On 3/29/24 01:03, Eric Biggers wrote: > +static const struct x86_cpu_id zmm_exclusion_list[] = { > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_SKYLAKE_X }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_ICELAKE_X }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_ICELAKE_D }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_ICELAKE }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_ICELAKE_L }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_ICELAKE_NNPI }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_TIGERLAKE_L }, > + { .vendor = X86_VENDOR_INTEL, .family = 6, .model = INTEL_FAM6_TIGERLAKE }, > + /* Allow Rocket Lake and later, and Sapphire Rapids and later. */ > + /* Also allow AMD CPUs (starting with Zen 4, the first with AVX-512). */ > + {}, > +}; A hard-coded model/family exclusion list is not great. It'll break when running in guests on newer CPUs that fake any of these models. Some folks will also surely disagree with the kernel policy implemented here. Is there no way to implement this other than a hard-coded kernel policy?