2 * Copyright (c) 2011,2016 Samsung Electronics Co., Ltd.
3 * http://www.samsung.com
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
10 #ifdef CONFIG_EXYNOS_IOMMU_DEBUG
14 #include <linux/clk.h>
15 #include <linux/dma-mapping.h>
16 #include <linux/err.h>
18 #include <linux/iommu.h>
19 #include <linux/interrupt.h>
20 #include <linux/list.h>
22 #include <linux/of_iommu.h>
23 #include <linux/of_platform.h>
24 #include <linux/platform_device.h>
25 #include <linux/pm_runtime.h>
26 #include <linux/slab.h>
27 #include <linux/dma-iommu.h>
29 typedef u32 sysmmu_iova_t
;
30 typedef u32 sysmmu_pte_t
;
32 /* We do not consider super section mapping (16MB) */
34 #define LPAGE_ORDER 16
35 #define SPAGE_ORDER 12
37 #define SECT_SIZE (1 << SECT_ORDER)
38 #define LPAGE_SIZE (1 << LPAGE_ORDER)
39 #define SPAGE_SIZE (1 << SPAGE_ORDER)
41 #define SECT_MASK (~(SECT_SIZE - 1))
42 #define LPAGE_MASK (~(LPAGE_SIZE - 1))
43 #define SPAGE_MASK (~(SPAGE_SIZE - 1))
45 #define lv1ent_fault(sent) ((*(sent) == ZERO_LV2LINK) || \
46 ((*(sent) & 3) == 0) || ((*(sent) & 3) == 3))
47 #define lv1ent_zero(sent) (*(sent) == ZERO_LV2LINK)
48 #define lv1ent_page_zero(sent) ((*(sent) & 3) == 1)
49 #define lv1ent_page(sent) ((*(sent) != ZERO_LV2LINK) && \
51 #define lv1ent_section(sent) ((*(sent) & 3) == 2)
53 #define lv2ent_fault(pent) ((*(pent) & 3) == 0)
54 #define lv2ent_small(pent) ((*(pent) & 2) == 2)
55 #define lv2ent_large(pent) ((*(pent) & 3) == 1)
58 * v1.x - v3.x SYSMMU supports 32bit physical and 32bit virtual address spaces
59 * v5.0 introduced support for 36bit physical address space by shifting
60 * all page entry values by 4 bits.
61 * All SYSMMU controllers in the system support the address spaces of the same
62 * size, so PG_ENT_SHIFT can be initialized on first SYSMMU probe to proper
65 static short PG_ENT_SHIFT
= -1;
66 #define SYSMMU_PG_ENT_SHIFT 0
67 #define SYSMMU_V5_PG_ENT_SHIFT 4
69 #define sect_to_phys(ent) (((phys_addr_t) ent) << PG_ENT_SHIFT)
70 #define section_phys(sent) (sect_to_phys(*(sent)) & SECT_MASK)
71 #define section_offs(iova) (iova & (SECT_SIZE - 1))
72 #define lpage_phys(pent) (sect_to_phys(*(pent)) & LPAGE_MASK)
73 #define lpage_offs(iova) (iova & (LPAGE_SIZE - 1))
74 #define spage_phys(pent) (sect_to_phys(*(pent)) & SPAGE_MASK)
75 #define spage_offs(iova) (iova & (SPAGE_SIZE - 1))
77 #define NUM_LV1ENTRIES 4096
78 #define NUM_LV2ENTRIES (SECT_SIZE / SPAGE_SIZE)
80 static u32
lv1ent_offset(sysmmu_iova_t iova
)
82 return iova
>> SECT_ORDER
;
85 static u32
lv2ent_offset(sysmmu_iova_t iova
)
87 return (iova
>> SPAGE_ORDER
) & (NUM_LV2ENTRIES
- 1);
90 #define LV1TABLE_SIZE (NUM_LV1ENTRIES * sizeof(sysmmu_pte_t))
91 #define LV2TABLE_SIZE (NUM_LV2ENTRIES * sizeof(sysmmu_pte_t))
93 #define SPAGES_PER_LPAGE (LPAGE_SIZE / SPAGE_SIZE)
94 #define lv2table_base(sent) (sect_to_phys(*(sent) & 0xFFFFFFC0))
96 #define mk_lv1ent_sect(pa) ((pa >> PG_ENT_SHIFT) | 2)
97 #define mk_lv1ent_page(pa) ((pa >> PG_ENT_SHIFT) | 1)
98 #define mk_lv2ent_lpage(pa) ((pa >> PG_ENT_SHIFT) | 1)
99 #define mk_lv2ent_spage(pa) ((pa >> PG_ENT_SHIFT) | 2)
101 #define CTRL_ENABLE 0x5
102 #define CTRL_BLOCK 0x7
103 #define CTRL_DISABLE 0x0
106 #define CFG_QOS(n) ((n & 0xF) << 7)
107 #define CFG_ACGEN (1 << 24) /* System MMU 3.3 only */
108 #define CFG_SYSSEL (1 << 22) /* System MMU 3.2 only */
109 #define CFG_FLPDCACHE (1 << 20) /* System MMU 3.2+ only */
111 /* common registers */
112 #define REG_MMU_CTRL 0x000
113 #define REG_MMU_CFG 0x004
114 #define REG_MMU_STATUS 0x008
115 #define REG_MMU_VERSION 0x034
117 #define MMU_MAJ_VER(val) ((val) >> 7)
118 #define MMU_MIN_VER(val) ((val) & 0x7F)
119 #define MMU_RAW_VER(reg) (((reg) >> 21) & ((1 << 11) - 1)) /* 11 bits */
121 #define MAKE_MMU_VER(maj, min) ((((maj) & 0xF) << 7) | ((min) & 0x7F))
123 /* v1.x - v3.x registers */
124 #define REG_MMU_FLUSH 0x00C
125 #define REG_MMU_FLUSH_ENTRY 0x010
126 #define REG_PT_BASE_ADDR 0x014
127 #define REG_INT_STATUS 0x018
128 #define REG_INT_CLEAR 0x01C
130 #define REG_PAGE_FAULT_ADDR 0x024
131 #define REG_AW_FAULT_ADDR 0x028
