2019-06-03 08:44:50 +03:00
|
|
|
/* SPDX-License-Identifier: GPL-2.0-only */
|
2012-12-10 20:29:28 +04:00
|
|
|
/*
|
|
|
|
* Copyright (C) 2012,2013 - ARM Ltd
|
|
|
|
* Author: Marc Zyngier <marc.zyngier@arm.com>
|
|
|
|
*
|
|
|
|
* Derived from arch/arm/include/asm/kvm_host.h:
|
|
|
|
* Copyright (C) 2012 - Virtual Open Systems and Columbia University
|
|
|
|
* Author: Christoffer Dall <c.dall@virtualopensystems.com>
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef __ARM64_KVM_HOST_H__
|
|
|
|
#define __ARM64_KVM_HOST_H__
|
|
|
|
|
2020-09-15 13:46:41 +03:00
|
|
|
#include <linux/arm-smccc.h>
|
2018-09-28 16:39:08 +03:00
|
|
|
#include <linux/bitmap.h>
|
2014-08-29 16:01:17 +04:00
|
|
|
#include <linux/types.h>
|
2018-09-28 16:39:08 +03:00
|
|
|
#include <linux/jump_label.h>
|
2014-08-29 16:01:17 +04:00
|
|
|
#include <linux/kvm_types.h>
|
2018-09-28 16:39:08 +03:00
|
|
|
#include <linux/percpu.h>
|
2020-12-08 17:24:47 +03:00
|
|
|
#include <linux/psci.h>
|
2019-01-31 17:58:48 +03:00
|
|
|
#include <asm/arch_gicv3.h>
|
2018-09-28 16:39:08 +03:00
|
|
|
#include <asm/barrier.h>
|
arm64/cpufeature: don't use mutex in bringup path
Currently, cpus_set_cap() calls static_branch_enable_cpuslocked(), which
must take the jump_label mutex.
We call cpus_set_cap() in the secondary bringup path, from the idle
thread where interrupts are disabled. Taking a mutex in this path "is a
NONO" regardless of whether it's contended, and something we must avoid.
We didn't spot this until recently, as ___might_sleep() won't warn for
this case until all CPUs have been brought up.
This patch avoids taking the mutex in the secondary bringup path. The
poking of static keys is deferred until enable_cpu_capabilities(), which
runs in a suitable context on the boot CPU. To account for the static
keys being set later, cpus_have_const_cap() is updated to use another
static key to check whether the const cap keys have been initialised,
falling back to the caps bitmap until this is the case.
This means that users of cpus_have_const_cap() gain should only gain a
single additional NOP in the fast path once the const caps are
initialised, but should always see the current cap value.
The hyp code should never dereference the caps array, since the caps are
initialized before we run the module initcall to initialise hyp. A check
is added to the hyp init code to document this requirement.
This change will sidestep a number of issues when the upcoming hotplug
locking rework is merged.
Signed-off-by: Mark Rutland <mark.rutland@arm.com>
Reviewed-by: Marc Zyniger <marc.zyngier@arm.com>
Reviewed-by: Suzuki Poulose <suzuki.poulose@arm.com>
Acked-by: Will Deacon <will.deacon@arm.com>
Cc: Christoffer Dall <christoffer.dall@linaro.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Sebastian Sewior <bigeasy@linutronix.de>
Cc: Thomas Gleixner <tglx@linutronix.de>
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
2017-05-16 17:18:05 +03:00
|
|
|
#include <asm/cpufeature.h>
|
2019-07-06 01:35:56 +03:00
|
|
|
#include <asm/cputype.h>
|
2018-01-15 22:39:00 +03:00
|
|
|
#include <asm/daifflags.h>
|
arm64/sve: KVM: Prevent guests from using SVE
Until KVM has full SVE support, guests must not be allowed to
execute SVE instructions.
This patch enables the necessary traps, and also ensures that the
traps are disabled again on exit from the guest so that the host
can still use SVE if it wants to.
On guest exit, high bits of the SVE Zn registers may have been
clobbered as a side-effect the execution of FPSIMD instructions in
the guest. The existing KVM host FPSIMD restore code is not
sufficient to restore these bits, so this patch explicitly marks
the CPU as not containing cached vector state for any task, thus
forcing a reload on the next return to userspace. This is an
interim measure, in advance of adding full SVE awareness to KVM.
This marking of cached vector state in the CPU as invalid is done
using __this_cpu_write(fpsimd_last_state, NULL) in fpsimd.c. Due
to the repeated use of this rather obscure operation, it makes
sense to factor it out as a separate helper with a clearer name.
This patch factors it out as fpsimd_flush_cpu_state(), and ports
all callers to use it.
As a side effect of this refactoring, a this_cpu_write() in
fpsimd_cpu_pm_notifier() is changed to __this_cpu_write(). This
should be fine, since cpu_pm_enter() is supposed to be called only
with interrupts disabled.
Signed-off-by: Dave Martin <Dave.Martin@arm.com>
Reviewed-by: Alex Bennée <alex.bennee@linaro.org>
Reviewed-by: Christoffer Dall <christoffer.dall@linaro.org>
Acked-by: Catalin Marinas <catalin.marinas@arm.com>
Acked-by: Marc Zyngier <marc.zyngier@arm.com>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Will Deacon <will.deacon@arm.com>
2017-10-31 18:51:16 +03:00
|
|
|
#include <asm/fpsimd.h>
|
2012-12-10 20:29:28 +04:00
|
|
|
#include <asm/kvm.h>
|
2015-01-29 16:19:45 +03:00
|
|
|
#include <asm/kvm_asm.h>
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2015-03-04 13:14:34 +03:00
|
|
|
#define __KVM_HAVE_ARCH_INTC_INITIALIZED
|
|
|
|
|
2015-09-18 13:34:53 +03:00
|
|
|
#define KVM_HALT_POLL_NS_DEFAULT 500000
|
2012-12-10 20:29:28 +04:00
|
|
|
|
|
|
|
#include <kvm/arm_vgic.h>
|
|
|
|
#include <kvm/arm_arch_timer.h>
|
2015-09-11 04:38:32 +03:00
|
|
|
#include <kvm/arm_pmu.h>
|
2012-12-10 20:29:28 +04:00
|
|
|
|
arm/arm64: KVM: Remove 'config KVM_ARM_MAX_VCPUS'
This patch removes config option of KVM_ARM_MAX_VCPUS,
and like other ARCHs, just choose the maximum allowed
value from hardware, and follows the reasons:
1) from distribution view, the option has to be
defined as the max allowed value because it need to
meet all kinds of virtulization applications and
need to support most of SoCs;
2) using a bigger value doesn't introduce extra memory
consumption, and the help text in Kconfig isn't accurate
because kvm_vpu structure isn't allocated until request
of creating VCPU is sent from QEMU;
3) the main effect is that the field of vcpus[] in 'struct kvm'
becomes a bit bigger(sizeof(void *) per vcpu) and need more cache
lines to hold the structure, but 'struct kvm' is one generic struct,
and it has worked well on other ARCHs already in this way. Also,
the world switch frequecy is often low, for example, it is ~2000
when running kernel building load in VM from APM xgene KVM host,
so the effect is very small, and the difference can't be observed
in my test at all.
Cc: Dann Frazier <dann.frazier@canonical.com>
Signed-off-by: Ming Lei <ming.lei@canonical.com>
Reviewed-by: Christoffer Dall <christoffer.dall@linaro.org>
Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
2015-09-02 09:31:21 +03:00
|
|
|
#define KVM_MAX_VCPUS VGIC_V3_MAX_CPUS
|
|
|
|
|
2019-04-23 07:42:36 +03:00
|
|
|
#define KVM_VCPU_MAX_FEATURES 7
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2017-06-04 15:43:58 +03:00
|
|
|
#define KVM_REQ_SLEEP \
|
2017-06-04 15:43:51 +03:00
|
|
|
KVM_ARCH_REQ_FLAGS(0, KVM_REQUEST_WAIT | KVM_REQUEST_NO_WAKEUP)
|
2017-06-04 15:43:59 +03:00
|
|
|
#define KVM_REQ_IRQ_PENDING KVM_ARCH_REQ(1)
|
2018-12-20 14:36:07 +03:00
|
|
|
#define KVM_REQ_VCPU_RESET KVM_ARCH_REQ(2)
|
2019-10-21 18:28:18 +03:00
|
|
|
#define KVM_REQ_RECORD_STEAL KVM_ARCH_REQ(3)
|
2020-03-04 23:33:28 +03:00
|
|
|
#define KVM_REQ_RELOAD_GICv4 KVM_ARCH_REQ(4)
|
2021-06-03 18:50:02 +03:00
|
|
|
#define KVM_REQ_RELOAD_PMU KVM_ARCH_REQ(5)
|
2016-04-27 12:28:00 +03:00
|
|
|
|
2020-04-13 15:20:23 +03:00
|
|
|
#define KVM_DIRTY_LOG_MANUAL_CAPS (KVM_DIRTY_LOG_MANUAL_PROTECT_ENABLE | \
|
|
|
|
KVM_DIRTY_LOG_INITIALLY_SET)
|
|
|
|
|
2022-01-18 04:57:01 +03:00
|
|
|
#define KVM_HAVE_MMU_RWLOCK
|
|
|
|
|
2020-12-02 21:40:57 +03:00
|
|
|
/*
|
|
|
|
* Mode of operation configurable with kvm-arm.mode early param.
|
|
|
|
* See Documentation/admin-guide/kernel-parameters.txt for more information.
