1 /* SPDX-License-Identifier: GPL-2.0-or-later */
4 * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
6 * Rewritten by Cort Dougan (cort@cs.nmt.edu) for PReP
7 * Copyright (C) 1996 Cort Dougan <cort@cs.nmt.edu>
8 * Adapted for Power Macintosh by Paul Mackerras.
9 * Low-level exception handlers and MMU support
10 * rewritten by Paul Mackerras.
11 * Copyright (C) 1996 Paul Mackerras.
12 * MPC8xx modifications Copyright (C) 1997 Dan Malek (dmalek@jlc.net).
14 * This file contains the low-level support and setup for the
15 * PowerPC platform, including trap and interrupt dispatch.
16 * (The PPC 8xx embedded CPUs use head_8xx.S instead.)
19 #include <linux/init.h>
23 #include <asm/pgtable.h>
24 #include <asm/cputable.h>
25 #include <asm/cache.h>
26 #include <asm/thread_info.h>
27 #include <asm/ppc_asm.h>
28 #include <asm/asm-offsets.h>
29 #include <asm/ptrace.h>
31 #include <asm/kvm_book3s_asm.h>
32 #include <asm/export.h>
33 #include <asm/feature-fixups.h>
37 /* 601 only have IBAT */
38 #ifdef CONFIG_PPC_BOOK3S_601
39 #define LOAD_BAT(n, reg, RA, RB) \
41 mtspr SPRN_IBAT##n##U,RA; \
42 lwz RA,(n*16)+0(reg); \
43 lwz RB,(n*16)+4(reg); \
44 mtspr SPRN_IBAT##n##U,RA; \
45 mtspr SPRN_IBAT##n##L,RB
47 #define LOAD_BAT(n, reg, RA, RB) \
48 /* see the comment for clear_bats() -- Cort */ \
50 mtspr SPRN_IBAT##n##U,RA; \
51 mtspr SPRN_DBAT##n##U,RA; \
52 lwz RA,(n*16)+0(reg); \
53 lwz RB,(n*16)+4(reg); \
54 mtspr SPRN_IBAT##n##U,RA; \
55 mtspr SPRN_IBAT##n##L,RB; \
56 lwz RA,(n*16)+8(reg); \
57 lwz RB,(n*16)+12(reg); \
58 mtspr SPRN_DBAT##n##U,RA; \
59 mtspr SPRN_DBAT##n##L,RB
63 .stabs "arch/powerpc/kernel/",N_SO,0,0,0f
64 .stabs "head_32.S",N_SO,0,0,0f
69 * _start is defined this way because the XCOFF loader in the OpenFirmware
70 * on the powermac expects the entry point to be a procedure descriptor.
74 * These are here for legacy reasons, the kernel used to
75 * need to look like a coff function entry for the pmac
76 * but we're always started by some kind of bootloader now.
79 nop /* used by __secondary_hold on prep (mtx) and chrp smp */
80 nop /* used by __secondary_hold on prep (mtx) and chrp smp */
84 * Enter here with the kernel text, data and bss loaded starting at
85 * 0, running with virtual == physical mapping.
86 * r5 points to the prom entry point (the client interface handler
87 * address). Address translation is turned on, with the prom
88 * managing the hash table. Interrupts are disabled. The stack
89 * pointer (r1) points to just below the end of the half-meg region
90 * from 0x380000 - 0x400000, which is mapped in already.
92 * If we are booted from MacOS via BootX, we enter with the kernel
93 * image loaded somewhere, and the following values in registers:
94 * r3: 'BooX' (0x426f6f58)
95 * r4: virtual address of boot_infos_t
99 * This is jumped to on prep systems right after the kernel is relocated
100 * to its proper place in memory by the boot loader. The expected layout
102 * r3: ptr to residual data
103 * r4: initrd_start or if no initrd then 0
104 * r5: initrd_end - unused if r4 is 0
105 * r6: Start of command line string
106 * r7: End of command line string
108 * This just gets a minimal mmu environment setup so we can call
109 * start_here() to do the real work.
116 * We have to do any OF calls before we map ourselves to KERNELBASE,
117 * because OF may have I/O devices mapped into that area
118 * (particularly on CHRP).
123 #ifdef CONFIG_PPC_OF_BOOT_TRAMPOLINE
124 /* find out where we are now */
126 0: mflr r8 /* r8 = runtime addr here */
127 addis r8,r8,(_stext - 0b)@ha
128 addi r8,r8,(_stext - 0b)@l /* current runtime base addr */
130 #endif /* CONFIG_PPC_OF_BOOT_TRAMPOLINE */
132 /* We never return. We also hit that trap if trying to boot
133 * from OF while CONFIG_PPC_OF_BOOT_TRAMPOLINE isn't selected */
137 * Check for BootX signature when supporting PowerMac and branch to
138 * appropriate trampoline if it's present
140 #ifdef CONFIG_PPC_PMAC
147 #endif /* CONFIG_PPC_PMAC */
149 1: mr r31,r3 /* save device tree ptr */
153 * early_init() does the early machine identification and does
154 * the necessary low-level setup and clears the BSS
155 * -- Cort <cort@fsmlabs.com>
159 /* Switch MMU off, clear BATs and flush TLB. At this point, r3 contains
160 * the physical address we are running at, returned by early_init()
168 bl load_segment_registers
172 #if defined(CONFIG_BOOTX_TEXT)
175 #ifdef CONFIG_PPC_EARLY_DEBUG_CPM
178 #ifdef CONFIG_PPC_EARLY_DEBUG_USBGECKO
179 bl setup_usbgecko_bat
183 * Call setup_cpu for CPU 0 and initialize 6xx Idle
187 bl call_setup_cpu /* Call setup_cpu for this CPU */
188 #ifdef CONFIG_PPC_BOOK3S_32
191 #endif /* CONFIG_PPC_BOOK3S_32 */
195 * We need to run with _start at physical address 0.