132 #define REG_AR_FAULT_ADDR 0x02C
133 #define REG_DEFAULT_SLAVE_ADDR 0x030
136 #define REG_V5_PT_BASE_PFN 0x00C
137 #define REG_V5_MMU_FLUSH_ALL 0x010
138 #define REG_V5_MMU_FLUSH_ENTRY 0x014
139 #define REG_V5_INT_STATUS 0x060
140 #define REG_V5_INT_CLEAR 0x064
141 #define REG_V5_FAULT_AR_VA 0x070
142 #define REG_V5_FAULT_AW_VA 0x080
144 #define has_sysmmu(dev) (dev->archdata.iommu != NULL)
146 static struct device
*dma_dev
;
147 static struct kmem_cache
*lv2table_kmem_cache
;
148 static sysmmu_pte_t
*zero_lv2_table
;
149 #define ZERO_LV2LINK mk_lv1ent_page(virt_to_phys(zero_lv2_table))
151 static sysmmu_pte_t
*section_entry(sysmmu_pte_t
*pgtable
, sysmmu_iova_t iova
)
153 return pgtable
+ lv1ent_offset(iova
);
156 static sysmmu_pte_t
*page_entry(sysmmu_pte_t
*sent
, sysmmu_iova_t iova
)
158 return (sysmmu_pte_t
*)phys_to_virt(
159 lv2table_base(sent
)) + lv2ent_offset(iova
);
163 * IOMMU fault information register
165 struct sysmmu_fault_info
{
166 unsigned int bit
; /* bit number in STATUS register */
167 unsigned short addr_reg
; /* register to read VA fault address */
168 const char *name
; /* human readable fault name */
169 unsigned int type
; /* fault type for report_iommu_fault */
172 static const struct sysmmu_fault_info sysmmu_faults
[] = {
173 { 0, REG_PAGE_FAULT_ADDR
, "PAGE", IOMMU_FAULT_READ
},
174 { 1, REG_AR_FAULT_ADDR
, "AR MULTI-HIT", IOMMU_FAULT_READ
},
175 { 2, REG_AW_FAULT_ADDR
, "AW MULTI-HIT", IOMMU_FAULT_WRITE
},
176 { 3, REG_DEFAULT_SLAVE_ADDR
, "BUS ERROR", IOMMU_FAULT_READ
},
177 { 4, REG_AR_FAULT_ADDR
, "AR SECURITY PROTECTION", IOMMU_FAULT_READ
},
178 { 5, REG_AR_FAULT_ADDR
, "AR ACCESS PROTECTION", IOMMU_FAULT_READ
},
179 { 6, REG_AW_FAULT_ADDR
, "AW SECURITY PROTECTION", IOMMU_FAULT_WRITE
},
180 { 7, REG_AW_FAULT_ADDR
, "AW ACCESS PROTECTION", IOMMU_FAULT_WRITE
},
183 static const struct sysmmu_fault_info sysmmu_v5_faults
[] = {
184 { 0, REG_V5_FAULT_AR_VA
, "AR PTW", IOMMU_FAULT_READ
},
185 { 1, REG_V5_FAULT_AR_VA
, "AR PAGE", IOMMU_FAULT_READ
},
186 { 2, REG_V5_FAULT_AR_VA
, "AR MULTI-HIT", IOMMU_FAULT_READ
},
187 { 3, REG_V5_FAULT_AR_VA
, "AR ACCESS PROTECTION", IOMMU_FAULT_READ
},
188 { 4, REG_V5_FAULT_AR_VA
, "AR SECURITY PROTECTION", IOMMU_FAULT_READ
},
189 { 16, REG_V5_FAULT_AW_VA
, "AW PTW", IOMMU_FAULT_WRITE
},
190 { 17, REG_V5_FAULT_AW_VA
, "AW PAGE", IOMMU_FAULT_WRITE
},
191 { 18, REG_V5_FAULT_AW_VA
, "AW MULTI-HIT", IOMMU_FAULT_WRITE
},
192 { 19, REG_V5_FAULT_AW_VA
, "AW ACCESS PROTECTION", IOMMU_FAULT_WRITE
},
193 { 20, REG_V5_FAULT_AW_VA
, "AW SECURITY PROTECTION", IOMMU_FAULT_WRITE
},
197 * This structure is attached to dev.archdata.iommu of the master device
198 * on device add, contains a list of SYSMMU controllers defined by device tree,
199 * which are bound to given master device. It is usually referenced by 'owner'
202 struct exynos_iommu_owner
{
203 struct list_head controllers
; /* list of sysmmu_drvdata.owner_node */
204 struct iommu_domain
*domain
; /* domain this device is attached */
208 * This structure exynos specific generalization of struct iommu_domain.
209 * It contains list of SYSMMU controllers from all master devices, which has
210 * been attached to this domain and page tables of IO address space defined by
211 * it. It is usually referenced by 'domain' pointer.
213 struct exynos_iommu_domain
{
214 struct list_head clients
; /* list of sysmmu_drvdata.domain_node */
215 sysmmu_pte_t
*pgtable
; /* lv1 page table, 16KB */
216 short *lv2entcnt
; /* free lv2 entry counter for each section */
217 spinlock_t lock
; /* lock for modyfying list of clients */
218 spinlock_t pgtablelock
; /* lock for modifying page table @ pgtable */
219 struct iommu_domain domain
; /* generic domain data structure */
223 * This structure hold all data of a single SYSMMU controller, this includes
224 * hw resources like registers and clocks, pointers and list nodes to connect
225 * it to all other structures, internal state and parameters read from device
226 * tree. It is usually referenced by 'data' pointer.
