root/sys/dev/usb/if_ure.c
/*      $OpenBSD: if_ure.c,v 1.37 2025/06/04 00:06:17 jsg Exp $ */
/*-
 * Copyright (c) 2015, 2016, 2019 Kevin Lo <kevlo@openbsd.org>
 * Copyright (c) 2020 Jonathon Fletcher <jonathon.fletcher@gmail.com>
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 */

#include "bpfilter.h"
#include "vlan.h"

#include <sys/param.h>
#include <sys/systm.h>
#include <sys/sockio.h>
#include <sys/rwlock.h>
#include <sys/mbuf.h>
#include <sys/device.h>

#include <machine/bus.h>

#include <net/if.h>
#include <net/if_media.h>

#if NBPFILTER > 0
#include <net/bpf.h>
#endif

#include <netinet/in.h>
#include <netinet/if_ether.h>

#include <dev/mii/mii.h>
#include <dev/mii/miivar.h>

#include <dev/usb/usb.h>
#include <dev/usb/usbdi.h>
#include <dev/usb/usbdi_util.h>
#include <dev/usb/usbdivar.h>
#include <dev/usb/usbdevs.h>

#include <dev/ic/rtl81x9reg.h>
#include <dev/usb/if_urereg.h>

#ifdef URE_DEBUG
#define DPRINTF(x)      do { if (uredebug) printf x; } while (0)
#define DPRINTFN(n,x)   do { if (uredebug >= (n)) printf x; } while (0)
int     uredebug = 0;
#else
#define DPRINTF(x)
#define DPRINTFN(n,x)
#endif

const struct usb_devno ure_devs[] = {
        { USB_VENDOR_ASUS, USB_PRODUCT_ASUS_RTL8156 },
        { USB_VENDOR_BELKIN, USB_PRODUCT_BELKIN_RTL8152B },
        { USB_VENDOR_BELKIN, USB_PRODUCT_BELKIN_RTL8153 },
        { USB_VENDOR_CISCOLINKSYS, USB_PRODUCT_CISCOLINKSYS_USB3GIGV1 },
        { USB_VENDOR_CLEVO, USB_PRODUCT_CLEVO_RTL8153B },
        { USB_VENDOR_CLUB3D, USB_PRODUCT_CLUB3D_RTL8153 },
        { USB_VENDOR_DLINK, USB_PRODUCT_DLINK_RTL8153_1 },
        { USB_VENDOR_DLINK, USB_PRODUCT_DLINK_RTL8153_2 },
        { USB_VENDOR_DYNABOOK, USB_PRODUCT_DYNABOOK_RTL8153B_1 },
        { USB_VENDOR_DYNABOOK, USB_PRODUCT_DYNABOOK_RTL8153B_2 },
        { USB_VENDOR_ELECOM, USB_PRODUCT_ELECOM_RTL8153B },
        { USB_VENDOR_ELECOM, USB_PRODUCT_ELECOM_RTL8156B },
        { USB_VENDOR_IOI, USB_PRODUCT_IOI_RTL8153 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_DOCK_ETHERNET },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_ONELINK },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_ONELINKPLUS },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_ONELINKPRO },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_1 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_2 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_3 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_4 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_5 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_6 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_7 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_8 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153B_9 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153_1 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153_2 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_RTL8153_3 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_TABLETDOCK },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_TB3DOCK },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_TB3DOCKGEN2 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_TB3GFXDOCK },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_USBCDOCKGEN2 },
        { USB_VENDOR_LENOVO, USB_PRODUCT_LENOVO_WIGIGDOCK },
        { USB_VENDOR_LG, USB_PRODUCT_LG_RTL8153 },
        { USB_VENDOR_LG, USB_PRODUCT_LG_RTL8153B },
        { USB_VENDOR_LUXSHARE, USB_PRODUCT_LUXSHARE_RTL8153 },
        { USB_VENDOR_MICROSOFT, USB_PRODUCT_MICROSOFT_DOCKETH },
        { USB_VENDOR_MICROSOFT, USB_PRODUCT_MICROSOFT_DOCKETH2 },
        { USB_VENDOR_MICROSOFT, USB_PRODUCT_MICROSOFT_SURFETH },
        { USB_VENDOR_MICROSOFT, USB_PRODUCT_MICROSOFT_WINDEVETH },
        { USB_VENDOR_NVIDIA, USB_PRODUCT_NVIDIA_TEGRAETH },
        { USB_VENDOR_PIONEERDJ, USB_PRODUCT_PIONEERDJ_RTL8152B },
        { USB_VENDOR_PIONEERDJ, USB_PRODUCT_PIONEERDJ_RTL8153B },
        { USB_VENDOR_REALTEK, USB_PRODUCT_REALTEK_RTL8152 },
        { USB_VENDOR_REALTEK, USB_PRODUCT_REALTEK_RTL8152B },
        { USB_VENDOR_REALTEK, USB_PRODUCT_REALTEK_RTL8153 },
        { USB_VENDOR_REALTEK, USB_PRODUCT_REALTEK_RTL8156 },
        { USB_VENDOR_REALTEK, USB_PRODUCT_REALTEK_RTL8157 },
        { USB_VENDOR_SAMSUNG2, USB_PRODUCT_SAMSUNG2_RTL8153 },
        { USB_VENDOR_TOSHIBA, USB_PRODUCT_TOSHIBA_RTL8153B },
        { USB_VENDOR_TPLINK, USB_PRODUCT_TPLINK_EU300 },
        { USB_VENDOR_TPLINK, USB_PRODUCT_TPLINK_RTL8152B_1 },
        { USB_VENDOR_TPLINK, USB_PRODUCT_TPLINK_RTL8152B_2 },
        { USB_VENDOR_TRENDNET, USB_PRODUCT_TRENDNET_RTL8156 },
        { USB_VENDOR_TTL, USB_PRODUCT_TTL_RTL8153 },
        { USB_VENDOR_TWINHEAD, USB_PRODUCT_TWINHEAD_RTL8153B },
        { USB_VENDOR_XIAOMI, USB_PRODUCT_XIAOMI_RTL8152B },
};

int     ure_match(struct device *, void *, void *);
void    ure_attach(struct device *, struct device *, void *);
int     ure_detach(struct device *, int);

struct cfdriver ure_cd = {
        NULL, "ure", DV_IFNET
};

const struct cfattach ure_ca = {
        sizeof(struct ure_softc), ure_match, ure_attach, ure_detach
};

int             ure_ctl(struct ure_softc *, uint8_t, uint16_t, uint16_t,
                    void *, int);
int             ure_read_mem(struct ure_softc *, uint16_t, uint16_t, void *,
                    int);
int             ure_write_mem(struct ure_softc *, uint16_t, uint16_t, void *,
                    int);
uint8_t         ure_read_1(struct ure_softc *, uint16_t, uint16_t);
uint16_t        ure_read_2(struct ure_softc *, uint16_t, uint16_t);
uint32_t        ure_read_4(struct ure_softc *, uint16_t, uint16_t);
int             ure_write_1(struct ure_softc *, uint16_t, uint16_t, uint32_t);
int             ure_write_2(struct ure_softc *, uint16_t, uint16_t, uint32_t);
int             ure_write_4(struct ure_softc *, uint16_t, uint16_t, uint32_t);
uint16_t        ure_ocp_reg_read(struct ure_softc *, uint16_t);
void            ure_ocp_reg_write(struct ure_softc *, uint16_t, uint16_t);
uint16_t        ure_rtl8157_ocp_reg_read(struct ure_softc *, uint16_t);
void            ure_rtl8157_ocp_reg_write(struct ure_softc *, uint16_t,
                    uint16_t);
uint32_t        ure_ocp_cmd_read(struct ure_softc *, uint16_t, int);
void            ure_ocp_cmd_write(struct ure_softc *, uint16_t, int, uint32_t);

void            ure_init(void *);
void            ure_stop(struct ure_softc *);
void            ure_start(struct ifnet *);
void            ure_reset(struct ure_softc *);
void            ure_watchdog(struct ifnet *);

void            ure_miibus_statchg(struct device *);
int             ure_miibus_readreg(struct device *, int, int);
void            ure_miibus_writereg(struct device *, int, int, int);
void            ure_lock_mii(struct ure_softc *);
void            ure_unlock_mii(struct ure_softc *);

void            ure_decap(struct ure_softc *, struct ure_chain *, uint32_t);
int             ure_encap_txpkt(struct ure_softc *, struct mbuf *, char *,
                    uint32_t);
int             ure_encap_xfer(struct ifnet *, struct ure_softc *,
                    struct ure_chain *);
void            ure_rxcsum(struct ure_rxpkt *, struct mbuf *);
void            ure_rxcsum_v2(struct ure_rxpkt_v2 *, struct mbuf *);
void            ure_rxeof(struct usbd_xfer *, void *, usbd_status);
void            ure_txeof(struct usbd_xfer *, void *, usbd_status);
int             ure_xfer_list_init(struct ure_softc *, struct ure_chain *,
                    uint32_t, int);
void            ure_xfer_list_free(struct ure_softc *, struct ure_chain *, int);

void            ure_tick_task(void *);
void            ure_tick(void *);

void            ure_ifmedia_init(struct ifnet *);
int             ure_ifmedia_upd(struct ifnet *);
void            ure_ifmedia_sts(struct ifnet *, struct ifmediareq *);
void            ure_add_media_types(struct ure_softc *);
void            ure_link_state(struct ure_softc *);
int             ure_get_link_status(struct ure_softc *);
void            ure_iff(struct ure_softc *);
void            ure_rxvlan(struct ure_softc *);
int             ure_ioctl(struct ifnet *, u_long, caddr_t);
void            ure_rtl8152_init(struct ure_softc *);
int             ure_rtl8153_init(struct ure_softc *);
int             ure_rtl8153b_init(struct ure_softc *);
int             ure_rtl8157_init(struct ure_softc *);
int             ure_rtl8152_nic_reset(struct ure_softc *);
int             ure_rtl8153_nic_reset(struct ure_softc *);
uint16_t        ure_rtl8153_phy_status(struct ure_softc *, int);
int             ure_wait_for_flash(struct ure_softc *);
void            ure_reset_bmu(struct ure_softc *);
void            ure_disable_teredo(struct ure_softc *);

#define URE_SETBIT_1(sc, reg, index, x)                                 \
        ure_write_1(sc, reg, index, ure_read_1(sc, reg, index) | (x))
#define URE_SETBIT_2(sc, reg, index, x)                                 \
        ure_write_2(sc, reg, index, ure_read_2(sc, reg, index) | (x))
#define URE_SETBIT_4(sc, reg, index, x)                                 \
        ure_write_4(sc, reg, index, ure_read_4(sc, reg, index) | (x))

#define URE_CLRBIT_1(sc, reg, index, x)                                 \
        ure_write_1(sc, reg, index, ure_read_1(sc, reg, index) & ~(x))
#define URE_CLRBIT_2(sc, reg, index, x)                                 \
        ure_write_2(sc, reg, index, ure_read_2(sc, reg, index) & ~(x))
#define URE_CLRBIT_4(sc, reg, index, x)                                 \
        ure_write_4(sc, reg, index, ure_read_4(sc, reg, index) & ~(x))

#define URE_OCP_CMD_SETBIT(sc, addr, type, x)                           \
        ure_ocp_cmd_write(sc, addr, type,                               \
            ure_ocp_cmd_read(sc, addr, type) | (x))

#define URE_OCP_CMD_CLRBIT(sc, addr, type, x)                           \
        ure_ocp_cmd_write(sc, addr, type,                               \
            ure_ocp_cmd_read(sc, addr, type) & ~(x))

int
ure_ctl(struct ure_softc *sc, uint8_t rw, uint16_t val, uint16_t index,
    void *buf, int len)
{
        usb_device_request_t    req;
        usbd_status             err;

        if (usbd_is_dying(sc->ure_udev))
                return 0;

        if (rw == URE_CTL_WRITE)
                req.bmRequestType = UT_WRITE_VENDOR_DEVICE;
        else
                req.bmRequestType = UT_READ_VENDOR_DEVICE;
        req.bRequest = UR_SET_ADDRESS;
        USETW(req.wValue, val);
        USETW(req.wIndex, index);
        USETW(req.wLength, len);

        DPRINTFN(5, ("ure_ctl: rw %d, val 0x%04hu, index 0x%04hu, len %d\n",
            rw, val, index, len));
        err = usbd_do_request(sc->ure_udev, &req, buf);
        if (err) {
                DPRINTF(("ure_ctl: error %d\n", err));
                return -1;
        }

        return 0;
}

int
ure_read_mem(struct ure_softc *sc, uint16_t addr, uint16_t index,
    void *buf, int len)
{
        return (ure_ctl(sc, URE_CTL_READ, addr, index, buf, len));
}

int
ure_write_mem(struct ure_softc *sc, uint16_t addr, uint16_t index,
    void *buf, int len)
{
        return (ure_ctl(sc, URE_CTL_WRITE, addr, index, buf, len));
}

uint8_t
ure_read_1(struct ure_softc *sc, uint16_t reg, uint16_t index)
{
        uint32_t        val;
        uint8_t         temp[4];
        uint8_t         shift;

        shift = (reg & 3) << 3;
        reg &= ~3;

        ure_read_mem(sc, reg, index, &temp, 4);
        val = UGETDW(temp);
        val >>= shift;

        return (val & 0xff);
}

uint16_t
ure_read_2(struct ure_softc *sc, uint16_t reg, uint16_t index)
{
        uint32_t        val;
        uint8_t         temp[4];
        uint8_t         shift;

        shift = (reg & 2) << 3;
        reg &= ~3;

        ure_read_mem(sc, reg, index, &temp, 4);
        val = UGETDW(temp);
        val >>= shift;

        return (val & 0xffff);
}

uint32_t
ure_read_4(struct ure_softc *sc, uint16_t reg, uint16_t index)
{
        uint8_t temp[4];

        ure_read_mem(sc, reg, index, &temp, 4);
        return (UGETDW(temp));
}

int
ure_write_1(struct ure_softc *sc, uint16_t reg, uint16_t index, uint32_t val)
{
        uint16_t        byen;
        uint8_t         temp[4];
        uint8_t         shift;

        byen = URE_BYTE_EN_BYTE;
        shift = reg & 3;
        val &= 0xff;

        if (reg & 3) {
                byen <<= shift;
                val <<= (shift << 3);
                reg &= ~3;
        }

