xref: /linux/drivers/infiniband/hw/irdma/verbs.c (revision 3286f88f31da060ac2789cee247153961ba57e49)
1 // SPDX-License-Identifier: GPL-2.0 or Linux-OpenIB
2 /* Copyright (c) 2015 - 2021 Intel Corporation */
3 #include "main.h"
4 
5 /**
6  * irdma_query_device - get device attributes
7  * @ibdev: device pointer from stack
8  * @props: returning device attributes
9  * @udata: user data
10  */
11 static int irdma_query_device(struct ib_device *ibdev,
12 			      struct ib_device_attr *props,
13 			      struct ib_udata *udata)
14 {
15 	struct irdma_device *iwdev = to_iwdev(ibdev);
16 	struct irdma_pci_f *rf = iwdev->rf;
17 	struct pci_dev *pcidev = iwdev->rf->pcidev;
18 	struct irdma_hw_attrs *hw_attrs = &rf->sc_dev.hw_attrs;
19 
20 	if (udata->inlen || udata->outlen)
21 		return -EINVAL;
22 
23 	memset(props, 0, sizeof(*props));
24 	addrconf_addr_eui48((u8 *)&props->sys_image_guid,
25 			    iwdev->netdev->dev_addr);
26 	props->fw_ver = (u64)irdma_fw_major_ver(&rf->sc_dev) << 32 |
27 			irdma_fw_minor_ver(&rf->sc_dev);
28 	props->device_cap_flags = IB_DEVICE_MEM_WINDOW |
29 				  IB_DEVICE_MEM_MGT_EXTENSIONS;
30 	props->kernel_cap_flags = IBK_LOCAL_DMA_LKEY;
31 	props->vendor_id = pcidev->vendor;
32 	props->vendor_part_id = pcidev->device;
33 
34 	props->hw_ver = rf->pcidev->revision;
35 	props->page_size_cap = hw_attrs->page_size_cap;
36 	props->max_mr_size = hw_attrs->max_mr_size;
37 	props->max_qp = rf->max_qp - rf->used_qps;
38 	props->max_qp_wr = hw_attrs->max_qp_wr;
39 	props->max_send_sge = hw_attrs->uk_attrs.max_hw_wq_frags;
40 	props->max_recv_sge = hw_attrs->uk_attrs.max_hw_wq_frags;
41 	props->max_cq = rf->max_cq - rf->used_cqs;
42 	props->max_cqe = rf->max_cqe - 1;
43 	props->max_mr = rf->max_mr - rf->used_mrs;
44 	props->max_mw = props->max_mr;
45 	props->max_pd = rf->max_pd - rf->used_pds;
46 	props->max_sge_rd = hw_attrs->uk_attrs.max_hw_read_sges;
47 	props->max_qp_rd_atom = hw_attrs->max_hw_ird;
48 	props->max_qp_init_rd_atom = hw_attrs->max_hw_ord;
49 	if (rdma_protocol_roce(ibdev, 1)) {
50 		props->device_cap_flags |= IB_DEVICE_RC_RNR_NAK_GEN;
51 		props->max_pkeys = IRDMA_PKEY_TBL_SZ;
52 	}
53 
54 	props->max_ah = rf->max_ah;
55 	props->max_mcast_grp = rf->max_mcg;
56 	props->max_mcast_qp_attach = IRDMA_MAX_MGS_PER_CTX;
57 	props->max_total_mcast_qp_attach = rf->max_qp * IRDMA_MAX_MGS_PER_CTX;
58 	props->max_fast_reg_page_list_len = IRDMA_MAX_PAGES_PER_FMR;
59 #define HCA_CLOCK_TIMESTAMP_MASK 0x1ffff
60 	if (hw_attrs->uk_attrs.hw_rev >= IRDMA_GEN_2)
61 		props->timestamp_mask = HCA_CLOCK_TIMESTAMP_MASK;
62 
63 	return 0;
64 }
65 
66 /**
67  * irdma_query_port - get port attributes
68  * @ibdev: device pointer from stack
69  * @port: port number for query
70  * @props: returning device attributes
71  */
72 static int irdma_query_port(struct ib_device *ibdev, u32 port,
73 			    struct ib_port_attr *props)
74 {
75 	struct irdma_device *iwdev = to_iwdev(ibdev);
76 	struct net_device *netdev = iwdev->netdev;
77 
78 	/* no need to zero out pros here. done by caller */
79 
80 	props->max_mtu = IB_MTU_4096;
81 	props->active_mtu = ib_mtu_int_to_enum(netdev->mtu);
82 	props->lid = 1;
83 	props->lmc = 0;
84 	props->sm_lid = 0;
85 	props->sm_sl = 0;
86 	if (netif_carrier_ok(netdev) && netif_running(netdev)) {
87 		props->state = IB_PORT_ACTIVE;
88 		props->phys_state = IB_PORT_PHYS_STATE_LINK_UP;
89 	} else {
90 		props->state = IB_PORT_DOWN;
91 		props->phys_state = IB_PORT_PHYS_STATE_DISABLED;
92 	}
93 
94 	ib_get_eth_speed(ibdev, port, &props->active_speed,
95 			 &props->active_width);
96 
97 	if (rdma_protocol_roce(ibdev, 1)) {
98 		props->gid_tbl_len = 32;
99 		props->ip_gids = true;
100 		props->pkey_tbl_len = IRDMA_PKEY_TBL_SZ;
101 	} else {
102 		props->gid_tbl_len = 1;
103 	}
104 	props->qkey_viol_cntr = 0;
105 	props->port_cap_flags |= IB_PORT_CM_SUP | IB_PORT_REINIT_SUP;
106 	props->max_msg_sz = iwdev->rf->sc_dev.hw_attrs.max_hw_outbound_msg_size;
107 
108 	return 0;
109 }
110 
111 /**
112  * irdma_disassociate_ucontext - Disassociate user context
113  * @context: ib user context
114  */
115 static void irdma_disassociate_ucontext(struct ib_ucontext *context)
116 {
117 }
118 
119 static int irdma_mmap_legacy(struct irdma_ucontext *ucontext,
120 			     struct vm_area_struct *vma)
121 {
122 	u64 pfn;
123 
124 	if (vma->vm_pgoff || vma->vm_end - vma->vm_start != PAGE_SIZE)
125 		return -EINVAL;
126 
127 	vma->vm_private_data = ucontext;
128 	pfn = ((uintptr_t)ucontext->iwdev->rf->sc_dev.hw_regs[IRDMA_DB_ADDR_OFFSET] +
129 	       pci_resource_start(ucontext->iwdev->rf->pcidev, 0)) >> PAGE_SHIFT;
130 
131 	return rdma_user_mmap_io(&ucontext->ibucontext, vma, pfn, PAGE_SIZE,
132 				 pgprot_noncached(vma->vm_page_prot), NULL);
133 }
134 
135 static void irdma_mmap_free(struct rdma_user_mmap_entry *rdma_entry)
136 {
137 	struct irdma_user_mmap_entry *entry = to_irdma_mmap_entry(rdma_entry);
138 
139 	kfree(entry);
140 }
141 
142 static struct rdma_user_mmap_entry*
143 irdma_user_mmap_entry_insert(struct irdma_ucontext *ucontext, u64 bar_offset,
144 			     enum irdma_mmap_flag mmap_flag, u64 *mmap_offset)
145 {
146 	struct irdma_user_mmap_entry *entry = kzalloc(sizeof(*entry), GFP_KERNEL);
147 	int ret;
148 
149 	if (!entry)
150 		return NULL;
151 
152 	entry->bar_offset = bar_offset;
153 	entry->mmap_flag = mmap_flag;
154 
155 	ret = rdma_user_mmap_entry_insert(&ucontext->ibucontext,
156 					  &entry->rdma_entry, PAGE_SIZE);
157 	if (ret) {
158 		kfree(entry);
159 		return NULL;
160 	}
161 	*mmap_offset = rdma_user_mmap_get_offset(&entry->rdma_entry);
162 
163 	return &entry->rdma_entry;
164 }
165 
166 /**
167  * irdma_mmap - user memory map
168  * @context: context created during alloc
169  * @vma: kernel info for user memory map
170  */
171 static int irdma_mmap(struct ib_ucontext *context, struct vm_area_struct *vma)
172 {
173 	struct rdma_user_mmap_entry *rdma_entry;
174 	struct irdma_user_mmap_entry *entry;
175 	struct irdma_ucontext *ucontext;
176 	u64 pfn;
177 	int ret;
178 
179 	ucontext = to_ucontext(context);
180 
181 	/* Legacy support for libi40iw with hard-coded mmap key */
182 	if (ucontext->legacy_mode)
183 		return irdma_mmap_legacy(ucontext, vma);
184 
185 	rdma_entry = rdma_user_mmap_entry_get(&ucontext->ibucontext, vma);
186 	if (!rdma_entry) {
187 		ibdev_dbg(&ucontext->iwdev->ibdev,
188 			  "VERBS: pgoff[0x%lx] does not have valid entry\n",
189 			  vma->vm_pgoff);
190 		return -EINVAL;
191 	}
192 
193 	entry = to_irdma_mmap_entry(rdma_entry);
194 	ibdev_dbg(&ucontext->iwdev->ibdev,
195 		  "VERBS: bar_offset [0x%llx] mmap_flag [%d]\n",
196 		  entry->bar_offset, entry->mmap_flag);
197 
198 	pfn = (entry->bar_offset +
199 	      pci_resource_start(ucontext->iwdev->rf->pcidev, 0)) >> PAGE_SHIFT;
200 
201 	switch (entry->mmap_flag) {
202 	case IRDMA_MMAP_IO_NC:
203 		ret = rdma_user_mmap_io(context, vma, pfn, PAGE_SIZE,
204 					pgprot_noncached(vma->vm_page_prot),
205 					rdma_entry);
206 		break;
207 	case IRDMA_MMAP_IO_WC:
208 		ret = rdma_user_mmap_io(context, vma, pfn, PAGE_SIZE,
209 					pgprot_writecombine(vma->vm_page_prot),
210 					rdma_entry);
211 		break;
212 	default:
213 		ret = -EINVAL;
214 	}
215 
216 	if (ret)
217 		ibdev_dbg(&ucontext->iwdev->ibdev,
218 			  "VERBS: bar_offset [0x%llx] mmap_flag[%d] err[%d]\n",
219 			  entry->bar_offset, entry->mmap_flag, ret);
220 	rdma_user_mmap_entry_put(rdma_entry);
221 
222 	return ret;
223 }
224 
225 /**
226  * irdma_alloc_push_page - allocate a push page for qp
227  * @iwqp: qp pointer
228  */
229 static void irdma_alloc_push_page(struct irdma_qp *iwqp)
230 {
231 	struct irdma_cqp_request *cqp_request;
232 	struct cqp_cmds_info *cqp_info;
233 	struct irdma_device *iwdev = iwqp->iwdev;
234 	struct irdma_sc_qp *qp = &iwqp->sc_qp;
235 	int status;
236 
237 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
238 	if (!cqp_request)
239 		return;
240 
241 	cqp_info = &cqp_request->info;
242 	cqp_info->cqp_cmd = IRDMA_OP_MANAGE_PUSH_PAGE;
243 	cqp_info->post_sq = 1;
244 	cqp_info->in.u.manage_push_page.info.push_idx = 0;
245 	cqp_info->in.u.manage_push_page.info.qs_handle =
246 		qp->vsi->qos[qp->user_pri].qs_handle;
247 	cqp_info->in.u.manage_push_page.info.free_page = 0;
248 	cqp_info->in.u.manage_push_page.info.push_page_type = 0;
249 	cqp_info->in.u.manage_push_page.cqp = &iwdev->rf->cqp.sc_cqp;
250 	cqp_info->in.u.manage_push_page.scratch = (uintptr_t)cqp_request;
251 
252 	status = irdma_handle_cqp_op(iwdev->rf, cqp_request);
253 	if (!status && cqp_request->compl_info.op_ret_val <
254 	    iwdev->rf->sc_dev.hw_attrs.max_hw_device_pages) {
255 		qp->push_idx = cqp_request->compl_info.op_ret_val;
256 		qp->push_offset = 0;
257 	}
258 
259 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
260 }
261 
262 /**
263  * irdma_alloc_ucontext - Allocate the user context data structure
264  * @uctx: uverbs context pointer
265  * @udata: user data
266  *
267  * This keeps track of all objects associated with a particular
268  * user-mode client.
269  */
270 static int irdma_alloc_ucontext(struct ib_ucontext *uctx,
271 				struct ib_udata *udata)
272 {
273 #define IRDMA_ALLOC_UCTX_MIN_REQ_LEN offsetofend(struct irdma_alloc_ucontext_req, rsvd8)
274 #define IRDMA_ALLOC_UCTX_MIN_RESP_LEN offsetofend(struct irdma_alloc_ucontext_resp, rsvd)
275 	struct ib_device *ibdev = uctx->device;
276 	struct irdma_device *iwdev = to_iwdev(ibdev);
277 	struct irdma_alloc_ucontext_req req = {};
278 	struct irdma_alloc_ucontext_resp uresp = {};
279 	struct irdma_ucontext *ucontext = to_ucontext(uctx);
280 	struct irdma_uk_attrs *uk_attrs;
281 
282 	if (udata->inlen < IRDMA_ALLOC_UCTX_MIN_REQ_LEN ||
283 	    udata->outlen < IRDMA_ALLOC_UCTX_MIN_RESP_LEN)
284 		return -EINVAL;
285 
286 	if (ib_copy_from_udata(&req, udata, min(sizeof(req), udata->inlen)))
287 		return -EINVAL;
288 
289 	if (req.userspace_ver < 4 || req.userspace_ver > IRDMA_ABI_VER)
290 		goto ver_error;
291 
292 	ucontext->iwdev = iwdev;
293 	ucontext->abi_ver = req.userspace_ver;
294 
295 	uk_attrs = &iwdev->rf->sc_dev.hw_attrs.uk_attrs;
296 	/* GEN_1 legacy support with libi40iw */
297 	if (udata->outlen == IRDMA_ALLOC_UCTX_MIN_RESP_LEN) {
298 		if (uk_attrs->hw_rev != IRDMA_GEN_1)
299 			return -EOPNOTSUPP;
300 
301 		ucontext->legacy_mode = true;
302 		uresp.max_qps = iwdev->rf->max_qp;
303 		uresp.max_pds = iwdev->rf->sc_dev.hw_attrs.max_hw_pds;
304 		uresp.wq_size = iwdev->rf->sc_dev.hw_attrs.max_qp_wr * 2;
305 		uresp.kernel_ver = req.userspace_ver;
306 		if (ib_copy_to_udata(udata, &uresp,
307 				     min(sizeof(uresp), udata->outlen)))
308 			return -EFAULT;
309 	} else {
310 		u64 bar_off = (uintptr_t)iwdev->rf->sc_dev.hw_regs[IRDMA_DB_ADDR_OFFSET];
311 
312 		ucontext->db_mmap_entry =
313 			irdma_user_mmap_entry_insert(ucontext, bar_off,
314 						     IRDMA_MMAP_IO_NC,
315 						     &uresp.db_mmap_key);
316 		if (!ucontext->db_mmap_entry)
317 			return -ENOMEM;
318 
319 		uresp.kernel_ver = IRDMA_ABI_VER;
320 		uresp.feature_flags = uk_attrs->feature_flags;
321 		uresp.max_hw_wq_frags = uk_attrs->max_hw_wq_frags;
322 		uresp.max_hw_read_sges = uk_attrs->max_hw_read_sges;
323 		uresp.max_hw_inline = uk_attrs->max_hw_inline;
324 		uresp.max_hw_rq_quanta = uk_attrs->max_hw_rq_quanta;
325 		uresp.max_hw_wq_quanta = uk_attrs->max_hw_wq_quanta;
326 		uresp.max_hw_sq_chunk = uk_attrs->max_hw_sq_chunk;
327 		uresp.max_hw_cq_size = uk_attrs->max_hw_cq_size;
328 		uresp.min_hw_cq_size = uk_attrs->min_hw_cq_size;
329 		uresp.hw_rev = uk_attrs->hw_rev;
330 		if (ib_copy_to_udata(udata, &uresp,
331 				     min(sizeof(uresp), udata->outlen))) {
332 			rdma_user_mmap_entry_remove(ucontext->db_mmap_entry);
333 			return -EFAULT;
334 		}
335 	}
336 
337 	INIT_LIST_HEAD(&ucontext->cq_reg_mem_list);
338 	spin_lock_init(&ucontext->cq_reg_mem_list_lock);
339 	INIT_LIST_HEAD(&ucontext->qp_reg_mem_list);
340 	spin_lock_init(&ucontext->qp_reg_mem_list_lock);
341 
342 	return 0;
343 
344 ver_error:
345 	ibdev_err(&iwdev->ibdev,
346 		  "Invalid userspace driver version detected. Detected version %d, should be %d\n",
347 		  req.userspace_ver, IRDMA_ABI_VER);
348 	return -EINVAL;
349 }
350 
351 /**
352  * irdma_dealloc_ucontext - deallocate the user context data structure
353  * @context: user context created during alloc
354  */
355 static void irdma_dealloc_ucontext(struct ib_ucontext *context)
356 {
357 	struct irdma_ucontext *ucontext = to_ucontext(context);
358 
359 	rdma_user_mmap_entry_remove(ucontext->db_mmap_entry);
360 }
361 
362 /**
363  * irdma_alloc_pd - allocate protection domain
364  * @pd: PD pointer
365  * @udata: user data
366  */
367 static int irdma_alloc_pd(struct ib_pd *pd, struct ib_udata *udata)
368 {
369 #define IRDMA_ALLOC_PD_MIN_RESP_LEN offsetofend(struct irdma_alloc_pd_resp, rsvd)
370 	struct irdma_pd *iwpd = to_iwpd(pd);
371 	struct irdma_device *iwdev = to_iwdev(pd->device);
372 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
373 	struct irdma_pci_f *rf = iwdev->rf;
374 	struct irdma_alloc_pd_resp uresp = {};
375 	struct irdma_sc_pd *sc_pd;
376 	u32 pd_id = 0;
377 	int err;
378 
379 	if (udata && udata->outlen < IRDMA_ALLOC_PD_MIN_RESP_LEN)
380 		return -EINVAL;
381 
382 	err = irdma_alloc_rsrc(rf, rf->allocated_pds, rf->max_pd, &pd_id,
383 			       &rf->next_pd);
384 	if (err)
385 		return err;
386 
387 	sc_pd = &iwpd->sc_pd;
388 	if (udata) {
389 		struct irdma_ucontext *ucontext =
390 			rdma_udata_to_drv_context(udata, struct irdma_ucontext,
391 						  ibucontext);
392 		irdma_sc_pd_init(dev, sc_pd, pd_id, ucontext->abi_ver);
393 		uresp.pd_id = pd_id;
394 		if (ib_copy_to_udata(udata, &uresp,
395 				     min(sizeof(uresp), udata->outlen))) {
396 			err = -EFAULT;
397 			goto error;
398 		}
399 	} else {
400 		irdma_sc_pd_init(dev, sc_pd, pd_id, IRDMA_ABI_VER);
401 	}
402 
403 	return 0;
404 error:
405 	irdma_free_rsrc(rf, rf->allocated_pds, pd_id);
406 
407 	return err;
408 }
409 
410 /**
411  * irdma_dealloc_pd - deallocate pd
412  * @ibpd: ptr of pd to be deallocated
413  * @udata: user data
414  */
415 static int irdma_dealloc_pd(struct ib_pd *ibpd, struct ib_udata *udata)
416 {
417 	struct irdma_pd *iwpd = to_iwpd(ibpd);
418 	struct irdma_device *iwdev = to_iwdev(ibpd->device);
419 
420 	irdma_free_rsrc(iwdev->rf, iwdev->rf->allocated_pds, iwpd->sc_pd.pd_id);
421 
422 	return 0;
423 }
424 
425 /**
426  * irdma_get_pbl - Retrieve pbl from a list given a virtual
427  * address
428  * @va: user virtual address
429  * @pbl_list: pbl list to search in (QP's or CQ's)
430  */
431 static struct irdma_pbl *irdma_get_pbl(unsigned long va,
432 				       struct list_head *pbl_list)
433 {
434 	struct irdma_pbl *iwpbl;
435 
436 	list_for_each_entry (iwpbl, pbl_list, list) {
437 		if (iwpbl->user_base == va) {
438 			list_del(&iwpbl->list);
439 			iwpbl->on_list = false;
440 			return iwpbl;
441 		}
442 	}
443 
444 	return NULL;
445 }
446 
447 /**
448  * irdma_clean_cqes - clean cq entries for qp
449  * @iwqp: qp ptr (user or kernel)
450  * @iwcq: cq ptr
451  */
452 static void irdma_clean_cqes(struct irdma_qp *iwqp, struct irdma_cq *iwcq)
453 {
454 	struct irdma_cq_uk *ukcq = &iwcq->sc_cq.cq_uk;
455 	unsigned long flags;
456 
457 	spin_lock_irqsave(&iwcq->lock, flags);
458 	irdma_uk_clean_cq(&iwqp->sc_qp.qp_uk, ukcq);
459 	spin_unlock_irqrestore(&iwcq->lock, flags);
460 }
461 
462 static void irdma_remove_push_mmap_entries(struct irdma_qp *iwqp)
463 {
464 	if (iwqp->push_db_mmap_entry) {
465 		rdma_user_mmap_entry_remove(iwqp->push_db_mmap_entry);
466 		iwqp->push_db_mmap_entry = NULL;
467 	}
468 	if (iwqp->push_wqe_mmap_entry) {
469 		rdma_user_mmap_entry_remove(iwqp->push_wqe_mmap_entry);
470 		iwqp->push_wqe_mmap_entry = NULL;
471 	}
472 }
473 
474 static int irdma_setup_push_mmap_entries(struct irdma_ucontext *ucontext,
475 					 struct irdma_qp *iwqp,
476 					 u64 *push_wqe_mmap_key,
477 					 u64 *push_db_mmap_key)
478 {
479 	struct irdma_device *iwdev = ucontext->iwdev;
480 	u64 rsvd, bar_off;
481 
482 	rsvd = IRDMA_PF_BAR_RSVD;
483 	bar_off = (uintptr_t)iwdev->rf->sc_dev.hw_regs[IRDMA_DB_ADDR_OFFSET];
484 	/* skip over db page */
485 	bar_off += IRDMA_HW_PAGE_SIZE;
486 	/* push wqe page */
487 	bar_off += rsvd + iwqp->sc_qp.push_idx * IRDMA_HW_PAGE_SIZE;
488 	iwqp->push_wqe_mmap_entry = irdma_user_mmap_entry_insert(ucontext,
489 					bar_off, IRDMA_MMAP_IO_WC,
490 					push_wqe_mmap_key);
491 	if (!iwqp->push_wqe_mmap_entry)
492 		return -ENOMEM;
493 
494 	/* push doorbell page */
495 	bar_off += IRDMA_HW_PAGE_SIZE;
496 	iwqp->push_db_mmap_entry = irdma_user_mmap_entry_insert(ucontext,
497 					bar_off, IRDMA_MMAP_IO_NC,
498 					push_db_mmap_key);
499 	if (!iwqp->push_db_mmap_entry) {
500 		rdma_user_mmap_entry_remove(iwqp->push_wqe_mmap_entry);
501 		return -ENOMEM;
502 	}
503 
504 	return 0;
505 }
506 
507 /**
508  * irdma_destroy_qp - destroy qp
509  * @ibqp: qp's ib pointer also to get to device's qp address
510  * @udata: user data
511  */
512 static int irdma_destroy_qp(struct ib_qp *ibqp, struct ib_udata *udata)
513 {
514 	struct irdma_qp *iwqp = to_iwqp(ibqp);
515 	struct irdma_device *iwdev = iwqp->iwdev;
516 
517 	iwqp->sc_qp.qp_uk.destroy_pending = true;
518 
519 	if (iwqp->iwarp_state == IRDMA_QP_STATE_RTS)
520 		irdma_modify_qp_to_err(&iwqp->sc_qp);
521 
522 	if (!iwqp->user_mode)
523 		cancel_delayed_work_sync(&iwqp->dwork_flush);
524 
525 	if (!iwqp->user_mode) {
526 		if (iwqp->iwscq) {
527 			irdma_clean_cqes(iwqp, iwqp->iwscq);
528 			if (iwqp->iwrcq != iwqp->iwscq)
529 				irdma_clean_cqes(iwqp, iwqp->iwrcq);
530 		}
531 	}
532 
533 	irdma_qp_rem_ref(&iwqp->ibqp);
534 	wait_for_completion(&iwqp->free_qp);
535 	irdma_free_lsmm_rsrc(iwqp);
536 	irdma_cqp_qp_destroy_cmd(&iwdev->rf->sc_dev, &iwqp->sc_qp);
537 
538 	irdma_remove_push_mmap_entries(iwqp);
539 	irdma_free_qp_rsrc(iwqp);
540 
541 	return 0;
542 }
543 
544 /**
545  * irdma_setup_virt_qp - setup for allocation of virtual qp
546  * @iwdev: irdma device
547  * @iwqp: qp ptr
548  * @init_info: initialize info to return
549  */
550 static void irdma_setup_virt_qp(struct irdma_device *iwdev,
551 			       struct irdma_qp *iwqp,
552 			       struct irdma_qp_init_info *init_info)
553 {
554 	struct irdma_pbl *iwpbl = iwqp->iwpbl;
555 	struct irdma_qp_mr *qpmr = &iwpbl->qp_mr;
