162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0
262306a36Sopenharmony_ci
362306a36Sopenharmony_ci/*
462306a36Sopenharmony_ci * Copyright 2016-2019 HabanaLabs, Ltd.
562306a36Sopenharmony_ci * All Rights Reserved.
662306a36Sopenharmony_ci */
762306a36Sopenharmony_ci
862306a36Sopenharmony_ci#include <uapi/drm/habanalabs_accel.h>
962306a36Sopenharmony_ci#include "habanalabs.h"
1062306a36Sopenharmony_ci
1162306a36Sopenharmony_ci#include <linux/mm.h>
1262306a36Sopenharmony_ci#include <linux/slab.h>
1362306a36Sopenharmony_ci#include <linux/uaccess.h>
1462306a36Sopenharmony_ci
1562306a36Sopenharmony_ci#define CB_VA_POOL_SIZE		(4UL * SZ_1G)
1662306a36Sopenharmony_ci
1762306a36Sopenharmony_cistatic int cb_map_mem(struct hl_ctx *ctx, struct hl_cb *cb)
1862306a36Sopenharmony_ci{
1962306a36Sopenharmony_ci	struct hl_device *hdev = ctx->hdev;
2062306a36Sopenharmony_ci	struct asic_fixed_properties *prop = &hdev->asic_prop;
2162306a36Sopenharmony_ci	u32 page_size = prop->pmmu.page_size;
2262306a36Sopenharmony_ci	int rc;
2362306a36Sopenharmony_ci
2462306a36Sopenharmony_ci	if (!hdev->supports_cb_mapping) {
2562306a36Sopenharmony_ci		dev_err_ratelimited(hdev->dev,
2662306a36Sopenharmony_ci				"Mapping a CB to the device's MMU is not supported\n");
2762306a36Sopenharmony_ci		return -EINVAL;
2862306a36Sopenharmony_ci	}
2962306a36Sopenharmony_ci
3062306a36Sopenharmony_ci	if (cb->is_mmu_mapped)
3162306a36Sopenharmony_ci		return 0;
3262306a36Sopenharmony_ci
3362306a36Sopenharmony_ci	cb->roundup_size = roundup(cb->size, page_size);
3462306a36Sopenharmony_ci
3562306a36Sopenharmony_ci	cb->virtual_addr = (u64) gen_pool_alloc(ctx->cb_va_pool, cb->roundup_size);
3662306a36Sopenharmony_ci	if (!cb->virtual_addr) {
3762306a36Sopenharmony_ci		dev_err(hdev->dev, "Failed to allocate device virtual address for CB\n");
3862306a36Sopenharmony_ci		return -ENOMEM;
3962306a36Sopenharmony_ci	}
4062306a36Sopenharmony_ci
4162306a36Sopenharmony_ci	mutex_lock(&hdev->mmu_lock);
4262306a36Sopenharmony_ci
4362306a36Sopenharmony_ci	rc = hl_mmu_map_contiguous(ctx, cb->virtual_addr, cb->bus_address, cb->roundup_size);
4462306a36Sopenharmony_ci	if (rc) {
4562306a36Sopenharmony_ci		dev_err(hdev->dev, "Failed to map VA %#llx to CB\n", cb->virtual_addr);
4662306a36Sopenharmony_ci		goto err_va_pool_free;
4762306a36Sopenharmony_ci	}
4862306a36Sopenharmony_ci
4962306a36Sopenharmony_ci	rc = hl_mmu_invalidate_cache(hdev, false, MMU_OP_USERPTR | MMU_OP_SKIP_LOW_CACHE_INV);
5062306a36Sopenharmony_ci	if (rc)
5162306a36Sopenharmony_ci		goto err_mmu_unmap;
5262306a36Sopenharmony_ci
5362306a36Sopenharmony_ci	mutex_unlock(&hdev->mmu_lock);
5462306a36Sopenharmony_ci
5562306a36Sopenharmony_ci	cb->is_mmu_mapped = true;
5662306a36Sopenharmony_ci
5762306a36Sopenharmony_ci	return 0;
5862306a36Sopenharmony_ci
5962306a36Sopenharmony_cierr_mmu_unmap:
6062306a36Sopenharmony_ci	hl_mmu_unmap_contiguous(ctx, cb->virtual_addr, cb->roundup_size);
6162306a36Sopenharmony_cierr_va_pool_free:
6262306a36Sopenharmony_ci	mutex_unlock(&hdev->mmu_lock);
6362306a36Sopenharmony_ci	gen_pool_free(ctx->cb_va_pool, cb->virtual_addr, cb->roundup_size);
6462306a36Sopenharmony_ci
6562306a36Sopenharmony_ci	return rc;
6662306a36Sopenharmony_ci}
6762306a36Sopenharmony_ci
6862306a36Sopenharmony_cistatic void cb_unmap_mem(struct hl_ctx *ctx, struct hl_cb *cb)
6962306a36Sopenharmony_ci{
7062306a36Sopenharmony_ci	struct hl_device *hdev = ctx->hdev;
7162306a36Sopenharmony_ci
7262306a36Sopenharmony_ci	mutex_lock(&hdev->mmu_lock);
7362306a36Sopenharmony_ci	hl_mmu_unmap_contiguous(ctx, cb->virtual_addr, cb->roundup_size);
7462306a36Sopenharmony_ci	hl_mmu_invalidate_cache(hdev, true, MMU_OP_USERPTR);
7562306a36Sopenharmony_ci	mutex_unlock(&hdev->mmu_lock);
7662306a36Sopenharmony_ci
7762306a36Sopenharmony_ci	gen_pool_free(ctx->cb_va_pool, cb->virtual_addr, cb->roundup_size);
7862306a36Sopenharmony_ci}
7962306a36Sopenharmony_ci
8062306a36Sopenharmony_cistatic void cb_fini(struct hl_device *hdev, struct hl_cb *cb)
8162306a36Sopenharmony_ci{
8262306a36Sopenharmony_ci	if (cb->is_internal)
8362306a36Sopenharmony_ci		gen_pool_free(hdev->internal_cb_pool,
8462306a36Sopenharmony_ci				(uintptr_t)cb->kernel_address, cb->size);
8562306a36Sopenharmony_ci	else
8662306a36Sopenharmony_ci		hl_asic_dma_free_coherent(hdev, cb->size, cb->kernel_address, cb->bus_address);
8762306a36Sopenharmony_ci
8862306a36Sopenharmony_ci	kfree(cb);
8962306a36Sopenharmony_ci}
9062306a36Sopenharmony_ci
9162306a36Sopenharmony_cistatic void cb_do_release(struct hl_device *hdev, struct hl_cb *cb)
9262306a36Sopenharmony_ci{
9362306a36Sopenharmony_ci	if (cb->is_pool) {
9462306a36Sopenharmony_ci		atomic_set(&cb->is_handle_destroyed, 0);
9562306a36Sopenharmony_ci		spin_lock(&hdev->cb_pool_lock);
9662306a36Sopenharmony_ci		list_add(&cb->pool_list, &hdev->cb_pool);
9762306a36Sopenharmony_ci		spin_unlock(&hdev->cb_pool_lock);
9862306a36Sopenharmony_ci	} else {
9962306a36Sopenharmony_ci		cb_fini(hdev, cb);
10062306a36Sopenharmony_ci	}
10162306a36Sopenharmony_ci}
10262306a36Sopenharmony_ci
10362306a36Sopenharmony_cistatic struct hl_cb *hl_cb_alloc(struct hl_device *hdev, u32 cb_size,
10462306a36Sopenharmony_ci					int ctx_id, bool internal_cb)
10562306a36Sopenharmony_ci{
10662306a36Sopenharmony_ci	struct hl_cb *cb = NULL;
10762306a36Sopenharmony_ci	u32 cb_offset;
10862306a36Sopenharmony_ci	void *p;
10962306a36Sopenharmony_ci
11062306a36Sopenharmony_ci	/*
11162306a36Sopenharmony_ci	 * We use of GFP_ATOMIC here because this function can be called from
11262306a36Sopenharmony_ci	 * the latency-sensitive code path for command submission. Due to H/W
11362306a36Sopenharmony_ci	 * limitations in some of the ASICs, the kernel must copy the user CB
11462306a36Sopenharmony_ci	 * that is designated for an external queue and actually enqueue
11562306a36Sopenharmony_ci	 * the kernel's copy. Hence, we must never sleep in this code section
11662306a36Sopenharmony_ci	 * and must use GFP_ATOMIC for all memory allocations.
