2 * Copyright © 2015 Intel Corporation
4 * Permission is hereby granted, free of charge, to any person obtaining a
5 * copy of this software and associated documentation files (the "Software"),
6 * to deal in the Software without restriction, including without limitation
7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
8 * and/or sell copies of the Software, and to permit persons to whom the
9 * Software is furnished to do so, subject to the following conditions:
11 * The above copyright notice and this permission notice (including the next
12 * paragraph) shall be included in all copies or substantial portions of the
15 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
18 * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
20 * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
29 #include <linux/futex.h>
30 #include <linux/memfd.h>
33 #include <sys/syscall.h>
35 #include "anv_private.h"
37 #include "util/hash_table.h"
40 #define VG_NOACCESS_READ(__ptr) ({ \
41 VALGRIND_MAKE_MEM_DEFINED((__ptr), sizeof(*(__ptr))); \
42 __typeof(*(__ptr)) __val = *(__ptr); \
43 VALGRIND_MAKE_MEM_NOACCESS((__ptr), sizeof(*(__ptr)));\
46 #define VG_NOACCESS_WRITE(__ptr, __val) ({ \
47 VALGRIND_MAKE_MEM_UNDEFINED((__ptr), sizeof(*(__ptr))); \
49 VALGRIND_MAKE_MEM_NOACCESS((__ptr), sizeof(*(__ptr))); \
52 #define VG_NOACCESS_READ(__ptr) (*(__ptr))
53 #define VG_NOACCESS_WRITE(__ptr, __val) (*(__ptr) = (__val))
58 * - Lock free (except when resizing underlying bos)
60 * - Constant time allocation with typically only one atomic
62 * - Multiple allocation sizes without fragmentation
64 * - Can grow while keeping addresses and offset of contents stable
66 * - All allocations within one bo so we can point one of the
67 * STATE_BASE_ADDRESS pointers at it.
69 * The overall design is a two-level allocator: top level is a fixed size, big
70 * block (8k) allocator, which operates out of a bo. Allocation is done by
71 * either pulling a block from the free list or growing the used range of the
72 * bo. Growing the range may run out of space in the bo which we then need to
73 * grow. Growing the bo is tricky in a multi-threaded, lockless environment:
74 * we need to keep all pointers and contents in the old map valid. GEM bos in
75 * general can't grow, but we use a trick: we create a memfd and use ftruncate
76 * to grow it as necessary. We mmap the new size and then create a gem bo for
77 * it using the new gem userptr ioctl. Without heavy-handed locking around
78 * our allocation fast-path, there isn't really a way to munmap the old mmap,
79 * so we just keep it around until garbage collection time. While the block
80 * allocator is lockless for normal operations, we block other threads trying
81 * to allocate while we're growing the map. It sholdn't happen often, and
82 * growing is fast anyway.
84 * At the next level we can use various sub-allocators. The state pool is a
85 * pool of smaller, fixed size objects, which operates much like the block
86 * pool. It uses a free list for freeing objects, but when it runs out of
87 * space it just allocates a new block from the block pool. This allocator is
88 * intended for longer lived state objects such as SURFACE_STATE and most
89 * other persistent state objects in the API. We may need to track more info
90 * with these object and a pointer back to the CPU object (eg VkImage). In
91 * those cases we just allocate a slightly bigger object and put the extra
92 * state after the GPU state object.
94 * The state stream allocator works similar to how the i965 DRI driver streams
95 * all its state. Even with Vulkan, we need to emit transient state (whether
96 * surface state base or dynamic state base), and for that we can just get a
97 * block and fill it up. These cases are local to a command buffer and the
98 * sub-allocator need not be thread safe. The streaming allocator gets a new
99 * block when it runs out of space and chains them together so they can be
103 /* Allocations are always at least 64 byte aligned, so 1 is an invalid value.
104 * We use it to indicate the free list is empty. */
107 struct anv_mmap_cleanup
{
113 #define ANV_MMAP_CLEANUP_INIT ((struct anv_mmap_cleanup){0})
116 sys_futex(void *addr1
, int op
, int val1
,
117 struct timespec
*timeout
, void *addr2
, int val3
)
119 return syscall(SYS_futex
, addr1
, op
, val1
, timeout
, addr2
, val3
);
123 futex_wake(uint32_t *addr
, int count
)
125 return sys_futex(addr
, FUTEX_WAKE
, count
, NULL
, NULL
, 0);
129 futex_wait(uint32_t *addr
, int32_t value
)
131 return sys_futex(addr
, FUTEX_WAIT
, value
, NULL
, NULL
, 0);
135 memfd_create(const char *name
, unsigned int flags
)
137 return syscall(SYS_memfd_create
, name
, flags
);
140 static inline uint32_t
141 ilog2_round_up(uint32_t value
)
144 return 32 - __builtin_clz(value
- 1);
147 static inline uint32_t
148 round_to_power_of_two(uint32_t value
)
150 return 1 << ilog2_round_up(value
);
154 anv_free_list_pop(union anv_free_list
*list
, void **map
, int32_t *offset
)
156 union anv_free_list current
, new, old
;
158 current
.u64
= list
->u64
;
159 while (current
.offset
!= EMPTY
) {
160 /* We have to add a memory barrier here so that the list head (and
161 * offset) gets read before we read the map pointer. This way we
162 * know that the map pointer is valid for the given offset at the
163 * point where we read it.
