1 // SPDX-License-Identifier: GPL-2.0
3 #define pr_fmt(fmt) "DMAR-IR: " fmt
5 #include <linux/interrupt.h>
6 #include <linux/dmar.h>
7 #include <linux/spinlock.h>
8 #include <linux/slab.h>
9 #include <linux/jiffies.h>
10 #include <linux/hpet.h>
11 #include <linux/pci.h>
12 #include <linux/irq.h>
13 #include <linux/intel-iommu.h>
14 #include <linux/acpi.h>
15 #include <linux/irqdomain.h>
16 #include <linux/crash_dump.h>
17 #include <asm/io_apic.h>
20 #include <asm/irq_remapping.h>
21 #include <asm/pci-direct.h>
22 #include <asm/msidef.h>
24 #include "irq_remapping.h"
32 struct intel_iommu
*iommu
;
34 unsigned int bus
; /* PCI bus number */
35 unsigned int devfn
; /* PCI devfn number */
39 struct intel_iommu
*iommu
;
46 struct intel_iommu
*iommu
;
53 struct intel_ir_data
{
54 struct irq_2_iommu irq_2_iommu
;
55 struct irte irte_entry
;
57 struct msi_msg msi_entry
;
61 #define IR_X2APIC_MODE(mode) (mode ? (1 << 11) : 0)
62 #define IRTE_DEST(dest) ((eim_mode) ? dest : dest << 8)
64 static int __read_mostly eim_mode
;
65 static struct ioapic_scope ir_ioapic
[MAX_IO_APICS
];
66 static struct hpet_scope ir_hpet
[MAX_HPET_TBS
];
73 * ->iommu->register_lock
75 * intel_irq_remap_ops.{supported,prepare,enable,disable,reenable} are called
76 * in single-threaded environment with interrupt disabled, so no need to tabke
77 * the dmar_global_lock.
79 DEFINE_RAW_SPINLOCK(irq_2_ir_lock
);
80 static const struct irq_domain_ops intel_ir_domain_ops
;
82 static void iommu_disable_irq_remapping(struct intel_iommu
*iommu
);
83 static int __init
parse_ioapics_under_ir(void);
85 static bool ir_pre_enabled(struct intel_iommu
*iommu
)
87 return (iommu
->flags
& VTD_FLAG_IRQ_REMAP_PRE_ENABLED
);
90 static void clear_ir_pre_enabled(struct intel_iommu
*iommu
)
92 iommu
->flags
&= ~VTD_FLAG_IRQ_REMAP_PRE_ENABLED
;
95 static void init_ir_status(struct intel_iommu
*iommu
)
99 gsts
= readl(iommu
->reg
+ DMAR_GSTS_REG
);
100 if (gsts
& DMA_GSTS_IRES
)
101 iommu
->flags
|= VTD_FLAG_IRQ_REMAP_PRE_ENABLED
;
104 static int alloc_irte(struct intel_iommu
*iommu
, int irq
,
105 struct irq_2_iommu
*irq_iommu
, u16 count
)
107 struct ir_table
*table
= iommu
->ir_table
;
108 unsigned int mask
= 0;
112 if (!count
|| !irq_iommu
)
116 count
= __roundup_pow_of_two(count
);
120 if (mask
> ecap_max_handle_mask(iommu
->ecap
)) {
121 pr_err("Requested mask %x exceeds the max invalidation handle"
122 " mask value %Lx\n", mask
,
123 ecap_max_handle_mask(iommu
->ecap
));
127 raw_spin_lock_irqsave(&irq_2_ir_lock
, flags
);
128 index
= bitmap_find_free_region(table
->bitmap
,
129 INTR_REMAP_TABLE_ENTRIES
, mask
);
131 pr_warn("IR%d: can't allocate an IRTE\n", iommu
->seq_id
);
133 irq_iommu
->iommu
= iommu
;
134 irq_iommu
->irte_index
= index
;
135 irq_iommu
->sub_handle
= 0;
136 irq_iommu
->irte_mask
= mask
;
137 irq_iommu
->mode
= IRQ_REMAPPING
;
139 raw_spin_unlock_irqrestore(&irq_2_ir_lock
, flags
);
144 static int qi_flush_iec(struct intel_iommu
*iommu
, int index
, int mask
)
148 desc
.qw0
= QI_IEC_IIDEX(index
) | QI_IEC_TYPE
| QI_IEC_IM(mask
)
154 return qi_submit_sync(&desc
, iommu
);
157 static int modify_irte(struct irq_2_iommu
*irq_iommu
,
158 struct irte
*irte_modified
)
160 struct intel_iommu
*iommu
;
168 raw_spin_lock_irqsave(&irq_2_ir_lock
, flags
);
170 iommu
= irq_iommu
->iommu
;
172 index
= irq_iommu
->irte_index
+ irq_iommu
->sub_handle
;
173 irte
= &iommu
->ir_table
->base
[index
];
175 #if defined(CONFIG_HAVE_CMPXCHG_DOUBLE)
176 if ((irte
->pst
== 1) || (irte_modified
->pst
== 1)) {
179 ret
= cmpxchg_double(&irte
->low
, &irte
->high
,
180 irte
->low
, irte
->high
,
181 irte_modified
->low
, irte_modified
->high
);
183 * We use cmpxchg16 to atomically update the 128-bit IRTE,
184 * and it cannot be updated by the hardware or other processors
185 * behind us, so the return value of cmpxchg16 should be the
186 * same as the old value.
