[linux-2.6-block.git] / drivers / gpu / drm / etnaviv / etnaviv_gem_submit.c

/*
 * Copyright (C) 2015 Etnaviv Project
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of the GNU General Public License version 2 as published by
 * the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program.  If not, see <http://www.gnu.org/licenses/>.
 */

#include <linux/reservation.h>
#include "etnaviv_drv.h"
#include "etnaviv_gpu.h"
#include "etnaviv_gem.h"

/*
 * Cmdstream submission:
 */

#define BO_INVALID_FLAGS ~(ETNA_SUBMIT_BO_READ | ETNA_SUBMIT_BO_WRITE)
/* make sure these don't conflict w/ ETNAVIV_SUBMIT_BO_x */
#define BO_LOCKED   0x4000
#define BO_PINNED   0x2000

static inline void __user *to_user_ptr(u64 address)
{
	return (void __user *)(uintptr_t)address;
}

static struct etnaviv_gem_submit *submit_create(struct drm_device *dev,
		struct etnaviv_gpu *gpu, size_t nr)
{
	struct etnaviv_gem_submit *submit;
	size_t sz = size_vstruct(nr, sizeof(submit->bos[0]), sizeof(*submit));

	submit = kmalloc(sz, GFP_TEMPORARY | __GFP_NOWARN | __GFP_NORETRY);
	if (submit) {
		submit->dev = dev;
		submit->gpu = gpu;

		/* initially, until copy_from_user() and bo lookup succeeds: */
		submit->nr_bos = 0;

		ww_acquire_init(&submit->ticket, &reservation_ww_class);
	}

	return submit;
}

static int submit_lookup_objects(struct etnaviv_gem_submit *submit,
	struct drm_file *file, struct drm_etnaviv_gem_submit_bo *submit_bos,
	unsigned nr_bos)
{
	struct drm_etnaviv_gem_submit_bo *bo;
	unsigned i;
	int ret = 0;

	spin_lock(&file->table_lock);

	for (i = 0, bo = submit_bos; i < nr_bos; i++, bo++) {
		struct drm_gem_object *obj;

		if (bo->flags & BO_INVALID_FLAGS) {
			DRM_ERROR("invalid flags: %x\n", bo->flags);
			ret = -EINVAL;
			goto out_unlock;
		}

		submit->bos[i].flags = bo->flags;

		/* normally use drm_gem_object_lookup(), but for bulk lookup
		 * all under single table_lock just hit object_idr directly:
		 */
		obj = idr_find(&file->object_idr, bo->handle);
		if (!obj) {
			DRM_ERROR("invalid handle %u at index %u\n",
				  bo->handle, i);
			ret = -EINVAL;
			goto out_unlock;
		}

		/*
		 * Take a refcount on the object. The file table lock
		 * prevents the object_idr's refcount on this being dropped.
		 */
		drm_gem_object_reference(obj);

		submit->bos[i].obj = to_etnaviv_bo(obj);
	}

out_unlock:
	submit->nr_bos = i;
	spin_unlock(&file->table_lock);

	return ret;
}

static void submit_unlock_object(struct etnaviv_gem_submit *submit, int i)
{
	if (submit->bos[i].flags & BO_LOCKED) {
		struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;

		ww_mutex_unlock(&etnaviv_obj->resv->lock);
		submit->bos[i].flags &= ~BO_LOCKED;
	}
}

static int submit_lock_objects(struct etnaviv_gem_submit *submit)
{
	int contended, slow_locked = -1, i, ret = 0;

retry:
	for (i = 0; i < submit->nr_bos; i++) {
		struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;

		if (slow_locked == i)
			slow_locked = -1;

		contended = i;

		if (!(submit->bos[i].flags & BO_LOCKED)) {
			ret = ww_mutex_lock_interruptible(&etnaviv_obj->resv->lock,
					&submit->ticket);
			if (ret == -EALREADY)
				DRM_ERROR("BO at index %u already on submit list\n",
					  i);
			if (ret)
				goto fail;
			submit->bos[i].flags |= BO_LOCKED;
		}
	}

	ww_acquire_done(&submit->ticket);

	return 0;

fail:
	for (; i >= 0; i--)
		submit_unlock_object(submit, i);

	if (slow_locked > 0)
		submit_unlock_object(submit, slow_locked);

	if (ret == -EDEADLK) {
		struct etnaviv_gem_object *etnaviv_obj;

		etnaviv_obj = submit->bos[contended].obj;