165 __sync_synchronize();
167 int32_t *next_ptr
= *map
+ current
.offset
;
168 new.offset
= VG_NOACCESS_READ(next_ptr
);
169 new.count
= current
.count
+ 1;
170 old
.u64
= __sync_val_compare_and_swap(&list
->u64
, current
.u64
, new.u64
);
171 if (old
.u64
== current
.u64
) {
172 *offset
= current
.offset
;
182 anv_free_list_push(union anv_free_list
*list
, void *map
, int32_t offset
)
184 union anv_free_list current
, old
, new;
185 int32_t *next_ptr
= map
+ offset
;
190 VG_NOACCESS_WRITE(next_ptr
, current
.offset
);
192 new.count
= current
.count
+ 1;
193 old
.u64
= __sync_val_compare_and_swap(&list
->u64
, current
.u64
, new.u64
);
194 } while (old
.u64
!= current
.u64
);
197 /* All pointers in the ptr_free_list are assumed to be page-aligned. This
198 * means that the bottom 12 bits should all be zero.
200 #define PFL_COUNT(x) ((uintptr_t)(x) & 0xfff)
201 #define PFL_PTR(x) ((void *)((uintptr_t)(x) & ~(uintptr_t)0xfff))
202 #define PFL_PACK(ptr, count) ({ \
203 (void *)(((uintptr_t)(ptr) & ~(uintptr_t)0xfff) | ((count) & 0xfff)); \
207 anv_ptr_free_list_pop(void **list
, void **elem
)
209 void *current
= *list
;
210 while (PFL_PTR(current
) != NULL
) {
211 void **next_ptr
= PFL_PTR(current
);
212 void *new_ptr
= VG_NOACCESS_READ(next_ptr
);
213 unsigned new_count
= PFL_COUNT(current
) + 1;
214 void *new = PFL_PACK(new_ptr
, new_count
);
215 void *old
= __sync_val_compare_and_swap(list
, current
, new);
216 if (old
== current
) {
217 *elem
= PFL_PTR(current
);
227 anv_ptr_free_list_push(void **list
, void *elem
)
230 void **next_ptr
= elem
;
232 /* The pointer-based free list requires that the pointer be
233 * page-aligned. This is because we use the bottom 12 bits of the
234 * pointer to store a counter to solve the ABA concurrency problem.
236 assert(((uintptr_t)elem
& 0xfff) == 0);
241 VG_NOACCESS_WRITE(next_ptr
, PFL_PTR(current
));
242 unsigned new_count
= PFL_COUNT(current
) + 1;
243 void *new = PFL_PACK(elem
, new_count
);
244 old
= __sync_val_compare_and_swap(list
, current
, new);
245 } while (old
!= current
);
249 anv_block_pool_expand_range(struct anv_block_pool
*pool
,
250 uint32_t center_bo_offset
, uint32_t size
);
253 anv_block_pool_init(struct anv_block_pool
*pool
,
254 struct anv_device
*device
,
255 uint32_t initial_size
)
259 pool
->device
= device
;
260 anv_bo_init(&pool
->bo
, 0, 0);
262 pool
->fd
= memfd_create("block pool", MFD_CLOEXEC
);
264 return vk_error(VK_ERROR_INITIALIZATION_FAILED
);
266 /* Just make it 2GB up-front. The Linux kernel won't actually back it
267 * with pages until we either map and fault on one of them or we use
268 * userptr and send a chunk of it off to the GPU.
270 if (ftruncate(pool
->fd
, BLOCK_POOL_MEMFD_SIZE
) == -1) {
271 result
= vk_error(VK_ERROR_INITIALIZATION_FAILED
);
275 if (!u_vector_init(&pool
->mmap_cleanups
,
276 round_to_power_of_two(sizeof(struct anv_mmap_cleanup
)),
278 result
= vk_error(VK_ERROR_INITIALIZATION_FAILED
);
282 pool
->state
.next
= 0;
284 pool
->back_state
.next
= 0;
285 pool
->back_state
.end
= 0;
287 result
= anv_block_pool_expand_range(pool
, 0, initial_size
);
288 if (result
!= VK_SUCCESS
)
289 goto fail_mmap_cleanups
;
294 u_vector_finish(&pool
->mmap_cleanups
);
302 anv_block_pool_finish(struct anv_block_pool
*pool
)
304 struct anv_mmap_cleanup
*cleanup
;
306 u_vector_foreach(cleanup
, &pool
->mmap_cleanups
) {
308 munmap(cleanup
->map
, cleanup
->size
);
309 if (cleanup
->gem_handle
)
310 anv_gem_close(pool
->device
, cleanup
->gem_handle
);
313 u_vector_finish(&pool
->mmap_cleanups
);
318 #define PAGE_SIZE 4096
321 anv_block_pool_expand_range(struct anv_block_pool
*pool
,
322 uint32_t center_bo_offset
, uint32_t size
)
326 struct anv_mmap_cleanup
*cleanup
;
328 /* Assert that we only ever grow the pool */
329 assert(center_bo_offset
>= pool
->back_state
.end
);
330 assert(size
- center_bo_offset
>= pool
->state
.end
);
332 cleanup
= u_vector_add(&pool
->mmap_cleanups
);
334 return vk_error(VK_ERROR_OUT_OF_HOST_MEMORY
);
336 *cleanup
= ANV_MMAP_CLEANUP_INIT
;
338 /* Just leak the old map until we destroy the pool. We can't munmap it
339 * without races or imposing locking on the block allocate fast path. On
340 * the whole the leaked maps adds up to less than the size of the
341 * current map. MAP_POPULATE seems like the right thing to do, but we
342 * should try to get some numbers.
