1 // SPDX-License-Identifier: GPL-2.0-or-later
3 ** IA64 System Bus Adapter (SBA) I/O MMU manager
5 ** (c) Copyright 2002-2005 Alex Williamson
6 ** (c) Copyright 2002-2003 Grant Grundler
7 ** (c) Copyright 2002-2005 Hewlett-Packard Company
9 ** Portions (c) 2000 Grant Grundler (from parisc I/O MMU code)
10 ** Portions (c) 1999 Dave S. Miller (from sparc64 I/O MMU code)
14 ** This module initializes the IOC (I/O Controller) found on HP
15 ** McKinley machines and their successors.
19 #include <linux/types.h>
20 #include <linux/kernel.h>
21 #include <linux/module.h>
22 #include <linux/spinlock.h>
23 #include <linux/slab.h>
24 #include <linux/init.h>
26 #include <linux/string.h>
27 #include <linux/pci.h>
28 #include <linux/proc_fs.h>
29 #include <linux/seq_file.h>
30 #include <linux/acpi.h>
31 #include <linux/efi.h>
32 #include <linux/nodemask.h>
33 #include <linux/bitops.h> /* hweight64() */
34 #include <linux/crash_dump.h>
35 #include <linux/iommu-helper.h>
36 #include <linux/dma-mapping.h>
37 #include <linux/prefetch.h>
38 #include <linux/swiotlb.h>
40 #include <asm/delay.h> /* ia64_get_itc() */
42 #include <asm/page.h> /* PAGE_OFFSET */
45 #include <asm/acpi-ext.h>
50 ** Enabling timing search of the pdir resource map. Output in /proc.
51 ** Disabled by default to optimize performance.
53 #undef PDIR_SEARCH_TIMING
56 ** This option allows cards capable of 64bit DMA to bypass the IOMMU. If
57 ** not defined, all DMA will be 32bit and go through the TLB.
58 ** There's potentially a conflict in the bio merge code with us
59 ** advertising an iommu, but then bypassing it. Since I/O MMU bypassing
60 ** appears to give more performance than bio-level virtual merging, we'll
61 ** do the former for now. NOTE: BYPASS_SG also needs to be undef'd to
62 ** completely restrict DMA to the IOMMU.
64 #define ALLOW_IOV_BYPASS
67 ** This option specifically allows/disallows bypassing scatterlists with
68 ** multiple entries. Coalescing these entries can allow better DMA streaming
69 ** and in some cases shows better performance than entirely bypassing the
70 ** IOMMU. Performance increase on the order of 1-2% sequential output/input
71 ** using bonnie++ on a RAID0 MD device (sym2 & mpt).
73 #undef ALLOW_IOV_BYPASS_SG
76 ** If a device prefetches beyond the end of a valid pdir entry, it will cause
77 ** a hard failure, ie. MCA. Version 3.0 and later of the zx1 LBA should
78 ** disconnect on 4k boundaries and prevent such issues. If the device is
79 ** particularly aggressive, this option will keep the entire pdir valid such
80 ** that prefetching will hit a valid address. This could severely impact
81 ** error containment, and is therefore off by default. The page that is
82 ** used for spill-over is poisoned, so that should help debugging somewhat.
84 #undef FULL_VALID_PDIR
86 #define ENABLE_MARK_CLEAN
89 ** The number of debug flags is a clue - this code is fragile. NOTE: since
90 ** tightening the use of res_lock the resource bitmap and actual pdir are no
91 ** longer guaranteed to stay in sync. The sanity checking code isn't going to
96 #undef DEBUG_SBA_RUN_SG
97 #undef DEBUG_SBA_RESOURCE
98 #undef ASSERT_PDIR_SANITY
99 #undef DEBUG_LARGE_SG_ENTRIES
102 #if defined(FULL_VALID_PDIR) && defined(ASSERT_PDIR_SANITY)
103 #error FULL_VALID_PDIR and ASSERT_PDIR_SANITY are mutually exclusive
106 #define SBA_INLINE __inline__
107 /* #define SBA_INLINE */
109 #ifdef DEBUG_SBA_INIT
110 #define DBG_INIT(x...) printk(x)
112 #define DBG_INIT(x...)
116 #define DBG_RUN(x...) printk(x)
118 #define DBG_RUN(x...)
121 #ifdef DEBUG_SBA_RUN_SG
122 #define DBG_RUN_SG(x...) printk(x)
124 #define DBG_RUN_SG(x...)
128 #ifdef DEBUG_SBA_RESOURCE
129 #define DBG_RES(x...) printk(x)
131 #define DBG_RES(x...)
135 #define DBG_BYPASS(x...) printk(x)
137 #define DBG_BYPASS(x...)
140 #ifdef ASSERT_PDIR_SANITY
141 #define ASSERT(expr) \
143 printk( "\n" __FILE__ ":%d: Assertion " #expr " failed!\n",__LINE__); \
151 ** The number of pdir entries to "free" before issuing
152 ** a read to PCOM register to flush out PCOM writes.
153 ** Interacts with allocation granularity (ie 4 or 8 entries
154 ** allocated and free'd/purged at a time might make this
155 ** less interesting).
157 #define DELAYED_RESOURCE_CNT 64
159 #define PCI_DEVICE_ID_HP_SX2000_IOC 0x12ec
161 #define ZX1_IOC_ID ((PCI_DEVICE_ID_HP_ZX1_IOC << 16) | PCI_VENDOR_ID_HP)
162 #define ZX2_IOC_ID ((PCI_DEVICE_ID_HP_ZX2_IOC << 16) | PCI_VENDOR_ID_HP)
163 #define REO_IOC_ID ((PCI_DEVICE_ID_HP_REO_IOC << 16) | PCI_VENDOR_ID_HP)
164 #define SX1000_IOC_ID ((PCI_DEVICE_ID_HP_SX1000_IOC << 16) | PCI_VENDOR_ID_HP)
165 #define SX2000_IOC_ID ((PCI_DEVICE_ID_HP_SX2000_IOC << 16) | PCI_VENDOR_ID_HP)
167 #define ZX1_IOC_OFFSET 0x1000 /* ACPI reports SBA, we want IOC */
169 #define IOC_FUNC_ID 0x000
170 #define IOC_FCLASS 0x008 /* function class, bist, header, rev... */
171 #define IOC_IBASE 0x300 /* IO TLB */
172 #define IOC_IMASK 0x308
173 #define IOC_PCOM 0x310
174 #define IOC_TCNFG 0x318
175 #define IOC_PDIR_BASE 0x320
177 #define IOC_ROPE0_CFG 0x500
178 #define IOC_ROPE_AO 0x10 /* Allow "Relaxed Ordering" */
181 /* AGP GART driver looks for this */
182 #define ZX1_SBA_IOMMU_COOKIE 0x0000badbadc0ffeeUL
185 ** The zx1 IOC supports 4/8/16/64KB page sizes (see TCNFG register)
187 ** Some IOCs (sx1000) can run at the above pages sizes, but are
188 ** really only supported using the IOC at a 4k page size.
190 ** iovp_size could only be greater than PAGE_SIZE if we are
191 ** confident the drivers really only touch the next physical
192 ** page iff that driver instance owns it.
194 static unsigned long iovp_size
;
195 static unsigned long iovp_shift
;
196 static unsigned long iovp_mask
;
199 void __iomem
*ioc_hpa
; /* I/O MMU base address */
200 char *res_map
; /* resource map, bit == pdir entry */
201 u64
*pdir_base
; /* physical base address */
202 unsigned long ibase
; /* pdir IOV Space base */
203 unsigned long imask
; /* pdir IOV Space mask */
205 unsigned long *res_hint
; /* next avail IOVP - circular search */
206 unsigned long dma_mask
;
207 spinlock_t res_lock
; /* protects the resource bitmap, but must be held when */
208 /* clearing pdir to prevent races with allocations. */
209 unsigned int res_bitshift
; /* from the RIGHT! */
210 unsigned int res_size
; /* size of resource map in bytes */
212 unsigned int node
; /* node where this IOC lives */
214 #if DELAYED_RESOURCE_CNT > 0
215 spinlock_t saved_lock
; /* may want to try to get this on a separate cacheline */
216 /* than res_lock for bigger systems. */
218 struct sba_dma_pair
{
221 } saved
[DELAYED_RESOURCE_CNT
];
224 #ifdef PDIR_SEARCH_TIMING
225 #define SBA_SEARCH_SAMPLE 0x100
226 unsigned long avg_search
[SBA_SEARCH_SAMPLE
];
227 unsigned long avg_idx
; /* current index into avg_search */
230 /* Stuff we don't need in performance path */
231 struct ioc
*next
; /* list of IOC's in system */
232 acpi_handle handle
; /* for multiple IOC's */
234 unsigned int func_id
;
235 unsigned int rev
; /* HW revision of chip */
237 unsigned int pdir_size
; /* in bytes, determined by IOV Space size */
238 struct pci_dev
*sac_only_dev
;
241 static struct ioc
*ioc_list
, *ioc_found
;
242 static int reserve_sba_gart
= 1;
244 static SBA_INLINE
void sba_mark_invalid(struct ioc
*, dma_addr_t
, size_t);
245 static SBA_INLINE
void sba_free_range(struct ioc
*, dma_addr_t
, size_t);
247 #define sba_sg_address(sg) sg_virt((sg))
249 #ifdef FULL_VALID_PDIR
250 static u64 prefetch_spill_page
;
253 #define GET_IOC(dev) ((dev_is_pci(dev)) \
254 ? ((struct ioc *) PCI_CONTROLLER(to_pci_dev(dev))->iommu) : NULL)
257 ** DMA_CHUNK_SIZE is used by the SCSI mid-layer to break up
258 ** (or rather not merge) DMAs into manageable chunks.
