On Tue, Jul 06, 2021 at 11:12:21AM -0700, John Harrison wrote:

On 7/1/2021 10:15, Matthew Brost wrote:

Add non blocking CTB send function, intel_guc_send_nb. GuC submission will send CTBs in the critical path and does not need to wait for these CTBs to complete before moving on, hence the need for this new function.

The non-blocking CTB now must have a flow control mechanism to ensure the buffer isn't overrun. A lazy spin wait is used as we believe the flow control condition should be rare with a properly sized buffer.

The function, intel_guc_send_nb, is exported in this patch but unused. Several patches later in the series make use of this function.

v2: (Michal)

• Use define for H2G room calculations
• Move INTEL_GUC_SEND_NB define

(Daniel Vetter)

• Use msleep_interruptible rather than cond_resched

v3: (Michal)

• Move includes to following patch
• s/INTEL_GUC_SEND_NB/INTEL_GUC_CT_SEND_NB/g

Signed-off-by: John Harrison [1]John.C.Harrison@Intel.com Signed-off-by: Matthew Brost [2]matthew.brost@intel.com

---

.../gt/uc/abi/guc_communication_ctb_abi.h | 3 +- drivers/gpu/drm/i915/gt/uc/intel_guc.h | 11 ++- drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 87 +++++++++++++++++-- drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h | 4 +- 4 files changed, 91 insertions(+), 14 deletions(-)

diff --git a/drivers/gpu/drm/i915/gt/uc/abi/guc_communication_ctb_abi.h b/driver s/gpu/drm/i915/gt/uc/abi/guc_communication_ctb_abi.h index e933ca02d0eb..99e1fad5ca20 100644 --- a/drivers/gpu/drm/i915/gt/uc/abi/guc_communication_ctb_abi.h +++ b/drivers/gpu/drm/i915/gt/uc/abi/guc_communication_ctb_abi.h @@ -79,7 +79,8 @@ static_assert(sizeof(struct guc_ct_buffer_desc) == 64);

• +---+-------+--------------------------------------------------------------

• */

-#define GUC_CTB_MSG_MIN_LEN 1u +#define GUC_CTB_HDR_LEN 1u +#define GUC_CTB_MSG_MIN_LEN GUC_CTB_HDR_LEN #define GUC_CTB_MSG_MAX_LEN 256u #define GUC_CTB_MSG_0_FENCE (0xffff << 16) #define GUC_CTB_MSG_0_FORMAT (0xf << 12) diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc.h b/drivers/gpu/drm/i915/gt/uc /intel_guc.h index 4abc59f6f3cd..72e4653222e2 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc.h +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc.h @@ -74,7 +74,14 @@ static inline struct intel_guc *log_to_guc(struct intel_guc_l og *log) static inline int intel_guc_send(struct intel_guc *guc, const u32 *action, u32 len) {

•   return intel_guc_ct_send(&guc->ct, action, len, NULL, 0);
  

•   return intel_guc_ct_send(&guc->ct, action, len, NULL, 0, 0);
  

+}

+static +inline int intel_guc_send_nb(struct intel_guc *guc, const u32 *action, u32 len) +{

•   return intel_guc_ct_send(&guc->ct, action, len, NULL, 0,
  

•                            INTEL_GUC_CT_SEND_NB);
  

}

static inline int @@ -82,7 +89,7 @@ intel_guc_send_and_receive(struct intel_guc *guc, const u32 *a ction, u32 len, u32 *response_buf, u32 response_buf_size) { return intel_guc_ct_send(&guc->ct, action, len,

•                            response_buf, response_buf_size);
  

•                            response_buf, response_buf_size, 0);
  

}

static inline void intel_guc_to_host_event_handler(struct intel_guc *guc) diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c b/drivers/gpu/drm/i915/gt /uc/intel_guc_ct.c index 43e03aa2dde8..fb825cc1d090 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c @@ -3,6 +3,8 @@

• Copyright © 2016-2019 Intel Corporation

*/

+#include <linux/circ_buf.h>

#include "i915_drv.h" #include "intel_guc_ct.h" #include "gt/intel_gt.h" @@ -373,7 +375,7 @@ static void write_barrier(struct intel_guc_ct *ct) static int ct_write(struct intel_guc_ct *ct, const u32 *action, u32 len /* in dwords */,

•               u32 fence)
  

•               u32 fence, u32 flags)
  

{ struct intel_guc_ct_buffer *ctb = &ct->ctbs.send; struct guc_ct_buffer_desc *desc = ctb->desc; @@ -409,7 +411,7 @@ static int ct_write(struct intel_guc_ct *ct, used = tail - head;

    /* make sure there is a space including extra dw for the fence */

•   if (unlikely(used + len + 1 >= size))
  

•   if (unlikely(used + len + GUC_CTB_HDR_LEN >= size))
  
  

  I thought the plan was to update the comment? Given that the '+1' is now 'HDR_LEN' it would be good to update the comment to say 'header' instead of 'fence'.

Yep, will fix.

            return -ENOSPC;

    /*

@@ -421,9 +423,13 @@ static int ct_write(struct intel_guc_ct *ct, FIELD_PREP(GUC_CTB_MSG_0_NUM_DWORDS, len) | FIELD_PREP(GUC_CTB_MSG_0_FENCE, fence);

•   hxg = FIELD_PREP(GUC_HXG_MSG_0_TYPE, GUC_HXG_TYPE_REQUEST) |
  

•         FIELD_PREP(GUC_HXG_REQUEST_MSG_0_ACTION |
  

•                    GUC_HXG_REQUEST_MSG_0_DATA0, action[0]);
  

•   hxg = (flags & INTEL_GUC_CT_SEND_NB) ?
  

