Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * KVM paravirt_ops implementation
4 *
5 * Copyright (C) 2007, Red Hat, Inc., Ingo Molnar <mingo@redhat.com>
6 * Copyright IBM Corporation, 2007
7 * Authors: Anthony Liguori <aliguori@us.ibm.com>
8 */
9
10#define pr_fmt(fmt) "kvm-guest: " fmt
11
12#include <linux/context_tracking.h>
13#include <linux/init.h>
14#include <linux/irq.h>
15#include <linux/kernel.h>
16#include <linux/kvm_para.h>
17#include <linux/cpu.h>
18#include <linux/mm.h>
19#include <linux/highmem.h>
20#include <linux/hardirq.h>
21#include <linux/notifier.h>
22#include <linux/reboot.h>
23#include <linux/hash.h>
24#include <linux/sched.h>
25#include <linux/slab.h>
26#include <linux/kprobes.h>
27#include <linux/nmi.h>
28#include <linux/swait.h>
29#include <linux/syscore_ops.h>
30#include <asm/timer.h>
31#include <asm/cpu.h>
32#include <asm/traps.h>
33#include <asm/desc.h>
34#include <asm/tlbflush.h>
35#include <asm/apic.h>
36#include <asm/apicdef.h>
37#include <asm/hypervisor.h>
38#include <asm/tlb.h>
39#include <asm/cpuidle_haltpoll.h>
40#include <asm/ptrace.h>
41#include <asm/reboot.h>
42#include <asm/svm.h>
43
44DEFINE_STATIC_KEY_FALSE(kvm_async_pf_enabled);
45
46static int kvmapf = 1;
47
48static int __init parse_no_kvmapf(char *arg)
49{
50 kvmapf = 0;
51 return 0;
52}
53
54early_param("no-kvmapf", parse_no_kvmapf);
55
56static int steal_acc = 1;
57static int __init parse_no_stealacc(char *arg)
58{
59 steal_acc = 0;
60 return 0;
61}
62
63early_param("no-steal-acc", parse_no_stealacc);
64
65static DEFINE_PER_CPU_DECRYPTED(struct kvm_vcpu_pv_apf_data, apf_reason) __aligned(64);
66DEFINE_PER_CPU_DECRYPTED(struct kvm_steal_time, steal_time) __aligned(64) __visible;
67static int has_steal_clock = 0;
68
69/*
70 * No need for any "IO delay" on KVM
71 */
72static void kvm_io_delay(void)
73{
74}
75
76#define KVM_TASK_SLEEP_HASHBITS 8
77#define KVM_TASK_SLEEP_HASHSIZE (1<<KVM_TASK_SLEEP_HASHBITS)
78
79struct kvm_task_sleep_node {
80 struct hlist_node link;
81 struct swait_queue_head wq;
82 u32 token;
83 int cpu;
84};
85
86static struct kvm_task_sleep_head {
87 raw_spinlock_t lock;
88 struct hlist_head list;
89} async_pf_sleepers[KVM_TASK_SLEEP_HASHSIZE];
90
91static struct kvm_task_sleep_node *_find_apf_task(struct kvm_task_sleep_head *b,
92 u32 token)
93{
94 struct hlist_node *p;
95
96 hlist_for_each(p, &b->list) {
97 struct kvm_task_sleep_node *n =
98 hlist_entry(p, typeof(*n), link);
99 if (n->token == token)
100 return n;
101 }
102
103 return NULL;
104}
105
106static bool kvm_async_pf_queue_task(u32 token, struct kvm_task_sleep_node *n)
107{
108 u32 key = hash_32(token, KVM_TASK_SLEEP_HASHBITS);
109 struct kvm_task_sleep_head *b = &async_pf_sleepers[key];
110 struct kvm_task_sleep_node *e;
111
112 raw_spin_lock(&b->lock);
113 e = _find_apf_task(b, token);
114 if (e) {
115 /* dummy entry exist -> wake up was delivered ahead of PF */
116 hlist_del(&e->link);
117 raw_spin_unlock(&b->lock);
118 kfree(e);
119 return false;
120 }
121
122 n->token = token;
123 n->cpu = smp_processor_id();
124 init_swait_queue_head(&n->wq);
125 hlist_add_head(&n->link, &b->list);
126 raw_spin_unlock(&b->lock);
127 return true;
128}
129
130/*
131 * kvm_async_pf_task_wait_schedule - Wait for pagefault to be handled
132 * @token: Token to identify the sleep node entry
133 *
134 * Invoked from the async pagefault handling code or from the VM exit page
135 * fault handler. In both cases RCU is watching.
136 */
137void kvm_async_pf_task_wait_schedule(u32 token)
138{
139 struct kvm_task_sleep_node n;
140 DECLARE_SWAITQUEUE(wait);
141
142 lockdep_assert_irqs_disabled();
143
144 if (!kvm_async_pf_queue_task(token, &n))
145 return;
146
147 for (;;) {
148 prepare_to_swait_exclusive(&n.wq, &wait, TASK_UNINTERRUPTIBLE);
149 if (hlist_unhashed(&n.link))
150 break;
151
152 local_irq_enable();
153 schedule();
154 local_irq_disable();
155 }
156 finish_swait(&n.wq, &wait);
157}
158EXPORT_SYMBOL_GPL(kvm_async_pf_task_wait_schedule);
159
160static void apf_task_wake_one(struct kvm_task_sleep_node *n)
161{
162 hlist_del_init(&n->link);
163 if (swq_has_sleeper(&n->wq))
164 swake_up_one(&n->wq);
165}
166
167static void apf_task_wake_all(void)
168{
169 int i;
170
171 for (i = 0; i < KVM_TASK_SLEEP_HASHSIZE; i++) {
172 struct kvm_task_sleep_head *b = &async_pf_sleepers[i];
173 struct kvm_task_sleep_node *n;
174 struct hlist_node *p, *next;
175
176 raw_spin_lock(&b->lock);
177 hlist_for_each_safe(p, next, &b->list) {
178 n = hlist_entry(p, typeof(*n), link);
179 if (n->cpu == smp_processor_id())
180 apf_task_wake_one(n);
181 }
182 raw_spin_unlock(&b->lock);
183 }
184}
185
186void kvm_async_pf_task_wake(u32 token)
187{
188 u32 key = hash_32(token, KVM_TASK_SLEEP_HASHBITS);
189 struct kvm_task_sleep_head *b = &async_pf_sleepers[key];
190 struct kvm_task_sleep_node *n;
191
192 if (token == ~0) {
193 apf_task_wake_all();
194 return;
195 }
196
197again:
198 raw_spin_lock(&b->lock);
199 n = _find_apf_task(b, token);
200 if (!n) {
201 /*
202 * async PF was not yet handled.
203 * Add dummy entry for the token.
204 */
205 n = kzalloc(sizeof(*n), GFP_ATOMIC);
206 if (!n) {
207 /*
208 * Allocation failed! Busy wait while other cpu
209 * handles async PF.
210 */
211 raw_spin_unlock(&b->lock);
212 cpu_relax();
213 goto again;
214 }
215 n->token = token;
216 n->cpu = smp_processor_id();
217 init_swait_queue_head(&n->wq);
218 hlist_add_head(&n->link, &b->list);
219 } else {
220 apf_task_wake_one(n);
221 }
222 raw_spin_unlock(&b->lock);
223 return;
224}
225EXPORT_SYMBOL_GPL(kvm_async_pf_task_wake);
226
227noinstr u32 kvm_read_and_reset_apf_flags(void)
228{
229 u32 flags = 0;
230
231 if (__this_cpu_read(apf_reason.enabled)) {
232 flags = __this_cpu_read(apf_reason.flags);
233 __this_cpu_write(apf_reason.flags, 0);
234 }
235
236 return flags;
237}
238EXPORT_SYMBOL_GPL(kvm_read_and_reset_apf_flags);
239
240noinstr bool __kvm_handle_async_pf(struct pt_regs *regs, u32 token)
241{
242 u32 flags = kvm_read_and_reset_apf_flags();
243 irqentry_state_t state;
244
245 if (!flags)
246 return false;
247
248 state = irqentry_enter(regs);
249 instrumentation_begin();
250
251 /*
252 * If the host managed to inject an async #PF into an interrupt
253 * disabled region, then die hard as this is not going to end well
254 * and the host side is seriously broken.
