1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * CPU-agnostic ARM page table allocator.
4  *
5  * Copyright (C) 2014 ARM Limited
6  *
7  * Author: Will Deacon <will.deacon@arm.com>
8  */
9 
10 #define pr_fmt(fmt)	"arm-lpae io-pgtable: " fmt
11 
12 #include <linux/atomic.h>
13 #include <linux/bitops.h>
14 #include <linux/io-pgtable.h>
15 #include <linux/kernel.h>
16 #include <linux/sizes.h>
17 #include <linux/slab.h>
18 #include <linux/types.h>
19 #include <linux/dma-mapping.h>
20 
21 #include <asm/barrier.h>
22 
23 #include "io-pgtable-arm.h"
24 
25 #define ARM_LPAE_MAX_ADDR_BITS		52
26 #define ARM_LPAE_S2_MAX_CONCAT_PAGES	16
27 #define ARM_LPAE_MAX_LEVELS		4
28 
29 /* Struct accessors */
30 #define io_pgtable_to_data(x)						\
31 	container_of((x), struct arm_lpae_io_pgtable, iop)
32 
33 #define io_pgtable_ops_to_data(x)					\
34 	io_pgtable_to_data(io_pgtable_ops_to_pgtable(x))
35 
36 /*
37  * Calculate the right shift amount to get to the portion describing level l
38  * in a virtual address mapped by the pagetable in d.
39  */
40 #define ARM_LPAE_LVL_SHIFT(l,d)						\
41 	(((ARM_LPAE_MAX_LEVELS - (l)) * (d)->bits_per_level) +		\
42 	ilog2(sizeof(arm_lpae_iopte)))
43 
44 #define ARM_LPAE_GRANULE(d)						\
45 	(sizeof(arm_lpae_iopte) << (d)->bits_per_level)
46 #define ARM_LPAE_PGD_SIZE(d)						\
47 	(sizeof(arm_lpae_iopte) << (d)->pgd_bits)
48 
49 /*
50  * Calculate the index at level l used to map virtual address a using the
51  * pagetable in d.
52  */
53 #define ARM_LPAE_PGD_IDX(l,d)						\
54 	((l) == (d)->start_level ? (d)->pgd_bits - (d)->bits_per_level : 0)
55 
56 #define ARM_LPAE_LVL_IDX(a,l,d)						\
57 	(((u64)(a) >> ARM_LPAE_LVL_SHIFT(l,d)) &			\
58 	 ((1 << ((d)->bits_per_level + ARM_LPAE_PGD_IDX(l,d))) - 1))
59 
60 /* Calculate the block/page mapping size at level l for pagetable in d. */
61 #define ARM_LPAE_BLOCK_SIZE(l,d)	(1ULL << ARM_LPAE_LVL_SHIFT(l,d))
62 
63 /* Page table bits */
64 #define ARM_LPAE_PTE_TYPE_SHIFT		0
65 #define ARM_LPAE_PTE_TYPE_MASK		0x3
66 
67 #define ARM_LPAE_PTE_TYPE_BLOCK		1
68 #define ARM_LPAE_PTE_TYPE_TABLE		3
69 #define ARM_LPAE_PTE_TYPE_PAGE		3
70 
71 #define ARM_LPAE_PTE_ADDR_MASK		GENMASK_ULL(47,12)
72 
73 #define ARM_LPAE_PTE_NSTABLE		(((arm_lpae_iopte)1) << 63)
74 #define ARM_LPAE_PTE_XN			(((arm_lpae_iopte)3) << 53)
75 #define ARM_LPAE_PTE_AF			(((arm_lpae_iopte)1) << 10)
76 #define ARM_LPAE_PTE_SH_NS		(((arm_lpae_iopte)0) << 8)
77 #define ARM_LPAE_PTE_SH_OS		(((arm_lpae_iopte)2) << 8)
78 #define ARM_LPAE_PTE_SH_IS		(((arm_lpae_iopte)3) << 8)
79 #define ARM_LPAE_PTE_NS			(((arm_lpae_iopte)1) << 5)
80 #define ARM_LPAE_PTE_VALID		(((arm_lpae_iopte)1) << 0)
81 
82 #define ARM_LPAE_PTE_ATTR_LO_MASK	(((arm_lpae_iopte)0x3ff) << 2)
83 /* Ignore the contiguous bit for block splitting */
84 #define ARM_LPAE_PTE_ATTR_HI_MASK	(((arm_lpae_iopte)6) << 52)
85 #define ARM_LPAE_PTE_ATTR_MASK		(ARM_LPAE_PTE_ATTR_LO_MASK |	\
86 					 ARM_LPAE_PTE_ATTR_HI_MASK)
87 /* Software bit for solving coherency races */
88 #define ARM_LPAE_PTE_SW_SYNC		(((arm_lpae_iopte)1) << 55)
89 
90 /* Stage-1 PTE */
91 #define ARM_LPAE_PTE_AP_UNPRIV		(((arm_lpae_iopte)1) << 6)
92 #define ARM_LPAE_PTE_AP_RDONLY		(((arm_lpae_iopte)2) << 6)
93 #define ARM_LPAE_PTE_ATTRINDX_SHIFT	2
94 #define ARM_LPAE_PTE_nG			(((arm_lpae_iopte)1) << 11)
95 
96 /* Stage-2 PTE */
97 #define ARM_LPAE_PTE_HAP_FAULT		(((arm_lpae_iopte)0) << 6)
98 #define ARM_LPAE_PTE_HAP_READ		(((arm_lpae_iopte)1) << 6)
99 #define ARM_LPAE_PTE_HAP_WRITE		(((arm_lpae_iopte)2) << 6)
100 #define ARM_LPAE_PTE_MEMATTR_OIWB	(((arm_lpae_iopte)0xf) << 2)
101 #define ARM_LPAE_PTE_MEMATTR_NC		(((arm_lpae_iopte)0x5) << 2)
102 #define ARM_LPAE_PTE_MEMATTR_DEV	(((arm_lpae_iopte)0x1) << 2)
103 
104 /* Register bits */
105 #define ARM_LPAE_VTCR_SL0_MASK		0x3
106 
107 #define ARM_LPAE_TCR_T0SZ_SHIFT		0
108 
109 #define ARM_LPAE_VTCR_PS_SHIFT		16
110 #define ARM_LPAE_VTCR_PS_MASK		0x7
111 
112 #define ARM_LPAE_MAIR_ATTR_SHIFT(n)	((n) << 3)
113 #define ARM_LPAE_MAIR_ATTR_MASK		0xff
114 #define ARM_LPAE_MAIR_ATTR_DEVICE	0x04
115 #define ARM_LPAE_MAIR_ATTR_NC		0x44
116 #define ARM_LPAE_MAIR_ATTR_INC_OWBRWA	0xf4
117 #define ARM_LPAE_MAIR_ATTR_WBRWA	0xff
118 #define ARM_LPAE_MAIR_ATTR_IDX_NC	0
119 #define ARM_LPAE_MAIR_ATTR_IDX_CACHE	1
120 #define ARM_LPAE_MAIR_ATTR_IDX_DEV	2
121 #define ARM_LPAE_MAIR_ATTR_IDX_INC_OCACHE	3
122 
123 #define ARM_MALI_LPAE_TTBR_ADRMODE_TABLE (3u << 0)
124 #define ARM_MALI_LPAE_TTBR_READ_INNER	BIT(2)
125 #define ARM_MALI_LPAE_TTBR_SHARE_OUTER	BIT(4)
126 
127 #define ARM_MALI_LPAE_MEMATTR_IMP_DEF	0x88ULL
128 #define ARM_MALI_LPAE_MEMATTR_WRITE_ALLOC 0x8DULL
129 
130 /* IOPTE accessors */
131 #define iopte_deref(pte,d) __va(iopte_to_paddr(pte, d))
