1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (C) 2015 Etnaviv Project 4 */ 5 6 #include <drm/drm_file.h> 7 #include <linux/dma-fence-array.h> 8 #include <linux/file.h> 9 #include <linux/pm_runtime.h> 10 #include <linux/dma-resv.h> 11 #include <linux/sync_file.h> 12 #include <linux/uaccess.h> 13 #include <linux/vmalloc.h> 14 15 #include "etnaviv_cmdbuf.h" 16 #include "etnaviv_drv.h" 17 #include "etnaviv_gpu.h" 18 #include "etnaviv_gem.h" 19 #include "etnaviv_perfmon.h" 20 #include "etnaviv_sched.h" 21 22 /* 23 * Cmdstream submission: 24 */ 25 26 #define BO_INVALID_FLAGS ~(ETNA_SUBMIT_BO_READ | ETNA_SUBMIT_BO_WRITE) 27 /* make sure these don't conflict w/ ETNAVIV_SUBMIT_BO_x */ 28 #define BO_LOCKED 0x4000 29 #define BO_PINNED 0x2000 30 31 static struct etnaviv_gem_submit *submit_create(struct drm_device *dev, 32 struct etnaviv_gpu *gpu, size_t nr_bos, size_t nr_pmrs) 33 { 34 struct etnaviv_gem_submit *submit; 35 size_t sz = size_vstruct(nr_bos, sizeof(submit->bos[0]), sizeof(*submit)); 36 37 submit = kzalloc(sz, GFP_KERNEL); 38 if (!submit) 39 return NULL; 40 41 submit->pmrs = kcalloc(nr_pmrs, sizeof(struct etnaviv_perfmon_request), 42 GFP_KERNEL); 43 if (!submit->pmrs) { 44 kfree(submit); 45 return NULL; 46 } 47 submit->nr_pmrs = nr_pmrs; 48 49 submit->gpu = gpu; 50 kref_init(&submit->refcount); 51 52 return submit; 53 } 54 55 static int submit_lookup_objects(struct etnaviv_gem_submit *submit, 56 struct drm_file *file, struct drm_etnaviv_gem_submit_bo *submit_bos, 57 unsigned nr_bos) 58 { 59 struct drm_etnaviv_gem_submit_bo *bo; 60 unsigned i; 61 int ret = 0; 62 63 spin_lock(&file->table_lock); 64 65 for (i = 0, bo = submit_bos; i < nr_bos; i++, bo++) { 66 struct drm_gem_object *obj; 67 68 if (bo->flags & BO_INVALID_FLAGS) { 69 DRM_ERROR("invalid flags: %x\n", bo->flags); 70 ret = -EINVAL; 71 goto out_unlock; 72 } 73 74 submit->bos[i].flags = bo->flags; 75 if (submit->flags & ETNA_SUBMIT_SOFTPIN) { 76 if (bo->presumed < ETNAVIV_SOFTPIN_START_ADDRESS) { 77 DRM_ERROR("invalid softpin address\n"); 78 ret = -EINVAL; 79 goto out_unlock; 80 } 81 submit->bos[i].va = bo->presumed; 82 } 83 84 /* normally use drm_gem_object_lookup(), but for bulk lookup 85 * all under single table_lock just hit object_idr directly: 86 */ 87 obj = idr_find(&file->object_idr, bo->handle); 88 if (!obj) { 89 DRM_ERROR("invalid handle %u at index %u\n", 90 bo->handle, i); 91 ret = -EINVAL; 92 goto out_unlock; 93 } 94 95 /* 96 * Take a refcount on the object. The file table lock 97 * prevents the object_idr's refcount on this being dropped. 98 */ 99 drm_gem_object_get(obj); 100 101 submit->bos[i].obj = to_etnaviv_bo(obj); 102 } 103 104 out_unlock: 105 submit->nr_bos = i; 106 spin_unlock(&file->table_lock); 107 108 return ret; 109 } 110 111 static void submit_unlock_object(struct etnaviv_gem_submit *submit, int i) 112 { 113 if (submit->bos[i].flags & BO_LOCKED) { 114 struct drm_gem_object *obj = &submit->bos[i].obj->base; 115 116 dma_resv_unlock(obj->resv); 117 submit->bos[i].flags &= ~BO_LOCKED; 118 } 119 } 120 121 static int submit_lock_objects(struct etnaviv_gem_submit *submit, 122 struct ww_acquire_ctx *ticket) 123 { 124 int contended, slow_locked = -1, i, ret = 0; 125 126 retry: 127 for (i = 0; i < submit->nr_bos; i++) { 128 struct drm_gem_object *obj = &submit->bos[i].obj->base; 129 130 if (slow_locked == i) 131 slow_locked = -1; 132 133 contended = i; 134 135 if (!