1 // SPDX-License-Identifier: GPL-2.0-only
2 /* Copyright (c) 2010-2011, Code Aurora Forum. All rights reserved.
4 * Author: Stepan Moskovchenko <stepanm@codeaurora.org>
7 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
8 #include <linux/kernel.h>
9 #include <linux/init.h>
10 #include <linux/platform_device.h>
11 #include <linux/errno.h>
13 #include <linux/io-pgtable.h>
14 #include <linux/interrupt.h>
15 #include <linux/list.h>
16 #include <linux/spinlock.h>
17 #include <linux/slab.h>
18 #include <linux/iommu.h>
19 #include <linux/clk.h>
20 #include <linux/err.h>
22 #include <asm/cacheflush.h>
23 #include <linux/sizes.h>
25 #include "msm_iommu_hw-8xxx.h"
26 #include "msm_iommu.h"
28 #define MRC(reg, processor, op1, crn, crm, op2) \
29 __asm__ __volatile__ ( \
30 " mrc " #processor "," #op1 ", %0," #crn "," #crm "," #op2 "\n" \
33 /* bitmap of the page sizes currently supported */
34 #define MSM_IOMMU_PGSIZES (SZ_4K | SZ_64K | SZ_1M | SZ_16M)
36 static DEFINE_SPINLOCK(msm_iommu_lock);
37 static LIST_HEAD(qcom_iommu_devices);
38 static struct iommu_ops msm_iommu_ops;
41 struct list_head list_attached;
42 struct iommu_domain domain;
43 struct io_pgtable_cfg cfg;
44 struct io_pgtable_ops *iop;
46 spinlock_t pgtlock; /* pagetable lock */
49 static struct msm_priv *to_msm_priv(struct iommu_domain *dom)
51 return container_of(dom, struct msm_priv, domain);
54 static int __enable_clocks(struct msm_iommu_dev *iommu)
58 ret = clk_enable(iommu->pclk);
63 ret = clk_enable(iommu->clk);
65 clk_disable(iommu->pclk);
71 static void __disable_clocks(struct msm_iommu_dev *iommu)
74 clk_disable(iommu->clk);
75 clk_disable(iommu->pclk);
78 static void msm_iommu_reset(void __iomem *base, int ncb)
84 SET_ESRRESTORE(base, 0);
88 SET_TESTBUSCR(base, 0);
90 SET_GLOBAL_TLBIALL(base, 0);
92 SET_TLBLKCRWE(base, 1);
94 for (ctx = 0; ctx < ncb; ctx++) {
95 SET_BPRCOSH(base, ctx, 0);
96 SET_BPRCISH(base, ctx, 0);
97 SET_BPRCNSH(base, ctx, 0);
98 SET_BPSHCFG(base, ctx, 0);
99 SET_BPMTCFG(base, ctx, 0);
100 SET_ACTLR(base, ctx, 0);
101 SET_SCTLR(base, ctx, 0);
102 SET_FSRRESTORE(base, ctx, 0);
103 SET_TTBR0(base, ctx, 0);
104 SET_TTBR1(base, ctx, 0);
105 SET_TTBCR(base, ctx, 0);
106 SET_BFBCR(base, ctx, 0);
107 SET_PAR(base, ctx, 0);
108 SET_FAR(base, ctx, 0);
109 SET_CTX_TLBIALL(base, ctx, 0);
110 SET_TLBFLPTER(base, ctx, 0);
111 SET_TLBSLPTER(base, ctx, 0);
112 SET_TLBLKCR(base, ctx, 0);
113 SET_CONTEXTIDR(base, ctx, 0);
117 static void __flush_iotlb(void *cookie)
119 struct msm_priv *priv = cookie;
120 struct msm_iommu_dev *iommu = NULL;
121 struct msm_iommu_ctx_dev *master;
124 list_for_each_entry(iommu, &priv->list_attached, dom_node) {
125 ret = __enable_clocks(iommu);
129 list_for_each_entry(master, &iommu->ctx_list, list)
130 SET_CTX_TLBIALL(iommu->base, master->num, 0);
132 __disable_clocks(iommu);
138 static void __flush_iotlb_range(unsigned long iova, size_t size,
139 size_t granule, bool leaf, void *cookie)
141 struct msm_priv *priv = cookie;
142 struct msm_iommu_dev *iommu = NULL;
