xref: /openbmc/linux/arch/sparc/kernel/ldc.c (revision c12f048f)
1 /* ldc.c: Logical Domain Channel link-layer protocol driver.
2  *
3  * Copyright (C) 2007, 2008 David S. Miller <davem@davemloft.net>
4  */
5 
6 #include <linux/kernel.h>
7 #include <linux/export.h>
8 #include <linux/slab.h>
9 #include <linux/spinlock.h>
10 #include <linux/delay.h>
11 #include <linux/errno.h>
12 #include <linux/string.h>
13 #include <linux/scatterlist.h>
14 #include <linux/interrupt.h>
15 #include <linux/list.h>
16 #include <linux/init.h>
17 #include <linux/bitmap.h>
18 
19 #include <asm/hypervisor.h>
20 #include <asm/iommu.h>
21 #include <asm/page.h>
22 #include <asm/ldc.h>
23 #include <asm/mdesc.h>
24 
25 #define DRV_MODULE_NAME		"ldc"
26 #define PFX DRV_MODULE_NAME	": "
27 #define DRV_MODULE_VERSION	"1.1"
28 #define DRV_MODULE_RELDATE	"July 22, 2008"
29 
30 static char version[] =
31 	DRV_MODULE_NAME ".c:v" DRV_MODULE_VERSION " (" DRV_MODULE_RELDATE ")\n";
32 #define LDC_PACKET_SIZE		64
33 
34 /* Packet header layout for unreliable and reliable mode frames.
35  * When in RAW mode, packets are simply straight 64-byte payloads
36  * with no headers.
37  */
38 struct ldc_packet {
39 	u8			type;
40 #define LDC_CTRL		0x01
41 #define LDC_DATA		0x02
42 #define LDC_ERR			0x10
43 
44 	u8			stype;
45 #define LDC_INFO		0x01
46 #define LDC_ACK			0x02
47 #define LDC_NACK		0x04
48 
49 	u8			ctrl;
50 #define LDC_VERS		0x01 /* Link Version		*/
51 #define LDC_RTS			0x02 /* Request To Send		*/
52 #define LDC_RTR			0x03 /* Ready To Receive	*/
53 #define LDC_RDX			0x04 /* Ready for Data eXchange	*/
54 #define LDC_CTRL_MSK		0x0f
55 
56 	u8			env;
57 #define LDC_LEN			0x3f
58 #define LDC_FRAG_MASK		0xc0
59 #define LDC_START		0x40
60 #define LDC_STOP		0x80
61 
62 	u32			seqid;
63 
64 	union {
65 		u8		u_data[LDC_PACKET_SIZE - 8];
66 		struct {
67 			u32	pad;
68 			u32	ackid;
69 			u8	r_data[LDC_PACKET_SIZE - 8 - 8];
70 		} r;
71 	} u;
72 };
73 
74 struct ldc_version {
75 	u16 major;
76 	u16 minor;
77 };
78 
79 /* Ordered from largest major to lowest.  */
80 static struct ldc_version ver_arr[] = {
81 	{ .major = 1, .minor = 0 },
82 };
83 
84 #define LDC_DEFAULT_MTU			(4 * LDC_PACKET_SIZE)
85 #define LDC_DEFAULT_NUM_ENTRIES		(PAGE_SIZE / LDC_PACKET_SIZE)
86 
87 struct ldc_channel;
88 
89 struct ldc_mode_ops {
90 	int (*write)(struct ldc_channel *, const void *, unsigned int);
91 	int (*read)(struct ldc_channel *, void *, unsigned int);
92 };
93 
94 static const struct ldc_mode_ops raw_ops;
95 static const struct ldc_mode_ops nonraw_ops;
96 static const struct ldc_mode_ops stream_ops;
97 
98 int ldom_domaining_enabled;
99 
100 struct ldc_iommu {
101 	/* Protects arena alloc/free.  */
102 	spinlock_t			lock;
103 	struct iommu_arena		arena;
104 	struct ldc_mtable_entry		*page_table;
105 };
106 
107 struct ldc_channel {
108 	/* Protects all operations that depend upon channel state.  */
109 	spinlock_t			lock;
110 
111 	unsigned long			id;
112 
113 	u8				*mssbuf;
114 	u32				mssbuf_len;
115 	u32				mssbuf_off;
116 
117 	struct ldc_packet		*tx_base;
118 	unsigned long			tx_head;
119 	unsigned long			tx_tail;
120 	unsigned long			tx_num_entries;
121 	unsigned long			tx_ra;
122 
123 	unsigned long			tx_acked;
124 
125 	struct ldc_packet		*rx_base;
126 	unsigned long			rx_head;
127 	unsigned long			rx_tail;
128 	unsigned long			rx_num_entries;
129 	unsigned long			rx_ra;
130 
131 	u32				rcv_nxt;
132 	u32				snd_nxt;
133 
134 	unsigned long			chan_state;
135 
136 	struct ldc_channel_config	cfg;
137 	void				*event_arg;
138 
139 	const struct ldc_mode_ops	*mops;
140 
141 	struct ldc_iommu		iommu;
142 
143 	struct ldc_version		ver;
144 
145 	u8				hs_state;
146 #define LDC_HS_CLOSED			0x00
147 #define LDC_HS_OPEN			0x01
148 #define LDC_HS_GOTVERS			0x02
149 #define LDC_HS_SENTRTR			0x03
150 #define LDC_HS_GOTRTR			0x04
151 #define LDC_HS_COMPLETE			0x10
152 
153 	u8				flags;
154 #define LDC_FLAG_ALLOCED_QUEUES		0x01
155 #define LDC_FLAG_REGISTERED_QUEUES	0x02
156 #define LDC_FLAG_REGISTERED_IRQS	0x04
157 #define LDC_FLAG_RESET			0x10
158 
159 	u8				mss;
160 	u8				state;
161 
162 #define LDC_IRQ_NAME_MAX		32
163 	char				rx_irq_name[LDC_IRQ_NAME_MAX];
164 	char				tx_irq_name[LDC_IRQ_NAME_MAX];
165 
166 	struct hlist_head		mh_list;
167 
168 	struct hlist_node		list;
169 };
170 
171 #define ldcdbg(TYPE, f, a...) \
172 do {	if (lp->cfg.debug & LDC_DEBUG_##TYPE) \
173 		printk(KERN_INFO PFX "ID[%lu] " f, lp->id, ## a); \
174 } while (0)
175 
176 static const char *state_to_str(u8 state)
177 {
178 	switch (state) {
179 	case LDC_STATE_INVALID:
180 		return "INVALID";
181 	case LDC_STATE_INIT:
182 		return "INIT";
183 	case LDC_STATE_BOUND:
184 		return "BOUND";
185 	case LDC_STATE_READY:
186 		return "READY";
187 	case LDC_STATE_CONNECTED:
188 		return "CONNECTED";
189 	default:
190 		return "<UNKNOWN>";
191 	}
192 }
193 
194 static void ldc_set_state(struct ldc_channel *lp, u8 state)
195 {
196 	ldcdbg(STATE, "STATE (%s) --> (%s)\n",
197 	       state_to_str(lp->state),
198 	       state_to_str(state));
199 
200 	lp->state = state;
201 }
202 
203 static unsigned long __advance(unsigned long off, unsigned long num_entries)
204 {
205 	off += LDC_PACKET_SIZE;
206 	if (off == (num_entries * LDC_PACKET_SIZE))
207 		off = 0;
208 
209 	return off;
210 }
211 
212 static unsigned long rx_advance(struct ldc_channel *lp, unsigned long off)
213 {
214 	return __advance(off, lp->rx_num_entries);
215 }
216 
217 static unsigned long tx_advance(struct ldc_channel *lp, unsigned long off)
218 {
219 	return __advance(off, lp->tx_num_entries);
220 }
221 
222 static struct ldc_packet *handshake_get_tx_packet(struct ldc_channel *lp,
223 						  unsigned long *new_tail)
224 {
225 	struct ldc_packet *p;
226 	unsigned long t;
227 
228 	t = tx_advance(lp, lp->tx_tail);
229 	if (t == lp->tx_head)
230 		return NULL;
231 
232 	*new_tail = t;
233 
234 	p = lp->tx_base;
235 	return p + (lp->tx_tail / LDC_PACKET_SIZE);
236 }
237 
238 /* When we are in reliable or stream mode, have to track the next packet
239  * we haven't gotten an ACK for in the TX queue using tx_acked.  We have
240  * to be careful not to stomp over the queue past that point.  During
241  * the handshake, we don't have TX data packets pending in the queue
242  * and that's why handshake_get_tx_packet() need not be mindful of
243  * lp->tx_acked.
244  */
245 static unsigned long head_for_data(struct ldc_channel *lp)
246 {
247 	if (lp->cfg.mode == LDC_MODE_STREAM)
248 		return lp->tx_acked;
249 	return lp->tx_head;
250 }
251 
252 static int tx_has_space_for(struct ldc_channel *lp, unsigned int size)
253 {
254 	unsigned long limit, tail, new_tail, diff;
255 	unsigned int mss;
256 
257 	limit = head_for_data(lp);
258 	tail = lp->tx_tail;
259 	new_tail = tx_advance(lp, tail);
260 	if (new_tail == limit)
261 		return 0;
262 
263 	if (limit > new_tail)
264 		diff = limit - new_tail;
265 	else
266 		diff = (limit +
267 			((lp->tx_num_entries * LDC_PACKET_SIZE) - new_tail));
268 	diff /= LDC_PACKET_SIZE;
269 	mss = lp->mss;
270 
271 	if (diff * mss < size)
272 		return 0;
273 
274 	return 1;
275 }
276 
277 static struct ldc_packet *data_get_tx_packet(struct ldc_channel *lp,
278 					     unsigned long *new_tail)
279 {
280 	struct ldc_packet *p;
281 	unsigned long h, t;
282 
283 	h = head_for_data(lp);
284 	t = tx_advance(lp, lp->tx_tail);
285 	if (t == h)
286 		return NULL;
287 
288 	*new_tail = t;
289 
290 	p = lp->tx_base;
291 	return p + (lp->tx_tail / LDC_PACKET_SIZE);
292 }
293 
294 static int set_tx_tail(struct ldc_channel *lp, unsigned long tail)
295 {
296 	unsigned long orig_tail = lp->tx_tail;
297 	int limit = 1000;
298 
299 	lp->tx_tail = tail;
300 	while (limit-- > 0) {
301 		unsigned long err;
302 
303 		err = sun4v_ldc_tx_set_qtail(lp->id, tail);
304 		if (!err)
305 			return 0;
306 
307 		if (err != HV_EWOULDBLOCK) {
308 			lp->tx_tail = orig_tail;
309 			return -EINVAL;
310 		}
311 		udelay(1);
312 	}
313 
314 	lp->tx_tail = orig_tail;
315 	return -EBUSY;
316 }
317 
318 /* This just updates the head value in the hypervisor using
319  * a polling loop with a timeout.  The caller takes care of
320  * upating software state representing the head change, if any.