228 struct sysmmu_drvdata
{
229 struct device
*sysmmu
; /* SYSMMU controller device */
230 struct device
*master
; /* master device (owner) */
231 void __iomem
*sfrbase
; /* our registers */
232 struct clk
*clk
; /* SYSMMU's clock */
233 struct clk
*aclk
; /* SYSMMU's aclk clock */
234 struct clk
*pclk
; /* SYSMMU's pclk clock */
235 struct clk
*clk_master
; /* master's device clock */
236 int activations
; /* number of calls to sysmmu_enable */
237 spinlock_t lock
; /* lock for modyfying state */
238 struct exynos_iommu_domain
*domain
; /* domain we belong to */
239 struct list_head domain_node
; /* node for domain clients list */
240 struct list_head owner_node
; /* node for owner controllers list */
241 phys_addr_t pgtable
; /* assigned page table structure */
242 unsigned int version
; /* our version */
245 static struct exynos_iommu_domain
*to_exynos_domain(struct iommu_domain
*dom
)
247 return container_of(dom
, struct exynos_iommu_domain
, domain
);
250 static bool set_sysmmu_active(struct sysmmu_drvdata
*data
)
252 /* return true if the System MMU was not active previously
253 and it needs to be initialized */
254 return ++data
->activations
== 1;
257 static bool set_sysmmu_inactive(struct sysmmu_drvdata
*data
)
259 /* return true if the System MMU is needed to be disabled */
260 BUG_ON(data
->activations
< 1);
261 return --data
->activations
== 0;
264 static bool is_sysmmu_active(struct sysmmu_drvdata
*data
)
266 return data
->activations
> 0;
269 static void sysmmu_unblock(struct sysmmu_drvdata
*data
)
271 writel(CTRL_ENABLE
, data
->sfrbase
+ REG_MMU_CTRL
);
274 static bool sysmmu_block(struct sysmmu_drvdata
*data
)
278 writel(CTRL_BLOCK
, data
->sfrbase
+ REG_MMU_CTRL
);
279 while ((i
> 0) && !(readl(data
->sfrbase
+ REG_MMU_STATUS
) & 1))
282 if (!(readl(data
->sfrbase
+ REG_MMU_STATUS
) & 1)) {
283 sysmmu_unblock(data
);
290 static void __sysmmu_tlb_invalidate(struct sysmmu_drvdata
*data
)
292 if (MMU_MAJ_VER(data
->version
) < 5)
293 writel(0x1, data
->sfrbase
+ REG_MMU_FLUSH
);
295 writel(0x1, data
->sfrbase
+ REG_V5_MMU_FLUSH_ALL
);
298 static void __sysmmu_tlb_invalidate_entry(struct sysmmu_drvdata
*data
,
299 sysmmu_iova_t iova
, unsigned int num_inv
)
303 for (i
= 0; i
< num_inv
; i
++) {
304 if (MMU_MAJ_VER(data
->version
) < 5)
305 writel((iova
& SPAGE_MASK
) | 1,
306 data
->sfrbase
+ REG_MMU_FLUSH_ENTRY
);
308 writel((iova
& SPAGE_MASK
) | 1,
309 data
->sfrbase
+ REG_V5_MMU_FLUSH_ENTRY
);
314 static void __sysmmu_set_ptbase(struct sysmmu_drvdata
*data
, phys_addr_t pgd
)
316 if (MMU_MAJ_VER(data
->version
) < 5)
317 writel(pgd
, data
->sfrbase
+ REG_PT_BASE_ADDR
);
319 writel(pgd
>> PAGE_SHIFT
,
320 data
->sfrbase
+ REG_V5_PT_BASE_PFN
);
322 __sysmmu_tlb_invalidate(data
);
325 static void __sysmmu_get_version(struct sysmmu_drvdata
*data
)
329 clk_enable(data
->clk_master
);
330 clk_enable(data
->clk
);
331 clk_enable(data
->pclk
);
332 clk_enable(data
->aclk
);
334 ver
= readl(data
->sfrbase
+ REG_MMU_VERSION
);
336 /* controllers on some SoCs don't report proper version */
337 if (ver
== 0x80000001u
)
338 data
->version
= MAKE_MMU_VER(1, 0);
340 data
->version
= MMU_RAW_VER(ver
);
342 dev_dbg(data
->sysmmu
, "hardware version: %d.%d\n",
343 MMU_MAJ_VER(data
->version
), MMU_MIN_VER(data
->version
));
345 clk_disable(data
->aclk
);
346 clk_disable(data
->pclk
);
347 clk_disable(data
->clk
);
348 clk_disable(data
->clk_master
);
351 static void show_fault_information(struct sysmmu_drvdata
*data
,
352 const struct sysmmu_fault_info
*finfo
,
353 sysmmu_iova_t fault_addr
)
357 dev_err(data
->sysmmu
, "%s FAULT occurred at %#x (page table base: %pa)\n",
358 finfo
->name
, fault_addr
, &data
->pgtable
);
359 ent
= section_entry(phys_to_virt(data
->pgtable
), fault_addr
);
360 dev_err(data
->sysmmu
, "\tLv1 entry: %#x\n", *ent
);
361 if (lv1ent_page(ent
)) {
362 ent
= page_entry(ent
, fault_addr
);
363 dev_err(data
->sysmmu
, "\t Lv2 entry: %#x\n", *ent
);
367 static irqreturn_t
exynos_sysmmu_irq(int irq
, void *dev_id
)
369 /* SYSMMU is in blocked state when interrupt occurred. */
370 struct sysmmu_drvdata
*data
= dev_id
;
371 const struct sysmmu_fault_info
