Linux Audio

Check our new training course

Loading...
v6.8
   1// SPDX-License-Identifier: GPL-2.0-only
   2// Copyright (C) 2017 Broadcom
 
 
 
 
 
 
 
 
 
 
   3
   4/*
   5 * Broadcom FlexRM Mailbox Driver
   6 *
   7 * Each Broadcom FlexSparx4 offload engine is implemented as an
   8 * extension to Broadcom FlexRM ring manager. The FlexRM ring
   9 * manager provides a set of rings which can be used to submit
  10 * work to a FlexSparx4 offload engine.
  11 *
  12 * This driver creates a mailbox controller using a set of FlexRM
  13 * rings where each mailbox channel represents a separate FlexRM ring.
  14 */
  15
  16#include <asm/barrier.h>
  17#include <asm/byteorder.h>
  18#include <linux/atomic.h>
  19#include <linux/bitmap.h>
  20#include <linux/debugfs.h>
  21#include <linux/delay.h>
  22#include <linux/device.h>
  23#include <linux/dma-mapping.h>
  24#include <linux/dmapool.h>
  25#include <linux/err.h>
  26#include <linux/interrupt.h>
  27#include <linux/kernel.h>
  28#include <linux/mailbox_controller.h>
  29#include <linux/mailbox_client.h>
  30#include <linux/mailbox/brcm-message.h>
  31#include <linux/module.h>
  32#include <linux/msi.h>
  33#include <linux/of_address.h>
  34#include <linux/of_irq.h>
  35#include <linux/platform_device.h>
  36#include <linux/spinlock.h>
  37
  38/* ====== FlexRM register defines ===== */
  39
  40/* FlexRM configuration */
  41#define RING_REGS_SIZE					0x10000
  42#define RING_DESC_SIZE					8
  43#define RING_DESC_INDEX(offset)				\
  44			((offset) / RING_DESC_SIZE)
  45#define RING_DESC_OFFSET(index)				\
  46			((index) * RING_DESC_SIZE)
  47#define RING_MAX_REQ_COUNT				1024
  48#define RING_BD_ALIGN_ORDER				12
  49#define RING_BD_ALIGN_CHECK(addr)			\
  50			(!((addr) & ((0x1 << RING_BD_ALIGN_ORDER) - 1)))
  51#define RING_BD_TOGGLE_INVALID(offset)			\
  52			(((offset) >> RING_BD_ALIGN_ORDER) & 0x1)
  53#define RING_BD_TOGGLE_VALID(offset)			\
  54			(!RING_BD_TOGGLE_INVALID(offset))
  55#define RING_BD_DESC_PER_REQ				32
  56#define RING_BD_DESC_COUNT				\
  57			(RING_MAX_REQ_COUNT * RING_BD_DESC_PER_REQ)
  58#define RING_BD_SIZE					\
  59			(RING_BD_DESC_COUNT * RING_DESC_SIZE)
  60#define RING_CMPL_ALIGN_ORDER				13
  61#define RING_CMPL_DESC_COUNT				RING_MAX_REQ_COUNT
  62#define RING_CMPL_SIZE					\
  63			(RING_CMPL_DESC_COUNT * RING_DESC_SIZE)
  64#define RING_VER_MAGIC					0x76303031
  65
  66/* Per-Ring register offsets */
  67#define RING_VER					0x000
  68#define RING_BD_START_ADDR				0x004
  69#define RING_BD_READ_PTR				0x008
  70#define RING_BD_WRITE_PTR				0x00c
  71#define RING_BD_READ_PTR_DDR_LS				0x010
  72#define RING_BD_READ_PTR_DDR_MS				0x014
  73#define RING_CMPL_START_ADDR				0x018
  74#define RING_CMPL_WRITE_PTR				0x01c
  75#define RING_NUM_REQ_RECV_LS				0x020
  76#define RING_NUM_REQ_RECV_MS				0x024
  77#define RING_NUM_REQ_TRANS_LS				0x028
  78#define RING_NUM_REQ_TRANS_MS				0x02c
  79#define RING_NUM_REQ_OUTSTAND				0x030
  80#define RING_CONTROL					0x034
  81#define RING_FLUSH_DONE					0x038
  82#define RING_MSI_ADDR_LS				0x03c
  83#define RING_MSI_ADDR_MS				0x040
  84#define RING_MSI_CONTROL				0x048
  85#define RING_BD_READ_PTR_DDR_CONTROL			0x04c
  86#define RING_MSI_DATA_VALUE				0x064
  87
  88/* Register RING_BD_START_ADDR fields */
  89#define BD_LAST_UPDATE_HW_SHIFT				28
  90#define BD_LAST_UPDATE_HW_MASK				0x1
  91#define BD_START_ADDR_VALUE(pa)				\
  92	((u32)((((dma_addr_t)(pa)) >> RING_BD_ALIGN_ORDER) & 0x0fffffff))
  93#define BD_START_ADDR_DECODE(val)			\
  94	((dma_addr_t)((val) & 0x0fffffff) << RING_BD_ALIGN_ORDER)
  95
  96/* Register RING_CMPL_START_ADDR fields */
  97#define CMPL_START_ADDR_VALUE(pa)			\
  98	((u32)((((u64)(pa)) >> RING_CMPL_ALIGN_ORDER) & 0x07ffffff))
  99
 100/* Register RING_CONTROL fields */
 101#define CONTROL_MASK_DISABLE_CONTROL			12
 102#define CONTROL_FLUSH_SHIFT				5
 103#define CONTROL_ACTIVE_SHIFT				4
 104#define CONTROL_RATE_ADAPT_MASK				0xf
 105#define CONTROL_RATE_DYNAMIC				0x0
 106#define CONTROL_RATE_FAST				0x8
 107#define CONTROL_RATE_MEDIUM				0x9
 108#define CONTROL_RATE_SLOW				0xa
 109#define CONTROL_RATE_IDLE				0xb
 110
 111/* Register RING_FLUSH_DONE fields */
 112#define FLUSH_DONE_MASK					0x1
 113
 114/* Register RING_MSI_CONTROL fields */
 115#define MSI_TIMER_VAL_SHIFT				16
 116#define MSI_TIMER_VAL_MASK				0xffff
 117#define MSI_ENABLE_SHIFT				15
 118#define MSI_ENABLE_MASK					0x1
 119#define MSI_COUNT_SHIFT					0
 120#define MSI_COUNT_MASK					0x3ff
 121
 122/* Register RING_BD_READ_PTR_DDR_CONTROL fields */
 123#define BD_READ_PTR_DDR_TIMER_VAL_SHIFT			16
 124#define BD_READ_PTR_DDR_TIMER_VAL_MASK			0xffff
 125#define BD_READ_PTR_DDR_ENABLE_SHIFT			15
 126#define BD_READ_PTR_DDR_ENABLE_MASK			0x1
 127
 128/* ====== FlexRM ring descriptor defines ===== */
 129
 130/* Completion descriptor format */
 131#define CMPL_OPAQUE_SHIFT			0
 132#define CMPL_OPAQUE_MASK			0xffff
 133#define CMPL_ENGINE_STATUS_SHIFT		16
 134#define CMPL_ENGINE_STATUS_MASK			0xffff
 135#define CMPL_DME_STATUS_SHIFT			32
 136#define CMPL_DME_STATUS_MASK			0xffff
 137#define CMPL_RM_STATUS_SHIFT			48
 138#define CMPL_RM_STATUS_MASK			0xffff
 139
 140/* Completion DME status code */
 141#define DME_STATUS_MEM_COR_ERR			BIT(0)
 142#define DME_STATUS_MEM_UCOR_ERR			BIT(1)
 143#define DME_STATUS_FIFO_UNDERFLOW		BIT(2)
 144#define DME_STATUS_FIFO_OVERFLOW		BIT(3)
 145#define DME_STATUS_RRESP_ERR			BIT(4)
 146#define DME_STATUS_BRESP_ERR			BIT(5)
 147#define DME_STATUS_ERROR_MASK			(DME_STATUS_MEM_COR_ERR | \
 148						 DME_STATUS_MEM_UCOR_ERR | \
 149						 DME_STATUS_FIFO_UNDERFLOW | \
 150						 DME_STATUS_FIFO_OVERFLOW | \
 151						 DME_STATUS_RRESP_ERR | \
 152						 DME_STATUS_BRESP_ERR)
 153
 154/* Completion RM status code */
 155#define RM_STATUS_CODE_SHIFT			0
 156#define RM_STATUS_CODE_MASK			0x3ff
 157#define RM_STATUS_CODE_GOOD			0x0
 158#define RM_STATUS_CODE_AE_TIMEOUT		0x3ff
 159
 160/* General descriptor format */
 161#define DESC_TYPE_SHIFT				60
 162#define DESC_TYPE_MASK				0xf
 163#define DESC_PAYLOAD_SHIFT			0
 164#define DESC_PAYLOAD_MASK			0x0fffffffffffffff
 165
 166/* Null descriptor format  */
 167#define NULL_TYPE				0
 168#define NULL_TOGGLE_SHIFT			58
 169#define NULL_TOGGLE_MASK			0x1
 170
 171/* Header descriptor format */
 172#define HEADER_TYPE				1
 173#define HEADER_TOGGLE_SHIFT			58
 174#define HEADER_TOGGLE_MASK			0x1
 175#define HEADER_ENDPKT_SHIFT			57
 176#define HEADER_ENDPKT_MASK			0x1
 177#define HEADER_STARTPKT_SHIFT			56
 178#define HEADER_STARTPKT_MASK			0x1
 179#define HEADER_BDCOUNT_SHIFT			36
 180#define HEADER_BDCOUNT_MASK			0x1f
 181#define HEADER_BDCOUNT_MAX			HEADER_BDCOUNT_MASK
 182#define HEADER_FLAGS_SHIFT			16
 183#define HEADER_FLAGS_MASK			0xffff
 184#define HEADER_OPAQUE_SHIFT			0
 185#define HEADER_OPAQUE_MASK			0xffff
 186
 187/* Source (SRC) descriptor format */
 188#define SRC_TYPE				2
 189#define SRC_LENGTH_SHIFT			44
 190#define SRC_LENGTH_MASK				0xffff
 191#define SRC_ADDR_SHIFT				0
 192#define SRC_ADDR_MASK				0x00000fffffffffff
 193
 194/* Destination (DST) descriptor format */
 195#define DST_TYPE				3
 196#define DST_LENGTH_SHIFT			44
 197#define DST_LENGTH_MASK				0xffff
 198#define DST_ADDR_SHIFT				0
 199#define DST_ADDR_MASK				0x00000fffffffffff
 200
 201/* Immediate (IMM) descriptor format */
 202#define IMM_TYPE				4
 203#define IMM_DATA_SHIFT				0
 204#define IMM_DATA_MASK				0x0fffffffffffffff
 205
 206/* Next pointer (NPTR) descriptor format */
 207#define NPTR_TYPE				5
 208#define NPTR_TOGGLE_SHIFT			58
 209#define NPTR_TOGGLE_MASK			0x1
 210#define NPTR_ADDR_SHIFT				0
 211#define NPTR_ADDR_MASK				0x00000fffffffffff
 212
 213/* Mega source (MSRC) descriptor format */
 214#define MSRC_TYPE				6
 215#define MSRC_LENGTH_SHIFT			44
 216#define MSRC_LENGTH_MASK			0xffff
 217#define MSRC_ADDR_SHIFT				0
 218#define MSRC_ADDR_MASK				0x00000fffffffffff
 219
 220/* Mega destination (MDST) descriptor format */
 221#define MDST_TYPE				7
 222#define MDST_LENGTH_SHIFT			44
 223#define MDST_LENGTH_MASK			0xffff
 224#define MDST_ADDR_SHIFT				0
 225#define MDST_ADDR_MASK				0x00000fffffffffff
 226
 227/* Source with tlast (SRCT) descriptor format */
 228#define SRCT_TYPE				8
 229#define SRCT_LENGTH_SHIFT			44
 230#define SRCT_LENGTH_MASK			0xffff
 231#define SRCT_ADDR_SHIFT				0
 232#define SRCT_ADDR_MASK				0x00000fffffffffff
 233
 234/* Destination with tlast (DSTT) descriptor format */
 235#define DSTT_TYPE				9
 236#define DSTT_LENGTH_SHIFT			44
 237#define DSTT_LENGTH_MASK			0xffff
 238#define DSTT_ADDR_SHIFT				0
 239#define DSTT_ADDR_MASK				0x00000fffffffffff
 240
 241/* Immediate with tlast (IMMT) descriptor format */
 242#define IMMT_TYPE				10
 243#define IMMT_DATA_SHIFT				0
 244#define IMMT_DATA_MASK				0x0fffffffffffffff
 245
 246/* Descriptor helper macros */
 247#define DESC_DEC(_d, _s, _m)			(((_d) >> (_s)) & (_m))
 248#define DESC_ENC(_d, _v, _s, _m)		\
 249			do { \
 250				(_d) &= ~((u64)(_m) << (_s)); \
 251				(_d) |= (((u64)(_v) & (_m)) << (_s)); \
 252			} while (0)
 253
 254/* ====== FlexRM data structures ===== */
 255
 256struct flexrm_ring {
 257	/* Unprotected members */
 258	int num;
 259	struct flexrm_mbox *mbox;
 260	void __iomem *regs;
 261	bool irq_requested;
 262	unsigned int irq;
 263	cpumask_t irq_aff_hint;
 264	unsigned int msi_timer_val;
 265	unsigned int msi_count_threshold;
 266	struct brcm_message *requests[RING_MAX_REQ_COUNT];
 267	void *bd_base;
 268	dma_addr_t bd_dma_base;
 269	u32 bd_write_offset;
 270	void *cmpl_base;
 271	dma_addr_t cmpl_dma_base;
 272	/* Atomic stats */
 273	atomic_t msg_send_count;
 274	atomic_t msg_cmpl_count;
 275	/* Protected members */
 276	spinlock_t lock;
 277	DECLARE_BITMAP(requests_bmap, RING_MAX_REQ_COUNT);
 278	u32 cmpl_read_offset;
 279};
 280
 281struct flexrm_mbox {
 282	struct device *dev;
 283	void __iomem *regs;
 284	u32 num_rings;
 285	struct flexrm_ring *rings;
 286	struct dma_pool *bd_pool;
 287	struct dma_pool *cmpl_pool;
 288	struct dentry *root;
 
