From patchwork Wed Dec 14 23:21:35 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Brett Creeley X-Patchwork-Id: 13073692 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id B8C46C001B2 for ; Wed, 14 Dec 2022 23:24:46 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229863AbiLNXYo (ORCPT ); Wed, 14 Dec 2022 18:24:44 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:53264 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230002AbiLNXYC (ORCPT ); Wed, 14 Dec 2022 18:24:02 -0500 Received: from NAM11-CO1-obe.outbound.protection.outlook.com (mail-co1nam11on2069.outbound.protection.outlook.com [40.107.220.69]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id D6F6E53EC9; Wed, 14 Dec 2022 15:22:26 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CY/nJyR0Y6oZHW1V+QuZvdrAsT4xebWcsjJ9pVqS9NlE5xYlrvAbpoaQRgqUKfKV1lnoJtqw/jZxpT3WUl2zrWyJiIV3+Jp89xdiAjFvZ7F+KM8yoZmUXmkD2x98U5B7/nUiAcpW93yt3PfmqO1kNuZRximN5CFno0yvOSGlzJ7J+uV44/vFTRi22Jsorf+P56V3CjxjxMmJGe09QOJFzTSrtzIJsbLKQWSrbyqRfQNTy2qC/Iol6ASOfjyf7P0mDp0nvHmIl3j05FWY7jCVN2kYz6uW8UxTBp9wRpRzin8ZSje88h+Tl7y9P8kdb4382ErDdxASqiraa0EFWUyXlA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=TjAevSPb0jqUbcx+kcUGPDy0fflqL4/0ZvUoh8FCSbo=; b=KCZNqqe7aw8cBLzgSWnp0gdwe67G5Uoc6titfzn3i9WdcWESVeFLdUxUbiSiTGcp6h5WE6EcOIi/nD9FusTOaVWWcfqgpwMGfNho2ond3LzZVo+QXLx8f9gDzavVFx3cEXgaDWmoNXikYKzosoRFuoLiPNc5pNPutv47MGjte8SYnf75e4ve5K3Saa5+d7TiSG3fWX1kBfD0MiRSJ+qasnBMxwpgIiq20O1EJXWscyJnLZfCds6cQGNEdV+ntCTkMydtbnY/jfQ/IWQlMQF7EuMy3plsAVAA+J1Pv7Dvaw3ZmtY/3U8gVPjZA6yC5Fk3QUTZDLeyr/hRPy8ZmJ3m9A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=vger.kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TjAevSPb0jqUbcx+kcUGPDy0fflqL4/0ZvUoh8FCSbo=; b=e2Ziyp4LwJx2QbQ/DjLz6vx/eHaXqiNxIi5vXdyHEPQ1l0ekb56icybCsfnHCyj3ol0yVAa62e7A1SjELo8HXAnyPjZXOEKTuvGqGC0nSAl+vZOhBysuEckIxIvLpcSbrvm5usMdGRgVx8T2E7UU4AzF6oVFEtRZ3NGvEREaZpg= Received: from BN9PR03CA0645.namprd03.prod.outlook.com (2603:10b6:408:13b::20) by PH8PR12MB6940.namprd12.prod.outlook.com (2603:10b6:510:1bf::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5880.19; Wed, 14 Dec 2022 23:22:05 +0000 Received: from BN8NAM11FT009.eop-nam11.prod.protection.outlook.com (2603:10b6:408:13b:cafe::ae) by BN9PR03CA0645.outlook.office365.com (2603:10b6:408:13b::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5924.11 via Frontend Transport; Wed, 14 Dec 2022 23:22:05 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=SATLEXMB04.amd.com; pr=C Received: from SATLEXMB04.amd.com (165.204.84.17) by BN8NAM11FT009.mail.protection.outlook.com (10.13.176.65) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.20.5924.12 via Frontend Transport; Wed, 14 Dec 2022 23:22:05 +0000 Received: from driver-dev1.pensando.io (10.180.168.240) by SATLEXMB04.amd.com (10.181.40.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2375.34; Wed, 14 Dec 2022 17:22:03 -0600 From: Brett Creeley To: , , , , , , , CC: , , Brett Creeley Subject: [RFC PATCH v2 vfio 6/7] vfio/pds: Add support for firmware recovery Date: Wed, 14 Dec 2022 15:21:35 -0800 Message-ID: <20221214232136.64220-7-brett.creeley@amd.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20221214232136.64220-1-brett.creeley@amd.com> References: <20221214232136.64220-1-brett.creeley@amd.com> MIME-Version: 1.0 X-Originating-IP: [10.180.168.240] X-ClientProxiedBy: SATLEXMB04.amd.com (10.181.40.145) To SATLEXMB04.amd.com (10.181.40.145) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BN8NAM11FT009:EE_|PH8PR12MB6940:EE_ X-MS-Office365-Filtering-Correlation-Id: b3d34983-6470-43e0-2213-08dade2a038a X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:CA;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:SATLEXMB04.