On Fri, Jul 30, 2021 at 11:08 AM Sean Christopherson [off-list ref] wrote:

On Thu, Jul 29, 2021, Oliver Upton wrote:

quoted

Refactor kvm_synchronize_tsc to make a new function that allows callers
to specify TSC parameters (offset, value, nanoseconds, etc.) explicitly
for the sake of participating in TSC synchronization.

This changes the locking semantics around TSC writes.

"refactor" and "changes the locking semantics" are somewhat contradictory.  The
correct way to do this is to first change the locking semantics, then extract the
helper you want.  That makes review and archaeology easier, and isolates the
locking change in case it isn't so safe after all.

Indeed, it was mere laziness doing so :)

quoted

Writes to the TSC will now take the pvclock gtod lock while holding the tsc
write lock, whereas before these locks were disjoint.

Reviewed-by: David Matlack <dmatlack@google.com>
Signed-off-by: Oliver Upton <redacted>
---
+/*
+ * Infers attempts to synchronize the guest's tsc from host writes. Sets the
+ * offset for the vcpu and tracks the TSC matching generation that the vcpu
+ * participates in.
+ *
+ * Must hold kvm->arch.tsc_write_lock to call this function.

Drop this blurb, lockdep assertions exist for a reason :-)

Ack.

quoted

+ */
+static void __kvm_synchronize_tsc(struct kvm_vcpu *vcpu, u64 offset, u64 tsc,
+                               u64 ns, bool matched)
+{
+     struct kvm *kvm = vcpu->kvm;
+     bool already_matched;

Eww, not your code, but "matched" and "already_matched" are not helpful names,
e.g. they don't provide a clue as to _what_ matched, and thus don't explain why
there are two separate variables.  And I would expect an "already" variant to
come in from the caller, not the other way 'round.

  matched         => freq_matched
  already_matched => gen_matched

Yeah, everything this series touches is a bit messy. I greedily
avoided the pile of cleanups that are needed, but alas...

quoted

+     spin_lock_irqsave(&kvm->arch.pvclock_gtod_sync_lock, flags);

I believe this can be spin_lock(), since AFAICT the caller _must_ disable IRQs
when taking tsc_write_lock, i.e. we know IRQs are disabled at this point.

Definitely.

quoted

+     if (!matched) {
+             /*
+              * We split periods of matched TSC writes into generations.
+              * For each generation, we track the original measured
+              * nanosecond time, offset, and write, so if TSCs are in
+              * sync, we can match exact offset, and if not, we can match
+              * exact software computation in compute_guest_tsc()
+              *
+              * These values are tracked in kvm->arch.cur_xxx variables.
+              */
+             kvm->arch.nr_vcpus_matched_tsc = 0;
+             kvm->arch.cur_tsc_generation++;
+             kvm->arch.cur_tsc_nsec = ns;
+             kvm->arch.cur_tsc_write = tsc;
+             kvm->arch.cur_tsc_offset = offset;

IMO, adjusting kvm->arch.cur_tsc_* belongs outside of pvclock_gtod_sync_lock.
Based on the existing code, it is protected by tsc_write_lock.  I don't care
about the extra work while holding pvclock_gtod_sync_lock, but it's very confusing
to see code that reads variables outside of a lock, then take a lock and write
those same variables without first rechecking.

quoted

+             matched = false;

What's the point of clearing "matched"?  It's already false...

None, besides just yanking the old chunk of code :)

quoted

+     } else if (!already_matched) {
+             kvm->arch.nr_vcpus_matched_tsc++;
+     }
+
+     kvm_track_tsc_matching(vcpu);
+     spin_unlock_irqrestore(&kvm->arch.pvclock_gtod_sync_lock, flags);
+}
+

--
Thanks,
Oliver

_______________________________________________
linux-arm-kernel mailing list
linux-arm-kernel@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/linux-arm-kernel