259 ** On parisc, this is more of the software/tuning constraint
260 ** rather than the HW. I/O MMU allocation algorithms can be
261 ** faster with smaller sizes (to some degree).
263 #define DMA_CHUNK_SIZE (BITS_PER_LONG*iovp_size)
265 #define ROUNDUP(x,y) ((x + ((y)-1)) & ~((y)-1))
267 /************************************
268 ** SBA register read and write support
270 ** BE WARNED: register writes are posted.
271 ** (ie follow writes which must reach HW with a read)
274 #define READ_REG(addr) __raw_readq(addr)
275 #define WRITE_REG(val, addr) __raw_writeq(val, addr)
277 #ifdef DEBUG_SBA_INIT
280 * sba_dump_tlb - debugging only - print IOMMU operating parameters
281 * @hpa: base address of the IOMMU
283 * Print the size/location of the IO MMU PDIR.
286 sba_dump_tlb(char *hpa
)
288 DBG_INIT("IO TLB at 0x%p\n", (void *)hpa
);
289 DBG_INIT("IOC_IBASE : %016lx\n", READ_REG(hpa
+IOC_IBASE
));
290 DBG_INIT("IOC_IMASK : %016lx\n", READ_REG(hpa
+IOC_IMASK
));
291 DBG_INIT("IOC_TCNFG : %016lx\n", READ_REG(hpa
+IOC_TCNFG
));
292 DBG_INIT("IOC_PDIR_BASE: %016lx\n", READ_REG(hpa
+IOC_PDIR_BASE
));
298 #ifdef ASSERT_PDIR_SANITY
301 * sba_dump_pdir_entry - debugging only - print one IOMMU PDIR entry
302 * @ioc: IO MMU structure which owns the pdir we are interested in.
303 * @msg: text to print ont the output line.
306 * Print one entry of the IO MMU PDIR in human readable form.
309 sba_dump_pdir_entry(struct ioc
*ioc
, char *msg
, uint pide
)
311 /* start printing from lowest pde in rval */
312 u64
*ptr
= &ioc
->pdir_base
[pide
& ~(BITS_PER_LONG
- 1)];
313 unsigned long *rptr
= (unsigned long *) &ioc
->res_map
[(pide
>>3) & -sizeof(unsigned long)];
316 printk(KERN_DEBUG
"SBA: %s rp %p bit %d rval 0x%lx\n",
317 msg
, rptr
, pide
& (BITS_PER_LONG
- 1), *rptr
);
320 while (rcnt
< BITS_PER_LONG
) {
321 printk(KERN_DEBUG
"%s %2d %p %016Lx\n",
322 (rcnt
== (pide
& (BITS_PER_LONG
- 1)))
324 rcnt
, ptr
, (unsigned long long) *ptr
);
328 printk(KERN_DEBUG
"%s", msg
);
333 * sba_check_pdir - debugging only - consistency checker
334 * @ioc: IO MMU structure which owns the pdir we are interested in.
335 * @msg: text to print ont the output line.
337 * Verify the resource map and pdir state is consistent
340 sba_check_pdir(struct ioc
*ioc
, char *msg
)
342 u64
*rptr_end
= (u64
*) &(ioc
->res_map
[ioc
->res_size
]);
343 u64
*rptr
= (u64
*) ioc
->res_map
; /* resource map ptr */
344 u64
*pptr
= ioc
->pdir_base
; /* pdir ptr */
347 while (rptr
< rptr_end
) {
349 int rcnt
; /* number of bits we might check */
355 /* Get last byte and highest bit from that */
356 u32 pde
= ((u32
)((*pptr
>> (63)) & 0x1));
357 if ((rval
& 0x1) ^ pde
)
360 ** BUMMER! -- res_map != pdir --
361 ** Dump rval and matching pdir entries
363 sba_dump_pdir_entry(ioc
, msg
, pide
);
367 rval
>>= 1; /* try the next bit */
371 rptr
++; /* look at next word of res_map */
373 /* It'd be nice if we always got here :^) */
379 * sba_dump_sg - debugging only - print Scatter-Gather list
380 * @ioc: IO MMU structure which owns the pdir we are interested in.
381 * @startsg: head of the SG list
382 * @nents: number of entries in SG list
384 * print the SG list so we can verify it's correct by hand.
387 sba_dump_sg( struct ioc
*ioc
, struct scatterlist
*startsg
, int nents
)
389 while (nents
-- > 0) {
390 printk(KERN_DEBUG
" %d : DMA %08lx/%05x CPU %p\n", nents
,
391 startsg
->dma_address
, startsg
->dma_length
,
392 sba_sg_address(startsg
));
393 startsg
= sg_next(startsg
);
398 sba_check_sg( struct ioc
*ioc
, struct scatterlist
*startsg
, int nents
)
400 struct scatterlist
*the_sg
= startsg
;
401 int the_nents
= nents
;
403 while (the_nents
-- > 0) {
404 if (sba_sg_address(the_sg
) == 0x0UL
)
405 sba_dump_sg(NULL
, startsg
, nents
);
406 the_sg
= sg_next(the_sg
);
410 #endif /* ASSERT_PDIR_SANITY */
415 /**************************************************************
417 * I/O Pdir Resource Management
419 * Bits set in the resource map are in use.
420 * Each bit can represent a number of pages.
421 * LSbs represent lower addresses (IOVA's).
423 ***************************************************************/
424 #define PAGES_PER_RANGE 1 /* could increase this to 4 or 8 if needed */
426 /* Convert from IOVP to IOVA and vice versa. */
427 #define SBA_IOVA(ioc,iovp,offset) ((ioc->ibase) | (iovp) | (offset))
428 #define SBA_IOVP(ioc,iova) ((iova) & ~(ioc->ibase))
430 #define PDIR_ENTRY_SIZE sizeof(u64)
432 #define PDIR_INDEX(iovp) ((iovp)>>iovp_shift)
434 #define RESMAP_MASK(n) ~(~0UL << (n))
435 #define RESMAP_IDX_MASK (sizeof(unsigned long) - 1)
439 * For most cases the normal get_order is sufficient, however it limits us
440 * to PAGE_SIZE being the minimum mapping alignment and TC flush granularity.
441 * It only incurs about 1 clock cycle to use this one with the static variable
442 * and makes the code more intuitive.
444 static SBA_INLINE
int
445 get_iovp_order (unsigned long size
)
447 long double d
= size
- 1;
450 order
= ia64_getf_exp(d
);
451 order
= order
- iovp_shift
- 0xffff + 1;
457 static unsigned long ptr_to_pide(struct ioc
*ioc
, unsigned long *res_ptr
,
458 unsigned int bitshiftcnt
)
460 return (((unsigned long)res_ptr
- (unsigned long)ioc
->res_map
) << 3)
465 * sba_search_bitmap - find free space in IO PDIR resource bitmap
466 * @ioc: IO MMU structure which owns the pdir we are interested in.
467 * @bits_wanted: number of entries we need.
468 * @use_hint: use res_hint to indicate where to start looking
470 * Find consecutive free bits in resource bitmap.
471 * Each bit represents one entry in the IO Pdir.
472 * Cool perf optimization: search for log2(size) bits at a time.
474 static SBA_INLINE
unsigned long
475 sba_search_bitmap(struct ioc
*ioc
, struct device
*dev
,
476 unsigned long bits_wanted
, int use_hint
)
478 unsigned long *res_ptr
;
479 unsigned long *res_end
= (unsigned long *) &(ioc
->res_map
[ioc
->res_size
]);
480 unsigned long flags
, pide
= ~0UL, tpide
;
481 unsigned long boundary_size
;
485 ASSERT(((unsigned long) ioc
->res_hint
& (sizeof(unsigned long) - 1UL)) == 0);
486 ASSERT(res_ptr
< res_end
);
488 boundary_size
= (unsigned long long)dma_get_seg_boundary(dev
) + 1;
489 boundary_size
= ALIGN(boundary_size
, 1ULL << iovp_shift
) >> iovp_shift
;
491 BUG_ON(ioc
->ibase
& ~iovp_mask
);
492 shift
= ioc
->ibase
>> iovp_shift
;
494 spin_lock_irqsave(&ioc
->res_lock
, flags
);
496 /* Allow caller to force a search through the entire resource space */
497 if (likely(use_hint
)) {
498 res_ptr
= ioc
->res_hint
;
500 res_ptr
= (ulong
*)ioc
->res_map
;
501 ioc
->res_bitshift
= 0;
505 * N.B. REO/Grande defect AR2305 can cause TLB fetch timeouts
506 * if a TLB entry is purged while in use. sba_mark_invalid()
507 * purges IOTLB entries in power-of-two sizes, so we also
508 * allocate IOVA space in power-of-two sizes.