255 */
256 if (unlikely(!(regs->flags & X86_EFLAGS_IF)))
257 panic("Host injected async #PF in interrupt disabled region\n");
258
259 if (flags & KVM_PV_REASON_PAGE_NOT_PRESENT) {
260 if (unlikely(!(user_mode(regs))))
261 panic("Host injected async #PF in kernel mode\n");
262 /* Page is swapped out by the host. */
263 kvm_async_pf_task_wait_schedule(token);
264 } else {
265 WARN_ONCE(1, "Unexpected async PF flags: %x\n", flags);
266 }
267
268 instrumentation_end();
269 irqentry_exit(regs, state);
270 return true;
271}
272
273DEFINE_IDTENTRY_SYSVEC(sysvec_kvm_asyncpf_interrupt)
274{
275 struct pt_regs *old_regs = set_irq_regs(regs);
276 u32 token;
277
278 ack_APIC_irq();
279
280 inc_irq_stat(irq_hv_callback_count);
281
282 if (__this_cpu_read(apf_reason.enabled)) {
283 token = __this_cpu_read(apf_reason.token);
284 kvm_async_pf_task_wake(token);
285 __this_cpu_write(apf_reason.token, 0);
286 wrmsrl(MSR_KVM_ASYNC_PF_ACK, 1);
287 }
288
289 set_irq_regs(old_regs);
290}
291
292static void __init paravirt_ops_setup(void)
293{
294 pv_info.name = "KVM";
295
296 if (kvm_para_has_feature(KVM_FEATURE_NOP_IO_DELAY))
297 pv_ops.cpu.io_delay = kvm_io_delay;
298
299#ifdef CONFIG_X86_IO_APIC
300 no_timer_check = 1;
301#endif
302}
303
304static void kvm_register_steal_time(void)
305{
306 int cpu = smp_processor_id();
307 struct kvm_steal_time *st = &per_cpu(steal_time, cpu);
308
309 if (!has_steal_clock)
310 return;
311
312 wrmsrl(MSR_KVM_STEAL_TIME, (slow_virt_to_phys(st) | KVM_MSR_ENABLED));
313 pr_info("stealtime: cpu %d, msr %llx\n", cpu,
314 (unsigned long long) slow_virt_to_phys(st));
315}
316
317static DEFINE_PER_CPU_DECRYPTED(unsigned long, kvm_apic_eoi) = KVM_PV_EOI_DISABLED;
318
319static notrace void kvm_guest_apic_eoi_write(u32 reg, u32 val)
320{
321 /**
322 * This relies on __test_and_clear_bit to modify the memory
323 * in a way that is atomic with respect to the local CPU.
324 * The hypervisor only accesses this memory from the local CPU so
325 * there's no need for lock or memory barriers.
326 * An optimization barrier is implied in apic write.
327 */
328 if (__test_and_clear_bit(KVM_PV_EOI_BIT, this_cpu_ptr(&kvm_apic_eoi)))
329 return;
330 apic->native_eoi_write(APIC_EOI, APIC_EOI_ACK);
331}
332
333static void kvm_guest_cpu_init(void)
334{
335 if (kvm_para_has_feature(KVM_FEATURE_ASYNC_PF_INT) && kvmapf) {
336 u64 pa = slow_virt_to_phys(this_cpu_ptr(&apf_reason));
337
338 WARN_ON_ONCE(!static_branch_likely(&kvm_async_pf_enabled));
339
340 pa = slow_virt_to_phys(this_cpu_ptr(&apf_reason));
341 pa |= KVM_ASYNC_PF_ENABLED | KVM_ASYNC_PF_DELIVERY_AS_INT;
342
343 if (kvm_para_has_feature(KVM_FEATURE_ASYNC_PF_VMEXIT))
344 pa |= KVM_ASYNC_PF_DELIVERY_AS_PF_VMEXIT;
345
346 wrmsrl(MSR_KVM_ASYNC_PF_INT, HYPERVISOR_CALLBACK_VECTOR);
347
348 wrmsrl(MSR_KVM_ASYNC_PF_EN, pa);
349 __this_cpu_write(apf_reason.enabled, 1);
350 pr_info("setup async PF for cpu %d\n", smp_processor_id());
351 }
352
353 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI)) {
354 unsigned long pa;
355
356 /* Size alignment is implied but just to make it explicit. */
357 BUILD_BUG_ON(__alignof__(kvm_apic_eoi) < 4);
358 __this_cpu_write(kvm_apic_eoi, 0);
359 pa = slow_virt_to_phys(this_cpu_ptr(&kvm_apic_eoi))
360 | KVM_MSR_ENABLED;
361 wrmsrl(MSR_KVM_PV_EOI_EN, pa);
362 }
363
364 if (has_steal_clock)
365 kvm_register_steal_time();
366}
367
368static void kvm_pv_disable_apf(void)
369{
370 if (!__this_cpu_read(apf_reason.enabled))
371 return;
372
373 wrmsrl(MSR_KVM_ASYNC_PF_EN, 0);
374 __this_cpu_write(apf_reason.enabled, 0);
375
376 pr_info("disable async PF for cpu %d\n", smp_processor_id());
377}
378
379static void kvm_disable_steal_time(void)
380{
381 if (!has_steal_clock)
382 return;
383
384 wrmsr(MSR_KVM_STEAL_TIME, 0, 0);
385}
386
387static u64 kvm_steal_clock(int cpu)
388{
389 u64 steal;
390 struct kvm_steal_time *src;
391 int version;
392
393 src = &per_cpu(steal_time, cpu);
394 do {
395 version = src->version;
396 virt_rmb();
397 steal = src->steal;
398 virt_rmb();
399 } while ((version & 1) || (version != src->version));
400
401 return steal;
402}
403
404static inline void __set_percpu_decrypted(void *ptr, unsigned long size)
405{
406 early_set_memory_decrypted((unsigned long) ptr, size);
407}
408
409/*
410 * Iterate through all possible CPUs and map the memory region pointed
411 * by apf_reason, steal_time and kvm_apic_eoi as decrypted at once.
412 *
413 * Note: we iterate through all possible CPUs to ensure that CPUs
414 * hotplugged will have their per-cpu variable already mapped as
415 * decrypted.
416 */
417static void __init sev_map_percpu_data(void)
418{
419 int cpu;
420
421 if (!sev_active())
422 return;
423
424 for_each_possible_cpu(cpu) {
425 __set_percpu_decrypted(&per_cpu(apf_reason, cpu), sizeof(apf_reason));
426 __set_percpu_decrypted(&per_cpu(steal_time, cpu), sizeof(steal_time));
427 __set_percpu_decrypted(&per_cpu(kvm_apic_eoi, cpu), sizeof(kvm_apic_eoi));
428 }
429}
430
431static void kvm_guest_cpu_offline(bool shutdown)
432{
433 kvm_disable_steal_time();
434 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI))
435 wrmsrl(MSR_KVM_PV_EOI_EN, 0);
436 kvm_pv_disable_apf();
437 if (!shutdown)
438 apf_task_wake_all();
439 kvmclock_disable();
440}
441
442static int kvm_cpu_online(unsigned int cpu)
443{
444 unsigned long flags;
445
446 local_irq_save(flags);
447 kvm_guest_cpu_init();
448 local_irq_restore(flags);
449 return 0;
450}
451
452#ifdef CONFIG_SMP
453
454static DEFINE_PER_CPU(cpumask_var_t, __pv_cpu_mask);
455
456static bool pv_tlb_flush_supported(void)
457{
458 return (kvm_para_has_feature(KVM_FEATURE_PV_TLB_FLUSH) &&
459 !kvm_para_has_hint(KVM_HINTS_REALTIME) &&
460 kvm_para_has_feature(KVM_FEATURE_STEAL_TIME));
461}
462
463static bool pv_ipi_supported(void)
464{
465 return kvm_para_has_feature(KVM_FEATURE_PV_SEND_IPI);
466}
467
468static bool pv_sched_yield_supported(void)
469{
470 return (kvm_para_has_feature(KVM_FEATURE_PV_SCHED_YIELD) &&
471 !kvm_para_has_hint(KVM_HINTS_REALTIME) &&
472 kvm_para_has_feature(KVM_FEATURE_STEAL_TIME));
473}
474
475#define KVM_IPI_CLUSTER_SIZE (2 * BITS_PER_LONG)
476
477static void __send_ipi_mask(const struct cpumask *mask, int vector)
478{
479 unsigned long flags;
480 int cpu, apic_id, icr;
481 int min = 0, max = 0;
482#ifdef CONFIG_X86_64
483 __uint128_t ipi_bitmap = 0;
484#else
485 u64 ipi_bitmap = 0;
486#endif
487 long ret;
488
489 if (cpumask_empty(mask))
490 return;
491
492 local_irq_save(flags);
493
494 switch (vector) {
495 default:
496 icr = APIC_DM_FIXED | vector;
497 break;
498 case NMI_VECTOR:
499 icr = APIC_DM_NMI;
500 break;
501 }
502
503 for_each_cpu(cpu, mask) {
504 apic_id = per_cpu(x86_cpu_to_apicid, cpu);
505 if (!ipi_bitmap) {
506 min = max = apic_id;
