On 9/26/2021 5:39 AM, Thomas Gleixner wrote:
On Sat, Sep 25 2021 at 15:30, Thomas Gleixner wrote:
On Fri, Sep 24 2021 at 01:07, Thomas Gleixner wrote:
The obvious question is: What is the value of clearing UINV?
Absolutely none. That notification vector cannot be used for anything
else, so why would the OS be interested to see it ever? This is about
user space interupts, right?
UINV should be set _ONCE_ when CR4.UINTR is enabled and not be touched
by XSAVES/XRSTORS at all. Any delivery of this vector to the OS should
be considered a hardware bug.
After decoding the documentation (sigh) and staring at the implications of
keeping UINV armed, I can see the point vs. the UPID lifetime issue when
a task gets scheduled out and migrated to a different CPU.
I think you got it right. Here is my understanding of this.
The User-interrupt notification processing moves all the pending
interrupts from UPID.PIR to the UIRR.
As you mentioned below, XSTATE is saved due to several reasons which
saves the UIRR into memory. UIRR should no longer be updated after it
has been saved.
XSAVES clears UINV is to stop detecting additional interrupts in the
UIRR after it has been saved.
Not the most pretty solution, but as there needs to be some invalidation
which needs to be undone on return to user space it probably does not
matter much.
As the whole thing is tightly coupled to XSAVES/RSTORS we need to
integrate it into that machinery and not pretend that it's something
half independent.
I agree. Thank you for pointing this out.
That means we have to handle the setting of the SN bit in UPID whenever
XSTATE is saved either during context switch, when the kernel uses the
FPU or in other places (signals, fpu_clone ...). They all end up in
save_fpregs_to_fpstate() so that might be the place to look at.
Yes. The current code doesn't do this. SN bit should be set whenever
UINTR XSTATE is saved.
While talking about that: fpu_clone() has to invalidate the UINTR state
in the clone's xstate after the memcpy() or xsaves() operation.
Also the restore portion on the way back to user space has to be coupled
more tightly:
arch_exit_to_user_mode_prepare()
{
...
if (unlikely(ti_work & _TIF_UPID))
uintr_restore_upid(ti_work & _TIF_NEED_FPU_LOAD);
if (unlikely(ti_work & _TIF_NEED_FPU_LOAD))
switch_fpu_return();
}
I am assuming _TIF_UPID would be set everytime SN is set and XSTATE is
saved.
upid_set_ndst(upid)
{
apicid = __this_cpu_read(x86_cpu_to_apicid);
if (x2apic_enabled())
upid->ndst.x2apic = apicid;
else
upid->ndst.apic = apicid;
}
uintr_restore_upid(bool xrstors_pending)
{
clear_thread_flag(TIF_UPID);
// Update destination
upid_set_ndst(upid);
// Do we need something stronger here?
barrier();
clear_bit(SN, upid->status);
// Any SENDUIPI after this point sends to this CPU
// Any bit which was set in upid->pir after SN was set
// and/or UINV was cleared by XSAVES up to the point
// where SN was cleared above is not reflected in UIRR.
// As this runs with interrupts disabled the current state
// of upid->pir can be read and used for restore. A SENDUIPI
// which sets a bit in upid->pir after that read will send
// the notification vector which is going to be handled once
// the task reenables interrupts on return to user space.
// If the SENDUIPI set the bit before the read then the
// notification vector handling will just observe the same
// PIR state.
// Needs to be a locked access as there might be a
// concurrent SENDUIPI modiying it.
pir = read_locked(upid->pir);
if (xrstors_pending)) {
// Update the saved xstate for xrstors
current->xstate.uintr.uinv = UINTR_NOTIFICATION_VECTOR;
XSAVES saves the UINV value into the XSTATE buffer. I am not sure if we
need this again. Is it because it could have been overwritten by calling
XSAVES twice?
current->xstate.uintr.uirr = pir;
I believe PIR should be ORed. There could be some bits already set in
the UIRR.
Also, shouldn't UPID->PIR be cleared? If not, we would detect these
interrupts all over again during the next ring transition.
} else {
// Manually restore UIRR and UINV
wrmsrl(IA32_UINTR_RR, pir);
I believe read-modify-write here as well.
misc.val64 = 0;
misc.uittsz = current->uintr->uittsz;
misc.uinv = UINTR_NOTIFICATION_VECTOR;
wrmsrl(IA32_UINTR_MISC, misc.val64);
Thanks! This helps reduce the additional MSR read.
}
}
That's how I deciphered the documentation and I don't think this is far
from reality, but I might be wrong as usual.
Hmm?
Thank you for the simplification. This is very helpful.
Sohil
