Loading...
1/*
2 * Copyright © 2014 Broadcom
3 *
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the "Software"),
6 * to deal in the Software without restriction, including without limitation
7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8 * and/or sell copies of the Software, and to permit persons to whom the
9 * Software is furnished to do so, subject to the following conditions:
10 *
11 * The above copyright notice and this permission notice (including the next
12 * paragraph) shall be included in all copies or substantial portions of the
13 * Software.
14 *
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
18 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
21 * IN THE SOFTWARE.
22 */
23
24#include <linux/module.h>
25#include <linux/platform_device.h>
26#include <linux/pm_runtime.h>
27#include <linux/device.h>
28#include <linux/io.h>
29
30#include "uapi/drm/vc4_drm.h"
31#include "vc4_drv.h"
32#include "vc4_regs.h"
33#include "vc4_trace.h"
34
35static void
36vc4_queue_hangcheck(struct drm_device *dev)
37{
38 struct vc4_dev *vc4 = to_vc4_dev(dev);
39
40 mod_timer(&vc4->hangcheck.timer,
41 round_jiffies_up(jiffies + msecs_to_jiffies(100)));
42}
43
44struct vc4_hang_state {
45 struct drm_vc4_get_hang_state user_state;
46
47 u32 bo_count;
48 struct drm_gem_object **bo;
49};
50
51static void
52vc4_free_hang_state(struct drm_device *dev, struct vc4_hang_state *state)
53{
54 unsigned int i;
55
56 mutex_lock(&dev->struct_mutex);
57 for (i = 0; i < state->user_state.bo_count; i++)
58 drm_gem_object_unreference(state->bo[i]);
59 mutex_unlock(&dev->struct_mutex);
60
61 kfree(state);
62}
63
64int
65vc4_get_hang_state_ioctl(struct drm_device *dev, void *data,
66 struct drm_file *file_priv)
67{
68 struct drm_vc4_get_hang_state *get_state = data;
69 struct drm_vc4_get_hang_state_bo *bo_state;
70 struct vc4_hang_state *kernel_state;
71 struct drm_vc4_get_hang_state *state;
72 struct vc4_dev *vc4 = to_vc4_dev(dev);
73 unsigned long irqflags;
74 u32 i;
75 int ret = 0;
76
77 spin_lock_irqsave(&vc4->job_lock, irqflags);
78 kernel_state = vc4->hang_state;
79 if (!kernel_state) {
80 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
81 return -ENOENT;
82 }
83 state = &kernel_state->user_state;
84
85 /* If the user's array isn't big enough, just return the
86 * required array size.
87 */
88 if (get_state->bo_count < state->bo_count) {
89 get_state->bo_count = state->bo_count;
90 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
91 return 0;
92 }
93
94 vc4->hang_state = NULL;
95 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
96
97 /* Save the user's BO pointer, so we don't stomp it with the memcpy. */
98 state->bo = get_state->bo;
99 memcpy(get_state, state, sizeof(*state));
100
101 bo_state = kcalloc(state->bo_count, sizeof(*bo_state), GFP_KERNEL);
102 if (!bo_state) {
103 ret = -ENOMEM;
104 goto err_free;
105 }
106
107 for (i = 0; i < state->bo_count; i++) {
108 struct vc4_bo *vc4_bo = to_vc4_bo(kernel_state->bo[i]);
109 u32 handle;
110
111 ret = drm_gem_handle_create(file_priv, kernel_state->bo[i],
112 &handle);
113
114 if (ret) {
115 state->bo_count = i - 1;
116 goto err;
117 }
118 bo_state[i].handle = handle;
119 bo_state[i].paddr = vc4_bo->base.paddr;
120 bo_state[i].size = vc4_bo->base.base.size;
121 }
122
123 if (copy_to_user((void __user *)(uintptr_t)get_state->bo,
124 bo_state,
125 state->bo_count * sizeof(*bo_state)))
126 ret = -EFAULT;
127
128 kfree(bo_state);
129
130err_free:
131
132 vc4_free_hang_state(dev, kernel_state);
133
134err:
135 return ret;
136}
137
138static void
139vc4_save_hang_state(struct drm_device *dev)
140{
141 struct vc4_dev *vc4 = to_vc4_dev(dev);
142 struct drm_vc4_get_hang_state *state;
143 struct vc4_hang_state *kernel_state;
144 struct vc4_exec_info *exec[2];
145 struct vc4_bo *bo;
146 unsigned long irqflags;
147 unsigned int i, j, unref_list_count, prev_idx;
148
149 kernel_state = kcalloc(1, sizeof(*kernel_state), GFP_KERNEL);
150 if (!kernel_state)
151 return;
152
153 state = &kernel_state->user_state;
154
155 spin_lock_irqsave(&vc4->job_lock, irqflags);
156 exec[0] = vc4_first_bin_job(vc4);
157 exec[1] = vc4_first_render_job(vc4);
158 if (!exec[0] && !exec[1]) {
159 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
160 return;
161 }
162
163 /* Get the bos from both binner and renderer into hang state. */
164 state->bo_count = 0;
165 for (i = 0; i < 2; i++) {
166 if (!exec[i])
167 continue;
168
169 unref_list_count = 0;
170 list_for_each_entry(bo, &exec[i]->unref_list, unref_head)
171 unref_list_count++;
172 state->bo_count += exec[i]->bo_count + unref_list_count;
173 }
174
175 kernel_state->bo = kcalloc(state->bo_count,
176 sizeof(*kernel_state->bo), GFP_ATOMIC);
177
178 if (!kernel_state->bo) {
179 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
180 return;
181 }
182
183 prev_idx = 0;
184 for (i = 0; i < 2; i++) {
185 if (!exec[i])
186 continue;
187
188 for (j = 0; j < exec[i]->bo_count; j++) {
189 drm_gem_object_reference(&exec[i]->bo[j]->base);
190 kernel_state->bo[j + prev_idx] = &exec[i]->bo[j]->base;
191 }
192
193 list_for_each_entry(bo, &exec[i]->unref_list, unref_head) {
194 drm_gem_object_reference(&bo->base.base);
195 kernel_state->bo[j + prev_idx] = &bo->base.base;
196 j++;
197 }
198 prev_idx = j + 1;
199 }
200
201 if (exec[0])
202 state->start_bin = exec[0]->ct0ca;
203 if (exec[1])
204 state->start_render = exec[1]->ct1ca;
205
206 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
207
208 state->ct0ca = V3D_READ(V3D_CTNCA(0));
209 state->ct0ea = V3D_READ(V3D_CTNEA(0));
210
211 state->ct1ca = V3D_READ(V3D_CTNCA(1));
212 state->ct1ea = V3D_READ(V3D_CTNEA(1));
213
214 state->ct0cs = V3D_READ(V3D_CTNCS(0));
215 state->ct1cs = V3D_READ(V3D_CTNCS(1));
216
217 state->ct0ra0 = V3D_READ(V3D_CT00RA0);
218 state->ct1ra0 = V3D_READ(V3D_CT01RA0);
219
220 state->bpca = V3D_READ(V3D_BPCA);
221 state->bpcs = V3D_READ(V3D_BPCS);
222 state->bpoa = V3D_READ(V3D_BPOA);
223 state->bpos = V3D_READ(V3D_BPOS);
224
225 state->vpmbase = V3D_READ(V3D_VPMBASE);
226
227 state->dbge = V3D_READ(V3D_DBGE);
228 state->fdbgo = V3D_READ(V3D_FDBGO);
229 state->fdbgb = V3D_READ(V3D_FDBGB);
230 state->fdbgr = V3D_READ(V3D_FDBGR);
231 state->fdbgs = V3D_READ(V3D_FDBGS);
232 state->errstat = V3D_READ(V3D_ERRSTAT);
233
234 spin_lock_irqsave(&vc4->job_lock, irqflags);
235 if (vc4->hang_state) {
236 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
237 vc4_free_hang_state(dev, kernel_state);
238 } else {
239 vc4->hang_state = kernel_state;
240 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
241 }
242}
243
244static void
245vc4_reset(struct drm_device *dev)
246{
247 struct vc4_dev *vc4 = to_vc4_dev(dev);
248
249 DRM_INFO("Resetting GPU.\n");
250
251 mutex_lock(&vc4->power_lock);
252 if (vc4->power_refcount) {
253 /* Power the device off and back on the by dropping the
254 * reference on runtime PM.
255 */
256 pm_runtime_put_sync_suspend(&vc4->v3d->pdev->dev);
257 pm_runtime_get_sync(&vc4->v3d->pdev->dev);
258 }
259 mutex_unlock(&vc4->power_lock);
260
261 vc4_irq_reset(dev);
262
263 /* Rearm the hangcheck -- another job might have been waiting
264 * for our hung one to get kicked off, and vc4_irq_reset()
265 * would have started it.
266 */
267 vc4_queue_hangcheck(dev);
268}
269
270static void
271vc4_reset_work(struct work_struct *work)
272{
273 struct vc4_dev *vc4 =
274 container_of(work, struct vc4_dev, hangcheck.reset_work);
275
276 vc4_save_hang_state(vc4->dev);
277
278 vc4_reset(vc4->dev);
279}
280
281static void
282vc4_hangcheck_elapsed(unsigned long data)
283{
284 struct drm_device *dev = (struct drm_device *)data;
285 struct vc4_dev *vc4 = to_vc4_dev(dev);
286 uint32_t ct0ca, ct1ca;
287 unsigned long irqflags;
288 struct vc4_exec_info *bin_exec, *render_exec;
289
290 spin_lock_irqsave(&vc4->job_lock, irqflags);
291
292 bin_exec = vc4_first_bin_job(vc4);
293 render_exec = vc4_first_render_job(vc4);
294
295 /* If idle, we can stop watching for hangs. */
296 if (!bin_exec && !render_exec) {
297 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
298 return;
299 }
300
301 ct0ca = V3D_READ(V3D_CTNCA(0));
302 ct1ca = V3D_READ(V3D_CTNCA(1));
303
304 /* If we've made any progress in execution, rearm the timer
305 * and wait.
