1 // SPDX-License-Identifier: GPL-2.0-only
3 * Hibernate support specific for ARM64
5 * Derived from work on ARM hibernation support by:
7 * Ubuntu project, hibernation support for mach-dove
8 * Copyright (C) 2010 Nokia Corporation (Hiroshi Doyu)
9 * Copyright (C) 2010 Texas Instruments, Inc. (Teerth Reddy et al.)
10 * https://lkml.org/lkml/2010/6/18/4
11 * https://lists.linux-foundation.org/pipermail/linux-pm/2010-June/027422.html
12 * https://patchwork.kernel.org/patch/96442/
14 * Copyright (C) 2006 Rafael J. Wysocki <rjw@sisk.pl>
16 #define pr_fmt(x) "hibernate: " x
17 #include <linux/cpu.h>
18 #include <linux/kvm_host.h>
21 #include <linux/sched.h>
22 #include <linux/suspend.h>
23 #include <linux/utsname.h>
24 #include <linux/version.h>
26 #include <asm/barrier.h>
27 #include <asm/cacheflush.h>
28 #include <asm/cputype.h>
29 #include <asm/daifflags.h>
30 #include <asm/irqflags.h>
31 #include <asm/kexec.h>
32 #include <asm/memory.h>
33 #include <asm/mmu_context.h>
34 #include <asm/pgalloc.h>
35 #include <asm/pgtable.h>
36 #include <asm/pgtable-hwdef.h>
37 #include <asm/sections.h>
39 #include <asm/smp_plat.h>
40 #include <asm/suspend.h>
41 #include <asm/sysreg.h>
45 * Hibernate core relies on this value being 0 on resume, and marks it
46 * __nosavedata assuming it will keep the resume kernel's '0' value. This
47 * doesn't happen with either KASLR.
49 * defined as "__visible int in_suspend __nosavedata" in
50 * kernel/power/hibernate.c
52 extern int in_suspend
;
54 /* Do we need to reset el2? */
55 #define el2_reset_needed() (is_hyp_mode_available() && !is_kernel_in_hyp_mode())
57 /* temporary el2 vectors in the __hibernate_exit_text section. */
58 extern char hibernate_el2_vectors
[];
60 /* hyp-stub vectors, used to restore el2 during resume from hibernate. */
61 extern char __hyp_stub_vectors
[];
64 * The logical cpu number we should resume on, initialised to a non-cpu
67 static int sleep_cpu
= -EINVAL
;
70 * Values that may not change over hibernate/resume. We put the build number
71 * and date in here so that we guarantee not to resume with a different
74 struct arch_hibernate_hdr_invariants
{
75 char uts_version
[__NEW_UTS_LEN
+ 1];
78 /* These values need to be know across a hibernate/restore. */
79 static struct arch_hibernate_hdr
{
80 struct arch_hibernate_hdr_invariants invariants
;
82 /* These are needed to find the relocated kernel if built with kaslr */
83 phys_addr_t ttbr1_el1
;
84 void (*reenter_kernel
)(void);
87 * We need to know where the __hyp_stub_vectors are after restore to
90 phys_addr_t __hyp_stub_vectors
;
95 static inline void arch_hdr_invariants(struct arch_hibernate_hdr_invariants
*i
)
97 memset(i
, 0, sizeof(*i
));
98 memcpy(i
->uts_version
, init_utsname()->version
, sizeof(i
->uts_version
));
101 int pfn_is_nosave(unsigned long pfn
)
103 unsigned long nosave_begin_pfn
= sym_to_pfn(&__nosave_begin
);
104 unsigned long nosave_end_pfn
= sym_to_pfn(&__nosave_end
- 1);
106 return ((pfn
>= nosave_begin_pfn
) && (pfn
<= nosave_end_pfn
)) ||
107 crash_is_nosave(pfn
);
110 void notrace
save_processor_state(void)
112 WARN_ON(num_online_cpus() != 1);
115 void notrace
restore_processor_state(void)
119 int arch_hibernation_header_save(void *addr
, unsigned int max_size
)
121 struct arch_hibernate_hdr
*hdr
= addr
;
123 if (max_size
< sizeof(*hdr
))
126 arch_hdr_invariants(&hdr
->invariants
);
127 hdr
->ttbr1_el1
= __pa_symbol(swapper_pg_dir
);
128 hdr
->reenter_kernel
= _cpu_resume
;
