xref: /linux/kernel/dma/swiotlb.c (revision 8e07e0e3964ca4e23ce7b68e2096fe660a888942)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  * Dynamic DMA mapping support.
4  *
5  * This implementation is a fallback for platforms that do not support
6  * I/O TLBs (aka DMA address translation hardware).
7  * Copyright (C) 2000 Asit Mallick <Asit.K.Mallick@intel.com>
8  * Copyright (C) 2000 Goutham Rao <goutham.rao@intel.com>
9  * Copyright (C) 2000, 2003 Hewlett-Packard Co
10  *	David Mosberger-Tang <davidm@hpl.hp.com>
11  *
12  * 03/05/07 davidm	Switch from PCI-DMA to generic device DMA API.
13  * 00/12/13 davidm	Rename to swiotlb.c and add mark_clean() to avoid
14  *			unnecessary i-cache flushing.
15  * 04/07/.. ak		Better overflow handling. Assorted fixes.
16  * 05/09/10 linville	Add support for syncing ranges, support syncing for
17  *			DMA_BIDIRECTIONAL mappings, miscellaneous cleanup.
18  * 08/12/11 beckyb	Add highmem support
19  */
20 
21 #define pr_fmt(fmt) "software IO TLB: " fmt
22 
23 #include <linux/cache.h>
24 #include <linux/cc_platform.h>
25 #include <linux/ctype.h>
26 #include <linux/debugfs.h>
27 #include <linux/dma-direct.h>
28 #include <linux/dma-map-ops.h>
29 #include <linux/export.h>
30 #include <linux/gfp.h>
31 #include <linux/highmem.h>
32 #include <linux/io.h>
33 #include <linux/iommu-helper.h>
34 #include <linux/init.h>
35 #include <linux/memblock.h>
36 #include <linux/mm.h>
37 #include <linux/pfn.h>
38 #include <linux/rculist.h>
39 #include <linux/scatterlist.h>
40 #include <linux/set_memory.h>
41 #include <linux/spinlock.h>
42 #include <linux/string.h>
43 #include <linux/swiotlb.h>
44 #include <linux/types.h>
45 #ifdef CONFIG_DMA_RESTRICTED_POOL
46 #include <linux/of.h>
47 #include <linux/of_fdt.h>
48 #include <linux/of_reserved_mem.h>
49 #include <linux/slab.h>
50 #endif
51 
52 #define CREATE_TRACE_POINTS
53 #include <trace/events/swiotlb.h>
54 
55 #define SLABS_PER_PAGE (1 << (PAGE_SHIFT - IO_TLB_SHIFT))
56 
57 /*
58  * Minimum IO TLB size to bother booting with.  Systems with mainly
59  * 64bit capable cards will only lightly use the swiotlb.  If we can't
60  * allocate a contiguous 1MB, we're probably in trouble anyway.
61  */
62 #define IO_TLB_MIN_SLABS ((1<<20) >> IO_TLB_SHIFT)
63 
64 #define INVALID_PHYS_ADDR (~(phys_addr_t)0)
65 
66 /**
67  * struct io_tlb_slot - IO TLB slot descriptor
68  * @orig_addr:	The original address corresponding to a mapped entry.
69  * @alloc_size:	Size of the allocated buffer.
70  * @list:	The free list describing the number of free entries available
71  *		from each index.
72  */
73 struct io_tlb_slot {
74 	phys_addr_t orig_addr;
75 	size_t alloc_size;
76 	unsigned int list;
77 };
78 
79 static bool swiotlb_force_bounce;
80 static bool swiotlb_force_disable;
81 
82 #ifdef CONFIG_SWIOTLB_DYNAMIC
83 
84 static void swiotlb_dyn_alloc(struct work_struct *work);
85 
86 static struct io_tlb_mem io_tlb_default_mem = {
87 	.lock = __SPIN_LOCK_UNLOCKED(io_tlb_default_mem.lock),
88 	.pools = LIST_HEAD_INIT(io_tlb_default_mem.pools),
89 	.dyn_alloc = __WORK_INITIALIZER(io_tlb_default_mem.dyn_alloc,
90 					swiotlb_dyn_alloc),
91 };
92 
93 #else  /* !CONFIG_SWIOTLB_DYNAMIC */
94 
95 static struct io_tlb_mem io_tlb_default_mem;
96 
97 #endif	/* CONFIG_SWIOTLB_DYNAMIC */
98 
99 static unsigned long default_nslabs = IO_TLB_DEFAULT_SIZE >> IO_TLB_SHIFT;
100 static unsigned long default_nareas;
101 
102 /**
103  * struct io_tlb_area - IO TLB memory area descriptor
104  *
105  * This is a single area with a single lock.
106  *
107  * @used:	The number of used IO TLB block.
108  * @index:	The slot index to start searching in this area for next round.
109  * @lock:	The lock to protect the above data structures in the map and
110  *		unmap calls.
111  */
112 struct io_tlb_area {
113 	unsigned long used;
114 	unsigned int index;
115 	spinlock_t lock;
116 };
117 
118 /*
119  * Round up number of slabs to the next power of 2. The last area is going
120  * be smaller than the rest if default_nslabs is not power of two.
121  * The number of slot in an area should be a multiple of IO_TLB_SEGSIZE,
122  * otherwise a segment may span two or more areas. It conflicts with free
123  * contiguous slots tracking: free slots are treated contiguous no matter
124  * whether they cross an area boundary.
125  *
126  * Return true if default_nslabs is rounded up.
127  */
128 static bool round_up_default_nslabs(void)
129 {
130 	if (!default_nareas)
131 		return false;
132 
133 	if (default_nslabs < IO_TLB_SEGSIZE * default_nareas)
134 		default_nslabs = IO_TLB_SEGSIZE * default_nareas;
135 	else if (is_power_of_2(default_nslabs))
136 		return false;
137 	default_nslabs = roundup_pow_of_two(default_nslabs);
138 	return true;
139 }
140 
141 /**
142  * swiotlb_adjust_nareas() - adjust the number of areas and slots
143  * @nareas:	Desired number of areas. Zero is treated as 1.
144  *
145  * Adjust the default number of areas in a memory pool.
146  * The default size of the memory pool may also change to meet minimum area
147  * size requirements.
148  */
149 static void swiotlb_adjust_nareas(unsigned int nareas)
150 {
151 	if (!nareas)
152 		nareas = 1;
153 	else if (!is_power_of_2(nareas))
154 		nareas = roundup_pow_of_two(nareas);
155 
156 	default_nareas = nareas;
157 
158 	pr_info("area num %d.\n", nareas);
159 	if (round_up_default_nslabs())
160 		pr_info("SWIOTLB bounce buffer size roundup to %luMB",
161 			(default_nslabs << IO_TLB_SHIFT) >> 20);
162 }
163 
164 /**
165  * limit_nareas() - get the maximum number of areas for a given memory pool size
166  * @nareas:	Desired number of areas.
167  * @nslots:	Total number of slots in the memory pool.
168  *
169  * Limit the number of areas to the maximum possible number of areas in
170  * a memory pool of the given size.
171  *
172  * Return: Maximum possible number of areas.
173  */
174 static unsigned int limit_nareas(unsigned int nareas, unsigned long nslots)
175 {
176 	if (nslots < nareas * IO_TLB_SEGSIZE)
177 		return nslots / IO_TLB_SEGSIZE;
178 	return nareas;
179 }
180 
181 static int __init
182 setup_io_tlb_npages(char *str)
183 {
184 	if (isdigit(*str)) {
185 		/* avoid tail segment of size < IO_TLB_SEGSIZE */
186 		default_nslabs =
187 			ALIGN(simple_strtoul(str, &str, 0), IO_TLB_SEGSIZE);
188 	}
189 	if (*str == ',')
190 		++str;
191 	if (isdigit(*str))
192 		swiotlb_adjust_nareas(simple_strtoul(str, &str, 0));
193 	if (*str == ',')
194 		++str;
195 	if (!strcmp(str, "force"))
196 		swiotlb_force_bounce = true;
197 	else if (!strcmp(str, "noforce"))
198 		swiotlb_force_disable = true;
199 
200 	return 0;
201 }
202 early_param("swiotlb", setup_io_tlb_npages);
203 
204 unsigned long swiotlb_size_or_default(void)
205 {
206 	return default_nslabs << IO_TLB_SHIFT;
207 }
208 
209 void __init swiotlb_adjust_size(unsigned long size)
210 {
211 	/*
212 	 * If swiotlb parameter has not been specified, give a chance to
213 	 * architectures such as those supporting memory encryption to
214 	 * adjust/expand SWIOTLB size for their use.