344 map
= mmap(NULL
, size
, PROT_READ
| PROT_WRITE
,
345 MAP_SHARED
| MAP_POPULATE
, pool
->fd
,
346 BLOCK_POOL_MEMFD_CENTER
- center_bo_offset
);
347 if (map
== MAP_FAILED
)
348 return vk_errorf(VK_ERROR_MEMORY_MAP_FAILED
, "mmap failed: %m");
350 gem_handle
= anv_gem_userptr(pool
->device
, map
, size
);
351 if (gem_handle
== 0) {
353 return vk_errorf(VK_ERROR_TOO_MANY_OBJECTS
, "userptr failed: %m");
357 cleanup
->size
= size
;
358 cleanup
->gem_handle
= gem_handle
;
361 /* Regular objects are created I915_CACHING_CACHED on LLC platforms and
362 * I915_CACHING_NONE on non-LLC platforms. However, userptr objects are
363 * always created as I915_CACHING_CACHED, which on non-LLC means
364 * snooped. That can be useful but comes with a bit of overheard. Since
365 * we're eplicitly clflushing and don't want the overhead we need to turn
367 if (!pool
->device
->info
.has_llc
) {
368 anv_gem_set_caching(pool
->device
, gem_handle
, I915_CACHING_NONE
);
369 anv_gem_set_domain(pool
->device
, gem_handle
,
370 I915_GEM_DOMAIN_GTT
, I915_GEM_DOMAIN_GTT
);
374 /* Now that we successfull allocated everything, we can write the new
375 * values back into pool. */
376 pool
->map
= map
+ center_bo_offset
;
377 pool
->center_bo_offset
= center_bo_offset
;
379 /* For block pool BOs we have to be a bit careful about where we place them
380 * in the GTT. There are two documented workarounds for state base address
381 * placement : Wa32bitGeneralStateOffset and Wa32bitInstructionBaseOffset
382 * which state that those two base addresses do not support 48-bit
383 * addresses and need to be placed in the bottom 32-bit range.
384 * Unfortunately, this is not quite accurate.
386 * The real problem is that we always set the size of our state pools in
387 * STATE_BASE_ADDRESS to 0xfffff (the maximum) even though the BO is most
388 * likely significantly smaller. We do this because we do not no at the
389 * time we emit STATE_BASE_ADDRESS whether or not we will need to expand
390 * the pool during command buffer building so we don't actually have a
391 * valid final size. If the address + size, as seen by STATE_BASE_ADDRESS
392 * overflows 48 bits, the GPU appears to treat all accesses to the buffer
393 * as being out of bounds and returns zero. For dynamic state, this
394 * usually just leads to rendering corruptions, but shaders that are all
395 * zero hang the GPU immediately.
397 * The easiest solution to do is exactly what the bogus workarounds say to
398 * do: restrict these buffers to 32-bit addresses. We could also pin the
399 * BO to some particular location of our choosing, but that's significantly
400 * more work than just not setting a flag. So, we explicitly DO NOT set
401 * the EXEC_OBJECT_SUPPORTS_48B_ADDRESS flag and the kernel does all of the
404 anv_bo_init(&pool
->bo
, gem_handle
, size
);
410 /** Grows and re-centers the block pool.
412 * We grow the block pool in one or both directions in such a way that the
413 * following conditions are met:
415 * 1) The size of the entire pool is always a power of two.
417 * 2) The pool only grows on both ends. Neither end can get
420 * 3) At the end of the allocation, we have about twice as much space
421 * allocated for each end as we have used. This way the pool doesn't
422 * grow too far in one direction or the other.
424 * 4) If the _alloc_back() has never been called, then the back portion of
425 * the pool retains a size of zero. (This makes it easier for users of
426 * the block pool that only want a one-sided pool.)
428 * 5) We have enough space allocated for at least one more block in
429 * whichever side `state` points to.
431 * 6) The center of the pool is always aligned to both the block_size of
432 * the pool and a 4K CPU page.
435 anv_block_pool_grow(struct anv_block_pool
*pool
, struct anv_block_state
*state
)
437 VkResult result
= VK_SUCCESS
;
439 pthread_mutex_lock(&pool
->device
->mutex
);
441 assert(state
== &pool
->state
|| state
== &pool
->back_state
);
443 /* Gather a little usage information on the pool. Since we may have
444 * threadsd waiting in queue to get some storage while we resize, it's
445 * actually possible that total_used will be larger than old_size. In
446 * particular, block_pool_alloc() increments state->next prior to
447 * calling block_pool_grow, so this ensures that we get enough space for
448 * which ever side tries to grow the pool.
450 * We align to a page size because it makes it easier to do our
451 * calculations later in such a way that we state page-aigned.
453 uint32_t back_used
= align_u32(pool
->back_state
.next
, PAGE_SIZE
);
454 uint32_t front_used
= align_u32(pool
->state
.next
, PAGE_SIZE
);
455 uint32_t total_used
= front_used
+ back_used
;
457 assert(state
== &pool
->state
|| back_used
> 0);
459 uint32_t old_size
= pool
->bo
.size
;
461 /* The block pool is always initialized to a nonzero size and this function
462 * is always called after initialization.
464 assert(old_size
> 0);
466 /* The back_used and front_used may actually be smaller than the actual
467 * requirement because they are based on the next pointers which are
468 * updated prior to calling this function.
470 uint32_t back_required
= MAX2(back_used
, pool
->center_bo_offset
);
471 uint32_t front_required
= MAX2(front_used
, old_size
- pool
->center_bo_offset
);
473 if (back_used
* 2 <= back_required
&& front_used
* 2 <= front_required
) {
474 /* If we're in this case then this isn't the firsta allocation and we
475 * already have enough space on both sides to hold double what we
476 * have allocated. There's nothing for us to do.
481 uint32_t size
= old_size
* 2;
482 while (size
< back_required
+ front_required
)
485 assert(size
> pool
->bo
.size
);
487 /* We can't have a block pool bigger than 1GB because we use signed
488 * 32-bit offsets in the free list and we don't want overflow. We
489 * should never need a block pool bigger than 1GB anyway.
491 assert(size
<= (1u << 31));
493 /* We compute a new center_bo_offset such that, when we double the size
494 * of the pool, we maintain the ratio of how much is used by each side.
495 * This way things should remain more-or-less balanced.
497 uint32_t center_bo_offset
;
498 if (back_used
== 0) {
499 /* If we're in this case then we have never called alloc_back(). In
500 * this case, we want keep the offset at 0 to make things as simple
501 * as possible for users that don't care about back allocations.