556 
557 	iwqp->page = qpmr->sq_page;
558 	init_info->shadow_area_pa = qpmr->shadow;
559 	if (iwpbl->pbl_allocated) {
560 		init_info->virtual_map = true;
561 		init_info->sq_pa = qpmr->sq_pbl.idx;
562 		init_info->rq_pa = qpmr->rq_pbl.idx;
563 	} else {
564 		init_info->sq_pa = qpmr->sq_pbl.addr;
565 		init_info->rq_pa = qpmr->rq_pbl.addr;
566 	}
567 }
568 
569 /**
570  * irdma_setup_kmode_qp - setup initialization for kernel mode qp
571  * @iwdev: iwarp device
572  * @iwqp: qp ptr (user or kernel)
573  * @info: initialize info to return
574  * @init_attr: Initial QP create attributes
575  */
576 static int irdma_setup_kmode_qp(struct irdma_device *iwdev,
577 				struct irdma_qp *iwqp,
578 				struct irdma_qp_init_info *info,
579 				struct ib_qp_init_attr *init_attr)
580 {
581 	struct irdma_dma_mem *mem = &iwqp->kqp.dma_mem;
582 	u32 sqdepth, rqdepth;
583 	u8 sqshift, rqshift;
584 	u32 size;
585 	int status;
586 	struct irdma_qp_uk_init_info *ukinfo = &info->qp_uk_init_info;
587 	struct irdma_uk_attrs *uk_attrs = &iwdev->rf->sc_dev.hw_attrs.uk_attrs;
588 
589 	irdma_get_wqe_shift(uk_attrs,
590 		uk_attrs->hw_rev >= IRDMA_GEN_2 ? ukinfo->max_sq_frag_cnt + 1 :
591 						  ukinfo->max_sq_frag_cnt,
592 		ukinfo->max_inline_data, &sqshift);
593 	status = irdma_get_sqdepth(uk_attrs, ukinfo->sq_size, sqshift,
594 				   &sqdepth);
595 	if (status)
596 		return status;
597 
598 	if (uk_attrs->hw_rev == IRDMA_GEN_1)
599 		rqshift = IRDMA_MAX_RQ_WQE_SHIFT_GEN1;
600 	else
601 		irdma_get_wqe_shift(uk_attrs, ukinfo->max_rq_frag_cnt, 0,
602 				    &rqshift);
603 
604 	status = irdma_get_rqdepth(uk_attrs, ukinfo->rq_size, rqshift,
605 				   &rqdepth);
606 	if (status)
607 		return status;
608 
609 	iwqp->kqp.sq_wrid_mem =
610 		kcalloc(sqdepth, sizeof(*iwqp->kqp.sq_wrid_mem), GFP_KERNEL);
611 	if (!iwqp->kqp.sq_wrid_mem)
612 		return -ENOMEM;
613 
614 	iwqp->kqp.rq_wrid_mem =
615 		kcalloc(rqdepth, sizeof(*iwqp->kqp.rq_wrid_mem), GFP_KERNEL);
616 	if (!iwqp->kqp.rq_wrid_mem) {
617 		kfree(iwqp->kqp.sq_wrid_mem);
618 		iwqp->kqp.sq_wrid_mem = NULL;
619 		return -ENOMEM;
620 	}
621 
622 	ukinfo->sq_wrtrk_array = iwqp->kqp.sq_wrid_mem;
623 	ukinfo->rq_wrid_array = iwqp->kqp.rq_wrid_mem;
624 
625 	size = (sqdepth + rqdepth) * IRDMA_QP_WQE_MIN_SIZE;
626 	size += (IRDMA_SHADOW_AREA_SIZE << 3);
627 
628 	mem->size = ALIGN(size, 256);
629 	mem->va = dma_alloc_coherent(iwdev->rf->hw.device, mem->size,
630 				     &mem->pa, GFP_KERNEL);
631 	if (!mem->va) {
632 		kfree(iwqp->kqp.sq_wrid_mem);
633 		iwqp->kqp.sq_wrid_mem = NULL;
634 		kfree(iwqp->kqp.rq_wrid_mem);
635 		iwqp->kqp.rq_wrid_mem = NULL;
636 		return -ENOMEM;
637 	}
638 
639 	ukinfo->sq = mem->va;
640 	info->sq_pa = mem->pa;
641 	ukinfo->rq = &ukinfo->sq[sqdepth];
642 	info->rq_pa = info->sq_pa + (sqdepth * IRDMA_QP_WQE_MIN_SIZE);
643 	ukinfo->shadow_area = ukinfo->rq[rqdepth].elem;
644 	info->shadow_area_pa = info->rq_pa + (rqdepth * IRDMA_QP_WQE_MIN_SIZE);
645 	ukinfo->sq_size = sqdepth >> sqshift;
646 	ukinfo->rq_size = rqdepth >> rqshift;
647 	ukinfo->qp_id = iwqp->ibqp.qp_num;
648 
649 	init_attr->cap.max_send_wr = (sqdepth - IRDMA_SQ_RSVD) >> sqshift;
650 	init_attr->cap.max_recv_wr = (rqdepth - IRDMA_RQ_RSVD) >> rqshift;
651 
652 	return 0;
653 }
654 
655 static int irdma_cqp_create_qp_cmd(struct irdma_qp *iwqp)
656 {
657 	struct irdma_pci_f *rf = iwqp->iwdev->rf;
658 	struct irdma_cqp_request *cqp_request;
659 	struct cqp_cmds_info *cqp_info;
660 	struct irdma_create_qp_info *qp_info;
661 	int status;
662 
663 	cqp_request = irdma_alloc_and_get_cqp_request(&rf->cqp, true);
664 	if (!cqp_request)
665 		return -ENOMEM;
666 
667 	cqp_info = &cqp_request->info;
668 	qp_info = &cqp_request->info.in.u.qp_create.info;
669 	memset(qp_info, 0, sizeof(*qp_info));
670 	qp_info->mac_valid = true;
671 	qp_info->cq_num_valid = true;
672 	qp_info->next_iwarp_state = IRDMA_QP_STATE_IDLE;
673 
674 	cqp_info->cqp_cmd = IRDMA_OP_QP_CREATE;
675 	cqp_info->post_sq = 1;
676 	cqp_info->in.u.qp_create.qp = &iwqp->sc_qp;
677 	cqp_info->in.u.qp_create.scratch = (uintptr_t)cqp_request;
678 	status = irdma_handle_cqp_op(rf, cqp_request);
679 	irdma_put_cqp_request(&rf->cqp, cqp_request);
680 
681 	return status;
682 }
683 
684 static void irdma_roce_fill_and_set_qpctx_info(struct irdma_qp *iwqp,
685 					       struct irdma_qp_host_ctx_info *ctx_info)
686 {
687 	struct irdma_device *iwdev = iwqp->iwdev;
688 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
689 	struct irdma_roce_offload_info *roce_info;
690 	struct irdma_udp_offload_info *udp_info;
691 
692 	udp_info = &iwqp->udp_info;
693 	udp_info->snd_mss = ib_mtu_enum_to_int(ib_mtu_int_to_enum(iwdev->vsi.mtu));
694 	udp_info->cwnd = iwdev->roce_cwnd;
695 	udp_info->rexmit_thresh = 2;
696 	udp_info->rnr_nak_thresh = 2;
697 	udp_info->src_port = 0xc000;
698 	udp_info->dst_port = ROCE_V2_UDP_DPORT;
699 	roce_info = &iwqp->roce_info;
700 	ether_addr_copy(roce_info->mac_addr, iwdev->netdev->dev_addr);
701 
702 	roce_info->rd_en = true;
703 	roce_info->wr_rdresp_en = true;
704 	roce_info->bind_en = true;
705 	roce_info->dcqcn_en = false;
706 	roce_info->rtomin = 5;
707 
708 	roce_info->ack_credits = iwdev->roce_ackcreds;
709 	roce_info->ird_size = dev->hw_attrs.max_hw_ird;
710 	roce_info->ord_size = dev->hw_attrs.max_hw_ord;
711 
712 	if (!iwqp->user_mode) {
713 		roce_info->priv_mode_en = true;
714 		roce_info->fast_reg_en = true;
715 		roce_info->udprivcq_en = true;
716 	}
717 	roce_info->roce_tver = 0;
718 
719 	ctx_info->roce_info = &iwqp->roce_info;
720 	ctx_info->udp_info = &iwqp->udp_info;
721 	irdma_sc_qp_setctx_roce(&iwqp->sc_qp, iwqp->host_ctx.va, ctx_info);
722 }
723 
724 static void irdma_iw_fill_and_set_qpctx_info(struct irdma_qp *iwqp,
725 					     struct irdma_qp_host_ctx_info *ctx_info)
726 {
727 	struct irdma_device *iwdev = iwqp->iwdev;
728 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
729 	struct irdma_iwarp_offload_info *iwarp_info;
730 
731 	iwarp_info = &iwqp->iwarp_info;
732 	ether_addr_copy(iwarp_info->mac_addr, iwdev->netdev->dev_addr);
733 	iwarp_info->rd_en = true;
734 	iwarp_info->wr_rdresp_en = true;
735 	iwarp_info->bind_en = true;
736 	iwarp_info->ecn_en = true;
737 	iwarp_info->rtomin = 5;
738 
739 	if (dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2)
740 		iwarp_info->ib_rd_en = true;
741 	if (!iwqp->user_mode) {
742 		iwarp_info->priv_mode_en = true;
743 		iwarp_info->fast_reg_en = true;
744 	}
745 	iwarp_info->ddp_ver = 1;
746 	iwarp_info->rdmap_ver = 1;
747 
748 	ctx_info->iwarp_info = &iwqp->iwarp_info;
749 	ctx_info->iwarp_info_valid = true;
750 	irdma_sc_qp_setctx(&iwqp->sc_qp, iwqp->host_ctx.va, ctx_info);
751 	ctx_info->iwarp_info_valid = false;
752 }
753 
754 static int irdma_validate_qp_attrs(struct ib_qp_init_attr *init_attr,
755 				   struct irdma_device *iwdev)
756 {
757 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
758 	struct irdma_uk_attrs *uk_attrs = &dev->hw_attrs.uk_attrs;
759 
760 	if (init_attr->create_flags)
761 		return -EOPNOTSUPP;
762 
763 	if (init_attr->cap.max_inline_data > uk_attrs->max_hw_inline ||
764 	    init_attr->cap.max_send_sge > uk_attrs->max_hw_wq_frags ||
765 	    init_attr->cap.max_recv_sge > uk_attrs->max_hw_wq_frags)
766 		return -EINVAL;
767 
768 	if (rdma_protocol_roce(&iwdev->ibdev, 1)) {
769 		if (init_attr->qp_type != IB_QPT_RC &&
770 		    init_attr->qp_type != IB_QPT_UD &&
771 		    init_attr->qp_type != IB_QPT_GSI)
772 			return -EOPNOTSUPP;
773 	} else {
774 		if (init_attr->qp_type != IB_QPT_RC)
775 			return -EOPNOTSUPP;
776 	}
777 
778 	return 0;
779 }
780 
781 static void irdma_flush_worker(struct work_struct *work)
782 {
783 	struct delayed_work *dwork = to_delayed_work(work);
784 	struct irdma_qp *iwqp = container_of(dwork, struct irdma_qp, dwork_flush);
785 
786 	irdma_generate_flush_completions(iwqp);
787 }
788 
789 /**
790  * irdma_create_qp - create qp
791  * @ibqp: ptr of qp
792  * @init_attr: attributes for qp
793  * @udata: user data for create qp
794  */
795 static int irdma_create_qp(struct ib_qp *ibqp,
796 			   struct ib_qp_init_attr *init_attr,
797 			   struct ib_udata *udata)
798 {
799 #define IRDMA_CREATE_QP_MIN_REQ_LEN offsetofend(struct irdma_create_qp_req, user_compl_ctx)
800 #define IRDMA_CREATE_QP_MIN_RESP_LEN offsetofend(struct irdma_create_qp_resp, rsvd)
801 	struct ib_pd *ibpd = ibqp->pd;
802 	struct irdma_pd *iwpd = to_iwpd(ibpd);
803 	struct irdma_device *iwdev = to_iwdev(ibpd->device);
804 	struct irdma_pci_f *rf = iwdev->rf;
805 	struct irdma_qp *iwqp = to_iwqp(ibqp);
806 	struct irdma_create_qp_req req = {};
807 	struct irdma_create_qp_resp uresp = {};
808 	u32 qp_num = 0;
809 	int err_code;
810 	int sq_size;
811 	int rq_size;
812 	struct irdma_sc_qp *qp;
813 	struct irdma_sc_dev *dev = &rf->sc_dev;
814 	struct irdma_uk_attrs *uk_attrs = &dev->hw_attrs.uk_attrs;
815 	struct irdma_qp_init_info init_info = {};
816 	struct irdma_qp_host_ctx_info *ctx_info;
817 	unsigned long flags;
818 
819 	err_code = irdma_validate_qp_attrs(init_attr, iwdev);
820 	if (err_code)
821 		return err_code;
822 
823 	if (udata && (udata->inlen < IRDMA_CREATE_QP_MIN_REQ_LEN ||
824 		      udata->outlen < IRDMA_CREATE_QP_MIN_RESP_LEN))
825 		return -EINVAL;
826 
827 	sq_size = init_attr->cap.max_send_wr;
828 	rq_size = init_attr->cap.max_recv_wr;
829 
830 	init_info.vsi = &iwdev->vsi;
831 	init_info.qp_uk_init_info.uk_attrs = uk_attrs;
832 	init_info.qp_uk_init_info.sq_size = sq_size;
833 	init_info.qp_uk_init_info.rq_size = rq_size;
834 	init_info.qp_uk_init_info.max_sq_frag_cnt = init_attr->cap.max_send_sge;
835 	init_info.qp_uk_init_info.max_rq_frag_cnt = init_attr->cap.max_recv_sge;
836 	init_info.qp_uk_init_info.max_inline_data = init_attr->cap.max_inline_data;
837 
838 	qp = &iwqp->sc_qp;
839 	qp->qp_uk.back_qp = iwqp;
840 	qp->push_idx = IRDMA_INVALID_PUSH_PAGE_INDEX;
841 
842 	iwqp->iwdev = iwdev;
843 	iwqp->q2_ctx_mem.size = ALIGN(IRDMA_Q2_BUF_SIZE + IRDMA_QP_CTX_SIZE,
844 				      256);
845 	iwqp->q2_ctx_mem.va = dma_alloc_coherent(dev->hw->device,
846 						 iwqp->q2_ctx_mem.size,
847 						 &iwqp->q2_ctx_mem.pa,
848 						 GFP_KERNEL);
849 	if (!iwqp->q2_ctx_mem.va)
850 		return -ENOMEM;
851 
852 	init_info.q2 = iwqp->q2_ctx_mem.va;
853 	init_info.q2_pa = iwqp->q2_ctx_mem.pa;
854 	init_info.host_ctx = (__le64 *)(init_info.q2 + IRDMA_Q2_BUF_SIZE);
855 	init_info.host_ctx_pa = init_info.q2_pa + IRDMA_Q2_BUF_SIZE;
856 
857 	if (init_attr->qp_type == IB_QPT_GSI)
858 		qp_num = 1;
859 	else
860 		err_code = irdma_alloc_rsrc(rf, rf->allocated_qps, rf->max_qp,
861 					    &qp_num, &rf->next_qp);
862 	if (err_code)
863 		goto error;
864 
865 	iwqp->iwpd = iwpd;
866 	iwqp->ibqp.qp_num = qp_num;
867 	qp = &iwqp->sc_qp;
868 	iwqp->iwscq = to_iwcq(init_attr->send_cq);
869 	iwqp->iwrcq = to_iwcq(init_attr->recv_cq);
870 	iwqp->host_ctx.va = init_info.host_ctx;
871 	iwqp->host_ctx.pa = init_info.host_ctx_pa;
872 	iwqp->host_ctx.size = IRDMA_QP_CTX_SIZE;
873 
874 	init_info.pd = &iwpd->sc_pd;
875 	init_info.qp_uk_init_info.qp_id = iwqp->ibqp.qp_num;
876 	if (!rdma_protocol_roce(&iwdev->ibdev, 1))
877 		init_info.qp_uk_init_info.first_sq_wq = 1;
878 	iwqp->ctx_info.qp_compl_ctx = (uintptr_t)qp;
879 	init_waitqueue_head(&iwqp->waitq);
880 	init_waitqueue_head(&iwqp->mod_qp_waitq);
881 
882 	if (udata) {
883 		err_code = ib_copy_from_udata(&req, udata,
884 					      min(sizeof(req), udata->inlen));
885 		if (err_code) {
886 			ibdev_dbg(&iwdev->ibdev,
887 				  "VERBS: ib_copy_from_data fail\n");
888 			goto error;
889 		}
890 
891 		iwqp->ctx_info.qp_compl_ctx = req.user_compl_ctx;
892 		iwqp->user_mode = 1;
893 		if (req.user_wqe_bufs) {
894 			struct irdma_ucontext *ucontext =
895 				rdma_udata_to_drv_context(udata,
896 							  struct irdma_ucontext,
897 							  ibucontext);
898 
899 			init_info.qp_uk_init_info.legacy_mode = ucontext->legacy_mode;
900 			spin_lock_irqsave(&ucontext->qp_reg_mem_list_lock, flags);
901 			iwqp->iwpbl = irdma_get_pbl((unsigned long)req.user_wqe_bufs,
902 						    &ucontext->qp_reg_mem_list);
903 			spin_unlock_irqrestore(&ucontext->qp_reg_mem_list_lock, flags);
904 
905 			if (!iwqp->iwpbl) {
906 				err_code = -ENODATA;
907 				ibdev_dbg(&iwdev->ibdev, "VERBS: no pbl info\n");
908 				goto error;
909 			}
910 		}
911 		init_info.qp_uk_init_info.abi_ver = iwpd->sc_pd.abi_ver;
912 		irdma_setup_virt_qp(iwdev, iwqp, &init_info);
913 	} else {
914 		INIT_DELAYED_WORK(&iwqp->dwork_flush, irdma_flush_worker);
915 		init_info.qp_uk_init_info.abi_ver = IRDMA_ABI_VER;
916 		err_code = irdma_setup_kmode_qp(iwdev, iwqp, &init_info, init_attr);
917 	}
918 
919 	if (err_code) {
920 		ibdev_dbg(&iwdev->ibdev, "VERBS: setup qp failed\n");
921 		goto error;
922 	}
923 
924 	if (rdma_protocol_roce(&iwdev->ibdev, 1)) {
925 		if (init_attr->qp_type == IB_QPT_RC) {
926 			init_info.qp_uk_init_info.type = IRDMA_QP_TYPE_ROCE_RC;
927 			init_info.qp_uk_init_info.qp_caps = IRDMA_SEND_WITH_IMM |
928 							    IRDMA_WRITE_WITH_IMM |
929 							    IRDMA_ROCE;
930 		} else {
931 			init_info.qp_uk_init_info.type = IRDMA_QP_TYPE_ROCE_UD;
932 			init_info.qp_uk_init_info.qp_caps = IRDMA_SEND_WITH_IMM |
933 							    IRDMA_ROCE;
934 		}
935 	} else {
936 		init_info.qp_uk_init_info.type = IRDMA_QP_TYPE_IWARP;
937 		init_info.qp_uk_init_info.qp_caps = IRDMA_WRITE_WITH_IMM;
938 	}
939 
940 	if (dev->hw_attrs.uk_attrs.hw_rev > IRDMA_GEN_1)
941 		init_info.qp_uk_init_info.qp_caps |= IRDMA_PUSH_MODE;
942 
943 	err_code = irdma_sc_qp_init(qp, &init_info);
944 	if (err_code) {
945 		ibdev_dbg(&iwdev->ibdev, "VERBS: qp_init fail\n");
946 		goto error;
947 	}
948 
949 	ctx_info = &iwqp->ctx_info;
950 	ctx_info->send_cq_num = iwqp->iwscq->sc_cq.cq_uk.cq_id;
951 	ctx_info->rcv_cq_num = iwqp->iwrcq->sc_cq.cq_uk.cq_id;
952 
953 	if (rdma_protocol_roce(&iwdev->ibdev, 1))
954 		irdma_roce_fill_and_set_qpctx_info(iwqp, ctx_info);
955 	else
956 		irdma_iw_fill_and_set_qpctx_info(iwqp, ctx_info);
957 
958 	err_code = irdma_cqp_create_qp_cmd(iwqp);
959 	if (err_code)
960 		goto error;
961 
962 	refcount_set(&iwqp->refcnt, 1);
963 	spin_lock_init(&iwqp->lock);
964 	spin_lock_init(&iwqp->sc_qp.pfpdu.lock);
965 	iwqp->sig_all = (init_attr->sq_sig_type == IB_SIGNAL_ALL_WR) ? 1 : 0;
966 	rf->qp_table[qp_num] = iwqp;
967 	iwqp->max_send_wr = sq_size;
968 	iwqp->max_recv_wr = rq_size;
969 
970 	if (rdma_protocol_roce(&iwdev->ibdev, 1)) {
971 		if (dev->ws_add(&iwdev->vsi, 0)) {
972 			irdma_cqp_qp_destroy_cmd(&rf->sc_dev, &iwqp->sc_qp);
973 			err_code = -EINVAL;
974 			goto error;
975 		}
976 
977 		irdma_qp_add_qos(&iwqp->sc_qp);
978 	}
979 
980 	if (udata) {
981 		/* GEN_1 legacy support with libi40iw does not have expanded uresp struct */
982 		if (udata->outlen < sizeof(uresp)) {
983 			uresp.lsmm = 1;
984 			uresp.push_idx = IRDMA_INVALID_PUSH_PAGE_INDEX_GEN_1;
985 		} else {
986 			if (rdma_protocol_iwarp(&iwdev->ibdev, 1))
987 				uresp.lsmm = 1;
988 		}
989 		uresp.actual_sq_size = sq_size;
990 		uresp.actual_rq_size = rq_size;
991 		uresp.qp_id = qp_num;
992 		uresp.qp_caps = qp->qp_uk.qp_caps;
993 
994 		err_code = ib_copy_to_udata(udata, &uresp,
995 					    min(sizeof(uresp), udata->outlen));
996 		if (err_code) {
997 			ibdev_dbg(&iwdev->ibdev, "VERBS: copy_to_udata failed\n");
998 			irdma_destroy_qp(&iwqp->ibqp, udata);
999 			return err_code;
1000 		}
1001 	}
1002 
1003 	init_completion(&iwqp->free_qp);
1004 	return 0;
1005 
1006 error:
1007 	irdma_free_qp_rsrc(iwqp);
1008 	return err_code;
1009 }
1010 
1011 static int irdma_get_ib_acc_flags(struct irdma_qp *iwqp)
1012 {
1013 	int acc_flags = 0;
1014 
1015 	if (rdma_protocol_roce(iwqp->ibqp.device, 1)) {
1016 		if (iwqp->roce_info.wr_rdresp_en) {
1017 			acc_flags |= IB_ACCESS_LOCAL_WRITE;
1018 			acc_flags |= IB_ACCESS_REMOTE_WRITE;
1019 		}
1020 		if (iwqp->roce_info.rd_en)
1021 			acc_flags |= IB_ACCESS_REMOTE_READ;
1022 		if (iwqp->roce_info.bind_en)
1023 			acc_flags |= IB_ACCESS_MW_BIND;
1024 	} else {
1025 		if (iwqp->iwarp_info.wr_rdresp_en) {
1026 			acc_flags |= IB_ACCESS_LOCAL_WRITE;
1027 			acc_flags |= IB_ACCESS_REMOTE_WRITE;
1028 		}
1029 		if (iwqp->iwarp_info.rd_en)
1030 			acc_flags |= IB_ACCESS_REMOTE_READ;
1031 		if (iwqp->iwarp_info.bind_en)
1032 			acc_flags |= IB_ACCESS_MW_BIND;
1033 	}
1034 	return acc_flags;
1035 }
1036 
1037 /**
1038  * irdma_query_qp - query qp attributes
1039  * @ibqp: qp pointer
1040  * @attr: attributes pointer
1041  * @attr_mask: Not used
1042  * @init_attr: qp attributes to return
1043  */
1044 static int irdma_query_qp(struct ib_qp *ibqp, struct ib_qp_attr *attr,
1045 			  int attr_mask, struct ib_qp_init_attr *init_attr)
1046 {
1047 	struct irdma_qp *iwqp = to_iwqp(ibqp);
1048 	struct irdma_sc_qp *qp = &iwqp->sc_qp;
1049 
1050 	memset(attr, 0, sizeof(*attr));
1051 	memset(init_attr, 0, sizeof(*init_attr));
1052 
1053 	attr->qp_state = iwqp->ibqp_state;
1054 	attr->cur_qp_state = iwqp->ibqp_state;
1055 	attr->cap.max_send_wr = iwqp->max_send_wr;
1056 	attr->cap.max_recv_wr = iwqp->max_recv_wr;
1057 	attr->cap.max_inline_data = qp->qp_uk.max_inline_data;
1058 	attr->cap.max_send_sge = qp->qp_uk.max_sq_frag_cnt;
1059 	attr->cap.max_recv_sge = qp->qp_uk.max_rq_frag_cnt;
1060 	attr->qp_access_flags = irdma_get_ib_acc_flags(iwqp);
1061 	attr->port_num = 1;
1062 	if (rdma_protocol_roce(ibqp->device, 1)) {
1063 		attr->path_mtu = ib_mtu_int_to_enum(iwqp->udp_info.snd_mss);
1064 		attr->qkey = iwqp->roce_info.qkey;
1065 		attr->rq_psn = iwqp->udp_info.epsn;
1066 		attr->sq_psn = iwqp->udp_info.psn_nxt;
1067 		attr->dest_qp_num = iwqp->roce_info.dest_qp;
1068 		attr->pkey_index = iwqp->roce_info.p_key;
1069 		attr->retry_cnt = iwqp->udp_info.rexmit_thresh;
1070 		attr->rnr_retry = iwqp->udp_info.rnr_nak_thresh;
1071 		attr->max_rd_atomic = iwqp->roce_info.ord_size;
1072 		attr->max_dest_rd_atomic = iwqp->roce_info.ird_size;
1073 	}
1074 
1075 	init_attr->event_handler = iwqp->ibqp.event_handler;
1076 	init_attr->qp_context = iwqp->ibqp.qp_context;
1077 	init_attr->send_cq = iwqp->ibqp.send_cq;
1078 	init_attr->recv_cq = iwqp->ibqp.recv_cq;
1079 	init_attr->cap = attr->cap;
1080 
1081 	return 0;
1082 }
1083 
1084 /**
1085  * irdma_query_pkey - Query partition key
1086  * @ibdev: device pointer from stack
