If these CPUID leaves are implemented, the EDX output is always the x2APIC ID, regardless of the ECX input. Furthermore, the low byte of the ECX output is always identical to the low byte of the ECX input. KVM's CPUID emulation doesn't report the correct ECX and EDX outputs when the ECX input is greater than the first subleaf for which the "level type" is zero. This is probably only significant in the case of the x2APIC ID, which should be the result of CPUID(EAX=0BH):EDX or CPUID(EAX=1FH):EDX, without even setting a particular ECX input value. Create a "wildcard" kvm_cpuid_entry2 for leaves 0BH and 1FH in response to the KVM_GET_SUPPORTED_CPUID ioctl. This entry does not have the KVM_CPUID_FLAG_SIGNIFCANT_INDEX flag, so it matches all subleaves for which there isn't a prior explicit index match. Add a new KVM_CPUID flag that is only applicable to leaves 0BH and 1FH: KVM_CPUID_FLAG_CL_IS_PASSTHROUGH. When KVM's CPUID emulation encounters this flag, it will fix up ECX[7:0] in the CPUID output. Add this flag to the aforementioned "wildcard" kvm_cpuid_entry2. Note that userspace is still responsible for setting EDX to the x2APIC ID of the vCPU in each of these structures, *including* the wildcard. Qemu doesn't pass the flags from KVM_GET_SUPPORTED_CPUID to KVM_SET_CPUID2, so it will have to be modified to take advantage of these changes. Note that passing the new flag to older kernels will have no effect. Unfortunately, the new flag bit was not previously reserved, so it is possible that a userspace agent that already sets this bit will be unhappy with the new behavior. Technically, I suppose, this should be implemented as a new set of ioctls. Posting as an RFC to get comments on the API breakage. Fixes: 0771671749b59a ("KVM: Enhance guest cpuid management") Fixes: a87f2d3a6eadab ("KVM: x86: Add Intel CPUID.1F cpuid emulation support") Signed-off-by: Jim Mattson <jmattson@xxxxxxxxxx> Reviewed-by: Steve Rutherford <srutherford@xxxxxxxxxx> Reviewed-by: Jacob Xu <jacobhxu@xxxxxxxxxx> Reviewed-by: Peter Shier <pshier@xxxxxxxxxx> Change-Id: I6b422427f78b530106af3f929518363895367e25 --- Documentation/virt/kvm/api.txt | 6 +++++ arch/x86/include/uapi/asm/kvm.h | 1 + arch/x86/kvm/cpuid.c | 39 +++++++++++++++++++++++++++------ 3 files changed, 39 insertions(+), 7 deletions(-) diff --git a/Documentation/virt/kvm/api.txt b/Documentation/virt/kvm/api.txt index 2d067767b6170..be5cc42ad35f4 100644 --- a/Documentation/virt/kvm/api.txt +++ b/Documentation/virt/kvm/api.txt @@ -1396,6 +1396,7 @@ struct kvm_cpuid2 { #define KVM_CPUID_FLAG_SIGNIFCANT_INDEX BIT(0) #define KVM_CPUID_FLAG_STATEFUL_FUNC BIT(1) #define KVM_CPUID_FLAG_STATE_READ_NEXT BIT(2) +#define KVM_CPUID_FLAG_CL_IS_PASSTHROUGH BIT(3) struct kvm_cpuid_entry2 { __u32 function; @@ -1447,6 +1448,8 @@ emulate them efficiently. The fields in each entry are defined as follows: KVM_CPUID_FLAG_STATE_READ_NEXT: for KVM_CPUID_FLAG_STATEFUL_FUNC entries, set if this entry is the first entry to be read by a cpu + KVM_CPUID_FLAG_CL_IS_PASSTHROUGH: + If the output value of ECX[7:0] matches the input value of ECX[7:0] eax, ebx, ecx, edx: the values returned by the