        USETDW(temp, val);
        return (ure_write_mem(sc, reg, index | byen, &temp, 4));
}

int
ure_write_2(struct ure_softc *sc, uint16_t reg, uint16_t index, uint32_t val)
{
        uint16_t        byen;
        uint8_t         temp[4];
        uint8_t         shift;

        byen = URE_BYTE_EN_WORD;
        shift = reg & 2;
        val &= 0xffff;

        if (reg & 2) {
                byen <<= shift;
                val <<= (shift << 3);
                reg &= ~3;
        }

        USETDW(temp, val);
        return (ure_write_mem(sc, reg, index | byen, &temp, 4));
}

int
ure_write_4(struct ure_softc *sc, uint16_t reg, uint16_t index, uint32_t val)
{
        uint8_t temp[4];

        USETDW(temp, val);
        return (ure_write_mem(sc, reg, index | URE_BYTE_EN_DWORD, &temp, 4));
}

static inline uint16_t
ure_phy_read(struct ure_softc *sc, uint16_t addr)
{
        return sc->ure_phy_read(sc, addr);
}

static inline void
ure_phy_write(struct ure_softc *sc, uint16_t addr, uint16_t data)
{
        return sc->ure_phy_write(sc, addr, data);
}

uint16_t
ure_ocp_reg_read(struct ure_softc *sc, uint16_t addr)
{
        uint16_t        reg;

        ure_write_2(sc, URE_PLA_OCP_GPHY_BASE, URE_MCU_TYPE_PLA, addr & 0xf000);
        reg = (addr & 0x0fff) | 0xb000;

        return (ure_read_2(sc, reg, URE_MCU_TYPE_PLA));
}

void
ure_ocp_reg_write(struct ure_softc *sc, uint16_t addr, uint16_t data)
{
        uint16_t        reg;

        ure_write_2(sc, URE_PLA_OCP_GPHY_BASE, URE_MCU_TYPE_PLA, addr & 0xf000);
        reg = (addr & 0x0fff) | 0xb000;

        ure_write_2(sc, reg, URE_MCU_TYPE_PLA, data);
}

uint16_t
ure_rtl8157_ocp_reg_read(struct ure_softc *sc, uint16_t addr)
{
        int             i;

        for (i = 0; i < 10; i++) {
                if (!(ure_read_2(sc, URE_USB_TGPHY_CMD, URE_MCU_TYPE_USB) &
                    URE_TGPHY_CMD_BUSY))
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == 10) {
                printf("%s: PHY read timeout\n", sc->ure_dev.dv_xname);
                return (0xffff);
        }

        ure_write_2(sc, URE_USB_TGPHY_ADDR, URE_MCU_TYPE_USB, addr);
        ure_write_2(sc, URE_USB_TGPHY_CMD, URE_MCU_TYPE_USB,
            URE_TGPHY_CMD_BUSY);

        for (i = 0; i < 10; i++) {
                if (!(ure_read_2(sc, URE_USB_TGPHY_CMD, URE_MCU_TYPE_USB) &
                    URE_TGPHY_CMD_BUSY))
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == 10) {
                printf("%s: PHY read timeout\n", sc->ure_dev.dv_xname);
                return (0xffff);
        }

        return (ure_read_2(sc, URE_USB_TGPHY_DATA, URE_MCU_TYPE_USB));
}

void
ure_rtl8157_ocp_reg_write(struct ure_softc *sc, uint16_t addr, uint16_t data)
{
        int             i;

        ure_write_2(sc, URE_USB_TGPHY_DATA, URE_MCU_TYPE_USB, data);

        ure_write_2(sc, URE_USB_TGPHY_ADDR, URE_MCU_TYPE_USB, addr);
        ure_write_2(sc, URE_USB_TGPHY_CMD, URE_MCU_TYPE_USB,
            URE_TGPHY_CMD_BUSY | URE_TGPHY_CMD_WRITE);

        for (i = 0; i < 10; i++) {
                if (!(ure_read_2(sc, URE_USB_TGPHY_CMD, URE_MCU_TYPE_USB) &
                    URE_TGPHY_CMD_BUSY))
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == 10)
                printf("%s: PHY write timeout\n", sc->ure_dev.dv_xname);
}

uint32_t
ure_ocp_cmd_read(struct ure_softc *sc, uint16_t addr, int type)
{
        uint16_t        cmd;
        int             i;

        cmd = (type == URE_CMD_TYPE_BMU) ? URE_CMD_BMU : URE_CMD_IP;

        for (i = 0; i < 10; i++) {
                if (!(ure_read_2(sc, URE_USB_CMD, URE_MCU_TYPE_USB) &
                    URE_CMD_BUSY))
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == 10)
                printf("%s: timeout waiting for read command\n",
                    sc->ure_dev.dv_xname);

        ure_write_2(sc, URE_USB_CMD_ADDR, URE_MCU_TYPE_USB, addr);
        ure_write_2(sc, URE_USB_CMD, URE_MCU_TYPE_USB, cmd | URE_CMD_BUSY);

        for (i = 0; i < 10; i++) {
                if (!(ure_read_2(sc, URE_USB_CMD, URE_MCU_TYPE_USB) &
                    URE_CMD_BUSY))
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == 10)
                printf("%s: timeout waiting for read command\n",
                    sc->ure_dev.dv_xname);

        return (ure_read_4(sc, URE_USB_CMD_DATA, URE_MCU_TYPE_USB));
}

void
ure_ocp_cmd_write(struct ure_softc *sc, uint16_t addr, int type, uint32_t data)
{
        uint16_t        cmd;
        int             i;

        cmd = (type == URE_CMD_TYPE_BMU) ? URE_CMD_BMU : URE_CMD_IP;

        for (i = 0; i < 10; i++) {
                if (!(ure_read_2(sc, URE_USB_CMD, URE_MCU_TYPE_USB) &
                    URE_CMD_BUSY))
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == 10)
                printf("%s: timeout waiting for write command\n",
                    sc->ure_dev.dv_xname);

        ure_write_4(sc, URE_USB_CMD_DATA, URE_MCU_TYPE_USB, data);

        ure_write_2(sc, URE_USB_CMD_ADDR, URE_MCU_TYPE_USB, addr);
        ure_write_2(sc, URE_USB_CMD, URE_MCU_TYPE_USB,
            cmd | URE_CMD_BUSY | URE_CMD_WRITE);
}

int
ure_miibus_readreg(struct device *dev, int phy, int reg)
{
        struct ure_softc        *sc = (void *)dev;
        uint16_t                val;

        if (usbd_is_dying(sc->ure_udev))
                return 0;

        /* Let the rgephy driver read the URE_PLA_PHYSTATUS register. */
        if (reg == RL_GMEDIASTAT)
                return ure_read_1(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA);

        ure_lock_mii(sc);
        val = ure_phy_read(sc, URE_OCP_BASE_MII + reg * 2);
        ure_unlock_mii(sc);

        return val;     /* letoh16? */
}

void
ure_miibus_writereg(struct device *dev, int phy, int reg, int val)
{
        struct ure_softc        *sc = (void *)dev;

        ure_lock_mii(sc);
        ure_phy_write(sc, URE_OCP_BASE_MII + reg * 2, val);     /* htole16? */
        ure_unlock_mii(sc);
}

void
ure_miibus_statchg(struct device *dev)
{
        struct ure_softc        *sc = (void *)dev;
        struct mii_data         *mii = &sc->ure_mii;
        struct ifnet            *ifp = &sc->ure_ac.ac_if;

        if ((ifp->if_flags & IFF_RUNNING) == 0)
                return;

        sc->ure_flags &= ~URE_FLAG_LINK;
        if ((mii->mii_media_status & (IFM_ACTIVE | IFM_AVALID)) ==
            (IFM_ACTIVE | IFM_AVALID)) {
                switch (IFM_SUBTYPE(mii->mii_media_active)) {
                case IFM_10_T:
                case IFM_100_TX:
                        sc->ure_flags |= URE_FLAG_LINK;
                        break;
                case IFM_1000_T:
                        if ((sc->ure_flags & URE_FLAG_8152) != 0)
                                break;
                        sc->ure_flags |= URE_FLAG_LINK;
                        break;
                default:
                        break;
                }
        }

        /* Lost link, do nothing. */
        if ((sc->ure_flags & URE_FLAG_LINK) == 0)
                return;

        /*
         * After a link change the media settings are getting reset on the
         * hardware, and need to be re-initialized again for communication
         * to continue work.
         */
        ure_ifmedia_init(ifp);
}

void
ure_ifmedia_init(struct ifnet *ifp)
{
        struct ure_softc *sc = ifp->if_softc;
        uint32_t reg = 0;

        /* Set MAC address. */
        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_CONFIG);
        ure_write_mem(sc, URE_PLA_IDR, URE_MCU_TYPE_PLA | URE_BYTE_EN_SIX_BYTES,
            sc->ure_ac.ac_enaddr, 8);
        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_NORAML);

        if (!(sc->ure_flags & URE_FLAG_8152)) {
                if (sc->ure_flags & (URE_FLAG_8156B | URE_FLAG_8157))
                        URE_CLRBIT_2(sc, URE_USB_RX_AGGR_NUM, URE_MCU_TYPE_USB,
                            URE_RX_AGGR_NUM_MASK);

                reg = sc->ure_rxbufsz - URE_FRAMELEN(ifp->if_mtu);
                if (sc->ure_flags & URE_FLAG_8157)
                        reg -= sizeof(struct ure_rxpkt_v2) + URE_8157_BUF_ALIGN;
                else
                        reg -= sizeof(struct ure_rxpkt) + URE_RX_BUF_ALIGN;

                if (sc->ure_flags &
                    (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B |
                    URE_FLAG_8157)) {
                        ure_write_2(sc, URE_USB_RX_EARLY_SIZE, URE_MCU_TYPE_USB,
                            (sc->ure_flags & URE_FLAG_8157) ?
                            reg / URE_8157_BUF_ALIGN : reg / URE_RX_BUF_ALIGN);

                        ure_write_2(sc, URE_USB_RX_EARLY_AGG, URE_MCU_TYPE_USB,
                            (sc->ure_flags & URE_FLAG_8153B) ? 158 : 80);
                        ure_write_2(sc, URE_USB_PM_CTRL_STATUS,
                            URE_MCU_TYPE_USB, 1875);

                        if (sc->ure_udev->speed == USB_SPEED_HIGH) {
                                reg = ure_read_2(sc, URE_USB_L1_CTRL,
                                    URE_MCU_TYPE_USB);
                                reg &= ~0x0f;
                                ure_write_2(sc, URE_USB_L1_CTRL,
                                    URE_MCU_TYPE_USB, reg | 0x01);
                        }
                } else {
                        ure_write_2(sc, URE_USB_RX_EARLY_SIZE, URE_MCU_TYPE_USB,
                            reg / 4);
                        switch (sc->ure_udev->speed) {
                        case USB_SPEED_SUPER:
                                reg = URE_COALESCE_SUPER / 8;
                                break;
                        case USB_SPEED_HIGH:
                                reg = URE_COALESCE_HIGH / 8;
                                break;
                        default:
                                reg = URE_COALESCE_SLOW / 8;
                                break;
                        }
                        ure_write_2(sc, URE_USB_RX_EARLY_AGG, URE_MCU_TYPE_USB,
                            reg);
                }

                if (sc->ure_chip & URE_CHIP_VER_7420) {
                        URE_SETBIT_2(sc, URE_PLA_MAC_PWR_CTRL4,
                            URE_MCU_TYPE_PLA, URE_IDLE_SPDWN_EN);
                }

                if ((sc->ure_chip & URE_CHIP_VER_6010) ||
                    (sc->ure_flags & URE_FLAG_8156B)) {
                        URE_CLRBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB,
                            URE_FC_PATCH_TASK);
                        usbd_delay_ms(sc->ure_udev, 1);
                        URE_SETBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB,
                            URE_FC_PATCH_TASK);
                }
        }

        /* Reset the packet filter. */
        URE_CLRBIT_2(sc, URE_PLA_FMC, URE_MCU_TYPE_PLA, URE_FMC_FCR_MCU_EN);
        URE_SETBIT_2(sc, URE_PLA_FMC, URE_MCU_TYPE_PLA, URE_FMC_FCR_MCU_EN);

        /* Enable transmit and receive. */
        URE_SETBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_RE | URE_CR_TE);

        if (sc->ure_flags &
            (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157)) {
                ure_write_1(sc, URE_USB_UPT_RXDMA_OWN, URE_MCU_TYPE_USB,
                    URE_OWN_UPDATE | URE_OWN_CLEAR);
        }

