                                         isp_prt(isp, ISP_LOGERR, "F/W download failed");
770                                         return;
771                                 }
772                                 la += nw;
773                                 wi += nw;
774                                 wl -= nw;
775                         }
776
777                         if (ptr[1] == 0) {
778                                 break;
779                         }
780                         ptr += ptr[3];
781                 }
782                 isp->isp_loaded_fw = 1;
783         } else if (dodnld && IS_23XX(isp)) {
784                 const uint16_t *ptr = isp->isp_mdvec->dv_ispfw;
785                 uint16_t wi, wl, segno;
786                 uint32_t la;
787
788                 la = code_org;
789                 segno = 0;
790
791                 for (;;) {
792                         uint32_t nxtaddr;
793
794                         isp_prt(isp, ISP_LOGDEBUG0, "load 0x%x words of code at load address 0x%x", ptr[3], la);
795
796                         wi = 0;
797                         wl = ptr[3];
798
799                         while (wi < ptr[3]) {
800                                 uint16_t *cp;
801                                 uint16_t nw;
802
803                                 nw = min(wl, min((1 << 15), ISP_QUEUE_SIZE(RQUEST_QUEUE_LEN(isp)) / 2));
804                                 cp = isp->isp_rquest;
805                                 for (i = 0; i < nw; i++)
806                                         ISP_IOXPUT_16(isp, ptr[wi + i], &cp[i]);
807                                 MEMORYBARRIER(isp, SYNC_REQUEST, 0, ISP_QUEUE_SIZE(RQUEST_QUEUE_LEN(isp)), -1);
808                                 MBSINIT(&mbs, 0, MBLOGALL, 0);
809                                 if (la < 0x10000) {
810                                         mbs.param[0] = MBOX_LOAD_RISC_RAM_2100;
811                                         mbs.param[1] = la;
812                                         mbs.param[2] = DMA_WD1(isp->isp_rquest_dma);
813                                         mbs.param[3] = DMA_WD0(isp->isp_rquest_dma);
814                                         mbs.param[4] = nw;
815                                         mbs.param[6] = DMA_WD3(isp->isp_rquest_dma);
816                                         mbs.param[7] = DMA_WD2(isp->isp_rquest_dma);
817                                         isp_prt(isp, ISP_LOGDEBUG1, "LOAD RISC RAM 2100 %u words at load address 0x%x\n", nw, la);
818                                 } else {
819                                         mbs.param[0] = MBOX_LOAD_RISC_RAM;
820                                         mbs.param[1] = la;
821                                         mbs.param[2] = DMA_WD1(isp->isp_rquest_dma);
822                                         mbs.param[3] = DMA_WD0(isp->isp_rquest_dma);
823                                         mbs.param[4] = nw;
824                                         mbs.param[6] = DMA_WD3(isp->isp_rquest_dma);
825                                         mbs.param[7] = DMA_WD2(isp->isp_rquest_dma);
826                                         mbs.param[8] = la >> 16;
827                                         isp_prt(isp, ISP_LOGDEBUG1, "LOAD RISC RAM %u words at load address 0x%x\n", nw, la);
828                                 }
829                                 isp_mboxcmd(isp, &mbs);
830                                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
831                                         isp_prt(isp, ISP_LOGERR, "F/W download failed");
832                                         return;
833                                 }
834                                 la += nw;
835                                 wi += nw;
836                                 wl -= nw;
837                         }
838
839                         if (!IS_2322(isp)) {
840                                 break;
841                         }
842
843                         if (++segno == 3) {
844                                 break;
845                         }
846
847                         /*
848                          * If we're a 2322, the firmware actually comes in
849                          * three chunks. We loaded the first at the code_org
850                          * address. The other two chunks, which follow right
851                          * after each other in memory here, get loaded at
852                          * addresses specfied at offset 0x9..0xB.
853                          */
854
855                         nxtaddr = ptr[3];
856                         ptr = &ptr[nxtaddr];
857                         la = ptr[5] | ((ptr[4] & 0x3f) << 16);
858                 }
859                 isp->isp_loaded_fw = 1;
860         } else if (dodnld) {
861                 const uint16_t *ptr = isp->isp_mdvec->dv_ispfw;
862                 u_int i, wl;
863
864                 wl = ptr[3];
865                 isp_prt(isp, ISP_LOGDEBUG1,
866                     "WRITE RAM %u words at load address 0x%x", wl, code_org);
867                 for (i = 0; i < wl; i++) {
868                         MBSINIT(&mbs, MBOX_WRITE_RAM_WORD, MBLOGNONE, 0);
869                         mbs.param[1] = code_org + i;
870                         mbs.param[2] = ptr[i];
871                         isp_mboxcmd(isp, &mbs);
872                         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
873                                 isp_prt(isp, ISP_LOGERR,
874                                     "F/W download failed at word %d", i);
875                                 return;
876                         }
877                 }
878         } else if (IS_26XX(isp)) {
879                 isp_prt(isp, ISP_LOGDEBUG1, "loading firmware from flash");
880                 MBSINIT(&mbs, MBOX_LOAD_FLASH_FIRMWARE, MBLOGALL, 5000000);
881                 mbs.ibitm = 0x01;
882                 mbs.obitm = 0x07;
883                 isp_mboxcmd(isp, &mbs);
884                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
885                         isp_prt(isp, ISP_LOGERR, "Flash F/W load failed");
886                         return;
887                 }
888         } else {
889                 isp_prt(isp, ISP_LOGDEBUG2, "skipping f/w download");
890         }
891
892         /*
893          * If we loaded firmware, verify its checksum
894          */
895         if (isp->isp_loaded_fw) {
896                 MBSINIT(&mbs, MBOX_VERIFY_CHECKSUM, MBLOGNONE, 0);
897                 if (IS_24XX(isp)) {
898                         mbs.param[1] = code_org >> 16;
899                         mbs.param[2] = code_org;
900                 } else {
901                         mbs.param[1] = code_org;
902                 }
903                 isp_mboxcmd(isp, &mbs);
904                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
905                         isp_prt(isp, ISP_LOGERR, dcrc);
906                         return;
907                 }
908         }
909
910         /*
911          * Now start it rolling.
912          *
913          * If we didn't actually download f/w,
914          * we still need to (re)start it.
915          */
916         MBSINIT(&mbs, MBOX_EXEC_FIRMWARE, MBLOGALL, 5000000);
917         if (IS_26XX(isp)) {
918                 mbs.param[1] = code_org >> 16;
919                 mbs.param[2] = code_org;
920         } else if (IS_24XX(isp)) {
921                 mbs.param[1] = code_org >> 16;
922                 mbs.param[2] = code_org;
923                 if (isp->isp_loaded_fw) {
924                         mbs.param[3] = 0;
925                 } else {
926                         mbs.param[3] = 1;
927                 }
928         } else if (IS_2322(isp)) {
929                 mbs.param[1] = code_org;
930                 if (isp->isp_loaded_fw) {
931                         mbs.param[2] = 0;
932                 } else {
933                         mbs.param[2] = 1;
934                 }
935         } else {
936                 mbs.param[1] = code_org;
937         }
938         isp_mboxcmd(isp, &mbs);
939         if (IS_2322(isp) || IS_24XX(isp)) {
940                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
941                         return;
942                 }
943         }
944
945         if (IS_SCSI(isp)) {
946                 /*
947                  * Set CLOCK RATE, but only if asked to.
948                  */
949                 if (isp->isp_clock) {
950                         MBSINIT(&mbs, MBOX_SET_CLOCK_RATE, MBLOGALL, 0);
951                         mbs.param[1] = isp->isp_clock;
952                         isp_mboxcmd(isp, &mbs);
953                         /* we will try not to care if this fails */
954                 }
955         }
956
957         /*
958          * Ask the chip for the current firmware version.
959          * This should prove that the new firmware is working.
960          */
961         MBSINIT(&mbs, MBOX_ABOUT_FIRMWARE, MBLOGALL, 5000000);
962         isp_mboxcmd(isp, &mbs);
963         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
964                 return;
965         }
966
967         /*
968          * The SBus firmware that we are using apparently does not return
969          * major, minor, micro revisions in the mailbox registers, which
970          * is really, really, annoying.
971          */
972         if (ISP_SBUS_SUPPORTED && isp->isp_bustype == ISP_BT_SBUS) {
973                 if (dodnld) {
974 #ifdef  ISP_TARGET_MODE
975                         isp->isp_fwrev[0] = 7;
976                         isp->isp_fwrev[1] = 55;
977 #else
978                         isp->isp_fwrev[0] = 1;
979                         isp->isp_fwrev[1] = 37;
980 #endif
981                         isp->isp_fwrev[2] = 0;
982                 }
983         } else {
984                 isp->isp_fwrev[0] = mbs.param[1];
985                 isp->isp_fwrev[1] = mbs.param[2];
986                 isp->isp_fwrev[2] = mbs.param[3];
987         }
988
989         if (IS_FC(isp)) {
990                 /*
991                  * We do not believe firmware attributes for 2100 code less
992                  * than 1.17.0, unless it's the firmware we specifically
993                  * are loading.
994                  *
995                  * Note that all 22XX and later f/w is greater than 1.X.0.
996                  */
997                 if ((ISP_FW_OLDER_THAN(isp, 1, 17, 1))) {
998 #ifdef  USE_SMALLER_2100_FIRMWARE
999                         isp->isp_fwattr = ISP_FW_ATTR_SCCLUN;
1000 #else
1001                         isp->isp_fwattr = 0;
1002 #endif
1003                 } else {
1004                         isp->isp_fwattr = mbs.param[6];
1005                 }
1006                 if (IS_24XX(isp)) {
1007                         isp->isp_fwattr |= ((uint64_t) mbs.param[15]) << 16;
1008                         if (isp->isp_fwattr & ISP2400_FW_ATTR_EXTNDED) {
1009                                 isp->isp_fwattr |=
1010                                     (((uint64_t) mbs.param[16]) << 32) |
1011                                     (((uint64_t) mbs.param[17]) << 48);
1012                         }
1013                 }
1014         } else {
1015                 isp->isp_fwattr = 0;
1016         }
1017
1018         isp_prt(isp, ISP_LOGCONFIG, "Board Type %s, Chip Revision 0x%x, %s F/W Revision %d.%d.%d",
1019             btype, isp->isp_revision, dodnld? "loaded" : "resident", isp->isp_fwrev[0], isp->isp_fwrev[1], isp->isp_fwrev[2]);
1020
1021         fwt = isp->isp_fwattr;
1022         if (IS_24XX(isp)) {
1023                 buf = FCPARAM(isp, 0)->isp_scanscratch;
1024                 ISP_SNPRINTF(buf, ISP_FC_SCRLEN, "Attributes:");
1025                 if (fwt & ISP2400_FW_ATTR_CLASS2) {
1026                         fwt ^=ISP2400_FW_ATTR_CLASS2;
1027                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s Class2", buf);
1028                 }
1029                 if (fwt & ISP2400_FW_ATTR_IP) {
1030                         fwt ^=ISP2400_FW_ATTR_IP;
1031                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s IP", buf);
1032                 }
1033                 if (fwt & ISP2400_FW_ATTR_MULTIID) {
1034                         fwt ^=ISP2400_FW_ATTR_MULTIID;
1035                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s MultiID", buf);
1036                 }
1037                 if (fwt & ISP2400_FW_ATTR_SB2) {
1038                         fwt ^=ISP2400_FW_ATTR_SB2;
1039                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s SB2", buf);
1040                 }
1041                 if (fwt & ISP2400_FW_ATTR_T10CRC) {
1042                         fwt ^=ISP2400_FW_ATTR_T10CRC;
1043                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s T10CRC", buf);
1044                 }
1045                 if (fwt & ISP2400_FW_ATTR_VI) {
1046                         fwt ^=ISP2400_FW_ATTR_VI;
1047                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s VI", buf);
1048                 }
1049                 if (fwt & ISP2400_FW_ATTR_MQ) {
1050                         fwt ^=ISP2400_FW_ATTR_MQ;
1051                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s MQ", buf);
1052                 }
1053                 if (fwt & ISP2400_FW_ATTR_MSIX) {
1054                         fwt ^=ISP2400_FW_ATTR_MSIX;
1055                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s MSIX", buf);
1056                 }
1057                 if (fwt & ISP2400_FW_ATTR_FCOE) {
1058                         fwt ^=ISP2400_FW_ATTR_FCOE;
1059                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s FCOE", buf);
1060                 }
1061                 if (fwt & ISP2400_FW_ATTR_VP0) {
1062                         fwt ^= ISP2400_FW_ATTR_VP0;
1063                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s VP0_Decoupling", buf);
1064                 }
1065                 if (fwt & ISP2400_FW_ATTR_EXPFW) {
1066                         fwt ^= ISP2400_FW_ATTR_EXPFW;
1067                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s (Experimental)", buf);
1068                 }
1069                 if (fwt & ISP2400_FW_ATTR_HOTFW) {
1070                         fwt ^= ISP2400_FW_ATTR_HOTFW;
1071                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s HotFW", buf);
1072                 }
1073                 fwt &= ~ISP2400_FW_ATTR_EXTNDED;
1074                 if (fwt & ISP2400_FW_ATTR_EXTVP) {
1075                         fwt ^= ISP2400_FW_ATTR_EXTVP;
1076                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s ExtVP", buf);
1077                 }
1078                 if (fwt & ISP2400_FW_ATTR_VN2VN) {
1079                         fwt ^= ISP2400_FW_ATTR_VN2VN;
1080                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s VN2VN", buf);
1081                 }
1082                 if (fwt & ISP2400_FW_ATTR_EXMOFF) {
1083                         fwt ^= ISP2400_FW_ATTR_EXMOFF;
1084                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s EXMOFF", buf);
1085                 }
1086                 if (fwt & ISP2400_FW_ATTR_NPMOFF) {
1087                         fwt ^= ISP2400_FW_ATTR_NPMOFF;
1088                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s NPMOFF", buf);
1089                 }
1090                 if (fwt & ISP2400_FW_ATTR_DIFCHOP) {
1091                         fwt ^= ISP2400_FW_ATTR_DIFCHOP;
1092                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s DIFCHOP", buf);
1093                 }
1094                 if (fwt & ISP2400_FW_ATTR_SRIOV) {
1095                         fwt ^= ISP2400_FW_ATTR_SRIOV;
1096                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s SRIOV", buf);
1097                 }
1098                 if (fwt & ISP2400_FW_ATTR_ASICTMP) {
1099                         fwt ^= ISP2400_FW_ATTR_ASICTMP;
1100                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s ASICTMP", buf);
1101                 }
1102                 if (fwt & ISP2400_FW_ATTR_ATIOMQ) {
1103                         fwt ^= ISP2400_FW_ATTR_ATIOMQ;
1104                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s ATIOMQ", buf);
1105                 }
1106                 if (fwt) {
1107                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s (unknown 0x%08x%08x)", buf,
1108                             (uint32_t) (fwt >> 32), (uint32_t) fwt);
1109                 }
1110                 isp_prt(isp, ISP_LOGCONFIG, "%s", buf);
1111         } else if (IS_FC(isp)) {
1112                 buf = FCPARAM(isp, 0)->isp_scanscratch;
1113                 ISP_SNPRINTF(buf, ISP_FC_SCRLEN, "Attributes:");
1114                 if (fwt & ISP_FW_ATTR_TMODE) {
1115                         fwt ^=ISP_FW_ATTR_TMODE;
1116                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s TargetMode", buf);
1117                 }
1118                 if (fwt & ISP_FW_ATTR_SCCLUN) {
1119                         fwt ^=ISP_FW_ATTR_SCCLUN;
1120                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s SCC-Lun", buf);
1121                 }
1122                 if (fwt & ISP_FW_ATTR_FABRIC) {
1123                         fwt ^=ISP_FW_ATTR_FABRIC;
1124                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s Fabric", buf);
1125                 }
1126                 if (fwt & ISP_FW_ATTR_CLASS2) {
1127                         fwt ^=ISP_FW_ATTR_CLASS2;
1128                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s Class2", buf);
1129                 }
1130                 if (fwt & ISP_FW_ATTR_FCTAPE) {
1131                         fwt ^=ISP_FW_ATTR_FCTAPE;
1132                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s FC-Tape", buf);
1133                 }
1134                 if (fwt & ISP_FW_ATTR_IP) {
1135                         fwt ^=ISP_FW_ATTR_IP;
1136                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s IP", buf);
1137                 }
1138                 if (fwt & ISP_FW_ATTR_VI) {
1139                         fwt ^=ISP_FW_ATTR_VI;
1140                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s VI", buf);
1141                 }
1142                 if (fwt & ISP_FW_ATTR_VI_SOLARIS) {
1143                         fwt ^=ISP_FW_ATTR_VI_SOLARIS;
1144                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s VI_SOLARIS", buf);
1145                 }
1146                 if (fwt & ISP_FW_ATTR_2KLOGINS) {
1147                         fwt ^=ISP_FW_ATTR_2KLOGINS;
1148                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s 2K-Login", buf);
1149                 }
1150                 if (fwt != 0) {
1151                         ISP_SNPRINTF(buf, ISP_FC_SCRLEN - strlen(buf), "%s (unknown 0x%08x%08x)", buf,
1152                             (uint32_t) (fwt >> 32), (uint32_t) fwt);
1153                 }
1154                 isp_prt(isp, ISP_LOGCONFIG, "%s", buf);
1155         }
1156
1157         if (IS_24XX(isp)) {
1158                 MBSINIT(&mbs, MBOX_GET_RESOURCE_COUNT, MBLOGALL, 0);
1159                 isp_mboxcmd(isp, &mbs);
1160                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1161                         return;
1162                 }
1163                 isp->isp_maxcmds = mbs.param[3];
1164         } else {
1165                 MBSINIT(&mbs, MBOX_GET_FIRMWARE_STATUS, MBLOGALL, 0);
1166                 isp_mboxcmd(isp, &mbs);
1167                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1168                         return;
1169                 }
1170                 isp->isp_maxcmds = mbs.param[2];
1171         }
1172         isp_prt(isp, ISP_LOGCONFIG, "%d max I/O command limit set", isp->isp_maxcmds);
1173
1174         /*
1175          * If we don't have Multi-ID f/w loaded, we need to restrict channels to one.
1176          * Only make this check for non-SCSI cards (I'm not sure firmware attributes
1177          * work for them).
1178          */
1179         if (IS_FC(isp) && isp->isp_nchan > 1) {
1180                 if (!ISP_CAP_MULTI_ID(isp)) {
1181                         isp_prt(isp, ISP_LOGWARN, "non-MULTIID f/w loaded, "
1182                             "only can enable 1 of %d channels", isp->isp_nchan);
1183                         isp->isp_nchan = 1;
1184                 } else if (!ISP_CAP_VP0(isp)) {
1185                         isp_prt(isp, ISP_LOGWARN, "We can not use MULTIID "
1186                             "feature properly without VP0_Decoupling");
1187                         isp->isp_nchan = 1;
1188                 }
1189         }
1190
1191         /*
1192          * Final DMA setup after we got isp_maxcmds.
1193          */
1194         if (ISP_MBOXDMASETUP(isp) != 0) {
1195                 isp_prt(isp, ISP_LOGERR, "Cannot setup DMA");
1196                 return;
1197         }
1198
1199         /*
1200          * Setup interrupts.
1201          */
1202         if (ISP_IRQSETUP(isp) != 0) {
1203                 isp_prt(isp, ISP_LOGERR, "Cannot setup IRQ");
1204                 return;
1205         }
1206         ISP_ENABLE_INTS(isp);
1207
1208         if (IS_FC(isp)) {
1209                 for (i = 0; i < isp->isp_nchan; i++)
1210                         isp_change_fw_state(isp, i, FW_CONFIG_WAIT);
1211         }
1212
1213         isp->isp_state = ISP_RESETSTATE;
1214
1215         /*
1216          * Okay- now that we have new firmware running, we now (re)set our
1217          * notion of how many luns we support. This is somewhat tricky because
1218          * if we haven't loaded firmware, we sometimes do not have an easy way
1219          * of knowing how many luns we support.
1220          *
1221          * Expanded lun firmware gives you 32 luns for SCSI cards and
1222          * unlimited luns for Fibre Channel cards.
1223          *
1224          * It turns out that even for QLogic 2100s with ROM 1.10 and above
1225          * we do get a firmware attributes word returned in mailbox register 6.
1226          *
1227          * Because the lun is in a different position in the Request Queue
1228          * Entry structure for Fibre Channel with expanded lun firmware, we
1229          * can only support one lun (lun zero) when we don't know what kind
1230          * of firmware we're running.
1231          */
1232         if (IS_SCSI(isp)) {
1233                 if (dodnld) {
1234                         if (IS_ULTRA2(isp) || IS_ULTRA3(isp)) {
1235                                 isp->isp_maxluns = 32;
1236                         } else {
1237                                 isp->isp_maxluns = 8;
1238                         }
1239                 } else {
1240                         isp->isp_maxluns = 8;
1241                 }
1242         } else {
1243                 if (ISP_CAP_SCCFW(isp)) {
1244                         isp->isp_maxluns = 0;   /* No limit -- 2/8 bytes */
1245                 } else {
1246                         isp->isp_maxluns = 16;
1247                 }
1248         }
1249
1250         /*
1251          * We get some default values established. As a side
1252          * effect, NVRAM is read here (unless overriden by
1253          * a configuration flag).
1254          */
1255         if (do_load_defaults) {
1256                 if (IS_SCSI(isp)) {
1257                         isp_setdfltsdparm(isp);
1258                 } else {
1259                         for (i = 0; i < isp->isp_nchan; i++) {
1260                                 isp_setdfltfcparm(isp, i);
1261                         }
1262                 }
1263         }
1264 }
1265
1266 /*
1267  * Clean firmware shutdown.
1268  */
1269 static int
1270 isp_stop(ispsoftc_t *isp)
1271 {
1272         mbreg_t mbs;
1273
1274         isp->isp_state = ISP_NILSTATE;
1275         MBSINIT(&mbs, MBOX_STOP_FIRMWARE, MBLOGALL, 500000);
1276         mbs.param[1] = 0;
1277         mbs.param[2] = 0;
1278         mbs.param[3] = 0;
1279         mbs.param[4] = 0;
1280         mbs.param[5] = 0;
1281         mbs.param[6] = 0;
1282         mbs.param[7] = 0;
1283         mbs.param[8] = 0;
1284         isp_mboxcmd(isp, &mbs);
1285         return (mbs.param[0] == MBOX_COMMAND_COMPLETE ? 0 : mbs.param[0]);
1286 }
1287
1288 /*
1289  * Hardware shutdown.
1290  */
1291 void
1292 isp_shutdown(ispsoftc_t *isp)
1293 {
1294
1295         if (isp->isp_state >= ISP_RESETSTATE)
1296                 isp_stop(isp);
1297         ISP_DISABLE_INTS(isp);
1298         if (IS_FC(isp)) {
1299                 if (IS_24XX(isp)) {
1300                         ISP_WRITE(isp, BIU2400_ICR, 0);
1301                         ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_PAUSE);
1302                 } else {
1303                         ISP_WRITE(isp, BIU_ICR, 0);
1304                         ISP_WRITE(isp, HCCR, HCCR_CMD_PAUSE);
1305                         ISP_WRITE(isp, BIU2100_CSR, BIU2100_FPM0_REGS);
1306                         ISP_WRITE(isp, FPM_DIAG_CONFIG, FPM_SOFT_RESET);
1307                         ISP_WRITE(isp, BIU2100_CSR, BIU2100_FB_REGS);
1308                         ISP_WRITE(isp, FBM_CMD, FBMCMD_FIFO_RESET_ALL);
1309                         ISP_WRITE(isp, BIU2100_CSR, BIU2100_RISC_REGS);
1310                 }
1311         } else {
1312                 ISP_WRITE(isp, BIU_ICR, 0);
1313                 ISP_WRITE(isp, HCCR, HCCR_CMD_PAUSE);
1314         }
1315 }
1316
1317 /*
1318  * Initialize Parameters of Hardware to a known state.
1319  *
1320  * Locks are held before coming here.
1321  */
1322 void
1323 isp_init(ispsoftc_t *isp)
1324 {
1325         if (IS_FC(isp)) {
1326                 if (IS_24XX(isp)) {
1327                         isp_fibre_init_2400(isp);
1328                 } else {
1329                         isp_fibre_init(isp);
1330                 }
1331         } else {
1332                 isp_scsi_init(isp);
1333         }
1334 }
1335
1336 static void
1337 isp_scsi_init(ispsoftc_t *isp)
1338 {
1339         sdparam *sdp_chan0, *sdp_chan1;
1340         mbreg_t mbs;
1341
1342         isp->isp_state = ISP_INITSTATE;
1343
1344         sdp_chan0 = SDPARAM(isp, 0);
1345         sdp_chan1 = sdp_chan0;
1346         if (IS_DUALBUS(isp)) {
1347                 sdp_chan1 = SDPARAM(isp, 1);
1348         }
1349
1350         /* First do overall per-card settings. */
1351
1352         /*
1353          * If we have fast memory timing enabled, turn it on.
1354          */
1355         if (sdp_chan0->isp_fast_mttr) {
1356                 ISP_WRITE(isp, RISC_MTR, 0x1313);
1357         }
1358
1359         /*
1360          * Set Retry Delay and Count.
1361          * You set both channels at the same time.
1362          */
1363         MBSINIT(&mbs, MBOX_SET_RETRY_COUNT, MBLOGALL, 0);
1364         mbs.param[1] = sdp_chan0->isp_retry_count;
1365         mbs.param[2] = sdp_chan0->isp_retry_delay;
1366         mbs.param[6] = sdp_chan1->isp_retry_count;
1367         mbs.param[7] = sdp_chan1->isp_retry_delay;
1368         isp_mboxcmd(isp, &mbs);
1369         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1370                 return;
1371         }
1372
1373         /*
1374          * Set ASYNC DATA SETUP time. This is very important.
1375          */
1376         MBSINIT(&mbs, MBOX_SET_ASYNC_DATA_SETUP_TIME, MBLOGALL, 0);
1377         mbs.param[1] = sdp_chan0->isp_async_data_setup;
1378         mbs.param[2] = sdp_chan1->isp_async_data_setup;
1379         isp_mboxcmd(isp, &mbs);
1380         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1381                 return;
1382         }
1383
1384         /*
1385          * Set ACTIVE Negation State.
1386          */
1387         MBSINIT(&mbs, MBOX_SET_ACT_NEG_STATE, MBLOGNONE, 0);
1388         mbs.param[1] =
1389             (sdp_chan0->isp_req_ack_active_neg << 4) |
1390             (sdp_chan0->isp_data_line_active_neg << 5);
1391         mbs.param[2] =
1392             (sdp_chan1->isp_req_ack_active_neg << 4) |
1393             (sdp_chan1->isp_data_line_active_neg << 5);
1394         isp_mboxcmd(isp, &mbs);
1395         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1396                 isp_prt(isp, ISP_LOGERR,
1397                     "failed to set active negation state (%d,%d), (%d,%d)",
1398                     sdp_chan0->isp_req_ack_active_neg,
1399                     sdp_chan0->isp_data_line_active_neg,
1400                     sdp_chan1->isp_req_ack_active_neg,
1401                     sdp_chan1->isp_data_line_active_neg);
1402                 /*
1403                  * But don't return.
1404                  */
1405         }
1406
1407         /*
1408          * Set the Tag Aging limit
1409          */
1410         MBSINIT(&mbs, MBOX_SET_TAG_AGE_LIMIT, MBLOGALL, 0);
1411         mbs.param[1] = sdp_chan0->isp_tag_aging;
1412         mbs.param[2] = sdp_chan1->isp_tag_aging;
1413         isp_mboxcmd(isp, &mbs);
1414         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1415                 isp_prt(isp, ISP_LOGERR, "failed to set tag age limit (%d,%d)",
1416                     sdp_chan0->isp_tag_aging, sdp_chan1->isp_tag_aging);
1417                 return;
1418         }
1419
1420         /*
1421          * Set selection timeout.
1422          */
1423         MBSINIT(&mbs, MBOX_SET_SELECT_TIMEOUT, MBLOGALL, 0);
1424         mbs.param[1] = sdp_chan0->isp_selection_timeout;
1425         mbs.param[2] = sdp_chan1->isp_selection_timeout;
1426         isp_mboxcmd(isp, &mbs);
1427         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1428                 return;
1429         }
1430
1431         /* now do per-channel settings */
1432         isp_scsi_channel_init(isp, 0);
1433         if (IS_DUALBUS(isp))
1434                 isp_scsi_channel_init(isp, 1);
1435
1436         /*
1437          * Now enable request/response queues
1438          */
1439
1440         if (IS_ULTRA2(isp) || IS_1240(isp)) {
1441                 MBSINIT(&mbs, MBOX_INIT_RES_QUEUE_A64, MBLOGALL, 0);
1442                 mbs.param[1] = RESULT_QUEUE_LEN(isp);
1443                 mbs.param[2] = DMA_WD1(isp->isp_result_dma);
1444                 mbs.param[3] = DMA_WD0(isp->isp_result_dma);
1445                 mbs.param[4] = 0;
1446                 mbs.param[6] = DMA_WD3(isp->isp_result_dma);
1447                 mbs.param[7] = DMA_WD2(isp->isp_result_dma);
1448                 isp_mboxcmd(isp, &mbs);
1449                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1450                         return;
1451                 }
1452                 isp->isp_residx = isp->isp_resodx = mbs.param[5];
1453
1454                 MBSINIT(&mbs, MBOX_INIT_REQ_QUEUE_A64, MBLOGALL, 0);
1455                 mbs.param[1] = RQUEST_QUEUE_LEN(isp);
1456                 mbs.param[2] = DMA_WD1(isp->isp_rquest_dma);
1457                 mbs.param[3] = DMA_WD0(isp->isp_rquest_dma);
1458                 mbs.param[5] = 0;
1459                 mbs.param[6] = DMA_WD3(isp->isp_result_dma);
1460                 mbs.param[7] = DMA_WD2(isp->isp_result_dma);
1461                 isp_mboxcmd(isp, &mbs);
1462                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1463                         return;
1464                 }
1465                 isp->isp_reqidx = isp->isp_reqodx = mbs.param[4];
1466         } else {
1467                 MBSINIT(&mbs, MBOX_INIT_RES_QUEUE, MBLOGALL, 0);
1468                 mbs.param[1] = RESULT_QUEUE_LEN(isp);
1469                 mbs.param[2] = DMA_WD1(isp->isp_result_dma);
1470                 mbs.param[3] = DMA_WD0(isp->isp_result_dma);
1471                 mbs.param[4] = 0;
1472                 isp_mboxcmd(isp, &mbs);
1473                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1474                         return;
1475                 }
1476                 isp->isp_residx = isp->isp_resodx = mbs.param[5];
1477
1478                 MBSINIT(&mbs, MBOX_INIT_REQ_QUEUE, MBLOGALL, 0);
1479                 mbs.param[1] = RQUEST_QUEUE_LEN(isp);
1480                 mbs.param[2] = DMA_WD1(isp->isp_rquest_dma);
1481                 mbs.param[3] = DMA_WD0(isp->isp_rquest_dma);
1482                 mbs.param[5] = 0;
1483                 isp_mboxcmd(isp, &mbs);
1484                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1485                         return;
1486                 }
1487                 isp->isp_reqidx = isp->isp_reqodx = mbs.param[4];
1488         }
1489
1490         /*
1491          * Turn on LVD transitions for ULTRA2 or better and other features
1492          *
1493          * Now that we have 32 bit handles, don't do any fast posting
1494          * any more. For Ultra2/Ultra3 cards, we can turn on 32 bit RIO
1495          * operation or use fast posting. To be conservative, we'll only
1496          * do this for Ultra3 cards now because the other cards are so
1497          * rare for this author to find and test with.
1498          */
1499
1500         MBSINIT(&mbs, MBOX_SET_FW_FEATURES, MBLOGALL, 0);
1501         if (IS_ULTRA2(isp))
1502                 mbs.param[1] |= FW_FEATURE_LVD_NOTIFY;
1503 #ifdef  ISP_NO_RIO
1504         if (IS_ULTRA3(isp))
1505                 mbs.param[1] |= FW_FEATURE_FAST_POST;
1506 #else
1507         if (IS_ULTRA3(isp))
1508                 mbs.param[1] |= FW_FEATURE_RIO_32BIT;
1509 #endif
1510         if (mbs.param[1] != 0) {
1511                 uint16_t sfeat = mbs.param[1];
1512                 isp_mboxcmd(isp, &mbs);
1513                 if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1514                         isp_prt(isp, ISP_LOGINFO,
1515                             "Enabled FW features (0x%x)", sfeat);
1516                 }
1517         }
1518
1519         isp->isp_state = ISP_RUNSTATE;
1520 }
1521
1522 static void
1523 isp_scsi_channel_init(ispsoftc_t *isp, int chan)
1524 {
1525         sdparam *sdp;
1526         mbreg_t mbs;
1527         int tgt;
1528
1529         sdp = SDPARAM(isp, chan);
1530
1531         /*
1532          * Set (possibly new) Initiator ID.
1533          */
1534         MBSINIT(&mbs, MBOX_SET_INIT_SCSI_ID, MBLOGALL, 0);
1535         mbs.param[1] = (chan << 7) | sdp->isp_initiator_id;
1536         isp_mboxcmd(isp, &mbs);
1537         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1538                 return;
1539         }
1540         isp_prt(isp, ISP_LOGINFO, "Chan %d Initiator ID is %d",
1541             chan, sdp->isp_initiator_id);
1542
1543
1544         /*
1545          * Set current per-target parameters to an initial safe minimum.
1546          */
1547         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
1548                 int lun;
1549                 uint16_t sdf;
1550
1551                 if (sdp->isp_devparam[tgt].dev_enable == 0) {
1552                         continue;
1553                 }
1554 #ifndef ISP_TARGET_MODE
1555                 sdf = sdp->isp_devparam[tgt].goal_flags;
1556                 sdf &= DPARM_SAFE_DFLT;
1557                 /*
1558                  * It is not quite clear when this changed over so that
1559                  * we could force narrow and async for 1000/1020 cards,
1560                  * but assume that this is only the case for loaded
1561                  * firmware.
1562                  */
1563                 if (isp->isp_loaded_fw) {
1564                         sdf |= DPARM_NARROW | DPARM_ASYNC;
1565                 }
1566 #else
1567                 /*
1568                  * The !$*!)$!$)* f/w uses the same index into some
1569                  * internal table to decide how to respond to negotiations,
1570                  * so if we've said "let's be safe" for ID X, and ID X
1571                  * selects *us*, the negotiations will back to 'safe'
1572                  * (as in narrow/async). What the f/w *should* do is
1573                  * use the initiator id settings to decide how to respond.
1574                  */
1575                 sdp->isp_devparam[tgt].goal_flags = sdf = DPARM_DEFAULT;
1576 #endif
1577                 MBSINIT(&mbs, MBOX_SET_TARGET_PARAMS, MBLOGNONE, 0);
1578                 mbs.param[1] = (chan << 15) | (tgt << 8);
1579                 mbs.param[2] = sdf;
1580                 if ((sdf & DPARM_SYNC) == 0) {
1581                         mbs.param[3] = 0;
1582                 } else {
1583                         mbs.param[3] =
1584                             (sdp->isp_devparam[tgt].goal_offset << 8) |
1585                             (sdp->isp_devparam[tgt].goal_period);
1586                 }
1587                 isp_prt(isp, ISP_LOGDEBUG0, "Initial Settings bus%d tgt%d flags 0x%x off 0x%x per 0x%x",
1588                     chan, tgt, mbs.param[2], mbs.param[3] >> 8, mbs.param[3] & 0xff);
1589                 isp_mboxcmd(isp, &mbs);
1590                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1591                         sdf = DPARM_SAFE_DFLT;
1592                         MBSINIT(&mbs, MBOX_SET_TARGET_PARAMS, MBLOGALL, 0);
1593                         mbs.param[1] = (tgt << 8) | (chan << 15);
1594                         mbs.param[2] = sdf;
1595                         mbs.param[3] = 0;
1596                         isp_mboxcmd(isp, &mbs);
1597                         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1598                                 continue;
1599                         }
1600                 }
1601
1602                 /*
1603                  * We don't update any information directly from the f/w
1604                  * because we need to run at least one command to cause a
1605                  * new state to be latched up. So, we just assume that we
1606                  * converge to the values we just had set.
1607                  *
1608                  * Ensure that we don't believe tagged queuing is enabled yet.
1609                  * It turns out that sometimes the ISP just ignores our
1610                  * attempts to set parameters for devices that it hasn't
1611                  * seen yet.
1612                  */
1613                 sdp->isp_devparam[tgt].actv_flags = sdf & ~DPARM_TQING;
1614                 for (lun = 0; lun < (int) isp->isp_maxluns; lun++) {
1615                         MBSINIT(&mbs, MBOX_SET_DEV_QUEUE_PARAMS, MBLOGALL, 0);
1616                         mbs.param[1] = (chan << 15) | (tgt << 8) | lun;
1617                         mbs.param[2] = sdp->isp_max_queue_depth;
1618                         mbs.param[3] = sdp->isp_devparam[tgt].exc_throttle;
1619                         isp_mboxcmd(isp, &mbs);
1620                         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1621                                 break;
1622                         }
1623                 }
1624         }
1625         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
1626                 if (sdp->isp_devparam[tgt].dev_refresh) {
1627                         sdp->sendmarker = 1;
1628                         sdp->update = 1;
1629                         break;
1630                 }
1631         }
1632 }
1633
1634 /*
1635  * Fibre Channel specific initialization.
1636  */
1637 static void
1638 isp_fibre_init(ispsoftc_t *isp)
1639 {
1640         fcparam *fcp;
1641         isp_icb_t local, *icbp = &local;
1642         mbreg_t mbs;
1643         int ownloopid;
1644
1645         /*
1646          * We only support one channel on non-24XX cards
1647          */
1648         fcp = FCPARAM(isp, 0);
1649         if (fcp->role == ISP_ROLE_NONE)
1650                 return;
1651
1652         isp->isp_state = ISP_INITSTATE;
1653         ISP_MEMZERO(icbp, sizeof (*icbp));
1654         icbp->icb_version = ICB_VERSION1;
1655         icbp->icb_fwoptions = fcp->isp_fwoptions;
1656
1657         /*
1658          * Firmware Options are either retrieved from NVRAM or
1659          * are patched elsewhere. We check them for sanity here
1660          * and make changes based on board revision, but otherwise
1661          * let others decide policy.
1662          */
1663
1664         /*
1665          * If this is a 2100 < revision 5, we have to turn off FAIRNESS.
1666          */
1667         if (IS_2100(isp) && isp->isp_revision < 5) {
1668                 icbp->icb_fwoptions &= ~ICBOPT_FAIRNESS;
1669         }
1670
1671         /*
1672          * We have to use FULL LOGIN even though it resets the loop too much
1673          * because otherwise port database entries don't get updated after
1674          * a LIP- this is a known f/w bug for 2100 f/w less than 1.17.0.
1675          */
1676         if (!ISP_FW_NEWER_THAN(isp, 1, 17, 0)) {
1677                 icbp->icb_fwoptions |= ICBOPT_FULL_LOGIN;
1678         }
1679
1680         /*
1681          * Insist on Port Database Update Async notifications
1682          */
1683         icbp->icb_fwoptions |= ICBOPT_PDBCHANGE_AE;
1684
1685         /*
1686          * Make sure that target role reflects into fwoptions.
1687          */
1688         if (fcp->role & ISP_ROLE_TARGET) {
1689                 icbp->icb_fwoptions |= ICBOPT_TGT_ENABLE;
1690         } else {
1691                 icbp->icb_fwoptions &= ~ICBOPT_TGT_ENABLE;
1692         }
1693
1694         /*
1695          * For some reason my 2200 does not generate ATIOs in target mode
1696          * if initiator is disabled.  Extra logins are better then target
1697          * not working at all.
1698          */
1699         if ((fcp->role & ISP_ROLE_INITIATOR) || IS_2100(isp) || IS_2200(isp)) {
1700                 icbp->icb_fwoptions &= ~ICBOPT_INI_DISABLE;
1701         } else {
1702                 icbp->icb_fwoptions |= ICBOPT_INI_DISABLE;
1703         }
1704
1705         icbp->icb_maxfrmlen = DEFAULT_FRAMESIZE(isp);
1706         if (icbp->icb_maxfrmlen < ICB_MIN_FRMLEN || icbp->icb_maxfrmlen > ICB_MAX_FRMLEN) {
1707                 isp_prt(isp, ISP_LOGERR, "bad frame length (%d) from NVRAM- using %d", DEFAULT_FRAMESIZE(isp), ICB_DFLT_FRMLEN);
1708                 icbp->icb_maxfrmlen = ICB_DFLT_FRMLEN;
1709         }
1710         icbp->icb_maxalloc = fcp->isp_maxalloc;
1711         if (icbp->icb_maxalloc < 1) {
1712                 isp_prt(isp, ISP_LOGERR, "bad maximum allocation (%d)- using 16", fcp->isp_maxalloc);
1713                 icbp->icb_maxalloc = 16;
1714         }
1715         icbp->icb_execthrottle = DEFAULT_EXEC_THROTTLE(isp);
1716         if (icbp->icb_execthrottle < 1) {
1717                 isp_prt(isp, ISP_LOGERR, "bad execution throttle of %d- using %d", DEFAULT_EXEC_THROTTLE(isp), ICB_DFLT_THROTTLE);
1718                 icbp->icb_execthrottle = ICB_DFLT_THROTTLE;
1719         }
1720         icbp->icb_retry_delay = fcp->isp_retry_delay;
1721         icbp->icb_retry_count = fcp->isp_retry_count;
1722         icbp->icb_hardaddr = fcp->isp_loopid;
1723         ownloopid = (isp->isp_confopts & ISP_CFG_OWNLOOPID) != 0;
1724         if (icbp->icb_hardaddr >= LOCAL_LOOP_LIM) {
1725                 icbp->icb_hardaddr = 0;
1726                 ownloopid = 0;
1727         }
1728
1729         /*
1730          * Our life seems so much better with 2200s and later with
1731          * the latest f/w if we set Hard Address.
1732          */
1733         if (ownloopid || ISP_FW_NEWER_THAN(isp, 2, 2, 5)) {
1734                 icbp->icb_fwoptions |= ICBOPT_HARD_ADDRESS;
1735         }
1736
1737         /*
1738          * Right now we just set extended options to prefer point-to-point
1739          * over loop based upon some soft config options.
1740          *
1741          * NB: for the 2300, ICBOPT_EXTENDED is required.
1742          */
1743         if (IS_2100(isp)) {
1744                 /*
1745                  * We can't have Fast Posting any more- we now
1746                  * have 32 bit handles.
1747                  */
1748                 icbp->icb_fwoptions &= ~ICBOPT_FAST_POST;
1749         } else if (IS_2200(isp) || IS_23XX(isp)) {
1750                 icbp->icb_fwoptions |= ICBOPT_EXTENDED;
1751
1752                 icbp->icb_xfwoptions = fcp->isp_xfwoptions;
1753
1754                 if (ISP_CAP_FCTAPE(isp)) {
1755                         if (isp->isp_confopts & ISP_CFG_NOFCTAPE)
1756                                 icbp->icb_xfwoptions &= ~ICBXOPT_FCTAPE;
1757
1758                         if (isp->isp_confopts & ISP_CFG_FCTAPE)
1759                                 icbp->icb_xfwoptions |= ICBXOPT_FCTAPE;
1760
1761                         if (icbp->icb_xfwoptions & ICBXOPT_FCTAPE) {
1762                                 icbp->icb_fwoptions &= ~ICBOPT_FULL_LOGIN;      /* per documents */
1763                                 icbp->icb_xfwoptions |= ICBXOPT_FCTAPE_CCQ|ICBXOPT_FCTAPE_CONFIRM;
1764                                 FCPARAM(isp, 0)->fctape_enabled = 1;
1765                         } else {
1766                                 FCPARAM(isp, 0)->fctape_enabled = 0;
1767                         }
1768                 } else {
1769                         icbp->icb_xfwoptions &= ~ICBXOPT_FCTAPE;
1770                         FCPARAM(isp, 0)->fctape_enabled = 0;
1771                 }
1772
1773                 /*
1774                  * Prefer or force Point-To-Point instead Loop?