•           (FIELD_PREP(GUC_HXG_MSG_0_TYPE, GUC_HXG_TYPE_EVENT) |
  

•            FIELD_PREP(GUC_HXG_EVENT_MSG_0_ACTION |
  

•                       GUC_HXG_EVENT_MSG_0_DATA0, action[0])) :
  

•           (FIELD_PREP(GUC_HXG_MSG_0_TYPE, GUC_HXG_TYPE_REQUEST) |
  

•            FIELD_PREP(GUC_HXG_REQUEST_MSG_0_ACTION |
  

•                       GUC_HXG_REQUEST_MSG_0_DATA0, action[0]));
  
  

  If would be much easier to read if this used a proper 'if' rather than an inline '?'. Or maybe have something like:

  type = SEND_NB ? TYPE_EVENT : TYPE REQUEST; hxg = PREP(type) | ACTION ...;

  Neither issue above is a blocker but I think the comment at least should be fixed up when merging. With that:

Probably a bit cleaner. Will fix.

Matt

Reviewed-by: John Harrison [3]John.C.Harrison@Intel.com

    CT_DEBUG(ct, "writing (tail %u) %*ph %*ph %*ph\n",
             tail, 4, &header, 4, &hxg, 4 * (len - 1), &action[1]);

@@ -500,6 +506,48 @@ static int wait_for_ct_request_update(struct ct_request *re q, u32 *status) return err; }

+static inline bool h2g_has_room(struct intel_guc_ct_buffer *ctb, u32 len_dw) +{

•   struct guc_ct_buffer_desc *desc = ctb->desc;
  

•   u32 head = READ_ONCE(desc->head);
  

•   u32 space;
  

•   space = CIRC_SPACE(desc->tail, head, ctb->size);
  

•   return space >= len_dw;
  

+}

+static int ct_send_nb(struct intel_guc_ct *ct,

•                 const u32 *action,
  

•                 u32 len,
  

•                 u32 flags)
  

+{

•   struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;
  

•   unsigned long spin_flags;
  

•   u32 fence;
  

•   int ret;
  

•   spin_lock_irqsave(&ctb->lock, spin_flags);
  

•   ret = h2g_has_room(ctb, len + GUC_CTB_HDR_LEN);
  

•   if (unlikely(!ret)) {
  

•           ret = -EBUSY;
  

•           goto out;
  

•   }
  

•   fence = ct_get_next_fence(ct);
  

•   ret = ct_write(ct, action, len, fence, flags);
  

•   if (unlikely(ret))
  

•           goto out;
  

•   intel_guc_notify(ct_to_guc(ct));
  

+out:

•   spin_unlock_irqrestore(&ctb->lock, spin_flags);
  

•   return ret;
  

+}

static int ct_send(struct intel_guc_ct *ct, const u32 *action, u32 len, @@ -507,8 +555,10 @@ static int ct_send(struct intel_guc_ct *ct, u32 response_buf_size, u32 *status) {

•   struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;
    struct ct_request request;
    unsigned long flags;
  

•   unsigned int sleep_period_ms = 1;
    u32 fence;
    int err;
  
  

@@ -516,8 +566,24 @@ static int ct_send(struct intel_guc_ct *ct, GEM_BUG_ON(!len); GEM_BUG_ON(len & ~GUC_CT_MSG_LEN_MASK); GEM_BUG_ON(!response_buf && response_buf_size);

•   might_sleep();
  

•   /*
  

•    * We use a lazy spin wait loop here as we believe that if the CT
  

•    * buffers are sized correctly the flow control condition should be
  

•    * rare.
  

•    */
  

+retry:

•   spin_lock_irqsave(&ctb->lock, flags);
  

•   if (unlikely(!h2g_has_room(ctb, len + GUC_CTB_HDR_LEN))) {
  

•           spin_unlock_irqrestore(&ctb->lock, flags);
  
  

•   spin_lock_irqsave(&ct->ctbs.send.lock, flags);
  

•           if (msleep_interruptible(sleep_period_ms))
  

•                   return -EINTR;
  

•           sleep_period_ms = sleep_period_ms << 1;
  

•           goto retry;
  

•   }
  
    fence = ct_get_next_fence(ct);
    request.fence = fence;
  

@@ -529,9 +595,9 @@ static int ct_send(struct intel_guc_ct *ct, list_add_tail(&request.link, &ct->requests.pending); spin_unlock(&ct->requests.lock);

•   err = ct_write(ct, action, len, fence);
  

•   err = ct_write(ct, action, len, fence, 0);
  
  

•   spin_unlock_irqrestore(&ct->ctbs.send.lock, flags);
  

•   spin_unlock_irqrestore(&ctb->lock, flags);
  
    if (unlikely(err))
            goto unlink;
  

@@ -571,7 +637,7 @@ static int ct_send(struct intel_guc_ct *ct,

• Command Transport (CT) buffer based GuC send function.

