1 // SPDX-License-Identifier: GPL-2.0-only 2 /* 3 * Copyright (C) 2013 Red Hat 4 * Author: Rob Clark <robdclark@gmail.com> 5 */ 6 7 #include <linux/spinlock.h> 8 #include <linux/shmem_fs.h> 9 #include <linux/dma-buf.h> 10 #include <linux/pfn_t.h> 11 12 #include <drm/drm_prime.h> 13 14 #include "msm_drv.h" 15 #include "msm_fence.h" 16 #include "msm_gem.h" 17 #include "msm_gpu.h" 18 #include "msm_mmu.h" 19 20 static void msm_gem_vunmap_locked(struct drm_gem_object *obj); 21 22 23 static dma_addr_t physaddr(struct drm_gem_object *obj) 24 { 25 struct msm_gem_object *msm_obj = to_msm_bo(obj); 26 struct msm_drm_private *priv = obj->dev->dev_private; 27 return (((dma_addr_t)msm_obj->vram_node->start) << PAGE_SHIFT) + 28 priv->vram.paddr; 29 } 30 31 static bool use_pages(struct drm_gem_object *obj) 32 { 33 struct msm_gem_object *msm_obj = to_msm_bo(obj); 34 return !msm_obj->vram_node; 35 } 36 37 /* 38 * Cache sync.. this is a bit over-complicated, to fit dma-mapping 39 * API. Really GPU cache is out of scope here (handled on cmdstream) 40 * and all we need to do is invalidate newly allocated pages before 41 * mapping to CPU as uncached/writecombine. 42 * 43 * On top of this, we have the added headache, that depending on 44 * display generation, the display's iommu may be wired up to either 45 * the toplevel drm device (mdss), or to the mdp sub-node, meaning 46 * that here we either have dma-direct or iommu ops. 47 * 48 * Let this be a cautionary tail of abstraction gone wrong. 49 */ 50 51 static void sync_for_device(struct msm_gem_object *msm_obj) 52 { 53 struct device *dev = msm_obj->base.dev->dev; 54 55 if (get_dma_ops(dev) && IS_ENABLED(CONFIG_ARM64)) { 56 dma_sync_sg_for_device(dev, msm_obj->sgt->sgl, 57 msm_obj->sgt->nents, DMA_BIDIRECTIONAL); 58 } else { 59 dma_map_sg(dev, msm_obj->sgt->sgl, 60 msm_obj->sgt->nents, DMA_BIDIRECTIONAL); 61 } 62 } 63 64 static void sync_for_cpu(struct msm_gem_object *msm_obj) 65 { 66 struct device *dev = msm_obj->base.dev->dev; 67 68 if (get_dma_ops(dev) && IS_ENABLED(CONFIG_ARM64)) { 69 dma_sync_sg_for_cpu(dev, msm_obj->sgt->sgl, 70 msm_obj->sgt->nents, DMA_BIDIRECTIONAL); 71 } else { 72 dma_unmap_sg(dev, msm_obj->sgt->sgl, 73 msm_obj->sgt->nents, DMA_BIDIRECTIONAL); 74 } 75 } 76 77 /* allocate pages from VRAM carveout, used when no IOMMU: */ 78 static struct page **get_pages_vram(struct drm_gem_object *obj, int npages) 79 { 80 struct msm_gem_object *msm_obj = to_msm_bo(obj); 81 struct msm_drm_private *priv = obj->dev->dev_private; 82 dma_addr_t paddr; 83 struct page **p; 84 int ret, i; 85 86 p = kvmalloc_array(npages, sizeof(struct page *), GFP_KERNEL); 87 if (!p) 88 return ERR_PTR(-ENOMEM); 89 90 spin_lock(&priv->vram.lock); 91 ret = drm_mm_insert_node(&priv->vram.mm, msm_obj->vram_node, npages); 92 spin_unlock(&priv->vram.lock); 93 if (ret) { 94 kvfree(p); 95 return ERR_PTR(ret); 96 } 97 98 paddr = physaddr(obj); 99 for (i = 0; i < npages; i++) { 100 p[i] = phys_to_page(paddr); 101 paddr += PAGE_SIZE; 102 } 103 104 return p; 105 } 106 107 static struct page **get_pages(struct drm_gem_object *obj) 108 { 109 struct msm_gem_object *msm_obj = to_msm_bo(obj); 110 111 if (!msm_obj->pages) { 112 struct drm_device *dev = obj->dev; 113 struct page **p; 114 int npages = obj->size >> PAGE_SHIFT; 115 116 if (use_pages(obj)) 117 p = drm_gem_get_pages(obj); 118 else 119 p = get_pages_vram(obj, npages); 120 121 if (IS_ERR(p)) { 122 DRM_DEV_ERROR(dev->dev, "could not get pages: %ld\n", 123 PTR_ERR(p)); 124 return p; 125 } 126 127 msm_obj->pages = p; 128 129 msm_obj->sgt = drm_prime_pages_to_sg(p, npages); 130 if (IS_ERR(msm_obj->sgt)) { 131 void *ptr = ERR_CAST(msm_obj->sgt); 132 133 DRM_DEV_ERROR(dev->dev, "failed to allocate sgt\n"); 134 msm_obj->sgt = NULL; 135 return ptr; 136 } 137 138 /* For non-cached buffers, ensure the new pages are clean 139 * because display controller, GPU, etc. are not coherent: 140 */ 141 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 142 sync_for_device(msm_obj); 143 } 144 145 return msm_obj->pages; 146 } 147 148 static void put_pages_vram(struct