215 	 */
216 	if (default_nslabs != IO_TLB_DEFAULT_SIZE >> IO_TLB_SHIFT)
217 		return;
218 
219 	size = ALIGN(size, IO_TLB_SIZE);
220 	default_nslabs = ALIGN(size >> IO_TLB_SHIFT, IO_TLB_SEGSIZE);
221 	if (round_up_default_nslabs())
222 		size = default_nslabs << IO_TLB_SHIFT;
223 	pr_info("SWIOTLB bounce buffer size adjusted to %luMB", size >> 20);
224 }
225 
226 void swiotlb_print_info(void)
227 {
228 	struct io_tlb_pool *mem = &io_tlb_default_mem.defpool;
229 
230 	if (!mem->nslabs) {
231 		pr_warn("No low mem\n");
232 		return;
233 	}
234 
235 	pr_info("mapped [mem %pa-%pa] (%luMB)\n", &mem->start, &mem->end,
236 	       (mem->nslabs << IO_TLB_SHIFT) >> 20);
237 }
238 
239 static inline unsigned long io_tlb_offset(unsigned long val)
240 {
241 	return val & (IO_TLB_SEGSIZE - 1);
242 }
243 
244 static inline unsigned long nr_slots(u64 val)
245 {
246 	return DIV_ROUND_UP(val, IO_TLB_SIZE);
247 }
248 
249 /*
250  * Early SWIOTLB allocation may be too early to allow an architecture to
251  * perform the desired operations.  This function allows the architecture to
252  * call SWIOTLB when the operations are possible.  It needs to be called
253  * before the SWIOTLB memory is used.
254  */
255 void __init swiotlb_update_mem_attributes(void)
256 {
257 	struct io_tlb_pool *mem = &io_tlb_default_mem.defpool;
258 	unsigned long bytes;
259 
260 	if (!mem->nslabs || mem->late_alloc)
261 		return;
262 	bytes = PAGE_ALIGN(mem->nslabs << IO_TLB_SHIFT);
263 	set_memory_decrypted((unsigned long)mem->vaddr, bytes >> PAGE_SHIFT);
264 }
265 
266 static void swiotlb_init_io_tlb_pool(struct io_tlb_pool *mem, phys_addr_t start,
267 		unsigned long nslabs, bool late_alloc, unsigned int nareas)
268 {
269 	void *vaddr = phys_to_virt(start);
270 	unsigned long bytes = nslabs << IO_TLB_SHIFT, i;
271 
272 	mem->nslabs = nslabs;
273 	mem->start = start;
274 	mem->end = mem->start + bytes;
275 	mem->late_alloc = late_alloc;
276 	mem->nareas = nareas;
277 	mem->area_nslabs = nslabs / mem->nareas;
278 
279 	for (i = 0; i < mem->nareas; i++) {
280 		spin_lock_init(&mem->areas[i].lock);
281 		mem->areas[i].index = 0;
282 		mem->areas[i].used = 0;
283 	}
284 
285 	for (i = 0; i < mem->nslabs; i++) {
286 		mem->slots[i].list = min(IO_TLB_SEGSIZE - io_tlb_offset(i),
287 					 mem->nslabs - i);
288 		mem->slots[i].orig_addr = INVALID_PHYS_ADDR;
289 		mem->slots[i].alloc_size = 0;
290 	}
291 
292 	memset(vaddr, 0, bytes);
293 	mem->vaddr = vaddr;
294 	return;
295 }
296 
297 /**
298  * add_mem_pool() - add a memory pool to the allocator
299  * @mem:	Software IO TLB allocator.
300  * @pool:	Memory pool to be added.
301  */
302 static void add_mem_pool(struct io_tlb_mem *mem, struct io_tlb_pool *pool)
303 {
304 #ifdef CONFIG_SWIOTLB_DYNAMIC
305 	spin_lock(&mem->lock);
306 	list_add_rcu(&pool->node, &mem->pools);
307 	mem->nslabs += pool->nslabs;
308 	spin_unlock(&mem->lock);
309 #else
310 	mem->nslabs = pool->nslabs;
311 #endif
312 }
313 
314 static void __init *swiotlb_memblock_alloc(unsigned long nslabs,
315 		unsigned int flags,
316 		int (*remap)(void *tlb, unsigned long nslabs))
317 {
318 	size_t bytes = PAGE_ALIGN(nslabs << IO_TLB_SHIFT);
319 	void *tlb;
320 
321 	/*
322 	 * By default allocate the bounce buffer memory from low memory, but
323 	 * allow to pick a location everywhere for hypervisors with guest
324 	 * memory encryption.
325 	 */
326 	if (flags & SWIOTLB_ANY)
327 		tlb = memblock_alloc(bytes, PAGE_SIZE);
328 	else
329 		tlb = memblock_alloc_low(bytes, PAGE_SIZE);
330 
331 	if (!tlb) {
332 		pr_warn("%s: Failed to allocate %zu bytes tlb structure\n",
333 			__func__, bytes);
334 		return NULL;
335 	}
336 
337 	if (remap && remap(tlb, nslabs) < 0) {
338 		memblock_free(tlb, PAGE_ALIGN(bytes));
339 		pr_warn("%s: Failed to remap %zu bytes\n", __func__, bytes);
340 		return NULL;
341 	}
342 
343 	return tlb;
344 }
345 
346 /*
347  * Statically reserve bounce buffer space and initialize bounce buffer data
348  * structures for the software IO TLB used to implement the DMA API.
349  */
350 void __init swiotlb_init_remap(bool addressing_limit, unsigned int flags,
351 		int (*remap)(void *tlb, unsigned long nslabs))
352 {
353 	struct io_tlb_pool *mem = &io_tlb_default_mem.defpool;
354 	unsigned long nslabs;
355 	unsigned int nareas;
356 	size_t alloc_size;
357 	void *tlb;
358 
359 	if (!addressing_limit && !swiotlb_force_bounce)
360 		return;
361 	if (swiotlb_force_disable)
362 		return;
363 
364 	io_tlb_default_mem.force_bounce =
365 		swiotlb_force_bounce || (flags & SWIOTLB_FORCE);
366 
367 #ifdef CONFIG_SWIOTLB_DYNAMIC
368 	if (!remap)
369 		io_tlb_default_mem.can_grow = true;
370 	if (flags & SWIOTLB_ANY)
371 		io_tlb_default_mem.phys_limit = virt_to_phys(high_memory - 1);
372 	else
373 		io_tlb_default_mem.phys_limit = ARCH_LOW_ADDRESS_LIMIT;
374 #endif
375 
376 	if (!default_nareas)
377 		swiotlb_adjust_nareas(num_possible_cpus());
378 
379 	nslabs = default_nslabs;
380 	nareas = limit_nareas(default_nareas, nslabs);
381 	while ((tlb = swiotlb_memblock_alloc(nslabs, flags, remap)) == NULL) {
382 		if (nslabs <= IO_TLB_MIN_SLABS)
383 			return;
384 		nslabs = ALIGN(nslabs >> 1, IO_TLB_SEGSIZE);
385 		nareas = limit_nareas(nareas, nslabs);
386 	}
387 
388 	if (default_nslabs != nslabs) {
389 		pr_info("SWIOTLB bounce buffer size adjusted %lu -> %lu slabs",
390 			default_nslabs, nslabs);
391 		default_nslabs = nslabs;
392 	}
393 
394 	alloc_size = PAGE_ALIGN(array_size(sizeof(*mem->slots), nslabs));
395 	mem->slots = memblock_alloc(alloc_size, PAGE_SIZE);
396 	if (!mem->slots) {
397 		pr_warn("%s: Failed to allocate %zu bytes align=0x%lx\n",
398 			__func__, alloc_size, PAGE_SIZE);
399 		return;
400 	}
401 
402 	mem->areas = memblock_alloc(array_size(sizeof(struct io_tlb_area),
403 		nareas), SMP_CACHE_BYTES);
404 	if (!mem->areas) {
405 		pr_warn("%s: Failed to allocate mem->areas.\n", __func__);
406 		return;
407 	}
408 
409 	swiotlb_init_io_tlb_pool(mem, __pa(tlb), nslabs, false, nareas);
410 	add_mem_pool(&io_tlb_default_mem, mem);
411 
412 	if (flags & SWIOTLB_VERBOSE)
413 		swiotlb_print_info();
414 }
415 
416 void __init swiotlb_init(bool addressing_limit, unsigned int flags)
417 {
418 	swiotlb_init_remap(addressing_limit, flags, NULL);
419 }
420 
421 /*
422  * Systems with larger DMA zones (those that don't support ISA) can
423  * initialize the swiotlb later using the slab allocator if needed.
424  * This should be just like above, but with some error catching.
