drivers/gpu/drm/i915/i915_vma.c

   1 /*
   2  * Copyright © 2016 Intel Corporation
   3  *
   4  * Permission is hereby granted, free of charge, to any person obtaining a
   5  * copy of this software and associated documentation files (the "Software"),
   6  * to deal in the Software without restriction, including without limitation
   7  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
   8  * and/or sell copies of the Software, and to permit persons to whom the
   9  * Software is furnished to do so, subject to the following conditions:
  10  *
  11  * The above copyright notice and this permission notice (including the next
  12  * paragraph) shall be included in all copies or substantial portions of the
  13  * Software.
  14  *
  15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
  16  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  17  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
  18  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
  19  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
  20  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
  21  * IN THE SOFTWARE.
  22  *
  23  */
  24
  25 #include "i915_vma.h"
  26
  27 #include "i915_drv.h"
  28 #include "intel_ringbuffer.h"
  29 #include "intel_frontbuffer.h"
  30
  31 #include <drm/drm_gem.h>
  32
  33 static void
  34 i915_vma_retire(struct i915_gem_active *active,
  35                 struct drm_i915_gem_request *rq)
  36 {
  37         const unsigned int idx = rq->engine->id;
  38         struct i915_vma *vma =
  39                 container_of(active, struct i915_vma, last_read[idx]);
  40         struct drm_i915_gem_object *obj = vma->obj;
  41
  42         GEM_BUG_ON(!i915_vma_has_active_engine(vma, idx));
  43
  44         i915_vma_clear_active(vma, idx);
  45         if (i915_vma_is_active(vma))
  46                 return;
  47
  48         GEM_BUG_ON(!drm_mm_node_allocated(&vma->node));
  49         list_move_tail(&vma->vm_link, &vma->vm->inactive_list);
  50         if (unlikely(i915_vma_is_closed(vma) && !i915_vma_is_pinned(vma)))
  51                 WARN_ON(i915_vma_unbind(vma));
  52
  53         GEM_BUG_ON(!i915_gem_object_is_active(obj));
  54         if (--obj->active_count)
  55                 return;
  56
  57         /* Bump our place on the bound list to keep it roughly in LRU order
  58          * so that we don't steal from recently used but inactive objects
  59          * (unless we are forced to ofc!)
  60          */
  61         if (obj->bind_count)
  62                 list_move_tail(&obj->global_link, &rq->i915->mm.bound_list);
  63
  64         obj->mm.dirty = true; /* be paranoid  */
  65
  66         if (i915_gem_object_has_active_reference(obj)) {
  67                 i915_gem_object_clear_active_reference(obj);
  68                 i915_gem_object_put(obj);
  69         }
  70 }
  71
  72 static struct i915_vma *
  73 vma_create(struct drm_i915_gem_object *obj,
  74            struct i915_address_space *vm,
  75            const struct i915_ggtt_view *view)
  76 {
  77         struct i915_vma *vma;
  78         struct rb_node *rb, **p;
  79         int i;
  80
  81         /* The aliasing_ppgtt should never be used directly! */
  82         GEM_BUG_ON(vm == &vm->i915->mm.aliasing_ppgtt->base);
  83
  84         vma = kmem_cache_zalloc(vm->i915->vmas, GFP_KERNEL);
  85         if (vma == NULL)
  86                 return ERR_PTR(-ENOMEM);
  87
  88         for (i = 0; i < ARRAY_SIZE(vma->last_read); i++)
  89                 init_request_active(&vma->last_read[i], i915_vma_retire);
  90         init_request_active(&vma->last_fence, NULL);
  91         vma->vm = vm;
  92         vma->obj = obj;
  93         vma->resv = obj->resv;
  94         vma->size = obj->base.size;
  95         vma->display_alignment = I915_GTT_MIN_ALIGNMENT;
  96
  97         if (view && view->type != I915_GGTT_VIEW_NORMAL) {
  98                 vma->ggtt_view = *view;
  99                 if (view->type == I915_GGTT_VIEW_PARTIAL) {
 100                         GEM_BUG_ON(range_overflows_t(u64,
 101                                                      view->partial.offset,
 102                                                      view->partial.size,
