drivers/iommu/qcom-hyp-smmu.c - github/trini/u-boot - Gitiles

 // SPDX-License-Identifier: GPL-2.0+
 /*
  * Copyright (C) 2023 Linaro Ltd.
  * Basic ARM SMMU-500 driver, assuming a pre-initialised SMMU and only IDENTITY domains
  * this driver only implements the bare minimum to configure stream mappings for periphals
  * used by u-boot on platforms where the SMMU can't be disabled.
  */

 #include <log.h>
 #include <cpu_func.h>
 #include <dm.h>
 #include <iommu.h>
 #include <linux/bitfield.h>
 #include <linux/list.h>
 #include <linux/err.h>
 #include <lmb.h>
 #include <memalign.h>
 #include <asm/io.h>

 #define ARM_SMMU_GR0 0
 #define ARM_SMMU_GR1 1

 #define ARM_SMMU_GR0_ID0 0x20
 #define ARM_SMMU_ID0_NUMSMRG GENMASK(7, 0) /* Number of stream mapping groups */
 #define ARM_SMMU_GR0_ID1 0x24
 #define ARM_SMMU_ID1_PAGESIZE \
 	BIT(31) /* Page shift is 16 bits when set, otherwise 23 */
 #define ARM_SMMU_ID1_NUMPAGENDXB \
 	GENMASK(30, 28) /* Number of pages before context banks */
 #define ARM_SMMU_ID1_NUMCB GENMASK(7, 0) /* Number of context banks supported */

 #define ARM_SMMU_GR1_CBAR(n) (0x0 + ((n) << 2))
 #define ARM_SMMU_CBAR_TYPE GENMASK(17, 16)
 #define ARM_SMMU_CBAR_VMID GENMASK(7, 0)
 enum arm_smmu_cbar_type {
 	CBAR_TYPE_S2_TRANS,
 	CBAR_TYPE_S1_TRANS_S2_BYPASS,
 	CBAR_TYPE_S1_TRANS_S2_FAULT,
 	CBAR_TYPE_S1_TRANS_S2_TRANS,
 };

 #define ARM_SMMU_GR1_CBA2R(n) (0x800 + ((n) << 2))
 #define ARM_SMMU_CBA2R_VA64 BIT(0)

 /* Per-CB system control register */
 #define ARM_SMMU_CB_SCTLR 0x0
 #define ARM_SMMU_SCTLR_CFCFG BIT(7) /* Stall on context fault */
 #define ARM_SMMU_SCTLR_CFIE BIT(6) /* Context fault interrupt enable */
 #define ARM_SMMU_SCTLR_CFRE BIT(5) /* Abort on context fault */

 /* Translation Table Base, holds address of translation table in memory to be used
  * for this context bank. Or 0 for bypass
  */
 #define ARM_SMMU_CB_TTBR0 0x20
 #define ARM_SMMU_CB_TTBR1 0x28
 /* Translation Control Register, configured TTBR/TLB behaviour (0 for bypass) */
 #define ARM_SMMU_CB_TCR 0x30
 /* Memory Attribute Indirection, also 0 for bypass */
 #define ARM_SMMU_CB_S1_MAIR0 0x38
 #define ARM_SMMU_CB_S1_MAIR1 0x3c

 #define ARM_SMMU_GR0_SMR(n) (0x800 + ((n) << 2))
 #define ARM_SMMU_SMR_VALID BIT(31)
 #define ARM_SMMU_SMR_MASK GENMASK(31, 16) // Always 0 for now??
 #define ARM_SMMU_SMR_ID GENMASK(15, 0)

 #define ARM_SMMU_GR0_S2CR(n) (0xc00 + ((n) << 2))
 #define ARM_SMMU_S2CR_PRIVCFG GENMASK(25, 24)

 enum arm_smmu_s2cr_privcfg {
 	S2CR_PRIVCFG_DEFAULT,
 	S2CR_PRIVCFG_DIPAN,
 	S2CR_PRIVCFG_UNPRIV,
 	S2CR_PRIVCFG_PRIV,
 };

