armbian-build/patch/kernel/archive/wsl2-arm64-6.1/1703-drivers-hv-dxgkrnl-Fix...

392 lines
12 KiB
Diff

From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
From: Iouri Tarassov <iourit@linux.microsoft.com>
Date: Mon, 13 Jun 2022 14:18:10 -0700
Subject: drivers: hv: dxgkrnl: Fix synchronization locks
Signed-off-by: Iouri Tarassov <iourit@linux.microsoft.com>
[kms: Forward port to v6.1]
Signed-off-by: Kelsey Steele <kelseysteele@microsoft.com>
---
drivers/hv/dxgkrnl/dxgadapter.c | 19 ++-
drivers/hv/dxgkrnl/dxgkrnl.h | 8 +-
drivers/hv/dxgkrnl/dxgmodule.c | 3 +-
drivers/hv/dxgkrnl/dxgprocess.c | 11 +-
drivers/hv/dxgkrnl/dxgvmbus.c | 85 +++++++---
drivers/hv/dxgkrnl/ioctl.c | 24 ++-
drivers/hv/dxgkrnl/misc.h | 1 +
7 files changed, 101 insertions(+), 50 deletions(-)
diff --git a/drivers/hv/dxgkrnl/dxgadapter.c b/drivers/hv/dxgkrnl/dxgadapter.c
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/dxgadapter.c
+++ b/drivers/hv/dxgkrnl/dxgadapter.c
@@ -136,7 +136,7 @@ void dxgadapter_release(struct kref *refcount)
struct dxgadapter *adapter;
adapter = container_of(refcount, struct dxgadapter, adapter_kref);
- DXG_TRACE("%p", adapter);
+ DXG_TRACE("Destroying adapter: %px", adapter);
kfree(adapter);
}
@@ -270,6 +270,8 @@ struct dxgdevice *dxgdevice_create(struct dxgadapter *adapter,
if (ret < 0) {
kref_put(&device->device_kref, dxgdevice_release);
device = NULL;
+ } else {
+ DXG_TRACE("dxgdevice created: %px", device);
}
}
return device;
@@ -413,11 +415,8 @@ void dxgdevice_destroy(struct dxgdevice *device)
cleanup:
- if (device->adapter) {
+ if (device->adapter)
dxgprocess_adapter_remove_device(device);
- kref_put(&device->adapter->adapter_kref, dxgadapter_release);
- device->adapter = NULL;
- }
up_write(&device->device_lock);
@@ -721,6 +720,8 @@ void dxgdevice_release(struct kref *refcount)
struct dxgdevice *device;
device = container_of(refcount, struct dxgdevice, device_kref);
+ DXG_TRACE("Destroying device: %px", device);
+ kref_put(&device->adapter->adapter_kref, dxgadapter_release);
kfree(device);
}
@@ -999,6 +1000,9 @@ void dxgpagingqueue_destroy(struct dxgpagingqueue *pqueue)
kfree(pqueue);
}
+/*
+ * Process_adapter_mutex is held.
+ */
struct dxgprocess_adapter *dxgprocess_adapter_create(struct dxgprocess *process,
struct dxgadapter *adapter)
{
@@ -1108,7 +1112,7 @@ int dxgprocess_adapter_add_device(struct dxgprocess *process,
void dxgprocess_adapter_remove_device(struct dxgdevice *device)
{
- DXG_TRACE("Removing device: %p", device);
+ DXG_TRACE("Removing device: %px", device);
mutex_lock(&device->adapter_info->device_list_mutex);
if (device->device_list_entry.next) {
list_del(&device->device_list_entry);
@@ -1147,8 +1151,7 @@ void dxgsharedsyncobj_release(struct kref *refcount)
if (syncobj->adapter) {
dxgadapter_remove_shared_syncobj(syncobj->adapter,
syncobj);
- kref_put(&syncobj->adapter->adapter_kref,
- dxgadapter_release);
+ kref_put(&syncobj->adapter->adapter_kref, dxgadapter_release);
}
kfree(syncobj);
}
diff --git a/drivers/hv/dxgkrnl/dxgkrnl.h b/drivers/hv/dxgkrnl/dxgkrnl.h
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/dxgkrnl.h
+++ b/drivers/hv/dxgkrnl/dxgkrnl.h
@@ -404,7 +404,10 @@ struct dxgprocess {
/* Handle of the corresponding objec on the host */
struct d3dkmthandle host_handle;
- /* List of opened adapters (dxgprocess_adapter) */
+ /*
+ * List of opened adapters (dxgprocess_adapter).
