xref: /dflybsd-src/sys/dev/drm/i915/i915_gem.c (revision e19e5bbc20dd1d64f1833c5d0ac7a605c8e9bfa0)
1 /*-
2  * Copyright © 2008 Intel Corporation
3  *
4  * Permission is hereby granted, free of charge, to any person obtaining a
5  * copy of this software and associated documentation files (the "Software"),
6  * to deal in the Software without restriction, including without limitation
7  * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8  * and/or sell copies of the Software, and to permit persons to whom the
9  * Software is furnished to do so, subject to the following conditions:
10  *
11  * The above copyright notice and this permission notice (including the next
12  * paragraph) shall be included in all copies or substantial portions of the
13  * Software.
14  *
15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16  * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17  * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
18  * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19  * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20  * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
21  * IN THE SOFTWARE.
22  *
23  * Authors:
24  *    Eric Anholt <eric@anholt.net>
25  *
26  * Copyright (c) 2011 The FreeBSD Foundation
27  * All rights reserved.
28  *
29  * This software was developed by Konstantin Belousov under sponsorship from
30  * the FreeBSD Foundation.
31  *
32  * Redistribution and use in source and binary forms, with or without
33  * modification, are permitted provided that the following conditions
34  * are met:
35  * 1. Redistributions of source code must retain the above copyright
36  *    notice, this list of conditions and the following disclaimer.
37  * 2. Redistributions in binary form must reproduce the above copyright
38  *    notice, this list of conditions and the following disclaimer in the
39  *    documentation and/or other materials provided with the distribution.
40  *
41  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51  * SUCH DAMAGE.
52  *
53  * $FreeBSD: head/sys/dev/drm2/i915/i915_gem.c 253497 2013-07-20 13:52:40Z kib $
54  */
55 
56 #include <sys/resourcevar.h>
57 #include <sys/sfbuf.h>
58 
59 #include <drm/drmP.h>
60 #include <drm/i915_drm.h>
61 #include "i915_drv.h"
62 #include "intel_drv.h"
63 #include "intel_ringbuffer.h"
64 
65 static void i915_gem_object_flush_cpu_write_domain(
66     struct drm_i915_gem_object *obj);
67 static uint32_t i915_gem_get_gtt_size(struct drm_device *dev, uint32_t size,
68     int tiling_mode);
69 static uint32_t i915_gem_get_gtt_alignment(struct drm_device *dev,
70     uint32_t size, int tiling_mode);
71 static int i915_gem_object_bind_to_gtt(struct drm_i915_gem_object *obj,
72     unsigned alignment, bool map_and_fenceable);
73 static int i915_gem_object_get_pages_gtt(struct drm_i915_gem_object *obj,
74     int flags);
75 static void i915_gem_object_put_pages_gtt(struct drm_i915_gem_object *obj);
76 static int i915_gem_object_set_to_cpu_domain(struct drm_i915_gem_object *obj,
77     bool write);
78 static void i915_gem_object_set_to_full_cpu_read_domain(
79     struct drm_i915_gem_object *obj);
80 static int i915_gem_object_set_cpu_read_domain_range(
81     struct drm_i915_gem_object *obj, uint64_t offset, uint64_t size);
82 static void i915_gem_object_finish_gtt(struct drm_i915_gem_object *obj);
83 static void i915_gem_object_truncate(struct drm_i915_gem_object *obj);
84 static int i915_gem_object_is_purgeable(struct drm_i915_gem_object *obj);
85 static bool i915_gem_object_is_inactive(struct drm_i915_gem_object *obj);
86 static int i915_gem_object_needs_bit17_swizzle(struct drm_i915_gem_object *obj);
87 static vm_page_t i915_gem_wire_page(vm_object_t object, vm_pindex_t pindex);
88 static void i915_gem_process_flushing_list(struct intel_ring_buffer *ring,
89     uint32_t flush_domains);
90 static void i915_gem_clear_fence_reg(struct drm_device *dev,
91     struct drm_i915_fence_reg *reg);
92 static void i915_gem_reset_fences(struct drm_device *dev);
93 static int i915_gem_phys_pwrite(struct drm_device *dev,
94     struct drm_i915_gem_object *obj, uint64_t data_ptr, uint64_t offset,
95     uint64_t size, struct drm_file *file_priv);
96 static void i915_gem_lowmem(void *arg);
97 
98 MALLOC_DEFINE(DRM_I915_GEM, "i915gem", "Allocations from i915 gem");
99 long i915_gem_wired_pages_cnt;
100 
101 static void
102 i915_gem_info_add_obj(struct drm_i915_private *dev_priv, size_t size)
103 {
104 
105 	dev_priv->mm.object_count++;
106 	dev_priv->mm.object_memory += size;
107 }
108 
109 static void
110 i915_gem_info_remove_obj(struct drm_i915_private *dev_priv, size_t size)
111 {
112 
113 	dev_priv->mm.object_count--;
114 	dev_priv->mm.object_memory -= size;
115 }
116 
117 static int
118 i915_gem_wait_for_error(struct drm_device *dev)
119 {
120 	struct drm_i915_private *dev_priv = dev->dev_private;
121 	int ret;
122 
123 	if (!atomic_read(&dev_priv->mm.wedged))
124 		return 0;
125 
126 	lockmgr(&dev_priv->error_completion_lock, LK_EXCLUSIVE);
127 	while (dev_priv->error_completion == 0) {
128 		ret = -lksleep(&dev_priv->error_completion,
129 		    &dev_priv->error_completion_lock, PCATCH, "915wco", 0);
130 		if (ret != 0) {
131 			lockmgr(&dev_priv->error_completion_lock, LK_RELEASE);
132 			return (ret);
133 		}
134 	}
135 	lockmgr(&dev_priv->error_completion_lock, LK_RELEASE);
136 
137 	if (atomic_read(&dev_priv->mm.wedged)) {
138 		/* GPU is hung, bump the completion count to account for
139 		 * the token we just consumed so that we never hit zero and
140 		 * end up waiting upon a subsequent completion event that
141 		 * will never happen.
142 		 */
143 		lockmgr(&dev_priv->error_completion_lock, LK_EXCLUSIVE);
144 		dev_priv->error_completion++;
145 		lockmgr(&dev_priv->error_completion_lock, LK_RELEASE);
146 	}
147 	return 0;
148 }
149 
150 int
151 i915_mutex_lock_interruptible(struct drm_device *dev)
152 {
153 	struct drm_i915_private *dev_priv;
154 	int ret;
155 
156 	dev_priv = dev->dev_private;
157 	ret = i915_gem_wait_for_error(dev);
158 	if (ret != 0)
159 		return (ret);
160 
161 	/*
162 	 * interruptible shall it be. might indeed be if dev_lock is
163 	 * changed to sx
164 	 */
165 	ret = lockmgr(&dev->dev_struct_lock, LK_EXCLUSIVE|LK_SLEEPFAIL);
166 	if (ret != 0)
167 		return (-ret);
168 
169 	return (0);
170 }
171 
172 
173 static void
174 i915_gem_free_object_tail(struct drm_i915_gem_object *obj)
175 {
176 	struct drm_device *dev;
177 	drm_i915_private_t *dev_priv;
178 	int ret;
179 
180 	dev = obj->base.dev;
181 	dev_priv = dev->dev_private;
182 
183 	ret = i915_gem_object_unbind(obj);
184 	if (ret == -ERESTART) {
185 		list_move(&obj->mm_list, &dev_priv->mm.deferred_free_list);
186 		return;
187 	}
188 
189 	drm_gem_free_mmap_offset(&obj->base);
190 	drm_gem_object_release(&obj->base);
191 	i915_gem_info_remove_obj(dev_priv, obj->base.size);
192 
193 	drm_free(obj->page_cpu_valid, DRM_I915_GEM);
194 	drm_free(obj->bit_17, DRM_I915_GEM);
195 	drm_free(obj, DRM_I915_GEM);
196 }
197 
198 void
199 i915_gem_free_object(struct drm_gem_object *gem_obj)
200 {
201 	struct drm_i915_gem_object *obj;
202 	struct drm_device *dev;
203 
204 	obj = to_intel_bo(gem_obj);
205 	dev = obj->base.dev;
206 
207 	while (obj->pin_count > 0)
208 		i915_gem_object_unpin(obj);
209 
210 	if (obj->phys_obj != NULL)
211 		i915_gem_detach_phys_object(dev, obj);
212 
213 	i915_gem_free_object_tail(obj);
214 }
215 
216 int
217 i915_gem_do_init(struct drm_device *dev, unsigned long start,
218     unsigned long mappable_end, unsigned long end)
219 {
220 	drm_i915_private_t *dev_priv;
221 	unsigned long mappable;
222 	int error;
223 
224 	dev_priv = dev->dev_private;
225 	mappable = min(end, mappable_end) - start;
226 
227 	drm_mm_init(&dev_priv->mm.gtt_space, start, end - start);
228 
229 	dev_priv->mm.gtt_start = start;
230 	dev_priv->mm.gtt_mappable_end = mappable_end;
231 	dev_priv->mm.gtt_end = end;
232 	dev_priv->mm.gtt_total = end - start;
233 	dev_priv->mm.mappable_gtt_total = mappable;
234 
235 	/* Take over this portion of the GTT */
236 	intel_gtt_clear_range(start / PAGE_SIZE, (end-start) / PAGE_SIZE);
237 	device_printf(dev->dev,
238 	    "taking over the fictitious range 0x%lx-0x%lx\n",
239 	    dev->agp->base + start, dev->agp->base + start + mappable);
240 	error = -vm_phys_fictitious_reg_range(dev->agp->base + start,
241 	    dev->agp->base + start + mappable, VM_MEMATTR_WRITE_COMBINING);
242 	return (error);
243 }
244 
245 int
246 i915_gem_init_ioctl(struct drm_device *dev, void *data,
247     struct drm_file *file)
248 {
249 	struct drm_i915_gem_init *args;
250 	drm_i915_private_t *dev_priv;
251 
252 	dev_priv = dev->dev_private;
253 	args = data;
254 
255 	if (args->gtt_start >= args->gtt_end ||
256 	    (args->gtt_end | args->gtt_start) & (PAGE_SIZE - 1))
257 		return (-EINVAL);
258 
259 	/*
260 	 * XXXKIB. The second-time initialization should be guarded
261 	 * against.
262 	 */
263 	lockmgr(&dev->dev_lock, LK_EXCLUSIVE|LK_RETRY|LK_CANRECURSE);
264 	i915_gem_do_init(dev, args->gtt_start, args->gtt_end, args->gtt_end);
265 	lockmgr(&dev->dev_lock, LK_RELEASE);
266 
267 	return 0;
268 }
269 
270 int
271 i915_gem_idle(struct drm_device *dev)
272 {
273 	drm_i915_private_t *dev_priv;
274 	int ret;
275 
276 	dev_priv = dev->dev_private;
277 	if (dev_priv->mm.suspended)
278 		return (0);
279 
280 	ret = i915_gpu_idle(dev, true);
281 	if (ret != 0)
282 		return (ret);
283 
284 	/* Under UMS, be paranoid and evict. */
285 	if (!drm_core_check_feature(dev, DRIVER_MODESET)) {
286 		ret = i915_gem_evict_inactive(dev, false);
287 		if (ret != 0)
288 			return ret;
289 	}
290 
291 	i915_gem_reset_fences(dev);
292 
293 	/* Hack!  Don't let anybody do execbuf while we don't control the chip.
294 	 * We need to replace this with a semaphore, or something.
295 	 * And not confound mm.suspended!
296 	 */
297 	dev_priv->mm.suspended = 1;
298 	del_timer_sync(&dev_priv->hangcheck_timer);
299 
300 	i915_kernel_lost_context(dev);
301 	i915_gem_cleanup_ringbuffer(dev);
302 
303 	/* Cancel the retire work handler, which should be idle now. */
304 	cancel_delayed_work_sync(&dev_priv->mm.retire_work);
305 
306 	return (ret);
307 }
308 
309 void
310 i915_gem_init_swizzling(struct drm_device *dev)
311 {
312 	drm_i915_private_t *dev_priv;
313 
314 	dev_priv = dev->dev_private;
315 
316 	if (INTEL_INFO(dev)->gen < 5 ||
317 	    dev_priv->mm.bit_6_swizzle_x == I915_BIT_6_SWIZZLE_NONE)
318 		return;
319 
320 	I915_WRITE(DISP_ARB_CTL, I915_READ(DISP_ARB_CTL) |
321 				 DISP_TILE_SURFACE_SWIZZLING);
322 
323 	if (IS_GEN5(dev))
324 		return;
325 
326 	I915_WRITE(TILECTL, I915_READ(TILECTL) | TILECTL_SWZCTL);
327 	if (IS_GEN6(dev))
328 		I915_WRITE(ARB_MODE, _MASKED_BIT_ENABLE(ARB_MODE_SWIZZLE_SNB));
329 	else
330 		I915_WRITE(ARB_MODE, _MASKED_BIT_ENABLE(ARB_MODE_SWIZZLE_IVB));
331 }
332 
333 int
334 i915_gem_init_hw(struct drm_device *dev)
335 {
336 	drm_i915_private_t *dev_priv;
337 	int ret;
338 
339 	dev_priv = dev->dev_private;
340 
341 	i915_gem_init_swizzling(dev);
342 
343 	ret = intel_init_render_ring_buffer(dev);
344 	if (ret != 0)
345 		return (ret);
346 
347 	if (HAS_BSD(dev)) {
348 		ret = intel_init_bsd_ring_buffer(dev);
349 		if (ret != 0)
350 			goto cleanup_render_ring;
351 	}
352 
353 	if (HAS_BLT(dev)) {
354 		ret = intel_init_blt_ring_buffer(dev);
355 		if (ret != 0)
356 			goto cleanup_bsd_ring;
357 	}
358 
359 	dev_priv->next_seqno = 1;
360 	i915_gem_init_ppgtt(dev);
361 	return (0);
362 
363 cleanup_bsd_ring:
364 	intel_cleanup_ring_buffer(&dev_priv->ring[VCS]);
365 cleanup_render_ring:
366 	intel_cleanup_ring_buffer(&dev_priv->ring[RCS]);
367 	return (ret);
368 }
369 
370 int
371 i915_gem_get_aperture_ioctl(struct drm_device *dev, void *data,
372     struct drm_file *file)
373 {
374 	struct drm_i915_private *dev_priv;
375 	struct drm_i915_gem_get_aperture *args;
376 	struct drm_i915_gem_object *obj;
377 	size_t pinned;
378 
379 	dev_priv = dev->dev_private;
380 	args = data;
381 
382 	if (!(dev->driver->driver_features & DRIVER_GEM))
383 		return (-ENODEV);
384 
385 	pinned = 0;
386 	DRM_LOCK(dev);
387 	list_for_each_entry(obj, &dev_priv->mm.pinned_list, mm_list)
388 		pinned += obj->gtt_space->size;
389 	DRM_UNLOCK(dev);
390 
391 	args->aper_size = dev_priv->mm.gtt_total;
392 	args->aper_available_size = args->aper_size - pinned;
393 
394 	return (0);
395 }
396 
397 int
398 i915_gem_object_pin(struct drm_i915_gem_object *obj, uint32_t alignment,
399      bool map_and_fenceable)
400 {
401 	struct drm_device *dev;
402 	struct drm_i915_private *dev_priv;
403 	int ret;
404 
405 	dev = obj->base.dev;
406 	dev_priv = dev->dev_private;
407 
408 	KASSERT(obj->pin_count != DRM_I915_GEM_OBJECT_MAX_PIN_COUNT,
409 	    ("Max pin count"));
410 
411 	if (obj->gtt_space != NULL) {
412 		if ((alignment && obj->gtt_offset & (alignment - 1)) ||
413 		    (map_and_fenceable && !obj->map_and_fenceable)) {
414 			DRM_DEBUG("bo is already pinned with incorrect alignment:"
415 			     " offset=%x, req.alignment=%x, req.map_and_fenceable=%d,"
416 			     " obj->map_and_fenceable=%d\n",
417 			     obj->gtt_offset, alignment,
418 			     map_and_fenceable,
419 			     obj->map_and_fenceable);
420 			ret = i915_gem_object_unbind(obj);
421 			if (ret != 0)
422 				return (ret);
423 		}
424 	}
425 
426 	if (obj->gtt_space == NULL) {
427 		ret = i915_gem_object_bind_to_gtt(obj, alignment,
428 		    map_and_fenceable);
429 		if (ret)
430 			return (ret);
431 	}
432 
433 	if (obj->pin_count++ == 0 && !obj->active)
434 		list_move_tail(&obj->mm_list, &dev_priv->mm.pinned_list);
435 	obj->pin_mappable |= map_and_fenceable;
436 
437 #if 1
438 	KIB_NOTYET();
439 #else
440 	WARN_ON(i915_verify_lists(dev));
441 #endif
442 	return (0);
443 }
444 
445 void
446 i915_gem_object_unpin(struct drm_i915_gem_object *obj)
447 {
448 	struct drm_device *dev;
449 	drm_i915_private_t *dev_priv;
450 
451 	dev = obj->base.dev;
452 	dev_priv = dev->dev_private;
453 
454 #if 1
455 	KIB_NOTYET();
456 #else
457 	WARN_ON(i915_verify_lists(dev));
458 #endif
459 
460 	KASSERT(obj->pin_count != 0, ("zero pin count"));
461 	KASSERT(obj->gtt_space != NULL, ("No gtt mapping"));
462 
463 	if (--obj->pin_count == 0) {
464 		if (!obj->active)
465 			list_move_tail(&obj->mm_list,
466 			    &dev_priv->mm.inactive_list);
467 		obj->pin_mappable = false;
468 	}
469 #if 1
470 	KIB_NOTYET();
471 #else
472 	WARN_ON(i915_verify_lists(dev));
473 #endif
474 }
475 
476 int
477 i915_gem_pin_ioctl(struct drm_device *dev, void *data,
478     struct drm_file *file)
479 {
480 	struct drm_i915_gem_pin *args;
481 	struct drm_i915_gem_object *obj;
482 	struct drm_gem_object *gobj;
483 	int ret;
484 
485 	args = data;
486 
487 	ret = i915_mutex_lock_interruptible(dev);
488 	if (ret != 0)
489 		return ret;
490 
491 	gobj = drm_gem_object_lookup(dev, file, args->handle);
492 	if (gobj == NULL) {
493 		ret = -ENOENT;
494 		goto unlock;
495 	}
496 	obj = to_intel_bo(gobj);
497 
498 	if (obj->madv != I915_MADV_WILLNEED) {
499 		DRM_ERROR("Attempting to pin a purgeable buffer\n");
500 		ret = -EINVAL;
501 		goto out;
502 	}
503 
504 	if (obj->pin_filp != NULL && obj->pin_filp != file) {
505 		DRM_ERROR("Already pinned in i915_gem_pin_ioctl(): %d\n",
506 		    args->handle);
507 		ret = -EINVAL;
508 		goto out;
509 	}
510 
511 	obj->user_pin_count++;
512 	obj->pin_filp = file;
513 	if (obj->user_pin_count == 1) {
514 		ret = i915_gem_object_pin(obj, args->alignment, true);
515 		if (ret != 0)
516 			goto out;
517 	}
518 
519 	/* XXX - flush the CPU caches for pinned objects
520 	 * as the X server doesn't manage domains yet
521 	 */
522 	i915_gem_object_flush_cpu_write_domain(obj);
523 	args->offset = obj->gtt_offset;
524 out:
525 	drm_gem_object_unreference(&obj->base);
526 unlock:
527 	DRM_UNLOCK(dev);
528 	return (ret);
529 }
530 
531 int
532 i915_gem_unpin_ioctl(struct drm_device *dev, void *data,
533     struct drm_file *file)
534 {
535 	struct drm_i915_gem_pin *args;
536 	struct drm_i915_gem_object *obj;
537 	int ret;
538 
539 	args = data;
540 	ret = i915_mutex_lock_interruptible(dev);
541 	if (ret != 0)
542 		return (ret);
543 
544 	obj = to_intel_bo(drm_gem_object_lookup(dev, file, args->handle));
545 	if (&obj->base == NULL) {
546 		ret = -ENOENT;
547 		goto unlock;
548 	}
549 
550 	if (obj->pin_filp != file) {
551 		DRM_ERROR("Not pinned by caller in i915_gem_pin_ioctl(): %d\n",
552 		    args->handle);
553 		ret = -EINVAL;
554 		goto out;
555 	}
556 	obj->user_pin_count--;
557 	if (obj->user_pin_count == 0) {
558 		obj->pin_filp = NULL;
559 		i915_gem_object_unpin(obj);
560 	}
561 
562 out:
563 	drm_gem_object_unreference(&obj->base);
564 unlock:
565 	DRM_UNLOCK(dev);
566 	return (ret);
567 }
568 
569 int
570 i915_gem_busy_ioctl(struct drm_device *dev, void *data,
571     struct drm_file *file)
572 {
573 	struct drm_i915_gem_busy *args;
574 	struct drm_i915_gem_object *obj;
575 	struct drm_i915_gem_request *request;
576 	int ret;
577 
578 	args = data;
579 
580 	ret = i915_mutex_lock_interruptible(dev);
581 	if (ret != 0)
582 		return ret;
583 
584 	obj = to_intel_bo(drm_gem_object_lookup(dev, file, args->handle));
585 	if (&obj->base == NULL) {
586 		ret = -ENOENT;
587 		goto unlock;
588 	}
589 
590 	args->busy = obj->active;
591 	if (args->busy) {
592 		if (obj->base.write_domain & I915_GEM_GPU_DOMAINS) {
593 			ret = i915_gem_flush_ring(obj->ring,
594 			    0, obj->base.write_domain);
595 		} else if (obj->ring->outstanding_lazy_request ==
596 		    obj->last_rendering_seqno) {
597 			request = kmalloc(sizeof(*request), DRM_I915_GEM,
598 			    M_WAITOK | M_ZERO);
599 			ret = i915_add_request(obj->ring, NULL, request);
600 			if (ret != 0)
601 				drm_free(request, DRM_I915_GEM);
602 		}
603 
604 		i915_gem_retire_requests_ring(obj->ring);
605 		args->busy = obj->active;
606 	}
607 
608 	drm_gem_object_unreference(&obj->base);
609 unlock:
610 	DRM_UNLOCK(dev);
611 	return (ret);
612 }
613 
614 /* Throttle our rendering by waiting until the ring has completed our requests
615  * emitted over 20 msec ago.
