2 * This file is subject to the terms and conditions of the GNU General Public
3 * License. See the file "COPYING" in the main directory of this archive
6 * arch/sh64/kernel/entry.S
8 * Copyright (C) 2000, 2001 Paolo Alberelli
9 * Copyright (C) 2004, 2005 Paul Mundt
10 * Copyright (C) 2003, 2004 Richard Curnow
13 #include <linux/errno.h>
14 #include <linux/sys.h>
15 #include <asm/cpu/registers.h>
16 #include <asm/processor.h>
17 #include <asm/unistd.h>
18 #include <asm/thread_info.h>
19 #include <asm/asm-offsets.h>
24 #define SR_ASID_MASK 0x00ff0000
25 #define SR_FD_MASK 0x00008000
26 #define SR_SS 0x08000000
27 #define SR_BL 0x10000000
28 #define SR_MD 0x40000000
33 #define EVENT_INTERRUPT 0
34 #define EVENT_FAULT_TLB 1
35 #define EVENT_FAULT_NOT_TLB 2
39 #define RESET_CAUSE 0x20
40 #define DEBUGSS_CAUSE 0x980
43 * Frame layout. Quad index.
45 #define FRAME_T(x) FRAME_TBASE+(x*8)
46 #define FRAME_R(x) FRAME_RBASE+(x*8)
47 #define FRAME_S(x) FRAME_SBASE+(x*8)
52 /* Arrange the save frame to be a multiple of 32 bytes long */
54 #define FRAME_RBASE (FRAME_SBASE+(3*8)) /* SYSCALL_ID - SSR - SPC */
55 #define FRAME_TBASE (FRAME_RBASE+(63*8)) /* r0 - r62 */
56 #define FRAME_PBASE (FRAME_TBASE+(8*8)) /* tr0 -tr7 */
57 #define FRAME_SIZE (FRAME_PBASE+(2*8)) /* pad0-pad1 */
59 #define FP_FRAME_SIZE FP_FRAME_BASE+(33*8) /* dr0 - dr31 + fpscr */
60 #define FP_FRAME_BASE 0
70 /* These are the registers saved in the TLB path that aren't saved in the first
71 level of the normal one. */
72 #define TLB_SAVED_R25 7*8
73 #define TLB_SAVED_TR1 8*8
74 #define TLB_SAVED_TR2 9*8
75 #define TLB_SAVED_TR3 10*8
76 #define TLB_SAVED_TR4 11*8
77 /* Save R0/R1 : PT-migrating compiler currently dishounours -ffixed-r0 and -ffixed-r1 causing
78 breakage otherwise. */
79 #define TLB_SAVED_R0 12*8
80 #define TLB_SAVED_R1 13*8
93 # define preempt_stop() CLI()
95 # define preempt_stop()
96 # define resume_kernel restore_all
101 #define FAST_TLBMISS_STACK_CACHELINES 4
102 #define FAST_TLBMISS_STACK_QUADWORDS (4*FAST_TLBMISS_STACK_CACHELINES)
104 /* Register back-up area for all exceptions */
106 /* Allow for 16 quadwords to be pushed by fast tlbmiss handling
107 * register saves etc. */
108 .fill FAST_TLBMISS_STACK_QUADWORDS, 8, 0x0
109 /* This is 32 byte aligned by construction */
110 /* Register back-up area for all exceptions */
130 /* Save area for RESVEC exceptions. We cannot use reg_save_area because of
131 * reentrancy. Note this area may be accessed via physical address.
132 * Align so this fits a whole single cache line, for ease of purging.
143 /* Jump table of 3rd level handlers */
145 .long do_exception_error /* 0x000 */
146 .long do_exception_error /* 0x020 */
147 .long tlb_miss_load /* 0x040 */
148 .long tlb_miss_store /* 0x060 */
149 ! ARTIFICIAL pseudo-EXPEVT setting
150 .long do_debug_interrupt /* 0x080 */
151 .long tlb_miss_load /* 0x0A0 */
152 .long tlb_miss_store /* 0x0C0 */
153 .long do_address_error_load /* 0x0E0 */
154 .long do_address_error_store /* 0x100 */
156 .long do_fpu_error /* 0x120 */
158 .long do_exception_error /* 0x120 */
160 .long do_exception_error /* 0x140 */
161 .long system_call /* 0x160 */
162 .long do_reserved_inst /* 0x180 */
163 .long do_illegal_slot_inst /* 0x1A0 */
164 .long do_exception_error /* 0x1C0 - NMI */
165 .long do_exception_error /* 0x1E0 */
167 .long do_IRQ /* 0x200 - 0x3C0 */
169 .long do_exception_error /* 0x3E0 */
171 .long do_IRQ /* 0x400 - 0x7E0 */
173 .long fpu_error_or_IRQA /* 0x800 */
174 .long fpu_error_or_IRQB /* 0x820 */
175 .long do_IRQ /* 0x840 */
176 .long do_IRQ /* 0x860 */
178 .long do_exception_error /* 0x880 - 0x920 */
180 .long do_software_break_point /* 0x940 */
181 .long do_exception_error /* 0x960 */
182 .long do_single_step /* 0x980 */
185 .long do_exception_error /* 0x9A0 - 0x9E0 */
187 .long do_IRQ /* 0xA00 */
188 .long do_IRQ /* 0xA20 */
189 .long itlb_miss_or_IRQ /* 0xA40 */
190 .long do_IRQ /* 0xA60 */
191 .long do_IRQ /* 0xA80 */
192 .long itlb_miss_or_IRQ /* 0xAA0 */
193 .long do_exception_error /* 0xAC0 */
194 .long do_address_error_exec /* 0xAE0 */
196 .long do_exception_error /* 0xB00 - 0xBE0 */
199 .long do_IRQ /* 0xC00 - 0xE20 */
202 .section .text64, "ax"
205 * --- Exception/Interrupt/Event Handling Section
209 * VBR and RESVEC blocks.
211 * First level handler for VBR-based exceptions.
213 * To avoid waste of space, align to the maximum text block size.
214 * This is assumed to be at most 128 bytes or 32 instructions.
215 * DO NOT EXCEED 32 instructions on the first level handlers !
217 * Also note that RESVEC is contained within the VBR block
218 * where the room left (1KB - TEXT_SIZE) allows placing
219 * the RESVEC block (at most 512B + TEXT_SIZE).
221 * So first (and only) level handler for RESVEC-based exceptions.
