1/*-
2 * SPDX-License-Identifier: BSD-2-Clause
3 *
4 * Copyright (c) 2008, 2009 Silicon Graphics International Corp.
5 * Copyright (c) 2014-2015 Alexander Motin <mav@FreeBSD.org>
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 * 1. Redistributions of source code must retain the above copyright
12 *    notice, this list of conditions, and the following disclaimer,
13 *    without modification.
14 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
15 *    substantially similar to the "NO WARRANTY" disclaimer below
16 *    ("Disclaimer") and any redistribution must be conditioned upon
17 *    including a substantially similar Disclaimer requirement for further
18 *    binary redistribution.
19 *
20 * NO WARRANTY
21 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
22 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
23 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR
24 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
25 * HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
29 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
30 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
31 * POSSIBILITY OF SUCH DAMAGES.
32 *
33 * $Id: //depot/users/kenm/FreeBSD-test2/sys/cam/ctl/scsi_ctl.c#4 $
34 */
35/*
36 * Peripheral driver interface between CAM and CTL (CAM Target Layer).
37 *
38 * Author: Ken Merry <ken@FreeBSD.org>
39 */
40
41#include <sys/param.h>
42#include <sys/queue.h>
43#include <sys/systm.h>
44#include <sys/kernel.h>
45#include <sys/lock.h>
46#include <sys/mutex.h>
47#include <sys/condvar.h>
48#include <sys/malloc.h>
49#include <sys/bus.h>
50#include <sys/endian.h>
51#include <sys/sbuf.h>
52#include <sys/sysctl.h>
53#include <sys/types.h>
54#include <sys/systm.h>
55#include <sys/taskqueue.h>
56#include <machine/bus.h>
57
58#include <cam/cam.h>
59#include <cam/cam_ccb.h>
60#include <cam/cam_periph.h>
61#include <cam/cam_queue.h>
62#include <cam/cam_xpt_periph.h>
63#include <cam/cam_debug.h>
64#include <cam/cam_sim.h>
65#include <cam/cam_xpt.h>
66
67#include <cam/scsi/scsi_all.h>
68#include <cam/scsi/scsi_message.h>
69
70#include <cam/ctl/ctl_io.h>
71#include <cam/ctl/ctl.h>
72#include <cam/ctl/ctl_frontend.h>
73#include <cam/ctl/ctl_util.h>
74#include <cam/ctl/ctl_error.h>
75
76struct ctlfe_softc {
77	struct ctl_port	port;
78	path_id_t	path_id;
79	target_id_t	target_id;
80	uint32_t	hba_misc;
81	u_int		maxio;
82	struct cam_sim *sim;
83	char		port_name[DEV_IDLEN];
84	struct mtx	lun_softc_mtx;
85	STAILQ_HEAD(, ctlfe_lun_softc) lun_softc_list;
86	STAILQ_ENTRY(ctlfe_softc) links;
87};
88
89STAILQ_HEAD(, ctlfe_softc) ctlfe_softc_list;
90struct mtx ctlfe_list_mtx;
91static char ctlfe_mtx_desc[] = "ctlfelist";
92
93typedef enum {
94	CTLFE_LUN_NONE		= 0x00,
95	CTLFE_LUN_WILDCARD	= 0x01
96} ctlfe_lun_flags;
97
98struct ctlfe_lun_softc {
99	struct ctlfe_softc *parent_softc;
100	struct cam_periph *periph;
101	ctlfe_lun_flags flags;
102	int	 ctios_sent;		/* Number of active CTIOs */
103	int	 refcount;		/* Number of active xpt_action() */
104	int	 atios_alloced;		/* Number of ATIOs not freed */
105	int	 inots_alloced;		/* Number of INOTs not freed */
106	struct task	refdrain_task;
107	STAILQ_HEAD(, ccb_hdr) work_queue;
108	LIST_HEAD(, ccb_hdr) atio_list;	/* List of ATIOs queued to SIM. */
109	LIST_HEAD(, ccb_hdr) inot_list;	/* List of INOTs queued to SIM. */
110	STAILQ_ENTRY(ctlfe_lun_softc) links;
111};
112
113typedef enum {
114	CTLFE_CMD_NONE		= 0x00,
115	CTLFE_CMD_PIECEWISE	= 0x01
116} ctlfe_cmd_flags;
117
118struct ctlfe_cmd_info {
119	int cur_transfer_index;
120	size_t cur_transfer_off;
121	ctlfe_cmd_flags flags;
122	/*
123	 * XXX KDM struct bus_dma_segment is 8 bytes on i386, and 16
124	 * bytes on amd64.  So with 32 elements, this is 256 bytes on
125	 * i386 and 512 bytes on amd64.
126	 */
127#define CTLFE_MAX_SEGS	32
128	bus_dma_segment_t cam_sglist[CTLFE_MAX_SEGS];
129};
130
131/*
132 * When we register the adapter/bus, request that this many ctl_ios be
133 * allocated.  This should be the maximum supported by the adapter, but we
134 * currently don't have a way to get that back from the path inquiry.
135 * XXX KDM add that to the path inquiry.
136 */
137#define	CTLFE_REQ_CTL_IO	4096
138/*
139 * Number of Accept Target I/O CCBs to allocate and queue down to the
140 * adapter per LUN.
141 * XXX KDM should this be controlled by CTL?
142 */
143#define	CTLFE_ATIO_PER_LUN	1024
144/*
145 * Number of Immediate Notify CCBs (used for aborts, resets, etc.) to
146 * allocate and queue down to the adapter per LUN.
147 * XXX KDM should this be controlled by CTL?
148 */
149#define	CTLFE_IN_PER_LUN	1024
150
151/*
152 * Timeout (in seconds) on CTIO CCB doing DMA or sending status
153 */
154#define	CTLFE_TIMEOUT	5
155
156/*
157 * Turn this on to enable extra debugging prints.
158 */
159#if 0
160#define	CTLFE_DEBUG
161#endif
162
163MALLOC_DEFINE(M_CTLFE, "CAM CTL FE", "CAM CTL FE interface");
164
165#define	io_ptr		ppriv_ptr0
166
167/* This is only used in the CTIO */
168#define	ccb_atio	ppriv_ptr1
169
170#define PRIV_CCB(io)	((io)->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptrs[0])
171#define PRIV_INFO(io)	((io)->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptrs[1])
172
173static int		ctlfeinitialize(void);
174static int		ctlfeshutdown(void);
175static periph_init_t	ctlfeperiphinit;
176static periph_deinit_t	ctlfeperiphdeinit;
177static void		ctlfeasync(void *callback_arg, uint32_t code,
178				   struct cam_path *path, void *arg);
179static periph_ctor_t	ctlferegister;
180static periph_oninv_t	ctlfeoninvalidate;
181static periph_dtor_t	ctlfecleanup;
182static periph_start_t	ctlfestart;
183static void		ctlfedone(struct cam_periph *periph,
184				  union ccb *done_ccb);
185
186static void 		ctlfe_onoffline(void *arg, int online);
187static void 		ctlfe_online(void *arg);
188static void 		ctlfe_offline(void *arg);
189static int 		ctlfe_lun_enable(void *arg, int lun_id);
190static int 		ctlfe_lun_disable(void *arg, int lun_id);
191static void		ctlfe_dump_sim(struct cam_sim *sim);
192static void		ctlfe_dump_queue(struct ctlfe_lun_softc *softc);
193static void 		ctlfe_datamove(union ctl_io *io);
194static void 		ctlfe_done(union ctl_io *io);
195static void 		ctlfe_dump(void);
196static void		ctlfe_free_ccb(struct cam_periph *periph,
197			    union ccb *ccb);
198static void		ctlfe_requeue_ccb(struct cam_periph *periph,
199			    union ccb *ccb, int unlock);
200
201static struct periph_driver ctlfe_driver =
202{
203	ctlfeperiphinit, "ctl",
204	TAILQ_HEAD_INITIALIZER(ctlfe_driver.units), /*generation*/ 0,
205	CAM_PERIPH_DRV_EARLY,
206	ctlfeperiphdeinit
207};
208
209static struct ctl_frontend ctlfe_frontend =
210{
211	.name = "camtgt",
212	.init = ctlfeinitialize,
213	.fe_dump = ctlfe_dump,
214	.shutdown = ctlfeshutdown,
215};
216CTL_FRONTEND_DECLARE(ctlfe, ctlfe_frontend);
217
218static int
219ctlfeinitialize(void)
220{
221
222	STAILQ_INIT(&ctlfe_softc_list);
223	mtx_init(&ctlfe_list_mtx, ctlfe_mtx_desc, NULL, MTX_DEF);
224	periphdriver_register(&ctlfe_driver);
225	return (0);
226}
227
228static int
229ctlfeshutdown(void)
230{
231	int error;
232
233	error = periphdriver_unregister(&ctlfe_driver);
234	if (error != 0)
235		return (error);
236	mtx_destroy(&ctlfe_list_mtx);
237	return (0);
238}
239
240static void
241ctlfeperiphinit(void)
242{
243	cam_status status;
244
245	status = xpt_register_async(AC_PATH_REGISTERED | AC_PATH_DEREGISTERED |
246				    AC_CONTRACT, ctlfeasync, NULL, NULL);
247	if (status != CAM_REQ_CMP) {
248		printf("ctl: Failed to attach async callback due to CAM "
249		       "status 0x%x!\n", status);
250	}
251}
252
253static int
254ctlfeperiphdeinit(void)
255{
256
257	/* XXX: It would be good to tear down active ports here. */
258	if (!TAILQ_EMPTY(&ctlfe_driver.units))
259		return (EBUSY);
260	xpt_register_async(0, ctlfeasync, NULL, NULL);
261	return (0);
262}
263
264static void
265ctlfeasync(void *callback_arg, uint32_t code, struct cam_path *path, void *arg)
266{
267	struct ctlfe_softc *softc;
268
269#ifdef CTLFEDEBUG
270	printf("%s: entered\n", __func__);
271#endif
272
273	mtx_lock(&ctlfe_list_mtx);
274	STAILQ_FOREACH(softc, &ctlfe_softc_list, links) {
275		if (softc->path_id == xpt_path_path_id(path))
276			break;
277	}
278	mtx_unlock(&ctlfe_list_mtx);
279
280	/*
281	 * When a new path gets registered, and it is capable of target
282	 * mode, go ahead and attach.  Later on, we may need to be more
283	 * selective, but for now this will be sufficient.