196 * On CHRP, we are loaded at 0x10000 since OF on CHRP uses
197 * the exception vectors at 0 (and therefore this copy
198 * overwrites OF's exception vectors with our own).
199 * The MMU is off at this point.
203 addis r4,r3,KERNELBASE@h /* current address of _start */
204 lis r5,PHYSICAL_START@h
205 cmplw 0,r4,r5 /* already running at PHYSICAL_START? */
208 * we now have the 1st 16M of ram mapped with the bats.
209 * prep needs the mmu to be turned on here, but pmac already has it on.
210 * this shouldn't bother the pmac since it just gets turned on again
211 * as we jump to our code at KERNELBASE. -- Cort
212 * Actually no, pmac doesn't have it on any more. BootX enters with MMU
213 * off, and in other cases, we now turn it off before changing BATs above.
217 ori r0,r0,MSR_DR|MSR_IR|MSR_RI
220 ori r0,r0,start_here@l
223 RFI /* enables MMU */
226 * We need __secondary_hold as a place to hold the other cpus on
227 * an SMP machine, even when we are running a UP kernel.
229 . = 0xc0 /* for prep bootloader */
230 li r3,1 /* MTX only has 1 cpu */
231 .globl __secondary_hold
233 /* tell the master we're here */
234 stw r3,__secondary_hold_acknowledge@l(0)
237 /* wait until we're told to start */
240 /* our cpu # was at addr 0 - go */
241 mr r24,r3 /* cpu # */
245 #endif /* CONFIG_SMP */
247 .globl __secondary_hold_spinloop
248 __secondary_hold_spinloop:
250 .globl __secondary_hold_acknowledge
251 __secondary_hold_acknowledge:
255 /* core99 pmac starts the seconary here by changing the vector, and
256 putting it back to what it was (unknown_exception) when done. */
257 EXCEPTION(0x100, Reset, unknown_exception, EXC_XFER_STD)
261 * On CHRP, this is complicated by the fact that we could get a
262 * machine check inside RTAS, and we have no guarantee that certain
263 * critical registers will have the values we expect. The set of
264 * registers that might have bad values includes all the GPRs
265 * and all the BATs. We indicate that we are in RTAS by putting
266 * a non-zero value, the address of the exception frame to use,
267 * in thread.rtas_sp. The machine check handler checks thread.rtas_sp
268 * and uses its value if it is non-zero.
269 * (Other exception handlers assume that r1 is a valid kernel stack
270 * pointer when we take an exception from supervisor mode.)
275 mtspr SPRN_SPRG_SCRATCH0,r10
276 mtspr SPRN_SPRG_SCRATCH1,r11
278 #ifdef CONFIG_PPC_CHRP
279 mfspr r11, SPRN_SPRG_THREAD
280 lwz r11, RTAS_SP(r11)
283 #endif /* CONFIG_PPC_CHRP */
285 7: EXCEPTION_PROLOG_2
286 addi r3,r1,STACK_FRAME_OVERHEAD
287 #ifdef CONFIG_PPC_CHRP
290 EXC_XFER_STD(0x200, machine_check_exception)
291 #ifdef CONFIG_PPC_CHRP
292 1: b machine_check_in_rtas
295 /* Data access exception. */
302 #ifdef CONFIG_PPC_KUAP
303 andis. r0,r10,(DSISR_BAD_FAULT_32S | DSISR_DABRMATCH | DSISR_PROTFAULT)@h
305 andis. r0,r10,(DSISR_BAD_FAULT_32S|DSISR_DABRMATCH)@h
307 bne 1f /* if not, try to put a PTE */
308 mfspr r4,SPRN_DAR /* into the hash table */
309 rlwinm r3,r10,32-15,21,21 /* DSISR_STORE -> _PAGE_RW */
310 BEGIN_MMU_FTR_SECTION
312 END_MMU_FTR_SECTION_IFSET(MMU_FTR_HPTE_TABLE)
313 1: lwz r5,_DSISR(r11) /* get DSISR value */
315 EXC_XFER_LITE(0x300, handle_page_fault)
318 /* Instruction access exception. */
323 andis. r0,r9,SRR1_ISI_NOPT@h /* no pte found? */
324 beq 1f /* if so, try to put a PTE */
325 li r3,0 /* into the hash table */
326 mr r4,r12 /* SRR0 is fault address */
327 BEGIN_MMU_FTR_SECTION
329 END_MMU_FTR_SECTION_IFSET(MMU_FTR_HPTE_TABLE)
331 andis. r5,r9,DSISR_SRR1_MATCH_32S@h /* Filter relevant SRR1 bits */
332 EXC_XFER_LITE(0x400, handle_page_fault)
334 /* External interrupt */
335 EXCEPTION(0x500, HardwareInterrupt, do_IRQ, EXC_XFER_LITE)
337 /* Alignment exception */
346 addi r3,r1,STACK_FRAME_OVERHEAD
347 EXC_XFER_STD(0x600, alignment_exception)
349 /* Program check exception */
350 EXCEPTION(0x700, ProgramCheck, program_check_exception, EXC_XFER_STD)
352 /* Floating-point unavailable */
358 * Certain Freescale cores don't have a FPU and treat fp instructions
359 * as a FP Unavailable exception. Redirect to illegal/emulation handling.
