3 * Copyright (C) 1995-1996 Gary Thomas (gdt@linuxppc.org)
5 * Rewritten by Cort Dougan (cort@cs.nmt.edu) for PReP
6 * Copyright (C) 1996 Cort Dougan <cort@cs.nmt.edu>
7 * Adapted for Power Macintosh by Paul Mackerras.
8 * Low-level exception handlers and MMU support
9 * rewritten by Paul Mackerras.
10 * Copyright (C) 1996 Paul Mackerras.
12 * Adapted for 64bit PowerPC by Dave Engebretsen, Peter Bergner, and
13 * Mike Corrigan {engebret|bergner|mikejc}@us.ibm.com
15 * This file contains the low-level support and setup for the
16 * PowerPC-64 platform, including trap and interrupt dispatch.
18 * This program is free software; you can redistribute it and/or
19 * modify it under the terms of the GNU General Public License
20 * as published by the Free Software Foundation; either version
21 * 2 of the License, or (at your option) any later version.
24 #include <linux/threads.h>
28 #include <asm/ppc_asm.h>
29 #include <asm/asm-offsets.h>
31 #include <asm/cputable.h>
32 #include <asm/setup.h>
33 #include <asm/hvcall.h>
34 #include <asm/iseries/lpar_map.h>
35 #include <asm/thread_info.h>
36 #include <asm/firmware.h>
37 #include <asm/page_64.h>
39 #define DO_SOFT_DISABLE
42 * We layout physical memory as follows:
43 * 0x0000 - 0x00ff : Secondary processor spin code
44 * 0x0100 - 0x2fff : pSeries Interrupt prologs
45 * 0x3000 - 0x5fff : interrupt support, iSeries and common interrupt prologs
46 * 0x6000 - 0x6fff : Initial (CPU0) segment table
47 * 0x7000 - 0x7fff : FWNMI data area
48 * 0x8000 - : Early init and support code
56 * SPRG0 reserved for hypervisor
57 * SPRG1 temp - used to save gpr
58 * SPRG2 temp - used to save gpr
59 * SPRG3 virt addr of paca
63 * Entering into this code we make the following assumptions:
65 * 1. The MMU is off & open firmware is running in real mode.
66 * 2. The kernel is entered at __start
69 * 1. The MMU is on (as it always is for iSeries)
70 * 2. The kernel is entered at system_reset_iSeries
77 /* NOP this out unconditionally */
79 b .__start_initialization_multiplatform
82 /* Catch branch to 0 in real mode */
85 /* Secondary processors spin on this value until it goes to 1. */
86 .globl __secondary_hold_spinloop
87 __secondary_hold_spinloop:
90 /* Secondary processors write this value with their cpu # */
91 /* after they enter the spin loop immediately below. */
92 .globl __secondary_hold_acknowledge
93 __secondary_hold_acknowledge:
96 #ifdef CONFIG_PPC_ISERIES
98 * At offset 0x20, there is a pointer to iSeries LPAR data.
99 * This is required by the hypervisor
102 .llong hvReleaseData-KERNELBASE
103 #endif /* CONFIG_PPC_ISERIES */
107 * The following code is used to hold secondary processors
108 * in a spin loop after they have entered the kernel, but
109 * before the bulk of the kernel has been relocated. This code
110 * is relocated to physical address 0x60 before prom_init is run.
111 * All of it must fit below the first exception vector at 0x100.
113 _GLOBAL(__secondary_hold)
116 mtmsrd r24 /* RI on */
118 /* Grab our physical cpu number */
121 /* Tell the master cpu we're here */
122 /* Relocation is off & we are located at an address less */
123 /* than 0x100, so only need to grab low order offset. */
124 std r24,__secondary_hold_acknowledge@l(0)
127 /* All secondary cpus wait here until told to start. */
128 100: ld r4,__secondary_hold_spinloop@l(0)
132 #if defined(CONFIG_SMP) || defined(CONFIG_KEXEC)
133 LOAD_REG_IMMEDIATE(r4, .generic_secondary_smp_init)
141 /* This value is used to mark exception frames on the stack. */
144 .tc ID_72656773_68657265[TC],0x7265677368657265
148 * The following macros define the code that appears as
149 * the prologue to each of the exception handlers. They
150 * are split into two parts to allow a single kernel binary
151 * to be used for pSeries and iSeries.
152 * LOL. One day... - paulus
156 * We make as much of the exception code common between native
157 * exception handlers (including pSeries LPAR) and iSeries LPAR
158 * implementations as possible.
162 * This is the start of the interrupt handlers for pSeries
163 * This code runs with relocation off.
178 * We're short on space and time in the exception prolog, so we can't
179 * use the normal SET_REG_IMMEDIATE macro. Normally we just need the
180 * low halfword of the address, but for Kdump we need the whole low
183 #ifdef CONFIG_CRASH_DUMP
184 #define LOAD_HANDLER(reg, label) \
185 oris reg,reg,(label)@h; /* virt addr of handler ... */ \
186 ori reg,reg,(label)@l; /* .. and the rest */
188 #define LOAD_HANDLER(reg, label) \
189 ori reg,reg,(label)@l; /* virt addr of handler ... */
193 * Equal to EXCEPTION_PROLOG_PSERIES, except that it forces 64bit mode.
194 * The firmware calls the registered system_reset_fwnmi and
195 * machine_check_fwnmi handlers in 32bit mode if the cpu happens to run
196 * a 32bit application at the time of the event.
197 * This firmware bug is present on POWER4 and JS20.
199 #define EXCEPTION_PROLOG_PSERIES_FORCE_64BIT(area, label) \
200 mfspr r13,SPRN_SPRG3; /* get paca address into r13 */ \
201 std r9,area+EX_R9(r13); /* save r9 - r12 */ \
202 std r10,area+EX_R10(r13); \
203 std r11,area+EX_R11(r13); \
204 std r12,area+EX_R12(r13); \
205 mfspr r9,SPRN_SPRG1; \
206 std r9,area+EX_R13(r13); \
208 clrrdi r12,r13,32; /* get high part of &label */ \
210 /* force 64bit mode */ \
211 li r11,5; /* MSR_SF_LG|MSR_ISF_LG */ \
212 rldimi r10,r11,61,0; /* insert into top 3 bits */ \
213 /* done 64bit mode */ \
214 mfspr r11,SPRN_SRR0; /* save SRR0 */ \
215 LOAD_HANDLER(r12,label) \
216 ori r10,r10,MSR_IR|MSR_DR|MSR_RI; \
217 mtspr SPRN_SRR0,r12; \
218 mfspr r12,SPRN_SRR1; /* and SRR1 */ \
219 mtspr SPRN_SRR1,r10; \
221 b . /* prevent speculative execution */
223 #define EXCEPTION_PROLOG_PSERIES(area, label) \
224 mfspr r13,SPRN_SPRG3; /* get paca address into r13 */ \
225 std r9,area+EX_R9(r13); /* save r9 - r12 */ \
226 std r10,area+EX_R10(r13); \
227 std r11,area+EX_R11(r13); \
228 std r12,area+EX_R12(r13); \
229 mfspr r9,SPRN_SPRG1; \
230 std r9,area+EX_R13(r13); \
232 clrrdi r12,r13,32; /* get high part of &label */ \
234 mfspr r11,SPRN_SRR0; /* save SRR0 */ \
235 LOAD_HANDLER(r12,label) \
236 ori r10,r10,MSR_IR|MSR_DR|MSR_RI; \
237 mtspr SPRN_SRR0,r12; \
238 mfspr r12,SPRN_SRR1; /* and SRR1 */ \
239 mtspr SPRN_SRR1,r10; \
241 b . /* prevent speculative execution */
244 * This is the start of the interrupt handlers for iSeries
245 * This code runs with relocation on.
247 #define EXCEPTION_PROLOG_ISERIES_1(area) \
248 mfspr r13,SPRN_SPRG3; /* get paca address into r13 */ \
249 std r9,area+EX_R9(r13); /* save r9 - r12 */ \
250 std r10,area+EX_R10(r13); \
251 std r11,area+EX_R11(r13); \
252 std r12,area+EX_R12(r13); \
253 mfspr r9,SPRN_SPRG1; \
254 std r9,area+EX_R13(r13); \
257 #define EXCEPTION_PROLOG_ISERIES_2 \
259 ld r12,PACALPPACAPTR(r13); \
260 ld r11,LPPACASRR0(r12); \
261 ld r12,LPPACASRR1(r12); \
262 ori r10,r10,MSR_RI; \
266 * The common exception prolog is used for all except a few exceptions
267 * such as a segment miss on a kernel address. We have to be prepared
268 * to take another exception from the point where we first touch the
269 * kernel stack onwards.
