Merge branch 'develop-3.10-next' of 10.10.10.29:rk/kernel into develop-3.10-next
[firefly-linux-kernel-4.4.55.git] / drivers / iommu / rockchip-iommu.c
1 /*
2  * This program is free software; you can redistribute it and/or modify
3  * it under the terms of the GNU General Public License version 2 as
4  * published by the Free Software Foundation.
5  */
6
7 #ifdef CONFIG_ROCKCHIP_IOMMU_DEBUG
8 #define DEBUG
9 #endif
10
11 #include <linux/io.h>
12 #include <linux/interrupt.h>
13 #include <linux/slab.h>
14 #include <linux/clk.h>
15 #include <linux/err.h>
16 #include <linux/mm.h>
17 #include <linux/errno.h>
18 #include <linux/memblock.h>
19 #include <linux/export.h>
20 #include <linux/module.h>
21
22 #include <asm/cacheflush.h>
23 #include <asm/pgtable.h>
24 #include <linux/of.h>
25 #include <linux/rockchip-iovmm.h>
26 #include <linux/rockchip/grf.h>
27 #include <linux/rockchip/cpu.h>
28 #include <linux/rockchip/iomap.h>
29 #include <linux/device.h>
30 #include "rockchip-iommu.h"
31
32 /* We does not consider super section mapping (16MB) */
33 #define SPAGE_ORDER 12
34 #define SPAGE_SIZE (1 << SPAGE_ORDER)
35 #define SPAGE_MASK (~(SPAGE_SIZE - 1))
36
37 static void __iomem *rk312x_vop_mmu_base;
38
39 enum iommu_entry_flags {
40         IOMMU_FLAGS_PRESENT = 0x01,
41         IOMMU_FLAGS_READ_PERMISSION = 0x02,
42         IOMMU_FLAGS_WRITE_PERMISSION = 0x04,
43         IOMMU_FLAGS_OVERRIDE_CACHE = 0x8,
44         IOMMU_FLAGS_WRITE_CACHEABLE = 0x10,
45         IOMMU_FLAGS_WRITE_ALLOCATE = 0x20,
46         IOMMU_FLAGS_WRITE_BUFFERABLE = 0x40,
47         IOMMU_FLAGS_READ_CACHEABLE = 0x80,
48         IOMMU_FLAGS_READ_ALLOCATE = 0x100,
49         IOMMU_FLAGS_MASK = 0x1FF,
50 };
51
52 #define rockchip_lv1ent_fault(sent) ((*(sent) & IOMMU_FLAGS_PRESENT) == 0)
53 #define rockchip_lv1ent_page(sent) ((*(sent) & IOMMU_FLAGS_PRESENT) == 1)
54 #define rockchip_lv2ent_fault(pent) ((*(pent) & IOMMU_FLAGS_PRESENT) == 0)
55 #define rockchip_spage_phys(pent) (*(pent) & SPAGE_MASK)
56 #define rockchip_spage_offs(iova) ((iova) & 0x0FFF)
57
58 #define rockchip_lv1ent_offset(iova) (((iova)>>22) & 0x03FF)
59 #define rockchip_lv2ent_offset(iova) (((iova)>>12) & 0x03FF)
60
61 #define NUM_LV1ENTRIES 1024
62 #define NUM_LV2ENTRIES 1024
63
64 #define LV2TABLE_SIZE (NUM_LV2ENTRIES * sizeof(long))
65
66 #define rockchip_lv2table_base(sent) (*(sent) & 0xFFFFFFFE)
67
68 #define rockchip_mk_lv1ent_page(pa) ((pa) | IOMMU_FLAGS_PRESENT)
69 /*write and read permission for level2 page default*/
70 #define rockchip_mk_lv2ent_spage(pa) ((pa) | IOMMU_FLAGS_PRESENT | \
71                              IOMMU_FLAGS_READ_PERMISSION | \
72                              IOMMU_FLAGS_WRITE_PERMISSION)
73
74 #define IOMMU_REG_POLL_COUNT_FAST 1000
75
76 /**
77  * MMU register numbers
78  * Used in the register read/write routines.
79  * See the hardware documentation for more information about each register
80  */
81 enum iommu_register {
82         /**< Current Page Directory Pointer */
83         IOMMU_REGISTER_DTE_ADDR = 0x0000,
84         /**< Status of the MMU */
85         IOMMU_REGISTER_STATUS = 0x0004,
86         /**< Command register, used to control the MMU */
87         IOMMU_REGISTER_COMMAND = 0x0008,
88         /**< Logical address of the last page fault */
89         IOMMU_REGISTER_PAGE_FAULT_ADDR = 0x000C,
90         /**< Used to invalidate the mapping of a single page from the MMU */
91         IOMMU_REGISTER_ZAP_ONE_LINE = 0x010,
92         /**< Raw interrupt status, all interrupts visible */
93         IOMMU_REGISTER_INT_RAWSTAT = 0x0014,
94         /**< Indicate to the MMU that the interrupt has been received */
95         IOMMU_REGISTER_INT_CLEAR = 0x0018,
96         /**< Enable/disable types of interrupts */
97         IOMMU_REGISTER_INT_MASK = 0x001C,
98         /**< Interrupt status based on the mask */
99         IOMMU_REGISTER_INT_STATUS = 0x0020,
100         IOMMU_REGISTER_AUTO_GATING = 0x0024
101 };
102
103 enum iommu_command {
104         /**< Enable paging (memory translation) */
105         IOMMU_COMMAND_ENABLE_PAGING = 0x00,
106         /**< Disable paging (memory translation) */
107         IOMMU_COMMAND_DISABLE_PAGING = 0x01,
108         /**<  Enable stall on page fault */
109         IOMMU_COMMAND_ENABLE_STALL = 0x02,
110         /**< Disable stall on page fault */
111         IOMMU_COMMAND_DISABLE_STALL = 0x03,
112         /**< Zap the entire page table cache */
113         IOMMU_COMMAND_ZAP_CACHE = 0x04,
114         /**< Page fault processed */
115         IOMMU_COMMAND_PAGE_FAULT_DONE = 0x05,
116         /**< Reset the MMU back to power-on settings */
117         IOMMU_COMMAND_HARD_RESET = 0x06
118 };
119
120 /**
121  * MMU interrupt register bits
122  * Each cause of the interrupt is reported
123  * through the (raw) interrupt status registers.