503 center_bo_offset
= 0;
505 /* Try to "center" the allocation based on how much is currently in
506 * use on each side of the center line.
508 center_bo_offset
= ((uint64_t)size
* back_used
) / total_used
;
510 /* Align down to a multiple of the page size */
511 center_bo_offset
&= ~(PAGE_SIZE
- 1);
513 assert(center_bo_offset
>= back_used
);
515 /* Make sure we don't shrink the back end of the pool */
516 if (center_bo_offset
< pool
->back_state
.end
)
517 center_bo_offset
= pool
->back_state
.end
;
519 /* Make sure that we don't shrink the front end of the pool */
520 if (size
- center_bo_offset
< pool
->state
.end
)
521 center_bo_offset
= size
- pool
->state
.end
;
524 assert(center_bo_offset
% PAGE_SIZE
== 0);
526 result
= anv_block_pool_expand_range(pool
, center_bo_offset
, size
);
528 if (pool
->device
->instance
->physicalDevice
.has_exec_async
)
529 pool
->bo
.flags
|= EXEC_OBJECT_ASYNC
;
532 pthread_mutex_unlock(&pool
->device
->mutex
);
534 if (result
== VK_SUCCESS
) {
535 /* Return the appropriate new size. This function never actually
536 * updates state->next. Instead, we let the caller do that because it
537 * needs to do so in order to maintain its concurrency model.
539 if (state
== &pool
->state
) {
540 return pool
->bo
.size
- pool
->center_bo_offset
;
542 assert(pool
->center_bo_offset
> 0);
543 return pool
->center_bo_offset
;
551 anv_block_pool_alloc_new(struct anv_block_pool
*pool
,
552 struct anv_block_state
*pool_state
,
555 struct anv_block_state state
, old
, new;
558 state
.u64
= __sync_fetch_and_add(&pool_state
->u64
, block_size
);
559 if (state
.next
+ block_size
<= state
.end
) {
562 } else if (state
.next
<= state
.end
) {
563 /* We allocated the first block outside the pool so we have to grow
564 * the pool. pool_state->next acts a mutex: threads who try to
565 * allocate now will get block indexes above the current limit and
566 * hit futex_wait below.
568 new.next
= state
.next
+ block_size
;
570 new.end
= anv_block_pool_grow(pool
, pool_state
);
571 } while (new.end
< new.next
);
573 old
.u64
= __sync_lock_test_and_set(&pool_state
->u64
, new.u64
);
574 if (old
.next
!= state
.next
)
575 futex_wake(&pool_state
->end
, INT_MAX
);
578 futex_wait(&pool_state
->end
, state
.end
);
585 anv_block_pool_alloc(struct anv_block_pool
*pool
,
588 return anv_block_pool_alloc_new(pool
, &pool
->state
, block_size
);
591 /* Allocates a block out of the back of the block pool.
593 * This will allocated a block earlier than the "start" of the block pool.
594 * The offsets returned from this function will be negative but will still
595 * be correct relative to the block pool's map pointer.
597 * If you ever use anv_block_pool_alloc_back, then you will have to do
598 * gymnastics with the block pool's BO when doing relocations.
601 anv_block_pool_alloc_back(struct anv_block_pool
*pool
,
604 int32_t offset
= anv_block_pool_alloc_new(pool
, &pool
->back_state
,
607 /* The offset we get out of anv_block_pool_alloc_new() is actually the
608 * number of bytes downwards from the middle to the end of the block.
609 * We need to turn it into a (negative) offset from the middle to the
610 * start of the block.
613 return -(offset
+ block_size
);
617 anv_state_pool_init(struct anv_state_pool
*pool
,
618 struct anv_device
*device
,
621 VkResult result
= anv_block_pool_init(&pool
->block_pool
, device
,
623 if (result
!= VK_SUCCESS
)
626 assert(util_is_power_of_two(block_size
));
627 pool
->block_size
= block_size
;
628 pool
->back_alloc_free_list
= ANV_FREE_LIST_EMPTY
;
629 for (unsigned i
= 0; i
< ANV_STATE_BUCKETS
; i
++) {
630 pool
->buckets
[i
].free_list
= ANV_FREE_LIST_EMPTY
;
631 pool
->buckets
[i
].block
.next
= 0;
632 pool
->buckets
[i
].block
.end
= 0;
634 VG(VALGRIND_CREATE_MEMPOOL(pool
, 0, false));
640 anv_state_pool_finish(struct anv_state_pool
*pool
)
642 VG(VALGRIND_DESTROY_MEMPOOL(pool
));
643 anv_block_pool_finish(&pool
->block_pool
);
647 anv_fixed_size_state_pool_alloc_new(struct anv_fixed_size_state_pool
*pool
,
648 struct anv_block_pool
*block_pool
,
652 struct anv_block_state block
, old
, new;
656 block
.u64
= __sync_fetch_and_add(&pool
->block
.u64
, state_size
);
658 if (block
.next
< block
.end
) {
660 } else if (block
.next
== block
.end
) {
661 offset
= anv_block_pool_alloc(block_pool
, block_size
);
662 new.next
= offset
+ state_size
;
663 new.end
= offset
+ block_size
;
664 old
.u64
= __sync_lock_test_and_set(&pool
->block
.u64
, new.u64
);
665 if (old
.next
!= block
.next
)
666 futex_wake(&pool
->block
.end
, INT_MAX
);
