1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (C) 2013 Red Hat 4 * Author: Rob Clark <robdclark@gmail.com> 5 */ 6 7 #include <linux/dma-map-ops.h> 8 #include <linux/vmalloc.h> 9 #include <linux/spinlock.h> 10 #include <linux/shmem_fs.h> 11 #include <linux/dma-buf.h> 12 #include <linux/pfn_t.h> 13 14 #include <drm/drm_prime.h> 15 16 #include "msm_drv.h" 17 #include "msm_fence.h" 18 #include "msm_gem.h" 19 #include "msm_gpu.h" 20 #include "msm_mmu.h" 21 22 static void update_inactive(struct msm_gem_object *msm_obj); 23 24 static dma_addr_t physaddr(struct drm_gem_object *obj) 25 { 26 struct msm_gem_object *msm_obj = to_msm_bo(obj); 27 struct msm_drm_private *priv = obj->dev->dev_private; 28 return (((dma_addr_t)msm_obj->vram_node->start) << PAGE_SHIFT) + 29 priv->vram.paddr; 30 } 31 32 static bool use_pages(struct drm_gem_object *obj) 33 { 34 struct msm_gem_object *msm_obj = to_msm_bo(obj); 35 return !msm_obj->vram_node; 36 } 37 38 /* 39 * Cache sync.. this is a bit over-complicated, to fit dma-mapping 40 * API. Really GPU cache is out of scope here (handled on cmdstream) 41 * and all we need to do is invalidate newly allocated pages before 42 * mapping to CPU as uncached/writecombine. 43 * 44 * On top of this, we have the added headache, that depending on 45 * display generation, the display's iommu may be wired up to either 46 * the toplevel drm device (mdss), or to the mdp sub-node, meaning 47 * that here we either have dma-direct or iommu ops. 48 * 49 * Let this be a cautionary tail of abstraction gone wrong. 50 */ 51 52 static void sync_for_device(struct msm_gem_object *msm_obj) 53 { 54 struct device *dev = msm_obj->base.dev->dev; 55 56 dma_map_sgtable(dev, msm_obj->sgt, DMA_BIDIRECTIONAL, 0); 57 } 58 59 static void sync_for_cpu(struct msm_gem_object *msm_obj) 60 { 61 struct device *dev = msm_obj->base.dev->dev; 62 63 dma_unmap_sgtable(dev, msm_obj->sgt, DMA_BIDIRECTIONAL, 0); 64 } 65 66 /* allocate pages from VRAM carveout, used when no IOMMU: */ 67 static struct page **get_pages_vram(struct drm_gem_object *obj, int npages) 68 { 69 struct msm_gem_object *msm_obj = to_msm_bo(obj); 70 struct msm_drm_private *priv = obj->dev->dev_private; 71 dma_addr_t paddr; 72 struct page **p; 73 int ret, i; 74 75 p = kvmalloc_array(npages, sizeof(struct page *), GFP_KERNEL); 76 if (!p) 77 return ERR_PTR(-ENOMEM); 78 79 spin_lock(&priv->vram.lock); 80 ret = drm_mm_insert_node(&priv->vram.mm, msm_obj->vram_node, npages); 81 spin_unlock(&priv->vram.lock); 82 if (ret) { 83 kvfree(p); 84 return ERR_PTR(ret); 85 } 86 87 paddr = physaddr(obj); 88 for (i = 0; i < npages; i++) { 89 p[i] = pfn_to_page(__phys_to_pfn(paddr)); 90 paddr += PAGE_SIZE; 91 } 92 93 return p; 94 } 95 96 static struct page **get_pages(struct drm_gem_object *obj) 97 { 98 struct msm_gem_object *msm_obj = to_msm_bo(obj); 99 100 GEM_WARN_ON(!msm_gem_is_locked(obj)); 101 102 if (!msm_obj->pages) { 103 struct drm_device *dev = obj->dev; 104 struct page **p; 105 int npages = obj->size >> PAGE_SHIFT; 106 107 if (use_pages(obj)) 108 p = drm_gem_get_pages(obj); 109 else 110 p = get_pages_vram(obj, npages); 111 112 if (IS_ERR(p)) { 113 DRM_DEV_ERROR(dev->dev, "could not get pages: %ld\n", 114 PTR_ERR(p)); 115 return p; 116 } 117 118 msm_obj->pages = p; 119 120 msm_obj->sgt = drm_prime_pages_to_sg(obj->dev, p, npages); 121 if (IS_ERR(msm_obj->sgt)) { 122 void *ptr = ERR_CAST(msm_obj->sgt); 123 124 DRM_DEV_ERROR(dev->dev, "failed to allocate sgt\n"); 125 msm_obj->sgt = NULL; 126 return ptr; 127 } 128 129 /* For non-cached buffers, ensure the new pages are clean 130 * because display controller, GPU, etc. are not coherent: 131 */ 132 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 133 sync_for_device(msm_obj); 134 135 update_inactive(msm_obj); 136 } 137 138 return msm_obj->pages; 139 } 140 141 static void put_pages_vram(struct drm_gem_object *obj) 142 { 143 struct msm_gem_object *msm_obj = to_msm_bo(obj); 144 struct msm_drm_private *priv = obj->dev->dev_private; 145 146 spin_lock(&priv->vram.lock); 147 drm_mm_remove_node(msm_obj->vram_node); 148 spin_unlock(&priv->vram.lock); 149 150 kvfree(msm_obj->pages); 151 } 152 153 static void put_pages(struct drm_gem_object *obj) 154 { 155 struct msm_gem_object *msm_obj = to_msm_bo(obj); 