2 * Derived from arch/powerpc/kernel/iommu.c
4 * Copyright IBM Corporation, 2006-2007
5 * Copyright (C) 2006 Jon Mason <jdmason@kudzu.us>
7 * Author: Jon Mason <jdmason@kudzu.us>
8 * Author: Muli Ben-Yehuda <muli@il.ibm.com>
10 * This program is free software; you can redistribute it and/or modify
11 * it under the terms of the GNU General Public License as published by
12 * the Free Software Foundation; either version 2 of the License, or
13 * (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
25 #include <linux/kernel.h>
26 #include <linux/init.h>
27 #include <linux/types.h>
28 #include <linux/slab.h>
30 #include <linux/spinlock.h>
31 #include <linux/string.h>
32 #include <linux/crash_dump.h>
33 #include <linux/dma-mapping.h>
34 #include <linux/bitops.h>
35 #include <linux/pci_ids.h>
36 #include <linux/pci.h>
37 #include <linux/delay.h>
38 #include <linux/scatterlist.h>
39 #include <linux/iommu-helper.h>
41 #include <asm/iommu.h>
42 #include <asm/calgary.h>
44 #include <asm/pci-direct.h>
45 #include <asm/system.h>
48 #include <asm/bios_ebda.h>
50 #ifdef CONFIG_CALGARY_IOMMU_ENABLED_BY_DEFAULT
51 int use_calgary __read_mostly = 1;
53 int use_calgary __read_mostly = 0;
54 #endif /* CONFIG_CALGARY_DEFAULT_ENABLED */
56 #define PCI_DEVICE_ID_IBM_CALGARY 0x02a1
57 #define PCI_DEVICE_ID_IBM_CALIOC2 0x0308
59 /* register offsets inside the host bridge space */
60 #define CALGARY_CONFIG_REG 0x0108
61 #define PHB_CSR_OFFSET 0x0110 /* Channel Status */
62 #define PHB_PLSSR_OFFSET 0x0120
63 #define PHB_CONFIG_RW_OFFSET 0x0160
64 #define PHB_IOBASE_BAR_LOW 0x0170
65 #define PHB_IOBASE_BAR_HIGH 0x0180
66 #define PHB_MEM_1_LOW 0x0190
67 #define PHB_MEM_1_HIGH 0x01A0
68 #define PHB_IO_ADDR_SIZE 0x01B0
69 #define PHB_MEM_1_SIZE 0x01C0
70 #define PHB_MEM_ST_OFFSET 0x01D0
71 #define PHB_AER_OFFSET 0x0200
72 #define PHB_CONFIG_0_HIGH 0x0220
73 #define PHB_CONFIG_0_LOW 0x0230
74 #define PHB_CONFIG_0_END 0x0240
75 #define PHB_MEM_2_LOW 0x02B0
76 #define PHB_MEM_2_HIGH 0x02C0
77 #define PHB_MEM_2_SIZE_HIGH 0x02D0
78 #define PHB_MEM_2_SIZE_LOW 0x02E0
79 #define PHB_DOSHOLE_OFFSET 0x08E0
81 /* CalIOC2 specific */
82 #define PHB_SAVIOR_L2 0x0DB0
83 #define PHB_PAGE_MIG_CTRL 0x0DA8
84 #define PHB_PAGE_MIG_DEBUG 0x0DA0
85 #define PHB_ROOT_COMPLEX_STATUS 0x0CB0
88 #define PHB_TCE_ENABLE 0x20000000
89 #define PHB_SLOT_DISABLE 0x1C000000
90 #define PHB_DAC_DISABLE 0x01000000
91 #define PHB_MEM2_ENABLE 0x00400000
92 #define PHB_MCSR_ENABLE 0x00100000
93 /* TAR (Table Address Register) */
94 #define TAR_SW_BITS 0x0000ffffffff800fUL
95 #define TAR_VALID 0x0000000000000008UL
96 /* CSR (Channel/DMA Status Register) */
97 #define CSR_AGENT_MASK 0xffe0ffff
98 /* CCR (Calgary Configuration Register) */
99 #define CCR_2SEC_TIMEOUT 0x000000000000000EUL
100 /* PMCR/PMDR (Page Migration Control/Debug Registers */
101 #define PMR_SOFTSTOP 0x80000000
102 #define PMR_SOFTSTOPFAULT 0x40000000
103 #define PMR_HARDSTOP 0x20000000
105 #define MAX_NUM_OF_PHBS 8 /* how many PHBs in total? */
106 #define MAX_NUM_CHASSIS 8 /* max number of chassis */
107 /* MAX_PHB_BUS_NUM is the maximal possible dev->bus->number */
108 #define MAX_PHB_BUS_NUM (MAX_NUM_OF_PHBS * MAX_NUM_CHASSIS * 2)
109 #define PHBS_PER_CALGARY 4
111 /* register offsets in Calgary's internal register space */
112 static const unsigned long tar_offsets[] = {
119 static const unsigned long split_queue_offsets[] = {
120 0x4870 /* SPLIT QUEUE 0 */,
121 0x5870 /* SPLIT QUEUE 1 */,
122 0x6870 /* SPLIT QUEUE 2 */,
123 0x7870 /* SPLIT QUEUE 3 */
126 static const unsigned long phb_offsets[] = {
133 /* PHB debug registers */
135 static const unsigned long phb_debug_offsets[] = {
136 0x4000 /* PHB 0 DEBUG */,
137 0x5000 /* PHB 1 DEBUG */,
138 0x6000 /* PHB 2 DEBUG */,
139 0x7000 /* PHB 3 DEBUG */
143 * STUFF register for each debug PHB,
144 * byte 1 = start bus number, byte 2 = end bus number
147 #define PHB_DEBUG_STUFF_OFFSET 0x0020
149 #define EMERGENCY_PAGES 32 /* = 128KB */
151 unsigned int specified_table_size = TCE_TABLE_SIZE_UNSPECIFIED;
152 static int translate_empty_slots __read_mostly = 0;
153 static int calgary_detected __read_mostly = 0;
155 static struct rio_table_hdr *rio_table_hdr __initdata;
156 static struct scal_detail *scal_devs[MAX_NUMNODES] __initdata;
157 static struct rio_detail *rio_devs[MAX_NUMNODES * 4] __initdata;
159 struct calgary_bus_info {
161 unsigned char translation_disabled;
166 static void calgary_handle_quirks(struct iommu_table *tbl, struct pci_dev *dev);
167 static void calgary_tce_cache_blast(struct iommu_table *tbl);
168 static void calgary_dump_error_regs(struct iommu_table *tbl);
169 static void calioc2_handle_quirks(struct iommu_table *tbl, struct pci_dev *dev);