143 struct msm_iommu_ctx_dev *master;
147 list_for_each_entry(iommu, &priv->list_attached, dom_node) {
148 ret = __enable_clocks(iommu);
152 list_for_each_entry(master, &iommu->ctx_list, list) {
156 iova |= GET_CONTEXTIDR_ASID(iommu->base,
158 SET_TLBIVA(iommu->base, master->num, iova);
160 } while (temp_size -= granule);
163 __disable_clocks(iommu);
170 static void __flush_iotlb_walk(unsigned long iova, size_t size,
171 size_t granule, void *cookie)
173 __flush_iotlb_range(iova, size, granule, false, cookie);
176 static void __flush_iotlb_page(struct iommu_iotlb_gather *gather,
177 unsigned long iova, size_t granule, void *cookie)
179 __flush_iotlb_range(iova, granule, granule, true, cookie);
182 static const struct iommu_flush_ops msm_iommu_flush_ops = {
183 .tlb_flush_all = __flush_iotlb,
184 .tlb_flush_walk = __flush_iotlb_walk,
185 .tlb_add_page = __flush_iotlb_page,
188 static int msm_iommu_alloc_ctx(unsigned long *map, int start, int end)
193 idx = find_next_zero_bit(map, end, start);
196 } while (test_and_set_bit(idx, map));
201 static void msm_iommu_free_ctx(unsigned long *map, int idx)
206 static void config_mids(struct msm_iommu_dev *iommu,
207 struct msm_iommu_ctx_dev *master)
211 for (i = 0; i < master->num_mids; i++) {
212 mid = master->mids[i];
215 SET_M2VCBR_N(iommu->base, mid, 0);
216 SET_CBACR_N(iommu->base, ctx, 0);
219 SET_VMID(iommu->base, mid, 0);
221 /* Set the context number for that MID to this context */
222 SET_CBNDX(iommu->base, mid, ctx);
224 /* Set MID associated with this context bank to 0*/
225 SET_CBVMID(iommu->base, ctx, 0);
227 /* Set the ASID for TLB tagging for this context */
228 SET_CONTEXTIDR_ASID(iommu->base, ctx, ctx);
230 /* Set security bit override to be Non-secure */
231 SET_NSCFG(iommu->base, mid, 3);
235 static void __reset_context(void __iomem *base, int ctx)
237 SET_BPRCOSH(base, ctx, 0);
238 SET_BPRCISH(base, ctx, 0);
239 SET_BPRCNSH(base, ctx, 0);
240 SET_BPSHCFG(base, ctx, 0);
241 SET_BPMTCFG(base, ctx, 0);
242 SET_ACTLR(base, ctx, 0);
243 SET_SCTLR(base, ctx, 0);
244 SET_FSRRESTORE(base, ctx, 0);
245 SET_TTBR0(base, ctx, 0);
246 SET_TTBR1(base, ctx, 0);
247 SET_TTBCR(base, ctx, 0);
248 SET_BFBCR(base, ctx, 0);
249 SET_PAR(base, ctx, 0);
250 SET_FAR(base, ctx, 0);
251 SET_CTX_TLBIALL(base, ctx, 0);
252 SET_TLBFLPTER(base, ctx, 0);
253 SET_TLBSLPTER(base, ctx, 0);
254 SET_TLBLKCR(base, ctx, 0);
257 static void __program_context(void __iomem *base, int ctx,
258 struct msm_priv *priv)
260 __reset_context(base, ctx);
262 /* Turn on TEX Remap */
263 SET_TRE(base, ctx, 1);
264 SET_AFE(base, ctx, 1);
266 /* Set up HTW mode */
267 /* TLB miss configuration: perform HTW on miss */
268 SET_TLBMCFG(base, ctx, 0x3);
270 /* V2P configuration: HTW for access */
271 SET_V2PCFG(base, ctx, 0x3);
273 SET_TTBCR(base, ctx, priv->cfg.arm_v7s_cfg.tcr);
274 SET_TTBR0(base, ctx, priv->cfg.arm_v7s_cfg.ttbr);
275 SET_TTBR1(base, ctx, 0);
277 /* Set prrr and nmrr */
278 SET_PRRR(base, ctx, priv->cfg.arm_v7s_cfg.prrr);
