From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6864C606A31B for ; Wed, 21 Oct 2026 13:36:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=lists.infradead.org header.i=@lists.infradead.org header.a=rsa-sha256 header.s=bombadil.20210309 header.b=H9s4Ag0y; dkim=pass (1024-bit key, unprotected) header.d=arm.com header.i=@arm.com header.a=rsa-sha256 header.s=foss header.b=nYXLNQ+m DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:In-Reply-To:From:References:Cc:To:Subject:MIME-Version:Date: Message-ID:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=TWEer91pURJKpMqcGr1P37YbC2QaRDdu+H8+zHCyteo=; b=H9s4Ag0yaAHSblerH0YfUyMB0I J+aVouElIXJoE3a6c76cTTGjjCb0YKzn8jA8Moup1kBHMy8m3XZoFRrvkoGb8rfvtACPhQ5zc3LjZ rt82YDeUl2FJF6bpzmNUM5IjBxhrxUPGF4ht91rpPcdfHW4zofJFD5ZnMlAEfcJ9l/00Ov3jTPRtU WsztRal9wiQ0joylCjFICZyFhWXXJ2FJCXwJXw7Y2NAuk+dPX2u5xtTOt0YNKntqtSyhqQz2Klc/g AuBCCGrH2DkWGqYjAQKqvZA4vKXIqpUoPGoyv0cIfPW4qhr01adPzmx4wPMhuRWCILyQpsmfPkVaK AefHJPrA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1xJWU1-0000000BvNN-0c9v; Wed, 21 Oct 2026 13:35:57 +0000 Received: from foss.arm.com ([217.140.110.172]) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1xJWTx-0000000BvM8-3HH8 for linux-arm-kernel@lists.infradead.org; Wed, 21 Oct 2026 13:35:55 +0000 Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id E59A616F8; Wed, 21 Oct 2026 06:35:48 -0700 (PDT) Received: from [10.0.129.145] (Suzukis-MBP.cambridge.arm.com [10.0.129.145]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 15B443F7B4; Wed, 21 Oct 2026 06:35:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1792589752; bh=K1+XouPflyX+8G49/HiO730D52/jF3umhs279EWrgBY=; h=Date:Subject:To:Cc:References:From:In-Reply-To:From; b=nYXLNQ+m65v1I4y0obonQ9lqui4JgOt4+DqhX03+NXDRwPJhBR+5eXzu3HFypdarB 260uJDalXUV9HrTgNpR7ZPbYtjl9wbcutcQcYsbMycxZAFFN23wSwQesecaDaWSXY8 V9wUjjfnHaCB1HCL+OPrGx+2p/vshWxKbHaQoRJo= Message-ID: <34bf0c98-35b1-4402-842f-a100245cb9a7@arm.com> Date: Wed, 21 Oct 2026 14:35:47 +0100 X-Archived-By: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v22 06/10] firmware: arm_rmm: Ensure the RMM has GPT entries for memory Content-Language: en-GB To: Kohei Enju Cc: kvm@vger.kernel.org, kvmarm@lists.linux.dev, maz@kernel.org, will@kernel.org, catalin.marinas@arm.com, linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, steven.price@arm.com, aneesh.kumar@kernel.org, oupton@kernel.org, gshan@redhat.com, joey.gouly@arm.com, tabba@google.com, yuzenghui@huawei.com, linux-coco@lists.linux.dev, gankulkarni@os.amperecomputing.com, sdonthineni@nvidia.com, alpergun@google.com, fj0570is@fujitsu.com, WeiLin.Chang@arm.com, lpieralisi@kernel.org, sudeep.holla@arm.com, jonathan.cameron@oss.qualcomm.com, Soby Mathew References: <20261002061507.1600269-1-suzuki.poulose@arm.com> <20261002061507.1600269-7-suzuki.poulose@arm.com> From: Suzuki K Poulose In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.9.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20261021_063554_021687_1D018F52 X-CRM114-Status: GOOD ( 34.83 ) X-Spam-Score: -4.4 (----) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" X-Spam-Status: No, score=-12.7 required=3.0 tests=BAYES_00,DKIMWL_WL_HIGH, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=ham autolearn_force=no version=4.0.1 X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on aws-us-west-2-korg-listserv-alma10-1 Hi On 21/10/2026 14:07, Kohei Enju wrote: > Hi Suzuki, > > I've tested this series and found a possible TF-RMM issue. > Please below. > > On 10/02 07:15, Suzuki K Poulose wrote: >> From: Steven Price >> >> The RMM maintains the state of all the granules in the system to make >> sure that the host is abiding by the rules. This state can be maintained >> at different granularity, per page (TRACKING_FINE) or per region >> (TRACKING_COARSE or TRACKING_INTERMEDIATE). The region size depends on the >> underlying "RMI_GRANULE_SIZE". For a "coarse"/"intermediate" region, >> all pages in the region must be of the same state, this implies we need to >> have "fine" tracking for DRAM, so that we can delegate individual pages. >> >> For now we only support a statically carved out memory for tracking >> granules for the "fine" regions. This can be