(submit->bos[i].flags & BO_LOCKED)) { 136 ret = dma_resv_lock_interruptible(obj->resv, ticket); 137 if (ret == -EALREADY) 138 DRM_ERROR("BO at index %u already on submit list\n", 139 i); 140 if (ret) 141 goto fail; 142 submit->bos[i].flags |= BO_LOCKED; 143 } 144 } 145 146 ww_acquire_done(ticket); 147 148 return 0; 149 150 fail: 151 for (; i >= 0; i--) 152 submit_unlock_object(submit, i); 153 154 if (slow_locked > 0) 155 submit_unlock_object(submit, slow_locked); 156 157 if (ret == -EDEADLK) { 158 struct drm_gem_object *obj; 159 160 obj = &submit->bos[contended].obj->base; 161 162 /* we lost out in a seqno race, lock and retry.. */ 163 ret = dma_resv_lock_slow_interruptible(obj->resv, ticket); 164 if (!ret) { 165 submit->bos[contended].flags |= BO_LOCKED; 166 slow_locked = contended; 167 goto retry; 168 } 169 } 170 171 return ret; 172 } 173 174 static int submit_fence_sync(struct etnaviv_gem_submit *submit) 175 { 176 int i, ret = 0; 177 178 for (i = 0; i < submit->nr_bos; i++) { 179 struct etnaviv_gem_submit_bo *bo = &submit->bos[i]; 180 struct dma_resv *robj = bo->obj->base.resv; 181 182 ret = dma_resv_reserve_fences(robj, 1); 183 if (ret) 184 return ret; 185 186 if (submit->flags & ETNA_SUBMIT_NO_IMPLICIT) 187 continue; 188 189 ret = drm_sched_job_add_implicit_dependencies(&submit->sched_job, 190 &bo->obj->base, 191 bo->flags & ETNA_SUBMIT_BO_WRITE); 192 if (ret) 193 return ret; 194 } 195 196 return ret; 197 } 198 199 static void submit_attach_object_fences(struct etnaviv_gem_submit *submit) 200 { 201 int i; 202 203 for (i = 0; i < submit->nr_bos; i++) { 204 struct drm_gem_object *obj = &submit->bos[i].obj->base; 205 bool write = submit->bos[i].flags & ETNA_SUBMIT_BO_WRITE; 206 207 dma_resv_add_fence(obj->resv, submit->out_fence, write ? 208 DMA_RESV_USAGE_WRITE : DMA_RESV_USAGE_READ); 209 submit_unlock_object(submit, i); 210 } 211 } 212 213 static int submit_pin_objects(struct etnaviv_gem_submit *submit) 214 { 215 int i, ret = 0; 216 217 for (i = 0; i < submit->nr_bos; i++) { 218 struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj; 219 struct etnaviv_vram_mapping *mapping; 220 221 mapping = etnaviv_gem_mapping_get(&etnaviv_obj->base, 222 submit->mmu_context, 223 submit->bos[i].va); 224 if (IS_ERR(mapping)) { 225 ret = PTR_ERR(mapping); 226 break; 227 } 228 229 if ((submit->flags & ETNA_SUBMIT_SOFTPIN) && 230 submit->bos[i].va != mapping->iova) { 231 etnaviv_gem_mapping_unreference(mapping); 232 return -EINVAL; 233 } 234 235 atomic_inc(&etnaviv_obj->gpu_active); 236 237 submit->bos[i].flags |= BO_PINNED; 238 submit->bos[i].mapping = mapping; 239 } 240 241 return ret; 242 } 243 244 static int submit_bo(struct etnaviv_gem_submit *submit, u32 idx, 245 struct etnaviv_gem_submit_bo **bo) 246 { 247 if (idx >= submit->nr_bos) { 248 DRM_ERROR("invalid buffer index: %u (out of %u)\n", 249 idx, submit->nr_bos); 250 return -EINVAL; 251 } 252 253 *bo = &submit->bos[idx]; 254 255 return 0; 256 } 257 258 /* process the reloc's and patch up the cmdstream as needed: */ 259 static int submit_reloc(struct etnaviv_gem_submit *submit, void *stream, 260 u32 size, const struct drm_etnaviv_gem_submit_reloc *relocs, 261 u32 nr_relocs) 262 { 263 u32 i, last_offset = 0; 264 u32 *ptr = stream; 265 int ret; 266 267 /* Submits using softpin don't blend with relocs */ 268 if ((submit->flags & ETNA_SUBMIT_SOFTPIN) && nr_relocs != 0) 269 return -EINVAL; 270 271 for (i = 0; i < nr_relocs; i++) { 272 const struct drm_etnaviv_gem_submit_reloc *r = relocs + i; 273 struct etnaviv_gem_submit_bo *bo; 274 u32 off; 275 276 if (unlikely(r->flags)) { 277 DRM_ERROR("invalid reloc flags\n"); 278 return -EINVAL; 279 } 280 281 if (r->submit_offset % 4) { 282 DRM_ERROR("non-aligned reloc offset: %u\n", 283 r->submit_offset); 284 return -EINVAL; 285 } 286 287 /* offset in dwords: */ 288 off = r->submit_offset / 4; 289 290 if ((off >= size ) || 291 (off < last_offset)) { 292 DRM_ERROR("invalid offset %u at reloc %u\n", off, i); 293 return -EINVAL; 294 } 295 296 ret = submit_bo(submit, r->reloc_idx, &bo); 297 if (ret) 298 return ret; 299 300 if (r->reloc_offset > bo->obj->base.size - sizeof(*ptr)) { 301 DRM_ERROR("relocation %u outside object\n", i); 302 return -EINVAL; 303 } 304 305 ptr[off] = bo->mapping->iova + r->reloc_offset; 306 307 last_offset = off; 308 } 309 310 return 0; 311 } 312 313 static int submit_perfmon_validate(struct etnaviv_gem_submit *submit, 314 u32 exec_state, const struct drm_etnaviv_gem_submit_pmr *pmrs) 315 { 316 u32 i; 317 318 for (i = 0; i < submit->nr_pmrs; i++) { 319 const struct drm_etnaviv_gem_submit_pmr *r = pmrs + i; 320 struct etnaviv_gem_submit_bo *bo; 321 int ret; 322 323 ret = submit_bo(submit, r->read_idx, &bo); 324 if (ret) 325 return ret; 326 327 /* at offset 0 a sequence number gets stored used for userspace sync */ 328 if (r->read_offset == 0) { 329 DRM_ERROR("perfmon request: offset is 0"); 330 return -EINVAL; 331 } 332 333 if (r->read_offset >= bo->obj->base.size - sizeof(u32)) { 334 DRM_ERROR("perfmon request: offset %u outside object", i); 335 return -EINVAL; 336 } 337 338 if (r->flags & ~(ETNA_PM_PROCESS_PRE | ETNA_PM_PROCESS_POST)) { 339 DRM_ERROR("perfmon request: flags are not valid"); 340 return -EINVAL; 341 } 342 343 if (etnaviv_pm_req_validate(r, exec_state)) { 344 DRM_ERROR("perfmon request: domain or signal not valid"); 345 return -EINVAL; 346 } 347 348 submit->pmrs[i].flags = r->flags; 349 submit->pmrs[i].domain = r->domain; 350 submit->pmrs[i].signal = r->signal; 351 submit->pmrs[i].sequence = r->sequence; 352 submit->pmrs[i].offset = r->read_offset; 353 submit->pmrs[i].bo_vma = etnaviv_gem_vmap(&bo->obj->base); 354 } 355 356 return 0; 357 } 358 359 static void submit_cleanup(struct kref *kref) 360 { 361 struct etnaviv_gem_submit *submit = 362 container_of(kref, struct etnaviv_gem_submit, refcount); 363 unsigned i; 364 365 if (submit->runtime_resumed) 366 pm_runtime_put_autosuspend(submit->gpu->dev); 367 368 if (submit->cmdbuf.suballoc) 369 etnaviv_cmdbuf_free(&submit->cmdbuf); 370 371 if (submit->mmu_context) 372 etnaviv_iommu_context_put(submit->mmu_context); 373 374 if (submit->prev_mmu_context) 375 etnaviv_iommu_context_put(submit->prev_mmu_context); 376 377 for (i = 0; i < submit->nr_bos; i++) { 378 struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj; 379 380 /* unpin all objects */ 381 if (submit->bos[i].flags & BO_PINNED) { 382 etnaviv_gem_mapping_unreference(submit->bos[i].mapping); 383 atomic_dec(&etnaviv_obj->gpu_active); 384 submit->bos[i].mapping = NULL; 385 submit->bos[i].flags &= ~BO_PINNED; 386 } 387 388 /* if the GPU submit failed, objects might still be locked */ 389 submit_unlock_object(submit, i); 390 drm_gem_object_put(&etnaviv_obj->base); 