170 static void calioc2_tce_cache_blast(struct iommu_table *tbl);
171 static void calioc2_dump_error_regs(struct iommu_table *tbl);
172 static void calgary_init_bitmap_from_tce_table(struct iommu_table *tbl);
173 static void get_tce_space_from_tar(void);
175 static struct cal_chipset_ops calgary_chip_ops = {
176 .handle_quirks = calgary_handle_quirks,
177 .tce_cache_blast = calgary_tce_cache_blast,
178 .dump_error_regs = calgary_dump_error_regs
181 static struct cal_chipset_ops calioc2_chip_ops = {
182 .handle_quirks = calioc2_handle_quirks,
183 .tce_cache_blast = calioc2_tce_cache_blast,
184 .dump_error_regs = calioc2_dump_error_regs
187 static struct calgary_bus_info bus_info[MAX_PHB_BUS_NUM] = { { NULL, 0, 0 }, };
189 static inline int translation_enabled(struct iommu_table *tbl)
191 /* only PHBs with translation enabled have an IOMMU table */
192 return (tbl != NULL);
195 static void iommu_range_reserve(struct iommu_table *tbl,
196 unsigned long start_addr, unsigned int npages)
202 index = start_addr >> PAGE_SHIFT;
204 /* bail out if we're asked to reserve a region we don't cover */
205 if (index >= tbl->it_size)
208 end = index + npages;
209 if (end > tbl->it_size) /* don't go off the table */
212 spin_lock_irqsave(&tbl->it_lock, flags);
214 iommu_area_reserve(tbl->it_map, index, npages);
216 spin_unlock_irqrestore(&tbl->it_lock, flags);
219 static unsigned long iommu_range_alloc(struct device *dev,
220 struct iommu_table *tbl,
224 unsigned long offset;
225 unsigned long boundary_size;
227 boundary_size = ALIGN(dma_get_seg_boundary(dev) + 1,
228 PAGE_SIZE) >> PAGE_SHIFT;
232 spin_lock_irqsave(&tbl->it_lock, flags);
234 offset = iommu_area_alloc(tbl->it_map, tbl->it_size, tbl->it_hint,
235 npages, 0, boundary_size, 0);
236 if (offset == ~0UL) {
237 tbl->chip_ops->tce_cache_blast(tbl);
239 offset = iommu_area_alloc(tbl->it_map, tbl->it_size, 0,
240 npages, 0, boundary_size, 0);
241 if (offset == ~0UL) {
242 printk(KERN_WARNING "Calgary: IOMMU full.\n");
243 spin_unlock_irqrestore(&tbl->it_lock, flags);
244 if (panic_on_overflow)
245 panic("Calgary: fix the allocator.\n");
247 return bad_dma_address;
251 tbl->it_hint = offset + npages;
252 BUG_ON(tbl->it_hint > tbl->it_size);
254 spin_unlock_irqrestore(&tbl->it_lock, flags);
259 static dma_addr_t iommu_alloc(struct device *dev, struct iommu_table *tbl,
260 void *vaddr, unsigned int npages, int direction)
263 dma_addr_t ret = bad_dma_address;
265 entry = iommu_range_alloc(dev, tbl, npages);
267 if (unlikely(entry == bad_dma_address))
270 /* set the return dma address */
271 ret = (entry << PAGE_SHIFT) | ((unsigned long)vaddr & ~PAGE_MASK);
273 /* put the TCEs in the HW table */
274 tce_build(tbl, entry, npages, (unsigned long)vaddr & PAGE_MASK,
280 printk(KERN_WARNING "Calgary: failed to allocate %u pages in "
281 "iommu %p\n", npages, tbl);
282 return bad_dma_address;
285 static void iommu_free(struct iommu_table *tbl, dma_addr_t dma_addr,
289 unsigned long badend;
292 /* were we called with bad_dma_address? */
293 badend = bad_dma_address + (EMERGENCY_PAGES * PAGE_SIZE);
294 if (unlikely((dma_addr >= bad_dma_address) && (dma_addr < badend))) {
295 WARN(1, KERN_ERR "Calgary: driver tried unmapping bad DMA "
296 "address 0x%Lx\n", dma_addr);
300 entry = dma_addr >> PAGE_SHIFT;
302 BUG_ON(entry + npages > tbl->it_size);
304 tce_free(tbl, entry, npages);
306 spin_lock_irqsave(&tbl->it_lock, flags);
308 iommu_area_free(tbl->it_map, entry, npages);
310 spin_unlock_irqrestore(&tbl->it_lock, flags);
313 static inline struct iommu_table *find_iommu_table(struct device *dev)
315 struct pci_dev *pdev;
316 struct pci_bus *pbus;
317 struct iommu_table *tbl;
319 pdev = to_pci_dev(dev);
323 /* is the device behind a bridge? Look for the root bus */
327 tbl = pci_iommu(pbus);
329 BUG_ON(tbl && (tbl->it_busno != pbus->number));
334 static void calgary_unmap_sg(struct device *dev, struct scatterlist *sglist,
335 int nelems,enum dma_data_direction dir,
336 struct dma_attrs *attrs)
338 struct iommu_table *tbl = find_iommu_table(dev);
339 struct scatterlist *s;
342 if (!translation_enabled(tbl))
345 for_each_sg(sglist, s, nelems, i) {
347 dma_addr_t dma = s->dma_address;
348 unsigned int dmalen = s->dma_length;
353 npages = iommu_num_pages(dma, dmalen, PAGE_SIZE);
354 iommu_free(tbl, dma, npages);
358 static int calgary_map_sg(struct device *dev, struct scatterlist *sg,
359 int nelems, enum dma_data_direction dir,
360 struct dma_attrs *attrs)
362 struct iommu_table *tbl = find_iommu_table(dev);
363 struct scatterlist *s;
369 for_each_sg(sg, s, nelems, i) {
372 vaddr = (unsigned long) sg_virt(s);
373 npages = iommu_num_pages(vaddr, s->length, PAGE_SIZE);