1775                  */
1776                 switch (isp->isp_confopts & ISP_CFG_PORT_PREF) {
1777                 case ISP_CFG_LPORT_ONLY:
1778                         icbp->icb_xfwoptions &= ~ICBXOPT_TOPO_MASK;
1779                         icbp->icb_xfwoptions |= ICBXOPT_LOOP_ONLY;
1780                         break;
1781                 case ISP_CFG_NPORT_ONLY:
1782                         icbp->icb_xfwoptions &= ~ICBXOPT_TOPO_MASK;
1783                         icbp->icb_xfwoptions |= ICBXOPT_PTP_ONLY;
1784                         break;
1785                 case ISP_CFG_LPORT:
1786                         icbp->icb_xfwoptions &= ~ICBXOPT_TOPO_MASK;
1787                         icbp->icb_xfwoptions |= ICBXOPT_LOOP_2_PTP;
1788                         break;
1789                 case ISP_CFG_NPORT:
1790                         icbp->icb_xfwoptions &= ~ICBXOPT_TOPO_MASK;
1791                         icbp->icb_xfwoptions |= ICBXOPT_PTP_2_LOOP;
1792                         break;
1793                 default:
1794                         /* Let NVRAM settings define it if they are sane */
1795                         switch (icbp->icb_xfwoptions & ICBXOPT_TOPO_MASK) {
1796                         case ICBXOPT_PTP_2_LOOP:
1797                         case ICBXOPT_PTP_ONLY:
1798                         case ICBXOPT_LOOP_ONLY:
1799                         case ICBXOPT_LOOP_2_PTP:
1800                                 break;
1801                         default:
1802                                 icbp->icb_xfwoptions &= ~ICBXOPT_TOPO_MASK;
1803                                 icbp->icb_xfwoptions |= ICBXOPT_LOOP_2_PTP;
1804                         }
1805                         break;
1806                 }
1807                 if (IS_2200(isp)) {
1808                         /*
1809                          * We can't have Fast Posting any more- we now
1810                          * have 32 bit handles.
1811                          *
1812                          * RIO seemed to have to much breakage.
1813                          *
1814                          * Just opt for safety.
1815                          */
1816                         icbp->icb_xfwoptions &= ~ICBXOPT_RIO_16BIT;
1817                         icbp->icb_fwoptions &= ~ICBOPT_FAST_POST;
1818                 } else {
1819                         /*
1820                          * QLogic recommends that FAST Posting be turned
1821                          * off for 23XX cards and instead allow the HBA
1822                          * to write response queue entries and interrupt
1823                          * after a delay (ZIO).
1824                          */
1825                         icbp->icb_fwoptions &= ~ICBOPT_FAST_POST;
1826                         if ((fcp->isp_xfwoptions & ICBXOPT_TIMER_MASK) == ICBXOPT_ZIO) {
1827                                 icbp->icb_xfwoptions |= ICBXOPT_ZIO;
1828                                 icbp->icb_idelaytimer = 10;
1829                         }
1830                         icbp->icb_zfwoptions = fcp->isp_zfwoptions;
1831                         if (isp->isp_confopts & ISP_CFG_1GB) {
1832                                 icbp->icb_zfwoptions &= ~ICBZOPT_RATE_MASK;
1833                                 icbp->icb_zfwoptions |= ICBZOPT_RATE_1GB;
1834                         } else if (isp->isp_confopts & ISP_CFG_2GB) {
1835                                 icbp->icb_zfwoptions &= ~ICBZOPT_RATE_MASK;
1836                                 icbp->icb_zfwoptions |= ICBZOPT_RATE_2GB;
1837                         } else {
1838                                 switch (icbp->icb_zfwoptions & ICBZOPT_RATE_MASK) {
1839                                 case ICBZOPT_RATE_1GB:
1840                                 case ICBZOPT_RATE_2GB:
1841                                 case ICBZOPT_RATE_AUTO:
1842                                         break;
1843                                 default:
1844                                         icbp->icb_zfwoptions &= ~ICBZOPT_RATE_MASK;
1845                                         icbp->icb_zfwoptions |= ICBZOPT_RATE_AUTO;
1846                                         break;
1847                                 }
1848                         }
1849                 }
1850         }
1851
1852
1853         /*
1854          * For 22XX > 2.1.26 && 23XX, set some options.
1855          */
1856         if (ISP_FW_NEWER_THAN(isp, 2, 26, 0)) {
1857                 MBSINIT(&mbs, MBOX_SET_FIRMWARE_OPTIONS, MBLOGALL, 0);
1858                 mbs.param[1] = IFCOPT1_DISF7SWTCH|IFCOPT1_LIPASYNC|IFCOPT1_LIPF8;
1859                 mbs.param[2] = 0;
1860                 mbs.param[3] = 0;
1861                 if (ISP_FW_NEWER_THAN(isp, 3, 16, 0)) {
1862                         mbs.param[1] |= IFCOPT1_EQFQASYNC|IFCOPT1_CTIO_RETRY;
1863                         if (fcp->role & ISP_ROLE_TARGET) {
1864                                 if (ISP_FW_NEWER_THAN(isp, 3, 25, 0)) {
1865                                         mbs.param[1] |= IFCOPT1_ENAPURE;
1866                                 }
1867                                 mbs.param[3] = IFCOPT3_NOPRLI;
1868                         }
1869                 }
1870                 isp_mboxcmd(isp, &mbs);
1871                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1872                         return;
1873                 }
1874         }
1875         icbp->icb_logintime = ICB_LOGIN_TOV;
1876
1877 #ifdef  ISP_TARGET_MODE
1878         if (icbp->icb_fwoptions & ICBOPT_TGT_ENABLE) {
1879                 icbp->icb_lunenables = 0xffff;
1880                 icbp->icb_ccnt = 0xff;
1881                 icbp->icb_icnt = 0xff;
1882                 icbp->icb_lunetimeout = ICB_LUN_ENABLE_TOV;
1883         }
1884 #endif
1885         if (fcp->isp_wwnn && fcp->isp_wwpn) {
1886                 icbp->icb_fwoptions |= ICBOPT_BOTH_WWNS;
1887                 MAKE_NODE_NAME_FROM_WWN(icbp->icb_nodename, fcp->isp_wwnn);
1888                 MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, fcp->isp_wwpn);
1889                 isp_prt(isp, ISP_LOGDEBUG1,
1890                     "Setting ICB Node 0x%08x%08x Port 0x%08x%08x",
1891                     ((uint32_t) (fcp->isp_wwnn >> 32)),
1892                     ((uint32_t) (fcp->isp_wwnn)),
1893                     ((uint32_t) (fcp->isp_wwpn >> 32)),
1894                     ((uint32_t) (fcp->isp_wwpn)));
1895         } else if (fcp->isp_wwpn) {
1896                 icbp->icb_fwoptions &= ~ICBOPT_BOTH_WWNS;
1897                 MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, fcp->isp_wwpn);
1898                 isp_prt(isp, ISP_LOGDEBUG1,
1899                     "Setting ICB Port 0x%08x%08x",
1900                     ((uint32_t) (fcp->isp_wwpn >> 32)),
1901                     ((uint32_t) (fcp->isp_wwpn)));
1902         } else {
1903                 isp_prt(isp, ISP_LOGERR, "No valid WWNs to use");
1904                 return;
1905         }
1906         icbp->icb_rqstqlen = RQUEST_QUEUE_LEN(isp);
1907         if (icbp->icb_rqstqlen < 1) {
1908                 isp_prt(isp, ISP_LOGERR, "bad request queue length");
1909         }
1910         icbp->icb_rsltqlen = RESULT_QUEUE_LEN(isp);
1911         if (icbp->icb_rsltqlen < 1) {
1912                 isp_prt(isp, ISP_LOGERR, "bad result queue length");
1913         }
1914         icbp->icb_rqstaddr[RQRSP_ADDR0015] = DMA_WD0(isp->isp_rquest_dma);
1915         icbp->icb_rqstaddr[RQRSP_ADDR1631] = DMA_WD1(isp->isp_rquest_dma);
1916         icbp->icb_rqstaddr[RQRSP_ADDR3247] = DMA_WD2(isp->isp_rquest_dma);
1917         icbp->icb_rqstaddr[RQRSP_ADDR4863] = DMA_WD3(isp->isp_rquest_dma);
1918         icbp->icb_respaddr[RQRSP_ADDR0015] = DMA_WD0(isp->isp_result_dma);
1919         icbp->icb_respaddr[RQRSP_ADDR1631] = DMA_WD1(isp->isp_result_dma);
1920         icbp->icb_respaddr[RQRSP_ADDR3247] = DMA_WD2(isp->isp_result_dma);
1921         icbp->icb_respaddr[RQRSP_ADDR4863] = DMA_WD3(isp->isp_result_dma);
1922
1923         if (FC_SCRATCH_ACQUIRE(isp, 0)) {
1924                 isp_prt(isp, ISP_LOGERR, sacq);
1925                 return;
1926         }
1927         isp_prt(isp, ISP_LOGDEBUG0, "isp_fibre_init: fwopt 0x%x xfwopt 0x%x zfwopt 0x%x",
1928             icbp->icb_fwoptions, icbp->icb_xfwoptions, icbp->icb_zfwoptions);
1929
1930         isp_put_icb(isp, icbp, (isp_icb_t *)fcp->isp_scratch);
1931         if (isp->isp_dblev & ISP_LOGDEBUG1) {
1932                 isp_print_bytes(isp, "isp_fibre_init",
1933                     sizeof(*icbp), fcp->isp_scratch);
1934         }
1935
1936         /*
1937          * Init the firmware
1938          */
1939         MBSINIT(&mbs, MBOX_INIT_FIRMWARE, MBLOGALL, 30000000);
1940         mbs.param[1] = 0;
1941         mbs.param[2] = DMA_WD1(fcp->isp_scdma);
1942         mbs.param[3] = DMA_WD0(fcp->isp_scdma);
1943         mbs.param[6] = DMA_WD3(fcp->isp_scdma);
1944         mbs.param[7] = DMA_WD2(fcp->isp_scdma);
1945         isp_prt(isp, ISP_LOGDEBUG0, "INIT F/W from %p (%08x%08x)",
1946             fcp->isp_scratch, (uint32_t) ((uint64_t)fcp->isp_scdma >> 32),
1947             (uint32_t) fcp->isp_scdma);
1948         MEMORYBARRIER(isp, SYNC_SFORDEV, 0, sizeof (*icbp), 0);
1949         isp_mboxcmd(isp, &mbs);
1950         FC_SCRATCH_RELEASE(isp, 0);
1951         if (mbs.param[0] != MBOX_COMMAND_COMPLETE)
1952                 return;
1953         isp->isp_reqidx = 0;
1954         isp->isp_reqodx = 0;
1955         isp->isp_residx = 0;
1956         isp->isp_resodx = 0;
1957
1958         /*
1959          * Whatever happens, we're now committed to being here.
1960          */
1961         isp->isp_state = ISP_RUNSTATE;
1962 }
1963
1964 static void
1965 isp_fibre_init_2400(ispsoftc_t *isp)
1966 {
1967         fcparam *fcp;
1968         isp_icb_2400_t local, *icbp = &local;
1969         mbreg_t mbs;
1970         int chan;
1971         int ownloopid = 0;
1972
1973         /*
1974          * Check to see whether all channels have *some* kind of role
1975          */
1976         for (chan = 0; chan < isp->isp_nchan; chan++) {
1977                 fcp = FCPARAM(isp, chan);
1978                 if (fcp->role != ISP_ROLE_NONE) {
1979                         break;
1980                 }
1981         }
1982         if (chan == isp->isp_nchan) {
1983                 isp_prt(isp, ISP_LOG_WARN1, "all %d channels with role 'none'", chan);
1984                 return;
1985         }
1986
1987         isp->isp_state = ISP_INITSTATE;
1988
1989         /*
1990          * Start with channel 0.
1991          */
1992         fcp = FCPARAM(isp, 0);
1993
1994         /*
1995          * Turn on LIP F8 async event (1)
1996          */
1997         MBSINIT(&mbs, MBOX_SET_FIRMWARE_OPTIONS, MBLOGALL, 0);
1998         mbs.param[1] = 1;
1999         isp_mboxcmd(isp, &mbs);
2000         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2001                 return;
2002         }
2003
2004         ISP_MEMZERO(icbp, sizeof (*icbp));
2005         icbp->icb_fwoptions1 = fcp->isp_fwoptions;
2006         icbp->icb_fwoptions2 = fcp->isp_xfwoptions;
2007         icbp->icb_fwoptions3 = fcp->isp_zfwoptions;
2008         if (isp->isp_nchan > 1 && ISP_CAP_VP0(isp)) {
2009                 icbp->icb_fwoptions1 &= ~ICB2400_OPT1_INI_DISABLE;
2010                 icbp->icb_fwoptions1 |= ICB2400_OPT1_TGT_ENABLE;
2011         } else {
2012                 if (fcp->role & ISP_ROLE_TARGET)
2013                         icbp->icb_fwoptions1 |= ICB2400_OPT1_TGT_ENABLE;
2014                 else
2015                         icbp->icb_fwoptions1 &= ~ICB2400_OPT1_TGT_ENABLE;
2016                 if (fcp->role & ISP_ROLE_INITIATOR)
2017                         icbp->icb_fwoptions1 &= ~ICB2400_OPT1_INI_DISABLE;
2018                 else
2019                         icbp->icb_fwoptions1 |= ICB2400_OPT1_INI_DISABLE;
2020         }
2021
2022         icbp->icb_version = ICB_VERSION1;
2023         icbp->icb_maxfrmlen = DEFAULT_FRAMESIZE(isp);
2024         if (icbp->icb_maxfrmlen < ICB_MIN_FRMLEN || icbp->icb_maxfrmlen > ICB_MAX_FRMLEN) {
2025                 isp_prt(isp, ISP_LOGERR, "bad frame length (%d) from NVRAM- using %d", DEFAULT_FRAMESIZE(isp), ICB_DFLT_FRMLEN);
2026                 icbp->icb_maxfrmlen = ICB_DFLT_FRMLEN;
2027         }
2028
2029         icbp->icb_execthrottle = DEFAULT_EXEC_THROTTLE(isp);
2030         if (icbp->icb_execthrottle < 1 && !IS_26XX(isp)) {
2031                 isp_prt(isp, ISP_LOGERR, "bad execution throttle of %d- using %d", DEFAULT_EXEC_THROTTLE(isp), ICB_DFLT_THROTTLE);
2032                 icbp->icb_execthrottle = ICB_DFLT_THROTTLE;
2033         }
2034
2035         /*
2036          * Set target exchange count. Take half if we are supporting both roles.
2037          */
2038         if (icbp->icb_fwoptions1 & ICB2400_OPT1_TGT_ENABLE) {
2039                 icbp->icb_xchgcnt = isp->isp_maxcmds;
2040                 if ((icbp->icb_fwoptions1 & ICB2400_OPT1_INI_DISABLE) == 0)
2041                         icbp->icb_xchgcnt >>= 1;
2042         }
2043
2044
2045         ownloopid = (isp->isp_confopts & ISP_CFG_OWNLOOPID) != 0;
2046         icbp->icb_hardaddr = fcp->isp_loopid;
2047         if (icbp->icb_hardaddr >= LOCAL_LOOP_LIM) {
2048                 icbp->icb_hardaddr = 0;
2049                 ownloopid = 0;
2050         }
2051
2052         if (ownloopid)
2053                 icbp->icb_fwoptions1 |= ICB2400_OPT1_HARD_ADDRESS;
2054
2055         if (isp->isp_confopts & ISP_CFG_NOFCTAPE) {
2056                 icbp->icb_fwoptions2 &= ~ICB2400_OPT2_FCTAPE;
2057         }
2058         if (isp->isp_confopts & ISP_CFG_FCTAPE) {
2059                 icbp->icb_fwoptions2 |= ICB2400_OPT2_FCTAPE;
2060         }
2061
2062         for (chan = 0; chan < isp->isp_nchan; chan++) {
2063                 if (icbp->icb_fwoptions2 & ICB2400_OPT2_FCTAPE)
2064                         FCPARAM(isp, chan)->fctape_enabled = 1;
2065                 else
2066                         FCPARAM(isp, chan)->fctape_enabled = 0;
2067         }
2068
2069         switch (isp->isp_confopts & ISP_CFG_PORT_PREF) {
2070         case ISP_CFG_LPORT_ONLY:
2071                 icbp->icb_fwoptions2 &= ~ICB2400_OPT2_TOPO_MASK;
2072                 icbp->icb_fwoptions2 |= ICB2400_OPT2_LOOP_ONLY;
2073                 break;
2074         case ISP_CFG_NPORT_ONLY:
2075                 icbp->icb_fwoptions2 &= ~ICB2400_OPT2_TOPO_MASK;
2076                 icbp->icb_fwoptions2 |= ICB2400_OPT2_PTP_ONLY;
2077                 break;
2078         case ISP_CFG_NPORT:
2079                 /* ISP_CFG_PTP_2_LOOP not available in 24XX/25XX */
2080         case ISP_CFG_LPORT:
2081                 icbp->icb_fwoptions2 &= ~ICB2400_OPT2_TOPO_MASK;
2082                 icbp->icb_fwoptions2 |= ICB2400_OPT2_LOOP_2_PTP;
2083                 break;
2084         default:
2085                 /* Let NVRAM settings define it if they are sane */
2086                 switch (icbp->icb_fwoptions2 & ICB2400_OPT2_TOPO_MASK) {
2087                 case ICB2400_OPT2_LOOP_ONLY:
2088                 case ICB2400_OPT2_PTP_ONLY:
2089                 case ICB2400_OPT2_LOOP_2_PTP:
2090                         break;
2091                 default:
2092                         icbp->icb_fwoptions2 &= ~ICB2400_OPT2_TOPO_MASK;
2093                         icbp->icb_fwoptions2 |= ICB2400_OPT2_LOOP_2_PTP;
2094                 }
2095                 break;
2096         }
2097
2098         switch (icbp->icb_fwoptions2 & ICB2400_OPT2_TIMER_MASK) {
2099         case ICB2400_OPT2_ZIO:
2100         case ICB2400_OPT2_ZIO1:
2101                 icbp->icb_idelaytimer = 0;
2102                 break;
2103         case 0:
2104                 break;
2105         default:
2106                 isp_prt(isp, ISP_LOGWARN, "bad value %x in fwopt2 timer field", icbp->icb_fwoptions2 & ICB2400_OPT2_TIMER_MASK);
2107                 icbp->icb_fwoptions2 &= ~ICB2400_OPT2_TIMER_MASK;
2108                 break;
2109         }
2110
2111         if (IS_26XX(isp)) {
2112                 /* Use handshake to reduce global lock congestion. */
2113                 icbp->icb_fwoptions2 |= ICB2400_OPT2_ENA_IHR;
2114                 icbp->icb_fwoptions2 |= ICB2400_OPT2_ENA_IHA;
2115         }
2116
2117         if ((icbp->icb_fwoptions3 & ICB2400_OPT3_RSPSZ_MASK) == 0) {
2118                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RSPSZ_24;
2119         }
2120         if (isp->isp_confopts & ISP_CFG_1GB) {
2121                 icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2122                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_1GB;
2123         } else if (isp->isp_confopts & ISP_CFG_2GB) {
2124                 icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2125                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_2GB;
2126         } else if (isp->isp_confopts & ISP_CFG_4GB) {
2127                 icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2128                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_4GB;
2129         } else if (isp->isp_confopts & ISP_CFG_8GB) {
2130                 icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2131                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_8GB;
2132         } else if (isp->isp_confopts & ISP_CFG_16GB) {
2133                 icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2134                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_16GB;
2135         } else if (isp->isp_confopts & ISP_CFG_32GB) {
2136                 icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2137                 icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_32GB;
2138         } else {
2139                 switch (icbp->icb_fwoptions3 & ICB2400_OPT3_RATE_MASK) {
2140                 case ICB2400_OPT3_RATE_4GB:
2141                 case ICB2400_OPT3_RATE_8GB:
2142                 case ICB2400_OPT3_RATE_16GB:
2143                 case ICB2400_OPT3_RATE_32GB:
2144                 case ICB2400_OPT3_RATE_AUTO:
2145                         break;
2146                 case ICB2400_OPT3_RATE_2GB:
2147                         if (isp->isp_type <= ISP_HA_FC_2500)
2148                                 break;
2149                         /*FALLTHROUGH*/
2150                 case ICB2400_OPT3_RATE_1GB:
2151                         if (isp->isp_type <= ISP_HA_FC_2400)
2152                                 break;
2153                         /*FALLTHROUGH*/
2154                 default:
2155                         icbp->icb_fwoptions3 &= ~ICB2400_OPT3_RATE_MASK;
2156                         icbp->icb_fwoptions3 |= ICB2400_OPT3_RATE_AUTO;
2157                         break;
2158                 }
2159         }
2160         if (ownloopid == 0) {
2161                 icbp->icb_fwoptions3 |= ICB2400_OPT3_SOFTID;
2162         }
2163         icbp->icb_logintime = ICB_LOGIN_TOV;
2164
2165         if (fcp->isp_wwnn && fcp->isp_wwpn) {
2166                 icbp->icb_fwoptions1 |= ICB2400_OPT1_BOTH_WWNS;
2167                 MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, fcp->isp_wwpn);
2168                 MAKE_NODE_NAME_FROM_WWN(icbp->icb_nodename, fcp->isp_wwnn);
2169                 isp_prt(isp, ISP_LOGDEBUG1, "Setting ICB Node 0x%08x%08x Port 0x%08x%08x", ((uint32_t) (fcp->isp_wwnn >> 32)), ((uint32_t) (fcp->isp_wwnn)),
2170                     ((uint32_t) (fcp->isp_wwpn >> 32)), ((uint32_t) (fcp->isp_wwpn)));
2171         } else if (fcp->isp_wwpn) {
2172                 icbp->icb_fwoptions1 &= ~ICB2400_OPT1_BOTH_WWNS;
2173                 MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, fcp->isp_wwpn);
2174                 isp_prt(isp, ISP_LOGDEBUG1, "Setting ICB Node to be same as Port 0x%08x%08x", ((uint32_t) (fcp->isp_wwpn >> 32)), ((uint32_t) (fcp->isp_wwpn)));
2175         } else {
2176                 isp_prt(isp, ISP_LOGERR, "No valid WWNs to use");
2177                 return;
2178         }
2179         icbp->icb_retry_count = fcp->isp_retry_count;
2180
2181         icbp->icb_rqstqlen = RQUEST_QUEUE_LEN(isp);
2182         if (icbp->icb_rqstqlen < 8) {
2183                 isp_prt(isp, ISP_LOGERR, "bad request queue length %d", icbp->icb_rqstqlen);
2184                 return;
2185         }
2186         icbp->icb_rsltqlen = RESULT_QUEUE_LEN(isp);
2187         if (icbp->icb_rsltqlen < 8) {
2188                 isp_prt(isp, ISP_LOGERR, "bad result queue length %d",
2189                     icbp->icb_rsltqlen);
2190                 return;
2191         }
2192         icbp->icb_rqstaddr[RQRSP_ADDR0015] = DMA_WD0(isp->isp_rquest_dma);
2193         icbp->icb_rqstaddr[RQRSP_ADDR1631] = DMA_WD1(isp->isp_rquest_dma);
2194         icbp->icb_rqstaddr[RQRSP_ADDR3247] = DMA_WD2(isp->isp_rquest_dma);
2195         icbp->icb_rqstaddr[RQRSP_ADDR4863] = DMA_WD3(isp->isp_rquest_dma);
2196
2197         icbp->icb_respaddr[RQRSP_ADDR0015] = DMA_WD0(isp->isp_result_dma);
2198         icbp->icb_respaddr[RQRSP_ADDR1631] = DMA_WD1(isp->isp_result_dma);
2199         icbp->icb_respaddr[RQRSP_ADDR3247] = DMA_WD2(isp->isp_result_dma);
2200         icbp->icb_respaddr[RQRSP_ADDR4863] = DMA_WD3(isp->isp_result_dma);
2201
2202 #ifdef  ISP_TARGET_MODE
2203         /* unconditionally set up the ATIO queue if we support target mode */
2204         icbp->icb_atioqlen = RESULT_QUEUE_LEN(isp);
2205         if (icbp->icb_atioqlen < 8) {
2206                 isp_prt(isp, ISP_LOGERR, "bad ATIO queue length %d", icbp->icb_atioqlen);
2207                 return;
2208         }
2209         icbp->icb_atioqaddr[RQRSP_ADDR0015] = DMA_WD0(isp->isp_atioq_dma);
2210         icbp->icb_atioqaddr[RQRSP_ADDR1631] = DMA_WD1(isp->isp_atioq_dma);
2211         icbp->icb_atioqaddr[RQRSP_ADDR3247] = DMA_WD2(isp->isp_atioq_dma);
2212         icbp->icb_atioqaddr[RQRSP_ADDR4863] = DMA_WD3(isp->isp_atioq_dma);
2213         isp_prt(isp, ISP_LOGDEBUG0, "isp_fibre_init_2400: atioq %04x%04x%04x%04x", DMA_WD3(isp->isp_atioq_dma), DMA_WD2(isp->isp_atioq_dma),
2214             DMA_WD1(isp->isp_atioq_dma), DMA_WD0(isp->isp_atioq_dma));
2215 #endif
2216
2217         if (ISP_CAP_MSIX(isp) && isp->isp_nirq >= 2) {
2218                 icbp->icb_msixresp = 1;
2219                 if (IS_26XX(isp) && isp->isp_nirq >= 3)
2220                         icbp->icb_msixatio = 2;
2221         }
2222
2223         isp_prt(isp, ISP_LOGDEBUG0, "isp_fibre_init_2400: fwopt1 0x%x fwopt2 0x%x fwopt3 0x%x", icbp->icb_fwoptions1, icbp->icb_fwoptions2, icbp->icb_fwoptions3);
2224
2225         isp_prt(isp, ISP_LOGDEBUG0, "isp_fibre_init_2400: rqst %04x%04x%04x%04x rsp %04x%04x%04x%04x", DMA_WD3(isp->isp_rquest_dma), DMA_WD2(isp->isp_rquest_dma),
2226             DMA_WD1(isp->isp_rquest_dma), DMA_WD0(isp->isp_rquest_dma), DMA_WD3(isp->isp_result_dma), DMA_WD2(isp->isp_result_dma),
2227             DMA_WD1(isp->isp_result_dma), DMA_WD0(isp->isp_result_dma));
2228
2229         if (FC_SCRATCH_ACQUIRE(isp, 0)) {
2230                 isp_prt(isp, ISP_LOGERR, sacq);
2231                 return;
2232         }
2233         ISP_MEMZERO(fcp->isp_scratch, ISP_FC_SCRLEN);
2234         isp_put_icb_2400(isp, icbp, fcp->isp_scratch);
2235         if (isp->isp_dblev & ISP_LOGDEBUG1) {
2236                 isp_print_bytes(isp, "isp_fibre_init_2400",
2237                     sizeof (*icbp), fcp->isp_scratch);
2238         }
2239
2240         /*
2241          * Now fill in information about any additional channels
2242          */
2243         if (isp->isp_nchan > 1) {
2244                 isp_icb_2400_vpinfo_t vpinfo, *vdst;
2245                 vp_port_info_t pi, *pdst;
2246                 size_t amt = 0;
2247                 uint8_t *off;
2248
2249                 vpinfo.vp_global_options = ICB2400_VPGOPT_GEN_RIDA;
2250                 if (ISP_CAP_VP0(isp)) {
2251                         vpinfo.vp_global_options |= ICB2400_VPGOPT_VP0_DECOUPLE;
2252                         vpinfo.vp_count = isp->isp_nchan;
2253                         chan = 0;
2254                 } else {
2255                         vpinfo.vp_count = isp->isp_nchan - 1;
2256                         chan = 1;
2257                 }
2258                 off = fcp->isp_scratch;
2259                 off += ICB2400_VPINFO_OFF;
2260                 vdst = (isp_icb_2400_vpinfo_t *) off;
2261                 isp_put_icb_2400_vpinfo(isp, &vpinfo, vdst);
2262                 amt = ICB2400_VPINFO_OFF + sizeof (isp_icb_2400_vpinfo_t);
2263                 for (; chan < isp->isp_nchan; chan++) {
2264                         fcparam *fcp2;
2265
2266                         ISP_MEMZERO(&pi, sizeof (pi));
2267                         fcp2 = FCPARAM(isp, chan);
2268                         if (fcp2->role != ISP_ROLE_NONE) {
2269                                 pi.vp_port_options = ICB2400_VPOPT_ENABLED |
2270                                     ICB2400_VPOPT_ENA_SNSLOGIN;
2271                                 if (fcp2->role & ISP_ROLE_INITIATOR)
2272                                         pi.vp_port_options |= ICB2400_VPOPT_INI_ENABLE;
2273                                 if ((fcp2->role & ISP_ROLE_TARGET) == 0)
2274                                         pi.vp_port_options |= ICB2400_VPOPT_TGT_DISABLE;
2275                                 if (fcp2->isp_loopid < LOCAL_LOOP_LIM) {
2276                                         pi.vp_port_loopid = fcp2->isp_loopid;
2277                                         if (isp->isp_confopts & ISP_CFG_OWNLOOPID)
2278                                                 pi.vp_port_options |= ICB2400_VPOPT_HARD_ADDRESS;
2279                                 }
2280
2281                         }
2282                         MAKE_NODE_NAME_FROM_WWN(pi.vp_port_portname, fcp2->isp_wwpn);
2283                         MAKE_NODE_NAME_FROM_WWN(pi.vp_port_nodename, fcp2->isp_wwnn);
2284                         off = fcp->isp_scratch;
2285                         if (ISP_CAP_VP0(isp))
2286                                 off += ICB2400_VPINFO_PORT_OFF(chan);
2287                         else
2288                                 off += ICB2400_VPINFO_PORT_OFF(chan - 1);
2289                         pdst = (vp_port_info_t *) off;
2290                         isp_put_vp_port_info(isp, &pi, pdst);
2291                         amt += ICB2400_VPOPT_WRITE_SIZE;
2292                 }
2293                 if (isp->isp_dblev & ISP_LOGDEBUG1) {
2294                         isp_print_bytes(isp, "isp_fibre_init_2400",
2295                             amt - ICB2400_VPINFO_OFF,
2296                             (char *)fcp->isp_scratch + ICB2400_VPINFO_OFF);
2297                 }
2298         }
2299
2300         /*
2301          * Init the firmware
2302          */
2303         MBSINIT(&mbs, 0, MBLOGALL, 30000000);
2304         if (isp->isp_nchan > 1) {
2305                 mbs.param[0] = MBOX_INIT_FIRMWARE_MULTI_ID;
2306         } else {
2307                 mbs.param[0] = MBOX_INIT_FIRMWARE;
2308         }
2309         mbs.param[1] = 0;
2310         mbs.param[2] = DMA_WD1(fcp->isp_scdma);
2311         mbs.param[3] = DMA_WD0(fcp->isp_scdma);
2312         mbs.param[6] = DMA_WD3(fcp->isp_scdma);
2313         mbs.param[7] = DMA_WD2(fcp->isp_scdma);
2314         isp_prt(isp, ISP_LOGDEBUG0, "INIT F/W from %04x%04x%04x%04x", DMA_WD3(fcp->isp_scdma), DMA_WD2(fcp->isp_scdma), DMA_WD1(fcp->isp_scdma), DMA_WD0(fcp->isp_scdma));
2315         MEMORYBARRIER(isp, SYNC_SFORDEV, 0, sizeof (*icbp), 0);
2316         isp_mboxcmd(isp, &mbs);
2317         FC_SCRATCH_RELEASE(isp, 0);
2318
2319         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2320                 return;
2321         }
2322         isp->isp_reqidx = 0;
2323         isp->isp_reqodx = 0;
2324         isp->isp_residx = 0;
2325         isp->isp_resodx = 0;
2326         isp->isp_atioodx = 0;
2327
2328         /*
2329          * Whatever happens, we're now committed to being here.
2330          */
2331         isp->isp_state = ISP_RUNSTATE;
2332 }
2333
2334 static int
2335 isp_fc_enable_vp(ispsoftc_t *isp, int chan)
2336 {
2337         fcparam *fcp = FCPARAM(isp, chan);
2338         vp_modify_t vp;
2339         void *reqp;
2340         uint8_t resp[QENTRY_LEN];
2341
2342         /* Build a VP MODIFY command in memory */
2343         ISP_MEMZERO(&vp, sizeof(vp));
2344         vp.vp_mod_hdr.rqs_entry_type = RQSTYPE_VP_MODIFY;
2345         vp.vp_mod_hdr.rqs_entry_count = 1;
2346         vp.vp_mod_cnt = 1;
2347         vp.vp_mod_idx0 = chan;
2348         vp.vp_mod_cmd = VP_MODIFY_ENA;
2349         vp.vp_mod_ports[0].options = ICB2400_VPOPT_ENABLED |
2350             ICB2400_VPOPT_ENA_SNSLOGIN;
2351         if (fcp->role & ISP_ROLE_INITIATOR)
2352                 vp.vp_mod_ports[0].options |= ICB2400_VPOPT_INI_ENABLE;
2353         if ((fcp->role & ISP_ROLE_TARGET) == 0)
2354                 vp.vp_mod_ports[0].options |= ICB2400_VPOPT_TGT_DISABLE;
2355         if (fcp->isp_loopid < LOCAL_LOOP_LIM) {
2356                 vp.vp_mod_ports[0].loopid = fcp->isp_loopid;
2357                 if (isp->isp_confopts & ISP_CFG_OWNLOOPID)
2358                         vp.vp_mod_ports[0].options |= ICB2400_VPOPT_HARD_ADDRESS;
2359         }
2360         MAKE_NODE_NAME_FROM_WWN(vp.vp_mod_ports[0].wwpn, fcp->isp_wwpn);
2361         MAKE_NODE_NAME_FROM_WWN(vp.vp_mod_ports[0].wwnn, fcp->isp_wwnn);
2362
2363         /* Prepare space for response in memory */
2364         memset(resp, 0xff, sizeof(resp));
2365         vp.vp_mod_hdl = isp_allocate_handle(isp, resp, ISP_HANDLE_CTRL);
2366         if (vp.vp_mod_hdl == 0) {
2367                 isp_prt(isp, ISP_LOGERR,
2368                     "%s: VP_MODIFY of Chan %d out of handles", __func__, chan);
2369                 return (EIO);
2370         }
2371
2372         /* Send request and wait for response. */
2373         reqp = isp_getrqentry(isp);
2374         if (reqp == NULL) {
2375                 isp_prt(isp, ISP_LOGERR,
2376                     "%s: VP_MODIFY of Chan %d out of rqent", __func__, chan);
2377                 isp_destroy_handle(isp, vp.vp_mod_hdl);
2378                 return (EIO);
2379         }
2380         isp_put_vp_modify(isp, &vp, (vp_modify_t *)reqp);
2381         if (isp->isp_dblev & ISP_LOGDEBUG1)
2382                 isp_print_bytes(isp, "IOCB VP_MODIFY", QENTRY_LEN, reqp);
2383         ISP_SYNC_REQUEST(isp);
2384         if (msleep(resp, &isp->isp_lock, 0, "VP_MODIFY", 5*hz) == EWOULDBLOCK) {
2385                 isp_prt(isp, ISP_LOGERR,
2386                     "%s: VP_MODIFY of Chan %d timed out", __func__, chan);
2387                 isp_destroy_handle(isp, vp.vp_mod_hdl);
2388                 return (EIO);
2389         }
2390         if (isp->isp_dblev & ISP_LOGDEBUG1)
2391                 isp_print_bytes(isp, "IOCB VP_MODIFY response", QENTRY_LEN, resp);
2392         isp_get_vp_modify(isp, (vp_modify_t *)resp, &vp);
2393
2394         if (vp.vp_mod_hdr.rqs_flags != 0 || vp.vp_mod_status != VP_STS_OK) {
2395                 isp_prt(isp, ISP_LOGERR,
2396                     "%s: VP_MODIFY of Chan %d failed with flags %x status %d",
2397                     __func__, chan, vp.vp_mod_hdr.rqs_flags, vp.vp_mod_status);
2398                 return (EIO);
2399         }
2400         return (0);
2401 }
2402
2403 static int
2404 isp_fc_disable_vp(ispsoftc_t *isp, int chan)
2405 {
2406         vp_ctrl_info_t vp;
2407         void *reqp;
2408         uint8_t resp[QENTRY_LEN];
2409
2410         /* Build a VP CTRL command in memory */
2411         ISP_MEMZERO(&vp, sizeof(vp));
2412         vp.vp_ctrl_hdr.rqs_entry_type = RQSTYPE_VP_CTRL;
2413         vp.vp_ctrl_hdr.rqs_entry_count = 1;
2414         if (ISP_CAP_VP0(isp)) {
2415                 vp.vp_ctrl_status = 1;
2416         } else {
2417                 vp.vp_ctrl_status = 0;
2418                 chan--; /* VP0 can not be controlled in this case. */
2419         }
2420         vp.vp_ctrl_command = VP_CTRL_CMD_DISABLE_VP_LOGO_ALL;
2421         vp.vp_ctrl_vp_count = 1;
2422         vp.vp_ctrl_idmap[chan / 16] |= (1 << chan % 16);
2423
2424         /* Prepare space for response in memory */
2425         memset(resp, 0xff, sizeof(resp));
2426         vp.vp_ctrl_handle = isp_allocate_handle(isp, resp, ISP_HANDLE_CTRL);
2427         if (vp.vp_ctrl_handle == 0) {
2428                 isp_prt(isp, ISP_LOGERR,
2429                     "%s: VP_CTRL of Chan %d out of handles", __func__, chan);
2430                 return (EIO);
2431         }
2432
2433         /* Send request and wait for response. */
2434         reqp = isp_getrqentry(isp);
2435         if (reqp == NULL) {
2436                 isp_prt(isp, ISP_LOGERR,
2437                     "%s: VP_CTRL of Chan %d out of rqent", __func__, chan);
2438                 isp_destroy_handle(isp, vp.vp_ctrl_handle);
2439                 return (EIO);
2440         }
2441         isp_put_vp_ctrl_info(isp, &vp, (vp_ctrl_info_t *)reqp);
2442         if (isp->isp_dblev & ISP_LOGDEBUG1)
2443                 isp_print_bytes(isp, "IOCB VP_CTRL", QENTRY_LEN, reqp);
2444         ISP_SYNC_REQUEST(isp);
2445         if (msleep(resp, &isp->isp_lock, 0, "VP_CTRL", 5*hz) == EWOULDBLOCK) {
2446                 isp_prt(isp, ISP_LOGERR,
2447                     "%s: VP_CTRL of Chan %d timed out", __func__, chan);
2448                 isp_destroy_handle(isp, vp.vp_ctrl_handle);
2449                 return (EIO);
2450         }
2451         if (isp->isp_dblev & ISP_LOGDEBUG1)
2452                 isp_print_bytes(isp, "IOCB VP_CTRL response", QENTRY_LEN, resp);
2453         isp_get_vp_ctrl_info(isp, (vp_ctrl_info_t *)resp, &vp);
2454
2455         if (vp.vp_ctrl_hdr.rqs_flags != 0 || vp.vp_ctrl_status != 0) {
2456                 isp_prt(isp, ISP_LOGERR,
2457                     "%s: VP_CTRL of Chan %d failed with flags %x status %d %d",
2458                     __func__, chan, vp.vp_ctrl_hdr.rqs_flags,
2459                     vp.vp_ctrl_status, vp.vp_ctrl_index_fail);
2460                 return (EIO);
2461         }
2462         return (0);
2463 }
2464
2465 static int
2466 isp_fc_change_role(ispsoftc_t *isp, int chan, int new_role)
2467 {
2468         fcparam *fcp = FCPARAM(isp, chan);
2469         int i, was, res = 0;
2470
2471         if (chan >= isp->isp_nchan) {
2472                 isp_prt(isp, ISP_LOGWARN, "%s: bad channel %d", __func__, chan);
2473                 return (ENXIO);
2474         }
2475         if (fcp->role == new_role)
2476                 return (0);
2477         for (was = 0, i = 0; i < isp->isp_nchan; i++) {
2478                 if (FCPARAM(isp, i)->role != ISP_ROLE_NONE)
2479                         was++;
2480         }
2481         if (was == 0 || (was == 1 && fcp->role != ISP_ROLE_NONE)) {
2482                 fcp->role = new_role;
2483                 return (isp_reinit(isp, 0));
2484         }
2485         if (fcp->role != ISP_ROLE_NONE) {
2486                 res = isp_fc_disable_vp(isp, chan);
2487                 isp_clear_portdb(isp, chan);
2488         }
2489         fcp->role = new_role;
2490         if (fcp->role != ISP_ROLE_NONE)
2491                 res = isp_fc_enable_vp(isp, chan);
2492         return (res);
2493 }
2494
2495 static void
2496 isp_clear_portdb(ispsoftc_t *isp, int chan)
2497 {
2498         fcparam *fcp = FCPARAM(isp, chan);
2499         fcportdb_t *lp;
2500         int i;
2501
2502         for (i = 0; i < MAX_FC_TARG; i++) {
2503                 lp = &fcp->portdb[i];
2504                 switch (lp->state) {
2505                 case FC_PORTDB_STATE_DEAD:
2506                 case FC_PORTDB_STATE_CHANGED:
2507                 case FC_PORTDB_STATE_VALID:
2508                         lp->state = FC_PORTDB_STATE_NIL;
2509                         isp_async(isp, ISPASYNC_DEV_GONE, chan, lp);
2510                         break;
2511                 case FC_PORTDB_STATE_NIL:
2512                 case FC_PORTDB_STATE_NEW:
2513                         lp->state = FC_PORTDB_STATE_NIL;
2514                         break;
2515                 case FC_PORTDB_STATE_ZOMBIE:
2516                         break;
2517                 default:
2518                         panic("Don't know how to clear state %d\n", lp->state);
2519                 }
2520         }
2521 }
2522
2523 static void
2524 isp_mark_portdb(ispsoftc_t *isp, int chan)
2525 {
2526         fcparam *fcp = FCPARAM(isp, chan);
2527         fcportdb_t *lp;
2528         int i;
2529
2530         for (i = 0; i < MAX_FC_TARG; i++) {
2531                 lp = &fcp->portdb[i];
2532                 if (lp->state == FC_PORTDB_STATE_NIL)
2533                         continue;
2534                 if (lp->portid >= DOMAIN_CONTROLLER_BASE &&
2535                     lp->portid <= DOMAIN_CONTROLLER_END)
2536                         continue;
2537                 fcp->portdb[i].probational = 1;
2538         }
2539 }
2540
2541 /*
2542  * Perform an IOCB PLOGI or LOGO via EXECUTE IOCB A64 for 24XX cards
2543  * or via FABRIC LOGIN/FABRIC LOGOUT for other cards.
2544  */
2545 static int
2546 isp_plogx(ispsoftc_t *isp, int chan, uint16_t handle, uint32_t portid, int flags)
2547 {
2548         isp_plogx_t pl;
2549         void *reqp;
2550         uint8_t resp[QENTRY_LEN];
2551         uint32_t sst, parm1;
2552         int rval, lev;
2553         const char *msg;
2554         char buf[64];
2555
2556         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d PLOGX %s PortID 0x%06x nphdl 0x%x",
2557             chan, (flags & PLOGX_FLG_CMD_MASK) == PLOGX_FLG_CMD_PLOGI ?