130 /* We can't use __hyp_get_vectors() because kvm may still be loaded */
131 if (el2_reset_needed())
132 hdr
->__hyp_stub_vectors
= __pa_symbol(__hyp_stub_vectors
);
134 hdr
->__hyp_stub_vectors
= 0;
136 /* Save the mpidr of the cpu we called cpu_suspend() on... */
138 pr_err("Failing to hibernate on an unknown CPU.\n");
141 hdr
->sleep_cpu_mpidr
= cpu_logical_map(sleep_cpu
);
142 pr_info("Hibernating on CPU %d [mpidr:0x%llx]\n", sleep_cpu
,
143 hdr
->sleep_cpu_mpidr
);
147 EXPORT_SYMBOL(arch_hibernation_header_save
);
149 int arch_hibernation_header_restore(void *addr
)
152 struct arch_hibernate_hdr_invariants invariants
;
153 struct arch_hibernate_hdr
*hdr
= addr
;
155 arch_hdr_invariants(&invariants
);
156 if (memcmp(&hdr
->invariants
, &invariants
, sizeof(invariants
))) {
157 pr_crit("Hibernate image not generated by this kernel!\n");
161 sleep_cpu
= get_logical_index(hdr
->sleep_cpu_mpidr
);
162 pr_info("Hibernated on CPU %d [mpidr:0x%llx]\n", sleep_cpu
,
163 hdr
->sleep_cpu_mpidr
);
165 pr_crit("Hibernated on a CPU not known to this kernel!\n");
169 if (!cpu_online(sleep_cpu
)) {
170 pr_info("Hibernated on a CPU that is offline! Bringing CPU up.\n");
171 ret
= cpu_up(sleep_cpu
);
173 pr_err("Failed to bring hibernate-CPU up!\n");
183 EXPORT_SYMBOL(arch_hibernation_header_restore
);
185 static int trans_pgd_map_page(pgd_t
*trans_pgd
, void *page
,
186 unsigned long dst_addr
,
194 pgdp
= pgd_offset_raw(trans_pgd
, dst_addr
);
195 if (pgd_none(READ_ONCE(*pgdp
))) {
196 pudp
= (void *)get_safe_page(GFP_ATOMIC
);
199 pgd_populate(&init_mm
, pgdp
, pudp
);
202 pudp
= pud_offset(pgdp
, dst_addr
);
203 if (pud_none(READ_ONCE(*pudp
))) {
204 pmdp
= (void *)get_safe_page(GFP_ATOMIC
);
207 pud_populate(&init_mm
, pudp
, pmdp
);
210 pmdp
= pmd_offset(pudp
, dst_addr
);
211 if (pmd_none(READ_ONCE(*pmdp
))) {
212 ptep
= (void *)get_safe_page(GFP_ATOMIC
);
215 pmd_populate_kernel(&init_mm
, pmdp
, ptep
);
218 ptep
= pte_offset_kernel(pmdp
, dst_addr
);
219 set_pte(ptep
, pfn_pte(virt_to_pfn(page
), PAGE_KERNEL_EXEC
));
225 * Copies length bytes, starting at src_start into an new page,
226 * perform cache maintenance, then maps it at the specified address low
227 * address as executable.
229 * This is used by hibernate to copy the code it needs to execute when
230 * overwriting the kernel text. This function generates a new set of page
231 * tables, which it loads into ttbr0.
233 * Length is provided as we probably only want 4K of data, even on a 64K
236 static int create_safe_exec_page(void *src_start
, size_t length
,
237 unsigned long dst_addr
,
238 phys_addr_t
*phys_dst_addr
)
240 void *page
= (void *)get_safe_page(GFP_ATOMIC
);
247 memcpy(page
, src_start
, length
);
248 __flush_icache_range((unsigned long)page
, (unsigned long)page
+ length
);
250 trans_pgd
= (void *)get_safe_page(GFP_ATOMIC
);
254 rc
= trans_pgd_map_page(trans_pgd
, page
, dst_addr
,
260 * Load our new page tables. A strict BBM approach requires that we
261 * ensure that TLBs are free of any entries that may overlap with the
262 * global mappings we are about to install.
264 * For a real hibernate/resume cycle TTBR0 currently points to a zero
265 * page, but TLBs may contain stale ASID-tagged entries (e.g. for EFI
266 * runtime services), while for a userspace-driven test_resume cycle it
267 * points to userspace page tables (and we must point it at a zero page
268 * ourselves). Elsewhere we only (un)install the idmap with preemption
269 * disabled, so T0SZ should be as required regardless.
