1 // SPDX-License-Identifier: GPL-2.0-only
2 /* Copyright (c) 2010-2011, Code Aurora Forum. All rights reserved.
4 * Author: Stepan Moskovchenko <stepanm@codeaurora.org>
7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
8 #include <linux/kernel.h>
9 #include <linux/init.h>
10 #include <linux/platform_device.h>
11 #include <linux/errno.h>
13 #include <linux/io-pgtable.h>
14 #include <linux/interrupt.h>
15 #include <linux/list.h>
16 #include <linux/spinlock.h>
17 #include <linux/slab.h>
18 #include <linux/iommu.h>
19 #include <linux/clk.h>
20 #include <linux/err.h>
22 #include <asm/cacheflush.h>
23 #include <linux/sizes.h>
25 #include "msm_iommu_hw-8xxx.h"
26 #include "msm_iommu.h"
28 #define MRC(reg, processor, op1, crn, crm, op2) \
29 __asm__ __volatile__ ( \
30 " mrc " #processor "," #op1 ", %0," #crn "," #crm "," #op2 "\n" \
33 /* bitmap of the page sizes currently supported */
34 #define MSM_IOMMU_PGSIZES (SZ_4K | SZ_64K | SZ_1M | SZ_16M)
36 static DEFINE_SPINLOCK(msm_iommu_lock);
37 static LIST_HEAD(qcom_iommu_devices);
38 static struct iommu_ops msm_iommu_ops;
41 struct list_head list_attached;
42 struct iommu_domain domain;
43 struct io_pgtable_cfg cfg;
44 struct io_pgtable_ops *iop;
46 spinlock_t pgtlock; /* pagetable lock */
49 static struct msm_priv *to_msm_priv(struct iommu_domain *dom)
51 return container_of(dom, struct msm_priv, domain);
54 static int __enable_clocks(struct msm_iommu_dev *iommu)
58 ret = clk_enable(iommu->pclk);
63 ret = clk_enable(iommu->clk);
65 clk_disable(iommu->pclk);
71 static void __disable_clocks(struct msm_iommu_dev *iommu)
74 clk_disable(iommu->clk);
75 clk_disable(iommu->pclk);
78 static void msm_iommu_reset(void __iomem *base, int ncb)
84 SET_ESRRESTORE(base, 0);
88 SET_TESTBUSCR(base, 0);
90 SET_GLOBAL_TLBIALL(base, 0);
92 SET_TLBLKCRWE(base, 1);
94 for (ctx = 0; ctx < ncb; ctx++) {
95 SET_BPRCOSH(base, ctx, 0);
96 SET_BPRCISH(base, ctx, 0);
97 SET_BPRCNSH(base, ctx, 0);
98 SET_BPSHCFG(base, ctx, 0);
99 SET_BPMTCFG(base, ctx, 0);
100 SET_ACTLR(base, ctx, 0);
101 SET_SCTLR(base, ctx, 0);
102 SET_FSRRESTORE(base, ctx, 0);
103 SET_TTBR0(base, ctx, 0);
104 SET_TTBR1(base, ctx, 0);
105 SET_TTBCR(base, ctx, 0);
106 SET_BFBCR(base, ctx, 0);
107 SET_PAR(base, ctx, 0);
108 SET_FAR(base, ctx, 0);
109 SET_CTX_TLBIALL(base, ctx, 0);
110 SET_TLBFLPTER(base, ctx, 0);
111 SET_TLBSLPTER(base, ctx, 0);
112 SET_TLBLKCR(base, ctx, 0);
113 SET_CONTEXTIDR(base, ctx, 0);
117 static void __flush_iotlb(void *cookie)
119 struct msm_priv *priv = cookie;
120 struct msm_iommu_dev *iommu = NULL;
121 struct msm_iommu_ctx_dev *master;
124 list_for_each_entry(iommu, &priv->list_attached, dom_node) {
125 ret = __enable_clocks(iommu);
129 list_for_each_entry(master, &iommu->ctx_list, list)
130 SET_CTX_TLBIALL(iommu->base, master->num, 0);
132 __disable_clocks(iommu);
138 static void __flush_iotlb_range(unsigned long iova, size_t size,
139 size_t granule, bool leaf, void *cookie)
141 struct msm_priv *priv = cookie;