279 SET_NMRR(base, ctx, priv->cfg.arm_v7s_cfg.nmrr);
281 /* Invalidate the TLB for this context */
282 SET_CTX_TLBIALL(base, ctx, 0);
284 /* Set interrupt number to "secure" interrupt */
285 SET_IRPTNDX(base, ctx, 0);
287 /* Enable context fault interrupt */
288 SET_CFEIE(base, ctx, 1);
290 /* Stall access on a context fault and let the handler deal with it */
291 SET_CFCFG(base, ctx, 1);
293 /* Redirect all cacheable requests to L2 slave port. */
294 SET_RCISH(base, ctx, 1);
295 SET_RCOSH(base, ctx, 1);
296 SET_RCNSH(base, ctx, 1);
298 /* Turn on BFB prefetch */
299 SET_BFBDFE(base, ctx, 1);
305 static struct iommu_domain *msm_iommu_domain_alloc(unsigned type)
307 struct msm_priv *priv;
309 if (type != IOMMU_DOMAIN_UNMANAGED)
312 priv = kzalloc(sizeof(*priv), GFP_KERNEL);
316 INIT_LIST_HEAD(&priv->list_attached);
318 priv->domain.geometry.aperture_start = 0;
319 priv->domain.geometry.aperture_end = (1ULL << 32) - 1;
320 priv->domain.geometry.force_aperture = true;
322 return &priv->domain;
329 static void msm_iommu_domain_free(struct iommu_domain *domain)
331 struct msm_priv *priv;
334 spin_lock_irqsave(&msm_iommu_lock, flags);
335 priv = to_msm_priv(domain);
337 spin_unlock_irqrestore(&msm_iommu_lock, flags);
340 static int msm_iommu_domain_config(struct msm_priv *priv)
342 spin_lock_init(&priv->pgtlock);
344 priv->cfg = (struct io_pgtable_cfg) {
345 .pgsize_bitmap = msm_iommu_ops.pgsize_bitmap,
348 .tlb = &msm_iommu_flush_ops,
349 .iommu_dev = priv->dev,
352 priv->iop = alloc_io_pgtable_ops(ARM_V7S, &priv->cfg, priv);
354 dev_err(priv->dev, "Failed to allocate pgtable\n");
358 msm_iommu_ops.pgsize_bitmap = priv->cfg.pgsize_bitmap;
363 /* Must be called under msm_iommu_lock */
364 static struct msm_iommu_dev *find_iommu_for_dev(struct device *dev)
366 struct msm_iommu_dev *iommu, *ret = NULL;
367 struct msm_iommu_ctx_dev *master;
369 list_for_each_entry(iommu, &qcom_iommu_devices, dev_node) {
370 master = list_first_entry(&iommu->ctx_list,
371 struct msm_iommu_ctx_dev,
373 if (master->of_node == dev->of_node) {
382 static struct iommu_device *msm_iommu_probe_device(struct device *dev)
384 struct msm_iommu_dev *iommu;
387 spin_lock_irqsave(&msm_iommu_lock, flags);
388 iommu = find_iommu_for_dev(dev);
389 spin_unlock_irqrestore(&msm_iommu_lock, flags);
392 return ERR_PTR(-ENODEV);
394 return &iommu->iommu;
397 static int msm_iommu_attach_dev(struct iommu_domain *domain, struct device *dev)
401 struct msm_iommu_dev *iommu;
402 struct msm_priv *priv = to_msm_priv(domain);
403 struct msm_iommu_ctx_dev *master;
406 msm_iommu_domain_config(priv);
408 spin_lock_irqsave(&msm_iommu_lock, flags);
409 list_for_each_entry(iommu, &qcom_iommu_devices, dev_node) {
410 master = list_first_entry(&iommu->ctx_list,
411 struct msm_iommu_ctx_dev,
413 if (master->of_node == dev->of_node) {
414 ret = __enable_clocks(iommu);
418 list_for_each_entry(master, &iommu->ctx_list, list) {
420 dev_err(dev, "domain already attached");
425 msm_iommu_alloc_ctx(iommu->context_map,