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230022)(4636009)(346002)(396003)(136003)(376002)(39860400002)(451199015)(36840700001)(40470700004)(46966006)(4326008)(8936002)(40480700001)(41300700001)(70586007)(316002)(86362001)(54906003)(5660300002)(110136005)(70206006)(8676002)(83380400001)(356005)(336012)(44832011)(478600001)(82740400003)(2906002)(81166007)(186003)(1076003)(16526019)(6666004)(36756003)(47076005)(26005)(426003)(2616005)(36860700001)(82310400005)(40460700003)(36900700001);DIR:OUT;SFP:1101; X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Dec 2022 23:22:05.5254 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: b3d34983-6470-43e0-2213-08dade2a038a X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[SATLEXMB04.amd.com] X-MS-Exchange-CrossTenant-AuthSource: BN8NAM11FT009.eop-nam11.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR12MB6940 Precedence: bulk List-ID: X-Mailing-List: kvm@vger.kernel.org It's possible that the device firmware crashes and is able to recover due to some configuration and/or other issue. If a live migration is in progress while the firmware crashes, the live migration will fail. However, the VF PCI device should still be functional post crash recovery and subsequent migrations should go through as expected. When the pds_core device notices that firmware crashes it sends an event to all its client drivers over auxiliary bus. When the pds_vfio driver receives this event while migration is in progress it will request a deferred reset on the next migration state transition. This state transition will report failure as well as any subsequent state transition requests from the VMM/VFIO. Based on uapi/vfio.h the only way out of VFIO_DEVICE_STATE_ERROR is by issuing VFIO_DEVICE_RESET. Once this reset is done, the migration state will be reset to VFIO_DEVICE_STATE_RUNNING and migration can be performed. If the event is received while no migration is in progress (i.e. the VM is in normal operating mode), then no actions are taken and the migration state remains VFIO_DEVICE_STATE_RUNNING. Signed-off-by: Brett Creeley Signed-off-by: Shannon Nelson --- drivers/vfio/pci/pds/aux_drv.c | 61 +++++++++++++++++++++++++++++++++ drivers/vfio/pci/pds/aux_drv.h | 1 + drivers/vfio/pci/pds/vfio_dev.c | 34 ++++++++++++++++-- drivers/vfio/pci/pds/vfio_dev.h | 4 +++ 4 files changed, 98 insertions(+), 2 deletions(-) diff --git a/drivers/vfio/pci/pds/aux_drv.c b/drivers/vfio/pci/pds/aux_drv.c index 59b43075e85f..0ef78466f3d1 100644 --- a/drivers/vfio/pci/pds/aux_drv.c +++ b/drivers/vfio/pci/pds/aux_drv.c @@ -21,6 +21,46 @@ struct auxiliary_device_id pds_vfio_aux_id_table[] = { {}, }; +static void +pds_vfio_recovery_work(struct work_struct *work) +{ + struct pds_vfio_aux *vfio_aux = + container_of(work, struct pds_vfio_aux, work); + struct pds_vfio_pci_device *pds_vfio = vfio_aux->pds_vfio; + bool deferred_reset_needed = false; + + /* Documentation states that the kernel migration driver must not + * generate asynchronous device state transitions outside of + * manipulation by the user or the VFIO_DEVICE_RESET ioctl. + * + * Since recovery is an asynchronous event received from