142 struct msm_iommu_dev *iommu = NULL;
143 struct msm_iommu_ctx_dev *master;
147 list_for_each_entry(iommu, &priv->list_attached, dom_node) {
148 ret = __enable_clocks(iommu);
152 list_for_each_entry(master, &iommu->ctx_list, list) {
156 iova |= GET_CONTEXTIDR_ASID(iommu->base,
158 SET_TLBIVA(iommu->base, master->num, iova);
160 } while (temp_size -= granule);
163 __disable_clocks(iommu);
170 static void __flush_iotlb_walk(unsigned long iova, size_t size,
171 size_t granule, void *cookie)
173 __flush_iotlb_range(iova, size, granule, false, cookie);
176 static void __flush_iotlb_page(struct iommu_iotlb_gather *gather,
177 unsigned long iova, size_t granule, void *cookie)
179 __flush_iotlb_range(iova, granule, granule, true, cookie);
182 static const struct iommu_flush_ops msm_iommu_flush_ops = {
183 .tlb_flush_all = __flush_iotlb,
184 .tlb_flush_walk = __flush_iotlb_walk,
185 .tlb_add_page = __flush_iotlb_page,
188 static int msm_iommu_alloc_ctx(unsigned long *map, int start, int end)
193 idx = find_next_zero_bit(map, end, start);
196 } while (test_and_set_bit(idx, map));
201 static void msm_iommu_free_ctx(unsigned long *map, int idx)
206 static void config_mids(struct msm_iommu_dev *iommu,
207 struct msm_iommu_ctx_dev *master)
211 for (i = 0; i < master->num_mids; i++) {
212 mid = master->mids[i];
215 SET_M2VCBR_N(iommu->base, mid, 0);
216 SET_CBACR_N(iommu->base, ctx, 0);
219 SET_VMID(iommu->base, mid, 0);
221 /* Set the context number for that MID to this context */
222 SET_CBNDX(iommu->base, mid, ctx);
224 /* Set MID associated with this context bank to 0*/
225 SET_CBVMID(iommu->base, ctx, 0);
227 /* Set the ASID for TLB tagging for this context */
228 SET_CONTEXTIDR_ASID(iommu->base, ctx, ctx);
230 /* Set security bit override to be Non-secure */
231 SET_NSCFG(iommu->base, mid, 3);
235 static void __reset_context(void __iomem *base, int ctx)
237 SET_BPRCOSH(base, ctx, 0);
238 SET_BPRCISH(base, ctx, 0);
239 SET_BPRCNSH(base, ctx, 0);
240 SET_BPSHCFG(base, ctx, 0);
241 SET_BPMTCFG(base, ctx, 0);
242 SET_ACTLR(base, ctx, 0);
243 SET_SCTLR(base, ctx, 0);
244 SET_FSRRESTORE(base, ctx, 0);
245 SET_TTBR0(base, ctx, 0);
246 SET_TTBR1(base, ctx, 0);
247 SET_TTBCR(base, ctx, 0);
248 SET_BFBCR(base, ctx, 0);
249 SET_PAR(base, ctx, 0);
250 SET_FAR(base, ctx, 0);
251 SET_CTX_TLBIALL(base, ctx, 0);
252 SET_TLBFLPTER(base, ctx, 0);
253 SET_TLBSLPTER(base, ctx, 0);
254 SET_TLBLKCR(base, ctx, 0);
257 static void __program_context(void __iomem *base, int ctx,
258 struct msm_priv *priv)
260 __reset_context(base, ctx);
262 /* Turn on TEX Remap */
263 SET_TRE(base, ctx, 1);
264 SET_AFE(base, ctx, 1);
266 /* Set up HTW mode */
267 /* TLB miss configuration: perform HTW on miss */
268 SET_TLBMCFG(base, ctx, 0x3);
270 /* V2P configuration: HTW for access */
271 SET_V2PCFG(base, ctx, 0x3);
273 SET_TTBCR(base, ctx, priv->cfg.arm_v7s_cfg.tcr);
274 SET_TTBR0(base, ctx, priv->cfg.arm_v7s_cfg.ttbr);
275 SET_TTBR1(base, ctx, 0);
277 /* Set prrr and nmrr */