425  */
426 int swiotlb_init_late(size_t size, gfp_t gfp_mask,
427 		int (*remap)(void *tlb, unsigned long nslabs))
428 {
429 	struct io_tlb_pool *mem = &io_tlb_default_mem.defpool;
430 	unsigned long nslabs = ALIGN(size >> IO_TLB_SHIFT, IO_TLB_SEGSIZE);
431 	unsigned int nareas;
432 	unsigned char *vstart = NULL;
433 	unsigned int order, area_order;
434 	bool retried = false;
435 	int rc = 0;
436 
437 	if (io_tlb_default_mem.nslabs)
438 		return 0;
439 
440 	if (swiotlb_force_disable)
441 		return 0;
442 
443 	io_tlb_default_mem.force_bounce = swiotlb_force_bounce;
444 
445 #ifdef CONFIG_SWIOTLB_DYNAMIC
446 	if (!remap)
447 		io_tlb_default_mem.can_grow = true;
448 	if (IS_ENABLED(CONFIG_ZONE_DMA) && (gfp_mask & __GFP_DMA))
449 		io_tlb_default_mem.phys_limit = DMA_BIT_MASK(zone_dma_bits);
450 	else if (IS_ENABLED(CONFIG_ZONE_DMA32) && (gfp_mask & __GFP_DMA32))
451 		io_tlb_default_mem.phys_limit = DMA_BIT_MASK(32);
452 	else
453 		io_tlb_default_mem.phys_limit = virt_to_phys(high_memory - 1);
454 #endif
455 
456 	if (!default_nareas)
457 		swiotlb_adjust_nareas(num_possible_cpus());
458 
459 retry:
460 	order = get_order(nslabs << IO_TLB_SHIFT);
461 	nslabs = SLABS_PER_PAGE << order;
462 
463 	while ((SLABS_PER_PAGE << order) > IO_TLB_MIN_SLABS) {
464 		vstart = (void *)__get_free_pages(gfp_mask | __GFP_NOWARN,
465 						  order);
466 		if (vstart)
467 			break;
468 		order--;
469 		nslabs = SLABS_PER_PAGE << order;
470 		retried = true;
471 	}
472 
473 	if (!vstart)
474 		return -ENOMEM;
475 
476 	if (remap)
477 		rc = remap(vstart, nslabs);
478 	if (rc) {
479 		free_pages((unsigned long)vstart, order);
480 
481 		nslabs = ALIGN(nslabs >> 1, IO_TLB_SEGSIZE);
482 		if (nslabs < IO_TLB_MIN_SLABS)
483 			return rc;
484 		retried = true;
485 		goto retry;
486 	}
487 
488 	if (retried) {
489 		pr_warn("only able to allocate %ld MB\n",
490 			(PAGE_SIZE << order) >> 20);
491 	}
492 
493 	nareas = limit_nareas(default_nareas, nslabs);
494 	area_order = get_order(array_size(sizeof(*mem->areas), nareas));
495 	mem->areas = (struct io_tlb_area *)
496 		__get_free_pages(GFP_KERNEL | __GFP_ZERO, area_order);
497 	if (!mem->areas)
498 		goto error_area;
499 
500 	mem->slots = (void *)__get_free_pages(GFP_KERNEL | __GFP_ZERO,
501 		get_order(array_size(sizeof(*mem->slots), nslabs)));
502 	if (!mem->slots)
503 		goto error_slots;
504 
505 	set_memory_decrypted((unsigned long)vstart,
506 			     (nslabs << IO_TLB_SHIFT) >> PAGE_SHIFT);
507 	swiotlb_init_io_tlb_pool(mem, virt_to_phys(vstart), nslabs, true,
508 				 nareas);
509 	add_mem_pool(&io_tlb_default_mem, mem);
510 
511 	swiotlb_print_info();
512 	return 0;
513 
514 error_slots:
515 	free_pages((unsigned long)mem->areas, area_order);
516 error_area:
517 	free_pages((unsigned long)vstart, order);
518 	return -ENOMEM;
519 }
520 
521 void __init swiotlb_exit(void)
522 {
523 	struct io_tlb_pool *mem = &io_tlb_default_mem.defpool;
524 	unsigned long tbl_vaddr;
525 	size_t tbl_size, slots_size;
526 	unsigned int area_order;
527 
528 	if (swiotlb_force_bounce)
529 		return;
530 
531 	if (!mem->nslabs)
532 		return;
533 
534 	pr_info("tearing down default memory pool\n");
535 	tbl_vaddr = (unsigned long)phys_to_virt(mem->start);
536 	tbl_size = PAGE_ALIGN(mem->end - mem->start);
537 	slots_size = PAGE_ALIGN(array_size(sizeof(*mem->slots), mem->nslabs));
538 
539 	set_memory_encrypted(tbl_vaddr, tbl_size >> PAGE_SHIFT);
540 	if (mem->late_alloc) {
541 		area_order = get_order(array_size(sizeof(*mem->areas),
542 			mem->nareas));
543 		free_pages((unsigned long)mem->areas, area_order);
544 		free_pages(tbl_vaddr, get_order(tbl_size));
545 		free_pages((unsigned long)mem->slots, get_order(slots_size));
546 	} else {
547 		memblock_free_late(__pa(mem->areas),
548 			array_size(sizeof(*mem->areas), mem->nareas));
549 		memblock_free_late(mem->start, tbl_size);
550 		memblock_free_late(__pa(mem->slots), slots_size);
551 	}
552 
553 	memset(mem, 0, sizeof(*mem));
554 }
555 
556 #ifdef CONFIG_SWIOTLB_DYNAMIC
557 
558 /**
559  * alloc_dma_pages() - allocate pages to be used for DMA
560  * @gfp:	GFP flags for the allocation.
561  * @bytes:	Size of the buffer.
562  * @phys_limit:	Maximum allowed physical address of the buffer.
563  *
564  * Allocate pages from the buddy allocator. If successful, make the allocated
565  * pages decrypted that they can be used for DMA.
566  *
567  * Return: Decrypted pages, %NULL on allocation failure, or ERR_PTR(-EAGAIN)
568  * if the allocated physical address was above @phys_limit.
569  */
570 static struct page *alloc_dma_pages(gfp_t gfp, size_t bytes, u64 phys_limit)
571 {
572 	unsigned int order = get_order(bytes);
573 	struct page *page;
574 	phys_addr_t paddr;
575 	void *vaddr;
576 
577 	page = alloc_pages(gfp, order);
578 	if (!page)
579 		return NULL;
580 
581 	paddr = page_to_phys(page);
582 	if (paddr + bytes - 1 > phys_limit) {
583 		__free_pages(page, order);
584 		return ERR_PTR(-EAGAIN);
585 	}
586 
587 	vaddr = phys_to_virt(paddr);
588 	if (set_memory_decrypted((unsigned long)vaddr, PFN_UP(bytes)))
589 		goto error;
590 	return page;
591 
592 error:
593 	/* Intentional leak if pages cannot be encrypted again. */
594 	if (!set_memory_encrypted((unsigned long)vaddr, PFN_UP(bytes)))
595 		__free_pages(page, order);
596 	return NULL;
597 }
598 
599 /**
600  * swiotlb_alloc_tlb() - allocate a dynamic IO TLB buffer
601  * @dev:	Device for which a memory pool is allocated.
602  * @bytes:	Size of the buffer.
603  * @phys_limit:	Maximum allowed physical address of the buffer.
604  * @gfp:	GFP flags for the allocation.
605  *
606  * Return: Allocated pages, or %NULL on allocation failure.
607  */
608 static struct page *swiotlb_alloc_tlb(struct device *dev, size_t bytes,
609 		u64 phys_limit, gfp_t gfp)
610 {
611 	struct page *page;
612 
613 	/*
614 	 * Allocate from the atomic pools if memory is encrypted and
615 	 * the allocation is atomic, because decrypting may block.
616 	 */
617 	if (!gfpflags_allow_blocking(gfp) && dev && force_dma_unencrypted(dev)) {
618 		void *vaddr;
619 
620 		if (!IS_ENABLED(CONFIG_DMA_COHERENT_POOL))
621 			return NULL;
622 
623 		return dma_alloc_from_pool(dev, bytes, &vaddr, gfp,
624 					   dma_coherent_ok);
625 	}
626 
627 	gfp &= ~GFP_ZONEMASK;
628 	if (phys_limit <= DMA_BIT_MASK(zone_dma_bits))
629 		gfp |= __GFP_DMA;
630 	else if (phys_limit <= DMA_BIT_MASK(32))
631 		gfp |= __GFP_DMA32;
632 
633 	while (IS_ERR(page = alloc_dma_pages(gfp, bytes, phys_limit))) {
634 		if (IS_ENABLED(CONFIG_ZONE_DMA32) &&
635 		    phys_limit < DMA_BIT_MASK(64) &&
636 		    !(gfp & (__GFP_DMA32 | __GFP_DMA)))
637 			gfp |= __GFP_DMA32;
638 		else if (IS_ENABLED(CONFIG_ZONE_DMA) &&
639 			 !(gfp & __GFP_DMA))
640 			gfp = (gfp & ~__GFP_DMA32) | __GFP_DMA;
641 		else
642 			return NULL;
643 	}
644 
645 	return page;
646 }
647 
648 /**
649  * swiotlb_free_tlb() - free a dynamically allocated IO TLB buffer
650  * @vaddr:	Virtual address of the buffer.
651  * @bytes:	Size of the buffer.
652  */
653 static void swiotlb_free_tlb(void *vaddr, size_t bytes)
654 {
655 	if (IS_ENABLED(CONFIG_DMA_COHERENT_POOL) &&
656 	    dma_free_from_pool(NULL, vaddr, bytes))
657 		return;
658 
659 	/* Intentional leak if pages cannot be encrypted again. */
660 	if (!set_memory_encrypted((unsigned long)vaddr, PFN_UP(bytes)))
661 		__free_pages(virt_to_page(vaddr), get_order(bytes));
662 }
663 
664 /**
665  * swiotlb_alloc_pool() - allocate a new IO TLB memory pool
666  * @dev:	Device for which a memory pool is allocated.