drm_gem_object *obj) 149 { 150 struct msm_gem_object *msm_obj = to_msm_bo(obj); 151 struct msm_drm_private *priv = obj->dev->dev_private; 152 153 spin_lock(&priv->vram.lock); 154 drm_mm_remove_node(msm_obj->vram_node); 155 spin_unlock(&priv->vram.lock); 156 157 kvfree(msm_obj->pages); 158 } 159 160 static void put_pages(struct drm_gem_object *obj) 161 { 162 struct msm_gem_object *msm_obj = to_msm_bo(obj); 163 164 if (msm_obj->pages) { 165 if (msm_obj->sgt) { 166 /* For non-cached buffers, ensure the new 167 * pages are clean because display controller, 168 * GPU, etc. are not coherent: 169 */ 170 if (msm_obj->flags & (MSM_BO_WC|MSM_BO_UNCACHED)) 171 sync_for_cpu(msm_obj); 172 173 sg_free_table(msm_obj->sgt); 174 kfree(msm_obj->sgt); 175 } 176 177 if (use_pages(obj)) 178 drm_gem_put_pages(obj, msm_obj->pages, true, false); 179 else 180 put_pages_vram(obj); 181 182 msm_obj->pages = NULL; 183 } 184 } 185 186 struct page **msm_gem_get_pages(struct drm_gem_object *obj) 187 { 188 struct msm_gem_object *msm_obj = to_msm_bo(obj); 189 struct page **p; 190 191 mutex_lock(&msm_obj->lock); 192 193 if (WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) { 194 mutex_unlock(&msm_obj->lock); 195 return ERR_PTR(-EBUSY); 196 } 197 198 p = get_pages(obj); 199 mutex_unlock(&msm_obj->lock); 200 return p; 201 } 202 203 void msm_gem_put_pages(struct drm_gem_object *obj) 204 { 205 /* when we start tracking the pin count, then do something here */ 206 } 207 208 int msm_gem_mmap_obj(struct drm_gem_object *obj, 209 struct vm_area_struct *vma) 210 { 211 struct msm_gem_object *msm_obj = to_msm_bo(obj); 212 213 vma->vm_flags &= ~VM_PFNMAP; 214 vma->vm_flags |= VM_MIXEDMAP; 215 216 if (msm_obj->flags & MSM_BO_WC) { 217 vma->vm_page_prot = pgprot_writecombine(vm_get_page_prot(vma->vm_flags)); 218 } else if (msm_obj->flags & MSM_BO_UNCACHED) { 219 vma->vm_page_prot = pgprot_noncached(vm_get_page_prot(vma->vm_flags)); 220 } else { 221 /* 222 * Shunt off cached objs to shmem file so they have their own 223 * address_space (so unmap_mapping_range does what we want, 224 * in particular in the case of mmap'd dmabufs) 225 */ 226 fput(vma->vm_file); 227 get_file(obj->filp); 228 vma->vm_pgoff = 0; 229 vma->vm_file = obj->filp; 230 231 vma->vm_page_prot = vm_get_page_prot(vma->vm_flags); 232 } 233 234 return 0; 235 } 236 237 int msm_gem_mmap(struct file *filp, struct vm_area_struct *vma) 238 { 239 int ret; 240 241 ret = drm_gem_mmap(filp, vma); 242 if (ret) { 243 DBG("mmap failed: %d", ret); 244 return ret; 245 } 246 247 return msm_gem_mmap_obj(vma->vm_private_data, vma); 248 } 249 250 vm_fault_t msm_gem_fault(struct vm_fault *vmf) 251 { 252 struct vm_area_struct *vma = vmf->vma; 253 struct drm_gem_object *obj = vma->vm_private_data; 254 struct msm_gem_object *msm_obj = to_msm_bo(obj); 255 struct page **pages; 256 unsigned long pfn; 257 pgoff_t pgoff; 258 int err; 259 vm_fault_t ret; 260 261 /* 262 * vm_ops.open/drm_gem_mmap_obj and close get and put 263 * a reference on obj. So, we dont need to hold one here. 264 */ 265 err = mutex_lock_interruptible(&msm_obj->lock); 266 if (err) { 267 ret = VM_FAULT_NOPAGE; 268 goto out; 269 } 270 271 if (WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) { 272 mutex_unlock(&msm_obj->lock); 273 return VM_FAULT_SIGBUS; 274 } 275 276 /* make sure we have pages attached now */ 277 pages = get_pages(obj); 278 if (IS_ERR(pages)) { 279 ret = vmf_error(PTR_ERR(pages)); 280 goto out_unlock; 281 } 282 283 /* We don't use vmf->pgoff since that has the fake offset: */ 284 pgoff = (vmf->address - vma->vm_start) >> PAGE_SHIFT; 285 286 pfn = page_to_pfn(pages[pgoff]); 287 288 VERB("Inserting %p pfn %lx, pa %lx", (void *)vmf->address, 289 pfn, pfn << PAGE_SHIFT); 290 291 ret = vmf_insert_mixed(vma, vmf->address, __pfn_to_pfn_t(pfn, PFN_DEV)); 292 out_unlock: 293 mutex_unlock(&msm_obj->lock); 294 out: 295 return ret; 296 } 297 298 /** get mmap offset */ 299 static uint64_t mmap_offset(struct drm_gem_object *obj) 300 { 301 struct drm_device *dev = obj->dev; 302 struct msm_gem_object *msm_obj = to_msm_bo(obj); 303 