132 
133 #define iopte_type(pte,l)					\
134 	(((pte) >> ARM_LPAE_PTE_TYPE_SHIFT) & ARM_LPAE_PTE_TYPE_MASK)
135 
136 #define iopte_prot(pte)	((pte) & ARM_LPAE_PTE_ATTR_MASK)
137 
138 struct arm_lpae_io_pgtable {
139 	struct io_pgtable	iop;
140 
141 	int			pgd_bits;
142 	int			start_level;
143 	int			bits_per_level;
144 
145 	void			*pgd;
146 };
147 
148 typedef u64 arm_lpae_iopte;
149 
150 static inline bool iopte_leaf(arm_lpae_iopte pte, int lvl,
151 			      enum io_pgtable_fmt fmt)
152 {
153 	if (lvl == (ARM_LPAE_MAX_LEVELS - 1) && fmt != ARM_MALI_LPAE)
154 		return iopte_type(pte, lvl) == ARM_LPAE_PTE_TYPE_PAGE;
155 
156 	return iopte_type(pte, lvl) == ARM_LPAE_PTE_TYPE_BLOCK;
157 }
158 
159 static arm_lpae_iopte paddr_to_iopte(phys_addr_t paddr,
160 				     struct arm_lpae_io_pgtable *data)
161 {
162 	arm_lpae_iopte pte = paddr;
163 
164 	/* Of the bits which overlap, either 51:48 or 15:12 are always RES0 */
165 	return (pte | (pte >> (48 - 12))) & ARM_LPAE_PTE_ADDR_MASK;
166 }
167 
168 static phys_addr_t iopte_to_paddr(arm_lpae_iopte pte,
169 				  struct arm_lpae_io_pgtable *data)
170 {
171 	u64 paddr = pte & ARM_LPAE_PTE_ADDR_MASK;
172 
173 	if (ARM_LPAE_GRANULE(data) < SZ_64K)
174 		return paddr;
175 
176 	/* Rotate the packed high-order bits back to the top */
177 	return (paddr | (paddr << (48 - 12))) & (ARM_LPAE_PTE_ADDR_MASK << 4);
178 }
179 
180 static bool selftest_running = false;
181 
182 static dma_addr_t __arm_lpae_dma_addr(void *pages)
183 {
184 	return (dma_addr_t)virt_to_phys(pages);
185 }
186 
187 static void *__arm_lpae_alloc_pages(size_t size, gfp_t gfp,
188 				    struct io_pgtable_cfg *cfg)
189 {
190 	struct device *dev = cfg->iommu_dev;
191 	int order = get_order(size);
192 	struct page *p;
193 	dma_addr_t dma;
194 	void *pages;
195 
196 	VM_BUG_ON((gfp & __GFP_HIGHMEM));
197 	p = alloc_pages_node(dev ? dev_to_node(dev) : NUMA_NO_NODE,
198 			     gfp | __GFP_ZERO, order);
199 	if (!p)
200 		return NULL;
201 
202 	pages = page_address(p);
203 	if (!cfg->coherent_walk) {
204 		dma = dma_map_single(dev, pages, size, DMA_TO_DEVICE);
205 		if (dma_mapping_error(dev, dma))
206 			goto out_free;
207 		/*
208 		 * We depend on the IOMMU being able to work with any physical
209 		 * address directly, so if the DMA layer suggests otherwise by
210 		 * translating or truncating them, that bodes very badly...
211 		 */
212 		if (dma != virt_to_phys(pages))
213 			goto out_unmap;
214 	}
215 
216 	return pages;
217 
218 out_unmap:
219 	dev_err(dev, "Cannot accommodate DMA translation for IOMMU page tables\n");
220 	dma_unmap_single(dev, dma, size, DMA_TO_DEVICE);
221 out_free:
222 	__free_pages(p, order);
223 	return NULL;
224 }
225 
226 static void __arm_lpae_free_pages(void *pages, size_t size,
227 				  struct io_pgtable_cfg *cfg)
228 {
229 	if (!cfg->coherent_walk)
230 		dma_unmap_single(cfg->iommu_dev, __arm_lpae_dma_addr(pages),
231 				 size, DMA_TO_DEVICE);
232 	free_pages((unsigned long)pages, get_order(size));
233 }
234 
235 static void __arm_lpae_sync_pte(arm_lpae_iopte *ptep,
236 				struct io_pgtable_cfg *cfg)
237 {
238 	dma_sync_single_for_device(cfg->iommu_dev, __arm_lpae_dma_addr(ptep),
239 				   sizeof(*ptep), DMA_TO_DEVICE);
240 }
241 
242 static void __arm_lpae_set_pte(arm_lpae_iopte *ptep, arm_lpae_iopte pte,
243 			       struct io_pgtable_cfg *cfg)
244 {
245 	*ptep = pte;
246 
247 	if (!cfg->coherent_walk)
248 		__arm_lpae_sync_pte(ptep, cfg);
249 }
250 
251 static size_t __arm_lpae_unmap(struct arm_lpae_io_pgtable *data,
252 			       struct iommu_iotlb_gather *gather,
253 			       unsigned long iova, size_t size, int lvl,
254 			       arm_lpae_iopte *ptep);
255 
256 static void __arm_lpae_init_pte(struct arm_lpae_io_pgtable *data,
257 				phys_addr_t paddr, arm_lpae_iopte prot,
258 				int lvl, arm_lpae_iopte *ptep)
259 {
260 	arm_lpae_iopte pte = prot;
261 
262 	if (data->iop.fmt != ARM_MALI_LPAE && lvl == ARM_LPAE_MAX_LEVELS - 1)
263 		pte |= ARM_LPAE_PTE_TYPE_PAGE;
264 	else
265 		pte |= ARM_LPAE_PTE_TYPE_BLOCK;
266 
267 	pte |= paddr_to_iopte(paddr, data);
268 
269 	__arm_lpae_set_pte(ptep, pte, &data->iop.cfg);
270 }
271 
272 static int arm_lpae_init_pte(struct arm_lpae_io_pgtable *data,
273 			     unsigned long iova, phys_addr_t paddr,
274 			     arm_lpae_iopte prot, int lvl,
275 			     arm_lpae_iopte *ptep)
276 {
277 	arm_lpae_iopte pte = *ptep;
278 
279 	if (iopte_leaf(pte, lvl, data->iop.fmt)) {
280 		/* We require an unmap first */
281 		WARN_ON(!selftest_running);
282 		return -EEXIST;
283 	} else if (iopte_type(pte, lvl) == ARM_LPAE_PTE_TYPE_TABLE) {
284 		/*
285 		 * We need to unmap and free the old table before
286 		 * overwriting it with a block entry.