616  *
617  * Note that if we were to use the current jiffies each time around the loop,
618  * we wouldn't escape the function with any frames outstanding if the time to
619  * render a frame was over 20ms.
620  *
621  * This should get us reasonable parallelism between CPU and GPU but also
622  * relatively low latency when blocking on a particular request to finish.
623  */
624 static int
625 i915_gem_ring_throttle(struct drm_device *dev, struct drm_file *file)
626 {
627 	struct drm_i915_private *dev_priv = dev->dev_private;
628 	struct drm_i915_file_private *file_priv = file->driver_priv;
629 	unsigned long recent_enough = ticks - (20 * hz / 1000);
630 	struct drm_i915_gem_request *request;
631 	struct intel_ring_buffer *ring = NULL;
632 	u32 seqno = 0;
633 	int ret;
634 
635 	dev_priv = dev->dev_private;
636 	if (atomic_read(&dev_priv->mm.wedged))
637 		return -EIO;
638 
639 	recent_enough = ticks - (20 * hz / 1000);
640 	ring = NULL;
641 	seqno = 0;
642 
643 	spin_lock(&file_priv->mm.lock);
644 	list_for_each_entry(request, &file_priv->mm.request_list, client_list) {
645 		if (time_after_eq(request->emitted_jiffies, recent_enough))
646 			break;
647 
648 		ring = request->ring;
649 		seqno = request->seqno;
650 	}
651 	spin_unlock(&file_priv->mm.lock);
652 
653 	if (seqno == 0)
654 		return 0;
655 
656 	ret = 0;
657 	lockmgr(&ring->irq_lock, LK_EXCLUSIVE);
658 	if (!i915_seqno_passed(ring->get_seqno(ring), seqno)) {
659 		if (ring->irq_get(ring)) {
660 			while (ret == 0 &&
661 			    !(i915_seqno_passed(ring->get_seqno(ring), seqno) ||
662 			    atomic_read(&dev_priv->mm.wedged)))
663 				ret = -lksleep(ring, &ring->irq_lock, PCATCH,
664 				    "915thr", 0);
665 			ring->irq_put(ring);
666 			if (ret == 0 && atomic_read(&dev_priv->mm.wedged))
667 				ret = -EIO;
668 		} else if (_intel_wait_for(dev,
669 		    i915_seqno_passed(ring->get_seqno(ring), seqno) ||
670 		    atomic_read(&dev_priv->mm.wedged), 3000, 0, "915rtr")) {
671 			ret = -EBUSY;
672 		}
673 	}
674 	lockmgr(&ring->irq_lock, LK_RELEASE);
675 
676 	if (ret == 0)
677 		queue_delayed_work(dev_priv->wq, &dev_priv->mm.retire_work, 0);
678 
679 	return ret;
680 }
681 
682 int
683 i915_gem_throttle_ioctl(struct drm_device *dev, void *data,
684     struct drm_file *file_priv)
685 {
686 
687 	return (i915_gem_ring_throttle(dev, file_priv));
688 }
689 
690 int
691 i915_gem_madvise_ioctl(struct drm_device *dev, void *data,
692 		       struct drm_file *file_priv)
693 {
694 	struct drm_i915_gem_madvise *args = data;
695 	struct drm_i915_gem_object *obj;
696 	int ret;
697 
698 	switch (args->madv) {
699 	case I915_MADV_DONTNEED:
700 	case I915_MADV_WILLNEED:
701 	    break;
702 	default:
703 	    return -EINVAL;
704 	}
705 
706 	ret = i915_mutex_lock_interruptible(dev);
707 	if (ret)
708 		return ret;
709 
710 	obj = to_intel_bo(drm_gem_object_lookup(dev, file_priv, args->handle));
711 	if (&obj->base == NULL) {
712 		ret = -ENOENT;
713 		goto unlock;
714 	}
715 
716 	if (obj->pin_count) {
717 		ret = -EINVAL;
718 		goto out;
719 	}
720 
721 	if (obj->madv != __I915_MADV_PURGED)
722 		obj->madv = args->madv;
723 
724 	/* if the object is no longer attached, discard its backing storage */
725 	if (i915_gem_object_is_purgeable(obj) && obj->pages == NULL)
726 		i915_gem_object_truncate(obj);
727 
728 	args->retained = obj->madv != __I915_MADV_PURGED;
729 
730 out:
731 	drm_gem_object_unreference(&obj->base);
732 unlock:
733 	DRM_UNLOCK(dev);
734 	return ret;
735 }
736 
737 void
738 i915_gem_cleanup_ringbuffer(struct drm_device *dev)
739 {
740 	drm_i915_private_t *dev_priv;
741 	int i;
742 
743 	dev_priv = dev->dev_private;
744 	for (i = 0; i < I915_NUM_RINGS; i++)
745 		intel_cleanup_ring_buffer(&dev_priv->ring[i]);
746 }
747 
748 int
749 i915_gem_entervt_ioctl(struct drm_device *dev, void *data,
750 		       struct drm_file *file_priv)
751 {
752 	drm_i915_private_t *dev_priv = dev->dev_private;
753 	int ret;
754 
755 	if (drm_core_check_feature(dev, DRIVER_MODESET))
756 		return 0;
757 
758 	if (atomic_read(&dev_priv->mm.wedged)) {
759 		DRM_ERROR("Reenabling wedged hardware, good luck\n");
760 		atomic_set(&dev_priv->mm.wedged, 0);
761 	}
762 
763 	DRM_LOCK(dev);
764 	dev_priv->mm.suspended = 0;
765 
766 	ret = i915_gem_init_hw(dev);
767 	if (ret != 0) {
768 		DRM_UNLOCK(dev);
769 		return ret;
770 	}
771 
772 	KASSERT(list_empty(&dev_priv->mm.active_list), ("active list"));
773 	DRM_UNLOCK(dev);
774 
775 	ret = drm_irq_install(dev);
776 	if (ret)
777 		goto cleanup_ringbuffer;
778 
779 	return 0;
780 
781 cleanup_ringbuffer:
782 	DRM_LOCK(dev);
783 	i915_gem_cleanup_ringbuffer(dev);
784 	dev_priv->mm.suspended = 1;
785 	DRM_UNLOCK(dev);
786 
787 	return ret;
788 }
789 
790 int
791 i915_gem_leavevt_ioctl(struct drm_device *dev, void *data,
792     struct drm_file *file_priv)
793 {
794 
795 	if (drm_core_check_feature(dev, DRIVER_MODESET))
796 		return 0;
797 
798 	drm_irq_uninstall(dev);
799 	return (i915_gem_idle(dev));
800 }
801 
802 int
803 i915_gem_create(struct drm_file *file, struct drm_device *dev, uint64_t size,
804     uint32_t *handle_p)
805 {
806 	struct drm_i915_gem_object *obj;
807 	uint32_t handle;
808 	int ret;
809 
810 	size = roundup(size, PAGE_SIZE);
811 	if (size == 0)
812 		return (-EINVAL);
813 
814 	obj = i915_gem_alloc_object(dev, size);
815 	if (obj == NULL)
816 		return (-ENOMEM);
817 
818 	handle = 0;
819 	ret = drm_gem_handle_create(file, &obj->base, &handle);
820 	if (ret != 0) {
821 		drm_gem_object_release(&obj->base);
822 		i915_gem_info_remove_obj(dev->dev_private, obj->base.size);
823 		drm_free(obj, DRM_I915_GEM);
824 		return (-ret);
825 	}
826 
827 	/* drop reference from allocate - handle holds it now */
828 	drm_gem_object_unreference(&obj->base);
829 	*handle_p = handle;
830 	return (0);
831 }
832 
833 int
834 i915_gem_dumb_create(struct drm_file *file, struct drm_device *dev,
835     struct drm_mode_create_dumb *args)
836 {
837 
838 	/* have to work out size/pitch and return them */
839 	args->pitch = roundup2(args->width * ((args->bpp + 7) / 8), 64);
840 	args->size = args->pitch * args->height;
841 	return (i915_gem_create(file, dev, args->size, &args->handle));
842 }
843 
844 int
845 i915_gem_dumb_destroy(struct drm_file *file, struct drm_device *dev,
846     uint32_t handle)
847 {
848 
849 	return (drm_gem_handle_delete(file, handle));
850 }
851 
852 int
853 i915_gem_create_ioctl(struct drm_device *dev, void *data,
854     struct drm_file *file)
855 {
856 	struct drm_i915_gem_create *args = data;
857 
858 	return (i915_gem_create(file, dev, args->size, &args->handle));
859 }
860 
861 static inline void vm_page_reference(vm_page_t m)
862 {
863 	vm_page_flag_set(m, PG_REFERENCED);
864 }
865 
866 static int
867 i915_gem_swap_io(struct drm_device *dev, struct drm_i915_gem_object *obj,
868     uint64_t data_ptr, uint64_t size, uint64_t offset, enum uio_rw rw,
869     struct drm_file *file)
870 {
871 	vm_object_t vm_obj;
872 	vm_page_t m;
873 	struct sf_buf *sf;
874 	vm_offset_t mkva;
875 	vm_pindex_t obj_pi;
876 	int cnt, do_bit17_swizzling, length, obj_po, ret, swizzled_po;
877 
878 	if (obj->gtt_offset != 0 && rw == UIO_READ)
879 		do_bit17_swizzling = i915_gem_object_needs_bit17_swizzle(obj);
880 	else
881 		do_bit17_swizzling = 0;
882 
883 	obj->dirty = 1;
884 	vm_obj = obj->base.vm_obj;
885 	ret = 0;
886 
887 	VM_OBJECT_LOCK(vm_obj);
888 	vm_object_pip_add(vm_obj, 1);
889 	while (size > 0) {
890 		obj_pi = OFF_TO_IDX(offset);
891 		obj_po = offset & PAGE_MASK;
892 
893 		m = i915_gem_wire_page(vm_obj, obj_pi);
894 		VM_OBJECT_UNLOCK(vm_obj);
895 
896 		sf = sf_buf_alloc(m);
897 		mkva = sf_buf_kva(sf);
898 		length = min(size, PAGE_SIZE - obj_po);
899 		while (length > 0) {
900 			if (do_bit17_swizzling &&
901 			    (VM_PAGE_TO_PHYS(m) & (1 << 17)) != 0) {
902 				cnt = roundup2(obj_po + 1, 64);
903 				cnt = min(cnt - obj_po, length);
904 				swizzled_po = obj_po ^ 64;
905 			} else {
906 				cnt = length;
907 				swizzled_po = obj_po;
908 			}
909 			if (rw == UIO_READ)
910 				ret = -copyout_nofault(
911 				    (char *)mkva + swizzled_po,
912 				    (void *)(uintptr_t)data_ptr, cnt);
913 			else
914 				ret = -copyin_nofault(
915 				    (void *)(uintptr_t)data_ptr,
916 				    (char *)mkva + swizzled_po, cnt);
917 			if (ret != 0)
918 				break;
919 			data_ptr += cnt;
920 			size -= cnt;
921 			length -= cnt;
922 			offset += cnt;
923 			obj_po += cnt;
924 		}
925 		sf_buf_free(sf);
926 		VM_OBJECT_LOCK(vm_obj);
927 		if (rw == UIO_WRITE)
928 			vm_page_dirty(m);
929 		vm_page_reference(m);
930 		vm_page_busy_wait(m, FALSE, "i915gem");
931 		vm_page_unwire(m, 1);
932 		vm_page_wakeup(m);
933 		atomic_add_long(&i915_gem_wired_pages_cnt, -1);
934 
935 		if (ret != 0)
936 			break;
937 	}
938 	vm_object_pip_wakeup(vm_obj);
939 	VM_OBJECT_UNLOCK(vm_obj);
940 
941 	return (ret);
942 }
943 
944 static int
945 i915_gem_gtt_write(struct drm_device *dev, struct drm_i915_gem_object *obj,
946     uint64_t data_ptr, uint64_t size, uint64_t offset, struct drm_file *file)
947 {
948 	vm_offset_t mkva;
949 	int ret;
950 
951 	/*
952 	 * Pass the unaligned physical address and size to pmap_mapdev_attr()
953 	 * so it can properly calculate whether an extra page needs to be
954 	 * mapped or not to cover the requested range.  The function will
955 	 * add the page offset into the returned mkva for us.