223 * Where the fault/interrupt is handled (not_a_tlb_miss, tlb_miss
224 * and interrupt) we are a lot tight with register space until
225 * saving onto the stack frame, which is done in handle_exception().
229 #define TEXT_SIZE 128
230 #define BLOCK_SIZE 1664 /* Dynamic check, 13*128 */
234 .space 256, 0 /* Power-on class handler, */
235 /* not required here */
237 synco /* TAKum03020 (but probably a good idea anyway.) */
238 /* Save original stack pointer into KCR1 */
241 /* Save other original registers into reg_save_area */
242 movi reg_save_area, SP
243 st.q SP, SAVED_R2, r2
244 st.q SP, SAVED_R3, r3
245 st.q SP, SAVED_R4, r4
246 st.q SP, SAVED_R5, r5
247 st.q SP, SAVED_R6, r6
248 st.q SP, SAVED_R18, r18
250 st.q SP, SAVED_TR0, r3
252 /* Set args for Non-debug, Not a TLB miss class handler */
254 movi ret_from_exception, r3
256 movi EVENT_FAULT_NOT_TLB, r4
259 pta handle_exception, tr0
270 * Instead of the natural .balign 1024 place RESVEC here
271 * respecting the final 1KB alignment.
275 * Instead of '.space 1024-TEXT_SIZE' place the RESVEC
276 * block making sure the final alignment is correct.
279 synco /* TAKum03020 (but probably a good idea anyway.) */
281 movi reg_save_area, SP
282 /* SP is guaranteed 32-byte aligned. */
283 st.q SP, TLB_SAVED_R0 , r0
284 st.q SP, TLB_SAVED_R1 , r1
285 st.q SP, SAVED_R2 , r2
286 st.q SP, SAVED_R3 , r3
287 st.q SP, SAVED_R4 , r4
288 st.q SP, SAVED_R5 , r5
289 st.q SP, SAVED_R6 , r6
290 st.q SP, SAVED_R18, r18
292 /* Save R25 for safety; as/ld may want to use it to achieve the call to
293 * the code in mm/tlbmiss.c */
294 st.q SP, TLB_SAVED_R25, r25
300 st.q SP, SAVED_TR0 , r2
301 st.q SP, TLB_SAVED_TR1 , r3
302 st.q SP, TLB_SAVED_TR2 , r4
303 st.q SP, TLB_SAVED_TR3 , r5
304 st.q SP, TLB_SAVED_TR4 , r18
306 pt do_fast_page_fault, tr0
311 andi r2, 1, r2 /* r2 = SSR.MD */
314 pt fixup_to_invoke_general_handler, tr1
316 /* If the fast path handler fixed the fault, just drop through quickly
317 to the restore code right away to return to the excepting context.
321 fast_tlb_miss_restore:
322 ld.q SP, SAVED_TR0, r2
323 ld.q SP, TLB_SAVED_TR1, r3
324 ld.q SP, TLB_SAVED_TR2, r4
326 ld.q SP, TLB_SAVED_TR3, r5
327 ld.q SP, TLB_SAVED_TR4, r18
335 ld.q SP, TLB_SAVED_R0, r0
336 ld.q SP, TLB_SAVED_R1, r1
337 ld.q SP, SAVED_R2, r2
338 ld.q SP, SAVED_R3, r3
339 ld.q SP, SAVED_R4, r4
340 ld.q SP, SAVED_R5, r5
341 ld.q SP, SAVED_R6, r6
342 ld.q SP, SAVED_R18, r18
343 ld.q SP, TLB_SAVED_R25, r25
347 nop /* for safety, in case the code is run on sh5-101 cut1.x */
349 fixup_to_invoke_general_handler:
351 /* OK, new method. Restore stuff that's not expected to get saved into
352 the 'first-level' reg save area, then just fall through to setting
353 up the registers and calling the second-level handler. */
355 /* 2nd level expects r2,3,4,5,6,18,tr0 to be saved. So we must restore
356 r25,tr1-4 and save r6 to get into the right state. */
358 ld.q SP, TLB_SAVED_TR1, r3
359 ld.q SP, TLB_SAVED_TR2, r4
360 ld.q SP, TLB_SAVED_TR3, r5
361 ld.q SP, TLB_SAVED_TR4, r18
362 ld.q SP, TLB_SAVED_R25, r25
364 ld.q SP, TLB_SAVED_R0, r0
365 ld.q SP, TLB_SAVED_R1, r1
372 /* Set args for Non-debug, TLB miss class handler */
374 movi ret_from_exception, r3
376 movi EVENT_FAULT_TLB, r4
379 pta handle_exception, tr0
382 /* NB TAKE GREAT CARE HERE TO ENSURE THAT THE INTERRUPT CODE
383 DOES END UP AT VBR+0x600 */
395 synco /* TAKum03020 (but probably a good idea anyway.) */
396 /* Save original stack pointer into KCR1 */
399 /* Save other original registers into reg_save_area */
400 movi reg_save_area, SP
401 st.q SP, SAVED_R2, r2
402 st.q SP, SAVED_R3, r3
403 st.q SP, SAVED_R4, r4
404 st.q SP, SAVED_R5, r5
405 st.q SP, SAVED_R6, r6
406 st.q SP, SAVED_R18, r18
408 st.q SP, SAVED_TR0, r3
410 /* Set args for interrupt class handler */
412 movi ret_from_irq, r3
414 movi EVENT_INTERRUPT, r4
417 pta handle_exception, tr0
419 .balign TEXT_SIZE /* let's waste the bare minimum */
421 LVBR_block_end: /* Marker. Used for total checking */
425 /* Panic handler. Called with MMU off. Possible causes/actions:
426 * - Reset: Jump to program start.
427 * - Single Step: Turn off Single Step & return.
428 * - Others: Call panic handler, passing PC as arg.
429 * (this may need to be extended...)
432 synco /* TAKum03020 (but probably a good idea anyway.) */
434 /* First save r0-1 and tr0, as we need to use these */
435 movi resvec_save_area-CONFIG_PAGE_OFFSET, SP
444 sub r1, r0, r1 /* r1=0 if reset */
445 movi _stext-CONFIG_PAGE_OFFSET, r0
448 beqi r1, 0, tr0 /* Jump to start address if reset */
451 movi DEBUGSS_CAUSE, r1
452 sub r1, r0, r1 /* r1=0 if single step */
453 pta single_step_panic, tr0
454 beqi r1, 0, tr0 /* jump if single step */
456 /* Now jump to where we save the registers. */
457 movi panic_stash_regs-CONFIG_PAGE_OFFSET, r1
462 /* We are in a handler with Single Step set. We need to resume the
463 * handler, by turning on MMU & turning off Single Step. */
470 /* Restore EXPEVT, as the rte won't do this */
485 synco /* TAKum03020 (but probably a good idea anyway.) */
487 * Single step/software_break_point first level handler.
