1 // SPDX-License-Identifier: GPL-2.0-only
2 /* Copyright(c) 2020 Intel Corporation. All rights reserved. */
3 #include <linux/io-64-nonatomic-lo-hi.h>
4 #include <linux/moduleparam.h>
5 #include <linux/module.h>
6 #include <linux/delay.h>
7 #include <linux/sizes.h>
8 #include <linux/mutex.h>
9 #include <linux/list.h>
10 #include <linux/pci.h>
11 #include <linux/pci-doe.h>
20 * This implements the PCI exclusive functionality for a CXL device as it is
21 * defined by the Compute Express Link specification. CXL devices may surface
22 * certain functionality even if it isn't CXL enabled. While this driver is
23 * focused around the PCI specific aspects of a CXL device, it binds to the
24 * specific CXL memory device class code, and therefore the implementation of
25 * cxl_pci is focused around CXL memory devices.
27 * The driver has several responsibilities, mainly:
28 * - Create the memX device and register on the CXL bus.
29 * - Enumerate device's register interface and map them.
30 * - Registers nvdimm bridge device with cxl_core.
31 * - Registers a CXL mailbox with cxl_core.
34 #define cxl_doorbell_busy(cxlds) \
35 (readl((cxlds)->regs.mbox + CXLDEV_MBOX_CTRL_OFFSET) & \
36 CXLDEV_MBOX_CTRL_DOORBELL)
38 /* CXL 2.0 - 8.2.8.4 */
39 #define CXL_MAILBOX_TIMEOUT_MS (2 * HZ)
42 * CXL 2.0 ECN "Add Mailbox Ready Time" defines a capability field to
43 * dictate how long to wait for the mailbox to become ready. The new
44 * field allows the device to tell software the amount of time to wait
45 * before mailbox ready. This field per the spec theoretically allows
46 * for up to 255 seconds. 255 seconds is unreasonably long, its longer
47 * than the maximum SATA port link recovery wait. Default to 60 seconds
48 * until someone builds a CXL device that needs more time in practice.
50 static unsigned short mbox_ready_timeout = 60;
51 module_param(mbox_ready_timeout, ushort, 0644);
52 MODULE_PARM_DESC(mbox_ready_timeout, "seconds to wait for mailbox ready");
54 static int cxl_pci_mbox_wait_for_doorbell(struct cxl_dev_state *cxlds)
56 const unsigned long start = jiffies;
57 unsigned long end = start;
59 while (cxl_doorbell_busy(cxlds)) {
62 if (time_after(end, start + CXL_MAILBOX_TIMEOUT_MS)) {
63 /* Check again in case preempted before timeout test */
64 if (!cxl_doorbell_busy(cxlds))
71 dev_dbg(cxlds->dev, "Doorbell wait took %dms",
72 jiffies_to_msecs(end) - jiffies_to_msecs(start));
76 #define cxl_err(dev, status, msg) \
77 dev_err_ratelimited(dev, msg ", device state %s%s\n", \
78 status & CXLMDEV_DEV_FATAL ? " fatal" : "", \
79 status & CXLMDEV_FW_HALT ? " firmware-halt" : "")
81 #define cxl_cmd_err(dev, cmd, status, msg) \
82 dev_err_ratelimited(dev, msg " (opcode: %#x), device state %s%s\n", \
84 status & CXLMDEV_DEV_FATAL ? " fatal" : "", \
85 status & CXLMDEV_FW_HALT ? " firmware-halt" : "")
88 * __cxl_pci_mbox_send_cmd() - Execute a mailbox command
89 * @cxlds: The device state to communicate with.
90 * @mbox_cmd: Command to send to the memory device.
92 * Context: Any context. Expects mbox_mutex to be held.
93 * Return: -ETIMEDOUT if timeout occurred waiting for completion. 0 on success.
94 * Caller should check the return code in @mbox_cmd to make sure it
97 * This is a generic form of the CXL mailbox send command thus only using the
98 * registers defined by the mailbox capability ID - CXL 2.0 8.2.8.4. Memory
99 * devices, and perhaps other types of CXL devices may have further information
100 * available upon error conditions. Driver facilities wishing to send mailbox
101 * commands should use the wrapper command.