956 	 */
957 	mkva = (vm_offset_t)pmap_mapdev_attr(dev->agp->base + obj->gtt_offset +
958 	    offset, size, PAT_WRITE_COMBINING);
959 	ret = -copyin_nofault((void *)(uintptr_t)data_ptr, (char *)mkva, size);
960 	pmap_unmapdev(mkva, size);
961 	return (ret);
962 }
963 
964 static int
965 i915_gem_obj_io(struct drm_device *dev, uint32_t handle, uint64_t data_ptr,
966     uint64_t size, uint64_t offset, enum uio_rw rw, struct drm_file *file)
967 {
968 	struct drm_i915_gem_object *obj;
969 	vm_page_t *ma;
970 	vm_offset_t start, end;
971 	int npages, ret;
972 
973 	if (size == 0)
974 		return (0);
975 	start = trunc_page(data_ptr);
976 	end = round_page(data_ptr + size);
977 	npages = howmany(end - start, PAGE_SIZE);
978 	ma = kmalloc(npages * sizeof(vm_page_t), DRM_I915_GEM, M_WAITOK |
979 	    M_ZERO);
980 	npages = vm_fault_quick_hold_pages(&curproc->p_vmspace->vm_map,
981 	    (vm_offset_t)data_ptr, size,
982 	    (rw == UIO_READ ? VM_PROT_WRITE : 0 ) | VM_PROT_READ, ma, npages);
983 	if (npages == -1) {
984 		ret = -EFAULT;
985 		goto free_ma;
986 	}
987 
988 	ret = i915_mutex_lock_interruptible(dev);
989 	if (ret != 0)
990 		goto unlocked;
991 
992 	obj = to_intel_bo(drm_gem_object_lookup(dev, file, handle));
993 	if (&obj->base == NULL) {
994 		ret = -ENOENT;
995 		goto unlock;
996 	}
997 	if (offset > obj->base.size || size > obj->base.size - offset) {
998 		ret = -EINVAL;
999 		goto out;
1000 	}
1001 
1002 	if (rw == UIO_READ) {
1003 		ret = i915_gem_object_set_cpu_read_domain_range(obj,
1004 		    offset, size);
1005 		if (ret != 0)
1006 			goto out;
1007 		ret = i915_gem_swap_io(dev, obj, data_ptr, size, offset,
1008 		    UIO_READ, file);
1009 	} else {
1010 		if (obj->phys_obj) {
1011 			ret = i915_gem_phys_pwrite(dev, obj, data_ptr, offset,
1012 			    size, file);
1013 		} else if (obj->gtt_space &&
1014 		    obj->base.write_domain != I915_GEM_DOMAIN_CPU) {
1015 			ret = i915_gem_object_pin(obj, 0, true);
1016 			if (ret != 0)
1017 				goto out;
1018 			ret = i915_gem_object_set_to_gtt_domain(obj, true);
1019 			if (ret != 0)
1020 				goto out_unpin;
1021 			ret = i915_gem_object_put_fence(obj);
1022 			if (ret != 0)
1023 				goto out_unpin;
1024 			ret = i915_gem_gtt_write(dev, obj, data_ptr, size,
1025 			    offset, file);
1026 out_unpin:
1027 			i915_gem_object_unpin(obj);
1028 		} else {
1029 			ret = i915_gem_object_set_to_cpu_domain(obj, true);
1030 			if (ret != 0)
1031 				goto out;
1032 			ret = i915_gem_swap_io(dev, obj, data_ptr, size, offset,
1033 			    UIO_WRITE, file);
1034 		}
1035 	}
1036 out:
1037 	drm_gem_object_unreference(&obj->base);
1038 unlock:
1039 	DRM_UNLOCK(dev);
1040 unlocked:
1041 	vm_page_unhold_pages(ma, npages);
1042 free_ma:
1043 	drm_free(ma, DRM_I915_GEM);
1044 	return (ret);
1045 }
1046 
1047 int
1048 i915_gem_pread_ioctl(struct drm_device *dev, void *data, struct drm_file *file)
1049 {
1050 	struct drm_i915_gem_pread *args;
1051 
1052 	args = data;
1053 	return (i915_gem_obj_io(dev, args->handle, args->data_ptr, args->size,
1054 	    args->offset, UIO_READ, file));
1055 }
1056 
1057 int
1058 i915_gem_pwrite_ioctl(struct drm_device *dev, void *data, struct drm_file *file)
1059 {
1060 	struct drm_i915_gem_pwrite *args;
1061 
1062 	args = data;
1063 	return (i915_gem_obj_io(dev, args->handle, args->data_ptr, args->size,
1064 	    args->offset, UIO_WRITE, file));
1065 }
1066 
1067 int
1068 i915_gem_set_domain_ioctl(struct drm_device *dev, void *data,
1069     struct drm_file *file)
1070 {
1071 	struct drm_i915_gem_set_domain *args;
1072 	struct drm_i915_gem_object *obj;
1073 	uint32_t read_domains;
1074 	uint32_t write_domain;
1075 	int ret;
1076 
1077 	if ((dev->driver->driver_features & DRIVER_GEM) == 0)
1078 		return (-ENODEV);
1079 
1080 	args = data;
1081 	read_domains = args->read_domains;
1082 	write_domain = args->write_domain;
1083 
1084 	if ((write_domain & I915_GEM_GPU_DOMAINS) != 0 ||
1085 	    (read_domains & I915_GEM_GPU_DOMAINS) != 0 ||
1086 	    (write_domain != 0 && read_domains != write_domain))
1087 		return (-EINVAL);
1088 
1089 	ret = i915_mutex_lock_interruptible(dev);
1090 	if (ret != 0)
1091 		return (ret);
1092 
1093 	obj = to_intel_bo(drm_gem_object_lookup(dev, file, args->handle));
1094 	if (&obj->base == NULL) {
1095 		ret = -ENOENT;
1096 		goto unlock;
1097 	}
1098 
1099 	if ((read_domains & I915_GEM_DOMAIN_GTT) != 0) {
1100 		ret = i915_gem_object_set_to_gtt_domain(obj, write_domain != 0);
1101 		if (ret == -EINVAL)
1102 			ret = 0;
1103 	} else
1104 		ret = i915_gem_object_set_to_cpu_domain(obj, write_domain != 0);
1105 
1106 	drm_gem_object_unreference(&obj->base);
1107 unlock:
1108 	DRM_UNLOCK(dev);
1109 	return (ret);
1110 }
1111 
1112 int
1113 i915_gem_sw_finish_ioctl(struct drm_device *dev, void *data,
1114     struct drm_file *file)
1115 {
1116 	struct drm_i915_gem_sw_finish *args;
1117 	struct drm_i915_gem_object *obj;
1118 	int ret;
1119 
1120 	args = data;
1121 	ret = 0;
1122 	if ((dev->driver->driver_features & DRIVER_GEM) == 0)
1123 		return (ENODEV);
1124 	ret = i915_mutex_lock_interruptible(dev);
1125 	if (ret != 0)
1126 		return (ret);
1127 	obj = to_intel_bo(drm_gem_object_lookup(dev, file, args->handle));
1128 	if (&obj->base == NULL) {
1129 		ret = -ENOENT;
1130 		goto unlock;
1131 	}
1132 	if (obj->pin_count != 0)
1133 		i915_gem_object_flush_cpu_write_domain(obj);
1134 	drm_gem_object_unreference(&obj->base);
1135 unlock:
1136 	DRM_UNLOCK(dev);
1137 	return (ret);
1138 }
1139 
1140 int
1141 i915_gem_mmap_ioctl(struct drm_device *dev, void *data,
1142     struct drm_file *file)
1143 {
1144 	struct drm_i915_gem_mmap *args;
1145 	struct drm_gem_object *obj;
1146 	struct proc *p;
1147 	vm_map_t map;
1148 	vm_offset_t addr;
1149 	vm_size_t size;
1150 	int error, rv;
1151 
1152 	args = data;
1153 
1154 	if ((dev->driver->driver_features & DRIVER_GEM) == 0)
1155 		return (-ENODEV);
1156 
1157 	obj = drm_gem_object_lookup(dev, file, args->handle);
1158 	if (obj == NULL)
1159 		return (-ENOENT);
1160 	error = 0;
1161 	if (args->size == 0)
1162 		goto out;
1163 	p = curproc;
1164 	map = &p->p_vmspace->vm_map;
1165 	size = round_page(args->size);
1166 	PROC_LOCK(p);
1167 	if (map->size + size > p->p_rlimit[RLIMIT_VMEM].rlim_cur) {
1168 		PROC_UNLOCK(p);
1169 		error = ENOMEM;
1170 		goto out;
1171 	}
1172 	PROC_UNLOCK(p);
1173 
1174 	addr = 0;
1175 	vm_object_hold(obj->vm_obj);
1176 	vm_object_reference_locked(obj->vm_obj);
1177 	vm_object_drop(obj->vm_obj);
1178 	DRM_UNLOCK(dev);
1179 	rv = vm_map_find(map, obj->vm_obj, args->offset, &addr, args->size,
1180 	    PAGE_SIZE, /* align */
1181 	    TRUE, /* fitit */
1182 	    VM_MAPTYPE_NORMAL, /* maptype */
1183 	    VM_PROT_READ | VM_PROT_WRITE, /* prot */
1184 	    VM_PROT_READ | VM_PROT_WRITE, /* max */
1185 	    MAP_SHARED /* cow */);
1186 	if (rv != KERN_SUCCESS) {
1187 		vm_object_deallocate(obj->vm_obj);
1188 		error = -vm_mmap_to_errno(rv);
1189 	} else {
1190 		args->addr_ptr = (uint64_t)addr;
1191 	}
1192 	DRM_LOCK(dev);
1193 out:
1194 	drm_gem_object_unreference(obj);
1195 	return (error);
1196 }
1197 
1198 static int
1199 i915_gem_pager_ctor(void *handle, vm_ooffset_t size, vm_prot_t prot,
1200     vm_ooffset_t foff, struct ucred *cred, u_short *color)
1201 {
1202 
1203 	*color = 0; /* XXXKIB */
1204 	return (0);
1205 }
1206 
1207 int i915_intr_pf;
1208 
1209 static int
1210 i915_gem_pager_fault(vm_object_t vm_obj, vm_ooffset_t offset, int prot,
1211     vm_page_t *mres)
1212 {
1213 	struct drm_gem_object *gem_obj;
1214 	struct drm_i915_gem_object *obj;
1215 	struct drm_device *dev;
1216 	drm_i915_private_t *dev_priv;
1217 	vm_page_t m, oldm;
1218 	int cause, ret;
1219 	bool write;
1220 
1221 	gem_obj = vm_obj->handle;
1222 	obj = to_intel_bo(gem_obj);
1223 	dev = obj->base.dev;
1224 	dev_priv = dev->dev_private;
1225 #if 0
1226 	write = (prot & VM_PROT_WRITE) != 0;
1227 #else
1228 	write = true;
1229 #endif
1230 	vm_object_pip_add(vm_obj, 1);
1231 
1232 	/*
1233 	 * Remove the placeholder page inserted by vm_fault() from the
1234 	 * object before dropping the object lock. If
1235 	 * i915_gem_release_mmap() is active in parallel on this gem
1236 	 * object, then it owns the drm device sx and might find the
1237 	 * placeholder already. Then, since the page is busy,
1238 	 * i915_gem_release_mmap() sleeps waiting for the busy state
1239 	 * of the page cleared. We will be not able to acquire drm
1240 	 * device lock until i915_gem_release_mmap() is able to make a
1241 	 * progress.
1242 	 */
1243 	if (*mres != NULL) {
1244 		oldm = *mres;
1245 		vm_page_remove(oldm);
1246 		*mres = NULL;
1247 	} else
1248 		oldm = NULL;
1249 retry:
1250 	VM_OBJECT_UNLOCK(vm_obj);
1251 unlocked_vmobj:
1252 	cause = ret = 0;
1253 	m = NULL;
1254 
1255 	if (i915_intr_pf) {
1256 		ret = i915_mutex_lock_interruptible(dev);
1257 		if (ret != 0) {
1258 			cause = 10;
1259 			goto out;
1260 		}
1261 	} else
1262 		DRM_LOCK(dev);
1263 
1264 	/*
1265 	 * Since the object lock was dropped, other thread might have
1266 	 * faulted on the same GTT address and instantiated the
1267 	 * mapping for the page.  Recheck.
1268 	 */
1269 	VM_OBJECT_LOCK(vm_obj);
1270 	m = vm_page_lookup(vm_obj, OFF_TO_IDX(offset));
1271 	if (m != NULL) {
1272 		if ((m->flags & PG_BUSY) != 0) {
1273 			DRM_UNLOCK(dev);
1274 #if 0 /* XXX */
1275 			vm_page_sleep(m, "915pee");
1276 #endif
1277 			goto retry;
1278 		}
1279 		goto have_page;
1280 	} else
1281 		VM_OBJECT_UNLOCK(vm_obj);
1282 
1283 	/* Now bind it into the GTT if needed */
1284 	if (!obj->map_and_fenceable) {
1285 		ret = i915_gem_object_unbind(obj);
1286 		if (ret != 0) {
1287 			cause = 20;
1288 			goto unlock;
1289 		}
1290 	}
1291 	if (!obj->gtt_space) {
1292 		ret = i915_gem_object_bind_to_gtt(obj, 0, true);
1293 		if (ret != 0) {
1294 			cause = 30;
1295 			goto unlock;
1296 		}
1297 
1298 		ret = i915_gem_object_set_to_gtt_domain(obj, write);
1299 		if (ret != 0) {
1300 			cause = 40;
1301 			goto unlock;
1302 		}
1303 	}
1304 
1305 	if (obj->tiling_mode == I915_TILING_NONE)
1306 		ret = i915_gem_object_put_fence(obj);
1307 	else
1308 		ret = i915_gem_object_get_fence(obj, NULL);
1309 	if (ret != 0) {
1310 		cause = 50;
1311 		goto unlock;
1312 	}
1313 
1314 	if (i915_gem_object_is_inactive(obj))
1315 		list_move_tail(&obj->mm_list, &dev_priv->mm.inactive_list);
1316 
1317 	obj->fault_mappable = true;
1318 	VM_OBJECT_LOCK(vm_obj);
1319 	m = vm_phys_fictitious_to_vm_page(dev->agp->base + obj->gtt_offset +
1320 	    offset);
1321 	if (m == NULL) {
1322 		cause = 60;
1323 		ret = -EFAULT;
1324 		goto unlock;
1325 	}
1326 	KASSERT((m->flags & PG_FICTITIOUS) != 0,
1327 	    ("not fictitious %p", m));
1328 	KASSERT(m->wire_count == 1, ("wire_count not 1 %p", m));
1329 
1330 	if ((m->flags & PG_BUSY) != 0) {
1331 		DRM_UNLOCK(dev);
1332 #if 0 /* XXX */
1333 		vm_page_sleep(m, "915pbs");
1334 #endif
1335 		goto retry;
1336 	}
1337 	m->valid = VM_PAGE_BITS_ALL;
1338 	vm_page_insert(m, vm_obj, OFF_TO_IDX(offset));
1339 have_page:
1340 	*mres = m;
1341 	vm_page_busy_try(m, false);
1342 
1343 	DRM_UNLOCK(dev);
1344 	if (oldm != NULL) {
1345 		vm_page_free(oldm);
1346 	}
1347 	vm_object_pip_wakeup(vm_obj);
1348 	return (VM_PAGER_OK);
1349 
1350 unlock:
1351 	DRM_UNLOCK(dev);
1352 out:
1353 	KASSERT(ret != 0, ("i915_gem_pager_fault: wrong return"));
1354 	if (ret == -EAGAIN || ret == -EIO || ret == -EINTR) {
1355 		goto unlocked_vmobj;
1356 	}
1357 	VM_OBJECT_LOCK(vm_obj);
1358 	vm_object_pip_wakeup(vm_obj);
1359 	return (VM_PAGER_ERROR);
1360 }
1361 
1362 static void
1363 i915_gem_pager_dtor(void *handle)
1364 {
1365 	struct drm_gem_object *obj;
1366 	struct drm_device *dev;
1367 
1368 	obj = handle;
1369 	dev = obj->dev;
1370 
1371 	DRM_LOCK(dev);
1372 	drm_gem_free_mmap_offset(obj);
1373 	i915_gem_release_mmap(to_intel_bo(obj));
1374 	drm_gem_object_unreference(obj);
1375 	DRM_UNLOCK(dev);
1376 }
1377 
1378 struct cdev_pager_ops i915_gem_pager_ops = {
1379 	.cdev_pg_fault	= i915_gem_pager_fault,
1380 	.cdev_pg_ctor	= i915_gem_pager_ctor,
1381 	.cdev_pg_dtor	= i915_gem_pager_dtor
1382 };
1383 
1384 int
1385 i915_gem_mmap_gtt(struct drm_file *file, struct drm_device *dev,
1386     uint32_t handle, uint64_t *offset)
1387 {
1388 	struct drm_i915_private *dev_priv;
1389 	struct drm_i915_gem_object *obj;
1390 	int ret;
1391 
1392 	if (!(dev->driver->driver_features & DRIVER_GEM))
1393 		return (-ENODEV);
1394 
1395 	dev_priv = dev->dev_private;
1396 
1397 	ret = i915_mutex_lock_interruptible(dev);
1398 	if (ret != 0)
1399 		return (ret);
1400 
1401 	obj = to_intel_bo(drm_gem_object_lookup(dev, file, handle));
1402 	if (&obj->base == NULL) {
1403 		ret = -ENOENT;
1404 		goto unlock;
1405 	}
1406 
1407 	if (obj->base.size > dev_priv->mm.gtt_mappable_end) {
1408 		ret = -E2BIG;
1409 		goto out;
1410 	}
1411 
1412 	if (obj->madv != I915_MADV_WILLNEED) {
1413 		DRM_ERROR("Attempting to mmap a purgeable buffer\n");
1414 		ret = -EINVAL;
1415 		goto out;
1416 	}
1417 
1418 	ret = drm_gem_create_mmap_offset(&obj->base);
1419 	if (ret != 0)
1420 		goto out;
1421 
1422 	*offset = DRM_GEM_MAPPING_OFF(obj->base.map_list.key) |
1423 	    DRM_GEM_MAPPING_KEY;
1424 out:
1425 	drm_gem_object_unreference(&obj->base);
1426 unlock:
1427 	DRM_UNLOCK(dev);
1428 	return (ret);
1429 }
1430 
1431 int
1432 i915_gem_mmap_gtt_ioctl(struct drm_device *dev, void *data,
1433     struct drm_file *file)
1434 {
1435 	struct drm_i915_private *dev_priv;
1436 	struct drm_i915_gem_mmap_gtt *args;
1437 
1438 	dev_priv = dev->dev_private;
1439 	args = data;
1440 
1441 	return (i915_gem_mmap_gtt(file, dev, args->handle, &args->offset));
1442 }
1443 
1444 struct drm_i915_gem_object *
1445 i915_gem_alloc_object(struct drm_device *dev, size_t size)
1446 {
1447 	struct drm_i915_private *dev_priv;
1448 	struct drm_i915_gem_object *obj;
1449 
1450 	dev_priv = dev->dev_private;
1451 
1452 	obj = kmalloc(sizeof(*obj), DRM_I915_GEM, M_WAITOK | M_ZERO);
1453 
1454 	if (drm_gem_object_init(dev, &obj->base, size) != 0) {
1455 		drm_free(obj, DRM_I915_GEM);
1456 		return (NULL);
1457 	}
1458 
1459 	obj->base.write_domain = I915_GEM_DOMAIN_CPU;
1460 	obj->base.read_domains = I915_GEM_DOMAIN_CPU;
1461 
1462 	if (HAS_LLC(dev))
1463 		obj->cache_level = I915_CACHE_LLC;
1464 	else
1465 		obj->cache_level = I915_CACHE_NONE;
1466 	obj->base.driver_private = NULL;
1467 	obj->fence_reg = I915_FENCE_REG_NONE;
1468 	INIT_LIST_HEAD(&obj->mm_list);
1469 	INIT_LIST_HEAD(&obj->gtt_list);
1470 	INIT_LIST_HEAD(&obj->ring_list);
1471 	INIT_LIST_HEAD(&obj->exec_list);
1472 	INIT_LIST_HEAD(&obj->gpu_write_list);
1473 	obj->madv = I915_MADV_WILLNEED;
1474 	/* Avoid an unnecessary call to unbind on the first bind. */
1475 	obj->map_and_fenceable = true;
1476 
1477 	i915_gem_info_add_obj(dev_priv, size);
1478 
1479 	return (obj);
1480 }
1481 
1482 void
1483 i915_gem_clflush_object(struct drm_i915_gem_object *obj)
1484 {
1485 
1486 	/* If we don't have a page list set up, then we're not pinned
1487 	 * to GPU, and we can ignore the cache flush because it'll happen
1488 	 * again at bind time.