2558             "Login":"Logout", portid, handle);
2559         if (!IS_24XX(isp)) {
2560                 int action = flags & PLOGX_FLG_CMD_MASK;
2561                 if (action == PLOGX_FLG_CMD_PLOGI) {
2562                         return (isp_port_login(isp, handle, portid));
2563                 } else if (action == PLOGX_FLG_CMD_LOGO) {
2564                         return (isp_port_logout(isp, handle, portid));
2565                 } else {
2566                         return (MBOX_INVALID_COMMAND);
2567                 }
2568         }
2569
2570         ISP_MEMZERO(&pl, sizeof(pl));
2571         pl.plogx_header.rqs_entry_count = 1;
2572         pl.plogx_header.rqs_entry_type = RQSTYPE_LOGIN;
2573         pl.plogx_nphdl = handle;
2574         pl.plogx_vphdl = chan;
2575         pl.plogx_portlo = portid;
2576         pl.plogx_rspsz_porthi = (portid >> 16) & 0xff;
2577         pl.plogx_flags = flags;
2578
2579         /* Prepare space for response in memory */
2580         memset(resp, 0xff, sizeof(resp));
2581         pl.plogx_handle = isp_allocate_handle(isp, resp, ISP_HANDLE_CTRL);
2582         if (pl.plogx_handle == 0) {
2583                 isp_prt(isp, ISP_LOGERR,
2584                     "%s: PLOGX of Chan %d out of handles", __func__, chan);
2585                 return (-1);
2586         }
2587
2588         /* Send request and wait for response. */
2589         reqp = isp_getrqentry(isp);
2590         if (reqp == NULL) {
2591                 isp_prt(isp, ISP_LOGERR,
2592                     "%s: PLOGX of Chan %d out of rqent", __func__, chan);
2593                 isp_destroy_handle(isp, pl.plogx_handle);
2594                 return (-1);
2595         }
2596         isp_put_plogx(isp, &pl, (isp_plogx_t *)reqp);
2597         if (isp->isp_dblev & ISP_LOGDEBUG1)
2598                 isp_print_bytes(isp, "IOCB LOGX", QENTRY_LEN, reqp);
2599         FCPARAM(isp, chan)->isp_login_hdl = handle;
2600         ISP_SYNC_REQUEST(isp);
2601         if (msleep(resp, &isp->isp_lock, 0, "PLOGX", 3 * ICB_LOGIN_TOV * hz)
2602             == EWOULDBLOCK) {
2603                 isp_prt(isp, ISP_LOGERR,
2604                     "%s: PLOGX of Chan %d timed out", __func__, chan);
2605                 isp_destroy_handle(isp, pl.plogx_handle);
2606                 return (-1);
2607         }
2608         FCPARAM(isp, chan)->isp_login_hdl = NIL_HANDLE;
2609         if (isp->isp_dblev & ISP_LOGDEBUG1)
2610                 isp_print_bytes(isp, "IOCB LOGX response", QENTRY_LEN, resp);
2611         isp_get_plogx(isp, (isp_plogx_t *)resp, &pl);
2612
2613         if (pl.plogx_status == PLOGX_STATUS_OK) {
2614                 return (0);
2615         } else if (pl.plogx_status != PLOGX_STATUS_IOCBERR) {
2616                 isp_prt(isp, ISP_LOGWARN,
2617                     "status 0x%x on port login IOCB channel %d",
2618                     pl.plogx_status, chan);
2619                 return (-1);
2620         }
2621
2622         sst = pl.plogx_ioparm[0].lo16 | (pl.plogx_ioparm[0].hi16 << 16);
2623         parm1 = pl.plogx_ioparm[1].lo16 | (pl.plogx_ioparm[1].hi16 << 16);
2624
2625         rval = -1;
2626         lev = ISP_LOGERR;
2627         msg = NULL;
2628
2629         switch (sst) {
2630         case PLOGX_IOCBERR_NOLINK:
2631                 msg = "no link";
2632                 break;
2633         case PLOGX_IOCBERR_NOIOCB:
2634                 msg = "no IOCB buffer";
2635                 break;
2636         case PLOGX_IOCBERR_NOXGHG:
2637                 msg = "no Exchange Control Block";
2638                 break;
2639         case PLOGX_IOCBERR_FAILED:
2640                 ISP_SNPRINTF(buf, sizeof (buf), "reason 0x%x (last LOGIN state 0x%x)", parm1 & 0xff, (parm1 >> 8) & 0xff);
2641                 msg = buf;
2642                 break;
2643         case PLOGX_IOCBERR_NOFABRIC:
2644                 msg = "no fabric";
2645                 break;
2646         case PLOGX_IOCBERR_NOTREADY:
2647                 msg = "firmware not ready";
2648                 break;
2649         case PLOGX_IOCBERR_NOLOGIN:
2650                 ISP_SNPRINTF(buf, sizeof (buf), "not logged in (last state 0x%x)", parm1);
2651                 msg = buf;
2652                 rval = MBOX_NOT_LOGGED_IN;
2653                 break;
2654         case PLOGX_IOCBERR_REJECT:
2655                 ISP_SNPRINTF(buf, sizeof (buf), "LS_RJT = 0x%x", parm1);
2656                 msg = buf;
2657                 break;
2658         case PLOGX_IOCBERR_NOPCB:
2659                 msg = "no PCB allocated";
2660                 break;
2661         case PLOGX_IOCBERR_EINVAL:
2662                 ISP_SNPRINTF(buf, sizeof (buf), "invalid parameter at offset 0x%x", parm1);
2663                 msg = buf;
2664                 break;
2665         case PLOGX_IOCBERR_PORTUSED:
2666                 lev = ISP_LOG_SANCFG|ISP_LOG_WARN1;
2667                 ISP_SNPRINTF(buf, sizeof (buf), "already logged in with N-Port handle 0x%x", parm1);
2668                 msg = buf;
2669                 rval = MBOX_PORT_ID_USED | (parm1 << 16);
2670                 break;
2671         case PLOGX_IOCBERR_HNDLUSED:
2672                 lev = ISP_LOG_SANCFG|ISP_LOG_WARN1;
2673                 ISP_SNPRINTF(buf, sizeof (buf), "handle already used for PortID 0x%06x", parm1);
2674                 msg = buf;
2675                 rval = MBOX_LOOP_ID_USED;
2676                 break;
2677         case PLOGX_IOCBERR_NOHANDLE:
2678                 msg = "no handle allocated";
2679                 break;
2680         case PLOGX_IOCBERR_NOFLOGI:
2681                 msg = "no FLOGI_ACC";
2682                 break;
2683         default:
2684                 ISP_SNPRINTF(buf, sizeof (buf), "status %x from %x", pl.plogx_status, flags);
2685                 msg = buf;
2686                 break;
2687         }
2688         if (msg) {
2689                 isp_prt(isp, lev, "Chan %d PLOGX PortID 0x%06x to N-Port handle 0x%x: %s",
2690                     chan, portid, handle, msg);
2691         }
2692         return (rval);
2693 }
2694
2695 static int
2696 isp_port_login(ispsoftc_t *isp, uint16_t handle, uint32_t portid)
2697 {
2698         mbreg_t mbs;
2699
2700         MBSINIT(&mbs, MBOX_FABRIC_LOGIN, MBLOGNONE, 500000);
2701         if (ISP_CAP_2KLOGIN(isp)) {
2702                 mbs.param[1] = handle;
2703                 mbs.ibits = (1 << 10);
2704         } else {
2705                 mbs.param[1] = handle << 8;
2706         }
2707         mbs.param[2] = portid >> 16;
2708         mbs.param[3] = portid;
2709         mbs.logval = MBLOGNONE;
2710         mbs.timeout = 500000;
2711         isp_mboxcmd(isp, &mbs);
2712
2713         switch (mbs.param[0]) {
2714         case MBOX_PORT_ID_USED:
2715                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1, "isp_port_login: portid 0x%06x already logged in as 0x%x", portid, mbs.param[1]);
2716                 return (MBOX_PORT_ID_USED | (mbs.param[1] << 16));
2717
2718         case MBOX_LOOP_ID_USED:
2719                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1, "isp_port_login: handle 0x%x in use for port id 0x%02xXXXX", handle, mbs.param[1] & 0xff);
2720                 return (MBOX_LOOP_ID_USED);
2721
2722         case MBOX_COMMAND_COMPLETE:
2723                 return (0);
2724
2725         case MBOX_COMMAND_ERROR:
2726                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1, "isp_port_login: error 0x%x in PLOGI to port 0x%06x", mbs.param[1], portid);
2727                 return (MBOX_COMMAND_ERROR);
2728
2729         case MBOX_ALL_IDS_USED:
2730                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1, "isp_port_login: all IDs used for fabric login");
2731                 return (MBOX_ALL_IDS_USED);
2732
2733         default:
2734                 isp_prt(isp, ISP_LOG_SANCFG, "isp_port_login: error 0x%x on port login of 0x%06x@0x%0x", mbs.param[0], portid, handle);
2735                 return (mbs.param[0]);
2736         }
2737 }
2738
2739 /*
2740  * Pre-24XX fabric port logout
2741  *
2742  * Note that portid is not used
2743  */
2744 static int
2745 isp_port_logout(ispsoftc_t *isp, uint16_t handle, uint32_t portid)
2746 {
2747         mbreg_t mbs;
2748
2749         MBSINIT(&mbs, MBOX_FABRIC_LOGOUT, MBLOGNONE, 500000);
2750         if (ISP_CAP_2KLOGIN(isp)) {
2751                 mbs.param[1] = handle;
2752                 mbs.ibits = (1 << 10);
2753         } else {
2754                 mbs.param[1] = handle << 8;
2755         }
2756         isp_mboxcmd(isp, &mbs);
2757         return (mbs.param[0] == MBOX_COMMAND_COMPLETE? 0 : mbs.param[0]);
2758 }
2759
2760 static int
2761 isp_getpdb(ispsoftc_t *isp, int chan, uint16_t id, isp_pdb_t *pdb)
2762 {
2763         mbreg_t mbs;
2764         union {
2765                 isp_pdb_21xx_t fred;
2766                 isp_pdb_24xx_t bill;
2767         } un;
2768
2769         MBSINIT(&mbs, MBOX_GET_PORT_DB,
2770             MBLOGALL & ~MBLOGMASK(MBOX_COMMAND_PARAM_ERROR), 250000);
2771         if (IS_24XX(isp)) {
2772                 mbs.ibits = (1 << 9)|(1 << 10);
2773                 mbs.param[1] = id;
2774                 mbs.param[9] = chan;
2775         } else if (ISP_CAP_2KLOGIN(isp)) {
2776                 mbs.param[1] = id;
2777         } else {
2778                 mbs.param[1] = id << 8;
2779         }
2780         mbs.param[2] = DMA_WD1(isp->isp_iocb_dma);
2781         mbs.param[3] = DMA_WD0(isp->isp_iocb_dma);
2782         mbs.param[6] = DMA_WD3(isp->isp_iocb_dma);
2783         mbs.param[7] = DMA_WD2(isp->isp_iocb_dma);
2784         MEMORYBARRIER(isp, SYNC_IFORDEV, 0, sizeof(un), chan);
2785
2786         isp_mboxcmd(isp, &mbs);
2787         if (mbs.param[0] != MBOX_COMMAND_COMPLETE)
2788                 return (mbs.param[0] | (mbs.param[1] << 16));
2789
2790         MEMORYBARRIER(isp, SYNC_IFORCPU, 0, sizeof(un), chan);
2791         if (IS_24XX(isp)) {
2792                 isp_get_pdb_24xx(isp, isp->isp_iocb, &un.bill);
2793                 pdb->handle = un.bill.pdb_handle;
2794                 pdb->prli_word0 = un.bill.pdb_prli_svc0;
2795                 pdb->prli_word3 = un.bill.pdb_prli_svc3;
2796                 pdb->portid = BITS2WORD_24XX(un.bill.pdb_portid_bits);
2797                 ISP_MEMCPY(pdb->portname, un.bill.pdb_portname, 8);
2798                 ISP_MEMCPY(pdb->nodename, un.bill.pdb_nodename, 8);
2799                 isp_prt(isp, ISP_LOGDEBUG0,
2800                     "Chan %d handle 0x%x Port 0x%06x flags 0x%x curstate %x laststate %x",
2801                     chan, id, pdb->portid, un.bill.pdb_flags,
2802                     un.bill.pdb_curstate, un.bill.pdb_laststate);
2803
2804                 if (un.bill.pdb_curstate < PDB2400_STATE_PLOGI_DONE || un.bill.pdb_curstate > PDB2400_STATE_LOGGED_IN) {
2805                         mbs.param[0] = MBOX_NOT_LOGGED_IN;
2806                         return (mbs.param[0]);
2807                 }
2808         } else {
2809                 isp_get_pdb_21xx(isp, isp->isp_iocb, &un.fred);
2810                 pdb->handle = un.fred.pdb_loopid;
2811                 pdb->prli_word0 = un.fred.pdb_prli_svc0;
2812                 pdb->prli_word3 = un.fred.pdb_prli_svc3;
2813                 pdb->portid = BITS2WORD(un.fred.pdb_portid_bits);
2814                 ISP_MEMCPY(pdb->portname, un.fred.pdb_portname, 8);
2815                 ISP_MEMCPY(pdb->nodename, un.fred.pdb_nodename, 8);
2816                 isp_prt(isp, ISP_LOGDEBUG1,
2817                     "Chan %d handle 0x%x Port 0x%06x", chan, id, pdb->portid);
2818         }
2819         return (0);
2820 }
2821
2822 static int
2823 isp_gethandles(ispsoftc_t *isp, int chan, uint16_t *handles, int *num, int loop)
2824 {
2825         fcparam *fcp = FCPARAM(isp, chan);
2826         mbreg_t mbs;
2827         isp_pnhle_21xx_t el1, *elp1;
2828         isp_pnhle_23xx_t el3, *elp3;
2829         isp_pnhle_24xx_t el4, *elp4;
2830         int i, j;
2831         uint32_t p;
2832         uint16_t h;
2833
2834         MBSINIT(&mbs, MBOX_GET_ID_LIST, MBLOGALL, 250000);
2835         if (IS_24XX(isp)) {
2836                 mbs.param[2] = DMA_WD1(fcp->isp_scdma);
2837                 mbs.param[3] = DMA_WD0(fcp->isp_scdma);
2838                 mbs.param[6] = DMA_WD3(fcp->isp_scdma);
2839                 mbs.param[7] = DMA_WD2(fcp->isp_scdma);
2840                 mbs.param[8] = ISP_FC_SCRLEN;
2841                 mbs.param[9] = chan;
2842         } else {
2843                 mbs.ibits = (1 << 1)|(1 << 2)|(1 << 3)|(1 << 6);
2844                 mbs.param[1] = DMA_WD1(fcp->isp_scdma);
2845                 mbs.param[2] = DMA_WD0(fcp->isp_scdma);
2846                 mbs.param[3] = DMA_WD3(fcp->isp_scdma);
2847                 mbs.param[6] = DMA_WD2(fcp->isp_scdma);
2848         }
2849         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
2850                 isp_prt(isp, ISP_LOGERR, sacq);
2851                 return (-1);
2852         }
2853         MEMORYBARRIER(isp, SYNC_SFORDEV, 0, ISP_FC_SCRLEN, chan);
2854         isp_mboxcmd(isp, &mbs);
2855         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2856                 FC_SCRATCH_RELEASE(isp, chan);
2857                 return (mbs.param[0] | (mbs.param[1] << 16));
2858         }
2859         MEMORYBARRIER(isp, SYNC_SFORCPU, 0, ISP_FC_SCRLEN, chan);
2860         elp1 = fcp->isp_scratch;
2861         elp3 = fcp->isp_scratch;
2862         elp4 = fcp->isp_scratch;
2863         for (i = 0, j = 0; i < mbs.param[1] && j < *num; i++) {
2864                 if (IS_24XX(isp)) {
2865                         isp_get_pnhle_24xx(isp, &elp4[i], &el4);
2866                         p = el4.pnhle_port_id_lo |
2867                             (el4.pnhle_port_id_hi << 16);
2868                         h = el4.pnhle_handle;
2869                 } else if (IS_23XX(isp)) {
2870                         isp_get_pnhle_23xx(isp, &elp3[i], &el3);
2871                         p = el3.pnhle_port_id_lo |
2872                             (el3.pnhle_port_id_hi << 16);
2873                         h = el3.pnhle_handle;
2874                 } else { /* 21xx */
2875                         isp_get_pnhle_21xx(isp, &elp1[i], &el1);
2876                         p = el1.pnhle_port_id_lo |
2877                             ((el1.pnhle_port_id_hi_handle & 0xff) << 16);
2878                         h = el1.pnhle_port_id_hi_handle >> 8;
2879                 }
2880                 if (loop && (p >> 8) != (fcp->isp_portid >> 8))
2881                         continue;
2882                 handles[j++] = h;
2883         }
2884         *num = j;
2885         FC_SCRATCH_RELEASE(isp, chan);
2886         return (0);
2887 }
2888
2889 static void
2890 isp_dump_chip_portdb(ispsoftc_t *isp, int chan)
2891 {
2892         isp_pdb_t pdb;
2893         uint16_t lim, nphdl;
2894
2895         isp_prt(isp, ISP_LOG_SANCFG|ISP_LOGINFO, "Chan %d chip port dump", chan);
2896         if (ISP_CAP_2KLOGIN(isp)) {
2897                 lim = NPH_MAX_2K;
2898         } else {
2899                 lim = NPH_MAX;
2900         }
2901         for (nphdl = 0; nphdl != lim; nphdl++) {
2902                 if (isp_getpdb(isp, chan, nphdl, &pdb)) {
2903                         continue;
2904                 }
2905                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOGINFO, "Chan %d Handle 0x%04x "
2906                     "PortID 0x%06x WWPN 0x%02x%02x%02x%02x%02x%02x%02x%02x",
2907                     chan, nphdl, pdb.portid, pdb.portname[0], pdb.portname[1],
2908                     pdb.portname[2], pdb.portname[3], pdb.portname[4],
2909                     pdb.portname[5], pdb.portname[6], pdb.portname[7]);
2910         }
2911 }
2912
2913 static uint64_t
2914 isp_get_wwn(ispsoftc_t *isp, int chan, int nphdl, int nodename)
2915 {
2916         uint64_t wwn = INI_NONE;
2917         mbreg_t mbs;
2918
2919         MBSINIT(&mbs, MBOX_GET_PORT_NAME,
2920             MBLOGALL & ~MBLOGMASK(MBOX_COMMAND_PARAM_ERROR), 500000);
2921         if (ISP_CAP_2KLOGIN(isp)) {
2922                 mbs.param[1] = nphdl;
2923                 if (nodename) {
2924                         mbs.param[10] = 1;
2925                 }
2926                 mbs.param[9] = chan;
2927         } else {
2928                 mbs.ibitm = 3;
2929                 mbs.param[1] = nphdl << 8;
2930                 if (nodename) {
2931                         mbs.param[1] |= 1;
2932                 }
2933         }
2934         isp_mboxcmd(isp, &mbs);
2935         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2936                 return (wwn);
2937         }
2938         if (IS_24XX(isp)) {
2939                 wwn =
2940                     (((uint64_t)(mbs.param[2] >> 8))    << 56) |
2941                     (((uint64_t)(mbs.param[2] & 0xff))  << 48) |
2942                     (((uint64_t)(mbs.param[3] >> 8))    << 40) |
2943                     (((uint64_t)(mbs.param[3] & 0xff))  << 32) |
2944                     (((uint64_t)(mbs.param[6] >> 8))    << 24) |
2945                     (((uint64_t)(mbs.param[6] & 0xff))  << 16) |
2946                     (((uint64_t)(mbs.param[7] >> 8))    <<  8) |
2947                     (((uint64_t)(mbs.param[7] & 0xff)));
2948         } else {
2949                 wwn =
2950                     (((uint64_t)(mbs.param[2] & 0xff))  << 56) |
2951                     (((uint64_t)(mbs.param[2] >> 8))    << 48) |
2952                     (((uint64_t)(mbs.param[3] & 0xff))  << 40) |
2953                     (((uint64_t)(mbs.param[3] >> 8))    << 32) |
2954                     (((uint64_t)(mbs.param[6] & 0xff))  << 24) |
2955                     (((uint64_t)(mbs.param[6] >> 8))    << 16) |
2956                     (((uint64_t)(mbs.param[7] & 0xff))  <<  8) |
2957                     (((uint64_t)(mbs.param[7] >> 8)));
2958         }
2959         return (wwn);
2960 }
2961
2962 /*
2963  * Make sure we have good FC link.
2964  */
2965
2966 static int
2967 isp_fclink_test(ispsoftc_t *isp, int chan, int usdelay)
2968 {
2969         mbreg_t mbs;
2970         int i, r;
2971         uint16_t nphdl;
2972         fcparam *fcp;
2973         isp_pdb_t pdb;
2974         NANOTIME_T hra, hrb;
2975
2976         fcp = FCPARAM(isp, chan);
2977
2978         if (fcp->isp_loopstate < LOOP_HAVE_LINK)
2979                 return (-1);
2980         if (fcp->isp_loopstate >= LOOP_LTEST_DONE)
2981                 return (0);
2982
2983         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC link test", chan);
2984
2985         /*
2986          * Wait up to N microseconds for F/W to go to a ready state.
2987          */
2988         GET_NANOTIME(&hra);
2989         while (1) {
2990                 isp_change_fw_state(isp, chan, isp_fw_state(isp, chan));
2991                 if (fcp->isp_fwstate == FW_READY) {
2992                         break;
2993                 }
2994                 if (fcp->isp_loopstate < LOOP_HAVE_LINK)
2995                         goto abort;
2996                 GET_NANOTIME(&hrb);
2997                 if ((NANOTIME_SUB(&hrb, &hra) / 1000 + 1000 >= usdelay))
2998                         break;
2999                 ISP_SLEEP(isp, 1000);
3000         }
3001         if (fcp->isp_fwstate != FW_READY) {
3002                 isp_prt(isp, ISP_LOG_SANCFG,
3003                     "Chan %d Firmware is not ready (%s)",
3004                     chan, isp_fc_fw_statename(fcp->isp_fwstate));
3005                 return (-1);
3006         }
3007
3008         /*
3009          * Get our Loop ID and Port ID.
3010          */
3011         MBSINIT(&mbs, MBOX_GET_LOOP_ID, MBLOGALL, 0);
3012         mbs.param[9] = chan;
3013         isp_mboxcmd(isp, &mbs);
3014         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
3015                 return (-1);
3016         }
3017
3018         if (IS_2100(isp)) {
3019                 /*
3020                  * Don't bother with fabric if we are using really old
3021                  * 2100 firmware. It's just not worth it.
3022                  */
3023                 if (ISP_FW_NEWER_THAN(isp, 1, 15, 37))
3024                         fcp->isp_topo = TOPO_FL_PORT;
3025                 else
3026                         fcp->isp_topo = TOPO_NL_PORT;
3027         } else {
3028                 int topo = (int) mbs.param[6];
3029                 if (topo < TOPO_NL_PORT || topo > TOPO_PTP_STUB) {
3030                         topo = TOPO_PTP_STUB;
3031                 }
3032                 fcp->isp_topo = topo;
3033         }
3034         fcp->isp_portid = mbs.param[2] | (mbs.param[3] << 16);
3035
3036         if (!TOPO_IS_FABRIC(fcp->isp_topo)) {
3037                 fcp->isp_loopid = mbs.param[1] & 0xff;
3038         } else if (fcp->isp_topo != TOPO_F_PORT) {
3039                 uint8_t alpa = fcp->isp_portid;
3040
3041                 for (i = 0; alpa_map[i]; i++) {
3042                         if (alpa_map[i] == alpa)
3043                                 break;
3044                 }
3045                 if (alpa_map[i])
3046                         fcp->isp_loopid = i;
3047         }
3048
3049 #if 0
3050         fcp->isp_loopstate = LOOP_HAVE_ADDR;
3051 #endif
3052         fcp->isp_loopstate = LOOP_TESTING_LINK;
3053
3054         if (fcp->isp_topo == TOPO_F_PORT || fcp->isp_topo == TOPO_FL_PORT) {
3055                 nphdl = IS_24XX(isp) ? NPH_FL_ID : FL_ID;
3056                 r = isp_getpdb(isp, chan, nphdl, &pdb);
3057                 if (r != 0 || pdb.portid == 0) {
3058                         if (IS_2100(isp)) {
3059                                 fcp->isp_topo = TOPO_NL_PORT;
3060                         } else {
3061                                 isp_prt(isp, ISP_LOGWARN,
3062                                     "fabric topology, but cannot get info about fabric controller (0x%x)", r);
3063                                 fcp->isp_topo = TOPO_PTP_STUB;
3064                         }
3065                         goto not_on_fabric;
3066                 }
3067
3068                 if (IS_24XX(isp)) {
3069                         fcp->isp_fabric_params = mbs.param[7];
3070                         fcp->isp_sns_hdl = NPH_SNS_ID;
3071                         r = isp_register_fc4_type(isp, chan);
3072                         if (fcp->isp_loopstate < LOOP_TESTING_LINK)
3073                                 goto abort;
3074                         if (r != 0)
3075                                 goto not_on_fabric;
3076                         r = isp_register_fc4_features_24xx(isp, chan);
3077                         if (fcp->isp_loopstate < LOOP_TESTING_LINK)
3078                                 goto abort;
3079                         if (r != 0)
3080                                 goto not_on_fabric;
3081                         r = isp_register_port_name_24xx(isp, chan);
3082                         if (fcp->isp_loopstate < LOOP_TESTING_LINK)
3083                                 goto abort;
3084                         if (r != 0)
3085                                 goto not_on_fabric;
3086                         isp_register_node_name_24xx(isp, chan);
3087                         if (fcp->isp_loopstate < LOOP_TESTING_LINK)
3088                                 goto abort;
3089                 } else {
3090                         fcp->isp_sns_hdl = SNS_ID;
3091                         r = isp_register_fc4_type(isp, chan);
3092                         if (r != 0)
3093                                 goto not_on_fabric;
3094                         if (fcp->role == ISP_ROLE_TARGET)
3095                                 isp_send_change_request(isp, chan);
3096                 }
3097         }
3098
3099 not_on_fabric:
3100         /* Get link speed. */
3101         fcp->isp_gbspeed = 1;
3102         if (IS_23XX(isp) || IS_24XX(isp)) {
3103                 MBSINIT(&mbs, MBOX_GET_SET_DATA_RATE, MBLOGALL, 3000000);
3104                 mbs.param[1] = MBGSD_GET_RATE;
3105                 /* mbs.param[2] undefined if we're just getting rate */
3106                 isp_mboxcmd(isp, &mbs);
3107                 if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
3108                         if (mbs.param[1] == MBGSD_10GB)
3109                                 fcp->isp_gbspeed = 10;
3110                         else if (mbs.param[1] == MBGSD_32GB)
3111                                 fcp->isp_gbspeed = 32;
3112                         else if (mbs.param[1] == MBGSD_16GB)
3113                                 fcp->isp_gbspeed = 16;
3114                         else if (mbs.param[1] == MBGSD_8GB)
3115                                 fcp->isp_gbspeed = 8;
3116                         else if (mbs.param[1] == MBGSD_4GB)
3117                                 fcp->isp_gbspeed = 4;
3118                         else if (mbs.param[1] == MBGSD_2GB)
3119                                 fcp->isp_gbspeed = 2;
3120                         else if (mbs.param[1] == MBGSD_1GB)
3121                                 fcp->isp_gbspeed = 1;
3122                 }
3123         }
3124
3125         if (fcp->isp_loopstate < LOOP_TESTING_LINK) {
3126 abort:
3127                 isp_prt(isp, ISP_LOG_SANCFG,
3128                     "Chan %d FC link test aborted", chan);
3129                 return (1);
3130         }
3131         fcp->isp_loopstate = LOOP_LTEST_DONE;
3132         isp_prt(isp, ISP_LOG_SANCFG|ISP_LOGCONFIG,
3133             "Chan %d WWPN %016jx WWNN %016jx",
3134             chan, (uintmax_t)fcp->isp_wwpn, (uintmax_t)fcp->isp_wwnn);
3135         isp_prt(isp, ISP_LOG_SANCFG|ISP_LOGCONFIG,
3136             "Chan %d %dGb %s PortID 0x%06x LoopID 0x%02x",
3137             chan, fcp->isp_gbspeed, isp_fc_toponame(fcp), fcp->isp_portid,
3138             fcp->isp_loopid);
3139         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC link test done", chan);
3140         return (0);
3141 }
3142
3143 /*
3144  * Complete the synchronization of our Port Database.
3145  *
3146  * At this point, we've scanned the local loop (if any) and the fabric
3147  * and performed fabric logins on all new devices.
3148  *
3149  * Our task here is to go through our port database removing any entities
3150  * that are still marked probational (issuing PLOGO for ones which we had
3151  * PLOGI'd into) or are dead, and notifying upper layers about new/changed
3152  * devices.
3153  */
3154 static int
3155 isp_pdb_sync(ispsoftc_t *isp, int chan)
3156 {
3157         fcparam *fcp = FCPARAM(isp, chan);
3158         fcportdb_t *lp;
3159         uint16_t dbidx;
3160
3161         if (fcp->isp_loopstate < LOOP_FSCAN_DONE)
3162                 return (-1);
3163         if (fcp->isp_loopstate >= LOOP_READY)
3164                 return (0);
3165
3166         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC PDB sync", chan);
3167
3168         fcp->isp_loopstate = LOOP_SYNCING_PDB;
3169
3170         for (dbidx = 0; dbidx < MAX_FC_TARG; dbidx++) {
3171                 lp = &fcp->portdb[dbidx];
3172
3173                 if (lp->state == FC_PORTDB_STATE_NIL)
3174                         continue;
3175                 if (lp->probational && lp->state != FC_PORTDB_STATE_ZOMBIE)
3176                         lp->state = FC_PORTDB_STATE_DEAD;
3177                 switch (lp->state) {
3178                 case FC_PORTDB_STATE_DEAD:
3179                         lp->state = FC_PORTDB_STATE_NIL;
3180                         isp_async(isp, ISPASYNC_DEV_GONE, chan, lp);
3181                         if ((lp->portid & 0xffff00) != 0) {
3182                                 (void) isp_plogx(isp, chan, lp->handle,
3183                                     lp->portid,
3184                                     PLOGX_FLG_CMD_LOGO |
3185                                     PLOGX_FLG_IMPLICIT |
3186                                     PLOGX_FLG_FREE_NPHDL);
3187                         }
3188                         /*
3189                          * Note that we might come out of this with our state
3190                          * set to FC_PORTDB_STATE_ZOMBIE.
3191                          */
3192                         break;
3193                 case FC_PORTDB_STATE_NEW:
3194                         lp->state = FC_PORTDB_STATE_VALID;
3195                         isp_async(isp, ISPASYNC_DEV_ARRIVED, chan, lp);
3196                         break;
3197                 case FC_PORTDB_STATE_CHANGED:
3198                         lp->state = FC_PORTDB_STATE_VALID;
3199                         isp_async(isp, ISPASYNC_DEV_CHANGED, chan, lp);
3200                         lp->portid = lp->new_portid;
3201                         lp->prli_word0 = lp->new_prli_word0;
3202                         lp->prli_word3 = lp->new_prli_word3;
3203                         break;
3204                 case FC_PORTDB_STATE_VALID:
3205                         isp_async(isp, ISPASYNC_DEV_STAYED, chan, lp);
3206                         break;
3207                 case FC_PORTDB_STATE_ZOMBIE:
3208                         break;
3209                 default:
3210                         isp_prt(isp, ISP_LOGWARN,
3211                             "isp_pdb_sync: state %d for idx %d",
3212                             lp->state, dbidx);
3213                         isp_dump_portdb(isp, chan);
3214                 }
3215         }
3216
3217         if (fcp->isp_loopstate < LOOP_SYNCING_PDB) {
3218                 isp_prt(isp, ISP_LOG_SANCFG,
3219                     "Chan %d FC PDB sync aborted", chan);
3220                 return (1);
3221         }
3222
3223         fcp->isp_loopstate = LOOP_READY;
3224         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC PDB sync done", chan);
3225         return (0);
3226 }
3227
3228 static void
3229 isp_pdb_add_update(ispsoftc_t *isp, int chan, isp_pdb_t *pdb)
3230 {
3231         fcportdb_t *lp;
3232         uint64_t wwnn, wwpn;
3233
3234         MAKE_WWN_FROM_NODE_NAME(wwnn, pdb->nodename);
3235         MAKE_WWN_FROM_NODE_NAME(wwpn, pdb->portname);
3236
3237         /* Search port database for the same WWPN. */
3238         if (isp_find_pdb_by_wwpn(isp, chan, wwpn, &lp)) {
3239                 if (!lp->probational) {
3240                         isp_prt(isp, ISP_LOGERR,
3241                             "Chan %d Port 0x%06x@0x%04x [%d] is not probational (0x%x)",
3242                             chan, lp->portid, lp->handle,
3243                             FC_PORTDB_TGT(isp, chan, lp), lp->state);
3244                         isp_dump_portdb(isp, chan);
3245                         return;
3246                 }
3247                 lp->probational = 0;
3248                 lp->node_wwn = wwnn;
3249
3250                 /* Old device, nothing new. */
3251                 if (lp->portid == pdb->portid &&
3252                     lp->handle == pdb->handle &&
3253                     lp->prli_word3 == pdb->prli_word3 &&
3254                     ((pdb->prli_word0 & PRLI_WD0_EST_IMAGE_PAIR) ==
3255                      (lp->prli_word0 & PRLI_WD0_EST_IMAGE_PAIR))) {
3256                         if (lp->state != FC_PORTDB_STATE_NEW)
3257                                 lp->state = FC_PORTDB_STATE_VALID;
3258                         isp_prt(isp, ISP_LOG_SANCFG,
3259                             "Chan %d Port 0x%06x@0x%04x is valid",
3260                             chan, pdb->portid, pdb->handle);
3261                         return;
3262                 }
3263
3264                 /* Something has changed. */
3265                 lp->state = FC_PORTDB_STATE_CHANGED;
3266                 lp->handle = pdb->handle;
3267                 lp->new_portid = pdb->portid;
3268                 lp->new_prli_word0 = pdb->prli_word0;
3269                 lp->new_prli_word3 = pdb->prli_word3;
3270                 isp_prt(isp, ISP_LOG_SANCFG,
3271                     "Chan %d Port 0x%06x@0x%04x is changed",
3272                     chan, pdb->portid, pdb->handle);
3273                 return;
3274         }
3275
3276         /* It seems like a new port. Find an empty slot for it. */
3277         if (!isp_find_pdb_empty(isp, chan, &lp)) {
3278                 isp_prt(isp, ISP_LOGERR, "Chan %d out of portdb entries", chan);
3279                 return;
3280         }
3281
3282         ISP_MEMZERO(lp, sizeof (fcportdb_t));
3283         lp->probational = 0;
3284         lp->state = FC_PORTDB_STATE_NEW;
3285         lp->portid = lp->new_portid = pdb->portid;
3286         lp->prli_word0 = lp->new_prli_word0 = pdb->prli_word0;
3287         lp->prli_word3 = lp->new_prli_word3 = pdb->prli_word3;
3288         lp->handle = pdb->handle;
3289         lp->port_wwn = wwpn;
3290         lp->node_wwn = wwnn;
3291         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d Port 0x%06x@0x%04x is new",
3292             chan, pdb->portid, pdb->handle);
3293 }
3294
3295 /*
3296  * Fix port IDs for logged-in initiators on pre-2400 chips.
3297  * For those chips we are not receiving login events, adding initiators
3298  * based on ATIO requests, but there is no port ID in that structure.
3299  */
3300 static void
3301 isp_fix_portids(ispsoftc_t *isp, int chan)
3302 {
3303         fcparam *fcp = FCPARAM(isp, chan);
3304         isp_pdb_t pdb;
3305         uint64_t wwpn;
3306         int i, r;
3307
3308         for (i = 0; i < MAX_FC_TARG; i++) {
3309                 fcportdb_t *lp = &fcp->portdb[i];
3310
3311                 if (lp->state == FC_PORTDB_STATE_NIL ||
3312                     lp->state == FC_PORTDB_STATE_ZOMBIE)
3313                         continue;
3314                 if (VALID_PORT(lp->portid))
3315                         continue;
3316
3317                 r = isp_getpdb(isp, chan, lp->handle, &pdb);
3318                 if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
3319                         return;
3320                 if (r != 0) {
3321                         isp_prt(isp, ISP_LOGDEBUG1,
3322                             "Chan %d FC Scan Loop handle %d returned %x",
3323                             chan, lp->handle, r);
3324                         continue;
3325                 }
3326
3327                 MAKE_WWN_FROM_NODE_NAME(wwpn, pdb.portname);
3328                 if (lp->port_wwn != wwpn)
3329                         continue;
3330                 lp->portid = lp->new_portid = pdb.portid;
3331                 isp_prt(isp, ISP_LOG_SANCFG,
3332                     "Chan %d Port 0x%06x@0x%04x is fixed",
3333                     chan, pdb.portid, pdb.handle);
3334         }
3335 }
3336
3337 /*
3338  * Scan local loop for devices.
3339  */
3340 static int
3341 isp_scan_loop(ispsoftc_t *isp, int chan)
3342 {
3343         fcparam *fcp = FCPARAM(isp, chan);
3344         int idx, lim, r;
3345         isp_pdb_t pdb;
3346         uint16_t *handles;
3347         uint16_t handle;
3348
3349         if (fcp->isp_loopstate < LOOP_LTEST_DONE)
3350                 return (-1);
3351         if (fcp->isp_loopstate >= LOOP_LSCAN_DONE)
3352                 return (0);
3353
3354         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC loop scan", chan);
3355         fcp->isp_loopstate = LOOP_SCANNING_LOOP;
3356         if (TOPO_IS_FABRIC(fcp->isp_topo)) {
3357                 if (!IS_24XX(isp)) {
3358                         isp_fix_portids(isp, chan);
3359                         if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
3360                                 goto abort;
3361                 }
3362                 isp_prt(isp, ISP_LOG_SANCFG,
3363                     "Chan %d FC loop scan done (no loop)", chan);
3364                 fcp->isp_loopstate = LOOP_LSCAN_DONE;
3365                 return (0);
3366         }
3367
3368         handles = (uint16_t *)fcp->isp_scanscratch;
3369         lim = ISP_FC_SCRLEN / 2;
3370         r = isp_gethandles(isp, chan, handles, &lim, 1);
3371         if (r != 0) {
3372                 isp_prt(isp, ISP_LOG_SANCFG,
3373                     "Chan %d Getting list of handles failed with %x", chan, r);
3374                 isp_prt(isp, ISP_LOG_SANCFG,
3375                     "Chan %d FC loop scan done (bad)", chan);
3376                 return (-1);
3377         }
3378
3379         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d Got %d handles",
3380             chan, lim);
3381
3382         /*
3383          * Run through the list and get the port database info for each one.
3384          */
3385         isp_mark_portdb(isp, chan);
3386         for (idx = 0; idx < lim; idx++) {
3387                 handle = handles[idx];
3388
3389                 /*
3390                  * Don't scan "special" ids.
3391                  */
3392                 if (ISP_CAP_2KLOGIN(isp)) {
3393                         if (handle >= NPH_RESERVED)
3394                                 continue;
3395                 } else {
3396                         if (handle >= FL_ID && handle <= SNS_ID)
3397                                 continue;
3398                 }
3399
3400                 /*
3401                  * In older cards with older f/w GET_PORT_DATABASE has been
3402                  * known to hang. This trick gets around that problem.
3403                  */
3404                 if (IS_2100(isp) || IS_2200(isp)) {
3405                         uint64_t node_wwn = isp_get_wwn(isp, chan, handle, 1);
3406                         if (fcp->isp_loopstate < LOOP_SCANNING_LOOP) {
3407 abort:
3408                                 isp_prt(isp, ISP_LOG_SANCFG,
3409                                     "Chan %d FC loop scan aborted", chan);
3410                                 return (1);
3411                         }
3412                         if (node_wwn == INI_NONE) {
3413                                 continue;
3414                         }
3415                 }
3416
3417                 /*
3418                  * Get the port database entity for this index.
3419                  */
3420                 r = isp_getpdb(isp, chan, handle, &pdb);
3421                 if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
3422                         goto abort;
3423                 if (r != 0) {
3424                         isp_prt(isp, ISP_LOGDEBUG1,
3425                             "Chan %d FC Scan Loop handle %d returned %x",
3426                             chan, handle, r);
3427                         continue;
3428                 }
3429
3430                 isp_pdb_add_update(isp, chan, &pdb);
3431         }
3432         if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
3433                 goto abort;
3434         fcp->isp_loopstate = LOOP_LSCAN_DONE;
3435         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC loop scan done", chan);
3436         return (0);
3437 }
3438
3439 static int
3440 isp_ct_sns(ispsoftc_t *isp, int chan, uint32_t cmd_bcnt, uint32_t rsp_bcnt)
3441 {
3442         fcparam *fcp = FCPARAM(isp, chan);
3443         mbreg_t mbs;
3444
3445         if (isp->isp_dblev & ISP_LOGDEBUG1)
3446                 isp_print_bytes(isp, "CT SNS request", cmd_bcnt, fcp->isp_scratch);
3447         MEMORYBARRIER(isp, SYNC_SFORDEV, 0, cmd_bcnt, chan);
3448
3449         MBSINIT(&mbs, MBOX_SEND_SNS, MBLOGALL, 10000000);
3450         mbs.param[1] = cmd_bcnt >> 1;
3451         mbs.param[2] = DMA_WD1(fcp->isp_scdma);
3452         mbs.param[3] = DMA_WD0(fcp->isp_scdma);
3453         mbs.param[6] = DMA_WD3(fcp->isp_scdma);
3454         mbs.param[7] = DMA_WD2(fcp->isp_scdma);
3455         isp_mboxcmd(isp, &mbs);
3456         if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
3457                 if (mbs.param[0] == MBOX_INVALID_COMMAND) {
3458                         return (1);
3459                 } else {
3460                         return (-1);
3461                 }
3462         }
3463
3464         MEMORYBARRIER(isp, SYNC_SFORCPU, 0, rsp_bcnt, chan);
3465         if (isp->isp_dblev & ISP_LOGDEBUG1)
3466                 isp_print_bytes(isp, "CT response", rsp_bcnt, fcp->isp_scratch);
3467         return (0);
3468 }
3469
3470 static int
3471 isp_ct_passthru(ispsoftc_t *isp, int chan, uint32_t cmd_bcnt, uint32_t rsp_bcnt)
3472 {
3473         fcparam *fcp = FCPARAM(isp, chan);
3474         isp_ct_pt_t pt;
3475         void *reqp;
3476         uint8_t resp[QENTRY_LEN];
3477
3478         if (isp->isp_dblev & ISP_LOGDEBUG1)
3479                 isp_print_bytes(isp, "CT request", cmd_bcnt, fcp->isp_scratch);
3480
3481         /*
3482          * Build a Passthrough IOCB in memory.
3483          */
3484         ISP_MEMZERO(&pt, sizeof(pt));
3485         pt.ctp_header.rqs_entry_count = 1;
3486         pt.ctp_header.rqs_entry_type = RQSTYPE_CT_PASSTHRU;
3487         pt.ctp_nphdl = fcp->isp_sns_hdl;
3488         pt.ctp_cmd_cnt = 1;
3489         pt.ctp_vpidx = ISP_GET_VPIDX(isp, chan);
3490         pt.ctp_time = 10;
3491         pt.ctp_rsp_cnt = 1;
3492         pt.ctp_rsp_bcnt = rsp_bcnt;
3493         pt.ctp_cmd_bcnt = cmd_bcnt;
3494         pt.ctp_dataseg[0].ds_base = DMA_LO32(fcp->isp_scdma);
3495         pt.ctp_dataseg[0].ds_basehi = DMA_HI32(fcp->isp_scdma);
3496         pt.ctp_dataseg[0].ds_count = cmd_bcnt;
3497         pt.ctp_dataseg[1].ds_base = DMA_LO32(fcp->isp_scdma);
3498         pt.ctp_dataseg[1].ds_basehi = DMA_HI32(fcp->isp_scdma);
3499         pt.ctp_dataseg[1].ds_count = rsp_bcnt;
3500
3501         /* Prepare space for response in memory */
3502         memset(resp, 0xff, sizeof(resp));
3503         pt.ctp_handle = isp_allocate_handle(isp, resp, ISP_HANDLE_CTRL);
3504         if (pt.ctp_handle == 0) {
3505                 isp_prt(isp, ISP_LOGERR,
3506                     "%s: CTP of Chan %d out of handles", __func__, chan);
3507                 return (-1);
3508         }
3509
3510         /* Send request and wait for response. */
3511         reqp = isp_getrqentry(isp);
3512         if (reqp == NULL) {
3513                 isp_prt(isp, ISP_LOGERR,
3514                     "%s: CTP of Chan %d out of rqent", __func__, chan);
3515                 isp_destroy_handle(isp, pt.ctp_handle);
3516                 return (-1);
3517         }
3518         isp_put_ct_pt(isp, &pt, (isp_ct_pt_t *)reqp);
3519         if (isp->isp_dblev & ISP_LOGDEBUG1)
3520                 isp_print_bytes(isp, "CT IOCB request", QENTRY_LEN, reqp);
3521         ISP_SYNC_REQUEST(isp);
3522         if (msleep(resp, &isp->isp_lock, 0, "CTP", pt.ctp_time*hz) == EWOULDBLOCK) {
3523                 isp_prt(isp, ISP_LOGERR,
3524                     "%s: CTP of Chan %d timed out", __func__, chan);
3525                 isp_destroy_handle(isp, pt.ctp_handle);
3526                 return (-1);
3527         }
3528         if (isp->isp_dblev & ISP_LOGDEBUG1)
3529                 isp_print_bytes(isp, "CT IOCB response", QENTRY_LEN, resp);
3530
3531         isp_get_ct_pt(isp, (isp_ct_pt_t *)resp, &pt);
3532         if (pt.ctp_status && pt.ctp_status != RQCS_DATA_UNDERRUN) {
3533                 isp_prt(isp, ISP_LOGWARN,
3534                     "Chan %d CT pass-through returned 0x%x",
3535                     chan, pt.ctp_status);
3536                 return (-1);
3537         }
3538
3539         if (isp->isp_dblev & ISP_LOGDEBUG1)
3540                 isp_print_bytes(isp, "CT response", rsp_bcnt, fcp->isp_scratch);
3541
3542         return (0);
3543 }
3544
3545 /*
3546  * Scan the fabric for devices and add them to our port database.
3547  *
3548  * Use the GID_PT command to get list of all Nx_Port IDs SNS knows.
3549  * Use GFF_ID and GFT_ID to check port type (FCP) and features (target).
3550  *
3551  * For 2100-23XX cards, we use the SNS mailbox command to pass simple name
3552  * server commands to the switch management server via the QLogic f/w.
3553  *
3554  * For the 24XX and above card, we use CT Pass-through IOCB.