306 */
307 if ((bin_exec && ct0ca != bin_exec->last_ct0ca) ||
308 (render_exec && ct1ca != render_exec->last_ct1ca)) {
309 if (bin_exec)
310 bin_exec->last_ct0ca = ct0ca;
311 if (render_exec)
312 render_exec->last_ct1ca = ct1ca;
313 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
314 vc4_queue_hangcheck(dev);
315 return;
316 }
317
318 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
319
320 /* We've gone too long with no progress, reset. This has to
321 * be done from a work struct, since resetting can sleep and
322 * this timer hook isn't allowed to.
323 */
324 schedule_work(&vc4->hangcheck.reset_work);
325}
326
327static void
328submit_cl(struct drm_device *dev, uint32_t thread, uint32_t start, uint32_t end)
329{
330 struct vc4_dev *vc4 = to_vc4_dev(dev);
331
332 /* Set the current and end address of the control list.
333 * Writing the end register is what starts the job.
334 */
335 V3D_WRITE(V3D_CTNCA(thread), start);
336 V3D_WRITE(V3D_CTNEA(thread), end);
337}
338
339int
340vc4_wait_for_seqno(struct drm_device *dev, uint64_t seqno, uint64_t timeout_ns,
341 bool interruptible)
342{
343 struct vc4_dev *vc4 = to_vc4_dev(dev);
344 int ret = 0;
345 unsigned long timeout_expire;
346 DEFINE_WAIT(wait);
347
348 if (vc4->finished_seqno >= seqno)
349 return 0;
350
351 if (timeout_ns == 0)
352 return -ETIME;
353
354 timeout_expire = jiffies + nsecs_to_jiffies(timeout_ns);
355
356 trace_vc4_wait_for_seqno_begin(dev, seqno, timeout_ns);
357 for (;;) {
358 prepare_to_wait(&vc4->job_wait_queue, &wait,
359 interruptible ? TASK_INTERRUPTIBLE :
360 TASK_UNINTERRUPTIBLE);
361
362 if (interruptible && signal_pending(current)) {
363 ret = -ERESTARTSYS;
364 break;
365 }
366
367 if (vc4->finished_seqno >= seqno)
368 break;
369
370 if (timeout_ns != ~0ull) {
371 if (time_after_eq(jiffies, timeout_expire)) {
372 ret = -ETIME;
373 break;
374 }
375 schedule_timeout(timeout_expire - jiffies);
376 } else {
377 schedule();
378 }
379 }
380
381 finish_wait(&vc4->job_wait_queue, &wait);
382 trace_vc4_wait_for_seqno_end(dev, seqno);
383
384 return ret;
385}
386
387static void
388vc4_flush_caches(struct drm_device *dev)
389{
390 struct vc4_dev *vc4 = to_vc4_dev(dev);
391
392 /* Flush the GPU L2 caches. These caches sit on top of system
393 * L3 (the 128kb or so shared with the CPU), and are
394 * non-allocating in the L3.
395 */
396 V3D_WRITE(V3D_L2CACTL,
397 V3D_L2CACTL_L2CCLR);
398
399 V3D_WRITE(V3D_SLCACTL,
400 VC4_SET_FIELD(0xf, V3D_SLCACTL_T1CC) |
401 VC4_SET_FIELD(0xf, V3D_SLCACTL_T0CC) |
402 VC4_SET_FIELD(0xf, V3D_SLCACTL_UCC) |
403 VC4_SET_FIELD(0xf, V3D_SLCACTL_ICC));
404}
405
406/* Sets the registers for the next job to be actually be executed in
407 * the hardware.
408 *
409 * The job_lock should be held during this.
410 */
411void
412vc4_submit_next_bin_job(struct drm_device *dev)
413{
414 struct vc4_dev *vc4 = to_vc4_dev(dev);
415 struct vc4_exec_info *exec;
416
417again:
418 exec = vc4_first_bin_job(vc4);
419 if (!exec)
420 return;
421
422 vc4_flush_caches(dev);
423
424 /* Disable the binner's pre-loaded overflow memory address */
425 V3D_WRITE(V3D_BPOA, 0);
426 V3D_WRITE(V3D_BPOS, 0);
427
428 /* Either put the job in the binner if it uses the binner, or
429 * immediately move it to the to-be-rendered queue.
430 */
431 if (exec->ct0ca != exec->ct0ea) {
432 submit_cl(dev, 0, exec->ct0ca, exec->ct0ea);
433 } else {
434 vc4_move_job_to_render(dev, exec);
435 goto again;
436 }
437}
438
439void
440vc4_submit_next_render_job(struct drm_device *dev)
441{
442 struct vc4_dev *vc4 = to_vc4_dev(dev);
443 struct vc4_exec_info *exec = vc4_first_render_job(vc4);
444
445 if (!exec)
446 return;
447
448 submit_cl(dev, 1, exec->ct1ca, exec->ct1ea);
449}
450
451void
452vc4_move_job_to_render(struct drm_device *dev, struct vc4_exec_info *exec)
453{
454 struct vc4_dev *vc4 = to_vc4_dev(dev);
455 bool was_empty = list_empty(&vc4->render_job_list);
456
457 list_move_tail(&exec->head, &vc4->render_job_list);
458 if (was_empty)
459 vc4_submit_next_render_job(dev);
460}
461
462static void
463vc4_update_bo_seqnos(struct vc4_exec_info *exec, uint64_t seqno)
464{
465 struct vc4_bo *bo;
466 unsigned i;
467
468 for (i = 0; i < exec->bo_count; i++) {
469 bo = to_vc4_bo(&exec->bo[i]->base);
470 bo->seqno = seqno;
471 }
472
473 list_for_each_entry(bo, &exec->unref_list, unref_head) {
474 bo->seqno = seqno;
475 }
476}
477
478/* Queues a struct vc4_exec_info for execution. If no job is
479 * currently executing, then submits it.
480 *
481 * Unlike most GPUs, our hardware only handles one command list at a
482 * time. To queue multiple jobs at once, we'd need to edit the
483 * previous command list to have a jump to the new one at the end, and
484 * then bump the end address. That's a change for a later date,
485 * though.
486 */
487static void
488vc4_queue_submit(struct drm_device *dev, struct vc4_exec_info *exec)
489{
490 struct vc4_dev *vc4 = to_vc4_dev(dev);
491 uint64_t seqno;
492 unsigned long irqflags;
493
494 spin_lock_irqsave(&vc4->job_lock, irqflags);
495
496 seqno = ++vc4->emit_seqno;
497 exec->seqno = seqno;
498 vc4_update_bo_seqnos(exec, seqno);
499
500 list_add_tail(&exec->head, &vc4->bin_job_list);
501
502 /* If no job was executing, kick ours off. Otherwise, it'll
503 * get started when the previous job's flush done interrupt
504 * occurs.
505 */
506 if (vc4_first_bin_job(vc4) == exec) {
507 vc4_submit_next_bin_job(dev);
508 vc4_queue_hangcheck(dev);
509 }
510
511 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
512}
513
514/**
515 * Looks up a bunch of GEM handles for BOs and stores the array for
516 * use in the command validator that actually writes relocated
517 * addresses pointing to them.
518 */
519static int
520vc4_cl_lookup_bos(struct drm_device *dev,
521 struct drm_file *file_priv,
522 struct vc4_exec_info *exec)
523{
524 struct drm_vc4_submit_cl *args = exec->args;
525 uint32_t *handles;
526 int ret = 0;
527 int i;
528
529 exec->bo_count = args->bo_handle_count;
530
531 if (!exec->bo_count) {
532 /* See comment on bo_index for why we have to check
533 * this.
534 */
535 DRM_ERROR("Rendering requires BOs to validate\n");
536 return -EINVAL;
537 }
538
539 exec->bo = kcalloc(exec->bo_count, sizeof(struct drm_gem_cma_object *),
540 GFP_KERNEL);
541 if (!exec->bo) {
542 DRM_ERROR("Failed to allocate validated BO pointers\n");
543 return -ENOMEM;
544 }
545
546 handles = drm_malloc_ab(exec->bo_count, sizeof(uint32_t));
547 if (!handles) {
548 DRM_ERROR("Failed to allocate incoming GEM handles\n");
549 goto fail;
550 }
551
552 ret = copy_from_user(handles,
553 (void __user *)(uintptr_t)args->bo_handles,
554 exec->bo_count * sizeof(uint32_t));
555 if (ret) {
556 DRM_ERROR("Failed to copy in GEM handles\n");
557 goto fail;
558 }
559
560 spin_lock(&file_priv->table_lock);
561 for (i = 0; i < exec->bo_count; i++) {
562 struct drm_gem_object *bo = idr_find(&file_priv->object_idr,
563 handles[i]);
564 if (!bo) {
565 DRM_ERROR("Failed to look up GEM BO %d: %d\n",
566 i, handles[i]);
567 ret = -EINVAL;
568 spin_unlock(&file_priv->table_lock);
569 goto fail;
570 }
571 drm_gem_object_reference(bo);
572 exec->bo[i] = (struct drm_gem_cma_object *)bo;
573 }
574 spin_unlock(&file_priv->table_lock);
575
576fail:
577 kfree(handles);
578 return 0;
579}
580
581static int
582vc4_get_bcl(struct drm_device *dev, struct vc4_exec_info *exec)
583{
584 struct drm_vc4_submit_cl *args = exec->args;
585 void *temp = NULL;
586 void *bin;
587 int ret = 0;
588 uint32_t bin_offset = 0;
589 uint32_t shader_rec_offset = roundup(bin_offset + args->bin_cl_size,
590 16);
591 uint32_t uniforms_offset = shader_rec_offset + args->shader_rec_size;
592 uint32_t exec_size = uniforms_offset + args->uniforms_size;
593 uint32_t temp_size = exec_size + (sizeof(struct vc4_shader_state) *
594 args->shader_rec_count);
595 struct vc4_bo *bo;
596
597 if (uniforms_offset < shader_rec_offset ||
598 exec_size < uniforms_offset ||
599 args->shader_rec_count >= (UINT_MAX /
600 sizeof(struct vc4_shader_state)) ||
601 temp_size < exec_size) {
602 DRM_ERROR("overflow in exec arguments\n");
603 goto fail;
604 }
605
606 /* Allocate space where we'll store the copied in user command lists
607 * and shader records.