 103                                                      obj->base.size >> PAGE_SHIFT));
 104                         vma->size = view->partial.size;
 105                         vma->size <<= PAGE_SHIFT;
 106                         GEM_BUG_ON(vma->size >= obj->base.size);
 107                 } else if (view->type == I915_GGTT_VIEW_ROTATED) {
 108                         vma->size = intel_rotation_info_size(&view->rotated);
 109                         vma->size <<= PAGE_SHIFT;
 110                 }
 111         }
 112
 113         if (unlikely(vma->size > vm->total))
 114                 goto err_vma;
 115
 116         GEM_BUG_ON(!IS_ALIGNED(vma->size, I915_GTT_PAGE_SIZE));
 117
 118         if (i915_is_ggtt(vm)) {
 119                 if (unlikely(overflows_type(vma->size, u32)))
 120                         goto err_vma;
 121
 122                 vma->fence_size = i915_gem_fence_size(vm->i915, vma->size,
 123                                                       i915_gem_object_get_tiling(obj),
 124                                                       i915_gem_object_get_stride(obj));
 125                 if (unlikely(vma->fence_size < vma->size || /* overflow */
 126                              vma->fence_size > vm->total))
 127                         goto err_vma;
 128
 129                 GEM_BUG_ON(!IS_ALIGNED(vma->fence_size, I915_GTT_MIN_ALIGNMENT));
 130
 131                 vma->fence_alignment = i915_gem_fence_alignment(vm->i915, vma->size,
 132                                                                 i915_gem_object_get_tiling(obj),
 133                                                                 i915_gem_object_get_stride(obj));
 134                 GEM_BUG_ON(!is_power_of_2(vma->fence_alignment));
 135
 136                 vma->flags |= I915_VMA_GGTT;
 137                 list_add(&vma->obj_link, &obj->vma_list);
 138         } else {
 139                 i915_ppgtt_get(i915_vm_to_ppgtt(vm));
 140                 list_add_tail(&vma->obj_link, &obj->vma_list);
 141         }
 142
 143         rb = NULL;
 144         p = &obj->vma_tree.rb_node;
 145         while (*p) {
 146                 struct i915_vma *pos;
 147
 148                 rb = *p;
 149                 pos = rb_entry(rb, struct i915_vma, obj_node);
 150                 if (i915_vma_compare(pos, vm, view) < 0)
 151                         p = &rb->rb_right;
 152                 else
 153                         p = &rb->rb_left;
 154         }
 155         rb_link_node(&vma->obj_node, rb, p);
 156         rb_insert_color(&vma->obj_node, &obj->vma_tree);
 157         list_add(&vma->vm_link, &vm->unbound_list);
 158
 159         return vma;
 160
 161 err_vma:
 162         kmem_cache_free(vm->i915->vmas, vma);
 163         return ERR_PTR(-E2BIG);
 164 }
 165
 166 static struct i915_vma *
 167 vma_lookup(struct drm_i915_gem_object *obj,
 168            struct i915_address_space *vm,
 169            const struct i915_ggtt_view *view)
 170 {
 171         struct rb_node *rb;
 172
 173         rb = obj->vma_tree.rb_node;
 174         while (rb) {
 175                 struct i915_vma *vma = rb_entry(rb, struct i915_vma, obj_node);
 176                 long cmp;
 177
 178                 cmp = i915_vma_compare(vma, vm, view);
 179                 if (cmp == 0)
 180                         return vma;
 181
 182                 if (cmp < 0)
 183                         rb = rb->rb_right;
 184                 else
 185                         rb = rb->rb_left;
 186         }
 187
 188         return NULL;
 189 }
 190
 191 /**
 192  * i915_vma_instance - return the singleton instance of the VMA
 193  * @obj: parent &struct drm_i915_gem_object to be mapped
 194  * @vm: address space in which the mapping is located
 195  * @view: additional mapping requirements
 196  *
 197  * i915_vma_instance() looks up an existing VMA of the @obj in the @vm with
 198  * the same @view characteristics. If a match is not found, one is created.
 199  * Once created, the VMA is kept until either the object is freed, or the
 200  * address space is closed.
 201  *
 202  * Must be called with struct_mutex held.
 203  *
 204  * Returns the vma, or an error pointer.