124  * Multiple interrupts can be pending, so multiple bits
125  * can be set at once.
126  */
127 enum iommu_interrupt {
128         IOMMU_INTERRUPT_PAGE_FAULT = 0x01, /**< A page fault occured */
129         IOMMU_INTERRUPT_READ_BUS_ERROR = 0x02 /**< A bus read error occured */
130 };
131
132 enum iommu_status_bits {
133         IOMMU_STATUS_BIT_PAGING_ENABLED      = 1 << 0,
134         IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE   = 1 << 1,
135         IOMMU_STATUS_BIT_STALL_ACTIVE        = 1 << 2,
136         IOMMU_STATUS_BIT_IDLE                = 1 << 3,
137         IOMMU_STATUS_BIT_REPLAY_BUFFER_EMPTY = 1 << 4,
138         IOMMU_STATUS_BIT_PAGE_FAULT_IS_WRITE = 1 << 5,
139         IOMMU_STATUS_BIT_STALL_NOT_ACTIVE    = 1 << 31,
140 };
141
142 /**
143  * Size of an MMU page in bytes
144  */
145 #define IOMMU_PAGE_SIZE 0x1000
146
147 /*
148  * Size of the address space referenced by a page table page
149  */
150 #define IOMMU_VIRTUAL_PAGE_SIZE 0x400000 /* 4 MiB */
151
152 /**
153  * Page directory index from address
154  * Calculates the page directory index from the given address
155  */
156 #define IOMMU_PDE_ENTRY(address) (((address)>>22) & 0x03FF)
157
158 /**
159  * Page table index from address
160  * Calculates the page table index from the given address
161  */
162 #define IOMMU_PTE_ENTRY(address) (((address)>>12) & 0x03FF)
163
164 /**
165  * Extract the memory address from an PDE/PTE entry
166  */
167 #define IOMMU_ENTRY_ADDRESS(value) ((value) & 0xFFFFFC00)
168
169 #define INVALID_PAGE ((u32)(~0))
170
171 static struct kmem_cache *lv2table_kmem_cache;
172
173 static unsigned long *rockchip_section_entry(unsigned long *pgtable, unsigned long iova)
174 {
175         return pgtable + rockchip_lv1ent_offset(iova);
176 }
177
178 static unsigned long *rockchip_page_entry(unsigned long *sent, unsigned long iova)
179 {
180         return (unsigned long *)__va(rockchip_lv2table_base(sent)) +
181                 rockchip_lv2ent_offset(iova);
182 }
183
184 struct rk_iommu_domain {
185         struct list_head clients; /* list of iommu_drvdata.node */
186         unsigned long *pgtable; /* lv1 page table, 4KB */
187         short *lv2entcnt; /* free lv2 entry counter for each section */
188         spinlock_t lock; /* lock for this structure */
189         spinlock_t pgtablelock; /* lock for modifying page table @ pgtable */
190 };
191
192 static bool rockchip_set_iommu_active(struct iommu_drvdata *data)
193 {
194         /* return true if the IOMMU was not active previously
195            and it needs to be initialized */
196         return ++data->activations == 1;
197 }
198
199 static bool rockchip_set_iommu_inactive(struct iommu_drvdata *data)
200 {
201         /* return true if the IOMMU is needed to be disabled */
202         BUG_ON(data->activations < 1);
203         return --data->activations == 0;
204 }
205
206 static bool rockchip_is_iommu_active(struct iommu_drvdata *data)
207 {
208         return data->activations > 0;
209 }
210
211 static void rockchip_iommu_disable_stall(void __iomem *base)
212 {
213         int i;
214         u32 mmu_status;
215
216         if (base != rk312x_vop_mmu_base) {
217                 mmu_status = __raw_readl(base + IOMMU_REGISTER_STATUS);
218         } else {
219                 goto skip_vop_mmu_disable;
220         }
221
222         if (0 == (mmu_status & IOMMU_STATUS_BIT_PAGING_ENABLED)) {
223                 return;
224         }
225
226         if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE) {
227                 pr_info("Aborting MMU disable stall request since it is in pagefault state.\n");
228                 return;
229         }
230
231         if (!(mmu_status & IOMMU_STATUS_BIT_STALL_ACTIVE)) {
232                 return;
233         }
234
235         __raw_writel(IOMMU_COMMAND_DISABLE_STALL, base + IOMMU_REGISTER_COMMAND);
236
237         skip_vop_mmu_disable:
238
239         for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
240                 u32 status;
241                 
242                 if (base != rk312x_vop_mmu_base) {
243                         status = __raw_readl(base + IOMMU_REGISTER_STATUS);
244                 } else {
245                         int j;
246                         while (j < 5)
247                                 j++;
248                         return; 
249                 }
250
251                 if (0 == (status & IOMMU_STATUS_BIT_STALL_ACTIVE))
252                         break;
253
254                 if (status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE)
255                         break;
256
257                 if (0 == (mmu_status & IOMMU_STATUS_BIT_PAGING_ENABLED))
258                         break;
259         }
260
261         if (IOMMU_REG_POLL_COUNT_FAST == i) {
262                 pr_info("Disable stall request failed, MMU status is 0x%08X\n",
263                       __raw_readl(base + IOMMU_REGISTER_STATUS));
264         }
265 }
266
267 static bool rockchip_iommu_enable_stall(void __iomem *base)
268 {
269         int i;
270
271         u32 mmu_status;
272         
273         if (base != rk312x_vop_mmu_base) {
274                 mmu_status = __raw_readl(base + IOMMU_REGISTER_STATUS);
275         } else {
276                 goto skip_vop_mmu_enable;
277         }
278
279         if (0 == (mmu_status & IOMMU_STATUS_BIT_PAGING_ENABLED)) {
280                 return true;
281         }
282
283         if (mmu_status & IOMMU_STATUS_BIT_STALL_ACTIVE){
284                 pr_info("MMU stall already enabled\n");
285                 return true;
286         }
287
288         if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE) {
289                 pr_info("Aborting MMU stall request since it is in pagefault state. mmu status is 0x%08x\n",
290                         mmu_status);
291                 return false;
292         }