int ret; 304 305 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 306 307 /* Make it mmapable */ 308 ret = drm_gem_create_mmap_offset(obj); 309 310 if (ret) { 311 DRM_DEV_ERROR(dev->dev, "could not allocate mmap offset\n"); 312 return 0; 313 } 314 315 return drm_vma_node_offset_addr(&obj->vma_node); 316 } 317 318 uint64_t msm_gem_mmap_offset(struct drm_gem_object *obj) 319 { 320 uint64_t offset; 321 struct msm_gem_object *msm_obj = to_msm_bo(obj); 322 323 mutex_lock(&msm_obj->lock); 324 offset = mmap_offset(obj); 325 mutex_unlock(&msm_obj->lock); 326 return offset; 327 } 328 329 static struct msm_gem_vma *add_vma(struct drm_gem_object *obj, 330 struct msm_gem_address_space *aspace) 331 { 332 struct msm_gem_object *msm_obj = to_msm_bo(obj); 333 struct msm_gem_vma *vma; 334 335 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 336 337 vma = kzalloc(sizeof(*vma), GFP_KERNEL); 338 if (!vma) 339 return ERR_PTR(-ENOMEM); 340 341 vma->aspace = aspace; 342 343 list_add_tail(&vma->list, &msm_obj->vmas); 344 345 return vma; 346 } 347 348 static struct msm_gem_vma *lookup_vma(struct drm_gem_object *obj, 349 struct msm_gem_address_space *aspace) 350 { 351 struct msm_gem_object *msm_obj = to_msm_bo(obj); 352 struct msm_gem_vma *vma; 353 354 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 355 356 list_for_each_entry(vma, &msm_obj->vmas, list) { 357 if (vma->aspace == aspace) 358 return vma; 359 } 360 361 return NULL; 362 } 363 364 static void del_vma(struct msm_gem_vma *vma) 365 { 366 if (!vma) 367 return; 368 369 list_del(&vma->list); 370 kfree(vma); 371 } 372 373 /* Called with msm_obj->lock locked */ 374 static void 375 put_iova(struct drm_gem_object *obj) 376 { 377 struct msm_gem_object *msm_obj = to_msm_bo(obj); 378 struct msm_gem_vma *vma, *tmp; 379 380 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 381 382 list_for_each_entry_safe(vma, tmp, &msm_obj->vmas, list) { 383 if (vma->aspace) { 384 msm_gem_purge_vma(vma->aspace, vma); 385 msm_gem_close_vma(vma->aspace, vma); 386 } 387 del_vma(vma); 388 } 389 } 390 391 static int msm_gem_get_iova_locked(struct drm_gem_object *obj, 392 struct msm_gem_address_space *aspace, uint64_t *iova) 393 { 394 struct msm_gem_object *msm_obj = to_msm_bo(obj); 395 struct msm_gem_vma *vma; 396 int ret = 0; 397 398 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 399 400 vma = lookup_vma(obj, aspace); 401 402 if (!vma) { 403 vma = add_vma(obj, aspace); 404 if (IS_ERR(vma)) 405 return PTR_ERR(vma); 406 407 ret = msm_gem_init_vma(aspace, vma, obj->size >> PAGE_SHIFT); 408 if (ret) { 409 del_vma(vma); 410 return ret; 411 } 412 } 413 414 *iova = vma->iova; 415 return 0; 416 } 417 418 static int msm_gem_pin_iova(struct drm_gem_object *obj, 419 struct msm_gem_address_space *aspace) 420 { 421 struct msm_gem_object *msm_obj = to_msm_bo(obj); 422 struct msm_gem_vma *vma; 423 struct page **pages; 424 int prot = IOMMU_READ; 425 426 if (!(msm_obj->flags & MSM_BO_GPU_READONLY)) 427 prot |= IOMMU_WRITE; 428 429 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 430 431 if (WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED)) 432 return -EBUSY; 433 434 vma = lookup_vma(obj, aspace); 435 if (WARN_ON(!vma)) 436 return -EINVAL; 437 438 pages = get_pages(obj); 439 if (IS_ERR(pages)) 440 return PTR_ERR(pages); 441 442 return msm_gem_map_vma(aspace, vma, prot, 443 msm_obj->sgt, obj->size >> PAGE_SHIFT); 444 } 445 446 /* get iova and pin it. Should have a matching put */ 447 int msm_gem_get_and_pin_iova(struct drm_gem_object *obj, 448 struct msm_gem_address_space *aspace, uint64_t *iova) 449 { 450 struct msm_gem_object *msm_obj = to_msm_bo(obj); 451 u64 local; 452 int ret; 453 454 mutex_lock(&msm_obj->lock); 455 456 ret = msm_gem_get_iova_locked(obj, aspace, &local); 457 458 if (!ret) 459 ret = msm_gem_pin_iova(obj, aspace); 460 461 if (!ret) 462 *iova = local; 463 464 mutex_unlock(&msm_obj->lock); 465 return ret; 466 } 467 468 /* 469 * Get an iova but don't pin it. Doesn't need a put because iovas are currently 470 * valid for the life of the object 471 */ 472 int