156 157 if (msm_obj->pages) { 158 if (msm_obj->sgt) { 159 /* For non-cached buffers, ensure the new 160 * pages are clean because display controller, 161 * GPU, etc. are not coherent: 162 */ 163 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 164 sync_for_cpu(msm_obj); 165 166 sg_free_table(msm_obj->sgt); 167 kfree(msm_obj->sgt); 168 msm_obj->sgt = NULL; 169 } 170 171 if (use_pages(obj)) 172 drm_gem_put_pages(obj, msm_obj->pages, true, false); 173 else 174 put_pages_vram(obj); 175 176 msm_obj->pages = NULL; 177 } 178 } 179 180 struct page **msm_gem_get_pages(struct drm_gem_object *obj) 181 { 182 struct msm_gem_object *msm_obj = to_msm_bo(obj); 183 struct page **p; 184 185 msm_gem_lock(obj); 186 187 if (GEM_WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) { 188 msm_gem_unlock(obj); 189 return ERR_PTR(-EBUSY); 190 } 191 192 p = get_pages(obj); 193 194 if (!IS_ERR(p)) { 195 msm_obj->pin_count++; 196 update_inactive(msm_obj); 197 } 198 199 msm_gem_unlock(obj); 200 return p; 201 } 202 203 void msm_gem_put_pages(struct drm_gem_object *obj) 204 { 205 struct msm_gem_object *msm_obj = to_msm_bo(obj); 206 207 msm_gem_lock(obj); 208 msm_obj->pin_count--; 209 GEM_WARN_ON(msm_obj->pin_count < 0); 210 update_inactive(msm_obj); 211 msm_gem_unlock(obj); 212 } 213 214 static pgprot_t msm_gem_pgprot(struct msm_gem_object *msm_obj, pgprot_t prot) 215 { 216 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 217 return pgprot_writecombine(prot); 218 return prot; 219 } 220 221 static vm_fault_t msm_gem_fault(struct vm_fault *vmf) 222 { 223 struct vm_area_struct *vma = vmf->vma; 224 struct drm_gem_object *obj = vma->vm_private_data; 225 struct msm_gem_object *msm_obj = to_msm_bo(obj); 226 struct page **pages; 227 unsigned long pfn; 228 pgoff_t pgoff; 229 int err; 230 vm_fault_t ret; 231 232 /* 233 * vm_ops.open/drm_gem_mmap_obj and close get and put 234 * a reference on obj. So, we dont need to hold one here. 235 */ 236 err = msm_gem_lock_interruptible(obj); 237 if (err) { 238 ret = VM_FAULT_NOPAGE; 239 goto out; 240 } 241 242 if (GEM_WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) { 243 msm_gem_unlock(obj); 244 return VM_FAULT_SIGBUS; 245 } 246 247 /* make sure we have pages attached now */ 248 pages = get_pages(obj); 249 if (IS_ERR(pages)) { 250 ret = vmf_error(PTR_ERR(pages)); 251 goto out_unlock; 252 } 253 254 /* We don't use vmf->pgoff since that has the fake offset: */ 255 pgoff = (vmf->address - vma->vm_start) >> PAGE_SHIFT; 256 257 pfn = page_to_pfn(pages[pgoff]); 258 259 VERB("Inserting %p pfn %lx, pa %lx", (void *)vmf->address, 260 pfn, pfn << PAGE_SHIFT); 261 262 ret = vmf_insert_mixed(vma, vmf->address, __pfn_to_pfn_t(pfn, PFN_DEV)); 263 out_unlock: 264 msm_gem_unlock(obj); 265 out: 266 return ret; 267 } 268 269 /** get mmap offset */ 270 static uint64_t mmap_offset(struct drm_gem_object *obj) 271 { 272 struct drm_device *dev = obj->dev; 273 int ret; 274 275 GEM_WARN_ON(!msm_gem_is_locked(obj)); 276 277 /* Make it mmapable */ 278 ret = drm_gem_create_mmap_offset(obj); 279 280 if (ret) { 281 DRM_DEV_ERROR(dev->dev, "could not allocate mmap offset\n"); 282 return 0; 283 } 284 285 return drm_vma_node_offset_addr(&obj->vma_node); 286 } 287 288 uint64_t msm_gem_mmap_offset(struct drm_gem_object *obj) 289 { 290 uint64_t offset; 291 292 msm_gem_lock(obj); 293 offset = mmap_offset(obj); 294 msm_gem_unlock(obj); 295 return offset; 296 } 297 298 static struct msm_gem_vma *add_vma(struct drm_gem_object *obj, 299 struct msm_gem_address_space *aspace) 300 { 301 struct msm_gem_object *msm_obj = to_msm_bo(obj); 302 struct msm_gem_vma *vma; 303 304 GEM_WARN_ON(!msm_gem_is_locked(obj)); 305 306 vma = kzalloc(sizeof(*vma), GFP_KERNEL); 307 if (!vma) 308 return ERR_PTR(-ENOMEM); 309 310 vma->aspace = aspace; 311 312 list_add_tail(&vma->list, &msm_obj->vmas); 313 314 return vma; 315 } 316 317 static struct msm_gem_vma *lookup_vma(struct drm_gem_object *obj, 318 struct msm_gem_address_space *aspace) 319 { 320 struct msm_gem_object *msm_obj = to_msm_bo(obj); 321 struct msm_gem_vma *vma; 322 323 GEM_WARN_ON(!msm_gem_is_locked(obj)); 324 325 list_for_each_entry(vma, &msm_obj->vmas, list) { 326 if (vma->aspace == aspace) 327 return vma; 328 } 329 330 return NULL; 331 } 332 333 static void del_vma(struct msm_gem_vma *vma) 334 { 335 if (!vma) 336 return; 337 338 list_del(&vma->list); 339 kfree(vma); 340 } 341 342 /* 343 * If close is true, this also closes the VMA (releasing the allocated 344 * iova range) in addition to removing the iommu mapping. In the eviction 345 * case (!close), we keep the iova allocated, but only remove the iommu 346 * mapping. 