510 bits_wanted
= 1UL << get_iovp_order(bits_wanted
<< iovp_shift
);
512 if (likely(bits_wanted
== 1)) {
513 unsigned int bitshiftcnt
;
514 for(; res_ptr
< res_end
; res_ptr
++) {
515 if (likely(*res_ptr
!= ~0UL)) {
516 bitshiftcnt
= ffz(*res_ptr
);
517 *res_ptr
|= (1UL << bitshiftcnt
);
518 pide
= ptr_to_pide(ioc
, res_ptr
, bitshiftcnt
);
519 ioc
->res_bitshift
= bitshiftcnt
+ bits_wanted
;
527 if (likely(bits_wanted
<= BITS_PER_LONG
/2)) {
529 ** Search the resource bit map on well-aligned values.
530 ** "o" is the alignment.
531 ** We need the alignment to invalidate I/O TLB using
532 ** SBA HW features in the unmap path.
534 unsigned long o
= 1 << get_iovp_order(bits_wanted
<< iovp_shift
);
535 uint bitshiftcnt
= ROUNDUP(ioc
->res_bitshift
, o
);
536 unsigned long mask
, base_mask
;
538 base_mask
= RESMAP_MASK(bits_wanted
);
539 mask
= base_mask
<< bitshiftcnt
;
541 DBG_RES("%s() o %ld %p", __func__
, o
, res_ptr
);
542 for(; res_ptr
< res_end
; res_ptr
++)
544 DBG_RES(" %p %lx %lx\n", res_ptr
, mask
, *res_ptr
);
546 for (; mask
; mask
<<= o
, bitshiftcnt
+= o
) {
547 tpide
= ptr_to_pide(ioc
, res_ptr
, bitshiftcnt
);
548 ret
= iommu_is_span_boundary(tpide
, bits_wanted
,
551 if ((0 == ((*res_ptr
) & mask
)) && !ret
) {
552 *res_ptr
|= mask
; /* mark resources busy! */
554 ioc
->res_bitshift
= bitshiftcnt
+ bits_wanted
;
568 qwords
= bits_wanted
>> 6; /* /64 */
569 bits
= bits_wanted
- (qwords
* BITS_PER_LONG
);
571 end
= res_end
- qwords
;
573 for (; res_ptr
< end
; res_ptr
++) {
574 tpide
= ptr_to_pide(ioc
, res_ptr
, 0);
575 ret
= iommu_is_span_boundary(tpide
, bits_wanted
,
576 shift
, boundary_size
);
579 for (i
= 0 ; i
< qwords
; i
++) {
583 if (bits
&& res_ptr
[i
] && (__ffs(res_ptr
[i
]) < bits
))
586 /* Found it, mark it */
587 for (i
= 0 ; i
< qwords
; i
++)
589 res_ptr
[i
] |= RESMAP_MASK(bits
);
593 ioc
->res_bitshift
= bits
;
601 prefetch(ioc
->res_map
);
602 ioc
->res_hint
= (unsigned long *) ioc
->res_map
;
603 ioc
->res_bitshift
= 0;
604 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
608 ioc
->res_hint
= res_ptr
;
609 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
615 * sba_alloc_range - find free bits and mark them in IO PDIR resource bitmap
616 * @ioc: IO MMU structure which owns the pdir we are interested in.
617 * @size: number of bytes to create a mapping for
619 * Given a size, find consecutive unmarked and then mark those bits in the
623 sba_alloc_range(struct ioc
*ioc
, struct device
*dev
, size_t size
)
625 unsigned int pages_needed
= size
>> iovp_shift
;
626 #ifdef PDIR_SEARCH_TIMING
627 unsigned long itc_start
;
631 ASSERT(pages_needed
);
632 ASSERT(0 == (size
& ~iovp_mask
));
634 #ifdef PDIR_SEARCH_TIMING
635 itc_start
= ia64_get_itc();
638 ** "seek and ye shall find"...praying never hurts either...
640 pide
= sba_search_bitmap(ioc
, dev
, pages_needed
, 1);
641 if (unlikely(pide
>= (ioc
->res_size
<< 3))) {
642 pide
= sba_search_bitmap(ioc
, dev
, pages_needed
, 0);
643 if (unlikely(pide
>= (ioc
->res_size
<< 3))) {
644 #if DELAYED_RESOURCE_CNT > 0
648 ** With delayed resource freeing, we can give this one more shot. We're
649 ** getting close to being in trouble here, so do what we can to make this
652 spin_lock_irqsave(&ioc
->saved_lock
, flags
);
653 if (ioc
->saved_cnt
> 0) {
654 struct sba_dma_pair
*d
;
655 int cnt
= ioc
->saved_cnt
;
657 d
= &(ioc
->saved
[ioc
->saved_cnt
- 1]);
659 spin_lock(&ioc
->res_lock
);
661 sba_mark_invalid(ioc
, d
->iova
, d
->size
);
662 sba_free_range(ioc
, d
->iova
, d
->size
);
666 READ_REG(ioc
->ioc_hpa
+IOC_PCOM
); /* flush purges */
667 spin_unlock(&ioc
->res_lock
);
669 spin_unlock_irqrestore(&ioc
->saved_lock
, flags
);
671 pide
= sba_search_bitmap(ioc
, dev
, pages_needed
, 0);
672 if (unlikely(pide
>= (ioc
->res_size
<< 3))) {
673 printk(KERN_WARNING
"%s: I/O MMU @ %p is"
674 "out of mapping resources, %u %u %lx\n",
675 __func__
, ioc
->ioc_hpa
, ioc
->res_size
,
676 pages_needed
, dma_get_seg_boundary(dev
));
680 printk(KERN_WARNING
"%s: I/O MMU @ %p is"
681 "out of mapping resources, %u %u %lx\n",
682 __func__
, ioc
->ioc_hpa
, ioc
->res_size
,
683 pages_needed
, dma_get_seg_boundary(dev
));
689 #ifdef PDIR_SEARCH_TIMING
690 ioc
->avg_search
[ioc
->avg_idx
++] = (ia64_get_itc() - itc_start
) / pages_needed
;
691 ioc
->avg_idx
&= SBA_SEARCH_SAMPLE
- 1;
694 prefetchw(&(ioc
->pdir_base
[pide
]));
696 #ifdef ASSERT_PDIR_SANITY
697 /* verify the first enable bit is clear */
698 if(0x00 != ((u8
*) ioc
->pdir_base
)[pide
*PDIR_ENTRY_SIZE
+ 7]) {
699 sba_dump_pdir_entry(ioc
, "sba_search_bitmap() botched it?", pide
);
703 DBG_RES("%s(%x) %d -> %lx hint %x/%x\n",
704 __func__
, size
, pages_needed
, pide
,
705 (uint
) ((unsigned long) ioc
->res_hint
- (unsigned long) ioc
->res_map
),
713 * sba_free_range - unmark bits in IO PDIR resource bitmap
714 * @ioc: IO MMU structure which owns the pdir we are interested in.
715 * @iova: IO virtual address which was previously allocated.
716 * @size: number of bytes to create a mapping for
718 * clear bits in the ioc's resource map
720 static SBA_INLINE
void
721 sba_free_range(struct ioc
*ioc
, dma_addr_t iova
, size_t size
)
723 unsigned long iovp
= SBA_IOVP(ioc
, iova
);
724 unsigned int pide
= PDIR_INDEX(iovp
);
725 unsigned int ridx
= pide
>> 3; /* convert bit to byte address */
726 unsigned long *res_ptr
= (unsigned long *) &((ioc
)->res_map
[ridx
& ~RESMAP_IDX_MASK
]);
727 int bits_not_wanted
= size
>> iovp_shift
;
730 /* Round up to power-of-two size: see AR2305 note above */
731 bits_not_wanted
= 1UL << get_iovp_order(bits_not_wanted
<< iovp_shift
);
732 for (; bits_not_wanted
> 0 ; res_ptr
++) {
734 if (unlikely(bits_not_wanted
> BITS_PER_LONG
)) {
736 /* these mappings start 64bit aligned */
738 bits_not_wanted
-= BITS_PER_LONG
;
739 pide
+= BITS_PER_LONG
;
743 /* 3-bits "bit" address plus 2 (or 3) bits for "byte" == bit in word */
744 m
= RESMAP_MASK(bits_not_wanted
) << (pide
& (BITS_PER_LONG
- 1));
747 DBG_RES("%s( ,%x,%x) %x/%lx %x %p %lx\n", __func__
, (uint
) iova
, size
,
748 bits_not_wanted
, m
, pide
, res_ptr
, *res_ptr
);
751 ASSERT(bits_not_wanted
);
752 ASSERT((*res_ptr
& m
) == m
); /* verify same bits are set */
759 /**************************************************************
761 * "Dynamic DMA Mapping" support (aka "Coherent I/O")
763 ***************************************************************/
766 * sba_io_pdir_entry - fill in one IO PDIR entry
767 * @pdir_ptr: pointer to IO PDIR entry
768 * @vba: Virtual CPU address of buffer to map
770 * SBA Mapping Routine
772 * Given a virtual address (vba, arg1) sba_io_pdir_entry()
773 * loads the I/O PDIR entry pointed to by pdir_ptr (arg0).
