1/*
2 * Copyright (c) 2006, 2007, 2008 QLogic Corporation. All rights reserved.
3 * Copyright (c) 2005, 2006 PathScale, Inc. All rights reserved.
4 *
5 * This software is available to you under a choice of one of two
6 * licenses.  You may choose to be licensed under the terms of the GNU
7 * General Public License (GPL) Version 2, available from the file
8 * COPYING in the main directory of this source tree, or the
9 * OpenIB.org BSD license below:
10 *
11 *     Redistribution and use in source and binary forms, with or
12 *     without modification, are permitted provided that the following
13 *     conditions are met:
14 *
15 *      - Redistributions of source code must retain the above
16 *        copyright notice, this list of conditions and the following
17 *        disclaimer.
18 *
19 *      - Redistributions in binary form must reproduce the above
20 *        copyright notice, this list of conditions and the following
21 *        disclaimer in the documentation and/or other materials
22 *        provided with the distribution.
23 *
24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
25 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
26 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
27 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
28 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
29 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
30 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
31 * SOFTWARE.
32 */
33
34#include <linux/io.h>
35
36#include "ipath_verbs.h"
37#include "ipath_kernel.h"
38
39/* cut down ridiculously long IB macro names */
40#define OP(x) IB_OPCODE_RC_##x
41
42static u32 restart_sge(struct ipath_sge_state *ss, struct ipath_swqe *wqe,
43		       u32 psn, u32 pmtu)
44{
45	u32 len;
46
47	len = ((psn - wqe->psn) & IPATH_PSN_MASK) * pmtu;
48	ss->sge = wqe->sg_list[0];
49	ss->sg_list = wqe->sg_list + 1;
50	ss->num_sge = wqe->wr.num_sge;
51	ipath_skip_sge(ss, len);
52	return wqe->length - len;
53}
54
55/**
56 * ipath_init_restart- initialize the qp->s_sge after a restart
57 * @qp: the QP who's SGE we're restarting
58 * @wqe: the work queue to initialize the QP's SGE from
59 *
60 * The QP s_lock should be held and interrupts disabled.
61 */
62static void ipath_init_restart(struct ipath_qp *qp, struct ipath_swqe *wqe)
63{
64	struct ipath_ibdev *dev;
65
66	qp->s_len = restart_sge(&qp->s_sge, wqe, qp->s_psn,
67				ib_mtu_enum_to_int(qp->path_mtu));
68	dev = to_idev(qp->ibqp.device);
69	spin_lock(&dev->pending_lock);
70	if (list_empty(&qp->timerwait))
71		list_add_tail(&qp->timerwait,
72			      &dev->pending[dev->pending_index]);
73	spin_unlock(&dev->pending_lock);
74}
75
76/**
77 * ipath_make_rc_ack - construct a response packet (ACK, NAK, or RDMA read)
78 * @qp: a pointer to the QP
79 * @ohdr: a pointer to the IB header being constructed
80 * @pmtu: the path MTU
81 *
82 * Return 1 if constructed; otherwise, return 0.
83 * Note that we are in the responder's side of the QP context.
84 * Note the QP s_lock must be held.
85 */
86static int ipath_make_rc_ack(struct ipath_ibdev *dev, struct ipath_qp *qp,
87			     struct ipath_other_headers *ohdr, u32 pmtu)
88{
89	struct ipath_ack_entry *e;
90	u32 hwords;
91	u32 len;
92	u32 bth0;
93	u32 bth2;
94
95	/* Don't send an ACK if we aren't supposed to. */
96	if (!(ib_ipath_state_ops[qp->state] & IPATH_PROCESS_RECV_OK))
97		goto bail;
98
99	/* header size in 32-bit words LRH+BTH = (8+12)/4. */
100	hwords = 5;
101
102	switch (qp->s_ack_state) {
103	case OP(RDMA_READ_RESPONSE_LAST):
104	case OP(RDMA_READ_RESPONSE_ONLY):
105	case OP(ATOMIC_ACKNOWLEDGE):
106		/*
107		 * We can increment the tail pointer now that the last
108		 * response has been sent instead of only being
109		 * constructed.
110		 */
111		if (++qp->s_tail_ack_queue > IPATH_MAX_RDMA_ATOMIC)
112			qp->s_tail_ack_queue = 0;
113		/* FALLTHROUGH */
114	case OP(SEND_ONLY):
115	case OP(ACKNOWLEDGE):
116		/* Check for no next entry in the queue. */
117		if (qp->r_head_ack_queue == qp->s_tail_ack_queue) {
118			if (qp->s_flags & IPATH_S_ACK_PENDING)
119				goto normal;
120			qp->s_ack_state = OP(ACKNOWLEDGE);
121			goto bail;
122		}
123
124		e = &qp->s_ack_queue[qp->s_tail_ack_queue];
125		if (e->opcode == OP(RDMA_READ_REQUEST)) {
126			/* Copy SGE state in case we need to resend */
127			qp->s_ack_rdma_sge = e->rdma_sge;
128			qp->s_cur_sge = &qp->s_ack_rdma_sge;
129			len = e->rdma_sge.sge.sge_length;
130			if (len > pmtu) {
131				len = pmtu;
132				qp->s_ack_state = OP(RDMA_READ_RESPONSE_FIRST);
133			} else {
134				qp->s_ack_state = OP(RDMA_READ_RESPONSE_ONLY);
135				e->sent = 1;
136			}
137			ohdr->u.aeth = ipath_compute_aeth(qp);
138			hwords++;
139			qp->s_ack_rdma_psn = e->psn;
140			bth2 = qp->s_ack_rdma_psn++ & IPATH_PSN_MASK;
141		} else {
142			/* COMPARE_SWAP or FETCH_ADD */
143			qp->s_cur_sge = NULL;
144			len = 0;
145			qp->s_ack_state = OP(ATOMIC_ACKNOWLEDGE);
146			ohdr->u.at.aeth = ipath_compute_aeth(qp);
147			ohdr->u.at.atomic_ack_eth[0] =
148				cpu_to_be32(e->atomic_data >> 32);
149			ohdr->u.at.atomic_ack_eth[1] =
150				cpu_to_be32(e->atomic_data);
151			hwords += sizeof(ohdr->u.at) / sizeof(u32);
152			bth2 = e->psn;
153			e->sent = 1;
154		}
155		bth0 = qp->s_ack_state << 24;
156		break;
157
158	case OP(RDMA_READ_RESPONSE_FIRST):
159		qp->s_ack_state = OP(RDMA_READ_RESPONSE_MIDDLE);
160		/* FALLTHROUGH */
161	case OP(RDMA_READ_RESPONSE_MIDDLE):
162		len = qp->s_ack_rdma_sge.sge.sge_length;
163		if (len > pmtu)
164			len = pmtu;
165		else {
166			ohdr->u.aeth = ipath_compute_aeth(qp);
167			hwords++;
168			qp->s_ack_state = OP(RDMA_READ_RESPONSE_LAST);
169			qp->s_ack_queue[qp->s_tail_ack_queue].sent = 1;
170		}
171		bth0 = qp->s_ack_state << 24;
172		bth2 = qp->s_ack_rdma_psn++ & IPATH_PSN_MASK;
173		break;
174
175	default:
176	normal:
177		/*
178		 * Send a regular ACK.
179		 * Set the s_ack_state so we wait until after sending
180		 * the ACK before setting s_ack_state to ACKNOWLEDGE
181		 * (see above).
182		 */
183		qp->s_ack_state = OP(SEND_ONLY);
184		qp->s_flags &= ~IPATH_S_ACK_PENDING;
185		qp->s_cur_sge = NULL;
186		if (qp->s_nak_state)
187			ohdr->u.aeth =
188				cpu_to_be32((qp->r_msn & IPATH_MSN_MASK) |
189					    (qp->s_nak_state <<
190					     IPATH_AETH_CREDIT_SHIFT));
191		else
192			ohdr->u.aeth = ipath_compute_aeth(qp);
193		hwords++;
194		len = 0;
195		bth0 = OP(ACKNOWLEDGE) << 24;
196		bth2 = qp->s_ack_psn & IPATH_PSN_MASK;
197	}
198	qp->s_hdrwords = hwords;
199	qp->s_cur_size = len;
200	ipath_make_ruc_header(dev, qp, ohdr, bth0, bth2);
201	return 1;
202
203bail:
204	return 0;
205}
206
207/**
208 * ipath_make_rc_req - construct a request packet (SEND, RDMA r/w, ATOMIC)
209 * @qp: a pointer to the QP
210 *
211 * Return 1 if constructed; otherwise, return 0.
212 */
213int ipath_make_rc_req(struct ipath_qp *qp)
214{
215	struct ipath_ibdev *dev = to_idev(qp->ibqp.device);
216	struct ipath_other_headers *ohdr;
217	struct ipath_sge_state *ss;
218	struct ipath_swqe *wqe;
219	u32 hwords;
220	u32 len;
221	u32 bth0;
222	u32 bth2;
223	u32 pmtu = ib_mtu_enum_to_int(qp->path_mtu);
224	char newreq;
225	unsigned long flags;
226	int ret = 0;
227
228	ohdr = &qp->s_hdr.u.oth;
229	if (qp->remote_ah_attr.ah_flags & IB_AH_GRH)
230		ohdr = &qp->s_hdr.u.l.oth;
231
232	/*
233	 * The lock is needed to synchronize between the sending tasklet,
234	 * the receive interrupt handler, and timeout resends.