 
 289	struct mbox_controller controller;
 290};
 291
 292/* ====== FlexRM ring descriptor helper routines ===== */
 293
 294static u64 flexrm_read_desc(void *desc_ptr)
 295{
 296	return le64_to_cpu(*((u64 *)desc_ptr));
 297}
 298
 299static void flexrm_write_desc(void *desc_ptr, u64 desc)
 300{
 301	*((u64 *)desc_ptr) = cpu_to_le64(desc);
 302}
 303
 304static u32 flexrm_cmpl_desc_to_reqid(u64 cmpl_desc)
 305{
 306	return (u32)(cmpl_desc & CMPL_OPAQUE_MASK);
 307}
 308
 309static int flexrm_cmpl_desc_to_error(u64 cmpl_desc)
 310{
 311	u32 status;
 312
 313	status = DESC_DEC(cmpl_desc, CMPL_DME_STATUS_SHIFT,
 314			  CMPL_DME_STATUS_MASK);
 315	if (status & DME_STATUS_ERROR_MASK)
 316		return -EIO;
 317
 318	status = DESC_DEC(cmpl_desc, CMPL_RM_STATUS_SHIFT,
 319			  CMPL_RM_STATUS_MASK);
 320	status &= RM_STATUS_CODE_MASK;
 321	if (status == RM_STATUS_CODE_AE_TIMEOUT)
 322		return -ETIMEDOUT;
 323
 324	return 0;
 325}
 326
 327static bool flexrm_is_next_table_desc(void *desc_ptr)
 328{
 329	u64 desc = flexrm_read_desc(desc_ptr);
 330	u32 type = DESC_DEC(desc, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 331
 332	return (type == NPTR_TYPE) ? true : false;
 333}
 334
 335static u64 flexrm_next_table_desc(u32 toggle, dma_addr_t next_addr)
 336{
 337	u64 desc = 0;
 338
 339	DESC_ENC(desc, NPTR_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 340	DESC_ENC(desc, toggle, NPTR_TOGGLE_SHIFT, NPTR_TOGGLE_MASK);
 341	DESC_ENC(desc, next_addr, NPTR_ADDR_SHIFT, NPTR_ADDR_MASK);
 342
 343	return desc;
 344}
 345
 346static u64 flexrm_null_desc(u32 toggle)
 347{
 348	u64 desc = 0;
 349
 350	DESC_ENC(desc, NULL_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 351	DESC_ENC(desc, toggle, NULL_TOGGLE_SHIFT, NULL_TOGGLE_MASK);
 352
 353	return desc;
 354}
 355
 356static u32 flexrm_estimate_header_desc_count(u32 nhcnt)
 357{
 358	u32 hcnt = nhcnt / HEADER_BDCOUNT_MAX;
 359
 360	if (!(nhcnt % HEADER_BDCOUNT_MAX))
 361		hcnt += 1;
 362
 363	return hcnt;
 364}
 365
 366static void flexrm_flip_header_toggle(void *desc_ptr)
 367{
 368	u64 desc = flexrm_read_desc(desc_ptr);
 369
 370	if (desc & ((u64)0x1 << HEADER_TOGGLE_SHIFT))
 371		desc &= ~((u64)0x1 << HEADER_TOGGLE_SHIFT);
 372	else
 373		desc |= ((u64)0x1 << HEADER_TOGGLE_SHIFT);
 374
 375	flexrm_write_desc(desc_ptr, desc);
 376}
 377
 378static u64 flexrm_header_desc(u32 toggle, u32 startpkt, u32 endpkt,
 379			       u32 bdcount, u32 flags, u32 opaque)
 380{
 381	u64 desc = 0;
 382
 383	DESC_ENC(desc, HEADER_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 384	DESC_ENC(desc, toggle, HEADER_TOGGLE_SHIFT, HEADER_TOGGLE_MASK);
 385	DESC_ENC(desc, startpkt, HEADER_STARTPKT_SHIFT, HEADER_STARTPKT_MASK);
 386	DESC_ENC(desc, endpkt, HEADER_ENDPKT_SHIFT, HEADER_ENDPKT_MASK);
 387	DESC_ENC(desc, bdcount, HEADER_BDCOUNT_SHIFT, HEADER_BDCOUNT_MASK);
 388	DESC_ENC(desc, flags, HEADER_FLAGS_SHIFT, HEADER_FLAGS_MASK);
 389	DESC_ENC(desc, opaque, HEADER_OPAQUE_SHIFT, HEADER_OPAQUE_MASK);
 390
 391	return desc;
 392}
 393
 394static void flexrm_enqueue_desc(u32 nhpos, u32 nhcnt, u32 reqid,
 395				 u64 desc, void **desc_ptr, u32 *toggle,
 396				 void *start_desc, void *end_desc)
 397{
 398	u64 d;
 399	u32 nhavail, _toggle, _startpkt, _endpkt, _bdcount;
 400
 401	/* Sanity check */
 402	if (nhcnt <= nhpos)
 403		return;
 404
 405	/*
 406	 * Each request or packet start with a HEADER descriptor followed
 407	 * by one or more non-HEADER descriptors (SRC, SRCT, MSRC, DST,
 408	 * DSTT, MDST, IMM, and IMMT). The number of non-HEADER descriptors
 409	 * following a HEADER descriptor is represented by BDCOUNT field
 410	 * of HEADER descriptor. The max value of BDCOUNT field is 31 which
 411	 * means we can only have 31 non-HEADER descriptors following one
 412	 * HEADER descriptor.
 413	 *
 414	 * In general use, number of non-HEADER descriptors can easily go
 415	 * beyond 31. To tackle this situation, we have packet (or request)
 416	 * extension bits (STARTPKT and ENDPKT) in the HEADER descriptor.
 417	 *
 418	 * To use packet extension, the first HEADER descriptor of request
 419	 * (or packet) will have STARTPKT=1 and ENDPKT=0. The intermediate
 420	 * HEADER descriptors will have STARTPKT=0 and ENDPKT=0. The last
 421	 * HEADER descriptor will have STARTPKT=0 and ENDPKT=1. Also, the
 422	 * TOGGLE bit of the first HEADER will be set to invalid state to
 423	 * ensure that FlexRM does not start fetching descriptors till all
 424	 * descriptors are enqueued. The user of this function will flip
 425	 * the TOGGLE bit of first HEADER after all descriptors are
 426	 * enqueued.
 427	 */
 428
 429	if ((nhpos % HEADER_BDCOUNT_MAX == 0) && (nhcnt - nhpos)) {
 430		/* Prepare the header descriptor */
 431		nhavail = (nhcnt - nhpos);
 432		_toggle = (nhpos == 0) ? !(*toggle) : (*toggle);
 433		_startpkt = (nhpos == 0) ? 0x1 : 0x0;
 434		_endpkt = (nhavail <= HEADER_BDCOUNT_MAX) ? 0x1 : 0x0;
 435		_bdcount = (nhavail <= HEADER_BDCOUNT_MAX) ?
 436				nhavail : HEADER_BDCOUNT_MAX;
 437		if (nhavail <= HEADER_BDCOUNT_MAX)
 438			_bdcount = nhavail;
 439		else
 440			_bdcount = HEADER_BDCOUNT_MAX;
 441		d = flexrm_header_desc(_toggle, _startpkt, _endpkt,
 442					_bdcount, 0x0, reqid);
 443
 444		/* Write header descriptor */
 445		flexrm_write_desc(*desc_ptr, d);
 446
 447		/* Point to next descriptor */
 448		*desc_ptr += sizeof(desc);
 449		if (*desc_ptr == end_desc)
 450			*desc_ptr = start_desc;
 451
 452		/* Skip next pointer descriptors */
 453		while (flexrm_is_next_table_desc(*desc_ptr)) {
 454			*toggle = (*toggle) ? 0 : 1;
 455			*desc_ptr += sizeof(desc);
 456			if (*desc_ptr == end_desc)
 457				*desc_ptr = start_desc;
 458		}
 459	}
 460
 461	/* Write desired descriptor */
 462	flexrm_write_desc(*desc_ptr, desc);
 463
 464	/* Point to next descriptor */
 465	*desc_ptr += sizeof(desc);
 466	if (*desc_ptr == end_desc)
 467		*desc_ptr = start_desc;
 468
 469	/* Skip next pointer descriptors */
 470	while (flexrm_is_next_table_desc(*desc_ptr)) {
 471		*toggle = (*toggle) ? 0 : 1;
 472		*desc_ptr += sizeof(desc);
 473		if (*desc_ptr == end_desc)
 474			*desc_ptr = start_desc;
 475	}
 476}
 477
 478static u64 flexrm_src_desc(dma_addr_t addr, unsigned int length)
 479{
 480	u64 desc = 0;
 481
 482	DESC_ENC(desc, SRC_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 483	DESC_ENC(desc, length, SRC_LENGTH_SHIFT, SRC_LENGTH_MASK);
 484	DESC_ENC(desc, addr, SRC_ADDR_SHIFT, SRC_ADDR_MASK);
 485
 486	return desc;
 487}
 488
 489static u64 flexrm_msrc_desc(dma_addr_t addr, unsigned int length_div_16)
 490{
 491	u64 desc = 0;
 492
 493	DESC_ENC(desc, MSRC_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 494	DESC_ENC(desc, length_div_16, MSRC_LENGTH_SHIFT, MSRC_LENGTH_MASK);
 495	DESC_ENC(desc, addr, MSRC_ADDR_SHIFT, MSRC_ADDR_MASK);
 496
 497	return desc;
 498}
 499
 500static u64 flexrm_dst_desc(dma_addr_t addr, unsigned int length)
 501{
 502	u64 desc = 0;
 503
 504	DESC_ENC(desc, DST_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 505	DESC_ENC(desc, length, DST_LENGTH_SHIFT, DST_LENGTH_MASK);
 506	DESC_ENC(desc, addr, DST_ADDR_SHIFT, DST_ADDR_MASK);
 507
 508	return desc;
 509}
 510
 511static u64 flexrm_mdst_desc(dma_addr_t addr, unsigned int length_div_16)
 512{
 513	u64 desc = 0;
 514
 515	DESC_ENC(desc, MDST_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 516	DESC_ENC(desc, length_div_16, MDST_LENGTH_SHIFT, MDST_LENGTH_MASK);
 517	DESC_ENC(desc, addr, MDST_ADDR_SHIFT, MDST_ADDR_MASK);
 518
 519	return desc;
 520}
 521
 522static u64 flexrm_imm_desc(u64 data)
 523{
 524	u64 desc = 0;
 525
 526	DESC_ENC(desc, IMM_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 527	DESC_ENC(desc, data, IMM_DATA_SHIFT, IMM_DATA_MASK);
 528
 529	return desc;
 530}
 531
 532static u64 flexrm_srct_desc(dma_addr_t addr, unsigned int length)
 533{
 534	u64 desc = 0;
 535
 536	DESC_ENC(desc, SRCT_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 537	DESC_ENC(desc, length, SRCT_LENGTH_SHIFT, SRCT_LENGTH_MASK);
 538	DESC_ENC(desc, addr, SRCT_ADDR_SHIFT, SRCT_ADDR_MASK);
 539
 540	return desc;
 541}
 542
 543static u64 flexrm_dstt_desc(dma_addr_t addr, unsigned int length)
 544{
 545	u64 desc = 0;
 546
 547	DESC_ENC(desc, DSTT_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 548	DESC_ENC(desc, length, DSTT_LENGTH_SHIFT, DSTT_LENGTH_MASK);
 549	DESC_ENC(desc, addr, DSTT_ADDR_SHIFT, DSTT_ADDR_MASK);
 550
 551	return desc;
 552}
 553
 554static u64 flexrm_immt_desc(u64 data)
 555{
 556	u64 desc = 0;
 557
 558	DESC_ENC(desc, IMMT_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 559	DESC_ENC(desc, data, IMMT_DATA_SHIFT, IMMT_DATA_MASK);
 560
 561	return desc;
 562}
 563
 564static bool flexrm_spu_sanity_check(struct brcm_message *msg)
 565{
 566	struct scatterlist *sg;
 567
 568	if (!msg->spu.src || !msg->spu.dst)
 569		return false;
 570	for (sg = msg->spu.src; sg; sg = sg_next(sg)) {
 571		if (sg->length & 0xf) {
 572			if (sg->length > SRC_LENGTH_MASK)
 573				return false;
 574		} else {
 575			if (sg->length > (MSRC_LENGTH_MASK * 16))
 576				return false;
 577		}
 578	}
 579	for (sg = msg->spu.dst; sg; sg = sg_next(sg)) {
 580		if (sg->length & 0xf) {
 581			if (sg->length > DST_LENGTH_MASK)
 582				return false;
 583		} else {
 584			if (sg->length > (MDST_LENGTH_MASK * 16))
 585				return false;
 586		}
 587	}
 588
 589	return true;
 590}
 591
 592static u32 flexrm_spu_estimate_nonheader_desc_count(struct brcm_message *msg)
 593{
 594	u32 cnt = 0;
 595	unsigned int dst_target = 0;
 596	struct scatterlist *src_sg = msg->spu.src, *dst_sg = msg->spu.dst;
 597
 598	while (src_sg || dst_sg) {
 599		if (src_sg) {
 600			cnt++;
 601			dst_target = src_sg->length;
 602			src_sg = sg_next(src_sg);
 603		} else
 604			dst_target = UINT_MAX;
 605
 606		while (dst_target && dst_sg) {
 607			cnt++;
 608			if (dst_sg->length < dst_target)
 609				dst_target -= dst_sg->length;
 610			else
 611				dst_target = 0;
 612			dst_sg = sg_next(dst_sg);
 613		}
 614	}
 615
 616	return cnt;
 617}
 618
 619static int flexrm_spu_dma_map(struct device *dev, struct brcm_message *msg)
 620{
 621	int rc;
 622
 623	rc = dma_map_sg(dev, msg->spu.src, sg_nents(msg->spu.src),
 624			DMA_TO_DEVICE);
 625	if (!rc)
 626		return -EIO;
 627
 628	rc = dma_map_sg(dev, msg->spu.dst, sg_nents(msg->spu.dst),
 629			DMA_FROM_DEVICE);
 630	if (!rc) {
 631		dma_unmap_sg(dev, msg->spu.src, sg_nents(msg->spu.src),
 632			     DMA_TO_DEVICE);
 633		return -EIO;
 634	}
 635
 636	return 0;
 637}
 638
 639static void flexrm_spu_dma_unmap(struct device *dev, struct brcm_message *msg)
 640{
 641	dma_unmap_sg(dev, msg->spu.dst, sg_nents(msg->spu.dst),
 642		     DMA_FROM_DEVICE);
 643	dma_unmap_sg(dev, msg->spu.src, sg_nents(msg->spu.src),
 644		     DMA_TO_DEVICE);
 645}
 646
 647static void *flexrm_spu_write_descs(struct brcm_message *msg, u32 nhcnt,
 648				     u32 reqid, void *desc_ptr, u32 toggle,
 649				     void *start_desc, void *end_desc)
 650{
 651	u64 d;
 652	u32 nhpos = 0;
 653	void *orig_desc_ptr = desc_ptr;
 654	unsigned int dst_target = 0;
 655	struct scatterlist *src_sg = msg->spu.src, *dst_sg = msg->spu.dst;
 656
 657	while (src_sg || dst_sg) {
 658		if (src_sg) {
 659			if (sg_dma_len(src_sg) & 0xf)
 660				d = flexrm_src_desc(sg_dma_address(src_sg),
 661						     sg_dma_len(src_sg));
 662			else
 663				d = flexrm_msrc_desc(sg_dma_address(src_sg),
 664						      sg_dma_len(src_sg)/16);
 665			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 666					     d, &desc_ptr, &toggle,
 667					     start_desc, end_desc);
 668			nhpos++;
 669			dst_target = sg_dma_len(src_sg);
 670			src_sg = sg_next(src_sg);
 671		} else
 672			dst_target = UINT_MAX;
 673
 674		while (dst_target && dst_sg) {
 675			if (sg_dma_len(dst_sg) & 0xf)
 676				d = flexrm_dst_desc(sg_dma_address(dst_sg),
 677						     sg_dma_len(dst_sg));
 678			else
 679				d = flexrm_mdst_desc(sg_dma_address(dst_sg),
 680						      sg_dma_len(dst_sg)/16);
 681			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 682					     d, &desc_ptr, &toggle,
 683					     start_desc, end_desc);
 684			nhpos++;
 685			if (sg_dma_len(dst_sg) < dst_target)
 686				dst_target -= sg_dma_len(dst_sg);
 687			else
 688				dst_target = 0;
 689			dst_sg = sg_next(dst_sg);
 690		}
 691	}
 692
 693	/* Null descriptor with invalid toggle bit */
 694	flexrm_write_desc(desc_ptr, flexrm_null_desc(!toggle));
 695
 696	/* Ensure that descriptors have been written to memory */
 697	wmb();
 698
 699	/* Flip toggle bit in header */
 700	flexrm_flip_header_toggle(orig_desc_ptr);
 701
 702	return desc_ptr;
 703}
 704
 705static bool flexrm_sba_sanity_check(struct brcm_message *msg)
 706{
 707	u32 i;
 708
 709	if (!msg->sba.cmds || !msg->sba.cmds_count)
 710		return false;
 711
 712	for (i = 0; i < msg->sba.cmds_count; i++) {
 713		if (((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_B) ||
 714		     (msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_C)) &&
 715		    (msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_OUTPUT))
 716			return false;
 717		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_B) &&
 718		    (msg->sba.cmds[i].data_len > SRCT_LENGTH_MASK))
 719			return false;
 720		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_C) &&
 721		    (msg->sba.cmds[i].data_len > SRCT_LENGTH_MASK))
 722			return false;