774 * Each IO Pdir entry consists of 8 bytes as shown below
778 * +-+---------------------+----------------------------------+----+--------+
779 * |V| U | PPN[39:12] | U | FF |
780 * +-+---------------------+----------------------------------+----+--------+
784 * PPN == Physical Page Number
786 * The physical address fields are filled with the results of virt_to_phys()
791 #define sba_io_pdir_entry(pdir_ptr, vba) *pdir_ptr = ((vba & ~0xE000000000000FFFULL) \
792 | 0x8000000000000000ULL)
795 sba_io_pdir_entry(u64
*pdir_ptr
, unsigned long vba
)
797 *pdir_ptr
= ((vba
& ~0xE000000000000FFFULL
) | 0x80000000000000FFULL
);
801 #ifdef ENABLE_MARK_CLEAN
803 * Since DMA is i-cache coherent, any (complete) pages that were written via
804 * DMA can be marked as "clean" so that lazy_mmu_prot_update() doesn't have to
805 * flush them when they get mapped into an executable vm-area.
808 mark_clean (void *addr
, size_t size
)
810 unsigned long pg_addr
, end
;
812 pg_addr
= PAGE_ALIGN((unsigned long) addr
);
813 end
= (unsigned long) addr
+ size
;
814 while (pg_addr
+ PAGE_SIZE
<= end
) {
815 struct page
*page
= virt_to_page((void *)pg_addr
);
816 set_bit(PG_arch_1
, &page
->flags
);
817 pg_addr
+= PAGE_SIZE
;
823 * sba_mark_invalid - invalidate one or more IO PDIR entries
824 * @ioc: IO MMU structure which owns the pdir we are interested in.
825 * @iova: IO Virtual Address mapped earlier
826 * @byte_cnt: number of bytes this mapping covers.
828 * Marking the IO PDIR entry(ies) as Invalid and invalidate
829 * corresponding IO TLB entry. The PCOM (Purge Command Register)
830 * is to purge stale entries in the IO TLB when unmapping entries.
832 * The PCOM register supports purging of multiple pages, with a minium
833 * of 1 page and a maximum of 2GB. Hardware requires the address be
834 * aligned to the size of the range being purged. The size of the range
835 * must be a power of 2. The "Cool perf optimization" in the
836 * allocation routine helps keep that true.
838 static SBA_INLINE
void
839 sba_mark_invalid(struct ioc
*ioc
, dma_addr_t iova
, size_t byte_cnt
)
841 u32 iovp
= (u32
) SBA_IOVP(ioc
,iova
);
843 int off
= PDIR_INDEX(iovp
);
845 /* Must be non-zero and rounded up */
846 ASSERT(byte_cnt
> 0);
847 ASSERT(0 == (byte_cnt
& ~iovp_mask
));
849 #ifdef ASSERT_PDIR_SANITY
850 /* Assert first pdir entry is set */
851 if (!(ioc
->pdir_base
[off
] >> 60)) {
852 sba_dump_pdir_entry(ioc
,"sba_mark_invalid()", PDIR_INDEX(iovp
));
856 if (byte_cnt
<= iovp_size
)
858 ASSERT(off
< ioc
->pdir_size
);
860 iovp
|= iovp_shift
; /* set "size" field for PCOM */
862 #ifndef FULL_VALID_PDIR
864 ** clear I/O PDIR entry "valid" bit
865 ** Do NOT clear the rest - save it for debugging.
866 ** We should only clear bits that have previously
869 ioc
->pdir_base
[off
] &= ~(0x80000000000000FFULL
);
872 ** If we want to maintain the PDIR as valid, put in
873 ** the spill page so devices prefetching won't
874 ** cause a hard fail.
876 ioc
->pdir_base
[off
] = (0x80000000000000FFULL
| prefetch_spill_page
);
879 u32 t
= get_iovp_order(byte_cnt
) + iovp_shift
;
882 ASSERT(t
<= 31); /* 2GB! Max value of "size" field */
885 /* verify this pdir entry is enabled */
886 ASSERT(ioc
->pdir_base
[off
] >> 63);
887 #ifndef FULL_VALID_PDIR
888 /* clear I/O Pdir entry "valid" bit first */
889 ioc
->pdir_base
[off
] &= ~(0x80000000000000FFULL
);
891 ioc
->pdir_base
[off
] = (0x80000000000000FFULL
| prefetch_spill_page
);
894 byte_cnt
-= iovp_size
;
895 } while (byte_cnt
> 0);
898 WRITE_REG(iovp
| ioc
->ibase
, ioc
->ioc_hpa
+IOC_PCOM
);
902 * sba_map_page - map one buffer and return IOVA for DMA
903 * @dev: instance of PCI owned by the driver that's asking.
905 * @poff: offset into page
906 * @size: number of bytes to map
907 * @dir: dma direction
908 * @attrs: optional dma attributes
910 * See Documentation/DMA-API-HOWTO.txt
912 static dma_addr_t
sba_map_page(struct device
*dev
, struct page
*page
,
913 unsigned long poff
, size_t size
,
914 enum dma_data_direction dir
,
918 void *addr
= page_address(page
) + poff
;
923 #ifdef ASSERT_PDIR_SANITY
926 #ifdef ALLOW_IOV_BYPASS
927 unsigned long pci_addr
= virt_to_phys(addr
);
930 #ifdef ALLOW_IOV_BYPASS
931 ASSERT(to_pci_dev(dev
)->dma_mask
);
933 ** Check if the PCI device can DMA to ptr... if so, just return ptr
935 if (likely((pci_addr
& ~to_pci_dev(dev
)->dma_mask
) == 0)) {
937 ** Device is bit capable of DMA'ing to the buffer...
938 ** just return the PCI address of ptr
940 DBG_BYPASS("sba_map_page() bypass mask/addr: "
942 to_pci_dev(dev
)->dma_mask
, pci_addr
);
949 prefetch(ioc
->res_hint
);
952 ASSERT(size
<= DMA_CHUNK_SIZE
);
954 /* save offset bits */
955 offset
= ((dma_addr_t
) (long) addr
) & ~iovp_mask
;
957 /* round up to nearest iovp_size */
958 size
= (size
+ offset
+ ~iovp_mask
) & iovp_mask
;
960 #ifdef ASSERT_PDIR_SANITY
961 spin_lock_irqsave(&ioc
->res_lock
, flags
);
962 if (sba_check_pdir(ioc
,"Check before sba_map_page()"))
963 panic("Sanity check failed");
964 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
967 pide
= sba_alloc_range(ioc
, dev
, size
);
969 return DMA_MAPPING_ERROR
;
971 iovp
= (dma_addr_t
) pide
<< iovp_shift
;
973 DBG_RUN("%s() 0x%p -> 0x%lx\n", __func__
, addr
, (long) iovp
| offset
);
975 pdir_start
= &(ioc
->pdir_base
[pide
]);
978 ASSERT(((u8
*)pdir_start
)[7] == 0); /* verify availability */
979 sba_io_pdir_entry(pdir_start
, (unsigned long) addr
);
981 DBG_RUN(" pdir 0x%p %lx\n", pdir_start
, *pdir_start
);
987 /* force pdir update */
990 /* form complete address */
991 #ifdef ASSERT_PDIR_SANITY
992 spin_lock_irqsave(&ioc
->res_lock
, flags
);
993 sba_check_pdir(ioc
,"Check after sba_map_page()");
994 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
996 return SBA_IOVA(ioc
, iovp
, offset
);
999 #ifdef ENABLE_MARK_CLEAN
1000 static SBA_INLINE
void
1001 sba_mark_clean(struct ioc
*ioc
, dma_addr_t iova
, size_t size
)
1003 u32 iovp
= (u32
) SBA_IOVP(ioc
,iova
);
1004 int off
= PDIR_INDEX(iovp
);
1007 if (size
<= iovp_size
) {
1008 addr
= phys_to_virt(ioc
->pdir_base
[off
] &
1009 ~0xE000000000000FFFULL
);
1010 mark_clean(addr
, size
);
1013 addr
= phys_to_virt(ioc
->pdir_base
[off
] &
1014 ~0xE000000000000FFFULL
);
1015 mark_clean(addr
, min(size
, iovp_size
));
1024 * sba_unmap_page - unmap one IOVA and free resources
1025 * @dev: instance of PCI owned by the driver that's asking.
1026 * @iova: IOVA of driver buffer previously mapped.
1027 * @size: number of bytes mapped in driver buffer.
1028 * @dir: R/W or both.