|
|
|
|
*/
|
|
|
|
enum kvm_mode {
|
|
|
|
KVM_MODE_DEFAULT,
|
|
|
|
KVM_MODE_PROTECTED,
|
2021-10-01 20:05:53 +03:00
|
|
|
KVM_MODE_NONE,
|
2020-12-02 21:40:57 +03:00
|
|
|
};
|
2020-12-02 21:40:58 +03:00
|
|
|
enum kvm_mode kvm_get_mode(void);
|
2020-12-02 21:40:57 +03:00
|
|
|
|
2017-10-27 20:57:51 +03:00
|
|
|
DECLARE_STATIC_KEY_FALSE(userspace_irqchip_in_use);
|
|
|
|
|
2019-02-28 21:46:44 +03:00
|
|
|
extern unsigned int kvm_sve_max_vl;
|
2019-04-12 17:30:58 +03:00
|
|
|
int kvm_arm_init_sve(void);
|
2019-02-28 21:33:00 +03:00
|
|
|
|
2021-08-12 08:09:53 +03:00
|
|
|
u32 __attribute_const__ kvm_target_cpu(void);
|
2012-12-10 20:29:28 +04:00
|
|
|
int kvm_reset_vcpu(struct kvm_vcpu *vcpu);
|
2019-12-19 00:55:27 +03:00
|
|
|
void kvm_arm_vcpu_destroy(struct kvm_vcpu *vcpu);
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2018-12-11 17:26:31 +03:00
|
|
|
struct kvm_vmid {
|
2021-11-22 15:18:43 +03:00
|
|
|
atomic64_t id;
|
2018-12-11 17:26:31 +03:00
|
|
|
};
|
|
|
|
|
2019-01-04 23:09:05 +03:00
|
|
|
struct kvm_s2_mmu {
|
2018-12-11 17:26:31 +03:00
|
|
|
struct kvm_vmid vmid;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2019-01-04 23:09:05 +03:00
|
|
|
/*
|
|
|
|
* stage2 entry level table
|
|
|
|
*
|
|
|
|
* Two kvm_s2_mmu structures in the same VM can point to the same
|
|
|
|
* pgd here. This happens when running a guest using a
|
|
|
|
* translation regime that isn't affected by its own stage-2
|
|
|
|
* translation, such as a non-VHE hypervisor running at vEL2, or
|
|
|
|
* for vEL1/EL0 with vHCR_EL2.VM == 0. In that case, we use the
|
|
|
|
* canonical stage-2 page tables.
|
|
|
|
*/
|
|
|
|
phys_addr_t pgd_phys;
|
2020-09-11 16:25:13 +03:00
|
|
|
struct kvm_pgtable *pgt;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2016-10-18 20:37:49 +03:00
|
|
|
/* The last vcpu id that ran on each physical CPU */
|
|
|
|
int __percpu *last_vcpu_ran;
|
|
|
|
|
2021-03-19 13:01:28 +03:00
|
|
|
struct kvm_arch *arch;
|
2019-01-04 23:09:05 +03:00
|
|
|
};
|
|
|
|
|
2020-11-18 22:44:00 +03:00
|
|
|
struct kvm_arch_memory_slot {
|
|
|
|
};
|
|
|
|
|
2019-01-04 23:09:05 +03:00
|
|
|
struct kvm_arch {
|
|
|
|
struct kvm_s2_mmu mmu;
|
|
|
|
|
|
|
|
/* VTCR_EL2 value for this VM */
|
|
|
|
u64 vtcr;
|
|
|
|
|
2014-06-02 18:26:01 +04:00
|
|
|
/* The maximum number of vCPUs depends on the used GIC model */
|
|
|
|
int max_vcpus;
|
|
|
|
|
2012-12-10 20:29:28 +04:00
|
|
|
/* Interrupt controller */
|
|
|
|
struct vgic_dist vgic;
|
2018-01-21 19:42:56 +03:00
|
|
|
|
|
|
|
/* Mandated version of PSCI */
|
|
|
|
u32 psci_version;
|
KVM: arm/arm64: Allow reporting non-ISV data aborts to userspace
For a long time, if a guest accessed memory outside of a memslot using
any of the load/store instructions in the architecture which doesn't
supply decoding information in the ESR_EL2 (the ISV bit is not set), the
kernel would print the following message and terminate the VM as a
result of returning -ENOSYS to userspace:
load/store instruction decoding not implemented
The reason behind this message is that KVM assumes that all accesses
outside a memslot is an MMIO access which should be handled by
userspace, and we originally expected to eventually implement some sort
of decoding of load/store instructions where the ISV bit was not set.
However, it turns out that many of the instructions which don't provide
decoding information on abort are not safe to use for MMIO accesses, and
the remaining few that would potentially make sense to use on MMIO
accesses, such as those with register writeback, are not used in
practice. It also turns out that fetching an instruction from guest
memory can be a pretty horrible affair, involving stopping all CPUs on
SMP systems, handling multiple corner cases of address translation in
software, and more. It doesn't appear likely that we'll ever implement
this in the kernel.
What is much more common is that a user has misconfigured his/her guest
and is actually not accessing an MMIO region, but just hitting some
random hole in the IPA space. In this scenario, the error message above
is almost misleading and has led to a great deal of confusion over the
years.
It is, nevertheless, ABI to userspace, and we therefore need to
introduce a new capability that userspace explicitly enables to change
behavior.
This patch introduces KVM_CAP_ARM_NISV_TO_USER (NISV meaning Non-ISV)
which does exactly that, and introduces a new exit reason to report the
event to userspace. User space can then emulate an exception to the
guest, restart the guest, suspend the guest, or take any other
appropriate action as per the policy of the running system.
Reported-by: Heinrich Schuchardt <xypron.glpk@gmx.de>
Signed-off-by: Christoffer Dall <christoffer.dall@arm.com>
Reviewed-by: Alexander Graf <graf@amazon.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
2019-10-11 14:07:05 +03:00
|
|
|
|
|
|
|
/*
|
|
|
|
* If we encounter a data abort without valid instruction syndrome
|
|
|
|
* information, report this to user space. User space can (and
|
|
|
|
* should) opt in to this feature if KVM_CAP_ARM_NISV_TO_USER is
|
|
|
|
* supported.
|
|
|
|
*/
|
2022-03-11 20:39:47 +03:00
|
|
|
#define KVM_ARCH_FLAG_RETURN_NISV_IO_ABORT_TO_USER 0
|
|
|
|
/* Memory Tagging Extension enabled for the guest */
|
|
|
|
#define KVM_ARCH_FLAG_MTE_ENABLED 1
|
|
|
|
/* At least one vCPU has ran in the VM */
|
|
|
|
#define KVM_ARCH_FLAG_HAS_RAN_ONCE 2
|
2022-03-29 06:19:23 +03:00
|
|
|
/*
|
|
|
|
* The following two bits are used to indicate the guest's EL1
|
|
|
|
* register width configuration. A value of KVM_ARCH_FLAG_EL1_32BIT
|
|
|
|
* bit is valid only when KVM_ARCH_FLAG_REG_WIDTH_CONFIGURED is set.
|
|
|
|
* Otherwise, the guest's EL1 register width has not yet been
|
|
|
|
* determined yet.
|
|
|
|
*/
|
|
|
|
#define KVM_ARCH_FLAG_REG_WIDTH_CONFIGURED 3
|
|
|
|
#define KVM_ARCH_FLAG_EL1_32BIT 4
|
|
|
|
|
2022-03-11 20:39:47 +03:00
|
|
|
unsigned long flags;
|
2020-03-17 14:11:56 +03:00
|
|
|
|
2020-02-12 14:31:02 +03:00
|
|
|
/*
|
|
|
|
* VM-wide PMU filter, implemented as a bitmap and big enough for
|
|
|
|
* up to 2^10 events (ARMv8.0) or 2^16 events (ARMv8.1+).
|
|
|
|
*/
|
|
|
|
unsigned long *pmu_filter;
|
2022-01-27 19:17:56 +03:00
|
|
|
struct arm_pmu *arm_pmu;
|
2020-11-10 17:13:06 +03:00
|
|
|
|
2022-01-27 19:17:59 +03:00
|
|
|
cpumask_var_t supported_cpus;
|
2020-11-10 17:13:06 +03:00
|
|
|
|
|
|
|
u8 pfr0_csv2;
|
2020-11-26 20:27:13 +03:00
|
|
|
u8 pfr0_csv3;
|
2012-12-10 20:29:28 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
struct kvm_vcpu_fault_info {
|
|
|
|
u32 esr_el2; /* Hyp Syndrom Register */
|
|
|
|
u64 far_el2; /* Hyp Fault Address Register */
|
|
|
|
u64 hpfar_el2; /* Hyp IPA Fault Address Register */
|
KVM: arm64: Handle RAS SErrors from EL2 on guest exit
We expect to have firmware-first handling of RAS SErrors, with errors
notified via an APEI method. For systems without firmware-first, add
some minimal handling to KVM.
There are two ways KVM can take an SError due to a guest, either may be a
RAS error: we exit the guest due to an SError routed to EL2 by HCR_EL2.AMO,
or we take an SError from EL2 when we unmask PSTATE.A from __guest_exit.
The current SError from EL2 code unmasks SError and tries to fence any
pending SError into a single instruction window. It then leaves SError
unmasked.
With the v8.2 RAS Extensions we may take an SError for a 'corrected'
error, but KVM is only able to handle SError from EL2 if they occur
during this single instruction window...
The RAS Extensions give us a new instruction to synchronise and
consume SErrors. The RAS Extensions document (ARM DDI0587),
'2.4.1 ESB and Unrecoverable errors' describes ESB as synchronising
SError interrupts generated by 'instructions, translation table walks,
hardware updates to the translation tables, and instruction fetches on
the same PE'. This makes ESB equivalent to KVMs existing
'dsb, mrs-daifclr, isb' sequence.
Use the alternatives to synchronise and consume any SError using ESB
instead of unmasking and taking the SError. Set ARM_EXIT_WITH_SERROR_BIT
in the exit_code so that we can restart the vcpu if it turns out this
SError has no impact on the vcpu.
