2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License version 2 as
4 * published by the Free Software Foundation.
7 #ifdef CONFIG_ROCKCHIP_IOMMU_DEBUG
12 #include <linux/interrupt.h>
13 #include <linux/slab.h>
14 #include <linux/clk.h>
15 #include <linux/err.h>
17 #include <linux/errno.h>
18 #include <linux/memblock.h>
19 #include <linux/export.h>
20 #include <linux/module.h>
22 #include <asm/cacheflush.h>
23 #include <asm/pgtable.h>
25 #include <linux/rockchip-iovmm.h>
26 #include <linux/rockchip/grf.h>
27 #include <linux/rockchip/cpu.h>
28 #include <linux/rockchip/iomap.h>
29 #include <linux/device.h>
30 #include "rockchip-iommu.h"
32 /* We does not consider super section mapping (16MB) */
33 #define SPAGE_ORDER 12
34 #define SPAGE_SIZE (1 << SPAGE_ORDER)
35 #define SPAGE_MASK (~(SPAGE_SIZE - 1))
37 void __iomem *vop_mmu_base;
39 enum iommu_entry_flags {
40 IOMMU_FLAGS_PRESENT = 0x01,
41 IOMMU_FLAGS_READ_PERMISSION = 0x02,
42 IOMMU_FLAGS_WRITE_PERMISSION = 0x04,
43 IOMMU_FLAGS_OVERRIDE_CACHE = 0x8,
44 IOMMU_FLAGS_WRITE_CACHEABLE = 0x10,
45 IOMMU_FLAGS_WRITE_ALLOCATE = 0x20,
46 IOMMU_FLAGS_WRITE_BUFFERABLE = 0x40,
47 IOMMU_FLAGS_READ_CACHEABLE = 0x80,
48 IOMMU_FLAGS_READ_ALLOCATE = 0x100,
49 IOMMU_FLAGS_MASK = 0x1FF,
52 #define lv1ent_fault(sent) ((*(sent) & IOMMU_FLAGS_PRESENT) == 0)
53 #define lv1ent_page(sent) ((*(sent) & IOMMU_FLAGS_PRESENT) == 1)
54 #define lv2ent_fault(pent) ((*(pent) & IOMMU_FLAGS_PRESENT) == 0)
55 #define spage_phys(pent) (*(pent) & SPAGE_MASK)
56 #define spage_offs(iova) ((iova) & 0x0FFF)
58 #define lv1ent_offset(iova) (((iova)>>22) & 0x03FF)
59 #define lv2ent_offset(iova) (((iova)>>12) & 0x03FF)
61 #define NUM_LV1ENTRIES 1024
62 #define NUM_LV2ENTRIES 1024
64 #define LV2TABLE_SIZE (NUM_LV2ENTRIES * sizeof(long))
66 #define lv2table_base(sent) (*(sent) & 0xFFFFFFFE)
68 #define mk_lv1ent_page(pa) ((pa) | IOMMU_FLAGS_PRESENT)
69 /*write and read permission for level2 page default*/
70 #define mk_lv2ent_spage(pa) ((pa) | IOMMU_FLAGS_PRESENT | \
71 IOMMU_FLAGS_READ_PERMISSION | \
72 IOMMU_FLAGS_WRITE_PERMISSION)
74 #define IOMMU_REG_POLL_COUNT_FAST 1000
76 /*rk3036:vpu and hevc share ahb interface*/
77 #define BIT_VCODEC_SEL_3036 (1<<3)
78 #define BIT_VCODEC_SEL_312x (1<<15)
82 * MMU register numbers
83 * Used in the register read/write routines.
84 * See the hardware documentation for more information about each register
87 /**< Current Page Directory Pointer */
88 IOMMU_REGISTER_DTE_ADDR = 0x0000,
89 /**< Status of the MMU */
90 IOMMU_REGISTER_STATUS = 0x0004,
91 /**< Command register, used to control the MMU */
92 IOMMU_REGISTER_COMMAND = 0x0008,
93 /**< Logical address of the last page fault */
94 IOMMU_REGISTER_PAGE_FAULT_ADDR = 0x000C,
95 /**< Used to invalidate the mapping of a single page from the MMU */
96 IOMMU_REGISTER_ZAP_ONE_LINE = 0x010,
97 /**< Raw interrupt status, all interrupts visible */
98 IOMMU_REGISTER_INT_RAWSTAT = 0x0014,
99 /**< Indicate to the MMU that the interrupt has been received */
100 IOMMU_REGISTER_INT_CLEAR = 0x0018,
101 /**< Enable/disable types of interrupts */
102 IOMMU_REGISTER_INT_MASK = 0x001C,
103 /**< Interrupt status based on the mask */
104 IOMMU_REGISTER_INT_STATUS = 0x0020,
105 IOMMU_REGISTER_AUTO_GATING = 0x0024
109 /**< Enable paging (memory translation) */
110 IOMMU_COMMAND_ENABLE_PAGING = 0x00,
111 /**< Disable paging (memory translation) */
112 IOMMU_COMMAND_DISABLE_PAGING = 0x01,
113 /**< Enable stall on page fault */
114 IOMMU_COMMAND_ENABLE_STALL = 0x02,
115 /**< Disable stall on page fault */
116 IOMMU_COMMAND_DISABLE_STALL = 0x03,
117 /**< Zap the entire page table cache */
118 IOMMU_COMMAND_ZAP_CACHE = 0x04,
119 /**< Page fault processed */
120 IOMMU_COMMAND_PAGE_FAULT_DONE = 0x05,
121 /**< Reset the MMU back to power-on settings */
122 IOMMU_COMMAND_HARD_RESET = 0x06
126 * MMU interrupt register bits
127 * Each cause of the interrupt is reported
128 * through the (raw) interrupt status registers.
