From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mgamail.intel.com (mgamail.intel.com [198.175.65.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id F40AF22A819 for ; Thu, 16 Jan 2025 14:40:02 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.175.65.13 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1737038404; cv=none; b=AlU7X02i/Xda9TN0QlutkyTM4NJnjh2WOUMOZK62Qfz6q74qQ37u0fOyiaL3Wb+aRzsKQPtuMMDR3Uc8X7z3E2PZwZN5noIG8JejHy3OqwNFh91hF6Ndul96gjFC7+QtKr47JSdVAsljC57aFSCzsocul0WryfOxhQFZ/83pR1Q= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1737038404; c=relaxed/simple; bh=sSMUcfxWe8QTJ1YAvXGZJC+o+Hw5k0mD5k+2Ts9sdqQ=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=MmzpyzddtNfu/DT9Vsju3bRYbjcMyx0wfrjAnoNrH7lylWvbbsAEXsdbJBkt45GNwIytR0IMm8UT85oVY9C0NWDrVYXcAioS7oIHr4YQm2ibba5TFlvTOGC7Lg8OrNOF3MzHvnI6mFqfbeCJFyB0dvk7xXZ+m/H4HyHEs07Nevg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.intel.com; spf=none smtp.mailfrom=linux.intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=KfBDz4Vt; arc=none smtp.client-ip=198.175.65.13 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.intel.com Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=linux.intel.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="KfBDz4Vt" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1737038403; x=1768574403; h=date:from:to:cc:subject:message-id:references: mime-version:content-transfer-encoding:in-reply-to; bh=sSMUcfxWe8QTJ1YAvXGZJC+o+Hw5k0mD5k+2Ts9sdqQ=; b=KfBDz4VtgDo1/r8nWrVcybMpdgQE703hngPfENOUBMINKMMYuuY4e3Xo w0fqXGXtCxXcOJqlblvBFViSLCF91YpFmLg/rDOQrrcDLHyA0YrQUfpWp 6w83qu3E55IEoENMU8lB8ZYfVCy2xPA4WhBlRecgoiwY5ePr/aJf9W+R9 guXJj1fngAo8rh4uKIvfB2QrlMnEdYZsqNYy6XFJFcjOnd+22QMmKRZaO APJVcetsOLNmMqgDmgxCA8cgDo89vNPLeY2PEu918lrbVy1e0yyhbHyGF 2crSVLtrWsdL5X2fxA5PpysIYjtIlgGPsxjjtJw3XZGGL9kByx29BuTSs A==; X-CSE-ConnectionGUID: DwnmQNMjQdm9kQfzkwhD8w== X-CSE-MsgGUID: z0ZJahUMT7WJlq8EQFqt/Q== X-IronPort-AV: E=McAfee;i="6700,10204,11317"; a="48426880" X-IronPort-AV: E=Sophos;i="6.13,209,1732608000"; d="scan'208";a="48426880" Received: from fmviesa008.fm.intel.com ([10.60.135.148]) by orvoesa105.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 16 Jan 2025 06:40:03 -0800 X-CSE-ConnectionGUID: UtsjycX6T46YgMfiVpLaSw== X-CSE-MsgGUID: Nl6/SKjLQqSluqoYmjWnnQ== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.13,209,1732608000"; d="scan'208";a="105664532" Received: from stinkpipe.fi.intel.com (HELO stinkbox) ([10.237.72.74]) by fmviesa008.fm.intel.com with SMTP; 16 Jan 2025 06:39:58 -0800 Received: by stinkbox (sSMTP sendmail emulation); Thu, 16 Jan 2025 16:39:57 +0200 Date: Thu, 16 Jan 2025 16:39:57 +0200 From: Ville =?iso-8859-1?Q?Syrj=E4l=E4?= To: Brian Geffon Cc: intel-gfx@lists.freedesktop.org, chris.p.wilson@intel.com, jani.saarinen@intel.com, tomasz.mistat@intel.com, vidya.srinivas@intel.com, jani.nikula@linux.intel.com, linux-kernel@vger.kernel.org, dri-devel@lists.freedesktop.org, Joonas Lahtinen , Tomasz Figa Subject: Re: [PATCH] drm/i915: Fix page cleanup on DMA remap failure Message-ID: References: <20250116135636.410164-1-bgeffon@google.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-Patchwork-Hint: comment On Thu, Jan 16, 2025 at 09:36:42AM -0500, Brian Geffon wrote: > On Thu, Jan 16, 2025 at 9:24 AM Ville Syrjälä > wrote: > > > > On Thu, Jan 16, 2025 at 08:56:36AM -0500, Brian Geffon wrote: > > > When converting to folios the cleanup path of shmem_get_pages() was > > > missed. When a DMA remap fails and the max segment size is greater than > > > PAGE_SIZE it will attempt to retry the remap with a PAGE_SIZEd segment > > > size. The cleanup code isn't properly using the folio apis and as a > > > result isn't handling compound pages correctly. > > > > > > Link: https://gitlab.freedesktop.org/drm/i915/kernel/-/issues/13487 > > > Fixes: 0b62af28f249 ("i915: convert shmem_sg_free_table() to use a folio_batch") > > > Signed-off-by: Brian Geffon > > > Suggested-by: Tomasz Figa > > > --- > > > drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 13 +++++-------- > > > 1 file changed, 5 insertions(+), 8 deletions(-) > > > > > > diff --git