 723		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_RESP) &&
 724		    (msg->sba.cmds[i].resp_len > DSTT_LENGTH_MASK))
 725			return false;
 726		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_OUTPUT) &&
 727		    (msg->sba.cmds[i].data_len > DSTT_LENGTH_MASK))
 728			return false;
 729	}
 730
 731	return true;
 732}
 733
 734static u32 flexrm_sba_estimate_nonheader_desc_count(struct brcm_message *msg)
 735{
 736	u32 i, cnt;
 737
 738	cnt = 0;
 739	for (i = 0; i < msg->sba.cmds_count; i++) {
 740		cnt++;
 741
 742		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_B) ||
 743		    (msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_C))
 744			cnt++;
 745
 746		if (msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_RESP)
 747			cnt++;
 748
 749		if (msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_OUTPUT)
 750			cnt++;
 751	}
 752
 753	return cnt;
 754}
 755
 756static void *flexrm_sba_write_descs(struct brcm_message *msg, u32 nhcnt,
 757				     u32 reqid, void *desc_ptr, u32 toggle,
 758				     void *start_desc, void *end_desc)
 759{
 760	u64 d;
 761	u32 i, nhpos = 0;
 762	struct brcm_sba_command *c;
 763	void *orig_desc_ptr = desc_ptr;
 764
 765	/* Convert SBA commands into descriptors */
 766	for (i = 0; i < msg->sba.cmds_count; i++) {
 767		c = &msg->sba.cmds[i];
 768
 769		if ((c->flags & BRCM_SBA_CMD_HAS_RESP) &&
 770		    (c->flags & BRCM_SBA_CMD_HAS_OUTPUT)) {
 771			/* Destination response descriptor */
 772			d = flexrm_dst_desc(c->resp, c->resp_len);
 773			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 774					     d, &desc_ptr, &toggle,
 775					     start_desc, end_desc);
 776			nhpos++;
 777		} else if (c->flags & BRCM_SBA_CMD_HAS_RESP) {
 778			/* Destination response with tlast descriptor */
 779			d = flexrm_dstt_desc(c->resp, c->resp_len);
 780			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 781					     d, &desc_ptr, &toggle,
 782					     start_desc, end_desc);
 783			nhpos++;
 784		}
 785
 786		if (c->flags & BRCM_SBA_CMD_HAS_OUTPUT) {
 787			/* Destination with tlast descriptor */
 788			d = flexrm_dstt_desc(c->data, c->data_len);
 789			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 790					     d, &desc_ptr, &toggle,
 791					     start_desc, end_desc);
 792			nhpos++;
 793		}
 794
 795		if (c->flags & BRCM_SBA_CMD_TYPE_B) {
 796			/* Command as immediate descriptor */
 797			d = flexrm_imm_desc(c->cmd);
 798			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 799					     d, &desc_ptr, &toggle,
 800					     start_desc, end_desc);
 801			nhpos++;
 802		} else {
 803			/* Command as immediate descriptor with tlast */
 804			d = flexrm_immt_desc(c->cmd);
 805			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 806					     d, &desc_ptr, &toggle,
 807					     start_desc, end_desc);
 808			nhpos++;
 809		}
 810
 811		if ((c->flags & BRCM_SBA_CMD_TYPE_B) ||
 812		    (c->flags & BRCM_SBA_CMD_TYPE_C)) {
 813			/* Source with tlast descriptor */
 814			d = flexrm_srct_desc(c->data, c->data_len);
 815			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 816					     d, &desc_ptr, &toggle,
 817					     start_desc, end_desc);
 818			nhpos++;
 819		}
 820	}
 821
 822	/* Null descriptor with invalid toggle bit */
 823	flexrm_write_desc(desc_ptr, flexrm_null_desc(!toggle));
 824
 825	/* Ensure that descriptors have been written to memory */
 826	wmb();
 827
 828	/* Flip toggle bit in header */
 829	flexrm_flip_header_toggle(orig_desc_ptr);
 830
 831	return desc_ptr;
 832}
 833
 834static bool flexrm_sanity_check(struct brcm_message *msg)
 835{
 836	if (!msg)
 837		return false;
 838
 839	switch (msg->type) {
 840	case BRCM_MESSAGE_SPU:
 841		return flexrm_spu_sanity_check(msg);
 842	case BRCM_MESSAGE_SBA:
 843		return flexrm_sba_sanity_check(msg);
 844	default:
 845		return false;
 846	};
 847}
 848
 849static u32 flexrm_estimate_nonheader_desc_count(struct brcm_message *msg)
 850{
 851	if (!msg)
 852		return 0;
 853
 854	switch (msg->type) {
 855	case BRCM_MESSAGE_SPU:
 856		return flexrm_spu_estimate_nonheader_desc_count(msg);
 857	case BRCM_MESSAGE_SBA:
 858		return flexrm_sba_estimate_nonheader_desc_count(msg);
 859	default:
 860		return 0;
 861	};
 862}
 863
 864static int flexrm_dma_map(struct device *dev, struct brcm_message *msg)
 865{
 866	if (!dev || !msg)
 867		return -EINVAL;
 868
 869	switch (msg->type) {
 870	case BRCM_MESSAGE_SPU:
 871		return flexrm_spu_dma_map(dev, msg);
 872	default:
 873		break;
 874	}
 875
 876	return 0;
 877}
 878
 879static void flexrm_dma_unmap(struct device *dev, struct brcm_message *msg)
 880{
 881	if (!dev || !msg)
 882		return;
 883
 884	switch (msg->type) {
 885	case BRCM_MESSAGE_SPU:
 886		flexrm_spu_dma_unmap(dev, msg);
 887		break;
 888	default:
 889		break;
 890	}
 891}
 892
 893static void *flexrm_write_descs(struct brcm_message *msg, u32 nhcnt,
 894				u32 reqid, void *desc_ptr, u32 toggle,
 895				void *start_desc, void *end_desc)
 896{
 897	if (!msg || !desc_ptr || !start_desc || !end_desc)
 898		return ERR_PTR(-ENOTSUPP);
 899
 900	if ((desc_ptr < start_desc) || (end_desc <= desc_ptr))
 901		return ERR_PTR(-ERANGE);
 902
 903	switch (msg->type) {
 904	case BRCM_MESSAGE_SPU:
 905		return flexrm_spu_write_descs(msg, nhcnt, reqid,
 906					       desc_ptr, toggle,
 907					       start_desc, end_desc);
 908	case BRCM_MESSAGE_SBA:
 909		return flexrm_sba_write_descs(msg, nhcnt, reqid,
 910					       desc_ptr, toggle,
 911					       start_desc, end_desc);
 912	default:
 913		return ERR_PTR(-ENOTSUPP);
 914	};
 915}
 916
 917/* ====== FlexRM driver helper routines ===== */
 918
 919static void flexrm_write_config_in_seqfile(struct flexrm_mbox *mbox,
 920					   struct seq_file *file)
 921{
 922	int i;
 923	const char *state;
 924	struct flexrm_ring *ring;
 925
 926	seq_printf(file, "%-5s %-9s %-18s %-10s %-18s %-10s\n",
 927		   "Ring#", "State", "BD_Addr", "BD_Size",
 928		   "Cmpl_Addr", "Cmpl_Size");
 929
 930	for (i = 0; i < mbox->num_rings; i++) {
 931		ring = &mbox->rings[i];
 932		if (readl(ring->regs + RING_CONTROL) &
 933		    BIT(CONTROL_ACTIVE_SHIFT))
 934			state = "active";
 935		else
 936			state = "inactive";
 937		seq_printf(file,
 938			   "%-5d %-9s 0x%016llx 0x%08x 0x%016llx 0x%08x\n",
 939			   ring->num, state,
 940			   (unsigned long long)ring->bd_dma_base,
 941			   (u32)RING_BD_SIZE,
 942			   (unsigned long long)ring->cmpl_dma_base,
 943			   (u32)RING_CMPL_SIZE);
 944	}
 945}
 946
 947static void flexrm_write_stats_in_seqfile(struct flexrm_mbox *mbox,
 948					  struct seq_file *file)
 949{
 950	int i;
 951	u32 val, bd_read_offset;
 952	struct flexrm_ring *ring;
 953
 954	seq_printf(file, "%-5s %-10s %-10s %-10s %-11s %-11s\n",
 955		   "Ring#", "BD_Read", "BD_Write",
 956		   "Cmpl_Read", "Submitted", "Completed");
 957
 958	for (i = 0; i < mbox->num_rings; i++) {
 959		ring = &mbox->rings[i];
 960		bd_read_offset = readl_relaxed(ring->regs + RING_BD_READ_PTR);
 961		val = readl_relaxed(ring->regs + RING_BD_START_ADDR);
 962		bd_read_offset *= RING_DESC_SIZE;
 963		bd_read_offset += (u32)(BD_START_ADDR_DECODE(val) -
 964					ring->bd_dma_base);
 965		seq_printf(file, "%-5d 0x%08x 0x%08x 0x%08x %-11d %-11d\n",
 966			   ring->num,
 967			   (u32)bd_read_offset,
 968			   (u32)ring->bd_write_offset,
 969			   (u32)ring->cmpl_read_offset,
 970			   (u32)atomic_read(&ring->msg_send_count),
 971			   (u32)atomic_read(&ring->msg_cmpl_count));
 972	}
 973}
 974
 975static int flexrm_new_request(struct flexrm_ring *ring,
 976				struct brcm_message *batch_msg,
 977				struct brcm_message *msg)
 978{
 979	void *next;
 980	unsigned long flags;
 981	u32 val, count, nhcnt;
 982	u32 read_offset, write_offset;
 983	bool exit_cleanup = false;
 984	int ret = 0, reqid;
 985
 986	/* Do sanity check on message */
 987	if (!flexrm_sanity_check(msg))
 988		return -EIO;
 989	msg->error = 0;
 990
 991	/* If no requests possible then save data pointer and goto done. */
 992	spin_lock_irqsave(&ring->lock, flags);
 993	reqid = bitmap_find_free_region(ring->requests_bmap,
 994					RING_MAX_REQ_COUNT, 0);
 995	spin_unlock_irqrestore(&ring->lock, flags);
 996	if (reqid < 0)
 997		return -ENOSPC;
 998	ring->requests[reqid] = msg;
 999
1000	/* Do DMA mappings for the message */
1001	ret = flexrm_dma_map(ring->mbox->dev, msg);
1002	if (ret < 0) {
1003		ring->requests[reqid] = NULL;
1004		spin_lock_irqsave(&ring->lock, flags);
1005		bitmap_release_region(ring->requests_bmap, reqid, 0);
1006		spin_unlock_irqrestore(&ring->lock, flags);
1007		return ret;
1008	}
1009
1010	/* Determine current HW BD read offset */
1011	read_offset = readl_relaxed(ring->regs + RING_BD_READ_PTR);
1012	val = readl_relaxed(ring->regs + RING_BD_START_ADDR);
1013	read_offset *= RING_DESC_SIZE;
1014	read_offset += (u32)(BD_START_ADDR_DECODE(val) - ring->bd_dma_base);
1015
1016	/*
1017	 * Number required descriptors = number of non-header descriptors +
1018	 *				 number of header descriptors +
1019	 *				 1x null descriptor
1020	 */
1021	nhcnt = flexrm_estimate_nonheader_desc_count(msg);
1022	count = flexrm_estimate_header_desc_count(nhcnt) + nhcnt + 1;
1023
1024	/* Check for available descriptor space. */
1025	write_offset = ring->bd_write_offset;
1026	while (count) {
1027		if (!flexrm_is_next_table_desc(ring->bd_base + write_offset))
1028			count--;
1029		write_offset += RING_DESC_SIZE;
1030		if (write_offset == RING_BD_SIZE)
1031			write_offset = 0x0;
1032		if (write_offset == read_offset)
1033			break;
1034	}
1035	if (count) {
1036		ret = -ENOSPC;
1037		exit_cleanup = true;
1038		goto exit;
1039	}
1040
1041	/* Write descriptors to ring */
1042	next = flexrm_write_descs(msg, nhcnt, reqid,
1043			ring->bd_base + ring->bd_write_offset,
1044			RING_BD_TOGGLE_VALID(ring->bd_write_offset),
1045			ring->bd_base, ring->bd_base + RING_BD_SIZE);
1046	if (IS_ERR(next)) {
1047		ret = PTR_ERR(next);
1048		exit_cleanup = true;
1049		goto exit;
1050	}
1051
1052	/* Save ring BD write offset */
1053	ring->bd_write_offset = (unsigned long)(next - ring->bd_base);
1054
1055	/* Increment number of messages sent */
1056	atomic_inc_return(&ring->msg_send_count);
1057
1058exit:
1059	/* Update error status in message */
1060	msg->error = ret;
1061
1062	/* Cleanup if we failed */
1063	if (exit_cleanup) {
1064		flexrm_dma_unmap(ring->mbox->dev, msg);
1065		ring->requests[reqid] = NULL;
1066		spin_lock_irqsave(&ring->lock, flags);
1067		bitmap_release_region(ring->requests_bmap, reqid, 0);
1068		spin_unlock_irqrestore(&ring->lock, flags);
1069	}
1070
1071	return ret;
1072}
1073
1074static int flexrm_process_completions(struct flexrm_ring *ring)
1075{
1076	u64 desc;
1077	int err, count = 0;
1078	unsigned long flags;
1079	struct brcm_message *msg = NULL;
1080	u32 reqid, cmpl_read_offset, cmpl_write_offset;
1081	struct mbox_chan *chan = &ring->mbox->controller.chans[ring->num];
1082
1083	spin_lock_irqsave(&ring->lock, flags);
1084
1085	/*
1086	 * Get current completion read and write offset
1087	 *
1088	 * Note: We should read completion write pointer at least once
1089	 * after we get a MSI interrupt because HW maintains internal
1090	 * MSI status which will allow next MSI interrupt only after
1091	 * completion write pointer is read.
1092	 */
1093	cmpl_write_offset = readl_relaxed(ring->regs + RING_CMPL_WRITE_PTR);
1094	cmpl_write_offset *= RING_DESC_SIZE;
1095	cmpl_read_offset = ring->cmpl_read_offset;
1096	ring->cmpl_read_offset = cmpl_write_offset;
1097
1098	spin_unlock_irqrestore(&ring->lock, flags);
1099
1100	/* For each completed request notify mailbox clients */
1101	reqid = 0;
1102	while (cmpl_read_offset != cmpl_write_offset) {
1103		/* Dequeue next completion descriptor */
1104		desc = *((u64 *)(ring->cmpl_base + cmpl_read_offset));
1105
1106		/* Next read offset */
1107		cmpl_read_offset += RING_DESC_SIZE;
1108		if (cmpl_read_offset == RING_CMPL_SIZE)
1109			cmpl_read_offset = 0;
1110
1111		/* Decode error from completion descriptor */
1112		err = flexrm_cmpl_desc_to_error(desc);
1113		if (err < 0) {
1114			dev_warn(ring->mbox->dev,
1115			"ring%d got completion desc=0x%lx with error %d\n",
1116			ring->num, (unsigned long)desc, err);
1117		}
1118
1119		/* Determine request id from completion descriptor */
1120		reqid = flexrm_cmpl_desc_to_reqid(desc);
1121
1122		/* Determine message pointer based on reqid */
1123		msg = ring->requests[reqid];
1124		if (!msg) {
1125			dev_warn(ring->mbox->dev,
1126			"ring%d null msg pointer for completion desc=0x%lx\n",
1127			ring->num, (unsigned long)desc);
1128			continue;
1129		}
1130
1131		/* Release reqid for recycling */
1132		ring->requests[reqid] = NULL;
1133		spin_lock_irqsave(&ring->lock, flags);
1134		bitmap_release_region(ring->requests_bmap, reqid, 0);
1135		spin_unlock_irqrestore(&ring->lock, flags);
1136
1137		/* Unmap DMA mappings */
1138		flexrm_dma_unmap(ring->mbox->dev, msg);
1139
1140		/* Give-back message to mailbox client */
1141		msg->error = err;
1142		mbox_chan_received_data(chan, msg);
1143
1144		/* Increment number of completions processed */
1145		atomic_inc_return(&ring->msg_cmpl_count);
1146		count++;
1147	}
1148
1149	return count;
1150}
1151
1152/* ====== FlexRM Debugfs callbacks ====== */
1153
1154static int flexrm_debugfs_conf_show(struct seq_file *file, void *offset)
1155{
1156	struct flexrm_mbox *mbox = dev_get_drvdata(file->private);
 