271 * On entry r13 points to the paca, r9-r13 are saved in the paca,
272 * r9 contains the saved CR, r11 and r12 contain the saved SRR0 and
273 * SRR1, and relocation is on.
275 #define EXCEPTION_PROLOG_COMMON(n, area) \
276 andi. r10,r12,MSR_PR; /* See if coming from user */ \
277 mr r10,r1; /* Save r1 */ \
278 subi r1,r1,INT_FRAME_SIZE; /* alloc frame on kernel stack */ \
280 ld r1,PACAKSAVE(r13); /* kernel stack to use */ \
281 1: cmpdi cr1,r1,0; /* check if r1 is in userspace */ \
282 bge- cr1,2f; /* abort if it is */ \
284 2: li r1,(n); /* will be reloaded later */ \
285 sth r1,PACA_TRAP_SAVE(r13); \
287 3: std r9,_CCR(r1); /* save CR in stackframe */ \
288 std r11,_NIP(r1); /* save SRR0 in stackframe */ \
289 std r12,_MSR(r1); /* save SRR1 in stackframe */ \
290 std r10,0(r1); /* make stack chain pointer */ \
291 std r0,GPR0(r1); /* save r0 in stackframe */ \
292 std r10,GPR1(r1); /* save r1 in stackframe */ \
293 ACCOUNT_CPU_USER_ENTRY(r9, r10); \
294 std r2,GPR2(r1); /* save r2 in stackframe */ \
295 SAVE_4GPRS(3, r1); /* save r3 - r6 in stackframe */ \
296 SAVE_2GPRS(7, r1); /* save r7, r8 in stackframe */ \
297 ld r9,area+EX_R9(r13); /* move r9, r10 to stackframe */ \
298 ld r10,area+EX_R10(r13); \
301 ld r9,area+EX_R11(r13); /* move r11 - r13 to stackframe */ \
302 ld r10,area+EX_R12(r13); \
303 ld r11,area+EX_R13(r13); \
307 ld r2,PACATOC(r13); /* get kernel TOC into r2 */ \
308 mflr r9; /* save LR in stackframe */ \
310 mfctr r10; /* save CTR in stackframe */ \
312 lbz r10,PACASOFTIRQEN(r13); \
313 mfspr r11,SPRN_XER; /* save XER in stackframe */ \
317 std r9,_TRAP(r1); /* set trap number */ \
319 ld r11,exception_marker@toc(r2); \
320 std r10,RESULT(r1); /* clear regs->result */ \
321 std r11,STACK_FRAME_OVERHEAD-16(r1); /* mark the frame */
326 #define STD_EXCEPTION_PSERIES(n, label) \
328 .globl label##_pSeries; \
331 mtspr SPRN_SPRG1,r13; /* save r13 */ \
332 EXCEPTION_PROLOG_PSERIES(PACA_EXGEN, label##_common)
334 #define HSTD_EXCEPTION_PSERIES(n, label) \
336 .globl label##_pSeries; \
339 mtspr SPRN_SPRG1,r20; /* save r20 */ \
340 mfspr r20,SPRN_HSRR0; /* copy HSRR0 to SRR0 */ \
341 mtspr SPRN_SRR0,r20; \
342 mfspr r20,SPRN_HSRR1; /* copy HSRR0 to SRR0 */ \
343 mtspr SPRN_SRR1,r20; \
344 mfspr r20,SPRN_SPRG1; /* restore r20 */ \
345 mtspr SPRN_SPRG1,r13; /* save r13 */ \
346 EXCEPTION_PROLOG_PSERIES(PACA_EXGEN, label##_common)
349 #define MASKABLE_EXCEPTION_PSERIES(n, label) \
351 .globl label##_pSeries; \
354 mtspr SPRN_SPRG1,r13; /* save r13 */ \
355 mfspr r13,SPRN_SPRG3; /* get paca address into r13 */ \
356 std r9,PACA_EXGEN+EX_R9(r13); /* save r9, r10 */ \
357 std r10,PACA_EXGEN+EX_R10(r13); \
358 lbz r10,PACASOFTIRQEN(r13); \
361 beq masked_interrupt; \
362 mfspr r10,SPRN_SPRG1; \
363 std r10,PACA_EXGEN+EX_R13(r13); \
364 std r11,PACA_EXGEN+EX_R11(r13); \
365 std r12,PACA_EXGEN+EX_R12(r13); \
366 clrrdi r12,r13,32; /* get high part of &label */ \
368 mfspr r11,SPRN_SRR0; /* save SRR0 */ \
369 LOAD_HANDLER(r12,label##_common) \
370 ori r10,r10,MSR_IR|MSR_DR|MSR_RI; \
371 mtspr SPRN_SRR0,r12; \
372 mfspr r12,SPRN_SRR1; /* and SRR1 */ \
373 mtspr SPRN_SRR1,r10; \
375 b . /* prevent speculative execution */
377 #define STD_EXCEPTION_ISERIES(n, label, area) \
378 .globl label##_iSeries; \
381 mtspr SPRN_SPRG1,r13; /* save r13 */ \
382 EXCEPTION_PROLOG_ISERIES_1(area); \
383 EXCEPTION_PROLOG_ISERIES_2; \
386 #define MASKABLE_EXCEPTION_ISERIES(n, label) \
387 .globl label##_iSeries; \
390 mtspr SPRN_SPRG1,r13; /* save r13 */ \
391 EXCEPTION_PROLOG_ISERIES_1(PACA_EXGEN); \
392 lbz r10,PACASOFTIRQEN(r13); \
394 beq- label##_iSeries_masked; \
395 EXCEPTION_PROLOG_ISERIES_2; \
398 #ifdef CONFIG_PPC_ISERIES
399 #define DISABLE_INTS \
401 stb r11,PACASOFTIRQEN(r13); \
402 BEGIN_FW_FTR_SECTION; \
403 stb r11,PACAHARDIRQEN(r13); \
404 END_FW_FTR_SECTION_IFCLR(FW_FEATURE_ISERIES); \
405 BEGIN_FW_FTR_SECTION; \
407 ori r10,r10,MSR_EE; \
409 END_FW_FTR_SECTION_IFSET(FW_FEATURE_ISERIES)
412 #define DISABLE_INTS \
414 stb r11,PACASOFTIRQEN(r13); \
415 stb r11,PACAHARDIRQEN(r13)
417 #endif /* CONFIG_PPC_ISERIES */
419 #define ENABLE_INTS \
422 rlwimi r11,r12,0,MSR_EE; \
425 #define STD_EXCEPTION_COMMON(trap, label, hdlr) \
427 .globl label##_common; \
429 EXCEPTION_PROLOG_COMMON(trap, PACA_EXGEN); \
432 addi r3,r1,STACK_FRAME_OVERHEAD; \
437 * Like STD_EXCEPTION_COMMON, but for exceptions that can occur
438 * in the idle task and therefore need the special idle handling.
440 #define STD_EXCEPTION_COMMON_IDLE(trap, label, hdlr) \
442 .globl label##_common; \
444 EXCEPTION_PROLOG_COMMON(trap, PACA_EXGEN); \
448 addi r3,r1,STACK_FRAME_OVERHEAD; \
452 #define STD_EXCEPTION_COMMON_LITE(trap, label, hdlr) \
454 .globl label##_common; \
456 EXCEPTION_PROLOG_COMMON(trap, PACA_EXGEN); \
459 bl .ppc64_runlatch_on; \
460 addi r3,r1,STACK_FRAME_OVERHEAD; \
462 b .ret_from_except_lite
465 * When the idle code in power4_idle puts the CPU into NAP mode,
466 * it has to do so in a loop, and relies on the external interrupt
467 * and decrementer interrupt entry code to get it out of the loop.
468 * It sets the _TLF_NAPPING bit in current_thread_info()->local_flags
469 * to signal that it is in the loop and needs help to get out.