192 set_64bit(&irte
->low
, irte_modified
->low
);
193 set_64bit(&irte
->high
, irte_modified
->high
);
195 __iommu_flush_cache(iommu
, irte
, sizeof(*irte
));
197 rc
= qi_flush_iec(iommu
, index
, 0);
199 /* Update iommu mode according to the IRTE mode */
200 irq_iommu
->mode
= irte
->pst
? IRQ_POSTING
: IRQ_REMAPPING
;
201 raw_spin_unlock_irqrestore(&irq_2_ir_lock
, flags
);
206 static struct intel_iommu
*map_hpet_to_ir(u8 hpet_id
)
210 for (i
= 0; i
< MAX_HPET_TBS
; i
++)
211 if (ir_hpet
[i
].id
== hpet_id
&& ir_hpet
[i
].iommu
)
212 return ir_hpet
[i
].iommu
;
216 static struct intel_iommu
*map_ioapic_to_ir(int apic
)
220 for (i
= 0; i
< MAX_IO_APICS
; i
++)
221 if (ir_ioapic
[i
].id
== apic
&& ir_ioapic
[i
].iommu
)
222 return ir_ioapic
[i
].iommu
;
226 static struct intel_iommu
*map_dev_to_ir(struct pci_dev
*dev
)
228 struct dmar_drhd_unit
*drhd
;
230 drhd
= dmar_find_matched_drhd_unit(dev
);
237 static int clear_entries(struct irq_2_iommu
*irq_iommu
)
239 struct irte
*start
, *entry
, *end
;
240 struct intel_iommu
*iommu
;
243 if (irq_iommu
->sub_handle
)
246 iommu
= irq_iommu
->iommu
;
247 index
= irq_iommu
->irte_index
;
249 start
= iommu
->ir_table
->base
+ index
;
250 end
= start
+ (1 << irq_iommu
->irte_mask
);
252 for (entry
= start
; entry
< end
; entry
++) {
253 set_64bit(&entry
->low
, 0);
254 set_64bit(&entry
->high
, 0);
256 bitmap_release_region(iommu
->ir_table
->bitmap
, index
,
257 irq_iommu
->irte_mask
);
259 return qi_flush_iec(iommu
, index
, irq_iommu
->irte_mask
);
263 * source validation type
265 #define SVT_NO_VERIFY 0x0 /* no verification is required */
266 #define SVT_VERIFY_SID_SQ 0x1 /* verify using SID and SQ fields */
267 #define SVT_VERIFY_BUS 0x2 /* verify bus of request-id */
270 * source-id qualifier
272 #define SQ_ALL_16 0x0 /* verify all 16 bits of request-id */
273 #define SQ_13_IGNORE_1 0x1 /* verify most significant 13 bits, ignore
274 * the third least significant bit
276 #define SQ_13_IGNORE_2 0x2 /* verify most significant 13 bits, ignore
277 * the second and third least significant bits
279 #define SQ_13_IGNORE_3 0x3 /* verify most significant 13 bits, ignore
280 * the least three significant bits
284 * set SVT, SQ and SID fields of irte to verify
285 * source ids of interrupt requests
287 static void set_irte_sid(struct irte
*irte
, unsigned int svt
,
288 unsigned int sq
, unsigned int sid
)
290 if (disable_sourceid_checking
)
298 * Set an IRTE to match only the bus number. Interrupt requests that reference
299 * this IRTE must have a requester-id whose bus number is between or equal
300 * to the start_bus and end_bus arguments.
302 static void set_irte_verify_bus(struct irte
*irte
, unsigned int start_bus
,
303 unsigned int end_bus
)
305 set_irte_sid(irte
, SVT_VERIFY_BUS
, SQ_ALL_16
,
306 (start_bus
<< 8) | end_bus
);
309 static int set_ioapic_sid(struct irte
*irte
, int apic
)
317 down_read(&dmar_global_lock
);
318 for (i
= 0; i
< MAX_IO_APICS
; i
++) {
319 if (ir_ioapic
[i
].iommu
&& ir_ioapic
[i
].id
== apic
) {
320 sid
= (ir_ioapic
[i
].bus
<< 8) | ir_ioapic
[i
].devfn
;
324 up_read(&dmar_global_lock
);
327 pr_warn("Failed to set source-id of IOAPIC (%d)\n", apic
);
331 set_irte_sid(irte
, SVT_VERIFY_SID_SQ
, SQ_ALL_16
, sid
);
336 static int set_hpet_sid(struct irte
*irte
, u8 id
)
344 down_read(&dmar_global_lock
);
345 for (i
= 0; i
< MAX_HPET_TBS
; i
++) {
346 if (ir_hpet
[i
].iommu
&& ir_hpet
[i
].id
== id
) {
347 sid
= (ir_hpet
[i
].bus
<< 8) | ir_hpet
[i
].devfn
;
351 up_read(&dmar_global_lock
);
354 pr_warn("Failed to set source-id of HPET block (%d)\n", id
);
359 * Should really use SQ_ALL_16. Some platforms are broken.
360 * While we figure out the right quirks for these broken platforms, use
361 * SQ_13_IGNORE_3 for now.
363 set_irte_sid(irte
, SVT_VERIFY_SID_SQ
, SQ_13_IGNORE_3
, sid
);
368 struct set_msi_sid_data
{
369 struct pci_dev
*pdev
;
375 static int set_msi_sid_cb(struct pci_dev
*pdev
, u16 alias
, void *opaque
)
377 struct set_msi_sid_data
*data
= opaque
;
383 if (PCI_BUS_NUM(alias
) == pdev
->bus
->number
)
384 data
->busmatch_count
++;
389 static int set_msi_sid(struct irte
*irte
, struct pci_dev
*dev
)
391 struct set_msi_sid_data data
;
397 data
.busmatch_count
= 0;
398 pci_for_each_dma_alias(dev
, set_msi_sid_cb
, &data
);
401 * DMA alias provides us with a PCI device and alias. The only case
402 * where the it will return an alias on a different bus than the
403 * device is the case of a PCIe-to-PCI bridge, where the alias is for
404 * the subordinate bus. In this case we can only verify the bus.
406 * If there are multiple aliases, all with the same bus number,
407 * then all we can do is verify the bus. This is typical in NTB
408 * hardware which use proxy IDs where the device will generate traffic
409 * from multiple devfn numbers on the same bus.
411 * If the alias device is on a different bus than our source device
412 * then we have a topology based alias, use it.