103 * The CXL spec allows for up to two mailboxes. The intention is for the primary
104 * mailbox to be OS controlled and the secondary mailbox to be used by system
105 * firmware. This allows the OS and firmware to communicate with the device and
106 * not need to coordinate with each other. The driver only uses the primary
109 static int __cxl_pci_mbox_send_cmd(struct cxl_dev_state *cxlds,
110 struct cxl_mbox_cmd *mbox_cmd)
112 void __iomem *payload = cxlds->regs.mbox + CXLDEV_MBOX_PAYLOAD_OFFSET;
113 struct device *dev = cxlds->dev;
114 u64 cmd_reg, status_reg;
118 lockdep_assert_held(&cxlds->mbox_mutex);
121 * Here are the steps from 8.2.8.4 of the CXL 2.0 spec.
122 * 1. Caller reads MB Control Register to verify doorbell is clear
123 * 2. Caller writes Command Register
124 * 3. Caller writes Command Payload Registers if input payload is non-empty
125 * 4. Caller writes MB Control Register to set doorbell
126 * 5. Caller either polls for doorbell to be clear or waits for interrupt if configured
127 * 6. Caller reads MB Status Register to fetch Return code
128 * 7. If command successful, Caller reads Command Register to get Payload Length
129 * 8. If output payload is non-empty, host reads Command Payload Registers
131 * Hardware is free to do whatever it wants before the doorbell is rung,
132 * and isn't allowed to change anything after it clears the doorbell. As
133 * such, steps 2 and 3 can happen in any order, and steps 6, 7, 8 can
134 * also happen in any order (though some orders might not make sense).
138 if (cxl_doorbell_busy(cxlds)) {
140 readq(cxlds->regs.memdev + CXLMDEV_STATUS_OFFSET);
142 cxl_cmd_err(cxlds->dev, mbox_cmd, md_status,
143 "mailbox queue busy");
147 cmd_reg = FIELD_PREP(CXLDEV_MBOX_CMD_COMMAND_OPCODE_MASK,
149 if (mbox_cmd->size_in) {
150 if (WARN_ON(!mbox_cmd->payload_in))
153 cmd_reg |= FIELD_PREP(CXLDEV_MBOX_CMD_PAYLOAD_LENGTH_MASK,
155 memcpy_toio(payload, mbox_cmd->payload_in, mbox_cmd->size_in);
159 writeq(cmd_reg, cxlds->regs.mbox + CXLDEV_MBOX_CMD_OFFSET);
162 dev_dbg(dev, "Sending command\n");
163 writel(CXLDEV_MBOX_CTRL_DOORBELL,
164 cxlds->regs.mbox + CXLDEV_MBOX_CTRL_OFFSET);
167 rc = cxl_pci_mbox_wait_for_doorbell(cxlds);
168 if (rc == -ETIMEDOUT) {
169 u64 md_status = readq(cxlds->regs.memdev + CXLMDEV_STATUS_OFFSET);
171 cxl_cmd_err(cxlds->dev, mbox_cmd, md_status, "mailbox timeout");
176 status_reg = readq(cxlds->regs.mbox + CXLDEV_MBOX_STATUS_OFFSET);
177 mbox_cmd->return_code =
178 FIELD_GET(CXLDEV_MBOX_STATUS_RET_CODE_MASK, status_reg);
180 if (mbox_cmd->return_code != CXL_MBOX_CMD_RC_SUCCESS) {
181 dev_dbg(dev, "Mailbox operation had an error: %s\n",
182 cxl_mbox_cmd_rc2str(mbox_cmd));
183 return 0; /* completed but caller must check return_code */
187 cmd_reg = readq(cxlds->regs.mbox + CXLDEV_MBOX_CMD_OFFSET);
188 out_len = FIELD_GET(CXLDEV_MBOX_CMD_PAYLOAD_LENGTH_MASK, cmd_reg);
191 if (out_len && mbox_cmd->payload_out) {
193 * Sanitize the copy. If hardware misbehaves, out_len per the
194 * spec can actually be greater than the max allowed size (21
195 * bits available but spec defined 1M max). The caller also may
196 * have requested less data than the hardware supplied even
199 size_t n = min3(mbox_cmd->size_out, cxlds->payload_size, out_len);
201 memcpy_fromio(mbox_cmd->payload_out, payload, n);
202 mbox_cmd->size_out = n;
204 mbox_cmd->size_out = 0;
210 static int cxl_pci_mbox_send(struct cxl_dev_state *cxlds, struct cxl_mbox_cmd *cmd)
214 mutex_lock_io(&cxlds->mbox_mutex);
215 rc = __cxl_pci_mbox_send_cmd(cxlds, cmd);
216 mutex_unlock(&cxlds->mbox_mutex);
221 static int cxl_pci_setup_mailbox(struct cxl_dev_state *cxlds)
223 const int cap = readl(cxlds->regs.mbox + CXLDEV_MBOX_CAPS_OFFSET);
224 unsigned long timeout;
227 timeout = jiffies + mbox_ready_timeout * HZ;
229 md_status = readq(cxlds->regs.memdev + CXLMDEV_STATUS_OFFSET);
230 if (md_status & CXLMDEV_MBOX_IF_READY)
232 if (msleep_interruptible(100))
234 } while (!time_after(jiffies, timeout));
236 if (!(md_status & CXLMDEV_MBOX_IF_READY)) {
237 cxl_err(cxlds->dev, md_status,
238 "timeout awaiting mailbox ready");
243 * A command may be in flight from a previous driver instance,
244 * think kexec, do one doorbell wait so that
245 * __cxl_pci_mbox_send_cmd() can assume that it is the only
246 * source for future doorbell busy events.