321  */
322 static int __set_rx_head(struct ldc_channel *lp, unsigned long head)
323 {
324 	int limit = 1000;
325 
326 	while (limit-- > 0) {
327 		unsigned long err;
328 
329 		err = sun4v_ldc_rx_set_qhead(lp->id, head);
330 		if (!err)
331 			return 0;
332 
333 		if (err != HV_EWOULDBLOCK)
334 			return -EINVAL;
335 
336 		udelay(1);
337 	}
338 
339 	return -EBUSY;
340 }
341 
342 static int send_tx_packet(struct ldc_channel *lp,
343 			  struct ldc_packet *p,
344 			  unsigned long new_tail)
345 {
346 	BUG_ON(p != (lp->tx_base + (lp->tx_tail / LDC_PACKET_SIZE)));
347 
348 	return set_tx_tail(lp, new_tail);
349 }
350 
351 static struct ldc_packet *handshake_compose_ctrl(struct ldc_channel *lp,
352 						 u8 stype, u8 ctrl,
353 						 void *data, int dlen,
354 						 unsigned long *new_tail)
355 {
356 	struct ldc_packet *p = handshake_get_tx_packet(lp, new_tail);
357 
358 	if (p) {
359 		memset(p, 0, sizeof(*p));
360 		p->type = LDC_CTRL;
361 		p->stype = stype;
362 		p->ctrl = ctrl;
363 		if (data)
364 			memcpy(p->u.u_data, data, dlen);
365 	}
366 	return p;
367 }
368 
369 static int start_handshake(struct ldc_channel *lp)
370 {
371 	struct ldc_packet *p;
372 	struct ldc_version *ver;
373 	unsigned long new_tail;
374 
375 	ver = &ver_arr[0];
376 
377 	ldcdbg(HS, "SEND VER INFO maj[%u] min[%u]\n",
378 	       ver->major, ver->minor);
379 
380 	p = handshake_compose_ctrl(lp, LDC_INFO, LDC_VERS,
381 				   ver, sizeof(*ver), &new_tail);
382 	if (p) {
383 		int err = send_tx_packet(lp, p, new_tail);
384 		if (!err)
385 			lp->flags &= ~LDC_FLAG_RESET;
386 		return err;
387 	}
388 	return -EBUSY;
389 }
390 
391 static int send_version_nack(struct ldc_channel *lp,
392 			     u16 major, u16 minor)
393 {
394 	struct ldc_packet *p;
395 	struct ldc_version ver;
396 	unsigned long new_tail;
397 
398 	ver.major = major;
399 	ver.minor = minor;
400 
401 	p = handshake_compose_ctrl(lp, LDC_NACK, LDC_VERS,
402 				   &ver, sizeof(ver), &new_tail);
403 	if (p) {
404 		ldcdbg(HS, "SEND VER NACK maj[%u] min[%u]\n",
405 		       ver.major, ver.minor);
406 
407 		return send_tx_packet(lp, p, new_tail);
408 	}
409 	return -EBUSY;
410 }
411 
412 static int send_version_ack(struct ldc_channel *lp,
413 			    struct ldc_version *vp)
414 {
415 	struct ldc_packet *p;
416 	unsigned long new_tail;
417 
418 	p = handshake_compose_ctrl(lp, LDC_ACK, LDC_VERS,
419 				   vp, sizeof(*vp), &new_tail);
420 	if (p) {
421 		ldcdbg(HS, "SEND VER ACK maj[%u] min[%u]\n",
422 		       vp->major, vp->minor);
423 
424 		return send_tx_packet(lp, p, new_tail);
425 	}
426 	return -EBUSY;
427 }
428 
429 static int send_rts(struct ldc_channel *lp)
430 {
431 	struct ldc_packet *p;
432 	unsigned long new_tail;
433 
434 	p = handshake_compose_ctrl(lp, LDC_INFO, LDC_RTS, NULL, 0,
435 				   &new_tail);
436 	if (p) {
437 		p->env = lp->cfg.mode;
438 		p->seqid = 0;
439 		lp->rcv_nxt = 0;
440 
441 		ldcdbg(HS, "SEND RTS env[0x%x] seqid[0x%x]\n",
442 		       p->env, p->seqid);
443 
444 		return send_tx_packet(lp, p, new_tail);
445 	}
446 	return -EBUSY;
447 }
448 
449 static int send_rtr(struct ldc_channel *lp)
450 {
451 	struct ldc_packet *p;
452 	unsigned long new_tail;
453 
454 	p = handshake_compose_ctrl(lp, LDC_INFO, LDC_RTR, NULL, 0,
455 				   &new_tail);
456 	if (p) {
457 		p->env = lp->cfg.mode;
458 		p->seqid = 0;
459 
460 		ldcdbg(HS, "SEND RTR env[0x%x] seqid[0x%x]\n",
461 		       p->env, p->seqid);
462 
463 		return send_tx_packet(lp, p, new_tail);
464 	}
465 	return -EBUSY;
466 }
467 
468 static int send_rdx(struct ldc_channel *lp)
469 {
470 	struct ldc_packet *p;
471 	unsigned long new_tail;
472 
473 	p = handshake_compose_ctrl(lp, LDC_INFO, LDC_RDX, NULL, 0,
474 				   &new_tail);
475 	if (p) {
476 		p->env = 0;
477 		p->seqid = ++lp->snd_nxt;
478 		p->u.r.ackid = lp->rcv_nxt;
479 
480 		ldcdbg(HS, "SEND RDX env[0x%x] seqid[0x%x] ackid[0x%x]\n",
481 		       p->env, p->seqid, p->u.r.ackid);
482 
483 		return send_tx_packet(lp, p, new_tail);
484 	}
485 	return -EBUSY;
486 }
487 
488 static int send_data_nack(struct ldc_channel *lp, struct ldc_packet *data_pkt)
489 {
490 	struct ldc_packet *p;
491 	unsigned long new_tail;
492 	int err;
493 
494 	p = data_get_tx_packet(lp, &new_tail);
495 	if (!p)
496 		return -EBUSY;
497 	memset(p, 0, sizeof(*p));
498 	p->type = data_pkt->type;
499 	p->stype = LDC_NACK;
500 	p->ctrl = data_pkt->ctrl & LDC_CTRL_MSK;
501 	p->seqid = lp->snd_nxt + 1;
502 	p->u.r.ackid = lp->rcv_nxt;
503 
504 	ldcdbg(HS, "SEND DATA NACK type[0x%x] ctl[0x%x] seq[0x%x] ack[0x%x]\n",
505 	       p->type, p->ctrl, p->seqid, p->u.r.ackid);
506 
507 	err = send_tx_packet(lp, p, new_tail);
508 	if (!err)
509 		lp->snd_nxt++;
510 
511 	return err;
512 }
513 
514 static int ldc_abort(struct ldc_channel *lp)
515 {
516 	unsigned long hv_err;
517 
518 	ldcdbg(STATE, "ABORT\n");
519 
520 	/* We report but do not act upon the hypervisor errors because
521 	 * there really isn't much we can do if they fail at this point.
522 	 */
523 	hv_err = sun4v_ldc_tx_qconf(lp->id, lp->tx_ra, lp->tx_num_entries);
524 	if (hv_err)
525 		printk(KERN_ERR PFX "ldc_abort: "
526 		       "sun4v_ldc_tx_qconf(%lx,%lx,%lx) failed, err=%lu\n",
527 		       lp->id, lp->tx_ra, lp->tx_num_entries, hv_err);
528 
529 	hv_err = sun4v_ldc_tx_get_state(lp->id,
530 					&lp->tx_head,
531 					&lp->tx_tail,
532 					&lp->chan_state);
533 	if (hv_err)
534 		printk(KERN_ERR PFX "ldc_abort: "
535 		       "sun4v_ldc_tx_get_state(%lx,...) failed, err=%lu\n",
536 		       lp->id, hv_err);
537 
538 	hv_err = sun4v_ldc_rx_qconf(lp->id, lp->rx_ra, lp->rx_num_entries);
539 	if (hv_err)
540 		printk(KERN_ERR PFX "ldc_abort: "
541 		       "sun4v_ldc_rx_qconf(%lx,%lx,%lx) failed, err=%lu\n",
542 		       lp->id, lp->rx_ra, lp->rx_num_entries, hv_err);
543 
544 	/* Refetch the RX queue state as well, because we could be invoked
545 	 * here in the queue processing context.