 #define ARM_SMMU_S2CR_TYPE GENMASK(17, 16)

 enum arm_smmu_s2cr_type {
 	S2CR_TYPE_TRANS,
 	S2CR_TYPE_BYPASS,
 	S2CR_TYPE_FAULT,
 };

 #define ARM_SMMU_S2CR_EXIDVALID BIT(10)
 #define ARM_SMMU_S2CR_CBNDX GENMASK(7, 0)

 #define VMID_UNUSED 0xff

 struct qcom_smmu_priv {
 	phys_addr_t base;
 	struct list_head devices;
 	struct udevice *dev;

 	/* Read-once config */
 	int num_cb;
 	int num_smr;
 	u32 pgshift;
 	u32 cb_pg_offset;
 };

 struct mmu_dev {
 	struct list_head li;
 	struct udevice *dev;
 	u16 sid;
 	u16 cbx;
 	u16 smr;
 };

 #define page_addr(priv, page) ((priv)->base + ((page) << (priv)->pgshift))

 #define smmu_readl(priv, page, offset) readl(page_addr(priv, page) + offset)
 #define gr0_readl(priv, offset) smmu_readl(priv, ARM_SMMU_GR0, offset)
 #define gr1_readl(priv, offset) smmu_readl(priv, ARM_SMMU_GR1, offset)
 #define cbx_readl(priv, cbx, offset) \
 	smmu_readl(priv, (priv->cb_pg_offset) + cbx, offset)

 #define smmu_writel(priv, page, offset, value) \
 	writel((value), page_addr(priv, page) + offset)
 #define gr0_writel(priv, offset, value) \
 	smmu_writel(priv, ARM_SMMU_GR0, offset, (value))
 #define gr1_writel(priv, offset, value) \
 	smmu_writel(priv, ARM_SMMU_GR1, offset, (value))
 #define cbx_writel(priv, cbx, offset, value) \
 	smmu_writel(priv, (priv->cb_pg_offset) + cbx, offset, value)

 #define gr1_setbits(priv, offset, value) \
 	gr1_writel(priv, offset, gr1_readl(priv, offset) | (value))

 static int get_stream_id(struct udevice *dev)
 {
 	ofnode node = dev_ofnode(dev);
 	struct ofnode_phandle_args args;
 	int count = ofnode_parse_phandle_with_args(node, "iommus",
 						   "#iommu-cells", 0, 0, &args);

 	if (count < 0 || args.args[0] == 0) {
 		printf("Error: %s: iommus property not found or wrong number of cells\n",
 		       __func__);
 		return -EINVAL;
 	}

 	return args.args[0]; // Some mask from bit 16 onward?
 }

 static struct mmu_dev *alloc_dev(struct udevice *dev)
 {
 	struct qcom_smmu_priv *priv = dev_get_priv(dev->iommu);
 	struct mmu_dev *mmu_dev;
 	int sid;

 	sid = get_stream_id(dev);
 	debug("%s %s has SID %#x\n", dev->iommu->name, dev->name, sid);
 	if (sid < 0 || sid > 0xffff) {
 		printf("\tSMMU: Invalid stream ID for %s\n", dev->name);
 		return ERR_PTR(-EINVAL);
 	}

 	/* We only support a single SID per device for now */
 	list_for_each_entry(mmu_dev, &priv->devices, li) {
 		if (mmu_dev->sid == sid)
 			return ERR_PTR(-EEXIST);
 	}

 	mmu_dev = calloc(sizeof(*mmu_dev), 1);
 	if (!mmu_dev)
 		return ERR_PTR(-ENOMEM);

 	mmu_dev->dev = dev;
 	mmu_dev->sid = sid;

 	list_add_tail(&mmu_dev->li, &priv->devices);

 	return mmu_dev;
 }

 /* Find and init the first free context bank */
 static int alloc_cb(struct qcom_smmu_priv *priv)
 {
 	u32 cbar, type, vmid, val;

 	for (int i = 0; i < priv->num_cb; i++) {
 		cbar = gr1_readl(priv, ARM_SMMU_GR1_CBAR(i));
 		type = FIELD_GET(ARM_SMMU_CBAR_TYPE, cbar);
 		vmid = FIELD_GET(ARM_SMMU_CBAR_VMID, cbar);

