1 // SPDX-License-Identifier: MIT
2 /*
3  * Copyright © 2014-2019 Intel Corporation
4  *
5  * Authors:
6  *    Vinit Azad <vinit.azad@intel.com>
7  *    Ben Widawsky <ben@bwidawsk.net>
8  *    Dave Gordon <david.s.gordon@intel.com>
9  *    Alex Dai <yu.dai@intel.com>
10  */
11 
12 #include "gt/intel_gt.h"
13 #include "gt/intel_gt_mcr.h"
14 #include "gt/intel_gt_regs.h"
15 #include "gt/intel_rps.h"
16 #include "intel_guc_fw.h"
17 #include "intel_guc_print.h"
18 #include "i915_drv.h"
19 
20 static void guc_prepare_xfer(struct intel_gt *gt)
21 {
22 	struct intel_uncore *uncore = gt->uncore;
23 
24 	u32 shim_flags = GUC_ENABLE_READ_CACHE_LOGIC |
25 			 GUC_ENABLE_READ_CACHE_FOR_SRAM_DATA |
26 			 GUC_ENABLE_READ_CACHE_FOR_WOPCM_DATA |
27 			 GUC_ENABLE_MIA_CLOCK_GATING;
28 
29 	if (GRAPHICS_VER_FULL(uncore->i915) < IP_VER(12, 50))
30 		shim_flags |= GUC_DISABLE_SRAM_INIT_TO_ZEROES |
31 			      GUC_ENABLE_MIA_CACHING;
32 
33 	/* Must program this register before loading the ucode with DMA */
34 	intel_uncore_write(uncore, GUC_SHIM_CONTROL, shim_flags);
35 
36 	if (IS_GEN9_LP(uncore->i915))
37 		intel_uncore_write(uncore, GEN9LP_GT_PM_CONFIG, GT_DOORBELL_ENABLE);
38 	else
39 		intel_uncore_write(uncore, GEN9_GT_PM_CONFIG, GT_DOORBELL_ENABLE);
40 
41 	if (GRAPHICS_VER(uncore->i915) == 9) {
42 		/* DOP Clock Gating Enable for GuC clocks */
43 		intel_uncore_rmw(uncore, GEN7_MISCCPCTL, 0,
44 				 GEN8_DOP_CLOCK_GATE_GUC_ENABLE);
45 
46 		/* allows for 5us (in 10ns units) before GT can go to RC6 */
47 		intel_uncore_write(uncore, GUC_ARAT_C6DIS, 0x1FF);
48 	}
49 }
50 
51 static int guc_xfer_rsa_mmio(struct intel_uc_fw *guc_fw,
52 			     struct intel_uncore *uncore)
53 {
54 	u32 rsa[UOS_RSA_SCRATCH_COUNT];
55 	size_t copied;
56 	int i;
57 
58 	copied = intel_uc_fw_copy_rsa(guc_fw, rsa, sizeof(rsa));
59 	if (copied < sizeof(rsa))
60 		return -ENOMEM;
61 
62 	for (i = 0; i < UOS_RSA_SCRATCH_COUNT; i++)
63 		intel_uncore_write(uncore, UOS_RSA_SCRATCH(i), rsa[i]);
64 
65 	return 0;
66 }
67 
68 static int guc_xfer_rsa_vma(struct intel_uc_fw *guc_fw,
69 			    struct intel_uncore *uncore)
70 {
71 	struct intel_guc *guc = container_of(guc_fw, struct intel_guc, fw);
72 
73 	intel_uncore_write(uncore, UOS_RSA_SCRATCH(0),
74 			   intel_guc_ggtt_offset(guc, guc_fw->rsa_data));
75 
76 	return 0;
77 }
78 
79 /* Copy RSA signature from the fw image to HW for verification */
80 static int guc_xfer_rsa(struct intel_uc_fw *guc_fw,
81 			struct intel_uncore *uncore)
82 {
83 	if (guc_fw->rsa_data)
84 		return guc_xfer_rsa_vma(guc_fw, uncore);
85 	else
86 		return guc_xfer_rsa_mmio(guc_fw, uncore);
87 }
88 
89 /*
90  * Read the GuC status register (GUC_STATUS) and store it in the
91  * specified location; then return a boolean indicating whether
92  * the value matches either completion or a known failure code.
93  *
94  * This is used for polling the GuC status in a wait_for()
95  * loop below.