*finfo
;
372 unsigned int i
, n
, itype
;
373 sysmmu_iova_t fault_addr
= -1;
374 unsigned short reg_status
, reg_clear
;
377 WARN_ON(!is_sysmmu_active(data
));
379 if (MMU_MAJ_VER(data
->version
) < 5) {
380 reg_status
= REG_INT_STATUS
;
381 reg_clear
= REG_INT_CLEAR
;
382 finfo
= sysmmu_faults
;
383 n
= ARRAY_SIZE(sysmmu_faults
);
385 reg_status
= REG_V5_INT_STATUS
;
386 reg_clear
= REG_V5_INT_CLEAR
;
387 finfo
= sysmmu_v5_faults
;
388 n
= ARRAY_SIZE(sysmmu_v5_faults
);
391 spin_lock(&data
->lock
);
393 clk_enable(data
->clk_master
);
395 itype
= __ffs(readl(data
->sfrbase
+ reg_status
));
396 for (i
= 0; i
< n
; i
++, finfo
++)
397 if (finfo
->bit
== itype
)
399 /* unknown/unsupported fault */
402 /* print debug message */
403 fault_addr
= readl(data
->sfrbase
+ finfo
->addr_reg
);
404 show_fault_information(data
, finfo
, fault_addr
);
407 ret
= report_iommu_fault(&data
->domain
->domain
,
408 data
->master
, fault_addr
, finfo
->type
);
409 /* fault is not recovered by fault handler */
412 writel(1 << itype
, data
->sfrbase
+ reg_clear
);
414 sysmmu_unblock(data
);
416 clk_disable(data
->clk_master
);
418 spin_unlock(&data
->lock
);
423 static void __sysmmu_disable_nocount(struct sysmmu_drvdata
*data
)
425 clk_enable(data
->clk_master
);
427 writel(CTRL_DISABLE
, data
->sfrbase
+ REG_MMU_CTRL
);
428 writel(0, data
->sfrbase
+ REG_MMU_CFG
);
430 clk_disable(data
->aclk
);
431 clk_disable(data
->pclk
);
432 clk_disable(data
->clk
);
433 clk_disable(data
->clk_master
);
436 static bool __sysmmu_disable(struct sysmmu_drvdata
*data
)
441 spin_lock_irqsave(&data
->lock
, flags
);
443 disabled
= set_sysmmu_inactive(data
);
449 __sysmmu_disable_nocount(data
);
451 dev_dbg(data
->sysmmu
, "Disabled\n");
453 dev_dbg(data
->sysmmu
, "%d times left to disable\n",
457 spin_unlock_irqrestore(&data
->lock
, flags
);
462 static void __sysmmu_init_config(struct sysmmu_drvdata
*data
)
466 if (data
->version
<= MAKE_MMU_VER(3, 1))
467 cfg
= CFG_LRU
| CFG_QOS(15);
468 else if (data
->version
<= MAKE_MMU_VER(3, 2))
469 cfg
= CFG_LRU
| CFG_QOS(15) | CFG_FLPDCACHE
| CFG_SYSSEL
;
471 cfg
= CFG_QOS(15) | CFG_FLPDCACHE
| CFG_ACGEN
;
473 writel(cfg
, data
->sfrbase
+ REG_MMU_CFG
);
476 static void __sysmmu_enable_nocount(struct sysmmu_drvdata
*data
)
478 clk_enable(data
->clk_master
);
479 clk_enable(data
->clk
);
480 clk_enable(data
->pclk
);
481 clk_enable(data
->aclk
);
483 writel(CTRL_BLOCK
, data
->sfrbase
+ REG_MMU_CTRL
);
485 __sysmmu_init_config(data
);
487 __sysmmu_set_ptbase(data
, data
->pgtable
);
489 writel(CTRL_ENABLE
, data
->sfrbase
+ REG_MMU_CTRL
);
491 clk_disable(data
->clk_master
);
494 static int __sysmmu_enable(struct sysmmu_drvdata
*data
, phys_addr_t pgtable
,
495 struct exynos_iommu_domain
*domain
)
500 spin_lock_irqsave(&data
->lock
, flags
);
501 if (set_sysmmu_active(data
)) {
502 data
->pgtable
= pgtable
;
503 data
->domain
= domain
;
505 __sysmmu_enable_nocount(data
);
507 dev_dbg(data
->sysmmu
, "Enabled\n");
509 ret
= (pgtable
== data
->pgtable
) ? 1 : -EBUSY
;
511 dev_dbg(data
->sysmmu
, "already enabled\n");
514 if (WARN_ON(ret
< 0))
515 set_sysmmu_inactive(data
); /* decrement count */
517 spin_unlock_irqrestore(&data
->lock
, flags
);
522 static void sysmmu_tlb_invalidate_flpdcache(struct sysmmu_drvdata
*data
,
527 clk_enable(data
->clk_master
);
529 spin_lock_irqsave(&data
->lock
, flags
);
530 if (is_sysmmu_active(data
)) {
531 if (data
->version
>= MAKE_MMU_VER(3, 3))
532 __sysmmu_tlb_invalidate_entry(data
, iova
, 1);
534 spin_unlock_irqrestore(&data
->lock
, flags
);
536 clk_disable(data
->clk_master
);
539 static void sysmmu_tlb_invalidate_entry(struct sysmmu_drvdata
*data
,
540 sysmmu_iova_t iova
, size_t size
)
544 spin_lock_irqsave(&data
->lock
, flags
);
545 if (is_sysmmu_active(data
)) {
546 unsigned int num_inv
= 1;
548 clk_enable(data
->clk_master
);
551 * L2TLB invalidation required
552 * 4KB page: 1 invalidation
553 * 64KB page: 16 invalidations
554 * 1MB page: 64 invalidations
555 * because it is set-associative TLB
556 * with 8-way and 64 sets.
557 * 1MB page can be cached in one of all sets.
558 * 64KB page can be one of 16 consecutive sets.