 		/* Check that the context bank is available. We haven't reset the SMMU so
 		 * we just make a best guess.
 		 */
 		if (type != CBAR_TYPE_S2_TRANS &&
 		    (type != CBAR_TYPE_S1_TRANS_S2_BYPASS ||
 		     vmid != VMID_UNUSED))
 			continue;

 		debug("%s: Found free context bank %d (cbar %#x)\n",
 		      priv->dev->name, i, cbar);
 		type = CBAR_TYPE_S1_TRANS_S2_BYPASS;
 		vmid = 0;
 		cbar &= ~ARM_SMMU_CBAR_TYPE & ~ARM_SMMU_CBAR_VMID;
 		cbar |= FIELD_PREP(ARM_SMMU_CBAR_TYPE, type) |
 			FIELD_PREP(ARM_SMMU_CBAR_VMID, vmid);
 		gr1_writel(priv, ARM_SMMU_GR1_CBAR(i), cbar);

 		val = IS_ENABLED(CONFIG_ARM64) == 1 ? ARM_SMMU_CBA2R_VA64 : 0;
 		gr1_setbits(priv, ARM_SMMU_GR1_CBA2R(i), val);
 		return i;
 	}

 	return -1;
 }

 /* Search for a context bank that is already configured for this stream
  * returns the context bank index or -ENOENT
  */
 static int find_smr(struct qcom_smmu_priv *priv, u16 stream_id)
 {
 	u32 val;
 	int i;

 	for (i = 0; i < priv->num_smr; i++) {
 		val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
 		if (!(val & ARM_SMMU_SMR_VALID) ||
 		    FIELD_GET(ARM_SMMU_SMR_ID, val) != stream_id)
 			continue;

 		return i;
 	}

 	return -ENOENT;
 }

 static int configure_smr_s2cr(struct qcom_smmu_priv *priv, struct mmu_dev *mdev)
 {
 	u32 val;
 	int i;

 	for (i = 0; i < priv->num_smr; i++) {
 		/* Configure SMR */
 		val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
 		if (val & ARM_SMMU_SMR_VALID)
 			continue;

 		val = mdev->sid | ARM_SMMU_SMR_VALID;
 		gr0_writel(priv, ARM_SMMU_GR0_SMR(i), val);

 		/*
 		 * WARNING: Don't change this to use S2CR_TYPE_BYPASS!
 		 * Some Qualcomm boards have angry hypervisor firmware
 		 * that converts S2CR type BYPASS to type FAULT on write.
 		 * We don't use virtual addressing for these boards in
 		 * u-boot so we can get away with using S2CR_TYPE_TRANS
 		 * instead
 		 */
 		val = FIELD_PREP(ARM_SMMU_S2CR_TYPE, S2CR_TYPE_TRANS) |
 		      FIELD_PREP(ARM_SMMU_S2CR_CBNDX, mdev->cbx);
 		gr0_writel(priv, ARM_SMMU_GR0_S2CR(i), val);

 		mdev->smr = i;
 		break;
 	}

 	/* Make sure our writes went through */
 	mb();

 	return 0;
 }

 static int qcom_smmu_connect(struct udevice *dev)
 {
 	struct mmu_dev *mdev;
 	struct qcom_smmu_priv *priv;
 	int ret;

 	debug("%s: %s -> %s\n", __func__, dev->name, dev->iommu->name);

 	priv = dev_get_priv(dev->iommu);
 	if (WARN_ON(!priv))
 		return -EINVAL;