*/ int intel_guc_ct_send(struct intel_guc_ct *ct, const u32 *action, u32 len,

•                 u32 *response_buf, u32 response_buf_size)
  

•                 u32 *response_buf, u32 response_buf_size, u32 flags)
  

{ u32 status = ~0; /* undefined */ int ret; @@ -581,6 +647,9 @@ int intel_guc_ct_send(struct intel_guc_ct *ct, const u32 *ac tion, u32 len, return -ENODEV; }

•   if (flags & INTEL_GUC_CT_SEND_NB)
  

•           return ct_send_nb(ct, action, len, flags);
  

•   ret = ct_send(ct, action, len, response_buf, response_buf_size, &status)
  

; if (unlikely(ret < 0)) { CT_ERROR(ct, "Sending action %#x failed (err=%d status=%#X)\n", diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h b/drivers/gpu/drm/i915/gt /uc/intel_guc_ct.h index 1ae2dde6db93..5bb8bef024c8 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h @@ -42,7 +42,6 @@ struct intel_guc_ct_buffer { bool broken; };

/** Top-level structure for Command Transport related data

• Includes a pair of CT buffers for bi-directional communication and tracking

@@ -87,8 +86,9 @@ static inline bool intel_guc_ct_enabled(struct intel_guc_ct *c t) return ct->enabled; }

+#define INTEL_GUC_CT_SEND_NB BIT(31) int intel_guc_ct_send(struct intel_guc_ct *ct, const u32 *action, u32 len,

•                 u32 *response_buf, u32 response_buf_size);
  

•                 u32 *response_buf, u32 response_buf_size, u32 flags);
  

void intel_guc_ct_event_handler(struct intel_guc_ct *ct);

#endif /* _INTEL_GUC_CT_H_ */

References

1. mailto:John.C.Harrison@Intel.com
2. mailto:matthew.brost@intel.com
3. mailto:John.C.Harrison@Intel.com

On 7/1/2021 10:15, Matthew Brost wrote:

Implement a stall timer which fails H2G CTBs once a period of time with no forward progress is reached to prevent deadlock.

v2: (Michal)

• Improve error message in ct_deadlock()
• Set broken when ct_deadlock() returns true
• Return -EPIPE on ct_deadlock()

v3: (Michal)

• Add ms to stall timer comment

(Matthew)

• Move broken check to intel_guc_ct_send()

Signed-off-by: John Harrison John.C.Harrison@Intel.com Signed-off-by: Daniele Ceraolo Spurio daniele.ceraolospurio@intel.com Signed-off-by: Matthew Brost matthew.brost@intel.com

Looks plausible to me.

Reviewed-by: John Harrison John.C.Harrison@Intel.com

---

drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 62 ++++++++++++++++++++--- drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h | 4 ++ 2 files changed, 59 insertions(+), 7 deletions(-)

diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c index fb825cc1d090..a9cb7b608520 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c @@ -4,6 +4,9 @@ */

#include <linux/circ_buf.h> +#include <linux/ktime.h> +#include <linux/time64.h> +#include <linux/timekeeping.h>

#include "i915_drv.h" #include "intel_guc_ct.h" @@ -316,6 +319,7 @@ int intel_guc_ct_enable(struct intel_guc_ct *ct) goto err_deregister;

ct->enabled = true;

• ct->stall_time = KTIME_MAX;

  return 0;

@@ -388,9 +392,6 @@ static int ct_write(struct intel_guc_ct *ct, u32 *cmds = ctb->cmds; unsigned int i;

• if (unlikely(ctb->broken))

• return -EPIPE;
  

• if (unlikely(desc->status)) goto corrupted;

@@ -506,6 +507,25 @@ static int wait_for_ct_request_update(struct ct_request *req, u32 *status) return err; }

+#define GUC_CTB_TIMEOUT_MS 1500 +static inline bool ct_deadlocked(struct intel_guc_ct *ct) +{

• long timeout = GUC_CTB_TIMEOUT_MS;
• bool ret = ktime_ms_delta(ktime_get(), ct->stall_time) > timeout;
• if (unlikely(ret)) {

• struct guc_ct_buffer_desc *send = ct->ctbs.send.desc;
  

• struct guc_ct_buffer_desc *recv = ct->ctbs.send.desc;
  

• CT_ERROR(ct, "Communication stalled for %lld ms, desc status=%#x,%#x\n",
  

• 	 ktime_ms_delta(ktime_get(), ct->stall_time),
  

• 	 send->status, recv->status);
  

• ct->ctbs.send.broken = true;
  

• }
• return ret;

+}

• static inline bool h2g_has_room(struct intel_guc_ct_buffer *ctb, u32 len_dw) { struct guc_ct_buffer_desc *desc = ctb->desc;

@@ -517,6 +537,26 @@ static inline bool h2g_has_room(struct intel_guc_ct_buffer *ctb, u32 len_dw) return space >= len_dw; }

+static int has_room_nb(struct intel_guc_ct *ct, u32 len_dw) +{

• struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;
• lockdep_assert_held(&ct->ctbs.send.lock);
• if (unlikely(!h2g_has_room(ctb, len_dw))) {

• if (ct->stall_time == KTIME_MAX)
  

• 	ct->stall_time = ktime_get();
  

• if (unlikely(ct_deadlocked(ct)))
  

• 	return -EPIPE;
  

• else
  

• 	return -EBUSY;
  

• }
• ct->stall_time = KTIME_MAX;
• return 0;

+}

• static int ct_send_nb(struct intel_guc_ct *ct, const u32 *action, u32 len,

@@ -529,11 +569,9 @@ static int ct_send_nb(struct intel_guc_ct *ct,

spin_lock_irqsave(&ctb->lock, spin_flags);

• ret = h2g_has_room(ctb, len + GUC_CTB_HDR_LEN);
• if (unlikely(!ret)) {

• ret = -EBUSY;
  

• ret = has_room_nb(ct, len + GUC_CTB_HDR_LEN);
• if (unlikely(ret)) goto out;

• }

  fence = ct_get_next_fence(ct); ret = ct_write(ct, action, len, fence, flags);

@@ -576,8 +614,13 @@ static int ct_send(struct intel_guc_ct *ct, retry: spin_lock_irqsave(&ctb->lock, flags); if (unlikely(!h2g_has_room(ctb, len + GUC_CTB_HDR_LEN))) {

• if (ct->stall_time == KTIME_MAX)
  

• 	ct->stall_time = ktime_get();
  

  spin_unlock_irqrestore(&ctb->lock, flags);