msm_gem_get_iova(struct drm_gem_object *obj, 473 struct msm_gem_address_space *aspace, uint64_t *iova) 474 { 475 struct msm_gem_object *msm_obj = to_msm_bo(obj); 476 int ret; 477 478 mutex_lock(&msm_obj->lock); 479 ret = msm_gem_get_iova_locked(obj, aspace, iova); 480 mutex_unlock(&msm_obj->lock); 481 482 return ret; 483 } 484 485 /* get iova without taking a reference, used in places where you have 486 * already done a 'msm_gem_get_and_pin_iova' or 'msm_gem_get_iova' 487 */ 488 uint64_t msm_gem_iova(struct drm_gem_object *obj, 489 struct msm_gem_address_space *aspace) 490 { 491 struct msm_gem_object *msm_obj = to_msm_bo(obj); 492 struct msm_gem_vma *vma; 493 494 mutex_lock(&msm_obj->lock); 495 vma = lookup_vma(obj, aspace); 496 mutex_unlock(&msm_obj->lock); 497 WARN_ON(!vma); 498 499 return vma ? vma->iova : 0; 500 } 501 502 /* 503 * Unpin a iova by updating the reference counts. The memory isn't actually 504 * purged until something else (shrinker, mm_notifier, destroy, etc) decides 505 * to get rid of it 506 */ 507 void msm_gem_unpin_iova(struct drm_gem_object *obj, 508 struct msm_gem_address_space *aspace) 509 { 510 struct msm_gem_object *msm_obj = to_msm_bo(obj); 511 struct msm_gem_vma *vma; 512 513 mutex_lock(&msm_obj->lock); 514 vma = lookup_vma(obj, aspace); 515 516 if (!WARN_ON(!vma)) 517 msm_gem_unmap_vma(aspace, vma); 518 519 mutex_unlock(&msm_obj->lock); 520 } 521 522 int msm_gem_dumb_create(struct drm_file *file, struct drm_device *dev, 523 struct drm_mode_create_dumb *args) 524 { 525 args->pitch = align_pitch(args->width, args->bpp); 526 args->size = PAGE_ALIGN(args->pitch * args->height); 527 return msm_gem_new_handle(dev, file, args->size, 528 MSM_BO_SCANOUT | MSM_BO_WC, &args->handle, "dumb"); 529 } 530 531 int msm_gem_dumb_map_offset(struct drm_file *file, struct drm_device *dev, 532 uint32_t handle, uint64_t *offset) 533 { 534 struct drm_gem_object *obj; 535 int ret = 0; 536 537 /* GEM does all our handle to object mapping */ 538 obj = drm_gem_object_lookup(file, handle); 539 if (obj == NULL) { 540 ret = -ENOENT; 541 goto fail; 542 } 543 544 *offset = msm_gem_mmap_offset(obj); 545 546 drm_gem_object_put(obj); 547 548 fail: 549 return ret; 550 } 551 552 static void *get_vaddr(struct drm_gem_object *obj, unsigned madv) 553 { 554 struct msm_gem_object *msm_obj = to_msm_bo(obj); 555 int ret = 0; 556 557 if (obj->import_attach) 558 return ERR_PTR(-ENODEV); 559 560 mutex_lock(&msm_obj->lock); 561 562 if (WARN_ON(msm_obj->madv > madv)) { 563 DRM_DEV_ERROR(obj->dev->dev, "Invalid madv state: %u vs %u\n", 564 msm_obj->madv, madv); 565 mutex_unlock(&msm_obj->lock); 566 return ERR_PTR(-EBUSY); 567 } 568 569 /* increment vmap_count *before* vmap() call, so shrinker can 570 * check vmap_count (is_vunmapable()) outside of msm_obj->lock. 571 * This guarantees that we won't try to msm_gem_vunmap() this 572 * same object from within the vmap() call (while we already 573 * hold msm_obj->lock) 574 */ 575 msm_obj->vmap_count++; 576 577 if (!msm_obj->vaddr) { 578 struct page **pages = get_pages(obj); 579 if (IS_ERR(pages)) { 580 ret = PTR_ERR(pages); 581 goto fail; 582 } 583 msm_obj->vaddr = vmap(pages, obj->size >> PAGE_SHIFT, 584 VM_MAP, pgprot_writecombine(PAGE_KERNEL)); 585 if (msm_obj->vaddr == NULL) { 586 ret = -ENOMEM; 587 goto fail; 588 } 589 } 590 591 mutex_unlock(&msm_obj->lock); 592 return msm_obj->vaddr; 593 594 fail: 595 msm_obj->vmap_count--; 596 mutex_unlock(&msm_obj->lock); 597 return ERR_PTR(ret); 598 } 599 600 void *msm_gem_get_vaddr(struct drm_gem_object *obj) 601 { 602 return get_vaddr(obj, MSM_MADV_WILLNEED); 603 } 604 605 /* 606 * Don't use this! It is for the very special case of dumping 607 * submits from GPU hangs or faults, were the bo may already 608 * be MSM_MADV_DONTNEED, but we know the buffer is still on the 609 * active list. 610 */ 611 void *msm_gem_get_vaddr_active(struct drm_gem_object *obj) 612 { 613 return get_vaddr(obj, __MSM_MADV_PURGED); 614 } 615 616 void msm_gem_put_vaddr(struct drm_gem_object *obj) 617 { 618 struct msm_gem_object *msm_obj = to_msm_bo(obj); 619 620 mutex_lock(&msm_obj->lock); 621 WARN_ON(msm_obj->vmap_count < 1); 622 msm_obj->vmap_count--; 623 mutex_unlock(&msm_obj->lock); 624 } 625 626 /* Update madvise status, returns true if not purged, else 627 * false or -errno. 