Whenever we wait on a request, make sure we actually hold a reference to
it and that it cannot be retired/freed on another CPU!

Signed-off-by: Chris Wilson <ch...@chris-wilson.co.uk>
---
 drivers/gpu/drm/i915/gt/selftest_lrc.c | 65 ++++++++++++++++++++------
 1 file changed, 52 insertions(+), 13 deletions(-)

diff --git a/drivers/gpu/drm/i915/gt/selftest_lrc.c 
b/drivers/gpu/drm/i915/gt/selftest_lrc.c
index f3b0610d1f10..4b645de43ea6 100644
--- a/drivers/gpu/drm/i915/gt/selftest_lrc.c
+++ b/drivers/gpu/drm/i915/gt/selftest_lrc.c
@@ -748,15 +748,19 @@ static int live_busywait_preempt(void *arg)
                *cs++ = 0;
 
                intel_ring_advance(lo, cs);
+
+               i915_request_get(lo);
                i915_request_add(lo);
 
                if (wait_for(READ_ONCE(*map), 10)) {
+                       i915_request_put(lo);
                        err = -ETIMEDOUT;
                        goto err_vma;
                }
 
                /* Low priority request should be busywaiting now */
                if (i915_request_wait(lo, 0, 1) != -ETIME) {
+                       i915_request_put(lo);
                        pr_err("%s: Busywaiting request did not!\n",
                               engine->name);
                        err = -EIO;
@@ -766,6 +770,7 @@ static int live_busywait_preempt(void *arg)
                hi = igt_request_alloc(ctx_hi, engine);
                if (IS_ERR(hi)) {
                        err = PTR_ERR(hi);
+                       i915_request_put(lo);
                        goto err_vma;
                }
 
@@ -773,6 +778,7 @@ static int live_busywait_preempt(void *arg)
                if (IS_ERR(cs)) {
                        err = PTR_ERR(cs);
                        i915_request_add(hi);
+                       i915_request_put(lo);
                        goto err_vma;
                }
 
@@ -793,11 +799,13 @@ static int live_busywait_preempt(void *arg)
                        intel_engine_dump(engine, &p, "%s\n", engine->name);
                        GEM_TRACE_DUMP();
 
+                       i915_request_put(lo);
                        intel_gt_set_wedged(gt);
                        err = -EIO;
                        goto err_vma;
                }
                GEM_BUG_ON(READ_ONCE(*map));
+               i915_request_put(lo);
 
                if (igt_live_test_end(&t)) {
                        err = -EIO;
@@ -1665,6 +1673,7 @@ static int live_suppress_wait_preempt(void *arg)
 {
        struct intel_gt *gt = arg;
        struct preempt_client client[4];
+       struct i915_request *rq[ARRAY_SIZE(client)];
        struct intel_engine_cs *engine;
        enum intel_engine_id id;
        int err = -ENOMEM;
@@ -1698,9 +1707,9 @@ static int live_suppress_wait_preempt(void *arg)
                        continue;
 
                for (depth = 0; depth < ARRAY_SIZE(client); depth++) {
-                       struct i915_request *rq[ARRAY_SIZE(client)];
                        struct i915_request *dummy;
 
+                       memset(rq, 0, sizeof(rq));
                        engine->execlists.preempt_hang.count = 0;
 
                        dummy = dummy_request(engine);
@@ -1719,6 +1728,8 @@ static int live_suppress_wait_preempt(void *arg)
                                /* Disable NEWCLIENT promotion */
                                
__i915_active_fence_set(&i915_request_timeline(rq[i])->last_request,
                                                        &dummy->fence);
+
+                               i915_request_get(rq[i]);
                                i915_request_add(rq[i]);
                        }
 
@@ -1740,8 +1751,10 @@ static int live_suppress_wait_preempt(void *arg)
                                goto err_wedged;
                        }
 
-                       for (i = 0; i < ARRAY_SIZE(client); i++)
+                       for (i = 0; i < ARRAY_SIZE(client); i++) {
                                igt_spinner_end(&client[i].spin);
+                               i915_request_put(rq[i]);
+                       }
 