278 SET_PRRR(base, ctx, priv->cfg.arm_v7s_cfg.prrr);
279 SET_NMRR(base, ctx, priv->cfg.arm_v7s_cfg.nmrr);
281 /* Invalidate the TLB for this context */
282 SET_CTX_TLBIALL(base, ctx, 0);
284 /* Set interrupt number to "secure" interrupt */
285 SET_IRPTNDX(base, ctx, 0);
287 /* Enable context fault interrupt */
288 SET_CFEIE(base, ctx, 1);
290 /* Stall access on a context fault and let the handler deal with it */
291 SET_CFCFG(base, ctx, 1);
293 /* Redirect all cacheable requests to L2 slave port. */
294 SET_RCISH(base, ctx, 1);
295 SET_RCOSH(base, ctx, 1);
296 SET_RCNSH(base, ctx, 1);
298 /* Turn on BFB prefetch */
299 SET_BFBDFE(base, ctx, 1);
305 static struct iommu_domain *msm_iommu_domain_alloc(unsigned type)
307 struct msm_priv *priv;
309 if (type != IOMMU_DOMAIN_UNMANAGED)
312 priv = kzalloc(sizeof(*priv), GFP_KERNEL);
316 INIT_LIST_HEAD(&priv->list_attached);
318 priv->domain.geometry.aperture_start = 0;
319 priv->domain.geometry.aperture_end = (1ULL << 32) - 1;
320 priv->domain.geometry.force_aperture = true;
322 return &priv->domain;
329 static void msm_iommu_domain_free(struct iommu_domain *domain)
331 struct msm_priv *priv;
334 spin_lock_irqsave(&msm_iommu_lock, flags);
335 priv = to_msm_priv(domain);
337 spin_unlock_irqrestore(&msm_iommu_lock, flags);
340 static int msm_iommu_domain_config(struct msm_priv *priv)
342 spin_lock_init(&priv->pgtlock);
344 priv->cfg = (struct io_pgtable_cfg) {
345 .pgsize_bitmap = msm_iommu_ops.pgsize_bitmap,
348 .tlb = &msm_iommu_flush_ops,
349 .iommu_dev = priv->dev,
352 priv->iop = alloc_io_pgtable_ops(ARM_V7S, &priv->cfg, priv);
354 dev_err(priv->dev, "Failed to allocate pgtable\n");
358 msm_iommu_ops.pgsize_bitmap = priv->cfg.pgsize_bitmap;
363 /* Must be called under msm_iommu_lock */
364 static struct msm_iommu_dev *find_iommu_for_dev(struct device *dev)
366 struct msm_iommu_dev *iommu, *ret = NULL;
367 struct msm_iommu_ctx_dev *master;
369 list_for_each_entry(iommu, &qcom_iommu_devices, dev_node) {
370 master = list_first_entry(&iommu->ctx_list,
371 struct msm_iommu_ctx_dev,
373 if (master->of_node == dev->of_node) {
382 static struct iommu_device *msm_iommu_probe_device(struct device *dev)
384 struct msm_iommu_dev *iommu;
387 spin_lock_irqsave(&msm_iommu_lock, flags);
388 iommu = find_iommu_for_dev(dev);
389 spin_unlock_irqrestore(&msm_iommu_lock, flags);
392 return ERR_PTR(-ENODEV);
394 return &iommu->iommu;
397 static void msm_iommu_release_device(struct device *dev)
401 static int msm_iommu_attach_dev(struct iommu_domain *domain, struct device *dev)
405 struct msm_iommu_dev *iommu;
406 struct msm_priv *priv = to_msm_priv(domain);
407 struct msm_iommu_ctx_dev *master;
410 msm_iommu_domain_config(priv);
412 spin_lock_irqsave(&msm_iommu_lock, flags);
413 list_for_each_entry(iommu, &qcom_iommu_devices, dev_node) {
414 master = list_first_entry(&iommu->ctx_list,
415 struct msm_iommu_ctx_dev,
417 if (master->of_node == dev->of_node) {
418 ret = __enable_clocks(iommu);
422 list_for_each_entry(master, &iommu->ctx_list, list) {