608 *
609 * We don't just copy directly into the BOs because we need to
610 * read the contents back for validation, and I think the
611 * bo->vaddr is uncached access.
612 */
613 temp = kmalloc(temp_size, GFP_KERNEL);
614 if (!temp) {
615 DRM_ERROR("Failed to allocate storage for copying "
616 "in bin/render CLs.\n");
617 ret = -ENOMEM;
618 goto fail;
619 }
620 bin = temp + bin_offset;
621 exec->shader_rec_u = temp + shader_rec_offset;
622 exec->uniforms_u = temp + uniforms_offset;
623 exec->shader_state = temp + exec_size;
624 exec->shader_state_size = args->shader_rec_count;
625
626 if (copy_from_user(bin,
627 (void __user *)(uintptr_t)args->bin_cl,
628 args->bin_cl_size)) {
629 ret = -EFAULT;
630 goto fail;
631 }
632
633 if (copy_from_user(exec->shader_rec_u,
634 (void __user *)(uintptr_t)args->shader_rec,
635 args->shader_rec_size)) {
636 ret = -EFAULT;
637 goto fail;
638 }
639
640 if (copy_from_user(exec->uniforms_u,
641 (void __user *)(uintptr_t)args->uniforms,
642 args->uniforms_size)) {
643 ret = -EFAULT;
644 goto fail;
645 }
646
647 bo = vc4_bo_create(dev, exec_size, true);
648 if (IS_ERR(bo)) {
649 DRM_ERROR("Couldn't allocate BO for binning\n");
650 ret = PTR_ERR(bo);
651 goto fail;
652 }
653 exec->exec_bo = &bo->base;
654
655 list_add_tail(&to_vc4_bo(&exec->exec_bo->base)->unref_head,
656 &exec->unref_list);
657
658 exec->ct0ca = exec->exec_bo->paddr + bin_offset;
659
660 exec->bin_u = bin;
661
662 exec->shader_rec_v = exec->exec_bo->vaddr + shader_rec_offset;
663 exec->shader_rec_p = exec->exec_bo->paddr + shader_rec_offset;
664 exec->shader_rec_size = args->shader_rec_size;
665
666 exec->uniforms_v = exec->exec_bo->vaddr + uniforms_offset;
667 exec->uniforms_p = exec->exec_bo->paddr + uniforms_offset;
668 exec->uniforms_size = args->uniforms_size;
669
670 ret = vc4_validate_bin_cl(dev,
671 exec->exec_bo->vaddr + bin_offset,
672 bin,
673 exec);
674 if (ret)
675 goto fail;
676
677 ret = vc4_validate_shader_recs(dev, exec);
678
679fail:
680 kfree(temp);
681 return ret;
682}
683
684static void
685vc4_complete_exec(struct drm_device *dev, struct vc4_exec_info *exec)
686{
687 struct vc4_dev *vc4 = to_vc4_dev(dev);
688 unsigned i;
689
690 /* Need the struct lock for drm_gem_object_unreference(). */
691 mutex_lock(&dev->struct_mutex);
692 if (exec->bo) {
693 for (i = 0; i < exec->bo_count; i++)
694 drm_gem_object_unreference(&exec->bo[i]->base);
695 kfree(exec->bo);
696 }
697
698 while (!list_empty(&exec->unref_list)) {
699 struct vc4_bo *bo = list_first_entry(&exec->unref_list,
700 struct vc4_bo, unref_head);
701 list_del(&bo->unref_head);
702 drm_gem_object_unreference(&bo->base.base);
703 }
704 mutex_unlock(&dev->struct_mutex);
705
706 mutex_lock(&vc4->power_lock);
707 if (--vc4->power_refcount == 0)
708 pm_runtime_put(&vc4->v3d->pdev->dev);
709 mutex_unlock(&vc4->power_lock);
710
711 kfree(exec);
712}
713
714void
715vc4_job_handle_completed(struct vc4_dev *vc4)
716{
717 unsigned long irqflags;
718 struct vc4_seqno_cb *cb, *cb_temp;
719
720 spin_lock_irqsave(&vc4->job_lock, irqflags);
721 while (!list_empty(&vc4->job_done_list)) {
722 struct vc4_exec_info *exec =
723 list_first_entry(&vc4->job_done_list,
724 struct vc4_exec_info, head);
725 list_del(&exec->head);
726
727 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
728 vc4_complete_exec(vc4->dev, exec);
729 spin_lock_irqsave(&vc4->job_lock, irqflags);
730 }
731
732 list_for_each_entry_safe(cb, cb_temp, &vc4->seqno_cb_list, work.entry) {
733 if (cb->seqno <= vc4->finished_seqno) {
734 list_del_init(&cb->work.entry);
735 schedule_work(&cb->work);
736 }
737 }
738
739 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
740}
741
742static void vc4_seqno_cb_work(struct work_struct *work)
743{
744 struct vc4_seqno_cb *cb = container_of(work, struct vc4_seqno_cb, work);
745
746 cb->func(cb);
747}
748
749int vc4_queue_seqno_cb(struct drm_device *dev,
750 struct vc4_seqno_cb *cb, uint64_t seqno,
751 void (*func)(struct vc4_seqno_cb *cb))
752{
753 struct vc4_dev *vc4 = to_vc4_dev(dev);
754 int ret = 0;
755 unsigned long irqflags;
756
757 cb->func = func;
758 INIT_WORK(&cb->work, vc4_seqno_cb_work);
759
760 spin_lock_irqsave(&vc4->job_lock, irqflags);
761 if (seqno > vc4->finished_seqno) {
762 cb->seqno = seqno;
763 list_add_tail(&cb->work.entry, &vc4->seqno_cb_list);
764 } else {
765 schedule_work(&cb->work);
766 }
767 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
768
769 return ret;
770}
771
772/* Scheduled when any job has been completed, this walks the list of
773 * jobs that had completed and unrefs their BOs and frees their exec
774 * structs.
775 */
776static void
777vc4_job_done_work(struct work_struct *work)
778{
779 struct vc4_dev *vc4 =
780 container_of(work, struct vc4_dev, job_done_work);
781
782 vc4_job_handle_completed(vc4);
783}
784
785static int
786vc4_wait_for_seqno_ioctl_helper(struct drm_device *dev,
787 uint64_t seqno,
788 uint64_t *timeout_ns)
789{
790 unsigned long start = jiffies;
791 int ret = vc4_wait_for_seqno(dev, seqno, *timeout_ns, true);
792
793 if ((ret == -EINTR || ret == -ERESTARTSYS) && *timeout_ns != ~0ull) {
794 uint64_t delta = jiffies_to_nsecs(jiffies - start);
795
796 if (*timeout_ns >= delta)
797 *timeout_ns -= delta;
798 }
799
800 return ret;
801}
802
803int
804vc4_wait_seqno_ioctl(struct drm_device *dev, void *data,
805 struct drm_file *file_priv)
806{
807 struct drm_vc4_wait_seqno *args = data;
808
809 return vc4_wait_for_seqno_ioctl_helper(dev, args->seqno,
810 &args->timeout_ns);
811}
812
813int
814vc4_wait_bo_ioctl(struct drm_device *dev, void *data,
815 struct drm_file *file_priv)
816{
817 int ret;
818 struct drm_vc4_wait_bo *args = data;
819 struct drm_gem_object *gem_obj;
820 struct vc4_bo *bo;
821
822 if (args->pad != 0)
823 return -EINVAL;
824
825 gem_obj = drm_gem_object_lookup(dev, file_priv, args->handle);
826 if (!gem_obj) {
827 DRM_ERROR("Failed to look up GEM BO %d\n", args->handle);
828 return -EINVAL;
829 }
830 bo = to_vc4_bo(gem_obj);
831
832 ret = vc4_wait_for_seqno_ioctl_helper(dev, bo->seqno,
833 &args->timeout_ns);
834
835 drm_gem_object_unreference_unlocked(gem_obj);
836 return ret;
837}
838
839/**
840 * Submits a command list to the VC4.
841 *
842 * This is what is called batchbuffer emitting on other hardware.
843 */
844int
845vc4_submit_cl_ioctl(struct drm_device *dev, void *data,
846 struct drm_file *file_priv)
847{
848 struct vc4_dev *vc4 = to_vc4_dev(dev);
849 struct drm_vc4_submit_cl *args = data;
850 struct vc4_exec_info *exec;
851 int ret = 0;
852
853 if ((args->flags & ~VC4_SUBMIT_CL_USE_CLEAR_COLOR) != 0) {
854 DRM_ERROR("Unknown flags: 0x%02x\n", args->flags);
855 return -EINVAL;
856 }
857
858 exec = kcalloc(1, sizeof(*exec), GFP_KERNEL);
859 if (!exec) {
860 DRM_ERROR("malloc failure on exec struct\n");
861 return -ENOMEM;
862 }
863
864 mutex_lock(&vc4->power_lock);
865 if (vc4->power_refcount++ == 0)
866 ret = pm_runtime_get_sync(&vc4->v3d->pdev->dev);
867 mutex_unlock(&vc4->power_lock);
868 if (ret < 0) {
869 kfree(exec);
870 return ret;
871 }
872
873 exec->args = args;
874 INIT_LIST_HEAD(&exec->unref_list);
875
876 ret = vc4_cl_lookup_bos(dev, file_priv, exec);
877 if (ret)
878 goto fail;
879
880 if (exec->args->bin_cl_size != 0) {
881 ret = vc4_get_bcl(dev, exec);
882 if (ret)
883 goto fail;
884 } else {
885 exec->ct0ca = 0;
886 exec->ct0ea = 0;
887 }
888
889 ret = vc4_get_rcl(dev, exec);
890 if (ret)
891 goto fail;
892
893 /* Clear this out of the struct we'll be putting in the queue,
894 * since it's part of our stack.