414 * Otherwise, the alias is for a device DMA quirk and we cannot
415 * assume that MSI uses the same requester ID. Therefore use the
418 if (PCI_BUS_NUM(data
.alias
) != data
.pdev
->bus
->number
)
419 set_irte_verify_bus(irte
, PCI_BUS_NUM(data
.alias
),
421 else if (data
.count
>= 2 && data
.busmatch_count
== data
.count
)
422 set_irte_verify_bus(irte
, dev
->bus
->number
, dev
->bus
->number
);
423 else if (data
.pdev
->bus
->number
!= dev
->bus
->number
)
424 set_irte_sid(irte
, SVT_VERIFY_SID_SQ
, SQ_ALL_16
, data
.alias
);
426 set_irte_sid(irte
, SVT_VERIFY_SID_SQ
, SQ_ALL_16
,
427 PCI_DEVID(dev
->bus
->number
, dev
->devfn
));
432 static int iommu_load_old_irte(struct intel_iommu
*iommu
)
434 struct irte
*old_ir_table
;
435 phys_addr_t irt_phys
;
440 /* Check whether the old ir-table has the same size as ours */
441 irta
= dmar_readq(iommu
->reg
+ DMAR_IRTA_REG
);
442 if ((irta
& INTR_REMAP_TABLE_REG_SIZE_MASK
)
443 != INTR_REMAP_TABLE_REG_SIZE
)
446 irt_phys
= irta
& VTD_PAGE_MASK
;
447 size
= INTR_REMAP_TABLE_ENTRIES
*sizeof(struct irte
);
449 /* Map the old IR table */
450 old_ir_table
= memremap(irt_phys
, size
, MEMREMAP_WB
);
455 memcpy(iommu
->ir_table
->base
, old_ir_table
, size
);
457 __iommu_flush_cache(iommu
, iommu
->ir_table
->base
, size
);
460 * Now check the table for used entries and mark those as
461 * allocated in the bitmap
463 for (i
= 0; i
< INTR_REMAP_TABLE_ENTRIES
; i
++) {
464 if (iommu
->ir_table
->base
[i
].present
)
465 bitmap_set(iommu
->ir_table
->bitmap
, i
, 1);
468 memunmap(old_ir_table
);
474 static void iommu_set_irq_remapping(struct intel_iommu
*iommu
, int mode
)
480 addr
= virt_to_phys((void *)iommu
->ir_table
->base
);
482 raw_spin_lock_irqsave(&iommu
->register_lock
, flags
);
484 dmar_writeq(iommu
->reg
+ DMAR_IRTA_REG
,
485 (addr
) | IR_X2APIC_MODE(mode
) | INTR_REMAP_TABLE_REG_SIZE
);
487 /* Set interrupt-remapping table pointer */
488 writel(iommu
->gcmd
| DMA_GCMD_SIRTP
, iommu
->reg
+ DMAR_GCMD_REG
);
490 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
491 readl
, (sts
& DMA_GSTS_IRTPS
), sts
);
492 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flags
);
495 * Global invalidation of interrupt entry cache to make sure the
496 * hardware uses the new irq remapping table.
498 qi_global_iec(iommu
);
501 static void iommu_enable_irq_remapping(struct intel_iommu
*iommu
)
506 raw_spin_lock_irqsave(&iommu
->register_lock
, flags
);
508 /* Enable interrupt-remapping */
509 iommu
->gcmd
|= DMA_GCMD_IRE
;
510 iommu
->gcmd
&= ~DMA_GCMD_CFI
; /* Block compatibility-format MSIs */
511 writel(iommu
->gcmd
, iommu
->reg
+ DMAR_GCMD_REG
);
513 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
514 readl
, (sts
& DMA_GSTS_IRES
), sts
);
517 * With CFI clear in the Global Command register, we should be
518 * protected from dangerous (i.e. compatibility) interrupts
519 * regardless of x2apic status. Check just to be sure.
521 if (sts
& DMA_GSTS_CFIS
)
523 "Compatibility-format IRQs enabled despite intr remapping;\n"
524 "you are vulnerable to IRQ injection.\n");
526 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flags
);
529 static int intel_setup_irq_remapping(struct intel_iommu
*iommu
)
531 struct ir_table
*ir_table
;
532 struct fwnode_handle
*fn
;
533 unsigned long *bitmap
;
539 ir_table
= kzalloc(sizeof(struct ir_table
), GFP_KERNEL
);
543 pages
= alloc_pages_node(iommu
->node
, GFP_KERNEL
| __GFP_ZERO
,
544 INTR_REMAP_PAGE_ORDER
);
546 pr_err("IR%d: failed to allocate pages of order %d\n",
547 iommu
->seq_id
, INTR_REMAP_PAGE_ORDER
);
551 bitmap
= kcalloc(BITS_TO_LONGS(INTR_REMAP_TABLE_ENTRIES
),
552 sizeof(long), GFP_ATOMIC
);
553 if (bitmap
== NULL
) {
554 pr_err("IR%d: failed to allocate bitmap\n", iommu
->seq_id
);
558 fn
= irq_domain_alloc_named_id_fwnode("INTEL-IR", iommu
->seq_id
);
560 goto out_free_bitmap
;
563 irq_domain_create_hierarchy(arch_get_ir_parent_domain(),
564 0, INTR_REMAP_TABLE_ENTRIES
,
565 fn
, &intel_ir_domain_ops
,
567 irq_domain_free_fwnode(fn
);
568 if (!iommu
->ir_domain
) {
569 pr_err("IR%d: failed to allocate irqdomain\n", iommu
->seq_id
);
570 goto out_free_bitmap
;
572 iommu
->ir_msi_domain
=
573 arch_create_remap_msi_irq_domain(iommu
->ir_domain
,
577 ir_table
->base
= page_address(pages
);
578 ir_table
->bitmap
= bitmap
;
579 iommu
->ir_table
= ir_table
;
582 * If the queued invalidation is already initialized,
583 * shouldn't disable it.
587 * Clear previous faults.