667  * @minslabs:	Minimum number of slabs.
668  * @nslabs:	Desired (maximum) number of slabs.
669  * @nareas:	Number of areas.
670  * @phys_limit:	Maximum DMA buffer physical address.
671  * @gfp:	GFP flags for the allocations.
672  *
673  * Allocate and initialize a new IO TLB memory pool. The actual number of
674  * slabs may be reduced if allocation of @nslabs fails. If even
675  * @minslabs cannot be allocated, this function fails.
676  *
677  * Return: New memory pool, or %NULL on allocation failure.
678  */
679 static struct io_tlb_pool *swiotlb_alloc_pool(struct device *dev,
680 		unsigned long minslabs, unsigned long nslabs,
681 		unsigned int nareas, u64 phys_limit, gfp_t gfp)
682 {
683 	struct io_tlb_pool *pool;
684 	unsigned int slot_order;
685 	struct page *tlb;
686 	size_t pool_size;
687 	size_t tlb_size;
688 
689 	if (nslabs > SLABS_PER_PAGE << MAX_ORDER) {
690 		nslabs = SLABS_PER_PAGE << MAX_ORDER;
691 		nareas = limit_nareas(nareas, nslabs);
692 	}
693 
694 	pool_size = sizeof(*pool) + array_size(sizeof(*pool->areas), nareas);
695 	pool = kzalloc(pool_size, gfp);
696 	if (!pool)
697 		goto error;
698 	pool->areas = (void *)pool + sizeof(*pool);
699 
700 	tlb_size = nslabs << IO_TLB_SHIFT;
701 	while (!(tlb = swiotlb_alloc_tlb(dev, tlb_size, phys_limit, gfp))) {
702 		if (nslabs <= minslabs)
703 			goto error_tlb;
704 		nslabs = ALIGN(nslabs >> 1, IO_TLB_SEGSIZE);
705 		nareas = limit_nareas(nareas, nslabs);
706 		tlb_size = nslabs << IO_TLB_SHIFT;
707 	}
708 
709 	slot_order = get_order(array_size(sizeof(*pool->slots), nslabs));
710 	pool->slots = (struct io_tlb_slot *)
711 		__get_free_pages(gfp, slot_order);
712 	if (!pool->slots)
713 		goto error_slots;
714 
715 	swiotlb_init_io_tlb_pool(pool, page_to_phys(tlb), nslabs, true, nareas);
716 	return pool;
717 
718 error_slots:
719 	swiotlb_free_tlb(page_address(tlb), tlb_size);
720 error_tlb:
721 	kfree(pool);
722 error:
723 	return NULL;
724 }
725 
726 /**
727  * swiotlb_dyn_alloc() - dynamic memory pool allocation worker
728  * @work:	Pointer to dyn_alloc in struct io_tlb_mem.
729  */
730 static void swiotlb_dyn_alloc(struct work_struct *work)
731 {
732 	struct io_tlb_mem *mem =
733 		container_of(work, struct io_tlb_mem, dyn_alloc);
734 	struct io_tlb_pool *pool;
735 
736 	pool = swiotlb_alloc_pool(NULL, IO_TLB_MIN_SLABS, default_nslabs,
737 				  default_nareas, mem->phys_limit, GFP_KERNEL);
738 	if (!pool) {
739 		pr_warn_ratelimited("Failed to allocate new pool");
740 		return;
741 	}
742 
743 	add_mem_pool(mem, pool);
744 }
745 
746 /**
747  * swiotlb_dyn_free() - RCU callback to free a memory pool
748  * @rcu:	RCU head in the corresponding struct io_tlb_pool.
749  */
750 static void swiotlb_dyn_free(struct rcu_head *rcu)
751 {
752 	struct io_tlb_pool *pool = container_of(rcu, struct io_tlb_pool, rcu);
753 	size_t slots_size = array_size(sizeof(*pool->slots), pool->nslabs);
754 	size_t tlb_size = pool->end - pool->start;
755 
756 	free_pages((unsigned long)pool->slots, get_order(slots_size));
757 	swiotlb_free_tlb(pool->vaddr, tlb_size);
758 	kfree(pool);
759 }
760 
761 /**
762  * swiotlb_find_pool() - find the IO TLB pool for a physical address
763  * @dev:        Device which has mapped the DMA buffer.
764  * @paddr:      Physical address within the DMA buffer.
765  *
766  * Find the IO TLB memory pool descriptor which contains the given physical
767  * address, if any.
768  *
769  * Return: Memory pool which contains @paddr, or %NULL if none.
770  */
771 struct io_tlb_pool *swiotlb_find_pool(struct device *dev, phys_addr_t paddr)
772 {
773 	struct io_tlb_mem *mem = dev->dma_io_tlb_mem;
774 	struct io_tlb_pool *pool;
775 
776 	rcu_read_lock();
777 	list_for_each_entry_rcu(pool, &mem->pools, node) {
778 		if (paddr >= pool->start && paddr < pool->end)
779 			goto out;
780 	}
781 
782 	list_for_each_entry_rcu(pool, &dev->dma_io_tlb_pools, node) {
783 		if (paddr >= pool->start && paddr < pool->end)
784 			goto out;
785 	}
786 	pool = NULL;
787 out:
788 	rcu_read_unlock();
789 	return pool;
790 }
791 
792 /**
793  * swiotlb_del_pool() - remove an IO TLB pool from a device
794  * @dev:	Owning device.
795  * @pool:	Memory pool to be removed.
796  */
797 static void swiotlb_del_pool(struct device *dev, struct io_tlb_pool *pool)
798 {
799 	unsigned long flags;
800 
801 	spin_lock_irqsave(&dev->dma_io_tlb_lock, flags);
802 	list_del_rcu(&pool->node);
803 	spin_unlock_irqrestore(&dev->dma_io_tlb_lock, flags);
804 
805 	call_rcu(&pool->rcu, swiotlb_dyn_free);
806 }
807 
808 #endif	/* CONFIG_SWIOTLB_DYNAMIC */
809 
810 /**
811  * swiotlb_dev_init() - initialize swiotlb fields in &struct device
812  * @dev:	Device to be initialized.
813  */
814 void swiotlb_dev_init(struct device *dev)
815 {
816 	dev->dma_io_tlb_mem = &io_tlb_default_mem;
817 #ifdef CONFIG_SWIOTLB_DYNAMIC
818 	INIT_LIST_HEAD(&dev->dma_io_tlb_pools);
819 	spin_lock_init(&dev->dma_io_tlb_lock);
820 	dev->dma_uses_io_tlb = false;
821 #endif
822 }
823 
824 /*
825  * Return the offset into a iotlb slot required to keep the device happy.
826  */
827 static unsigned int swiotlb_align_offset(struct device *dev, u64 addr)
828 {
829 	return addr & dma_get_min_align_mask(dev) & (IO_TLB_SIZE - 1);
830 }
831 
832 /*
833  * Bounce: copy the swiotlb buffer from or back to the original dma location
834  */
835 static void swiotlb_bounce(struct device *dev, phys_addr_t tlb_addr, size_t size,
836 			   enum dma_data_direction dir)
837 {
838 	struct io_tlb_pool *mem = swiotlb_find_pool(dev, tlb_addr);
839 	int index = (tlb_addr - mem->start) >> IO_TLB_SHIFT;
840 	phys_addr_t orig_addr = mem->slots[index].orig_addr;
841 	size_t alloc_size = mem->slots[index].alloc_size;
842 	unsigned long pfn = PFN_DOWN(orig_addr);
843 	unsigned char *vaddr = mem->vaddr + tlb_addr - mem->start;
844 	unsigned int tlb_offset, orig_addr_offset;
845 
846 	if (orig_addr == INVALID_PHYS_ADDR)
847 		return;
848 
849 	tlb_offset = tlb_addr & (IO_TLB_SIZE - 1);
850 	orig_addr_offset = swiotlb_align_offset(dev, orig_addr);
851 	if (tlb_offset < orig_addr_offset) {
852 		dev_WARN_ONCE(dev, 1,
853 			"Access before mapping start detected. orig offset %u, requested offset %u.\n",
854 			orig_addr_offset, tlb_offset);
855 		return;
856 	}
857 
858 	tlb_offset -= orig_addr_offset;
859 	if (tlb_offset > alloc_size) {
860 		dev_WARN_ONCE(dev, 1,
861 			"Buffer overflow detected. Allocation size: %zu. Mapping size: %zu+%u.\n",
862 			alloc_size, size, tlb_offset);
863 		return;
864 	}
865 
866 	orig_addr += tlb_offset;
867 	alloc_size -= tlb_offset;
868 
869 	if (size > alloc_size) {
870 		dev_WARN_ONCE(dev, 1,
871 			"Buffer overflow detected. Allocation size: %zu. Mapping size: %zu.\n",
872 			alloc_size, size);
873 		size = alloc_size;
874 	}
875 
876 	if (PageHighMem(pfn_to_page(pfn))) {
877 		unsigned int offset = orig_addr & ~PAGE_MASK;
878 		struct page *page;
879 		unsigned int sz = 0;
880 		unsigned long flags;
881 
882 		while (size) {
883 			sz = min_t(size_t, PAGE_SIZE - offset, size);
884 
885 			local_irq_save(flags);
886 			page = pfn_to_page(pfn);
887 			if (dir == DMA_TO_DEVICE)
888 				memcpy_from_page(vaddr, page, offset, sz);
889 			else
890 				memcpy_to_page(page, offset, vaddr, sz);
891 			local_irq_restore(flags);
892 
893 			size -= sz;
894 			pfn++;
895 			vaddr += sz;
896 			offset = 0;
897 		}
898 	} else if (dir == DMA_TO_DEVICE) {
899 		memcpy(vaddr, phys_to_virt(orig_addr), size);
900 	} else {
901 		memcpy(phys_to_virt(orig_addr), vaddr, size);
902 	}
903 }
904 
905 static inline phys_addr_t slot_addr(phys_addr_t start, phys_addr_t idx)
906 {
907 	return start + (idx << IO_TLB_SHIFT);
908 }
909 
910 /*
911  * Carefully handle integer overflow which can occur when boundary_mask == ~0UL.