546 	 */
547 	hv_err = sun4v_ldc_rx_get_state(lp->id,
548 					&lp->rx_head,
549 					&lp->rx_tail,
550 					&lp->chan_state);
551 	if (hv_err)
552 		printk(KERN_ERR PFX "ldc_abort: "
553 		       "sun4v_ldc_rx_get_state(%lx,...) failed, err=%lu\n",
554 		       lp->id, hv_err);
555 
556 	return -ECONNRESET;
557 }
558 
559 static struct ldc_version *find_by_major(u16 major)
560 {
561 	struct ldc_version *ret = NULL;
562 	int i;
563 
564 	for (i = 0; i < ARRAY_SIZE(ver_arr); i++) {
565 		struct ldc_version *v = &ver_arr[i];
566 		if (v->major <= major) {
567 			ret = v;
568 			break;
569 		}
570 	}
571 	return ret;
572 }
573 
574 static int process_ver_info(struct ldc_channel *lp, struct ldc_version *vp)
575 {
576 	struct ldc_version *vap;
577 	int err;
578 
579 	ldcdbg(HS, "GOT VERSION INFO major[%x] minor[%x]\n",
580 	       vp->major, vp->minor);
581 
582 	if (lp->hs_state == LDC_HS_GOTVERS) {
583 		lp->hs_state = LDC_HS_OPEN;
584 		memset(&lp->ver, 0, sizeof(lp->ver));
585 	}
586 
587 	vap = find_by_major(vp->major);
588 	if (!vap) {
589 		err = send_version_nack(lp, 0, 0);
590 	} else if (vap->major != vp->major) {
591 		err = send_version_nack(lp, vap->major, vap->minor);
592 	} else {
593 		struct ldc_version ver = *vp;
594 		if (ver.minor > vap->minor)
595 			ver.minor = vap->minor;
596 		err = send_version_ack(lp, &ver);
597 		if (!err) {
598 			lp->ver = ver;
599 			lp->hs_state = LDC_HS_GOTVERS;
600 		}
601 	}
602 	if (err)
603 		return ldc_abort(lp);
604 
605 	return 0;
606 }
607 
608 static int process_ver_ack(struct ldc_channel *lp, struct ldc_version *vp)
609 {
610 	ldcdbg(HS, "GOT VERSION ACK major[%x] minor[%x]\n",
611 	       vp->major, vp->minor);
612 
613 	if (lp->hs_state == LDC_HS_GOTVERS) {
614 		if (lp->ver.major != vp->major ||
615 		    lp->ver.minor != vp->minor)
616 			return ldc_abort(lp);
617 	} else {
618 		lp->ver = *vp;
619 		lp->hs_state = LDC_HS_GOTVERS;
620 	}
621 	if (send_rts(lp))
622 		return ldc_abort(lp);
623 	return 0;
624 }
625 
626 static int process_ver_nack(struct ldc_channel *lp, struct ldc_version *vp)
627 {
628 	struct ldc_version *vap;
629 	struct ldc_packet *p;
630 	unsigned long new_tail;
631 
632 	if (vp->major == 0 && vp->minor == 0)
633 		return ldc_abort(lp);
634 
635 	vap = find_by_major(vp->major);
636 	if (!vap)
637 		return ldc_abort(lp);
638 
639 	p = handshake_compose_ctrl(lp, LDC_INFO, LDC_VERS,
640 					   vap, sizeof(*vap),
641 					   &new_tail);
642 	if (!p)
643 		return ldc_abort(lp);
644 
645 	return send_tx_packet(lp, p, new_tail);
646 }
647 
648 static int process_version(struct ldc_channel *lp,
649 			   struct ldc_packet *p)
650 {
651 	struct ldc_version *vp;
652 
653 	vp = (struct ldc_version *) p->u.u_data;
654 
655 	switch (p->stype) {
656 	case LDC_INFO:
657 		return process_ver_info(lp, vp);
658 
659 	case LDC_ACK:
660 		return process_ver_ack(lp, vp);
661 
662 	case LDC_NACK:
663 		return process_ver_nack(lp, vp);
664 
665 	default:
666 		return ldc_abort(lp);
667 	}
668 }
669 
670 static int process_rts(struct ldc_channel *lp,
671 		       struct ldc_packet *p)
672 {
673 	ldcdbg(HS, "GOT RTS stype[%x] seqid[%x] env[%x]\n",
674 	       p->stype, p->seqid, p->env);
675 
676 	if (p->stype     != LDC_INFO	   ||
677 	    lp->hs_state != LDC_HS_GOTVERS ||
678 	    p->env       != lp->cfg.mode)
679 		return ldc_abort(lp);
680 
681 	lp->snd_nxt = p->seqid;
682 	lp->rcv_nxt = p->seqid;
683 	lp->hs_state = LDC_HS_SENTRTR;
684 	if (send_rtr(lp))
685 		return ldc_abort(lp);
686 
687 	return 0;
688 }
689 
690 static int process_rtr(struct ldc_channel *lp,
691 		       struct ldc_packet *p)
692 {
693 	ldcdbg(HS, "GOT RTR stype[%x] seqid[%x] env[%x]\n",
694 	       p->stype, p->seqid, p->env);
695 
696 	if (p->stype     != LDC_INFO ||
697 	    p->env       != lp->cfg.mode)
698 		return ldc_abort(lp);
699 
700 	lp->snd_nxt = p->seqid;
701 	lp->hs_state = LDC_HS_COMPLETE;
702 	ldc_set_state(lp, LDC_STATE_CONNECTED);
703 	send_rdx(lp);
704 
705 	return LDC_EVENT_UP;
706 }
707 
708 static int rx_seq_ok(struct ldc_channel *lp, u32 seqid)
709 {
710 	return lp->rcv_nxt + 1 == seqid;
711 }
712 
713 static int process_rdx(struct ldc_channel *lp,
714 		       struct ldc_packet *p)
715 {
716 	ldcdbg(HS, "GOT RDX stype[%x] seqid[%x] env[%x] ackid[%x]\n",
717 	       p->stype, p->seqid, p->env, p->u.r.ackid);
718 
719 	if (p->stype != LDC_INFO ||
720 	    !(rx_seq_ok(lp, p->seqid)))
721 		return ldc_abort(lp);
722 
723 	lp->rcv_nxt = p->seqid;
724 
725 	lp->hs_state = LDC_HS_COMPLETE;
726 	ldc_set_state(lp, LDC_STATE_CONNECTED);
727 
728 	return LDC_EVENT_UP;
729 }
730 
731 static int process_control_frame(struct ldc_channel *lp,
732 				 struct ldc_packet *p)
733 {
734 	switch (p->ctrl) {
735 	case LDC_VERS:
736 		return process_version(lp, p);
737 
738 	case LDC_RTS:
739 		return process_rts(lp, p);
740 
741 	case LDC_RTR:
742 		return process_rtr(lp, p);
743 
744 	case LDC_RDX:
745 		return process_rdx(lp, p);
746 
747 	default:
748 		return ldc_abort(lp);
749 	}
750 }
751 
752 static int process_error_frame(struct ldc_channel *lp,
753 			       struct ldc_packet *p)
754 {
755 	return ldc_abort(lp);
756 }
757 
758 static int process_data_ack(struct ldc_channel *lp,
759 			    struct ldc_packet *ack)
760 {
761 	unsigned long head = lp->tx_acked;
762 	u32 ackid = ack->u.r.ackid;
763 
764 	while (1) {
765 		struct ldc_packet *p = lp->tx_base + (head / LDC_PACKET_SIZE);
766 
767 		head = tx_advance(lp, head);
768 
769 		if (p->seqid == ackid) {
770 			lp->tx_acked = head;
771 			return 0;
772 		}
773 		if (head == lp->tx_tail)
774 			return ldc_abort(lp);
775 	}
776 
777 	return 0;
778 }
779 
780 static void send_events(struct ldc_channel *lp, unsigned int event_mask)
781 {
782 	if (event_mask & LDC_EVENT_RESET)
783 		lp->cfg.event(lp->event_arg, LDC_EVENT_RESET);
784 	if (event_mask & LDC_EVENT_UP)
785 		lp->cfg.event(lp->event_arg, LDC_EVENT_UP);
786 	if (event_mask & LDC_EVENT_DATA_READY)
787 		lp->cfg.event(lp->event_arg, LDC_EVENT_DATA_READY);
788 }
789 
790 static irqreturn_t ldc_rx(int irq, void *dev_id)
791 {
792 	struct ldc_channel *lp = dev_id;
793 	unsigned long orig_state, flags;
794 	unsigned int event_mask;
795 
796 	spin_lock_irqsave(&lp->lock, flags);
797 
798 	orig_state = lp->chan_state;
799 
800 	/* We should probably check for hypervisor errors here and
801 	 * reset the LDC channel if we get one.
802 	 */
803 	sun4v_ldc_rx_get_state(lp->id,
804 			       &lp->rx_head,
805 			       &lp->rx_tail,
806 			       &lp->chan_state);
807 
808 	ldcdbg(RX, "RX state[0x%02lx:0x%02lx] head[0x%04lx] tail[0x%04lx]\n",
809 	       orig_state, lp->chan_state, lp->rx_head, lp->rx_tail);
810 
811 	event_mask = 0;
812 
813 	if (lp->cfg.mode == LDC_MODE_RAW &&
814 	    lp->chan_state == LDC_CHANNEL_UP) {
815 		lp->hs_state = LDC_HS_COMPLETE;
816 		ldc_set_state(lp, LDC_STATE_CONNECTED);
817 
818 		event_mask |= LDC_EVENT_UP;
819 
820 		orig_state = lp->chan_state;
821 	}
822 
823 	/* If we are in reset state, flush the RX queue and ignore
824 	 * everything.
825 	 */
826 	if (lp->flags & LDC_FLAG_RESET) {
827 		(void) __set_rx_head(lp, lp->rx_tail);
828 		goto out;
829 	}
830 
831 	/* Once we finish the handshake, we let the ldc_read()
832 	 * paths do all of the control frame and state management.
833 	 * Just trigger the callback.
834 	 */
835 	if (lp->hs_state == LDC_HS_COMPLETE) {
836 handshake_complete:
837 		if (lp->chan_state != orig_state) {
838 			unsigned int event = LDC_EVENT_RESET;
839 
840 			if (lp->chan_state == LDC_CHANNEL_UP)
841 				event = LDC_EVENT_UP;
842 
843 			event_mask |= event;
844 		}
845 		if (lp->rx_head != lp->rx_tail)
846 			event_mask |= LDC_EVENT_DATA_READY;
847 
848 		goto out;
849 	}
850 
851 	if (lp->chan_state != orig_state)
852 		goto out;
853 
854 	while (lp->rx_head != lp->rx_tail) {
855 		struct ldc_packet *p;
856 		unsigned long new;
857 		int err;
858 
859 		p = lp->rx_base + (lp->rx_head / LDC_PACKET_SIZE);
860 
861 		switch (p->type) {
862 		case LDC_CTRL:
863 			err = process_control_frame(lp, p);
864 			if (err > 0)
865 				event_mask |= err;
866 			break;
867 
868 		case LDC_DATA:
869 			event_mask |= LDC_EVENT_DATA_READY;
870 			err = 0;
871 			break;
872 
873 		case LDC_ERR:
874 			err = process_error_frame(lp, p);
875 			break;
876 
877 		default:
878 			err = ldc_abort(lp);
879 			break;
880 		}
881 
882 		if (err < 0)
883 			break;
884 
885 		new = lp->rx_head;
886 		new += LDC_PACKET_SIZE;
887 		if (new == (lp->rx_num_entries * LDC_PACKET_SIZE))
888 			new = 0;
889 		lp->rx_head = new;
890 
891 		err = __set_rx_head(lp, new);
892 		if (err < 0) {
893 			(void) ldc_abort(lp);
894 			break;
895 		}
896 		if (lp->hs_state == LDC_HS_COMPLETE)
897 			goto handshake_complete;
898 	}
899 
900 out:
901 	spin_unlock_irqrestore(&lp->lock, flags);
902 
903 	send_events(lp, event_mask);
904 
905 	return IRQ_HANDLED;
906 }
907 
908 static irqreturn_t ldc_tx(int irq, void *dev_id)
909 {
910 	struct ldc_channel *lp = dev_id;
911 	unsigned long flags, orig_state;
912 	unsigned int event_mask = 0;
913 
914 	spin_lock_irqsave(&lp->lock, flags);
915 
916 	orig_state = lp->chan_state;
917 
918 	/* We should probably check for hypervisor errors here and
919 	 * reset the LDC channel if we get one.
