Loading...
1/*
2 * Copyright (c) 2008 Intel Corporation
3 *
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the "Software"),
6 * to deal in the Software without restriction, including without limitation
7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8 * and/or sell copies of the Software, and to permit persons to whom the
9 * Software is furnished to do so, subject to the following conditions:
10 *
11 * The above copyright notice and this permission notice (including the next
12 * paragraph) shall be included in all copies or substantial portions of the
13 * Software.
14 *
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
18 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
21 * IN THE SOFTWARE.
22 *
23 * Authors:
24 * Eric Anholt <eric@anholt.net>
25 * Keith Packard <keithp@keithp.com>
26 * Mika Kuoppala <mika.kuoppala@intel.com>
27 *
28 */
29
30#include <generated/utsrelease.h>
31#include "i915_drv.h"
32
33static const char *ring_str(int ring)
34{
35 switch (ring) {
36 case RCS: return "render";
37 case VCS: return "bsd";
38 case BCS: return "blt";
39 case VECS: return "vebox";
40 case VCS2: return "bsd2";
41 default: return "";
42 }
43}
44
45static const char *pin_flag(int pinned)
46{
47 if (pinned > 0)
48 return " P";
49 else if (pinned < 0)
50 return " p";
51 else
52 return "";
53}
54
55static const char *tiling_flag(int tiling)
56{
57 switch (tiling) {
58 default:
59 case I915_TILING_NONE: return "";
60 case I915_TILING_X: return " X";
61 case I915_TILING_Y: return " Y";
62 }
63}
64
65static const char *dirty_flag(int dirty)
66{
67 return dirty ? " dirty" : "";
68}
69
70static const char *purgeable_flag(int purgeable)
71{
72 return purgeable ? " purgeable" : "";
73}
74
75static bool __i915_error_ok(struct drm_i915_error_state_buf *e)
76{
77
78 if (!e->err && WARN(e->bytes > (e->size - 1), "overflow")) {
79 e->err = -ENOSPC;
80 return false;
81 }
82
83 if (e->bytes == e->size - 1 || e->err)
84 return false;
85
86 return true;
87}
88
89static bool __i915_error_seek(struct drm_i915_error_state_buf *e,
90 unsigned len)
91{
92 if (e->pos + len <= e->start) {
93 e->pos += len;
94 return false;
95 }
96
97 /* First vsnprintf needs to fit in its entirety for memmove */
98 if (len >= e->size) {
99 e->err = -EIO;
100 return false;
101 }
102
103 return true;
104}
105
106static void __i915_error_advance(struct drm_i915_error_state_buf *e,
107 unsigned len)
108{
109 /* If this is first printf in this window, adjust it so that
110 * start position matches start of the buffer
111 */
112
113 if (e->pos < e->start) {
114 const size_t off = e->start - e->pos;
115
116 /* Should not happen but be paranoid */
117 if (off > len || e->bytes) {
118 e->err = -EIO;
119 return;
120 }
121
122 memmove(e->buf, e->buf + off, len - off);
123 e->bytes = len - off;
124 e->pos = e->start;
125 return;
126 }
127
128 e->bytes += len;
129 e->pos += len;
130}
131
132static void i915_error_vprintf(struct drm_i915_error_state_buf *e,
133 const char *f, va_list args)
134{
135 unsigned len;
136
137 if (!__i915_error_ok(e))
138 return;
139
140 /* Seek the first printf which is hits start position */
141 if (e->pos < e->start) {
142 va_list tmp;
143
144 va_copy(tmp, args);
145 len = vsnprintf(NULL, 0, f, tmp);
146 va_end(tmp);
147
148 if (!__i915_error_seek(e, len))
149 return;
150 }
151
152 len = vsnprintf(e->buf + e->bytes, e->size - e->bytes, f, args);
153 if (len >= e->size - e->bytes)
154 len = e->size - e->bytes - 1;
155
156 __i915_error_advance(e, len);
157}
158
159static void i915_error_puts(struct drm_i915_error_state_buf *e,
160 const char *str)
161{
162 unsigned len;
163
164 if (!__i915_error_ok(e))
165 return;
166
167 len = strlen(str);
168
169 /* Seek the first printf which is hits start position */
170 if (e->pos < e->start) {
171 if (!__i915_error_seek(e, len))
172 return;
173 }
174
175 if (len >= e->size - e->bytes)
176 len = e->size - e->bytes - 1;
177 memcpy(e->buf + e->bytes, str, len);
178
179 __i915_error_advance(e, len);
180}
181
182#define err_printf(e, ...) i915_error_printf(e, __VA_ARGS__)
183#define err_puts(e, s) i915_error_puts(e, s)
184
185static void print_error_buffers(struct drm_i915_error_state_buf *m,
186 const char *name,
187 struct drm_i915_error_buffer *err,
188 int count)
189{
190 int i;
191
192 err_printf(m, " %s [%d]:\n", name, count);
193
194 while (count--) {
195 err_printf(m, " %08x_%08x %8u %02x %02x [ ",
196 upper_32_bits(err->gtt_offset),
197 lower_32_bits(err->gtt_offset),
198 err->size,
199 err->read_domains,
200 err->write_domain);
201 for (i = 0; i < I915_NUM_RINGS; i++)
202 err_printf(m, "%02x ", err->rseqno[i]);
203
204 err_printf(m, "] %02x", err->wseqno);
205 err_puts(m, pin_flag(err->pinned));
206 err_puts(m, tiling_flag(err->tiling));
207 err_puts(m, dirty_flag(err->dirty));
208 err_puts(m, purgeable_flag(err->purgeable));
209 err_puts(m, err->userptr ? " userptr" : "");
210 err_puts(m, err->ring != -1 ? " " : "");
211 err_puts(m, ring_str(err->ring));
212 err_puts(m, i915_cache_level_str(m->i915, err->cache_level));
213
214 if (err->name)
215 err_printf(m, " (name: %d)", err->name);
216 if (err->fence_reg != I915_FENCE_REG_NONE)
217 err_printf(m, " (fence: %d)", err->fence_reg);
218
219 err_puts(m, "\n");
220 err++;
221 }
222}
223
224static const char *hangcheck_action_to_str(enum intel_ring_hangcheck_action a)
225{
226 switch (a) {
227 case HANGCHECK_IDLE:
228 return "idle";
229 case HANGCHECK_WAIT:
230 return "wait";
231 case HANGCHECK_ACTIVE:
232 return "active";
233 case HANGCHECK_ACTIVE_LOOP:
234 return "active (loop)";
235 case HANGCHECK_KICK:
236 return "kick";
237 case HANGCHECK_HUNG:
238 return "hung";
239 }
240
241 return "unknown";
242}
243
244static void i915_ring_error_state(struct drm_i915_error_state_buf *m,
245 struct drm_device *dev,
246 struct drm_i915_error_state *error,
247 int ring_idx)
248{
249 struct drm_i915_error_ring *ring = &error->ring[ring_idx];
250
251 if (!ring->valid)
252 return;
253
254 err_printf(m, "%s command stream:\n", ring_str(ring_idx));
255 err_printf(m, " START: 0x%08x\n", ring->start);
256 err_printf(m, " HEAD: 0x%08x\n", ring->head);
257 err_printf(m, " TAIL: 0x%08x\n", ring->tail);
258 err_printf(m, " CTL: 0x%08x\n", ring->ctl);
259 err_printf(m, " HWS: 0x%08x\n", ring->hws);
260 err_printf(m, " ACTHD: 0x%08x %08x\n", (u32)(ring->acthd>>32), (u32)ring->acthd);
261 err_printf(m, " IPEIR: 0x%08x\n", ring->ipeir);
262 err_printf(m, " IPEHR: 0x%08x\n", ring->ipehr);
263 err_printf(m, " INSTDONE: 0x%08x\n", ring->instdone);
264 if (INTEL_INFO(dev)->gen >= 4) {
265 err_printf(m, " BBADDR: 0x%08x %08x\n", (u32)(ring->bbaddr>>32), (u32)ring->bbaddr);
266 err_printf(m, " BB_STATE: 0x%08x\n", ring->bbstate);
267 err_printf(m, " INSTPS: 0x%08x\n", ring->instps);
268 }
269 err_printf(m, " INSTPM: 0x%08x\n", ring->instpm);
270 err_printf(m, " FADDR: 0x%08x %08x\n", upper_32_bits(ring->faddr),
271 lower_32_bits(ring->faddr));
272 if (INTEL_INFO(dev)->gen >= 6) {
273 err_printf(m, " RC PSMI: 0x%08x\n", ring->rc_psmi);
274 err_printf(m, " FAULT_REG: 0x%08x\n", ring->fault_reg);
275 err_printf(m, " SYNC_0: 0x%08x [last synced 0x%08x]\n",
276 ring->semaphore_mboxes[0],
277 ring->semaphore_seqno[0]);
278 err_printf(m, " SYNC_1: 0x%08x [last synced 0x%08x]\n",
279 ring->semaphore_mboxes[1],
280 ring->semaphore_seqno[1]);
281 if (HAS_VEBOX(dev)) {
282 err_printf(m, " SYNC_2: 0x%08x [last synced 0x%08x]\n",
283 ring->semaphore_mboxes[2],
284 ring->semaphore_seqno[2]);
285 }
286 }
287 if (USES_PPGTT(dev)) {
288 err_printf(m, " GFX_MODE: 0x%08x\n", ring->vm_info.gfx_mode);
289
290 if (INTEL_INFO(dev)->gen >= 8) {
291 int i;
292 for (i = 0; i < 4; i++)
293 err_printf(m, " PDP%d: 0x%016llx\n",
294 i, ring->vm_info.pdp[i]);
295 } else {
296 err_printf(m, " PP_DIR_BASE: 0x%08x\n",
297 ring->vm_info.pp_dir_base);
298 }
299 }
300 err_printf(m, " seqno: 0x%08x\n", ring->seqno);
301 err_printf(m, " waiting: %s\n", yesno(ring->waiting));
302 err_printf(m, " ring->head: 0x%08x\n", ring->cpu_ring_head);
303 err_printf(m, " ring->tail: 0x%08x\n", ring->cpu_ring_tail);
304 err_printf(m, " hangcheck: %s [%d]\n",
305 hangcheck_action_to_str(ring->hangcheck_action),
306 ring->hangcheck_score);
307}
308
309void i915_error_printf(struct drm_i915_error_state_buf *e, const char *f, ...)
310{
311 va_list args;
312
313 va_start(args, f);
314 i915_error_vprintf(e, f, args);
315 va_end(args);
316}
317
318static void print_error_obj(struct drm_i915_error_state_buf *m,
319 struct drm_i915_error_object *obj)
320{
321 int page, offset, elt;
322
323 for (page = offset = 0; page < obj->page_count; page++) {
324 for (elt = 0; elt < PAGE_SIZE/4; elt++) {
325 err_printf(m, "%08x : %08x\n", offset,
326 obj->pages[page][elt]);
327 offset += 4;
328 }
329 }
330}
331
332int i915_error_state_to_str(struct drm_i915_error_state_buf *m,
333 const struct i915_error_state_file_priv *error_priv)
334{
335 struct drm_device *dev = error_priv->dev;
336 struct drm_i915_private *dev_priv = dev->dev_private;
337 struct drm_i915_error_state *error = error_priv->error;
338 struct drm_i915_error_object *obj;
339 int i, j, offset, elt;
340 int max_hangcheck_score;
341
342 if (!error) {
343 err_printf(m, "no error state collected\n");
344 goto out;
345 }
346
347 err_printf(m, "%s\n", error->error_msg);
348 err_printf(m, "Time: %ld s %ld us\n", error->time.tv_sec,
349 error->time.tv_usec);
350 err_printf(m, "Kernel: " UTS_RELEASE "\n");
351 max_hangcheck_score = 0;
352 for (i = 0; i < ARRAY_SIZE(error->ring); i++) {
353 if (error->ring[i].hangcheck_score > max_hangcheck_score)
354 max_hangcheck_score = error->ring[i].hangcheck_score;
355 }
356 for (i = 0; i < ARRAY_SIZE(error->ring); i++) {
357 if (error->ring[i].hangcheck_score == max_hangcheck_score &&
358 error->ring[i].pid != -1) {
359 err_printf(m, "Active process (on ring %s): %s [%d]\n",
360 ring_str(i),
361 error->ring[i].comm,
362 error->ring[i].pid);
363 }
364 }
365 err_printf(m, "Reset count: %u\n", error->reset_count);
366 err_printf(m, "Suspend count: %u\n", error->suspend_count);
367 err_printf(m, "PCI ID: 0x%04x\n", dev->pdev->device);
368 err_printf(m, "PCI Revision: 0x%02x\n", dev->pdev->revision);
369 err_printf(m, "PCI Subsystem: %04x:%04x\n",
370 dev->pdev->subsystem_vendor,
371 dev->pdev->subsystem_device);
372 err_printf(m, "IOMMU enabled?: %d\n", error->iommu);
373
374 if (HAS_CSR(dev)) {
375 struct intel_csr *csr = &dev_priv->csr;
376
377 err_printf(m, "DMC loaded: %s\n",
378 yesno(csr->dmc_payload != NULL));
379 err_printf(m, "DMC fw version: %d.%d\n",
380 CSR_VERSION_MAJOR(csr->version),
381 CSR_VERSION_MINOR(csr->version));
382 }
383
384 err_printf(m, "EIR: 0x%08x\n", error->eir);
385 err_printf(m, "IER: 0x%08x\n", error->ier);
386 if (INTEL_INFO(dev)->gen >= 8) {
387 for (i = 0; i < 4; i++)
388 err_printf(m, "GTIER gt %d: 0x%08x\n", i,
389 error->gtier[i]);
390 } else if (HAS_PCH_SPLIT(dev) || IS_VALLEYVIEW(dev))
391 err_printf(m, "GTIER: 0x%08x\n", error->gtier[0]);
392 err_printf(m, "PGTBL_ER: 0x%08x\n", error->pgtbl_er);
393 err_printf(m, "FORCEWAKE: 0x%08x\n", error->forcewake);
394 err_printf(m, "DERRMR: 0x%08x\n", error->derrmr);
395 err_printf(m, "CCID: 0x%08x\n", error->ccid);
396 err_printf(m, "Missed interrupts: 0x%08lx\n", dev_priv->gpu_error.missed_irq_rings);
397
398 for (i = 0; i < dev_priv->num_fence_regs; i++)
399 err_printf(m, " fence[%d] = %08llx\n", i, error->fence[i]);
400
401 for (i = 0; i < ARRAY_SIZE(error->extra_instdone); i++)
402 err_printf(m, " INSTDONE_%d: 0x%08x\n", i,
403 error->extra_instdone[i]);
404
405 if (INTEL_INFO(dev)->gen >= 6) {
406 err_printf(m, "ERROR: 0x%08x\n", error->error);
407
408 if (INTEL_INFO(dev)->gen >= 8)
409 err_printf(m, "FAULT_TLB_DATA: 0x%08x 0x%08x\n",
410 error->fault_data1, error->fault_data0);
411
412 err_printf(m, "DONE_REG: 0x%08x\n", error->done_reg);
413 }
414
415 if (INTEL_INFO(dev)->gen == 7)
416 err_printf(m, "ERR_INT: 0x%08x\n", error->err_int);
417
418 for (i = 0; i < ARRAY_SIZE(error->ring); i++)
419 i915_ring_error_state(m, dev, error, i);
420
421 for (i = 0; i < error->vm_count; i++) {
422 err_printf(m, "vm[%d]\n", i);
423
424 print_error_buffers(m, "Active",
425 error->active_bo[i],
426 error->active_bo_count[i]);
427
428 print_error_buffers(m, "Pinned",
429 error->pinned_bo[i],
430 error->pinned_bo_count[i]);
431 }
432
433 for (i = 0; i < ARRAY_SIZE(error->ring); i++) {
434 obj = error->ring[i].batchbuffer;
435 if (obj) {
436 err_puts(m, dev_priv->ring[i].name);
437 if (error->ring[i].pid != -1)
438 err_printf(m, " (submitted by %s [%d])",
439 error->ring[i].comm,
440 error->ring[i].pid);
441 err_printf(m, " --- gtt_offset = 0x%08x %08x\n",
442 upper_32_bits(obj->gtt_offset),
443 lower_32_bits(obj->gtt_offset));
444 print_error_obj(m, obj);
445 }
446
447 obj = error->ring[i].wa_batchbuffer;
448 if (obj) {
449 err_printf(m, "%s (w/a) --- gtt_offset = 0x%08x\n",
450 dev_priv->ring[i].name,
451 lower_32_bits(obj->gtt_offset));
452 print_error_obj(m, obj);
453 }
454
455 if (error->ring[i].num_requests) {
456 err_printf(m, "%s --- %d requests\n",
457 dev_priv->ring[i].name,
458 error->ring[i].num_requests);
459 for (j = 0; j < error->ring[i].num_requests; j++) {
460 err_printf(m, " seqno 0x%08x, emitted %ld, tail 0x%08x\n",
461 error->ring[i].requests[j].seqno,
462 error->ring[i].requests[j].jiffies,
463 error->ring[i].requests[j].tail);
464 }
465 }
466
467 if ((obj = error->ring[i].ringbuffer)) {
468 err_printf(m, "%s --- ringbuffer = 0x%08x\n",
469 dev_priv->ring[i].name,
470 lower_32_bits(obj->gtt_offset));
471 print_error_obj(m, obj);
472 }
473
474 if ((obj = error->ring[i].hws_page)) {
475 u64 hws_offset = obj->gtt_offset;
476 u32 *hws_page = &obj->pages[0][0];
477
478 if (i915.enable_execlists) {
479 hws_offset += LRC_PPHWSP_PN * PAGE_SIZE;
480 hws_page = &obj->pages[LRC_PPHWSP_PN][0];
481 }
482 err_printf(m, "%s --- HW Status = 0x%08llx\n",
483 dev_priv->ring[i].name, hws_offset);
484 offset = 0;
485 for (elt = 0; elt < PAGE_SIZE/16; elt += 4) {
486 err_printf(m, "[%04x] %08x %08x %08x %08x\n",
487 offset,
488 hws_page[elt],
489 hws_page[elt+1],
490 hws_page[elt+2],
491 hws_page[elt+3]);
492 offset += 16;
493 }
494 }
495
496 if ((obj = error->ring[i].ctx)) {
497 err_printf(m, "%s --- HW Context = 0x%08x\n",
498 dev_priv->ring[i].name,
499 lower_32_bits(obj->gtt_offset));
500 print_error_obj(m, obj);
501 }
502 }
503
504 if ((obj = error->semaphore_obj)) {
505 err_printf(m, "Semaphore page = 0x%08x\n",
506 lower_32_bits(obj->gtt_offset));
507 for (elt = 0; elt < PAGE_SIZE/16; elt += 4) {
508 err_printf(m, "[%04x] %08x %08x %08x %08x\n",
509 elt * 4,
510 obj->pages[0][elt],
511 obj->pages[0][elt+1],
512 obj->pages[0][elt+2],
513 obj->pages[0][elt+3]);
514 }
515 }
516
517 if (error->overlay)
518 intel_overlay_print_error_state(m, error->overlay);
519
520 if (error->display)
521 intel_display_print_error_state(m, dev, error->display);
522
523out:
524 if (m->bytes == 0 && m->err)
525 return m->err;
526
527 return 0;
528}
529
530int i915_error_state_buf_init(struct drm_i915_error_state_buf *ebuf,
531 struct drm_i915_private *i915,
532 size_t count, loff_t pos)
533{
534 memset(ebuf, 0, sizeof(*ebuf));
535 ebuf->i915 = i915;
536
537 /* We need to have enough room to store any i915_error_state printf
538 * so that we can move it to start position.