347 */ 348 static void 349 put_iova_spaces(struct drm_gem_object *obj, bool close) 350 { 351 struct msm_gem_object *msm_obj = to_msm_bo(obj); 352 struct msm_gem_vma *vma; 353 354 GEM_WARN_ON(!msm_gem_is_locked(obj)); 355 356 list_for_each_entry(vma, &msm_obj->vmas, list) { 357 if (vma->aspace) { 358 msm_gem_purge_vma(vma->aspace, vma); 359 if (close) 360 msm_gem_close_vma(vma->aspace, vma); 361 } 362 } 363 } 364 365 /* Called with msm_obj locked */ 366 static void 367 put_iova_vmas(struct drm_gem_object *obj) 368 { 369 struct msm_gem_object *msm_obj = to_msm_bo(obj); 370 struct msm_gem_vma *vma, *tmp; 371 372 GEM_WARN_ON(!msm_gem_is_locked(obj)); 373 374 list_for_each_entry_safe(vma, tmp, &msm_obj->vmas, list) { 375 del_vma(vma); 376 } 377 } 378 379 static struct msm_gem_vma *get_vma_locked(struct drm_gem_object *obj, 380 struct msm_gem_address_space *aspace, 381 u64 range_start, u64 range_end) 382 { 383 struct msm_gem_vma *vma; 384 385 GEM_WARN_ON(!msm_gem_is_locked(obj)); 386 387 vma = lookup_vma(obj, aspace); 388 389 if (!vma) { 390 int ret; 391 392 vma = add_vma(obj, aspace); 393 if (IS_ERR(vma)) 394 return vma; 395 396 ret = msm_gem_init_vma(aspace, vma, obj->size, 397 range_start, range_end); 398 if (ret) { 399 del_vma(vma); 400 return ERR_PTR(ret); 401 } 402 } else { 403 GEM_WARN_ON(vma->iova < range_start); 404 GEM_WARN_ON((vma->iova + obj->size) > range_end); 405 } 406 407 return vma; 408 } 409 410 static int msm_gem_pin_iova(struct drm_gem_object *obj, struct msm_gem_vma *vma) 411 { 412 struct msm_gem_object *msm_obj = to_msm_bo(obj); 413 struct page **pages; 414 int ret, prot = IOMMU_READ; 415 416 if (!(msm_obj->flags & MSM_BO_GPU_READONLY)) 417 prot |= IOMMU_WRITE; 418 419 if (msm_obj->flags & MSM_BO_MAP_PRIV) 420 prot |= IOMMU_PRIV; 421 422 if (msm_obj->flags & MSM_BO_CACHED_COHERENT) 423 prot |= IOMMU_CACHE; 424 425 GEM_WARN_ON(!msm_gem_is_locked(obj)); 426 427 if (GEM_WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) 428 return -EBUSY; 429 430 pages = get_pages(obj); 431 if (IS_ERR(pages)) 432 return PTR_ERR(pages); 433 434 ret = msm_gem_map_vma(vma->aspace, vma, prot, msm_obj->sgt, obj->size); 435 436 if (!ret) 437 msm_obj->pin_count++; 438 439 return ret; 440 } 441 442 static int get_and_pin_iova_range_locked(struct drm_gem_object *obj, 443 struct msm_gem_address_space *aspace, uint64_t *iova, 444 u64 range_start, u64 range_end) 445 { 446 struct msm_gem_vma *vma; 447 int ret; 448 449 GEM_WARN_ON(!msm_gem_is_locked(obj)); 450 451 vma = get_vma_locked(obj, aspace, range_start, range_end); 452 if (IS_ERR(vma)) 453 return PTR_ERR(vma); 454 455 ret = msm_gem_pin_iova(obj, vma); 456 if (!ret) 457 *iova = vma->iova; 458 459 return ret; 460 } 461 462 /* 463 * get iova and pin it. Should have a matching put 464 * limits iova to specified range (in pages) 465 */ 466 int msm_gem_get_and_pin_iova_range(struct drm_gem_object *obj, 467 struct msm_gem_address_space *aspace, uint64_t *iova, 468 u64 range_start, u64 range_end) 469 { 470 int ret; 471 472 msm_gem_lock(obj); 473 ret = get_and_pin_iova_range_locked(obj, aspace, iova, range_start, range_end); 474 msm_gem_unlock(obj); 475 476 return ret; 477 } 478 479 int msm_gem_get_and_pin_iova_locked(struct drm_gem_object *obj, 480 struct msm_gem_address_space *aspace, uint64_t *iova) 481 { 482 return get_and_pin_iova_range_locked(obj, aspace, iova, 0, U64_MAX); 483 } 484 485 /* get iova and pin it. Should have a matching put */ 486 int msm_gem_get_and_pin_iova(struct drm_gem_object *obj, 487 struct msm_gem_address_space *aspace, uint64_t *iova) 488 { 489 return msm_gem_get_and_pin_iova_range(obj, aspace, iova, 0, U64_MAX); 490 } 491 492 /* 493 * Get an iova but don't pin it. Doesn't need a put because iovas are currently 494 * valid for the life of the object 495 */ 496 int msm_gem_get_iova(struct drm_gem_object *obj, 497 struct msm_gem_address_space *aspace, uint64_t *iova) 498 { 499 struct msm_gem_vma *vma; 500 int ret = 0; 501 502 msm_gem_lock(obj); 503 vma = get_vma_locked(obj, aspace, 0, U64_MAX); 504 if (IS_ERR(vma)) { 505 ret = PTR_ERR(vma); 506 } else { 507 *iova = vma->iova; 508 } 509 msm_gem_unlock(obj); 510 511 return ret; 512 } 513 514 /* 515 * Locked variant of msm_gem_unpin_iova() 516 */ 517 void msm_gem_unpin_iova_locked(struct drm_gem_object *obj, 518 struct msm_gem_address_space *aspace) 519 { 520 struct msm_gem_object *msm_obj = to_msm_bo(obj); 521 struct msm_gem_vma *vma; 522 523 GEM_WARN_ON(!msm_gem_is_locked(obj)); 524 525 vma = lookup_vma(obj, aspace); 526 527 if (!GEM_WARN_ON(!vma)) { 528 msm_gem_unmap_vma(aspace, vma); 529 530 msm_obj->pin_count--; 531 GEM_WARN_ON(msm_obj->pin_count < 0); 532 533 update_inactive(msm_obj); 534 } 535 } 536 537 /* 538 * Unpin a iova by updating the reference counts. The memory isn't actually 539 * purged until something else (shrinker, mm_notifier, destroy, etc) decides 540 * to get rid of it 541 */ 542 void msm_gem_unpin_iova(struct drm_gem_object *obj, 543 struct msm_gem_address_space *aspace) 544 { 545 msm_gem_lock(obj); 546 msm_gem_unpin_iova_locked(obj, aspace); 547 msm_gem_unlock(obj); 548 } 549 550 int msm_gem_dumb_create(struct drm_file *file, struct drm_device *dev, 551 struct drm_mode_create_dumb *args) 552 { 553 args->pitch = align_pitch(args->width, args->bpp); 554 args->size = PAGE_ALIGN(args->pitch * args->height); 555 return msm_gem_new_handle(dev, file, args->size, 556 MSM_BO_SCANOUT | MSM_BO_WC, &args->handle, "dumb"); 557 } 558 559 int msm_gem_dumb_map_offset(struct drm_file *file, struct drm_device *dev, 560 uint32_t handle, uint64_t *offset) 561 { 562 struct drm_gem_object *obj; 563 int ret = 0; 564 565 /* GEM does all our handle to object mapping */ 566 obj = drm_gem_object_lookup(file, handle); 567 if (obj == NULL) { 568 ret = -ENOENT; 569 goto fail; 570 } 571 572 *offset = msm_gem_mmap_offset(obj); 573 574 drm_gem_object_put(obj); 575 576 fail: 577 return ret; 578 } 579 580 static void *get_vaddr(struct drm_gem_object *obj, unsigned madv) 581 { 582 struct msm_gem_object *msm_obj = to_msm_bo(obj); 583 int ret = 0; 584 585 GEM_WARN_ON(!msm_gem_is_locked(obj)); 586 587 if (obj->import_attach) 588 return ERR_PTR(-ENODEV); 589 590 if (GEM_WARN_ON(msm_obj->madv > madv)) { 591 DRM_DEV_ERROR(obj->dev->dev, "Invalid madv state: %u vs %u\n", 592 msm_obj->madv, madv); 593 return ERR_PTR(-EBUSY); 594 } 595 596 /* increment vmap_count *before* vmap() call, so shrinker can 597 * check vmap_count (is_vunmapable()) outside of msm_obj lock. 598 * This guarantees that we won't try to msm_gem_vunmap() this 599 * same object from within the vmap() call (while we already 600 * hold msm_obj lock) 601 */ 602 msm_obj->vmap_count++; 603 604 if (!msm_obj->vaddr) { 605 struct page **pages = get_pages(obj); 606 if (IS_ERR(pages)) { 607 ret = PTR_ERR(pages); 608 goto fail; 609 } 610 msm_obj->vaddr = vmap(pages, obj->size >> PAGE_SHIFT, 611 VM_MAP, msm_gem_pgprot(msm_obj, PAGE_KERNEL)); 612 if (msm_obj->vaddr == NULL) { 613 ret = -ENOMEM; 614 goto fail; 615 } 616 617 update_inactive(msm_obj); 618 } 619 620 return msm_obj->vaddr; 621 622 fail: 623 msm_obj->vmap_count--; 624 return ERR_PTR(ret); 625 } 626 627 void *msm_gem_get_vaddr_locked(struct drm_gem_object *obj) 628 { 629 return get_vaddr(obj, MSM_MADV_WILLNEED); 630 } 631 632 void *msm_gem_get_vaddr(struct drm_gem_object *obj) 633 { 634 void *ret; 635 636 msm_gem_lock(obj); 637 ret = msm_gem_get_vaddr_locked(obj); 638 msm_gem_unlock(obj); 639 640 return ret; 641 } 642 643 /* 644 * Don't use this! It is for the very special case of dumping 645 * submits from GPU hangs or faults, were the bo may already 646 * be MSM_MADV_DONTNEED, but we know the buffer is still on the 647 * active list. 648 */ 649 void *msm_gem_get_vaddr_active(struct drm_gem_object *obj) 650 { 651 return get_vaddr(obj, __MSM_MADV_PURGED); 652 } 653 654 void msm_gem_put_vaddr_locked(struct drm_gem_object *obj) 655 { 656 struct msm_gem_object *msm_obj = to_msm_bo(obj); 657 658 GEM_WARN_ON(!msm_gem_is_locked(obj)); 659 GEM_WARN_ON(msm_obj->vmap_count < 1); 660 661 msm_obj->vmap_count--; 662 } 663 664 void msm_gem_put_vaddr(struct drm_gem_object *obj) 665 { 666 msm_gem_lock(obj); 667 msm_gem_put_vaddr_locked(obj); 668 msm_gem_unlock(obj); 669 } 670 671 /* Update madvise status, returns true if not purged, else 672 * false or -errno. 