362 END_FTR_SECTION_IFSET(CPU_FTR_FPU_UNAVAILABLE)
365 bl load_up_fpu /* if from user, just load it up */
366 b fast_exception_return
367 1: addi r3,r1,STACK_FRAME_OVERHEAD
368 EXC_XFER_LITE(0x800, kernel_fp_unavailable_exception)
371 EXCEPTION(0x900, Decrementer, timer_interrupt, EXC_XFER_LITE)
373 EXCEPTION(0xa00, Trap_0a, unknown_exception, EXC_XFER_STD)
374 EXCEPTION(0xb00, Trap_0b, unknown_exception, EXC_XFER_STD)
382 /* Single step - not used on 601 */
383 EXCEPTION(0xd00, SingleStep, single_step_exception, EXC_XFER_STD)
384 EXCEPTION(0xe00, Trap_0e, unknown_exception, EXC_XFER_STD)
387 * The Altivec unavailable trap is at 0x0f20. Foo.
388 * We effectively remap it to 0x3000.
389 * We include an altivec unavailable exception vector even if
390 * not configured for Altivec, so that you can't panic a
391 * non-altivec kernel running on a machine with altivec just
392 * by executing an altivec instruction.
403 * Handle TLB miss for instruction on 603/603e.
404 * Note: we get an alternate set of r0 - r3 to use automatically.
410 * r1: linux style pte ( later becomes ppc hardware pte )
411 * r2: ptr to linux-style pte
414 /* Get PTE (linux-style) and check access */
416 #if defined(CONFIG_MODULES) || defined(CONFIG_DEBUG_PAGEALLOC)
417 lis r1,PAGE_OFFSET@h /* check if kernel address */
420 mfspr r2, SPRN_SPRG_PGDIR
422 li r1,_PAGE_PRESENT | _PAGE_ACCESSED | _PAGE_EXEC
424 li r1,_PAGE_PRESENT | _PAGE_EXEC
426 #if defined(CONFIG_MODULES) || defined(CONFIG_DEBUG_PAGEALLOC)
428 lis r2, (swapper_pg_dir - PAGE_OFFSET)@ha /* if kernel address, use */
429 addi r2, r2, (swapper_pg_dir - PAGE_OFFSET)@l /* kernel page table */
431 112: rlwimi r2,r3,12,20,29 /* insert top 10 bits of address */
432 lwz r2,0(r2) /* get pmd entry */
433 rlwinm. r2,r2,0,0,19 /* extract address of pte page */
434 beq- InstructionAddressInvalid /* return if no mapping */
435 rlwimi r2,r3,22,20,29 /* insert next 10 bits of address */
436 lwz r0,0(r2) /* get linux-style pte */
437 andc. r1,r1,r0 /* check access & ~permission */
438 bne- InstructionAddressInvalid /* return if access not permitted */
439 /* Convert linux-style PTE to low word of PPC-style PTE */
440 rlwimi r0,r0,32-2,31,31 /* _PAGE_USER -> PP lsb */
441 ori r1, r1, 0xe06 /* clear out reserved bits */
442 andc r1, r0, r1 /* PP = user? 1 : 0 */
444 rlwinm r1,r1,0,~_PAGE_COHERENT /* clear M (coherence not required) */
445 END_FTR_SECTION_IFCLR(CPU_FTR_NEED_COHERENT)
448 mfspr r3,SPRN_SRR1 /* Need to restore CR0 */
451 InstructionAddressInvalid:
453 rlwinm r1,r3,9,6,6 /* Get load/store bit */
456 mtspr SPRN_DSISR,r1 /* (shouldn't be needed) */
457 andi. r2,r3,0xFFFF /* Clear upper bits of SRR1 */
460 mfspr r1,SPRN_IMISS /* Get failing address */
461 rlwinm. r2,r2,0,31,31 /* Check for little endian access */
462 rlwimi r2,r2,1,30,30 /* change 1 -> 3 */
464 mtspr SPRN_DAR,r1 /* Set fault address */
465 mfmsr r0 /* Restore "normal" registers */
466 xoris r0,r0,MSR_TGPR>>16
467 mtcrf 0x80,r3 /* Restore CR0 */
472 * Handle TLB miss for DATA Load operation on 603/603e
478 * r1: linux style pte ( later becomes ppc hardware pte )
479 * r2: ptr to linux-style pte
482 /* Get PTE (linux-style) and check access */
484 lis r1,PAGE_OFFSET@h /* check if kernel address */
486 mfspr r2, SPRN_SPRG_PGDIR
488 li r1, _PAGE_PRESENT | _PAGE_ACCESSED
493 lis r2, (swapper_pg_dir - PAGE_OFFSET)@ha /* if kernel address, use */
494 addi r2, r2, (swapper_pg_dir - PAGE_OFFSET)@l /* kernel page table */
495 112: rlwimi r2,r3,12,20,29 /* insert top 10 bits of address */
496 lwz r2,0(r2) /* get pmd entry */
497 rlwinm. r2,r2,0,0,19 /* extract address of pte page */
498 beq- DataAddressInvalid /* return if no mapping */
499 rlwimi r2,r3,22,20,29 /* insert next 10 bits of address */
500 lwz r0,0(r2) /* get linux-style pte */
501 andc. r1,r1,r0 /* check access & ~permission */
502 bne- DataAddressInvalid /* return if access not permitted */
504 * NOTE! We are assuming this is not an SMP system, otherwise
505 * we would need to update the pte atomically with lwarx/stwcx.