3555  */
3556 #define GIDLEN  ISP_FC_SCRLEN
3557 #define NGENT   ((GIDLEN - 16) >> 2)
3558
3559 static int
3560 isp_gid_pt(ispsoftc_t *isp, int chan)
3561 {
3562         fcparam *fcp = FCPARAM(isp, chan);
3563         ct_hdr_t ct;
3564         sns_gid_pt_req_t rq;
3565         uint8_t *scp = fcp->isp_scratch;
3566
3567         isp_prt(isp, ISP_LOGDEBUG0, "Chan %d requesting GID_PT", chan);
3568         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
3569                 isp_prt(isp, ISP_LOGERR, sacq);
3570                 return (-1);
3571         }
3572
3573         if (IS_24XX(isp)) {
3574                 /* Build the CT command and execute via pass-through. */
3575                 ISP_MEMZERO(&ct, sizeof (ct));
3576                 ct.ct_revision = CT_REVISION;
3577                 ct.ct_fcs_type = CT_FC_TYPE_FC;
3578                 ct.ct_fcs_subtype = CT_FC_SUBTYPE_NS;
3579                 ct.ct_cmd_resp = SNS_GID_PT;
3580                 ct.ct_bcnt_resid = (GIDLEN - 16) >> 2;
3581                 isp_put_ct_hdr(isp, &ct, (ct_hdr_t *)scp);
3582                 scp[sizeof(ct)] = 0x7f;         /* Port Type = Nx_Port */
3583                 scp[sizeof(ct)+1] = 0;          /* Domain_ID = any */
3584                 scp[sizeof(ct)+2] = 0;          /* Area_ID = any */
3585                 scp[sizeof(ct)+3] = 0;          /* Flags = no Area_ID */
3586
3587                 if (isp_ct_passthru(isp, chan, sizeof(ct) + sizeof(uint32_t), GIDLEN)) {
3588                         FC_SCRATCH_RELEASE(isp, chan);
3589                         return (-1);
3590                 }
3591         } else {
3592                 /* Build the SNS request and execute via firmware. */
3593                 ISP_MEMZERO(&rq, SNS_GID_PT_REQ_SIZE);
3594                 rq.snscb_rblen = GIDLEN >> 1;
3595                 rq.snscb_addr[RQRSP_ADDR0015] = DMA_WD0(fcp->isp_scdma);
3596                 rq.snscb_addr[RQRSP_ADDR1631] = DMA_WD1(fcp->isp_scdma);
3597                 rq.snscb_addr[RQRSP_ADDR3247] = DMA_WD2(fcp->isp_scdma);
3598                 rq.snscb_addr[RQRSP_ADDR4863] = DMA_WD3(fcp->isp_scdma);
3599                 rq.snscb_sblen = 6;
3600                 rq.snscb_cmd = SNS_GID_PT;
3601                 rq.snscb_mword_div_2 = NGENT;
3602                 rq.snscb_port_type = 0x7f;      /* Port Type = Nx_Port */
3603                 rq.snscb_domain = 0;            /* Domain_ID = any */
3604                 rq.snscb_area = 0;              /* Area_ID = any */
3605                 rq.snscb_flags = 0;             /* Flags = no Area_ID */
3606                 isp_put_gid_pt_request(isp, &rq, (sns_gid_pt_req_t *)scp);
3607
3608                 if (isp_ct_sns(isp, chan, sizeof(rq), NGENT)) {
3609                         FC_SCRATCH_RELEASE(isp, chan);
3610                         return (-1);
3611                 }
3612         }
3613
3614         isp_get_gid_xx_response(isp, (sns_gid_xx_rsp_t *)scp,
3615             (sns_gid_xx_rsp_t *)fcp->isp_scanscratch, NGENT);
3616         FC_SCRATCH_RELEASE(isp, chan);
3617         return (0);
3618 }
3619
3620 static int
3621 isp_gff_id(ispsoftc_t *isp, int chan, uint32_t portid)
3622 {
3623         fcparam *fcp = FCPARAM(isp, chan);
3624         ct_hdr_t ct;
3625         uint32_t *rp;
3626         uint8_t *scp = fcp->isp_scratch;
3627         sns_gff_id_rsp_t rsp;
3628         int i, res = -1;
3629
3630         if (!fcp->isp_use_gff_id)       /* User may block GFF_ID use. */
3631                 return (res);
3632
3633         if (!IS_24XX(isp))      /* Old chips can't request GFF_ID. */
3634                 return (res);
3635
3636         isp_prt(isp, ISP_LOGDEBUG0, "Chan %d requesting GFF_ID", chan);
3637         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
3638                 isp_prt(isp, ISP_LOGERR, sacq);
3639                 return (res);
3640         }
3641
3642         /* Build the CT command and execute via pass-through. */
3643         ISP_MEMZERO(&ct, sizeof (ct));
3644         ct.ct_revision = CT_REVISION;
3645         ct.ct_fcs_type = CT_FC_TYPE_FC;
3646         ct.ct_fcs_subtype = CT_FC_SUBTYPE_NS;
3647         ct.ct_cmd_resp = SNS_GFF_ID;
3648         ct.ct_bcnt_resid = (SNS_GFF_ID_RESP_SIZE - sizeof(ct)) / 4;
3649         isp_put_ct_hdr(isp, &ct, (ct_hdr_t *)scp);
3650         rp = (uint32_t *) &scp[sizeof(ct)];
3651         ISP_IOZPUT_32(isp, portid, rp);
3652
3653         if (isp_ct_passthru(isp, chan, sizeof(ct) + sizeof(uint32_t),
3654             SNS_GFF_ID_RESP_SIZE)) {
3655                 FC_SCRATCH_RELEASE(isp, chan);
3656                 return (res);
3657         }
3658
3659         isp_get_gff_id_response(isp, (sns_gff_id_rsp_t *)scp, &rsp);
3660         if (rsp.snscb_cthdr.ct_cmd_resp == LS_ACC) {
3661                 for (i = 0; i < 32; i++) {
3662                         if (rsp.snscb_fc4_features[i] != 0) {
3663                                 res = 0;
3664                                 break;
3665                         }
3666                 }
3667                 if (((rsp.snscb_fc4_features[FC4_SCSI / 8] >>
3668                     ((FC4_SCSI % 8) * 4)) & 0x01) != 0)
3669                         res = 1;
3670                 /* Workaround for broken Brocade firmware. */
3671                 if (((ISP_SWAP32(isp, rsp.snscb_fc4_features[FC4_SCSI / 8]) >>
3672                     ((FC4_SCSI % 8) * 4)) & 0x01) != 0)
3673                         res = 1;
3674         }
3675         FC_SCRATCH_RELEASE(isp, chan);
3676         isp_prt(isp, ISP_LOGDEBUG0, "Chan %d GFF_ID result is %d", chan, res);
3677         return (res);
3678 }
3679
3680 static int
3681 isp_gft_id(ispsoftc_t *isp, int chan, uint32_t portid)
3682 {
3683         fcparam *fcp = FCPARAM(isp, chan);
3684         ct_hdr_t ct;
3685         sns_gxx_id_req_t rq;
3686         uint32_t *rp;
3687         uint8_t *scp = fcp->isp_scratch;
3688         sns_gft_id_rsp_t rsp;
3689         int i, res = -1;
3690
3691         if (!fcp->isp_use_gft_id)       /* User may block GFT_ID use. */
3692                 return (res);
3693
3694         isp_prt(isp, ISP_LOGDEBUG0, "Chan %d requesting GFT_ID", chan);
3695         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
3696                 isp_prt(isp, ISP_LOGERR, sacq);
3697                 return (res);
3698         }
3699
3700         if (IS_24XX(isp)) {
3701                 /* Build the CT command and execute via pass-through. */
3702                 ISP_MEMZERO(&ct, sizeof (ct));
3703                 ct.ct_revision = CT_REVISION;
3704                 ct.ct_fcs_type = CT_FC_TYPE_FC;
3705                 ct.ct_fcs_subtype = CT_FC_SUBTYPE_NS;
3706                 ct.ct_cmd_resp = SNS_GFT_ID;
3707                 ct.ct_bcnt_resid = (SNS_GFT_ID_RESP_SIZE - sizeof(ct)) / 4;
3708                 isp_put_ct_hdr(isp, &ct, (ct_hdr_t *)scp);
3709                 rp = (uint32_t *) &scp[sizeof(ct)];
3710                 ISP_IOZPUT_32(isp, portid, rp);
3711
3712                 if (isp_ct_passthru(isp, chan, sizeof(ct) + sizeof(uint32_t),
3713                     SNS_GFT_ID_RESP_SIZE)) {
3714                         FC_SCRATCH_RELEASE(isp, chan);
3715                         return (res);
3716                 }
3717         } else {
3718                 /* Build the SNS request and execute via firmware. */
3719                 ISP_MEMZERO(&rq, SNS_GXX_ID_REQ_SIZE);
3720                 rq.snscb_rblen = SNS_GFT_ID_RESP_SIZE >> 1;
3721                 rq.snscb_addr[RQRSP_ADDR0015] = DMA_WD0(fcp->isp_scdma);
3722                 rq.snscb_addr[RQRSP_ADDR1631] = DMA_WD1(fcp->isp_scdma);
3723                 rq.snscb_addr[RQRSP_ADDR3247] = DMA_WD2(fcp->isp_scdma);
3724                 rq.snscb_addr[RQRSP_ADDR4863] = DMA_WD3(fcp->isp_scdma);
3725                 rq.snscb_sblen = 6;
3726                 rq.snscb_cmd = SNS_GFT_ID;
3727                 rq.snscb_mword_div_2 = (SNS_GFT_ID_RESP_SIZE - sizeof(ct)) / 4;
3728                 rq.snscb_portid = portid;
3729                 isp_put_gxx_id_request(isp, &rq, (sns_gxx_id_req_t *)scp);
3730
3731                 if (isp_ct_sns(isp, chan, sizeof(rq), SNS_GFT_ID_RESP_SIZE)) {
3732                         FC_SCRATCH_RELEASE(isp, chan);
3733                         return (res);
3734                 }
3735         }
3736
3737         isp_get_gft_id_response(isp, (sns_gft_id_rsp_t *)scp, &rsp);
3738         if (rsp.snscb_cthdr.ct_cmd_resp == LS_ACC) {
3739                 for (i = 0; i < 8; i++) {
3740                         if (rsp.snscb_fc4_types[i] != 0) {
3741                                 res = 0;
3742                                 break;
3743                         }
3744                 }
3745                 if (((rsp.snscb_fc4_types[FC4_SCSI / 32] >>
3746                     (FC4_SCSI % 32)) & 0x01) != 0)
3747                         res = 1;
3748         }
3749         FC_SCRATCH_RELEASE(isp, chan);
3750         isp_prt(isp, ISP_LOGDEBUG0, "Chan %d GFT_ID result is %d", chan, res);
3751         return (res);
3752 }
3753
3754 static int
3755 isp_scan_fabric(ispsoftc_t *isp, int chan)
3756 {
3757         fcparam *fcp = FCPARAM(isp, chan);
3758         fcportdb_t *lp;
3759         uint32_t portid;
3760         uint16_t nphdl;
3761         isp_pdb_t pdb;
3762         int portidx, portlim, r;
3763         sns_gid_xx_rsp_t *rs;
3764
3765         if (fcp->isp_loopstate < LOOP_LSCAN_DONE)
3766                 return (-1);
3767         if (fcp->isp_loopstate >= LOOP_FSCAN_DONE)
3768                 return (0);
3769
3770         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC fabric scan", chan);
3771         fcp->isp_loopstate = LOOP_SCANNING_FABRIC;
3772         if (!TOPO_IS_FABRIC(fcp->isp_topo)) {
3773                 fcp->isp_loopstate = LOOP_FSCAN_DONE;
3774                 isp_prt(isp, ISP_LOG_SANCFG,
3775                     "Chan %d FC fabric scan done (no fabric)", chan);
3776                 return (0);
3777         }
3778
3779         if (fcp->isp_loopstate < LOOP_SCANNING_FABRIC) {
3780 abort:
3781                 FC_SCRATCH_RELEASE(isp, chan);
3782                 isp_prt(isp, ISP_LOG_SANCFG,
3783                     "Chan %d FC fabric scan aborted", chan);
3784                 return (1);
3785         }
3786
3787         /*
3788          * Make sure we still are logged into the fabric controller.
3789          */
3790         nphdl = IS_24XX(isp) ? NPH_FL_ID : FL_ID;
3791         r = isp_getpdb(isp, chan, nphdl, &pdb);
3792         if ((r & 0xffff) == MBOX_NOT_LOGGED_IN) {
3793                 isp_dump_chip_portdb(isp, chan);
3794         }
3795         if (r) {
3796                 fcp->isp_loopstate = LOOP_LTEST_DONE;
3797 fail:
3798                 isp_prt(isp, ISP_LOG_SANCFG,
3799                     "Chan %d FC fabric scan done (bad)", chan);
3800                 return (-1);
3801         }
3802
3803         /* Get list of port IDs from SNS. */
3804         r = isp_gid_pt(isp, chan);
3805         if (fcp->isp_loopstate < LOOP_SCANNING_FABRIC)
3806                 goto abort;
3807         if (r > 0) {
3808                 fcp->isp_loopstate = LOOP_FSCAN_DONE;
3809                 return (-1);
3810         } else if (r < 0) {
3811                 fcp->isp_loopstate = LOOP_LTEST_DONE;   /* try again */
3812                 return (-1);
3813         }
3814
3815         rs = (sns_gid_xx_rsp_t *) fcp->isp_scanscratch;
3816         if (fcp->isp_loopstate < LOOP_SCANNING_FABRIC)
3817                 goto abort;
3818         if (rs->snscb_cthdr.ct_cmd_resp != LS_ACC) {
3819                 int level;
3820                 /* FC-4 Type and Port Type not registered are not errors. */
3821                 if (rs->snscb_cthdr.ct_reason == 9 &&
3822                     (rs->snscb_cthdr.ct_explanation == 0x07 ||
3823                      rs->snscb_cthdr.ct_explanation == 0x0a)) {
3824                         level = ISP_LOG_SANCFG;
3825                 } else {
3826                         level = ISP_LOGWARN;
3827                 }
3828                 isp_prt(isp, level, "Chan %d Fabric Nameserver rejected GID_PT"
3829                     " (Reason=0x%x Expl=0x%x)", chan,
3830                     rs->snscb_cthdr.ct_reason,
3831                     rs->snscb_cthdr.ct_explanation);
3832                 fcp->isp_loopstate = LOOP_FSCAN_DONE;
3833                 return (-1);
3834         }
3835
3836         /* Check our buffer was big enough to get the full list. */
3837         for (portidx = 0; portidx < NGENT-1; portidx++) {
3838                 if (rs->snscb_ports[portidx].control & 0x80)
3839                         break;
3840         }
3841         if ((rs->snscb_ports[portidx].control & 0x80) == 0) {
3842                 isp_prt(isp, ISP_LOGWARN,
3843                     "fabric too big for scratch area: increase ISP_FC_SCRLEN");
3844         }
3845         portlim = portidx + 1;
3846         isp_prt(isp, ISP_LOG_SANCFG,
3847             "Chan %d Got %d ports back from name server", chan, portlim);
3848
3849         /* Go through the list and remove duplicate port ids. */
3850         for (portidx = 0; portidx < portlim; portidx++) {
3851                 int npidx;
3852
3853                 portid =
3854                     ((rs->snscb_ports[portidx].portid[0]) << 16) |
3855                     ((rs->snscb_ports[portidx].portid[1]) << 8) |
3856                     ((rs->snscb_ports[portidx].portid[2]));
3857
3858                 for (npidx = portidx + 1; npidx < portlim; npidx++) {
3859                         uint32_t new_portid =
3860                             ((rs->snscb_ports[npidx].portid[0]) << 16) |
3861                             ((rs->snscb_ports[npidx].portid[1]) << 8) |
3862                             ((rs->snscb_ports[npidx].portid[2]));
3863                         if (new_portid == portid) {
3864                                 break;
3865                         }
3866                 }
3867
3868                 if (npidx < portlim) {
3869                         rs->snscb_ports[npidx].portid[0] = 0;
3870                         rs->snscb_ports[npidx].portid[1] = 0;
3871                         rs->snscb_ports[npidx].portid[2] = 0;
3872                         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d removing duplicate PortID 0x%06x entry from list", chan, portid);
3873                 }
3874         }
3875
3876         /*
3877          * We now have a list of Port IDs for all FC4 SCSI devices
3878          * that the Fabric Name server knows about.
3879          *
3880          * For each entry on this list go through our port database looking
3881          * for probational entries- if we find one, then an old entry is
3882          * maybe still this one. We get some information to find out.
3883          *
3884          * Otherwise, it's a new fabric device, and we log into it
3885          * (unconditionally). After searching the entire database
3886          * again to make sure that we never ever ever ever have more
3887          * than one entry that has the same PortID or the same
3888          * WWNN/WWPN duple, we enter the device into our database.
3889          */
3890         isp_mark_portdb(isp, chan);
3891         for (portidx = 0; portidx < portlim; portidx++) {
3892                 portid = ((rs->snscb_ports[portidx].portid[0]) << 16) |
3893                          ((rs->snscb_ports[portidx].portid[1]) << 8) |
3894                          ((rs->snscb_ports[portidx].portid[2]));
3895                 isp_prt(isp, ISP_LOG_SANCFG,
3896                     "Chan %d Checking fabric port 0x%06x", chan, portid);
3897                 if (portid == 0) {
3898                         isp_prt(isp, ISP_LOG_SANCFG,
3899                             "Chan %d Port at idx %d is zero",
3900                             chan, portidx);
3901                         continue;
3902                 }
3903                 if (portid == fcp->isp_portid) {
3904                         isp_prt(isp, ISP_LOG_SANCFG,
3905                             "Chan %d Port 0x%06x is our", chan, portid);
3906                         continue;
3907                 }
3908
3909                 /* Now search the entire port database for the same portid. */
3910                 if (isp_find_pdb_by_portid(isp, chan, portid, &lp)) {
3911                         if (!lp->probational) {
3912                                 isp_prt(isp, ISP_LOGERR,
3913                                     "Chan %d Port 0x%06x@0x%04x [%d] is not probational (0x%x)",
3914                                     chan, lp->portid, lp->handle,
3915                                     FC_PORTDB_TGT(isp, chan, lp), lp->state);
3916                                 isp_dump_portdb(isp, chan);
3917                                 goto fail;
3918                         }
3919
3920                         if (lp->state == FC_PORTDB_STATE_ZOMBIE)
3921                                 goto relogin;
3922
3923                         /*
3924                          * See if we're still logged into it.
3925                          *
3926                          * If we aren't, mark it as a dead device and
3927                          * leave the new portid in the database entry
3928                          * for somebody further along to decide what to
3929                          * do (policy choice).
3930                          *
3931                          * If we are, check to see if it's the same
3932                          * device still (it should be). If for some
3933                          * reason it isn't, mark it as a changed device
3934                          * and leave the new portid and role in the
3935                          * database entry for somebody further along to
3936                          * decide what to do (policy choice).
3937                          */
3938                         r = isp_getpdb(isp, chan, lp->handle, &pdb);
3939                         if (fcp->isp_loopstate < LOOP_SCANNING_FABRIC)
3940                                 goto abort;
3941                         if (r != 0) {
3942                                 lp->state = FC_PORTDB_STATE_DEAD;
3943                                 isp_prt(isp, ISP_LOG_SANCFG,
3944                                     "Chan %d Port 0x%06x handle 0x%x is dead (%d)",
3945                                     chan, portid, lp->handle, r);
3946                                 goto relogin;
3947                         }
3948
3949                         isp_pdb_add_update(isp, chan, &pdb);
3950                         continue;
3951                 }
3952
3953 relogin:
3954                 if ((fcp->role & ISP_ROLE_INITIATOR) == 0) {
3955                         isp_prt(isp, ISP_LOG_SANCFG,
3956                             "Chan %d Port 0x%06x is not logged in", chan, portid);
3957                         continue;
3958                 }
3959
3960                 r = isp_gff_id(isp, chan, portid);
3961                 if (r == 0) {
3962                         isp_prt(isp, ISP_LOG_SANCFG,
3963                             "Chan %d Port 0x%06x is not an FCP target", chan, portid);
3964                         continue;
3965                 }
3966                 if (r < 0)
3967                         r = isp_gft_id(isp, chan, portid);
3968                 if (r == 0) {
3969                         isp_prt(isp, ISP_LOG_SANCFG,
3970                             "Chan %d Port 0x%06x is not FCP", chan, portid);
3971                         continue;
3972                 }
3973
3974                 if (isp_login_device(isp, chan, portid, &pdb,
3975                     &FCPARAM(isp, 0)->isp_lasthdl)) {
3976                         if (fcp->isp_loopstate < LOOP_SCANNING_FABRIC)
3977                                 goto abort;
3978                         continue;
3979                 }
3980
3981                 isp_pdb_add_update(isp, chan, &pdb);
3982         }
3983
3984         if (fcp->isp_loopstate < LOOP_SCANNING_FABRIC)
3985                 goto abort;
3986         fcp->isp_loopstate = LOOP_FSCAN_DONE;
3987         isp_prt(isp, ISP_LOG_SANCFG, "Chan %d FC fabric scan done", chan);
3988         return (0);
3989 }
3990
3991 /*
3992  * Find an unused handle and try and use to login to a port.
3993  */
3994 static int
3995 isp_login_device(ispsoftc_t *isp, int chan, uint32_t portid, isp_pdb_t *p, uint16_t *ohp)
3996 {
3997         int lim, i, r;
3998         uint16_t handle;
3999
4000         if (ISP_CAP_2KLOGIN(isp)) {
4001                 lim = NPH_MAX_2K;
4002         } else {
4003                 lim = NPH_MAX;
4004         }
4005
4006         handle = isp_next_handle(isp, ohp);
4007         for (i = 0; i < lim; i++) {
4008                 if (FCPARAM(isp, chan)->isp_loopstate != LOOP_SCANNING_FABRIC)
4009                         return (-1);
4010
4011                 /* Check if this handle is free. */
4012                 r = isp_getpdb(isp, chan, handle, p);
4013                 if (r == 0) {
4014                         if (p->portid != portid) {
4015                                 /* This handle is busy, try next one. */
4016                                 handle = isp_next_handle(isp, ohp);
4017                                 continue;
4018                         }
4019                         break;
4020                 }
4021                 if (FCPARAM(isp, chan)->isp_loopstate != LOOP_SCANNING_FABRIC)
4022                         return (-1);
4023
4024                 /*
4025                  * Now try and log into the device
4026                  */
4027                 r = isp_plogx(isp, chan, handle, portid, PLOGX_FLG_CMD_PLOGI);
4028                 if (r == 0) {
4029                         break;
4030                 } else if ((r & 0xffff) == MBOX_PORT_ID_USED) {
4031                         /*
4032                          * If we get here, then the firmwware still thinks we're logged into this device, but with a different
4033                          * handle. We need to break that association. We used to try and just substitute the handle, but then
4034                          * failed to get any data via isp_getpdb (below).
4035                          */
4036                         if (isp_plogx(isp, chan, r >> 16, portid, PLOGX_FLG_CMD_LOGO | PLOGX_FLG_IMPLICIT | PLOGX_FLG_FREE_NPHDL)) {
4037                                 isp_prt(isp, ISP_LOGERR, "baw... logout of %x failed", r >> 16);
4038                         }
4039                         if (FCPARAM(isp, chan)->isp_loopstate != LOOP_SCANNING_FABRIC)
4040                                 return (-1);
4041                         r = isp_plogx(isp, chan, handle, portid, PLOGX_FLG_CMD_PLOGI);
4042                         if (r != 0)
4043                                 i = lim;
4044                         break;
4045                 } else if ((r & 0xffff) == MBOX_LOOP_ID_USED) {
4046                         /* Try the next handle. */
4047                         handle = isp_next_handle(isp, ohp);
4048                 } else {
4049                         /* Give up. */
4050                         i = lim;
4051                         break;
4052                 }
4053         }
4054
4055         if (i == lim) {
4056                 isp_prt(isp, ISP_LOGWARN, "Chan %d PLOGI 0x%06x failed", chan, portid);
4057                 return (-1);
4058         }
4059
4060         /*
4061          * If we successfully logged into it, get the PDB for it
4062          * so we can crosscheck that it is still what we think it
4063          * is and that we also have the role it plays
4064          */
4065         r = isp_getpdb(isp, chan, handle, p);
4066         if (r != 0) {
4067                 isp_prt(isp, ISP_LOGERR, "Chan %d new device 0x%06x@0x%x disappeared", chan, portid, handle);
4068                 return (-1);
4069         }
4070
4071         if (p->handle != handle || p->portid != portid) {
4072                 isp_prt(isp, ISP_LOGERR, "Chan %d new device 0x%06x@0x%x changed (0x%06x@0x%0x)",
4073                     chan, portid, handle, p->portid, p->handle);
4074                 return (-1);
4075         }
4076         return (0);
4077 }
4078
4079 static int
4080 isp_send_change_request(ispsoftc_t *isp, int chan)
4081 {
4082         mbreg_t mbs;
4083
4084         MBSINIT(&mbs, MBOX_SEND_CHANGE_REQUEST, MBLOGALL, 500000);
4085         mbs.param[1] = 0x03;
4086         mbs.param[9] = chan;
4087         isp_mboxcmd(isp, &mbs);
4088         if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
4089                 return (0);
4090         } else {
4091                 isp_prt(isp, ISP_LOGWARN, "Chan %d Send Change Request: 0x%x",
4092                     chan, mbs.param[0]);
4093                 return (-1);
4094         }
4095 }
4096
4097 static int
4098 isp_register_fc4_type(ispsoftc_t *isp, int chan)
4099 {
4100         fcparam *fcp = FCPARAM(isp, chan);
4101         rft_id_t rp;
4102         ct_hdr_t *ct = &rp.rftid_hdr;
4103         uint8_t local[SNS_RFT_ID_REQ_SIZE];
4104         sns_screq_t *reqp = (sns_screq_t *) local;
4105         uint8_t *scp = fcp->isp_scratch;
4106
4107         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
4108                 isp_prt(isp, ISP_LOGERR, sacq);
4109                 return (-1);
4110         }
4111
4112         if (IS_24XX(isp)) {
4113                 /* Build the CT command and execute via pass-through. */
4114                 ISP_MEMZERO(&rp, sizeof(rp));
4115                 ct->ct_revision = CT_REVISION;
4116                 ct->ct_fcs_type = CT_FC_TYPE_FC;
4117                 ct->ct_fcs_subtype = CT_FC_SUBTYPE_NS;
4118                 ct->ct_cmd_resp = SNS_RFT_ID;
4119                 ct->ct_bcnt_resid = (sizeof (rft_id_t) - sizeof (ct_hdr_t)) >> 2;
4120                 rp.rftid_portid[0] = fcp->isp_portid >> 16;
4121                 rp.rftid_portid[1] = fcp->isp_portid >> 8;
4122                 rp.rftid_portid[2] = fcp->isp_portid;
4123                 rp.rftid_fc4types[FC4_SCSI >> 5] = 1 << (FC4_SCSI & 0x1f);
4124                 isp_put_rft_id(isp, &rp, (rft_id_t *)scp);
4125
4126                 if (isp_ct_passthru(isp, chan, sizeof(rft_id_t), sizeof(ct_hdr_t))) {
4127                         FC_SCRATCH_RELEASE(isp, chan);
4128                         return (-1);
4129                 }
4130         } else {
4131                 /* Build the SNS request and execute via firmware. */
4132                 ISP_MEMZERO((void *) reqp, SNS_RFT_ID_REQ_SIZE);
4133                 reqp->snscb_rblen = sizeof (ct_hdr_t) >> 1;
4134                 reqp->snscb_addr[RQRSP_ADDR0015] = DMA_WD0(fcp->isp_scdma);
4135                 reqp->snscb_addr[RQRSP_ADDR1631] = DMA_WD1(fcp->isp_scdma);
4136                 reqp->snscb_addr[RQRSP_ADDR3247] = DMA_WD2(fcp->isp_scdma);
4137                 reqp->snscb_addr[RQRSP_ADDR4863] = DMA_WD3(fcp->isp_scdma);
4138                 reqp->snscb_sblen = 22;
4139                 reqp->snscb_data[0] = SNS_RFT_ID;
4140                 reqp->snscb_data[4] = fcp->isp_portid & 0xffff;
4141                 reqp->snscb_data[5] = (fcp->isp_portid >> 16) & 0xff;
4142                 reqp->snscb_data[6] = (1 << FC4_SCSI);
4143                 isp_put_sns_request(isp, reqp, (sns_screq_t *)scp);
4144
4145                 if (isp_ct_sns(isp, chan, SNS_RFT_ID_REQ_SIZE, sizeof(ct_hdr_t))) {
4146                         FC_SCRATCH_RELEASE(isp, chan);
4147                         return (-1);
4148                 }
4149         }
4150
4151         isp_get_ct_hdr(isp, (ct_hdr_t *) scp, ct);
4152         FC_SCRATCH_RELEASE(isp, chan);
4153         if (ct->ct_cmd_resp == LS_RJT) {
4154                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1, "Chan %d Register FC4 Type rejected", chan);
4155                 return (-1);
4156         } else if (ct->ct_cmd_resp == LS_ACC) {
4157                 isp_prt(isp, ISP_LOG_SANCFG, "Chan %d Register FC4 Type accepted", chan);
4158         } else {
4159                 isp_prt(isp, ISP_LOGWARN, "Chan %d Register FC4 Type: 0x%x", chan, ct->ct_cmd_resp);
4160                 return (-1);
4161         }
4162         return (0);
4163 }
4164
4165 static int
4166 isp_register_fc4_features_24xx(ispsoftc_t *isp, int chan)
4167 {
4168         fcparam *fcp = FCPARAM(isp, chan);
4169         ct_hdr_t *ct;
4170         rff_id_t rp;
4171         uint8_t *scp = fcp->isp_scratch;
4172
4173         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
4174                 isp_prt(isp, ISP_LOGERR, sacq);
4175                 return (-1);
4176         }
4177
4178         /*
4179          * Build the CT header and command in memory.
4180          */
4181         ISP_MEMZERO(&rp, sizeof(rp));
4182         ct = &rp.rffid_hdr;
4183         ct->ct_revision = CT_REVISION;
4184         ct->ct_fcs_type = CT_FC_TYPE_FC;
4185         ct->ct_fcs_subtype = CT_FC_SUBTYPE_NS;
4186         ct->ct_cmd_resp = SNS_RFF_ID;
4187         ct->ct_bcnt_resid = (sizeof (rff_id_t) - sizeof (ct_hdr_t)) >> 2;
4188         rp.rffid_portid[0] = fcp->isp_portid >> 16;
4189         rp.rffid_portid[1] = fcp->isp_portid >> 8;
4190         rp.rffid_portid[2] = fcp->isp_portid;
4191         rp.rffid_fc4features = 0;
4192         if (fcp->role & ISP_ROLE_TARGET)
4193                 rp.rffid_fc4features |= 1;
4194         if (fcp->role & ISP_ROLE_INITIATOR)
4195                 rp.rffid_fc4features |= 2;
4196         rp.rffid_fc4type = FC4_SCSI;
4197         isp_put_rff_id(isp, &rp, (rff_id_t *)scp);
4198         if (isp->isp_dblev & ISP_LOGDEBUG1)
4199                 isp_print_bytes(isp, "CT request", sizeof(rft_id_t), scp);
4200
4201         if (isp_ct_passthru(isp, chan, sizeof(rft_id_t), sizeof(ct_hdr_t))) {
4202                 FC_SCRATCH_RELEASE(isp, chan);
4203                 return (-1);
4204         }
4205
4206         isp_get_ct_hdr(isp, (ct_hdr_t *) scp, ct);
4207         FC_SCRATCH_RELEASE(isp, chan);
4208         if (ct->ct_cmd_resp == LS_RJT) {
4209                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1,
4210                     "Chan %d Register FC4 Features rejected", chan);
4211                 return (-1);
4212         } else if (ct->ct_cmd_resp == LS_ACC) {
4213                 isp_prt(isp, ISP_LOG_SANCFG,
4214                     "Chan %d Register FC4 Features accepted", chan);
4215         } else {
4216                 isp_prt(isp, ISP_LOGWARN,
4217                     "Chan %d Register FC4 Features: 0x%x", chan, ct->ct_cmd_resp);
4218                 return (-1);
4219         }
4220         return (0);
4221 }
4222
4223 static int
4224 isp_register_port_name_24xx(ispsoftc_t *isp, int chan)
4225 {
4226         fcparam *fcp = FCPARAM(isp, chan);
4227         ct_hdr_t *ct;
4228         rspn_id_t rp;
4229         uint8_t *scp = fcp->isp_scratch;
4230         int len;
4231
4232         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
4233                 isp_prt(isp, ISP_LOGERR, sacq);
4234                 return (-1);
4235         }
4236
4237         /*
4238          * Build the CT header and command in memory.
4239          */
4240         ISP_MEMZERO(&rp, sizeof(rp));
4241         ct = &rp.rspnid_hdr;
4242         ct->ct_revision = CT_REVISION;
4243         ct->ct_fcs_type = CT_FC_TYPE_FC;
4244         ct->ct_fcs_subtype = CT_FC_SUBTYPE_NS;
4245         ct->ct_cmd_resp = SNS_RSPN_ID;
4246         rp.rspnid_portid[0] = fcp->isp_portid >> 16;
4247         rp.rspnid_portid[1] = fcp->isp_portid >> 8;
4248         rp.rspnid_portid[2] = fcp->isp_portid;
4249         rp.rspnid_length = 0;
4250         len = offsetof(rspn_id_t, rspnid_name);
4251         mtx_lock(&prison0.pr_mtx);
4252         rp.rspnid_length += sprintf(&scp[len + rp.rspnid_length],
4253             "%s", prison0.pr_hostname[0] ? prison0.pr_hostname : "FreeBSD");
4254         mtx_unlock(&prison0.pr_mtx);
4255         rp.rspnid_length += sprintf(&scp[len + rp.rspnid_length],
4256             ":%s", device_get_nameunit(isp->isp_dev));
4257         if (chan != 0) {
4258                 rp.rspnid_length += sprintf(&scp[len + rp.rspnid_length],
4259                     "/%d", chan);
4260         }
4261         len += rp.rspnid_length;
4262         ct->ct_bcnt_resid = (len - sizeof(ct_hdr_t)) >> 2;
4263         isp_put_rspn_id(isp, &rp, (rspn_id_t *)scp);
4264
4265         if (isp_ct_passthru(isp, chan, len, sizeof(ct_hdr_t))) {
4266                 FC_SCRATCH_RELEASE(isp, chan);
4267                 return (-1);
4268         }
4269
4270         isp_get_ct_hdr(isp, (ct_hdr_t *) scp, ct);
4271         FC_SCRATCH_RELEASE(isp, chan);
4272         if (ct->ct_cmd_resp == LS_RJT) {
4273                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1,
4274                     "Chan %d Register Symbolic Port Name rejected", chan);
4275                 return (-1);
4276         } else if (ct->ct_cmd_resp == LS_ACC) {
4277                 isp_prt(isp, ISP_LOG_SANCFG,
4278                     "Chan %d Register Symbolic Port Name accepted", chan);
4279         } else {
4280                 isp_prt(isp, ISP_LOGWARN,
4281                     "Chan %d Register Symbolic Port Name: 0x%x", chan, ct->ct_cmd_resp);
4282                 return (-1);
4283         }
4284         return (0);
4285 }
4286
4287 static int
4288 isp_register_node_name_24xx(ispsoftc_t *isp, int chan)
4289 {
4290         fcparam *fcp = FCPARAM(isp, chan);
4291         ct_hdr_t *ct;
4292         rsnn_nn_t rp;
4293         uint8_t *scp = fcp->isp_scratch;
4294         int len;
4295
4296         if (FC_SCRATCH_ACQUIRE(isp, chan)) {
4297                 isp_prt(isp, ISP_LOGERR, sacq);
4298                 return (-1);
4299         }
4300
4301         /*
4302          * Build the CT header and command in memory.
4303          */
4304         ISP_MEMZERO(&rp, sizeof(rp));
4305         ct = &rp.rsnnnn_hdr;
4306         ct->ct_revision = CT_REVISION;
4307         ct->ct_fcs_type = CT_FC_TYPE_FC;
4308         ct->ct_fcs_subtype = CT_FC_SUBTYPE_NS;
4309         ct->ct_cmd_resp = SNS_RSNN_NN;
4310         MAKE_NODE_NAME_FROM_WWN(rp.rsnnnn_nodename, fcp->isp_wwnn);
4311         rp.rsnnnn_length = 0;
4312         len = offsetof(rsnn_nn_t, rsnnnn_name);
4313         mtx_lock(&prison0.pr_mtx);
4314         rp.rsnnnn_length += sprintf(&scp[len + rp.rsnnnn_length],
4315             "%s", prison0.pr_hostname[0] ? prison0.pr_hostname : "FreeBSD");
4316         mtx_unlock(&prison0.pr_mtx);
4317         len += rp.rsnnnn_length;
4318         ct->ct_bcnt_resid = (len - sizeof(ct_hdr_t)) >> 2;
4319         isp_put_rsnn_nn(isp, &rp, (rsnn_nn_t *)scp);
4320
4321         if (isp_ct_passthru(isp, chan, len, sizeof(ct_hdr_t))) {
4322                 FC_SCRATCH_RELEASE(isp, chan);
4323                 return (-1);
4324         }
4325
4326         isp_get_ct_hdr(isp, (ct_hdr_t *) scp, ct);
4327         FC_SCRATCH_RELEASE(isp, chan);
4328         if (ct->ct_cmd_resp == LS_RJT) {
4329                 isp_prt(isp, ISP_LOG_SANCFG|ISP_LOG_WARN1,
4330                     "Chan %d Register Symbolic Node Name rejected", chan);
4331                 return (-1);
4332         } else if (ct->ct_cmd_resp == LS_ACC) {
4333                 isp_prt(isp, ISP_LOG_SANCFG,
4334                     "Chan %d Register Symbolic Node Name accepted", chan);
4335         } else {
4336                 isp_prt(isp, ISP_LOGWARN,
4337                     "Chan %d Register Symbolic Node Name: 0x%x", chan, ct->ct_cmd_resp);
4338                 return (-1);
4339         }
4340         return (0);
4341 }
4342
4343 static uint16_t
4344 isp_next_handle(ispsoftc_t *isp, uint16_t *ohp)
4345 {
4346         fcparam *fcp;
4347         int i, chan, wrap;
4348         uint16_t handle, minh, maxh;
4349
4350         handle = *ohp;
4351         if (ISP_CAP_2KLOGIN(isp)) {
4352                 minh = 0;
4353                 maxh = NPH_RESERVED - 1;
4354         } else {
4355                 minh = SNS_ID + 1;
4356                 maxh = NPH_MAX - 1;
4357         }
4358         wrap = 0;
4359
4360 next:
4361         if (handle == NIL_HANDLE) {
4362                 handle = minh;
4363         } else {
4364                 handle++;
4365                 if (handle > maxh) {
4366                         if (++wrap >= 2) {
4367                                 isp_prt(isp, ISP_LOGERR, "Out of port handles!");
4368                                 return (NIL_HANDLE);
4369                         }
4370                         handle = minh;
4371                 }
4372         }
4373         for (chan = 0; chan < isp->isp_nchan; chan++) {
4374                 fcp = FCPARAM(isp, chan);
4375                 if (fcp->role == ISP_ROLE_NONE)
4376                         continue;
4377                 for (i = 0; i < MAX_FC_TARG; i++) {
4378                         if (fcp->portdb[i].state != FC_PORTDB_STATE_NIL &&
4379                             fcp->portdb[i].handle == handle)
4380                                 goto next;
4381                 }
4382         }
4383         *ohp = handle;
4384         return (handle);
4385 }
4386
4387 /*
4388  * Start a command. Locking is assumed done in the caller.
4389  */
4390
4391 int
4392 isp_start(XS_T *xs)
4393 {
4394         ispsoftc_t *isp;
4395         uint32_t cdblen;
4396         uint8_t local[QENTRY_LEN];
4397         ispreq_t *reqp;
4398         void *cdbp, *qep;
4399         uint16_t *tptr;
4400         fcportdb_t *lp;
4401         int target, dmaresult;
4402
4403         XS_INITERR(xs);
4404         isp = XS_ISP(xs);
4405
4406         /*
4407          * Check command CDB length, etc.. We really are limited to 16 bytes
4408          * for Fibre Channel, but can do up to 44 bytes in parallel SCSI,
4409          * but probably only if we're running fairly new firmware (we'll
4410          * let the old f/w choke on an extended command queue entry).
4411          */
4412
4413         if (XS_CDBLEN(xs) > (IS_FC(isp)? 16 : 44) || XS_CDBLEN(xs) == 0) {
4414                 isp_prt(isp, ISP_LOGERR, "unsupported cdb length (%d, CDB[0]=0x%x)", XS_CDBLEN(xs), XS_CDBP(xs)[0] & 0xff);
4415                 XS_SETERR(xs, HBA_REQINVAL);
4416                 return (CMD_COMPLETE);
4417         }
4418
4419         /*
4420          * Translate the target to device handle as appropriate, checking
4421          * for correct device state as well.
4422          */
4423         target = XS_TGT(xs);
4424         if (IS_FC(isp)) {
4425                 fcparam *fcp = FCPARAM(isp, XS_CHANNEL(xs));
4426
4427                 if ((fcp->role & ISP_ROLE_INITIATOR) == 0) {
4428                         isp_prt(isp, ISP_LOG_WARN1,
4429                             "%d.%d.%jx I am not an initiator",
4430                             XS_CHANNEL(xs), target, (uintmax_t)XS_LUN(xs));
4431                         XS_SETERR(xs, HBA_SELTIMEOUT);
4432                         return (CMD_COMPLETE);
4433                 }
4434
4435                 if (isp->isp_state != ISP_RUNSTATE) {
4436                         isp_prt(isp, ISP_LOGERR, "Adapter not at RUNSTATE");
4437                         XS_SETERR(xs, HBA_BOTCH);
4438                         return (CMD_COMPLETE);
4439                 }
4440
4441                 isp_prt(isp, ISP_LOGDEBUG2, "XS_TGT(xs)=%d", target);
4442                 lp = &fcp->portdb[target];
4443                 if (target < 0 || target >= MAX_FC_TARG ||
4444                     lp->is_target == 0) {
4445                         XS_SETERR(xs, HBA_SELTIMEOUT);
4446                         return (CMD_COMPLETE);
4447                 }
4448                 if (fcp->isp_loopstate != LOOP_READY) {
4449                         isp_prt(isp, ISP_LOGDEBUG1,
4450                             "%d.%d.%jx loop is not ready",
4451                             XS_CHANNEL(xs), target, (uintmax_t)XS_LUN(xs));
4452                         return (CMD_RQLATER);
4453                 }
4454                 if (lp->state == FC_PORTDB_STATE_ZOMBIE) {
4455                         isp_prt(isp, ISP_LOGDEBUG1,
4456                             "%d.%d.%jx target zombie",
4457                             XS_CHANNEL(xs), target, (uintmax_t)XS_LUN(xs));
4458                         return (CMD_RQLATER);
4459                 }
4460                 if (lp->state != FC_PORTDB_STATE_VALID) {
4461                         isp_prt(isp, ISP_LOGDEBUG1,
4462                             "%d.%d.%jx bad db port state 0x%x",
4463                             XS_CHANNEL(xs), target, (uintmax_t)XS_LUN(xs), lp->state);
4464                         XS_SETERR(xs, HBA_SELTIMEOUT);
4465                         return (CMD_COMPLETE);
4466                 }
4467         } else {
4468                 sdparam *sdp = SDPARAM(isp, XS_CHANNEL(xs));
4469                 if (isp->isp_state != ISP_RUNSTATE) {
4470                         isp_prt(isp, ISP_LOGERR, "Adapter not at RUNSTATE");
4471                         XS_SETERR(xs, HBA_BOTCH);
4472                         return (CMD_COMPLETE);
4473                 }
4474
4475                 if (sdp->update) {
4476                         isp_spi_update(isp, XS_CHANNEL(xs));
4477                 }
4478                 lp = NULL;
4479         }
4480
4481  start_again:
4482
4483         qep = isp_getrqentry(isp);
4484         if (qep == NULL) {
4485                 isp_prt(isp, ISP_LOG_WARN1, "Request Queue Overflow");
4486                 XS_SETERR(xs, HBA_BOTCH);
4487                 return (CMD_EAGAIN);
4488         }
4489         XS_SETERR(xs, HBA_NOERROR);
4490
4491         /*
4492          * Now see if we need to synchronize the ISP with respect to anything.
4493          * We do dual duty here (cough) for synchronizing for buses other
4494          * than which we got here to send a command to.
4495          */
4496         reqp = (ispreq_t *) local;
4497         ISP_MEMZERO(local, QENTRY_LEN);
4498         if (ISP_TST_SENDMARKER(isp, XS_CHANNEL(xs))) {
4499                 if (IS_24XX(isp)) {
4500                         isp_marker_24xx_t *m = (isp_marker_24xx_t *) reqp;
4501                         m->mrk_header.rqs_entry_count = 1;
4502                         m->mrk_header.rqs_entry_type = RQSTYPE_MARKER;
4503                         m->mrk_modifier = SYNC_ALL;
4504                         m->mrk_vphdl = XS_CHANNEL(xs);
4505                         isp_put_marker_24xx(isp, m, qep);
4506                 } else {
4507                         isp_marker_t *m = (isp_marker_t *) reqp;
4508                         m->mrk_header.rqs_entry_count = 1;
4509                         m->mrk_header.rqs_entry_type = RQSTYPE_MARKER;
4510                         m->mrk_target = (XS_CHANNEL(xs) << 7);  /* bus # */
4511                         m->mrk_modifier = SYNC_ALL;
4512                         isp_put_marker(isp, m, qep);
4513                 }
4514                 ISP_SYNC_REQUEST(isp);
4515                 ISP_SET_SENDMARKER(isp, XS_CHANNEL(xs), 0);
4516                 goto start_again;
4517         }
4518
4519         reqp->req_header.rqs_entry_count = 1;
4520
4521         /*
4522          * Select and install Header Code.