• if (unlikely(ct_deadlocked(ct)))
  

• 	return -EPIPE;
  

• if (msleep_interruptible(sleep_period_ms)) return -EINTR; sleep_period_ms = sleep_period_ms << 1;

@@ -585,6 +628,8 @@ static int ct_send(struct intel_guc_ct *ct, goto retry; }

• ct->stall_time = KTIME_MAX;
• fence = ct_get_next_fence(ct); request.fence = fence; request.status = 0;

@@ -647,6 +692,9 @@ int intel_guc_ct_send(struct intel_guc_ct *ct, const u32 *action, u32 len, return -ENODEV; }

• if (unlikely(ct->ctbs.send.broken))

• return -EPIPE;
  

• if (flags & INTEL_GUC_CT_SEND_NB) return ct_send_nb(ct, action, len, flags);

diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h index 5bb8bef024c8..bee03794c1eb 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h @@ -9,6 +9,7 @@ #include <linux/interrupt.h> #include <linux/spinlock.h> #include <linux/workqueue.h> +#include <linux/ktime.h>

#include "intel_guc_fwif.h"

@@ -68,6 +69,9 @@ struct intel_guc_ct { struct list_head incoming; /* incoming requests */ struct work_struct worker; /* handler for incoming requests */ } requests;

• /** @stall_time: time of first time a CTB submission is stalled */

• ktime_t stall_time; };

  void intel_guc_ct_init_early(struct intel_guc_ct *ct);

On 7/1/2021 10:15, Matthew Brost wrote:

CTB writes are now in the path of command submission and should be optimized for performance. Rather than reading CTB descriptor values (e.g. head, tail) which could result in accesses across the PCIe bus, store shadow local copies and only read/write the descriptor values when absolutely necessary. Also store the current space in the each channel locally.

v2: (Michel)

• Add additional sanity checks for head / tail pointers
• Use GUC_CTB_HDR_LEN rather than magic 1

Signed-off-by: John Harrison John.C.Harrison@Intel.com Signed-off-by: Matthew Brost matthew.brost@intel.com

---

drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 88 +++++++++++++++-------- drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h | 6 ++ 2 files changed, 65 insertions(+), 29 deletions(-)

diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c index a9cb7b608520..5b8b4ff609e2 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c @@ -130,6 +130,10 @@ static void guc_ct_buffer_desc_init(struct guc_ct_buffer_desc *desc) static void guc_ct_buffer_reset(struct intel_guc_ct_buffer *ctb) { ctb->broken = false;

• ctb->tail = 0;
• ctb->head = 0;
• ctb->space = CIRC_SPACE(ctb->tail, ctb->head, ctb->size);
• guc_ct_buffer_desc_init(ctb->desc); }

@@ -383,10 +387,8 @@ static int ct_write(struct intel_guc_ct *ct, { struct intel_guc_ct_buffer *ctb = &ct->ctbs.send; struct guc_ct_buffer_desc *desc = ctb->desc;

• u32 head = desc->head;
• u32 tail = desc->tail;

• u32 tail = ctb->tail; u32 size = ctb->size;

• u32 used; u32 header; u32 hxg; u32 *cmds = ctb->cmds;

@@ -395,25 +397,22 @@ static int ct_write(struct intel_guc_ct *ct, if (unlikely(desc->status)) goto corrupted;

• if (unlikely((tail | head) >= size)) {

• GEM_BUG_ON(tail > size);

+#ifdef CONFIG_DRM_I915_DEBUG_GUC

• if (unlikely(tail != READ_ONCE(desc->tail))) {

• CT_ERROR(ct, "Tail was modified %u != %u\n",
  

• 	 desc->tail, ctb->tail);
  

• desc->status |= GUC_CTB_STATUS_MISMATCH;
  

• goto corrupted;
  

• }
• if (unlikely((desc->tail | desc->head) >= size)) { CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n",

• 	 head, tail, size);
  

• 	 desc->head, desc->tail, size);
  

  desc->status |= GUC_CTB_STATUS_OVERFLOW; goto corrupted; }

• /*

• * tail == head condition indicates empty. GuC FW does not support
  

• * using up the entire buffer to get tail == head meaning full.
  

• */
  

• if (tail < head)

• used = (size - head) + tail;
  

• else

• used = tail - head;
  

• /* make sure there is a space including extra dw for the fence */
• if (unlikely(used + len + GUC_CTB_HDR_LEN >= size))

• return -ENOSPC;
  

+#endif

/* * dw0: CT header (including fence) @@ -454,7 +453,9 @@ static int ct_write(struct intel_guc_ct *ct, write_barrier(ct);

/* now update descriptor */

• ctb->tail = tail; WRITE_ONCE(desc->tail, tail);

• ctb->space -= len + GUC_CTB_HDR_LEN;

  return 0;

@@ -470,7 +471,7 @@ static int ct_write(struct intel_guc_ct *ct,

• @req: pointer to pending request
• @status: placeholder for status

• • For each sent request, Guc shall send bac CT response message.

• • For each sent request, GuC shall send back CT response message.
  • Our message handler will update status of tracked request once
  • response message with given fence is received. Wait here and
  • check for valid response status value.