 205  */
 206 struct i915_vma *
 207 i915_vma_instance(struct drm_i915_gem_object *obj,
 208                   struct i915_address_space *vm,
 209                   const struct i915_ggtt_view *view)
 210 {
 211         struct i915_vma *vma;
 212
 213         lockdep_assert_held(&obj->base.dev->struct_mutex);
 214         GEM_BUG_ON(view && !i915_is_ggtt(vm));
 215         GEM_BUG_ON(vm->closed);
 216
 217         vma = vma_lookup(obj, vm, view);
 218         if (!vma)
 219                 vma = vma_create(obj, vm, view);
 220
 221         GEM_BUG_ON(!IS_ERR(vma) && i915_vma_is_closed(vma));
 222         GEM_BUG_ON(!IS_ERR(vma) && i915_vma_compare(vma, vm, view));
 223         GEM_BUG_ON(!IS_ERR(vma) && vma_lookup(obj, vm, view) != vma);
 224         return vma;
 225 }
 226
 227 /**
 228  * i915_vma_bind - Sets up PTEs for an VMA in it's corresponding address space.
 229  * @vma: VMA to map
 230  * @cache_level: mapping cache level
 231  * @flags: flags like global or local mapping
 232  *
 233  * DMA addresses are taken from the scatter-gather table of this object (or of
 234  * this VMA in case of non-default GGTT views) and PTE entries set up.
 235  * Note that DMA addresses are also the only part of the SG table we care about.
 236  */
 237 int i915_vma_bind(struct i915_vma *vma, enum i915_cache_level cache_level,
 238                   u32 flags)
 239 {
 240         u32 bind_flags;
 241         u32 vma_flags;
 242         int ret;
 243
 244         GEM_BUG_ON(!drm_mm_node_allocated(&vma->node));
 245         GEM_BUG_ON(vma->size > vma->node.size);
 246
 247         if (GEM_WARN_ON(range_overflows(vma->node.start,
 248                                         vma->node.size,
 249                                         vma->vm->total)))
 250                 return -ENODEV;
 251
 252         if (GEM_WARN_ON(!flags))
 253                 return -EINVAL;
 254
 255         bind_flags = 0;
 256         if (flags & PIN_GLOBAL)
 257                 bind_flags |= I915_VMA_GLOBAL_BIND;
 258         if (flags & PIN_USER)
 259                 bind_flags |= I915_VMA_LOCAL_BIND;
 260
 261         vma_flags = vma->flags & (I915_VMA_GLOBAL_BIND | I915_VMA_LOCAL_BIND);
 262         if (flags & PIN_UPDATE)
 263                 bind_flags |= vma_flags;
 264         else
 265                 bind_flags &= ~vma_flags;
 266         if (bind_flags == 0)
 267                 return 0;
 268
 269         trace_i915_vma_bind(vma, bind_flags);
 270         ret = vma->vm->bind_vma(vma, cache_level, bind_flags);
 271         if (ret)
 272                 return ret;
 273
 274         vma->flags |= bind_flags;
 275
 276         if (vma->obj)
 277                 set_bit(I915_BO_WAS_BOUND_BIT, &vma->obj->flags);
 278
 279         return 0;
 280 }
 281
 282 void __iomem *i915_vma_pin_iomap(struct i915_vma *vma)
 283 {
 284         void __iomem *ptr;
 285
 286         /* Access through the GTT requires the device to be awake. */
 287         assert_rpm_wakelock_held(vma->vm->i915);
 288
 289         lockdep_assert_held(&vma->vm->i915->drm.struct_mutex);
 290         if (WARN_ON(!i915_vma_is_map_and_fenceable(vma)))
 291                 return IO_ERR_PTR(-ENODEV);
 292
 293         GEM_BUG_ON(!i915_vma_is_ggtt(vma));
 294         GEM_BUG_ON((vma->flags & I915_VMA_GLOBAL_BIND) == 0);
 295
 296         ptr = vma->iomap;
 297         if (ptr == NULL) {
 298                 ptr = io_mapping_map_wc(&i915_vm_to_ggtt(vma->vm)->mappable,
 299                                         vma->node.start,
 300                                         vma->node.size);
 301                 if (ptr == NULL)
 302                         return IO_ERR_PTR(-ENOMEM);
 303
 304                 vma->iomap = ptr;
 305         }
 306
 307         __i915_vma_pin(vma);
 308         return ptr;
 309 }
 310
 311 void i915_vma_unpin_and_release(struct i915_vma **p_vma)
 312 {
 313         struct i915_vma *vma;
 314         struct drm_i915_gem_object *obj;
 315
 316         vma = fetch_and_zero(p_vma);