1087  * @port: port number
1088  * @index: index of pkey
1089  * @pkey: pointer to store the pkey
1090  */
1091 static int irdma_query_pkey(struct ib_device *ibdev, u32 port, u16 index,
1092 			    u16 *pkey)
1093 {
1094 	if (index >= IRDMA_PKEY_TBL_SZ)
1095 		return -EINVAL;
1096 
1097 	*pkey = IRDMA_DEFAULT_PKEY;
1098 	return 0;
1099 }
1100 
1101 /**
1102  * irdma_modify_qp_roce - modify qp request
1103  * @ibqp: qp's pointer for modify
1104  * @attr: access attributes
1105  * @attr_mask: state mask
1106  * @udata: user data
1107  */
1108 int irdma_modify_qp_roce(struct ib_qp *ibqp, struct ib_qp_attr *attr,
1109 			 int attr_mask, struct ib_udata *udata)
1110 {
1111 #define IRDMA_MODIFY_QP_MIN_REQ_LEN offsetofend(struct irdma_modify_qp_req, rq_flush)
1112 #define IRDMA_MODIFY_QP_MIN_RESP_LEN offsetofend(struct irdma_modify_qp_resp, push_valid)
1113 	struct irdma_pd *iwpd = to_iwpd(ibqp->pd);
1114 	struct irdma_qp *iwqp = to_iwqp(ibqp);
1115 	struct irdma_device *iwdev = iwqp->iwdev;
1116 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
1117 	struct irdma_qp_host_ctx_info *ctx_info;
1118 	struct irdma_roce_offload_info *roce_info;
1119 	struct irdma_udp_offload_info *udp_info;
1120 	struct irdma_modify_qp_info info = {};
1121 	struct irdma_modify_qp_resp uresp = {};
1122 	struct irdma_modify_qp_req ureq = {};
1123 	unsigned long flags;
1124 	u8 issue_modify_qp = 0;
1125 	int ret = 0;
1126 
1127 	ctx_info = &iwqp->ctx_info;
1128 	roce_info = &iwqp->roce_info;
1129 	udp_info = &iwqp->udp_info;
1130 
1131 	if (udata) {
1132 		/* udata inlen/outlen can be 0 when supporting legacy libi40iw */
1133 		if ((udata->inlen && udata->inlen < IRDMA_MODIFY_QP_MIN_REQ_LEN) ||
1134 		    (udata->outlen && udata->outlen < IRDMA_MODIFY_QP_MIN_RESP_LEN))
1135 			return -EINVAL;
1136 	}
1137 
1138 	if (attr_mask & ~IB_QP_ATTR_STANDARD_BITS)
1139 		return -EOPNOTSUPP;
1140 
1141 	if (attr_mask & IB_QP_DEST_QPN)
1142 		roce_info->dest_qp = attr->dest_qp_num;
1143 
1144 	if (attr_mask & IB_QP_PKEY_INDEX) {
1145 		ret = irdma_query_pkey(ibqp->device, 0, attr->pkey_index,
1146 				       &roce_info->p_key);
1147 		if (ret)
1148 			return ret;
1149 	}
1150 
1151 	if (attr_mask & IB_QP_QKEY)
1152 		roce_info->qkey = attr->qkey;
1153 
1154 	if (attr_mask & IB_QP_PATH_MTU)
1155 		udp_info->snd_mss = ib_mtu_enum_to_int(attr->path_mtu);
1156 
1157 	if (attr_mask & IB_QP_SQ_PSN) {
1158 		udp_info->psn_nxt = attr->sq_psn;
1159 		udp_info->lsn =  0xffff;
1160 		udp_info->psn_una = attr->sq_psn;
1161 		udp_info->psn_max = attr->sq_psn;
1162 	}
1163 
1164 	if (attr_mask & IB_QP_RQ_PSN)
1165 		udp_info->epsn = attr->rq_psn;
1166 
1167 	if (attr_mask & IB_QP_RNR_RETRY)
1168 		udp_info->rnr_nak_thresh = attr->rnr_retry;
1169 
1170 	if (attr_mask & IB_QP_RETRY_CNT)
1171 		udp_info->rexmit_thresh = attr->retry_cnt;
1172 
1173 	ctx_info->roce_info->pd_id = iwpd->sc_pd.pd_id;
1174 
1175 	if (attr_mask & IB_QP_AV) {
1176 		struct irdma_av *av = &iwqp->roce_ah.av;
1177 		const struct ib_gid_attr *sgid_attr;
1178 		u16 vlan_id = VLAN_N_VID;
1179 		u32 local_ip[4];
1180 
1181 		memset(&iwqp->roce_ah, 0, sizeof(iwqp->roce_ah));
1182 		if (attr->ah_attr.ah_flags & IB_AH_GRH) {
1183 			udp_info->ttl = attr->ah_attr.grh.hop_limit;
1184 			udp_info->flow_label = attr->ah_attr.grh.flow_label;
1185 			udp_info->tos = attr->ah_attr.grh.traffic_class;
1186 			udp_info->src_port =
1187 				rdma_get_udp_sport(udp_info->flow_label,
1188 						   ibqp->qp_num,
1189 						   roce_info->dest_qp);
1190 			irdma_qp_rem_qos(&iwqp->sc_qp);
1191 			dev->ws_remove(iwqp->sc_qp.vsi, ctx_info->user_pri);
1192 			ctx_info->user_pri = rt_tos2priority(udp_info->tos);
1193 			iwqp->sc_qp.user_pri = ctx_info->user_pri;
1194 			if (dev->ws_add(iwqp->sc_qp.vsi, ctx_info->user_pri))
1195 				return -ENOMEM;
1196 			irdma_qp_add_qos(&iwqp->sc_qp);
1197 		}
1198 		sgid_attr = attr->ah_attr.grh.sgid_attr;
1199 		ret = rdma_read_gid_l2_fields(sgid_attr, &vlan_id,
1200 					      ctx_info->roce_info->mac_addr);
1201 		if (ret)
1202 			return ret;
1203 
1204 		if (vlan_id >= VLAN_N_VID && iwdev->dcb_vlan_mode)
1205 			vlan_id = 0;
1206 		if (vlan_id < VLAN_N_VID) {
1207 			udp_info->insert_vlan_tag = true;
1208 			udp_info->vlan_tag = vlan_id |
1209 				ctx_info->user_pri << VLAN_PRIO_SHIFT;
1210 		} else {
1211 			udp_info->insert_vlan_tag = false;
1212 		}
1213 
1214 		av->attrs = attr->ah_attr;
1215 		rdma_gid2ip((struct sockaddr *)&av->sgid_addr, &sgid_attr->gid);
1216 		rdma_gid2ip((struct sockaddr *)&av->dgid_addr, &attr->ah_attr.grh.dgid);
1217 		av->net_type = rdma_gid_attr_network_type(sgid_attr);
1218 		if (av->net_type == RDMA_NETWORK_IPV6) {
1219 			__be32 *daddr =
1220 				av->dgid_addr.saddr_in6.sin6_addr.in6_u.u6_addr32;
1221 			__be32 *saddr =
1222 				av->sgid_addr.saddr_in6.sin6_addr.in6_u.u6_addr32;
1223 
1224 			irdma_copy_ip_ntohl(&udp_info->dest_ip_addr[0], daddr);
1225 			irdma_copy_ip_ntohl(&udp_info->local_ipaddr[0], saddr);
1226 
1227 			udp_info->ipv4 = false;
1228 			irdma_copy_ip_ntohl(local_ip, daddr);
1229 
1230 		} else if (av->net_type == RDMA_NETWORK_IPV4) {
1231 			__be32 saddr = av->sgid_addr.saddr_in.sin_addr.s_addr;
1232 			__be32 daddr = av->dgid_addr.saddr_in.sin_addr.s_addr;
1233 
1234 			local_ip[0] = ntohl(daddr);
1235 
1236 			udp_info->ipv4 = true;
1237 			udp_info->dest_ip_addr[0] = 0;
1238 			udp_info->dest_ip_addr[1] = 0;
1239 			udp_info->dest_ip_addr[2] = 0;
1240 			udp_info->dest_ip_addr[3] = local_ip[0];
1241 
1242 			udp_info->local_ipaddr[0] = 0;
1243 			udp_info->local_ipaddr[1] = 0;
1244 			udp_info->local_ipaddr[2] = 0;
1245 			udp_info->local_ipaddr[3] = ntohl(saddr);
1246 		}
1247 		udp_info->arp_idx =
1248 			irdma_add_arp(iwdev->rf, local_ip, udp_info->ipv4,
1249 				      attr->ah_attr.roce.dmac);
1250 	}
1251 
1252 	if (attr_mask & IB_QP_MAX_QP_RD_ATOMIC) {
1253 		if (attr->max_rd_atomic > dev->hw_attrs.max_hw_ord) {
1254 			ibdev_err(&iwdev->ibdev,
1255 				  "rd_atomic = %d, above max_hw_ord=%d\n",
1256 				  attr->max_rd_atomic,
1257 				  dev->hw_attrs.max_hw_ord);
1258 			return -EINVAL;
1259 		}
1260 		if (attr->max_rd_atomic)
1261 			roce_info->ord_size = attr->max_rd_atomic;
1262 		info.ord_valid = true;
1263 	}
1264 
1265 	if (attr_mask & IB_QP_MAX_DEST_RD_ATOMIC) {
1266 		if (attr->max_dest_rd_atomic > dev->hw_attrs.max_hw_ird) {
1267 			ibdev_err(&iwdev->ibdev,
1268 				  "rd_atomic = %d, above max_hw_ird=%d\n",
1269 				   attr->max_rd_atomic,
1270 				   dev->hw_attrs.max_hw_ird);
1271 			return -EINVAL;
1272 		}
1273 		if (attr->max_dest_rd_atomic)
1274 			roce_info->ird_size = attr->max_dest_rd_atomic;
1275 	}
1276 
1277 	if (attr_mask & IB_QP_ACCESS_FLAGS) {
1278 		if (attr->qp_access_flags & IB_ACCESS_LOCAL_WRITE)
1279 			roce_info->wr_rdresp_en = true;
1280 		if (attr->qp_access_flags & IB_ACCESS_REMOTE_WRITE)
1281 			roce_info->wr_rdresp_en = true;
1282 		if (attr->qp_access_flags & IB_ACCESS_REMOTE_READ)
1283 			roce_info->rd_en = true;
1284 	}
1285 
1286 	wait_event(iwqp->mod_qp_waitq, !atomic_read(&iwqp->hw_mod_qp_pend));
1287 
1288 	ibdev_dbg(&iwdev->ibdev,
1289 		  "VERBS: caller: %pS qp_id=%d to_ibqpstate=%d ibqpstate=%d irdma_qpstate=%d attr_mask=0x%x\n",
1290 		  __builtin_return_address(0), ibqp->qp_num, attr->qp_state,
1291 		  iwqp->ibqp_state, iwqp->iwarp_state, attr_mask);
1292 
1293 	spin_lock_irqsave(&iwqp->lock, flags);
1294 	if (attr_mask & IB_QP_STATE) {
1295 		if (!ib_modify_qp_is_ok(iwqp->ibqp_state, attr->qp_state,
1296 					iwqp->ibqp.qp_type, attr_mask)) {
1297 			ibdev_warn(&iwdev->ibdev, "modify_qp invalid for qp_id=%d, old_state=0x%x, new_state=0x%x\n",
1298 				   iwqp->ibqp.qp_num, iwqp->ibqp_state,
1299 				   attr->qp_state);
1300 			ret = -EINVAL;
1301 			goto exit;
1302 		}
1303 		info.curr_iwarp_state = iwqp->iwarp_state;
1304 
1305 		switch (attr->qp_state) {
1306 		case IB_QPS_INIT:
1307 			if (iwqp->iwarp_state > IRDMA_QP_STATE_IDLE) {
1308 				ret = -EINVAL;
1309 				goto exit;
1310 			}
1311 
1312 			if (iwqp->iwarp_state == IRDMA_QP_STATE_INVALID) {
1313 				info.next_iwarp_state = IRDMA_QP_STATE_IDLE;
1314 				issue_modify_qp = 1;
1315 			}
1316 			break;
1317 		case IB_QPS_RTR:
1318 			if (iwqp->iwarp_state > IRDMA_QP_STATE_IDLE) {
1319 				ret = -EINVAL;
1320 				goto exit;
1321 			}
1322 			info.arp_cache_idx_valid = true;
1323 			info.cq_num_valid = true;
1324 			info.next_iwarp_state = IRDMA_QP_STATE_RTR;
1325 			issue_modify_qp = 1;
1326 			break;
1327 		case IB_QPS_RTS:
1328 			if (iwqp->ibqp_state < IB_QPS_RTR ||
1329 			    iwqp->ibqp_state == IB_QPS_ERR) {
1330 				ret = -EINVAL;
1331 				goto exit;
1332 			}
1333 
1334 			info.arp_cache_idx_valid = true;
1335 			info.cq_num_valid = true;
1336 			info.ord_valid = true;
1337 			info.next_iwarp_state = IRDMA_QP_STATE_RTS;
1338 			issue_modify_qp = 1;
1339 			if (iwdev->push_mode && udata &&
1340 			    iwqp->sc_qp.push_idx == IRDMA_INVALID_PUSH_PAGE_INDEX &&
1341 			    dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2) {
1342 				spin_unlock_irqrestore(&iwqp->lock, flags);
1343 				irdma_alloc_push_page(iwqp);
1344 				spin_lock_irqsave(&iwqp->lock, flags);
1345 			}
1346 			break;
1347 		case IB_QPS_SQD:
1348 			if (iwqp->iwarp_state == IRDMA_QP_STATE_SQD)
1349 				goto exit;
1350 
1351 			if (iwqp->iwarp_state != IRDMA_QP_STATE_RTS) {
1352 				ret = -EINVAL;
1353 				goto exit;
1354 			}
1355 
1356 			info.next_iwarp_state = IRDMA_QP_STATE_SQD;
1357 			issue_modify_qp = 1;
1358 			break;
1359 		case IB_QPS_SQE:
1360 		case IB_QPS_ERR:
1361 		case IB_QPS_RESET:
1362 			if (iwqp->iwarp_state == IRDMA_QP_STATE_RTS) {
1363 				spin_unlock_irqrestore(&iwqp->lock, flags);
1364 				info.next_iwarp_state = IRDMA_QP_STATE_SQD;
1365 				irdma_hw_modify_qp(iwdev, iwqp, &info, true);
1366 				spin_lock_irqsave(&iwqp->lock, flags);
1367 			}
1368 
1369 			if (iwqp->iwarp_state == IRDMA_QP_STATE_ERROR) {
1370 				spin_unlock_irqrestore(&iwqp->lock, flags);
1371 				if (udata && udata->inlen) {
1372 					if (ib_copy_from_udata(&ureq, udata,
1373 					    min(sizeof(ureq), udata->inlen)))
1374 						return -EINVAL;
1375 
1376 					irdma_flush_wqes(iwqp,
1377 					    (ureq.sq_flush ? IRDMA_FLUSH_SQ : 0) |
1378 					    (ureq.rq_flush ? IRDMA_FLUSH_RQ : 0) |
1379 					    IRDMA_REFLUSH);
1380 				}
1381 				return 0;
1382 			}
1383 
1384 			info.next_iwarp_state = IRDMA_QP_STATE_ERROR;
1385 			issue_modify_qp = 1;
1386 			break;
1387 		default:
1388 			ret = -EINVAL;
1389 			goto exit;
1390 		}
1391 
1392 		iwqp->ibqp_state = attr->qp_state;
1393 	}
1394 
1395 	ctx_info->send_cq_num = iwqp->iwscq->sc_cq.cq_uk.cq_id;
1396 	ctx_info->rcv_cq_num = iwqp->iwrcq->sc_cq.cq_uk.cq_id;
1397 	irdma_sc_qp_setctx_roce(&iwqp->sc_qp, iwqp->host_ctx.va, ctx_info);
1398 	spin_unlock_irqrestore(&iwqp->lock, flags);
1399 
1400 	if (attr_mask & IB_QP_STATE) {
1401 		if (issue_modify_qp) {
1402 			ctx_info->rem_endpoint_idx = udp_info->arp_idx;
1403 			if (irdma_hw_modify_qp(iwdev, iwqp, &info, true))
1404 				return -EINVAL;
1405 			spin_lock_irqsave(&iwqp->lock, flags);
1406 			if (iwqp->iwarp_state == info.curr_iwarp_state) {
1407 				iwqp->iwarp_state = info.next_iwarp_state;
1408 				iwqp->ibqp_state = attr->qp_state;
1409 			}
1410 			if (iwqp->ibqp_state > IB_QPS_RTS &&
1411 			    !iwqp->flush_issued) {
1412 				spin_unlock_irqrestore(&iwqp->lock, flags);
1413 				irdma_flush_wqes(iwqp, IRDMA_FLUSH_SQ |
1414 						       IRDMA_FLUSH_RQ |
1415 						       IRDMA_FLUSH_WAIT);
1416 				iwqp->flush_issued = 1;
1417 			} else {
1418 				spin_unlock_irqrestore(&iwqp->lock, flags);
1419 			}
1420 		} else {
1421 			iwqp->ibqp_state = attr->qp_state;
1422 		}
1423 		if (udata && udata->outlen && dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2) {
1424 			struct irdma_ucontext *ucontext;
1425 
1426 			ucontext = rdma_udata_to_drv_context(udata,
1427 					struct irdma_ucontext, ibucontext);
1428 			if (iwqp->sc_qp.push_idx != IRDMA_INVALID_PUSH_PAGE_INDEX &&
1429 			    !iwqp->push_wqe_mmap_entry &&
1430 			    !irdma_setup_push_mmap_entries(ucontext, iwqp,
1431 				&uresp.push_wqe_mmap_key, &uresp.push_db_mmap_key)) {
1432 				uresp.push_valid = 1;
1433 				uresp.push_offset = iwqp->sc_qp.push_offset;
1434 			}
1435 			ret = ib_copy_to_udata(udata, &uresp, min(sizeof(uresp),
1436 					       udata->outlen));
1437 			if (ret) {
1438 				irdma_remove_push_mmap_entries(iwqp);
1439 				ibdev_dbg(&iwdev->ibdev,
1440 					  "VERBS: copy_to_udata failed\n");
1441 				return ret;
1442 			}
1443 		}
1444 	}
1445 
1446 	return 0;
1447 exit:
1448 	spin_unlock_irqrestore(&iwqp->lock, flags);
1449 
1450 	return ret;
1451 }
1452 
1453 /**
1454  * irdma_modify_qp - modify qp request
1455  * @ibqp: qp's pointer for modify
1456  * @attr: access attributes
1457  * @attr_mask: state mask
1458  * @udata: user data
1459  */
1460 int irdma_modify_qp(struct ib_qp *ibqp, struct ib_qp_attr *attr, int attr_mask,
1461 		    struct ib_udata *udata)
1462 {
1463 #define IRDMA_MODIFY_QP_MIN_REQ_LEN offsetofend(struct irdma_modify_qp_req, rq_flush)
1464 #define IRDMA_MODIFY_QP_MIN_RESP_LEN offsetofend(struct irdma_modify_qp_resp, push_valid)
1465 	struct irdma_qp *iwqp = to_iwqp(ibqp);
1466 	struct irdma_device *iwdev = iwqp->iwdev;
1467 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
1468 	struct irdma_qp_host_ctx_info *ctx_info;
1469 	struct irdma_tcp_offload_info *tcp_info;
1470 	struct irdma_iwarp_offload_info *offload_info;
1471 	struct irdma_modify_qp_info info = {};
1472 	struct irdma_modify_qp_resp uresp = {};
1473 	struct irdma_modify_qp_req ureq = {};
1474 	u8 issue_modify_qp = 0;
1475 	u8 dont_wait = 0;
1476 	int err;
1477 	unsigned long flags;
1478 
1479 	if (udata) {
1480 		/* udata inlen/outlen can be 0 when supporting legacy libi40iw */
1481 		if ((udata->inlen && udata->inlen < IRDMA_MODIFY_QP_MIN_REQ_LEN) ||
1482 		    (udata->outlen && udata->outlen < IRDMA_MODIFY_QP_MIN_RESP_LEN))
1483 			return -EINVAL;
1484 	}
1485 
1486 	if (attr_mask & ~IB_QP_ATTR_STANDARD_BITS)
1487 		return -EOPNOTSUPP;
1488 
1489 	ctx_info = &iwqp->ctx_info;
1490 	offload_info = &iwqp->iwarp_info;
1491 	tcp_info = &iwqp->tcp_info;
1492 	wait_event(iwqp->mod_qp_waitq, !atomic_read(&iwqp->hw_mod_qp_pend));
1493 	ibdev_dbg(&iwdev->ibdev,
1494 		  "VERBS: caller: %pS qp_id=%d to_ibqpstate=%d ibqpstate=%d irdma_qpstate=%d last_aeq=%d hw_tcp_state=%d hw_iwarp_state=%d attr_mask=0x%x\n",
1495 		  __builtin_return_address(0), ibqp->qp_num, attr->qp_state,
1496 		  iwqp->ibqp_state, iwqp->iwarp_state, iwqp->last_aeq,
1497 		  iwqp->hw_tcp_state, iwqp->hw_iwarp_state, attr_mask);
1498 
1499 	spin_lock_irqsave(&iwqp->lock, flags);
1500 	if (attr_mask & IB_QP_STATE) {
1501 		info.curr_iwarp_state = iwqp->iwarp_state;
1502 		switch (attr->qp_state) {
1503 		case IB_QPS_INIT:
1504 		case IB_QPS_RTR:
1505 			if (iwqp->iwarp_state > IRDMA_QP_STATE_IDLE) {
1506 				err = -EINVAL;
1507 				goto exit;
1508 			}
1509 
1510 			if (iwqp->iwarp_state == IRDMA_QP_STATE_INVALID) {
1511 				info.next_iwarp_state = IRDMA_QP_STATE_IDLE;
1512 				issue_modify_qp = 1;
1513 			}
1514 			if (iwdev->push_mode && udata &&
1515 			    iwqp->sc_qp.push_idx == IRDMA_INVALID_PUSH_PAGE_INDEX &&
1516 			    dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2) {
1517 				spin_unlock_irqrestore(&iwqp->lock, flags);
1518 				irdma_alloc_push_page(iwqp);
1519 				spin_lock_irqsave(&iwqp->lock, flags);
1520 			}
1521 			break;
1522 		case IB_QPS_RTS:
1523 			if (iwqp->iwarp_state > IRDMA_QP_STATE_RTS ||
1524 			    !iwqp->cm_id) {
1525 				err = -EINVAL;
1526 				goto exit;
1527 			}
1528 
1529 			issue_modify_qp = 1;
1530 			iwqp->hw_tcp_state = IRDMA_TCP_STATE_ESTABLISHED;
1531 			iwqp->hte_added = 1;
1532 			info.next_iwarp_state = IRDMA_QP_STATE_RTS;
1533 			info.tcp_ctx_valid = true;
1534 			info.ord_valid = true;
1535 			info.arp_cache_idx_valid = true;
1536 			info.cq_num_valid = true;
1537 			break;
1538 		case IB_QPS_SQD:
1539 			if (iwqp->hw_iwarp_state > IRDMA_QP_STATE_RTS) {
1540 				err = 0;
1541 				goto exit;
1542 			}
1543 
1544 			if (iwqp->iwarp_state == IRDMA_QP_STATE_CLOSING ||
1545 			    iwqp->iwarp_state < IRDMA_QP_STATE_RTS) {
1546 				err = 0;
1547 				goto exit;
1548 			}
1549 
1550 			if (iwqp->iwarp_state > IRDMA_QP_STATE_CLOSING) {
1551 				err = -EINVAL;
1552 				goto exit;
1553 			}
1554 
1555 			info.next_iwarp_state = IRDMA_QP_STATE_CLOSING;
1556 			issue_modify_qp = 1;
1557 			break;
1558 		case IB_QPS_SQE:
1559 			if (iwqp->iwarp_state >= IRDMA_QP_STATE_TERMINATE) {
1560 				err = -EINVAL;
1561 				goto exit;
1562 			}
1563 
1564 			info.next_iwarp_state = IRDMA_QP_STATE_TERMINATE;
1565 			issue_modify_qp = 1;
1566 			break;
1567 		case IB_QPS_ERR:
1568 		case IB_QPS_RESET:
1569 			if (iwqp->iwarp_state == IRDMA_QP_STATE_ERROR) {
1570 				spin_unlock_irqrestore(&iwqp->lock, flags);
1571 				if (udata && udata->inlen) {
1572 					if (ib_copy_from_udata(&ureq, udata,
1573 					    min(sizeof(ureq), udata->inlen)))
1574 						return -EINVAL;
1575 
1576 					irdma_flush_wqes(iwqp,
1577 					    (ureq.sq_flush ? IRDMA_FLUSH_SQ : 0) |
1578 					    (ureq.rq_flush ? IRDMA_FLUSH_RQ : 0) |
1579 					    IRDMA_REFLUSH);
1580 				}
1581 				return 0;
1582 			}
1583 
1584 			if (iwqp->sc_qp.term_flags) {
1585 				spin_unlock_irqrestore(&iwqp->lock, flags);
1586 				irdma_terminate_del_timer(&iwqp->sc_qp);
1587 				spin_lock_irqsave(&iwqp->lock, flags);
1588 			}
1589 			info.next_iwarp_state = IRDMA_QP_STATE_ERROR;
1590 			if (iwqp->hw_tcp_state > IRDMA_TCP_STATE_CLOSED &&
1591 			    iwdev->iw_status &&
1592 			    iwqp->hw_tcp_state != IRDMA_TCP_STATE_TIME_WAIT)
1593 				info.reset_tcp_conn = true;
1594 			else
1595 				dont_wait = 1;
1596 
1597 			issue_modify_qp = 1;
1598 			info.next_iwarp_state = IRDMA_QP_STATE_ERROR;
1599 			break;
1600 		default:
1601 			err = -EINVAL;
1602 			goto exit;
1603 		}
1604 
1605 		iwqp->ibqp_state = attr->qp_state;
1606 	}
1607 	if (attr_mask & IB_QP_ACCESS_FLAGS) {
1608 		ctx_info->iwarp_info_valid = true;
1609 		if (attr->qp_access_flags & IB_ACCESS_LOCAL_WRITE)
1610 			offload_info->wr_rdresp_en = true;
1611 		if (attr->qp_access_flags & IB_ACCESS_REMOTE_WRITE)
1612 			offload_info->wr_rdresp_en = true;
1613 		if (attr->qp_access_flags & IB_ACCESS_REMOTE_READ)