@@ -526,24 +527,35 @@ static inline bool ct_deadlocked(struct intel_guc_ct *ct) return ret; }

-static inline bool h2g_has_room(struct intel_guc_ct_buffer *ctb, u32 len_dw) +static inline bool h2g_has_room(struct intel_guc_ct *ct, u32 len_dw) {

• struct guc_ct_buffer_desc *desc = ctb->desc;
• u32 head = READ_ONCE(desc->head);

• struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;
• u32 head; u32 space;

• space = CIRC_SPACE(desc->tail, head, ctb->size);

• if (ctb->space >= len_dw)

• return true;
  

• head = READ_ONCE(ctb->desc->head);

• if (unlikely(head > ctb->size)) {

• CT_ERROR(ct, "Corrupted descriptor head=%u tail=%u size=%u\n",
  

• 	 ctb->desc->head, ctb->desc->tail, ctb->size);
  

• ctb->desc->status |= GUC_CTB_STATUS_OVERFLOW;
  

• ctb->broken = true;
  

• return false;
  

• }

• space = CIRC_SPACE(ctb->tail, head, ctb->size);

• ctb->space = space;

  return space >= len_dw; }

  static int has_room_nb(struct intel_guc_ct *ct, u32 len_dw) {

• struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;

• lockdep_assert_held(&ct->ctbs.send.lock);

• if (unlikely(!h2g_has_room(ctb, len_dw))) {

• if (unlikely(!h2g_has_room(ct, len_dw))) { if (ct->stall_time == KTIME_MAX) ct->stall_time = ktime_get();

@@ -613,7 +625,7 @@ static int ct_send(struct intel_guc_ct *ct, */ retry: spin_lock_irqsave(&ctb->lock, flags);

• if (unlikely(!h2g_has_room(ctb, len + GUC_CTB_HDR_LEN))) {

• if (unlikely(!h2g_has_room(ct, len + GUC_CTB_HDR_LEN))) { if (ct->stall_time == KTIME_MAX) ct->stall_time = ktime_get(); spin_unlock_irqrestore(&ctb->lock, flags);

@@ -733,7 +745,7 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg) { struct intel_guc_ct_buffer *ctb = &ct->ctbs.recv; struct guc_ct_buffer_desc *desc = ctb->desc;

• u32 head = desc->head;

• u32 head = ctb->head; u32 tail = desc->tail; u32 size = ctb->size; u32 *cmds = ctb->cmds;

@@ -748,12 +760,29 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg) if (unlikely(desc->status)) goto corrupted;

• if (unlikely((tail | head) >= size)) {

• GEM_BUG_ON(head > size);

Is the BUG_ON necessary given that both options below do the same check but as a corrupted buffer test (with subsequent recovery by GT reset?) rather than killing the driver.

+#ifdef CONFIG_DRM_I915_DEBUG_GUC

• if (unlikely(head != READ_ONCE(desc->head))) {

• CT_ERROR(ct, "Head was modified %u != %u\n",
  

• 	 desc->head, ctb->head);
  

• desc->status |= GUC_CTB_STATUS_MISMATCH;
  

• goto corrupted;
  

• }
• if (unlikely((desc->tail | desc->head) >= size)) {

• CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n",
  

• 	 head, tail, size);
  

• desc->status |= GUC_CTB_STATUS_OVERFLOW;
  

• goto corrupted;
  

• }

+#else

• if (unlikely((tail | ctb->head) >= size)) {

Could just be 'head' rather than 'ctb->head'.

John.

CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n",
	 head, tail, size);
desc->status |= GUC_CTB_STATUS_OVERFLOW;
goto corrupted;

} +#endif

/* tail == head condition indicates empty */ available = tail - head; @@ -803,6 +832,7 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg) } CT_DEBUG(ct, "received %*ph\n", 4 * len, (*msg)->msg);

• ctb->head = head; /* now update descriptor */ WRITE_ONCE(desc->head, head);

diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h index bee03794c1eb..edd1bba0445d 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h @@ -33,6 +33,9 @@ struct intel_guc;

• @desc: pointer to the buffer descriptor
• @cmds: pointer to the commands buffer
• @size: size of the commands buffer in dwords

• • @head: local shadow copy of head in dwords
• • @tail: local shadow copy of tail in dwords
• • @space: local shadow copy of space in dwords
  • @broken: flag to indicate if descriptor data is broken
  */ struct intel_guc_ct_buffer {

@@ -40,6 +43,9 @@ struct intel_guc_ct_buffer { struct guc_ct_buffer_desc *desc; u32 *cmds; u32 size;

• u32 tail;
• u32 head;
• u32 space; bool broken; };

On 7/6/2021 12:12, Michal Wajdeczko wrote:

On 06.07.2021 21:00, John Harrison wrote:

...

On 7/1/2021 10:15, Matthew Brost wrote:

...

CTB writes are now in the path of command submission and should be optimized for performance. Rather than reading CTB descriptor values (e.g. head, tail) which could result in accesses across the PCIe bus, store shadow local copies and only read/write the descriptor values when absolutely necessary. Also store the current space in the each channel locally.

v2:   (Michel)    - Add additional sanity checks for head / tail pointers    - Use GUC_CTB_HDR_LEN rather than magic 1

Signed-off-by: John Harrison John.C.Harrison@Intel.com Signed-off-by: Matthew Brost matthew.brost@intel.com

---

drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 88 +++++++++++++++--------   drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h |  6 ++   2 files changed, 65 insertions(+), 29 deletions(-)

diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c index a9cb7b608520..5b8b4ff609e2 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c @@ -130,6 +130,10 @@ static void guc_ct_buffer_desc_init(struct guc_ct_buffer_desc *desc)   static void guc_ct_buffer_reset(struct intel_guc_ct_buffer *ctb)   {       ctb->broken = false; +    ctb->tail = 0; +    ctb->head = 0; +    ctb->space = CIRC_SPACE(ctb->tail, ctb->head, ctb->size);

guc_ct_buffer_desc_init(ctb->desc);   }   @@ -383,10 +387,8 @@ static int ct_write(struct intel_guc_ct *ct,   {       struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;       struct guc_ct_buffer_desc *desc = ctb->desc; -    u32 head = desc->head; -    u32 tail = desc->tail; +    u32 tail = ctb->tail;       u32 size = ctb->size; -    u32 used;       u32 header;       u32 hxg;       u32 *cmds = ctb->cmds; @@ -395,25 +397,22 @@ static int ct_write(struct intel_guc_ct *ct,       if (unlikely(desc->status))           goto corrupted;   -    if (unlikely((tail | head) >= size)) { +    GEM_BUG_ON(tail > size);