1157
1158	/* Write config in file */
1159	flexrm_write_config_in_seqfile(mbox, file);
1160
1161	return 0;
1162}
1163
1164static int flexrm_debugfs_stats_show(struct seq_file *file, void *offset)
1165{
1166	struct flexrm_mbox *mbox = dev_get_drvdata(file->private);
 
1167
1168	/* Write stats in file */
1169	flexrm_write_stats_in_seqfile(mbox, file);
1170
1171	return 0;
1172}
1173
1174/* ====== FlexRM interrupt handler ===== */
1175
1176static irqreturn_t flexrm_irq_event(int irq, void *dev_id)
1177{
1178	/* We only have MSI for completions so just wakeup IRQ thread */
1179	/* Ring related errors will be informed via completion descriptors */
1180
1181	return IRQ_WAKE_THREAD;
1182}
1183
1184static irqreturn_t flexrm_irq_thread(int irq, void *dev_id)
1185{
1186	flexrm_process_completions(dev_id);
1187
1188	return IRQ_HANDLED;
1189}
1190
1191/* ====== FlexRM mailbox callbacks ===== */
1192
1193static int flexrm_send_data(struct mbox_chan *chan, void *data)
1194{
1195	int i, rc;
1196	struct flexrm_ring *ring = chan->con_priv;
1197	struct brcm_message *msg = data;
1198
1199	if (msg->type == BRCM_MESSAGE_BATCH) {
1200		for (i = msg->batch.msgs_queued;
1201		     i < msg->batch.msgs_count; i++) {
1202			rc = flexrm_new_request(ring, msg,
1203						 &msg->batch.msgs[i]);
1204			if (rc) {
1205				msg->error = rc;
1206				return rc;
1207			}
1208			msg->batch.msgs_queued++;
1209		}
1210		return 0;
1211	}
1212
1213	return flexrm_new_request(ring, NULL, data);
1214}
1215
1216static bool flexrm_peek_data(struct mbox_chan *chan)
1217{
1218	int cnt = flexrm_process_completions(chan->con_priv);
1219
1220	return (cnt > 0) ? true : false;
1221}
1222
1223static int flexrm_startup(struct mbox_chan *chan)
1224{
1225	u64 d;
1226	u32 val, off;
1227	int ret = 0;
1228	dma_addr_t next_addr;
1229	struct flexrm_ring *ring = chan->con_priv;
1230
1231	/* Allocate BD memory */
1232	ring->bd_base = dma_pool_alloc(ring->mbox->bd_pool,
1233				       GFP_KERNEL, &ring->bd_dma_base);
1234	if (!ring->bd_base) {
1235		dev_err(ring->mbox->dev,
1236			"can't allocate BD memory for ring%d\n",
1237			ring->num);
1238		ret = -ENOMEM;
1239		goto fail;
1240	}
1241
1242	/* Configure next table pointer entries in BD memory */
1243	for (off = 0; off < RING_BD_SIZE; off += RING_DESC_SIZE) {
1244		next_addr = off + RING_DESC_SIZE;
1245		if (next_addr == RING_BD_SIZE)
1246			next_addr = 0;
1247		next_addr += ring->bd_dma_base;
1248		if (RING_BD_ALIGN_CHECK(next_addr))
1249			d = flexrm_next_table_desc(RING_BD_TOGGLE_VALID(off),
1250						    next_addr);
1251		else
1252			d = flexrm_null_desc(RING_BD_TOGGLE_INVALID(off));
1253		flexrm_write_desc(ring->bd_base + off, d);
1254	}
1255
1256	/* Allocate completion memory */
1257	ring->cmpl_base = dma_pool_zalloc(ring->mbox->cmpl_pool,
1258					 GFP_KERNEL, &ring->cmpl_dma_base);
1259	if (!ring->cmpl_base) {
1260		dev_err(ring->mbox->dev,
1261			"can't allocate completion memory for ring%d\n",
1262			ring->num);
1263		ret = -ENOMEM;
1264		goto fail_free_bd_memory;
1265	}
1266
1267	/* Request IRQ */
1268	if (ring->irq == UINT_MAX) {
1269		dev_err(ring->mbox->dev,
1270			"ring%d IRQ not available\n", ring->num);
1271		ret = -ENODEV;
1272		goto fail_free_cmpl_memory;
1273	}
1274	ret = request_threaded_irq(ring->irq,
1275				   flexrm_irq_event,
1276				   flexrm_irq_thread,
1277				   0, dev_name(ring->mbox->dev), ring);
1278	if (ret) {
1279		dev_err(ring->mbox->dev,
1280			"failed to request ring%d IRQ\n", ring->num);
1281		goto fail_free_cmpl_memory;
1282	}
1283	ring->irq_requested = true;
1284
1285	/* Set IRQ affinity hint */
1286	ring->irq_aff_hint = CPU_MASK_NONE;
1287	val = ring->mbox->num_rings;
1288	val = (num_online_cpus() < val) ? val / num_online_cpus() : 1;
1289	cpumask_set_cpu((ring->num / val) % num_online_cpus(),
1290			&ring->irq_aff_hint);
1291	ret = irq_update_affinity_hint(ring->irq, &ring->irq_aff_hint);
1292	if (ret) {
1293		dev_err(ring->mbox->dev,
1294			"failed to set IRQ affinity hint for ring%d\n",
1295			ring->num);
1296		goto fail_free_irq;
1297	}
1298
1299	/* Disable/inactivate ring */
1300	writel_relaxed(0x0, ring->regs + RING_CONTROL);
1301
1302	/* Program BD start address */
1303	val = BD_START_ADDR_VALUE(ring->bd_dma_base);
1304	writel_relaxed(val, ring->regs + RING_BD_START_ADDR);
1305
1306	/* BD write pointer will be same as HW write pointer */
1307	ring->bd_write_offset =
1308			readl_relaxed(ring->regs + RING_BD_WRITE_PTR);
1309	ring->bd_write_offset *= RING_DESC_SIZE;
1310
1311	/* Program completion start address */
1312	val = CMPL_START_ADDR_VALUE(ring->cmpl_dma_base);
1313	writel_relaxed(val, ring->regs + RING_CMPL_START_ADDR);
1314
1315	/* Completion read pointer will be same as HW write pointer */
1316	ring->cmpl_read_offset =
1317			readl_relaxed(ring->regs + RING_CMPL_WRITE_PTR);
1318	ring->cmpl_read_offset *= RING_DESC_SIZE;
1319
1320	/* Read ring Tx, Rx, and Outstanding counts to clear */
1321	readl_relaxed(ring->regs + RING_NUM_REQ_RECV_LS);
1322	readl_relaxed(ring->regs + RING_NUM_REQ_RECV_MS);
1323	readl_relaxed(ring->regs + RING_NUM_REQ_TRANS_LS);
1324	readl_relaxed(ring->regs + RING_NUM_REQ_TRANS_MS);
1325	readl_relaxed(ring->regs + RING_NUM_REQ_OUTSTAND);
1326
1327	/* Configure RING_MSI_CONTROL */
1328	val = 0;
1329	val |= (ring->msi_timer_val << MSI_TIMER_VAL_SHIFT);
1330	val |= BIT(MSI_ENABLE_SHIFT);
1331	val |= (ring->msi_count_threshold & MSI_COUNT_MASK) << MSI_COUNT_SHIFT;
1332	writel_relaxed(val, ring->regs + RING_MSI_CONTROL);
1333
1334	/* Enable/activate ring */
1335	val = BIT(CONTROL_ACTIVE_SHIFT);
1336	writel_relaxed(val, ring->regs + RING_CONTROL);
1337
1338	/* Reset stats to zero */
1339	atomic_set(&ring->msg_send_count, 0);
1340	atomic_set(&ring->msg_cmpl_count, 0);
1341
1342	return 0;
1343
1344fail_free_irq:
1345	free_irq(ring->irq, ring);
1346	ring->irq_requested = false;
1347fail_free_cmpl_memory:
1348	dma_pool_free(ring->mbox->cmpl_pool,
1349		      ring->cmpl_base, ring->cmpl_dma_base);
1350	ring->cmpl_base = NULL;
1351fail_free_bd_memory:
1352	dma_pool_free(ring->mbox->bd_pool,
1353		      ring->bd_base, ring->bd_dma_base);
1354	ring->bd_base = NULL;
1355fail:
1356	return ret;
1357}
1358
1359static void flexrm_shutdown(struct mbox_chan *chan)
1360{
1361	u32 reqid;
1362	unsigned int timeout;
1363	struct brcm_message *msg;
1364	struct flexrm_ring *ring = chan->con_priv;
1365
1366	/* Disable/inactivate ring */
1367	writel_relaxed(0x0, ring->regs + RING_CONTROL);
1368
1369	/* Set ring flush state */
1370	timeout = 1000; /* timeout of 1s */
1371	writel_relaxed(BIT(CONTROL_FLUSH_SHIFT),
1372			ring->regs + RING_CONTROL);
1373	do {
1374		if (readl_relaxed(ring->regs + RING_FLUSH_DONE) &
1375		    FLUSH_DONE_MASK)
1376			break;
1377		mdelay(1);
1378	} while (--timeout);
1379	if (!timeout)
1380		dev_err(ring->mbox->dev,
1381			"setting ring%d flush state timedout\n", ring->num);
1382
1383	/* Clear ring flush state */
1384	timeout = 1000; /* timeout of 1s */
1385	writel_relaxed(0x0, ring->regs + RING_CONTROL);
1386	do {
1387		if (!(readl_relaxed(ring->regs + RING_FLUSH_DONE) &
1388		      FLUSH_DONE_MASK))
1389			break;
1390		mdelay(1);
1391	} while (--timeout);
1392	if (!timeout)
1393		dev_err(ring->mbox->dev,
1394			"clearing ring%d flush state timedout\n", ring->num);
1395
1396	/* Abort all in-flight requests */
1397	for (reqid = 0; reqid < RING_MAX_REQ_COUNT; reqid++) {
1398		msg = ring->requests[reqid];
1399		if (!msg)
1400			continue;
1401
1402		/* Release reqid for recycling */
1403		ring->requests[reqid] = NULL;
1404
1405		/* Unmap DMA mappings */
1406		flexrm_dma_unmap(ring->mbox->dev, msg);
1407
1408		/* Give-back message to mailbox client */
1409		msg->error = -EIO;
1410		mbox_chan_received_data(chan, msg);
1411	}
1412
1413	/* Clear requests bitmap */
1414	bitmap_zero(ring->requests_bmap, RING_MAX_REQ_COUNT);
1415
1416	/* Release IRQ */
1417	if (ring->irq_requested) {
1418		irq_update_affinity_hint(ring->irq, NULL);
1419		free_irq(ring->irq, ring);
1420		ring->irq_requested = false;
1421	}
1422
1423	/* Free-up completion descriptor ring */
1424	if (ring->cmpl_base) {
1425		dma_pool_free(ring->mbox->cmpl_pool,
1426			      ring->cmpl_base, ring->cmpl_dma_base);
1427		ring->cmpl_base = NULL;
1428	}
1429
1430	/* Free-up BD descriptor ring */
1431	if (ring->bd_base) {
1432		dma_pool_free(ring->mbox->bd_pool,
1433			      ring->bd_base, ring->bd_dma_base);
1434		ring->bd_base = NULL;
1435	}
1436}
1437
1438static const struct mbox_chan_ops flexrm_mbox_chan_ops = {
1439	.send_data	= flexrm_send_data,
1440	.startup	= flexrm_startup,
1441	.shutdown	= flexrm_shutdown,
1442	.peek_data	= flexrm_peek_data,
1443};
1444
1445static struct mbox_chan *flexrm_mbox_of_xlate(struct mbox_controller *cntlr,
1446					const struct of_phandle_args *pa)
1447{
1448	struct mbox_chan *chan;
1449	struct flexrm_ring *ring;
1450
1451	if (pa->args_count < 3)
1452		return ERR_PTR(-EINVAL);
1453
1454	if (pa->args[0] >= cntlr->num_chans)
1455		return ERR_PTR(-ENOENT);
1456
1457	if (pa->args[1] > MSI_COUNT_MASK)
1458		return ERR_PTR(-EINVAL);
1459
1460	if (pa->args[2] > MSI_TIMER_VAL_MASK)
1461		return ERR_PTR(-EINVAL);
1462
1463	chan = &cntlr->chans[pa->args[0]];
1464	ring = chan->con_priv;
1465	ring->msi_count_threshold = pa->args[1];
1466	ring->msi_timer_val = pa->args[2];
1467
1468	return chan;
1469}
1470
1471/* ====== FlexRM platform driver ===== */
1472
1473static void flexrm_mbox_msi_write(struct msi_desc *desc, struct msi_msg *msg)
1474{
1475	struct device *dev = msi_desc_to_dev(desc);
1476	struct flexrm_mbox *mbox = dev_get_drvdata(dev);
1477	struct flexrm_ring *ring = &mbox->rings[desc->msi_index];
1478
1479	/* Configure per-Ring MSI registers */
1480	writel_relaxed(msg->address_lo, ring->regs + RING_MSI_ADDR_LS);
1481	writel_relaxed(msg->address_hi, ring->regs + RING_MSI_ADDR_MS);
1482	writel_relaxed(msg->data, ring->regs + RING_MSI_DATA_VALUE);
1483}
1484
1485static int flexrm_mbox_probe(struct platform_device *pdev)
1486{
1487	int index, ret = 0;
1488	void __iomem *regs;
1489	void __iomem *regs_end;
 
1490	struct resource *iomem;
1491	struct flexrm_ring *ring;
1492	struct flexrm_mbox *mbox;
1493	struct device *dev = &pdev->dev;
1494
1495	/* Allocate driver mailbox struct */
1496	mbox = devm_kzalloc(dev, sizeof(*mbox), GFP_KERNEL);
1497	if (!mbox) {
1498		ret = -ENOMEM;
1499		goto fail;
1500	}
1501	mbox->dev = dev;
1502	platform_set_drvdata(pdev, mbox);
1503
1504	/* Get resource for registers and map registers of all rings */
1505	mbox->regs = devm_platform_get_and_ioremap_resource(pdev, 0, &iomem);
1506	if (!iomem || (resource_size(iomem) < RING_REGS_SIZE)) {
1507		ret = -ENODEV;
1508		goto fail;
1509	} else if (IS_ERR(mbox->regs)) {
 
 
 
 
1510		ret = PTR_ERR(mbox->regs);
 
1511		goto fail;
1512	}
1513	regs_end = mbox->regs + resource_size(iomem);
1514
1515	/* Scan and count available rings */
1516	mbox->num_rings = 0;
1517	for (regs = mbox->regs; regs < regs_end; regs += RING_REGS_SIZE) {
1518		if (readl_relaxed(regs + RING_VER) == RING_VER_MAGIC)
1519			mbox->num_rings++;
1520	}
1521	if (!mbox->num_rings) {
1522		ret = -ENODEV;
1523		goto fail;
1524	}
1525
1526	/* Allocate driver ring structs */
1527	ring = devm_kcalloc(dev, mbox->num_rings, sizeof(*ring), GFP_KERNEL);
1528	if (!ring) {
1529		ret = -ENOMEM;
1530		goto fail;
1531	}
1532	mbox->rings = ring;
1533
1534	/* Initialize members of driver ring structs */
1535	regs = mbox->regs;
1536	for (index = 0; index < mbox->num_rings; index++) {
1537		ring = &mbox->rings[index];
1538		ring->num = index;
1539		ring->mbox = mbox;
1540		while ((regs < regs_end) &&
1541		       (readl_relaxed(regs + RING_VER) != RING_VER_MAGIC))
1542			regs += RING_REGS_SIZE;
1543		if (regs_end <= regs) {
1544			ret = -ENODEV;
1545			goto fail;
1546		}
1547		ring->regs = regs;
1548		regs += RING_REGS_SIZE;
1549		ring->irq = UINT_MAX;
1550		ring->irq_requested = false;
1551		ring->msi_timer_val = MSI_TIMER_VAL_MASK;
1552		ring->msi_count_threshold = 0x1;
1553		memset(ring->requests, 0, sizeof(ring->requests));
1554		ring->bd_base = NULL;
1555		ring->bd_dma_base = 0;
1556		ring->cmpl_base = NULL;
1557		ring->cmpl_dma_base = 0;
1558		atomic_set(&ring->msg_send_count, 0);
1559		atomic_set(&ring->msg_cmpl_count, 0);
1560		spin_lock_init(&ring->lock);
1561		bitmap_zero(ring->requests_bmap, RING_MAX_REQ_COUNT);
1562		ring->cmpl_read_offset = 0;
1563	}
1564
1565	/* FlexRM is capable of 40-bit physical addresses only */
1566	ret = dma_set_mask_and_coherent(dev, DMA_BIT_MASK(40));
1567	if (ret) {
1568		ret = dma_set_mask_and_coherent(dev, DMA_BIT_MASK(32));
1569		if (ret)
1570			goto fail;
1571	}
1572
1573	/* Create DMA pool for ring BD memory */
1574	mbox->bd_pool = dma_pool_create("bd", dev, RING_BD_SIZE,
1575					1 << RING_BD_ALIGN_ORDER, 0);
1576	if (!mbox->bd_pool) {
1577		ret = -ENOMEM;
1578		goto fail;
1579	}
1580
1581	/* Create DMA pool for ring completion memory */
1582	mbox->cmpl_pool = dma_pool_create("cmpl", dev, RING_CMPL_SIZE,
1583					  1 << RING_CMPL_ALIGN_ORDER, 0);
1584	if (!mbox->cmpl_pool) {
1585		ret = -ENOMEM;
1586		goto fail_destroy_bd_pool;
1587	}
1588
1589	/* Allocate platform MSIs for each ring */
1590	ret = platform_msi_domain_alloc_irqs(dev, mbox->num_rings,
1591						flexrm_mbox_msi_write);
1592	if (ret)
1593		goto fail_destroy_cmpl_pool;
1594
1595	/* Save alloced IRQ numbers for each ring */
1596	for (index = 0; index < mbox->num_rings; index++)
1597		mbox->rings[index].irq = msi_get_virq(dev, index);
 
 
1598
1599	/* Check availability of debugfs */
1600	if (!debugfs_initialized())
1601		goto skip_debugfs;
1602
1603	/* Create debugfs root entry */
1604	mbox->root = debugfs_create_dir(dev_name(mbox->dev), NULL);
 
 
 
 
1605
1606	/* Create debugfs config entry */
1607	debugfs_create_devm_seqfile(mbox->dev, "config", mbox->root,
1608				    flexrm_debugfs_conf_show);
 
 
 
 
 
1609
1610	/* Create debugfs stats entry */
1611	debugfs_create_devm_seqfile(mbox->dev, "stats", mbox->root,
1612				    flexrm_debugfs_stats_show);
1613
 
 
 
 
1614skip_debugfs:
1615
1616	/* Initialize mailbox controller */
1617	mbox->controller.txdone_irq = false;
1618	mbox->controller.txdone_poll = false;
1619	mbox->controller.ops = &flexrm_mbox_chan_ops;
1620	mbox->controller.dev = dev;
1621	mbox->controller.num_chans = mbox->num_rings;
1622	mbox->controller.of_xlate = flexrm_mbox_of_xlate;
1623	mbox->controller.chans = devm_kcalloc(dev, mbox->num_rings,
1624				sizeof(*mbox->controller.chans), GFP_KERNEL);
1625	if (!mbox->controller.chans) {
1626		ret = -ENOMEM;
1627		goto fail_free_debugfs_root;
1628	}
1629	for (index = 0; index < mbox->num_rings; index++)
1630		mbox->controller.chans[index].con_priv = &mbox->rings[index];
1631
1632	/* Register mailbox controller */
1633	ret = devm_mbox_controller_register(dev, &mbox->controller);
1634	if (ret)
1635		goto fail_free_debugfs_root;
1636
1637	dev_info(dev, "registered flexrm mailbox with %d channels\n",
1638			mbox->controller.num_chans);
1639
1640	return 0;
1641
1642fail_free_debugfs_root:
1643	debugfs_remove_recursive(mbox->root);
 
1644	platform_msi_domain_free_irqs(dev);
1645fail_destroy_cmpl_pool:
1646	dma_pool_destroy(mbox->cmpl_pool);
1647fail_destroy_bd_pool:
1648	dma_pool_destroy(mbox->bd_pool);
1649fail:
1650	return ret;
1651}
1652
1653static void flexrm_mbox_remove(struct platform_device *pdev)
1654{
1655	struct device *dev = &pdev->dev;
1656	struct flexrm_mbox *mbox = platform_get_drvdata(pdev);
1657
 
 
1658	debugfs_remove_recursive(mbox->root);
1659
1660	platform_msi_domain_free_irqs(dev);
1661
1662	dma_pool_destroy(mbox->cmpl_pool);
1663	dma_pool_destroy(mbox->bd_pool);
 