+ * Protected by process_adapter_mutex.
+ */
struct list_head process_adapter_list_head;
};
@@ -451,6 +454,8 @@ enum dxgadapter_state {
struct dxgadapter {
struct rw_semaphore core_lock;
struct kref adapter_kref;
+ /* Protects creation and destruction of dxgdevice objects */
+ struct mutex device_creation_lock;
/* Entry in the list of adapters in dxgglobal */
struct list_head adapter_list_entry;
/* The list of dxgprocess_adapter entries */
@@ -997,6 +1002,7 @@ void dxgk_validate_ioctls(void);
#define DXG_TRACE(fmt, ...) do { \
trace_printk(dev_fmt(fmt) "\n", ##__VA_ARGS__); \
+ dev_dbg(DXGDEV, "%s: " fmt, __func__, ##__VA_ARGS__); \
} while (0)
#define DXG_ERR(fmt, ...) do { \
diff --git a/drivers/hv/dxgkrnl/dxgmodule.c b/drivers/hv/dxgkrnl/dxgmodule.c
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/dxgmodule.c
+++ b/drivers/hv/dxgkrnl/dxgmodule.c
@@ -272,6 +272,7 @@ int dxgglobal_create_adapter(struct pci_dev *dev, guid_t *guid,
adapter->host_vgpu_luid = host_vgpu_luid;
kref_init(&adapter->adapter_kref);
init_rwsem(&adapter->core_lock);
+ mutex_init(&adapter->device_creation_lock);
INIT_LIST_HEAD(&adapter->adapter_process_list_head);
INIT_LIST_HEAD(&adapter->shared_resource_list_head);
@@ -961,4 +962,4 @@ module_exit(dxg_drv_exit);
MODULE_LICENSE("GPL");
MODULE_DESCRIPTION("Microsoft Dxgkrnl virtual compute device Driver");
-MODULE_VERSION("2.0.0");
+MODULE_VERSION("2.0.1");
diff --git a/drivers/hv/dxgkrnl/dxgprocess.c b/drivers/hv/dxgkrnl/dxgprocess.c
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/dxgprocess.c
+++ b/drivers/hv/dxgkrnl/dxgprocess.c
@@ -214,14 +214,15 @@ int dxgprocess_close_adapter(struct dxgprocess *process,
hmgrtable_unlock(&process->local_handle_table, DXGLOCK_EXCL);
if (adapter) {
+ mutex_lock(&adapter->device_creation_lock);
+ dxgglobal_acquire_process_adapter_lock();
adapter_info = dxgprocess_get_adapter_info(process, adapter);
- if (adapter_info) {
- dxgglobal_acquire_process_adapter_lock();
+ if (adapter_info)
dxgprocess_adapter_release(adapter_info);
- dxgglobal_release_process_adapter_lock();
- } else {
+ else
ret = -EINVAL;
- }
+ dxgglobal_release_process_adapter_lock();
+ mutex_unlock(&adapter->device_creation_lock);
} else {
DXG_ERR("Adapter not found %x", handle.v);
ret = -EINVAL;
diff --git a/drivers/hv/dxgkrnl/dxgvmbus.c b/drivers/hv/dxgkrnl/dxgvmbus.c
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/dxgvmbus.c
+++ b/drivers/hv/dxgkrnl/dxgvmbus.c
@@ -1573,8 +1573,27 @@ process_allocation_handles(struct dxgprocess *process,
struct dxgresource *resource)
{
int ret = 0;
- int i;
+ int i = 0;
+ int k;
+ struct dxgkvmb_command_allocinfo_return *host_alloc;
+ /*
+ * Assign handle to the internal objects, so VM bus messages will be
+ * sent to the host to free them during object destruction.