 	mdev = alloc_dev(dev);
 	if (IS_ERR(mdev) && PTR_ERR(mdev) != -EEXIST) {
 		printf("%s: %s Couldn't create mmu context\n", __func__,
 		       dev->name);
 		return PTR_ERR(mdev);
 	} else if (IS_ERR(mdev)) { // -EEXIST
 		return 0;
 	}

 	if (find_smr(priv, mdev->sid) >= 0) {
 		debug("Found existing context bank for %s, skipping init\n",
 		      dev->name);
 		return 0;
 	}

 	ret = alloc_cb(priv);
 	if (ret < 0 || ret > 0xff) {
 		printf("Error: %s: failed to allocate context bank for %s\n",
 		       __func__, dev->name);
 		return 0;
 	}
 	mdev->cbx = ret;

 	/* Configure context bank registers */
 	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TTBR0, 0x0);
 	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TTBR1, 0x0);
 	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_S1_MAIR0, 0x0);
 	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_S1_MAIR1, 0x0);
 	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_SCTLR,
 		   ARM_SMMU_SCTLR_CFIE | ARM_SMMU_SCTLR_CFRE |
 			   ARM_SMMU_SCTLR_CFCFG);
 	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TCR, 0x0);

 	/* Ensure that our writes went through */
 	mb();

 	configure_smr_s2cr(priv, mdev);

 	return 0;
 }

 #ifdef DEBUG
 static inline void dump_boot_mappings(struct qcom_smmu_priv *priv)
 {
 	u32 val;
 	int i;

 	debug("  SMMU dump boot mappings:\n");
 	for (i = 0; i < priv->num_smr; i++) {
 		val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
 		if (val & ARM_SMMU_SMR_VALID)
 			debug("\tSMR %3d: SID: %#lx\n", i,
 			      FIELD_GET(ARM_SMMU_SMR_ID, val));
 	}
 }
 #else
 #define dump_boot_mappings(priv) \
 	do {                     \
 	} while (0)
 #endif

 static int qcom_smmu_probe(struct udevice *dev)
 {
 	struct qcom_smmu_priv *priv;
 	u32 val;

 	priv = dev_get_priv(dev);
 	priv->dev = dev;
 	priv->base = dev_read_addr(dev);
 	INIT_LIST_HEAD(&priv->devices);

 	/* Read SMMU config */
 	val = gr0_readl(priv, ARM_SMMU_GR0_ID0);
 	priv->num_smr = FIELD_GET(ARM_SMMU_ID0_NUMSMRG, val);

 	val = gr0_readl(priv, ARM_SMMU_GR0_ID1);
 	priv->num_cb = FIELD_GET(ARM_SMMU_ID1_NUMCB, val);
 	priv->pgshift = FIELD_GET(ARM_SMMU_ID1_PAGESIZE, val) ? 16 : 12;
 	priv->cb_pg_offset = 1
 			     << (FIELD_GET(ARM_SMMU_ID1_NUMPAGENDXB, val) + 1);

 	dump_boot_mappings(priv);

 	return 0;
 }

 static int qcom_smmu_remove(struct udevice *dev)
 {
 	(void)dev;
 	/*
 	 * We should probably try and de-configure things here,
 	 * however I'm yet to find a way to do it without crashing
 	 * and it seems like Linux doesn't care at all anyway.
 	 */

 	return 0;
 }

 static struct iommu_ops qcom_smmu_ops = {
 	.connect = qcom_smmu_connect,
 };

 static const struct udevice_id qcom_smmu500_ids[] = {
 	{ .compatible = "qcom,sdm845-smmu-500" },
 	{ .compatible = "qcom,smmu-500", },
 	{ /* sentinel */ }
 };