1029 * @attrs: optional dma attributes
1031 * See Documentation/DMA-API-HOWTO.txt
1033 static void sba_unmap_page(struct device
*dev
, dma_addr_t iova
, size_t size
,
1034 enum dma_data_direction dir
, unsigned long attrs
)
1037 #if DELAYED_RESOURCE_CNT > 0
1038 struct sba_dma_pair
*d
;
1040 unsigned long flags
;
1046 #ifdef ALLOW_IOV_BYPASS
1047 if (likely((iova
& ioc
->imask
) != ioc
->ibase
)) {
1049 ** Address does not fall w/in IOVA, must be bypassing
1051 DBG_BYPASS("sba_unmap_page() bypass addr: 0x%lx\n",
1054 #ifdef ENABLE_MARK_CLEAN
1055 if (dir
== DMA_FROM_DEVICE
) {
1056 mark_clean(phys_to_virt(iova
), size
);
1062 offset
= iova
& ~iovp_mask
;
1064 DBG_RUN("%s() iovp 0x%lx/%x\n", __func__
, (long) iova
, size
);
1066 iova
^= offset
; /* clear offset bits */
1068 size
= ROUNDUP(size
, iovp_size
);
1070 #ifdef ENABLE_MARK_CLEAN
1071 if (dir
== DMA_FROM_DEVICE
)
1072 sba_mark_clean(ioc
, iova
, size
);
1075 #if DELAYED_RESOURCE_CNT > 0
1076 spin_lock_irqsave(&ioc
->saved_lock
, flags
);
1077 d
= &(ioc
->saved
[ioc
->saved_cnt
]);
1080 if (unlikely(++(ioc
->saved_cnt
) >= DELAYED_RESOURCE_CNT
)) {
1081 int cnt
= ioc
->saved_cnt
;
1082 spin_lock(&ioc
->res_lock
);
1084 sba_mark_invalid(ioc
, d
->iova
, d
->size
);
1085 sba_free_range(ioc
, d
->iova
, d
->size
);
1089 READ_REG(ioc
->ioc_hpa
+IOC_PCOM
); /* flush purges */
1090 spin_unlock(&ioc
->res_lock
);
1092 spin_unlock_irqrestore(&ioc
->saved_lock
, flags
);
1093 #else /* DELAYED_RESOURCE_CNT == 0 */
1094 spin_lock_irqsave(&ioc
->res_lock
, flags
);
1095 sba_mark_invalid(ioc
, iova
, size
);
1096 sba_free_range(ioc
, iova
, size
);
1097 READ_REG(ioc
->ioc_hpa
+IOC_PCOM
); /* flush purges */
1098 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
1099 #endif /* DELAYED_RESOURCE_CNT == 0 */
1103 * sba_alloc_coherent - allocate/map shared mem for DMA
1104 * @dev: instance of PCI owned by the driver that's asking.
1105 * @size: number of bytes mapped in driver buffer.
1106 * @dma_handle: IOVA of new buffer.
1108 * See Documentation/DMA-API-HOWTO.txt
1111 sba_alloc_coherent(struct device
*dev
, size_t size
, dma_addr_t
*dma_handle
,
1112 gfp_t flags
, unsigned long attrs
)
1125 page
= alloc_pages_node(node
, flags
, get_order(size
));
1126 if (unlikely(!page
))
1129 addr
= page_address(page
);
1130 memset(addr
, 0, size
);
1131 *dma_handle
= page_to_phys(page
);
1133 #ifdef ALLOW_IOV_BYPASS
1134 ASSERT(dev
->coherent_dma_mask
);
1136 ** Check if the PCI device can DMA to ptr... if so, just return ptr
1138 if (likely((*dma_handle
& ~dev
->coherent_dma_mask
) == 0)) {
1139 DBG_BYPASS("sba_alloc_coherent() bypass mask/addr: 0x%lx/0x%lx\n",
1140 dev
->coherent_dma_mask
, *dma_handle
);
1147 * If device can't bypass or bypass is disabled, pass the 32bit fake
1148 * device to map single to get an iova mapping.
1150 *dma_handle
= sba_map_page(&ioc
->sac_only_dev
->dev
, page
, 0, size
,
1151 DMA_BIDIRECTIONAL
, 0);
1152 if (dma_mapping_error(dev
, *dma_handle
))
1159 * sba_free_coherent - free/unmap shared mem for DMA
1160 * @dev: instance of PCI owned by the driver that's asking.
1161 * @size: number of bytes mapped in driver buffer.
1162 * @vaddr: virtual address IOVA of "consistent" buffer.
1163 * @dma_handler: IO virtual address of "consistent" buffer.
1165 * See Documentation/DMA-API-HOWTO.txt
1167 static void sba_free_coherent(struct device
*dev
, size_t size
, void *vaddr
,
1168 dma_addr_t dma_handle
, unsigned long attrs
)
1170 sba_unmap_page(dev
, dma_handle
, size
, 0, 0);
1171 free_pages((unsigned long) vaddr
, get_order(size
));
1176 ** Since 0 is a valid pdir_base index value, can't use that
1177 ** to determine if a value is valid or not. Use a flag to indicate
1178 ** the SG list entry contains a valid pdir index.
1180 #define PIDE_FLAG 0x1UL
1182 #ifdef DEBUG_LARGE_SG_ENTRIES
1183 int dump_run_sg
= 0;
1188 * sba_fill_pdir - write allocated SG entries into IO PDIR
1189 * @ioc: IO MMU structure which owns the pdir we are interested in.
1190 * @startsg: list of IOVA/size pairs
1191 * @nents: number of entries in startsg list
1193 * Take preprocessed SG list and write corresponding entries
1197 static SBA_INLINE
int
1200 struct scatterlist
*startsg
,
1203 struct scatterlist
*dma_sg
= startsg
; /* pointer to current DMA */
1206 unsigned long dma_offset
= 0;
1208 while (nents
-- > 0) {
1209 int cnt
= startsg
->dma_length
;
1210 startsg
->dma_length
= 0;
1212 #ifdef DEBUG_LARGE_SG_ENTRIES
1214 printk(" %2d : %08lx/%05x %p\n",
1215 nents
, startsg
->dma_address
, cnt
,
1216 sba_sg_address(startsg
));
1218 DBG_RUN_SG(" %d : %08lx/%05x %p\n",
1219 nents
, startsg
->dma_address
, cnt
,
1220 sba_sg_address(startsg
));
1223 ** Look for the start of a new DMA stream
1225 if (startsg
->dma_address
& PIDE_FLAG
) {
1226 u32 pide
= startsg
->dma_address
& ~PIDE_FLAG
;
1227 dma_offset
= (unsigned long) pide
& ~iovp_mask
;
1228 startsg
->dma_address
= 0;
1230 dma_sg
= sg_next(dma_sg
);
1231 dma_sg
->dma_address
= pide
| ioc
->ibase
;
1232 pdirp
= &(ioc
->pdir_base
[pide
>> iovp_shift
]);
1237 ** Look for a VCONTIG chunk
1240 unsigned long vaddr
= (unsigned long) sba_sg_address(startsg
);
1243 /* Since multiple Vcontig blocks could make up
1244 ** one DMA stream, *add* cnt to dma_len.
1246 dma_sg
->dma_length
+= cnt
;
1248 dma_offset
=0; /* only want offset on first chunk */
1249 cnt
= ROUNDUP(cnt
, iovp_size
);
1251 sba_io_pdir_entry(pdirp
, vaddr
);
1257 startsg
= sg_next(startsg
);
1259 /* force pdir update */
1262 #ifdef DEBUG_LARGE_SG_ENTRIES
1270 ** Two address ranges are DMA contiguous *iff* "end of prev" and
1271 ** "start of next" are both on an IOV page boundary.
1273 ** (shift left is a quick trick to mask off upper bits)
1275 #define DMA_CONTIG(__X, __Y) \
1276 (((((unsigned long) __X) | ((unsigned long) __Y)) << (BITS_PER_LONG - iovp_shift)) == 0UL)
1280 * sba_coalesce_chunks - preprocess the SG list
1281 * @ioc: IO MMU structure which owns the pdir we are interested in.
1282 * @startsg: list of IOVA/size pairs
1283 * @nents: number of entries in startsg list
1285 * First pass is to walk the SG list and determine where the breaks are
1286 * in the DMA stream. Allocates PDIR entries but does not fill them.
1287 * Returns the number of DMA chunks.
1289 * Doing the fill separate from the coalescing/allocation keeps the
1290 * code simpler. Future enhancement could make one pass through
1291 * the sglist do both.
1293 static SBA_INLINE
int
1294 sba_coalesce_chunks(struct ioc
*ioc
, struct device
*dev
,
1295 struct scatterlist
*startsg
,
1298 struct scatterlist
*vcontig_sg
; /* VCONTIG chunk head */
1299 unsigned long vcontig_len
; /* len of VCONTIG chunk */
1300 unsigned long vcontig_end
;
1301 struct scatterlist
*dma_sg
; /* next DMA stream head */
1302 unsigned long dma_offset
, dma_len
; /* start/len of DMA stream */
1304 unsigned int max_seg_size
= dma_get_max_seg_size(dev
);
1308 unsigned long vaddr
= (unsigned long) sba_sg_address(startsg
);
1311 ** Prepare for first/next DMA stream
1313 dma_sg
= vcontig_sg
= startsg
;
1314 dma_len
= vcontig_len
= vcontig_end
= startsg
->length
;
1315 vcontig_end
+= vaddr
;
1316 dma_offset
= vaddr
& ~iovp_mask
;
1318 /* PARANOID: clear entries */
1319 startsg
->dma_address
= startsg
->dma_length
= 0;
1322 ** This loop terminates one iteration "early" since
1323 ** it's always looking one "ahead".