4523          * Note that it might be overridden before going out
4524          * if we're on a 64 bit platform. The lower level
4525          * code (isp_send_cmd) will select the appropriate
4526          * 64 bit variant if it needs to.
4527          */
4528         if (IS_24XX(isp)) {
4529                 reqp->req_header.rqs_entry_type = RQSTYPE_T7RQS;
4530         } else if (IS_FC(isp)) {
4531                 reqp->req_header.rqs_entry_type = RQSTYPE_T2RQS;
4532         } else {
4533                 if (XS_CDBLEN(xs) > 12) {
4534                         reqp->req_header.rqs_entry_type = RQSTYPE_CMDONLY;
4535                 } else {
4536                         reqp->req_header.rqs_entry_type = RQSTYPE_REQUEST;
4537                 }
4538         }
4539
4540         /*
4541          * Set task attributes
4542          */
4543         if (IS_24XX(isp)) {
4544                 int ttype;
4545                 if (XS_TAG_P(xs)) {
4546                         ttype = XS_TAG_TYPE(xs);
4547                 } else {
4548                         ttype = REQFLAG_STAG;
4549                 }
4550                 if (ttype == REQFLAG_OTAG) {
4551                         ttype = FCP_CMND_TASK_ATTR_ORDERED;
4552                 } else if (ttype == REQFLAG_HTAG) {
4553                         ttype = FCP_CMND_TASK_ATTR_HEAD;
4554                 } else {
4555                         ttype = FCP_CMND_TASK_ATTR_SIMPLE;
4556                 }
4557                 ((ispreqt7_t *)reqp)->req_task_attribute = ttype |
4558                     ((XS_PRIORITY(xs) << FCP_CMND_PRIO_SHIFT) &
4559                      FCP_CMND_PRIO_MASK);
4560         } else if (IS_FC(isp)) {
4561                 /*
4562                  * See comment in isp_intr_respq
4563                  */
4564                 /* XS_SET_RESID(xs, 0); */
4565
4566                 /*
4567                  * Fibre Channel always requires some kind of tag.
4568                  * The Qlogic drivers seem be happy not to use a tag,
4569                  * but this breaks for some devices (IBM drives).
4570                  */
4571                 if (XS_TAG_P(xs)) {
4572                         ((ispreqt2_t *)reqp)->req_flags = XS_TAG_TYPE(xs);
4573                 } else {
4574                         ((ispreqt2_t *)reqp)->req_flags = REQFLAG_STAG;
4575                 }
4576         } else {
4577                 sdparam *sdp = SDPARAM(isp, XS_CHANNEL(xs));
4578                 if ((sdp->isp_devparam[target].actv_flags & DPARM_TQING) && XS_TAG_P(xs)) {
4579                         reqp->req_flags = XS_TAG_TYPE(xs);
4580                 }
4581         }
4582
4583         /*
4584          * NB: we do not support long CDBs (yet)
4585          */
4586         cdblen = XS_CDBLEN(xs);
4587
4588         if (IS_SCSI(isp)) {
4589                 if (cdblen > sizeof (reqp->req_cdb)) {
4590                         isp_prt(isp, ISP_LOGERR, "Command Length %u too long for this chip", cdblen);
4591                         XS_SETERR(xs, HBA_REQINVAL);
4592                         return (CMD_COMPLETE);
4593                 }
4594                 reqp->req_target = target | (XS_CHANNEL(xs) << 7);
4595                 reqp->req_lun_trn = XS_LUN(xs);
4596                 reqp->req_cdblen = cdblen;
4597                 tptr = &reqp->req_time;
4598                 cdbp = reqp->req_cdb;
4599         } else if (IS_24XX(isp)) {
4600                 ispreqt7_t *t7 = (ispreqt7_t *)local;
4601
4602                 if (cdblen > sizeof (t7->req_cdb)) {
4603                         isp_prt(isp, ISP_LOGERR, "Command Length %u too long for this chip", cdblen);
4604                         XS_SETERR(xs, HBA_REQINVAL);
4605                         return (CMD_COMPLETE);
4606                 }
4607
4608                 t7->req_nphdl = lp->handle;
4609                 t7->req_tidlo = lp->portid;
4610                 t7->req_tidhi = lp->portid >> 16;
4611                 t7->req_vpidx = ISP_GET_VPIDX(isp, XS_CHANNEL(xs));
4612                 be64enc(t7->req_lun, CAM_EXTLUN_BYTE_SWIZZLE(XS_LUN(xs)));
4613                 if (FCPARAM(isp, XS_CHANNEL(xs))->fctape_enabled && (lp->prli_word3 & PRLI_WD3_RETRY)) {
4614                         if (FCP_NEXT_CRN(isp, &t7->req_crn, xs)) {
4615                                 isp_prt(isp, ISP_LOG_WARN1,
4616                                     "%d.%d.%jx cannot generate next CRN",
4617                                     XS_CHANNEL(xs), target, (uintmax_t)XS_LUN(xs));
4618                                 XS_SETERR(xs, HBA_BOTCH);
4619                                 return (CMD_EAGAIN);
4620                         }
4621                 }
4622                 tptr = &t7->req_time;
4623                 cdbp = t7->req_cdb;
4624         } else {
4625                 ispreqt2_t *t2 = (ispreqt2_t *)local;
4626
4627                 if (cdblen > sizeof t2->req_cdb) {
4628                         isp_prt(isp, ISP_LOGERR, "Command Length %u too long for this chip", cdblen);
4629                         XS_SETERR(xs, HBA_REQINVAL);
4630                         return (CMD_COMPLETE);
4631                 }
4632                 if (FCPARAM(isp, XS_CHANNEL(xs))->fctape_enabled && (lp->prli_word3 & PRLI_WD3_RETRY)) {
4633                         if (FCP_NEXT_CRN(isp, &t2->req_crn, xs)) {
4634                                 isp_prt(isp, ISP_LOG_WARN1,
4635                                     "%d.%d.%jx cannot generate next CRN",
4636                                     XS_CHANNEL(xs), target, (uintmax_t)XS_LUN(xs));
4637                                 XS_SETERR(xs, HBA_BOTCH);
4638                                 return (CMD_EAGAIN);
4639                         }
4640                 }
4641                 if (ISP_CAP_2KLOGIN(isp)) {
4642                         ispreqt2e_t *t2e = (ispreqt2e_t *)local;
4643                         t2e->req_target = lp->handle;
4644                         t2e->req_scclun = XS_LUN(xs);
4645                         tptr = &t2e->req_time;
4646                         cdbp = t2e->req_cdb;
4647                 } else if (ISP_CAP_SCCFW(isp)) {
4648                         t2->req_target = lp->handle;
4649                         t2->req_scclun = XS_LUN(xs);
4650                         tptr = &t2->req_time;
4651                         cdbp = t2->req_cdb;
4652                 } else {
4653                         t2->req_target = lp->handle;
4654                         t2->req_lun_trn = XS_LUN(xs);
4655                         tptr = &t2->req_time;
4656                         cdbp = t2->req_cdb;
4657                 }
4658         }
4659         *tptr = XS_TIME(xs);
4660         ISP_MEMCPY(cdbp, XS_CDBP(xs), cdblen);
4661
4662         /* Whew. Thankfully the same for type 7 requests */
4663         reqp->req_handle = isp_allocate_handle(isp, xs, ISP_HANDLE_INITIATOR);
4664         if (reqp->req_handle == 0) {
4665                 isp_prt(isp, ISP_LOG_WARN1, "out of xflist pointers");
4666                 XS_SETERR(xs, HBA_BOTCH);
4667                 return (CMD_EAGAIN);
4668         }
4669
4670         /*
4671          * Set up DMA and/or do any platform dependent swizzling of the request entry
4672          * so that the Qlogic F/W understands what is being asked of it.
4673          *
4674          * The callee is responsible for adding all requests at this point.
4675          */
4676         dmaresult = ISP_DMASETUP(isp, xs, reqp);
4677         if (dmaresult != CMD_QUEUED) {
4678                 isp_destroy_handle(isp, reqp->req_handle);
4679                 /*
4680                  * dmasetup sets actual error in packet, and
4681                  * return what we were given to return.
4682                  */
4683                 return (dmaresult);
4684         }
4685         isp_xs_prt(isp, xs, ISP_LOGDEBUG0, "START cmd cdb[0]=0x%x datalen %ld", XS_CDBP(xs)[0], (long) XS_XFRLEN(xs));
4686         return (CMD_QUEUED);
4687 }
4688
4689 /*
4690  * isp control
4691  * Locks (ints blocked) assumed held.
4692  */
4693
4694 int
4695 isp_control(ispsoftc_t *isp, ispctl_t ctl, ...)
4696 {
4697         XS_T *xs;
4698         mbreg_t *mbr, mbs;
4699         int chan, tgt;
4700         uint32_t handle;
4701         va_list ap;
4702
4703         switch (ctl) {
4704         case ISPCTL_RESET_BUS:
4705                 /*
4706                  * Issue a bus reset.
4707                  */
4708                 if (IS_24XX(isp)) {
4709                         isp_prt(isp, ISP_LOGERR, "BUS RESET NOT IMPLEMENTED");
4710                         break;
4711                 } else if (IS_FC(isp)) {
4712                         mbs.param[1] = 10;
4713                         chan = 0;
4714                 } else {
4715                         va_start(ap, ctl);
4716                         chan = va_arg(ap, int);
4717                         va_end(ap);
4718                         mbs.param[1] = SDPARAM(isp, chan)->isp_bus_reset_delay;
4719                         if (mbs.param[1] < 2) {
4720                                 mbs.param[1] = 2;
4721                         }
4722                         mbs.param[2] = chan;
4723                 }
4724                 MBSINIT(&mbs, MBOX_BUS_RESET, MBLOGALL, 0);
4725                 ISP_SET_SENDMARKER(isp, chan, 1);
4726                 isp_mboxcmd(isp, &mbs);
4727                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4728                         break;
4729                 }
4730                 isp_prt(isp, ISP_LOGINFO, "driver initiated bus reset of bus %d", chan);
4731                 return (0);
4732
4733         case ISPCTL_RESET_DEV:
4734                 va_start(ap, ctl);
4735                 chan = va_arg(ap, int);
4736                 tgt = va_arg(ap, int);
4737                 va_end(ap);
4738                 if (IS_24XX(isp)) {
4739                         uint8_t local[QENTRY_LEN];
4740                         isp24xx_tmf_t *tmf;
4741                         isp24xx_statusreq_t *sp;
4742                         fcparam *fcp = FCPARAM(isp, chan);
4743                         fcportdb_t *lp;
4744
4745                         if (tgt < 0 || tgt >= MAX_FC_TARG) {
4746                                 isp_prt(isp, ISP_LOGWARN, "Chan %d trying to reset bad target %d", chan, tgt);
4747                                 break;
4748                         }
4749                         lp = &fcp->portdb[tgt];
4750                         if (lp->is_target == 0 ||
4751                             lp->state != FC_PORTDB_STATE_VALID) {
4752                                 isp_prt(isp, ISP_LOGWARN, "Chan %d abort of no longer valid target %d", chan, tgt);
4753                                 break;
4754                         }
4755
4756                         tmf = (isp24xx_tmf_t *) local;
4757                         ISP_MEMZERO(tmf, QENTRY_LEN);
4758                         tmf->tmf_header.rqs_entry_type = RQSTYPE_TSK_MGMT;
4759                         tmf->tmf_header.rqs_entry_count = 1;
4760                         tmf->tmf_nphdl = lp->handle;
4761                         tmf->tmf_delay = 2;
4762                         tmf->tmf_timeout = 4;
4763                         tmf->tmf_flags = ISP24XX_TMF_TARGET_RESET;
4764                         tmf->tmf_tidlo = lp->portid;
4765                         tmf->tmf_tidhi = lp->portid >> 16;
4766                         tmf->tmf_vpidx = ISP_GET_VPIDX(isp, chan);
4767                         isp_put_24xx_tmf(isp, tmf, isp->isp_iocb);
4768                         if (isp->isp_dblev & ISP_LOGDEBUG1)
4769                                 isp_print_bytes(isp, "TMF IOCB request", QENTRY_LEN, isp->isp_iocb);
4770                         MEMORYBARRIER(isp, SYNC_IFORDEV, 0, QENTRY_LEN, chan);
4771                         fcp->sendmarker = 1;
4772
4773                         isp_prt(isp, ISP_LOGALL, "Chan %d Reset N-Port Handle 0x%04x @ Port 0x%06x", chan, lp->handle, lp->portid);
4774                         MBSINIT(&mbs, MBOX_EXEC_COMMAND_IOCB_A64, MBLOGALL,
4775                             MBCMD_DEFAULT_TIMEOUT + tmf->tmf_timeout * 1000000);
4776                         mbs.param[1] = QENTRY_LEN;
4777                         mbs.param[2] = DMA_WD1(isp->isp_iocb_dma);
4778                         mbs.param[3] = DMA_WD0(isp->isp_iocb_dma);
4779                         mbs.param[6] = DMA_WD3(isp->isp_iocb_dma);
4780                         mbs.param[7] = DMA_WD2(isp->isp_iocb_dma);
4781                         isp_mboxcmd(isp, &mbs);
4782                         if (mbs.param[0] != MBOX_COMMAND_COMPLETE)
4783                                 break;
4784
4785                         MEMORYBARRIER(isp, SYNC_IFORCPU, QENTRY_LEN, QENTRY_LEN, chan);
4786                         if (isp->isp_dblev & ISP_LOGDEBUG1)
4787                                 isp_print_bytes(isp, "TMF IOCB response", QENTRY_LEN, &((isp24xx_statusreq_t *)isp->isp_iocb)[1]);
4788                         sp = (isp24xx_statusreq_t *) local;
4789                         isp_get_24xx_response(isp, &((isp24xx_statusreq_t *)isp->isp_iocb)[1], sp);
4790                         if (sp->req_completion_status == 0) {
4791                                 return (0);
4792                         }
4793                         isp_prt(isp, ISP_LOGWARN, "Chan %d reset of target %d returned 0x%x", chan, tgt, sp->req_completion_status);
4794                         break;
4795                 } else if (IS_FC(isp)) {
4796                         if (ISP_CAP_2KLOGIN(isp)) {
4797                                 mbs.param[1] = tgt;
4798                                 mbs.ibits = (1 << 10);
4799                         } else {
4800                                 mbs.param[1] = (tgt << 8);
4801                         }
4802                 } else {
4803                         mbs.param[1] = (chan << 15) | (tgt << 8);
4804                 }
4805                 MBSINIT(&mbs, MBOX_ABORT_TARGET, MBLOGALL, 0);
4806                 mbs.param[2] = 3;       /* 'delay', in seconds */
4807                 isp_mboxcmd(isp, &mbs);
4808                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4809                         break;
4810                 }
4811                 isp_prt(isp, ISP_LOGINFO, "Target %d on Bus %d Reset Succeeded", tgt, chan);
4812                 ISP_SET_SENDMARKER(isp, chan, 1);
4813                 return (0);
4814
4815         case ISPCTL_ABORT_CMD:
4816                 va_start(ap, ctl);
4817                 xs = va_arg(ap, XS_T *);
4818                 va_end(ap);
4819
4820                 tgt = XS_TGT(xs);
4821                 chan = XS_CHANNEL(xs);
4822
4823                 handle = isp_find_handle(isp, xs);
4824                 if (handle == 0) {
4825                         isp_prt(isp, ISP_LOGWARN, "cannot find handle for command to abort");
4826                         break;
4827                 }
4828                 if (IS_24XX(isp)) {
4829                         isp24xx_abrt_t local, *ab = &local;
4830                         fcparam *fcp;
4831                         fcportdb_t *lp;
4832
4833                         fcp = FCPARAM(isp, chan);
4834                         if (tgt < 0 || tgt >= MAX_FC_TARG) {
4835                                 isp_prt(isp, ISP_LOGWARN, "Chan %d trying to abort bad target %d", chan, tgt);
4836                                 break;
4837                         }
4838                         lp = &fcp->portdb[tgt];
4839                         if (lp->is_target == 0 ||
4840                             lp->state != FC_PORTDB_STATE_VALID) {
4841                                 isp_prt(isp, ISP_LOGWARN, "Chan %d abort of no longer valid target %d", chan, tgt);
4842                                 break;
4843                         }
4844                         isp_prt(isp, ISP_LOGALL, "Chan %d Abort Cmd for N-Port 0x%04x @ Port 0x%06x", chan, lp->handle, lp->portid);
4845                         ISP_MEMZERO(ab, QENTRY_LEN);
4846                         ab->abrt_header.rqs_entry_type = RQSTYPE_ABORT_IO;
4847                         ab->abrt_header.rqs_entry_count = 1;
4848                         ab->abrt_handle = lp->handle;
4849                         ab->abrt_cmd_handle = handle;
4850                         ab->abrt_tidlo = lp->portid;
4851                         ab->abrt_tidhi = lp->portid >> 16;
4852                         ab->abrt_vpidx = ISP_GET_VPIDX(isp, chan);
4853                         isp_put_24xx_abrt(isp, ab, isp->isp_iocb);
4854                         if (isp->isp_dblev & ISP_LOGDEBUG1)
4855                                 isp_print_bytes(isp, "AB IOCB quest", QENTRY_LEN, isp->isp_iocb);
4856                         MEMORYBARRIER(isp, SYNC_IFORDEV, 0, 2 * QENTRY_LEN, chan);
4857
4858                         ISP_MEMZERO(&mbs, sizeof (mbs));
4859                         MBSINIT(&mbs, MBOX_EXEC_COMMAND_IOCB_A64, MBLOGALL, 5000000);
4860                         mbs.param[1] = QENTRY_LEN;
4861                         mbs.param[2] = DMA_WD1(isp->isp_iocb_dma);
4862                         mbs.param[3] = DMA_WD0(isp->isp_iocb_dma);
4863                         mbs.param[6] = DMA_WD3(isp->isp_iocb_dma);
4864                         mbs.param[7] = DMA_WD2(isp->isp_iocb_dma);
4865
4866                         isp_mboxcmd(isp, &mbs);
4867                         if (mbs.param[0] != MBOX_COMMAND_COMPLETE)
4868                                 break;
4869
4870                         MEMORYBARRIER(isp, SYNC_IFORCPU, QENTRY_LEN, QENTRY_LEN, chan);
4871                         if (isp->isp_dblev & ISP_LOGDEBUG1)
4872                                 isp_print_bytes(isp, "AB IOCB response", QENTRY_LEN, &((isp24xx_abrt_t *)isp->isp_iocb)[1]);
4873                         isp_get_24xx_abrt(isp, &((isp24xx_abrt_t *)isp->isp_iocb)[1], ab);
4874                         if (ab->abrt_nphdl == ISP24XX_ABRT_OKAY) {
4875                                 return (0);
4876                         }
4877                         isp_prt(isp, ISP_LOGWARN, "Chan %d handle %d abort returned 0x%x", chan, tgt, ab->abrt_nphdl);
4878                         break;
4879                 } else if (IS_FC(isp)) {
4880                         if (ISP_CAP_SCCFW(isp)) {
4881                                 if (ISP_CAP_2KLOGIN(isp)) {
4882                                         mbs.param[1] = tgt;
4883                                 } else {
4884                                         mbs.param[1] = tgt << 8;
4885                                 }
4886                                 mbs.param[6] = XS_LUN(xs);
4887                         } else {
4888                                 mbs.param[1] = tgt << 8 | XS_LUN(xs);
4889                         }
4890                 } else {
4891                         mbs.param[1] = (chan << 15) | (tgt << 8) | XS_LUN(xs);
4892                 }
4893                 MBSINIT(&mbs, MBOX_ABORT,
4894                     MBLOGALL & ~MBLOGMASK(MBOX_COMMAND_ERROR), 0);
4895                 mbs.param[2] = handle;
4896                 isp_mboxcmd(isp, &mbs);
4897                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4898                         break;
4899                 }
4900                 return (0);
4901
4902         case ISPCTL_UPDATE_PARAMS:
4903
4904                 va_start(ap, ctl);
4905                 chan = va_arg(ap, int);
4906                 va_end(ap);
4907                 isp_spi_update(isp, chan);
4908                 return (0);
4909
4910         case ISPCTL_FCLINK_TEST:
4911
4912                 if (IS_FC(isp)) {
4913                         int usdelay;
4914                         va_start(ap, ctl);
4915                         chan = va_arg(ap, int);
4916                         usdelay = va_arg(ap, int);
4917                         va_end(ap);
4918                         if (usdelay == 0) {
4919                                 usdelay =  250000;
4920                         }
4921                         return (isp_fclink_test(isp, chan, usdelay));
4922                 }
4923                 break;
4924
4925         case ISPCTL_SCAN_FABRIC:
4926
4927                 if (IS_FC(isp)) {
4928                         va_start(ap, ctl);
4929                         chan = va_arg(ap, int);
4930                         va_end(ap);
4931                         return (isp_scan_fabric(isp, chan));
4932                 }
4933                 break;
4934
4935         case ISPCTL_SCAN_LOOP:
4936
4937                 if (IS_FC(isp)) {
4938                         va_start(ap, ctl);
4939                         chan = va_arg(ap, int);
4940                         va_end(ap);
4941                         return (isp_scan_loop(isp, chan));
4942                 }
4943                 break;
4944
4945         case ISPCTL_PDB_SYNC:
4946
4947                 if (IS_FC(isp)) {
4948                         va_start(ap, ctl);
4949                         chan = va_arg(ap, int);
4950                         va_end(ap);
4951                         return (isp_pdb_sync(isp, chan));
4952                 }
4953                 break;
4954
4955         case ISPCTL_SEND_LIP:
4956
4957                 if (IS_FC(isp) && !IS_24XX(isp)) {
4958                         MBSINIT(&mbs, MBOX_INIT_LIP, MBLOGALL, 0);
4959                         if (ISP_CAP_2KLOGIN(isp)) {
4960                                 mbs.ibits = (1 << 10);
4961                         }
4962                         isp_mboxcmd(isp, &mbs);
4963                         if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
4964                                 return (0);
4965                         }
4966                 }
4967                 break;
4968
4969         case ISPCTL_GET_PDB:
4970                 if (IS_FC(isp)) {
4971                         isp_pdb_t *pdb;
4972                         va_start(ap, ctl);
4973                         chan = va_arg(ap, int);
4974                         tgt = va_arg(ap, int);
4975                         pdb = va_arg(ap, isp_pdb_t *);
4976                         va_end(ap);
4977                         return (isp_getpdb(isp, chan, tgt, pdb));
4978                 }
4979                 break;
4980
4981         case ISPCTL_GET_NAMES:
4982         {
4983                 uint64_t *wwnn, *wwnp;
4984                 va_start(ap, ctl);
4985                 chan = va_arg(ap, int);
4986                 tgt = va_arg(ap, int);
4987                 wwnn = va_arg(ap, uint64_t *);
4988                 wwnp = va_arg(ap, uint64_t *);
4989                 va_end(ap);
4990                 if (wwnn == NULL && wwnp == NULL) {
4991                         break;
4992                 }
4993                 if (wwnn) {
4994                         *wwnn = isp_get_wwn(isp, chan, tgt, 1);
4995                         if (*wwnn == INI_NONE) {
4996                                 break;
4997                         }
4998                 }
4999                 if (wwnp) {
5000                         *wwnp = isp_get_wwn(isp, chan, tgt, 0);
5001                         if (*wwnp == INI_NONE) {
5002                                 break;
5003                         }
5004                 }
5005                 return (0);
5006         }
5007         case ISPCTL_RUN_MBOXCMD:
5008         {
5009                 va_start(ap, ctl);
5010                 mbr = va_arg(ap, mbreg_t *);
5011                 va_end(ap);
5012                 isp_mboxcmd(isp, mbr);
5013                 return (0);
5014         }
5015         case ISPCTL_PLOGX:
5016         {
5017                 isp_plcmd_t *p;
5018                 int r;
5019
5020                 va_start(ap, ctl);
5021                 p = va_arg(ap, isp_plcmd_t *);
5022                 va_end(ap);
5023
5024                 if ((p->flags & PLOGX_FLG_CMD_MASK) != PLOGX_FLG_CMD_PLOGI || (p->handle != NIL_HANDLE)) {
5025                         return (isp_plogx(isp, p->channel, p->handle, p->portid, p->flags));
5026                 }
5027                 do {
5028                         isp_next_handle(isp, &p->handle);
5029                         r = isp_plogx(isp, p->channel, p->handle, p->portid, p->flags);
5030                         if ((r & 0xffff) == MBOX_PORT_ID_USED) {
5031                                 p->handle = r >> 16;
5032                                 r = 0;
5033                                 break;
5034                         }
5035                 } while ((r & 0xffff) == MBOX_LOOP_ID_USED);
5036                 return (r);
5037         }
5038         case ISPCTL_CHANGE_ROLE:
5039                 if (IS_FC(isp)) {
5040                         int role, r;
5041
5042                         va_start(ap, ctl);
5043                         chan = va_arg(ap, int);
5044                         role = va_arg(ap, int);
5045                         va_end(ap);
5046                         r = isp_fc_change_role(isp, chan, role);
5047                         return (r);
5048                 }
5049                 break;
5050         default:
5051                 isp_prt(isp, ISP_LOGERR, "Unknown Control Opcode 0x%x", ctl);
5052                 break;
5053
5054         }
5055         return (-1);
5056 }
5057
5058 /*
5059  * Interrupt Service Routine(s).
5060  *
5061  * External (OS) framework has done the appropriate locking,
5062  * and the locking will be held throughout this function.
5063  */
5064
5065 #ifdef  ISP_TARGET_MODE
5066 void
5067 isp_intr_atioq(ispsoftc_t *isp)
5068 {
5069         uint8_t qe[QENTRY_LEN];
5070         isphdr_t *hp;
5071         void *addr;
5072         uint32_t iptr, optr, oop;
5073
5074         iptr = ISP_READ(isp, BIU2400_ATIO_RSPINP);
5075         optr = isp->isp_atioodx;
5076         while (optr != iptr) {
5077                 oop = optr;
5078                 MEMORYBARRIER(isp, SYNC_ATIOQ, oop, QENTRY_LEN, -1);
5079                 addr = ISP_QUEUE_ENTRY(isp->isp_atioq, oop);
5080                 isp_get_hdr(isp, addr, (isphdr_t *)qe);
5081                 hp = (isphdr_t *)qe;
5082                 switch (hp->rqs_entry_type) {
5083                 case RQSTYPE_NOTIFY:
5084                 case RQSTYPE_ATIO:
5085                         (void) isp_target_notify(isp, addr, &oop);
5086                         break;
5087                 default:
5088                         isp_print_qentry(isp, "?ATIOQ entry?", oop, addr);
5089                         break;
5090                 }
5091                 optr = ISP_NXT_QENTRY(oop, RESULT_QUEUE_LEN(isp));
5092         }
5093         if (isp->isp_atioodx != optr) {
5094                 ISP_WRITE(isp, BIU2400_ATIO_RSPOUTP, optr);
5095                 isp->isp_atioodx = optr;
5096         }
5097 }
5098 #endif
5099
5100 void
5101 isp_intr_async(ispsoftc_t *isp, uint16_t event)
5102 {
5103
5104         if (IS_FC(isp))
5105                 isp_parse_async_fc(isp, event);
5106         else
5107                 isp_parse_async(isp, event);
5108 }
5109
5110 void
5111 isp_intr_mbox(ispsoftc_t *isp, uint16_t mbox0)
5112 {
5113         int i, obits;
5114
5115         if (!isp->isp_mboxbsy) {
5116                 isp_prt(isp, ISP_LOGWARN, "mailbox 0x%x with no waiters", mbox0);
5117                 return;
5118         }
5119         obits = isp->isp_obits;
5120         isp->isp_mboxtmp[0] = mbox0;
5121         for (i = 1; i < ISP_NMBOX(isp); i++) {
5122                 if ((obits & (1 << i)) == 0)
5123                         continue;
5124                 isp->isp_mboxtmp[i] = ISP_READ(isp, MBOX_OFF(i));
5125         }
5126         MBOX_NOTIFY_COMPLETE(isp);
5127 }
5128
5129 void
5130 isp_intr_respq(ispsoftc_t *isp)
5131 {
5132         XS_T *xs, *cont_xs;
5133         uint8_t qe[QENTRY_LEN];
5134         ispstatusreq_t *sp = (ispstatusreq_t *)qe;
5135         isp24xx_statusreq_t *sp2 = (isp24xx_statusreq_t *)qe;
5136         isphdr_t *hp;
5137         uint8_t *resp, *snsp;
5138         int buddaboom, completion_status, cont = 0, etype, i;
5139         int req_status_flags, req_state_flags, scsi_status;
5140         uint32_t iptr, junk, cptr, optr, rlen, slen, sptr, totslen, resid;
5141
5142         /*
5143          * We can't be getting this now.
5144          */
5145         if (isp->isp_state != ISP_RUNSTATE) {
5146                 isp_prt(isp, ISP_LOGINFO, "respq interrupt when not ready");
5147                 return;
5148         }
5149
5150         iptr = ISP_READ(isp, isp->isp_respinrp);
5151         /* Debounce the 2300 if revision less than 2. */
5152         if (IS_2100(isp) || (IS_2300(isp) && isp->isp_revision < 2)) {
5153                 do {
5154                         junk = iptr;
5155                         iptr = ISP_READ(isp, isp->isp_respinrp);
5156                 } while (junk != iptr);
5157         }
5158         isp->isp_residx = iptr;
5159
5160         optr = isp->isp_resodx;
5161         while (optr != iptr) {
5162                 sptr = cptr = optr;
5163                 hp = (isphdr_t *) ISP_QUEUE_ENTRY(isp->isp_result, cptr);
5164                 optr = ISP_NXT_QENTRY(optr, RESULT_QUEUE_LEN(isp));
5165
5166                 /*
5167                  * Synchronize our view of this response queue entry.
5168                  */
5169                 MEMORYBARRIER(isp, SYNC_RESULT, cptr, QENTRY_LEN, -1);
5170                 if (isp->isp_dblev & ISP_LOGDEBUG1)
5171                         isp_print_qentry(isp, "Response Queue Entry", cptr, hp);
5172                 isp_get_hdr(isp, hp, &sp->req_header);
5173                 etype = sp->req_header.rqs_entry_type;
5174
5175                 /* We expected Status Continuation, but got different IOCB. */
5176                 if (cont > 0 && etype != RQSTYPE_STATUS_CONT) {
5177                         cont = 0;
5178                         isp_done(cont_xs);
5179                 }
5180
5181                 if (IS_24XX(isp) && etype == RQSTYPE_RESPONSE) {
5182                         isp_get_24xx_response(isp, (isp24xx_statusreq_t *)hp, sp2);
5183                         scsi_status = sp2->req_scsi_status;
5184                         completion_status = sp2->req_completion_status;
5185                         req_status_flags = 0;
5186                         if ((scsi_status & 0xff) != 0)
5187                                 req_state_flags = RQSF_GOT_STATUS;
5188                         else
5189                                 req_state_flags = 0;
5190                         resid = sp2->req_resid;
5191                 } else if (etype == RQSTYPE_RESPONSE) {
5192                         isp_get_response(isp, (ispstatusreq_t *) hp, sp);
5193                         scsi_status = sp->req_scsi_status;
5194                         completion_status = sp->req_completion_status;
5195                         req_status_flags = sp->req_status_flags;
5196                         req_state_flags = sp->req_state_flags;
5197                         resid = sp->req_resid;
5198                 } else if (etype == RQSTYPE_RIO1) {
5199                         isp_rio1_t *rio = (isp_rio1_t *) qe;
5200                         isp_get_rio1(isp, (isp_rio1_t *) hp, rio);
5201                         for (i = 0; i < rio->req_header.rqs_seqno; i++) {
5202                                 isp_fastpost_complete(isp, rio->req_handles[i]);
5203                         }
5204                         ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5205                         continue;
5206                 } else if (etype == RQSTYPE_RIO2) {
5207                         isp_prt(isp, ISP_LOGERR, "dropping RIO2 response");
5208                         ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5209                         continue;
5210                 } else if (etype == RQSTYPE_STATUS_CONT) {
5211                         ispstatus_cont_t *scp = (ispstatus_cont_t *)qe;
5212                         isp_get_cont_response(isp, (ispstatus_cont_t *)hp, scp);
5213                         if (cont > 0) {
5214                                 i = min(cont, sizeof(scp->req_sense_data));
5215                                 XS_SENSE_APPEND(cont_xs, scp->req_sense_data, i);
5216                                 cont -= i;
5217                                 if (cont == 0) {
5218                                         isp_done(cont_xs);
5219                                 } else {
5220                                         isp_prt(isp, ISP_LOGDEBUG0|ISP_LOG_CWARN,
5221                                             "Expecting Status Continuations for %u bytes",
5222                                             cont);
5223                                 }
5224                         } else {
5225                                 isp_prt(isp, ISP_LOG_WARN1, "Ignored Continuation Response");
5226                         }
5227                         ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5228                         continue;
5229                 } else if (isp_handle_other_response(isp, etype, hp, &cptr)) {
5230                         /* More then one IOCB could be consumed. */
5231                         while (sptr != cptr) {
5232                                 ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5233                                 sptr = ISP_NXT_QENTRY(sptr, RESULT_QUEUE_LEN(isp));
5234                                 hp = (isphdr_t *)ISP_QUEUE_ENTRY(isp->isp_result, sptr);
5235                         }
5236                         ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5237                         optr = ISP_NXT_QENTRY(cptr, RESULT_QUEUE_LEN(isp));
5238                         continue;
5239                 } else {
5240                         /* We don't know what was this -- log and skip. */
5241                         isp_prt(isp, ISP_LOGERR, notresp, etype, cptr, optr);
5242                         ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5243                         continue;
5244                 }
5245
5246                 buddaboom = 0;
5247                 if (sp->req_header.rqs_flags & RQSFLAG_MASK) {
5248                         if (sp->req_header.rqs_flags & RQSFLAG_CONTINUATION) {
5249                                 isp_print_qentry(isp, "unexpected continuation segment",
5250                                     cptr, hp);
5251                                 continue;
5252                         }
5253                         if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
5254                                 isp_prt(isp, ISP_LOG_WARN1, "internal queues full");
5255                                 /*
5256                                  * We'll synthesize a QUEUE FULL message below.
5257                                  */
5258                         }
5259                         if (sp->req_header.rqs_flags & RQSFLAG_BADHEADER) {
5260                                 isp_print_qentry(isp, "bad header flag",
5261                                     cptr, hp);
5262                                 buddaboom++;
5263                         }
5264                         if (sp->req_header.rqs_flags & RQSFLAG_BADPACKET) {
5265                                 isp_print_qentry(isp, "bad request packet",
5266                                     cptr, hp);
5267                                 buddaboom++;
5268                         }
5269                         if (sp->req_header.rqs_flags & RQSFLAG_BADCOUNT) {
5270                                 isp_print_qentry(isp, "invalid entry count",
5271                                     cptr, hp);
5272                                 buddaboom++;
5273                         }
5274                         if (sp->req_header.rqs_flags & RQSFLAG_BADORDER) {
5275                                 isp_print_qentry(isp, "invalid IOCB ordering",
5276                                     cptr, hp);
5277                                 continue;
5278                         }
5279                 }
5280
5281                 xs = isp_find_xs(isp, sp->req_handle);
5282                 if (xs == NULL) {
5283                         uint8_t ts = completion_status & 0xff;
5284                         /*
5285                          * Only whine if this isn't the expected fallout of
5286                          * aborting the command or resetting the target.
5287                          */
5288                         if (etype != RQSTYPE_RESPONSE) {
5289                                 isp_prt(isp, ISP_LOGERR, "cannot find handle 0x%x (type 0x%x)", sp->req_handle, etype);
5290                         } else if (ts != RQCS_ABORTED && ts != RQCS_RESET_OCCURRED) {
5291                                 isp_prt(isp, ISP_LOGERR, "cannot find handle 0x%x (status 0x%x)", sp->req_handle, ts);
5292                         }
5293                         ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5294                         continue;
5295                 }
5296                 if (req_status_flags & RQSTF_BUS_RESET) {
5297                         isp_prt(isp, ISP_LOG_WARN1, "%d.%d.%jx bus was reset",
5298                             XS_CHANNEL(xs), XS_TGT(xs), (uintmax_t)XS_LUN(xs));
5299                         XS_SETERR(xs, HBA_BUSRESET);
5300                         ISP_SET_SENDMARKER(isp, XS_CHANNEL(xs), 1);
5301                 }
5302                 if (buddaboom) {
5303                         isp_prt(isp, ISP_LOG_WARN1, "%d.%d.%jx buddaboom",
5304                             XS_CHANNEL(xs), XS_TGT(xs), (uintmax_t)XS_LUN(xs));
5305                         XS_SETERR(xs, HBA_BOTCH);
5306                 }
5307
5308                 resp = snsp = NULL;
5309                 rlen = slen = totslen = 0;
5310                 if (IS_24XX(isp) && (scsi_status & (RQCS_RV|RQCS_SV)) != 0) {
5311                         resp = sp2->req_rsp_sense;
5312                         rlen = sp2->req_response_len;
5313                 } else if (IS_FC(isp) && (scsi_status & RQCS_RV) != 0) {
5314                         resp = sp->req_response;
5315                         rlen = sp->req_response_len;
5316                 }
5317                 if (IS_FC(isp) && (scsi_status & RQCS_SV) != 0) {
5318                         /*
5319                          * Fibre Channel F/W doesn't say we got status
5320                          * if there's Sense Data instead. I guess they
5321                          * think it goes w/o saying.
5322                          */
5323                         req_state_flags |= RQSF_GOT_STATUS|RQSF_GOT_SENSE;
5324                         if (IS_24XX(isp)) {
5325                                 snsp = sp2->req_rsp_sense;
5326                                 snsp += rlen;
5327                                 totslen = sp2->req_sense_len;
5328                                 slen = sizeof(sp2->req_rsp_sense) - rlen;
5329                         } else {
5330                                 snsp = sp->req_sense_data;
5331                                 totslen = sp->req_sense_len;
5332                                 slen = sizeof(sp->req_sense_data);
5333                         }
5334                 } else if (IS_SCSI(isp) && (req_state_flags & RQSF_GOT_SENSE)) {
5335                         snsp = sp->req_sense_data;
5336                         totslen = sp->req_sense_len;
5337                         slen = sizeof (sp->req_sense_data);
5338                 }
5339                 if (slen > totslen)
5340                         slen = totslen;
5341                 if (req_state_flags & RQSF_GOT_STATUS)
5342                         *XS_STSP(xs) = scsi_status & 0xff;
5343
5344                 if (rlen >= 4 && resp[FCP_RSPNS_CODE_OFFSET] != 0) {
5345                         const char *ptr;
5346                         char lb[64];
5347                         const char *rnames[10] = {
5348                             "Task Management function complete",
5349                             "FCP_DATA length different than FCP_BURST_LEN",
5350                             "FCP_CMND fields invalid",
5351                             "FCP_DATA parameter mismatch with FCP_DATA_RO",
5352                             "Task Management function rejected",
5353                             "Task Management function failed",
5354                             NULL,
5355                             NULL,
5356                             "Task Management function succeeded",
5357                             "Task Management function incorrect logical unit number",
5358                         };
5359                         uint8_t code = resp[FCP_RSPNS_CODE_OFFSET];
5360                         if (code >= 10 || rnames[code] == NULL) {
5361                                 ISP_SNPRINTF(lb, sizeof(lb),
5362                                     "Unknown FCP Response Code 0x%x", code);
5363                                 ptr = lb;
5364                         } else {
5365                                 ptr = rnames[code];
5366                         }
5367                         isp_xs_prt(isp, xs, ISP_LOGWARN,
5368                             "FCP RESPONSE, LENGTH %u: %s CDB0=0x%02x",
5369                             rlen, ptr, XS_CDBP(xs)[0] & 0xff);
5370                         if (code != 0 && code != 8)
5371                                 XS_SETERR(xs, HBA_BOTCH);
5372                 }
5373                 if (IS_24XX(isp))
5374                         isp_parse_status_24xx(isp, sp2, xs, &resid);
5375                 else
5376                         isp_parse_status(isp, sp, xs, &resid);
5377                 if ((XS_NOERR(xs) || XS_ERR(xs) == HBA_NOERROR) &&
5378                     (*XS_STSP(xs) == SCSI_BUSY))
5379                         XS_SETERR(xs, HBA_TGTBSY);
5380                 if (IS_SCSI(isp)) {
5381                         XS_SET_RESID(xs, resid);
5382                         /*
5383                          * A new synchronous rate was negotiated for
5384                          * this target. Mark state such that we'll go
5385                          * look up that which has changed later.
5386                          */
5387                         if (req_status_flags & RQSTF_NEGOTIATION) {
5388                                 int t = XS_TGT(xs);
5389                                 sdparam *sdp = SDPARAM(isp, XS_CHANNEL(xs));
5390                                 sdp->isp_devparam[t].dev_refresh = 1;
5391                                 sdp->update = 1;
5392                         }
5393                 } else {
5394                         if (req_status_flags & RQSF_XFER_COMPLETE) {
5395                                 XS_SET_RESID(xs, 0);
5396                         } else if (scsi_status & RQCS_RESID) {
5397                                 XS_SET_RESID(xs, resid);
5398                         } else {
5399                                 XS_SET_RESID(xs, 0);
5400                         }
5401                 }
5402                 if (slen > 0) {
5403                         XS_SAVE_SENSE(xs, snsp, slen);
5404                         if (totslen > slen) {
5405                                 cont = totslen - slen;
5406                                 cont_xs = xs;
5407                                 isp_prt(isp, ISP_LOGDEBUG0|ISP_LOG_CWARN,
5408                                     "Expecting Status Continuations for %u bytes",
5409                                     cont);
5410                         }
5411                 }
5412                 isp_prt(isp, ISP_LOGDEBUG2, "asked for %lu got raw resid %lu settled for %lu",
5413                     (u_long)XS_XFRLEN(xs), (u_long)resid, (u_long)XS_GET_RESID(xs));
5414
5415                 if (XS_XFRLEN(xs))
5416                         ISP_DMAFREE(isp, xs, sp->req_handle);
5417                 isp_destroy_handle(isp, sp->req_handle);
5418
5419                 ISP_MEMZERO(hp, QENTRY_LEN);    /* PERF */
5420
5421                 /* Complete command if we expect no Status Continuations. */
5422                 if (cont == 0)
5423                         isp_done(xs);
5424         }
5425
5426         /* We haven't received all Status Continuations, but that is it. */
5427         if (cont > 0)
5428                 isp_done(cont_xs);
5429
5430         /* If we processed any IOCBs, let ISP know about it. */
5431         if (optr != isp->isp_resodx) {
5432                 ISP_WRITE(isp, isp->isp_respoutrp, optr);
5433                 isp->isp_resodx = optr;
5434         }
5435 }
5436
5437 /*
5438  * Parse an ASYNC mailbox complete
5439  */
5440 static void
5441 isp_parse_async(ispsoftc_t *isp, uint16_t mbox)
5442 {
5443         uint32_t h1 = 0, h2 = 0;
5444         uint16_t chan = 0;
5445
5446         /*
5447          * Pick up the channel, but not if this is a ASYNC_RIO32_2,
5448          * where Mailboxes 6/7 have the second handle.
5449          */
5450         if (mbox != ASYNC_RIO32_2) {
5451                 if (IS_DUALBUS(isp)) {
5452                         chan = ISP_READ(isp, OUTMAILBOX6);
5453                 }
5454         }
5455         isp_prt(isp, ISP_LOGDEBUG2, "Async Mbox 0x%x", mbox);
5456
5457         switch (mbox) {
5458         case ASYNC_BUS_RESET:
5459                 ISP_SET_SENDMARKER(isp, chan, 1);
5460 #ifdef  ISP_TARGET_MODE
5461                 isp_target_async(isp, chan, mbox);
5462 #endif
5463                 isp_async(isp, ISPASYNC_BUS_RESET, chan);
5464                 break;
5465         case ASYNC_SYSTEM_ERROR:
5466                 isp->isp_state = ISP_CRASHED;
5467                 /*
5468                  * Were we waiting for a mailbox command to complete?
5469                  * If so, it's dead, so wake up the waiter.
5470                  */
5471                 if (isp->isp_mboxbsy) {
5472                         isp->isp_obits = 1;
5473                         isp->isp_mboxtmp[0] = MBOX_HOST_INTERFACE_ERROR;
5474                         MBOX_NOTIFY_COMPLETE(isp);
5475                 }
5476                 /*
5477                  * It's up to the handler for isp_async to reinit stuff and
5478                  * restart the firmware
5479                  */
5480                 isp_async(isp, ISPASYNC_FW_CRASH);
5481                 break;
5482
5483         case ASYNC_RQS_XFER_ERR:
5484                 isp_prt(isp, ISP_LOGERR, "Request Queue Transfer Error");
5485                 break;
5486
5487         case ASYNC_RSP_XFER_ERR:
5488                 isp_prt(isp, ISP_LOGERR, "Response Queue Transfer Error");
5489                 break;
5490
5491         case ASYNC_QWAKEUP:
5492                 /*
5493                  * We've just been notified that the Queue has woken up.