507 } else if (apic_id < min && max - apic_id < KVM_IPI_CLUSTER_SIZE) {
508 ipi_bitmap <<= min - apic_id;
509 min = apic_id;
510 } else if (apic_id < min + KVM_IPI_CLUSTER_SIZE) {
511 max = apic_id < max ? max : apic_id;
512 } else {
513 ret = kvm_hypercall4(KVM_HC_SEND_IPI, (unsigned long)ipi_bitmap,
514 (unsigned long)(ipi_bitmap >> BITS_PER_LONG), min, icr);
515 WARN_ONCE(ret < 0, "kvm-guest: failed to send PV IPI: %ld",
516 ret);
517 min = max = apic_id;
518 ipi_bitmap = 0;
519 }
520 __set_bit(apic_id - min, (unsigned long *)&ipi_bitmap);
521 }
522
523 if (ipi_bitmap) {
524 ret = kvm_hypercall4(KVM_HC_SEND_IPI, (unsigned long)ipi_bitmap,
525 (unsigned long)(ipi_bitmap >> BITS_PER_LONG), min, icr);
526 WARN_ONCE(ret < 0, "kvm-guest: failed to send PV IPI: %ld",
527 ret);
528 }
529
530 local_irq_restore(flags);
531}
532
533static void kvm_send_ipi_mask(const struct cpumask *mask, int vector)
534{
535 __send_ipi_mask(mask, vector);
536}
537
538static void kvm_send_ipi_mask_allbutself(const struct cpumask *mask, int vector)
539{
540 unsigned int this_cpu = smp_processor_id();
541 struct cpumask *new_mask = this_cpu_cpumask_var_ptr(__pv_cpu_mask);
542 const struct cpumask *local_mask;
543
544 cpumask_copy(new_mask, mask);
545 cpumask_clear_cpu(this_cpu, new_mask);
546 local_mask = new_mask;
547 __send_ipi_mask(local_mask, vector);
548}
549
550/*
551 * Set the IPI entry points
552 */
553static void kvm_setup_pv_ipi(void)
554{
555 apic->send_IPI_mask = kvm_send_ipi_mask;
556 apic->send_IPI_mask_allbutself = kvm_send_ipi_mask_allbutself;
557 pr_info("setup PV IPIs\n");
558}
559
560static void kvm_smp_send_call_func_ipi(const struct cpumask *mask)
561{
562 int cpu;
563
564 native_send_call_func_ipi(mask);
565
566 /* Make sure other vCPUs get a chance to run if they need to. */
567 for_each_cpu(cpu, mask) {
568 if (vcpu_is_preempted(cpu)) {
569 kvm_hypercall1(KVM_HC_SCHED_YIELD, per_cpu(x86_cpu_to_apicid, cpu));
570 break;
571 }
572 }
573}
574
575static void kvm_flush_tlb_multi(const struct cpumask *cpumask,
576 const struct flush_tlb_info *info)
577{
578 u8 state;
579 int cpu;
580 struct kvm_steal_time *src;
581 struct cpumask *flushmask = this_cpu_cpumask_var_ptr(__pv_cpu_mask);
582
583 cpumask_copy(flushmask, cpumask);
584 /*
585 * We have to call flush only on online vCPUs. And
586 * queue flush_on_enter for pre-empted vCPUs
587 */
588 for_each_cpu(cpu, flushmask) {
589 /*
590 * The local vCPU is never preempted, so we do not explicitly
591 * skip check for local vCPU - it will never be cleared from
592 * flushmask.
593 */
594 src = &per_cpu(steal_time, cpu);
595 state = READ_ONCE(src->preempted);
596 if ((state & KVM_VCPU_PREEMPTED)) {
597 if (try_cmpxchg(&src->preempted, &state,
598 state | KVM_VCPU_FLUSH_TLB))
599 __cpumask_clear_cpu(cpu, flushmask);
600 }
601 }
602
603 native_flush_tlb_multi(flushmask, info);
604}
605
606static __init int kvm_alloc_cpumask(void)
607{
608 int cpu;
609
610 if (!kvm_para_available() || nopv)
611 return 0;
612
613 if (pv_tlb_flush_supported() || pv_ipi_supported())
614 for_each_possible_cpu(cpu) {
615 zalloc_cpumask_var_node(per_cpu_ptr(&__pv_cpu_mask, cpu),
616 GFP_KERNEL, cpu_to_node(cpu));
617 }
618
619 return 0;
620}
621arch_initcall(kvm_alloc_cpumask);
622
623static void __init kvm_smp_prepare_boot_cpu(void)
624{
625 /*
626 * Map the per-cpu variables as decrypted before kvm_guest_cpu_init()
627 * shares the guest physical address with the hypervisor.
628 */
629 sev_map_percpu_data();
630
631 kvm_guest_cpu_init();
632 native_smp_prepare_boot_cpu();
633 kvm_spinlock_init();
634}
635
636static int kvm_cpu_down_prepare(unsigned int cpu)
637{
638 unsigned long flags;
639
640 local_irq_save(flags);
641 kvm_guest_cpu_offline(false);
642 local_irq_restore(flags);
643 return 0;
644}
645
646#endif
647
648static int kvm_suspend(void)
649{
650 kvm_guest_cpu_offline(false);
651
652 return 0;
653}
654
655static void kvm_resume(void)
656{
657 kvm_cpu_online(raw_smp_processor_id());
658}
659
660static struct syscore_ops kvm_syscore_ops = {
661 .suspend = kvm_suspend,
662 .resume = kvm_resume,
663};
664
665static void kvm_pv_guest_cpu_reboot(void *unused)
666{
667 kvm_guest_cpu_offline(true);
668}
669
670static int kvm_pv_reboot_notify(struct notifier_block *nb,
671 unsigned long code, void *unused)
672{
673 if (code == SYS_RESTART)
674 on_each_cpu(kvm_pv_guest_cpu_reboot, NULL, 1);
675 return NOTIFY_DONE;
676}
677
678static struct notifier_block kvm_pv_reboot_nb = {
679 .notifier_call = kvm_pv_reboot_notify,
680};
681
682/*
683 * After a PV feature is registered, the host will keep writing to the
684 * registered memory location. If the guest happens to shutdown, this memory
685 * won't be valid. In cases like kexec, in which you install a new kernel, this
686 * means a random memory location will be kept being written.
687 */
688#ifdef CONFIG_KEXEC_CORE
689static void kvm_crash_shutdown(struct pt_regs *regs)
690{
691 kvm_guest_cpu_offline(true);
692 native_machine_crash_shutdown(regs);
693}
694#endif
695
696static void __init kvm_guest_init(void)
697{
698 int i;
699
700 paravirt_ops_setup();
701 register_reboot_notifier(&kvm_pv_reboot_nb);
702 for (i = 0; i < KVM_TASK_SLEEP_HASHSIZE; i++)
703 raw_spin_lock_init(&async_pf_sleepers[i].lock);
704
705 if (kvm_para_has_feature(KVM_FEATURE_STEAL_TIME)) {
706 has_steal_clock = 1;
707 static_call_update(pv_steal_clock, kvm_steal_clock);
708 }
709
710 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI))
711 apic_set_eoi_write(kvm_guest_apic_eoi_write);
712
713 if (kvm_para_has_feature(KVM_FEATURE_ASYNC_PF_INT) && kvmapf) {
714 static_branch_enable(&kvm_async_pf_enabled);
715 alloc_intr_gate(HYPERVISOR_CALLBACK_VECTOR, asm_sysvec_kvm_asyncpf_interrupt);
716 }
717
718#ifdef CONFIG_SMP
719 if (pv_tlb_flush_supported()) {
720 pv_ops.mmu.flush_tlb_multi = kvm_flush_tlb_multi;
721 pv_ops.mmu.tlb_remove_table = tlb_remove_table;
722 pr_info("KVM setup pv remote TLB flush\n");
723 }
724
725 smp_ops.smp_prepare_boot_cpu = kvm_smp_prepare_boot_cpu;
726 if (pv_sched_yield_supported()) {
727 smp_ops.send_call_func_ipi = kvm_smp_send_call_func_ipi;
728 pr_info("setup PV sched yield\n");
729 }
730 if (cpuhp_setup_state_nocalls(CPUHP_AP_ONLINE_DYN, "x86/kvm:online",
731 kvm_cpu_online, kvm_cpu_down_prepare) < 0)
732 pr_err("failed to install cpu hotplug callbacks\n");
733#else
734 sev_map_percpu_data();
735 kvm_guest_cpu_init();
736#endif
737
738#ifdef CONFIG_KEXEC_CORE
739 machine_ops.crash_shutdown = kvm_crash_shutdown;
740#endif
741
742 register_syscore_ops(&kvm_syscore_ops);
743
744 /*
745 * Hard lockup detection is enabled by default. Disable it, as guests
746 * can get false positives too easily, for example if the host is
747 * overcommitted.
