xref: /linux/drivers/gpu/drm/nouveau/nouveau_gem.c (revision 3932b9ca55b0be314a36d3e84faff3e823c081f5)
1 /*
2  * Copyright (C) 2008 Ben Skeggs.
3  * All Rights Reserved.
4  *
5  * Permission is hereby granted, free of charge, to any person obtaining
6  * a copy of this software and associated documentation files (the
7  * "Software"), to deal in the Software without restriction, including
8  * without limitation the rights to use, copy, modify, merge, publish,
9  * distribute, sublicense, and/or sell copies of the Software, and to
10  * permit persons to whom the Software is furnished to do so, subject to
11  * the following conditions:
12  *
13  * The above copyright notice and this permission notice (including the
14  * next paragraph) shall be included in all copies or substantial
15  * portions of the Software.
16  *
17  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
18  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
19  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
20  * IN NO EVENT SHALL THE COPYRIGHT OWNER(S) AND/OR ITS SUPPLIERS BE
21  * LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
22  * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
23  * WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
24  *
25  */
26 
27 #include "nouveau_drm.h"
28 #include "nouveau_dma.h"
29 #include "nouveau_fence.h"
30 #include "nouveau_abi16.h"
31 
32 #include "nouveau_ttm.h"
33 #include "nouveau_gem.h"
34 
35 void
36 nouveau_gem_object_del(struct drm_gem_object *gem)
37 {
38 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
39 	struct ttm_buffer_object *bo = &nvbo->bo;
40 
41 	if (gem->import_attach)
42 		drm_prime_gem_destroy(gem, nvbo->bo.sg);
43 
44 	drm_gem_object_release(gem);
45 
46 	/* reset filp so nouveau_bo_del_ttm() can test for it */
47 	gem->filp = NULL;
48 	ttm_bo_unref(&bo);
49 }
50 
51 int
52 nouveau_gem_object_open(struct drm_gem_object *gem, struct drm_file *file_priv)
53 {
54 	struct nouveau_cli *cli = nouveau_cli(file_priv);
55 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
56 	struct nouveau_vma *vma;
57 	int ret;
58 
59 	if (!cli->vm)
60 		return 0;
61 
62 	ret = ttm_bo_reserve(&nvbo->bo, false, false, false, NULL);
63 	if (ret)
64 		return ret;
65 
66 	vma = nouveau_bo_vma_find(nvbo, cli->vm);
67 	if (!vma) {
68 		vma = kzalloc(sizeof(*vma), GFP_KERNEL);
69 		if (!vma) {
70 			ret = -ENOMEM;
71 			goto out;
72 		}
73 
74 		ret = nouveau_bo_vma_add(nvbo, cli->vm, vma);
75 		if (ret) {
76 			kfree(vma);
77 			goto out;
78 		}
79 	} else {
80 		vma->refcount++;
81 	}
82 
83 out:
84 	ttm_bo_unreserve(&nvbo->bo);
85 	return ret;
86 }
87 
88 static void
89 nouveau_gem_object_delete(void *data)
90 {
91 	struct nouveau_vma *vma = data;
92 	nouveau_vm_unmap(vma);
93 	nouveau_vm_put(vma);
94 	kfree(vma);
95 }
96 
97 static void
98 nouveau_gem_object_unmap(struct nouveau_bo *nvbo, struct nouveau_vma *vma)
99 {
100 	const bool mapped = nvbo->bo.mem.mem_type != TTM_PL_SYSTEM;
101 	struct nouveau_fence *fence = NULL;
102 
103 	list_del(&vma->head);
104 
105 	if (mapped) {
106 		spin_lock(&nvbo->bo.bdev->fence_lock);
107 		fence = nouveau_fence_ref(nvbo->bo.sync_obj);
108 		spin_unlock(&nvbo->bo.bdev->fence_lock);
109 	}
110 
111 	if (fence) {
112 		nouveau_fence_work(fence, nouveau_gem_object_delete, vma);
113 	} else {
114 		if (mapped)
115 			nouveau_vm_unmap(vma);
116 		nouveau_vm_put(vma);
117 		kfree(vma);
118 	}
119 	nouveau_fence_unref(&fence);
120 }
121 
122 void
