Linux Audio

Check our new training course

Loading...
v6.8
   1/*
   2 * Copyright (c) 2007, 2008, 2009 QLogic Corporation. All rights reserved.
   3 *
   4 * This software is available to you under a choice of one of two
   5 * licenses.  You may choose to be licensed under the terms of the GNU
   6 * General Public License (GPL) Version 2, available from the file
   7 * COPYING in the main directory of this source tree, or the
   8 * OpenIB.org BSD license below:
   9 *
  10 *     Redistribution and use in source and binary forms, with or
  11 *     without modification, are permitted provided that the following
  12 *     conditions are met:
  13 *
  14 *      - Redistributions of source code must retain the above
  15 *        copyright notice, this list of conditions and the following
  16 *        disclaimer.
  17 *
  18 *      - Redistributions in binary form must reproduce the above
  19 *        copyright notice, this list of conditions and the following
  20 *        disclaimer in the documentation and/or other materials
  21 *        provided with the distribution.
  22 *
  23 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  24 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  25 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  26 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  27 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  28 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  29 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  30 * SOFTWARE.
  31 */
  32#include <linux/mm.h>
  33#include <linux/types.h>
  34#include <linux/device.h>
  35#include <linux/dmapool.h>
  36#include <linux/slab.h>
  37#include <linux/list.h>
  38#include <linux/highmem.h>
  39#include <linux/io.h>
  40#include <linux/uio.h>
  41#include <linux/rbtree.h>
  42#include <linux/spinlock.h>
  43#include <linux/delay.h>
  44
  45#include "qib.h"
  46#include "qib_user_sdma.h"
  47
  48/* minimum size of header */
  49#define QIB_USER_SDMA_MIN_HEADER_LENGTH 64
  50/* expected size of headers (for dma_pool) */
  51#define QIB_USER_SDMA_EXP_HEADER_LENGTH 64
  52/* attempt to drain the queue for 5secs */
  53#define QIB_USER_SDMA_DRAIN_TIMEOUT 250
  54
  55/*
  56 * track how many times a process open this driver.
  57 */
  58static struct rb_root qib_user_sdma_rb_root = RB_ROOT;
  59
  60struct qib_user_sdma_rb_node {
  61	struct rb_node node;
  62	int refcount;
  63	pid_t pid;
  64};
  65
  66struct qib_user_sdma_pkt {
  67	struct list_head list;  /* list element */
  68
  69	u8  tiddma;		/* if this is NEW tid-sdma */
  70	u8  largepkt;		/* this is large pkt from kmalloc */
  71	u16 frag_size;		/* frag size used by PSM */
  72	u16 index;              /* last header index or push index */
  73	u16 naddr;              /* dimension of addr (1..3) ... */
  74	u16 addrlimit;		/* addr array size */
  75	u16 tidsmidx;		/* current tidsm index */
  76	u16 tidsmcount;		/* tidsm array item count */
  77	u16 payload_size;	/* payload size so far for header */
  78	u32 bytes_togo;		/* bytes for processing */
  79	u32 counter;            /* sdma pkts queued counter for this entry */
  80	struct qib_tid_session_member *tidsm;	/* tid session member array */
  81	struct qib_user_sdma_queue *pq;	/* which pq this pkt belongs to */
  82	u64 added;              /* global descq number of entries */
  83
  84	struct {
  85		u16 offset;                     /* offset for kvaddr, addr */
  86		u16 length;                     /* length in page */
  87		u16 first_desc;			/* first desc */
  88		u16 last_desc;			/* last desc */
  89		u16 put_page;                   /* should we put_page? */
  90		u16 dma_mapped;                 /* is page dma_mapped? */
  91		u16 dma_length;			/* for dma_unmap_page() */
  92		u16 padding;
  93		struct page *page;              /* may be NULL (coherent mem) */
  94		void *kvaddr;                   /* FIXME: only for pio hack */
  95		dma_addr_t addr;
  96	} addr[4];   /* max pages, any more and we coalesce */
  97};
  98
  99struct qib_user_sdma_queue {
 100	/*
 101	 * pkts sent to dma engine are queued on this
 102	 * list head.  the type of the elements of this
 103	 * list are struct qib_user_sdma_pkt...
 104	 */
 105	struct list_head sent;
 106
 107	/*
 108	 * Because above list will be accessed by both process and
 109	 * signal handler, we need a spinlock for it.
 110	 */
 111	spinlock_t sent_lock ____cacheline_aligned_in_smp;
 112
 113	/* headers with expected length are allocated from here... */
 114	char header_cache_name[64];
 115	struct dma_pool *header_cache;
 116
 117	/* packets are allocated from the slab cache... */
 118	char pkt_slab_name[64];
 119	struct kmem_cache *pkt_slab;
 120
 121	/* as packets go on the queued queue, they are counted... */
 122	u32 counter;
 123	u32 sent_counter;
 124	/* pending packets, not sending yet */
 125	u32 num_pending;
 126	/* sending packets, not complete yet */
 127	u32 num_sending;
 128	/* global descq number of entry of last sending packet */
 129	u64 added;
 130
 131	/* dma page table */
 132	struct rb_root dma_pages_root;
 133
 134	struct qib_user_sdma_rb_node *sdma_rb_node;
 135
 136	/* protect everything above... */
 137	struct mutex lock;
 138};
 139
 140static struct qib_user_sdma_rb_node *
 141qib_user_sdma_rb_search(struct rb_root *root, pid_t pid)
 142{
 143	struct qib_user_sdma_rb_node *sdma_rb_node;
 144	struct rb_node *node = root->rb_node;
 145
 146	while (node) {
 147		sdma_rb_node = rb_entry(node, struct qib_user_sdma_rb_node,
 148					node);
 149		if (pid < sdma_rb_node->pid)
 150			node = node->rb_left;
 151		else if (pid > sdma_rb_node->pid)
 152			node = node->rb_right;
 153		else
 154			return sdma_rb_node;
 155	}
 156	return NULL;
 157}
 158
 159static int
 160qib_user_sdma_rb_insert(struct rb_root *root, struct qib_user_sdma_rb_node *new)
 161{
 162	struct rb_node **node = &(root->rb_node);
 163	struct rb_node *parent = NULL;
 164	struct qib_user_sdma_rb_node *got;
 165
 166	while (*node) {
 167		got = rb_entry(*node, struct qib_user_sdma_rb_node, node);
 168		parent = *node;
 169		if (new->pid < got->pid)
 170			node = &((*node)->rb_left);
 171		else if (new->pid > got->pid)
 172			node = &((*node)->rb_right);
 173		else
 174			return 0;
 175	}
 176
 177	rb_link_node(&new->node, parent, node);
 178	rb_insert_color(&new->node, root);
 179	return 1;
 180}
 181
 182struct qib_user_sdma_queue *
 183qib_user_sdma_queue_create(struct device *dev, int unit, int ctxt, int sctxt)
 184{
 185	struct qib_user_sdma_queue *pq =
 186		kmalloc(sizeof(struct qib_user_sdma_queue), GFP_KERNEL);
 187	struct qib_user_sdma_rb_node *sdma_rb_node;
 188
 189	if (!pq)
 190		goto done;
 191
 192	pq->counter = 0;
 193	pq->sent_counter = 0;
 194	pq->num_pending = 0;
 195	pq->num_sending = 0;
 196	pq->added = 0;
 197	pq->sdma_rb_node = NULL;
 198
 199	INIT_LIST_HEAD(&pq->sent);
 200	spin_lock_init(&pq->sent_lock);
 201	mutex_init(&pq->lock);
 202
 203	snprintf(pq->pkt_slab_name, sizeof(pq->pkt_slab_name),
 204		 "qib-user-sdma-pkts-%u-%02u.%02u", unit, ctxt, sctxt);
 205	pq->pkt_slab = kmem_cache_create(pq->pkt_slab_name,
 206					 sizeof(struct qib_user_sdma_pkt),
 207					 0, 0, NULL);
 208
 209	if (!pq->pkt_slab)
 210		goto err_kfree;
 211
 212	snprintf(pq->header_cache_name, sizeof(pq->header_cache_name),
 213		 "qib-user-sdma-headers-%u-%02u.%02u", unit, ctxt, sctxt);
 214	pq->header_cache = dma_pool_create(pq->header_cache_name,
 215					   dev,
 216					   QIB_USER_SDMA_EXP_HEADER_LENGTH,
 217					   4, 0);
 218	if (!pq->header_cache)
 219		goto err_slab;
 220
 221	pq->dma_pages_root = RB_ROOT;
 222
 223	sdma_rb_node = qib_user_sdma_rb_search(&qib_user_sdma_rb_root,
 224					current->pid);
 225	if (sdma_rb_node) {
 226		sdma_rb_node->refcount++;
 227	} else {
 
 
 228		sdma_rb_node = kmalloc(sizeof(
 229			struct qib_user_sdma_rb_node), GFP_KERNEL);
 230		if (!sdma_rb_node)
 231			goto err_rb;
 232
 233		sdma_rb_node->refcount = 1;
 234		sdma_rb_node->pid = current->pid;
 235
 236		qib_user_sdma_rb_insert(&qib_user_sdma_rb_root, sdma_rb_node);
 
 
 237	}
 238	pq->sdma_rb_node = sdma_rb_node;
 239
 240	goto done;
 241
 242err_rb:
 243	dma_pool_destroy(pq->header_cache);
 244err_slab:
 245	kmem_cache_destroy(pq->pkt_slab);
 246err_kfree:
 247	kfree(pq);
 248	pq = NULL;
 249
 250done:
 251	return pq;
 252}
 253
 254static void qib_user_sdma_init_frag(struct qib_user_sdma_pkt *pkt,
 255				    int i, u16 offset, u16 len,
 256				    u16 first_desc, u16 last_desc,
 257				    u16 put_page, u16 dma_mapped,
 258				    struct page *page, void *kvaddr,
 259				    dma_addr_t dma_addr, u16 dma_length)
 260{
 261	pkt->addr[i].offset = offset;
 262	pkt->addr[i].length = len;
 263	pkt->addr[i].first_desc = first_desc;
 264	pkt->addr[i].last_desc = last_desc;
 265	pkt->addr[i].put_page = put_page;
 266	pkt->addr[i].dma_mapped = dma_mapped;
 267	pkt->addr[i].page = page;
 268	pkt->addr[i].kvaddr = kvaddr;
 269	pkt->addr[i].addr = dma_addr;
 270	pkt->addr[i].dma_length = dma_length;
 271}
 272
 273static void *qib_user_sdma_alloc_header(struct qib_user_sdma_queue *pq,
 274				size_t len, dma_addr_t *dma_addr)
 275{
 276	void *hdr;
 277
 278	if (len == QIB_USER_SDMA_EXP_HEADER_LENGTH)
 279		hdr = dma_pool_alloc(pq->header_cache, GFP_KERNEL,
 280					     dma_addr);
 281	else
 282		hdr = NULL;
 283
 284	if (!hdr) {
 285		hdr = kmalloc(len, GFP_KERNEL);
 286		if (!hdr)
 287			return NULL;
 288
 289		*dma_addr = 0;
 290	}
 291
 292	return hdr;
 293}
 294
 295static int qib_user_sdma_page_to_frags(const struct qib_devdata *dd,
 296				       struct qib_user_sdma_queue *pq,
 297				       struct qib_user_sdma_pkt *pkt,
 298				       struct page *page, u16 put,
 299				       u16 offset, u16 len, void *kvaddr)
 300{
 301	__le16 *pbc16;
 302	void *pbcvaddr;
 303	struct qib_message_header *hdr;
 304	u16 newlen, pbclen, lastdesc, dma_mapped;
 305	u32 vcto;
 306	union qib_seqnum seqnum;
 307	dma_addr_t pbcdaddr;
 308	dma_addr_t dma_addr =
 309		dma_map_page(&dd->pcidev->dev,
 310			page, offset, len, DMA_TO_DEVICE);
 311	int ret = 0;
 312
 313	if (dma_mapping_error(&dd->pcidev->dev, dma_addr)) {
 314		/*
 315		 * dma mapping error, pkt has not managed
 316		 * this page yet, return the page here so
 317		 * the caller can ignore this page.
 318		 */
 319		if (put) {
 320			unpin_user_page(page);
 321		} else {
 322			/* coalesce case */
 