11762306a36Sopenharmony_ci	 */
11862306a36Sopenharmony_ci	if (ctx_id == HL_KERNEL_ASID_ID && !hdev->disabled)
11962306a36Sopenharmony_ci		cb = kzalloc(sizeof(*cb), GFP_ATOMIC);
12062306a36Sopenharmony_ci
12162306a36Sopenharmony_ci	if (!cb)
12262306a36Sopenharmony_ci		cb = kzalloc(sizeof(*cb), GFP_KERNEL);
12362306a36Sopenharmony_ci
12462306a36Sopenharmony_ci	if (!cb)
12562306a36Sopenharmony_ci		return NULL;
12662306a36Sopenharmony_ci
12762306a36Sopenharmony_ci	if (internal_cb) {
12862306a36Sopenharmony_ci		p = (void *) gen_pool_alloc(hdev->internal_cb_pool, cb_size);
12962306a36Sopenharmony_ci		if (!p) {
13062306a36Sopenharmony_ci			kfree(cb);
13162306a36Sopenharmony_ci			return NULL;
13262306a36Sopenharmony_ci		}
13362306a36Sopenharmony_ci
13462306a36Sopenharmony_ci		cb_offset = p - hdev->internal_cb_pool_virt_addr;
13562306a36Sopenharmony_ci		cb->is_internal = true;
13662306a36Sopenharmony_ci		cb->bus_address =  hdev->internal_cb_va_base + cb_offset;
13762306a36Sopenharmony_ci	} else if (ctx_id == HL_KERNEL_ASID_ID) {
13862306a36Sopenharmony_ci		p = hl_asic_dma_alloc_coherent(hdev, cb_size, &cb->bus_address, GFP_ATOMIC);
13962306a36Sopenharmony_ci		if (!p)
14062306a36Sopenharmony_ci			p = hl_asic_dma_alloc_coherent(hdev, cb_size, &cb->bus_address, GFP_KERNEL);
14162306a36Sopenharmony_ci	} else {
14262306a36Sopenharmony_ci		p = hl_asic_dma_alloc_coherent(hdev, cb_size, &cb->bus_address,
14362306a36Sopenharmony_ci						GFP_USER | __GFP_ZERO);
14462306a36Sopenharmony_ci	}
14562306a36Sopenharmony_ci
14662306a36Sopenharmony_ci	if (!p) {
14762306a36Sopenharmony_ci		dev_err(hdev->dev,
14862306a36Sopenharmony_ci			"failed to allocate %d of dma memory for CB\n",
14962306a36Sopenharmony_ci			cb_size);
15062306a36Sopenharmony_ci		kfree(cb);
15162306a36Sopenharmony_ci		return NULL;
15262306a36Sopenharmony_ci	}
15362306a36Sopenharmony_ci
15462306a36Sopenharmony_ci	cb->kernel_address = p;
15562306a36Sopenharmony_ci	cb->size = cb_size;
15662306a36Sopenharmony_ci
15762306a36Sopenharmony_ci	return cb;
15862306a36Sopenharmony_ci}
15962306a36Sopenharmony_ci
16062306a36Sopenharmony_cistruct hl_cb_mmap_mem_alloc_args {
16162306a36Sopenharmony_ci	struct hl_device *hdev;
16262306a36Sopenharmony_ci	struct hl_ctx *ctx;
16362306a36Sopenharmony_ci	u32 cb_size;
16462306a36Sopenharmony_ci	bool internal_cb;
16562306a36Sopenharmony_ci	bool map_cb;
16662306a36Sopenharmony_ci};
16762306a36Sopenharmony_ci
16862306a36Sopenharmony_cistatic void hl_cb_mmap_mem_release(struct hl_mmap_mem_buf *buf)
16962306a36Sopenharmony_ci{
17062306a36Sopenharmony_ci	struct hl_cb *cb = buf->private;
17162306a36Sopenharmony_ci
17262306a36Sopenharmony_ci	hl_debugfs_remove_cb(cb);
17362306a36Sopenharmony_ci
17462306a36Sopenharmony_ci	if (cb->is_mmu_mapped)
17562306a36Sopenharmony_ci		cb_unmap_mem(cb->ctx, cb);
17662306a36Sopenharmony_ci
17762306a36Sopenharmony_ci	hl_ctx_put(cb->ctx);
17862306a36Sopenharmony_ci
17962306a36Sopenharmony_ci	cb_do_release(cb->hdev, cb);
18062306a36Sopenharmony_ci}
18162306a36Sopenharmony_ci
18262306a36Sopenharmony_cistatic int hl_cb_mmap_mem_alloc(struct hl_mmap_mem_buf *buf, gfp_t gfp, void *args)
18362306a36Sopenharmony_ci{
18462306a36Sopenharmony_ci	struct hl_cb_mmap_mem_alloc_args *cb_args = args;
18562306a36Sopenharmony_ci	struct hl_cb *cb;
18662306a36Sopenharmony_ci	int rc, ctx_id = cb_args->ctx->asid;
18762306a36Sopenharmony_ci	bool alloc_new_cb = true;
18862306a36Sopenharmony_ci
18962306a36Sopenharmony_ci	if (!cb_args->internal_cb) {