123 nouveau_gem_object_close(struct drm_gem_object *gem, struct drm_file *file_priv)
124 {
125 	struct nouveau_cli *cli = nouveau_cli(file_priv);
126 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
127 	struct nouveau_vma *vma;
128 	int ret;
129 
130 	if (!cli->vm)
131 		return;
132 
133 	ret = ttm_bo_reserve(&nvbo->bo, false, false, false, NULL);
134 	if (ret)
135 		return;
136 
137 	vma = nouveau_bo_vma_find(nvbo, cli->vm);
138 	if (vma) {
139 		if (--vma->refcount == 0)
140 			nouveau_gem_object_unmap(nvbo, vma);
141 	}
142 	ttm_bo_unreserve(&nvbo->bo);
143 }
144 
145 int
146 nouveau_gem_new(struct drm_device *dev, int size, int align, uint32_t domain,
147 		uint32_t tile_mode, uint32_t tile_flags,
148 		struct nouveau_bo **pnvbo)
149 {
150 	struct nouveau_drm *drm = nouveau_drm(dev);
151 	struct nouveau_bo *nvbo;
152 	u32 flags = 0;
153 	int ret;
154 
155 	if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
156 		flags |= TTM_PL_FLAG_VRAM;
157 	if (domain & NOUVEAU_GEM_DOMAIN_GART)
158 		flags |= TTM_PL_FLAG_TT;
159 	if (!flags || domain & NOUVEAU_GEM_DOMAIN_CPU)
160 		flags |= TTM_PL_FLAG_SYSTEM;
161 
162 	ret = nouveau_bo_new(dev, size, align, flags, tile_mode,
163 			     tile_flags, NULL, pnvbo);
164 	if (ret)
165 		return ret;
166 	nvbo = *pnvbo;
167 
168 	/* we restrict allowed domains on nv50+ to only the types
169 	 * that were requested at creation time.  not possibly on
170 	 * earlier chips without busting the ABI.
171 	 */
172 	nvbo->valid_domains = NOUVEAU_GEM_DOMAIN_VRAM |
173 			      NOUVEAU_GEM_DOMAIN_GART;
174 	if (drm->device.info.family >= NV_DEVICE_INFO_V0_TESLA)
175 		nvbo->valid_domains &= domain;
176 
177 	/* Initialize the embedded gem-object. We return a single gem-reference
178 	 * to the caller, instead of a normal nouveau_bo ttm reference. */
179 	ret = drm_gem_object_init(dev, &nvbo->gem, nvbo->bo.mem.size);
180 	if (ret) {
181 		nouveau_bo_ref(NULL, pnvbo);
182 		return -ENOMEM;
183 	}
184 
185 	nvbo->bo.persistent_swap_storage = nvbo->gem.filp;
186 	return 0;
187 }
188 
189 static int
190 nouveau_gem_info(struct drm_file *file_priv, struct drm_gem_object *gem,
191 		 struct drm_nouveau_gem_info *rep)
192 {
193 	struct nouveau_cli *cli = nouveau_cli(file_priv);
194 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
195 	struct nouveau_vma *vma;
196 
197 	if (nvbo->bo.mem.mem_type == TTM_PL_TT)
198 		rep->domain = NOUVEAU_GEM_DOMAIN_GART;
199 	else
200 		rep->domain = NOUVEAU_GEM_DOMAIN_VRAM;
201 
202 	rep->offset = nvbo->bo.offset;
203 	if (cli->vm) {
204 		vma = nouveau_bo_vma_find(nvbo, cli->vm);
205 		if (!vma)
206 			return -EINVAL;
207 
208 		rep->offset = vma->offset;
209 	}
210 
211 	rep->size = nvbo->bo.mem.num_pages << PAGE_SHIFT;
212 	rep->map_handle = drm_vma_node_offset_addr(&nvbo->bo.vma_node);
213 	rep->tile_mode = nvbo->tile_mode;
214 	rep->tile_flags = nvbo->tile_flags;
215 	return 0;
216 }
217 
218 int
219 nouveau_gem_ioctl_new(struct drm_device *dev, void *data,
220 		      struct drm_file *file_priv)
221 {
222 	struct nouveau_drm *drm = nouveau_drm(dev);
223 	struct nouveau_cli *cli = nouveau_cli(file_priv);
224 	struct nouveau_fb *pfb = nvkm_fb(&drm->device);
225 	struct drm_nouveau_gem_new *req = data;
226 	struct nouveau_bo *nvbo = NULL;
227 	int ret = 0;
228 
229 	if (!pfb->memtype_valid(pfb, req->info.tile_flags)) {
230 		NV_PRINTK(error, cli, "bad page flags: 0x%08x\n", req->info.tile_flags);
231 		return -EINVAL;
232 	}
233 
234 	ret = nouveau_gem_new(dev, req->info.size, req->align,