 323			__free_page(page);
 324		}
 325		ret = -ENOMEM;
 326		goto done;
 327	}
 328	offset = 0;
 329	dma_mapped = 1;
 330
 331
 332next_fragment:
 333
 334	/*
 335	 * In tid-sdma, the transfer length is restricted by
 336	 * receiver side current tid page length.
 337	 */
 338	if (pkt->tiddma && len > pkt->tidsm[pkt->tidsmidx].length)
 339		newlen = pkt->tidsm[pkt->tidsmidx].length;
 340	else
 341		newlen = len;
 342
 343	/*
 344	 * Then the transfer length is restricted by MTU.
 345	 * the last descriptor flag is determined by:
 346	 * 1. the current packet is at frag size length.
 347	 * 2. the current tid page is done if tid-sdma.
 348	 * 3. there is no more byte togo if sdma.
 349	 */
 350	lastdesc = 0;
 351	if ((pkt->payload_size + newlen) >= pkt->frag_size) {
 352		newlen = pkt->frag_size - pkt->payload_size;
 353		lastdesc = 1;
 354	} else if (pkt->tiddma) {
 355		if (newlen == pkt->tidsm[pkt->tidsmidx].length)
 356			lastdesc = 1;
 357	} else {
 358		if (newlen == pkt->bytes_togo)
 359			lastdesc = 1;
 360	}
 361
 362	/* fill the next fragment in this page */
 363	qib_user_sdma_init_frag(pkt, pkt->naddr, /* index */
 364		offset, newlen,		/* offset, len */
 365		0, lastdesc,		/* first last desc */
 366		put, dma_mapped,	/* put page, dma mapped */
 367		page, kvaddr,		/* struct page, virt addr */
 368		dma_addr, len);		/* dma addr, dma length */
 369	pkt->bytes_togo -= newlen;
 370	pkt->payload_size += newlen;
 371	pkt->naddr++;
 372	if (pkt->naddr == pkt->addrlimit) {
 373		ret = -EFAULT;
 374		goto done;
 375	}
 376
 377	/* If there is no more byte togo. (lastdesc==1) */
 378	if (pkt->bytes_togo == 0) {
 379		/* The packet is done, header is not dma mapped yet.
 380		 * it should be from kmalloc */
 381		if (!pkt->addr[pkt->index].addr) {
 382			pkt->addr[pkt->index].addr =
 383				dma_map_single(&dd->pcidev->dev,
 384					pkt->addr[pkt->index].kvaddr,
 385					pkt->addr[pkt->index].dma_length,
 386					DMA_TO_DEVICE);
 387			if (dma_mapping_error(&dd->pcidev->dev,
 388					pkt->addr[pkt->index].addr)) {
 389				ret = -ENOMEM;
 390				goto done;
 391			}
 392			pkt->addr[pkt->index].dma_mapped = 1;
 393		}
 394
 395		goto done;
 396	}
 397
 398	/* If tid-sdma, advance tid info. */
 399	if (pkt->tiddma) {
 400		pkt->tidsm[pkt->tidsmidx].length -= newlen;
 401		if (pkt->tidsm[pkt->tidsmidx].length) {
 402			pkt->tidsm[pkt->tidsmidx].offset += newlen;
 403		} else {
 404			pkt->tidsmidx++;
 405			if (pkt->tidsmidx == pkt->tidsmcount) {
 406				ret = -EFAULT;
 407				goto done;
 408			}
 409		}
 410	}
 411
 412	/*
 413	 * If this is NOT the last descriptor. (newlen==len)
 414	 * the current packet is not done yet, but the current
 415	 * send side page is done.
 416	 */
 417	if (lastdesc == 0)
 418		goto done;
 419
 420	/*
 421	 * If running this driver under PSM with message size
 422	 * fitting into one transfer unit, it is not possible
 423	 * to pass this line. otherwise, it is a buggggg.
 424	 */
 425
 426	/*
 427	 * Since the current packet is done, and there are more
 428	 * bytes togo, we need to create a new sdma header, copying
 429	 * from previous sdma header and modify both.
 430	 */
 431	pbclen = pkt->addr[pkt->index].length;
 432	pbcvaddr = qib_user_sdma_alloc_header(pq, pbclen, &pbcdaddr);
 433	if (!pbcvaddr) {
 434		ret = -ENOMEM;
 435		goto done;
 436	}
 437	/* Copy the previous sdma header to new sdma header */
 438	pbc16 = (__le16 *)pkt->addr[pkt->index].kvaddr;
 439	memcpy(pbcvaddr, pbc16, pbclen);
 440
 441	/* Modify the previous sdma header */
 442	hdr = (struct qib_message_header *)&pbc16[4];
 443
 444	/* New pbc length */
 445	pbc16[0] = cpu_to_le16(le16_to_cpu(pbc16[0])-(pkt->bytes_togo>>2));
 446
 447	/* New packet length */
 448	hdr->lrh[2] = cpu_to_be16(le16_to_cpu(pbc16[0]));
 449
 450	if (pkt->tiddma) {
 451		/* turn on the header suppression */
 452		hdr->iph.pkt_flags =
 453			cpu_to_le16(le16_to_cpu(hdr->iph.pkt_flags)|0x2);
 454		/* turn off ACK_REQ: 0x04 and EXPECTED_DONE: 0x20 */
 455		hdr->flags &= ~(0x04|0x20);
 456	} else {
 457		/* turn off extra bytes: 20-21 bits */
 458		hdr->bth[0] = cpu_to_be32(be32_to_cpu(hdr->bth[0])&0xFFCFFFFF);
 459		/* turn off ACK_REQ: 0x04 */
 460		hdr->flags &= ~(0x04);
 461	}
 462
 463	/* New kdeth checksum */
 464	vcto = le32_to_cpu(hdr->iph.ver_ctxt_tid_offset);
 465	hdr->iph.chksum = cpu_to_le16(QIB_LRH_BTH +
 466		be16_to_cpu(hdr->lrh[2]) -
 467		((vcto>>16)&0xFFFF) - (vcto&0xFFFF) -
 468		le16_to_cpu(hdr->iph.pkt_flags));
 469
 470	/* The packet is done, header is not dma mapped yet.
 471	 * it should be from kmalloc */
 472	if (!pkt->addr[pkt->index].addr) {
 473		pkt->addr[pkt->index].addr =
 474			dma_map_single(&dd->pcidev->dev,
 475				pkt->addr[pkt->index].kvaddr,
 476				pkt->addr[pkt->index].dma_length,
 477				DMA_TO_DEVICE);
 478		if (dma_mapping_error(&dd->pcidev->dev,
 479				pkt->addr[pkt->index].addr)) {
 480			ret = -ENOMEM;
 481			goto done;
 482		}
 483		pkt->addr[pkt->index].dma_mapped = 1;
 484	}
 485
 486	/* Modify the new sdma header */
 487	pbc16 = (__le16 *)pbcvaddr;
 488	hdr = (struct qib_message_header *)&pbc16[4];
 489
 490	/* New pbc length */
 491	pbc16[0] = cpu_to_le16(le16_to_cpu(pbc16[0])-(pkt->payload_size>>2));
 492
 493	/* New packet length */
 494	hdr->lrh[2] = cpu_to_be16(le16_to_cpu(pbc16[0]));
 495
 496	if (pkt->tiddma) {
 497		/* Set new tid and offset for new sdma header */
 498		hdr->iph.ver_ctxt_tid_offset = cpu_to_le32(
 499			(le32_to_cpu(hdr->iph.ver_ctxt_tid_offset)&0xFF000000) +
 500			(pkt->tidsm[pkt->tidsmidx].tid<<QLOGIC_IB_I_TID_SHIFT) +
 501			(pkt->tidsm[pkt->tidsmidx].offset>>2));
 502	} else {
 503		/* Middle protocol new packet offset */
 504		hdr->uwords[2] += pkt->payload_size;
 505	}
 506
 507	/* New kdeth checksum */
 508	vcto = le32_to_cpu(hdr->iph.ver_ctxt_tid_offset);
 509	hdr->iph.chksum = cpu_to_le16(QIB_LRH_BTH +
 510		be16_to_cpu(hdr->lrh[2]) -
 511		((vcto>>16)&0xFFFF) - (vcto&0xFFFF) -
 512		le16_to_cpu(hdr->iph.pkt_flags));
 513
 514	/* Next sequence number in new sdma header */
 515	seqnum.val = be32_to_cpu(hdr->bth[2]);
 516	if (pkt->tiddma)
 517		seqnum.seq++;
 518	else
 519		seqnum.pkt++;
 520	hdr->bth[2] = cpu_to_be32(seqnum.val);
 521
 522	/* Init new sdma header. */
 523	qib_user_sdma_init_frag(pkt, pkt->naddr, /* index */
 524		0, pbclen,		/* offset, len */
 525		1, 0,			/* first last desc */
 526		0, 0,			/* put page, dma mapped */
 527		NULL, pbcvaddr,		/* struct page, virt addr */
 528		pbcdaddr, pbclen);	/* dma addr, dma length */
 529	pkt->index = pkt->naddr;
 530	pkt->payload_size = 0;
 531	pkt->naddr++;
 532	if (pkt->naddr == pkt->addrlimit) {
 533		ret = -EFAULT;
 534		goto done;
 535	}
 536
 537	/* Prepare for next fragment in this page */
 538	if (newlen != len) {
 539		if (dma_mapped) {
 540			put = 0;
 541			dma_mapped = 0;
 542			page = NULL;
 543			kvaddr = NULL;
 544		}
 545		len -= newlen;
 546		offset += newlen;
 547
 548		goto next_fragment;
 549	}
 550
 551done:
 552	return ret;
 553}
 554
 555/* we've too many pages in the iovec, coalesce to a single page */
 556static int qib_user_sdma_coalesce(const struct qib_devdata *dd,
 557				  struct qib_user_sdma_queue *pq,
 558				  struct qib_user_sdma_pkt *pkt,
 559				  const struct iovec *iov,
 560				  unsigned long niov)
 561{
 562	int ret = 0;
 563	struct page *page = alloc_page(GFP_KERNEL);
 564	void *mpage_save;
 565	char *mpage;
 566	int i;
 567	int len = 0;
 568
 569	if (!page) {
 570		ret = -ENOMEM;
 571		goto done;
 572	}
 573
 574	mpage = page_address(page);
 575	mpage_save = mpage;
 576	for (i = 0; i < niov; i++) {
 577		int cfur;
 578
 579		cfur = copy_from_user(mpage,
 580				      iov[i].iov_base, iov[i].iov_len);
 581		if (cfur) {
 582			ret = -EFAULT;
 583			goto page_free;
 584		}
 585
 586		mpage += iov[i].iov_len;
 587		len += iov[i].iov_len;
 588	}
 589
 590	ret = qib_user_sdma_page_to_frags(dd, pq, pkt,
 591			page, 0, 0, len, mpage_save);
 592	goto done;
 593
 594page_free:
 
 595	__free_page(page);
 596done:
 597	return ret;
 598}
 599
 600/*
 601 * How many pages in this iovec element?
 602 */
 603static size_t qib_user_sdma_num_pages(const struct iovec *iov)
 604{
 605	const unsigned long addr  = (unsigned long) iov->iov_base;
 606	const unsigned long  len  = iov->iov_len;
 607	const unsigned long spage = addr & PAGE_MASK;
 608	const unsigned long epage = (addr + len - 1) & PAGE_MASK;
 609
 610	return 1 + ((epage - spage) >> PAGE_SHIFT);
 611}
 612
 613static void qib_user_sdma_free_pkt_frag(struct device *dev,
 614					struct qib_user_sdma_queue *pq,
 615					struct qib_user_sdma_pkt *pkt,
 616					int frag)
 617{
 618	const int i = frag;
 619
 620	if (pkt->addr[i].page) {
 621		/* only user data has page */
 622		if (pkt->addr[i].dma_mapped)
 623			dma_unmap_page(dev,
 624				       pkt->addr[i].addr,
 625				       pkt->addr[i].dma_length,
 626				       DMA_TO_DEVICE);
 627
 
 
 