539 */
540 ebuf->size = count + 1 > PAGE_SIZE ? count + 1 : PAGE_SIZE;
541 ebuf->buf = kmalloc(ebuf->size,
542 GFP_TEMPORARY | __GFP_NORETRY | __GFP_NOWARN);
543
544 if (ebuf->buf == NULL) {
545 ebuf->size = PAGE_SIZE;
546 ebuf->buf = kmalloc(ebuf->size, GFP_TEMPORARY);
547 }
548
549 if (ebuf->buf == NULL) {
550 ebuf->size = 128;
551 ebuf->buf = kmalloc(ebuf->size, GFP_TEMPORARY);
552 }
553
554 if (ebuf->buf == NULL)
555 return -ENOMEM;
556
557 ebuf->start = pos;
558
559 return 0;
560}
561
562static void i915_error_object_free(struct drm_i915_error_object *obj)
563{
564 int page;
565
566 if (obj == NULL)
567 return;
568
569 for (page = 0; page < obj->page_count; page++)
570 kfree(obj->pages[page]);
571
572 kfree(obj);
573}
574
575static void i915_error_state_free(struct kref *error_ref)
576{
577 struct drm_i915_error_state *error = container_of(error_ref,
578 typeof(*error), ref);
579 int i;
580
581 for (i = 0; i < ARRAY_SIZE(error->ring); i++) {
582 i915_error_object_free(error->ring[i].batchbuffer);
583 i915_error_object_free(error->ring[i].wa_batchbuffer);
584 i915_error_object_free(error->ring[i].ringbuffer);
585 i915_error_object_free(error->ring[i].hws_page);
586 i915_error_object_free(error->ring[i].ctx);
587 kfree(error->ring[i].requests);
588 }
589
590 i915_error_object_free(error->semaphore_obj);
591
592 for (i = 0; i < error->vm_count; i++)
593 kfree(error->active_bo[i]);
594
595 kfree(error->active_bo);
596 kfree(error->active_bo_count);
597 kfree(error->pinned_bo);
598 kfree(error->pinned_bo_count);
599 kfree(error->overlay);
600 kfree(error->display);
601 kfree(error);
602}
603
604static struct drm_i915_error_object *
605i915_error_object_create(struct drm_i915_private *dev_priv,
606 struct drm_i915_gem_object *src,
607 struct i915_address_space *vm)
608{
609 struct drm_i915_error_object *dst;
610 struct i915_vma *vma = NULL;
611 int num_pages;
612 bool use_ggtt;
613 int i = 0;
614 u64 reloc_offset;
615
616 if (src == NULL || src->pages == NULL)
617 return NULL;
618
619 num_pages = src->base.size >> PAGE_SHIFT;
620
621 dst = kmalloc(sizeof(*dst) + num_pages * sizeof(u32 *), GFP_ATOMIC);
622 if (dst == NULL)
623 return NULL;
624
625 if (i915_gem_obj_bound(src, vm))
626 dst->gtt_offset = i915_gem_obj_offset(src, vm);
627 else
628 dst->gtt_offset = -1;
629
630 reloc_offset = dst->gtt_offset;
631 if (i915_is_ggtt(vm))
632 vma = i915_gem_obj_to_ggtt(src);
633 use_ggtt = (src->cache_level == I915_CACHE_NONE &&
634 vma && (vma->bound & GLOBAL_BIND) &&
635 reloc_offset + num_pages * PAGE_SIZE <= dev_priv->gtt.mappable_end);
636
637 /* Cannot access stolen address directly, try to use the aperture */
638 if (src->stolen) {
639 use_ggtt = true;
640
641 if (!(vma && vma->bound & GLOBAL_BIND))
642 goto unwind;
643
644 reloc_offset = i915_gem_obj_ggtt_offset(src);
645 if (reloc_offset + num_pages * PAGE_SIZE > dev_priv->gtt.mappable_end)
646 goto unwind;
647 }
648
649 /* Cannot access snooped pages through the aperture */
650 if (use_ggtt && src->cache_level != I915_CACHE_NONE && !HAS_LLC(dev_priv->dev))
651 goto unwind;
652
653 dst->page_count = num_pages;
654 while (num_pages--) {
655 unsigned long flags;
656 void *d;
657
658 d = kmalloc(PAGE_SIZE, GFP_ATOMIC);
659 if (d == NULL)
660 goto unwind;
661
662 local_irq_save(flags);
663 if (use_ggtt) {
664 void __iomem *s;
665
666 /* Simply ignore tiling or any overlapping fence.
667 * It's part of the error state, and this hopefully
668 * captures what the GPU read.
669 */
670
671 s = io_mapping_map_atomic_wc(dev_priv->gtt.mappable,
672 reloc_offset);
673 memcpy_fromio(d, s, PAGE_SIZE);
674 io_mapping_unmap_atomic(s);
675 } else {
676 struct page *page;
677 void *s;
678
679 page = i915_gem_object_get_page(src, i);
680
681 drm_clflush_pages(&page, 1);
682
683 s = kmap_atomic(page);
684 memcpy(d, s, PAGE_SIZE);
685 kunmap_atomic(s);
686
687 drm_clflush_pages(&page, 1);
688 }
689 local_irq_restore(flags);
690
691 dst->pages[i++] = d;
692 reloc_offset += PAGE_SIZE;
693 }
694
695 return dst;
696
697unwind:
698 while (i--)
699 kfree(dst->pages[i]);
700 kfree(dst);
701 return NULL;
702}
703#define i915_error_ggtt_object_create(dev_priv, src) \
704 i915_error_object_create((dev_priv), (src), &(dev_priv)->gtt.base)
705
706static void capture_bo(struct drm_i915_error_buffer *err,
707 struct i915_vma *vma)
708{
709 struct drm_i915_gem_object *obj = vma->obj;
710 int i;
711
712 err->size = obj->base.size;
713 err->name = obj->base.name;
714 for (i = 0; i < I915_NUM_RINGS; i++)
715 err->rseqno[i] = i915_gem_request_get_seqno(obj->last_read_req[i]);
716 err->wseqno = i915_gem_request_get_seqno(obj->last_write_req);
717 err->gtt_offset = vma->node.start;
718 err->read_domains = obj->base.read_domains;
719 err->write_domain = obj->base.write_domain;
720 err->fence_reg = obj->fence_reg;
721 err->pinned = 0;
722 if (i915_gem_obj_is_pinned(obj))
723 err->pinned = 1;
724 err->tiling = obj->tiling_mode;
725 err->dirty = obj->dirty;
726 err->purgeable = obj->madv != I915_MADV_WILLNEED;
727 err->userptr = obj->userptr.mm != NULL;
728 err->ring = obj->last_write_req ?
729 i915_gem_request_get_ring(obj->last_write_req)->id : -1;
730 err->cache_level = obj->cache_level;
731}
732
733static u32 capture_active_bo(struct drm_i915_error_buffer *err,
734 int count, struct list_head *head)
735{
736 struct i915_vma *vma;
737 int i = 0;
738
739 list_for_each_entry(vma, head, vm_link) {
740 capture_bo(err++, vma);
741 if (++i == count)
742 break;
743 }
744
745 return i;
746}
747
748static u32 capture_pinned_bo(struct drm_i915_error_buffer *err,
749 int count, struct list_head *head,
750 struct i915_address_space *vm)
751{
752 struct drm_i915_gem_object *obj;
753 struct drm_i915_error_buffer * const first = err;
754 struct drm_i915_error_buffer * const last = err + count;
755
756 list_for_each_entry(obj, head, global_list) {
757 struct i915_vma *vma;
758
759 if (err == last)
760 break;
761
762 list_for_each_entry(vma, &obj->vma_list, obj_link)
763 if (vma->vm == vm && vma->pin_count > 0)
764 capture_bo(err++, vma);
765 }
766
767 return err - first;
768}
769
770/* Generate a semi-unique error code. The code is not meant to have meaning, The
771 * code's only purpose is to try to prevent false duplicated bug reports by
772 * grossly estimating a GPU error state.
773 *
774 * TODO Ideally, hashing the batchbuffer would be a very nice way to determine
775 * the hang if we could strip the GTT offset information from it.
776 *
777 * It's only a small step better than a random number in its current form.
778 */
779static uint32_t i915_error_generate_code(struct drm_i915_private *dev_priv,
780 struct drm_i915_error_state *error,
781 int *ring_id)
782{
783 uint32_t error_code = 0;
784 int i;
785
786 /* IPEHR would be an ideal way to detect errors, as it's the gross
787 * measure of "the command that hung." However, has some very common
788 * synchronization commands which almost always appear in the case
789 * strictly a client bug. Use instdone to differentiate those some.