235	 */
236	spin_lock_irqsave(&qp->s_lock, flags);
237
238	/* Sending responses has higher priority over sending requests. */
239	if ((qp->r_head_ack_queue != qp->s_tail_ack_queue ||
240	     (qp->s_flags & IPATH_S_ACK_PENDING) ||
241	     qp->s_ack_state != OP(ACKNOWLEDGE)) &&
242	    ipath_make_rc_ack(dev, qp, ohdr, pmtu))
243		goto done;
244
245	if (!(ib_ipath_state_ops[qp->state] & IPATH_PROCESS_SEND_OK)) {
246		if (!(ib_ipath_state_ops[qp->state] & IPATH_FLUSH_SEND))
247			goto bail;
248		/* We are in the error state, flush the work request. */
249		if (qp->s_last == qp->s_head)
250			goto bail;
251		/* If DMAs are in progress, we can't flush immediately. */
252		if (atomic_read(&qp->s_dma_busy)) {
253			qp->s_flags |= IPATH_S_WAIT_DMA;
254			goto bail;
255		}
256		wqe = get_swqe_ptr(qp, qp->s_last);
257		ipath_send_complete(qp, wqe, IB_WC_WR_FLUSH_ERR);
258		goto done;
259	}
260
261	/* Leave BUSY set until RNR timeout. */
262	if (qp->s_rnr_timeout) {
263		qp->s_flags |= IPATH_S_WAITING;
264		goto bail;
265	}
266
267	/* header size in 32-bit words LRH+BTH = (8+12)/4. */
268	hwords = 5;
269	bth0 = 1 << 22; /* Set M bit */
270
271	/* Send a request. */
272	wqe = get_swqe_ptr(qp, qp->s_cur);
273	switch (qp->s_state) {
274	default:
275		if (!(ib_ipath_state_ops[qp->state] &
276		    IPATH_PROCESS_NEXT_SEND_OK))
277			goto bail;
278		/*
279		 * Resend an old request or start a new one.
280		 *
281		 * We keep track of the current SWQE so that
282		 * we don't reset the "furthest progress" state
283		 * if we need to back up.
284		 */
285		newreq = 0;
286		if (qp->s_cur == qp->s_tail) {
287			/* Check if send work queue is empty. */
288			if (qp->s_tail == qp->s_head)
289				goto bail;
290			/*
291			 * If a fence is requested, wait for previous
292			 * RDMA read and atomic operations to finish.
293			 */
294			if ((wqe->wr.send_flags & IB_SEND_FENCE) &&
295			    qp->s_num_rd_atomic) {
296				qp->s_flags |= IPATH_S_FENCE_PENDING;
297				goto bail;
298			}
299			wqe->psn = qp->s_next_psn;
300			newreq = 1;
301		}
302		/*
303		 * Note that we have to be careful not to modify the
304		 * original work request since we may need to resend
305		 * it.
306		 */
307		len = wqe->length;
308		ss = &qp->s_sge;
309		bth2 = 0;
310		switch (wqe->wr.opcode) {
311		case IB_WR_SEND:
312		case IB_WR_SEND_WITH_IMM:
313			/* If no credit, return. */
314			if (qp->s_lsn != (u32) -1 &&
315			    ipath_cmp24(wqe->ssn, qp->s_lsn + 1) > 0) {
316				qp->s_flags |= IPATH_S_WAIT_SSN_CREDIT;
317				goto bail;
318			}
319			wqe->lpsn = wqe->psn;
320			if (len > pmtu) {
321				wqe->lpsn += (len - 1) / pmtu;
322				qp->s_state = OP(SEND_FIRST);
323				len = pmtu;
324				break;
325			}
326			if (wqe->wr.opcode == IB_WR_SEND)
327				qp->s_state = OP(SEND_ONLY);
328			else {
329				qp->s_state = OP(SEND_ONLY_WITH_IMMEDIATE);
330				/* Immediate data comes after the BTH */
331				ohdr->u.imm_data = wqe->wr.ex.imm_data;
332				hwords += 1;
333			}
334			if (wqe->wr.send_flags & IB_SEND_SOLICITED)
335				bth0 |= 1 << 23;
336			bth2 = 1 << 31;	/* Request ACK. */
337			if (++qp->s_cur == qp->s_size)
338				qp->s_cur = 0;
339			break;
340
341		case IB_WR_RDMA_WRITE:
342			if (newreq && qp->s_lsn != (u32) -1)
343				qp->s_lsn++;
344			/* FALLTHROUGH */
345		case IB_WR_RDMA_WRITE_WITH_IMM:
346			/* If no credit, return. */
347			if (qp->s_lsn != (u32) -1 &&
348			    ipath_cmp24(wqe->ssn, qp->s_lsn + 1) > 0) {
349				qp->s_flags |= IPATH_S_WAIT_SSN_CREDIT;
350				goto bail;
351			}
352			ohdr->u.rc.reth.vaddr =
353				cpu_to_be64(wqe->wr.wr.rdma.remote_addr);
354			ohdr->u.rc.reth.rkey =
355				cpu_to_be32(wqe->wr.wr.rdma.rkey);
356			ohdr->u.rc.reth.length = cpu_to_be32(len);
357			hwords += sizeof(struct ib_reth) / sizeof(u32);
358			wqe->lpsn = wqe->psn;
359			if (len > pmtu) {
360				wqe->lpsn += (len - 1) / pmtu;
361				qp->s_state = OP(RDMA_WRITE_FIRST);
362				len = pmtu;
363				break;
364			}
365			if (wqe->wr.opcode == IB_WR_RDMA_WRITE)
366				qp->s_state = OP(RDMA_WRITE_ONLY);
367			else {
368				qp->s_state =
369					OP(RDMA_WRITE_ONLY_WITH_IMMEDIATE);
370				/* Immediate data comes after RETH */
371				ohdr->u.rc.imm_data = wqe->wr.ex.imm_data;
372				hwords += 1;
373				if (wqe->wr.send_flags & IB_SEND_SOLICITED)
374					bth0 |= 1 << 23;
375			}
376			bth2 = 1 << 31;	/* Request ACK. */
377			if (++qp->s_cur == qp->s_size)
378				qp->s_cur = 0;
379			break;
380
381		case IB_WR_RDMA_READ:
382			/*
383			 * Don't allow more operations to be started
384			 * than the QP limits allow.
385			 */
386			if (newreq) {
387				if (qp->s_num_rd_atomic >=
388				    qp->s_max_rd_atomic) {
389					qp->s_flags |= IPATH_S_RDMAR_PENDING;
390					goto bail;
391				}
392				qp->s_num_rd_atomic++;
393				if (qp->s_lsn != (u32) -1)
394					qp->s_lsn++;
395				/*
396				 * Adjust s_next_psn to count the
397				 * expected number of responses.
398				 */
399				if (len > pmtu)
400					qp->s_next_psn += (len - 1) / pmtu;
401				wqe->lpsn = qp->s_next_psn++;
402			}
403			ohdr->u.rc.reth.vaddr =
404				cpu_to_be64(wqe->wr.wr.rdma.remote_addr);
405			ohdr->u.rc.reth.rkey =
406				cpu_to_be32(wqe->wr.wr.rdma.rkey);
407			ohdr->u.rc.reth.length = cpu_to_be32(len);
408			qp->s_state = OP(RDMA_READ_REQUEST);
409			hwords += sizeof(ohdr->u.rc.reth) / sizeof(u32);
410			ss = NULL;
411			len = 0;
412			if (++qp->s_cur == qp->s_size)
413				qp->s_cur = 0;
414			break;
415
416		case IB_WR_ATOMIC_CMP_AND_SWP:
417		case IB_WR_ATOMIC_FETCH_AND_ADD:
418			/*
419			 * Don't allow more operations to be started
420			 * than the QP limits allow.
421			 */
422			if (newreq) {
423				if (qp->s_num_rd_atomic >=
424				    qp->s_max_rd_atomic) {
425					qp->s_flags |= IPATH_S_RDMAR_PENDING;
426					goto bail;
427				}
428				qp->s_num_rd_atomic++;
429				if (qp->s_lsn != (u32) -1)
430					qp->s_lsn++;
431				wqe->lpsn = wqe->psn;
432			}
433			if (wqe->wr.opcode == IB_WR_ATOMIC_CMP_AND_SWP) {
434				qp->s_state = OP(COMPARE_SWAP);
435				ohdr->u.atomic_eth.swap_data = cpu_to_be64(
436					wqe->wr.wr.atomic.swap);
437				ohdr->u.atomic_eth.compare_data = cpu_to_be64(
438					wqe->wr.wr.atomic.compare_add);
439			} else {
440				qp->s_state = OP(FETCH_ADD);
441				ohdr->u.atomic_eth.swap_data = cpu_to_be64(
442					wqe->wr.wr.atomic.compare_add);
443				ohdr->u.atomic_eth.compare_data = 0;
444			}
445			ohdr->u.atomic_eth.vaddr[0] = cpu_to_be32(
446				wqe->wr.wr.atomic.remote_addr >> 32);
447			ohdr->u.atomic_eth.vaddr[1] = cpu_to_be32(
448				wqe->wr.wr.atomic.remote_addr);
449			ohdr->u.atomic_eth.rkey = cpu_to_be32(
450				wqe->wr.wr.atomic.rkey);
451			hwords += sizeof(struct ib_atomic_eth) / sizeof(u32);
452			ss = NULL;
453			len = 0;
454			if (++qp->s_cur == qp->s_size)
455				qp->s_cur = 0;
456			break;
457
458		default:
459			goto bail;
460		}
461		qp->s_sge.sge = wqe->sg_list[0];
462		qp->s_sge.sg_list = wqe->sg_list + 1;
463		qp->s_sge.num_sge = wqe->wr.num_sge;
464		qp->s_len = wqe->length;
465		if (newreq) {
466			qp->s_tail++;
467			if (qp->s_tail >= qp->s_size)
468				qp->s_tail = 0;
469		}
470		bth2 |= qp->s_psn & IPATH_PSN_MASK;
471		if (wqe->wr.opcode == IB_WR_RDMA_READ)
472			qp->s_psn = wqe->lpsn + 1;
473		else {
474			qp->s_psn++;
475			if (ipath_cmp24(qp->s_psn, qp->s_next_psn) > 0)
476				qp->s_next_psn = qp->s_psn;
477		}
478		/*
479		 * Put the QP on the pending list so lost ACKs will cause
480		 * a retry.  More than one request can be pending so the
481		 * QP may already be on the dev->pending list.
482		 */
483		spin_lock(&dev->pending_lock);
484		if (list_empty(&qp->timerwait))
485			list_add_tail(&qp->timerwait,
486				      &dev->pending[dev->pending_index]);
487		spin_unlock(&dev->pending_lock);
488		break;
489
490	case OP(RDMA_READ_RESPONSE_FIRST):
491		/*
492		 * This case can only happen if a send is restarted.
493		 * See ipath_restart_rc().