920 	 */
921 	sun4v_ldc_tx_get_state(lp->id,
922 			       &lp->tx_head,
923 			       &lp->tx_tail,
924 			       &lp->chan_state);
925 
926 	ldcdbg(TX, " TX state[0x%02lx:0x%02lx] head[0x%04lx] tail[0x%04lx]\n",
927 	       orig_state, lp->chan_state, lp->tx_head, lp->tx_tail);
928 
929 	if (lp->cfg.mode == LDC_MODE_RAW &&
930 	    lp->chan_state == LDC_CHANNEL_UP) {
931 		lp->hs_state = LDC_HS_COMPLETE;
932 		ldc_set_state(lp, LDC_STATE_CONNECTED);
933 
934 		event_mask |= LDC_EVENT_UP;
935 	}
936 
937 	spin_unlock_irqrestore(&lp->lock, flags);
938 
939 	send_events(lp, event_mask);
940 
941 	return IRQ_HANDLED;
942 }
943 
944 /* XXX ldc_alloc() and ldc_free() needs to run under a mutex so
945  * XXX that addition and removal from the ldc_channel_list has
946  * XXX atomicity, otherwise the __ldc_channel_exists() check is
947  * XXX totally pointless as another thread can slip into ldc_alloc()
948  * XXX and add a channel with the same ID.  There also needs to be
949  * XXX a spinlock for ldc_channel_list.
950  */
951 static HLIST_HEAD(ldc_channel_list);
952 
953 static int __ldc_channel_exists(unsigned long id)
954 {
955 	struct ldc_channel *lp;
956 
957 	hlist_for_each_entry(lp, &ldc_channel_list, list) {
958 		if (lp->id == id)
959 			return 1;
960 	}
961 	return 0;
962 }
963 
964 static int alloc_queue(const char *name, unsigned long num_entries,
965 		       struct ldc_packet **base, unsigned long *ra)
966 {
967 	unsigned long size, order;
968 	void *q;
969 
970 	size = num_entries * LDC_PACKET_SIZE;
971 	order = get_order(size);
972 
973 	q = (void *) __get_free_pages(GFP_KERNEL, order);
974 	if (!q) {
975 		printk(KERN_ERR PFX "Alloc of %s queue failed with "
976 		       "size=%lu order=%lu\n", name, size, order);
977 		return -ENOMEM;
978 	}
979 
980 	memset(q, 0, PAGE_SIZE << order);
981 
982 	*base = q;
983 	*ra = __pa(q);
984 
985 	return 0;
986 }
987 
988 static void free_queue(unsigned long num_entries, struct ldc_packet *q)
989 {
990 	unsigned long size, order;
991 
992 	if (!q)
993 		return;
994 
995 	size = num_entries * LDC_PACKET_SIZE;
996 	order = get_order(size);
997 
998 	free_pages((unsigned long)q, order);
999 }
1000 
1001 /* XXX Make this configurable... XXX */
1002 #define LDC_IOTABLE_SIZE	(8 * 1024)
1003 
1004 static int ldc_iommu_init(struct ldc_channel *lp)
1005 {
1006 	unsigned long sz, num_tsb_entries, tsbsize, order;
1007 	struct ldc_iommu *iommu = &lp->iommu;
1008 	struct ldc_mtable_entry *table;
1009 	unsigned long hv_err;
1010 	int err;
1011 
1012 	num_tsb_entries = LDC_IOTABLE_SIZE;
1013 	tsbsize = num_tsb_entries * sizeof(struct ldc_mtable_entry);
1014 
1015 	spin_lock_init(&iommu->lock);
1016 
1017 	sz = num_tsb_entries / 8;
1018 	sz = (sz + 7UL) & ~7UL;
1019 	iommu->arena.map = kzalloc(sz, GFP_KERNEL);
1020 	if (!iommu->arena.map) {
1021 		printk(KERN_ERR PFX "Alloc of arena map failed, sz=%lu\n", sz);
1022 		return -ENOMEM;
1023 	}
1024 
1025 	iommu->arena.limit = num_tsb_entries;
1026 
1027 	order = get_order(tsbsize);
1028 
1029 	table = (struct ldc_mtable_entry *)
1030 		__get_free_pages(GFP_KERNEL, order);
1031 	err = -ENOMEM;
1032 	if (!table) {
1033 		printk(KERN_ERR PFX "Alloc of MTE table failed, "
1034 		       "size=%lu order=%lu\n", tsbsize, order);
1035 		goto out_free_map;
1036 	}
1037 
1038 	memset(table, 0, PAGE_SIZE << order);
1039 
1040 	iommu->page_table = table;
1041 
1042 	hv_err = sun4v_ldc_set_map_table(lp->id, __pa(table),
1043 					 num_tsb_entries);
1044 	err = -EINVAL;
1045 	if (hv_err)
1046 		goto out_free_table;
1047 
1048 	return 0;
1049 
1050 out_free_table:
1051 	free_pages((unsigned long) table, order);
1052 	iommu->page_table = NULL;
1053 
1054 out_free_map:
1055 	kfree(iommu->arena.map);
1056 	iommu->arena.map = NULL;
1057 
1058 	return err;
1059 }
1060 
1061 static void ldc_iommu_release(struct ldc_channel *lp)
1062 {
1063 	struct ldc_iommu *iommu = &lp->iommu;
1064 	unsigned long num_tsb_entries, tsbsize, order;
1065 
1066 	(void) sun4v_ldc_set_map_table(lp->id, 0, 0);
1067 
1068 	num_tsb_entries = iommu->arena.limit;
1069 	tsbsize = num_tsb_entries * sizeof(struct ldc_mtable_entry);
1070 	order = get_order(tsbsize);
1071 
1072 	free_pages((unsigned long) iommu->page_table, order);
1073 	iommu->page_table = NULL;
1074 
1075 	kfree(iommu->arena.map);
1076 	iommu->arena.map = NULL;
1077 }
1078 
1079 struct ldc_channel *ldc_alloc(unsigned long id,
1080 			      const struct ldc_channel_config *cfgp,
1081 			      void *event_arg,
1082 			      const char *name)
1083 {
1084 	struct ldc_channel *lp;
1085 	const struct ldc_mode_ops *mops;
1086 	unsigned long dummy1, dummy2, hv_err;
1087 	u8 mss, *mssbuf;
1088 	int err;
1089 
1090 	err = -ENODEV;
1091 	if (!ldom_domaining_enabled)
1092 		goto out_err;
1093 
1094 	err = -EINVAL;
1095 	if (!cfgp)
1096 		goto out_err;
1097 	if (!name)
1098 		goto out_err;
1099 
1100 	switch (cfgp->mode) {
1101 	case LDC_MODE_RAW:
1102 		mops = &raw_ops;
1103 		mss = LDC_PACKET_SIZE;
1104 		break;
1105 
1106 	case LDC_MODE_UNRELIABLE:
1107 		mops = &nonraw_ops;
1108 		mss = LDC_PACKET_SIZE - 8;
1109 		break;
1110 
1111 	case LDC_MODE_STREAM:
1112 		mops = &stream_ops;
1113 		mss = LDC_PACKET_SIZE - 8 - 8;
1114 		break;
1115 
1116 	default:
1117 		goto out_err;
1118 	}
1119 
1120 	if (!cfgp->event || !event_arg || !cfgp->rx_irq || !cfgp->tx_irq)
1121 		goto out_err;
1122 
1123 	hv_err = sun4v_ldc_tx_qinfo(id, &dummy1, &dummy2);
1124 	err = -ENODEV;
1125 	if (hv_err == HV_ECHANNEL)
1126 		goto out_err;
1127 
1128 	err = -EEXIST;
1129 	if (__ldc_channel_exists(id))
1130 		goto out_err;
1131 
1132 	mssbuf = NULL;
1133 
1134 	lp = kzalloc(sizeof(*lp), GFP_KERNEL);
1135 	err = -ENOMEM;
1136 	if (!lp)
1137 		goto out_err;
1138 
1139 	spin_lock_init(&lp->lock);
1140 
1141 	lp->id = id;
1142 
1143 	err = ldc_iommu_init(lp);
1144 	if (err)
1145 		goto out_free_ldc;
1146 
1147 	lp->mops = mops;
1148 	lp->mss = mss;
1149 
1150 	lp->cfg = *cfgp;
1151 	if (!lp->cfg.mtu)
1152 		lp->cfg.mtu = LDC_DEFAULT_MTU;
1153 
1154 	if (lp->cfg.mode == LDC_MODE_STREAM) {
1155 		mssbuf = kzalloc(lp->cfg.mtu, GFP_KERNEL);
1156 		if (!mssbuf) {
1157 			err = -ENOMEM;
1158 			goto out_free_iommu;
1159 		}
1160 		lp->mssbuf = mssbuf;
1161 	}
1162 
1163 	lp->event_arg = event_arg;
1164 
1165 	/* XXX allow setting via ldc_channel_config to override defaults
1166 	 * XXX or use some formula based upon mtu
1167 	 */
1168 	lp->tx_num_entries = LDC_DEFAULT_NUM_ENTRIES;
1169 	lp->rx_num_entries = LDC_DEFAULT_NUM_ENTRIES;
1170 
1171 	err = alloc_queue("TX", lp->tx_num_entries,
1172 			  &lp->tx_base, &lp->tx_ra);
1173 	if (err)
1174 		goto out_free_mssbuf;
1175 
1176 	err = alloc_queue("RX", lp->rx_num_entries,
1177 			  &lp->rx_base, &lp->rx_ra);
1178 	if (err)
1179 		goto out_free_txq;
1180 
1181 	lp->flags |= LDC_FLAG_ALLOCED_QUEUES;
1182 
1183 	lp->hs_state = LDC_HS_CLOSED;
1184 	ldc_set_state(lp, LDC_STATE_INIT);
1185 
1186 	INIT_HLIST_NODE(&lp->list);
1187 	hlist_add_head(&lp->list, &ldc_channel_list);
1188 
1189 	INIT_HLIST_HEAD(&lp->mh_list);
1190 
1191 	snprintf(lp->rx_irq_name, LDC_IRQ_NAME_MAX, "%s RX", name);
1192 	snprintf(lp->tx_irq_name, LDC_IRQ_NAME_MAX, "%s TX", name);
1193 
1194 	err = request_irq(lp->cfg.rx_irq, ldc_rx, 0,
1195 			  lp->rx_irq_name, lp);
1196 	if (err)
1197 		goto out_free_txq;
1198 
1199 	err = request_irq(lp->cfg.tx_irq, ldc_tx, 0,
1200 			  lp->tx_irq_name, lp);
1201 	if (err) {
1202 		free_irq(lp->cfg.rx_irq, lp);
1203 		goto out_free_txq;
1204 	}
1205 
1206 	return lp;
1207 
1208 out_free_txq:
1209 	free_queue(lp->tx_num_entries, lp->tx_base);
1210 
1211 out_free_mssbuf:
1212 	kfree(mssbuf);
1213 
1214 out_free_iommu:
1215 	ldc_iommu_release(lp);
1216 
1217 out_free_ldc:
1218 	kfree(lp);
1219 
1220 out_err:
1221 	return ERR_PTR(err);
1222 }
1223 EXPORT_SYMBOL(ldc_alloc);
1224 
1225 void ldc_unbind(struct ldc_channel *lp)
1226 {
1227 	if (lp->flags & LDC_FLAG_REGISTERED_IRQS) {
1228 		free_irq(lp->cfg.rx_irq, lp);
1229 		free_irq(lp->cfg.tx_irq, lp);
1230 		lp->flags &= ~LDC_FLAG_REGISTERED_IRQS;
1231 	}
1232 
1233 	if (lp->flags & LDC_FLAG_REGISTERED_QUEUES) {
1234 		sun4v_ldc_tx_qconf(lp->id, 0, 0);
1235 		sun4v_ldc_rx_qconf(lp->id, 0, 0);
1236 		lp->flags &= ~LDC_FLAG_REGISTERED_QUEUES;
1237 	}
1238 	if (lp->flags & LDC_FLAG_ALLOCED_QUEUES) {
1239 		free_queue(lp->tx_num_entries, lp->tx_base);
1240 		free_queue(lp->rx_num_entries, lp->rx_base);
1241 		lp->flags &= ~LDC_FLAG_ALLOCED_QUEUES;
1242 	}
1243 
1244 	ldc_set_state(lp, LDC_STATE_INIT);
1245 }
1246 EXPORT_SYMBOL(ldc_unbind);
1247 
1248 void ldc_free(struct ldc_channel *lp)
1249 {
1250 	ldc_unbind(lp);
1251 	hlist_del(&lp->list);
1252 	kfree(lp->mssbuf);
1253 	ldc_iommu_release(lp);
1254 
1255 	kfree(lp);
1256 }
1257 EXPORT_SYMBOL(ldc_free);
1258 
1259 /* Bind the channel.  This registers the LDC queues with
1260  * the hypervisor and puts the channel into a pseudo-listening
1261  * state.  This does not initiate a handshake, ldc_connect() does
1262  * that.
