1 // SPDX-License-Identifier: GPL-2.0-only
3 * Tegra host1x Command DMA
5 * Copyright (c) 2010-2013, NVIDIA Corporation.
9 #include <asm/cacheflush.h>
10 #include <linux/device.h>
11 #include <linux/dma-mapping.h>
12 #include <linux/host1x.h>
13 #include <linux/interrupt.h>
14 #include <linux/kernel.h>
15 #include <linux/kfifo.h>
16 #include <linux/slab.h>
17 #include <trace/events/host1x.h>
28 * The push buffer is a circular array of words to be fetched by command DMA.
29 * Note that it works slightly differently to the sync queue; fence == pos
30 * means that the push buffer is full, not empty.
34 * Typically the commands written into the push buffer are a pair of words. We
35 * use slots to represent each of these pairs and to simplify things. Note the
36 * strange number of slots allocated here. 512 slots will fit exactly within a
37 * single memory page. We also need one additional word at the end of the push
38 * buffer for the RESTART opcode that will instruct the CDMA to jump back to
39 * the beginning of the push buffer. With 512 slots, this means that we'll use
40 * 2 memory pages and waste 4092 bytes of the second page that will never be
43 #define HOST1X_PUSHBUFFER_SLOTS 511
46 * Clean up push buffer resources
48 static void host1x_pushbuffer_destroy(struct push_buffer
*pb
)
50 struct host1x_cdma
*cdma
= pb_to_cdma(pb
);
51 struct host1x
*host1x
= cdma_to_host1x(cdma
);
57 iommu_unmap(host1x
->domain
, pb
->dma
, pb
->alloc_size
);
58 free_iova(&host1x
->iova
, iova_pfn(&host1x
->iova
, pb
->dma
));
61 dma_free_wc(host1x
->dev
, pb
->alloc_size
, pb
->mapped
, pb
->phys
);
68 * Init push buffer resources
70 static int host1x_pushbuffer_init(struct push_buffer
*pb
)
72 struct host1x_cdma
*cdma
= pb_to_cdma(pb
);
73 struct host1x
*host1x
= cdma_to_host1x(cdma
);
80 pb
->size
= HOST1X_PUSHBUFFER_SLOTS
* 8;
84 /* initialize buffer pointers */
85 pb
->fence
= pb
->size
- 8;
91 size
= iova_align(&host1x
->iova
, size
);
93 pb
->mapped
= dma_alloc_wc(host1x
->dev
, size
, &pb
->phys
,
98 shift
= iova_shift(&host1x
->iova
);
99 alloc
= alloc_iova(&host1x
->iova
, size
>> shift
,
100 host1x
->iova_end
>> shift
, true);
106 pb
->dma
= iova_dma_addr(&host1x
->iova
, alloc
);
107 err
= iommu_map(host1x
->domain
, pb
->dma
, pb
->phys
, size
,
108 IOMMU_READ
, GFP_KERNEL
);
110 goto iommu_free_iova
;
112 pb
->mapped
= dma_alloc_wc(host1x
->dev
, size
, &pb
->phys
,
120 pb
->alloc_size
= size
;
122 host1x_hw_pushbuffer_init(host1x
, pb
);
127 __free_iova(&host1x
->iova
, alloc
);
129 dma_free_wc(host1x
->dev
, size
, pb
->mapped
, pb
->phys
);
135 * Push two words to the push buffer
136 * Caller must ensure push buffer is not full
138 static void host1x_pushbuffer_push(struct push_buffer
*pb
, u32 op1
, u32 op2
)
140 u32
*p
= (u32
*)((void *)pb
->mapped
+ pb
->pos
);
142 WARN_ON(pb
->pos
== pb
->fence
);
147 if (pb
->pos
>= pb
->size
)
152 * Pop a number of two word slots from the push buffer
153 * Caller must ensure push buffer is not empty
155 static void host1x_pushbuffer_pop(struct push_buffer
*pb
, unsigned int slots
)
157 /* Advance the next write position */
158 pb
->fence
+= slots
* 8;
160 if (pb
->fence
>= pb
->size
)
161 pb
->fence
-= pb
->size
;
165 * Return the number of two word slots free in the push buffer
167 static u32
host1x_pushbuffer_space(struct push_buffer
*pb
)
169 unsigned int fence
= pb
->fence
;
171 if (pb
->fence
< pb
->pos
)
174 return (fence
- pb
->pos
) / 8;
178 * Sleep (if necessary) until the requested event happens
179 * - CDMA_EVENT_SYNC_QUEUE_EMPTY : sync queue is completely empty.