129 * Multiple interrupts can be pending, so multiple bits
130 * can be set at once.
132 enum iommu_interrupt {
133 IOMMU_INTERRUPT_PAGE_FAULT = 0x01, /**< A page fault occured */
134 IOMMU_INTERRUPT_READ_BUS_ERROR = 0x02 /**< A bus read error occured */
137 enum iommu_status_bits {
138 IOMMU_STATUS_BIT_PAGING_ENABLED = 1 << 0,
139 IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE = 1 << 1,
140 IOMMU_STATUS_BIT_STALL_ACTIVE = 1 << 2,
141 IOMMU_STATUS_BIT_IDLE = 1 << 3,
142 IOMMU_STATUS_BIT_REPLAY_BUFFER_EMPTY = 1 << 4,
143 IOMMU_STATUS_BIT_PAGE_FAULT_IS_WRITE = 1 << 5,
144 IOMMU_STATUS_BIT_STALL_NOT_ACTIVE = 1 << 31,
148 * Size of an MMU page in bytes
150 #define IOMMU_PAGE_SIZE 0x1000
153 * Size of the address space referenced by a page table page
155 #define IOMMU_VIRTUAL_PAGE_SIZE 0x400000 /* 4 MiB */
158 * Page directory index from address
159 * Calculates the page directory index from the given address
161 #define IOMMU_PDE_ENTRY(address) (((address)>>22) & 0x03FF)
164 * Page table index from address
165 * Calculates the page table index from the given address
167 #define IOMMU_PTE_ENTRY(address) (((address)>>12) & 0x03FF)
170 * Extract the memory address from an PDE/PTE entry
172 #define IOMMU_ENTRY_ADDRESS(value) ((value) & 0xFFFFFC00)
174 #define INVALID_PAGE ((u32)(~0))
176 static struct kmem_cache *lv2table_kmem_cache;
178 static void rockchip_vcodec_select(const char *string)
180 if (strstr(string,"hevc")) {
181 if (cpu_is_rk3036()) {
182 writel_relaxed(readl_relaxed(RK_GRF_VIRT + RK3036_GRF_SOC_CON1) |
183 (BIT_VCODEC_SEL_3036) | (BIT_VCODEC_SEL_3036 << 16),
184 RK_GRF_VIRT + RK3036_GRF_SOC_CON1);
186 writel_relaxed(readl_relaxed(RK_GRF_VIRT + RK312X_GRF_SOC_CON1) |
187 (BIT_VCODEC_SEL_312x) | (BIT_VCODEC_SEL_312x << 16),
188 RK_GRF_VIRT + RK312X_GRF_SOC_CON1);
190 } else if (strstr(string,"vpu")) {
191 if (cpu_is_rk3036()) {
192 writel_relaxed((readl_relaxed(RK_GRF_VIRT + RK3036_GRF_SOC_CON1) &
193 (~BIT_VCODEC_SEL_3036)) | (BIT_VCODEC_SEL_3036 << 16),
194 RK_GRF_VIRT + RK3036_GRF_SOC_CON1);
196 writel_relaxed((readl_relaxed(RK_GRF_VIRT + RK312X_GRF_SOC_CON1) &
197 (~BIT_VCODEC_SEL_312x)) | (BIT_VCODEC_SEL_312x << 16),
198 RK_GRF_VIRT + RK312X_GRF_SOC_CON1);
202 static unsigned long *section_entry(unsigned long *pgtable, unsigned long iova)
204 return pgtable + lv1ent_offset(iova);
207 static unsigned long *page_entry(unsigned long *sent, unsigned long iova)
209 return (unsigned long *)__va(lv2table_base(sent)) + lv2ent_offset(iova);
212 static char *iommu_fault_name[IOMMU_FAULTS_NUM] = {
218 struct rk_iommu_domain {
219 struct list_head clients; /* list of iommu_drvdata.node */
220 unsigned long *pgtable; /* lv1 page table, 4KB */
221 short *lv2entcnt; /* free lv2 entry counter for each section */
222 spinlock_t lock; /* lock for this structure */
223 spinlock_t pgtablelock; /* lock for modifying page table @ pgtable */
226 static bool set_iommu_active(struct iommu_drvdata *data)
228 /* return true if the IOMMU was not active previously
229 and it needs to be initialized */
230 return ++data->activations == 1;
233 static bool set_iommu_inactive(struct iommu_drvdata *data)
235 /* return true if the IOMMU is needed to be disabled */
236 BUG_ON(data->activations < 1);
237 return --data->activations == 0;
240 static bool is_iommu_active(struct iommu_drvdata *data)
242 return data->activations > 0;
245 static void iommu_disable_stall(void __iomem *base)
250 if (base != vop_mmu_base) {
251 mmu_status = __raw_readl(base + IOMMU_REGISTER_STATUS);
253 goto skip_vop_mmu_disable;
255 if (0 == (mmu_status & IOMMU_STATUS_BIT_PAGING_ENABLED))
257 if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE) {
258 pr_info("Aborting MMU disable stall request since it is in pagefault state.\n");
261 skip_vop_mmu_disable:
262 __raw_writel(IOMMU_COMMAND_DISABLE_STALL,