1263  */
1264 int ldc_bind(struct ldc_channel *lp)
1265 {
1266 	unsigned long hv_err, flags;
1267 	int err = -EINVAL;
1268 
1269 	if (lp->state != LDC_STATE_INIT)
1270 		return -EINVAL;
1271 
1272 	spin_lock_irqsave(&lp->lock, flags);
1273 
1274 	enable_irq(lp->cfg.rx_irq);
1275 	enable_irq(lp->cfg.tx_irq);
1276 
1277 	lp->flags |= LDC_FLAG_REGISTERED_IRQS;
1278 
1279 	err = -ENODEV;
1280 	hv_err = sun4v_ldc_tx_qconf(lp->id, 0, 0);
1281 	if (hv_err)
1282 		goto out_free_irqs;
1283 
1284 	hv_err = sun4v_ldc_tx_qconf(lp->id, lp->tx_ra, lp->tx_num_entries);
1285 	if (hv_err)
1286 		goto out_free_irqs;
1287 
1288 	hv_err = sun4v_ldc_rx_qconf(lp->id, 0, 0);
1289 	if (hv_err)
1290 		goto out_unmap_tx;
1291 
1292 	hv_err = sun4v_ldc_rx_qconf(lp->id, lp->rx_ra, lp->rx_num_entries);
1293 	if (hv_err)
1294 		goto out_unmap_tx;
1295 
1296 	lp->flags |= LDC_FLAG_REGISTERED_QUEUES;
1297 
1298 	hv_err = sun4v_ldc_tx_get_state(lp->id,
1299 					&lp->tx_head,
1300 					&lp->tx_tail,
1301 					&lp->chan_state);
1302 	err = -EBUSY;
1303 	if (hv_err)
1304 		goto out_unmap_rx;
1305 
1306 	lp->tx_acked = lp->tx_head;
1307 
1308 	lp->hs_state = LDC_HS_OPEN;
1309 	ldc_set_state(lp, LDC_STATE_BOUND);
1310 
1311 	spin_unlock_irqrestore(&lp->lock, flags);
1312 
1313 	return 0;
1314 
1315 out_unmap_rx:
1316 	lp->flags &= ~LDC_FLAG_REGISTERED_QUEUES;
1317 	sun4v_ldc_rx_qconf(lp->id, 0, 0);
1318 
1319 out_unmap_tx:
1320 	sun4v_ldc_tx_qconf(lp->id, 0, 0);
1321 
1322 out_free_irqs:
1323 	lp->flags &= ~LDC_FLAG_REGISTERED_IRQS;
1324 	free_irq(lp->cfg.tx_irq, lp);
1325 	free_irq(lp->cfg.rx_irq, lp);
1326 
1327 	spin_unlock_irqrestore(&lp->lock, flags);
1328 
1329 	return err;
1330 }
1331 EXPORT_SYMBOL(ldc_bind);
1332 
1333 int ldc_connect(struct ldc_channel *lp)
1334 {
1335 	unsigned long flags;
1336 	int err;
1337 
1338 	if (lp->cfg.mode == LDC_MODE_RAW)
1339 		return -EINVAL;
1340 
1341 	spin_lock_irqsave(&lp->lock, flags);
1342 
1343 	if (!(lp->flags & LDC_FLAG_ALLOCED_QUEUES) ||
1344 	    !(lp->flags & LDC_FLAG_REGISTERED_QUEUES) ||
1345 	    lp->hs_state != LDC_HS_OPEN)
1346 		err = ((lp->hs_state > LDC_HS_OPEN) ? 0 : -EINVAL);
1347 	else
1348 		err = start_handshake(lp);
1349 
1350 	spin_unlock_irqrestore(&lp->lock, flags);
1351 
1352 	return err;
1353 }
1354 EXPORT_SYMBOL(ldc_connect);
1355 
1356 int ldc_disconnect(struct ldc_channel *lp)
1357 {
1358 	unsigned long hv_err, flags;
1359 	int err;
1360 
1361 	if (lp->cfg.mode == LDC_MODE_RAW)
1362 		return -EINVAL;
1363 
1364 	if (!(lp->flags & LDC_FLAG_ALLOCED_QUEUES) ||
1365 	    !(lp->flags & LDC_FLAG_REGISTERED_QUEUES))
1366 		return -EINVAL;
1367 
1368 	spin_lock_irqsave(&lp->lock, flags);
1369 
1370 	err = -ENODEV;
1371 	hv_err = sun4v_ldc_tx_qconf(lp->id, 0, 0);
1372 	if (hv_err)
1373 		goto out_err;
1374 
1375 	hv_err = sun4v_ldc_tx_qconf(lp->id, lp->tx_ra, lp->tx_num_entries);
1376 	if (hv_err)
1377 		goto out_err;
1378 
1379 	hv_err = sun4v_ldc_rx_qconf(lp->id, 0, 0);
1380 	if (hv_err)
1381 		goto out_err;
1382 
1383 	hv_err = sun4v_ldc_rx_qconf(lp->id, lp->rx_ra, lp->rx_num_entries);
1384 	if (hv_err)
1385 		goto out_err;
1386 
1387 	ldc_set_state(lp, LDC_STATE_BOUND);
1388 	lp->hs_state = LDC_HS_OPEN;
1389 	lp->flags |= LDC_FLAG_RESET;
1390 
1391 	spin_unlock_irqrestore(&lp->lock, flags);
1392 
1393 	return 0;
1394 
1395 out_err:
1396 	sun4v_ldc_tx_qconf(lp->id, 0, 0);
1397 	sun4v_ldc_rx_qconf(lp->id, 0, 0);
1398 	free_irq(lp->cfg.tx_irq, lp);
1399 	free_irq(lp->cfg.rx_irq, lp);
1400 	lp->flags &= ~(LDC_FLAG_REGISTERED_IRQS |
1401 		       LDC_FLAG_REGISTERED_QUEUES);
1402 	ldc_set_state(lp, LDC_STATE_INIT);
1403 
1404 	spin_unlock_irqrestore(&lp->lock, flags);
1405 
1406 	return err;
1407 }
1408 EXPORT_SYMBOL(ldc_disconnect);
1409 
1410 int ldc_state(struct ldc_channel *lp)
1411 {
1412 	return lp->state;
1413 }
1414 EXPORT_SYMBOL(ldc_state);
1415 
1416 static int write_raw(struct ldc_channel *lp, const void *buf, unsigned int size)
1417 {
1418 	struct ldc_packet *p;
1419 	unsigned long new_tail;
1420 	int err;
1421 
1422 	if (size > LDC_PACKET_SIZE)
1423 		return -EMSGSIZE;
1424 
1425 	p = data_get_tx_packet(lp, &new_tail);
1426 	if (!p)
1427 		return -EAGAIN;
1428 
1429 	memcpy(p, buf, size);
1430 
1431 	err = send_tx_packet(lp, p, new_tail);
1432 	if (!err)
1433 		err = size;
1434 
1435 	return err;
1436 }
1437 
1438 static int read_raw(struct ldc_channel *lp, void *buf, unsigned int size)
1439 {
1440 	struct ldc_packet *p;
1441 	unsigned long hv_err, new;
1442 	int err;
1443 
1444 	if (size < LDC_PACKET_SIZE)
1445 		return -EINVAL;
1446 
1447 	hv_err = sun4v_ldc_rx_get_state(lp->id,
1448 					&lp->rx_head,
1449 					&lp->rx_tail,
1450 					&lp->chan_state);
1451 	if (hv_err)
1452 		return ldc_abort(lp);
1453 
1454 	if (lp->chan_state == LDC_CHANNEL_DOWN ||
1455 	    lp->chan_state == LDC_CHANNEL_RESETTING)
1456 		return -ECONNRESET;
1457 
1458 	if (lp->rx_head == lp->rx_tail)
1459 		return 0;
1460 
1461 	p = lp->rx_base + (lp->rx_head / LDC_PACKET_SIZE);
1462 	memcpy(buf, p, LDC_PACKET_SIZE);
1463 
1464 	new = rx_advance(lp, lp->rx_head);
1465 	lp->rx_head = new;
1466 
1467 	err = __set_rx_head(lp, new);
1468 	if (err < 0)
1469 		err = -ECONNRESET;
1470 	else
1471 		err = LDC_PACKET_SIZE;
1472 
1473 	return err;
1474 }
1475 
1476 static const struct ldc_mode_ops raw_ops = {
1477 	.write		=	write_raw,
1478 	.read		=	read_raw,
1479 };
1480 
1481 static int write_nonraw(struct ldc_channel *lp, const void *buf,
1482 			unsigned int size)
1483 {
1484 	unsigned long hv_err, tail;
1485 	unsigned int copied;
1486 	u32 seq;
1487 	int err;
1488 
1489 	hv_err = sun4v_ldc_tx_get_state(lp->id, &lp->tx_head, &lp->tx_tail,
1490 					&lp->chan_state);
1491 	if (unlikely(hv_err))
1492 		return -EBUSY;
1493 
1494 	if (unlikely(lp->chan_state != LDC_CHANNEL_UP))
1495 		return ldc_abort(lp);
1496 
1497 	if (!tx_has_space_for(lp, size))
1498 		return -EAGAIN;
1499 
1500 	seq = lp->snd_nxt;
1501 	copied = 0;
1502 	tail = lp->tx_tail;
1503 	while (copied < size) {
1504 		struct ldc_packet *p = lp->tx_base + (tail / LDC_PACKET_SIZE);
1505 		u8 *data = ((lp->cfg.mode == LDC_MODE_UNRELIABLE) ?