		/* we lost out in a seqno race, lock and retry.. */
		ret = ww_mutex_lock_slow_interruptible(&etnaviv_obj->resv->lock,
				&submit->ticket);
		if (!ret) {
			submit->bos[contended].flags |= BO_LOCKED;
			slow_locked = contended;
			goto retry;
		}
	}

	return ret;
}

static int submit_fence_sync(const struct etnaviv_gem_submit *submit)
{
	unsigned int context = submit->gpu->fence_context;
	int i, ret = 0;

	for (i = 0; i < submit->nr_bos; i++) {
		struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
		bool write = submit->bos[i].flags & ETNA_SUBMIT_BO_WRITE;

		ret = etnaviv_gpu_fence_sync_obj(etnaviv_obj, context, write);
		if (ret)
			break;
	}

	return ret;
}

static void submit_unpin_objects(struct etnaviv_gem_submit *submit)
{
	int i;

	for (i = 0; i < submit->nr_bos; i++) {
		struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;

		if (submit->bos[i].flags & BO_PINNED)
			etnaviv_gem_put_iova(submit->gpu, &etnaviv_obj->base);

		submit->bos[i].iova = 0;
		submit->bos[i].flags &= ~BO_PINNED;
	}
}

static int submit_pin_objects(struct etnaviv_gem_submit *submit)
{
	int i, ret = 0;

	for (i = 0; i < submit->nr_bos; i++) {
		struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
		u32 iova;

		ret = etnaviv_gem_get_iova(submit->gpu, &etnaviv_obj->base,
					   &iova);
		if (ret)
			break;

		submit->bos[i].flags |= BO_PINNED;
		submit->bos[i].iova = iova;
	}

	return ret;
}

static int submit_bo(struct etnaviv_gem_submit *submit, u32 idx,
		struct etnaviv_gem_object **obj, u32 *iova)
{
	if (idx >= submit->nr_bos) {
		DRM_ERROR("invalid buffer index: %u (out of %u)\n",
				idx, submit->nr_bos);
		return -EINVAL;
	}

	if (obj)
		*obj = submit->bos[idx].obj;
	if (iova)
		*iova = submit->bos[idx].iova;

	return 0;
}

/* process the reloc's and patch up the cmdstream as needed: */
static int submit_reloc(struct etnaviv_gem_submit *submit, void *stream,
		u32 size, const struct drm_etnaviv_gem_submit_reloc *relocs,
		u32 nr_relocs)
{
	u32 i, last_offset = 0;
	u32 *ptr = stream;
	int ret;

	for (i = 0; i < nr_relocs; i++) {
		const struct drm_etnaviv_gem_submit_reloc *r = relocs + i;
		struct etnaviv_gem_object *bobj;
		u32 iova, off;

		if (unlikely(r->flags)) {
			DRM_ERROR("invalid reloc flags\n");
			return -EINVAL;
		}

		if (r->submit_offset % 4) {
			DRM_ERROR("non-aligned reloc offset: %u\n",
				  r->submit_offset);
			return -EINVAL;
		}