471 #ifdef CONFIG_PPC_970_NAP
474 clrrdi r11,r1,THREAD_SHIFT; \
475 ld r9,TI_LOCAL_FLAGS(r11); \
476 andi. r10,r9,_TLF_NAPPING; \
477 bnel power4_fixup_nap; \
478 END_FTR_SECTION_IFSET(CPU_FTR_CAN_NAP)
484 * Start of pSeries system interrupt routines
487 .globl __start_interrupts
490 STD_EXCEPTION_PSERIES(0x100, system_reset)
493 _machine_check_pSeries:
495 mtspr SPRN_SPRG1,r13 /* save r13 */
496 EXCEPTION_PROLOG_PSERIES(PACA_EXMC, machine_check_common)
499 .globl data_access_pSeries
508 rlwimi r13,r12,16,0x20
511 beq do_stab_bolted_pSeries
514 END_FTR_SECTION_IFCLR(CPU_FTR_SLB)
515 EXCEPTION_PROLOG_PSERIES(PACA_EXGEN, data_access_common)
518 .globl data_access_slb_pSeries
519 data_access_slb_pSeries:
522 mfspr r13,SPRN_SPRG3 /* get paca address into r13 */
523 std r3,PACA_EXSLB+EX_R3(r13)
525 std r9,PACA_EXSLB+EX_R9(r13) /* save r9 - r12 */
528 /* Keep that around for when we re-implement dynamic VSIDs */
530 bge slb_miss_user_pseries
531 #endif /* __DISABLED__ */
532 std r10,PACA_EXSLB+EX_R10(r13)
533 std r11,PACA_EXSLB+EX_R11(r13)
534 std r12,PACA_EXSLB+EX_R12(r13)
536 std r10,PACA_EXSLB+EX_R13(r13)
537 mfspr r12,SPRN_SRR1 /* and SRR1 */
538 b .slb_miss_realmode /* Rel. branch works in real mode */
540 STD_EXCEPTION_PSERIES(0x400, instruction_access)
543 .globl instruction_access_slb_pSeries
544 instruction_access_slb_pSeries:
547 mfspr r13,SPRN_SPRG3 /* get paca address into r13 */
548 std r3,PACA_EXSLB+EX_R3(r13)
549 mfspr r3,SPRN_SRR0 /* SRR0 is faulting address */
550 std r9,PACA_EXSLB+EX_R9(r13) /* save r9 - r12 */
553 /* Keep that around for when we re-implement dynamic VSIDs */
555 bge slb_miss_user_pseries
556 #endif /* __DISABLED__ */
557 std r10,PACA_EXSLB+EX_R10(r13)
558 std r11,PACA_EXSLB+EX_R11(r13)
559 std r12,PACA_EXSLB+EX_R12(r13)
561 std r10,PACA_EXSLB+EX_R13(r13)
562 mfspr r12,SPRN_SRR1 /* and SRR1 */
563 b .slb_miss_realmode /* Rel. branch works in real mode */
565 MASKABLE_EXCEPTION_PSERIES(0x500, hardware_interrupt)
566 STD_EXCEPTION_PSERIES(0x600, alignment)
567 STD_EXCEPTION_PSERIES(0x700, program_check)
568 STD_EXCEPTION_PSERIES(0x800, fp_unavailable)
569 MASKABLE_EXCEPTION_PSERIES(0x900, decrementer)
570 STD_EXCEPTION_PSERIES(0xa00, trap_0a)
571 STD_EXCEPTION_PSERIES(0xb00, trap_0b)
574 .globl system_call_pSeries
582 oris r12,r12,system_call_common@h
583 ori r12,r12,system_call_common@l
585 ori r10,r10,MSR_IR|MSR_DR|MSR_RI
589 b . /* prevent speculative execution */
591 STD_EXCEPTION_PSERIES(0xd00, single_step)
592 STD_EXCEPTION_PSERIES(0xe00, trap_0e)
594 /* We need to deal with the Altivec unavailable exception
595 * here which is at 0xf20, thus in the middle of the
596 * prolog code of the PerformanceMonitor one. A little
597 * trickery is thus necessary
600 b performance_monitor_pSeries
602 STD_EXCEPTION_PSERIES(0xf20, altivec_unavailable)
604 #ifdef CONFIG_CBE_RAS
605 HSTD_EXCEPTION_PSERIES(0x1200, cbe_system_error)
606 #endif /* CONFIG_CBE_RAS */
607 STD_EXCEPTION_PSERIES(0x1300, instruction_breakpoint)
608 #ifdef CONFIG_CBE_RAS
609 HSTD_EXCEPTION_PSERIES(0x1600, cbe_maintenance)
610 #endif /* CONFIG_CBE_RAS */
611 STD_EXCEPTION_PSERIES(0x1700, altivec_assist)
612 #ifdef CONFIG_CBE_RAS
613 HSTD_EXCEPTION_PSERIES(0x1800, cbe_thermal)
614 #endif /* CONFIG_CBE_RAS */
618 /*** pSeries interrupt support ***/
620 /* moved from 0xf00 */
621 STD_EXCEPTION_PSERIES(., performance_monitor)
624 * An interrupt came in while soft-disabled; clear EE in SRR1,
625 * clear paca->hard_enabled and return.
628 stb r10,PACAHARDIRQEN(r13)
630 ld r9,PACA_EXGEN+EX_R9(r13)
632 rldicl r10,r10,48,1 /* clear MSR_EE */
635 ld r10,PACA_EXGEN+EX_R10(r13)
641 do_stab_bolted_pSeries:
644 EXCEPTION_PROLOG_PSERIES(PACA_EXSLB, .do_stab_bolted)
647 * We have some room here we use that to put
648 * the peries slb miss user trampoline code so it's reasonably
649 * away from slb_miss_user_common to avoid problems with rfid
651 * This is used for when the SLB miss handler has to go virtual,
652 * which doesn't happen for now anymore but will once we re-implement
653 * dynamic VSIDs for shared page tables
656 slb_miss_user_pseries:
657 std r10,PACA_EXGEN+EX_R10(r13)
658 std r11,PACA_EXGEN+EX_R11(r13)
659 std r12,PACA_EXGEN+EX_R12(r13)
661 ld r11,PACA_EXSLB+EX_R9(r13)
662 ld r12,PACA_EXSLB+EX_R3(r13)
663 std r10,PACA_EXGEN+EX_R13(r13)
664 std r11,PACA_EXGEN+EX_R9(r13)
665 std r12,PACA_EXGEN+EX_R3(r13)
668 mfspr r11,SRR0 /* save SRR0 */
669 ori r12,r12,slb_miss_user_common@l /* virt addr of handler */
670 ori r10,r10,MSR_IR|MSR_DR|MSR_RI
672 mfspr r12,SRR1 /* and SRR1 */
675 b . /* prevent spec. execution */
676 #endif /* __DISABLED__ */
679 * Vectors for the FWNMI option. Share common code.