589 dmar_fault(-1, iommu
);
590 dmar_disable_qi(iommu
);
592 if (dmar_enable_qi(iommu
)) {
593 pr_err("Failed to enable queued invalidation\n");
594 goto out_free_bitmap
;
598 init_ir_status(iommu
);
600 if (ir_pre_enabled(iommu
)) {
601 if (!is_kdump_kernel()) {
602 pr_warn("IRQ remapping was enabled on %s but we are not in kdump mode\n",
604 clear_ir_pre_enabled(iommu
);
605 iommu_disable_irq_remapping(iommu
);
606 } else if (iommu_load_old_irte(iommu
))
607 pr_err("Failed to copy IR table for %s from previous kernel\n",
610 pr_info("Copied IR table for %s from previous kernel\n",
614 iommu_set_irq_remapping(iommu
, eim_mode
);
621 __free_pages(pages
, INTR_REMAP_PAGE_ORDER
);
625 iommu
->ir_table
= NULL
;
630 static void intel_teardown_irq_remapping(struct intel_iommu
*iommu
)
632 if (iommu
&& iommu
->ir_table
) {
633 if (iommu
->ir_msi_domain
) {
634 irq_domain_remove(iommu
->ir_msi_domain
);
635 iommu
->ir_msi_domain
= NULL
;
637 if (iommu
->ir_domain
) {
638 irq_domain_remove(iommu
->ir_domain
);
639 iommu
->ir_domain
= NULL
;
641 free_pages((unsigned long)iommu
->ir_table
->base
,
642 INTR_REMAP_PAGE_ORDER
);
643 kfree(iommu
->ir_table
->bitmap
);
644 kfree(iommu
->ir_table
);
645 iommu
->ir_table
= NULL
;
650 * Disable Interrupt Remapping.
652 static void iommu_disable_irq_remapping(struct intel_iommu
*iommu
)
657 if (!ecap_ir_support(iommu
->ecap
))
661 * global invalidation of interrupt entry cache before disabling
662 * interrupt-remapping.
664 qi_global_iec(iommu
);
666 raw_spin_lock_irqsave(&iommu
->register_lock
, flags
);
668 sts
= readl(iommu
->reg
+ DMAR_GSTS_REG
);
669 if (!(sts
& DMA_GSTS_IRES
))
672 iommu
->gcmd
&= ~DMA_GCMD_IRE
;
673 writel(iommu
->gcmd
, iommu
->reg
+ DMAR_GCMD_REG
);
675 IOMMU_WAIT_OP(iommu
, DMAR_GSTS_REG
,
676 readl
, !(sts
& DMA_GSTS_IRES
), sts
);
679 raw_spin_unlock_irqrestore(&iommu
->register_lock
, flags
);
682 static int __init
dmar_x2apic_optout(void)
684 struct acpi_table_dmar
*dmar
;
685 dmar
= (struct acpi_table_dmar
*)dmar_tbl
;
686 if (!dmar
|| no_x2apic_optout
)
688 return dmar
->flags
& DMAR_X2APIC_OPT_OUT
;
691 static void __init
intel_cleanup_irq_remapping(void)
693 struct dmar_drhd_unit
*drhd
;
694 struct intel_iommu
*iommu
;
696 for_each_iommu(iommu
, drhd
) {
697 if (ecap_ir_support(iommu
->ecap
)) {
698 iommu_disable_irq_remapping(iommu
);
699 intel_teardown_irq_remapping(iommu
);
703 if (x2apic_supported())
704 pr_warn("Failed to enable irq remapping. You are vulnerable to irq-injection attacks.\n");
707 static int __init
intel_prepare_irq_remapping(void)
709 struct dmar_drhd_unit
*drhd
;
710 struct intel_iommu
*iommu
;
713 if (irq_remap_broken
) {
714 pr_warn("This system BIOS has enabled interrupt remapping\n"
715 "on a chipset that contains an erratum making that\n"
716 "feature unstable. To maintain system stability\n"
717 "interrupt remapping is being disabled. Please\n"
718 "contact your BIOS vendor for an update\n");
719 add_taint(TAINT_FIRMWARE_WORKAROUND
, LOCKDEP_STILL_OK
);
723 if (dmar_table_init() < 0)
726 if (!dmar_ir_support())
729 if (parse_ioapics_under_ir()) {
730 pr_info("Not enabling interrupt remapping\n");
734 /* First make sure all IOMMUs support IRQ remapping */
735 for_each_iommu(iommu
, drhd
)
736 if (!ecap_ir_support(iommu
->ecap
))
739 /* Detect remapping mode: lapic or x2apic */
740 if (x2apic_supported()) {
741 eim
= !dmar_x2apic_optout();
743 pr_info("x2apic is disabled because BIOS sets x2apic opt out bit.");
744 pr_info("Use 'intremap=no_x2apic_optout' to override the BIOS setting.\n");
748 for_each_iommu(iommu
, drhd
) {
749 if (eim
&& !ecap_eim_support(iommu
->ecap
)) {
750 pr_info("%s does not support EIM\n", iommu
->name
);
757 pr_info("Queued invalidation will be enabled to support x2apic and Intr-remapping.\n");
759 /* Do the initializations early */
760 for_each_iommu(iommu
, drhd
) {
761 if (intel_setup_irq_remapping(iommu
)) {
762 pr_err("Failed to setup irq remapping for %s\n",
771 intel_cleanup_irq_remapping();
776 * Set Posted-Interrupts capability.
778 static inline void set_irq_posting_cap(void)
780 struct dmar_drhd_unit
*drhd
;
781 struct intel_iommu
*iommu
;
783 if (!disable_irq_post
) {
785 * If IRTE is in posted format, the 'pda' field goes across the
786 * 64-bit boundary, we need use cmpxchg16b to atomically update
787 * it. We only expose posted-interrupt when X86_FEATURE_CX16
788 * is supported. Actually, hardware platforms supporting PI
789 * should have X86_FEATURE_CX16 support, this has been confirmed
790 * with Intel hardware guys.
792 if (boot_cpu_has(X86_FEATURE_CX16
))
793 intel_irq_remap_ops
.capability
|= 1 << IRQ_POSTING_CAP
;
795 for_each_iommu(iommu
, drhd
)
796 if (!cap_pi_support(iommu
->cap
)) {
797 intel_irq_remap_ops
.capability
&=
798 ~(1 << IRQ_POSTING_CAP
);
804 static int __init
intel_enable_irq_remapping(void)
806 struct dmar_drhd_unit
*drhd
;
807 struct intel_iommu
*iommu
;
811 * Setup Interrupt-remapping for all the DRHD's now.
