[Oh, I got distracted and sent without finishing ...] 2016-11-03 19:29+0100, Radim Krčmář: > 2016-11-03 19:18+0100, Paolo Bonzini: >> On 03/11/2016 19:07, Radim Krčmář wrote: >>> I think a bug is likely for hypervisors that don't enable >>> PIN_BASED_EXT_INTR_MASK. The bug would trigger when >>> kvm_cpu_has_interrupt() in vmx_check_nested_events() in >>> kvm_arch_vcpu_runnable() queues the interrupt ... >>> but I didn't see how this would have caused a problem. :) >> >> Ironically, _not_ enabling PIN_BASED_EXT_INTR_MASK and not using HALT >> activity state is the only case that passes of the four that vmx.flat tests. > > Heh, the behavior is nice > > PASS: direct interrupt + hlt > FAIL: intercepted interrupt + hlt > FAIL: direct interrupt + activity state hlt > FAIL: intercepted interrupt + activity state hlt but the 3rd one is racy, so I sometimes also get PASS: direct interrupt + hlt FAIL: intercepted interrupt + hlt PASS: direct interrupt + activity state hlt FAIL: intercepted interrupt + activity state hlt 1st and 3rd have disabled extint and 2nd and 4th enabled ... but that would mean that we a bug in a path that gets called in both cases, so calling vmx_hwapic_irr_update() isn't a problem ... and suddenly the bug becomes obvious: > diff --git a/arch/x86/kvm/vmx.c b/arch/x86/kvm/vmx.c > +static void vmx_sync_pir_to_irr(struct kvm_vcpu *vcpu) > +{ > + struct vcpu_vmx *vmx = to_vmx(vcpu); > + int max_irr; > + > + if (!pi_test_on(&vmx->pi_desc)) We don't call vmx_hwapic_irr_update() when returning early. > + return; > + > + pi_clear_on(&vmx->pi_desc); > + max_irr = kvm_apic_update_irr(vcpu, vmx->pi_desc.pir); > + vmx_hwapic_irr_update(vcpu, max_irr); > +} > + > diff --git a/arch/x86/kvm/x86.c b/arch/x86/kvm/x86.c > @@ -6611,8 +6611,7 @@ static int vcpu_enter_guest(struct kvm_vcpu *vcpu) > * virtual interrupt delivery. > */ > if (vcpu->arch.apicv_active) > - kvm_x86_ops->hwapic_irr_update(vcpu, > - kvm_lapic_find_highest_irr(vcpu)); > + kvm_x86_ops->sync_pir_to_irr(vcpu); > } -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html