895 */
896 exec->args = NULL;
897
898 vc4_queue_submit(dev, exec);
899
900 /* Return the seqno for our job. */
901 args->seqno = vc4->emit_seqno;
902
903 return 0;
904
905fail:
906 vc4_complete_exec(vc4->dev, exec);
907
908 return ret;
909}
910
911void
912vc4_gem_init(struct drm_device *dev)
913{
914 struct vc4_dev *vc4 = to_vc4_dev(dev);
915
916 INIT_LIST_HEAD(&vc4->bin_job_list);
917 INIT_LIST_HEAD(&vc4->render_job_list);
918 INIT_LIST_HEAD(&vc4->job_done_list);
919 INIT_LIST_HEAD(&vc4->seqno_cb_list);
920 spin_lock_init(&vc4->job_lock);
921
922 INIT_WORK(&vc4->hangcheck.reset_work, vc4_reset_work);
923 setup_timer(&vc4->hangcheck.timer,
924 vc4_hangcheck_elapsed,
925 (unsigned long)dev);
926
927 INIT_WORK(&vc4->job_done_work, vc4_job_done_work);
928
929 mutex_init(&vc4->power_lock);
930}
931
932void
933vc4_gem_destroy(struct drm_device *dev)
934{
935 struct vc4_dev *vc4 = to_vc4_dev(dev);
936
937 /* Waiting for exec to finish would need to be done before
938 * unregistering V3D.
939 */
940 WARN_ON(vc4->emit_seqno != vc4->finished_seqno);
941
942 /* V3D should already have disabled its interrupt and cleared
943 * the overflow allocation registers. Now free the object.
944 */
945 if (vc4->overflow_mem) {
946 drm_gem_object_unreference_unlocked(&vc4->overflow_mem->base.base);
947 vc4->overflow_mem = NULL;
948 }
949
950 vc4_bo_cache_destroy(dev);
951
952 if (vc4->hang_state)
953 vc4_free_hang_state(dev, vc4->hang_state);
954}
1/*
2 * Copyright © 2014 Broadcom
3 *
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the "Software"),
6 * to deal in the Software without restriction, including without limitation
7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8 * and/or sell copies of the Software, and to permit persons to whom the
9 * Software is furnished to do so, subject to the following conditions:
10 *
11 * The above copyright notice and this permission notice (including the next
12 * paragraph) shall be included in all copies or substantial portions of the
13 * Software.
14 *
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
18 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
21 * IN THE SOFTWARE.
22 */
23
24#include <linux/module.h>
25#include <linux/platform_device.h>
26#include <linux/pm_runtime.h>
27#include <linux/device.h>
28#include <linux/io.h>
29#include <linux/sched/signal.h>
30#include <linux/dma-fence-array.h>
31
32#include <drm/drm_syncobj.h>
33
34#include "uapi/drm/vc4_drm.h"
35#include "vc4_drv.h"
36#include "vc4_regs.h"
37#include "vc4_trace.h"
38
39static void
40vc4_queue_hangcheck(struct drm_device *dev)
41{
42 struct vc4_dev *vc4 = to_vc4_dev(dev);
43
44 mod_timer(&vc4->hangcheck.timer,
45 round_jiffies_up(jiffies + msecs_to_jiffies(100)));
46}
47
48struct vc4_hang_state {
49 struct drm_vc4_get_hang_state user_state;
50
51 u32 bo_count;
52 struct drm_gem_object **bo;
53};
54
55static void
56vc4_free_hang_state(struct drm_device *dev, struct vc4_hang_state *state)
57{
58 unsigned int i;
59
60 for (i = 0; i < state->user_state.bo_count; i++)
61 drm_gem_object_put(state->bo[i]);
62
63 kfree(state);
64}
65
66int
67vc4_get_hang_state_ioctl(struct drm_device *dev, void *data,
68 struct drm_file *file_priv)
69{
70 struct drm_vc4_get_hang_state *get_state = data;
71 struct drm_vc4_get_hang_state_bo *bo_state;
72 struct vc4_hang_state *kernel_state;
73 struct drm_vc4_get_hang_state *state;
74 struct vc4_dev *vc4 = to_vc4_dev(dev);
75 unsigned long irqflags;
76 u32 i;
77 int ret = 0;
78
79 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
80 return -ENODEV;
81
82 if (!vc4->v3d) {
83 DRM_DEBUG("VC4_GET_HANG_STATE with no VC4 V3D probed\n");
84 return -ENODEV;
85 }
86
87 spin_lock_irqsave(&vc4->job_lock, irqflags);
88 kernel_state = vc4->hang_state;
89 if (!kernel_state) {
90 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
91 return -ENOENT;
92 }
93 state = &kernel_state->user_state;
94
95 /* If the user's array isn't big enough, just return the
96 * required array size.
97 */
98 if (get_state->bo_count < state->bo_count) {
99 get_state->bo_count = state->bo_count;
100 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
101 return 0;
102 }
103
104 vc4->hang_state = NULL;
105 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
106
107 /* Save the user's BO pointer, so we don't stomp it with the memcpy. */
108 state->bo = get_state->bo;
109 memcpy(get_state, state, sizeof(*state));
110
111 bo_state = kcalloc(state->bo_count, sizeof(*bo_state), GFP_KERNEL);
112 if (!bo_state) {
113 ret = -ENOMEM;
114 goto err_free;
115 }
116
117 for (i = 0; i < state->bo_count; i++) {
118 struct vc4_bo *vc4_bo = to_vc4_bo(kernel_state->bo[i]);
119 u32 handle;
120
121 ret = drm_gem_handle_create(file_priv, kernel_state->bo[i],
122 &handle);
123
124 if (ret) {
125 state->bo_count = i;
126 goto err_delete_handle;
127 }
128 bo_state[i].handle = handle;
129 bo_state[i].paddr = vc4_bo->base.dma_addr;
130 bo_state[i].size = vc4_bo->base.base.size;
131 }
132
133 if (copy_to_user(u64_to_user_ptr(get_state->bo),
134 bo_state,
135 state->bo_count * sizeof(*bo_state)))
136 ret = -EFAULT;
137
138err_delete_handle:
139 if (ret) {
140 for (i = 0; i < state->bo_count; i++)
141 drm_gem_handle_delete(file_priv, bo_state[i].handle);
142 }
143
144err_free:
145 vc4_free_hang_state(dev, kernel_state);
146 kfree(bo_state);
147
148 return ret;
149}
150
151static void
152vc4_save_hang_state(struct drm_device *dev)
153{
154 struct vc4_dev *vc4 = to_vc4_dev(dev);
155 struct drm_vc4_get_hang_state *state;
156 struct vc4_hang_state *kernel_state;
157 struct vc4_exec_info *exec[2];
158 struct vc4_bo *bo;
159 unsigned long irqflags;
160 unsigned int i, j, k, unref_list_count;
161
162 kernel_state = kcalloc(1, sizeof(*kernel_state), GFP_KERNEL);
163 if (!kernel_state)
164 return;
165
166 state = &kernel_state->user_state;
167
168 spin_lock_irqsave(&vc4->job_lock, irqflags);
169 exec[0] = vc4_first_bin_job(vc4);
170 exec[1] = vc4_first_render_job(vc4);
171 if (!exec[0] && !exec[1]) {
172 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
173 return;
174 }
175
176 /* Get the bos from both binner and renderer into hang state. */
177 state->bo_count = 0;
178 for (i = 0; i < 2; i++) {
179 if (!exec[i])
180 continue;
181
182 unref_list_count = 0;
183 list_for_each_entry(bo, &exec[i]->unref_list, unref_head)
184 unref_list_count++;
185 state->bo_count += exec[i]->bo_count + unref_list_count;
186 }
187
188 kernel_state->bo = kcalloc(state->bo_count,
189 sizeof(*kernel_state->bo), GFP_ATOMIC);
190
191 if (!kernel_state->bo) {
192 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
193 return;
194 }
195
196 k = 0;
197 for (i = 0; i < 2; i++) {
198 if (!exec[i])
199 continue;
200
201 for (j = 0; j < exec[i]->bo_count; j++) {
202 bo = to_vc4_bo(exec[i]->bo[j]);
203
204 /* Retain BOs just in case they were marked purgeable.
205 * This prevents the BO from being purged before
206 * someone had a chance to dump the hang state.
207 */
208 WARN_ON(!refcount_read(&bo->usecnt));
209 refcount_inc(&bo->usecnt);
210 drm_gem_object_get(exec[i]->bo[j]);
211 kernel_state->bo[k++] = exec[i]->bo[j];
212 }
213
214 list_for_each_entry(bo, &exec[i]->unref_list, unref_head) {
215 /* No need to retain BOs coming from the ->unref_list
216 * because they are naturally unpurgeable.
217 */
218 drm_gem_object_get(&bo->base.base);
219 kernel_state->bo[k++] = &bo->base.base;
220 }
221 }
222
223 WARN_ON_ONCE(k != state->bo_count);
224
225 if (exec[0])
226 state->start_bin = exec[0]->ct0ca;
227 if (exec[1])
228 state->start_render = exec[1]->ct1ca;
229
230 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
231
232 state->ct0ca = V3D_READ(V3D_CTNCA(0));
233 state->ct0ea = V3D_READ(V3D_CTNEA(0));
234
235 state->ct1ca = V3D_READ(V3D_CTNCA(1));
236 state->ct1ea = V3D_READ(V3D_CTNEA(1));
237
238 state->ct0cs = V3D_READ(V3D_CTNCS(0));
239 state->ct1cs = V3D_READ(V3D_CTNCS(1));
240
241 state->ct0ra0 = V3D_READ(V3D_CT00RA0);
242 state->ct1ra0 = V3D_READ(V3D_CT01RA0);
243
244 state->bpca = V3D_READ(V3D_BPCA);
245 state->bpcs = V3D_READ(V3D_BPCS);
246 state->bpoa = V3D_READ(V3D_BPOA);
247 state->bpos = V3D_READ(V3D_BPOS);
248
249 state->vpmbase = V3D_READ(V3D_VPMBASE);
250
251 state->dbge = V3D_READ(V3D_DBGE);
252 state->fdbgo = V3D_READ(V3D_FDBGO);
253 state->fdbgb = V3D_READ(V3D_FDBGB);
254 state->fdbgr = V3D_READ(V3D_FDBGR);
255 state->fdbgs = V3D_READ(V3D_FDBGS);
256 state->errstat = V3D_READ(V3D_ERRSTAT);
257
258 /* We need to turn purgeable BOs into unpurgeable ones so that
259 * userspace has a chance to dump the hang state before the kernel
260 * decides to purge those BOs.