912  */
913 static inline unsigned long get_max_slots(unsigned long boundary_mask)
914 {
915 	return (boundary_mask >> IO_TLB_SHIFT) + 1;
916 }
917 
918 static unsigned int wrap_area_index(struct io_tlb_pool *mem, unsigned int index)
919 {
920 	if (index >= mem->area_nslabs)
921 		return 0;
922 	return index;
923 }
924 
925 /*
926  * Track the total used slots with a global atomic value in order to have
927  * correct information to determine the high water mark. The mem_used()
928  * function gives imprecise results because there's no locking across
929  * multiple areas.
930  */
931 #ifdef CONFIG_DEBUG_FS
932 static void inc_used_and_hiwater(struct io_tlb_mem *mem, unsigned int nslots)
933 {
934 	unsigned long old_hiwater, new_used;
935 
936 	new_used = atomic_long_add_return(nslots, &mem->total_used);
937 	old_hiwater = atomic_long_read(&mem->used_hiwater);
938 	do {
939 		if (new_used <= old_hiwater)
940 			break;
941 	} while (!atomic_long_try_cmpxchg(&mem->used_hiwater,
942 					  &old_hiwater, new_used));
943 }
944 
945 static void dec_used(struct io_tlb_mem *mem, unsigned int nslots)
946 {
947 	atomic_long_sub(nslots, &mem->total_used);
948 }
949 
950 #else /* !CONFIG_DEBUG_FS */
951 static void inc_used_and_hiwater(struct io_tlb_mem *mem, unsigned int nslots)
952 {
953 }
954 static void dec_used(struct io_tlb_mem *mem, unsigned int nslots)
955 {
956 }
957 #endif /* CONFIG_DEBUG_FS */
958 
959 /**
960  * swiotlb_area_find_slots() - search for slots in one IO TLB memory area
961  * @dev:	Device which maps the buffer.
962  * @pool:	Memory pool to be searched.
963  * @area_index:	Index of the IO TLB memory area to be searched.
964  * @orig_addr:	Original (non-bounced) IO buffer address.
965  * @alloc_size: Total requested size of the bounce buffer,
966  *		including initial alignment padding.
967  * @alloc_align_mask:	Required alignment of the allocated buffer.
968  *
969  * Find a suitable sequence of IO TLB entries for the request and allocate
970  * a buffer from the given IO TLB memory area.
971  * This function takes care of locking.
972  *
973  * Return: Index of the first allocated slot, or -1 on error.
974  */
975 static int swiotlb_area_find_slots(struct device *dev, struct io_tlb_pool *pool,
976 		int area_index, phys_addr_t orig_addr, size_t alloc_size,
977 		unsigned int alloc_align_mask)
978 {
979 	struct io_tlb_area *area = pool->areas + area_index;
980 	unsigned long boundary_mask = dma_get_seg_boundary(dev);
981 	dma_addr_t tbl_dma_addr =
982 		phys_to_dma_unencrypted(dev, pool->start) & boundary_mask;
983 	unsigned long max_slots = get_max_slots(boundary_mask);
984 	unsigned int iotlb_align_mask =
985 		dma_get_min_align_mask(dev) | alloc_align_mask;
986 	unsigned int nslots = nr_slots(alloc_size), stride;
987 	unsigned int offset = swiotlb_align_offset(dev, orig_addr);
988 	unsigned int index, slots_checked, count = 0, i;
989 	unsigned long flags;
990 	unsigned int slot_base;
991 	unsigned int slot_index;
992 
993 	BUG_ON(!nslots);
994 	BUG_ON(area_index >= pool->nareas);
995 
996 	/*
997 	 * For allocations of PAGE_SIZE or larger only look for page aligned
998 	 * allocations.
999 	 */
1000 	if (alloc_size >= PAGE_SIZE)
1001 		iotlb_align_mask |= ~PAGE_MASK;
1002 	iotlb_align_mask &= ~(IO_TLB_SIZE - 1);
1003 
1004 	/*
1005 	 * For mappings with an alignment requirement don't bother looping to
1006 	 * unaligned slots once we found an aligned one.
1007 	 */
1008 	stride = (iotlb_align_mask >> IO_TLB_SHIFT) + 1;
1009 
1010 	spin_lock_irqsave(&area->lock, flags);
1011 	if (unlikely(nslots > pool->area_nslabs - area->used))
1012 		goto not_found;
1013 
1014 	slot_base = area_index * pool->area_nslabs;
1015 	index = area->index;
1016 
1017 	for (slots_checked = 0; slots_checked < pool->area_nslabs; ) {
1018 		slot_index = slot_base + index;
1019 
1020 		if (orig_addr &&
1021 		    (slot_addr(tbl_dma_addr, slot_index) &
1022 		     iotlb_align_mask) != (orig_addr & iotlb_align_mask)) {
1023 			index = wrap_area_index(pool, index + 1);
1024 			slots_checked++;
1025 			continue;
1026 		}
1027 
1028 		if (!iommu_is_span_boundary(slot_index, nslots,
1029 					    nr_slots(tbl_dma_addr),
1030 					    max_slots)) {
1031 			if (pool->slots[slot_index].list >= nslots)
1032 				goto found;
1033 		}
1034 		index = wrap_area_index(pool, index + stride);
1035 		slots_checked += stride;
1036 	}
1037 
1038 not_found:
1039 	spin_unlock_irqrestore(&area->lock, flags);
1040 	return -1;
1041 
1042 found:
1043 	/*
1044 	 * If we find a slot that indicates we have 'nslots' number of
1045 	 * contiguous buffers, we allocate the buffers from that slot onwards
1046 	 * and set the list of free entries to '0' indicating unavailable.
1047 	 */
1048 	for (i = slot_index; i < slot_index + nslots; i++) {
1049 		pool->slots[i].list = 0;
1050 		pool->slots[i].alloc_size = alloc_size - (offset +
1051 				((i - slot_index) << IO_TLB_SHIFT));
1052 	}
1053 	for (i = slot_index - 1;
1054 	     io_tlb_offset(i) != IO_TLB_SEGSIZE - 1 &&
1055 	     pool->slots[i].list; i--)
1056 		pool->slots[i].list = ++count;
1057 
1058 	/*
1059 	 * Update the indices to avoid searching in the next round.
1060 	 */
1061 	area->index = wrap_area_index(pool, index + nslots);
1062 	area->used += nslots;
1063 	spin_unlock_irqrestore(&area->lock, flags);
1064 
1065 	inc_used_and_hiwater(dev->dma_io_tlb_mem, nslots);
1066 	return slot_index;
1067 }
1068 
1069 /**
1070  * swiotlb_pool_find_slots() - search for slots in one memory pool
1071  * @dev:	Device which maps the buffer.
1072  * @pool:	Memory pool to be searched.
1073  * @orig_addr:	Original (non-bounced) IO buffer address.
1074  * @alloc_size: Total requested size of the bounce buffer,
1075  *		including initial alignment padding.
1076  * @alloc_align_mask:	Required alignment of the allocated buffer.
1077  *
1078  * Search through one memory pool to find a sequence of slots that match the
1079  * allocation constraints.
1080  *
1081  * Return: Index of the first allocated slot, or -1 on error.