181 * - CDMA_EVENT_PUSH_BUFFER_SPACE : there is space in the push buffer
182 * - Return the amount of space (> 0)
183 * Must be called with the cdma lock held.
185 unsigned int host1x_cdma_wait_locked(struct host1x_cdma
*cdma
,
186 enum cdma_event event
)
189 struct push_buffer
*pb
= &cdma
->push_buffer
;
193 case CDMA_EVENT_SYNC_QUEUE_EMPTY
:
194 space
= list_empty(&cdma
->sync_queue
) ? 1 : 0;
197 case CDMA_EVENT_PUSH_BUFFER_SPACE
:
198 space
= host1x_pushbuffer_space(pb
);
209 trace_host1x_wait_cdma(dev_name(cdma_to_channel(cdma
)->dev
),
212 /* If somebody has managed to already start waiting, yield */
213 if (cdma
->event
!= CDMA_EVENT_NONE
) {
214 mutex_unlock(&cdma
->lock
);
216 mutex_lock(&cdma
->lock
);
222 mutex_unlock(&cdma
->lock
);
223 wait_for_completion(&cdma
->complete
);
224 mutex_lock(&cdma
->lock
);
231 * Sleep (if necessary) until the push buffer has enough free space.
233 * Must be called with the cdma lock held.
235 static int host1x_cdma_wait_pushbuffer_space(struct host1x
*host1x
,
236 struct host1x_cdma
*cdma
,
240 struct push_buffer
*pb
= &cdma
->push_buffer
;
243 space
= host1x_pushbuffer_space(pb
);
247 trace_host1x_wait_cdma(dev_name(cdma_to_channel(cdma
)->dev
),
248 CDMA_EVENT_PUSH_BUFFER_SPACE
);
250 host1x_hw_cdma_flush(host1x
, cdma
);
252 /* If somebody has managed to already start waiting, yield */
253 if (cdma
->event
!= CDMA_EVENT_NONE
) {
254 mutex_unlock(&cdma
->lock
);
256 mutex_lock(&cdma
->lock
);
260 cdma
->event
= CDMA_EVENT_PUSH_BUFFER_SPACE
;
262 mutex_unlock(&cdma
->lock
);
263 wait_for_completion(&cdma
->complete
);
264 mutex_lock(&cdma
->lock
);
270 * Start timer that tracks the time spent by the job.
271 * Must be called with the cdma lock held.
273 static void cdma_start_timer_locked(struct host1x_cdma
*cdma
,
274 struct host1x_job
*job
)
276 if (cdma
->timeout
.client
) {
277 /* timer already started */
281 cdma
->timeout
.client
= job
->client
;
282 cdma
->timeout
.syncpt
= job
->syncpt
;
283 cdma
->timeout
.syncpt_val
= job
->syncpt_end
;
284 cdma
->timeout
.start_ktime
= ktime_get();
286 schedule_delayed_work(&cdma
->timeout
.wq
,
287 msecs_to_jiffies(job
->timeout
));
291 * Stop timer when a buffer submission completes.
292 * Must be called with the cdma lock held.
294 static void stop_cdma_timer_locked(struct host1x_cdma
*cdma
)
296 cancel_delayed_work(&cdma
->timeout
.wq
);
297 cdma
->timeout
.client
= NULL
;
301 * For all sync queue entries that have already finished according to the
302 * current sync point registers:
303 * - unpin & unref their mems
304 * - pop their push buffer slots
305 * - remove them from the sync queue
306 * This is normally called from the host code's worker thread, but can be
307 * called manually if necessary.