extended in the future to >> allow modifying the tracking granularity and remove the need for a >> static allocation by the firmware. >> >> Similarly, the firmware may create L0 GPT entries describing the total >> address space. But if we change the "PAS" (Physical Address Space) of a >> granule, then the firmware may need to create L1 tables to track the PAS >> at a finer granularity. Linux therefore checks if the platform firmware >> manages the PAR region. i.e., the firmware is in charge of managing the >> L1 GPTs (creation and the required memory for the GPT tables - via static >> carveouts) without host intervention. Support for dynamic GPT creation by >> the host will be added later. >> >> If the firmware requires us to manage the tracking or GPT memory, >> deactivate the RMM and reclaim any memory donated at RMM activation. >> >> Apply the same checks when hotplugged memory is brought online. >> >> Reviewed-by: Jonathan Cameron >> Reviewed-by: Gavin Shan >> Reviewed-by: Catalin Marinas >> Tested-by: Gavin Shan >> Signed-off-by: Steven Price >> Co-developed-by: Suzuki K Poulose >> Signed-off-by: Suzuki K Poulose >> --- > [...] >> +/* >> + * We do not support creating L1 GPTs yet. So, make sure that all the regions >> + * are managed by the firmware. >> + */ >> +static int rmi_verify_gpt_firmware_managed(phys_addr_t start, phys_addr_t end) >> +{ >> + unsigned long l0gpt_sz; >> + unsigned long next, par_state; >> + >> + l0gpt_sz = 1UL << (30 + FIELD_GET(RMI_FEATURE_REGISTER_1_L0GPTSZ, >> + rmi_feat_reg(1))); >> + start = ALIGN_DOWN(start, l0gpt_sz); >> + end = ALIGN(end, l0gpt_sz); >> + >> + while (start < end) { >> + long ret = rmi_gpt_info(start, end, &next, &par_state); >> + >> + if (ret != RMI_SUCCESS) { >> + pr_err("RMI_GPT_INFO failed for %llx-%llx: (%ld)\n", >> + start, end, ret); >> + return -ENXIO; >> + } >> + >> + if (WARN_ON(next <= start)) >> + return -ENXIO; >> + >> + if (par_state != RMI_GPT_PAR_PLAT) { >> + pr_err("GPT for the region is not managed by firmware %llx-%lx\n", >> + start, next); >> + return -ENODEV; > > When system RAM starts at a non-L0GPTSZ-aligned address, the alignment > in rmi_verify_gpt_firmware_managed() may cause the queried L0GPT range > to include a memory hole. > > On out platform, the relevant memory layout is: > > 800c0000000-800dc3fffff : memory hole > 800dc400000-82fffffffff : System RAM > Thanks for the report. > Consequently, Linux queries the following L0GPT range: > > 800c0000000-80100000000 > > The query fails with RMI_GPT_PAR_RESERVED: > > [ 8.551855] GPT for the region is not managed by firmware 800c0000000-80100000000 > > and arm64_init_rmi() subsequently fails. > > As I understand it, smc_gpt_info() in TF-RMM checks only the beginning > of the aligned L0GPT range. Since that address is in the hole, the whole > range is reported as RMI_GPT_PAR_RESERVED, even though it contains > platform-managed System RAM. > > I believe this should be addressed in TF-RMM. Do you have any thoughts > on the expected RMI_GPT_INFO behavior in this case? I believe the RMM should report a value that represents the situation better. In this case, there is a hole, and some conventional memory areas. For the conventional memory, the RMM has to manage the GPTs. (This applies to the tf-RMM implementation of TRACKING Granule state too. It only looks at the first granule and reports the type of memory.) RMI_GPT_PAR_RESERVED is not accurate as the memory region is not reserved, unless it is reserved for firmware (in which case the memory description is wrong). I would say RMI_GPT_PAR_PLAT is accurate if the L1GPT exists, as the region covered by the L0GPT has some memory that are delegable. Otherwise it must be reported as RMI_GPT_HOST_NOT_CREATED. The information that a given memory region is not "memory" (i.e. hole) is basically TRACKING_STATE returned as RMI_MEM_CATEGORY_NONE > > As a side note, we tested this series and the v23 integration branch > with a Linux-side workaround to avoid the problem above, and we have not > observed any other major issues. Sorry for the delay in testing this > series. Thanks for the testing ! Suzuki > > Thanks, > Kohei > >> + } >> + start = next; >> + } >> + >> + return 0; >> +}