On 3/29/2025 4:30 AM, Tom Lendacky wrote:
A page state change is typically followed by an access of the page(s) and
results in another VMEXIT in order to map the page into the nested page
table. Depending on the size of page state change request, this can
generate a number of additional VMEXITs. For example, under SNP, when
Linux is utilizing lazy memory acceptance, memory is typically accepted in
4M chunks. A page state change request is submitted to mark the pages as
private, followed by validation of the memory. Since the guest_memfd
currently only supports 4K pages, each page validation will result in
VMEXIT to map the page, resulting in 1024 additional exits.
When performing a page state change, invoke KVM_PRE_FAULT_MEMORY for the
size of the page state change in order to pre-map the pages and avoid the
additional VMEXITs. This helps speed up boot times.
Unfortunately, it breaks TDX guest.
kvm_hc_map_gpa_range gpa 0x80000000 size 0x200000 attributes 0x0
flags 0x1
For TDX guest, it uses MAPGPA to maps the range [0x8000 0000,
+0x0x200000] to shared. The call of KVM_PRE_FAULT_MEMORY on such range
leads to the TD being marked as bugged
[353467.266761] WARNING: CPU: 109 PID: 295970 at
arch/x86/kvm/mmu/tdp_mmu.c:674
tdp_mmu_map_handle_target_level+0x301/0x460 [kvm]
[353472.621399] WARNING: CPU: 109 PID: 295970 at
arch/x86/kvm/../../../virt/kvm/kvm_main.c:4281
kvm_vcpu_pre_fault_memory+0x167/0x1a0 [kvm]
It seems the pre map on the non MR back'ed range has issue. But I'm
still debugging it to understand the root cause.
