Re: [PATCH 4/6] LoongArch: KVM: Rebase steal time counter in vcpu context

[Bibo Mao]

On 2026/9/27 下午3:52, Tao Cui wrote:
> From: Tao Cui <cuitao@xxxxxxxxxx>
>
> KVM_SET_DEVICE_ATTR(PVTIME GPA) initializes st.last_steal from the
> ioctl thread's run_delay, but kvm_update_stolen_time() accumulates the
> vcpu thread's run_delay; the first delta can be negative and wraps in
I think that ioctl thread is the vCPU thread itself in KVM mode, there 
will be many potential problems when one thread set registers of vCPU 
while vCPU is running.

Regards
Bibo Mao
> u64, so the guest reads a steal time close to 2^64.
>
> Drop the initialization from the attr path and lazily rebase the
> counter on the first steal update, which runs in vcpu context like the
> hypercall path.  Re-registering a GPA clears the rebase sentinel first
> and publishes the address with a write barrier; the reader side loads
> the address and sentinel with READ_ONCE and a read barrier so a
> concurrent re-registration is not observed half-applied.
>
> Fixes: b4ba157044ea ("LoongArch: KVM: Add PV steal time support in host side")
> Signed-off-by: Tao Cui <cuitao@xxxxxxxxxx>
> ---
>   arch/loongarch/kvm/vcpu.c | 25 +++++++++++++++++--------
>   1 file changed, 17 insertions(+), 8 deletions(-)
>
> diff --git a/arch/loongarch/kvm/vcpu.c b/arch/loongarch/kvm/vcpu.c
> index 8e028be3f0a9..d931a5a802f6 100644
> --- a/arch/loongarch/kvm/vcpu.c
> +++ b/arch/loongarch/kvm/vcpu.c
> @@ -154,12 +154,13 @@ static void kvm_update_stolen_time(struct kvm_vcpu *vcpu)
>   	u32 version;
>   	u64 steal;
>   	gpa_t gpa;
> +	u64 last_steal;
>   	struct kvm_memslots *slots;
>   	struct kvm_steal_time __user *st;
>   	struct gfn_to_hva_cache *ghc;
>   
>   	ghc = &vcpu->arch.st.cache;
> -	gpa = vcpu->arch.st.guest_addr;
> +	gpa = READ_ONCE(vcpu->arch.st.guest_addr);
>   	if (!(gpa & KVM_STEAL_PHYS_VALID))
>   		return;
>   
> @@ -187,8 +188,14 @@ static void kvm_update_stolen_time(struct kvm_vcpu *vcpu)
>   	smp_wmb();
>   
>   	unsafe_get_user(steal, &st->steal, out);
> -	steal += current->sched_info.run_delay - vcpu->arch.st.last_steal;
> -	vcpu->arch.st.last_steal = current->sched_info.run_delay;
> +	/* acquire pairs with the smp_wmb in the attr path */
> +	smp_rmb();
> +	last_steal = READ_ONCE(vcpu->arch.st.last_steal);
> +	if (!last_steal)
> +		/* first update in vcpu context: rebase the counter */
> +		last_steal = current->sched_info.run_delay;
> +	steal += current->sched_info.run_delay - last_steal;
> +	WRITE_ONCE(vcpu->arch.st.last_steal, current->sched_info.run_delay);
>   	unsafe_put_user(steal, &st->steal, out);
>   
>   	smp_wmb();
> @@ -1122,7 +1129,7 @@ static int kvm_loongarch_pvtime_get_attr(struct kvm_vcpu *vcpu,
>   			|| attr->attr != KVM_LOONGARCH_VCPU_PVTIME_GPA)
>   		return -ENXIO;
>   
> -	gpa = vcpu->arch.st.guest_addr;
> +	gpa = READ_ONCE(vcpu->arch.st.guest_addr);
>   	if (put_user(gpa, user))
>   		return -EFAULT;
>   
> @@ -1197,7 +1204,7 @@ static int kvm_loongarch_pvtime_set_attr(struct kvm_vcpu *vcpu,
>   		return -EINVAL;
>   
>   	if (!(gpa & KVM_STEAL_PHYS_VALID)) {
> -		vcpu->arch.st.guest_addr = gpa;
> +		WRITE_ONCE(vcpu->arch.st.guest_addr, gpa);
>   		return 0;
>   	}
>   
> @@ -1208,8 +1215,10 @@ static int kvm_loongarch_pvtime_set_attr(struct kvm_vcpu *vcpu,
>   	srcu_read_unlock(&kvm->srcu, idx);
>   
>   	if (!ret) {
> -		vcpu->arch.st.guest_addr = gpa;
> -		vcpu->arch.st.last_steal = current->sched_info.run_delay;
> +		WRITE_ONCE(vcpu->arch.st.last_steal, 0);
> +		/* publish the new address only after clearing the rebase sentinel */
> +		smp_wmb();
> +		WRITE_ONCE(vcpu->arch.st.guest_addr, gpa);
>   		kvm_make_request(KVM_REQ_STEAL_UPDATE, vcpu);
>   	}
>   
> @@ -1800,7 +1809,7 @@ static void kvm_vcpu_set_pv_preempted(struct kvm_vcpu *vcpu)
>   	struct kvm_memslots *slots;
>   	struct kvm_steal_time __user *st;
>   
> -	gpa = vcpu->arch.st.guest_addr;
> +	gpa = READ_ONCE(vcpu->arch.st.guest_addr);
>   	if (!(gpa & KVM_STEAL_PHYS_VALID))
>   		return;
>