494		 */
495		ipath_init_restart(qp, wqe);
496		/* FALLTHROUGH */
497	case OP(SEND_FIRST):
498		qp->s_state = OP(SEND_MIDDLE);
499		/* FALLTHROUGH */
500	case OP(SEND_MIDDLE):
501		bth2 = qp->s_psn++ & IPATH_PSN_MASK;
502		if (ipath_cmp24(qp->s_psn, qp->s_next_psn) > 0)
503			qp->s_next_psn = qp->s_psn;
504		ss = &qp->s_sge;
505		len = qp->s_len;
506		if (len > pmtu) {
507			len = pmtu;
508			break;
509		}
510		if (wqe->wr.opcode == IB_WR_SEND)
511			qp->s_state = OP(SEND_LAST);
512		else {
513			qp->s_state = OP(SEND_LAST_WITH_IMMEDIATE);
514			/* Immediate data comes after the BTH */
515			ohdr->u.imm_data = wqe->wr.ex.imm_data;
516			hwords += 1;
517		}
518		if (wqe->wr.send_flags & IB_SEND_SOLICITED)
519			bth0 |= 1 << 23;
520		bth2 |= 1 << 31;	/* Request ACK. */
521		qp->s_cur++;
522		if (qp->s_cur >= qp->s_size)
523			qp->s_cur = 0;
524		break;
525
526	case OP(RDMA_READ_RESPONSE_LAST):
527		/*
528		 * This case can only happen if a RDMA write is restarted.
529		 * See ipath_restart_rc().
530		 */
531		ipath_init_restart(qp, wqe);
532		/* FALLTHROUGH */
533	case OP(RDMA_WRITE_FIRST):
534		qp->s_state = OP(RDMA_WRITE_MIDDLE);
535		/* FALLTHROUGH */
536	case OP(RDMA_WRITE_MIDDLE):
537		bth2 = qp->s_psn++ & IPATH_PSN_MASK;
538		if (ipath_cmp24(qp->s_psn, qp->s_next_psn) > 0)
539			qp->s_next_psn = qp->s_psn;
540		ss = &qp->s_sge;
541		len = qp->s_len;
542		if (len > pmtu) {
543			len = pmtu;
544			break;
545		}
546		if (wqe->wr.opcode == IB_WR_RDMA_WRITE)
547			qp->s_state = OP(RDMA_WRITE_LAST);
548		else {
549			qp->s_state = OP(RDMA_WRITE_LAST_WITH_IMMEDIATE);
550			/* Immediate data comes after the BTH */
551			ohdr->u.imm_data = wqe->wr.ex.imm_data;
552			hwords += 1;
553			if (wqe->wr.send_flags & IB_SEND_SOLICITED)
554				bth0 |= 1 << 23;
555		}
556		bth2 |= 1 << 31;	/* Request ACK. */
557		qp->s_cur++;
558		if (qp->s_cur >= qp->s_size)
559			qp->s_cur = 0;
560		break;
561
562	case OP(RDMA_READ_RESPONSE_MIDDLE):
563		/*
564		 * This case can only happen if a RDMA read is restarted.
565		 * See ipath_restart_rc().
566		 */
567		ipath_init_restart(qp, wqe);
568		len = ((qp->s_psn - wqe->psn) & IPATH_PSN_MASK) * pmtu;
569		ohdr->u.rc.reth.vaddr =
570			cpu_to_be64(wqe->wr.wr.rdma.remote_addr + len);
571		ohdr->u.rc.reth.rkey =
572			cpu_to_be32(wqe->wr.wr.rdma.rkey);
573		ohdr->u.rc.reth.length = cpu_to_be32(qp->s_len);
574		qp->s_state = OP(RDMA_READ_REQUEST);
575		hwords += sizeof(ohdr->u.rc.reth) / sizeof(u32);
576		bth2 = qp->s_psn & IPATH_PSN_MASK;
577		qp->s_psn = wqe->lpsn + 1;
578		ss = NULL;
579		len = 0;
580		qp->s_cur++;
581		if (qp->s_cur == qp->s_size)
582			qp->s_cur = 0;
583		break;
584	}
585	if (ipath_cmp24(qp->s_psn, qp->s_last_psn + IPATH_PSN_CREDIT - 1) >= 0)
586		bth2 |= 1 << 31;	/* Request ACK. */
587	qp->s_len -= len;
588	qp->s_hdrwords = hwords;
589	qp->s_cur_sge = ss;
590	qp->s_cur_size = len;
591	ipath_make_ruc_header(dev, qp, ohdr, bth0 | (qp->s_state << 24), bth2);
592done:
593	ret = 1;
594	goto unlock;
595
596bail:
597	qp->s_flags &= ~IPATH_S_BUSY;
598unlock:
599	spin_unlock_irqrestore(&qp->s_lock, flags);
600	return ret;
601}
602
603/**
604 * send_rc_ack - Construct an ACK packet and send it
605 * @qp: a pointer to the QP
606 *
607 * This is called from ipath_rc_rcv() and only uses the receive
608 * side QP state.
609 * Note that RDMA reads and atomics are handled in the
610 * send side QP state and tasklet.
611 */
612static void send_rc_ack(struct ipath_qp *qp)
613{
614	struct ipath_ibdev *dev = to_idev(qp->ibqp.device);
615	struct ipath_devdata *dd;
616	u16 lrh0;
617	u32 bth0;
618	u32 hwords;
619	u32 __iomem *piobuf;
620	struct ipath_ib_header hdr;
621	struct ipath_other_headers *ohdr;
622	unsigned long flags;
623
624	spin_lock_irqsave(&qp->s_lock, flags);
625
626	/* Don't send ACK or NAK if a RDMA read or atomic is pending. */
627	if (qp->r_head_ack_queue != qp->s_tail_ack_queue ||
628	    (qp->s_flags & IPATH_S_ACK_PENDING) ||
629	    qp->s_ack_state != OP(ACKNOWLEDGE))
630		goto queue_ack;
631
632	spin_unlock_irqrestore(&qp->s_lock, flags);
633
634	/* Don't try to send ACKs if the link isn't ACTIVE */
635	dd = dev->dd;
636	if (!(dd->ipath_flags & IPATH_LINKACTIVE))
637		goto done;
638
639	piobuf = ipath_getpiobuf(dd, 0, NULL);
640	if (!piobuf) {
641		/*
642		 * We are out of PIO buffers at the moment.
643		 * Pass responsibility for sending the ACK to the
644		 * send tasklet so that when a PIO buffer becomes
645		 * available, the ACK is sent ahead of other outgoing
646		 * packets.
647		 */
648		spin_lock_irqsave(&qp->s_lock, flags);
649		goto queue_ack;
650	}
651
652	/* Construct the header. */
653	ohdr = &hdr.u.oth;
654	lrh0 = IPATH_LRH_BTH;
655	/* header size in 32-bit words LRH+BTH+AETH = (8+12+4)/4. */
656	hwords = 6;
657	if (unlikely(qp->remote_ah_attr.ah_flags & IB_AH_GRH)) {
658		hwords += ipath_make_grh(dev, &hdr.u.l.grh,
659					 &qp->remote_ah_attr.grh,
660					 hwords, 0);
661		ohdr = &hdr.u.l.oth;
662		lrh0 = IPATH_LRH_GRH;
663	}
664	/* read pkey_index w/o lock (its atomic) */
665	bth0 = ipath_get_pkey(dd, qp->s_pkey_index) |
666		(OP(ACKNOWLEDGE) << 24) | (1 << 22);
667	if (qp->r_nak_state)
668		ohdr->u.aeth = cpu_to_be32((qp->r_msn & IPATH_MSN_MASK) |
669					    (qp->r_nak_state <<
670					     IPATH_AETH_CREDIT_SHIFT));
671	else
672		ohdr->u.aeth = ipath_compute_aeth(qp);
673	lrh0 |= qp->remote_ah_attr.sl << 4;
674	hdr.lrh[0] = cpu_to_be16(lrh0);
675	hdr.lrh[1] = cpu_to_be16(qp->remote_ah_attr.dlid);
676	hdr.lrh[2] = cpu_to_be16(hwords + SIZE_OF_CRC);
677	hdr.lrh[3] = cpu_to_be16(dd->ipath_lid |
678				 qp->remote_ah_attr.src_path_bits);
679	ohdr->bth[0] = cpu_to_be32(bth0);
680	ohdr->bth[1] = cpu_to_be32(qp->remote_qpn);
681	ohdr->bth[2] = cpu_to_be32(qp->r_ack_psn & IPATH_PSN_MASK);
682
683	writeq(hwords + 1, piobuf);
684
685	if (dd->ipath_flags & IPATH_PIO_FLUSH_WC) {
686		u32 *hdrp = (u32 *) &hdr;
687
688		ipath_flush_wc();
689		__iowrite32_copy(piobuf + 2, hdrp, hwords - 1);
690		ipath_flush_wc();
691		__raw_writel(hdrp[hwords - 1], piobuf + hwords + 1);
692	} else
693		__iowrite32_copy(piobuf + 2, (u32 *) &hdr, hwords);
694
695	ipath_flush_wc();
696
697	dev->n_unicast_xmit++;
698	goto done;
699
700queue_ack:
701	if (ib_ipath_state_ops[qp->state] & IPATH_PROCESS_RECV_OK) {
702		dev->n_rc_qacks++;
703		qp->s_flags |= IPATH_S_ACK_PENDING;
704		qp->s_nak_state = qp->r_nak_state;
705		qp->s_ack_psn = qp->r_ack_psn;
706
707		/* Schedule the send tasklet. */
708		ipath_schedule_send(qp);
709	}
710	spin_unlock_irqrestore(&qp->s_lock, flags);
711done:
712	return;
713}
714
715/**
716 * reset_psn - reset the QP state to send starting from PSN
717 * @qp: the QP
718 * @psn: the packet sequence number to restart at
719 *
720 * This is called from ipath_rc_rcv() to process an incoming RC ACK
721 * for the given QP.
722 * Called at interrupt level with the QP s_lock held.
723 */
724static void reset_psn(struct ipath_qp *qp, u32 psn)
725{
726	u32 n = qp->s_last;
727	struct ipath_swqe *wqe = get_swqe_ptr(qp, n);
728	u32 opcode;
729
730	qp->s_cur = n;
731
732	/*
733	 * If we are starting the request from the beginning,
734	 * let the normal send code handle initialization.