669 futex_wait(&pool
->block
.end
, block
.end
);
674 static struct anv_state
675 anv_state_pool_alloc_no_vg(struct anv_state_pool
*pool
,
676 uint32_t size
, uint32_t align
)
678 unsigned size_log2
= ilog2_round_up(size
< align
? align
: size
);
679 assert(size_log2
<= ANV_MAX_STATE_SIZE_LOG2
);
680 if (size_log2
< ANV_MIN_STATE_SIZE_LOG2
)
681 size_log2
= ANV_MIN_STATE_SIZE_LOG2
;
682 unsigned bucket
= size_log2
- ANV_MIN_STATE_SIZE_LOG2
;
684 struct anv_state state
;
685 state
.alloc_size
= 1 << size_log2
;
687 /* Try free list first. */
688 if (anv_free_list_pop(&pool
->buckets
[bucket
].free_list
,
689 &pool
->block_pool
.map
, &state
.offset
)) {
690 assert(state
.offset
>= 0);
694 state
.offset
= anv_fixed_size_state_pool_alloc_new(&pool
->buckets
[bucket
],
700 state
.map
= pool
->block_pool
.map
+ state
.offset
;
705 anv_state_pool_alloc(struct anv_state_pool
*pool
, uint32_t size
, uint32_t align
)
708 return ANV_STATE_NULL
;
710 struct anv_state state
= anv_state_pool_alloc_no_vg(pool
, size
, align
);
711 VG(VALGRIND_MEMPOOL_ALLOC(pool
, state
.map
, size
));
716 anv_state_pool_alloc_back(struct anv_state_pool
*pool
)
718 struct anv_state state
;
719 state
.alloc_size
= pool
->block_size
;
721 if (anv_free_list_pop(&pool
->back_alloc_free_list
,
722 &pool
->block_pool
.map
, &state
.offset
)) {
723 assert(state
.offset
< 0);
727 state
.offset
= anv_block_pool_alloc_back(&pool
->block_pool
,
731 state
.map
= pool
->block_pool
.map
+ state
.offset
;
732 VG(VALGRIND_MEMPOOL_ALLOC(pool
, state
.map
, state
.alloc_size
));
737 anv_state_pool_free_no_vg(struct anv_state_pool
*pool
, struct anv_state state
)
739 assert(util_is_power_of_two(state
.alloc_size
));
740 unsigned size_log2
= ilog2_round_up(state
.alloc_size
);
741 assert(size_log2
>= ANV_MIN_STATE_SIZE_LOG2
&&
742 size_log2
<= ANV_MAX_STATE_SIZE_LOG2
);
743 unsigned bucket
= size_log2
- ANV_MIN_STATE_SIZE_LOG2
;
745 if (state
.offset
< 0) {
746 assert(state
.alloc_size
== pool
->block_size
);
747 anv_free_list_push(&pool
->back_alloc_free_list
,
748 pool
->block_pool
.map
, state
.offset
);
750 anv_free_list_push(&pool
->buckets
[bucket
].free_list
,
751 pool
->block_pool
.map
, state
.offset
);
756 anv_state_pool_free(struct anv_state_pool
*pool
, struct anv_state state
)
758 if (state
.alloc_size
== 0)
761 VG(VALGRIND_MEMPOOL_FREE(pool
, state
.map
));
762 anv_state_pool_free_no_vg(pool
, state
);
765 struct anv_state_stream_block
{
766 struct anv_state block
;
769 struct anv_state_stream_block
*next
;
772 /* A pointer to the first user-allocated thing in this block. This is
773 * what valgrind sees as the start of the block.
779 /* The state stream allocator is a one-shot, single threaded allocator for
780 * variable sized blocks. We use it for allocating dynamic state.
783 anv_state_stream_init(struct anv_state_stream
*stream
,
784 struct anv_state_pool
*state_pool
,
787 stream
->state_pool
= state_pool
;
788 stream
->block_size
= block_size
;
790 stream
->block
= ANV_STATE_NULL
;
792 stream
->block_list
= NULL
;
794 /* Ensure that next + whatever > block_size. This way the first call to
795 * state_stream_alloc fetches a new block.
797 stream
->next
= block_size
;
799 VG(VALGRIND_CREATE_MEMPOOL(stream
, 0, false));
803 anv_state_stream_finish(struct anv_state_stream
*stream
)
805 struct anv_state_stream_block
*next
= stream
->block_list
;
806 while (next
!= NULL
) {
807 struct anv_state_stream_block sb
= VG_NOACCESS_READ(next
);
808 VG(VALGRIND_MEMPOOL_FREE(stream
, sb
._vg_ptr
));
809 VG(VALGRIND_MAKE_MEM_UNDEFINED(next
, stream
->block_size
));
810 anv_state_pool_free_no_vg(stream
->state_pool
, sb
.block
);
814 VG(VALGRIND_DESTROY_MEMPOOL(stream
));
818 anv_state_stream_alloc(struct anv_state_stream
*stream
,
819 uint32_t size
, uint32_t alignment
)
822 return ANV_STATE_NULL
;
824 assert(alignment
<= PAGE_SIZE
);
826 uint32_t offset
= align_u32(stream
->next
, alignment
);
827 if (offset
+ size
> stream
->block_size
) {
828 stream
->block
= anv_state_pool_alloc_no_vg(stream
->state_pool
,
832 struct anv_state_stream_block
*sb
= stream
->block
.map
;
833 VG_NOACCESS_WRITE(&sb
->block
, stream
->block
);
834 VG_NOACCESS_WRITE(&sb
->next
, stream
->block_list
);
835 stream
->block_list
= sb
;
836 VG_NOACCESS_WRITE(&sb
->_vg_ptr
, NULL
);
838 VG(VALGRIND_MAKE_MEM_NOACCESS(stream
->block
.map
, stream
->block_size
));
840 /* Reset back to the start plus space for the header */
841 stream
->next
= sizeof(*sb
);
843 offset
= align_u32(stream
->next
, alignment
);
844 assert(offset
+ size
