Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <23169e5f-9793-9486-fd5f-287e3317b837@intel.com>
Date:   Tue, 30 May 2023 11:51:22 +0800
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101
 Thunderbird/102.10.1
Subject: Re: [PATCH v3 07/21] KVM:x86: Refresh CPUID on write to guest
 MSR_IA32_XSS
To:     Chao Gao <chao.gao@intel.com>
CC:     <seanjc@google.com>, <pbonzini@redhat.com>, <kvm@vger.kernel.org>,
        <linux-kernel@vger.kernel.org>, <peterz@infradead.org>,
        <rppt@kernel.org>, <binbin.wu@linux.intel.com>,
        <rick.p.edgecombe@intel.com>, <john.allen@amd.com>,
        Zhang Yi Z <yi.z.zhang@linux.intel.com>
References: <20230511040857.6094-1-weijiang.yang@intel.com>
 <20230511040857.6094-8-weijiang.yang@intel.com> <ZG77wu4PyBn1z587@chao-email>
Content-Language: en-US
From:   "Yang, Weijiang" <weijiang.yang@intel.com>
In-Reply-To: <ZG77wu4PyBn1z587@chao-email>
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 8bit
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?ZldmazNjNldNVjVLaWgvZ2ZGbVh2Tmp4a3dMT29Ya1I1ZkZ2bEViT2dwVk5a?=
 =?utf-8?B?MFkxUWt5VG00MXF6WTJyRkVoRGd5ck5VeEx3c0ZNQkI0MzhjOWRjUm5KcHVM?=
 =?utf-8?B?OU9FYkM1M0kyVEtYNGphTFZkbjFNblZpbUF3OE85WWtFTzJlU2d0TmVGTTRh?=
 =?utf-8?B?ay9YMEdva3M5YWI2QnEwYjFQRmhjNmo5a29Uc3gxaG1qdTJzY2Zhb0RXTXVu?=
 =?utf-8?B?b1RlSjM3U0VPWlUwd0hHNWxqZitQbVJOeTRTbFBiWVJYL21oSGRDY1F0ZEtB?=
 =?utf-8?B?b1U4bi91TVR5VXJ5amFubkJaMlBmZTBsWFJHTVJWdndwT004NE9sSWIwL0FH?=
 =?utf-8?B?bjJPWFNXSVpYdy9kNXhQSkRYaW1JRW1WcHB6dHFoSGVTL0prY1VMd2FPSm92?=
 =?utf-8?B?TzByOHRmTk1UTy9uSmFwTkFTOUdibGd4REdhck1mT09lYzAzSEVxbEQvVjY1?=
 =?utf-8?B?UDNDdzBpL05leEFVOGw5QmgxWXpvRlU4ak90L0RpR29xQURkZnVzSzhCVnVh?=
 =?utf-8?B?dy9tMXcreExkYkpMWFZJbzZ3S2JQeThuc0dPNEluWHVuMU9tKzcwQ2J0WEll?=
 =?utf-8?B?SXBSZC9HZ2lteDB3U0I4L0grTUJwNmpyajcrdlROR3pLYXhpSXBxTXA3c3Jy?=
 =?utf-8?B?UENzRDk4bE5Kc0JVM2ZEakJHUjZ2N2YzaWtvWDhzUERRTmJVM3VYcExnc2E2?=
 =?utf-8?B?aFhuRGtYK3c2djd0ZGZieVdxdnNBekpMWDlUSGhQS2VuZ01XejQxb0xXdlJV?=
 =?utf-8?B?eVA2V282YWN3blM5TmM3YUwvc2hzU2N4ak9tckNjcXMveWhWTVd4VnB0aVVL?=
 =?utf-8?B?OU53M1lmS0lFelhHa3lSRmN1eDFadHg1S3B3NnNiV1o4eWJLTUMrZHI1R2tS?=
 =?utf-8?B?N01QZDFVMzZNMGRqSGZwVE5aZXdlUjBoMTl0c1NBT1IrbWMwMVVtQUxyN3h4?=
 =?utf-8?B?cFQ2YnNIMTZ5aUMxczdBQWg3UXh6Q3BlcWNUV0dEdDVseEVsNnIrd0IvQWlX?=
 =?utf-8?B?eHJZQUhsZkgwYVJlMkdCTzdXWkc2blB1MFlEaXlIbitza0NncFhQMVZ3R1Fm?=
 =?utf-8?B?N2MyNmQ5ajJ3cldQSkNyOStKbW81TXFuemFCWTNxYjZKdlhONXZHb2ZjSkFE?=
 =?utf-8?B?cEFwVUpVUmlTOWRLcVlpaC85dDFjcFVsOTdrLytpL1JzWUFQZ2o5ZGgyS3pv?=
 =?utf-8?B?Y1lJeE9xL21pNXdzc1c3aGlpMGpBckUrMmtGSjhlZUo5ZGpnOGE0MjMxZTRa?=
 =?utf-8?B?UWE4OUZZRDFUNkxBYUwvSmo2K2JJR2RYeEVzdDlLVE03Z3RXQzk1MGNJRHp0?=
 =?utf-8?B?b2JzN1YreU9kenhnYkhrR0pZK0JpT3RZSkU5NjU4ZzRHRTlaRkNIZnJpSlZv?=
 =?utf-8?B?NTUvTXltQlBSdVB0Uit3UUZMVkdvS2kvN2NPVXlzMG11NEE2LyswTEVvWWc5?=
 =?utf-8?B?M2tNaTNERDU4QlNuOEIyaTZSbUlWMzZZbEpRSlk1TUtyQ2VlOHorbmV2dldv?=
 =?utf-8?B?VElsT1Q0bFphRk1xd2NRQUtZRk5hV3JhcVNERVFpYlNFOHBTSEt6VFp2dGRL?=
 =?utf-8?B?UkttOE1qZ0k5WTdMczFqU2N6MVd1Q213djNjOHBwRytCMGh3TDdHQlhldHVS?=
 =?utf-8?B?YnlRcTNHYWQ2WVJyUFFYUXlQell5am9tVTRTMno3U0NqKzl3OHdNN3JqVnFR?=
 =?utf-8?B?M2NVbnRITmtFRXo4T29OS0c1WFNmelN2WjNrWkJsSTFlMmk3eU96VEdyckVW?=
 =?utf-8?B?aEtXayt4ckhnSVRpM2VQcDZvZGI3Q0dFZmhhNXp5S2p6YUd3aW1LcHo5MlpW?=
 =?utf-8?B?Rjd3d29VTVpQVG5POFJBN0hsU0sxeHZSVm40MklXOEY3Y01yTlhoMGNMZkNu?=
 =?utf-8?B?RUtNYWtMbkNWcDZRN3ZPTlZMSjRmQTRQdGIyamtrV1ZINHF3K2pWQjcxNDNt?=
 =?utf-8?B?c1h4aVhOSlBBMnFtZmNjRkMzSWRCZldJeGwrS0pyTEYvamtkSy9pd0RaWVpl?=
 =?utf-8?B?bE5kM1FEZlNUbUgybzRwclUzSDhoanluVWZYUmFmVytQb0I2bHZSZ2VtTzFP?=
 =?utf-8?B?ejM2Q2hxOWk4TmVXN2ZiejBIK1Racks3NEt5YytFYlVaY3VFUXBqUEhiNFNB?=
 =?utf-8?B?VC9OZk1WR25qWk16cVBURnlMNzNwZTl0UUlJZDJvZXZWeCsyaHo2eUNoS3dy?=
 =?utf-8?B?U1E9PQ==?=
X-MS-Exchange-CrossTenant-Network-Message-Id: e08b29f9-629d-4982-419e-08db60c128fd
X-MS-Exchange-CrossTenant-AuthSource: PH0PR11MB4965.namprd11.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 May 2023 03:51:33.8805
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 46c98d88-e344-4ed4-8496-4ed7712e255d
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: vS6ZH6JQTxaRgQrnN+/pMIg240VKfGv1cFunGWb43aZIYmYJ+zdpAIyZK8wGceQP6QVVeWYxSFXW/NwU1kRH8Q==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR11MB6677
X-OriginatorOrg: intel.com
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,
        DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,NICE_REPLY_A,
        RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_NONE,T_SCC_BODY_TEXT_LINE,
        URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org