1325 while (--nents
> 0) {
1326 unsigned long vaddr
; /* tmp */
1328 startsg
= sg_next(startsg
);
1331 startsg
->dma_address
= startsg
->dma_length
= 0;
1333 /* catch brokenness in SCSI layer */
1334 ASSERT(startsg
->length
<= DMA_CHUNK_SIZE
);
1337 ** First make sure current dma stream won't
1338 ** exceed DMA_CHUNK_SIZE if we coalesce the
1341 if (((dma_len
+ dma_offset
+ startsg
->length
+ ~iovp_mask
) & iovp_mask
)
1345 if (dma_len
+ startsg
->length
> max_seg_size
)
1349 ** Then look for virtually contiguous blocks.
1351 ** append the next transaction?
1353 vaddr
= (unsigned long) sba_sg_address(startsg
);
1354 if (vcontig_end
== vaddr
)
1356 vcontig_len
+= startsg
->length
;
1357 vcontig_end
+= startsg
->length
;
1358 dma_len
+= startsg
->length
;
1362 #ifdef DEBUG_LARGE_SG_ENTRIES
1363 dump_run_sg
= (vcontig_len
> iovp_size
);
1367 ** Not virtually contiguous.
1368 ** Terminate prev chunk.
1369 ** Start a new chunk.
1371 ** Once we start a new VCONTIG chunk, dma_offset
1372 ** can't change. And we need the offset from the first
1373 ** chunk - not the last one. Ergo Successive chunks
1374 ** must start on page boundaries and dove tail
1375 ** with it's predecessor.
1377 vcontig_sg
->dma_length
= vcontig_len
;
1379 vcontig_sg
= startsg
;
1380 vcontig_len
= startsg
->length
;
1383 ** 3) do the entries end/start on page boundaries?
1384 ** Don't update vcontig_end until we've checked.
1386 if (DMA_CONTIG(vcontig_end
, vaddr
))
1388 vcontig_end
= vcontig_len
+ vaddr
;
1389 dma_len
+= vcontig_len
;
1397 ** End of DMA Stream
1398 ** Terminate last VCONTIG block.
1399 ** Allocate space for DMA stream.
1401 vcontig_sg
->dma_length
= vcontig_len
;
1402 dma_len
= (dma_len
+ dma_offset
+ ~iovp_mask
) & iovp_mask
;
1403 ASSERT(dma_len
<= DMA_CHUNK_SIZE
);
1404 idx
= sba_alloc_range(ioc
, dev
, dma_len
);
1406 dma_sg
->dma_length
= 0;
1409 dma_sg
->dma_address
= (dma_addr_t
)(PIDE_FLAG
| (idx
<< iovp_shift
)
1417 static void sba_unmap_sg_attrs(struct device
*dev
, struct scatterlist
*sglist
,
1418 int nents
, enum dma_data_direction dir
,
1419 unsigned long attrs
);
1421 * sba_map_sg - map Scatter/Gather list
1422 * @dev: instance of PCI owned by the driver that's asking.
1423 * @sglist: array of buffer/length pairs
1424 * @nents: number of entries in list
1425 * @dir: R/W or both.
1426 * @attrs: optional dma attributes
1428 * See Documentation/DMA-API-HOWTO.txt
1430 static int sba_map_sg_attrs(struct device
*dev
, struct scatterlist
*sglist
,
1431 int nents
, enum dma_data_direction dir
,
1432 unsigned long attrs
)
1435 int coalesced
, filled
= 0;
1436 #ifdef ASSERT_PDIR_SANITY
1437 unsigned long flags
;
1439 #ifdef ALLOW_IOV_BYPASS_SG
1440 struct scatterlist
*sg
;
1443 DBG_RUN_SG("%s() START %d entries\n", __func__
, nents
);
1447 #ifdef ALLOW_IOV_BYPASS_SG
1448 ASSERT(to_pci_dev(dev
)->dma_mask
);
1449 if (likely((ioc
->dma_mask
& ~to_pci_dev(dev
)->dma_mask
) == 0)) {
1450 for_each_sg(sglist
, sg
, nents
, filled
) {
1451 sg
->dma_length
= sg
->length
;
1452 sg
->dma_address
= virt_to_phys(sba_sg_address(sg
));
1457 /* Fast path single entry scatterlists. */
1459 sglist
->dma_length
= sglist
->length
;
1460 sglist
->dma_address
= sba_map_page(dev
, sg_page(sglist
),
1461 sglist
->offset
, sglist
->length
, dir
, attrs
);
1462 if (dma_mapping_error(dev
, sglist
->dma_address
))
1467 #ifdef ASSERT_PDIR_SANITY
1468 spin_lock_irqsave(&ioc
->res_lock
, flags
);
1469 if (sba_check_pdir(ioc
,"Check before sba_map_sg_attrs()"))
1471 sba_dump_sg(ioc
, sglist
, nents
);
1472 panic("Check before sba_map_sg_attrs()");
1474 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
1477 prefetch(ioc
->res_hint
);
1480 ** First coalesce the chunks and allocate I/O pdir space
1482 ** If this is one DMA stream, we can properly map using the
1483 ** correct virtual address associated with each DMA page.
1484 ** w/o this association, we wouldn't have coherent DMA!
1485 ** Access to the virtual address is what forces a two pass algorithm.
1487 coalesced
= sba_coalesce_chunks(ioc
, dev
, sglist
, nents
);
1488 if (coalesced
< 0) {
1489 sba_unmap_sg_attrs(dev
, sglist
, nents
, dir
, attrs
);
1494 ** Program the I/O Pdir
1496 ** map the virtual addresses to the I/O Pdir
1497 ** o dma_address will contain the pdir index
1498 ** o dma_len will contain the number of bytes to map
1499 ** o address contains the virtual address.
1501 filled
= sba_fill_pdir(ioc
, sglist
, nents
);
1503 #ifdef ASSERT_PDIR_SANITY
1504 spin_lock_irqsave(&ioc
->res_lock
, flags
);
1505 if (sba_check_pdir(ioc
,"Check after sba_map_sg_attrs()"))
1507 sba_dump_sg(ioc
, sglist
, nents
);
1508 panic("Check after sba_map_sg_attrs()\n");
1510 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
1513 ASSERT(coalesced
== filled
);
1514 DBG_RUN_SG("%s() DONE %d mappings\n", __func__
, filled
);
1520 * sba_unmap_sg_attrs - unmap Scatter/Gather list
1521 * @dev: instance of PCI owned by the driver that's asking.
1522 * @sglist: array of buffer/length pairs
1523 * @nents: number of entries in list
1524 * @dir: R/W or both.
1525 * @attrs: optional dma attributes
1527 * See Documentation/DMA-API-HOWTO.txt
1529 static void sba_unmap_sg_attrs(struct device
*dev
, struct scatterlist
*sglist
,
1530 int nents
, enum dma_data_direction dir
,
1531 unsigned long attrs
)
1533 #ifdef ASSERT_PDIR_SANITY
1535 unsigned long flags
;
1538 DBG_RUN_SG("%s() START %d entries, %p,%x\n",
1539 __func__
, nents
, sba_sg_address(sglist
), sglist
->length
);
1541 #ifdef ASSERT_PDIR_SANITY
1545 spin_lock_irqsave(&ioc
->res_lock
, flags
);
1546 sba_check_pdir(ioc
,"Check before sba_unmap_sg_attrs()");
1547 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
1550 while (nents
&& sglist
->dma_length
) {
1552 sba_unmap_page(dev
, sglist
->dma_address
, sglist
->dma_length
,
1554 sglist
= sg_next(sglist
);
1558 DBG_RUN_SG("%s() DONE (nents %d)\n", __func__
, nents
);
1560 #ifdef ASSERT_PDIR_SANITY
1561 spin_lock_irqsave(&ioc
->res_lock
, flags
);
1562 sba_check_pdir(ioc
,"Check after sba_unmap_sg_attrs()");
1563 spin_unlock_irqrestore(&ioc
->res_lock
, flags
);
1568 /**************************************************************
1570 * Initialization and claim
1572 ***************************************************************/
1575 ioc_iova_init(struct ioc
*ioc
)
1579 struct pci_dev
*device
= NULL
;
1580 #ifdef FULL_VALID_PDIR
1581 unsigned long index
;
1585 ** Firmware programs the base and size of a "safe IOVA space"
1586 ** (one that doesn't overlap memory or LMMIO space) in the
1587 ** IBASE and IMASK registers.