                        if (igt_flush_test(gt->i915))
                                goto err_wedged;
@@ -1769,8 +1782,10 @@ static int live_suppress_wait_preempt(void *arg)
        return err;
 
 err_wedged:
-       for (i = 0; i < ARRAY_SIZE(client); i++)
+       for (i = 0; i < ARRAY_SIZE(client); i++) {
                igt_spinner_end(&client[i].spin);
+               i915_request_put(rq[i]);
+       }
        intel_gt_set_wedged(gt);
        err = -EIO;
        goto err_client_3;
@@ -1815,6 +1830,8 @@ static int live_chain_preempt(void *arg)
                                            MI_ARB_CHECK);
                if (IS_ERR(rq))
                        goto err_wedged;
+
+               i915_request_get(rq);
                i915_request_add(rq);
 
                ring_size = rq->wa_tail - rq->head;
@@ -1827,8 +1844,10 @@ static int live_chain_preempt(void *arg)
                igt_spinner_end(&lo.spin);
                if (i915_request_wait(rq, 0, HZ / 2) < 0) {
                        pr_err("Timed out waiting to flush %s\n", engine->name);
+                       i915_request_put(rq);
                        goto err_wedged;
                }
+               i915_request_put(rq);
 
                if (igt_live_test_begin(&t, gt->i915, __func__, engine->name)) {
                        err = -EIO;
@@ -1862,6 +1881,8 @@ static int live_chain_preempt(void *arg)
                        rq = igt_request_alloc(hi.ctx, engine);
                        if (IS_ERR(rq))
                                goto err_wedged;
+
+                       i915_request_get(rq);
                        i915_request_add(rq);
                        engine->schedule(rq, &attr);
 
@@ -1874,14 +1895,19 @@ static int live_chain_preempt(void *arg)
                                       count);
                                intel_engine_dump(engine, &p,
                                                  "%s\n", engine->name);
+                               i915_request_put(rq);
                                goto err_wedged;
                        }
                        igt_spinner_end(&lo.spin);
+                       i915_request_put(rq);
 
                        rq = igt_request_alloc(lo.ctx, engine);
                        if (IS_ERR(rq))
                                goto err_wedged;
+
+                       i915_request_get(rq);
                        i915_request_add(rq);
+
                        if (i915_request_wait(rq, 0, HZ / 5) < 0) {
                                struct drm_printer p =
                                        drm_info_printer(gt->i915->drm.dev);
@@ -1890,8 +1916,11 @@ static int live_chain_preempt(void *arg)
                                       count);
                                intel_engine_dump(engine, &p,
                                                  "%s\n", engine->name);
+
+                               i915_request_put(rq);
                                goto err_wedged;
                        }
+                       i915_request_put(rq);
                }
 
                if (igt_live_test_end(&t)) {
@@ -2627,32 +2656,37 @@ static int nop_virtual_engine(struct intel_gt *gt,
                goto out;
 
        for_each_prime_number_from(prime, 1, 8192) {
+               memset(request, 0, sizeof(request));
                times[1] = ktime_get_raw();
 
                if (flags & CHAIN) {
                        for (nc = 0; nc < nctx; nc++) {
                                for (n = 0; n < prime; n++) {
-                                       request[nc] =
-                                               i915_request_create(ve[nc]);
-                                       if (IS_ERR(request[nc])) {
-                                               err = PTR_ERR(request[nc]);
+                                       struct i915_request *rq;
+
+                                       rq = i915_request_create(ve[nc]);
+                                       if (IS_ERR(rq)) {
+                                               err = PTR_ERR(rq);
                                                goto out;
                                        }
 
-                                       i915_request_add(request[nc]);
+                                       request[nc] = i915_request_get(rq);
+                                       i915_request_add(rq);
                                }
                        }
                } else {
                        for (n = 0; n < prime; n++) {
                                for (nc = 0; nc < nctx; nc++) {
-                                       request[nc] =
-                                               i915_request_create(ve[nc]);
-                                       if (IS_ERR(request[nc])) {
-                                               err = PTR_ERR(request[nc]);
+                                       struct i915_request *rq;
+
+                                       rq = i915_request_create(ve[nc]);
+                                       if (IS_ERR(rq)) {
+                                               err = PTR_ERR(rq);
                                                goto out;
                                        }
 
-                                       i915_request_add(request[nc]);
+                                       request[nc] = i915_request_get(rq);
+                                       i915_request_add(rq);
                                }
                        }
                }
@@ -2678,6 +2712,10 @@ static int nop_virtual_engine(struct intel_gt *gt,
                if (prime == 1)
                        times[0] = times[1];
 
+               for (nc = 0; nc < nctx; nc++)
+                       i915_request_put(request[nc]);
+               memset(request, 0, sizeof(request));
+
                if (__igt_timeout(end_time, NULL))
                        break;
        }
@@ -2695,6 +2733,7 @@ static int nop_virtual_engine(struct intel_gt *gt,
                err = -EIO;
 
        for (nc = 0; nc < nctx; nc++) {
+               i915_request_put(request[nc]);
                intel_context_unpin(ve[nc]);
                intel_context_put(ve[nc]);
                kernel_context_close(ctx[nc]);
-- 
2.24.0

_______________________________________________
Intel-gfx mailing list
Intel-gfx@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/intel-gfx

Reply via email to