488 * Called with MMU off, so the first thing we do is enable it
489 * by doing an rte with appropriate SSR.
492 /* Save SSR & SPC, together with R0 & R1, as we need to use 2 regs. */
493 movi resvec_save_area-CONFIG_PAGE_OFFSET, SP
495 /* With the MMU off, we are bypassing the cache, so purge any
496 * data that will be made stale by the following stores.
508 /* Enable MMU, block exceptions, set priv mode, disable single step */
509 movi SR_MMU | SR_BL | SR_MD, r1
514 /* Force control to debug_exception_2 when rte is executed */
515 movi debug_exeception_2, r0
516 ori r0, 1, r0 /* force SHmedia, just in case */
522 /* Restore saved regs */
524 movi resvec_save_area, SP
532 /* Save other original registers into reg_save_area */
533 movi reg_save_area, SP
534 st.q SP, SAVED_R2, r2
535 st.q SP, SAVED_R3, r3
536 st.q SP, SAVED_R4, r4
537 st.q SP, SAVED_R5, r5
538 st.q SP, SAVED_R6, r6
539 st.q SP, SAVED_R18, r18
541 st.q SP, SAVED_TR0, r3
543 /* Set args for debug class handler */
545 movi ret_from_exception, r3
550 pta handle_exception, tr0
555 /* !!! WE COME HERE IN REAL MODE !!! */
556 /* Hook-up debug interrupt to allow various debugging options to be
557 * hooked into its handler. */
558 /* Save original stack pointer into KCR1 */
561 movi resvec_save_area-CONFIG_PAGE_OFFSET, SP
566 /* Save other original registers into reg_save_area thru real addresses */
567 st.q SP, SAVED_R2, r2
568 st.q SP, SAVED_R3, r3
569 st.q SP, SAVED_R4, r4
570 st.q SP, SAVED_R5, r5
571 st.q SP, SAVED_R6, r6
572 st.q SP, SAVED_R18, r18
574 st.q SP, SAVED_TR0, r3
576 /* move (spc,ssr)->(pspc,pssr). The rte will shift
577 them back again, so that they look like the originals
578 as far as the real handler code is concerned. */
584 ! construct useful SR for handle_exception
591 ! SSR is now the current SR with the MD and MMU bits set
592 ! i.e. the rte will switch back to priv mode and put
596 movi handle_exception, r18
597 ori r18, 1, r18 ! for safety (do we need this?)
600 /* Set args for Non-debug, Not a TLB miss class handler */
602 ! EXPEVT==0x80 is unused, so 'steal' this value to put the
603 ! debug interrupt handler in the vectoring table
605 movi ret_from_exception, r3
607 movi EVENT_FAULT_NOT_TLB, r4
610 movi CONFIG_PAGE_OFFSET, r6
615 rte ! -> handle_exception, switch back to priv mode again
617 LRESVEC_block_end: /* Marker. Unused. */
622 * Second level handler for VBR-based exceptions. Pre-handler.
623 * In common to all stack-frame sensitive handlers.
626 * (KCR0) Current [current task union]
629 * (r3) appropriate return address
630 * (r4) Event (0 = interrupt, 1 = TLB miss fault, 2 = Not TLB miss fault, 3=debug)
631 * (r5) Pointer to reg_save_area
634 * Available registers:
641 /* Common 2nd level handler. */
643 /* First thing we need an appropriate stack pointer */
648 bne r6, ZERO, tr0 /* Original stack pointer is fine */
650 /* Set stack pointer for user fault */
652 movi THREAD_SIZE, r6 /* Point to the end */
657 /* DEBUG : check for underflow/overflow of the kernel stack */
658 pta no_underflow, tr0
662 bge SP, r6, tr0 ! ? below 1k from bottom of stack : danger zone
664 /* Just panic to cause a crash. */
672 movi THREAD_SIZE, r18
674 bgt SP, r6, tr0 ! sp above the stack
676 /* Make some room for the BASIC frame. */
677 movi -(FRAME_SIZE), r6
680 /* Could do this with no stalling if we had another spare register, but the
681 code below will be OK. */
682 ld.q r5, SAVED_R2, r6
683 ld.q r5, SAVED_R3, r18
684 st.q SP, FRAME_R(2), r6
685 ld.q r5, SAVED_R4, r6
686 st.q SP, FRAME_R(3), r18
687 ld.q r5, SAVED_R5, r18
688 st.q SP, FRAME_R(4), r6
689 ld.q r5, SAVED_R6, r6
690 st.q SP, FRAME_R(5), r18
691 ld.q r5, SAVED_R18, r18
692 st.q SP, FRAME_R(6), r6
693 ld.q r5, SAVED_TR0, r6
694 st.q SP, FRAME_R(18), r18
695 st.q SP, FRAME_T(0), r6
697 /* Keep old SP around */
700 /* Save the rest of the general purpose registers */
701 st.q SP, FRAME_R(0), r0
702 st.q SP, FRAME_R(1), r1
703 st.q SP, FRAME_R(7), r7
704 st.q SP, FRAME_R(8), r8
705 st.q SP, FRAME_R(9), r9
706 st.q SP, FRAME_R(10), r10
707 st.q SP, FRAME_R(11), r11
708 st.q SP, FRAME_R(12), r12
709 st.q SP, FRAME_R(13), r13
710 st.q SP, FRAME_R(14), r14
712 /* SP is somewhere else */
713 st.q SP, FRAME_R(15), r6
715 st.q SP, FRAME_R(16), r16
716 st.q SP, FRAME_R(17), r17
717 /* r18 is saved earlier. */
718 st.q SP, FRAME_R(19), r19
719 st.q SP, FRAME_R(20), r20
720 st.q SP, FRAME_R(21), r21
721 st.q SP, FRAME_R(22), r22
722 st.q SP, FRAME_R(23), r23
723 st.q SP, FRAME_R(24), r24
724 st.q SP, FRAME_R(25), r25
725 st.q SP, FRAME_R(26), r26
726 st.q SP, FRAME_R(27), r27
727 st.q SP, FRAME_R(28), r28
728 st.q SP, FRAME_R(29), r29
729 st.q SP, FRAME_R(30), r30
730 st.q SP, FRAME_R(31), r31
731 st.q SP, FRAME_R(32), r32
732 st.q SP, FRAME_R(33), r33
733 st.q SP, FRAME_R(34), r34
734 st.q SP, FRAME_R(35), r35
735 st.q SP, FRAME_R(36), r36
736 st.q SP, FRAME_R(37), r37
737 st.q SP, FRAME_R(38), r38
738 st.q SP, FRAME_R(39), r39
739 st.q SP, FRAME_R(40), r40
740 st.q SP, FRAME_R(41), r41
741 st.q SP, FRAME_R(42), r42
742 st.q SP, FRAME_R(43), r43
743 st.q SP, FRAME_R(44), r44
744 st.q SP, FRAME_R(45), r45
745 st.q SP, FRAME_R(46), r46
746 st.q SP, FRAME_R(47), r47
747 st.q SP, FRAME_R(48), r48
748 st.q SP, FRAME_R(49), r49
749 st.q SP, FRAME_R(50), r50
750 st.q SP, FRAME_R(51), r51
751 st.q SP, FRAME_R(52), r52
752 st.q SP, FRAME_R(53), r53
753 st.q SP, FRAME_R(54), r54
754 st.q SP, FRAME_R(55), r55
755 st.q SP, FRAME_R(56), r56
756 st.q SP, FRAME_R(57), r57
757 st.q SP, FRAME_R(58), r58
758 st.q SP, FRAME_R(59), r59
759 st.q SP, FRAME_R(60), r60
760 st.q SP, FRAME_R(61), r61
761 st.q SP, FRAME_R(62), r62
764 * Save the S* registers.