748 */
749 hardlockup_detector_disable();
750}
751
752static noinline uint32_t __kvm_cpuid_base(void)
753{
754 if (boot_cpu_data.cpuid_level < 0)
755 return 0; /* So we don't blow up on old processors */
756
757 if (boot_cpu_has(X86_FEATURE_HYPERVISOR))
758 return hypervisor_cpuid_base("KVMKVMKVM\0\0\0", 0);
759
760 return 0;
761}
762
763static inline uint32_t kvm_cpuid_base(void)
764{
765 static int kvm_cpuid_base = -1;
766
767 if (kvm_cpuid_base == -1)
768 kvm_cpuid_base = __kvm_cpuid_base();
769
770 return kvm_cpuid_base;
771}
772
773bool kvm_para_available(void)
774{
775 return kvm_cpuid_base() != 0;
776}
777EXPORT_SYMBOL_GPL(kvm_para_available);
778
779unsigned int kvm_arch_para_features(void)
780{
781 return cpuid_eax(kvm_cpuid_base() | KVM_CPUID_FEATURES);
782}
783
784unsigned int kvm_arch_para_hints(void)
785{
786 return cpuid_edx(kvm_cpuid_base() | KVM_CPUID_FEATURES);
787}
788EXPORT_SYMBOL_GPL(kvm_arch_para_hints);
789
790static uint32_t __init kvm_detect(void)
791{
792 return kvm_cpuid_base();
793}
794
795static void __init kvm_apic_init(void)
796{
797#ifdef CONFIG_SMP
798 if (pv_ipi_supported())
799 kvm_setup_pv_ipi();
800#endif
801}
802
803static bool __init kvm_msi_ext_dest_id(void)
804{
805 return kvm_para_has_feature(KVM_FEATURE_MSI_EXT_DEST_ID);
806}
807
808static void __init kvm_init_platform(void)
809{
810 kvmclock_init();
811 x86_platform.apic_post_init = kvm_apic_init;
812}
813
814#if defined(CONFIG_AMD_MEM_ENCRYPT)
815static void kvm_sev_es_hcall_prepare(struct ghcb *ghcb, struct pt_regs *regs)
816{
817 /* RAX and CPL are already in the GHCB */
818 ghcb_set_rbx(ghcb, regs->bx);
819 ghcb_set_rcx(ghcb, regs->cx);
820 ghcb_set_rdx(ghcb, regs->dx);
821 ghcb_set_rsi(ghcb, regs->si);
822}
823
824static bool kvm_sev_es_hcall_finish(struct ghcb *ghcb, struct pt_regs *regs)
825{
826 /* No checking of the return state needed */
827 return true;
828}
829#endif
830
831const __initconst struct hypervisor_x86 x86_hyper_kvm = {
832 .name = "KVM",
833 .detect = kvm_detect,
834 .type = X86_HYPER_KVM,
835 .init.guest_late_init = kvm_guest_init,
836 .init.x2apic_available = kvm_para_available,
837 .init.msi_ext_dest_id = kvm_msi_ext_dest_id,
838 .init.init_platform = kvm_init_platform,
839#if defined(CONFIG_AMD_MEM_ENCRYPT)
840 .runtime.sev_es_hcall_prepare = kvm_sev_es_hcall_prepare,
841 .runtime.sev_es_hcall_finish = kvm_sev_es_hcall_finish,
842#endif
843};
844
845static __init int activate_jump_labels(void)
846{
847 if (has_steal_clock) {
848 static_key_slow_inc(¶virt_steal_enabled);
849 if (steal_acc)
850 static_key_slow_inc(¶virt_steal_rq_enabled);
851 }
852
853 return 0;
854}
855arch_initcall(activate_jump_labels);
856
857#ifdef CONFIG_PARAVIRT_SPINLOCKS
858
859/* Kick a cpu by its apicid. Used to wake up a halted vcpu */
860static void kvm_kick_cpu(int cpu)
861{
862 int apicid;
863 unsigned long flags = 0;
864
865 apicid = per_cpu(x86_cpu_to_apicid, cpu);
866 kvm_hypercall2(KVM_HC_KICK_CPU, flags, apicid);
867}
868
869#include <asm/qspinlock.h>
870
871static void kvm_wait(u8 *ptr, u8 val)
872{
873 if (in_nmi())
874 return;
875
876 /*
877 * halt until it's our turn and kicked. Note that we do safe halt
878 * for irq enabled case to avoid hang when lock info is overwritten
879 * in irq spinlock slowpath and no spurious interrupt occur to save us.
880 */
881 if (irqs_disabled()) {
882 if (READ_ONCE(*ptr) == val)
883 halt();
884 } else {
885 local_irq_disable();
886
887 if (READ_ONCE(*ptr) == val)
888 safe_halt();
889
890 local_irq_enable();
891 }
892}
893
894#ifdef CONFIG_X86_32
895__visible bool __kvm_vcpu_is_preempted(long cpu)
896{
897 struct kvm_steal_time *src = &per_cpu(steal_time, cpu);
898
899 return !!(src->preempted & KVM_VCPU_PREEMPTED);
900}
901PV_CALLEE_SAVE_REGS_THUNK(__kvm_vcpu_is_preempted);
902
903#else
904
905#include <asm/asm-offsets.h>
906
907extern bool __raw_callee_save___kvm_vcpu_is_preempted(long);
908
909/*
910 * Hand-optimize version for x86-64 to avoid 8 64-bit register saving and
911 * restoring to/from the stack.
912 */
913asm(
914".pushsection .text;"
915".global __raw_callee_save___kvm_vcpu_is_preempted;"
916".type __raw_callee_save___kvm_vcpu_is_preempted, @function;"
917"__raw_callee_save___kvm_vcpu_is_preempted:"
918"movq __per_cpu_offset(,%rdi,8), %rax;"
919"cmpb $0, " __stringify(KVM_STEAL_TIME_preempted) "+steal_time(%rax);"
920"setne %al;"
921"ret;"
922".size __raw_callee_save___kvm_vcpu_is_preempted, .-__raw_callee_save___kvm_vcpu_is_preempted;"
923".popsection");
924
925#endif
926
927/*
928 * Setup pv_lock_ops to exploit KVM_FEATURE_PV_UNHALT if present.
929 */
930void __init kvm_spinlock_init(void)
931{
932 /*
933 * In case host doesn't support KVM_FEATURE_PV_UNHALT there is still an
934 * advantage of keeping virt_spin_lock_key enabled: virt_spin_lock() is
935 * preferred over native qspinlock when vCPU is preempted.
936 */
937 if (!kvm_para_has_feature(KVM_FEATURE_PV_UNHALT)) {
938 pr_info("PV spinlocks disabled, no host support\n");
939 return;
940 }
941
942 /*
943 * Disable PV spinlocks and use native qspinlock when dedicated pCPUs
944 * are available.
945 */
946 if (kvm_para_has_hint(KVM_HINTS_REALTIME)) {
947 pr_info("PV spinlocks disabled with KVM_HINTS_REALTIME hints\n");
948 goto out;
949 }
950
951 if (num_possible_cpus() == 1) {
952 pr_info("PV spinlocks disabled, single CPU\n");
953 goto out;
954 }
955
956 if (nopvspin) {
957 pr_info("PV spinlocks disabled, forced by \"nopvspin\" parameter\n");
958 goto out;
959 }
960
961 pr_info("PV spinlocks enabled\n");
962
963 __pv_init_lock_hash();
964 pv_ops.lock.queued_spin_lock_slowpath = __pv_queued_spin_lock_slowpath;
965 pv_ops.lock.queued_spin_unlock =
966 PV_CALLEE_SAVE(__pv_queued_spin_unlock);
967 pv_ops.lock.wait = kvm_wait;
968 pv_ops.lock.kick = kvm_kick_cpu;
969
970 if (kvm_para_has_feature(KVM_FEATURE_STEAL_TIME)) {
971 pv_ops.lock.vcpu_is_preempted =
972 PV_CALLEE_SAVE(__kvm_vcpu_is_preempted);
973 }
974 /*
975 * When PV spinlock is enabled which is preferred over
976 * virt_spin_lock(), virt_spin_lock_key's value is meaningless.
977 * Just disable it anyway.