790 */
791 for (i = 0; i < I915_NUM_RINGS; i++) {
792 if (error->ring[i].hangcheck_action == HANGCHECK_HUNG) {
793 if (ring_id)
794 *ring_id = i;
795
796 return error->ring[i].ipehr ^ error->ring[i].instdone;
797 }
798 }
799
800 return error_code;
801}
802
803static void i915_gem_record_fences(struct drm_device *dev,
804 struct drm_i915_error_state *error)
805{
806 struct drm_i915_private *dev_priv = dev->dev_private;
807 int i;
808
809 if (IS_GEN3(dev) || IS_GEN2(dev)) {
810 for (i = 0; i < dev_priv->num_fence_regs; i++)
811 error->fence[i] = I915_READ(FENCE_REG(i));
812 } else if (IS_GEN5(dev) || IS_GEN4(dev)) {
813 for (i = 0; i < dev_priv->num_fence_regs; i++)
814 error->fence[i] = I915_READ64(FENCE_REG_965_LO(i));
815 } else if (INTEL_INFO(dev)->gen >= 6) {
816 for (i = 0; i < dev_priv->num_fence_regs; i++)
817 error->fence[i] = I915_READ64(FENCE_REG_GEN6_LO(i));
818 }
819}
820
821
822static void gen8_record_semaphore_state(struct drm_i915_private *dev_priv,
823 struct drm_i915_error_state *error,
824 struct intel_engine_cs *ring,
825 struct drm_i915_error_ring *ering)
826{
827 struct intel_engine_cs *to;
828 int i;
829
830 if (!i915_semaphore_is_enabled(dev_priv->dev))
831 return;
832
833 if (!error->semaphore_obj)
834 error->semaphore_obj =
835 i915_error_ggtt_object_create(dev_priv,
836 dev_priv->semaphore_obj);
837
838 for_each_ring(to, dev_priv, i) {
839 int idx;
840 u16 signal_offset;
841 u32 *tmp;
842
843 if (ring == to)
844 continue;
845
846 signal_offset = (GEN8_SIGNAL_OFFSET(ring, i) & (PAGE_SIZE - 1))
847 / 4;
848 tmp = error->semaphore_obj->pages[0];
849 idx = intel_ring_sync_index(ring, to);
850
851 ering->semaphore_mboxes[idx] = tmp[signal_offset];
852 ering->semaphore_seqno[idx] = ring->semaphore.sync_seqno[idx];
853 }
854}
855
856static void gen6_record_semaphore_state(struct drm_i915_private *dev_priv,
857 struct intel_engine_cs *ring,
858 struct drm_i915_error_ring *ering)
859{
860 ering->semaphore_mboxes[0] = I915_READ(RING_SYNC_0(ring->mmio_base));
861 ering->semaphore_mboxes[1] = I915_READ(RING_SYNC_1(ring->mmio_base));
862 ering->semaphore_seqno[0] = ring->semaphore.sync_seqno[0];
863 ering->semaphore_seqno[1] = ring->semaphore.sync_seqno[1];
864
865 if (HAS_VEBOX(dev_priv->dev)) {
866 ering->semaphore_mboxes[2] =
867 I915_READ(RING_SYNC_2(ring->mmio_base));
868 ering->semaphore_seqno[2] = ring->semaphore.sync_seqno[2];
869 }
870}
871
872static void i915_record_ring_state(struct drm_device *dev,
873 struct drm_i915_error_state *error,
874 struct intel_engine_cs *ring,
875 struct drm_i915_error_ring *ering)
876{
877 struct drm_i915_private *dev_priv = dev->dev_private;
878
879 if (INTEL_INFO(dev)->gen >= 6) {
880 ering->rc_psmi = I915_READ(RING_PSMI_CTL(ring->mmio_base));
881 ering->fault_reg = I915_READ(RING_FAULT_REG(ring));
882 if (INTEL_INFO(dev)->gen >= 8)
883 gen8_record_semaphore_state(dev_priv, error, ring, ering);
884 else
885 gen6_record_semaphore_state(dev_priv, ring, ering);
886 }
887
888 if (INTEL_INFO(dev)->gen >= 4) {
889 ering->faddr = I915_READ(RING_DMA_FADD(ring->mmio_base));
890 ering->ipeir = I915_READ(RING_IPEIR(ring->mmio_base));
891 ering->ipehr = I915_READ(RING_IPEHR(ring->mmio_base));
892 ering->instdone = I915_READ(RING_INSTDONE(ring->mmio_base));
893 ering->instps = I915_READ(RING_INSTPS(ring->mmio_base));
894 ering->bbaddr = I915_READ(RING_BBADDR(ring->mmio_base));
895 if (INTEL_INFO(dev)->gen >= 8) {
896 ering->faddr |= (u64) I915_READ(RING_DMA_FADD_UDW(ring->mmio_base)) << 32;
897 ering->bbaddr |= (u64) I915_READ(RING_BBADDR_UDW(ring->mmio_base)) << 32;
898 }
899 ering->bbstate = I915_READ(RING_BBSTATE(ring->mmio_base));
900 } else {
901 ering->faddr = I915_READ(DMA_FADD_I8XX);
902 ering->ipeir = I915_READ(IPEIR);
903 ering->ipehr = I915_READ(IPEHR);
904 ering->instdone = I915_READ(GEN2_INSTDONE);
905 }
906
907 ering->waiting = waitqueue_active(&ring->irq_queue);
908 ering->instpm = I915_READ(RING_INSTPM(ring->mmio_base));
909 ering->seqno = ring->get_seqno(ring, false);
910 ering->acthd = intel_ring_get_active_head(ring);
911 ering->start = I915_READ_START(ring);
912 ering->head = I915_READ_HEAD(ring);
913 ering->tail = I915_READ_TAIL(ring);
914 ering->ctl = I915_READ_CTL(ring);
915
916 if (I915_NEED_GFX_HWS(dev)) {
917 i915_reg_t mmio;
918
919 if (IS_GEN7(dev)) {
920 switch (ring->id) {
921 default:
922 case RCS:
923 mmio = RENDER_HWS_PGA_GEN7;
924 break;
925 case BCS:
926 mmio = BLT_HWS_PGA_GEN7;
927 break;
928 case VCS:
929 mmio = BSD_HWS_PGA_GEN7;
930 break;
931 case VECS:
932 mmio = VEBOX_HWS_PGA_GEN7;
933 break;
934 }
935 } else if (IS_GEN6(ring->dev)) {
936 mmio = RING_HWS_PGA_GEN6(ring->mmio_base);
937 } else {
938 /* XXX: gen8 returns to sanity */
939 mmio = RING_HWS_PGA(ring->mmio_base);
940 }
941
942 ering->hws = I915_READ(mmio);
943 }
944
945 ering->hangcheck_score = ring->hangcheck.score;
946 ering->hangcheck_action = ring->hangcheck.action;
947
948 if (USES_PPGTT(dev)) {
949 int i;
950
951 ering->vm_info.gfx_mode = I915_READ(RING_MODE_GEN7(ring));
952
953 if (IS_GEN6(dev))
954 ering->vm_info.pp_dir_base =
955 I915_READ(RING_PP_DIR_BASE_READ(ring));
956 else if (IS_GEN7(dev))
957 ering->vm_info.pp_dir_base =
958 I915_READ(RING_PP_DIR_BASE(ring));
959 else if (INTEL_INFO(dev)->gen >= 8)
960 for (i = 0; i < 4; i++) {
961 ering->vm_info.pdp[i] =
962 I915_READ(GEN8_RING_PDP_UDW(ring, i));
963 ering->vm_info.pdp[i] <<= 32;
964 ering->vm_info.pdp[i] |=
965 I915_READ(GEN8_RING_PDP_LDW(ring, i));
966 }
967 }
968}
969
970
971static void i915_gem_record_active_context(struct intel_engine_cs *ring,
972 struct drm_i915_error_state *error,
973 struct drm_i915_error_ring *ering)
974{
975 struct drm_i915_private *dev_priv = ring->dev->dev_private;
976 struct drm_i915_gem_object *obj;
977
978 /* Currently render ring is the only HW context user */
979 if (ring->id != RCS || !error->ccid)
980 return;
981
982 list_for_each_entry(obj, &dev_priv->mm.bound_list, global_list) {
983 if (!i915_gem_obj_ggtt_bound(obj))
984 continue;
985
986 if ((error->ccid & PAGE_MASK) == i915_gem_obj_ggtt_offset(obj)) {
987 ering->ctx = i915_error_ggtt_object_create(dev_priv, obj);
988 break;
989 }
990 }
991}
992
993static void i915_gem_record_rings(struct drm_device *dev,
994 struct drm_i915_error_state *error)
995{
996 struct drm_i915_private *dev_priv = dev->dev_private;
997 struct drm_i915_gem_request *request;
998 int i, count;
999
1000 for (i = 0; i < I915_NUM_RINGS; i++) {
1001 struct intel_engine_cs *ring = &dev_priv->ring[i];
1002 struct intel_ringbuffer *rbuf;
1003
1004 error->ring[i].pid = -1;
1005
1006 if (ring->dev == NULL)
1007 continue;
1008
1009 error->ring[i].valid = true;
1010
1011 i915_record_ring_state(dev, error, ring, &error->ring[i]);
1012
1013 request = i915_gem_find_active_request(ring);
1014 if (request) {
1015 struct i915_address_space *vm;
1016
1017 vm = request->ctx && request->ctx->ppgtt ?
1018 &request->ctx->ppgtt->base :
1019 &dev_priv->gtt.base;
1020
1021 /* We need to copy these to an anonymous buffer
1022 * as the simplest method to avoid being overwritten
1023 * by userspace.
1024 */
1025 error->ring[i].batchbuffer =
1026 i915_error_object_create(dev_priv,
1027 request->batch_obj,
1028 vm);
1029
1030 if (HAS_BROKEN_CS_TLB(dev_priv->dev))
1031 error->ring[i].wa_batchbuffer =
1032 i915_error_ggtt_object_create(dev_priv,
1033 ring->scratch.obj);
1034
1035 if (request->pid) {
1036 struct task_struct *task;
1037
1038 rcu_read_lock();
1039 task = pid_task(request->pid, PIDTYPE_PID);
1040 if (task) {
1041 strcpy(error->ring[i].comm, task->comm);
1042 error->ring[i].pid = task->pid;
1043 }
1044 rcu_read_unlock();
1045 }
1046 }
1047
1048 if (i915.enable_execlists) {
1049 /* TODO: This is only a small fix to keep basic error
1050 * capture working, but we need to add more information
1051 * for it to be useful (e.g. dump the context being
1052 * executed).
1053 */
1054 if (request)
1055 rbuf = request->ctx->engine[ring->id].ringbuf;
1056 else
1057 rbuf = dev_priv->kernel_context->engine[ring->id].ringbuf;
1058 } else
1059 rbuf = ring->buffer;
1060
1061 error->ring[i].cpu_ring_head = rbuf->head;
1062 error->ring[i].cpu_ring_tail = rbuf->tail;
1063
1064 error->ring[i].ringbuffer =
1065 i915_error_ggtt_object_create(dev_priv, rbuf->obj);
1066
1067 error->ring[i].hws_page =
1068 i915_error_ggtt_object_create(dev_priv, ring->status_page.obj);
1069
1070 i915_gem_record_active_context(ring, error, &error->ring[i]);
1071
1072 count = 0;
1073 list_for_each_entry(request, &ring->request_list, list)
1074 count++;
1075
1076 error->ring[i].num_requests = count;
1077 error->ring[i].requests =
1078 kcalloc(count, sizeof(*error->ring[i].requests),
1079 GFP_ATOMIC);
1080 if (error->ring[i].requests == NULL) {
1081 error->ring[i].num_requests = 0;
1082 continue;
1083 }
1084
1085 count = 0;
1086 list_for_each_entry(request, &ring->request_list, list) {
1087 struct drm_i915_error_request *erq;
1088
1089 if (count >= error->ring[i].num_requests) {
1090 /*
1091 * If the ring request list was changed in
1092 * between the point where the error request
1093 * list was created and dimensioned and this
1094 * point then just exit early to avoid crashes.
1095 *
1096 * We don't need to communicate that the
1097 * request list changed state during error
1098 * state capture and that the error state is
1099 * slightly incorrect as a consequence since we
1100 * are typically only interested in the request
1101 * list state at the point of error state
1102 * capture, not in any changes happening during
1103 * the capture.
1104 */
1105 break;
1106 }
1107
1108 erq = &error->ring[i].requests[count++];
1109 erq->seqno = request->seqno;
1110 erq->jiffies = request->emitted_jiffies;
1111 erq->tail = request->postfix;
1112 }
1113 }
1114}
1115
1116/* FIXME: Since pin count/bound list is global, we duplicate what we capture per
1117 * VM.
1118 */
1119static void i915_gem_capture_vm(struct drm_i915_private *dev_priv,
1120 struct drm_i915_error_state *error,
1121 struct i915_address_space *vm,
1122 const int ndx)
1123{
1124 struct drm_i915_error_buffer *active_bo = NULL, *pinned_bo = NULL;
1125 struct drm_i915_gem_object *obj;
1126 struct i915_vma *vma;
1127 int i;
1128
1129 i = 0;
1130 list_for_each_entry(vma, &vm->active_list, vm_link)
1131 i++;
1132 error->active_bo_count[ndx] = i;
1133
1134 list_for_each_entry(obj, &dev_priv->mm.bound_list, global_list) {
1135 list_for_each_entry(vma, &obj->vma_list, obj_link)
1136 if (vma->vm == vm && vma->pin_count > 0)
1137 i++;
1138 }
1139 error->pinned_bo_count[ndx] = i - error->active_bo_count[ndx];
1140
1141 if (i) {
1142 active_bo = kcalloc(i, sizeof(*active_bo), GFP_ATOMIC);
1143 if (active_bo)
1144 pinned_bo = active_bo + error->active_bo_count[ndx];
1145 }
1146
1147 if (active_bo)
1148 error->active_bo_count[ndx] =
1149 capture_active_bo(active_bo,
1150 error->active_bo_count[ndx],
1151 &vm->active_list);
1152
1153 if (pinned_bo)
1154 error->pinned_bo_count[ndx] =
1155 capture_pinned_bo(pinned_bo,
1156 error->pinned_bo_count[ndx],
1157 &dev_priv->mm.bound_list, vm);
1158 error->active_bo[ndx] = active_bo;
1159 error->pinned_bo[ndx] = pinned_bo;
1160}
1161
1162static void i915_gem_capture_buffers(struct drm_i915_private *dev_priv,
1163 struct drm_i915_error_state *error)
1164{
1165 struct i915_address_space *vm;
1166 int cnt = 0, i = 0;
1167
1168 list_for_each_entry(vm, &dev_priv->vm_list, global_link)
1169 cnt++;
1170
1171 error->active_bo = kcalloc(cnt, sizeof(*error->active_bo), GFP_ATOMIC);
1172 error->pinned_bo = kcalloc(cnt, sizeof(*error->pinned_bo), GFP_ATOMIC);
1173 error->active_bo_count = kcalloc(cnt, sizeof(*error->active_bo_count),
1174 GFP_ATOMIC);
1175 error->pinned_bo_count = kcalloc(cnt, sizeof(*error->pinned_bo_count),
1176 GFP_ATOMIC);
1177
1178 if (error->active_bo == NULL ||
1179 error->pinned_bo == NULL ||
1180 error->active_bo_count == NULL ||
1181 error->pinned_bo_count == NULL) {
1182 kfree(error->active_bo);
1183 kfree(error->active_bo_count);
1184 kfree(error->pinned_bo);
1185 kfree(error->pinned_bo_count);
1186
1187 error->active_bo = NULL;
1188 error->active_bo_count = NULL;
1189 error->pinned_bo = NULL;
1190 error->pinned_bo_count = NULL;
1191 } else {
1192 list_for_each_entry(vm, &dev_priv->vm_list, global_link)
1193 i915_gem_capture_vm(dev_priv, error, vm, i++);
1194
1195 error->vm_count = cnt;
1196 }
1197}
1198
1199/* Capture all registers which don't fit into another category. */
1200static void i915_capture_reg_state(struct drm_i915_private *dev_priv,
1201 struct drm_i915_error_state *error)
1202{
1203 struct drm_device *dev = dev_priv->dev;
1204 int i;
1205
1206 /* General organization
1207 * 1. Registers specific to a single generation
1208 * 2. Registers which belong to multiple generations
1209 * 3. Feature specific registers.
1210 * 4. Everything else
1211 * Please try to follow the order.
