QXL supports the drm_panic module, which displays a message to the screen when a kernel panic occurs. Signed-off-by: Ryosuke Yasuoka <ryasuoka@xxxxxxxxxx> --- v3 Adjust function's arguments indentation. Discussion v2 patch is in [2] [2] https://lore.kernel.org/lkml/20240919071230.840994-1-ryasuoka@xxxxxxxxxx/T/ v2 In [1], Jocelyn gives me feedbacks and fix them. 1. Removing qxl_surface_evict(): It takes a mutex and it possibly causes deadlock in panic handler. As the panic handler works correctly without it and to make it simple, I remove it. 2. Update qxl_panic_ttm_bo_destory(): It deleted bo->list with taking mutex but it does not need to call because this list is not updated in panic handler. 3. Remove unnecessary args from panic functions: Some panic functions always take same values as args (e.g. kernel, pinned, domain etc in qxl_panic_bo_create()). So I remove them from panic functions and define them in each function. [1] https://lore.kernel.org/dri-devel/89b55f6f-f462-4e84-b2e2-7f2edc0f1cc4@xxxxxxxxxx/T/#t drivers/gpu/drm/qxl/qxl_cmd.c | 29 ++++++++++ drivers/gpu/drm/qxl/qxl_display.c | 94 +++++++++++++++++++++++++++++++ drivers/gpu/drm/qxl/qxl_draw.c | 61 +++++++++++++++++++- drivers/gpu/drm/qxl/qxl_drv.h | 24 ++++++++ drivers/gpu/drm/qxl/qxl_gem.c | 9 +++ drivers/gpu/drm/qxl/qxl_image.c | 26 +++++++++ drivers/gpu/drm/qxl/qxl_object.c | 46 +++++++++++++++ drivers/gpu/drm/qxl/qxl_object.h | 1 + 8 files changed, 287 insertions(+), 3 deletions(-) diff --git a/drivers/gpu/drm/qxl/qxl_cmd.c b/drivers/gpu/drm/qxl/qxl_cmd.c index d6ea01f3797b..a3dd2ed4d9c7 100644 --- a/drivers/gpu/drm/qxl/qxl_cmd.c +++ b/drivers/gpu/drm/qxl/qxl_cmd.c @@ -174,6 +174,35 @@ static bool qxl_ring_pop(struct qxl_ring *ring, return true; } +/* For drm panic */ +int +qxl_push_command_ring_without_release(struct qxl_device *qdev, + struct qxl_bo *bo, uint32_t offset) +{ + struct qxl_command cmd; + struct qxl_ring *ring = qdev->command_ring; + struct qxl_ring_header *header = &(ring->ring->header); + uint8_t *elt; + int idx; + + cmd.type = QXL_CMD_DRAW; + cmd.data = qxl_bo_physical_address(qdev, bo, offset); + + idx = header->prod & (ring->n_elements - 1); + elt = ring->ring->elements + idx * ring->element_size; + + memcpy((void *)elt, &cmd, ring->element_size); + + header->prod++; + + mb(); + + if (header->prod == header->notify_on_prod) + outb(0, ring->prod_notify); + + return 0; +} + int qxl_push_command_ring_release(struct qxl_device *qdev, struct qxl_release *release, uint32_t type, bool interruptible) diff --git a/drivers/gpu/drm/qxl/qxl_display.c b/drivers/gpu/drm/qxl/qxl_display.c index bc24af08dfcd..1380ef7c9ae8 100644 --- a/drivers/gpu/drm/qxl/qxl_display.c +++ b/drivers/gpu/drm/qxl/qxl_display.c @@ -37,6 +37,7 @@ #include <drm/drm_probe_helper.h> #include <drm/drm_simple_kms_helper.h> #include <drm/drm_gem_atomic_helper.h> +#include <drm/drm_panic.h> #include "qxl_drv.h" #include "qxl_object.h" @@ -889,6 +890,97 @@ static void qxl_plane_cleanup_fb(struct drm_plane *plane, } } +static int qxl_primary_plane_helper_get_scanout_buffer(struct drm_plane *plane, + struct drm_scanout_buffer *sb) +{ + struct qxl_bo *bo; + + if (!plane->state || !plane->state->fb) + return -ENODEV; + + bo = gem_to_qxl_bo(plane->state->fb->obj[0]); + + if (!bo->map.vaddr) { + int ret; + + ret = qxl_bo_pin_and_vmap(bo, &sb->map[0]); + if (ret) + return ret; + } else { + iosys_map_set_vaddr(&sb->map[0], bo->map.vaddr); + } + + sb->format = plane->state->fb->format; + sb->height = plane->state->fb->height; + sb->width = plane->state->fb->width; + sb->pitch[0] = plane->state->fb->pitches[0]; + return 0; +} + +static void qxl_panic_flush(struct drm_plane *plane) +{ + struct qxl_device *qdev = to_qxl(plane->dev); + struct qxl_bo *_bo = gem_to_qxl_bo(plane->state->fb->obj[0]); + uint8_t *surface_base = _bo->map.vaddr; + struct drm_clip_rect rect = { + .x1 = 0, + .y1 = 0, + .x2 = plane->state->fb->width, + .y2 = plane->state->fb->height + }; + unsigned int num_clips = 1; + struct qxl_bo clips_bo = {}; + struct qxl_bo image_bo = {}; + struct qxl_bo chunk_bo = {}; + struct qxl_drm_image dimage; + struct qxl_drm_chunk chunk; + int width = rect.x2; + int height = rect.y2; + int stride = plane->state->fb->pitches[0]; + int depth = plane->state->fb->format->cpp[0] * 8; + struct qxl_rect *rects; + struct qxl_rect drawable_rect = { + .left = 0, + .right = width, + .top = 0, + .bottom = height, + }; + int cur_idx = 0; + int size = 256; + struct qxl_bo *bo = qxl_bo_ref(qdev->current_release_bo[cur_idx]); + uint32_t offset = qdev->current_release_bo_offset[cur_idx] * size; + int ret; + + qxl_panic_bo_create(qdev, sizeof(struct qxl_clip_rects) + sizeof(struct qxl_rect), + &clips_bo); + + ret = qxl_image_alloc_objects_without_release(qdev, &dimage, &chunk, &image_bo, &chunk_bo, + surface_base, width, height, depth, stride); + if (ret) + return; + + ret = make_drawable_without_release(qdev, &drawable_rect, bo, &clips_bo, + &dimage, offset, height, width); + if (ret) + return; + + rects = drawable_set_clipping(qdev, num_clips, &clips_bo); + if (!rects) + return; + rects[0].left = 0; + rects[0].right = width; + rects[0].top = 0; + rects[0].bottom = height; + + qxl_push_command_ring_without_release(qdev, bo, offset); + + qxl_panic_gem_object_free(&chunk_bo.tbo.base); + qxl_panic_gem_object_free(&image_bo.tbo.base); + + qxl_bo_vunmap_locked(&clips_bo); + qxl_panic_gem_object_free(&clips_bo.tbo.base); +} + static const uint32_t qxl_cursor_plane_formats[] = { DRM_FORMAT_ARGB8888, }; @@ -920,6 +1012,8 @@ static const struct drm_plane_helper_funcs primary_helper_funcs = { .atomic_disable = qxl_primary_atomic_disable, .prepare_fb = qxl_plane_prepare_fb, .cleanup_fb = qxl_plane_cleanup_fb, + .get_scanout_buffer = qxl_primary_plane_helper_get_scanout_buffer, + .panic_flush = qxl_panic_flush, }; static const struct drm_plane_funcs qxl_primary_plane_funcs = { diff --git a/drivers/gpu/drm/qxl/qxl_draw.c b/drivers/gpu/drm/qxl/qxl_draw.c index 3a3e127ce297..cf64db196101 100644 --- a/drivers/gpu/drm/qxl/qxl_draw.c +++ b/drivers/gpu/drm/qxl/qxl_draw.c @@ -41,9 +41,10 @@ static int alloc_clips(struct qxl_device *qdev, /* returns a pointer to the already allocated qxl_rect array inside * the qxl_clip_rects. This is *not* the same as the memory allocated * on the device, it is offset to qxl_clip_rects.chunk.data */ -static struct qxl_rect *drawable_set_clipping(struct qxl_device *qdev, - unsigned int num_clips, - struct qxl_bo *clips_bo) + +struct qxl_rect *drawable_set_clipping(struct qxl_device *qdev, + unsigned int num_clips, + struct qxl_bo *clips_bo) { struct iosys_map map; struct qxl_clip_rects *dev_clips; @@ -74,6 +75,60 @@ free_drawable(struct qxl_device *qdev, struct qxl_release *release) qxl_release_free(qdev, release); } +/* For drm panic */ +int +make_drawable_without_release(struct qxl_device *qdev, + struct qxl_rect *drawable_rect, + struct qxl_bo *bo, + struct qxl_bo *clips_bo, + struct qxl_drm_image *dimage, + uint32_t offset, int height, int width) +{ + struct qxl_drawable *drawable; + union qxl_release_info *info; + void *ptr; + int i; + + ptr = qxl_bo_kmap_atomic_page(qdev, bo, offset & PAGE_MASK); + if (!ptr) + return -ENOMEM; + drawable = ptr + (offset & ~PAGE_MASK); + + drawable->type = QXL_DRAW_COPY; + drawable->surface_id = 0; + drawable->effect = QXL_EFFECT_OPAQUE; + drawable->self_bitmap = 0; + drawable->self_bitmap_area.top = 0; + drawable->self_bitmap_area.left = 0; + drawable->self_bitmap_area.bottom = 0; + drawable->self_bitmap_area.right = 0; + + for (i = 0; i < 3; ++i) + drawable->surfaces_dest[i] = -1; + + drawable->bbox = *drawable_rect; + drawable->mm_time = qdev->rom->mm_clock; + drawable->clip.type = SPICE_CLIP_TYPE_RECTS; + drawable->clip.data = qxl_bo_physical_address(qdev, clips_bo, 0); + drawable->u.copy.src_area.top = 0; + drawable->u.copy.src_area.bottom = height; + drawable->u.copy.src_area.left = 0; + drawable->u.copy.src_area.right = width; + drawable->u.copy.rop_descriptor = SPICE_ROPD_OP_PUT; + drawable->u.copy.scale_mode = 0; + drawable->u.copy.mask.flags = 0; + drawable->u.copy.mask.pos.x = 0; + drawable->u.copy.mask.pos.y = 0; + drawable->u.copy.mask.bitmap = 0; + drawable->u.copy.src_bitmap = qxl_bo_physical_address(qdev, dimage->bo, 0); + + info = &drawable->release_info; + ptr = ((void *)info) - (offset & ~PAGE_MASK); + qxl_bo_kunmap_atomic_page(qdev, bo, ptr); + + return 0; +} + /* release needs to be reserved at this point */ static int make_drawable(struct qxl_device *qdev, int surface, uint8_t type, diff --git a/drivers/gpu/drm/qxl/qxl_drv.h b/drivers/gpu/drm/qxl/qxl_drv.h index 32069acd93f8..33b1100c8035 100644 --- a/drivers/gpu/drm/qxl/qxl_drv.h +++ b/drivers/gpu/drm/qxl/qxl_drv.h @@ -309,6 +309,7 @@ int qxl_gem_object_create_with_handle(struct qxl_device *qdev, struct qxl_surface *surf, struct