+#ifdef CONFIG_DRM_I915_DEBUG_GUC +    if (unlikely(tail != READ_ONCE(desc->tail))) { +        CT_ERROR(ct, "Tail was modified %u != %u\n", +             desc->tail, ctb->tail); +        desc->status |= GUC_CTB_STATUS_MISMATCH; +        goto corrupted; +    } +    if (unlikely((desc->tail | desc->head) >= size)) {           CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n", -             head, tail, size); +             desc->head, desc->tail, size);           desc->status |= GUC_CTB_STATUS_OVERFLOW;           goto corrupted;       }

-    /* -     * tail == head condition indicates empty. GuC FW does not support -     * using up the entire buffer to get tail == head meaning full. -     */ -    if (tail < head) -        used = (size - head) + tail; -    else -        used = tail - head;

-    /* make sure there is a space including extra dw for the fence */ -    if (unlikely(used + len + GUC_CTB_HDR_LEN >= size)) -        return -ENOSPC; +#endif         /*        * dw0: CT header (including fence) @@ -454,7 +453,9 @@ static int ct_write(struct intel_guc_ct *ct,       write_barrier(ct);         /* now update descriptor */ +    ctb->tail = tail;       WRITE_ONCE(desc->tail, tail); +    ctb->space -= len + GUC_CTB_HDR_LEN;         return 0;   @@ -470,7 +471,7 @@ static int ct_write(struct intel_guc_ct *ct,    * @req:    pointer to pending request    * @status:    placeholder for status    *

• • For each sent request, Guc shall send bac CT response message.

• • For each sent request, GuC shall send back CT response message.

* Our message handler will update status of tracked request once    * response message with given fence is received. Wait here and    * check for valid response status value. @@ -526,24 +527,35 @@ static inline bool ct_deadlocked(struct intel_guc_ct *ct)       return ret;   }   -static inline bool h2g_has_room(struct intel_guc_ct_buffer *ctb, u32 len_dw) +static inline bool h2g_has_room(struct intel_guc_ct *ct, u32 len_dw)   { -    struct guc_ct_buffer_desc *desc = ctb->desc; -    u32 head = READ_ONCE(desc->head); +    struct intel_guc_ct_buffer *ctb = &ct->ctbs.send; +    u32 head;       u32 space;   -    space = CIRC_SPACE(desc->tail, head, ctb->size); +    if (ctb->space >= len_dw) +        return true;

+    head = READ_ONCE(ctb->desc->head); +    if (unlikely(head > ctb->size)) { +        CT_ERROR(ct, "Corrupted descriptor head=%u tail=%u size=%u\n", +             ctb->desc->head, ctb->desc->tail, ctb->size); +        ctb->desc->status |= GUC_CTB_STATUS_OVERFLOW; +        ctb->broken = true; +        return false; +    }

+    space = CIRC_SPACE(ctb->tail, head, ctb->size); +    ctb->space = space;         return space >= len_dw;   }     static int has_room_nb(struct intel_guc_ct *ct, u32 len_dw)   { -    struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;

lockdep_assert_held(&ct->ctbs.send.lock);   -    if (unlikely(!h2g_has_room(ctb, len_dw))) { +    if (unlikely(!h2g_has_room(ct, len_dw))) {           if (ct->stall_time == KTIME_MAX)               ct->stall_time = ktime_get();   @@ -613,7 +625,7 @@ static int ct_send(struct intel_guc_ct *ct,        */   retry:       spin_lock_irqsave(&ctb->lock, flags); -    if (unlikely(!h2g_has_room(ctb, len + GUC_CTB_HDR_LEN))) { +    if (unlikely(!h2g_has_room(ct, len + GUC_CTB_HDR_LEN))) {           if (ct->stall_time == KTIME_MAX)               ct->stall_time = ktime_get();           spin_unlock_irqrestore(&ctb->lock, flags); @@ -733,7 +745,7 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg)   {       struct intel_guc_ct_buffer *ctb = &ct->ctbs.recv;       struct guc_ct_buffer_desc *desc = ctb->desc; -    u32 head = desc->head; +    u32 head = ctb->head;       u32 tail = desc->tail;       u32 size = ctb->size;       u32 *cmds = ctb->cmds; @@ -748,12 +760,29 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg)       if (unlikely(desc->status))           goto corrupted;   -    if (unlikely((tail | head) >= size)) { +    GEM_BUG_ON(head > size);

Is the BUG_ON necessary given that both options below do the same check but as a corrupted buffer test (with subsequent recovery by GT reset?) rather than killing the driver.

"head" and "size" are now fully owned by the driver. BUGON here is to make sure driver is coded correctly.

The point is that both sides of the #if below also validate head. So first there is a BUG_ON, then there is the same test but without blowing the driver apart. One or the other is not required. My vote would be to keep the recoverable test rather than the BUG_ON.

John.

...

...

+#ifdef CONFIG_DRM_I915_DEBUG_GUC +    if (unlikely(head != READ_ONCE(desc->head))) { +        CT_ERROR(ct, "Head was modified %u != %u\n", +             desc->head, ctb->head); +        desc->status |= GUC_CTB_STATUS_MISMATCH; +        goto corrupted; +    } +    if (unlikely((desc->tail | desc->head) >= size)) { +        CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n", +             head, tail, size); +        desc->status |= GUC_CTB_STATUS_OVERFLOW; +        goto corrupted; +    } +#else +    if (unlikely((tail | ctb->head) >= size)) {

Could just be 'head' rather than 'ctb->head'.

or drop "ctb->head" completely since this is driver owned field and above you already have BUGON to test it

Michal

...