 628		if (pkt->addr[i].put_page)
 629			unpin_user_page(pkt->addr[i].page);
 630		else
 631			__free_page(pkt->addr[i].page);
 632	} else if (pkt->addr[i].kvaddr) {
 633		/* for headers */
 634		if (pkt->addr[i].dma_mapped) {
 635			/* from kmalloc & dma mapped */
 636			dma_unmap_single(dev,
 637				       pkt->addr[i].addr,
 638				       pkt->addr[i].dma_length,
 639				       DMA_TO_DEVICE);
 640			kfree(pkt->addr[i].kvaddr);
 641		} else if (pkt->addr[i].addr) {
 642			/* free coherent mem from cache... */
 643			dma_pool_free(pq->header_cache,
 644			      pkt->addr[i].kvaddr, pkt->addr[i].addr);
 645		} else {
 646			/* from kmalloc but not dma mapped */
 647			kfree(pkt->addr[i].kvaddr);
 648		}
 649	}
 650}
 651
 652/* return number of pages pinned... */
 653static int qib_user_sdma_pin_pages(const struct qib_devdata *dd,
 654				   struct qib_user_sdma_queue *pq,
 655				   struct qib_user_sdma_pkt *pkt,
 656				   unsigned long addr, int tlen, size_t npages)
 657{
 658	struct page *pages[8];
 659	int i, j;
 660	int ret = 0;
 661
 662	while (npages) {
 663		if (npages > 8)
 664			j = 8;
 665		else
 666			j = npages;
 667
 668		ret = pin_user_pages_fast(addr, j, FOLL_LONGTERM, pages);
 669		if (ret != j) {
 670			i = 0;
 671			j = ret;
 672			ret = -ENOMEM;
 673			goto free_pages;
 674		}
 675
 676		for (i = 0; i < j; i++) {
 677			/* map the pages... */
 678			unsigned long fofs = addr & ~PAGE_MASK;
 679			int flen = ((fofs + tlen) > PAGE_SIZE) ?
 680				(PAGE_SIZE - fofs) : tlen;
 681
 682			ret = qib_user_sdma_page_to_frags(dd, pq, pkt,
 683				pages[i], 1, fofs, flen, NULL);
 684			if (ret < 0) {
 685				/* current page has beed taken
 686				 * care of inside above call.
 687				 */
 688				i++;
 689				goto free_pages;
 690			}
 691
 692			addr += flen;
 693			tlen -= flen;
 694		}
 695
 696		npages -= j;
 697	}
 698
 699	goto done;
 700
 701	/* if error, return all pages not managed by pkt */
 702free_pages:
 703	while (i < j)
 704		unpin_user_page(pages[i++]);
 705
 706done:
 707	return ret;
 708}
 709
 710static int qib_user_sdma_pin_pkt(const struct qib_devdata *dd,
 711				 struct qib_user_sdma_queue *pq,
 712				 struct qib_user_sdma_pkt *pkt,
 713				 const struct iovec *iov,
 714				 unsigned long niov)
 715{
 716	int ret = 0;
 717	unsigned long idx;
 718
 719	for (idx = 0; idx < niov; idx++) {
 720		const size_t npages = qib_user_sdma_num_pages(iov + idx);
 721		const unsigned long addr = (unsigned long) iov[idx].iov_base;
 722
 723		ret = qib_user_sdma_pin_pages(dd, pq, pkt, addr,
 724					      iov[idx].iov_len, npages);
 725		if (ret < 0)
 726			goto free_pkt;
 727	}
 728
 729	goto done;
 730
 731free_pkt:
 732	/* we need to ignore the first entry here */
 733	for (idx = 1; idx < pkt->naddr; idx++)
 734		qib_user_sdma_free_pkt_frag(&dd->pcidev->dev, pq, pkt, idx);
 735
 736	/* need to dma unmap the first entry, this is to restore to
 737	 * the original state so that caller can free the memory in
 738	 * error condition. Caller does not know if dma mapped or not*/
 739	if (pkt->addr[0].dma_mapped) {
 740		dma_unmap_single(&dd->pcidev->dev,
 741		       pkt->addr[0].addr,
 742		       pkt->addr[0].dma_length,
 743		       DMA_TO_DEVICE);
 744		pkt->addr[0].addr = 0;
 745		pkt->addr[0].dma_mapped = 0;
 746	}
 747
 748done:
 749	return ret;
 750}
 751
 752static int qib_user_sdma_init_payload(const struct qib_devdata *dd,
 753				      struct qib_user_sdma_queue *pq,
 754				      struct qib_user_sdma_pkt *pkt,
 755				      const struct iovec *iov,
 756				      unsigned long niov, int npages)
 757{
 758	int ret = 0;
 759
 760	if (pkt->frag_size == pkt->bytes_togo &&
 761			npages >= ARRAY_SIZE(pkt->addr))
 762		ret = qib_user_sdma_coalesce(dd, pq, pkt, iov, niov);
 763	else
 764		ret = qib_user_sdma_pin_pkt(dd, pq, pkt, iov, niov);
 765
 766	return ret;
 767}
 768
 769/* free a packet list -- return counter value of last packet */
 770static void qib_user_sdma_free_pkt_list(struct device *dev,
 771					struct qib_user_sdma_queue *pq,
 772					struct list_head *list)
 773{
 774	struct qib_user_sdma_pkt *pkt, *pkt_next;
 775
 776	list_for_each_entry_safe(pkt, pkt_next, list, list) {
 777		int i;
 778
 779		for (i = 0; i < pkt->naddr; i++)
 780			qib_user_sdma_free_pkt_frag(dev, pq, pkt, i);
 781
 782		if (pkt->largepkt)
 783			kfree(pkt);
 784		else
 785			kmem_cache_free(pq->pkt_slab, pkt);
 786	}
 787	INIT_LIST_HEAD(list);
 788}
 789
 790/*
 791 * copy headers, coalesce etc -- pq->lock must be held
 792 *
 793 * we queue all the packets to list, returning the
 794 * number of bytes total.  list must be empty initially,
 795 * as, if there is an error we clean it...
 796 */
 797static int qib_user_sdma_queue_pkts(const struct qib_devdata *dd,
 798				    struct qib_pportdata *ppd,
 799				    struct qib_user_sdma_queue *pq,
 800				    const struct iovec *iov,
 801				    unsigned long niov,
 802				    struct list_head *list,
 803				    int *maxpkts, int *ndesc)
 804{
 805	unsigned long idx = 0;
 806	int ret = 0;
 807	int npkts = 0;
 808	__le32 *pbc;
 809	dma_addr_t dma_addr;
 810	struct qib_user_sdma_pkt *pkt = NULL;
 811	size_t len;
 812	size_t nw;
 813	u32 counter = pq->counter;
 814	u16 frag_size;
 815
 816	while (idx < niov && npkts < *maxpkts) {
 817		const unsigned long addr = (unsigned long) iov[idx].iov_base;
 818		const unsigned long idx_save = idx;
 819		unsigned pktnw;
 820		unsigned pktnwc;
 821		int nfrags = 0;
 822		size_t npages = 0;
 823		size_t bytes_togo = 0;
 824		int tiddma = 0;
 825		int cfur;
 826
 827		len = iov[idx].iov_len;
 828		nw = len >> 2;
 829
 830		if (len < QIB_USER_SDMA_MIN_HEADER_LENGTH ||
 831		    len > PAGE_SIZE || len & 3 || addr & 3) {
 832			ret = -EINVAL;
 833			goto free_list;
 834		}
 835
 836		pbc = qib_user_sdma_alloc_header(pq, len, &dma_addr);
 837		if (!pbc) {
 838			ret = -ENOMEM;
 839			goto free_list;
 840		}
 841
 842		cfur = copy_from_user(pbc, iov[idx].iov_base, len);
 843		if (cfur) {
 844			ret = -EFAULT;
 845			goto free_pbc;
 846		}
 847
 848		/*
 849		 * This assignment is a bit strange.  it's because
 850		 * the pbc counts the number of 32 bit words in the full
 851		 * packet _except_ the first word of the pbc itself...
 852		 */
 853		pktnwc = nw - 1;
 854
 855		/*
 856		 * pktnw computation yields the number of 32 bit words
 857		 * that the caller has indicated in the PBC.  note that
 858		 * this is one less than the total number of words that
 859		 * goes to the send DMA engine as the first 32 bit word
 860		 * of the PBC itself is not counted.  Armed with this count,
 861		 * we can verify that the packet is consistent with the
 862		 * iovec lengths.
 863		 */
 864		pktnw = le32_to_cpu(*pbc) & 0xFFFF;
 865		if (pktnw < pktnwc) {
 866			ret = -EINVAL;
 867			goto free_pbc;
 868		}
 869
 870		idx++;
 871		while (pktnwc < pktnw && idx < niov) {
 872			const size_t slen = iov[idx].iov_len;
 873			const unsigned long faddr =
 874				(unsigned long) iov[idx].iov_base;
 875
 876			if (slen & 3 || faddr & 3 || !slen) {
 877				ret = -EINVAL;
 878				goto free_pbc;
 879			}
 880
 881			npages += qib_user_sdma_num_pages(&iov[idx]);
 882
 883			if (check_add_overflow(bytes_togo, slen, &bytes_togo) ||
 884			    bytes_togo > type_max(typeof(pkt->bytes_togo))) {
 885				ret = -EINVAL;
 886				goto free_pbc;
 887			}
 888			pktnwc += slen >> 2;
 889			idx++;
 890			nfrags++;
 891		}
 892
 893		if (pktnwc != pktnw) {
 894			ret = -EINVAL;
 895			goto free_pbc;
 896		}
 897
 898		frag_size = ((le32_to_cpu(*pbc))>>16) & 0xFFFF;
 899		if (((frag_size ? frag_size : bytes_togo) + len) >
 900						ppd->ibmaxlen) {
 901			ret = -EINVAL;
 902			goto free_pbc;
 903		}
 904
 905		if (frag_size) {
 906			size_t tidsmsize, n, pktsize, sz, addrlimit;
 907
 908			n = npages*((2*PAGE_SIZE/frag_size)+1);
 909			pktsize = struct_size(pkt, addr, n);
 910
 911			/*
 912			 * Determine if this is tid-sdma or just sdma.
 913			 */
 914			tiddma = (((le32_to_cpu(pbc[7])>>
 915				QLOGIC_IB_I_TID_SHIFT)&
 916				QLOGIC_IB_I_TID_MASK) !=
 917				QLOGIC_IB_I_TID_MASK);
 918
 919			if (tiddma)
 920				tidsmsize = iov[idx].iov_len;
 921			else
 922				tidsmsize = 0;
 923
 924			if (check_add_overflow(pktsize, tidsmsize, &sz)) {
 925				ret = -EINVAL;
 926				goto free_pbc;
 927			}
 928			pkt = kmalloc(sz, GFP_KERNEL);
 929			if (!pkt) {
 930				ret = -ENOMEM;
 931				goto free_pbc;
 932			}
 933			pkt->largepkt = 1;
 934			pkt->frag_size = frag_size;
 935			if (check_add_overflow(n, ARRAY_SIZE(pkt->addr),
 936					       &addrlimit) ||
 937			    addrlimit > type_max(typeof(pkt->addrlimit))) {
 938				ret = -EINVAL;
 939				goto free_pkt;
 940			}
 941			pkt->addrlimit = addrlimit;
 942
 943			if (tiddma) {
 944				char *tidsm = (char *)pkt + pktsize;
 945
 946				cfur = copy_from_user(tidsm,
 947					iov[idx].iov_base, tidsmsize);
 948				if (cfur) {
 949					ret = -EFAULT;
 950					goto free_pkt;
 951				}
 952				pkt->tidsm =
 953					(struct qib_tid_session_member *)tidsm;
 954				pkt->tidsmcount = tidsmsize/
 955					sizeof(struct qib_tid_session_member);
 956				pkt->tidsmidx = 0;
 957				idx++;
 958			}
 959
 960			/*
 961			 * pbc 'fill1' field is borrowed to pass frag size,
 962			 * we need to clear it after picking frag size, the
 963			 * hardware requires this field to be zero.
 964			 */
 965			*pbc = cpu_to_le32(le32_to_cpu(*pbc) & 0x0000FFFF);
 966		} else {
 967			pkt = kmem_cache_alloc(pq->pkt_slab, GFP_KERNEL);
 968			if (!pkt) {
 969				ret = -ENOMEM;
 970				goto free_pbc;
 971			}
 972			pkt->largepkt = 0;
 973			pkt->frag_size = bytes_togo;
 974			pkt->addrlimit = ARRAY_SIZE(pkt->addr);
 975		}
 976		pkt->bytes_togo = bytes_togo;
 977		pkt->payload_size = 0;
 978		pkt->counter = counter;
 979		pkt->tiddma = tiddma;
 980
 981		/* setup the first header */
 982		qib_user_sdma_init_frag(pkt, 0, /* index */
 983			0, len,		/* offset, len */
 984			1, 0,		/* first last desc */
 985			0, 0,		/* put page, dma mapped */
 986			NULL, pbc,	/* struct page, virt addr */
 987			dma_addr, len);	/* dma addr, dma length */
 988		pkt->index = 0;
 989		pkt->naddr = 1;
 990
 991		if (nfrags) {
 992			ret = qib_user_sdma_init_payload(dd, pq, pkt,
 993							 iov + idx_save + 1,
 994							 nfrags, npages);
 995			if (ret < 0)
 996				goto free_pkt;
 997		} else {
 998			/* since there is no payload, mark the
 999			 * header as the last desc. */
1000			pkt->addr[0].last_desc = 1;
1001
1002			if (dma_addr == 0) {
1003				/*
1004				 * the header is not dma mapped yet.
1005				 * it should be from kmalloc.
1006				 */
1007				dma_addr = dma_map_single(&dd->pcidev->dev,
1008					pbc, len, DMA_TO_DEVICE);
1009				if (dma_mapping_error(&dd->pcidev->dev,
1010								dma_addr)) {
1011					ret = -ENOMEM;
1012					goto free_pkt;
1013				}
1014				pkt->addr[0].addr = dma_addr;
1015				pkt->addr[0].dma_mapped = 1;
1016			}
1017		}
1018
1019		counter++;
1020		npkts++;
1021		pkt->pq = pq;
1022		pkt->index = 0; /* reset index for push on hw */
1023		*ndesc += pkt->naddr;
1024
1025		list_add_tail(&pkt->list, list);
1026	}
1027
1028	*maxpkts = npkts;
1029	ret = idx;
1030	goto done;
1031
1032free_pkt:
1033	if (pkt->largepkt)
1034		kfree(pkt);
1035	else
1036		kmem_cache_free(pq->pkt_slab, pkt);
1037free_pbc:
1038	if (dma_addr)
1039		dma_pool_free(pq->header_cache, pbc, dma_addr);
1040	else
1041		kfree(pbc);
1042free_list:
1043	qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, list);
1044done:
1045	return ret;
1046}
1047
1048static void qib_user_sdma_set_complete_counter(struct qib_user_sdma_queue *pq,
1049					       u32 c)
1050{
1051	pq->sent_counter = c;
1052}
1053
1054/* try to clean out queue -- needs pq->lock */
1055static int qib_user_sdma_queue_clean(struct qib_pportdata *ppd,
1056				     struct qib_user_sdma_queue *pq)
1057{
1058	struct qib_devdata *dd = ppd->dd;
1059	struct list_head free_list;
1060	struct qib_user_sdma_pkt *pkt;
1061	struct qib_user_sdma_pkt *pkt_prev;
1062	unsigned long flags;
1063	int ret = 0;
1064
1065	if (!pq->num_sending)
1066		return 0;
1067
1068	INIT_LIST_HEAD(&free_list);
1069
1070	/*
1071	 * We need this spin lock here because interrupt handler
1072	 * might modify this list in qib_user_sdma_send_desc(), also
1073	 * we can not get interrupted, otherwise it is a deadlock.
1074	 */
1075	spin_lock_irqsave(&pq->sent_lock, flags);
1076	list_for_each_entry_safe(pkt, pkt_prev, &pq->sent, list) {
1077		s64 descd = ppd->sdma_descq_removed - pkt->added;
1078
1079		if (descd < 0)
1080			break;
1081