235 			      req->info.domain, req->info.tile_mode,
236 			      req->info.tile_flags, &nvbo);
237 	if (ret)
238 		return ret;
239 
240 	ret = drm_gem_handle_create(file_priv, &nvbo->gem, &req->info.handle);
241 	if (ret == 0) {
242 		ret = nouveau_gem_info(file_priv, &nvbo->gem, &req->info);
243 		if (ret)
244 			drm_gem_handle_delete(file_priv, req->info.handle);
245 	}
246 
247 	/* drop reference from allocate - handle holds it now */
248 	drm_gem_object_unreference_unlocked(&nvbo->gem);
249 	return ret;
250 }
251 
252 static int
253 nouveau_gem_set_domain(struct drm_gem_object *gem, uint32_t read_domains,
254 		       uint32_t write_domains, uint32_t valid_domains)
255 {
256 	struct nouveau_bo *nvbo = nouveau_gem_object(gem);
257 	struct ttm_buffer_object *bo = &nvbo->bo;
258 	uint32_t domains = valid_domains & nvbo->valid_domains &
259 		(write_domains ? write_domains : read_domains);
260 	uint32_t pref_flags = 0, valid_flags = 0;
261 
262 	if (!domains)
263 		return -EINVAL;
264 
265 	if (valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
266 		valid_flags |= TTM_PL_FLAG_VRAM;
267 
268 	if (valid_domains & NOUVEAU_GEM_DOMAIN_GART)
269 		valid_flags |= TTM_PL_FLAG_TT;
270 
271 	if ((domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
272 	    bo->mem.mem_type == TTM_PL_VRAM)
273 		pref_flags |= TTM_PL_FLAG_VRAM;
274 
275 	else if ((domains & NOUVEAU_GEM_DOMAIN_GART) &&
276 		 bo->mem.mem_type == TTM_PL_TT)
277 		pref_flags |= TTM_PL_FLAG_TT;
278 
279 	else if (domains & NOUVEAU_GEM_DOMAIN_VRAM)
280 		pref_flags |= TTM_PL_FLAG_VRAM;
281 
282 	else
283 		pref_flags |= TTM_PL_FLAG_TT;
284 
285 	nouveau_bo_placement_set(nvbo, pref_flags, valid_flags);
286 
287 	return 0;
288 }
289 
290 struct validate_op {
291 	struct list_head vram_list;
292 	struct list_head gart_list;
293 	struct list_head both_list;
294 	struct ww_acquire_ctx ticket;
295 };
296 
297 static void
298 validate_fini_list(struct list_head *list, struct nouveau_fence *fence,
299 		   struct ww_acquire_ctx *ticket)
300 {
301 	struct list_head *entry, *tmp;
302 	struct nouveau_bo *nvbo;
303 
304 	list_for_each_safe(entry, tmp, list) {
305 		nvbo = list_entry(entry, struct nouveau_bo, entry);
306 
307 		if (likely(fence))
308 			nouveau_bo_fence(nvbo, fence);
309 
310 		if (unlikely(nvbo->validate_mapped)) {
311 			ttm_bo_kunmap(&nvbo->kmap);
312 			nvbo->validate_mapped = false;
313 		}
314 
315 		list_del(&nvbo->entry);
316 		nvbo->reserved_by = NULL;
317 		ttm_bo_unreserve_ticket(&nvbo->bo, ticket);
318 		drm_gem_object_unreference_unlocked(&nvbo->gem);
319 	}
320 }
321 
322 static void
323 validate_fini_no_ticket(struct validate_op *op, struct nouveau_fence *fence)
324 {
325 	validate_fini_list(&op->vram_list, fence, &op->ticket);
326 	validate_fini_list(&op->gart_list, fence, &op->ticket);
327 	validate_fini_list(&op->both_list, fence, &op->ticket);
328 }
329 
330 static void
331 validate_fini(struct validate_op *op, struct nouveau_fence *fence)
332 {
333 	validate_fini_no_ticket(op, fence);
334 	ww_acquire_fini(&op->ticket);
335 }
336 
337 static int
338 validate_init(struct nouveau_channel *chan, struct drm_file *file_priv,
339 	      struct drm_nouveau_gem_pushbuf_bo *pbbo,
340 	      int nr_buffers, struct validate_op *op)
341 {
342 	struct nouveau_cli *cli = nouveau_cli(file_priv);
343 	struct drm_device *dev = chan->drm->dev;
344 	int trycnt = 0;
345 	int ret, i;
346 	struct nouveau_bo *res_bo = NULL;
347 
348 	ww_acquire_init(&op->ticket, &reservation_ww_class);