1589 ioc
->ibase
= READ_REG(ioc
->ioc_hpa
+ IOC_IBASE
) & ~0x1UL
;
1590 ioc
->imask
= READ_REG(ioc
->ioc_hpa
+ IOC_IMASK
) | 0xFFFFFFFF00000000UL
;
1592 ioc
->iov_size
= ~ioc
->imask
+ 1;
1594 DBG_INIT("%s() hpa %p IOV base 0x%lx mask 0x%lx (%dMB)\n",
1595 __func__
, ioc
->ioc_hpa
, ioc
->ibase
, ioc
->imask
,
1596 ioc
->iov_size
>> 20);
1598 switch (iovp_size
) {
1599 case 4*1024: tcnfg
= 0; break;
1600 case 8*1024: tcnfg
= 1; break;
1601 case 16*1024: tcnfg
= 2; break;
1602 case 64*1024: tcnfg
= 3; break;
1604 panic(PFX
"Unsupported IOTLB page size %ldK",
1608 WRITE_REG(tcnfg
, ioc
->ioc_hpa
+ IOC_TCNFG
);
1610 ioc
->pdir_size
= (ioc
->iov_size
/ iovp_size
) * PDIR_ENTRY_SIZE
;
1611 ioc
->pdir_base
= (void *) __get_free_pages(GFP_KERNEL
,
1612 get_order(ioc
->pdir_size
));
1613 if (!ioc
->pdir_base
)
1614 panic(PFX
"Couldn't allocate I/O Page Table\n");
1616 memset(ioc
->pdir_base
, 0, ioc
->pdir_size
);
1618 DBG_INIT("%s() IOV page size %ldK pdir %p size %x\n", __func__
,
1619 iovp_size
>> 10, ioc
->pdir_base
, ioc
->pdir_size
);
1621 ASSERT(ALIGN((unsigned long) ioc
->pdir_base
, 4*1024) == (unsigned long) ioc
->pdir_base
);
1622 WRITE_REG(virt_to_phys(ioc
->pdir_base
), ioc
->ioc_hpa
+ IOC_PDIR_BASE
);
1625 ** If an AGP device is present, only use half of the IOV space
1626 ** for PCI DMA. Unfortunately we can't know ahead of time
1627 ** whether GART support will actually be used, for now we
1628 ** can just key on an AGP device found in the system.
1629 ** We program the next pdir index after we stop w/ a key for
1630 ** the GART code to handshake on.
1632 for_each_pci_dev(device
)
1633 agp_found
|= pci_find_capability(device
, PCI_CAP_ID_AGP
);
1635 if (agp_found
&& reserve_sba_gart
) {
1636 printk(KERN_INFO PFX
"reserving %dMb of IOVA space at 0x%lx for agpgart\n",
1637 ioc
->iov_size
/2 >> 20, ioc
->ibase
+ ioc
->iov_size
/2);
1638 ioc
->pdir_size
/= 2;
1639 ((u64
*)ioc
->pdir_base
)[PDIR_INDEX(ioc
->iov_size
/2)] = ZX1_SBA_IOMMU_COOKIE
;
1641 #ifdef FULL_VALID_PDIR
1643 ** Check to see if the spill page has been allocated, we don't need more than
1644 ** one across multiple SBAs.
1646 if (!prefetch_spill_page
) {
1647 char *spill_poison
= "SBAIOMMU POISON";
1648 int poison_size
= 16;
1649 void *poison_addr
, *addr
;
1651 addr
= (void *)__get_free_pages(GFP_KERNEL
, get_order(iovp_size
));
1653 panic(PFX
"Couldn't allocate PDIR spill page\n");
1656 for ( ; (u64
) poison_addr
< addr
+ iovp_size
; poison_addr
+= poison_size
)
1657 memcpy(poison_addr
, spill_poison
, poison_size
);
1659 prefetch_spill_page
= virt_to_phys(addr
);
1661 DBG_INIT("%s() prefetch spill addr: 0x%lx\n", __func__
, prefetch_spill_page
);
1664 ** Set all the PDIR entries valid w/ the spill page as the target
1666 for (index
= 0 ; index
< (ioc
->pdir_size
/ PDIR_ENTRY_SIZE
) ; index
++)
1667 ((u64
*)ioc
->pdir_base
)[index
] = (0x80000000000000FF | prefetch_spill_page
);
1670 /* Clear I/O TLB of any possible entries */
1671 WRITE_REG(ioc
->ibase
| (get_iovp_order(ioc
->iov_size
) + iovp_shift
), ioc
->ioc_hpa
+ IOC_PCOM
);
1672 READ_REG(ioc
->ioc_hpa
+ IOC_PCOM
);
1674 /* Enable IOVA translation */
1675 WRITE_REG(ioc
->ibase
| 1, ioc
->ioc_hpa
+ IOC_IBASE
);
1676 READ_REG(ioc
->ioc_hpa
+ IOC_IBASE
);
1680 ioc_resource_init(struct ioc
*ioc
)
1682 spin_lock_init(&ioc
->res_lock
);
1683 #if DELAYED_RESOURCE_CNT > 0
1684 spin_lock_init(&ioc
->saved_lock
);
1687 /* resource map size dictated by pdir_size */
1688 ioc
->res_size
= ioc
->pdir_size
/ PDIR_ENTRY_SIZE
; /* entries */
1689 ioc
->res_size
>>= 3; /* convert bit count to byte count */
1690 DBG_INIT("%s() res_size 0x%x\n", __func__
, ioc
->res_size
);
1692 ioc
->res_map
= (char *) __get_free_pages(GFP_KERNEL
,
1693 get_order(ioc
->res_size
));
1695 panic(PFX
"Couldn't allocate resource map\n");
1697 memset(ioc
->res_map
, 0, ioc
->res_size
);
1698 /* next available IOVP - circular search */
1699 ioc
->res_hint
= (unsigned long *) ioc
->res_map
;
1701 #ifdef ASSERT_PDIR_SANITY
1702 /* Mark first bit busy - ie no IOVA 0 */
1703 ioc
->res_map
[0] = 0x1;
1704 ioc
->pdir_base
[0] = 0x8000000000000000ULL
| ZX1_SBA_IOMMU_COOKIE
;
1706 #ifdef FULL_VALID_PDIR
1707 /* Mark the last resource used so we don't prefetch beyond IOVA space */
1708 ioc
->res_map
[ioc
->res_size
- 1] |= 0x80UL
; /* res_map is chars */
1709 ioc
->pdir_base
[(ioc
->pdir_size
/ PDIR_ENTRY_SIZE
) - 1] = (0x80000000000000FF
1710 | prefetch_spill_page
);
1713 DBG_INIT("%s() res_map %x %p\n", __func__
,
1714 ioc
->res_size
, (void *) ioc
->res_map
);
1718 ioc_sac_init(struct ioc
*ioc
)
1720 struct pci_dev
*sac
= NULL
;
1721 struct pci_controller
*controller
= NULL
;
1724 * pci_alloc_coherent() must return a DMA address which is
1725 * SAC (single address cycle) addressable, so allocate a
1726 * pseudo-device to enforce that.
1728 sac
= kzalloc(sizeof(*sac
), GFP_KERNEL
);
1730 panic(PFX
"Couldn't allocate struct pci_dev");
1732 controller
= kzalloc(sizeof(*controller
), GFP_KERNEL
);
1734 panic(PFX
"Couldn't allocate struct pci_controller");
1736 controller
->iommu
= ioc
;
1737 sac
->sysdata
= controller
;
1738 sac
->dma_mask
= 0xFFFFFFFFUL
;
1739 sac
->dev
.bus
= &pci_bus_type
;
1740 ioc
->sac_only_dev
= sac
;
1744 ioc_zx1_init(struct ioc
*ioc
)
1746 unsigned long rope_config
;
1749 if (ioc
->rev
< 0x20)
1750 panic(PFX
"IOC 2.0 or later required for IOMMU support\n");
1752 /* 38 bit memory controller + extra bit for range displaced by MMIO */
1753 ioc
->dma_mask
= (0x1UL
<< 39) - 1;
1756 ** Clear ROPE(N)_CONFIG AO bit.
1757 ** Disables "NT Ordering" (~= !"Relaxed Ordering")
1758 ** Overrides bit 1 in DMA Hint Sets.
1759 ** Improves netperf UDP_STREAM by ~10% for tg3 on bcm5701.