John.

...

CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n",                head, tail, size);           desc->status |= GUC_CTB_STATUS_OVERFLOW;           goto corrupted;       } +#endif         /* tail == head condition indicates empty */       available = tail - head; @@ -803,6 +832,7 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg)       }       CT_DEBUG(ct, "received %*ph\n", 4 * len, (*msg)->msg);   +    ctb->head = head;       /* now update descriptor */       WRITE_ONCE(desc->head, head);   diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h index bee03794c1eb..edd1bba0445d 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h @@ -33,6 +33,9 @@ struct intel_guc;    * @desc: pointer to the buffer descriptor    * @cmds: pointer to the commands buffer    * @size: size of the commands buffer in dwords

• • @head: local shadow copy of head in dwords
• • @tail: local shadow copy of tail in dwords
• • @space: local shadow copy of space in dwords

* @broken: flag to indicate if descriptor data is broken    */   struct intel_guc_ct_buffer { @@ -40,6 +43,9 @@ struct intel_guc_ct_buffer {       struct guc_ct_buffer_desc *desc;       u32 *cmds;       u32 size; +    u32 tail; +    u32 head; +    u32 space;       bool broken;   };

On Tue, Jul 06, 2021 at 09:33:23PM +0200, Michal Wajdeczko wrote:

On 06.07.2021 21:19, John Harrison wrote:

...

On 7/6/2021 12:12, Michal Wajdeczko wrote:

...

On 06.07.2021 21:00, John Harrison wrote:

...

On 7/1/2021 10:15, Matthew Brost wrote:

...

CTB writes are now in the path of command submission and should be optimized for performance. Rather than reading CTB descriptor values (e.g. head, tail) which could result in accesses across the PCIe bus, store shadow local copies and only read/write the descriptor values when absolutely necessary. Also store the current space in the each channel locally.

v2:    (Michel)     - Add additional sanity checks for head / tail pointers     - Use GUC_CTB_HDR_LEN rather than magic 1

Signed-off-by: John Harrison John.C.Harrison@Intel.com Signed-off-by: Matthew Brost matthew.brost@intel.com

---

drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 88 +++++++++++++++--------    drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h |  6 ++    2 files changed, 65 insertions(+), 29 deletions(-)

diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c index a9cb7b608520..5b8b4ff609e2 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c @@ -130,6 +130,10 @@ static void guc_ct_buffer_desc_init(struct guc_ct_buffer_desc *desc)    static void guc_ct_buffer_reset(struct intel_guc_ct_buffer *ctb)    {        ctb->broken = false; +    ctb->tail = 0; +    ctb->head = 0; +    ctb->space = CIRC_SPACE(ctb->tail, ctb->head, ctb->size);

guc_ct_buffer_desc_init(ctb->desc);    }    @@ -383,10 +387,8 @@ static int ct_write(struct intel_guc_ct *ct,    {        struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;        struct guc_ct_buffer_desc *desc = ctb->desc; -    u32 head = desc->head; -    u32 tail = desc->tail; +    u32 tail = ctb->tail;        u32 size = ctb->size; -    u32 used;        u32 header;        u32 hxg;        u32 *cmds = ctb->cmds; @@ -395,25 +397,22 @@ static int ct_write(struct intel_guc_ct *ct,        if (unlikely(desc->status))            goto corrupted;    -    if (unlikely((tail | head) >= size)) { +    GEM_BUG_ON(tail > size);

+#ifdef CONFIG_DRM_I915_DEBUG_GUC +    if (unlikely(tail != READ_ONCE(desc->tail))) { +        CT_ERROR(ct, "Tail was modified %u != %u\n", +             desc->tail, ctb->tail); +        desc->status |= GUC_CTB_STATUS_MISMATCH; +        goto corrupted; +    } +    if (unlikely((desc->tail | desc->head) >= size)) {            CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n", -             head, tail, size); +             desc->head, desc->tail, size);            desc->status |= GUC_CTB_STATUS_OVERFLOW;            goto corrupted;        }

-    /* -     * tail == head condition indicates empty. GuC FW does not support -     * using up the entire buffer to get tail == head meaning full. -     */ -    if (tail < head) -        used = (size - head) + tail; -    else -        used = tail - head;

-    /* make sure there is a space including extra dw for the fence */ -    if (unlikely(used + len + GUC_CTB_HDR_LEN >= size)) -        return -ENOSPC; +#endif          /*         * dw0: CT header (including fence) @@ -454,7 +453,9 @@ static int ct_write(struct intel_guc_ct *ct,        write_barrier(ct);          /* now update descriptor */ +    ctb->tail = tail;        WRITE_ONCE(desc->tail, tail); +    ctb->space -= len + GUC_CTB_HDR_LEN;          return 0;    @@ -470,7 +471,7 @@ static int ct_write(struct intel_guc_ct *ct,     * @req:    pointer to pending request     * @status:    placeholder for status     *

• • For each sent request, Guc shall send bac CT response message.

• • For each sent request, GuC shall send back CT response message.