1082		list_move_tail(&pkt->list, &free_list);
1083
1084		/* one more packet cleaned */
1085		ret++;
1086		pq->num_sending--;
1087	}
1088	spin_unlock_irqrestore(&pq->sent_lock, flags);
1089
1090	if (!list_empty(&free_list)) {
1091		u32 counter;
1092
1093		pkt = list_entry(free_list.prev,
1094				 struct qib_user_sdma_pkt, list);
1095		counter = pkt->counter;
1096
1097		qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, &free_list);
1098		qib_user_sdma_set_complete_counter(pq, counter);
1099	}
1100
1101	return ret;
1102}
1103
1104void qib_user_sdma_queue_destroy(struct qib_user_sdma_queue *pq)
1105{
1106	if (!pq)
1107		return;
1108
1109	pq->sdma_rb_node->refcount--;
1110	if (pq->sdma_rb_node->refcount == 0) {
1111		rb_erase(&pq->sdma_rb_node->node, &qib_user_sdma_rb_root);
1112		kfree(pq->sdma_rb_node);
1113	}
1114	dma_pool_destroy(pq->header_cache);
1115	kmem_cache_destroy(pq->pkt_slab);
1116	kfree(pq);
1117}
1118
1119/* clean descriptor queue, returns > 0 if some elements cleaned */
1120static int qib_user_sdma_hwqueue_clean(struct qib_pportdata *ppd)
1121{
1122	int ret;
1123	unsigned long flags;
1124
1125	spin_lock_irqsave(&ppd->sdma_lock, flags);
1126	ret = qib_sdma_make_progress(ppd);
1127	spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1128
1129	return ret;
1130}
1131
1132/* we're in close, drain packets so that we can cleanup successfully... */
1133void qib_user_sdma_queue_drain(struct qib_pportdata *ppd,
1134			       struct qib_user_sdma_queue *pq)
1135{
1136	struct qib_devdata *dd = ppd->dd;
1137	unsigned long flags;
1138	int i;
1139
1140	if (!pq)
1141		return;
1142
1143	for (i = 0; i < QIB_USER_SDMA_DRAIN_TIMEOUT; i++) {
1144		mutex_lock(&pq->lock);
1145		if (!pq->num_pending && !pq->num_sending) {
1146			mutex_unlock(&pq->lock);
1147			break;
1148		}
1149		qib_user_sdma_hwqueue_clean(ppd);
1150		qib_user_sdma_queue_clean(ppd, pq);
1151		mutex_unlock(&pq->lock);
1152		msleep(20);
1153	}
1154
1155	if (pq->num_pending || pq->num_sending) {
1156		struct qib_user_sdma_pkt *pkt;
1157		struct qib_user_sdma_pkt *pkt_prev;
1158		struct list_head free_list;
1159
1160		mutex_lock(&pq->lock);
1161		spin_lock_irqsave(&ppd->sdma_lock, flags);
1162		/*
1163		 * Since we hold sdma_lock, it is safe without sent_lock.
1164		 */
1165		if (pq->num_pending) {
1166			list_for_each_entry_safe(pkt, pkt_prev,
1167					&ppd->sdma_userpending, list) {
1168				if (pkt->pq == pq) {
1169					list_move_tail(&pkt->list, &pq->sent);
1170					pq->num_pending--;
1171					pq->num_sending++;
1172				}
1173			}
1174		}
1175		spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1176
1177		qib_dev_err(dd, "user sdma lists not empty: forcing!\n");
1178		INIT_LIST_HEAD(&free_list);
1179		list_splice_init(&pq->sent, &free_list);
1180		pq->num_sending = 0;
1181		qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, &free_list);
1182		mutex_unlock(&pq->lock);
1183	}
1184}
1185
1186static inline __le64 qib_sdma_make_desc0(u8 gen,
1187					 u64 addr, u64 dwlen, u64 dwoffset)
1188{
1189	return cpu_to_le64(/* SDmaPhyAddr[31:0] */
1190			   ((addr & 0xfffffffcULL) << 32) |
1191			   /* SDmaGeneration[1:0] */
1192			   ((gen & 3ULL) << 30) |
1193			   /* SDmaDwordCount[10:0] */
1194			   ((dwlen & 0x7ffULL) << 16) |
1195			   /* SDmaBufOffset[12:2] */
1196			   (dwoffset & 0x7ffULL));
1197}
1198
1199static inline __le64 qib_sdma_make_first_desc0(__le64 descq)
1200{
1201	return descq | cpu_to_le64(1ULL << 12);
1202}
1203
1204static inline __le64 qib_sdma_make_last_desc0(__le64 descq)
1205{
1206					      /* last */  /* dma head */
1207	return descq | cpu_to_le64(1ULL << 11 | 1ULL << 13);
1208}
1209
1210static inline __le64 qib_sdma_make_desc1(u64 addr)
1211{
1212	/* SDmaPhyAddr[47:32] */
1213	return cpu_to_le64(addr >> 32);
1214}
1215
1216static void qib_user_sdma_send_frag(struct qib_pportdata *ppd,
1217				    struct qib_user_sdma_pkt *pkt, int idx,
1218				    unsigned ofs, u16 tail, u8 gen)
1219{
1220	const u64 addr = (u64) pkt->addr[idx].addr +
1221		(u64) pkt->addr[idx].offset;
1222	const u64 dwlen = (u64) pkt->addr[idx].length / 4;
1223	__le64 *descqp;
1224	__le64 descq0;
1225
1226	descqp = &ppd->sdma_descq[tail].qw[0];
1227
1228	descq0 = qib_sdma_make_desc0(gen, addr, dwlen, ofs);
1229	if (pkt->addr[idx].first_desc)
1230		descq0 = qib_sdma_make_first_desc0(descq0);
1231	if (pkt->addr[idx].last_desc) {
1232		descq0 = qib_sdma_make_last_desc0(descq0);
1233		if (ppd->sdma_intrequest) {
1234			descq0 |= cpu_to_le64(1ULL << 15);
1235			ppd->sdma_intrequest = 0;
1236		}
1237	}
1238
1239	descqp[0] = descq0;
1240	descqp[1] = qib_sdma_make_desc1(addr);
1241}
1242
1243void qib_user_sdma_send_desc(struct qib_pportdata *ppd,
1244				struct list_head *pktlist)
1245{
1246	struct qib_devdata *dd = ppd->dd;
1247	u16 nfree, nsent;
1248	u16 tail, tail_c;
1249	u8 gen, gen_c;
1250
1251	nfree = qib_sdma_descq_freecnt(ppd);
1252	if (!nfree)
1253		return;
1254
1255retry:
1256	nsent = 0;
1257	tail_c = tail = ppd->sdma_descq_tail;
1258	gen_c = gen = ppd->sdma_generation;
1259	while (!list_empty(pktlist)) {
1260		struct qib_user_sdma_pkt *pkt =
1261			list_entry(pktlist->next, struct qib_user_sdma_pkt,
1262				   list);
1263		int i, j, c = 0;
1264		unsigned ofs = 0;
1265		u16 dtail = tail;
1266
1267		for (i = pkt->index; i < pkt->naddr && nfree; i++) {
1268			qib_user_sdma_send_frag(ppd, pkt, i, ofs, tail, gen);
1269			ofs += pkt->addr[i].length >> 2;
1270
1271			if (++tail == ppd->sdma_descq_cnt) {
1272				tail = 0;
1273				++gen;
1274				ppd->sdma_intrequest = 1;
1275			} else if (tail == (ppd->sdma_descq_cnt>>1)) {
1276				ppd->sdma_intrequest = 1;
1277			}
1278			nfree--;
1279			if (pkt->addr[i].last_desc == 0)
1280				continue;
1281
1282			/*
1283			 * If the packet is >= 2KB mtu equivalent, we
1284			 * have to use the large buffers, and have to
1285			 * mark each descriptor as part of a large
1286			 * buffer packet.
1287			 */
1288			if (ofs > dd->piosize2kmax_dwords) {
1289				for (j = pkt->index; j <= i; j++) {
1290					ppd->sdma_descq[dtail].qw[0] |=
1291						cpu_to_le64(1ULL << 14);
1292					if (++dtail == ppd->sdma_descq_cnt)
1293						dtail = 0;
1294				}
1295			}
1296			c += i + 1 - pkt->index;
1297			pkt->index = i + 1; /* index for next first */
1298			tail_c = dtail = tail;
1299			gen_c = gen;
1300			ofs = 0;  /* reset for next packet */
1301		}
1302
1303		ppd->sdma_descq_added += c;
1304		nsent += c;
1305		if (pkt->index == pkt->naddr) {
1306			pkt->added = ppd->sdma_descq_added;
1307			pkt->pq->added = pkt->added;
1308			pkt->pq->num_pending--;
1309			spin_lock(&pkt->pq->sent_lock);
1310			pkt->pq->num_sending++;
1311			list_move_tail(&pkt->list, &pkt->pq->sent);
1312			spin_unlock(&pkt->pq->sent_lock);
1313		}
1314		if (!nfree || (nsent<<2) > ppd->sdma_descq_cnt)
1315			break;
1316	}
1317
1318	/* advance the tail on the chip if necessary */
1319	if (ppd->sdma_descq_tail != tail_c) {
1320		ppd->sdma_generation = gen_c;
1321		dd->f_sdma_update_tail(ppd, tail_c);
1322	}
1323
1324	if (nfree && !list_empty(pktlist))
1325		goto retry;
1326}
1327
1328/* pq->lock must be held, get packets on the wire... */
1329static int qib_user_sdma_push_pkts(struct qib_pportdata *ppd,
1330				 struct qib_user_sdma_queue *pq,
1331				 struct list_head *pktlist, int count)
1332{
1333	unsigned long flags;
1334
1335	if (unlikely(!(ppd->lflags & QIBL_LINKACTIVE)))
1336		return -ECOMM;
1337
1338	/* non-blocking mode */
1339	if (pq->sdma_rb_node->refcount > 1) {
1340		spin_lock_irqsave(&ppd->sdma_lock, flags);
1341		if (unlikely(!__qib_sdma_running(ppd))) {
1342			spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1343			return -ECOMM;
1344		}
1345		pq->num_pending += count;
1346		list_splice_tail_init(pktlist, &ppd->sdma_userpending);
1347		qib_user_sdma_send_desc(ppd, &ppd->sdma_userpending);
1348		spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1349		return 0;
1350	}
1351
1352	/* In this case, descriptors from this process are not
1353	 * linked to ppd pending queue, interrupt handler
1354	 * won't update this process, it is OK to directly
1355	 * modify without sdma lock.
1356	 */
1357
1358
1359	pq->num_pending += count;
1360	/*
1361	 * Blocking mode for single rail process, we must
1362	 * release/regain sdma_lock to give other process
1363	 * chance to make progress. This is important for
1364	 * performance.
1365	 */
1366	do {
1367		spin_lock_irqsave(&ppd->sdma_lock, flags);
1368		if (unlikely(!__qib_sdma_running(ppd))) {
1369			spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1370			return -ECOMM;
1371		}
1372		qib_user_sdma_send_desc(ppd, pktlist);
1373		if (!list_empty(pktlist))
1374			qib_sdma_make_progress(ppd);
1375		spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1376	} while (!list_empty(pktlist));
1377
1378	return 0;
1379}
1380
1381int qib_user_sdma_writev(struct qib_ctxtdata *rcd,
1382			 struct qib_user_sdma_queue *pq,
1383			 const struct iovec *iov,
1384			 unsigned long dim)
1385{
1386	struct qib_devdata *dd = rcd->dd;
1387	struct qib_pportdata *ppd = rcd->ppd;
1388	int ret = 0;
1389	struct list_head list;
1390	int npkts = 0;
1391
1392	INIT_LIST_HEAD(&list);
1393
1394	mutex_lock(&pq->lock);
1395
1396	/* why not -ECOMM like qib_user_sdma_push_pkts() below? */
1397	if (!qib_sdma_running(ppd))
1398		goto done_unlock;
1399
1400	/* if I have packets not complete yet */
1401	if (pq->added > ppd->sdma_descq_removed)
1402		qib_user_sdma_hwqueue_clean(ppd);
1403	/* if I have complete packets to be freed */
1404	if (pq->num_sending)
1405		qib_user_sdma_queue_clean(ppd, pq);
1406
1407	while (dim) {
1408		int mxp = 1;
1409		int ndesc = 0;
1410
1411		ret = qib_user_sdma_queue_pkts(dd, ppd, pq,
1412				iov, dim, &list, &mxp, &ndesc);
1413		if (ret < 0)
1414			goto done_unlock;
1415		else {
1416			dim -= ret;
1417			iov += ret;
1418		}
1419
1420		/* force packets onto the sdma hw queue... */
1421		if (!list_empty(&list)) {
1422			/*
1423			 * Lazily clean hw queue.
1424			 */
1425			if (qib_sdma_descq_freecnt(ppd) < ndesc) {
1426				qib_user_sdma_hwqueue_clean(ppd);
1427				if (pq->num_sending)
1428					qib_user_sdma_queue_clean(ppd, pq);
1429			}
1430
1431			ret = qib_user_sdma_push_pkts(ppd, pq, &list, mxp);
1432			if (ret < 0)
1433				goto done_unlock;
1434			else {
1435				npkts += mxp;
1436				pq->counter += mxp;
1437			}
1438		}
1439	}
1440
1441done_unlock:
1442	if (!list_empty(&list))
1443		qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, &list);
1444	mutex_unlock(&pq->lock);
1445
1446	return (ret < 0) ? ret : npkts;
1447}
1448
1449int qib_user_sdma_make_progress(struct qib_pportdata *ppd,
1450				struct qib_user_sdma_queue *pq)
1451{
1452	int ret = 0;
1453
1454	mutex_lock(&pq->lock);
1455	qib_user_sdma_hwqueue_clean(ppd);
1456	ret = qib_user_sdma_queue_clean(ppd, pq);
1457	mutex_unlock(&pq->lock);
1458
1459	return ret;
1460}
1461
1462u32 qib_user_sdma_complete_counter(const struct qib_user_sdma_queue *pq)
1463{
1464	return pq ? pq->sent_counter : 0;
1465}
1466
1467u32 qib_user_sdma_inflight_counter(struct qib_user_sdma_queue *pq)
1468{
1469	return pq ? pq->counter : 0;
1470}
v4.17
   1/*
   2 * Copyright (c) 2007, 2008, 2009 QLogic Corporation. All rights reserved.
   3 *
   4 * This software is available to you under a choice of one of two
   5 * licenses.  You may choose to be licensed under the terms of the GNU
   6 * General Public License (GPL) Version 2, available from the file
   7 * COPYING in the main directory of this source tree, or the
   8 * OpenIB.org BSD license below:
   9 *
  10 *     Redistribution and use in source and binary forms, with or
  11 *     without modification, are permitted provided that the following
  12 *     conditions are met:
  13 *
  14 *      - Redistributions of source code must retain the above
  15 *        copyright notice, this list of conditions and the following
  16 *        disclaimer.
  17 *
  18 *      - Redistributions in binary form must reproduce the above
  19 *        copyright notice, this list of conditions and the following
  20 *        disclaimer in the documentation and/or other materials
  21 *        provided with the distribution.
  22 *
  23 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  24 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  25 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  26 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  27 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  28 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  29 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  30 * SOFTWARE.