1614 			offload_info->rd_en = true;
1615 	}
1616 
1617 	if (ctx_info->iwarp_info_valid) {
1618 		ctx_info->send_cq_num = iwqp->iwscq->sc_cq.cq_uk.cq_id;
1619 		ctx_info->rcv_cq_num = iwqp->iwrcq->sc_cq.cq_uk.cq_id;
1620 		irdma_sc_qp_setctx(&iwqp->sc_qp, iwqp->host_ctx.va, ctx_info);
1621 	}
1622 	spin_unlock_irqrestore(&iwqp->lock, flags);
1623 
1624 	if (attr_mask & IB_QP_STATE) {
1625 		if (issue_modify_qp) {
1626 			ctx_info->rem_endpoint_idx = tcp_info->arp_idx;
1627 			if (irdma_hw_modify_qp(iwdev, iwqp, &info, true))
1628 				return -EINVAL;
1629 		}
1630 
1631 		spin_lock_irqsave(&iwqp->lock, flags);
1632 		if (iwqp->iwarp_state == info.curr_iwarp_state) {
1633 			iwqp->iwarp_state = info.next_iwarp_state;
1634 			iwqp->ibqp_state = attr->qp_state;
1635 		}
1636 		spin_unlock_irqrestore(&iwqp->lock, flags);
1637 	}
1638 
1639 	if (issue_modify_qp && iwqp->ibqp_state > IB_QPS_RTS) {
1640 		if (dont_wait) {
1641 			if (iwqp->hw_tcp_state) {
1642 				spin_lock_irqsave(&iwqp->lock, flags);
1643 				iwqp->hw_tcp_state = IRDMA_TCP_STATE_CLOSED;
1644 				iwqp->last_aeq = IRDMA_AE_RESET_SENT;
1645 				spin_unlock_irqrestore(&iwqp->lock, flags);
1646 			}
1647 			irdma_cm_disconn(iwqp);
1648 		} else {
1649 			int close_timer_started;
1650 
1651 			spin_lock_irqsave(&iwdev->cm_core.ht_lock, flags);
1652 
1653 			if (iwqp->cm_node) {
1654 				refcount_inc(&iwqp->cm_node->refcnt);
1655 				spin_unlock_irqrestore(&iwdev->cm_core.ht_lock, flags);
1656 				close_timer_started = atomic_inc_return(&iwqp->close_timer_started);
1657 				if (iwqp->cm_id && close_timer_started == 1)
1658 					irdma_schedule_cm_timer(iwqp->cm_node,
1659 						(struct irdma_puda_buf *)iwqp,
1660 						IRDMA_TIMER_TYPE_CLOSE, 1, 0);
1661 
1662 				irdma_rem_ref_cm_node(iwqp->cm_node);
1663 			} else {
1664 				spin_unlock_irqrestore(&iwdev->cm_core.ht_lock, flags);
1665 			}
1666 		}
1667 	}
1668 	if (attr_mask & IB_QP_STATE && udata && udata->outlen &&
1669 	    dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2) {
1670 		struct irdma_ucontext *ucontext;
1671 
1672 		ucontext = rdma_udata_to_drv_context(udata,
1673 					struct irdma_ucontext, ibucontext);
1674 		if (iwqp->sc_qp.push_idx != IRDMA_INVALID_PUSH_PAGE_INDEX &&
1675 		    !iwqp->push_wqe_mmap_entry &&
1676 		    !irdma_setup_push_mmap_entries(ucontext, iwqp,
1677 			&uresp.push_wqe_mmap_key, &uresp.push_db_mmap_key)) {
1678 			uresp.push_valid = 1;
1679 			uresp.push_offset = iwqp->sc_qp.push_offset;
1680 		}
1681 
1682 		err = ib_copy_to_udata(udata, &uresp, min(sizeof(uresp),
1683 				       udata->outlen));
1684 		if (err) {
1685 			irdma_remove_push_mmap_entries(iwqp);
1686 			ibdev_dbg(&iwdev->ibdev,
1687 				  "VERBS: copy_to_udata failed\n");
1688 			return err;
1689 		}
1690 	}
1691 
1692 	return 0;
1693 exit:
1694 	spin_unlock_irqrestore(&iwqp->lock, flags);
1695 
1696 	return err;
1697 }
1698 
1699 /**
1700  * irdma_cq_free_rsrc - free up resources for cq
1701  * @rf: RDMA PCI function
1702  * @iwcq: cq ptr
1703  */
1704 static void irdma_cq_free_rsrc(struct irdma_pci_f *rf, struct irdma_cq *iwcq)
1705 {
1706 	struct irdma_sc_cq *cq = &iwcq->sc_cq;
1707 
1708 	if (!iwcq->user_mode) {
1709 		dma_free_coherent(rf->sc_dev.hw->device, iwcq->kmem.size,
1710 				  iwcq->kmem.va, iwcq->kmem.pa);
1711 		iwcq->kmem.va = NULL;
1712 		dma_free_coherent(rf->sc_dev.hw->device,
1713 				  iwcq->kmem_shadow.size,
1714 				  iwcq->kmem_shadow.va, iwcq->kmem_shadow.pa);
1715 		iwcq->kmem_shadow.va = NULL;
1716 	}
1717 
1718 	irdma_free_rsrc(rf, rf->allocated_cqs, cq->cq_uk.cq_id);
1719 }
1720 
1721 /**
1722  * irdma_free_cqbuf - worker to free a cq buffer
1723  * @work: provides access to the cq buffer to free
1724  */
1725 static void irdma_free_cqbuf(struct work_struct *work)
1726 {
1727 	struct irdma_cq_buf *cq_buf = container_of(work, struct irdma_cq_buf, work);
1728 
1729 	dma_free_coherent(cq_buf->hw->device, cq_buf->kmem_buf.size,
1730 			  cq_buf->kmem_buf.va, cq_buf->kmem_buf.pa);
1731 	cq_buf->kmem_buf.va = NULL;
1732 	kfree(cq_buf);
1733 }
1734 
1735 /**
1736  * irdma_process_resize_list - remove resized cq buffers from the resize_list
1737  * @iwcq: cq which owns the resize_list
1738  * @iwdev: irdma device
1739  * @lcqe_buf: the buffer where the last cqe is received
1740  */
1741 static int irdma_process_resize_list(struct irdma_cq *iwcq,
1742 				     struct irdma_device *iwdev,
1743 				     struct irdma_cq_buf *lcqe_buf)
1744 {
1745 	struct list_head *tmp_node, *list_node;
1746 	struct irdma_cq_buf *cq_buf;
1747 	int cnt = 0;
1748 
1749 	list_for_each_safe(list_node, tmp_node, &iwcq->resize_list) {
1750 		cq_buf = list_entry(list_node, struct irdma_cq_buf, list);
1751 		if (cq_buf == lcqe_buf)
1752 			return cnt;
1753 
1754 		list_del(&cq_buf->list);
1755 		queue_work(iwdev->cleanup_wq, &cq_buf->work);
1756 		cnt++;
1757 	}
1758 
1759 	return cnt;
1760 }
1761 
1762 /**
1763  * irdma_destroy_cq - destroy cq
1764  * @ib_cq: cq pointer
1765  * @udata: user data
1766  */
1767 static int irdma_destroy_cq(struct ib_cq *ib_cq, struct ib_udata *udata)
1768 {
1769 	struct irdma_device *iwdev = to_iwdev(ib_cq->device);
1770 	struct irdma_cq *iwcq = to_iwcq(ib_cq);
1771 	struct irdma_sc_cq *cq = &iwcq->sc_cq;
1772 	struct irdma_sc_dev *dev = cq->dev;
1773 	struct irdma_sc_ceq *ceq = dev->ceq[cq->ceq_id];
1774 	struct irdma_ceq *iwceq = container_of(ceq, struct irdma_ceq, sc_ceq);
1775 	unsigned long flags;
1776 
1777 	spin_lock_irqsave(&iwcq->lock, flags);
1778 	if (!list_empty(&iwcq->cmpl_generated))
1779 		irdma_remove_cmpls_list(iwcq);
1780 	if (!list_empty(&iwcq->resize_list))
1781 		irdma_process_resize_list(iwcq, iwdev, NULL);
1782 	spin_unlock_irqrestore(&iwcq->lock, flags);
1783 
1784 	irdma_cq_wq_destroy(iwdev->rf, cq);
1785 
1786 	spin_lock_irqsave(&iwceq->ce_lock, flags);
1787 	irdma_sc_cleanup_ceqes(cq, ceq);
1788 	spin_unlock_irqrestore(&iwceq->ce_lock, flags);
1789 	irdma_cq_free_rsrc(iwdev->rf, iwcq);
1790 
1791 	return 0;
1792 }
1793 
1794 /**
1795  * irdma_resize_cq - resize cq
1796  * @ibcq: cq to be resized
1797  * @entries: desired cq size
1798  * @udata: user data
1799  */
1800 static int irdma_resize_cq(struct ib_cq *ibcq, int entries,
1801 			   struct ib_udata *udata)
1802 {
1803 #define IRDMA_RESIZE_CQ_MIN_REQ_LEN offsetofend(struct irdma_resize_cq_req, user_cq_buffer)
1804 	struct irdma_cq *iwcq = to_iwcq(ibcq);
1805 	struct irdma_sc_dev *dev = iwcq->sc_cq.dev;
1806 	struct irdma_cqp_request *cqp_request;
1807 	struct cqp_cmds_info *cqp_info;
1808 	struct irdma_modify_cq_info *m_info;
1809 	struct irdma_modify_cq_info info = {};
1810 	struct irdma_dma_mem kmem_buf;
1811 	struct irdma_cq_mr *cqmr_buf;
1812 	struct irdma_pbl *iwpbl_buf;
1813 	struct irdma_device *iwdev;
1814 	struct irdma_pci_f *rf;
1815 	struct irdma_cq_buf *cq_buf = NULL;
1816 	unsigned long flags;
1817 	int ret;
1818 
1819 	iwdev = to_iwdev(ibcq->device);
1820 	rf = iwdev->rf;
1821 
1822 	if (!(rf->sc_dev.hw_attrs.uk_attrs.feature_flags &
1823 	    IRDMA_FEATURE_CQ_RESIZE))
1824 		return -EOPNOTSUPP;
1825 
1826 	if (udata && udata->inlen < IRDMA_RESIZE_CQ_MIN_REQ_LEN)
1827 		return -EINVAL;
1828 
1829 	if (entries > rf->max_cqe)
1830 		return -EINVAL;
1831 
1832 	if (!iwcq->user_mode) {
1833 		entries++;
1834 		if (rf->sc_dev.hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2)
1835 			entries *= 2;
1836 	}
1837 
1838 	info.cq_size = max(entries, 4);
1839 
1840 	if (info.cq_size == iwcq->sc_cq.cq_uk.cq_size - 1)
1841 		return 0;
1842 
1843 	if (udata) {
1844 		struct irdma_resize_cq_req req = {};
1845 		struct irdma_ucontext *ucontext =
1846 			rdma_udata_to_drv_context(udata, struct irdma_ucontext,
1847 						  ibucontext);
1848 
1849 		/* CQ resize not supported with legacy GEN_1 libi40iw */
1850 		if (ucontext->legacy_mode)
1851 			return -EOPNOTSUPP;
1852 
1853 		if (ib_copy_from_udata(&req, udata,
1854 				       min(sizeof(req), udata->inlen)))
1855 			return -EINVAL;
1856 
1857 		spin_lock_irqsave(&ucontext->cq_reg_mem_list_lock, flags);
1858 		iwpbl_buf = irdma_get_pbl((unsigned long)req.user_cq_buffer,
1859 					  &ucontext->cq_reg_mem_list);
1860 		spin_unlock_irqrestore(&ucontext->cq_reg_mem_list_lock, flags);
1861 
1862 		if (!iwpbl_buf)
1863 			return -ENOMEM;
1864 
1865 		cqmr_buf = &iwpbl_buf->cq_mr;
1866 		if (iwpbl_buf->pbl_allocated) {
1867 			info.virtual_map = true;
1868 			info.pbl_chunk_size = 1;
1869 			info.first_pm_pbl_idx = cqmr_buf->cq_pbl.idx;
1870 		} else {
1871 			info.cq_pa = cqmr_buf->cq_pbl.addr;
1872 		}
1873 	} else {
1874 		/* Kmode CQ resize */
1875 		int rsize;
1876 
1877 		rsize = info.cq_size * sizeof(struct irdma_cqe);
1878 		kmem_buf.size = ALIGN(round_up(rsize, 256), 256);
1879 		kmem_buf.va = dma_alloc_coherent(dev->hw->device,
1880 						 kmem_buf.size, &kmem_buf.pa,
1881 						 GFP_KERNEL);
1882 		if (!kmem_buf.va)
1883 			return -ENOMEM;
1884 
1885 		info.cq_base = kmem_buf.va;
1886 		info.cq_pa = kmem_buf.pa;
1887 		cq_buf = kzalloc(sizeof(*cq_buf), GFP_KERNEL);
1888 		if (!cq_buf) {
1889 			ret = -ENOMEM;
1890 			goto error;
1891 		}
1892 	}
1893 
1894 	cqp_request = irdma_alloc_and_get_cqp_request(&rf->cqp, true);
1895 	if (!cqp_request) {
1896 		ret = -ENOMEM;
1897 		goto error;
1898 	}
1899 
1900 	info.shadow_read_threshold = iwcq->sc_cq.shadow_read_threshold;
1901 	info.cq_resize = true;
1902 
1903 	cqp_info = &cqp_request->info;
1904 	m_info = &cqp_info->in.u.cq_modify.info;
1905 	memcpy(m_info, &info, sizeof(*m_info));
1906 
1907 	cqp_info->cqp_cmd = IRDMA_OP_CQ_MODIFY;
1908 	cqp_info->in.u.cq_modify.cq = &iwcq->sc_cq;
1909 	cqp_info->in.u.cq_modify.scratch = (uintptr_t)cqp_request;
1910 	cqp_info->post_sq = 1;
1911 	ret = irdma_handle_cqp_op(rf, cqp_request);
1912 	irdma_put_cqp_request(&rf->cqp, cqp_request);
1913 	if (ret)
1914 		goto error;
1915 
1916 	spin_lock_irqsave(&iwcq->lock, flags);
1917 	if (cq_buf) {
1918 		cq_buf->kmem_buf = iwcq->kmem;
1919 		cq_buf->hw = dev->hw;
1920 		memcpy(&cq_buf->cq_uk, &iwcq->sc_cq.cq_uk, sizeof(cq_buf->cq_uk));
1921 		INIT_WORK(&cq_buf->work, irdma_free_cqbuf);
1922 		list_add_tail(&cq_buf->list, &iwcq->resize_list);
1923 		iwcq->kmem = kmem_buf;
1924 	}
1925 
1926 	irdma_sc_cq_resize(&iwcq->sc_cq, &info);
1927 	ibcq->cqe = info.cq_size - 1;
1928 	spin_unlock_irqrestore(&iwcq->lock, flags);
1929 
1930 	return 0;
1931 error:
1932 	if (!udata) {
1933 		dma_free_coherent(dev->hw->device, kmem_buf.size, kmem_buf.va,
1934 				  kmem_buf.pa);
1935 		kmem_buf.va = NULL;
1936 	}
1937 	kfree(cq_buf);
1938 
1939 	return ret;
1940 }
1941 
1942 static inline int cq_validate_flags(u32 flags, u8 hw_rev)
1943 {
1944 	/* GEN1 does not support CQ create flags */
1945 	if (hw_rev == IRDMA_GEN_1)
1946 		return flags ? -EOPNOTSUPP : 0;
1947 
1948 	return flags & ~IB_UVERBS_CQ_FLAGS_TIMESTAMP_COMPLETION ? -EOPNOTSUPP : 0;
1949 }
1950 
1951 /**
1952  * irdma_create_cq - create cq
1953  * @ibcq: CQ allocated
1954  * @attr: attributes for cq
1955  * @udata: user data
1956  */
1957 static int irdma_create_cq(struct ib_cq *ibcq,
1958 			   const struct ib_cq_init_attr *attr,
1959 			   struct ib_udata *udata)
1960 {
1961 #define IRDMA_CREATE_CQ_MIN_REQ_LEN offsetofend(struct irdma_create_cq_req, user_cq_buf)
1962 #define IRDMA_CREATE_CQ_MIN_RESP_LEN offsetofend(struct irdma_create_cq_resp, cq_size)
1963 	struct ib_device *ibdev = ibcq->device;
1964 	struct irdma_device *iwdev = to_iwdev(ibdev);
1965 	struct irdma_pci_f *rf = iwdev->rf;
1966 	struct irdma_cq *iwcq = to_iwcq(ibcq);
1967 	u32 cq_num = 0;
1968 	struct irdma_sc_cq *cq;
1969 	struct irdma_sc_dev *dev = &rf->sc_dev;
1970 	struct irdma_cq_init_info info = {};
1971 	struct irdma_cqp_request *cqp_request;
1972 	struct cqp_cmds_info *cqp_info;
1973 	struct irdma_cq_uk_init_info *ukinfo = &info.cq_uk_init_info;
1974 	unsigned long flags;
1975 	int err_code;
1976 	int entries = attr->cqe;
1977 
1978 	err_code = cq_validate_flags(attr->flags, dev->hw_attrs.uk_attrs.hw_rev);
1979 	if (err_code)
1980 		return err_code;
1981 
1982 	if (udata && (udata->inlen < IRDMA_CREATE_CQ_MIN_REQ_LEN ||
1983 		      udata->outlen < IRDMA_CREATE_CQ_MIN_RESP_LEN))
1984 		return -EINVAL;
1985 
1986 	err_code = irdma_alloc_rsrc(rf, rf->allocated_cqs, rf->max_cq, &cq_num,
1987 				    &rf->next_cq);
1988 	if (err_code)
1989 		return err_code;
1990 
1991 	cq = &iwcq->sc_cq;
1992 	cq->back_cq = iwcq;
1993 	spin_lock_init(&iwcq->lock);
1994 	INIT_LIST_HEAD(&iwcq->resize_list);
1995 	INIT_LIST_HEAD(&iwcq->cmpl_generated);
1996 	info.dev = dev;
1997 	ukinfo->cq_size = max(entries, 4);
1998 	ukinfo->cq_id = cq_num;
1999 	iwcq->ibcq.cqe = info.cq_uk_init_info.cq_size;
2000 	if (attr->comp_vector < rf->ceqs_count)
2001 		info.ceq_id = attr->comp_vector;
2002 	info.ceq_id_valid = true;
2003 	info.ceqe_mask = 1;
2004 	info.type = IRDMA_CQ_TYPE_IWARP;
2005 	info.vsi = &iwdev->vsi;
2006 
2007 	if (udata) {
2008 		struct irdma_ucontext *ucontext;
2009 		struct irdma_create_cq_req req = {};
2010 		struct irdma_cq_mr *cqmr;
2011 		struct irdma_pbl *iwpbl;
2012 		struct irdma_pbl *iwpbl_shadow;
2013 		struct irdma_cq_mr *cqmr_shadow;
2014 
2015 		iwcq->user_mode = true;
2016 		ucontext =
2017 			rdma_udata_to_drv_context(udata, struct irdma_ucontext,
2018 						  ibucontext);
2019 		if (ib_copy_from_udata(&req, udata,
2020 				       min(sizeof(req), udata->inlen))) {
2021 			err_code = -EFAULT;
2022 			goto cq_free_rsrc;
2023 		}
2024 
2025 		spin_lock_irqsave(&ucontext->cq_reg_mem_list_lock, flags);
2026 		iwpbl = irdma_get_pbl((unsigned long)req.user_cq_buf,
2027 				      &ucontext->cq_reg_mem_list);
2028 		spin_unlock_irqrestore(&ucontext->cq_reg_mem_list_lock, flags);
2029 		if (!iwpbl) {
2030 			err_code = -EPROTO;
2031 			goto cq_free_rsrc;
2032 		}
2033 
2034 		iwcq->iwpbl = iwpbl;
2035 		iwcq->cq_mem_size = 0;
2036 		cqmr = &iwpbl->cq_mr;
2037 
2038 		if (rf->sc_dev.hw_attrs.uk_attrs.feature_flags &
2039 		    IRDMA_FEATURE_CQ_RESIZE && !ucontext->legacy_mode) {
2040 			spin_lock_irqsave(&ucontext->cq_reg_mem_list_lock, flags);
2041 			iwpbl_shadow = irdma_get_pbl(
2042 					(unsigned long)req.user_shadow_area,
2043 					&ucontext->cq_reg_mem_list);
2044 			spin_unlock_irqrestore(&ucontext->cq_reg_mem_list_lock, flags);
2045 
2046 			if (!iwpbl_shadow) {
2047 				err_code = -EPROTO;
2048 				goto cq_free_rsrc;
2049 			}
2050 			iwcq->iwpbl_shadow = iwpbl_shadow;
2051 			cqmr_shadow = &iwpbl_shadow->cq_mr;
2052 			info.shadow_area_pa = cqmr_shadow->cq_pbl.addr;
2053 			cqmr->split = true;
2054 		} else {
2055 			info.shadow_area_pa = cqmr->shadow;
2056 		}
2057 		if (iwpbl->pbl_allocated) {
2058 			info.virtual_map = true;
2059 			info.pbl_chunk_size = 1;
2060 			info.first_pm_pbl_idx = cqmr->cq_pbl.idx;
2061 		} else {
2062 			info.cq_base_pa = cqmr->cq_pbl.addr;
2063 		}
2064 	} else {
2065 		/* Kmode allocations */
2066 		int rsize;
2067 
2068 		if (entries < 1 || entries > rf->max_cqe) {
2069 			err_code = -EINVAL;
2070 			goto cq_free_rsrc;
2071 		}
2072 
2073 		entries++;
2074 		if (dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2)
2075 			entries *= 2;
2076 		ukinfo->cq_size = entries;
2077 
2078 		rsize = info.cq_uk_init_info.cq_size * sizeof(struct irdma_cqe);
2079 		iwcq->kmem.size = ALIGN(round_up(rsize, 256), 256);
2080 		iwcq->kmem.va = dma_alloc_coherent(dev->hw->device,
2081 						   iwcq->kmem.size,
2082 						   &iwcq->kmem.pa, GFP_KERNEL);
2083 		if (!iwcq->kmem.va) {
2084 			err_code = -ENOMEM;
2085 			goto cq_free_rsrc;
2086 		}
2087 
2088 		iwcq->kmem_shadow.size = ALIGN(IRDMA_SHADOW_AREA_SIZE << 3,
2089 					       64);
2090 		iwcq->kmem_shadow.va = dma_alloc_coherent(dev->hw->device,
2091 							  iwcq->kmem_shadow.size,
2092 							  &iwcq->kmem_shadow.pa,
2093 							  GFP_KERNEL);
2094 		if (!iwcq->kmem_shadow.va) {
2095 			err_code = -ENOMEM;
2096 			goto cq_free_rsrc;
2097 		}
2098 		info.shadow_area_pa = iwcq->kmem_shadow.pa;
2099 		ukinfo->shadow_area = iwcq->kmem_shadow.va;
2100 		ukinfo->cq_base = iwcq->kmem.va;
2101 		info.cq_base_pa = iwcq->kmem.pa;
2102 	}
2103 
2104 	if (dev->hw_attrs.uk_attrs.hw_rev >= IRDMA_GEN_2)
2105 		info.shadow_read_threshold = min(info.cq_uk_init_info.cq_size / 2,
2106 						 (u32)IRDMA_MAX_CQ_READ_THRESH);
2107 
2108 	if (irdma_sc_cq_init(cq, &info)) {
2109 		ibdev_dbg(&iwdev->ibdev, "VERBS: init cq fail\n");
2110 		err_code = -EPROTO;
2111 		goto cq_free_rsrc;
2112 	}
2113 
2114 	cqp_request = irdma_alloc_and_get_cqp_request(&rf->cqp, true);
2115 	if (!cqp_request) {
2116 		err_code = -ENOMEM;
2117 		goto cq_free_rsrc;
2118 	}
2119 
2120 	cqp_info = &cqp_request->info;
2121 	cqp_info->cqp_cmd = IRDMA_OP_CQ_CREATE;
2122 	cqp_info->post_sq = 1;
2123 	cqp_info->in.u.cq_create.cq = cq;
2124 	cqp_info->in.u.cq_create.check_overflow = true;
2125 	cqp_info->in.u.cq_create.scratch = (uintptr_t)cqp_request;
2126 	err_code = irdma_handle_cqp_op(rf, cqp_request);
2127 	irdma_put_cqp_request(&rf->cqp, cqp_request);
2128 	if (err_code)
2129 		goto cq_free_rsrc;
2130 
2131 	if (udata) {
2132 		struct irdma_create_cq_resp resp = {};
2133 
2134 		resp.cq_id = info.cq_uk_init_info.cq_id;
2135 		resp.cq_size = info.cq_uk_init_info.cq_size;
2136 		if (ib_copy_to_udata(udata, &resp,
2137 				     min(sizeof(resp), udata->outlen))) {
2138 			ibdev_dbg(&iwdev->ibdev,
2139 				  "VERBS: copy to user data\n");
2140 			err_code = -EPROTO;
2141 			goto cq_destroy;
2142 		}
2143 	}
2144 	return 0;
2145 cq_destroy:
2146 	irdma_cq_wq_destroy(rf, cq);
2147 cq_free_rsrc:
2148 	irdma_cq_free_rsrc(rf, iwcq);
2149 
2150 	return err_code;
2151 }
2152 
2153 /**
2154  * irdma_get_mr_access - get hw MR access permissions from IB access flags
2155  * @access: IB access flags
2156  */
2157 static inline u16 irdma_get_mr_access(int access)
2158 {
2159 	u16 hw_access = 0;
2160 
2161 	hw_access |= (access & IB_ACCESS_LOCAL_WRITE) ?
2162 		     IRDMA_ACCESS_FLAGS_LOCALWRITE : 0;
2163 	hw_access |= (access & IB_ACCESS_REMOTE_WRITE) ?
2164 		     IRDMA_ACCESS_FLAGS_REMOTEWRITE : 0;
2165 	hw_access |= (access & IB_ACCESS_REMOTE_READ) ?
2166 		     IRDMA_ACCESS_FLAGS_REMOTEREAD : 0;
2167 	hw_access |= (access & IB_ACCESS_MW_BIND) ?
2168 		     IRDMA_ACCESS_FLAGS_BIND_WINDOW : 0;
2169 	hw_access |= (access & IB_ZERO_BASED) ?