19062306a36Sopenharmony_ci		/* Minimum allocation must be PAGE SIZE */
19162306a36Sopenharmony_ci		if (cb_args->cb_size < PAGE_SIZE)
19262306a36Sopenharmony_ci			cb_args->cb_size = PAGE_SIZE;
19362306a36Sopenharmony_ci
19462306a36Sopenharmony_ci		if (ctx_id == HL_KERNEL_ASID_ID &&
19562306a36Sopenharmony_ci				cb_args->cb_size <= cb_args->hdev->asic_prop.cb_pool_cb_size) {
19662306a36Sopenharmony_ci
19762306a36Sopenharmony_ci			spin_lock(&cb_args->hdev->cb_pool_lock);
19862306a36Sopenharmony_ci			if (!list_empty(&cb_args->hdev->cb_pool)) {
19962306a36Sopenharmony_ci				cb = list_first_entry(&cb_args->hdev->cb_pool,
20062306a36Sopenharmony_ci						typeof(*cb), pool_list);
20162306a36Sopenharmony_ci				list_del(&cb->pool_list);
20262306a36Sopenharmony_ci				spin_unlock(&cb_args->hdev->cb_pool_lock);
20362306a36Sopenharmony_ci				alloc_new_cb = false;
20462306a36Sopenharmony_ci			} else {
20562306a36Sopenharmony_ci				spin_unlock(&cb_args->hdev->cb_pool_lock);
20662306a36Sopenharmony_ci				dev_dbg(cb_args->hdev->dev, "CB pool is empty\n");
20762306a36Sopenharmony_ci			}
20862306a36Sopenharmony_ci		}
20962306a36Sopenharmony_ci	}
21062306a36Sopenharmony_ci
21162306a36Sopenharmony_ci	if (alloc_new_cb) {
21262306a36Sopenharmony_ci		cb = hl_cb_alloc(cb_args->hdev, cb_args->cb_size, ctx_id, cb_args->internal_cb);
21362306a36Sopenharmony_ci		if (!cb)
21462306a36Sopenharmony_ci			return -ENOMEM;
21562306a36Sopenharmony_ci	}
21662306a36Sopenharmony_ci
21762306a36Sopenharmony_ci	cb->hdev = cb_args->hdev;
21862306a36Sopenharmony_ci	cb->ctx = cb_args->ctx;
21962306a36Sopenharmony_ci	cb->buf = buf;
22062306a36Sopenharmony_ci	cb->buf->mappable_size = cb->size;
22162306a36Sopenharmony_ci	cb->buf->private = cb;
22262306a36Sopenharmony_ci
22362306a36Sopenharmony_ci	hl_ctx_get(cb->ctx);
22462306a36Sopenharmony_ci
22562306a36Sopenharmony_ci	if (cb_args->map_cb) {
22662306a36Sopenharmony_ci		if (ctx_id == HL_KERNEL_ASID_ID) {
22762306a36Sopenharmony_ci			dev_err(cb_args->hdev->dev,
22862306a36Sopenharmony_ci				"CB mapping is not supported for kernel context\n");
22962306a36Sopenharmony_ci			rc = -EINVAL;
23062306a36Sopenharmony_ci			goto release_cb;
23162306a36Sopenharmony_ci		}
23262306a36Sopenharmony_ci
23362306a36Sopenharmony_ci		rc = cb_map_mem(cb_args->ctx, cb);
23462306a36Sopenharmony_ci		if (rc)
23562306a36Sopenharmony_ci			goto release_cb;
23662306a36Sopenharmony_ci	}
23762306a36Sopenharmony_ci
23862306a36Sopenharmony_ci	hl_debugfs_add_cb(cb);
23962306a36Sopenharmony_ci
24062306a36Sopenharmony_ci	return 0;
24162306a36Sopenharmony_ci
24262306a36Sopenharmony_cirelease_cb:
24362306a36Sopenharmony_ci	hl_ctx_put(cb->ctx);
24462306a36Sopenharmony_ci	cb_do_release(cb_args->hdev, cb);
24562306a36Sopenharmony_ci
24662306a36Sopenharmony_ci	return rc;
24762306a36Sopenharmony_ci}
24862306a36Sopenharmony_ci
24962306a36Sopenharmony_cistatic int hl_cb_mmap(struct hl_mmap_mem_buf *buf,
25062306a36Sopenharmony_ci				      struct vm_area_struct *vma, void *args)
25162306a36Sopenharmony_ci{
25262306a36Sopenharmony_ci	struct hl_cb *cb = buf->private;
25362306a36Sopenharmony_ci
25462306a36Sopenharmony_ci	return cb->hdev->asic_funcs->mmap(cb->hdev, vma, cb->kernel_address,
25562306a36Sopenharmony_ci					cb->bus_address, cb->size);
25662306a36Sopenharmony_ci}
25762306a36Sopenharmony_ci
25862306a36Sopenharmony_cistatic struct hl_mmap_mem_buf_behavior cb_behavior = {
25962306a36Sopenharmony_ci	.topic = "CB",
26062306a36Sopenharmony_ci	.mem_id = HL_MMAP_TYPE_CB,
26162306a36Sopenharmony_ci	.alloc = hl_cb_mmap_mem_alloc,