		/* offset in dwords: */
		off = r->submit_offset / 4;

		if ((off >= size ) ||
				(off < last_offset)) {
			DRM_ERROR("invalid offset %u at reloc %u\n", off, i);
			return -EINVAL;
		}

		ret = submit_bo(submit, r->reloc_idx, &bobj, &iova);
		if (ret)
			return ret;

		if (r->reloc_offset >=
		    bobj->base.size - sizeof(*ptr)) {
			DRM_ERROR("relocation %u outside object", i);
			return -EINVAL;
		}

		ptr[off] = iova + r->reloc_offset;

		last_offset = off;
	}

	return 0;
}

static void submit_cleanup(struct etnaviv_gem_submit *submit)
{
	unsigned i;

	for (i = 0; i < submit->nr_bos; i++) {
		struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;

		submit_unlock_object(submit, i);
		drm_gem_object_unreference_unlocked(&etnaviv_obj->base);
	}

	ww_acquire_fini(&submit->ticket);
	kfree(submit);
}

int etnaviv_ioctl_gem_submit(struct drm_device *dev, void *data,
		struct drm_file *file)
{
	struct etnaviv_drm_private *priv = dev->dev_private;
	struct drm_etnaviv_gem_submit *args = data;
	struct drm_etnaviv_gem_submit_reloc *relocs;
	struct drm_etnaviv_gem_submit_bo *bos;
	struct etnaviv_gem_submit *submit;
	struct etnaviv_cmdbuf *cmdbuf;
	struct etnaviv_gpu *gpu;
	void *stream;
	int ret;

	if (args->pipe >= ETNA_MAX_PIPES)
		return -EINVAL;

	gpu = priv->gpu[args->pipe];
	if (!gpu)
		return -ENXIO;

	if (args->stream_size % 4) {
		DRM_ERROR("non-aligned cmdstream buffer size: %u\n",
			  args->stream_size);
		return -EINVAL;
	}

	if (args->exec_state != ETNA_PIPE_3D &&
	    args->exec_state != ETNA_PIPE_2D &&
	    args->exec_state != ETNA_PIPE_VG) {
		DRM_ERROR("invalid exec_state: 0x%x\n", args->exec_state);
		return -EINVAL;
	}

	/*
	 * Copy the command submission and bo array to kernel space in
	 * one go, and do this outside of any locks.
	 */
	bos = drm_malloc_ab(args->nr_bos, sizeof(*bos));
	relocs = drm_malloc_ab(args->nr_relocs, sizeof(*relocs));
	stream = drm_malloc_ab(1, args->stream_size);
	cmdbuf = etnaviv_gpu_cmdbuf_new(gpu, ALIGN(args->stream_size, 8) + 8,
					args->nr_bos);
	if (!bos || !relocs || !stream || !cmdbuf) {
		ret = -ENOMEM;
		goto err_submit_cmds;
	}

	cmdbuf->exec_state = args->exec_state;
	cmdbuf->ctx = file->driver_priv;

	ret = copy_from_user(bos, to_user_ptr(args->bos),
			     args->nr_bos * sizeof(*bos));
	if (ret) {
		ret = -EFAULT;
		goto err_submit_cmds;
	}

	ret = copy_from_user(relocs, to_user_ptr(args->relocs),
			     args->nr_relocs * sizeof(*relocs));
	if (ret) {
		ret = -EFAULT;
		goto err_submit_cmds;
	}

	ret = copy_from_user(stream, to_user_ptr(args->stream),
			     args->stream_size);
	if (ret) {
		ret = -EFAULT;
		goto err_submit_cmds;
	}

	submit = submit_create(dev, gpu, args->nr_bos);
	if (!submit) {
		ret = -ENOMEM;
		goto err_submit_cmds;
	}

	ret = submit_lookup_objects(submit, file, bos, args->nr_bos);
	if (ret)
		goto err_submit_objects;

	ret = submit_lock_objects(submit);
	if (ret)
		goto err_submit_objects;

	if (!etnaviv_cmd_validate_one(gpu, stream, args->stream_size / 4,
				      relocs, args->nr_relocs)) {
		ret = -EINVAL;
		goto err_submit_objects;
	}

	ret = submit_fence_sync(submit);
	if (ret)
		goto err_submit_objects;

	ret = submit_pin_objects(submit);
	if (ret)
		goto out;

	ret = submit_reloc(submit, stream, args->stream_size / 4,
			   relocs, args->nr_relocs);
	if (ret)
		goto out;

	memcpy(cmdbuf->vaddr, stream, args->stream_size);
	cmdbuf->user_size = ALIGN(args->stream_size, 8);

	ret = etnaviv_gpu_submit(gpu, submit, cmdbuf);
	if (ret == 0)
		cmdbuf = NULL;

	args->fence = submit->fence;

out:
	submit_unpin_objects(submit);