263 base + IOMMU_REGISTER_COMMAND);
265 for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
268 if (base != vop_mmu_base) {
269 status = __raw_readl(base + IOMMU_REGISTER_STATUS);
276 if (0 == (status & IOMMU_STATUS_BIT_STALL_ACTIVE))
278 if (status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE)
280 if (0 == (mmu_status & IOMMU_STATUS_BIT_PAGING_ENABLED))
283 if (IOMMU_REG_POLL_COUNT_FAST == i) {
284 pr_info("Disable stall request failed, MMU status is 0x%08X\n",
285 __raw_readl(base + IOMMU_REGISTER_STATUS));
289 static bool iommu_enable_stall(void __iomem *base)
295 if (base != vop_mmu_base) {
296 mmu_status = __raw_readl(base + IOMMU_REGISTER_STATUS);
298 goto skip_vop_mmu_enable;
300 if (0 == (mmu_status & IOMMU_STATUS_BIT_PAGING_ENABLED))
302 if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE) {
303 pr_info("Aborting MMU stall request since it is in pagefault state.\n");
307 __raw_writel(IOMMU_COMMAND_ENABLE_STALL,
308 base + IOMMU_REGISTER_COMMAND);
310 for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
311 if (base != vop_mmu_base) {
312 mmu_status = __raw_readl(base + IOMMU_REGISTER_STATUS);
319 if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE)
321 if ((mmu_status & IOMMU_STATUS_BIT_STALL_ACTIVE) &&
322 (0 == (mmu_status & IOMMU_STATUS_BIT_STALL_NOT_ACTIVE)))
324 if (0 == (mmu_status & (IOMMU_STATUS_BIT_PAGING_ENABLED)))
327 if (IOMMU_REG_POLL_COUNT_FAST == i) {
328 pr_info("Enable stall request failed, MMU status is 0x%08X\n",
329 __raw_readl(base + IOMMU_REGISTER_STATUS));
332 if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE) {
333 pr_info("Aborting MMU stall request since it has a pagefault.\n");
339 static bool iommu_enable_paging(void __iomem *base)
343 __raw_writel(IOMMU_COMMAND_ENABLE_PAGING,
344 base + IOMMU_REGISTER_COMMAND);
346 for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
347 if (base != vop_mmu_base) {
348 if (__raw_readl(base + IOMMU_REGISTER_STATUS) &
349 IOMMU_STATUS_BIT_PAGING_ENABLED)
358 if (IOMMU_REG_POLL_COUNT_FAST == i) {
359 pr_info("Enable paging request failed, MMU status is 0x%08X\n",
360 __raw_readl(base + IOMMU_REGISTER_STATUS));
366 static bool iommu_disable_paging(void __iomem *base)
371 __raw_writel(IOMMU_COMMAND_DISABLE_PAGING,
372 base + IOMMU_REGISTER_COMMAND);
374 for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
375 if (base != vop_mmu_base) {
376 if (!(__raw_readl(base + IOMMU_REGISTER_STATUS) &
377 IOMMU_STATUS_BIT_PAGING_ENABLED))
386 if (IOMMU_REG_POLL_COUNT_FAST == i) {
387 pr_info("Disable paging request failed, MMU status is 0x%08X\n",
388 __raw_readl(base + IOMMU_REGISTER_STATUS));
394 static void iommu_page_fault_done(void __iomem *base, const char *dbgname)
396 pr_info("MMU: %s: Leaving page fault mode\n",
398 __raw_writel(IOMMU_COMMAND_PAGE_FAULT_DONE,
399 base + IOMMU_REGISTER_COMMAND);
402 static bool iommu_zap_tlb(void __iomem *base)
404 bool stall_success = iommu_enable_stall(base);
406 __raw_writel(IOMMU_COMMAND_ZAP_CACHE,
407 base + IOMMU_REGISTER_COMMAND);
410 iommu_disable_stall(base);
413 extern bool __clk_is_enabled(struct clk *clk);
414 static inline bool iommu_raw_reset(void __iomem *base)
419 __raw_writel(0xCAFEBABE, base + IOMMU_REGISTER_DTE_ADDR);
421 if (base != vop_mmu_base) {
422 ret = __raw_readl(base + IOMMU_REGISTER_DTE_ADDR);
423 if (!(0xCAFEB000 == ret)) {
424 pr_info("error when %s.\n", __func__);
428 __raw_writel(IOMMU_COMMAND_HARD_RESET,
429 base + IOMMU_REGISTER_COMMAND);
431 for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
432 if (base != vop_mmu_base) {
433 if (__raw_readl(base + IOMMU_REGISTER_DTE_ADDR) == 0)
442 if (IOMMU_REG_POLL_COUNT_FAST == i) {
443 pr_info("%s,Reset request failed, MMU status is 0x%08X\n",
444 __func__, __raw_readl(base + IOMMU_REGISTER_DTE_ADDR));