284 	 */
285	switch (code) {
286	case AC_PATH_REGISTERED: {
287		struct ctl_port *port;
288		struct ccb_pathinq *cpi;
289		int retval;
290
291		cpi = (struct ccb_pathinq *)arg;
292
293		/* Don't attach if it doesn't support target mode */
294		if ((cpi->target_sprt & PIT_PROCESSOR) == 0) {
295#ifdef CTLFEDEBUG
296			printf("%s: SIM %s%d doesn't support target mode\n",
297			       __func__, cpi->dev_name, cpi->unit_number);
298#endif
299			break;
300		}
301
302		if (softc != NULL) {
303#ifdef CTLFEDEBUG
304			printf("%s: CTL port for CAM path %u already exists\n",
305			       __func__, xpt_path_path_id(path));
306#endif
307			break;
308		}
309
310		/*
311		 * We're in an interrupt context here, so we have to
312		 * use M_NOWAIT.  Of course this means trouble if we
313		 * can't allocate memory.
314		 */
315		softc = malloc(sizeof(*softc), M_CTLFE, M_NOWAIT | M_ZERO);
316		if (softc == NULL) {
317			printf("%s: unable to malloc %zd bytes for softc\n",
318			       __func__, sizeof(*softc));
319			return;
320		}
321
322		softc->path_id = cpi->ccb_h.path_id;
323		softc->target_id = cpi->initiator_id;
324		softc->sim = xpt_path_sim(path);
325		softc->hba_misc = cpi->hba_misc;
326		if (cpi->maxio != 0)
327			softc->maxio = cpi->maxio;
328		else
329			softc->maxio = DFLTPHYS;
330		mtx_init(&softc->lun_softc_mtx, "LUN softc mtx", NULL, MTX_DEF);
331		STAILQ_INIT(&softc->lun_softc_list);
332
333		port = &softc->port;
334		port->frontend = &ctlfe_frontend;
335
336		/*
337		 * XXX KDM should we be more accurate here ?
338		 */
339		if (cpi->transport == XPORT_FC)
340			port->port_type = CTL_PORT_FC;
341		else if (cpi->transport == XPORT_SAS)
342			port->port_type = CTL_PORT_SAS;
343		else
344			port->port_type = CTL_PORT_SCSI;
345
346		/* XXX KDM what should the real number be here? */
347		port->num_requested_ctl_io = CTLFE_REQ_CTL_IO;
348		snprintf(softc->port_name, sizeof(softc->port_name),
349			 "%s%d", cpi->dev_name, cpi->unit_number);
350		/*
351		 * XXX KDM it would be nice to allocate storage in the
352		 * frontend structure itself.
353	 	 */
354		port->port_name = softc->port_name;
355		port->physical_port = cpi->bus_id;
356		port->virtual_port = 0;
357		port->port_online = ctlfe_online;
358		port->port_offline = ctlfe_offline;
359		port->onoff_arg = softc;
360		port->lun_enable = ctlfe_lun_enable;
361		port->lun_disable = ctlfe_lun_disable;
362		port->targ_lun_arg = softc;
363		port->fe_datamove = ctlfe_datamove;
364		port->fe_done = ctlfe_done;
365		port->targ_port = -1;
366
367		retval = ctl_port_register(port);
368		if (retval != 0) {
369			printf("%s: ctl_port_register() failed with "
370			       "error %d!\n", __func__, retval);
371			mtx_destroy(&softc->lun_softc_mtx);
372			free(softc, M_CTLFE);
373			break;
374		} else {
375			mtx_lock(&ctlfe_list_mtx);
376			STAILQ_INSERT_TAIL(&ctlfe_softc_list, softc, links);
377			mtx_unlock(&ctlfe_list_mtx);
378		}
379
380		break;
381	}
382	case AC_PATH_DEREGISTERED: {
383		if (softc != NULL) {
384			/*
385			 * XXX KDM are we certain at this point that there
386			 * are no outstanding commands for this frontend?
387			 */
388			mtx_lock(&ctlfe_list_mtx);
389			STAILQ_REMOVE(&ctlfe_softc_list, softc, ctlfe_softc,
390			    links);
391			mtx_unlock(&ctlfe_list_mtx);
392			ctl_port_deregister(&softc->port);
393			mtx_destroy(&softc->lun_softc_mtx);
394			free(softc, M_CTLFE);
395		}
396		break;
397	}
398	case AC_CONTRACT: {
399		struct ac_contract *ac;
400
401		ac = (struct ac_contract *)arg;
402
403		switch (ac->contract_number) {
404		case AC_CONTRACT_DEV_CHG: {
405			struct ac_device_changed *dev_chg;
406			int retval;
407
408			dev_chg = (struct ac_device_changed *)ac->contract_data;
409
410			printf("%s: WWPN %#jx port 0x%06x path %u target %u %s\n",
411			       __func__, dev_chg->wwpn, dev_chg->port,
412			       xpt_path_path_id(path), dev_chg->target,
413			       (dev_chg->arrived == 0) ?  "left" : "arrived");
414
415			if (softc == NULL) {
416				printf("%s: CTL port for CAM path %u not "
417				       "found!\n", __func__,
418				       xpt_path_path_id(path));
419				break;
420			}
421			if (dev_chg->arrived != 0) {
422				retval = ctl_add_initiator(&softc->port,
423				    dev_chg->target, dev_chg->wwpn, NULL);
424			} else {
425				retval = ctl_remove_initiator(&softc->port,
426				    dev_chg->target);
427			}
428
429			if (retval < 0) {
430				printf("%s: could not %s port %d iid %u "
431				       "WWPN %#jx!\n", __func__,
432				       (dev_chg->arrived != 0) ? "add" :
433				       "remove", softc->port.targ_port,
434				       dev_chg->target,
435				       (uintmax_t)dev_chg->wwpn);
436			}
437			break;
438		}
439		default:
440			printf("%s: unsupported contract number %ju\n",
441			       __func__, (uintmax_t)ac->contract_number);
442			break;
443		}
444		break;
445	}
446	default:
447		break;
448	}
449}
450
451static cam_status
452ctlferegister(struct cam_periph *periph, void *arg)
453{
454	struct ctlfe_softc *bus_softc;
455	struct ctlfe_lun_softc *softc;
456	union ccb ccb;
457	cam_status status;
458	int i, acstatus;
459
460	softc = (struct ctlfe_lun_softc *)arg;
461	bus_softc = softc->parent_softc;
462
463	STAILQ_INIT(&softc->work_queue);
464	LIST_INIT(&softc->atio_list);
465	LIST_INIT(&softc->inot_list);
466	softc->periph = periph;
467	periph->softc = softc;
468
469	/* Increase device openings to maximum for the SIM. */
470	if (bus_softc->sim->max_tagged_dev_openings >
471	    bus_softc->sim->max_dev_openings) {
472		cam_release_devq(periph->path,
473		    /*relsim_flags*/RELSIM_ADJUST_OPENINGS,
474		    /*openings*/bus_softc->sim->max_tagged_dev_openings,
475		    /*timeout*/0,
476		    /*getcount_only*/1);
477	}
478
479	memset(&ccb, 0, sizeof(ccb));
480	xpt_setup_ccb(&ccb.ccb_h, periph->path, CAM_PRIORITY_NONE);
481	ccb.ccb_h.func_code = XPT_EN_LUN;
482	ccb.cel.grp6_len = 0;
483	ccb.cel.grp7_len = 0;
484	ccb.cel.enable = 1;
485	xpt_action(&ccb);
486	status = (ccb.ccb_h.status & CAM_STATUS_MASK);
487	if (status != CAM_REQ_CMP) {
488		xpt_print(periph->path, "%s: Enable LUN failed, status 0x%x\n",
489			  __func__, ccb.ccb_h.status);
490		return (status);
491	}
492
493	status = CAM_REQ_CMP;
494
495	for (i = 0; i < CTLFE_ATIO_PER_LUN; i++) {
496		union ccb *new_ccb;
497		union ctl_io *new_io;
498		struct ctlfe_cmd_info *cmd_info;
499
500		new_ccb = (union ccb *)malloc(sizeof(*new_ccb), M_CTLFE,
501					      M_ZERO|M_NOWAIT);
502		if (new_ccb == NULL) {
503			status = CAM_RESRC_UNAVAIL;
504			break;
505		}
506		new_io = ctl_alloc_io_nowait(bus_softc->port.ctl_pool_ref);
507		if (new_io == NULL) {
508			free(new_ccb, M_CTLFE);
509			status = CAM_RESRC_UNAVAIL;
510			break;
511		}
512		cmd_info = malloc(sizeof(*cmd_info), M_CTLFE,
513		    M_ZERO | M_NOWAIT);
514		if (cmd_info == NULL) {
515			ctl_free_io(new_io);
516			free(new_ccb, M_CTLFE);
517			status = CAM_RESRC_UNAVAIL;
518			break;
519		}
520		PRIV_INFO(new_io) = cmd_info;
521		softc->atios_alloced++;
522		new_ccb->ccb_h.io_ptr = new_io;
523		LIST_INSERT_HEAD(&softc->atio_list, &new_ccb->ccb_h, periph_links.le);
524
525		xpt_setup_ccb(&new_ccb->ccb_h, periph->path, CAM_PRIORITY_NONE);
526		new_ccb->ccb_h.func_code = XPT_ACCEPT_TARGET_IO;
527		new_ccb->ccb_h.cbfcnp = ctlfedone;
528		new_ccb->ccb_h.flags |= CAM_UNLOCKED;
529		xpt_action(new_ccb);
530		status = new_ccb->ccb_h.status;
531		if ((status & CAM_STATUS_MASK) != CAM_REQ_INPROG) {
532			free(cmd_info, M_CTLFE);
533			ctl_free_io(new_io);
534			free(new_ccb, M_CTLFE);
535			break;
536		}
537	}
538
539	acstatus = cam_periph_acquire(periph);
540	if (acstatus != 0) {
541		xpt_print(periph->path, "%s: could not acquire reference "
542			  "count, status = %#x\n", __func__, acstatus);
543		return (CAM_REQ_CMP_ERR);
544	}
545
546	if (i == 0) {
547		xpt_print(periph->path, "%s: could not allocate ATIO CCBs, "
548			  "status 0x%x\n", __func__, status);
549		return (CAM_REQ_CMP_ERR);
550	}
551
552	for (i = 0; i < CTLFE_IN_PER_LUN; i++) {
553		union ccb *new_ccb;
554		union ctl_io *new_io;
555
556		new_ccb = (union ccb *)malloc(sizeof(*new_ccb), M_CTLFE,
557					      M_ZERO|M_NOWAIT);
558		if (new_ccb == NULL) {
559			status = CAM_RESRC_UNAVAIL;
560			break;
561		}
562		new_io = ctl_alloc_io_nowait(bus_softc->port.ctl_pool_ref);
563		if (new_io == NULL) {
564			free(new_ccb, M_CTLFE);
565			status = CAM_RESRC_UNAVAIL;
566			break;
567		}
568		softc->inots_alloced++;
569		new_ccb->ccb_h.io_ptr = new_io;
570		LIST_INSERT_HEAD(&softc->inot_list, &new_ccb->ccb_h, periph_links.le);
571
572		xpt_setup_ccb(&new_ccb->ccb_h, periph->path, CAM_PRIORITY_NONE);
573		new_ccb->ccb_h.func_code = XPT_IMMEDIATE_NOTIFY;
574		new_ccb->ccb_h.cbfcnp = ctlfedone;
575		new_ccb->ccb_h.flags |= CAM_UNLOCKED;
576		xpt_action(new_ccb);
577		status = new_ccb->ccb_h.status;
578		if ((status & CAM_STATUS_MASK) != CAM_REQ_INPROG) {
579			/*
580			 * Note that we don't free the CCB here.  If the
581			 * status is not CAM_REQ_INPROG, then we're
582			 * probably talking to a SIM that says it is
583			 * target-capable but doesn't support the
584			 * XPT_IMMEDIATE_NOTIFY CCB.  i.e. it supports the
585			 * older API.  In that case, it'll call xpt_done()
586			 * on the CCB, and we need to free it in our done
587			 * routine as a result.