261 * Note that BO consistency at dump time cannot be guaranteed. For
262 * example, if the owner of these BOs decides to re-use them or mark
263 * them purgeable again there's nothing we can do to prevent it.
264 */
265 for (i = 0; i < kernel_state->user_state.bo_count; i++) {
266 struct vc4_bo *bo = to_vc4_bo(kernel_state->bo[i]);
267
268 if (bo->madv == __VC4_MADV_NOTSUPP)
269 continue;
270
271 mutex_lock(&bo->madv_lock);
272 if (!WARN_ON(bo->madv == __VC4_MADV_PURGED))
273 bo->madv = VC4_MADV_WILLNEED;
274 refcount_dec(&bo->usecnt);
275 mutex_unlock(&bo->madv_lock);
276 }
277
278 spin_lock_irqsave(&vc4->job_lock, irqflags);
279 if (vc4->hang_state) {
280 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
281 vc4_free_hang_state(dev, kernel_state);
282 } else {
283 vc4->hang_state = kernel_state;
284 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
285 }
286}
287
288static void
289vc4_reset(struct drm_device *dev)
290{
291 struct vc4_dev *vc4 = to_vc4_dev(dev);
292
293 DRM_INFO("Resetting GPU.\n");
294
295 mutex_lock(&vc4->power_lock);
296 if (vc4->power_refcount) {
297 /* Power the device off and back on the by dropping the
298 * reference on runtime PM.
299 */
300 pm_runtime_put_sync_suspend(&vc4->v3d->pdev->dev);
301 pm_runtime_get_sync(&vc4->v3d->pdev->dev);
302 }
303 mutex_unlock(&vc4->power_lock);
304
305 vc4_irq_reset(dev);
306
307 /* Rearm the hangcheck -- another job might have been waiting
308 * for our hung one to get kicked off, and vc4_irq_reset()
309 * would have started it.
310 */
311 vc4_queue_hangcheck(dev);
312}
313
314static void
315vc4_reset_work(struct work_struct *work)
316{
317 struct vc4_dev *vc4 =
318 container_of(work, struct vc4_dev, hangcheck.reset_work);
319
320 vc4_save_hang_state(&vc4->base);
321
322 vc4_reset(&vc4->base);
323}
324
325static void
326vc4_hangcheck_elapsed(struct timer_list *t)
327{
328 struct vc4_dev *vc4 = from_timer(vc4, t, hangcheck.timer);
329 struct drm_device *dev = &vc4->base;
330 uint32_t ct0ca, ct1ca;
331 unsigned long irqflags;
332 struct vc4_exec_info *bin_exec, *render_exec;
333
334 spin_lock_irqsave(&vc4->job_lock, irqflags);
335
336 bin_exec = vc4_first_bin_job(vc4);
337 render_exec = vc4_first_render_job(vc4);
338
339 /* If idle, we can stop watching for hangs. */
340 if (!bin_exec && !render_exec) {
341 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
342 return;
343 }
344
345 ct0ca = V3D_READ(V3D_CTNCA(0));
346 ct1ca = V3D_READ(V3D_CTNCA(1));
347
348 /* If we've made any progress in execution, rearm the timer
349 * and wait.
350 */
351 if ((bin_exec && ct0ca != bin_exec->last_ct0ca) ||
352 (render_exec && ct1ca != render_exec->last_ct1ca)) {
353 if (bin_exec)
354 bin_exec->last_ct0ca = ct0ca;
355 if (render_exec)
356 render_exec->last_ct1ca = ct1ca;
357 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
358 vc4_queue_hangcheck(dev);
359 return;
360 }
361
362 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
363
364 /* We've gone too long with no progress, reset. This has to
365 * be done from a work struct, since resetting can sleep and
366 * this timer hook isn't allowed to.
367 */
368 schedule_work(&vc4->hangcheck.reset_work);
369}
370
371static void
372submit_cl(struct drm_device *dev, uint32_t thread, uint32_t start, uint32_t end)
373{
374 struct vc4_dev *vc4 = to_vc4_dev(dev);
375
376 /* Set the current and end address of the control list.
377 * Writing the end register is what starts the job.
378 */
379 V3D_WRITE(V3D_CTNCA(thread), start);
380 V3D_WRITE(V3D_CTNEA(thread), end);
381}
382
383int
384vc4_wait_for_seqno(struct drm_device *dev, uint64_t seqno, uint64_t timeout_ns,
385 bool interruptible)
386{
387 struct vc4_dev *vc4 = to_vc4_dev(dev);
388 int ret = 0;
389 unsigned long timeout_expire;
390 DEFINE_WAIT(wait);
391
392 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
393 return -ENODEV;
394
395 if (vc4->finished_seqno >= seqno)
396 return 0;
397
398 if (timeout_ns == 0)
399 return -ETIME;
400
401 timeout_expire = jiffies + nsecs_to_jiffies(timeout_ns);
402
403 trace_vc4_wait_for_seqno_begin(dev, seqno, timeout_ns);
404 for (;;) {
405 prepare_to_wait(&vc4->job_wait_queue, &wait,
406 interruptible ? TASK_INTERRUPTIBLE :
407 TASK_UNINTERRUPTIBLE);
408
409 if (interruptible && signal_pending(current)) {
410 ret = -ERESTARTSYS;
411 break;
412 }
413
414 if (vc4->finished_seqno >= seqno)
415 break;
416
417 if (timeout_ns != ~0ull) {
418 if (time_after_eq(jiffies, timeout_expire)) {
419 ret = -ETIME;
420 break;
421 }
422 schedule_timeout(timeout_expire - jiffies);
423 } else {
424 schedule();
425 }
426 }
427
428 finish_wait(&vc4->job_wait_queue, &wait);
429 trace_vc4_wait_for_seqno_end(dev, seqno);
430
431 return ret;
432}
433
434static void
435vc4_flush_caches(struct drm_device *dev)
436{
437 struct vc4_dev *vc4 = to_vc4_dev(dev);
438
439 /* Flush the GPU L2 caches. These caches sit on top of system
440 * L3 (the 128kb or so shared with the CPU), and are
441 * non-allocating in the L3.
442 */
443 V3D_WRITE(V3D_L2CACTL,
444 V3D_L2CACTL_L2CCLR);
445
446 V3D_WRITE(V3D_SLCACTL,
447 VC4_SET_FIELD(0xf, V3D_SLCACTL_T1CC) |
448 VC4_SET_FIELD(0xf, V3D_SLCACTL_T0CC) |
449 VC4_SET_FIELD(0xf, V3D_SLCACTL_UCC) |
450 VC4_SET_FIELD(0xf, V3D_SLCACTL_ICC));
451}
452
453static void
454vc4_flush_texture_caches(struct drm_device *dev)
455{
456 struct vc4_dev *vc4 = to_vc4_dev(dev);
457
458 V3D_WRITE(V3D_L2CACTL,
459 V3D_L2CACTL_L2CCLR);
460
461 V3D_WRITE(V3D_SLCACTL,
462 VC4_SET_FIELD(0xf, V3D_SLCACTL_T1CC) |
463 VC4_SET_FIELD(0xf, V3D_SLCACTL_T0CC));
464}
465
466/* Sets the registers for the next job to be actually be executed in
467 * the hardware.
468 *
469 * The job_lock should be held during this.
470 */
471void
472vc4_submit_next_bin_job(struct drm_device *dev)
473{
474 struct vc4_dev *vc4 = to_vc4_dev(dev);
475 struct vc4_exec_info *exec;
476
477 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
478 return;
479
480again:
481 exec = vc4_first_bin_job(vc4);
482 if (!exec)
483 return;
484
485 vc4_flush_caches(dev);
486
487 /* Only start the perfmon if it was not already started by a previous
488 * job.
489 */
490 if (exec->perfmon && vc4->active_perfmon != exec->perfmon)
491 vc4_perfmon_start(vc4, exec->perfmon);
492
493 /* Either put the job in the binner if it uses the binner, or
494 * immediately move it to the to-be-rendered queue.
495 */
496 if (exec->ct0ca != exec->ct0ea) {
497 trace_vc4_submit_cl(dev, false, exec->seqno, exec->ct0ca,
498 exec->ct0ea);
499 submit_cl(dev, 0, exec->ct0ca, exec->ct0ea);
500 } else {
501 struct vc4_exec_info *next;
502
503 vc4_move_job_to_render(dev, exec);
504 next = vc4_first_bin_job(vc4);
505
506 /* We can't start the next bin job if the previous job had a
507 * different perfmon instance attached to it. The same goes
508 * if one of them had a perfmon attached to it and the other
509 * one doesn't.
510 */
511 if (next && next->perfmon == exec->perfmon)
512 goto again;
513 }
514}
515
516void
517vc4_submit_next_render_job(struct drm_device *dev)
518{
519 struct vc4_dev *vc4 = to_vc4_dev(dev);
520 struct vc4_exec_info *exec = vc4_first_render_job(vc4);
521
522 if (!exec)
523 return;
524
525 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
526 return;
527
528 /* A previous RCL may have written to one of our textures, and
529 * our full cache flush at bin time may have occurred before
530 * that RCL completed. Flush the texture cache now, but not
531 * the instructions or uniforms (since we don't write those
532 * from an RCL).