2170 		     IRDMA_ACCESS_FLAGS_ZERO_BASED : 0;
2171 	hw_access |= IRDMA_ACCESS_FLAGS_LOCALREAD;
2172 
2173 	return hw_access;
2174 }
2175 
2176 /**
2177  * irdma_free_stag - free stag resource
2178  * @iwdev: irdma device
2179  * @stag: stag to free
2180  */
2181 static void irdma_free_stag(struct irdma_device *iwdev, u32 stag)
2182 {
2183 	u32 stag_idx;
2184 
2185 	stag_idx = (stag & iwdev->rf->mr_stagmask) >> IRDMA_CQPSQ_STAG_IDX_S;
2186 	irdma_free_rsrc(iwdev->rf, iwdev->rf->allocated_mrs, stag_idx);
2187 }
2188 
2189 /**
2190  * irdma_create_stag - create random stag
2191  * @iwdev: irdma device
2192  */
2193 static u32 irdma_create_stag(struct irdma_device *iwdev)
2194 {
2195 	u32 stag = 0;
2196 	u32 stag_index = 0;
2197 	u32 next_stag_index;
2198 	u32 driver_key;
2199 	u32 random;
2200 	u8 consumer_key;
2201 	int ret;
2202 
2203 	get_random_bytes(&random, sizeof(random));
2204 	consumer_key = (u8)random;
2205 
2206 	driver_key = random & ~iwdev->rf->mr_stagmask;
2207 	next_stag_index = (random & iwdev->rf->mr_stagmask) >> 8;
2208 	next_stag_index %= iwdev->rf->max_mr;
2209 
2210 	ret = irdma_alloc_rsrc(iwdev->rf, iwdev->rf->allocated_mrs,
2211 			       iwdev->rf->max_mr, &stag_index,
2212 			       &next_stag_index);
2213 	if (ret)
2214 		return stag;
2215 	stag = stag_index << IRDMA_CQPSQ_STAG_IDX_S;
2216 	stag |= driver_key;
2217 	stag += (u32)consumer_key;
2218 
2219 	return stag;
2220 }
2221 
2222 /**
2223  * irdma_next_pbl_addr - Get next pbl address
2224  * @pbl: pointer to a pble
2225  * @pinfo: info pointer
2226  * @idx: index
2227  */
2228 static inline u64 *irdma_next_pbl_addr(u64 *pbl, struct irdma_pble_info **pinfo,
2229 				       u32 *idx)
2230 {
2231 	*idx += 1;
2232 	if (!(*pinfo) || *idx != (*pinfo)->cnt)
2233 		return ++pbl;
2234 	*idx = 0;
2235 	(*pinfo)++;
2236 
2237 	return (*pinfo)->addr;
2238 }
2239 
2240 /**
2241  * irdma_copy_user_pgaddrs - copy user page address to pble's os locally
2242  * @iwmr: iwmr for IB's user page addresses
2243  * @pbl: ple pointer to save 1 level or 0 level pble
2244  * @level: indicated level 0, 1 or 2
2245  */
2246 static void irdma_copy_user_pgaddrs(struct irdma_mr *iwmr, u64 *pbl,
2247 				    enum irdma_pble_level level)
2248 {
2249 	struct ib_umem *region = iwmr->region;
2250 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2251 	struct irdma_pble_alloc *palloc = &iwpbl->pble_alloc;
2252 	struct irdma_pble_info *pinfo;
2253 	struct ib_block_iter biter;
2254 	u32 idx = 0;
2255 	u32 pbl_cnt = 0;
2256 
2257 	pinfo = (level == PBLE_LEVEL_1) ? NULL : palloc->level2.leaf;
2258 
2259 	if (iwmr->type == IRDMA_MEMREG_TYPE_QP)
2260 		iwpbl->qp_mr.sq_page = sg_page(region->sgt_append.sgt.sgl);
2261 
2262 	rdma_umem_for_each_dma_block(region, &biter, iwmr->page_size) {
2263 		*pbl = rdma_block_iter_dma_address(&biter);
2264 		if (++pbl_cnt == palloc->total_cnt)
2265 			break;
2266 		pbl = irdma_next_pbl_addr(pbl, &pinfo, &idx);
2267 	}
2268 }
2269 
2270 /**
2271  * irdma_check_mem_contiguous - check if pbls stored in arr are contiguous
2272  * @arr: lvl1 pbl array
2273  * @npages: page count
2274  * @pg_size: page size
2275  *
2276  */
2277 static bool irdma_check_mem_contiguous(u64 *arr, u32 npages, u32 pg_size)
2278 {
2279 	u32 pg_idx;
2280 
2281 	for (pg_idx = 0; pg_idx < npages; pg_idx++) {
2282 		if ((*arr + (pg_size * pg_idx)) != arr[pg_idx])
2283 			return false;
2284 	}
2285 
2286 	return true;
2287 }
2288 
2289 /**
2290  * irdma_check_mr_contiguous - check if MR is physically contiguous
2291  * @palloc: pbl allocation struct
2292  * @pg_size: page size
2293  */
2294 static bool irdma_check_mr_contiguous(struct irdma_pble_alloc *palloc,
2295 				      u32 pg_size)
2296 {
2297 	struct irdma_pble_level2 *lvl2 = &palloc->level2;
2298 	struct irdma_pble_info *leaf = lvl2->leaf;
2299 	u64 *arr = NULL;
2300 	u64 *start_addr = NULL;
2301 	int i;
2302 	bool ret;
2303 
2304 	if (palloc->level == PBLE_LEVEL_1) {
2305 		arr = palloc->level1.addr;
2306 		ret = irdma_check_mem_contiguous(arr, palloc->total_cnt,
2307 						 pg_size);
2308 		return ret;
2309 	}
2310 
2311 	start_addr = leaf->addr;
2312 
2313 	for (i = 0; i < lvl2->leaf_cnt; i++, leaf++) {
2314 		arr = leaf->addr;
2315 		if ((*start_addr + (i * pg_size * PBLE_PER_PAGE)) != *arr)
2316 			return false;
2317 		ret = irdma_check_mem_contiguous(arr, leaf->cnt, pg_size);
2318 		if (!ret)
2319 			return false;
2320 	}
2321 
2322 	return true;
2323 }
2324 
2325 /**
2326  * irdma_setup_pbles - copy user pg address to pble's
2327  * @rf: RDMA PCI function
2328  * @iwmr: mr pointer for this memory registration
2329  * @lvl: requested pble levels
2330  */
2331 static int irdma_setup_pbles(struct irdma_pci_f *rf, struct irdma_mr *iwmr,
2332 			     u8 lvl)
2333 {
2334 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2335 	struct irdma_pble_alloc *palloc = &iwpbl->pble_alloc;
2336 	struct irdma_pble_info *pinfo;
2337 	u64 *pbl;
2338 	int status;
2339 	enum irdma_pble_level level = PBLE_LEVEL_1;
2340 
2341 	if (lvl) {
2342 		status = irdma_get_pble(rf->pble_rsrc, palloc, iwmr->page_cnt,
2343 					lvl);
2344 		if (status)
2345 			return status;
2346 
2347 		iwpbl->pbl_allocated = true;
2348 		level = palloc->level;
2349 		pinfo = (level == PBLE_LEVEL_1) ? &palloc->level1 :
2350 						  palloc->level2.leaf;
2351 		pbl = pinfo->addr;
2352 	} else {
2353 		pbl = iwmr->pgaddrmem;
2354 	}
2355 
2356 	irdma_copy_user_pgaddrs(iwmr, pbl, level);
2357 
2358 	if (lvl)
2359 		iwmr->pgaddrmem[0] = *pbl;
2360 
2361 	return 0;
2362 }
2363 
2364 /**
2365  * irdma_handle_q_mem - handle memory for qp and cq
2366  * @iwdev: irdma device
2367  * @req: information for q memory management
2368  * @iwpbl: pble struct
2369  * @lvl: pble level mask
2370  */
2371 static int irdma_handle_q_mem(struct irdma_device *iwdev,
2372 			      struct irdma_mem_reg_req *req,
2373 			      struct irdma_pbl *iwpbl, u8 lvl)
2374 {
2375 	struct irdma_pble_alloc *palloc = &iwpbl->pble_alloc;
2376 	struct irdma_mr *iwmr = iwpbl->iwmr;
2377 	struct irdma_qp_mr *qpmr = &iwpbl->qp_mr;
2378 	struct irdma_cq_mr *cqmr = &iwpbl->cq_mr;
2379 	struct irdma_hmc_pble *hmc_p;
2380 	u64 *arr = iwmr->pgaddrmem;
2381 	u32 pg_size, total;
2382 	int err = 0;
2383 	bool ret = true;
2384 
2385 	pg_size = iwmr->page_size;
2386 	err = irdma_setup_pbles(iwdev->rf, iwmr, lvl);
2387 	if (err)
2388 		return err;
2389 
2390 	if (lvl)
2391 		arr = palloc->level1.addr;
2392 
2393 	switch (iwmr->type) {
2394 	case IRDMA_MEMREG_TYPE_QP:
2395 		total = req->sq_pages + req->rq_pages;
2396 		hmc_p = &qpmr->sq_pbl;
2397 		qpmr->shadow = (dma_addr_t)arr[total];
2398 
2399 		if (lvl) {
2400 			ret = irdma_check_mem_contiguous(arr, req->sq_pages,
2401 							 pg_size);
2402 			if (ret)
2403 				ret = irdma_check_mem_contiguous(&arr[req->sq_pages],
2404 								 req->rq_pages,
2405 								 pg_size);
2406 		}
2407 
2408 		if (!ret) {
2409 			hmc_p->idx = palloc->level1.idx;
2410 			hmc_p = &qpmr->rq_pbl;
2411 			hmc_p->idx = palloc->level1.idx + req->sq_pages;
2412 		} else {
2413 			hmc_p->addr = arr[0];
2414 			hmc_p = &qpmr->rq_pbl;
2415 			hmc_p->addr = arr[req->sq_pages];
2416 		}
2417 		break;
2418 	case IRDMA_MEMREG_TYPE_CQ:
2419 		hmc_p = &cqmr->cq_pbl;
2420 
2421 		if (!cqmr->split)
2422 			cqmr->shadow = (dma_addr_t)arr[req->cq_pages];
2423 
2424 		if (lvl)
2425 			ret = irdma_check_mem_contiguous(arr, req->cq_pages,
2426 							 pg_size);
2427 
2428 		if (!ret)
2429 			hmc_p->idx = palloc->level1.idx;
2430 		else
2431 			hmc_p->addr = arr[0];
2432 	break;
2433 	default:
2434 		ibdev_dbg(&iwdev->ibdev, "VERBS: MR type error\n");
2435 		err = -EINVAL;
2436 	}
2437 
2438 	if (lvl && ret) {
2439 		irdma_free_pble(iwdev->rf->pble_rsrc, palloc);
2440 		iwpbl->pbl_allocated = false;
2441 	}
2442 
2443 	return err;
2444 }
2445 
2446 /**
2447  * irdma_hw_alloc_mw - create the hw memory window
2448  * @iwdev: irdma device
2449  * @iwmr: pointer to memory window info
2450  */
2451 static int irdma_hw_alloc_mw(struct irdma_device *iwdev, struct irdma_mr *iwmr)
2452 {
2453 	struct irdma_mw_alloc_info *info;
2454 	struct irdma_pd *iwpd = to_iwpd(iwmr->ibmr.pd);
2455 	struct irdma_cqp_request *cqp_request;
2456 	struct cqp_cmds_info *cqp_info;
2457 	int status;
2458 
2459 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
2460 	if (!cqp_request)
2461 		return -ENOMEM;
2462 
2463 	cqp_info = &cqp_request->info;
2464 	info = &cqp_info->in.u.mw_alloc.info;
2465 	memset(info, 0, sizeof(*info));
2466 	if (iwmr->ibmw.type == IB_MW_TYPE_1)
2467 		info->mw_wide = true;
2468 
2469 	info->page_size = PAGE_SIZE;
2470 	info->mw_stag_index = iwmr->stag >> IRDMA_CQPSQ_STAG_IDX_S;
2471 	info->pd_id = iwpd->sc_pd.pd_id;
2472 	info->remote_access = true;
2473 	cqp_info->cqp_cmd = IRDMA_OP_MW_ALLOC;
2474 	cqp_info->post_sq = 1;
2475 	cqp_info->in.u.mw_alloc.dev = &iwdev->rf->sc_dev;
2476 	cqp_info->in.u.mw_alloc.scratch = (uintptr_t)cqp_request;
2477 	status = irdma_handle_cqp_op(iwdev->rf, cqp_request);
2478 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
2479 
2480 	return status;
2481 }
2482 
2483 /**
2484  * irdma_alloc_mw - Allocate memory window
2485  * @ibmw: Memory Window
2486  * @udata: user data pointer
2487  */
2488 static int irdma_alloc_mw(struct ib_mw *ibmw, struct ib_udata *udata)
2489 {
2490 	struct irdma_device *iwdev = to_iwdev(ibmw->device);
2491 	struct irdma_mr *iwmr = to_iwmw(ibmw);
2492 	int err_code;
2493 	u32 stag;
2494 
2495 	stag = irdma_create_stag(iwdev);
2496 	if (!stag)
2497 		return -ENOMEM;
2498 
2499 	iwmr->stag = stag;
2500 	ibmw->rkey = stag;
2501 
2502 	err_code = irdma_hw_alloc_mw(iwdev, iwmr);
2503 	if (err_code) {
2504 		irdma_free_stag(iwdev, stag);
2505 		return err_code;
2506 	}
2507 
2508 	return 0;
2509 }
2510 
2511 /**
2512  * irdma_dealloc_mw - Dealloc memory window
2513  * @ibmw: memory window structure.
2514  */
2515 static int irdma_dealloc_mw(struct ib_mw *ibmw)
2516 {
2517 	struct ib_pd *ibpd = ibmw->pd;
2518 	struct irdma_pd *iwpd = to_iwpd(ibpd);
2519 	struct irdma_mr *iwmr = to_iwmr((struct ib_mr *)ibmw);
2520 	struct irdma_device *iwdev = to_iwdev(ibmw->device);
2521 	struct irdma_cqp_request *cqp_request;
2522 	struct cqp_cmds_info *cqp_info;
2523 	struct irdma_dealloc_stag_info *info;
2524 
2525 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
2526 	if (!cqp_request)
2527 		return -ENOMEM;
2528 
2529 	cqp_info = &cqp_request->info;
2530 	info = &cqp_info->in.u.dealloc_stag.info;
2531 	memset(info, 0, sizeof(*info));
2532 	info->pd_id = iwpd->sc_pd.pd_id;
2533 	info->stag_idx = ibmw->rkey >> IRDMA_CQPSQ_STAG_IDX_S;
2534 	info->mr = false;
2535 	cqp_info->cqp_cmd = IRDMA_OP_DEALLOC_STAG;
2536 	cqp_info->post_sq = 1;
2537 	cqp_info->in.u.dealloc_stag.dev = &iwdev->rf->sc_dev;
2538 	cqp_info->in.u.dealloc_stag.scratch = (uintptr_t)cqp_request;
2539 	irdma_handle_cqp_op(iwdev->rf, cqp_request);
2540 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
2541 	irdma_free_stag(iwdev, iwmr->stag);
2542 
2543 	return 0;
2544 }
2545 
2546 /**
2547  * irdma_hw_alloc_stag - cqp command to allocate stag
2548  * @iwdev: irdma device
2549  * @iwmr: irdma mr pointer
2550  */
2551 static int irdma_hw_alloc_stag(struct irdma_device *iwdev,
2552 			       struct irdma_mr *iwmr)
2553 {
2554 	struct irdma_allocate_stag_info *info;
2555 	struct irdma_pd *iwpd = to_iwpd(iwmr->ibmr.pd);
2556 	int status;
2557 	struct irdma_cqp_request *cqp_request;
2558 	struct cqp_cmds_info *cqp_info;
2559 
2560 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
2561 	if (!cqp_request)
2562 		return -ENOMEM;
2563 
2564 	cqp_info = &cqp_request->info;
2565 	info = &cqp_info->in.u.alloc_stag.info;
2566 	memset(info, 0, sizeof(*info));
2567 	info->page_size = PAGE_SIZE;
2568 	info->stag_idx = iwmr->stag >> IRDMA_CQPSQ_STAG_IDX_S;
2569 	info->pd_id = iwpd->sc_pd.pd_id;
2570 	info->total_len = iwmr->len;
2571 	info->remote_access = true;
2572 	cqp_info->cqp_cmd = IRDMA_OP_ALLOC_STAG;
2573 	cqp_info->post_sq = 1;
2574 	cqp_info->in.u.alloc_stag.dev = &iwdev->rf->sc_dev;
2575 	cqp_info->in.u.alloc_stag.scratch = (uintptr_t)cqp_request;
2576 	status = irdma_handle_cqp_op(iwdev->rf, cqp_request);
2577 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
2578 
2579 	return status;
2580 }
2581 
2582 /**
2583  * irdma_alloc_mr - register stag for fast memory registration
2584  * @pd: ibpd pointer
2585  * @mr_type: memory for stag registrion
2586  * @max_num_sg: man number of pages
2587  */
2588 static struct ib_mr *irdma_alloc_mr(struct ib_pd *pd, enum ib_mr_type mr_type,
2589 				    u32 max_num_sg)
2590 {
2591 	struct irdma_device *iwdev = to_iwdev(pd->device);
2592 	struct irdma_pble_alloc *palloc;
2593 	struct irdma_pbl *iwpbl;
2594 	struct irdma_mr *iwmr;
2595 	u32 stag;
2596 	int err_code;
2597 
2598 	iwmr = kzalloc(sizeof(*iwmr), GFP_KERNEL);
2599 	if (!iwmr)
2600 		return ERR_PTR(-ENOMEM);
2601 
2602 	stag = irdma_create_stag(iwdev);
2603 	if (!stag) {
2604 		err_code = -ENOMEM;
2605 		goto err;
2606 	}
2607 
2608 	iwmr->stag = stag;
2609 	iwmr->ibmr.rkey = stag;
2610 	iwmr->ibmr.lkey = stag;
2611 	iwmr->ibmr.pd = pd;
2612 	iwmr->ibmr.device = pd->device;
2613 	iwpbl = &iwmr->iwpbl;
2614 	iwpbl->iwmr = iwmr;
2615 	iwmr->type = IRDMA_MEMREG_TYPE_MEM;
2616 	palloc = &iwpbl->pble_alloc;
2617 	iwmr->page_cnt = max_num_sg;
2618 	err_code = irdma_get_pble(iwdev->rf->pble_rsrc, palloc, iwmr->page_cnt,
2619 				  false);
2620 	if (err_code)
2621 		goto err_get_pble;
2622 
2623 	err_code = irdma_hw_alloc_stag(iwdev, iwmr);
2624 	if (err_code)
2625 		goto err_alloc_stag;
2626 
2627 	iwpbl->pbl_allocated = true;
2628 
2629 	return &iwmr->ibmr;
2630 err_alloc_stag:
2631 	irdma_free_pble(iwdev->rf->pble_rsrc, palloc);
2632 err_get_pble:
2633 	irdma_free_stag(iwdev, stag);
2634 err:
2635 	kfree(iwmr);
2636 
2637 	return ERR_PTR(err_code);
2638 }
2639 
2640 /**
2641  * irdma_set_page - populate pbl list for fmr
2642  * @ibmr: ib mem to access iwarp mr pointer
2643  * @addr: page dma address fro pbl list
2644  */
2645 static int irdma_set_page(struct ib_mr *ibmr, u64 addr)
2646 {
2647 	struct irdma_mr *iwmr = to_iwmr(ibmr);
2648 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2649 	struct irdma_pble_alloc *palloc = &iwpbl->pble_alloc;
2650 	u64 *pbl;
2651 
2652 	if (unlikely(iwmr->npages == iwmr->page_cnt))
2653 		return -ENOMEM;
2654 
2655 	if (palloc->level == PBLE_LEVEL_2) {
2656 		struct irdma_pble_info *palloc_info =
2657 			palloc->level2.leaf + (iwmr->npages >> PBLE_512_SHIFT);
2658 
2659 		palloc_info->addr[iwmr->npages & (PBLE_PER_PAGE - 1)] = addr;
2660 	} else {
2661 		pbl = palloc->level1.addr;
2662 		pbl[iwmr->npages] = addr;
2663 	}
2664 	iwmr->npages++;
2665 
2666 	return 0;
2667 }
2668 
2669 /**
2670  * irdma_map_mr_sg - map of sg list for fmr
2671  * @ibmr: ib mem to access iwarp mr pointer
2672  * @sg: scatter gather list
2673  * @sg_nents: number of sg pages
2674  * @sg_offset: scatter gather list for fmr
2675  */
2676 static int irdma_map_mr_sg(struct ib_mr *ibmr, struct scatterlist *sg,
2677 			   int sg_nents, unsigned int *sg_offset)
2678 {
2679 	struct irdma_mr *iwmr = to_iwmr(ibmr);
2680 
2681 	iwmr->npages = 0;
2682 
2683 	return ib_sg_to_pages(ibmr, sg, sg_nents, sg_offset, irdma_set_page);
2684 }
2685 
2686 /**
2687  * irdma_hwreg_mr - send cqp command for memory registration
2688  * @iwdev: irdma device
2689  * @iwmr: irdma mr pointer
2690  * @access: access for MR
2691  */
2692 static int irdma_hwreg_mr(struct irdma_device *iwdev, struct irdma_mr *iwmr,
2693 			  u16 access)
2694 {
2695 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2696 	struct irdma_reg_ns_stag_info *stag_info;
2697 	struct irdma_pd *iwpd = to_iwpd(iwmr->ibmr.pd);
2698 	struct irdma_pble_alloc *palloc = &iwpbl->pble_alloc;
2699 	struct irdma_cqp_request *cqp_request;
2700 	struct cqp_cmds_info *cqp_info;
2701 	int ret;
2702 
2703 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
2704 	if (!cqp_request)
2705 		return -ENOMEM;
2706 
2707 	cqp_info = &cqp_request->info;
2708 	stag_info = &cqp_info->in.u.mr_reg_non_shared.info;
2709 	memset(stag_info, 0, sizeof(*stag_info));
2710 	stag_info->va = iwpbl->user_base;
2711 	stag_info->stag_idx = iwmr->stag >> IRDMA_CQPSQ_STAG_IDX_S;
2712 	stag_info->stag_key = (u8)iwmr->stag;
2713 	stag_info->total_len = iwmr->len;
2714 	stag_info->access_rights = irdma_get_mr_access(access);
2715 	stag_info->pd_id = iwpd->sc_pd.pd_id;
2716 	if (stag_info->access_rights & IRDMA_ACCESS_FLAGS_ZERO_BASED)
2717 		stag_info->addr_type = IRDMA_ADDR_TYPE_ZERO_BASED;
2718 	else
2719 		stag_info->addr_type = IRDMA_ADDR_TYPE_VA_BASED;
2720 	stag_info->page_size = iwmr->page_size;
2721 
2722 	if (iwpbl->pbl_allocated) {
2723 		if (palloc->level == PBLE_LEVEL_1) {
2724 			stag_info->first_pm_pbl_index = palloc->level1.idx;
2725 			stag_info->chunk_size = 1;
2726 		} else {
2727 			stag_info->first_pm_pbl_index = palloc->level2.root.idx;
2728 			stag_info->chunk_size = 3;
2729 		}
2730 	} else {
2731 		stag_info->reg_addr_pa = iwmr->pgaddrmem[0];
2732 	}
2733 
2734 	cqp_info->cqp_cmd = IRDMA_OP_MR_REG_NON_SHARED;
2735 	cqp_info->post_sq = 1;
2736 	cqp_info->in.u.mr_reg_non_shared.dev = &iwdev->rf->sc_dev;
2737 	cqp_info->in.u.mr_reg_non_shared.scratch = (uintptr_t)cqp_request;
2738 	ret = irdma_handle_cqp_op(iwdev->rf, cqp_request);
2739 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
2740 
2741 	return ret;
2742 }
2743 
2744 static int irdma_reg_user_mr_type_mem(struct irdma_mr *iwmr, int access)
2745 {
2746 	struct irdma_device *iwdev = to_iwdev(iwmr->ibmr.device);
2747 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2748 	u32 stag;
2749 	u8 lvl;
2750 	int err;
2751 
2752 	lvl = iwmr->page_cnt != 1 ? PBLE_LEVEL_1 | PBLE_LEVEL_2 : PBLE_LEVEL_0;
2753 
2754 	err = irdma_setup_pbles(iwdev->rf, iwmr, lvl);
2755 	if (err)
2756 		return err;
2757 
2758 	if (lvl) {
2759 		err = irdma_check_mr_contiguous(&iwpbl->pble_alloc,
2760 						iwmr->page_size);
2761 		if (err) {
2762 			irdma_free_pble(iwdev->rf->pble_rsrc, &iwpbl->pble_alloc);
2763 			iwpbl->pbl_allocated = false;
2764 		}
2765 	}
2766 
2767 	stag = irdma_create_stag(iwdev);
2768 	if (!stag) {
2769 		err = -ENOMEM;
2770 		goto free_pble;
2771 	}
2772 
2773 	iwmr->stag = stag;
2774 	iwmr->ibmr.rkey = stag;
2775 	iwmr->ibmr.lkey = stag;
2776 	err = irdma_hwreg_mr(iwdev, iwmr, access);
2777 	if (err)
2778 		goto err_hwreg;
2779 
2780 	return 0;
2781 
2782 err_hwreg:
2783 	irdma_free_stag(iwdev, stag);
2784 
2785 free_pble:
2786 	if (iwpbl->pble_alloc.level != PBLE_LEVEL_0 && iwpbl->pbl_allocated)
2787 		irdma_free_pble(iwdev->rf->pble_rsrc, &iwpbl->pble_alloc);
2788 
2789 	return err;
2790 }
2791 
2792 static struct irdma_mr *irdma_alloc_iwmr(struct ib_umem *region,
2793 					 struct ib_pd *pd, u64 virt,
2794 					 enum irdma_memreg_type reg_type)
2795 {
2796 	struct irdma_device *iwdev = to_iwdev(pd->device);
2797 	struct irdma_pbl *iwpbl = NULL;
2798 	struct irdma_mr *iwmr = NULL;
2799 	unsigned long pgsz_bitmap;
2800 
2801 	iwmr = kzalloc(sizeof(*iwmr), GFP_KERNEL);
2802 	if (!iwmr)
2803 		return ERR_PTR(-ENOMEM);
2804 
2805 	iwpbl = &iwmr->iwpbl;
2806 	iwpbl->iwmr = iwmr;
2807 	iwmr->region = region;
2808 	iwmr->ibmr.pd = pd;
2809 	iwmr->ibmr.device = pd->device;
2810 	iwmr->ibmr.iova = virt;
2811 	iwmr->type = reg_type;
2812 
2813 	pgsz_bitmap = (reg_type == IRDMA_MEMREG_TYPE_MEM) ?