588			 */
589			break;
590		}
591	}
592	if ((i == 0)
593	 || (status != CAM_REQ_INPROG)) {
594		xpt_print(periph->path, "%s: could not allocate immediate "
595			  "notify CCBs, status 0x%x\n", __func__, status);
596		return (CAM_REQ_CMP_ERR);
597	}
598	mtx_lock(&bus_softc->lun_softc_mtx);
599	STAILQ_INSERT_TAIL(&bus_softc->lun_softc_list, softc, links);
600	mtx_unlock(&bus_softc->lun_softc_mtx);
601	return (CAM_REQ_CMP);
602}
603
604static void
605ctlfeoninvalidate(struct cam_periph *periph)
606{
607	struct ctlfe_lun_softc *softc = (struct ctlfe_lun_softc *)periph->softc;
608	struct ctlfe_softc *bus_softc;
609	union ccb ccb;
610	struct ccb_hdr *hdr;
611	cam_status status;
612
613	/* Abort all ATIOs and INOTs queued to SIM. */
614	memset(&ccb, 0, sizeof(ccb));
615	xpt_setup_ccb(&ccb.ccb_h, periph->path, CAM_PRIORITY_NONE);
616	ccb.ccb_h.func_code = XPT_ABORT;
617	LIST_FOREACH(hdr, &softc->atio_list, periph_links.le) {
618		ccb.cab.abort_ccb = (union ccb *)hdr;
619		xpt_action(&ccb);
620	}
621	LIST_FOREACH(hdr, &softc->inot_list, periph_links.le) {
622		ccb.cab.abort_ccb = (union ccb *)hdr;
623		xpt_action(&ccb);
624	}
625
626	/* Disable the LUN in SIM. */
627	ccb.ccb_h.func_code = XPT_EN_LUN;
628	ccb.cel.grp6_len = 0;
629	ccb.cel.grp7_len = 0;
630	ccb.cel.enable = 0;
631	xpt_action(&ccb);
632	status = (ccb.ccb_h.status & CAM_STATUS_MASK);
633	if (status != CAM_REQ_CMP) {
634		xpt_print(periph->path, "%s: Disable LUN failed, status 0x%x\n",
635			  __func__, ccb.ccb_h.status);
636		/*
637		 * XXX KDM what do we do now?
638		 */
639	}
640
641	bus_softc = softc->parent_softc;
642	mtx_lock(&bus_softc->lun_softc_mtx);
643	STAILQ_REMOVE(&bus_softc->lun_softc_list, softc, ctlfe_lun_softc, links);
644	mtx_unlock(&bus_softc->lun_softc_mtx);
645}
646
647static void
648ctlfecleanup(struct cam_periph *periph)
649{
650	struct ctlfe_lun_softc *softc;
651
652	softc = (struct ctlfe_lun_softc *)periph->softc;
653
654	KASSERT(softc->ctios_sent == 0, ("%s: ctios_sent %d != 0",
655	    __func__, softc->ctios_sent));
656	KASSERT(softc->refcount == 0, ("%s: refcount %d != 0",
657	    __func__, softc->refcount));
658	KASSERT(softc->atios_alloced == 0, ("%s: atios_alloced %d != 0",
659	    __func__, softc->atios_alloced));
660	KASSERT(softc->inots_alloced == 0, ("%s: inots_alloced %d != 0",
661	    __func__, softc->inots_alloced));
662
663	free(softc, M_CTLFE);
664}
665
666static void
667ctlfedata(struct ctlfe_lun_softc *softc, union ctl_io *io,
668    ccb_flags *flags, uint8_t **data_ptr, uint32_t *dxfer_len,
669    uint16_t *sglist_cnt)
670{
671	struct ctlfe_softc *bus_softc;
672	struct ctlfe_cmd_info *cmd_info;
673	struct ctl_sg_entry *ctl_sglist;
674	bus_dma_segment_t *cam_sglist;
675	size_t off;
676	int i, idx;
677
678	cmd_info = PRIV_INFO(io);
679	bus_softc = softc->parent_softc;
680
681	/*
682	 * Set the direction, relative to the initiator.
683	 */
684	*flags &= ~CAM_DIR_MASK;
685	if ((io->io_hdr.flags & CTL_FLAG_DATA_MASK) == CTL_FLAG_DATA_IN)
686		*flags |= CAM_DIR_IN;
687	else
688		*flags |= CAM_DIR_OUT;
689
690	*flags &= ~CAM_DATA_MASK;
691	idx = cmd_info->cur_transfer_index;
692	off = cmd_info->cur_transfer_off;
693	cmd_info->flags &= ~CTLFE_CMD_PIECEWISE;
694	if (io->scsiio.kern_sg_entries == 0) {	/* No S/G list. */
695
696		/* One time shift for SRR offset. */
697		off += io->scsiio.ext_data_filled;
698		io->scsiio.ext_data_filled = 0;
699
700		*data_ptr = io->scsiio.kern_data_ptr + off;
701		if (io->scsiio.kern_data_len - off <= bus_softc->maxio) {
702			*dxfer_len = io->scsiio.kern_data_len - off;
703		} else {
704			*dxfer_len = bus_softc->maxio;
705			cmd_info->cur_transfer_off += bus_softc->maxio;
706			cmd_info->flags |= CTLFE_CMD_PIECEWISE;
707		}
708		*sglist_cnt = 0;
709
710		if (io->io_hdr.flags & CTL_FLAG_BUS_ADDR)
711			*flags |= CAM_DATA_PADDR;
712		else
713			*flags |= CAM_DATA_VADDR;
714	} else {	/* S/G list with physical or virtual pointers. */
715		ctl_sglist = (struct ctl_sg_entry *)io->scsiio.kern_data_ptr;
716
717		/* One time shift for SRR offset. */
718		while (io->scsiio.ext_data_filled >= ctl_sglist[idx].len - off) {
719			io->scsiio.ext_data_filled -= ctl_sglist[idx].len - off;
720			idx++;
721			off = 0;
722		}
723		off += io->scsiio.ext_data_filled;
724		io->scsiio.ext_data_filled = 0;
725
726		cam_sglist = cmd_info->cam_sglist;
727		*dxfer_len = 0;
728		for (i = 0; i < io->scsiio.kern_sg_entries - idx; i++) {
729			cam_sglist[i].ds_addr = (bus_addr_t)(uintptr_t)ctl_sglist[i + idx].addr + off;
730			if (ctl_sglist[i + idx].len - off <= bus_softc->maxio - *dxfer_len) {
731				cam_sglist[i].ds_len = ctl_sglist[idx + i].len - off;
732				*dxfer_len += cam_sglist[i].ds_len;
733			} else {
734				cam_sglist[i].ds_len = bus_softc->maxio - *dxfer_len;
735				cmd_info->cur_transfer_index = idx + i;
736				cmd_info->cur_transfer_off = cam_sglist[i].ds_len + off;
737				cmd_info->flags |= CTLFE_CMD_PIECEWISE;
738				*dxfer_len += cam_sglist[i].ds_len;
739				if (ctl_sglist[i].len != 0)
740					i++;
741				break;
742			}
743			if (i == (CTLFE_MAX_SEGS - 1) &&
744			    idx + i < (io->scsiio.kern_sg_entries - 1)) {
745				cmd_info->cur_transfer_index = idx + i + 1;
746				cmd_info->cur_transfer_off = 0;
747				cmd_info->flags |= CTLFE_CMD_PIECEWISE;
748				i++;
749				break;
750			}
751			off = 0;
752		}
753		*sglist_cnt = i;
754		if (io->io_hdr.flags & CTL_FLAG_BUS_ADDR)
755			*flags |= CAM_DATA_SG_PADDR;
756		else
757			*flags |= CAM_DATA_SG;
758		*data_ptr = (uint8_t *)cam_sglist;
759	}
760}
761
762static void
763ctlfestart(struct cam_periph *periph, union ccb *start_ccb)
764{
765	struct ctlfe_lun_softc *softc;
766	struct ctlfe_cmd_info *cmd_info;
767	struct ccb_hdr *ccb_h;
768	struct ccb_accept_tio *atio;
769	struct ccb_scsiio *csio;
770	uint8_t *data_ptr;
771	uint32_t dxfer_len;
772	ccb_flags flags;
773	union ctl_io *io;
774	uint8_t scsi_status;
775
776	softc = (struct ctlfe_lun_softc *)periph->softc;
777
778next:
779	/* Take the ATIO off the work queue */
780	ccb_h = STAILQ_FIRST(&softc->work_queue);
781	if (ccb_h == NULL) {
782		xpt_release_ccb(start_ccb);
783		return;
784	}
785	STAILQ_REMOVE_HEAD(&softc->work_queue, periph_links.stqe);
786	atio = (struct ccb_accept_tio *)ccb_h;
787	io = (union ctl_io *)ccb_h->io_ptr;
788	csio = &start_ccb->csio;
789
790	flags = atio->ccb_h.flags &
791		(CAM_DIS_DISCONNECT|CAM_TAG_ACTION_VALID|CAM_DIR_MASK);
792	cmd_info = PRIV_INFO(io);
793	cmd_info->cur_transfer_index = 0;
794	cmd_info->cur_transfer_off = 0;
795	cmd_info->flags = 0;
796
797	if (io->io_hdr.flags & CTL_FLAG_DMA_QUEUED) {
798		/*
799		 * Datamove call, we need to setup the S/G list.