Reviewed-by: Marc Zyngier <marc.zyngier@arm.com>
Signed-off-by: James Morse <james.morse@arm.com>
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
2018-01-15 22:39:05 +03:00
|
|
|
u64 disr_el1; /* Deferred [SError] Status Register */
|
2012-12-10 20:29:28 +04:00
|
|
|
};
|
|
|
|
|
2015-10-25 22:57:11 +03:00
|
|
|
enum vcpu_sysreg {
|
2020-05-27 13:38:57 +03:00
|
|
|
__INVALID_SYSREG__, /* 0 is reserved as an invalid value */
|
2015-10-25 22:57:11 +03:00
|
|
|
MPIDR_EL1, /* MultiProcessor Affinity Register */
|
|
|
|
CSSELR_EL1, /* Cache Size Selection Register */
|
|
|
|
SCTLR_EL1, /* System Control Register */
|
|
|
|
ACTLR_EL1, /* Auxiliary Control Register */
|
|
|
|
CPACR_EL1, /* Coprocessor Access Control */
|
2018-09-28 16:39:16 +03:00
|
|
|
ZCR_EL1, /* SVE Control */
|
2015-10-25 22:57:11 +03:00
|
|
|
TTBR0_EL1, /* Translation Table Base Register 0 */
|
|
|
|
TTBR1_EL1, /* Translation Table Base Register 1 */
|
|
|
|
TCR_EL1, /* Translation Control Register */
|
|
|
|
ESR_EL1, /* Exception Syndrome Register */
|
2016-02-24 20:52:41 +03:00
|
|
|
AFSR0_EL1, /* Auxiliary Fault Status Register 0 */
|
|
|
|
AFSR1_EL1, /* Auxiliary Fault Status Register 1 */
|
2015-10-25 22:57:11 +03:00
|
|
|
FAR_EL1, /* Fault Address Register */
|
|
|
|
MAIR_EL1, /* Memory Attribute Indirection Register */
|
|
|
|
VBAR_EL1, /* Vector Base Address Register */
|
|
|
|
CONTEXTIDR_EL1, /* Context ID Register */
|
|
|
|
TPIDR_EL0, /* Thread ID, User R/W */
|
|
|
|
TPIDRRO_EL0, /* Thread ID, User R/O */
|
|
|
|
TPIDR_EL1, /* Thread ID, Privileged */
|
|
|
|
AMAIR_EL1, /* Aux Memory Attribute Indirection Register */
|
|
|
|
CNTKCTL_EL1, /* Timer Control Register (EL1) */
|
|
|
|
PAR_EL1, /* Physical Address Register */
|
|
|
|
MDSCR_EL1, /* Monitor Debug System Control Register */
|
|
|
|
MDCCINT_EL1, /* Monitor Debug Comms Channel Interrupt Enable Reg */
|
2022-02-03 20:41:55 +03:00
|
|
|
OSLSR_EL1, /* OS Lock Status Register */
|
2018-01-15 22:39:02 +03:00
|
|
|
DISR_EL1, /* Deferred Interrupt Status Register */
|
2015-10-25 22:57:11 +03:00
|
|
|
|
2015-06-18 11:01:53 +03:00
|
|
|
/* Performance Monitors Registers */
|
|
|
|
PMCR_EL0, /* Control Register */
|
2015-08-31 12:20:22 +03:00
|
|
|
PMSELR_EL0, /* Event Counter Selection Register */
|
2015-12-08 10:29:06 +03:00
|
|
|
PMEVCNTR0_EL0, /* Event Counter Register (0-30) */
|
|
|
|
PMEVCNTR30_EL0 = PMEVCNTR0_EL0 + 30,
|
|
|
|
PMCCNTR_EL0, /* Cycle Counter Register */
|
2016-02-23 06:11:27 +03:00
|
|
|
PMEVTYPER0_EL0, /* Event Type Register (0-30) */
|
|
|
|
PMEVTYPER30_EL0 = PMEVTYPER0_EL0 + 30,
|
|
|
|
PMCCFILTR_EL0, /* Cycle Count Filter Register */
|
2015-09-08 07:26:13 +03:00
|
|
|
PMCNTENSET_EL0, /* Count Enable Set Register */
|
2015-09-08 09:40:20 +03:00
|
|
|
PMINTENSET_EL1, /* Interrupt Enable Set Register */
|
2015-09-08 10:03:26 +03:00
|
|
|
PMOVSSET_EL0, /* Overflow Flag Status Set Register */
|
2015-09-08 10:15:56 +03:00
|
|
|
PMUSERENR_EL0, /* User Enable Register */
|
2015-06-18 11:01:53 +03:00
|
|
|
|
KVM: arm/arm64: Context-switch ptrauth registers
When pointer authentication is supported, a guest may wish to use it.
This patch adds the necessary KVM infrastructure for this to work, with
a semi-lazy context switch of the pointer auth state.
Pointer authentication feature is only enabled when VHE is built
in the kernel and present in the CPU implementation so only VHE code
paths are modified.
When we schedule a vcpu, we disable guest usage of pointer
authentication instructions and accesses to the keys. While these are
disabled, we avoid context-switching the keys. When we trap the guest
trying to use pointer authentication functionality, we change to eagerly
context-switching the keys, and enable the feature. The next time the
vcpu is scheduled out/in, we start again. However the host key save is
optimized and implemented inside ptrauth instruction/register access
trap.
Pointer authentication consists of address authentication and generic
authentication, and CPUs in a system might have varied support for
either. Where support for either feature is not uniform, it is hidden
from guests via ID register emulation, as a result of the cpufeature
framework in the host.
Unfortunately, address authentication and generic authentication cannot
be trapped separately, as the architecture provides a single EL2 trap
covering both. If we wish to expose one without the other, we cannot
prevent a (badly-written) guest from intermittently using a feature
which is not uniformly supported (when scheduled on a physical CPU which
supports the relevant feature). Hence, this patch expects both type of
authentication to be present in a cpu.
This switch of key is done from guest enter/exit assembly as preparation
for the upcoming in-kernel pointer authentication support. Hence, these
key switching routines are not implemented in C code as they may cause
pointer authentication key signing error in some situations.
Signed-off-by: Mark Rutland <mark.rutland@arm.com>
[Only VHE, key switch in full assembly, vcpu_has_ptrauth checks
, save host key in ptrauth exception trap]
Signed-off-by: Amit Daniel Kachhap <amit.kachhap@arm.com>
Reviewed-by: Julien Thierry <julien.thierry@arm.com>
Cc: Christoffer Dall <christoffer.dall@arm.com>
Cc: kvmarm@lists.cs.columbia.edu
[maz: various fixups]
Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
2019-04-23 07:42:35 +03:00
|
|
|
/* Pointer Authentication Registers in a strict increasing order. */
|
|
|
|
APIAKEYLO_EL1,
|
|
|
|
APIAKEYHI_EL1,
|
|
|
|
APIBKEYLO_EL1,
|
|
|
|
APIBKEYHI_EL1,
|
|
|
|
APDAKEYLO_EL1,
|
|
|
|
APDAKEYHI_EL1,
|
|
|
|
APDBKEYLO_EL1,
|
|
|
|
APDBKEYHI_EL1,
|
|
|
|
APGAKEYLO_EL1,
|
|
|
|
APGAKEYHI_EL1,
|
|
|
|
|
2019-06-29 01:05:38 +03:00
|
|
|
ELR_EL1,
|
2019-06-29 01:05:38 +03:00
|
|
|
SP_EL1,
|
2019-06-29 01:05:38 +03:00
|
|
|
SPSR_EL1,
|
2019-06-29 01:05:38 +03:00
|
|
|
|
2019-06-28 17:23:43 +03:00
|
|
|
CNTVOFF_EL2,
|
|
|
|
CNTV_CVAL_EL0,
|
|
|
|
CNTV_CTL_EL0,
|
|
|
|
CNTP_CVAL_EL0,
|
|
|
|
CNTP_CTL_EL0,
|
|
|
|
|
2021-06-21 14:17:13 +03:00
|
|
|
/* Memory Tagging Extension registers */
|
|
|
|
RGSR_EL1, /* Random Allocation Tag Seed Register */
|
|
|
|
GCR_EL1, /* Tag Control Register */
|
|
|
|
TFSR_EL1, /* Tag Fault Status Register (EL1) */
|
|
|
|
TFSRE0_EL1, /* Tag Fault Status Register (EL0) */
|
|
|
|
|
2015-10-25 22:57:11 +03:00
|
|
|
/* 32bit specific registers. Keep them at the end of the range */
|
|
|
|
DACR32_EL2, /* Domain Access Control Register */
|
|
|
|
IFSR32_EL2, /* Instruction Fault Status Register */
|
|
|
|
FPEXC32_EL2, /* Floating-Point Exception Control Register */
|
|
|
|
DBGVCR32_EL2, /* Debug Vector Catch Register */
|
|
|
|
|
|
|
|
NR_SYS_REGS /* Nothing after this line! */
|
|
|
|
};
|
|
|
|
|
2012-12-10 20:29:28 +04:00
|
|
|
struct kvm_cpu_context {
|
2019-06-29 00:40:58 +03:00
|
|
|
struct user_pt_regs regs; /* sp = sp_el0 */
|
|
|
|
|
2019-06-29 01:36:42 +03:00
|
|
|
u64 spsr_abt;
|
|
|
|
u64 spsr_und;
|
|
|
|
u64 spsr_irq;
|
|
|
|
u64 spsr_fiq;
|
2019-06-29 00:40:58 +03:00
|
|
|
|
|
|
|
struct user_fpsimd_state fp_regs;
|
|
|
|
|
2020-10-29 20:21:37 +03:00
|
|
|
u64 sys_regs[NR_SYS_REGS];
|
2018-01-08 18:38:05 +03:00
|
|
|
|
|
|
|
struct kvm_vcpu *__hyp_running_vcpu;
|
2012-12-10 20:29:28 +04:00
|
|
|
};
|
|
|
|
|
2019-04-09 22:22:12 +03:00
|
|
|
struct kvm_pmu_events {
|
|
|
|
u32 events_host;
|
|
|
|
u32 events_guest;
|
|
|
|
};
|
|
|
|
|
2019-04-09 22:22:11 +03:00
|
|
|
struct kvm_host_data {
|
|
|
|
struct kvm_cpu_context host_ctxt;
|
2019-04-09 22:22:12 +03:00
|
|
|
struct kvm_pmu_events pmu_events;
|
2019-04-09 22:22:11 +03:00
|
|
|
};
|
|
|
|
|
2020-12-08 17:24:47 +03:00