+ */
+ if (args->flags.create_resource)
+ resource->handle = res->resource;
+ for (i = 0; i < args->alloc_count; i++) {
+ host_alloc = &res->allocation_info[i];
+ dxgalloc[i]->alloc_handle = host_alloc->allocation;
+ }
+
+ /*
+ * Assign handle to the handle table.
+ * In case of a failure all handles should be freed.
+ * When the function returns, the objects could be destroyed by
+ * handle immediately.
+ */
hmgrtable_lock(&process->handle_table, DXGLOCK_EXCL);
if (args->flags.create_resource) {
ret = hmgrtable_assign_handle(&process->handle_table, resource,
@@ -1583,14 +1602,12 @@ process_allocation_handles(struct dxgprocess *process,
if (ret < 0) {
DXG_ERR("failed to assign resource handle %x",
res->resource.v);
+ goto cleanup;
} else {
- resource->handle = res->resource;
resource->handle_valid = 1;
}
}
for (i = 0; i < args->alloc_count; i++) {
- struct dxgkvmb_command_allocinfo_return *host_alloc;
-
host_alloc = &res->allocation_info[i];
ret = hmgrtable_assign_handle(&process->handle_table,
dxgalloc[i],
@@ -1602,9 +1619,26 @@ process_allocation_handles(struct dxgprocess *process,
args->alloc_count, i);
break;
}
- dxgalloc[i]->alloc_handle = host_alloc->allocation;
dxgalloc[i]->handle_valid = 1;
}
+ if (ret < 0) {
+ if (args->flags.create_resource) {
+ hmgrtable_free_handle(&process->handle_table,
+ HMGRENTRY_TYPE_DXGRESOURCE,
+ res->resource);
+ resource->handle_valid = 0;
+ }
+ for (k = 0; k < i; k++) {
+ host_alloc = &res->allocation_info[i];
+ hmgrtable_free_handle(&process->handle_table,
+ HMGRENTRY_TYPE_DXGALLOCATION,
+ host_alloc->allocation);
+ dxgalloc[i]->handle_valid = 0;
+ }
+ }
+
+cleanup:
+
hmgrtable_unlock(&process->handle_table, DXGLOCK_EXCL);
if (ret)
@@ -1705,18 +1739,17 @@ create_local_allocations(struct dxgprocess *process,
}
}
- ret = process_allocation_handles(process, device, args, result,
- dxgalloc, resource);
- if (ret < 0)
- goto cleanup;
-
ret = copy_to_user(&input_args->global_share, &args->global_share,
sizeof(struct d3dkmthandle));
if (ret) {
DXG_ERR("failed to copy global share");
ret = -EFAULT;
+ goto cleanup;
}
+ ret = process_allocation_handles(process, device, args, result,
+ dxgalloc, resource);
+
cleanup:
if (ret < 0) {
@@ -3576,22 +3609,6 @@ int dxgvmb_send_create_hwqueue(struct dxgprocess *process,
goto cleanup;
}
- ret = hmgrtable_assign_handle_safe(&process->handle_table, hwqueue,
- HMGRENTRY_TYPE_DXGHWQUEUE,
- command->hwqueue);
- if (ret < 0)
- goto cleanup;
-
- ret = hmgrtable_assign_handle_safe(&process->handle_table,
- NULL,
- HMGRENTRY_TYPE_MONITOREDFENCE,
- command->hwqueue_progress_fence);
- if (ret < 0)
- goto cleanup;
-
- hwqueue->handle = command->hwqueue;
- hwqueue->progress_fence_sync_object = command->hwqueue_progress_fence;
-
hwqueue->progress_fence_mapped_address =
dxg_map_iospace((u64)command->hwqueue_progress_fence_cpuva,
PAGE_SIZE, PROT_READ | PROT_WRITE, true);
@@ -3641,6 +3658,22 @@ int dxgvmb_send_create_hwqueue(struct dxgprocess *process,
}
}
+ ret = hmgrtable_assign_handle_safe(&process->handle_table,