26262306a36Sopenharmony_ci	.release = hl_cb_mmap_mem_release,
26362306a36Sopenharmony_ci	.mmap = hl_cb_mmap,
26462306a36Sopenharmony_ci};
26562306a36Sopenharmony_ci
26662306a36Sopenharmony_ciint hl_cb_create(struct hl_device *hdev, struct hl_mem_mgr *mmg,
26762306a36Sopenharmony_ci			struct hl_ctx *ctx, u32 cb_size, bool internal_cb,
26862306a36Sopenharmony_ci			bool map_cb, u64 *handle)
26962306a36Sopenharmony_ci{
27062306a36Sopenharmony_ci	struct hl_cb_mmap_mem_alloc_args args = {
27162306a36Sopenharmony_ci		.hdev = hdev,
27262306a36Sopenharmony_ci		.ctx = ctx,
27362306a36Sopenharmony_ci		.cb_size = cb_size,
27462306a36Sopenharmony_ci		.internal_cb = internal_cb,
27562306a36Sopenharmony_ci		.map_cb = map_cb,
27662306a36Sopenharmony_ci	};
27762306a36Sopenharmony_ci	struct hl_mmap_mem_buf *buf;
27862306a36Sopenharmony_ci	int ctx_id = ctx->asid;
27962306a36Sopenharmony_ci
28062306a36Sopenharmony_ci	if ((hdev->disabled) || (hdev->reset_info.in_reset && (ctx_id != HL_KERNEL_ASID_ID))) {
28162306a36Sopenharmony_ci		dev_warn_ratelimited(hdev->dev,
28262306a36Sopenharmony_ci			"Device is disabled or in reset. Can't create new CBs\n");
28362306a36Sopenharmony_ci		return -EBUSY;
28462306a36Sopenharmony_ci	}
28562306a36Sopenharmony_ci
28662306a36Sopenharmony_ci	if (cb_size > SZ_2M) {
28762306a36Sopenharmony_ci		dev_err(hdev->dev, "CB size %d must be less than %d\n",
28862306a36Sopenharmony_ci			cb_size, SZ_2M);
28962306a36Sopenharmony_ci		return -EINVAL;
29062306a36Sopenharmony_ci	}
29162306a36Sopenharmony_ci
29262306a36Sopenharmony_ci	buf = hl_mmap_mem_buf_alloc(
29362306a36Sopenharmony_ci		mmg, &cb_behavior,
29462306a36Sopenharmony_ci		ctx_id == HL_KERNEL_ASID_ID ? GFP_ATOMIC : GFP_KERNEL, &args);
29562306a36Sopenharmony_ci	if (!buf)
29662306a36Sopenharmony_ci		return -ENOMEM;
29762306a36Sopenharmony_ci
29862306a36Sopenharmony_ci	*handle = buf->handle;
29962306a36Sopenharmony_ci
30062306a36Sopenharmony_ci	return 0;
30162306a36Sopenharmony_ci}
30262306a36Sopenharmony_ci
30362306a36Sopenharmony_ciint hl_cb_destroy(struct hl_mem_mgr *mmg, u64 cb_handle)
30462306a36Sopenharmony_ci{
30562306a36Sopenharmony_ci	struct hl_cb *cb;
30662306a36Sopenharmony_ci	int rc;
30762306a36Sopenharmony_ci
30862306a36Sopenharmony_ci	cb = hl_cb_get(mmg, cb_handle);
30962306a36Sopenharmony_ci	if (!cb) {
31062306a36Sopenharmony_ci		dev_dbg(mmg->dev, "CB destroy failed, no CB was found for handle %#llx\n",
31162306a36Sopenharmony_ci			cb_handle);
31262306a36Sopenharmony_ci		return -EINVAL;
31362306a36Sopenharmony_ci	}
31462306a36Sopenharmony_ci
31562306a36Sopenharmony_ci	/* Make sure that CB handle isn't destroyed more than once */
31662306a36Sopenharmony_ci	rc = atomic_cmpxchg(&cb->is_handle_destroyed, 0, 1);
31762306a36Sopenharmony_ci	hl_cb_put(cb);
31862306a36Sopenharmony_ci	if (rc) {
31962306a36Sopenharmony_ci		dev_dbg(mmg->dev, "CB destroy failed, handle %#llx was already destroyed\n",
32062306a36Sopenharmony_ci			cb_handle);
32162306a36Sopenharmony_ci		return -EINVAL;
32262306a36Sopenharmony_ci	}
32362306a36Sopenharmony_ci
32462306a36Sopenharmony_ci	rc = hl_mmap_mem_buf_put_handle(mmg, cb_handle);
32562306a36Sopenharmony_ci	if (rc < 0)
32662306a36Sopenharmony_ci		return rc; /* Invalid handle */
32762306a36Sopenharmony_ci
32862306a36Sopenharmony_ci	if (rc == 0)
32962306a36Sopenharmony_ci		dev_dbg(mmg->dev, "CB 0x%llx is destroyed while still in use\n", cb_handle);
33062306a36Sopenharmony_ci
33162306a36Sopenharmony_ci	return 0;
33262306a36Sopenharmony_ci}
33362306a36Sopenharmony_ci