427 if (IS_ERR_VALUE(master->num)) {
431 config_mids(iommu, master);
432 __program_context(iommu->base, master->num,
435 __disable_clocks(iommu);
436 list_add(&iommu->dom_node, &priv->list_attached);
441 spin_unlock_irqrestore(&msm_iommu_lock, flags);
446 static void msm_iommu_detach_dev(struct iommu_domain *domain,
449 struct msm_priv *priv = to_msm_priv(domain);
451 struct msm_iommu_dev *iommu;
452 struct msm_iommu_ctx_dev *master;
455 free_io_pgtable_ops(priv->iop);
457 spin_lock_irqsave(&msm_iommu_lock, flags);
458 list_for_each_entry(iommu, &priv->list_attached, dom_node) {
459 ret = __enable_clocks(iommu);
463 list_for_each_entry(master, &iommu->ctx_list, list) {
464 msm_iommu_free_ctx(iommu->context_map, master->num);
465 __reset_context(iommu->base, master->num);
467 __disable_clocks(iommu);
470 spin_unlock_irqrestore(&msm_iommu_lock, flags);
473 static int msm_iommu_map(struct iommu_domain *domain, unsigned long iova,
474 phys_addr_t pa, size_t len, int prot, gfp_t gfp)
476 struct msm_priv *priv = to_msm_priv(domain);
480 spin_lock_irqsave(&priv->pgtlock, flags);
481 ret = priv->iop->map(priv->iop, iova, pa, len, prot, GFP_ATOMIC);
482 spin_unlock_irqrestore(&priv->pgtlock, flags);
487 static void msm_iommu_sync_map(struct iommu_domain *domain, unsigned long iova,
490 struct msm_priv *priv = to_msm_priv(domain);
492 __flush_iotlb_range(iova, size, SZ_4K, false, priv);
495 static size_t msm_iommu_unmap(struct iommu_domain *domain, unsigned long iova,
496 size_t len, struct iommu_iotlb_gather *gather)
498 struct msm_priv *priv = to_msm_priv(domain);
501 spin_lock_irqsave(&priv->pgtlock, flags);
502 len = priv->iop->unmap(priv->iop, iova, len, gather);
503 spin_unlock_irqrestore(&priv->pgtlock, flags);
508 static phys_addr_t msm_iommu_iova_to_phys(struct iommu_domain *domain,
511 struct msm_priv *priv;
512 struct msm_iommu_dev *iommu;
513 struct msm_iommu_ctx_dev *master;
518 spin_lock_irqsave(&msm_iommu_lock, flags);
520 priv = to_msm_priv(domain);
521 iommu = list_first_entry(&priv->list_attached,
522 struct msm_iommu_dev, dom_node);
524 if (list_empty(&iommu->ctx_list))
527 master = list_first_entry(&iommu->ctx_list,
528 struct msm_iommu_ctx_dev, list);
532 ret = __enable_clocks(iommu);
536 /* Invalidate context TLB */
537 SET_CTX_TLBIALL(iommu->base, master->num, 0);
538 SET_V2PPR(iommu->base, master->num, va & V2Pxx_VA);
540 par = GET_PAR(iommu->base, master->num);
542 /* We are dealing with a supersection */
543 if (GET_NOFAULT_SS(iommu->base, master->num))
544 ret = (par & 0xFF000000) | (va & 0x00FFFFFF);
545 else /* Upper 20 bits from PAR, lower 12 from VA */
546 ret = (par & 0xFFFFF000) | (va & 0x00000FFF);
548 if (GET_FAULT(iommu->base, master->num))
551 __disable_clocks(iommu);
553 spin_unlock_irqrestore(&msm_iommu_lock, flags);
557 static void print_ctx_regs(void __iomem *base, int ctx)
559 unsigned int fsr = GET_FSR(base, ctx);
560 pr_err("FAR = %08x PAR = %08x\n",
561 GET_FAR(base, ctx), GET_PAR(base, ctx));
