Received: by 2002:a25:ef43:0:0:0:0:0 with SMTP id w3csp417202ybm; Thu, 28 May 2020 06:13:51 -0700 (PDT) X-Google-Smtp-Source: ABdhPJyzicvjvpS23HkJ0TKgYJFNuqk2Wt7UBydZx2b14blKECzJZDhngKjv7napr+RCqsZ6LbV3 X-Received: by 2002:a17:906:2b04:: with SMTP id a4mr3056953ejg.98.1590671631584; Thu, 28 May 2020 06:13:51 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1590671631; cv=none; d=google.com; s=arc-20160816; b=zu7mviGIkGKK9f7PHo0ZMy62DsTUQxzHhi/v701JQAxT5geUkO/aWHMbb6DIZh959K Ow16MhHODNFh50te/5xydPAh2GQ0RH4A6mnBdpaLddYxpaoac7ib4CKBBcxLSQKF7bsq B4K1byBCSLiXN5gc9EhItGcZlwxVpyDp1+OIcrVT4qLg2mbl92RAsKEObabAlGw2bZL6 EjAcr5B2gFrcHK51xz2ME+Gwv23bHzq91hcz1pC9ZTp5d9YUMkzVnIhUNXKs2jEzIYDg OOfgu9B4FDX37zSheEDL4kpwPPrUneA5xVv+Bmo4ar2bxdNJwQuYCSRFCB//HBTyvlkD 1acg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:content-transfer-encoding :content-language:in-reply-to:mime-version:user-agent:date :message-id:from:references:cc:to:subject:dkim-signature; bh=OyE0OqZ1rkd4ss1t8Vu7h29i8p7Q6r/VJEJ+0Y7wzRg=; b=AWAlRPBm33aAQxjXXcR09GY/KhP4FZNV5PUIWxpCjvL6mjJpL6UMrV+EHxg8pwNwTc L84uab8Y4h/wR49lIvaMYBUgLPTHecKKbBdnOOlzNCsLcCFYM6ijyj88Xi4VNFzv+6cD dlYVKuvRltKbEeoNa/4Tv2o7GYp0eIcuaXgb44O81BQgixU28TxTK95tMuz5OWSfXAop qirNyqrlN0Rvg8jZYfSH5vr+mai5N2cAkajB2B25ksrEYNNB/pqzYcNyB+GfHZ3FX7e4 17KFkCaWP3eTb18xaL2ZBYAfMao+o+foqM8ra4J40G9owvyDFmsvuo564PyQdWU8DEYz FieA== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=jFNYTb2y; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id dn18si3435812edb.348.2020.05.28.06.13.26; Thu, 28 May 2020 06:13:51 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b=jFNYTb2y; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2390137AbgE1NLh (ORCPT + 99 others); Thu, 28 May 2020 09:11:37 -0400 Received: from us-smtp-2.mimecast.com ([205.139.110.61]:39028 "EHLO us-smtp-delivery-1.mimecast.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S2389949AbgE1NLf (ORCPT ); Thu, 28 May 2020 09:11:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1590671493; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=OyE0OqZ1rkd4ss1t8Vu7h29i8p7Q6r/VJEJ+0Y7wzRg=; b=jFNYTb2yHxoObiECN1NKzVZzuA+20b3L02BKvCgZXFiHlhW44hkB8GESaoRH4qo0ZnV5nh JAoKsyuKbCudhaDXyOpvjkXEgbkeWgkPzSdLXKs50z24Rxv0bH4uwbjrwzRTBnp7/eT51x daLd1KNP58+Ky0GKs92dIW20EQVYVsc= Received: from mimecast-mx01.redhat.com (mimecast-mx01.redhat.com [209.132.183.4]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-444-89PJyhlyOXuLUIcQ0iv1kQ-1; Thu, 28 May 2020 09:11:19 -0400 X-MC-Unique: 89PJyhlyOXuLUIcQ0iv1kQ-1 Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.phx2.redhat.com [10.5.11.13]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mimecast-mx01.redhat.com (Postfix) with ESMTPS id 308F364AD2; Thu, 28 May 2020 13:11:18 +0000 (UTC) Received: from [10.36.113.56] (ovpn-113-56.ams2.redhat.com [10.36.113.56]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 21C497E467; Thu, 28 May 2020 13:11:11 +0000 (UTC) Subject: Re: [RFC PATCH] iommu/arm-smmu: Add module parameter to set msi iova address To: Shameerali Kolothum Thodi , Jean-Philippe Brucker Cc: Will Deacon , Joerg Roedel , "iommu@lists.linux-foundation.org" , Linux Kernel Mailing List , Alex Williamson , Srinath Mannam , BCM Kernel Feedback , Robin Murphy , Linux ARM References: <1590595398-4217-1-git-send-email-srinath.mannam@broadcom.com> <20200528072308.GA414784@myrica> <527f25a4-ca5a-10da-150f-0b4ea3839635@redhat.com> <20200528083851.GB414784@myrica> <0076d965-b180-fc44-103c-9bc9d73fe7f2@redhat.com> <25ad278ae9ed4833aeb7b625fcb89d88@huawei.com> <9aeb1cd5-48de-f581-1212-5c7b95fd8338@redhat.com> From: Auger Eric Message-ID: Date: Thu, 28 May 2020 15:11:10 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.4.