681 .globl system_reset_fwnmi
685 mtspr SPRN_SPRG1,r13 /* save r13 */
686 EXCEPTION_PROLOG_PSERIES_FORCE_64BIT(PACA_EXGEN, system_reset_common)
688 .globl machine_check_fwnmi
692 mtspr SPRN_SPRG1,r13 /* save r13 */
693 EXCEPTION_PROLOG_PSERIES_FORCE_64BIT(PACA_EXMC, machine_check_common)
695 #ifdef CONFIG_PPC_ISERIES
696 /*** ISeries-LPAR interrupt handlers ***/
698 STD_EXCEPTION_ISERIES(0x200, machine_check, PACA_EXMC)
700 .globl data_access_iSeries
708 rlwimi r13,r12,16,0x20
711 beq .do_stab_bolted_iSeries
714 END_FTR_SECTION_IFCLR(CPU_FTR_SLB)
715 EXCEPTION_PROLOG_ISERIES_1(PACA_EXGEN)
716 EXCEPTION_PROLOG_ISERIES_2
719 .do_stab_bolted_iSeries:
722 EXCEPTION_PROLOG_ISERIES_1(PACA_EXSLB)
723 EXCEPTION_PROLOG_ISERIES_2
726 .globl data_access_slb_iSeries
727 data_access_slb_iSeries:
728 mtspr SPRN_SPRG1,r13 /* save r13 */
729 mfspr r13,SPRN_SPRG3 /* get paca address into r13 */
730 std r3,PACA_EXSLB+EX_R3(r13)
732 std r9,PACA_EXSLB+EX_R9(r13)
736 bge slb_miss_user_iseries
738 std r10,PACA_EXSLB+EX_R10(r13)
739 std r11,PACA_EXSLB+EX_R11(r13)
740 std r12,PACA_EXSLB+EX_R12(r13)
742 std r10,PACA_EXSLB+EX_R13(r13)
743 ld r12,PACALPPACAPTR(r13)
744 ld r12,LPPACASRR1(r12)
747 STD_EXCEPTION_ISERIES(0x400, instruction_access, PACA_EXGEN)
749 .globl instruction_access_slb_iSeries
750 instruction_access_slb_iSeries:
751 mtspr SPRN_SPRG1,r13 /* save r13 */
752 mfspr r13,SPRN_SPRG3 /* get paca address into r13 */
753 std r3,PACA_EXSLB+EX_R3(r13)
754 ld r3,PACALPPACAPTR(r13)
755 ld r3,LPPACASRR0(r3) /* get SRR0 value */
756 std r9,PACA_EXSLB+EX_R9(r13)
760 bge .slb_miss_user_iseries
762 std r10,PACA_EXSLB+EX_R10(r13)
763 std r11,PACA_EXSLB+EX_R11(r13)
764 std r12,PACA_EXSLB+EX_R12(r13)
766 std r10,PACA_EXSLB+EX_R13(r13)
767 ld r12,PACALPPACAPTR(r13)
768 ld r12,LPPACASRR1(r12)
772 slb_miss_user_iseries:
773 std r10,PACA_EXGEN+EX_R10(r13)
774 std r11,PACA_EXGEN+EX_R11(r13)
775 std r12,PACA_EXGEN+EX_R12(r13)
777 ld r11,PACA_EXSLB+EX_R9(r13)
778 ld r12,PACA_EXSLB+EX_R3(r13)
779 std r10,PACA_EXGEN+EX_R13(r13)
780 std r11,PACA_EXGEN+EX_R9(r13)
781 std r12,PACA_EXGEN+EX_R3(r13)
782 EXCEPTION_PROLOG_ISERIES_2
783 b slb_miss_user_common
786 MASKABLE_EXCEPTION_ISERIES(0x500, hardware_interrupt)
787 STD_EXCEPTION_ISERIES(0x600, alignment, PACA_EXGEN)
788 STD_EXCEPTION_ISERIES(0x700, program_check, PACA_EXGEN)
789 STD_EXCEPTION_ISERIES(0x800, fp_unavailable, PACA_EXGEN)
790 MASKABLE_EXCEPTION_ISERIES(0x900, decrementer)
791 STD_EXCEPTION_ISERIES(0xa00, trap_0a, PACA_EXGEN)
792 STD_EXCEPTION_ISERIES(0xb00, trap_0b, PACA_EXGEN)
794 .globl system_call_iSeries
798 EXCEPTION_PROLOG_ISERIES_2
801 STD_EXCEPTION_ISERIES( 0xd00, single_step, PACA_EXGEN)
802 STD_EXCEPTION_ISERIES( 0xe00, trap_0e, PACA_EXGEN)
803 STD_EXCEPTION_ISERIES( 0xf00, performance_monitor, PACA_EXGEN)
805 .globl system_reset_iSeries
806 system_reset_iSeries:
807 mfspr r13,SPRN_SPRG3 /* Get paca address */
810 mtmsrd r24 /* RI on */
811 lhz r24,PACAPACAINDEX(r13) /* Get processor # */
812 cmpwi 0,r24,0 /* Are we processor 0? */
814 b .__start_initialization_iSeries /* Start up the first processor */
815 1: mfspr r4,SPRN_CTRLF
816 li r5,CTRL_RUNLATCH /* Turn off the run light */
823 lbz r23,PACAPROCSTART(r13) /* Test if this processor
826 LOAD_REG_IMMEDIATE(r3,current_set)
827 sldi r28,r24,3 /* get current_set[cpu#] */
829 addi r1,r3,THREAD_SIZE
830 subi r1,r1,STACK_FRAME_OVERHEAD
833 beq iSeries_secondary_smp_loop /* Loop until told to go */
834 bne __secondary_start /* Loop until told to go */
835 iSeries_secondary_smp_loop:
836 /* Let the Hypervisor know we are alive */
837 /* 8002 is a call to HvCallCfg::getLps, a harmless Hypervisor function */
839 rldicr r3,r3,32,15 /* r0 = (r3 << 32) & 0xffff000000000000 */
840 #else /* CONFIG_SMP */
841 /* Yield the processor. This is required for non-SMP kernels
842 which are running on multi-threaded machines. */
844 rldicr r3,r3,32,15 /* r3 = (r3 << 32) & 0xffff000000000000 */
845 addi r3,r3,18 /* r3 = 0x8000000000000012 which is "yield" */
846 li r4,0 /* "yield timed" */
847 li r5,-1 /* "yield forever" */
848 #endif /* CONFIG_SMP */
849 li r0,-1 /* r0=-1 indicates a Hypervisor call */
850 sc /* Invoke the hypervisor via a system call */
851 mfspr r13,SPRN_SPRG3 /* Put r13 back ???? */
852 b 1b /* If SMP not configured, secondaries
855 decrementer_iSeries_masked:
856 /* We may not have a valid TOC pointer in here. */
858 ld r12,PACALPPACAPTR(r13)
859 stb r11,LPPACADECRINT(r12)
860 LOAD_REG_IMMEDIATE(r12, tb_ticks_per_jiffy)
865 hardware_interrupt_iSeries_masked:
866 mtcrf 0x80,r9 /* Restore regs */
867 ld r12,PACALPPACAPTR(r13)
868 ld r11,LPPACASRR0(r12)
869 ld r12,LPPACASRR1(r12)
872 ld r9,PACA_EXGEN+EX_R9(r13)
873 ld r10,PACA_EXGEN+EX_R10(r13)
874 ld r11,PACA_EXGEN+EX_R11(r13)
875 ld r12,PACA_EXGEN+EX_R12(r13)
876 ld r13,PACA_EXGEN+EX_R13(r13)
878 b . /* prevent speculative execution */
879 #endif /* CONFIG_PPC_ISERIES */
881 /*** Common interrupt handlers ***/
883 STD_EXCEPTION_COMMON(0x100, system_reset, .system_reset_exception)
886 * Machine check is different because we use a different
887 * save area: PACA_EXMC instead of PACA_EXGEN.
890 .globl machine_check_common
891 machine_check_common:
892 EXCEPTION_PROLOG_COMMON(0x200, PACA_EXMC)
896 addi r3,r1,STACK_FRAME_OVERHEAD
897 bl .machine_check_exception
900 STD_EXCEPTION_COMMON_LITE(0x900, decrementer, .timer_interrupt)
901 STD_EXCEPTION_COMMON(0xa00, trap_0a, .unknown_exception)
902 STD_EXCEPTION_COMMON(0xb00, trap_0b, .unknown_exception)
903 STD_EXCEPTION_COMMON(0xd00, single_step, .single_step_exception)
904 STD_EXCEPTION_COMMON(0xe00, trap_0e, .unknown_exception)
905 STD_EXCEPTION_COMMON_IDLE(0xf00, performance_monitor, .performance_monitor_exception)
906 STD_EXCEPTION_COMMON(0x1300, instruction_breakpoint, .instruction_breakpoint_exception)
907 #ifdef CONFIG_ALTIVEC
908 STD_EXCEPTION_COMMON(0x1700, altivec_assist, .altivec_assist_exception)
910 STD_EXCEPTION_COMMON(0x1700, altivec_assist, .unknown_exception)
912 #ifdef CONFIG_CBE_RAS
913 STD_EXCEPTION_COMMON(0x1200, cbe_system_error, .cbe_system_error_exception)
914 STD_EXCEPTION_COMMON(0x1600, cbe_maintenance, .cbe_maintenance_exception)
915 STD_EXCEPTION_COMMON(0x1800, cbe_thermal, .cbe_thermal_exception)
916 #endif /* CONFIG_CBE_RAS */
919 * Here we have detected that the kernel stack pointer is bad.
920 * R9 contains the saved CR, r13 points to the paca,
921 * r10 contains the (bad) kernel stack pointer,
922 * r11 and r12 contain the saved SRR0 and SRR1.
923 * We switch to using an emergency stack, save the registers there,
924 * and call kernel_bad_stack(), which panics.