767 st.q SP, FRAME_S(FSSR), r61
769 st.q SP, FRAME_S(FSPC), r62
770 movi -1, r62 /* Reset syscall_nr */
771 st.q SP, FRAME_S(FSYSCALL_ID), r62
773 /* Save the rest of the target registers */
775 st.q SP, FRAME_T(1), r6
777 st.q SP, FRAME_T(2), r6
779 st.q SP, FRAME_T(3), r6
781 st.q SP, FRAME_T(4), r6
783 st.q SP, FRAME_T(5), r6
785 st.q SP, FRAME_T(6), r6
787 st.q SP, FRAME_T(7), r6
789 ! setup FP so that unwinder can wind back through nested kernel mode
793 #ifdef CONFIG_POOR_MANS_STRACE
794 /* We've pushed all the registers now, so only r2-r4 hold anything
795 * useful. Move them into callee save registers */
800 /* Preserve r2 as the event code */
814 /* For syscall and debug race condition, get TRA now */
817 /* We are in a safe position to turn SR.BL off, but set IMASK=0xf
818 * Also set FD, to catch FPU usage in the kernel.
820 * benedict.gaster@superh.com 29/07/2002
822 * On all SH5-101 revisions it is unsafe to raise the IMASK and at the
823 * same time change BL from 1->0, as any pending interrupt of a level
824 * higher than he previous value of IMASK will leak through and be
825 * taken unexpectedly.
827 * To avoid this we raise the IMASK and then issue another PUTCON to
831 movi SR_IMASK | SR_FD, r7
834 movi SR_UNBLOCK_EXC, r7
839 /* Now call the appropriate 3rd level handler */
850 * Second level handler for VBR-based exceptions. Post-handlers.
852 * Post-handlers for interrupts (ret_from_irq), exceptions
853 * (ret_from_exception) and common reentrance doors (restore_all
854 * to get back to the original context, ret_from_syscall loop to
855 * check kernel exiting).
857 * ret_with_reschedule and work_notifysig are an inner lables of
858 * the ret_from_syscall loop.
860 * In common to all stack-frame sensitive handlers.
863 * (SP) struct pt_regs *, original register's frame pointer (basic)
868 #ifdef CONFIG_POOR_MANS_STRACE
869 pta evt_debug_ret_from_irq, tr0
873 ld.q SP, FRAME_S(FSSR), r6
876 pta resume_kernel, tr0
877 bne r6, ZERO, tr0 /* no further checks */
879 pta ret_with_reschedule, tr0
880 blink tr0, ZERO /* Do not check softirqs */
882 .global ret_from_exception
886 #ifdef CONFIG_POOR_MANS_STRACE
887 pta evt_debug_ret_from_exc, tr0
892 ld.q SP, FRAME_S(FSSR), r6
895 pta resume_kernel, tr0
896 bne r6, ZERO, tr0 /* no further checks */
900 #ifdef CONFIG_PREEMPT
901 pta ret_from_syscall, tr0
908 ld.l r6, TI_PRE_COUNT, r7
912 ld.l r6, TI_FLAGS, r7
913 movi (1 << TIF_NEED_RESCHED), r8
921 movi ((PREEMPT_ACTIVE >> 16) & 65535), r8
922 shori (PREEMPT_ACTIVE & 65535), r8
923 st.l r6, TI_PRE_COUNT, r8
931 st.l r6, TI_PRE_COUNT, ZERO
934 pta need_resched, tr1
938 .global ret_from_syscall
942 getcon KCR0, r6 ! r6 contains current_thread_info
943 ld.l r6, TI_FLAGS, r7 ! r7 contains current_thread_info->flags
945 movi _TIF_NEED_RESCHED, r8
947 pta work_resched, tr0
952 movi (_TIF_SIGPENDING | _TIF_RESTORE_SIGMASK), r8
954 pta work_notifysig, tr0
960 pta ret_from_syscall, tr0
964 blink tr0, ZERO /* Call schedule(), return on top */
973 blink tr0, LINK /* Call do_signal(regs, 0), return here */
978 ld.q SP, FRAME_T(0), r6
979 ld.q SP, FRAME_T(1), r7
980 ld.q SP, FRAME_T(2), r8
981 ld.q SP, FRAME_T(3), r9
986 ld.q SP, FRAME_T(4), r6
987 ld.q SP, FRAME_T(5), r7
988 ld.q SP, FRAME_T(6), r8
989 ld.q SP, FRAME_T(7), r9
995 ld.q SP, FRAME_R(0), r0
996 ld.q SP, FRAME_R(1), r1
997 ld.q SP, FRAME_R(2), r2
998 ld.q SP, FRAME_R(3), r3
999 ld.q SP, FRAME_R(4), r4
1000 ld.q SP, FRAME_R(5), r5
1001 ld.q SP, FRAME_R(6), r6
1002 ld.q SP, FRAME_R(7), r7
1003 ld.q SP, FRAME_R(8), r8
1004 ld.q SP, FRAME_R(9), r9
1005 ld.q SP, FRAME_R(10), r10
1006 ld.q SP, FRAME_R(11), r11
1007 ld.q SP, FRAME_R(12), r12
1008 ld.q SP, FRAME_R(13), r13
1009 ld.q SP, FRAME_R(14), r14
1011 ld.q SP, FRAME_R(16), r16
1012 ld.q SP, FRAME_R(17), r17
1013 ld.q SP, FRAME_R(18), r18
1014 ld.q SP, FRAME_R(19), r19