 317         if (!vma)
 318                 return;
 319
 320         obj = vma->obj;
 321
 322         i915_vma_unpin(vma);
 323         i915_vma_close(vma);
 324
 325         __i915_gem_object_release_unless_active(obj);
 326 }
 327
 328 bool i915_vma_misplaced(const struct i915_vma *vma,
 329                         u64 size, u64 alignment, u64 flags)
 330 {
 331         if (!drm_mm_node_allocated(&vma->node))
 332                 return false;
 333
 334         if (vma->node.size < size)
 335                 return true;
 336
 337         GEM_BUG_ON(alignment && !is_power_of_2(alignment));
 338         if (alignment && !IS_ALIGNED(vma->node.start, alignment))
 339                 return true;
 340
 341         if (flags & PIN_MAPPABLE && !i915_vma_is_map_and_fenceable(vma))
 342                 return true;
 343
 344         if (flags & PIN_OFFSET_BIAS &&
 345             vma->node.start < (flags & PIN_OFFSET_MASK))
 346                 return true;
 347
 348         if (flags & PIN_OFFSET_FIXED &&
 349             vma->node.start != (flags & PIN_OFFSET_MASK))
 350                 return true;
 351
 352         return false;
 353 }
 354
 355 void __i915_vma_set_map_and_fenceable(struct i915_vma *vma)
 356 {
 357         bool mappable, fenceable;
 358
 359         GEM_BUG_ON(!i915_vma_is_ggtt(vma));
 360         GEM_BUG_ON(!vma->fence_size);
 361
 362         /*
 363          * Explicitly disable for rotated VMA since the display does not
 364          * need the fence and the VMA is not accessible to other users.
 365          */
 366         if (vma->ggtt_view.type == I915_GGTT_VIEW_ROTATED)
 367                 return;
 368
 369         fenceable = (vma->node.size >= vma->fence_size &&
 370                      IS_ALIGNED(vma->node.start, vma->fence_alignment));
 371
 372         mappable = vma->node.start + vma->fence_size <= i915_vm_to_ggtt(vma->vm)->mappable_end;
 373
 374         if (mappable && fenceable)
 375                 vma->flags |= I915_VMA_CAN_FENCE;
 376         else
 377                 vma->flags &= ~I915_VMA_CAN_FENCE;
 378 }
 379
 380 static bool color_differs(struct drm_mm_node *node, unsigned long color)
 381 {
 382         return node->allocated && node->color != color;
 383 }
 384
 385 bool i915_gem_valid_gtt_space(struct i915_vma *vma, unsigned long cache_level)
 386 {
 387         struct drm_mm_node *node = &vma->node;
 388         struct drm_mm_node *other;
 389
 390         /*
 391          * On some machines we have to be careful when putting differing types
 392          * of snoopable memory together to avoid the prefetcher crossing memory
 393          * domains and dying. During vm initialisation, we decide whether or not
 394          * these constraints apply and set the drm_mm.color_adjust
 395          * appropriately.
 396          */
 397         if (vma->vm->mm.color_adjust == NULL)
 398                 return true;
 399
 400         /* Only valid to be called on an already inserted vma */
 401         GEM_BUG_ON(!drm_mm_node_allocated(node));
 402         GEM_BUG_ON(list_empty(&node->node_list));
 403
 404         other = list_prev_entry(node, node_list);
 405         if (color_differs(other, cache_level) && !drm_mm_hole_follows(other))
 406                 return false;
 407
 408         other = list_next_entry(node, node_list);
 409         if (color_differs(other, cache_level) && !drm_mm_hole_follows(node))
 410                 return false;
 411
 412         return true;
 413 }
 414
 415 /**
 416  * i915_vma_insert - finds a slot for the vma in its address space
 417  * @vma: the vma
 418  * @size: requested size in bytes (can be larger than the VMA)
 419  * @alignment: required alignment
 420  * @flags: mask of PIN_* flags to use
 421  *
 422  * First we try to allocate some free space that meets the requirements for
 423  * the VMA. Failiing that, if the flags permit, it will evict an old VMA,
 424  * preferrably the oldest idle entry to make room for the new VMA.