507 /* Convert linux-style PTE to low word of PPC-style PTE */
508 rlwinm r1,r0,32-9,30,30 /* _PAGE_RW -> PP msb */
509 rlwimi r0,r0,32-1,30,30 /* _PAGE_USER -> PP msb */
510 rlwimi r0,r0,32-1,31,31 /* _PAGE_USER -> PP lsb */
511 ori r1,r1,0xe04 /* clear out reserved bits */
512 andc r1,r0,r1 /* PP = user? rw? 1: 3: 0 */
514 rlwinm r1,r1,0,~_PAGE_COHERENT /* clear M (coherence not required) */
515 END_FTR_SECTION_IFCLR(CPU_FTR_NEED_COHERENT)
517 mfspr r2,SPRN_SRR1 /* Need to restore CR0 */
519 BEGIN_MMU_FTR_SECTION
521 mfspr r1,SPRN_SPRG_603_LRU
522 rlwinm r2,r3,20,27,31 /* Get Address bits 15:19 */
526 mtspr SPRN_SPRG_603_LRU,r1
528 rlwimi r2,r0,31-14,14,14
530 END_MMU_FTR_SECTION_IFSET(MMU_FTR_NEED_DTLB_SW_LRU)
535 rlwinm r1,r3,9,6,6 /* Get load/store bit */
538 andi. r2,r3,0xFFFF /* Clear upper bits of SRR1 */
540 mfspr r1,SPRN_DMISS /* Get failing address */
541 rlwinm. r2,r2,0,31,31 /* Check for little endian access */
542 beq 20f /* Jump if big endian */
544 20: mtspr SPRN_DAR,r1 /* Set fault address */
545 mfmsr r0 /* Restore "normal" registers */
546 xoris r0,r0,MSR_TGPR>>16
547 mtcrf 0x80,r3 /* Restore CR0 */
552 * Handle TLB miss for DATA Store on 603/603e
558 * r1: linux style pte ( later becomes ppc hardware pte )
559 * r2: ptr to linux-style pte
562 /* Get PTE (linux-style) and check access */
564 lis r1,PAGE_OFFSET@h /* check if kernel address */
566 mfspr r2, SPRN_SPRG_PGDIR
568 li r1, _PAGE_RW | _PAGE_DIRTY | _PAGE_PRESENT | _PAGE_ACCESSED
570 li r1, _PAGE_RW | _PAGE_DIRTY | _PAGE_PRESENT
573 lis r2, (swapper_pg_dir - PAGE_OFFSET)@ha /* if kernel address, use */
574 addi r2, r2, (swapper_pg_dir - PAGE_OFFSET)@l /* kernel page table */
575 112: rlwimi r2,r3,12,20,29 /* insert top 10 bits of address */
576 lwz r2,0(r2) /* get pmd entry */
577 rlwinm. r2,r2,0,0,19 /* extract address of pte page */
578 beq- DataAddressInvalid /* return if no mapping */
579 rlwimi r2,r3,22,20,29 /* insert next 10 bits of address */
580 lwz r0,0(r2) /* get linux-style pte */
581 andc. r1,r1,r0 /* check access & ~permission */
582 bne- DataAddressInvalid /* return if access not permitted */
584 * NOTE! We are assuming this is not an SMP system, otherwise
585 * we would need to update the pte atomically with lwarx/stwcx.