978 */
979out:
980 static_branch_disable(&virt_spin_lock_key);
981}
982
983#endif /* CONFIG_PARAVIRT_SPINLOCKS */
984
985#ifdef CONFIG_ARCH_CPUIDLE_HALTPOLL
986
987static void kvm_disable_host_haltpoll(void *i)
988{
989 wrmsrl(MSR_KVM_POLL_CONTROL, 0);
990}
991
992static void kvm_enable_host_haltpoll(void *i)
993{
994 wrmsrl(MSR_KVM_POLL_CONTROL, 1);
995}
996
997void arch_haltpoll_enable(unsigned int cpu)
998{
999 if (!kvm_para_has_feature(KVM_FEATURE_POLL_CONTROL)) {
1000 pr_err_once("host does not support poll control\n");
1001 pr_err_once("host upgrade recommended\n");
1002 return;
1003 }
1004
1005 /* Enable guest halt poll disables host halt poll */
1006 smp_call_function_single(cpu, kvm_disable_host_haltpoll, NULL, 1);
1007}
1008EXPORT_SYMBOL_GPL(arch_haltpoll_enable);
1009
1010void arch_haltpoll_disable(unsigned int cpu)
1011{
1012 if (!kvm_para_has_feature(KVM_FEATURE_POLL_CONTROL))
1013 return;
1014
1015 /* Disable guest halt poll enables host halt poll */
1016 smp_call_function_single(cpu, kvm_enable_host_haltpoll, NULL, 1);
1017}
1018EXPORT_SYMBOL_GPL(arch_haltpoll_disable);
1019#endif
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * KVM paravirt_ops implementation
4 *
5 * Copyright (C) 2007, Red Hat, Inc., Ingo Molnar <mingo@redhat.com>
6 * Copyright IBM Corporation, 2007
7 * Authors: Anthony Liguori <aliguori@us.ibm.com>
8 */
9
10#define pr_fmt(fmt) "kvm-guest: " fmt
11
12#include <linux/context_tracking.h>
13#include <linux/init.h>
14#include <linux/irq.h>
15#include <linux/kernel.h>
16#include <linux/kvm_para.h>
17#include <linux/cpu.h>
18#include <linux/mm.h>
19#include <linux/highmem.h>
20#include <linux/hardirq.h>
21#include <linux/notifier.h>
22#include <linux/reboot.h>
23#include <linux/hash.h>
24#include <linux/sched.h>
25#include <linux/slab.h>
26#include <linux/kprobes.h>
27#include <linux/nmi.h>
28#include <linux/swait.h>
29#include <asm/timer.h>
30#include <asm/cpu.h>
31#include <asm/traps.h>
32#include <asm/desc.h>
33#include <asm/tlbflush.h>
34#include <asm/apic.h>
35#include <asm/apicdef.h>
36#include <asm/hypervisor.h>
37#include <asm/tlb.h>
38#include <asm/cpuidle_haltpoll.h>
39
40DEFINE_STATIC_KEY_FALSE(kvm_async_pf_enabled);
41
42static int kvmapf = 1;
43
44static int __init parse_no_kvmapf(char *arg)
45{
46 kvmapf = 0;
47 return 0;
48}
49
50early_param("no-kvmapf", parse_no_kvmapf);
51
52static int steal_acc = 1;
53static int __init parse_no_stealacc(char *arg)
54{
55 steal_acc = 0;
56 return 0;
57}
58
59early_param("no-steal-acc", parse_no_stealacc);
60
61static DEFINE_PER_CPU_DECRYPTED(struct kvm_vcpu_pv_apf_data, apf_reason) __aligned(64);
62DEFINE_PER_CPU_DECRYPTED(struct kvm_steal_time, steal_time) __aligned(64) __visible;
63static int has_steal_clock = 0;
64
65/*
66 * No need for any "IO delay" on KVM
67 */
68static void kvm_io_delay(void)
69{
70}
71
72#define KVM_TASK_SLEEP_HASHBITS 8
73#define KVM_TASK_SLEEP_HASHSIZE (1<<KVM_TASK_SLEEP_HASHBITS)
74
75struct kvm_task_sleep_node {
76 struct hlist_node link;
77 struct swait_queue_head wq;
78 u32 token;
79 int cpu;
80};
81
82static struct kvm_task_sleep_head {
83 raw_spinlock_t lock;
84 struct hlist_head list;
85} async_pf_sleepers[KVM_TASK_SLEEP_HASHSIZE];
86
87static struct kvm_task_sleep_node *_find_apf_task(struct kvm_task_sleep_head *b,
88 u32 token)
89{
90 struct hlist_node *p;
91
92 hlist_for_each(p, &b->list) {
93 struct kvm_task_sleep_node *n =
94 hlist_entry(p, typeof(*n), link);
95 if (n->token == token)
96 return n;
97 }
98
99 return NULL;
100}
101
102static bool kvm_async_pf_queue_task(u32 token, struct kvm_task_sleep_node *n)
103{
104 u32 key = hash_32(token, KVM_TASK_SLEEP_HASHBITS);
105 struct kvm_task_sleep_head *b = &async_pf_sleepers[key];
106 struct kvm_task_sleep_node *e;
107
108 raw_spin_lock(&b->lock);
109 e = _find_apf_task(b, token);
110 if (e) {
111 /* dummy entry exist -> wake up was delivered ahead of PF */
112 hlist_del(&e->link);
113 raw_spin_unlock(&b->lock);
114 kfree(e);
115 return false;
116 }
117
118 n->token = token;
119 n->cpu = smp_processor_id();
120 init_swait_queue_head(&n->wq);
121 hlist_add_head(&n->link, &b->list);
122 raw_spin_unlock(&b->lock);
123 return true;
124}
125
126/*
127 * kvm_async_pf_task_wait_schedule - Wait for pagefault to be handled
128 * @token: Token to identify the sleep node entry
129 *
130 * Invoked from the async pagefault handling code or from the VM exit page
131 * fault handler. In both cases RCU is watching.
132 */
133void kvm_async_pf_task_wait_schedule(u32 token)
134{
135 struct kvm_task_sleep_node n;
136 DECLARE_SWAITQUEUE(wait);
137
138 lockdep_assert_irqs_disabled();
139
140 if (!kvm_async_pf_queue_task(token, &n))
141 return;
142
143 for (;;) {
144 prepare_to_swait_exclusive(&n.wq, &wait, TASK_UNINTERRUPTIBLE);
145 if (hlist_unhashed(&n.link))
146 break;
147
148 local_irq_enable();
149 schedule();
150 local_irq_disable();
151 }
152 finish_swait(&n.wq, &wait);
153}
154EXPORT_SYMBOL_GPL(kvm_async_pf_task_wait_schedule);
155
156static void apf_task_wake_one(struct kvm_task_sleep_node *n)
157{
158 hlist_del_init(&n->link);
159 if (swq_has_sleeper(&n->wq))
160 swake_up_one(&n->wq);
161}
162
163static void apf_task_wake_all(void)
164{
165 int i;
166
167 for (i = 0; i < KVM_TASK_SLEEP_HASHSIZE; i++) {
168 struct kvm_task_sleep_head *b = &async_pf_sleepers[i];
169 struct kvm_task_sleep_node *n;
170 struct hlist_node *p, *next;
171
172 raw_spin_lock(&b->lock);
173 hlist_for_each_safe(p, next, &b->list) {
174 n = hlist_entry(p, typeof(*n), link);
175 if (n->cpu == smp_processor_id())
176 apf_task_wake_one(n);
177 }
178 raw_spin_unlock(&b->lock);
179 }
180}
181
182void kvm_async_pf_task_wake(u32 token)
183{
184 u32 key = hash_32(token, KVM_TASK_SLEEP_HASHBITS);
185 struct kvm_task_sleep_head *b = &async_pf_sleepers[key];
186 struct kvm_task_sleep_node *n;
187
188 if (token == ~0) {
189 apf_task_wake_all();
190 return;
191 }
192
193again:
194 raw_spin_lock(&b->lock);
195 n = _find_apf_task(b, token);
196 if (!n) {
197 /*
198 * async PF was not yet handled.
199 * Add dummy entry for the token.
200 */
201 n = kzalloc(sizeof(*n), GFP_ATOMIC);
202 if (!n) {
203 /*
204 * Allocation failed! Busy wait while other cpu
205 * handles async PF.
206 */
207 raw_spin_unlock(&b->lock);
208 cpu_relax();
209 goto again;
210 }
211 n->token = token;
212 n->cpu = smp_processor_id();
213 init_swait_queue_head(&n->wq);
214 hlist_add_head(&n->link, &b->list);
215 } else {
216 apf_task_wake_one(n);
217 }
218 raw_spin_unlock(&b->lock);
219 return;
220}
221EXPORT_SYMBOL_GPL(kvm_async_pf_task_wake);
222
223noinstr u32 kvm_read_and_reset_apf_flags(void)
224{
225 u32 flags = 0;
226
227 if (__this_cpu_read(apf_reason.enabled)) {
228 flags = __this_cpu_read(apf_reason.flags);
229 __this_cpu_write(apf_reason.flags, 0);
230 }
231
232 return flags;
233}
234EXPORT_SYMBOL_GPL(kvm_read_and_reset_apf_flags);
235
236noinstr bool __kvm_handle_async_pf(struct pt_regs *regs, u32 token)
237{
238 u32 flags = kvm_read_and_reset_apf_flags();
239 irqentry_state_t state;
240
241 if (!flags)
242 return false;
243
244 state = irqentry_enter(regs);
245 instrumentation_begin();
246
247 /*
248 * If the host managed to inject an async #PF into an interrupt
249 * disabled region, then die hard as this is not going to end well
250 * and the host side is seriously broken.
