[PATCH v2 17/22] KVM: arm64: Introduce kvm_pgtable_stage2_table_install()
Vincent Donnefort
vdonnefort at google.com
Fri Sep 11 06:50:48 PDT 2026
The existing kvm_pgtable_stage2_split() is unfit for pKVM: it relies on
kvm_mmu_memory_cache which pKVM doesn't use and has no easy way to
handle pKVM-specific annotations.
Add the pgtable helper kvm_pgtable_stage2_table_install() so pKVM can
handle block splitting in mem_protect.c. That helper can take a table
either populated with kvm_pgtable_stage2_create_unlinked() or one filled
with annotations.
Signed-off-by: Vincent Donnefort <vdonnefort at google.com>
---
arch/arm64/include/asm/kvm_pgtable.h | 12 ++++
arch/arm64/kvm/hyp/pgtable.c | 85 ++++++++++++++++++++++++----
2 files changed, 86 insertions(+), 11 deletions(-)
diff --git a/arch/arm64/include/asm/kvm_pgtable.h b/arch/arm64/include/asm/kvm_pgtable.h
index 41a8687938eb..24d6e05d8050 100644
--- a/arch/arm64/include/asm/kvm_pgtable.h
+++ b/arch/arm64/include/asm/kvm_pgtable.h
@@ -827,6 +827,18 @@ int kvm_pgtable_stage2_flush(struct kvm_pgtable *pgt, u64 addr, u64 size);
int kvm_pgtable_stage2_split(struct kvm_pgtable *pgt, u64 addr, u64 size,
struct kvm_mmu_memory_cache *mc);
+/**
+ * kvm_pgtable_stage2_table_install() - Replace a stage-2 leaf entry with a table.
+ * @pgt: Page-table structure initialised by kvm_pgtable_stage2_create_unlinked().
+ * @addr: Address identifying the leaf entry to replace.
+ * @size: Size of the block to replace.
+ * @tab: Pointer to the pre-allocated table to install.
+ *
+ * Return: 0 on success, negative error code on failure.
+ */
+int kvm_pgtable_stage2_table_install(struct kvm_pgtable *pgt, u64 addr, u64 size,
+ kvm_pte_t *table);
+
/**
* kvm_pgtable_walk() - Walk a page-table.
* @pgt: Page-table structure initialised by kvm_pgtable_*_init().
diff --git a/arch/arm64/kvm/hyp/pgtable.c b/arch/arm64/kvm/hyp/pgtable.c
index c4ebae0544d4..6c85af51002d 100644
--- a/arch/arm64/kvm/hyp/pgtable.c
+++ b/arch/arm64/kvm/hyp/pgtable.c
@@ -1533,18 +1533,38 @@ static int stage2_block_get_nr_page_tables(s8 level)
};
}
+static int stage2_table_install(const struct kvm_pgtable_visit_ctx *ctx,
+ struct kvm_s2_mmu *mmu,
+ kvm_pte_t *table)
+{
+ kvm_pte_t new;
+
+ if (!stage2_try_break_pte(ctx, mmu))
+ return -EAGAIN;
+
+ /*
+ * Note, the contents of the page table are guaranteed to be made
+ * visible before the new PTE is assigned because stage2_make_pte()
+ * writes the PTE using smp_store_release().
+ */
+ new = kvm_init_table_pte(table, ctx->mm_ops);
+ stage2_make_pte(ctx, new);
+ return 0;
+}
+
static int stage2_split_walker(const struct kvm_pgtable_visit_ctx *ctx,
enum kvm_pgtable_walk_flags visit)
{
struct kvm_pgtable_mm_ops *mm_ops = ctx->mm_ops;
struct kvm_mmu_memory_cache *mc = ctx->arg;
- struct kvm_s2_mmu *mmu;
- kvm_pte_t pte = ctx->old, new, *childp;
+ kvm_pte_t pte = ctx->old, *childp;
enum kvm_pgtable_prot prot;
+ struct kvm_s2_mmu *mmu;
s8 level = ctx->level;
bool force_pte;
int nr_pages;
u64 phys;
+ int ret;
/* No huge-pages exist at the last level */
if (level == KVM_PGTABLE_LAST_LEVEL)
@@ -1586,18 +1606,12 @@ static int stage2_split_walker(const struct kvm_pgtable_visit_ctx *ctx,
if (IS_ERR(childp))
return PTR_ERR(childp);
- if (!stage2_try_break_pte(ctx, mmu)) {
+ ret = stage2_table_install(ctx, mmu, childp);
+ if (ret) {
kvm_pgtable_stage2_free_unlinked(mm_ops, childp, level);
- return -EAGAIN;
+ return ret;
}
- /*
- * Note, the contents of the page table are guaranteed to be made
- * visible before the new PTE is assigned because stage2_make_pte()
- * writes the PTE using smp_store_release().
- */
- new = kvm_init_table_pte(childp, mm_ops);
- stage2_make_pte(ctx, new);
return 0;
}
@@ -1616,6 +1630,55 @@ int kvm_pgtable_stage2_split(struct kvm_pgtable *pgt, u64 addr, u64 size,
return ret;
}
+struct stage2_table_install_data {
+ struct kvm_s2_mmu *mmu;
+ kvm_pte_t *table;
+};
+
+static int stage2_table_install_walker(const struct kvm_pgtable_visit_ctx *ctx,
+ enum kvm_pgtable_walk_flags visit)
+{
+ struct stage2_table_install_data *data = ctx->arg;
+ struct kvm_s2_mmu *mmu = data->mmu;
+ kvm_pte_t *childp = data->table;
+
+ if (ctx->level == KVM_PGTABLE_LAST_LEVEL)
+ return -EINVAL;
+
+ if (ctx->addr != ctx->start ||
+ ctx->end != ctx->addr + kvm_granule_size(ctx->level))
+ return -EINVAL;
+
+ /*
+ * On success, return a positive value to prevent descending into the
+ * new table.
+ */
+ return stage2_table_install(ctx, mmu, childp) ?: 1;
+}
+
+int kvm_pgtable_stage2_table_install(struct kvm_pgtable *pgt, u64 addr, u64 size, kvm_pte_t *table)
+{
+ struct stage2_table_install_data data = {
+ .mmu = pgt->mmu,
+ .table = table,
+ };
+ struct kvm_pgtable_walker walker = {
+ .cb = stage2_table_install_walker,
+ .flags = KVM_PGTABLE_WALK_LEAF,
+ .arg = &data,
+ };
+ int ret;
+
+ ret = kvm_pgtable_walk(pgt, addr, size, &walker);
+ if (ret < 0)
+ return ret;
+ if (!ret)
+ return -EINVAL;
+
+ dsb(ishst);
+ return 0;
+}
+
int __kvm_pgtable_stage2_init(struct kvm_pgtable *pgt, struct kvm_s2_mmu *mmu,
struct kvm_pgtable_mm_ops *mm_ops,
enum kvm_pgtable_stage2_flags flags,
--
2.55.0.1007.g17ff1f9808-goog
More information about the linux-arm-kernel
mailing list