628 */ 629 int msm_gem_madvise(struct drm_gem_object *obj, unsigned madv) 630 { 631 struct msm_gem_object *msm_obj = to_msm_bo(obj); 632 633 mutex_lock(&msm_obj->lock); 634 635 WARN_ON(!mutex_is_locked(&obj->dev->struct_mutex)); 636 637 if (msm_obj->madv != __MSM_MADV_PURGED) 638 msm_obj->madv = madv; 639 640 madv = msm_obj->madv; 641 642 mutex_unlock(&msm_obj->lock); 643 644 return (madv != __MSM_MADV_PURGED); 645 } 646 647 void msm_gem_purge(struct drm_gem_object *obj, enum msm_gem_lock subclass) 648 { 649 struct drm_device *dev = obj->dev; 650 struct msm_gem_object *msm_obj = to_msm_bo(obj); 651 652 WARN_ON(!mutex_is_locked(&dev->struct_mutex)); 653 WARN_ON(!is_purgeable(msm_obj)); 654 WARN_ON(obj->import_attach); 655 656 mutex_lock_nested(&msm_obj->lock, subclass); 657 658 put_iova(obj); 659 660 msm_gem_vunmap_locked(obj); 661 662 put_pages(obj); 663 664 msm_obj->madv = __MSM_MADV_PURGED; 665 666 drm_vma_node_unmap(&obj->vma_node, dev->anon_inode->i_mapping); 667 drm_gem_free_mmap_offset(obj); 668 669 /* Our goal here is to return as much of the memory as 670 * is possible back to the system as we are called from OOM. 671 * To do this we must instruct the shmfs to drop all of its 672 * backing pages, *now*. 673 */ 674 shmem_truncate_range(file_inode(obj->filp), 0, (loff_t)-1); 675 676 invalidate_mapping_pages(file_inode(obj->filp)->i_mapping, 677 0, (loff_t)-1); 678 679 mutex_unlock(&msm_obj->lock); 680 } 681 682 static void msm_gem_vunmap_locked(struct drm_gem_object *obj) 683 { 684 struct msm_gem_object *msm_obj = to_msm_bo(obj); 685 686 WARN_ON(!mutex_is_locked(&msm_obj->lock)); 687 688 if (!msm_obj->vaddr || WARN_ON(!is_vunmapable(msm_obj))) 689 return; 690 691 vunmap(msm_obj->vaddr); 692 msm_obj->vaddr = NULL; 693 } 694 695 void msm_gem_vunmap(struct drm_gem_object *obj, enum msm_gem_lock subclass) 696 { 697 struct msm_gem_object *msm_obj = to_msm_bo(obj); 698 699 mutex_lock_nested(&msm_obj->lock, subclass); 700 msm_gem_vunmap_locked(obj); 701 mutex_unlock(&msm_obj->lock); 702 } 703 704 /* must be called before _move_to_active().. */ 705 int msm_gem_sync_object(struct drm_gem_object *obj, 706 struct msm_fence_context *fctx, bool exclusive) 707 { 708 struct dma_resv_list *fobj; 709 struct dma_fence *fence; 710 int i, ret; 711 712 fobj = dma_resv_get_list(obj->resv); 713 if (!fobj || (fobj->shared_count == 0)) { 714 fence = dma_resv_get_excl(obj->resv); 715 /* don't need to wait on our own fences, since ring is fifo */ 716 if (fence && (fence->context != fctx->context)) { 717 ret = dma_fence_wait(fence, true); 718 if (ret) 719 return ret; 720 } 721 } 722 723 if (!exclusive || !fobj) 724 return 0; 725 726 for (i = 0; i < fobj->shared_count; i++) { 727 fence = rcu_dereference_protected(fobj->shared[i], 728 dma_resv_held(obj->resv)); 729 if (fence->context != fctx->context) { 730 ret = dma_fence_wait(fence, true); 731 if (ret) 732 return ret; 733 } 734 } 735 736 return 0; 737 } 738 739 void msm_gem_move_to_active(struct drm_gem_object *obj, 740 struct msm_gpu *gpu, bool exclusive, struct dma_fence *fence) 741 { 742 struct msm_gem_object *msm_obj = to_msm_bo(obj); 743 WARN_ON(msm_obj->madv != MSM_MADV_WILLNEED); 744 msm_obj->gpu = gpu; 745 if (exclusive) 746 dma_resv_add_excl_fence(obj->resv, fence); 747 else 748 dma_resv_add_shared_fence(obj->resv, fence); 749 list_del_init(&msm_obj->mm_list); 750 list_add_tail(&msm_obj->mm_list, &gpu->active_list); 751 } 752 753 void msm_gem_move_to_inactive(struct drm_gem_object *obj) 754 { 755 struct drm_device *dev = obj->dev; 756 struct msm_drm_private *priv = dev->dev_private; 757 struct msm_gem_object *msm_obj = to_msm_bo(obj); 758 759 WARN_ON(!mutex_is_locked(&dev->struct_mutex)); 760 761 msm_obj->gpu = NULL; 762 list_del_init(&msm_obj->mm_list); 763 list_add_tail(&msm_obj->mm_list, &priv->inactive_list); 764 } 765 766 int msm_gem_cpu_prep(struct drm_gem_object *obj, uint32_t op, ktime_t *timeout) 767 { 768 bool write = !!