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.79 on 10.5.11.13 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Shameer, On 5/28/20 2:09 PM, Shameerali Kolothum Thodi wrote: > > >> -----Original Message----- >> From: Auger Eric [mailto:eric.auger@redhat.com] >> Sent: 28 May 2020 12:48 >> To: Shameerali Kolothum Thodi ; >> Jean-Philippe Brucker >> Cc: Robin Murphy ; Joerg Roedel >> ; iommu@lists.linux-foundation.org; Linux Kernel Mailing >> List ; Alex Williamson >> ; Srinath Mannam >> ; BCM Kernel Feedback >> ; Will Deacon ; >> Linux ARM >> Subject: Re: [RFC PATCH] iommu/arm-smmu: Add module parameter to set msi >> iova address >> >> >> >> On 5/28/20 11:15 AM, Shameerali Kolothum Thodi wrote: >>> >>> >>>> -----Original Message----- >>>> From: Auger Eric [mailto:eric.auger@redhat.com] >>>> Sent: 28 May 2020 09:54 >>>> To: Jean-Philippe Brucker >>>> Cc: Will Deacon ; Joerg Roedel ; >>>> iommu@lists.linux-foundation.org; Shameerali Kolothum Thodi >>>> ; Linux Kernel Mailing List >>>> ; Alex Williamson >>>> ; Srinath Mannam >>>> ; BCM Kernel Feedback >>>> ; Robin Murphy >>>> ; Linux ARM >> >>>> Subject: Re: [RFC PATCH] iommu/arm-smmu: Add module parameter to set >> msi >>>> iova address >>>> >>>> Hi, >>>> >>>> On 5/28/20 10:38 AM, Jean-Philippe Brucker wrote: >>>>> [+ Shameer] >>>>> >>>>> On Thu, May 28, 2020 at 09:43:46AM +0200, Auger Eric wrote: >>>>>> Hi, >>>>>> >>>>>> On 5/28/20 9:23 AM, Jean-Philippe Brucker wrote: >>>>>>> On Thu, May 28, 2020 at 10:45:14AM +0530, Srinath Mannam wrote: >>>>>>>> On Wed, May 27, 2020 at 11:00 PM Robin Murphy >>>> wrote: >>>>>>>>> >>>>>>>> Thanks Robin for your quick response. >>>>>>>>> On 2020-05-27 17:03, Srinath Mannam wrote: >>>>>>>>>> This patch gives the provision to change default value of MSI IOVA >> base >>>>>>>>>> to platform's suitable IOVA using module parameter. The present >>>>>>>>>> hardcoded MSI IOVA base may not be the accessible IOVA ranges of >>>> platform. >>>>>>>>> >>>>>>>>> That in itself doesn't seem entirely unreasonable; IIRC the current >>>>>>>>> address is just an arbitrary choice to fit nicely into Qemu's memory >>>>>>>>> map, and there was always the possibility that it wouldn't suit >>>> everything. >>>>>>>>> >>>>>>>>>> Since commit aadad097cd46 ("iommu/dma: Reserve IOVA for PCIe >>>> inaccessible >>>>>>>>>> DMA address"), inaccessible IOVA address ranges parsed from >>>> dma-ranges >>>>>>>>>> property are reserved. >>>>>>> >>>>>>> I don't understand why we only reserve the PCIe windows for DMA >>>> domains. >>>>>>> Shouldn't VFIO also prevent userspace from mapping them? >>>>>> >>>>>> VFIO prevents userspace from DMA mapping iovas within reserved >> regions: >>>>>> 9b77e5c79840 vfio/type1: check dma map request is within a valid iova >>>> range >>>>> >>>>> Right but I was asking specifically about the IOVA reservation introduced >>>>> by commit aadad097cd46. They are not registered as reserved regions >> within >>>>> the IOMMU core, they are only taken into account by dma-iommu.c when >>>>> creating a DMA domain. As VFIO uses UNMANAGED domains, it isn't >> aware >>>> of >>>>> those regions and they won't be seen by vfio_iommu_resv_exclude(). >>>>> >>>>> It looks like the PCIe regions used to be common until cd2c9fcf5c66 >>>>> ("iommu/dma: Move PCI window region reservation back into dma specific >>>>> path.") But I couldn't find the justification for this