a/drivers/gpu/drm/i915/gem/i915_gem_shmem.c b/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > > > index fe69f2c8527d..02ddab5bf5c0 100644 > > > --- a/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > > > +++ b/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > > > @@ -37,8 +37,6 @@ void shmem_sg_free_table(struct sg_table *st, struct address_space *mapping, > > > struct folio *last = NULL; > > > struct page *page; > > > > > > - mapping_clear_unevictable(mapping); > > > - > > > > The assymmetry here between the alloc vs. free is a bit annoying. > > Maybe we can just keep this here? > > If you want, I think this can also be fixed by something like the > following I believe. > Ultimately we don't want to put page on non-head pages in a compound > page. What do you think? If you like this better I can test and mail a v2. I think having it all in one place would be nicer, if only to avoid similar oversights in the future. > > diff --git a/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > b/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > index fe69f2c8527d..b79cd396e878 100644 > --- a/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > +++ b/drivers/gpu/drm/i915/gem/i915_gem_shmem.c > @@ -239,8 +239,14 @@ static int shmem_get_pages(struct drm_i915_gem_object *obj) > * for PAGE_SIZE chunks instead may be helpful. > */ > if (max_segment > PAGE_SIZE) { > - for_each_sgt_page(page, sgt_iter, st) > + struct folio *last = NULL; > + for_each_sgt_page(page, sgt_iter, st) { > + struct folio *folio = page_folio(page); > + if (folio == last) > + continue; > + last = folio; > put_page(page); > + } > sg_free_table(st); > kfree(st); > > > -- > 2.48.0.rc2.279.g1de40edade-goog > > > > > > Or if avoiding the ping-pong actually mattes in the gtt prepare > > error case, then maybe we should rename this guy into > > __shmem_sg_free_table() without the mapping_clear_unevictable() > > and wrap it in a higher level shmem_sg_free_table() that does > > everything? > > > > > folio_batch_init(&fbatch); > > > for_each_sgt_page(page, sgt_iter, st) { > > > struct folio *folio = page_folio(page); > > > @@ -180,10 +178,10 @@ int shmem_sg_alloc_table(struct drm_i915_private *i915, struct sg_table *st, > > > return 0; > > > err_sg: > > > sg_mark_end(sg); > > > + mapping_clear_unevictable(mapping); > > > if (sg != st->sgl) { > > > shmem_sg_free_table(st, mapping, false, false); > > > } else { > > > - mapping_clear_unevictable(mapping); > > > sg_free_table(st); > > > } > > > > > > @@ -209,8 +207,6 @@ static int shmem_get_pages(struct drm_i915_gem_object *obj) > > > struct address_space *mapping = obj->base.filp->f_mapping; > > > unsigned int max_segment = i915_sg_segment_size(i915->drm.dev); > > > struct sg_table *st; > > > - struct sgt_iter sgt_iter; > > > - struct page *page; > > > int ret; > > > > > > /* > > > @@ -239,9 +235,8 @@ static int shmem_get_pages(struct drm_i915_gem_object *obj) > > > * for PAGE_SIZE chunks instead may be helpful. > > > */ > > > if (max_segment > PAGE_SIZE) { > > > - for_each_sgt_page(page, sgt_iter, st) > > > - put_page(page); > > > - sg_free_table(st); > > > + /* Leave the mapping unevictable while we retry */ > > > + shmem_sg_free_table(st, mapping, false, false); > > > kfree(st); > > > > > > max_segment = PAGE_SIZE; > > > @@ -265,6 +260,7 @@ static int shmem_get_pages(struct drm_i915_gem_object *obj) > > > return 0; > > > > > > err_pages: > > > + mapping_clear_unevictable(mapping); > > > shmem_sg_free_table(st, mapping, false, false); > > > /* > > > * shmemfs first checks if there is enough memory to allocate the page > > > @@ -402,6 +398,7 @@ void i915_gem_object_put_pages_shmem(struct drm_i915_gem_object *obj, struct sg_ > > > if (i915_gem_object_needs_bit17_swizzle(obj)) > > > i915_gem_object_save_bit_17_swizzle(obj, pages); > > > > > > + mapping_clear_unevictable(file_inode(obj->base.filp)->i_mapping); > > > shmem_sg_free_table(pages, file_inode(obj->base.filp)->i_mapping, > > > obj->mm.dirty, obj->mm.madv == I915_MADV_WILLNEED); > > > kfree(pages); > > > -- > > > 2.48.0.rc2.279.g1de40edade-goog > > > > -- > > Ville Syrjälä > > Intel -- Ville Syrjälä Intel