1082  */
1083 static int swiotlb_pool_find_slots(struct device *dev, struct io_tlb_pool *pool,
1084 		phys_addr_t orig_addr, size_t alloc_size,
1085 		unsigned int alloc_align_mask)
1086 {
1087 	int start = raw_smp_processor_id() & (pool->nareas - 1);
1088 	int i = start, index;
1089 
1090 	do {
1091 		index = swiotlb_area_find_slots(dev, pool, i, orig_addr,
1092 						alloc_size, alloc_align_mask);
1093 		if (index >= 0)
1094 			return index;
1095 		if (++i >= pool->nareas)
1096 			i = 0;
1097 	} while (i != start);
1098 
1099 	return -1;
1100 }
1101 
1102 #ifdef CONFIG_SWIOTLB_DYNAMIC
1103 
1104 /**
1105  * swiotlb_find_slots() - search for slots in the whole swiotlb
1106  * @dev:	Device which maps the buffer.
1107  * @orig_addr:	Original (non-bounced) IO buffer address.
1108  * @alloc_size: Total requested size of the bounce buffer,
1109  *		including initial alignment padding.
1110  * @alloc_align_mask:	Required alignment of the allocated buffer.
1111  * @retpool:	Used memory pool, updated on return.
1112  *
1113  * Search through the whole software IO TLB to find a sequence of slots that
1114  * match the allocation constraints.
1115  *
1116  * Return: Index of the first allocated slot, or -1 on error.
1117  */
1118 static int swiotlb_find_slots(struct device *dev, phys_addr_t orig_addr,
1119 		size_t alloc_size, unsigned int alloc_align_mask,
1120 		struct io_tlb_pool **retpool)
1121 {
1122 	struct io_tlb_mem *mem = dev->dma_io_tlb_mem;
1123 	struct io_tlb_pool *pool;
1124 	unsigned long nslabs;
1125 	unsigned long flags;
1126 	u64 phys_limit;
1127 	int index;
1128 
1129 	rcu_read_lock();
1130 	list_for_each_entry_rcu(pool, &mem->pools, node) {
1131 		index = swiotlb_pool_find_slots(dev, pool, orig_addr,
1132 						alloc_size, alloc_align_mask);
1133 		if (index >= 0) {
1134 			rcu_read_unlock();
1135 			goto found;
1136 		}
1137 	}
1138 	rcu_read_unlock();
1139 	if (!mem->can_grow)
1140 		return -1;
1141 
1142 	schedule_work(&mem->dyn_alloc);
1143 
1144 	nslabs = nr_slots(alloc_size);
1145 	phys_limit = min_not_zero(*dev->dma_mask, dev->bus_dma_limit);
1146 	pool = swiotlb_alloc_pool(dev, nslabs, nslabs, 1, phys_limit,
1147 				  GFP_NOWAIT | __GFP_NOWARN);
1148 	if (!pool)
1149 		return -1;
1150 
1151 	index = swiotlb_pool_find_slots(dev, pool, orig_addr,
1152 					alloc_size, alloc_align_mask);
1153 	if (index < 0) {
1154 		swiotlb_dyn_free(&pool->rcu);
1155 		return -1;
1156 	}
1157 
1158 	pool->transient = true;
1159 	spin_lock_irqsave(&dev->dma_io_tlb_lock, flags);
1160 	list_add_rcu(&pool->node, &dev->dma_io_tlb_pools);
1161 	spin_unlock_irqrestore(&dev->dma_io_tlb_lock, flags);
1162 
1163 found:
1164 	WRITE_ONCE(dev->dma_uses_io_tlb, true);
1165 
1166 	/*
1167 	 * The general barrier orders reads and writes against a presumed store
1168 	 * of the SWIOTLB buffer address by a device driver (to a driver private
1169 	 * data structure). It serves two purposes.
1170 	 *
1171 	 * First, the store to dev->dma_uses_io_tlb must be ordered before the
1172 	 * presumed store. This guarantees that the returned buffer address
1173 	 * cannot be passed to another CPU before updating dev->dma_uses_io_tlb.
1174 	 *
1175 	 * Second, the load from mem->pools must be ordered before the same
1176 	 * presumed store. This guarantees that the returned buffer address
1177 	 * cannot be observed by another CPU before an update of the RCU list
1178 	 * that was made by swiotlb_dyn_alloc() on a third CPU (cf. multicopy
1179 	 * atomicity).
1180 	 *
1181 	 * See also the comment in is_swiotlb_buffer().
1182 	 */
1183 	smp_mb();
1184 
1185 	*retpool = pool;
1186 	return index;
1187 }
1188 
1189 #else  /* !CONFIG_SWIOTLB_DYNAMIC */
1190 
1191 static int swiotlb_find_slots(struct device *dev, phys_addr_t orig_addr,
1192 		size_t alloc_size, unsigned int alloc_align_mask,
1193 		struct io_tlb_pool **retpool)
1194 {
1195 	*retpool = &dev->dma_io_tlb_mem->defpool;
1196 	return swiotlb_pool_find_slots(dev, *retpool,
1197 				       orig_addr, alloc_size, alloc_align_mask);
1198 }
1199 
1200 #endif /* CONFIG_SWIOTLB_DYNAMIC */
1201 
1202 #ifdef CONFIG_DEBUG_FS
1203 
1204 /**
1205  * mem_used() - get number of used slots in an allocator
1206  * @mem:	Software IO TLB allocator.
1207  *
1208  * The result is accurate in this version of the function, because an atomic
1209  * counter is available if CONFIG_DEBUG_FS is set.
1210  *
1211  * Return: Number of used slots.
1212  */
1213 static unsigned long mem_used(struct io_tlb_mem *mem)
1214 {
1215 	return atomic_long_read(&mem->total_used);
1216 }
1217 
1218 #else /* !CONFIG_DEBUG_FS */
1219 
1220 /**
1221  * mem_pool_used() - get number of used slots in a memory pool
1222  * @pool:	Software IO TLB memory pool.
1223  *
1224  * The result is not accurate, see mem_used().
1225  *
1226  * Return: Approximate number of used slots.
1227  */
1228 static unsigned long mem_pool_used(struct io_tlb_pool *pool)
1229 {
1230 	int i;
1231 	unsigned long used = 0;
1232 
1233 	for (i = 0; i < pool->nareas; i++)
1234 		used += pool->areas[i].used;
1235 	return used;
1236 }
1237 
1238 /**
1239  * mem_used() - get number of used slots in an allocator
1240  * @mem:	Software IO TLB allocator.
1241  *
1242  * The result is not accurate, because there is no locking of individual
1243  * areas.
1244  *
1245  * Return: Approximate number of used slots.
1246  */
1247 static unsigned long mem_used(struct io_tlb_mem *mem)
1248 {
1249 #ifdef CONFIG_SWIOTLB_DYNAMIC
1250 	struct io_tlb_pool *pool;
1251 	unsigned long used = 0;
1252 
1253 	rcu_read_lock();
1254 	list_for_each_entry_rcu(pool, &mem->pools, node)
1255 		used += mem_pool_used(pool);
1256 	rcu_read_unlock();
1257 
1258 	return used;
1259 #else
1260 	return mem_pool_used(&mem->defpool);
1261 #endif
1262 }
1263 
1264 #endif /* CONFIG_DEBUG_FS */
1265 
1266 phys_addr_t swiotlb_tbl_map_single(struct device *dev, phys_addr_t orig_addr,
1267 		size_t mapping_size, size_t alloc_size,
1268 		unsigned int alloc_align_mask, enum dma_data_direction dir,
1269 		unsigned long attrs)
1270 {
1271 	struct io_tlb_mem *mem = dev->dma_io_tlb_mem;
1272 	unsigned int offset = swiotlb_align_offset(dev, orig_addr);
1273 	struct io_tlb_pool *pool;
1274 	unsigned int i;
1275 	int index;
1276 	phys_addr_t tlb_addr;
1277 
1278 	if (!mem || !mem->nslabs) {
1279 		dev_warn_ratelimited(dev,
1280 			"Can not allocate SWIOTLB buffer earlier and can't now provide you with the DMA bounce buffer");
1281 		return (phys_addr_t)DMA_MAPPING_ERROR;
1282 	}
1283 
1284 	if (cc_platform_has(CC_ATTR_MEM_ENCRYPT))
1285 		pr_warn_once("Memory encryption is active and system is using DMA bounce buffers\n");
1286 
1287 	if (mapping_size > alloc_size) {
1288 		dev_warn_once(dev, "Invalid sizes (mapping: %zd bytes, alloc: %zd bytes)",
1289 			      mapping_size, alloc_size);
1290 		return (phys_addr_t)DMA_MAPPING_ERROR;
1291 	}
1292 
1293 	index = swiotlb_find_slots(dev, orig_addr,
1294 				   alloc_size + offset, alloc_align_mask, &pool);
1295 	if (index == -1) {
1296 		if (!(attrs & DMA_ATTR_NO_WARN))
1297 			dev_warn_ratelimited(dev,
1298 	"swiotlb buffer is full (sz: %zd bytes), total %lu (slots), used %lu (slots)\n",
1299 				 alloc_size, mem->nslabs, mem_used(mem));
1300 		return (phys_addr_t)DMA_MAPPING_ERROR;
1301 	}
1302 
1303 	/*
1304 	 * Save away the mapping from the original address to the DMA address.
1305 	 * This is needed when we sync the memory.  Then we sync the buffer if
1306 	 * needed.