+ NULL,
+ HMGRENTRY_TYPE_MONITOREDFENCE,
+ command->hwqueue_progress_fence);
+ if (ret < 0)
+ goto cleanup;
+
+ hwqueue->progress_fence_sync_object = command->hwqueue_progress_fence;
+ hwqueue->handle = command->hwqueue;
+
+ ret = hmgrtable_assign_handle_safe(&process->handle_table, hwqueue,
+ HMGRENTRY_TYPE_DXGHWQUEUE,
+ command->hwqueue);
+ if (ret < 0)
+ hwqueue->handle.v = 0;
+
cleanup:
if (ret < 0) {
DXG_ERR("failed %x", ret);
diff --git a/drivers/hv/dxgkrnl/ioctl.c b/drivers/hv/dxgkrnl/ioctl.c
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/ioctl.c
+++ b/drivers/hv/dxgkrnl/ioctl.c
@@ -636,6 +636,7 @@ dxgkio_create_device(struct dxgprocess *process, void *__user inargs)
struct dxgdevice *device = NULL;
struct d3dkmthandle host_device_handle = {};
bool adapter_locked = false;
+ bool device_creation_locked = false;
ret = copy_from_user(&args, inargs, sizeof(args));
if (ret) {
@@ -651,6 +652,9 @@ dxgkio_create_device(struct dxgprocess *process, void *__user inargs)
goto cleanup;
}
+ mutex_lock(&adapter->device_creation_lock);
+ device_creation_locked = true;
+
device = dxgdevice_create(adapter, process);
if (device == NULL) {
ret = -ENOMEM;
@@ -699,6 +703,9 @@ dxgkio_create_device(struct dxgprocess *process, void *__user inargs)
if (adapter_locked)
dxgadapter_release_lock_shared(adapter);
+ if (device_creation_locked)
+ mutex_unlock(&adapter->device_creation_lock);
+
if (adapter)
kref_put(&adapter->adapter_kref, dxgadapter_release);
@@ -803,22 +810,21 @@ dxgkio_create_context_virtual(struct dxgprocess *process, void *__user inargs)
host_context_handle = dxgvmb_send_create_context(adapter,
process, &args);
if (host_context_handle.v) {
- hmgrtable_lock(&process->handle_table, DXGLOCK_EXCL);
- ret = hmgrtable_assign_handle(&process->handle_table, context,
- HMGRENTRY_TYPE_DXGCONTEXT,
- host_context_handle);
- if (ret >= 0)
- context->handle = host_context_handle;
- hmgrtable_unlock(&process->handle_table, DXGLOCK_EXCL);
- if (ret < 0)
- goto cleanup;
ret = copy_to_user(&((struct d3dkmt_createcontextvirtual *)
inargs)->context, &host_context_handle,
sizeof(struct d3dkmthandle));
if (ret) {
DXG_ERR("failed to copy context handle");
ret = -EFAULT;
+ goto cleanup;
}
+ hmgrtable_lock(&process->handle_table, DXGLOCK_EXCL);
+ ret = hmgrtable_assign_handle(&process->handle_table, context,
+ HMGRENTRY_TYPE_DXGCONTEXT,
+ host_context_handle);
+ if (ret >= 0)
+ context->handle = host_context_handle;
+ hmgrtable_unlock(&process->handle_table, DXGLOCK_EXCL);
} else {
DXG_ERR("invalid host handle");
ret = -EINVAL;
diff --git a/drivers/hv/dxgkrnl/misc.h b/drivers/hv/dxgkrnl/misc.h
index 111111111111..222222222222 100644
--- a/drivers/hv/dxgkrnl/misc.h
+++ b/drivers/hv/dxgkrnl/misc.h
@@ -38,6 +38,7 @@ extern const struct d3dkmthandle zerohandle;
* core_lock (dxgadapter lock)
* device_lock (dxgdevice lock)
* process_adapter_mutex
+ * device_creation_lock in dxgadapter
* adapter_list_lock
* device_mutex (dxgglobal mutex)
*/
--
Armbian