424 dev_err(dev, "domain already attached");
429 msm_iommu_alloc_ctx(iommu->context_map,
431 if (IS_ERR_VALUE(master->num)) {
435 config_mids(iommu, master);
436 __program_context(iommu->base, master->num,
439 __disable_clocks(iommu);
440 list_add(&iommu->dom_node, &priv->list_attached);
445 spin_unlock_irqrestore(&msm_iommu_lock, flags);
450 static void msm_iommu_detach_dev(struct iommu_domain *domain,
453 struct msm_priv *priv = to_msm_priv(domain);
455 struct msm_iommu_dev *iommu;
456 struct msm_iommu_ctx_dev *master;
459 free_io_pgtable_ops(priv->iop);
461 spin_lock_irqsave(&msm_iommu_lock, flags);
462 list_for_each_entry(iommu, &priv->list_attached, dom_node) {
463 ret = __enable_clocks(iommu);
467 list_for_each_entry(master, &iommu->ctx_list, list) {
468 msm_iommu_free_ctx(iommu->context_map, master->num);
469 __reset_context(iommu->base, master->num);
471 __disable_clocks(iommu);
474 spin_unlock_irqrestore(&msm_iommu_lock, flags);
477 static int msm_iommu_map(struct iommu_domain *domain, unsigned long iova,
478 phys_addr_t pa, size_t len, int prot, gfp_t gfp)
480 struct msm_priv *priv = to_msm_priv(domain);
484 spin_lock_irqsave(&priv->pgtlock, flags);
485 ret = priv->iop->map(priv->iop, iova, pa, len, prot, GFP_ATOMIC);
486 spin_unlock_irqrestore(&priv->pgtlock, flags);
491 static void msm_iommu_sync_map(struct iommu_domain *domain, unsigned long iova,
494 struct msm_priv *priv = to_msm_priv(domain);
496 __flush_iotlb_range(iova, size, SZ_4K, false, priv);
499 static size_t msm_iommu_unmap(struct iommu_domain *domain, unsigned long iova,
500 size_t len, struct iommu_iotlb_gather *gather)
502 struct msm_priv *priv = to_msm_priv(domain);
505 spin_lock_irqsave(&priv->pgtlock, flags);
506 len = priv->iop->unmap(priv->iop, iova, len, gather);
507 spin_unlock_irqrestore(&priv->pgtlock, flags);
512 static phys_addr_t msm_iommu_iova_to_phys(struct iommu_domain *domain,
515 struct msm_priv *priv;
516 struct msm_iommu_dev *iommu;
517 struct msm_iommu_ctx_dev *master;
522 spin_lock_irqsave(&msm_iommu_lock, flags);
524 priv = to_msm_priv(domain);
525 iommu = list_first_entry(&priv->list_attached,
526 struct msm_iommu_dev, dom_node);
528 if (list_empty(&iommu->ctx_list))
531 master = list_first_entry(&iommu->ctx_list,
532 struct msm_iommu_ctx_dev, list);
536 ret = __enable_clocks(iommu);
540 /* Invalidate context TLB */
541 SET_CTX_TLBIALL(iommu->base, master->num, 0);
542 SET_V2PPR(iommu->base, master->num, va & V2Pxx_VA);
544 par = GET_PAR(iommu->base, master->num);
546 /* We are dealing with a supersection */
547 if (GET_NOFAULT_SS(iommu->base, master->num))
548 ret = (par & 0xFF000000) | (va & 0x00FFFFFF);
549 else /* Upper 20 bits from PAR, lower 12 from VA */
550 ret = (par & 0xFFFFF000) | (va & 0x00000FFF);
552 if (GET_FAULT(iommu->base, master->num))
555 __disable_clocks(iommu);
557 spin_unlock_irqrestore(&msm_iommu_lock, flags);
561 static bool msm_iommu_capable(enum iommu_cap cap)
566 static void print_ctx_regs(void __iomem *base, int ctx)