673 */ 674 int msm_gem_madvise(struct drm_gem_object *obj, unsigned madv) 675 { 676 struct msm_gem_object *msm_obj = to_msm_bo(obj); 677 678 msm_gem_lock(obj); 679 680 if (msm_obj->madv != __MSM_MADV_PURGED) 681 msm_obj->madv = madv; 682 683 madv = msm_obj->madv; 684 685 /* If the obj is inactive, we might need to move it 686 * between inactive lists 687 */ 688 if (msm_obj->active_count == 0) 689 update_inactive(msm_obj); 690 691 msm_gem_unlock(obj); 692 693 return (madv != __MSM_MADV_PURGED); 694 } 695 696 void msm_gem_purge(struct drm_gem_object *obj) 697 { 698 struct drm_device *dev = obj->dev; 699 struct msm_gem_object *msm_obj = to_msm_bo(obj); 700 701 GEM_WARN_ON(!msm_gem_is_locked(obj)); 702 GEM_WARN_ON(!is_purgeable(msm_obj)); 703 704 /* Get rid of any iommu mapping(s): */ 705 put_iova_spaces(obj, true); 706 707 msm_gem_vunmap(obj); 708 709 drm_vma_node_unmap(&obj->vma_node, dev->anon_inode->i_mapping); 710 711 put_pages(obj); 712 713 put_iova_vmas(obj); 714 715 msm_obj->madv = __MSM_MADV_PURGED; 716 update_inactive(msm_obj); 717 718 drm_gem_free_mmap_offset(obj); 719 720 /* Our goal here is to return as much of the memory as 721 * is possible back to the system as we are called from OOM. 722 * To do this we must instruct the shmfs to drop all of its 723 * backing pages, *now*. 724 */ 725 shmem_truncate_range(file_inode(obj->filp), 0, (loff_t)-1); 726 727 invalidate_mapping_pages(file_inode(obj->filp)->i_mapping, 728 0, (loff_t)-1); 729 } 730 731 /* 732 * Unpin the backing pages and make them available to be swapped out. 733 */ 734 void msm_gem_evict(struct drm_gem_object *obj) 735 { 736 struct drm_device *dev = obj->dev; 737 struct msm_gem_object *msm_obj = to_msm_bo(obj); 738 739 GEM_WARN_ON(!msm_gem_is_locked(obj)); 740 GEM_WARN_ON(is_unevictable(msm_obj)); 741 GEM_WARN_ON(!msm_obj->evictable); 742 GEM_WARN_ON(msm_obj->active_count); 743 744 /* Get rid of any iommu mapping(s): */ 745 put_iova_spaces(obj, false); 746 747 drm_vma_node_unmap(&obj->vma_node, dev->anon_inode->i_mapping); 748 749 put_pages(obj); 750 751 update_inactive(msm_obj); 752 } 753 754 void msm_gem_vunmap(struct drm_gem_object *obj) 755 { 756 struct msm_gem_object *msm_obj = to_msm_bo(obj); 757 758 GEM_WARN_ON(!msm_gem_is_locked(obj)); 759 760 if (!msm_obj->vaddr || GEM_WARN_ON(!is_vunmapable(msm_obj))) 761 return; 762 763 vunmap(msm_obj->vaddr); 764 msm_obj->vaddr = NULL; 765 } 766 767 void msm_gem_active_get(struct drm_gem_object *obj, struct msm_gpu *gpu) 768 { 769 struct msm_gem_object *msm_obj = to_msm_bo(obj); 770 struct msm_drm_private *priv = obj->dev->dev_private; 771 772 might_sleep(); 773 GEM_WARN_ON(!msm_gem_is_locked(obj)); 774 GEM_WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED); 775 GEM_WARN_ON(msm_obj->dontneed); 776 777 if (msm_obj->active_count++ == 0) { 778 mutex_lock(&priv->mm_lock); 779 if (msm_obj->evictable) 780 mark_unevictable(msm_obj); 781 list_move_tail(&msm_obj->mm_list, &gpu->active_list); 782 mutex_unlock(&priv->mm_lock); 783 } 784 } 785 786 void msm_gem_active_put(struct drm_gem_object *obj) 787 { 788 struct msm_gem_object *msm_obj = to_msm_bo(obj); 789 790 might_sleep(); 791 GEM_WARN_ON(!msm_gem_is_locked(obj)); 792 793 if (--msm_obj->active_count == 0) { 794 update_inactive(msm_obj); 795 } 796 } 797 798 static void update_inactive(struct msm_gem_object *msm_obj) 799 { 800 struct msm_drm_private *priv = msm_obj->base.dev->dev_private; 801 802 GEM_WARN_ON(!msm_gem_is_locked(&msm_obj->base)); 803 804 if (msm_obj->active_count != 0) 805 return; 806 807 mutex_lock(&priv->mm_lock); 808 809 if (msm_obj->dontneed) 810 mark_unpurgeable(msm_obj); 811 if (msm_obj->evictable) 812 mark_unevictable(msm_obj); 813 814 list_del(&msm_obj->mm_list); 815 if ((msm_obj->madv == MSM_MADV_WILLNEED) && msm_obj->sgt) { 816 list_add_tail(&msm_obj->mm_list, &priv->inactive_willneed); 817 mark_evictable(msm_obj); 818 } else if (msm_obj->madv == MSM_MADV_DONTNEED) { 819 list_add_tail(&msm_obj->mm_list, &priv->inactive_dontneed); 820 mark_purgeable(msm_obj); 821 } else { 822 GEM_WARN_ON((msm_obj->madv != __MSM_MADV_PURGED) && msm_obj->sgt); 823 list_add_tail(&msm_obj->mm_list, &priv->inactive_unpinned); 824 } 825 826 mutex_unlock(&priv->mm_lock); 827 } 828 829 int msm_gem_cpu_prep(struct drm_gem_object *obj, uint32_t op, ktime_t *timeout) 830 { 831 bool write = !!