        URE_CLRBIT_2(sc, URE_PLA_MISC_1, URE_MCU_TYPE_PLA, URE_RXDY_GATED_EN);
}

int
ure_ifmedia_upd(struct ifnet *ifp)
{
        struct ure_softc        *sc = ifp->if_softc;
        struct mii_data         *mii = &sc->ure_mii;
        struct ifmedia          *ifm = &sc->ure_ifmedia;
        int                     anar, gig, err, reg;

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157)) {
                if (IFM_TYPE(ifm->ifm_media) != IFM_ETHER)
                        return (EINVAL);

                if (!(sc->ure_chip & URE_CHIP_VER_7420)) {
                        reg = ure_phy_read(sc, URE_OCP_10GBT_CTRL);
                        if (reg == 0xffff)
                                return (EINVAL);
                        reg &= ~URE_ADV_2500TFDX;
                }
                if (sc->ure_flags & URE_FLAG_8157)
                        reg &= ~URE_ADV_5000TFDX;

                anar = ANAR_TX_FD | ANAR_TX | ANAR_10_FD | ANAR_10;
                gig = GTCR_ADV_1000TFDX | GTCR_ADV_1000THDX;

                switch (IFM_SUBTYPE(ifm->ifm_media)) {
                case IFM_AUTO:
                        if (!(sc->ure_chip & URE_CHIP_VER_7420))
                                reg |= URE_ADV_2500TFDX;
                        if (sc->ure_flags & URE_FLAG_8157)
                                reg |= URE_ADV_5000TFDX;
                        break;
                case IFM_5000_T:
                        reg |= URE_ADV_2500TFDX | URE_ADV_5000TFDX;
                        ifp->if_baudrate = IF_Gbps(5);
                        break;
                case IFM_2500_T:
                        reg |= URE_ADV_2500TFDX;
                        ifp->if_baudrate = IF_Mbps(2500);
                        break;
                case IFM_1000_T:
                        ifp->if_baudrate = IF_Gbps(1);
                        break;
                case IFM_100_TX:
                        anar &= ~(ANAR_10_FD | ANAR_10);
                        gig = 0;
                        ifp->if_baudrate = IF_Mbps(100);
                        break;
                case IFM_10_T:
                        anar &= ~(ANAR_TX_FD | ANAR_TX);
                        gig = 0;
                        ifp->if_baudrate = IF_Mbps(10);
                        break;
                default:
                        printf("%s: unsupported media type\n",
                            sc->ure_dev.dv_xname);
                        return (EINVAL);
                }

                ure_phy_write(sc, URE_OCP_BASE_MII + MII_ANAR * 2,
                    anar | ANAR_PAUSE_ASYM | ANAR_FC);
                ure_phy_write(sc, URE_OCP_BASE_MII + MII_100T2CR * 2, gig);
                if (!(sc->ure_chip & URE_CHIP_VER_7420))
                        ure_phy_write(sc, URE_OCP_10GBT_CTRL, reg);
                ure_phy_write(sc, URE_OCP_BASE_MII + MII_BMCR,
                    BMCR_AUTOEN | BMCR_STARTNEG);

                return (0);
        }

        if (mii->mii_instance) {
                struct mii_softc *miisc;
                LIST_FOREACH(miisc, &mii->mii_phys, mii_list)
                        PHY_RESET(miisc);
        }

        err = mii_mediachg(mii);
        if (err == ENXIO)
                return (0);
        else
                return (err);
}

void
ure_ifmedia_sts(struct ifnet *ifp, struct ifmediareq *ifmr)
{
        struct ure_softc        *sc = ifp->if_softc;
        struct mii_data         *mii = &sc->ure_mii;
        uint16_t                status = 0;

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157)) {
                ifmr->ifm_status = IFM_AVALID;
                if (ure_get_link_status(sc)) {
                        ifmr->ifm_status |= IFM_ACTIVE;
                        ifmr->ifm_active = IFM_ETHER;
                        status = ure_read_2(sc, URE_PLA_PHYSTATUS,
                            URE_MCU_TYPE_PLA);
                        if ((status & URE_PHYSTATUS_FDX) ||
                            (status & URE_PHYSTATUS_2500MBPS) ||
                            (status & URE_PHYSTATUS_5000MBPS))
                                ifmr->ifm_active |= IFM_FDX;
                        else
                                ifmr->ifm_active |= IFM_HDX;
                        if (status & URE_PHYSTATUS_10MBPS)
                                ifmr->ifm_active |= IFM_10_T;
                        else if (status & URE_PHYSTATUS_100MBPS)
                                ifmr->ifm_active |= IFM_100_TX;
                        else if (status & URE_PHYSTATUS_1000MBPS)
                                ifmr->ifm_active |= IFM_1000_T;
                        else if (status & URE_PHYSTATUS_2500MBPS)
                                ifmr->ifm_active |= IFM_2500_T;
                        else if (status & URE_PHYSTATUS_5000MBPS)
                                ifmr->ifm_active |= IFM_5000_T;
                }
                return;
        }

        mii_pollstat(mii);
        ifmr->ifm_active = mii->mii_media_active;
        ifmr->ifm_status = mii->mii_media_status;
}

void
ure_add_media_types(struct ure_softc *sc)
{
        ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_10_T, 0, NULL);
        ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_10_T | IFM_FDX, 0, NULL);
        ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_100_TX, 0, NULL);
        ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_100_TX | IFM_FDX, 0,
            NULL);
        ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_1000_T, 0, NULL);
        ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_1000_T | IFM_FDX, 0,
            NULL);
        if (!(sc->ure_chip & URE_CHIP_VER_7420)) {
                ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_2500_T, 0, NULL);
                ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_2500_T | IFM_FDX,
                    0, NULL);
        }
        if (sc->ure_flags & URE_FLAG_8157) {
                ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_5000_T, 0, NULL);
                ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_5000_T | IFM_FDX,
                    0, NULL);
        }
}

void
ure_link_state(struct ure_softc *sc)
{
        struct ifnet    *ifp = &sc->ure_ac.ac_if;
        int             link = LINK_STATE_DOWN;

        if (ure_get_link_status(sc)) {
                link = LINK_STATE_UP;
                /* Enable transmit and receive. */
                URE_SETBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA,
                    URE_CR_RE | URE_CR_TE);
        }

        if (ifp->if_link_state != link) {
                ifp->if_link_state = link;
                if_link_state_change(ifp);
        }
}

int
ure_get_link_status(struct ure_softc *sc)
{
        if (ure_read_2(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA) &
            URE_PHYSTATUS_LINK) {
                sc->ure_flags |= URE_FLAG_LINK;
                return (1);
        } else {
                sc->ure_flags &= ~URE_FLAG_LINK;
                return (0);
        }
}

void
ure_iff(struct ure_softc *sc)
{
        struct ifnet            *ifp = &sc->ure_ac.ac_if;
        struct ether_multi      *enm;
        struct ether_multistep  step;
        uint32_t                hashes[2] = { 0, 0 };
        uint32_t                hash;
        uint32_t                rxmode;

        if (usbd_is_dying(sc->ure_udev))
                return;

        rxmode = ure_read_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA);
        rxmode &= ~URE_RCR_ACPT_ALL;
        ifp->if_flags &= ~IFF_ALLMULTI;

        /*
         * Always accept frames destined to our station address.
         * Always accept broadcast frames.
         */
        rxmode |= URE_RCR_APM | URE_RCR_AB;

        if (ifp->if_flags & IFF_PROMISC || sc->ure_ac.ac_multirangecnt > 0) {
                ifp->if_flags |= IFF_ALLMULTI;
                rxmode |= URE_RCR_AM;
                if (ifp->if_flags & IFF_PROMISC)
                        rxmode |= URE_RCR_AAP;
                hashes[0] = hashes[1] = 0xffffffff;
        } else {
                rxmode |= URE_RCR_AM;

                ETHER_FIRST_MULTI(step, &sc->ure_ac, enm);
                while (enm != NULL) {
                        hash = ether_crc32_be(enm->enm_addrlo, ETHER_ADDR_LEN)
                            >> 26;
                        if (hash < 32)
                                hashes[0] |= (1 << hash);
                        else
                                hashes[1] |= (1 << (hash - 32));

                        ETHER_NEXT_MULTI(step, enm);
                }

                hash = swap32(hashes[0]);
                hashes[0] = swap32(hashes[1]);
                hashes[1] = hash;
        }

        ure_write_mem(sc, URE_PLA_MAR, URE_MCU_TYPE_PLA | URE_BYTE_EN_DWORD,
            hashes, sizeof(hashes));
        ure_write_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, rxmode);
}

void
ure_rxvlan(struct ure_softc *sc)
{
        struct ifnet    *ifp = &sc->ure_ac.ac_if;
        uint16_t        reg;

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157)) {
                reg = ure_read_2(sc, URE_PLA_RCR1, URE_MCU_TYPE_PLA);
                reg &= ~(URE_INNER_VLAN | URE_OUTER_VLAN);
                if (ifp->if_capabilities & IFCAP_VLAN_HWTAGGING)
                        reg |= (URE_INNER_VLAN | URE_OUTER_VLAN);
                ure_write_2(sc, URE_PLA_RCR1, URE_MCU_TYPE_PLA, reg);
        } else {
                reg = ure_read_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA);
                reg &= ~URE_CPCR_RX_VLAN;
                if (ifp->if_capabilities & IFCAP_VLAN_HWTAGGING)
                        reg |= URE_CPCR_RX_VLAN;
                ure_write_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA, reg);
        }
}

void
ure_reset(struct ure_softc *sc)
{
        int     i;

        if (sc->ure_flags & URE_FLAG_8157)
                URE_CLRBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA,
                    URE_CR_TE | URE_CR_RE);
        else if (sc->ure_flags & URE_FLAG_8156) {
                URE_CLRBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_TE);
                URE_CLRBIT_2(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB,
                    BMU_RESET_EP_IN);
                URE_SETBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB,
                    URE_CDC_ECM_EN);
                URE_CLRBIT_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_RE);
                URE_SETBIT_2(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB,
                    BMU_RESET_EP_IN);
                URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB,
                    URE_CDC_ECM_EN);
        } else {
                ure_write_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, URE_CR_RST);

                for (i = 0; i < URE_TIMEOUT; i++) {
                        if (!(ure_read_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA) &
                            URE_CR_RST))
                                break;
                        DELAY(100);
                }
                if (i == URE_TIMEOUT)
                        printf("%s: reset never completed\n",
                            sc->ure_dev.dv_xname);
        }
}

void
ure_watchdog(struct ifnet *ifp)
{
        struct ure_softc        *sc = ifp->if_softc;
        struct ure_chain        *c;
        usbd_status             err;
        int                     i, s;

        ifp->if_timer = 0;

        if (usbd_is_dying(sc->ure_udev))
                return;

        if ((ifp->if_flags & (IFF_RUNNING|IFF_UP)) != (IFF_RUNNING|IFF_UP))
                return;

        sc = ifp->if_softc;
        s = splnet();

        ifp->if_oerrors++;
        DPRINTF(("%s: watchdog timeout\n", sc->ure_dev.dv_xname));

        for (i = 0; i < URE_TX_LIST_CNT; i++) {
                c = &sc->ure_cdata.ure_tx_chain[i];
                if (c->uc_cnt > 0) {
                        usbd_get_xfer_status(c->uc_xfer, NULL, NULL, NULL,
                            &err);
                        ure_txeof(c->uc_xfer, c, err);
                }
        }

        if (ifq_is_oactive(&ifp->if_snd))
                ifq_restart(&ifp->if_snd);
        splx(s);
}

void
ure_init(void *xsc)
{
        struct ure_softc        *sc = xsc;
        struct ure_chain        *c;
        struct ifnet            *ifp = &sc->ure_ac.ac_if;
        usbd_status             err;
        int                     s, i, error;

        s = splnet();

        /* Cancel pending I/O. */
        ure_stop(sc);

        if (sc->ure_flags & URE_FLAG_8152)
                error = ure_rtl8152_nic_reset(sc);
        else
                error = ure_rtl8153_nic_reset(sc);

        if (error != 0) {
                splx(s);
                return;
        }

        if (ure_xfer_list_init(sc, sc->ure_cdata.ure_rx_chain,
                sc->ure_rxbufsz, URE_RX_LIST_CNT) == ENOBUFS) {
                printf("%s: rx list init failed\n", sc->ure_dev.dv_xname);
                splx(s);
                return;
        }

        if (ure_xfer_list_init(sc, sc->ure_cdata.ure_tx_chain,
                sc->ure_txbufsz, URE_TX_LIST_CNT) == ENOBUFS) {
                printf("%s: tx list init failed\n", sc->ure_dev.dv_xname);
                splx(s);
                return;
        }

        /* Initialize the SLIST we are using for the multiple tx buffers */
        SLIST_INIT(&sc->ure_cdata.ure_tx_free);
        for (i = 0; i < URE_TX_LIST_CNT; i++)
                SLIST_INSERT_HEAD(&sc->ure_cdata.ure_tx_free,
                    &sc->ure_cdata.ure_tx_chain[i], uc_list);

        /* Setup MAC address, and enable TX/RX. */
        ure_ifmedia_init(ifp);

        /* Load the multicast filter. */
        ure_iff(sc);