587 /* Convert linux-style PTE to low word of PPC-style PTE */
588 rlwimi r0,r0,32-2,31,31 /* _PAGE_USER -> PP lsb */
589 li r1,0xe06 /* clear out reserved bits & PP msb */
590 andc r1,r0,r1 /* PP = user? 1: 0 */
592 rlwinm r1,r1,0,~_PAGE_COHERENT /* clear M (coherence not required) */
593 END_FTR_SECTION_IFCLR(CPU_FTR_NEED_COHERENT)
595 mfspr r2,SPRN_SRR1 /* Need to restore CR0 */
597 BEGIN_MMU_FTR_SECTION
599 mfspr r1,SPRN_SPRG_603_LRU
600 rlwinm r2,r3,20,27,31 /* Get Address bits 15:19 */
604 mtspr SPRN_SPRG_603_LRU,r1
606 rlwimi r2,r0,31-14,14,14
608 END_MMU_FTR_SECTION_IFSET(MMU_FTR_NEED_DTLB_SW_LRU)
612 #ifndef CONFIG_ALTIVEC
613 #define altivec_assist_exception unknown_exception
616 EXCEPTION(0x1300, Trap_13, instruction_breakpoint_exception, EXC_XFER_STD)
617 EXCEPTION(0x1400, SMI, SMIException, EXC_XFER_STD)
618 EXCEPTION(0x1500, Trap_15, unknown_exception, EXC_XFER_STD)
619 EXCEPTION(0x1600, Trap_16, altivec_assist_exception, EXC_XFER_STD)
620 EXCEPTION(0x1700, Trap_17, TAUException, EXC_XFER_STD)
621 EXCEPTION(0x1800, Trap_18, unknown_exception, EXC_XFER_STD)
622 EXCEPTION(0x1900, Trap_19, unknown_exception, EXC_XFER_STD)
623 EXCEPTION(0x1a00, Trap_1a, unknown_exception, EXC_XFER_STD)
624 EXCEPTION(0x1b00, Trap_1b, unknown_exception, EXC_XFER_STD)
625 EXCEPTION(0x1c00, Trap_1c, unknown_exception, EXC_XFER_STD)
626 EXCEPTION(0x1d00, Trap_1d, unknown_exception, EXC_XFER_STD)
627 EXCEPTION(0x1e00, Trap_1e, unknown_exception, EXC_XFER_STD)
628 EXCEPTION(0x1f00, Trap_1f, unknown_exception, EXC_XFER_STD)
629 EXCEPTION(0x2000, RunMode, RunModeException, EXC_XFER_STD)
630 EXCEPTION(0x2100, Trap_21, unknown_exception, EXC_XFER_STD)
631 EXCEPTION(0x2200, Trap_22, unknown_exception, EXC_XFER_STD)
632 EXCEPTION(0x2300, Trap_23, unknown_exception, EXC_XFER_STD)
633 EXCEPTION(0x2400, Trap_24, unknown_exception, EXC_XFER_STD)
634 EXCEPTION(0x2500, Trap_25, unknown_exception, EXC_XFER_STD)
635 EXCEPTION(0x2600, Trap_26, unknown_exception, EXC_XFER_STD)
636 EXCEPTION(0x2700, Trap_27, unknown_exception, EXC_XFER_STD)
637 EXCEPTION(0x2800, Trap_28, unknown_exception, EXC_XFER_STD)
638 EXCEPTION(0x2900, Trap_29, unknown_exception, EXC_XFER_STD)
639 EXCEPTION(0x2a00, Trap_2a, unknown_exception, EXC_XFER_STD)
640 EXCEPTION(0x2b00, Trap_2b, unknown_exception, EXC_XFER_STD)
641 EXCEPTION(0x2c00, Trap_2c, unknown_exception, EXC_XFER_STD)
642 EXCEPTION(0x2d00, Trap_2d, unknown_exception, EXC_XFER_STD)
643 EXCEPTION(0x2e00, Trap_2e, unknown_exception, EXC_XFER_STD)
644 EXCEPTION(0x2f00, Trap_2f, unknown_exception, EXC_XFER_STD)
650 #ifdef CONFIG_ALTIVEC
652 bl load_up_altivec /* if from user, just load it up */
653 b fast_exception_return
654 #endif /* CONFIG_ALTIVEC */
655 1: addi r3,r1,STACK_FRAME_OVERHEAD
656 EXC_XFER_LITE(0xf20, altivec_unavailable_exception)
660 addi r3,r1,STACK_FRAME_OVERHEAD
661 EXC_XFER_STD(0xf00, performance_monitor_exception)
665 * This code is jumped to from the startup code to copy
666 * the kernel image to physical address PHYSICAL_START.
669 addis r9,r26,klimit@ha /* fetch klimit */
671 addis r25,r25,-KERNELBASE@h
672 lis r3,PHYSICAL_START@h /* Destination base address */
673 li r6,0 /* Destination offset */
674 li r5,0x4000 /* # bytes of memory to copy */
675 bl copy_and_flush /* copy the first 0x4000 bytes */
676 addi r0,r3,4f@l /* jump to the address of 4f */
677 mtctr r0 /* in copy and do the rest. */
678 bctr /* jump to the copy */
680 bl copy_and_flush /* copy the rest */
684 * Copy routine used to copy the kernel to start at physical address 0
685 * and flush and invalidate the caches as needed.
686 * r3 = dest addr, r4 = source addr, r5 = copy limit, r6 = start offset
687 * on exit, r3, r4, r5 are unchanged, r6 is updated to be >= r5.