391 } 392 393 wake_up_all(&submit->gpu->fence_event); 394 395 if (submit->out_fence) { 396 /* first remove from IDR, so fence can not be found anymore */ 397 mutex_lock(&submit->gpu->fence_lock); 398 idr_remove(&submit->gpu->fence_idr, submit->out_fence_id); 399 mutex_unlock(&submit->gpu->fence_lock); 400 dma_fence_put(submit->out_fence); 401 } 402 403 put_pid(submit->pid); 404 405 kfree(submit->pmrs); 406 kfree(submit); 407 } 408 409 void etnaviv_submit_put(struct etnaviv_gem_submit *submit) 410 { 411 kref_put(&submit->refcount, submit_cleanup); 412 } 413 414 int etnaviv_ioctl_gem_submit(struct drm_device *dev, void *data, 415 struct drm_file *file) 416 { 417 struct etnaviv_file_private *ctx = file->driver_priv; 418 struct etnaviv_drm_private *priv = dev->dev_private; 419 struct drm_etnaviv_gem_submit *args = data; 420 struct drm_etnaviv_gem_submit_reloc *relocs; 421 struct drm_etnaviv_gem_submit_pmr *pmrs; 422 struct drm_etnaviv_gem_submit_bo *bos; 423 struct etnaviv_gem_submit *submit; 424 struct etnaviv_gpu *gpu; 425 struct sync_file *sync_file = NULL; 426 struct ww_acquire_ctx ticket; 427 int out_fence_fd = -1; 428 struct pid *pid = get_pid(task_pid(current)); 429 void *stream; 430 int ret; 431 432 if (args->pipe >= ETNA_MAX_PIPES) 433 return -EINVAL; 434 435 gpu = priv->gpu[args->pipe]; 436 if (!gpu) 437 return -ENXIO; 438 439 if (args->stream_size % 4) { 440 DRM_ERROR("non-aligned cmdstream buffer size: %u\n", 441 args->stream_size); 442 return -EINVAL; 443 } 444 445 if (args->exec_state != ETNA_PIPE_3D && 446 args->exec_state != ETNA_PIPE_2D && 447 args->exec_state != ETNA_PIPE_VG) { 448 DRM_ERROR("invalid exec_state: 0x%x\n", args->exec_state); 449 return -EINVAL; 450 } 451 452 if (args->flags & ~ETNA_SUBMIT_FLAGS) { 453 DRM_ERROR("invalid flags: 0x%x\n", args->flags); 454 return -EINVAL; 455 } 456 457 if ((args->flags & ETNA_SUBMIT_SOFTPIN) && 458 priv->mmu_global->version != ETNAVIV_IOMMU_V2) { 459 DRM_ERROR("softpin requested on incompatible MMU\n"); 460 return -EINVAL; 461 } 462 463 if (args->stream_size > SZ_128K || args->nr_relocs > SZ_128K || 464 args->nr_bos > SZ_128K || args->nr_pmrs > 128) { 465 DRM_ERROR("submit arguments out of size limits\n"); 466 return -EINVAL; 467 } 468 469 /* 470 * Copy the command submission and bo array to kernel space in 471 * one go, and do this outside of any locks. 472 */ 473 bos = kvmalloc_array(args->nr_bos, sizeof(*bos), GFP_KERNEL); 474 relocs = kvmalloc_array(args->nr_relocs, sizeof(*relocs), GFP_KERNEL); 475 pmrs = kvmalloc_array(args->nr_pmrs, sizeof(*pmrs), GFP_KERNEL); 476 stream = kvmalloc_array(1, args->stream_size, GFP_KERNEL); 477 if (!bos || !relocs || !pmrs || !stream) { 478 ret = -ENOMEM; 479 goto err_submit_cmds; 480 } 481 482 ret = copy_from_user(bos, u64_to_user_ptr(args->bos), 483 args->nr_bos * sizeof(*bos)); 484 if (ret) { 485 ret = -EFAULT; 486 goto err_submit_cmds; 487 } 488 489 ret = copy_from_user(relocs, u64_to_user_ptr(args->relocs), 490 args->nr_relocs * sizeof(*relocs)); 491 if (ret) { 492 ret = -EFAULT; 493 goto err_submit_cmds; 494 } 495 496 ret = copy_from_user(pmrs, u64_to_user_ptr(args->pmrs), 497 args->nr_pmrs * sizeof(*pmrs)); 498 if (ret) { 499 ret = -EFAULT; 500 goto err_submit_cmds; 501 } 502 503 ret = copy_from_user(stream, u64_to_user_ptr(args->stream), 504 args->stream_size); 505 if (ret) { 506 ret = -EFAULT; 