375 entry = iommu_range_alloc(dev, tbl, npages);
376 if (entry == bad_dma_address) {
377 /* makes sure unmap knows to stop */
382 s->dma_address = (entry << PAGE_SHIFT) | s->offset;
384 /* insert into HW table */
385 tce_build(tbl, entry, npages, vaddr & PAGE_MASK, dir);
387 s->dma_length = s->length;
392 calgary_unmap_sg(dev, sg, nelems, dir, NULL);
393 for_each_sg(sg, s, nelems, i) {
394 sg->dma_address = bad_dma_address;
400 static dma_addr_t calgary_map_page(struct device *dev, struct page *page,
401 unsigned long offset, size_t size,
402 enum dma_data_direction dir,
403 struct dma_attrs *attrs)
405 void *vaddr = page_address(page) + offset;
408 struct iommu_table *tbl = find_iommu_table(dev);
410 uaddr = (unsigned long)vaddr;
411 npages = iommu_num_pages(uaddr, size, PAGE_SIZE);
413 return iommu_alloc(dev, tbl, vaddr, npages, dir);
416 static void calgary_unmap_page(struct device *dev, dma_addr_t dma_addr,
417 size_t size, enum dma_data_direction dir,
418 struct dma_attrs *attrs)
420 struct iommu_table *tbl = find_iommu_table(dev);
423 npages = iommu_num_pages(dma_addr, size, PAGE_SIZE);
424 iommu_free(tbl, dma_addr, npages);
427 static void* calgary_alloc_coherent(struct device *dev, size_t size,
428 dma_addr_t *dma_handle, gfp_t flag)
432 unsigned int npages, order;
433 struct iommu_table *tbl = find_iommu_table(dev);
435 size = PAGE_ALIGN(size); /* size rounded up to full pages */
436 npages = size >> PAGE_SHIFT;
437 order = get_order(size);
439 flag &= ~(__GFP_DMA | __GFP_HIGHMEM | __GFP_DMA32);
441 /* alloc enough pages (and possibly more) */
442 ret = (void *)__get_free_pages(flag, order);
445 memset(ret, 0, size);
447 /* set up tces to cover the allocated range */
448 mapping = iommu_alloc(dev, tbl, ret, npages, DMA_BIDIRECTIONAL);
449 if (mapping == bad_dma_address)
451 *dma_handle = mapping;
454 free_pages((unsigned long)ret, get_order(size));
460 static void calgary_free_coherent(struct device *dev, size_t size,
461 void *vaddr, dma_addr_t dma_handle)
464 struct iommu_table *tbl = find_iommu_table(dev);
466 size = PAGE_ALIGN(size);
467 npages = size >> PAGE_SHIFT;
469 iommu_free(tbl, dma_handle, npages);
470 free_pages((unsigned long)vaddr, get_order(size));
473 static struct dma_map_ops calgary_dma_ops = {
474 .alloc_coherent = calgary_alloc_coherent,
475 .free_coherent = calgary_free_coherent,
476 .map_sg = calgary_map_sg,
477 .unmap_sg = calgary_unmap_sg,
478 .map_page = calgary_map_page,
479 .unmap_page = calgary_unmap_page,
482 static inline void __iomem * busno_to_bbar(unsigned char num)
484 return bus_info[num].bbar;
487 static inline int busno_to_phbid(unsigned char num)
489 return bus_info[num].phbid;
492 static inline unsigned long split_queue_offset(unsigned char num)
494 size_t idx = busno_to_phbid(num);
496 return split_queue_offsets[idx];
499 static inline unsigned long tar_offset(unsigned char num)
501 size_t idx = busno_to_phbid(num);
503 return tar_offsets[idx];
506 static inline unsigned long phb_offset(unsigned char num)
508 size_t idx = busno_to_phbid(num);
510 return phb_offsets[idx];
513 static inline void __iomem* calgary_reg(void __iomem *bar, unsigned long offset)
515 unsigned long target = ((unsigned long)bar) | offset;
516 return (void __iomem*)target;
519 static inline int is_calioc2(unsigned short device)
521 return (device == PCI_DEVICE_ID_IBM_CALIOC2);
524 static inline int is_calgary(unsigned short device)
526 return (device == PCI_DEVICE_ID_IBM_CALGARY);
529 static inline int is_cal_pci_dev(unsigned short device)
531 return (is_calgary(device) || is_calioc2(device));
534 static void calgary_tce_cache_blast(struct iommu_table *tbl)
539 void __iomem *bbar = tbl->bbar;
540 void __iomem *target;
542 /* disable arbitration on the bus */
543 target = calgary_reg(bbar, phb_offset(tbl->it_busno) | PHB_AER_OFFSET);
547 /* read plssr to ensure it got there */
548 target = calgary_reg(bbar, phb_offset(tbl->it_busno) | PHB_PLSSR_OFFSET);
551 /* poll split queues until all DMA activity is done */
552 target = calgary_reg(bbar, split_queue_offset(tbl->it_busno));
556 } while ((val & 0xff) != 0xff && i < 100);
558 printk(KERN_WARNING "Calgary: PCI bus not quiesced, "
559 "continuing anyway\n");
561 /* invalidate TCE cache */
562 target = calgary_reg(bbar, tar_offset(tbl->it_busno));
563 writeq(tbl->tar_val, target);
565 /* enable arbitration */
566 target = calgary_reg(bbar, phb_offset(tbl->it_busno) | PHB_AER_OFFSET);
568 (void)readl(target); /* flush */
571 static void calioc2_tce_cache_blast(struct iommu_table *tbl)
573 void __iomem *bbar = tbl->bbar;
574 void __iomem *target;
579 unsigned char bus = tbl->it_busno;