287 		 */
288 		arm_lpae_iopte *tblp;
289 		size_t sz = ARM_LPAE_BLOCK_SIZE(lvl, data);
290 
291 		tblp = ptep - ARM_LPAE_LVL_IDX(iova, lvl, data);
292 		if (__arm_lpae_unmap(data, NULL, iova, sz, lvl, tblp) != sz) {
293 			WARN_ON(1);
294 			return -EINVAL;
295 		}
296 	}
297 
298 	__arm_lpae_init_pte(data, paddr, prot, lvl, ptep);
299 	return 0;
300 }
301 
302 static arm_lpae_iopte arm_lpae_install_table(arm_lpae_iopte *table,
303 					     arm_lpae_iopte *ptep,
304 					     arm_lpae_iopte curr,
305 					     struct io_pgtable_cfg *cfg)
306 {
307 	arm_lpae_iopte old, new;
308 
309 	new = __pa(table) | ARM_LPAE_PTE_TYPE_TABLE;
310 	if (cfg->quirks & IO_PGTABLE_QUIRK_ARM_NS)
311 		new |= ARM_LPAE_PTE_NSTABLE;
312 
313 	/*
314 	 * Ensure the table itself is visible before its PTE can be.
315 	 * Whilst we could get away with cmpxchg64_release below, this
316 	 * doesn't have any ordering semantics when !CONFIG_SMP.
317 	 */
318 	dma_wmb();
319 
320 	old = cmpxchg64_relaxed(ptep, curr, new);
321 
322 	if (cfg->coherent_walk || (old & ARM_LPAE_PTE_SW_SYNC))
323 		return old;
324 
325 	/* Even if it's not ours, there's no point waiting; just kick it */
326 	__arm_lpae_sync_pte(ptep, cfg);
327 	if (old == curr)
328 		WRITE_ONCE(*ptep, new | ARM_LPAE_PTE_SW_SYNC);
329 
330 	return old;
331 }
332 
333 static int __arm_lpae_map(struct arm_lpae_io_pgtable *data, unsigned long iova,
334 			  phys_addr_t paddr, size_t size, arm_lpae_iopte prot,
335 			  int lvl, arm_lpae_iopte *ptep, gfp_t gfp)
336 {
337 	arm_lpae_iopte *cptep, pte;
338 	size_t block_size = ARM_LPAE_BLOCK_SIZE(lvl, data);
339 	size_t tblsz = ARM_LPAE_GRANULE(data);
340 	struct io_pgtable_cfg *cfg = &data->iop.cfg;
341 
342 	/* Find our entry at the current level */
343 	ptep += ARM_LPAE_LVL_IDX(iova, lvl, data);
344 
345 	/* If we can install a leaf entry at this level, then do so */
346 	if (size == block_size)
347 		return arm_lpae_init_pte(data, iova, paddr, prot, lvl, ptep);
348 
349 	/* We can't allocate tables at the final level */
350 	if (WARN_ON(lvl >= ARM_LPAE_MAX_LEVELS - 1))
351 		return -EINVAL;
352 
353 	/* Grab a pointer to the next level */
354 	pte = READ_ONCE(*ptep);
355 	if (!pte) {
356 		cptep = __arm_lpae_alloc_pages(tblsz, gfp, cfg);
357 		if (!cptep)
358 			return -ENOMEM;
359 
360 		pte = arm_lpae_install_table(cptep, ptep, 0, cfg);
361 		if (pte)
362 			__arm_lpae_free_pages(cptep, tblsz, cfg);
363 	} else if (!cfg->coherent_walk && !(pte & ARM_LPAE_PTE_SW_SYNC)) {
364 		__arm_lpae_sync_pte(ptep, cfg);
365 	}
366 
367 	if (pte && !iopte_leaf(pte, lvl, data->iop.fmt)) {
368 		cptep = iopte_deref(pte, data);
369 	} else if (pte) {
370 		/* We require an unmap first */
371 		WARN_ON(!selftest_running);
372 		return -EEXIST;
373 	}
374 
375 	/* Rinse, repeat */
376 	return __arm_lpae_map(data, iova, paddr, size, prot, lvl + 1, cptep, gfp);
377 }
378 
379 static arm_lpae_iopte arm_lpae_prot_to_pte(struct arm_lpae_io_pgtable *data,
380 					   int prot)
381 {
382 	arm_lpae_iopte pte;
383 
384 	if (data->iop.fmt == ARM_64_LPAE_S1 ||
385 	    data->iop.fmt == ARM_32_LPAE_S1) {
386 		pte = ARM_LPAE_PTE_nG;
387 		if (!(prot & IOMMU_WRITE) && (prot & IOMMU_READ))
388 			pte |= ARM_LPAE_PTE_AP_RDONLY;
389 		if (!(prot & IOMMU_PRIV))
390 			pte |= ARM_LPAE_PTE_AP_UNPRIV;
391 	} else {
392 		pte = ARM_LPAE_PTE_HAP_FAULT;
393 		if (prot & IOMMU_READ)
394 			pte |= ARM_LPAE_PTE_HAP_READ;
395 		if (prot & IOMMU_WRITE)
396 			pte |= ARM_LPAE_PTE_HAP_WRITE;
397 	}
398 
399 	/*
400 	 * Note that this logic is structured to accommodate Mali LPAE
401 	 * having stage-1-like attributes but stage-2-like permissions.
402 	 */
403 	if (data->iop.fmt == ARM_64_LPAE_S2 ||
404 	    data->iop.fmt == ARM_32_LPAE_S2) {
405 		if (prot & IOMMU_MMIO)
406 			pte |= ARM_LPAE_PTE_MEMATTR_DEV;
407 		else if (prot & IOMMU_CACHE)
408 			pte |= ARM_LPAE_PTE_MEMATTR_OIWB;
409 		else
410 			pte |= ARM_LPAE_PTE_MEMATTR_NC;
411 	} else {
412 		if (prot & IOMMU_MMIO)
413 			pte |= (ARM_LPAE_MAIR_ATTR_IDX_DEV
414 				<< ARM_LPAE_PTE_ATTRINDX_SHIFT);
415 		else if (prot & IOMMU_CACHE)
416 			pte |= (ARM_LPAE_MAIR_ATTR_IDX_CACHE
417 				<< ARM_LPAE_PTE_ATTRINDX_SHIFT);
418 	}
419 
420 	/*
421 	 * Also Mali has its own notions of shareability wherein its Inner
422 	 * domain covers the cores within the GPU, and its Outer domain is
423 	 * "outside the GPU" (i.e. either the Inner or System domain in CPU
424 	 * terms, depending on coherency).