        /* Open RX and TX pipes. */
        err = usbd_open_pipe(sc->ure_iface, sc->ure_ed[URE_ENDPT_RX],
            USBD_EXCLUSIVE_USE, &sc->ure_ep[URE_ENDPT_RX]);
        if (err) {
                printf("%s: open rx pipe failed: %s\n",
                    sc->ure_dev.dv_xname, usbd_errstr(err));
                splx(s);
                return;
        }

        err = usbd_open_pipe(sc->ure_iface, sc->ure_ed[URE_ENDPT_TX],
            USBD_EXCLUSIVE_USE, &sc->ure_ep[URE_ENDPT_TX]);
        if (err) {
                printf("%s: open tx pipe failed: %s\n",
                    sc->ure_dev.dv_xname, usbd_errstr(err));
                splx(s);
                return;
        }

        /* Start up the receive pipe. */
        for (i = 0; i < URE_RX_LIST_CNT; i++) {
                c = &sc->ure_cdata.ure_rx_chain[i];
                usbd_setup_xfer(c->uc_xfer, sc->ure_ep[URE_ENDPT_RX],
                    c, c->uc_buf, c->uc_bufmax,
                    USBD_SHORT_XFER_OK | USBD_NO_COPY,
                    USBD_NO_TIMEOUT, ure_rxeof);
                usbd_transfer(c->uc_xfer);
        }

        ure_ifmedia_upd(ifp);

        /* Indicate we are up and running. */
        sc->ure_flags &= ~URE_FLAG_LINK;
        ifp->if_flags |= IFF_RUNNING;
        ifq_clr_oactive(&ifp->if_snd);

        timeout_add_sec(&sc->ure_stat_ch, 1);

        splx(s);
}

void
ure_start(struct ifnet *ifp)
{
        struct ure_softc        *sc = ifp->if_softc;
        struct ure_cdata        *cd = &sc->ure_cdata;
        struct ure_chain        *c;
        struct mbuf             *m = NULL;
        uint32_t                descsize, new_buflen;
        int                     s, mlen;

        if (!(sc->ure_flags & URE_FLAG_LINK) ||
                (ifp->if_flags & (IFF_RUNNING|IFF_UP)) !=
                    (IFF_RUNNING|IFF_UP)) {
                return;
        }

        s = splnet();

        c = SLIST_FIRST(&cd->ure_tx_free);
        while (c != NULL) {
                m = ifq_deq_begin(&ifp->if_snd);
                if (m == NULL)
                        break;

                mlen = m->m_pkthdr.len;

                descsize = (sc->ure_flags & URE_FLAG_8157) ?
                    sizeof(struct ure_txpkt_v2) : sizeof(struct ure_txpkt);
                /* Discard packet larger than buffer. */
                if (mlen + descsize >= c->uc_bufmax) {
                        ifq_deq_commit(&ifp->if_snd, m);
                        m_freem(m);
                        ifp->if_oerrors++;
                        continue;
                }

                /*
                 * If packet larger than remaining space, send buffer and
                 * continue.
                 */
                new_buflen = roundup(c->uc_buflen,
                    (sc->ure_flags & URE_FLAG_8157) ?
                    URE_8157_BUF_ALIGN : URE_TX_BUF_ALIGN);
                if (new_buflen + descsize + mlen >= c->uc_bufmax) {
                        ifq_deq_rollback(&ifp->if_snd, m);
                        SLIST_REMOVE_HEAD(&cd->ure_tx_free, uc_list);
                        if (ure_encap_xfer(ifp, sc, c)) {
                                SLIST_INSERT_HEAD(&cd->ure_tx_free, c,
                                    uc_list);
                                break;
                        }
                        c = SLIST_FIRST(&cd->ure_tx_free);
                        continue;
                }

                /* Append packet to current buffer. */
                mlen = ure_encap_txpkt(sc, m, c->uc_buf + new_buflen,
                    c->uc_bufmax - new_buflen);
                if (mlen <= 0) {
                        ifq_deq_rollback(&ifp->if_snd, m);
                        break;
                }

                ifq_deq_commit(&ifp->if_snd, m);
                c->uc_cnt += 1;
                c->uc_buflen = new_buflen + mlen;

#if NBPFILTER > 0
                if (ifp->if_bpf)
                        bpf_mtap(ifp->if_bpf, m, BPF_DIRECTION_OUT);
#endif

                m_freem(m);
        }

        if (c != NULL) {
                /* Send current buffer unless empty */
                if (c->uc_buflen > 0 && c->uc_cnt > 0) {
                        SLIST_REMOVE_HEAD(&cd->ure_tx_free, uc_list);
                        if (ure_encap_xfer(ifp, sc, c)) {
                                SLIST_INSERT_HEAD(&cd->ure_tx_free, c,
                                    uc_list);
                        }
                        c = SLIST_FIRST(&cd->ure_tx_free);
                }
        }

        ifp->if_timer = 5;
        if (c == NULL)
                ifq_set_oactive(&ifp->if_snd);
        splx(s);
}

void
ure_tick(void *xsc)
{
        struct ure_softc        *sc = xsc;

        if (sc == NULL)
                return;

        if (usbd_is_dying(sc->ure_udev))
                return;

        usb_add_task(sc->ure_udev, &sc->ure_tick_task);
}

void
ure_stop(struct ure_softc *sc)
{
        struct ure_cdata        *cd;
        struct ifnet            *ifp;
        usbd_status             err;

        ure_reset(sc);

        ifp = &sc->ure_ac.ac_if;
        ifp->if_timer = 0;
        ifp->if_flags &= ~IFF_RUNNING;
        ifq_clr_oactive(&ifp->if_snd);

        timeout_del(&sc->ure_stat_ch);
        sc->ure_flags &= ~URE_FLAG_LINK;

        if (sc->ure_ep[URE_ENDPT_RX] != NULL) {
                err = usbd_close_pipe(sc->ure_ep[URE_ENDPT_RX]);
                if (err) {
                        printf("%s: close rx pipe failed: %s\n",
                            sc->ure_dev.dv_xname, usbd_errstr(err));
                }
                sc->ure_ep[URE_ENDPT_RX] = NULL;
        }

        if (sc->ure_ep[URE_ENDPT_TX] != NULL) {
                err = usbd_close_pipe(sc->ure_ep[URE_ENDPT_TX]);
                if (err) {
                        printf("%s: close tx pipe failed: %s\n",
                            sc->ure_dev.dv_xname, usbd_errstr(err));
                }
                sc->ure_ep[URE_ENDPT_TX] = NULL;
        }

        cd = &sc->ure_cdata;
        ure_xfer_list_free(sc, cd->ure_rx_chain, URE_RX_LIST_CNT);
        ure_xfer_list_free(sc, cd->ure_tx_chain, URE_TX_LIST_CNT);
}

int
ure_xfer_list_init(struct ure_softc *sc, struct ure_chain *ch,
    uint32_t bufsize, int listlen)
{
        struct ure_chain        *c;
        int                     i;

        for (i = 0; i < listlen; i++) {
                c = &ch[i];
                c->uc_sc = sc;
                c->uc_idx = i;
                c->uc_buflen = 0;
                c->uc_bufmax = bufsize;
                c->uc_cnt = 0;
                if (c->uc_xfer == NULL) {
                        c->uc_xfer = usbd_alloc_xfer(sc->ure_udev);
                        if (c->uc_xfer == NULL)
                                return (ENOBUFS);
                        c->uc_buf = usbd_alloc_buffer(c->uc_xfer, c->uc_bufmax);
                        if (c->uc_buf == NULL) {
                                usbd_free_xfer(c->uc_xfer);
                                c->uc_xfer = NULL;
                                return (ENOBUFS);
                        }
                }
        }

        return (0);
}

void
ure_xfer_list_free(struct ure_softc *sc, struct ure_chain *ch, int listlen)
{
        int     i;

        for (i = 0; i < listlen; i++) {
                if (ch[i].uc_buf != NULL) {
                        ch[i].uc_buf = NULL;
                }
                ch[i].uc_cnt = 0;
                if (ch[i].uc_xfer != NULL) {
                        usbd_free_xfer(ch[i].uc_xfer);
                        ch[i].uc_xfer = NULL;
                }
        }
}

void
ure_rtl8152_init(struct ure_softc *sc)
{
        uint32_t        pwrctrl;

        /* Disable ALDPS. */
        ure_phy_write(sc, URE_OCP_ALDPS_CONFIG, URE_ENPDNPS | URE_LINKENA |
            URE_DIS_SDSAVE);
        usbd_delay_ms(sc->ure_udev, 20);

        if (sc->ure_chip & URE_CHIP_VER_4C00)
                URE_CLRBIT_2(sc, URE_PLA_LED_FEATURE, URE_MCU_TYPE_PLA,
                    URE_LED_MODE_MASK);

        URE_CLRBIT_2(sc, URE_USB_UPS_CTRL, URE_MCU_TYPE_USB, URE_POWER_CUT);
        URE_CLRBIT_2(sc, URE_USB_PM_CTRL_STATUS, URE_MCU_TYPE_USB,
            URE_RESUME_INDICATE);

        URE_SETBIT_2(sc, URE_PLA_PHY_PWR, URE_MCU_TYPE_PLA,
            URE_TX_10M_IDLE_EN | URE_PFM_PWM_SWITCH);
        pwrctrl = ure_read_4(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA);
        pwrctrl &= ~URE_MCU_CLK_RATIO_MASK;
        pwrctrl |= URE_MCU_CLK_RATIO | URE_D3_CLK_GATED_EN;
        ure_write_4(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA, pwrctrl);
        ure_write_2(sc, URE_PLA_GPHY_INTR_IMR, URE_MCU_TYPE_PLA,
            URE_GPHY_STS_MSK | URE_SPEED_DOWN_MSK | URE_SPDWN_RXDV_MSK |
            URE_SPDWN_LINKCHG_MSK);

        URE_SETBIT_2(sc, URE_PLA_RSTTALLY, URE_MCU_TYPE_PLA, URE_TALLY_RESET);

        /* Enable Rx aggregation. */
        URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB,
            URE_RX_AGG_DISABLE | URE_RX_ZERO_EN);
}

int
ure_rtl8153_init(struct ure_softc *sc)
{
        uint16_t        reg;
        uint8_t         u1u2[8];
        int             i;

        memset(u1u2, 0x00, sizeof(u1u2));
        ure_write_mem(sc, URE_USB_TOLERANCE, URE_BYTE_EN_SIX_BYTES, u1u2,
            sizeof(u1u2));

        for (i = 0; i < 500; i++) {
                if (ure_read_2(sc, URE_PLA_BOOT_CTRL, URE_MCU_TYPE_PLA) &
                    URE_AUTOLOAD_DONE)
                        break;
                usbd_delay_ms(sc->ure_udev, 20);
        }
        if (i == 500) {
                printf("%s: timeout waiting for chip autoload\n",
                    sc->ure_dev.dv_xname);
                return (ETIMEDOUT);
        }

        ure_rtl8153_phy_status(sc, 0);

        if (sc->ure_chip & (URE_CHIP_VER_5C00 | URE_CHIP_VER_5C10 |
            URE_CHIP_VER_5C20)) {
                ure_phy_write(sc, URE_OCP_ADC_CFG,
                    URE_CKADSEL_L | URE_ADC_EN | URE_EN_EMI_L);
        }

        ure_rtl8153_phy_status(sc, URE_PHY_STAT_LAN_ON);

        URE_CLRBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);

        if (sc->ure_chip & URE_CHIP_VER_5C10) {
                reg = ure_read_2(sc, URE_USB_SSPHYLINK2, URE_MCU_TYPE_USB);
                reg &= ~URE_PWD_DN_SCALE_MASK;
                reg |= URE_PWD_DN_SCALE(96);
                ure_write_2(sc, URE_USB_SSPHYLINK2, URE_MCU_TYPE_USB, reg);

                URE_SETBIT_1(sc, URE_USB_USB2PHY, URE_MCU_TYPE_USB,
                    URE_USB2PHY_L1 | URE_USB2PHY_SUSPEND);
        } else if (sc->ure_chip & URE_CHIP_VER_5C20) {
                URE_CLRBIT_1(sc, URE_PLA_DMY_REG0, URE_MCU_TYPE_PLA,
                    URE_ECM_ALDPS);
        }
        if (sc->ure_chip & (URE_CHIP_VER_5C20 | URE_CHIP_VER_5C30)) {
                if (ure_read_2(sc, URE_USB_BURST_SIZE, URE_MCU_TYPE_USB))
                        URE_SETBIT_1(sc, URE_USB_CSR_DUMMY1, URE_MCU_TYPE_USB,
                            URE_DYNAMIC_BURST);
                else
                        URE_CLRBIT_1(sc, URE_USB_CSR_DUMMY1, URE_MCU_TYPE_USB,
                            URE_DYNAMIC_BURST);
        }

        URE_SETBIT_1(sc, URE_USB_CSR_DUMMY2, URE_MCU_TYPE_USB, URE_EP4_FULL_FC);

        URE_CLRBIT_2(sc, URE_USB_WDT11_CTRL, URE_MCU_TYPE_USB, URE_TIMER11_EN);