1489 	 */
1490 	if (obj->pages == NULL)
1491 		return;
1492 
1493 	/* If the GPU is snooping the contents of the CPU cache,
1494 	 * we do not need to manually clear the CPU cache lines.  However,
1495 	 * the caches are only snooped when the render cache is
1496 	 * flushed/invalidated.  As we always have to emit invalidations
1497 	 * and flushes when moving into and out of the RENDER domain, correct
1498 	 * snooping behaviour occurs naturally as the result of our domain
1499 	 * tracking.
1500 	 */
1501 	if (obj->cache_level != I915_CACHE_NONE)
1502 		return;
1503 
1504 	drm_clflush_pages(obj->pages, obj->base.size / PAGE_SIZE);
1505 }
1506 
1507 static void
1508 i915_gem_object_flush_cpu_write_domain(struct drm_i915_gem_object *obj)
1509 {
1510 	uint32_t old_write_domain;
1511 
1512 	if (obj->base.write_domain != I915_GEM_DOMAIN_CPU)
1513 		return;
1514 
1515 	i915_gem_clflush_object(obj);
1516 	intel_gtt_chipset_flush();
1517 	old_write_domain = obj->base.write_domain;
1518 	obj->base.write_domain = 0;
1519 }
1520 
1521 static int
1522 i915_gem_object_flush_gpu_write_domain(struct drm_i915_gem_object *obj)
1523 {
1524 
1525 	if ((obj->base.write_domain & I915_GEM_GPU_DOMAINS) == 0)
1526 		return (0);
1527 	return (i915_gem_flush_ring(obj->ring, 0, obj->base.write_domain));
1528 }
1529 
1530 static void
1531 i915_gem_object_flush_gtt_write_domain(struct drm_i915_gem_object *obj)
1532 {
1533 	uint32_t old_write_domain;
1534 
1535 	if (obj->base.write_domain != I915_GEM_DOMAIN_GTT)
1536 		return;
1537 
1538 	cpu_sfence();
1539 
1540 	old_write_domain = obj->base.write_domain;
1541 	obj->base.write_domain = 0;
1542 }
1543 
1544 int
1545 i915_gem_object_set_to_gtt_domain(struct drm_i915_gem_object *obj, bool write)
1546 {
1547 	uint32_t old_write_domain, old_read_domains;
1548 	int ret;
1549 
1550 	if (obj->gtt_space == NULL)
1551 		return (-EINVAL);
1552 
1553 	if (obj->base.write_domain == I915_GEM_DOMAIN_GTT)
1554 		return 0;
1555 
1556 	ret = i915_gem_object_flush_gpu_write_domain(obj);
1557 	if (ret != 0)
1558 		return (ret);
1559 
1560 	if (obj->pending_gpu_write || write) {
1561 		ret = i915_gem_object_wait_rendering(obj);
1562 		if (ret != 0)
1563 			return (ret);
1564 	}
1565 
1566 	i915_gem_object_flush_cpu_write_domain(obj);
1567 
1568 	old_write_domain = obj->base.write_domain;
1569 	old_read_domains = obj->base.read_domains;
1570 
1571 	KASSERT((obj->base.write_domain & ~I915_GEM_DOMAIN_GTT) == 0,
1572 	    ("In GTT write domain"));
1573 	obj->base.read_domains |= I915_GEM_DOMAIN_GTT;
1574 	if (write) {
1575 		obj->base.read_domains = I915_GEM_DOMAIN_GTT;
1576 		obj->base.write_domain = I915_GEM_DOMAIN_GTT;
1577 		obj->dirty = 1;
1578 	}
1579 
1580 	return (0);
1581 }
1582 
1583 int
1584 i915_gem_object_set_cache_level(struct drm_i915_gem_object *obj,
1585     enum i915_cache_level cache_level)
1586 {
1587 	struct drm_device *dev;
1588 	drm_i915_private_t *dev_priv;
1589 	int ret;
1590 
1591 	if (obj->cache_level == cache_level)
1592 		return 0;
1593 
1594 	if (obj->pin_count) {
1595 		DRM_DEBUG("can not change the cache level of pinned objects\n");
1596 		return (-EBUSY);
1597 	}
1598 
1599 	dev = obj->base.dev;
1600 	dev_priv = dev->dev_private;
1601 	if (obj->gtt_space) {
1602 		ret = i915_gem_object_finish_gpu(obj);
1603 		if (ret != 0)
1604 			return (ret);
1605 
1606 		i915_gem_object_finish_gtt(obj);
1607 
1608 		/* Before SandyBridge, you could not use tiling or fence
1609 		 * registers with snooped memory, so relinquish any fences
1610 		 * currently pointing to our region in the aperture.
1611 		 */
1612 		if (INTEL_INFO(obj->base.dev)->gen < 6) {
1613 			ret = i915_gem_object_put_fence(obj);
1614 			if (ret != 0)
1615 				return (ret);
1616 		}
1617 
1618 		i915_gem_gtt_rebind_object(obj, cache_level);
1619 		if (obj->has_aliasing_ppgtt_mapping)
1620 			i915_ppgtt_bind_object(dev_priv->mm.aliasing_ppgtt,
1621 			    obj, cache_level);
1622 	}
1623 
1624 	if (cache_level == I915_CACHE_NONE) {
1625 		u32 old_read_domains, old_write_domain;
1626 
1627 		/* If we're coming from LLC cached, then we haven't
1628 		 * actually been tracking whether the data is in the
1629 		 * CPU cache or not, since we only allow one bit set
1630 		 * in obj->write_domain and have been skipping the clflushes.
1631 		 * Just set it to the CPU cache for now.
1632 		 */
1633 		KASSERT((obj->base.write_domain & ~I915_GEM_DOMAIN_CPU) == 0,
1634 		    ("obj %p in CPU write domain", obj));
1635 		KASSERT((obj->base.read_domains & ~I915_GEM_DOMAIN_CPU) == 0,
1636 		    ("obj %p in CPU read domain", obj));
1637 
1638 		old_read_domains = obj->base.read_domains;
1639 		old_write_domain = obj->base.write_domain;
1640 
1641 		obj->base.read_domains = I915_GEM_DOMAIN_CPU;
1642 		obj->base.write_domain = I915_GEM_DOMAIN_CPU;
1643 
1644 	}
1645 
1646 	obj->cache_level = cache_level;
1647 	return (0);
1648 }
1649 
1650 int
1651 i915_gem_object_pin_to_display_plane(struct drm_i915_gem_object *obj,
1652     u32 alignment, struct intel_ring_buffer *pipelined)
1653 {
1654 	u32 old_read_domains, old_write_domain;
1655 	int ret;
1656 
1657 	ret = i915_gem_object_flush_gpu_write_domain(obj);
1658 	if (ret != 0)
1659 		return (ret);
1660 
1661 	if (pipelined != obj->ring) {
1662 		ret = i915_gem_object_wait_rendering(obj);
1663 		if (ret == -ERESTART || ret == -EINTR)
1664 			return (ret);
1665 	}
1666 
1667 	ret = i915_gem_object_set_cache_level(obj, I915_CACHE_NONE);
1668 	if (ret != 0)
1669 		return (ret);
1670 
1671 	ret = i915_gem_object_pin(obj, alignment, true);
1672 	if (ret != 0)
1673 		return (ret);
1674 
1675 	i915_gem_object_flush_cpu_write_domain(obj);
1676 
1677 	old_write_domain = obj->base.write_domain;
1678 	old_read_domains = obj->base.read_domains;
1679 
1680 	KASSERT((obj->base.write_domain & ~I915_GEM_DOMAIN_GTT) == 0,
1681 	    ("obj %p in GTT write domain", obj));
1682 	obj->base.read_domains |= I915_GEM_DOMAIN_GTT;
1683 
1684 	return (0);
1685 }
1686 
1687 int
1688 i915_gem_object_finish_gpu(struct drm_i915_gem_object *obj)
1689 {
1690 	int ret;
1691 
1692 	if ((obj->base.read_domains & I915_GEM_GPU_DOMAINS) == 0)
1693 		return (0);
1694 
1695 	if (obj->base.write_domain & I915_GEM_GPU_DOMAINS) {
1696 		ret = i915_gem_flush_ring(obj->ring, 0, obj->base.write_domain);
1697 		if (ret != 0)
1698 			return (ret);
1699 	}
1700 
1701 	ret = i915_gem_object_wait_rendering(obj);
1702 	if (ret != 0)
1703 		return (ret);
1704 
1705 	obj->base.read_domains &= ~I915_GEM_GPU_DOMAINS;
1706 
1707 	return (0);
1708 }
1709 
1710 static int
1711 i915_gem_object_set_to_cpu_domain(struct drm_i915_gem_object *obj, bool write)
1712 {
1713 	uint32_t old_write_domain, old_read_domains;
1714 	int ret;
1715 
1716 	if (obj->base.write_domain == I915_GEM_DOMAIN_CPU)
1717 		return 0;
1718 
1719 	ret = i915_gem_object_flush_gpu_write_domain(obj);
1720 	if (ret != 0)
1721 		return (ret);
1722 
1723 	ret = i915_gem_object_wait_rendering(obj);
1724 	if (ret != 0)
1725 		return (ret);
1726 
1727 	i915_gem_object_flush_gtt_write_domain(obj);
1728 	i915_gem_object_set_to_full_cpu_read_domain(obj);
1729 
1730 	old_write_domain = obj->base.write_domain;
1731 	old_read_domains = obj->base.read_domains;
1732 
1733 	if ((obj->base.read_domains & I915_GEM_DOMAIN_CPU) == 0) {
1734 		i915_gem_clflush_object(obj);
1735 		obj->base.read_domains |= I915_GEM_DOMAIN_CPU;
1736 	}
1737 
1738 	KASSERT((obj->base.write_domain & ~I915_GEM_DOMAIN_CPU) == 0,
1739 	    ("In cpu write domain"));
1740 
1741 	if (write) {
1742 		obj->base.read_domains = I915_GEM_DOMAIN_CPU;
1743 		obj->base.write_domain = I915_GEM_DOMAIN_CPU;
1744 	}
1745 
1746 	return (0);
1747 }
1748 
1749 static void
1750 i915_gem_object_set_to_full_cpu_read_domain(struct drm_i915_gem_object *obj)
1751 {
1752 	int i;
1753 
1754 	if (obj->page_cpu_valid == NULL)
1755 		return;
1756 
1757 	if ((obj->base.read_domains & I915_GEM_DOMAIN_CPU) != 0) {
1758 		for (i = 0; i <= (obj->base.size - 1) / PAGE_SIZE; i++) {
1759 			if (obj->page_cpu_valid[i] != 0)
1760 				continue;
1761 			drm_clflush_pages(obj->pages + i, 1);
1762 		}
1763 	}
1764 
1765 	drm_free(obj->page_cpu_valid, DRM_I915_GEM);
1766 	obj->page_cpu_valid = NULL;
1767 }
1768 
1769 static int
1770 i915_gem_object_set_cpu_read_domain_range(struct drm_i915_gem_object *obj,
1771     uint64_t offset, uint64_t size)
1772 {
1773 	uint32_t old_read_domains;
1774 	int i, ret;
1775 
1776 	if (offset == 0 && size == obj->base.size)
1777 		return (i915_gem_object_set_to_cpu_domain(obj, 0));
1778 
1779 	ret = i915_gem_object_flush_gpu_write_domain(obj);
1780 	if (ret != 0)
1781 		return (ret);
1782 	ret = i915_gem_object_wait_rendering(obj);
1783 	if (ret != 0)
1784 		return (ret);
1785 
1786 	i915_gem_object_flush_gtt_write_domain(obj);
1787 
1788 	if (obj->page_cpu_valid == NULL &&
1789 	    (obj->base.read_domains & I915_GEM_DOMAIN_CPU) != 0)
1790 		return (0);
1791 
1792 	if (obj->page_cpu_valid == NULL) {
1793 		obj->page_cpu_valid = kmalloc(obj->base.size / PAGE_SIZE,
1794 		    DRM_I915_GEM, M_WAITOK | M_ZERO);
1795 	} else if ((obj->base.read_domains & I915_GEM_DOMAIN_CPU) == 0)
1796 		memset(obj->page_cpu_valid, 0, obj->base.size / PAGE_SIZE);
1797 
1798 	for (i = offset / PAGE_SIZE; i <= (offset + size - 1) / PAGE_SIZE;
1799 	     i++) {
1800 		if (obj->page_cpu_valid[i])
1801 			continue;
1802 		drm_clflush_pages(obj->pages + i, 1);
1803 		obj->page_cpu_valid[i] = 1;
1804 	}
1805 
1806 	KASSERT((obj->base.write_domain & ~I915_GEM_DOMAIN_CPU) == 0,
1807 	    ("In gpu write domain"));
1808 
1809 	old_read_domains = obj->base.read_domains;
1810 	obj->base.read_domains |= I915_GEM_DOMAIN_CPU;
1811 
1812 	return (0);
1813 }
1814 
1815 static uint32_t
1816 i915_gem_get_gtt_size(struct drm_device *dev, uint32_t size, int tiling_mode)
1817 {
1818 	uint32_t gtt_size;
1819 
1820 	if (INTEL_INFO(dev)->gen >= 4 ||
1821 	    tiling_mode == I915_TILING_NONE)
1822 		return (size);
1823 
1824 	/* Previous chips need a power-of-two fence region when tiling */
1825 	if (INTEL_INFO(dev)->gen == 3)
1826 		gtt_size = 1024*1024;
1827 	else
1828 		gtt_size = 512*1024;
1829 
1830 	while (gtt_size < size)
1831 		gtt_size <<= 1;
1832 
1833 	return (gtt_size);
1834 }
1835 
1836 /**
1837  * i915_gem_get_gtt_alignment - return required GTT alignment for an object
1838  * @obj: object to check
1839  *
1840  * Return the required GTT alignment for an object, taking into account
1841  * potential fence register mapping.
1842  */
1843 static uint32_t
1844 i915_gem_get_gtt_alignment(struct drm_device *dev, uint32_t size,
1845      int tiling_mode)
1846 {
1847 
1848 	/*
1849 	 * Minimum alignment is 4k (GTT page size), but might be greater
1850 	 * if a fence register is needed for the object.
1851 	 */
1852 	if (INTEL_INFO(dev)->gen >= 4 ||
1853 	    tiling_mode == I915_TILING_NONE)
1854 		return (4096);
1855 
1856 	/*
1857 	 * Previous chips need to be aligned to the size of the smallest
1858 	 * fence register that can contain the object.
1859 	 */
1860 	return (i915_gem_get_gtt_size(dev, size, tiling_mode));
1861 }
1862 
1863 uint32_t
1864 i915_gem_get_unfenced_gtt_alignment(struct drm_device *dev, uint32_t size,
1865     int tiling_mode)
1866 {
1867 
1868 	if (tiling_mode == I915_TILING_NONE)
1869 		return (4096);
1870 
1871 	/*
1872 	 * Minimum alignment is 4k (GTT page size) for sane hw.
1873 	 */
1874 	if (INTEL_INFO(dev)->gen >= 4 || IS_G33(dev))
1875 		return (4096);
1876 
1877 	/*
1878 	 * Previous hardware however needs to be aligned to a power-of-two
1879 	 * tile height. The simplest method for determining this is to reuse
1880 	 * the power-of-tile object size.
1881          */
1882 	return (i915_gem_get_gtt_size(dev, size, tiling_mode));
1883 }
1884 
1885 static int
1886 i915_gem_object_bind_to_gtt(struct drm_i915_gem_object *obj,
1887     unsigned alignment, bool map_and_fenceable)
1888 {
1889 	struct drm_device *dev;
1890 	struct drm_i915_private *dev_priv;
1891 	struct drm_mm_node *free_space;
1892 	uint32_t size, fence_size, fence_alignment, unfenced_alignment;
1893 	bool mappable, fenceable;
1894 	int ret;
1895 
1896 	dev = obj->base.dev;
1897 	dev_priv = dev->dev_private;
1898 
1899 	if (obj->madv != I915_MADV_WILLNEED) {
1900 		DRM_ERROR("Attempting to bind a purgeable object\n");
1901 		return (-EINVAL);
1902 	}
1903 
1904 	fence_size = i915_gem_get_gtt_size(dev, obj->base.size,
1905 	    obj->tiling_mode);
1906 	fence_alignment = i915_gem_get_gtt_alignment(dev, obj->base.size,
1907 	    obj->tiling_mode);
1908 	unfenced_alignment = i915_gem_get_unfenced_gtt_alignment(dev,
1909 	    obj->base.size, obj->tiling_mode);
1910 	if (alignment == 0)
1911 		alignment = map_and_fenceable ? fence_alignment :
1912 		    unfenced_alignment;
1913 	if (map_and_fenceable && (alignment & (fence_alignment - 1)) != 0) {
1914 		DRM_ERROR("Invalid object alignment requested %u\n", alignment);
1915 		return (-EINVAL);
1916 	}
1917 
1918 	size = map_and_fenceable ? fence_size : obj->base.size;
1919 
1920 	/* If the object is bigger than the entire aperture, reject it early
1921 	 * before evicting everything in a vain attempt to find space.