927 ld r1,PACAEMERGSP(r13)
928 subi r1,r1,64+INT_FRAME_SIZE
949 lhz r12,PACA_TRAP_SAVE(r13)
951 addi r11,r1,INT_FRAME_SIZE
956 1: addi r3,r1,STACK_FRAME_OVERHEAD
961 * Return from an exception with minimal checks.
962 * The caller is assumed to have done EXCEPTION_PROLOG_COMMON.
963 * If interrupts have been enabled, or anything has been
964 * done that might have changed the scheduling status of
965 * any task or sent any task a signal, you should use
966 * ret_from_except or ret_from_except_lite instead of this.
968 fast_exc_return_irq: /* restores irq state too */
971 stb r3,PACASOFTIRQEN(r13) /* restore paca->soft_enabled */
972 rldicl r4,r12,49,63 /* get MSR_EE to LSB */
973 stb r4,PACAHARDIRQEN(r13) /* restore paca->hard_enabled */
976 .globl fast_exception_return
977 fast_exception_return:
980 andi. r3,r12,MSR_RI /* check if RI is set */
983 #ifdef CONFIG_VIRT_CPU_ACCOUNTING
986 ACCOUNT_CPU_USER_EXIT(r3, r4)
1002 rldicl r10,r10,48,1 /* clear EE */
1003 rldicr r10,r10,16,61 /* clear RI (LE is 0 already) */
1011 b . /* prevent speculative execution */
1015 1: addi r3,r1,STACK_FRAME_OVERHEAD
1016 bl .unrecoverable_exception
1020 * Here r13 points to the paca, r9 contains the saved CR,
1021 * SRR0 and SRR1 are saved in r11 and r12,
1022 * r9 - r13 are saved in paca->exgen.
1025 .globl data_access_common
1028 std r10,PACA_EXGEN+EX_DAR(r13)
1029 mfspr r10,SPRN_DSISR
1030 stw r10,PACA_EXGEN+EX_DSISR(r13)
1031 EXCEPTION_PROLOG_COMMON(0x300, PACA_EXGEN)
1032 ld r3,PACA_EXGEN+EX_DAR(r13)
1033 lwz r4,PACA_EXGEN+EX_DSISR(r13)
1035 b .do_hash_page /* Try to handle as hpte fault */
1038 .globl instruction_access_common
1039 instruction_access_common:
1040 EXCEPTION_PROLOG_COMMON(0x400, PACA_EXGEN)
1042 andis. r4,r12,0x5820
1044 b .do_hash_page /* Try to handle as hpte fault */
1047 * Here is the common SLB miss user that is used when going to virtual
1048 * mode for SLB misses, that is currently not used
1052 .globl slb_miss_user_common
1053 slb_miss_user_common:
1055 std r3,PACA_EXGEN+EX_DAR(r13)
1056 stw r9,PACA_EXGEN+EX_CCR(r13)
1057 std r10,PACA_EXGEN+EX_LR(r13)
1058 std r11,PACA_EXGEN+EX_SRR0(r13)
1059 bl .slb_allocate_user
1061 ld r10,PACA_EXGEN+EX_LR(r13)
1062 ld r3,PACA_EXGEN+EX_R3(r13)
1063 lwz r9,PACA_EXGEN+EX_CCR(r13)
1064 ld r11,PACA_EXGEN+EX_SRR0(r13)
1068 andi. r10,r12,MSR_RI /* check for unrecoverable exception */
1069 beq- unrecov_user_slb
1077 clrrdi r10,r10,2 /* clear RI before setting SRR0/1 */
1083 ld r9,PACA_EXGEN+EX_R9(r13)
1084 ld r10,PACA_EXGEN+EX_R10(r13)
1085 ld r11,PACA_EXGEN+EX_R11(r13)
1086 ld r12,PACA_EXGEN+EX_R12(r13)
1087 ld r13,PACA_EXGEN+EX_R13(r13)
1092 EXCEPTION_PROLOG_COMMON(0x380, PACA_EXGEN)
1093 ld r4,PACA_EXGEN+EX_DAR(r13)
1100 EXCEPTION_PROLOG_COMMON(0x4200, PACA_EXGEN)
1103 1: addi r3,r1,STACK_FRAME_OVERHEAD
1104 bl .unrecoverable_exception
1107 #endif /* __DISABLED__ */
1111 * r13 points to the PACA, r9 contains the saved CR,
1112 * r12 contain the saved SRR1, SRR0 is still ready for return
1113 * r3 has the faulting address
1114 * r9 - r13 are saved in paca->exslb.
1115 * r3 is saved in paca->slb_r3
1116 * We assume we aren't going to take any exceptions during this procedure.
1118 _GLOBAL(slb_miss_realmode)
1121 stw r9,PACA_EXSLB+EX_CCR(r13) /* save CR in exc. frame */
1122 std r10,PACA_EXSLB+EX_LR(r13) /* save LR */
1124 bl .slb_allocate_realmode
1126 /* All done -- return from exception. */
1128 ld r10,PACA_EXSLB+EX_LR(r13)
1129 ld r3,PACA_EXSLB+EX_R3(r13)
1130 lwz r9,PACA_EXSLB+EX_CCR(r13) /* get saved CR */
1131 #ifdef CONFIG_PPC_ISERIES
1132 BEGIN_FW_FTR_SECTION
1133 ld r11,PACALPPACAPTR(r13)
1134 ld r11,LPPACASRR0(r11) /* get SRR0 value */
1135 END_FW_FTR_SECTION_IFSET(FW_FEATURE_ISERIES)
1136 #endif /* CONFIG_PPC_ISERIES */
1140 andi. r10,r12,MSR_RI /* check for unrecoverable exception */
1146 mtcrf 0x01,r9 /* slb_allocate uses cr0 and cr7 */
1149 #ifdef CONFIG_PPC_ISERIES
1150 BEGIN_FW_FTR_SECTION
1153 END_FW_FTR_SECTION_IFSET(FW_FEATURE_ISERIES)
1154 #endif /* CONFIG_PPC_ISERIES */
1155 ld r9,PACA_EXSLB+EX_R9(r13)
1156 ld r10,PACA_EXSLB+EX_R10(r13)
1157 ld r11,PACA_EXSLB+EX_R11(r13)
1158 ld r12,PACA_EXSLB+EX_R12(r13)
1159 ld r13,PACA_EXSLB+EX_R13(r13)
1161 b . /* prevent speculative execution */
1164 EXCEPTION_PROLOG_COMMON(0x4100, PACA_EXSLB)
1167 1: addi r3,r1,STACK_FRAME_OVERHEAD
1168 bl .unrecoverable_exception
1172 .globl hardware_interrupt_common
1173 .globl hardware_interrupt_entry
1174 hardware_interrupt_common:
1175 EXCEPTION_PROLOG_COMMON(0x500, PACA_EXGEN)
1177 hardware_interrupt_entry:
1179 bl .ppc64_runlatch_on
1180 addi r3,r1,STACK_FRAME_OVERHEAD
1182 b .ret_from_except_lite
1184 #ifdef CONFIG_PPC_970_NAP
1187 std r9,TI_LOCAL_FLAGS(r11)
1188 ld r10,_LINK(r1) /* make idle task do the */
1189 std r10,_NIP(r1) /* equivalent of a blr */
1194 .globl alignment_common
1197 std r10,PACA_EXGEN+EX_DAR(r13)
1198 mfspr r10,SPRN_DSISR
1199 stw r10,PACA_EXGEN+EX_DSISR(r13)
1200 EXCEPTION_PROLOG_COMMON(0x600, PACA_EXGEN)
1201 ld r3,PACA_EXGEN+EX_DAR(r13)
1202 lwz r4,PACA_EXGEN+EX_DSISR(r13)
1206 addi r3,r1,STACK_FRAME_OVERHEAD
1208 bl .alignment_exception
1212 .globl program_check_common
1213 program_check_common:
1214 EXCEPTION_PROLOG_COMMON(0x700, PACA_EXGEN)
1216 addi r3,r1,STACK_FRAME_OVERHEAD
1218 bl .program_check_exception
1222 .globl fp_unavailable_common
1223 fp_unavailable_common:
1224 EXCEPTION_PROLOG_COMMON(0x800, PACA_EXGEN)
1225 bne 1f /* if from user, just load it up */
1227 addi r3,r1,STACK_FRAME_OVERHEAD
1229 bl .kernel_fp_unavailable_exception
1234 .globl altivec_unavailable_common
1235 altivec_unavailable_common:
1236 EXCEPTION_PROLOG_COMMON(0xf20, PACA_EXGEN)
1237 #ifdef CONFIG_ALTIVEC
1239 bne .load_up_altivec /* if from user, just load it up */
1240 END_FTR_SECTION_IFSET(CPU_FTR_ALTIVEC)
1243 addi r3,r1,STACK_FRAME_OVERHEAD
1245 bl .altivec_unavailable_exception
1248 #ifdef CONFIG_ALTIVEC
1250 * load_up_altivec(unused, unused, tsk)
1251 * Disable VMX for the task which had it previously,
1252 * and save its vector registers in its thread_struct.