1307 	 */
1308 	for (i = 0; i < nr_slots(alloc_size + offset); i++)
1309 		pool->slots[index + i].orig_addr = slot_addr(orig_addr, i);
1310 	tlb_addr = slot_addr(pool->start, index) + offset;
1311 	/*
1312 	 * When the device is writing memory, i.e. dir == DMA_FROM_DEVICE, copy
1313 	 * the original buffer to the TLB buffer before initiating DMA in order
1314 	 * to preserve the original's data if the device does a partial write,
1315 	 * i.e. if the device doesn't overwrite the entire buffer.  Preserving
1316 	 * the original data, even if it's garbage, is necessary to match
1317 	 * hardware behavior.  Use of swiotlb is supposed to be transparent,
1318 	 * i.e. swiotlb must not corrupt memory by clobbering unwritten bytes.
1319 	 */
1320 	swiotlb_bounce(dev, tlb_addr, mapping_size, DMA_TO_DEVICE);
1321 	return tlb_addr;
1322 }
1323 
1324 static void swiotlb_release_slots(struct device *dev, phys_addr_t tlb_addr)
1325 {
1326 	struct io_tlb_pool *mem = swiotlb_find_pool(dev, tlb_addr);
1327 	unsigned long flags;
1328 	unsigned int offset = swiotlb_align_offset(dev, tlb_addr);
1329 	int index = (tlb_addr - offset - mem->start) >> IO_TLB_SHIFT;
1330 	int nslots = nr_slots(mem->slots[index].alloc_size + offset);
1331 	int aindex = index / mem->area_nslabs;
1332 	struct io_tlb_area *area = &mem->areas[aindex];
1333 	int count, i;
1334 
1335 	/*
1336 	 * Return the buffer to the free list by setting the corresponding
1337 	 * entries to indicate the number of contiguous entries available.
1338 	 * While returning the entries to the free list, we merge the entries
1339 	 * with slots below and above the pool being returned.
1340 	 */
1341 	BUG_ON(aindex >= mem->nareas);
1342 
1343 	spin_lock_irqsave(&area->lock, flags);
1344 	if (index + nslots < ALIGN(index + 1, IO_TLB_SEGSIZE))
1345 		count = mem->slots[index + nslots].list;
1346 	else
1347 		count = 0;
1348 
1349 	/*
1350 	 * Step 1: return the slots to the free list, merging the slots with
1351 	 * superceeding slots
1352 	 */
1353 	for (i = index + nslots - 1; i >= index; i--) {
1354 		mem->slots[i].list = ++count;
1355 		mem->slots[i].orig_addr = INVALID_PHYS_ADDR;
1356 		mem->slots[i].alloc_size = 0;
1357 	}
1358 
1359 	/*
1360 	 * Step 2: merge the returned slots with the preceding slots, if
1361 	 * available (non zero)
1362 	 */
1363 	for (i = index - 1;
1364 	     io_tlb_offset(i) != IO_TLB_SEGSIZE - 1 && mem->slots[i].list;
1365 	     i--)
1366 		mem->slots[i].list = ++count;
1367 	area->used -= nslots;
1368 	spin_unlock_irqrestore(&area->lock, flags);
1369 
1370 	dec_used(dev->dma_io_tlb_mem, nslots);
1371 }
1372 
1373 #ifdef CONFIG_SWIOTLB_DYNAMIC
1374 
1375 /**
1376  * swiotlb_del_transient() - delete a transient memory pool
1377  * @dev:	Device which mapped the buffer.
1378  * @tlb_addr:	Physical address within a bounce buffer.
1379  *
1380  * Check whether the address belongs to a transient SWIOTLB memory pool.
1381  * If yes, then delete the pool.
1382  *
1383  * Return: %true if @tlb_addr belonged to a transient pool that was released.
1384  */
1385 static bool swiotlb_del_transient(struct device *dev, phys_addr_t tlb_addr)
1386 {
1387 	struct io_tlb_pool *pool;
1388 
1389 	pool = swiotlb_find_pool(dev, tlb_addr);
1390 	if (!pool->transient)
1391 		return false;
1392 
1393 	dec_used(dev->dma_io_tlb_mem, pool->nslabs);
1394 	swiotlb_del_pool(dev, pool);
1395 	return true;
1396 }
1397 
1398 #else  /* !CONFIG_SWIOTLB_DYNAMIC */
1399 
1400 static inline bool swiotlb_del_transient(struct device *dev,
1401 					 phys_addr_t tlb_addr)
1402 {
1403 	return false;
1404 }
1405 
1406 #endif	/* CONFIG_SWIOTLB_DYNAMIC */
1407 
1408 /*
1409  * tlb_addr is the physical address of the bounce buffer to unmap.
1410  */
1411 void swiotlb_tbl_unmap_single(struct device *dev, phys_addr_t tlb_addr,
1412 			      size_t mapping_size, enum dma_data_direction dir,
1413 			      unsigned long attrs)
1414 {
1415 	/*
1416 	 * First, sync the memory before unmapping the entry
1417 	 */
1418 	if (!(attrs & DMA_ATTR_SKIP_CPU_SYNC) &&
1419 	    (dir == DMA_FROM_DEVICE || dir == DMA_BIDIRECTIONAL))
1420 		swiotlb_bounce(dev, tlb_addr, mapping_size, DMA_FROM_DEVICE);
1421 
1422 	if (swiotlb_del_transient(dev, tlb_addr))
1423 		return;
1424 	swiotlb_release_slots(dev, tlb_addr);
1425 }
1426 
1427 void swiotlb_sync_single_for_device(struct device *dev, phys_addr_t tlb_addr,
1428 		size_t size, enum dma_data_direction dir)
1429 {
1430 	if (dir == DMA_TO_DEVICE || dir == DMA_BIDIRECTIONAL)
1431 		swiotlb_bounce(dev, tlb_addr, size, DMA_TO_DEVICE);
1432 	else
1433 		BUG_ON(dir != DMA_FROM_DEVICE);
1434 }
1435 
1436 void swiotlb_sync_single_for_cpu(struct device *dev, phys_addr_t tlb_addr,
1437 		size_t size, enum dma_data_direction dir)
1438 {
1439 	if (dir == DMA_FROM_DEVICE || dir == DMA_BIDIRECTIONAL)
1440 		swiotlb_bounce(dev, tlb_addr, size, DMA_FROM_DEVICE);
1441 	else
1442 		BUG_ON(dir != DMA_TO_DEVICE);
1443 }
1444 
1445 /*
1446  * Create a swiotlb mapping for the buffer at @paddr, and in case of DMAing
1447  * to the device copy the data into it as well.
1448  */
1449 dma_addr_t swiotlb_map(struct device *dev, phys_addr_t paddr, size_t size,
1450 		enum dma_data_direction dir, unsigned long attrs)
1451 {
1452 	phys_addr_t swiotlb_addr;
1453 	dma_addr_t dma_addr;
1454 
1455 	trace_swiotlb_bounced(dev, phys_to_dma(dev, paddr), size);
1456 
1457 	swiotlb_addr = swiotlb_tbl_map_single(dev, paddr, size, size, 0, dir,
1458 			attrs);
1459 	if (swiotlb_addr == (phys_addr_t)DMA_MAPPING_ERROR)
1460 		return DMA_MAPPING_ERROR;
1461 
1462 	/* Ensure that the address returned is DMA'ble */
1463 	dma_addr = phys_to_dma_unencrypted(dev, swiotlb_addr);
1464 	if (unlikely(!dma_capable(dev, dma_addr, size, true))) {
1465 		swiotlb_tbl_unmap_single(dev, swiotlb_addr, size, dir,
1466 			attrs | DMA_ATTR_SKIP_CPU_SYNC);
1467 		dev_WARN_ONCE(dev, 1,
1468 			"swiotlb addr %pad+%zu overflow (mask %llx, bus limit %llx).\n",
1469 			&dma_addr, size, *dev->dma_mask, dev->bus_dma_limit);
1470 		return DMA_MAPPING_ERROR;
1471 	}
1472 
1473 	if (!dev_is_dma_coherent(dev) && !(attrs & DMA_ATTR_SKIP_CPU_SYNC))
1474 		arch_sync_dma_for_device(swiotlb_addr, size, dir);
1475 	return dma_addr;
1476 }
1477 
1478 size_t swiotlb_max_mapping_size(struct device *dev)
1479 {
1480 	int min_align_mask = dma_get_min_align_mask(dev);
1481 	int min_align = 0;
1482 
1483 	/*
1484 	 * swiotlb_find_slots() skips slots according to
1485 	 * min align mask. This affects max mapping size.
1486 	 * Take it into acount here.