735	 */
736	if (ipath_cmp24(psn, wqe->psn) <= 0) {
737		qp->s_state = OP(SEND_LAST);
738		goto done;
739	}
740
741	/* Find the work request opcode corresponding to the given PSN. */
742	opcode = wqe->wr.opcode;
743	for (;;) {
744		int diff;
745
746		if (++n == qp->s_size)
747			n = 0;
748		if (n == qp->s_tail)
749			break;
750		wqe = get_swqe_ptr(qp, n);
751		diff = ipath_cmp24(psn, wqe->psn);
752		if (diff < 0)
753			break;
754		qp->s_cur = n;
755		/*
756		 * If we are starting the request from the beginning,
757		 * let the normal send code handle initialization.
758		 */
759		if (diff == 0) {
760			qp->s_state = OP(SEND_LAST);
761			goto done;
762		}
763		opcode = wqe->wr.opcode;
764	}
765
766	/*
767	 * Set the state to restart in the middle of a request.
768	 * Don't change the s_sge, s_cur_sge, or s_cur_size.
769	 * See ipath_make_rc_req().
770	 */
771	switch (opcode) {
772	case IB_WR_SEND:
773	case IB_WR_SEND_WITH_IMM:
774		qp->s_state = OP(RDMA_READ_RESPONSE_FIRST);
775		break;
776
777	case IB_WR_RDMA_WRITE:
778	case IB_WR_RDMA_WRITE_WITH_IMM:
779		qp->s_state = OP(RDMA_READ_RESPONSE_LAST);
780		break;
781
782	case IB_WR_RDMA_READ:
783		qp->s_state = OP(RDMA_READ_RESPONSE_MIDDLE);
784		break;
785
786	default:
787		/*
788		 * This case shouldn't happen since its only
789		 * one PSN per req.
790		 */
791		qp->s_state = OP(SEND_LAST);
792	}
793done:
794	qp->s_psn = psn;
795}
796
797/**
798 * ipath_restart_rc - back up requester to resend the last un-ACKed request
799 * @qp: the QP to restart
800 * @psn: packet sequence number for the request
801 * @wc: the work completion request
802 *
803 * The QP s_lock should be held and interrupts disabled.
804 */
805void ipath_restart_rc(struct ipath_qp *qp, u32 psn)
806{
807	struct ipath_swqe *wqe = get_swqe_ptr(qp, qp->s_last);
808	struct ipath_ibdev *dev;
809
810	if (qp->s_retry == 0) {
811		ipath_send_complete(qp, wqe, IB_WC_RETRY_EXC_ERR);
812		ipath_error_qp(qp, IB_WC_WR_FLUSH_ERR);
813		goto bail;
814	}
815	qp->s_retry--;
816
817	/*
818	 * Remove the QP from the timeout queue.
819	 * Note: it may already have been removed by ipath_ib_timer().
820	 */
821	dev = to_idev(qp->ibqp.device);
822	spin_lock(&dev->pending_lock);
823	if (!list_empty(&qp->timerwait))
824		list_del_init(&qp->timerwait);
825	if (!list_empty(&qp->piowait))
826		list_del_init(&qp->piowait);
827	spin_unlock(&dev->pending_lock);
828
829	if (wqe->wr.opcode == IB_WR_RDMA_READ)
830		dev->n_rc_resends++;
831	else
832		dev->n_rc_resends += (qp->s_psn - psn) & IPATH_PSN_MASK;
833
834	reset_psn(qp, psn);
835	ipath_schedule_send(qp);
836
837bail:
838	return;
839}
840
841static inline void update_last_psn(struct ipath_qp *qp, u32 psn)
842{
843	qp->s_last_psn = psn;
844}
845
846/**
847 * do_rc_ack - process an incoming RC ACK
848 * @qp: the QP the ACK came in on
849 * @psn: the packet sequence number of the ACK
850 * @opcode: the opcode of the request that resulted in the ACK
851 *
852 * This is called from ipath_rc_rcv_resp() to process an incoming RC ACK
853 * for the given QP.
854 * Called at interrupt level with the QP s_lock held and interrupts disabled.
855 * Returns 1 if OK, 0 if current operation should be aborted (NAK).
856 */
857static int do_rc_ack(struct ipath_qp *qp, u32 aeth, u32 psn, int opcode,
858		     u64 val)
859{
860	struct ipath_ibdev *dev = to_idev(qp->ibqp.device);
861	struct ib_wc wc;
862	enum ib_wc_status status;
863	struct ipath_swqe *wqe;
864	int ret = 0;
865	u32 ack_psn;
866	int diff;
867
868	/*
869	 * Remove the QP from the timeout queue (or RNR timeout queue).
870	 * If ipath_ib_timer() has already removed it,
871	 * it's OK since we hold the QP s_lock and ipath_restart_rc()
872	 * just won't find anything to restart if we ACK everything.
873	 */
874	spin_lock(&dev->pending_lock);
875	if (!list_empty(&qp->timerwait))
876		list_del_init(&qp->timerwait);
877	spin_unlock(&dev->pending_lock);
878
879	/*
880	 * Note that NAKs implicitly ACK outstanding SEND and RDMA write
881	 * requests and implicitly NAK RDMA read and atomic requests issued
882	 * before the NAK'ed request.  The MSN won't include the NAK'ed
883	 * request but will include an ACK'ed request(s).
884	 */
885	ack_psn = psn;
886	if (aeth >> 29)
887		ack_psn--;
888	wqe = get_swqe_ptr(qp, qp->s_last);
889
890	/*
891	 * The MSN might be for a later WQE than the PSN indicates so
892	 * only complete WQEs that the PSN finishes.
893	 */
894	while ((diff = ipath_cmp24(ack_psn, wqe->lpsn)) >= 0) {
895		/*
896		 * RDMA_READ_RESPONSE_ONLY is a special case since
897		 * we want to generate completion events for everything
898		 * before the RDMA read, copy the data, then generate
899		 * the completion for the read.
900		 */
901		if (wqe->wr.opcode == IB_WR_RDMA_READ &&
902		    opcode == OP(RDMA_READ_RESPONSE_ONLY) &&
903		    diff == 0) {
904			ret = 1;
905			goto bail;
906		}
907		/*
908		 * If this request is a RDMA read or atomic, and the ACK is
909		 * for a later operation, this ACK NAKs the RDMA read or
910		 * atomic.  In other words, only a RDMA_READ_LAST or ONLY
911		 * can ACK a RDMA read and likewise for atomic ops.  Note
912		 * that the NAK case can only happen if relaxed ordering is
913		 * used and requests are sent after an RDMA read or atomic
914		 * is sent but before the response is received.
915		 */
916		if ((wqe->wr.opcode == IB_WR_RDMA_READ &&
917		     (opcode != OP(RDMA_READ_RESPONSE_LAST) || diff != 0)) ||
918		    ((wqe->wr.opcode == IB_WR_ATOMIC_CMP_AND_SWP ||
919		      wqe->wr.opcode == IB_WR_ATOMIC_FETCH_AND_ADD) &&
920		     (opcode != OP(ATOMIC_ACKNOWLEDGE) || diff != 0))) {
921			/*
922			 * The last valid PSN seen is the previous
923			 * request's.
924			 */
925			update_last_psn(qp, wqe->psn - 1);
926			/* Retry this request. */
927			ipath_restart_rc(qp, wqe->psn);
928			/*
929			 * No need to process the ACK/NAK since we are
930			 * restarting an earlier request.
931			 */
932			goto bail;
933		}
934		if (wqe->wr.opcode == IB_WR_ATOMIC_CMP_AND_SWP ||
935		    wqe->wr.opcode == IB_WR_ATOMIC_FETCH_AND_ADD)
936			*(u64 *) wqe->sg_list[0].vaddr = val;
937		if (qp->s_num_rd_atomic &&
938		    (wqe->wr.opcode == IB_WR_RDMA_READ ||
939		     wqe->wr.opcode == IB_WR_ATOMIC_CMP_AND_SWP ||
940		     wqe->wr.opcode == IB_WR_ATOMIC_FETCH_AND_ADD)) {
941			qp->s_num_rd_atomic--;
942			/* Restart sending task if fence is complete */
943			if (((qp->s_flags & IPATH_S_FENCE_PENDING) &&
944			     !qp->s_num_rd_atomic) ||
945			    qp->s_flags & IPATH_S_RDMAR_PENDING)
946				ipath_schedule_send(qp);
947		}
948		/* Post a send completion queue entry if requested. */
949		if (!(qp->s_flags & IPATH_S_SIGNAL_REQ_WR) ||
950		    (wqe->wr.send_flags & IB_SEND_SIGNALED)) {
951			memset(&wc, 0, sizeof wc);
952			wc.wr_id = wqe->wr.wr_id;
953			wc.status = IB_WC_SUCCESS;
954			wc.opcode = ib_ipath_wc_opcode[wqe->wr.opcode];
955			wc.byte_len = wqe->length;
956			wc.qp = &qp->ibqp;
957			wc.src_qp = qp->remote_qpn;
958			wc.slid = qp->remote_ah_attr.dlid;
959			wc.sl = qp->remote_ah_attr.sl;
960			ipath_cq_enter(to_icq(qp->ibqp.send_cq), &wc, 0);
961		}
962		qp->s_retry = qp->s_retry_cnt;
963		/*
964		 * If we are completing a request which is in the process of
965		 * being resent, we can stop resending it since we know the
966		 * responder has already seen it.
967		 */
968		if (qp->s_last == qp->s_cur) {
969			if (++qp->s_cur >= qp->s_size)
970				qp->s_cur = 0;
971			qp->s_last = qp->s_cur;
972			if (qp->s_last == qp->s_tail)
973				break;
974			wqe = get_swqe_ptr(qp, qp->s_cur);
975			qp->s_state = OP(SEND_LAST);
976			qp->s_psn = wqe->psn;
977		} else {
978			if (++qp->s_last >= qp->s_size)
979				qp->s_last = 0;
980			if (qp->state == IB_QPS_SQD && qp->s_last == qp->s_cur)
981				qp->s_draining = 0;
982			if (qp->s_last == qp->s_tail)
983				break;
984			wqe = get_swqe_ptr(qp, qp->s_last);
985		}
986	}
987
988	switch (aeth >> 29) {
989	case 0:		/* ACK */
990		dev->n_rc_acks++;
991		/* If this is a partial ACK, reset the retransmit timer. */
992		if (qp->s_last != qp->s_tail) {
993			spin_lock(&dev->pending_lock);
994			if (list_empty(&qp->timerwait))
995				list_add_tail(&qp->timerwait,
996					&dev->pending[dev->pending_index]);
997			spin_unlock(&dev->pending_lock);
998			/*
999			 * If we get a partial ACK for a resent operation,
1000			 * we can stop resending the earlier packets and
1001			 * continue with the next packet the receiver wants.