<= stream
->block_size
);
847 struct anv_state state
= stream
->block
;
848 state
.offset
+= offset
;
849 state
.alloc_size
= size
;
852 stream
->next
= offset
+ size
;
855 struct anv_state_stream_block
*sb
= stream
->block_list
;
856 void *vg_ptr
= VG_NOACCESS_READ(&sb
->_vg_ptr
);
857 if (vg_ptr
== NULL
) {
859 VG_NOACCESS_WRITE(&sb
->_vg_ptr
, vg_ptr
);
860 VALGRIND_MEMPOOL_ALLOC(stream
, vg_ptr
, size
);
862 void *state_end
= state
.map
+ state
.alloc_size
;
863 /* This only updates the mempool. The newly allocated chunk is still
864 * marked as NOACCESS. */
865 VALGRIND_MEMPOOL_CHANGE(stream
, vg_ptr
, vg_ptr
, state_end
- vg_ptr
);
866 /* Mark the newly allocated chunk as undefined */
867 VALGRIND_MAKE_MEM_UNDEFINED(state
.map
, state
.alloc_size
);
874 struct bo_pool_bo_link
{
875 struct bo_pool_bo_link
*next
;
880 anv_bo_pool_init(struct anv_bo_pool
*pool
, struct anv_device
*device
)
882 pool
->device
= device
;
883 memset(pool
->free_list
, 0, sizeof(pool
->free_list
));
885 VG(VALGRIND_CREATE_MEMPOOL(pool
, 0, false));
889 anv_bo_pool_finish(struct anv_bo_pool
*pool
)
891 for (unsigned i
= 0; i
< ARRAY_SIZE(pool
->free_list
); i
++) {
892 struct bo_pool_bo_link
*link
= PFL_PTR(pool
->free_list
[i
]);
893 while (link
!= NULL
) {
894 struct bo_pool_bo_link link_copy
= VG_NOACCESS_READ(link
);
896 anv_gem_munmap(link_copy
.bo
.map
, link_copy
.bo
.size
);
897 anv_gem_close(pool
->device
, link_copy
.bo
.gem_handle
);
898 link
= link_copy
.next
;
902 VG(VALGRIND_DESTROY_MEMPOOL(pool
));
906 anv_bo_pool_alloc(struct anv_bo_pool
*pool
, struct anv_bo
*bo
, uint32_t size
)
910 const unsigned size_log2
= size
< 4096 ? 12 : ilog2_round_up(size
);
911 const unsigned pow2_size
= 1 << size_log2
;
912 const unsigned bucket
= size_log2
- 12;
913 assert(bucket
< ARRAY_SIZE(pool
->free_list
));
915 void *next_free_void
;
916 if (anv_ptr_free_list_pop(&pool
->free_list
[bucket
], &next_free_void
)) {
917 struct bo_pool_bo_link
*next_free
= next_free_void
;
918 *bo
= VG_NOACCESS_READ(&next_free
->bo
);
919 assert(bo
->gem_handle
);
920 assert(bo
->map
== next_free
);
921 assert(size
<= bo
->size
);
923 VG(VALGRIND_MEMPOOL_ALLOC(pool
, bo
->map
, size
));
928 struct anv_bo new_bo
;
930 result
= anv_bo_init_new(&new_bo
, pool
->device
, pow2_size
);
931 if (result
!= VK_SUCCESS
)
934 assert(new_bo
.size
== pow2_size
);
936 new_bo
.map
= anv_gem_mmap(pool
->device
, new_bo
.gem_handle
, 0, pow2_size
, 0);
937 if (new_bo
.map
== MAP_FAILED
) {
938 anv_gem_close(pool
->device
, new_bo
.gem_handle
);
939 return vk_error(VK_ERROR_MEMORY_MAP_FAILED
);
944 VG(VALGRIND_MEMPOOL_ALLOC(pool
, bo
->map
, size
));
950 anv_bo_pool_free(struct anv_bo_pool
*pool
, const struct anv_bo
*bo_in
)
952 /* Make a copy in case the anv_bo happens to be storred in the BO */
953 struct anv_bo bo
= *bo_in
;
955 VG(VALGRIND_MEMPOOL_FREE(pool
, bo
.map
));
957 struct bo_pool_bo_link
*link
= bo
.map
;
958 VG_NOACCESS_WRITE(&link
->bo
, bo
);
960 assert(util_is_power_of_two(bo
.size
));
961 const unsigned size_log2
= ilog2_round_up(bo
.size
);
962 const unsigned bucket
= size_log2
- 12;
963 assert(bucket
< ARRAY_SIZE(pool
->free_list
));
965 anv_ptr_free_list_push(&pool
->free_list
[bucket
], link
);
971 anv_scratch_pool_init(struct anv_device
*device
, struct anv_scratch_pool
*pool
)
973 memset(pool
, 0, sizeof(*pool
));
977 anv_scratch_pool_finish(struct anv_device
*device
, struct anv_scratch_pool
*pool
)
979 for (unsigned s
= 0; s
< MESA_SHADER_STAGES
; s
++) {
980 for (unsigned i
= 0; i
< 16; i
++) {
981 struct anv_scratch_bo
*bo
= &pool
->bos
[i
][s
];
983 anv_gem_close(device
, bo
->bo
.gem_handle
);
989 anv_scratch_pool_alloc(struct anv_device
*device
, struct anv_scratch_pool
*pool
,
990 gl_shader_stage stage
, unsigned per_thread_scratch
)
992 if (per_thread_scratch
== 0)
995 unsigned scratch_size_log2
= ffs(per_thread_scratch
/ 2048);
996 assert(scratch_size_log2
< 16);
998 struct anv_scratch_bo
*bo
= &pool
->bos
[scratch_size_log2
][stage
];
1000 /* We can use "exists" to shortcut and ignore the critical section */
1004 pthread_mutex_lock(&device
->mutex
);
1006 __sync_synchronize();
1010 const struct anv_physical_device
*physical_device
=
1011 &device
->instance
->physicalDevice
;
1012 const struct gen_device_info
*devinfo
= &physical_device
->info
;
1014 /* WaCSScratchSize:hsw
1016 * Haswell's scratch space address calculation appears to be sparse
1017 * rather than tightly packed. The Thread ID has bits indicating which
1018 * subslice, EU within a subslice, and thread within an EU it is.