1015 ld.q SP, FRAME_R(20), r20
1016 ld.q SP, FRAME_R(21), r21
1017 ld.q SP, FRAME_R(22), r22
1018 ld.q SP, FRAME_R(23), r23
1019 ld.q SP, FRAME_R(24), r24
1020 ld.q SP, FRAME_R(25), r25
1021 ld.q SP, FRAME_R(26), r26
1022 ld.q SP, FRAME_R(27), r27
1023 ld.q SP, FRAME_R(28), r28
1024 ld.q SP, FRAME_R(29), r29
1025 ld.q SP, FRAME_R(30), r30
1026 ld.q SP, FRAME_R(31), r31
1027 ld.q SP, FRAME_R(32), r32
1028 ld.q SP, FRAME_R(33), r33
1029 ld.q SP, FRAME_R(34), r34
1030 ld.q SP, FRAME_R(35), r35
1031 ld.q SP, FRAME_R(36), r36
1032 ld.q SP, FRAME_R(37), r37
1033 ld.q SP, FRAME_R(38), r38
1034 ld.q SP, FRAME_R(39), r39
1035 ld.q SP, FRAME_R(40), r40
1036 ld.q SP, FRAME_R(41), r41
1037 ld.q SP, FRAME_R(42), r42
1038 ld.q SP, FRAME_R(43), r43
1039 ld.q SP, FRAME_R(44), r44
1040 ld.q SP, FRAME_R(45), r45
1041 ld.q SP, FRAME_R(46), r46
1042 ld.q SP, FRAME_R(47), r47
1043 ld.q SP, FRAME_R(48), r48
1044 ld.q SP, FRAME_R(49), r49
1045 ld.q SP, FRAME_R(50), r50
1046 ld.q SP, FRAME_R(51), r51
1047 ld.q SP, FRAME_R(52), r52
1048 ld.q SP, FRAME_R(53), r53
1049 ld.q SP, FRAME_R(54), r54
1050 ld.q SP, FRAME_R(55), r55
1051 ld.q SP, FRAME_R(56), r56
1052 ld.q SP, FRAME_R(57), r57
1053 ld.q SP, FRAME_R(58), r58
1056 movi SR_BLOCK_EXC, r60
1058 putcon r59, SR /* SR.BL = 1, keep nesting out */
1059 ld.q SP, FRAME_S(FSSR), r61
1060 ld.q SP, FRAME_S(FSPC), r62
1061 movi SR_ASID_MASK, r60
1063 andc r61, r60, r61 /* Clear out older ASID */
1064 or r59, r61, r61 /* Retain current ASID */
1068 /* Ignore FSYSCALL_ID */
1070 ld.q SP, FRAME_R(59), r59
1071 ld.q SP, FRAME_R(60), r60
1072 ld.q SP, FRAME_R(61), r61
1073 ld.q SP, FRAME_R(62), r62
1076 ld.q SP, FRAME_R(15), SP
1081 * Third level handlers for VBR-based exceptions. Adapting args to
1082 * and/or deflecting to fourth level handlers.
1084 * Fourth level handlers interface.
1085 * Most are C-coded handlers directly pointed by the trap_jtable.
1086 * (Third = Fourth level)
1088 * (r2) fault/interrupt code, entry number (e.g. NMI = 14,
1089 * IRL0-3 (0000) = 16, RTLBMISS = 2, SYSCALL = 11, etc ...)
1090 * (r3) struct pt_regs *, original register's frame pointer
1091 * (r4) Event (0 = interrupt, 1 = TLB miss fault, 2 = Not TLB miss fault)
1092 * (r5) TRA control register (for syscall/debug benefit only)
1093 * (LINK) return address
1096 * Kernel TLB fault handlers will get a slightly different interface.
1097 * (r2) struct pt_regs *, original register's frame pointer
1098 * (r3) writeaccess, whether it's a store fault as opposed to load fault
1099 * (r4) execaccess, whether it's a ITLB fault as opposed to DTLB fault
1100 * (r5) Effective Address of fault
1101 * (LINK) return address
1104 * fpu_error_or_IRQ? is a helper to deflect to the right cause.
1109 or ZERO, ZERO, r3 /* Read */
1110 or ZERO, ZERO, r4 /* Data */
1112 pta call_do_page_fault, tr0
1117 movi 1, r3 /* Write */
1118 or ZERO, ZERO, r4 /* Data */
1120 pta call_do_page_fault, tr0
1125 beqi/u r4, EVENT_INTERRUPT, tr0
1127 or ZERO, ZERO, r3 /* Read */
1128 movi 1, r4 /* Text */
1133 movi do_page_fault, r6
1139 beqi/l r4, EVENT_INTERRUPT, tr0
1140 #ifdef CONFIG_SH_FPU
1141 movi do_fpu_state_restore, r6
1143 movi do_exception_error, r6
1150 beqi/l r4, EVENT_INTERRUPT, tr0
1151 #ifdef CONFIG_SH_FPU
1152 movi do_fpu_state_restore, r6
1154 movi do_exception_error, r6
1165 * system_call/unknown_trap third level handler:
1168 * (r2) fault/interrupt code, entry number (TRAP = 11)
1169 * (r3) struct pt_regs *, original register's frame pointer
1170 * (r4) Not used. Event (0=interrupt, 1=TLB miss fault, 2=Not TLB miss fault)
1171 * (r5) TRA Control Reg (0x00xyzzzz: x=1 SYSCALL, y = #args, z=nr)
1173 * (LINK) return address: ret_from_exception
1174 * (*r3) Syscall parms: SC#, arg0, arg1, ..., arg5 in order (Saved r2/r7)
1177 * (*r3) Syscall reply (Saved r2)
1178 * (LINK) In case of syscall only it can be scrapped.