582 printk(KERN_DEBUG "Calgary: CalIOC2 bus 0x%x entering tce cache blast "
583 "sequence - count %d\n", bus, count);
585 /* 1. using the Page Migration Control reg set SoftStop */
586 target = calgary_reg(bbar, phb_offset(bus) | PHB_PAGE_MIG_CTRL);
587 val = be32_to_cpu(readl(target));
588 printk(KERN_DEBUG "1a. read 0x%x [LE] from %p\n", val, target);
590 printk(KERN_DEBUG "1b. writing 0x%x [LE] to %p\n", val, target);
591 writel(cpu_to_be32(val), target);
593 /* 2. poll split queues until all DMA activity is done */
594 printk(KERN_DEBUG "2a. starting to poll split queues\n");
595 target = calgary_reg(bbar, split_queue_offset(bus));
597 val64 = readq(target);
599 } while ((val64 & 0xff) != 0xff && i < 100);
601 printk(KERN_WARNING "CalIOC2: PCI bus not quiesced, "
602 "continuing anyway\n");
604 /* 3. poll Page Migration DEBUG for SoftStopFault */
605 target = calgary_reg(bbar, phb_offset(bus) | PHB_PAGE_MIG_DEBUG);
606 val = be32_to_cpu(readl(target));
607 printk(KERN_DEBUG "3. read 0x%x [LE] from %p\n", val, target);
609 /* 4. if SoftStopFault - goto (1) */
610 if (val & PMR_SOFTSTOPFAULT) {
614 printk(KERN_WARNING "CalIOC2: too many SoftStopFaults, "
615 "aborting TCE cache flush sequence!\n");
616 return; /* pray for the best */
620 /* 5. Slam into HardStop by reading PHB_PAGE_MIG_CTRL */
621 target = calgary_reg(bbar, phb_offset(bus) | PHB_PAGE_MIG_CTRL);
622 printk(KERN_DEBUG "5a. slamming into HardStop by reading %p\n", target);
623 val = be32_to_cpu(readl(target));
624 printk(KERN_DEBUG "5b. read 0x%x [LE] from %p\n", val, target);
625 target = calgary_reg(bbar, phb_offset(bus) | PHB_PAGE_MIG_DEBUG);
626 val = be32_to_cpu(readl(target));
627 printk(KERN_DEBUG "5c. read 0x%x [LE] from %p (debug)\n", val, target);
629 /* 6. invalidate TCE cache */
630 printk(KERN_DEBUG "6. invalidating TCE cache\n");
631 target = calgary_reg(bbar, tar_offset(bus));
632 writeq(tbl->tar_val, target);
634 /* 7. Re-read PMCR */
635 printk(KERN_DEBUG "7a. Re-reading PMCR\n");
636 target = calgary_reg(bbar, phb_offset(bus) | PHB_PAGE_MIG_CTRL);
637 val = be32_to_cpu(readl(target));
638 printk(KERN_DEBUG "7b. read 0x%x [LE] from %p\n", val, target);
640 /* 8. Remove HardStop */
641 printk(KERN_DEBUG "8a. removing HardStop from PMCR\n");
642 target = calgary_reg(bbar, phb_offset(bus) | PHB_PAGE_MIG_CTRL);
644 printk(KERN_DEBUG "8b. writing 0x%x [LE] to %p\n", val, target);
645 writel(cpu_to_be32(val), target);
646 val = be32_to_cpu(readl(target));
647 printk(KERN_DEBUG "8c. read 0x%x [LE] from %p\n", val, target);
650 static void __init calgary_reserve_mem_region(struct pci_dev *dev, u64 start,
653 unsigned int numpages;
655 limit = limit | 0xfffff;
658 numpages = ((limit - start) >> PAGE_SHIFT);
659 iommu_range_reserve(pci_iommu(dev->bus), start, numpages);
662 static void __init calgary_reserve_peripheral_mem_1(struct pci_dev *dev)
664 void __iomem *target;
665 u64 low, high, sizelow;
667 struct iommu_table *tbl = pci_iommu(dev->bus);
668 unsigned char busnum = dev->bus->number;
669 void __iomem *bbar = tbl->bbar;
671 /* peripheral MEM_1 region */
672 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_1_LOW);
673 low = be32_to_cpu(readl(target));
674 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_1_HIGH);
675 high = be32_to_cpu(readl(target));
676 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_1_SIZE);
677 sizelow = be32_to_cpu(readl(target));
679 start = (high << 32) | low;
682 calgary_reserve_mem_region(dev, start, limit);
685 static void __init calgary_reserve_peripheral_mem_2(struct pci_dev *dev)
687 void __iomem *target;
689 u64 low, high, sizelow, sizehigh;
691 struct iommu_table *tbl = pci_iommu(dev->bus);
692 unsigned char busnum = dev->bus->number;
693 void __iomem *bbar = tbl->bbar;
696 target = calgary_reg(bbar, phb_offset(busnum) | PHB_CONFIG_RW_OFFSET);
697 val32 = be32_to_cpu(readl(target));
698 if (!(val32 & PHB_MEM2_ENABLE))
701 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_2_LOW);
702 low = be32_to_cpu(readl(target));
703 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_2_HIGH);
704 high = be32_to_cpu(readl(target));
705 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_2_SIZE_LOW);
706 sizelow = be32_to_cpu(readl(target));
707 target = calgary_reg(bbar, phb_offset(busnum) | PHB_MEM_2_SIZE_HIGH);
708 sizehigh = be32_to_cpu(readl(target));
710 start = (high << 32) | low;
711 limit = (sizehigh << 32) | sizelow;
713 calgary_reserve_mem_region(dev, start, limit);
717 * some regions of the IO address space do not get translated, so we
718 * must not give devices IO addresses in those regions. The regions
719 * are the 640KB-1MB region and the two PCI peripheral memory holes.
