1/* SPDX-License-Identifier: GPL-2.0 */
2/*
3 * Copyright IBM Corp. 1999, 2010
4 *
5 *    Author(s): Hartmut Penner <hp@de.ibm.com>
6 *		 Martin Schwidefsky <schwidefsky@de.ibm.com>
7 *		 Rob van der Heij <rvdhei@iae.nl>
8 *		 Heiko Carstens <heiko.carstens@de.ibm.com>
9 *
10 * There are 5 different IPL methods
11 *  1) load the image directly into ram at address 0 and do an PSW restart
12 *  2) linload will load the image from address 0x10000 to memory 0x10000
13 *     and start the code thru LPSW 0x0008000080010000 (VM only, deprecated)
14 *  3) generate the tape ipl header, store the generated image on a tape
15 *     and ipl from it
16 *     In case of SL tape you need to IPL 5 times to get past VOL1 etc
17 *  4) generate the vm reader ipl header, move the generated image to the
18 *     VM reader (use option NOH!) and do a ipl from reader (VM only)
19 *  5) direct call of start by the SALIPL loader
20 *  We use the cpuid to distinguish between VM and native ipl
21 *  params for kernel are pushed to 0x10400 (see setup.h)
22 *
23 */
24
25#include <linux/init.h>
26#include <linux/linkage.h>
27#include <asm/asm-offsets.h>
28#include <asm/thread_info.h>
29#include <asm/page.h>
30#include <asm/ptrace.h>
31#include "boot.h"
32
33#define ARCH_OFFSET	4
34
35__HEAD
36
37#define IPL_BS	0x730
38	.org	0
39	.long	0x00080000,0x80000000+iplstart	# The first 24 bytes are loaded
40	.long	0x02000018,0x60000050		# by ipl to addresses 0-23.
41	.long	0x02000068,0x60000050		# (a PSW and two CCWs).
42	.fill	80-24,1,0x40			# bytes 24-79 are discarded !!
43	.long	0x020000f0,0x60000050		# The next 160 byte are loaded
44	.long	0x02000140,0x60000050		# to addresses 0x18-0xb7
45	.long	0x02000190,0x60000050		# They form the continuation
46	.long	0x020001e0,0x60000050		# of the CCW program started
47	.long	0x02000230,0x60000050		# by ipl and load the range
48	.long	0x02000280,0x60000050		# 0x0f0-0x730 from the image
49	.long	0x020002d0,0x60000050		# to the range 0x0f0-0x730
50	.long	0x02000320,0x60000050		# in memory. At the end of
51	.long	0x02000370,0x60000050		# the channel program the PSW
52	.long	0x020003c0,0x60000050		# at location 0 is loaded.
53	.long	0x02000410,0x60000050		# Initial processing starts
54	.long	0x02000460,0x60000050		# at 0x200 = iplstart.
55	.long	0x020004b0,0x60000050
56	.long	0x02000500,0x60000050
57	.long	0x02000550,0x60000050
58	.long	0x020005a0,0x60000050
59	.long	0x020005f0,0x60000050
60	.long	0x02000640,0x60000050
61	.long	0x02000690,0x60000050
62	.long	0x020006e0,0x20000050
63
64	.org	__LC_RST_NEW_PSW		# 0x1a0
65	.quad	0,iplstart
66	.org	__LC_EXT_NEW_PSW		# 0x1b0
67	.quad	0x0002000180000000,0x1b0	# disabled wait
68	.org	__LC_PGM_NEW_PSW		# 0x1d0
69	.quad	0x0000000180000000,startup_pgm_check_handler
70	.org	__LC_IO_NEW_PSW			# 0x1f0
71	.quad	0x0002000180000000,0x1f0	# disabled wait
72
73	.org	0x200
74
75#
76# subroutine to wait for end I/O
77#
78.Lirqwait:
79	mvc	__LC_IO_NEW_PSW(16),.Lnewpsw	# set up IO interrupt psw
80	lpsw	.Lwaitpsw
81.Lioint:
82	br	%r14
83	.align	8
84.Lnewpsw:
85	.quad	0x0000000080000000,.Lioint
86.Lwaitpsw:
87	.long	0x020a0000,0x80000000+.Lioint
88
89#
90# subroutine for loading cards from the reader
91#
92.Lloader:
93	la	%r4,0(%r14)
94	la	%r3,.Lorb		# r2 = address of orb into r2
95	la	%r5,.Lirb		# r4 = address of irb
96	la	%r6,.Lccws
97	la	%r7,20
98.Linit:
99	st	%r2,4(%r6)		# initialize CCW data addresses
100	la	%r2,0x50(%r2)
101	la	%r6,8(%r6)
102	bct	7,.Linit
103
104	lctl	%c6,%c6,.Lcr6		# set IO subclass mask
105	slr	%r2,%r2
106.Lldlp:
107	ssch	0(%r3)			# load chunk of 1600 bytes
108	bnz	.Llderr
109.Lwait4irq:
110	bas	%r14,.Lirqwait
111	c	%r1,__LC_SUBCHANNEL_ID	# compare subchannel number
112	bne	.Lwait4irq
113	tsch	0(%r5)
114
115	slr	%r0,%r0
116	ic	%r0,8(%r5)		# get device status
117	chi	%r0,8			# channel end ?