308 * Must be called with the cdma lock held.
310 static void update_cdma_locked(struct host1x_cdma
*cdma
)
313 struct host1x_job
*job
, *n
;
316 * Walk the sync queue, reading the sync point registers as necessary,
317 * to consume as many sync queue entries as possible without blocking
319 list_for_each_entry_safe(job
, n
, &cdma
->sync_queue
, list
) {
320 struct host1x_syncpt
*sp
= job
->syncpt
;
322 /* Check whether this syncpt has completed, and bail if not */
323 if (!host1x_syncpt_is_expired(sp
, job
->syncpt_end
) &&
325 /* Start timer on next pending syncpt */
327 cdma_start_timer_locked(cdma
, job
);
332 /* Cancel timeout, when a buffer completes */
333 if (cdma
->timeout
.client
)
334 stop_cdma_timer_locked(cdma
);
336 /* Unpin the memory */
337 host1x_job_unpin(job
);
339 /* Pop push buffer slots */
340 if (job
->num_slots
) {
341 struct push_buffer
*pb
= &cdma
->push_buffer
;
343 host1x_pushbuffer_pop(pb
, job
->num_slots
);
345 if (cdma
->event
== CDMA_EVENT_PUSH_BUFFER_SPACE
)
349 list_del(&job
->list
);
353 if (cdma
->event
== CDMA_EVENT_SYNC_QUEUE_EMPTY
&&
354 list_empty(&cdma
->sync_queue
))
358 cdma
->event
= CDMA_EVENT_NONE
;
359 complete(&cdma
->complete
);
363 void host1x_cdma_update_sync_queue(struct host1x_cdma
*cdma
,
366 struct host1x
*host1x
= cdma_to_host1x(cdma
);
367 u32 restart_addr
, syncpt_incrs
, syncpt_val
;
368 struct host1x_job
*job
, *next_job
= NULL
;
370 syncpt_val
= host1x_syncpt_load(cdma
->timeout
.syncpt
);
372 dev_dbg(dev
, "%s: starting cleanup (thresh %d)\n",
373 __func__
, syncpt_val
);
376 * Move the sync_queue read pointer to the first entry that hasn't
377 * completed based on the current HW syncpt value. It's likely there
378 * won't be any (i.e. we're still at the head), but covers the case
379 * where a syncpt incr happens just prior/during the teardown.
382 dev_dbg(dev
, "%s: skip completed buffers still in sync_queue\n",
385 list_for_each_entry(job
, &cdma
->sync_queue
, list
) {
386 if (syncpt_val
< job
->syncpt_end
) {
388 if (!list_is_last(&job
->list
, &cdma
->sync_queue
))
389 next_job
= list_next_entry(job
, list
);
394 host1x_job_dump(dev
, job
);
397 /* all jobs have been completed */
403 * Increment with CPU the remaining syncpts of a partially executed job.