 U_BOOT_DRIVER(qcom_smmu500) = {
 	.name = "qcom_smmu500",
 	.id = UCLASS_IOMMU,
 	.of_match = qcom_smmu500_ids,
 	.priv_auto = sizeof(struct qcom_smmu_priv),
 	.ops = &qcom_smmu_ops,
 	.probe = qcom_smmu_probe,
 	.remove = qcom_smmu_remove,
 	.flags = DM_FLAG_OS_PREPARE,
 };
	// SPDX-License-Identifier: GPL-2.0+
	/*
	* Copyright (C) 2023 Linaro Ltd.
	* Basic ARM SMMU-500 driver, assuming a pre-initialised SMMU and only IDENTITY domains
	* this driver only implements the bare minimum to configure stream mappings for periphals
	* used by u-boot on platforms where the SMMU can't be disabled.
	*/

	#include <log.h>
	#include <cpu_func.h>
	#include <dm.h>
	#include <iommu.h>
	#include <linux/bitfield.h>
	#include <linux/list.h>
	#include <linux/err.h>
	#include <lmb.h>
	#include <memalign.h>
	#include <asm/io.h>

	#define ARM_SMMU_GR0 0
	#define ARM_SMMU_GR1 1

	#define ARM_SMMU_GR0_ID0 0x20
	#define ARM_SMMU_ID0_NUMSMRG GENMASK(7, 0) /* Number of stream mapping groups */
	#define ARM_SMMU_GR0_ID1 0x24
	#define ARM_SMMU_ID1_PAGESIZE \
	BIT(31) /* Page shift is 16 bits when set, otherwise 23 */
	#define ARM_SMMU_ID1_NUMPAGENDXB \
	GENMASK(30, 28) /* Number of pages before context banks */
	#define ARM_SMMU_ID1_NUMCB GENMASK(7, 0) /* Number of context banks supported */

	#define ARM_SMMU_GR1_CBAR(n) (0x0 + ((n) << 2))
	#define ARM_SMMU_CBAR_TYPE GENMASK(17, 16)
	#define ARM_SMMU_CBAR_VMID GENMASK(7, 0)
	enum arm_smmu_cbar_type {
	CBAR_TYPE_S2_TRANS,
	CBAR_TYPE_S1_TRANS_S2_BYPASS,
	CBAR_TYPE_S1_TRANS_S2_FAULT,
	CBAR_TYPE_S1_TRANS_S2_TRANS,
	};

	#define ARM_SMMU_GR1_CBA2R(n) (0x800 + ((n) << 2))
	#define ARM_SMMU_CBA2R_VA64 BIT(0)

	/* Per-CB system control register */
	#define ARM_SMMU_CB_SCTLR 0x0
	#define ARM_SMMU_SCTLR_CFCFG BIT(7) /* Stall on context fault */
	#define ARM_SMMU_SCTLR_CFIE BIT(6) /* Context fault interrupt enable */
	#define ARM_SMMU_SCTLR_CFRE BIT(5) /* Abort on context fault */

	/* Translation Table Base, holds address of translation table in memory to be used
	* for this context bank. Or 0 for bypass
	*/
	#define ARM_SMMU_CB_TTBR0 0x20
	#define ARM_SMMU_CB_TTBR1 0x28
	/* Translation Control Register, configured TTBR/TLB behaviour (0 for bypass) */
	#define ARM_SMMU_CB_TCR 0x30
	/* Memory Attribute Indirection, also 0 for bypass */
	#define ARM_SMMU_CB_S1_MAIR0 0x38
	#define ARM_SMMU_CB_S1_MAIR1 0x3c

	#define ARM_SMMU_GR0_SMR(n) (0x800 + ((n) << 2))
	#define ARM_SMMU_SMR_VALID BIT(31)
	#define ARM_SMMU_SMR_MASK GENMASK(31, 16) // Always 0 for now??
	#define ARM_SMMU_SMR_ID GENMASK(15, 0)