271 cpu_set_reserved_ttbr0();
272 local_flush_tlb_all();
273 write_sysreg(phys_to_ttbr(virt_to_phys(trans_pgd
)), ttbr0_el1
);
276 *phys_dst_addr
= virt_to_phys(page
);
281 #define dcache_clean_range(start, end) __flush_dcache_area(start, (end - start))
283 int swsusp_arch_suspend(void)
287 struct sleep_stack_data state
;
289 if (cpus_are_stuck_in_kernel()) {
290 pr_err("Can't hibernate: no mechanism to offline secondary CPUs.\n");
294 flags
= local_daif_save();
296 if (__cpu_suspend_enter(&state
)) {
297 /* make the crash dump kernel image visible/saveable */
298 crash_prepare_suspend();
300 sleep_cpu
= smp_processor_id();
303 /* Clean kernel core startup/idle code to PoC*/
304 dcache_clean_range(__mmuoff_data_start
, __mmuoff_data_end
);
305 dcache_clean_range(__idmap_text_start
, __idmap_text_end
);
307 /* Clean kvm setup code to PoC? */
308 if (el2_reset_needed()) {
309 dcache_clean_range(__hyp_idmap_text_start
, __hyp_idmap_text_end
);
310 dcache_clean_range(__hyp_text_start
, __hyp_text_end
);
313 /* make the crash dump kernel image protected again */
317 * Tell the hibernation core that we've just restored
323 __cpu_suspend_exit();
326 * Just in case the boot kernel did turn the SSBD
327 * mitigation off behind our back, let's set the state
328 * to what we expect it to be.
330 switch (arm64_get_ssbd_state()) {
331 case ARM64_SSBD_FORCE_ENABLE
:
332 case ARM64_SSBD_KERNEL
:
333 arm64_set_ssbd_mitigation(true);
337 local_daif_restore(flags
);
342 static void _copy_pte(pte_t
*dst_ptep
, pte_t
*src_ptep
, unsigned long addr
)
344 pte_t pte
= READ_ONCE(*src_ptep
);
346 if (pte_valid(pte
)) {
348 * Resume will overwrite areas that may be marked
349 * read only (code, rodata). Clear the RDONLY bit from
350 * the temporary mappings we use during restore.
352 set_pte(dst_ptep
, pte_mkwrite(pte
));
353 } else if (debug_pagealloc_enabled() && !pte_none(pte
)) {
355 * debug_pagealloc will removed the PTE_VALID bit if
356 * the page isn't in use by the resume kernel. It may have
357 * been in use by the original kernel, in which case we need
358 * to put it back in our copy to do the restore.
360 * Before marking this entry valid, check the pfn should
363 BUG_ON(!pfn_valid(pte_pfn(pte
)));
365 set_pte(dst_ptep
, pte_mkpresent(pte_mkwrite(pte
)));
369 static int copy_pte(pmd_t
*dst_pmdp
, pmd_t
*src_pmdp
, unsigned long start
,
374 unsigned long addr
= start
;
376 dst_ptep
= (pte_t
*)get_safe_page(GFP_ATOMIC
);
379 pmd_populate_kernel(&init_mm
, dst_pmdp
, dst_ptep
);
380 dst_ptep
= pte_offset_kernel(dst_pmdp
, start
);
382 src_ptep
= pte_offset_kernel(src_pmdp
, start
);
384 _copy_pte(dst_ptep
, src_ptep
, addr
);
385 } while (dst_ptep
++, src_ptep
++, addr
+= PAGE_SIZE
, addr
!= end
);
390 static int copy_pmd(pud_t
*dst_pudp
, pud_t
*src_pudp
, unsigned long start
,
396 unsigned long addr
= start
;
398 if (pud_none(READ_ONCE(*dst_pudp
))) {
399 dst_pmdp
= (pmd_t
*)get_safe_page(GFP_ATOMIC
);
402 pud_populate(&init_mm
, dst_pudp
, dst_pmdp
);
404 dst_pmdp
= pmd_offset(dst_pudp
, start
);
406 src_pmdp
= pmd_offset(src_pudp
, start
);
408 pmd_t pmd
= READ_ONCE(*src_pmdp
);
410 next
= pmd_addr_end(addr
, end
);
413 if (pmd_table(pmd
)) {
414 if (copy_pte(dst_pmdp
, src_pmdp
, addr
, next
))
418 __pmd(pmd_val(pmd
) & ~PMD_SECT_RDONLY
));
420 } while (dst_pmdp
++, src_pmdp
++, addr
= next
, addr
!= end
);
425 static int copy_pud(pgd_t
*dst_pgdp
, pgd_t
*src_pgdp
, unsigned long start
,
431 unsigned long addr
= start
;
433 if (pgd_none(READ_ONCE(*dst_pgdp
))) {