405 * CDMA will continue execution starting with the next job or will get
409 restart_addr
= next_job
->first_get
;
411 restart_addr
= cdma
->last_pos
;
416 /* do CPU increments for the remaining syncpts */
417 if (job
->syncpt_recovery
) {
418 dev_dbg(dev
, "%s: perform CPU incr on pending buffers\n",
421 /* won't need a timeout when replayed */
424 syncpt_incrs
= job
->syncpt_end
- syncpt_val
;
425 dev_dbg(dev
, "%s: CPU incr (%d)\n", __func__
, syncpt_incrs
);
427 host1x_job_dump(dev
, job
);
429 /* safe to use CPU to incr syncpts */
430 host1x_hw_cdma_timeout_cpu_incr(host1x
, cdma
, job
->first_get
,
431 syncpt_incrs
, job
->syncpt_end
,
434 dev_dbg(dev
, "%s: finished sync_queue modification\n",
437 struct host1x_job
*failed_job
= job
;
439 host1x_job_dump(dev
, job
);
441 host1x_syncpt_set_locked(job
->syncpt
);
442 failed_job
->cancelled
= true;
444 list_for_each_entry_continue(job
, &cdma
->sync_queue
, list
) {
447 if (job
->syncpt
!= failed_job
->syncpt
)
450 for (i
= 0; i
< job
->num_slots
; i
++) {
451 unsigned int slot
= (job
->first_get
/8 + i
) %
452 HOST1X_PUSHBUFFER_SLOTS
;
453 u32
*mapped
= cdma
->push_buffer
.mapped
;
456 * Overwrite opcodes with 0 word writes
457 * to offset 0xbad. This does nothing but
458 * has a easily detected signature in debug
461 * On systems with MLOCK enforcement enabled,
462 * the above 0 word writes would fall foul of
463 * the enforcement. As such, in the first slot
464 * put a RESTART_W opcode to the beginning
465 * of the next job. We don't use this for older
466 * chips since those only support the RESTART
467 * opcode with inconvenient alignment requirements.
469 if (i
== 0 && host1x
->info
->has_wide_gather
) {
470 unsigned int next_job
= (job
->first_get
/8 + job
->num_slots
)
471 % HOST1X_PUSHBUFFER_SLOTS
;
472 mapped
[2*slot
+0] = (0xd << 28) | (next_job
* 2);
473 mapped
[2*slot
+1] = 0x0;
475 mapped
[2*slot
+0] = 0x1bad0000;
476 mapped
[2*slot
+1] = 0x1bad0000;
480 job
->cancelled
= true;
485 update_cdma_locked(cdma
);
489 /* roll back DMAGET and start up channel again */
490 host1x_hw_cdma_resume(host1x
, cdma
, restart_addr
);
493 static void cdma_update_work(struct work_struct
*work
)
495 struct host1x_cdma
*cdma
= container_of(work
, struct host1x_cdma
, update_work
);
497 mutex_lock(&cdma
->lock
);
498 update_cdma_locked(cdma
);
499 mutex_unlock(&cdma
->lock
);
505 int host1x_cdma_init(struct host1x_cdma
*cdma
)
509 mutex_init(&cdma
->lock
);
510 init_completion(&cdma
->complete
);
511 INIT_WORK(&cdma
->update_work
, cdma_update_work
);
513 INIT_LIST_HEAD(&cdma
->sync_queue
);
515 cdma
->event
= CDMA_EVENT_NONE
;
516 cdma
->running
= false;
517 cdma
->torndown
= false;
519 err
= host1x_pushbuffer_init(&cdma
->push_buffer
);
529 int host1x_cdma_deinit(struct host1x_cdma
*cdma
)
531 struct push_buffer
*pb
= &cdma
->push_buffer
;
532 struct host1x
*host1x
= cdma_to_host1x(cdma
);
535 pr_warn("%s: CDMA still running\n", __func__
);
539 host1x_pushbuffer_destroy(pb
);
540 host1x_hw_cdma_timeout_destroy(host1x
, cdma
);
546 * Begin a cdma submit
548 int host1x_cdma_begin(struct host1x_cdma
*cdma
, struct host1x_job
*job
)
550 struct host1x
*host1x
= cdma_to_host1x(cdma
);
552 mutex_lock(&cdma
->lock
);
555 * Check if syncpoint was locked due to previous job timeout.
556 * This needs to be done within the cdma lock to avoid a race
557 * with the timeout handler.
559 if (job
->syncpt
->locked
) {
560 mutex_unlock(&cdma
->lock
);
565 /* init state on first submit with timeout value */
566 if (!cdma
->timeout
.initialized
) {
569 err
= host1x_hw_cdma_timeout_init(host1x
, cdma
);
571 mutex_unlock(&cdma
->lock
);
578 host1x_hw_cdma_start(host1x
, cdma
);
580 cdma
->slots_free
= 0;
581 cdma
->slots_used
= 0;
582 cdma
->first_get
= cdma
->push_buffer
.pos
;
584 trace_host1x_cdma_begin(dev_name(job
->channel
->dev
));
589 * Push two words into a push buffer slot
590 * Blocks as necessary if the push buffer is full.