1506 			    p->u.u_data :
1507 			    p->u.r.r_data);
1508 		int data_len;
1509 
1510 		p->type = LDC_DATA;
1511 		p->stype = LDC_INFO;
1512 		p->ctrl = 0;
1513 
1514 		data_len = size - copied;
1515 		if (data_len > lp->mss)
1516 			data_len = lp->mss;
1517 
1518 		BUG_ON(data_len > LDC_LEN);
1519 
1520 		p->env = (data_len |
1521 			  (copied == 0 ? LDC_START : 0) |
1522 			  (data_len == size - copied ? LDC_STOP : 0));
1523 
1524 		p->seqid = ++seq;
1525 
1526 		ldcdbg(DATA, "SENT DATA [%02x:%02x:%02x:%02x:%08x]\n",
1527 		       p->type,
1528 		       p->stype,
1529 		       p->ctrl,
1530 		       p->env,
1531 		       p->seqid);
1532 
1533 		memcpy(data, buf, data_len);
1534 		buf += data_len;
1535 		copied += data_len;
1536 
1537 		tail = tx_advance(lp, tail);
1538 	}
1539 
1540 	err = set_tx_tail(lp, tail);
1541 	if (!err) {
1542 		lp->snd_nxt = seq;
1543 		err = size;
1544 	}
1545 
1546 	return err;
1547 }
1548 
1549 static int rx_bad_seq(struct ldc_channel *lp, struct ldc_packet *p,
1550 		      struct ldc_packet *first_frag)
1551 {
1552 	int err;
1553 
1554 	if (first_frag)
1555 		lp->rcv_nxt = first_frag->seqid - 1;
1556 
1557 	err = send_data_nack(lp, p);
1558 	if (err)
1559 		return err;
1560 
1561 	err = __set_rx_head(lp, lp->rx_tail);
1562 	if (err < 0)
1563 		return ldc_abort(lp);
1564 
1565 	return 0;
1566 }
1567 
1568 static int data_ack_nack(struct ldc_channel *lp, struct ldc_packet *p)
1569 {
1570 	if (p->stype & LDC_ACK) {
1571 		int err = process_data_ack(lp, p);
1572 		if (err)
1573 			return err;
1574 	}
1575 	if (p->stype & LDC_NACK)
1576 		return ldc_abort(lp);
1577 
1578 	return 0;
1579 }
1580 
1581 static int rx_data_wait(struct ldc_channel *lp, unsigned long cur_head)
1582 {
1583 	unsigned long dummy;
1584 	int limit = 1000;
1585 
1586 	ldcdbg(DATA, "DATA WAIT cur_head[%lx] rx_head[%lx] rx_tail[%lx]\n",
1587 	       cur_head, lp->rx_head, lp->rx_tail);
1588 	while (limit-- > 0) {
1589 		unsigned long hv_err;
1590 
1591 		hv_err = sun4v_ldc_rx_get_state(lp->id,
1592 						&dummy,
1593 						&lp->rx_tail,
1594 						&lp->chan_state);
1595 		if (hv_err)
1596 			return ldc_abort(lp);
1597 
1598 		if (lp->chan_state == LDC_CHANNEL_DOWN ||
1599 		    lp->chan_state == LDC_CHANNEL_RESETTING)
1600 			return -ECONNRESET;
1601 
1602 		if (cur_head != lp->rx_tail) {
1603 			ldcdbg(DATA, "DATA WAIT DONE "
1604 			       "head[%lx] tail[%lx] chan_state[%lx]\n",
1605 			       dummy, lp->rx_tail, lp->chan_state);
1606 			return 0;
1607 		}
1608 
1609 		udelay(1);
1610 	}
1611 	return -EAGAIN;
1612 }
1613 
1614 static int rx_set_head(struct ldc_channel *lp, unsigned long head)
1615 {
1616 	int err = __set_rx_head(lp, head);
1617 
1618 	if (err < 0)
1619 		return ldc_abort(lp);
1620 
1621 	lp->rx_head = head;
1622 	return 0;
1623 }
1624 
1625 static void send_data_ack(struct ldc_channel *lp)
1626 {
1627 	unsigned long new_tail;
1628 	struct ldc_packet *p;
1629 
1630 	p = data_get_tx_packet(lp, &new_tail);
1631 	if (likely(p)) {
1632 		int err;
1633 
1634 		memset(p, 0, sizeof(*p));
1635 		p->type = LDC_DATA;
1636 		p->stype = LDC_ACK;
1637 		p->ctrl = 0;
1638 		p->seqid = lp->snd_nxt + 1;
1639 		p->u.r.ackid = lp->rcv_nxt;
1640 
1641 		err = send_tx_packet(lp, p, new_tail);
1642 		if (!err)
1643 			lp->snd_nxt++;
1644 	}
1645 }
1646 
1647 static int read_nonraw(struct ldc_channel *lp, void *buf, unsigned int size)
1648 {
1649 	struct ldc_packet *first_frag;
1650 	unsigned long hv_err, new;
1651 	int err, copied;
1652 
1653 	hv_err = sun4v_ldc_rx_get_state(lp->id,
1654 					&lp->rx_head,
1655 					&lp->rx_tail,
1656 					&lp->chan_state);
1657 	if (hv_err)
1658 		return ldc_abort(lp);
1659 
1660 	if (lp->chan_state == LDC_CHANNEL_DOWN ||
1661 	    lp->chan_state == LDC_CHANNEL_RESETTING)
1662 		return -ECONNRESET;
1663 
1664 	if (lp->rx_head == lp->rx_tail)
1665 		return 0;
1666 
1667 	first_frag = NULL;
1668 	copied = err = 0;
1669 	new = lp->rx_head;
1670 	while (1) {
1671 		struct ldc_packet *p;
1672 		int pkt_len;
1673 
1674 		BUG_ON(new == lp->rx_tail);
1675 		p = lp->rx_base + (new / LDC_PACKET_SIZE);
1676 
1677 		ldcdbg(RX, "RX read pkt[%02x:%02x:%02x:%02x:%08x:%08x] "
1678 		       "rcv_nxt[%08x]\n",
1679 		       p->type,
1680 		       p->stype,
1681 		       p->ctrl,
1682 		       p->env,
1683 		       p->seqid,
1684 		       p->u.r.ackid,
1685 		       lp->rcv_nxt);
1686 
1687 		if (unlikely(!rx_seq_ok(lp, p->seqid))) {
1688 			err = rx_bad_seq(lp, p, first_frag);
1689 			copied = 0;
1690 			break;
1691 		}
1692 
1693 		if (p->type & LDC_CTRL) {
1694 			err = process_control_frame(lp, p);
1695 			if (err < 0)
1696 				break;
1697 			err = 0;
1698 		}
1699 
1700 		lp->rcv_nxt = p->seqid;
1701 
1702 		if (!(p->type & LDC_DATA)) {
1703 			new = rx_advance(lp, new);
1704 			goto no_data;
1705 		}
1706 		if (p->stype & (LDC_ACK | LDC_NACK)) {
1707 			err = data_ack_nack(lp, p);
1708 			if (err)
1709 				break;
1710 		}
1711 		if (!(p->stype & LDC_INFO)) {
1712 			new = rx_advance(lp, new);
1713 			err = rx_set_head(lp, new);
1714 			if (err)
1715 				break;
1716 			goto no_data;
1717 		}
1718 
1719 		pkt_len = p->env & LDC_LEN;
1720 
1721 		/* Every initial packet starts with the START bit set.
1722 		 *
1723 		 * Singleton packets will have both START+STOP set.
1724 		 *
1725 		 * Fragments will have START set in the first frame, STOP
1726 		 * set in the last frame, and neither bit set in middle
1727 		 * frames of the packet.
1728 		 *
1729 		 * Therefore if we are at the beginning of a packet and
1730 		 * we don't see START, or we are in the middle of a fragmented
1731 		 * packet and do see START, we are unsynchronized and should
1732 		 * flush the RX queue.
1733 		 */
1734 		if ((first_frag == NULL && !(p->env & LDC_START)) ||
1735 		    (first_frag != NULL &&  (p->env & LDC_START))) {
1736 			if (!first_frag)
1737 				new = rx_advance(lp, new);
1738 
1739 			err = rx_set_head(lp, new);
1740 			if (err)
1741 				break;
1742 
1743 			if (!first_frag)
1744 				goto no_data;
1745 		}
1746 		if (!first_frag)
1747 			first_frag = p;
1748 
1749 		if (pkt_len > size - copied) {
1750 			/* User didn't give us a big enough buffer,
1751 			 * what to do?  This is a pretty serious error.
1752 			 *
1753 			 * Since we haven't updated the RX ring head to
1754 			 * consume any of the packets, signal the error
1755 			 * to the user and just leave the RX ring alone.
1756 			 *
1757 			 * This seems the best behavior because this allows
1758 			 * a user of the LDC layer to start with a small
1759 			 * RX buffer for ldc_read() calls and use -EMSGSIZE
1760 			 * as a cue to enlarge it's read buffer.
1761 			 */
1762 			err = -EMSGSIZE;
1763 			break;
1764 		}
1765 
1766 		/* Ok, we are gonna eat this one.  */
1767 		new = rx_advance(lp, new);
1768 
1769 		memcpy(buf,
1770 		       (lp->cfg.mode == LDC_MODE_UNRELIABLE ?