720 * Reserve all of them in the IOMMU bitmap to avoid giving them out
723 static void __init calgary_reserve_regions(struct pci_dev *dev)
727 struct iommu_table *tbl = pci_iommu(dev->bus);
729 /* reserve EMERGENCY_PAGES from bad_dma_address and up */
730 iommu_range_reserve(tbl, bad_dma_address, EMERGENCY_PAGES);
732 /* avoid the BIOS/VGA first 640KB-1MB region */
733 /* for CalIOC2 - avoid the entire first MB */
734 if (is_calgary(dev->device)) {
735 start = (640 * 1024);
736 npages = ((1024 - 640) * 1024) >> PAGE_SHIFT;
737 } else { /* calioc2 */
739 npages = (1 * 1024 * 1024) >> PAGE_SHIFT;
741 iommu_range_reserve(tbl, start, npages);
743 /* reserve the two PCI peripheral memory regions in IO space */
744 calgary_reserve_peripheral_mem_1(dev);
745 calgary_reserve_peripheral_mem_2(dev);
748 static int __init calgary_setup_tar(struct pci_dev *dev, void __iomem *bbar)
752 void __iomem *target;
754 struct iommu_table *tbl;
756 /* build TCE tables for each PHB */
757 ret = build_tce_table(dev, bbar);
761 tbl = pci_iommu(dev->bus);
762 tbl->it_base = (unsigned long)bus_info[dev->bus->number].tce_space;
764 if (is_kdump_kernel())
765 calgary_init_bitmap_from_tce_table(tbl);
767 tce_free(tbl, 0, tbl->it_size);
769 if (is_calgary(dev->device))
770 tbl->chip_ops = &calgary_chip_ops;
771 else if (is_calioc2(dev->device))
772 tbl->chip_ops = &calioc2_chip_ops;
776 calgary_reserve_regions(dev);
778 /* set TARs for each PHB */
779 target = calgary_reg(bbar, tar_offset(dev->bus->number));
780 val64 = be64_to_cpu(readq(target));
782 /* zero out all TAR bits under sw control */
783 val64 &= ~TAR_SW_BITS;
784 table_phys = (u64)__pa(tbl->it_base);
788 BUG_ON(specified_table_size > TCE_TABLE_SIZE_8M);
789 val64 |= (u64) specified_table_size;
791 tbl->tar_val = cpu_to_be64(val64);
793 writeq(tbl->tar_val, target);
794 readq(target); /* flush */
799 static void __init calgary_free_bus(struct pci_dev *dev)
802 struct iommu_table *tbl = pci_iommu(dev->bus);
803 void __iomem *target;
804 unsigned int bitmapsz;
806 target = calgary_reg(tbl->bbar, tar_offset(dev->bus->number));
807 val64 = be64_to_cpu(readq(target));
808 val64 &= ~TAR_SW_BITS;
809 writeq(cpu_to_be64(val64), target);
810 readq(target); /* flush */
812 bitmapsz = tbl->it_size / BITS_PER_BYTE;
813 free_pages((unsigned long)tbl->it_map, get_order(bitmapsz));
818 set_pci_iommu(dev->bus, NULL);
820 /* Can't free bootmem allocated memory after system is up :-( */
821 bus_info[dev->bus->number].tce_space = NULL;
824 static void calgary_dump_error_regs(struct iommu_table *tbl)
826 void __iomem *bbar = tbl->bbar;
827 void __iomem *target;
830 target = calgary_reg(bbar, phb_offset(tbl->it_busno) | PHB_CSR_OFFSET);
831 csr = be32_to_cpu(readl(target));
833 target = calgary_reg(bbar, phb_offset(tbl->it_busno) | PHB_PLSSR_OFFSET);
834 plssr = be32_to_cpu(readl(target));
836 /* If no error, the agent ID in the CSR is not valid */
837 printk(KERN_EMERG "Calgary: DMA error on Calgary PHB 0x%x, "
838 "0x%08x@CSR 0x%08x@PLSSR\n", tbl->it_busno, csr, plssr);
841 static void calioc2_dump_error_regs(struct iommu_table *tbl)
843 void __iomem *bbar = tbl->bbar;
844 u32 csr, csmr, plssr, mck, rcstat;
845 void __iomem *target;
846 unsigned long phboff = phb_offset(tbl->it_busno);
847 unsigned long erroff;
852 target = calgary_reg(bbar, phboff | PHB_CSR_OFFSET);
853 csr = be32_to_cpu(readl(target));
855 target = calgary_reg(bbar, phboff | PHB_PLSSR_OFFSET);
856 plssr = be32_to_cpu(readl(target));
858 target = calgary_reg(bbar, phboff | 0x290);
859 csmr = be32_to_cpu(readl(target));
861 target = calgary_reg(bbar, phboff | 0x800);
862 mck = be32_to_cpu(readl(target));
864 printk(KERN_EMERG "Calgary: DMA error on CalIOC2 PHB 0x%x\n",
867 printk(KERN_EMERG "Calgary: 0x%08x@CSR 0x%08x@PLSSR 0x%08x@CSMR 0x%08x@MCK\n",
868 csr, plssr, csmr, mck);
870 /* dump rest of error regs */
871 printk(KERN_EMERG "Calgary: ");
872 for (i = 0; i < ARRAY_SIZE(errregs); i++) {
873 /* err regs are at 0x810 - 0x870 */
874 erroff = (0x810 + (i * 0x10));
875 target = calgary_reg(bbar, phboff | erroff);
876 errregs[i] = be32_to_cpu(readl(target));
877 printk("0x%08x@0x%lx ", errregs[i], erroff);
881 /* root complex status */
882 target = calgary_reg(bbar, phboff | PHB_ROOT_COMPLEX_STATUS);
883 rcstat = be32_to_cpu(readl(target));
884 printk(KERN_EMERG "Calgary: 0x%08x@0x%x\n", rcstat,
885 PHB_ROOT_COMPLEX_STATUS);
888 static void calgary_watchdog(unsigned long data)
890 struct pci_dev *dev = (struct pci_dev *)data;
891 struct iommu_table *tbl = pci_iommu(dev->bus);
892 void __iomem *bbar = tbl->bbar;
894 void __iomem *target;
896 target = calgary_reg(bbar, phb_offset(tbl->it_busno) | PHB_CSR_OFFSET);
897 val32 = be32_to_cpu(readl(target));
899 /* If no error, the agent ID in the CSR is not valid */
900 if (val32 & CSR_AGENT_MASK) {
901 tbl->chip_ops->dump_error_regs(tbl);
906 /* Disable bus that caused the error */
907 target = calgary_reg(bbar, phb_offset(tbl->it_busno) |