1179 * Common second level post handler will be ret_from_syscall.
1180 * Common (non-trace) exit point to that is syscall_ret (saving
1181 * result to r2). Common bad exit point is syscall_bad (returning
1182 * ENOSYS then saved to r2).
1187 /* Unknown Trap or User Trace */
1188 movi do_unknown_trapa, r6
1190 ld.q r3, FRAME_R(9), r2 /* r2 = #arg << 16 | syscall # */
1191 andi r2, 0x1ff, r2 /* r2 = syscall # */
1194 pta syscall_ret, tr0
1197 /* New syscall implementation*/
1199 pta unknown_trap, tr0
1200 or r5, ZERO, r4 /* TRA (=r5) -> r4 */
1202 bnei r4, 1, tr0 /* unknown_trap if not 0x1yzzzz */
1204 /* It's a system call */
1205 st.q r3, FRAME_S(FSYSCALL_ID), r5 /* ID (0x1yzzzz) -> stack */
1206 andi r5, 0x1ff, r5 /* syscall # -> r5 */
1210 pta syscall_allowed, tr0
1211 movi NR_syscalls - 1, r4 /* Last valid */
1215 /* Return ENOSYS ! */
1216 movi -(ENOSYS), r2 /* Fall-through */
1220 st.q SP, FRAME_R(9), r2 /* Expecting SP back to BASIC frame */
1222 #ifdef CONFIG_POOR_MANS_STRACE
1223 /* nothing useful in registers at this point */
1228 ld.q SP, FRAME_R(9), r2
1233 ld.q SP, FRAME_S(FSPC), r2
1234 addi r2, 4, r2 /* Move PC, being pre-execution event */
1235 st.q SP, FRAME_S(FSPC), r2
1236 pta ret_from_syscall, tr0
1240 /* A different return path for ret_from_fork, because we now need
1241 * to call schedule_tail with the later kernels. Because prev is
1242 * loaded into r2 by switch_to() means we can just call it straight away
1245 .global ret_from_fork
1248 movi schedule_tail,r5
1253 #ifdef CONFIG_POOR_MANS_STRACE
1254 /* nothing useful in registers at this point */
1259 ld.q SP, FRAME_R(9), r2
1264 ld.q SP, FRAME_S(FSPC), r2
1265 addi r2, 4, r2 /* Move PC, being pre-execution event */
1266 st.q SP, FRAME_S(FSPC), r2
1267 pta ret_from_syscall, tr0
1273 /* Use LINK to deflect the exit point, default is syscall_ret */
1274 pta syscall_ret, tr0
1276 pta syscall_notrace, tr0
1279 ld.l r2, TI_FLAGS, r4
1280 movi (_TIF_SYSCALL_TRACE | _TIF_SINGLESTEP | _TIF_SYSCALL_AUDIT), r6
1284 /* Trace it by calling syscall_trace before and after */
1285 movi syscall_trace, r4
1291 /* Reload syscall number as r5 is trashed by syscall_trace */
1292 ld.q SP, FRAME_S(FSYSCALL_ID), r5
1295 pta syscall_ret_trace, tr0
1299 /* Now point to the appropriate 4th level syscall handler */
1300 movi sys_call_table, r4
1305 /* Prepare original args */
1306 ld.q SP, FRAME_R(2), r2
1307 ld.q SP, FRAME_R(3), r3
1308 ld.q SP, FRAME_R(4), r4
1309 ld.q SP, FRAME_R(5), r5
1310 ld.q SP, FRAME_R(6), r6
1311 ld.q SP, FRAME_R(7), r7
1313 /* And now the trick for those syscalls requiring regs * ! */
1317 blink tr0, ZERO /* LINK is already properly set */
1320 /* We get back here only if under trace */
1321 st.q SP, FRAME_R(9), r2 /* Save return value */
1323 movi syscall_trace, LINK
1329 /* This needs to be done after any syscall tracing */
1330 ld.q SP, FRAME_S(FSPC), r2
1331 addi r2, 4, r2 /* Move PC, being pre-execution event */
1332 st.q SP, FRAME_S(FSPC), r2
1334 pta ret_from_syscall, tr0
1335 blink tr0, ZERO /* Resume normal return sequence */
1338 * --- Switch to running under a particular ASID and return the previous ASID value
1339 * --- The caller is assumed to have done a cli before calling this.
1341 * Input r2 : new ASID
1342 * Output r2 : old ASID
1345 .global switch_and_save_asid
1346 switch_and_save_asid:
1349 shlli r4, 16, r4 /* r4 = mask to select ASID */
1350 and r0, r4, r3 /* r3 = shifted old ASID */
1351 andi r2, 255, r2 /* mask down new ASID */
1352 shlli r2, 16, r2 /* align new ASID against SR.ASID */
1353 andc r0, r4, r0 /* efface old ASID from SR */
1354 or r0, r2, r0 /* insert the new ASID */
1362 shlri r3, 16, r2 /* r2 = old ASID */
1365 .global route_to_panic_handler
1366 route_to_panic_handler:
1367 /* Switch to real mode, goto panic_handler, don't return. Useful for
1368 last-chance debugging, e.g. if no output wants to go to the console.
1371 movi panic_handler - CONFIG_PAGE_OFFSET, r1
1383 1: /* Now in real mode */
1387 .global peek_real_address_q
1388 peek_real_address_q:
1390 r2 : real mode address to peek
1391 r2(out) : result quadword
1393 This is provided as a cheapskate way of manipulating device
1394 registers for debugging (to avoid the need to onchip_remap the debug
1395 module, and to avoid the need to onchip_remap the watchpoint
1396 controller in a way that identity maps sufficient bits to avoid the
1397 SH5-101 cut2 silicon defect).
1399 This code is not performance critical
1402 add.l r2, r63, r2 /* sign extend address */
1403 getcon sr, r0 /* r0 = saved original SR */
1406 or r0, r1, r1 /* r0 with block bit set */
1407 putcon r1, sr /* now in critical section */
1410 andc r1, r36, r1 /* turn sr.mmu off in real mode section */
1413 movi .peek0 - CONFIG_PAGE_OFFSET, r36 /* real mode target address */
1414 movi 1f, r37 /* virtual mode return addr */
1421 .peek0: /* come here in real mode, don't touch caches!!