96  */
97 static inline bool guc_load_done(struct intel_uncore *uncore, u32 *status, bool *success)
98 {
99 	u32 val = intel_uncore_read(uncore, GUC_STATUS);
100 	u32 uk_val = REG_FIELD_GET(GS_UKERNEL_MASK, val);
101 	u32 br_val = REG_FIELD_GET(GS_BOOTROM_MASK, val);
102 
103 	*status = val;
104 	switch (uk_val) {
105 	case INTEL_GUC_LOAD_STATUS_READY:
106 		*success = true;
107 		return true;
108 
109 	case INTEL_GUC_LOAD_STATUS_ERROR_DEVID_BUILD_MISMATCH:
110 	case INTEL_GUC_LOAD_STATUS_GUC_PREPROD_BUILD_MISMATCH:
111 	case INTEL_GUC_LOAD_STATUS_ERROR_DEVID_INVALID_GUCTYPE:
112 	case INTEL_GUC_LOAD_STATUS_HWCONFIG_ERROR:
113 	case INTEL_GUC_LOAD_STATUS_DPC_ERROR:
114 	case INTEL_GUC_LOAD_STATUS_EXCEPTION:
115 	case INTEL_GUC_LOAD_STATUS_INIT_DATA_INVALID:
116 	case INTEL_GUC_LOAD_STATUS_MPU_DATA_INVALID:
117 	case INTEL_GUC_LOAD_STATUS_INIT_MMIO_SAVE_RESTORE_INVALID:
118 		*success = false;
119 		return true;
120 	}
121 
122 	switch (br_val) {
123 	case INTEL_BOOTROM_STATUS_NO_KEY_FOUND:
124 	case INTEL_BOOTROM_STATUS_RSA_FAILED:
125 	case INTEL_BOOTROM_STATUS_PAVPC_FAILED:
126 	case INTEL_BOOTROM_STATUS_WOPCM_FAILED:
127 	case INTEL_BOOTROM_STATUS_LOADLOC_FAILED:
128 	case INTEL_BOOTROM_STATUS_JUMP_FAILED:
129 	case INTEL_BOOTROM_STATUS_RC6CTXCONFIG_FAILED:
130 	case INTEL_BOOTROM_STATUS_MPUMAP_INCORRECT:
131 	case INTEL_BOOTROM_STATUS_EXCEPTION:
132 		*success = false;
133 		return true;
134 	}
135 
136 	return false;
137 }
138 
139 /*
140  * Use a longer timeout for debug builds so that problems can be detected
141  * and analysed. But a shorter timeout for releases so that user's don't
142  * wait forever to find out there is a problem. Note that the only reason
143  * an end user should hit the timeout is in case of extreme thermal throttling.
144  * And a system that is that hot during boot is probably dead anyway!
145  */
146 #if defined(CONFIG_DRM_I915_DEBUG_GEM)
147 #define GUC_LOAD_RETRY_LIMIT	20
148 #else
149 #define GUC_LOAD_RETRY_LIMIT	3
150 #endif
151 
152 static int guc_wait_ucode(struct intel_guc *guc)
153 {
154 	struct intel_gt *gt = guc_to_gt(guc);
155 	struct intel_uncore *uncore = gt->uncore;
156 	ktime_t before, after, delta;
157 	bool success;
158 	u32 status;
159 	int ret, count;
160 	u64 delta_ms;
161 	u32 before_freq;
162 
163 	/*
164 	 * Wait for the GuC to start up.
165 	 *
166 	 * Measurements indicate this should take no more than 20ms
167 	 * (assuming the GT clock is at maximum frequency). So, a
168 	 * timeout here indicates that the GuC has failed and is unusable.
169 	 * (Higher levels of the driver may decide to reset the GuC and
170 	 * attempt the ucode load again if this happens.)
171 	 *
172 	 * FIXME: There is a known (but exceedingly unlikely) race condition
173 	 * where the asynchronous frequency management code could reduce
174 	 * the GT clock while a GuC reload is in progress (during a full
175 	 * GT reset). A fix is in progress but there are complex locking
176 	 * issues to be resolved. In the meantime bump the timeout to
177 	 * 200ms. Even at slowest clock, this should be sufficient. And
178 	 * in the working case, a larger timeout makes no difference.
179 	 *
180 	 * IFWI updates have also been seen to cause sporadic failures due to
181 	 * the requested frequency not being granted and thus the firmware
182 	 * load is attempted at minimum frequency. That can lead to load times
183 	 * in the seconds range. However, there is a limit on how long an
184 	 * individual wait_for() can wait. So wrap it in a loop.