	/*
	 * If we're returning -EAGAIN, it may be due to the userptr code
	 * wanting to run its workqueue outside of any locks. Flush our
	 * workqueue to ensure that it is run in a timely manner.
	 */
	if (ret == -EAGAIN)
		flush_workqueue(priv->wq);

err_submit_objects:
	submit_cleanup(submit);

err_submit_cmds:
	/* if we still own the cmdbuf */
	if (cmdbuf)
		etnaviv_gpu_cmdbuf_free(cmdbuf);
	if (stream)
		drm_free_large(stream);
	if (bos)
		drm_free_large(bos);
	if (relocs)
		drm_free_large(relocs);

	return ret;
}
Commit	Line	Data
a8c21a54 T	1	/*
	2	* Copyright (C) 2015 Etnaviv Project
	3	*
	4	* This program is free software; you can redistribute it and/or modify it
	5	* under the terms of the GNU General Public License version 2 as published by
	6	* the Free Software Foundation.
	7	*
	8	* This program is distributed in the hope that it will be useful, but WITHOUT
	9	* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
	10	* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
	11	* more details.
	12	*
	13	* You should have received a copy of the GNU General Public License along with
	14	* this program. If not, see <http://www.gnu.org/licenses/>.
	15	*/
	16
	17	#include <linux/reservation.h>
	18	#include "etnaviv_drv.h"
	19	#include "etnaviv_gpu.h"
	20	#include "etnaviv_gem.h"
	21
	22	/*
	23	* Cmdstream submission:
	24	*/
	25
	26	#define BO_INVALID_FLAGS ~(ETNA_SUBMIT_BO_READ \| ETNA_SUBMIT_BO_WRITE)
	27	/* make sure these don't conflict w/ ETNAVIV_SUBMIT_BO_x */
	28	#define BO_LOCKED 0x4000
	29	#define BO_PINNED 0x2000
	30
	31	static inline void __user *to_user_ptr(u64 address)
	32	{
	33	return (void __user *)(uintptr_t)address;
	34	}
	35
	36	static struct etnaviv_gem_submit submit_create(struct drm_device dev,
	37	struct etnaviv_gpu *gpu, size_t nr)
	38	{
	39	struct etnaviv_gem_submit *submit;
	40	size_t sz = size_vstruct(nr, sizeof(submit->bos[0]), sizeof(*submit));
	41
	42	submit = kmalloc(sz, GFP_TEMPORARY \| __GFP_NOWARN \| __GFP_NORETRY);
	43	if (submit) {
	44	submit->dev = dev;
	45	submit->gpu = gpu;
	46
	47	/* initially, until copy_from_user() and bo lookup succeeds: */
	48	submit->nr_bos = 0;
	49
	50	ww_acquire_init(&submit->ticket, &reservation_ww_class);
	51	}
	52
	53	return submit;
	54	}
	55
	56	static int submit_lookup_objects(struct etnaviv_gem_submit *submit,
	57	struct drm_file file, struct drm_etnaviv_gem_submit_bo submit_bos,
	58	unsigned nr_bos)
	59	{
	60	struct drm_etnaviv_gem_submit_bo *bo;
	61	unsigned i;
	62	int ret = 0;
	63
	64	spin_lock(&file->table_lock);
65
66	for (i = 0, bo = submit_bos; i < nr_bos; i++, bo++) {
67	struct drm_gem_object *obj;
68
69	if (bo->flags & BO_INVALID_FLAGS) {
70	DRM_ERROR("invalid flags: %x\n", bo->flags);
71	ret = -EINVAL;
72	goto out_unlock;
73	}
74
75	submit->bos[i].flags = bo->flags;
76
77	/* normally use drm_gem_object_lookup(), but for bulk lookup
78	* all under single table_lock just hit object_idr directly:
79	*/
80	obj = idr_find(&file->object_idr, bo->handle);