(op & MSM_PREP_WRITE); 832 unsigned long remain = 833 op & MSM_PREP_NOSYNC ? 0 : timeout_to_jiffies(timeout); 834 long ret; 835 836 ret = dma_resv_wait_timeout(obj->resv, write, true, remain); 837 if (ret == 0) 838 return remain == 0 ? -EBUSY : -ETIMEDOUT; 839 else if (ret < 0) 840 return ret; 841 842 /* TODO cache maintenance */ 843 844 return 0; 845 } 846 847 int msm_gem_cpu_fini(struct drm_gem_object *obj) 848 { 849 /* TODO cache maintenance */ 850 return 0; 851 } 852 853 #ifdef CONFIG_DEBUG_FS 854 void msm_gem_describe(struct drm_gem_object *obj, struct seq_file *m, 855 struct msm_gem_stats *stats) 856 { 857 struct msm_gem_object *msm_obj = to_msm_bo(obj); 858 struct dma_resv *robj = obj->resv; 859 struct msm_gem_vma *vma; 860 uint64_t off = drm_vma_node_start(&obj->vma_node); 861 const char *madv; 862 863 msm_gem_lock(obj); 864 865 stats->all.count++; 866 stats->all.size += obj->size; 867 868 if (is_active(msm_obj)) { 869 stats->active.count++; 870 stats->active.size += obj->size; 871 } 872 873 if (msm_obj->pages) { 874 stats->resident.count++; 875 stats->resident.size += obj->size; 876 } 877 878 switch (msm_obj->madv) { 879 case __MSM_MADV_PURGED: 880 stats->purged.count++; 881 stats->purged.size += obj->size; 882 madv = " purged"; 883 break; 884 case MSM_MADV_DONTNEED: 885 stats->purgeable.count++; 886 stats->purgeable.size += obj->size; 887 madv = " purgeable"; 888 break; 889 case MSM_MADV_WILLNEED: 890 default: 891 madv = ""; 892 break; 893 } 894 895 seq_printf(m, "%08x: %c %2d (%2d) %08llx %p", 896 msm_obj->flags, is_active(msm_obj) ? 'A' : 'I', 897 obj->name, kref_read(&obj->refcount), 898 off, msm_obj->vaddr); 899 900 seq_printf(m, " %08zu %9s %-32s\n", obj->size, madv, msm_obj->name); 901 902 if (!list_empty(&msm_obj->vmas)) { 903 904 seq_puts(m, " vmas:"); 905 906 list_for_each_entry(vma, &msm_obj->vmas, list) { 907 const char *name, *comm; 908 if (vma->aspace) { 909 struct msm_gem_address_space *aspace = vma->aspace; 910 struct task_struct *task = 911 get_pid_task(aspace->pid, PIDTYPE_PID); 912 if (task) { 913 comm = kstrdup(task->comm, GFP_KERNEL); 914 } else { 915 comm = NULL; 916 } 917 name = aspace->name; 918 } else { 919 name = comm = NULL; 920 } 921 seq_printf(m, " [%s%s%s: aspace=%p, %08llx,%s,inuse=%d]", 922 name, comm ? ":" : "", comm ? comm : "", 923 vma->aspace, vma->iova, 924 vma->mapped ? "mapped" : "unmapped", 925 msm_gem_vma_inuse(vma)); 926 kfree(comm); 927 } 928 929 seq_puts(m, "\n"); 930 } 931 932 dma_resv_describe(robj, m); 933 msm_gem_unlock(obj); 934 } 935 936 void msm_gem_describe_objects(struct list_head *list, struct seq_file *m) 937 { 938 struct msm_gem_stats stats = {}; 939 struct msm_gem_object *msm_obj; 940 941 seq_puts(m, " flags id ref offset kaddr size madv name\n"); 942 list_for_each_entry(msm_obj, list, node) { 943 struct drm_gem_object *obj = &msm_obj->base; 944 seq_puts(m, " "); 945 msm_gem_describe(obj, m, &stats); 946 } 947 948 seq_printf(m, "Total: %4d objects, %9zu bytes\n", 949 stats.all.count, stats.all.size); 950 seq_printf(m, "Active: %4d objects, %9zu bytes\n", 951 stats.active.count, stats.active.size); 952 seq_printf(m, "Resident: %4d objects, %9zu bytes\n", 953 stats.resident.count, stats.resident.size); 954 seq_printf(m, "Purgeable: %4d objects, %9zu bytes\n", 955 stats.purgeable.count, stats.purgeable.size); 956 seq_printf(m, "Purged: %4d objects, %9zu bytes\n", 957 stats.purged.count, stats.purged.size); 958 } 959 #endif 960 961 /* don't call directly! Use drm_gem_object_put() */ 962 void msm_gem_free_object(struct drm_gem_object *obj) 963 { 964 struct msm_gem_object *msm_obj = to_msm_bo(obj); 965 struct drm_device *dev = obj->dev; 966 struct msm_drm_private *priv = dev->dev_private; 967 968 mutex_lock(&priv->obj_lock); 969 list_del(&msm_obj->node); 970 mutex_unlock(&priv->obj_lock); 971 972 mutex_lock(&priv->mm_lock); 973 if (msm_obj->dontneed) 974 mark_unpurgeable(msm_obj); 975 list_del(&msm_obj->mm_list); 976 mutex_unlock(&priv->mm_lock); 977 978 msm_gem_lock(obj); 979 980 /* object should not be on active list: */ 981 GEM_WARN_ON(is_active(msm_obj)); 982 983 put_iova_spaces(obj, true); 984 985 if (obj->import_attach) { 986 GEM_WARN_ON(msm_obj->vaddr); 987 988 /* Don't drop the pages for imported dmabuf, as they are not 989 * ours, just free the array we allocated: 990 */ 991 kvfree(msm_obj->pages); 992 993 put_iova_vmas(obj); 994 995 /* dma_buf_detach() grabs resv lock, so we need to unlock 996 * prior to drm_prime_gem_destroy 997 */ 998 msm_gem_unlock(obj); 999 1000 drm_prime_gem_destroy(obj, msm_obj->sgt); 1001 } else { 1002 msm_gem_vunmap(obj); 1003 put_pages(obj); 1004 put_iova_vmas(obj); 1005 msm_gem_unlock(obj); 1006 } 1007 1008 drm_gem_object_release(obj); 1009 1010 kfree(msm_obj); 1011 } 1012 1013 static int msm_gem_object_mmap(struct drm_gem_object *obj, struct vm_area_struct *vma) 1014 { 1015 struct msm_gem_object *msm_obj = to_msm_bo(obj); 1016 1017 vma->vm_flags |= VM_IO | VM_MIXEDMAP | VM_DONTEXPAND | VM_DONTDUMP; 1018 vma->vm_page_prot = msm_gem_pgprot(msm_obj, vm_get_page_prot(vma->vm_flags)); 1019 1020 return 0; 1021 } 1022 1023 /* convenience method to construct a GEM buffer object, and userspace handle */ 1024 int msm_gem_new_handle(struct drm_device *dev, struct drm_file *file, 1025 uint32_t size, uint32_t flags, uint32_t *handle, 1026 char *name) 1027 { 1028 struct drm_gem_object *obj; 1029 int ret; 1030 1031 obj = msm_gem_new(dev, size, flags); 1032 1033 if (IS_ERR(obj)) 1034 return PTR_ERR(obj); 1035 1036 if (name) 1037 msm_gem_object_set_name(obj, "%s", name); 1038 1039 ret = drm_gem_handle_create(file, obj, handle); 1040 1041 /* drop reference from allocate - handle holds it now */ 1042 drm_gem_object_put(obj); 1043 1044 return ret; 1045 } 1046 1047 static const struct vm_operations_struct vm_ops = { 1048 .fault = msm_gem_fault, 1049 .open = drm_gem_vm_open, 1050 .close = drm_gem_vm_close, 1051 }; 1052 1053 static const struct drm_gem_object_funcs msm_gem_object_funcs = { 1054 .free = msm_gem_free_object, 1055 .pin = msm_gem_prime_pin, 1056 .unpin = msm_gem_prime_unpin, 1057 .get_sg_table = msm_gem_prime_get_sg_table, 1058 .vmap = msm_gem_prime_vmap, 1059 .vunmap = msm_gem_prime_vunmap, 1060 .mmap = msm_gem_object_mmap, 1061 .vm_ops = &vm_ops, 1062 }; 1063 1064 static int msm_gem_new_impl(struct drm_device *dev, 1065 uint32_t size, uint32_t flags, 1066 struct drm_gem_object **obj) 1067 { 1068 struct msm_drm_private *priv = dev->dev_private; 1069 struct msm_gem_object *msm_obj; 1070 1071 switch (flags & MSM_BO_CACHE_MASK) { 1072 case MSM_BO_UNCACHED: 1073 case MSM_BO_CACHED: 1074 case MSM_BO_WC: 1075 break; 1076 case MSM_BO_CACHED_COHERENT: 1077 if (priv->has_cached_coherent) 1078 break; 1079 fallthrough; 1080 default: 1081 DRM_DEV_DEBUG(dev->dev, "invalid cache flag: %x\n", 1082 (flags & MSM_BO_CACHE_MASK)); 1083 return -EINVAL; 1084 } 1085 1086 msm_obj = kzalloc(sizeof(*msm_obj), GFP_KERNEL); 1087 if (!msm_obj) 1088 return -ENOMEM; 1089 1090 msm_obj->flags = flags; 1091 msm_obj->madv = MSM_MADV_WILLNEED; 1092 1093 INIT_LIST_HEAD(&msm_obj->node); 1094 INIT_LIST_HEAD(&msm_obj->vmas); 1095 1096 *obj = &msm_obj->base; 1097 (*obj)->funcs = &msm_gem_object_funcs; 1098 1099 return 0; 1100 } 1101 1102 struct drm_gem_object *msm_gem_new(struct drm_device *dev, uint32_t size, uint32_t flags) 1103 { 1104 struct msm_drm_private *priv = dev->dev_private; 1105 struct msm_gem_object *msm_obj; 1106 struct drm_gem_object *obj = NULL; 1107 bool use_vram = false; 1108 int ret; 1109 1110 size = PAGE_ALIGN(size); 1111 1112 if (!msm_use_mmu(dev)) 1113 use_vram = true; 1114 else if ((flags & (MSM_BO_STOLEN | MSM_BO_SCANOUT)) && priv->vram.size) 1115 use_vram = true; 1116 1117 if (GEM_WARN_ON(use_vram && !priv->vram.size)) 1118 return ERR_PTR(-EINVAL); 1119 1120 /* Disallow zero sized objects as they make the underlying 1121 * infrastructure grumpy 1122 */ 1123 if (size == 0) 1124 return ERR_PTR(-EINVAL); 1125 1126 ret = msm_gem_new_impl(dev, size, flags, &obj); 1127 if (ret) 1128 return ERR_PTR(ret); 1129 1130 msm_obj = to_msm_bo(obj); 1131 1132 if (use_vram) { 1133 struct msm_gem_vma *vma; 1134 struct page **pages; 1135 1136 drm_gem_private_object_init(dev, obj, size); 1137 1138 msm_gem_lock(obj); 1139 1140 vma = add_vma(obj, NULL); 1141 msm_gem_unlock(obj); 1142 if (IS_ERR(vma)) { 1143 ret = PTR_ERR(vma); 1144 goto fail; 1145 } 1146 1147 to_msm_bo(obj)->vram_node = &vma->node; 1148 1149 /* Call chain get_pages() -> update_inactive() tries to 1150 * access msm_obj->mm_list, but it is not initialized yet. 1151 * To avoid NULL pointer dereference error, initialize 1152 * mm_list to be empty. 