562 pr_err("FSR = %08x [%s%s%s%s%s%s%s%s%s%s]\n", fsr,
563 (fsr & 0x02) ? "TF " : "",
564 (fsr & 0x04) ? "AFF " : "",
565 (fsr & 0x08) ? "APF " : "",
566 (fsr & 0x10) ? "TLBMF " : "",
567 (fsr & 0x20) ? "HTWDEEF " : "",
568 (fsr & 0x40) ? "HTWSEEF " : "",
569 (fsr & 0x80) ? "MHF " : "",
570 (fsr & 0x10000) ? "SL " : "",
571 (fsr & 0x40000000) ? "SS " : "",
572 (fsr & 0x80000000) ? "MULTI " : "");
574 pr_err("FSYNR0 = %08x FSYNR1 = %08x\n",
575 GET_FSYNR0(base, ctx), GET_FSYNR1(base, ctx));
576 pr_err("TTBR0 = %08x TTBR1 = %08x\n",
577 GET_TTBR0(base, ctx), GET_TTBR1(base, ctx));
578 pr_err("SCTLR = %08x ACTLR = %08x\n",
579 GET_SCTLR(base, ctx), GET_ACTLR(base, ctx));
582 static int insert_iommu_master(struct device *dev,
583 struct msm_iommu_dev **iommu,
584 struct of_phandle_args *spec)
586 struct msm_iommu_ctx_dev *master = dev_iommu_priv_get(dev);
589 if (list_empty(&(*iommu)->ctx_list)) {
590 master = kzalloc(sizeof(*master), GFP_ATOMIC);
592 dev_err(dev, "Failed to allocate iommu_master\n");
595 master->of_node = dev->of_node;
596 list_add(&master->list, &(*iommu)->ctx_list);
597 dev_iommu_priv_set(dev, master);
600 for (sid = 0; sid < master->num_mids; sid++)
601 if (master->mids[sid] == spec->args[0]) {
602 dev_warn(dev, "Stream ID 0x%x repeated; ignoring\n",
607 master->mids[master->num_mids++] = spec->args[0];
611 static int qcom_iommu_of_xlate(struct device *dev,
612 struct of_phandle_args *spec)
614 struct msm_iommu_dev *iommu = NULL, *iter;
618 spin_lock_irqsave(&msm_iommu_lock, flags);
619 list_for_each_entry(iter, &qcom_iommu_devices, dev_node) {
620 if (iter->dev->of_node == spec->np) {
631 ret = insert_iommu_master(dev, &iommu, spec);
633 spin_unlock_irqrestore(&msm_iommu_lock, flags);
638 irqreturn_t msm_iommu_fault_handler(int irq, void *dev_id)
640 struct msm_iommu_dev *iommu = dev_id;
644 spin_lock(&msm_iommu_lock);
647 pr_err("Invalid device ID in context interrupt handler\n");
651 pr_err("Unexpected IOMMU page fault!\n");
652 pr_err("base = %08x\n", (unsigned int)iommu->base);
654 ret = __enable_clocks(iommu);
658 for (i = 0; i < iommu->ncb; i++) {
659 fsr = GET_FSR(iommu->base, i);
661 pr_err("Fault occurred in context %d.\n", i);
662 pr_err("Interesting registers:\n");
663 print_ctx_regs(iommu->base, i);
664 SET_FSR(iommu->base, i, 0x4000000F);
667 __disable_clocks(iommu);
669 spin_unlock(&msm_iommu_lock);
673 static struct iommu_ops msm_iommu_ops = {
674 .domain_alloc = msm_iommu_domain_alloc,
675 .probe_device = msm_iommu_probe_device,
676 .device_group = generic_device_group,
677 .pgsize_bitmap = MSM_IOMMU_PGSIZES,
678 .of_xlate = qcom_iommu_of_xlate,
679 .default_domain_ops = &(const struct iommu_domain_ops) {
680 .attach_dev = msm_iommu_attach_dev,
681 .detach_dev = msm_iommu_detach_dev,
682 .map = msm_iommu_map,
683 .unmap = msm_iommu_unmap,
685 * Nothing is needed here, the barrier to guarantee
686 * completion of the tlb sync operation is implicitly
687 * taken care when the iommu client does a writel before
688 * kick starting the other master.