1422 still in critical section (sr.bl==1) */
1425 /* Here's the actual peek. If the address is bad, all bets are now off
1426 * what will happen (handlers invoked in real-mode = bad news) */
1429 rte /* Back to virtual mode */
1436 .global poke_real_address_q
1437 poke_real_address_q:
1439 r2 : real mode address to poke
1440 r3 : quadword value to write.
1442 This is provided as a cheapskate way of manipulating device
1443 registers for debugging (to avoid the need to onchip_remap the debug
1444 module, and to avoid the need to onchip_remap the watchpoint
1445 controller in a way that identity maps sufficient bits to avoid the
1446 SH5-101 cut2 silicon defect).
1448 This code is not performance critical
1451 add.l r2, r63, r2 /* sign extend address */
1452 getcon sr, r0 /* r0 = saved original SR */
1455 or r0, r1, r1 /* r0 with block bit set */
1456 putcon r1, sr /* now in critical section */
1459 andc r1, r36, r1 /* turn sr.mmu off in real mode section */
1462 movi .poke0-CONFIG_PAGE_OFFSET, r36 /* real mode target address */
1463 movi 1f, r37 /* virtual mode return addr */
1470 .poke0: /* come here in real mode, don't touch caches!!
1471 still in critical section (sr.bl==1) */
1474 /* Here's the actual poke. If the address is bad, all bets are now off
1475 * what will happen (handlers invoked in real-mode = bad news) */
1478 rte /* Back to virtual mode */
1486 * --- User Access Handling Section
1490 * User Access support. It all moved to non inlined Assembler
1491 * functions in here.
1493 * __kernel_size_t __copy_user(void *__to, const void *__from,
1494 * __kernel_size_t __n)
1497 * (r2) target address
1498 * (r3) source address
1499 * (r4) size in bytes
1503 * (r2) non-copied bytes
1505 * If a fault occurs on the user pointer, bail out early and return the
1506 * number of bytes not copied in r2.
1507 * Strategy : for large blocks, call a real memcpy function which can
1508 * move >1 byte at a time using unaligned ld/st instructions, and can
1509 * manipulate the cache using prefetch + alloco to improve the speed
1510 * further. If a fault occurs in that function, just revert to the
1511 * byte-by-byte approach used for small blocks; this is rare so the
1512 * performance hit for that case does not matter.
1514 * For small blocks it's not worth the overhead of setting up and calling
1515 * the memcpy routine; do the copy a byte at a time.
1520 pta __copy_user_byte_by_byte, tr1
1521 movi 16, r0 ! this value is a best guess, should tune it by benchmarking
1523 pta copy_user_memcpy, tr0
1525 /* Save arguments in case we have to fix-up unhandled page fault */
1529 st.q SP, 24, r35 ! r35 is callee-save
1530 /* Save LINK in a register to reduce RTS time later (otherwise
1531 ld SP,*,LINK;ptabs LINK;trn;blink trn,r63 becomes a critical path) */
1535 /* Copy completed normally if we get back here */
1538 /* don't restore r2-r4, pointless */
1539 /* set result=r2 to zero as the copy must have succeeded. */
1542 blink tr0, r63 ! RTS
1544 .global __copy_user_fixup
1546 /* Restore stack frame */
1553 /* Fall through to original code, in the 'same' state we entered with */
1555 /* The slow byte-by-byte method is used if the fast copy traps due to a bad
1556 user address. In that rare case, the speed drop can be tolerated. */
1557 __copy_user_byte_by_byte:
1558 pta ___copy_user_exit, tr1
1559 pta ___copy_user1, tr0
1560 beq/u r4, r63, tr1 /* early exit for zero length copy */
1565 ld.b r3, 0, r5 /* Fault address 1 */
1567 /* Could rewrite this to use just 1 add, but the second comes 'free'
1568 due to load latency */
1570 addi r4, -1, r4 /* No real fixup required */
1572 stx.b r3, r0, r5 /* Fault address 2 */
1581 * __kernel_size_t __clear_user(void *addr, __kernel_size_t size)
1584 * (r2) target address
1585 * (r3) size in bytes
1588 * (*r2) zero-ed target data
1589 * (r2) non-zero-ed bytes
1591 .global __clear_user
1593 pta ___clear_user_exit, tr1
1594 pta ___clear_user1, tr0
1598 st.b r2, 0, ZERO /* Fault address */
1600 addi r3, -1, r3 /* No real fixup required */
1610 * int __strncpy_from_user(unsigned long __dest, unsigned long __src,
1614 * (r2) target address
1615 * (r3) source address
1616 * (r4) maximum size in bytes
1620 * (r2) -EFAULT (in case of faulting)
1621 * copied data (otherwise)
1623 .global __strncpy_from_user
1624 __strncpy_from_user:
1625 pta ___strncpy_from_user1, tr0
1626 pta ___strncpy_from_user_done, tr1
1627 or r4, ZERO, r5 /* r5 = original count */
1628 beq/u r4, r63, tr1 /* early exit if r4==0 */
1629 movi -(EFAULT), r6 /* r6 = reply, no real fixup */
1630 or ZERO, ZERO, r7 /* r7 = data, clear top byte of data */
1632 ___strncpy_from_user1:
1633 ld.b r3, 0, r7 /* Fault address: only in reading */
1638 addi r4, -1, r4 /* return real number of copied bytes */
1641 ___strncpy_from_user_done:
1642 sub r5, r4, r6 /* If done, return copied */
1644 ___strncpy_from_user_exit:
1650 * extern long __strnlen_user(const char *__s, long __n)
1653 * (r2) source address
1654 * (r3) source size in bytes
1657 * (r2) -EFAULT (in case of faulting)
1658 * string length (otherwise)
1660 .global __strnlen_user
1662 pta ___strnlen_user_set_reply, tr0
1663 pta ___strnlen_user1, tr1
1664 or ZERO, ZERO, r5 /* r5 = counter */
1665 movi -(EFAULT), r6 /* r6 = reply, no real fixup */
1666 or ZERO, ZERO, r7 /* r7 = data, clear top byte of data */
1670 ldx.b r2, r5, r7 /* Fault address: only in reading */
1671 addi r3, -1, r3 /* No real fixup */
1675 ! The line below used to be active. This meant led to a junk byte lying between each pair
1676 ! of entries in the argv & envp structures in memory. Whilst the program saw the right data
1677 ! via the argv and envp arguments to main, it meant the 'flat' representation visible through
1678 ! /proc/$pid/cmdline was corrupt, causing trouble with ps, for example.