1771 			p->u.u_data : p->u.r.r_data), pkt_len);
1772 		buf += pkt_len;
1773 		copied += pkt_len;
1774 
1775 		if (p->env & LDC_STOP)
1776 			break;
1777 
1778 no_data:
1779 		if (new == lp->rx_tail) {
1780 			err = rx_data_wait(lp, new);
1781 			if (err)
1782 				break;
1783 		}
1784 	}
1785 
1786 	if (!err)
1787 		err = rx_set_head(lp, new);
1788 
1789 	if (err && first_frag)
1790 		lp->rcv_nxt = first_frag->seqid - 1;
1791 
1792 	if (!err) {
1793 		err = copied;
1794 		if (err > 0 && lp->cfg.mode != LDC_MODE_UNRELIABLE)
1795 			send_data_ack(lp);
1796 	}
1797 
1798 	return err;
1799 }
1800 
1801 static const struct ldc_mode_ops nonraw_ops = {
1802 	.write		=	write_nonraw,
1803 	.read		=	read_nonraw,
1804 };
1805 
1806 static int write_stream(struct ldc_channel *lp, const void *buf,
1807 			unsigned int size)
1808 {
1809 	if (size > lp->cfg.mtu)
1810 		size = lp->cfg.mtu;
1811 	return write_nonraw(lp, buf, size);
1812 }
1813 
1814 static int read_stream(struct ldc_channel *lp, void *buf, unsigned int size)
1815 {
1816 	if (!lp->mssbuf_len) {
1817 		int err = read_nonraw(lp, lp->mssbuf, lp->cfg.mtu);
1818 		if (err < 0)
1819 			return err;
1820 
1821 		lp->mssbuf_len = err;
1822 		lp->mssbuf_off = 0;
1823 	}
1824 
1825 	if (size > lp->mssbuf_len)
1826 		size = lp->mssbuf_len;
1827 	memcpy(buf, lp->mssbuf + lp->mssbuf_off, size);
1828 
1829 	lp->mssbuf_off += size;
1830 	lp->mssbuf_len -= size;
1831 
1832 	return size;
1833 }
1834 
1835 static const struct ldc_mode_ops stream_ops = {
1836 	.write		=	write_stream,
1837 	.read		=	read_stream,
1838 };
1839 
1840 int ldc_write(struct ldc_channel *lp, const void *buf, unsigned int size)
1841 {
1842 	unsigned long flags;
1843 	int err;
1844 
1845 	if (!buf)
1846 		return -EINVAL;
1847 
1848 	if (!size)
1849 		return 0;
1850 
1851 	spin_lock_irqsave(&lp->lock, flags);
1852 
1853 	if (lp->hs_state != LDC_HS_COMPLETE)
1854 		err = -ENOTCONN;
1855 	else
1856 		err = lp->mops->write(lp, buf, size);
1857 
1858 	spin_unlock_irqrestore(&lp->lock, flags);
1859 
1860 	return err;
1861 }
1862 EXPORT_SYMBOL(ldc_write);
1863 
1864 int ldc_read(struct ldc_channel *lp, void *buf, unsigned int size)
1865 {
1866 	unsigned long flags;
1867 	int err;
1868 
1869 	if (!buf)
1870 		return -EINVAL;
1871 
1872 	if (!size)
1873 		return 0;
1874 
1875 	spin_lock_irqsave(&lp->lock, flags);
1876 
1877 	if (lp->hs_state != LDC_HS_COMPLETE)
1878 		err = -ENOTCONN;
1879 	else
1880 		err = lp->mops->read(lp, buf, size);
1881 
1882 	spin_unlock_irqrestore(&lp->lock, flags);
1883 
1884 	return err;
1885 }
1886 EXPORT_SYMBOL(ldc_read);
1887 
1888 static long arena_alloc(struct ldc_iommu *iommu, unsigned long npages)
1889 {
1890 	struct iommu_arena *arena = &iommu->arena;
1891 	unsigned long n, start, end, limit;
1892 	int pass;
1893 
1894 	limit = arena->limit;
1895 	start = arena->hint;
1896 	pass = 0;
1897 
1898 again:
1899 	n = bitmap_find_next_zero_area(arena->map, limit, start, npages, 0);
1900 	end = n + npages;
1901 	if (unlikely(end >= limit)) {
1902 		if (likely(pass < 1)) {
1903 			limit = start;
1904 			start = 0;
1905 			pass++;
1906 			goto again;
1907 		} else {
1908 			/* Scanned the whole thing, give up. */
1909 			return -1;
1910 		}
1911 	}
1912 	bitmap_set(arena->map, n, npages);
1913 
1914 	arena->hint = end;
1915 
1916 	return n;
1917 }
1918 
1919 #define COOKIE_PGSZ_CODE	0xf000000000000000ULL
1920 #define COOKIE_PGSZ_CODE_SHIFT	60ULL
1921 
1922 static u64 pagesize_code(void)
1923 {
1924 	switch (PAGE_SIZE) {
1925 	default:
1926 	case (8ULL * 1024ULL):
1927 		return 0;
1928 	case (64ULL * 1024ULL):
1929 		return 1;
1930 	case (512ULL * 1024ULL):
1931 		return 2;
1932 	case (4ULL * 1024ULL * 1024ULL):
1933 		return 3;
1934 	case (32ULL * 1024ULL * 1024ULL):
1935 		return 4;
1936 	case (256ULL * 1024ULL * 1024ULL):
1937 		return 5;
1938 	}
1939 }
1940 
1941 static u64 make_cookie(u64 index, u64 pgsz_code, u64 page_offset)
1942 {
1943 	return ((pgsz_code << COOKIE_PGSZ_CODE_SHIFT) |
1944 		(index << PAGE_SHIFT) |
1945 		page_offset);
1946 }
1947 
1948 static u64 cookie_to_index(u64 cookie, unsigned long *shift)
1949 {
1950 	u64 szcode = cookie >> COOKIE_PGSZ_CODE_SHIFT;
1951 
1952 	cookie &= ~COOKIE_PGSZ_CODE;
1953 
1954 	*shift = szcode * 3;
1955 
1956 	return (cookie >> (13ULL + (szcode * 3ULL)));
1957 }
1958 
1959 static struct ldc_mtable_entry *alloc_npages(struct ldc_iommu *iommu,
1960 					     unsigned long npages)
1961 {
1962 	long entry;
1963 
1964 	entry = arena_alloc(iommu, npages);
1965 	if (unlikely(entry < 0))
1966 		return NULL;
1967 
1968 	return iommu->page_table + entry;
1969 }
1970 
1971 static u64 perm_to_mte(unsigned int map_perm)
1972 {
1973 	u64 mte_base;
1974 
1975 	mte_base = pagesize_code();
1976 
1977 	if (map_perm & LDC_MAP_SHADOW) {
1978 		if (map_perm & LDC_MAP_R)
1979 			mte_base |= LDC_MTE_COPY_R;
1980 		if (map_perm & LDC_MAP_W)
1981 			mte_base |= LDC_MTE_COPY_W;
1982 	}
1983 	if (map_perm & LDC_MAP_DIRECT) {
1984 		if (map_perm & LDC_MAP_R)
1985 			mte_base |= LDC_MTE_READ;
1986 		if (map_perm & LDC_MAP_W)
1987 			mte_base |= LDC_MTE_WRITE;
1988 		if (map_perm & LDC_MAP_X)
1989 			mte_base |= LDC_MTE_EXEC;
1990 	}
1991 	if (map_perm & LDC_MAP_IO) {
1992 		if (map_perm & LDC_MAP_R)
1993 			mte_base |= LDC_MTE_IOMMU_R;
1994 		if (map_perm & LDC_MAP_W)
1995 			mte_base |= LDC_MTE_IOMMU_W;
1996 	}
1997 
1998 	return mte_base;
1999 }
2000 
2001 static int pages_in_region(unsigned long base, long len)
2002 {
2003 	int count = 0;
2004 
2005 	do {
2006 		unsigned long new = (base + PAGE_SIZE) & PAGE_MASK;
2007 
2008 		len -= (new - base);
2009 		base = new;
2010 		count++;
2011 	} while (len > 0);
2012 
2013 	return count;
2014 }
2015 
2016 struct cookie_state {
2017 	struct ldc_mtable_entry		*page_table;
2018 	struct ldc_trans_cookie		*cookies;
2019 	u64				mte_base;
2020 	u64				prev_cookie;
2021 	u32				pte_idx;
2022 	u32				nc;
2023 };
2024 
2025 static void fill_cookies(struct cookie_state *sp, unsigned long pa,
2026 			 unsigned long off, unsigned long len)
2027 {
2028 	do {
2029 		unsigned long tlen, new = pa + PAGE_SIZE;
2030 		u64 this_cookie;
2031 
2032 		sp->page_table[sp->pte_idx].mte = sp->mte_base | pa;
2033 
2034 		tlen = PAGE_SIZE;
2035 		if (off)
2036 			tlen = PAGE_SIZE - off;
2037 		if (tlen > len)
2038 			tlen = len;
2039 
2040 		this_cookie = make_cookie(sp->pte_idx,
2041 					  pagesize_code(), off);
2042 
2043 		off = 0;
2044 
2045 		if (this_cookie == sp->prev_cookie) {
2046 			sp->cookies[sp->nc - 1].cookie_size += tlen;
2047 		} else {
2048 			sp->cookies[sp->nc].cookie_addr = this_cookie;
2049 			sp->cookies[sp->nc].cookie_size = tlen;
2050 			sp->nc++;
2051 		}
2052 		sp->prev_cookie = this_cookie + tlen;
2053 
2054 		sp->pte_idx++;
2055 
2056 		len -= tlen;
2057 		pa = new;
2058 	} while (len > 0);
2059 }
2060 
2061 static int sg_count_one(struct scatterlist *sg)
2062 {
2063 	unsigned long base = page_to_pfn(sg_page(sg)) << PAGE_SHIFT;
2064 	long len = sg->length;
2065 
2066 	if ((sg->offset | len) & (8UL - 1))
2067 		return -EFAULT;
2068 
2069 	return pages_in_region(base + sg->offset, len);
2070 }
2071 
2072 static int sg_count_pages(struct scatterlist *sg, int num_sg)
2073 {
2074 	int count;
2075 	int i;
2076 
2077 	count = 0;
2078 	for (i = 0; i < num_sg; i++) {
2079 		int err = sg_count_one(sg + i);
2080 		if (err < 0)
2081 			return err;
2082 		count += err;
2083 	}
2084 
2085 	return count;
2086 }
2087 
2088 int ldc_map_sg(struct ldc_channel *lp,
2089 	       struct scatterlist *sg, int num_sg,
2090 	       struct ldc_trans_cookie *cookies, int ncookies,
2091 	       unsigned int map_perm)
2092 {
2093 	unsigned long i, npages, flags;
2094 	struct ldc_mtable_entry *base;
2095 	struct cookie_state state;