81	if (!obj) {
82	DRM_ERROR("invalid handle %u at index %u\n",
83	bo->handle, i);
84	ret = -EINVAL;
85	goto out_unlock;
86	}
87
88	/*
89	* Take a refcount on the object. The file table lock
90	* prevents the object_idr's refcount on this being dropped.
91	*/
92	drm_gem_object_reference(obj);
93
94	submit->bos[i].obj = to_etnaviv_bo(obj);
95	}
96
97	out_unlock:
98	submit->nr_bos = i;
99	spin_unlock(&file->table_lock);
100
101	return ret;
102	}
103
104	static void submit_unlock_object(struct etnaviv_gem_submit *submit, int i)
105	{
106	if (submit->bos[i].flags & BO_LOCKED) {
107	struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
108
109	ww_mutex_unlock(&etnaviv_obj->resv->lock);
110	submit->bos[i].flags &= ~BO_LOCKED;
111	}
112	}
113
114	static int submit_lock_objects(struct etnaviv_gem_submit *submit)
115	{
116	int contended, slow_locked = -1, i, ret = 0;
117
118	retry:
119	for (i = 0; i < submit->nr_bos; i++) {
120	struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
121
122	if (slow_locked == i)
123	slow_locked = -1;
124
125	contended = i;
126
127	if (!(submit->bos[i].flags & BO_LOCKED)) {
128	ret = ww_mutex_lock_interruptible(&etnaviv_obj->resv->lock,
129	&submit->ticket);
130	if (ret == -EALREADY)
131	DRM_ERROR("BO at index %u already on submit list\n",
132	i);
133	if (ret)
134	goto fail;
135	submit->bos[i].flags \|= BO_LOCKED;
136	}
137	}
138
139	ww_acquire_done(&submit->ticket);
140
141	return 0;
142
143	fail:
144	for (; i >= 0; i--)
145	submit_unlock_object(submit, i);
146
147	if (slow_locked > 0)
148	submit_unlock_object(submit, slow_locked);
149
150	if (ret == -EDEADLK) {
151	struct etnaviv_gem_object *etnaviv_obj;
152
153	etnaviv_obj = submit->bos[contended].obj;
154
155	/* we lost out in a seqno race, lock and retry.. */
156	ret = ww_mutex_lock_slow_interruptible(&etnaviv_obj->resv->lock,
157	&submit->ticket);
158	if (!ret) {
159	submit->bos[contended].flags \|= BO_LOCKED;
160	slow_locked = contended;
161	goto retry;
162	}
163	}
164
165	return ret;
166	}
167
168	static int submit_fence_sync(const struct etnaviv_gem_submit *submit)
169	{
170	unsigned int context = submit->gpu->fence_context;
171	int i, ret = 0;
172
173	for (i = 0; i < submit->nr_bos; i++) {
174	struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
175	bool write = submit->bos[i].flags & ETNA_SUBMIT_BO_WRITE;
176
177	ret = etnaviv_gpu_fence_sync_obj(etnaviv_obj, context, write);
178	if (ret)
179	break;
180	}
181
182	return ret;
183	}
184
185	static void submit_unpin_objects(struct etnaviv_gem_submit *submit)
186	{
187	int i;
188
189	for (i = 0; i < submit->nr_bos; i++) {
190	struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
191
192	if (submit->bos[i].flags & BO_PINNED)
193	etnaviv_gem_put_iova(submit->gpu, &etnaviv_obj->base);
194
195	submit->bos[i].iova = 0;
196	submit->bos[i].flags &= ~BO_PINNED;
197	}
198	}
199
200	static int submit_pin_objects(struct etnaviv_gem_submit *submit)
201	{
202	int i, ret = 0;
203