        URE_CLRBIT_2(sc, URE_PLA_LED_FEATURE, URE_MCU_TYPE_PLA,
            URE_LED_MODE_MASK);

        if ((sc->ure_chip & URE_CHIP_VER_5C10) &&
            sc->ure_udev->speed != USB_SPEED_SUPER)
                reg = URE_LPM_TIMER_500MS;
        else
                reg = URE_LPM_TIMER_500US;
        ure_write_1(sc, URE_USB_LPM_CTRL, URE_MCU_TYPE_USB,
            URE_FIFO_EMPTY_1FB | URE_ROK_EXIT_LPM | reg);

        reg = ure_read_2(sc, URE_USB_AFE_CTRL2, URE_MCU_TYPE_USB);
        reg &= ~URE_SEN_VAL_MASK;
        reg |= URE_SEN_VAL_NORMAL | URE_SEL_RXIDLE;
        ure_write_2(sc, URE_USB_AFE_CTRL2, URE_MCU_TYPE_USB, reg);

        ure_write_2(sc, URE_USB_CONNECT_TIMER, URE_MCU_TYPE_USB, 0x0001);

        URE_CLRBIT_2(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB,
            URE_PWR_EN | URE_PHASE2_EN);
        URE_CLRBIT_2(sc, URE_USB_MISC_0, URE_MCU_TYPE_USB, URE_PCUT_STATUS);

        memset(u1u2, 0xff, sizeof(u1u2));
        ure_write_mem(sc, URE_USB_TOLERANCE, URE_BYTE_EN_SIX_BYTES, u1u2,
            sizeof(u1u2));

        ure_write_2(sc, URE_PLA_MAC_PWR_CTRL, URE_MCU_TYPE_PLA, 0);
        ure_write_2(sc, URE_PLA_MAC_PWR_CTRL2, URE_MCU_TYPE_PLA, 0);
        ure_write_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA, 0);
        ure_write_2(sc, URE_PLA_MAC_PWR_CTRL4, URE_MCU_TYPE_PLA, 0);

        /* Enable Rx aggregation. */
        URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB,
            URE_RX_AGG_DISABLE | URE_RX_ZERO_EN);

        URE_SETBIT_2(sc, URE_PLA_RSTTALLY, URE_MCU_TYPE_PLA, URE_TALLY_RESET);

        return (0);
}

int
ure_rtl8153b_init(struct ure_softc *sc)
{
        uint16_t        reg;
        int             i;

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
                URE_CLRBIT_1(sc, URE_USB_ECM_OP, URE_MCU_TYPE_USB,
                    URE_EN_ALL_SPEED);
                ure_write_2(sc, URE_USB_SPEED_OPTION, URE_MCU_TYPE_USB, 0);
                URE_SETBIT_2(sc, URE_USB_ECM_OPTION, URE_MCU_TYPE_USB,
                    URE_BYPASS_MAC_RESET);

                if (sc->ure_flags & URE_FLAG_8156B)
                        URE_SETBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB,
                            URE_RX_DETECT8);
        }

        URE_CLRBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB, LPM_U1U2_EN);

        if (sc->ure_flags & URE_FLAG_8156B) {
                if (ure_wait_for_flash(sc) != 0)
                        return (ETIMEDOUT);
        }

        for (i = 0; i < 500; i++) {
                if (ure_read_2(sc, URE_PLA_BOOT_CTRL, URE_MCU_TYPE_PLA) &
                    URE_AUTOLOAD_DONE)
                        break;
                usbd_delay_ms(sc->ure_udev, 20);
        }
        if (i == 500) {
                printf("%s: timeout waiting for chip autoload\n",
                    sc->ure_dev.dv_xname);
                return (ETIMEDOUT);
        }

        ure_rtl8153_phy_status(sc, 0);
        ure_rtl8153_phy_status(sc, URE_PHY_STAT_LAN_ON);

        URE_CLRBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);

        /* MSC timer, 32760 ms. */
        ure_write_2(sc, URE_USB_MSC_TIMER, URE_MCU_TYPE_USB, 4095);

        if (!(sc->ure_flags & URE_FLAG_8153B)) {
                /* U1/U2/L1 idle timer, 500 us. */
                ure_write_2(sc, URE_USB_U1U2_TIMER, URE_MCU_TYPE_USB, 500);
        }

        URE_CLRBIT_2(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB, URE_PWR_EN);
        URE_CLRBIT_2(sc, URE_USB_MISC_0, URE_MCU_TYPE_USB, URE_PCUT_STATUS);

        URE_CLRBIT_1(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB,
            URE_UPS_EN | URE_USP_PREWAKE);
        URE_CLRBIT_1(sc, URE_USB_MISC_2, URE_MCU_TYPE_USB,
            URE_UPS_FORCE_PWR_DOWN | URE_UPS_NO_UPS);

        URE_CLRBIT_1(sc, URE_PLA_INDICATE_FALG, URE_MCU_TYPE_PLA,
            URE_UPCOMING_RUNTIME_D3);
        URE_CLRBIT_1(sc, URE_PLA_SUSPEND_FLAG, URE_MCU_TYPE_PLA,
            URE_LINK_CHG_EVENT);
        URE_CLRBIT_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA,
            URE_LINK_CHANGE_FLAG);

        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_CONFIG);
        URE_CLRBIT_2(sc, URE_PLA_CONFIG34, URE_MCU_TYPE_PLA,
            URE_LINK_OFF_WAKE_EN);
        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_NORAML);

        if (sc->ure_flags & URE_FLAG_8153B) {
                reg = ure_read_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA);
                if (ure_read_2(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA) &
                    URE_PHYSTATUS_LINK)
                        reg |= URE_CUR_LINK_OK;
                else
                        reg &= ~URE_CUR_LINK_OK;
                ure_write_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA,
                    reg | URE_POLL_LINK_CHG);
        }

        if (sc->ure_udev->speed == USB_SPEED_SUPER) {
                URE_SETBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB,
                    LPM_U1U2_EN);
        }

        if (sc->ure_flags & URE_FLAG_8156B) {
                URE_CLRBIT_2(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, URE_SLOT_EN);
                URE_SETBIT_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA,
                    URE_FLOW_CTRL_EN);

                /* Enable fc timer and set timer to 600 ms. */
                ure_write_2(sc, URE_USB_FC_TIMER, URE_MCU_TYPE_USB,
                    URE_CTRL_TIMER_EN | 75);

                reg = ure_read_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB);
                if (!(ure_read_2(sc, URE_PLA_POL_GPIO_CTRL, URE_MCU_TYPE_PLA) &
                    URE_DACK_DET_EN))
                        reg |= URE_FLOW_CTRL_PATCH_2;
                reg &= ~URE_AUTO_SPEEDUP;
                ure_write_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB, reg);

                URE_SETBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB,
                    URE_FC_PATCH_TASK);
        }

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B)) {
                /* MAC clock speed down. */
                URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA,
                    URE_PLA_MCU_SPDWN_EN);

                reg = ure_read_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA);
                reg &= ~URE_CUR_LINK_OK;
                if (ure_read_2(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA) &
                    URE_PHYSTATUS_LINK)
                        reg |= URE_CUR_LINK_OK;
                ure_write_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA,
                    reg | URE_POLL_LINK_CHG);
        } else
                URE_SETBIT_2(sc, URE_PLA_MAC_PWR_CTRL2, URE_MCU_TYPE_PLA,
                    URE_MAC_CLK_SPDWN_EN);

        /* Enable Rx aggregation. */
        URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB,
            URE_RX_AGG_DISABLE | URE_RX_ZERO_EN);

        if (sc->ure_flags & URE_FLAG_8156)
                URE_SETBIT_1(sc, URE_USB_BMU_CONFIG, URE_MCU_TYPE_USB,
                    URE_ACT_ODMA);

        if (!(sc->ure_flags & URE_FLAG_8153B)) {
                /*
                 * Select force mode through 0xa5b4 bit 15
                 * 0: MDIO force mode
                 * 1: MMD force mode
                 */
                ure_phy_write(sc, 0xa5b4,
                    ure_phy_read(sc, 0xa5b4) & ~0x8000);
        }

        URE_SETBIT_2(sc, URE_PLA_RSTTALLY, URE_MCU_TYPE_PLA, URE_TALLY_RESET);

        return (0);
}

int
ure_rtl8157_init(struct ure_softc *sc)
{
        uint16_t        reg;
        int             i;

        URE_SETBIT_1(sc, 0xcffe, URE_MCU_TYPE_USB, 0x0008);
        URE_CLRBIT_1(sc, 0xd3ca, URE_MCU_TYPE_USB, 0x0001);
        URE_CLRBIT_1(sc, URE_USB_ECM_OP, URE_MCU_TYPE_USB, URE_EN_ALL_SPEED);
        URE_SETBIT_2(sc, URE_USB_ECM_OPTION, URE_MCU_TYPE_USB,
            URE_BYPASS_MAC_RESET);
        URE_SETBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_RX_DETECT8);

        URE_CLRBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB, LPM_U1U2_EN);

        for (i = 0; i < 500; i++) {
                if (ure_read_2(sc, URE_PLA_BOOT_CTRL, URE_MCU_TYPE_PLA) &
                    URE_AUTOLOAD_DONE)
                        break;
                usbd_delay_ms(sc->ure_udev, 20);
        }
        if (i == 500) {
                printf("%s: timeout waiting for chip autoload\n",
                    sc->ure_dev.dv_xname);
                return (ETIMEDOUT);
        }

        if (ure_wait_for_flash(sc) != 0)
                return (ETIMEDOUT);

        ure_rtl8153_phy_status(sc, 0);
        ure_rtl8153_phy_status(sc, URE_PHY_STAT_LAN_ON);

        URE_OCP_CMD_CLRBIT(sc, URE_USB_U2P3_CTRL2, URE_CMD_TYPE_IP,
            URE_U2P3_CTRL2_ENABLE);

        /* Disable interrupt mitigation. */
        URE_CLRBIT_1(sc, 0xcf04, URE_MCU_TYPE_USB, 0x87);

        URE_CLRBIT_2(sc, URE_USB_SPEED_OPTION, URE_MCU_TYPE_USB,
            URE_RG_PWRDN_EN | URE_ALL_SPEED_OFF);

        /* Enable auto speed up. */
        URE_SETBIT_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB, URE_AUTO_SPEEDUP);

        /* MSC timer = 4095 * 8ms = 32760 ms. */
        ure_write_2(sc, URE_USB_MSC_TIMER, URE_MCU_TYPE_USB, 4095);

        /* U1/U2/L1 idle timer, 500 us. */
        ure_write_2(sc, URE_USB_U1U2_TIMER, URE_MCU_TYPE_USB, 500);

        URE_CLRBIT_2(sc, URE_USB_POWER_CUT, URE_MCU_TYPE_USB, URE_PWR_EN);
        URE_CLRBIT_2(sc, URE_USB_MISC_0, URE_MCU_TYPE_USB, URE_PCUT_STATUS);
        URE_CLRBIT_1(sc, URE_USB_MISC_2, URE_MCU_TYPE_USB, 0x02);

        URE_CLRBIT_1(sc, URE_PLA_INDICATE_FALG, URE_MCU_TYPE_PLA,
            URE_UPCOMING_RUNTIME_D3);
        URE_CLRBIT_1(sc, URE_PLA_SUSPEND_FLAG, URE_MCU_TYPE_PLA,
            URE_LINK_CHG_EVENT);
        URE_CLRBIT_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA,
            URE_LINK_CHANGE_FLAG);

        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_CONFIG);
        URE_CLRBIT_2(sc, URE_PLA_CONFIG34, URE_MCU_TYPE_PLA,
            URE_LINK_OFF_WAKE_EN);
        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_NORAML);

        URE_CLRBIT_2(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, URE_SLOT_EN);
        URE_SETBIT_2(sc, URE_PLA_CPCR, URE_MCU_TYPE_PLA, URE_FLOW_CTRL_EN);

        /* Enable fc timer and set timer to 600 ms. */
        ure_write_2(sc, URE_USB_FC_TIMER, URE_MCU_TYPE_USB,
            URE_CTRL_TIMER_EN | 75);

        reg = ure_read_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB);
        reg &= ~URE_AUTO_SPEEDUP;
        if (!(ure_read_2(sc, URE_PLA_POL_GPIO_CTRL, URE_MCU_TYPE_PLA) &
            URE_DACK_DET_EN))
                reg |= URE_FLOW_CTRL_PATCH_2;
        ure_write_2(sc, URE_USB_FW_CTRL, URE_MCU_TYPE_USB, reg);

        URE_SETBIT_2(sc, URE_USB_FW_TASK, URE_MCU_TYPE_USB, URE_FC_PATCH_TASK);

        /* Disable bypass_turn_off_clk_in_aldps. */
        URE_CLRBIT_1(sc, 0xd3c8, URE_MCU_TYPE_PLA, 0x01);

        /* MAC clock speed down. */
        URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA,
            URE_PLA_MCU_SPDWN_EN);

        reg = ure_read_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA);
        reg &= ~URE_CUR_LINK_OK;
        if (ure_read_2(sc, URE_PLA_PHYSTATUS, URE_MCU_TYPE_PLA) &
            URE_PHYSTATUS_LINK)
                reg |= URE_CUR_LINK_OK;
        ure_write_2(sc, URE_PLA_EXTRA_STATUS, URE_MCU_TYPE_PLA,
            reg | URE_POLL_LINK_CHG);

        /* Enable Rx aggregation. */
        URE_CLRBIT_2(sc, URE_USB_USB_CTRL, URE_MCU_TYPE_USB,
            URE_RX_AGG_DISABLE | 0x0400);

        /*  Disable Rx zero len. */
        URE_OCP_CMD_CLRBIT(sc, 0x2300, URE_CMD_TYPE_BMU, 0x00000008);