  31 */
  32#include <linux/mm.h>
  33#include <linux/types.h>
  34#include <linux/device.h>
  35#include <linux/dmapool.h>
  36#include <linux/slab.h>
  37#include <linux/list.h>
  38#include <linux/highmem.h>
  39#include <linux/io.h>
  40#include <linux/uio.h>
  41#include <linux/rbtree.h>
  42#include <linux/spinlock.h>
  43#include <linux/delay.h>
  44
  45#include "qib.h"
  46#include "qib_user_sdma.h"
  47
  48/* minimum size of header */
  49#define QIB_USER_SDMA_MIN_HEADER_LENGTH 64
  50/* expected size of headers (for dma_pool) */
  51#define QIB_USER_SDMA_EXP_HEADER_LENGTH 64
  52/* attempt to drain the queue for 5secs */
  53#define QIB_USER_SDMA_DRAIN_TIMEOUT 250
  54
  55/*
  56 * track how many times a process open this driver.
  57 */
  58static struct rb_root qib_user_sdma_rb_root = RB_ROOT;
  59
  60struct qib_user_sdma_rb_node {
  61	struct rb_node node;
  62	int refcount;
  63	pid_t pid;
  64};
  65
  66struct qib_user_sdma_pkt {
  67	struct list_head list;  /* list element */
  68
  69	u8  tiddma;		/* if this is NEW tid-sdma */
  70	u8  largepkt;		/* this is large pkt from kmalloc */
  71	u16 frag_size;		/* frag size used by PSM */
  72	u16 index;              /* last header index or push index */
  73	u16 naddr;              /* dimension of addr (1..3) ... */
  74	u16 addrlimit;		/* addr array size */
  75	u16 tidsmidx;		/* current tidsm index */
  76	u16 tidsmcount;		/* tidsm array item count */
  77	u16 payload_size;	/* payload size so far for header */
  78	u32 bytes_togo;		/* bytes for processing */
  79	u32 counter;            /* sdma pkts queued counter for this entry */
  80	struct qib_tid_session_member *tidsm;	/* tid session member array */
  81	struct qib_user_sdma_queue *pq;	/* which pq this pkt belongs to */
  82	u64 added;              /* global descq number of entries */
  83
  84	struct {
  85		u16 offset;                     /* offset for kvaddr, addr */
  86		u16 length;                     /* length in page */
  87		u16 first_desc;			/* first desc */
  88		u16 last_desc;			/* last desc */
  89		u16 put_page;                   /* should we put_page? */
  90		u16 dma_mapped;                 /* is page dma_mapped? */
  91		u16 dma_length;			/* for dma_unmap_page() */
  92		u16 padding;
  93		struct page *page;              /* may be NULL (coherent mem) */
  94		void *kvaddr;                   /* FIXME: only for pio hack */
  95		dma_addr_t addr;
  96	} addr[4];   /* max pages, any more and we coalesce */
  97};
  98
  99struct qib_user_sdma_queue {
 100	/*
 101	 * pkts sent to dma engine are queued on this
 102	 * list head.  the type of the elements of this
 103	 * list are struct qib_user_sdma_pkt...
 104	 */
 105	struct list_head sent;
 106
 107	/*
 108	 * Because above list will be accessed by both process and
 109	 * signal handler, we need a spinlock for it.
 110	 */
 111	spinlock_t sent_lock ____cacheline_aligned_in_smp;
 112
 113	/* headers with expected length are allocated from here... */
 114	char header_cache_name[64];
 115	struct dma_pool *header_cache;
 116
 117	/* packets are allocated from the slab cache... */
 118	char pkt_slab_name[64];
 119	struct kmem_cache *pkt_slab;
 120
 121	/* as packets go on the queued queue, they are counted... */
 122	u32 counter;
 123	u32 sent_counter;
 124	/* pending packets, not sending yet */
 125	u32 num_pending;
 126	/* sending packets, not complete yet */
 127	u32 num_sending;
 128	/* global descq number of entry of last sending packet */
 129	u64 added;
 130
 131	/* dma page table */
 132	struct rb_root dma_pages_root;
 133
 134	struct qib_user_sdma_rb_node *sdma_rb_node;
 135
 136	/* protect everything above... */
 137	struct mutex lock;
 138};
 139
 140static struct qib_user_sdma_rb_node *
 141qib_user_sdma_rb_search(struct rb_root *root, pid_t pid)
 142{
 143	struct qib_user_sdma_rb_node *sdma_rb_node;
 144	struct rb_node *node = root->rb_node;
 145
 146	while (node) {
 147		sdma_rb_node = rb_entry(node, struct qib_user_sdma_rb_node,
 148					node);
 149		if (pid < sdma_rb_node->pid)
 150			node = node->rb_left;
 151		else if (pid > sdma_rb_node->pid)
 152			node = node->rb_right;
 153		else
 154			return sdma_rb_node;
 155	}
 156	return NULL;
 157}
 158
 159static int
 160qib_user_sdma_rb_insert(struct rb_root *root, struct qib_user_sdma_rb_node *new)
 161{
 162	struct rb_node **node = &(root->rb_node);
 163	struct rb_node *parent = NULL;
 164	struct qib_user_sdma_rb_node *got;
 165
 166	while (*node) {
 167		got = rb_entry(*node, struct qib_user_sdma_rb_node, node);
 168		parent = *node;
 169		if (new->pid < got->pid)
 170			node = &((*node)->rb_left);
 171		else if (new->pid > got->pid)
 172			node = &((*node)->rb_right);
 173		else
 174			return 0;
 175	}
 176
 177	rb_link_node(&new->node, parent, node);
 178	rb_insert_color(&new->node, root);
 179	return 1;
 180}
 181
 182struct qib_user_sdma_queue *
 183qib_user_sdma_queue_create(struct device *dev, int unit, int ctxt, int sctxt)
 184{
 185	struct qib_user_sdma_queue *pq =
 186		kmalloc(sizeof(struct qib_user_sdma_queue), GFP_KERNEL);
 187	struct qib_user_sdma_rb_node *sdma_rb_node;
 188
 189	if (!pq)
 190		goto done;
 191
 192	pq->counter = 0;
 193	pq->sent_counter = 0;
 194	pq->num_pending = 0;
 195	pq->num_sending = 0;
 196	pq->added = 0;
 197	pq->sdma_rb_node = NULL;
 198
 199	INIT_LIST_HEAD(&pq->sent);
 200	spin_lock_init(&pq->sent_lock);
 201	mutex_init(&pq->lock);
 202
 203	snprintf(pq->pkt_slab_name, sizeof(pq->pkt_slab_name),
 204		 "qib-user-sdma-pkts-%u-%02u.%02u", unit, ctxt, sctxt);
 205	pq->pkt_slab = kmem_cache_create(pq->pkt_slab_name,
 206					 sizeof(struct qib_user_sdma_pkt),
 207					 0, 0, NULL);
 208
 209	if (!pq->pkt_slab)
 210		goto err_kfree;
 211
 212	snprintf(pq->header_cache_name, sizeof(pq->header_cache_name),
 213		 "qib-user-sdma-headers-%u-%02u.%02u", unit, ctxt, sctxt);
 214	pq->header_cache = dma_pool_create(pq->header_cache_name,
 215					   dev,
 216					   QIB_USER_SDMA_EXP_HEADER_LENGTH,
 217					   4, 0);
 218	if (!pq->header_cache)
 219		goto err_slab;
 220
 221	pq->dma_pages_root = RB_ROOT;
 222
 223	sdma_rb_node = qib_user_sdma_rb_search(&qib_user_sdma_rb_root,
 224					current->pid);
 225	if (sdma_rb_node) {
 226		sdma_rb_node->refcount++;
 227	} else {
 228		int ret;
 229
 230		sdma_rb_node = kmalloc(sizeof(
 231			struct qib_user_sdma_rb_node), GFP_KERNEL);
 232		if (!sdma_rb_node)
 233			goto err_rb;
 234
 235		sdma_rb_node->refcount = 1;
 236		sdma_rb_node->pid = current->pid;
 237
 238		ret = qib_user_sdma_rb_insert(&qib_user_sdma_rb_root,
 239					sdma_rb_node);
 240		BUG_ON(ret == 0);
 241	}
 242	pq->sdma_rb_node = sdma_rb_node;
 243
 244	goto done;
 245
 246err_rb:
 247	dma_pool_destroy(pq->header_cache);
 248err_slab:
 249	kmem_cache_destroy(pq->pkt_slab);
 250err_kfree:
 251	kfree(pq);
 252	pq = NULL;
 253
 254done:
 255	return pq;
 256}
 257
 258static void qib_user_sdma_init_frag(struct qib_user_sdma_pkt *pkt,
 259				    int i, u16 offset, u16 len,
 260				    u16 first_desc, u16 last_desc,
 261				    u16 put_page, u16 dma_mapped,
 262				    struct page *page, void *kvaddr,
 263				    dma_addr_t dma_addr, u16 dma_length)
 264{
 265	pkt->addr[i].offset = offset;
 266	pkt->addr[i].length = len;
 267	pkt->addr[i].first_desc = first_desc;
 268	pkt->addr[i].last_desc = last_desc;
 269	pkt->addr[i].put_page = put_page;
 270	pkt->addr[i].dma_mapped = dma_mapped;
 271	pkt->addr[i].page = page;
 272	pkt->addr[i].kvaddr = kvaddr;
 273	pkt->addr[i].addr = dma_addr;
 274	pkt->addr[i].dma_length = dma_length;
 275}
 276
 277static void *qib_user_sdma_alloc_header(struct qib_user_sdma_queue *pq,
 278				size_t len, dma_addr_t *dma_addr)
 279{
 280	void *hdr;
 281
 282	if (len == QIB_USER_SDMA_EXP_HEADER_LENGTH)
 283		hdr = dma_pool_alloc(pq->header_cache, GFP_KERNEL,
 284					     dma_addr);
 285	else
 286		hdr = NULL;
 287
 288	if (!hdr) {
 289		hdr = kmalloc(len, GFP_KERNEL);
 290		if (!hdr)
 291			return NULL;
 292
 293		*dma_addr = 0;
 294	}
 295
 296	return hdr;
 297}
 298
 299static int qib_user_sdma_page_to_frags(const struct qib_devdata *dd,
 300				       struct qib_user_sdma_queue *pq,
 301				       struct qib_user_sdma_pkt *pkt,
 302				       struct page *page, u16 put,
 303				       u16 offset, u16 len, void *kvaddr)
 304{
 305	__le16 *pbc16;
 306	void *pbcvaddr;
 307	struct qib_message_header *hdr;
 308	u16 newlen, pbclen, lastdesc, dma_mapped;
 309	u32 vcto;
 310	union qib_seqnum seqnum;
 311	dma_addr_t pbcdaddr;
 312	dma_addr_t dma_addr =
 313		dma_map_page(&dd->pcidev->dev,
 314			page, offset, len, DMA_TO_DEVICE);
 315	int ret = 0;
 316
 317	if (dma_mapping_error(&dd->pcidev->dev, dma_addr)) {
 318		/*
 319		 * dma mapping error, pkt has not managed
 320		 * this page yet, return the page here so
 321		 * the caller can ignore this page.
 322		 */
 323		if (put) {
 324			put_page(page);
 325		} else {
 326			/* coalesce case */
 327			kunmap(page);
 328			__free_page(page);
 329		}
 330		ret = -ENOMEM;
 331		goto done;
 332	}
 333	offset = 0;
 334	dma_mapped = 1;
 335
 336
 337next_fragment:
 338
 339	/*
 340	 * In tid-sdma, the transfer length is restricted by
 341	 * receiver side current tid page length.
 342	 */
 343	if (pkt->tiddma && len > pkt->tidsm[pkt->tidsmidx].length)
 344		newlen = pkt->tidsm[pkt->tidsmidx].length;
 345	else
 346		newlen = len;
 347
 348	/*
 349	 * Then the transfer length is restricted by MTU.
 350	 * the last descriptor flag is determined by:
 351	 * 1. the current packet is at frag size length.
 352	 * 2. the current tid page is done if tid-sdma.
 353	 * 3. there is no more byte togo if sdma.
 354	 */
 355	lastdesc = 0;
 356	if ((pkt->payload_size + newlen) >= pkt->frag_size) {
 357		newlen = pkt->frag_size - pkt->payload_size;
 358		lastdesc = 1;
 359	} else if (pkt->tiddma) {
 360		if (newlen == pkt->tidsm[pkt->tidsmidx].length)
 361			lastdesc = 1;
 362	} else {
 363		if (newlen == pkt->bytes_togo)
 364			lastdesc = 1;
 365	}
 366
 367	/* fill the next fragment in this page */
 368	qib_user_sdma_init_frag(pkt, pkt->naddr, /* index */
 369		offset, newlen,		/* offset, len */
 370		0, lastdesc,		/* first last desc */
 371		put, dma_mapped,	/* put page, dma mapped */
 372		page, kvaddr,		/* struct page, virt addr */
 373		dma_addr, len);		/* dma addr, dma length */
 374	pkt->bytes_togo -= newlen;
 375	pkt->payload_size += newlen;
 376	pkt->naddr++;
 377	if (pkt->naddr == pkt->addrlimit) {
 378		ret = -EFAULT;
 379		goto done;
 380	}
 381
 382	/* If there is no more byte togo. (lastdesc==1) */
 383	if (pkt->bytes_togo == 0) {
 384		/* The packet is done, header is not dma mapped yet.
 385		 * it should be from kmalloc */
 386		if (!pkt->addr[pkt->index].addr) {
 387			pkt->addr[pkt->index].addr =
 388				dma_map_single(&dd->pcidev->dev,
 389					pkt->addr[pkt->index].kvaddr,
 390					pkt->addr[pkt->index].dma_length,
 391					DMA_TO_DEVICE);
 392			if (dma_mapping_error(&dd->pcidev->dev,
 393					pkt->addr[pkt->index].addr)) {
 394				ret = -ENOMEM;
 395				goto done;
 396			}
 397			pkt->addr[pkt->index].dma_mapped = 1;
 398		}
 399
 400		goto done;
 401	}
 402
 403	/* If tid-sdma, advance tid info. */
 404	if (pkt->tiddma) {
 405		pkt->tidsm[pkt->tidsmidx].length -= newlen;
 406		if (pkt->tidsm[pkt->tidsmidx].length) {
 407			pkt->tidsm[pkt->tidsmidx].offset += newlen;
 408		} else {
 409			pkt->tidsmidx++;
 410			if (pkt->tidsmidx == pkt->tidsmcount) {
 411				ret = -EFAULT;
 412				goto done;
 413			}
 414		}
 415	}
 416
 417	/*
 418	 * If this is NOT the last descriptor. (newlen==len)
 419	 * the current packet is not done yet, but the current
 420	 * send side page is done.
 421	 */
 422	if (lastdesc == 0)
 423		goto done;
 424
 425	/*
 426	 * If running this driver under PSM with message size
 427	 * fitting into one transfer unit, it is not possible
 428	 * to pass this line. otherwise, it is a buggggg.
 429	 */
 430
 431	/*
 432	 * Since the current packet is done, and there are more
 433	 * bytes togo, we need to create a new sdma header, copying
 434	 * from previous sdma header and modify both.
 435	 */
 436	pbclen = pkt->addr[pkt->index].length;
 437	pbcvaddr = qib_user_sdma_alloc_header(pq, pbclen, &pbcdaddr);
 438	if (!pbcvaddr) {
 439		ret = -ENOMEM;
 440		goto done;
 441	}
 442	/* Copy the previous sdma header to new sdma header */
 443	pbc16 = (__le16 *)pkt->addr[pkt->index].kvaddr;
 444	memcpy(pbcvaddr, pbc16, pbclen);
 445
 446	/* Modify the previous sdma header */
 447	hdr = (struct qib_message_header *)&pbc16[4];
 448
