From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.5 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE, SPF_PASS,URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id B6DBAC433DF for ; Wed, 1 Jul 2020 12:06:22 +0000 (UTC) Received: from merlin.infradead.org (merlin.infradead.org [205.233.59.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 81E6820760 for ; Wed, 1 Jul 2020 12:06:22 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=lists.infradead.org header.i=@lists.infradead.org header.b="fWIPzUsD" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 81E6820760 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=arm.com Authentication-Results: mail.kernel.org; spf=none smtp.mailfrom=linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=merlin.20170209; h=Sender:Content-Transfer-Encoding: Content-Type:Cc:List-Subscribe:List-Help:List-Post:List-Archive: List-Unsubscribe:List-Id:In-Reply-To:MIME-Version:Date:Message-ID:From: References:To:Subject:Reply-To:Content-ID:Content-Description:Resent-Date: Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=XOFSUkk2owfKLrppgeJ4qyFkap+/kaKnTgR6l7vFQrg=; b=fWIPzUsDb4J4mKUVmRQa9K/IT Sym22dknAWVZhWOF5aFzhhmbLJ3pM7SMYP+drlY/6uU4FJhzJbSd5F/xpsMpQXlmFPQvcXg/BWQ8c qsGpbbg1Br0GWxDMVT2RYmt+RMro2yYH6Qyxweyk+YPIlOOZ3jiM+Yk4Ihu1qUIvHBsZDjnBhACij 4vheDGPKKnatsy1DR5abT7dbRwYtnzKR2dXhLCZ46r/8MXlbyjwXK/ASkTrH86QwME6c/sRQAyOKi iMXrt+iCleNYkFhBblTBwd7pQQSrCfETHffF7Ly7m3K78XH1cy+4C86+s4rj746krFEaZl3LdGcSG 0bU+EVJ0Q==; Received: from localhost ([::1] helo=merlin.infradead.org) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1jqbQP-00005w-SI; Wed, 01 Jul 2020 12:01:13 +0000 Received: from foss.arm.com ([217.140.110.172]) by merlin.infradead.org with esmtp (Exim 4.92.3 #3 (Red Hat Linux)) id 1jqbQN-00005N-Ix for linux-arm-kernel@lists.infradead.org; Wed, 01 Jul 2020 12:01:12 +0000 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 5ED2A1045; Wed, 1 Jul 2020 05:01:09 -0700 (PDT) Received: from [192.168.0.14] (unknown [172.31.20.19]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 3BBDA3F73C; Wed, 1 Jul 2020 05:01:08 -0700 (PDT) Subject: Re: [PATCH 2/2] arm64: Add workaround for Arm Cortex-A77 erratum 1508412 To: Will Deacon , Marc Zyngier References: <20200629213321.2953022-1-robh@kernel.org> <20200629213321.2953022-2-robh@kernel.org> <20200630083618.GA13574@willie-the-truck> From: James Morse Message-ID: <1c5f29f4-5c25-110f-8dee-6fb304c89901@arm.com> Date: Wed, 1 Jul 2020 13:00:59 +0100 User-Agent: Mozilla/5.0 (X11; Linux aarch64; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 In-Reply-To: <20200630083618.GA13574@willie-the-truck> Content-Language: en-GB X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20200701_080111_754800_8E597559 X-CRM114-Status: GOOD ( 25.52 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Rob Herring , Jose.Marinho@arm.com, Suzuki K Poulose , Catalin Marinas , linux-arm-kernel@lists.infradead.org, kvmarm@lists.cs.columbia.edu, Julien Thierry Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Hi guys, On 30/06/2020 09:36, Will Deacon wrote: > On Tue, Jun 30, 2020 at 09:15:15AM +0100, Marc Zyngier wrote: >> On 2020-06-29 22:33, Rob Herring wrote: >>> On Cortex-A77 r0p0 and r1p0, a sequence of a non-cacheable or device >>> load >>> and a store exclusive or PAR_EL1 read can cause a deadlock. >>> >>> The workaround requires a DMB SY before and after a PAR_EL1 register >>> read >>> and the disabling of KVM. KVM must be disabled to prevent the >>> problematic >>> sequence in guests' EL1. This workaround also depends on a firmware >>> counterpart to enable the h/w to insert DMB SY after load and store >>> exclusive instructions. See the errata document SDEN-1152370 v10 [1] for >>> more information. > > Jose -- having an SMC interface to see if the firmware is holding up its > side of the bargian would be really helpful here. There's been one in > development for _months_ now; any update? > >> This seems a bit extreme. Given that this CPU is most likely >> used in big-little systems, there is still a bunch of CPUs >> on which we could reliably execute guests. (I'm guessing you don't want KVM to second guess the scheduler's placement on big.little systems?) >> It is also likely that people could run trusted guests. Knowing whether the user trusts the guest not to tickle this is the piece of information that would change what we do here. >> I would suggest printing a big fat warning and taining the >> kernel with TAINT_CPU_OUT_OF_SPEC, together with the required >> DSBs in the KVM code. > > Honestly, I think a TAINT is pointless here and we shouldn't be in the > business of trying to police what people do with their systems when there's > absolutely nothing we can do to help them. After all, they can always > disable KVM themselves if they want to. The only sensible action you can > take on seeing the taint is to disable the workaround to get rid of it, > which is also the worst thing you can do! As another example, imagine if > we had the ability to detect whether or not firmware was setting the patch > registers. If we knew that it wasn't applying the workaround, would we > TAINT on entering userspace? I don't think so. We'd probably just print a > message when trying to apply the workaround, indicating that it was > incomplete and the system may deadlock. > > Finally, we have another erratum that allows guests to deadlock the system > (Cortex-A57 832075) Aha! Precedent. We don't print any warning about untrusted guests in that case. > so ultimately it's up to the person deploying the system > to decide whether or not they can tolerate the risk of deadlock. In many > cases, it won't be an issue, but if it is and they require KVM, then the > part is dead in the water and Linux can't help with that. Sure. So the plan here is to add the barriers around KVMs PAR_EL1 accesses, and get KVM to print a warning that this platform is only suitable for trusted guests? (and do that for A57's 832075 too). As its a deadlock, not the guest influence/corrupting the host, I think this is fine. Not printing a warning implies we hope anyone deploying KVM on affected silicon has read the errata document... Thanks, James _______________________________________________ linux-arm-kernel mailing list linux-arm-kernel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/linux-arm-kernel