349 retry:
350 	if (++trycnt > 100000) {
351 		NV_PRINTK(error, cli, "%s failed and gave up.\n", __func__);
352 		return -EINVAL;
353 	}
354 
355 	for (i = 0; i < nr_buffers; i++) {
356 		struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[i];
357 		struct drm_gem_object *gem;
358 		struct nouveau_bo *nvbo;
359 
360 		gem = drm_gem_object_lookup(dev, file_priv, b->handle);
361 		if (!gem) {
362 			NV_PRINTK(error, cli, "Unknown handle 0x%08x\n", b->handle);
363 			ww_acquire_done(&op->ticket);
364 			validate_fini(op, NULL);
365 			return -ENOENT;
366 		}
367 		nvbo = nouveau_gem_object(gem);
368 		if (nvbo == res_bo) {
369 			res_bo = NULL;
370 			drm_gem_object_unreference_unlocked(gem);
371 			continue;
372 		}
373 
374 		if (nvbo->reserved_by && nvbo->reserved_by == file_priv) {
375 			NV_PRINTK(error, cli, "multiple instances of buffer %d on "
376 				      "validation list\n", b->handle);
377 			drm_gem_object_unreference_unlocked(gem);
378 			ww_acquire_done(&op->ticket);
379 			validate_fini(op, NULL);
380 			return -EINVAL;
381 		}
382 
383 		ret = ttm_bo_reserve(&nvbo->bo, true, false, true, &op->ticket);
384 		if (ret) {
385 			validate_fini_no_ticket(op, NULL);
386 			if (unlikely(ret == -EDEADLK)) {
387 				ret = ttm_bo_reserve_slowpath(&nvbo->bo, true,
388 							      &op->ticket);
389 				if (!ret)
390 					res_bo = nvbo;
391 			}
392 			if (unlikely(ret)) {
393 				ww_acquire_done(&op->ticket);
394 				ww_acquire_fini(&op->ticket);
395 				drm_gem_object_unreference_unlocked(gem);
396 				if (ret != -ERESTARTSYS)
397 					NV_PRINTK(error, cli, "fail reserve\n");
398 				return ret;
399 			}
400 		}
401 
402 		b->user_priv = (uint64_t)(unsigned long)nvbo;
403 		nvbo->reserved_by = file_priv;
404 		nvbo->pbbo_index = i;
405 		if ((b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM) &&
406 		    (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART))
407 			list_add_tail(&nvbo->entry, &op->both_list);
408 		else
409 		if (b->valid_domains & NOUVEAU_GEM_DOMAIN_VRAM)
410 			list_add_tail(&nvbo->entry, &op->vram_list);
411 		else
412 		if (b->valid_domains & NOUVEAU_GEM_DOMAIN_GART)
413 			list_add_tail(&nvbo->entry, &op->gart_list);
414 		else {
415 			NV_PRINTK(error, cli, "invalid valid domains: 0x%08x\n",
416 				 b->valid_domains);
417 			list_add_tail(&nvbo->entry, &op->both_list);
418 			ww_acquire_done(&op->ticket);
419 			validate_fini(op, NULL);
420 			return -EINVAL;
421 		}
422 		if (nvbo == res_bo)
423 			goto retry;
424 	}
425 
426 	ww_acquire_done(&op->ticket);
427 	return 0;
428 }
429 
430 static int
431 validate_sync(struct nouveau_channel *chan, struct nouveau_bo *nvbo)
432 {
433 	struct nouveau_fence *fence = NULL;
434 	int ret = 0;
435 
436 	spin_lock(&nvbo->bo.bdev->fence_lock);
437 	fence = nouveau_fence_ref(nvbo->bo.sync_obj);
438 	spin_unlock(&nvbo->bo.bdev->fence_lock);
439 
440 	if (fence) {
441 		ret = nouveau_fence_sync(fence, chan);
442 		nouveau_fence_unref(&fence);
443 	}
444 
445 	return ret;
446 }
447 
448 static int
449 validate_list(struct nouveau_channel *chan, struct nouveau_cli *cli,
450 	      struct list_head *list, struct drm_nouveau_gem_pushbuf_bo *pbbo,
451 	      uint64_t user_pbbo_ptr)
452 {
453 	struct nouveau_drm *drm = chan->drm;
454 	struct drm_nouveau_gem_pushbuf_bo __user *upbbo =
455 				(void __force __user *)(uintptr_t)user_pbbo_ptr;
456 	struct nouveau_bo *nvbo;
457 	int ret, relocs = 0;
458 
459 	list_for_each_entry(nvbo, list, entry) {