592 void host1x_cdma_push(struct host1x_cdma
*cdma
, u32 op1
, u32 op2
)
594 struct host1x
*host1x
= cdma_to_host1x(cdma
);
595 struct push_buffer
*pb
= &cdma
->push_buffer
;
596 u32 slots_free
= cdma
->slots_free
;
598 if (host1x_debug_trace_cmdbuf
)
599 trace_host1x_cdma_push(dev_name(cdma_to_channel(cdma
)->dev
),
602 if (slots_free
== 0) {
603 host1x_hw_cdma_flush(host1x
, cdma
);
604 slots_free
= host1x_cdma_wait_locked(cdma
,
605 CDMA_EVENT_PUSH_BUFFER_SPACE
);
608 cdma
->slots_free
= slots_free
- 1;
610 host1x_pushbuffer_push(pb
, op1
, op2
);
614 * Push four words into two consecutive push buffer slots. Note that extra
615 * care needs to be taken not to split the two slots across the end of the
616 * push buffer. Otherwise the RESTART opcode at the end of the push buffer
617 * that ensures processing will restart at the beginning will break up the
620 * Blocks as necessary if the push buffer is full.
622 void host1x_cdma_push_wide(struct host1x_cdma
*cdma
, u32 op1
, u32 op2
,
625 struct host1x_channel
*channel
= cdma_to_channel(cdma
);
626 struct host1x
*host1x
= cdma_to_host1x(cdma
);
627 struct push_buffer
*pb
= &cdma
->push_buffer
;
628 unsigned int space
, needed
= 2, extra
= 0;
630 if (host1x_debug_trace_cmdbuf
)
631 trace_host1x_cdma_push_wide(dev_name(channel
->dev
), op1
, op2
,
634 /* compute number of extra slots needed for padding */
635 if (pb
->pos
+ 16 > pb
->size
) {
636 extra
= (pb
->size
- pb
->pos
) / 8;
640 host1x_cdma_wait_pushbuffer_space(host1x
, cdma
, needed
);
641 space
= host1x_pushbuffer_space(pb
);
643 cdma
->slots_free
= space
- needed
;
644 cdma
->slots_used
+= needed
;
648 * If there isn't enough space at the tail of the pushbuffer,
649 * insert a RESTART(0) here to go back to the beginning.
650 * The code above adjusted the indexes appropriately.
652 host1x_pushbuffer_push(pb
, (0x5 << 28), 0xdead0000);
655 host1x_pushbuffer_push(pb
, op1
, op2
);
656 host1x_pushbuffer_push(pb
, op3
, op4
);
661 * Kick off DMA, add job to the sync queue, and a number of slots to be freed
662 * from the pushbuffer. The handles for a submit must all be pinned at the same
663 * time, but they can be unpinned in smaller chunks.
665 void host1x_cdma_end(struct host1x_cdma
*cdma
,
666 struct host1x_job
*job
)
668 struct host1x
*host1x
= cdma_to_host1x(cdma
);
669 bool idle
= list_empty(&cdma
->sync_queue
);
671 host1x_hw_cdma_flush(host1x
, cdma
);
673 job
->first_get
= cdma
->first_get
;
674 job
->num_slots
= cdma
->slots_used
;
676 list_add_tail(&job
->list
, &cdma
->sync_queue
);
678 /* start timer on idle -> active transitions */
679 if (job
->timeout
&& idle
)
680 cdma_start_timer_locked(cdma
, job
);
682 trace_host1x_cdma_end(dev_name(job
->channel
->dev
));
683 mutex_unlock(&cdma
->lock
);
687 * Update cdma state according to current sync point values
689 void host1x_cdma_update(struct host1x_cdma
*cdma
)
691 schedule_work(&cdma
->update_work
);