118	be	.Lcont
119	chi	%r0,12			# channel end + device end ?
120	be	.Lcont
121
122	l	%r0,4(%r5)
123	s	%r0,8(%r3)		# r0/8 = number of ccws executed
124	mhi	%r0,10			# *10 = number of bytes in ccws
125	lh	%r3,10(%r5)		# get residual count
126	sr	%r0,%r3 		# #ccws*80-residual=#bytes read
127	ar	%r2,%r0
128
129	br	%r4			# r2 contains the total size
130
131.Lcont:
132	ahi	%r2,0x640		# add 0x640 to total size
133	la	%r6,.Lccws
134	la	%r7,20
135.Lincr:
136	l	%r0,4(%r6)		# update CCW data addresses
137	ahi	%r0,0x640
138	st	%r0,4(%r6)
139	ahi	%r6,8
140	bct	7,.Lincr
141
142	b	.Lldlp
143.Llderr:
144	lpsw	.Lcrash
145
146	.align	8
147.Lorb:	.long	0x00000000,0x0080ff00,.Lccws
148.Lirb:	.long	0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0
149.Lcr6:	.long	0xff000000
150.Lloadp:.long	0,0
151	.align	8
152.Lcrash:.long	0x000a0000,0x00000000
153
154	.align	8
155.Lccws: .rept	19
156	.long	0x02600050,0x00000000
157	.endr
158	.long	0x02200050,0x00000000
159
160iplstart:
161	mvi	__LC_AR_MODE_ID,1	# set esame flag
162	slr	%r0,%r0			# set cpuid to zero
163	lhi	%r1,2			# mode 2 = esame (dump)
164	sigp	%r1,%r0,0x12		# switch to esame mode
165	bras	%r13,0f
166	.fill	16,4,0x0
1670:	lmh	%r0,%r15,0(%r13)	# clear high-order half of gprs
168	sam31				# switch to 31 bit addressing mode
169	lh	%r1,__LC_SUBCHANNEL_ID	# test if subchannel number
170	bct	%r1,.Lnoload		#  is valid
171	l	%r1,__LC_SUBCHANNEL_ID	# load ipl subchannel number
172	la	%r2,IPL_BS		# load start address
173	bas	%r14,.Lloader		# load rest of ipl image
174	l	%r12,.Lparm		# pointer to parameter area
175	st	%r1,IPL_DEVICE+ARCH_OFFSET-PARMAREA(%r12) # save ipl device number
176
177#
178# load parameter file from ipl device
179#
180.Lagain1:
181	l	%r2,.Linitrd		# ramdisk loc. is temp
182	bas	%r14,.Lloader		# load parameter file
183	ltr	%r2,%r2 		# got anything ?
184	bz	.Lnopf
185	chi	%r2,895
186	bnh	.Lnotrunc
187	la	%r2,895
188.Lnotrunc:
189	l	%r4,.Linitrd
190	clc	0(3,%r4),.L_hdr		# if it is HDRx
191	bz	.Lagain1		# skip dataset header
192	clc	0(3,%r4),.L_eof		# if it is EOFx
193	bz	.Lagain1		# skip dateset trailer
194	la	%r5,0(%r4,%r2)
195	lr	%r3,%r2
196	la	%r3,COMMAND_LINE-PARMAREA(%r12) # load adr. of command line
197	mvc	0(256,%r3),0(%r4)
198	mvc	256(256,%r3),256(%r4)
199	mvc	512(256,%r3),512(%r4)
200	mvc	768(122,%r3),768(%r4)
201	slr	%r0,%r0
202	b	.Lcntlp
203.Ldelspc:
204	ic	%r0,0(%r2,%r3)
205	chi	%r0,0x20		# is it a space ?