 425  *
 426  * Returns:
 427  * 0 on success, negative error code otherwise.
 428  */
 429 static int
 430 i915_vma_insert(struct i915_vma *vma, u64 size, u64 alignment, u64 flags)
 431 {
 432         struct drm_i915_private *dev_priv = vma->vm->i915;
 433         struct drm_i915_gem_object *obj = vma->obj;
 434         u64 start, end;
 435         int ret;
 436
 437         GEM_BUG_ON(i915_vma_is_closed(vma));
 438         GEM_BUG_ON(vma->flags & (I915_VMA_GLOBAL_BIND | I915_VMA_LOCAL_BIND));
 439         GEM_BUG_ON(drm_mm_node_allocated(&vma->node));
 440
 441         size = max(size, vma->size);
 442         alignment = max(alignment, vma->display_alignment);
 443         if (flags & PIN_MAPPABLE) {
 444                 size = max_t(typeof(size), size, vma->fence_size);
 445                 alignment = max_t(typeof(alignment),
 446                                   alignment, vma->fence_alignment);
 447         }
 448
 449         GEM_BUG_ON(!IS_ALIGNED(size, I915_GTT_PAGE_SIZE));
 450         GEM_BUG_ON(!IS_ALIGNED(alignment, I915_GTT_MIN_ALIGNMENT));
 451         GEM_BUG_ON(!is_power_of_2(alignment));
 452
 453         start = flags & PIN_OFFSET_BIAS ? flags & PIN_OFFSET_MASK : 0;
 454         GEM_BUG_ON(!IS_ALIGNED(start, I915_GTT_PAGE_SIZE));
 455
 456         end = vma->vm->total;
 457         if (flags & PIN_MAPPABLE)
 458                 end = min_t(u64, end, dev_priv->ggtt.mappable_end);
 459         if (flags & PIN_ZONE_4G)
 460                 end = min_t(u64, end, (1ULL << 32) - I915_GTT_PAGE_SIZE);
 461         GEM_BUG_ON(!IS_ALIGNED(end, I915_GTT_PAGE_SIZE));
 462
 463         /* If binding the object/GGTT view requires more space than the entire
 464          * aperture has, reject it early before evicting everything in a vain
 465          * attempt to find space.
 466          */
 467         if (size > end) {
 468                 DRM_DEBUG("Attempting to bind an object larger than the aperture: request=%llu [object=%zd] > %s aperture=%llu\n",
 469                           size, obj->base.size,
 470                           flags & PIN_MAPPABLE ? "mappable" : "total",
 471                           end);
 472                 return -ENOSPC;
 473         }
 474
 475         ret = i915_gem_object_pin_pages(obj);
 476         if (ret)
 477                 return ret;
 478
 479         if (flags & PIN_OFFSET_FIXED) {
 480                 u64 offset = flags & PIN_OFFSET_MASK;
 481                 if (!IS_ALIGNED(offset, alignment) ||
 482                     range_overflows(offset, size, end)) {
 483                         ret = -EINVAL;
 484                         goto err_unpin;
 485                 }
 486
 487                 ret = i915_gem_gtt_reserve(vma->vm, &vma->node,
 488                                            size, offset, obj->cache_level,
 489                                            flags);
 490                 if (ret)
 491                         goto err_unpin;
 492         } else {
 493                 ret = i915_gem_gtt_insert(vma->vm, &vma->node,
 494                                           size, alignment, obj->cache_level,
 495                                           start, end, flags);
 496                 if (ret)
 497                         goto err_unpin;
 498
 499                 GEM_BUG_ON(vma->node.start < start);
 500                 GEM_BUG_ON(vma->node.start + vma->node.size > end);
 501         }
 502         GEM_BUG_ON(!drm_mm_node_allocated(&vma->node));
 503         GEM_BUG_ON(!i915_gem_valid_gtt_space(vma, obj->cache_level));
 504
 505         list_move_tail(&obj->global_link, &dev_priv->mm.bound_list);
 506         list_move_tail(&vma->vm_link, &vma->vm->inactive_list);
 507         obj->bind_count++;
 508         GEM_BUG_ON(atomic_read(&obj->mm.pages_pin_count) < obj->bind_count);
 509
 510         return 0;
 511
 512 err_unpin:
 513         i915_gem_object_unpin_pages(obj);
 514         return ret;
 515 }
 516
 517 static void
 518 i915_vma_remove(struct i915_vma *vma)
 519 {
 520         struct drm_i915_gem_object *obj = vma->obj;
 521
 522         GEM_BUG_ON(!drm_mm_node_allocated(&vma->node));
 523         GEM_BUG_ON(vma->flags & (I915_VMA_GLOBAL_BIND | I915_VMA_LOCAL_BIND));
 524
 525         drm_mm_remove_node(&vma->node);
 526         list_move_tail(&vma->vm_link, &vma->vm->unbound_list);
 527
 528         /* Since the unbound list is global, only move to that list if
 529          * no more VMAs exist.