908 PHB_CONFIG_RW_OFFSET);
909 val32 = be32_to_cpu(readl(target));
910 val32 |= PHB_SLOT_DISABLE;
911 writel(cpu_to_be32(val32), target);
912 readl(target); /* flush */
914 /* Reset the timer */
915 mod_timer(&tbl->watchdog_timer, jiffies + 2 * HZ);
919 static void __init calgary_set_split_completion_timeout(void __iomem *bbar,
920 unsigned char busnum, unsigned long timeout)
923 void __iomem *target;
924 unsigned int phb_shift = ~0; /* silence gcc */
927 switch (busno_to_phbid(busnum)) {
928 case 0: phb_shift = (63 - 19);
930 case 1: phb_shift = (63 - 23);
932 case 2: phb_shift = (63 - 27);
934 case 3: phb_shift = (63 - 35);
937 BUG_ON(busno_to_phbid(busnum));
940 target = calgary_reg(bbar, CALGARY_CONFIG_REG);
941 val64 = be64_to_cpu(readq(target));
943 /* zero out this PHB's timer bits */
944 mask = ~(0xFUL << phb_shift);
946 val64 |= (timeout << phb_shift);
947 writeq(cpu_to_be64(val64), target);
948 readq(target); /* flush */
951 static void __init calioc2_handle_quirks(struct iommu_table *tbl, struct pci_dev *dev)
953 unsigned char busnum = dev->bus->number;
954 void __iomem *bbar = tbl->bbar;
955 void __iomem *target;
959 * CalIOC2 designers recommend setting bit 8 in 0xnDB0 to 1
961 target = calgary_reg(bbar, phb_offset(busnum) | PHB_SAVIOR_L2);
962 val = cpu_to_be32(readl(target));
964 writel(cpu_to_be32(val), target);
967 static void __init calgary_handle_quirks(struct iommu_table *tbl, struct pci_dev *dev)
969 unsigned char busnum = dev->bus->number;
972 * Give split completion a longer timeout on bus 1 for aic94xx
973 * http://bugzilla.kernel.org/show_bug.cgi?id=7180
975 if (is_calgary(dev->device) && (busnum == 1))
976 calgary_set_split_completion_timeout(tbl->bbar, busnum,
980 static void __init calgary_enable_translation(struct pci_dev *dev)
983 unsigned char busnum;
984 void __iomem *target;
986 struct iommu_table *tbl;
988 busnum = dev->bus->number;
989 tbl = pci_iommu(dev->bus);
992 /* enable TCE in PHB Config Register */
993 target = calgary_reg(bbar, phb_offset(busnum) | PHB_CONFIG_RW_OFFSET);
994 val32 = be32_to_cpu(readl(target));
995 val32 |= PHB_TCE_ENABLE | PHB_DAC_DISABLE | PHB_MCSR_ENABLE;
997 printk(KERN_INFO "Calgary: enabling translation on %s PHB %#x\n",
998 (dev->device == PCI_DEVICE_ID_IBM_CALGARY) ?
999 "Calgary" : "CalIOC2", busnum);
1000 printk(KERN_INFO "Calgary: errant DMAs will now be prevented on this "
1003 writel(cpu_to_be32(val32), target);
1004 readl(target); /* flush */
1006 init_timer(&tbl->watchdog_timer);
1007 tbl->watchdog_timer.function = &calgary_watchdog;
1008 tbl->watchdog_timer.data = (unsigned long)dev;
1009 mod_timer(&tbl->watchdog_timer, jiffies);
1012 static void __init calgary_disable_translation(struct pci_dev *dev)
1015 unsigned char busnum;
1016 void __iomem *target;
1018 struct iommu_table *tbl;
1020 busnum = dev->bus->number;
1021 tbl = pci_iommu(dev->bus);
1024 /* disable TCE in PHB Config Register */
1025 target = calgary_reg(bbar, phb_offset(busnum) | PHB_CONFIG_RW_OFFSET);
1026 val32 = be32_to_cpu(readl(target));
1027 val32 &= ~(PHB_TCE_ENABLE | PHB_DAC_DISABLE | PHB_MCSR_ENABLE);
1029 printk(KERN_INFO "Calgary: disabling translation on PHB %#x!\n", busnum);
1030 writel(cpu_to_be32(val32), target);
1031 readl(target); /* flush */
1033 del_timer_sync(&tbl->watchdog_timer);
1036 static void __init calgary_init_one_nontraslated(struct pci_dev *dev)
1039 set_pci_iommu(dev->bus, NULL);
1041 /* is the device behind a bridge? */
1042 if (dev->bus->parent)
1043 dev->bus->parent->self = dev;
1045 dev->bus->self = dev;
1048 static int __init calgary_init_one(struct pci_dev *dev)
1051 struct iommu_table *tbl;
1054 BUG_ON(dev->bus->number >= MAX_PHB_BUS_NUM);
1056 bbar = busno_to_bbar(dev->bus->number);
1057 ret = calgary_setup_tar(dev, bbar);
1063 if (dev->bus->parent) {
1064 if (dev->bus->parent->self)
1065 printk(KERN_WARNING "Calgary: IEEEE, dev %p has "
1066 "bus->parent->self!\n", dev);
1067 dev->bus->parent->self = dev;
1069 dev->bus->self = dev;
1071 tbl = pci_iommu(dev->bus);
1072 tbl->chip_ops->handle_quirks(tbl, dev);
1074 calgary_enable_translation(dev);
1082 static int __init calgary_locate_bbars(void)
1085 int rioidx, phb, bus;
1087 void __iomem *target;
1088 unsigned long offset;
1089 u8 start_bus, end_bus;
1093 for (rioidx = 0; rioidx < rio_table_hdr->num_rio_dev; rioidx++) {
1094 struct rio_detail *rio = rio_devs[rioidx];
1096 if ((rio->type != COMPAT_CALGARY) && (rio->type != ALT_CALGARY))
1099 /* map entire 1MB of Calgary config space */
1100 bbar = ioremap_nocache(rio->BBAR, 1024 * 1024);
1104 for (phb = 0; phb < PHBS_PER_CALGARY; phb++) {
1105 offset = phb_debug_offsets[phb] | PHB_DEBUG_STUFF_OFFSET;
1106 target = calgary_reg(bbar, offset);
1108 val = be32_to_cpu(readl(target));
1110 start_bus = (u8)((val & 0x00FF0000) >> 16);
1111 end_bus = (u8)((val & 0x0000FF00) >> 8);
1114 for (bus = start_bus; bus <= end_bus; bus++) {
1115 bus_info[bus].bbar = bbar;
1116 bus_info[bus].phbid = phb;