206	be	.Lcntlp
207	ahi	%r2,1
208	b	.Leolp
209.Lcntlp:
210	brct	%r2,.Ldelspc
211.Leolp:
212	slr	%r0,%r0
213	stc	%r0,0(%r2,%r3)		# terminate buffer
214.Lnopf:
215
216#
217# load ramdisk from ipl device
218#
219.Lagain2:
220	l	%r2,.Linitrd		# addr of ramdisk
221	st	%r2,INITRD_START+ARCH_OFFSET-PARMAREA(%r12)
222	bas	%r14,.Lloader		# load ramdisk
223	st	%r2,INITRD_SIZE+ARCH_OFFSET-PARMAREA(%r12) # store size of rd
224	ltr	%r2,%r2
225	bnz	.Lrdcont
226	st	%r2,INITRD_START+ARCH_OFFSET-PARMAREA(%r12) # no ramdisk found
227.Lrdcont:
228	l	%r2,.Linitrd
229
230	clc	0(3,%r2),.L_hdr		# skip HDRx and EOFx
231	bz	.Lagain2
232	clc	0(3,%r2),.L_eof
233	bz	.Lagain2
234
235#
236# reset files in VM reader
237#
238	stidp	.Lcpuid			# store cpuid
239	tm	.Lcpuid,0xff		# running VM ?
240	bno	.Lnoreset
241	la	%r2,.Lreset
242	lhi	%r3,26
243	diag	%r2,%r3,8
244	la	%r5,.Lirb
245	stsch	0(%r5)			# check if irq is pending
246	tm	30(%r5),0x0f		# by verifying if any of the
247	bnz	.Lwaitforirq		# activity or status control
248	tm	31(%r5),0xff		# bits is set in the schib
249	bz	.Lnoreset
250.Lwaitforirq:
251	bas	%r14,.Lirqwait		# wait for IO interrupt
252	c	%r1,__LC_SUBCHANNEL_ID	# compare subchannel number
253	bne	.Lwaitforirq
254	la	%r5,.Lirb
255	tsch	0(%r5)
256.Lnoreset:
257	b	.Lnoload
258
259#
260# everything loaded, go for it
261#
262.Lnoload:
263	l	%r1,.Lstartup
264	br	%r1
265
266.Linitrd:.long _end			# default address of initrd
267.Lparm:	.long  PARMAREA
268.Lstartup: .long startup
269.Lreset:.byte	0xc3,0xc8,0xc1,0xd5,0xc7,0xc5,0x40,0xd9,0xc4,0xd9,0x40
270	.byte	0xc1,0xd3,0xd3,0x40,0xd2,0xc5,0xc5,0xd7,0x40,0xd5,0xd6
271	.byte	0xc8,0xd6,0xd3,0xc4	# "change rdr all keep nohold"
272.L_eof: .long	0xc5d6c600	 /* C'EOF' */
273.L_hdr: .long	0xc8c4d900	 /* C'HDR' */
274	.align	8
275.Lcpuid:.fill	8,1,0
276
277#
278# startup-code at 0x10000, running in absolute addressing mode
279# this is called either by the ipl loader or directly by PSW restart
280# or linload or SALIPL
281#
282	.org	0x10000
283SYM_CODE_START(startup)
284	j	startup_normal
285	.org	EP_OFFSET
286#
287# This is a list of s390 kernel entry points. At address 0x1000f the number of
288# valid entry points is stored.
289#
290# IMPORTANT: Do not change this table, it is s390 kernel ABI!
291#
292	.ascii	EP_STRING
293	.byte	0x00,0x01
294#
295# kdump startup-code at 0x10010, running in 64 bit absolute addressing mode
296#
297	.org	0x10010
298	j	startup_kdump
299SYM_CODE_END(startup)
300SYM_CODE_START_LOCAL(startup_normal)
301	mvi	__LC_AR_MODE_ID,1	# set esame flag
302	slr	%r0,%r0 		# set cpuid to zero
303	lhi	%r1,2			# mode 2 = esame (dump)
304	sigp	%r1,%r0,0x12		# switch to esame mode
305	bras	%r13,0f
306	.fill	16,4,0x0
3070:	lmh	%r0,%r15,0(%r13)	# clear high-order half of gprs
308	sam64				# switch to 64 bit addressing mode
309	basr	%r13,0			# get base
310.LPG0:
311	mvc	__LC_EXT_NEW_PSW(16),.Lext_new_psw-.LPG0(%r13)
312	mvc	__LC_PGM_NEW_PSW(16),.Lpgm_new_psw-.LPG0(%r13)
313	mvc	__LC_IO_NEW_PSW(16),.Lio_new_psw-.LPG0(%r13)
314	xc	0x200(256),0x200	# partially clear lowcore
315	xc	0x300(256),0x300
316	xc	0xe00(256),0xe00
317	xc	0xf00(256),0xf00
318	lctlg	%c0,%c15,.Lctl-.LPG0(%r13)	# load control registers
319	stcke	__LC_BOOT_CLOCK
320	mvc	__LC_LAST_UPDATE_CLOCK(8),__LC_BOOT_CLOCK+1
321	spt	6f-.LPG0(%r13)
322	mvc	__LC_LAST_UPDATE_TIMER(8),6f-.LPG0(%r13)