	#define ARM_SMMU_GR0_S2CR(n) (0xc00 + ((n) << 2))
	#define ARM_SMMU_S2CR_PRIVCFG GENMASK(25, 24)

	enum arm_smmu_s2cr_privcfg {
	S2CR_PRIVCFG_DEFAULT,
	S2CR_PRIVCFG_DIPAN,
	S2CR_PRIVCFG_UNPRIV,
	S2CR_PRIVCFG_PRIV,
	};

	#define ARM_SMMU_S2CR_TYPE GENMASK(17, 16)

	enum arm_smmu_s2cr_type {
	S2CR_TYPE_TRANS,
	S2CR_TYPE_BYPASS,
	S2CR_TYPE_FAULT,
	};

	#define ARM_SMMU_S2CR_EXIDVALID BIT(10)
	#define ARM_SMMU_S2CR_CBNDX GENMASK(7, 0)

	#define VMID_UNUSED 0xff

	struct qcom_smmu_priv {
	phys_addr_t base;
	struct list_head devices;
	struct udevice *dev;

	/* Read-once config */
	int num_cb;
	int num_smr;
	u32 pgshift;
	u32 cb_pg_offset;
	};

	struct mmu_dev {
	struct list_head li;
	struct udevice *dev;
	u16 sid;
	u16 cbx;
	u16 smr;
	};

	#define page_addr(priv, page) ((priv)->base + ((page) << (priv)->pgshift))

	#define smmu_readl(priv, page, offset) readl(page_addr(priv, page) + offset)
	#define gr0_readl(priv, offset) smmu_readl(priv, ARM_SMMU_GR0, offset)
	#define gr1_readl(priv, offset) smmu_readl(priv, ARM_SMMU_GR1, offset)
	#define cbx_readl(priv, cbx, offset) \
	smmu_readl(priv, (priv->cb_pg_offset) + cbx, offset)

	#define smmu_writel(priv, page, offset, value) \
	writel((value), page_addr(priv, page) + offset)
	#define gr0_writel(priv, offset, value) \
	smmu_writel(priv, ARM_SMMU_GR0, offset, (value))
	#define gr1_writel(priv, offset, value) \
	smmu_writel(priv, ARM_SMMU_GR1, offset, (value))
	#define cbx_writel(priv, cbx, offset, value) \
	smmu_writel(priv, (priv->cb_pg_offset) + cbx, offset, value)

	#define gr1_setbits(priv, offset, value) \
	gr1_writel(priv, offset, gr1_readl(priv, offset) \| (value))

	static int get_stream_id(struct udevice *dev)
	{
	ofnode node = dev_ofnode(dev);
	struct ofnode_phandle_args args;
	int count = ofnode_parse_phandle_with_args(node, "iommus",
	"#iommu-cells", 0, 0, &args);

	if (count < 0 \|\| args.args[0] == 0) {
	printf("Error: %s: iommus property not found or wrong number of cells\n",
	__func__);
	return -EINVAL;
	}

	return args.args[0]; // Some mask from bit 16 onward?
	}

	static struct mmu_dev alloc_dev(struct udevice dev)
	{
	struct qcom_smmu_priv *priv = dev_get_priv(dev->iommu);
	struct mmu_dev *mmu_dev;
	int sid;

	sid = get_stream_id(dev);
	debug("%s %s has SID %#x\n", dev->iommu->name, dev->name, sid);
	if (sid < 0 \|\| sid > 0xffff) {
	printf("\tSMMU: Invalid stream ID for %s\n", dev->name);
	return ERR_PTR(-EINVAL);
	}

	/* We only support a single SID per device for now */
	list_for_each_entry(mmu_dev, &priv->devices, li) {
	if (mmu_dev->sid == sid)
	return ERR_PTR(-EEXIST);
	}

	mmu_dev = calloc(sizeof(*mmu_dev), 1);
	if (!mmu_dev)
	return ERR_PTR(-ENOMEM);

	mmu_dev->dev = dev;
	mmu_dev->sid = sid;

	list_add_tail(&mmu_dev->li, &priv->devices);

	return mmu_dev;
	}

	/* Find and init the first free context bank */
	static int alloc_cb(struct qcom_smmu_priv *priv)
	{
	u32 cbar, type, vmid, val;

	for (int i = 0; i < priv->num_cb; i++) {
	cbar = gr1_readl(priv, ARM_SMMU_GR1_CBAR(i));
	type = FIELD_GET(ARM_SMMU_CBAR_TYPE, cbar);
	vmid = FIELD_GET(ARM_SMMU_CBAR_VMID, cbar);