* Our message handler will update status of tracked request once     * response message with given fence is received. Wait here and     * check for valid response status value. @@ -526,24 +527,35 @@ static inline bool ct_deadlocked(struct intel_guc_ct *ct)        return ret;    }    -static inline bool h2g_has_room(struct intel_guc_ct_buffer *ctb, u32 len_dw) +static inline bool h2g_has_room(struct intel_guc_ct *ct, u32 len_dw)    { -    struct guc_ct_buffer_desc *desc = ctb->desc; -    u32 head = READ_ONCE(desc->head); +    struct intel_guc_ct_buffer *ctb = &ct->ctbs.send; +    u32 head;        u32 space;    -    space = CIRC_SPACE(desc->tail, head, ctb->size); +    if (ctb->space >= len_dw) +        return true;

+    head = READ_ONCE(ctb->desc->head); +    if (unlikely(head > ctb->size)) { +        CT_ERROR(ct, "Corrupted descriptor head=%u tail=%u size=%u\n", +             ctb->desc->head, ctb->desc->tail, ctb->size); +        ctb->desc->status |= GUC_CTB_STATUS_OVERFLOW; +        ctb->broken = true; +        return false; +    }

+    space = CIRC_SPACE(ctb->tail, head, ctb->size); +    ctb->space = space;          return space >= len_dw;    }      static int has_room_nb(struct intel_guc_ct *ct, u32 len_dw)    { -    struct intel_guc_ct_buffer *ctb = &ct->ctbs.send;

lockdep_assert_held(&ct->ctbs.send.lock);    -    if (unlikely(!h2g_has_room(ctb, len_dw))) { +    if (unlikely(!h2g_has_room(ct, len_dw))) {            if (ct->stall_time == KTIME_MAX)                ct->stall_time = ktime_get();    @@ -613,7 +625,7 @@ static int ct_send(struct intel_guc_ct *ct,         */    retry:        spin_lock_irqsave(&ctb->lock, flags); -    if (unlikely(!h2g_has_room(ctb, len + GUC_CTB_HDR_LEN))) { +    if (unlikely(!h2g_has_room(ct, len + GUC_CTB_HDR_LEN))) {            if (ct->stall_time == KTIME_MAX)                ct->stall_time = ktime_get();            spin_unlock_irqrestore(&ctb->lock, flags); @@ -733,7 +745,7 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg)    {        struct intel_guc_ct_buffer *ctb = &ct->ctbs.recv;        struct guc_ct_buffer_desc *desc = ctb->desc; -    u32 head = desc->head; +    u32 head = ctb->head;        u32 tail = desc->tail;        u32 size = ctb->size;        u32 *cmds = ctb->cmds; @@ -748,12 +760,29 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg)        if (unlikely(desc->status))            goto corrupted;    -    if (unlikely((tail | head) >= size)) { +    GEM_BUG_ON(head > size);

This is driver owned field so I think a GEM_BUG_ON is correct as if this blows the driver apart we have a bug in the i915.

...

...

...

Is the BUG_ON necessary given that both options below do the same check but as a corrupted buffer test (with subsequent recovery by GT reset?) rather than killing the driver.

"head" and "size" are now fully owned by the driver. BUGON here is to make sure driver is coded correctly.

The point is that both sides of the #if below also validate head. So

but not the same "head"

under DEBUG we are validating the one from descriptor (together with tail) - and that should be recoverable as if this fails it was clearly not our fault.

but under non-DEBUG we were attempting to validate again the local one, pretending that this is recoverable, but it is not, as this is our fault (elsewhere in i915 we don't attempt to recover from obvious coding errors).

...

first there is a BUG_ON, then there is the same test but without blowing the driver apart. One or the other is not required. My vote would be to keep the recoverable test rather than the BUG_ON.

IMHO we should keep GEMBUGON and drop redundant check in non-DEBUG.

But let Matt decide.

I think I'll drop the testing of the head value and keep the BUG_ON.

Matt

Michal

...

John.

...

...

...

+#ifdef CONFIG_DRM_I915_DEBUG_GUC +    if (unlikely(head != READ_ONCE(desc->head))) { +        CT_ERROR(ct, "Head was modified %u != %u\n", +             desc->head, ctb->head); +        desc->status |= GUC_CTB_STATUS_MISMATCH; +        goto corrupted; +    } +    if (unlikely((desc->tail | desc->head) >= size)) { +        CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n", +             head, tail, size); +        desc->status |= GUC_CTB_STATUS_OVERFLOW; +        goto corrupted; +    } +#else +    if (unlikely((tail | ctb->head) >= size)) {

Could just be 'head' rather than 'ctb->head'.

or drop "ctb->head" completely since this is driver owned field and above you already have BUGON to test it

Michal

...

John.

...

CT_ERROR(ct, "Invalid offsets head=%u tail=%u (size=%u)\n",                 head, tail, size);            desc->status |= GUC_CTB_STATUS_OVERFLOW;            goto corrupted;        } +#endif          /* tail == head condition indicates empty */        available = tail - head; @@ -803,6 +832,7 @@ static int ct_read(struct intel_guc_ct *ct, struct ct_incoming_msg **msg)        }        CT_DEBUG(ct, "received %*ph\n", 4 * len, (*msg)->msg);    +    ctb->head = head;        /* now update descriptor */        WRITE_ONCE(desc->head, head);    diff --git a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h index bee03794c1eb..edd1bba0445d 100644 --- a/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h +++ b/drivers/gpu/drm/i915/gt/uc/intel_guc_ct.h @@ -33,6 +33,9 @@ struct intel_guc;     * @desc: pointer to the buffer descriptor     * @cmds: pointer to the commands buffer     * @size: size of the commands buffer in dwords

• • @head: local shadow copy of head in dwords
• • @tail: local shadow copy of tail in dwords
• • @space: local shadow copy of space in dwords

* @broken: flag to indicate if descriptor data is broken     */    struct intel_guc_ct_buffer { @@ -40,6 +43,9 @@ struct intel_guc_ct_buffer {        struct guc_ct_buffer_desc *desc;        u32 *cmds;        u32 size; +    u32 tail; +    u32 head; +    u32 space;        bool broken;    };