(op & MSM_PREP_WRITE); 769 unsigned long remain = 770 op & MSM_PREP_NOSYNC ? 0 : timeout_to_jiffies(timeout); 771 long ret; 772 773 ret = dma_resv_wait_timeout_rcu(obj->resv, write, 774 true, remain); 775 if (ret == 0) 776 return remain == 0 ? -EBUSY : -ETIMEDOUT; 777 else if (ret < 0) 778 return ret; 779 780 /* TODO cache maintenance */ 781 782 return 0; 783 } 784 785 int msm_gem_cpu_fini(struct drm_gem_object *obj) 786 { 787 /* TODO cache maintenance */ 788 return 0; 789 } 790 791 #ifdef CONFIG_DEBUG_FS 792 static void describe_fence(struct dma_fence *fence, const char *type, 793 struct seq_file *m) 794 { 795 if (!dma_fence_is_signaled(fence)) 796 seq_printf(m, "\t%9s: %s %s seq %llu\n", type, 797 fence->ops->get_driver_name(fence), 798 fence->ops->get_timeline_name(fence), 799 fence->seqno); 800 } 801 802 void msm_gem_describe(struct drm_gem_object *obj, struct seq_file *m) 803 { 804 struct msm_gem_object *msm_obj = to_msm_bo(obj); 805 struct dma_resv *robj = obj->resv; 806 struct dma_resv_list *fobj; 807 struct dma_fence *fence; 808 struct msm_gem_vma *vma; 809 uint64_t off = drm_vma_node_start(&obj->vma_node); 810 const char *madv; 811 812 mutex_lock(&msm_obj->lock); 813 814 switch (msm_obj->madv) { 815 case __MSM_MADV_PURGED: 816 madv = " purged"; 817 break; 818 case MSM_MADV_DONTNEED: 819 madv = " purgeable"; 820 break; 821 case MSM_MADV_WILLNEED: 822 default: 823 madv = ""; 824 break; 825 } 826 827 seq_printf(m, "%08x: %c %2d (%2d) %08llx %p", 828 msm_obj->flags, is_active(msm_obj) ? 'A' : 'I', 829 obj->name, kref_read(&obj->refcount), 830 off, msm_obj->vaddr); 831 832 seq_printf(m, " %08zu %9s %-32s\n", obj->size, madv, msm_obj->name); 833 834 if (!list_empty(&msm_obj->vmas)) { 835 836 seq_puts(m, " vmas:"); 837 838 list_for_each_entry(vma, &msm_obj->vmas, list) 839 seq_printf(m, " [%s: %08llx,%s,inuse=%d]", 840 vma->aspace != NULL ? vma->aspace->name : NULL, 841 vma->iova, vma->mapped ? "mapped" : "unmapped", 842 vma->inuse); 843 844 seq_puts(m, "\n"); 845 } 846 847 rcu_read_lock(); 848 fobj = rcu_dereference(robj->fence); 849 if (fobj) { 850 unsigned int i, shared_count = fobj->shared_count; 851 852 for (i = 0; i < shared_count; i++) { 853 fence = rcu_dereference(fobj->shared[i]); 854 describe_fence(fence, "Shared", m); 855 } 856 } 857 858 fence = rcu_dereference(robj->fence_excl); 859 if (fence) 860 describe_fence(fence, "Exclusive", m); 861 rcu_read_unlock(); 862 863 mutex_unlock(&msm_obj->lock); 864 } 865 866 void msm_gem_describe_objects(struct list_head *list, struct seq_file *m) 867 { 868 struct msm_gem_object *msm_obj; 869 int count = 0; 870 size_t size = 0; 871 872 seq_puts(m, " flags id ref offset kaddr size madv name\n"); 873 list_for_each_entry(msm_obj, list, mm_list) { 874 struct drm_gem_object *obj = &msm_obj->base; 875 seq_puts(m, " "); 876 msm_gem_describe(obj, m); 877 count++; 878 size += obj->size; 879 } 880 881 seq_printf(m, "Total %d objects, %zu bytes\n", count, size); 882 } 883 #endif 884 885 /* don't call directly! Use drm_gem_object_put_locked() and friends */ 886 void msm_gem_free_object(struct drm_gem_object *obj) 887 { 888 struct msm_gem_object *msm_obj = to_msm_bo(obj); 889 struct drm_device *dev = obj->dev; 890 struct msm_drm_private *priv = dev->dev_private; 891 892 if (llist_add(&msm_obj->freed, &priv->free_list)) 893 queue_work(priv->wq, &priv->free_work); 894 } 895 896 static void free_object(struct msm_gem_object *msm_obj) 897 { 898 struct drm_gem_object *obj = &msm_obj->base; 899 struct drm_device *dev = obj->dev; 900 901 WARN_ON(!mutex_is_locked(&dev->struct_mutex)); 902 903 /* object should not be on active list: */ 904 WARN_ON(is_active(msm_obj)); 905 906 list_del(&msm_obj->mm_list); 907 908 mutex_lock(&msm_obj->lock); 909 910 put_iova(obj); 911 912 if (obj->import_attach) { 913 WARN_ON(msm_obj->vaddr); 914 915 /* Don't drop the pages for imported dmabuf, as they are not 916 * ours, just free the array we allocated: 917 */ 918 if (msm_obj->pages) 919 kvfree(msm_obj->pages); 