813 for_each_iommu(iommu
, drhd
) {
814 if (!ir_pre_enabled(iommu
))
815 iommu_enable_irq_remapping(iommu
);
822 irq_remapping_enabled
= 1;
824 set_irq_posting_cap();
826 pr_info("Enabled IRQ remapping in %s mode\n", eim_mode
? "x2apic" : "xapic");
828 return eim_mode
? IRQ_REMAP_X2APIC_MODE
: IRQ_REMAP_XAPIC_MODE
;
831 intel_cleanup_irq_remapping();
835 static int ir_parse_one_hpet_scope(struct acpi_dmar_device_scope
*scope
,
836 struct intel_iommu
*iommu
,
837 struct acpi_dmar_hardware_unit
*drhd
)
839 struct acpi_dmar_pci_path
*path
;
841 int count
, free
= -1;
844 path
= (struct acpi_dmar_pci_path
*)(scope
+ 1);
845 count
= (scope
->length
- sizeof(struct acpi_dmar_device_scope
))
846 / sizeof(struct acpi_dmar_pci_path
);
848 while (--count
> 0) {
850 * Access PCI directly due to the PCI
851 * subsystem isn't initialized yet.
853 bus
= read_pci_config_byte(bus
, path
->device
, path
->function
,
858 for (count
= 0; count
< MAX_HPET_TBS
; count
++) {
859 if (ir_hpet
[count
].iommu
== iommu
&&
860 ir_hpet
[count
].id
== scope
->enumeration_id
)
862 else if (ir_hpet
[count
].iommu
== NULL
&& free
== -1)
866 pr_warn("Exceeded Max HPET blocks\n");
870 ir_hpet
[free
].iommu
= iommu
;
871 ir_hpet
[free
].id
= scope
->enumeration_id
;
872 ir_hpet
[free
].bus
= bus
;
873 ir_hpet
[free
].devfn
= PCI_DEVFN(path
->device
, path
->function
);
874 pr_info("HPET id %d under DRHD base 0x%Lx\n",
875 scope
->enumeration_id
, drhd
->address
);
880 static int ir_parse_one_ioapic_scope(struct acpi_dmar_device_scope
*scope
,
881 struct intel_iommu
*iommu
,
882 struct acpi_dmar_hardware_unit
*drhd
)
884 struct acpi_dmar_pci_path
*path
;
886 int count
, free
= -1;
889 path
= (struct acpi_dmar_pci_path
*)(scope
+ 1);
890 count
= (scope
->length
- sizeof(struct acpi_dmar_device_scope
))
891 / sizeof(struct acpi_dmar_pci_path
);
893 while (--count
> 0) {
895 * Access PCI directly due to the PCI
896 * subsystem isn't initialized yet.
898 bus
= read_pci_config_byte(bus
, path
->device
, path
->function
,
903 for (count
= 0; count
< MAX_IO_APICS
; count
++) {
904 if (ir_ioapic
[count
].iommu
== iommu
&&
905 ir_ioapic
[count
].id
== scope
->enumeration_id
)
907 else if (ir_ioapic
[count
].iommu
== NULL
&& free
== -1)
911 pr_warn("Exceeded Max IO APICS\n");
915 ir_ioapic
[free
].bus
= bus
;
916 ir_ioapic
[free
].devfn
= PCI_DEVFN(path
->device
, path
->function
);
917 ir_ioapic
[free
].iommu
= iommu
;
918 ir_ioapic
[free
].id
= scope
->enumeration_id
;
919 pr_info("IOAPIC id %d under DRHD base 0x%Lx IOMMU %d\n",
920 scope
->enumeration_id
, drhd
->address
, iommu
->seq_id
);
925 static int ir_parse_ioapic_hpet_scope(struct acpi_dmar_header
*header
,
926 struct intel_iommu
*iommu
)
929 struct acpi_dmar_hardware_unit
*drhd
;
930 struct acpi_dmar_device_scope
*scope
;
933 drhd
= (struct acpi_dmar_hardware_unit
*)header
;
934 start
= (void *)(drhd
+ 1);
935 end
= ((void *)drhd
) + header
->length
;
937 while (start
< end
&& ret
== 0) {
939 if (scope
->entry_type
== ACPI_DMAR_SCOPE_TYPE_IOAPIC
)
940 ret
= ir_parse_one_ioapic_scope(scope
, iommu
, drhd
);
941 else if (scope
->entry_type
== ACPI_DMAR_SCOPE_TYPE_HPET
)
942 ret
= ir_parse_one_hpet_scope(scope
, iommu
, drhd
);
943 start
+= scope
->length
;
949 static void ir_remove_ioapic_hpet_scope(struct intel_iommu
*iommu
)
953 for (i
= 0; i
< MAX_HPET_TBS
; i
++)
954 if (ir_hpet
[i
].iommu
== iommu
)
955 ir_hpet
[i
].iommu
= NULL
;
957 for (i
= 0; i
< MAX_IO_APICS
; i
++)
958 if (ir_ioapic
[i
].iommu
== iommu
)
959 ir_ioapic
[i
].iommu
= NULL
;
963 * Finds the assocaition between IOAPIC's and its Interrupt-remapping
966 static int __init
parse_ioapics_under_ir(void)
968 struct dmar_drhd_unit
*drhd
;
969 struct intel_iommu
*iommu
;
970 bool ir_supported
= false;
973 for_each_iommu(iommu
, drhd
) {
976 if (!ecap_ir_support(iommu
->ecap
))
979 ret
= ir_parse_ioapic_hpet_scope(drhd
->hdr
, iommu
);
989 for (ioapic_idx
= 0; ioapic_idx
< nr_ioapics
; ioapic_idx
++) {
990 int ioapic_id
= mpc_ioapic_id(ioapic_idx
);
991 if (!map_ioapic_to_ir(ioapic_id
)) {
992 pr_err(FW_BUG
"ioapic %d has no mapping iommu, "
993 "interrupt remapping will be disabled\n",
1002 static int __init
ir_dev_scope_init(void)
1006 if (!irq_remapping_enabled
)
1009 down_write(&dmar_global_lock
);
1010 ret
= dmar_dev_scope_init();
1011 up_write(&dmar_global_lock
);
1015 rootfs_initcall(ir_dev_scope_init
);
1017 static void disable_irq_remapping(void)
1019 struct dmar_drhd_unit
*drhd
;
1020 struct intel_iommu
*iommu
= NULL
;
1023 * Disable Interrupt-remapping for all the DRHD's now.