 
1664}
1665
1666static const struct of_device_id flexrm_mbox_of_match[] = {
1667	{ .compatible = "brcm,iproc-flexrm-mbox", },
1668	{},
1669};
1670MODULE_DEVICE_TABLE(of, flexrm_mbox_of_match);
1671
1672static struct platform_driver flexrm_mbox_driver = {
1673	.driver = {
1674		.name = "brcm-flexrm-mbox",
1675		.of_match_table = flexrm_mbox_of_match,
1676	},
1677	.probe		= flexrm_mbox_probe,
1678	.remove_new	= flexrm_mbox_remove,
1679};
1680module_platform_driver(flexrm_mbox_driver);
1681
1682MODULE_AUTHOR("Anup Patel <anup.patel@broadcom.com>");
1683MODULE_DESCRIPTION("Broadcom FlexRM mailbox driver");
1684MODULE_LICENSE("GPL v2");
v4.17
   1/*
   2 * Copyright (C) 2017 Broadcom
   3 *
   4 * This program is free software; you can redistribute it and/or
   5 * modify it under the terms of the GNU General Public License as
   6 * published by the Free Software Foundation version 2.
   7 *
   8 * This program is distributed "as is" WITHOUT ANY WARRANTY of any
   9 * kind, whether express or implied; without even the implied warranty
  10 * of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  11 * GNU General Public License for more details.
  12 */
  13
  14/*
  15 * Broadcom FlexRM Mailbox Driver
  16 *
  17 * Each Broadcom FlexSparx4 offload engine is implemented as an
  18 * extension to Broadcom FlexRM ring manager. The FlexRM ring
  19 * manager provides a set of rings which can be used to submit
  20 * work to a FlexSparx4 offload engine.
  21 *
  22 * This driver creates a mailbox controller using a set of FlexRM
  23 * rings where each mailbox channel represents a separate FlexRM ring.
  24 */
  25
  26#include <asm/barrier.h>
  27#include <asm/byteorder.h>
  28#include <linux/atomic.h>
  29#include <linux/bitmap.h>
  30#include <linux/debugfs.h>
  31#include <linux/delay.h>
  32#include <linux/device.h>
  33#include <linux/dma-mapping.h>
  34#include <linux/dmapool.h>
  35#include <linux/err.h>
  36#include <linux/interrupt.h>
  37#include <linux/kernel.h>
  38#include <linux/mailbox_controller.h>
  39#include <linux/mailbox_client.h>
  40#include <linux/mailbox/brcm-message.h>
  41#include <linux/module.h>
  42#include <linux/msi.h>
  43#include <linux/of_address.h>
  44#include <linux/of_irq.h>
  45#include <linux/platform_device.h>
  46#include <linux/spinlock.h>
  47
  48/* ====== FlexRM register defines ===== */
  49
  50/* FlexRM configuration */
  51#define RING_REGS_SIZE					0x10000
  52#define RING_DESC_SIZE					8
  53#define RING_DESC_INDEX(offset)				\
  54			((offset) / RING_DESC_SIZE)
  55#define RING_DESC_OFFSET(index)				\
  56			((index) * RING_DESC_SIZE)
  57#define RING_MAX_REQ_COUNT				1024
  58#define RING_BD_ALIGN_ORDER				12
  59#define RING_BD_ALIGN_CHECK(addr)			\
  60			(!((addr) & ((0x1 << RING_BD_ALIGN_ORDER) - 1)))
  61#define RING_BD_TOGGLE_INVALID(offset)			\
  62			(((offset) >> RING_BD_ALIGN_ORDER) & 0x1)
  63#define RING_BD_TOGGLE_VALID(offset)			\
  64			(!RING_BD_TOGGLE_INVALID(offset))
  65#define RING_BD_DESC_PER_REQ				32
  66#define RING_BD_DESC_COUNT				\
  67			(RING_MAX_REQ_COUNT * RING_BD_DESC_PER_REQ)
  68#define RING_BD_SIZE					\
  69			(RING_BD_DESC_COUNT * RING_DESC_SIZE)
  70#define RING_CMPL_ALIGN_ORDER				13
  71#define RING_CMPL_DESC_COUNT				RING_MAX_REQ_COUNT
  72#define RING_CMPL_SIZE					\
  73			(RING_CMPL_DESC_COUNT * RING_DESC_SIZE)
  74#define RING_VER_MAGIC					0x76303031
  75
  76/* Per-Ring register offsets */
  77#define RING_VER					0x000
  78#define RING_BD_START_ADDR				0x004
  79#define RING_BD_READ_PTR				0x008
  80#define RING_BD_WRITE_PTR				0x00c
  81#define RING_BD_READ_PTR_DDR_LS				0x010
  82#define RING_BD_READ_PTR_DDR_MS				0x014
  83#define RING_CMPL_START_ADDR				0x018
  84#define RING_CMPL_WRITE_PTR				0x01c
  85#define RING_NUM_REQ_RECV_LS				0x020
  86#define RING_NUM_REQ_RECV_MS				0x024
  87#define RING_NUM_REQ_TRANS_LS				0x028
  88#define RING_NUM_REQ_TRANS_MS				0x02c
  89#define RING_NUM_REQ_OUTSTAND				0x030
  90#define RING_CONTROL					0x034
  91#define RING_FLUSH_DONE					0x038
  92#define RING_MSI_ADDR_LS				0x03c
  93#define RING_MSI_ADDR_MS				0x040
  94#define RING_MSI_CONTROL				0x048
  95#define RING_BD_READ_PTR_DDR_CONTROL			0x04c
  96#define RING_MSI_DATA_VALUE				0x064
  97
  98/* Register RING_BD_START_ADDR fields */
  99#define BD_LAST_UPDATE_HW_SHIFT				28
 100#define BD_LAST_UPDATE_HW_MASK				0x1
 101#define BD_START_ADDR_VALUE(pa)				\
 102	((u32)((((dma_addr_t)(pa)) >> RING_BD_ALIGN_ORDER) & 0x0fffffff))
 103#define BD_START_ADDR_DECODE(val)			\
 104	((dma_addr_t)((val) & 0x0fffffff) << RING_BD_ALIGN_ORDER)
 105
 106/* Register RING_CMPL_START_ADDR fields */
 107#define CMPL_START_ADDR_VALUE(pa)			\
 108	((u32)((((u64)(pa)) >> RING_CMPL_ALIGN_ORDER) & 0x07ffffff))
 109
 110/* Register RING_CONTROL fields */
 111#define CONTROL_MASK_DISABLE_CONTROL			12
 112#define CONTROL_FLUSH_SHIFT				5
 113#define CONTROL_ACTIVE_SHIFT				4
 114#define CONTROL_RATE_ADAPT_MASK				0xf
 115#define CONTROL_RATE_DYNAMIC				0x0
 116#define CONTROL_RATE_FAST				0x8
 117#define CONTROL_RATE_MEDIUM				0x9
 118#define CONTROL_RATE_SLOW				0xa
 119#define CONTROL_RATE_IDLE				0xb
 120
 121/* Register RING_FLUSH_DONE fields */
 122#define FLUSH_DONE_MASK					0x1
 123
 124/* Register RING_MSI_CONTROL fields */
 125#define MSI_TIMER_VAL_SHIFT				16
 126#define MSI_TIMER_VAL_MASK				0xffff
 127#define MSI_ENABLE_SHIFT				15
 128#define MSI_ENABLE_MASK					0x1
 129#define MSI_COUNT_SHIFT					0
 130#define MSI_COUNT_MASK					0x3ff
 131
 132/* Register RING_BD_READ_PTR_DDR_CONTROL fields */
 133#define BD_READ_PTR_DDR_TIMER_VAL_SHIFT			16
 134#define BD_READ_PTR_DDR_TIMER_VAL_MASK			0xffff
 135#define BD_READ_PTR_DDR_ENABLE_SHIFT			15
 136#define BD_READ_PTR_DDR_ENABLE_MASK			0x1
 137
 138/* ====== FlexRM ring descriptor defines ===== */
 139
 140/* Completion descriptor format */
 141#define CMPL_OPAQUE_SHIFT			0
 142#define CMPL_OPAQUE_MASK			0xffff
 143#define CMPL_ENGINE_STATUS_SHIFT		16
 144#define CMPL_ENGINE_STATUS_MASK			0xffff
 145#define CMPL_DME_STATUS_SHIFT			32
 146#define CMPL_DME_STATUS_MASK			0xffff
 147#define CMPL_RM_STATUS_SHIFT			48
 148#define CMPL_RM_STATUS_MASK			0xffff
 149
 150/* Completion DME status code */
 151#define DME_STATUS_MEM_COR_ERR			BIT(0)
 152#define DME_STATUS_MEM_UCOR_ERR			BIT(1)
 153#define DME_STATUS_FIFO_UNDERFLOW		BIT(2)
 154#define DME_STATUS_FIFO_OVERFLOW		BIT(3)
 155#define DME_STATUS_RRESP_ERR			BIT(4)
 156#define DME_STATUS_BRESP_ERR			BIT(5)
 157#define DME_STATUS_ERROR_MASK			(DME_STATUS_MEM_COR_ERR | \
 158						 DME_STATUS_MEM_UCOR_ERR | \
 159						 DME_STATUS_FIFO_UNDERFLOW | \
 160						 DME_STATUS_FIFO_OVERFLOW | \
 161						 DME_STATUS_RRESP_ERR | \
 162						 DME_STATUS_BRESP_ERR)
 163
 164/* Completion RM status code */
 165#define RM_STATUS_CODE_SHIFT			0
 166#define RM_STATUS_CODE_MASK			0x3ff
 167#define RM_STATUS_CODE_GOOD			0x0
 168#define RM_STATUS_CODE_AE_TIMEOUT		0x3ff
 169
 170/* General descriptor format */
 171#define DESC_TYPE_SHIFT				60
 172#define DESC_TYPE_MASK				0xf
 173#define DESC_PAYLOAD_SHIFT			0
 174#define DESC_PAYLOAD_MASK			0x0fffffffffffffff
 175
 176/* Null descriptor format  */
 177#define NULL_TYPE				0
 178#define NULL_TOGGLE_SHIFT			58
 179#define NULL_TOGGLE_MASK			0x1
 180
 181/* Header descriptor format */
 182#define HEADER_TYPE				1
 183#define HEADER_TOGGLE_SHIFT			58
 184#define HEADER_TOGGLE_MASK			0x1
 185#define HEADER_ENDPKT_SHIFT			57
 186#define HEADER_ENDPKT_MASK			0x1
 187#define HEADER_STARTPKT_SHIFT			56
 188#define HEADER_STARTPKT_MASK			0x1
 189#define HEADER_BDCOUNT_SHIFT			36
 190#define HEADER_BDCOUNT_MASK			0x1f
 191#define HEADER_BDCOUNT_MAX			HEADER_BDCOUNT_MASK
 192#define HEADER_FLAGS_SHIFT			16
 193#define HEADER_FLAGS_MASK			0xffff
 194#define HEADER_OPAQUE_SHIFT			0
 195#define HEADER_OPAQUE_MASK			0xffff
 196
 197/* Source (SRC) descriptor format */
 198#define SRC_TYPE				2
 199#define SRC_LENGTH_SHIFT			44
 200#define SRC_LENGTH_MASK				0xffff
 201#define SRC_ADDR_SHIFT				0
 202#define SRC_ADDR_MASK				0x00000fffffffffff
 203
 204/* Destination (DST) descriptor format */
 205#define DST_TYPE				3
 206#define DST_LENGTH_SHIFT			44
 207#define DST_LENGTH_MASK				0xffff
 208#define DST_ADDR_SHIFT				0
 209#define DST_ADDR_MASK				0x00000fffffffffff
 210
 211/* Immediate (IMM) descriptor format */
 212#define IMM_TYPE				4
 213#define IMM_DATA_SHIFT				0
 214#define IMM_DATA_MASK				0x0fffffffffffffff
 215
 216/* Next pointer (NPTR) descriptor format */
 217#define NPTR_TYPE				5
 218#define NPTR_TOGGLE_SHIFT			58
 219#define NPTR_TOGGLE_MASK			0x1
 220#define NPTR_ADDR_SHIFT				0
 221#define NPTR_ADDR_MASK				0x00000fffffffffff
 222
 223/* Mega source (MSRC) descriptor format */
 224#define MSRC_TYPE				6
 225#define MSRC_LENGTH_SHIFT			44
 226#define MSRC_LENGTH_MASK			0xffff
 227#define MSRC_ADDR_SHIFT				0
 228#define MSRC_ADDR_MASK				0x00000fffffffffff
 229
 230/* Mega destination (MDST) descriptor format */
 231#define MDST_TYPE				7
 232#define MDST_LENGTH_SHIFT			44
 233#define MDST_LENGTH_MASK			0xffff
 234#define MDST_ADDR_SHIFT				0
 235#define MDST_ADDR_MASK				0x00000fffffffffff
 236
 237/* Source with tlast (SRCT) descriptor format */
 238#define SRCT_TYPE				8
 239#define SRCT_LENGTH_SHIFT			44
 240#define SRCT_LENGTH_MASK			0xffff
 241#define SRCT_ADDR_SHIFT				0
 242#define SRCT_ADDR_MASK				0x00000fffffffffff
 243
 244/* Destination with tlast (DSTT) descriptor format */
 245#define DSTT_TYPE				9
 246#define DSTT_LENGTH_SHIFT			44
 247#define DSTT_LENGTH_MASK			0xffff
 248#define DSTT_ADDR_SHIFT				0
 249#define DSTT_ADDR_MASK				0x00000fffffffffff
 250
 251/* Immediate with tlast (IMMT) descriptor format */
 252#define IMMT_TYPE				10
 253#define IMMT_DATA_SHIFT				0
 254#define IMMT_DATA_MASK				0x0fffffffffffffff
 255
 256/* Descriptor helper macros */
 257#define DESC_DEC(_d, _s, _m)			(((_d) >> (_s)) & (_m))
 258#define DESC_ENC(_d, _v, _s, _m)		\
 259			do { \
 260				(_d) &= ~((u64)(_m) << (_s)); \
 261				(_d) |= (((u64)(_v) & (_m)) << (_s)); \
 262			} while (0)
 263
 264/* ====== FlexRM data structures ===== */
 265
 266struct flexrm_ring {
 267	/* Unprotected members */
 268	int num;
 269	struct flexrm_mbox *mbox;
 270	void __iomem *regs;
 271	bool irq_requested;
 272	unsigned int irq;
 273	cpumask_t irq_aff_hint;
 274	unsigned int msi_timer_val;
 275	unsigned int msi_count_threshold;
 276	struct brcm_message *requests[RING_MAX_REQ_COUNT];
 277	void *bd_base;
 278	dma_addr_t bd_dma_base;
 279	u32 bd_write_offset;
 280	void *cmpl_base;
 281	dma_addr_t cmpl_dma_base;
 282	/* Atomic stats */
 283	atomic_t msg_send_count;
 284	atomic_t msg_cmpl_count;
 285	/* Protected members */
 286	spinlock_t lock;
 287	DECLARE_BITMAP(requests_bmap, RING_MAX_REQ_COUNT);
 288	u32 cmpl_read_offset;
 289};
 290
 291struct flexrm_mbox {
 292	struct device *dev;
 293	void __iomem *regs;
 294	u32 num_rings;
 295	struct flexrm_ring *rings;
 296	struct dma_pool *bd_pool;
 297	struct dma_pool *cmpl_pool;
 298	struct dentry *root;
 299	struct dentry *config;
 300	struct dentry *stats;
 301	struct mbox_controller controller;
 302};
 303
 304/* ====== FlexRM ring descriptor helper routines ===== */
 305
 306static u64 flexrm_read_desc(void *desc_ptr)
 307{
 308	return le64_to_cpu(*((u64 *)desc_ptr));
 309}
 310
 311static void flexrm_write_desc(void *desc_ptr, u64 desc)
 312{
 313	*((u64 *)desc_ptr) = cpu_to_le64(desc);
 314}
 315
 316static u32 flexrm_cmpl_desc_to_reqid(u64 cmpl_desc)
 317{
 318	return (u32)(cmpl_desc & CMPL_OPAQUE_MASK);
 319}
 320
 321static int flexrm_cmpl_desc_to_error(u64 cmpl_desc)
 322{
 323	u32 status;
 324
 325	status = DESC_DEC(cmpl_desc, CMPL_DME_STATUS_SHIFT,
 326			  CMPL_DME_STATUS_MASK);
 327	if (status & DME_STATUS_ERROR_MASK)
 328		return -EIO;
 329
 330	status = DESC_DEC(cmpl_desc, CMPL_RM_STATUS_SHIFT,
 331			  CMPL_RM_STATUS_MASK);
 332	status &= RM_STATUS_CODE_MASK;
 333	if (status == RM_STATUS_CODE_AE_TIMEOUT)
 334		return -ETIMEDOUT;
 335
 336	return 0;
 337}
 338
 339static bool flexrm_is_next_table_desc(void *desc_ptr)
 340{
 341	u64 desc = flexrm_read_desc(desc_ptr);
 342	u32 type = DESC_DEC(desc, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 343
 344	return (type == NPTR_TYPE) ? true : false;
 345}
 346
 347static u64 flexrm_next_table_desc(u32 toggle, dma_addr_t next_addr)
 348{
 349	u64 desc = 0;
 350
 351	DESC_ENC(desc, NPTR_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 352	DESC_ENC(desc, toggle, NPTR_TOGGLE_SHIFT, NPTR_TOGGLE_MASK);
 353	DESC_ENC(desc, next_addr, NPTR_ADDR_SHIFT, NPTR_ADDR_MASK);
 354
 355	return desc;
 356}
 357
 358static u64 flexrm_null_desc(u32 toggle)
 359{
 360	u64 desc = 0;
 361
 362	DESC_ENC(desc, NULL_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 363	DESC_ENC(desc, toggle, NULL_TOGGLE_SHIFT, NULL_TOGGLE_MASK);
 364
 365	return desc;
 366}
 367
 368static u32 flexrm_estimate_header_desc_count(u32 nhcnt)
 369{
 370	u32 hcnt = nhcnt / HEADER_BDCOUNT_MAX;
 371
 372	if (!(nhcnt % HEADER_BDCOUNT_MAX))
 373		hcnt += 1;
 374
 375	return hcnt;
 376}
 377
 378static void flexrm_flip_header_toogle(void *desc_ptr)
 379{
 380	u64 desc = flexrm_read_desc(desc_ptr);
 381
 382	if (desc & ((u64)0x1 << HEADER_TOGGLE_SHIFT))
 383		desc &= ~((u64)0x1 << HEADER_TOGGLE_SHIFT);
 384	else
 385		desc |= ((u64)0x1 << HEADER_TOGGLE_SHIFT);
 386
 387	flexrm_write_desc(desc_ptr, desc);
 388}
 389
 390static u64 flexrm_header_desc(u32 toggle, u32 startpkt, u32 endpkt,
 391			       u32 bdcount, u32 flags, u32 opaque)
 392{
 393	u64 desc = 0;
 394
 395	DESC_ENC(desc, HEADER_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 396	DESC_ENC(desc, toggle, HEADER_TOGGLE_SHIFT, HEADER_TOGGLE_MASK);