293
294         __raw_writel(IOMMU_COMMAND_ENABLE_STALL, base + IOMMU_REGISTER_COMMAND);
295
296         skip_vop_mmu_enable:
297
298         for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
299                 if (base != rk312x_vop_mmu_base) {
300                         mmu_status = __raw_readl(base + IOMMU_REGISTER_STATUS);
301                 } else {
302                         int j;
303                         while (j < 5)
304                                 j++;
305                         return true;
306                 }
307
308                 if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE)
309                         break;
310
311                 if ((mmu_status & IOMMU_STATUS_BIT_STALL_ACTIVE) &&
312                     (0 == (mmu_status & IOMMU_STATUS_BIT_STALL_NOT_ACTIVE)))
313                         break;
314
315                 if (0 == (mmu_status & (IOMMU_STATUS_BIT_PAGING_ENABLED)))
316                         break;
317         }
318
319         if (IOMMU_REG_POLL_COUNT_FAST == i) {
320                 pr_info("Enable stall request failed, MMU status is 0x%08X\n",
321                        __raw_readl(base + IOMMU_REGISTER_STATUS));
322                 return false;
323         }
324
325         if (mmu_status & IOMMU_STATUS_BIT_PAGE_FAULT_ACTIVE) {
326                 pr_info("Aborting MMU stall request since it has a pagefault.\n");
327                 return false;
328         }
329
330         return true;
331 }
332
333 static bool rockchip_iommu_enable_paging(void __iomem *base)
334 {
335         int i;
336
337         __raw_writel(IOMMU_COMMAND_ENABLE_PAGING,
338                      base + IOMMU_REGISTER_COMMAND);
339
340         for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
341                 if (base != rk312x_vop_mmu_base) {
342                         if (__raw_readl(base + IOMMU_REGISTER_STATUS) &
343                                 IOMMU_STATUS_BIT_PAGING_ENABLED)
344                         break;
345                 } else {
346                         int j;
347                         while (j < 5)
348                                 j++;
349                         return true;
350                 }
351         }
352
353         if (IOMMU_REG_POLL_COUNT_FAST == i) {
354                 pr_info("Enable paging request failed, MMU status is 0x%08X\n",
355                        __raw_readl(base + IOMMU_REGISTER_STATUS));
356                 return false;
357         }
358
359         return true;
360 }
361
362 static bool rockchip_iommu_disable_paging(void __iomem *base)
363 {
364         int i;
365
366         __raw_writel(IOMMU_COMMAND_DISABLE_PAGING,
367                      base + IOMMU_REGISTER_COMMAND);
368
369         for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
370                 if (base != rk312x_vop_mmu_base) {
371                         if (!(__raw_readl(base + IOMMU_REGISTER_STATUS) &
372                                   IOMMU_STATUS_BIT_PAGING_ENABLED))
373                                 break;
374                 } else {
375                         int j;
376                         while (j < 5)
377                                 j++;
378                         return true;
379                 }
380         }
381
382         if (IOMMU_REG_POLL_COUNT_FAST == i) {
383                 pr_info("Disable paging request failed, MMU status is 0x%08X\n",
384                        __raw_readl(base + IOMMU_REGISTER_STATUS));
385                 return false;
386         }
387
388         return true;
389 }
390
391 static void rockchip_iommu_page_fault_done(void __iomem *base, const char *dbgname)
392 {
393         pr_info("MMU: %s: Leaving page fault mode\n",
394                 dbgname);
395         __raw_writel(IOMMU_COMMAND_PAGE_FAULT_DONE,
396                      base + IOMMU_REGISTER_COMMAND);
397 }
398
399 static int rockchip_iommu_zap_tlb_without_stall (void __iomem *base)
400 {
401         __raw_writel(IOMMU_COMMAND_ZAP_CACHE, base + IOMMU_REGISTER_COMMAND);
402
403         return 0;
404 }
405
406 static int rockchip_iommu_zap_tlb(void __iomem *base)
407 {
408         if (!rockchip_iommu_enable_stall(base)) {
409                 pr_err("%s failed\n", __func__);
410                 return -1;
411         }
412
413         __raw_writel(IOMMU_COMMAND_ZAP_CACHE, base + IOMMU_REGISTER_COMMAND);
414
415         rockchip_iommu_disable_stall(base);
416
417         return 0;
418 }
419
420 static inline bool rockchip_iommu_raw_reset(void __iomem *base)
421 {
422         int i;
423         unsigned int ret;
424         unsigned int grf_value;
425
426         __raw_writel(0xCAFEBABE, base + IOMMU_REGISTER_DTE_ADDR);
427
428         if (base != rk312x_vop_mmu_base) {
429                 ret = __raw_readl(base + IOMMU_REGISTER_DTE_ADDR);
430                 if (!(0xCAFEB000 == ret)) {
431                         grf_value = readl_relaxed(RK_GRF_VIRT + RK3036_GRF_SOC_CON1);
432                         pr_info("error when %s. grf = 0x%08x\n", __func__, grf_value);
433                         return false;
434                 }
435         }
436         __raw_writel(IOMMU_COMMAND_HARD_RESET,
437                      base + IOMMU_REGISTER_COMMAND);
438
439         for (i = 0; i < IOMMU_REG_POLL_COUNT_FAST; ++i) {
440                 if (base != rk312x_vop_mmu_base) {
441                         if (__raw_readl(base + IOMMU_REGISTER_DTE_ADDR) == 0)
442                                 break;
443                 } else {
444                         int j;
445                         while (j < 5)
446                                 j++;
447                         return true;
448                 }
449         }
450
451         if (IOMMU_REG_POLL_COUNT_FAST == i) {
452                 pr_info("%s,Reset request failed, MMU status is 0x%08X\n",