689 _ENTRY(copy_and_flush)
692 4: li r0,L1_CACHE_BYTES/4
694 3: addi r6,r6,4 /* copy a cache line */
698 dcbst r6,r3 /* write it to memory */
700 icbi r6,r3 /* flush the icache line */
703 sync /* additional sync needed on g4 */
710 .globl __secondary_start_mpc86xx
711 __secondary_start_mpc86xx:
713 stw r3, __secondary_hold_acknowledge@l(0)
714 mr r24, r3 /* cpu # */
717 .globl __secondary_start_pmac_0
718 __secondary_start_pmac_0:
719 /* NB the entries for cpus 0, 1, 2 must each occupy 8 bytes. */
728 /* on powersurge, we come in here with IR=0 and DR=1, and DBAT 0
729 set to map the 0xf0000000 - 0xffffffff region */
731 rlwinm r0,r0,0,28,26 /* clear DR (0x10) */
736 .globl __secondary_start
738 /* Copy some CPU settings from CPU 0 */
739 bl __restore_cpu_setup
743 bl call_setup_cpu /* Call setup_cpu for this CPU */
744 #ifdef CONFIG_PPC_BOOK3S_32
747 #endif /* CONFIG_PPC_BOOK3S_32 */
749 /* get current's stack and current */
750 lis r2,secondary_current@ha
752 lwz r2,secondary_current@l(r2)
754 lwz r1,TASK_STACK(r1)
757 addi r1,r1,THREAD_SIZE-STACK_FRAME_OVERHEAD
762 /* load up the MMU */
763 bl load_segment_registers
766 /* ptr to phys current thread */
768 addi r4,r4,THREAD /* phys address of our thread_struct */
769 mtspr SPRN_SPRG_THREAD,r4
770 lis r4, (swapper_pg_dir - PAGE_OFFSET)@h
771 ori r4, r4, (swapper_pg_dir - PAGE_OFFSET)@l
772 mtspr SPRN_SPRG_PGDIR, r4
774 /* enable MMU and jump to start_secondary */
776 lis r3,start_secondary@h
777 ori r3,r3,start_secondary@l
782 #endif /* CONFIG_SMP */
784 #ifdef CONFIG_KVM_BOOK3S_HANDLER
785 #include "../kvm/book3s_rmhandlers.S"
789 * Those generic dummy functions are kept for CPUs not
790 * included in CONFIG_PPC_BOOK3S_32
792 #if !defined(CONFIG_PPC_BOOK3S_32)
793 _ENTRY(__save_cpu_setup)
795 _ENTRY(__restore_cpu_setup)
797 #endif /* !defined(CONFIG_PPC_BOOK3S_32) */
800 * Load stuff into the MMU. Intended to be called with
805 sync /* Force all PTE updates to finish */
807 tlbia /* Clear all TLB entries */
808 sync /* wait for tlbia/tlbie to finish */
809 TLBSYNC /* ... on all CPUs */
810 /* Load the SDR1 register (hash table base & size) */
811 lis r6, early_hash - PAGE_OFFSET@h
812 ori r6, r6, 3 /* 256kB table */
818 sync /* Force all PTE updates to finish */
820 tlbia /* Clear all TLB entries */
821 sync /* wait for tlbia/tlbie to finish */
822 TLBSYNC /* ... on all CPUs */
823 /* Load the SDR1 register (hash table base & size) */
829 /* Load the BAT registers with the values set up by MMU_init.
830 MMU_init takes care of whether we're on a 601 or not. */
838 BEGIN_MMU_FTR_SECTION
843 END_MMU_FTR_SECTION_IFSET(MMU_FTR_USE_HIGH_BATS)
846 load_segment_registers:
847 li r0, NUM_USER_SEGMENTS /* load up user segment register values */
848 mtctr r0 /* for context 0 */
849 li r3, 0 /* Kp = 0, Ks = 0, VSID = 0 */
850 #ifdef CONFIG_PPC_KUEP
851 oris r3, r3, SR_NX@h /* Set Nx */
853 #ifdef CONFIG_PPC_KUAP
854 oris r3, r3, SR_KS@h /* Set Ks */
858 addi r3, r3, 0x111 /* increment VSID */
859 addis r4, r4, 0x1000 /* address of next segment */
861 li r0, 16 - NUM_USER_SEGMENTS /* load up kernel segment registers */
862 mtctr r0 /* for context 0 */
863 rlwinm r3, r3, 0, ~SR_NX /* Nx = 0 */
864 rlwinm r3, r3, 0, ~SR_KS /* Ks = 0 */
865 oris r3, r3, SR_KP@h /* Kp = 1 */
867 addi r3, r3, 0x111 /* increment VSID */
868 addis r4, r4, 0x1000 /* address of next segment */
873 * This is where the main kernel code starts.
878 ori r2,r2,init_task@l
879 /* Set up for using our exception vectors */
880 /* ptr to phys current thread */
882 addi r4,r4,THREAD /* init task's THREAD */
883 mtspr SPRN_SPRG_THREAD,r4
884 lis r4, (swapper_pg_dir - PAGE_OFFSET)@h
885 ori r4, r4, (swapper_pg_dir - PAGE_OFFSET)@l
886 mtspr SPRN_SPRG_PGDIR, r4
889 lis r1,init_thread_union@ha
890 addi r1,r1,init_thread_union@l
892 stwu r0,THREAD_SIZE-STACK_FRAME_OVERHEAD(r1)
894 * Do early platform-specific initialization,
895 * and set up the MMU.