2814 		iwdev->rf->sc_dev.hw_attrs.page_size_cap : PAGE_SIZE;
2815 
2816 	iwmr->page_size = ib_umem_find_best_pgsz(region, pgsz_bitmap, virt);
2817 	if (unlikely(!iwmr->page_size)) {
2818 		kfree(iwmr);
2819 		return ERR_PTR(-EOPNOTSUPP);
2820 	}
2821 
2822 	iwmr->len = region->length;
2823 	iwpbl->user_base = virt;
2824 	iwmr->page_cnt = ib_umem_num_dma_blocks(region, iwmr->page_size);
2825 
2826 	return iwmr;
2827 }
2828 
2829 static void irdma_free_iwmr(struct irdma_mr *iwmr)
2830 {
2831 	kfree(iwmr);
2832 }
2833 
2834 static int irdma_reg_user_mr_type_qp(struct irdma_mem_reg_req req,
2835 				     struct ib_udata *udata,
2836 				     struct irdma_mr *iwmr)
2837 {
2838 	struct irdma_device *iwdev = to_iwdev(iwmr->ibmr.device);
2839 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2840 	struct irdma_ucontext *ucontext = NULL;
2841 	unsigned long flags;
2842 	u32 total;
2843 	int err;
2844 	u8 lvl;
2845 
2846 	total = req.sq_pages + req.rq_pages + 1;
2847 	if (total > iwmr->page_cnt)
2848 		return -EINVAL;
2849 
2850 	total = req.sq_pages + req.rq_pages;
2851 	lvl = total > 2 ? PBLE_LEVEL_1 : PBLE_LEVEL_0;
2852 	err = irdma_handle_q_mem(iwdev, &req, iwpbl, lvl);
2853 	if (err)
2854 		return err;
2855 
2856 	ucontext = rdma_udata_to_drv_context(udata, struct irdma_ucontext,
2857 					     ibucontext);
2858 	spin_lock_irqsave(&ucontext->qp_reg_mem_list_lock, flags);
2859 	list_add_tail(&iwpbl->list, &ucontext->qp_reg_mem_list);
2860 	iwpbl->on_list = true;
2861 	spin_unlock_irqrestore(&ucontext->qp_reg_mem_list_lock, flags);
2862 
2863 	return 0;
2864 }
2865 
2866 static int irdma_reg_user_mr_type_cq(struct irdma_mem_reg_req req,
2867 				     struct ib_udata *udata,
2868 				     struct irdma_mr *iwmr)
2869 {
2870 	struct irdma_device *iwdev = to_iwdev(iwmr->ibmr.device);
2871 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
2872 	struct irdma_ucontext *ucontext = NULL;
2873 	u8 shadow_pgcnt = 1;
2874 	unsigned long flags;
2875 	u32 total;
2876 	int err;
2877 	u8 lvl;
2878 
2879 	if (iwdev->rf->sc_dev.hw_attrs.uk_attrs.feature_flags & IRDMA_FEATURE_CQ_RESIZE)
2880 		shadow_pgcnt = 0;
2881 	total = req.cq_pages + shadow_pgcnt;
2882 	if (total > iwmr->page_cnt)
2883 		return -EINVAL;
2884 
2885 	lvl = req.cq_pages > 1 ? PBLE_LEVEL_1 : PBLE_LEVEL_0;
2886 	err = irdma_handle_q_mem(iwdev, &req, iwpbl, lvl);
2887 	if (err)
2888 		return err;
2889 
2890 	ucontext = rdma_udata_to_drv_context(udata, struct irdma_ucontext,
2891 					     ibucontext);
2892 	spin_lock_irqsave(&ucontext->cq_reg_mem_list_lock, flags);
2893 	list_add_tail(&iwpbl->list, &ucontext->cq_reg_mem_list);
2894 	iwpbl->on_list = true;
2895 	spin_unlock_irqrestore(&ucontext->cq_reg_mem_list_lock, flags);
2896 
2897 	return 0;
2898 }
2899 
2900 /**
2901  * irdma_reg_user_mr - Register a user memory region
2902  * @pd: ptr of pd
2903  * @start: virtual start address
2904  * @len: length of mr
2905  * @virt: virtual address
2906  * @access: access of mr
2907  * @udata: user data
2908  */
2909 static struct ib_mr *irdma_reg_user_mr(struct ib_pd *pd, u64 start, u64 len,
2910 				       u64 virt, int access,
2911 				       struct ib_udata *udata)
2912 {
2913 #define IRDMA_MEM_REG_MIN_REQ_LEN offsetofend(struct irdma_mem_reg_req, sq_pages)
2914 	struct irdma_device *iwdev = to_iwdev(pd->device);
2915 	struct irdma_mem_reg_req req = {};
2916 	struct ib_umem *region = NULL;
2917 	struct irdma_mr *iwmr = NULL;
2918 	int err;
2919 
2920 	if (len > iwdev->rf->sc_dev.hw_attrs.max_mr_size)
2921 		return ERR_PTR(-EINVAL);
2922 
2923 	if (udata->inlen < IRDMA_MEM_REG_MIN_REQ_LEN)
2924 		return ERR_PTR(-EINVAL);
2925 
2926 	region = ib_umem_get(pd->device, start, len, access);
2927 
2928 	if (IS_ERR(region)) {
2929 		ibdev_dbg(&iwdev->ibdev,
2930 			  "VERBS: Failed to create ib_umem region\n");
2931 		return (struct ib_mr *)region;
2932 	}
2933 
2934 	if (ib_copy_from_udata(&req, udata, min(sizeof(req), udata->inlen))) {
2935 		ib_umem_release(region);
2936 		return ERR_PTR(-EFAULT);
2937 	}
2938 
2939 	iwmr = irdma_alloc_iwmr(region, pd, virt, req.reg_type);
2940 	if (IS_ERR(iwmr)) {
2941 		ib_umem_release(region);
2942 		return (struct ib_mr *)iwmr;
2943 	}
2944 
2945 	switch (req.reg_type) {
2946 	case IRDMA_MEMREG_TYPE_QP:
2947 		err = irdma_reg_user_mr_type_qp(req, udata, iwmr);
2948 		if (err)
2949 			goto error;
2950 
2951 		break;
2952 	case IRDMA_MEMREG_TYPE_CQ:
2953 		err = irdma_reg_user_mr_type_cq(req, udata, iwmr);
2954 		if (err)
2955 			goto error;
2956 		break;
2957 	case IRDMA_MEMREG_TYPE_MEM:
2958 		err = irdma_reg_user_mr_type_mem(iwmr, access);
2959 		if (err)
2960 			goto error;
2961 
2962 		break;
2963 	default:
2964 		err = -EINVAL;
2965 		goto error;
2966 	}
2967 
2968 	return &iwmr->ibmr;
2969 error:
2970 	ib_umem_release(region);
2971 	irdma_free_iwmr(iwmr);
2972 
2973 	return ERR_PTR(err);
2974 }
2975 
2976 static struct ib_mr *irdma_reg_user_mr_dmabuf(struct ib_pd *pd, u64 start,
2977 					      u64 len, u64 virt,
2978 					      int fd, int access,
2979 					      struct ib_udata *udata)
2980 {
2981 	struct irdma_device *iwdev = to_iwdev(pd->device);
2982 	struct ib_umem_dmabuf *umem_dmabuf;
2983 	struct irdma_mr *iwmr;
2984 	int err;
2985 
2986 	if (len > iwdev->rf->sc_dev.hw_attrs.max_mr_size)
2987 		return ERR_PTR(-EINVAL);
2988 
2989 	umem_dmabuf = ib_umem_dmabuf_get_pinned(pd->device, start, len, fd, access);
2990 	if (IS_ERR(umem_dmabuf)) {
2991 		err = PTR_ERR(umem_dmabuf);
2992 		ibdev_dbg(&iwdev->ibdev, "Failed to get dmabuf umem[%d]\n", err);
2993 		return ERR_PTR(err);
2994 	}
2995 
2996 	iwmr = irdma_alloc_iwmr(&umem_dmabuf->umem, pd, virt, IRDMA_MEMREG_TYPE_MEM);
2997 	if (IS_ERR(iwmr)) {
2998 		err = PTR_ERR(iwmr);
2999 		goto err_release;
3000 	}
3001 
3002 	err = irdma_reg_user_mr_type_mem(iwmr, access);
3003 	if (err)
3004 		goto err_iwmr;
3005 
3006 	return &iwmr->ibmr;
3007 
3008 err_iwmr:
3009 	irdma_free_iwmr(iwmr);
3010 
3011 err_release:
3012 	ib_umem_release(&umem_dmabuf->umem);
3013 
3014 	return ERR_PTR(err);
3015 }
3016 
3017 /**
3018  * irdma_reg_phys_mr - register kernel physical memory
3019  * @pd: ibpd pointer
3020  * @addr: physical address of memory to register
3021  * @size: size of memory to register
3022  * @access: Access rights
3023  * @iova_start: start of virtual address for physical buffers
3024  */
3025 struct ib_mr *irdma_reg_phys_mr(struct ib_pd *pd, u64 addr, u64 size, int access,
3026 				u64 *iova_start)
3027 {
3028 	struct irdma_device *iwdev = to_iwdev(pd->device);
3029 	struct irdma_pbl *iwpbl;
3030 	struct irdma_mr *iwmr;
3031 	u32 stag;
3032 	int ret;
3033 
3034 	iwmr = kzalloc(sizeof(*iwmr), GFP_KERNEL);
3035 	if (!iwmr)
3036 		return ERR_PTR(-ENOMEM);
3037 
3038 	iwmr->ibmr.pd = pd;
3039 	iwmr->ibmr.device = pd->device;
3040 	iwpbl = &iwmr->iwpbl;
3041 	iwpbl->iwmr = iwmr;
3042 	iwmr->type = IRDMA_MEMREG_TYPE_MEM;
3043 	iwpbl->user_base = *iova_start;
3044 	stag = irdma_create_stag(iwdev);
3045 	if (!stag) {
3046 		ret = -ENOMEM;
3047 		goto err;
3048 	}
3049 
3050 	iwmr->stag = stag;
3051 	iwmr->ibmr.iova = *iova_start;
3052 	iwmr->ibmr.rkey = stag;
3053 	iwmr->ibmr.lkey = stag;
3054 	iwmr->page_cnt = 1;
3055 	iwmr->pgaddrmem[0] = addr;
3056 	iwmr->len = size;
3057 	iwmr->page_size = SZ_4K;
3058 	ret = irdma_hwreg_mr(iwdev, iwmr, access);
3059 	if (ret) {
3060 		irdma_free_stag(iwdev, stag);
3061 		goto err;
3062 	}
3063 
3064 	return &iwmr->ibmr;
3065 
3066 err:
3067 	kfree(iwmr);
3068 
3069 	return ERR_PTR(ret);
3070 }
3071 
3072 /**
3073  * irdma_get_dma_mr - register physical mem
3074  * @pd: ptr of pd
3075  * @acc: access for memory
3076  */
3077 static struct ib_mr *irdma_get_dma_mr(struct ib_pd *pd, int acc)
3078 {
3079 	u64 kva = 0;
3080 
3081 	return irdma_reg_phys_mr(pd, 0, 0, acc, &kva);
3082 }
3083 
3084 /**
3085  * irdma_del_memlist - Deleting pbl list entries for CQ/QP
3086  * @iwmr: iwmr for IB's user page addresses
3087  * @ucontext: ptr to user context
3088  */
3089 static void irdma_del_memlist(struct irdma_mr *iwmr,
3090 			      struct irdma_ucontext *ucontext)
3091 {
3092 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
3093 	unsigned long flags;
3094 
3095 	switch (iwmr->type) {
3096 	case IRDMA_MEMREG_TYPE_CQ:
3097 		spin_lock_irqsave(&ucontext->cq_reg_mem_list_lock, flags);
3098 		if (iwpbl->on_list) {
3099 			iwpbl->on_list = false;
3100 			list_del(&iwpbl->list);
3101 		}
3102 		spin_unlock_irqrestore(&ucontext->cq_reg_mem_list_lock, flags);
3103 		break;
3104 	case IRDMA_MEMREG_TYPE_QP:
3105 		spin_lock_irqsave(&ucontext->qp_reg_mem_list_lock, flags);
3106 		if (iwpbl->on_list) {
3107 			iwpbl->on_list = false;
3108 			list_del(&iwpbl->list);
3109 		}
3110 		spin_unlock_irqrestore(&ucontext->qp_reg_mem_list_lock, flags);
3111 		break;
3112 	default:
3113 		break;
3114 	}
3115 }
3116 
3117 /**
3118  * irdma_dereg_mr - deregister mr
3119  * @ib_mr: mr ptr for dereg
3120  * @udata: user data
3121  */
3122 static int irdma_dereg_mr(struct ib_mr *ib_mr, struct ib_udata *udata)
3123 {
3124 	struct ib_pd *ibpd = ib_mr->pd;
3125 	struct irdma_pd *iwpd = to_iwpd(ibpd);
3126 	struct irdma_mr *iwmr = to_iwmr(ib_mr);
3127 	struct irdma_device *iwdev = to_iwdev(ib_mr->device);
3128 	struct irdma_dealloc_stag_info *info;
3129 	struct irdma_pbl *iwpbl = &iwmr->iwpbl;
3130 	struct irdma_pble_alloc *palloc = &iwpbl->pble_alloc;
3131 	struct irdma_cqp_request *cqp_request;
3132 	struct cqp_cmds_info *cqp_info;
3133 	int status;
3134 
3135 	if (iwmr->type != IRDMA_MEMREG_TYPE_MEM) {
3136 		if (iwmr->region) {
3137 			struct irdma_ucontext *ucontext;
3138 
3139 			ucontext = rdma_udata_to_drv_context(udata,
3140 						struct irdma_ucontext,
3141 						ibucontext);
3142 			irdma_del_memlist(iwmr, ucontext);
3143 		}
3144 		goto done;
3145 	}
3146 
3147 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
3148 	if (!cqp_request)
3149 		return -ENOMEM;
3150 
3151 	cqp_info = &cqp_request->info;
3152 	info = &cqp_info->in.u.dealloc_stag.info;
3153 	memset(info, 0, sizeof(*info));
3154 	info->pd_id = iwpd->sc_pd.pd_id;
3155 	info->stag_idx = ib_mr->rkey >> IRDMA_CQPSQ_STAG_IDX_S;
3156 	info->mr = true;
3157 	if (iwpbl->pbl_allocated)
3158 		info->dealloc_pbl = true;
3159 
3160 	cqp_info->cqp_cmd = IRDMA_OP_DEALLOC_STAG;
3161 	cqp_info->post_sq = 1;
3162 	cqp_info->in.u.dealloc_stag.dev = &iwdev->rf->sc_dev;
3163 	cqp_info->in.u.dealloc_stag.scratch = (uintptr_t)cqp_request;
3164 	status = irdma_handle_cqp_op(iwdev->rf, cqp_request);
3165 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
3166 	if (status)
3167 		return status;
3168 
3169 	irdma_free_stag(iwdev, iwmr->stag);
3170 done:
3171 	if (iwpbl->pbl_allocated)
3172 		irdma_free_pble(iwdev->rf->pble_rsrc, palloc);
3173 	ib_umem_release(iwmr->region);
3174 	kfree(iwmr);
3175 
3176 	return 0;
3177 }
3178 
3179 /**
3180  * irdma_post_send -  kernel application wr
3181  * @ibqp: qp ptr for wr
3182  * @ib_wr: work request ptr
3183  * @bad_wr: return of bad wr if err
3184  */
3185 static int irdma_post_send(struct ib_qp *ibqp,
3186 			   const struct ib_send_wr *ib_wr,
3187 			   const struct ib_send_wr **bad_wr)
3188 {
3189 	struct irdma_qp *iwqp;
3190 	struct irdma_qp_uk *ukqp;
3191 	struct irdma_sc_dev *dev;
3192 	struct irdma_post_sq_info info;
3193 	int err = 0;
3194 	unsigned long flags;
3195 	bool inv_stag;
3196 	struct irdma_ah *ah;
3197 
3198 	iwqp = to_iwqp(ibqp);
3199 	ukqp = &iwqp->sc_qp.qp_uk;
3200 	dev = &iwqp->iwdev->rf->sc_dev;
3201 
3202 	spin_lock_irqsave(&iwqp->lock, flags);
3203 	while (ib_wr) {
3204 		memset(&info, 0, sizeof(info));
3205 		inv_stag = false;
3206 		info.wr_id = (ib_wr->wr_id);
3207 		if ((ib_wr->send_flags & IB_SEND_SIGNALED) || iwqp->sig_all)
3208 			info.signaled = true;
3209 		if (ib_wr->send_flags & IB_SEND_FENCE)
3210 			info.read_fence = true;
3211 		switch (ib_wr->opcode) {
3212 		case IB_WR_SEND_WITH_IMM:
3213 			if (ukqp->qp_caps & IRDMA_SEND_WITH_IMM) {
3214 				info.imm_data_valid = true;
3215 				info.imm_data = ntohl(ib_wr->ex.imm_data);
3216 			} else {
3217 				err = -EINVAL;
3218 				break;
3219 			}
3220 			fallthrough;
3221 		case IB_WR_SEND:
3222 		case IB_WR_SEND_WITH_INV:
3223 			if (ib_wr->opcode == IB_WR_SEND ||
3224 			    ib_wr->opcode == IB_WR_SEND_WITH_IMM) {
3225 				if (ib_wr->send_flags & IB_SEND_SOLICITED)
3226 					info.op_type = IRDMA_OP_TYPE_SEND_SOL;
3227 				else
3228 					info.op_type = IRDMA_OP_TYPE_SEND;
3229 			} else {
3230 				if (ib_wr->send_flags & IB_SEND_SOLICITED)
3231 					info.op_type = IRDMA_OP_TYPE_SEND_SOL_INV;
3232 				else
3233 					info.op_type = IRDMA_OP_TYPE_SEND_INV;
3234 				info.stag_to_inv = ib_wr->ex.invalidate_rkey;
3235 			}
3236 
3237 			info.op.send.num_sges = ib_wr->num_sge;
3238 			info.op.send.sg_list = ib_wr->sg_list;
3239 			if (iwqp->ibqp.qp_type == IB_QPT_UD ||
3240 			    iwqp->ibqp.qp_type == IB_QPT_GSI) {
3241 				ah = to_iwah(ud_wr(ib_wr)->ah);
3242 				info.op.send.ah_id = ah->sc_ah.ah_info.ah_idx;
3243 				info.op.send.qkey = ud_wr(ib_wr)->remote_qkey;
3244 				info.op.send.dest_qp = ud_wr(ib_wr)->remote_qpn;
3245 			}
3246 
3247 			if (ib_wr->send_flags & IB_SEND_INLINE)
3248 				err = irdma_uk_inline_send(ukqp, &info, false);
3249 			else
3250 				err = irdma_uk_send(ukqp, &info, false);
3251 			break;
3252 		case IB_WR_RDMA_WRITE_WITH_IMM:
3253 			if (ukqp->qp_caps & IRDMA_WRITE_WITH_IMM) {
3254 				info.imm_data_valid = true;
3255 				info.imm_data = ntohl(ib_wr->ex.imm_data);
3256 			} else {
3257 				err = -EINVAL;
3258 				break;
3259 			}
3260 			fallthrough;
3261 		case IB_WR_RDMA_WRITE:
3262 			if (ib_wr->send_flags & IB_SEND_SOLICITED)
3263 				info.op_type = IRDMA_OP_TYPE_RDMA_WRITE_SOL;
3264 			else
3265 				info.op_type = IRDMA_OP_TYPE_RDMA_WRITE;
3266 
3267 			info.op.rdma_write.num_lo_sges = ib_wr->num_sge;
3268 			info.op.rdma_write.lo_sg_list = ib_wr->sg_list;
3269 			info.op.rdma_write.rem_addr.addr =
3270 				rdma_wr(ib_wr)->remote_addr;
3271 			info.op.rdma_write.rem_addr.lkey = rdma_wr(ib_wr)->rkey;
3272 			if (ib_wr->send_flags & IB_SEND_INLINE)
3273 				err = irdma_uk_inline_rdma_write(ukqp, &info, false);
3274 			else
3275 				err = irdma_uk_rdma_write(ukqp, &info, false);
3276 			break;
3277 		case IB_WR_RDMA_READ_WITH_INV:
3278 			inv_stag = true;
3279 			fallthrough;
3280 		case IB_WR_RDMA_READ:
3281 			if (ib_wr->num_sge >
3282 			    dev->hw_attrs.uk_attrs.max_hw_read_sges) {
3283 				err = -EINVAL;
3284 				break;
3285 			}
3286 			info.op_type = IRDMA_OP_TYPE_RDMA_READ;
3287 			info.op.rdma_read.rem_addr.addr = rdma_wr(ib_wr)->remote_addr;
3288 			info.op.rdma_read.rem_addr.lkey = rdma_wr(ib_wr)->rkey;
3289 			info.op.rdma_read.lo_sg_list = (void *)ib_wr->sg_list;
3290 			info.op.rdma_read.num_lo_sges = ib_wr->num_sge;
3291 			err = irdma_uk_rdma_read(ukqp, &info, inv_stag, false);
3292 			break;
3293 		case IB_WR_LOCAL_INV:
3294 			info.op_type = IRDMA_OP_TYPE_INV_STAG;
3295 			info.local_fence = info.read_fence;
3296 			info.op.inv_local_stag.target_stag = ib_wr->ex.invalidate_rkey;
3297 			err = irdma_uk_stag_local_invalidate(ukqp, &info, true);
3298 			break;
3299 		case IB_WR_REG_MR: {
3300 			struct irdma_mr *iwmr = to_iwmr(reg_wr(ib_wr)->mr);
3301 			struct irdma_pble_alloc *palloc = &iwmr->iwpbl.pble_alloc;
3302 			struct irdma_fast_reg_stag_info stag_info = {};
3303 
3304 			stag_info.signaled = info.signaled;
3305 			stag_info.read_fence = info.read_fence;
3306 			stag_info.access_rights = irdma_get_mr_access(reg_wr(ib_wr)->access);
3307 			stag_info.stag_key = reg_wr(ib_wr)->key & 0xff;
3308 			stag_info.stag_idx = reg_wr(ib_wr)->key >> 8;
3309 			stag_info.page_size = reg_wr(ib_wr)->mr->page_size;
3310 			stag_info.wr_id = ib_wr->wr_id;
3311 			stag_info.addr_type = IRDMA_ADDR_TYPE_VA_BASED;
3312 			stag_info.va = (void *)(uintptr_t)iwmr->ibmr.iova;
3313 			stag_info.total_len = iwmr->ibmr.length;
3314 			stag_info.reg_addr_pa = *palloc->level1.addr;
3315 			stag_info.first_pm_pbl_index = palloc->level1.idx;
3316 			stag_info.local_fence = ib_wr->send_flags & IB_SEND_FENCE;
3317 			if (iwmr->npages > IRDMA_MIN_PAGES_PER_FMR)
3318 				stag_info.chunk_size = 1;
3319 			err = irdma_sc_mr_fast_register(&iwqp->sc_qp, &stag_info,
3320 							true);
3321 			break;
3322 		}
3323 		default:
3324 			err = -EINVAL;
3325 			ibdev_dbg(&iwqp->iwdev->ibdev,
3326 				  "VERBS: upost_send bad opcode = 0x%x\n",
3327 				  ib_wr->opcode);
3328 			break;
3329 		}
3330 
3331 		if (err)
3332 			break;
3333 		ib_wr = ib_wr->next;
3334 	}
3335 
3336 	if (!iwqp->flush_issued) {
3337 		if (iwqp->hw_iwarp_state <= IRDMA_QP_STATE_RTS)
3338 			irdma_uk_qp_post_wr(ukqp);
3339 		spin_unlock_irqrestore(&iwqp->lock, flags);
3340 	} else {
3341 		spin_unlock_irqrestore(&iwqp->lock, flags);
3342 		mod_delayed_work(iwqp->iwdev->cleanup_wq, &iwqp->dwork_flush,
3343 				 msecs_to_jiffies(IRDMA_FLUSH_DELAY_MS));
3344 	}
3345 	if (err)
3346 		*bad_wr = ib_wr;
3347 
3348 	return err;
3349 }
3350 
3351 /**
3352  * irdma_post_recv - post receive wr for kernel application
3353  * @ibqp: ib qp pointer
3354  * @ib_wr: work request for receive
3355  * @bad_wr: bad wr caused an error
3356  */
3357 static int irdma_post_recv(struct ib_qp *ibqp,
3358 			   const struct ib_recv_wr *ib_wr,
3359 			   const struct ib_recv_wr **bad_wr)
3360 {
3361 	struct irdma_qp *iwqp;
3362 	struct irdma_qp_uk *ukqp;
3363 	struct irdma_post_rq_info post_recv = {};
3364 	unsigned long flags;
3365 	int err = 0;
3366 
3367 	iwqp = to_iwqp(ibqp);
3368 	ukqp = &iwqp->sc_qp.qp_uk;
3369 
3370 	spin_lock_irqsave(&iwqp->lock, flags);
3371 	while (ib_wr) {
3372 		post_recv.num_sges = ib_wr->num_sge;
3373 		post_recv.wr_id = ib_wr->wr_id;
3374 		post_recv.sg_list = ib_wr->sg_list;
3375 		err = irdma_uk_post_receive(ukqp, &post_recv);
3376 		if (err) {
3377 			ibdev_dbg(&iwqp->iwdev->ibdev,
3378 				  "VERBS: post_recv err %d\n", err);
3379 			goto out;
3380 		}
3381 
3382 		ib_wr = ib_wr->next;
3383 	}
3384 
3385 out:
3386 	spin_unlock_irqrestore(&iwqp->lock, flags);
3387 	if (iwqp->flush_issued)
3388 		mod_delayed_work(iwqp->iwdev->cleanup_wq, &iwqp->dwork_flush,
3389 				 msecs_to_jiffies(IRDMA_FLUSH_DELAY_MS));
3390 
3391 	if (err)
3392 		*bad_wr = ib_wr;
3393 
3394 	return err;
3395 }
3396 
3397 /**
3398  * irdma_flush_err_to_ib_wc_status - return change flush error code to IB status
3399  * @opcode: iwarp flush code
3400  */
3401 static enum ib_wc_status irdma_flush_err_to_ib_wc_status(enum irdma_flush_opcode opcode)
3402 {
3403 	switch (opcode) {
3404 	case FLUSH_PROT_ERR:
3405 		return IB_WC_LOC_PROT_ERR;
3406 	case FLUSH_REM_ACCESS_ERR:
3407 		return IB_WC_REM_ACCESS_ERR;
3408 	case FLUSH_LOC_QP_OP_ERR:
3409 		return IB_WC_LOC_QP_OP_ERR;
3410 	case FLUSH_REM_OP_ERR:
3411 		return IB_WC_REM_OP_ERR;
3412 	case FLUSH_LOC_LEN_ERR:
3413 		return IB_WC_LOC_LEN_ERR;
3414 	case FLUSH_GENERAL_ERR:
3415 		return IB_WC_WR_FLUSH_ERR;
3416 	case FLUSH_RETRY_EXC_ERR:
3417 		return IB_WC_RETRY_EXC_ERR;
3418 	case FLUSH_MW_BIND_ERR:
3419 		return IB_WC_MW_BIND_ERR;
3420 	case FLUSH_REM_INV_REQ_ERR:
3421 		return IB_WC_REM_INV_REQ_ERR;
3422 	case FLUSH_FATAL_ERR:
3423 	default:
3424 		return IB_WC_FATAL_ERR;
3425 	}
3426 }
3427 
3428 /**
3429  * irdma_process_cqe - process cqe info
3430  * @entry: processed cqe
3431  * @cq_poll_info: cqe info
3432  */
3433 static void irdma_process_cqe(struct ib_wc *entry,
3434 			      struct irdma_cq_poll_info *cq_poll_info)
3435 {
3436 	struct irdma_sc_qp *qp;
3437 
3438 	entry->wc_flags = 0;
3439 	entry->pkey_index = 0;
3440 	entry->wr_id = cq_poll_info->wr_id;
3441 
3442 	qp = cq_poll_info->qp_handle;
3443 	entry->qp = qp->qp_uk.back_qp;
3444 
3445 	if (cq_poll_info->error) {
3446 		entry->status = (cq_poll_info->comp_status == IRDMA_COMPL_STATUS_FLUSHED) ?
3447 				irdma_flush_err_to_ib_wc_status(cq_poll_info->minor_err) : IB_WC_GENERAL_ERR;
3448 
3449 		entry->vendor_err = cq_poll_info->major_err << 16 |
3450 				    cq_poll_info->minor_err;
3451 	} else {
3452 		entry->status = IB_WC_SUCCESS;
3453 		if (cq_poll_info->imm_valid) {
3454 			entry->ex.imm_data = htonl(cq_poll_info->imm_data);
3455 			entry->wc_flags |= IB_WC_WITH_IMM;
3456 		}
3457 		if (cq_poll_info->ud_smac_valid) {
3458 			ether_addr_copy(entry->smac, cq_poll_info->ud_smac);
3459 			entry->wc_flags |= IB_WC_WITH_SMAC;
3460 		}
3461 
3462 		if (cq_poll_info->ud_vlan_valid) {
3463 			u16 vlan = cq_poll_info->ud_vlan & VLAN_VID_MASK;
3464 
3465 			entry->sl = cq_poll_info->ud_vlan >> VLAN_PRIO_SHIFT;
3466 			if (vlan) {
3467 				entry->vlan_id = vlan;
3468 				entry->wc_flags |= IB_WC_WITH_VLAN;
3469 			}
3470 		} else {
3471 			entry->sl = 0;
3472 		}
3473 	}
3474 
3475 	if (cq_poll_info->q_type == IRDMA_CQE_QTYPE_SQ) {
3476 		set_ib_wc_op_sq(cq_poll_info, entry);
3477 	} else {
3478 		set_ib_wc_op_rq(cq_poll_info, entry,
3479 				qp->qp_uk.qp_caps & IRDMA_SEND_WITH_IMM ?
3480 				true : false);
3481 		if (qp->qp_uk.qp_type != IRDMA_QP_TYPE_ROCE_UD &&
3482 		    cq_poll_info->stag_invalid_set) {
3483 			entry->ex.invalidate_rkey = cq_poll_info->inv_stag;
3484 			entry->wc_flags |= IB_WC_WITH_INVALIDATE;
3485 		}
3486 	}
3487 
3488 	if (qp->qp_uk.qp_type == IRDMA_QP_TYPE_ROCE_UD) {
3489 		entry->src_qp = cq_poll_info->ud_src_qpn;
3490 		entry->slid = 0;
3491 		entry->wc_flags |=
3492 			(IB_WC_GRH | IB_WC_WITH_NETWORK_HDR_TYPE);
3493 		entry->network_hdr_type = cq_poll_info->ipv4 ?