453                        __func__, __raw_readl(base + IOMMU_REGISTER_DTE_ADDR));
454                 return false;
455         }
456         return true;
457 }
458
459 static void rockchip_iommu_set_ptbase(void __iomem *base, unsigned long pgd)
460 {
461         __raw_writel(pgd, base + IOMMU_REGISTER_DTE_ADDR);
462 }
463
464 static bool rockchip_iommu_reset(void __iomem *base, const char *dbgname)
465 {
466         bool ret = true;
467
468         ret = rockchip_iommu_raw_reset(base);
469         if (!ret) {
470                 pr_info("(%s), %s failed\n", dbgname, __func__);
471                 return ret;
472         }
473
474         if (base != rk312x_vop_mmu_base)
475                 __raw_writel(IOMMU_INTERRUPT_PAGE_FAULT |
476                              IOMMU_INTERRUPT_READ_BUS_ERROR,
477                              base + IOMMU_REGISTER_INT_MASK);
478         else
479                 __raw_writel(0x00, base + IOMMU_REGISTER_INT_MASK);
480
481         return ret;
482 }
483
484 static inline void rockchip_pgtable_flush(void *vastart, void *vaend)
485 {
486 #ifdef CONFIG_ARM
487         dmac_flush_range(vastart, vaend);
488         outer_flush_range(virt_to_phys(vastart), virt_to_phys(vaend));
489 #elif defined(CONFIG_ARM64)
490         __dma_flush_range(vastart, vaend);
491 #endif
492 }
493
494 static void dump_pagetbl(dma_addr_t fault_address, u32 addr_dte)
495 {
496         u32 dte_index, pte_index, page_offset;
497         u32 mmu_dte_addr;
498         phys_addr_t mmu_dte_addr_phys, dte_addr_phys;
499         u32 *dte_addr;
500         u32 dte;
501         phys_addr_t pte_addr_phys = 0;
502         u32 *pte_addr = NULL;
503         u32 pte = 0;
504         phys_addr_t page_addr_phys = 0;
505         u32 page_flags = 0;
506
507         dte_index = rockchip_lv1ent_offset(fault_address);
508         pte_index = rockchip_lv2ent_offset(fault_address);
509         page_offset = (u32)(fault_address & 0x00000fff);
510
511         mmu_dte_addr = addr_dte;
512         mmu_dte_addr_phys = (phys_addr_t)mmu_dte_addr;
513
514         dte_addr_phys = mmu_dte_addr_phys + (4 * dte_index);
515         dte_addr = phys_to_virt(dte_addr_phys);
516         dte = *dte_addr;
517
518         if (!(IOMMU_FLAGS_PRESENT & dte))
519                 goto print_it;
520
521         pte_addr_phys = ((phys_addr_t)dte & 0xfffff000) + (pte_index * 4);
522         pte_addr = phys_to_virt(pte_addr_phys);
523         pte = *pte_addr;
524
525         if (!(IOMMU_FLAGS_PRESENT & pte))
526                 goto print_it;
527
528         page_addr_phys = ((phys_addr_t)pte & 0xfffff000) + page_offset;
529         page_flags = pte & 0x000001fe;
530
531 print_it:
532         pr_err("iova = %pad: dte_index: 0x%03x pte_index: 0x%03x page_offset: 0x%03x\n",
533                 &fault_address, dte_index, pte_index, page_offset);
534         pr_err("mmu_dte_addr: %pa dte@%pa: %#08x valid: %u pte@%pa: %#08x valid: %u page@%pa flags: %#03x\n",
535                 &mmu_dte_addr_phys, &dte_addr_phys, dte,
536                 (dte & IOMMU_FLAGS_PRESENT), &pte_addr_phys, pte,
537                 (pte & IOMMU_FLAGS_PRESENT), &page_addr_phys, page_flags);
538 }
539
540 static irqreturn_t rockchip_iommu_irq(int irq, void *dev_id)
541 {
542         /* SYSMMU is in blocked when interrupt occurred. */
543         struct iommu_drvdata *data = dev_id;
544         u32 status;
545         u32 rawstat;
546         dma_addr_t fault_address;
547         int i;
548         unsigned long flags;
549         int ret;
550         u32 reg_status;
551
552         spin_lock_irqsave(&data->data_lock, flags);
553
554         if (!rockchip_is_iommu_active(data)) {
555                 spin_unlock_irqrestore(&data->data_lock, flags);
556                 return IRQ_HANDLED;
557         }
558
559         for (i = 0; i < data->num_res_mem; i++) {
560                 status = __raw_readl(data->res_bases[i] +
561                                      IOMMU_REGISTER_INT_STATUS);
562                 if (status == 0)
563                         continue;
564
565                 rawstat = __raw_readl(data->res_bases[i] +
566                                       IOMMU_REGISTER_INT_RAWSTAT);
567
568                 reg_status = __raw_readl(data->res_bases[i] +
569                                          IOMMU_REGISTER_STATUS);
570
571                 dev_info(data->iommu, "1.rawstat = 0x%08x,status = 0x%08x,reg_status = 0x%08x\n",
572                          rawstat, status, reg_status);
573
574                 if (rawstat & IOMMU_INTERRUPT_PAGE_FAULT) {
575                         u32 dte;
576                         int flags;
577
578                         fault_address = __raw_readl(data->res_bases[i] +
579                                             IOMMU_REGISTER_PAGE_FAULT_ADDR);
580
581                         dte = __raw_readl(data->res_bases[i] +
582                                           IOMMU_REGISTER_DTE_ADDR);
583
584                         flags = (status & 32) ? 1 : 0;
585
586                         dev_err(data->iommu, "Page fault detected at %pad from bus id %d of type %s on %s\n",
587                                 &fault_address, (status >> 6) & 0x1F,
588                                 (flags == 1) ? "write" : "read", data->dbgname);
589
590                         dump_pagetbl(fault_address, dte);
591
592                         if (data->domain)
593                                 report_iommu_fault(data->domain, data->iommu,
594                                                    fault_address, flags);
595
596                         rockchip_iommu_page_fault_done(data->res_bases[i],
597                                                        data->dbgname);
598                 }
599
600                 if (rawstat & IOMMU_INTERRUPT_READ_BUS_ERROR) {
601                         dev_err(data->iommu, "bus error occured at %pad\n",
602                                 &fault_address);