450 static void __iommu_set_ptbase(void __iomem *base, unsigned long pgd)
452 __raw_writel(pgd, base + IOMMU_REGISTER_DTE_ADDR);
455 static bool iommu_reset(void __iomem *base, const char *dbgname)
459 err = iommu_enable_stall(base);
461 pr_info("%s:stall failed: %s\n", __func__, dbgname);
464 err = iommu_raw_reset(base);
466 __raw_writel(IOMMU_INTERRUPT_PAGE_FAULT |
467 IOMMU_INTERRUPT_READ_BUS_ERROR,
468 base+IOMMU_REGISTER_INT_MASK);
469 iommu_disable_stall(base);
471 pr_info("%s: failed: %s\n", __func__, dbgname);
475 static inline void pgtable_flush(void *vastart, void *vaend)
477 dmac_flush_range(vastart, vaend);
478 outer_flush_range(virt_to_phys(vastart), virt_to_phys(vaend));
481 static void set_fault_handler(struct iommu_drvdata *data,
482 rockchip_iommu_fault_handler_t handler)
486 write_lock_irqsave(&data->lock, flags);
487 data->fault_handler = handler;
488 write_unlock_irqrestore(&data->lock, flags);
491 static int default_fault_handler(struct device *dev,
492 enum rk_iommu_inttype itype,
493 unsigned long pgtable_base,
494 unsigned long fault_addr,
497 struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
500 dev_err(dev->archdata.iommu,"%s,iommu device not assigned yet\n", __func__);
503 if ((itype >= IOMMU_FAULTS_NUM) || (itype < IOMMU_PAGEFAULT))
504 itype = IOMMU_FAULT_UNKNOWN;
506 if (itype == IOMMU_BUSERROR)
507 dev_err(dev->archdata.iommu,"%s occured at 0x%lx(Page table base: 0x%lx)\n",
508 iommu_fault_name[itype], fault_addr, pgtable_base);
510 if (itype == IOMMU_PAGEFAULT)
511 dev_err(dev->archdata.iommu,"IOMMU:Page fault detected at 0x%lx from bus id %d of type %s on %s\n",
513 (status >> 6) & 0x1F,
514 (status & 32) ? "write" : "read",
517 dev_err(dev->archdata.iommu,"Generating Kernel OOPS... because it is unrecoverable.\n");
524 static void dump_pagetbl(u32 fault_address, u32 addr_dte)
531 u32 *lv1_entry_value;
536 u32 *lv2_entry_value;
539 lv1_offset = lv1ent_offset(fault_address);
540 lv2_offset = lv2ent_offset(fault_address);
542 lv1_entry_pa = (u32 *)addr_dte + lv1_offset;
543 lv1_entry_va = (u32 *)(__va(addr_dte)) + lv1_offset;
544 lv1_entry_value = (u32 *)(*lv1_entry_va);
546 lv2_base = (u32 *)((*lv1_entry_va) & 0xfffffffe);
547 lv2_entry_pa = (u32 *)lv2_base + lv2_offset;
548 lv2_entry_va = (u32 *)(__va(lv2_base)) + lv2_offset;
549 lv2_entry_value = (u32 *)(*lv2_entry_va);
551 dev_info(NULL,"fault address = 0x%08x,dte addr pa = 0x%08x,va = 0x%08x\n",
552 fault_address, addr_dte, (u32)__va(addr_dte));
553 dev_info(NULL,"lv1_offset = 0x%x,lv1_entry_pa = 0x%08x,lv1_entry_va = 0x%08x\n",
554 lv1_offset, (u32)lv1_entry_pa, (u32)lv1_entry_va);
555 dev_info(NULL,"lv1_entry_value(*lv1_entry_va) = 0x%08x,lv2_base = 0x%08x\n",
556 (u32)lv1_entry_value, (u32)lv2_base);
557 dev_info(NULL,"lv2_offset = 0x%x,lv2_entry_pa = 0x%08x,lv2_entry_va = 0x%08x\n",
558 lv2_offset, (u32)lv2_entry_pa, (u32)lv2_entry_va);
559 dev_info(NULL,"lv2_entry value(*lv2_entry_va) = 0x%08x\n",
560 (u32)lv2_entry_value);
563 static irqreturn_t rockchip_iommu_irq(int irq, void *dev_id)
565 /* SYSMMU is in blocked when interrupt occurred. */
566 struct iommu_drvdata *data = dev_id;
567 struct resource *irqres;
568 struct platform_device *pdev;
569 enum rk_iommu_inttype itype = IOMMU_FAULT_UNKNOWN;
576 read_lock(&data->lock);
578 if (!is_iommu_active(data)) {
579 read_unlock(&data->lock);
583 if(cpu_is_rk312x() || cpu_is_rk3036())
584 rockchip_vcodec_select(data->dbgname);
586 pdev = to_platform_device(data->iommu);
588 for (i = 0; i < data->num_res_irq; i++) {
589 irqres = platform_get_resource(pdev, IORESOURCE_IRQ, i);
590 if (irqres && ((int)irqres->start == irq)) {
591 if (data->res_bases[i] == vop_mmu_base)
593 //pr_info("not a vop mmu irq\n");
594 read_unlock(&data->lock);
601 if (i == data->num_res_irq) {
602 itype = IOMMU_FAULT_UNKNOWN;