507 goto err_submit_cmds; 508 } 509 510 if (args->flags & ETNA_SUBMIT_FENCE_FD_OUT) { 511 out_fence_fd = get_unused_fd_flags(O_CLOEXEC); 512 if (out_fence_fd < 0) { 513 ret = out_fence_fd; 514 goto err_submit_cmds; 515 } 516 } 517 518 ww_acquire_init(&ticket, &reservation_ww_class); 519 520 submit = submit_create(dev, gpu, args->nr_bos, args->nr_pmrs); 521 if (!submit) { 522 ret = -ENOMEM; 523 goto err_submit_ww_acquire; 524 } 525 526 submit->pid = pid; 527 528 ret = etnaviv_cmdbuf_init(priv->cmdbuf_suballoc, &submit->cmdbuf, 529 ALIGN(args->stream_size, 8) + 8); 530 if (ret) 531 goto err_submit_put; 532 533 submit->ctx = file->driver_priv; 534 submit->mmu_context = etnaviv_iommu_context_get(submit->ctx->mmu); 535 submit->exec_state = args->exec_state; 536 submit->flags = args->flags; 537 538 ret = drm_sched_job_init(&submit->sched_job, 539 &ctx->sched_entity[args->pipe], 540 submit->ctx); 541 if (ret) 542 goto err_submit_put; 543 544 ret = submit_lookup_objects(submit, file, bos, args->nr_bos); 545 if (ret) 546 goto err_submit_job; 547 548 if ((priv->mmu_global->version != ETNAVIV_IOMMU_V2) && 549 !etnaviv_cmd_validate_one(gpu, stream, args->stream_size / 4, 550 relocs, args->nr_relocs)) { 551 ret = -EINVAL; 552 goto err_submit_job; 553 } 554 555 if (args->flags & ETNA_SUBMIT_FENCE_FD_IN) { 556 struct dma_fence *in_fence = sync_file_get_fence(args->fence_fd); 557 if (!in_fence) { 558 ret = -EINVAL; 559 goto err_submit_job; 560 } 561 562 ret = drm_sched_job_add_dependency(&submit->sched_job, 563 in_fence); 564 if (ret) 565 goto err_submit_job; 566 } 567 568 ret = submit_pin_objects(submit); 569 if (ret) 570 goto err_submit_job; 571 572 ret = submit_reloc(submit, stream, args->stream_size / 4, 573 relocs, args->nr_relocs); 574 if (ret) 575 goto err_submit_job; 576 577 ret = submit_perfmon_validate(submit, args->exec_state, pmrs); 578 if (ret) 579 goto err_submit_job; 580 581 memcpy(submit->cmdbuf.vaddr, stream, args->stream_size); 582 583 ret = submit_lock_objects(submit, &ticket); 584 if (ret) 585 goto err_submit_job; 586 587 ret = submit_fence_sync(submit); 588 if (ret) 589 goto err_submit_job; 590 591 ret = etnaviv_sched_push_job(submit); 592 if (ret) 593 goto err_submit_job; 594 595 submit_attach_object_fences(submit); 596 597 if (args->flags & ETNA_SUBMIT_FENCE_FD_OUT) { 598 /* 599 * This can be improved: ideally we want to allocate the sync 600 * file before kicking off the GPU job and just attach the 601 * fence to the sync file here, eliminating the ENOMEM 602 * possibility at this stage. 603 */ 604 sync_file = sync_file_create(submit->out_fence); 605 if (!sync_file) { 606 ret = -ENOMEM; 607 /* 608 * When this late error is hit, the submit has already 609 * been handed over to the scheduler. At this point 610 * the sched_job must not be cleaned up. 611 */ 612 goto err_submit_put; 613 } 614 fd_install(out_fence_fd, sync_file->file); 615 } 616 617 args->fence_fd = out_fence_fd; 618 args->fence = submit->out_fence_id; 619 620 err_submit_job: 621 if (ret) 622 drm_sched_job_cleanup(&submit->sched_job); 623 err_submit_put: 624 etnaviv_submit_put(submit); 625 626 err_submit_ww_acquire: 627 ww_acquire_fini(&ticket); 628 629 err_submit_cmds: 630 if (ret && (out_fence_fd >= 0)) 631 put_unused_fd(out_fence_fd); 632 kvfree(stream); 633 kvfree(bos); 634 kvfree(relocs); 635 kvfree(pmrs); 636 637 return ret; 638 } 639