 449	/* New pbc length */
 450	pbc16[0] = cpu_to_le16(le16_to_cpu(pbc16[0])-(pkt->bytes_togo>>2));
 451
 452	/* New packet length */
 453	hdr->lrh[2] = cpu_to_be16(le16_to_cpu(pbc16[0]));
 454
 455	if (pkt->tiddma) {
 456		/* turn on the header suppression */
 457		hdr->iph.pkt_flags =
 458			cpu_to_le16(le16_to_cpu(hdr->iph.pkt_flags)|0x2);
 459		/* turn off ACK_REQ: 0x04 and EXPECTED_DONE: 0x20 */
 460		hdr->flags &= ~(0x04|0x20);
 461	} else {
 462		/* turn off extra bytes: 20-21 bits */
 463		hdr->bth[0] = cpu_to_be32(be32_to_cpu(hdr->bth[0])&0xFFCFFFFF);
 464		/* turn off ACK_REQ: 0x04 */
 465		hdr->flags &= ~(0x04);
 466	}
 467
 468	/* New kdeth checksum */
 469	vcto = le32_to_cpu(hdr->iph.ver_ctxt_tid_offset);
 470	hdr->iph.chksum = cpu_to_le16(QIB_LRH_BTH +
 471		be16_to_cpu(hdr->lrh[2]) -
 472		((vcto>>16)&0xFFFF) - (vcto&0xFFFF) -
 473		le16_to_cpu(hdr->iph.pkt_flags));
 474
 475	/* The packet is done, header is not dma mapped yet.
 476	 * it should be from kmalloc */
 477	if (!pkt->addr[pkt->index].addr) {
 478		pkt->addr[pkt->index].addr =
 479			dma_map_single(&dd->pcidev->dev,
 480				pkt->addr[pkt->index].kvaddr,
 481				pkt->addr[pkt->index].dma_length,
 482				DMA_TO_DEVICE);
 483		if (dma_mapping_error(&dd->pcidev->dev,
 484				pkt->addr[pkt->index].addr)) {
 485			ret = -ENOMEM;
 486			goto done;
 487		}
 488		pkt->addr[pkt->index].dma_mapped = 1;
 489	}
 490
 491	/* Modify the new sdma header */
 492	pbc16 = (__le16 *)pbcvaddr;
 493	hdr = (struct qib_message_header *)&pbc16[4];
 494
 495	/* New pbc length */
 496	pbc16[0] = cpu_to_le16(le16_to_cpu(pbc16[0])-(pkt->payload_size>>2));
 497
 498	/* New packet length */
 499	hdr->lrh[2] = cpu_to_be16(le16_to_cpu(pbc16[0]));
 500
 501	if (pkt->tiddma) {
 502		/* Set new tid and offset for new sdma header */
 503		hdr->iph.ver_ctxt_tid_offset = cpu_to_le32(
 504			(le32_to_cpu(hdr->iph.ver_ctxt_tid_offset)&0xFF000000) +
 505			(pkt->tidsm[pkt->tidsmidx].tid<<QLOGIC_IB_I_TID_SHIFT) +
 506			(pkt->tidsm[pkt->tidsmidx].offset>>2));
 507	} else {
 508		/* Middle protocol new packet offset */
 509		hdr->uwords[2] += pkt->payload_size;
 510	}
 511
 512	/* New kdeth checksum */
 513	vcto = le32_to_cpu(hdr->iph.ver_ctxt_tid_offset);
 514	hdr->iph.chksum = cpu_to_le16(QIB_LRH_BTH +
 515		be16_to_cpu(hdr->lrh[2]) -
 516		((vcto>>16)&0xFFFF) - (vcto&0xFFFF) -
 517		le16_to_cpu(hdr->iph.pkt_flags));
 518
 519	/* Next sequence number in new sdma header */
 520	seqnum.val = be32_to_cpu(hdr->bth[2]);
 521	if (pkt->tiddma)
 522		seqnum.seq++;
 523	else
 524		seqnum.pkt++;
 525	hdr->bth[2] = cpu_to_be32(seqnum.val);
 526
 527	/* Init new sdma header. */
 528	qib_user_sdma_init_frag(pkt, pkt->naddr, /* index */
 529		0, pbclen,		/* offset, len */
 530		1, 0,			/* first last desc */
 531		0, 0,			/* put page, dma mapped */
 532		NULL, pbcvaddr,		/* struct page, virt addr */
 533		pbcdaddr, pbclen);	/* dma addr, dma length */
 534	pkt->index = pkt->naddr;
 535	pkt->payload_size = 0;
 536	pkt->naddr++;
 537	if (pkt->naddr == pkt->addrlimit) {
 538		ret = -EFAULT;
 539		goto done;
 540	}
 541
 542	/* Prepare for next fragment in this page */
 543	if (newlen != len) {
 544		if (dma_mapped) {
 545			put = 0;
 546			dma_mapped = 0;
 547			page = NULL;
 548			kvaddr = NULL;
 549		}
 550		len -= newlen;
 551		offset += newlen;
 552
 553		goto next_fragment;
 554	}
 555
 556done:
 557	return ret;
 558}
 559
 560/* we've too many pages in the iovec, coalesce to a single page */
 561static int qib_user_sdma_coalesce(const struct qib_devdata *dd,
 562				  struct qib_user_sdma_queue *pq,
 563				  struct qib_user_sdma_pkt *pkt,
 564				  const struct iovec *iov,
 565				  unsigned long niov)
 566{
 567	int ret = 0;
 568	struct page *page = alloc_page(GFP_KERNEL);
 569	void *mpage_save;
 570	char *mpage;
 571	int i;
 572	int len = 0;
 573
 574	if (!page) {
 575		ret = -ENOMEM;
 576		goto done;
 577	}
 578
 579	mpage = kmap(page);
 580	mpage_save = mpage;
 581	for (i = 0; i < niov; i++) {
 582		int cfur;
 583
 584		cfur = copy_from_user(mpage,
 585				      iov[i].iov_base, iov[i].iov_len);
 586		if (cfur) {
 587			ret = -EFAULT;
 588			goto free_unmap;
 589		}
 590
 591		mpage += iov[i].iov_len;
 592		len += iov[i].iov_len;
 593	}
 594
 595	ret = qib_user_sdma_page_to_frags(dd, pq, pkt,
 596			page, 0, 0, len, mpage_save);
 597	goto done;
 598
 599free_unmap:
 600	kunmap(page);
 601	__free_page(page);
 602done:
 603	return ret;
 604}
 605
 606/*
 607 * How many pages in this iovec element?
 608 */
 609static int qib_user_sdma_num_pages(const struct iovec *iov)
 610{
 611	const unsigned long addr  = (unsigned long) iov->iov_base;
 612	const unsigned long  len  = iov->iov_len;
 613	const unsigned long spage = addr & PAGE_MASK;
 614	const unsigned long epage = (addr + len - 1) & PAGE_MASK;
 615
 616	return 1 + ((epage - spage) >> PAGE_SHIFT);
 617}
 618
 619static void qib_user_sdma_free_pkt_frag(struct device *dev,
 620					struct qib_user_sdma_queue *pq,
 621					struct qib_user_sdma_pkt *pkt,
 622					int frag)
 623{
 624	const int i = frag;
 625
 626	if (pkt->addr[i].page) {
 627		/* only user data has page */
 628		if (pkt->addr[i].dma_mapped)
 629			dma_unmap_page(dev,
 630				       pkt->addr[i].addr,
 631				       pkt->addr[i].dma_length,
 632				       DMA_TO_DEVICE);
 633
 634		if (pkt->addr[i].kvaddr)
 635			kunmap(pkt->addr[i].page);
 636
 637		if (pkt->addr[i].put_page)
 638			put_page(pkt->addr[i].page);
 639		else
 640			__free_page(pkt->addr[i].page);
 641	} else if (pkt->addr[i].kvaddr) {
 642		/* for headers */
 643		if (pkt->addr[i].dma_mapped) {
 644			/* from kmalloc & dma mapped */
 645			dma_unmap_single(dev,
 646				       pkt->addr[i].addr,
 647				       pkt->addr[i].dma_length,
 648				       DMA_TO_DEVICE);
 649			kfree(pkt->addr[i].kvaddr);
 650		} else if (pkt->addr[i].addr) {
 651			/* free coherent mem from cache... */
 652			dma_pool_free(pq->header_cache,
 653			      pkt->addr[i].kvaddr, pkt->addr[i].addr);
 654		} else {
 655			/* from kmalloc but not dma mapped */
 656			kfree(pkt->addr[i].kvaddr);
 657		}
 658	}
 659}
 660
 661/* return number of pages pinned... */
 662static int qib_user_sdma_pin_pages(const struct qib_devdata *dd,
 663				   struct qib_user_sdma_queue *pq,
 664				   struct qib_user_sdma_pkt *pkt,
 665				   unsigned long addr, int tlen, int npages)
 666{
 667	struct page *pages[8];
 668	int i, j;
 669	int ret = 0;
 670
 671	while (npages) {
 672		if (npages > 8)
 673			j = 8;
 674		else
 675			j = npages;
 676
 677		ret = get_user_pages_fast(addr, j, 0, pages);
 678		if (ret != j) {
 679			i = 0;
 680			j = ret;
 681			ret = -ENOMEM;
 682			goto free_pages;
 683		}
 684
 685		for (i = 0; i < j; i++) {
 686			/* map the pages... */
 687			unsigned long fofs = addr & ~PAGE_MASK;
 688			int flen = ((fofs + tlen) > PAGE_SIZE) ?
 689				(PAGE_SIZE - fofs) : tlen;
 690
 691			ret = qib_user_sdma_page_to_frags(dd, pq, pkt,
 692				pages[i], 1, fofs, flen, NULL);
 693			if (ret < 0) {
 694				/* current page has beed taken
 695				 * care of inside above call.
 696				 */
 697				i++;
 698				goto free_pages;
 699			}
 700
 701			addr += flen;
 702			tlen -= flen;
 703		}
 704
 705		npages -= j;
 706	}
 707
 708	goto done;
 709
 710	/* if error, return all pages not managed by pkt */
 711free_pages:
 712	while (i < j)
 713		put_page(pages[i++]);
 714
 715done:
 716	return ret;
 717}
 718
 719static int qib_user_sdma_pin_pkt(const struct qib_devdata *dd,
 720				 struct qib_user_sdma_queue *pq,
 721				 struct qib_user_sdma_pkt *pkt,
 722				 const struct iovec *iov,
 723				 unsigned long niov)
 724{
 725	int ret = 0;
 726	unsigned long idx;
 727
 728	for (idx = 0; idx < niov; idx++) {
 729		const int npages = qib_user_sdma_num_pages(iov + idx);
 730		const unsigned long addr = (unsigned long) iov[idx].iov_base;
 731
 732		ret = qib_user_sdma_pin_pages(dd, pq, pkt, addr,
 733					      iov[idx].iov_len, npages);
 734		if (ret < 0)
 735			goto free_pkt;
 736	}
 737
 738	goto done;
 739
 740free_pkt:
 741	/* we need to ignore the first entry here */
 742	for (idx = 1; idx < pkt->naddr; idx++)
 743		qib_user_sdma_free_pkt_frag(&dd->pcidev->dev, pq, pkt, idx);
 744
 745	/* need to dma unmap the first entry, this is to restore to
 746	 * the original state so that caller can free the memory in
 747	 * error condition. Caller does not know if dma mapped or not*/
 748	if (pkt->addr[0].dma_mapped) {
 749		dma_unmap_single(&dd->pcidev->dev,
 750		       pkt->addr[0].addr,
 751		       pkt->addr[0].dma_length,
 752		       DMA_TO_DEVICE);
 753		pkt->addr[0].addr = 0;
 754		pkt->addr[0].dma_mapped = 0;
 755	}
 756
 757done:
 758	return ret;
 759}
 760
 761static int qib_user_sdma_init_payload(const struct qib_devdata *dd,
 762				      struct qib_user_sdma_queue *pq,
 763				      struct qib_user_sdma_pkt *pkt,
 764				      const struct iovec *iov,
 765				      unsigned long niov, int npages)
 766{
 767	int ret = 0;
 768
 769	if (pkt->frag_size == pkt->bytes_togo &&
 770			npages >= ARRAY_SIZE(pkt->addr))
 771		ret = qib_user_sdma_coalesce(dd, pq, pkt, iov, niov);
 772	else
 773		ret = qib_user_sdma_pin_pkt(dd, pq, pkt, iov, niov);
 774
 775	return ret;
 776}
 777
 778/* free a packet list -- return counter value of last packet */
 779static void qib_user_sdma_free_pkt_list(struct device *dev,
 780					struct qib_user_sdma_queue *pq,
 781					struct list_head *list)
 782{
 783	struct qib_user_sdma_pkt *pkt, *pkt_next;
 784
 785	list_for_each_entry_safe(pkt, pkt_next, list, list) {
 786		int i;
 787
 788		for (i = 0; i < pkt->naddr; i++)
 789			qib_user_sdma_free_pkt_frag(dev, pq, pkt, i);
 790
 791		if (pkt->largepkt)
 792			kfree(pkt);
 793		else
 794			kmem_cache_free(pq->pkt_slab, pkt);
 795	}
 796	INIT_LIST_HEAD(list);
 797}
 798
 799/*
 800 * copy headers, coalesce etc -- pq->lock must be held
 801 *
 802 * we queue all the packets to list, returning the
 803 * number of bytes total.  list must be empty initially,
 804 * as, if there is an error we clean it...
 805 */
 806static int qib_user_sdma_queue_pkts(const struct qib_devdata *dd,
 807				    struct qib_pportdata *ppd,
 808				    struct qib_user_sdma_queue *pq,
 809				    const struct iovec *iov,
 810				    unsigned long niov,
 811				    struct list_head *list,
 812				    int *maxpkts, int *ndesc)
 813{
 814	unsigned long idx = 0;
 815	int ret = 0;
 816	int npkts = 0;
 817	__le32 *pbc;
 818	dma_addr_t dma_addr;
 819	struct qib_user_sdma_pkt *pkt = NULL;
 820	size_t len;
 821	size_t nw;
 822	u32 counter = pq->counter;
 823	u16 frag_size;
 824
 825	while (idx < niov && npkts < *maxpkts) {
 826		const unsigned long addr = (unsigned long) iov[idx].iov_base;
 827		const unsigned long idx_save = idx;
 828		unsigned pktnw;
 829		unsigned pktnwc;
 830		int nfrags = 0;
 831		int npages = 0;
 832		int bytes_togo = 0;
 833		int tiddma = 0;
 834		int cfur;
 835
 836		len = iov[idx].iov_len;
 837		nw = len >> 2;
 838
 839		if (len < QIB_USER_SDMA_MIN_HEADER_LENGTH ||
 840		    len > PAGE_SIZE || len & 3 || addr & 3) {
 841			ret = -EINVAL;
 842			goto free_list;
 843		}
 844
 845		pbc = qib_user_sdma_alloc_header(pq, len, &dma_addr);
 846		if (!pbc) {
 847			ret = -ENOMEM;
 848			goto free_list;
 849		}
 850
 851		cfur = copy_from_user(pbc, iov[idx].iov_base, len);
 852		if (cfur) {
 853			ret = -EFAULT;
 854			goto free_pbc;
 855		}
 856
 857		/*
 858		 * This assignment is a bit strange.  it's because the
 859		 * the pbc counts the number of 32 bit words in the full
 860		 * packet _except_ the first word of the pbc itself...
 861		 */
 862		pktnwc = nw - 1;
 863
 864		/*
 865		 * pktnw computation yields the number of 32 bit words
 866		 * that the caller has indicated in the PBC.  note that
 867		 * this is one less than the total number of words that
 868		 * goes to the send DMA engine as the first 32 bit word
 869		 * of the PBC itself is not counted.  Armed with this count,
 870		 * we can verify that the packet is consistent with the
 871		 * iovec lengths.
 872		 */
 873		pktnw = le32_to_cpu(*pbc) & 0xFFFF;
 874		if (pktnw < pktnwc) {
 875			ret = -EINVAL;
 876			goto free_pbc;
 877		}
 878
 879		idx++;
 880		while (pktnwc < pktnw && idx < niov) {
 881			const size_t slen = iov[idx].iov_len;
 882			const unsigned long faddr =
 883				(unsigned long) iov[idx].iov_base;
 884
 885			if (slen & 3 || faddr & 3 || !slen) {
 886				ret = -EINVAL;
 887				goto free_pbc;
 888			}
 889
 890			npages += qib_user_sdma_num_pages(&iov[idx]);
 891
 892			bytes_togo += slen;
 