604 int_status = __raw_readl(data->res_bases[i] +
605 IOMMU_REGISTER_INT_STATUS);
607 if (int_status != 0) {
609 __raw_writel(0x00, data->res_bases[i] +
610 IOMMU_REGISTER_INT_MASK);
612 rawstat = __raw_readl(data->res_bases[i] +
613 IOMMU_REGISTER_INT_RAWSTAT);
615 if (rawstat & IOMMU_INTERRUPT_PAGE_FAULT) {
616 fault_address = __raw_readl(data->res_bases[i] +
617 IOMMU_REGISTER_PAGE_FAULT_ADDR);
618 itype = IOMMU_PAGEFAULT;
619 } else if (rawstat & IOMMU_INTERRUPT_READ_BUS_ERROR) {
620 itype = IOMMU_BUSERROR;
624 dump_pagetbl(fault_address,
625 __raw_readl(data->res_bases[i] +
626 IOMMU_REGISTER_DTE_ADDR));
632 if (data->fault_handler) {
633 unsigned long base = __raw_readl(data->res_bases[i] +
634 IOMMU_REGISTER_DTE_ADDR);
635 status = __raw_readl(data->res_bases[i] +
636 IOMMU_REGISTER_STATUS);
637 ret = data->fault_handler(data->dev, itype, base,
638 fault_address, status);
641 if (!ret && (itype != IOMMU_FAULT_UNKNOWN)) {
642 if (IOMMU_PAGEFAULT == itype) {
643 iommu_zap_tlb(data->res_bases[i]);
644 iommu_page_fault_done(data->res_bases[i],
646 __raw_writel(IOMMU_INTERRUPT_PAGE_FAULT |
647 IOMMU_INTERRUPT_READ_BUS_ERROR,
649 IOMMU_REGISTER_INT_MASK);
652 dev_err(data->iommu,"(%s) %s is not handled.\n",
653 data->dbgname, iommu_fault_name[itype]);
657 read_unlock(&data->lock);
662 static bool __rockchip_iommu_disable(struct iommu_drvdata *data)
666 bool disabled = false;
668 write_lock_irqsave(&data->lock, flags);
670 if (!set_iommu_inactive(data))
673 for (i = 0; i < data->num_res_mem; i++)
674 iommu_disable_paging(data->res_bases[i]);
680 write_unlock_irqrestore(&data->lock, flags);
683 dev_info(data->iommu,"(%s) Disabled\n", data->dbgname);
685 dev_info(data->iommu,"(%s) %d times left to be disabled\n",
686 data->dbgname, data->activations);
691 /* __rk_sysmmu_enable: Enables System MMU
693 * returns -error if an error occurred and System MMU is not enabled,
694 * 0 if the System MMU has been just enabled and 1 if System MMU was already
697 static int __rockchip_iommu_enable(struct iommu_drvdata *data,
698 unsigned long pgtable,
699 struct iommu_domain *domain)
704 write_lock_irqsave(&data->lock, flags);
706 if (!set_iommu_active(data)) {
707 if (WARN_ON(pgtable != data->pgtable)) {
709 set_iommu_inactive(data);
714 dev_info(data->iommu,"(%s) Already enabled\n", data->dbgname);
718 data->pgtable = pgtable;
720 for (i = 0; i < data->num_res_mem; i++) {
723 status = iommu_enable_stall(data->res_bases[i]);
725 __iommu_set_ptbase(data->res_bases[i], pgtable);
726 __raw_writel(IOMMU_COMMAND_ZAP_CACHE,
728 IOMMU_REGISTER_COMMAND);
730 __raw_writel(IOMMU_INTERRUPT_PAGE_FAULT |
731 IOMMU_INTERRUPT_READ_BUS_ERROR,
732 data->res_bases[i]+IOMMU_REGISTER_INT_MASK);
733 iommu_enable_paging(data->res_bases[i]);
734 iommu_disable_stall(data->res_bases[i]);
737 data->domain = domain;
739 dev_info(data->iommu,"(%s) Enabled\n", data->dbgname);
741 write_unlock_irqrestore(&data->lock, flags);
746 bool rockchip_iommu_disable(struct device *dev)
748 struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
751 disabled = __rockchip_iommu_disable(data);
756 void rockchip_iommu_tlb_invalidate(struct device *dev)
759 struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
761 read_lock_irqsave(&data->lock, flags);
763 if(cpu_is_rk312x() || cpu_is_rk3036())
764 rockchip_vcodec_select(data->dbgname);
766 if (is_iommu_active(data)) {
769 for (i = 0; i < data->num_res_mem; i++) {
770 if (!iommu_zap_tlb(data->res_bases[i]))
771 dev_err(dev->archdata.iommu,"%s,invalidating TLB failed\n",
775 dev_dbg(dev->archdata.iommu,"(%s) Disabled. Skipping invalidating TLB.\n",
779 read_unlock_irqrestore(&data->lock, flags);
782 static phys_addr_t rockchip_iommu_iova_to_phys(struct iommu_domain *domain,
785 struct rk_iommu_domain *priv = domain->priv;
786 unsigned long *entry;
788 phys_addr_t phys = 0;