        URE_CLRBIT_1(sc, 0xd4ae, URE_MCU_TYPE_USB, 0x02);

        reg = ure_phy_read(sc, 0xa5b4);
        if (reg == 0xffff)
                return (EINVAL);
        ure_phy_write(sc, 0xa5b4, reg & ~0x8000);

        URE_SETBIT_2(sc, URE_PLA_RSTTALLY, URE_MCU_TYPE_PLA, URE_TALLY_RESET);

        return (0);
}

int
ure_rtl8152_nic_reset(struct ure_softc *sc)
{
        uint32_t        rx_fifo1, rx_fifo2;
        int             i;

        /* Disable ALDPS. */
        ure_phy_write(sc, URE_OCP_ALDPS_CONFIG, URE_ENPDNPS | URE_LINKENA |
            URE_DIS_SDSAVE);
        usbd_delay_ms(sc->ure_udev, 20);

        URE_CLRBIT_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, URE_RCR_ACPT_ALL);

        URE_SETBIT_2(sc, URE_PLA_MISC_1, URE_MCU_TYPE_PLA, URE_RXDY_GATED_EN);
        ure_disable_teredo(sc);
        ure_write_1(sc, URE_PLA_CRWECR, URE_MCU_TYPE_PLA, URE_CRWECR_NORAML);
        ure_write_1(sc, URE_PLA_CR, URE_MCU_TYPE_PLA, 0);

        URE_CLRBIT_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA, URE_NOW_IS_OOB);
        URE_CLRBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_MCU_BORW_EN);
        for (i = 0; i < URE_TIMEOUT; i++) {
                if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
                    URE_LINK_LIST_READY)
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == URE_TIMEOUT) {
                printf("%s: timeout waiting for OOB control\n",
                    sc->ure_dev.dv_xname);
                return (ETIMEDOUT);
        }
        URE_SETBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_RE_INIT_LL);
        for (i = 0; i < URE_TIMEOUT; i++) {
                if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
                    URE_LINK_LIST_READY)
                        break;
                usbd_delay_ms(sc->ure_udev, 1);
        }
        if (i == URE_TIMEOUT) {
                printf("%s: timeout waiting for OOB control\n",
                    sc->ure_dev.dv_xname);
                return (ETIMEDOUT);
        }

        ure_reset(sc);

        /* Configure Rx FIFO threshold. */
        ure_write_4(sc, URE_PLA_RXFIFO_CTRL0, URE_MCU_TYPE_PLA,
            URE_RXFIFO_THR1_NORMAL);
        if (sc->ure_udev->speed == USB_SPEED_FULL) {
                rx_fifo1 = URE_RXFIFO_THR2_FULL;
                rx_fifo2 = URE_RXFIFO_THR3_FULL;
        } else {
                rx_fifo1 = URE_RXFIFO_THR2_HIGH;
                rx_fifo2 = URE_RXFIFO_THR3_HIGH;
        }
        ure_write_4(sc, URE_PLA_RXFIFO_CTRL1, URE_MCU_TYPE_PLA, rx_fifo1);
        ure_write_4(sc, URE_PLA_RXFIFO_CTRL2, URE_MCU_TYPE_PLA, rx_fifo2);

        /* Configure Tx FIFO threshold. */
        ure_write_4(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA,
            URE_TXFIFO_THR_NORMAL);

        ure_write_1(sc, URE_USB_TX_AGG, URE_MCU_TYPE_USB,
            URE_TX_AGG_MAX_THRESHOLD);
        ure_write_4(sc, URE_USB_RX_BUF_TH, URE_MCU_TYPE_USB, URE_RX_THR_HIGH);
        ure_write_4(sc, URE_USB_TX_DMA, URE_MCU_TYPE_USB,
            URE_TEST_MODE_DISABLE | URE_TX_SIZE_ADJUST1);

        ure_rxvlan(sc);
        ure_write_2(sc, URE_PLA_RMS, URE_MCU_TYPE_PLA,
            ETHER_MAX_LEN + ETHER_VLAN_ENCAP_LEN);
        URE_SETBIT_2(sc, URE_PLA_TCR0, URE_MCU_TYPE_PLA, URE_TCR0_AUTO_FIFO);

        /* Enable ALDPS. */
        ure_phy_write(sc, URE_OCP_ALDPS_CONFIG,
            URE_ENPWRSAVE | URE_ENPDNPS | URE_LINKENA | URE_DIS_SDSAVE);

        return (0);
}

int
ure_rtl8153_nic_reset(struct ure_softc *sc)
{
        struct ifnet    *ifp = &sc->ure_ac.ac_if;
        uint32_t        reg = 0;
        uint8_t         u1u2[8] = { 0 };
        int             i;

        switch (sc->ure_flags & URE_FLAG_CHIP_MASK) {
        case URE_FLAG_8153B:
        case URE_FLAG_8156:
        case URE_FLAG_8156B:
        case URE_FLAG_8157:
                URE_CLRBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB,
                    LPM_U1U2_EN);
                break;
        default:
                memset(u1u2, 0x00, sizeof(u1u2));
                ure_write_mem(sc, URE_USB_TOLERANCE, URE_BYTE_EN_SIX_BYTES,
                    u1u2, sizeof(u1u2));
                break;
        }
        URE_CLRBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB, URE_U2P3_ENABLE);

        /* Disable ALDPS. */
        ure_phy_write(sc, URE_OCP_POWER_CFG,
            ure_phy_read(sc, URE_OCP_POWER_CFG) & ~URE_EN_ALDPS);
        for (i = 0; i < 20; i++) {
                usbd_delay_ms(sc->ure_udev, 1);
                if (ure_read_2(sc, 0xe000, URE_MCU_TYPE_PLA) & 0x0100)
                        break;
        }

        URE_SETBIT_2(sc, URE_PLA_MISC_1, URE_MCU_TYPE_PLA, URE_RXDY_GATED_EN);
        ure_disable_teredo(sc);

        URE_CLRBIT_4(sc, URE_PLA_RCR, URE_MCU_TYPE_PLA, URE_RCR_ACPT_ALL);

        ure_reset(sc);
        ure_reset_bmu(sc);

        URE_CLRBIT_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA, URE_NOW_IS_OOB);
        URE_CLRBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA, URE_MCU_BORW_EN);

        if (!(sc->ure_flags &
            (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157))) {
                for (i = 0; i < URE_TIMEOUT; i++) {
                        if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
                            URE_LINK_LIST_READY)
                                break;
                        usbd_delay_ms(sc->ure_udev, 1);
                }
                if (i == URE_TIMEOUT) {
                        printf("%s: timeout waiting for OOB control\n",
                            sc->ure_dev.dv_xname);
                        return (ETIMEDOUT);
                }
                URE_SETBIT_2(sc, URE_PLA_SFF_STS_7, URE_MCU_TYPE_PLA,
                    URE_RE_INIT_LL);
                for (i = 0; i < URE_TIMEOUT; i++) {
                        if (ure_read_1(sc, URE_PLA_OOB_CTRL, URE_MCU_TYPE_PLA) &
                            URE_LINK_LIST_READY)
                                break;
                        usbd_delay_ms(sc->ure_udev, 1);
                }
                if (i == URE_TIMEOUT) {
                        printf("%s: timeout waiting for OOB control\n",
                            sc->ure_dev.dv_xname);
                        return (ETIMEDOUT);
                }
        }

        ure_rxvlan(sc);

        ure_write_2(sc, URE_PLA_RMS, URE_MCU_TYPE_PLA,
            URE_FRAMELEN(ifp->if_mtu));
        ure_write_1(sc, URE_PLA_MTPS, URE_MCU_TYPE_PLA,
            (sc->ure_flags & URE_FLAG_8157) ? MTPS_MAX : MTPS_JUMBO);

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157)) {
                ure_write_2(sc, URE_PLA_RX_FIFO_FULL, URE_MCU_TYPE_PLA,
                    (sc->ure_flags & URE_FLAG_8156) ? 1024 : 512);
                ure_write_2(sc, URE_PLA_RX_FIFO_EMPTY, URE_MCU_TYPE_PLA,
                    (sc->ure_flags & URE_FLAG_8156) ? 2048 : 1024);

                /* Tx share fifo free credit full threshold. */
                ure_write_2(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA, 8);
                ure_write_2(sc, URE_PLA_TXFIFO_FULL, URE_MCU_TYPE_PLA, 128);

                if (sc->ure_flags & URE_FLAG_8156)
                        URE_SETBIT_2(sc, URE_USB_BMU_CONFIG, URE_MCU_TYPE_USB,
                            URE_ACT_ODMA);

                /* FIFO settings */
                reg = ure_read_2(sc, URE_PLA_RXFIFO_FULL, URE_MCU_TYPE_PLA);
                reg &= ~URE_RXFIFO_FULL_MASK;
                ure_write_2(sc, URE_PLA_RXFIFO_FULL, URE_MCU_TYPE_PLA,
                    reg | 0x0008);

                URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL3, URE_MCU_TYPE_PLA,
                    URE_PLA_MCU_SPDWN_EN);

                if (!(sc->ure_flags & URE_FLAG_8157))
                        URE_CLRBIT_2(sc, URE_USB_SPEED_OPTION, URE_MCU_TYPE_USB,
                            URE_RG_PWRDN_EN | URE_ALL_SPEED_OFF);

                ure_write_4(sc, URE_USB_RX_BUF_TH, URE_MCU_TYPE_USB,
                    0x00600400);
        } else {
                URE_SETBIT_2(sc, URE_PLA_TCR0, URE_MCU_TYPE_PLA,
                    URE_TCR0_AUTO_FIFO);
                ure_reset(sc);

                /* Configure Rx FIFO threshold. */
                ure_write_4(sc, URE_PLA_RXFIFO_CTRL0, URE_MCU_TYPE_PLA,
                    URE_RXFIFO_THR1_NORMAL);
                ure_write_2(sc, URE_PLA_RXFIFO_CTRL1, URE_MCU_TYPE_PLA,
                    URE_RXFIFO_THR2_NORMAL);
                ure_write_2(sc, URE_PLA_RXFIFO_CTRL2, URE_MCU_TYPE_PLA,
                    URE_RXFIFO_THR3_NORMAL);

                /* Configure Tx FIFO threshold. */
                ure_write_4(sc, URE_PLA_TXFIFO_CTRL, URE_MCU_TYPE_PLA,
                    URE_TXFIFO_THR_NORMAL2);

                if (sc->ure_flags & URE_FLAG_8153B) {
                        ure_write_4(sc, URE_USB_RX_BUF_TH, URE_MCU_TYPE_USB,
                            URE_RX_THR_B);

                        URE_CLRBIT_2(sc, URE_PLA_MAC_PWR_CTRL3,
                            URE_MCU_TYPE_PLA, URE_PLA_MCU_SPDWN_EN);
                } else {
                        URE_SETBIT_1(sc, URE_PLA_CONFIG6, URE_MCU_TYPE_PLA,
                            URE_LANWAKE_CLR_EN);
                        URE_CLRBIT_1(sc, URE_PLA_LWAKE_CTRL_REG,
                            URE_MCU_TYPE_PLA, URE_LANWAKE_PIN);
                        URE_CLRBIT_2(sc, URE_USB_SSPHYLINK1, URE_MCU_TYPE_USB,
                            URE_DELAY_PHY_PWR_CHG);
                }
        }

        /* Enable ALDPS. */
        ure_phy_write(sc, URE_OCP_POWER_CFG,
            ure_phy_read(sc, URE_OCP_POWER_CFG) | URE_EN_ALDPS);

        if (sc->ure_flags & URE_FLAG_8157) {
                /* Clear SDR. */
                URE_SETBIT_1(sc, 0xd378, URE_MCU_TYPE_USB, 0x0080);
                URE_CLRBIT_2(sc, 0xcd06, URE_MCU_TYPE_USB, 0x8000);
        }
        if ((sc->ure_chip & (URE_CHIP_VER_5C20 | URE_CHIP_VER_5C30)) ||
            (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B)))
                URE_SETBIT_2(sc, URE_USB_U2P3_CTRL, URE_MCU_TYPE_USB,
                    URE_U2P3_ENABLE);

        if (sc->ure_flags & (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B)) {
                if (sc->ure_udev->speed == USB_SPEED_SUPER)
                        URE_SETBIT_2(sc, URE_USB_LPM_CONFIG, URE_MCU_TYPE_USB,
                            LPM_U1U2_EN);
        } else if (!(sc->ure_flags & URE_FLAG_8157)) {
                memset(u1u2, 0xff, sizeof(u1u2));
                ure_write_mem(sc, URE_USB_TOLERANCE, URE_BYTE_EN_SIX_BYTES,
                    u1u2, sizeof(u1u2));
        }

        return (0);
}

uint16_t
ure_rtl8153_phy_status(struct ure_softc *sc, int desired)
{
        uint16_t        reg;
        int             i;

        for (i = 0; i < 500; i++) {
                reg = ure_phy_read(sc, URE_OCP_PHY_STATUS) &
                    URE_PHY_STAT_MASK;
                if (desired) {
                        if (reg == desired)
                                break;
                } else {
                        if (reg == URE_PHY_STAT_LAN_ON ||
                            reg == URE_PHY_STAT_PWRDN ||
                            reg == URE_PHY_STAT_EXT_INIT)
                                break;
                }
                usbd_delay_ms(sc->ure_udev, 20);
        }
        if (i == 500)
                printf("%s: timeout waiting for phy to stabilize\n",
                    sc->ure_dev.dv_xname);