drm_gem_object **gobj, uint32_t *handle); +void qxl_panic_gem_object_free(struct drm_gem_object *gobj); void qxl_gem_object_free(struct drm_gem_object *gobj); int qxl_gem_object_open(struct drm_gem_object *obj, struct drm_file *file_priv); void qxl_gem_object_close(struct drm_gem_object *obj, @@ -334,6 +335,14 @@ int qxl_image_init(struct qxl_device *qdev, const uint8_t *data, int x, int y, int width, int height, int depth, int stride); + +int qxl_image_alloc_objects_without_release(struct qxl_device *qdev, + struct qxl_drm_image *image, + struct qxl_drm_chunk *chunk, + struct qxl_bo *image_bo, struct qxl_bo *chunk_bo, + uint8_t *surface_base, int width, + int height, int depth, int stride); + int qxl_image_alloc_objects(struct qxl_device *qdev, struct qxl_release *release, @@ -376,6 +385,10 @@ int qxl_alloc_release_reserved(struct qxl_device *qdev, unsigned long size, int type, struct qxl_release **release, struct qxl_bo **rbo); +int qxl_push_command_ring_without_release(struct qxl_device *qdev, + struct qxl_bo *bo, uint32_t offset); + + int qxl_push_command_ring_release(struct qxl_device *qdev, struct qxl_release *release, uint32_t type, bool interruptible); @@ -387,6 +400,9 @@ int qxl_alloc_bo_reserved(struct qxl_device *qdev, unsigned long size, struct qxl_bo **_bo); /* qxl drawing commands */ +struct qxl_rect *drawable_set_clipping(struct qxl_device *qdev, + unsigned int num_clips, + struct qxl_bo *clips_bo); void qxl_draw_dirty_fb(struct qxl_device *qdev, struct drm_framebuffer *fb, @@ -399,6 +415,14 @@ void qxl_draw_dirty_fb(struct qxl_device *qdev, void qxl_release_free(struct qxl_device *qdev, struct qxl_release *release); +int +make_drawable_without_release(struct qxl_device *qdev, + struct qxl_rect *drawable_rect, + struct qxl_bo *bo, + struct qxl_bo *clips_bo, + struct qxl_drm_image *dimage, + uint32_t offset, int height, int width); + /* used by qxl_debugfs_release */ struct qxl_release *qxl_release_from_id_locked(struct qxl_device *qdev, uint64_t id); diff --git a/drivers/gpu/drm/qxl/qxl_gem.c b/drivers/gpu/drm/qxl/qxl_gem.c index fc5e3763c359..f140439c640a 100644 --- a/drivers/gpu/drm/qxl/qxl_gem.c +++ b/drivers/gpu/drm/qxl/qxl_gem.c @@ -28,6 +28,15 @@ #include "qxl_drv.h" #include "qxl_object.h" +void qxl_panic_gem_object_free(struct drm_gem_object *gobj) +{ + struct qxl_bo *qobj = gem_to_qxl_bo(gobj); + struct ttm_buffer_object *tbo; + + tbo = &qobj->tbo; + ttm_bo_put(tbo); +} + void qxl_gem_object_free(struct drm_gem_object *gobj) { struct qxl_bo *qobj = gem_to_qxl_bo(gobj); diff --git a/drivers/gpu/drm/qxl/qxl_image.c b/drivers/gpu/drm/qxl/qxl_image.c index ffff54e5fb31..370dc0bae48c 100644 --- a/drivers/gpu/drm/qxl/qxl_image.c +++ b/drivers/gpu/drm/qxl/qxl_image.c @@ -52,6 +52,32 @@ qxl_allocate_chunk(struct qxl_device *qdev, return 0; } +/* For drm panic */ +int +qxl_image_alloc_objects_without_release(struct qxl_device *qdev, + struct qxl_drm_image *image, + struct qxl_drm_chunk *chunk, + struct qxl_bo *image_bo, struct qxl_bo *chunk_bo, + uint8_t *surface_base, int width, int height, + int depth, int stride) +{ + int ret; + unsigned int chunk_size = sizeof(struct qxl_data_chunk) + stride * height; + + INIT_LIST_HEAD(&image->chunk_list); + qxl_panic_bo_create(qdev, sizeof(struct qxl_image), image_bo); + image->bo = image_bo; + + qxl_panic_bo_create(qdev, chunk_size, chunk_bo); + chunk->bo = chunk_bo; + list_add_tail(&chunk->head, &image->chunk_list); + + ret = qxl_image_init(qdev, NULL, image, surface_base, + 0, 0, width, height, depth, stride); + return ret; + +} + int qxl_image_alloc_objects(struct qxl_device *qdev, struct qxl_release *release, diff --git a/drivers/gpu/drm/qxl/qxl_object.c b/drivers/gpu/drm/qxl/qxl_object.c index 66635c55cf85..cdba20718674 100644 --- a/drivers/gpu/drm/qxl/qxl_object.c +++ b/drivers/gpu/drm/qxl/qxl_object.c @@ -29,6 +29,16 @@ #include "qxl_drv.h" #include "qxl_object.h" +/* For drm panic */ +static void qxl_panic_ttm_bo_destroy(struct ttm_buffer_object *tbo) +{ + struct qxl_bo *bo; + + bo = to_qxl_bo(tbo); + WARN_ON_ONCE(bo->map_count > 0); + drm_gem_object_release(&bo->tbo.base); +} + static void qxl_ttm_bo_destroy(struct ttm_buffer_object *tbo) { struct qxl_bo *bo; @@ -101,6 +111,42 @@ static const struct drm_gem_object_funcs qxl_object_funcs = { .print_info = drm_gem_ttm_print_info, }; +/* For drm panic */ +int qxl_panic_bo_create(struct qxl_device *qdev, unsigned long size, struct qxl_bo *bo) +{ + u32 domain = QXL_GEM_DOMAIN_VRAM; + struct ttm_operation_ctx ctx = { true, false }; + enum ttm_bo_type type; + int r; + + type = ttm_bo_type_device; + + size = roundup(size, PAGE_SIZE); + r = drm_gem_object_init(&qdev->ddev, &bo->tbo.base, size); + if (unlikely(r)) + return r; + bo->tbo.base.funcs = &qxl_object_funcs; + bo->type = domain; + bo->surface_id = 0; + INIT_LIST_HEAD(&bo->list); + + qxl_ttm_placement_from_domain(bo, domain); + + bo->tbo.priority = 0; + r = ttm_bo_init_reserved(&qdev->mman.bdev, &bo->tbo, type, + &bo->placement, 0, &ctx, NULL, NULL, + &qxl_panic_ttm_bo_destroy); + if (unlikely(r != 0)) { + if (r != -ERESTARTSYS) + dev_err(qdev->ddev.dev, + "object_init failed for (%lu, 0x%08X)\n", + size, domain); + return r; + } + ttm_bo_unreserve(&bo->tbo); + return 0; +} + int qxl_bo_create(struct qxl_device *qdev, unsigned long size, bool kernel, bool pinned, u32 domain, u32 priority, struct qxl_surface *surf, diff --git a/drivers/gpu/drm/qxl/qxl_object.h b/drivers/gpu/drm/qxl/qxl_object.h index 875f63221074..d1dbf7a3dd5b 100644 --- a/drivers/gpu/drm/qxl/qxl_object.h +++ b/drivers/gpu/drm/qxl/qxl_object.h @@ -53,6 +53,7 @@ static inline unsigned long qxl_bo_size(struct qxl_bo *bo) return bo->tbo.base.size; } +extern int qxl_panic_bo_create(struct qxl_device *qdev, unsigned long size, struct qxl_bo *bo); extern int qxl_bo_create(struct qxl_device *qdev, unsigned long size, bool kernel, bool pinned, u32 domain, -- 2.46.0