the device, + * initiate a deferred reset. Only issue the deferred reset if a + * migration is in progress, which will cause the next step of the + * migration to fail. Also, if the device is in a state that will + * be set to VFIO_DEVICE_STATE_RUNNING on the next action (i.e. VM is + * shutdown and device is in VFIO_DEVICE_STATE_STOP) as that will clear + * the VFIO_DEVICE_STATE_ERROR when the VM starts back up. + */ + mutex_lock(&pds_vfio->state_mutex); + if ((pds_vfio->state != VFIO_DEVICE_STATE_RUNNING && + pds_vfio->state != VFIO_DEVICE_STATE_ERROR) || + (pds_vfio->state == VFIO_DEVICE_STATE_RUNNING && + pds_vfio_dirty_is_enabled(pds_vfio))) + deferred_reset_needed = true; + mutex_unlock(&pds_vfio->state_mutex); + + /* On the next user initiated state transition, the device will + * transition to the VFIO_DEVICE_STATE_ERROR. At this point it's the user's + * responsibility to reset the device. + * + * If a VFIO_DEVICE_RESET is requested post recovery and before the next + * state transition, then the deferred reset state will be set to + * VFIO_DEVICE_STATE_RUNNING. + */ + if (deferred_reset_needed) + pds_vfio_deferred_reset(pds_vfio, VFIO_DEVICE_STATE_ERROR); +} + static void pds_vfio_aux_notify_handler(struct pds_auxiliary_dev *padev, union pds_core_notifyq_comp *event) @@ -29,6 +69,23 @@ pds_vfio_aux_notify_handler(struct pds_auxiliary_dev *padev, u16 ecode = le16_to_cpu(event->ecode); dev_dbg(dev, "%s: event code %d\n", __func__, ecode); + + /* We don't need to do anything for RESET state==0 as there is no notify + * or feedback mechanism available, and it is possible that we won't + * even see a state==0 event. + * + * Any requests from VFIO while state==0 will fail, which will return + * error and may cause migration to fail. + */ + if (ecode == PDS_EVENT_RESET) { + dev_info(dev, "%s: PDS_EVENT_RESET event received, state==%d\n", + __func__, event->reset.state); + if (event->reset.state == 1) { + struct pds_vfio_aux *vfio_aux = auxiliary_get_drvdata(&padev->aux_dev); + + schedule_work(&vfio_aux->work); + } + } } static int @@ -88,6 +145,8 @@ pds_vfio_aux_probe(struct auxiliary_device *aux_dev, goto err_out; } + INIT_WORK(&vfio_aux->work, pds_vfio_recovery_work); + return 0; err_out: @@ -103,6 +162,8 @@ pds_vfio_aux_remove(struct auxiliary_device *aux_dev) struct pds_vfio_aux *vfio_aux = auxiliary_get_drvdata(aux_dev); struct pds_vfio_pci_device *pds_vfio = vfio_aux->pds_vfio; + cancel_work_sync(&vfio_aux->work); + if (pds_vfio) { pds_vfio_unregister_client_cmd(pds_vfio); vfio_aux->pds_vfio->vfio_aux = NULL; diff --git a/drivers/vfio/pci/pds/aux_drv.h b/drivers/vfio/pci/pds/aux_drv.h index 0f05a968bb00..422a42b3ce14 100644 --- a/drivers/vfio/pci/pds/aux_drv.h +++ b/drivers/vfio/pci/pds/aux_drv.h @@ -17,6 +17,7 @@ struct pds_vfio_aux { struct pds_auxiliary_dev *padev; struct pds_auxiliary_drv padrv; struct pds_vfio_pci_device *pds_vfio; + struct work_struct work; }; struct auxiliary_driver * diff --git a/drivers/vfio/pci/pds/vfio_dev.c b/drivers/vfio/pci/pds/vfio_dev.c index 67fe62ad98c9..a5d8d59b4744 100644 --- a/drivers/vfio/pci/pds/vfio_dev.c +++ b/drivers/vfio/pci/pds/vfio_dev.c @@ -26,10 +26,17 @@ pds_vfio_state_mutex_unlock(struct pds_vfio_pci_device *pds_vfio) if (pds_vfio->deferred_reset) { pds_vfio->deferred_reset = false; if (pds_vfio->state == VFIO_DEVICE_STATE_ERROR) { - pds_vfio->state = VFIO_DEVICE_STATE_RUNNING; + dev_dbg(&pds_vfio->pdev->dev, "Transitioning