800		 */
801		ctlfedata(softc, io, &flags, &data_ptr, &dxfer_len,
802		    &csio->sglist_cnt);
803	} else {
804		/*
805		 * We're done, send status back.
806		 */
807		if ((io->io_hdr.flags & CTL_FLAG_ABORT) &&
808		    (io->io_hdr.flags & CTL_FLAG_ABORT_STATUS) == 0) {
809			io->io_hdr.flags &= ~CTL_FLAG_STATUS_QUEUED;
810
811			/* Tell the SIM that we've aborted this ATIO */
812#ifdef CTLFEDEBUG
813			printf("%s: tag %04x abort\n", __func__, atio->tag_id);
814#endif
815			KASSERT(atio->ccb_h.func_code == XPT_ACCEPT_TARGET_IO,
816			    ("func_code %#x is not ATIO", atio->ccb_h.func_code));
817			start_ccb->ccb_h.func_code = XPT_ABORT;
818			start_ccb->cab.abort_ccb = (union ccb *)atio;
819			xpt_action(start_ccb);
820
821			ctlfe_requeue_ccb(periph, (union ccb *)atio,
822			    /* unlock */0);
823
824			/* XPT_ABORT is not queued, so we can take next I/O. */
825			goto next;
826		}
827		data_ptr = NULL;
828		dxfer_len = 0;
829		csio->sglist_cnt = 0;
830	}
831	scsi_status = 0;
832	if ((io->io_hdr.flags & CTL_FLAG_STATUS_QUEUED) &&
833	    (cmd_info->flags & CTLFE_CMD_PIECEWISE) == 0 &&
834	    ((io->io_hdr.flags & CTL_FLAG_DMA_QUEUED) == 0 ||
835	     io->io_hdr.status == CTL_SUCCESS)) {
836		flags |= CAM_SEND_STATUS;
837		scsi_status = io->scsiio.scsi_status;
838		csio->sense_len = io->scsiio.sense_len;
839#ifdef CTLFEDEBUG
840		printf("%s: tag %04x status %x\n", __func__,
841		       atio->tag_id, io->io_hdr.status);
842#endif
843		if (csio->sense_len != 0) {
844			csio->sense_data = io->scsiio.sense_data;
845			flags |= CAM_SEND_SENSE;
846		}
847	}
848
849#ifdef CTLFEDEBUG
850	printf("%s: %s: tag %04x flags %x ptr %p len %u\n", __func__,
851	       (flags & CAM_SEND_STATUS) ? "done" : "datamove",
852	       atio->tag_id, flags, data_ptr, dxfer_len);
853#endif
854
855	/*
856	 * Valid combinations:
857	 *  - CAM_SEND_STATUS, CAM_DATA_SG = 0, dxfer_len = 0,
858	 *    sglist_cnt = 0
859	 *  - CAM_SEND_STATUS = 0, CAM_DATA_SG = 0, dxfer_len != 0,
860	 *    sglist_cnt = 0
861	 *  - CAM_SEND_STATUS = 0, CAM_DATA_SG, dxfer_len != 0,
862	 *    sglist_cnt != 0
863	 */
864#ifdef CTLFEDEBUG
865	if (((flags & CAM_SEND_STATUS)
866	  && (((flags & CAM_DATA_SG) != 0)
867	   || (dxfer_len != 0)
868	   || (csio->sglist_cnt != 0)))
869	 || (((flags & CAM_SEND_STATUS) == 0)
870	  && (dxfer_len == 0))
871	 || ((flags & CAM_DATA_SG)
872	  && (csio->sglist_cnt == 0))
873	 || (((flags & CAM_DATA_SG) == 0)
874	  && (csio->sglist_cnt != 0))) {
875		printf("%s: tag %04x cdb %02x flags %#x dxfer_len "
876		       "%d sg %u\n", __func__, atio->tag_id,
877		       atio_cdb_ptr(atio)[0], flags, dxfer_len,
878		       csio->sglist_cnt);
879		printf("%s: tag %04x io status %#x\n", __func__,
880		       atio->tag_id, io->io_hdr.status);
881	}
882#endif
883	cam_fill_ctio(csio,
884		      /*retries*/ 2,
885		      ctlfedone,
886		      flags,
887		      (flags & CAM_TAG_ACTION_VALID) ? MSG_SIMPLE_Q_TAG : 0,
888		      atio->tag_id,
889		      atio->init_id,
890		      scsi_status,
891		      /*data_ptr*/ data_ptr,
892		      /*dxfer_len*/ dxfer_len,
893		      /*timeout*/ CTLFE_TIMEOUT * 1000);
894	start_ccb->ccb_h.flags |= CAM_UNLOCKED;
895	start_ccb->ccb_h.ccb_atio = atio;
896	if (io->io_hdr.flags & CTL_FLAG_DMA_QUEUED)
897		io->io_hdr.flags |= CTL_FLAG_DMA_INPROG;
898	io->io_hdr.flags &= ~(CTL_FLAG_DMA_QUEUED | CTL_FLAG_STATUS_QUEUED);
899
900	softc->ctios_sent++;
901	softc->refcount++;
902	cam_periph_unlock(periph);
903	xpt_action(start_ccb);
904	cam_periph_lock(periph);
905	softc->refcount--;
906
907	/*
908	 * If we still have work to do, ask for another CCB.
909	 */
910	if (!STAILQ_EMPTY(&softc->work_queue))
911		xpt_schedule(periph, CAM_PRIORITY_NORMAL);
912}
913
914static void
915ctlfe_drain(void *context, int pending)
916{
917	struct cam_periph *periph = context;
918	struct ctlfe_lun_softc *softc = periph->softc;
919
920	cam_periph_lock(periph);
921	while (softc->refcount != 0) {
922		cam_periph_sleep(periph, &softc->refcount, PRIBIO,
923		    "ctlfe_drain", 1);
924	}
925	cam_periph_unlock(periph);
926	cam_periph_release(periph);
927}
928
929static void
930ctlfe_free_ccb(struct cam_periph *periph, union ccb *ccb)
931{
932	struct ctlfe_lun_softc *softc;
933	union ctl_io *io;
934	struct ctlfe_cmd_info *cmd_info;
935
936	softc = (struct ctlfe_lun_softc *)periph->softc;
937	io = ccb->ccb_h.io_ptr;
938
939	switch (ccb->ccb_h.func_code) {
940	case XPT_ACCEPT_TARGET_IO:
941		softc->atios_alloced--;
942		cmd_info = PRIV_INFO(io);
943		free(cmd_info, M_CTLFE);
944		break;
945	case XPT_IMMEDIATE_NOTIFY:
946	case XPT_NOTIFY_ACKNOWLEDGE:
947		softc->inots_alloced--;
948		break;
949	default:
950		break;
951	}
952
953	ctl_free_io(io);
954	free(ccb, M_CTLFE);
955
956	KASSERT(softc->atios_alloced >= 0, ("%s: atios_alloced %d < 0",
957	    __func__, softc->atios_alloced));
958	KASSERT(softc->inots_alloced >= 0, ("%s: inots_alloced %d < 0",
959	    __func__, softc->inots_alloced));
960
961	/*
962	 * If we have received all of our CCBs, we can release our
963	 * reference on the peripheral driver.  It will probably go away
964	 * now.
965	 */
966	if (softc->atios_alloced == 0 && softc->inots_alloced == 0) {
967		if (softc->refcount == 0) {
968			cam_periph_release_locked(periph);
969		} else {
970			TASK_INIT(&softc->refdrain_task, 0, ctlfe_drain, periph);
971			taskqueue_enqueue(taskqueue_thread,
972			    &softc->refdrain_task);
973		}
974	}
975}
976
977/*
978 * Send the ATIO/INOT back to the SIM, or free it if periph was invalidated.
979 */
980static void
981ctlfe_requeue_ccb(struct cam_periph *periph, union ccb *ccb, int unlock)
982{
983	struct ctlfe_lun_softc *softc;
984	struct mtx *mtx;
985
986	if (periph->flags & CAM_PERIPH_INVALID) {
987		mtx = cam_periph_mtx(periph);
988		ctlfe_free_ccb(periph, ccb);
989		if (unlock)
990			mtx_unlock(mtx);
991		return;
992	}
993	softc = (struct ctlfe_lun_softc *)periph->softc;
994	if (ccb->ccb_h.func_code == XPT_ACCEPT_TARGET_IO)
995		LIST_INSERT_HEAD(&softc->atio_list, &ccb->ccb_h, periph_links.le);
996	else
997		LIST_INSERT_HEAD(&softc->inot_list, &ccb->ccb_h, periph_links.le);
998	if (unlock)
999		cam_periph_unlock(periph);
1000
1001	/*
1002	 * For a wildcard attachment, commands can come in with a specific
1003	 * target/lun.  Reset the target and LUN fields back to the wildcard
1004	 * values before we send them back down to the SIM.