251 */
252 if (unlikely(!(regs->flags & X86_EFLAGS_IF)))
253 panic("Host injected async #PF in interrupt disabled region\n");
254
255 if (flags & KVM_PV_REASON_PAGE_NOT_PRESENT) {
256 if (unlikely(!(user_mode(regs))))
257 panic("Host injected async #PF in kernel mode\n");
258 /* Page is swapped out by the host. */
259 kvm_async_pf_task_wait_schedule(token);
260 } else {
261 WARN_ONCE(1, "Unexpected async PF flags: %x\n", flags);
262 }
263
264 instrumentation_end();
265 irqentry_exit(regs, state);
266 return true;
267}
268
269DEFINE_IDTENTRY_SYSVEC(sysvec_kvm_asyncpf_interrupt)
270{
271 struct pt_regs *old_regs = set_irq_regs(regs);
272 u32 token;
273
274 ack_APIC_irq();
275
276 inc_irq_stat(irq_hv_callback_count);
277
278 if (__this_cpu_read(apf_reason.enabled)) {
279 token = __this_cpu_read(apf_reason.token);
280 kvm_async_pf_task_wake(token);
281 __this_cpu_write(apf_reason.token, 0);
282 wrmsrl(MSR_KVM_ASYNC_PF_ACK, 1);
283 }
284
285 set_irq_regs(old_regs);
286}
287
288static void __init paravirt_ops_setup(void)
289{
290 pv_info.name = "KVM";
291
292 if (kvm_para_has_feature(KVM_FEATURE_NOP_IO_DELAY))
293 pv_ops.cpu.io_delay = kvm_io_delay;
294
295#ifdef CONFIG_X86_IO_APIC
296 no_timer_check = 1;
297#endif
298}
299
300static void kvm_register_steal_time(void)
301{
302 int cpu = smp_processor_id();
303 struct kvm_steal_time *st = &per_cpu(steal_time, cpu);
304
305 if (!has_steal_clock)
306 return;
307
308 wrmsrl(MSR_KVM_STEAL_TIME, (slow_virt_to_phys(st) | KVM_MSR_ENABLED));
309 pr_info("stealtime: cpu %d, msr %llx\n", cpu,
310 (unsigned long long) slow_virt_to_phys(st));
311}
312
313static DEFINE_PER_CPU_DECRYPTED(unsigned long, kvm_apic_eoi) = KVM_PV_EOI_DISABLED;
314
315static notrace void kvm_guest_apic_eoi_write(u32 reg, u32 val)
316{
317 /**
318 * This relies on __test_and_clear_bit to modify the memory
319 * in a way that is atomic with respect to the local CPU.
320 * The hypervisor only accesses this memory from the local CPU so
321 * there's no need for lock or memory barriers.
322 * An optimization barrier is implied in apic write.
323 */
324 if (__test_and_clear_bit(KVM_PV_EOI_BIT, this_cpu_ptr(&kvm_apic_eoi)))
325 return;
326 apic->native_eoi_write(APIC_EOI, APIC_EOI_ACK);
327}
328
329static void kvm_guest_cpu_init(void)
330{
331 if (kvm_para_has_feature(KVM_FEATURE_ASYNC_PF_INT) && kvmapf) {
332 u64 pa = slow_virt_to_phys(this_cpu_ptr(&apf_reason));
333
334 WARN_ON_ONCE(!static_branch_likely(&kvm_async_pf_enabled));
335
336 pa = slow_virt_to_phys(this_cpu_ptr(&apf_reason));
337 pa |= KVM_ASYNC_PF_ENABLED | KVM_ASYNC_PF_DELIVERY_AS_INT;
338
339 if (kvm_para_has_feature(KVM_FEATURE_ASYNC_PF_VMEXIT))
340 pa |= KVM_ASYNC_PF_DELIVERY_AS_PF_VMEXIT;
341
342 wrmsrl(MSR_KVM_ASYNC_PF_INT, HYPERVISOR_CALLBACK_VECTOR);
343
344 wrmsrl(MSR_KVM_ASYNC_PF_EN, pa);
345 __this_cpu_write(apf_reason.enabled, 1);
346 pr_info("KVM setup async PF for cpu %d\n", smp_processor_id());
347 }
348
349 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI)) {
350 unsigned long pa;
351
352 /* Size alignment is implied but just to make it explicit. */
353 BUILD_BUG_ON(__alignof__(kvm_apic_eoi) < 4);
354 __this_cpu_write(kvm_apic_eoi, 0);
355 pa = slow_virt_to_phys(this_cpu_ptr(&kvm_apic_eoi))
356 | KVM_MSR_ENABLED;
357 wrmsrl(MSR_KVM_PV_EOI_EN, pa);
358 }
359
360 if (has_steal_clock)
361 kvm_register_steal_time();
362}
363
364static void kvm_pv_disable_apf(void)
365{
366 if (!__this_cpu_read(apf_reason.enabled))
367 return;
368
369 wrmsrl(MSR_KVM_ASYNC_PF_EN, 0);
370 __this_cpu_write(apf_reason.enabled, 0);
371
372 pr_info("Unregister pv shared memory for cpu %d\n", smp_processor_id());
373}
374
375static void kvm_pv_guest_cpu_reboot(void *unused)
376{
377 /*
378 * We disable PV EOI before we load a new kernel by kexec,
379 * since MSR_KVM_PV_EOI_EN stores a pointer into old kernel's memory.
380 * New kernel can re-enable when it boots.
381 */
382 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI))
383 wrmsrl(MSR_KVM_PV_EOI_EN, 0);
384 kvm_pv_disable_apf();
385 kvm_disable_steal_time();
386}
387
388static int kvm_pv_reboot_notify(struct notifier_block *nb,
389 unsigned long code, void *unused)
390{
391 if (code == SYS_RESTART)
392 on_each_cpu(kvm_pv_guest_cpu_reboot, NULL, 1);
393 return NOTIFY_DONE;
394}
395
396static struct notifier_block kvm_pv_reboot_nb = {
397 .notifier_call = kvm_pv_reboot_notify,
398};
399
400static u64 kvm_steal_clock(int cpu)
401{
402 u64 steal;
403 struct kvm_steal_time *src;
404 int version;
405
406 src = &per_cpu(steal_time, cpu);
407 do {
408 version = src->version;
409 virt_rmb();
410 steal = src->steal;
411 virt_rmb();
412 } while ((version & 1) || (version != src->version));
413
414 return steal;
415}
416
417void kvm_disable_steal_time(void)
418{
419 if (!has_steal_clock)
420 return;
421
422 wrmsr(MSR_KVM_STEAL_TIME, 0, 0);
423}
424
425static inline void __set_percpu_decrypted(void *ptr, unsigned long size)
426{
427 early_set_memory_decrypted((unsigned long) ptr, size);
428}
429
430/*
431 * Iterate through all possible CPUs and map the memory region pointed
432 * by apf_reason, steal_time and kvm_apic_eoi as decrypted at once.
433 *
434 * Note: we iterate through all possible CPUs to ensure that CPUs
435 * hotplugged will have their per-cpu variable already mapped as
436 * decrypted.
