From patchwork Sun Mar 12 11:25:55 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: "Kirill A. Shutemov" X-Patchwork-Id: 13171298 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from kanga.kvack.org (kanga.kvack.org [205.233.56.17]) by smtp.lore.kernel.org (Postfix) with ESMTP id 8BFB1C7618A for ; Sun, 12 Mar 2023 11:26:39 +0000 (UTC) Received: by kanga.kvack.org (Postfix) id 019948E0006; Sun, 12 Mar 2023 07:26:38 -0400 (EDT) Received: by kanga.kvack.org (Postfix, from userid 40) id E6F168E0001; Sun, 12 Mar 2023 07:26:37 -0400 (EDT) X-Delivered-To: int-list-linux-mm@kvack.org Received: by kanga.kvack.org (Postfix, from userid 63042) id C98F38E0006; Sun, 12 Mar 2023 07:26:37 -0400 (EDT) X-Delivered-To: linux-mm@kvack.org Received: from relay.hostedemail.com (smtprelay0017.hostedemail.com [216.40.44.17]) by kanga.kvack.org (Postfix) with ESMTP id B69E18E0001 for ; Sun, 12 Mar 2023 07:26:37 -0400 (EDT) Received: from smtpin05.hostedemail.com (a10.router.float.18 [10.200.18.1]) by unirelay08.hostedemail.com (Postfix) with ESMTP id 7EC2A140415 for ; Sun, 12 Mar 2023 11:26:37 +0000 (UTC) X-FDA: 80560018434.05.7FAA5A9 Received: from mga03.intel.com (mga03.intel.com [134.134.136.65]) by imf10.hostedemail.com (Postfix) with ESMTP id 59C47C0011 for ; Sun, 12 Mar 2023 11:26:35 +0000 (UTC) Authentication-Results: imf10.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b=EWxFwP04; spf=none (imf10.hostedemail.com: domain of kirill.shutemov@linux.intel.com has no SPF policy when checking 134.134.136.65) smtp.mailfrom=kirill.shutemov@linux.intel.com; dmarc=pass (policy=none) header.from=intel.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=hostedemail.com; s=arc-20220608; t=1678620395; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-transfer-encoding:content-transfer-encoding: in-reply-to:references:dkim-signature; bh=4n3fehlqmDbWBWVgihPcSBICeCG22yU0CRWddGMV27U=; b=nPkKYJ4+btGi+fHSmxgRKE7vle3fuodw1B85TDPxpr8xvBLSq68RNAM0Qp/Cy1yEWvpfB2 i4rdm2xAt/qkhbZmAskc6ZTvsoVXkh7twoUlznNEH0UWji9eMhGqX9+/mXfoTzl6Bl5ul+ KTGLW/mxCi3czF4VpazvauhtUbYJ6Yw= ARC-Authentication-Results: i=1; imf10.hostedemail.com; dkim=pass header.d=intel.com header.s=Intel header.b=EWxFwP04; spf=none (imf10.hostedemail.com: domain of kirill.shutemov@linux.intel.com has no SPF policy when checking 134.134.136.65) smtp.mailfrom=kirill.shutemov@linux.intel.com; dmarc=pass (policy=none) header.from=intel.com ARC-Seal: i=1; s=arc-20220608; d=hostedemail.com; t=1678620395; a=rsa-sha256; cv=none; b=qUY9yxWH1QL7J6SSyCc8v79prvBxfHEvMMLkUPSBbCn9aZi/X9TDtdrRjqDzu0NFhqFVRc RXwFa4K2/EUmBjCvlGueKrf/F3/R7YIwaCh1QANLr8tGANLW7uP9Dnbf3KosBGg1f9o71I HHJpJva1eWiksoG0QLBq4Mdg6/kRrhQ= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1678620395; x=1710156395; h=from:to:cc:subject:date:message-id:mime-version: content-transfer-encoding; bh=mQHOwlRgDt6FqOy5qR8eaZ5q38UiDzAyW+c27c530ow=; b=EWxFwP04XJr0UqPZuP2Ri+hxtzeVkJm5LlGF4doTbkeuqeY2KaEdqm6w WfPdEAy4mlK+Hor2Kpu5Z6JXvyfFF84NTXHv8XSudLb1B0igDTEbhiw3m vKbeT/gkuTPnlOdjF40XepCFyZ4GcUhGg1STxuBY5kEdHsbstloaVz84n sCBeqrVxnGAFFmpaAiiQXt9BqiwhH8aSiDPlj91KcPinxsqXRx8Vbt0kB /Wf+pb3JJcibasx4iRM6SIGSvNxid9keGfgMx8PQiDesfBFySL3M8mPau Yy1UcduP1dEAdJOk/PlhKD57lWbHR/5LyyK97b4M9SF2cZFvlFmtVgcyw g==; X-IronPort-AV: E=McAfee;i="6500,9779,10646"; a="339349943" X-IronPort-AV: E=Sophos;i="5.98,254,1673942400"; d="scan'208";a="339349943" Received: from orsmga005.jf.intel.com ([10.7.209.41]) by orsmga103.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 12 Mar 2023 04:26:28 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=McAfee;i="6500,9779,10646"; a="852438017" X-IronPort-AV: E=Sophos;i="5.98,254,1673942400"; d="scan'208";a="852438017" Received: from nmoazzen-mobl1.amr.corp.intel.com (HELO box.shutemov.name) ([10.251.219.215]) by orsmga005-auth.