434 dst_pudp
= (pud_t
*)get_safe_page(GFP_ATOMIC
);
437 pgd_populate(&init_mm
, dst_pgdp
, dst_pudp
);
439 dst_pudp
= pud_offset(dst_pgdp
, start
);
441 src_pudp
= pud_offset(src_pgdp
, start
);
443 pud_t pud
= READ_ONCE(*src_pudp
);
445 next
= pud_addr_end(addr
, end
);
448 if (pud_table(pud
)) {
449 if (copy_pmd(dst_pudp
, src_pudp
, addr
, next
))
453 __pud(pud_val(pud
) & ~PUD_SECT_RDONLY
));
455 } while (dst_pudp
++, src_pudp
++, addr
= next
, addr
!= end
);
460 static int copy_page_tables(pgd_t
*dst_pgdp
, unsigned long start
,
464 unsigned long addr
= start
;
465 pgd_t
*src_pgdp
= pgd_offset_k(start
);
467 dst_pgdp
= pgd_offset_raw(dst_pgdp
, start
);
469 next
= pgd_addr_end(addr
, end
);
470 if (pgd_none(READ_ONCE(*src_pgdp
)))
472 if (copy_pud(dst_pgdp
, src_pgdp
, addr
, next
))
474 } while (dst_pgdp
++, src_pgdp
++, addr
= next
, addr
!= end
);
479 static int trans_pgd_create_copy(pgd_t
**dst_pgdp
, unsigned long start
,
483 pgd_t
*trans_pgd
= (pgd_t
*)get_safe_page(GFP_ATOMIC
);
486 pr_err("Failed to allocate memory for temporary page tables.\n");
490 rc
= copy_page_tables(trans_pgd
, start
, end
);
492 *dst_pgdp
= trans_pgd
;
498 * Setup then Resume from the hibernate image using swsusp_arch_suspend_exit().
500 * Memory allocated by get_safe_page() will be dealt with by the hibernate code,
501 * we don't need to free it here.
503 int swsusp_arch_resume(void)
509 phys_addr_t phys_hibernate_exit
;
510 void __noreturn (*hibernate_exit
)(phys_addr_t
, phys_addr_t
, void *,
511 void *, phys_addr_t
, phys_addr_t
);
514 * Restoring the memory image will overwrite the ttbr1 page tables.
515 * Create a second copy of just the linear map, and use this when
518 rc
= trans_pgd_create_copy(&tmp_pg_dir
, PAGE_OFFSET
, PAGE_END
);
523 * We need a zero page that is zero before & after resume in order to
524 * to break before make on the ttbr1 page tables.
526 zero_page
= (void *)get_safe_page(GFP_ATOMIC
);
528 pr_err("Failed to allocate zero page.\n");
533 * Locate the exit code in the bottom-but-one page, so that *NULL
534 * still has disastrous affects.
536 hibernate_exit
= (void *)PAGE_SIZE
;
537 exit_size
= __hibernate_exit_text_end
- __hibernate_exit_text_start
;
539 * Copy swsusp_arch_suspend_exit() to a safe page. This will generate
540 * a new set of ttbr0 page tables and load them.
542 rc
= create_safe_exec_page(__hibernate_exit_text_start
, exit_size
,
543 (unsigned long)hibernate_exit
,
544 &phys_hibernate_exit
);
546 pr_err("Failed to create safe executable page for hibernate_exit code.\n");
551 * The hibernate exit text contains a set of el2 vectors, that will
552 * be executed at el2 with the mmu off in order to reload hyp-stub.
554 __flush_dcache_area(hibernate_exit
, exit_size
);
557 * KASLR will cause the el2 vectors to be in a different location in
558 * the resumed kernel. Load hibernate's temporary copy into el2.
560 * We can skip this step if we booted at EL1, or are running with VHE.
562 if (el2_reset_needed()) {
563 phys_addr_t el2_vectors
= phys_hibernate_exit
; /* base */
564 el2_vectors
+= hibernate_el2_vectors
-
565 __hibernate_exit_text_start
; /* offset */
567 __hyp_set_vectors(el2_vectors
);
570 hibernate_exit(virt_to_phys(tmp_pg_dir
), resume_hdr
.ttbr1_el1
,
571 resume_hdr
.reenter_kernel
, restore_pblist
,
572 resume_hdr
.__hyp_stub_vectors
, virt_to_phys(zero_page
));
577 int hibernate_resume_nonboot_cpu_disable(void)
580 pr_err("Failing to resume from hibernate on an unknown CPU.\n");
584 return freeze_secondary_cpus(sleep_cpu
);