From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 2BA87C44501 for ; Wed, 15 Jul 2026 14:30:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: MIME-Version:References:In-Reply-To:Message-ID:Date:Subject:Cc:To:From: Reply-To:Content-Type:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=41+tQ6Mbot9njL5nY57hCzgcOH+8xpui+YgH8Ny5Fvs=; b=M0sVI1sXmQqC4I/OUtOj6HuhJt bvND18C9949gIcXXlmZfeqN7jfIZ55wdALMc8dF5b66BE5TXxRdBOs6ZkNNauT9/K37oHQnb/Wwkh K08pwUXrZivhwjnKDcQGeOEHjiLtwuMPWs+NBJH0Vhqd2th2XGLCxHT83N/eP7XZAB3tu2tqD/Qaf WeTkFNpet74nn3nmyAKYO3+ntOEzY+gMOkXDQoZmMtBHM0g8GXK57vB+mx+xzIBEag/25B4Nn2vv8 lHsxtWyp8XagGz79fgnUxb2XRi0E0rnZX2KRfuX1MjHplGX5DIOAs2NS77nu+dD3oYb2e+CV1dE09 4wm97R9Q==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wk0d3-0000000F943-2Yq8; Wed, 15 Jul 2026 14:30:29 +0000 Received: from foss.arm.com ([217.140.110.172]) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wk0cx-0000000F8mh-2rsD for linux-arm-kernel@lists.infradead.org; Wed, 15 Jul 2026 14:30:26 +0000 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 9C61F153B; Wed, 15 Jul 2026 07:30:18 -0700 (PDT) Received: from e122027.cambridge.arm.com (e122027.cambridge.arm.com [10.1.25.27]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 525E53F7B4; Wed, 15 Jul 2026 07:30:18 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1784125822; bh=G9XH5zZJ1GvOceYjyx4dHra6hejDLcr12uK8ZZtBmz8=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=KBg9JTgU9fq3MMswbBA9g1KIVx8UAsBZXG3Da+XM514kButrHc9Mx6E2a4c5z5z+A rBNnaCvHaFaOr+uvlsbY6CjBuBWIN1GED/CC39xzJriQzrvyc/NkXSJObSyYxu/Pw5 ntFryhi6rw/H3wmmWIN9fgU20dqVxINIAfo9u6dc= From: Steven Price To: kvm@vger.kernel.org, kvmarm@lists.linux.dev Cc: Steven Price , Catalin Marinas , Marc Zyngier , Will Deacon , James Morse , Oliver Upton , Suzuki K Poulose , Zenghui Yu , linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org, Joey Gouly , Alexandru Elisei , Christoffer Dall , Fuad Tabba , linux-coco@lists.linux.dev, Ganapatrao Kulkarni , Gavin Shan , Shanker Donthineni , Alper Gun , "Aneesh Kumar K . V" , Emi Kisanuki , Vishal Annapurve , WeiLin.Chang@arm.com, Lorenzo Pieralisi Subject: [PATCH v15 18/37] KVM: arm64: CCA: Create the realm descriptor Date: Wed, 15 Jul 2026 15:28:20 +0100 Message-ID: <20260715142841.80544-19-steven.price@arm.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260715142841.80544-1-steven.price@arm.com> References: <20260715142841.80544-1-steven.price@arm.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.9.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20260715_073023_828854_CC432234 X-CRM114-Status: GOOD ( 16.25 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Creating a realm involves first creating a realm descriptor (RD). This involves passing the configuration information to the RMM. Do this as part of realm_ensure_created() so that the realm is created when it is first needed. The call to realm_ensure_created() will be added in a later patch. Signed-off-by: Steven Price --- Changes since v14: * Explicitly set hash_algo = RMI_HASH_SHA_256 (which is the default). * Support SRO flow during realm creation. Changes since v13: * The RMM no