On 5/25/2023 2:10 PM, Chao Gao wrote:
> On Thu, May 11, 2023 at 12:08:43AM -0400, Yang Weijiang wrote:
>> Update CPUID(EAX=0DH,ECX=1) when the guest's XSS is modified.
>> CPUID(EAX=0DH,ECX=1).EBX reports current required storage size for all
>> features enabled via XCR0 | XSS so that guest can allocate correct xsave
>> buffer.
>>
>> Note, KVM does not yet support any XSS based features, i.e. supported_xss
>> is guaranteed to be zero at this time.
>>
>> Co-developed-by: Zhang Yi Z <yi.z.zhang@linux.intel.com>
>> Signed-off-by: Zhang Yi Z <yi.z.zhang@linux.intel.com>
>> Signed-off-by: Yang Weijiang <weijiang.yang@intel.com>
>> ---
>> arch/x86/kvm/cpuid.c | 7 +++++--
>> arch/x86/kvm/x86.c   | 6 ++++--
>> 2 files changed, 9 insertions(+), 4 deletions(-)
>>
>> diff --git a/arch/x86/kvm/cpuid.c b/arch/x86/kvm/cpuid.c
>> index 123bf8b97a4b..cbb1b8a65502 100644
>> --- a/arch/x86/kvm/cpuid.c
>> +++ b/arch/x86/kvm/cpuid.c
>> @@ -277,8 +277,11 @@ static void __kvm_update_cpuid_runtime(struct kvm_vcpu *vcpu, struct kvm_cpuid_e
>>
>> 	best = cpuid_entry2_find(entries, nent, 0xD, 1);
>> 	if (best && (cpuid_entry_has(best, X86_FEATURE_XSAVES) ||
>> -		     cpuid_entry_has(best, X86_FEATURE_XSAVEC)))
>> -		best->ebx = xstate_required_size(vcpu->arch.xcr0, true);
>> +		cpuid_entry_has(best, X86_FEATURE_XSAVEC))) {
> Align indentation.

