2446 	struct ib_send_wr              *wr = NULL, *last, *next, *bad_wr;  in ib_uverbs_post_send()  local
2503 			ud->ah = idr_read_ah(user_wr->wr.ud.ah, file->ucontext);  in ib_uverbs_post_send()
2509 			ud->remote_qpn = user_wr->wr.ud.remote_qpn;  in ib_uverbs_post_send()
2510 			ud->remote_qkey = user_wr->wr.ud.remote_qkey;  in ib_uverbs_post_send()
2512 			next = &ud->wr;  in ib_uverbs_post_send()
2525 			rdma->remote_addr = user_wr->wr.rdma.remote_addr;  in ib_uverbs_post_send()
2526 			rdma->rkey = user_wr->wr.rdma.rkey;  in ib_uverbs_post_send()
2528 			next = &rdma->wr;  in ib_uverbs_post_send()
2540 			atomic->remote_addr = user_wr->wr.atomic.remote_addr;  in ib_uverbs_post_send()
2541 			atomic->compare_add = user_wr->wr.atomic.compare_add;  in ib_uverbs_post_send()
2542 			atomic->swap = user_wr->wr.atomic.swap;  in ib_uverbs_post_send()
2543 			atomic->rkey = user_wr->wr.atomic.rkey;  in ib_uverbs_post_send()
2545 			next = &atomic->wr;  in ib_uverbs_post_send()
2569 			wr = next;  in ib_uverbs_post_send()
2597 	ret = qp->device->post_send(qp->real_qp, wr, &bad_wr);  in ib_uverbs_post_send()
2599 		for (next = wr; next; next = next->next) {  in ib_uverbs_post_send()
2612 	while (wr) {  in ib_uverbs_post_send()
2613 		if (is_ud && ud_wr(wr)->ah)  in ib_uverbs_post_send()
2614 			put_ah_read(ud_wr(wr)->ah);  in ib_uverbs_post_send()
2615 		next = wr->next;  in ib_uverbs_post_send()
2616 		kfree(wr);  in ib_uverbs_post_send()
2617 		wr = next;  in ib_uverbs_post_send()
2633 	struct ib_recv_wr        *wr = NULL, *last, *next;  in ib_uverbs_unmarshall_recv()  local
2672 			wr = next;  in ib_uverbs_unmarshall_recv()
2697 	return wr;  in ib_uverbs_unmarshall_recv()
2702 	while (wr) {  in ib_uverbs_unmarshall_recv()
2703 		next = wr->next;  in ib_uverbs_unmarshall_recv()
2704 		kfree(wr);  in ib_uverbs_unmarshall_recv()
2705 		wr = next;  in ib_uverbs_unmarshall_recv()
2718 	struct ib_recv_wr              *wr, *next, *bad_wr;  in ib_uverbs_post_recv()  local
2725 	wr = ib_uverbs_unmarshall_recv(buf + sizeof cmd,  in ib_uverbs_post_recv()
2728 	if (IS_ERR(wr))  in ib_uverbs_post_recv()
2729 		return PTR_ERR(wr);  in ib_uverbs_post_recv()
2736 	ret = qp->device->post_recv(qp->real_qp, wr, &bad_wr);  in ib_uverbs_post_recv()
2741 		for (next = wr; next; next = next->next) {  in ib_uverbs_post_recv()
2752 	while (wr) {  in ib_uverbs_post_recv()
2753 		next = wr->next;  in ib_uverbs_post_recv()
2754 		kfree(wr);  in ib_uverbs_post_recv()
2755 		wr = next;  in ib_uverbs_post_recv()
2768 	struct ib_recv_wr                  *wr, *next, *bad_wr;  in ib_uverbs_post_srq_recv()  local
2775 	wr = ib_uverbs_unmarshall_recv(buf + sizeof cmd,  in ib_uverbs_post_srq_recv()
2778 	if (IS_ERR(wr))  in ib_uverbs_post_srq_recv()
2779 		return PTR_ERR(wr);  in ib_uverbs_post_srq_recv()
2786 	ret = srq->device->post_srq_recv(srq, wr, &bad_wr);  in ib_uverbs_post_srq_recv()
2791 		for (next = wr; next; next = next->next) {  in ib_uverbs_post_srq_recv()
2802 	while (wr) {  in ib_uverbs_post_srq_recv()
2803 		next = wr->next;  in ib_uverbs_post_srq_recv()
2804 		kfree(wr);  in ib_uverbs_post_srq_recv()
2805 		wr = next;  in ib_uverbs_post_srq_recv()