425 	 */
426 	if (prot & IOMMU_CACHE && data->iop.fmt != ARM_MALI_LPAE)
427 		pte |= ARM_LPAE_PTE_SH_IS;
428 	else
429 		pte |= ARM_LPAE_PTE_SH_OS;
430 
431 	if (prot & IOMMU_NOEXEC)
432 		pte |= ARM_LPAE_PTE_XN;
433 
434 	if (data->iop.cfg.quirks & IO_PGTABLE_QUIRK_ARM_NS)
435 		pte |= ARM_LPAE_PTE_NS;
436 
437 	if (data->iop.fmt != ARM_MALI_LPAE)
438 		pte |= ARM_LPAE_PTE_AF;
439 
440 	return pte;
441 }
442 
443 static int arm_lpae_map(struct io_pgtable_ops *ops, unsigned long iova,
444 			phys_addr_t paddr, size_t size, int iommu_prot, gfp_t gfp)
445 {
446 	struct arm_lpae_io_pgtable *data = io_pgtable_ops_to_data(ops);
447 	struct io_pgtable_cfg *cfg = &data->iop.cfg;
448 	arm_lpae_iopte *ptep = data->pgd;
449 	int ret, lvl = data->start_level;
450 	arm_lpae_iopte prot;
451 	long iaext = (s64)iova >> cfg->ias;
452 
453 	/* If no access, then nothing to do */
454 	if (!(iommu_prot & (IOMMU_READ | IOMMU_WRITE)))
455 		return 0;
456 
457 	if (WARN_ON(!size || (size & cfg->pgsize_bitmap) != size))
458 		return -EINVAL;
459 
460 	if (cfg->quirks & IO_PGTABLE_QUIRK_ARM_TTBR1)
461 		iaext = ~iaext;
462 	if (WARN_ON(iaext || paddr >> cfg->oas))
463 		return -ERANGE;
464 
465 	prot = arm_lpae_prot_to_pte(data, iommu_prot);
466 	ret = __arm_lpae_map(data, iova, paddr, size, prot, lvl, ptep, gfp);
467 	/*
468 	 * Synchronise all PTE updates for the new mapping before there's
469 	 * a chance for anything to kick off a table walk for the new iova.
470 	 */
471 	wmb();
472 
473 	return ret;
474 }
475 
476 static void __arm_lpae_free_pgtable(struct arm_lpae_io_pgtable *data, int lvl,
477 				    arm_lpae_iopte *ptep)
478 {
479 	arm_lpae_iopte *start, *end;
480 	unsigned long table_size;
481 
482 	if (lvl == data->start_level)
483 		table_size = ARM_LPAE_PGD_SIZE(data);
484 	else
485 		table_size = ARM_LPAE_GRANULE(data);
486 
487 	start = ptep;
488 
489 	/* Only leaf entries at the last level */
490 	if (lvl == ARM_LPAE_MAX_LEVELS - 1)
491 		end = ptep;
492 	else
493 		end = (void *)ptep + table_size;
494 
495 	while (ptep != end) {
496 		arm_lpae_iopte pte = *ptep++;
497 
498 		if (!pte || iopte_leaf(pte, lvl, data->iop.fmt))
499 			continue;
500 
501 		__arm_lpae_free_pgtable(data, lvl + 1, iopte_deref(pte, data));
502 	}
503 
504 	__arm_lpae_free_pages(start, table_size, &data->iop.cfg);
505 }
506 
507 static void arm_lpae_free_pgtable(struct io_pgtable *iop)
508 {
509 	struct arm_lpae_io_pgtable *data = io_pgtable_to_data(iop);
510 
511 	__arm_lpae_free_pgtable(data, data->start_level, data->pgd);
512 	kfree(data);
513 }
514 
515 static size_t arm_lpae_split_blk_unmap(struct arm_lpae_io_pgtable *data,
516 				       struct iommu_iotlb_gather *gather,
517 				       unsigned long iova, size_t size,
518 				       arm_lpae_iopte blk_pte, int lvl,
519 				       arm_lpae_iopte *ptep)
520 {
521 	struct io_pgtable_cfg *cfg = &data->iop.cfg;
522 	arm_lpae_iopte pte, *tablep;
523 	phys_addr_t blk_paddr;
524 	size_t tablesz = ARM_LPAE_GRANULE(data);
525 	size_t split_sz = ARM_LPAE_BLOCK_SIZE(lvl, data);
526 	int i, unmap_idx = -1;
527 
528 	if (WARN_ON(lvl == ARM_LPAE_MAX_LEVELS))
529 		return 0;
530 
531 	tablep = __arm_lpae_alloc_pages(tablesz, GFP_ATOMIC, cfg);
532 	if (!tablep)
533 		return 0; /* Bytes unmapped */
534 
535 	if (size == split_sz)
536 		unmap_idx = ARM_LPAE_LVL_IDX(iova, lvl, data);
537 
538 	blk_paddr = iopte_to_paddr(blk_pte, data);
539 	pte = iopte_prot(blk_pte);
540 
541 	for (i = 0; i < tablesz / sizeof(pte); i++, blk_paddr += split_sz) {
542 		/* Unmap! */
543 		if (i == unmap_idx)
544 			continue;
545 
546 		__arm_lpae_init_pte(data, blk_paddr, pte, lvl, &tablep[i]);
547 	}
548 
549 	pte = arm_lpae_install_table(tablep, ptep, blk_pte, cfg);
550 	if (pte != blk_pte) {
551 		__arm_lpae_free_pages(tablep, tablesz, cfg);
552 		/*
553 		 * We may race against someone unmapping another part of this
554 		 * block, but anything else is invalid. We can't misinterpret
555 		 * a page entry here since we're never at the last level.
556 		 */
557 		if (iopte_type(pte, lvl - 1) != ARM_LPAE_PTE_TYPE_TABLE)
558 			return 0;
559 
560 		tablep = iopte_deref(pte, data);
561 	} else if (unmap_idx >= 0) {
562 		io_pgtable_tlb_add_page(&data->iop, gather, iova, size);
563 		return size;
564 	}
565 
566 	return __arm_lpae_unmap(data, gather, iova, size, lvl, tablep);
567 }
568 
569 static size_t __arm_lpae_unmap(struct arm_lpae_io_pgtable *data,
570 			       struct iommu_iotlb_gather *gather,
571 			       unsigned long iova, size_t size, int lvl,
572 			       arm_lpae_iopte *ptep)
573 {
574 	arm_lpae_iopte pte;
575 	struct io_pgtable *iop = &data->iop;
576 
577 	/* Something went horribly wrong and we ran out of page table */
578 	if (WARN_ON(lvl == ARM_LPAE_MAX_LEVELS))
579 		return 0;
580 
581 	ptep += ARM_LPAE_LVL_IDX(iova, lvl, data);
582 	pte = READ_ONCE(*ptep);
583 	if (WARN_ON(!pte))
584 		return 0;
585 
586 	/* If the size matches this level, we're in the right place */
587 	if (size == ARM_LPAE_BLOCK_SIZE(lvl, data)) {
588 		__arm_lpae_set_pte(ptep, 0, &iop->cfg);
589 
590 		if (!iopte_leaf(pte, lvl, iop->fmt)) {
591 			/* Also flush any partial walks */
592 			io_pgtable_tlb_flush_walk(iop, iova, size,
593 						  ARM_LPAE_GRANULE(data));
594 			ptep = iopte_deref(pte, data);
595 			__arm_lpae_free_pgtable(data, lvl + 1, ptep);
596 		} else if (iop->cfg.quirks & IO_PGTABLE_QUIRK_NON_STRICT) {
597 			/*
598 			 * Order the PTE update against queueing the IOVA, to
599 			 * guarantee that a flush callback from a different CPU
600 			 * has observed it before the TLBIALL can be issued.