2096 	struct ldc_iommu *iommu;
2097 	int err;
2098 
2099 	if (map_perm & ~LDC_MAP_ALL)
2100 		return -EINVAL;
2101 
2102 	err = sg_count_pages(sg, num_sg);
2103 	if (err < 0)
2104 		return err;
2105 
2106 	npages = err;
2107 	if (err > ncookies)
2108 		return -EMSGSIZE;
2109 
2110 	iommu = &lp->iommu;
2111 
2112 	spin_lock_irqsave(&iommu->lock, flags);
2113 	base = alloc_npages(iommu, npages);
2114 	spin_unlock_irqrestore(&iommu->lock, flags);
2115 
2116 	if (!base)
2117 		return -ENOMEM;
2118 
2119 	state.page_table = iommu->page_table;
2120 	state.cookies = cookies;
2121 	state.mte_base = perm_to_mte(map_perm);
2122 	state.prev_cookie = ~(u64)0;
2123 	state.pte_idx = (base - iommu->page_table);
2124 	state.nc = 0;
2125 
2126 	for (i = 0; i < num_sg; i++)
2127 		fill_cookies(&state, page_to_pfn(sg_page(&sg[i])) << PAGE_SHIFT,
2128 			     sg[i].offset, sg[i].length);
2129 
2130 	return state.nc;
2131 }
2132 EXPORT_SYMBOL(ldc_map_sg);
2133 
2134 int ldc_map_single(struct ldc_channel *lp,
2135 		   void *buf, unsigned int len,
2136 		   struct ldc_trans_cookie *cookies, int ncookies,
2137 		   unsigned int map_perm)
2138 {
2139 	unsigned long npages, pa, flags;
2140 	struct ldc_mtable_entry *base;
2141 	struct cookie_state state;
2142 	struct ldc_iommu *iommu;
2143 
2144 	if ((map_perm & ~LDC_MAP_ALL) || (ncookies < 1))
2145 		return -EINVAL;
2146 
2147 	pa = __pa(buf);
2148 	if ((pa | len) & (8UL - 1))
2149 		return -EFAULT;
2150 
2151 	npages = pages_in_region(pa, len);
2152 
2153 	iommu = &lp->iommu;
2154 
2155 	spin_lock_irqsave(&iommu->lock, flags);
2156 	base = alloc_npages(iommu, npages);
2157 	spin_unlock_irqrestore(&iommu->lock, flags);
2158 
2159 	if (!base)
2160 		return -ENOMEM;
2161 
2162 	state.page_table = iommu->page_table;
2163 	state.cookies = cookies;
2164 	state.mte_base = perm_to_mte(map_perm);
2165 	state.prev_cookie = ~(u64)0;
2166 	state.pte_idx = (base - iommu->page_table);
2167 	state.nc = 0;
2168 	fill_cookies(&state, (pa & PAGE_MASK), (pa & ~PAGE_MASK), len);
2169 	BUG_ON(state.nc > ncookies);
2170 
2171 	return state.nc;
2172 }
2173 EXPORT_SYMBOL(ldc_map_single);
2174 
2175 static void free_npages(unsigned long id, struct ldc_iommu *iommu,
2176 			u64 cookie, u64 size)
2177 {
2178 	struct iommu_arena *arena = &iommu->arena;
2179 	unsigned long i, shift, index, npages;
2180 	struct ldc_mtable_entry *base;
2181 
2182 	npages = PAGE_ALIGN(((cookie & ~PAGE_MASK) + size)) >> PAGE_SHIFT;
2183 	index = cookie_to_index(cookie, &shift);
2184 	base = iommu->page_table + index;
2185 
2186 	BUG_ON(index > arena->limit ||
2187 	       (index + npages) > arena->limit);
2188 
2189 	for (i = 0; i < npages; i++) {
2190 		if (base->cookie)
2191 			sun4v_ldc_revoke(id, cookie + (i << shift),
2192 					 base->cookie);
2193 		base->mte = 0;
2194 		__clear_bit(index + i, arena->map);
2195 	}
2196 }
2197 
2198 void ldc_unmap(struct ldc_channel *lp, struct ldc_trans_cookie *cookies,
2199 	       int ncookies)
2200 {
2201 	struct ldc_iommu *iommu = &lp->iommu;
2202 	unsigned long flags;
2203 	int i;
2204 
2205 	spin_lock_irqsave(&iommu->lock, flags);
2206 	for (i = 0; i < ncookies; i++) {
2207 		u64 addr = cookies[i].cookie_addr;
2208 		u64 size = cookies[i].cookie_size;
2209 
2210 		free_npages(lp->id, iommu, addr, size);
2211 	}
2212 	spin_unlock_irqrestore(&iommu->lock, flags);
2213 }
2214 EXPORT_SYMBOL(ldc_unmap);
2215 
2216 int ldc_copy(struct ldc_channel *lp, int copy_dir,
2217 	     void *buf, unsigned int len, unsigned long offset,
2218 	     struct ldc_trans_cookie *cookies, int ncookies)
2219 {
2220 	unsigned int orig_len;
2221 	unsigned long ra;
2222 	int i;
2223 
2224 	if (copy_dir != LDC_COPY_IN && copy_dir != LDC_COPY_OUT) {
2225 		printk(KERN_ERR PFX "ldc_copy: ID[%lu] Bad copy_dir[%d]\n",
2226 		       lp->id, copy_dir);
2227 		return -EINVAL;
2228 	}
2229 
2230 	ra = __pa(buf);
2231 	if ((ra | len | offset) & (8UL - 1)) {
2232 		printk(KERN_ERR PFX "ldc_copy: ID[%lu] Unaligned buffer "
2233 		       "ra[%lx] len[%x] offset[%lx]\n",
2234 		       lp->id, ra, len, offset);
2235 		return -EFAULT;
2236 	}
2237 
2238 	if (lp->hs_state != LDC_HS_COMPLETE ||
2239 	    (lp->flags & LDC_FLAG_RESET)) {
2240 		printk(KERN_ERR PFX "ldc_copy: ID[%lu] Link down hs_state[%x] "
2241 		       "flags[%x]\n", lp->id, lp->hs_state, lp->flags);
2242 		return -ECONNRESET;
2243 	}
2244 
2245 	orig_len = len;
2246 	for (i = 0; i < ncookies; i++) {
2247 		unsigned long cookie_raddr = cookies[i].cookie_addr;
2248 		unsigned long this_len = cookies[i].cookie_size;
2249 		unsigned long actual_len;
2250 
2251 		if (unlikely(offset)) {
2252 			unsigned long this_off = offset;
2253 
2254 			if (this_off > this_len)
2255 				this_off = this_len;
2256 
2257 			offset -= this_off;
2258 			this_len -= this_off;
2259 			if (!this_len)
2260 				continue;
2261 			cookie_raddr += this_off;
2262 		}
2263 
2264 		if (this_len > len)
2265 			this_len = len;
2266 
2267 		while (1) {
2268 			unsigned long hv_err;
2269 
2270 			hv_err = sun4v_ldc_copy(lp->id, copy_dir,
2271 						cookie_raddr, ra,
2272 						this_len, &actual_len);
2273 			if (unlikely(hv_err)) {
2274 				printk(KERN_ERR PFX "ldc_copy: ID[%lu] "
2275 				       "HV error %lu\n",
2276 				       lp->id, hv_err);
2277 				if (lp->hs_state != LDC_HS_COMPLETE ||
2278 				    (lp->flags & LDC_FLAG_RESET))
2279 					return -ECONNRESET;
2280 				else
2281 					return -EFAULT;
2282 			}
2283 
2284 			cookie_raddr += actual_len;
2285 			ra += actual_len;
2286 			len -= actual_len;
2287 			if (actual_len == this_len)
2288 				break;
2289 
2290 			this_len -= actual_len;
2291 		}
2292 
2293 		if (!len)
2294 			break;
2295 	}
2296 
2297 	/* It is caller policy what to do about short copies.
2298 	 * For example, a networking driver can declare the
2299 	 * packet a runt and drop it.
2300 	 */
2301 
2302 	return orig_len - len;
2303 }
2304 EXPORT_SYMBOL(ldc_copy);
2305 
2306 void *ldc_alloc_exp_dring(struct ldc_channel *lp, unsigned int len,
2307 			  struct ldc_trans_cookie *cookies, int *ncookies,
2308 			  unsigned int map_perm)
2309 {
2310 	void *buf;
2311 	int err;
2312 
2313 	if (len & (8UL - 1))
2314 		return ERR_PTR(-EINVAL);
2315 
2316 	buf = kzalloc(len, GFP_KERNEL);
2317 	if (!buf)
2318 		return ERR_PTR(-ENOMEM);
2319 
2320 	err = ldc_map_single(lp, buf, len, cookies, *ncookies, map_perm);
2321 	if (err < 0) {
2322 		kfree(buf);
2323 		return ERR_PTR(err);
2324 	}
2325 	*ncookies = err;
2326 
2327 	return buf;
2328 }
2329 EXPORT_SYMBOL(ldc_alloc_exp_dring);
2330 
2331 void ldc_free_exp_dring(struct ldc_channel *lp, void *buf, unsigned int len,
2332 			struct ldc_trans_cookie *cookies, int ncookies)
2333 {
2334 	ldc_unmap(lp, cookies, ncookies);
2335 	kfree(buf);
2336 }
2337 EXPORT_SYMBOL(ldc_free_exp_dring);
2338 
2339 static int __init ldc_init(void)
2340 {
2341 	unsigned long major, minor;
2342 	struct mdesc_handle *hp;
2343 	const u64 *v;
2344 	int err;
2345 	u64 mp;
2346 
2347 	hp = mdesc_grab();
2348 	if (!hp)
2349 		return -ENODEV;
2350 
2351 	mp = mdesc_node_by_name(hp, MDESC_NODE_NULL, "platform");
2352 	err = -ENODEV;
2353 	if (mp == MDESC_NODE_NULL)
2354 		goto out;
2355 
2356 	v = mdesc_get_property(hp, mp, "domaining-enabled", NULL);
2357 	if (!v)
2358 		goto out;
2359 
2360 	major = 1;
2361 	minor = 0;
2362 	if (sun4v_hvapi_register(HV_GRP_LDOM, major, &minor)) {
2363 		printk(KERN_INFO PFX "Could not register LDOM hvapi.\n");
2364 		goto out;
2365 	}
2366 
2367 	printk(KERN_INFO "%s", version);
2368 
2369 	if (!*v) {
2370 		printk(KERN_INFO PFX "Domaining disabled.\n");
2371 		goto out;
2372 	}
2373 	ldom_domaining_enabled = 1;
2374 	err = 0;
2375 
2376 out:
2377 	mdesc_release(hp);
2378 	return err;
2379 }
2380 
2381 core_initcall(ldc_init);
2382