1119 bus_info[start_bus].bbar = bbar;
1120 bus_info[start_bus].phbid = phb;
1128 /* scan bus_info and iounmap any bbars we previously ioremap'd */
1129 for (bus = 0; bus < ARRAY_SIZE(bus_info); bus++)
1130 if (bus_info[bus].bbar)
1131 iounmap(bus_info[bus].bbar);
1136 static int __init calgary_init(void)
1139 struct pci_dev *dev = NULL;
1140 struct calgary_bus_info *info;
1142 ret = calgary_locate_bbars();
1146 /* Purely for kdump kernel case */
1147 if (is_kdump_kernel())
1148 get_tce_space_from_tar();
1151 dev = pci_get_device(PCI_VENDOR_ID_IBM, PCI_ANY_ID, dev);
1154 if (!is_cal_pci_dev(dev->device))
1157 info = &bus_info[dev->bus->number];
1158 if (info->translation_disabled) {
1159 calgary_init_one_nontraslated(dev);
1163 if (!info->tce_space && !translate_empty_slots)
1166 ret = calgary_init_one(dev);
1172 for_each_pci_dev(dev) {
1173 struct iommu_table *tbl;
1175 tbl = find_iommu_table(&dev->dev);
1177 if (translation_enabled(tbl))
1178 dev->dev.archdata.dma_ops = &calgary_dma_ops;
1185 dev = pci_get_device(PCI_VENDOR_ID_IBM, PCI_ANY_ID, dev);
1188 if (!is_cal_pci_dev(dev->device))
1191 info = &bus_info[dev->bus->number];
1192 if (info->translation_disabled) {
1196 if (!info->tce_space && !translate_empty_slots)
1199 calgary_disable_translation(dev);
1200 calgary_free_bus(dev);
1201 pci_dev_put(dev); /* Undo calgary_init_one()'s pci_dev_get() */
1202 dev->dev.archdata.dma_ops = NULL;
1208 static inline int __init determine_tce_table_size(u64 ram)
1212 if (specified_table_size != TCE_TABLE_SIZE_UNSPECIFIED)
1213 return specified_table_size;
1216 * Table sizes are from 0 to 7 (TCE_TABLE_SIZE_64K to
1217 * TCE_TABLE_SIZE_8M). Table size 0 has 8K entries and each
1218 * larger table size has twice as many entries, so shift the
1219 * max ram address by 13 to divide by 8K and then look at the
1220 * order of the result to choose between 0-7.
1222 ret = get_order(ram >> 13);
1223 if (ret > TCE_TABLE_SIZE_8M)
1224 ret = TCE_TABLE_SIZE_8M;
1229 static int __init build_detail_arrays(void)
1232 unsigned numnodes, i;
1233 int scal_detail_size, rio_detail_size;
1235 numnodes = rio_table_hdr->num_scal_dev;
1236 if (numnodes > MAX_NUMNODES){
1238 "Calgary: MAX_NUMNODES too low! Defined as %d, "
1239 "but system has %d nodes.\n",
1240 MAX_NUMNODES, numnodes);
1244 switch (rio_table_hdr->version){
1246 scal_detail_size = 11;
1247 rio_detail_size = 13;
1250 scal_detail_size = 12;
1251 rio_detail_size = 15;
1255 "Calgary: Invalid Rio Grande Table Version: %d\n",
1256 rio_table_hdr->version);
1260 ptr = ((unsigned long)rio_table_hdr) + 3;
1261 for (i = 0; i < numnodes; i++, ptr += scal_detail_size)
1262 scal_devs[i] = (struct scal_detail *)ptr;
1264 for (i = 0; i < rio_table_hdr->num_rio_dev;
1265 i++, ptr += rio_detail_size)
1266 rio_devs[i] = (struct rio_detail *)ptr;
1271 static int __init calgary_bus_has_devices(int bus, unsigned short pci_dev)
1276 if (pci_dev == PCI_DEVICE_ID_IBM_CALIOC2) {
1278 * FIXME: properly scan for devices accross the
1279 * PCI-to-PCI bridge on every CalIOC2 port.
1284 for (dev = 1; dev < 8; dev++) {
1285 val = read_pci_config(bus, dev, 0, 0);
1286 if (val != 0xffffffff)
1289 return (val != 0xffffffff);
1293 * calgary_init_bitmap_from_tce_table():
1294 * Funtion for kdump case. In the second/kdump kernel initialize
1295 * the bitmap based on the tce table entries obtained from first kernel
1297 static void calgary_init_bitmap_from_tce_table(struct iommu_table *tbl)
1301 tp = ((u64 *)tbl->it_base);
1302 for (index = 0 ; index < tbl->it_size; index++) {
1304 set_bit(index, tbl->it_map);
1310 * get_tce_space_from_tar():
1311 * Function for kdump case. Get the tce tables from first kernel
1312 * by reading the contents of the base adress register of calgary iommu
1314 static void __init get_tce_space_from_tar(void)
1317 void __iomem *target;
1318 unsigned long tce_space;
1320 for (bus = 0; bus < MAX_PHB_BUS_NUM; bus++) {
1321 struct calgary_bus_info *info = &bus_info[bus];
1322 unsigned short pci_device;
1325 val = read_pci_config(bus, 0, 0, 0);
1326 pci_device = (val & 0xFFFF0000) >> 16;
1328 if (!is_cal_pci_dev(pci_device))
1330 if (info->translation_disabled)
1333 if (calgary_bus_has_devices(bus, pci_device) ||
1334 translate_empty_slots) {
1335 target = calgary_reg(bus_info[bus].bbar,
1337 tce_space = be64_to_cpu(readq(target));
1338 tce_space = tce_space & TAR_SW_BITS;
1340 tce_space = tce_space & (~specified_table_size);
1341 info->tce_space = (u64 *)__va(tce_space);
1347 void __init detect_calgary(void)
1351 int calgary_found = 0;
1353 unsigned int offset, prev_offset;
1357 * if the user specified iommu=off or iommu=soft or we found
1358 * another HW IOMMU already, bail out.
1360 if (swiotlb || no_iommu || iommu_detected)
1366 if (!early_pci_allowed())
1369 printk(KERN_DEBUG "Calgary: detecting Calgary via BIOS EBDA area\n");
1371 ptr = (unsigned long)phys_to_virt(get_bios_ebda());
1373 rio_table_hdr = NULL;
1377 * The next offset is stored in the 1st word.