204	for (i = 0; i < submit->nr_bos; i++) {
205	struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
206	u32 iova;
207
208	ret = etnaviv_gem_get_iova(submit->gpu, &etnaviv_obj->base,
209	&iova);
210	if (ret)
211	break;
212
213	submit->bos[i].flags \|= BO_PINNED;
214	submit->bos[i].iova = iova;
215	}
216
217	return ret;
218	}
219
220	static int submit_bo(struct etnaviv_gem_submit *submit, u32 idx,
221	struct etnaviv_gem_object *obj, u32 iova)
222	{
223	if (idx >= submit->nr_bos) {
224	DRM_ERROR("invalid buffer index: %u (out of %u)\n",
225	idx, submit->nr_bos);
226	return -EINVAL;
227	}
228
229	if (obj)
230	*obj = submit->bos[idx].obj;
231	if (iova)
232	*iova = submit->bos[idx].iova;
233
234	return 0;
235	}
236
237	/* process the reloc's and patch up the cmdstream as needed: */
238	static int submit_reloc(struct etnaviv_gem_submit submit, void stream,
239	u32 size, const struct drm_etnaviv_gem_submit_reloc *relocs,
240	u32 nr_relocs)
241	{
242	u32 i, last_offset = 0;
243	u32 *ptr = stream;
244	int ret;
245
246	for (i = 0; i < nr_relocs; i++) {
247	const struct drm_etnaviv_gem_submit_reloc *r = relocs + i;
248	struct etnaviv_gem_object *bobj;
249	u32 iova, off;
250
251	if (unlikely(r->flags)) {
252	DRM_ERROR("invalid reloc flags\n");
253	return -EINVAL;
254	}
255
256	if (r->submit_offset % 4) {
257	DRM_ERROR("non-aligned reloc offset: %u\n",
258	r->submit_offset);
259	return -EINVAL;
260	}
261
262	/* offset in dwords: */
263	off = r->submit_offset / 4;
264
265	if ((off >= size ) \|\|
266	(off < last_offset)) {
267	DRM_ERROR("invalid offset %u at reloc %u\n", off, i);
268	return -EINVAL;
269	}
270
271	ret = submit_bo(submit, r->reloc_idx, &bobj, &iova);
272	if (ret)
273	return ret;
274
275	if (r->reloc_offset >=
276	bobj->base.size - sizeof(*ptr)) {
277	DRM_ERROR("relocation %u outside object", i);
278	return -EINVAL;
279	}
280
281	ptr[off] = iova + r->reloc_offset;
282
283	last_offset = off;
284	}
285
286	return 0;
287	}
288
289	static void submit_cleanup(struct etnaviv_gem_submit *submit)
290	{
291	unsigned i;
292
293	for (i = 0; i < submit->nr_bos; i++) {
294	struct etnaviv_gem_object *etnaviv_obj = submit->bos[i].obj;
295
296	submit_unlock_object(submit, i);
297	drm_gem_object_unreference_unlocked(&etnaviv_obj->base);
298	}
299
300	ww_acquire_fini(&submit->ticket);
301	kfree(submit);
302	}
303
304	int etnaviv_ioctl_gem_submit(struct drm_device dev, void data,
305	struct drm_file *file)
306	{
307	struct etnaviv_drm_private *priv = dev->dev_private;
308	struct drm_etnaviv_gem_submit *args = data;
309	struct drm_etnaviv_gem_submit_reloc *relocs;
310	struct drm_etnaviv_gem_submit_bo *bos;
311	struct etnaviv_gem_submit *submit;
312	struct etnaviv_cmdbuf *cmdbuf;
313	struct etnaviv_gpu *gpu;
314	void *stream;
315	int ret;
316
317	if (args->pipe >= ETNA_MAX_PIPES)
318	return -EINVAL;
319
320	gpu = priv->gpu[args->pipe];
321	if (!gpu)
322	return -ENXIO;
323
324	if (args->stream_size % 4) {
325	DRM_ERROR("non-aligned cmdstream buffer size: %u\n",