from VFIO_DEVICE_STATE_ERROR to %s\n", + pds_vfio_lm_state(pds_vfio->deferred_reset_state)); + pds_vfio->state = pds_vfio->deferred_reset_state; pds_vfio_put_restore_file(pds_vfio); pds_vfio_put_save_file(pds_vfio); + } else if (pds_vfio->deferred_reset_state == VFIO_DEVICE_STATE_ERROR) { + dev_dbg(&pds_vfio->pdev->dev, "Transitioning from %s to VFIO_DEVICE_STATE_ERROR based on deferred_reset request\n", + pds_vfio_lm_state(pds_vfio->state)); + pds_vfio->state = VFIO_DEVICE_STATE_ERROR; } + pds_vfio->deferred_reset_state = VFIO_DEVICE_STATE_RUNNING; spin_unlock(&pds_vfio->reset_lock); goto again; } @@ -42,6 +49,7 @@ pds_vfio_reset(struct pds_vfio_pci_device *pds_vfio) { spin_lock(&pds_vfio->reset_lock); pds_vfio->deferred_reset = true; + pds_vfio->deferred_reset_state = VFIO_DEVICE_STATE_RUNNING; if (!mutex_trylock(&pds_vfio->state_mutex)) { spin_unlock(&pds_vfio->reset_lock); return; @@ -50,6 +58,18 @@ pds_vfio_reset(struct pds_vfio_pci_device *pds_vfio) pds_vfio_state_mutex_unlock(pds_vfio); } +void +pds_vfio_deferred_reset(struct pds_vfio_pci_device *pds_vfio, + enum vfio_device_mig_state reset_state) +{ + dev_info(&pds_vfio->pdev->dev, "Requesting deferred_reset to state %s\n", + pds_vfio_lm_state(reset_state)); + spin_lock(&pds_vfio->reset_lock); + pds_vfio->deferred_reset = true; + pds_vfio->deferred_reset_state = reset_state; + spin_unlock(&pds_vfio->reset_lock); +} + static struct file * pds_vfio_set_device_state(struct vfio_device *vdev, enum vfio_device_mig_state new_state) @@ -63,7 +83,13 @@ pds_vfio_set_device_state(struct vfio_device *vdev, return ERR_PTR(-ENODEV); mutex_lock(&pds_vfio->state_mutex); - while (new_state != pds_vfio->state) { + /* only way to transition out of VFIO_DEVICE_STATE_ERROR is via + * VFIO_DEVICE_RESET, so prevent the state machine from running since + * vfio_mig_get_next_state() will throw a WARN_ON() when transitioning + * from VFIO_DEVICE_STATE_ERROR to any other state + */ + while (pds_vfio->state != VFIO_DEVICE_STATE_ERROR && + new_state != pds_vfio->state) { enum vfio_device_mig_state next_state; int err = vfio_mig_get_next_state(vdev, pds_vfio->state, @@ -85,6 +111,9 @@ pds_vfio_set_device_state(struct vfio_device *vdev, } } pds_vfio_state_mutex_unlock(pds_vfio); + /* still waiting on a deferred_reset */ + if (pds_vfio->state == VFIO_DEVICE_STATE_ERROR) + res = ERR_PTR(-EIO); return res; } @@ -168,6 +197,7 @@ pds_vfio_open_device(struct vfio_device *vdev) dev_dbg(&pds_vfio->pdev->dev, "%s: %s => VFIO_DEVICE_STATE_RUNNING\n", __func__, pds_vfio_lm_state(pds_vfio->state)); pds_vfio->state = VFIO_DEVICE_STATE_RUNNING; + pds_vfio->deferred_reset_state = VFIO_DEVICE_STATE_RUNNING; vfio_pci_core_finish_enable(&pds_vfio->vfio_coredev); diff --git a/drivers/vfio/pci/pds/vfio_dev.h b/drivers/vfio/pci/pds/vfio_dev.h index 42bfea448c10..212bb687cf9b 100644 --- a/drivers/vfio/pci/pds/vfio_dev.h +++ b/drivers/vfio/pci/pds/vfio_dev.h @@ -23,6 +23,7 @@ struct pds_vfio_pci_device { enum vfio_device_mig_state state; spinlock_t reset_lock; /* protect reset_done flow */ u8 deferred_reset; + enum vfio_device_mig_state deferred_reset_state; int vf_id; int pci_id; @@ -34,5 +35,8 @@ struct pds_vfio_pci_device * pds_vfio_pci_drvdata(struct pci_dev *pdev); void pds_vfio_reset(struct pds_vfio_pci_device *pds_vfio); +void +pds_vfio_deferred_reset(struct pds_vfio_pci_device *pds_vfio, + enum vfio_device_mig_state reset_state); #endif /* _VFIO_DEV_H_ */