601 			 */
602 			smp_wmb();
603 		} else {
604 			io_pgtable_tlb_add_page(iop, gather, iova, size);
605 		}
606 
607 		return size;
608 	} else if (iopte_leaf(pte, lvl, iop->fmt)) {
609 		/*
610 		 * Insert a table at the next level to map the old region,
611 		 * minus the part we want to unmap
612 		 */
613 		return arm_lpae_split_blk_unmap(data, gather, iova, size, pte,
614 						lvl + 1, ptep);
615 	}
616 
617 	/* Keep on walkin' */
618 	ptep = iopte_deref(pte, data);
619 	return __arm_lpae_unmap(data, gather, iova, size, lvl + 1, ptep);
620 }
621 
622 static size_t arm_lpae_unmap(struct io_pgtable_ops *ops, unsigned long iova,
623 			     size_t size, struct iommu_iotlb_gather *gather)
624 {
625 	struct arm_lpae_io_pgtable *data = io_pgtable_ops_to_data(ops);
626 	struct io_pgtable_cfg *cfg = &data->iop.cfg;
627 	arm_lpae_iopte *ptep = data->pgd;
628 	long iaext = (s64)iova >> cfg->ias;
629 
630 	if (WARN_ON(!size || (size & cfg->pgsize_bitmap) != size))
631 		return 0;
632 
633 	if (cfg->quirks & IO_PGTABLE_QUIRK_ARM_TTBR1)
634 		iaext = ~iaext;
635 	if (WARN_ON(iaext))
636 		return 0;
637 
638 	return __arm_lpae_unmap(data, gather, iova, size, data->start_level, ptep);
639 }
640 
641 static phys_addr_t arm_lpae_iova_to_phys(struct io_pgtable_ops *ops,
642 					 unsigned long iova)
643 {
644 	struct arm_lpae_io_pgtable *data = io_pgtable_ops_to_data(ops);
645 	arm_lpae_iopte pte, *ptep = data->pgd;
646 	int lvl = data->start_level;
647 
648 	do {
649 		/* Valid IOPTE pointer? */
650 		if (!ptep)
651 			return 0;
652 
653 		/* Grab the IOPTE we're interested in */
654 		ptep += ARM_LPAE_LVL_IDX(iova, lvl, data);
655 		pte = READ_ONCE(*ptep);
656 
657 		/* Valid entry? */
658 		if (!pte)
659 			return 0;
660 
661 		/* Leaf entry? */
662 		if (iopte_leaf(pte, lvl, data->iop.fmt))
663 			goto found_translation;
664 
665 		/* Take it to the next level */
666 		ptep = iopte_deref(pte, data);
667 	} while (++lvl < ARM_LPAE_MAX_LEVELS);
668 
669 	/* Ran out of page tables to walk */
670 	return 0;
671 
672 found_translation:
673 	iova &= (ARM_LPAE_BLOCK_SIZE(lvl, data) - 1);
674 	return iopte_to_paddr(pte, data) | iova;
675 }
676 
677 static void arm_lpae_restrict_pgsizes(struct io_pgtable_cfg *cfg)
678 {
679 	unsigned long granule, page_sizes;
680 	unsigned int max_addr_bits = 48;
681 
682 	/*
683 	 * We need to restrict the supported page sizes to match the
684 	 * translation regime for a particular granule. Aim to match
685 	 * the CPU page size if possible, otherwise prefer smaller sizes.
686 	 * While we're at it, restrict the block sizes to match the
687 	 * chosen granule.
688 	 */
689 	if (cfg->pgsize_bitmap & PAGE_SIZE)
690 		granule = PAGE_SIZE;
691 	else if (cfg->pgsize_bitmap & ~PAGE_MASK)
692 		granule = 1UL << __fls(cfg->pgsize_bitmap & ~PAGE_MASK);
693 	else if (cfg->pgsize_bitmap & PAGE_MASK)
694 		granule = 1UL << __ffs(cfg->pgsize_bitmap & PAGE_MASK);
695 	else
696 		granule = 0;
697 
698 	switch (granule) {
699 	case SZ_4K:
700 		page_sizes = (SZ_4K | SZ_2M | SZ_1G);
701 		break;
702 	case SZ_16K:
703 		page_sizes = (SZ_16K | SZ_32M);
704 		break;
705 	case SZ_64K:
706 		max_addr_bits = 52;
707 		page_sizes = (SZ_64K | SZ_512M);
708 		if (cfg->oas > 48)
709 			page_sizes |= 1ULL << 42; /* 4TB */
710 		break;
711 	default:
712 		page_sizes = 0;
713 	}
714 
715 	cfg->pgsize_bitmap &= page_sizes;
716 	cfg->ias = min(cfg->ias, max_addr_bits);
717 	cfg->oas = min(cfg->oas, max_addr_bits);
718 }
719 
720 static struct arm_lpae_io_pgtable *
721 arm_lpae_alloc_pgtable(struct io_pgtable_cfg *cfg)
722 {
723 	struct arm_lpae_io_pgtable *data;
724 	int levels, va_bits, pg_shift;
725 
726 	arm_lpae_restrict_pgsizes(cfg);
727 
728 	if (!(cfg->pgsize_bitmap & (SZ_4K | SZ_16K | SZ_64K)))
729 		return NULL;
730 
731 	if (cfg->ias > ARM_LPAE_MAX_ADDR_BITS)
732 		return NULL;
733 
734 	if (cfg->oas > ARM_LPAE_MAX_ADDR_BITS)
735 		return NULL;
736 
737 	data = kmalloc(sizeof(*data), GFP_KERNEL);