460 		struct drm_nouveau_gem_pushbuf_bo *b = &pbbo[nvbo->pbbo_index];
461 
462 		ret = nouveau_gem_set_domain(&nvbo->gem, b->read_domains,
463 					     b->write_domains,
464 					     b->valid_domains);
465 		if (unlikely(ret)) {
466 			NV_PRINTK(error, cli, "fail set_domain\n");
467 			return ret;
468 		}
469 
470 		ret = nouveau_bo_validate(nvbo, true, false);
471 		if (unlikely(ret)) {
472 			if (ret != -ERESTARTSYS)
473 				NV_PRINTK(error, cli, "fail ttm_validate\n");
474 			return ret;
475 		}
476 
477 		ret = validate_sync(chan, nvbo);
478 		if (unlikely(ret)) {
479 			NV_PRINTK(error, cli, "fail post-validate sync\n");
480 			return ret;
481 		}
482 
483 		if (drm->device.info.family < NV_DEVICE_INFO_V0_TESLA) {
484 			if (nvbo->bo.offset == b->presumed.offset &&
485 			    ((nvbo->bo.mem.mem_type == TTM_PL_VRAM &&
486 			      b->presumed.domain & NOUVEAU_GEM_DOMAIN_VRAM) ||
487 			     (nvbo->bo.mem.mem_type == TTM_PL_TT &&
488 			      b->presumed.domain & NOUVEAU_GEM_DOMAIN_GART)))
489 				continue;
490 
491 			if (nvbo->bo.mem.mem_type == TTM_PL_TT)
492 				b->presumed.domain = NOUVEAU_GEM_DOMAIN_GART;
493 			else
494 				b->presumed.domain = NOUVEAU_GEM_DOMAIN_VRAM;
495 			b->presumed.offset = nvbo->bo.offset;
496 			b->presumed.valid = 0;
497 			relocs++;
498 
499 			if (copy_to_user(&upbbo[nvbo->pbbo_index].presumed,
500 					     &b->presumed, sizeof(b->presumed)))
501 				return -EFAULT;
502 		}
503 	}
504 
505 	return relocs;
506 }
507 
508 static int
509 nouveau_gem_pushbuf_validate(struct nouveau_channel *chan,
510 			     struct drm_file *file_priv,
511 			     struct drm_nouveau_gem_pushbuf_bo *pbbo,
512 			     uint64_t user_buffers, int nr_buffers,
513 			     struct validate_op *op, int *apply_relocs)
514 {
515 	struct nouveau_cli *cli = nouveau_cli(file_priv);
516 	int ret, relocs = 0;
517 
518 	INIT_LIST_HEAD(&op->vram_list);
519 	INIT_LIST_HEAD(&op->gart_list);
520 	INIT_LIST_HEAD(&op->both_list);
521 
522 	if (nr_buffers == 0)
523 		return 0;
524 
525 	ret = validate_init(chan, file_priv, pbbo, nr_buffers, op);
526 	if (unlikely(ret)) {
527 		if (ret != -ERESTARTSYS)
528 			NV_PRINTK(error, cli, "validate_init\n");
529 		return ret;
530 	}
531 
532 	ret = validate_list(chan, cli, &op->vram_list, pbbo, user_buffers);
533 	if (unlikely(ret < 0)) {
534 		if (ret != -ERESTARTSYS)
535 			NV_PRINTK(error, cli, "validate vram_list\n");
536 		validate_fini(op, NULL);
537 		return ret;
538 	}
539 	relocs += ret;
540 
541 	ret = validate_list(chan, cli, &op->gart_list, pbbo, user_buffers);
542 	if (unlikely(ret < 0)) {
543 		if (ret != -ERESTARTSYS)
544 			NV_PRINTK(error, cli, "validate gart_list\n");
545 		validate_fini(op, NULL);
546 		return ret;
547 	}
548 	relocs += ret;
549 
550 	ret = validate_list(chan, cli, &op->both_list, pbbo, user_buffers);
551 	if (unlikely(ret < 0)) {
552 		if (ret != -ERESTARTSYS)
553 			NV_PRINTK(error, cli, "validate both_list\n");
554 		validate_fini(op, NULL);
555 		return ret;
556 	}
557 	relocs += ret;
558 
559 	*apply_relocs = relocs;
560 	return 0;
561 }
562 
563 static inline void
564 u_free(void *addr)
565 {
566 	if (!is_vmalloc_addr(addr))
567 		kfree(addr);
568 	else
569 		vfree(addr);
570 }
571 
572 static inline void *
573 u_memcpya(uint64_t user, unsigned nmemb, unsigned size)
574 {
575 	void *mem;
576 	void __user *userptr = (void __force __user *)(uintptr_t)user;
577 
578 	size *= nmemb;
579 
580 	mem = kmalloc(size, GFP_KERNEL | __GFP_NOWARN);
581 	if (!mem)