33462306a36Sopenharmony_cistatic int hl_cb_info(struct hl_mem_mgr *mmg,
33562306a36Sopenharmony_ci			u64 handle, u32 flags, u32 *usage_cnt, u64 *device_va)
33662306a36Sopenharmony_ci{
33762306a36Sopenharmony_ci	struct hl_cb *cb;
33862306a36Sopenharmony_ci	int rc = 0;
33962306a36Sopenharmony_ci
34062306a36Sopenharmony_ci	cb = hl_cb_get(mmg, handle);
34162306a36Sopenharmony_ci	if (!cb) {
34262306a36Sopenharmony_ci		dev_err(mmg->dev,
34362306a36Sopenharmony_ci			"CB info failed, no match to handle 0x%llx\n", handle);
34462306a36Sopenharmony_ci		return -EINVAL;
34562306a36Sopenharmony_ci	}
34662306a36Sopenharmony_ci
34762306a36Sopenharmony_ci	if (flags & HL_CB_FLAGS_GET_DEVICE_VA) {
34862306a36Sopenharmony_ci		if (cb->is_mmu_mapped) {
34962306a36Sopenharmony_ci			*device_va = cb->virtual_addr;
35062306a36Sopenharmony_ci		} else {
35162306a36Sopenharmony_ci			dev_err(mmg->dev, "CB is not mapped to the device's MMU\n");
35262306a36Sopenharmony_ci			rc = -EINVAL;
35362306a36Sopenharmony_ci			goto out;
35462306a36Sopenharmony_ci		}
35562306a36Sopenharmony_ci	} else {
35662306a36Sopenharmony_ci		*usage_cnt = atomic_read(&cb->cs_cnt);
35762306a36Sopenharmony_ci	}
35862306a36Sopenharmony_ci
35962306a36Sopenharmony_ciout:
36062306a36Sopenharmony_ci	hl_cb_put(cb);
36162306a36Sopenharmony_ci	return rc;
36262306a36Sopenharmony_ci}
36362306a36Sopenharmony_ci
36462306a36Sopenharmony_ciint hl_cb_ioctl(struct hl_fpriv *hpriv, void *data)
36562306a36Sopenharmony_ci{
36662306a36Sopenharmony_ci	union hl_cb_args *args = data;
36762306a36Sopenharmony_ci	struct hl_device *hdev = hpriv->hdev;
36862306a36Sopenharmony_ci	u64 handle = 0, device_va = 0;
36962306a36Sopenharmony_ci	enum hl_device_status status;
37062306a36Sopenharmony_ci	u32 usage_cnt = 0;
37162306a36Sopenharmony_ci	int rc;
37262306a36Sopenharmony_ci
37362306a36Sopenharmony_ci	if (!hl_device_operational(hdev, &status)) {
37462306a36Sopenharmony_ci		dev_dbg_ratelimited(hdev->dev,
37562306a36Sopenharmony_ci			"Device is %s. Can't execute CB IOCTL\n",
37662306a36Sopenharmony_ci			hdev->status[status]);
37762306a36Sopenharmony_ci		return -EBUSY;
37862306a36Sopenharmony_ci	}
37962306a36Sopenharmony_ci
38062306a36Sopenharmony_ci	switch (args->in.op) {
38162306a36Sopenharmony_ci	case HL_CB_OP_CREATE:
38262306a36Sopenharmony_ci		if (args->in.cb_size > HL_MAX_CB_SIZE) {
38362306a36Sopenharmony_ci			dev_err(hdev->dev,
38462306a36Sopenharmony_ci				"User requested CB size %d must be less than %d\n",
38562306a36Sopenharmony_ci				args->in.cb_size, HL_MAX_CB_SIZE);
38662306a36Sopenharmony_ci			rc = -EINVAL;
38762306a36Sopenharmony_ci		} else {
38862306a36Sopenharmony_ci			rc = hl_cb_create(hdev, &hpriv->mem_mgr, hpriv->ctx,
38962306a36Sopenharmony_ci					args->in.cb_size, false,
39062306a36Sopenharmony_ci					!!(args->in.flags & HL_CB_FLAGS_MAP),
39162306a36Sopenharmony_ci					&handle);
39262306a36Sopenharmony_ci		}
39362306a36Sopenharmony_ci
39462306a36Sopenharmony_ci		memset(args, 0, sizeof(*args));
39562306a36Sopenharmony_ci		args->out.cb_handle = handle;
39662306a36Sopenharmony_ci		break;
39762306a36Sopenharmony_ci
39862306a36Sopenharmony_ci	case HL_CB_OP_DESTROY:
39962306a36Sopenharmony_ci		rc = hl_cb_destroy(&hpriv->mem_mgr,
40062306a36Sopenharmony_ci					args->in.cb_handle);
40162306a36Sopenharmony_ci		break;
40262306a36Sopenharmony_ci
40362306a36Sopenharmony_ci	case HL_CB_OP_INFO:
40462306a36Sopenharmony_ci		rc = hl_cb_info(&hpriv->mem_mgr, args->in.cb_handle,
40562306a36Sopenharmony_ci				args->in.flags,