568 unsigned int fsr = GET_FSR(base, ctx);
569 pr_err("FAR = %08x PAR = %08x\n",
570 GET_FAR(base, ctx), GET_PAR(base, ctx));
571 pr_err("FSR = %08x [%s%s%s%s%s%s%s%s%s%s]\n", fsr,
572 (fsr & 0x02) ? "TF " : "",
573 (fsr & 0x04) ? "AFF " : "",
574 (fsr & 0x08) ? "APF " : "",
575 (fsr & 0x10) ? "TLBMF " : "",
576 (fsr & 0x20) ? "HTWDEEF " : "",
577 (fsr & 0x40) ? "HTWSEEF " : "",
578 (fsr & 0x80) ? "MHF " : "",
579 (fsr & 0x10000) ? "SL " : "",
580 (fsr & 0x40000000) ? "SS " : "",
581 (fsr & 0x80000000) ? "MULTI " : "");
583 pr_err("FSYNR0 = %08x FSYNR1 = %08x\n",
584 GET_FSYNR0(base, ctx), GET_FSYNR1(base, ctx));
585 pr_err("TTBR0 = %08x TTBR1 = %08x\n",
586 GET_TTBR0(base, ctx), GET_TTBR1(base, ctx));
587 pr_err("SCTLR = %08x ACTLR = %08x\n",
588 GET_SCTLR(base, ctx), GET_ACTLR(base, ctx));
591 static void insert_iommu_master(struct device *dev,
592 struct msm_iommu_dev **iommu,
593 struct of_phandle_args *spec)
595 struct msm_iommu_ctx_dev *master = dev_iommu_priv_get(dev);
598 if (list_empty(&(*iommu)->ctx_list)) {
599 master = kzalloc(sizeof(*master), GFP_ATOMIC);
600 master->of_node = dev->of_node;
601 list_add(&master->list, &(*iommu)->ctx_list);
602 dev_iommu_priv_set(dev, master);
605 for (sid = 0; sid < master->num_mids; sid++)
606 if (master->mids[sid] == spec->args[0]) {
607 dev_warn(dev, "Stream ID 0x%hx repeated; ignoring\n",
612 master->mids[master->num_mids++] = spec->args[0];
615 static int qcom_iommu_of_xlate(struct device *dev,
616 struct of_phandle_args *spec)
618 struct msm_iommu_dev *iommu;
622 spin_lock_irqsave(&msm_iommu_lock, flags);
623 list_for_each_entry(iommu, &qcom_iommu_devices, dev_node)
624 if (iommu->dev->of_node == spec->np)
627 if (!iommu || iommu->dev->of_node != spec->np) {
632 insert_iommu_master(dev, &iommu, spec);
634 spin_unlock_irqrestore(&msm_iommu_lock, flags);
639 irqreturn_t msm_iommu_fault_handler(int irq, void *dev_id)
641 struct msm_iommu_dev *iommu = dev_id;
645 spin_lock(&msm_iommu_lock);
648 pr_err("Invalid device ID in context interrupt handler\n");
652 pr_err("Unexpected IOMMU page fault!\n");
653 pr_err("base = %08x\n", (unsigned int)iommu->base);
655 ret = __enable_clocks(iommu);
659 for (i = 0; i < iommu->ncb; i++) {
660 fsr = GET_FSR(iommu->base, i);
662 pr_err("Fault occurred in context %d.\n", i);
663 pr_err("Interesting registers:\n");
664 print_ctx_regs(iommu->base, i);
665 SET_FSR(iommu->base, i, 0x4000000F);
668 __disable_clocks(iommu);
670 spin_unlock(&msm_iommu_lock);
674 static struct iommu_ops msm_iommu_ops = {
675 .capable = msm_iommu_capable,
676 .domain_alloc = msm_iommu_domain_alloc,
677 .domain_free = msm_iommu_domain_free,
678 .attach_dev = msm_iommu_attach_dev,
679 .detach_dev = msm_iommu_detach_dev,
680 .map = msm_iommu_map,
681 .unmap = msm_iommu_unmap,
683 * Nothing is needed here, the barrier to guarantee
684 * completion of the tlb sync operation is implicitly
685 * taken care when the iommu client does a writel before
686 * kick starting the other master.