commit. >>>> >>>> Yes I noticed that as well when debugging the above mentioned case >>>> before and after cd2c9fcf5c66. I do not remember about the rationale of >>>> removing the DMA host brige windows from the resv regions. Did it break >>>> a legacy case? >>>>> >>> >>> I think yes. And going through the ML discussions, this was done so because >> with the >>> " vfio/type1: Add support for valid iova list management" series you reported >>> an issue with Seattle platform. See the full discussion here, >>> >>> https://lore.kernel.org/patchwork/patch/889012/ >> >> Hey thank you for reminding me of the Seattle case :-) Now I also recall >> that, if I am not wrong, this also caused some trouble on some x86 >> platforms as well, reported by Alex? > > True, Alex reported that VT-d RMRR ranges were causing issues[1] as well. > And then you came with IOMMU_RESV_DIRECT_RELAXABLE regions > to exclude those[2] I thought we also had the case of RESERVED regions but anyway. > > Maybe we should still report PCI >> host bridge windows in the reserved regions, if possible/feasible tag >> them differently from other reserved regions and not reject any VFIO >> DMA_MAP colliding with them? > > I guess that is possible. But current interface is to report the regions that are safe > from a IOMMU transaction point of view and I am not sure PCI window regions > comes under that. yes only the sysfs interface could expose them at the moment. Thanks Eric > > Thanks, > Shameer > > 1. https://lkml.org/lkml/2018/6/5/760 > 2. https://lore.kernel.org/patchwork/cover/1083072/ > >> Thanks >> >> Eric >>> >>> Cheers, >>> Shameer >>> >>>>> The thing is, if VFIO isn't aware of the reserved PCIe windows, then >>>>> allowing VFIO or userspace to choose MSI_IOVA_BASE won't solve the >>>> problem >>>>> reported by Srinath, because they could well choose an IOVA within the >>>>> PCIe window... >>>> I agree with you >>>> >>>> Thanks >>>> >>>> Eric >>>>> >>>>> Thanks, >>>>> Jean >>>>> >>>>>> but it does not prevent the SW MSI region chosen by the kernel from >>>>>> colliding with other reserved regions (esp. PCIe host bridge windows). >>>>>> >>>>>> If they were >>>>>>> part of the common reserved regions then we could have VFIO choose a >>>>>>> SW_MSI region among the remaining free space. >>>>>> As Robin said this was the initial chosen approach >>>>>> [PATCH 10/10] vfio: allow the user to register reserved iova range for >>>>>> MSI mapping >>>>>> https://patchwork.kernel.org/patch/8121641/ >>>>>> >>>>>> Some additional background about why the static SW MSI region chosen >> by >>>>>> the kernel was later chosen: >>>>>> Summary of LPC guest MSI discussion in Santa Fe (was: Re: [RFC 0/8] KVM >>>>>> PCIe/MSI passthrough on ARM/ARM64 (Alt II)) >>>>>> >>>> >> https://lists.linuxfoundation.org/pipermail/iommu/2016-November/019060.ht >>>> ml >>>>>> >>>>>> Thanks >>>>>> >>>>>> Eric >>>>>> >>>>>> >>>>>> It would just need a >>>>>>> different way of asking the IOMMU driver if a SW_MSI is needed, for >>>>>>> example with a domain attribute. >>>>>>> >>>>>>> Thanks, >>>>>>> Jean >>>>>>> >>>>>>>>> >>>>>>>>> That, however, doesn't seem to fit here; iommu-dma maps MSI >>>> doorbells >>>>>>>>> dynamically, so they aren't affected by reserved regions any more >> than >>>>>>>>> regular DMA pages are. In fact, it explicitly ignores the software MSI >>>>>>>>> region, since as the comment says, it *is* the software that manages >>>> those. >>>>>>>> Yes you are right, we don't see any issues with kernel drivers(PCI EP) >>>> because >>>>>>>> MSI IOVA allocated dynamically by honouring reserved regions same as >>>> DMA pages. >>>>>>>>> >>>>>>>>> The MSI_IOVA_BASE region exists for VFIO, precisely because in that >>>> case >>>>>>>>> the kernel *doesn't* control the address space, but still needs some >> way >>>>>>>>> to steal a bit of it for MSIs that the guest doesn't necessarily know >>>>>>>>> about, and give userspace a fighting chance of knowing what it's >> taken. >>>>>>>>> I think at the time we discussed the idea of adding something to the >>>>>>>>> VFIO uapi such that userspace could move this around if it wanted or >>>>>>>>> needed to, but decided we could live without that initially. Perhaps >> now >>>>>>>>> the time has come? >>>>>>>> Yes, we see issues only with user-space drivers(DPDK) in which >>>> MSI_IOVA_BASE >>>>>>>> region is considered to map MSI registers. This patch helps us to fix the >>>> issue. >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Srinath. >>>>>>>>> >>>>>>>>> Robin. >>>>>>>>> >>>>>>>>>> If any platform has the limitaion to access default MSI IOVA, then it >> can >>>>>>>>>> be changed using "arm-smmu.msi_iova_base=0xa0000000" >> command >>>> line argument. >>>>>>>>>> >>>>>>>>>> Signed-off-by: Srinath Mannam >>>>>>>>>> --- >>>>>>>>>> drivers/iommu/arm-smmu.c | 5 ++++- >>>>>>>>>> 1 file changed, 4 insertions(+), 1 deletion(-) >>>>>>>>>> >>>>>>>>>> diff --git a/drivers/iommu/arm-smmu.c >> b/drivers/iommu/arm-smmu.c >>>>>>>>>> index 4f1a350..5e59c9d 100644 >>>>>>>>>> --- a/drivers/iommu/arm-smmu.c >>>>>>>>>> +++ b/drivers/iommu/arm-smmu.c >>>>>>>>>> @@ -72,6 +72,9 @@ static bool disable_bypass = >>>>>>>>>> module_param(disable_bypass, bool, S_IRUGO); >>>>>>>>>> MODULE_PARM_DESC(disable_bypass, >>>>>>>>>> "Disable bypass streams such that incoming transactions >> from >>>> devices that are not attached to an iommu domain will report an abort back >> to >>>> the device and will not be allowed to pass through the SMMU."); >>>>>>>>>> +static unsigned long msi_iova_base = MSI_IOVA_BASE; >>>>>>>>>> +module_param(msi_iova_base, ulong, S_IRUGO); >>>>>>>>>> +MODULE_PARM_DESC(msi_iova_base, "msi iova base address."); >>>>>>>>>> >>>>>>>>>> struct arm_smmu_s2cr { >>>>>>>>>> struct iommu_group *group; >>>>>>>>>> @@ -1566,7 +1569,7 @@ static void >>>> arm_smmu_get_resv_regions(struct device *dev, >>>>>>>>>> struct iommu_resv_region *region; >>>>>>>>>> int prot = IOMMU_WRITE | IOMMU_NOEXEC | >>>> IOMMU_MMIO; >>>>>>>>>> >>>>>>>>>> - region = iommu_alloc_resv_region(MSI_IOVA_BASE, >>>> MSI_IOVA_LENGTH, >>>>>>>>>> + region = iommu_alloc_resv_region(msi_iova_base, >>>> MSI_IOVA_LENGTH, >>>>>>>>>> prot, >>>> IOMMU_RESV_SW_MSI); >>>>>>>>>> if (!region) >>>>>>>>>> return; >>>>>>>>>> >>>>>>> >>>>>>> _______________________________________________ >>>>>>> linux-arm-kernel mailing list >>>>>>> linux-arm-kernel@lists.infradead.org >>>>>>> http://lists.infradead.org/mailman/listinfo/linux-arm-kernel >>>>>>> >>>>>> >>>>> >>>>> _______________________________________________ >>>>> linux-arm-kernel mailing list >>>>> linux-arm-kernel@lists.infradead.org >>>>> http://lists.infradead.org/mailman/listinfo/linux-arm-kernel >>>>> >>> >>> _______________________________________________ >>> linux-arm-kernel mailing list >>> linux-arm-kernel@lists.infradead.org >>> http://lists.infradead.org/mailman/listinfo/linux-arm-kernel >>> > > _______________________________________________ > linux-arm-kernel mailing list > linux-arm-kernel@lists.infradead.org > http://lists.infradead.org/mailman/listinfo/linux-arm-kernel >