248 if (cxl_pci_mbox_wait_for_doorbell(cxlds) != 0) {
249 cxl_err(cxlds->dev, md_status, "timeout awaiting mailbox idle");
253 cxlds->mbox_send = cxl_pci_mbox_send;
254 cxlds->payload_size =
255 1 << FIELD_GET(CXLDEV_MBOX_CAP_PAYLOAD_SIZE_MASK, cap);
258 * CXL 2.0 8.2.8.4.3 Mailbox Capabilities Register
260 * If the size is too small, mandatory commands will not work and so
261 * there's no point in going forward. If the size is too large, there's
262 * no harm is soft limiting it.
264 cxlds->payload_size = min_t(size_t, cxlds->payload_size, SZ_1M);
265 if (cxlds->payload_size < 256) {
266 dev_err(cxlds->dev, "Mailbox is too small (%zub)",
267 cxlds->payload_size);
271 dev_dbg(cxlds->dev, "Mailbox payload sized %zu",
272 cxlds->payload_size);
277 static int cxl_map_regblock(struct pci_dev *pdev, struct cxl_register_map *map)
280 int bar = map->barno;
281 struct device *dev = &pdev->dev;
282 resource_size_t offset = map->block_offset;
284 /* Basic sanity check that BAR is big enough */
285 if (pci_resource_len(pdev, bar) < offset) {
286 dev_err(dev, "BAR%d: %pr: too small (offset: %pa)\n", bar,
287 &pdev->resource[bar], &offset);
291 addr = pci_iomap(pdev, bar, 0);
293 dev_err(dev, "failed to map registers\n");
297 dev_dbg(dev, "Mapped CXL Memory Device resource bar %u @ %pa\n",
300 map->base = addr + map->block_offset;
304 static void cxl_unmap_regblock(struct pci_dev *pdev,
305 struct cxl_register_map *map)
307 pci_iounmap(pdev, map->base - map->block_offset);
311 static int cxl_probe_regs(struct pci_dev *pdev, struct cxl_register_map *map)
313 struct cxl_component_reg_map *comp_map;
314 struct cxl_device_reg_map *dev_map;
315 struct device *dev = &pdev->dev;
316 void __iomem *base = map->base;
318 switch (map->reg_type) {
319 case CXL_REGLOC_RBI_COMPONENT:
320 comp_map = &map->component_map;
321 cxl_probe_component_regs(dev, base, comp_map);
322 if (!comp_map->hdm_decoder.valid) {
323 dev_err(dev, "HDM decoder registers not found\n");
327 dev_dbg(dev, "Set up component registers\n");
329 case CXL_REGLOC_RBI_MEMDEV:
330 dev_map = &map->device_map;
331 cxl_probe_device_regs(dev, base, dev_map);
332 if (!dev_map->status.valid || !dev_map->mbox.valid ||
333 !dev_map->memdev.valid) {
334 dev_err(dev, "registers not found: %s%s%s\n",
335 !dev_map->status.valid ? "status " : "",
336 !dev_map->mbox.valid ? "mbox " : "",
337 !dev_map->memdev.valid ? "memdev " : "");
341 dev_dbg(dev, "Probing device registers...\n");
350 static int cxl_map_regs(struct cxl_dev_state *cxlds, struct cxl_register_map *map)
352 struct device *dev = cxlds->dev;
353 struct pci_dev *pdev = to_pci_dev(dev);
355 switch (map->reg_type) {
356 case CXL_REGLOC_RBI_COMPONENT:
357 cxl_map_component_regs(pdev, &cxlds->regs.component, map);
358 dev_dbg(dev, "Mapping component registers...\n");
360 case CXL_REGLOC_RBI_MEMDEV:
361 cxl_map_device_regs(pdev, &cxlds->regs.device_regs, map);
362 dev_dbg(dev, "Probing device registers...\n");
371 static int cxl_setup_regs(struct pci_dev *pdev, enum cxl_regloc_type type,
372 struct cxl_register_map *map)
376 rc = cxl_find_regblock(pdev, type, map);
380 rc = cxl_map_regblock(pdev, map);
384 rc = cxl_probe_regs(pdev, map);
385 cxl_unmap_regblock(pdev, map);
390 static void cxl_pci_destroy_doe(void *mbs)
395 static void devm_cxl_pci_create_doe(struct cxl_dev_state *cxlds)
397 struct device *dev = cxlds->dev;
398 struct pci_dev *pdev = to_pci_dev(dev);
401 xa_init(&cxlds->doe_mbs);
402 if (devm_add_action(&pdev->dev, cxl_pci_destroy_doe, &cxlds->doe_mbs)) {
403 dev_err(dev, "Failed to create XArray for DOE's\n");
408 * Mailbox creation is best effort. Higher layers must determine if
409 * the lack of a mailbox for their protocol is a device failure or not.