1002			 */
1003			if (ipath_cmp24(qp->s_psn, psn) <= 0) {
1004				reset_psn(qp, psn + 1);
1005				ipath_schedule_send(qp);
1006			}
1007		} else if (ipath_cmp24(qp->s_psn, psn) <= 0) {
1008			qp->s_state = OP(SEND_LAST);
1009			qp->s_psn = psn + 1;
1010		}
1011		ipath_get_credit(qp, aeth);
1012		qp->s_rnr_retry = qp->s_rnr_retry_cnt;
1013		qp->s_retry = qp->s_retry_cnt;
1014		update_last_psn(qp, psn);
1015		ret = 1;
1016		goto bail;
1017
1018	case 1:		/* RNR NAK */
1019		dev->n_rnr_naks++;
1020		if (qp->s_last == qp->s_tail)
1021			goto bail;
1022		if (qp->s_rnr_retry == 0) {
1023			status = IB_WC_RNR_RETRY_EXC_ERR;
1024			goto class_b;
1025		}
1026		if (qp->s_rnr_retry_cnt < 7)
1027			qp->s_rnr_retry--;
1028
1029		/* The last valid PSN is the previous PSN. */
1030		update_last_psn(qp, psn - 1);
1031
1032		if (wqe->wr.opcode == IB_WR_RDMA_READ)
1033			dev->n_rc_resends++;
1034		else
1035			dev->n_rc_resends +=
1036				(qp->s_psn - psn) & IPATH_PSN_MASK;
1037
1038		reset_psn(qp, psn);
1039
1040		qp->s_rnr_timeout =
1041			ib_ipath_rnr_table[(aeth >> IPATH_AETH_CREDIT_SHIFT) &
1042					   IPATH_AETH_CREDIT_MASK];
1043		ipath_insert_rnr_queue(qp);
1044		ipath_schedule_send(qp);
1045		goto bail;
1046
1047	case 3:		/* NAK */
1048		if (qp->s_last == qp->s_tail)
1049			goto bail;
1050		/* The last valid PSN is the previous PSN. */
1051		update_last_psn(qp, psn - 1);
1052		switch ((aeth >> IPATH_AETH_CREDIT_SHIFT) &
1053			IPATH_AETH_CREDIT_MASK) {
1054		case 0:	/* PSN sequence error */
1055			dev->n_seq_naks++;
1056			/*
1057			 * Back up to the responder's expected PSN.
1058			 * Note that we might get a NAK in the middle of an
1059			 * RDMA READ response which terminates the RDMA
1060			 * READ.
1061			 */
1062			ipath_restart_rc(qp, psn);
1063			break;
1064
1065		case 1:	/* Invalid Request */
1066			status = IB_WC_REM_INV_REQ_ERR;
1067			dev->n_other_naks++;
1068			goto class_b;
1069
1070		case 2:	/* Remote Access Error */
1071			status = IB_WC_REM_ACCESS_ERR;
1072			dev->n_other_naks++;
1073			goto class_b;
1074
1075		case 3:	/* Remote Operation Error */
1076			status = IB_WC_REM_OP_ERR;
1077			dev->n_other_naks++;
1078		class_b:
1079			ipath_send_complete(qp, wqe, status);
1080			ipath_error_qp(qp, IB_WC_WR_FLUSH_ERR);
1081			break;
1082
1083		default:
1084			/* Ignore other reserved NAK error codes */
1085			goto reserved;
1086		}
1087		qp->s_rnr_retry = qp->s_rnr_retry_cnt;
1088		goto bail;
1089
1090	default:		/* 2: reserved */
1091	reserved:
1092		/* Ignore reserved NAK codes. */
1093		goto bail;
1094	}
1095
1096bail:
1097	return ret;
1098}
1099
1100/**
1101 * ipath_rc_rcv_resp - process an incoming RC response packet
1102 * @dev: the device this packet came in on
1103 * @ohdr: the other headers for this packet
1104 * @data: the packet data
1105 * @tlen: the packet length
1106 * @qp: the QP for this packet
1107 * @opcode: the opcode for this packet
1108 * @psn: the packet sequence number for this packet
1109 * @hdrsize: the header length
1110 * @pmtu: the path MTU
1111 * @header_in_data: true if part of the header data is in the data buffer
1112 *
1113 * This is called from ipath_rc_rcv() to process an incoming RC response
1114 * packet for the given QP.
1115 * Called at interrupt level.
1116 */
1117static inline void ipath_rc_rcv_resp(struct ipath_ibdev *dev,
1118				     struct ipath_other_headers *ohdr,
1119				     void *data, u32 tlen,
1120				     struct ipath_qp *qp,
1121				     u32 opcode,
1122				     u32 psn, u32 hdrsize, u32 pmtu,
1123				     int header_in_data)
1124{
1125	struct ipath_swqe *wqe;
1126	enum ib_wc_status status;
1127	unsigned long flags;
1128	int diff;
1129	u32 pad;
1130	u32 aeth;
1131	u64 val;
1132
1133	spin_lock_irqsave(&qp->s_lock, flags);
1134
1135	/* Double check we can process this now that we hold the s_lock. */
1136	if (!(ib_ipath_state_ops[qp->state] & IPATH_PROCESS_RECV_OK))
1137		goto ack_done;
1138
1139	/* Ignore invalid responses. */
1140	if (ipath_cmp24(psn, qp->s_next_psn) >= 0)
1141		goto ack_done;
1142
1143	/* Ignore duplicate responses. */
1144	diff = ipath_cmp24(psn, qp->s_last_psn);
1145	if (unlikely(diff <= 0)) {
1146		/* Update credits for "ghost" ACKs */
1147		if (diff == 0 && opcode == OP(ACKNOWLEDGE)) {
1148			if (!header_in_data)
1149				aeth = be32_to_cpu(ohdr->u.aeth);
1150			else {
1151				aeth = be32_to_cpu(((__be32 *) data)[0]);
1152				data += sizeof(__be32);
1153			}
1154			if ((aeth >> 29) == 0)
1155				ipath_get_credit(qp, aeth);
1156		}
1157		goto ack_done;
1158	}
1159
1160	if (unlikely(qp->s_last == qp->s_tail))
1161		goto ack_done;
1162	wqe = get_swqe_ptr(qp, qp->s_last);
1163	status = IB_WC_SUCCESS;
1164
1165	switch (opcode) {
1166	case OP(ACKNOWLEDGE):
1167	case OP(ATOMIC_ACKNOWLEDGE):
1168	case OP(RDMA_READ_RESPONSE_FIRST):
1169		if (!header_in_data)
1170			aeth = be32_to_cpu(ohdr->u.aeth);
1171		else {
1172			aeth = be32_to_cpu(((__be32 *) data)[0]);
1173			data += sizeof(__be32);
1174		}
1175		if (opcode == OP(ATOMIC_ACKNOWLEDGE)) {
1176			if (!header_in_data) {
1177				__be32 *p = ohdr->u.at.atomic_ack_eth;
1178
1179				val = ((u64) be32_to_cpu(p[0]) << 32) |
1180					be32_to_cpu(p[1]);
1181			} else
1182				val = be64_to_cpu(((__be64 *) data)[0]);
1183		} else
1184			val = 0;
1185		if (!do_rc_ack(qp, aeth, psn, opcode, val) ||
1186		    opcode != OP(RDMA_READ_RESPONSE_FIRST))
1187			goto ack_done;
1188		hdrsize += 4;
1189		wqe = get_swqe_ptr(qp, qp->s_last);
1190		if (unlikely(wqe->wr.opcode != IB_WR_RDMA_READ))
1191			goto ack_op_err;
1192		qp->r_flags &= ~IPATH_R_RDMAR_SEQ;
1193		/*
1194		 * If this is a response to a resent RDMA read, we
1195		 * have to be careful to copy the data to the right
1196		 * location.
1197		 */
1198		qp->s_rdma_read_len = restart_sge(&qp->s_rdma_read_sge,
1199						  wqe, psn, pmtu);
1200		goto read_middle;
1201
1202	case OP(RDMA_READ_RESPONSE_MIDDLE):
1203		/* no AETH, no ACK */
1204		if (unlikely(ipath_cmp24(psn, qp->s_last_psn + 1))) {
1205			dev->n_rdma_seq++;
1206			if (qp->r_flags & IPATH_R_RDMAR_SEQ)
1207				goto ack_done;
1208			qp->r_flags |= IPATH_R_RDMAR_SEQ;
1209			ipath_restart_rc(qp, qp->s_last_psn + 1);
1210			goto ack_done;
1211		}
1212		if (unlikely(wqe->wr.opcode != IB_WR_RDMA_READ))
1213			goto ack_op_err;
1214	read_middle:
1215		if (unlikely(tlen != (hdrsize + pmtu + 4)))
1216			goto ack_len_err;
1217		if (unlikely(pmtu >= qp->s_rdma_read_len))
1218			goto ack_len_err;
1219
1220		/* We got a response so update the timeout. */
1221		spin_lock(&dev->pending_lock);
1222		if (qp->s_rnr_timeout == 0 && !list_empty(&qp->timerwait))
1223			list_move_tail(&qp->timerwait,
1224				       &dev->pending[dev->pending_index]);
1225		spin_unlock(&dev->pending_lock);
1226
1227		if (opcode == OP(RDMA_READ_RESPONSE_MIDDLE))
1228			qp->s_retry = qp->s_retry_cnt;
1229
1230		/*
1231		 * Update the RDMA receive state but do the copy w/o
1232		 * holding the locks and blocking interrupts.