|
|
|
struct kvm_host_psci_config {
|
|
|
|
/* PSCI version used by host. */
|
|
|
|
u32 version;
|
|
|
|
|
|
|
|
/* Function IDs used by host if version is v0.1. */
|
|
|
|
struct psci_0_1_function_ids function_ids_0_1;
|
|
|
|
|
2020-12-22 15:46:41 +03:00
|
|
|
bool psci_0_1_cpu_suspend_implemented;
|
|
|
|
bool psci_0_1_cpu_on_implemented;
|
|
|
|
bool psci_0_1_cpu_off_implemented;
|
|
|
|
bool psci_0_1_migrate_implemented;
|
2020-12-08 17:24:47 +03:00
|
|
|
};
|
|
|
|
|
|
|
|
extern struct kvm_host_psci_config kvm_nvhe_sym(kvm_host_psci_config);
|
|
|
|
#define kvm_host_psci_config CHOOSE_NVHE_SYM(kvm_host_psci_config)
|
|
|
|
|
2020-12-08 17:24:50 +03:00
|
|
|
extern s64 kvm_nvhe_sym(hyp_physvirt_offset);
|
|
|
|
#define hyp_physvirt_offset CHOOSE_NVHE_SYM(hyp_physvirt_offset)
|
|
|
|
|
|
|
|
extern u64 kvm_nvhe_sym(hyp_cpu_logical_map)[NR_CPUS];
|
|
|
|
#define hyp_cpu_logical_map CHOOSE_NVHE_SYM(hyp_cpu_logical_map)
|
|
|
|
|
2018-12-20 14:36:07 +03:00
|
|
|
struct vcpu_reset_state {
|
|
|
|
unsigned long pc;
|
|
|
|
unsigned long r0;
|
|
|
|
bool be;
|
|
|
|
bool reset;
|
|
|
|
};
|
|
|
|
|
2012-12-10 20:29:28 +04:00
|
|
|
struct kvm_vcpu_arch {
|
|
|
|
struct kvm_cpu_context ctxt;
|
2018-09-28 16:39:17 +03:00
|
|
|
void *sve_state;
|
|
|
|
unsigned int sve_max_vl;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2019-01-04 23:09:05 +03:00
|
|
|
/* Stage 2 paging state used by the hardware on next switch */
|
|
|
|
struct kvm_s2_mmu *hw_mmu;
|
|
|
|
|
2021-08-17 11:11:25 +03:00
|
|
|
/* Values of trap registers for the guest. */
|
2012-12-10 20:29:28 +04:00
|
|
|
u64 hcr_el2;
|
2021-08-17 11:11:22 +03:00
|
|
|
u64 mdcr_el2;
|
2021-08-17 11:11:27 +03:00
|
|
|
u64 cptr_el2;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2021-08-17 11:11:25 +03:00
|
|
|
/* Values of trap registers for the host before guest entry. */
|
|
|
|
u64 mdcr_el2_host;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
|
|
|
/* Exception Information */
|
|
|
|
struct kvm_vcpu_fault_info fault;
|
|
|
|
|
2018-05-08 16:47:23 +03:00
|
|
|
/* Miscellaneous vcpu state flags */
|
|
|
|
u64 flags;
|
2014-04-24 13:24:46 +04:00
|
|
|
|
2015-07-07 19:30:00 +03:00
|
|
|
/*
|
|
|
|
* We maintain more than a single set of debug registers to support
|
|
|
|
* debugging the guest from the host and to maintain separate host and
|
|
|
|
* guest state during world switches. vcpu_debug_state are the debug
|
|
|
|
* registers of the vcpu as the guest sees them. host_debug_state are
|
2015-07-07 19:30:02 +03:00
|
|
|
* the host registers which are saved and restored during
|
|
|
|
* world switches. external_debug_state contains the debug
|
|
|
|
* values we want to debug the guest. This is set via the
|
|
|
|
* KVM_SET_GUEST_DEBUG ioctl.
|
2015-07-07 19:30:00 +03:00
|
|
|
*
|
|
|
|
* debug_ptr points to the set of debug registers that should be loaded
|
|
|
|
* onto the hardware when running the guest.
|
|
|
|
*/
|
|
|
|
struct kvm_guest_debug_arch *debug_ptr;
|
|
|
|
struct kvm_guest_debug_arch vcpu_debug_state;
|
2015-07-07 19:30:02 +03:00
|
|
|
struct kvm_guest_debug_arch external_debug_state;
|
2015-07-07 19:30:00 +03:00
|
|
|
|
2018-04-06 16:55:59 +03:00
|
|
|
struct user_fpsimd_state *host_fpsimd_state; /* hyp VA */
|
2021-12-15 19:12:31 +03:00
|
|
|
struct task_struct *parent_task;
|
2018-04-06 16:55:59 +03:00
|
|
|
|
2016-09-22 13:35:43 +03:00
|
|
|
struct {
|
|
|
|
/* {Break,watch}point registers */
|
|
|
|
struct kvm_guest_debug_arch regs;
|
|
|
|
/* Statistical profiling extension */
|
|
|
|
u64 pmscr_el1;
|
2021-04-05 19:42:54 +03:00
|
|
|
/* Self-hosted trace */
|
|
|
|
u64 trfcr_el1;
|
2016-09-22 13:35:43 +03:00
|
|
|
} host_debug_state;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
|
|
|
/* VGIC state */
|
|
|
|
struct vgic_cpu vgic_cpu;
|
|
|
|
struct arch_timer_cpu timer_cpu;
|
2015-09-11 04:38:32 +03:00
|
|
|
struct kvm_pmu pmu;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
|
|
|
/*
|
|
|
|
* Anything that is not used directly from assembly code goes
|
|
|
|
* here.
|
|
|
|
*/
|
|
|
|
|
2015-07-07 19:29:58 +03:00
|
|
|
/*
|
|
|
|
* Guest registers we preserve during guest debugging.
|
|
|
|
*
|
|
|
|
* These shadow registers are updated by the kvm_handle_sys_reg
|
|
|
|
* trap handler if the guest accesses or updates them while we
|
|
|
|
* are using guest debug.
|
|
|
|
*/
|
|
|
|
struct {
|
|
|
|
u32 mdscr_el1;
|
|
|
|
} guest_debug_preserved;
|
|
|
|
|
2015-09-26 00:41:14 +03:00
|
|
|
/* vcpu power-off state */
|
|
|
|
bool power_off;
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2015-09-26 00:41:17 +03:00
|
|
|
/* Don't run the guest (internal implementation need) */
|
|
|
|
bool pause;
|
|
|
|
|
2012-12-10 20:29:28 +04:00
|
|
|
/* Cache some mmu pages needed inside spinlock regions */
|
|
|
|
struct kvm_mmu_memory_cache mmu_page_cache;
|
|
|
|
|
|
|
|
/* Target CPU and feature flags */
|
2013-07-22 07:40:38 +04:00
|
|
|
int target;
|
2012-12-10 20:29:28 +04:00
|
|
|
DECLARE_BITMAP(features, KVM_VCPU_MAX_FEATURES);
|
|
|
|
|
2018-01-15 22:39:01 +03:00
|
|
|
/* Virtual SError ESR to restore when HCR_EL2.VSE is set */
|
|
|
|
u64 vsesr_el2;
|
2017-12-23 23:53:48 +03:00
|
|
|
|
2018-12-20 14:36:07 +03:00
|
|
|
/* Additional reset state */
|
|
|
|
struct vcpu_reset_state reset_state;
|
|
|
|
|
2017-12-23 23:53:48 +03:00
|
|
|
/* True when deferrable sysregs are loaded on the physical CPU,
|
2020-06-25 16:14:16 +03:00
|
|
|
* see kvm_vcpu_load_sysregs_vhe and kvm_vcpu_put_sysregs_vhe. */
|
2017-12-23 23:53:48 +03:00
|
|
|
bool sysregs_loaded_on_cpu;
|
2019-10-21 18:28:18 +03:00
|
|
|
|
|
|
|
/* Guest PV state */
|
|
|
|
struct {
|
|
|
|
u64 last_steal;
|
|
|
|
gpa_t base;
|
|
|
|
} steal;
|
2012-12-10 20:29:28 +04:00
|
|
|
};
|
|
|
|
|
2018-09-28 16:39:17 +03:00
|
|
|
/* Pointer to the vcpu's SVE FFR for sve_{save,load}_state() */
|
2021-03-11 22:18:42 +03:00
|
|
|
#define vcpu_sve_pffr(vcpu) (kern_hyp_va((vcpu)->arch.sve_state) + \
|
|
|
|
sve_ffr_offset((vcpu)->arch.sve_max_vl))
|
2018-09-28 16:39:17 +03:00
|
|
|
|
2021-03-12 17:38:43 +03:00
|
|
|
#define vcpu_sve_max_vq(vcpu) sve_vq_from_vl((vcpu)->arch.sve_max_vl)
|
2018-09-28 16:39:17 +03:00
|
|
|
|
2018-09-28 16:39:19 +03:00
|
|
|
#define vcpu_sve_state_size(vcpu) ({ \
|
|
|
|
size_t __size_ret; \
|
|
|
|
unsigned int __vcpu_vq; \
|
|
|
|
\
|
|
|
|
if (WARN_ON(!sve_vl_valid((vcpu)->arch.sve_max_vl))) { \
|
|
|
|
__size_ret = 0; \
|
|
|
|
} else { \
|
2021-03-12 17:38:43 +03:00
|
|
|
__vcpu_vq = vcpu_sve_max_vq(vcpu); \
|
2018-09-28 16:39:19 +03:00
|
|
|
__size_ret = SVE_SIG_REGS_SIZE(__vcpu_vq); \
|
|
|
|
} \
|
|
|
|
\
|
|
|
|
__size_ret; \
|
|
|
|
})
|
|
|
|
|
2018-05-08 16:47:23 +03:00
|
|
|
/* vcpu_arch flags field values: */
|
|
|
|
#define KVM_ARM64_DEBUG_DIRTY (1 << 0)
|
2018-04-06 16:55:59 +03:00
|
|
|
#define KVM_ARM64_FP_ENABLED (1 << 1) /* guest FP regs loaded */
|
|
|
|
#define KVM_ARM64_FP_HOST (1 << 2) /* host FP regs loaded */
|
2018-06-15 18:47:25 +03:00
|
|
|
#define KVM_ARM64_HOST_SVE_ENABLED (1 << 4) /* SVE enabled for EL0 */
|
2018-09-28 16:39:12 +03:00
|
|
|
#define KVM_ARM64_GUEST_HAS_SVE (1 << 5) /* SVE exposed to guest */
|
2019-02-28 21:46:44 +03:00
|
|
|
#define KVM_ARM64_VCPU_SVE_FINALIZED (1 << 6) /* SVE config completed */
|
2019-04-23 07:42:34 +03:00
|
|
|
#define KVM_ARM64_GUEST_HAS_PTRAUTH (1 << 7) /* PTRAUTH exposed to guest */
|
2020-10-14 21:42:38 +03:00
|
|
|
#define KVM_ARM64_PENDING_EXCEPTION (1 << 8) /* Exception pending */
|
2021-10-21 15:50:42 +03:00
|
|
|
/*
|
|
|
|
* Overlaps with KVM_ARM64_EXCEPT_MASK on purpose so that it can't be
|
|
|
|
* set together with an exception...