 530          */
 531         if (--obj->bind_count == 0)
 532                 list_move_tail(&obj->global_link,
 533                                &to_i915(obj->base.dev)->mm.unbound_list);
 534
 535         /* And finally now the object is completely decoupled from this vma,
 536          * we can drop its hold on the backing storage and allow it to be
 537          * reaped by the shrinker.
 538          */
 539         i915_gem_object_unpin_pages(obj);
 540         GEM_BUG_ON(atomic_read(&obj->mm.pages_pin_count) < obj->bind_count);
 541 }
 542
 543 int __i915_vma_do_pin(struct i915_vma *vma,
 544                       u64 size, u64 alignment, u64 flags)
 545 {
 546         const unsigned int bound = vma->flags;
 547         int ret;
 548
 549         lockdep_assert_held(&vma->vm->i915->drm.struct_mutex);
 550         GEM_BUG_ON((flags & (PIN_GLOBAL | PIN_USER)) == 0);
 551         GEM_BUG_ON((flags & PIN_GLOBAL) && !i915_vma_is_ggtt(vma));
 552
 553         if (WARN_ON(bound & I915_VMA_PIN_OVERFLOW)) {
 554                 ret = -EBUSY;
 555                 goto err_unpin;
 556         }
 557
 558         if ((bound & I915_VMA_BIND_MASK) == 0) {
 559                 ret = i915_vma_insert(vma, size, alignment, flags);
 560                 if (ret)
 561                         goto err_unpin;
 562         }
 563
 564         ret = i915_vma_bind(vma, vma->obj->cache_level, flags);
 565         if (ret)
 566                 goto err_remove;
 567
 568         if ((bound ^ vma->flags) & I915_VMA_GLOBAL_BIND)
 569                 __i915_vma_set_map_and_fenceable(vma);
 570
 571         GEM_BUG_ON(!drm_mm_node_allocated(&vma->node));
 572         GEM_BUG_ON(i915_vma_misplaced(vma, size, alignment, flags));
 573         return 0;
 574
 575 err_remove:
 576         if ((bound & I915_VMA_BIND_MASK) == 0) {
 577                 GEM_BUG_ON(vma->pages);
 578                 i915_vma_remove(vma);
 579         }
 580 err_unpin:
 581         __i915_vma_unpin(vma);
 582         return ret;
 583 }
 584
 585 static void i915_vma_destroy(struct i915_vma *vma)
 586 {
 587         int i;
 588
 589         GEM_BUG_ON(vma->node.allocated);
 590         GEM_BUG_ON(i915_vma_is_active(vma));
 591         GEM_BUG_ON(!i915_vma_is_closed(vma));
 592         GEM_BUG_ON(vma->fence);
 593
 594         for (i = 0; i < ARRAY_SIZE(vma->last_read); i++)
 595                 GEM_BUG_ON(i915_gem_active_isset(&vma->last_read[i]));
 596         GEM_BUG_ON(i915_gem_active_isset(&vma->last_fence));
 597
 598         list_del(&vma->obj_link);
 599         list_del(&vma->vm_link);
 600
 601         if (!i915_vma_is_ggtt(vma))
 602                 i915_ppgtt_put(i915_vm_to_ppgtt(vma->vm));
 603
 604         kmem_cache_free(to_i915(vma->obj->base.dev)->vmas, vma);
 605 }
 606
 607 void i915_vma_close(struct i915_vma *vma)
 608 {
 609         GEM_BUG_ON(i915_vma_is_closed(vma));
 610         vma->flags |= I915_VMA_CLOSED;
 611
 612         rb_erase(&vma->obj_node, &vma->obj->vma_tree);
 613
 614         if (!i915_vma_is_active(vma) && !i915_vma_is_pinned(vma))
 615                 WARN_ON(i915_vma_unbind(vma));
 616 }
 617
 618 static void __i915_vma_iounmap(struct i915_vma *vma)
 619 {
 620         GEM_BUG_ON(i915_vma_is_pinned(vma));
 621
 622         if (vma->iomap == NULL)
 623                 return;
 624
 625         io_mapping_unmap(vma->iomap);
 626         vma->iomap = NULL;
 627 }
 628
 629 int i915_vma_unbind(struct i915_vma *vma)
 630 {
 631         struct drm_i915_gem_object *obj = vma->obj;
 632         unsigned long active;
 633         int ret;
 634
 635         lockdep_assert_held(&obj->base.dev->struct_mutex);
 636
 637         /* First wait upon any activity as retiring the request may
 638          * have side-effects such as unpinning or even unbinding this vma.
