// SPDX-License-Identifier: GPL-2.0 /* * Qualcomm Peripheral Image Loader for Q6V5 * * Copyright (C) 2016-2018 Linaro Ltd. * Copyright (C) 2014 Sony Mobile Communications AB * Copyright (c) 2012-2013, The Linux Foundation. All rights reserved. * Copyright (c) 2024 Qualcomm Innovation Center, Inc. All rights reserved. */ #include #include #include #include #include #include #include #include #include #include #include #include "qcom_common.h" #include "qcom_q6v5.h" #include #if IS_ENABLED(CONFIG_SEC_SENSORS_SSC) #include #endif #if IS_ENABLED(CONFIG_SND_SOC_SAMSUNG_AUDIO) #include #include #endif #define Q6V5_LOAD_STATE_MSG_LEN 64 #define Q6V5_PANIC_DELAY_MS 200 #define SEC_DETAILED_CRASH_REASON static int q6v5_load_state_toggle(struct qcom_q6v5 *q6v5, bool enable) { int ret; if (!q6v5->qmp) return 0; ret = qmp_send(q6v5->qmp, "{class: image, res: load_state, name: %s, val: %s}", q6v5->load_state, enable ? "on" : "off"); if (ret) dev_err(q6v5->dev, "failed to toggle load state\n"); return ret; } /** * qcom_q6v5_prepare() - reinitialize the qcom_q6v5 context before start * @q6v5: reference to qcom_q6v5 context to be reinitialized * * Return: 0 on success, negative errno on failure */ int qcom_q6v5_prepare(struct qcom_q6v5 *q6v5) { int ret; ret = icc_set_bw(q6v5->path, UINT_MAX, UINT_MAX); if (ret < 0) { dev_err(q6v5->dev, "failed to set bandwidth request\n"); return ret; } ret = q6v5_load_state_toggle(q6v5, true); if (ret) { icc_set_bw(q6v5->path, 0, 0); return ret; } reinit_completion(&q6v5->start_done); reinit_completion(&q6v5->stop_done); q6v5->running = true; q6v5->handover_issued = false; enable_irq(q6v5->handover_irq); return 0; } EXPORT_SYMBOL_GPL(qcom_q6v5_prepare); /** * qcom_q6v5_unprepare() - unprepare the qcom_q6v5 context after stop * @q6v5: reference to qcom_q6v5 context to be unprepared * * Return: 0 on success, 1 if handover hasn't yet been called */ int qcom_q6v5_unprepare(struct qcom_q6v5 *q6v5) { disable_irq(q6v5->handover_irq); q6v5_load_state_toggle(q6v5, false); /* Disable interconnect vote, in case handover never happened */ icc_set_bw(q6v5->path, 0, 0); return !q6v5->handover_issued; } EXPORT_SYMBOL_GPL(qcom_q6v5_unprepare); void qcom_q6v5_register_ssr_subdev(struct qcom_q6v5 *q6v5, struct rproc_subdev *ssr_subdev) { q6v5->ssr_subdev = ssr_subdev; } EXPORT_SYMBOL(qcom_q6v5_register_ssr_subdev); static void qcom_q6v5_crash_handler_work(struct work_struct *work) { struct qcom_q6v5 *q6v5 = container_of(work, struct qcom_q6v5, crash_handler); struct rproc *rproc = q6v5->rproc; struct rproc_subdev *subdev; int votes; #ifdef SEC_DETAILED_CRASH_REASON char *msg; size_t len; #endif if (atomic_read(&q6v5->ssr_in_prog) != 0) { dev_err(q6v5->dev, "skip crash handling\n"); return; } mutex_lock(&rproc->lock); votes = atomic_read(&rproc->power); if (votes == 0 || q6v5->crash_seq != q6v5->seq) { mutex_unlock(&rproc->lock); return; } rproc->state = RPROC_CRASHED; list_for_each_entry_reverse(subdev, &rproc->subdevs, node) { if (subdev->stop) subdev->stop(subdev, true); } msleep(100); /* * Temporary workaround until ramdump userspace application calls * sync() and fclose() on attempting the dump. */ #ifdef SEC_DETAILED_CRASH_REASON msg = qcom_smem_get(QCOM_SMEM_HOST_ANY, q6v5->crash_reason, &len); if (!IS_ERR(msg) && len > 0 && msg[0]) { /* * From this code in BL, * snprintf_rc(buf, 150, "Panic Msg : %s", summary->apss->excp.panic_msg * we can use only 150 - 12(Panic Msg : ) */ char fatal_msg[150-12]; char *lined_msg = fatal_msg; char *remoteproc_name; /* for long device name, condense rproc name */ remoteproc_name = strstr(q6v5->rproc->name, "remoteproc-"); if (remoteproc_name != NULL) remoteproc_name += 11; else remoteproc_name = (char *)q6v5->rproc->name; len = snprintf(fatal_msg, sizeof(fatal_msg)-1, "FATAL %s, %s", remoteproc_name, msg); len = min(len, sizeof(fatal_msg)-2); /* '\n' -> ' ', except the last one */ while (len--) { if (*lined_msg == '\n') *lined_msg = ' '; lined_msg++; } *lined_msg++ = '\n'; *lined_msg = '\0'; panic(fatal_msg); } else #endif panic("Panicking, remoteproc %s crashed\n", q6v5->rproc->name); mutex_unlock(&rproc->lock); } static irqreturn_t q6v5_wdog_interrupt(int irq, void *data) { struct qcom_q6v5 *q6v5 = data; size_t len; char *msg; #if IS_ENABLED(CONFIG_SEC_SENSORS_SSC) || IS_ENABLED(CONFIG_SND_SOC_SAMSUNG_AUDIO) char *chk_name = NULL; #endif /* Sometimes the stop triggers a watchdog rather than a stop-ack */ if (!q6v5->running) { complete(&q6v5->stop_done); return IRQ_HANDLED; } dev_err(q6v5->dev, "rproc crash at cycle:%llu, recovery state: %s\n", get_cycles(), q6v5->rproc->recovery_disabled ? "disabled and lead to device crash" : "enabled and kick recovery process"); q6v5->crash_seq = q6v5->seq; msg = qcom_smem_get(QCOM_SMEM_HOST_ANY, q6v5->crash_reason, &len); if (!IS_ERR(msg) && len > 0 && msg[0]) { dev_err(q6v5->dev, "watchdog received: %s\n", msg); #if IS_ENABLED(CONFIG_SEC_SENSORS_SSC) chk_name = strstr(q6v5->rproc->name, "adsp"); if (chk_name != NULL) ssr_reason_call_back(msg, len); #endif #if IS_ENABLED(CONFIG_SND_SOC_SAMSUNG_AUDIO) chk_name = strstr(q6v5->rproc->name, "adsp"); if (chk_name != NULL) { sdp_info_print("watchdog received: %s\n", msg); send_adsp_silent_reset_ev(); } #endif } else dev_err(q6v5->dev, "watchdog without message\n"); if (q6v5->crash_stack) { msg = qcom_smem_get(q6v5->smem_host_id, q6v5->crash_stack, &len); if (!IS_ERR(msg) && len > 0 && msg[0]) dev_err(q6v5->dev, "%s\n", msg); } q6v5->running = false; trace_rproc_qcom_event(dev_name(q6v5->dev), "q6v5_wdog", msg); if (q6v5->ssr_subdev) qcom_notify_early_ssr_clients(q6v5->ssr_subdev); if (q6v5->rproc->recovery_disabled) queue_work(system_unbound_wq, &q6v5->crash_handler); else rproc_report_crash(q6v5->rproc, RPROC_WATCHDOG); return IRQ_HANDLED; } #if IS_ENABLED(CONFIG_SEC_SENSORS_SSC) static