603                 }
604
605                 if (rawstat & ~(IOMMU_INTERRUPT_READ_BUS_ERROR |
606                     IOMMU_INTERRUPT_PAGE_FAULT)) {
607                         dev_err(data->iommu, "unexpected int_status: %#08x\n\n",
608                                 rawstat);
609                 }
610
611                 __raw_writel(rawstat, data->res_bases[i] +
612                              IOMMU_REGISTER_INT_CLEAR);
613
614                 status = __raw_readl(data->res_bases[i] +
615                                      IOMMU_REGISTER_INT_STATUS);
616
617                 rawstat = __raw_readl(data->res_bases[i] +
618                                       IOMMU_REGISTER_INT_RAWSTAT);
619
620                 reg_status = __raw_readl(data->res_bases[i] +
621                                          IOMMU_REGISTER_STATUS);
622
623                 dev_info(data->iommu, "2.rawstat = 0x%08x,status = 0x%08x,reg_status = 0x%08x\n",
624                          rawstat, status, reg_status);
625
626                 ret = rockchip_iommu_zap_tlb_without_stall(data->res_bases[i]);
627                 if (ret)
628                         dev_err(data->iommu, "(%s) %s failed\n", data->dbgname,
629                                 __func__);
630         }
631
632         spin_unlock_irqrestore(&data->data_lock, flags);
633         return IRQ_HANDLED;
634 }
635
636 static bool rockchip_iommu_disable(struct iommu_drvdata *data)
637 {
638         unsigned long flags;
639         int i;
640         bool ret = false;
641
642         spin_lock_irqsave(&data->data_lock, flags);
643
644         if (!rockchip_set_iommu_inactive(data)) {
645                 spin_unlock_irqrestore(&data->data_lock, flags);
646                 dev_info(data->iommu,"(%s) %d times left to be disabled\n",
647                          data->dbgname, data->activations);
648                 return ret;
649         }
650
651         for (i = 0; i < data->num_res_mem; i++) {
652                 ret = rockchip_iommu_enable_stall(data->res_bases[i]);
653                 if (!ret) {
654                         dev_info(data->iommu, "(%s), %s failed\n",
655                                  data->dbgname, __func__);
656                         spin_unlock_irqrestore(&data->data_lock, flags);
657                         return false;
658                 }
659
660                 __raw_writel(0, data->res_bases[i] + IOMMU_REGISTER_INT_MASK);
661
662                 ret = rockchip_iommu_disable_paging(data->res_bases[i]);
663                 if (!ret) {
664                         rockchip_iommu_disable_stall(data->res_bases[i]);
665                         spin_unlock_irqrestore(&data->data_lock, flags);
666                         dev_info(data->iommu, "%s error\n", __func__);
667                         return ret;
668                 }
669                 rockchip_iommu_disable_stall(data->res_bases[i]);
670         }
671
672         data->pgtable = 0;
673
674         spin_unlock_irqrestore(&data->data_lock, flags);
675
676         dev_dbg(data->iommu,"(%s) Disabled\n", data->dbgname);
677
678         return ret;
679 }
680
681 /* __rk_sysmmu_enable: Enables System MMU
682  *
683  * returns -error if an error occurred and System MMU is not enabled,
684  * 0 if the System MMU has been just enabled and 1 if System MMU was already
685  * enabled before.
686  */
687 static int rockchip_iommu_enable(struct iommu_drvdata *data, unsigned long pgtable)
688 {
689         int i, ret = 0;
690         unsigned long flags;
691
692         spin_lock_irqsave(&data->data_lock, flags);
693
694         if (!rockchip_set_iommu_active(data)) {
695                 if (WARN_ON(pgtable != data->pgtable)) {
696                         ret = -EBUSY;
697                         rockchip_set_iommu_inactive(data);
698                 } else {
699                         ret = 1;
700                 }
701
702                 spin_unlock_irqrestore(&data->data_lock, flags);
703                 dev_info(data->iommu, "(%s) Already enabled\n", data->dbgname);
704
705                 return ret;
706         }
707
708         for (i = 0; i < data->num_res_mem; i++) {
709                 ret = rockchip_iommu_enable_stall(data->res_bases[i]);
710                 if (!ret) {
711                         dev_info(data->iommu, "(%s), %s failed\n",
712                                  data->dbgname, __func__);
713                         spin_unlock_irqrestore(&data->data_lock, flags);
714                         return -EBUSY;
715                 }
716
717                 if (!strstr(data->dbgname, "isp")) {
718                         if (!rockchip_iommu_reset(data->res_bases[i],
719                              data->dbgname)) {
720                                 spin_unlock_irqrestore(&data->data_lock, flags);
721                                 return -ENOENT;
722                         }
723                 }
724
725                 rockchip_iommu_set_ptbase(data->res_bases[i], pgtable);
726
727                 __raw_writel(IOMMU_COMMAND_ZAP_CACHE, data->res_bases[i] +
728                              IOMMU_REGISTER_COMMAND);
729
730                 if (strstr(data->dbgname, "isp")) {
731                         __raw_writel(IOMMU_INTERRUPT_PAGE_FAULT |
732                                 IOMMU_INTERRUPT_READ_BUS_ERROR,
733                              data->res_bases[i] + IOMMU_REGISTER_INT_MASK);
734                 }
735
736                 ret = rockchip_iommu_enable_paging(data->res_bases[i]);
737                 if (!ret) {
738                         spin_unlock_irqrestore(&data->data_lock, flags);
739                         dev_info(data->iommu, "(%s), %s failed\n",
740                                  data->dbgname, __func__);
741                         return -EBUSY;
742                 }
743