1761 for (i
=0; i
<(8*8); i
+=8) {
1762 rope_config
= READ_REG(ioc
->ioc_hpa
+ IOC_ROPE0_CFG
+ i
);
1763 rope_config
&= ~IOC_ROPE_AO
;
1764 WRITE_REG(rope_config
, ioc
->ioc_hpa
+ IOC_ROPE0_CFG
+ i
);
1768 typedef void (initfunc
)(struct ioc
*);
1776 static struct ioc_iommu ioc_iommu_info
[] __initdata
= {
1777 { ZX1_IOC_ID
, "zx1", ioc_zx1_init
},
1778 { ZX2_IOC_ID
, "zx2", NULL
},
1779 { SX1000_IOC_ID
, "sx1000", NULL
},
1780 { SX2000_IOC_ID
, "sx2000", NULL
},
1783 static void __init
ioc_init(unsigned long hpa
, struct ioc
*ioc
)
1785 struct ioc_iommu
*info
;
1787 ioc
->next
= ioc_list
;
1790 ioc
->ioc_hpa
= ioremap(hpa
, 0x1000);
1792 ioc
->func_id
= READ_REG(ioc
->ioc_hpa
+ IOC_FUNC_ID
);
1793 ioc
->rev
= READ_REG(ioc
->ioc_hpa
+ IOC_FCLASS
) & 0xFFUL
;
1794 ioc
->dma_mask
= 0xFFFFFFFFFFFFFFFFUL
; /* conservative */
1796 for (info
= ioc_iommu_info
; info
< ioc_iommu_info
+ ARRAY_SIZE(ioc_iommu_info
); info
++) {
1797 if (ioc
->func_id
== info
->func_id
) {
1798 ioc
->name
= info
->name
;
1804 iovp_size
= (1 << iovp_shift
);
1805 iovp_mask
= ~(iovp_size
- 1);
1807 DBG_INIT("%s: PAGE_SIZE %ldK, iovp_size %ldK\n", __func__
,
1808 PAGE_SIZE
>> 10, iovp_size
>> 10);
1811 ioc
->name
= kmalloc(24, GFP_KERNEL
);
1813 sprintf((char *) ioc
->name
, "Unknown (%04x:%04x)",
1814 ioc
->func_id
& 0xFFFF, (ioc
->func_id
>> 16) & 0xFFFF);
1816 ioc
->name
= "Unknown";
1820 ioc_resource_init(ioc
);
1823 printk(KERN_INFO PFX
1824 "%s %d.%d HPA 0x%lx IOVA space %dMb at 0x%lx\n",
1825 ioc
->name
, (ioc
->rev
>> 4) & 0xF, ioc
->rev
& 0xF,
1826 hpa
, ioc
->iov_size
>> 20, ioc
->ibase
);
1831 /**************************************************************************
1833 ** SBA initialization code (HW and SW)
1835 ** o identify SBA chip itself
1836 ** o FIXME: initialize DMA hints for reasonable defaults
1838 **************************************************************************/
1840 #ifdef CONFIG_PROC_FS
1842 ioc_start(struct seq_file
*s
, loff_t
*pos
)
1847 for (ioc
= ioc_list
; ioc
; ioc
= ioc
->next
)
1855 ioc_next(struct seq_file
*s
, void *v
, loff_t
*pos
)
1857 struct ioc
*ioc
= v
;
1864 ioc_stop(struct seq_file
*s
, void *v
)
1869 ioc_show(struct seq_file
*s
, void *v
)
1871 struct ioc
*ioc
= v
;
1872 unsigned long *res_ptr
= (unsigned long *)ioc
->res_map
;
1875 seq_printf(s
, "Hewlett Packard %s IOC rev %d.%d\n",
1876 ioc
->name
, ((ioc
->rev
>> 4) & 0xF), (ioc
->rev
& 0xF));
1878 if (ioc
->node
!= NUMA_NO_NODE
)
1879 seq_printf(s
, "NUMA node : %d\n", ioc
->node
);
1881 seq_printf(s
, "IOVA size : %ld MB\n", ((ioc
->pdir_size
>> 3) * iovp_size
)/(1024*1024));
1882 seq_printf(s
, "IOVA page size : %ld kb\n", iovp_size
/1024);
1884 for (i
= 0; i
< (ioc
->res_size
/ sizeof(unsigned long)); ++i
, ++res_ptr
)
1885 used
+= hweight64(*res_ptr
);
1887 seq_printf(s
, "PDIR size : %d entries\n", ioc
->pdir_size
>> 3);
1888 seq_printf(s
, "PDIR used : %d entries\n", used
);
1890 #ifdef PDIR_SEARCH_TIMING
1892 unsigned long i
= 0, avg
= 0, min
, max
;
1893 min
= max
= ioc
->avg_search
[0];
1894 for (i
= 0; i
< SBA_SEARCH_SAMPLE
; i
++) {
1895 avg
+= ioc
->avg_search
[i
];
1896 if (ioc
->avg_search
[i
] > max
) max
= ioc
->avg_search
[i
];
1897 if (ioc
->avg_search
[i
] < min
) min
= ioc
->avg_search
[i
];
1899 avg
/= SBA_SEARCH_SAMPLE
;
1900 seq_printf(s
, "Bitmap search : %ld/%ld/%ld (min/avg/max CPU Cycles/IOVA page)\n",
1904 #ifndef ALLOW_IOV_BYPASS
1905 seq_printf(s
, "IOVA bypass disabled\n");
1910 static const struct seq_operations ioc_seq_ops
= {
1920 struct proc_dir_entry
*dir
;
1922 dir
= proc_mkdir("bus/mckinley", NULL
);
1926 proc_create_seq(ioc_list
->name
, 0, dir
, &ioc_seq_ops
);
1931 sba_connect_bus(struct pci_bus
*bus
)
1933 acpi_handle handle
, parent
;
1937 if (!PCI_CONTROLLER(bus
))
1938 panic(PFX
"no sysdata on bus %d!\n", bus
->number
);
1940 if (PCI_CONTROLLER(bus
)->iommu
)
1943 handle
= acpi_device_handle(PCI_CONTROLLER(bus
)->companion
);
1948 * The IOC scope encloses PCI root bridges in the ACPI
1949 * namespace, so work our way out until we find an IOC we
1950 * claimed previously.
1953 for (ioc
= ioc_list
; ioc
; ioc
= ioc
->next
)
1954 if (ioc
->handle
== handle
) {
1955 PCI_CONTROLLER(bus
)->iommu
= ioc
;
1959 status
= acpi_get_parent(handle
, &parent
);
1961 } while (ACPI_SUCCESS(status
));
1963 printk(KERN_WARNING
"No IOC for PCI Bus %04x:%02x in ACPI\n", pci_domain_nr(bus
), bus
->number
);
1967 sba_map_ioc_to_node(struct ioc
*ioc
, acpi_handle handle
)
1972 node
= acpi_get_node(handle
);
1973 if (node
!= NUMA_NO_NODE
&& !node_online(node
))
1974 node
= NUMA_NO_NODE
;
1980 static void __init
acpi_sba_ioc_add(struct ioc
*ioc
)
1982 acpi_handle handle
= ioc
->handle
;
1985 struct acpi_device_info
*adi
;
1987 ioc_found
= ioc
->next
;
1988 status
= hp_acpi_csr_space(handle
, &hpa
, &length
);
1989 if (ACPI_FAILURE(status
))
1992 status
= acpi_get_object_info(handle
, &adi
);
1993 if (ACPI_FAILURE(status
))
1997 * For HWP0001, only SBA appears in ACPI namespace. It encloses the PCI
1998 * root bridges, and its CSR space includes the IOC function.
2000 if (strncmp("HWP0001", adi
->hardware_id
.string
, 7) == 0) {
2001 hpa
+= ZX1_IOC_OFFSET
;
2002 /* zx1 based systems default to kernel page size iommu pages */
2004 iovp_shift
= min(PAGE_SHIFT
, 16);
2009 * default anything not caught above or specified on cmdline to 4k
2016 /* setup NUMA node association */
2017 sba_map_ioc_to_node(ioc
, handle
);
2024 static const struct acpi_device_id hp_ioc_iommu_device_ids
[] = {
2030 static int acpi_sba_ioc_attach(struct acpi_device
*device
,
2031 const struct acpi_device_id
*not_used
)
2035 ioc
= kzalloc(sizeof(*ioc
), GFP_KERNEL
);
2039 ioc
->next
= ioc_found
;
2041 ioc
->handle
= device
->handle
;
2046 static struct acpi_scan_handler acpi_sba_ioc_handler
= {
2047 .ids
= hp_ioc_iommu_device_ids
,
2048 .attach
= acpi_sba_ioc_attach
,
2051 static int __init
acpi_sba_ioc_init_acpi(void)
2053 return acpi_scan_add_handler(&acpi_sba_ioc_handler
);
2055 /* This has to run before acpi_scan_init(). */
2056 arch_initcall(acpi_sba_ioc_init_acpi
);
2058 static int sba_dma_supported (struct device
*dev
, u64 mask
)
2060 /* make sure it's at least 32bit capable */
2061 return ((mask
& 0xFFFFFFFFUL
) == 0xFFFFFFFFUL
);
2064 static const struct dma_map_ops sba_dma_ops
= {
2065 .alloc
= sba_alloc_coherent
,
2066 .free
= sba_free_coherent
,
2067 .map_page
= sba_map_page
,
2068 .unmap_page
= sba_unmap_page
,
2069 .map_sg
= sba_map_sg_attrs
,
2070 .unmap_sg
= sba_unmap_sg_attrs
,
2071 .dma_supported
= sba_dma_supported
,
2072 .mmap
= dma_common_mmap
,
2073 .get_sgtable
= dma_common_get_sgtable
,
2080 * If we are booting a kdump kernel, the sba_iommu will cause devices
2081 * that were not shutdown properly to MCA as soon as they are turned
2082 * back on. Our only option for a successful kdump kernel boot is to
2085 if (is_kdump_kernel())
2089 * ioc_found should be populated by the acpi_sba_ioc_handler's .attach()
2090 * routine, but that only happens if acpi_scan_init() has already run.
2093 acpi_sba_ioc_add(ioc_found
);
2099 struct pci_bus
*b
= NULL
;
2100 while ((b
= pci_find_next_bus(b
)) != NULL
)
2104 /* no need for swiotlb with the iommu */
2106 dma_ops
= &sba_dma_ops
;
2108 #ifdef CONFIG_PROC_FS
2114 subsys_initcall(sba_init
); /* must be initialized after ACPI etc., but before any drivers... */
2117 nosbagart(char *str
)
2119 reserve_sba_gart
= 0;
2123 __setup("nosbagart", nosbagart
);
2126 sba_page_override(char *str
)
2128 unsigned long page_size
;
2130 page_size
= memparse(str
, &str
);
2131 switch (page_size
) {
2136 iovp_shift
= ffs(page_size
) - 1;
2139 printk("%s: unknown/unsupported iommu page size %ld\n",
2140 __func__
, page_size
);
2146 __setup("sbapagesize=",sba_page_override
);