411 pci_doe_for_each_off(pdev, off) {
412 struct pci_doe_mb *doe_mb;
414 doe_mb = pcim_doe_create_mb(pdev, off);
415 if (IS_ERR(doe_mb)) {
416 dev_err(dev, "Failed to create MB object for MB @ %x\n",
421 if (!pci_request_config_region_exclusive(pdev, off,
424 pci_err(pdev, "Failed to exclude DOE registers\n");
426 if (xa_insert(&cxlds->doe_mbs, off, doe_mb, GFP_KERNEL)) {
427 dev_err(dev, "xa_insert failed to insert MB @ %x\n",
432 dev_dbg(dev, "Created DOE mailbox @%x\n", off);
436 static int cxl_pci_probe(struct pci_dev *pdev, const struct pci_device_id *id)
438 struct cxl_register_map map;
439 struct cxl_memdev *cxlmd;
440 struct cxl_dev_state *cxlds;
444 * Double check the anonymous union trickery in struct cxl_regs
445 * FIXME switch to struct_group()
447 BUILD_BUG_ON(offsetof(struct cxl_regs, memdev) !=
448 offsetof(struct cxl_regs, device_regs.memdev));
450 rc = pcim_enable_device(pdev);
454 cxlds = cxl_dev_state_create(&pdev->dev);
456 return PTR_ERR(cxlds);
458 cxlds->serial = pci_get_dsn(pdev);
459 cxlds->cxl_dvsec = pci_find_dvsec_capability(
460 pdev, PCI_DVSEC_VENDOR_ID_CXL, CXL_DVSEC_PCIE_DEVICE);
461 if (!cxlds->cxl_dvsec)
463 "Device DVSEC not present, skip CXL.mem init\n");
465 rc = cxl_setup_regs(pdev, CXL_REGLOC_RBI_MEMDEV, &map);
469 rc = cxl_map_regs(cxlds, &map);
474 * If the component registers can't be found, the cxl_pci driver may
475 * still be useful for management functions so don't return an error.
477 cxlds->component_reg_phys = CXL_RESOURCE_NONE;
478 rc = cxl_setup_regs(pdev, CXL_REGLOC_RBI_COMPONENT, &map);
480 dev_warn(&pdev->dev, "No component registers (%d)\n", rc);
482 cxlds->component_reg_phys = cxl_regmap_to_base(pdev, &map);
484 devm_cxl_pci_create_doe(cxlds);
486 rc = cxl_pci_setup_mailbox(cxlds);
490 rc = cxl_enumerate_cmds(cxlds);
494 rc = cxl_dev_state_identify(cxlds);
498 rc = cxl_mem_create_range_info(cxlds);
502 cxlmd = devm_cxl_add_memdev(cxlds);
504 return PTR_ERR(cxlmd);
509 static const struct pci_device_id cxl_mem_pci_tbl[] = {
510 /* PCI class code for CXL.mem Type-3 Devices */
511 { PCI_DEVICE_CLASS((PCI_CLASS_MEMORY_CXL << 8 | CXL_MEMORY_PROGIF), ~0)},
512 { /* terminate list */ },
514 MODULE_DEVICE_TABLE(pci, cxl_mem_pci_tbl);
516 static struct pci_driver cxl_pci_driver = {
517 .name = KBUILD_MODNAME,
518 .id_table = cxl_mem_pci_tbl,
519 .probe = cxl_pci_probe,
521 .probe_type = PROBE_PREFER_ASYNCHRONOUS,
525 MODULE_LICENSE("GPL v2");
526 module_pci_driver(cxl_pci_driver);
527 MODULE_IMPORT_NS(CXL);