 
 
 
 893			pktnwc += slen >> 2;
 894			idx++;
 895			nfrags++;
 896		}
 897
 898		if (pktnwc != pktnw) {
 899			ret = -EINVAL;
 900			goto free_pbc;
 901		}
 902
 903		frag_size = ((le32_to_cpu(*pbc))>>16) & 0xFFFF;
 904		if (((frag_size ? frag_size : bytes_togo) + len) >
 905						ppd->ibmaxlen) {
 906			ret = -EINVAL;
 907			goto free_pbc;
 908		}
 909
 910		if (frag_size) {
 911			int pktsize, tidsmsize, n;
 912
 913			n = npages*((2*PAGE_SIZE/frag_size)+1);
 914			pktsize = sizeof(*pkt) + sizeof(pkt->addr[0])*n;
 915
 916			/*
 917			 * Determine if this is tid-sdma or just sdma.
 918			 */
 919			tiddma = (((le32_to_cpu(pbc[7])>>
 920				QLOGIC_IB_I_TID_SHIFT)&
 921				QLOGIC_IB_I_TID_MASK) !=
 922				QLOGIC_IB_I_TID_MASK);
 923
 924			if (tiddma)
 925				tidsmsize = iov[idx].iov_len;
 926			else
 927				tidsmsize = 0;
 928
 929			pkt = kmalloc(pktsize+tidsmsize, GFP_KERNEL);
 