790 spin_lock_irqsave(&priv->pgtablelock, flags);
792 entry = section_entry(priv->pgtable, iova);
793 entry = page_entry(entry, iova);
794 phys = spage_phys(entry) + spage_offs(iova);
796 spin_unlock_irqrestore(&priv->pgtablelock, flags);
801 static int lv2set_page(unsigned long *pent, phys_addr_t paddr,
802 size_t size, short *pgcnt)
804 if (!lv2ent_fault(pent))
807 *pent = mk_lv2ent_spage(paddr);
808 pgtable_flush(pent, pent + 1);
813 static unsigned long *alloc_lv2entry(unsigned long *sent,
814 unsigned long iova, short *pgcounter)
816 if (lv1ent_fault(sent)) {
819 pent = kmem_cache_zalloc(lv2table_kmem_cache, GFP_ATOMIC);
820 BUG_ON((unsigned long)pent & (LV2TABLE_SIZE - 1));
824 *sent = mk_lv1ent_page(__pa(pent));
825 kmemleak_ignore(pent);
826 *pgcounter = NUM_LV2ENTRIES;
827 pgtable_flush(pent, pent + NUM_LV2ENTRIES);
828 pgtable_flush(sent, sent + 1);
830 return page_entry(sent, iova);
833 static size_t rockchip_iommu_unmap(struct iommu_domain *domain,
834 unsigned long iova, size_t size)
836 struct rk_iommu_domain *priv = domain->priv;
840 BUG_ON(priv->pgtable == NULL);
842 spin_lock_irqsave(&priv->pgtablelock, flags);
844 ent = section_entry(priv->pgtable, iova);
846 if (unlikely(lv1ent_fault(ent))) {
847 if (size > SPAGE_SIZE)
852 /* lv1ent_page(sent) == true here */
854 ent = page_entry(ent, iova);
856 if (unlikely(lv2ent_fault(ent))) {
863 priv->lv2entcnt[lv1ent_offset(iova)] += 1;
868 pr_info("%s:unmap iova 0x%lx/0x%x bytes\n",
869 __func__, iova,size);
871 spin_unlock_irqrestore(&priv->pgtablelock, flags);
876 static int rockchip_iommu_map(struct iommu_domain *domain, unsigned long iova,
877 phys_addr_t paddr, size_t size, int prot)
879 struct rk_iommu_domain *priv = domain->priv;
880 unsigned long *entry;
885 BUG_ON(priv->pgtable == NULL);
887 spin_lock_irqsave(&priv->pgtablelock, flags);
889 entry = section_entry(priv->pgtable, iova);
891 pent = alloc_lv2entry(entry, iova,
892 &priv->lv2entcnt[lv1ent_offset(iova)]);
896 ret = lv2set_page(pent, paddr, size,
897 &priv->lv2entcnt[lv1ent_offset(iova)]);
900 pr_info("%s: Failed to map iova 0x%lx/0x%x bytes\n", __func__,
903 spin_unlock_irqrestore(&priv->pgtablelock, flags);
908 static void rockchip_iommu_detach_device(struct iommu_domain *domain,
911 struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
912 struct rk_iommu_domain *priv = domain->priv;
913 struct list_head *pos;
917 spin_lock_irqsave(&priv->lock, flags);
919 list_for_each(pos, &priv->clients)
921 if (list_entry(pos, struct iommu_drvdata, node) == data) {
929 if(cpu_is_rk312x() || cpu_is_rk3036())
930 rockchip_vcodec_select(data->dbgname);
932 if (__rockchip_iommu_disable(data)) {
933 dev_info(dev->archdata.iommu,"%s: Detached IOMMU with pgtable %#lx\n",
934 __func__, __pa(priv->pgtable));
935 list_del(&data->node);
936 INIT_LIST_HEAD(&data->node);
939 dev_info(dev->archdata.iommu,"%s: Detaching IOMMU with pgtable %#lx delayed",
940 __func__, __pa(priv->pgtable));
943 spin_unlock_irqrestore(&priv->lock, flags);
946 static int rockchip_iommu_attach_device(struct iommu_domain *domain,
949 struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
950 struct rk_iommu_domain *priv = domain->priv;
954 spin_lock_irqsave(&priv->lock, flags);
956 if(cpu_is_rk312x() || cpu_is_rk3036())
957 rockchip_vcodec_select(data->dbgname);
959 ret = __rockchip_iommu_enable(data, __pa(priv->pgtable), domain);
962 /* 'data->node' must not be appeared in priv->clients */
963 BUG_ON(!list_empty(&data->node));
965 list_add_tail(&data->node, &priv->clients);
968 spin_unlock_irqrestore(&priv->lock, flags);
971 dev_err(dev->archdata.iommu,"%s: Failed to attach IOMMU with pgtable %#lx\n",
972 __func__, __pa(priv->pgtable));
973 } else if (ret > 0) {
974 dev_dbg(dev->archdata.iommu,"%s: IOMMU with pgtable 0x%lx already attached\n",
975 __func__, __pa(priv->pgtable));