1253 * Enables the VMX for use in the kernel on return.
1254 * On SMP we know the VMX is free, since we give it up every
1255 * switch (ie, no lazy save of the vector registers).
1256 * On entry: r13 == 'current' && last_task_used_altivec != 'current'
1258 _STATIC(load_up_altivec)
1259 mfmsr r5 /* grab the current MSR */
1260 oris r5,r5,MSR_VEC@h
1261 mtmsrd r5 /* enable use of VMX now */
1265 * For SMP, we don't do lazy VMX switching because it just gets too
1266 * horrendously complex, especially when a task switches from one CPU
1267 * to another. Instead we call giveup_altvec in switch_to.
1268 * VRSAVE isn't dealt with here, that is done in the normal context
1269 * switch code. Note that we could rely on vrsave value to eventually
1270 * avoid saving all of the VREGs here...
1273 ld r3,last_task_used_altivec@got(r2)
1277 /* Save VMX state to last_task_used_altivec's THREAD struct */
1283 /* Disable VMX for last_task_used_altivec */
1285 ld r4,_MSR-STACK_FRAME_OVERHEAD(r5)
1288 std r4,_MSR-STACK_FRAME_OVERHEAD(r5)
1290 #endif /* CONFIG_SMP */
1291 /* Hack: if we get an altivec unavailable trap with VRSAVE
1292 * set to all zeros, we assume this is a broken application
1293 * that fails to set it properly, and thus we switch it to
1296 mfspr r4,SPRN_VRSAVE
1300 mtspr SPRN_VRSAVE,r4
1302 /* enable use of VMX after return */
1303 ld r4,PACACURRENT(r13)
1304 addi r5,r4,THREAD /* Get THREAD */
1305 oris r12,r12,MSR_VEC@h
1309 stw r4,THREAD_USED_VR(r5)
1314 /* Update last_task_used_math to 'current' */
1315 subi r4,r5,THREAD /* Back to 'current' */
1317 #endif /* CONFIG_SMP */
1318 /* restore registers and return */
1319 b fast_exception_return
1320 #endif /* CONFIG_ALTIVEC */
1326 _GLOBAL(do_hash_page)
1330 andis. r0,r4,0xa450 /* weird error? */
1331 bne- handle_page_fault /* if not, try to insert a HPTE */
1333 andis. r0,r4,0x0020 /* Is it a segment table fault? */
1334 bne- do_ste_alloc /* If so handle it */
1335 END_FTR_SECTION_IFCLR(CPU_FTR_SLB)
1338 * We need to set the _PAGE_USER bit if MSR_PR is set or if we are
1339 * accessing a userspace segment (even from the kernel). We assume
1340 * kernel addresses always have the high bit set.
1342 rlwinm r4,r4,32-25+9,31-9,31-9 /* DSISR_STORE -> _PAGE_RW */
1343 rotldi r0,r3,15 /* Move high bit into MSR_PR posn */
1344 orc r0,r12,r0 /* MSR_PR | ~high_bit */
1345 rlwimi r4,r0,32-13,30,30 /* becomes _PAGE_USER access bit */
1346 ori r4,r4,1 /* add _PAGE_PRESENT */
1347 rlwimi r4,r5,22+2,31-2,31-2 /* Set _PAGE_EXEC if trap is 0x400 */
1350 * On iSeries, we soft-disable interrupts here, then
1351 * hard-enable interrupts so that the hash_page code can spin on
1352 * the hash_table_lock without problems on a shared processor.
1357 * r3 contains the faulting address
1358 * r4 contains the required access permissions
1359 * r5 contains the trap number
1361 * at return r3 = 0 for success
1363 bl .hash_page /* build HPTE if possible */
1364 cmpdi r3,0 /* see if hash_page succeeded */
1366 #ifdef DO_SOFT_DISABLE
1367 BEGIN_FW_FTR_SECTION
1369 * If we had interrupts soft-enabled at the point where the
1370 * DSI/ISI occurred, and an interrupt came in during hash_page,
1372 * We jump to ret_from_except_lite rather than fast_exception_return
1373 * because ret_from_except_lite will check for and handle pending
1374 * interrupts if necessary.
1377 END_FW_FTR_SECTION_IFSET(FW_FEATURE_ISERIES)
1379 BEGIN_FW_FTR_SECTION
1381 * Here we have interrupts hard-disabled, so it is sufficient
1382 * to restore paca->{soft,hard}_enable and get out.
1384 beq fast_exc_return_irq /* Return from exception on success */
1385 END_FW_FTR_SECTION_IFCLR(FW_FEATURE_ISERIES)
1387 /* For a hash failure, we don't bother re-enabling interrupts */
1391 * hash_page couldn't handle it, set soft interrupt enable back
1392 * to what it was before the trap. Note that .local_irq_restore
1393 * handles any interrupts pending at this point.
1396 bl .local_irq_restore
1399 /* Here we have a page fault that hash_page can't handle. */
1404 addi r3,r1,STACK_FRAME_OVERHEAD
1410 addi r3,r1,STACK_FRAME_OVERHEAD
1415 13: b .ret_from_except_lite
1417 /* We have a page fault that hash_page could handle but HV refused
1421 addi r3,r1,STACK_FRAME_OVERHEAD
1426 /* here we have a segment miss */
1428 bl .ste_allocate /* try to insert stab entry */
1430 bne- handle_page_fault
1431 b fast_exception_return
1434 * r13 points to the PACA, r9 contains the saved CR,
1435 * r11 and r12 contain the saved SRR0 and SRR1.
1436 * r9 - r13 are saved in paca->exslb.
1437 * We assume we aren't going to take any exceptions during this procedure.
1438 * We assume (DAR >> 60) == 0xc.
1441 _GLOBAL(do_stab_bolted)
1442 stw r9,PACA_EXSLB+EX_CCR(r13) /* save CR in exc. frame */
1443 std r11,PACA_EXSLB+EX_SRR0(r13) /* save SRR0 in exc. frame */
1445 /* Hash to the primary group */
1446 ld r10,PACASTABVIRT(r13)
1449 rldimi r10,r11,7,52 /* r10 = first ste of the group */
1451 /* Calculate VSID */
1452 /* This is a kernel address, so protovsid = ESID */
1453 ASM_VSID_SCRAMBLE(r11, r9)
1454 rldic r9,r11,12,16 /* r9 = vsid << 12 */
1456 /* Search the primary group for a free entry */
1457 1: ld r11,0(r10) /* Test valid bit of the current ste */
1464 /* Stick for only searching the primary group for now. */
1465 /* At least for now, we use a very simple random castout scheme */
1466 /* Use the TB as a random number ; OR in 1 to avoid entry 0 */
1468 rldic r11,r11,4,57 /* r11 = (r11 << 4) & 0x70 */
1471 /* r10 currently points to an ste one past the group of interest */
1472 /* make it point to the randomly selected entry */
1474 or r10,r10,r11 /* r10 is the entry to invalidate */
1476 isync /* mark the entry invalid */
1478 rldicl r11,r11,56,1 /* clear the valid bit */
1483 clrrdi r11,r11,28 /* Get the esid part of the ste */
1486 2: std r9,8(r10) /* Store the vsid part of the ste */
1489 mfspr r11,SPRN_DAR /* Get the new esid */
1490 clrrdi r11,r11,28 /* Permits a full 32b of ESID */
1491 ori r11,r11,0x90 /* Turn on valid and kp */
1492 std r11,0(r10) /* Put new entry back into the stab */
1496 /* All done -- return from exception. */
1497 lwz r9,PACA_EXSLB+EX_CCR(r13) /* get saved CR */
1498 ld r11,PACA_EXSLB+EX_SRR0(r13) /* get saved SRR0 */
1500 andi. r10,r12,MSR_RI
1503 mtcrf 0x80,r9 /* restore CR */
1511 ld r9,PACA_EXSLB+EX_R9(r13)
1512 ld r10,PACA_EXSLB+EX_R10(r13)
1513 ld r11,PACA_EXSLB+EX_R11(r13)
1514 ld r12,PACA_EXSLB+EX_R12(r13)
1515 ld r13,PACA_EXSLB+EX_R13(r13)
1517 b . /* prevent speculative execution */
1520 * Space for CPU0's segment table.