920 921 drm_prime_gem_destroy(obj, msm_obj->sgt); 922 } else { 923 msm_gem_vunmap_locked(obj); 924 put_pages(obj); 925 } 926 927 drm_gem_object_release(obj); 928 929 mutex_unlock(&msm_obj->lock); 930 kfree(msm_obj); 931 } 932 933 void msm_gem_free_work(struct work_struct *work) 934 { 935 struct msm_drm_private *priv = 936 container_of(work, struct msm_drm_private, free_work); 937 struct drm_device *dev = priv->dev; 938 struct llist_node *freed; 939 struct msm_gem_object *msm_obj, *next; 940 941 while ((freed = llist_del_all(&priv->free_list))) { 942 943 mutex_lock(&dev->struct_mutex); 944 945 llist_for_each_entry_safe(msm_obj, next, 946 freed, freed) 947 free_object(msm_obj); 948 949 mutex_unlock(&dev->struct_mutex); 950 951 if (need_resched()) 952 break; 953 } 954 } 955 956 /* convenience method to construct a GEM buffer object, and userspace handle */ 957 int msm_gem_new_handle(struct drm_device *dev, struct drm_file *file, 958 uint32_t size, uint32_t flags, uint32_t *handle, 959 char *name) 960 { 961 struct drm_gem_object *obj; 962 int ret; 963 964 obj = msm_gem_new(dev, size, flags); 965 966 if (IS_ERR(obj)) 967 return PTR_ERR(obj); 968 969 if (name) 970 msm_gem_object_set_name(obj, "%s", name); 971 972 ret = drm_gem_handle_create(file, obj, handle); 973 974 /* drop reference from allocate - handle holds it now */ 975 drm_gem_object_put(obj); 976 977 return ret; 978 } 979 980 static int msm_gem_new_impl(struct drm_device *dev, 981 uint32_t size, uint32_t flags, 982 struct drm_gem_object **obj, 983 bool struct_mutex_locked) 984 { 985 struct msm_drm_private *priv = dev->dev_private; 986 struct msm_gem_object *msm_obj; 987 988 switch (flags & MSM_BO_CACHE_MASK) { 989 case MSM_BO_UNCACHED: 990 case MSM_BO_CACHED: 991 case MSM_BO_WC: 992 break; 993 default: 994 DRM_DEV_ERROR(dev->dev, "invalid cache flag: %x\n", 995 (flags & MSM_BO_CACHE_MASK)); 996 return -EINVAL; 997 } 998 999 msm_obj = kzalloc(sizeof(*msm_obj), GFP_KERNEL); 1000 if (!msm_obj) 1001 return -ENOMEM; 1002 1003 mutex_init(&msm_obj->lock); 1004 1005 msm_obj->flags = flags; 1006 msm_obj->madv = MSM_MADV_WILLNEED; 1007 1008 INIT_LIST_HEAD(&msm_obj->submit_entry); 1009 INIT_LIST_HEAD(&msm_obj->vmas); 1010 1011 if (struct_mutex_locked) { 1012 WARN_ON(!mutex_is_locked(&dev->struct_mutex)); 1013 list_add_tail(&msm_obj->mm_list, &priv->inactive_list); 1014 } else { 1015 mutex_lock(&dev->struct_mutex); 1016 list_add_tail(&msm_obj->mm_list, &priv->inactive_list); 1017 mutex_unlock(&dev->struct_mutex); 1018 } 1019 1020 *obj = &msm_obj->base; 1021 1022 return 0; 1023 } 1024 1025 static struct drm_gem_object *_msm_gem_new(struct drm_device *dev, 1026 uint32_t size, uint32_t flags, bool struct_mutex_locked) 1027 { 1028 struct msm_drm_private *priv = dev->dev_private; 1029 struct drm_gem_object *obj = NULL; 1030 bool use_vram = false; 1031 int ret; 1032 1033 size = PAGE_ALIGN(size); 1034 1035 if (!msm_use_mmu(dev)) 1036 use_vram = true; 1037 else if ((flags & (MSM_BO_STOLEN | MSM_BO_SCANOUT)) && priv->vram.size) 1038 use_vram = true; 1039 1040 if (WARN_ON(use_vram && !priv->vram.size)) 1041 return ERR_PTR(-EINVAL); 1042 1043 /* Disallow zero sized objects as they make the underlying 1044 * infrastructure grumpy 1045 */ 1046 if (size == 0) 1047 return ERR_PTR(-EINVAL); 1048 1049 ret = msm_gem_new_impl(dev, size, flags, &obj, struct_mutex_locked); 1050 if (ret) 1051 goto fail; 1052 1053 if (use_vram) { 1054 struct msm_gem_vma *vma; 1055 struct page **pages; 1056 struct msm_gem_object *msm_obj = to_msm_bo(obj); 1057 1058 mutex_lock(&msm_obj->lock); 1059 1060 vma = add_vma(obj, NULL); 1061 mutex_unlock(&msm_obj->lock); 1062 if (IS_ERR(vma)) { 1063 ret = PTR_ERR(vma); 1064 goto fail; 1065 } 1066 1067 to_msm_bo(obj)->vram_node = &vma->node; 1068 1069 drm_gem_private_object_init(dev, obj, size); 1070 1071 pages = get_pages(obj); 1072 if (IS_ERR(pages)) { 1073 ret = PTR_ERR(pages); 1074 goto fail; 1075 } 1076 1077 vma->iova = physaddr(obj); 1078 } else { 1079 ret = drm_gem_object_init(dev, obj, size); 1080 if (ret) 1081 goto fail; 1082 /* 1083 * Our buffers are kept pinned, so allocating them from the 1084 * MOVABLE zone is a really bad idea, and conflicts with CMA. 1085 * See comments above new_inode() why this is required _and_ 1086 * expected if you're going to pin these pages. 