 397	DESC_ENC(desc, startpkt, HEADER_STARTPKT_SHIFT, HEADER_STARTPKT_MASK);
 398	DESC_ENC(desc, endpkt, HEADER_ENDPKT_SHIFT, HEADER_ENDPKT_MASK);
 399	DESC_ENC(desc, bdcount, HEADER_BDCOUNT_SHIFT, HEADER_BDCOUNT_MASK);
 400	DESC_ENC(desc, flags, HEADER_FLAGS_SHIFT, HEADER_FLAGS_MASK);
 401	DESC_ENC(desc, opaque, HEADER_OPAQUE_SHIFT, HEADER_OPAQUE_MASK);
 402
 403	return desc;
 404}
 405
 406static void flexrm_enqueue_desc(u32 nhpos, u32 nhcnt, u32 reqid,
 407				 u64 desc, void **desc_ptr, u32 *toggle,
 408				 void *start_desc, void *end_desc)
 409{
 410	u64 d;
 411	u32 nhavail, _toggle, _startpkt, _endpkt, _bdcount;
 412
 413	/* Sanity check */
 414	if (nhcnt <= nhpos)
 415		return;
 416
 417	/*
 418	 * Each request or packet start with a HEADER descriptor followed
 419	 * by one or more non-HEADER descriptors (SRC, SRCT, MSRC, DST,
 420	 * DSTT, MDST, IMM, and IMMT). The number of non-HEADER descriptors
 421	 * following a HEADER descriptor is represented by BDCOUNT field
 422	 * of HEADER descriptor. The max value of BDCOUNT field is 31 which
 423	 * means we can only have 31 non-HEADER descriptors following one
 424	 * HEADER descriptor.
 425	 *
 426	 * In general use, number of non-HEADER descriptors can easily go
 427	 * beyond 31. To tackle this situation, we have packet (or request)
 428	 * extenstion bits (STARTPKT and ENDPKT) in the HEADER descriptor.
 429	 *
 430	 * To use packet extension, the first HEADER descriptor of request
 431	 * (or packet) will have STARTPKT=1 and ENDPKT=0. The intermediate
 432	 * HEADER descriptors will have STARTPKT=0 and ENDPKT=0. The last
 433	 * HEADER descriptor will have STARTPKT=0 and ENDPKT=1. Also, the
 434	 * TOGGLE bit of the first HEADER will be set to invalid state to
 435	 * ensure that FlexRM does not start fetching descriptors till all
 436	 * descriptors are enqueued. The user of this function will flip
 437	 * the TOGGLE bit of first HEADER after all descriptors are
 438	 * enqueued.
 439	 */
 440
 441	if ((nhpos % HEADER_BDCOUNT_MAX == 0) && (nhcnt - nhpos)) {
 442		/* Prepare the header descriptor */
 443		nhavail = (nhcnt - nhpos);
 444		_toggle = (nhpos == 0) ? !(*toggle) : (*toggle);
 445		_startpkt = (nhpos == 0) ? 0x1 : 0x0;
 446		_endpkt = (nhavail <= HEADER_BDCOUNT_MAX) ? 0x1 : 0x0;
 447		_bdcount = (nhavail <= HEADER_BDCOUNT_MAX) ?
 448				nhavail : HEADER_BDCOUNT_MAX;
 449		if (nhavail <= HEADER_BDCOUNT_MAX)
 450			_bdcount = nhavail;
 451		else
 452			_bdcount = HEADER_BDCOUNT_MAX;
 453		d = flexrm_header_desc(_toggle, _startpkt, _endpkt,
 454					_bdcount, 0x0, reqid);
 455
 456		/* Write header descriptor */
 457		flexrm_write_desc(*desc_ptr, d);
 458
 459		/* Point to next descriptor */
 460		*desc_ptr += sizeof(desc);
 461		if (*desc_ptr == end_desc)
 462			*desc_ptr = start_desc;
 463
 464		/* Skip next pointer descriptors */
 465		while (flexrm_is_next_table_desc(*desc_ptr)) {
 466			*toggle = (*toggle) ? 0 : 1;
 467			*desc_ptr += sizeof(desc);
 468			if (*desc_ptr == end_desc)
 469				*desc_ptr = start_desc;
 470		}
 471	}
 472
 473	/* Write desired descriptor */
 474	flexrm_write_desc(*desc_ptr, desc);
 475
 476	/* Point to next descriptor */
 477	*desc_ptr += sizeof(desc);
 478	if (*desc_ptr == end_desc)
 479		*desc_ptr = start_desc;
 480
 481	/* Skip next pointer descriptors */
 482	while (flexrm_is_next_table_desc(*desc_ptr)) {
 483		*toggle = (*toggle) ? 0 : 1;
 484		*desc_ptr += sizeof(desc);
 485		if (*desc_ptr == end_desc)
 486			*desc_ptr = start_desc;
 487	}
 488}
 489
 490static u64 flexrm_src_desc(dma_addr_t addr, unsigned int length)
 491{
 492	u64 desc = 0;
 493
 494	DESC_ENC(desc, SRC_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 495	DESC_ENC(desc, length, SRC_LENGTH_SHIFT, SRC_LENGTH_MASK);
 496	DESC_ENC(desc, addr, SRC_ADDR_SHIFT, SRC_ADDR_MASK);
 497
 498	return desc;
 499}
 500
 501static u64 flexrm_msrc_desc(dma_addr_t addr, unsigned int length_div_16)
 502{
 503	u64 desc = 0;
 504
 505	DESC_ENC(desc, MSRC_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 506	DESC_ENC(desc, length_div_16, MSRC_LENGTH_SHIFT, MSRC_LENGTH_MASK);
 507	DESC_ENC(desc, addr, MSRC_ADDR_SHIFT, MSRC_ADDR_MASK);
 508
 509	return desc;
 510}
 511
 512static u64 flexrm_dst_desc(dma_addr_t addr, unsigned int length)
 513{
 514	u64 desc = 0;
 515
 516	DESC_ENC(desc, DST_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 517	DESC_ENC(desc, length, DST_LENGTH_SHIFT, DST_LENGTH_MASK);
 518	DESC_ENC(desc, addr, DST_ADDR_SHIFT, DST_ADDR_MASK);
 519
 520	return desc;
 521}
 522
 523static u64 flexrm_mdst_desc(dma_addr_t addr, unsigned int length_div_16)
 524{
 525	u64 desc = 0;
 526
 527	DESC_ENC(desc, MDST_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 528	DESC_ENC(desc, length_div_16, MDST_LENGTH_SHIFT, MDST_LENGTH_MASK);
 529	DESC_ENC(desc, addr, MDST_ADDR_SHIFT, MDST_ADDR_MASK);
 530
 531	return desc;
 532}
 533
 534static u64 flexrm_imm_desc(u64 data)
 535{
 536	u64 desc = 0;
 537
 538	DESC_ENC(desc, IMM_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 539	DESC_ENC(desc, data, IMM_DATA_SHIFT, IMM_DATA_MASK);
 540
 541	return desc;
 542}
 543
 544static u64 flexrm_srct_desc(dma_addr_t addr, unsigned int length)
 545{
 546	u64 desc = 0;
 547
 548	DESC_ENC(desc, SRCT_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 549	DESC_ENC(desc, length, SRCT_LENGTH_SHIFT, SRCT_LENGTH_MASK);
 550	DESC_ENC(desc, addr, SRCT_ADDR_SHIFT, SRCT_ADDR_MASK);
 551
 552	return desc;
 553}
 554
 555static u64 flexrm_dstt_desc(dma_addr_t addr, unsigned int length)
 556{
 557	u64 desc = 0;
 558
 559	DESC_ENC(desc, DSTT_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 560	DESC_ENC(desc, length, DSTT_LENGTH_SHIFT, DSTT_LENGTH_MASK);
 561	DESC_ENC(desc, addr, DSTT_ADDR_SHIFT, DSTT_ADDR_MASK);
 562
 563	return desc;
 564}
 565
 566static u64 flexrm_immt_desc(u64 data)
 567{
 568	u64 desc = 0;
 569
 570	DESC_ENC(desc, IMMT_TYPE, DESC_TYPE_SHIFT, DESC_TYPE_MASK);
 571	DESC_ENC(desc, data, IMMT_DATA_SHIFT, IMMT_DATA_MASK);
 572
 573	return desc;
 574}
 575
 576static bool flexrm_spu_sanity_check(struct brcm_message *msg)
 577{
 578	struct scatterlist *sg;
 579
 580	if (!msg->spu.src || !msg->spu.dst)
 581		return false;
 582	for (sg = msg->spu.src; sg; sg = sg_next(sg)) {
 583		if (sg->length & 0xf) {
 584			if (sg->length > SRC_LENGTH_MASK)
 585				return false;
 586		} else {
 587			if (sg->length > (MSRC_LENGTH_MASK * 16))
 588				return false;
 589		}
 590	}
 591	for (sg = msg->spu.dst; sg; sg = sg_next(sg)) {
 592		if (sg->length & 0xf) {
 593			if (sg->length > DST_LENGTH_MASK)
 594				return false;
 595		} else {
 596			if (sg->length > (MDST_LENGTH_MASK * 16))
 597				return false;
 598		}
 599	}
 600
 601	return true;
 602}
 603
 604static u32 flexrm_spu_estimate_nonheader_desc_count(struct brcm_message *msg)
 605{
 606	u32 cnt = 0;
 607	unsigned int dst_target = 0;
 608	struct scatterlist *src_sg = msg->spu.src, *dst_sg = msg->spu.dst;
 609
 610	while (src_sg || dst_sg) {
 611		if (src_sg) {
 612			cnt++;
 613			dst_target = src_sg->length;
 614			src_sg = sg_next(src_sg);
 615		} else
 616			dst_target = UINT_MAX;
 617
 618		while (dst_target && dst_sg) {
 619			cnt++;
 620			if (dst_sg->length < dst_target)
 621				dst_target -= dst_sg->length;
 622			else
 623				dst_target = 0;
 624			dst_sg = sg_next(dst_sg);
 625		}
 626	}
 627
 628	return cnt;
 629}
 630
 631static int flexrm_spu_dma_map(struct device *dev, struct brcm_message *msg)
 632{
 633	int rc;
 634
 635	rc = dma_map_sg(dev, msg->spu.src, sg_nents(msg->spu.src),
 636			DMA_TO_DEVICE);
 637	if (rc < 0)
 638		return rc;
 639
 640	rc = dma_map_sg(dev, msg->spu.dst, sg_nents(msg->spu.dst),
 641			DMA_FROM_DEVICE);
 642	if (rc < 0) {
 643		dma_unmap_sg(dev, msg->spu.src, sg_nents(msg->spu.src),
 644			     DMA_TO_DEVICE);
 645		return rc;
 646	}
 647
 648	return 0;
 649}
 650
 651static void flexrm_spu_dma_unmap(struct device *dev, struct brcm_message *msg)
 652{
 653	dma_unmap_sg(dev, msg->spu.dst, sg_nents(msg->spu.dst),
 654		     DMA_FROM_DEVICE);
 655	dma_unmap_sg(dev, msg->spu.src, sg_nents(msg->spu.src),
 656		     DMA_TO_DEVICE);
 657}
 658
 659static void *flexrm_spu_write_descs(struct brcm_message *msg, u32 nhcnt,
 660				     u32 reqid, void *desc_ptr, u32 toggle,
 661				     void *start_desc, void *end_desc)
 662{
 663	u64 d;
 664	u32 nhpos = 0;
 665	void *orig_desc_ptr = desc_ptr;
 666	unsigned int dst_target = 0;
 667	struct scatterlist *src_sg = msg->spu.src, *dst_sg = msg->spu.dst;
 668
 669	while (src_sg || dst_sg) {
 670		if (src_sg) {
 671			if (sg_dma_len(src_sg) & 0xf)
 672				d = flexrm_src_desc(sg_dma_address(src_sg),
 673						     sg_dma_len(src_sg));
 674			else
 675				d = flexrm_msrc_desc(sg_dma_address(src_sg),
 676						      sg_dma_len(src_sg)/16);
 677			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 678					     d, &desc_ptr, &toggle,
 679					     start_desc, end_desc);
 680			nhpos++;
 681			dst_target = sg_dma_len(src_sg);
 682			src_sg = sg_next(src_sg);
 683		} else
 684			dst_target = UINT_MAX;
 685
 686		while (dst_target && dst_sg) {
 687			if (sg_dma_len(dst_sg) & 0xf)
 688				d = flexrm_dst_desc(sg_dma_address(dst_sg),
 689						     sg_dma_len(dst_sg));
 690			else
 691				d = flexrm_mdst_desc(sg_dma_address(dst_sg),
 692						      sg_dma_len(dst_sg)/16);
 693			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 694					     d, &desc_ptr, &toggle,
 695					     start_desc, end_desc);
 696			nhpos++;
 697			if (sg_dma_len(dst_sg) < dst_target)
 698				dst_target -= sg_dma_len(dst_sg);
 699			else
 700				dst_target = 0;
 701			dst_sg = sg_next(dst_sg);
 702		}
 703	}
 704
 705	/* Null descriptor with invalid toggle bit */
 706	flexrm_write_desc(desc_ptr, flexrm_null_desc(!toggle));
 707
 708	/* Ensure that descriptors have been written to memory */
 709	wmb();
 710
 711	/* Flip toggle bit in header */
 712	flexrm_flip_header_toogle(orig_desc_ptr);
 713
 714	return desc_ptr;
 715}
 716
 717static bool flexrm_sba_sanity_check(struct brcm_message *msg)
 718{
 719	u32 i;
 720
 721	if (!msg->sba.cmds || !msg->sba.cmds_count)
 722		return false;
 723
 724	for (i = 0; i < msg->sba.cmds_count; i++) {
 725		if (((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_B) ||
 726		     (msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_C)) &&
 727		    (msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_OUTPUT))
 728			return false;
 729		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_B) &&
 730		    (msg->sba.cmds[i].data_len > SRCT_LENGTH_MASK))
 731			return false;
 732		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_C) &&
 733		    (msg->sba.cmds[i].data_len > SRCT_LENGTH_MASK))
 734			return false;
 735		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_RESP) &&
 736		    (msg->sba.cmds[i].resp_len > DSTT_LENGTH_MASK))
 737			return false;
 738		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_OUTPUT) &&
 739		    (msg->sba.cmds[i].data_len > DSTT_LENGTH_MASK))
 740			return false;
 741	}
 742
 743	return true;
 744}
 745
 746static u32 flexrm_sba_estimate_nonheader_desc_count(struct brcm_message *msg)
 747{
 748	u32 i, cnt;
 749
 750	cnt = 0;
 751	for (i = 0; i < msg->sba.cmds_count; i++) {
 752		cnt++;
 753
 754		if ((msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_B) ||
 755		    (msg->sba.cmds[i].flags & BRCM_SBA_CMD_TYPE_C))
 756			cnt++;
 757
 758		if (msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_RESP)
 759			cnt++;
 760
 761		if (msg->sba.cmds[i].flags & BRCM_SBA_CMD_HAS_OUTPUT)
 762			cnt++;
 763	}
 764
 765	return cnt;
 766}
 767
 768static void *flexrm_sba_write_descs(struct brcm_message *msg, u32 nhcnt,
 769				     u32 reqid, void *desc_ptr, u32 toggle,
 770				     void *start_desc, void *end_desc)
 771{
 772	u64 d;
 773	u32 i, nhpos = 0;
 774	struct brcm_sba_command *c;
 775	void *orig_desc_ptr = desc_ptr;
 776
 777	/* Convert SBA commands into descriptors */
 778	for (i = 0; i < msg->sba.cmds_count; i++) {
 779		c = &msg->sba.cmds[i];
 780
 781		if ((c->flags & BRCM_SBA_CMD_HAS_RESP) &&
 782		    (c->flags & BRCM_SBA_CMD_HAS_OUTPUT)) {
 783			/* Destination response descriptor */
 784			d = flexrm_dst_desc(c->resp, c->resp_len);
 785			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 786					     d, &desc_ptr, &toggle,
 787					     start_desc, end_desc);
 788			nhpos++;
 789		} else if (c->flags & BRCM_SBA_CMD_HAS_RESP) {
 790			/* Destination response with tlast descriptor */
 791			d = flexrm_dstt_desc(c->resp, c->resp_len);
 792			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 793					     d, &desc_ptr, &toggle,
 794					     start_desc, end_desc);
 795			nhpos++;
 796		}
 797
 798		if (c->flags & BRCM_SBA_CMD_HAS_OUTPUT) {
 799			/* Destination with tlast descriptor */
 800			d = flexrm_dstt_desc(c->data, c->data_len);
 801			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 802					     d, &desc_ptr, &toggle,
 803					     start_desc, end_desc);
 804			nhpos++;
 805		}
 806
 807		if (c->flags & BRCM_SBA_CMD_TYPE_B) {
 808			/* Command as immediate descriptor */
 809			d = flexrm_imm_desc(c->cmd);
 810			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 811					     d, &desc_ptr, &toggle,
 812					     start_desc, end_desc);
 813			nhpos++;
 814		} else {
 815			/* Command as immediate descriptor with tlast */
 816			d = flexrm_immt_desc(c->cmd);
 817			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 818					     d, &desc_ptr, &toggle,
 819					     start_desc, end_desc);
 820			nhpos++;
 821		}
 822
 823		if ((c->flags & BRCM_SBA_CMD_TYPE_B) ||
 824		    (c->flags & BRCM_SBA_CMD_TYPE_C)) {