560 if (MMU_MAJ_VER(data
->version
) == 2)
561 num_inv
= min_t(unsigned int, size
/ PAGE_SIZE
, 64);
563 if (sysmmu_block(data
)) {
564 __sysmmu_tlb_invalidate_entry(data
, iova
, num_inv
);
565 sysmmu_unblock(data
);
567 clk_disable(data
->clk_master
);
569 dev_dbg(data
->master
,
570 "disabled. Skipping TLB invalidation @ %#x\n", iova
);
572 spin_unlock_irqrestore(&data
->lock
, flags
);
575 static int __init
exynos_sysmmu_probe(struct platform_device
*pdev
)
578 struct device
*dev
= &pdev
->dev
;
579 struct sysmmu_drvdata
*data
;
580 struct resource
*res
;
582 data
= devm_kzalloc(dev
, sizeof(*data
), GFP_KERNEL
);
586 res
= platform_get_resource(pdev
, IORESOURCE_MEM
, 0);
587 data
->sfrbase
= devm_ioremap_resource(dev
, res
);
588 if (IS_ERR(data
->sfrbase
))
589 return PTR_ERR(data
->sfrbase
);
591 irq
= platform_get_irq(pdev
, 0);
593 dev_err(dev
, "Unable to find IRQ resource\n");
597 ret
= devm_request_irq(dev
, irq
, exynos_sysmmu_irq
, 0,
598 dev_name(dev
), data
);
600 dev_err(dev
, "Unabled to register handler of irq %d\n", irq
);
604 data
->clk
= devm_clk_get(dev
, "sysmmu");
605 if (!IS_ERR(data
->clk
)) {
606 ret
= clk_prepare(data
->clk
);
608 dev_err(dev
, "Failed to prepare clk\n");
615 data
->aclk
= devm_clk_get(dev
, "aclk");
616 if (!IS_ERR(data
->aclk
)) {
617 ret
= clk_prepare(data
->aclk
);
619 dev_err(dev
, "Failed to prepare aclk\n");
626 data
->pclk
= devm_clk_get(dev
, "pclk");
627 if (!IS_ERR(data
->pclk
)) {
628 ret
= clk_prepare(data
->pclk
);
630 dev_err(dev
, "Failed to prepare pclk\n");
637 if (!data
->clk
&& (!data
->aclk
|| !data
->pclk
)) {
638 dev_err(dev
, "Failed to get device clock(s)!\n");
642 data
->clk_master
= devm_clk_get(dev
, "master");
643 if (!IS_ERR(data
->clk_master
)) {
644 ret
= clk_prepare(data
->clk_master
);
646 dev_err(dev
, "Failed to prepare master's clk\n");
650 data
->clk_master
= NULL
;
654 spin_lock_init(&data
->lock
);
656 platform_set_drvdata(pdev
, data
);
658 __sysmmu_get_version(data
);
659 if (PG_ENT_SHIFT
< 0) {
660 if (MMU_MAJ_VER(data
->version
) < 5)
661 PG_ENT_SHIFT
= SYSMMU_PG_ENT_SHIFT
;
663 PG_ENT_SHIFT
= SYSMMU_V5_PG_ENT_SHIFT
;
666 pm_runtime_enable(dev
);
671 #ifdef CONFIG_PM_SLEEP
672 static int exynos_sysmmu_suspend(struct device
*dev
)
674 struct sysmmu_drvdata
*data
= dev_get_drvdata(dev
);
676 dev_dbg(dev
, "suspend\n");
677 if (is_sysmmu_active(data
)) {
678 __sysmmu_disable_nocount(data
);
684 static int exynos_sysmmu_resume(struct device
*dev
)
686 struct sysmmu_drvdata
*data
= dev_get_drvdata(dev
);
688 dev_dbg(dev
, "resume\n");
689 if (is_sysmmu_active(data
)) {
690 pm_runtime_get_sync(dev
);
691 __sysmmu_enable_nocount(data
);
697 static const struct dev_pm_ops sysmmu_pm_ops
= {
698 SET_LATE_SYSTEM_SLEEP_PM_OPS(exynos_sysmmu_suspend
, exynos_sysmmu_resume
)
701 static const struct of_device_id sysmmu_of_match
[] __initconst
= {
702 { .compatible
= "samsung,exynos-sysmmu", },
706 static struct platform_driver exynos_sysmmu_driver __refdata
= {
707 .probe
= exynos_sysmmu_probe
,
709 .name
= "exynos-sysmmu",
710 .of_match_table
= sysmmu_of_match
,
711 .pm
= &sysmmu_pm_ops
,
715 static inline void update_pte(sysmmu_pte_t
*ent
, sysmmu_pte_t val
)
717 dma_sync_single_for_cpu(dma_dev
, virt_to_phys(ent
), sizeof(*ent
),
720 dma_sync_single_for_device(dma_dev
, virt_to_phys(ent
), sizeof(*ent
),
724 static struct iommu_domain
*exynos_iommu_domain_alloc(unsigned type
)
726 struct exynos_iommu_domain
*domain
;
730 /* Check if correct PTE offsets are initialized */
731 BUG_ON(PG_ENT_SHIFT
< 0 || !dma_dev
);
733 domain
= kzalloc(sizeof(*domain
), GFP_KERNEL
);
737 if (type
== IOMMU_DOMAIN_DMA
) {
738 if (iommu_get_dma_cookie(&domain
->domain
) != 0)
740 } else if (type
!= IOMMU_DOMAIN_UNMANAGED
) {
744 domain
->pgtable
= (sysmmu_pte_t
*)__get_free_pages(GFP_KERNEL
, 2);
745 if (!domain
->pgtable
)
748 domain
->lv2entcnt
= (short *)__get_free_pages(GFP_KERNEL
| __GFP_ZERO
, 1);
749 if (!domain
->lv2entcnt
)
752 /* Workaround for System MMU v3.3 to prevent caching 1MiB mapping */
753 for (i
= 0; i
< NUM_LV1ENTRIES
; i
+= 8) {
754 domain
->pgtable
[i
+ 0] = ZERO_LV2LINK
;
755 domain
->pgtable
[i
+ 1] = ZERO_LV2LINK
;
756 domain
->pgtable
[i
+ 2] = ZERO_LV2LINK
;
757 domain
->pgtable
[i
+ 3] = ZERO_LV2LINK
;
758 domain
->pgtable
[i
+ 4] = ZERO_LV2LINK
;
759 domain
->pgtable
[i
+ 5] = ZERO_LV2LINK
;
760 domain
->pgtable
[i
+ 6] = ZERO_LV2LINK
;
761 domain
->pgtable
[i
+ 7] = ZERO_LV2LINK
;
764 handle
= dma_map_single(dma_dev
, domain
->pgtable
, LV1TABLE_SIZE
,
766 /* For mapping page table entries we rely on dma == phys */
767 BUG_ON(handle
!= virt_to_phys(domain
->pgtable
));
769 spin_lock_init(&domain
->lock
);
770 spin_lock_init(&domain
->pgtablelock
);
771 INIT_LIST_HEAD(&domain
->clients
);
773 domain
->domain
.geometry
.aperture_start
= 0;
774 domain
->domain
.geometry
.aperture_end
= ~0UL;
775 domain
->domain
.geometry
.force_aperture
= true;
777 return &domain
->domain
;
780 free_pages((unsigned long)domain
->pgtable
, 2);
782 if (type
== IOMMU_DOMAIN_DMA
)
783 iommu_put_dma_cookie(&domain
->domain
);
789 static void exynos_iommu_domain_free(struct iommu_domain
*iommu_domain
)
791 struct exynos_iommu_domain
*domain
= to_exynos_domain(iommu_domain