1019 * There's a maximum of two slices and two subslices, so these can be
1020 * stored with a single bit. Even though there are only 10 EUs per
1021 * subslice, this is stored in 4 bits, so there's an effective maximum
1022 * value of 16 EUs. Similarly, although there are only 7 threads per EU,
1023 * this is stored in a 3 bit number, giving an effective maximum value
1024 * of 8 threads per EU.
1026 * This means that we need to use 16 * 8 instead of 10 * 7 for the
1027 * number of threads per subslice.
1029 const unsigned subslices
= MAX2(physical_device
->subslice_total
, 1);
1030 const unsigned scratch_ids_per_subslice
=
1031 device
->info
.is_haswell
? 16 * 8 : devinfo
->max_cs_threads
;
1033 uint32_t max_threads
[] = {
1034 [MESA_SHADER_VERTEX
] = devinfo
->max_vs_threads
,
1035 [MESA_SHADER_TESS_CTRL
] = devinfo
->max_tcs_threads
,
1036 [MESA_SHADER_TESS_EVAL
] = devinfo
->max_tes_threads
,
1037 [MESA_SHADER_GEOMETRY
] = devinfo
->max_gs_threads
,
1038 [MESA_SHADER_FRAGMENT
] = devinfo
->max_wm_threads
,
1039 [MESA_SHADER_COMPUTE
] = scratch_ids_per_subslice
* subslices
,
1042 uint32_t size
= per_thread_scratch
* max_threads
[stage
];
1044 anv_bo_init_new(&bo
->bo
, device
, size
);
1046 /* Even though the Scratch base pointers in 3DSTATE_*S are 64 bits, they
1047 * are still relative to the general state base address. When we emit
1048 * STATE_BASE_ADDRESS, we set general state base address to 0 and the size
1049 * to the maximum (1 page under 4GB). This allows us to just place the
1050 * scratch buffers anywhere we wish in the bottom 32 bits of address space
1051 * and just set the scratch base pointer in 3DSTATE_*S using a relocation.
1052 * However, in order to do so, we need to ensure that the kernel does not
1053 * place the scratch BO above the 32-bit boundary.
1055 * NOTE: Technically, it can't go "anywhere" because the top page is off
1056 * limits. However, when EXEC_OBJECT_SUPPORTS_48B_ADDRESS is set, the
1057 * kernel allocates space using
1059 * end = min_t(u64, end, (1ULL << 32) - I915_GTT_PAGE_SIZE);
1061 * so nothing will ever touch the top page.
1063 bo
->bo
.flags
&= ~EXEC_OBJECT_SUPPORTS_48B_ADDRESS
;
1065 /* Set the exists last because it may be read by other threads */
1066 __sync_synchronize();
1069 pthread_mutex_unlock(&device
->mutex
);
1074 struct anv_cached_bo
{
1081 anv_bo_cache_init(struct anv_bo_cache
*cache
)
1083 cache
->bo_map
= _mesa_hash_table_create(NULL
, _mesa_hash_pointer
,
1084 _mesa_key_pointer_equal
);
1086 return vk_error(VK_ERROR_OUT_OF_HOST_MEMORY
);
1088 if (pthread_mutex_init(&cache
->mutex
, NULL
)) {
1089 _mesa_hash_table_destroy(cache
->bo_map
, NULL
);
1090 return vk_errorf(VK_ERROR_OUT_OF_HOST_MEMORY
,
1091 "pthread_mutex_init failed: %m");
1098 anv_bo_cache_finish(struct anv_bo_cache
*cache
)
1100 _mesa_hash_table_destroy(cache
->bo_map
, NULL
);
1101 pthread_mutex_destroy(&cache
->mutex
);
1104 static struct anv_cached_bo
*
1105 anv_bo_cache_lookup_locked(struct anv_bo_cache
*cache
, uint32_t gem_handle
)
1107 struct hash_entry
*entry
=
1108 _mesa_hash_table_search(cache
->bo_map
,
1109 (const void *)(uintptr_t)gem_handle
);
1113 struct anv_cached_bo
*bo
= (struct anv_cached_bo
*)entry
->data
;
1114 assert(bo
->bo
.gem_handle
== gem_handle
);
1119 static struct anv_bo
*
1120 anv_bo_cache_lookup(struct anv_bo_cache
*cache
, uint32_t gem_handle
)
1122 pthread_mutex_lock(&cache
->mutex
);
1124 struct anv_cached_bo
*bo
= anv_bo_cache_lookup_locked(cache
, gem_handle
);
1126 pthread_mutex_unlock(&cache
->mutex
);
1128 return bo
? &bo
->bo
: NULL
;
1132 anv_bo_cache_alloc(struct anv_device
*device
,
1133 struct anv_bo_cache
*cache
,
1134 uint64_t size
, struct anv_bo
**bo_out
)
1136 struct anv_cached_bo
*bo
=
1137 vk_alloc(&device
->alloc
, sizeof(struct anv_cached_bo
), 8,
1138 VK_SYSTEM_ALLOCATION_SCOPE_OBJECT
);
1140 return vk_error(VK_ERROR_OUT_OF_HOST_MEMORY
);
1144 /* The kernel is going to give us whole pages anyway */
1145 size
= align_u64(size
, 4096);
1147 VkResult result
= anv_bo_init_new(&bo
->bo
, device
, size
);
1148 if (result
!= VK_SUCCESS
) {
1149 vk_free(&device
->alloc
, bo
);
1153 assert(bo
->bo
.gem_handle
);
1155 pthread_mutex_lock(&cache
->mutex
);
1157 _mesa_hash_table_insert(cache
->bo_map
,
1158 (void *)(uintptr_t)bo
->bo
.gem_handle
, bo
);
1160 pthread_mutex_unlock(&cache
->mutex
);
1168 anv_bo_cache_import(struct anv_device
*device
,
1169 struct anv_bo_cache
*cache
,
1170 int fd
, uint64_t size
, struct anv_bo
**bo_out
)
1172 pthread_mutex_lock(&cache
->mutex
);
1174 /* The kernel is going to give us whole pages anyway */
1175 size
= align_u64(size
, 4096);
1177 uint32_t gem_handle
= anv_gem_fd_to_handle(device
, fd
);
1179 pthread_mutex_unlock(&cache
->mutex
);
1180 return vk_error(VK_ERROR_INVALID_EXTERNAL_HANDLE_KHX
);
1183 struct anv_cached_bo
*bo
= anv_bo_cache_lookup_locked(cache
, gem_handle
);
1185 if (bo
->bo
.size
!= size
) {
1186 pthread_mutex_unlock(&cache
->mutex
);
1187 return vk_error(VK_ERROR_INVALID_EXTERNAL_HANDLE_KHX
);
1189 __sync_fetch_and_add(&bo
->refcount
, 1);
1191 /* For security purposes, we reject BO imports where the size does not
1192 * match exactly. This prevents a malicious client from passing a
1193 * buffer to a trusted client, lying about the size, and telling the
1194 * trusted client to try and texture from an image that goes
1195 * out-of-bounds. This sort of thing could lead to GPU hangs or worse
1196 * in the trusted client. The trusted client can protect itself against
1197 * this sort of attack but only if it can trust the buffer size.