1005	 */
1006	xpt_setup_ccb_flags(&ccb->ccb_h, periph->path, CAM_PRIORITY_NONE,
1007	    ccb->ccb_h.flags);
1008
1009	xpt_action(ccb);
1010}
1011
1012static int
1013ctlfe_adjust_cdb(struct ccb_accept_tio *atio, uint32_t offset)
1014{
1015	uint64_t lba;
1016	uint32_t num_blocks, nbc;
1017	uint8_t *cmdbyt = atio_cdb_ptr(atio);
1018
1019	nbc = offset >> 9;	/* ASSUMING 512 BYTE BLOCKS */
1020
1021	switch (cmdbyt[0]) {
1022	case READ_6:
1023	case WRITE_6:
1024	{
1025		struct scsi_rw_6 *cdb = (struct scsi_rw_6 *)cmdbyt;
1026		lba = scsi_3btoul(cdb->addr);
1027		lba &= 0x1fffff;
1028		num_blocks = cdb->length;
1029		if (num_blocks == 0)
1030			num_blocks = 256;
1031		lba += nbc;
1032		num_blocks -= nbc;
1033		scsi_ulto3b(lba, cdb->addr);
1034		cdb->length = num_blocks;
1035		break;
1036	}
1037	case READ_10:
1038	case WRITE_10:
1039	{
1040		struct scsi_rw_10 *cdb = (struct scsi_rw_10 *)cmdbyt;
1041		lba = scsi_4btoul(cdb->addr);
1042		num_blocks = scsi_2btoul(cdb->length);
1043		lba += nbc;
1044		num_blocks -= nbc;
1045		scsi_ulto4b(lba, cdb->addr);
1046		scsi_ulto2b(num_blocks, cdb->length);
1047		break;
1048	}
1049	case READ_12:
1050	case WRITE_12:
1051	{
1052		struct scsi_rw_12 *cdb = (struct scsi_rw_12 *)cmdbyt;
1053		lba = scsi_4btoul(cdb->addr);
1054		num_blocks = scsi_4btoul(cdb->length);
1055		lba += nbc;
1056		num_blocks -= nbc;
1057		scsi_ulto4b(lba, cdb->addr);
1058		scsi_ulto4b(num_blocks, cdb->length);
1059		break;
1060	}
1061	case READ_16:
1062	case WRITE_16:
1063	{
1064		struct scsi_rw_16 *cdb = (struct scsi_rw_16 *)cmdbyt;
1065		lba = scsi_8btou64(cdb->addr);
1066		num_blocks = scsi_4btoul(cdb->length);
1067		lba += nbc;
1068		num_blocks -= nbc;
1069		scsi_u64to8b(lba, cdb->addr);
1070		scsi_ulto4b(num_blocks, cdb->length);
1071		break;
1072	}
1073	default:
1074		return -1;
1075	}
1076	return (0);
1077}
1078
1079static void
1080ctlfedone(struct cam_periph *periph, union ccb *done_ccb)
1081{
1082	struct ctlfe_lun_softc *softc;
1083	struct ctlfe_softc *bus_softc;
1084	struct ctlfe_cmd_info *cmd_info;
1085	struct ccb_accept_tio *atio = NULL;
1086	union ctl_io *io = NULL;
1087	struct mtx *mtx;
1088	cam_status status;
1089
1090	KASSERT((done_ccb->ccb_h.flags & CAM_UNLOCKED) != 0,
1091	    ("CCB in ctlfedone() without CAM_UNLOCKED flag"));
1092#ifdef CTLFE_DEBUG
1093	printf("%s: entered, func_code = %#x\n", __func__,
1094	       done_ccb->ccb_h.func_code);
1095#endif
1096
1097	/*
1098	 * At this point CTL has no known use case for device queue freezes.
1099	 * In case some SIM think different -- drop its freeze right here.
1100	 */
1101	if ((done_ccb->ccb_h.status & CAM_DEV_QFRZN) != 0) {
1102		cam_release_devq(periph->path,
1103				 /*relsim_flags*/0,
1104				 /*reduction*/0,
1105				 /*timeout*/0,
1106				 /*getcount_only*/0);
1107		done_ccb->ccb_h.status &= ~CAM_DEV_QFRZN;
1108	}
1109
1110	softc = (struct ctlfe_lun_softc *)periph->softc;
1111	bus_softc = softc->parent_softc;
1112	mtx = cam_periph_mtx(periph);
1113	mtx_lock(mtx);
1114
1115	switch (done_ccb->ccb_h.func_code) {
1116	case XPT_ACCEPT_TARGET_IO: {
1117		LIST_REMOVE(&done_ccb->ccb_h, periph_links.le);
1118		atio = &done_ccb->atio;
1119		status = atio->ccb_h.status & CAM_STATUS_MASK;
1120		if (status != CAM_CDB_RECVD) {
1121			ctlfe_free_ccb(periph, done_ccb);
1122			goto out;
1123		}
1124
1125 resubmit:
1126		/*
1127		 * Allocate a ctl_io, pass it to CTL, and wait for the
1128		 * datamove or done.
1129		 */
1130		mtx_unlock(mtx);
1131		io = done_ccb->ccb_h.io_ptr;
1132		cmd_info = PRIV_INFO(io);
1133		ctl_zero_io(io);
1134
1135		/* Save pointers on both sides */
1136		PRIV_CCB(io) = done_ccb;
1137		PRIV_INFO(io) = cmd_info;
1138		done_ccb->ccb_h.io_ptr = io;
1139
1140		/*
1141		 * Only SCSI I/O comes down this path, resets, etc. come
1142		 * down the immediate notify path below.
1143		 */
1144		io->io_hdr.io_type = CTL_IO_SCSI;
1145		io->io_hdr.nexus.initid = atio->init_id;
1146		io->io_hdr.nexus.targ_port = bus_softc->port.targ_port;
1147		if (bus_softc->hba_misc & PIM_EXTLUNS) {
1148			io->io_hdr.nexus.targ_lun = ctl_decode_lun(
1149			    CAM_EXTLUN_BYTE_SWIZZLE(atio->ccb_h.target_lun));
1150		} else {
1151			io->io_hdr.nexus.targ_lun = atio->ccb_h.target_lun;
1152		}
1153		io->scsiio.priority = atio->priority;
1154		io->scsiio.tag_num = atio->tag_id;
1155		switch (atio->tag_action) {
1156		case CAM_TAG_ACTION_NONE:
1157			io->scsiio.tag_type = CTL_TAG_UNTAGGED;
1158			break;
1159		case MSG_SIMPLE_TASK:
1160			io->scsiio.tag_type = CTL_TAG_SIMPLE;
1161			break;
1162		case MSG_HEAD_OF_QUEUE_TASK:
1163        		io->scsiio.tag_type = CTL_TAG_HEAD_OF_QUEUE;
1164			break;
1165		case MSG_ORDERED_TASK:
1166        		io->scsiio.tag_type = CTL_TAG_ORDERED;
1167			break;
1168		case MSG_ACA_TASK:
1169			io->scsiio.tag_type = CTL_TAG_ACA;
1170			break;
1171		default:
1172			io->scsiio.tag_type = CTL_TAG_UNTAGGED;
1173			printf("%s: unhandled tag type %#x!!\n", __func__,
1174			       atio->tag_action);
1175			break;
1176		}
1177		if (atio->cdb_len > sizeof(io->scsiio.cdb)) {
1178			printf("%s: WARNING: CDB len %d > ctl_io space %zd\n",
1179			       __func__, atio->cdb_len, sizeof(io->scsiio.cdb));
1180		}
1181		io->scsiio.cdb_len = min(atio->cdb_len, sizeof(io->scsiio.cdb));
1182		bcopy(atio_cdb_ptr(atio), io->scsiio.cdb, io->scsiio.cdb_len);
1183
1184#ifdef CTLFEDEBUG
1185		printf("%s: %u:%u:%u: tag %jx CDB %02x\n", __func__,
1186		        io->io_hdr.nexus.initid,
1187		        io->io_hdr.nexus.targ_port,
1188		        io->io_hdr.nexus.targ_lun,
1189			io->scsiio.tag_num, io->scsiio.cdb[0]);
1190#endif
1191
1192		ctl_queue(io);
1193		return;
1194	}
1195	case XPT_CONT_TARGET_IO: {
1196		int srr = 0;
1197		uint32_t srr_off = 0;
1198
1199		atio = (struct ccb_accept_tio *)done_ccb->ccb_h.ccb_atio;
1200		io = (union ctl_io *)atio->ccb_h.io_ptr;
1201
1202		softc->ctios_sent--;
1203#ifdef CTLFEDEBUG
1204		printf("%s: got XPT_CONT_TARGET_IO tag %#x flags %#x\n",
1205		       __func__, atio->tag_id, done_ccb->ccb_h.flags);
1206#endif
1207		/*
1208		 * Handle SRR case were the data pointer is pushed back hack
1209		 */
1210		if ((done_ccb->ccb_h.status & CAM_STATUS_MASK) == CAM_MESSAGE_RECV
1211		    && done_ccb->csio.msg_ptr != NULL
1212		    && done_ccb->csio.msg_ptr[0] == MSG_EXTENDED
1213		    && done_ccb->csio.msg_ptr[1] == 5
1214       		    && done_ccb->csio.msg_ptr[2] == 0) {
1215			srr = 1;
1216			srr_off =
1217			    (done_ccb->csio.msg_ptr[3] << 24)
1218			    | (done_ccb->csio.msg_ptr[4] << 16)
1219			    | (done_ccb->csio.msg_ptr[5] << 8)
1220			    | (done_ccb->csio.msg_ptr[6]);
1221		}
1222
1223		/*
1224		 * If we have an SRR and we're still sending data, we
1225		 * should be able to adjust offsets and cycle again.
1226		 * It is possible only if offset is from this datamove.
1227		 */
1228		if (srr && (io->io_hdr.flags & CTL_FLAG_DMA_INPROG) &&
1229		    srr_off >= io->scsiio.kern_rel_offset &&
1230		    srr_off < io->scsiio.kern_rel_offset +
1231		     io->scsiio.kern_data_len) {
1232			io->scsiio.kern_data_resid =
1233			    io->scsiio.kern_rel_offset +
1234			    io->scsiio.kern_data_len - srr_off;
1235			io->scsiio.ext_data_filled = srr_off;
1236			io->scsiio.io_hdr.status = CTL_STATUS_NONE;
1237			io->io_hdr.flags |= CTL_FLAG_DMA_QUEUED;
1238			xpt_release_ccb(done_ccb);
1239			STAILQ_INSERT_HEAD(&softc->work_queue, &atio->ccb_h,
1240					  periph_links.stqe);
1241			xpt_schedule(periph, CAM_PRIORITY_NORMAL);
1242			break;
1243		}
1244
1245		/*
1246		 * If status was being sent, the back end data is now history.
1247		 * Hack it up and resubmit a new command with the CDB adjusted.
1248		 * If the SIM does the right thing, all of the resid math
1249		 * should work.
1250		 */
1251		if (srr && (io->io_hdr.flags & CTL_FLAG_DMA_INPROG) == 0) {
1252			xpt_release_ccb(done_ccb);
1253			if (ctlfe_adjust_cdb(atio, srr_off) == 0) {
1254				done_ccb = (union ccb *)atio;
1255				goto resubmit;
1256			}
1257			/*
1258			 * Fall through to doom....