        return reg;
}

int
ure_wait_for_flash(struct ure_softc *sc)
{
        int i;

        if ((ure_read_2(sc, URE_PLA_GPHY_CTRL, URE_MCU_TYPE_PLA) &
            URE_GPHY_FLASH) &&
            !(ure_read_2(sc, URE_USB_GPHY_CTRL, URE_MCU_TYPE_USB) &
            URE_BYPASS_FLASH)) {
                for (i = 0; i < 100; i++) {
                        if (ure_read_2(sc, URE_USB_GPHY_CTRL,
                            URE_MCU_TYPE_USB) & URE_GPHY_PATCH_DONE)
                                break;
                        usbd_delay_ms(sc->ure_udev, 1);
                }
                if (i == 100) {
                        printf("%s: timeout waiting for loading flash\n",
                            sc->ure_dev.dv_xname);
                        return (ETIMEDOUT);
                }
        }

        return (0);
}

void
ure_reset_bmu(struct ure_softc *sc)
{
        uint8_t reg;

        if (sc->ure_flags & URE_FLAG_8157) {
                URE_OCP_CMD_SETBIT(sc, 0x2350, URE_CMD_TYPE_BMU, 0x00000002);
                URE_OCP_CMD_SETBIT(sc, 0x2360, URE_CMD_TYPE_BMU, 0x00000001);
                URE_OCP_CMD_SETBIT(sc, 0x2350, URE_CMD_TYPE_BMU, 0x00000001);
                URE_OCP_CMD_SETBIT(sc, 0x2450, URE_CMD_TYPE_BMU, 0x00000002);
                URE_OCP_CMD_SETBIT(sc, 0x2460, URE_CMD_TYPE_BMU, 0x00000001);
                URE_OCP_CMD_SETBIT(sc, 0x2450, URE_CMD_TYPE_BMU, 0x00000001);
        } else {
                reg = ure_read_1(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB);
                reg &= ~(BMU_RESET_EP_IN | BMU_RESET_EP_OUT);
                ure_write_1(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB, reg);
                reg |= BMU_RESET_EP_IN | BMU_RESET_EP_OUT;
                ure_write_1(sc, URE_USB_BMU_RESET, URE_MCU_TYPE_USB, reg);
        }
}

void
ure_disable_teredo(struct ure_softc *sc)
{
        if (sc->ure_flags &
            (URE_FLAG_8153B | URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157))
                ure_write_1(sc, URE_PLA_TEREDO_CFG, URE_MCU_TYPE_PLA, 0xff);
        else {
                URE_CLRBIT_2(sc, URE_PLA_TEREDO_CFG, URE_MCU_TYPE_PLA,
                    URE_TEREDO_SEL | URE_TEREDO_RS_EVENT_MASK |
                    URE_OOB_TEREDO_EN);
        }
        ure_write_2(sc, URE_PLA_WDT6_CTRL, URE_MCU_TYPE_PLA, URE_WDT6_SET_MODE);
        ure_write_2(sc, URE_PLA_REALWOW_TIMER, URE_MCU_TYPE_PLA, 0);
        ure_write_4(sc, URE_PLA_TEREDO_TIMER, URE_MCU_TYPE_PLA, 0);
}

int
ure_ioctl(struct ifnet *ifp, u_long cmd, caddr_t data)
{
        struct ure_softc        *sc = ifp->if_softc;
        struct ifreq            *ifr = (struct ifreq *)data;
        int                     s, error = 0;

        s = splnet();

        switch (cmd) {
        case SIOCSIFADDR:
                ifp->if_flags |= IFF_UP;
                if (!(ifp->if_flags & IFF_RUNNING))
                        ure_init(sc);
                break;

        case SIOCSIFFLAGS:
                if (ifp->if_flags & IFF_UP) {
                        if (ifp->if_flags & IFF_RUNNING)
                                error = ENETRESET;
                        else
                                ure_init(sc);
                } else {
                        if (ifp->if_flags & IFF_RUNNING)
                                ure_stop(sc);
                }
                break;

        case SIOCGIFMEDIA:
        case SIOCSIFMEDIA:
                if (sc->ure_flags &
                    (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157))
                        error = ifmedia_ioctl(ifp, ifr, &sc->ure_ifmedia, cmd);
                else
                        error = ifmedia_ioctl(ifp, ifr, &sc->ure_mii.mii_media,
                            cmd);
                break;

        default:
                error = ether_ioctl(ifp, &sc->ure_ac, cmd, data);
        }

        if (error == ENETRESET) {
                if (ifp->if_flags & IFF_RUNNING)
                        ure_iff(sc);
                error = 0;
        }

        splx(s);

        return (error);
}

int
ure_match(struct device *parent, void *match, void *aux)
{
        struct usb_attach_arg   *uaa = aux;

        if (uaa->iface == NULL || uaa->configno != 1)
                return (UMATCH_NONE);

        return (usb_lookup(ure_devs, uaa->vendor, uaa->product) != NULL ?
            UMATCH_VENDOR_PRODUCT_CONF_IFACE : UMATCH_NONE);
}

void
ure_attach(struct device *parent, struct device *self, void *aux)
{
        struct ure_softc                *sc = (struct ure_softc *)self;
        struct usb_attach_arg           *uaa = aux;
        usb_interface_descriptor_t      *id;
        usb_endpoint_descriptor_t       *ed;
        u_char                          eaddr[8]; /* 4byte padded */
        struct ifnet                    *ifp;
        int                             i, mii_flags = 0, s;
        uint16_t                        ver;

        sc->ure_udev = uaa->device;
        sc->ure_iface = uaa->iface;

        usb_init_task(&sc->ure_tick_task, ure_tick_task, sc,
            USB_TASK_TYPE_GENERIC);

        id = usbd_get_interface_descriptor(sc->ure_iface);

        for (i = 0; i < id->bNumEndpoints; i++) {
                ed = usbd_interface2endpoint_descriptor(sc->ure_iface, i);
                if (!ed) {
                        printf("%s: couldn't get ep %d\n",
                            sc->ure_dev.dv_xname, i);
                        return;
                }
                if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_IN &&
                    UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
                        sc->ure_ed[URE_ENDPT_RX] = ed->bEndpointAddress;
                } else if (UE_GET_DIR(ed->bEndpointAddress) == UE_DIR_OUT &&
                    UE_GET_XFERTYPE(ed->bmAttributes) == UE_BULK) {
                        sc->ure_ed[URE_ENDPT_TX] = ed->bEndpointAddress;
                }
        }

        sc->ure_txbufsz = URE_TX_BUFSZ;
        sc->ure_rxbufsz = URE_8153_RX_BUFSZ;

        s = splnet();

        sc->ure_phyno = 0;
        sc->ure_phy_read = ure_ocp_reg_read;
        sc->ure_phy_write = ure_ocp_reg_write;
        printf("%s: ", sc->ure_dev.dv_xname);

        ver = ure_read_2(sc, URE_PLA_TCR1, URE_MCU_TYPE_PLA) & URE_VERSION_MASK;
        switch (ver) {
        case 0x1030:
                sc->ure_flags = URE_FLAG_8157;
                sc->ure_txbufsz = URE_8156_TX_BUFSZ;
                sc->ure_phy_read = ure_rtl8157_ocp_reg_read;
                sc->ure_phy_write = ure_rtl8157_ocp_reg_write;
                printf("RTL8157 (0x1030)");
                break;
        case 0x4c00:
                sc->ure_flags = URE_FLAG_8152;
                sc->ure_rxbufsz = URE_8152_RX_BUFSZ;
                sc->ure_chip |= URE_CHIP_VER_4C00;
                printf("RTL8152 (0x4c00)");
                break;
        case 0x4c10:
                sc->ure_flags = URE_FLAG_8152;
                sc->ure_rxbufsz = URE_8152_RX_BUFSZ;
                sc->ure_chip |= URE_CHIP_VER_4C10;
                printf("RTL8152 (0x4c10)");
                break;
        case 0x5c00:
                sc->ure_chip |= URE_CHIP_VER_5C00;
                printf("RTL8153 (0x5c00)");
                break;
        case 0x5c10:
                sc->ure_chip |= URE_CHIP_VER_5C10;
                printf("RTL8153 (0x5c10)");
                break;
        case 0x5c20:
                sc->ure_chip |= URE_CHIP_VER_5C20;
                printf("RTL8153 (0x5c20)");
                break;
        case 0x5c30:
                sc->ure_chip |= URE_CHIP_VER_5C30;
                printf("RTL8153 (0x5c30)");
                break;
        case 0x6000:
                sc->ure_flags = URE_FLAG_8153B;
                printf("RTL8153B (0x6000)");
                break;
        case 0x6010:
                sc->ure_flags = URE_FLAG_8153B;
                printf("RTL8153B (0x6010)");
                break;
        case 0x7020:
                sc->ure_flags = URE_FLAG_8156;
                sc->ure_txbufsz = URE_8156_TX_BUFSZ;
                printf("RTL8156 (0x7020)");
                break;
        case 0x7030:
                sc->ure_flags = URE_FLAG_8156;
                sc->ure_txbufsz = URE_8156_TX_BUFSZ;
                printf("RTL8156 (0x7030)");
                break;
        case 0x7410:
                sc->ure_flags = URE_FLAG_8156B;
                sc->ure_txbufsz = URE_8156_TX_BUFSZ;
                printf("RTL8156B (0x7410)");
                break;
        case 0x7420:
                sc->ure_flags = URE_FLAG_8156B;
                sc->ure_chip = URE_CHIP_VER_7420;
                printf("RTL8153D (0x7420)");
                break;
        default:
                printf(", unknown ver %02x", ver);
                break;
        }

        switch (sc->ure_flags & URE_FLAG_CHIP_MASK) {
        case URE_FLAG_8152:
                ure_rtl8152_init(sc);
                break;
        case URE_FLAG_8153B:
        case URE_FLAG_8156:
        case URE_FLAG_8156B:
                if (ure_rtl8153b_init(sc) != 0)
                        return;
                break;
        case URE_FLAG_8157:
                if (ure_rtl8157_init(sc) != 0)
                        return;
                break;
        default:
                if (ure_rtl8153_init(sc) != 0)
                        return;
                break;
        }

        if (sc->ure_chip & URE_CHIP_VER_4C00)
                ure_read_mem(sc, URE_PLA_IDR, URE_MCU_TYPE_PLA, eaddr,
                    sizeof(eaddr));
        else
                ure_read_mem(sc, URE_PLA_BACKUP, URE_MCU_TYPE_PLA, eaddr,
                    sizeof(eaddr));

        printf(", address %s\n", ether_sprintf(eaddr));

        bcopy(eaddr, (char *)&sc->ure_ac.ac_enaddr, ETHER_ADDR_LEN);

        ifp = &sc->ure_ac.ac_if;
        ifp->if_softc = sc;
        strlcpy(ifp->if_xname, sc->ure_dev.dv_xname, IFNAMSIZ);
        ifp->if_flags = IFF_BROADCAST | IFF_SIMPLEX | IFF_MULTICAST;
        ifp->if_ioctl = ure_ioctl;
        ifp->if_start = ure_start;
        ifp->if_watchdog = ure_watchdog;

        ifp->if_capabilities = IFCAP_VLAN_MTU | IFCAP_CSUM_IPv4 |
            IFCAP_CSUM_TCPv4 | IFCAP_CSUM_UDPv4;

#if NVLAN > 0
        ifp->if_capabilities |= IFCAP_VLAN_HWTAGGING;
#endif

        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157)) {
                ifmedia_init(&sc->ure_ifmedia, IFM_IMASK, ure_ifmedia_upd,
                    ure_ifmedia_sts);
                ure_add_media_types(sc);
                ifmedia_add(&sc->ure_ifmedia, IFM_ETHER | IFM_AUTO, 0, NULL);
                ifmedia_set(&sc->ure_ifmedia, IFM_ETHER | IFM_AUTO);
                sc->ure_ifmedia.ifm_media = sc->ure_ifmedia.ifm_cur->ifm_media;
        } else {
                rw_init(&sc->ure_mii_lock, "uremii");

                sc->ure_mii.mii_ifp = ifp;
                sc->ure_mii.mii_readreg = ure_miibus_readreg;
                sc->ure_mii.mii_writereg = ure_miibus_writereg;
                sc->ure_mii.mii_statchg = ure_miibus_statchg;
                sc->ure_mii.mii_flags = MIIF_AUTOTSLEEP;

                ifmedia_init(&sc->ure_mii.mii_media, 0, ure_ifmedia_upd,
                    ure_ifmedia_sts);
                if (!(sc->ure_flags & URE_FLAG_8152))
                        mii_flags |= MIIF_DOPAUSE;
                mii_attach(self, &sc->ure_mii, 0xffffffff, sc->ure_phyno,
                    MII_OFFSET_ANY, mii_flags);
                if (LIST_FIRST(&sc->ure_mii.mii_phys) == NULL) {
                        ifmedia_add(&sc->ure_mii.mii_media,
                            IFM_ETHER | IFM_NONE, 0, NULL);
                        ifmedia_set(&sc->ure_mii.mii_media,
                            IFM_ETHER | IFM_NONE);
                } else
                        ifmedia_set(&sc->ure_mii.mii_media,
                            IFM_ETHER | IFM_AUTO);
        }

        if_attach(ifp);
        ether_ifattach(ifp);

        timeout_set(&sc->ure_stat_ch, ure_tick, sc);