1233		 */
1234		qp->s_rdma_read_len -= pmtu;
1235		update_last_psn(qp, psn);
1236		spin_unlock_irqrestore(&qp->s_lock, flags);
1237		ipath_copy_sge(&qp->s_rdma_read_sge, data, pmtu);
1238		goto bail;
1239
1240	case OP(RDMA_READ_RESPONSE_ONLY):
1241		if (!header_in_data)
1242			aeth = be32_to_cpu(ohdr->u.aeth);
1243		else
1244			aeth = be32_to_cpu(((__be32 *) data)[0]);
1245		if (!do_rc_ack(qp, aeth, psn, opcode, 0))
1246			goto ack_done;
1247		/* Get the number of bytes the message was padded by. */
1248		pad = (be32_to_cpu(ohdr->bth[0]) >> 20) & 3;
1249		/*
1250		 * Check that the data size is >= 0 && <= pmtu.
1251		 * Remember to account for the AETH header (4) and
1252		 * ICRC (4).
1253		 */
1254		if (unlikely(tlen < (hdrsize + pad + 8)))
1255			goto ack_len_err;
1256		/*
1257		 * If this is a response to a resent RDMA read, we
1258		 * have to be careful to copy the data to the right
1259		 * location.
1260		 */
1261		wqe = get_swqe_ptr(qp, qp->s_last);
1262		qp->s_rdma_read_len = restart_sge(&qp->s_rdma_read_sge,
1263						  wqe, psn, pmtu);
1264		goto read_last;
1265
1266	case OP(RDMA_READ_RESPONSE_LAST):
1267		/* ACKs READ req. */
1268		if (unlikely(ipath_cmp24(psn, qp->s_last_psn + 1))) {
1269			dev->n_rdma_seq++;
1270			if (qp->r_flags & IPATH_R_RDMAR_SEQ)
1271				goto ack_done;
1272			qp->r_flags |= IPATH_R_RDMAR_SEQ;
1273			ipath_restart_rc(qp, qp->s_last_psn + 1);
1274			goto ack_done;
1275		}
1276		if (unlikely(wqe->wr.opcode != IB_WR_RDMA_READ))
1277			goto ack_op_err;
1278		/* Get the number of bytes the message was padded by. */
1279		pad = (be32_to_cpu(ohdr->bth[0]) >> 20) & 3;
1280		/*
1281		 * Check that the data size is >= 1 && <= pmtu.
1282		 * Remember to account for the AETH header (4) and
1283		 * ICRC (4).
1284		 */
1285		if (unlikely(tlen <= (hdrsize + pad + 8)))
1286			goto ack_len_err;
1287	read_last:
1288		tlen -= hdrsize + pad + 8;
1289		if (unlikely(tlen != qp->s_rdma_read_len))
1290			goto ack_len_err;
1291		if (!header_in_data)
1292			aeth = be32_to_cpu(ohdr->u.aeth);
1293		else {
1294			aeth = be32_to_cpu(((__be32 *) data)[0]);
1295			data += sizeof(__be32);
1296		}
1297		ipath_copy_sge(&qp->s_rdma_read_sge, data, tlen);
1298		(void) do_rc_ack(qp, aeth, psn,
1299				 OP(RDMA_READ_RESPONSE_LAST), 0);
1300		goto ack_done;
1301	}
1302
1303ack_op_err:
1304	status = IB_WC_LOC_QP_OP_ERR;
1305	goto ack_err;
1306
1307ack_len_err:
1308	status = IB_WC_LOC_LEN_ERR;
1309ack_err:
1310	ipath_send_complete(qp, wqe, status);
1311	ipath_error_qp(qp, IB_WC_WR_FLUSH_ERR);
1312ack_done:
1313	spin_unlock_irqrestore(&qp->s_lock, flags);
1314bail:
1315	return;
1316}
1317
1318/**
1319 * ipath_rc_rcv_error - process an incoming duplicate or error RC packet
1320 * @dev: the device this packet came in on
1321 * @ohdr: the other headers for this packet
1322 * @data: the packet data
1323 * @qp: the QP for this packet
1324 * @opcode: the opcode for this packet
1325 * @psn: the packet sequence number for this packet
1326 * @diff: the difference between the PSN and the expected PSN
1327 * @header_in_data: true if part of the header data is in the data buffer
1328 *
1329 * This is called from ipath_rc_rcv() to process an unexpected
1330 * incoming RC packet for the given QP.
1331 * Called at interrupt level.
1332 * Return 1 if no more processing is needed; otherwise return 0 to
1333 * schedule a response to be sent.
1334 */
1335static inline int ipath_rc_rcv_error(struct ipath_ibdev *dev,
1336				     struct ipath_other_headers *ohdr,
1337				     void *data,
1338				     struct ipath_qp *qp,
1339				     u32 opcode,
1340				     u32 psn,
1341				     int diff,
1342				     int header_in_data)
1343{
1344	struct ipath_ack_entry *e;
1345	u8 i, prev;
1346	int old_req;
1347	unsigned long flags;
1348
1349	if (diff > 0) {
1350		/*
1351		 * Packet sequence error.
1352		 * A NAK will ACK earlier sends and RDMA writes.
1353		 * Don't queue the NAK if we already sent one.
1354		 */
1355		if (!qp->r_nak_state) {
1356			qp->r_nak_state = IB_NAK_PSN_ERROR;
1357			/* Use the expected PSN. */
1358			qp->r_ack_psn = qp->r_psn;
1359			goto send_ack;
1360		}
1361		goto done;
1362	}
1363
1364	/*
1365	 * Handle a duplicate request.  Don't re-execute SEND, RDMA
1366	 * write or atomic op.  Don't NAK errors, just silently drop
1367	 * the duplicate request.  Note that r_sge, r_len, and
1368	 * r_rcv_len may be in use so don't modify them.
1369	 *
1370	 * We are supposed to ACK the earliest duplicate PSN but we
1371	 * can coalesce an outstanding duplicate ACK.  We have to
1372	 * send the earliest so that RDMA reads can be restarted at
1373	 * the requester's expected PSN.
1374	 *
1375	 * First, find where this duplicate PSN falls within the
1376	 * ACKs previously sent.
1377	 */
1378	psn &= IPATH_PSN_MASK;
1379	e = NULL;
1380	old_req = 1;
1381
1382	spin_lock_irqsave(&qp->s_lock, flags);
1383	/* Double check we can process this now that we hold the s_lock. */
1384	if (!(ib_ipath_state_ops[qp->state] & IPATH_PROCESS_RECV_OK))
1385		goto unlock_done;
1386
1387	for (i = qp->r_head_ack_queue; ; i = prev) {
1388		if (i == qp->s_tail_ack_queue)
1389			old_req = 0;
1390		if (i)
1391			prev = i - 1;
1392		else
1393			prev = IPATH_MAX_RDMA_ATOMIC;
1394		if (prev == qp->r_head_ack_queue) {
1395			e = NULL;
1396			break;
1397		}
1398		e = &qp->s_ack_queue[prev];
1399		if (!e->opcode) {
1400			e = NULL;
1401			break;
1402		}
1403		if (ipath_cmp24(psn, e->psn) >= 0) {
1404			if (prev == qp->s_tail_ack_queue)
1405				old_req = 0;
1406			break;
1407		}
1408	}
1409	switch (opcode) {
1410	case OP(RDMA_READ_REQUEST): {
1411		struct ib_reth *reth;
1412		u32 offset;
1413		u32 len;
1414
1415		/*
1416		 * If we didn't find the RDMA read request in the ack queue,
1417		 * or the send tasklet is already backed up to send an
1418		 * earlier entry, we can ignore this request.
1419		 */
1420		if (!e || e->opcode != OP(RDMA_READ_REQUEST) || old_req)
1421			goto unlock_done;
1422		/* RETH comes after BTH */
1423		if (!header_in_data)
1424			reth = &ohdr->u.rc.reth;
1425		else {
1426			reth = (struct ib_reth *)data;
1427			data += sizeof(*reth);
1428		}
1429		/*
1430		 * Address range must be a subset of the original
1431		 * request and start on pmtu boundaries.
1432		 * We reuse the old ack_queue slot since the requester
1433		 * should not back up and request an earlier PSN for the
1434		 * same request.
1435		 */
1436		offset = ((psn - e->psn) & IPATH_PSN_MASK) *
1437			ib_mtu_enum_to_int(qp->path_mtu);
1438		len = be32_to_cpu(reth->length);
1439		if (unlikely(offset + len > e->rdma_sge.sge.sge_length))
1440			goto unlock_done;
1441		if (len != 0) {
1442			u32 rkey = be32_to_cpu(reth->rkey);
1443			u64 vaddr = be64_to_cpu(reth->vaddr);
1444			int ok;
1445
1446			ok = ipath_rkey_ok(qp, &e->rdma_sge,
1447					   len, vaddr, rkey,
1448					   IB_ACCESS_REMOTE_READ);
1449			if (unlikely(!ok))
1450				goto unlock_done;
1451		} else {
1452			e->rdma_sge.sg_list = NULL;
1453			e->rdma_sge.num_sge = 0;
1454			e->rdma_sge.sge.mr = NULL;
1455			e->rdma_sge.sge.vaddr = NULL;
1456			e->rdma_sge.sge.length = 0;
1457			e->rdma_sge.sge.sge_length = 0;
1458		}
1459		e->psn = psn;
1460		qp->s_ack_state = OP(ACKNOWLEDGE);
1461		qp->s_tail_ack_queue = prev;
1462		break;
1463	}
1464
1465	case OP(COMPARE_SWAP):
1466	case OP(FETCH_ADD): {
1467		/*
1468		 * If we didn't find the atomic request in the ack queue
1469		 * or the send tasklet is already backed up to send an
1470		 * earlier entry, we can ignore this request.
1471		 */
1472		if (!e || e->opcode != (u8) opcode || old_req)
1473			goto unlock_done;
1474		qp->s_ack_state = OP(ACKNOWLEDGE);
1475		qp->s_tail_ack_queue = prev;
1476		break;
1477	}
1478
1479	default:
1480		if (old_req)
1481			goto unlock_done;
1482		/*
1483		 * Resend the most recent ACK if this request is
1484		 * after all the previous RDMA reads and atomics.
1485		 */
1486		if (i == qp->r_head_ack_queue) {
1487			spin_unlock_irqrestore(&qp->s_lock, flags);
1488			qp->r_nak_state = 0;
1489			qp->r_ack_psn = qp->r_psn - 1;
1490			goto send_ack;
1491		}
1492		/*
1493		 * Try to send a simple ACK to work around a Mellanox bug
1494		 * which doesn't accept a RDMA read response or atomic
1495		 * response as an ACK for earlier SENDs or RDMA writes.