326	args->stream_size);
327	return -EINVAL;
328	}
329
330	if (args->exec_state != ETNA_PIPE_3D &&
331	args->exec_state != ETNA_PIPE_2D &&
332	args->exec_state != ETNA_PIPE_VG) {
333	DRM_ERROR("invalid exec_state: 0x%x\n", args->exec_state);
334	return -EINVAL;
335	}
336
337	/*
338	* Copy the command submission and bo array to kernel space in
339	* one go, and do this outside of any locks.
340	*/
341	bos = drm_malloc_ab(args->nr_bos, sizeof(*bos));
342	relocs = drm_malloc_ab(args->nr_relocs, sizeof(*relocs));
343	stream = drm_malloc_ab(1, args->stream_size);
344	cmdbuf = etnaviv_gpu_cmdbuf_new(gpu, ALIGN(args->stream_size, 8) + 8,
345	args->nr_bos);
346	if (!bos \|\| !relocs \|\| !stream \|\| !cmdbuf) {
347	ret = -ENOMEM;
348	goto err_submit_cmds;
349	}
350
351	cmdbuf->exec_state = args->exec_state;
352	cmdbuf->ctx = file->driver_priv;
353
354	ret = copy_from_user(bos, to_user_ptr(args->bos),
355	args->nr_bos * sizeof(*bos));
356	if (ret) {
357	ret = -EFAULT;
358	goto err_submit_cmds;
359	}
360
361	ret = copy_from_user(relocs, to_user_ptr(args->relocs),
362	args->nr_relocs * sizeof(*relocs));
363	if (ret) {
364	ret = -EFAULT;
365	goto err_submit_cmds;
366	}
367
368	ret = copy_from_user(stream, to_user_ptr(args->stream),
369	args->stream_size);
370	if (ret) {
371	ret = -EFAULT;
372	goto err_submit_cmds;
373	}
374
375	submit = submit_create(dev, gpu, args->nr_bos);
376	if (!submit) {
377	ret = -ENOMEM;
378	goto err_submit_cmds;
379	}
380
381	ret = submit_lookup_objects(submit, file, bos, args->nr_bos);
382	if (ret)
383	goto err_submit_objects;
384
385	ret = submit_lock_objects(submit);
386	if (ret)
387	goto err_submit_objects;
388
389	if (!etnaviv_cmd_validate_one(gpu, stream, args->stream_size / 4,
390	relocs, args->nr_relocs)) {
391	ret = -EINVAL;
392	goto err_submit_objects;
393	}
394
395	ret = submit_fence_sync(submit);
396	if (ret)
397	goto err_submit_objects;
398
399	ret = submit_pin_objects(submit);
400	if (ret)
401	goto out;
402
403	ret = submit_reloc(submit, stream, args->stream_size / 4,
404	relocs, args->nr_relocs);
405	if (ret)
406	goto out;
407
408	memcpy(cmdbuf->vaddr, stream, args->stream_size);
409	cmdbuf->user_size = ALIGN(args->stream_size, 8);
410
411	ret = etnaviv_gpu_submit(gpu, submit, cmdbuf);
412	if (ret == 0)
413	cmdbuf = NULL;
414
415	args->fence = submit->fence;
416
417	out:
418	submit_unpin_objects(submit);
419
420	/*
421	* If we're returning -EAGAIN, it may be due to the userptr code
422	* wanting to run its workqueue outside of any locks. Flush our
423	* workqueue to ensure that it is run in a timely manner.
424	*/
425	if (ret == -EAGAIN)
426	flush_workqueue(priv->wq);
427
428	err_submit_objects:
429	submit_cleanup(submit);
430
431	err_submit_cmds:
432	/* if we still own the cmdbuf */
433	if (cmdbuf)
434	etnaviv_gpu_cmdbuf_free(cmdbuf);
435	if (stream)
436	drm_free_large(stream);
437	if (bos)
438	drm_free_large(bos);
439	if (relocs)
440	drm_free_large(relocs);
441
442	return ret;
443	}