5494                  * We don't need to be chatty about this- just unlatch things
5495                  * and move on.
5496                  */
5497                 mbox = ISP_READ(isp, isp->isp_rqstoutrp);
5498                 break;
5499
5500         case ASYNC_TIMEOUT_RESET:
5501                 isp_prt(isp, ISP_LOGWARN, "timeout initiated SCSI bus reset of chan %d", chan);
5502                 ISP_SET_SENDMARKER(isp, chan, 1);
5503 #ifdef  ISP_TARGET_MODE
5504                 isp_target_async(isp, chan, mbox);
5505 #endif
5506                 break;
5507
5508         case ASYNC_DEVICE_RESET:
5509                 isp_prt(isp, ISP_LOGINFO, "device reset on chan %d", chan);
5510                 ISP_SET_SENDMARKER(isp, chan, 1);
5511 #ifdef  ISP_TARGET_MODE
5512                 isp_target_async(isp, chan, mbox);
5513 #endif
5514                 break;
5515
5516         case ASYNC_EXTMSG_UNDERRUN:
5517                 isp_prt(isp, ISP_LOGWARN, "extended message underrun");
5518                 break;
5519
5520         case ASYNC_SCAM_INT:
5521                 isp_prt(isp, ISP_LOGINFO, "SCAM interrupt");
5522                 break;
5523
5524         case ASYNC_HUNG_SCSI:
5525                 isp_prt(isp, ISP_LOGERR, "stalled SCSI Bus after DATA Overrun");
5526                 /* XXX: Need to issue SCSI reset at this point */
5527                 break;
5528
5529         case ASYNC_KILLED_BUS:
5530                 isp_prt(isp, ISP_LOGERR, "SCSI Bus reset after DATA Overrun");
5531                 break;
5532
5533         case ASYNC_BUS_TRANSIT:
5534                 mbox = ISP_READ(isp, OUTMAILBOX2);
5535                 switch (mbox & SXP_PINS_MODE_MASK) {
5536                 case SXP_PINS_LVD_MODE:
5537                         isp_prt(isp, ISP_LOGINFO, "Transition to LVD mode");
5538                         SDPARAM(isp, chan)->isp_diffmode = 0;
5539                         SDPARAM(isp, chan)->isp_ultramode = 0;
5540                         SDPARAM(isp, chan)->isp_lvdmode = 1;
5541                         break;
5542                 case SXP_PINS_HVD_MODE:
5543                         isp_prt(isp, ISP_LOGINFO,
5544                             "Transition to Differential mode");
5545                         SDPARAM(isp, chan)->isp_diffmode = 1;
5546                         SDPARAM(isp, chan)->isp_ultramode = 0;
5547                         SDPARAM(isp, chan)->isp_lvdmode = 0;
5548                         break;
5549                 case SXP_PINS_SE_MODE:
5550                         isp_prt(isp, ISP_LOGINFO,
5551                             "Transition to Single Ended mode");
5552                         SDPARAM(isp, chan)->isp_diffmode = 0;
5553                         SDPARAM(isp, chan)->isp_ultramode = 1;
5554                         SDPARAM(isp, chan)->isp_lvdmode = 0;
5555                         break;
5556                 default:
5557                         isp_prt(isp, ISP_LOGWARN,
5558                             "Transition to Unknown Mode 0x%x", mbox);
5559                         break;
5560                 }
5561                 /*
5562                  * XXX: Set up to renegotiate again!
5563                  */
5564                 /* Can only be for a 1080... */
5565                 ISP_SET_SENDMARKER(isp, chan, 1);
5566                 break;
5567
5568         case ASYNC_CMD_CMPLT:
5569         case ASYNC_RIO32_1:
5570                 if (!IS_ULTRA3(isp)) {
5571                         isp_prt(isp, ISP_LOGERR, "unexpected fast posting completion");
5572                         break;
5573                 }
5574                 /* FALLTHROUGH */
5575                 h1 = (ISP_READ(isp, OUTMAILBOX2) << 16) | ISP_READ(isp, OUTMAILBOX1);
5576                 break;
5577
5578         case ASYNC_RIO32_2:
5579                 h1 = (ISP_READ(isp, OUTMAILBOX2) << 16) | ISP_READ(isp, OUTMAILBOX1);
5580                 h2 = (ISP_READ(isp, OUTMAILBOX7) << 16) | ISP_READ(isp, OUTMAILBOX6);
5581                 break;
5582
5583         case ASYNC_RIO16_5:
5584         case ASYNC_RIO16_4:
5585         case ASYNC_RIO16_3:
5586         case ASYNC_RIO16_2:
5587         case ASYNC_RIO16_1:
5588                 isp_prt(isp, ISP_LOGERR, "unexpected 16 bit RIO handle");
5589                 break;
5590         default:
5591                 isp_prt(isp, ISP_LOGWARN, "%s: unhandled async code 0x%x", __func__, mbox);
5592                 break;
5593         }
5594
5595         if (h1 || h2) {
5596                 isp_prt(isp, ISP_LOGDEBUG3, "fast post/rio completion of 0x%08x", h1);
5597                 isp_fastpost_complete(isp, h1);
5598                 if (h2) {
5599                         isp_prt(isp, ISP_LOGDEBUG3, "fast post/rio completion of 0x%08x", h2);
5600                         isp_fastpost_complete(isp, h2);
5601                 }
5602         }
5603 }
5604
5605 static void
5606 isp_parse_async_fc(ispsoftc_t *isp, uint16_t mbox)
5607 {
5608         fcparam *fcp;
5609         uint16_t chan;
5610
5611         if (IS_DUALBUS(isp)) {
5612                 chan = ISP_READ(isp, OUTMAILBOX6);
5613         } else {
5614                 chan = 0;
5615         }
5616         isp_prt(isp, ISP_LOGDEBUG2, "Async Mbox 0x%x", mbox);
5617
5618         switch (mbox) {
5619         case ASYNC_SYSTEM_ERROR:
5620                 isp->isp_state = ISP_CRASHED;
5621                 FCPARAM(isp, chan)->isp_loopstate = LOOP_NIL;
5622                 isp_change_fw_state(isp, chan, FW_CONFIG_WAIT);
5623                 /*
5624                  * Were we waiting for a mailbox command to complete?
5625                  * If so, it's dead, so wake up the waiter.
5626                  */
5627                 if (isp->isp_mboxbsy) {
5628                         isp->isp_obits = 1;
5629                         isp->isp_mboxtmp[0] = MBOX_HOST_INTERFACE_ERROR;
5630                         MBOX_NOTIFY_COMPLETE(isp);
5631                 }
5632                 /*
5633                  * It's up to the handler for isp_async to reinit stuff and
5634                  * restart the firmware
5635                  */
5636                 isp_async(isp, ISPASYNC_FW_CRASH);
5637                 break;
5638
5639         case ASYNC_RQS_XFER_ERR:
5640                 isp_prt(isp, ISP_LOGERR, "Request Queue Transfer Error");
5641                 break;
5642
5643         case ASYNC_RSP_XFER_ERR:
5644                 isp_prt(isp, ISP_LOGERR, "Response Queue Transfer Error");
5645                 break;
5646
5647         case ASYNC_QWAKEUP:
5648 #ifdef  ISP_TARGET_MODE
5649                 if (IS_24XX(isp)) {
5650                         isp_prt(isp, ISP_LOGERR, "ATIO Queue Transfer Error");
5651                         break;
5652                 }
5653 #endif
5654                 isp_prt(isp, ISP_LOGERR, "%s: unexpected ASYNC_QWAKEUP code", __func__);
5655                 break;
5656
5657         case ASYNC_CMD_CMPLT:
5658                 isp_fastpost_complete(isp, (ISP_READ(isp, OUTMAILBOX2) << 16) | ISP_READ(isp, OUTMAILBOX1));
5659                 break;
5660
5661         case ASYNC_RIOZIO_STALL:
5662                 isp_intr_respq(isp);
5663                 break;
5664
5665         case ASYNC_CTIO_DONE:
5666 #ifdef  ISP_TARGET_MODE
5667                 isp_target_async(isp, (ISP_READ(isp, OUTMAILBOX2) << 16) |
5668                     ISP_READ(isp, OUTMAILBOX1), mbox);
5669 #else
5670                 isp_prt(isp, ISP_LOGWARN, "unexpected ASYNC CTIO done");
5671 #endif
5672                 break;
5673         case ASYNC_LIP_ERROR:
5674         case ASYNC_LIP_NOS_OLS_RECV:
5675         case ASYNC_LIP_OCCURRED:
5676         case ASYNC_PTPMODE:
5677                 /*
5678                  * These are broadcast events that have to be sent across
5679                  * all active channels.
5680                  */
5681                 for (chan = 0; chan < isp->isp_nchan; chan++) {
5682                         fcp = FCPARAM(isp, chan);
5683                         int topo = fcp->isp_topo;
5684
5685                         if (fcp->role == ISP_ROLE_NONE)
5686                                 continue;
5687                         if (fcp->isp_loopstate > LOOP_HAVE_LINK)
5688                                 fcp->isp_loopstate = LOOP_HAVE_LINK;
5689                         ISP_SET_SENDMARKER(isp, chan, 1);
5690                         isp_async(isp, ISPASYNC_LIP, chan);
5691 #ifdef  ISP_TARGET_MODE
5692                         isp_target_async(isp, chan, mbox);
5693 #endif
5694                         /*
5695                          * We've had problems with data corruption occurring on
5696                          * commands that complete (with no apparent error) after
5697                          * we receive a LIP. This has been observed mostly on
5698                          * Local Loop topologies. To be safe, let's just mark
5699                          * all active initiator commands as dead.
5700                          */
5701                         if (topo == TOPO_NL_PORT || topo == TOPO_FL_PORT) {
5702                                 int i, j;
5703                                 for (i = j = 0; i < isp->isp_maxcmds; i++) {
5704                                         XS_T *xs;
5705                                         isp_hdl_t *hdp;
5706
5707                                         hdp = &isp->isp_xflist[i];
5708                                         if (ISP_H2HT(hdp->handle) != ISP_HANDLE_INITIATOR) {
5709                                                 continue;
5710                                         }
5711                                         xs = hdp->cmd;
5712                                         if (XS_CHANNEL(xs) != chan) {
5713                                                 continue;
5714                                         }
5715                                         j++;
5716                                         isp_prt(isp, ISP_LOG_WARN1,
5717                                             "%d.%d.%jx bus reset set at %s:%u",
5718                                             XS_CHANNEL(xs), XS_TGT(xs),
5719                                             (uintmax_t)XS_LUN(xs),
5720                                             __func__, __LINE__);
5721                                         XS_SETERR(xs, HBA_BUSRESET);
5722                                 }
5723                                 if (j) {
5724                                         isp_prt(isp, ISP_LOGERR, lipd, chan, j);
5725                                 }
5726                         }
5727                 }
5728                 break;
5729
5730         case ASYNC_LOOP_UP:
5731                 /*
5732                  * This is a broadcast event that has to be sent across
5733                  * all active channels.
5734                  */
5735                 for (chan = 0; chan < isp->isp_nchan; chan++) {
5736                         fcp = FCPARAM(isp, chan);
5737                         if (fcp->role == ISP_ROLE_NONE)
5738                                 continue;
5739                         fcp->isp_linkstate = 1;
5740                         if (fcp->isp_loopstate < LOOP_HAVE_LINK)
5741                                 fcp->isp_loopstate = LOOP_HAVE_LINK;
5742                         ISP_SET_SENDMARKER(isp, chan, 1);
5743                         isp_async(isp, ISPASYNC_LOOP_UP, chan);
5744 #ifdef  ISP_TARGET_MODE
5745                         isp_target_async(isp, chan, mbox);
5746 #endif
5747                 }
5748                 break;
5749
5750         case ASYNC_LOOP_DOWN:
5751                 /*
5752                  * This is a broadcast event that has to be sent across
5753                  * all active channels.
5754                  */
5755                 for (chan = 0; chan < isp->isp_nchan; chan++) {
5756                         fcp = FCPARAM(isp, chan);
5757                         if (fcp->role == ISP_ROLE_NONE)
5758                                 continue;
5759                         ISP_SET_SENDMARKER(isp, chan, 1);
5760                         fcp->isp_linkstate = 0;
5761                         fcp->isp_loopstate = LOOP_NIL;
5762                         isp_async(isp, ISPASYNC_LOOP_DOWN, chan);
5763 #ifdef  ISP_TARGET_MODE
5764                         isp_target_async(isp, chan, mbox);
5765 #endif
5766                 }
5767                 break;
5768
5769         case ASYNC_LOOP_RESET:
5770                 /*
5771                  * This is a broadcast event that has to be sent across
5772                  * all active channels.
5773                  */
5774                 for (chan = 0; chan < isp->isp_nchan; chan++) {
5775                         fcp = FCPARAM(isp, chan);
5776                         if (fcp->role == ISP_ROLE_NONE)
5777                                 continue;
5778                         ISP_SET_SENDMARKER(isp, chan, 1);
5779                         if (fcp->isp_loopstate > LOOP_HAVE_LINK)
5780                                 fcp->isp_loopstate = LOOP_HAVE_LINK;
5781                         isp_async(isp, ISPASYNC_LOOP_RESET, chan);
5782 #ifdef  ISP_TARGET_MODE
5783                         isp_target_async(isp, chan, mbox);
5784 #endif
5785                 }
5786                 break;
5787
5788         case ASYNC_PDB_CHANGED:
5789         {
5790                 int echan, nphdl, nlstate, reason;
5791
5792                 if (IS_23XX(isp) || IS_24XX(isp)) {
5793                         nphdl = ISP_READ(isp, OUTMAILBOX1);
5794                         nlstate = ISP_READ(isp, OUTMAILBOX2);
5795                 } else {
5796                         nphdl = nlstate = 0xffff;
5797                 }
5798                 if (IS_24XX(isp))
5799                         reason = ISP_READ(isp, OUTMAILBOX3) >> 8;
5800                 else
5801                         reason = 0xff;
5802                 if (ISP_CAP_MULTI_ID(isp)) {
5803                         chan = ISP_READ(isp, OUTMAILBOX3) & 0xff;
5804                         if (chan == 0xff || nphdl == NIL_HANDLE) {
5805                                 chan = 0;
5806                                 echan = isp->isp_nchan - 1;
5807                         } else if (chan >= isp->isp_nchan) {
5808                                 break;
5809                         } else {
5810                                 echan = chan;
5811                         }
5812                 } else {
5813                         chan = echan = 0;
5814                 }
5815                 for (; chan <= echan; chan++) {
5816                         fcp = FCPARAM(isp, chan);
5817                         if (fcp->role == ISP_ROLE_NONE)
5818                                 continue;
5819                         if (fcp->isp_loopstate > LOOP_LTEST_DONE) {
5820                                 if (nphdl != NIL_HANDLE &&
5821                                     nphdl == fcp->isp_login_hdl &&
5822                                     reason == PDB24XX_AE_OPN_2)
5823                                         continue;
5824                                 fcp->isp_loopstate = LOOP_LTEST_DONE;
5825                         } else if (fcp->isp_loopstate < LOOP_HAVE_LINK)
5826                                 fcp->isp_loopstate = LOOP_HAVE_LINK;
5827                         isp_async(isp, ISPASYNC_CHANGE_NOTIFY, chan,
5828                             ISPASYNC_CHANGE_PDB, nphdl, nlstate, reason);
5829                 }
5830                 break;
5831         }
5832         case ASYNC_CHANGE_NOTIFY:
5833         {
5834                 int portid;
5835
5836                 portid = ((ISP_READ(isp, OUTMAILBOX1) & 0xff) << 16) |
5837                     ISP_READ(isp, OUTMAILBOX2);
5838                 if (ISP_CAP_MULTI_ID(isp)) {
5839                         chan = ISP_READ(isp, OUTMAILBOX3) & 0xff;
5840                         if (chan >= isp->isp_nchan)
5841                                 break;
5842                 } else {
5843                         chan = 0;
5844                 }
5845                 fcp = FCPARAM(isp, chan);
5846                 if (fcp->role == ISP_ROLE_NONE)
5847                         break;
5848                 if (fcp->isp_loopstate > LOOP_LTEST_DONE)
5849                         fcp->isp_loopstate = LOOP_LTEST_DONE;
5850                 else if (fcp->isp_loopstate < LOOP_HAVE_LINK)
5851                         fcp->isp_loopstate = LOOP_HAVE_LINK;
5852                 isp_async(isp, ISPASYNC_CHANGE_NOTIFY, chan,
5853                     ISPASYNC_CHANGE_SNS, portid);
5854                 break;
5855         }
5856         case ASYNC_ERR_LOGGING_DISABLED:
5857                 isp_prt(isp, ISP_LOGWARN, "Error logging disabled (reason 0x%x)",
5858                     ISP_READ(isp, OUTMAILBOX1));
5859                 break;
5860         case ASYNC_CONNMODE:
5861                 /*
5862                  * This only applies to 2100 amd 2200 cards
5863                  */
5864                 if (!IS_2200(isp) && !IS_2100(isp)) {
5865                         isp_prt(isp, ISP_LOGWARN, "bad card for ASYNC_CONNMODE event");
5866                         break;
5867                 }
5868                 chan = 0;
5869                 mbox = ISP_READ(isp, OUTMAILBOX1);
5870                 switch (mbox) {
5871                 case ISP_CONN_LOOP:
5872                         isp_prt(isp, ISP_LOGINFO,
5873                             "Point-to-Point -> Loop mode");
5874                         break;
5875                 case ISP_CONN_PTP:
5876                         isp_prt(isp, ISP_LOGINFO,
5877                             "Loop -> Point-to-Point mode");
5878                         break;
5879                 case ISP_CONN_BADLIP:
5880                         isp_prt(isp, ISP_LOGWARN,
5881                             "Point-to-Point -> Loop mode (BAD LIP)");
5882                         break;
5883                 case ISP_CONN_FATAL:
5884                         isp->isp_state = ISP_CRASHED;
5885                         isp_prt(isp, ISP_LOGERR, "FATAL CONNECTION ERROR");
5886                         isp_async(isp, ISPASYNC_FW_CRASH);
5887                         return;
5888                 case ISP_CONN_LOOPBACK:
5889                         isp_prt(isp, ISP_LOGWARN,
5890                             "Looped Back in Point-to-Point mode");
5891                         break;
5892                 default:
5893                         isp_prt(isp, ISP_LOGWARN,
5894                             "Unknown connection mode (0x%x)", mbox);
5895                         break;
5896                 }
5897                 ISP_SET_SENDMARKER(isp, chan, 1);
5898                 FCPARAM(isp, chan)->isp_loopstate = LOOP_HAVE_LINK;
5899                 isp_async(isp, ISPASYNC_CHANGE_NOTIFY, chan, ISPASYNC_CHANGE_OTHER);
5900                 break;
5901         case ASYNC_P2P_INIT_ERR:
5902                 isp_prt(isp, ISP_LOGWARN, "P2P init error (reason 0x%x)",
5903                     ISP_READ(isp, OUTMAILBOX1));
5904                 break;
5905         case ASYNC_RCV_ERR:
5906                 if (IS_24XX(isp)) {
5907                         isp_prt(isp, ISP_LOGWARN, "Receive Error");
5908                 } else {
5909                         isp_prt(isp, ISP_LOGWARN, "unexpected ASYNC_RCV_ERR");
5910                 }
5911                 break;
5912         case ASYNC_RJT_SENT:    /* same as ASYNC_QFULL_SENT */
5913                 if (IS_24XX(isp)) {
5914                         isp_prt(isp, ISP_LOGTDEBUG0, "LS_RJT sent");
5915                         break;
5916                 } else {
5917                         isp_prt(isp, ISP_LOGTDEBUG0, "QFULL sent");
5918                         break;
5919                 }
5920         case ASYNC_FW_RESTART_COMPLETE:
5921                 isp_prt(isp, ISP_LOGDEBUG0, "FW restart complete");
5922                 break;
5923         case ASYNC_TEMPERATURE_ALERT:
5924                 isp_prt(isp, ISP_LOGERR, "Temperature alert (subcode 0x%x)",
5925                     ISP_READ(isp, OUTMAILBOX1));
5926                 break;
5927         case ASYNC_TRANSCEIVER_INSERTION:
5928                 isp_prt(isp, ISP_LOGDEBUG0, "Transceiver insertion (0x%x)",
5929                     ISP_READ(isp, OUTMAILBOX1));
5930                 break;
5931         case ASYNC_TRANSCEIVER_REMOVAL:
5932                 isp_prt(isp, ISP_LOGDEBUG0, "Transceiver removal");
5933                 break;
5934         case ASYNC_AUTOLOAD_FW_COMPLETE:
5935                 isp_prt(isp, ISP_LOGDEBUG0, "Autoload FW init complete");
5936                 break;
5937         case ASYNC_AUTOLOAD_FW_FAILURE:
5938                 isp_prt(isp, ISP_LOGERR, "Autoload FW init failure");
5939                 break;
5940         default:
5941                 isp_prt(isp, ISP_LOGWARN, "Unknown Async Code 0x%x", mbox);
5942                 break;
5943         }
5944 }
5945
5946 /*
5947  * Handle other response entries. A pointer to the request queue output
5948  * index is here in case we want to eat several entries at once, although
5949  * this is not used currently.
5950  */
5951
5952 static int
5953 isp_handle_other_response(ispsoftc_t *isp, int type, isphdr_t *hp, uint32_t *optrp)
5954 {
5955         isp_ridacq_t rid;
5956         int chan, c;
5957         uint32_t hdl, portid;
5958         void *ptr;
5959
5960         switch (type) {
5961         case RQSTYPE_MARKER:
5962                 isp_prt(isp, ISP_LOG_WARN1, "Marker Response");
5963                 return (1);
5964         case RQSTYPE_RPT_ID_ACQ:
5965                 isp_get_ridacq(isp, (isp_ridacq_t *)hp, &rid);
5966                 portid = (uint32_t)rid.ridacq_vp_port_hi << 16 |
5967                     rid.ridacq_vp_port_lo;
5968                 if (rid.ridacq_format == 0) {
5969                         for (chan = 0; chan < isp->isp_nchan; chan++) {
5970                                 fcparam *fcp = FCPARAM(isp, chan);
5971                                 if (fcp->role == ISP_ROLE_NONE)
5972                                         continue;
5973                                 c = (chan == 0) ? 127 : (chan - 1);
5974                                 if (rid.ridacq_map[c / 16] & (1 << (c % 16)) ||
5975                                     chan == 0) {
5976                                         fcp->isp_loopstate = LOOP_HAVE_LINK;
5977                                         isp_async(isp, ISPASYNC_CHANGE_NOTIFY,
5978                                             chan, ISPASYNC_CHANGE_OTHER);
5979                                 } else {
5980                                         fcp->isp_loopstate = LOOP_NIL;
5981                                         isp_async(isp, ISPASYNC_LOOP_DOWN,
5982                                             chan);
5983                                 }
5984                         }
5985                 } else {
5986                         fcparam *fcp = FCPARAM(isp, rid.ridacq_vp_index);
5987                         if (rid.ridacq_vp_status == RIDACQ_STS_COMPLETE ||
5988                             rid.ridacq_vp_status == RIDACQ_STS_CHANGED) {
5989                                 fcp->isp_topo = (rid.ridacq_map[0] >> 9) & 0x7;
5990                                 fcp->isp_portid = portid;
5991                                 fcp->isp_loopstate = LOOP_HAVE_ADDR;
5992                                 isp_async(isp, ISPASYNC_CHANGE_NOTIFY,
5993                                     rid.ridacq_vp_index, ISPASYNC_CHANGE_OTHER);
5994                         } else {
5995                                 fcp->isp_loopstate = LOOP_NIL;
5996                                 isp_async(isp, ISPASYNC_LOOP_DOWN,
5997                                     rid.ridacq_vp_index);
5998                         }
5999                 }
6000                 return (1);
6001         case RQSTYPE_CT_PASSTHRU:
6002         case RQSTYPE_VP_MODIFY:
6003         case RQSTYPE_VP_CTRL:
6004         case RQSTYPE_LOGIN:
6005                 ISP_IOXGET_32(isp, (uint32_t *)(hp + 1), hdl);
6006                 ptr = isp_find_xs(isp, hdl);
6007                 if (ptr != NULL) {
6008                         isp_destroy_handle(isp, hdl);
6009                         memcpy(ptr, hp, QENTRY_LEN);
6010                         wakeup(ptr);
6011                 }
6012                 return (1);
6013         case RQSTYPE_ATIO:
6014         case RQSTYPE_CTIO:
6015         case RQSTYPE_NOTIFY:
6016         case RQSTYPE_NOTIFY_ACK:
6017         case RQSTYPE_CTIO1:
6018         case RQSTYPE_ATIO2:
6019         case RQSTYPE_CTIO2:
6020         case RQSTYPE_CTIO3:
6021         case RQSTYPE_CTIO7:
6022         case RQSTYPE_ABTS_RCVD:
6023         case RQSTYPE_ABTS_RSP:
6024 #ifdef  ISP_TARGET_MODE
6025                 return (isp_target_notify(isp, (ispstatusreq_t *) hp, optrp));
6026 #endif
6027                 /* FALLTHROUGH */
6028         case RQSTYPE_REQUEST:
6029         default:
6030                 return (0);
6031         }
6032 }
6033
6034 static void
6035 isp_parse_status(ispsoftc_t *isp, ispstatusreq_t *sp, XS_T *xs, uint32_t *rp)
6036 {
6037         switch (sp->req_completion_status & 0xff) {
6038         case RQCS_COMPLETE:
6039                 if (XS_NOERR(xs)) {
6040                         XS_SETERR(xs, HBA_NOERROR);
6041                 }
6042                 return;
6043
6044         case RQCS_INCOMPLETE:
6045                 if ((sp->req_state_flags & RQSF_GOT_TARGET) == 0) {
6046                         isp_xs_prt(isp, xs, ISP_LOG_WARN1, "Selection Timeout @ %s:%d", __func__, __LINE__);
6047                         if (XS_NOERR(xs)) {
6048                                 XS_SETERR(xs, HBA_SELTIMEOUT);
6049                                 *rp = XS_XFRLEN(xs);
6050                         }
6051                         return;
6052                 }
6053                 isp_xs_prt(isp, xs, ISP_LOGERR, "Command Incomplete, state 0x%x", sp->req_state_flags);
6054                 break;
6055
6056         case RQCS_DMA_ERROR:
6057                 isp_xs_prt(isp, xs, ISP_LOGERR, "DMA Error");
6058                 *rp = XS_XFRLEN(xs);
6059                 break;
6060
6061         case RQCS_TRANSPORT_ERROR:
6062         {
6063                 char buf[172];
6064                 ISP_SNPRINTF(buf, sizeof (buf), "states=>");
6065                 if (sp->req_state_flags & RQSF_GOT_BUS) {
6066                         ISP_SNPRINTF(buf, sizeof (buf), "%s GOT_BUS", buf);
6067                 }
6068                 if (sp->req_state_flags & RQSF_GOT_TARGET) {
6069                         ISP_SNPRINTF(buf, sizeof (buf), "%s GOT_TGT", buf);
6070                 }
6071                 if (sp->req_state_flags & RQSF_SENT_CDB) {
6072                         ISP_SNPRINTF(buf, sizeof (buf), "%s SENT_CDB", buf);
6073                 }
6074                 if (sp->req_state_flags & RQSF_XFRD_DATA) {
6075                         ISP_SNPRINTF(buf, sizeof (buf), "%s XFRD_DATA", buf);
6076                 }
6077                 if (sp->req_state_flags & RQSF_GOT_STATUS) {
6078                         ISP_SNPRINTF(buf, sizeof (buf), "%s GOT_STS", buf);
6079                 }
6080                 if (sp->req_state_flags & RQSF_GOT_SENSE) {
6081                         ISP_SNPRINTF(buf, sizeof (buf), "%s GOT_SNS", buf);
6082                 }
6083                 if (sp->req_state_flags & RQSF_XFER_COMPLETE) {
6084                         ISP_SNPRINTF(buf, sizeof (buf), "%s XFR_CMPLT", buf);
6085                 }
6086                 ISP_SNPRINTF(buf, sizeof (buf), "%s\nstatus=>", buf);
6087                 if (sp->req_status_flags & RQSTF_DISCONNECT) {
6088                         ISP_SNPRINTF(buf, sizeof (buf), "%s Disconnect", buf);
6089                 }
6090                 if (sp->req_status_flags & RQSTF_SYNCHRONOUS) {
6091                         ISP_SNPRINTF(buf, sizeof (buf), "%s Sync_xfr", buf);
6092                 }
6093                 if (sp->req_status_flags & RQSTF_PARITY_ERROR) {
6094                         ISP_SNPRINTF(buf, sizeof (buf), "%s Parity", buf);
6095                 }
6096                 if (sp->req_status_flags & RQSTF_BUS_RESET) {
6097                         ISP_SNPRINTF(buf, sizeof (buf), "%s Bus_Reset", buf);
6098                 }
6099                 if (sp->req_status_flags & RQSTF_DEVICE_RESET) {
6100                         ISP_SNPRINTF(buf, sizeof (buf), "%s Device_Reset", buf);
6101                 }
6102                 if (sp->req_status_flags & RQSTF_ABORTED) {
6103                         ISP_SNPRINTF(buf, sizeof (buf), "%s Aborted", buf);
6104                 }
6105                 if (sp->req_status_flags & RQSTF_TIMEOUT) {
6106                         ISP_SNPRINTF(buf, sizeof (buf), "%s Timeout", buf);
6107                 }
6108                 if (sp->req_status_flags & RQSTF_NEGOTIATION) {
6109                         ISP_SNPRINTF(buf, sizeof (buf), "%s Negotiation", buf);
6110                 }
6111                 isp_xs_prt(isp, xs,  ISP_LOGERR, "Transport Error: %s", buf);
6112                 *rp = XS_XFRLEN(xs);
6113                 break;
6114         }
6115         case RQCS_RESET_OCCURRED:
6116         {
6117                 int chan;
6118                 isp_xs_prt(isp, xs, ISP_LOGWARN, "Bus Reset destroyed command");
6119                 for (chan = 0; chan < isp->isp_nchan; chan++) {
6120                         FCPARAM(isp, chan)->sendmarker = 1;
6121                 }
6122                 if (XS_NOERR(xs)) {
6123                         XS_SETERR(xs, HBA_BUSRESET);
6124                 }
6125                 *rp = XS_XFRLEN(xs);
6126                 return;
6127         }
6128         case RQCS_ABORTED:
6129                 isp_xs_prt(isp, xs, ISP_LOGERR, "Command Aborted");
6130                 ISP_SET_SENDMARKER(isp, XS_CHANNEL(xs), 1);
6131                 if (XS_NOERR(xs)) {
6132                         XS_SETERR(xs, HBA_ABORTED);
6133                 }
6134                 return;
6135
6136         case RQCS_TIMEOUT:
6137                 isp_xs_prt(isp, xs, ISP_LOGWARN, "Command timed out");
6138                 /*
6139                  * XXX: Check to see if we logged out of the device.
6140                  */
6141                 if (XS_NOERR(xs)) {
6142                         XS_SETERR(xs, HBA_CMDTIMEOUT);
6143                 }
6144                 return;
6145
6146         case RQCS_DATA_OVERRUN:
6147                 XS_SET_RESID(xs, sp->req_resid);
6148                 isp_xs_prt(isp, xs, ISP_LOGERR, "data overrun (%ld)", (long) XS_GET_RESID(xs));
6149                 if (XS_NOERR(xs)) {
6150                         XS_SETERR(xs, HBA_DATAOVR);
6151                 }
6152                 return;
6153
6154         case RQCS_COMMAND_OVERRUN:
6155                 isp_xs_prt(isp, xs, ISP_LOGERR, "command overrun");
6156                 break;
6157
6158         case RQCS_STATUS_OVERRUN:
6159                 isp_xs_prt(isp, xs, ISP_LOGERR, "status overrun");
6160                 break;
6161
6162         case RQCS_BAD_MESSAGE:
6163                 isp_xs_prt(isp, xs, ISP_LOGERR, "msg not COMMAND COMPLETE after status");
6164                 break;
6165
6166         case RQCS_NO_MESSAGE_OUT:
6167                 isp_xs_prt(isp, xs, ISP_LOGERR, "No MESSAGE OUT phase after selection");
6168                 break;
6169
6170         case RQCS_EXT_ID_FAILED:
6171                 isp_xs_prt(isp, xs, ISP_LOGERR, "EXTENDED IDENTIFY failed");
6172                 break;
6173
6174         case RQCS_IDE_MSG_FAILED:
6175                 isp_xs_prt(isp, xs, ISP_LOGERR, "INITIATOR DETECTED ERROR rejected");
6176                 break;
6177
6178         case RQCS_ABORT_MSG_FAILED:
6179                 isp_xs_prt(isp, xs, ISP_LOGERR, "ABORT OPERATION rejected");
6180                 break;
6181
6182         case RQCS_REJECT_MSG_FAILED:
6183                 isp_xs_prt(isp, xs, ISP_LOGERR, "MESSAGE REJECT rejected");
6184                 break;
6185
6186         case RQCS_NOP_MSG_FAILED:
6187                 isp_xs_prt(isp, xs, ISP_LOGERR, "NOP rejected");
6188                 break;
6189
6190         case RQCS_PARITY_ERROR_MSG_FAILED:
6191                 isp_xs_prt(isp, xs, ISP_LOGERR, "MESSAGE PARITY ERROR rejected");
6192                 break;
6193
6194         case RQCS_DEVICE_RESET_MSG_FAILED:
6195                 isp_xs_prt(isp, xs, ISP_LOGWARN, "BUS DEVICE RESET rejected");
6196                 break;
6197
6198         case RQCS_ID_MSG_FAILED:
6199                 isp_xs_prt(isp, xs, ISP_LOGERR, "IDENTIFY rejected");
6200                 break;
6201
6202         case RQCS_UNEXP_BUS_FREE:
6203                 isp_xs_prt(isp, xs, ISP_LOGERR, "Unexpected Bus Free");
6204                 break;
6205
6206         case RQCS_DATA_UNDERRUN:
6207         {
6208                 if (IS_FC(isp)) {
6209                         int ru_marked = (sp->req_scsi_status & RQCS_RU) != 0;
6210                         if (!ru_marked || sp->req_resid > XS_XFRLEN(xs)) {
6211                                 isp_xs_prt(isp, xs, ISP_LOGWARN, bun, XS_XFRLEN(xs), sp->req_resid, (ru_marked)? "marked" : "not marked");
6212                                 if (XS_NOERR(xs)) {
6213                                         XS_SETERR(xs, HBA_BOTCH);
6214                                 }
6215                                 return;
6216                         }
6217                 }
6218                 XS_SET_RESID(xs, sp->req_resid);
6219                 if (XS_NOERR(xs)) {
6220                         XS_SETERR(xs, HBA_NOERROR);
6221                 }
6222                 return;
6223         }
6224
6225         case RQCS_XACT_ERR1:
6226                 isp_xs_prt(isp, xs, ISP_LOGERR, "HBA attempted queued transaction with disconnect not set");
6227                 break;
6228
6229         case RQCS_XACT_ERR2:
6230                 isp_xs_prt(isp, xs, ISP_LOGERR,
6231                     "HBA attempted queued transaction to target routine %jx",
6232                     (uintmax_t)XS_LUN(xs));
6233                 break;
6234
6235         case RQCS_XACT_ERR3:
6236                 isp_xs_prt(isp, xs, ISP_LOGERR, "HBA attempted queued cmd when queueing disabled");
6237                 break;
6238
6239         case RQCS_BAD_ENTRY:
6240                 isp_prt(isp, ISP_LOGERR, "Invalid IOCB entry type detected");
6241                 break;
6242
6243         case RQCS_QUEUE_FULL:
6244                 isp_xs_prt(isp, xs, ISP_LOG_WARN1, "internal queues full status 0x%x", *XS_STSP(xs));
6245
6246                 /*
6247                  * If QFULL or some other status byte is set, then this
6248                  * isn't an error, per se.
6249                  *
6250                  * Unfortunately, some QLogic f/w writers have, in
6251                  * some cases, omitted to *set* status to QFULL.
6252                  */
6253 #if     0
6254                 if (*XS_STSP(xs) != SCSI_GOOD && XS_NOERR(xs)) {
6255                         XS_SETERR(xs, HBA_NOERROR);
6256                         return;
6257                 }
6258
6259 #endif
6260                 *XS_STSP(xs) = SCSI_QFULL;
6261                 XS_SETERR(xs, HBA_NOERROR);
6262                 return;
6263
6264         case RQCS_PHASE_SKIPPED:
6265                 isp_xs_prt(isp, xs, ISP_LOGERR, "SCSI phase skipped");
6266                 break;
6267
6268         case RQCS_ARQS_FAILED:
6269                 isp_xs_prt(isp, xs, ISP_LOGERR, "Auto Request Sense Failed");
6270                 if (XS_NOERR(xs)) {
6271                         XS_SETERR(xs, HBA_ARQFAIL);
6272                 }
6273                 return;
6274
6275         case RQCS_WIDE_FAILED:
6276                 isp_xs_prt(isp, xs, ISP_LOGERR, "Wide Negotiation Failed");
6277                 if (IS_SCSI(isp)) {
6278                         sdparam *sdp = SDPARAM(isp, XS_CHANNEL(xs));
6279                         sdp->isp_devparam[XS_TGT(xs)].goal_flags &= ~DPARM_WIDE;
6280                         sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
6281                         sdp->update = 1;
6282                 }
6283                 if (XS_NOERR(xs)) {
6284                         XS_SETERR(xs, HBA_NOERROR);
6285                 }
6286                 return;
6287
6288         case RQCS_SYNCXFER_FAILED:
6289                 isp_xs_prt(isp, xs, ISP_LOGERR, "SDTR Message Failed");
6290                 if (IS_SCSI(isp)) {
6291                         sdparam *sdp = SDPARAM(isp, XS_CHANNEL(xs));
6292                         sdp += XS_CHANNEL(xs);
6293                         sdp->isp_devparam[XS_TGT(xs)].goal_flags &= ~DPARM_SYNC;
6294                         sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
6295                         sdp->update = 1;
6296                 }
6297                 break;
6298
6299         case RQCS_LVD_BUSERR:
6300                 isp_xs_prt(isp, xs, ISP_LOGERR, "Bad LVD condition");
6301                 break;
6302
6303         case RQCS_PORT_UNAVAILABLE:
6304                 /*
6305                  * No such port on the loop. Moral equivalent of SELTIMEO
6306                  */
6307         case RQCS_PORT_LOGGED_OUT:
6308         {
6309                 const char *reason;
6310                 uint8_t sts = sp->req_completion_status & 0xff;
6311                 fcparam *fcp = FCPARAM(isp, 0);
6312                 fcportdb_t *lp;
6313
6314                 /*
6315                  * It was there (maybe)- treat as a selection timeout.
6316                  */
6317                 if (sts == RQCS_PORT_UNAVAILABLE) {
6318                         reason = "unavailable";
6319                 } else {
6320                         reason = "logout";
6321                 }
6322
6323                 isp_prt(isp, ISP_LOGINFO, "port %s for target %d", reason, XS_TGT(xs));
6324
6325                 /* XXX: Should we trigger rescan or FW announce change? */
6326
6327                 if (XS_NOERR(xs)) {
6328                         lp = &fcp->portdb[XS_TGT(xs)];
6329                         if (lp->state == FC_PORTDB_STATE_ZOMBIE) {
6330                                 *XS_STSP(xs) = SCSI_BUSY;
6331                                 XS_SETERR(xs, HBA_TGTBSY);
6332                         } else
6333                                 XS_SETERR(xs, HBA_SELTIMEOUT);
6334                 }
6335                 return;
6336         }
6337         case RQCS_PORT_CHANGED:
6338                 isp_prt(isp, ISP_LOGWARN, "port changed for target %d", XS_TGT(xs));
6339                 if (XS_NOERR(xs)) {
6340                         *XS_STSP(xs) = SCSI_BUSY;
6341                         XS_SETERR(xs, HBA_TGTBSY);
6342                 }
6343                 return;
6344
6345         case RQCS_PORT_BUSY:
6346                 isp_prt(isp, ISP_LOGWARN, "port busy for target %d", XS_TGT(xs));
6347                 if (XS_NOERR(xs)) {
6348                         *XS_STSP(xs) = SCSI_BUSY;
6349                         XS_SETERR(xs, HBA_TGTBSY);
6350                 }
6351                 return;
6352
6353         default:
6354                 isp_prt(isp, ISP_LOGERR, "Unknown Completion Status 0x%x", sp->req_completion_status);
6355                 break;
6356         }
6357         if (XS_NOERR(xs)) {
6358                 XS_SETERR(xs, HBA_BOTCH);
6359         }
6360 }
6361
6362 static void
6363 isp_parse_status_24xx(ispsoftc_t *isp, isp24xx_statusreq_t *sp, XS_T *xs, uint32_t *rp)
6364 {
6365         int ru_marked, sv_marked;
6366         int chan = XS_CHANNEL(xs);
6367
6368         switch (sp->req_completion_status) {
6369         case RQCS_COMPLETE:
6370                 if (XS_NOERR(xs)) {
6371                         XS_SETERR(xs, HBA_NOERROR);
6372                 }
6373                 return;
6374
6375         case RQCS_DMA_ERROR:
6376                 isp_xs_prt(isp, xs, ISP_LOGERR, "DMA error");
6377                 break;
6378
6379         case RQCS_TRANSPORT_ERROR:
6380                 isp_xs_prt(isp, xs,  ISP_LOGERR, "Transport Error");
6381                 break;
6382
6383         case RQCS_RESET_OCCURRED:
6384                 isp_xs_prt(isp, xs, ISP_LOGWARN, "reset destroyed command");
6385                 FCPARAM(isp, chan)->sendmarker = 1;
6386                 if (XS_NOERR(xs)) {
6387                         XS_SETERR(xs, HBA_BUSRESET);
6388                 }
6389                 return;
6390
6391         case RQCS_ABORTED:
6392                 isp_xs_prt(isp, xs, ISP_LOGERR, "Command Aborted");
6393                 FCPARAM(isp, chan)->sendmarker = 1;
6394                 if (XS_NOERR(xs)) {
6395                         XS_SETERR(xs, HBA_ABORTED);
6396                 }
6397                 return;
6398
6399         case RQCS_TIMEOUT:
6400                 isp_xs_prt(isp, xs, ISP_LOGWARN, "Command Timed Out");
6401                 if (XS_NOERR(xs)) {
6402                         XS_SETERR(xs, HBA_CMDTIMEOUT);
6403                 }
6404                 return;
6405
6406         case RQCS_DATA_OVERRUN:
6407                 XS_SET_RESID(xs, sp->req_resid);
6408                 isp_xs_prt(isp, xs, ISP_LOGERR, "Data Overrun");
6409                 if (XS_NOERR(xs)) {
6410                         XS_SETERR(xs, HBA_DATAOVR);
6411                 }
6412                 return;
6413
6414         case RQCS_24XX_DRE:     /* data reassembly error */
6415                 isp_prt(isp, ISP_LOGERR, "Chan %d data reassembly error for target %d", chan, XS_TGT(xs));
6416                 if (XS_NOERR(xs)) {
6417                         XS_SETERR(xs, HBA_ABORTED);
6418                 }
6419                 *rp = XS_XFRLEN(xs);
6420                 return;
6421
6422         case RQCS_24XX_TABORT:  /* aborted by target */
6423                 isp_prt(isp, ISP_LOGERR, "Chan %d target %d sent ABTS", chan, XS_TGT(xs));
6424                 if (XS_NOERR(xs)) {
6425                         XS_SETERR(xs, HBA_ABORTED);
6426                 }
6427                 return;
6428
6429         case RQCS_DATA_UNDERRUN:
6430                 ru_marked = (sp->req_scsi_status & RQCS_RU) != 0;
6431                 /*
6432                  * We can get an underrun w/o things being marked
6433                  * if we got a non-zero status.
6434                  */
6435                 sv_marked = (sp->req_scsi_status & (RQCS_SV|RQCS_RV)) != 0;
6436                 if ((ru_marked == 0 && sv_marked == 0) ||
6437                     (sp->req_resid > XS_XFRLEN(xs))) {
6438                         isp_xs_prt(isp, xs, ISP_LOGWARN, bun, XS_XFRLEN(xs), sp->req_resid, (ru_marked)? "marked" : "not marked");
6439                         if (XS_NOERR(xs)) {
6440                                 XS_SETERR(xs, HBA_BOTCH);
6441                         }
6442                         return;
6443                 }
6444                 XS_SET_RESID(xs, sp->req_resid);
6445                 isp_xs_prt(isp, xs, ISP_LOG_WARN1, "Data Underrun (%d) for command 0x%x", sp->req_resid, XS_CDBP(xs)[0] & 0xff);
6446                 if (XS_NOERR(xs)) {
6447                         XS_SETERR(xs, HBA_NOERROR);
6448                 }
6449                 return;
6450
6451         case RQCS_PORT_UNAVAILABLE:
6452                 /*
6453                  * No such port on the loop. Moral equivalent of SELTIMEO
6454                  */
6455         case RQCS_PORT_LOGGED_OUT:
6456         {
6457                 const char *reason;
6458                 uint8_t sts = sp->req_completion_status & 0xff;
6459                 fcparam *fcp = FCPARAM(isp, XS_CHANNEL(xs));
6460                 fcportdb_t *lp;
6461
6462                 /*
6463                  * It was there (maybe)- treat as a selection timeout.