1212 */
1213
1214 /* 1: Registers specific to a single generation */
1215 if (IS_VALLEYVIEW(dev)) {
1216 error->gtier[0] = I915_READ(GTIER);
1217 error->ier = I915_READ(VLV_IER);
1218 error->forcewake = I915_READ_FW(FORCEWAKE_VLV);
1219 }
1220
1221 if (IS_GEN7(dev))
1222 error->err_int = I915_READ(GEN7_ERR_INT);
1223
1224 if (INTEL_INFO(dev)->gen >= 8) {
1225 error->fault_data0 = I915_READ(GEN8_FAULT_TLB_DATA0);
1226 error->fault_data1 = I915_READ(GEN8_FAULT_TLB_DATA1);
1227 }
1228
1229 if (IS_GEN6(dev)) {
1230 error->forcewake = I915_READ_FW(FORCEWAKE);
1231 error->gab_ctl = I915_READ(GAB_CTL);
1232 error->gfx_mode = I915_READ(GFX_MODE);
1233 }
1234
1235 /* 2: Registers which belong to multiple generations */
1236 if (INTEL_INFO(dev)->gen >= 7)
1237 error->forcewake = I915_READ_FW(FORCEWAKE_MT);
1238
1239 if (INTEL_INFO(dev)->gen >= 6) {
1240 error->derrmr = I915_READ(DERRMR);
1241 error->error = I915_READ(ERROR_GEN6);
1242 error->done_reg = I915_READ(DONE_REG);
1243 }
1244
1245 /* 3: Feature specific registers */
1246 if (IS_GEN6(dev) || IS_GEN7(dev)) {
1247 error->gam_ecochk = I915_READ(GAM_ECOCHK);
1248 error->gac_eco = I915_READ(GAC_ECO_BITS);
1249 }
1250
1251 /* 4: Everything else */
1252 if (HAS_HW_CONTEXTS(dev))
1253 error->ccid = I915_READ(CCID);
1254
1255 if (INTEL_INFO(dev)->gen >= 8) {
1256 error->ier = I915_READ(GEN8_DE_MISC_IER);
1257 for (i = 0; i < 4; i++)
1258 error->gtier[i] = I915_READ(GEN8_GT_IER(i));
1259 } else if (HAS_PCH_SPLIT(dev)) {
1260 error->ier = I915_READ(DEIER);
1261 error->gtier[0] = I915_READ(GTIER);
1262 } else if (IS_GEN2(dev)) {
1263 error->ier = I915_READ16(IER);
1264 } else if (!IS_VALLEYVIEW(dev)) {
1265 error->ier = I915_READ(IER);
1266 }
1267 error->eir = I915_READ(EIR);
1268 error->pgtbl_er = I915_READ(PGTBL_ER);
1269
1270 i915_get_extra_instdone(dev, error->extra_instdone);
1271}
1272
1273static void i915_error_capture_msg(struct drm_device *dev,
1274 struct drm_i915_error_state *error,
1275 bool wedged,
1276 const char *error_msg)
1277{
1278 struct drm_i915_private *dev_priv = dev->dev_private;
1279 u32 ecode;
1280 int ring_id = -1, len;
1281
1282 ecode = i915_error_generate_code(dev_priv, error, &ring_id);
1283
1284 len = scnprintf(error->error_msg, sizeof(error->error_msg),
1285 "GPU HANG: ecode %d:%d:0x%08x",
1286 INTEL_INFO(dev)->gen, ring_id, ecode);
1287
1288 if (ring_id != -1 && error->ring[ring_id].pid != -1)
1289 len += scnprintf(error->error_msg + len,
1290 sizeof(error->error_msg) - len,
1291 ", in %s [%d]",
1292 error->ring[ring_id].comm,
1293 error->ring[ring_id].pid);
1294
1295 scnprintf(error->error_msg + len, sizeof(error->error_msg) - len,
1296 ", reason: %s, action: %s",
1297 error_msg,
1298 wedged ? "reset" : "continue");
1299}
1300
1301static void i915_capture_gen_state(struct drm_i915_private *dev_priv,
1302 struct drm_i915_error_state *error)
1303{
1304 error->iommu = -1;
1305#ifdef CONFIG_INTEL_IOMMU
1306 error->iommu = intel_iommu_gfx_mapped;
1307#endif
1308 error->reset_count = i915_reset_count(&dev_priv->gpu_error);
1309 error->suspend_count = dev_priv->suspend_count;
1310}
1311
1312/**
1313 * i915_capture_error_state - capture an error record for later analysis
1314 * @dev: drm device
1315 *
1316 * Should be called when an error is detected (either a hang or an error
1317 * interrupt) to capture error state from the time of the error. Fills
1318 * out a structure which becomes available in debugfs for user level tools
1319 * to pick up.
1320 */
1321void i915_capture_error_state(struct drm_device *dev, bool wedged,
1322 const char *error_msg)
1323{
1324 static bool warned;
1325 struct drm_i915_private *dev_priv = dev->dev_private;
1326 struct drm_i915_error_state *error;
1327 unsigned long flags;
1328
1329 /* Account for pipe specific data like PIPE*STAT */
1330 error = kzalloc(sizeof(*error), GFP_ATOMIC);
1331 if (!error) {
1332 DRM_DEBUG_DRIVER("out of memory, not capturing error state\n");
1333 return;
1334 }
1335
1336 kref_init(&error->ref);
1337
1338 i915_capture_gen_state(dev_priv, error);
1339 i915_capture_reg_state(dev_priv, error);
1340 i915_gem_capture_buffers(dev_priv, error);
1341 i915_gem_record_fences(dev, error);
1342 i915_gem_record_rings(dev, error);
1343
1344 do_gettimeofday(&error->time);
1345
1346 error->overlay = intel_overlay_capture_error_state(dev);
1347 error->display = intel_display_capture_error_state(dev);
1348
1349 i915_error_capture_msg(dev, error, wedged, error_msg);
1350 DRM_INFO("%s\n", error->error_msg);
1351
1352 spin_lock_irqsave(&dev_priv->gpu_error.lock, flags);
1353 if (dev_priv->gpu_error.first_error == NULL) {
1354 dev_priv->gpu_error.first_error = error;
1355 error = NULL;
1356 }
1357 spin_unlock_irqrestore(&dev_priv->gpu_error.lock, flags);
1358
1359 if (error) {
1360 i915_error_state_free(&error->ref);
1361 return;
1362 }
1363
1364 if (!warned) {
1365 DRM_INFO("GPU hangs can indicate a bug anywhere in the entire gfx stack, including userspace.\n");
1366 DRM_INFO("Please file a _new_ bug report on bugs.freedesktop.org against DRI -> DRM/Intel\n");
1367 DRM_INFO("drm/i915 developers can then reassign to the right component if it's not a kernel issue.\n");
1368 DRM_INFO("The gpu crash dump is required to analyze gpu hangs, so please always attach it.\n");
1369 DRM_INFO("GPU crash dump saved to /sys/class/drm/card%d/error\n", dev->primary->index);
1370 warned = true;
1371 }
1372}
1373
1374void i915_error_state_get(struct drm_device *dev,
1375 struct i915_error_state_file_priv *error_priv)
1376{
1377 struct drm_i915_private *dev_priv = dev->dev_private;
1378
1379 spin_lock_irq(&dev_priv->gpu_error.lock);
1380 error_priv->error = dev_priv->gpu_error.first_error;
1381 if (error_priv->error)
1382 kref_get(&error_priv->error->ref);
1383 spin_unlock_irq(&dev_priv->gpu_error.lock);
1384
1385}
1386
1387void i915_error_state_put(struct i915_error_state_file_priv *error_priv)
1388{
1389 if (error_priv->error)
1390 kref_put(&error_priv->error->ref, i915_error_state_free);
1391}
1392
1393void i915_destroy_error_state(struct drm_device *dev)
1394{
1395 struct drm_i915_private *dev_priv = dev->dev_private;
1396 struct drm_i915_error_state *error;
1397
1398 spin_lock_irq(&dev_priv->gpu_error.lock);
1399 error = dev_priv->gpu_error.first_error;
1400 dev_priv->gpu_error.first_error = NULL;
1401 spin_unlock_irq(&dev_priv->gpu_error.lock);
1402
1403 if (error)
1404 kref_put(&error->ref, i915_error_state_free);
1405}
1406
1407const char *i915_cache_level_str(struct drm_i915_private *i915, int type)
1408{
1409 switch (type) {
1410 case I915_CACHE_NONE: return " uncached";
1411 case I915_CACHE_LLC: return HAS_LLC(i915) ? " LLC" : " snooped";
1412 case I915_CACHE_L3_LLC: return " L3+LLC";
1413 case I915_CACHE_WT: return " WT";
1414 default: return "";
1415 }
1416}
1417
1418/* NB: please notice the memset */
1419void i915_get_extra_instdone(struct drm_device *dev, uint32_t *instdone)
1420{
1421 struct drm_i915_private *dev_priv = dev->dev_private;
1422 memset(instdone, 0, sizeof(*instdone) * I915_NUM_INSTDONE_REG);
1423
1424 if (IS_GEN2(dev) || IS_GEN3(dev))
1425 instdone[0] = I915_READ(GEN2_INSTDONE);
1426 else if (IS_GEN4(dev) || IS_GEN5(dev) || IS_GEN6(dev)) {
1427 instdone[0] = I915_READ(RING_INSTDONE(RENDER_RING_BASE));
1428 instdone[1] = I915_READ(GEN4_INSTDONE1);
1429 } else if (INTEL_INFO(dev)->gen >= 7) {
1430 instdone[0] = I915_READ(RING_INSTDONE(RENDER_RING_BASE));
1431 instdone[1] = I915_READ(GEN7_SC_INSTDONE);
1432 instdone[2] = I915_READ(GEN7_SAMPLER_INSTDONE);
1433 instdone[3] = I915_READ(GEN7_ROW_INSTDONE);
1434 }
1435}
1/*
2 * Copyright (c) 2008 Intel Corporation
3 *
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the "Software"),
6 * to deal in the Software without restriction, including without limitation
7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8 * and/or sell copies of the Software, and to permit persons to whom the
9 * Software is furnished to do so, subject to the following conditions:
10 *
11 * The above copyright notice and this permission notice (including the next
12 * paragraph) shall be included in all copies or substantial portions of the
13 * Software.
14 *
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
18 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
21 * IN THE SOFTWARE.
22 *
23 * Authors:
24 * Eric Anholt <eric@anholt.net>
25 * Keith Packard <keithp@keithp.com>
26 * Mika Kuoppala <mika.kuoppala@intel.com>
27 *
28 */
29
30#include <linux/ascii85.h>
31#include <linux/nmi.h>
32#include <linux/pagevec.h>
33#include <linux/scatterlist.h>
34#include <linux/utsname.h>
35#include <linux/zlib.h>
36
37#include <drm/drm_print.h>
38
39#include "display/intel_atomic.h"
40#include "display/intel_csr.h"
41#include "display/intel_overlay.h"
42
43#include "gem/i915_gem_context.h"
44#include "gem/i915_gem_lmem.h"
45#include "gt/intel_gt.h"
46#include "gt/intel_gt_pm.h"
47
48#include "i915_drv.h"
49#include "i915_gpu_error.h"
50#include "i915_memcpy.h"
51#include "i915_scatterlist.h"
52
53#define ALLOW_FAIL (GFP_KERNEL | __GFP_RETRY_MAYFAIL | __GFP_NOWARN)
54#define ATOMIC_MAYFAIL (GFP_ATOMIC | __GFP_NOWARN)
55
56static void __sg_set_buf(struct scatterlist *sg,
57 void *addr, unsigned int len, loff_t it)
58{
59 sg->page_link = (unsigned long)virt_to_page(addr);
60 sg->offset = offset_in_page(addr);
61 sg->length = len;
62 sg->dma_address = it;
63}
64
65static bool __i915_error_grow(struct drm_i915_error_state_buf *e, size_t len)
66{
67 if (!len)
68 return false;
69
70 if (e->bytes + len + 1 <= e->size)
71 return true;
72
73 if (e->bytes) {
74 __sg_set_buf(e->cur++, e->buf, e->bytes, e->iter);
75 e->iter += e->bytes;
76 e->buf = NULL;
77 e->bytes = 0;
78 }
79
80 if (e->cur == e->end) {
81 struct scatterlist *sgl;
82
83 sgl = (typeof(sgl))__get_free_page(ALLOW_FAIL);
84 if (!sgl) {
85 e->err = -ENOMEM;
86 return false;
87 }
88
89 if (e->cur) {
90 e->cur->offset = 0;
91 e->cur->length = 0;
92 e->cur->page_link =
93 (unsigned long)sgl | SG_CHAIN;
94 } else {
95 e->sgl = sgl;
96 }
97
98 e->cur = sgl;
99 e->end = sgl + SG_MAX_SINGLE_ALLOC - 1;
100 }
101
102 e->size = ALIGN(len + 1, SZ_64K);
103 e->buf = kmalloc(e->size, ALLOW_FAIL);
104 if (!e->buf) {
105 e->size = PAGE_ALIGN(len + 1);
106 e->buf = kmalloc(e->size, GFP_KERNEL);
107 }
108 if (!e->buf) {
109 e->err = -ENOMEM;
110 return false;
111 }
112
113 return true;
114}
115
116__printf(2, 0)
117static void i915_error_vprintf(struct drm_i915_error_state_buf *e,
118 const char *fmt, va_list args)
119{
120 va_list ap;
121 int len;
122
123 if (e->err)
124 return;
125
126 va_copy(ap, args);
127 len = vsnprintf(NULL, 0, fmt, ap);
128 va_end(ap);
129 if (len <= 0) {
130 e->err = len;
131 return;
132 }
133
134 if (!__i915_error_grow(e, len))
135 return;
136
137 GEM_BUG_ON(e->bytes >= e->size);
138 len = vscnprintf(e->buf + e->bytes, e->size - e->bytes, fmt, args);
139 if (len < 0) {
140 e->err = len;
141 return;
142 }
143 e->bytes += len;
144}
145
146static void i915_error_puts(struct drm_i915_error_state_buf *e, const char *str)