744                 rockchip_iommu_disable_stall(data->res_bases[i]);
745         }
746
747         data->pgtable = pgtable;
748
749         dev_dbg(data->iommu,"(%s) Enabled\n", data->dbgname);
750
751         spin_unlock_irqrestore(&data->data_lock, flags);
752
753         return 0;
754 }
755
756 int rockchip_iommu_tlb_invalidate(struct device *dev)
757 {
758         unsigned long flags;
759         struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
760
761         spin_lock_irqsave(&data->data_lock, flags);
762
763         if (rockchip_is_iommu_active(data)) {
764                 int i;
765                 int ret;
766
767                 for (i = 0; i < data->num_res_mem; i++) {
768                         ret = rockchip_iommu_zap_tlb(data->res_bases[i]);
769                         if (ret) {
770                                 dev_err(dev->archdata.iommu, "(%s) %s failed\n",
771                                         data->dbgname, __func__);
772                                 spin_unlock_irqrestore(&data->data_lock, flags);
773                                 return ret;
774                         }
775                                 
776                 }
777         } else {
778                 dev_dbg(dev->archdata.iommu, "(%s) Disabled. Skipping invalidating TLB.\n",
779                         data->dbgname);
780         }
781
782         spin_unlock_irqrestore(&data->data_lock, flags);
783
784         return 0;
785 }
786
787 static phys_addr_t rockchip_iommu_iova_to_phys(struct iommu_domain *domain,
788                                                dma_addr_t iova)
789 {
790         struct rk_iommu_domain *priv = domain->priv;
791         unsigned long *entry;
792         unsigned long flags;
793         phys_addr_t phys = 0;
794
795         spin_lock_irqsave(&priv->pgtablelock, flags);
796
797         entry = rockchip_section_entry(priv->pgtable, iova);
798         entry = rockchip_page_entry(entry, iova);
799         phys = rockchip_spage_phys(entry) + rockchip_spage_offs(iova);
800
801         spin_unlock_irqrestore(&priv->pgtablelock, flags);
802
803         return phys;
804 }
805
806 static int rockchip_lv2set_page(unsigned long *pent, phys_addr_t paddr,
807                        size_t size, short *pgcnt)
808 {
809         if (!rockchip_lv2ent_fault(pent))
810                 return -EADDRINUSE;
811
812         *pent = rockchip_mk_lv2ent_spage(paddr);
813         rockchip_pgtable_flush(pent, pent + 1);
814         *pgcnt -= 1;
815         return 0;
816 }
817
818 static unsigned long *rockchip_alloc_lv2entry(unsigned long *sent,
819                                      unsigned long iova, short *pgcounter)
820 {
821         if (rockchip_lv1ent_fault(sent)) {
822                 unsigned long *pent;
823
824                 pent = kmem_cache_zalloc(lv2table_kmem_cache, GFP_ATOMIC);
825                 BUG_ON((unsigned long)pent & (LV2TABLE_SIZE - 1));
826                 if (!pent)
827                         return NULL;
828
829                 *sent = rockchip_mk_lv1ent_page(__pa(pent));
830                 kmemleak_ignore(pent);
831                 *pgcounter = NUM_LV2ENTRIES;
832                 rockchip_pgtable_flush(pent, pent + NUM_LV2ENTRIES);
833                 rockchip_pgtable_flush(sent, sent + 1);
834         }
835         return rockchip_page_entry(sent, iova);
836 }
837
838 static size_t rockchip_iommu_unmap(struct iommu_domain *domain,
839                                    unsigned long iova, size_t size)
840 {
841         struct rk_iommu_domain *priv = domain->priv;
842         unsigned long flags;
843         unsigned long *ent;
844
845         BUG_ON(priv->pgtable == NULL);
846
847         spin_lock_irqsave(&priv->pgtablelock, flags);
848
849         ent = rockchip_section_entry(priv->pgtable, iova);
850
851         if (unlikely(rockchip_lv1ent_fault(ent))) {
852                 if (size > SPAGE_SIZE)
853                         size = SPAGE_SIZE;
854                 goto done;
855         }
856
857         /* lv1ent_page(sent) == true here */
858
859         ent = rockchip_page_entry(ent, iova);
860
861         if (unlikely(rockchip_lv2ent_fault(ent))) {
862                 size = SPAGE_SIZE;
863                 goto done;
864         }
865
866         *ent = 0;
867         size = SPAGE_SIZE;
868         priv->lv2entcnt[rockchip_lv1ent_offset(iova)] += 1;
869         goto done;
870
871 done:
872         #if 0
873         pr_info("%s:unmap iova 0x%lx/0x%x bytes\n",
874                   __func__, iova,size);
875         #endif
876         spin_unlock_irqrestore(&priv->pgtablelock, flags);
877
878         return size;
879 }
880
881 static int rockchip_iommu_map(struct iommu_domain *domain, unsigned long iova,
882                               phys_addr_t paddr, size_t size, int prot)
883 {
884         struct rk_iommu_domain *priv = domain->priv;
885         unsigned long *entry;
886         unsigned long flags;
887         int ret = -ENOMEM;
888         unsigned long *pent;
889
890         BUG_ON(priv->pgtable == NULL);
891
892         spin_lock_irqsave(&priv->pgtablelock, flags);
893
894         entry = rockchip_section_entry(priv->pgtable, iova);
895
896         pent = rockchip_alloc_lv2entry(entry, iova,
897                               &priv->lv2entcnt[rockchip_lv1ent_offset(iova)]);
898         if (!pent)
899                 ret = -ENOMEM;
900         else
901                 ret = rockchip_lv2set_page(pent, paddr, size,
902                                 &priv->lv2entcnt[rockchip_lv1ent_offset(iova)]);
903
904         if (ret) {
905                 pr_info("%s: Failed to map iova 0x%lx/0x%x bytes\n", __func__,
906                        iova, size);
907         }
908         spin_unlock_irqrestore(&priv->pgtablelock, flags);
909
910         return ret;
911 }
912
913 static void rockchip_iommu_detach_device(struct iommu_domain *domain, struct device *dev)