1522 * On iSeries, the hypervisor must fill in at least one entry before
1523 * we get control (with relocate on). The address is given to the hv
1524 * as a page number (see xLparMap below), so this must be at a
1525 * fixed address (the linker can't compute (u64)&initial_stab >>
1528 . = STAB0_OFFSET /* 0x6000 */
1534 * Data area reserved for FWNMI option.
1535 * This address (0x7000) is fixed by the RPA.
1538 .globl fwnmi_data_area
1541 /* iSeries does not use the FWNMI stuff, so it is safe to put
1542 * this here, even if we later allow kernels that will boot on
1543 * both pSeries and iSeries */
1544 #ifdef CONFIG_PPC_ISERIES
1548 .quad HvEsidsToMap /* xNumberEsids */
1549 .quad HvRangesToMap /* xNumberRanges */
1550 .quad STAB0_PAGE /* xSegmentTableOffs */
1551 .zero 40 /* xRsvd */
1552 /* xEsids (HvEsidsToMap entries of 2 quads) */
1553 .quad PAGE_OFFSET_ESID /* xKernelEsid */
1554 .quad PAGE_OFFSET_VSID /* xKernelVsid */
1555 .quad VMALLOC_START_ESID /* xKernelEsid */
1556 .quad VMALLOC_START_VSID /* xKernelVsid */
1557 /* xRanges (HvRangesToMap entries of 3 quads) */
1558 .quad HvPagesToMap /* xPages */
1559 .quad 0 /* xOffset */
1560 .quad PAGE_OFFSET_VSID << (SID_SHIFT - HW_PAGE_SHIFT) /* xVPN */
1562 #endif /* CONFIG_PPC_ISERIES */
1567 * On pSeries and most other platforms, secondary processors spin
1568 * in the following code.
1569 * At entry, r3 = this processor's number (physical cpu id)
1571 _GLOBAL(generic_secondary_smp_init)
1574 /* turn on 64-bit mode */
1577 /* Set up a paca value for this processor. Since we have the
1578 * physical cpu id in r24, we need to search the pacas to find
1579 * which logical id maps to our physical one.
1581 LOAD_REG_IMMEDIATE(r13, paca) /* Get base vaddr of paca array */
1582 li r5,0 /* logical cpu id */
1583 1: lhz r6,PACAHWCPUID(r13) /* Load HW procid from paca */
1584 cmpw r6,r24 /* Compare to our id */
1586 addi r13,r13,PACA_SIZE /* Loop to next PACA on miss */
1591 mr r3,r24 /* not found, copy phys to r3 */
1592 b .kexec_wait /* next kernel might do better */
1594 2: mtspr SPRN_SPRG3,r13 /* Save vaddr of paca in SPRG3 */
1595 /* From now on, r24 is expected to be logical cpuid */
1598 lbz r23,PACAPROCSTART(r13) /* Test if this processor should */
1603 b 3b /* Never go on non-SMP */
1606 beq 3b /* Loop until told to go */
1608 /* See if we need to call a cpu state restore handler */
1609 LOAD_REG_IMMEDIATE(r23, cur_cpu_spec)
1611 ld r23,CPU_SPEC_RESTORE(r23)
1618 4: /* Create a temp kernel stack for use before relocation is on. */
1619 ld r1,PACAEMERGSP(r13)
1620 subi r1,r1,STACK_FRAME_OVERHEAD
1625 #ifdef CONFIG_PPC_ISERIES
1626 _INIT_STATIC(__start_initialization_iSeries)
1627 /* Clear out the BSS */
1628 LOAD_REG_IMMEDIATE(r11,__bss_stop)
1629 LOAD_REG_IMMEDIATE(r8,__bss_start)
1630 sub r11,r11,r8 /* bss size */
1631 addi r11,r11,7 /* round up to an even double word */
1632 rldicl. r11,r11,61,3 /* shift right by 3 */
1636 mtctr r11 /* zero this many doublewords */
1640 LOAD_REG_IMMEDIATE(r1,init_thread_union)
1641 addi r1,r1,THREAD_SIZE
1643 stdu r0,-STACK_FRAME_OVERHEAD(r1)
1645 LOAD_REG_IMMEDIATE(r2,__toc_start)
1649 bl .iSeries_early_setup
1652 /* relocation is on at this point */
1654 b .start_here_common
1655 #endif /* CONFIG_PPC_ISERIES */
1660 andi. r0,r3,MSR_IR|MSR_DR
1667 b . /* prevent speculative execution */
1671 * Here is our main kernel entry point. We support currently 2 kind of entries
1672 * depending on the value of r5.
1674 * r5 != NULL -> OF entry, we go to prom_init, "legacy" parameter content
1677 * r5 == NULL -> kexec style entry. r3 is a physical pointer to the
1678 * DT block, r4 is a physical pointer to the kernel itself
1681 _GLOBAL(__start_initialization_multiplatform)
1683 * Are we booted from a PROM Of-type client-interface ?
1687 b .__boot_from_prom /* yes -> prom */
1689 /* Save parameters */
1693 /* Make sure we are running in 64 bits mode */
1696 /* Setup some critical 970 SPRs before switching MMU off */
1699 cmpwi r0,0x39 /* 970 */
1701 cmpwi r0,0x3c /* 970FX */
1703 cmpwi r0,0x44 /* 970MP */
1705 cmpwi r0,0x45 /* 970GX */
1707 1: bl .__cpu_preinit_ppc970
1710 /* Switch off MMU if not already */
1711 LOAD_REG_IMMEDIATE(r4, .__after_prom_start - KERNELBASE)
1714 b .__after_prom_start
1716 _INIT_STATIC(__boot_from_prom)
1717 /* Save parameters */
1725 * Align the stack to 16-byte boundary
1726 * Depending on the size and layout of the ELF sections in the initial
1727 * boot binary, the stack pointer will be unalignet on PowerMac
1731 /* Make sure we are running in 64 bits mode */
1734 /* put a relocation offset into r3 */
1737 LOAD_REG_IMMEDIATE(r2,__toc_start)
1741 /* Relocate the TOC from a virt addr to a real addr */
1744 /* Restore parameters */
1751 /* Do all of the interaction with OF client interface */
1753 /* We never return */
1756 _STATIC(__after_prom_start)
1759 * We need to run with __start at physical address PHYSICAL_START.
1760 * This will leave some code in the first 256B of
1761 * real memory, which are reserved for software use.
1762 * The remainder of the first page is loaded with the fixed
1763 * interrupt vectors. The next two pages are filled with
1764 * unknown exception placeholders.
1766 * Note: This process overwrites the OF exception vectors.
1767 * r26 == relocation offset
1772 LOAD_REG_IMMEDIATE(r27, KERNELBASE)
1774 LOAD_REG_IMMEDIATE(r3, PHYSICAL_START) /* target addr */
1776 // XXX FIXME: Use phys returned by OF (r30)
1777 add r4,r27,r26 /* source addr */
1778 /* current address of _start */
1779 /* i.e. where we are running */
1780 /* the source addr */
1782 cmpdi r4,0 /* In some cases the loader may */
1784 b .start_here_multiplatform /* have already put us at zero */
1785 /* so we can skip the copy. */
1786 1: LOAD_REG_IMMEDIATE(r5,copy_to_here) /* # bytes of memory to copy */
1789 li r6,0x100 /* Start offset, the first 0x100 */
1790 /* bytes were copied earlier. */
1792 bl .copy_and_flush /* copy the first n bytes */
1793 /* this includes the code being */
1794 /* executed here. */
1796 LOAD_REG_IMMEDIATE(r0, 4f) /* Jump to the copy of this code */
1797 mtctr r0 /* that we just made/relocated */
1800 4: LOAD_REG_IMMEDIATE(r5,klimit)
1802 ld r5,0(r5) /* get the value of klimit */
1804 bl .copy_and_flush /* copy the rest */
1805 b .start_here_multiplatform
1808 * Copy routine used to copy the kernel to start at physical address 0
1809 * and flush and invalidate the caches as needed.