1259			 */
1260		}
1261
1262		if ((done_ccb->ccb_h.flags & CAM_SEND_STATUS) &&
1263		    (done_ccb->ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_CMP)
1264			io->io_hdr.flags |= CTL_FLAG_STATUS_SENT;
1265
1266		/*
1267		 * If we were sending status back to the initiator, free up
1268		 * resources.  If we were doing a datamove, call the
1269		 * datamove done routine.
1270		 */
1271		if ((io->io_hdr.flags & CTL_FLAG_DMA_INPROG) == 0) {
1272			/*
1273			 * If we asked to send sense data but it wasn't sent,
1274			 * queue the I/O back to CTL for later REQUEST SENSE.
1275			 */
1276			if ((done_ccb->ccb_h.flags & CAM_SEND_SENSE) != 0 &&
1277			    (done_ccb->ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_CMP &&
1278			    (done_ccb->ccb_h.status & CAM_SENT_SENSE) == 0 &&
1279			    (io = ctl_alloc_io_nowait(bus_softc->port.ctl_pool_ref)) != NULL) {
1280				PRIV_INFO(io) = PRIV_INFO(
1281				    (union ctl_io *)atio->ccb_h.io_ptr);
1282				ctl_queue_sense(atio->ccb_h.io_ptr);
1283				atio->ccb_h.io_ptr = io;
1284			}
1285
1286			/* Abort ATIO if CTIO sending status has failed. */
1287			if ((done_ccb->ccb_h.status & CAM_STATUS_MASK) !=
1288			    CAM_REQ_CMP) {
1289				done_ccb->ccb_h.func_code = XPT_ABORT;
1290				done_ccb->cab.abort_ccb = (union ccb *)atio;
1291				xpt_action(done_ccb);
1292			}
1293
1294			xpt_release_ccb(done_ccb);
1295			ctlfe_requeue_ccb(periph, (union ccb *)atio,
1296			    /* unlock */1);
1297			return;
1298		} else {
1299			struct ctlfe_cmd_info *cmd_info;
1300			struct ccb_scsiio *csio;
1301
1302			csio = &done_ccb->csio;
1303			cmd_info = PRIV_INFO(io);
1304
1305			io->io_hdr.flags &= ~CTL_FLAG_DMA_INPROG;
1306
1307			/*
1308			 * Translate CAM status to CTL status.  Success
1309			 * does not change the overall, ctl_io status.  In
1310			 * that case we just set port_status to 0.  If we
1311			 * have a failure, though, set a data phase error
1312			 * for the overall ctl_io.
1313			 */
1314			switch (done_ccb->ccb_h.status & CAM_STATUS_MASK) {
1315			case CAM_REQ_CMP:
1316				io->scsiio.kern_data_resid -=
1317				    csio->dxfer_len - csio->resid;
1318				io->io_hdr.port_status = 0;
1319				break;
1320			default:
1321				/*
1322				 * XXX KDM we probably need to figure out a
1323				 * standard set of errors that the SIM
1324				 * drivers should return in the event of a
1325				 * data transfer failure.  A data phase
1326				 * error will at least point the user to a
1327				 * data transfer error of some sort.
1328				 * Hopefully the SIM printed out some
1329				 * additional information to give the user
1330				 * a clue what happened.
1331				 */
1332				io->io_hdr.port_status = 0xbad1;
1333				ctl_set_data_phase_error(&io->scsiio);
1334				/*
1335				 * XXX KDM figure out residual.
1336				 */
1337				break;
1338			}
1339			/*
1340			 * If we had to break this S/G list into multiple
1341			 * pieces, figure out where we are in the list, and
1342			 * continue sending pieces if necessary.
1343			 */
1344			if ((cmd_info->flags & CTLFE_CMD_PIECEWISE) &&
1345			    io->io_hdr.port_status == 0 && csio->resid == 0) {
1346				ccb_flags flags;
1347				uint8_t *data_ptr;
1348				uint32_t dxfer_len;
1349
1350				flags = atio->ccb_h.flags &
1351					(CAM_DIS_DISCONNECT|
1352					 CAM_TAG_ACTION_VALID);
1353
1354				ctlfedata(softc, io, &flags, &data_ptr,
1355				    &dxfer_len, &csio->sglist_cnt);
1356
1357				if (((flags & CAM_SEND_STATUS) == 0)
1358				 && (dxfer_len == 0)) {
1359					printf("%s: tag %04x no status or "
1360					       "len cdb = %02x\n", __func__,
1361					       atio->tag_id,
1362					       atio_cdb_ptr(atio)[0]);
1363					printf("%s: tag %04x io status %#x\n",
1364					       __func__, atio->tag_id,
1365					       io->io_hdr.status);
1366				}
1367
1368				cam_fill_ctio(csio,
1369					      /*retries*/ 2,
1370					      ctlfedone,
1371					      flags,
1372					      (flags & CAM_TAG_ACTION_VALID) ?
1373					       MSG_SIMPLE_Q_TAG : 0,
1374					      atio->tag_id,
1375					      atio->init_id,
1376					      0,
1377					      /*data_ptr*/ data_ptr,
1378					      /*dxfer_len*/ dxfer_len,
1379					      CTLFE_TIMEOUT * 1000);
1380
1381				csio->ccb_h.flags |= CAM_UNLOCKED;
1382				csio->resid = 0;
1383				csio->ccb_h.ccb_atio = atio;
1384				io->io_hdr.flags |= CTL_FLAG_DMA_INPROG;
1385				softc->ctios_sent++;
1386				mtx_unlock(mtx);
1387				xpt_action((union ccb *)csio);
1388			} else {
1389				/*
1390				 * Release the CTIO.  The ATIO will be sent back
1391				 * down to the SIM once we send status.
1392				 */
1393				xpt_release_ccb(done_ccb);
1394				mtx_unlock(mtx);
1395
1396				ctl_datamove_done(io, false);
1397			}
1398			return;
1399		}
1400		break;
1401	}
1402	case XPT_IMMEDIATE_NOTIFY: {
1403		union ctl_io *io;
1404		struct ccb_immediate_notify *inot;
1405		int send_ctl_io;
1406
1407		LIST_REMOVE(&done_ccb->ccb_h, periph_links.le);
1408		inot = &done_ccb->cin1;
1409		io = done_ccb->ccb_h.io_ptr;
1410		ctl_zero_io(io);
1411
1412		send_ctl_io = 1;
1413
1414		io->io_hdr.io_type = CTL_IO_TASK;
1415		PRIV_CCB(io) = done_ccb;
1416		inot->ccb_h.io_ptr = io;
1417		io->io_hdr.nexus.initid = inot->initiator_id;
1418		io->io_hdr.nexus.targ_port = bus_softc->port.targ_port;
1419		if (bus_softc->hba_misc & PIM_EXTLUNS) {
1420			io->io_hdr.nexus.targ_lun = ctl_decode_lun(
1421			    CAM_EXTLUN_BYTE_SWIZZLE(inot->ccb_h.target_lun));
1422		} else {
1423			io->io_hdr.nexus.targ_lun = inot->ccb_h.target_lun;
1424		}
1425		/* XXX KDM should this be the tag_id? */
1426		io->taskio.tag_num = inot->seq_id;
1427
1428		status = inot->ccb_h.status & CAM_STATUS_MASK;
1429		switch (status) {
1430		case CAM_SCSI_BUS_RESET:
1431			io->taskio.task_action = CTL_TASK_BUS_RESET;
1432			break;
1433		case CAM_BDR_SENT:
1434			io->taskio.task_action = CTL_TASK_TARGET_RESET;
1435			break;
1436		case CAM_MESSAGE_RECV:
1437			switch (inot->arg) {
1438			case MSG_ABORT_TASK_SET:
1439				io->taskio.task_action =
1440				    CTL_TASK_ABORT_TASK_SET;
1441				break;
1442			case MSG_TARGET_RESET:
1443				io->taskio.task_action = CTL_TASK_TARGET_RESET;
1444				break;
1445			case MSG_ABORT_TASK:
1446				io->taskio.task_action = CTL_TASK_ABORT_TASK;
1447				break;
1448			case MSG_LOGICAL_UNIT_RESET:
1449				io->taskio.task_action = CTL_TASK_LUN_RESET;
1450				break;
1451			case MSG_CLEAR_TASK_SET:
1452				io->taskio.task_action =
1453				    CTL_TASK_CLEAR_TASK_SET;
1454				break;
1455			case MSG_CLEAR_ACA:
1456				io->taskio.task_action = CTL_TASK_CLEAR_ACA;
1457				break;
1458			case MSG_QUERY_TASK:
1459				io->taskio.task_action = CTL_TASK_QUERY_TASK;
1460				break;
1461			case MSG_QUERY_TASK_SET:
1462				io->taskio.task_action =
1463				    CTL_TASK_QUERY_TASK_SET;
1464				break;
1465			case MSG_QUERY_ASYNC_EVENT:
1466				io->taskio.task_action =
1467				    CTL_TASK_QUERY_ASYNC_EVENT;
1468				break;
1469			case MSG_NOOP:
1470				send_ctl_io = 0;
1471				break;
1472			default:
1473				xpt_print(periph->path,
1474				    "%s: unsupported INOT message 0x%x\n",
1475				    __func__, inot->arg);
1476				send_ctl_io = 0;
1477				break;
1478			}
1479			break;
1480		default:
1481			xpt_print(periph->path,
1482			    "%s: unsupported INOT status 0x%x\n",
1483			    __func__, status);
1484			/* FALLTHROUGH */
1485		case CAM_REQ_ABORTED:
1486		case CAM_REQ_INVALID:
1487		case CAM_DEV_NOT_THERE:
1488		case CAM_PROVIDE_FAIL:
1489			ctlfe_free_ccb(periph, done_ccb);
1490			goto out;
1491		}
1492		mtx_unlock(mtx);
1493		if (send_ctl_io != 0) {
1494			ctl_queue(io);
1495		} else {
1496			done_ccb->ccb_h.status = CAM_REQ_INPROG;
1497			done_ccb->ccb_h.func_code = XPT_NOTIFY_ACKNOWLEDGE;
1498			xpt_action(done_ccb);
1499		}
1500		return;
1501	}
1502	case XPT_NOTIFY_ACKNOWLEDGE:
1503		/* Queue this back down to the SIM as an immediate notify. */
1504		done_ccb->ccb_h.status = CAM_REQ_INPROG;
1505		done_ccb->ccb_h.func_code = XPT_IMMEDIATE_NOTIFY;
1506		ctlfe_requeue_ccb(periph, done_ccb, /* unlock */1);
1507		return;
1508	case XPT_SET_SIM_KNOB:
1509	case XPT_GET_SIM_KNOB:
1510	case XPT_GET_SIM_KNOB_OLD:
1511		break;
1512	default:
1513		panic("%s: unexpected CCB type %#x", __func__,
1514		      done_ccb->ccb_h.func_code);
1515		break;
1516	}
1517
1518out:
1519	mtx_unlock(mtx);
1520}
1521
1522static void
1523ctlfe_onoffline(void *arg, int online)
1524{
1525	struct ctlfe_softc *bus_softc = arg;
1526	union ccb *ccb;
1527	cam_status status;
1528	struct cam_path *path;
1529	int set_wwnn = 0;
1530
1531	status = xpt_create_path(&path, /*periph*/ NULL, bus_softc->path_id,
1532	    CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD);
1533	if (status != CAM_REQ_CMP) {
1534		printf("%s: unable to create path!\n", __func__);
1535		return;
1536	}
1537	ccb = xpt_alloc_ccb();
1538	xpt_setup_ccb(&ccb->ccb_h, path, CAM_PRIORITY_NONE);
1539	ccb->ccb_h.func_code = XPT_GET_SIM_KNOB;
1540	xpt_action(ccb);
1541
1542	/* Check whether we should change WWNs. */
1543	if (online != 0) {
1544		if ((ccb->knob.xport_specific.valid & KNOB_VALID_ADDRESS) != 0){
1545			printf("%s: %s current WWNN %#jx\n", __func__,
1546			       bus_softc->port_name,
1547			       ccb->knob.xport_specific.fc.wwnn);
1548			printf("%s: %s current WWPN %#jx\n", __func__,
1549			       bus_softc->port_name,
1550			       ccb->knob.xport_specific.fc.wwpn);
1551
1552			/*
1553			 * If the user has specified a WWNN/WWPN, send them
1554			 * down to the SIM.  Otherwise, record what the SIM
1555			 * has reported.