1496		 */
1497		if (qp->r_head_ack_queue == qp->s_tail_ack_queue &&
1498		    !(qp->s_flags & IPATH_S_ACK_PENDING) &&
1499		    qp->s_ack_state == OP(ACKNOWLEDGE)) {
1500			spin_unlock_irqrestore(&qp->s_lock, flags);
1501			qp->r_nak_state = 0;
1502			qp->r_ack_psn = qp->s_ack_queue[i].psn - 1;
1503			goto send_ack;
1504		}
1505		/*
1506		 * Resend the RDMA read or atomic op which
1507		 * ACKs this duplicate request.
1508		 */
1509		qp->s_ack_state = OP(ACKNOWLEDGE);
1510		qp->s_tail_ack_queue = i;
1511		break;
1512	}
1513	qp->r_nak_state = 0;
1514	ipath_schedule_send(qp);
1515
1516unlock_done:
1517	spin_unlock_irqrestore(&qp->s_lock, flags);
1518done:
1519	return 1;
1520
1521send_ack:
1522	return 0;
1523}
1524
1525void ipath_rc_error(struct ipath_qp *qp, enum ib_wc_status err)
1526{
1527	unsigned long flags;
1528	int lastwqe;
1529
1530	spin_lock_irqsave(&qp->s_lock, flags);
1531	lastwqe = ipath_error_qp(qp, err);
1532	spin_unlock_irqrestore(&qp->s_lock, flags);
1533
1534	if (lastwqe) {
1535		struct ib_event ev;
1536
1537		ev.device = qp->ibqp.device;
1538		ev.element.qp = &qp->ibqp;
1539		ev.event = IB_EVENT_QP_LAST_WQE_REACHED;
1540		qp->ibqp.event_handler(&ev, qp->ibqp.qp_context);
1541	}
1542}
1543
1544static inline void ipath_update_ack_queue(struct ipath_qp *qp, unsigned n)
1545{
1546	unsigned next;
1547
1548	next = n + 1;
1549	if (next > IPATH_MAX_RDMA_ATOMIC)
1550		next = 0;
1551	if (n == qp->s_tail_ack_queue) {
1552		qp->s_tail_ack_queue = next;
1553		qp->s_ack_state = OP(ACKNOWLEDGE);
1554	}
1555}
1556
1557/**
1558 * ipath_rc_rcv - process an incoming RC packet
1559 * @dev: the device this packet came in on
1560 * @hdr: the header of this packet
1561 * @has_grh: true if the header has a GRH
1562 * @data: the packet data
1563 * @tlen: the packet length
1564 * @qp: the QP for this packet
1565 *
1566 * This is called from ipath_qp_rcv() to process an incoming RC packet
1567 * for the given QP.
1568 * Called at interrupt level.
1569 */
1570void ipath_rc_rcv(struct ipath_ibdev *dev, struct ipath_ib_header *hdr,
1571		  int has_grh, void *data, u32 tlen, struct ipath_qp *qp)
1572{
1573	struct ipath_other_headers *ohdr;
1574	u32 opcode;
1575	u32 hdrsize;
1576	u32 psn;
1577	u32 pad;
1578	struct ib_wc wc;
1579	u32 pmtu = ib_mtu_enum_to_int(qp->path_mtu);
1580	int diff;
1581	struct ib_reth *reth;
1582	int header_in_data;
1583	unsigned long flags;
1584
1585	/* Validate the SLID. See Ch. 9.6.1.5 */
1586	if (unlikely(be16_to_cpu(hdr->lrh[3]) != qp->remote_ah_attr.dlid))
1587		goto done;
1588
1589	/* Check for GRH */
1590	if (!has_grh) {
1591		ohdr = &hdr->u.oth;
1592		hdrsize = 8 + 12;	/* LRH + BTH */
1593		psn = be32_to_cpu(ohdr->bth[2]);
1594		header_in_data = 0;
1595	} else {
1596		ohdr = &hdr->u.l.oth;
1597		hdrsize = 8 + 40 + 12;	/* LRH + GRH + BTH */
1598		/*
1599		 * The header with GRH is 60 bytes and the core driver sets
1600		 * the eager header buffer size to 56 bytes so the last 4
1601		 * bytes of the BTH header (PSN) is in the data buffer.
1602		 */
1603		header_in_data = dev->dd->ipath_rcvhdrentsize == 16;
1604		if (header_in_data) {
1605			psn = be32_to_cpu(((__be32 *) data)[0]);
1606			data += sizeof(__be32);
1607		} else
1608			psn = be32_to_cpu(ohdr->bth[2]);
1609	}
1610
1611	/*
1612	 * Process responses (ACKs) before anything else.  Note that the
1613	 * packet sequence number will be for something in the send work
1614	 * queue rather than the expected receive packet sequence number.
1615	 * In other words, this QP is the requester.
1616	 */
1617	opcode = be32_to_cpu(ohdr->bth[0]) >> 24;
1618	if (opcode >= OP(RDMA_READ_RESPONSE_FIRST) &&
1619	    opcode <= OP(ATOMIC_ACKNOWLEDGE)) {
1620		ipath_rc_rcv_resp(dev, ohdr, data, tlen, qp, opcode, psn,
1621				  hdrsize, pmtu, header_in_data);
1622		goto done;
1623	}
1624
1625	/* Compute 24 bits worth of difference. */
1626	diff = ipath_cmp24(psn, qp->r_psn);
1627	if (unlikely(diff)) {
1628		if (ipath_rc_rcv_error(dev, ohdr, data, qp, opcode,
1629				       psn, diff, header_in_data))
1630			goto done;
1631		goto send_ack;
1632	}
1633
1634	/* Check for opcode sequence errors. */
1635	switch (qp->r_state) {
1636	case OP(SEND_FIRST):
1637	case OP(SEND_MIDDLE):
1638		if (opcode == OP(SEND_MIDDLE) ||
1639		    opcode == OP(SEND_LAST) ||
1640		    opcode == OP(SEND_LAST_WITH_IMMEDIATE))
1641			break;
1642		goto nack_inv;
1643
1644	case OP(RDMA_WRITE_FIRST):
1645	case OP(RDMA_WRITE_MIDDLE):
1646		if (opcode == OP(RDMA_WRITE_MIDDLE) ||
1647		    opcode == OP(RDMA_WRITE_LAST) ||
1648		    opcode == OP(RDMA_WRITE_LAST_WITH_IMMEDIATE))
1649			break;
1650		goto nack_inv;
1651
1652	default:
1653		if (opcode == OP(SEND_MIDDLE) ||
1654		    opcode == OP(SEND_LAST) ||
1655		    opcode == OP(SEND_LAST_WITH_IMMEDIATE) ||
1656		    opcode == OP(RDMA_WRITE_MIDDLE) ||
1657		    opcode == OP(RDMA_WRITE_LAST) ||
1658		    opcode == OP(RDMA_WRITE_LAST_WITH_IMMEDIATE))
1659			goto nack_inv;
1660		/*
1661		 * Note that it is up to the requester to not send a new
1662		 * RDMA read or atomic operation before receiving an ACK
1663		 * for the previous operation.