 825			/* Source with tlast descriptor */
 826			d = flexrm_srct_desc(c->data, c->data_len);
 827			flexrm_enqueue_desc(nhpos, nhcnt, reqid,
 828					     d, &desc_ptr, &toggle,
 829					     start_desc, end_desc);
 830			nhpos++;
 831		}
 832	}
 833
 834	/* Null descriptor with invalid toggle bit */
 835	flexrm_write_desc(desc_ptr, flexrm_null_desc(!toggle));
 836
 837	/* Ensure that descriptors have been written to memory */
 838	wmb();
 839
 840	/* Flip toggle bit in header */
 841	flexrm_flip_header_toogle(orig_desc_ptr);
 842
 843	return desc_ptr;
 844}
 845
 846static bool flexrm_sanity_check(struct brcm_message *msg)
 847{
 848	if (!msg)
 849		return false;
 850
 851	switch (msg->type) {
 852	case BRCM_MESSAGE_SPU:
 853		return flexrm_spu_sanity_check(msg);
 854	case BRCM_MESSAGE_SBA:
 855		return flexrm_sba_sanity_check(msg);
 856	default:
 857		return false;
 858	};
 859}
 860
 861static u32 flexrm_estimate_nonheader_desc_count(struct brcm_message *msg)
 862{
 863	if (!msg)
 864		return 0;
 865
 866	switch (msg->type) {
 867	case BRCM_MESSAGE_SPU:
 868		return flexrm_spu_estimate_nonheader_desc_count(msg);
 869	case BRCM_MESSAGE_SBA:
 870		return flexrm_sba_estimate_nonheader_desc_count(msg);
 871	default:
 872		return 0;
 873	};
 874}
 875
 876static int flexrm_dma_map(struct device *dev, struct brcm_message *msg)
 877{
 878	if (!dev || !msg)
 879		return -EINVAL;
 880
 881	switch (msg->type) {
 882	case BRCM_MESSAGE_SPU:
 883		return flexrm_spu_dma_map(dev, msg);
 884	default:
 885		break;
 886	}
 887
 888	return 0;
 889}
 890
 891static void flexrm_dma_unmap(struct device *dev, struct brcm_message *msg)
 892{
 893	if (!dev || !msg)
 894		return;
 895
 896	switch (msg->type) {
 897	case BRCM_MESSAGE_SPU:
 898		flexrm_spu_dma_unmap(dev, msg);
 899		break;
 900	default:
 901		break;
 902	}
 903}
 904
 905static void *flexrm_write_descs(struct brcm_message *msg, u32 nhcnt,
 906				u32 reqid, void *desc_ptr, u32 toggle,
 907				void *start_desc, void *end_desc)
 908{
 909	if (!msg || !desc_ptr || !start_desc || !end_desc)
 910		return ERR_PTR(-ENOTSUPP);
 911
 912	if ((desc_ptr < start_desc) || (end_desc <= desc_ptr))
 913		return ERR_PTR(-ERANGE);
 914
 915	switch (msg->type) {
 916	case BRCM_MESSAGE_SPU:
 917		return flexrm_spu_write_descs(msg, nhcnt, reqid,
 918					       desc_ptr, toggle,
 919					       start_desc, end_desc);
 920	case BRCM_MESSAGE_SBA:
 921		return flexrm_sba_write_descs(msg, nhcnt, reqid,
 922					       desc_ptr, toggle,
 923					       start_desc, end_desc);
 924	default:
 925		return ERR_PTR(-ENOTSUPP);
 926	};
 927}
 928
 929/* ====== FlexRM driver helper routines ===== */
 930
 931static void flexrm_write_config_in_seqfile(struct flexrm_mbox *mbox,
 932					   struct seq_file *file)
 933{
 934	int i;
 935	const char *state;
 936	struct flexrm_ring *ring;
 937
 938	seq_printf(file, "%-5s %-9s %-18s %-10s %-18s %-10s\n",
 939		   "Ring#", "State", "BD_Addr", "BD_Size",
 940		   "Cmpl_Addr", "Cmpl_Size");
 941
 942	for (i = 0; i < mbox->num_rings; i++) {
 943		ring = &mbox->rings[i];
 944		if (readl(ring->regs + RING_CONTROL) &
 945		    BIT(CONTROL_ACTIVE_SHIFT))
 946			state = "active";
 947		else
 948			state = "inactive";
 949		seq_printf(file,
 950			   "%-5d %-9s 0x%016llx 0x%08x 0x%016llx 0x%08x\n",
 951			   ring->num, state,
 952			   (unsigned long long)ring->bd_dma_base,
 953			   (u32)RING_BD_SIZE,
 954			   (unsigned long long)ring->cmpl_dma_base,
 955			   (u32)RING_CMPL_SIZE);
 956	}
 957}
 958
 959static void flexrm_write_stats_in_seqfile(struct flexrm_mbox *mbox,
 960					  struct seq_file *file)
 961{
 962	int i;
 963	u32 val, bd_read_offset;
 964	struct flexrm_ring *ring;
 965
 966	seq_printf(file, "%-5s %-10s %-10s %-10s %-11s %-11s\n",
 967		   "Ring#", "BD_Read", "BD_Write",
 968		   "Cmpl_Read", "Submitted", "Completed");
 969
 970	for (i = 0; i < mbox->num_rings; i++) {
 971		ring = &mbox->rings[i];
 972		bd_read_offset = readl_relaxed(ring->regs + RING_BD_READ_PTR);
 973		val = readl_relaxed(ring->regs + RING_BD_START_ADDR);
 974		bd_read_offset *= RING_DESC_SIZE;
 975		bd_read_offset += (u32)(BD_START_ADDR_DECODE(val) -
 976					ring->bd_dma_base);
 977		seq_printf(file, "%-5d 0x%08x 0x%08x 0x%08x %-11d %-11d\n",
 978			   ring->num,
 979			   (u32)bd_read_offset,
 980			   (u32)ring->bd_write_offset,
 981			   (u32)ring->cmpl_read_offset,
 982			   (u32)atomic_read(&ring->msg_send_count),
 983			   (u32)atomic_read(&ring->msg_cmpl_count));
 984	}
 985}
 986
 987static int flexrm_new_request(struct flexrm_ring *ring,
 988				struct brcm_message *batch_msg,
 989				struct brcm_message *msg)
 990{
 991	void *next;
 992	unsigned long flags;
 993	u32 val, count, nhcnt;
 994	u32 read_offset, write_offset;
 995	bool exit_cleanup = false;
 996	int ret = 0, reqid;
 997
 998	/* Do sanity check on message */
 999	if (!flexrm_sanity_check(msg))
1000		return -EIO;
1001	msg->error = 0;
1002
1003	/* If no requests possible then save data pointer and goto done. */
1004	spin_lock_irqsave(&ring->lock, flags);
1005	reqid = bitmap_find_free_region(ring->requests_bmap,
1006					RING_MAX_REQ_COUNT, 0);
1007	spin_unlock_irqrestore(&ring->lock, flags);
1008	if (reqid < 0)
1009		return -ENOSPC;
1010	ring->requests[reqid] = msg;
1011
1012	/* Do DMA mappings for the message */
1013	ret = flexrm_dma_map(ring->mbox->dev, msg);
1014	if (ret < 0) {
1015		ring->requests[reqid] = NULL;
1016		spin_lock_irqsave(&ring->lock, flags);
1017		bitmap_release_region(ring->requests_bmap, reqid, 0);
1018		spin_unlock_irqrestore(&ring->lock, flags);
1019		return ret;
1020	}
1021
1022	/* Determine current HW BD read offset */
1023	read_offset = readl_relaxed(ring->regs + RING_BD_READ_PTR);
1024	val = readl_relaxed(ring->regs + RING_BD_START_ADDR);
1025	read_offset *= RING_DESC_SIZE;
1026	read_offset += (u32)(BD_START_ADDR_DECODE(val) - ring->bd_dma_base);
1027
1028	/*
1029	 * Number required descriptors = number of non-header descriptors +
1030	 *				 number of header descriptors +
1031	 *				 1x null descriptor
1032	 */
1033	nhcnt = flexrm_estimate_nonheader_desc_count(msg);
1034	count = flexrm_estimate_header_desc_count(nhcnt) + nhcnt + 1;
1035
1036	/* Check for available descriptor space. */
1037	write_offset = ring->bd_write_offset;
1038	while (count) {
1039		if (!flexrm_is_next_table_desc(ring->bd_base + write_offset))
1040			count--;
1041		write_offset += RING_DESC_SIZE;
1042		if (write_offset == RING_BD_SIZE)
1043			write_offset = 0x0;
1044		if (write_offset == read_offset)
1045			break;
1046	}
1047	if (count) {
1048		ret = -ENOSPC;
1049		exit_cleanup = true;
1050		goto exit;
1051	}
1052
1053	/* Write descriptors to ring */
1054	next = flexrm_write_descs(msg, nhcnt, reqid,
1055			ring->bd_base + ring->bd_write_offset,
1056			RING_BD_TOGGLE_VALID(ring->bd_write_offset),
1057			ring->bd_base, ring->bd_base + RING_BD_SIZE);
1058	if (IS_ERR(next)) {
1059		ret = PTR_ERR(next);
1060		exit_cleanup = true;
1061		goto exit;
1062	}
1063
1064	/* Save ring BD write offset */
1065	ring->bd_write_offset = (unsigned long)(next - ring->bd_base);
1066
1067	/* Increment number of messages sent */
1068	atomic_inc_return(&ring->msg_send_count);
1069
1070exit:
1071	/* Update error status in message */
1072	msg->error = ret;
1073
1074	/* Cleanup if we failed */
1075	if (exit_cleanup) {
1076		flexrm_dma_unmap(ring->mbox->dev, msg);
1077		ring->requests[reqid] = NULL;
1078		spin_lock_irqsave(&ring->lock, flags);
1079		bitmap_release_region(ring->requests_bmap, reqid, 0);
1080		spin_unlock_irqrestore(&ring->lock, flags);
1081	}
1082
1083	return ret;
1084}
1085
1086static int flexrm_process_completions(struct flexrm_ring *ring)
1087{
1088	u64 desc;
1089	int err, count = 0;
1090	unsigned long flags;
1091	struct brcm_message *msg = NULL;
1092	u32 reqid, cmpl_read_offset, cmpl_write_offset;
1093	struct mbox_chan *chan = &ring->mbox->controller.chans[ring->num];
1094
1095	spin_lock_irqsave(&ring->lock, flags);
1096
1097	/*
1098	 * Get current completion read and write offset
1099	 *
1100	 * Note: We should read completion write pointer atleast once
1101	 * after we get a MSI interrupt because HW maintains internal
1102	 * MSI status which will allow next MSI interrupt only after
1103	 * completion write pointer is read.
1104	 */
1105	cmpl_write_offset = readl_relaxed(ring->regs + RING_CMPL_WRITE_PTR);
1106	cmpl_write_offset *= RING_DESC_SIZE;
1107	cmpl_read_offset = ring->cmpl_read_offset;
1108	ring->cmpl_read_offset = cmpl_write_offset;
1109
1110	spin_unlock_irqrestore(&ring->lock, flags);
1111
1112	/* For each completed request notify mailbox clients */
1113	reqid = 0;
1114	while (cmpl_read_offset != cmpl_write_offset) {
1115		/* Dequeue next completion descriptor */
1116		desc = *((u64 *)(ring->cmpl_base + cmpl_read_offset));
1117
1118		/* Next read offset */
1119		cmpl_read_offset += RING_DESC_SIZE;
1120		if (cmpl_read_offset == RING_CMPL_SIZE)
1121			cmpl_read_offset = 0;
1122
1123		/* Decode error from completion descriptor */
1124		err = flexrm_cmpl_desc_to_error(desc);
1125		if (err < 0) {
1126			dev_warn(ring->mbox->dev,
1127			"ring%d got completion desc=0x%lx with error %d\n",
1128			ring->num, (unsigned long)desc, err);
1129		}
1130
1131		/* Determine request id from completion descriptor */
1132		reqid = flexrm_cmpl_desc_to_reqid(desc);
1133
1134		/* Determine message pointer based on reqid */
1135		msg = ring->requests[reqid];
1136		if (!msg) {
1137			dev_warn(ring->mbox->dev,
1138			"ring%d null msg pointer for completion desc=0x%lx\n",
1139			ring->num, (unsigned long)desc);
1140			continue;
1141		}
1142
1143		/* Release reqid for recycling */
1144		ring->requests[reqid] = NULL;
1145		spin_lock_irqsave(&ring->lock, flags);
1146		bitmap_release_region(ring->requests_bmap, reqid, 0);
1147		spin_unlock_irqrestore(&ring->lock, flags);
1148
1149		/* Unmap DMA mappings */
1150		flexrm_dma_unmap(ring->mbox->dev, msg);
1151
1152		/* Give-back message to mailbox client */
1153		msg->error = err;
1154		mbox_chan_received_data(chan, msg);
1155
1156		/* Increment number of completions processed */
1157		atomic_inc_return(&ring->msg_cmpl_count);
1158		count++;
1159	}
1160
1161	return count;
1162}
1163
1164/* ====== FlexRM Debugfs callbacks ====== */
1165
1166static int flexrm_debugfs_conf_show(struct seq_file *file, void *offset)
1167{
1168	struct platform_device *pdev = to_platform_device(file->private);
1169	struct flexrm_mbox *mbox = platform_get_drvdata(pdev);
1170
1171	/* Write config in file */
1172	flexrm_write_config_in_seqfile(mbox, file);
1173
1174	return 0;
1175}
1176
1177static int flexrm_debugfs_stats_show(struct seq_file *file, void *offset)
1178{
1179	struct platform_device *pdev = to_platform_device(file->private);
1180	struct flexrm_mbox *mbox = platform_get_drvdata(pdev);
1181
1182	/* Write stats in file */
1183	flexrm_write_stats_in_seqfile(mbox, file);
1184
1185	return 0;
1186}
1187
1188/* ====== FlexRM interrupt handler ===== */
1189
1190static irqreturn_t flexrm_irq_event(int irq, void *dev_id)
1191{
1192	/* We only have MSI for completions so just wakeup IRQ thread */
1193	/* Ring related errors will be informed via completion descriptors */
1194
1195	return IRQ_WAKE_THREAD;
1196}
1197
1198static irqreturn_t flexrm_irq_thread(int irq, void *dev_id)
1199{
1200	flexrm_process_completions(dev_id);
1201
1202	return IRQ_HANDLED;
1203}
1204
1205/* ====== FlexRM mailbox callbacks ===== */
1206
1207static int flexrm_send_data(struct mbox_chan *chan, void *data)
1208{
1209	int i, rc;
1210	struct flexrm_ring *ring = chan->con_priv;
1211	struct brcm_message *msg = data;
1212
1213	if (msg->type == BRCM_MESSAGE_BATCH) {
1214		for (i = msg->batch.msgs_queued;
1215		     i < msg->batch.msgs_count; i++) {
1216			rc = flexrm_new_request(ring, msg,
1217						 &msg->batch.msgs[i]);
1218			if (rc) {
1219				msg->error = rc;
1220				return rc;
1221			}
1222			msg->batch.msgs_queued++;
1223		}
1224		return 0;
1225	}
1226
1227	return flexrm_new_request(ring, NULL, data);
1228}
1229
1230static bool flexrm_peek_data(struct mbox_chan *chan)
1231{
1232	int cnt = flexrm_process_completions(chan->con_priv);
1233
1234	return (cnt > 0) ? true : false;
1235}
1236
1237static int flexrm_startup(struct mbox_chan *chan)
1238{
1239	u64 d;
1240	u32 val, off;
1241	int ret = 0;
1242	dma_addr_t next_addr;
1243	struct flexrm_ring *ring = chan->con_priv;
1244
1245	/* Allocate BD memory */
1246	ring->bd_base = dma_pool_alloc(ring->mbox->bd_pool,
1247				       GFP_KERNEL, &ring->bd_dma_base);
1248	if (!ring->bd_base) {
1249		dev_err(ring->mbox->dev,
1250			"can't allocate BD memory for ring%d\n",
1251			ring->num);
1252		ret = -ENOMEM;
1253		goto fail;
1254	}
1255
1256	/* Configure next table pointer entries in BD memory */
1257	for (off = 0; off < RING_BD_SIZE; off += RING_DESC_SIZE) {
1258		next_addr = off + RING_DESC_SIZE;
1259		if (next_addr == RING_BD_SIZE)
1260			next_addr = 0;
1261		next_addr += ring->bd_dma_base;
1262		if (RING_BD_ALIGN_CHECK(next_addr))
1263			d = flexrm_next_table_desc(RING_BD_TOGGLE_VALID(off),
1264						    next_addr);
1265		else
1266			d = flexrm_null_desc(RING_BD_TOGGLE_INVALID(off));
1267		flexrm_write_desc(ring->bd_base + off, d);
1268	}
1269
1270	/* Allocate completion memory */
1271	ring->cmpl_base = dma_pool_zalloc(ring->mbox->cmpl_pool,
1272					 GFP_KERNEL, &ring->cmpl_dma_base);
1273	if (!ring->cmpl_base) {
1274		dev_err(ring->mbox->dev,
1275			"can't allocate completion memory for ring%d\n",
1276			ring->num);
1277		ret = -ENOMEM;
1278		goto fail_free_bd_memory;
1279	}
1280
1281	/* Request IRQ */
1282	if (ring->irq == UINT_MAX) {
1283		dev_err(ring->mbox->dev,
1284			"ring%d IRQ not available\n", ring->num);