437 */
438static void __init sev_map_percpu_data(void)
439{
440 int cpu;
441
442 if (!sev_active())
443 return;
444
445 for_each_possible_cpu(cpu) {
446 __set_percpu_decrypted(&per_cpu(apf_reason, cpu), sizeof(apf_reason));
447 __set_percpu_decrypted(&per_cpu(steal_time, cpu), sizeof(steal_time));
448 __set_percpu_decrypted(&per_cpu(kvm_apic_eoi, cpu), sizeof(kvm_apic_eoi));
449 }
450}
451
452static bool pv_tlb_flush_supported(void)
453{
454 return (kvm_para_has_feature(KVM_FEATURE_PV_TLB_FLUSH) &&
455 !kvm_para_has_hint(KVM_HINTS_REALTIME) &&
456 kvm_para_has_feature(KVM_FEATURE_STEAL_TIME));
457}
458
459static DEFINE_PER_CPU(cpumask_var_t, __pv_cpu_mask);
460
461#ifdef CONFIG_SMP
462
463static bool pv_ipi_supported(void)
464{
465 return kvm_para_has_feature(KVM_FEATURE_PV_SEND_IPI);
466}
467
468static bool pv_sched_yield_supported(void)
469{
470 return (kvm_para_has_feature(KVM_FEATURE_PV_SCHED_YIELD) &&
471 !kvm_para_has_hint(KVM_HINTS_REALTIME) &&
472 kvm_para_has_feature(KVM_FEATURE_STEAL_TIME));
473}
474
475#define KVM_IPI_CLUSTER_SIZE (2 * BITS_PER_LONG)
476
477static void __send_ipi_mask(const struct cpumask *mask, int vector)
478{
479 unsigned long flags;
480 int cpu, apic_id, icr;
481 int min = 0, max = 0;
482#ifdef CONFIG_X86_64
483 __uint128_t ipi_bitmap = 0;
484#else
485 u64 ipi_bitmap = 0;
486#endif
487 long ret;
488
489 if (cpumask_empty(mask))
490 return;
491
492 local_irq_save(flags);
493
494 switch (vector) {
495 default:
496 icr = APIC_DM_FIXED | vector;
497 break;
498 case NMI_VECTOR:
499 icr = APIC_DM_NMI;
500 break;
501 }
502
503 for_each_cpu(cpu, mask) {
504 apic_id = per_cpu(x86_cpu_to_apicid, cpu);
505 if (!ipi_bitmap) {
506 min = max = apic_id;
507 } else if (apic_id < min && max - apic_id < KVM_IPI_CLUSTER_SIZE) {
508 ipi_bitmap <<= min - apic_id;
509 min = apic_id;
510 } else if (apic_id < min + KVM_IPI_CLUSTER_SIZE) {
511 max = apic_id < max ? max : apic_id;
512 } else {
513 ret = kvm_hypercall4(KVM_HC_SEND_IPI, (unsigned long)ipi_bitmap,
514 (unsigned long)(ipi_bitmap >> BITS_PER_LONG), min, icr);
515 WARN_ONCE(ret < 0, "kvm-guest: failed to send PV IPI: %ld",
516 ret);
517 min = max = apic_id;
518 ipi_bitmap = 0;
519 }
520 __set_bit(apic_id - min, (unsigned long *)&ipi_bitmap);
521 }
522
523 if (ipi_bitmap) {
524 ret = kvm_hypercall4(KVM_HC_SEND_IPI, (unsigned long)ipi_bitmap,
525 (unsigned long)(ipi_bitmap >> BITS_PER_LONG), min, icr);
526 WARN_ONCE(ret < 0, "kvm-guest: failed to send PV IPI: %ld",
527 ret);
528 }
529
530 local_irq_restore(flags);
531}
532
533static void kvm_send_ipi_mask(const struct cpumask *mask, int vector)
534{
535 __send_ipi_mask(mask, vector);
536}
537
538static void kvm_send_ipi_mask_allbutself(const struct cpumask *mask, int vector)
539{
540 unsigned int this_cpu = smp_processor_id();
541 struct cpumask *new_mask = this_cpu_cpumask_var_ptr(__pv_cpu_mask);
542 const struct cpumask *local_mask;
543
544 cpumask_copy(new_mask, mask);
545 cpumask_clear_cpu(this_cpu, new_mask);
546 local_mask = new_mask;
547 __send_ipi_mask(local_mask, vector);
548}
549
550/*
551 * Set the IPI entry points
552 */
553static void kvm_setup_pv_ipi(void)
554{
555 apic->send_IPI_mask = kvm_send_ipi_mask;
556 apic->send_IPI_mask_allbutself = kvm_send_ipi_mask_allbutself;
557 pr_info("setup PV IPIs\n");
558}
559
560static void kvm_smp_send_call_func_ipi(const struct cpumask *mask)
561{
562 int cpu;
563
564 native_send_call_func_ipi(mask);
565
566 /* Make sure other vCPUs get a chance to run if they need to. */
567 for_each_cpu(cpu, mask) {
568 if (vcpu_is_preempted(cpu)) {
569 kvm_hypercall1(KVM_HC_SCHED_YIELD, per_cpu(x86_cpu_to_apicid, cpu));
570 break;
571 }
572 }
573}
574
575static void __init kvm_smp_prepare_boot_cpu(void)
576{
577 /*
578 * Map the per-cpu variables as decrypted before kvm_guest_cpu_init()
579 * shares the guest physical address with the hypervisor.
580 */
581 sev_map_percpu_data();
582
583 kvm_guest_cpu_init();
584 native_smp_prepare_boot_cpu();
585 kvm_spinlock_init();
586}
587
588static void kvm_guest_cpu_offline(void)
589{
590 kvm_disable_steal_time();
591 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI))
592 wrmsrl(MSR_KVM_PV_EOI_EN, 0);
593 kvm_pv_disable_apf();
594 apf_task_wake_all();
595}
596
597static int kvm_cpu_online(unsigned int cpu)
598{
599 local_irq_disable();
600 kvm_guest_cpu_init();
601 local_irq_enable();
602 return 0;
603}
604
605static int kvm_cpu_down_prepare(unsigned int cpu)
606{
607 local_irq_disable();
608 kvm_guest_cpu_offline();
609 local_irq_enable();
610 return 0;
611}
612#endif
613
614static void kvm_flush_tlb_others(const struct cpumask *cpumask,
615 const struct flush_tlb_info *info)
616{
617 u8 state;
618 int cpu;
619 struct kvm_steal_time *src;
620 struct cpumask *flushmask = this_cpu_cpumask_var_ptr(__pv_cpu_mask);
621
622 cpumask_copy(flushmask, cpumask);
623 /*
624 * We have to call flush only on online vCPUs. And
625 * queue flush_on_enter for pre-empted vCPUs
626 */
627 for_each_cpu(cpu, flushmask) {
628 src = &per_cpu(steal_time, cpu);
629 state = READ_ONCE(src->preempted);
630 if ((state & KVM_VCPU_PREEMPTED)) {
631 if (try_cmpxchg(&src->preempted, &state,
632 state | KVM_VCPU_FLUSH_TLB))
633 __cpumask_clear_cpu(cpu, flushmask);
634 }
635 }
636
637 native_flush_tlb_others(flushmask, info);
638}
639
640static void __init kvm_guest_init(void)
641{
642 int i;
643
644 paravirt_ops_setup();
645 register_reboot_notifier(&kvm_pv_reboot_nb);
646 for (i = 0; i < KVM_TASK_SLEEP_HASHSIZE; i++)
647 raw_spin_lock_init(&async_pf_sleepers[i].lock);
648
649 if (kvm_para_has_feature(KVM_FEATURE_STEAL_TIME)) {
650 has_steal_clock = 1;
651 pv_ops.time.steal_clock = kvm_steal_clock;
652 }
653
654 if (pv_tlb_flush_supported()) {
655 pv_ops.mmu.flush_tlb_others = kvm_flush_tlb_others;
656 pv_ops.mmu.tlb_remove_table = tlb_remove_table;
657 pr_info("KVM setup pv remote TLB flush\n");
658 }
659
660 if (kvm_para_has_feature(KVM_FEATURE_PV_EOI))
661 apic_set_eoi_write(kvm_guest_apic_eoi_write);
662
663 if (kvm_para_has_feature(KVM_FEATURE_ASYNC_PF_INT) && kvmapf) {
664 static_branch_enable(&kvm_async_pf_enabled);
665 alloc_intr_gate(HYPERVISOR_CALLBACK_VECTOR, asm_sysvec_kvm_asyncpf_interrupt);
666 }
667
668#ifdef CONFIG_SMP
669 smp_ops.smp_prepare_boot_cpu = kvm_smp_prepare_boot_cpu;
670 if (pv_sched_yield_supported()) {
671 smp_ops.send_call_func_ipi = kvm_smp_send_call_func_ipi;
672 pr_info("setup PV sched yield\n");
673 }
674 if (cpuhp_setup_state_nocalls(CPUHP_AP_ONLINE_DYN, "x86/kvm:online",
675 kvm_cpu_online, kvm_cpu_down_prepare) < 0)
676 pr_err("failed to install cpu hotplug callbacks\n");
677#else
678 sev_map_percpu_data();
679 kvm_guest_cpu_init();
680#endif
681
682 /*
683 * Hard lockup detection is enabled by default. Disable it, as guests
684 * can get false positives too easily, for example if the host is
685 * overcommitted.