914 {
915         struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
916         struct rk_iommu_domain *priv = domain->priv;
917         struct list_head *pos;
918         unsigned long flags;
919         bool found = false;
920
921         spin_lock_irqsave(&priv->lock, flags);
922
923         list_for_each(pos, &priv->clients) {
924                 if (list_entry(pos, struct iommu_drvdata, node) == data) {
925                         found = true;
926                         break;
927                 }
928         }
929
930         if (!found) {
931                 spin_unlock_irqrestore(&priv->lock, flags);
932                 return;
933         }
934
935         if (rockchip_iommu_disable(data)) {
936                 dev_dbg(dev->archdata.iommu,"%s: Detached IOMMU with pgtable %#lx\n",
937                         __func__, __pa(priv->pgtable));
938                 data->domain = NULL;
939                 list_del_init(&data->node);
940
941         } else
942                 dev_err(dev->archdata.iommu,"%s: Detaching IOMMU with pgtable %#lx delayed",
943                         __func__, __pa(priv->pgtable));
944
945         spin_unlock_irqrestore(&priv->lock, flags);
946 }
947
948 static int rockchip_iommu_attach_device(struct iommu_domain *domain, struct device *dev)
949 {
950         struct iommu_drvdata *data = dev_get_drvdata(dev->archdata.iommu);
951         struct rk_iommu_domain *priv = domain->priv;
952         unsigned long flags;
953         int ret;
954
955         spin_lock_irqsave(&priv->lock, flags);
956
957         ret = rockchip_iommu_enable(data, __pa(priv->pgtable));
958
959         if (ret == 0) {
960                 /* 'data->node' must not be appeared in priv->clients */
961                 BUG_ON(!list_empty(&data->node));
962                 list_add_tail(&data->node, &priv->clients);
963                 data->domain = domain;
964         }
965
966         spin_unlock_irqrestore(&priv->lock, flags);
967
968         if (ret < 0) {
969                 dev_err(dev->archdata.iommu,"%s: Failed to attach IOMMU with pgtable %#lx\n",
970                        __func__, __pa(priv->pgtable));
971         } else if (ret > 0) {
972                 dev_dbg(dev->archdata.iommu,"%s: IOMMU with pgtable 0x%lx already attached\n",
973                         __func__, __pa(priv->pgtable));
974         } else {
975                 dev_dbg(dev->archdata.iommu,"%s: Attached new IOMMU with pgtable 0x%lx\n",
976                         __func__, __pa(priv->pgtable));
977         }
978
979         return ret;
980 }
981
982 static void rockchip_iommu_domain_destroy(struct iommu_domain *domain)
983 {
984         struct rk_iommu_domain *priv = domain->priv;
985         int i;
986
987         WARN_ON(!list_empty(&priv->clients));
988
989         for (i = 0; i < NUM_LV1ENTRIES; i++)
990                 if (rockchip_lv1ent_page(priv->pgtable + i))
991                         kmem_cache_free(lv2table_kmem_cache,
992                                         __va(rockchip_lv2table_base(priv->pgtable + i)));
993
994         free_pages((unsigned long)priv->pgtable, 0);
995         free_pages((unsigned long)priv->lv2entcnt, 0);
996         kfree(domain->priv);
997         domain->priv = NULL;
998 }
999
1000 static int rockchip_iommu_domain_init(struct iommu_domain *domain)
1001 {
1002         struct rk_iommu_domain *priv;
1003
1004         priv = kzalloc(sizeof(*priv), GFP_KERNEL);
1005         if (!priv)
1006                 return -ENOMEM;
1007
1008 /*rk32xx iommu use 2 level pagetable,
1009    level1 and leve2 both have 1024 entries,each entry  occupy 4 bytes,
1010    so alloc a page size for each page table
1011 */
1012         priv->pgtable = (unsigned long *)__get_free_pages(GFP_KERNEL |
1013                                                           __GFP_ZERO, 0);
1014         if (!priv->pgtable)
1015                 goto err_pgtable;
1016
1017         priv->lv2entcnt = (short *)__get_free_pages(GFP_KERNEL |
1018                                                     __GFP_ZERO, 0);
1019         if (!priv->lv2entcnt)
1020                 goto err_counter;
1021
1022         rockchip_pgtable_flush(priv->pgtable, priv->pgtable + NUM_LV1ENTRIES);
1023
1024         spin_lock_init(&priv->lock);
1025         spin_lock_init(&priv->pgtablelock);
1026         INIT_LIST_HEAD(&priv->clients);
1027
1028         domain->priv = priv;
1029         return 0;
1030
1031 err_counter:
1032         free_pages((unsigned long)priv->pgtable, 0);
1033 err_pgtable:
1034         kfree(priv);
1035         return -ENOMEM;
1036 }
1037
1038 static struct iommu_ops rk_iommu_ops = {
1039         .domain_init = &rockchip_iommu_domain_init,
1040         .domain_destroy = &rockchip_iommu_domain_destroy,
1041         .attach_dev = &rockchip_iommu_attach_device,
1042         .detach_dev = &rockchip_iommu_detach_device,
1043         .map = &rockchip_iommu_map,
1044         .unmap = &rockchip_iommu_unmap,
1045         .iova_to_phys = &rockchip_iommu_iova_to_phys,
1046         .pgsize_bitmap = SPAGE_SIZE,
1047 };
1048
1049 static int  rockchip_get_iommu_resource_num(struct platform_device *pdev,
1050                                              unsigned int type)
1051 {
1052         int num = 0;
1053         int i;
1054
1055         for (i = 0; i < pdev->num_resources; i++) {
1056                 struct resource *r = &pdev->resource[i];
1057                 if (type == resource_type(r))
1058                         num++;
1059         }
1060
1061         return num;
1062 }
1063
1064 static int rockchip_iommu_probe(struct platform_device *pdev)
1065 {
1066         int i, ret;
1067         struct device *dev;
1068         struct iommu_drvdata *data;
1069         
1070         dev = &pdev->dev;
1071
1072         data = devm_kzalloc(dev, sizeof(*data), GFP_KERNEL);
1073         if (!data) {