 
 
 
 930			if (!pkt) {
 931				ret = -ENOMEM;
 932				goto free_pbc;
 933			}
 934			pkt->largepkt = 1;
 935			pkt->frag_size = frag_size;
 936			pkt->addrlimit = n + ARRAY_SIZE(pkt->addr);
 
 
 
 
 
 
 937
 938			if (tiddma) {
 939				char *tidsm = (char *)pkt + pktsize;
 940
 941				cfur = copy_from_user(tidsm,
 942					iov[idx].iov_base, tidsmsize);
 943				if (cfur) {
 944					ret = -EFAULT;
 945					goto free_pkt;
 946				}
 947				pkt->tidsm =
 948					(struct qib_tid_session_member *)tidsm;
 949				pkt->tidsmcount = tidsmsize/
 950					sizeof(struct qib_tid_session_member);
 951				pkt->tidsmidx = 0;
 952				idx++;
 953			}
 954
 955			/*
 956			 * pbc 'fill1' field is borrowed to pass frag size,
 957			 * we need to clear it after picking frag size, the
 958			 * hardware requires this field to be zero.
 959			 */
 960			*pbc = cpu_to_le32(le32_to_cpu(*pbc) & 0x0000FFFF);
 961		} else {
 962			pkt = kmem_cache_alloc(pq->pkt_slab, GFP_KERNEL);
 963			if (!pkt) {
 964				ret = -ENOMEM;
 965				goto free_pbc;
 966			}
 967			pkt->largepkt = 0;
 968			pkt->frag_size = bytes_togo;
 969			pkt->addrlimit = ARRAY_SIZE(pkt->addr);
 970		}
 971		pkt->bytes_togo = bytes_togo;
 972		pkt->payload_size = 0;
 973		pkt->counter = counter;
 974		pkt->tiddma = tiddma;
 975
 976		/* setup the first header */
 977		qib_user_sdma_init_frag(pkt, 0, /* index */
 978			0, len,		/* offset, len */
 979			1, 0,		/* first last desc */
 980			0, 0,		/* put page, dma mapped */
 981			NULL, pbc,	/* struct page, virt addr */
 982			dma_addr, len);	/* dma addr, dma length */
 983		pkt->index = 0;
 984		pkt->naddr = 1;
 985
 986		if (nfrags) {
 987			ret = qib_user_sdma_init_payload(dd, pq, pkt,
 988							 iov + idx_save + 1,
 989							 nfrags, npages);
 990			if (ret < 0)
 991				goto free_pkt;
 992		} else {
 993			/* since there is no payload, mark the
 994			 * header as the last desc. */
 995			pkt->addr[0].last_desc = 1;
 996
 997			if (dma_addr == 0) {
 998				/*
 999				 * the header is not dma mapped yet.
1000				 * it should be from kmalloc.
1001				 */
1002				dma_addr = dma_map_single(&dd->pcidev->dev,
1003					pbc, len, DMA_TO_DEVICE);
1004				if (dma_mapping_error(&dd->pcidev->dev,
1005								dma_addr)) {
1006					ret = -ENOMEM;
1007					goto free_pkt;
1008				}
1009				pkt->addr[0].addr = dma_addr;
1010				pkt->addr[0].dma_mapped = 1;
1011			}
1012		}
1013
1014		counter++;
1015		npkts++;
1016		pkt->pq = pq;
1017		pkt->index = 0; /* reset index for push on hw */
1018		*ndesc += pkt->naddr;
1019
1020		list_add_tail(&pkt->list, list);
1021	}
1022
1023	*maxpkts = npkts;
1024	ret = idx;
1025	goto done;
1026
1027free_pkt:
1028	if (pkt->largepkt)
1029		kfree(pkt);
1030	else
1031		kmem_cache_free(pq->pkt_slab, pkt);
1032free_pbc:
1033	if (dma_addr)
1034		dma_pool_free(pq->header_cache, pbc, dma_addr);
1035	else
1036		kfree(pbc);
1037free_list:
1038	qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, list);
1039done:
1040	return ret;
1041}
1042
1043static void qib_user_sdma_set_complete_counter(struct qib_user_sdma_queue *pq,
1044					       u32 c)
1045{
1046	pq->sent_counter = c;
1047}
1048
1049/* try to clean out queue -- needs pq->lock */
1050static int qib_user_sdma_queue_clean(struct qib_pportdata *ppd,
1051				     struct qib_user_sdma_queue *pq)
1052{
1053	struct qib_devdata *dd = ppd->dd;
1054	struct list_head free_list;
1055	struct qib_user_sdma_pkt *pkt;
1056	struct qib_user_sdma_pkt *pkt_prev;
1057	unsigned long flags;
1058	int ret = 0;
1059
1060	if (!pq->num_sending)
1061		return 0;
1062
1063	INIT_LIST_HEAD(&free_list);
1064
1065	/*
1066	 * We need this spin lock here because interrupt handler
1067	 * might modify this list in qib_user_sdma_send_desc(), also
1068	 * we can not get interrupted, otherwise it is a deadlock.
1069	 */
1070	spin_lock_irqsave(&pq->sent_lock, flags);
1071	list_for_each_entry_safe(pkt, pkt_prev, &pq->sent, list) {
1072		s64 descd = ppd->sdma_descq_removed - pkt->added;
1073
1074		if (descd < 0)
1075			break;
1076
1077		list_move_tail(&pkt->list, &free_list);
1078
1079		/* one more packet cleaned */
1080		ret++;
1081		pq->num_sending--;
1082	}
1083	spin_unlock_irqrestore(&pq->sent_lock, flags);
1084
1085	if (!list_empty(&free_list)) {
1086		u32 counter;
1087
1088		pkt = list_entry(free_list.prev,
1089				 struct qib_user_sdma_pkt, list);
1090		counter = pkt->counter;
1091
1092		qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, &free_list);
1093		qib_user_sdma_set_complete_counter(pq, counter);
1094	}
1095
1096	return ret;
1097}
1098
1099void qib_user_sdma_queue_destroy(struct qib_user_sdma_queue *pq)
1100{
1101	if (!pq)
1102		return;
1103
1104	pq->sdma_rb_node->refcount--;
1105	if (pq->sdma_rb_node->refcount == 0) {
1106		rb_erase(&pq->sdma_rb_node->node, &qib_user_sdma_rb_root);
1107		kfree(pq->sdma_rb_node);
1108	}
1109	dma_pool_destroy(pq->header_cache);
1110	kmem_cache_destroy(pq->pkt_slab);
1111	kfree(pq);
1112}
1113
1114/* clean descriptor queue, returns > 0 if some elements cleaned */
1115static int qib_user_sdma_hwqueue_clean(struct qib_pportdata *ppd)
1116{
1117	int ret;
1118	unsigned long flags;
1119
1120	spin_lock_irqsave(&ppd->sdma_lock, flags);
1121	ret = qib_sdma_make_progress(ppd);
1122	spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1123
1124	return ret;
1125}
1126
1127/* we're in close, drain packets so that we can cleanup successfully... */
1128void qib_user_sdma_queue_drain(struct qib_pportdata *ppd,
1129			       struct qib_user_sdma_queue *pq)
1130{
1131	struct qib_devdata *dd = ppd->dd;
1132	unsigned long flags;
1133	int i;
1134
1135	if (!pq)
1136		return;
1137
1138	for (i = 0; i < QIB_USER_SDMA_DRAIN_TIMEOUT; i++) {
1139		mutex_lock(&pq->lock);
1140		if (!pq->num_pending && !pq->num_sending) {
1141			mutex_unlock(&pq->lock);
1142			break;
1143		}
1144		qib_user_sdma_hwqueue_clean(ppd);
1145		qib_user_sdma_queue_clean(ppd, pq);
1146		mutex_unlock(&pq->lock);
1147		msleep(20);
1148	}
1149
1150	if (pq->num_pending || pq->num_sending) {
1151		struct qib_user_sdma_pkt *pkt;
1152		struct qib_user_sdma_pkt *pkt_prev;
1153		struct list_head free_list;
1154
1155		mutex_lock(&pq->lock);
1156		spin_lock_irqsave(&ppd->sdma_lock, flags);
1157		/*
1158		 * Since we hold sdma_lock, it is safe without sent_lock.
1159		 */
1160		if (pq->num_pending) {
1161			list_for_each_entry_safe(pkt, pkt_prev,
1162					&ppd->sdma_userpending, list) {
1163				if (pkt->pq == pq) {
1164					list_move_tail(&pkt->list, &pq->sent);
1165					pq->num_pending--;
1166					pq->num_sending++;
1167				}
1168			}
1169		}
1170		spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1171
1172		qib_dev_err(dd, "user sdma lists not empty: forcing!\n");
1173		INIT_LIST_HEAD(&free_list);
1174		list_splice_init(&pq->sent, &free_list);
1175		pq->num_sending = 0;
1176		qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, &free_list);
1177		mutex_unlock(&pq->lock);
1178	}
1179}
1180
1181static inline __le64 qib_sdma_make_desc0(u8 gen,
1182					 u64 addr, u64 dwlen, u64 dwoffset)
1183{
1184	return cpu_to_le64(/* SDmaPhyAddr[31:0] */
1185			   ((addr & 0xfffffffcULL) << 32) |
1186			   /* SDmaGeneration[1:0] */
1187			   ((gen & 3ULL) << 30) |
1188			   /* SDmaDwordCount[10:0] */
1189			   ((dwlen & 0x7ffULL) << 16) |
1190			   /* SDmaBufOffset[12:2] */
1191			   (dwoffset & 0x7ffULL));
1192}
1193
1194static inline __le64 qib_sdma_make_first_desc0(__le64 descq)
1195{
1196	return descq | cpu_to_le64(1ULL << 12);
1197}
1198
1199static inline __le64 qib_sdma_make_last_desc0(__le64 descq)
1200{
1201					      /* last */  /* dma head */
1202	return descq | cpu_to_le64(1ULL << 11 | 1ULL << 13);
1203}
1204
1205static inline __le64 qib_sdma_make_desc1(u64 addr)
1206{
1207	/* SDmaPhyAddr[47:32] */
1208	return cpu_to_le64(addr >> 32);
1209}
1210
1211static void qib_user_sdma_send_frag(struct qib_pportdata *ppd,
1212				    struct qib_user_sdma_pkt *pkt, int idx,
1213				    unsigned ofs, u16 tail, u8 gen)
1214{
1215	const u64 addr = (u64) pkt->addr[idx].addr +
1216		(u64) pkt->addr[idx].offset;
1217	const u64 dwlen = (u64) pkt->addr[idx].length / 4;
1218	__le64 *descqp;
1219	__le64 descq0;
1220
1221	descqp = &ppd->sdma_descq[tail].qw[0];
1222
1223	descq0 = qib_sdma_make_desc0(gen, addr, dwlen, ofs);
1224	if (pkt->addr[idx].first_desc)
1225		descq0 = qib_sdma_make_first_desc0(descq0);
1226	if (pkt->addr[idx].last_desc) {
1227		descq0 = qib_sdma_make_last_desc0(descq0);
1228		if (ppd->sdma_intrequest) {
1229			descq0 |= cpu_to_le64(1ULL << 15);
1230			ppd->sdma_intrequest = 0;
1231		}
1232	}
1233
1234	descqp[0] = descq0;
1235	descqp[1] = qib_sdma_make_desc1(addr);
1236}
1237
1238void qib_user_sdma_send_desc(struct qib_pportdata *ppd,
1239				struct list_head *pktlist)
1240{
1241	struct qib_devdata *dd = ppd->dd;
1242	u16 nfree, nsent;
1243	u16 tail, tail_c;
1244	u8 gen, gen_c;
1245
1246	nfree = qib_sdma_descq_freecnt(ppd);
1247	if (!nfree)
1248		return;
1249
1250retry:
1251	nsent = 0;
1252	tail_c = tail = ppd->sdma_descq_tail;
1253	gen_c = gen = ppd->sdma_generation;
1254	while (!list_empty(pktlist)) {
1255		struct qib_user_sdma_pkt *pkt =
1256			list_entry(pktlist->next, struct qib_user_sdma_pkt,
1257				   list);
1258		int i, j, c = 0;
1259		unsigned ofs = 0;
1260		u16 dtail = tail;
1261
1262		for (i = pkt->index; i < pkt->naddr && nfree; i++) {
1263			qib_user_sdma_send_frag(ppd, pkt, i, ofs, tail, gen);
1264			ofs += pkt->addr[i].length >> 2;
1265
1266			if (++tail == ppd->sdma_descq_cnt) {
1267				tail = 0;
1268				++gen;
1269				ppd->sdma_intrequest = 1;
1270			} else if (tail == (ppd->sdma_descq_cnt>>1)) {
1271				ppd->sdma_intrequest = 1;
1272			}
1273			nfree--;
1274			if (pkt->addr[i].last_desc == 0)
1275				continue;
1276
1277			/*
1278			 * If the packet is >= 2KB mtu equivalent, we
1279			 * have to use the large buffers, and have to
1280			 * mark each descriptor as part of a large
1281			 * buffer packet.
1282			 */
1283			if (ofs > dd->piosize2kmax_dwords) {
1284				for (j = pkt->index; j <= i; j++) {
1285					ppd->sdma_descq[dtail].qw[0] |=
1286						cpu_to_le64(1ULL << 14);
1287					if (++dtail == ppd->sdma_descq_cnt)
1288						dtail = 0;
1289				}
1290			}
1291			c += i + 1 - pkt->index;
1292			pkt->index = i + 1; /* index for next first */
1293			tail_c = dtail = tail;
1294			gen_c = gen;
1295			ofs = 0;  /* reset for next packet */
1296		}
1297
1298		ppd->sdma_descq_added += c;
1299		nsent += c;
1300		if (pkt->index == pkt->naddr) {
1301			pkt->added = ppd->sdma_descq_added;
1302			pkt->pq->added = pkt->added;
1303			pkt->pq->num_pending--;
1304			spin_lock(&pkt->pq->sent_lock);
1305			pkt->pq->num_sending++;
1306			list_move_tail(&pkt->list, &pkt->pq->sent);
1307			spin_unlock(&pkt->pq->sent_lock);
1308		}
1309		if (!nfree || (nsent<<2) > ppd->sdma_descq_cnt)
1310			break;
1311	}
1312
1313	/* advance the tail on the chip if necessary */
1314	if (ppd->sdma_descq_tail != tail_c) {
1315		ppd->sdma_generation = gen_c;
1316		dd->f_sdma_update_tail(ppd, tail_c);
1317	}
1318
1319	if (nfree && !list_empty(pktlist))
1320		goto retry;
1321}
1322
1323/* pq->lock must be held, get packets on the wire... */
1324static int qib_user_sdma_push_pkts(struct qib_pportdata *ppd,
1325				 struct qib_user_sdma_queue *pq,
1326				 struct list_head *pktlist, int count)
1327{
1328	unsigned long flags;
1329
1330	if (unlikely(!(ppd->lflags & QIBL_LINKACTIVE)))
1331		return -ECOMM;
1332
1333	/* non-blocking mode */
1334	if (pq->sdma_rb_node->refcount > 1) {
1335		spin_lock_irqsave(&ppd->sdma_lock, flags);
1336		if (unlikely(!__qib_sdma_running(ppd))) {
1337			spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1338			return -ECOMM;
1339		}
1340		pq->num_pending += count;
1341		list_splice_tail_init(pktlist, &ppd->sdma_userpending);
1342		qib_user_sdma_send_desc(ppd, &ppd->sdma_userpending);
1343		spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1344		return 0;
1345	}
1346
1347	/* In this case, descriptors from this process are not
1348	 * linked to ppd pending queue, interrupt handler
1349	 * won't update this process, it is OK to directly
1350	 * modify without sdma lock.
1351	 */
1352
1353
1354	pq->num_pending += count;
1355	/*
1356	 * Blocking mode for single rail process, we must
1357	 * release/regain sdma_lock to give other process
1358	 * chance to make progress. This is important for
1359	 * performance.
1360	 */
1361	do {
1362		spin_lock_irqsave(&ppd->sdma_lock, flags);
1363		if (unlikely(!__qib_sdma_running(ppd))) {
1364			spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1365			return -ECOMM;
1366		}
1367		qib_user_sdma_send_desc(ppd, pktlist);
1368		if (!list_empty(pktlist))
1369			qib_sdma_make_progress(ppd);
1370		spin_unlock_irqrestore(&ppd->sdma_lock, flags);
1371	} while (!list_empty(pktlist));
1372
1373	return 0;
1374}
1375
1376int qib_user_sdma_writev(struct qib_ctxtdata *rcd,
1377			 struct qib_user_sdma_queue *pq,
1378			 const struct iovec *iov,
1379			 unsigned long dim)
1380{
1381	struct qib_devdata *dd = rcd->dd;
1382	struct qib_pportdata *ppd = rcd->ppd;
1383	int ret = 0;
1384	struct list_head list;
1385	int npkts = 0;
1386
1387	INIT_LIST_HEAD(&list);
1388
1389	mutex_lock(&pq->lock);
1390
1391	/* why not -ECOMM like qib_user_sdma_push_pkts() below? */
1392	if (!qib_sdma_running(ppd))
1393		goto done_unlock;
1394
1395	/* if I have packets not complete yet */
1396	if (pq->added > ppd->sdma_descq_removed)
1397		qib_user_sdma_hwqueue_clean(ppd);
1398	/* if I have complete packets to be freed */
1399	if (pq->num_sending)
1400		qib_user_sdma_queue_clean(ppd, pq);
1401
1402	while (dim) {
1403		int mxp = 1;
1404		int ndesc = 0;
1405
1406		ret = qib_user_sdma_queue_pkts(dd, ppd, pq,
1407				iov, dim, &list, &mxp, &ndesc);
1408		if (ret < 0)
1409			goto done_unlock;
1410		else {
1411			dim -= ret;
1412			iov += ret;
1413		}
1414
1415		/* force packets onto the sdma hw queue... */
1416		if (!list_empty(&list)) {
1417			/*
1418			 * Lazily clean hw queue.
1419			 */
1420			if (qib_sdma_descq_freecnt(ppd) < ndesc) {
1421				qib_user_sdma_hwqueue_clean(ppd);
1422				if (pq->num_sending)
1423					qib_user_sdma_queue_clean(ppd, pq);
1424			}
1425
1426			ret = qib_user_sdma_push_pkts(ppd, pq, &list, mxp);
1427			if (ret < 0)
1428				goto done_unlock;
1429			else {
1430				npkts += mxp;
1431				pq->counter += mxp;
1432			}
1433		}
1434	}
1435
1436done_unlock:
1437	if (!list_empty(&list))
1438		qib_user_sdma_free_pkt_list(&dd->pcidev->dev, pq, &list);
1439	mutex_unlock(&pq->lock);
1440
1441	return (ret < 0) ? ret : npkts;
1442}
1443
1444int qib_user_sdma_make_progress(struct qib_pportdata *ppd,
1445				struct qib_user_sdma_queue *pq)
1446{
1447	int ret = 0;
1448
1449	mutex_lock(&pq->lock);
1450	qib_user_sdma_hwqueue_clean(ppd);
1451	ret = qib_user_sdma_queue_clean(ppd, pq);
1452	mutex_unlock(&pq->lock);
1453
1454	return ret;
1455}
1456
1457u32 qib_user_sdma_complete_counter(const struct qib_user_sdma_queue *pq)
1458{
1459	return pq ? pq->sent_counter : 0;
1460}
1461
1462u32 qib_user_sdma_inflight_counter(struct qib_user_sdma_queue *pq)
1463{
1464	return pq ? pq->counter : 0;
1465}