3494 						  RDMA_NETWORK_IPV4 :
3495 						  RDMA_NETWORK_IPV6;
3496 	} else {
3497 		entry->src_qp = cq_poll_info->qp_id;
3498 	}
3499 
3500 	entry->byte_len = cq_poll_info->bytes_xfered;
3501 }
3502 
3503 /**
3504  * irdma_poll_one - poll one entry of the CQ
3505  * @ukcq: ukcq to poll
3506  * @cur_cqe: current CQE info to be filled in
3507  * @entry: ibv_wc object to be filled for non-extended CQ or NULL for extended CQ
3508  *
3509  * Returns the internal irdma device error code or 0 on success
3510  */
3511 static inline int irdma_poll_one(struct irdma_cq_uk *ukcq,
3512 				 struct irdma_cq_poll_info *cur_cqe,
3513 				 struct ib_wc *entry)
3514 {
3515 	int ret = irdma_uk_cq_poll_cmpl(ukcq, cur_cqe);
3516 
3517 	if (ret)
3518 		return ret;
3519 
3520 	irdma_process_cqe(entry, cur_cqe);
3521 
3522 	return 0;
3523 }
3524 
3525 /**
3526  * __irdma_poll_cq - poll cq for completion (kernel apps)
3527  * @iwcq: cq to poll
3528  * @num_entries: number of entries to poll
3529  * @entry: wr of a completed entry
3530  */
3531 static int __irdma_poll_cq(struct irdma_cq *iwcq, int num_entries, struct ib_wc *entry)
3532 {
3533 	struct list_head *tmp_node, *list_node;
3534 	struct irdma_cq_buf *last_buf = NULL;
3535 	struct irdma_cq_poll_info *cur_cqe = &iwcq->cur_cqe;
3536 	struct irdma_cq_buf *cq_buf;
3537 	int ret;
3538 	struct irdma_device *iwdev;
3539 	struct irdma_cq_uk *ukcq;
3540 	bool cq_new_cqe = false;
3541 	int resized_bufs = 0;
3542 	int npolled = 0;
3543 
3544 	iwdev = to_iwdev(iwcq->ibcq.device);
3545 	ukcq = &iwcq->sc_cq.cq_uk;
3546 
3547 	/* go through the list of previously resized CQ buffers */
3548 	list_for_each_safe(list_node, tmp_node, &iwcq->resize_list) {
3549 		cq_buf = container_of(list_node, struct irdma_cq_buf, list);
3550 		while (npolled < num_entries) {
3551 			ret = irdma_poll_one(&cq_buf->cq_uk, cur_cqe, entry + npolled);
3552 			if (!ret) {
3553 				++npolled;
3554 				cq_new_cqe = true;
3555 				continue;
3556 			}
3557 			if (ret == -ENOENT)
3558 				break;
3559 			 /* QP using the CQ is destroyed. Skip reporting this CQE */
3560 			if (ret == -EFAULT) {
3561 				cq_new_cqe = true;
3562 				continue;
3563 			}
3564 			goto error;
3565 		}
3566 
3567 		/* save the resized CQ buffer which received the last cqe */
3568 		if (cq_new_cqe)
3569 			last_buf = cq_buf;
3570 		cq_new_cqe = false;
3571 	}
3572 
3573 	/* check the current CQ for new cqes */
3574 	while (npolled < num_entries) {
3575 		ret = irdma_poll_one(ukcq, cur_cqe, entry + npolled);
3576 		if (ret == -ENOENT) {
3577 			ret = irdma_generated_cmpls(iwcq, cur_cqe);
3578 			if (!ret)
3579 				irdma_process_cqe(entry + npolled, cur_cqe);
3580 		}
3581 		if (!ret) {
3582 			++npolled;
3583 			cq_new_cqe = true;
3584 			continue;
3585 		}
3586 
3587 		if (ret == -ENOENT)
3588 			break;
3589 		/* QP using the CQ is destroyed. Skip reporting this CQE */
3590 		if (ret == -EFAULT) {
3591 			cq_new_cqe = true;
3592 			continue;
3593 		}
3594 		goto error;
3595 	}
3596 
3597 	if (cq_new_cqe)
3598 		/* all previous CQ resizes are complete */
3599 		resized_bufs = irdma_process_resize_list(iwcq, iwdev, NULL);
3600 	else if (last_buf)
3601 		/* only CQ resizes up to the last_buf are complete */
3602 		resized_bufs = irdma_process_resize_list(iwcq, iwdev, last_buf);
3603 	if (resized_bufs)
3604 		/* report to the HW the number of complete CQ resizes */
3605 		irdma_uk_cq_set_resized_cnt(ukcq, resized_bufs);
3606 
3607 	return npolled;
3608 error:
3609 	ibdev_dbg(&iwdev->ibdev, "%s: Error polling CQ, irdma_err: %d\n",
3610 		  __func__, ret);
3611 
3612 	return ret;
3613 }
3614 
3615 /**
3616  * irdma_poll_cq - poll cq for completion (kernel apps)
3617  * @ibcq: cq to poll
3618  * @num_entries: number of entries to poll
3619  * @entry: wr of a completed entry
3620  */
3621 static int irdma_poll_cq(struct ib_cq *ibcq, int num_entries,
3622 			 struct ib_wc *entry)
3623 {
3624 	struct irdma_cq *iwcq;
3625 	unsigned long flags;
3626 	int ret;
3627 
3628 	iwcq = to_iwcq(ibcq);
3629 
3630 	spin_lock_irqsave(&iwcq->lock, flags);
3631 	ret = __irdma_poll_cq(iwcq, num_entries, entry);
3632 	spin_unlock_irqrestore(&iwcq->lock, flags);
3633 
3634 	return ret;
3635 }
3636 
3637 /**
3638  * irdma_req_notify_cq - arm cq kernel application
3639  * @ibcq: cq to arm
3640  * @notify_flags: notofication flags
3641  */
3642 static int irdma_req_notify_cq(struct ib_cq *ibcq,
3643 			       enum ib_cq_notify_flags notify_flags)
3644 {
3645 	struct irdma_cq *iwcq;
3646 	struct irdma_cq_uk *ukcq;
3647 	unsigned long flags;
3648 	enum irdma_cmpl_notify cq_notify;
3649 	bool promo_event = false;
3650 	int ret = 0;
3651 
3652 	cq_notify = notify_flags == IB_CQ_SOLICITED ?
3653 		    IRDMA_CQ_COMPL_SOLICITED : IRDMA_CQ_COMPL_EVENT;
3654 	iwcq = to_iwcq(ibcq);
3655 	ukcq = &iwcq->sc_cq.cq_uk;
3656 
3657 	spin_lock_irqsave(&iwcq->lock, flags);
3658 	/* Only promote to arm the CQ for any event if the last arm event was solicited. */
3659 	if (iwcq->last_notify == IRDMA_CQ_COMPL_SOLICITED && notify_flags != IB_CQ_SOLICITED)
3660 		promo_event = true;
3661 
3662 	if (!atomic_cmpxchg(&iwcq->armed, 0, 1) || promo_event) {
3663 		iwcq->last_notify = cq_notify;
3664 		irdma_uk_cq_request_notification(ukcq, cq_notify);
3665 	}
3666 
3667 	if ((notify_flags & IB_CQ_REPORT_MISSED_EVENTS) &&
3668 	    (!irdma_cq_empty(iwcq) || !list_empty(&iwcq->cmpl_generated)))
3669 		ret = 1;
3670 	spin_unlock_irqrestore(&iwcq->lock, flags);
3671 
3672 	return ret;
3673 }
3674 
3675 static int irdma_roce_port_immutable(struct ib_device *ibdev, u32 port_num,
3676 				     struct ib_port_immutable *immutable)
3677 {
3678 	struct ib_port_attr attr;
3679 	int err;
3680 
3681 	immutable->core_cap_flags = RDMA_CORE_PORT_IBA_ROCE_UDP_ENCAP;
3682 	err = ib_query_port(ibdev, port_num, &attr);
3683 	if (err)
3684 		return err;
3685 
3686 	immutable->max_mad_size = IB_MGMT_MAD_SIZE;
3687 	immutable->pkey_tbl_len = attr.pkey_tbl_len;
3688 	immutable->gid_tbl_len = attr.gid_tbl_len;
3689 
3690 	return 0;
3691 }
3692 
3693 static int irdma_iw_port_immutable(struct ib_device *ibdev, u32 port_num,
3694 				   struct ib_port_immutable *immutable)
3695 {
3696 	struct ib_port_attr attr;
3697 	int err;
3698 
3699 	immutable->core_cap_flags = RDMA_CORE_PORT_IWARP;
3700 	err = ib_query_port(ibdev, port_num, &attr);
3701 	if (err)
3702 		return err;
3703 	immutable->gid_tbl_len = attr.gid_tbl_len;
3704 
3705 	return 0;
3706 }
3707 
3708 static const struct rdma_stat_desc irdma_hw_stat_names[] = {
3709 	/* gen1 - 32-bit */
3710 	[IRDMA_HW_STAT_INDEX_IP4RXDISCARD].name		= "ip4InDiscards",
3711 	[IRDMA_HW_STAT_INDEX_IP4RXTRUNC].name		= "ip4InTruncatedPkts",
3712 	[IRDMA_HW_STAT_INDEX_IP4TXNOROUTE].name		= "ip4OutNoRoutes",
3713 	[IRDMA_HW_STAT_INDEX_IP6RXDISCARD].name		= "ip6InDiscards",
3714 	[IRDMA_HW_STAT_INDEX_IP6RXTRUNC].name		= "ip6InTruncatedPkts",
3715 	[IRDMA_HW_STAT_INDEX_IP6TXNOROUTE].name		= "ip6OutNoRoutes",
3716 	[IRDMA_HW_STAT_INDEX_TCPRTXSEG].name		= "tcpRetransSegs",
3717 	[IRDMA_HW_STAT_INDEX_TCPRXOPTERR].name		= "tcpInOptErrors",
3718 	[IRDMA_HW_STAT_INDEX_TCPRXPROTOERR].name	= "tcpInProtoErrors",
3719 	[IRDMA_HW_STAT_INDEX_RXVLANERR].name		= "rxVlanErrors",
3720 	/* gen1 - 64-bit */
3721 	[IRDMA_HW_STAT_INDEX_IP4RXOCTS].name		= "ip4InOctets",
3722 	[IRDMA_HW_STAT_INDEX_IP4RXPKTS].name		= "ip4InPkts",
3723 	[IRDMA_HW_STAT_INDEX_IP4RXFRAGS].name		= "ip4InReasmRqd",
3724 	[IRDMA_HW_STAT_INDEX_IP4RXMCPKTS].name		= "ip4InMcastPkts",
3725 	[IRDMA_HW_STAT_INDEX_IP4TXOCTS].name		= "ip4OutOctets",
3726 	[IRDMA_HW_STAT_INDEX_IP4TXPKTS].name		= "ip4OutPkts",
3727 	[IRDMA_HW_STAT_INDEX_IP4TXFRAGS].name		= "ip4OutSegRqd",
3728 	[IRDMA_HW_STAT_INDEX_IP4TXMCPKTS].name		= "ip4OutMcastPkts",
3729 	[IRDMA_HW_STAT_INDEX_IP6RXOCTS].name		= "ip6InOctets",
3730 	[IRDMA_HW_STAT_INDEX_IP6RXPKTS].name		= "ip6InPkts",
3731 	[IRDMA_HW_STAT_INDEX_IP6RXFRAGS].name		= "ip6InReasmRqd",
3732 	[IRDMA_HW_STAT_INDEX_IP6RXMCPKTS].name		= "ip6InMcastPkts",
3733 	[IRDMA_HW_STAT_INDEX_IP6TXOCTS].name		= "ip6OutOctets",
3734 	[IRDMA_HW_STAT_INDEX_IP6TXPKTS].name		= "ip6OutPkts",
3735 	[IRDMA_HW_STAT_INDEX_IP6TXFRAGS].name		= "ip6OutSegRqd",
3736 	[IRDMA_HW_STAT_INDEX_IP6TXMCPKTS].name		= "ip6OutMcastPkts",
3737 	[IRDMA_HW_STAT_INDEX_TCPRXSEGS].name		= "tcpInSegs",
3738 	[IRDMA_HW_STAT_INDEX_TCPTXSEG].name		= "tcpOutSegs",
3739 	[IRDMA_HW_STAT_INDEX_RDMARXRDS].name		= "iwInRdmaReads",
3740 	[IRDMA_HW_STAT_INDEX_RDMARXSNDS].name		= "iwInRdmaSends",
3741 	[IRDMA_HW_STAT_INDEX_RDMARXWRS].name		= "iwInRdmaWrites",
3742 	[IRDMA_HW_STAT_INDEX_RDMATXRDS].name		= "iwOutRdmaReads",
3743 	[IRDMA_HW_STAT_INDEX_RDMATXSNDS].name		= "iwOutRdmaSends",
3744 	[IRDMA_HW_STAT_INDEX_RDMATXWRS].name		= "iwOutRdmaWrites",
3745 	[IRDMA_HW_STAT_INDEX_RDMAVBND].name		= "iwRdmaBnd",
3746 	[IRDMA_HW_STAT_INDEX_RDMAVINV].name		= "iwRdmaInv",
3747 
3748 	/* gen2 - 32-bit */
3749 	[IRDMA_HW_STAT_INDEX_RXRPCNPHANDLED].name	= "cnpHandled",
3750 	[IRDMA_HW_STAT_INDEX_RXRPCNPIGNORED].name	= "cnpIgnored",
3751 	[IRDMA_HW_STAT_INDEX_TXNPCNPSENT].name		= "cnpSent",
3752 	/* gen2 - 64-bit */
3753 	[IRDMA_HW_STAT_INDEX_IP4RXMCOCTS].name		= "ip4InMcastOctets",
3754 	[IRDMA_HW_STAT_INDEX_IP4TXMCOCTS].name		= "ip4OutMcastOctets",
3755 	[IRDMA_HW_STAT_INDEX_IP6RXMCOCTS].name		= "ip6InMcastOctets",
3756 	[IRDMA_HW_STAT_INDEX_IP6TXMCOCTS].name		= "ip6OutMcastOctets",
3757 	[IRDMA_HW_STAT_INDEX_UDPRXPKTS].name		= "RxUDP",
3758 	[IRDMA_HW_STAT_INDEX_UDPTXPKTS].name		= "TxUDP",
3759 	[IRDMA_HW_STAT_INDEX_RXNPECNMARKEDPKTS].name	= "RxECNMrkd",
3760 
3761 };
3762 
3763 static void irdma_get_dev_fw_str(struct ib_device *dev, char *str)
3764 {
3765 	struct irdma_device *iwdev = to_iwdev(dev);
3766 
3767 	snprintf(str, IB_FW_VERSION_NAME_MAX, "%u.%u",
3768 		 irdma_fw_major_ver(&iwdev->rf->sc_dev),
3769 		 irdma_fw_minor_ver(&iwdev->rf->sc_dev));
3770 }
3771 
3772 /**
3773  * irdma_alloc_hw_port_stats - Allocate a hw stats structure
3774  * @ibdev: device pointer from stack
3775  * @port_num: port number
3776  */
3777 static struct rdma_hw_stats *irdma_alloc_hw_port_stats(struct ib_device *ibdev,
3778 						       u32 port_num)
3779 {
3780 	struct irdma_device *iwdev = to_iwdev(ibdev);
3781 	struct irdma_sc_dev *dev = &iwdev->rf->sc_dev;
3782 
3783 	int num_counters = dev->hw_attrs.max_stat_idx;
3784 	unsigned long lifespan = RDMA_HW_STATS_DEFAULT_LIFESPAN;
3785 
3786 	return rdma_alloc_hw_stats_struct(irdma_hw_stat_names, num_counters,
3787 					  lifespan);
3788 }
3789 
3790 /**
3791  * irdma_get_hw_stats - Populates the rdma_hw_stats structure
3792  * @ibdev: device pointer from stack
3793  * @stats: stats pointer from stack
3794  * @port_num: port number
3795  * @index: which hw counter the stack is requesting we update
3796  */
3797 static int irdma_get_hw_stats(struct ib_device *ibdev,
3798 			      struct rdma_hw_stats *stats, u32 port_num,
3799 			      int index)
3800 {
3801 	struct irdma_device *iwdev = to_iwdev(ibdev);
3802 	struct irdma_dev_hw_stats *hw_stats = &iwdev->vsi.pestat->hw_stats;
3803 
3804 	if (iwdev->rf->rdma_ver >= IRDMA_GEN_2)
3805 		irdma_cqp_gather_stats_cmd(&iwdev->rf->sc_dev, iwdev->vsi.pestat, true);
3806 	else
3807 		irdma_cqp_gather_stats_gen1(&iwdev->rf->sc_dev, iwdev->vsi.pestat);
3808 
3809 	memcpy(&stats->value[0], hw_stats, sizeof(u64) * stats->num_counters);
3810 
3811 	return stats->num_counters;
3812 }
3813 
3814 /**
3815  * irdma_query_gid - Query port GID
3816  * @ibdev: device pointer from stack
3817  * @port: port number
3818  * @index: Entry index
3819  * @gid: Global ID
3820  */
3821 static int irdma_query_gid(struct ib_device *ibdev, u32 port, int index,
3822 			   union ib_gid *gid)
3823 {
3824 	struct irdma_device *iwdev = to_iwdev(ibdev);
3825 
3826 	memset(gid->raw, 0, sizeof(gid->raw));
3827 	ether_addr_copy(gid->raw, iwdev->netdev->dev_addr);
3828 
3829 	return 0;
3830 }
3831 
3832 /**
3833  * mcast_list_add -  Add a new mcast item to list
3834  * @rf: RDMA PCI function
3835  * @new_elem: pointer to element to add
3836  */
3837 static void mcast_list_add(struct irdma_pci_f *rf,
3838 			   struct mc_table_list *new_elem)
3839 {
3840 	list_add(&new_elem->list, &rf->mc_qht_list.list);
3841 }
3842 
3843 /**
3844  * mcast_list_del - Remove an mcast item from list
3845  * @mc_qht_elem: pointer to mcast table list element
3846  */
3847 static void mcast_list_del(struct mc_table_list *mc_qht_elem)
3848 {
3849 	if (mc_qht_elem)
3850 		list_del(&mc_qht_elem->list);
3851 }
3852 
3853 /**
3854  * mcast_list_lookup_ip - Search mcast list for address
3855  * @rf: RDMA PCI function
3856  * @ip_mcast: pointer to mcast IP address
3857  */
3858 static struct mc_table_list *mcast_list_lookup_ip(struct irdma_pci_f *rf,
3859 						  u32 *ip_mcast)
3860 {
3861 	struct mc_table_list *mc_qht_el;
3862 	struct list_head *pos, *q;
3863 
3864 	list_for_each_safe (pos, q, &rf->mc_qht_list.list) {
3865 		mc_qht_el = list_entry(pos, struct mc_table_list, list);
3866 		if (!memcmp(mc_qht_el->mc_info.dest_ip, ip_mcast,
3867 			    sizeof(mc_qht_el->mc_info.dest_ip)))
3868 			return mc_qht_el;
3869 	}
3870 
3871 	return NULL;
3872 }
3873 
3874 /**
3875  * irdma_mcast_cqp_op - perform a mcast cqp operation
3876  * @iwdev: irdma device
3877  * @mc_grp_ctx: mcast group info
3878  * @op: operation
3879  *
3880  * returns error status
3881  */
3882 static int irdma_mcast_cqp_op(struct irdma_device *iwdev,
3883 			      struct irdma_mcast_grp_info *mc_grp_ctx, u8 op)
3884 {
3885 	struct cqp_cmds_info *cqp_info;
3886 	struct irdma_cqp_request *cqp_request;
3887 	int status;
3888 
3889 	cqp_request = irdma_alloc_and_get_cqp_request(&iwdev->rf->cqp, true);
3890 	if (!cqp_request)
3891 		return -ENOMEM;
3892 
3893 	cqp_request->info.in.u.mc_create.info = *mc_grp_ctx;
3894 	cqp_info = &cqp_request->info;
3895 	cqp_info->cqp_cmd = op;
3896 	cqp_info->post_sq = 1;
3897 	cqp_info->in.u.mc_create.scratch = (uintptr_t)cqp_request;
3898 	cqp_info->in.u.mc_create.cqp = &iwdev->rf->cqp.sc_cqp;
3899 	status = irdma_handle_cqp_op(iwdev->rf, cqp_request);
3900 	irdma_put_cqp_request(&iwdev->rf->cqp, cqp_request);
3901 
3902 	return status;
3903 }
3904 
3905 /**
3906  * irdma_mcast_mac - Get the multicast MAC for an IP address
3907  * @ip_addr: IPv4 or IPv6 address
3908  * @mac: pointer to result MAC address
3909  * @ipv4: flag indicating IPv4 or IPv6
3910  *
3911  */
3912 void irdma_mcast_mac(u32 *ip_addr, u8 *mac, bool ipv4)
3913 {
3914 	u8 *ip = (u8 *)ip_addr;
3915 
3916 	if (ipv4) {
3917 		unsigned char mac4[ETH_ALEN] = {0x01, 0x00, 0x5E, 0x00,
3918 						0x00, 0x00};
3919 
3920 		mac4[3] = ip[2] & 0x7F;
3921 		mac4[4] = ip[1];
3922 		mac4[5] = ip[0];
3923 		ether_addr_copy(mac, mac4);
3924 	} else {
3925 		unsigned char mac6[ETH_ALEN] = {0x33, 0x33, 0x00, 0x00,
3926 						0x00, 0x00};
3927 
3928 		mac6[2] = ip[3];
3929 		mac6[3] = ip[2];
3930 		mac6[4] = ip[1];
3931 		mac6[5] = ip[0];
3932 		ether_addr_copy(mac, mac6);
3933 	}
3934 }
3935 
3936 /**
3937  * irdma_attach_mcast - attach a qp to a multicast group
3938  * @ibqp: ptr to qp
3939  * @ibgid: pointer to global ID
3940  * @lid: local ID
3941  *
3942  * returns error status
3943  */
3944 static int irdma_attach_mcast(struct ib_qp *ibqp, union ib_gid *ibgid, u16 lid)
3945 {
3946 	struct irdma_qp *iwqp = to_iwqp(ibqp);
3947 	struct irdma_device *iwdev = iwqp->iwdev;
3948 	struct irdma_pci_f *rf = iwdev->rf;
3949 	struct mc_table_list *mc_qht_elem;
3950 	struct irdma_mcast_grp_ctx_entry_info mcg_info = {};
3951 	unsigned long flags;
3952 	u32 ip_addr[4] = {};
3953 	u32 mgn;
3954 	u32 no_mgs;
3955 	int ret = 0;
3956 	bool ipv4;
3957 	u16 vlan_id;
3958 	union irdma_sockaddr sgid_addr;
3959 	unsigned char dmac[ETH_ALEN];
3960 
3961 	rdma_gid2ip((struct sockaddr *)&sgid_addr, ibgid);
3962 
3963 	if (!ipv6_addr_v4mapped((struct in6_addr *)ibgid)) {
3964 		irdma_copy_ip_ntohl(ip_addr,
3965 				    sgid_addr.saddr_in6.sin6_addr.in6_u.u6_addr32);
3966 		irdma_netdev_vlan_ipv6(ip_addr, &vlan_id, NULL);
3967 		ipv4 = false;
3968 		ibdev_dbg(&iwdev->ibdev,
3969 			  "VERBS: qp_id=%d, IP6address=%pI6\n", ibqp->qp_num,
3970 			  ip_addr);
3971 		irdma_mcast_mac(ip_addr, dmac, false);
3972 	} else {
3973 		ip_addr[0] = ntohl(sgid_addr.saddr_in.sin_addr.s_addr);
3974 		ipv4 = true;
3975 		vlan_id = irdma_get_vlan_ipv4(ip_addr);
3976 		irdma_mcast_mac(ip_addr, dmac, true);
3977 		ibdev_dbg(&iwdev->ibdev,
3978 			  "VERBS: qp_id=%d, IP4address=%pI4, MAC=%pM\n",
3979 			  ibqp->qp_num, ip_addr, dmac);
3980 	}
3981 
3982 	spin_lock_irqsave(&rf->qh_list_lock, flags);
3983 	mc_qht_elem = mcast_list_lookup_ip(rf, ip_addr);
3984 	if (!mc_qht_elem) {
3985 		struct irdma_dma_mem *dma_mem_mc;
3986 
3987 		spin_unlock_irqrestore(&rf->qh_list_lock, flags);
3988 		mc_qht_elem = kzalloc(sizeof(*mc_qht_elem), GFP_KERNEL);
3989 		if (!mc_qht_elem)
3990 			return -ENOMEM;
3991 
3992 		mc_qht_elem->mc_info.ipv4_valid = ipv4;
3993 		memcpy(mc_qht_elem->mc_info.dest_ip, ip_addr,
3994 		       sizeof(mc_qht_elem->mc_info.dest_ip));
3995 		ret = irdma_alloc_rsrc(rf, rf->allocated_mcgs, rf->max_mcg,
3996 				       &mgn, &rf->next_mcg);
3997 		if (ret) {
3998 			kfree(mc_qht_elem);
3999 			return -ENOMEM;
4000 		}
4001 
4002 		mc_qht_elem->mc_info.mgn = mgn;
4003 		dma_mem_mc = &mc_qht_elem->mc_grp_ctx.dma_mem_mc;
4004 		dma_mem_mc->size = ALIGN(sizeof(u64) * IRDMA_MAX_MGS_PER_CTX,
4005 					 IRDMA_HW_PAGE_SIZE);
4006 		dma_mem_mc->va = dma_alloc_coherent(rf->hw.device,
4007 						    dma_mem_mc->size,
4008 						    &dma_mem_mc->pa,
4009 						    GFP_KERNEL);
4010 		if (!dma_mem_mc->va) {
4011 			irdma_free_rsrc(rf, rf->allocated_mcgs, mgn);
4012 			kfree(mc_qht_elem);
4013 			return -ENOMEM;
4014 		}
4015 
4016 		mc_qht_elem->mc_grp_ctx.mg_id = (u16)mgn;
4017 		memcpy(mc_qht_elem->mc_grp_ctx.dest_ip_addr, ip_addr,
4018 		       sizeof(mc_qht_elem->mc_grp_ctx.dest_ip_addr));
4019 		mc_qht_elem->mc_grp_ctx.ipv4_valid = ipv4;
4020 		mc_qht_elem->mc_grp_ctx.vlan_id = vlan_id;
4021 		if (vlan_id < VLAN_N_VID)
4022 			mc_qht_elem->mc_grp_ctx.vlan_valid = true;
4023 		mc_qht_elem->mc_grp_ctx.hmc_fcn_id = iwdev->rf->sc_dev.hmc_fn_id;
4024 		mc_qht_elem->mc_grp_ctx.qs_handle =
4025 			iwqp->sc_qp.vsi->qos[iwqp->sc_qp.user_pri].qs_handle;
4026 		ether_addr_copy(mc_qht_elem->mc_grp_ctx.dest_mac_addr, dmac);
4027 
4028 		spin_lock_irqsave(&rf->qh_list_lock, flags);
4029 		mcast_list_add(rf, mc_qht_elem);
4030 	} else {
4031 		if (mc_qht_elem->mc_grp_ctx.no_of_mgs ==
4032 		    IRDMA_MAX_MGS_PER_CTX) {
4033 			spin_unlock_irqrestore(&rf->qh_list_lock, flags);
4034 			return -ENOMEM;
4035 		}
4036 	}
4037 
4038 	mcg_info.qp_id = iwqp->ibqp.qp_num;
4039 	no_mgs = mc_qht_elem->mc_grp_ctx.no_of_mgs;
4040 	irdma_sc_add_mcast_grp(&mc_qht_elem->mc_grp_ctx, &mcg_info);
4041 	spin_unlock_irqrestore(&rf->qh_list_lock, flags);
4042 
4043 	/* Only if there is a change do we need to modify or create */
4044 	if (!no_mgs) {
4045 		ret = irdma_mcast_cqp_op(iwdev, &mc_qht_elem->mc_grp_ctx,
4046 					 IRDMA_OP_MC_CREATE);
4047 	} else if (no_mgs != mc_qht_elem->mc_grp_ctx.no_of_mgs) {
4048 		ret = irdma_mcast_cqp_op(iwdev, &mc_qht_elem->mc_grp_ctx,
4049 					 IRDMA_OP_MC_MODIFY);