686 */
687 hardlockup_detector_disable();
688}
689
690static noinline uint32_t __kvm_cpuid_base(void)
691{
692 if (boot_cpu_data.cpuid_level < 0)
693 return 0; /* So we don't blow up on old processors */
694
695 if (boot_cpu_has(X86_FEATURE_HYPERVISOR))
696 return hypervisor_cpuid_base("KVMKVMKVM\0\0\0", 0);
697
698 return 0;
699}
700
701static inline uint32_t kvm_cpuid_base(void)
702{
703 static int kvm_cpuid_base = -1;
704
705 if (kvm_cpuid_base == -1)
706 kvm_cpuid_base = __kvm_cpuid_base();
707
708 return kvm_cpuid_base;
709}
710
711bool kvm_para_available(void)
712{
713 return kvm_cpuid_base() != 0;
714}
715EXPORT_SYMBOL_GPL(kvm_para_available);
716
717unsigned int kvm_arch_para_features(void)
718{
719 return cpuid_eax(kvm_cpuid_base() | KVM_CPUID_FEATURES);
720}
721
722unsigned int kvm_arch_para_hints(void)
723{
724 return cpuid_edx(kvm_cpuid_base() | KVM_CPUID_FEATURES);
725}
726EXPORT_SYMBOL_GPL(kvm_arch_para_hints);
727
728static uint32_t __init kvm_detect(void)
729{
730 return kvm_cpuid_base();
731}
732
733static void __init kvm_apic_init(void)
734{
735#if defined(CONFIG_SMP)
736 if (pv_ipi_supported())
737 kvm_setup_pv_ipi();
738#endif
739}
740
741static void __init kvm_init_platform(void)
742{
743 kvmclock_init();
744 x86_platform.apic_post_init = kvm_apic_init;
745}
746
747const __initconst struct hypervisor_x86 x86_hyper_kvm = {
748 .name = "KVM",
749 .detect = kvm_detect,
750 .type = X86_HYPER_KVM,
751 .init.guest_late_init = kvm_guest_init,
752 .init.x2apic_available = kvm_para_available,
753 .init.init_platform = kvm_init_platform,
754};
755
756static __init int activate_jump_labels(void)
757{
758 if (has_steal_clock) {
759 static_key_slow_inc(¶virt_steal_enabled);
760 if (steal_acc)
761 static_key_slow_inc(¶virt_steal_rq_enabled);
762 }
763
764 return 0;
765}
766arch_initcall(activate_jump_labels);
767
768static __init int kvm_alloc_cpumask(void)
769{
770 int cpu;
771 bool alloc = false;
772
773 if (!kvm_para_available() || nopv)
774 return 0;
775
776 if (pv_tlb_flush_supported())
777 alloc = true;
778
779#if defined(CONFIG_SMP)
780 if (pv_ipi_supported())
781 alloc = true;
782#endif
783
784 if (alloc)
785 for_each_possible_cpu(cpu) {
786 zalloc_cpumask_var_node(per_cpu_ptr(&__pv_cpu_mask, cpu),
787 GFP_KERNEL, cpu_to_node(cpu));
788 }
789
790 return 0;
791}
792arch_initcall(kvm_alloc_cpumask);
793
794#ifdef CONFIG_PARAVIRT_SPINLOCKS
795
796/* Kick a cpu by its apicid. Used to wake up a halted vcpu */
797static void kvm_kick_cpu(int cpu)
798{
799 int apicid;
800 unsigned long flags = 0;
801
802 apicid = per_cpu(x86_cpu_to_apicid, cpu);
803 kvm_hypercall2(KVM_HC_KICK_CPU, flags, apicid);
804}
805
806#include <asm/qspinlock.h>
807
808static void kvm_wait(u8 *ptr, u8 val)
809{
810 unsigned long flags;
811
812 if (in_nmi())
813 return;
814
815 local_irq_save(flags);
816
817 if (READ_ONCE(*ptr) != val)
818 goto out;
819
820 /*
821 * halt until it's our turn and kicked. Note that we do safe halt
822 * for irq enabled case to avoid hang when lock info is overwritten
823 * in irq spinlock slowpath and no spurious interrupt occur to save us.
824 */
825 if (arch_irqs_disabled_flags(flags))
826 halt();
827 else
828 safe_halt();
829
830out:
831 local_irq_restore(flags);
832}
833
834#ifdef CONFIG_X86_32
835__visible bool __kvm_vcpu_is_preempted(long cpu)
836{
837 struct kvm_steal_time *src = &per_cpu(steal_time, cpu);
838
839 return !!(src->preempted & KVM_VCPU_PREEMPTED);
840}
841PV_CALLEE_SAVE_REGS_THUNK(__kvm_vcpu_is_preempted);
842
843#else
844
845#include <asm/asm-offsets.h>
846
847extern bool __raw_callee_save___kvm_vcpu_is_preempted(long);
848
849/*
850 * Hand-optimize version for x86-64 to avoid 8 64-bit register saving and
851 * restoring to/from the stack.
852 */
853asm(
854".pushsection .text;"
855".global __raw_callee_save___kvm_vcpu_is_preempted;"
856".type __raw_callee_save___kvm_vcpu_is_preempted, @function;"
857"__raw_callee_save___kvm_vcpu_is_preempted:"
858"movq __per_cpu_offset(,%rdi,8), %rax;"
859"cmpb $0, " __stringify(KVM_STEAL_TIME_preempted) "+steal_time(%rax);"
860"setne %al;"
861"ret;"
862".size __raw_callee_save___kvm_vcpu_is_preempted, .-__raw_callee_save___kvm_vcpu_is_preempted;"
863".popsection");
864
865#endif
866
867/*
868 * Setup pv_lock_ops to exploit KVM_FEATURE_PV_UNHALT if present.
869 */
870void __init kvm_spinlock_init(void)
871{
872 /*
873 * In case host doesn't support KVM_FEATURE_PV_UNHALT there is still an
874 * advantage of keeping virt_spin_lock_key enabled: virt_spin_lock() is
875 * preferred over native qspinlock when vCPU is preempted.
876 */
877 if (!kvm_para_has_feature(KVM_FEATURE_PV_UNHALT)) {
878 pr_info("PV spinlocks disabled, no host support\n");
879 return;
880 }
881
882 /*
883 * Disable PV spinlocks and use native qspinlock when dedicated pCPUs
884 * are available.
885 */
886 if (kvm_para_has_hint(KVM_HINTS_REALTIME)) {
887 pr_info("PV spinlocks disabled with KVM_HINTS_REALTIME hints\n");
888 goto out;
889 }
890
891 if (num_possible_cpus() == 1) {
892 pr_info("PV spinlocks disabled, single CPU\n");
893 goto out;
894 }
895
896 if (nopvspin) {
897 pr_info("PV spinlocks disabled, forced by \"nopvspin\" parameter\n");
898 goto out;
899 }
900
901 pr_info("PV spinlocks enabled\n");
902
903 __pv_init_lock_hash();
904 pv_ops.lock.queued_spin_lock_slowpath = __pv_queued_spin_lock_slowpath;
905 pv_ops.lock.queued_spin_unlock =
906 PV_CALLEE_SAVE(__pv_queued_spin_unlock);
907 pv_ops.lock.wait = kvm_wait;
908 pv_ops.lock.kick = kvm_kick_cpu;
909
910 if (kvm_para_has_feature(KVM_FEATURE_STEAL_TIME)) {
911 pv_ops.lock.vcpu_is_preempted =
912 PV_CALLEE_SAVE(__kvm_vcpu_is_preempted);
913 }
914 /*
915 * When PV spinlock is enabled which is preferred over
916 * virt_spin_lock(), virt_spin_lock_key's value is meaningless.
917 * Just disable it anyway.
918 */
919out:
920 static_branch_disable(&virt_spin_lock_key);
921}
922
923#endif /* CONFIG_PARAVIRT_SPINLOCKS */
924
925#ifdef CONFIG_ARCH_CPUIDLE_HALTPOLL
926
927static void kvm_disable_host_haltpoll(void *i)
928{
929 wrmsrl(MSR_KVM_POLL_CONTROL, 0);
930}
931
932static void kvm_enable_host_haltpoll(void *i)
933{
934 wrmsrl(MSR_KVM_POLL_CONTROL, 1);
935}
936
937void arch_haltpoll_enable(unsigned int cpu)
938{
939 if (!kvm_para_has_feature(KVM_FEATURE_POLL_CONTROL)) {
940 pr_err_once("host does not support poll control\n");
941 pr_err_once("host upgrade recommended\n");
942 return;
943 }
944
945 /* Enable guest halt poll disables host halt poll */
946 smp_call_function_single(cpu, kvm_disable_host_haltpoll, NULL, 1);
947}
948EXPORT_SYMBOL_GPL(arch_haltpoll_enable);
949
950void arch_haltpoll_disable(unsigned int cpu)
951{
952 if (!kvm_para_has_feature(KVM_FEATURE_POLL_CONTROL))
953 return;
954
955 /* Enable guest halt poll disables host halt poll */
956 smp_call_function_single(cpu, kvm_enable_host_haltpoll, NULL, 1);
957}
958EXPORT_SYMBOL_GPL(arch_haltpoll_disable);
959#endif