906 BEGIN_MMU_FTR_SECTION
908 END_MMU_FTR_SECTION_IFSET(MMU_FTR_HPTE_TABLE)
912 * Go back to running unmapped so we can load up new values
913 * for SDR1 (hash table pointer) and the segment registers
914 * and change to using our exception vectors.
919 li r3,MSR_KERNEL & ~(MSR_IR|MSR_DR)
924 /* Load up the kernel context */
927 #ifdef CONFIG_BDI_SWITCH
928 /* Add helper information for the Abatron bdiGDB debugger.
929 * We do this here because we know the mmu is disabled, and
930 * will be enabled for real in just a few instructions.
932 lis r5, abatron_pteptrs@h
933 ori r5, r5, abatron_pteptrs@l
934 stw r5, 0xf0(r0) /* This much match your Abatron config */
935 lis r6, swapper_pg_dir@h
936 ori r6, r6, swapper_pg_dir@l
939 #endif /* CONFIG_BDI_SWITCH */
941 /* Now turn on the MMU for real! */
943 lis r3,start_kernel@h
944 ori r3,r3,start_kernel@l
951 * void switch_mmu_context(struct mm_struct *prev, struct mm_struct *next);
953 * Set up the segment registers for a new context.
955 _ENTRY(switch_mmu_context)
956 lwz r3,MMCONTEXTID(r4)
959 mulli r3,r3,897 /* multiply context by skew factor */
960 rlwinm r3,r3,4,8,27 /* VSID = (context & 0xfffff) << 4 */
961 #ifdef CONFIG_PPC_KUEP
962 oris r3, r3, SR_NX@h /* Set Nx */
964 #ifdef CONFIG_PPC_KUAP
965 oris r3, r3, SR_KS@h /* Set Ks */
967 li r0,NUM_USER_SEGMENTS
971 #ifdef CONFIG_BDI_SWITCH
972 /* Context switch the PTE pointer for the Abatron BDI2000.
973 * The PGDIR is passed as second argument.
975 lis r5, abatron_pteptrs@ha
976 stw r4, abatron_pteptrs@l + 0x4(r5)
979 mtspr SPRN_SPRG_PGDIR, r4
984 addi r3,r3,0x111 /* next VSID */
985 rlwinm r3,r3,0,8,3 /* clear out any overflow from VSID field */
986 addis r4,r4,0x1000 /* address of next segment */
992 EMIT_BUG_ENTRY 4b,__FILE__,__LINE__,0
994 EXPORT_SYMBOL(switch_mmu_context)
997 * An undocumented "feature" of 604e requires that the v bit
998 * be cleared before changing BAT values.
1000 * Also, newer IBM firmware does not clear bat3 and 4 so
1001 * this makes sure it's done.
1007 #ifndef CONFIG_PPC_BOOK3S_601
1008 mtspr SPRN_DBAT0U,r10
1009 mtspr SPRN_DBAT0L,r10
1010 mtspr SPRN_DBAT1U,r10
1011 mtspr SPRN_DBAT1L,r10
1012 mtspr SPRN_DBAT2U,r10
1013 mtspr SPRN_DBAT2L,r10
1014 mtspr SPRN_DBAT3U,r10
1015 mtspr SPRN_DBAT3L,r10
1017 mtspr SPRN_IBAT0U,r10
1018 mtspr SPRN_IBAT0L,r10
1019 mtspr SPRN_IBAT1U,r10
1020 mtspr SPRN_IBAT1L,r10
1021 mtspr SPRN_IBAT2U,r10
1022 mtspr SPRN_IBAT2L,r10
1023 mtspr SPRN_IBAT3U,r10
1024 mtspr SPRN_IBAT3L,r10
1025 BEGIN_MMU_FTR_SECTION
1026 /* Here's a tweak: at this point, CPU setup have
1027 * not been called yet, so HIGH_BAT_EN may not be
1028 * set in HID0 for the 745x processors. However, it
1029 * seems that doesn't affect our ability to actually
1030 * write to these SPRs.
1032 mtspr SPRN_DBAT4U,r10
1033 mtspr SPRN_DBAT4L,r10
1034 mtspr SPRN_DBAT5U,r10
1035 mtspr SPRN_DBAT5L,r10
1036 mtspr SPRN_DBAT6U,r10
1037 mtspr SPRN_DBAT6L,r10
1038 mtspr SPRN_DBAT7U,r10
1039 mtspr SPRN_DBAT7L,r10
1040 mtspr SPRN_IBAT4U,r10
1041 mtspr SPRN_IBAT4L,r10
1042 mtspr SPRN_IBAT5U,r10
1043 mtspr SPRN_IBAT5L,r10
1044 mtspr SPRN_IBAT6U,r10
1045 mtspr SPRN_IBAT6L,r10
1046 mtspr SPRN_IBAT7U,r10
1047 mtspr SPRN_IBAT7L,r10
1048 END_MMU_FTR_SECTION_IFSET(MMU_FTR_USE_HIGH_BATS)
1057 li r3, MSR_KERNEL & ~(MSR_IR | MSR_DR)
1058 rlwinm r0, r6, 0, ~MSR_RI
1059 rlwinm r0, r0, 0, ~MSR_EE
1069 LOAD_BAT(0, r3, r4, r5)
1070 LOAD_BAT(1, r3, r4, r5)
1071 LOAD_BAT(2, r3, r4, r5)
1072 LOAD_BAT(3, r3, r4, r5)
1073 BEGIN_MMU_FTR_SECTION
1074 LOAD_BAT(4, r3, r4, r5)
1075 LOAD_BAT(5, r3, r4, r5)
1076 LOAD_BAT(6, r3, r4, r5)
1077 LOAD_BAT(7, r3, r4, r5)
1078 END_MMU_FTR_SECTION_IFSET(MMU_FTR_USE_HIGH_BATS)
1079 li r3, MSR_KERNEL & ~(MSR_IR | MSR_DR | MSR_RI)
1088 1: addic. r10, r10, -0x1000
1095 addi r4, r3, __after_mmu_off - _start
1097 andi. r0,r3,MSR_DR|MSR_IR /* MMU enabled? */
1106 * On 601, we use 3 BATs to map up to 24M of RAM at _PAGE_OFFSET
1107 * (we keep one for debugging) and on others, we use one 256M BAT.