4050 	} else {
4051 		return 0;
4052 	}
4053 
4054 	if (ret)
4055 		goto error;
4056 
4057 	return 0;
4058 
4059 error:
4060 	irdma_sc_del_mcast_grp(&mc_qht_elem->mc_grp_ctx, &mcg_info);
4061 	if (!mc_qht_elem->mc_grp_ctx.no_of_mgs) {
4062 		mcast_list_del(mc_qht_elem);
4063 		dma_free_coherent(rf->hw.device,
4064 				  mc_qht_elem->mc_grp_ctx.dma_mem_mc.size,
4065 				  mc_qht_elem->mc_grp_ctx.dma_mem_mc.va,
4066 				  mc_qht_elem->mc_grp_ctx.dma_mem_mc.pa);
4067 		mc_qht_elem->mc_grp_ctx.dma_mem_mc.va = NULL;
4068 		irdma_free_rsrc(rf, rf->allocated_mcgs,
4069 				mc_qht_elem->mc_grp_ctx.mg_id);
4070 		kfree(mc_qht_elem);
4071 	}
4072 
4073 	return ret;
4074 }
4075 
4076 /**
4077  * irdma_detach_mcast - detach a qp from a multicast group
4078  * @ibqp: ptr to qp
4079  * @ibgid: pointer to global ID
4080  * @lid: local ID
4081  *
4082  * returns error status
4083  */
4084 static int irdma_detach_mcast(struct ib_qp *ibqp, union ib_gid *ibgid, u16 lid)
4085 {
4086 	struct irdma_qp *iwqp = to_iwqp(ibqp);
4087 	struct irdma_device *iwdev = iwqp->iwdev;
4088 	struct irdma_pci_f *rf = iwdev->rf;
4089 	u32 ip_addr[4] = {};
4090 	struct mc_table_list *mc_qht_elem;
4091 	struct irdma_mcast_grp_ctx_entry_info mcg_info = {};
4092 	int ret;
4093 	unsigned long flags;
4094 	union irdma_sockaddr sgid_addr;
4095 
4096 	rdma_gid2ip((struct sockaddr *)&sgid_addr, ibgid);
4097 	if (!ipv6_addr_v4mapped((struct in6_addr *)ibgid))
4098 		irdma_copy_ip_ntohl(ip_addr,
4099 				    sgid_addr.saddr_in6.sin6_addr.in6_u.u6_addr32);
4100 	else
4101 		ip_addr[0] = ntohl(sgid_addr.saddr_in.sin_addr.s_addr);
4102 
4103 	spin_lock_irqsave(&rf->qh_list_lock, flags);
4104 	mc_qht_elem = mcast_list_lookup_ip(rf, ip_addr);
4105 	if (!mc_qht_elem) {
4106 		spin_unlock_irqrestore(&rf->qh_list_lock, flags);
4107 		ibdev_dbg(&iwdev->ibdev,
4108 			  "VERBS: address not found MCG\n");
4109 		return 0;
4110 	}
4111 
4112 	mcg_info.qp_id = iwqp->ibqp.qp_num;
4113 	irdma_sc_del_mcast_grp(&mc_qht_elem->mc_grp_ctx, &mcg_info);
4114 	if (!mc_qht_elem->mc_grp_ctx.no_of_mgs) {
4115 		mcast_list_del(mc_qht_elem);
4116 		spin_unlock_irqrestore(&rf->qh_list_lock, flags);
4117 		ret = irdma_mcast_cqp_op(iwdev, &mc_qht_elem->mc_grp_ctx,
4118 					 IRDMA_OP_MC_DESTROY);
4119 		if (ret) {
4120 			ibdev_dbg(&iwdev->ibdev,
4121 				  "VERBS: failed MC_DESTROY MCG\n");
4122 			spin_lock_irqsave(&rf->qh_list_lock, flags);
4123 			mcast_list_add(rf, mc_qht_elem);
4124 			spin_unlock_irqrestore(&rf->qh_list_lock, flags);
4125 			return -EAGAIN;
4126 		}
4127 
4128 		dma_free_coherent(rf->hw.device,
4129 				  mc_qht_elem->mc_grp_ctx.dma_mem_mc.size,
4130 				  mc_qht_elem->mc_grp_ctx.dma_mem_mc.va,
4131 				  mc_qht_elem->mc_grp_ctx.dma_mem_mc.pa);
4132 		mc_qht_elem->mc_grp_ctx.dma_mem_mc.va = NULL;
4133 		irdma_free_rsrc(rf, rf->allocated_mcgs,
4134 				mc_qht_elem->mc_grp_ctx.mg_id);
4135 		kfree(mc_qht_elem);
4136 	} else {
4137 		spin_unlock_irqrestore(&rf->qh_list_lock, flags);
4138 		ret = irdma_mcast_cqp_op(iwdev, &mc_qht_elem->mc_grp_ctx,
4139 					 IRDMA_OP_MC_MODIFY);
4140 		if (ret) {
4141 			ibdev_dbg(&iwdev->ibdev,
4142 				  "VERBS: failed Modify MCG\n");
4143 			return ret;
4144 		}
4145 	}
4146 
4147 	return 0;
4148 }
4149 
4150 static int irdma_create_hw_ah(struct irdma_device *iwdev, struct irdma_ah *ah, bool sleep)
4151 {
4152 	struct irdma_pci_f *rf = iwdev->rf;
4153 	int err;
4154 
4155 	err = irdma_alloc_rsrc(rf, rf->allocated_ahs, rf->max_ah, &ah->sc_ah.ah_info.ah_idx,
4156 			       &rf->next_ah);
4157 	if (err)
4158 		return err;
4159 
4160 	err = irdma_ah_cqp_op(rf, &ah->sc_ah, IRDMA_OP_AH_CREATE, sleep,
4161 			      irdma_gsi_ud_qp_ah_cb, &ah->sc_ah);
4162 
4163 	if (err) {
4164 		ibdev_dbg(&iwdev->ibdev, "VERBS: CQP-OP Create AH fail");
4165 		goto err_ah_create;
4166 	}
4167 
4168 	if (!sleep) {
4169 		int cnt = CQP_COMPL_WAIT_TIME_MS * CQP_TIMEOUT_THRESHOLD;
4170 
4171 		do {
4172 			irdma_cqp_ce_handler(rf, &rf->ccq.sc_cq);
4173 			mdelay(1);
4174 		} while (!ah->sc_ah.ah_info.ah_valid && --cnt);
4175 
4176 		if (!cnt) {
4177 			ibdev_dbg(&iwdev->ibdev, "VERBS: CQP create AH timed out");
4178 			err = -ETIMEDOUT;
4179 			goto err_ah_create;
4180 		}
4181 	}
4182 	return 0;
4183 
4184 err_ah_create:
4185 	irdma_free_rsrc(iwdev->rf, iwdev->rf->allocated_ahs, ah->sc_ah.ah_info.ah_idx);
4186 
4187 	return err;
4188 }
4189 
4190 static int irdma_setup_ah(struct ib_ah *ibah, struct rdma_ah_init_attr *attr)
4191 {
4192 	struct irdma_pd *pd = to_iwpd(ibah->pd);
4193 	struct irdma_ah *ah = container_of(ibah, struct irdma_ah, ibah);
4194 	struct rdma_ah_attr *ah_attr = attr->ah_attr;
4195 	const struct ib_gid_attr *sgid_attr;
4196 	struct irdma_device *iwdev = to_iwdev(ibah->pd->device);
4197 	struct irdma_pci_f *rf = iwdev->rf;
4198 	struct irdma_sc_ah *sc_ah;
4199 	struct irdma_ah_info *ah_info;
4200 	union irdma_sockaddr sgid_addr, dgid_addr;
4201 	int err;
4202 	u8 dmac[ETH_ALEN];
4203 
4204 	ah->pd = pd;
4205 	sc_ah = &ah->sc_ah;
4206 	sc_ah->ah_info.vsi = &iwdev->vsi;
4207 	irdma_sc_init_ah(&rf->sc_dev, sc_ah);
4208 	ah->sgid_index = ah_attr->grh.sgid_index;
4209 	sgid_attr = ah_attr->grh.sgid_attr;
4210 	memcpy(&ah->dgid, &ah_attr->grh.dgid, sizeof(ah->dgid));
4211 	rdma_gid2ip((struct sockaddr *)&sgid_addr, &sgid_attr->gid);
4212 	rdma_gid2ip((struct sockaddr *)&dgid_addr, &ah_attr->grh.dgid);
4213 	ah->av.attrs = *ah_attr;
4214 	ah->av.net_type = rdma_gid_attr_network_type(sgid_attr);
4215 	ah_info = &sc_ah->ah_info;
4216 	ah_info->pd_idx = pd->sc_pd.pd_id;
4217 	if (ah_attr->ah_flags & IB_AH_GRH) {
4218 		ah_info->flow_label = ah_attr->grh.flow_label;
4219 		ah_info->hop_ttl = ah_attr->grh.hop_limit;
4220 		ah_info->tc_tos = ah_attr->grh.traffic_class;
4221 	}
4222 
4223 	ether_addr_copy(dmac, ah_attr->roce.dmac);
4224 	if (ah->av.net_type == RDMA_NETWORK_IPV4) {
4225 		ah_info->ipv4_valid = true;
4226 		ah_info->dest_ip_addr[0] =
4227 			ntohl(dgid_addr.saddr_in.sin_addr.s_addr);
4228 		ah_info->src_ip_addr[0] =
4229 			ntohl(sgid_addr.saddr_in.sin_addr.s_addr);
4230 		ah_info->do_lpbk = irdma_ipv4_is_lpb(ah_info->src_ip_addr[0],
4231 						     ah_info->dest_ip_addr[0]);
4232 		if (ipv4_is_multicast(dgid_addr.saddr_in.sin_addr.s_addr)) {
4233 			ah_info->do_lpbk = true;
4234 			irdma_mcast_mac(ah_info->dest_ip_addr, dmac, true);
4235 		}
4236 	} else {
4237 		irdma_copy_ip_ntohl(ah_info->dest_ip_addr,
4238 				    dgid_addr.saddr_in6.sin6_addr.in6_u.u6_addr32);
4239 		irdma_copy_ip_ntohl(ah_info->src_ip_addr,
4240 				    sgid_addr.saddr_in6.sin6_addr.in6_u.u6_addr32);
4241 		ah_info->do_lpbk = irdma_ipv6_is_lpb(ah_info->src_ip_addr,
4242 						     ah_info->dest_ip_addr);
4243 		if (rdma_is_multicast_addr(&dgid_addr.saddr_in6.sin6_addr)) {
4244 			ah_info->do_lpbk = true;
4245 			irdma_mcast_mac(ah_info->dest_ip_addr, dmac, false);
4246 		}
4247 	}
4248 
4249 	err = rdma_read_gid_l2_fields(sgid_attr, &ah_info->vlan_tag,
4250 				      ah_info->mac_addr);
4251 	if (err)
4252 		return err;
4253 
4254 	ah_info->dst_arpindex = irdma_add_arp(iwdev->rf, ah_info->dest_ip_addr,
4255 					      ah_info->ipv4_valid, dmac);
4256 
4257 	if (ah_info->dst_arpindex == -1)
4258 		return -EINVAL;
4259 
4260 	if (ah_info->vlan_tag >= VLAN_N_VID && iwdev->dcb_vlan_mode)
4261 		ah_info->vlan_tag = 0;
4262 
4263 	if (ah_info->vlan_tag < VLAN_N_VID) {
4264 		ah_info->insert_vlan_tag = true;
4265 		ah_info->vlan_tag |=
4266 			rt_tos2priority(ah_info->tc_tos) << VLAN_PRIO_SHIFT;
4267 	}
4268 
4269 	return 0;
4270 }
4271 
4272 /**
4273  * irdma_ah_exists - Check for existing identical AH
4274  * @iwdev: irdma device
4275  * @new_ah: AH to check for
4276  *
4277  * returns true if AH is found, false if not found.
4278  */
4279 static bool irdma_ah_exists(struct irdma_device *iwdev,
4280 			    struct irdma_ah *new_ah)
4281 {
4282 	struct irdma_ah *ah;
4283 	u32 key = new_ah->sc_ah.ah_info.dest_ip_addr[0] ^
4284 		  new_ah->sc_ah.ah_info.dest_ip_addr[1] ^
4285 		  new_ah->sc_ah.ah_info.dest_ip_addr[2] ^
4286 		  new_ah->sc_ah.ah_info.dest_ip_addr[3];
4287 
4288 	hash_for_each_possible(iwdev->ah_hash_tbl, ah, list, key) {
4289 		/* Set ah_valid and ah_id the same so memcmp can work */
4290 		new_ah->sc_ah.ah_info.ah_idx = ah->sc_ah.ah_info.ah_idx;
4291 		new_ah->sc_ah.ah_info.ah_valid = ah->sc_ah.ah_info.ah_valid;
4292 		if (!memcmp(&ah->sc_ah.ah_info, &new_ah->sc_ah.ah_info,
4293 			    sizeof(ah->sc_ah.ah_info))) {
4294 			refcount_inc(&ah->refcnt);
4295 			new_ah->parent_ah = ah;
4296 			return true;
4297 		}
4298 	}
4299 
4300 	return false;
4301 }
4302 
4303 /**
4304  * irdma_destroy_ah - Destroy address handle
4305  * @ibah: pointer to address handle
4306  * @ah_flags: flags for sleepable
4307  */
4308 static int irdma_destroy_ah(struct ib_ah *ibah, u32 ah_flags)
4309 {
4310 	struct irdma_device *iwdev = to_iwdev(ibah->device);
4311 	struct irdma_ah *ah = to_iwah(ibah);
4312 
4313 	if ((ah_flags & RDMA_DESTROY_AH_SLEEPABLE) && ah->parent_ah) {
4314 		mutex_lock(&iwdev->ah_tbl_lock);
4315 		if (!refcount_dec_and_test(&ah->parent_ah->refcnt)) {
4316 			mutex_unlock(&iwdev->ah_tbl_lock);
4317 			return 0;
4318 		}
4319 		hash_del(&ah->parent_ah->list);
4320 		kfree(ah->parent_ah);
4321 		mutex_unlock(&iwdev->ah_tbl_lock);
4322 	}
4323 
4324 	irdma_ah_cqp_op(iwdev->rf, &ah->sc_ah, IRDMA_OP_AH_DESTROY,
4325 			false, NULL, ah);
4326 
4327 	irdma_free_rsrc(iwdev->rf, iwdev->rf->allocated_ahs,
4328 			ah->sc_ah.ah_info.ah_idx);
4329 
4330 	return 0;
4331 }
4332 
4333 /**
4334  * irdma_create_user_ah - create user address handle
4335  * @ibah: address handle
4336  * @attr: address handle attributes
4337  * @udata: User data
4338  *
4339  * returns 0 on success, error otherwise
4340  */
4341 static int irdma_create_user_ah(struct ib_ah *ibah,
4342 				struct rdma_ah_init_attr *attr,
4343 				struct ib_udata *udata)
4344 {
4345 #define IRDMA_CREATE_AH_MIN_RESP_LEN offsetofend(struct irdma_create_ah_resp, rsvd)
4346 	struct irdma_ah *ah = container_of(ibah, struct irdma_ah, ibah);
4347 	struct irdma_device *iwdev = to_iwdev(ibah->pd->device);
4348 	struct irdma_create_ah_resp uresp;
4349 	struct irdma_ah *parent_ah;
4350 	int err;
4351 
4352 	if (udata && udata->outlen < IRDMA_CREATE_AH_MIN_RESP_LEN)
4353 		return -EINVAL;
4354 
4355 	err = irdma_setup_ah(ibah, attr);
4356 	if (err)
4357 		return err;
4358 	mutex_lock(&iwdev->ah_tbl_lock);
4359 	if (!irdma_ah_exists(iwdev, ah)) {
4360 		err = irdma_create_hw_ah(iwdev, ah, true);
4361 		if (err) {
4362 			mutex_unlock(&iwdev->ah_tbl_lock);
4363 			return err;
4364 		}
4365 		/* Add new AH to list */
4366 		parent_ah = kmemdup(ah, sizeof(*ah), GFP_KERNEL);
4367 		if (parent_ah) {
4368 			u32 key = parent_ah->sc_ah.ah_info.dest_ip_addr[0] ^
4369 				  parent_ah->sc_ah.ah_info.dest_ip_addr[1] ^
4370 				  parent_ah->sc_ah.ah_info.dest_ip_addr[2] ^
4371 				  parent_ah->sc_ah.ah_info.dest_ip_addr[3];
4372 
4373 			ah->parent_ah = parent_ah;
4374 			hash_add(iwdev->ah_hash_tbl, &parent_ah->list, key);
4375 			refcount_set(&parent_ah->refcnt, 1);
4376 		}
4377 	}
4378 	mutex_unlock(&iwdev->ah_tbl_lock);
4379 
4380 	uresp.ah_id = ah->sc_ah.ah_info.ah_idx;
4381 	err = ib_copy_to_udata(udata, &uresp, min(sizeof(uresp), udata->outlen));
4382 	if (err)
4383 		irdma_destroy_ah(ibah, attr->flags);
4384 
4385 	return err;
4386 }
4387 
4388 /**
4389  * irdma_create_ah - create address handle
4390  * @ibah: address handle
4391  * @attr: address handle attributes
4392  * @udata: NULL
4393  *
4394  * returns 0 on success, error otherwise
4395  */
4396 static int irdma_create_ah(struct ib_ah *ibah, struct rdma_ah_init_attr *attr,
4397 			   struct ib_udata *udata)
4398 {
4399 	struct irdma_ah *ah = container_of(ibah, struct irdma_ah, ibah);
4400 	struct irdma_device *iwdev = to_iwdev(ibah->pd->device);
4401 	int err;
4402 
4403 	err = irdma_setup_ah(ibah, attr);
4404 	if (err)
4405 		return err;
4406 	err = irdma_create_hw_ah(iwdev, ah, attr->flags & RDMA_CREATE_AH_SLEEPABLE);
4407 
4408 	return err;
4409 }
4410 
4411 /**
4412  * irdma_query_ah - Query address handle
4413  * @ibah: pointer to address handle
4414  * @ah_attr: address handle attributes
4415  */
4416 static int irdma_query_ah(struct ib_ah *ibah, struct rdma_ah_attr *ah_attr)
4417 {
4418 	struct irdma_ah *ah = to_iwah(ibah);
4419 
4420 	memset(ah_attr, 0, sizeof(*ah_attr));
4421 	if (ah->av.attrs.ah_flags & IB_AH_GRH) {
4422 		ah_attr->ah_flags = IB_AH_GRH;
4423 		ah_attr->grh.flow_label = ah->sc_ah.ah_info.flow_label;
4424 		ah_attr->grh.traffic_class = ah->sc_ah.ah_info.tc_tos;
4425 		ah_attr->grh.hop_limit = ah->sc_ah.ah_info.hop_ttl;
4426 		ah_attr->grh.sgid_index = ah->sgid_index;
4427 		ah_attr->grh.sgid_index = ah->sgid_index;
4428 		memcpy(&ah_attr->grh.dgid, &ah->dgid,
4429 		       sizeof(ah_attr->grh.dgid));
4430 	}
4431 
4432 	return 0;
4433 }
4434 
4435 static enum rdma_link_layer irdma_get_link_layer(struct ib_device *ibdev,
4436 						 u32 port_num)
4437 {
4438 	return IB_LINK_LAYER_ETHERNET;
4439 }
4440 
4441 static const struct ib_device_ops irdma_roce_dev_ops = {
4442 	.attach_mcast = irdma_attach_mcast,
4443 	.create_ah = irdma_create_ah,
4444 	.create_user_ah = irdma_create_user_ah,
4445 	.destroy_ah = irdma_destroy_ah,
4446 	.detach_mcast = irdma_detach_mcast,
4447 	.get_link_layer = irdma_get_link_layer,
4448 	.get_port_immutable = irdma_roce_port_immutable,
4449 	.modify_qp = irdma_modify_qp_roce,
4450 	.query_ah = irdma_query_ah,
4451 	.query_pkey = irdma_query_pkey,
4452 };
4453 
4454 static const struct ib_device_ops irdma_iw_dev_ops = {
4455 	.get_port_immutable = irdma_iw_port_immutable,
4456 	.iw_accept = irdma_accept,
4457 	.iw_add_ref = irdma_qp_add_ref,
4458 	.iw_connect = irdma_connect,
4459 	.iw_create_listen = irdma_create_listen,
4460 	.iw_destroy_listen = irdma_destroy_listen,
4461 	.iw_get_qp = irdma_get_qp,
4462 	.iw_reject = irdma_reject,
4463 	.iw_rem_ref = irdma_qp_rem_ref,
4464 	.modify_qp = irdma_modify_qp,
4465 	.query_gid = irdma_query_gid,
4466 };
4467 
4468 static const struct ib_device_ops irdma_dev_ops = {
4469 	.owner = THIS_MODULE,
4470 	.driver_id = RDMA_DRIVER_IRDMA,
4471 	.uverbs_abi_ver = IRDMA_ABI_VER,
4472 
4473 	.alloc_hw_port_stats = irdma_alloc_hw_port_stats,
4474 	.alloc_mr = irdma_alloc_mr,
4475 	.alloc_mw = irdma_alloc_mw,
4476 	.alloc_pd = irdma_alloc_pd,
4477 	.alloc_ucontext = irdma_alloc_ucontext,
4478 	.create_cq = irdma_create_cq,
4479 	.create_qp = irdma_create_qp,
4480 	.dealloc_driver = irdma_ib_dealloc_device,
4481 	.dealloc_mw = irdma_dealloc_mw,
4482 	.dealloc_pd = irdma_dealloc_pd,
4483 	.dealloc_ucontext = irdma_dealloc_ucontext,
4484 	.dereg_mr = irdma_dereg_mr,
4485 	.destroy_cq = irdma_destroy_cq,
4486 	.destroy_qp = irdma_destroy_qp,
4487 	.disassociate_ucontext = irdma_disassociate_ucontext,
4488 	.get_dev_fw_str = irdma_get_dev_fw_str,
4489 	.get_dma_mr = irdma_get_dma_mr,
4490 	.get_hw_stats = irdma_get_hw_stats,
4491 	.map_mr_sg = irdma_map_mr_sg,
4492 	.mmap = irdma_mmap,
4493 	.mmap_free = irdma_mmap_free,
4494 	.poll_cq = irdma_poll_cq,
4495 	.post_recv = irdma_post_recv,
4496 	.post_send = irdma_post_send,
4497 	.query_device = irdma_query_device,
4498 	.query_port = irdma_query_port,
4499 	.query_qp = irdma_query_qp,
4500 	.reg_user_mr = irdma_reg_user_mr,
4501 	.reg_user_mr_dmabuf = irdma_reg_user_mr_dmabuf,
4502 	.req_notify_cq = irdma_req_notify_cq,
4503 	.resize_cq = irdma_resize_cq,
4504 	INIT_RDMA_OBJ_SIZE(ib_pd, irdma_pd, ibpd),
4505 	INIT_RDMA_OBJ_SIZE(ib_ucontext, irdma_ucontext, ibucontext),
4506 	INIT_RDMA_OBJ_SIZE(ib_ah, irdma_ah, ibah),
4507 	INIT_RDMA_OBJ_SIZE(ib_cq, irdma_cq, ibcq),
4508 	INIT_RDMA_OBJ_SIZE(ib_mw, irdma_mr, ibmw),
4509 	INIT_RDMA_OBJ_SIZE(ib_qp, irdma_qp, ibqp),
4510 };
4511 
4512 /**
4513  * irdma_init_roce_device - initialization of roce rdma device
4514  * @iwdev: irdma device
4515  */
4516 static void irdma_init_roce_device(struct irdma_device *iwdev)
4517 {
4518 	iwdev->ibdev.node_type = RDMA_NODE_IB_CA;
4519 	addrconf_addr_eui48((u8 *)&iwdev->ibdev.node_guid,
4520 			    iwdev->netdev->dev_addr);
4521 	ib_set_device_ops(&iwdev->ibdev, &irdma_roce_dev_ops);
4522 }
4523 
4524 /**
4525  * irdma_init_iw_device - initialization of iwarp rdma device
4526  * @iwdev: irdma device
4527  */
4528 static void irdma_init_iw_device(struct irdma_device *iwdev)
4529 {
4530 	struct net_device *netdev = iwdev->netdev;
4531 
4532 	iwdev->ibdev.node_type = RDMA_NODE_RNIC;
4533 	addrconf_addr_eui48((u8 *)&iwdev->ibdev.node_guid,
4534 			    netdev->dev_addr);
4535 	memcpy(iwdev->ibdev.iw_ifname, netdev->name,
4536 	       sizeof(iwdev->ibdev.iw_ifname));
4537 	ib_set_device_ops(&iwdev->ibdev, &irdma_iw_dev_ops);
4538 }
4539 
4540 /**
4541  * irdma_init_rdma_device - initialization of rdma device
4542  * @iwdev: irdma device
4543  */
4544 static void irdma_init_rdma_device(struct irdma_device *iwdev)
4545 {
4546 	struct pci_dev *pcidev = iwdev->rf->pcidev;
4547 
4548 	if (iwdev->roce_mode)
4549 		irdma_init_roce_device(iwdev);
4550 	else
4551 		irdma_init_iw_device(iwdev);
4552 
4553 	iwdev->ibdev.phys_port_cnt = 1;
4554 	iwdev->ibdev.num_comp_vectors = iwdev->rf->ceqs_count;
4555 	iwdev->ibdev.dev.parent = &pcidev->dev;
4556 	ib_set_device_ops(&iwdev->ibdev, &irdma_dev_ops);
4557 }
4558 
4559 /**
4560  * irdma_port_ibevent - indicate port event
4561  * @iwdev: irdma device
4562  */
4563 void irdma_port_ibevent(struct irdma_device *iwdev)
4564 {
4565 	struct ib_event event;
4566 
4567 	event.device = &iwdev->ibdev;
4568 	event.element.port_num = 1;
4569 	event.event =
4570 		iwdev->iw_status ? IB_EVENT_PORT_ACTIVE : IB_EVENT_PORT_ERR;
4571 	ib_dispatch_event(&event);
4572 }
4573 
4574 /**
4575  * irdma_ib_unregister_device - unregister rdma device from IB
4576  * core
4577  * @iwdev: irdma device
4578  */
4579 void irdma_ib_unregister_device(struct irdma_device *iwdev)
4580 {
4581 	iwdev->iw_status = 0;
4582 	irdma_port_ibevent(iwdev);
4583 	ib_unregister_device(&iwdev->ibdev);
4584 }
4585 
4586 /**
4587  * irdma_ib_register_device - register irdma device to IB core
4588  * @iwdev: irdma device
4589  */
4590 int irdma_ib_register_device(struct irdma_device *iwdev)
4591 {
4592 	int ret;
4593 
4594 	irdma_init_rdma_device(iwdev);
4595 
4596 	ret = ib_device_set_netdev(&iwdev->ibdev, iwdev->netdev, 1);
4597 	if (ret)
4598 		goto error;
4599 	dma_set_max_seg_size(iwdev->rf->hw.device, UINT_MAX);
4600 	ret = ib_register_device(&iwdev->ibdev, "irdma%d", iwdev->rf->hw.device);
4601 	if (ret)
4602 		goto error;
4603 
4604 	iwdev->iw_status = 1;
4605 	irdma_port_ibevent(iwdev);
4606 
4607 	return 0;
4608 
4609 error:
4610 	if (ret)
4611 		ibdev_dbg(&iwdev->ibdev, "VERBS: Register RDMA device fail\n");
4612 
4613 	return ret;
4614 }
4615 
4616 /**
4617  * irdma_ib_dealloc_device
4618  * @ibdev: ib device
4619  *
4620  * callback from ibdev dealloc_driver to deallocate resources
4621  * unber irdma device
4622  */
4623 void irdma_ib_dealloc_device(struct ib_device *ibdev)
4624 {
4625 	struct irdma_device *iwdev = to_iwdev(ibdev);
4626 
4627 	irdma_rt_deinit_hw(iwdev);
4628 	irdma_ctrl_deinit_hw(iwdev->rf);
4629 	kfree(iwdev->rf);
4630 }
4631