738 	if (!data)
739 		return NULL;
740 
741 	pg_shift = __ffs(cfg->pgsize_bitmap);
742 	data->bits_per_level = pg_shift - ilog2(sizeof(arm_lpae_iopte));
743 
744 	va_bits = cfg->ias - pg_shift;
745 	levels = DIV_ROUND_UP(va_bits, data->bits_per_level);
746 	data->start_level = ARM_LPAE_MAX_LEVELS - levels;
747 
748 	/* Calculate the actual size of our pgd (without concatenation) */
749 	data->pgd_bits = va_bits - (data->bits_per_level * (levels - 1));
750 
751 	data->iop.ops = (struct io_pgtable_ops) {
752 		.map		= arm_lpae_map,
753 		.unmap		= arm_lpae_unmap,
754 		.iova_to_phys	= arm_lpae_iova_to_phys,
755 	};
756 
757 	return data;
758 }
759 
760 static struct io_pgtable *
761 arm_64_lpae_alloc_pgtable_s1(struct io_pgtable_cfg *cfg, void *cookie)
762 {
763 	u64 reg;
764 	struct arm_lpae_io_pgtable *data;
765 	typeof(&cfg->arm_lpae_s1_cfg.tcr) tcr = &cfg->arm_lpae_s1_cfg.tcr;
766 	bool tg1;
767 
768 	if (cfg->quirks & ~(IO_PGTABLE_QUIRK_ARM_NS |
769 			    IO_PGTABLE_QUIRK_NON_STRICT |
770 			    IO_PGTABLE_QUIRK_ARM_TTBR1))
771 		return NULL;
772 
773 	data = arm_lpae_alloc_pgtable(cfg);
774 	if (!data)
775 		return NULL;
776 
777 	/* TCR */
778 	if (cfg->coherent_walk) {
779 		tcr->sh = ARM_LPAE_TCR_SH_IS;
780 		tcr->irgn = ARM_LPAE_TCR_RGN_WBWA;
781 		tcr->orgn = ARM_LPAE_TCR_RGN_WBWA;
782 	} else {
783 		tcr->sh = ARM_LPAE_TCR_SH_OS;
784 		tcr->irgn = ARM_LPAE_TCR_RGN_NC;
785 		tcr->orgn = ARM_LPAE_TCR_RGN_NC;
786 	}
787 
788 	tg1 = cfg->quirks & IO_PGTABLE_QUIRK_ARM_TTBR1;
789 	switch (ARM_LPAE_GRANULE(data)) {
790 	case SZ_4K:
791 		tcr->tg = tg1 ? ARM_LPAE_TCR_TG1_4K : ARM_LPAE_TCR_TG0_4K;
792 		break;
793 	case SZ_16K:
794 		tcr->tg = tg1 ? ARM_LPAE_TCR_TG1_16K : ARM_LPAE_TCR_TG0_16K;
795 		break;
796 	case SZ_64K:
797 		tcr->tg = tg1 ? ARM_LPAE_TCR_TG1_64K : ARM_LPAE_TCR_TG0_64K;
798 		break;
799 	}
800 
801 	switch (cfg->oas) {
802 	case 32:
803 		tcr->ips = ARM_LPAE_TCR_PS_32_BIT;
804 		break;
805 	case 36:
806 		tcr->ips = ARM_LPAE_TCR_PS_36_BIT;
807 		break;
808 	case 40:
809 		tcr->ips = ARM_LPAE_TCR_PS_40_BIT;
810 		break;
811 	case 42:
812 		tcr->ips = ARM_LPAE_TCR_PS_42_BIT;
813 		break;
814 	case 44:
815 		tcr->ips = ARM_LPAE_TCR_PS_44_BIT;
816 		break;
817 	case 48:
818 		tcr->ips = ARM_LPAE_TCR_PS_48_BIT;
819 		break;
820 	case 52:
821 		tcr->ips = ARM_LPAE_TCR_PS_52_BIT;
822 		break;
823 	default:
824 		goto out_free_data;
825 	}
826 
827 	tcr->tsz = 64ULL - cfg->ias;
828 
829 	/* MAIRs */
830 	reg = (ARM_LPAE_MAIR_ATTR_NC
831 	       << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_NC)) |
832 	      (ARM_LPAE_MAIR_ATTR_WBRWA
833 	       << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_CACHE)) |
834 	      (ARM_LPAE_MAIR_ATTR_DEVICE
835 	       << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_DEV)) |
836 	      (ARM_LPAE_MAIR_ATTR_INC_OWBRWA
837 	       << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_INC_OCACHE));
838 
839 	cfg->arm_lpae_s1_cfg.mair = reg;
840 
841 	/* Looking good; allocate a pgd */
842 	data->pgd = __arm_lpae_alloc_pages(ARM_LPAE_PGD_SIZE(data),
843 					   GFP_KERNEL, cfg);
844 	if (!data->pgd)
845 		goto out_free_data;
846 
847 	/* Ensure the empty pgd is visible before any actual TTBR write */
848 	wmb();
849 
850 	/* TTBR */
851 	cfg->arm_lpae_s1_cfg.ttbr = virt_to_phys(data->pgd);
852 	return &data->iop;
853 
854 out_free_data:
855 	kfree(data);
856 	return NULL;
857 }
858 
859 static struct io_pgtable *
860 arm_64_lpae_alloc_pgtable_s2(struct io_pgtable_cfg *cfg, void *cookie)
861 {
862 	u64 sl;
863 	struct arm_lpae_io_pgtable *data;
864 	typeof(&cfg->arm_lpae_s2_cfg.vtcr) vtcr = &cfg->arm_lpae_s2_cfg.vtcr;
865 
866 	/* The NS quirk doesn't apply at stage 2 */
867 	if (cfg->quirks & ~(IO_PGTABLE_QUIRK_NON_STRICT))
868 		return NULL;
869 
870 	data = arm_lpae_alloc_pgtable(cfg);
871 	if (!data)
872 		return NULL;
873 
874 	/*
875 	 * Concatenate PGDs at level 1 if possible in order to reduce
876 	 * the depth of the stage-2 walk.