1556			 */
1557			if (bus_softc->port.wwnn != 0 && bus_softc->port.wwnn
1558			    != ccb->knob.xport_specific.fc.wwnn) {
1559				ccb->knob.xport_specific.fc.wwnn =
1560				    bus_softc->port.wwnn;
1561				set_wwnn = 1;
1562			} else {
1563				ctl_port_set_wwns(&bus_softc->port,
1564				    true, ccb->knob.xport_specific.fc.wwnn,
1565				    false, 0);
1566			}
1567			if (bus_softc->port.wwpn != 0 && bus_softc->port.wwpn
1568			     != ccb->knob.xport_specific.fc.wwpn) {
1569				ccb->knob.xport_specific.fc.wwpn =
1570				    bus_softc->port.wwpn;
1571				set_wwnn = 1;
1572			} else {
1573				ctl_port_set_wwns(&bus_softc->port,
1574				    false, 0,
1575				    true, ccb->knob.xport_specific.fc.wwpn);
1576			}
1577		} else {
1578			printf("%s: %s has no valid WWNN/WWPN\n", __func__,
1579			       bus_softc->port_name);
1580			if (bus_softc->port.wwnn != 0) {
1581				ccb->knob.xport_specific.fc.wwnn =
1582				    bus_softc->port.wwnn;
1583				set_wwnn = 1;
1584			}
1585			if (bus_softc->port.wwpn != 0) {
1586				ccb->knob.xport_specific.fc.wwpn =
1587				    bus_softc->port.wwpn;
1588				set_wwnn = 1;
1589			}
1590		}
1591	}
1592	if (set_wwnn) {
1593		ccb->ccb_h.func_code = XPT_SET_SIM_KNOB;
1594		ccb->knob.xport_specific.valid = KNOB_VALID_ADDRESS;
1595		xpt_action(ccb);
1596		if ((ccb->ccb_h.status & CAM_STATUS_MASK) != CAM_REQ_CMP) {
1597			printf("%s: %s (path id %d) failed set WWNs: %#x\n",
1598			    __func__, bus_softc->port_name, bus_softc->path_id,
1599			    ccb->ccb_h.status);
1600		} else {
1601			printf("%s: %s new WWNN %#jx\n", __func__,
1602			       bus_softc->port_name,
1603			       ccb->knob.xport_specific.fc.wwnn);
1604			printf("%s: %s new WWPN %#jx\n", __func__,
1605			       bus_softc->port_name,
1606			       ccb->knob.xport_specific.fc.wwpn);
1607		}
1608	}
1609
1610	/* Check whether we should change role. */
1611	if ((ccb->knob.xport_specific.valid & KNOB_VALID_ROLE) == 0 ||
1612	    ((online != 0) ^
1613	    ((ccb->knob.xport_specific.fc.role & KNOB_ROLE_TARGET) != 0)) != 0) {
1614		ccb->ccb_h.func_code = XPT_SET_SIM_KNOB;
1615		ccb->knob.xport_specific.valid = KNOB_VALID_ROLE;
1616		if (online)
1617			ccb->knob.xport_specific.fc.role |= KNOB_ROLE_TARGET;
1618		else
1619			ccb->knob.xport_specific.fc.role &= ~KNOB_ROLE_TARGET;
1620		xpt_action(ccb);
1621		if ((ccb->ccb_h.status & CAM_STATUS_MASK) != CAM_REQ_CMP) {
1622			printf("%s: %s (path id %d) failed %s target role: %#x\n",
1623			    __func__, bus_softc->port_name, bus_softc->path_id,
1624			    online ? "enable" : "disable", ccb->ccb_h.status);
1625		} else {
1626			printf("%s: %s (path id %d) target role %s succeeded\n",
1627			    __func__, bus_softc->port_name, bus_softc->path_id,
1628			    online ? "enable" : "disable");
1629		}
1630	}
1631
1632	xpt_free_path(path);
1633	xpt_free_ccb(ccb);
1634}
1635
1636static void
1637ctlfe_online(void *arg)
1638{
1639	struct ctlfe_softc *bus_softc;
1640	struct cam_path *path;
1641	cam_status status;
1642	struct ctlfe_lun_softc *lun_softc;
1643	struct cam_periph *periph;
1644
1645	bus_softc = (struct ctlfe_softc *)arg;
1646
1647	/*
1648	 * Create the wildcard LUN before bringing the port online.
1649	 */
1650	status = xpt_create_path(&path, /*periph*/ NULL,
1651				 bus_softc->path_id, CAM_TARGET_WILDCARD,
1652				 CAM_LUN_WILDCARD);
1653	if (status != CAM_REQ_CMP) {
1654		printf("%s: unable to create path for wildcard periph\n",
1655				__func__);
1656		return;
1657	}
1658
1659	lun_softc = malloc(sizeof(*lun_softc), M_CTLFE, M_WAITOK | M_ZERO);
1660
1661	xpt_path_lock(path);
1662	periph = cam_periph_find(path, "ctl");
1663	if (periph != NULL) {
1664		/* We've already got a periph, no need to alloc a new one. */
1665		xpt_path_unlock(path);
1666		xpt_free_path(path);
1667		free(lun_softc, M_CTLFE);
1668		return;
1669	}
1670	lun_softc->parent_softc = bus_softc;
1671	lun_softc->flags |= CTLFE_LUN_WILDCARD;
1672
1673	status = cam_periph_alloc(ctlferegister,
1674				  ctlfeoninvalidate,
1675				  ctlfecleanup,
1676				  ctlfestart,
1677				  "ctl",
1678				  CAM_PERIPH_BIO,
1679				  path,
1680				  ctlfeasync,
1681				  0,
1682				  lun_softc);
1683
1684	if ((status & CAM_STATUS_MASK) != CAM_REQ_CMP) {
1685		const struct cam_status_entry *entry;
1686
1687		entry = cam_fetch_status_entry(status);
1688		printf("%s: CAM error %s (%#x) returned from "
1689		       "cam_periph_alloc()\n", __func__, (entry != NULL) ?
1690		       entry->status_text : "Unknown", status);
1691		free(lun_softc, M_CTLFE);
1692	}
1693
1694	xpt_path_unlock(path);
1695	ctlfe_onoffline(arg, /*online*/ 1);
1696	xpt_free_path(path);
1697}
1698
1699static void
1700ctlfe_offline(void *arg)
1701{
1702	struct ctlfe_softc *bus_softc;
1703	struct cam_path *path;
1704	cam_status status;
1705	struct cam_periph *periph;
1706
1707	bus_softc = (struct ctlfe_softc *)arg;
1708
1709	ctlfe_onoffline(arg, /*online*/ 0);
1710
1711	/*
1712	 * Disable the wildcard LUN for this port now that we have taken
1713	 * the port offline.
1714	 */
1715	status = xpt_create_path(&path, /*periph*/ NULL,
1716				 bus_softc->path_id, CAM_TARGET_WILDCARD,
1717				 CAM_LUN_WILDCARD);
1718	if (status != CAM_REQ_CMP) {
1719		printf("%s: unable to create path for wildcard periph\n",
1720		       __func__);
1721		return;
1722	}
1723	xpt_path_lock(path);
1724	if ((periph = cam_periph_find(path, "ctl")) != NULL)
1725		cam_periph_invalidate(periph);
1726	xpt_path_unlock(path);
1727	xpt_free_path(path);
1728}
1729
1730/*
1731 * This will get called to enable a LUN on every bus that is attached to
1732 * CTL.  So we only need to create a path/periph for this particular bus.