533 */
534 vc4_flush_texture_caches(dev);
535
536 trace_vc4_submit_cl(dev, true, exec->seqno, exec->ct1ca, exec->ct1ea);
537 submit_cl(dev, 1, exec->ct1ca, exec->ct1ea);
538}
539
540void
541vc4_move_job_to_render(struct drm_device *dev, struct vc4_exec_info *exec)
542{
543 struct vc4_dev *vc4 = to_vc4_dev(dev);
544 bool was_empty = list_empty(&vc4->render_job_list);
545
546 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
547 return;
548
549 list_move_tail(&exec->head, &vc4->render_job_list);
550 if (was_empty)
551 vc4_submit_next_render_job(dev);
552}
553
554static void
555vc4_update_bo_seqnos(struct vc4_exec_info *exec, uint64_t seqno)
556{
557 struct vc4_bo *bo;
558 unsigned i;
559
560 for (i = 0; i < exec->bo_count; i++) {
561 bo = to_vc4_bo(exec->bo[i]);
562 bo->seqno = seqno;
563
564 dma_resv_add_fence(bo->base.base.resv, exec->fence,
565 DMA_RESV_USAGE_READ);
566 }
567
568 list_for_each_entry(bo, &exec->unref_list, unref_head) {
569 bo->seqno = seqno;
570 }
571
572 for (i = 0; i < exec->rcl_write_bo_count; i++) {
573 bo = to_vc4_bo(&exec->rcl_write_bo[i]->base);
574 bo->write_seqno = seqno;
575
576 dma_resv_add_fence(bo->base.base.resv, exec->fence,
577 DMA_RESV_USAGE_WRITE);
578 }
579}
580
581static void
582vc4_unlock_bo_reservations(struct drm_device *dev,
583 struct vc4_exec_info *exec,
584 struct ww_acquire_ctx *acquire_ctx)
585{
586 int i;
587
588 for (i = 0; i < exec->bo_count; i++)
589 dma_resv_unlock(exec->bo[i]->resv);
590
591 ww_acquire_fini(acquire_ctx);
592}
593
594/* Takes the reservation lock on all the BOs being referenced, so that
595 * at queue submit time we can update the reservations.
596 *
597 * We don't lock the RCL the tile alloc/state BOs, or overflow memory
598 * (all of which are on exec->unref_list). They're entirely private
599 * to vc4, so we don't attach dma-buf fences to them.
600 */
601static int
602vc4_lock_bo_reservations(struct drm_device *dev,
603 struct vc4_exec_info *exec,
604 struct ww_acquire_ctx *acquire_ctx)
605{
606 int contended_lock = -1;
607 int i, ret;
608 struct drm_gem_object *bo;
609
610 ww_acquire_init(acquire_ctx, &reservation_ww_class);
611
612retry:
613 if (contended_lock != -1) {
614 bo = exec->bo[contended_lock];
615 ret = dma_resv_lock_slow_interruptible(bo->resv, acquire_ctx);
616 if (ret) {
617 ww_acquire_done(acquire_ctx);
618 return ret;
619 }
620 }
621
622 for (i = 0; i < exec->bo_count; i++) {
623 if (i == contended_lock)
624 continue;
625
626 bo = exec->bo[i];
627
628 ret = dma_resv_lock_interruptible(bo->resv, acquire_ctx);
629 if (ret) {
630 int j;
631
632 for (j = 0; j < i; j++) {
633 bo = exec->bo[j];
634 dma_resv_unlock(bo->resv);
635 }
636
637 if (contended_lock != -1 && contended_lock >= i) {
638 bo = exec->bo[contended_lock];
639
640 dma_resv_unlock(bo->resv);
641 }
642
643 if (ret == -EDEADLK) {
644 contended_lock = i;
645 goto retry;
646 }
647
648 ww_acquire_done(acquire_ctx);
649 return ret;
650 }
651 }
652
653 ww_acquire_done(acquire_ctx);
654
655 /* Reserve space for our shared (read-only) fence references,
656 * before we commit the CL to the hardware.
657 */
658 for (i = 0; i < exec->bo_count; i++) {
659 bo = exec->bo[i];
660
661 ret = dma_resv_reserve_fences(bo->resv, 1);
662 if (ret) {
663 vc4_unlock_bo_reservations(dev, exec, acquire_ctx);
664 return ret;
665 }
666 }
667
668 return 0;
669}
670
671/* Queues a struct vc4_exec_info for execution. If no job is
672 * currently executing, then submits it.
673 *
674 * Unlike most GPUs, our hardware only handles one command list at a
675 * time. To queue multiple jobs at once, we'd need to edit the
676 * previous command list to have a jump to the new one at the end, and
677 * then bump the end address. That's a change for a later date,
678 * though.
679 */
680static int
681vc4_queue_submit(struct drm_device *dev, struct vc4_exec_info *exec,
682 struct ww_acquire_ctx *acquire_ctx,
683 struct drm_syncobj *out_sync)
684{
685 struct vc4_dev *vc4 = to_vc4_dev(dev);
686 struct vc4_exec_info *renderjob;
687 uint64_t seqno;
688 unsigned long irqflags;
689 struct vc4_fence *fence;
690
691 fence = kzalloc(sizeof(*fence), GFP_KERNEL);
692 if (!fence)
693 return -ENOMEM;
694 fence->dev = dev;
695
696 spin_lock_irqsave(&vc4->job_lock, irqflags);
697
698 seqno = ++vc4->emit_seqno;
699 exec->seqno = seqno;
700
701 dma_fence_init(&fence->base, &vc4_fence_ops, &vc4->job_lock,
702 vc4->dma_fence_context, exec->seqno);
703 fence->seqno = exec->seqno;
704 exec->fence = &fence->base;
705
706 if (out_sync)
707 drm_syncobj_replace_fence(out_sync, exec->fence);
708
709 vc4_update_bo_seqnos(exec, seqno);
710
711 vc4_unlock_bo_reservations(dev, exec, acquire_ctx);
712
713 list_add_tail(&exec->head, &vc4->bin_job_list);
714
715 /* If no bin job was executing and if the render job (if any) has the
716 * same perfmon as our job attached to it (or if both jobs don't have
717 * perfmon activated), then kick ours off. Otherwise, it'll get
718 * started when the previous job's flush/render done interrupt occurs.
719 */
720 renderjob = vc4_first_render_job(vc4);
721 if (vc4_first_bin_job(vc4) == exec &&
722 (!renderjob || renderjob->perfmon == exec->perfmon)) {
723 vc4_submit_next_bin_job(dev);
724 vc4_queue_hangcheck(dev);
725 }
726
727 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
728
729 return 0;
730}
731
732/**
733 * vc4_cl_lookup_bos() - Sets up exec->bo[] with the GEM objects
734 * referenced by the job.
735 * @dev: DRM device
736 * @file_priv: DRM file for this fd
737 * @exec: V3D job being set up
738 *
739 * The command validator needs to reference BOs by their index within
740 * the submitted job's BO list. This does the validation of the job's
741 * BO list and reference counting for the lifetime of the job.
742 */
743static int
744vc4_cl_lookup_bos(struct drm_device *dev,
745 struct drm_file *file_priv,
746 struct vc4_exec_info *exec)
747{
748 struct drm_vc4_submit_cl *args = exec->args;
749 int ret = 0;
750 int i;
751
752 exec->bo_count = args->bo_handle_count;
753
754 if (!exec->bo_count) {
755 /* See comment on bo_index for why we have to check
756 * this.
757 */
758 DRM_DEBUG("Rendering requires BOs to validate\n");
759 return -EINVAL;
760 }
761
762 ret = drm_gem_objects_lookup(file_priv, u64_to_user_ptr(args->bo_handles),
763 exec->bo_count, &exec->bo);
764
765 if (ret)
766 goto fail_put_bo;
767
768 for (i = 0; i < exec->bo_count; i++) {
769 ret = vc4_bo_inc_usecnt(to_vc4_bo(exec->bo[i]));
770 if (ret)
771 goto fail_dec_usecnt;
772 }
773
774 return 0;
775
776fail_dec_usecnt:
777 /* Decrease usecnt on acquired objects.
778 * We cannot rely on vc4_complete_exec() to release resources here,
779 * because vc4_complete_exec() has no information about which BO has
780 * had its ->usecnt incremented.
781 * To make things easier we just free everything explicitly and set
782 * exec->bo to NULL so that vc4_complete_exec() skips the 'BO release'
783 * step.
784 */
785 for (i-- ; i >= 0; i--)
786 vc4_bo_dec_usecnt(to_vc4_bo(exec->bo[i]));
787
788fail_put_bo:
789 /* Release any reference to acquired objects. */
790 for (i = 0; i < exec->bo_count && exec->bo[i]; i++)
791 drm_gem_object_put(exec->bo[i]);
792
793 kvfree(exec->bo);
794 exec->bo = NULL;
795 return ret;
796}
797
798static int
799vc4_get_bcl(struct drm_device *dev, struct vc4_exec_info *exec)
800{
801 struct drm_vc4_submit_cl *args = exec->args;
802 struct vc4_dev *vc4 = to_vc4_dev(dev);
803 void *temp = NULL;
804 void *bin;
805 int ret = 0;
806 uint32_t bin_offset = 0;
807 uint32_t shader_rec_offset = roundup(bin_offset + args->bin_cl_size,
808 16);
809 uint32_t uniforms_offset = shader_rec_offset + args->shader_rec_size;
810 uint32_t exec_size = uniforms_offset + args->uniforms_size;
811 uint32_t temp_size = exec_size + (sizeof(struct vc4_shader_state) *
812 args->shader_rec_count);
813 struct vc4_bo *bo;
814
815 if (shader_rec_offset < args->bin_cl_size ||
816 uniforms_offset < shader_rec_offset ||
817 exec_size < uniforms_offset ||
818 args->shader_rec_count >= (UINT_MAX /
819 sizeof(struct vc4_shader_state)) ||
820 temp_size < exec_size) {
821 DRM_DEBUG("overflow in exec arguments\n");
822 ret = -EINVAL;
823 goto fail;
824 }
825
826 /* Allocate space where we'll store the copied in user command lists
827 * and shader records.
828 *
829 * We don't just copy directly into the BOs because we need to
830 * read the contents back for validation, and I think the
831 * bo->vaddr is uncached access.