1922 	 */
1923 	if (obj->base.size > (map_and_fenceable ?
1924 	    dev_priv->mm.gtt_mappable_end : dev_priv->mm.gtt_total)) {
1925 		DRM_ERROR(
1926 "Attempting to bind an object larger than the aperture\n");
1927 		return (-E2BIG);
1928 	}
1929 
1930  search_free:
1931 	if (map_and_fenceable)
1932 		free_space = drm_mm_search_free_in_range(
1933 		    &dev_priv->mm.gtt_space, size, alignment, 0,
1934 		    dev_priv->mm.gtt_mappable_end, 0);
1935 	else
1936 		free_space = drm_mm_search_free(&dev_priv->mm.gtt_space,
1937 		    size, alignment, 0);
1938 	if (free_space != NULL) {
1939 		int color = 0;
1940 		if (map_and_fenceable)
1941 			obj->gtt_space = drm_mm_get_block_range_generic(
1942 			    free_space, size, alignment, color, 0,
1943 			    dev_priv->mm.gtt_mappable_end, 1);
1944 		else
1945 			obj->gtt_space = drm_mm_get_block_generic(free_space,
1946 			    size, alignment, color, 1);
1947 	}
1948 	if (obj->gtt_space == NULL) {
1949 		ret = i915_gem_evict_something(dev, size, alignment,
1950 		    map_and_fenceable);
1951 		if (ret != 0)
1952 			return (ret);
1953 		goto search_free;
1954 	}
1955 	ret = i915_gem_object_get_pages_gtt(obj, 0);
1956 	if (ret != 0) {
1957 		drm_mm_put_block(obj->gtt_space);
1958 		obj->gtt_space = NULL;
1959 		/*
1960 		 * i915_gem_object_get_pages_gtt() cannot return
1961 		 * ENOMEM, since we use vm_page_grab(VM_ALLOC_RETRY)
1962 		 * (which does not support operation without a flag
1963 		 * anyway).
1964 		 */
1965 		return (ret);
1966 	}
1967 
1968 	ret = i915_gem_gtt_bind_object(obj);
1969 	if (ret != 0) {
1970 		i915_gem_object_put_pages_gtt(obj);
1971 		drm_mm_put_block(obj->gtt_space);
1972 		obj->gtt_space = NULL;
1973 		if (i915_gem_evict_everything(dev, false))
1974 			return (ret);
1975 		goto search_free;
1976 	}
1977 
1978 	list_add_tail(&obj->gtt_list, &dev_priv->mm.gtt_list);
1979 	list_add_tail(&obj->mm_list, &dev_priv->mm.inactive_list);
1980 
1981 	KASSERT((obj->base.read_domains & I915_GEM_GPU_DOMAINS) == 0,
1982 	    ("Object in gpu read domain"));
1983 	KASSERT((obj->base.write_domain & I915_GEM_GPU_DOMAINS) == 0,
1984 	    ("Object in gpu write domain"));
1985 
1986 	obj->gtt_offset = obj->gtt_space->start;
1987 
1988 	fenceable =
1989 		obj->gtt_space->size == fence_size &&
1990 		(obj->gtt_space->start & (fence_alignment - 1)) == 0;
1991 
1992 	mappable =
1993 		obj->gtt_offset + obj->base.size <= dev_priv->mm.gtt_mappable_end;
1994 	obj->map_and_fenceable = mappable && fenceable;
1995 
1996 	return (0);
1997 }
1998 
1999 static void
2000 i915_gem_object_finish_gtt(struct drm_i915_gem_object *obj)
2001 {
2002 	u32 old_write_domain, old_read_domains;
2003 
2004 	/* Act a barrier for all accesses through the GTT */
2005 	cpu_mfence();
2006 
2007 	/* Force a pagefault for domain tracking on next user access */
2008 	i915_gem_release_mmap(obj);
2009 
2010 	if ((obj->base.read_domains & I915_GEM_DOMAIN_GTT) == 0)
2011 		return;
2012 
2013 	old_read_domains = obj->base.read_domains;
2014 	old_write_domain = obj->base.write_domain;
2015 
2016 	obj->base.read_domains &= ~I915_GEM_DOMAIN_GTT;
2017 	obj->base.write_domain &= ~I915_GEM_DOMAIN_GTT;
2018 
2019 }
2020 
2021 int
2022 i915_gem_object_unbind(struct drm_i915_gem_object *obj)
2023 {
2024 	drm_i915_private_t *dev_priv;
2025 	int ret;
2026 
2027 	dev_priv = obj->base.dev->dev_private;
2028 	ret = 0;
2029 	if (obj->gtt_space == NULL)
2030 		return (0);
2031 	if (obj->pin_count != 0) {
2032 		DRM_ERROR("Attempting to unbind pinned buffer\n");
2033 		return (-EINVAL);
2034 	}
2035 
2036 	ret = i915_gem_object_finish_gpu(obj);
2037 	if (ret == -ERESTART || ret == -EINTR)
2038 		return (ret);
2039 
2040 	i915_gem_object_finish_gtt(obj);
2041 
2042 	if (ret == 0)
2043 		ret = i915_gem_object_set_to_cpu_domain(obj, 1);
2044 	if (ret == -ERESTART || ret == -EINTR)
2045 		return (ret);
2046 	if (ret != 0) {
2047 		i915_gem_clflush_object(obj);
2048 		obj->base.read_domains = obj->base.write_domain =
2049 		    I915_GEM_DOMAIN_CPU;
2050 	}
2051 
2052 	ret = i915_gem_object_put_fence(obj);
2053 	if (ret == -ERESTART)
2054 		return (ret);
2055 
2056 	i915_gem_gtt_unbind_object(obj);
2057 	if (obj->has_aliasing_ppgtt_mapping) {
2058 		i915_ppgtt_unbind_object(dev_priv->mm.aliasing_ppgtt, obj);
2059 		obj->has_aliasing_ppgtt_mapping = 0;
2060 	}
2061 	i915_gem_object_put_pages_gtt(obj);
2062 
2063 	list_del_init(&obj->gtt_list);
2064 	list_del_init(&obj->mm_list);
2065 	obj->map_and_fenceable = true;
2066 
2067 	drm_mm_put_block(obj->gtt_space);
2068 	obj->gtt_space = NULL;
2069 	obj->gtt_offset = 0;
2070 
2071 	if (i915_gem_object_is_purgeable(obj))
2072 		i915_gem_object_truncate(obj);
2073 
2074 	return (ret);
2075 }
2076 
2077 static int
2078 i915_gem_object_get_pages_gtt(struct drm_i915_gem_object *obj,
2079     int flags)
2080 {
2081 	struct drm_device *dev;
2082 	vm_object_t vm_obj;
2083 	vm_page_t m;
2084 	int page_count, i, j;
2085 
2086 	dev = obj->base.dev;
2087 	KASSERT(obj->pages == NULL, ("Obj already has pages"));
2088 	page_count = obj->base.size / PAGE_SIZE;
2089 	obj->pages = kmalloc(page_count * sizeof(vm_page_t), DRM_I915_GEM,
2090 	    M_WAITOK);
2091 	vm_obj = obj->base.vm_obj;
2092 	VM_OBJECT_LOCK(vm_obj);
2093 	for (i = 0; i < page_count; i++) {
2094 		if ((obj->pages[i] = i915_gem_wire_page(vm_obj, i)) == NULL)
2095 			goto failed;
2096 	}
2097 	VM_OBJECT_UNLOCK(vm_obj);
2098 	if (i915_gem_object_needs_bit17_swizzle(obj))
2099 		i915_gem_object_do_bit_17_swizzle(obj);
2100 	return (0);
2101 
2102 failed:
2103 	for (j = 0; j < i; j++) {
2104 		m = obj->pages[j];
2105 		vm_page_busy_wait(m, FALSE, "i915gem");
2106 		vm_page_unwire(m, 0);
2107 		vm_page_wakeup(m);
2108 		atomic_add_long(&i915_gem_wired_pages_cnt, -1);
2109 	}
2110 	VM_OBJECT_UNLOCK(vm_obj);
2111 	drm_free(obj->pages, DRM_I915_GEM);
2112 	obj->pages = NULL;
2113 	return (-EIO);
2114 }
2115 
2116 #define	GEM_PARANOID_CHECK_GTT 0
2117 #if GEM_PARANOID_CHECK_GTT
2118 static void
2119 i915_gem_assert_pages_not_mapped(struct drm_device *dev, vm_page_t *ma,
2120     int page_count)
2121 {
2122 	struct drm_i915_private *dev_priv;
2123 	vm_paddr_t pa;
2124 	unsigned long start, end;
2125 	u_int i;
2126 	int j;
2127 
2128 	dev_priv = dev->dev_private;
2129 	start = OFF_TO_IDX(dev_priv->mm.gtt_start);
2130 	end = OFF_TO_IDX(dev_priv->mm.gtt_end);
2131 	for (i = start; i < end; i++) {
2132 		pa = intel_gtt_read_pte_paddr(i);
2133 		for (j = 0; j < page_count; j++) {
2134 			if (pa == VM_PAGE_TO_PHYS(ma[j])) {
2135 				panic("Page %p in GTT pte index %d pte %x",
2136 				    ma[i], i, intel_gtt_read_pte(i));
2137 			}
2138 		}
2139 	}
2140 }
2141 #endif
2142 
2143 static void
2144 i915_gem_object_put_pages_gtt(struct drm_i915_gem_object *obj)
2145 {
2146 	vm_page_t m;
2147 	int page_count, i;
2148 
2149 	BUG_ON(obj->madv == __I915_MADV_PURGED);
2150 
2151 	if (obj->tiling_mode != I915_TILING_NONE)
2152 		i915_gem_object_save_bit_17_swizzle(obj);
2153 	if (obj->madv == I915_MADV_DONTNEED)
2154 		obj->dirty = 0;
2155 	page_count = obj->base.size / PAGE_SIZE;
2156 	VM_OBJECT_LOCK(obj->base.vm_obj);
2157 #if GEM_PARANOID_CHECK_GTT
2158 	i915_gem_assert_pages_not_mapped(obj->base.dev, obj->pages, page_count);
2159 #endif
2160 	for (i = 0; i < page_count; i++) {
2161 		m = obj->pages[i];
2162 		if (obj->dirty)
2163 			vm_page_dirty(m);
2164 		if (obj->madv == I915_MADV_WILLNEED)
2165 			vm_page_reference(m);
2166 		vm_page_busy_wait(obj->pages[i], FALSE, "i915gem");
2167 		vm_page_unwire(obj->pages[i], 1);
2168 		vm_page_wakeup(obj->pages[i]);
2169 		atomic_add_long(&i915_gem_wired_pages_cnt, -1);
2170 	}
2171 	VM_OBJECT_UNLOCK(obj->base.vm_obj);
2172 	obj->dirty = 0;
2173 	drm_free(obj->pages, DRM_I915_GEM);
2174 	obj->pages = NULL;
2175 }
2176 
2177 void
2178 i915_gem_release_mmap(struct drm_i915_gem_object *obj)
2179 {
2180 	vm_object_t devobj;
2181 	vm_page_t m;
2182 	int i, page_count;
2183 
2184 	if (!obj->fault_mappable)
2185 		return;
2186 
2187 	devobj = cdev_pager_lookup(obj);
2188 	if (devobj != NULL) {
2189 		page_count = OFF_TO_IDX(obj->base.size);
2190 
2191 		VM_OBJECT_LOCK(devobj);
2192 		for (i = 0; i < page_count; i++) {
2193 			m = vm_page_lookup_busy_wait(devobj, i, TRUE, "915unm");
2194 			if (m == NULL)
2195 				continue;
2196 			cdev_pager_free_page(devobj, m);
2197 		}
2198 		VM_OBJECT_UNLOCK(devobj);
2199 		vm_object_deallocate(devobj);
2200 	}
2201 
2202 	obj->fault_mappable = false;
2203 }
2204 
2205 int
2206 i915_gem_object_wait_rendering(struct drm_i915_gem_object *obj)
2207 {
2208 	int ret;
2209 
2210 	KASSERT((obj->base.write_domain & I915_GEM_GPU_DOMAINS) == 0,
2211 	    ("In GPU write domain"));
2212 
2213 	if (obj->active) {
2214 		ret = i915_wait_request(obj->ring, obj->last_rendering_seqno,
2215 		    true);
2216 		if (ret != 0)
2217 			return (ret);
2218 	}
2219 	return (0);
2220 }
2221 
2222 void
2223 i915_gem_object_move_to_active(struct drm_i915_gem_object *obj,
2224     struct intel_ring_buffer *ring, uint32_t seqno)
2225 {
2226 	struct drm_device *dev = obj->base.dev;
2227 	struct drm_i915_private *dev_priv = dev->dev_private;
2228 	struct drm_i915_fence_reg *reg;
2229 
2230 	obj->ring = ring;
2231 	KASSERT(ring != NULL, ("NULL ring"));
2232 
2233 	/* Add a reference if we're newly entering the active list. */
2234 	if (!obj->active) {
2235 		drm_gem_object_reference(&obj->base);
2236 		obj->active = 1;
2237 	}
2238 
2239 	/* Move from whatever list we were on to the tail of execution. */
2240 	list_move_tail(&obj->mm_list, &dev_priv->mm.active_list);
2241 	list_move_tail(&obj->ring_list, &ring->active_list);
2242 
2243 	obj->last_rendering_seqno = seqno;
2244 	if (obj->fenced_gpu_access) {
2245 		obj->last_fenced_seqno = seqno;
2246 		obj->last_fenced_ring = ring;
2247 
2248 		/* Bump MRU to take account of the delayed flush */
2249 		if (obj->fence_reg != I915_FENCE_REG_NONE) {
2250 			reg = &dev_priv->fence_regs[obj->fence_reg];
2251 			list_move_tail(&reg->lru_list,
2252 				       &dev_priv->mm.fence_list);
2253 		}
2254 	}
2255 }
2256 
2257 static void
2258 i915_gem_object_move_off_active(struct drm_i915_gem_object *obj)
2259 {
2260 	list_del_init(&obj->ring_list);
2261 	obj->last_rendering_seqno = 0;
2262 	obj->last_fenced_seqno = 0;
2263 }
2264 
2265 static void
2266 i915_gem_object_move_to_flushing(struct drm_i915_gem_object *obj)
2267 {
2268 	struct drm_device *dev = obj->base.dev;
2269 	drm_i915_private_t *dev_priv = dev->dev_private;
2270 
2271 	KASSERT(obj->active, ("Object not active"));
2272 	list_move_tail(&obj->mm_list, &dev_priv->mm.flushing_list);
2273 
2274 	i915_gem_object_move_off_active(obj);
2275 }
2276 
2277 static void
2278 i915_gem_object_move_to_inactive(struct drm_i915_gem_object *obj)
2279 {
2280 	struct drm_device *dev = obj->base.dev;
2281 	struct drm_i915_private *dev_priv = dev->dev_private;
2282 
2283 	if (obj->pin_count != 0)
2284 		list_move_tail(&obj->mm_list, &dev_priv->mm.pinned_list);
2285 	else
2286 		list_move_tail(&obj->mm_list, &dev_priv->mm.inactive_list);
2287 
2288 	KASSERT(list_empty(&obj->gpu_write_list), ("On gpu_write_list"));
2289 	KASSERT(obj->active, ("Object not active"));
2290 	obj->ring = NULL;
2291 	obj->last_fenced_ring = NULL;
2292 
2293 	i915_gem_object_move_off_active(obj);
2294 	obj->fenced_gpu_access = false;
2295 
2296 	obj->active = 0;
2297 	obj->pending_gpu_write = false;
2298 	drm_gem_object_unreference(&obj->base);
2299 
2300 #if 1
2301 	KIB_NOTYET();
2302 #else
2303 	WARN_ON(i915_verify_lists(dev));
2304 #endif
2305 }
2306 
2307 /* Immediately discard the backing storage */
2308 static void
2309 i915_gem_object_truncate(struct drm_i915_gem_object *obj)
2310 {
2311 	vm_object_t vm_obj;
2312 
2313 	vm_obj = obj->base.vm_obj;
2314 	VM_OBJECT_LOCK(vm_obj);
2315 	vm_object_page_remove(vm_obj, 0, 0, false);
2316 	VM_OBJECT_UNLOCK(vm_obj);
2317 	obj->madv = __I915_MADV_PURGED;
2318 }
2319 
2320 static inline int
2321 i915_gem_object_is_purgeable(struct drm_i915_gem_object *obj)
2322 {
2323 
2324 	return (obj->madv == I915_MADV_DONTNEED);
2325 }
2326 
2327 static void
2328 i915_gem_process_flushing_list(struct intel_ring_buffer *ring,
2329     uint32_t flush_domains)
2330 {
2331 	struct drm_i915_gem_object *obj, *next;
2332 	uint32_t old_write_domain;
2333 
2334 	list_for_each_entry_safe(obj, next, &ring->gpu_write_list,
2335 	    gpu_write_list) {
2336 		if (obj->base.write_domain & flush_domains) {
2337 			old_write_domain = obj->base.write_domain;
2338 			obj->base.write_domain = 0;
2339 			list_del_init(&obj->gpu_write_list);
2340 			i915_gem_object_move_to_active(obj, ring,
2341 			    i915_gem_next_request_seqno(ring));
2342 		}
2343 	}
2344 }
2345 
2346 static int
2347 i915_gem_object_needs_bit17_swizzle(struct drm_i915_gem_object *obj)
2348 {