582 		mem = vmalloc(size);
583 	if (!mem)
584 		return ERR_PTR(-ENOMEM);
585 
586 	if (copy_from_user(mem, userptr, size)) {
587 		u_free(mem);
588 		return ERR_PTR(-EFAULT);
589 	}
590 
591 	return mem;
592 }
593 
594 static int
595 nouveau_gem_pushbuf_reloc_apply(struct nouveau_cli *cli,
596 				struct drm_nouveau_gem_pushbuf *req,
597 				struct drm_nouveau_gem_pushbuf_bo *bo)
598 {
599 	struct drm_nouveau_gem_pushbuf_reloc *reloc = NULL;
600 	int ret = 0;
601 	unsigned i;
602 
603 	reloc = u_memcpya(req->relocs, req->nr_relocs, sizeof(*reloc));
604 	if (IS_ERR(reloc))
605 		return PTR_ERR(reloc);
606 
607 	for (i = 0; i < req->nr_relocs; i++) {
608 		struct drm_nouveau_gem_pushbuf_reloc *r = &reloc[i];
609 		struct drm_nouveau_gem_pushbuf_bo *b;
610 		struct nouveau_bo *nvbo;
611 		uint32_t data;
612 
613 		if (unlikely(r->bo_index > req->nr_buffers)) {
614 			NV_PRINTK(error, cli, "reloc bo index invalid\n");
615 			ret = -EINVAL;
616 			break;
617 		}
618 
619 		b = &bo[r->bo_index];
620 		if (b->presumed.valid)
621 			continue;
622 
623 		if (unlikely(r->reloc_bo_index > req->nr_buffers)) {
624 			NV_PRINTK(error, cli, "reloc container bo index invalid\n");
625 			ret = -EINVAL;
626 			break;
627 		}
628 		nvbo = (void *)(unsigned long)bo[r->reloc_bo_index].user_priv;
629 
630 		if (unlikely(r->reloc_bo_offset + 4 >
631 			     nvbo->bo.mem.num_pages << PAGE_SHIFT)) {
632 			NV_PRINTK(error, cli, "reloc outside of bo\n");
633 			ret = -EINVAL;
634 			break;
635 		}
636 
637 		if (!nvbo->kmap.virtual) {
638 			ret = ttm_bo_kmap(&nvbo->bo, 0, nvbo->bo.mem.num_pages,
639 					  &nvbo->kmap);
640 			if (ret) {
641 				NV_PRINTK(error, cli, "failed kmap for reloc\n");
642 				break;
643 			}
644 			nvbo->validate_mapped = true;
645 		}
646 
647 		if (r->flags & NOUVEAU_GEM_RELOC_LOW)
648 			data = b->presumed.offset + r->data;
649 		else
650 		if (r->flags & NOUVEAU_GEM_RELOC_HIGH)
651 			data = (b->presumed.offset + r->data) >> 32;
652 		else
653 			data = r->data;
654 
655 		if (r->flags & NOUVEAU_GEM_RELOC_OR) {
656 			if (b->presumed.domain == NOUVEAU_GEM_DOMAIN_GART)
657 				data |= r->tor;
658 			else
659 				data |= r->vor;
660 		}
661 
662 		spin_lock(&nvbo->bo.bdev->fence_lock);
663 		ret = ttm_bo_wait(&nvbo->bo, false, false, false);
664 		spin_unlock(&nvbo->bo.bdev->fence_lock);
665 		if (ret) {
666 			NV_PRINTK(error, cli, "reloc wait_idle failed: %d\n", ret);
667 			break;
668 		}
669 
670 		nouveau_bo_wr32(nvbo, r->reloc_bo_offset >> 2, data);
671 	}
672 
673 	u_free(reloc);
674 	return ret;
675 }
676 
677 int
678 nouveau_gem_ioctl_pushbuf(struct drm_device *dev, void *data,
679 			  struct drm_file *file_priv)
680 {
681 	struct nouveau_abi16 *abi16 = nouveau_abi16_get(file_priv, dev);
682 	struct nouveau_cli *cli = nouveau_cli(file_priv);
683 	struct nouveau_abi16_chan *temp;
684 	struct nouveau_drm *drm = nouveau_drm(dev);
685 	struct drm_nouveau_gem_pushbuf *req = data;
686 	struct drm_nouveau_gem_pushbuf_push *push;
687 	struct drm_nouveau_gem_pushbuf_bo *bo;
688 	struct nouveau_channel *chan = NULL;
689 	struct validate_op op;
690 	struct nouveau_fence *fence = NULL;
691 	int i, j, ret = 0, do_reloc = 0;
692 
693 	if (unlikely(!abi16))
694 		return -ENOMEM;
695 
696 	list_for_each_entry(temp, &abi16->channels, head) {
697 		if (temp->chan->object->handle == (NVDRM_CHAN | req->channel)) {
698 			chan = temp->chan;
699 			break;
700 		}
701 	}
702 
703 	if (!chan)
704 		return nouveau_abi16_put(abi16, -ENOENT);
705 