832 */
833 temp = kvmalloc_array(temp_size, 1, GFP_KERNEL);
834 if (!temp) {
835 drm_err(dev, "Failed to allocate storage for copying "
836 "in bin/render CLs.\n");
837 ret = -ENOMEM;
838 goto fail;
839 }
840 bin = temp + bin_offset;
841 exec->shader_rec_u = temp + shader_rec_offset;
842 exec->uniforms_u = temp + uniforms_offset;
843 exec->shader_state = temp + exec_size;
844 exec->shader_state_size = args->shader_rec_count;
845
846 if (copy_from_user(bin,
847 u64_to_user_ptr(args->bin_cl),
848 args->bin_cl_size)) {
849 ret = -EFAULT;
850 goto fail;
851 }
852
853 if (copy_from_user(exec->shader_rec_u,
854 u64_to_user_ptr(args->shader_rec),
855 args->shader_rec_size)) {
856 ret = -EFAULT;
857 goto fail;
858 }
859
860 if (copy_from_user(exec->uniforms_u,
861 u64_to_user_ptr(args->uniforms),
862 args->uniforms_size)) {
863 ret = -EFAULT;
864 goto fail;
865 }
866
867 bo = vc4_bo_create(dev, exec_size, true, VC4_BO_TYPE_BCL);
868 if (IS_ERR(bo)) {
869 drm_err(dev, "Couldn't allocate BO for binning\n");
870 ret = PTR_ERR(bo);
871 goto fail;
872 }
873 exec->exec_bo = &bo->base;
874
875 list_add_tail(&to_vc4_bo(&exec->exec_bo->base)->unref_head,
876 &exec->unref_list);
877
878 exec->ct0ca = exec->exec_bo->dma_addr + bin_offset;
879
880 exec->bin_u = bin;
881
882 exec->shader_rec_v = exec->exec_bo->vaddr + shader_rec_offset;
883 exec->shader_rec_p = exec->exec_bo->dma_addr + shader_rec_offset;
884 exec->shader_rec_size = args->shader_rec_size;
885
886 exec->uniforms_v = exec->exec_bo->vaddr + uniforms_offset;
887 exec->uniforms_p = exec->exec_bo->dma_addr + uniforms_offset;
888 exec->uniforms_size = args->uniforms_size;
889
890 ret = vc4_validate_bin_cl(dev,
891 exec->exec_bo->vaddr + bin_offset,
892 bin,
893 exec);
894 if (ret)
895 goto fail;
896
897 ret = vc4_validate_shader_recs(dev, exec);
898 if (ret)
899 goto fail;
900
901 if (exec->found_tile_binning_mode_config_packet) {
902 ret = vc4_v3d_bin_bo_get(vc4, &exec->bin_bo_used);
903 if (ret)
904 goto fail;
905 }
906
907 /* Block waiting on any previous rendering into the CS's VBO,
908 * IB, or textures, so that pixels are actually written by the
909 * time we try to read them.
910 */
911 ret = vc4_wait_for_seqno(dev, exec->bin_dep_seqno, ~0ull, true);
912
913fail:
914 kvfree(temp);
915 return ret;
916}
917
918static void
919vc4_complete_exec(struct drm_device *dev, struct vc4_exec_info *exec)
920{
921 struct vc4_dev *vc4 = to_vc4_dev(dev);
922 unsigned long irqflags;
923 unsigned i;
924
925 /* If we got force-completed because of GPU reset rather than
926 * through our IRQ handler, signal the fence now.
927 */
928 if (exec->fence) {
929 dma_fence_signal(exec->fence);
930 dma_fence_put(exec->fence);
931 }
932
933 if (exec->bo) {
934 for (i = 0; i < exec->bo_count; i++) {
935 struct vc4_bo *bo = to_vc4_bo(exec->bo[i]);
936
937 vc4_bo_dec_usecnt(bo);
938 drm_gem_object_put(exec->bo[i]);
939 }
940 kvfree(exec->bo);
941 }
942
943 while (!list_empty(&exec->unref_list)) {
944 struct vc4_bo *bo = list_first_entry(&exec->unref_list,
945 struct vc4_bo, unref_head);
946 list_del(&bo->unref_head);
947 drm_gem_object_put(&bo->base.base);
948 }
949
950 /* Free up the allocation of any bin slots we used. */
951 spin_lock_irqsave(&vc4->job_lock, irqflags);
952 vc4->bin_alloc_used &= ~exec->bin_slots;
953 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
954
955 /* Release the reference on the binner BO if needed. */
956 if (exec->bin_bo_used)
957 vc4_v3d_bin_bo_put(vc4);
958
959 /* Release the reference we had on the perf monitor. */
960 vc4_perfmon_put(exec->perfmon);
961
962 vc4_v3d_pm_put(vc4);
963
964 kfree(exec);
965}
966
967void
968vc4_job_handle_completed(struct vc4_dev *vc4)
969{
970 unsigned long irqflags;
971 struct vc4_seqno_cb *cb, *cb_temp;
972
973 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
974 return;
975
976 spin_lock_irqsave(&vc4->job_lock, irqflags);
977 while (!list_empty(&vc4->job_done_list)) {
978 struct vc4_exec_info *exec =
979 list_first_entry(&vc4->job_done_list,
980 struct vc4_exec_info, head);
981 list_del(&exec->head);
982
983 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
984 vc4_complete_exec(&vc4->base, exec);
985 spin_lock_irqsave(&vc4->job_lock, irqflags);
986 }
987
988 list_for_each_entry_safe(cb, cb_temp, &vc4->seqno_cb_list, work.entry) {
989 if (cb->seqno <= vc4->finished_seqno) {
990 list_del_init(&cb->work.entry);
991 schedule_work(&cb->work);
992 }
993 }
994
995 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
996}
997
998static void vc4_seqno_cb_work(struct work_struct *work)
999{
1000 struct vc4_seqno_cb *cb = container_of(work, struct vc4_seqno_cb, work);
1001
1002 cb->func(cb);
1003}
1004
1005int vc4_queue_seqno_cb(struct drm_device *dev,
1006 struct vc4_seqno_cb *cb, uint64_t seqno,
1007 void (*func)(struct vc4_seqno_cb *cb))
1008{
1009 struct vc4_dev *vc4 = to_vc4_dev(dev);
1010 unsigned long irqflags;
1011
1012 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
1013 return -ENODEV;
1014
1015 cb->func = func;
1016 INIT_WORK(&cb->work, vc4_seqno_cb_work);
1017
1018 spin_lock_irqsave(&vc4->job_lock, irqflags);
1019 if (seqno > vc4->finished_seqno) {
1020 cb->seqno = seqno;
1021 list_add_tail(&cb->work.entry, &vc4->seqno_cb_list);
1022 } else {
1023 schedule_work(&cb->work);
1024 }
1025 spin_unlock_irqrestore(&vc4->job_lock, irqflags);
1026
1027 return 0;
1028}
1029
1030/* Scheduled when any job has been completed, this walks the list of
1031 * jobs that had completed and unrefs their BOs and frees their exec
1032 * structs.
1033 */
1034static void
1035vc4_job_done_work(struct work_struct *work)
1036{
1037 struct vc4_dev *vc4 =
1038 container_of(work, struct vc4_dev, job_done_work);
1039
1040 vc4_job_handle_completed(vc4);
1041}
1042
1043static int
1044vc4_wait_for_seqno_ioctl_helper(struct drm_device *dev,
1045 uint64_t seqno,
1046 uint64_t *timeout_ns)
1047{
1048 unsigned long start = jiffies;
1049 int ret = vc4_wait_for_seqno(dev, seqno, *timeout_ns, true);
1050
1051 if ((ret == -EINTR || ret == -ERESTARTSYS) && *timeout_ns != ~0ull) {
1052 uint64_t delta = jiffies_to_nsecs(jiffies - start);
1053
1054 if (*timeout_ns >= delta)
1055 *timeout_ns -= delta;
1056 }
1057
1058 return ret;
1059}
1060
1061int
1062vc4_wait_seqno_ioctl(struct drm_device *dev, void *data,
1063 struct drm_file *file_priv)
1064{
1065 struct vc4_dev *vc4 = to_vc4_dev(dev);
1066 struct drm_vc4_wait_seqno *args = data;
1067
1068 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
1069 return -ENODEV;
1070
1071 return vc4_wait_for_seqno_ioctl_helper(dev, args->seqno,
1072 &args->timeout_ns);
1073}
1074
1075int
1076vc4_wait_bo_ioctl(struct drm_device *dev, void *data,
1077 struct drm_file *file_priv)
1078{
1079 struct vc4_dev *vc4 = to_vc4_dev(dev);
1080 int ret;
1081 struct drm_vc4_wait_bo *args = data;
1082 struct drm_gem_object *gem_obj;
1083 struct vc4_bo *bo;
1084
1085 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
1086 return -ENODEV;
1087
1088 if (args->pad != 0)
1089 return -EINVAL;
1090
1091 gem_obj = drm_gem_object_lookup(file_priv, args->handle);
1092 if (!gem_obj) {
1093 DRM_DEBUG("Failed to look up GEM BO %d\n", args->handle);
1094 return -EINVAL;
1095 }
1096 bo = to_vc4_bo(gem_obj);
1097
1098 ret = vc4_wait_for_seqno_ioctl_helper(dev, bo->seqno,
1099 &args->timeout_ns);
1100
1101 drm_gem_object_put(gem_obj);
1102 return ret;
1103}
1104
1105/**
1106 * vc4_submit_cl_ioctl() - Submits a job (frame) to the VC4.
1107 * @dev: DRM device
1108 * @data: ioctl argument
1109 * @file_priv: DRM file for this fd
1110 *
1111 * This is the main entrypoint for userspace to submit a 3D frame to
1112 * the GPU. Userspace provides the binner command list (if
1113 * applicable), and the kernel sets up the render command list to draw
1114 * to the framebuffer described in the ioctl, using the command lists
1115 * that the 3D engine's binner will produce.