6464                  */
6465                 if (sts == RQCS_PORT_UNAVAILABLE) {
6466                         reason = "unavailable";
6467                 } else {
6468                         reason = "logout";
6469                 }
6470
6471                 isp_prt(isp, ISP_LOGINFO, "Chan %d port %s for target %d",
6472                     chan, reason, XS_TGT(xs));
6473
6474                 /* XXX: Should we trigger rescan or FW announce change? */
6475
6476                 if (XS_NOERR(xs)) {
6477                         lp = &fcp->portdb[XS_TGT(xs)];
6478                         if (lp->state == FC_PORTDB_STATE_ZOMBIE) {
6479                                 *XS_STSP(xs) = SCSI_BUSY;
6480                                 XS_SETERR(xs, HBA_TGTBSY);
6481                         } else
6482                                 XS_SETERR(xs, HBA_SELTIMEOUT);
6483                 }
6484                 return;
6485         }
6486         case RQCS_PORT_CHANGED:
6487                 isp_prt(isp, ISP_LOGWARN, "port changed for target %d chan %d", XS_TGT(xs), chan);
6488                 if (XS_NOERR(xs)) {
6489                         *XS_STSP(xs) = SCSI_BUSY;
6490                         XS_SETERR(xs, HBA_TGTBSY);
6491                 }
6492                 return;
6493
6494         case RQCS_24XX_ENOMEM:  /* f/w resource unavailable */
6495                 isp_prt(isp, ISP_LOGWARN, "f/w resource unavailable for target %d chan %d", XS_TGT(xs), chan);
6496                 if (XS_NOERR(xs)) {
6497                         *XS_STSP(xs) = SCSI_BUSY;
6498                         XS_SETERR(xs, HBA_TGTBSY);
6499                 }
6500                 return;
6501
6502         case RQCS_24XX_TMO:     /* task management overrun */
6503                 isp_prt(isp, ISP_LOGWARN, "command for target %d overlapped task management for chan %d", XS_TGT(xs), chan);
6504                 if (XS_NOERR(xs)) {
6505                         *XS_STSP(xs) = SCSI_BUSY;
6506                         XS_SETERR(xs, HBA_TGTBSY);
6507                 }
6508                 return;
6509
6510         default:
6511                 isp_prt(isp, ISP_LOGERR, "Unknown Completion Status 0x%x on chan %d", sp->req_completion_status, chan);
6512                 break;
6513         }
6514         if (XS_NOERR(xs)) {
6515                 XS_SETERR(xs, HBA_BOTCH);
6516         }
6517 }
6518
6519 static void
6520 isp_fastpost_complete(ispsoftc_t *isp, uint32_t fph)
6521 {
6522         XS_T *xs;
6523
6524         if (fph == 0) {
6525                 return;
6526         }
6527         xs = isp_find_xs(isp, fph);
6528         if (xs == NULL) {
6529                 isp_prt(isp, ISP_LOGWARN,
6530                     "Command for fast post handle 0x%x not found", fph);
6531                 return;
6532         }
6533         isp_destroy_handle(isp, fph);
6534
6535         /*
6536          * Since we don't have a result queue entry item,
6537          * we must believe that SCSI status is zero and
6538          * that all data transferred.
6539          */
6540         XS_SET_RESID(xs, 0);
6541         *XS_STSP(xs) = SCSI_GOOD;
6542         if (XS_XFRLEN(xs)) {
6543                 ISP_DMAFREE(isp, xs, fph);
6544         }
6545         isp_done(xs);
6546 }
6547
6548 #define ISP_SCSI_IBITS(op)              (mbpscsi[((op)<<1)])
6549 #define ISP_SCSI_OBITS(op)              (mbpscsi[((op)<<1) + 1])
6550 #define ISP_SCSI_OPMAP(in, out)         in, out
6551 static const uint8_t mbpscsi[] = {
6552         ISP_SCSI_OPMAP(0x01, 0x01),     /* 0x00: MBOX_NO_OP */
6553         ISP_SCSI_OPMAP(0x1f, 0x01),     /* 0x01: MBOX_LOAD_RAM */
6554         ISP_SCSI_OPMAP(0x03, 0x01),     /* 0x02: MBOX_EXEC_FIRMWARE */
6555         ISP_SCSI_OPMAP(0x1f, 0x01),     /* 0x03: MBOX_DUMP_RAM */
6556         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x04: MBOX_WRITE_RAM_WORD */
6557         ISP_SCSI_OPMAP(0x03, 0x07),     /* 0x05: MBOX_READ_RAM_WORD */
6558         ISP_SCSI_OPMAP(0x3f, 0x3f),     /* 0x06: MBOX_MAILBOX_REG_TEST */
6559         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x07: MBOX_VERIFY_CHECKSUM   */
6560         ISP_SCSI_OPMAP(0x01, 0x0f),     /* 0x08: MBOX_ABOUT_FIRMWARE */
6561         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x09: */
6562         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x0a: */
6563         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x0b: */
6564         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x0c: */
6565         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x0d: */
6566         ISP_SCSI_OPMAP(0x01, 0x05),     /* 0x0e: MBOX_CHECK_FIRMWARE */
6567         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x0f: */
6568         ISP_SCSI_OPMAP(0x1f, 0x1f),     /* 0x10: MBOX_INIT_REQ_QUEUE */
6569         ISP_SCSI_OPMAP(0x3f, 0x3f),     /* 0x11: MBOX_INIT_RES_QUEUE */
6570         ISP_SCSI_OPMAP(0x0f, 0x0f),     /* 0x12: MBOX_EXECUTE_IOCB */
6571         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x13: MBOX_WAKE_UP   */
6572         ISP_SCSI_OPMAP(0x01, 0x3f),     /* 0x14: MBOX_STOP_FIRMWARE */
6573         ISP_SCSI_OPMAP(0x0f, 0x0f),     /* 0x15: MBOX_ABORT */
6574         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x16: MBOX_ABORT_DEVICE */
6575         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x17: MBOX_ABORT_TARGET */
6576         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x18: MBOX_BUS_RESET */
6577         ISP_SCSI_OPMAP(0x03, 0x07),     /* 0x19: MBOX_STOP_QUEUE */
6578         ISP_SCSI_OPMAP(0x03, 0x07),     /* 0x1a: MBOX_START_QUEUE */
6579         ISP_SCSI_OPMAP(0x03, 0x07),     /* 0x1b: MBOX_SINGLE_STEP_QUEUE */
6580         ISP_SCSI_OPMAP(0x03, 0x07),     /* 0x1c: MBOX_ABORT_QUEUE */
6581         ISP_SCSI_OPMAP(0x03, 0x4f),     /* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
6582         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x1e: */
6583         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x1f: MBOX_GET_FIRMWARE_STATUS */
6584         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x20: MBOX_GET_INIT_SCSI_ID */
6585         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x21: MBOX_GET_SELECT_TIMEOUT */
6586         ISP_SCSI_OPMAP(0x01, 0xc7),     /* 0x22: MBOX_GET_RETRY_COUNT   */
6587         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x23: MBOX_GET_TAG_AGE_LIMIT */
6588         ISP_SCSI_OPMAP(0x01, 0x03),     /* 0x24: MBOX_GET_CLOCK_RATE */
6589         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x25: MBOX_GET_ACT_NEG_STATE */
6590         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x26: MBOX_GET_ASYNC_DATA_SETUP_TIME */
6591         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x27: MBOX_GET_PCI_PARAMS */
6592         ISP_SCSI_OPMAP(0x03, 0x4f),     /* 0x28: MBOX_GET_TARGET_PARAMS */
6593         ISP_SCSI_OPMAP(0x03, 0x0f),     /* 0x29: MBOX_GET_DEV_QUEUE_PARAMS */
6594         ISP_SCSI_OPMAP(0x01, 0x07),     /* 0x2a: MBOX_GET_RESET_DELAY_PARAMS */
6595         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x2b: */
6596         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x2c: */
6597         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x2d: */
6598         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x2e: */
6599         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x2f: */
6600         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x30: MBOX_SET_INIT_SCSI_ID */
6601         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x31: MBOX_SET_SELECT_TIMEOUT */
6602         ISP_SCSI_OPMAP(0xc7, 0xc7),     /* 0x32: MBOX_SET_RETRY_COUNT   */
6603         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x33: MBOX_SET_TAG_AGE_LIMIT */
6604         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x34: MBOX_SET_CLOCK_RATE */
6605         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x35: MBOX_SET_ACT_NEG_STATE */
6606         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x36: MBOX_SET_ASYNC_DATA_SETUP_TIME */
6607         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x37: MBOX_SET_PCI_CONTROL_PARAMS */
6608         ISP_SCSI_OPMAP(0x4f, 0x4f),     /* 0x38: MBOX_SET_TARGET_PARAMS */
6609         ISP_SCSI_OPMAP(0x0f, 0x0f),     /* 0x39: MBOX_SET_DEV_QUEUE_PARAMS */
6610         ISP_SCSI_OPMAP(0x07, 0x07),     /* 0x3a: MBOX_SET_RESET_DELAY_PARAMS */
6611         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x3b: */
6612         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x3c: */
6613         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x3d: */
6614         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x3e: */
6615         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x3f: */
6616         ISP_SCSI_OPMAP(0x01, 0x03),     /* 0x40: MBOX_RETURN_BIOS_BLOCK_ADDR */
6617         ISP_SCSI_OPMAP(0x3f, 0x01),     /* 0x41: MBOX_WRITE_FOUR_RAM_WORDS */
6618         ISP_SCSI_OPMAP(0x03, 0x07),     /* 0x42: MBOX_EXEC_BIOS_IOCB */
6619         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x43: */
6620         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x44: */
6621         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x45: SET SYSTEM PARAMETER */
6622         ISP_SCSI_OPMAP(0x01, 0x03),     /* 0x46: GET SYSTEM PARAMETER */
6623         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x47: */
6624         ISP_SCSI_OPMAP(0x01, 0xcf),     /* 0x48: GET SCAM CONFIGURATION */
6625         ISP_SCSI_OPMAP(0xcf, 0xcf),     /* 0x49: SET SCAM CONFIGURATION */
6626         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x4a: MBOX_SET_FIRMWARE_FEATURES */
6627         ISP_SCSI_OPMAP(0x01, 0x03),     /* 0x4b: MBOX_GET_FIRMWARE_FEATURES */
6628         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x4c: */
6629         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x4d: */
6630         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x4e: */
6631         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x4f: */
6632         ISP_SCSI_OPMAP(0xdf, 0xdf),     /* 0x50: LOAD RAM A64 */
6633         ISP_SCSI_OPMAP(0xdf, 0xdf),     /* 0x51: DUMP RAM A64 */
6634         ISP_SCSI_OPMAP(0xdf, 0xff),     /* 0x52: INITIALIZE REQUEST QUEUE A64 */
6635         ISP_SCSI_OPMAP(0xef, 0xff),     /* 0x53: INITIALIZE RESPONSE QUEUE A64 */
6636         ISP_SCSI_OPMAP(0xcf, 0x01),     /* 0x54: EXECUCUTE COMMAND IOCB A64 */
6637         ISP_SCSI_OPMAP(0x07, 0x01),     /* 0x55: ENABLE TARGET MODE */
6638         ISP_SCSI_OPMAP(0x03, 0x0f),     /* 0x56: GET TARGET STATUS */
6639         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x57: */
6640         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x58: */
6641         ISP_SCSI_OPMAP(0x00, 0x00),     /* 0x59: */
6642         ISP_SCSI_OPMAP(0x03, 0x03),     /* 0x5a: SET DATA OVERRUN RECOVERY MODE */
6643         ISP_SCSI_OPMAP(0x01, 0x03),     /* 0x5b: GET DATA OVERRUN RECOVERY MODE */
6644         ISP_SCSI_OPMAP(0x0f, 0x0f),     /* 0x5c: SET HOST DATA */
6645         ISP_SCSI_OPMAP(0x01, 0x01)      /* 0x5d: GET NOST DATA */
6646 };
6647 #define MAX_SCSI_OPCODE 0x5d
6648
6649 static const char *scsi_mbcmd_names[] = {
6650         "NO-OP",
6651         "LOAD RAM",
6652         "EXEC FIRMWARE",
6653         "DUMP RAM",
6654         "WRITE RAM WORD",
6655         "READ RAM WORD",
6656         "MAILBOX REG TEST",
6657         "VERIFY CHECKSUM",
6658         "ABOUT FIRMWARE",
6659         NULL,
6660         NULL,
6661         NULL,
6662         NULL,
6663         NULL,
6664         "CHECK FIRMWARE",
6665         NULL,
6666         "INIT REQUEST QUEUE",
6667         "INIT RESULT QUEUE",
6668         "EXECUTE IOCB",
6669         "WAKE UP",
6670         "STOP FIRMWARE",
6671         "ABORT",
6672         "ABORT DEVICE",
6673         "ABORT TARGET",
6674         "BUS RESET",
6675         "STOP QUEUE",
6676         "START QUEUE",
6677         "SINGLE STEP QUEUE",
6678         "ABORT QUEUE",
6679         "GET DEV QUEUE STATUS",
6680         NULL,
6681         "GET FIRMWARE STATUS",
6682         "GET INIT SCSI ID",
6683         "GET SELECT TIMEOUT",
6684         "GET RETRY COUNT",
6685         "GET TAG AGE LIMIT",
6686         "GET CLOCK RATE",
6687         "GET ACT NEG STATE",
6688         "GET ASYNC DATA SETUP TIME",
6689         "GET PCI PARAMS",
6690         "GET TARGET PARAMS",
6691         "GET DEV QUEUE PARAMS",
6692         "GET RESET DELAY PARAMS",
6693         NULL,
6694         NULL,
6695         NULL,
6696         NULL,
6697         NULL,
6698         "SET INIT SCSI ID",
6699         "SET SELECT TIMEOUT",
6700         "SET RETRY COUNT",
6701         "SET TAG AGE LIMIT",
6702         "SET CLOCK RATE",
6703         "SET ACT NEG STATE",
6704         "SET ASYNC DATA SETUP TIME",
6705         "SET PCI CONTROL PARAMS",
6706         "SET TARGET PARAMS",
6707         "SET DEV QUEUE PARAMS",
6708         "SET RESET DELAY PARAMS",
6709         NULL,
6710         NULL,
6711         NULL,
6712         NULL,
6713         NULL,
6714         "RETURN BIOS BLOCK ADDR",
6715         "WRITE FOUR RAM WORDS",
6716         "EXEC BIOS IOCB",
6717         NULL,
6718         NULL,
6719         "SET SYSTEM PARAMETER",
6720         "GET SYSTEM PARAMETER",
6721         NULL,
6722         "GET SCAM CONFIGURATION",
6723         "SET SCAM CONFIGURATION",
6724         "SET FIRMWARE FEATURES",
6725         "GET FIRMWARE FEATURES",
6726         NULL,
6727         NULL,
6728         NULL,
6729         NULL,
6730         "LOAD RAM A64",
6731         "DUMP RAM A64",
6732         "INITIALIZE REQUEST QUEUE A64",
6733         "INITIALIZE RESPONSE QUEUE A64",
6734         "EXECUTE IOCB A64",
6735         "ENABLE TARGET MODE",
6736         "GET TARGET MODE STATE",
6737         NULL,
6738         NULL,
6739         NULL,
6740         "SET DATA OVERRUN RECOVERY MODE",
6741         "GET DATA OVERRUN RECOVERY MODE",
6742         "SET HOST DATA",
6743         "GET NOST DATA",
6744 };
6745
6746 #define ISP_FC_IBITS(op)        ((mbpfc[((op)<<3) + 0] << 24) | (mbpfc[((op)<<3) + 1] << 16) | (mbpfc[((op)<<3) + 2] << 8) | (mbpfc[((op)<<3) + 3]))
6747 #define ISP_FC_OBITS(op)        ((mbpfc[((op)<<3) + 4] << 24) | (mbpfc[((op)<<3) + 5] << 16) | (mbpfc[((op)<<3) + 6] << 8) | (mbpfc[((op)<<3) + 7]))
6748
6749 #define ISP_FC_OPMAP(in0, out0)                                                   0,   0,   0, in0,    0,    0,    0, out0
6750 #define ISP_FC_OPMAP_HALF(in1, in0, out1, out0)                                   0,   0, in1, in0,    0,    0, out1, out0
6751 #define ISP_FC_OPMAP_FULL(in3, in2, in1, in0, out3, out2, out1, out0)           in3, in2, in1, in0, out3, out2, out1, out0
6752 static const uint32_t mbpfc[] = {
6753         ISP_FC_OPMAP(0x01, 0x01),       /* 0x00: MBOX_NO_OP */
6754         ISP_FC_OPMAP(0x1f, 0x01),       /* 0x01: MBOX_LOAD_RAM */
6755         ISP_FC_OPMAP_HALF(0x07, 0xff, 0x00, 0x1f),      /* 0x02: MBOX_EXEC_FIRMWARE */
6756         ISP_FC_OPMAP(0xdf, 0x01),       /* 0x03: MBOX_DUMP_RAM */
6757         ISP_FC_OPMAP(0x07, 0x07),       /* 0x04: MBOX_WRITE_RAM_WORD */
6758         ISP_FC_OPMAP(0x03, 0x07),       /* 0x05: MBOX_READ_RAM_WORD */
6759         ISP_FC_OPMAP_FULL(0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff),      /* 0x06: MBOX_MAILBOX_REG_TEST */
6760         ISP_FC_OPMAP(0x07, 0x07),       /* 0x07: MBOX_VERIFY_CHECKSUM   */
6761         ISP_FC_OPMAP_FULL(0x0, 0x0, 0x0, 0x01, 0x0, 0x3, 0x80, 0x7f),   /* 0x08: MBOX_ABOUT_FIRMWARE */
6762         ISP_FC_OPMAP(0xdf, 0x01),       /* 0x09: MBOX_LOAD_RISC_RAM_2100 */
6763         ISP_FC_OPMAP(0xdf, 0x01),       /* 0x0a: DUMP RAM */
6764         ISP_FC_OPMAP_HALF(0x1, 0xff, 0x0, 0x01),        /* 0x0b: MBOX_LOAD_RISC_RAM */
6765         ISP_FC_OPMAP(0x00, 0x00),       /* 0x0c: */
6766         ISP_FC_OPMAP_HALF(0x1, 0x0f, 0x0, 0x01),        /* 0x0d: MBOX_WRITE_RAM_WORD_EXTENDED */
6767         ISP_FC_OPMAP(0x01, 0x05),       /* 0x0e: MBOX_CHECK_FIRMWARE */
6768         ISP_FC_OPMAP_HALF(0x1, 0x03, 0x0, 0x0d),        /* 0x0f: MBOX_READ_RAM_WORD_EXTENDED */
6769         ISP_FC_OPMAP(0x1f, 0x11),       /* 0x10: MBOX_INIT_REQ_QUEUE */
6770         ISP_FC_OPMAP(0x2f, 0x21),       /* 0x11: MBOX_INIT_RES_QUEUE */
6771         ISP_FC_OPMAP(0x0f, 0x01),       /* 0x12: MBOX_EXECUTE_IOCB */
6772         ISP_FC_OPMAP(0x03, 0x03),       /* 0x13: MBOX_WAKE_UP   */
6773         ISP_FC_OPMAP_HALF(0x1, 0xff, 0x0, 0x03),        /* 0x14: MBOX_STOP_FIRMWARE */
6774         ISP_FC_OPMAP(0x4f, 0x01),       /* 0x15: MBOX_ABORT */
6775         ISP_FC_OPMAP(0x07, 0x01),       /* 0x16: MBOX_ABORT_DEVICE */
6776         ISP_FC_OPMAP(0x07, 0x01),       /* 0x17: MBOX_ABORT_TARGET */
6777         ISP_FC_OPMAP(0x03, 0x03),       /* 0x18: MBOX_BUS_RESET */
6778         ISP_FC_OPMAP(0x07, 0x05),       /* 0x19: MBOX_STOP_QUEUE */
6779         ISP_FC_OPMAP(0x07, 0x05),       /* 0x1a: MBOX_START_QUEUE */
6780         ISP_FC_OPMAP(0x07, 0x05),       /* 0x1b: MBOX_SINGLE_STEP_QUEUE */
6781         ISP_FC_OPMAP(0x07, 0x05),       /* 0x1c: MBOX_ABORT_QUEUE */
6782         ISP_FC_OPMAP(0x07, 0x03),       /* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
6783         ISP_FC_OPMAP(0x00, 0x00),       /* 0x1e: */
6784         ISP_FC_OPMAP(0x01, 0x07),       /* 0x1f: MBOX_GET_FIRMWARE_STATUS */
6785         ISP_FC_OPMAP_HALF(0x2, 0x01, 0x7e, 0xcf),       /* 0x20: MBOX_GET_LOOP_ID */
6786         ISP_FC_OPMAP(0x00, 0x00),       /* 0x21: */
6787         ISP_FC_OPMAP(0x03, 0x4b),       /* 0x22: MBOX_GET_TIMEOUT_PARAMS */
6788         ISP_FC_OPMAP(0x00, 0x00),       /* 0x23: */
6789         ISP_FC_OPMAP(0x00, 0x00),       /* 0x24: */
6790         ISP_FC_OPMAP(0x00, 0x00),       /* 0x25: */
6791         ISP_FC_OPMAP(0x00, 0x00),       /* 0x26: */
6792         ISP_FC_OPMAP(0x00, 0x00),       /* 0x27: */
6793         ISP_FC_OPMAP(0x01, 0x03),       /* 0x28: MBOX_GET_FIRMWARE_OPTIONS */
6794         ISP_FC_OPMAP(0x03, 0x07),       /* 0x29: MBOX_GET_PORT_QUEUE_PARAMS */
6795         ISP_FC_OPMAP(0x00, 0x00),       /* 0x2a: */
6796         ISP_FC_OPMAP(0x00, 0x00),       /* 0x2b: */
6797         ISP_FC_OPMAP(0x00, 0x00),       /* 0x2c: */
6798         ISP_FC_OPMAP(0x00, 0x00),       /* 0x2d: */
6799         ISP_FC_OPMAP(0x00, 0x00),       /* 0x2e: */
6800         ISP_FC_OPMAP(0x00, 0x00),       /* 0x2f: */
6801         ISP_FC_OPMAP(0x00, 0x00),       /* 0x30: */
6802         ISP_FC_OPMAP(0x00, 0x00),       /* 0x31: */
6803         ISP_FC_OPMAP(0x4b, 0x4b),       /* 0x32: MBOX_SET_TIMEOUT_PARAMS */
6804         ISP_FC_OPMAP(0x00, 0x00),       /* 0x33: */
6805         ISP_FC_OPMAP(0x00, 0x00),       /* 0x34: */
6806         ISP_FC_OPMAP(0x00, 0x00),       /* 0x35: */
6807         ISP_FC_OPMAP(0x00, 0x00),       /* 0x36: */
6808         ISP_FC_OPMAP(0x00, 0x00),       /* 0x37: */
6809         ISP_FC_OPMAP(0x0f, 0x01),       /* 0x38: MBOX_SET_FIRMWARE_OPTIONS */
6810         ISP_FC_OPMAP(0x0f, 0x07),       /* 0x39: MBOX_SET_PORT_QUEUE_PARAMS */
6811         ISP_FC_OPMAP(0x00, 0x00),       /* 0x3a: */
6812         ISP_FC_OPMAP(0x00, 0x00),       /* 0x3b: */
6813         ISP_FC_OPMAP(0x00, 0x00),       /* 0x3c: */
6814         ISP_FC_OPMAP(0x00, 0x00),       /* 0x3d: */
6815         ISP_FC_OPMAP(0x00, 0x00),       /* 0x3e: */
6816         ISP_FC_OPMAP(0x00, 0x00),       /* 0x3f: */
6817         ISP_FC_OPMAP(0x03, 0x01),       /* 0x40: MBOX_LOOP_PORT_BYPASS */
6818         ISP_FC_OPMAP(0x03, 0x01),       /* 0x41: MBOX_LOOP_PORT_ENABLE */
6819         ISP_FC_OPMAP_HALF(0x0, 0x01, 0x1f, 0xcf),       /* 0x42: MBOX_GET_RESOURCE_COUNT */
6820         ISP_FC_OPMAP(0x01, 0x01),       /* 0x43: MBOX_REQUEST_OFFLINE_MODE */
6821         ISP_FC_OPMAP(0x00, 0x00),       /* 0x44: */
6822         ISP_FC_OPMAP(0x00, 0x00),       /* 0x45: */
6823         ISP_FC_OPMAP(0x00, 0x00),       /* 0x46: */
6824         ISP_FC_OPMAP(0xcf, 0x03),       /* 0x47: GET PORT_DATABASE ENHANCED */
6825         ISP_FC_OPMAP(0xcf, 0x0f),       /* 0x48: MBOX_INIT_FIRMWARE_MULTI_ID */
6826         ISP_FC_OPMAP(0xcd, 0x01),       /* 0x49: MBOX_GET_VP_DATABASE */
6827         ISP_FC_OPMAP_HALF(0x2, 0xcd, 0x0, 0x01),        /* 0x4a: MBOX_GET_VP_DATABASE_ENTRY */
6828         ISP_FC_OPMAP(0x00, 0x00),       /* 0x4b: */
6829         ISP_FC_OPMAP(0x00, 0x00),       /* 0x4c: */
6830         ISP_FC_OPMAP(0x00, 0x00),       /* 0x4d: */
6831         ISP_FC_OPMAP(0x00, 0x00),       /* 0x4e: */
6832         ISP_FC_OPMAP(0x00, 0x00),       /* 0x4f: */
6833         ISP_FC_OPMAP(0x00, 0x00),       /* 0x50: */
6834         ISP_FC_OPMAP(0x00, 0x00),       /* 0x51: */
6835         ISP_FC_OPMAP(0x00, 0x00),       /* 0x52: */
6836         ISP_FC_OPMAP(0x00, 0x00),       /* 0x53: */
6837         ISP_FC_OPMAP(0xcf, 0x01),       /* 0x54: EXECUTE IOCB A64 */
6838         ISP_FC_OPMAP(0x00, 0x00),       /* 0x55: */
6839         ISP_FC_OPMAP(0x00, 0x00),       /* 0x56: */
6840         ISP_FC_OPMAP(0x00, 0x00),       /* 0x57: */
6841         ISP_FC_OPMAP(0x00, 0x00),       /* 0x58: */
6842         ISP_FC_OPMAP(0x00, 0x00),       /* 0x59: */
6843         ISP_FC_OPMAP(0x00, 0x00),       /* 0x5a: */
6844         ISP_FC_OPMAP(0x03, 0x01),       /* 0x5b: MBOX_DRIVER_HEARTBEAT */
6845         ISP_FC_OPMAP(0xcf, 0x01),       /* 0x5c: MBOX_FW_HEARTBEAT */
6846         ISP_FC_OPMAP(0x07, 0x1f),       /* 0x5d: MBOX_GET_SET_DATA_RATE */
6847         ISP_FC_OPMAP(0x00, 0x00),       /* 0x5e: */
6848         ISP_FC_OPMAP(0x00, 0x00),       /* 0x5f: */
6849         ISP_FC_OPMAP(0xcf, 0x0f),       /* 0x60: MBOX_INIT_FIRMWARE */
6850         ISP_FC_OPMAP(0x00, 0x00),       /* 0x61: */
6851         ISP_FC_OPMAP(0x01, 0x01),       /* 0x62: MBOX_INIT_LIP */
6852         ISP_FC_OPMAP(0xcd, 0x03),       /* 0x63: MBOX_GET_FC_AL_POSITION_MAP */
6853         ISP_FC_OPMAP(0xcf, 0x01),       /* 0x64: MBOX_GET_PORT_DB */
6854         ISP_FC_OPMAP(0x07, 0x01),       /* 0x65: MBOX_CLEAR_ACA */
6855         ISP_FC_OPMAP(0x07, 0x01),       /* 0x66: MBOX_TARGET_RESET */
6856         ISP_FC_OPMAP(0x07, 0x01),       /* 0x67: MBOX_CLEAR_TASK_SET */
6857         ISP_FC_OPMAP(0x07, 0x01),       /* 0x68: MBOX_ABORT_TASK_SET */
6858         ISP_FC_OPMAP_HALF(0x00, 0x01, 0x0f, 0x1f),      /* 0x69: MBOX_GET_FW_STATE */
6859         ISP_FC_OPMAP_HALF(0x6, 0x03, 0x0, 0xcf),        /* 0x6a: MBOX_GET_PORT_NAME */
6860         ISP_FC_OPMAP(0xcf, 0x01),       /* 0x6b: MBOX_GET_LINK_STATUS */
6861         ISP_FC_OPMAP(0x0f, 0x01),       /* 0x6c: MBOX_INIT_LIP_RESET */
6862         ISP_FC_OPMAP(0x00, 0x00),       /* 0x6d: */
6863         ISP_FC_OPMAP(0xcf, 0x03),       /* 0x6e: MBOX_SEND_SNS */
6864         ISP_FC_OPMAP(0x0f, 0x07),       /* 0x6f: MBOX_FABRIC_LOGIN */
6865         ISP_FC_OPMAP_HALF(0x02, 0x03, 0x00, 0x03),      /* 0x70: MBOX_SEND_CHANGE_REQUEST */
6866         ISP_FC_OPMAP(0x03, 0x03),       /* 0x71: MBOX_FABRIC_LOGOUT */
6867         ISP_FC_OPMAP(0x0f, 0x0f),       /* 0x72: MBOX_INIT_LIP_LOGIN */
6868         ISP_FC_OPMAP(0x00, 0x00),       /* 0x73: */
6869         ISP_FC_OPMAP(0x07, 0x01),       /* 0x74: LOGIN LOOP PORT */
6870         ISP_FC_OPMAP_HALF(0x03, 0xcf, 0x00, 0x07),      /* 0x75: GET PORT/NODE NAME LIST */
6871         ISP_FC_OPMAP(0x4f, 0x01),       /* 0x76: SET VENDOR ID */
6872         ISP_FC_OPMAP(0xcd, 0x01),       /* 0x77: INITIALIZE IP MAILBOX */
6873         ISP_FC_OPMAP(0x00, 0x00),       /* 0x78: */
6874         ISP_FC_OPMAP(0x00, 0x00),       /* 0x79: */
6875         ISP_FC_OPMAP(0x00, 0x00),       /* 0x7a: */
6876         ISP_FC_OPMAP(0x00, 0x00),       /* 0x7b: */
6877         ISP_FC_OPMAP_HALF(0x03, 0x4f, 0x00, 0x07),      /* 0x7c: Get ID List */
6878         ISP_FC_OPMAP(0xcf, 0x01),       /* 0x7d: SEND LFA */
6879         ISP_FC_OPMAP(0x0f, 0x01)        /* 0x7e: LUN RESET */
6880 };
6881 #define MAX_FC_OPCODE   0x7e
6882 /*
6883  * Footnotes
6884  *
6885  * (1): this sets bits 21..16 in mailbox register #8, which we nominally
6886  *      do not access at this time in the core driver. The caller is
6887  *      responsible for setting this register first (Gross!). The assumption
6888  *      is that we won't overflow.
6889  */
6890
6891 static const char *fc_mbcmd_names[] = {
6892         "NO-OP",                        /* 00h */
6893         "LOAD RAM",
6894         "EXEC FIRMWARE",
6895         "DUMP RAM",
6896         "WRITE RAM WORD",
6897         "READ RAM WORD",
6898         "MAILBOX REG TEST",
6899         "VERIFY CHECKSUM",
6900         "ABOUT FIRMWARE",
6901         "LOAD RAM (2100)",
6902         "DUMP RAM",
6903         "LOAD RISC RAM",
6904         "DUMP RISC RAM",
6905         "WRITE RAM WORD EXTENDED",
6906         "CHECK FIRMWARE",
6907         "READ RAM WORD EXTENDED",
6908         "INIT REQUEST QUEUE",           /* 10h */
6909         "INIT RESULT QUEUE",
6910         "EXECUTE IOCB",
6911         "WAKE UP",
6912         "STOP FIRMWARE",
6913         "ABORT",
6914         "ABORT DEVICE",
6915         "ABORT TARGET",
6916         "BUS RESET",
6917         "STOP QUEUE",
6918         "START QUEUE",
6919         "SINGLE STEP QUEUE",
6920         "ABORT QUEUE",
6921         "GET DEV QUEUE STATUS",
6922         NULL,
6923         "GET FIRMWARE STATUS",
6924         "GET LOOP ID",                  /* 20h */
6925         NULL,
6926         "GET TIMEOUT PARAMS",
6927         NULL,
6928         NULL,
6929         NULL,
6930         NULL,
6931         NULL,
6932         "GET FIRMWARE OPTIONS",
6933         "GET PORT QUEUE PARAMS",
6934         "GENERATE SYSTEM ERROR",
6935         NULL,
6936         NULL,
6937         NULL,
6938         NULL,
6939         NULL,
6940         "WRITE SFP",                    /* 30h */
6941         "READ SFP",
6942         "SET TIMEOUT PARAMS",
6943         NULL,
6944         NULL,
6945         NULL,
6946         NULL,
6947         NULL,
6948         "SET FIRMWARE OPTIONS",
6949         "SET PORT QUEUE PARAMS",
6950         NULL,
6951         "SET FC LED CONF",
6952         NULL,
6953         "RESTART NIC FIRMWARE",
6954         "ACCESS CONTROL",
6955         NULL,
6956         "LOOP PORT BYPASS",             /* 40h */
6957         "LOOP PORT ENABLE",
6958         "GET RESOURCE COUNT",
6959         "REQUEST NON PARTICIPATING MODE",
6960         "DIAGNOSTIC ECHO TEST",
6961         "DIAGNOSTIC LOOPBACK",
6962         NULL,
6963         "GET PORT DATABASE ENHANCED",
6964         "INIT FIRMWARE MULTI ID",
6965         "GET VP DATABASE",
6966         "GET VP DATABASE ENTRY",
6967         NULL,
6968         NULL,
6969         NULL,
6970         NULL,
6971         NULL,
6972         "GET FCF LIST",                 /* 50h */
6973         "GET DCBX PARAMETERS",
6974         NULL,
6975         "HOST MEMORY COPY",
6976         "EXECUTE IOCB A64",
6977         NULL,
6978         NULL,
6979         "SEND RNID",
6980         NULL,
6981         "SET PARAMETERS",
6982         "GET PARAMETERS",
6983         "DRIVER HEARTBEAT",
6984         "FIRMWARE HEARTBEAT",
6985         "GET/SET DATA RATE",
6986         "SEND RNFT",
6987         NULL,
6988         "INIT FIRMWARE",                /* 60h */
6989         "GET INIT CONTROL BLOCK",
6990         "INIT LIP",
6991         "GET FC-AL POSITION MAP",
6992         "GET PORT DATABASE",
6993         "CLEAR ACA",
6994         "TARGET RESET",
6995         "CLEAR TASK SET",
6996         "ABORT TASK SET",
6997         "GET FW STATE",
6998         "GET PORT NAME",
6999         "GET LINK STATUS",
7000         "INIT LIP RESET",
7001         "GET LINK STATS & PRIVATE DATA CNTS",
7002         "SEND SNS",
7003         "FABRIC LOGIN",
7004         "SEND CHANGE REQUEST",          /* 70h */
7005         "FABRIC LOGOUT",
7006         "INIT LIP LOGIN",
7007         NULL,
7008         "LOGIN LOOP PORT",
7009         "GET PORT/NODE NAME LIST",
7010         "SET VENDOR ID",
7011         "INITIALIZE IP MAILBOX",
7012         NULL,
7013         NULL,
7014         "GET XGMAC STATS",
7015         NULL,
7016         "GET ID LIST",
7017         "SEND LFA",
7018         "LUN RESET"
7019 };
7020
7021 static void
7022 isp_mboxcmd(ispsoftc_t *isp, mbreg_t *mbp)
7023 {
7024         const char *cname, *xname, *sname;
7025         char tname[16], mname[16];
7026         unsigned int ibits, obits, box, opcode;
7027
7028         opcode = mbp->param[0];
7029         if (IS_FC(isp)) {
7030                 if (opcode > MAX_FC_OPCODE) {
7031                         mbp->param[0] = MBOX_INVALID_COMMAND;
7032                         isp_prt(isp, ISP_LOGERR, "Unknown Command 0x%x", opcode);
7033                         return;
7034                 }
7035                 cname = fc_mbcmd_names[opcode];
7036                 ibits = ISP_FC_IBITS(opcode);
7037                 obits = ISP_FC_OBITS(opcode);
7038         } else {
7039                 if (opcode > MAX_SCSI_OPCODE) {
7040                         mbp->param[0] = MBOX_INVALID_COMMAND;
7041                         isp_prt(isp, ISP_LOGERR, "Unknown Command 0x%x", opcode);
7042                         return;
7043                 }
7044                 cname = scsi_mbcmd_names[opcode];
7045                 ibits = ISP_SCSI_IBITS(opcode);
7046                 obits = ISP_SCSI_OBITS(opcode);
7047         }
7048         if (cname == NULL) {
7049                 cname = tname;
7050                 ISP_SNPRINTF(tname, sizeof tname, "opcode %x", opcode);
7051         }
7052         isp_prt(isp, ISP_LOGDEBUG3, "Mailbox Command '%s'", cname);
7053
7054         /*
7055          * Pick up any additional bits that the caller might have set.
7056          */
7057         ibits |= mbp->ibits;
7058         obits |= mbp->obits;
7059
7060         /*
7061          * Mask any bits that the caller wants us to mask
7062          */
7063         ibits &= mbp->ibitm;
7064         obits &= mbp->obitm;
7065
7066
7067         if (ibits == 0 && obits == 0) {
7068                 mbp->param[0] = MBOX_COMMAND_PARAM_ERROR;
7069                 isp_prt(isp, ISP_LOGERR, "no parameters for 0x%x", opcode);
7070                 return;
7071         }
7072
7073         /*
7074          * Get exclusive usage of mailbox registers.
7075          */
7076         if (MBOX_ACQUIRE(isp)) {
7077                 mbp->param[0] = MBOX_REGS_BUSY;
7078                 goto out;
7079         }
7080
7081         for (box = 0; box < ISP_NMBOX(isp); box++) {
7082                 if (ibits & (1 << box)) {
7083                         isp_prt(isp, ISP_LOGDEBUG3, "IN mbox %d = 0x%04x", box,
7084                             mbp->param[box]);
7085                         ISP_WRITE(isp, MBOX_OFF(box), mbp->param[box]);
7086                 }
7087                 isp->isp_mboxtmp[box] = mbp->param[box] = 0;
7088         }
7089
7090         isp->isp_lastmbxcmd = opcode;
7091
7092         /*
7093          * We assume that we can't overwrite a previous command.
7094          */
7095         isp->isp_obits = obits;
7096         isp->isp_mboxbsy = 1;
7097
7098         /*
7099          * Set Host Interrupt condition so that RISC will pick up mailbox regs.
7100          */
7101         if (IS_24XX(isp)) {
7102                 ISP_WRITE(isp, BIU2400_HCCR, HCCR_2400_CMD_SET_HOST_INT);
7103         } else {
7104                 ISP_WRITE(isp, HCCR, HCCR_CMD_SET_HOST_INT);
7105         }
7106
7107         /*
7108          * While we haven't finished the command, spin our wheels here.
7109          */
7110         MBOX_WAIT_COMPLETE(isp, mbp);
7111
7112         /*
7113          * Did the command time out?
7114          */
7115         if (mbp->param[0] == MBOX_TIMEOUT) {
7116                 isp->isp_mboxbsy = 0;
7117                 MBOX_RELEASE(isp);
7118                 goto out;
7119         }
7120
7121         /*
7122          * Copy back output registers.
7123          */
7124         for (box = 0; box < ISP_NMBOX(isp); box++) {
7125                 if (obits & (1 << box)) {
7126                         mbp->param[box] = isp->isp_mboxtmp[box];
7127                         isp_prt(isp, ISP_LOGDEBUG3, "OUT mbox %d = 0x%04x", box,
7128                             mbp->param[box]);
7129                 }
7130         }
7131
7132         isp->isp_mboxbsy = 0;
7133         MBOX_RELEASE(isp);
7134 out:
7135         if (mbp->logval == 0 || mbp->param[0] == MBOX_COMMAND_COMPLETE)
7136                 return;
7137
7138         if ((mbp->param[0] & 0xbfe0) == 0 &&
7139             (mbp->logval & MBLOGMASK(mbp->param[0])) == 0)
7140                 return;
7141
7142         xname = NULL;
7143         sname = "";
7144         switch (mbp->param[0]) {
7145         case MBOX_INVALID_COMMAND:
7146                 xname = "INVALID COMMAND";
7147                 break;
7148         case MBOX_HOST_INTERFACE_ERROR:
7149                 xname = "HOST INTERFACE ERROR";
7150                 break;
7151         case MBOX_TEST_FAILED:
7152                 xname = "TEST FAILED";
7153                 break;
7154         case MBOX_COMMAND_ERROR:
7155                 xname = "COMMAND ERROR";
7156                 ISP_SNPRINTF(mname, sizeof(mname), " subcode 0x%x",
7157                     mbp->param[1]);
7158                 sname = mname;
7159                 break;
7160         case MBOX_COMMAND_PARAM_ERROR:
7161                 xname = "COMMAND PARAMETER ERROR";
7162                 break;
7163         case MBOX_PORT_ID_USED:
7164                 xname = "PORT ID ALREADY IN USE";
7165                 break;
7166         case MBOX_LOOP_ID_USED:
7167                 xname = "LOOP ID ALREADY IN USE";
7168                 break;
7169         case MBOX_ALL_IDS_USED:
7170                 xname = "ALL LOOP IDS IN USE";
7171                 break;
7172         case MBOX_NOT_LOGGED_IN:
7173                 xname = "NOT LOGGED IN";
7174                 break;
7175         case MBOX_LINK_DOWN_ERROR:
7176                 xname = "LINK DOWN ERROR";
7177                 break;
7178         case MBOX_LOOPBACK_ERROR:
7179                 xname = "LOOPBACK ERROR";
7180                 break;
7181         case MBOX_CHECKSUM_ERROR:
7182                 xname = "CHECKSUM ERROR";
7183                 break;
7184         case MBOX_INVALID_PRODUCT_KEY:
7185                 xname = "INVALID PRODUCT KEY";
7186                 break;
7187         case MBOX_REGS_BUSY:
7188                 xname = "REGISTERS BUSY";
7189                 break;
7190         case MBOX_TIMEOUT:
7191                 xname = "TIMEOUT";
7192                 break;
7193         default:
7194                 ISP_SNPRINTF(mname, sizeof mname, "error 0x%x", mbp->param[0]);
7195                 xname = mname;
7196                 break;
7197         }
7198         if (xname) {
7199                 isp_prt(isp, ISP_LOGALL, "Mailbox Command '%s' failed (%s%s)",
7200                     cname, xname, sname);
7201         }
7202 }
7203
7204 static int
7205 isp_fw_state(ispsoftc_t *isp, int chan)
7206 {
7207         if (IS_FC(isp)) {
7208                 mbreg_t mbs;
7209
7210                 MBSINIT(&mbs, MBOX_GET_FW_STATE, MBLOGALL, 0);
7211                 isp_mboxcmd(isp, &mbs);
7212                 if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
7213                         return (mbs.param[1]);
7214                 }
7215         }
7216         return (FW_ERROR);
7217 }
7218
7219 static void
7220 isp_spi_update(ispsoftc_t *isp, int chan)
7221 {
7222         int tgt;
7223         mbreg_t mbs;
7224         sdparam *sdp;
7225
7226         if (IS_FC(isp)) {
7227                 /*
7228                  * There are no 'per-bus' settings for Fibre Channel.
7229                  */
7230                 return;
7231         }
7232         sdp = SDPARAM(isp, chan);
7233         sdp->update = 0;
7234
7235         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
7236                 uint16_t flags, period, offset;
7237                 int get;
7238
7239                 if (sdp->isp_devparam[tgt].dev_enable == 0) {
7240                         sdp->isp_devparam[tgt].dev_update = 0;
7241                         sdp->isp_devparam[tgt].dev_refresh = 0;
7242                         isp_prt(isp, ISP_LOGDEBUG0, "skipping target %d bus %d update", tgt, chan);
7243                         continue;
7244                 }
7245                 /*
7246                  * If the goal is to update the status of the device,
7247                  * take what's in goal_flags and try and set the device
7248                  * toward that. Otherwise, if we're just refreshing the
7249                  * current device state, get the current parameters.
7250                  */
7251
7252                 MBSINIT(&mbs, 0, MBLOGALL, 0);
7253
7254                 /*
7255                  * Refresh overrides set
7256                  */
7257                 if (sdp->isp_devparam[tgt].dev_refresh) {
7258                         mbs.param[0] = MBOX_GET_TARGET_PARAMS;
7259                         get = 1;
7260                 } else if (sdp->isp_devparam[tgt].dev_update) {
7261                         mbs.param[0] = MBOX_SET_TARGET_PARAMS;
7262
7263                         /*
7264                          * Make sure goal_flags has "Renegotiate on Error"
7265                          * on and "Freeze Queue on Error" off.