977 dev_dbg(dev->archdata.iommu,"%s: Attached new IOMMU with pgtable 0x%lx\n",
978 __func__, __pa(priv->pgtable));
984 static void rockchip_iommu_domain_destroy(struct iommu_domain *domain)
986 struct rk_iommu_domain *priv = domain->priv;
987 struct iommu_drvdata *data;
991 WARN_ON(!list_empty(&priv->clients));
993 spin_lock_irqsave(&priv->lock, flags);
995 list_for_each_entry(data, &priv->clients, node) {
996 if(cpu_is_rk312x() || cpu_is_rk3036())
997 rockchip_vcodec_select(data->dbgname);
998 while (!rockchip_iommu_disable(data->dev))
999 ; /* until System MMU is actually disabled */
1001 spin_unlock_irqrestore(&priv->lock, flags);
1003 for (i = 0; i < NUM_LV1ENTRIES; i++)
1004 if (lv1ent_page(priv->pgtable + i))
1005 kmem_cache_free(lv2table_kmem_cache,
1006 __va(lv2table_base(priv->pgtable + i)));
1008 free_pages((unsigned long)priv->pgtable, 0);
1009 free_pages((unsigned long)priv->lv2entcnt, 0);
1010 kfree(domain->priv);
1011 domain->priv = NULL;
1014 static int rockchip_iommu_domain_init(struct iommu_domain *domain)
1016 struct rk_iommu_domain *priv;
1018 priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1022 /*rk32xx iommu use 2 level pagetable,
1023 level1 and leve2 both have 1024 entries,each entry occupy 4 bytes,
1024 so alloc a page size for each page table
1026 priv->pgtable = (unsigned long *)__get_free_pages(GFP_KERNEL |
1031 priv->lv2entcnt = (short *)__get_free_pages(GFP_KERNEL |
1033 if (!priv->lv2entcnt)
1036 pgtable_flush(priv->pgtable, priv->pgtable + NUM_LV1ENTRIES);
1038 spin_lock_init(&priv->lock);
1039 spin_lock_init(&priv->pgtablelock);
1040 INIT_LIST_HEAD(&priv->clients);
1042 domain->priv = priv;
1046 free_pages((unsigned long)priv->pgtable, 0);
1052 static struct iommu_ops rk_iommu_ops = {
1053 .domain_init = &rockchip_iommu_domain_init,
1054 .domain_destroy = &rockchip_iommu_domain_destroy,
1055 .attach_dev = &rockchip_iommu_attach_device,
1056 .detach_dev = &rockchip_iommu_detach_device,
1057 .map = &rockchip_iommu_map,
1058 .unmap = &rockchip_iommu_unmap,
1059 .iova_to_phys = &rockchip_iommu_iova_to_phys,
1060 .pgsize_bitmap = SPAGE_SIZE,
1063 static int rockchip_iommu_prepare(void)
1066 static int registed;
1071 lv2table_kmem_cache = kmem_cache_create("rk-iommu-lv2table",
1075 if (!lv2table_kmem_cache) {
1076 pr_info("%s: failed to create kmem cache\n", __func__);
1079 ret = bus_set_iommu(&platform_bus_type, &rk_iommu_ops);
1083 pr_info("%s:failed to set iommu to bus\r\n", __func__);
1087 static int rockchip_get_iommu_resource_num(struct platform_device *pdev,
1093 pr_info("dev num_resources %d type = 0x%08x\n",pdev->num_resources, type);
1095 for (i = 0; i < pdev->num_resources; i++) {
1096 struct resource *r = &pdev->resource[i];
1098 dev_info(&pdev->dev, "r[%d] start %08x end %08x flags %08lx name (%s) resource_type %08lx\n", i, r->start, r->end, r->flags, r->name, resource_type(r));
1100 if (type == resource_type(r))
1107 static struct kobject *dump_mmu_object;
1109 static int dump_mmu_pagetbl(struct device *dev, struct device_attribute *attr,
1110 const char *buf, u32 count)
1118 ret = kstrtouint(buf, 0, &mmu_base);
1120 dev_dbg(dev,"%s is not in hexdecimal form.\n", buf);
1121 base = ioremap(mmu_base, 0x100);
1122 if (base != vop_mmu_base) {
1123 iommu_dte = __raw_readl(base + IOMMU_REGISTER_DTE_ADDR);
1124 fault_address = __raw_readl(base + IOMMU_REGISTER_PAGE_FAULT_ADDR);
1125 dump_pagetbl(fault_address, iommu_dte);
1127 dev_dbg(dev,"vop mmu not support\n");
1132 static DEVICE_ATTR(dump_mmu_pgtable, 0644, NULL, dump_mmu_pagetbl);
1134 void dump_iommu_sysfs_init(void)
1138 dump_mmu_object = kobject_create_and_add("rk_iommu", NULL);
1139 if (dump_mmu_object == NULL)
1141 ret = sysfs_create_file(dump_mmu_object,
1142 &dev_attr_dump_mmu_pgtable.attr);
1145 static int rockchip_iommu_probe(struct platform_device *pdev)