2349 	drm_i915_private_t *dev_priv;
2350 
2351 	dev_priv = obj->base.dev->dev_private;
2352 	return (dev_priv->mm.bit_6_swizzle_x == I915_BIT_6_SWIZZLE_9_10_17 &&
2353 	    obj->tiling_mode != I915_TILING_NONE);
2354 }
2355 
2356 #define	VM_OBJECT_LOCK_ASSERT_OWNED(object)
2357 
2358 static vm_page_t
2359 i915_gem_wire_page(vm_object_t object, vm_pindex_t pindex)
2360 {
2361 	vm_page_t m;
2362 	int rv;
2363 
2364 	VM_OBJECT_LOCK_ASSERT_OWNED(object);
2365 	m = vm_page_grab(object, pindex, VM_ALLOC_NORMAL | VM_ALLOC_RETRY);
2366 	if (m->valid != VM_PAGE_BITS_ALL) {
2367 		if (vm_pager_has_page(object, pindex)) {
2368 			rv = vm_pager_get_page(object, &m, 1);
2369 			m = vm_page_lookup(object, pindex);
2370 			if (m == NULL)
2371 				return (NULL);
2372 			if (rv != VM_PAGER_OK) {
2373 				vm_page_free(m);
2374 				return (NULL);
2375 			}
2376 		} else {
2377 			pmap_zero_page(VM_PAGE_TO_PHYS(m));
2378 			m->valid = VM_PAGE_BITS_ALL;
2379 			m->dirty = 0;
2380 		}
2381 	}
2382 	vm_page_wire(m);
2383 	vm_page_wakeup(m);
2384 	atomic_add_long(&i915_gem_wired_pages_cnt, 1);
2385 	return (m);
2386 }
2387 
2388 int
2389 i915_gem_flush_ring(struct intel_ring_buffer *ring, uint32_t invalidate_domains,
2390     uint32_t flush_domains)
2391 {
2392 	int ret;
2393 
2394 	if (((invalidate_domains | flush_domains) & I915_GEM_GPU_DOMAINS) == 0)
2395 		return 0;
2396 
2397 	ret = ring->flush(ring, invalidate_domains, flush_domains);
2398 	if (ret)
2399 		return ret;
2400 
2401 	if (flush_domains & I915_GEM_GPU_DOMAINS)
2402 		i915_gem_process_flushing_list(ring, flush_domains);
2403 	return 0;
2404 }
2405 
2406 static int
2407 i915_ring_idle(struct intel_ring_buffer *ring, bool do_retire)
2408 {
2409 	int ret;
2410 
2411 	if (list_empty(&ring->gpu_write_list) && list_empty(&ring->active_list))
2412 		return 0;
2413 
2414 	if (!list_empty(&ring->gpu_write_list)) {
2415 		ret = i915_gem_flush_ring(ring, I915_GEM_GPU_DOMAINS,
2416 		    I915_GEM_GPU_DOMAINS);
2417 		if (ret != 0)
2418 			return ret;
2419 	}
2420 
2421 	return (i915_wait_request(ring, i915_gem_next_request_seqno(ring),
2422 	    do_retire));
2423 }
2424 
2425 int
2426 i915_gpu_idle(struct drm_device *dev, bool do_retire)
2427 {
2428 	drm_i915_private_t *dev_priv = dev->dev_private;
2429 	int ret, i;
2430 
2431 	/* Flush everything onto the inactive list. */
2432 	for (i = 0; i < I915_NUM_RINGS; i++) {
2433 		ret = i915_ring_idle(&dev_priv->ring[i], do_retire);
2434 		if (ret)
2435 			return ret;
2436 	}
2437 
2438 	return 0;
2439 }
2440 
2441 int
2442 i915_wait_request(struct intel_ring_buffer *ring, uint32_t seqno, bool do_retire)
2443 {
2444 	drm_i915_private_t *dev_priv;
2445 	struct drm_i915_gem_request *request;
2446 	uint32_t ier;
2447 	int flags, ret;
2448 	bool recovery_complete;
2449 
2450 	KASSERT(seqno != 0, ("Zero seqno"));
2451 
2452 	dev_priv = ring->dev->dev_private;
2453 	ret = 0;
2454 
2455 	if (atomic_read(&dev_priv->mm.wedged) != 0) {
2456 		/* Give the error handler a chance to run. */
2457 		lockmgr(&dev_priv->error_completion_lock, LK_EXCLUSIVE);
2458 		recovery_complete = (&dev_priv->error_completion) > 0;
2459 		lockmgr(&dev_priv->error_completion_lock, LK_RELEASE);
2460 		return (recovery_complete ? -EIO : -EAGAIN);
2461 	}
2462 
2463 	if (seqno == ring->outstanding_lazy_request) {
2464 		request = kmalloc(sizeof(*request), DRM_I915_GEM,
2465 		    M_WAITOK | M_ZERO);
2466 		if (request == NULL)
2467 			return (-ENOMEM);
2468 
2469 		ret = i915_add_request(ring, NULL, request);
2470 		if (ret != 0) {
2471 			drm_free(request, DRM_I915_GEM);
2472 			return (ret);
2473 		}
2474 
2475 		seqno = request->seqno;
2476 	}
2477 
2478 	if (!i915_seqno_passed(ring->get_seqno(ring), seqno)) {
2479 		if (HAS_PCH_SPLIT(ring->dev))
2480 			ier = I915_READ(DEIER) | I915_READ(GTIER);
2481 		else
2482 			ier = I915_READ(IER);
2483 		if (!ier) {
2484 			DRM_ERROR("something (likely vbetool) disabled "
2485 				  "interrupts, re-enabling\n");
2486 			ring->dev->driver->irq_preinstall(ring->dev);
2487 			ring->dev->driver->irq_postinstall(ring->dev);
2488 		}
2489 
2490 		ring->waiting_seqno = seqno;
2491 		lockmgr(&ring->irq_lock, LK_EXCLUSIVE);
2492 		if (ring->irq_get(ring)) {
2493 			flags = dev_priv->mm.interruptible ? PCATCH : 0;
2494 			while (!i915_seqno_passed(ring->get_seqno(ring), seqno)
2495 			    && !atomic_read(&dev_priv->mm.wedged) &&
2496 			    ret == 0) {
2497 				ret = -lksleep(ring, &ring->irq_lock, flags,
2498 				    "915gwr", 0);
2499 			}
2500 			ring->irq_put(ring);
2501 			lockmgr(&ring->irq_lock, LK_RELEASE);
2502 		} else {
2503 			lockmgr(&ring->irq_lock, LK_RELEASE);
2504 			if (_intel_wait_for(ring->dev,
2505 			    i915_seqno_passed(ring->get_seqno(ring), seqno) ||
2506 			    atomic_read(&dev_priv->mm.wedged), 3000,
2507 			    0, "i915wrq") != 0)
2508 				ret = -EBUSY;
2509 		}
2510 		ring->waiting_seqno = 0;
2511 
2512 	}
2513 	if (atomic_read(&dev_priv->mm.wedged))
2514 		ret = -EAGAIN;
2515 
2516 	/* Directly dispatch request retiring.  While we have the work queue
2517 	 * to handle this, the waiter on a request often wants an associated
2518 	 * buffer to have made it to the inactive list, and we would need
2519 	 * a separate wait queue to handle that.
2520 	 */
2521 	if (ret == 0 && do_retire)
2522 		i915_gem_retire_requests_ring(ring);
2523 
2524 	return (ret);
2525 }
2526 
2527 static u32
2528 i915_gem_get_seqno(struct drm_device *dev)
2529 {
2530 	drm_i915_private_t *dev_priv = dev->dev_private;
2531 	u32 seqno = dev_priv->next_seqno;
2532 
2533 	/* reserve 0 for non-seqno */
2534 	if (++dev_priv->next_seqno == 0)
2535 		dev_priv->next_seqno = 1;
2536 
2537 	return seqno;
2538 }
2539 
2540 u32
2541 i915_gem_next_request_seqno(struct intel_ring_buffer *ring)
2542 {
2543 	if (ring->outstanding_lazy_request == 0)
2544 		ring->outstanding_lazy_request = i915_gem_get_seqno(ring->dev);
2545 
2546 	return ring->outstanding_lazy_request;
2547 }
2548 
2549 int
2550 i915_add_request(struct intel_ring_buffer *ring, struct drm_file *file,
2551      struct drm_i915_gem_request *request)
2552 {
2553 	drm_i915_private_t *dev_priv;
2554 	struct drm_i915_file_private *file_priv;
2555 	uint32_t seqno;
2556 	u32 request_ring_position;
2557 	int was_empty;
2558 	int ret;
2559 
2560 	KASSERT(request != NULL, ("NULL request in add"));
2561 	DRM_LOCK_ASSERT(ring->dev);
2562 	dev_priv = ring->dev->dev_private;
2563 
2564 	seqno = i915_gem_next_request_seqno(ring);
2565 	request_ring_position = intel_ring_get_tail(ring);
2566 
2567 	ret = ring->add_request(ring, &seqno);
2568 	if (ret != 0)
2569 	    return ret;
2570 
2571 	request->seqno = seqno;
2572 	request->ring = ring;
2573 	request->tail = request_ring_position;
2574 	request->emitted_jiffies = ticks;
2575 	was_empty = list_empty(&ring->request_list);
2576 	list_add_tail(&request->list, &ring->request_list);
2577 
2578 	if (file != NULL) {
2579 		file_priv = file->driver_priv;
2580 
2581 		spin_lock(&file_priv->mm.lock);
2582 		request->file_priv = file_priv;
2583 		list_add_tail(&request->client_list,
2584 		    &file_priv->mm.request_list);
2585 		spin_unlock(&file_priv->mm.lock);
2586 	}
2587 
2588 	ring->outstanding_lazy_request = 0;
2589 
2590 	if (!dev_priv->mm.suspended) {
2591 		if (i915_enable_hangcheck) {
2592 			mod_timer(&dev_priv->hangcheck_timer,
2593 				  round_jiffies_up(jiffies + DRM_I915_HANGCHECK_JIFFIES));
2594 		}
2595 		if (was_empty) {
2596 			queue_delayed_work(dev_priv->wq,
2597 					   &dev_priv->mm.retire_work,
2598 					   round_jiffies_up_relative(hz));
2599 			intel_mark_busy(dev_priv->dev);
2600 		}
2601 	}
2602 	return (0);
2603 }
2604 
2605 static inline void
2606 i915_gem_request_remove_from_client(struct drm_i915_gem_request *request)
2607 {
2608 	struct drm_i915_file_private *file_priv = request->file_priv;
2609 
2610 	if (!file_priv)
2611 		return;
2612 
2613 	DRM_LOCK_ASSERT(request->ring->dev);
2614 
2615 	spin_lock(&file_priv->mm.lock);
2616 	if (request->file_priv != NULL) {
2617 		list_del(&request->client_list);
2618 		request->file_priv = NULL;
2619 	}
2620 	spin_unlock(&file_priv->mm.lock);
2621 }
2622 
2623 void
2624 i915_gem_release(struct drm_device *dev, struct drm_file *file)
2625 {
2626 	struct drm_i915_file_private *file_priv;
2627 	struct drm_i915_gem_request *request;
2628 
2629 	file_priv = file->driver_priv;
2630 
2631 	/* Clean up our request list when the client is going away, so that
2632 	 * later retire_requests won't dereference our soon-to-be-gone
2633 	 * file_priv.
2634 	 */
2635 	spin_lock(&file_priv->mm.lock);
2636 	while (!list_empty(&file_priv->mm.request_list)) {
2637 		request = list_first_entry(&file_priv->mm.request_list,
2638 					   struct drm_i915_gem_request,
2639 					   client_list);
2640 		list_del(&request->client_list);
2641 		request->file_priv = NULL;
2642 	}
2643 	spin_unlock(&file_priv->mm.lock);
2644 }
2645 
2646 static void
2647 i915_gem_reset_ring_lists(struct drm_i915_private *dev_priv,
2648     struct intel_ring_buffer *ring)
2649 {
2650 
2651 	if (ring->dev != NULL)
2652 		DRM_LOCK_ASSERT(ring->dev);
2653 
2654 	while (!list_empty(&ring->request_list)) {
2655 		struct drm_i915_gem_request *request;
2656 
2657 		request = list_first_entry(&ring->request_list,
2658 		    struct drm_i915_gem_request, list);
2659 
2660 		list_del(&request->list);
2661 		i915_gem_request_remove_from_client(request);
2662 		drm_free(request, DRM_I915_GEM);
2663 	}
2664 
2665 	while (!list_empty(&ring->active_list)) {
2666 		struct drm_i915_gem_object *obj;
2667 
2668 		obj = list_first_entry(&ring->active_list,
2669 		    struct drm_i915_gem_object, ring_list);
2670 
2671 		obj->base.write_domain = 0;
2672 		list_del_init(&obj->gpu_write_list);
2673 		i915_gem_object_move_to_inactive(obj);
2674 	}
2675 }
2676 
2677 static void
2678 i915_gem_reset_fences(struct drm_device *dev)
2679 {
2680 	struct drm_i915_private *dev_priv = dev->dev_private;
2681 	int i;
2682 
2683 	for (i = 0; i < dev_priv->num_fence_regs; i++) {
2684 		struct drm_i915_fence_reg *reg = &dev_priv->fence_regs[i];
2685 		struct drm_i915_gem_object *obj = reg->obj;
2686 
2687 		if (!obj)
2688 			continue;
2689 
2690 		if (obj->tiling_mode)
2691 			i915_gem_release_mmap(obj);
2692 
2693 		reg->obj->fence_reg = I915_FENCE_REG_NONE;
2694 		reg->obj->fenced_gpu_access = false;
2695 		reg->obj->last_fenced_seqno = 0;
2696 		reg->obj->last_fenced_ring = NULL;
2697 		i915_gem_clear_fence_reg(dev, reg);
2698 	}
2699 }
2700 
2701 void
2702 i915_gem_reset(struct drm_device *dev)
2703 {
2704 	struct drm_i915_private *dev_priv = dev->dev_private;
2705 	struct drm_i915_gem_object *obj;
2706 	int i;
2707 
2708 	for (i = 0; i < I915_NUM_RINGS; i++)
2709 		i915_gem_reset_ring_lists(dev_priv, &dev_priv->ring[i]);
2710 
2711 	/* Remove anything from the flushing lists. The GPU cache is likely
2712 	 * to be lost on reset along with the data, so simply move the
2713 	 * lost bo to the inactive list.
2714 	 */
2715 	while (!list_empty(&dev_priv->mm.flushing_list)) {
2716 		obj = list_first_entry(&dev_priv->mm.flushing_list,
2717 				      struct drm_i915_gem_object,
2718 				      mm_list);
2719 
2720 		obj->base.write_domain = 0;
2721 		list_del_init(&obj->gpu_write_list);
2722 		i915_gem_object_move_to_inactive(obj);
2723 	}
2724 
2725 	/* Move everything out of the GPU domains to ensure we do any
2726 	 * necessary invalidation upon reuse.
2727 	 */
2728 	list_for_each_entry(obj, &dev_priv->mm.inactive_list, mm_list) {
2729 		obj->base.read_domains &= ~I915_GEM_GPU_DOMAINS;
2730 	}
2731 
2732 	/* The fence registers are invalidated so clear them out */
2733 	i915_gem_reset_fences(dev);
2734 }
2735 
2736 /**
2737  * This function clears the request list as sequence numbers are passed.
2738  */
2739 void
2740 i915_gem_retire_requests_ring(struct intel_ring_buffer *ring)
2741 {
2742 	uint32_t seqno;
2743 	int i;
2744 
2745 	if (list_empty(&ring->request_list))
2746 		return;
2747 
2748 	seqno = ring->get_seqno(ring);
2749 	for (i = 0; i < DRM_ARRAY_SIZE(ring->sync_seqno); i++)
2750 		if (seqno >= ring->sync_seqno[i])
2751 			ring->sync_seqno[i] = 0;
2752 
2753 	while (!list_empty(&ring->request_list)) {
2754 		struct drm_i915_gem_request *request;
2755 
2756 		request = list_first_entry(&ring->request_list,
2757 					   struct drm_i915_gem_request,
2758 					   list);
2759 
2760 		if (!i915_seqno_passed(seqno, request->seqno))
2761 			break;
2762 
2763 		ring->last_retired_head = request->tail;
2764 
2765 		list_del(&request->list);
2766 		i915_gem_request_remove_from_client(request);
2767 		drm_free(request, DRM_I915_GEM);
2768 	}
2769 
2770 	/* Move any buffers on the active list that are no longer referenced
2771 	 * by the ringbuffer to the flushing/inactive lists as appropriate.