691 .iotlb_sync_map = msm_iommu_sync_map,
692 .iova_to_phys = msm_iommu_iova_to_phys,
693 .free = msm_iommu_domain_free,
697 static int msm_iommu_probe(struct platform_device *pdev)
700 resource_size_t ioaddr;
701 struct msm_iommu_dev *iommu;
704 iommu = devm_kzalloc(&pdev->dev, sizeof(*iommu), GFP_KERNEL);
708 iommu->dev = &pdev->dev;
709 INIT_LIST_HEAD(&iommu->ctx_list);
711 iommu->pclk = devm_clk_get(iommu->dev, "smmu_pclk");
712 if (IS_ERR(iommu->pclk))
713 return dev_err_probe(iommu->dev, PTR_ERR(iommu->pclk),
714 "could not get smmu_pclk\n");
716 ret = clk_prepare(iommu->pclk);
718 return dev_err_probe(iommu->dev, ret,
719 "could not prepare smmu_pclk\n");
721 iommu->clk = devm_clk_get(iommu->dev, "iommu_clk");
722 if (IS_ERR(iommu->clk)) {
723 clk_unprepare(iommu->pclk);
724 return dev_err_probe(iommu->dev, PTR_ERR(iommu->clk),
725 "could not get iommu_clk\n");
728 ret = clk_prepare(iommu->clk);
730 clk_unprepare(iommu->pclk);
731 return dev_err_probe(iommu->dev, ret, "could not prepare iommu_clk\n");
734 r = platform_get_resource(pdev, IORESOURCE_MEM, 0);
735 iommu->base = devm_ioremap_resource(iommu->dev, r);
736 if (IS_ERR(iommu->base)) {
737 ret = dev_err_probe(iommu->dev, PTR_ERR(iommu->base), "could not get iommu base\n");
742 iommu->irq = platform_get_irq(pdev, 0);
743 if (iommu->irq < 0) {
748 ret = of_property_read_u32(iommu->dev->of_node, "qcom,ncb", &val);
750 dev_err(iommu->dev, "could not get ncb\n");
755 msm_iommu_reset(iommu->base, iommu->ncb);
756 SET_M(iommu->base, 0, 1);
757 SET_PAR(iommu->base, 0, 0);
758 SET_V2PCFG(iommu->base, 0, 1);
759 SET_V2PPR(iommu->base, 0, 0);
760 par = GET_PAR(iommu->base, 0);
761 SET_V2PCFG(iommu->base, 0, 0);
762 SET_M(iommu->base, 0, 0);
765 pr_err("Invalid PAR value detected\n");
770 ret = devm_request_threaded_irq(iommu->dev, iommu->irq, NULL,
771 msm_iommu_fault_handler,
772 IRQF_ONESHOT | IRQF_SHARED,
773 "msm_iommu_secure_irpt_handler",
776 pr_err("Request IRQ %d failed with ret=%d\n", iommu->irq, ret);
780 list_add(&iommu->dev_node, &qcom_iommu_devices);
782 ret = iommu_device_sysfs_add(&iommu->iommu, iommu->dev, NULL,
783 "msm-smmu.%pa", &ioaddr);
785 pr_err("Could not add msm-smmu at %pa to sysfs\n", &ioaddr);
789 ret = iommu_device_register(&iommu->iommu, &msm_iommu_ops, &pdev->dev);
791 pr_err("Could not register msm-smmu at %pa\n", &ioaddr);
795 bus_set_iommu(&platform_bus_type, &msm_iommu_ops);
797 pr_info("device mapped at %p, irq %d with %d ctx banks\n",
798 iommu->base, iommu->irq, iommu->ncb);
802 clk_unprepare(iommu->clk);
803 clk_unprepare(iommu->pclk);
807 static const struct of_device_id msm_iommu_dt_match[] = {
808 { .compatible = "qcom,apq8064-iommu" },
812 static int msm_iommu_remove(struct platform_device *pdev)
814 struct msm_iommu_dev *iommu = platform_get_drvdata(pdev);
816 clk_unprepare(iommu->clk);
817 clk_unprepare(iommu->pclk);
821 static struct platform_driver msm_iommu_driver = {
824 .of_match_table = msm_iommu_dt_match,
826 .probe = msm_iommu_probe,
827 .remove = msm_iommu_remove,
829 builtin_platform_driver(msm_iommu_driver);