1149 struct iommu_drvdata *data;
1154 struct resource *res = pdev->resource;
1156 for (i = 0; i < pdev->num_resources; i++, res++) {
1157 pr_info("r[%d] start %08x end %08x flags %08lx name (%s) resource_type %08lx\n", i, res->start, res->end, res->flags, res->name, resource_type(res));
1160 ret = rockchip_iommu_prepare();
1162 dev_err(dev,"%s,failed\r\n", __func__);
1166 data = devm_kzalloc(dev, sizeof(*data), GFP_KERNEL);
1168 dev_dbg(dev, "Not enough memory\n");
1172 dev_set_drvdata(dev, data);
1174 ret = dev_set_drvdata(dev, data);
1177 dev_dbg(dev, "Unabled to initialize driver data\n");
1181 if (pdev->dev.of_node) {
1182 of_property_read_string(pdev->dev.of_node,
1183 "dbgname", &(data->dbgname));
1186 "dbgname not assigned in device tree or device node not exist\r\n");
1189 dev_info(dev,"(%s) Enter\n", data->dbgname);
1192 data->num_res_mem = rockchip_get_iommu_resource_num(pdev,
1194 if (0 == data->num_res_mem) {
1195 dev_err(dev,"can't find iommu memory resource \r\n");
1198 dev_dbg(dev,"data->num_res_mem=%d\n", data->num_res_mem);
1199 data->num_res_irq = rockchip_get_iommu_resource_num(pdev,
1201 if (0 == data->num_res_irq) {
1202 dev_err(dev,"can't find iommu irq resource \r\n");
1205 dev_dbg(dev,"data->num_res_irq=%d\n", data->num_res_irq);
1207 data->res_bases = devm_kmalloc_array(dev, data->num_res_mem,
1208 sizeof(*data->res_bases), GFP_KERNEL);
1209 if (data->res_bases == NULL) {
1210 dev_err(dev, "Not enough memory\n");
1215 for (i = 0; i < data->num_res_mem; i++) {
1216 struct resource *res;
1218 res = platform_get_resource(pdev, IORESOURCE_MEM, i);
1220 dev_err(dev,"Unable to find IOMEM region\n");
1224 data->res_bases[i] = ioremap(res->start, resource_size(res));
1225 dev_dbg(dev,"res->start = 0x%08x ioremap to data->res_bases[%d] = 0x%08x\n",
1226 res->start, i, (unsigned int)data->res_bases[i]);
1227 if (!data->res_bases[i]) {
1228 pr_err("Unable to map IOMEM @ PA:%#x\n", res->start);
1233 if (cpu_is_rk312x() || cpu_is_rk3036()) {
1234 rockchip_vcodec_select(data->dbgname);
1235 if (strstr(data->dbgname, "vop")) {
1236 vop_mmu_base = data->res_bases[0];
1237 dev_dbg(dev,"vop_mmu_base = 0x%08x\n",(unsigned int)vop_mmu_base);
1240 if (!strstr(data->dbgname, "isp")) {
1241 if (!iommu_reset(data->res_bases[i], data->dbgname)) {
1248 for (i = 0; i < data->num_res_irq; i++) {
1249 ret = platform_get_irq(pdev, i);
1251 dev_err(dev,"Unable to find IRQ resource\n");
1254 ret = devm_request_irq(dev, ret, rockchip_iommu_irq,
1255 IRQF_SHARED, dev_name(dev), data);
1257 dev_err(dev,"Unabled to register interrupt handler\n");
1261 ret = rockchip_init_iovmm(dev, &data->vmm);
1266 rwlock_init(&data->lock);
1267 INIT_LIST_HEAD(&data->node);
1269 set_fault_handler(data, &default_fault_handler);
1271 dev_info(dev,"(%s) Initialized\n", data->dbgname);
1276 while (data->num_res_mem-- > 0)
1277 iounmap(data->res_bases[data->num_res_mem]);
1280 dev_err(dev, "Failed to initialize\n");
1285 static const struct of_device_id iommu_dt_ids[] = {
1286 { .compatible = IEP_IOMMU_COMPATIBLE_NAME},
1287 { .compatible = VIP_IOMMU_COMPATIBLE_NAME},
1288 { .compatible = VOPB_IOMMU_COMPATIBLE_NAME},
1289 { .compatible = VOPL_IOMMU_COMPATIBLE_NAME},
1290 { .compatible = HEVC_IOMMU_COMPATIBLE_NAME},
1291 { .compatible = VPU_IOMMU_COMPATIBLE_NAME},
1292 { .compatible = ISP_IOMMU_COMPATIBLE_NAME},
1293 { .compatible = VOP_IOMMU_COMPATIBLE_NAME},
1297 MODULE_DEVICE_TABLE(of, iommu_dt_ids);
1300 static struct platform_driver rk_iommu_driver = {
1301 .probe = rockchip_iommu_probe,
1305 .owner = THIS_MODULE,
1306 .of_match_table = of_match_ptr(iommu_dt_ids),
1310 static int __init rockchip_iommu_init_driver(void)
1312 dump_iommu_sysfs_init();
1314 return platform_driver_register(&rk_iommu_driver);
1317 core_initcall(rockchip_iommu_init_driver);