|
|
|
|
*/
|
|
|
|
#define KVM_ARM64_INCREMENT_PC (1 << 9) /* Increment PC */
|
2020-10-14 21:42:38 +03:00
|
|
|
#define KVM_ARM64_EXCEPT_MASK (7 << 9) /* Target EL/MODE */
|
|
|
|
/*
|
|
|
|
* When KVM_ARM64_PENDING_EXCEPTION is set, KVM_ARM64_EXCEPT_MASK can
|
|
|
|
* take the following values:
|
|
|
|
*
|
|
|
|
* For AArch32 EL1:
|
|
|
|
*/
|
|
|
|
#define KVM_ARM64_EXCEPT_AA32_UND (0 << 9)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA32_IABT (1 << 9)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA32_DABT (2 << 9)
|
|
|
|
/* For AArch64: */
|
|
|
|
#define KVM_ARM64_EXCEPT_AA64_ELx_SYNC (0 << 9)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA64_ELx_IRQ (1 << 9)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA64_ELx_FIQ (2 << 9)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA64_ELx_SERR (3 << 9)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA64_EL1 (0 << 11)
|
|
|
|
#define KVM_ARM64_EXCEPT_AA64_EL2 (1 << 11)
|
|
|
|
|
2021-10-21 15:50:42 +03:00
|
|
|
#define KVM_ARM64_DEBUG_STATE_SAVE_SPE (1 << 12) /* Save SPE context if active */
|
|
|
|
#define KVM_ARM64_DEBUG_STATE_SAVE_TRBE (1 << 13) /* Save TRBE context if active */
|
2021-10-21 16:10:35 +03:00
|
|
|
#define KVM_ARM64_FP_FOREIGN_FPSTATE (1 << 14)
|
2022-01-27 19:17:59 +03:00
|
|
|
#define KVM_ARM64_ON_UNSUPPORTED_CPU (1 << 15) /* Physical CPU not in supported_cpus */
|
2021-10-21 15:50:42 +03:00
|
|
|
|
|
|
|
#define KVM_GUESTDBG_VALID_MASK (KVM_GUESTDBG_ENABLE | \
|
|
|
|
KVM_GUESTDBG_USE_SW_BP | \
|
|
|
|
KVM_GUESTDBG_USE_HW | \
|
|
|
|
KVM_GUESTDBG_SINGLESTEP)
|
2020-10-14 21:42:38 +03:00
|
|
|
|
|
|
|
#define vcpu_has_sve(vcpu) (system_supports_sve() && \
|
2018-09-28 16:39:12 +03:00
|
|
|
((vcpu)->arch.flags & KVM_ARM64_GUEST_HAS_SVE))
|
2018-05-08 16:47:23 +03:00
|
|
|
|
2020-07-22 19:22:31 +03:00
|
|
|
#ifdef CONFIG_ARM64_PTR_AUTH
|
|
|
|
#define vcpu_has_ptrauth(vcpu) \
|
|
|
|
((cpus_have_final_cap(ARM64_HAS_ADDRESS_AUTH) || \
|
|
|
|
cpus_have_final_cap(ARM64_HAS_GENERIC_AUTH)) && \
|
|
|
|
(vcpu)->arch.flags & KVM_ARM64_GUEST_HAS_PTRAUTH)
|
|
|
|
#else
|
|
|
|
#define vcpu_has_ptrauth(vcpu) false
|
|
|
|
#endif
|
2019-04-23 07:42:34 +03:00
|
|
|
|
2022-01-27 19:17:59 +03:00
|
|
|
#define vcpu_on_unsupported_cpu(vcpu) \
|
|
|
|
((vcpu)->arch.flags & KVM_ARM64_ON_UNSUPPORTED_CPU)
|
|
|
|
|
|
|
|
#define vcpu_set_on_unsupported_cpu(vcpu) \
|
|
|
|
((vcpu)->arch.flags |= KVM_ARM64_ON_UNSUPPORTED_CPU)
|
|
|
|
|
|
|
|
#define vcpu_clear_on_unsupported_cpu(vcpu) \
|
|
|
|
((vcpu)->arch.flags &= ~KVM_ARM64_ON_UNSUPPORTED_CPU)
|
|
|
|
|
2019-06-29 00:40:58 +03:00
|
|
|
#define vcpu_gp_regs(v) (&(v)->arch.ctxt.regs)
|
2016-03-16 17:38:53 +03:00
|
|
|
|
|
|
|
/*
|
2019-06-26 21:57:41 +03:00
|
|
|
* Only use __vcpu_sys_reg/ctxt_sys_reg if you know you want the
|
|
|
|
* memory backed version of a register, and not the one most recently
|
|
|
|
* accessed by a running VCPU. For example, for userspace access or
|
|
|
|
* for system registers that are never context switched, but only
|
|
|
|
* emulated.
|
2016-03-16 17:38:53 +03:00
|
|
|
*/
|
2019-06-26 21:57:41 +03:00
|
|
|
#define __ctxt_sys_reg(c,r) (&(c)->sys_regs[(r)])
|
|
|
|
|
|
|
|
#define ctxt_sys_reg(c,r) (*__ctxt_sys_reg(c,r))
|
|
|
|
|
|
|
|
#define __vcpu_sys_reg(v,r) (ctxt_sys_reg(&(v)->arch.ctxt, (r)))
|
2016-03-16 17:38:53 +03:00
|
|
|
|
2018-11-29 14:20:01 +03:00
|
|
|
u64 vcpu_read_sys_reg(const struct kvm_vcpu *vcpu, int reg);
|
2017-12-23 23:53:48 +03:00
|
|
|
void vcpu_write_sys_reg(struct kvm_vcpu *vcpu, u64 val, int reg);
|
2016-03-16 17:38:53 +03:00
|
|
|
|
2020-10-14 21:36:11 +03:00
|
|
|
static inline bool __vcpu_read_sys_reg_from_cpu(int reg, u64 *val)
|
|
|
|
{
|
|
|
|
/*
|
|
|
|
* *** VHE ONLY ***
|
|
|
|
*
|
|
|
|
* System registers listed in the switch are not saved on every
|
|
|
|
* exit from the guest but are only saved on vcpu_put.
|
|
|
|
*
|
|
|
|
* Note that MPIDR_EL1 for the guest is set by KVM via VMPIDR_EL2 but
|
|
|
|
* should never be listed below, because the guest cannot modify its
|
|
|
|
* own MPIDR_EL1 and MPIDR_EL1 is accessed for VCPU A from VCPU B's
|
|
|
|
* thread when emulating cross-VCPU communication.