cpuid instruction for this function/index combination @@ -2992,6 +2995,7 @@ The member 'flags' is used for passing flags from userspace. #define KVM_CPUID_FLAG_SIGNIFCANT_INDEX BIT(0) #define KVM_CPUID_FLAG_STATEFUL_FUNC BIT(1) #define KVM_CPUID_FLAG_STATE_READ_NEXT BIT(2) +#define KVM_CPUID_FLAG_CL_IS_PASSTHROUGH BIT(3) struct kvm_cpuid_entry2 { __u32 function; @@ -3040,6 +3044,8 @@ The fields in each entry are defined as follows: KVM_CPUID_FLAG_STATE_READ_NEXT: for KVM_CPUID_FLAG_STATEFUL_FUNC entries, set if this entry is the first entry to be read by a cpu + KVM_CPUID_FLAG_CL_IS_PASSTHROUGH: + If the output value of ECX[7:0] matches the input value of ECX[7:0] eax, ebx, ecx, edx: the values returned by the cpuid instruction for this function/index combination diff --git a/arch/x86/include/uapi/asm/kvm.h b/arch/x86/include/uapi/asm/kvm.h index 503d3f42da167..3b67d21123946 100644 --- a/arch/x86/include/uapi/asm/kvm.h +++ b/arch/x86/include/uapi/asm/kvm.h @@ -223,6 +223,7 @@ struct kvm_cpuid_entry2 { #define KVM_CPUID_FLAG_SIGNIFCANT_INDEX (1 << 0) #define KVM_CPUID_FLAG_STATEFUL_FUNC (1 << 1) #define KVM_CPUID_FLAG_STATE_READ_NEXT (1 << 2) +#define KVM_CPUID_FLAG_CL_IS_PASSTHROUGH (1 << 3) /* for KVM_SET_CPUID2 */ struct kvm_cpuid2 { diff --git a/arch/x86/kvm/cpuid.c b/arch/x86/kvm/cpuid.c index e7d25f4364664..280a796159cb2 100644 --- a/arch/x86/kvm/cpuid.c +++ b/arch/x86/kvm/cpuid.c @@ -612,19 +612,41 @@ static inline int __do_cpuid_func(struct kvm_cpuid_entry2 *entry, u32 function, */ case 0x1f: case 0xb: { - int i, level_type; + int i; - /* read more entries until level_type is zero */ - for (i = 1; ; ++i) { + /* + * We filled in entry[0] for CPUID(EAX=<function>, + * ECX=00H) above. If its level type (ECX[15:8]) is + * zero, then the leaf is unimplemented, and we're + * done. Otherwise, continue to populate entries + * until the level type (ECX[15:8]) of the previously + * added entry is zero. + */ + for (i = 1; entry[i - 1].ecx & 0xff00; ++i) { if (*nent >= maxnent) goto out; - level_type = entry[i - 1].ecx & 0xff00; - if (!level_type) - break; do_host_cpuid(&entry[i], function, i); ++*nent; } + + if (i > 1) { + /* + * If this leaf has multiple entries, treat + * the final entry as a "wildcard." Clear the + * "significant index" flag so that the index + * will be ignored when we later look for an + * entry that matches a CPUID + * invocation. Since this entry will now match + * CPUID(EAX=<function>, ECX=<index>) for any + * <index> >= (i - 1), set the "CL + * passthrough" flag to ensure that ECX[7:0] + * will be set to (<index> & 0xff), per the SDM. + */ + entry[i - 1].flags &= ~KVM_CPUID_FLAG_SIGNIFCANT_INDEX; + entry[i - 1].flags |= KVM_CPUID_FLAG_CL_IS_PASSTHROUGH; + } + break; } case 0xd: { @@ -1001,8 +1023,11 @@ bool kvm_cpuid(struct kvm_vcpu *vcpu, u32 *eax, u32 *ebx, *ebx = best->ebx; *ecx = best->ecx; *edx = best->edx; - } else + if (best->flags & KVM_CPUID_FLAG_CL_IS_PASSTHROUGH) + *ecx = (*ecx & ~0xff) | (index & 0xff); + } else { *eax = *ebx = *ecx = *edx = 0; + } trace_kvm_cpuid(function, *eax, *ebx, *ecx, *edx, entry_found); return entry_found; } -- 2.23.0.237.gc6a4ce50a0-goog