7266                          */
7267                         sdp->isp_devparam[tgt].goal_flags |= DPARM_RENEG;
7268                         sdp->isp_devparam[tgt].goal_flags &= ~DPARM_QFRZ;
7269                         mbs.param[2] = sdp->isp_devparam[tgt].goal_flags;
7270
7271                         /*
7272                          * Insist that PARITY must be enabled
7273                          * if SYNC or WIDE is enabled.
7274                          */
7275                         if ((mbs.param[2] & (DPARM_SYNC|DPARM_WIDE)) != 0) {
7276                                 mbs.param[2] |= DPARM_PARITY;
7277                         }
7278
7279                         if (mbs.param[2] & DPARM_SYNC) {
7280                                 mbs.param[3] =
7281                                     (sdp->isp_devparam[tgt].goal_offset << 8) |
7282                                     (sdp->isp_devparam[tgt].goal_period);
7283                         }
7284                         /*
7285                          * A command completion later that has
7286                          * RQSTF_NEGOTIATION set can cause
7287                          * the dev_refresh/announce cycle also.
7288                          *
7289                          * Note: It is really important to update our current
7290                          * flags with at least the state of TAG capabilities-
7291                          * otherwise we might try and send a tagged command
7292                          * when we have it all turned off. So change it here
7293                          * to say that current already matches goal.
7294                          */
7295                         sdp->isp_devparam[tgt].actv_flags &= ~DPARM_TQING;
7296                         sdp->isp_devparam[tgt].actv_flags |=
7297                             (sdp->isp_devparam[tgt].goal_flags & DPARM_TQING);
7298                         isp_prt(isp, ISP_LOGDEBUG0, "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
7299                             chan, tgt, mbs.param[2], mbs.param[3] >> 8, mbs.param[3] & 0xff);
7300                         get = 0;
7301                 } else {
7302                         continue;
7303                 }
7304                 mbs.param[1] = (chan << 15) | (tgt << 8);
7305                 isp_mboxcmd(isp, &mbs);
7306                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
7307                         continue;
7308                 }
7309                 if (get == 0) {
7310                         sdp->sendmarker = 1;
7311                         sdp->isp_devparam[tgt].dev_update = 0;
7312                         sdp->isp_devparam[tgt].dev_refresh = 1;
7313                 } else {
7314                         sdp->isp_devparam[tgt].dev_refresh = 0;
7315                         flags = mbs.param[2];
7316                         period = mbs.param[3] & 0xff;
7317                         offset = mbs.param[3] >> 8;
7318                         sdp->isp_devparam[tgt].actv_flags = flags;
7319                         sdp->isp_devparam[tgt].actv_period = period;
7320                         sdp->isp_devparam[tgt].actv_offset = offset;
7321                         isp_async(isp, ISPASYNC_NEW_TGT_PARAMS, chan, tgt);
7322                 }
7323         }
7324
7325         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
7326                 if (sdp->isp_devparam[tgt].dev_update ||
7327                     sdp->isp_devparam[tgt].dev_refresh) {
7328                         sdp->update = 1;
7329                         break;
7330                 }
7331         }
7332 }
7333
7334 static void
7335 isp_setdfltsdparm(ispsoftc_t *isp)
7336 {
7337         int tgt;
7338         sdparam *sdp, *sdp1;
7339
7340         sdp = SDPARAM(isp, 0);
7341         if (IS_DUALBUS(isp))
7342                 sdp1 = sdp + 1;
7343         else
7344                 sdp1 = NULL;
7345
7346         /*
7347          * Establish some default parameters.
7348          */
7349         sdp->isp_cmd_dma_burst_enable = 0;
7350         sdp->isp_data_dma_burst_enabl = 1;
7351         sdp->isp_fifo_threshold = 0;
7352         sdp->isp_initiator_id = DEFAULT_IID(isp, 0);
7353         if (isp->isp_type >= ISP_HA_SCSI_1040) {
7354                 sdp->isp_async_data_setup = 9;
7355         } else {
7356                 sdp->isp_async_data_setup = 6;
7357         }
7358         sdp->isp_selection_timeout = 250;
7359         sdp->isp_max_queue_depth = MAXISPREQUEST(isp);
7360         sdp->isp_tag_aging = 8;
7361         sdp->isp_bus_reset_delay = 5;
7362         /*
7363          * Don't retry selection, busy or queue full automatically- reflect
7364          * these back to us.
7365          */
7366         sdp->isp_retry_count = 0;
7367         sdp->isp_retry_delay = 0;
7368
7369         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
7370                 sdp->isp_devparam[tgt].exc_throttle = ISP_EXEC_THROTTLE;
7371                 sdp->isp_devparam[tgt].dev_enable = 1;
7372         }
7373
7374         /*
7375          * The trick here is to establish a default for the default (honk!)
7376          * state (goal_flags). Then try and get the current status from
7377          * the card to fill in the current state. We don't, in fact, set
7378          * the default to the SAFE default state- that's not the goal state.
7379          */
7380         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
7381                 uint8_t off, per;
7382                 sdp->isp_devparam[tgt].actv_offset = 0;
7383                 sdp->isp_devparam[tgt].actv_period = 0;
7384                 sdp->isp_devparam[tgt].actv_flags = 0;
7385
7386                 sdp->isp_devparam[tgt].goal_flags =
7387                     sdp->isp_devparam[tgt].nvrm_flags = DPARM_DEFAULT;
7388
7389                 /*
7390                  * We default to Wide/Fast for versions less than a 1040
7391                  * (unless it's SBus).
7392                  */
7393                 if (IS_ULTRA3(isp)) {
7394                         off = ISP_80M_SYNCPARMS >> 8;
7395                         per = ISP_80M_SYNCPARMS & 0xff;
7396                 } else if (IS_ULTRA2(isp)) {
7397                         off = ISP_40M_SYNCPARMS >> 8;
7398                         per = ISP_40M_SYNCPARMS & 0xff;
7399                 } else if (IS_1240(isp)) {
7400                         off = ISP_20M_SYNCPARMS >> 8;
7401                         per = ISP_20M_SYNCPARMS & 0xff;
7402                 } else if ((isp->isp_bustype == ISP_BT_SBUS &&
7403                     isp->isp_type < ISP_HA_SCSI_1020A) ||
7404                     (isp->isp_bustype == ISP_BT_PCI &&
7405                     isp->isp_type < ISP_HA_SCSI_1040) ||
7406                     (isp->isp_clock && isp->isp_clock < 60) ||
7407                     (sdp->isp_ultramode == 0)) {
7408                         off = ISP_10M_SYNCPARMS >> 8;
7409                         per = ISP_10M_SYNCPARMS & 0xff;
7410                 } else {
7411                         off = ISP_20M_SYNCPARMS_1040 >> 8;
7412                         per = ISP_20M_SYNCPARMS_1040 & 0xff;
7413                 }
7414                 sdp->isp_devparam[tgt].goal_offset =
7415                     sdp->isp_devparam[tgt].nvrm_offset = off;
7416                 sdp->isp_devparam[tgt].goal_period =
7417                     sdp->isp_devparam[tgt].nvrm_period = per;
7418
7419         }
7420
7421         /*
7422          * If we're a dual bus card, just copy the data over
7423          */
7424         if (sdp1) {
7425                 *sdp1 = *sdp;
7426                 sdp1->isp_initiator_id = DEFAULT_IID(isp, 1);
7427         }
7428
7429         /*
7430          * If we've not been told to avoid reading NVRAM, try and read it.
7431          * If we're successful reading it, we can then return because NVRAM
7432          * will tell us what the desired settings are. Otherwise, we establish
7433          * some reasonable 'fake' nvram and goal defaults.
7434          */
7435         if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
7436                 mbreg_t mbs;
7437
7438                 if (isp_read_nvram(isp, 0) == 0) {
7439                         if (IS_DUALBUS(isp)) {
7440                                 if (isp_read_nvram(isp, 1) == 0) {
7441                                         return;
7442                                 }
7443                         }
7444                 }
7445                 MBSINIT(&mbs, MBOX_GET_ACT_NEG_STATE, MBLOGNONE, 0);
7446                 isp_mboxcmd(isp, &mbs);
7447                 if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
7448                         sdp->isp_req_ack_active_neg = 1;
7449                         sdp->isp_data_line_active_neg = 1;
7450                         if (sdp1) {
7451                                 sdp1->isp_req_ack_active_neg = 1;
7452                                 sdp1->isp_data_line_active_neg = 1;
7453                         }
7454                 } else {
7455                         sdp->isp_req_ack_active_neg =
7456                             (mbs.param[1] >> 4) & 0x1;
7457                         sdp->isp_data_line_active_neg =
7458                             (mbs.param[1] >> 5) & 0x1;
7459                         if (sdp1) {
7460                                 sdp1->isp_req_ack_active_neg =
7461                                     (mbs.param[2] >> 4) & 0x1;
7462                                 sdp1->isp_data_line_active_neg =
7463                                     (mbs.param[2] >> 5) & 0x1;
7464                         }
7465                 }
7466         }
7467
7468 }
7469
7470 static void
7471 isp_setdfltfcparm(ispsoftc_t *isp, int chan)
7472 {
7473         fcparam *fcp = FCPARAM(isp, chan);
7474
7475         /*
7476          * Establish some default parameters.
7477          */
7478         fcp->role = DEFAULT_ROLE(isp, chan);
7479         fcp->isp_maxalloc = ICB_DFLT_ALLOC;
7480         fcp->isp_retry_delay = ICB_DFLT_RDELAY;
7481         fcp->isp_retry_count = ICB_DFLT_RCOUNT;
7482         fcp->isp_loopid = DEFAULT_LOOPID(isp, chan);
7483         fcp->isp_wwnn_nvram = DEFAULT_NODEWWN(isp, chan);
7484         fcp->isp_wwpn_nvram = DEFAULT_PORTWWN(isp, chan);
7485         fcp->isp_fwoptions = 0;
7486         fcp->isp_xfwoptions = 0;
7487         fcp->isp_zfwoptions = 0;
7488         fcp->isp_lasthdl = NIL_HANDLE;
7489         fcp->isp_login_hdl = NIL_HANDLE;
7490
7491         if (IS_24XX(isp)) {
7492                 fcp->isp_fwoptions |= ICB2400_OPT1_FAIRNESS;
7493                 fcp->isp_fwoptions |= ICB2400_OPT1_HARD_ADDRESS;
7494                 if (isp->isp_confopts & ISP_CFG_FULL_DUPLEX)
7495                         fcp->isp_fwoptions |= ICB2400_OPT1_FULL_DUPLEX;
7496                 fcp->isp_fwoptions |= ICB2400_OPT1_BOTH_WWNS;
7497                 fcp->isp_xfwoptions |= ICB2400_OPT2_LOOP_2_PTP;
7498                 fcp->isp_zfwoptions |= ICB2400_OPT3_RATE_AUTO;
7499         } else {
7500                 fcp->isp_fwoptions |= ICBOPT_FAIRNESS;
7501                 fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
7502                 fcp->isp_fwoptions |= ICBOPT_HARD_ADDRESS;
7503                 if (isp->isp_confopts & ISP_CFG_FULL_DUPLEX)
7504                         fcp->isp_fwoptions |= ICBOPT_FULL_DUPLEX;
7505                 /*
7506                  * Make sure this is turned off now until we get
7507                  * extended options from NVRAM
7508                  */
7509                 fcp->isp_fwoptions &= ~ICBOPT_EXTENDED;
7510                 fcp->isp_xfwoptions |= ICBXOPT_LOOP_2_PTP;
7511                 fcp->isp_zfwoptions |= ICBZOPT_RATE_AUTO;
7512         }
7513
7514
7515         /*
7516          * Now try and read NVRAM unless told to not do so.
7517          * This will set fcparam's isp_wwnn_nvram && isp_wwpn_nvram.
7518          */
7519         if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
7520                 int i, j = 0;
7521                 /*
7522                  * Give a couple of tries at reading NVRAM.
7523                  */
7524                 for (i = 0; i < 2; i++) {
7525                         j = isp_read_nvram(isp, chan);
7526                         if (j == 0) {
7527                                 break;
7528                         }
7529                 }
7530                 if (j) {
7531                         isp->isp_confopts |= ISP_CFG_NONVRAM;
7532                 }
7533         }
7534
7535         fcp->isp_wwnn = ACTIVE_NODEWWN(isp, chan);
7536         fcp->isp_wwpn = ACTIVE_PORTWWN(isp, chan);
7537         isp_prt(isp, ISP_LOGCONFIG, "Chan %d 0x%08x%08x/0x%08x%08x Role %s",
7538             chan, (uint32_t) (fcp->isp_wwnn >> 32), (uint32_t) (fcp->isp_wwnn),
7539             (uint32_t) (fcp->isp_wwpn >> 32), (uint32_t) (fcp->isp_wwpn),
7540             isp_class3_roles[fcp->role]);
7541 }
7542
7543 /*
7544  * Re-initialize the ISP and complete all orphaned commands
7545  * with a 'botched' notice. The reset/init routines should
7546  * not disturb an already active list of commands.
7547  */
7548
7549 int
7550 isp_reinit(ispsoftc_t *isp, int do_load_defaults)
7551 {
7552         int i, res = 0;
7553
7554         if (isp->isp_state > ISP_RESETSTATE)
7555                 isp_stop(isp);
7556         if (isp->isp_state != ISP_RESETSTATE)
7557                 isp_reset(isp, do_load_defaults);
7558         if (isp->isp_state != ISP_RESETSTATE) {
7559                 res = EIO;
7560                 isp_prt(isp, ISP_LOGERR, "%s: cannot reset card", __func__);
7561                 goto cleanup;
7562         }
7563
7564         isp_init(isp);
7565         if (isp->isp_state > ISP_RESETSTATE &&
7566             isp->isp_state != ISP_RUNSTATE) {
7567                 res = EIO;
7568                 isp_prt(isp, ISP_LOGERR, "%s: cannot init card", __func__);
7569                 ISP_DISABLE_INTS(isp);
7570                 if (IS_FC(isp)) {
7571                         /*
7572                          * If we're in ISP_ROLE_NONE, turn off the lasers.
7573                          */
7574                         if (!IS_24XX(isp)) {
7575                                 ISP_WRITE(isp, BIU2100_CSR, BIU2100_FPM0_REGS);
7576                                 ISP_WRITE(isp, FPM_DIAG_CONFIG, FPM_SOFT_RESET);
7577                                 ISP_WRITE(isp, BIU2100_CSR, BIU2100_FB_REGS);
7578                                 ISP_WRITE(isp, FBM_CMD, FBMCMD_FIFO_RESET_ALL);
7579                                 ISP_WRITE(isp, BIU2100_CSR, BIU2100_RISC_REGS);
7580                         }
7581                 }
7582         }
7583
7584 cleanup:
7585         isp_clear_commands(isp);
7586         if (IS_FC(isp)) {
7587                 for (i = 0; i < isp->isp_nchan; i++)
7588                         isp_clear_portdb(isp, i);
7589         }
7590         return (res);
7591 }
7592
7593 /*
7594  * NVRAM Routines
7595  */
7596 static int
7597 isp_read_nvram(ispsoftc_t *isp, int bus)
7598 {
7599         int i, amt, retval;
7600         uint8_t csum, minversion;
7601         union {
7602                 uint8_t _x[ISP2400_NVRAM_SIZE];
7603                 uint16_t _s[ISP2400_NVRAM_SIZE>>1];
7604         } _n;
7605 #define nvram_data      _n._x
7606 #define nvram_words     _n._s
7607
7608         if (IS_24XX(isp)) {
7609                 return (isp_read_nvram_2400(isp, nvram_data));
7610         } else if (IS_FC(isp)) {
7611                 amt = ISP2100_NVRAM_SIZE;
7612                 minversion = 1;
7613         } else if (IS_ULTRA2(isp)) {
7614                 amt = ISP1080_NVRAM_SIZE;
7615                 minversion = 0;
7616         } else {
7617                 amt = ISP_NVRAM_SIZE;
7618                 minversion = 2;
7619         }
7620
7621         for (i = 0; i < amt>>1; i++) {
7622                 isp_rdnvram_word(isp, i, &nvram_words[i]);
7623         }
7624
7625         if (nvram_data[0] != 'I' || nvram_data[1] != 'S' ||
7626             nvram_data[2] != 'P') {
7627                 if (isp->isp_bustype != ISP_BT_SBUS) {
7628                         isp_prt(isp, ISP_LOGWARN, "invalid NVRAM header");
7629                         isp_prt(isp, ISP_LOGDEBUG0, "%x %x %x", nvram_data[0], nvram_data[1], nvram_data[2]);
7630                 }
7631                 retval = -1;
7632                 goto out;
7633         }
7634
7635         for (csum = 0, i = 0; i < amt; i++) {
7636                 csum += nvram_data[i];
7637         }
7638         if (csum != 0) {
7639                 isp_prt(isp, ISP_LOGWARN, "invalid NVRAM checksum");
7640                 retval = -1;
7641                 goto out;
7642         }
7643
7644         if (ISP_NVRAM_VERSION(nvram_data) < minversion) {
7645                 isp_prt(isp, ISP_LOGWARN, "version %d NVRAM not understood",
7646                     ISP_NVRAM_VERSION(nvram_data));
7647                 retval = -1;
7648                 goto out;
7649         }
7650
7651         if (IS_ULTRA3(isp)) {
7652                 isp_parse_nvram_12160(isp, bus, nvram_data);
7653         } else if (IS_1080(isp)) {
7654                 isp_parse_nvram_1080(isp, bus, nvram_data);
7655         } else if (IS_1280(isp) || IS_1240(isp)) {
7656                 isp_parse_nvram_1080(isp, bus, nvram_data);
7657         } else if (IS_SCSI(isp)) {
7658                 isp_parse_nvram_1020(isp, nvram_data);
7659         } else {
7660                 isp_parse_nvram_2100(isp, nvram_data);
7661         }
7662         retval = 0;
7663 out:
7664         return (retval);
7665 #undef  nvram_data
7666 #undef  nvram_words
7667 }
7668
7669 static int
7670 isp_read_nvram_2400(ispsoftc_t *isp, uint8_t *nvram_data)
7671 {
7672         int retval = 0;
7673         uint32_t addr, csum, lwrds, *dptr;
7674
7675         if (isp->isp_port) {
7676                 addr = ISP2400_NVRAM_PORT1_ADDR;
7677         } else {
7678                 addr = ISP2400_NVRAM_PORT0_ADDR;
7679         }
7680
7681         dptr = (uint32_t *) nvram_data;
7682         for (lwrds = 0; lwrds < ISP2400_NVRAM_SIZE >> 2; lwrds++) {
7683                 isp_rd_2400_nvram(isp, addr++, dptr++);
7684         }
7685         if (nvram_data[0] != 'I' || nvram_data[1] != 'S' ||
7686             nvram_data[2] != 'P') {
7687                 isp_prt(isp, ISP_LOGWARN, "invalid NVRAM header (%x %x %x)",
7688                     nvram_data[0], nvram_data[1], nvram_data[2]);
7689                 retval = -1;
7690                 goto out;
7691         }
7692         dptr = (uint32_t *) nvram_data;
7693         for (csum = 0, lwrds = 0; lwrds < ISP2400_NVRAM_SIZE >> 2; lwrds++) {
7694                 uint32_t tmp;
7695                 ISP_IOXGET_32(isp, &dptr[lwrds], tmp);
7696                 csum += tmp;
7697         }
7698         if (csum != 0) {
7699                 isp_prt(isp, ISP_LOGWARN, "invalid NVRAM checksum");
7700                 retval = -1;
7701                 goto out;
7702         }
7703         isp_parse_nvram_2400(isp, nvram_data);
7704 out:
7705         return (retval);
7706 }
7707
7708 static void
7709 isp_rdnvram_word(ispsoftc_t *isp, int wo, uint16_t *rp)
7710 {
7711         int i, cbits;
7712         uint16_t bit, rqst, junk;
7713
7714         ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
7715         ISP_DELAY(10);
7716         ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
7717         ISP_DELAY(10);
7718
7719         if (IS_FC(isp)) {
7720                 wo &= ((ISP2100_NVRAM_SIZE >> 1) - 1);
7721                 if (IS_2312(isp) && isp->isp_port) {
7722                         wo += 128;
7723                 }
7724                 rqst = (ISP_NVRAM_READ << 8) | wo;
7725                 cbits = 10;
7726         } else if (IS_ULTRA2(isp)) {
7727                 wo &= ((ISP1080_NVRAM_SIZE >> 1) - 1);
7728                 rqst = (ISP_NVRAM_READ << 8) | wo;
7729                 cbits = 10;
7730         } else {
7731                 wo &= ((ISP_NVRAM_SIZE >> 1) - 1);
7732                 rqst = (ISP_NVRAM_READ << 6) | wo;
7733                 cbits = 8;
7734         }
7735
7736         /*
7737          * Clock the word select request out...
7738          */
7739         for (i = cbits; i >= 0; i--) {
7740                 if ((rqst >> i) & 1) {
7741                         bit = BIU_NVRAM_SELECT | BIU_NVRAM_DATAOUT;
7742                 } else {
7743                         bit = BIU_NVRAM_SELECT;
7744                 }
7745                 ISP_WRITE(isp, BIU_NVRAM, bit);
7746                 ISP_DELAY(10);
7747                 junk = ISP_READ(isp, BIU_NVRAM);        /* force PCI flush */
7748                 ISP_WRITE(isp, BIU_NVRAM, bit | BIU_NVRAM_CLOCK);
7749                 ISP_DELAY(10);
7750                 junk = ISP_READ(isp, BIU_NVRAM);        /* force PCI flush */
7751                 ISP_WRITE(isp, BIU_NVRAM, bit);
7752                 ISP_DELAY(10);
7753                 junk = ISP_READ(isp, BIU_NVRAM);        /* force PCI flush */
7754         }
7755         /*
7756          * Now read the result back in (bits come back in MSB format).
7757          */
7758         *rp = 0;
7759         for (i = 0; i < 16; i++) {
7760                 uint16_t rv;
7761                 *rp <<= 1;
7762                 ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
7763                 ISP_DELAY(10);
7764                 rv = ISP_READ(isp, BIU_NVRAM);
7765                 if (rv & BIU_NVRAM_DATAIN) {
7766                         *rp |= 1;
7767                 }
7768                 ISP_DELAY(10);
7769                 ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
7770                 ISP_DELAY(10);
7771                 junk = ISP_READ(isp, BIU_NVRAM);        /* force PCI flush */
7772         }
7773         ISP_WRITE(isp, BIU_NVRAM, 0);
7774         ISP_DELAY(10);
7775         junk = ISP_READ(isp, BIU_NVRAM);        /* force PCI flush */
7776         ISP_SWIZZLE_NVRAM_WORD(isp, rp);
7777 }
7778
7779 static void
7780 isp_rd_2400_nvram(ispsoftc_t *isp, uint32_t addr, uint32_t *rp)
7781 {
7782         int loops = 0;
7783         uint32_t base = 0x7ffe0000;
7784         uint32_t tmp = 0;
7785
7786         if (IS_26XX(isp)) {
7787                 base = 0x7fe7c000;      /* XXX: Observation, may be wrong. */
7788         } else if (IS_25XX(isp)) {
7789                 base = 0x7ff00000 | 0x48000;
7790         }
7791         ISP_WRITE(isp, BIU2400_FLASH_ADDR, base | addr);
7792         for (loops = 0; loops < 5000; loops++) {
7793                 ISP_DELAY(10);
7794                 tmp = ISP_READ(isp, BIU2400_FLASH_ADDR);
7795                 if ((tmp & (1U << 31)) != 0) {
7796                         break;
7797                 }
7798         }
7799         if (tmp & (1U << 31)) {
7800                 *rp = ISP_READ(isp, BIU2400_FLASH_DATA);
7801                 ISP_SWIZZLE_NVRAM_LONG(isp, rp);
7802         } else {
7803                 *rp = 0xffffffff;
7804         }
7805 }
7806
7807 static void
7808 isp_parse_nvram_1020(ispsoftc_t *isp, uint8_t *nvram_data)
7809 {
7810         sdparam *sdp = SDPARAM(isp, 0);
7811         int tgt;
7812
7813         sdp->isp_fifo_threshold =
7814                 ISP_NVRAM_FIFO_THRESHOLD(nvram_data) |
7815                 (ISP_NVRAM_FIFO_THRESHOLD_128(nvram_data) << 2);
7816
7817         if ((isp->isp_confopts & ISP_CFG_OWNLOOPID) == 0)
7818                 sdp->isp_initiator_id = ISP_NVRAM_INITIATOR_ID(nvram_data);
7819
7820         sdp->isp_bus_reset_delay =
7821                 ISP_NVRAM_BUS_RESET_DELAY(nvram_data);
7822
7823         sdp->isp_retry_count =
7824                 ISP_NVRAM_BUS_RETRY_COUNT(nvram_data);
7825
7826         sdp->isp_retry_delay =
7827                 ISP_NVRAM_BUS_RETRY_DELAY(nvram_data);
7828
7829         sdp->isp_async_data_setup =
7830                 ISP_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data);
7831
7832         if (isp->isp_type >= ISP_HA_SCSI_1040) {
7833                 if (sdp->isp_async_data_setup < 9) {
7834                         sdp->isp_async_data_setup = 9;
7835                 }
7836         } else {
7837                 if (sdp->isp_async_data_setup != 6) {
7838                         sdp->isp_async_data_setup = 6;
7839                 }
7840         }
7841
7842         sdp->isp_req_ack_active_neg =
7843                 ISP_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data);
7844
7845         sdp->isp_data_line_active_neg =
7846                 ISP_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data);
7847
7848         sdp->isp_data_dma_burst_enabl =
7849                 ISP_NVRAM_DATA_DMA_BURST_ENABLE(nvram_data);
7850
7851         sdp->isp_cmd_dma_burst_enable =
7852                 ISP_NVRAM_CMD_DMA_BURST_ENABLE(nvram_data);
7853
7854         sdp->isp_tag_aging =
7855                 ISP_NVRAM_TAG_AGE_LIMIT(nvram_data);
7856
7857         sdp->isp_selection_timeout =
7858                 ISP_NVRAM_SELECTION_TIMEOUT(nvram_data);
7859
7860         sdp->isp_max_queue_depth =
7861                 ISP_NVRAM_MAX_QUEUE_DEPTH(nvram_data);
7862
7863         sdp->isp_fast_mttr = ISP_NVRAM_FAST_MTTR_ENABLE(nvram_data);
7864
7865         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
7866                 sdp->isp_devparam[tgt].dev_enable =
7867                         ISP_NVRAM_TGT_DEVICE_ENABLE(nvram_data, tgt);
7868                 sdp->isp_devparam[tgt].exc_throttle =
7869                         ISP_NVRAM_TGT_EXEC_THROTTLE(nvram_data, tgt);
7870                 sdp->isp_devparam[tgt].nvrm_offset =
7871                         ISP_NVRAM_TGT_SYNC_OFFSET(nvram_data, tgt);
7872                 sdp->isp_devparam[tgt].nvrm_period =
7873                         ISP_NVRAM_TGT_SYNC_PERIOD(nvram_data, tgt);
7874                 /*
7875                  * We probably shouldn't lie about this, but it
7876                  * it makes it much safer if we limit NVRAM values
7877                  * to sanity.
7878                  */
7879                 if (isp->isp_type < ISP_HA_SCSI_1040) {
7880                         /*
7881                          * If we're not ultra, we can't possibly
7882                          * be a shorter period than this.
7883                          */
7884                         if (sdp->isp_devparam[tgt].nvrm_period < 0x19) {
7885                                 sdp->isp_devparam[tgt].nvrm_period = 0x19;
7886                         }
7887                         if (sdp->isp_devparam[tgt].nvrm_offset > 0xc) {
7888                                 sdp->isp_devparam[tgt].nvrm_offset = 0x0c;
7889                         }
7890                 } else {
7891                         if (sdp->isp_devparam[tgt].nvrm_offset > 0x8) {
7892                                 sdp->isp_devparam[tgt].nvrm_offset = 0x8;
7893                         }
7894                 }
7895                 sdp->isp_devparam[tgt].nvrm_flags = 0;
7896                 if (ISP_NVRAM_TGT_RENEG(nvram_data, tgt))
7897                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_RENEG;
7898                 sdp->isp_devparam[tgt].nvrm_flags |= DPARM_ARQ;
7899                 if (ISP_NVRAM_TGT_TQING(nvram_data, tgt))
7900                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_TQING;
7901                 if (ISP_NVRAM_TGT_SYNC(nvram_data, tgt))
7902                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_SYNC;
7903                 if (ISP_NVRAM_TGT_WIDE(nvram_data, tgt))
7904                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_WIDE;
7905                 if (ISP_NVRAM_TGT_PARITY(nvram_data, tgt))
7906                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_PARITY;
7907                 if (ISP_NVRAM_TGT_DISC(nvram_data, tgt))
7908                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_DISC;
7909                 sdp->isp_devparam[tgt].actv_flags = 0; /* we don't know */
7910                 sdp->isp_devparam[tgt].goal_offset =
7911                     sdp->isp_devparam[tgt].nvrm_offset;
7912                 sdp->isp_devparam[tgt].goal_period =
7913                     sdp->isp_devparam[tgt].nvrm_period;
7914                 sdp->isp_devparam[tgt].goal_flags =
7915                     sdp->isp_devparam[tgt].nvrm_flags;
7916         }
7917 }
7918
7919 static void
7920 isp_parse_nvram_1080(ispsoftc_t *isp, int bus, uint8_t *nvram_data)
7921 {
7922         sdparam *sdp = SDPARAM(isp, bus);
7923         int tgt;
7924
7925         sdp->isp_fifo_threshold =
7926             ISP1080_NVRAM_FIFO_THRESHOLD(nvram_data);
7927
7928         if ((isp->isp_confopts & ISP_CFG_OWNLOOPID) == 0)
7929                 sdp->isp_initiator_id = ISP1080_NVRAM_INITIATOR_ID(nvram_data, bus);
7930
7931         sdp->isp_bus_reset_delay =
7932             ISP1080_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
7933
7934         sdp->isp_retry_count =
7935             ISP1080_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
7936
7937         sdp->isp_retry_delay =
7938             ISP1080_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
7939
7940         sdp->isp_async_data_setup =
7941             ISP1080_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data, bus);
7942
7943         sdp->isp_req_ack_active_neg =
7944             ISP1080_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data, bus);
7945
7946         sdp->isp_data_line_active_neg =
7947             ISP1080_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data, bus);
7948
7949         sdp->isp_data_dma_burst_enabl =
7950             ISP1080_NVRAM_BURST_ENABLE(nvram_data);
7951
7952         sdp->isp_cmd_dma_burst_enable =
7953             ISP1080_NVRAM_BURST_ENABLE(nvram_data);
7954
7955         sdp->isp_selection_timeout =
7956             ISP1080_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
7957
7958         sdp->isp_max_queue_depth =
7959              ISP1080_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
7960
7961         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
7962                 sdp->isp_devparam[tgt].dev_enable =
7963                     ISP1080_NVRAM_TGT_DEVICE_ENABLE(nvram_data, tgt, bus);
7964                 sdp->isp_devparam[tgt].exc_throttle =
7965                         ISP1080_NVRAM_TGT_EXEC_THROTTLE(nvram_data, tgt, bus);
7966                 sdp->isp_devparam[tgt].nvrm_offset =
7967                         ISP1080_NVRAM_TGT_SYNC_OFFSET(nvram_data, tgt, bus);
7968                 sdp->isp_devparam[tgt].nvrm_period =
7969                         ISP1080_NVRAM_TGT_SYNC_PERIOD(nvram_data, tgt, bus);
7970                 sdp->isp_devparam[tgt].nvrm_flags = 0;
7971                 if (ISP1080_NVRAM_TGT_RENEG(nvram_data, tgt, bus))
7972                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_RENEG;
7973                 sdp->isp_devparam[tgt].nvrm_flags |= DPARM_ARQ;
7974                 if (ISP1080_NVRAM_TGT_TQING(nvram_data, tgt, bus))
7975                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_TQING;
7976                 if (ISP1080_NVRAM_TGT_SYNC(nvram_data, tgt, bus))
7977                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_SYNC;
7978                 if (ISP1080_NVRAM_TGT_WIDE(nvram_data, tgt, bus))
7979                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_WIDE;
7980                 if (ISP1080_NVRAM_TGT_PARITY(nvram_data, tgt, bus))
7981                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_PARITY;
7982                 if (ISP1080_NVRAM_TGT_DISC(nvram_data, tgt, bus))
7983                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_DISC;
7984                 sdp->isp_devparam[tgt].actv_flags = 0;
7985                 sdp->isp_devparam[tgt].goal_offset =
7986                     sdp->isp_devparam[tgt].nvrm_offset;
7987                 sdp->isp_devparam[tgt].goal_period =
7988                     sdp->isp_devparam[tgt].nvrm_period;
7989                 sdp->isp_devparam[tgt].goal_flags =
7990                     sdp->isp_devparam[tgt].nvrm_flags;
7991         }
7992 }
7993
7994 static void
7995 isp_parse_nvram_12160(ispsoftc_t *isp, int bus, uint8_t *nvram_data)
7996 {
7997         sdparam *sdp = SDPARAM(isp, bus);
7998         int tgt;
7999
8000         sdp->isp_fifo_threshold =
8001             ISP12160_NVRAM_FIFO_THRESHOLD(nvram_data);
8002
8003         if ((isp->isp_confopts & ISP_CFG_OWNLOOPID) == 0)
8004                 sdp->isp_initiator_id = ISP12160_NVRAM_INITIATOR_ID(nvram_data, bus);
8005
8006         sdp->isp_bus_reset_delay =
8007             ISP12160_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
8008
8009         sdp->isp_retry_count =
8010             ISP12160_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
8011
8012         sdp->isp_retry_delay =
8013             ISP12160_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
8014
8015         sdp->isp_async_data_setup =
8016             ISP12160_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data, bus);
8017
8018         sdp->isp_req_ack_active_neg =
8019             ISP12160_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data, bus);
8020
8021         sdp->isp_data_line_active_neg =
8022             ISP12160_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data, bus);
8023
8024         sdp->isp_data_dma_burst_enabl =
8025             ISP12160_NVRAM_BURST_ENABLE(nvram_data);
8026
8027         sdp->isp_cmd_dma_burst_enable =
8028             ISP12160_NVRAM_BURST_ENABLE(nvram_data);
8029
8030         sdp->isp_selection_timeout =
8031             ISP12160_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
8032
8033         sdp->isp_max_queue_depth =
8034              ISP12160_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
8035
8036         for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
8037                 sdp->isp_devparam[tgt].dev_enable =
8038                     ISP12160_NVRAM_TGT_DEVICE_ENABLE(nvram_data, tgt, bus);
8039                 sdp->isp_devparam[tgt].exc_throttle =
8040                         ISP12160_NVRAM_TGT_EXEC_THROTTLE(nvram_data, tgt, bus);
8041                 sdp->isp_devparam[tgt].nvrm_offset =
8042                         ISP12160_NVRAM_TGT_SYNC_OFFSET(nvram_data, tgt, bus);
8043                 sdp->isp_devparam[tgt].nvrm_period =
8044                         ISP12160_NVRAM_TGT_SYNC_PERIOD(nvram_data, tgt, bus);
8045                 sdp->isp_devparam[tgt].nvrm_flags = 0;
8046                 if (ISP12160_NVRAM_TGT_RENEG(nvram_data, tgt, bus))
8047                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_RENEG;
8048                 sdp->isp_devparam[tgt].nvrm_flags |= DPARM_ARQ;
8049                 if (ISP12160_NVRAM_TGT_TQING(nvram_data, tgt, bus))
8050                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_TQING;
8051                 if (ISP12160_NVRAM_TGT_SYNC(nvram_data, tgt, bus))
8052                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_SYNC;
8053                 if (ISP12160_NVRAM_TGT_WIDE(nvram_data, tgt, bus))
8054                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_WIDE;
8055                 if (ISP12160_NVRAM_TGT_PARITY(nvram_data, tgt, bus))
8056                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_PARITY;
8057                 if (ISP12160_NVRAM_TGT_DISC(nvram_data, tgt, bus))
8058                         sdp->isp_devparam[tgt].nvrm_flags |= DPARM_DISC;
8059                 sdp->isp_devparam[tgt].actv_flags = 0;
8060                 sdp->isp_devparam[tgt].goal_offset =
8061                     sdp->isp_devparam[tgt].nvrm_offset;
8062                 sdp->isp_devparam[tgt].goal_period =
8063                     sdp->isp_devparam[tgt].nvrm_period;
8064                 sdp->isp_devparam[tgt].goal_flags =
8065                     sdp->isp_devparam[tgt].nvrm_flags;
8066         }
8067 }
8068
8069 static void
8070 isp_parse_nvram_2100(ispsoftc_t *isp, uint8_t *nvram_data)
8071 {
8072         fcparam *fcp = FCPARAM(isp, 0);
8073         uint64_t wwn;
8074
8075         /*
8076          * There is NVRAM storage for both Port and Node entities-
8077          * but the Node entity appears to be unused on all the cards
8078          * I can find. However, we should account for this being set
8079          * at some point in the future.
8080          *
8081          * Qlogic WWNs have an NAA of 2, but usually nothing shows up in
8082          * bits 48..60. In the case of the 2202, it appears that they do
8083          * use bit 48 to distinguish between the two instances on the card.
8084          * The 2204, which I've never seen, *probably* extends this method.
8085          */
8086         wwn = ISP2100_NVRAM_PORT_NAME(nvram_data);
8087         if (wwn) {
8088                 isp_prt(isp, ISP_LOGCONFIG, "NVRAM Port WWN 0x%08x%08x",
8089                     (uint32_t) (wwn >> 32), (uint32_t) (wwn));
8090                 if ((wwn >> 60) == 0) {
8091                         wwn |= (((uint64_t) 2)<< 60);
8092                 }
8093         }
8094         fcp->isp_wwpn_nvram = wwn;
8095         if (IS_2200(isp) || IS_23XX(isp)) {
8096                 wwn = ISP2100_NVRAM_NODE_NAME(nvram_data);
8097                 if (wwn) {
8098                         isp_prt(isp, ISP_LOGCONFIG, "NVRAM Node WWN 0x%08x%08x",
8099                             (uint32_t) (wwn >> 32),
8100                             (uint32_t) (wwn));
8101                         if ((wwn >> 60) == 0) {
8102                                 wwn |= (((uint64_t) 2)<< 60);
8103                         }
8104                 } else {
8105                         wwn = fcp->isp_wwpn_nvram & ~((uint64_t) 0xfff << 48);
8106                 }
8107         } else {
8108                 wwn &= ~((uint64_t) 0xfff << 48);
8109         }
8110         fcp->isp_wwnn_nvram = wwn;
8111
8112         fcp->isp_maxalloc = ISP2100_NVRAM_MAXIOCBALLOCATION(nvram_data);
8113         if ((isp->isp_confopts & ISP_CFG_OWNFSZ) == 0) {
8114                 DEFAULT_FRAMESIZE(isp) =
8115                     ISP2100_NVRAM_MAXFRAMELENGTH(nvram_data);
8116         }
8117         fcp->isp_retry_delay = ISP2100_NVRAM_RETRY_DELAY(nvram_data);
8118         fcp->isp_retry_count = ISP2100_NVRAM_RETRY_COUNT(nvram_data);
8119         if ((isp->isp_confopts & ISP_CFG_OWNLOOPID) == 0) {
8120                 fcp->isp_loopid = ISP2100_NVRAM_HARDLOOPID(nvram_data);
8121         }
8122         if ((isp->isp_confopts & ISP_CFG_OWNEXCTHROTTLE) == 0) {
8123                 DEFAULT_EXEC_THROTTLE(isp) =
8124                         ISP2100_NVRAM_EXECUTION_THROTTLE(nvram_data);
8125         }
8126         fcp->isp_fwoptions = ISP2100_NVRAM_OPTIONS(nvram_data);
8127         isp_prt(isp, ISP_LOGDEBUG0,
8128             "NVRAM 0x%08x%08x 0x%08x%08x maxalloc %d maxframelen %d",
8129             (uint32_t) (fcp->isp_wwnn_nvram >> 32),
8130             (uint32_t) fcp->isp_wwnn_nvram,
8131             (uint32_t) (fcp->isp_wwpn_nvram >> 32),
8132             (uint32_t) fcp->isp_wwpn_nvram,
8133             ISP2100_NVRAM_MAXIOCBALLOCATION(nvram_data),
8134             ISP2100_NVRAM_MAXFRAMELENGTH(nvram_data));
8135         isp_prt(isp, ISP_LOGDEBUG0,
8136             "execthrottle %d fwoptions 0x%x hardloop %d tov %d",
8137             ISP2100_NVRAM_EXECUTION_THROTTLE(nvram_data),
8138             ISP2100_NVRAM_OPTIONS(nvram_data),
8139             ISP2100_NVRAM_HARDLOOPID(nvram_data),
8140             ISP2100_NVRAM_TOV(nvram_data));
8141         fcp->isp_xfwoptions = ISP2100_XFW_OPTIONS(nvram_data);
8142         fcp->isp_zfwoptions = ISP2100_ZFW_OPTIONS(nvram_data);
8143         isp_prt(isp, ISP_LOGDEBUG0, "xfwoptions 0x%x zfw options 0x%x",
8144             ISP2100_XFW_OPTIONS(nvram_data), ISP2100_ZFW_OPTIONS(nvram_data));
8145 }
8146
8147 static void
8148 isp_parse_nvram_2400(ispsoftc_t *isp, uint8_t *nvram_data)
8149 {
8150         fcparam *fcp = FCPARAM(isp, 0);
8151         uint64_t wwn;
8152
8153         isp_prt(isp, ISP_LOGDEBUG0,
8154             "NVRAM 0x%08x%08x 0x%08x%08x exchg_cnt %d maxframelen %d",
8155             (uint32_t) (ISP2400_NVRAM_NODE_NAME(nvram_data) >> 32),
8156             (uint32_t) (ISP2400_NVRAM_NODE_NAME(nvram_data)),
8157             (uint32_t) (ISP2400_NVRAM_PORT_NAME(nvram_data) >> 32),
8158             (uint32_t) (ISP2400_NVRAM_PORT_NAME(nvram_data)),
8159             ISP2400_NVRAM_EXCHANGE_COUNT(nvram_data),
8160             ISP2400_NVRAM_MAXFRAMELENGTH(nvram_data));
8161         isp_prt(isp, ISP_LOGDEBUG0,
8162             "NVRAM execthr %d loopid %d fwopt1 0x%x fwopt2 0x%x fwopt3 0x%x",
8163             ISP2400_NVRAM_EXECUTION_THROTTLE(nvram_data),
8164             ISP2400_NVRAM_HARDLOOPID(nvram_data),
8165             ISP2400_NVRAM_FIRMWARE_OPTIONS1(nvram_data),
8166             ISP2400_NVRAM_FIRMWARE_OPTIONS2(nvram_data),
8167             ISP2400_NVRAM_FIRMWARE_OPTIONS3(nvram_data));
8168
8169         wwn = ISP2400_NVRAM_PORT_NAME(nvram_data);
8170         fcp->isp_wwpn_nvram = wwn;
8171
8172         wwn = ISP2400_NVRAM_NODE_NAME(nvram_data);
8173         if (wwn) {
8174                 if ((wwn >> 60) != 2 && (wwn >> 60) != 5) {
8175                         wwn = 0;
8176                 }
8177         }
8178         if (wwn == 0 && (fcp->isp_wwpn_nvram >> 60) == 2) {
8179                 wwn = fcp->isp_wwpn_nvram;
8180                 wwn &= ~((uint64_t) 0xfff << 48);
8181         }
8182         fcp->isp_wwnn_nvram = wwn;
8183
8184         if (ISP2400_NVRAM_EXCHANGE_COUNT(nvram_data)) {
8185                 fcp->isp_maxalloc = ISP2400_NVRAM_EXCHANGE_COUNT(nvram_data);
8186         }
8187         if ((isp->isp_confopts & ISP_CFG_OWNFSZ) == 0) {
8188                 DEFAULT_FRAMESIZE(isp) =
8189                     ISP2400_NVRAM_MAXFRAMELENGTH(nvram_data);
8190         }
8191         if ((isp->isp_confopts & ISP_CFG_OWNLOOPID) == 0) {
8192                 fcp->isp_loopid = ISP2400_NVRAM_HARDLOOPID(nvram_data);
8193         }
8194         if ((isp->isp_confopts & ISP_CFG_OWNEXCTHROTTLE) == 0) {
8195                 DEFAULT_EXEC_THROTTLE(isp) =
8196                         ISP2400_NVRAM_EXECUTION_THROTTLE(nvram_data);
8197         }
8198         fcp->isp_fwoptions = ISP2400_NVRAM_FIRMWARE_OPTIONS1(nvram_data);
8199         fcp->isp_xfwoptions = ISP2400_NVRAM_FIRMWARE_OPTIONS2(nvram_data);
8200         fcp->isp_zfwoptions = ISP2400_NVRAM_FIRMWARE_OPTIONS3(nvram_data);
8201 }