1664		 */
1665		break;
1666	}
1667
1668	memset(&wc, 0, sizeof wc);
1669
1670	/* OK, process the packet. */
1671	switch (opcode) {
1672	case OP(SEND_FIRST):
1673		if (!ipath_get_rwqe(qp, 0))
1674			goto rnr_nak;
1675		qp->r_rcv_len = 0;
1676		/* FALLTHROUGH */
1677	case OP(SEND_MIDDLE):
1678	case OP(RDMA_WRITE_MIDDLE):
1679	send_middle:
1680		/* Check for invalid length PMTU or posted rwqe len. */
1681		if (unlikely(tlen != (hdrsize + pmtu + 4)))
1682			goto nack_inv;
1683		qp->r_rcv_len += pmtu;
1684		if (unlikely(qp->r_rcv_len > qp->r_len))
1685			goto nack_inv;
1686		ipath_copy_sge(&qp->r_sge, data, pmtu);
1687		break;
1688
1689	case OP(RDMA_WRITE_LAST_WITH_IMMEDIATE):
1690		/* consume RWQE */
1691		if (!ipath_get_rwqe(qp, 1))
1692			goto rnr_nak;
1693		goto send_last_imm;
1694
1695	case OP(SEND_ONLY):
1696	case OP(SEND_ONLY_WITH_IMMEDIATE):
1697		if (!ipath_get_rwqe(qp, 0))
1698			goto rnr_nak;
1699		qp->r_rcv_len = 0;
1700		if (opcode == OP(SEND_ONLY))
1701			goto send_last;
1702		/* FALLTHROUGH */
1703	case OP(SEND_LAST_WITH_IMMEDIATE):
1704	send_last_imm:
1705		if (header_in_data) {
1706			wc.ex.imm_data = *(__be32 *) data;
1707			data += sizeof(__be32);
1708		} else {
1709			/* Immediate data comes after BTH */
1710			wc.ex.imm_data = ohdr->u.imm_data;
1711		}
1712		hdrsize += 4;
1713		wc.wc_flags = IB_WC_WITH_IMM;
1714		/* FALLTHROUGH */
1715	case OP(SEND_LAST):
1716	case OP(RDMA_WRITE_LAST):
1717	send_last:
1718		/* Get the number of bytes the message was padded by. */
1719		pad = (be32_to_cpu(ohdr->bth[0]) >> 20) & 3;
1720		/* Check for invalid length. */
1721		/* XXX LAST len should be >= 1 */
1722		if (unlikely(tlen < (hdrsize + pad + 4)))
1723			goto nack_inv;
1724		/* Don't count the CRC. */
1725		tlen -= (hdrsize + pad + 4);
1726		wc.byte_len = tlen + qp->r_rcv_len;
1727		if (unlikely(wc.byte_len > qp->r_len))
1728			goto nack_inv;
1729		ipath_copy_sge(&qp->r_sge, data, tlen);
1730		qp->r_msn++;
1731		if (!test_and_clear_bit(IPATH_R_WRID_VALID, &qp->r_aflags))
1732			break;
1733		wc.wr_id = qp->r_wr_id;
1734		wc.status = IB_WC_SUCCESS;
1735		if (opcode == OP(RDMA_WRITE_LAST_WITH_IMMEDIATE) ||
1736		    opcode == OP(RDMA_WRITE_ONLY_WITH_IMMEDIATE))
1737			wc.opcode = IB_WC_RECV_RDMA_WITH_IMM;
1738		else
1739			wc.opcode = IB_WC_RECV;
1740		wc.qp = &qp->ibqp;
1741		wc.src_qp = qp->remote_qpn;
1742		wc.slid = qp->remote_ah_attr.dlid;
1743		wc.sl = qp->remote_ah_attr.sl;
1744		/* Signal completion event if the solicited bit is set. */
1745		ipath_cq_enter(to_icq(qp->ibqp.recv_cq), &wc,
1746			       (ohdr->bth[0] &
1747				cpu_to_be32(1 << 23)) != 0);
1748		break;
1749
1750	case OP(RDMA_WRITE_FIRST):
1751	case OP(RDMA_WRITE_ONLY):
1752	case OP(RDMA_WRITE_ONLY_WITH_IMMEDIATE):
1753		if (unlikely(!(qp->qp_access_flags &
1754			       IB_ACCESS_REMOTE_WRITE)))
1755			goto nack_inv;
1756		/* consume RWQE */
1757		/* RETH comes after BTH */
1758		if (!header_in_data)
1759			reth = &ohdr->u.rc.reth;
1760		else {
1761			reth = (struct ib_reth *)data;
1762			data += sizeof(*reth);
1763		}
1764		hdrsize += sizeof(*reth);
1765		qp->r_len = be32_to_cpu(reth->length);
1766		qp->r_rcv_len = 0;
1767		if (qp->r_len != 0) {
1768			u32 rkey = be32_to_cpu(reth->rkey);
1769			u64 vaddr = be64_to_cpu(reth->vaddr);
1770			int ok;
1771
1772			/* Check rkey & NAK */
1773			ok = ipath_rkey_ok(qp, &qp->r_sge,
1774					   qp->r_len, vaddr, rkey,
1775					   IB_ACCESS_REMOTE_WRITE);
1776			if (unlikely(!ok))
1777				goto nack_acc;
1778		} else {
1779			qp->r_sge.sg_list = NULL;
1780			qp->r_sge.sge.mr = NULL;
1781			qp->r_sge.sge.vaddr = NULL;
1782			qp->r_sge.sge.length = 0;
1783			qp->r_sge.sge.sge_length = 0;
1784		}
1785		if (opcode == OP(RDMA_WRITE_FIRST))
1786			goto send_middle;
1787		else if (opcode == OP(RDMA_WRITE_ONLY))
1788			goto send_last;
1789		if (!ipath_get_rwqe(qp, 1))
1790			goto rnr_nak;
1791		goto send_last_imm;
1792
1793	case OP(RDMA_READ_REQUEST): {
1794		struct ipath_ack_entry *e;
1795		u32 len;
1796		u8 next;
1797
1798		if (unlikely(!(qp->qp_access_flags &
1799			       IB_ACCESS_REMOTE_READ)))
1800			goto nack_inv;
1801		next = qp->r_head_ack_queue + 1;
1802		if (next > IPATH_MAX_RDMA_ATOMIC)
1803			next = 0;
1804		spin_lock_irqsave(&qp->s_lock, flags);
1805		/* Double check we can process this while holding the s_lock. */
1806		if (!(ib_ipath_state_ops[qp->state] & IPATH_PROCESS_RECV_OK))
1807			goto unlock;
1808		if (unlikely(next == qp->s_tail_ack_queue)) {
1809			if (!qp->s_ack_queue[next].sent)
1810				goto nack_inv_unlck;
1811			ipath_update_ack_queue(qp, next);
1812		}
1813		e = &qp->s_ack_queue[qp->r_head_ack_queue];
1814		/* RETH comes after BTH */
1815		if (!header_in_data)
1816			reth = &ohdr->u.rc.reth;
1817		else {
1818			reth = (struct ib_reth *)data;
1819			data += sizeof(*reth);
1820		}
1821		len = be32_to_cpu(reth->length);
1822		if (len) {
1823			u32 rkey = be32_to_cpu(reth->rkey);
1824			u64 vaddr = be64_to_cpu(reth->vaddr);
1825			int ok;
1826
1827			/* Check rkey & NAK */
1828			ok = ipath_rkey_ok(qp, &e->rdma_sge, len, vaddr,
1829					   rkey, IB_ACCESS_REMOTE_READ);
1830			if (unlikely(!ok))
1831				goto nack_acc_unlck;
1832			/*
1833			 * Update the next expected PSN.  We add 1 later
1834			 * below, so only add the remainder here.
1835			 */
1836			if (len > pmtu)
1837				qp->r_psn += (len - 1) / pmtu;
1838		} else {
1839			e->rdma_sge.sg_list = NULL;
1840			e->rdma_sge.num_sge = 0;
1841			e->rdma_sge.sge.mr = NULL;
1842			e->rdma_sge.sge.vaddr = NULL;
1843			e->rdma_sge.sge.length = 0;
1844			e->rdma_sge.sge.sge_length = 0;
1845		}
1846		e->opcode = opcode;
1847		e->sent = 0;
1848		e->psn = psn;
1849		/*
1850		 * We need to increment the MSN here instead of when we
1851		 * finish sending the result since a duplicate request would
1852		 * increment it more than once.
1853		 */
1854		qp->r_msn++;
1855		qp->r_psn++;
1856		qp->r_state = opcode;
1857		qp->r_nak_state = 0;
1858		qp->r_head_ack_queue = next;
1859
1860		/* Schedule the send tasklet. */
1861		ipath_schedule_send(qp);
1862
1863		goto unlock;
1864	}
1865
1866	case OP(COMPARE_SWAP):
1867	case OP(FETCH_ADD): {
1868		struct ib_atomic_eth *ateth;
1869		struct ipath_ack_entry *e;
1870		u64 vaddr;
1871		atomic64_t *maddr;
1872		u64 sdata;
1873		u32 rkey;
1874		u8 next;
1875
1876		if (unlikely(!(qp->qp_access_flags &
1877			       IB_ACCESS_REMOTE_ATOMIC)))
1878			goto nack_inv;
1879		next = qp->r_head_ack_queue + 1;
1880		if (next > IPATH_MAX_RDMA_ATOMIC)
1881			next = 0;
1882		spin_lock_irqsave(&qp->s_lock, flags);
1883		/* Double check we can process this while holding the s_lock. */
1884		if (!(ib_ipath_state_ops[qp->state] & IPATH_PROCESS_RECV_OK))
1885			goto unlock;
1886		if (unlikely(next == qp->s_tail_ack_queue)) {
1887			if (!qp->s_ack_queue[next].sent)
1888				goto nack_inv_unlck;
1889			ipath_update_ack_queue(qp, next);
1890		}
1891		if (!header_in_data)
1892			ateth = &ohdr->u.atomic_eth;
1893		else
1894			ateth = (struct ib_atomic_eth *)data;
1895		vaddr = ((u64) be32_to_cpu(ateth->vaddr[0]) << 32) |
1896			be32_to_cpu(ateth->vaddr[1]);
1897		if (unlikely(vaddr & (sizeof(u64) - 1)))
1898			goto nack_inv_unlck;
1899		rkey = be32_to_cpu(ateth->rkey);
1900		/* Check rkey & NAK */
1901		if (unlikely(!ipath_rkey_ok(qp, &qp->r_sge,
1902					    sizeof(u64), vaddr, rkey,
1903					    IB_ACCESS_REMOTE_ATOMIC)))
1904			goto nack_acc_unlck;
1905		/* Perform atomic OP and save result. */
1906		maddr = (atomic64_t *) qp->r_sge.sge.vaddr;
1907		sdata = be64_to_cpu(ateth->swap_data);
1908		e = &qp->s_ack_queue[qp->r_head_ack_queue];
1909		e->atomic_data = (opcode == OP(FETCH_ADD)) ?
1910			(u64) atomic64_add_return(sdata, maddr) - sdata :
1911			(u64) cmpxchg((u64 *) qp->r_sge.sge.vaddr,
1912				      be64_to_cpu(ateth->compare_data),
1913				      sdata);
1914		e->opcode = opcode;
1915		e->sent = 0;
1916		e->psn = psn & IPATH_PSN_MASK;
1917		qp->r_msn++;
1918		qp->r_psn++;
1919		qp->r_state = opcode;
1920		qp->r_nak_state = 0;
1921		qp->r_head_ack_queue = next;
1922
1923		/* Schedule the send tasklet. */
1924		ipath_schedule_send(qp);
1925
1926		goto unlock;
1927	}
1928
1929	default:
1930		/* NAK unknown opcodes. */
1931		goto nack_inv;
1932	}
1933	qp->r_psn++;
1934	qp->r_state = opcode;
1935	qp->r_ack_psn = psn;
1936	qp->r_nak_state = 0;
1937	/* Send an ACK if requested or required. */
1938	if (psn & (1 << 31))
1939		goto send_ack;
1940	goto done;
1941
1942rnr_nak:
1943	qp->r_nak_state = IB_RNR_NAK | qp->r_min_rnr_timer;
1944	qp->r_ack_psn = qp->r_psn;
1945	goto send_ack;
1946
1947nack_inv_unlck:
1948	spin_unlock_irqrestore(&qp->s_lock, flags);
1949nack_inv:
1950	ipath_rc_error(qp, IB_WC_LOC_QP_OP_ERR);
1951	qp->r_nak_state = IB_NAK_INVALID_REQUEST;
1952	qp->r_ack_psn = qp->r_psn;
1953	goto send_ack;
1954
1955nack_acc_unlck:
1956	spin_unlock_irqrestore(&qp->s_lock, flags);
1957nack_acc:
1958	ipath_rc_error(qp, IB_WC_LOC_PROT_ERR);
1959	qp->r_nak_state = IB_NAK_REMOTE_ACCESS_ERROR;
1960	qp->r_ack_psn = qp->r_psn;
1961send_ack:
1962	send_rc_ack(qp);
1963	goto done;
1964
1965unlock:
1966	spin_unlock_irqrestore(&qp->s_lock, flags);
1967done:
1968	return;
1969}
1970