OK. Thanks!

>
>   	if (best && (cpuid_entry_has(best, X86_FEATURE_XSAVES) ||
> 		     cpuid_entry_has(best, X86_FEATURE_XSAVEC))) {
>
>> +		u64 xstate = vcpu->arch.xcr0 | vcpu->arch.ia32_xss;
>> +
>> +		best->ebx = xstate_required_size(xstate, true);
>> +	}
>>
>> 	best = __kvm_find_kvm_cpuid_features(vcpu, entries, nent);
>> 	if (kvm_hlt_in_guest(vcpu->kvm) && best &&
>> diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c
>> index 33a780fe820b..ab3360a10933 100644
>> --- a/arch/x86/kvm/x86.c
>> +++ b/arch/x86/kvm/x86.c
>> @@ -3776,8 +3776,10 @@ int kvm_set_msr_common(struct kvm_vcpu *vcpu, struct msr_data *msr_info)
>> 		 */
>> 		if (data & ~kvm_caps.supported_xss)
> Shouldn't we check against the supported value of _this_ guest? similar to
> guest_supported_xcr0.

I don't think it requires an extra variable to serve per guest purpose.

For guest XSS settings, now we don't add extra constraints like XCR0, 
thus all KVM supported

bits can be accessed by guest.  There's already another variable 
vcpu->arch.ia32_xss

to play similar role. In future, if there's requirement to serve per VM 
control purpose,

then will align it to XCR0 settings.


>
>> 			return 1;
>> -		vcpu->arch.ia32_xss = data;
>> -		kvm_update_cpuid_runtime(vcpu);
>> +		if (vcpu->arch.ia32_xss != data) {
>> +			vcpu->arch.ia32_xss = data;
>> +			kvm_update_cpuid_runtime(vcpu);
>> +		}
>> 		break;
>> 	case MSR_SMI_COUNT:
>> 		if (!msr_info->host_initiated)
>> -- 
>> 2.27.0
>>