	/* Check that the context bank is available. We haven't reset the SMMU so
	* we just make a best guess.
	*/
	if (type != CBAR_TYPE_S2_TRANS &&
	(type != CBAR_TYPE_S1_TRANS_S2_BYPASS \|\|
	vmid != VMID_UNUSED))
	continue;

	debug("%s: Found free context bank %d (cbar %#x)\n",
	priv->dev->name, i, cbar);
	type = CBAR_TYPE_S1_TRANS_S2_BYPASS;
	vmid = 0;
	cbar &= ~ARM_SMMU_CBAR_TYPE & ~ARM_SMMU_CBAR_VMID;
	cbar \|= FIELD_PREP(ARM_SMMU_CBAR_TYPE, type) \|
	FIELD_PREP(ARM_SMMU_CBAR_VMID, vmid);
	gr1_writel(priv, ARM_SMMU_GR1_CBAR(i), cbar);

	val = IS_ENABLED(CONFIG_ARM64) == 1 ? ARM_SMMU_CBA2R_VA64 : 0;
	gr1_setbits(priv, ARM_SMMU_GR1_CBA2R(i), val);
	return i;
	}

	return -1;
	}

	/* Search for a context bank that is already configured for this stream
	* returns the context bank index or -ENOENT
	*/
	static int find_smr(struct qcom_smmu_priv *priv, u16 stream_id)
	{
	u32 val;
	int i;

	for (i = 0; i < priv->num_smr; i++) {
	val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
	if (!(val & ARM_SMMU_SMR_VALID) \|\|
	FIELD_GET(ARM_SMMU_SMR_ID, val) != stream_id)
	continue;

	return i;
	}

	return -ENOENT;
	}

	static int configure_smr_s2cr(struct qcom_smmu_priv priv, struct mmu_dev mdev)
	{
	u32 val;
	int i;

	for (i = 0; i < priv->num_smr; i++) {
	/* Configure SMR */
	val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
	if (val & ARM_SMMU_SMR_VALID)
	continue;

	val = mdev->sid \| ARM_SMMU_SMR_VALID;
	gr0_writel(priv, ARM_SMMU_GR0_SMR(i), val);

	/*
	* WARNING: Don't change this to use S2CR_TYPE_BYPASS!
	* Some Qualcomm boards have angry hypervisor firmware
	* that converts S2CR type BYPASS to type FAULT on write.
	* We don't use virtual addressing for these boards in
	* u-boot so we can get away with using S2CR_TYPE_TRANS
	* instead
	*/
	val = FIELD_PREP(ARM_SMMU_S2CR_TYPE, S2CR_TYPE_TRANS) \|
	FIELD_PREP(ARM_SMMU_S2CR_CBNDX, mdev->cbx);
	gr0_writel(priv, ARM_SMMU_GR0_S2CR(i), val);

	mdev->smr = i;
	break;
	}

	/* Make sure our writes went through */
	mb();

	return 0;
	}

	static int qcom_smmu_connect(struct udevice *dev)
	{
	struct mmu_dev *mdev;
	struct qcom_smmu_priv *priv;
	int ret;

	debug("%s: %s -> %s\n", __func__, dev->name, dev->iommu->name);

	priv = dev_get_priv(dev->iommu);
	if (WARN_ON(!priv))
	return -EINVAL;

	mdev = alloc_dev(dev);
	if (IS_ERR(mdev) && PTR_ERR(mdev) != -EEXIST) {
	printf("%s: %s Couldn't create mmu context\n", __func__,
	dev->name);
	return PTR_ERR(mdev);
	} else if (IS_ERR(mdev)) { // -EEXIST
	return 0;
	}

	if (find_smr(priv, mdev->sid) >= 0) {
	debug("Found existing context bank for %s, skipping init\n",
	dev->name);
	return 0;
	}

	ret = alloc_cb(priv);
	if (ret < 0 \|\| ret > 0xff) {
	printf("Error: %s: failed to allocate context bank for %s\n",
	__func__, dev->name);
	return 0;
	}
	mdev->cbx = ret;