1199 off_t import_size
= lseek(fd
, 0, SEEK_END
);
1200 if (import_size
== (off_t
)-1 || import_size
!= size
) {
1201 anv_gem_close(device
, gem_handle
);
1202 pthread_mutex_unlock(&cache
->mutex
);
1203 return vk_error(VK_ERROR_INVALID_EXTERNAL_HANDLE_KHX
);
1206 bo
= vk_alloc(&device
->alloc
, sizeof(struct anv_cached_bo
), 8,
1207 VK_SYSTEM_ALLOCATION_SCOPE_OBJECT
);
1209 anv_gem_close(device
, gem_handle
);
1210 pthread_mutex_unlock(&cache
->mutex
);
1211 return vk_error(VK_ERROR_OUT_OF_HOST_MEMORY
);
1216 anv_bo_init(&bo
->bo
, gem_handle
, size
);
1218 if (device
->instance
->physicalDevice
.supports_48bit_addresses
)
1219 bo
->bo
.flags
|= EXEC_OBJECT_SUPPORTS_48B_ADDRESS
;
1221 if (device
->instance
->physicalDevice
.has_exec_async
)
1222 bo
->bo
.flags
|= EXEC_OBJECT_ASYNC
;
1224 _mesa_hash_table_insert(cache
->bo_map
, (void *)(uintptr_t)gem_handle
, bo
);
1227 pthread_mutex_unlock(&cache
->mutex
);
1229 /* From the Vulkan spec:
1231 * "Importing memory from a file descriptor transfers ownership of
1232 * the file descriptor from the application to the Vulkan
1233 * implementation. The application must not perform any operations on
1234 * the file descriptor after a successful import."
1236 * If the import fails, we leave the file descriptor open.
1246 anv_bo_cache_export(struct anv_device
*device
,
1247 struct anv_bo_cache
*cache
,
1248 struct anv_bo
*bo_in
, int *fd_out
)
1250 assert(anv_bo_cache_lookup(cache
, bo_in
->gem_handle
) == bo_in
);
1251 struct anv_cached_bo
*bo
= (struct anv_cached_bo
*)bo_in
;
1253 int fd
= anv_gem_handle_to_fd(device
, bo
->bo
.gem_handle
);
1255 return vk_error(VK_ERROR_TOO_MANY_OBJECTS
);
1263 atomic_dec_not_one(uint32_t *counter
)
1272 old
= __sync_val_compare_and_swap(counter
, val
, val
- 1);
1281 anv_bo_cache_release(struct anv_device
*device
,
1282 struct anv_bo_cache
*cache
,
1283 struct anv_bo
*bo_in
)
1285 assert(anv_bo_cache_lookup(cache
, bo_in
->gem_handle
) == bo_in
);
1286 struct anv_cached_bo
*bo
= (struct anv_cached_bo
*)bo_in
;
1288 /* Try to decrement the counter but don't go below one. If this succeeds
1289 * then the refcount has been decremented and we are not the last
1292 if (atomic_dec_not_one(&bo
->refcount
))
1295 pthread_mutex_lock(&cache
->mutex
);
1297 /* We are probably the last reference since our attempt to decrement above
1298 * failed. However, we can't actually know until we are inside the mutex.
1299 * Otherwise, someone could import the BO between the decrement and our
1302 if (unlikely(__sync_sub_and_fetch(&bo
->refcount
, 1) > 0)) {
1303 /* Turns out we're not the last reference. Unlock and bail. */
1304 pthread_mutex_unlock(&cache
->mutex
);
1308 struct hash_entry
*entry
=
1309 _mesa_hash_table_search(cache
->bo_map
,
1310 (const void *)(uintptr_t)bo
->bo
.gem_handle
);
1312 _mesa_hash_table_remove(cache
->bo_map
, entry
);
1315 anv_gem_munmap(bo
->bo
.map
, bo
->bo
.size
);
1317 anv_gem_close(device
, bo
->bo
.gem_handle
);
1319 /* Don't unlock until we've actually closed the BO. The whole point of
1320 * the BO cache is to ensure that we correctly handle races with creating
1321 * and releasing GEM handles and we don't want to let someone import the BO
1322 * again between mutex unlock and closing the GEM handle.
1324 pthread_mutex_unlock(&cache
->mutex
);
1326 vk_free(&device
->alloc
, bo
);