1153 */ 1154 INIT_LIST_HEAD(&msm_obj->mm_list); 1155 1156 msm_gem_lock(obj); 1157 pages = get_pages(obj); 1158 msm_gem_unlock(obj); 1159 if (IS_ERR(pages)) { 1160 ret = PTR_ERR(pages); 1161 goto fail; 1162 } 1163 1164 vma->iova = physaddr(obj); 1165 } else { 1166 ret = drm_gem_object_init(dev, obj, size); 1167 if (ret) 1168 goto fail; 1169 /* 1170 * Our buffers are kept pinned, so allocating them from the 1171 * MOVABLE zone is a really bad idea, and conflicts with CMA. 1172 * See comments above new_inode() why this is required _and_ 1173 * expected if you're going to pin these pages. 1174 */ 1175 mapping_set_gfp_mask(obj->filp->f_mapping, GFP_HIGHUSER); 1176 } 1177 1178 mutex_lock(&priv->mm_lock); 1179 list_add_tail(&msm_obj->mm_list, &priv->inactive_unpinned); 1180 mutex_unlock(&priv->mm_lock); 1181 1182 mutex_lock(&priv->obj_lock); 1183 list_add_tail(&msm_obj->node, &priv->objects); 1184 mutex_unlock(&priv->obj_lock); 1185 1186 return obj; 1187 1188 fail: 1189 drm_gem_object_put(obj); 1190 return ERR_PTR(ret); 1191 } 1192 1193 struct drm_gem_object *msm_gem_import(struct drm_device *dev, 1194 struct dma_buf *dmabuf, struct sg_table *sgt) 1195 { 1196 struct msm_drm_private *priv = dev->dev_private; 1197 struct msm_gem_object *msm_obj; 1198 struct drm_gem_object *obj; 1199 uint32_t size; 1200 int ret, npages; 1201 1202 /* if we don't have IOMMU, don't bother pretending we can import: */ 1203 if (!msm_use_mmu(dev)) { 1204 DRM_DEV_ERROR(dev->dev, "cannot import without IOMMU\n"); 1205 return ERR_PTR(-EINVAL); 1206 } 1207 1208 size = PAGE_ALIGN(dmabuf->size); 1209 1210 ret = msm_gem_new_impl(dev, size, MSM_BO_WC, &obj); 1211 if (ret) 1212 return ERR_PTR(ret); 1213 1214 drm_gem_private_object_init(dev, obj, size); 1215 1216 npages = size / PAGE_SIZE; 1217 1218 msm_obj = to_msm_bo(obj); 1219 msm_gem_lock(obj); 1220 msm_obj->sgt = sgt; 1221 msm_obj->pages = kvmalloc_array(npages, sizeof(struct page *), GFP_KERNEL); 1222 if (!msm_obj->pages) { 1223 msm_gem_unlock(obj); 1224 ret = -ENOMEM; 1225 goto fail; 1226 } 1227 1228 ret = drm_prime_sg_to_page_array(sgt, msm_obj->pages, npages); 1229 if (ret) { 1230 msm_gem_unlock(obj); 1231 goto fail; 1232 } 1233 1234 msm_gem_unlock(obj); 1235 1236 mutex_lock(&priv->mm_lock); 1237 list_add_tail(&msm_obj->mm_list, &priv->inactive_unpinned); 1238 mutex_unlock(&priv->mm_lock); 1239 1240 mutex_lock(&priv->obj_lock); 1241 list_add_tail(&msm_obj->node, &priv->objects); 1242 mutex_unlock(&priv->obj_lock); 1243 1244 return obj; 1245 1246 fail: 1247 drm_gem_object_put(obj); 1248 return ERR_PTR(ret); 1249 } 1250 1251 void *msm_gem_kernel_new(struct drm_device *dev, uint32_t size, 1252 uint32_t flags, struct msm_gem_address_space *aspace, 1253 struct drm_gem_object **bo, uint64_t *iova) 1254 { 1255 void *vaddr; 1256 struct drm_gem_object *obj = msm_gem_new(dev, size, flags); 1257 int ret; 1258 1259 if (IS_ERR(obj)) 1260 return ERR_CAST(obj); 1261 1262 if (iova) { 1263 ret = msm_gem_get_and_pin_iova(obj, aspace, iova); 1264 if (ret) 1265 goto err; 1266 } 1267 1268 vaddr = msm_gem_get_vaddr(obj); 1269 if (IS_ERR(vaddr)) { 1270 msm_gem_unpin_iova(obj, aspace); 1271 ret = PTR_ERR(vaddr); 1272 goto err; 1273 } 1274 1275 if (bo) 1276 *bo = obj; 1277 1278 return vaddr; 1279 err: 1280 drm_gem_object_put(obj); 1281 1282 return ERR_PTR(ret); 1283 1284 } 1285 1286 void msm_gem_kernel_put(struct drm_gem_object *bo, 1287 struct msm_gem_address_space *aspace) 1288 { 1289 if (IS_ERR_OR_NULL(bo)) 1290 return; 1291 1292 msm_gem_put_vaddr(bo); 1293 msm_gem_unpin_iova(bo, aspace); 1294 drm_gem_object_put(bo); 1295 } 1296 1297 void msm_gem_object_set_name(struct drm_gem_object *bo, const char *fmt, ...) 1298 { 1299 struct msm_gem_object *msm_obj = to_msm_bo(bo); 1300 va_list ap; 1301 1302 if (!fmt) 1303 return; 1304 1305 va_start(ap, fmt); 1306 vsnprintf(msm_obj->name, sizeof(msm_obj->name), fmt, ap); 1307 va_end(ap); 1308 } 1309