1285		ret = -ENODEV;
1286		goto fail_free_cmpl_memory;
1287	}
1288	ret = request_threaded_irq(ring->irq,
1289				   flexrm_irq_event,
1290				   flexrm_irq_thread,
1291				   0, dev_name(ring->mbox->dev), ring);
1292	if (ret) {
1293		dev_err(ring->mbox->dev,
1294			"failed to request ring%d IRQ\n", ring->num);
1295		goto fail_free_cmpl_memory;
1296	}
1297	ring->irq_requested = true;
1298
1299	/* Set IRQ affinity hint */
1300	ring->irq_aff_hint = CPU_MASK_NONE;
1301	val = ring->mbox->num_rings;
1302	val = (num_online_cpus() < val) ? val / num_online_cpus() : 1;
1303	cpumask_set_cpu((ring->num / val) % num_online_cpus(),
1304			&ring->irq_aff_hint);
1305	ret = irq_set_affinity_hint(ring->irq, &ring->irq_aff_hint);
1306	if (ret) {
1307		dev_err(ring->mbox->dev,
1308			"failed to set IRQ affinity hint for ring%d\n",
1309			ring->num);
1310		goto fail_free_irq;
1311	}
1312
1313	/* Disable/inactivate ring */
1314	writel_relaxed(0x0, ring->regs + RING_CONTROL);
1315
1316	/* Program BD start address */
1317	val = BD_START_ADDR_VALUE(ring->bd_dma_base);
1318	writel_relaxed(val, ring->regs + RING_BD_START_ADDR);
1319
1320	/* BD write pointer will be same as HW write pointer */
1321	ring->bd_write_offset =
1322			readl_relaxed(ring->regs + RING_BD_WRITE_PTR);
1323	ring->bd_write_offset *= RING_DESC_SIZE;
1324
1325	/* Program completion start address */
1326	val = CMPL_START_ADDR_VALUE(ring->cmpl_dma_base);
1327	writel_relaxed(val, ring->regs + RING_CMPL_START_ADDR);
1328
1329	/* Completion read pointer will be same as HW write pointer */
1330	ring->cmpl_read_offset =
1331			readl_relaxed(ring->regs + RING_CMPL_WRITE_PTR);
1332	ring->cmpl_read_offset *= RING_DESC_SIZE;
1333
1334	/* Read ring Tx, Rx, and Outstanding counts to clear */
1335	readl_relaxed(ring->regs + RING_NUM_REQ_RECV_LS);
1336	readl_relaxed(ring->regs + RING_NUM_REQ_RECV_MS);
1337	readl_relaxed(ring->regs + RING_NUM_REQ_TRANS_LS);
1338	readl_relaxed(ring->regs + RING_NUM_REQ_TRANS_MS);
1339	readl_relaxed(ring->regs + RING_NUM_REQ_OUTSTAND);
1340
1341	/* Configure RING_MSI_CONTROL */
1342	val = 0;
1343	val |= (ring->msi_timer_val << MSI_TIMER_VAL_SHIFT);
1344	val |= BIT(MSI_ENABLE_SHIFT);
1345	val |= (ring->msi_count_threshold & MSI_COUNT_MASK) << MSI_COUNT_SHIFT;
1346	writel_relaxed(val, ring->regs + RING_MSI_CONTROL);
1347
1348	/* Enable/activate ring */
1349	val = BIT(CONTROL_ACTIVE_SHIFT);
1350	writel_relaxed(val, ring->regs + RING_CONTROL);
1351
1352	/* Reset stats to zero */
1353	atomic_set(&ring->msg_send_count, 0);
1354	atomic_set(&ring->msg_cmpl_count, 0);
1355
1356	return 0;
1357
1358fail_free_irq:
1359	free_irq(ring->irq, ring);
1360	ring->irq_requested = false;
1361fail_free_cmpl_memory:
1362	dma_pool_free(ring->mbox->cmpl_pool,
1363		      ring->cmpl_base, ring->cmpl_dma_base);
1364	ring->cmpl_base = NULL;
1365fail_free_bd_memory:
1366	dma_pool_free(ring->mbox->bd_pool,
1367		      ring->bd_base, ring->bd_dma_base);
1368	ring->bd_base = NULL;
1369fail:
1370	return ret;
1371}
1372
1373static void flexrm_shutdown(struct mbox_chan *chan)
1374{
1375	u32 reqid;
1376	unsigned int timeout;
1377	struct brcm_message *msg;
1378	struct flexrm_ring *ring = chan->con_priv;
1379
1380	/* Disable/inactivate ring */
1381	writel_relaxed(0x0, ring->regs + RING_CONTROL);
1382
1383	/* Set ring flush state */
1384	timeout = 1000; /* timeout of 1s */
1385	writel_relaxed(BIT(CONTROL_FLUSH_SHIFT),
1386			ring->regs + RING_CONTROL);
1387	do {
1388		if (readl_relaxed(ring->regs + RING_FLUSH_DONE) &
1389		    FLUSH_DONE_MASK)
1390			break;
1391		mdelay(1);
1392	} while (--timeout);
1393	if (!timeout)
1394		dev_err(ring->mbox->dev,
1395			"setting ring%d flush state timedout\n", ring->num);
1396
1397	/* Clear ring flush state */
1398	timeout = 1000; /* timeout of 1s */
1399	writel_relaxed(0x0, ring + RING_CONTROL);
1400	do {
1401		if (!(readl_relaxed(ring + RING_FLUSH_DONE) &
1402		      FLUSH_DONE_MASK))
1403			break;
1404		mdelay(1);
1405	} while (--timeout);
1406	if (!timeout)
1407		dev_err(ring->mbox->dev,
1408			"clearing ring%d flush state timedout\n", ring->num);
1409
1410	/* Abort all in-flight requests */
1411	for (reqid = 0; reqid < RING_MAX_REQ_COUNT; reqid++) {
1412		msg = ring->requests[reqid];
1413		if (!msg)
1414			continue;
1415
1416		/* Release reqid for recycling */
1417		ring->requests[reqid] = NULL;
1418
1419		/* Unmap DMA mappings */
1420		flexrm_dma_unmap(ring->mbox->dev, msg);
1421
1422		/* Give-back message to mailbox client */
1423		msg->error = -EIO;
1424		mbox_chan_received_data(chan, msg);
1425	}
1426
1427	/* Clear requests bitmap */
1428	bitmap_zero(ring->requests_bmap, RING_MAX_REQ_COUNT);
1429
1430	/* Release IRQ */
1431	if (ring->irq_requested) {
1432		irq_set_affinity_hint(ring->irq, NULL);
1433		free_irq(ring->irq, ring);
1434		ring->irq_requested = false;
1435	}
1436
1437	/* Free-up completion descriptor ring */
1438	if (ring->cmpl_base) {
1439		dma_pool_free(ring->mbox->cmpl_pool,
1440			      ring->cmpl_base, ring->cmpl_dma_base);
1441		ring->cmpl_base = NULL;
1442	}
1443
1444	/* Free-up BD descriptor ring */
1445	if (ring->bd_base) {
1446		dma_pool_free(ring->mbox->bd_pool,
1447			      ring->bd_base, ring->bd_dma_base);
1448		ring->bd_base = NULL;
1449	}
1450}
1451
1452static const struct mbox_chan_ops flexrm_mbox_chan_ops = {
1453	.send_data	= flexrm_send_data,
1454	.startup	= flexrm_startup,
1455	.shutdown	= flexrm_shutdown,
1456	.peek_data	= flexrm_peek_data,
1457};
1458
1459static struct mbox_chan *flexrm_mbox_of_xlate(struct mbox_controller *cntlr,
1460					const struct of_phandle_args *pa)
1461{
1462	struct mbox_chan *chan;
1463	struct flexrm_ring *ring;
1464
1465	if (pa->args_count < 3)
1466		return ERR_PTR(-EINVAL);
1467
1468	if (pa->args[0] >= cntlr->num_chans)
1469		return ERR_PTR(-ENOENT);
1470
1471	if (pa->args[1] > MSI_COUNT_MASK)
1472		return ERR_PTR(-EINVAL);
1473
1474	if (pa->args[2] > MSI_TIMER_VAL_MASK)
1475		return ERR_PTR(-EINVAL);
1476
1477	chan = &cntlr->chans[pa->args[0]];
1478	ring = chan->con_priv;
1479	ring->msi_count_threshold = pa->args[1];
1480	ring->msi_timer_val = pa->args[2];
1481
1482	return chan;
1483}
1484
1485/* ====== FlexRM platform driver ===== */
1486
1487static void flexrm_mbox_msi_write(struct msi_desc *desc, struct msi_msg *msg)
1488{
1489	struct device *dev = msi_desc_to_dev(desc);
1490	struct flexrm_mbox *mbox = dev_get_drvdata(dev);
1491	struct flexrm_ring *ring = &mbox->rings[desc->platform.msi_index];
1492
1493	/* Configure per-Ring MSI registers */
1494	writel_relaxed(msg->address_lo, ring->regs + RING_MSI_ADDR_LS);
1495	writel_relaxed(msg->address_hi, ring->regs + RING_MSI_ADDR_MS);
1496	writel_relaxed(msg->data, ring->regs + RING_MSI_DATA_VALUE);
1497}
1498
1499static int flexrm_mbox_probe(struct platform_device *pdev)
1500{
1501	int index, ret = 0;
1502	void __iomem *regs;
1503	void __iomem *regs_end;
1504	struct msi_desc *desc;
1505	struct resource *iomem;
1506	struct flexrm_ring *ring;
1507	struct flexrm_mbox *mbox;
1508	struct device *dev = &pdev->dev;
1509
1510	/* Allocate driver mailbox struct */
1511	mbox = devm_kzalloc(dev, sizeof(*mbox), GFP_KERNEL);
1512	if (!mbox) {
1513		ret = -ENOMEM;
1514		goto fail;
1515	}
1516	mbox->dev = dev;
1517	platform_set_drvdata(pdev, mbox);
1518
1519	/* Get resource for registers */
1520	iomem = platform_get_resource(pdev, IORESOURCE_MEM, 0);
1521	if (!iomem || (resource_size(iomem) < RING_REGS_SIZE)) {
1522		ret = -ENODEV;
1523		goto fail;
1524	}
1525
1526	/* Map registers of all rings */
1527	mbox->regs = devm_ioremap_resource(&pdev->dev, iomem);
1528	if (IS_ERR(mbox->regs)) {
1529		ret = PTR_ERR(mbox->regs);
1530		dev_err(&pdev->dev, "Failed to remap mailbox regs: %d\n", ret);
1531		goto fail;
1532	}
1533	regs_end = mbox->regs + resource_size(iomem);
1534
1535	/* Scan and count available rings */
1536	mbox->num_rings = 0;
1537	for (regs = mbox->regs; regs < regs_end; regs += RING_REGS_SIZE) {
1538		if (readl_relaxed(regs + RING_VER) == RING_VER_MAGIC)
1539			mbox->num_rings++;
1540	}
1541	if (!mbox->num_rings) {
1542		ret = -ENODEV;
1543		goto fail;
1544	}
1545
1546	/* Allocate driver ring structs */
1547	ring = devm_kcalloc(dev, mbox->num_rings, sizeof(*ring), GFP_KERNEL);
1548	if (!ring) {
1549		ret = -ENOMEM;
1550		goto fail;
1551	}
1552	mbox->rings = ring;
1553
1554	/* Initialize members of driver ring structs */
1555	regs = mbox->regs;
1556	for (index = 0; index < mbox->num_rings; index++) {
1557		ring = &mbox->rings[index];
1558		ring->num = index;
1559		ring->mbox = mbox;
1560		while ((regs < regs_end) &&
1561		       (readl_relaxed(regs + RING_VER) != RING_VER_MAGIC))
1562			regs += RING_REGS_SIZE;
1563		if (regs_end <= regs) {
1564			ret = -ENODEV;
1565			goto fail;
1566		}
1567		ring->regs = regs;
1568		regs += RING_REGS_SIZE;
1569		ring->irq = UINT_MAX;
1570		ring->irq_requested = false;
1571		ring->msi_timer_val = MSI_TIMER_VAL_MASK;
1572		ring->msi_count_threshold = 0x1;
1573		memset(ring->requests, 0, sizeof(ring->requests));
1574		ring->bd_base = NULL;
1575		ring->bd_dma_base = 0;
1576		ring->cmpl_base = NULL;
1577		ring->cmpl_dma_base = 0;
1578		atomic_set(&ring->msg_send_count, 0);
1579		atomic_set(&ring->msg_cmpl_count, 0);
1580		spin_lock_init(&ring->lock);
1581		bitmap_zero(ring->requests_bmap, RING_MAX_REQ_COUNT);
1582		ring->cmpl_read_offset = 0;
1583	}
1584
1585	/* FlexRM is capable of 40-bit physical addresses only */
1586	ret = dma_set_mask_and_coherent(dev, DMA_BIT_MASK(40));
1587	if (ret) {
1588		ret = dma_set_mask_and_coherent(dev, DMA_BIT_MASK(32));
1589		if (ret)
1590			goto fail;
1591	}
1592
1593	/* Create DMA pool for ring BD memory */
1594	mbox->bd_pool = dma_pool_create("bd", dev, RING_BD_SIZE,
1595					1 << RING_BD_ALIGN_ORDER, 0);
1596	if (!mbox->bd_pool) {
1597		ret = -ENOMEM;
1598		goto fail;
1599	}
1600
1601	/* Create DMA pool for ring completion memory */
1602	mbox->cmpl_pool = dma_pool_create("cmpl", dev, RING_CMPL_SIZE,
1603					  1 << RING_CMPL_ALIGN_ORDER, 0);
1604	if (!mbox->cmpl_pool) {
1605		ret = -ENOMEM;
1606		goto fail_destroy_bd_pool;
1607	}
1608
1609	/* Allocate platform MSIs for each ring */
1610	ret = platform_msi_domain_alloc_irqs(dev, mbox->num_rings,
1611						flexrm_mbox_msi_write);
1612	if (ret)
1613		goto fail_destroy_cmpl_pool;
1614
1615	/* Save alloced IRQ numbers for each ring */
1616	for_each_msi_entry(desc, dev) {
1617		ring = &mbox->rings[desc->platform.msi_index];
1618		ring->irq = desc->irq;
1619	}
1620
1621	/* Check availability of debugfs */
1622	if (!debugfs_initialized())
1623		goto skip_debugfs;
1624
1625	/* Create debugfs root entry */
1626	mbox->root = debugfs_create_dir(dev_name(mbox->dev), NULL);
1627	if (IS_ERR_OR_NULL(mbox->root)) {
1628		ret = PTR_ERR_OR_ZERO(mbox->root);
1629		goto fail_free_msis;
1630	}
1631
1632	/* Create debugfs config entry */
1633	mbox->config = debugfs_create_devm_seqfile(mbox->dev,
1634						   "config", mbox->root,
1635						   flexrm_debugfs_conf_show);
1636	if (IS_ERR_OR_NULL(mbox->config)) {
1637		ret = PTR_ERR_OR_ZERO(mbox->config);
1638		goto fail_free_debugfs_root;
1639	}
1640
1641	/* Create debugfs stats entry */
1642	mbox->stats = debugfs_create_devm_seqfile(mbox->dev,
1643						  "stats", mbox->root,
1644						  flexrm_debugfs_stats_show);
1645	if (IS_ERR_OR_NULL(mbox->stats)) {
1646		ret = PTR_ERR_OR_ZERO(mbox->stats);
1647		goto fail_free_debugfs_root;
1648	}
1649skip_debugfs:
1650
1651	/* Initialize mailbox controller */
1652	mbox->controller.txdone_irq = false;
1653	mbox->controller.txdone_poll = false;
1654	mbox->controller.ops = &flexrm_mbox_chan_ops;
1655	mbox->controller.dev = dev;
1656	mbox->controller.num_chans = mbox->num_rings;
1657	mbox->controller.of_xlate = flexrm_mbox_of_xlate;
1658	mbox->controller.chans = devm_kcalloc(dev, mbox->num_rings,
1659				sizeof(*mbox->controller.chans), GFP_KERNEL);
1660	if (!mbox->controller.chans) {
1661		ret = -ENOMEM;
1662		goto fail_free_debugfs_root;
1663	}
1664	for (index = 0; index < mbox->num_rings; index++)
1665		mbox->controller.chans[index].con_priv = &mbox->rings[index];
1666
1667	/* Register mailbox controller */
1668	ret = mbox_controller_register(&mbox->controller);
1669	if (ret)
1670		goto fail_free_debugfs_root;
1671
1672	dev_info(dev, "registered flexrm mailbox with %d channels\n",
1673			mbox->controller.num_chans);
1674
1675	return 0;
1676
1677fail_free_debugfs_root:
1678	debugfs_remove_recursive(mbox->root);
1679fail_free_msis:
1680	platform_msi_domain_free_irqs(dev);
1681fail_destroy_cmpl_pool:
1682	dma_pool_destroy(mbox->cmpl_pool);
1683fail_destroy_bd_pool:
1684	dma_pool_destroy(mbox->bd_pool);
1685fail:
1686	return ret;
1687}
1688
1689static int flexrm_mbox_remove(struct platform_device *pdev)
1690{
1691	struct device *dev = &pdev->dev;
1692	struct flexrm_mbox *mbox = platform_get_drvdata(pdev);
1693
1694	mbox_controller_unregister(&mbox->controller);
1695
1696	debugfs_remove_recursive(mbox->root);
1697
1698	platform_msi_domain_free_irqs(dev);
1699
1700	dma_pool_destroy(mbox->cmpl_pool);
1701	dma_pool_destroy(mbox->bd_pool);
1702
1703	return 0;
1704}
1705
1706static const struct of_device_id flexrm_mbox_of_match[] = {
1707	{ .compatible = "brcm,iproc-flexrm-mbox", },
1708	{},
1709};
1710MODULE_DEVICE_TABLE(of, flexrm_mbox_of_match);
1711
1712static struct platform_driver flexrm_mbox_driver = {
1713	.driver = {
1714		.name = "brcm-flexrm-mbox",
1715		.of_match_table = flexrm_mbox_of_match,
1716	},
1717	.probe		= flexrm_mbox_probe,
1718	.remove		= flexrm_mbox_remove,
1719};
1720module_platform_driver(flexrm_mbox_driver);
1721
1722MODULE_AUTHOR("Anup Patel <anup.patel@broadcom.com>");
1723MODULE_DESCRIPTION("Broadcom FlexRM mailbox driver");
1724MODULE_LICENSE("GPL v2");