706 	req->vram_available = drm->gem.vram_available;
707 	req->gart_available = drm->gem.gart_available;
708 	if (unlikely(req->nr_push == 0))
709 		goto out_next;
710 
711 	if (unlikely(req->nr_push > NOUVEAU_GEM_MAX_PUSH)) {
712 		NV_PRINTK(error, cli, "pushbuf push count exceeds limit: %d max %d\n",
713 			 req->nr_push, NOUVEAU_GEM_MAX_PUSH);
714 		return nouveau_abi16_put(abi16, -EINVAL);
715 	}
716 
717 	if (unlikely(req->nr_buffers > NOUVEAU_GEM_MAX_BUFFERS)) {
718 		NV_PRINTK(error, cli, "pushbuf bo count exceeds limit: %d max %d\n",
719 			 req->nr_buffers, NOUVEAU_GEM_MAX_BUFFERS);
720 		return nouveau_abi16_put(abi16, -EINVAL);
721 	}
722 
723 	if (unlikely(req->nr_relocs > NOUVEAU_GEM_MAX_RELOCS)) {
724 		NV_PRINTK(error, cli, "pushbuf reloc count exceeds limit: %d max %d\n",
725 			 req->nr_relocs, NOUVEAU_GEM_MAX_RELOCS);
726 		return nouveau_abi16_put(abi16, -EINVAL);
727 	}
728 
729 	push = u_memcpya(req->push, req->nr_push, sizeof(*push));
730 	if (IS_ERR(push))
731 		return nouveau_abi16_put(abi16, PTR_ERR(push));
732 
733 	bo = u_memcpya(req->buffers, req->nr_buffers, sizeof(*bo));
734 	if (IS_ERR(bo)) {
735 		u_free(push);
736 		return nouveau_abi16_put(abi16, PTR_ERR(bo));
737 	}
738 
739 	/* Ensure all push buffers are on validate list */
740 	for (i = 0; i < req->nr_push; i++) {
741 		if (push[i].bo_index >= req->nr_buffers) {
742 			NV_PRINTK(error, cli, "push %d buffer not in list\n", i);
743 			ret = -EINVAL;
744 			goto out_prevalid;
745 		}
746 	}
747 
748 	/* Validate buffer list */
749 	ret = nouveau_gem_pushbuf_validate(chan, file_priv, bo, req->buffers,
750 					   req->nr_buffers, &op, &do_reloc);
751 	if (ret) {
752 		if (ret != -ERESTARTSYS)
753 			NV_PRINTK(error, cli, "validate: %d\n", ret);
754 		goto out_prevalid;
755 	}
756 
757 	/* Apply any relocations that are required */
758 	if (do_reloc) {
759 		ret = nouveau_gem_pushbuf_reloc_apply(cli, req, bo);
760 		if (ret) {
761 			NV_PRINTK(error, cli, "reloc apply: %d\n", ret);
762 			goto out;
763 		}
764 	}
765 
766 	if (chan->dma.ib_max) {
767 		ret = nouveau_dma_wait(chan, req->nr_push + 1, 16);
768 		if (ret) {
769 			NV_PRINTK(error, cli, "nv50cal_space: %d\n", ret);
770 			goto out;
771 		}
772 
773 		for (i = 0; i < req->nr_push; i++) {
774 			struct nouveau_bo *nvbo = (void *)(unsigned long)
775 				bo[push[i].bo_index].user_priv;
776 
777 			nv50_dma_push(chan, nvbo, push[i].offset,
778 				      push[i].length);
779 		}
780 	} else
781 	if (drm->device.info.chipset >= 0x25) {
782 		ret = RING_SPACE(chan, req->nr_push * 2);
783 		if (ret) {
784 			NV_PRINTK(error, cli, "cal_space: %d\n", ret);
785 			goto out;
786 		}
787 
788 		for (i = 0; i < req->nr_push; i++) {
789 			struct nouveau_bo *nvbo = (void *)(unsigned long)
790 				bo[push[i].bo_index].user_priv;
791 
792 			OUT_RING(chan, (nvbo->bo.offset + push[i].offset) | 2);
793 			OUT_RING(chan, 0);
794 		}
795 	} else {
796 		ret = RING_SPACE(chan, req->nr_push * (2 + NOUVEAU_DMA_SKIPS));
797 		if (ret) {
798 			NV_PRINTK(error, cli, "jmp_space: %d\n", ret);
799 			goto out;
800 		}
801 
802 		for (i = 0; i < req->nr_push; i++) {
803 			struct nouveau_bo *nvbo = (void *)(unsigned long)
804 				bo[push[i].bo_index].user_priv;
805 			uint32_t cmd;
806 
807 			cmd = chan->push.vma.offset + ((chan->dma.cur + 2) << 2);
808 			cmd |= 0x20000000;
809 			if (unlikely(cmd != req->suffix0)) {
810 				if (!nvbo->kmap.virtual) {
811 					ret = ttm_bo_kmap(&nvbo->bo, 0,
812 							  nvbo->bo.mem.