2772 	 */
2773 	while (!list_empty(&ring->active_list)) {
2774 		struct drm_i915_gem_object *obj;
2775 
2776 		obj = list_first_entry(&ring->active_list,
2777 				      struct drm_i915_gem_object,
2778 				      ring_list);
2779 
2780 		if (!i915_seqno_passed(seqno, obj->last_rendering_seqno))
2781 			break;
2782 
2783 		if (obj->base.write_domain != 0)
2784 			i915_gem_object_move_to_flushing(obj);
2785 		else
2786 			i915_gem_object_move_to_inactive(obj);
2787 	}
2788 
2789 	if (ring->trace_irq_seqno &&
2790 	    i915_seqno_passed(seqno, ring->trace_irq_seqno)) {
2791 		lockmgr(&ring->irq_lock, LK_EXCLUSIVE);
2792 		ring->irq_put(ring);
2793 		lockmgr(&ring->irq_lock, LK_RELEASE);
2794 		ring->trace_irq_seqno = 0;
2795 	}
2796 }
2797 
2798 void
2799 i915_gem_retire_requests(struct drm_device *dev)
2800 {
2801 	drm_i915_private_t *dev_priv = dev->dev_private;
2802 	struct drm_i915_gem_object *obj, *next;
2803 	int i;
2804 
2805 	if (!list_empty(&dev_priv->mm.deferred_free_list)) {
2806 		list_for_each_entry_safe(obj, next,
2807 		    &dev_priv->mm.deferred_free_list, mm_list)
2808 			i915_gem_free_object_tail(obj);
2809 	}
2810 
2811 	for (i = 0; i < I915_NUM_RINGS; i++)
2812 		i915_gem_retire_requests_ring(&dev_priv->ring[i]);
2813 }
2814 
2815 static int
2816 sandybridge_write_fence_reg(struct drm_i915_gem_object *obj,
2817     struct intel_ring_buffer *pipelined)
2818 {
2819 	struct drm_device *dev = obj->base.dev;
2820 	drm_i915_private_t *dev_priv = dev->dev_private;
2821 	u32 size = obj->gtt_space->size;
2822 	int regnum = obj->fence_reg;
2823 	uint64_t val;
2824 
2825 	val = (uint64_t)((obj->gtt_offset + size - 4096) &
2826 			 0xfffff000) << 32;
2827 	val |= obj->gtt_offset & 0xfffff000;
2828 	val |= (uint64_t)((obj->stride / 128) - 1) <<
2829 		SANDYBRIDGE_FENCE_PITCH_SHIFT;
2830 
2831 	if (obj->tiling_mode == I915_TILING_Y)
2832 		val |= 1 << I965_FENCE_TILING_Y_SHIFT;
2833 	val |= I965_FENCE_REG_VALID;
2834 
2835 	if (pipelined) {
2836 		int ret = intel_ring_begin(pipelined, 6);
2837 		if (ret)
2838 			return ret;
2839 
2840 		intel_ring_emit(pipelined, MI_NOOP);
2841 		intel_ring_emit(pipelined, MI_LOAD_REGISTER_IMM(2));
2842 		intel_ring_emit(pipelined, FENCE_REG_SANDYBRIDGE_0 + regnum*8);
2843 		intel_ring_emit(pipelined, (u32)val);
2844 		intel_ring_emit(pipelined, FENCE_REG_SANDYBRIDGE_0 + regnum*8 + 4);
2845 		intel_ring_emit(pipelined, (u32)(val >> 32));
2846 		intel_ring_advance(pipelined);
2847 	} else
2848 		I915_WRITE64(FENCE_REG_SANDYBRIDGE_0 + regnum * 8, val);
2849 
2850 	return 0;
2851 }
2852 
2853 static int
2854 i965_write_fence_reg(struct drm_i915_gem_object *obj,
2855     struct intel_ring_buffer *pipelined)
2856 {
2857 	struct drm_device *dev = obj->base.dev;
2858 	drm_i915_private_t *dev_priv = dev->dev_private;
2859 	u32 size = obj->gtt_space->size;
2860 	int regnum = obj->fence_reg;
2861 	uint64_t val;
2862 
2863 	val = (uint64_t)((obj->gtt_offset + size - 4096) &
2864 		    0xfffff000) << 32;
2865 	val |= obj->gtt_offset & 0xfffff000;
2866 	val |= ((obj->stride / 128) - 1) << I965_FENCE_PITCH_SHIFT;
2867 	if (obj->tiling_mode == I915_TILING_Y)
2868 		val |= 1 << I965_FENCE_TILING_Y_SHIFT;
2869 	val |= I965_FENCE_REG_VALID;
2870 
2871 	if (pipelined) {
2872 		int ret = intel_ring_begin(pipelined, 6);
2873 		if (ret)
2874 			return ret;
2875 
2876 		intel_ring_emit(pipelined, MI_NOOP);
2877 		intel_ring_emit(pipelined, MI_LOAD_REGISTER_IMM(2));
2878 		intel_ring_emit(pipelined, FENCE_REG_965_0 + regnum*8);
2879 		intel_ring_emit(pipelined, (u32)val);
2880 		intel_ring_emit(pipelined, FENCE_REG_965_0 + regnum*8 + 4);
2881 		intel_ring_emit(pipelined, (u32)(val >> 32));
2882 		intel_ring_advance(pipelined);
2883 	} else
2884 		I915_WRITE64(FENCE_REG_965_0 + regnum * 8, val);
2885 
2886 	return 0;
2887 }
2888 
2889 static int
2890 i915_write_fence_reg(struct drm_i915_gem_object *obj,
2891     struct intel_ring_buffer *pipelined)
2892 {
2893 	struct drm_device *dev = obj->base.dev;
2894 	drm_i915_private_t *dev_priv = dev->dev_private;
2895 	u32 size = obj->gtt_space->size;
2896 	u32 fence_reg, val, pitch_val;
2897 	int tile_width;
2898 
2899 	if ((obj->gtt_offset & ~I915_FENCE_START_MASK) ||
2900 	    (size & -size) != size || (obj->gtt_offset & (size - 1))) {
2901 		kprintf(
2902 "object 0x%08x [fenceable? %d] not 1M or pot-size (0x%08x) aligned\n",
2903 		 obj->gtt_offset, obj->map_and_fenceable, size);
2904 		return -EINVAL;
2905 	}
2906 
2907 	if (obj->tiling_mode == I915_TILING_Y && HAS_128_BYTE_Y_TILING(dev))
2908 		tile_width = 128;
2909 	else
2910 		tile_width = 512;
2911 
2912 	/* Note: pitch better be a power of two tile widths */
2913 	pitch_val = obj->stride / tile_width;
2914 	pitch_val = ffs(pitch_val) - 1;
2915 
2916 	val = obj->gtt_offset;
2917 	if (obj->tiling_mode == I915_TILING_Y)
2918 		val |= 1 << I830_FENCE_TILING_Y_SHIFT;
2919 	val |= I915_FENCE_SIZE_BITS(size);
2920 	val |= pitch_val << I830_FENCE_PITCH_SHIFT;
2921 	val |= I830_FENCE_REG_VALID;
2922 
2923 	fence_reg = obj->fence_reg;
2924 	if (fence_reg < 8)
2925 		fence_reg = FENCE_REG_830_0 + fence_reg * 4;
2926 	else
2927 		fence_reg = FENCE_REG_945_8 + (fence_reg - 8) * 4;
2928 
2929 	if (pipelined) {
2930 		int ret = intel_ring_begin(pipelined, 4);
2931 		if (ret)
2932 			return ret;
2933 
2934 		intel_ring_emit(pipelined, MI_NOOP);
2935 		intel_ring_emit(pipelined, MI_LOAD_REGISTER_IMM(1));
2936 		intel_ring_emit(pipelined, fence_reg);
2937 		intel_ring_emit(pipelined, val);
2938 		intel_ring_advance(pipelined);
2939 	} else
2940 		I915_WRITE(fence_reg, val);
2941 
2942 	return 0;
2943 }
2944 
2945 static int
2946 i830_write_fence_reg(struct drm_i915_gem_object *obj,
2947     struct intel_ring_buffer *pipelined)
2948 {
2949 	struct drm_device *dev = obj->base.dev;
2950 	drm_i915_private_t *dev_priv = dev->dev_private;
2951 	u32 size = obj->gtt_space->size;
2952 	int regnum = obj->fence_reg;
2953 	uint32_t val;
2954 	uint32_t pitch_val;
2955 
2956 	if ((obj->gtt_offset & ~I830_FENCE_START_MASK) ||
2957 	    (size & -size) != size || (obj->gtt_offset & (size - 1))) {
2958 		kprintf(
2959 "object 0x%08x not 512K or pot-size 0x%08x aligned\n",
2960 		    obj->gtt_offset, size);
2961 		return -EINVAL;
2962 	}
2963 
2964 	pitch_val = obj->stride / 128;
2965 	pitch_val = ffs(pitch_val) - 1;
2966 
2967 	val = obj->gtt_offset;
2968 	if (obj->tiling_mode == I915_TILING_Y)
2969 		val |= 1 << I830_FENCE_TILING_Y_SHIFT;
2970 	val |= I830_FENCE_SIZE_BITS(size);
2971 	val |= pitch_val << I830_FENCE_PITCH_SHIFT;
2972 	val |= I830_FENCE_REG_VALID;
2973 
2974 	if (pipelined) {
2975 		int ret = intel_ring_begin(pipelined, 4);
2976 		if (ret)
2977 			return ret;
2978 
2979 		intel_ring_emit(pipelined, MI_NOOP);
2980 		intel_ring_emit(pipelined, MI_LOAD_REGISTER_IMM(1));
2981 		intel_ring_emit(pipelined, FENCE_REG_830_0 + regnum*4);
2982 		intel_ring_emit(pipelined, val);
2983 		intel_ring_advance(pipelined);
2984 	} else
2985 		I915_WRITE(FENCE_REG_830_0 + regnum * 4, val);
2986 
2987 	return 0;
2988 }
2989 
2990 static bool ring_passed_seqno(struct intel_ring_buffer *ring, u32 seqno)
2991 {
2992 	return i915_seqno_passed(ring->get_seqno(ring), seqno);
2993 }
2994 
2995 static int
2996 i915_gem_object_flush_fence(struct drm_i915_gem_object *obj,
2997     struct intel_ring_buffer *pipelined)
2998 {
2999 	int ret;
3000 
3001 	if (obj->fenced_gpu_access) {
3002 		if (obj->base.write_domain & I915_GEM_GPU_DOMAINS) {
3003 			ret = i915_gem_flush_ring(obj->last_fenced_ring, 0,
3004 			    obj->base.write_domain);
3005 			if (ret)
3006 				return ret;
3007 		}
3008 
3009 		obj->fenced_gpu_access = false;
3010 	}
3011 
3012 	if (obj->last_fenced_seqno && pipelined != obj->last_fenced_ring) {
3013 		if (!ring_passed_seqno(obj->last_fenced_ring,
3014 				       obj->last_fenced_seqno)) {
3015 			ret = i915_wait_request(obj->last_fenced_ring,
3016 						obj->last_fenced_seqno,
3017 						true);
3018 			if (ret)
3019 				return ret;
3020 		}
3021 
3022 		obj->last_fenced_seqno = 0;
3023 		obj->last_fenced_ring = NULL;
3024 	}
3025 
3026 	/* Ensure that all CPU reads are completed before installing a fence
3027 	 * and all writes before removing the fence.
3028 	 */
3029 	if (obj->base.read_domains & I915_GEM_DOMAIN_GTT)
3030 		cpu_mfence();
3031 
3032 	return 0;
3033 }
3034 
3035 int
3036 i915_gem_object_put_fence(struct drm_i915_gem_object *obj)
3037 {
3038 	int ret;
3039 
3040 	if (obj->tiling_mode)
3041 		i915_gem_release_mmap(obj);
3042 
3043 	ret = i915_gem_object_flush_fence(obj, NULL);
3044 	if (ret)
3045 		return ret;
3046 
3047 	if (obj->fence_reg != I915_FENCE_REG_NONE) {
3048 		struct drm_i915_private *dev_priv = obj->base.dev->dev_private;
3049 
3050 		if (dev_priv->fence_regs[obj->fence_reg].pin_count != 0)
3051 			kprintf("%s: pin_count %d\n", __func__,
3052 			    dev_priv->fence_regs[obj->fence_reg].pin_count);
3053 		i915_gem_clear_fence_reg(obj->base.dev,
3054 					 &dev_priv->fence_regs[obj->fence_reg]);
3055 
3056 		obj->fence_reg = I915_FENCE_REG_NONE;
3057 	}
3058 
3059 	return 0;
3060 }
3061 
3062 static struct drm_i915_fence_reg *
3063 i915_find_fence_reg(struct drm_device *dev, struct intel_ring_buffer *pipelined)
3064 {
3065 	struct drm_i915_private *dev_priv = dev->dev_private;
3066 	struct drm_i915_fence_reg *reg, *first, *avail;
3067 	int i;
3068 
3069 	/* First try to find a free reg */
3070 	avail = NULL;
3071 	for (i = dev_priv->fence_reg_start; i < dev_priv->num_fence_regs; i++) {
3072 		reg = &dev_priv->fence_regs[i];
3073 		if (!reg->obj)
3074 			return reg;
3075 
3076 		if (!reg->pin_count)
3077 			avail = reg;
3078 	}
3079 
3080 	if (avail == NULL)
3081 		return NULL;
3082 
3083 	/* None available, try to steal one or wait for a user to finish */
3084 	avail = first = NULL;
3085 	list_for_each_entry(reg, &dev_priv->mm.fence_list, lru_list) {
3086 		if (reg->pin_count)
3087 			continue;
3088 
3089 		if (first == NULL)
3090 			first = reg;
3091 
3092 		if (!pipelined ||
3093 		    !reg->obj->last_fenced_ring ||
3094 		    reg->obj->last_fenced_ring == pipelined) {
3095 			avail = reg;
3096 			break;
3097 		}
3098 	}
3099 
3100 	if (avail == NULL)
3101 		avail = first;
3102 
3103 	return avail;
3104 }
3105 
3106 int
3107 i915_gem_object_get_fence(struct drm_i915_gem_object *obj,
3108     struct intel_ring_buffer *pipelined)
3109 {
3110 	struct drm_device *dev = obj->base.dev;
3111 	struct drm_i915_private *dev_priv = dev->dev_private;
3112 	struct drm_i915_fence_reg *reg;
3113 	int ret;
3114 
3115 	pipelined = NULL;
3116 	ret = 0;
3117 
3118 	if (obj->fence_reg != I915_FENCE_REG_NONE) {
3119 		reg = &dev_priv->fence_regs[obj->fence_reg];
3120 		list_move_tail(&reg->lru_list, &dev_priv->mm.fence_list);
3121 
3122 		if (obj->tiling_changed) {
3123 			ret = i915_gem_object_flush_fence(obj, pipelined);
3124 			if (ret)
3125 				return ret;
3126 
3127 			if (!obj->fenced_gpu_access && !obj->last_fenced_seqno)
3128 				pipelined = NULL;
3129 
3130 			if (pipelined) {
3131 				reg->setup_seqno =
3132 					i915_gem_next_request_seqno(pipelined);
3133 				obj->last_fenced_seqno = reg->setup_seqno;
3134 				obj->last_fenced_ring = pipelined;
3135 			}
3136 
3137 			goto update;
3138 		}
3139 
3140 		if (!pipelined) {
3141 			if (reg->setup_seqno) {
3142 				if (!ring_passed_seqno(obj->last_fenced_ring,
3143 				    reg->setup_seqno)) {
3144 					ret = i915_wait_request(
3145 					    obj->last_fenced_ring,
3146 					    reg->setup_seqno,
3147 					    true);
3148 					if (ret)
3149 						return ret;
3150 				}
3151 
3152 				reg->setup_seqno = 0;
3153 			}
3154 		} else if (obj->last_fenced_ring &&
3155 			   obj->last_fenced_ring != pipelined) {
3156 			ret = i915_gem_object_flush_fence(obj, pipelined);
3157 			if (ret)
3158 				return ret;
3159 		}
3160 
3161 		if (!obj->fenced_gpu_access && !obj->last_fenced_seqno)
3162 			pipelined = NULL;
3163 		KASSERT(pipelined || reg->setup_seqno == 0, ("!pipelined"));
3164 
3165 		if (obj->tiling_changed) {
3166 			if (pipelined) {
3167 				reg->setup_seqno =
3168 					i915_gem_next_request_seqno(pipelined);
3169 				obj->last_fenced_seqno = reg->setup_seqno;
3170 				obj->last_fenced_ring = pipelined;
3171 			}
3172 			goto update;
3173 		}
3174 
3175 		return 0;
3176 	}
3177 
3178 	reg = i915_find_fence_reg(dev, pipelined);
3179 	if (reg == NULL)
3180 		return -EDEADLK;
3181 
3182 	ret = i915_gem_object_flush_fence(obj, pipelined);
3183 	if (ret)
3184 		return ret;
3185 
3186 	if (reg->obj) {
3187 		struct drm_i915_gem_object *old = reg->obj;
3188 
3189 		drm_gem_object_reference(&old->base);
3190 
3191 		if (old->tiling_mode)
3192 			i915_gem_release_mmap(old);
3193 
3194 		ret = i915_gem_object_flush_fence(old, pipelined);
3195 		if (ret) {
3196 			drm_gem_object_unreference(&old->base);
3197 			return ret;
3198 		}
3199 
3200 		if (old->last_fenced_seqno == 0 && obj->last_fenced_seqno == 0)
3201 			pipelined = NULL;
3202 
3203 		old->fence_reg = I915_FENCE_REG_NONE;
3204 		old->last_fenced_ring = pipelined;
3205 		old->last_fenced_seqno =
3206 			pipelined ? i915_gem_next_request_seqno(pipelined) : 0;
3207 
3208 		drm_gem_object_unreference(&old->base);
3209 	} else if (obj->last_fenced_seqno == 0)
3210 		pipelined = NULL;
3211 
3212 	reg->obj = obj;
3213 	list_move_tail(&reg->lru_list, &dev_priv->mm.fence_list);
3214 	obj->fence_reg = reg - dev_priv->fence_regs;
3215 	obj->last_fenced_ring = pipelined;
3216 
3217 	reg->setup_seqno =
3218 		pipelined ? i915_gem_next_request_seqno(pipelined) : 0;
3219 	obj->last_fenced_seqno = reg->setup_seqno;
3220 
3221 update:
3222 	obj->tiling_changed = false;
3223 	switch (INTEL_INFO(dev)->gen) {
3224 	case 7:
3225 	case 6:
3226 		ret = sandybridge_write_fence_reg(obj, pipelined);
3227 		break;
3228 	case 5:
3229 	case 4:
3230 		ret = i965_write_fence_reg(obj, pipelined);
3231 		break;
3232 	case 3:
3233 		ret = i915_write_fence_reg(obj, pipelined);
3234 		break;
3235 	case 2:
3236 		ret = i830_write_fence_reg(obj, pipelined);
3237 		break;
3238 	}
3239 
3240 	return ret;
3241 }
3242 
3243 static void
3244 i915_gem_clear_fence_reg(struct drm_device *dev, struct drm_i915_fence_reg *reg)
3245 {
3246 	drm_i915_private_t *dev_priv = dev->dev_private;
3247 	uint32_t fence_reg = reg - dev_priv->fence_regs;
3248 
3249 	switch (INTEL_INFO(dev)->gen) {
3250 	case 7:
3251 	case 6:
3252 		I915_WRITE64(FENCE_REG_SANDYBRIDGE_0 + fence_reg*8, 0);
3253 		break;
3254 	case 5:
3255 	case 4:
3256 		I915_WRITE64(FENCE_REG_965_0 + fence_reg*8, 0);
3257 		break;
3258 	case 3:
3259 		if (fence_reg >= 8)
3260 			fence_reg = FENCE_REG_945_8 + (fence_reg - 8) * 4;
3261 		else
3262 	case 2:
3263 			fence_reg = FENCE_REG_830_0 + fence_reg * 4;
3264 
3265 		I915_WRITE(fence_reg, 0);
3266 		break;
3267 	}
3268 
3269 	list_del_init(&reg->lru_list);
3270 	reg->obj = NULL;
3271 	reg->setup_seqno = 0;
3272 	reg->pin_count = 0;
3273 }
3274 
3275 int
3276 i915_gem_init_object(struct drm_gem_object *obj)
3277 {
3278 
3279 	kprintf("i915_gem_init_object called\n");
3280 	return (0);
3281 }
3282 
3283 static bool
3284 i915_gem_object_is_inactive(struct drm_i915_gem_object *obj)
3285 {
3286 
3287 	return (obj->gtt_space && !obj->active && obj->pin_count == 0);
3288 }
3289 
3290 static void
3291 i915_gem_retire_work_handler(struct work_struct *work)
3292 {
3293 	drm_i915_private_t *dev_priv;
3294 	struct drm_device *dev;
3295 	struct intel_ring_buffer *ring;
3296 	bool idle;
3297 	int i;
3298 
3299 	dev_priv = container_of(work, drm_i915_private_t,
3300 				mm.retire_work.work);
3301 	dev = dev_priv->dev;
3302 
3303 	/* Come back later if the device is busy... */
3304 	if (lockmgr(&dev->dev_struct_lock, LK_EXCLUSIVE|LK_NOWAIT)) {
3305 		queue_delayed_work(dev_priv->wq, &dev_priv->mm.retire_work,
3306 				   round_jiffies_up_relative(hz));
3307 		return;
3308 	}
3309 
3310 	i915_gem_retire_requests(dev);
3311 
3312 	/* Send a periodic flush down the ring so we don't hold onto GEM
3313 	 * objects indefinitely.