877 	 */
878 	if (data->start_level == 0) {
879 		unsigned long pgd_pages;
880 
881 		pgd_pages = ARM_LPAE_PGD_SIZE(data) / sizeof(arm_lpae_iopte);
882 		if (pgd_pages <= ARM_LPAE_S2_MAX_CONCAT_PAGES) {
883 			data->pgd_bits += data->bits_per_level;
884 			data->start_level++;
885 		}
886 	}
887 
888 	/* VTCR */
889 	if (cfg->coherent_walk) {
890 		vtcr->sh = ARM_LPAE_TCR_SH_IS;
891 		vtcr->irgn = ARM_LPAE_TCR_RGN_WBWA;
892 		vtcr->orgn = ARM_LPAE_TCR_RGN_WBWA;
893 	} else {
894 		vtcr->sh = ARM_LPAE_TCR_SH_OS;
895 		vtcr->irgn = ARM_LPAE_TCR_RGN_NC;
896 		vtcr->orgn = ARM_LPAE_TCR_RGN_NC;
897 	}
898 
899 	sl = data->start_level;
900 
901 	switch (ARM_LPAE_GRANULE(data)) {
902 	case SZ_4K:
903 		vtcr->tg = ARM_LPAE_TCR_TG0_4K;
904 		sl++; /* SL0 format is different for 4K granule size */
905 		break;
906 	case SZ_16K:
907 		vtcr->tg = ARM_LPAE_TCR_TG0_16K;
908 		break;
909 	case SZ_64K:
910 		vtcr->tg = ARM_LPAE_TCR_TG0_64K;
911 		break;
912 	}
913 
914 	switch (cfg->oas) {
915 	case 32:
916 		vtcr->ps = ARM_LPAE_TCR_PS_32_BIT;
917 		break;
918 	case 36:
919 		vtcr->ps = ARM_LPAE_TCR_PS_36_BIT;
920 		break;
921 	case 40:
922 		vtcr->ps = ARM_LPAE_TCR_PS_40_BIT;
923 		break;
924 	case 42:
925 		vtcr->ps = ARM_LPAE_TCR_PS_42_BIT;
926 		break;
927 	case 44:
928 		vtcr->ps = ARM_LPAE_TCR_PS_44_BIT;
929 		break;
930 	case 48:
931 		vtcr->ps = ARM_LPAE_TCR_PS_48_BIT;
932 		break;
933 	case 52:
934 		vtcr->ps = ARM_LPAE_TCR_PS_52_BIT;
935 		break;
936 	default:
937 		goto out_free_data;
938 	}
939 
940 	vtcr->tsz = 64ULL - cfg->ias;
941 	vtcr->sl = ~sl & ARM_LPAE_VTCR_SL0_MASK;
942 
943 	/* Allocate pgd pages */
944 	data->pgd = __arm_lpae_alloc_pages(ARM_LPAE_PGD_SIZE(data),
945 					   GFP_KERNEL, cfg);
946 	if (!data->pgd)
947 		goto out_free_data;
948 
949 	/* Ensure the empty pgd is visible before any actual TTBR write */
950 	wmb();
951 
952 	/* VTTBR */
953 	cfg->arm_lpae_s2_cfg.vttbr = virt_to_phys(data->pgd);
954 	return &data->iop;
955 
956 out_free_data:
957 	kfree(data);
958 	return NULL;
959 }
960 
961 static struct io_pgtable *
962 arm_32_lpae_alloc_pgtable_s1(struct io_pgtable_cfg *cfg, void *cookie)
963 {
964 	if (cfg->ias > 32 || cfg->oas > 40)
965 		return NULL;
966 
967 	cfg->pgsize_bitmap &= (SZ_4K | SZ_2M | SZ_1G);
968 	return arm_64_lpae_alloc_pgtable_s1(cfg, cookie);
969 }
970 
971 static struct io_pgtable *
972 arm_32_lpae_alloc_pgtable_s2(struct io_pgtable_cfg *cfg, void *cookie)
973 {
974 	if (cfg->ias > 40 || cfg->oas > 40)
975 		return NULL;
976 
977 	cfg->pgsize_bitmap &= (SZ_4K | SZ_2M | SZ_1G);
978 	return arm_64_lpae_alloc_pgtable_s2(cfg, cookie);
979 }
980 
981 static struct io_pgtable *
982 arm_mali_lpae_alloc_pgtable(struct io_pgtable_cfg *cfg, void *cookie)
983 {
984 	struct arm_lpae_io_pgtable *data;
985 
986 	/* No quirks for Mali (hopefully) */
987 	if (cfg->quirks)
988 		return NULL;
989 
990 	if (cfg->ias > 48 || cfg->oas > 40)
991 		return NULL;
992 
993 	cfg->pgsize_bitmap &= (SZ_4K | SZ_2M | SZ_1G);
994 
995 	data = arm_lpae_alloc_pgtable(cfg);
996 	if (!data)
997 		return NULL;
998 
999 	/* Mali seems to need a full 4-level table regardless of IAS */
1000 	if (data->start_level > 0) {
1001 		data->start_level = 0;
1002 		data->pgd_bits = 0;
1003 	}
1004 	/*
1005 	 * MEMATTR: Mali has no actual notion of a non-cacheable type, so the
1006 	 * best we can do is mimic the out-of-tree driver and hope that the
1007 	 * "implementation-defined caching policy" is good enough. Similarly,
1008 	 * we'll use it for the sake of a valid attribute for our 'device'
1009 	 * index, although callers should never request that in practice.
1010 	 */
1011 	cfg->arm_mali_lpae_cfg.memattr =
1012 		(ARM_MALI_LPAE_MEMATTR_IMP_DEF
1013 		 << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_NC)) |
1014 		(ARM_MALI_LPAE_MEMATTR_WRITE_ALLOC
1015 		 << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_CACHE)) |
1016 		(ARM_MALI_LPAE_MEMATTR_IMP_DEF
1017 		 << ARM_LPAE_MAIR_ATTR_SHIFT(ARM_LPAE_MAIR_ATTR_IDX_DEV));
1018 
1019 	data->pgd = __arm_lpae_alloc_pages(ARM_LPAE_PGD_SIZE(data), GFP_KERNEL,
1020 					   cfg);
1021 	if (!data->pgd)
1022 		goto out_free_data;
1023 
1024 	/* Ensure the empty pgd is visible before TRANSTAB can be written */
1025 	wmb();
1026 
1027 	cfg->arm_mali_lpae_cfg.transtab = virt_to_phys(data->pgd) |
1028 					  ARM_MALI_LPAE_TTBR_READ_INNER |
1029 					  ARM_MALI_LPAE_TTBR_ADRMODE_TABLE;
1030 	if (cfg->coherent_walk)
1031 		cfg->arm_mali_lpae_cfg.transtab |= ARM_MALI_LPAE_TTBR_SHARE_OUTER;
1032 
1033 	return &data->iop;
1034 
1035 out_free_data:
1036 	kfree(data);
1037 	return NULL;
1038 }
1039 
1040 struct io_pgtable_init_fns io_pgtable_arm_64_lpae_s1_init_fns = {
1041 	.alloc	= arm_64_lpae_alloc_pgtable_s1,
1042 	.free	= arm_lpae_free_pgtable,
1043 };
1044 
1045 struct io_pgtable_init_fns io_pgtable_arm_64_lpae_s2_init_fns = {
1046 	.alloc	= arm_64_lpae_alloc_pgtable_s2,
1047 	.free	= arm_lpae_free_pgtable,
1048 };
1049 
1050 struct io_pgtable_init_fns io_pgtable_arm_32_lpae_s1_init_fns = {
1051 	.alloc	= arm_32_lpae_alloc_pgtable_s1,
1052 	.free	= arm_lpae_free_pgtable,
1053 };
1054 
1055 struct io_pgtable_init_fns io_pgtable_arm_32_lpae_s2_init_fns = {
1056 	.alloc	= arm_32_lpae_alloc_pgtable_s2,
1057 	.free	= arm_lpae_free_pgtable,
1058 };
1059 
1060 struct io_pgtable_init_fns io_pgtable_arm_mali_lpae_init_fns = {
1061 	.alloc	= arm_mali_lpae_alloc_pgtable,
1062 	.free	= arm_lpae_free_pgtable,
1063 };
1064 