1378 * Only parse up until the offset increases:
1380 while (offset > prev_offset) {
1381 /* The block id is stored in the 2nd word */
1382 if (*((unsigned short *)(ptr + offset + 2)) == 0x4752){
1383 /* set the pointer past the offset & block id */
1384 rio_table_hdr = (struct rio_table_hdr *)(ptr + offset + 4);
1387 prev_offset = offset;
1388 offset = *((unsigned short *)(ptr + offset));
1390 if (!rio_table_hdr) {
1391 printk(KERN_DEBUG "Calgary: Unable to locate Rio Grande table "
1392 "in EBDA - bailing!\n");
1396 ret = build_detail_arrays();
1398 printk(KERN_DEBUG "Calgary: build_detail_arrays ret %d\n", ret);
1402 specified_table_size = determine_tce_table_size((is_kdump_kernel() ?
1403 saved_max_pfn : max_pfn) * PAGE_SIZE);
1405 for (bus = 0; bus < MAX_PHB_BUS_NUM; bus++) {
1406 struct calgary_bus_info *info = &bus_info[bus];
1407 unsigned short pci_device;
1410 val = read_pci_config(bus, 0, 0, 0);
1411 pci_device = (val & 0xFFFF0000) >> 16;
1413 if (!is_cal_pci_dev(pci_device))
1416 if (info->translation_disabled)
1419 if (calgary_bus_has_devices(bus, pci_device) ||
1420 translate_empty_slots) {
1422 * If it is kdump kernel, find and use tce tables
1423 * from first kernel, else allocate tce tables here
1425 if (!is_kdump_kernel()) {
1426 tbl = alloc_tce_table();
1429 info->tce_space = tbl;
1435 printk(KERN_DEBUG "Calgary: finished detection, Calgary %s\n",
1436 calgary_found ? "found" : "not found");
1438 if (calgary_found) {
1440 calgary_detected = 1;
1441 printk(KERN_INFO "PCI-DMA: Calgary IOMMU detected.\n");
1442 printk(KERN_INFO "PCI-DMA: Calgary TCE table spec is %d\n",
1443 specified_table_size);
1445 /* swiotlb for devices that aren't behind the Calgary. */
1446 if (max_pfn > MAX_DMA32_PFN)
1452 for (--bus; bus >= 0; --bus) {
1453 struct calgary_bus_info *info = &bus_info[bus];
1455 if (info->tce_space)
1456 free_tce_table(info->tce_space);
1460 int __init calgary_iommu_init(void)
1464 if (no_iommu || (swiotlb && !calgary_detected))
1467 if (!calgary_detected)
1470 /* ok, we're trying to use Calgary - let's roll */
1471 printk(KERN_INFO "PCI-DMA: Using Calgary IOMMU\n");
1473 ret = calgary_init();
1475 printk(KERN_ERR "PCI-DMA: Calgary init failed %d, "
1476 "falling back to no_iommu\n", ret);
1481 bad_dma_address = 0x0;
1482 /* dma_ops is set to swiotlb or nommu */
1484 dma_ops = &nommu_dma_ops;
1489 static int __init calgary_parse_options(char *p)
1491 unsigned int bridge;
1496 if (!strncmp(p, "64k", 3))
1497 specified_table_size = TCE_TABLE_SIZE_64K;
1498 else if (!strncmp(p, "128k", 4))
1499 specified_table_size = TCE_TABLE_SIZE_128K;
1500 else if (!strncmp(p, "256k", 4))
1501 specified_table_size = TCE_TABLE_SIZE_256K;
1502 else if (!strncmp(p, "512k", 4))
1503 specified_table_size = TCE_TABLE_SIZE_512K;
1504 else if (!strncmp(p, "1M", 2))
1505 specified_table_size = TCE_TABLE_SIZE_1M;
1506 else if (!strncmp(p, "2M", 2))
1507 specified_table_size = TCE_TABLE_SIZE_2M;
1508 else if (!strncmp(p, "4M", 2))
1509 specified_table_size = TCE_TABLE_SIZE_4M;
1510 else if (!strncmp(p, "8M", 2))
1511 specified_table_size = TCE_TABLE_SIZE_8M;
1513 len = strlen("translate_empty_slots");
1514 if (!strncmp(p, "translate_empty_slots", len))
1515 translate_empty_slots = 1;
1517 len = strlen("disable");
1518 if (!strncmp(p, "disable", len)) {
1524 bridge = simple_strtoul(p, &endp, 0);
1528 if (bridge < MAX_PHB_BUS_NUM) {
1529 printk(KERN_INFO "Calgary: disabling "
1530 "translation for PHB %#x\n", bridge);
1531 bus_info[bridge].translation_disabled = 1;
1535 p = strpbrk(p, ",");
1543 __setup("calgary=", calgary_parse_options);
1545 static void __init calgary_fixup_one_tce_space(struct pci_dev *dev)
1547 struct iommu_table *tbl;
1548 unsigned int npages;
1551 tbl = pci_iommu(dev->bus);
1553 for (i = 0; i < 4; i++) {
1554 struct resource *r = &dev->resource[PCI_BRIDGE_RESOURCES + i];
1556 /* Don't give out TCEs that map MEM resources */
1557 if (!(r->flags & IORESOURCE_MEM))
1560 /* 0-based? we reserve the whole 1st MB anyway */
1564 /* cover the whole region */
1565 npages = (r->end - r->start) >> PAGE_SHIFT;
1568 iommu_range_reserve(tbl, r->start, npages);
1572 static int __init calgary_fixup_tce_spaces(void)
1574 struct pci_dev *dev = NULL;
1575 struct calgary_bus_info *info;
1577 if (no_iommu || swiotlb || !calgary_detected)
1580 printk(KERN_DEBUG "Calgary: fixing up tce spaces\n");
1583 dev = pci_get_device(PCI_VENDOR_ID_IBM, PCI_ANY_ID, dev);
1586 if (!is_cal_pci_dev(dev->device))
1589 info = &bus_info[dev->bus->number];
1590 if (info->translation_disabled)
1593 if (!info->tce_space)
1596 calgary_fixup_one_tce_space(dev);
1604 * We need to be call after pcibios_assign_resources (fs_initcall level)
1605 * and before device_initcall.
1607 rootfs_initcall(calgary_fixup_tce_spaces);