	/* Configure context bank registers */
	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TTBR0, 0x0);
	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TTBR1, 0x0);
	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_S1_MAIR0, 0x0);
	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_S1_MAIR1, 0x0);
	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_SCTLR,
	ARM_SMMU_SCTLR_CFIE \| ARM_SMMU_SCTLR_CFRE \|
	ARM_SMMU_SCTLR_CFCFG);
	cbx_writel(priv, mdev->cbx, ARM_SMMU_CB_TCR, 0x0);

	/* Ensure that our writes went through */
	mb();

	configure_smr_s2cr(priv, mdev);

	return 0;
	}

	#ifdef DEBUG
	static inline void dump_boot_mappings(struct qcom_smmu_priv *priv)
	{
	u32 val;
	int i;

	debug(" SMMU dump boot mappings:\n");
	for (i = 0; i < priv->num_smr; i++) {
	val = gr0_readl(priv, ARM_SMMU_GR0_SMR(i));
	if (val & ARM_SMMU_SMR_VALID)
	debug("\tSMR %3d: SID: %#lx\n", i,
	FIELD_GET(ARM_SMMU_SMR_ID, val));
	}
	}
	#else
	#define dump_boot_mappings(priv) \
	do { \
	} while (0)
	#endif

	static int qcom_smmu_probe(struct udevice *dev)
	{
	struct qcom_smmu_priv *priv;
	u32 val;

	priv = dev_get_priv(dev);
	priv->dev = dev;
	priv->base = dev_read_addr(dev);
	INIT_LIST_HEAD(&priv->devices);

	/* Read SMMU config */
	val = gr0_readl(priv, ARM_SMMU_GR0_ID0);
	priv->num_smr = FIELD_GET(ARM_SMMU_ID0_NUMSMRG, val);

	val = gr0_readl(priv, ARM_SMMU_GR0_ID1);
	priv->num_cb = FIELD_GET(ARM_SMMU_ID1_NUMCB, val);
	priv->pgshift = FIELD_GET(ARM_SMMU_ID1_PAGESIZE, val) ? 16 : 12;
	priv->cb_pg_offset = 1
	<< (FIELD_GET(ARM_SMMU_ID1_NUMPAGENDXB, val) + 1);

	dump_boot_mappings(priv);

	return 0;
	}

	static int qcom_smmu_remove(struct udevice *dev)
	{
	(void)dev;
	/*
	* We should probably try and de-configure things here,
	* however I'm yet to find a way to do it without crashing
	* and it seems like Linux doesn't care at all anyway.
	*/

	return 0;
	}

	static struct iommu_ops qcom_smmu_ops = {
	.connect = qcom_smmu_connect,
	};

	static const struct udevice_id qcom_smmu500_ids[] = {
	{ .compatible = "qcom,sdm845-smmu-500" },
	{ .compatible = "qcom,smmu-500", },
	{ /* sentinel */ }
	};

	U_BOOT_DRIVER(qcom_smmu500) = {
	.name = "qcom_smmu500",
	.id = UCLASS_IOMMU,
	.of_match = qcom_smmu500_ids,
	.priv_auto = sizeof(struct qcom_smmu_priv),
	.ops = &qcom_smmu_ops,
	.probe = qcom_smmu_probe,
	.remove = qcom_smmu_remove,
	.flags = DM_FLAG_OS_PREPARE,
	};