        splx(s);
}

int
ure_detach(struct device *self, int flags)
{
        struct ure_softc        *sc = (struct ure_softc *)self;
        struct ifnet            *ifp = &sc->ure_ac.ac_if;
        int                     s;

        if (timeout_initialized(&sc->ure_stat_ch))
                timeout_del(&sc->ure_stat_ch);

        if (sc->ure_ep[URE_ENDPT_TX] != NULL)
                usbd_abort_pipe(sc->ure_ep[URE_ENDPT_TX]);
        if (sc->ure_ep[URE_ENDPT_RX] != NULL)
                usbd_abort_pipe(sc->ure_ep[URE_ENDPT_RX]);

        usb_rem_task(sc->ure_udev, &sc->ure_tick_task);

        s = splusb();

        if (--sc->ure_refcnt >= 0) {
                usb_detach_wait(&sc->ure_dev);
        }

        if (ifp->if_flags & IFF_RUNNING)
                ure_stop(sc);

        mii_detach(&sc->ure_mii, MII_PHY_ANY, MII_OFFSET_ANY);
        ifmedia_delete_instance(&sc->ure_mii.mii_media, IFM_INST_ANY);
        if (ifp->if_softc != NULL) {
                ether_ifdetach(ifp);
                if_detach(ifp);
        }

        splx(s);

        return 0;
}

void
ure_tick_task(void *xsc)
{
        struct ure_softc        *sc = xsc;
        struct mii_data         *mii;
        int                     s;

        if (sc == NULL)
                return;

        if (usbd_is_dying(sc->ure_udev))
                return;
        mii = &sc->ure_mii;

        s = splnet();
        if (sc->ure_flags & (URE_FLAG_8156 | URE_FLAG_8156B | URE_FLAG_8157))
                ure_link_state(sc);
        else {
                mii_tick(mii);
                if ((sc->ure_flags & URE_FLAG_LINK) == 0)
                        ure_miibus_statchg(&sc->ure_dev);
        }
        timeout_add_sec(&sc->ure_stat_ch, 1);
        splx(s);
}

void
ure_lock_mii(struct ure_softc *sc)
{
        sc->ure_refcnt++;
        rw_enter_write(&sc->ure_mii_lock);
}

void
ure_unlock_mii(struct ure_softc *sc)
{
        rw_exit_write(&sc->ure_mii_lock);
        if (--sc->ure_refcnt < 0)
                usb_detach_wakeup(&sc->ure_dev);
}

void
ure_rxcsum(struct ure_rxpkt *rxhdr, struct mbuf *m)
{
        uint32_t        cflags, rxvlan;

        cflags = letoh32(rxhdr->ure_csum);
        rxvlan = letoh32(rxhdr->ure_vlan);

        /* Check IP header checksum. */
        if ((rxvlan & URE_RXPKT_IPV4) && !(cflags & URE_RXPKT_IPSUMBAD))
                m->m_pkthdr.csum_flags |= M_IPV4_CSUM_IN_OK;

        /* Check TCP/UDP checksum. */
        if ((rxvlan & (URE_RXPKT_IPV4 | URE_RXPKT_IPV6)) &&
            (((rxvlan & URE_RXPKT_TCP) && !(cflags & URE_RXPKT_TCPSUMBAD)) ||
            ((rxvlan & URE_RXPKT_UDP) && !(cflags & URE_RXPKT_UDPSUMBAD))))
                m->m_pkthdr.csum_flags |= M_TCP_CSUM_IN_OK | M_UDP_CSUM_IN_OK;
#if NVLAN > 0
        if (rxvlan & URE_RXPKT_VLAN_TAG) {
                m->m_pkthdr.ether_vtag = swap16(rxvlan & URE_RXPKT_VLAN_DATA);
                m->m_flags |= M_VLANTAG;
        }
#endif
}

void
ure_rxcsum_v2(struct ure_rxpkt_v2 *rxhdr2, struct mbuf *m)
{
        uint32_t        cflags, rxvlan, vtag;

        cflags = letoh32(rxhdr2->ure_csum);
        rxvlan = letoh32(rxhdr2->ure_vlan);
        vtag = letoh32(rxhdr2->ure_pktlen);

        /* Check IP header checksum. */
        if ((cflags & (URE_RXPKT_V2_IPV4 | URE_RXPKT_V2_IPSUMBAD)) !=
            (URE_RXPKT_V2_IPV4 | URE_RXPKT_V2_IPSUMBAD))
                m->m_pkthdr.csum_flags |= M_IPV4_CSUM_IN_OK;

        /* Check TCP/UDP checksum. */
        if ((cflags & (URE_RXPKT_V2_IPV4 | URE_RXPKT_V2_IPV6)) &&
            (((cflags & (URE_RXPKT_V2_TCP | URE_RXPKT_V2_TCPSUMBAD)) ==
            URE_RXPKT_V2_TCP) ||
            ((cflags & (URE_RXPKT_V2_UDP | URE_RXPKT_V2_UDPSUMBAD)) ==
            URE_RXPKT_V2_UDP)))
                m->m_pkthdr.csum_flags |= M_TCP_CSUM_IN_OK | M_UDP_CSUM_IN_OK;
#if NVLAN > 0
        if (vtag & URE_RXPKT_V2_VLAN_TAG) {
                m->m_pkthdr.ether_vtag =
                    swap16((rxvlan >> 16) & URE_RXPKT_VLAN_DATA);
                m->m_flags |= M_VLANTAG;
        }
#endif
}

void
ure_rxeof(struct usbd_xfer *xfer, void *priv, usbd_status status)
{
        struct ure_chain        *c = (struct ure_chain *)priv;
        struct ure_softc        *sc = c->uc_sc;
        struct ifnet            *ifp = &sc->ure_ac.ac_if;
        uint32_t                total_len;

        if (usbd_is_dying(sc->ure_udev))
                return;

        if (!(ifp->if_flags & IFF_RUNNING))
                return;

        if (status != USBD_NORMAL_COMPLETION) {
                if (status == USBD_NOT_STARTED || status == USBD_CANCELLED)
                        return;
                if (usbd_ratecheck(&sc->ure_rx_notice)) {
                        printf("%s: usb errors on rx: %s\n",
                                sc->ure_dev.dv_xname, usbd_errstr(status));
                }
                if (status == USBD_STALLED)
                        usbd_clear_endpoint_stall_async(
                            sc->ure_ep[URE_ENDPT_RX]);
                goto done;
        }

        usbd_get_xfer_status(xfer, NULL, NULL, &total_len, NULL);
        DPRINTFN(3, ("received %d bytes\n", total_len));
        ure_decap(sc, c, total_len);

done:
        usbd_setup_xfer(xfer, sc->ure_ep[URE_ENDPT_RX], c, c->uc_buf,
            sc->ure_rxbufsz, USBD_SHORT_XFER_OK | USBD_NO_COPY,
            USBD_NO_TIMEOUT, ure_rxeof);
        usbd_transfer(xfer);
}

void
ure_txeof(struct usbd_xfer *xfer, void *priv, usbd_status status)
{
        struct ure_softc        *sc;
        struct ure_chain        *c;
        struct ifnet            *ifp;
        int                     s;

        c = priv;
        sc = c->uc_sc;
        ifp = &sc->ure_ac.ac_if;

        if (usbd_is_dying(sc->ure_udev))
                return;

        if (status != USBD_NORMAL_COMPLETION)
                DPRINTF(("%s: %s uc_idx=%u : %s\n", sc->ure_dev.dv_xname,
                        __func__, c->uc_idx, usbd_errstr(status)));

        s = splnet();

        c->uc_cnt = 0;
        c->uc_buflen = 0;

        SLIST_INSERT_HEAD(&sc->ure_cdata.ure_tx_free, c, uc_list);

        if (status != USBD_NORMAL_COMPLETION) {
                if (status == USBD_NOT_STARTED || status == USBD_CANCELLED) {
                        splx(s);
                        return;
                }

                ifp->if_oerrors++;
                printf("%s: usb error on tx: %s\n", sc->ure_dev.dv_xname,
                    usbd_errstr(status));

                if (status == USBD_STALLED)
                        usbd_clear_endpoint_stall_async(
                            sc->ure_ep[URE_ENDPT_TX]);
                splx(s);
                return;
        }

        ifp->if_timer = 0;
        if (ifq_is_oactive(&ifp->if_snd))
                ifq_restart(&ifp->if_snd);
        splx(s);
}

void
ure_decap(struct ure_softc *sc, struct ure_chain *c, uint32_t len)
{
        struct ifnet            *ifp = &sc->ure_ac.ac_if;
        u_char                  *buf = c->uc_buf;
        uint32_t                hdrsize;
        struct mbuf_list        ml = MBUF_LIST_INITIALIZER();
        struct mbuf             *m;
        int                     pktlen = 0, align, s;
        struct ure_rxpkt        rxhdr;
        struct ure_rxpkt_v2     rxhdr2;

        align = (sc->ure_flags & URE_FLAG_8157) ?
            URE_8157_BUF_ALIGN : URE_RX_BUF_ALIGN;
        hdrsize = (sc->ure_flags & URE_FLAG_8157) ?
            sizeof(rxhdr2) : sizeof(rxhdr);

        do {
                if (len < hdrsize) {
                        DPRINTF(("too few bytes left for a packet header\n"));
                        ifp->if_ierrors++;
                        break;
                }

                buf += roundup(pktlen, align);

                if (sc->ure_flags & URE_FLAG_8157) {
                        memcpy(&rxhdr2, buf, hdrsize);
                        pktlen =
                            letoh32(rxhdr2.ure_pktlen) & URE_RXPKT_V2_LEN_MASK;
                        pktlen >>= 17;
                } else {
                        memcpy(&rxhdr, buf, hdrsize);
                        pktlen = letoh32(rxhdr.ure_pktlen) & URE_RXPKT_LEN_MASK;
                }

                len -= hdrsize;
                DPRINTFN(4, ("next packet is %d bytes\n", pktlen));
                if (pktlen > len) {
                        DPRINTF(("not enough bytes left for next packet\n"));
                        ifp->if_ierrors++;
                        break;
                }

                len -= roundup(pktlen, align);
                buf += hdrsize;

                m = m_devget(buf, pktlen - ETHER_CRC_LEN, ETHER_ALIGN);
                if (m == NULL) {
                        DPRINTF(("unable to allocate mbuf for next packet\n"));
                        ifp->if_ierrors++;
                        break;
                }

                if (sc->ure_flags & URE_FLAG_8157)
                        ure_rxcsum_v2(&rxhdr2, m);
                else
                        ure_rxcsum(&rxhdr, m);

                ml_enqueue(&ml, m);
        } while (len > 0);

        s = splnet();
        if_input(ifp, &ml);
        splx(s);
        memset(c->uc_buf, 0, sc->ure_rxbufsz);
}

int
ure_encap_txpkt(struct ure_softc *sc, struct mbuf *m, char *buf,
    uint32_t maxlen)
{
        struct ure_txpkt        txhdr;
        struct ure_txpkt_v2     txhdr2;
        uint32_t                len, cflags = 0;

        len = (sc->ure_flags & URE_FLAG_8157) ? sizeof(txhdr2) : sizeof(txhdr);
        if (len + m->m_pkthdr.len > maxlen)
                return (-1);

        if ((m->m_pkthdr.csum_flags &
            (M_IPV4_CSUM_OUT | M_TCP_CSUM_OUT | M_UDP_CSUM_OUT)) != 0) {
                cflags |= URE_TXPKT_IPV4;
                if (m->m_pkthdr.csum_flags & M_TCP_CSUM_OUT)
                        cflags |= URE_TXPKT_TCP;
                if (m->m_pkthdr.csum_flags & M_UDP_CSUM_OUT)
                        cflags |= URE_TXPKT_UDP;
        }

#if NVLAN > 0
        if (m->m_flags & M_VLANTAG)
                cflags |= URE_TXPKT_VLAN_TAG | swap16(m->m_pkthdr.ether_vtag);
#endif

        if (sc->ure_flags & URE_FLAG_8157) {
                txhdr2.ure_cmdstat = htole32(URE_TXPKT_TX_FS | URE_TXPKT_TX_LS);
                txhdr2.ure_vlan = htole32(cflags);
                txhdr2.ure_pktlen = htole32(m->m_pkthdr.len << 4);
                txhdr2.ure_signature = htole32(URE_TXPKT_SIGNATURE);
                memcpy(buf, &txhdr2, len);
        } else {
                txhdr.ure_pktlen = htole32(m->m_pkthdr.len | URE_TXPKT_TX_FS |
                    URE_TXPKT_TX_LS);
                txhdr.ure_vlan = htole32(cflags);
                memcpy(buf, &txhdr, len);
        }

        m_copydata(m, 0, m->m_pkthdr.len, buf + len);
        len += m->m_pkthdr.len;

        return (len);
}

int
ure_encap_xfer(struct ifnet *ifp, struct ure_softc *sc, struct ure_chain *c)
{
        usbd_status     err;

        usbd_setup_xfer(c->uc_xfer, sc->ure_ep[URE_ENDPT_TX], c, c->uc_buf,
            c->uc_buflen, USBD_FORCE_SHORT_XFER | USBD_NO_COPY, 10000,
            ure_txeof);

        err = usbd_transfer(c->uc_xfer);
        if (err != USBD_IN_PROGRESS) {
                c->uc_cnt = 0;
                c->uc_buflen = 0;
                ure_stop(sc);
                return (EIO);
        }

        return (0);
}