);
792 struct sysmmu_drvdata
*data
, *next
;
796 WARN_ON(!list_empty(&domain
->clients
));
798 spin_lock_irqsave(&domain
->lock
, flags
);
800 list_for_each_entry_safe(data
, next
, &domain
->clients
, domain_node
) {
801 if (__sysmmu_disable(data
))
803 list_del_init(&data
->domain_node
);
806 spin_unlock_irqrestore(&domain
->lock
, flags
);
808 if (iommu_domain
->type
== IOMMU_DOMAIN_DMA
)
809 iommu_put_dma_cookie(iommu_domain
);
811 dma_unmap_single(dma_dev
, virt_to_phys(domain
->pgtable
), LV1TABLE_SIZE
,
814 for (i
= 0; i
< NUM_LV1ENTRIES
; i
++)
815 if (lv1ent_page(domain
->pgtable
+ i
)) {
816 phys_addr_t base
= lv2table_base(domain
->pgtable
+ i
);
818 dma_unmap_single(dma_dev
, base
, LV2TABLE_SIZE
,
820 kmem_cache_free(lv2table_kmem_cache
,
824 free_pages((unsigned long)domain
->pgtable
, 2);
825 free_pages((unsigned long)domain
->lv2entcnt
, 1);
829 static void exynos_iommu_detach_device(struct iommu_domain
*iommu_domain
,
832 struct exynos_iommu_owner
*owner
= dev
->archdata
.iommu
;
833 struct exynos_iommu_domain
*domain
= to_exynos_domain(iommu_domain
);
834 phys_addr_t pagetable
= virt_to_phys(domain
->pgtable
);
835 struct sysmmu_drvdata
*data
, *next
;
839 if (!has_sysmmu(dev
) || owner
->domain
!= iommu_domain
)
842 spin_lock_irqsave(&domain
->lock
, flags
);
843 list_for_each_entry_safe(data
, next
, &domain
->clients
, domain_node
) {
844 if (data
->master
== dev
) {
845 if (__sysmmu_disable(data
)) {
847 list_del_init(&data
->domain_node
);
849 pm_runtime_put(data
->sysmmu
);
853 spin_unlock_irqrestore(&domain
->lock
, flags
);
855 owner
->domain
= NULL
;
858 dev_dbg(dev
, "%s: Detached IOMMU with pgtable %pa\n",
859 __func__
, &pagetable
);
861 dev_err(dev
, "%s: No IOMMU is attached\n", __func__
);
864 static int exynos_iommu_attach_device(struct iommu_domain
*iommu_domain
,
867 struct exynos_iommu_owner
*owner
= dev
->archdata
.iommu
;
868 struct exynos_iommu_domain
*domain
= to_exynos_domain(iommu_domain
);
869 struct sysmmu_drvdata
*data
;
870 phys_addr_t pagetable
= virt_to_phys(domain
->pgtable
);
874 if (!has_sysmmu(dev
))
878 exynos_iommu_detach_device(owner
->domain
, dev
);
880 list_for_each_entry(data
, &owner
->controllers
, owner_node
) {
881 pm_runtime_get_sync(data
->sysmmu
);
882 ret
= __sysmmu_enable(data
, pagetable
, domain
);
886 spin_lock_irqsave(&domain
->lock
, flags
);
887 list_add_tail(&data
->domain_node
, &domain
->clients
);
888 spin_unlock_irqrestore(&domain
->lock
, flags
);
893 dev_err(dev
, "%s: Failed to attach IOMMU with pgtable %pa\n",
894 __func__
, &pagetable
);
898 owner
->domain
= iommu_domain
;
899 dev_dbg(dev
, "%s: Attached IOMMU with pgtable %pa %s\n",
900 __func__
, &pagetable
, (ret
== 0) ? "" : ", again");
905 static sysmmu_pte_t
*alloc_lv2entry(struct exynos_iommu_domain
*domain
,
906 sysmmu_pte_t
*sent
, sysmmu_iova_t iova
, short *pgcounter
)
908 if (lv1ent_section(sent
)) {
909 WARN(1, "Trying mapping on %#08x mapped with 1MiB page", iova
);
910 return ERR_PTR(-EADDRINUSE
);
913 if (lv1ent_fault(sent
)) {
915 bool need_flush_flpd_cache
= lv1ent_zero(sent
);
917 pent
= kmem_cache_zalloc(lv2table_kmem_cache
, GFP_ATOMIC
);
918 BUG_ON((uintptr_t)pent
& (LV2TABLE_SIZE
- 1));
920 return ERR_PTR(-ENOMEM
);
922 update_pte(sent
, mk_lv1ent_page(virt_to_phys(pent
)));
923 kmemleak_ignore(pent
);
924 *pgcounter
= NUM_LV2ENTRIES
;
925 dma_map_single(dma_dev
, pent
, LV2TABLE_SIZE
, DMA_TO_DEVICE
);
928 * If pre-fetched SLPD is a faulty SLPD in zero_l2_table,
929 * FLPD cache may cache the address of zero_l2_table. This
930 * function replaces the zero_l2_table with new L2 page table
931 * to write valid mappings.
932 * Accessing the valid area may cause page fault since FLPD
933 * cache may still cache zero_l2_table for the valid area
934 * instead of new L2 page table that has the mapping
935 * information of the valid area.
936 * Thus any replacement of zero_l2_table with other valid L2
937 * page table must involve FLPD cache invalidation for System
939 * FLPD cache invalidation is performed with TLB invalidation
940 * by VPN without blocking. It is safe to invalidate TLB without
941 * blocking because the target address of TLB invalidation is
942 * not currently mapped.
944 if (need_flush_flpd_cache
) {
945 struct sysmmu_drvdata
*data
;
947 spin_lock(&domain
->lock
);
948 list_for_each_entry(data
, &domain
->clients
, domain_node
)
949 sysmmu_tlb_invalidate_flpdcache(data
, iova
);
950 spin_unlock(&domain
->lock
);
954 return page_entry(sent
, iova
);
957 static int lv1set_section(struct exynos_iommu_domain
*domain
,
958 sysmmu_pte_t
*sent
, sysmmu_iova_t iova
,
959 phys_addr_t paddr
, short *pgcnt
)
961 if (lv1ent_section(sent
)) {
962 WARN(1, "Trying mapping on 1MiB@%#08x that is mapped",
967 if (lv1ent_page(sent
)) {
968 if (*pgcnt
!= NUM_LV2ENTRIES
) {
969 WARN(1, "Trying mapping on 1MiB@%#08x that is mapped",
974 kmem_cache_free(lv2table_kmem_cache
, page_entry(sent
, 0));
978 update_pte(sent
, mk_lv1ent_sect(paddr
));
980 spin_lock(&domain
->lock
);
981 if (lv1ent_page_zero(sent
)) {
982 struct sysmmu_drvdata
*data
;
984 * Flushing FLPD cache in System MMU v3.3 that may cache a FLPD
985 * entry by speculative prefetch of SLPD which has no mapping.