|
|
|
|
*/
|
|
|
|
if (!has_vhe())
|
|
|
|
return false;
|
|
|
|
|
|
|
|
switch (reg) {
|
|
|
|
case CSSELR_EL1: *val = read_sysreg_s(SYS_CSSELR_EL1); break;
|
|
|
|
case SCTLR_EL1: *val = read_sysreg_s(SYS_SCTLR_EL12); break;
|
|
|
|
case CPACR_EL1: *val = read_sysreg_s(SYS_CPACR_EL12); break;
|
|
|
|
case TTBR0_EL1: *val = read_sysreg_s(SYS_TTBR0_EL12); break;
|
|
|
|
case TTBR1_EL1: *val = read_sysreg_s(SYS_TTBR1_EL12); break;
|
|
|
|
case TCR_EL1: *val = read_sysreg_s(SYS_TCR_EL12); break;
|
|
|
|
case ESR_EL1: *val = read_sysreg_s(SYS_ESR_EL12); break;
|
|
|
|
case AFSR0_EL1: *val = read_sysreg_s(SYS_AFSR0_EL12); break;
|
|
|
|
case AFSR1_EL1: *val = read_sysreg_s(SYS_AFSR1_EL12); break;
|
|
|
|
case FAR_EL1: *val = read_sysreg_s(SYS_FAR_EL12); break;
|
|
|
|
case MAIR_EL1: *val = read_sysreg_s(SYS_MAIR_EL12); break;
|
|
|
|
case VBAR_EL1: *val = read_sysreg_s(SYS_VBAR_EL12); break;
|
|
|
|
case CONTEXTIDR_EL1: *val = read_sysreg_s(SYS_CONTEXTIDR_EL12);break;
|
|
|
|
case TPIDR_EL0: *val = read_sysreg_s(SYS_TPIDR_EL0); break;
|
|
|
|
case TPIDRRO_EL0: *val = read_sysreg_s(SYS_TPIDRRO_EL0); break;
|
|
|
|
case TPIDR_EL1: *val = read_sysreg_s(SYS_TPIDR_EL1); break;
|
|
|
|
case AMAIR_EL1: *val = read_sysreg_s(SYS_AMAIR_EL12); break;
|
|
|
|
case CNTKCTL_EL1: *val = read_sysreg_s(SYS_CNTKCTL_EL12); break;
|
|
|
|
case ELR_EL1: *val = read_sysreg_s(SYS_ELR_EL12); break;
|
|
|
|
case PAR_EL1: *val = read_sysreg_par(); break;
|
|
|
|
case DACR32_EL2: *val = read_sysreg_s(SYS_DACR32_EL2); break;
|
|
|
|
case IFSR32_EL2: *val = read_sysreg_s(SYS_IFSR32_EL2); break;
|
|
|
|
case DBGVCR32_EL2: *val = read_sysreg_s(SYS_DBGVCR32_EL2); break;
|
|
|
|
default: return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline bool __vcpu_write_sys_reg_to_cpu(u64 val, int reg)
|
|
|
|
{
|
|
|
|
/*
|
|
|
|
* *** VHE ONLY ***
|
|
|
|
*
|
|
|
|
* System registers listed in the switch are not restored on every
|
|
|
|
* entry to the guest but are only restored on vcpu_load.
|
|
|
|
*
|
|
|
|
* Note that MPIDR_EL1 for the guest is set by KVM via VMPIDR_EL2 but
|
|
|
|
* should never be listed below, because the MPIDR should only be set
|
|
|
|
* once, before running the VCPU, and never changed later.
|
|
|
|
*/
|
|
|
|
if (!has_vhe())
|
|
|
|
return false;
|
|
|
|
|
|
|
|
switch (reg) {
|
|
|
|
case CSSELR_EL1: write_sysreg_s(val, SYS_CSSELR_EL1); break;
|
|
|
|
case SCTLR_EL1: write_sysreg_s(val, SYS_SCTLR_EL12); break;
|
|
|
|
case CPACR_EL1: write_sysreg_s(val, SYS_CPACR_EL12); break;
|
|
|
|
case TTBR0_EL1: write_sysreg_s(val, SYS_TTBR0_EL12); break;
|
|
|
|
case TTBR1_EL1: write_sysreg_s(val, SYS_TTBR1_EL12); break;
|
|
|
|
case TCR_EL1: write_sysreg_s(val, SYS_TCR_EL12); break;
|
|
|
|
case ESR_EL1: write_sysreg_s(val, SYS_ESR_EL12); break;
|
|
|
|
case AFSR0_EL1: write_sysreg_s(val, SYS_AFSR0_EL12); break;
|
|
|
|
case AFSR1_EL1: write_sysreg_s(val, SYS_AFSR1_EL12); break;
|
|
|
|
case FAR_EL1: write_sysreg_s(val, SYS_FAR_EL12); break;
|
|
|
|
case MAIR_EL1: write_sysreg_s(val, SYS_MAIR_EL12); break;
|
|
|
|
case VBAR_EL1: write_sysreg_s(val, SYS_VBAR_EL12); break;
|
|
|
|
case CONTEXTIDR_EL1: write_sysreg_s(val, SYS_CONTEXTIDR_EL12);break;
|
|
|
|
case TPIDR_EL0: write_sysreg_s(val, SYS_TPIDR_EL0); break;
|
|
|
|
case TPIDRRO_EL0: write_sysreg_s(val, SYS_TPIDRRO_EL0); break;
|
|
|
|
case TPIDR_EL1: write_sysreg_s(val, SYS_TPIDR_EL1); break;
|
|
|
|
case AMAIR_EL1: write_sysreg_s(val, SYS_AMAIR_EL12); break;
|
|
|
|
case CNTKCTL_EL1: write_sysreg_s(val, SYS_CNTKCTL_EL12); break;
|
|
|
|
case ELR_EL1: write_sysreg_s(val, SYS_ELR_EL12); break;
|
|
|
|
case PAR_EL1: write_sysreg_s(val, SYS_PAR_EL1); break;
|
|
|
|
case DACR32_EL2: write_sysreg_s(val, SYS_DACR32_EL2); break;
|
|
|
|
case IFSR32_EL2: write_sysreg_s(val, SYS_IFSR32_EL2); break;
|
|
|
|
case DBGVCR32_EL2: write_sysreg_s(val, SYS_DBGVCR32_EL2); break;
|
|
|
|
default: return false;
|
|
|
|
}
|
|
|
|
|
|
|
|
return true;
|
|
|
|
}
|
|
|
|
|
2012-12-10 20:29:28 +04:00
|
|
|
struct kvm_vm_stat {
|
2021-06-19 01:27:03 +03:00
|
|
|
struct kvm_vm_stat_generic generic;
|
2012-12-10 20:29:28 +04:00
|
|
|
};
|
|
|
|
|
|
|
|
struct kvm_vcpu_stat {
|
2021-06-19 01:27:03 +03:00
|
|
|
struct kvm_vcpu_stat_generic generic;
|
2016-08-02 07:03:22 +03:00
|
|
|
u64 hvc_exit_stat;
|
2015-11-26 13:09:43 +03:00
|
|
|
u64 wfe_exit_stat;
|
|
|
|
u64 wfi_exit_stat;
|
|
|
|
u64 mmio_exit_user;
|
|
|
|
u64 mmio_exit_kernel;
|
2021-08-02 22:28:07 +03:00
|
|
|
u64 signal_exits;
|
2015-11-26 13:09:43 +03:00
|
|
|
u64 exits;
|
2012-12-10 20:29:28 +04:00
|
|
|
};
|
|
|
|
|
2021-11-05 04:15:00 +03:00
|
|
|
void kvm_vcpu_preferred_target(struct kvm_vcpu_init *init);
|
2012-12-10 20:29:28 +04:00
|
|
|
unsigned long kvm_arm_num_regs(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_arm_copy_reg_indices(struct kvm_vcpu *vcpu, u64 __user *indices);
|
|
|
|
int kvm_arm_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg);
|
|
|
|
int kvm_arm_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *reg);
|
2020-11-02 21:11:16 +03:00
|
|
|
|
|
|
|
unsigned long kvm_arm_num_sys_reg_descs(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_arm_copy_sys_reg_indices(struct kvm_vcpu *vcpu, u64 __user *uindices);
|
|
|
|
int kvm_arm_sys_reg_get_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *);
|
|
|
|
int kvm_arm_sys_reg_set_reg(struct kvm_vcpu *vcpu, const struct kvm_one_reg *);
|
|
|
|
|
2018-07-19 18:24:24 +03:00
|
|
|
int __kvm_arm_vcpu_get_events(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_vcpu_events *events);
|
2018-07-19 18:24:22 +03:00
|
|
|
|
2018-07-19 18:24:24 +03:00
|
|
|
int __kvm_arm_vcpu_set_events(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_vcpu_events *events);
|
2012-12-10 20:29:28 +04:00
|
|
|
|
|
|
|
#define KVM_ARCH_WANT_MMU_NOTIFIER
|
|
|
|
|
2016-04-27 12:28:00 +03:00
|
|
|
void kvm_arm_halt_guest(struct kvm *kvm);
|
|
|
|
void kvm_arm_resume_guest(struct kvm *kvm);
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2021-10-14 14:13:06 +03:00
|
|
|
#define vcpu_has_run_once(vcpu) !!rcu_access_pointer((vcpu)->pid)
|
|
|
|
|
2021-03-19 13:01:16 +03:00
|
|
|
#ifndef __KVM_NVHE_HYPERVISOR__
|
2020-09-15 13:46:41 +03:00
|
|
|
#define kvm_call_hyp_nvhe(f, ...) \
|
2020-06-25 16:14:10 +03:00
|
|
|
({ \
|
2020-09-15 13:46:41 +03:00
|
|
|
struct arm_smccc_res res; \
|
|
|
|
\
|
|
|
|
arm_smccc_1_1_hvc(KVM_HOST_SMCCC_FUNC(f), \
|
|
|
|
##__VA_ARGS__, &res); \
|
|
|
|
WARN_ON(res.a0 != SMCCC_RET_SUCCESS); \
|
|
|
|
\
|
|
|
|
res.a1; \
|
2020-06-25 16:14:10 +03:00
|
|
|
})
|
|
|
|
|
2019-01-05 18:57:56 +03:00
|
|
|
/*
|
|
|
|
* The couple of isb() below are there to guarantee the same behaviour
|
|
|
|
* on VHE as on !VHE, where the eret to EL1 acts as a context
|
|
|
|
* synchronization event.