longer uses AUX granules, so no need to ask it how many it needs. * Adapted to other changes. Changes since v12: * Since RMM page size is now equal to the host's page size various calculations are simplified. * Switch to using range based APIs to delegate/undelegate. * VMID handling is now handled entirely by the RMM. --- arch/arm64/kvm/rmi.c | 91 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 91 insertions(+) diff --git a/arch/arm64/kvm/rmi.c b/arch/arm64/kvm/rmi.c index 1ef676eed172..94776a9262c9 100644 --- a/arch/arm64/kvm/rmi.c +++ b/arch/arm64/kvm/rmi.c @@ -449,6 +449,79 @@ static void realm_unmap_shared_range(struct kvm *kvm, start, end); } +static int realm_create_rd(struct kvm *kvm) +{ + struct realm *realm = &kvm->arch.realm; + struct realm_params *params = realm->params; + void *rd = NULL; + phys_addr_t rd_phys, params_phys, top_delegated; + size_t pgd_size = kvm_pgtable_stage2_pgd_size(kvm->arch.mmu.vtcr); + int r; + + realm->ia_bits = VTCR_EL2_IPA(kvm->arch.mmu.vtcr); + + if (WARN_ON(realm->rd || !realm->params)) + return -EEXIST; + + rd = (void *)__get_free_page(GFP_KERNEL_ACCOUNT); + if (!rd) + return -ENOMEM; + + rd_phys = virt_to_phys(rd); + if (rmi_delegate_page(rd_phys)) { + r = -ENXIO; + goto free_rd; + } + + if (rmi_delegate_range(kvm->arch.mmu.pgd_phys, pgd_size, + &top_delegated)) { + r = -ENXIO; + goto out_undelegate_tables; + } + + params->s2sz = VTCR_EL2_IPA(kvm->arch.mmu.vtcr); + params->rtt_level_start = get_start_level(realm); + params->rtt_num_start = pgd_size / PAGE_SIZE; + params->rtt_base = kvm->arch.mmu.pgd_phys; + params->hash_algo = RMI_HASH_SHA_256; + + if (kvm->arch.arm_pmu) { + params->pmu_num_ctrs = kvm->arch.nr_pmu_counters; + params->flags0 |= RMI_REALM_PARAM_FLAG_PMU; + } + + if (kvm_lpa2_is_enabled()) + params->flags0 |= RMI_REALM_PARAM_FLAG_LPA2; + + params_phys = virt_to_phys(params); + + if (rmi_realm_create(rd_phys, params_phys, realm->sro)) { + r = -ENXIO; + goto out_undelegate_tables; + } + + realm->rd = rd; + kvm_set_realm_state(kvm, REALM_STATE_NEW); + /* The realm is up, free the parameters. */ + free_page((unsigned long)realm->params); + realm->params = NULL; + + return 0; + +out_undelegate_tables: + if (WARN_ON(rmi_undelegate_range(kvm->arch.mmu.pgd_phys, top_delegated - kvm->arch.mmu.pgd_phys))) { + /* Leak the pages if they cannot be returned */ + kvm->arch.mmu.pgt = NULL; + } + if (WARN_ON(rmi_undelegate_page(rd_phys))) { + /* Leak the page if it isn't returned */ + return r; + } +free_rd: + free_page((unsigned long)rd); + return r; +} + static void realm_unmap_private_range(struct kvm *kvm, unsigned long start, unsigned long end, @@ -614,6 +687,24 @@ static int realm_set_ipa_state(struct kvm_vcpu *vcpu, return ret; } +static int __maybe_unused realm_ensure_created(struct kvm *kvm) +{ + lockdep_assert_held(&kvm->arch.config_lock); + + switch (kvm_realm_state(kvm)) { + case REALM_STATE_NONE: + break; + case REALM_STATE_NEW: + return 0; + case REALM_STATE_DEAD: + return -ENXIO; + default: + return -EBUSY; + } + + return realm_create_rd(kvm); +} + static void kvm_complete_ripas_change(struct kvm_vcpu *vcpu) { struct kvm *kvm = vcpu->kvm; -- 2.43.0