987 list_for_each_entry(data
, &domain
->clients
, domain_node
)
988 sysmmu_tlb_invalidate_flpdcache(data
, iova
);
990 spin_unlock(&domain
->lock
);
995 static int lv2set_page(sysmmu_pte_t
*pent
, phys_addr_t paddr
, size_t size
,
998 if (size
== SPAGE_SIZE
) {
999 if (WARN_ON(!lv2ent_fault(pent
)))
1002 update_pte(pent
, mk_lv2ent_spage(paddr
));
1004 } else { /* size == LPAGE_SIZE */
1006 dma_addr_t pent_base
= virt_to_phys(pent
);
1008 dma_sync_single_for_cpu(dma_dev
, pent_base
,
1009 sizeof(*pent
) * SPAGES_PER_LPAGE
,
1011 for (i
= 0; i
< SPAGES_PER_LPAGE
; i
++, pent
++) {
1012 if (WARN_ON(!lv2ent_fault(pent
))) {
1014 memset(pent
- i
, 0, sizeof(*pent
) * i
);
1018 *pent
= mk_lv2ent_lpage(paddr
);
1020 dma_sync_single_for_device(dma_dev
, pent_base
,
1021 sizeof(*pent
) * SPAGES_PER_LPAGE
,
1023 *pgcnt
-= SPAGES_PER_LPAGE
;
1030 * *CAUTION* to the I/O virtual memory managers that support exynos-iommu:
1032 * System MMU v3.x has advanced logic to improve address translation
1033 * performance with caching more page table entries by a page table walk.
1034 * However, the logic has a bug that while caching faulty page table entries,
1035 * System MMU reports page fault if the cached fault entry is hit even though
1036 * the fault entry is updated to a valid entry after the entry is cached.
1037 * To prevent caching faulty page table entries which may be updated to valid
1038 * entries later, the virtual memory manager should care about the workaround
1039 * for the problem. The following describes the workaround.
1041 * Any two consecutive I/O virtual address regions must have a hole of 128KiB
1042 * at maximum to prevent misbehavior of System MMU 3.x (workaround for h/w bug).
1044 * Precisely, any start address of I/O virtual region must be aligned with
1045 * the following sizes for System MMU v3.1 and v3.2.
1046 * System MMU v3.1: 128KiB
1047 * System MMU v3.2: 256KiB
1049 * Because System MMU v3.3 caches page table entries more aggressively, it needs
1051 * - Any two consecutive I/O virtual regions must have a hole of size larger
1052 * than or equal to 128KiB.
1053 * - Start address of an I/O virtual region must be aligned by 128KiB.
1055 static int exynos_iommu_map(struct iommu_domain
*iommu_domain
,
1056 unsigned long l_iova
, phys_addr_t paddr
, size_t size
,
1059 struct exynos_iommu_domain
*domain
= to_exynos_domain(iommu_domain
);
1060 sysmmu_pte_t
*entry
;
1061 sysmmu_iova_t iova
= (sysmmu_iova_t
)l_iova
;
1062 unsigned long flags
;
1065 BUG_ON(domain
->pgtable
== NULL
);
1067 spin_lock_irqsave(&domain
->pgtablelock
, flags
);
1069 entry
= section_entry(domain
->pgtable
, iova
);
1071 if (size
== SECT_SIZE
) {
1072 ret
= lv1set_section(domain
, entry
, iova
, paddr
,
1073 &domain
->lv2entcnt
[lv1ent_offset(iova
)]);
1077 pent
= alloc_lv2entry(domain
, entry
, iova
,
1078 &domain
->lv2entcnt
[lv1ent_offset(iova
)]);
1081 ret
= PTR_ERR(pent
);
1083 ret
= lv2set_page(pent
, paddr
, size
,
1084 &domain
->lv2entcnt
[lv1ent_offset(iova
)]);
1088 pr_err("%s: Failed(%d) to map %#zx bytes @ %#x\n",
1089 __func__
, ret
, size
, iova
);
1091 spin_unlock_irqrestore(&domain
->pgtablelock
, flags
);
1096 static void exynos_iommu_tlb_invalidate_entry(struct exynos_iommu_domain
*domain
,
1097 sysmmu_iova_t iova
, size_t size
)
1099 struct sysmmu_drvdata
*data
;
1100 unsigned long flags
;
1102 spin_lock_irqsave(&domain
->lock
, flags
);
1104 list_for_each_entry(data
, &domain
->clients
, domain_node
)
1105 sysmmu_tlb_invalidate_entry(data
, iova
, size
);
1107 spin_unlock_irqrestore(&domain
->lock
, flags
);
1110 static size_t exynos_iommu_unmap(struct iommu_domain
*iommu_domain
,
1111 unsigned long l_iova
, size_t size
)
1113 struct exynos_iommu_domain
*domain
= to_exynos_domain(iommu_domain
);
1114 sysmmu_iova_t iova
= (sysmmu_iova_t
)l_iova
;
1117 unsigned long flags
;
1119 BUG_ON(domain
->pgtable
== NULL
);
1121 spin_lock_irqsave(&domain
->pgtablelock
, flags
);
1123 ent
= section_entry(domain
->pgtable
, iova
);
1125 if (lv1ent_section(ent
)) {
1126 if (WARN_ON(size
< SECT_SIZE
)) {
1127 err_pgsize
= SECT_SIZE
;
1131 /* workaround for h/w bug in System MMU v3.3 */
1132 update_pte(ent
, ZERO_LV2LINK
);
1137 if (unlikely(lv1ent_fault(ent
))) {
1138 if (size
> SECT_SIZE
)
1143 /* lv1ent_page(sent) == true here */
1145 ent
= page_entry(ent
, iova
);
1147 if (unlikely(lv2ent_fault(ent
))) {
1152 if (lv2ent_small(ent
)) {
1155 domain
->lv2entcnt
[lv1ent_offset(iova
)] += 1;
1159 /* lv1ent_large(ent) == true here */
1160 if (WARN_ON(size
< LPAGE_SIZE
)) {