1487 	 */
1488 	if (min_align_mask)
1489 		min_align = roundup(min_align_mask, IO_TLB_SIZE);
1490 
1491 	return ((size_t)IO_TLB_SIZE) * IO_TLB_SEGSIZE - min_align;
1492 }
1493 
1494 /**
1495  * is_swiotlb_allocated() - check if the default software IO TLB is initialized
1496  */
1497 bool is_swiotlb_allocated(void)
1498 {
1499 	return io_tlb_default_mem.nslabs;
1500 }
1501 
1502 bool is_swiotlb_active(struct device *dev)
1503 {
1504 	struct io_tlb_mem *mem = dev->dma_io_tlb_mem;
1505 
1506 	return mem && mem->nslabs;
1507 }
1508 
1509 /**
1510  * default_swiotlb_base() - get the base address of the default SWIOTLB
1511  *
1512  * Get the lowest physical address used by the default software IO TLB pool.
1513  */
1514 phys_addr_t default_swiotlb_base(void)
1515 {
1516 #ifdef CONFIG_SWIOTLB_DYNAMIC
1517 	io_tlb_default_mem.can_grow = false;
1518 #endif
1519 	return io_tlb_default_mem.defpool.start;
1520 }
1521 
1522 /**
1523  * default_swiotlb_limit() - get the address limit of the default SWIOTLB
1524  *
1525  * Get the highest physical address used by the default software IO TLB pool.
1526  */
1527 phys_addr_t default_swiotlb_limit(void)
1528 {
1529 #ifdef CONFIG_SWIOTLB_DYNAMIC
1530 	return io_tlb_default_mem.phys_limit;
1531 #else
1532 	return io_tlb_default_mem.defpool.end - 1;
1533 #endif
1534 }
1535 
1536 #ifdef CONFIG_DEBUG_FS
1537 
1538 static int io_tlb_used_get(void *data, u64 *val)
1539 {
1540 	struct io_tlb_mem *mem = data;
1541 
1542 	*val = mem_used(mem);
1543 	return 0;
1544 }
1545 
1546 static int io_tlb_hiwater_get(void *data, u64 *val)
1547 {
1548 	struct io_tlb_mem *mem = data;
1549 
1550 	*val = atomic_long_read(&mem->used_hiwater);
1551 	return 0;
1552 }
1553 
1554 static int io_tlb_hiwater_set(void *data, u64 val)
1555 {
1556 	struct io_tlb_mem *mem = data;
1557 
1558 	/* Only allow setting to zero */
1559 	if (val != 0)
1560 		return -EINVAL;
1561 
1562 	atomic_long_set(&mem->used_hiwater, val);
1563 	return 0;
1564 }
1565 
1566 DEFINE_DEBUGFS_ATTRIBUTE(fops_io_tlb_used, io_tlb_used_get, NULL, "%llu\n");
1567 DEFINE_DEBUGFS_ATTRIBUTE(fops_io_tlb_hiwater, io_tlb_hiwater_get,
1568 				io_tlb_hiwater_set, "%llu\n");
1569 
1570 static void swiotlb_create_debugfs_files(struct io_tlb_mem *mem,
1571 					 const char *dirname)
1572 {
1573 	atomic_long_set(&mem->total_used, 0);
1574 	atomic_long_set(&mem->used_hiwater, 0);
1575 
1576 	mem->debugfs = debugfs_create_dir(dirname, io_tlb_default_mem.debugfs);
1577 	if (!mem->nslabs)
1578 		return;
1579 
1580 	debugfs_create_ulong("io_tlb_nslabs", 0400, mem->debugfs, &mem->nslabs);
1581 	debugfs_create_file("io_tlb_used", 0400, mem->debugfs, mem,
1582 			&fops_io_tlb_used);
1583 	debugfs_create_file("io_tlb_used_hiwater", 0600, mem->debugfs, mem,
1584 			&fops_io_tlb_hiwater);
1585 }
1586 
1587 static int __init swiotlb_create_default_debugfs(void)
1588 {
1589 	swiotlb_create_debugfs_files(&io_tlb_default_mem, "swiotlb");
1590 	return 0;
1591 }
1592 
1593 late_initcall(swiotlb_create_default_debugfs);
1594 
1595 #else  /* !CONFIG_DEBUG_FS */
1596 
1597 static inline void swiotlb_create_debugfs_files(struct io_tlb_mem *mem,
1598 						const char *dirname)
1599 {
1600 }
1601 
1602 #endif	/* CONFIG_DEBUG_FS */
1603 
1604 #ifdef CONFIG_DMA_RESTRICTED_POOL
1605 
1606 struct page *swiotlb_alloc(struct device *dev, size_t size)
1607 {
1608 	struct io_tlb_mem *mem = dev->dma_io_tlb_mem;
1609 	struct io_tlb_pool *pool;
1610 	phys_addr_t tlb_addr;
1611 	int index;
1612 
1613 	if (!mem)
1614 		return NULL;
1615 
1616 	index = swiotlb_find_slots(dev, 0, size, 0, &pool);
1617 	if (index == -1)
1618 		return NULL;
1619 
1620 	tlb_addr = slot_addr(pool->start, index);
1621 
1622 	return pfn_to_page(PFN_DOWN(tlb_addr));
1623 }
1624 
1625 bool swiotlb_free(struct device *dev, struct page *page, size_t size)
1626 {
1627 	phys_addr_t tlb_addr = page_to_phys(page);
1628 
1629 	if (!is_swiotlb_buffer(dev, tlb_addr))
1630 		return false;
1631 
1632 	swiotlb_release_slots(dev, tlb_addr);
1633 
1634 	return true;
1635 }
1636 
1637 static int rmem_swiotlb_device_init(struct reserved_mem *rmem,
1638 				    struct device *dev)
1639 {
1640 	struct io_tlb_mem *mem = rmem->priv;
1641 	unsigned long nslabs = rmem->size >> IO_TLB_SHIFT;
1642 
1643 	/* Set Per-device io tlb area to one */
1644 	unsigned int nareas = 1;
1645 
1646 	if (PageHighMem(pfn_to_page(PHYS_PFN(rmem->base)))) {
1647 		dev_err(dev, "Restricted DMA pool must be accessible within the linear mapping.");
1648 		return -EINVAL;
1649 	}
1650 
1651 	/*
1652 	 * Since multiple devices can share the same pool, the private data,
1653 	 * io_tlb_mem struct, will be initialized by the first device attached
1654 	 * to it.
1655 	 */
1656 	if (!mem) {
1657 		struct io_tlb_pool *pool;
1658 
1659 		mem = kzalloc(sizeof(*mem), GFP_KERNEL);
1660 		if (!mem)
1661 			return -ENOMEM;
1662 		pool = &mem->defpool;
1663 
1664 		pool->slots = kcalloc(nslabs, sizeof(*pool->slots), GFP_KERNEL);
1665 		if (!pool->slots) {
1666 			kfree(mem);
1667 			return -ENOMEM;
1668 		}
1669 
1670 		pool->areas = kcalloc(nareas, sizeof(*pool->areas),
1671 				GFP_KERNEL);
1672 		if (!pool->areas) {
1673 			kfree(pool->slots);
1674 			kfree(mem);
1675 			return -ENOMEM;
1676 		}
1677 
1678 		set_memory_decrypted((unsigned long)phys_to_virt(rmem->base),
1679 				     rmem->size >> PAGE_SHIFT);
1680 		swiotlb_init_io_tlb_pool(pool, rmem->base, nslabs,
1681 					 false, nareas);
1682 		mem->force_bounce = true;
1683 		mem->for_alloc = true;
1684 #ifdef CONFIG_SWIOTLB_DYNAMIC
1685 		spin_lock_init(&mem->lock);
1686 #endif
1687 		add_mem_pool(mem, pool);
1688 
1689 		rmem->priv = mem;
1690 
1691 		swiotlb_create_debugfs_files(mem, rmem->name);
1692 	}
1693 
1694 	dev->dma_io_tlb_mem = mem;
1695 
1696 	return 0;
1697 }
1698 
1699 static void rmem_swiotlb_device_release(struct reserved_mem *rmem,
1700 					struct device *dev)
1701 {
1702 	dev->dma_io_tlb_mem = &io_tlb_default_mem;
1703 }
1704 
1705 static const struct reserved_mem_ops rmem_swiotlb_ops = {
1706 	.device_init = rmem_swiotlb_device_init,
1707 	.device_release = rmem_swiotlb_device_release,
1708 };
1709 
1710 static int __init rmem_swiotlb_setup(struct reserved_mem *rmem)
1711 {
1712 	unsigned long node = rmem->fdt_node;
1713 
1714 	if (of_get_flat_dt_prop(node, "reusable", NULL) ||
1715 	    of_get_flat_dt_prop(node, "linux,cma-default", NULL) ||
1716 	    of_get_flat_dt_prop(node, "linux,dma-default", NULL) ||
1717 	    of_get_flat_dt_prop(node, "no-map", NULL))
1718 		return -EINVAL;
1719 
1720 	rmem->ops = &rmem_swiotlb_ops;
1721 	pr_info("Reserved memory: created restricted DMA pool at %pa, size %ld MiB\n",
1722 		&rmem->base, (unsigned long)rmem->size / SZ_1M);
1723 	return 0;
1724 }
1725 
1726 RESERVEDMEM_OF_DECLARE(dma, "restricted-dma-pool", rmem_swiotlb_setup);
1727 #endif /* CONFIG_DMA_RESTRICTED_POOL */
1728