1733 */
1734static int
1735ctlfe_lun_enable(void *arg, int lun_id)
1736{
1737	struct ctlfe_softc *bus_softc;
1738	struct ctlfe_lun_softc *softc;
1739	struct cam_path *path;
1740	struct cam_periph *periph;
1741	cam_status status;
1742
1743	bus_softc = (struct ctlfe_softc *)arg;
1744	if (bus_softc->hba_misc & PIM_EXTLUNS)
1745		lun_id = CAM_EXTLUN_BYTE_SWIZZLE(ctl_encode_lun(lun_id));
1746
1747	status = xpt_create_path(&path, /*periph*/ NULL,
1748	    bus_softc->path_id, bus_softc->target_id, lun_id);
1749	/* XXX KDM need some way to return status to CTL here? */
1750	if (status != CAM_REQ_CMP) {
1751		printf("%s: could not create path, status %#x\n", __func__,
1752		       status);
1753		return (1);
1754	}
1755
1756	softc = malloc(sizeof(*softc), M_CTLFE, M_WAITOK | M_ZERO);
1757	xpt_path_lock(path);
1758	periph = cam_periph_find(path, "ctl");
1759	if (periph != NULL) {
1760		/* We've already got a periph, no need to alloc a new one. */
1761		xpt_path_unlock(path);
1762		xpt_free_path(path);
1763		free(softc, M_CTLFE);
1764		return (0);
1765	}
1766	softc->parent_softc = bus_softc;
1767
1768	status = cam_periph_alloc(ctlferegister,
1769				  ctlfeoninvalidate,
1770				  ctlfecleanup,
1771				  ctlfestart,
1772				  "ctl",
1773				  CAM_PERIPH_BIO,
1774				  path,
1775				  ctlfeasync,
1776				  0,
1777				  softc);
1778
1779	if ((status & CAM_STATUS_MASK) != CAM_REQ_CMP) {
1780		const struct cam_status_entry *entry;
1781
1782		entry = cam_fetch_status_entry(status);
1783		printf("%s: CAM error %s (%#x) returned from "
1784		       "cam_periph_alloc()\n", __func__, (entry != NULL) ?
1785		       entry->status_text : "Unknown", status);
1786		free(softc, M_CTLFE);
1787	}
1788
1789	xpt_path_unlock(path);
1790	xpt_free_path(path);
1791	return (0);
1792}
1793
1794/*
1795 * This will get called when the user removes a LUN to disable that LUN
1796 * on every bus that is attached to CTL.
1797 */
1798static int
1799ctlfe_lun_disable(void *arg, int lun_id)
1800{
1801	struct ctlfe_softc *softc;
1802	struct ctlfe_lun_softc *lun_softc;
1803
1804	softc = (struct ctlfe_softc *)arg;
1805	if (softc->hba_misc & PIM_EXTLUNS)
1806		lun_id = CAM_EXTLUN_BYTE_SWIZZLE(ctl_encode_lun(lun_id));
1807
1808	mtx_lock(&softc->lun_softc_mtx);
1809	STAILQ_FOREACH(lun_softc, &softc->lun_softc_list, links) {
1810		struct cam_path *path;
1811
1812		path = lun_softc->periph->path;
1813
1814		if ((xpt_path_target_id(path) == softc->target_id)
1815		 && (xpt_path_lun_id(path) == lun_id)) {
1816			break;
1817		}
1818	}
1819	if (lun_softc == NULL) {
1820		mtx_unlock(&softc->lun_softc_mtx);
1821		printf("%s: can't find lun %d\n", __func__, lun_id);
1822		return (1);
1823	}
1824	cam_periph_acquire(lun_softc->periph);
1825	mtx_unlock(&softc->lun_softc_mtx);
1826
1827	cam_periph_lock(lun_softc->periph);
1828	cam_periph_invalidate(lun_softc->periph);
1829	cam_periph_unlock(lun_softc->periph);
1830	cam_periph_release(lun_softc->periph);
1831	return (0);
1832}
1833
1834static void
1835ctlfe_dump_sim(struct cam_sim *sim)
1836{
1837
1838	printf("%s%d: max dev openings: %d, max tagged dev openings: %d\n",
1839	    sim->sim_name, sim->unit_number, sim->max_dev_openings,
1840	    sim->max_tagged_dev_openings);
1841}
1842
1843/*
1844 * Assumes that the SIM lock is held.
1845 */
1846static void
1847ctlfe_dump_queue(struct ctlfe_lun_softc *softc)
1848{
1849	struct cam_periph *periph = softc->periph;
1850	struct ccb_hdr *hdr;
1851	struct ccb_getdevstats cgds;
1852	int num_items;
1853
1854	memset(&cgds, 0, sizeof(cgds));
1855	xpt_setup_ccb(&cgds.ccb_h, periph->path, CAM_PRIORITY_NORMAL);
1856	cgds.ccb_h.func_code = XPT_GDEV_STATS;
1857	xpt_action((union ccb *)&cgds);
1858	if ((cgds.ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_CMP) {
1859		xpt_print(periph->path, "devq: openings %d, active %d, "
1860		    "allocated %d, queued %d, held %d\n",
1861		    cgds.dev_openings, cgds.dev_active, cgds.allocated,
1862		    cgds.queued, cgds.held);
1863	}
1864
1865	num_items = 0;
1866
1867	STAILQ_FOREACH(hdr, &softc->work_queue, periph_links.stqe) {
1868		union ctl_io *io = hdr->io_ptr;
1869
1870		num_items++;
1871
1872		/*
1873		 * Only regular SCSI I/O is put on the work
1874		 * queue, so we can print sense here.  There may be no
1875		 * sense if it's no the queue for a DMA, but this serves to
1876		 * print out the CCB as well.
1877		 *
1878		 * XXX KDM switch this over to scsi_sense_print() when
1879		 * CTL is merged in with CAM.
1880		 */
1881		ctl_io_error_print(io, NULL);
1882
1883		/*
1884		 * Print DMA status if we are DMA_QUEUED.
1885		 */
1886		if (io->io_hdr.flags & CTL_FLAG_DMA_QUEUED) {
1887			xpt_print(periph->path,
1888			    "Total %u, Current %u, Resid %u\n",
1889			    io->scsiio.kern_total_len,
1890			    io->scsiio.kern_data_len,
1891			    io->scsiio.kern_data_resid);
1892		}
1893	}
1894
1895	xpt_print(periph->path, "%d requests waiting for CCBs\n", num_items);
1896	xpt_print(periph->path, "%d CTIOs outstanding\n", softc->ctios_sent);
1897}
1898
1899/*
1900 * Datamove/done routine called by CTL.  Put ourselves on the queue to
1901 * receive a CCB from CAM so we can queue the continue I/O request down
1902 * to the adapter.
1903 */
1904static void
1905ctlfe_datamove(union ctl_io *io)
1906{
1907	union ccb *ccb;
1908	struct cam_periph *periph;
1909	struct ctlfe_lun_softc *softc;
1910
1911	CTL_IO_ASSERT(io, SCSI);
1912
1913	io->scsiio.ext_data_filled = 0;
1914	ccb = PRIV_CCB(io);
1915	periph = xpt_path_periph(ccb->ccb_h.path);
1916	cam_periph_lock(periph);
1917	softc = (struct ctlfe_lun_softc *)periph->softc;
1918	io->io_hdr.flags |= CTL_FLAG_DMA_QUEUED;
1919	if ((io->io_hdr.status & CTL_STATUS_MASK) != CTL_STATUS_NONE)
1920		io->io_hdr.flags |= CTL_FLAG_STATUS_QUEUED;
1921	STAILQ_INSERT_TAIL(&softc->work_queue, &ccb->ccb_h,
1922			  periph_links.stqe);
1923	xpt_schedule(periph, CAM_PRIORITY_NORMAL);
1924	cam_periph_unlock(periph);
1925}
1926
1927static void
1928ctlfe_done(union ctl_io *io)
1929{
1930	union ccb *ccb;
1931	struct cam_periph *periph;
1932	struct ctlfe_lun_softc *softc;
1933
1934	ccb = PRIV_CCB(io);
1935	periph = xpt_path_periph(ccb->ccb_h.path);
1936	cam_periph_lock(periph);
1937	softc = (struct ctlfe_lun_softc *)periph->softc;
1938
1939	if (io->io_hdr.io_type == CTL_IO_TASK) {
1940		/*
1941		 * Send the notify acknowledge down to the SIM, to let it
1942		 * know we processed the task management command.
1943		 */
1944		ccb->ccb_h.status = CAM_REQ_INPROG;
1945		ccb->ccb_h.func_code = XPT_NOTIFY_ACKNOWLEDGE;
1946		switch (io->taskio.task_status) {
1947		case CTL_TASK_FUNCTION_COMPLETE:
1948			ccb->cna2.arg = CAM_RSP_TMF_COMPLETE;
1949			break;
1950		case CTL_TASK_FUNCTION_SUCCEEDED:
1951			ccb->cna2.arg = CAM_RSP_TMF_SUCCEEDED;
1952			ccb->ccb_h.flags |= CAM_SEND_STATUS;
1953			break;
1954		case CTL_TASK_FUNCTION_REJECTED:
1955			ccb->cna2.arg = CAM_RSP_TMF_REJECTED;
1956			ccb->ccb_h.flags |= CAM_SEND_STATUS;
1957			break;
1958		case CTL_TASK_LUN_DOES_NOT_EXIST:
1959			ccb->cna2.arg = CAM_RSP_TMF_INCORRECT_LUN;
1960			ccb->ccb_h.flags |= CAM_SEND_STATUS;
1961			break;
1962		case CTL_TASK_FUNCTION_NOT_SUPPORTED:
1963			ccb->cna2.arg = CAM_RSP_TMF_FAILED;
1964			ccb->ccb_h.flags |= CAM_SEND_STATUS;
1965			break;
1966		}
1967		ccb->cna2.arg |= scsi_3btoul(io->taskio.task_resp) << 8;
1968		xpt_action(ccb);
1969	} else if (io->io_hdr.flags & CTL_FLAG_STATUS_SENT) {
1970		ctlfe_requeue_ccb(periph, ccb, /* unlock */1);
1971		return;
1972	} else {
1973		io->io_hdr.flags |= CTL_FLAG_STATUS_QUEUED;
1974		STAILQ_INSERT_TAIL(&softc->work_queue, &ccb->ccb_h,
1975				  periph_links.stqe);
1976		xpt_schedule(periph, CAM_PRIORITY_NORMAL);
1977	}
1978
1979	cam_periph_unlock(periph);
1980}
1981
1982static void
1983ctlfe_dump(void)
1984{
1985	struct ctlfe_softc *bus_softc;
1986	struct ctlfe_lun_softc *lun_softc;
1987
1988	STAILQ_FOREACH(bus_softc, &ctlfe_softc_list, links) {
1989		ctlfe_dump_sim(bus_softc->sim);
1990		STAILQ_FOREACH(lun_softc, &bus_softc->lun_softc_list, links)
1991			ctlfe_dump_queue(lun_softc);
1992	}
1993}
1994