1110 lis r11,PAGE_OFFSET@h
1111 #ifdef CONFIG_PPC_BOOK3S_601
1112 ori r11,r11,4 /* set up BAT registers for 601 */
1113 li r8,0x7f /* valid, block length = 8MB */
1114 mtspr SPRN_IBAT0U,r11 /* N.B. 601 has valid bit in */
1115 mtspr SPRN_IBAT0L,r8 /* lower BAT register */
1116 addis r11,r11,0x800000@h
1117 addis r8,r8,0x800000@h
1118 mtspr SPRN_IBAT1U,r11
1119 mtspr SPRN_IBAT1L,r8
1120 addis r11,r11,0x800000@h
1121 addis r8,r8,0x800000@h
1122 mtspr SPRN_IBAT2U,r11
1123 mtspr SPRN_IBAT2L,r8
1127 ori r8,r8,0x12 /* R/W access, M=1 */
1129 ori r8,r8,2 /* R/W access */
1130 #endif /* CONFIG_SMP */
1131 ori r11,r11,BL_256M<<2|0x2 /* set up BAT registers for 604 */
1133 mtspr SPRN_DBAT0L,r8 /* N.B. 6xx (not 601) have valid */
1134 mtspr SPRN_DBAT0U,r11 /* bit in upper BAT register */
1135 mtspr SPRN_IBAT0L,r8
1136 mtspr SPRN_IBAT0U,r11
1141 #ifdef CONFIG_BOOTX_TEXT
1144 * setup the display bat prepared for us in prom.c
1149 addis r8,r3,disp_BAT@ha
1150 addi r8,r8,disp_BAT@l
1155 #ifndef CONFIG_PPC_BOOK3S_601
1156 mtspr SPRN_DBAT3L,r8
1157 mtspr SPRN_DBAT3U,r11
1159 mtspr SPRN_IBAT3L,r8
1160 mtspr SPRN_IBAT3U,r11
1163 #endif /* CONFIG_BOOTX_TEXT */
1165 #ifdef CONFIG_PPC_EARLY_DEBUG_CPM
1169 mtspr SPRN_DBAT1L, r8
1172 ori r11, r11, (BL_1M << 2) | 2
1173 mtspr SPRN_DBAT1U, r11
1178 #ifdef CONFIG_PPC_EARLY_DEBUG_USBGECKO
1180 /* prepare a BAT for early io */
1181 #if defined(CONFIG_GAMECUBE)
1183 #elif defined(CONFIG_WII)
1186 #error Invalid platform for USB Gecko based early debugging.
1189 * The virtual address used must match the virtual address
1190 * associated to the fixmap entry FIX_EARLY_DEBUG_BASE.
1192 lis r11, 0xfffe /* top 128K */
1193 ori r8, r8, 0x002a /* uncached, guarded ,rw */
1194 ori r11, r11, 0x2 /* 128K, Vs=1, Vp=0 */
1195 mtspr SPRN_DBAT1L, r8
1196 mtspr SPRN_DBAT1U, r11
1201 /* Jump into the system reset for the rom.
1202 * We first disable the MMU, and then jump to the ROM reset address.
1204 * r3 is the board info structure, r4 is the location for starting.
1205 * I use this for building a small kernel that can load other kernels,
1206 * rather than trying to write or rely on a rom monitor that can tftp load.
1211 rlwinm r0,r0,0,17,15 /* clear MSR_EE in r0 */
1215 mfspr r11, SPRN_HID0
1217 ori r10,r10,HID0_ICE|HID0_DCE
1219 mtspr SPRN_HID0, r11
1221 li r5, MSR_ME|MSR_RI
1223 addis r6,r6,-KERNELBASE@h
1237 * We put a few things here that have to be page-aligned.
1238 * This stuff goes at the beginning of the data segment,
1239 * which is page-aligned.
1244 .globl empty_zero_page
1247 EXPORT_SYMBOL(empty_zero_page)
1249 .globl swapper_pg_dir
1251 .space PGD_TABLE_SIZE
1253 /* Room for two PTE pointers, usually the kernel and current user pointers
1254 * to their respective root page table.