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 12 Mar 2023 04:26:22 -0700 Received: by box.shutemov.name (Postfix, from userid 1000) id 543AF103248; Sun, 12 Mar 2023 14:26:19 +0300 (+03) From: "Kirill A. Shutemov" To: Dave Hansen , Andy Lutomirski , Peter Zijlstra Cc: x86@kernel.org, Kostya Serebryany , Andrey Ryabinin , Andrey Konovalov , Alexander Potapenko , Taras Madan , Dmitry Vyukov , "H . J . Lu" , Andi Kleen , Rick Edgecombe , Bharata B Rao , Jacob Pan , Ashok Raj , Linus Torvalds , linux-mm@kvack.org, linux-kernel@vger.kernel.org, "Kirill A. Shutemov" Subject: [PATCHv16 00/17] Linear Address Masking enabling Date: Sun, 12 Mar 2023 14:25:55 +0300 Message-Id: <20230312112612.31869-1-kirill.shutemov@linux.intel.com> X-Mailer: git-send-email 2.39.2 MIME-Version: 1.0 X-Rspam-User: X-Rspamd-Server: rspam03 X-Stat-Signature: xh6eiyq3zm7z4rw9gzqt57qw6paoxdo8 X-Rspamd-Queue-Id: 59C47C0011 X-HE-Tag: 1678620395-560840 X-HE-Meta: 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 Mj8PpsXc bO/ObIzM2O54ntAVy9h2V5dfw2z5BNuUTRl2XI/dF7S3XwQZsUp5qlI3l3cmVHheuJRp1J2i8rerDv3WctDcJL74OheLNZSmh1gjkWnbi2d+GujfDnGnO2FMnUfUnFEmdW41+0nCwe/FiLI9utnUd7g7AW1AQ6jIyGPUNvJR5jTzSZtt++CSvZ4hB5EoxQCeLVsf3gpYJYs39wnHTXGsSFk2Xr2NTKqH+u2L+Pj5s5/tQ17IV7QbEihmop9yFSaeP1AAwk3E+A+rWV9+DdLRJWc0opNytLZ2Kr9lE X-Bogosity: Ham, tests=bogofilter, spamicity=0.000000, version=1.2.4 Sender: owner-linux-mm@kvack.org Precedence: bulk X-Loop: owner-majordomo@kvack.org List-ID: Linear Address Masking[1] (LAM) modifies the checking that is applied to 64-bit linear addresses, allowing software to use of the untranslated address bits for metadata. The capability can be used for efficient address sanitizers (ASAN) implementation and for optimizations in JITs and virtual machines. The patchset brings support for LAM for userspace addresses. Only LAM_U57 at this time. Please review and consider applying. git://git.kernel.org/pub/scm/linux/kernel/git/kas/linux.git lam v16: - Add #include into fs/proc/array.c; - Whitespace fix; - Add Alexander's Tested-bys; v15: - Replace static branch in untagged_addr() with alternative; - Drop unneeded READ_ONCE(); - Acks from Peter; v14: - Rework address range check in get_user() and put_user(); - Introduce CONFIG_ADDRESS_MASKING; - Cache untag masking in per-CPU variable; - Reject LAM enabling via PTRACE_ARCH_PRCTL; - Fix locking around untagged_addr_remote(); - Fix typo in MM_CONTEXT_ conversion patch; - Fix selftest; v13: - Fix race between untagged_addr() and LAM enabling: + Do not allow to enable LAM after the process spawned the second thread; + untagged_addr() untags the address according to rules of the current process; + untagged_addr_remote() can be used for untagging addresses for foreign process. It requires mmap lock for the target process to be taken; v12: - Rebased onto tip/x86/mm; - Drop VM_WARN_ON() that may produce false-positive on race between context switch and LAM enabling; - Adjust comments explain possible race; - User READ_ONCE() in mm_lam_cr3_mask(); - Do not assume &init_mm == mm in initialize_tlbstate_and_flush(); - Ack by Andy; v11: - Move untag_mask to /proc/$PID/status; - s/SVM/SVA/g; - static inline arch_pgtable_dma_compat() instead of macros; - Replace pasid_valid() with mm_valid_pasid(); - Acks from Ashok and Jacob (forgot to apply from v9); v10: - Rebased to v6.1-rc1; - Add selftest for SVM vs LAM; v9: - Fix race between LAM enabling and check that KVM memslot address doesn't have any tags; - Reduce untagged_addr() overhead until the first LAM user; - Clarify SVM vs. LAM semantics; - Use mmap_lock to serialize LAM enabling; v8: - Drop redundant smb_mb() in prctl_enable_tagged_addr(); - Cleanup code around build_cr3(); - Fix commit messages; - Selftests updates; - Acked/Reviewed/Tested-bys from Alexander and Peter; v7: - Drop redundant smb_mb() in prctl_enable_tagged_addr(); - Cleanup code around build_cr3(); - Fix commit message; - Fix indentation; v6: - Rebased onto v6.0-rc1 - LAM_U48 excluded from the patchet. Still available in the git tree; - add ARCH_GET_MAX_TAG_BITS; - Fix build without CONFIG_DEBUG_VM; - Update comments; - Reviewed/Tested-by from Alexander; v5: - Do not use switch_mm() in enable_lam_func() - Use mb()/READ_ONCE() pair on LAM enabling; - Add self-test by Weihong Zhang; - Add comments; v4: - Fix untagged_addr() for LAM_U48; - Remove no-threads restriction on LAM enabling; - Fix mm_struct access from /proc/$PID/arch_status - Fix LAM handling in initialize_tlbstate_and_flush() - Pack tlb_state better; - Comments and commit messages; v3: - Rebased onto v5.19-rc1 - Per-process enabling; - API overhaul (again); - Avoid branches and costly computations in the fast path; - LAM_U48 is in optional patch. v2: - Rebased onto v5.18-rc1 - New arch_prctl(2)-based API - Expose status of LAM (or other thread features) in /proc/$PID/arch_status [1] ISE, Chapter 10. https://cdrdv2.intel.com/v1/dl/getContent/671368 Kirill A. Shutemov (12): x86/mm: Rework address range check in get_user() and put_user() x86: Allow atomic MM_CONTEXT flags setting x86: CPUID and CR3/CR4 flags for Linear Address Masking x86/mm: Handle LAM on context switch mm: Introduce untagged_addr_remote() x86/uaccess: Provide untagged_addr() and remove tags before address check x86/mm: Reduce untagged_addr() overhead for systems without LAM x86/mm: Provide arch_prctl() interface for LAM mm: Expose untagging mask in /proc/$PID/status iommu/sva: Replace pasid_valid() helper with mm_valid_pasid() x86/mm/iommu/sva: Make LAM and SVA mutually exclusive selftests/x86/lam: Add test cases for LAM vs thread creation Weihong Zhang (5): selftests/x86/lam: Add malloc and tag-bits test cases for linear-address masking selftests/x86/lam: Add mmap and SYSCALL test cases for linear-address masking selftests/x86/lam: Add io_uring test cases for linear-address masking selftests/x86/lam: Add inherit test cases for linear-address masking selftests/x86/lam: Add ARCH_FORCE_TAGGED_SVA test cases for linear-address masking arch/arm64/include/asm/mmu_context.h | 6 + arch/sparc/include/asm/mmu_context_64.h | 6 + arch/sparc/include/asm/uaccess_64.h | 2 + arch/x86/Kconfig | 11 + arch/x86/entry/vsyscall/vsyscall_64.c | 2 +- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/disabled-features.h | 8 +- arch/x86/include/asm/mmu.h | 18 +- arch/x86/include/asm/mmu_context.h | 49 +- arch/x86/include/asm/processor-flags.h | 2 + arch/x86/include/asm/tlbflush.h | 48 +- arch/x86/include/asm/uaccess.h | 58 +- arch/x86/include/uapi/asm/prctl.h | 5 + arch/x86/include/uapi/asm/processor-flags.h | 6 + arch/x86/kernel/process.c | 6 + arch/x86/kernel/process_64.c | 66 +- arch/x86/kernel/traps.c | 6 +- arch/x86/lib/getuser.S | 83 +- arch/x86/lib/putuser.S | 54 +- arch/x86/mm/init.c | 5 + arch/x86/mm/tlb.c | 53 +- drivers/iommu/iommu-sva.c | 8 +- drivers/vfio/vfio_iommu_type1.c | 2 +- fs/proc/array.c | 7 + fs/proc/task_mmu.c | 9 +- include/linux/ioasid.h | 9 - include/linux/mm.h | 11 - include/linux/mmu_context.h | 14 + include/linux/sched/mm.h | 8 +- include/linux/uaccess.h | 22 + mm/gup.c | 4 +- mm/madvise.c | 5 +- mm/migrate.c | 11 +- tools/testing/selftests/x86/Makefile | 2 +- tools/testing/selftests/x86/lam.c | 1241 +++++++++++++++++++ 35 files changed, 1699 insertions(+), 149 deletions(-) create mode 100644 tools/testing/selftests/x86/lam.c