147{
148 unsigned len;
149
150 if (e->err || !str)
151 return;
152
153 len = strlen(str);
154 if (!__i915_error_grow(e, len))
155 return;
156
157 GEM_BUG_ON(e->bytes + len > e->size);
158 memcpy(e->buf + e->bytes, str, len);
159 e->bytes += len;
160}
161
162#define err_printf(e, ...) i915_error_printf(e, __VA_ARGS__)
163#define err_puts(e, s) i915_error_puts(e, s)
164
165static void __i915_printfn_error(struct drm_printer *p, struct va_format *vaf)
166{
167 i915_error_vprintf(p->arg, vaf->fmt, *vaf->va);
168}
169
170static inline struct drm_printer
171i915_error_printer(struct drm_i915_error_state_buf *e)
172{
173 struct drm_printer p = {
174 .printfn = __i915_printfn_error,
175 .arg = e,
176 };
177 return p;
178}
179
180/* single threaded page allocator with a reserved stash for emergencies */
181static void pool_fini(struct pagevec *pv)
182{
183 pagevec_release(pv);
184}
185
186static int pool_refill(struct pagevec *pv, gfp_t gfp)
187{
188 while (pagevec_space(pv)) {
189 struct page *p;
190
191 p = alloc_page(gfp);
192 if (!p)
193 return -ENOMEM;
194
195 pagevec_add(pv, p);
196 }
197
198 return 0;
199}
200
201static int pool_init(struct pagevec *pv, gfp_t gfp)
202{
203 int err;
204
205 pagevec_init(pv);
206
207 err = pool_refill(pv, gfp);
208 if (err)
209 pool_fini(pv);
210
211 return err;
212}
213
214static void *pool_alloc(struct pagevec *pv, gfp_t gfp)
215{
216 struct page *p;
217
218 p = alloc_page(gfp);
219 if (!p && pagevec_count(pv))
220 p = pv->pages[--pv->nr];
221
222 return p ? page_address(p) : NULL;
223}
224
225static void pool_free(struct pagevec *pv, void *addr)
226{
227 struct page *p = virt_to_page(addr);
228
229 if (pagevec_space(pv))
230 pagevec_add(pv, p);
231 else
232 __free_page(p);
233}
234
235#ifdef CONFIG_DRM_I915_COMPRESS_ERROR
236
237struct i915_vma_compress {
238 struct pagevec pool;
239 struct z_stream_s zstream;
240 void *tmp;
241};
242
243static bool compress_init(struct i915_vma_compress *c)
244{
245 struct z_stream_s *zstream = &c->zstream;
246
247 if (pool_init(&c->pool, ALLOW_FAIL))
248 return false;
249
250 zstream->workspace =
251 kmalloc(zlib_deflate_workspacesize(MAX_WBITS, MAX_MEM_LEVEL),
252 ALLOW_FAIL);
253 if (!zstream->workspace) {
254 pool_fini(&c->pool);
255 return false;
256 }
257
258 c->tmp = NULL;
259 if (i915_has_memcpy_from_wc())
260 c->tmp = pool_alloc(&c->pool, ALLOW_FAIL);
261
262 return true;
263}
264
265static bool compress_start(struct i915_vma_compress *c)
266{
267 struct z_stream_s *zstream = &c->zstream;
268 void *workspace = zstream->workspace;
269
270 memset(zstream, 0, sizeof(*zstream));
271 zstream->workspace = workspace;
272
273 return zlib_deflateInit(zstream, Z_DEFAULT_COMPRESSION) == Z_OK;
274}
275
276static void *compress_next_page(struct i915_vma_compress *c,
277 struct i915_vma_coredump *dst)
278{
279 void *page;
280
281 if (dst->page_count >= dst->num_pages)
282 return ERR_PTR(-ENOSPC);
283
284 page = pool_alloc(&c->pool, ALLOW_FAIL);
285 if (!page)
286 return ERR_PTR(-ENOMEM);
287
288 return dst->pages[dst->page_count++] = page;
289}
290
291static int compress_page(struct i915_vma_compress *c,
292 void *src,
293 struct i915_vma_coredump *dst,
294 bool wc)
295{
296 struct z_stream_s *zstream = &c->zstream;
297
298 zstream->next_in = src;
299 if (wc && c->tmp && i915_memcpy_from_wc(c->tmp, src, PAGE_SIZE))
300 zstream->next_in = c->tmp;
301 zstream->avail_in = PAGE_SIZE;
302
303 do {
304 if (zstream->avail_out == 0) {
305 zstream->next_out = compress_next_page(c, dst);
306 if (IS_ERR(zstream->next_out))
307 return PTR_ERR(zstream->next_out);
308
309 zstream->avail_out = PAGE_SIZE;
310 }
311
312 if (zlib_deflate(zstream, Z_NO_FLUSH) != Z_OK)
313 return -EIO;
314 } while (zstream->avail_in);
315
316 /* Fallback to uncompressed if we increase size? */
317 if (0 && zstream->total_out > zstream->total_in)
318 return -E2BIG;
319
320 return 0;
321}
322
323static int compress_flush(struct i915_vma_compress *c,
324 struct i915_vma_coredump *dst)
325{
326 struct z_stream_s *zstream = &c->zstream;
327
328 do {
329 switch (zlib_deflate(zstream, Z_FINISH)) {
330 case Z_OK: /* more space requested */
331 zstream->next_out = compress_next_page(c, dst);
332 if (IS_ERR(zstream->next_out))
333 return PTR_ERR(zstream->next_out);
334
335 zstream->avail_out = PAGE_SIZE;
336 break;
337
338 case Z_STREAM_END:
339 goto end;
340
341 default: /* any error */
342 return -EIO;
343 }
344 } while (1);
345
346end:
347 memset(zstream->next_out, 0, zstream->avail_out);
348 dst->unused = zstream->avail_out;
349 return 0;
350}
351
352static void compress_finish(struct i915_vma_compress *c)
353{
354 zlib_deflateEnd(&c->zstream);
355}
356
357static void compress_fini(struct i915_vma_compress *c)
358{
359 kfree(c->zstream.workspace);
360 if (c->tmp)
361 pool_free(&c->pool, c->tmp);
362 pool_fini(&c->pool);
363}
364
365static void err_compression_marker(struct drm_i915_error_state_buf *m)
366{
367 err_puts(m, ":");
368}
369
370#else
371
372struct i915_vma_compress {
373 struct pagevec pool;
374};
375
376static bool compress_init(struct i915_vma_compress *c)
377{
378 return pool_init(&c->pool, ALLOW_FAIL) == 0;
379}
380
381static bool compress_start(struct i915_vma_compress *c)
382{
383 return true;
384}
385
386static int compress_page(struct i915_vma_compress *c,
387 void *src,
388 struct i915_vma_coredump *dst,
389 bool wc)
390{
391 void *ptr;
392
393 ptr = pool_alloc(&c->pool, ALLOW_FAIL);
394 if (!ptr)
395 return -ENOMEM;
396
397 if (!(wc && i915_memcpy_from_wc(ptr, src, PAGE_SIZE)))
398 memcpy(ptr, src, PAGE_SIZE);
399 dst->pages[dst->page_count++] = ptr;
400
401 return 0;
402}
403
404static int compress_flush(struct i915_vma_compress *c,
405 struct i915_vma_coredump *dst)
406{
407 return 0;
408}
409
410static void compress_finish(struct i915_vma_compress *c)
411{
412}
413
414static void compress_fini(struct i915_vma_compress *c)
415{
416 pool_fini(&c->pool);
417}
418
419static void err_compression_marker(struct drm_i915_error_state_buf *m)
420{
421 err_puts(m, "~");
422}
423
424#endif
425
426static void error_print_instdone(struct drm_i915_error_state_buf *m,
427 const struct intel_engine_coredump *ee)
428{
429 const struct sseu_dev_info *sseu = &ee->engine->gt->info.sseu;
430 int slice;
431 int subslice;
432
433 err_printf(m, " INSTDONE: 0x%08x\n",
434 ee->instdone.instdone);
435
436 if (ee->engine->class != RENDER_CLASS || INTEL_GEN(m->i915) <= 3)
437 return;
438
439 err_printf(m, " SC_INSTDONE: 0x%08x\n",
440 ee->instdone.slice_common);
441
442 if (INTEL_GEN(m->i915) <= 6)
443 return;
444
445 for_each_instdone_slice_subslice(m->i915, sseu, slice, subslice)
446 err_printf(m, " SAMPLER_INSTDONE[%d][%d]: 0x%08x\n",
447 slice, subslice,
448 ee->instdone.sampler[slice][subslice]);
449
450 for_each_instdone_slice_subslice(m->i915, sseu, slice, subslice)
451 err_printf(m, " ROW_INSTDONE[%d][%d]: 0x%08x\n",
452 slice, subslice,
453 ee->instdone.row[slice][subslice]);
454
455 if (INTEL_GEN(m->i915) < 12)
456 return;
457
458 err_printf(m, " SC_INSTDONE_EXTRA: 0x%08x\n",
459 ee->instdone.slice_common_extra[0]);
460 err_printf(m, " SC_INSTDONE_EXTRA2: 0x%08x\n",
461 ee->instdone.slice_common_extra[1]);
462}
463
464static void error_print_request(struct drm_i915_error_state_buf *m,
465 const char *prefix,
466 const struct i915_request_coredump *erq)
467{
468 if (!erq->seqno)
469 return;
470
471 err_printf(m, "%s pid %d, seqno %8x:%08x%s%s, prio %d, head %08x, tail %08x\n",
472 prefix, erq->pid, erq->context, erq->seqno,
473 test_bit(DMA_FENCE_FLAG_SIGNALED_BIT,
474 &erq->flags) ? "!" : "",
475 test_bit(DMA_FENCE_FLAG_ENABLE_SIGNAL_BIT,
476 &erq->flags) ? "+" : "",
477 erq->sched_attr.priority,
478 erq->head, erq->tail);
479}
480
481static void error_print_context(struct drm_i915_error_state_buf *m,
482 const char *header,
483 const struct i915_gem_context_coredump *ctx)
484{
485 const u32 period = RUNTIME_INFO(m->i915)->cs_timestamp_period_ns;
486
487 err_printf(m, "%s%s[%d] prio %d, guilty %d active %d, runtime total %lluns, avg %lluns\n",
488 header, ctx->comm, ctx->pid, ctx->sched_attr.priority,
489 ctx->guilty, ctx->active,
490 ctx->total_runtime * period,
491 mul_u32_u32(ctx->avg_runtime, period));
492}
493
494static struct i915_vma_coredump *
495__find_vma(struct i915_vma_coredump *vma, const char *name)
496{
497 while (vma) {
498 if (strcmp(vma->name, name) == 0)
499 return vma;
500 vma = vma->next;
501 }
502
503 return NULL;
504}
505
506static struct i915_vma_coredump *
507find_batch(const struct intel_engine_coredump *ee)
508{
509 return __find_vma(ee->vma, "batch");
510}
511
512static void error_print_engine(struct drm_i915_error_state_buf *m,
513 const struct intel_engine_coredump *ee)
514{
515 struct i915_vma_coredump *batch;
516 int n;
517
518 err_printf(m, "%s command stream:\n", ee->engine->name);
519 err_printf(m, " CCID: 0x%08x\n", ee->ccid);
520 err_printf(m, " START: 0x%08x\n", ee->start);
521 err_printf(m, " HEAD: 0x%08x [0x%08x]\n", ee->head, ee->rq_head);
522 err_printf(m, " TAIL: 0x%08x [0x%08x, 0x%08x]\n",
523 ee->tail, ee->rq_post, ee->rq_tail);
524 err_printf(m, " CTL: 0x%08x\n", ee->ctl);
525 err_printf(m, " MODE: 0x%08x\n", ee->mode);
526 err_printf(m, " HWS: 0x%08x\n", ee->hws);
527 err_printf(m, " ACTHD: 0x%08x %08x\n",
528 (u32)(ee->acthd>>32), (u32)ee->acthd);
529 err_printf(m, " IPEIR: 0x%08x\n", ee->ipeir);
530 err_printf(m, " IPEHR: 0x%08x\n", ee->ipehr);
531 err_printf(m, " ESR: 0x%08x\n", ee->esr);
532
533 error_print_instdone(m, ee);
534
535 batch = find_batch(ee);
536 if (batch) {
537 u64 start = batch->gtt_offset;
538 u64 end = start + batch->gtt_size;
539
540 err_printf(m, " batch: [0x%08x_%08x, 0x%08x_%08x]\n",
541 upper_32_bits(start), lower_32_bits(start),
542 upper_32_bits(end), lower_32_bits(end));
543 }
544 if (INTEL_GEN(m->i915) >= 4) {
545 err_printf(m, " BBADDR: 0x%08x_%08x\n",
546 (u32)(ee->bbaddr>>32), (u32)ee->bbaddr);
547 err_printf(m, " BB_STATE: 0x%08x\n", ee->bbstate);
548 err_printf(m, " INSTPS: 0x%08x\n", ee->instps);
549 }
550 err_printf(m, " INSTPM: 0x%08x\n", ee->instpm);
551 err_printf(m, " FADDR: 0x%08x %08x\n", upper_32_bits(ee->faddr),
552 lower_32_bits(ee->faddr));
553 if (INTEL_GEN(m->i915) >= 6) {
554 err_printf(m, " RC PSMI: 0x%08x\n", ee->rc_psmi);
555 err_printf(m, " FAULT_REG: 0x%08x\n", ee->fault_reg);
556 }
557 if (HAS_PPGTT(m->i915)) {
558 err_printf(m, " GFX_MODE: 0x%08x\n", ee->vm_info.gfx_mode);
559
560 if (INTEL_GEN(m->i915) >= 8) {
561 int i;
562 for (i = 0; i < 4; i++)
563 err_printf(m, " PDP%d: 0x%016llx\n",
564 i, ee->vm_info.pdp[i]);
565 } else {
566 err_printf(m, " PP_DIR_BASE: 0x%08x\n",
567 ee->vm_info.pp_dir_base);
568 }
569 }
570 err_printf(m, " engine reset count: %u\n", ee->reset_count);
571
572 for (n = 0; n < ee->num_ports; n++) {
573 err_printf(m, " ELSP[%d]:", n);
574 error_print_request(m, " ", &ee->execlist[n]);
575 }
576
577 error_print_context(m, " Active context: ", &ee->context);
578}
579
580void i915_error_printf(struct drm_i915_error_state_buf *e, const char *f, ...)