1074                 dev_dbg(dev, "Not enough memory\n");
1075                 return -ENOMEM;
1076         }
1077
1078         dev_set_drvdata(dev, data);
1079
1080         if (pdev->dev.of_node)
1081                 of_property_read_string(pdev->dev.of_node, "dbgname",
1082                                         &(data->dbgname));
1083         else
1084                 dev_dbg(dev, "dbgname not assigned in device tree or device node not exist\r\n");
1085
1086         dev_info(dev,"(%s) Enter\n", data->dbgname);
1087         
1088         data->num_res_mem = rockchip_get_iommu_resource_num(pdev,
1089                                 IORESOURCE_MEM);
1090         if (0 == data->num_res_mem) {
1091                 dev_err(dev,"can't find iommu memory resource \r\n");
1092                 return -ENOMEM;
1093         }
1094         dev_dbg(dev,"data->num_res_mem=%d\n", data->num_res_mem);
1095
1096         data->num_res_irq = rockchip_get_iommu_resource_num(pdev,
1097                                 IORESOURCE_IRQ);
1098         if (0 == data->num_res_irq) {
1099                 dev_err(dev,"can't find iommu irq resource \r\n");
1100                 return -ENOMEM;
1101         }
1102         dev_dbg(dev,"data->num_res_irq=%d\n", data->num_res_irq);
1103
1104         data->res_bases = devm_kmalloc_array(dev, data->num_res_mem,
1105                                 sizeof(*data->res_bases), GFP_KERNEL);
1106         if (data->res_bases == NULL) {
1107                 dev_err(dev, "Not enough memory\n");
1108                 return -ENOMEM;
1109         }
1110
1111         for (i = 0; i < data->num_res_mem; i++) {
1112                 struct resource *res;
1113
1114                 res = platform_get_resource(pdev, IORESOURCE_MEM, i);
1115                 if (!res) {
1116                         dev_err(dev,"Unable to find IOMEM region\n");
1117                         return -ENOENT;
1118                 }
1119
1120                 data->res_bases[i] = devm_ioremap(dev,res->start,
1121                                                   resource_size(res));
1122                 if (!data->res_bases[i]) {
1123                         dev_err(dev, "Unable to map IOMEM @ PA:%#x\n",
1124                                 res->start);
1125                         return -ENOMEM;
1126                 }
1127
1128                 dev_dbg(dev,"res->start = 0x%08x ioremap to data->res_bases[%d] = 0x%08x\n",
1129                         res->start, i, (unsigned int)data->res_bases[i]);
1130
1131                 if (strstr(data->dbgname, "vop") &&
1132                     (soc_is_rk3128() || soc_is_rk3126())) {
1133                         rk312x_vop_mmu_base = data->res_bases[0];
1134                         dev_dbg(dev, "rk312x_vop_mmu_base = 0x%08x\n",
1135                                 (unsigned int)rk312x_vop_mmu_base);
1136                 }
1137         }
1138
1139         for (i = 0; i < data->num_res_irq; i++) {
1140                 if ((soc_is_rk3128() || soc_is_rk3126()) &&
1141                     strstr(data->dbgname, "vop")) {
1142                         dev_info(dev, "skip request vop mmu irq\n");
1143                         continue;
1144                 }
1145
1146                 ret = platform_get_irq(pdev, i);
1147                 if (ret <= 0) {
1148                         dev_err(dev,"Unable to find IRQ resource\n");
1149                         return -ENOENT;
1150                 }
1151
1152                 ret = devm_request_irq(dev, ret, rockchip_iommu_irq,
1153                                   IRQF_SHARED, dev_name(dev), data);
1154                 if (ret) {
1155                         dev_err(dev, "Unabled to register interrupt handler\n");
1156                         return -ENOENT;
1157                 }
1158         }
1159
1160         ret = rockchip_init_iovmm(dev, &data->vmm);
1161         if (ret)
1162                 return ret;
1163
1164         data->iommu = dev;
1165         spin_lock_init(&data->data_lock);
1166         INIT_LIST_HEAD(&data->node);
1167
1168         dev_info(dev,"(%s) Initialized\n", data->dbgname);
1169
1170         return 0;
1171 }
1172
1173 #ifdef CONFIG_OF
1174 static const struct of_device_id iommu_dt_ids[] = {
1175         { .compatible = IEP_IOMMU_COMPATIBLE_NAME},
1176         { .compatible = VIP_IOMMU_COMPATIBLE_NAME},
1177         { .compatible = VOPB_IOMMU_COMPATIBLE_NAME},
1178         { .compatible = VOPL_IOMMU_COMPATIBLE_NAME},
1179         { .compatible = HEVC_IOMMU_COMPATIBLE_NAME},
1180         { .compatible = VPU_IOMMU_COMPATIBLE_NAME},
1181         { .compatible = ISP_IOMMU_COMPATIBLE_NAME},
1182         { .compatible = VOP_IOMMU_COMPATIBLE_NAME},
1183         { /* end */ }
1184 };
1185
1186 MODULE_DEVICE_TABLE(of, iommu_dt_ids);
1187 #endif
1188
1189 static struct platform_driver rk_iommu_driver = {
1190         .probe = rockchip_iommu_probe,
1191         .remove = NULL,
1192         .driver = {
1193                    .name = "rk_iommu",
1194                    .owner = THIS_MODULE,
1195                    .of_match_table = of_match_ptr(iommu_dt_ids),
1196         },
1197 };
1198
1199 static int __init rockchip_iommu_init_driver(void)
1200 {
1201         int ret;
1202
1203         lv2table_kmem_cache = kmem_cache_create("rk-iommu-lv2table",
1204                                                 LV2TABLE_SIZE, LV2TABLE_SIZE,
1205                                                 0, NULL);
1206         if (!lv2table_kmem_cache) {
1207                 pr_info("%s: failed to create kmem cache\n", __func__);
1208                 return -ENOMEM;
1209         }
1210
1211         ret = bus_set_iommu(&platform_bus_type, &rk_iommu_ops);
1212         if (ret)
1213                 return ret;
1214
1215         return platform_driver_register(&rk_iommu_driver);
1216 }
1217
1218 core_initcall(rockchip_iommu_init_driver);