323	l	%r15,.Lstack-.LPG0(%r13)
324	brasl	%r14,verify_facilities
325	brasl	%r14,startup_kernel
326SYM_CODE_END(startup_normal)
327
328.Lstack:
329	.long	BOOT_STACK_OFFSET + BOOT_STACK_SIZE - STACK_FRAME_OVERHEAD
330	.align	8
3316:	.long	0x7fffffff,0xffffffff
332.Lext_new_psw:
333	.quad	0x0002000180000000,0x1b0	# disabled wait
334.Lpgm_new_psw:
335	.quad	0x0000000180000000,startup_pgm_check_handler
336.Lio_new_psw:
337	.quad	0x0002000180000000,0x1f0	# disabled wait
338.Lctl:	.quad	0x04040000		# cr0: AFP registers & secondary space
339	.quad	0			# cr1: primary space segment table
340	.quad	.Lduct			# cr2: dispatchable unit control table
341	.quad	0			# cr3: instruction authorization
342	.quad	0xffff			# cr4: instruction authorization
343	.quad	.Lduct			# cr5: primary-aste origin
344	.quad	0			# cr6:	I/O interrupts
345	.quad	0			# cr7:	secondary space segment table
346	.quad	0x0000000000008000	# cr8:	access registers translation
347	.quad	0			# cr9:	tracing off
348	.quad	0			# cr10: tracing off
349	.quad	0			# cr11: tracing off
350	.quad	0			# cr12: tracing off
351	.quad	0			# cr13: home space segment table
352	.quad	0xc0000000		# cr14: machine check handling off
353	.quad	.Llinkage_stack		# cr15: linkage stack operations
354
355	.section .dma.data,"aw",@progbits
356.Lduct: .long	0,.Laste,.Laste,0,.Lduald,0,0,0
357	.long	0,0,0,0,0,0,0,0
358.Llinkage_stack:
359	.long	0,0,0x89000000,0,0,0,0x8a000000,0
360	.align 64
361.Laste:	.quad	0,0xffffffffffffffff,0,0,0,0,0,0
362	.align	128
363.Lduald:.rept	8
364	.long	0x80000000,0,0,0	# invalid access-list entries
365	.endr
366	.previous
367
368#include "head_kdump.S"
369
370#
371# This program check is active immediately after kernel start
372# and until early_pgm_check_handler is set in kernel/early.c
373# It simply saves general/control registers and psw in
374# the save area and does disabled wait with a faulty address.
375#
376SYM_CODE_START_LOCAL(startup_pgm_check_handler)
377	stmg	%r8,%r15,__LC_SAVE_AREA_SYNC
378	la	%r8,4095
379	stctg	%c0,%c15,__LC_CREGS_SAVE_AREA-4095(%r8)
380	stmg	%r0,%r7,__LC_GPREGS_SAVE_AREA-4095(%r8)
381	mvc	__LC_GPREGS_SAVE_AREA-4095+64(64,%r8),__LC_SAVE_AREA_SYNC
382	mvc	__LC_PSW_SAVE_AREA-4095(16,%r8),__LC_PGM_OLD_PSW
383	mvc	__LC_RETURN_PSW(16),__LC_PGM_OLD_PSW
384	ni	__LC_RETURN_PSW,0xfc	# remove IO and EX bits
385	ni	__LC_RETURN_PSW+1,0xfb	# remove MCHK bit
386	oi	__LC_RETURN_PSW+1,0x2	# set wait state bit
387	larl	%r9,.Lold_psw_disabled_wait
388	stg	%r9,__LC_PGM_NEW_PSW+8
389	l	%r15,.Ldump_info_stack-.Lold_psw_disabled_wait(%r9)
390	brasl	%r14,print_pgm_check_info
391.Lold_psw_disabled_wait:
392	la	%r8,4095
393	lmg	%r0,%r15,__LC_GPREGS_SAVE_AREA-4095(%r8)
394	lpswe	__LC_RETURN_PSW		# disabled wait
395SYM_CODE_END(startup_pgm_check_handler)
396.Ldump_info_stack:
397	.long	0x5000 + PAGE_SIZE - STACK_FRAME_OVERHEAD
398
399#
400# params at 10400 (setup.h)
401# Must be keept in sync with struct parmarea in setup.h
402#
403	.org	PARMAREA
404	.quad	0			# IPL_DEVICE
405	.quad	0			# INITRD_START
406	.quad	0			# INITRD_SIZE
407	.quad	0			# OLDMEM_BASE
408	.quad	0			# OLDMEM_SIZE
409	.quad	kernel_version		# points to kernel version string
410
411	.org	COMMAND_LINE
412	.byte	"root=/dev/ram0 ro"
413	.byte	0
414
415	.org	EARLY_SCCB_OFFSET
416	.fill	4096
417
418	.org	HEAD_END
419