1025 for_each_iommu(iommu
, drhd
) {
1026 if (!ecap_ir_support(iommu
->ecap
))
1029 iommu_disable_irq_remapping(iommu
);
1033 * Clear Posted-Interrupts capability.
1035 if (!disable_irq_post
)
1036 intel_irq_remap_ops
.capability
&= ~(1 << IRQ_POSTING_CAP
);
1039 static int reenable_irq_remapping(int eim
)
1041 struct dmar_drhd_unit
*drhd
;
1043 struct intel_iommu
*iommu
= NULL
;
1045 for_each_iommu(iommu
, drhd
)
1047 dmar_reenable_qi(iommu
);
1050 * Setup Interrupt-remapping for all the DRHD's now.
1052 for_each_iommu(iommu
, drhd
) {
1053 if (!ecap_ir_support(iommu
->ecap
))
1056 /* Set up interrupt remapping for iommu.*/
1057 iommu_set_irq_remapping(iommu
, eim
);
1058 iommu_enable_irq_remapping(iommu
);
1065 set_irq_posting_cap();
1071 * handle error condition gracefully here!
1076 static void prepare_irte(struct irte
*irte
, int vector
, unsigned int dest
)
1078 memset(irte
, 0, sizeof(*irte
));
1081 irte
->dst_mode
= apic
->irq_dest_mode
;
1083 * Trigger mode in the IRTE will always be edge, and for IO-APIC, the
1084 * actual level or edge trigger will be setup in the IO-APIC
1085 * RTE. This will help simplify level triggered irq migration.
1086 * For more details, see the comments (in io_apic.c) explainig IO-APIC
1087 * irq migration in the presence of interrupt-remapping.
1089 irte
->trigger_mode
= 0;
1090 irte
->dlvry_mode
= apic
->irq_delivery_mode
;
1091 irte
->vector
= vector
;
1092 irte
->dest_id
= IRTE_DEST(dest
);
1093 irte
->redir_hint
= 1;
1096 static struct irq_domain
*intel_get_ir_irq_domain(struct irq_alloc_info
*info
)
1098 struct intel_iommu
*iommu
= NULL
;
1103 switch (info
->type
) {
1104 case X86_IRQ_ALLOC_TYPE_IOAPIC
:
1105 iommu
= map_ioapic_to_ir(info
->ioapic_id
);
1107 case X86_IRQ_ALLOC_TYPE_HPET
:
1108 iommu
= map_hpet_to_ir(info
->hpet_id
);
1110 case X86_IRQ_ALLOC_TYPE_MSI
:
1111 case X86_IRQ_ALLOC_TYPE_MSIX
:
1112 iommu
= map_dev_to_ir(info
->msi_dev
);
1119 return iommu
? iommu
->ir_domain
: NULL
;
1122 static struct irq_domain
*intel_get_irq_domain(struct irq_alloc_info
*info
)
1124 struct intel_iommu
*iommu
;
1129 switch (info
->type
) {
1130 case X86_IRQ_ALLOC_TYPE_MSI
:
1131 case X86_IRQ_ALLOC_TYPE_MSIX
:
1132 iommu
= map_dev_to_ir(info
->msi_dev
);
1134 return iommu
->ir_msi_domain
;
1143 struct irq_remap_ops intel_irq_remap_ops
= {
1144 .prepare
= intel_prepare_irq_remapping
,
1145 .enable
= intel_enable_irq_remapping
,
1146 .disable
= disable_irq_remapping
,
1147 .reenable
= reenable_irq_remapping
,
1148 .enable_faulting
= enable_drhd_fault_handling
,
1149 .get_ir_irq_domain
= intel_get_ir_irq_domain
,
1150 .get_irq_domain
= intel_get_irq_domain
,
1153 static void intel_ir_reconfigure_irte(struct irq_data
*irqd
, bool force
)
1155 struct intel_ir_data
*ir_data
= irqd
->chip_data
;
1156 struct irte
*irte
= &ir_data
->irte_entry
;
1157 struct irq_cfg
*cfg
= irqd_cfg(irqd
);
1160 * Atomically updates the IRTE with the new destination, vector
1161 * and flushes the interrupt entry cache.
1163 irte
->vector
= cfg
->vector
;
1164 irte
->dest_id
= IRTE_DEST(cfg
->dest_apicid
);
1166 /* Update the hardware only if the interrupt is in remapped mode. */
1167 if (force
|| ir_data
->irq_2_iommu
.mode
== IRQ_REMAPPING
)
1168 modify_irte(&ir_data
->irq_2_iommu
, irte
);
1172 * Migrate the IO-APIC irq in the presence of intr-remapping.
1174 * For both level and edge triggered, irq migration is a simple atomic
1175 * update(of vector and cpu destination) of IRTE and flush the hardware cache.
1177 * For level triggered, we eliminate the io-apic RTE modification (with the
1178 * updated vector information), by using a virtual vector (io-apic pin number).
1179 * Real vector that is used for interrupting cpu will be coming from
1180 * the interrupt-remapping table entry.
1182 * As the migration is a simple atomic update of IRTE, the same mechanism
1183 * is used to migrate MSI irq's in the presence of interrupt-remapping.
1186 intel_ir_set_affinity(struct irq_data
*data
, const struct cpumask
*mask
,
1189 struct irq_data
*parent
= data
->parent_data
;
1190 struct irq_cfg
*cfg
= irqd_cfg(data
);
1193 ret
= parent
->chip
->irq_set_affinity(parent
, mask
, force
);
1194 if (ret
< 0 || ret
== IRQ_SET_MASK_OK_DONE
)
1197 intel_ir_reconfigure_irte(data
, false);
1199 * After this point, all the interrupts will start arriving
1200 * at the new destination. So, time to cleanup the previous
1201 * vector allocation.