1065 #ifdef CONFIG_IOMMU_IO_PGTABLE_LPAE_SELFTEST
1066 
1067 static struct io_pgtable_cfg *cfg_cookie __initdata;
1068 
1069 static void __init dummy_tlb_flush_all(void *cookie)
1070 {
1071 	WARN_ON(cookie != cfg_cookie);
1072 }
1073 
1074 static void __init dummy_tlb_flush(unsigned long iova, size_t size,
1075 				   size_t granule, void *cookie)
1076 {
1077 	WARN_ON(cookie != cfg_cookie);
1078 	WARN_ON(!(size & cfg_cookie->pgsize_bitmap));
1079 }
1080 
1081 static void __init dummy_tlb_add_page(struct iommu_iotlb_gather *gather,
1082 				      unsigned long iova, size_t granule,
1083 				      void *cookie)
1084 {
1085 	dummy_tlb_flush(iova, granule, granule, cookie);
1086 }
1087 
1088 static const struct iommu_flush_ops dummy_tlb_ops __initconst = {
1089 	.tlb_flush_all	= dummy_tlb_flush_all,
1090 	.tlb_flush_walk	= dummy_tlb_flush,
1091 	.tlb_flush_leaf	= dummy_tlb_flush,
1092 	.tlb_add_page	= dummy_tlb_add_page,
1093 };
1094 
1095 static void __init arm_lpae_dump_ops(struct io_pgtable_ops *ops)
1096 {
1097 	struct arm_lpae_io_pgtable *data = io_pgtable_ops_to_data(ops);
1098 	struct io_pgtable_cfg *cfg = &data->iop.cfg;
1099 
1100 	pr_err("cfg: pgsize_bitmap 0x%lx, ias %u-bit\n",
1101 		cfg->pgsize_bitmap, cfg->ias);
1102 	pr_err("data: %d levels, 0x%zx pgd_size, %u pg_shift, %u bits_per_level, pgd @ %p\n",
1103 		ARM_LPAE_MAX_LEVELS - data->start_level, ARM_LPAE_PGD_SIZE(data),
1104 		ilog2(ARM_LPAE_GRANULE(data)), data->bits_per_level, data->pgd);
1105 }
1106 
1107 #define __FAIL(ops, i)	({						\
1108 		WARN(1, "selftest: test failed for fmt idx %d\n", (i));	\
1109 		arm_lpae_dump_ops(ops);					\
1110 		selftest_running = false;				\
1111 		-EFAULT;						\
1112 })
1113 
1114 static int __init arm_lpae_run_tests(struct io_pgtable_cfg *cfg)
1115 {
1116 	static const enum io_pgtable_fmt fmts[] __initconst = {
1117 		ARM_64_LPAE_S1,
1118 		ARM_64_LPAE_S2,
1119 	};
1120 
1121 	int i, j;
1122 	unsigned long iova;
1123 	size_t size;
1124 	struct io_pgtable_ops *ops;
1125 
1126 	selftest_running = true;
1127 
1128 	for (i = 0; i < ARRAY_SIZE(fmts); ++i) {
1129 		cfg_cookie = cfg;
1130 		ops = alloc_io_pgtable_ops(fmts[i], cfg, cfg);
1131 		if (!ops) {
1132 			pr_err("selftest: failed to allocate io pgtable ops\n");
1133 			return -ENOMEM;
1134 		}
1135 
1136 		/*
1137 		 * Initial sanity checks.
1138 		 * Empty page tables shouldn't provide any translations.
1139 		 */
1140 		if (ops->iova_to_phys(ops, 42))
1141 			return __FAIL(ops, i);
1142 
1143 		if (ops->iova_to_phys(ops, SZ_1G + 42))
1144 			return __FAIL(ops, i);
1145 
1146 		if (ops->iova_to_phys(ops, SZ_2G + 42))
1147 			return __FAIL(ops, i);
1148 
1149 		/*
1150 		 * Distinct mappings of different granule sizes.
1151 		 */
1152 		iova = 0;
1153 		for_each_set_bit(j, &cfg->pgsize_bitmap, BITS_PER_LONG) {
1154 			size = 1UL << j;
1155 
1156 			if (ops->map(ops, iova, iova, size, IOMMU_READ |
1157 							    IOMMU_WRITE |
1158 							    IOMMU_NOEXEC |
1159 							    IOMMU_CACHE, GFP_KERNEL))
1160 				return __FAIL(ops, i);
1161 
1162 			/* Overlapping mappings */
1163 			if (!ops->map(ops, iova, iova + size, size,
1164 				      IOMMU_READ | IOMMU_NOEXEC, GFP_KERNEL))
1165 				return __FAIL(ops, i);
1166 
1167 			if (ops->iova_to_phys(ops, iova + 42) != (iova + 42))
1168 				return __FAIL(ops, i);
1169 
1170 			iova += SZ_1G;
1171 		}
1172 
1173 		/* Partial unmap */
1174 		size = 1UL << __ffs(cfg->pgsize_bitmap);
1175 		if (ops->unmap(ops, SZ_1G + size, size, NULL) != size)
1176 			return __FAIL(ops, i);
1177 
1178 		/* Remap of partial unmap */
1179 		if (ops->map(ops, SZ_1G + size, size, size, IOMMU_READ, GFP_KERNEL))
1180 			return __FAIL(ops, i);
1181 
1182 		if (ops->iova_to_phys(ops, SZ_1G + size + 42) != (size + 42))
1183 			return __FAIL(ops, i);
1184 
1185 		/* Full unmap */
1186 		iova = 0;
1187 		for_each_set_bit(j, &cfg->pgsize_bitmap, BITS_PER_LONG) {
1188 			size = 1UL << j;
1189 
1190 			if (ops->unmap(ops, iova, size, NULL) != size)
1191 				return __FAIL(ops, i);
1192 
1193 			if (ops->iova_to_phys(ops, iova + 42))
1194 				return __FAIL(ops, i);
1195 
1196 			/* Remap full block */
1197 			if (ops->map(ops, iova, iova, size, IOMMU_WRITE, GFP_KERNEL))
1198 				return __FAIL(ops, i);
1199 
1200 			if (ops->iova_to_phys(ops, iova + 42) != (iova + 42))
1201 				return __FAIL(ops, i);
1202 
1203 			iova += SZ_1G;
1204 		}
1205 
1206 		free_io_pgtable_ops(ops);
1207 	}
1208 
1209 	selftest_running = false;
1210 	return 0;
1211 }
1212 
1213 static int __init arm_lpae_do_selftests(void)
1214 {
1215 	static const unsigned long pgsize[] __initconst = {
1216 		SZ_4K | SZ_2M | SZ_1G,
1217 		SZ_16K | SZ_32M,
1218 		SZ_64K | SZ_512M,
1219 	};
1220 
1221 	static const unsigned int ias[] __initconst = {
1222 		32, 36, 40, 42, 44, 48,
1223 	};
1224 
1225 	int i, j, pass = 0, fail = 0;
1226 	struct io_pgtable_cfg cfg = {
1227 		.tlb = &dummy_tlb_ops,
1228 		.oas = 48,
1229 		.coherent_walk = true,
1230 	};
1231 
1232 	for (i = 0; i < ARRAY_SIZE(pgsize); ++i) {
1233 		for (j = 0; j < ARRAY_SIZE(ias); ++j) {
1234 			cfg.pgsize_bitmap = pgsize[i];
1235 			cfg.ias = ias[j];
1236 			pr_info("selftest: pgsize_bitmap 0x%08lx, IAS %u\n",
1237 				pgsize[i], ias[j]);
1238 			if (arm_lpae_run_tests(&cfg))
1239 				fail++;
1240 			else
1241 				pass++;
1242 		}
1243 	}
1244 
1245 	pr_info("selftest: completed with %d PASS %d FAIL\n", pass, fail);
1246 	return fail ? -EFAULT : 0;
1247 }
1248 subsys_initcall(arm_lpae_do_selftests);
1249 #endif
1250