813 							  num_pages,
814 							  &nvbo->kmap);
815 					if (ret) {
816 						WIND_RING(chan);
817 						goto out;
818 					}
819 					nvbo->validate_mapped = true;
820 				}
821 
822 				nouveau_bo_wr32(nvbo, (push[i].offset +
823 						push[i].length - 8) / 4, cmd);
824 			}
825 
826 			OUT_RING(chan, 0x20000000 |
827 				      (nvbo->bo.offset + push[i].offset));
828 			OUT_RING(chan, 0);
829 			for (j = 0; j < NOUVEAU_DMA_SKIPS; j++)
830 				OUT_RING(chan, 0);
831 		}
832 	}
833 
834 	ret = nouveau_fence_new(chan, false, &fence);
835 	if (ret) {
836 		NV_PRINTK(error, cli, "error fencing pushbuf: %d\n", ret);
837 		WIND_RING(chan);
838 		goto out;
839 	}
840 
841 out:
842 	validate_fini(&op, fence);
843 	nouveau_fence_unref(&fence);
844 
845 out_prevalid:
846 	u_free(bo);
847 	u_free(push);
848 
849 out_next:
850 	if (chan->dma.ib_max) {
851 		req->suffix0 = 0x00000000;
852 		req->suffix1 = 0x00000000;
853 	} else
854 	if (drm->device.info.chipset >= 0x25) {
855 		req->suffix0 = 0x00020000;
856 		req->suffix1 = 0x00000000;
857 	} else {
858 		req->suffix0 = 0x20000000 |
859 			      (chan->push.vma.offset + ((chan->dma.cur + 2) << 2));
860 		req->suffix1 = 0x00000000;
861 	}
862 
863 	return nouveau_abi16_put(abi16, ret);
864 }
865 
866 static inline uint32_t
867 domain_to_ttm(struct nouveau_bo *nvbo, uint32_t domain)
868 {
869 	uint32_t flags = 0;
870 
871 	if (domain & NOUVEAU_GEM_DOMAIN_VRAM)
872 		flags |= TTM_PL_FLAG_VRAM;
873 	if (domain & NOUVEAU_GEM_DOMAIN_GART)
874 		flags |= TTM_PL_FLAG_TT;
875 
876 	return flags;
877 }
878 
879 int
880 nouveau_gem_ioctl_cpu_prep(struct drm_device *dev, void *data,
881 			   struct drm_file *file_priv)
882 {
883 	struct drm_nouveau_gem_cpu_prep *req = data;
884 	struct drm_gem_object *gem;
885 	struct nouveau_bo *nvbo;
886 	bool no_wait = !!(req->flags & NOUVEAU_GEM_CPU_PREP_NOWAIT);
887 	int ret = -EINVAL;
888 
889 	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
890 	if (!gem)
891 		return -ENOENT;
892 	nvbo = nouveau_gem_object(gem);
893 
894 	spin_lock(&nvbo->bo.bdev->fence_lock);
895 	ret = ttm_bo_wait(&nvbo->bo, true, true, no_wait);
896 	spin_unlock(&nvbo->bo.bdev->fence_lock);
897 	drm_gem_object_unreference_unlocked(gem);
898 	return ret;
899 }
900 
901 int
902 nouveau_gem_ioctl_cpu_fini(struct drm_device *dev, void *data,
903 			   struct drm_file *file_priv)
904 {
905 	return 0;
906 }
907 
908 int
909 nouveau_gem_ioctl_info(struct drm_device *dev, void *data,
910 		       struct drm_file *file_priv)
911 {
912 	struct drm_nouveau_gem_info *req = data;
913 	struct drm_gem_object *gem;
914 	int ret;
915 
916 	gem = drm_gem_object_lookup(dev, file_priv, req->handle);
917 	if (!gem)
918 		return -ENOENT;
919 
920 	ret = nouveau_gem_info(file_priv, gem, req);
921 	drm_gem_object_unreference_unlocked(gem);
922 	return ret;
923 }
924 
925