581{
582 va_list args;
583
584 va_start(args, f);
585 i915_error_vprintf(e, f, args);
586 va_end(args);
587}
588
589static void print_error_vma(struct drm_i915_error_state_buf *m,
590 const struct intel_engine_cs *engine,
591 const struct i915_vma_coredump *vma)
592{
593 char out[ASCII85_BUFSZ];
594 int page;
595
596 if (!vma)
597 return;
598
599 err_printf(m, "%s --- %s = 0x%08x %08x\n",
600 engine ? engine->name : "global", vma->name,
601 upper_32_bits(vma->gtt_offset),
602 lower_32_bits(vma->gtt_offset));
603
604 if (vma->gtt_page_sizes > I915_GTT_PAGE_SIZE_4K)
605 err_printf(m, "gtt_page_sizes = 0x%08x\n", vma->gtt_page_sizes);
606
607 err_compression_marker(m);
608 for (page = 0; page < vma->page_count; page++) {
609 int i, len;
610
611 len = PAGE_SIZE;
612 if (page == vma->page_count - 1)
613 len -= vma->unused;
614 len = ascii85_encode_len(len);
615
616 for (i = 0; i < len; i++)
617 err_puts(m, ascii85_encode(vma->pages[page][i], out));
618 }
619 err_puts(m, "\n");
620}
621
622static void err_print_capabilities(struct drm_i915_error_state_buf *m,
623 struct i915_gpu_coredump *error)
624{
625 struct drm_printer p = i915_error_printer(m);
626
627 intel_device_info_print_static(&error->device_info, &p);
628 intel_device_info_print_runtime(&error->runtime_info, &p);
629 intel_driver_caps_print(&error->driver_caps, &p);
630}
631
632static void err_print_params(struct drm_i915_error_state_buf *m,
633 const struct i915_params *params)
634{
635 struct drm_printer p = i915_error_printer(m);
636
637 i915_params_dump(params, &p);
638}
639
640static void err_print_pciid(struct drm_i915_error_state_buf *m,
641 struct drm_i915_private *i915)
642{
643 struct pci_dev *pdev = i915->drm.pdev;
644
645 err_printf(m, "PCI ID: 0x%04x\n", pdev->device);
646 err_printf(m, "PCI Revision: 0x%02x\n", pdev->revision);
647 err_printf(m, "PCI Subsystem: %04x:%04x\n",
648 pdev->subsystem_vendor,
649 pdev->subsystem_device);
650}
651
652static void err_print_uc(struct drm_i915_error_state_buf *m,
653 const struct intel_uc_coredump *error_uc)
654{
655 struct drm_printer p = i915_error_printer(m);
656
657 intel_uc_fw_dump(&error_uc->guc_fw, &p);
658 intel_uc_fw_dump(&error_uc->huc_fw, &p);
659 print_error_vma(m, NULL, error_uc->guc_log);
660}
661
662static void err_free_sgl(struct scatterlist *sgl)
663{
664 while (sgl) {
665 struct scatterlist *sg;
666
667 for (sg = sgl; !sg_is_chain(sg); sg++) {
668 kfree(sg_virt(sg));
669 if (sg_is_last(sg))
670 break;
671 }
672
673 sg = sg_is_last(sg) ? NULL : sg_chain_ptr(sg);
674 free_page((unsigned long)sgl);
675 sgl = sg;
676 }
677}
678
679static void err_print_gt_info(struct drm_i915_error_state_buf *m,
680 struct intel_gt_coredump *gt)
681{
682 struct drm_printer p = i915_error_printer(m);
683
684 intel_gt_info_print(>->info, &p);
685 intel_sseu_print_topology(>->info.sseu, &p);
686}
687
688static void err_print_gt(struct drm_i915_error_state_buf *m,
689 struct intel_gt_coredump *gt)
690{
691 const struct intel_engine_coredump *ee;
692 int i;
693
694 err_printf(m, "GT awake: %s\n", yesno(gt->awake));
695 err_printf(m, "EIR: 0x%08x\n", gt->eir);
696 err_printf(m, "IER: 0x%08x\n", gt->ier);
697 for (i = 0; i < gt->ngtier; i++)
698 err_printf(m, "GTIER[%d]: 0x%08x\n", i, gt->gtier[i]);
699 err_printf(m, "PGTBL_ER: 0x%08x\n", gt->pgtbl_er);
700 err_printf(m, "FORCEWAKE: 0x%08x\n", gt->forcewake);
701 err_printf(m, "DERRMR: 0x%08x\n", gt->derrmr);
702
703 for (i = 0; i < gt->nfence; i++)
704 err_printf(m, " fence[%d] = %08llx\n", i, gt->fence[i]);
705
706 if (IS_GEN_RANGE(m->i915, 6, 11)) {
707 err_printf(m, "ERROR: 0x%08x\n", gt->error);
708 err_printf(m, "DONE_REG: 0x%08x\n", gt->done_reg);
709 }
710
711 if (INTEL_GEN(m->i915) >= 8)
712 err_printf(m, "FAULT_TLB_DATA: 0x%08x 0x%08x\n",
713 gt->fault_data1, gt->fault_data0);
714
715 if (IS_GEN(m->i915, 7))
716 err_printf(m, "ERR_INT: 0x%08x\n", gt->err_int);
717
718 if (IS_GEN_RANGE(m->i915, 8, 11))
719 err_printf(m, "GTT_CACHE_EN: 0x%08x\n", gt->gtt_cache);
720
721 if (IS_GEN(m->i915, 12))
722 err_printf(m, "AUX_ERR_DBG: 0x%08x\n", gt->aux_err);
723
724 if (INTEL_GEN(m->i915) >= 12) {
725 int i;
726
727 for (i = 0; i < GEN12_SFC_DONE_MAX; i++)
728 err_printf(m, " SFC_DONE[%d]: 0x%08x\n", i,
729 gt->sfc_done[i]);
730
731 err_printf(m, " GAM_DONE: 0x%08x\n", gt->gam_done);
732 }
733
734 for (ee = gt->engine; ee; ee = ee->next) {
735 const struct i915_vma_coredump *vma;
736
737 error_print_engine(m, ee);
738 for (vma = ee->vma; vma; vma = vma->next)
739 print_error_vma(m, ee->engine, vma);
740 }
741
742 if (gt->uc)
743 err_print_uc(m, gt->uc);
744
745 err_print_gt_info(m, gt);
746}
747
748static void __err_print_to_sgl(struct drm_i915_error_state_buf *m,
749 struct i915_gpu_coredump *error)
750{
751 const struct intel_engine_coredump *ee;
752 struct timespec64 ts;
753
754 if (*error->error_msg)
755 err_printf(m, "%s\n", error->error_msg);
756 err_printf(m, "Kernel: %s %s\n",
757 init_utsname()->release,
758 init_utsname()->machine);
759 err_printf(m, "Driver: %s\n", DRIVER_DATE);
760 ts = ktime_to_timespec64(error->time);
761 err_printf(m, "Time: %lld s %ld us\n",
762 (s64)ts.tv_sec, ts.tv_nsec / NSEC_PER_USEC);
763 ts = ktime_to_timespec64(error->boottime);
764 err_printf(m, "Boottime: %lld s %ld us\n",
765 (s64)ts.tv_sec, ts.tv_nsec / NSEC_PER_USEC);
766 ts = ktime_to_timespec64(error->uptime);
767 err_printf(m, "Uptime: %lld s %ld us\n",
768 (s64)ts.tv_sec, ts.tv_nsec / NSEC_PER_USEC);
769 err_printf(m, "Capture: %lu jiffies; %d ms ago\n",
770 error->capture, jiffies_to_msecs(jiffies - error->capture));
771
772 for (ee = error->gt ? error->gt->engine : NULL; ee; ee = ee->next)
773 err_printf(m, "Active process (on ring %s): %s [%d]\n",
774 ee->engine->name,
775 ee->context.comm,
776 ee->context.pid);
777
778 err_printf(m, "Reset count: %u\n", error->reset_count);
779 err_printf(m, "Suspend count: %u\n", error->suspend_count);
780 err_printf(m, "Platform: %s\n", intel_platform_name(error->device_info.platform));
781 err_printf(m, "Subplatform: 0x%x\n",
782 intel_subplatform(&error->runtime_info,
783 error->device_info.platform));
784 err_print_pciid(m, m->i915);
785
786 err_printf(m, "IOMMU enabled?: %d\n", error->iommu);
787
788 if (HAS_CSR(m->i915)) {
789 struct intel_csr *csr = &m->i915->csr;
790
791 err_printf(m, "DMC loaded: %s\n",
792 yesno(csr->dmc_payload != NULL));
793 err_printf(m, "DMC fw version: %d.%d\n",
794 CSR_VERSION_MAJOR(csr->version),
795 CSR_VERSION_MINOR(csr->version));
796 }
797
798 err_printf(m, "RPM wakelock: %s\n", yesno(error->wakelock));
799 err_printf(m, "PM suspended: %s\n", yesno(error->suspended));
800
801 if (error->gt)
802 err_print_gt(m, error->gt);
803
804 if (error->overlay)
805 intel_overlay_print_error_state(m, error->overlay);
806
807 if (error->display)
808 intel_display_print_error_state(m, error->display);
809
810 err_print_capabilities(m, error);
811 err_print_params(m, &error->params);
812}
813
814static int err_print_to_sgl(struct i915_gpu_coredump *error)
815{
816 struct drm_i915_error_state_buf m;
817
818 if (IS_ERR(error))
819 return PTR_ERR(error);
820
821 if (READ_ONCE(error->sgl))
822 return 0;
823
824 memset(&m, 0, sizeof(m));
825 m.i915 = error->i915;
826
827 __err_print_to_sgl(&m, error);
828
829 if (m.buf) {
830 __sg_set_buf(m.cur++, m.buf, m.bytes, m.iter);
831 m.bytes = 0;
832 m.buf = NULL;
833 }
834 if (m.cur) {
835 GEM_BUG_ON(m.end < m.cur);
836 sg_mark_end(m.cur - 1);
837 }
838 GEM_BUG_ON(m.sgl && !m.cur);
839
840 if (m.err) {
841 err_free_sgl(m.sgl);
842 return m.err;
843 }
844
845 if (cmpxchg(&error->sgl, NULL, m.sgl))
846 err_free_sgl(m.sgl);
847
848 return 0;
849}
850
851ssize_t i915_gpu_coredump_copy_to_buffer(struct i915_gpu_coredump *error,
852 char *buf, loff_t off, size_t rem)
853{
854 struct scatterlist *sg;
855 size_t count;
856 loff_t pos;
857 int err;
858
859 if (!error || !rem)
860 return 0;
861
862 err = err_print_to_sgl(error);
863 if (err)
864 return err;
865
866 sg = READ_ONCE(error->fit);
867 if (!sg || off < sg->dma_address)
868 sg = error->sgl;
869 if (!sg)
870 return 0;
871
872 pos = sg->dma_address;
873 count = 0;
874 do {
875 size_t len, start;
876
877 if (sg_is_chain(sg)) {
878 sg = sg_chain_ptr(sg);
879 GEM_BUG_ON(sg_is_chain(sg));
880 }
881
882 len = sg->length;
883 if (pos + len <= off) {
884 pos += len;
885 continue;
886 }
887
888 start = sg->offset;
889 if (pos < off) {
890 GEM_BUG_ON(off - pos > len);
891 len -= off - pos;
892 start += off - pos;
893 pos = off;
894 }
895
896 len = min(len, rem);
897 GEM_BUG_ON(!len || len > sg->length);
898
899 memcpy(buf, page_address(sg_page(sg)) + start, len);
900
901 count += len;
902 pos += len;
903
904 buf += len;
905 rem -= len;
906 if (!rem) {
907 WRITE_ONCE(error->fit, sg);
908 break;
909 }
910 } while (!sg_is_last(sg++));
911
912 return count;
913}
914
915static void i915_vma_coredump_free(struct i915_vma_coredump *vma)
916{
917 while (vma) {
918 struct i915_vma_coredump *next = vma->next;
919 int page;
920
921 for (page = 0; page < vma->page_count; page++)
922 free_page((unsigned long)vma->pages[page]);
923
924 kfree(vma);
925 vma = next;
926 }
927}
928
929static void cleanup_params(struct i915_gpu_coredump *error)
930{
931 i915_params_free(&error->params);
932}
933
934static void cleanup_uc(struct intel_uc_coredump *uc)
935{
936 kfree(uc->guc_fw.path);
937 kfree(uc->huc_fw.path);
938 i915_vma_coredump_free(uc->guc_log);
939
940 kfree(uc);
941}
942
943static void cleanup_gt(struct intel_gt_coredump *gt)
944{
945 while (gt->engine) {
946 struct intel_engine_coredump *ee = gt->engine;
947
948 gt->engine = ee->next;
949
950 i915_vma_coredump_free(ee->vma);
951 kfree(ee);
952 }
953
954 if (gt->uc)
955 cleanup_uc(gt->uc);
956
957 kfree(gt);
958}
959
960void __i915_gpu_coredump_free(struct kref *error_ref)
961{
962 struct i915_gpu_coredump *error =
963 container_of(error_ref, typeof(*error), ref);
964
965 while (error->gt) {
966 struct intel_gt_coredump *gt = error->gt;
967
968 error->gt = gt->next;
969 cleanup_gt(gt);
970 }
971
972 kfree(error->overlay);
973 kfree(error->display);
974
975 cleanup_params(error);
976
977 err_free_sgl(error->sgl);
978 kfree(error);
979}
980
981static struct i915_vma_coredump *
982i915_vma_coredump_create(const struct intel_gt *gt,
983 const struct i915_vma *vma,
984 const char *name,
985 struct i915_vma_compress *compress)
986{
987 struct i915_ggtt *ggtt = gt->ggtt;
988 const u64 slot = ggtt->error_capture.start;
989 struct i915_vma_coredump *dst;
990 unsigned long num_pages;
991 struct sgt_iter iter;
992 int ret;
993
994 might_sleep();
995
996 if (!vma || !vma->pages || !compress)
997 return NULL;
998
999 num_pages = min_t(u64, vma->size, vma->obj->base.size) >> PAGE_SHIFT;
1000 num_pages = DIV_ROUND_UP(10 * num_pages, 8); /* worstcase zlib growth */
1001 dst = kmalloc(sizeof(*dst) + num_pages * sizeof(u32 *), ALLOW_FAIL);
1002 if (!dst)
1003 return NULL;
1004
1005 if (!compress_start(compress)) {
1006 kfree(dst);
1007 return NULL;
1008 }
1009
1010 strcpy(dst->name, name);
1011 dst->next = NULL;
1012
1013 dst->gtt_offset = vma->node.start;
1014 dst->gtt_size = vma->node.size;
1015 dst->gtt_page_sizes = vma->page_sizes.gtt;
1016 dst->num_pages = num_pages;
1017 dst->page_count = 0;
1018 dst->unused = 0;
1019
1020 ret = -EINVAL;
1021 if (drm_mm_node_allocated(&ggtt->error_capture)) {
1022 void __iomem *s;
1023 dma_addr_t dma;
1024
1025 for_each_sgt_daddr(dma, iter, vma->pages) {
1026 ggtt->vm.insert_page(&ggtt->vm, dma, slot,
1027 I915_CACHE_NONE, 0);
1028 mb();
1029
1030 s = io_mapping_map_wc(&ggtt->iomap, slot, PAGE_SIZE);
1031 ret = compress_page(compress,
1032 (void __force *)s, dst,
1033 true);
1034 io_mapping_unmap(s);
1035 if (ret)
1036 break;
1037 }
1038 } else if (i915_gem_object_is_lmem(vma->obj)) {
1039 struct intel_memory_region *mem = vma->obj->mm.region;
1040 dma_addr_t dma;
1041
1042 for_each_sgt_daddr(dma, iter, vma->pages) {
1043 void __iomem *s;
1044
1045 s = io_mapping_map_wc(&mem->iomap, dma, PAGE_SIZE);
1046 ret = compress_page(compress,
1047 (void __force *)s, dst,
1048 true);
1049 io_mapping_unmap(s);
1050 if (ret)
1051 break;
1052 }
1053 } else {
1054 struct page *page;
1055
1056 for_each_sgt_page(page, iter, vma->pages) {
1057 void *s;
1058
1059 drm_clflush_pages(&page, 1);
1060
1061 s = kmap(page);
1062 ret = compress_page(compress, s, dst, false);
1063 kunmap(page);
1064
1065 drm_clflush_pages(&page, 1);
1066
1067 if (ret)
1068 break;
1069 }
1070 }
1071
1072 if (ret || compress_flush(compress, dst)) {
1073 while (dst->page_count--)
1074 pool_free(&compress->pool, dst->pages[dst->page_count]);
1075 kfree(dst);
1076 dst = NULL;
1077 }