 639          */
 640         active = i915_vma_get_active(vma);
 641         if (active) {
 642                 int idx;
 643
 644                 /* When a closed VMA is retired, it is unbound - eek.
 645                  * In order to prevent it from being recursively closed,
 646                  * take a pin on the vma so that the second unbind is
 647                  * aborted.
 648                  *
 649                  * Even more scary is that the retire callback may free
 650                  * the object (last active vma). To prevent the explosion
 651                  * we defer the actual object free to a worker that can
 652                  * only proceed once it acquires the struct_mutex (which
 653                  * we currently hold, therefore it cannot free this object
 654                  * before we are finished).
 655                  */
 656                 __i915_vma_pin(vma);
 657
 658                 for_each_active(active, idx) {
 659                         ret = i915_gem_active_retire(&vma->last_read[idx],
 660                                                      &vma->vm->i915->drm.struct_mutex);
 661                         if (ret)
 662                                 break;
 663                 }
 664
 665                 if (!ret) {
 666                         ret = i915_gem_active_retire(&vma->last_fence,
 667                                                      &vma->vm->i915->drm.struct_mutex);
 668                 }
 669
 670                 __i915_vma_unpin(vma);
 671                 if (ret)
 672                         return ret;
 673         }
 674         GEM_BUG_ON(i915_vma_is_active(vma));
 675
 676         if (i915_vma_is_pinned(vma))
 677                 return -EBUSY;
 678
 679         if (!drm_mm_node_allocated(&vma->node))
 680                 goto destroy;
 681
 682         GEM_BUG_ON(obj->bind_count == 0);
 683         GEM_BUG_ON(!i915_gem_object_has_pinned_pages(obj));
 684
 685         if (i915_vma_is_map_and_fenceable(vma)) {
 686                 /* release the fence reg _after_ flushing */
 687                 ret = i915_vma_put_fence(vma);
 688                 if (ret)
 689                         return ret;
 690
 691                 /* Force a pagefault for domain tracking on next user access */
 692                 i915_gem_release_mmap(obj);
 693
 694                 __i915_vma_iounmap(vma);
 695                 vma->flags &= ~I915_VMA_CAN_FENCE;
 696         }
 697
 698         if (likely(!vma->vm->closed)) {
 699                 trace_i915_vma_unbind(vma);
 700                 vma->vm->unbind_vma(vma);
 701         }
 702         vma->flags &= ~(I915_VMA_GLOBAL_BIND | I915_VMA_LOCAL_BIND);
 703
 704         if (vma->pages != obj->mm.pages) {
 705                 GEM_BUG_ON(!vma->pages);
 706                 sg_free_table(vma->pages);
 707                 kfree(vma->pages);
 708         }
 709         vma->pages = NULL;
 710
 711         i915_vma_remove(vma);
 712
 713 destroy:
 714         if (unlikely(i915_vma_is_closed(vma)))
 715                 i915_vma_destroy(vma);
 716
 717         return 0;
 718 }
 719
 720 #if IS_ENABLED(CONFIG_DRM_I915_SELFTEST)
 721 #include "selftests/i915_vma.c"
 722 #endif