1679 ! addi r5, 1, r5 /* Include '\0' */
1681 ___strnlen_user_set_reply:
1682 or r5, ZERO, r6 /* If done, return counter */
1684 ___strnlen_user_exit:
1690 * extern long __get_user_asm_?(void *val, long addr)
1694 * (r3) source address (in User Space)
1697 * (r2) -EFAULT (faulting)
1700 .global __get_user_asm_b
1703 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1706 ld.b r3, 0, r5 /* r5 = data */
1710 ___get_user_asm_b_exit:
1715 .global __get_user_asm_w
1718 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1721 ld.w r3, 0, r5 /* r5 = data */
1725 ___get_user_asm_w_exit:
1730 .global __get_user_asm_l
1733 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1736 ld.l r3, 0, r5 /* r5 = data */
1740 ___get_user_asm_l_exit:
1745 .global __get_user_asm_q
1748 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1751 ld.q r3, 0, r5 /* r5 = data */
1755 ___get_user_asm_q_exit:
1760 * extern long __put_user_asm_?(void *pval, long addr)
1763 * (r2) kernel pointer to value
1764 * (r3) dest address (in User Space)
1767 * (r2) -EFAULT (faulting)
1770 .global __put_user_asm_b
1772 ld.b r2, 0, r4 /* r4 = data */
1773 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1779 ___put_user_asm_b_exit:
1784 .global __put_user_asm_w
1786 ld.w r2, 0, r4 /* r4 = data */
1787 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1793 ___put_user_asm_w_exit:
1798 .global __put_user_asm_l
1800 ld.l r2, 0, r4 /* r4 = data */
1801 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1807 ___put_user_asm_l_exit:
1812 .global __put_user_asm_q
1814 ld.q r2, 0, r4 /* r4 = data */
1815 movi -(EFAULT), r2 /* r2 = reply, no real fixup */
1821 ___put_user_asm_q_exit:
1826 /* The idea is : when we get an unhandled panic, we dump the registers
1827 to a known memory location, the just sit in a tight loop.
1828 This allows the human to look at the memory region through the GDB
1829 session (assuming the debug module's SHwy initiator isn't locked up
1830 or anything), to hopefully analyze the cause of the panic. */
1832 /* On entry, former r15 (SP) is in DCR
1833 former r0 is at resvec_saved_area + 0
1834 former r1 is at resvec_saved_area + 8
1835 former tr0 is at resvec_saved_area + 32
1836 DCR is the only register whose value is lost altogether.
1839 movi 0xffffffff80000000, r0 ! phy of dump area
1840 ld.q SP, 0x000, r1 ! former r0
1842 ld.q SP, 0x008, r1 ! former r1
1906 st.q r0, 0x1f8, r63 ! bogus, but for consistency's sake...
1908 ld.q SP, 0x020, r1 ! former tr0
1958 /* Prepare to jump to C - physical address */
1959 movi panic_handler-CONFIG_PAGE_OFFSET, r1
1973 * --- Signal Handling Section
1977 * extern long long _sa_default_rt_restorer
1978 * extern long long _sa_default_restorer
1982 * extern void _sa_default_rt_restorer(void)
1983 * extern void _sa_default_restorer(void)
1985 * Code prototypes to do a sys_rt_sigreturn() or sys_sysreturn()
1986 * from user space. Copied into user space by signal management.
1987 * Both must be quad aligned and 2 quad long (4 instructions).
1991 .global sa_default_rt_restorer
1992 sa_default_rt_restorer:
1994 shori __NR_rt_sigreturn, r9
1999 .global sa_default_restorer
2000 sa_default_restorer:
2002 shori __NR_sigreturn, r9
2007 * --- __ex_table Section
2011 * User Access Exception Table.
2013 .section __ex_table, "a"
2015 .global asm_uaccess_start /* Just a marker */
2018 .long ___copy_user1, ___copy_user_exit
2019 .long ___copy_user2, ___copy_user_exit
2020 .long ___clear_user1, ___clear_user_exit
2021 .long ___strncpy_from_user1, ___strncpy_from_user_exit
2022 .long ___strnlen_user1, ___strnlen_user_exit
2023 .long ___get_user_asm_b1, ___get_user_asm_b_exit
2024 .long ___get_user_asm_w1, ___get_user_asm_w_exit
2025 .long ___get_user_asm_l1, ___get_user_asm_l_exit
2026 .long ___get_user_asm_q1, ___get_user_asm_q_exit
2027 .long ___put_user_asm_b1, ___put_user_asm_b_exit
2028 .long ___put_user_asm_w1, ___put_user_asm_w_exit
2029 .long ___put_user_asm_l1, ___put_user_asm_l_exit
2030 .long ___put_user_asm_q1, ___put_user_asm_q_exit
2032 .global asm_uaccess_end /* Just a marker */
2039 * --- .text.init Section
2042 .section .text.init, "ax"
2045 * void trap_init (void)
2050 addi SP, -24, SP /* Room to save r28/r29/r30 */
2055 /* Set VBR and RESVEC */
2056 movi LVBR_block, r19
2057 andi r19, -4, r19 /* reset MMUOFF + reserved */
2058 /* For RESVEC exceptions we force the MMU off, which means we need the
2059 physical address. */
2060 movi LRESVEC_block-CONFIG_PAGE_OFFSET, r20
2061 andi r20, -4, r20 /* reset reserved */
2062 ori r20, 1, r20 /* set MMUOFF */
2067 movi LVBR_block_end, r21
2069 movi BLOCK_SIZE, r29 /* r29 = expected size */
2074 * Ugly, but better loop forever now than crash afterwards.
2075 * We should print a message, but if we touch LVBR or
2076 * LRESVEC blocks we should not be surprised if we get stuck
2079 pta trap_init_loop, tr1
2080 gettr tr1, r28 /* r28 = trap_init_loop */
2081 sub r21, r30, r30 /* r30 = actual size */
2084 * VBR/RESVEC handlers overlap by being bigger than
2085 * allowed. Very bad. Just loop forever.
2086 * (r28) panic/loop address
2087 * (r29) expected size
2093 /* Now that exception vectors are set up reset SR.BL */
2095 movi SR_UNBLOCK_EXC, r23