1203 send_cleanup_vector(cfg
);
1205 return IRQ_SET_MASK_OK_DONE
;
1208 static void intel_ir_compose_msi_msg(struct irq_data
*irq_data
,
1209 struct msi_msg
*msg
)
1211 struct intel_ir_data
*ir_data
= irq_data
->chip_data
;
1213 *msg
= ir_data
->msi_entry
;
1216 static int intel_ir_set_vcpu_affinity(struct irq_data
*data
, void *info
)
1218 struct intel_ir_data
*ir_data
= data
->chip_data
;
1219 struct vcpu_data
*vcpu_pi_info
= info
;
1221 /* stop posting interrupts, back to remapping mode */
1222 if (!vcpu_pi_info
) {
1223 modify_irte(&ir_data
->irq_2_iommu
, &ir_data
->irte_entry
);
1225 struct irte irte_pi
;
1228 * We are not caching the posted interrupt entry. We
1229 * copy the data from the remapped entry and modify
1230 * the fields which are relevant for posted mode. The
1231 * cached remapped entry is used for switching back to
1234 memset(&irte_pi
, 0, sizeof(irte_pi
));
1235 dmar_copy_shared_irte(&irte_pi
, &ir_data
->irte_entry
);
1237 /* Update the posted mode fields */
1239 irte_pi
.p_urgent
= 0;
1240 irte_pi
.p_vector
= vcpu_pi_info
->vector
;
1241 irte_pi
.pda_l
= (vcpu_pi_info
->pi_desc_addr
>>
1242 (32 - PDA_LOW_BIT
)) & ~(-1UL << PDA_LOW_BIT
);
1243 irte_pi
.pda_h
= (vcpu_pi_info
->pi_desc_addr
>> 32) &
1244 ~(-1UL << PDA_HIGH_BIT
);
1246 modify_irte(&ir_data
->irq_2_iommu
, &irte_pi
);
1252 static struct irq_chip intel_ir_chip
= {
1254 .irq_ack
= apic_ack_irq
,
1255 .irq_set_affinity
= intel_ir_set_affinity
,
1256 .irq_compose_msi_msg
= intel_ir_compose_msi_msg
,
1257 .irq_set_vcpu_affinity
= intel_ir_set_vcpu_affinity
,
1260 static void intel_irq_remapping_prepare_irte(struct intel_ir_data
*data
,
1261 struct irq_cfg
*irq_cfg
,
1262 struct irq_alloc_info
*info
,
1263 int index
, int sub_handle
)
1265 struct IR_IO_APIC_route_entry
*entry
;
1266 struct irte
*irte
= &data
->irte_entry
;
1267 struct msi_msg
*msg
= &data
->msi_entry
;
1269 prepare_irte(irte
, irq_cfg
->vector
, irq_cfg
->dest_apicid
);
1270 switch (info
->type
) {
1271 case X86_IRQ_ALLOC_TYPE_IOAPIC
:
1272 /* Set source-id of interrupt request */
1273 set_ioapic_sid(irte
, info
->ioapic_id
);
1274 apic_printk(APIC_VERBOSE
, KERN_DEBUG
"IOAPIC[%d]: Set IRTE entry (P:%d FPD:%d Dst_Mode:%d Redir_hint:%d Trig_Mode:%d Dlvry_Mode:%X Avail:%X Vector:%02X Dest:%08X SID:%04X SQ:%X SVT:%X)\n",
1275 info
->ioapic_id
, irte
->present
, irte
->fpd
,
1276 irte
->dst_mode
, irte
->redir_hint
,
1277 irte
->trigger_mode
, irte
->dlvry_mode
,
1278 irte
->avail
, irte
->vector
, irte
->dest_id
,
1279 irte
->sid
, irte
->sq
, irte
->svt
);
1281 entry
= (struct IR_IO_APIC_route_entry
*)info
->ioapic_entry
;
1282 info
->ioapic_entry
= NULL
;
1283 memset(entry
, 0, sizeof(*entry
));
1284 entry
->index2
= (index
>> 15) & 0x1;
1287 entry
->index
= (index
& 0x7fff);
1289 * IO-APIC RTE will be configured with virtual vector.
1290 * irq handler will do the explicit EOI to the io-apic.
1292 entry
->vector
= info
->ioapic_pin
;
1293 entry
->mask
= 0; /* enable IRQ */
1294 entry
->trigger
= info
->ioapic_trigger
;
1295 entry
->polarity
= info
->ioapic_polarity
;
1296 if (info
->ioapic_trigger
)
1297 entry
->mask
= 1; /* Mask level triggered irqs. */
1300 case X86_IRQ_ALLOC_TYPE_HPET
:
1301 case X86_IRQ_ALLOC_TYPE_MSI
:
1302 case X86_IRQ_ALLOC_TYPE_MSIX
:
1303 if (info
->type
== X86_IRQ_ALLOC_TYPE_HPET
)
1304 set_hpet_sid(irte
, info
->hpet_id
);
1306 set_msi_sid(irte
, info
->msi_dev
);
1308 msg
->address_hi
= MSI_ADDR_BASE_HI
;
1309 msg
->data
= sub_handle
;
1310 msg
->address_lo
= MSI_ADDR_BASE_LO
| MSI_ADDR_IR_EXT_INT
|
1312 MSI_ADDR_IR_INDEX1(index
) |
1313 MSI_ADDR_IR_INDEX2(index
);
1322 static void intel_free_irq_resources(struct irq_domain
*domain
,
1323 unsigned int virq
, unsigned int nr_irqs
)
1325 struct irq_data
*irq_data
;
1326 struct intel_ir_data
*data
;
1327 struct irq_2_iommu
*irq_iommu
;
1328 unsigned long flags
;
1330 for (i
= 0; i
< nr_irqs
; i
++) {
1331 irq_data
= irq_domain_get_irq_data(domain
, virq
+ i
);
1332 if (irq_data
&& irq_data
->chip_data
) {
1333 data
= irq_data
->chip_data
;
1334 irq_iommu
= &data
->irq_2_iommu
;
1335 raw_spin_lock_irqsave(&irq_2_ir_lock
, flags
);
1336 clear_entries(irq_iommu
);
1337 raw_spin_unlock_irqrestore(&irq_2_ir_lock
, flags
);
1338 irq_domain_reset_irq_data(irq_data
);
1344 static int intel_irq_remapping_alloc(struct irq_domain
*domain
,
1345 unsigned int virq
, unsigned int nr_irqs
,
1348 struct intel_iommu
*iommu
= domain
->host_data
;
1349 struct irq_alloc_info
*info
= arg
;
1350 struct intel_ir_data
*data
, *ird
;
1351 struct irq_data
*irq_data
;
1352 struct irq_cfg
*irq_cfg
;
1355 if (!info
|| !iommu
)
1357 if (nr_irqs
> 1 && info
->type
!= X86_IRQ_ALLOC_TYPE_MSI
&&
1358 info
->type
!= X86_IRQ_ALLOC_TYPE_MSIX
)
1362 * With IRQ remapping enabled, don't need contiguous CPU vectors
1363 * to support multiple MSI interrupts.