40662306a36Sopenharmony_ci				&usage_cnt,
40762306a36Sopenharmony_ci				&device_va);
40862306a36Sopenharmony_ci		if (rc)
40962306a36Sopenharmony_ci			break;
41062306a36Sopenharmony_ci
41162306a36Sopenharmony_ci		memset(&args->out, 0, sizeof(args->out));
41262306a36Sopenharmony_ci
41362306a36Sopenharmony_ci		if (args->in.flags & HL_CB_FLAGS_GET_DEVICE_VA)
41462306a36Sopenharmony_ci			args->out.device_va = device_va;
41562306a36Sopenharmony_ci		else
41662306a36Sopenharmony_ci			args->out.usage_cnt = usage_cnt;
41762306a36Sopenharmony_ci		break;
41862306a36Sopenharmony_ci
41962306a36Sopenharmony_ci	default:
42062306a36Sopenharmony_ci		rc = -EINVAL;
42162306a36Sopenharmony_ci		break;
42262306a36Sopenharmony_ci	}
42362306a36Sopenharmony_ci
42462306a36Sopenharmony_ci	return rc;
42562306a36Sopenharmony_ci}
42662306a36Sopenharmony_ci
42762306a36Sopenharmony_cistruct hl_cb *hl_cb_get(struct hl_mem_mgr *mmg, u64 handle)
42862306a36Sopenharmony_ci{
42962306a36Sopenharmony_ci	struct hl_mmap_mem_buf *buf;
43062306a36Sopenharmony_ci
43162306a36Sopenharmony_ci	buf = hl_mmap_mem_buf_get(mmg, handle);
43262306a36Sopenharmony_ci	if (!buf)
43362306a36Sopenharmony_ci		return NULL;
43462306a36Sopenharmony_ci	return buf->private;
43562306a36Sopenharmony_ci
43662306a36Sopenharmony_ci}
43762306a36Sopenharmony_ci
43862306a36Sopenharmony_civoid hl_cb_put(struct hl_cb *cb)
43962306a36Sopenharmony_ci{
44062306a36Sopenharmony_ci	hl_mmap_mem_buf_put(cb->buf);
44162306a36Sopenharmony_ci}
44262306a36Sopenharmony_ci
44362306a36Sopenharmony_cistruct hl_cb *hl_cb_kernel_create(struct hl_device *hdev, u32 cb_size,
44462306a36Sopenharmony_ci					bool internal_cb)
44562306a36Sopenharmony_ci{
44662306a36Sopenharmony_ci	u64 cb_handle;
44762306a36Sopenharmony_ci	struct hl_cb *cb;
44862306a36Sopenharmony_ci	int rc;
44962306a36Sopenharmony_ci
45062306a36Sopenharmony_ci	rc = hl_cb_create(hdev, &hdev->kernel_mem_mgr, hdev->kernel_ctx, cb_size,
45162306a36Sopenharmony_ci				internal_cb, false, &cb_handle);
45262306a36Sopenharmony_ci	if (rc) {
45362306a36Sopenharmony_ci		dev_err(hdev->dev,
45462306a36Sopenharmony_ci			"Failed to allocate CB for the kernel driver %d\n", rc);
45562306a36Sopenharmony_ci		return NULL;
45662306a36Sopenharmony_ci	}
45762306a36Sopenharmony_ci
45862306a36Sopenharmony_ci	cb = hl_cb_get(&hdev->kernel_mem_mgr, cb_handle);
45962306a36Sopenharmony_ci	/* hl_cb_get should never fail here */
46062306a36Sopenharmony_ci	if (!cb) {
46162306a36Sopenharmony_ci		dev_crit(hdev->dev, "Kernel CB handle invalid 0x%x\n",
46262306a36Sopenharmony_ci				(u32) cb_handle);
46362306a36Sopenharmony_ci		goto destroy_cb;
46462306a36Sopenharmony_ci	}
46562306a36Sopenharmony_ci
46662306a36Sopenharmony_ci	return cb;
46762306a36Sopenharmony_ci
46862306a36Sopenharmony_cidestroy_cb:
46962306a36Sopenharmony_ci	hl_cb_destroy(&hdev->kernel_mem_mgr, cb_handle);
47062306a36Sopenharmony_ci
47162306a36Sopenharmony_ci	return NULL;
47262306a36Sopenharmony_ci}
47362306a36Sopenharmony_ci
47462306a36Sopenharmony_ciint hl_cb_pool_init(struct hl_device *hdev)
47562306a36Sopenharmony_ci{
47662306a36Sopenharmony_ci	struct hl_cb *cb;
47762306a36Sopenharmony_ci	int i;
47862306a36Sopenharmony_ci
47962306a36Sopenharmony_ci	INIT_LIST_HEAD(&hdev->cb_pool);
48062306a36Sopenharmony_ci	spin_lock_init(&hdev->cb_pool_lock);
48162306a36Sopenharmony_ci
48262306a36Sopenharmony_ci	for (i = 0 ; i < hdev->asic_prop.cb_pool_cb_cnt ; i++) {
48362306a36Sopenharmony_ci		cb = hl_cb_alloc(hdev, hdev->asic_prop.cb_pool_cb_size,