1078 compress_finish(compress);
1079
1080 return dst;
1081}
1082
1083static void gt_record_fences(struct intel_gt_coredump *gt)
1084{
1085 struct i915_ggtt *ggtt = gt->_gt->ggtt;
1086 struct intel_uncore *uncore = gt->_gt->uncore;
1087 int i;
1088
1089 if (INTEL_GEN(uncore->i915) >= 6) {
1090 for (i = 0; i < ggtt->num_fences; i++)
1091 gt->fence[i] =
1092 intel_uncore_read64(uncore,
1093 FENCE_REG_GEN6_LO(i));
1094 } else if (INTEL_GEN(uncore->i915) >= 4) {
1095 for (i = 0; i < ggtt->num_fences; i++)
1096 gt->fence[i] =
1097 intel_uncore_read64(uncore,
1098 FENCE_REG_965_LO(i));
1099 } else {
1100 for (i = 0; i < ggtt->num_fences; i++)
1101 gt->fence[i] =
1102 intel_uncore_read(uncore, FENCE_REG(i));
1103 }
1104 gt->nfence = i;
1105}
1106
1107static void engine_record_registers(struct intel_engine_coredump *ee)
1108{
1109 const struct intel_engine_cs *engine = ee->engine;
1110 struct drm_i915_private *i915 = engine->i915;
1111
1112 if (INTEL_GEN(i915) >= 6) {
1113 ee->rc_psmi = ENGINE_READ(engine, RING_PSMI_CTL);
1114
1115 if (INTEL_GEN(i915) >= 12)
1116 ee->fault_reg = intel_uncore_read(engine->uncore,
1117 GEN12_RING_FAULT_REG);
1118 else if (INTEL_GEN(i915) >= 8)
1119 ee->fault_reg = intel_uncore_read(engine->uncore,
1120 GEN8_RING_FAULT_REG);
1121 else
1122 ee->fault_reg = GEN6_RING_FAULT_REG_READ(engine);
1123 }
1124
1125 if (INTEL_GEN(i915) >= 4) {
1126 ee->esr = ENGINE_READ(engine, RING_ESR);
1127 ee->faddr = ENGINE_READ(engine, RING_DMA_FADD);
1128 ee->ipeir = ENGINE_READ(engine, RING_IPEIR);
1129 ee->ipehr = ENGINE_READ(engine, RING_IPEHR);
1130 ee->instps = ENGINE_READ(engine, RING_INSTPS);
1131 ee->bbaddr = ENGINE_READ(engine, RING_BBADDR);
1132 ee->ccid = ENGINE_READ(engine, CCID);
1133 if (INTEL_GEN(i915) >= 8) {
1134 ee->faddr |= (u64)ENGINE_READ(engine, RING_DMA_FADD_UDW) << 32;
1135 ee->bbaddr |= (u64)ENGINE_READ(engine, RING_BBADDR_UDW) << 32;
1136 }
1137 ee->bbstate = ENGINE_READ(engine, RING_BBSTATE);
1138 } else {
1139 ee->faddr = ENGINE_READ(engine, DMA_FADD_I8XX);
1140 ee->ipeir = ENGINE_READ(engine, IPEIR);
1141 ee->ipehr = ENGINE_READ(engine, IPEHR);
1142 }
1143
1144 intel_engine_get_instdone(engine, &ee->instdone);
1145
1146 ee->instpm = ENGINE_READ(engine, RING_INSTPM);
1147 ee->acthd = intel_engine_get_active_head(engine);
1148 ee->start = ENGINE_READ(engine, RING_START);
1149 ee->head = ENGINE_READ(engine, RING_HEAD);
1150 ee->tail = ENGINE_READ(engine, RING_TAIL);
1151 ee->ctl = ENGINE_READ(engine, RING_CTL);
1152 if (INTEL_GEN(i915) > 2)
1153 ee->mode = ENGINE_READ(engine, RING_MI_MODE);
1154
1155 if (!HWS_NEEDS_PHYSICAL(i915)) {
1156 i915_reg_t mmio;
1157
1158 if (IS_GEN(i915, 7)) {
1159 switch (engine->id) {
1160 default:
1161 MISSING_CASE(engine->id);
1162 fallthrough;
1163 case RCS0:
1164 mmio = RENDER_HWS_PGA_GEN7;
1165 break;
1166 case BCS0:
1167 mmio = BLT_HWS_PGA_GEN7;
1168 break;
1169 case VCS0:
1170 mmio = BSD_HWS_PGA_GEN7;
1171 break;
1172 case VECS0:
1173 mmio = VEBOX_HWS_PGA_GEN7;
1174 break;
1175 }
1176 } else if (IS_GEN(engine->i915, 6)) {
1177 mmio = RING_HWS_PGA_GEN6(engine->mmio_base);
1178 } else {
1179 /* XXX: gen8 returns to sanity */
1180 mmio = RING_HWS_PGA(engine->mmio_base);
1181 }
1182
1183 ee->hws = intel_uncore_read(engine->uncore, mmio);
1184 }
1185
1186 ee->reset_count = i915_reset_engine_count(&i915->gpu_error, engine);
1187
1188 if (HAS_PPGTT(i915)) {
1189 int i;
1190
1191 ee->vm_info.gfx_mode = ENGINE_READ(engine, RING_MODE_GEN7);
1192
1193 if (IS_GEN(i915, 6)) {
1194 ee->vm_info.pp_dir_base =
1195 ENGINE_READ(engine, RING_PP_DIR_BASE_READ);
1196 } else if (IS_GEN(i915, 7)) {
1197 ee->vm_info.pp_dir_base =
1198 ENGINE_READ(engine, RING_PP_DIR_BASE);
1199 } else if (INTEL_GEN(i915) >= 8) {
1200 u32 base = engine->mmio_base;
1201
1202 for (i = 0; i < 4; i++) {
1203 ee->vm_info.pdp[i] =
1204 intel_uncore_read(engine->uncore,
1205 GEN8_RING_PDP_UDW(base, i));
1206 ee->vm_info.pdp[i] <<= 32;
1207 ee->vm_info.pdp[i] |=
1208 intel_uncore_read(engine->uncore,
1209 GEN8_RING_PDP_LDW(base, i));
1210 }
1211 }
1212 }
1213}
1214
1215static void record_request(const struct i915_request *request,
1216 struct i915_request_coredump *erq)
1217{
1218 erq->flags = request->fence.flags;
1219 erq->context = request->fence.context;
1220 erq->seqno = request->fence.seqno;
1221 erq->sched_attr = request->sched.attr;
1222 erq->head = request->head;
1223 erq->tail = request->tail;
1224
1225 erq->pid = 0;
1226 rcu_read_lock();
1227 if (!intel_context_is_closed(request->context)) {
1228 const struct i915_gem_context *ctx;
1229
1230 ctx = rcu_dereference(request->context->gem_context);
1231 if (ctx)
1232 erq->pid = pid_nr(ctx->pid);
1233 }
1234 rcu_read_unlock();
1235}
1236
1237static void engine_record_execlists(struct intel_engine_coredump *ee)
1238{
1239 const struct intel_engine_execlists * const el = &ee->engine->execlists;
1240 struct i915_request * const *port = el->active;
1241 unsigned int n = 0;
1242
1243 while (*port)
1244 record_request(*port++, &ee->execlist[n++]);
1245
1246 ee->num_ports = n;
1247}
1248
1249static bool record_context(struct i915_gem_context_coredump *e,
1250 const struct i915_request *rq)
1251{
1252 struct i915_gem_context *ctx;
1253 struct task_struct *task;
1254 bool simulated;
1255
1256 rcu_read_lock();
1257 ctx = rcu_dereference(rq->context->gem_context);
1258 if (ctx && !kref_get_unless_zero(&ctx->ref))
1259 ctx = NULL;
1260 rcu_read_unlock();
1261 if (!ctx)
1262 return true;
1263
1264 rcu_read_lock();
1265 task = pid_task(ctx->pid, PIDTYPE_PID);
1266 if (task) {
1267 strcpy(e->comm, task->comm);
1268 e->pid = task->pid;
1269 }
1270 rcu_read_unlock();
1271
1272 e->sched_attr = ctx->sched;
1273 e->guilty = atomic_read(&ctx->guilty_count);
1274 e->active = atomic_read(&ctx->active_count);
1275
1276 e->total_runtime = rq->context->runtime.total;
1277 e->avg_runtime = ewma_runtime_read(&rq->context->runtime.avg);
1278
1279 simulated = i915_gem_context_no_error_capture(ctx);
1280
1281 i915_gem_context_put(ctx);
1282 return simulated;
1283}
1284
1285struct intel_engine_capture_vma {
1286 struct intel_engine_capture_vma *next;
1287 struct i915_vma *vma;
1288 char name[16];
1289};
1290
1291static struct intel_engine_capture_vma *
1292capture_vma(struct intel_engine_capture_vma *next,
1293 struct i915_vma *vma,
1294 const char *name,
1295 gfp_t gfp)
1296{
1297 struct intel_engine_capture_vma *c;
1298
1299 if (!vma)
1300 return next;
1301
1302 c = kmalloc(sizeof(*c), gfp);
1303 if (!c)
1304 return next;
1305
1306 if (!i915_active_acquire_if_busy(&vma->active)) {
1307 kfree(c);
1308 return next;
1309 }
1310
1311 strcpy(c->name, name);
1312 c->vma = i915_vma_get(vma);
1313
1314 c->next = next;
1315 return c;
1316}
1317
1318static struct intel_engine_capture_vma *
1319capture_user(struct intel_engine_capture_vma *capture,
1320 const struct i915_request *rq,
1321 gfp_t gfp)
1322{
1323 struct i915_capture_list *c;
1324
1325 for (c = rq->capture_list; c; c = c->next)
1326 capture = capture_vma(capture, c->vma, "user", gfp);
1327
1328 return capture;
1329}
1330
1331static void add_vma(struct intel_engine_coredump *ee,
1332 struct i915_vma_coredump *vma)
1333{
1334 if (vma) {
1335 vma->next = ee->vma;
1336 ee->vma = vma;
1337 }
1338}
1339
1340struct intel_engine_coredump *
1341intel_engine_coredump_alloc(struct intel_engine_cs *engine, gfp_t gfp)
1342{
1343 struct intel_engine_coredump *ee;
1344
1345 ee = kzalloc(sizeof(*ee), gfp);
1346 if (!ee)
1347 return NULL;
1348
1349 ee->engine = engine;
1350
1351 engine_record_registers(ee);
1352 engine_record_execlists(ee);
1353
1354 return ee;
1355}
1356
1357struct intel_engine_capture_vma *
1358intel_engine_coredump_add_request(struct intel_engine_coredump *ee,
1359 struct i915_request *rq,
1360 gfp_t gfp)
1361{
1362 struct intel_engine_capture_vma *vma = NULL;
1363
1364 ee->simulated |= record_context(&ee->context, rq);
1365 if (ee->simulated)
1366 return NULL;
1367
1368 /*
1369 * We need to copy these to an anonymous buffer
1370 * as the simplest method to avoid being overwritten
1371 * by userspace.
1372 */
1373 vma = capture_vma(vma, rq->batch, "batch", gfp);
1374 vma = capture_user(vma, rq, gfp);
1375 vma = capture_vma(vma, rq->ring->vma, "ring", gfp);
1376 vma = capture_vma(vma, rq->context->state, "HW context", gfp);
1377
1378 ee->rq_head = rq->head;
1379 ee->rq_post = rq->postfix;
1380 ee->rq_tail = rq->tail;
1381
1382 return vma;
1383}
1384
1385void
1386intel_engine_coredump_add_vma(struct intel_engine_coredump *ee,
1387 struct intel_engine_capture_vma *capture,
1388 struct i915_vma_compress *compress)
1389{
1390 const struct intel_engine_cs *engine = ee->engine;
1391
1392 while (capture) {
1393 struct intel_engine_capture_vma *this = capture;
1394 struct i915_vma *vma = this->vma;
1395
1396 add_vma(ee,
1397 i915_vma_coredump_create(engine->gt,
1398 vma, this->name,
1399 compress));
1400
1401 i915_active_release(&vma->active);
1402 i915_vma_put(vma);
1403
1404 capture = this->next;
1405 kfree(this);
1406 }
1407
1408 add_vma(ee,
1409 i915_vma_coredump_create(engine->gt,
1410 engine->status_page.vma,
1411 "HW Status",
1412 compress));
1413
1414 add_vma(ee,
1415 i915_vma_coredump_create(engine->gt,
1416 engine->wa_ctx.vma,
1417 "WA context",
1418 compress));
1419}
1420
1421static struct intel_engine_coredump *
1422capture_engine(struct intel_engine_cs *engine,
1423 struct i915_vma_compress *compress)
1424{
1425 struct intel_engine_capture_vma *capture = NULL;
1426 struct intel_engine_coredump *ee;
1427 struct i915_request *rq;
1428 unsigned long flags;
1429
1430 ee = intel_engine_coredump_alloc(engine, GFP_KERNEL);
1431 if (!ee)
1432 return NULL;
1433
1434 spin_lock_irqsave(&engine->active.lock, flags);
1435 rq = intel_engine_find_active_request(engine);
1436 if (rq)
1437 capture = intel_engine_coredump_add_request(ee, rq,
1438 ATOMIC_MAYFAIL);
1439 spin_unlock_irqrestore(&engine->active.lock, flags);
1440 if (!capture) {
1441 kfree(ee);
1442 return NULL;
1443 }
1444
1445 intel_engine_coredump_add_vma(ee, capture, compress);
1446
1447 return ee;
1448}
1449
1450static void
1451gt_record_engines(struct intel_gt_coredump *gt,
1452 struct i915_vma_compress *compress)
1453{
1454 struct intel_engine_cs *engine;
1455 enum intel_engine_id id;
1456
1457 for_each_engine(engine, gt->_gt, id) {
1458 struct intel_engine_coredump *ee;
1459
1460 /* Refill our page pool before entering atomic section */
1461 pool_refill(&compress->pool, ALLOW_FAIL);
1462
1463 ee = capture_engine(engine, compress);
1464 if (!ee)
1465 continue;
1466
1467 gt->simulated |= ee->simulated;
1468 if (ee->simulated) {
1469 kfree(ee);
1470 continue;
1471 }
1472
1473 ee->next = gt->engine;
1474 gt->engine = ee;
1475 }
1476}
1477
1478static struct intel_uc_coredump *
1479gt_record_uc(struct intel_gt_coredump *gt,
1480 struct i915_vma_compress *compress)
1481{
1482 const struct intel_uc *uc = >->_gt->uc;
1483 struct intel_uc_coredump *error_uc;
1484
1485 error_uc = kzalloc(sizeof(*error_uc), ALLOW_FAIL);
1486 if (!error_uc)
1487 return NULL;
1488
1489 memcpy(&error_uc->guc_fw, &uc->guc.fw, sizeof(uc->guc.fw));
1490 memcpy(&error_uc->huc_fw, &uc->huc.fw, sizeof(uc->huc.fw));
1491
1492 /* Non-default firmware paths will be specified by the modparam.
1493 * As modparams are generally accesible from the userspace make
1494 * explicit copies of the firmware paths.
1495 */
1496 error_uc->guc_fw.path = kstrdup(uc->guc.fw.path, ALLOW_FAIL);
1497 error_uc->huc_fw.path = kstrdup(uc->huc.fw.path, ALLOW_FAIL);
1498 error_uc->guc_log =
1499 i915_vma_coredump_create(gt->_gt,
1500 uc->guc.log.vma, "GuC log buffer",
1501 compress);
1502
1503 return error_uc;
1504}
1505
1506static void gt_capture_prepare(struct intel_gt_coredump *gt)
1507{
1508 struct i915_ggtt *ggtt = gt->_gt->ggtt;
1509
1510 mutex_lock(&ggtt->error_mutex);
1511}
1512
1513static void gt_capture_finish(struct intel_gt_coredump *gt)
1514{
1515 struct i915_ggtt *ggtt = gt->_gt->ggtt;
1516
1517 if (drm_mm_node_allocated(&ggtt->error_capture))
1518 ggtt->vm.clear_range(&ggtt->vm,
1519 ggtt->error_capture.start,
1520 PAGE_SIZE);
1521
1522 mutex_unlock(&ggtt->error_mutex);
1523}
1524
1525/* Capture all registers which don't fit into another category. */
1526static void gt_record_regs(struct intel_gt_coredump *gt)
1527{
1528 struct intel_uncore *uncore = gt->_gt->uncore;
1529 struct drm_i915_private *i915 = uncore->i915;
1530 int i;
1531
1532 /*
1533 * General organization
1534 * 1. Registers specific to a single generation
1535 * 2. Registers which belong to multiple generations
1536 * 3. Feature specific registers.
1537 * 4. Everything else
1538 * Please try to follow the order.