1810 * r3 = dest addr, r4 = source addr, r5 = copy limit, r6 = start offset
1811 * on exit, r3, r4, r5 are unchanged, r6 is updated to be >= r5.
1813 * Note: this routine *only* clobbers r0, r6 and lr
1815 _GLOBAL(copy_and_flush)
1818 4: li r0,8 /* Use the smallest common */
1819 /* denominator cache line */
1820 /* size. This results in */
1821 /* extra cache line flushes */
1822 /* but operation is correct. */
1823 /* Can't get cache line size */
1824 /* from NACA as it is being */
1827 mtctr r0 /* put # words/line in ctr */
1828 3: addi r6,r6,8 /* copy a cache line */
1832 dcbst r6,r3 /* write it to memory */
1834 icbi r6,r3 /* flush the icache line */
1846 #ifdef CONFIG_PPC_PMAC
1848 * On PowerMac, secondary processors starts from the reset vector, which
1849 * is temporarily turned into a call to one of the functions below.
1854 .globl __secondary_start_pmac_0
1855 __secondary_start_pmac_0:
1856 /* NB the entries for cpus 0, 1, 2 must each occupy 8 bytes. */
1866 _GLOBAL(pmac_secondary_start)
1867 /* turn on 64-bit mode */
1870 /* Copy some CPU settings from CPU 0 */
1871 bl .__restore_cpu_ppc970
1873 /* pSeries do that early though I don't think we really need it */
1876 mtmsrd r3 /* RI on */
1878 /* Set up a paca value for this processor. */
1879 LOAD_REG_IMMEDIATE(r4, paca) /* Get base vaddr of paca array */
1880 mulli r13,r24,PACA_SIZE /* Calculate vaddr of right paca */
1881 add r13,r13,r4 /* for this processor. */
1882 mtspr SPRN_SPRG3,r13 /* Save vaddr of paca in SPRG3 */
1884 /* Create a temp kernel stack for use before relocation is on. */
1885 ld r1,PACAEMERGSP(r13)
1886 subi r1,r1,STACK_FRAME_OVERHEAD
1890 #endif /* CONFIG_PPC_PMAC */
1893 * This function is called after the master CPU has released the
1894 * secondary processors. The execution environment is relocation off.
1895 * The paca for this processor has the following fields initialized at
1897 * 1. Processor number
1898 * 2. Segment table pointer (virtual address)
1899 * On entry the following are set:
1900 * r1 = stack pointer. vaddr for iSeries, raddr (temp stack) for pSeries
1901 * r24 = cpu# (in Linux terms)
1902 * r13 = paca virtual address
1903 * SPRG3 = paca virtual address
1906 /* Set thread priority to MEDIUM */
1912 /* Do early setup for that CPU (stab, slb, hash table pointer) */
1913 bl .early_setup_secondary
1915 /* Initialize the kernel stack. Just a repeat for iSeries. */
1916 LOAD_REG_ADDR(r3, current_set)
1917 sldi r28,r24,3 /* get current_set[cpu#] */
1919 addi r1,r1,THREAD_SIZE-STACK_FRAME_OVERHEAD
1920 std r1,PACAKSAVE(r13)
1922 /* Clear backchain so we get nice backtraces */
1926 /* enable MMU and jump to start_secondary */
1927 LOAD_REG_ADDR(r3, .start_secondary_prolog)
1928 LOAD_REG_IMMEDIATE(r4, MSR_KERNEL)
1929 #ifdef CONFIG_PPC_ISERIES
1930 BEGIN_FW_FTR_SECTION
1932 END_FW_FTR_SECTION_IFSET(FW_FEATURE_ISERIES)
1934 BEGIN_FW_FTR_SECTION
1935 stb r7,PACASOFTIRQEN(r13)
1936 stb r7,PACAHARDIRQEN(r13)
1937 END_FW_FTR_SECTION_IFCLR(FW_FEATURE_ISERIES)
1942 b . /* prevent speculative execution */
1945 * Running with relocation on at this point. All we want to do is
1946 * zero the stack back-chain pointer before going into C code.
1948 _GLOBAL(start_secondary_prolog)
1950 std r3,0(r1) /* Zero the stack frame pointer */
1956 * This subroutine clobbers r11 and r12
1958 _GLOBAL(enable_64b_mode)
1959 mfmsr r11 /* grab the current MSR */
1961 rldicr r12,r12,MSR_SF_LG,(63-MSR_SF_LG)
1964 rldicr r12,r12,MSR_ISF_LG,(63-MSR_ISF_LG)
1971 * This is where the main kernel code starts.
1973 _INIT_STATIC(start_here_multiplatform)
1974 /* get a new offset, now that the kernel has moved. */
1978 /* Clear out the BSS. It may have been done in prom_init,
1979 * already but that's irrelevant since prom_init will soon
1980 * be detached from the kernel completely. Besides, we need
1981 * to clear it now for kexec-style entry.
1983 LOAD_REG_IMMEDIATE(r11,__bss_stop)
1984 LOAD_REG_IMMEDIATE(r8,__bss_start)
1985 sub r11,r11,r8 /* bss size */
1986 addi r11,r11,7 /* round up to an even double word */
1987 rldicl. r11,r11,61,3 /* shift right by 3 */
1991 mtctr r11 /* zero this many doublewords */
1998 mtmsrd r6 /* RI on */
2000 /* The following gets the stack and TOC set up with the regs */
2001 /* pointing to the real addr of the kernel stack. This is */
2002 /* all done to support the C function call below which sets */
2003 /* up the htab. This is done because we have relocated the */
2004 /* kernel but are still running in real mode. */
2006 LOAD_REG_IMMEDIATE(r3,init_thread_union)
2009 /* set up a stack pointer (physical address) */
2010 addi r1,r3,THREAD_SIZE
2012 stdu r0,-STACK_FRAME_OVERHEAD(r1)
2014 /* set up the TOC (physical address) */
2015 LOAD_REG_IMMEDIATE(r2,__toc_start)
2020 /* Do very early kernel initializations, including initial hash table,
2021 * stab and slb setup before we turn on relocation. */
2023 /* Restore parameters passed from prom_init/kexec */
2027 LOAD_REG_IMMEDIATE(r3, .start_here_common)
2028 LOAD_REG_IMMEDIATE(r4, MSR_KERNEL)
2032 b . /* prevent speculative execution */
2034 /* This is where all platforms converge execution */
2035 _INIT_STATIC(start_here_common)
2036 /* relocation is on at this point */
2038 /* The following code sets up the SP and TOC now that we are */
2039 /* running with translation enabled. */
2041 LOAD_REG_IMMEDIATE(r3,init_thread_union)
2043 /* set up the stack */
2044 addi r1,r3,THREAD_SIZE
2046 stdu r0,-STACK_FRAME_OVERHEAD(r1)
2048 /* ptr to current */
2049 LOAD_REG_IMMEDIATE(r4, init_task)
2050 std r4,PACACURRENT(r13)
2054 std r1,PACAKSAVE(r13)
2058 /* Load up the kernel context */
2061 stb r5,PACASOFTIRQEN(r13) /* Soft Disabled */
2062 #ifdef CONFIG_PPC_ISERIES
2063 BEGIN_FW_FTR_SECTION
2065 ori r5,r5,MSR_EE /* Hard Enabled */
2067 END_FW_FTR_SECTION_IFSET(FW_FEATURE_ISERIES)
2069 BEGIN_FW_FTR_SECTION
2070 stb r5,PACAHARDIRQEN(r13)
2071 END_FW_FTR_SECTION_IFCLR(FW_FEATURE_ISERIES)
2079 * We put a few things here that have to be page-aligned.
2080 * This stuff goes at the beginning of the bss, which is page-aligned.
2086 .globl empty_zero_page
2090 .globl swapper_pg_dir
2095 * This space gets a copy of optional info passed to us by the bootstrap
2096 * Used to pass parameters into the kernel like root=/dev/sda1, etc.
2100 .space COMMAND_LINE_SIZE