1116 */
1117int
1118vc4_submit_cl_ioctl(struct drm_device *dev, void *data,
1119 struct drm_file *file_priv)
1120{
1121 struct vc4_dev *vc4 = to_vc4_dev(dev);
1122 struct vc4_file *vc4file = file_priv->driver_priv;
1123 struct drm_vc4_submit_cl *args = data;
1124 struct drm_syncobj *out_sync = NULL;
1125 struct vc4_exec_info *exec;
1126 struct ww_acquire_ctx acquire_ctx;
1127 struct dma_fence *in_fence;
1128 int ret = 0;
1129
1130 trace_vc4_submit_cl_ioctl(dev, args->bin_cl_size,
1131 args->shader_rec_size,
1132 args->bo_handle_count);
1133
1134 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
1135 return -ENODEV;
1136
1137 if (!vc4->v3d) {
1138 DRM_DEBUG("VC4_SUBMIT_CL with no VC4 V3D probed\n");
1139 return -ENODEV;
1140 }
1141
1142 if ((args->flags & ~(VC4_SUBMIT_CL_USE_CLEAR_COLOR |
1143 VC4_SUBMIT_CL_FIXED_RCL_ORDER |
1144 VC4_SUBMIT_CL_RCL_ORDER_INCREASING_X |
1145 VC4_SUBMIT_CL_RCL_ORDER_INCREASING_Y)) != 0) {
1146 DRM_DEBUG("Unknown flags: 0x%02x\n", args->flags);
1147 return -EINVAL;
1148 }
1149
1150 if (args->pad2 != 0) {
1151 DRM_DEBUG("Invalid pad: 0x%08x\n", args->pad2);
1152 return -EINVAL;
1153 }
1154
1155 exec = kcalloc(1, sizeof(*exec), GFP_KERNEL);
1156 if (!exec)
1157 return -ENOMEM;
1158
1159 exec->dev = vc4;
1160
1161 ret = vc4_v3d_pm_get(vc4);
1162 if (ret) {
1163 kfree(exec);
1164 return ret;
1165 }
1166
1167 exec->args = args;
1168 INIT_LIST_HEAD(&exec->unref_list);
1169
1170 ret = vc4_cl_lookup_bos(dev, file_priv, exec);
1171 if (ret)
1172 goto fail;
1173
1174 if (args->perfmonid) {
1175 exec->perfmon = vc4_perfmon_find(vc4file,
1176 args->perfmonid);
1177 if (!exec->perfmon) {
1178 ret = -ENOENT;
1179 goto fail;
1180 }
1181 }
1182
1183 if (args->in_sync) {
1184 ret = drm_syncobj_find_fence(file_priv, args->in_sync,
1185 0, 0, &in_fence);
1186 if (ret)
1187 goto fail;
1188
1189 /* When the fence (or fence array) is exclusively from our
1190 * context we can skip the wait since jobs are executed in
1191 * order of their submission through this ioctl and this can
1192 * only have fences from a prior job.
1193 */
1194 if (!dma_fence_match_context(in_fence,
1195 vc4->dma_fence_context)) {
1196 ret = dma_fence_wait(in_fence, true);
1197 if (ret) {
1198 dma_fence_put(in_fence);
1199 goto fail;
1200 }
1201 }
1202
1203 dma_fence_put(in_fence);
1204 }
1205
1206 if (exec->args->bin_cl_size != 0) {
1207 ret = vc4_get_bcl(dev, exec);
1208 if (ret)
1209 goto fail;
1210 } else {
1211 exec->ct0ca = 0;
1212 exec->ct0ea = 0;
1213 }
1214
1215 ret = vc4_get_rcl(dev, exec);
1216 if (ret)
1217 goto fail;
1218
1219 ret = vc4_lock_bo_reservations(dev, exec, &acquire_ctx);
1220 if (ret)
1221 goto fail;
1222
1223 if (args->out_sync) {
1224 out_sync = drm_syncobj_find(file_priv, args->out_sync);
1225 if (!out_sync) {
1226 ret = -EINVAL;
1227 goto fail;
1228 }
1229
1230 /* We replace the fence in out_sync in vc4_queue_submit since
1231 * the render job could execute immediately after that call.
1232 * If it finishes before our ioctl processing resumes the
1233 * render job fence could already have been freed.
1234 */
1235 }
1236
1237 /* Clear this out of the struct we'll be putting in the queue,
1238 * since it's part of our stack.
1239 */
1240 exec->args = NULL;
1241
1242 ret = vc4_queue_submit(dev, exec, &acquire_ctx, out_sync);
1243
1244 /* The syncobj isn't part of the exec data and we need to free our
1245 * reference even if job submission failed.
1246 */
1247 if (out_sync)
1248 drm_syncobj_put(out_sync);
1249
1250 if (ret)
1251 goto fail;
1252
1253 /* Return the seqno for our job. */
1254 args->seqno = vc4->emit_seqno;
1255
1256 return 0;
1257
1258fail:
1259 vc4_complete_exec(&vc4->base, exec);
1260
1261 return ret;
1262}
1263
1264static void vc4_gem_destroy(struct drm_device *dev, void *unused);
1265int vc4_gem_init(struct drm_device *dev)
1266{
1267 struct vc4_dev *vc4 = to_vc4_dev(dev);
1268 int ret;
1269
1270 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
1271 return -ENODEV;
1272
1273 vc4->dma_fence_context = dma_fence_context_alloc(1);
1274
1275 INIT_LIST_HEAD(&vc4->bin_job_list);
1276 INIT_LIST_HEAD(&vc4->render_job_list);
1277 INIT_LIST_HEAD(&vc4->job_done_list);
1278 INIT_LIST_HEAD(&vc4->seqno_cb_list);
1279 spin_lock_init(&vc4->job_lock);
1280
1281 INIT_WORK(&vc4->hangcheck.reset_work, vc4_reset_work);
1282 timer_setup(&vc4->hangcheck.timer, vc4_hangcheck_elapsed, 0);
1283
1284 INIT_WORK(&vc4->job_done_work, vc4_job_done_work);
1285
1286 ret = drmm_mutex_init(dev, &vc4->power_lock);
1287 if (ret)
1288 return ret;
1289
1290 INIT_LIST_HEAD(&vc4->purgeable.list);
1291
1292 ret = drmm_mutex_init(dev, &vc4->purgeable.lock);
1293 if (ret)
1294 return ret;
1295
1296 return drmm_add_action_or_reset(dev, vc4_gem_destroy, NULL);
1297}
1298
1299static void vc4_gem_destroy(struct drm_device *dev, void *unused)
1300{
1301 struct vc4_dev *vc4 = to_vc4_dev(dev);
1302
1303 /* Waiting for exec to finish would need to be done before
1304 * unregistering V3D.
1305 */
1306 WARN_ON(vc4->emit_seqno != vc4->finished_seqno);
1307
1308 /* V3D should already have disabled its interrupt and cleared
1309 * the overflow allocation registers. Now free the object.
1310 */
1311 if (vc4->bin_bo) {
1312 drm_gem_object_put(&vc4->bin_bo->base.base);
1313 vc4->bin_bo = NULL;
1314 }
1315
1316 if (vc4->hang_state)
1317 vc4_free_hang_state(dev, vc4->hang_state);
1318}
1319
1320int vc4_gem_madvise_ioctl(struct drm_device *dev, void *data,
1321 struct drm_file *file_priv)
1322{
1323 struct vc4_dev *vc4 = to_vc4_dev(dev);
1324 struct drm_vc4_gem_madvise *args = data;
1325 struct drm_gem_object *gem_obj;
1326 struct vc4_bo *bo;
1327 int ret;
1328
1329 if (WARN_ON_ONCE(vc4->gen > VC4_GEN_4))
1330 return -ENODEV;
1331
1332 switch (args->madv) {
1333 case VC4_MADV_DONTNEED:
1334 case VC4_MADV_WILLNEED:
1335 break;
1336 default:
1337 return -EINVAL;
1338 }
1339
1340 if (args->pad != 0)
1341 return -EINVAL;
1342
1343 gem_obj = drm_gem_object_lookup(file_priv, args->handle);
1344 if (!gem_obj) {
1345 DRM_DEBUG("Failed to look up GEM BO %d\n", args->handle);
1346 return -ENOENT;
1347 }
1348
1349 bo = to_vc4_bo(gem_obj);
1350
1351 /* Only BOs exposed to userspace can be purged. */
1352 if (bo->madv == __VC4_MADV_NOTSUPP) {
1353 DRM_DEBUG("madvise not supported on this BO\n");
1354 ret = -EINVAL;
1355 goto out_put_gem;
1356 }
1357
1358 /* Not sure it's safe to purge imported BOs. Let's just assume it's
1359 * not until proven otherwise.
1360 */
1361 if (gem_obj->import_attach) {
1362 DRM_DEBUG("madvise not supported on imported BOs\n");
1363 ret = -EINVAL;
1364 goto out_put_gem;
1365 }
1366
1367 mutex_lock(&bo->madv_lock);
1368
1369 if (args->madv == VC4_MADV_DONTNEED && bo->madv == VC4_MADV_WILLNEED &&
1370 !refcount_read(&bo->usecnt)) {
1371 /* If the BO is about to be marked as purgeable, is not used
1372 * and is not already purgeable or purged, add it to the
1373 * purgeable list.
1374 */
1375 vc4_bo_add_to_purgeable_pool(bo);
1376 } else if (args->madv == VC4_MADV_WILLNEED &&
1377 bo->madv == VC4_MADV_DONTNEED &&
1378 !refcount_read(&bo->usecnt)) {
1379 /* The BO has not been purged yet, just remove it from
1380 * the purgeable list.
1381 */
1382 vc4_bo_remove_from_purgeable_pool(bo);
1383 }
1384
1385 /* Save the purged state. */
1386 args->retained = bo->madv != __VC4_MADV_PURGED;
1387
1388 /* Update internal madv state only if the bo was not purged. */
1389 if (bo->madv != __VC4_MADV_PURGED)
1390 bo->madv = args->madv;
1391
1392 mutex_unlock(&bo->madv_lock);
1393
1394 ret = 0;
1395
1396out_put_gem:
1397 drm_gem_object_put(gem_obj);
1398
1399 return ret;
1400}