3314 	 */
3315 	idle = true;
3316 	for (i = 0; i < I915_NUM_RINGS; i++) {
3317 		ring = &dev_priv->ring[i];
3318 
3319 		if (!list_empty(&ring->gpu_write_list)) {
3320 			struct drm_i915_gem_request *request;
3321 			int ret;
3322 
3323 			ret = i915_gem_flush_ring(ring,
3324 						  0, I915_GEM_GPU_DOMAINS);
3325 			request = kmalloc(sizeof(*request), DRM_I915_GEM,
3326 			    M_WAITOK | M_ZERO);
3327 			if (ret || request == NULL ||
3328 			    i915_add_request(ring, NULL, request))
3329 				drm_free(request, DRM_I915_GEM);
3330 		}
3331 
3332 		idle &= list_empty(&ring->request_list);
3333 	}
3334 
3335 	if (!dev_priv->mm.suspended && !idle)
3336 		queue_delayed_work(dev_priv->wq, &dev_priv->mm.retire_work,
3337 				   round_jiffies_up_relative(hz));
3338 
3339 	DRM_UNLOCK(dev);
3340 }
3341 
3342 void
3343 i915_gem_lastclose(struct drm_device *dev)
3344 {
3345 	int ret;
3346 
3347 	if (drm_core_check_feature(dev, DRIVER_MODESET))
3348 		return;
3349 
3350 	ret = i915_gem_idle(dev);
3351 	if (ret != 0)
3352 		DRM_ERROR("failed to idle hardware: %d\n", ret);
3353 }
3354 
3355 static int
3356 i915_gem_init_phys_object(struct drm_device *dev, int id, int size, int align)
3357 {
3358 	drm_i915_private_t *dev_priv;
3359 	struct drm_i915_gem_phys_object *phys_obj;
3360 	int ret;
3361 
3362 	dev_priv = dev->dev_private;
3363 	if (dev_priv->mm.phys_objs[id - 1] != NULL || size == 0)
3364 		return (0);
3365 
3366 	phys_obj = kmalloc(sizeof(struct drm_i915_gem_phys_object), DRM_I915_GEM,
3367 	    M_WAITOK | M_ZERO);
3368 
3369 	phys_obj->id = id;
3370 
3371 	phys_obj->handle = drm_pci_alloc(dev, size, align, ~0);
3372 	if (phys_obj->handle == NULL) {
3373 		ret = -ENOMEM;
3374 		goto free_obj;
3375 	}
3376 	pmap_change_attr((vm_offset_t)phys_obj->handle->vaddr,
3377 	    size / PAGE_SIZE, PAT_WRITE_COMBINING);
3378 
3379 	dev_priv->mm.phys_objs[id - 1] = phys_obj;
3380 
3381 	return (0);
3382 
3383 free_obj:
3384 	drm_free(phys_obj, DRM_I915_GEM);
3385 	return (ret);
3386 }
3387 
3388 static void
3389 i915_gem_free_phys_object(struct drm_device *dev, int id)
3390 {
3391 	drm_i915_private_t *dev_priv;
3392 	struct drm_i915_gem_phys_object *phys_obj;
3393 
3394 	dev_priv = dev->dev_private;
3395 	if (dev_priv->mm.phys_objs[id - 1] == NULL)
3396 		return;
3397 
3398 	phys_obj = dev_priv->mm.phys_objs[id - 1];
3399 	if (phys_obj->cur_obj != NULL)
3400 		i915_gem_detach_phys_object(dev, phys_obj->cur_obj);
3401 
3402 	drm_pci_free(dev, phys_obj->handle);
3403 	drm_free(phys_obj, DRM_I915_GEM);
3404 	dev_priv->mm.phys_objs[id - 1] = NULL;
3405 }
3406 
3407 void
3408 i915_gem_free_all_phys_object(struct drm_device *dev)
3409 {
3410 	int i;
3411 
3412 	for (i = I915_GEM_PHYS_CURSOR_0; i <= I915_MAX_PHYS_OBJECT; i++)
3413 		i915_gem_free_phys_object(dev, i);
3414 }
3415 
3416 void
3417 i915_gem_detach_phys_object(struct drm_device *dev,
3418     struct drm_i915_gem_object *obj)
3419 {
3420 	vm_page_t m;
3421 	struct sf_buf *sf;
3422 	char *vaddr, *dst;
3423 	int i, page_count;
3424 
3425 	if (obj->phys_obj == NULL)
3426 		return;
3427 	vaddr = obj->phys_obj->handle->vaddr;
3428 
3429 	page_count = obj->base.size / PAGE_SIZE;
3430 	VM_OBJECT_LOCK(obj->base.vm_obj);
3431 	for (i = 0; i < page_count; i++) {
3432 		m = i915_gem_wire_page(obj->base.vm_obj, i);
3433 		if (m == NULL)
3434 			continue; /* XXX */
3435 
3436 		VM_OBJECT_UNLOCK(obj->base.vm_obj);
3437 		sf = sf_buf_alloc(m);
3438 		if (sf != NULL) {
3439 			dst = (char *)sf_buf_kva(sf);
3440 			memcpy(dst, vaddr + IDX_TO_OFF(i), PAGE_SIZE);
3441 			sf_buf_free(sf);
3442 		}
3443 		drm_clflush_pages(&m, 1);
3444 
3445 		VM_OBJECT_LOCK(obj->base.vm_obj);
3446 		vm_page_reference(m);
3447 		vm_page_dirty(m);
3448 		vm_page_busy_wait(m, FALSE, "i915gem");
3449 		vm_page_unwire(m, 0);
3450 		vm_page_wakeup(m);
3451 		atomic_add_long(&i915_gem_wired_pages_cnt, -1);
3452 	}
3453 	VM_OBJECT_UNLOCK(obj->base.vm_obj);
3454 	intel_gtt_chipset_flush();
3455 
3456 	obj->phys_obj->cur_obj = NULL;
3457 	obj->phys_obj = NULL;
3458 }
3459 
3460 static void
3461 init_ring_lists(struct intel_ring_buffer *ring)
3462 {
3463 
3464 	INIT_LIST_HEAD(&ring->active_list);
3465 	INIT_LIST_HEAD(&ring->request_list);
3466 	INIT_LIST_HEAD(&ring->gpu_write_list);
3467 }
3468 
3469 void
3470 i915_gem_load(struct drm_device *dev)
3471 {
3472 	int i;
3473 	drm_i915_private_t *dev_priv = dev->dev_private;
3474 
3475 	INIT_LIST_HEAD(&dev_priv->mm.active_list);
3476 	INIT_LIST_HEAD(&dev_priv->mm.flushing_list);
3477 	INIT_LIST_HEAD(&dev_priv->mm.inactive_list);
3478 	INIT_LIST_HEAD(&dev_priv->mm.pinned_list);
3479 	INIT_LIST_HEAD(&dev_priv->mm.fence_list);
3480 	INIT_LIST_HEAD(&dev_priv->mm.deferred_free_list);
3481 	INIT_LIST_HEAD(&dev_priv->mm.gtt_list);
3482 	for (i = 0; i < I915_NUM_RINGS; i++)
3483 		init_ring_lists(&dev_priv->ring[i]);
3484 	for (i = 0; i < I915_MAX_NUM_FENCES; i++)
3485 		INIT_LIST_HEAD(&dev_priv->fence_regs[i].lru_list);
3486 	INIT_DELAYED_WORK(&dev_priv->mm.retire_work,
3487 			  i915_gem_retire_work_handler);
3488 	dev_priv->error_completion = 0;
3489 
3490 	/* On GEN3 we really need to make sure the ARB C3 LP bit is set */
3491 	if (IS_GEN3(dev)) {
3492 		I915_WRITE(MI_ARB_STATE,
3493 			   _MASKED_BIT_ENABLE(MI_ARB_C3_LP_WRITE_ENABLE));
3494 	}
3495 
3496 	dev_priv->relative_constants_mode = I915_EXEC_CONSTANTS_REL_GENERAL;
3497 
3498 	/* Old X drivers will take 0-2 for front, back, depth buffers */
3499 	if (!drm_core_check_feature(dev, DRIVER_MODESET))
3500 		dev_priv->fence_reg_start = 3;
3501 
3502 	if (INTEL_INFO(dev)->gen >= 4 || IS_I945G(dev) || IS_I945GM(dev) || IS_G33(dev))
3503 		dev_priv->num_fence_regs = 16;
3504 	else
3505 		dev_priv->num_fence_regs = 8;
3506 
3507 	/* Initialize fence registers to zero */
3508 	i915_gem_reset_fences(dev);
3509 
3510 	i915_gem_detect_bit_6_swizzle(dev);
3511 
3512 	dev_priv->mm.interruptible = true;
3513 
3514 	dev_priv->mm.i915_lowmem = EVENTHANDLER_REGISTER(vm_lowmem,
3515 	    i915_gem_lowmem, dev, EVENTHANDLER_PRI_ANY);
3516 }
3517 
3518 int
3519 i915_gem_attach_phys_object(struct drm_device *dev,
3520     struct drm_i915_gem_object *obj, int id, int align)
3521 {
3522 	drm_i915_private_t *dev_priv;
3523 	vm_page_t m;
3524 	struct sf_buf *sf;
3525 	char *dst, *src;
3526 	int i, page_count, ret;
3527 
3528 	if (id > I915_MAX_PHYS_OBJECT)
3529 		return (-EINVAL);
3530 
3531 	if (obj->phys_obj != NULL) {
3532 		if (obj->phys_obj->id == id)
3533 			return (0);
3534 		i915_gem_detach_phys_object(dev, obj);
3535 	}
3536 
3537 	dev_priv = dev->dev_private;
3538 	if (dev_priv->mm.phys_objs[id - 1] == NULL) {
3539 		ret = i915_gem_init_phys_object(dev, id, obj->base.size, align);
3540 		if (ret != 0) {
3541 			DRM_ERROR("failed to init phys object %d size: %zu\n",
3542 				  id, obj->base.size);
3543 			return (ret);
3544 		}
3545 	}
3546 
3547 	/* bind to the object */
3548 	obj->phys_obj = dev_priv->mm.phys_objs[id - 1];
3549 	obj->phys_obj->cur_obj = obj;
3550 
3551 	page_count = obj->base.size / PAGE_SIZE;
3552 
3553 	VM_OBJECT_LOCK(obj->base.vm_obj);
3554 	ret = 0;
3555 	for (i = 0; i < page_count; i++) {
3556 		m = i915_gem_wire_page(obj->base.vm_obj, i);
3557 		if (m == NULL) {
3558 			ret = -EIO;
3559 			break;
3560 		}
3561 		VM_OBJECT_UNLOCK(obj->base.vm_obj);
3562 		sf = sf_buf_alloc(m);
3563 		src = (char *)sf_buf_kva(sf);
3564 		dst = (char *)obj->phys_obj->handle->vaddr + IDX_TO_OFF(i);
3565 		memcpy(dst, src, PAGE_SIZE);
3566 		sf_buf_free(sf);
3567 
3568 		VM_OBJECT_LOCK(obj->base.vm_obj);
3569 
3570 		vm_page_reference(m);
3571 		vm_page_busy_wait(m, FALSE, "i915gem");
3572 		vm_page_unwire(m, 0);
3573 		vm_page_wakeup(m);
3574 		atomic_add_long(&i915_gem_wired_pages_cnt, -1);
3575 	}
3576 	VM_OBJECT_UNLOCK(obj->base.vm_obj);
3577 
3578 	return (0);
3579 }
3580 
3581 static int
3582 i915_gem_phys_pwrite(struct drm_device *dev, struct drm_i915_gem_object *obj,
3583     uint64_t data_ptr, uint64_t offset, uint64_t size,
3584     struct drm_file *file_priv)
3585 {
3586 	char *user_data, *vaddr;
3587 	int ret;
3588 
3589 	vaddr = (char *)obj->phys_obj->handle->vaddr + offset;
3590 	user_data = (char *)(uintptr_t)data_ptr;
3591 
3592 	if (copyin_nofault(user_data, vaddr, size) != 0) {
3593 		/* The physical object once assigned is fixed for the lifetime
3594 		 * of the obj, so we can safely drop the lock and continue
3595 		 * to access vaddr.
3596 		 */
3597 		DRM_UNLOCK(dev);
3598 		ret = -copyin(user_data, vaddr, size);
3599 		DRM_LOCK(dev);
3600 		if (ret != 0)
3601 			return (ret);
3602 	}
3603 
3604 	intel_gtt_chipset_flush();
3605 	return (0);
3606 }
3607 
3608 static int
3609 i915_gpu_is_active(struct drm_device *dev)
3610 {
3611 	drm_i915_private_t *dev_priv;
3612 
3613 	dev_priv = dev->dev_private;
3614 	return (!list_empty(&dev_priv->mm.flushing_list) ||
3615 	    !list_empty(&dev_priv->mm.active_list));
3616 }
3617 
3618 static void
3619 i915_gem_lowmem(void *arg)
3620 {
3621 	struct drm_device *dev;
3622 	struct drm_i915_private *dev_priv;
3623 	struct drm_i915_gem_object *obj, *next;
3624 	int cnt, cnt_fail, cnt_total;
3625 
3626 	dev = arg;
3627 	dev_priv = dev->dev_private;
3628 
3629 	if (lockmgr(&dev->dev_struct_lock, LK_EXCLUSIVE|LK_NOWAIT))
3630 		return;
3631 
3632 rescan:
3633 	/* first scan for clean buffers */
3634 	i915_gem_retire_requests(dev);
3635 
3636 	cnt_total = cnt_fail = cnt = 0;
3637 
3638 	list_for_each_entry_safe(obj, next, &dev_priv->mm.inactive_list,
3639 	    mm_list) {
3640 		if (i915_gem_object_is_purgeable(obj)) {
3641 			if (i915_gem_object_unbind(obj) != 0)
3642 				cnt_total++;
3643 		} else
3644 			cnt_total++;
3645 	}
3646 
3647 	/* second pass, evict/count anything still on the inactive list */
3648 	list_for_each_entry_safe(obj, next, &dev_priv->mm.inactive_list,
3649 	    mm_list) {
3650 		if (i915_gem_object_unbind(obj) == 0)
3651 			cnt++;
3652 		else
3653 			cnt_fail++;
3654 	}
3655 
3656 	if (cnt_fail > cnt_total / 100 && i915_gpu_is_active(dev)) {
3657 		/*
3658 		 * We are desperate for pages, so as a last resort, wait
3659 		 * for the GPU to finish and discard whatever we can.
3660 		 * This has a dramatic impact to reduce the number of
3661 		 * OOM-killer events whilst running the GPU aggressively.
3662 		 */
3663 		if (i915_gpu_idle(dev, true) == 0)
3664 			goto rescan;
3665 	}
3666 	DRM_UNLOCK(dev);
3667 }
3668 
3669 void
3670 i915_gem_unload(struct drm_device *dev)
3671 {
3672 	struct drm_i915_private *dev_priv;
3673 
3674 	dev_priv = dev->dev_private;
3675 	EVENTHANDLER_DEREGISTER(vm_lowmem, dev_priv->mm.i915_lowmem);
3676 }
3677