689 .iotlb_sync_map = msm_iommu_sync_map,
690 .iova_to_phys = msm_iommu_iova_to_phys,
691 .probe_device = msm_iommu_probe_device,
692 .release_device = msm_iommu_release_device,
693 .device_group = generic_device_group,
694 .pgsize_bitmap = MSM_IOMMU_PGSIZES,
695 .of_xlate = qcom_iommu_of_xlate,
698 static int msm_iommu_probe(struct platform_device *pdev)
701 resource_size_t ioaddr;
702 struct msm_iommu_dev *iommu;
705 iommu = devm_kzalloc(&pdev->dev, sizeof(*iommu), GFP_KERNEL);
709 iommu->dev = &pdev->dev;
710 INIT_LIST_HEAD(&iommu->ctx_list);
712 iommu->pclk = devm_clk_get(iommu->dev, "smmu_pclk");
713 if (IS_ERR(iommu->pclk)) {
714 dev_err(iommu->dev, "could not get smmu_pclk\n");
715 return PTR_ERR(iommu->pclk);
718 ret = clk_prepare(iommu->pclk);
720 dev_err(iommu->dev, "could not prepare smmu_pclk\n");
724 iommu->clk = devm_clk_get(iommu->dev, "iommu_clk");
725 if (IS_ERR(iommu->clk)) {
726 dev_err(iommu->dev, "could not get iommu_clk\n");
727 clk_unprepare(iommu->pclk);
728 return PTR_ERR(iommu->clk);
731 ret = clk_prepare(iommu->clk);
733 dev_err(iommu->dev, "could not prepare iommu_clk\n");
734 clk_unprepare(iommu->pclk);
738 r = platform_get_resource(pdev, IORESOURCE_MEM, 0);
739 iommu->base = devm_ioremap_resource(iommu->dev, r);
740 if (IS_ERR(iommu->base)) {
741 dev_err(iommu->dev, "could not get iommu base\n");
742 ret = PTR_ERR(iommu->base);
747 iommu->irq = platform_get_irq(pdev, 0);
748 if (iommu->irq < 0) {
753 ret = of_property_read_u32(iommu->dev->of_node, "qcom,ncb", &val);
755 dev_err(iommu->dev, "could not get ncb\n");
760 msm_iommu_reset(iommu->base, iommu->ncb);
761 SET_M(iommu->base, 0, 1);
762 SET_PAR(iommu->base, 0, 0);
763 SET_V2PCFG(iommu->base, 0, 1);
764 SET_V2PPR(iommu->base, 0, 0);
765 par = GET_PAR(iommu->base, 0);
766 SET_V2PCFG(iommu->base, 0, 0);
767 SET_M(iommu->base, 0, 0);
770 pr_err("Invalid PAR value detected\n");
775 ret = devm_request_threaded_irq(iommu->dev, iommu->irq, NULL,
776 msm_iommu_fault_handler,
777 IRQF_ONESHOT | IRQF_SHARED,
778 "msm_iommu_secure_irpt_handler",
781 pr_err("Request IRQ %d failed with ret=%d\n", iommu->irq, ret);
785 list_add(&iommu->dev_node, &qcom_iommu_devices);
787 ret = iommu_device_sysfs_add(&iommu->iommu, iommu->dev, NULL,
788 "msm-smmu.%pa", &ioaddr);
790 pr_err("Could not add msm-smmu at %pa to sysfs\n", &ioaddr);
794 ret = iommu_device_register(&iommu->iommu, &msm_iommu_ops, &pdev->dev);
796 pr_err("Could not register msm-smmu at %pa\n", &ioaddr);
800 bus_set_iommu(&platform_bus_type, &msm_iommu_ops);
802 pr_info("device mapped at %p, irq %d with %d ctx banks\n",
803 iommu->base, iommu->irq, iommu->ncb);
807 clk_unprepare(iommu->clk);
808 clk_unprepare(iommu->pclk);
812 static const struct of_device_id msm_iommu_dt_match[] = {
813 { .compatible = "qcom,apq8064-iommu" },
817 static int msm_iommu_remove(struct platform_device *pdev)
819 struct msm_iommu_dev *iommu = platform_get_drvdata(pdev);
821 clk_unprepare(iommu->clk);
822 clk_unprepare(iommu->pclk);
826 static struct platform_driver msm_iommu_driver = {
829 .of_match_table = msm_iommu_dt_match,
831 .probe = msm_iommu_probe,
832 .remove = msm_iommu_remove,
835 static int __init msm_iommu_driver_init(void)
839 ret = platform_driver_register(&msm_iommu_driver);
841 pr_err("Failed to register IOMMU driver\n");
845 subsys_initcall(msm_iommu_driver_init);