185 	 */
186 	before_freq = intel_rps_read_actual_frequency(&uncore->gt->rps);
187 	before = ktime_get();
188 	for (count = 0; count < GUC_LOAD_RETRY_LIMIT; count++) {
189 		ret = wait_for(guc_load_done(uncore, &status, &success), 1000);
190 		if (!ret || !success)
191 			break;
192 
193 		guc_dbg(guc, "load still in progress, count = %d, freq = %dMHz\n",
194 			count, intel_rps_read_actual_frequency(&uncore->gt->rps));
195 	}
196 	after = ktime_get();
197 	delta = ktime_sub(after, before);
198 	delta_ms = ktime_to_ms(delta);
199 	if (ret || !success) {
200 		u32 ukernel = REG_FIELD_GET(GS_UKERNEL_MASK, status);
201 		u32 bootrom = REG_FIELD_GET(GS_BOOTROM_MASK, status);
202 
203 		guc_info(guc, "load failed: status = 0x%08X, time = %lldms, freq = %dMHz, ret = %d\n",
204 			 status, delta_ms, intel_rps_read_actual_frequency(&uncore->gt->rps), ret);
205 		guc_info(guc, "load failed: status: Reset = %d, BootROM = 0x%02X, UKernel = 0x%02X, MIA = 0x%02X, Auth = 0x%02X\n",
206 			 REG_FIELD_GET(GS_MIA_IN_RESET, status),
207 			 bootrom, ukernel,
208 			 REG_FIELD_GET(GS_MIA_MASK, status),
209 			 REG_FIELD_GET(GS_AUTH_STATUS_MASK, status));
210 
211 		switch (bootrom) {
212 		case INTEL_BOOTROM_STATUS_NO_KEY_FOUND:
213 			guc_info(guc, "invalid key requested, header = 0x%08X\n",
214 				 intel_uncore_read(uncore, GUC_HEADER_INFO));
215 			ret = -ENOEXEC;
216 			break;
217 
218 		case INTEL_BOOTROM_STATUS_RSA_FAILED:
219 			guc_info(guc, "firmware signature verification failed\n");
220 			ret = -ENOEXEC;
221 			break;
222 		}
223 
224 		switch (ukernel) {
225 		case INTEL_GUC_LOAD_STATUS_EXCEPTION:
226 			guc_info(guc, "firmware exception. EIP: %#x\n",
227 				 intel_uncore_read(uncore, SOFT_SCRATCH(13)));
228 			ret = -ENXIO;
229 			break;
230 
231 		case INTEL_GUC_LOAD_STATUS_INIT_MMIO_SAVE_RESTORE_INVALID:
232 			guc_info(guc, "illegal register in save/restore workaround list\n");
233 			ret = -EPERM;
234 			break;
235 
236 		case INTEL_GUC_LOAD_STATUS_HWCONFIG_START:
237 			guc_info(guc, "still extracting hwconfig table.\n");
238 			ret = -ETIMEDOUT;
239 			break;
240 		}
241 
242 		/* Uncommon/unexpected error, see earlier status code print for details */
243 		if (ret == 0)
244 			ret = -ENXIO;
245 	} else if (delta_ms > 200) {
246 		guc_warn(guc, "excessive init time: %lldms! [freq = %dMHz, before = %dMHz, status = 0x%08X, count = %d, ret = %d]\n",
247 			 delta_ms, intel_rps_read_actual_frequency(&uncore->gt->rps),
248 			 before_freq, status, count, ret);
249 	} else {
250 		guc_dbg(guc, "init took %lldms, freq = %dMHz, before = %dMHz, status = 0x%08X, count = %d, ret = %d\n",
251 			delta_ms, intel_rps_read_actual_frequency(&uncore->gt->rps),
252 			before_freq, status, count, ret);
253 	}
254 
255 	return ret;
256 }
257 
258 /**
259  * intel_guc_fw_upload() - load GuC uCode to device
260  * @guc: intel_guc structure
261  *
262  * Called from intel_uc_init_hw() during driver load, resume from sleep and
263  * after a GPU reset.
264  *
265  * The firmware image should have already been fetched into memory, so only
266  * check that fetch succeeded, and then transfer the image to the h/w.
267  *
268  * Return:	non-zero code on error
269  */
270 int intel_guc_fw_upload(struct intel_guc *guc)
271 {
272 	struct intel_gt *gt = guc_to_gt(guc);
273 	struct intel_uncore *uncore = gt->uncore;
274 	int ret;
275 
276 	guc_prepare_xfer(gt);
277 
278 	/*
279 	 * Note that GuC needs the CSS header plus uKernel code to be copied
280 	 * by the DMA engine in one operation, whereas the RSA signature is
281 	 * loaded separately, either by copying it to the UOS_RSA_SCRATCH
282 	 * register (if key size <= 256) or through a ggtt-pinned vma (if key
283 	 * size > 256). The RSA size and therefore the way we provide it to the
284 	 * HW is fixed for each platform and hard-coded in the bootrom.
285 	 */
286 	ret = guc_xfer_rsa(&guc->fw, uncore);
287 	if (ret)
288 		goto out;
289 
290 	/*
291 	 * Current uCode expects the code to be loaded at 8k; locations below
292 	 * this are used for the stack.
293 	 */
294 	ret = intel_uc_fw_upload(&guc->fw, 0x2000, UOS_MOVE);
295 	if (ret)
296 		goto out;
297 
298 	ret = guc_wait_ucode(guc);
299 	if (ret)
300 		goto out;
301 
302 	intel_uc_fw_change_status(&guc->fw, INTEL_UC_FIRMWARE_RUNNING);
303 	return 0;
304 
305 out:
306 	intel_uc_fw_change_status(&guc->fw, INTEL_UC_FIRMWARE_LOAD_FAIL);
307 	return ret;
308 }
309