1539 */
1540
1541 /* 1: Registers specific to a single generation */
1542 if (IS_VALLEYVIEW(i915)) {
1543 gt->gtier[0] = intel_uncore_read(uncore, GTIER);
1544 gt->ier = intel_uncore_read(uncore, VLV_IER);
1545 gt->forcewake = intel_uncore_read_fw(uncore, FORCEWAKE_VLV);
1546 }
1547
1548 if (IS_GEN(i915, 7))
1549 gt->err_int = intel_uncore_read(uncore, GEN7_ERR_INT);
1550
1551 if (INTEL_GEN(i915) >= 12) {
1552 gt->fault_data0 = intel_uncore_read(uncore,
1553 GEN12_FAULT_TLB_DATA0);
1554 gt->fault_data1 = intel_uncore_read(uncore,
1555 GEN12_FAULT_TLB_DATA1);
1556 } else if (INTEL_GEN(i915) >= 8) {
1557 gt->fault_data0 = intel_uncore_read(uncore,
1558 GEN8_FAULT_TLB_DATA0);
1559 gt->fault_data1 = intel_uncore_read(uncore,
1560 GEN8_FAULT_TLB_DATA1);
1561 }
1562
1563 if (IS_GEN(i915, 6)) {
1564 gt->forcewake = intel_uncore_read_fw(uncore, FORCEWAKE);
1565 gt->gab_ctl = intel_uncore_read(uncore, GAB_CTL);
1566 gt->gfx_mode = intel_uncore_read(uncore, GFX_MODE);
1567 }
1568
1569 /* 2: Registers which belong to multiple generations */
1570 if (INTEL_GEN(i915) >= 7)
1571 gt->forcewake = intel_uncore_read_fw(uncore, FORCEWAKE_MT);
1572
1573 if (INTEL_GEN(i915) >= 6) {
1574 gt->derrmr = intel_uncore_read(uncore, DERRMR);
1575 if (INTEL_GEN(i915) < 12) {
1576 gt->error = intel_uncore_read(uncore, ERROR_GEN6);
1577 gt->done_reg = intel_uncore_read(uncore, DONE_REG);
1578 }
1579 }
1580
1581 /* 3: Feature specific registers */
1582 if (IS_GEN_RANGE(i915, 6, 7)) {
1583 gt->gam_ecochk = intel_uncore_read(uncore, GAM_ECOCHK);
1584 gt->gac_eco = intel_uncore_read(uncore, GAC_ECO_BITS);
1585 }
1586
1587 if (IS_GEN_RANGE(i915, 8, 11))
1588 gt->gtt_cache = intel_uncore_read(uncore, HSW_GTT_CACHE_EN);
1589
1590 if (IS_GEN(i915, 12))
1591 gt->aux_err = intel_uncore_read(uncore, GEN12_AUX_ERR_DBG);
1592
1593 if (INTEL_GEN(i915) >= 12) {
1594 for (i = 0; i < GEN12_SFC_DONE_MAX; i++) {
1595 gt->sfc_done[i] =
1596 intel_uncore_read(uncore, GEN12_SFC_DONE(i));
1597 }
1598
1599 gt->gam_done = intel_uncore_read(uncore, GEN12_GAM_DONE);
1600 }
1601
1602 /* 4: Everything else */
1603 if (INTEL_GEN(i915) >= 11) {
1604 gt->ier = intel_uncore_read(uncore, GEN8_DE_MISC_IER);
1605 gt->gtier[0] =
1606 intel_uncore_read(uncore,
1607 GEN11_RENDER_COPY_INTR_ENABLE);
1608 gt->gtier[1] =
1609 intel_uncore_read(uncore, GEN11_VCS_VECS_INTR_ENABLE);
1610 gt->gtier[2] =
1611 intel_uncore_read(uncore, GEN11_GUC_SG_INTR_ENABLE);
1612 gt->gtier[3] =
1613 intel_uncore_read(uncore,
1614 GEN11_GPM_WGBOXPERF_INTR_ENABLE);
1615 gt->gtier[4] =
1616 intel_uncore_read(uncore,
1617 GEN11_CRYPTO_RSVD_INTR_ENABLE);
1618 gt->gtier[5] =
1619 intel_uncore_read(uncore,
1620 GEN11_GUNIT_CSME_INTR_ENABLE);
1621 gt->ngtier = 6;
1622 } else if (INTEL_GEN(i915) >= 8) {
1623 gt->ier = intel_uncore_read(uncore, GEN8_DE_MISC_IER);
1624 for (i = 0; i < 4; i++)
1625 gt->gtier[i] =
1626 intel_uncore_read(uncore, GEN8_GT_IER(i));
1627 gt->ngtier = 4;
1628 } else if (HAS_PCH_SPLIT(i915)) {
1629 gt->ier = intel_uncore_read(uncore, DEIER);
1630 gt->gtier[0] = intel_uncore_read(uncore, GTIER);
1631 gt->ngtier = 1;
1632 } else if (IS_GEN(i915, 2)) {
1633 gt->ier = intel_uncore_read16(uncore, GEN2_IER);
1634 } else if (!IS_VALLEYVIEW(i915)) {
1635 gt->ier = intel_uncore_read(uncore, GEN2_IER);
1636 }
1637 gt->eir = intel_uncore_read(uncore, EIR);
1638 gt->pgtbl_er = intel_uncore_read(uncore, PGTBL_ER);
1639}
1640
1641static void gt_record_info(struct intel_gt_coredump *gt)
1642{
1643 memcpy(>->info, >->_gt->info, sizeof(struct intel_gt_info));
1644}
1645
1646/*
1647 * Generate a semi-unique error code. The code is not meant to have meaning, The
1648 * code's only purpose is to try to prevent false duplicated bug reports by
1649 * grossly estimating a GPU error state.
1650 *
1651 * TODO Ideally, hashing the batchbuffer would be a very nice way to determine
1652 * the hang if we could strip the GTT offset information from it.
1653 *
1654 * It's only a small step better than a random number in its current form.
1655 */
1656static u32 generate_ecode(const struct intel_engine_coredump *ee)
1657{
1658 /*
1659 * IPEHR would be an ideal way to detect errors, as it's the gross
1660 * measure of "the command that hung." However, has some very common
1661 * synchronization commands which almost always appear in the case
1662 * strictly a client bug. Use instdone to differentiate those some.
1663 */
1664 return ee ? ee->ipehr ^ ee->instdone.instdone : 0;
1665}
1666
1667static const char *error_msg(struct i915_gpu_coredump *error)
1668{
1669 struct intel_engine_coredump *first = NULL;
1670 struct intel_gt_coredump *gt;
1671 intel_engine_mask_t engines;
1672 int len;
1673
1674 engines = 0;
1675 for (gt = error->gt; gt; gt = gt->next) {
1676 struct intel_engine_coredump *cs;
1677
1678 if (gt->engine && !first)
1679 first = gt->engine;
1680
1681 for (cs = gt->engine; cs; cs = cs->next)
1682 engines |= cs->engine->mask;
1683 }
1684
1685 len = scnprintf(error->error_msg, sizeof(error->error_msg),
1686 "GPU HANG: ecode %d:%x:%08x",
1687 INTEL_GEN(error->i915), engines,
1688 generate_ecode(first));
1689 if (first && first->context.pid) {
1690 /* Just show the first executing process, more is confusing */
1691 len += scnprintf(error->error_msg + len,
1692 sizeof(error->error_msg) - len,
1693 ", in %s [%d]",
1694 first->context.comm, first->context.pid);
1695 }
1696
1697 return error->error_msg;
1698}
1699
1700static void capture_gen(struct i915_gpu_coredump *error)
1701{
1702 struct drm_i915_private *i915 = error->i915;
1703
1704 error->wakelock = atomic_read(&i915->runtime_pm.wakeref_count);
1705 error->suspended = i915->runtime_pm.suspended;
1706
1707 error->iommu = -1;
1708#ifdef CONFIG_INTEL_IOMMU
1709 error->iommu = intel_iommu_gfx_mapped;
1710#endif
1711 error->reset_count = i915_reset_count(&i915->gpu_error);
1712 error->suspend_count = i915->suspend_count;
1713
1714 i915_params_copy(&error->params, &i915->params);
1715 memcpy(&error->device_info,
1716 INTEL_INFO(i915),
1717 sizeof(error->device_info));
1718 memcpy(&error->runtime_info,
1719 RUNTIME_INFO(i915),
1720 sizeof(error->runtime_info));
1721 error->driver_caps = i915->caps;
1722}
1723
1724struct i915_gpu_coredump *
1725i915_gpu_coredump_alloc(struct drm_i915_private *i915, gfp_t gfp)
1726{
1727 struct i915_gpu_coredump *error;
1728
1729 if (!i915->params.error_capture)
1730 return NULL;
1731
1732 error = kzalloc(sizeof(*error), gfp);
1733 if (!error)
1734 return NULL;
1735
1736 kref_init(&error->ref);
1737 error->i915 = i915;
1738
1739 error->time = ktime_get_real();
1740 error->boottime = ktime_get_boottime();
1741 error->uptime = ktime_sub(ktime_get(), i915->gt.last_init_time);
1742 error->capture = jiffies;
1743
1744 capture_gen(error);
1745
1746 return error;
1747}
1748
1749#define DAY_AS_SECONDS(x) (24 * 60 * 60 * (x))
1750
1751struct intel_gt_coredump *
1752intel_gt_coredump_alloc(struct intel_gt *gt, gfp_t gfp)
1753{
1754 struct intel_gt_coredump *gc;
1755
1756 gc = kzalloc(sizeof(*gc), gfp);
1757 if (!gc)
1758 return NULL;
1759
1760 gc->_gt = gt;
1761 gc->awake = intel_gt_pm_is_awake(gt);
1762
1763 gt_record_regs(gc);
1764 gt_record_fences(gc);
1765
1766 return gc;
1767}
1768
1769struct i915_vma_compress *
1770i915_vma_capture_prepare(struct intel_gt_coredump *gt)
1771{
1772 struct i915_vma_compress *compress;
1773
1774 compress = kmalloc(sizeof(*compress), ALLOW_FAIL);
1775 if (!compress)
1776 return NULL;
1777
1778 if (!compress_init(compress)) {
1779 kfree(compress);
1780 return NULL;
1781 }
1782
1783 gt_capture_prepare(gt);
1784
1785 return compress;
1786}
1787
1788void i915_vma_capture_finish(struct intel_gt_coredump *gt,
1789 struct i915_vma_compress *compress)
1790{
1791 if (!compress)
1792 return;
1793
1794 gt_capture_finish(gt);
1795
1796 compress_fini(compress);
1797 kfree(compress);
1798}
1799
1800struct i915_gpu_coredump *i915_gpu_coredump(struct drm_i915_private *i915)
1801{
1802 struct i915_gpu_coredump *error;
1803
1804 /* Check if GPU capture has been disabled */
1805 error = READ_ONCE(i915->gpu_error.first_error);
1806 if (IS_ERR(error))
1807 return error;
1808
1809 error = i915_gpu_coredump_alloc(i915, ALLOW_FAIL);
1810 if (!error)
1811 return ERR_PTR(-ENOMEM);
1812
1813 error->gt = intel_gt_coredump_alloc(&i915->gt, ALLOW_FAIL);
1814 if (error->gt) {
1815 struct i915_vma_compress *compress;
1816
1817 compress = i915_vma_capture_prepare(error->gt);
1818 if (!compress) {
1819 kfree(error->gt);
1820 kfree(error);
1821 return ERR_PTR(-ENOMEM);
1822 }
1823
1824 gt_record_info(error->gt);
1825 gt_record_engines(error->gt, compress);
1826
1827 if (INTEL_INFO(i915)->has_gt_uc)
1828 error->gt->uc = gt_record_uc(error->gt, compress);
1829
1830 i915_vma_capture_finish(error->gt, compress);
1831
1832 error->simulated |= error->gt->simulated;
1833 }
1834
1835 error->overlay = intel_overlay_capture_error_state(i915);
1836 error->display = intel_display_capture_error_state(i915);
1837
1838 return error;
1839}
1840
1841void i915_error_state_store(struct i915_gpu_coredump *error)
1842{
1843 struct drm_i915_private *i915;
1844 static bool warned;
1845
1846 if (IS_ERR_OR_NULL(error))
1847 return;
1848
1849 i915 = error->i915;
1850 drm_info(&i915->drm, "%s\n", error_msg(error));
1851
1852 if (error->simulated ||
1853 cmpxchg(&i915->gpu_error.first_error, NULL, error))
1854 return;
1855
1856 i915_gpu_coredump_get(error);
1857
1858 if (!xchg(&warned, true) &&
1859 ktime_get_real_seconds() - DRIVER_TIMESTAMP < DAY_AS_SECONDS(180)) {
1860 pr_info("GPU hangs can indicate a bug anywhere in the entire gfx stack, including userspace.\n");
1861 pr_info("Please file a _new_ bug report at https://gitlab.freedesktop.org/drm/intel/issues/new.\n");
1862 pr_info("Please see https://gitlab.freedesktop.org/drm/intel/-/wikis/How-to-file-i915-bugs for details.\n");
1863 pr_info("drm/i915 developers can then reassign to the right component if it's not a kernel issue.\n");
1864 pr_info("The GPU crash dump is required to analyze GPU hangs, so please always attach it.\n");
1865 pr_info("GPU crash dump saved to /sys/class/drm/card%d/error\n",
1866 i915->drm.primary->index);
1867 }
1868}
1869
1870/**
1871 * i915_capture_error_state - capture an error record for later analysis
1872 * @i915: i915 device
1873 *
1874 * Should be called when an error is detected (either a hang or an error
1875 * interrupt) to capture error state from the time of the error. Fills
1876 * out a structure which becomes available in debugfs for user level tools
1877 * to pick up.
1878 */
1879void i915_capture_error_state(struct drm_i915_private *i915)
1880{
1881 struct i915_gpu_coredump *error;
1882
1883 error = i915_gpu_coredump(i915);
1884 if (IS_ERR(error)) {
1885 cmpxchg(&i915->gpu_error.first_error, NULL, error);
1886 return;
1887 }
1888
1889 i915_error_state_store(error);
1890 i915_gpu_coredump_put(error);
1891}
1892
1893struct i915_gpu_coredump *
1894i915_first_error_state(struct drm_i915_private *i915)
1895{
1896 struct i915_gpu_coredump *error;
1897
1898 spin_lock_irq(&i915->gpu_error.lock);
1899 error = i915->gpu_error.first_error;
1900 if (!IS_ERR_OR_NULL(error))
1901 i915_gpu_coredump_get(error);
1902 spin_unlock_irq(&i915->gpu_error.lock);
1903
1904 return error;
1905}
1906
1907void i915_reset_error_state(struct drm_i915_private *i915)
1908{
1909 struct i915_gpu_coredump *error;
1910
1911 spin_lock_irq(&i915->gpu_error.lock);
1912 error = i915->gpu_error.first_error;
1913 if (error != ERR_PTR(-ENODEV)) /* if disabled, always disabled */
1914 i915->gpu_error.first_error = NULL;
1915 spin_unlock_irq(&i915->gpu_error.lock);
1916
1917 if (!IS_ERR_OR_NULL(error))
1918 i915_gpu_coredump_put(error);
1919}
1920
1921void i915_disable_error_state(struct drm_i915_private *i915, int err)
1922{
1923 spin_lock_irq(&i915->gpu_error.lock);
1924 if (!i915->gpu_error.first_error)
1925 i915->gpu_error.first_error = ERR_PTR(err);
1926 spin_unlock_irq(&i915->gpu_error.lock);
1927}