1087 */ 1088 mapping_set_gfp_mask(obj->filp->f_mapping, GFP_HIGHUSER); 1089 } 1090 1091 return obj; 1092 1093 fail: 1094 drm_gem_object_put(obj); 1095 return ERR_PTR(ret); 1096 } 1097 1098 struct drm_gem_object *msm_gem_new_locked(struct drm_device *dev, 1099 uint32_t size, uint32_t flags) 1100 { 1101 return _msm_gem_new(dev, size, flags, true); 1102 } 1103 1104 struct drm_gem_object *msm_gem_new(struct drm_device *dev, 1105 uint32_t size, uint32_t flags) 1106 { 1107 return _msm_gem_new(dev, size, flags, false); 1108 } 1109 1110 struct drm_gem_object *msm_gem_import(struct drm_device *dev, 1111 struct dma_buf *dmabuf, struct sg_table *sgt) 1112 { 1113 struct msm_gem_object *msm_obj; 1114 struct drm_gem_object *obj; 1115 uint32_t size; 1116 int ret, npages; 1117 1118 /* if we don't have IOMMU, don't bother pretending we can import: */ 1119 if (!msm_use_mmu(dev)) { 1120 DRM_DEV_ERROR(dev->dev, "cannot import without IOMMU\n"); 1121 return ERR_PTR(-EINVAL); 1122 } 1123 1124 size = PAGE_ALIGN(dmabuf->size); 1125 1126 ret = msm_gem_new_impl(dev, size, MSM_BO_WC, &obj, false); 1127 if (ret) 1128 goto fail; 1129 1130 drm_gem_private_object_init(dev, obj, size); 1131 1132 npages = size / PAGE_SIZE; 1133 1134 msm_obj = to_msm_bo(obj); 1135 mutex_lock(&msm_obj->lock); 1136 msm_obj->sgt = sgt; 1137 msm_obj->pages = kvmalloc_array(npages, sizeof(struct page *), GFP_KERNEL); 1138 if (!msm_obj->pages) { 1139 mutex_unlock(&msm_obj->lock); 1140 ret = -ENOMEM; 1141 goto fail; 1142 } 1143 1144 ret = drm_prime_sg_to_page_addr_arrays(sgt, msm_obj->pages, NULL, npages); 1145 if (ret) { 1146 mutex_unlock(&msm_obj->lock); 1147 goto fail; 1148 } 1149 1150 mutex_unlock(&msm_obj->lock); 1151 return obj; 1152 1153 fail: 1154 drm_gem_object_put(obj); 1155 return ERR_PTR(ret); 1156 } 1157 1158 static void *_msm_gem_kernel_new(struct drm_device *dev, uint32_t size, 1159 uint32_t flags, struct msm_gem_address_space *aspace, 1160 struct drm_gem_object **bo, uint64_t *iova, bool locked) 1161 { 1162 void *vaddr; 1163 struct drm_gem_object *obj = _msm_gem_new(dev, size, flags, locked); 1164 int ret; 1165 1166 if (IS_ERR(obj)) 1167 return ERR_CAST(obj); 1168 1169 if (iova) { 1170 ret = msm_gem_get_and_pin_iova(obj, aspace, iova); 1171 if (ret) 1172 goto err; 1173 } 1174 1175 vaddr = msm_gem_get_vaddr(obj); 1176 if (IS_ERR(vaddr)) { 1177 msm_gem_unpin_iova(obj, aspace); 1178 ret = PTR_ERR(vaddr); 1179 goto err; 1180 } 1181 1182 if (bo) 1183 *bo = obj; 1184 1185 return vaddr; 1186 err: 1187 if (locked) 1188 drm_gem_object_put_locked(obj); 1189 else 1190 drm_gem_object_put(obj); 1191 1192 return ERR_PTR(ret); 1193 1194 } 1195 1196 void *msm_gem_kernel_new(struct drm_device *dev, uint32_t size, 1197 uint32_t flags, struct msm_gem_address_space *aspace, 1198 struct drm_gem_object **bo, uint64_t *iova) 1199 { 1200 return _msm_gem_kernel_new(dev, size, flags, aspace, bo, iova, false); 1201 } 1202 1203 void *msm_gem_kernel_new_locked(struct drm_device *dev, uint32_t size, 1204 uint32_t flags, struct msm_gem_address_space *aspace, 1205 struct drm_gem_object **bo, uint64_t *iova) 1206 { 1207 return _msm_gem_kernel_new(dev, size, flags, aspace, bo, iova, true); 1208 } 1209 1210 void msm_gem_kernel_put(struct drm_gem_object *bo, 1211 struct msm_gem_address_space *aspace, bool locked) 1212 { 1213 if (IS_ERR_OR_NULL(bo)) 1214 return; 1215 1216 msm_gem_put_vaddr(bo); 1217 msm_gem_unpin_iova(bo, aspace); 1218 1219 if (locked) 1220 drm_gem_object_put_locked(bo); 1221 else 1222 drm_gem_object_put(bo); 1223 } 1224 1225 void msm_gem_object_set_name(struct drm_gem_object *bo, const char *fmt, ...) 1226 { 1227 struct msm_gem_object *msm_obj = to_msm_bo(bo); 1228 va_list ap; 1229 1230 if (!fmt) 1231 return; 1232 1233 va_start(ap, fmt); 1234 vsnprintf(msm_obj->name, sizeof(msm_obj->name), fmt, ap); 1235 va_end(ap); 1236 } 1237