void check_sensor_fssr(struct qcom_q6v5 *q6v5, char *msg) { if (strstr(msg, "IPLSREVOCER") #if IS_ENABLED(CONFIG_SEC_SENSORS_RECOVERY) || (strstr(msg, "qsh_process") && !ssc_get_fssr_ignore()) #endif || strstr(msg, "PMUDRSS") || strstr(msg, "SLIMBUS_PM_ERR_FATAL_V01")) { q6v5->fssr = true; q6v5->prev_recovery_disabled = q6v5->rproc->recovery_disabled; q6v5->rproc->recovery_disabled = false; if (strstr(msg, "PMUDRSS")) q6v5->fssr_dump = true; } else { q6v5->fssr = false; q6v5->fssr_dump = false; } dev_info(q6v5->dev, "recovery:%d,%d\n", (int)q6v5->prev_recovery_disabled, (int)q6v5->rproc->recovery_disabled); } #endif static irqreturn_t q6v5_fatal_interrupt(int irq, void *data) { struct qcom_q6v5 *q6v5 = data; size_t len; char *msg; #if IS_ENABLED(CONFIG_SEC_SENSORS_SSC) || IS_ENABLED(CONFIG_SND_SOC_SAMSUNG_AUDIO) char *chk_name = NULL; #endif if (!q6v5->running) return IRQ_HANDLED; dev_err(q6v5->dev, "rproc crash at cycle:%llu, recovery state: %s\n", get_cycles(), q6v5->rproc->recovery_disabled ? "disabled and lead to device crash" : "enabled and kick recovery process"); q6v5->crash_seq = q6v5->seq; msg = qcom_smem_get(QCOM_SMEM_HOST_ANY, q6v5->crash_reason, &len); if (!IS_ERR(msg) && len > 0 && msg[0]) { dev_err(q6v5->dev, "fatal error received: %s\n", msg); #if IS_ENABLED(CONFIG_SEC_SENSORS_SSC) chk_name = strstr(q6v5->rproc->name, "adsp"); if (chk_name != NULL) { ssr_reason_call_back(msg, len); check_sensor_fssr(q6v5, msg); } #endif #if IS_ENABLED(CONFIG_SND_SOC_SAMSUNG_AUDIO) chk_name = strstr(q6v5->rproc->name, "adsp"); if (chk_name != NULL) { sdp_info_print("fatal error received: %s\n", msg); send_adsp_silent_reset_ev(); } #endif } else dev_err(q6v5->dev, "fatal error without message\n"); if (q6v5->crash_stack) { msg = qcom_smem_get(q6v5->smem_host_id, q6v5->crash_stack, &len); if (!IS_ERR(msg) && len > 0 && msg[0]) dev_err(q6v5->dev, "%s\n", msg); } q6v5->running = false; trace_rproc_qcom_event(dev_name(q6v5->dev), "q6v5_fatal", msg); if (q6v5->ssr_subdev) qcom_notify_early_ssr_clients(q6v5->ssr_subdev); if (q6v5->rproc->recovery_disabled) queue_work(system_unbound_wq, &q6v5->crash_handler); else { int silent_ssr_in_progress; spin_lock(&q6v5->silent_ssr_lock); silent_ssr_in_progress = atomic_read(&q6v5->ssr_in_prog); spin_unlock(&q6v5->silent_ssr_lock); if (silent_ssr_in_progress) { dev_err(q6v5->dev, "silent ssr is ongoing. Return\n"); return IRQ_HANDLED; } rproc_report_crash(q6v5->rproc, RPROC_FATAL_ERROR); } return IRQ_HANDLED; } static irqreturn_t q6v5_ready_interrupt(int irq, void *data) { struct qcom_q6v5 *q6v5 = data; complete(&q6v5->start_done); return IRQ_HANDLED; } /** * qcom_q6v5_wait_for_start() - wait for remote processor start signal * @q6v5: reference to qcom_q6v5 context * @timeout: timeout to wait for the event, in jiffies * * qcom_q6v5_unprepare() should not be called when this function fails. * * Return: 0 on success, -ETIMEDOUT on timeout */ int qcom_q6v5_wait_for_start(struct qcom_q6v5 *q6v5, int timeout) { int ret; ret = wait_for_completion_timeout(&q6v5->start_done, timeout); if (!ret) disable_irq(q6v5->handover_irq); return !ret ? -ETIMEDOUT : 0; } EXPORT_SYMBOL_GPL(qcom_q6v5_wait_for_start); static irqreturn_t q6v5_handover_interrupt(int irq, void *data) { struct qcom_q6v5 *q6v5 = data; if (q6v5->handover) q6v5->handover(q6v5); icc_set_bw(q6v5->path, 0, 0); q6v5->handover_issued = true; return IRQ_HANDLED; } static irqreturn_t q6v5_stop_interrupt(int irq, void *data) { struct qcom_q6v5 *q6v5 = data; complete(&q6v5->stop_done); return IRQ_HANDLED; } /** * qcom_q6v5_request_stop() - request the remote processor to stop * @q6v5: reference to qcom_q6v5 context * @sysmon: reference to the remote's sysmon instance, or NULL * * Return: 0 on success, negative errno on failure */ int qcom_q6v5_request_stop(struct qcom_q6v5 *q6v5, struct qcom_sysmon *sysmon) { int ret; q6v5->running = false; /* Don't perform SMP2P dance if remote isn't running */ if (qcom_sysmon_shutdown_acked(sysmon) || (q6v5->rproc->state != RPROC_RUNNING)) return 0; qcom_smem_state_update_bits(q6v5->state, BIT(q6v5->stop_bit), BIT(q6v5->stop_bit)); ret = wait_for_completion_timeout(&q6v5->stop_done, 5 * HZ); qcom_smem_state_update_bits(q6v5->state, BIT(q6v5->stop_bit), 0); return ret == 0 ? -ETIMEDOUT : 0; } EXPORT_SYMBOL_GPL(qcom_q6v5_request_stop); /** * qcom_q6v5_panic() - panic handler to invoke a stop on the remote * @q6v5: reference to qcom_q6v5 context * * Set the stop bit and sleep in order to allow the remote processor to flush * its caches etc for post mortem debugging. * * Return: 200ms */ unsigned long qcom_q6v5_panic(struct qcom_q6v5 *q6v5) { qcom_smem_state_update_bits(q6v5->state, BIT(q6v5->stop_bit), BIT(q6v5->stop_bit)); return Q6V5_PANIC_DELAY_MS; } EXPORT_SYMBOL_GPL(qcom_q6v5_panic); /** * qcom_q6v5_init() - initializer of the q6v5 common struct * @q6v5: handle to be initialized * @pdev: platform_device reference for acquiring resources * @rproc: associated remoteproc instance * @crash_reason: SMEM id for crash reason string, or 0 if none * @load_state: load state resource string * @handover: function to be called when proxy resources should be released * * Return: 0 on success, negative errno on failure */ int qcom_q6v5_init(struct qcom_q6v5 *q6v5, struct platform_device *pdev, struct rproc *rproc, int crash_reason, int crash_stack, unsigned int smem_host_id, const char *load_state, void (*handover)(struct qcom_q6v5 *q6v5)) { int ret; q6v5->rproc = rproc; q6v5->dev = &pdev->dev; q6v5->crash_reason = crash_reason; q6v5->crash_stack = crash_stack; q6v5->smem_host_id = smem_host_id; q6v5->handover = handover; q6v5->ssr_subdev = NULL; atomic_set(&q6v5->ssr_in_prog, 0); init_completion(&q6v5->start_done); init_completion(&q6v5->stop_done); q6v5->wdog_irq = platform_get_irq_byname(pdev, "wdog"); if (q6v5->wdog_irq < 0) return q6v5->wdog_irq; ret = devm_request_threaded_irq(&pdev->dev, q6v5->wdog_irq, NULL, q6v5_wdog_interrupt, IRQF_TRIGGER_RISING | IRQF_ONESHOT, "q6v5 wdog", q6v5); if (ret) { dev_err(&pdev->dev, "failed to acquire wdog IRQ\n"); return ret; } q6v5->fatal_irq = platform_get_irq_byname(pdev, "fatal"); if (q6v5->fatal_irq < 0) return q6v5->fatal_irq; ret = devm_request_threaded_irq(&pdev->dev, q6v5->fatal_irq, NULL, q6v5_fatal_interrupt, IRQF_TRIGGER_RISING | IRQF_ONESHOT, "q6v5 fatal", q6v5); if (ret) { dev_err(&pdev->dev, "failed to acquire fatal IRQ\n"); return ret; } q6v5->ready_irq = platform_get_irq_byname(pdev, "ready"); if (q6v5->ready_irq < 0) return q6v5->ready_irq; ret = devm_request_threaded_irq(&pdev->dev, q6v5->ready_irq, NULL, q6v5_ready_interrupt, IRQF_TRIGGER_RISING | IRQF_ONESHOT, "q6v5 ready", q6v5); if (ret) { dev_err(&pdev->dev, "failed to acquire ready IRQ\n"); return ret; } q6v5->handover_irq = platform_get_irq_byname(pdev, "handover"); if (q6v5->handover_irq < 0) return q6v5->handover_irq; ret = devm_request_threaded_irq(&pdev->dev, q6v5->handover_irq, NULL, q6v5_handover_interrupt, IRQF_TRIGGER_RISING | IRQF_ONESHOT, "q6v5 handover", q6v5); if (ret) { dev_err(&pdev->dev, "failed to acquire handover IRQ\n"); return ret; } disable_irq(q6v5->handover_irq); q6v5->stop_irq = platform_get_irq_byname(pdev, "stop-ack"); if (q6v5->stop_irq < 0) return q6v5->stop_irq; ret = devm_request_threaded_irq(&pdev->dev, q6v5->stop_irq, NULL, q6v5_stop_interrupt, IRQF_TRIGGER_RISING | IRQF_ONESHOT, "q6v5 stop", q6v5); if (ret) { dev_err(&pdev->dev, "failed to acquire stop-ack IRQ\n"); return ret; } q6v5->state = devm_qcom_smem_state_get(&pdev->dev, "stop", &q6v5->stop_bit); if (IS_ERR(q6v5->state)) { dev_err(&pdev->dev, "failed to acquire stop state\n"); return PTR_ERR(q6v5->state); } q6v5->load_state = devm_kstrdup_const(&pdev->dev, load_state, GFP_KERNEL); q6v5->qmp = qmp_get(&pdev->dev); if (IS_ERR(q6v5->qmp)) { if (PTR_ERR(q6v5->qmp) != -ENODEV) return dev_err_probe(&pdev->dev, PTR_ERR(q6v5->qmp), "failed to acquire load state\n"); q6v5->qmp = NULL; } else if (!q6v5->load_state) { if (!load_state) dev_err(&pdev->dev, "load state resource string empty\n"); qmp_put(q6v5->qmp); return load_state ? -ENOMEM : -EINVAL; } q6v5->path = devm_of_icc_get(&pdev->dev, NULL); if (IS_ERR(q6v5->path)) return dev_err_probe(&pdev->dev, PTR_ERR(q6v5->path), "failed to acquire interconnect path\n"); INIT_WORK(&q6v5->crash_handler, qcom_q6v5_crash_handler_work); spin_lock_init(&q6v5->silent_ssr_lock); return 0; } EXPORT_SYMBOL_GPL(qcom_q6v5_init); /** * qcom_q6v5_deinit() - deinitialize the q6v5 common struct * @q6v5: reference to qcom_q6v5 context to be deinitialized */ void qcom_q6v5_deinit(struct qcom_q6v5 *q6v5) { qmp_put(q6v5->qmp); } EXPORT_SYMBOL_GPL(qcom_q6v5_deinit); MODULE_LICENSE("GPL v2"); MODULE_DESCRIPTION("Qualcomm Peripheral Image Loader for Q6V5");