|
|
|
|
*/
|
|
|
|
#define kvm_call_hyp(f, ...) \
|
|
|
|
do { \
|
|
|
|
if (has_vhe()) { \
|
|
|
|
f(__VA_ARGS__); \
|
|
|
|
isb(); \
|
|
|
|
} else { \
|
2020-06-25 16:14:10 +03:00
|
|
|
kvm_call_hyp_nvhe(f, ##__VA_ARGS__); \
|
2019-01-05 18:57:56 +03:00
|
|
|
} \
|
|
|
|
} while(0)
|
|
|
|
|
|
|
|
#define kvm_call_hyp_ret(f, ...) \
|
|
|
|
({ \
|
|
|
|
typeof(f(__VA_ARGS__)) ret; \
|
|
|
|
\
|
|
|
|
if (has_vhe()) { \
|
|
|
|
ret = f(__VA_ARGS__); \
|
|
|
|
isb(); \
|
|
|
|
} else { \
|
2020-09-15 13:46:41 +03:00
|
|
|
ret = kvm_call_hyp_nvhe(f, ##__VA_ARGS__); \
|
2019-01-05 18:57:56 +03:00
|
|
|
} \
|
|
|
|
\
|
|
|
|
ret; \
|
|
|
|
})
|
2021-03-19 13:01:16 +03:00
|
|
|
#else /* __KVM_NVHE_HYPERVISOR__ */
|
|
|
|
#define kvm_call_hyp(f, ...) f(__VA_ARGS__)
|
|
|
|
#define kvm_call_hyp_ret(f, ...) f(__VA_ARGS__)
|
|
|
|
#define kvm_call_hyp_nvhe(f, ...) f(__VA_ARGS__)
|
|
|
|
#endif /* __KVM_NVHE_HYPERVISOR__ */
|
2016-03-01 16:12:44 +03:00
|
|
|
|
2014-10-16 19:00:18 +04:00
|
|
|
void force_vm_exit(const cpumask_t *mask);
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2020-06-23 16:14:15 +03:00
|
|
|
int handle_exit(struct kvm_vcpu *vcpu, int exception_index);
|
|
|
|
void handle_exit_early(struct kvm_vcpu *vcpu, int exception_index);
|
2012-12-10 20:29:28 +04:00
|
|
|
|
2020-11-02 21:11:16 +03:00
|
|
|
int kvm_handle_cp14_load_store(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_handle_cp14_32(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_handle_cp14_64(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_handle_cp15_32(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_handle_cp15_64(struct kvm_vcpu *vcpu);
|
|
|
|
int kvm_handle_sys_reg(struct kvm_vcpu *vcpu);
|
|
|
|
|
|
|
|
void kvm_reset_sys_regs(struct kvm_vcpu *vcpu);
|
|
|
|
|
|
|
|
void kvm_sys_reg_table_init(void);
|
|
|
|
|
2019-12-13 16:25:25 +03:00
|
|
|
/* MMIO helpers */
|
|
|
|
void kvm_mmio_write_buf(void *buf, unsigned int len, unsigned long data);
|
|
|
|
unsigned long kvm_mmio_read_buf(const void *buf, unsigned int len);
|
|
|
|
|
2020-06-23 16:14:15 +03:00
|
|
|
int kvm_handle_mmio_return(struct kvm_vcpu *vcpu);
|
|
|
|
int io_mem_abort(struct kvm_vcpu *vcpu, phys_addr_t fault_ipa);
|
2019-12-13 16:25:25 +03:00
|
|
|
|
2021-11-11 05:07:33 +03:00
|
|
|
/*
|
|
|
|
* Returns true if a Performance Monitoring Interrupt (PMI), a.k.a. perf event,
|
|
|
|
* arrived in guest context. For arm64, any event that arrives while a vCPU is
|
|
|
|
* loaded is considered to be "in guest".
|
|
|
|
*/
|
|
|
|
static inline bool kvm_arch_pmi_in_guest(struct kvm_vcpu *vcpu)
|
|
|
|
{
|
|
|
|
return IS_ENABLED(CONFIG_GUEST_PERF_EVENTS) && !!vcpu;
|
|
|
|
}
|
|
|
|
|
2019-10-21 18:28:16 +03:00
|
|
|
long kvm_hypercall_pv_features(struct kvm_vcpu *vcpu);
|
2019-10-21 18:28:18 +03:00
|
|
|
gpa_t kvm_init_stolen_time(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_update_stolen_time(struct kvm_vcpu *vcpu);
|
|
|
|
|
2020-08-04 20:06:04 +03:00
|
|
|
bool kvm_arm_pvtime_supported(void);
|
2019-10-21 18:28:20 +03:00
|
|
|
int kvm_arm_pvtime_set_attr(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_device_attr *attr);
|
|
|
|
int kvm_arm_pvtime_get_attr(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_device_attr *attr);
|
|
|
|
int kvm_arm_pvtime_has_attr(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_device_attr *attr);
|
|
|
|
|
2021-11-22 15:18:42 +03:00
|
|
|
extern unsigned int kvm_arm_vmid_bits;
|
2021-11-22 15:18:41 +03:00
|
|
|
int kvm_arm_vmid_alloc_init(void);
|
|
|
|
void kvm_arm_vmid_alloc_free(void);
|
|
|
|
void kvm_arm_vmid_update(struct kvm_vmid *kvm_vmid);
|
2021-11-22 15:18:44 +03:00
|
|
|
void kvm_arm_vmid_clear_active(void);
|
2021-11-22 15:18:41 +03:00
|
|
|
|
2019-10-21 18:28:18 +03:00
|
|
|
static inline void kvm_arm_pvtime_vcpu_init(struct kvm_vcpu_arch *vcpu_arch)
|
|
|
|
{
|
|
|
|
vcpu_arch->steal.base = GPA_INVALID;
|
|
|
|
}
|
|
|
|
|
|
|
|
static inline bool kvm_arm_is_pvtime_enabled(struct kvm_vcpu_arch *vcpu_arch)
|
|
|
|
{
|
|
|
|
return (vcpu_arch->steal.base != GPA_INVALID);
|
|
|
|
}
|
2019-10-21 18:28:16 +03:00
|
|
|
|
2018-07-19 18:24:22 +03:00
|
|
|
void kvm_set_sei_esr(struct kvm_vcpu *vcpu, u64 syndrome);
|
|
|
|
|
2014-06-02 17:37:13 +04:00
|
|
|
struct kvm_vcpu *kvm_mpidr_to_vcpu(struct kvm *kvm, unsigned long mpidr);
|
|
|
|
|
2020-09-30 16:05:35 +03:00
|
|
|
DECLARE_KVM_HYP_PER_CPU(struct kvm_host_data, kvm_host_data);
|
2017-10-08 18:01:56 +03:00
|
|
|
|
2019-07-06 01:35:56 +03:00
|
|
|
static inline void kvm_init_host_cpu_context(struct kvm_cpu_context *cpu_ctxt)
|
2019-01-19 18:29:54 +03:00
|
|
|
{
|
|
|
|
/* The host's MPIDR is immutable, so let's set it up at boot time */
|
2020-04-12 16:00:43 +03:00
|
|
|
ctxt_sys_reg(cpu_ctxt, MPIDR_EL1) = read_cpuid_mpidr();
|
2019-01-19 18:29:54 +03:00
|
|
|
}
|
|
|
|
|
2021-11-16 18:06:19 +03:00
|
|
|
static inline bool kvm_system_needs_idmapped_vectors(void)
|
|
|
|
{
|
|
|
|
return cpus_have_const_cap(ARM64_SPECTRE_V3A);
|
|
|
|
}
|
|
|
|
|
KVM: arm/arm64: Context-switch ptrauth registers
When pointer authentication is supported, a guest may wish to use it.
This patch adds the necessary KVM infrastructure for this to work, with
a semi-lazy context switch of the pointer auth state.
Pointer authentication feature is only enabled when VHE is built
in the kernel and present in the CPU implementation so only VHE code
paths are modified.
When we schedule a vcpu, we disable guest usage of pointer
authentication instructions and accesses to the keys. While these are
disabled, we avoid context-switching the keys. When we trap the guest
trying to use pointer authentication functionality, we change to eagerly
context-switching the keys, and enable the feature. The next time the
vcpu is scheduled out/in, we start again. However the host key save is
optimized and implemented inside ptrauth instruction/register access
trap.
Pointer authentication consists of address authentication and generic
authentication, and CPUs in a system might have varied support for
either. Where support for either feature is not uniform, it is hidden
from guests via ID register emulation, as a result of the cpufeature
framework in the host.
Unfortunately, address authentication and generic authentication cannot
be trapped separately, as the architecture provides a single EL2 trap
covering both. If we wish to expose one without the other, we cannot
prevent a (badly-written) guest from intermittently using a feature
which is not uniformly supported (when scheduled on a physical CPU which
supports the relevant feature). Hence, this patch expects both type of
authentication to be present in a cpu.
This switch of key is done from guest enter/exit assembly as preparation
for the upcoming in-kernel pointer authentication support. Hence, these
key switching routines are not implemented in C code as they may cause
pointer authentication key signing error in some situations.