1365 if (info
->type
== X86_IRQ_ALLOC_TYPE_MSI
)
1366 info
->flags
&= ~X86_IRQ_ALLOC_CONTIGUOUS_VECTORS
;
1368 ret
= irq_domain_alloc_irqs_parent(domain
, virq
, nr_irqs
, arg
);
1373 data
= kzalloc(sizeof(*data
), GFP_KERNEL
);
1375 goto out_free_parent
;
1377 down_read(&dmar_global_lock
);
1378 index
= alloc_irte(iommu
, virq
, &data
->irq_2_iommu
, nr_irqs
);
1379 up_read(&dmar_global_lock
);
1381 pr_warn("Failed to allocate IRTE\n");
1383 goto out_free_parent
;
1386 for (i
= 0; i
< nr_irqs
; i
++) {
1387 irq_data
= irq_domain_get_irq_data(domain
, virq
+ i
);
1388 irq_cfg
= irqd_cfg(irq_data
);
1389 if (!irq_data
|| !irq_cfg
) {
1395 ird
= kzalloc(sizeof(*ird
), GFP_KERNEL
);
1398 /* Initialize the common data */
1399 ird
->irq_2_iommu
= data
->irq_2_iommu
;
1400 ird
->irq_2_iommu
.sub_handle
= i
;
1405 irq_data
->hwirq
= (index
<< 16) + i
;
1406 irq_data
->chip_data
= ird
;
1407 irq_data
->chip
= &intel_ir_chip
;
1408 intel_irq_remapping_prepare_irte(ird
, irq_cfg
, info
, index
, i
);
1409 irq_set_status_flags(virq
+ i
, IRQ_MOVE_PCNTXT
);
1414 intel_free_irq_resources(domain
, virq
, i
);
1416 irq_domain_free_irqs_common(domain
, virq
, nr_irqs
);
1420 static void intel_irq_remapping_free(struct irq_domain
*domain
,
1421 unsigned int virq
, unsigned int nr_irqs
)
1423 intel_free_irq_resources(domain
, virq
, nr_irqs
);
1424 irq_domain_free_irqs_common(domain
, virq
, nr_irqs
);
1427 static int intel_irq_remapping_activate(struct irq_domain
*domain
,
1428 struct irq_data
*irq_data
, bool reserve
)
1430 intel_ir_reconfigure_irte(irq_data
, true);
1434 static void intel_irq_remapping_deactivate(struct irq_domain
*domain
,
1435 struct irq_data
*irq_data
)
1437 struct intel_ir_data
*data
= irq_data
->chip_data
;
1440 memset(&entry
, 0, sizeof(entry
));
1441 modify_irte(&data
->irq_2_iommu
, &entry
);
1444 static const struct irq_domain_ops intel_ir_domain_ops
= {
1445 .alloc
= intel_irq_remapping_alloc
,
1446 .free
= intel_irq_remapping_free
,
1447 .activate
= intel_irq_remapping_activate
,
1448 .deactivate
= intel_irq_remapping_deactivate
,
1452 * Support of Interrupt Remapping Unit Hotplug
1454 static int dmar_ir_add(struct dmar_drhd_unit
*dmaru
, struct intel_iommu
*iommu
)
1457 int eim
= x2apic_enabled();
1459 if (eim
&& !ecap_eim_support(iommu
->ecap
)) {
1460 pr_info("DRHD %Lx: EIM not supported by DRHD, ecap %Lx\n",
1461 iommu
->reg_phys
, iommu
->ecap
);
1465 if (ir_parse_ioapic_hpet_scope(dmaru
->hdr
, iommu
)) {
1466 pr_warn("DRHD %Lx: failed to parse managed IOAPIC/HPET\n",
1471 /* TODO: check all IOAPICs are covered by IOMMU */
1473 /* Setup Interrupt-remapping now. */
1474 ret
= intel_setup_irq_remapping(iommu
);
1476 pr_err("Failed to setup irq remapping for %s\n",
1478 intel_teardown_irq_remapping(iommu
);
1479 ir_remove_ioapic_hpet_scope(iommu
);
1481 iommu_enable_irq_remapping(iommu
);
1487 int dmar_ir_hotplug(struct dmar_drhd_unit
*dmaru
, bool insert
)
1490 struct intel_iommu
*iommu
= dmaru
->iommu
;
1492 if (!irq_remapping_enabled
)
1496 if (!ecap_ir_support(iommu
->ecap
))
1498 if (irq_remapping_cap(IRQ_POSTING_CAP
) &&
1499 !cap_pi_support(iommu
->cap
))
1503 if (!iommu
->ir_table
)
1504 ret
= dmar_ir_add(dmaru
, iommu
);
1506 if (iommu
->ir_table
) {
1507 if (!bitmap_empty(iommu
->ir_table
->bitmap
,
1508 INTR_REMAP_TABLE_ENTRIES
)) {
1511 iommu_disable_irq_remapping(iommu
);
1512 intel_teardown_irq_remapping(iommu
);
1513 ir_remove_ioapic_hpet_scope(iommu
);