48462306a36Sopenharmony_ci				HL_KERNEL_ASID_ID, false);
48562306a36Sopenharmony_ci		if (cb) {
48662306a36Sopenharmony_ci			cb->is_pool = true;
48762306a36Sopenharmony_ci			list_add(&cb->pool_list, &hdev->cb_pool);
48862306a36Sopenharmony_ci		} else {
48962306a36Sopenharmony_ci			hl_cb_pool_fini(hdev);
49062306a36Sopenharmony_ci			return -ENOMEM;
49162306a36Sopenharmony_ci		}
49262306a36Sopenharmony_ci	}
49362306a36Sopenharmony_ci
49462306a36Sopenharmony_ci	return 0;
49562306a36Sopenharmony_ci}
49662306a36Sopenharmony_ci
49762306a36Sopenharmony_ciint hl_cb_pool_fini(struct hl_device *hdev)
49862306a36Sopenharmony_ci{
49962306a36Sopenharmony_ci	struct hl_cb *cb, *tmp;
50062306a36Sopenharmony_ci
50162306a36Sopenharmony_ci	list_for_each_entry_safe(cb, tmp, &hdev->cb_pool, pool_list) {
50262306a36Sopenharmony_ci		list_del(&cb->pool_list);
50362306a36Sopenharmony_ci		cb_fini(hdev, cb);
50462306a36Sopenharmony_ci	}
50562306a36Sopenharmony_ci
50662306a36Sopenharmony_ci	return 0;
50762306a36Sopenharmony_ci}
50862306a36Sopenharmony_ci
50962306a36Sopenharmony_ciint hl_cb_va_pool_init(struct hl_ctx *ctx)
51062306a36Sopenharmony_ci{
51162306a36Sopenharmony_ci	struct hl_device *hdev = ctx->hdev;
51262306a36Sopenharmony_ci	struct asic_fixed_properties *prop = &hdev->asic_prop;
51362306a36Sopenharmony_ci	int rc;
51462306a36Sopenharmony_ci
51562306a36Sopenharmony_ci	if (!hdev->supports_cb_mapping)
51662306a36Sopenharmony_ci		return 0;
51762306a36Sopenharmony_ci
51862306a36Sopenharmony_ci	ctx->cb_va_pool = gen_pool_create(__ffs(prop->pmmu.page_size), -1);
51962306a36Sopenharmony_ci	if (!ctx->cb_va_pool) {
52062306a36Sopenharmony_ci		dev_err(hdev->dev,
52162306a36Sopenharmony_ci			"Failed to create VA gen pool for CB mapping\n");
52262306a36Sopenharmony_ci		return -ENOMEM;
52362306a36Sopenharmony_ci	}
52462306a36Sopenharmony_ci
52562306a36Sopenharmony_ci	ctx->cb_va_pool_base = hl_reserve_va_block(hdev, ctx, HL_VA_RANGE_TYPE_HOST,
52662306a36Sopenharmony_ci					CB_VA_POOL_SIZE, HL_MMU_VA_ALIGNMENT_NOT_NEEDED);
52762306a36Sopenharmony_ci	if (!ctx->cb_va_pool_base) {
52862306a36Sopenharmony_ci		rc = -ENOMEM;
52962306a36Sopenharmony_ci		goto err_pool_destroy;
53062306a36Sopenharmony_ci	}
53162306a36Sopenharmony_ci	rc = gen_pool_add(ctx->cb_va_pool, ctx->cb_va_pool_base, CB_VA_POOL_SIZE, -1);
53262306a36Sopenharmony_ci	if (rc) {
53362306a36Sopenharmony_ci		dev_err(hdev->dev,
53462306a36Sopenharmony_ci			"Failed to add memory to VA gen pool for CB mapping\n");
53562306a36Sopenharmony_ci		goto err_unreserve_va_block;
53662306a36Sopenharmony_ci	}
53762306a36Sopenharmony_ci
53862306a36Sopenharmony_ci	return 0;
53962306a36Sopenharmony_ci
54062306a36Sopenharmony_cierr_unreserve_va_block:
54162306a36Sopenharmony_ci	hl_unreserve_va_block(hdev, ctx, ctx->cb_va_pool_base, CB_VA_POOL_SIZE);
54262306a36Sopenharmony_cierr_pool_destroy:
54362306a36Sopenharmony_ci	gen_pool_destroy(ctx->cb_va_pool);
54462306a36Sopenharmony_ci
54562306a36Sopenharmony_ci	return rc;
54662306a36Sopenharmony_ci}
54762306a36Sopenharmony_ci
54862306a36Sopenharmony_civoid hl_cb_va_pool_fini(struct hl_ctx *ctx)
54962306a36Sopenharmony_ci{
55062306a36Sopenharmony_ci	struct hl_device *hdev = ctx->hdev;
55162306a36Sopenharmony_ci
55262306a36Sopenharmony_ci	if (!hdev->supports_cb_mapping)
55362306a36Sopenharmony_ci		return;
55462306a36Sopenharmony_ci
55562306a36Sopenharmony_ci	gen_pool_destroy(ctx->cb_va_pool);
55662306a36Sopenharmony_ci	hl_unreserve_va_block(hdev, ctx, ctx->cb_va_pool_base, CB_VA_POOL_SIZE);
55762306a36Sopenharmony_ci}
558