1161 err_pgsize
= LPAGE_SIZE
;
1165 dma_sync_single_for_cpu(dma_dev
, virt_to_phys(ent
),
1166 sizeof(*ent
) * SPAGES_PER_LPAGE
,
1168 memset(ent
, 0, sizeof(*ent
) * SPAGES_PER_LPAGE
);
1169 dma_sync_single_for_device(dma_dev
, virt_to_phys(ent
),
1170 sizeof(*ent
) * SPAGES_PER_LPAGE
,
1173 domain
->lv2entcnt
[lv1ent_offset(iova
)] += SPAGES_PER_LPAGE
;
1175 spin_unlock_irqrestore(&domain
->pgtablelock
, flags
);
1177 exynos_iommu_tlb_invalidate_entry(domain
, iova
, size
);
1181 spin_unlock_irqrestore(&domain
->pgtablelock
, flags
);
1183 pr_err("%s: Failed: size(%#zx) @ %#x is smaller than page size %#zx\n",
1184 __func__
, size
, iova
, err_pgsize
);
1189 static phys_addr_t
exynos_iommu_iova_to_phys(struct iommu_domain
*iommu_domain
,
1192 struct exynos_iommu_domain
*domain
= to_exynos_domain(iommu_domain
);
1193 sysmmu_pte_t
*entry
;
1194 unsigned long flags
;
1195 phys_addr_t phys
= 0;
1197 spin_lock_irqsave(&domain
->pgtablelock
, flags
);
1199 entry
= section_entry(domain
->pgtable
, iova
);
1201 if (lv1ent_section(entry
)) {
1202 phys
= section_phys(entry
) + section_offs(iova
);
1203 } else if (lv1ent_page(entry
)) {
1204 entry
= page_entry(entry
, iova
);
1206 if (lv2ent_large(entry
))
1207 phys
= lpage_phys(entry
) + lpage_offs(iova
);
1208 else if (lv2ent_small(entry
))
1209 phys
= spage_phys(entry
) + spage_offs(iova
);
1212 spin_unlock_irqrestore(&domain
->pgtablelock
, flags
);
1217 static struct iommu_group
*get_device_iommu_group(struct device
*dev
)
1219 struct iommu_group
*group
;
1221 group
= iommu_group_get(dev
);
1223 group
= iommu_group_alloc();
1228 static int exynos_iommu_add_device(struct device
*dev
)
1230 struct iommu_group
*group
;
1232 if (!has_sysmmu(dev
))
1235 group
= iommu_group_get_for_dev(dev
);
1238 return PTR_ERR(group
);
1240 iommu_group_put(group
);
1245 static void exynos_iommu_remove_device(struct device
*dev
)
1247 if (!has_sysmmu(dev
))
1250 iommu_group_remove_device(dev
);
1253 static int exynos_iommu_of_xlate(struct device
*dev
,
1254 struct of_phandle_args
*spec
)
1256 struct exynos_iommu_owner
*owner
= dev
->archdata
.iommu
;
1257 struct platform_device
*sysmmu
= of_find_device_by_node(spec
->np
);
1258 struct sysmmu_drvdata
*data
;
1263 data
= platform_get_drvdata(sysmmu
);
1268 owner
= kzalloc(sizeof(*owner
), GFP_KERNEL
);
1272 INIT_LIST_HEAD(&owner
->controllers
);
1273 dev
->archdata
.iommu
= owner
;
1276 list_add_tail(&data
->owner_node
, &owner
->controllers
);
1280 static struct iommu_ops exynos_iommu_ops
= {
1281 .domain_alloc
= exynos_iommu_domain_alloc
,
1282 .domain_free
= exynos_iommu_domain_free
,
1283 .attach_dev
= exynos_iommu_attach_device
,
1284 .detach_dev
= exynos_iommu_detach_device
,
1285 .map
= exynos_iommu_map
,
1286 .unmap
= exynos_iommu_unmap
,
1287 .map_sg
= default_iommu_map_sg
,
1288 .iova_to_phys
= exynos_iommu_iova_to_phys
,
1289 .device_group
= get_device_iommu_group
,
1290 .add_device
= exynos_iommu_add_device
,
1291 .remove_device
= exynos_iommu_remove_device
,
1292 .pgsize_bitmap
= SECT_SIZE
| LPAGE_SIZE
| SPAGE_SIZE
,
1293 .of_xlate
= exynos_iommu_of_xlate
,
1296 static bool init_done
;
1298 static int __init
exynos_iommu_init(void)
1302 lv2table_kmem_cache
= kmem_cache_create("exynos-iommu-lv2table",
1303 LV2TABLE_SIZE
, LV2TABLE_SIZE
, 0, NULL
);
1304 if (!lv2table_kmem_cache
) {
1305 pr_err("%s: Failed to create kmem cache\n", __func__
);
1309 ret
= platform_driver_register(&exynos_sysmmu_driver
);
1311 pr_err("%s: Failed to register driver\n", __func__
);
1312 goto err_reg_driver
;
1315 zero_lv2_table
= kmem_cache_zalloc(lv2table_kmem_cache
, GFP_KERNEL
);
1316 if (zero_lv2_table
== NULL
) {
1317 pr_err("%s: Failed to allocate zero level2 page table\n",
1323 ret
= bus_set_iommu(&platform_bus_type
, &exynos_iommu_ops
);
1325 pr_err("%s: Failed to register exynos-iommu driver.\n",
1334 kmem_cache_free(lv2table_kmem_cache
, zero_lv2_table
);
1336 platform_driver_unregister(&exynos_sysmmu_driver
);
1338 kmem_cache_destroy(lv2table_kmem_cache
);
1342 static int __init
exynos_iommu_of_setup(struct device_node
*np
)
1344 struct platform_device
*pdev
;
1347 exynos_iommu_init();
1349 pdev
= of_platform_device_create(np
, NULL
, platform_bus_type
.dev_root
);
1351 return PTR_ERR(pdev
);
1354 * use the first registered sysmmu device for performing
1355 * dma mapping operations on iommu page tables (cpu cache flush)
1358 dma_dev
= &pdev
->dev
;
1360 of_iommu_set_ops(np
, &exynos_iommu_ops
);
1364 IOMMU_OF_DECLARE(exynos_iommu_of
, "samsung,exynos-sysmmu",
1365 exynos_iommu_of_setup
);