Signed-off-by: Mark Rutland <mark.rutland@arm.com>
[Only VHE, key switch in full assembly, vcpu_has_ptrauth checks
, save host key in ptrauth exception trap]
Signed-off-by: Amit Daniel Kachhap <amit.kachhap@arm.com>
Reviewed-by: Julien Thierry <julien.thierry@arm.com>
Cc: Christoffer Dall <christoffer.dall@arm.com>
Cc: kvmarm@lists.cs.columbia.edu
[maz: various fixups]
Signed-off-by: Marc Zyngier <marc.zyngier@arm.com>
2019-04-23 07:42:35 +03:00
|
|
|
void kvm_arm_vcpu_ptrauth_trap(struct kvm_vcpu *vcpu);
|
|
|
|
|
2014-08-28 17:13:02 +04:00
|
|
|
static inline void kvm_arch_hardware_unsetup(void) {}
|
|
|
|
static inline void kvm_arch_sync_events(struct kvm *kvm) {}
|
|
|
|
static inline void kvm_arch_sched_in(struct kvm_vcpu *vcpu, int cpu) {}
|
|
|
|
|
2015-07-07 19:29:56 +03:00
|
|
|
void kvm_arm_init_debug(void);
|
2021-04-07 17:48:57 +03:00
|
|
|
void kvm_arm_vcpu_init_debug(struct kvm_vcpu *vcpu);
|
2015-07-07 19:29:56 +03:00
|
|
|
void kvm_arm_setup_debug(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_arm_clear_debug(struct kvm_vcpu *vcpu);
|
2015-07-07 19:30:00 +03:00
|
|
|
void kvm_arm_reset_debug_ptr(struct kvm_vcpu *vcpu);
|
2022-02-03 20:41:57 +03:00
|
|
|
|
|
|
|
#define kvm_vcpu_os_lock_enabled(vcpu) \
|
|
|
|
(!!(__vcpu_sys_reg(vcpu, OSLSR_EL1) & SYS_OSLSR_OSLK))
|
|
|
|
|
2016-01-11 16:35:32 +03:00
|
|
|
int kvm_arm_vcpu_arch_set_attr(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_device_attr *attr);
|
|
|
|
int kvm_arm_vcpu_arch_get_attr(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_device_attr *attr);
|
|
|
|
int kvm_arm_vcpu_arch_has_attr(struct kvm_vcpu *vcpu,
|
|
|
|
struct kvm_device_attr *attr);
|
2015-07-07 19:29:56 +03:00
|
|
|
|
2021-06-21 14:17:15 +03:00
|
|
|
long kvm_vm_ioctl_mte_copy_tags(struct kvm *kvm,
|
|
|
|
struct kvm_arm_copy_mte_tags *copy_tags);
|
|
|
|
|
2018-04-06 16:55:59 +03:00
|
|
|
/* Guest/host FPSIMD coordination helpers */
|
|
|
|
int kvm_arch_vcpu_run_map_fp(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_arch_vcpu_load_fp(struct kvm_vcpu *vcpu);
|
2021-10-21 16:10:35 +03:00
|
|
|
void kvm_arch_vcpu_ctxflush_fp(struct kvm_vcpu *vcpu);
|
2018-04-06 16:55:59 +03:00
|
|
|
void kvm_arch_vcpu_ctxsync_fp(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_arch_vcpu_put_fp(struct kvm_vcpu *vcpu);
|
2021-12-15 19:12:31 +03:00
|
|
|
void kvm_vcpu_unshare_task_fp(struct kvm_vcpu *vcpu);
|
2018-04-06 16:55:59 +03:00
|
|
|
|
2019-04-09 22:22:12 +03:00
|
|
|
static inline bool kvm_pmu_counter_deferred(struct perf_event_attr *attr)
|
|
|
|
{
|
2019-04-09 22:22:15 +03:00
|
|
|
return (!has_vhe() && attr->exclude_host);
|
2019-04-09 22:22:12 +03:00
|
|
|
}
|
|
|
|
|
2021-04-05 19:42:53 +03:00
|
|
|
/* Flags for host debug state */
|
|
|
|
void kvm_arch_vcpu_load_debug_state_flags(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_arch_vcpu_put_debug_state_flags(struct kvm_vcpu *vcpu);
|
|
|
|
|
2021-10-14 13:30:42 +03:00
|
|
|
#ifdef CONFIG_KVM
|
2019-04-09 22:22:12 +03:00
|
|
|
void kvm_set_pmu_events(u32 set, struct perf_event_attr *attr);
|
|
|
|
void kvm_clr_pmu_events(u32 clr);
|
2019-04-09 22:22:14 +03:00
|
|
|
|
2019-04-09 22:22:15 +03:00
|
|
|
void kvm_vcpu_pmu_restore_guest(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_vcpu_pmu_restore_host(struct kvm_vcpu *vcpu);
|
2019-04-09 22:22:12 +03:00
|
|
|
#else
|
|
|
|
static inline void kvm_set_pmu_events(u32 set, struct perf_event_attr *attr) {}
|
|
|
|
static inline void kvm_clr_pmu_events(u32 clr) {}
|
2018-04-06 16:55:59 +03:00
|
|
|
#endif
|
arm64/sve: KVM: Prevent guests from using SVE
Until KVM has full SVE support, guests must not be allowed to
execute SVE instructions.
This patch enables the necessary traps, and also ensures that the
traps are disabled again on exit from the guest so that the host
can still use SVE if it wants to.
On guest exit, high bits of the SVE Zn registers may have been
clobbered as a side-effect the execution of FPSIMD instructions in
the guest. The existing KVM host FPSIMD restore code is not
sufficient to restore these bits, so this patch explicitly marks
the CPU as not containing cached vector state for any task, thus
forcing a reload on the next return to userspace. This is an
interim measure, in advance of adding full SVE awareness to KVM.
This marking of cached vector state in the CPU as invalid is done
using __this_cpu_write(fpsimd_last_state, NULL) in fpsimd.c. Due
to the repeated use of this rather obscure operation, it makes
sense to factor it out as a separate helper with a clearer name.
This patch factors it out as fpsimd_flush_cpu_state(), and ports
all callers to use it.
As a side effect of this refactoring, a this_cpu_write() in
fpsimd_cpu_pm_notifier() is changed to __this_cpu_write(). This
should be fine, since cpu_pm_enter() is supposed to be called only
with interrupts disabled.
Signed-off-by: Dave Martin <Dave.Martin@arm.com>
Reviewed-by: Alex Bennée <alex.bennee@linaro.org>
Reviewed-by: Christoffer Dall <christoffer.dall@linaro.org>
Acked-by: Catalin Marinas <catalin.marinas@arm.com>
Acked-by: Marc Zyngier <marc.zyngier@arm.com>
Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Signed-off-by: Will Deacon <will.deacon@arm.com>
2017-10-31 18:51:16 +03:00
|
|
|
|
2020-06-25 16:14:16 +03:00
|
|
|
void kvm_vcpu_load_sysregs_vhe(struct kvm_vcpu *vcpu);
|
|
|
|
void kvm_vcpu_put_sysregs_vhe(struct kvm_vcpu *vcpu);
|
2017-10-10 11:21:18 +03:00
|
|
|
|
2020-05-28 16:12:58 +03:00
|
|
|
int kvm_set_ipa_limit(void);
|
2018-09-26 19:32:52 +03:00
|
|
|
|
2018-05-15 14:37:37 +03:00
|
|
|
#define __KVM_HAVE_ARCH_VM_ALLOC
|
|
|
|
struct kvm *kvm_arch_alloc_vm(void);
|
|
|
|
|
2018-10-01 15:40:36 +03:00
|
|
|
int kvm_arm_setup_stage2(struct kvm *kvm, unsigned long type);
|
2018-09-26 19:32:42 +03:00
|
|
|
|
2021-08-17 11:11:20 +03:00
|
|
|
static inline bool kvm_vm_is_protected(struct kvm *kvm)
|
|
|
|
{
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
|
2021-10-10 17:56:33 +03:00
|
|
|
void kvm_init_protected_traps(struct kvm_vcpu *vcpu);
|
|
|
|
|
2019-04-10 19:17:37 +03:00
|
|
|
int kvm_arm_vcpu_finalize(struct kvm_vcpu *vcpu, int feature);
|
2019-02-28 21:46:44 +03:00
|
|
|
bool kvm_arm_vcpu_is_finalized(struct kvm_vcpu *vcpu);
|
|
|
|
|
|
|
|
#define kvm_arm_vcpu_sve_finalized(vcpu) \
|
|
|
|
((vcpu)->arch.flags & KVM_ARM64_VCPU_SVE_FINALIZED)
|
2018-12-19 17:27:01 +03:00
|
|
|
|
2022-03-11 20:39:47 +03:00
|
|
|
#define kvm_has_mte(kvm) \
|
|
|
|
(system_supports_mte() && \
|
|
|
|
test_bit(KVM_ARCH_FLAG_MTE_ENABLED, &(kvm)->arch.flags))
|
2020-11-13 19:39:44 +03:00
|
|
|
#define kvm_vcpu_has_pmu(vcpu) \
|
|
|
|
(test_bit(KVM_ARM_VCPU_PMU_V3, (vcpu)->arch.features))
|
|
|
|
|
2021-01-06 13:34:53 +03:00
|
|
|
int kvm_trng_call(struct kvm_vcpu *vcpu);
|
KVM: arm64: Prepare the creation of s1 mappings at EL2
When memory protection is enabled, the EL2 code needs the ability to
create and manage its own page-table. To do so, introduce a new set of
hypercalls to bootstrap a memory management system at EL2.
This leads to the following boot flow in nVHE Protected mode:
1. the host allocates memory for the hypervisor very early on, using
the memblock API;
2. the host creates a set of stage 1 page-table for EL2, installs the
EL2 vectors, and issues the __pkvm_init hypercall;
3. during __pkvm_init, the hypervisor re-creates its stage 1 page-table
and stores it in the memory pool provided by the host;
4. the hypervisor then extends its stage 1 mappings to include a
vmemmap in the EL2 VA space, hence allowing to use the buddy
allocator introduced in a previous patch;
5. the hypervisor jumps back in the idmap page, switches from the
host-provided page-table to the new one, and wraps up its
initialization by enabling the new allocator, before returning to
the host.
6. the host can free the now unused page-table created for EL2, and
will now need to issue hypercalls to make changes to the EL2 stage 1
mappings instead of modifying them directly.
Note that for the sake of simplifying the review, this patch focuses on
the hypervisor side of things. In other words, this only implements the
new hypercalls, but does not make use of them from the host yet. The
host-side changes will follow in a subsequent patch.
Credits to Will for __pkvm_init_switch_pgd.
Acked-by: Will Deacon <will@kernel.org>
Co-authored-by: Will Deacon <will@kernel.org>
Signed-off-by: Will Deacon <will@kernel.org>
Signed-off-by: Quentin Perret <qperret@google.com>
Signed-off-by: Marc Zyngier <maz@kernel.org>
Link: https://lore.kernel.org/r/20210319100146.1149909-18-qperret@google.com
2021-03-19 13:01:25 +03:00
|
|
|
#ifdef CONFIG_KVM
|
|
|
|
extern phys_addr_t hyp_mem_base;
|
|
|
|
extern phys_addr_t hyp_mem_size;
|
|
|
|
void __init kvm_hyp_reserve(void);
|
|
|
|
#else
|
|
|
|
static inline void kvm_hyp_reserve(void) { }
|
|
|
|
#endif
|
2021-01-06 13:34:53 +03:00
|
|
|
|
2012-12-10 20:29:28 +04:00
|
|
|
#endif /* __ARM64_KVM_HOST_H__ */
|