xref: /openbmc/linux/drivers/hv/channel_mgmt.c (revision 458a445deb9c9fb13cec46fe9b179a84d2ff514f)
1 /*
2  * Copyright (c) 2009, Microsoft Corporation.
3  *
4  * This program is free software; you can redistribute it and/or modify it
5  * under the terms and conditions of the GNU General Public License,
6  * version 2, as published by the Free Software Foundation.
7  *
8  * This program is distributed in the hope it will be useful, but WITHOUT
9  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
10  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
11  * more details.
12  *
13  * You should have received a copy of the GNU General Public License along with
14  * this program; if not, write to the Free Software Foundation, Inc., 59 Temple
15  * Place - Suite 330, Boston, MA 02111-1307 USA.
16  *
17  * Authors:
18  *   Haiyang Zhang <haiyangz@microsoft.com>
19  *   Hank Janssen  <hjanssen@microsoft.com>
20  */
21 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
22 
23 #include <linux/kernel.h>
24 #include <linux/interrupt.h>
25 #include <linux/sched.h>
26 #include <linux/wait.h>
27 #include <linux/mm.h>
28 #include <linux/slab.h>
29 #include <linux/list.h>
30 #include <linux/module.h>
31 #include <linux/completion.h>
32 #include <linux/delay.h>
33 #include <linux/hyperv.h>
34 #include <asm/mshyperv.h>
35 
36 #include "hyperv_vmbus.h"
37 
38 static void init_vp_index(struct vmbus_channel *channel, u16 dev_type);
39 
40 static const struct vmbus_device vmbus_devs[] = {
41 	/* IDE */
42 	{ .dev_type = HV_IDE,
43 	  HV_IDE_GUID,
44 	  .perf_device = true,
45 	},
46 
47 	/* SCSI */
48 	{ .dev_type = HV_SCSI,
49 	  HV_SCSI_GUID,
50 	  .perf_device = true,
51 	},
52 
53 	/* Fibre Channel */
54 	{ .dev_type = HV_FC,
55 	  HV_SYNTHFC_GUID,
56 	  .perf_device = true,
57 	},
58 
59 	/* Synthetic NIC */
60 	{ .dev_type = HV_NIC,
61 	  HV_NIC_GUID,
62 	  .perf_device = true,
63 	},
64 
65 	/* Network Direct */
66 	{ .dev_type = HV_ND,
67 	  HV_ND_GUID,
68 	  .perf_device = true,
69 	},
70 
71 	/* PCIE */
72 	{ .dev_type = HV_PCIE,
73 	  HV_PCIE_GUID,
74 	  .perf_device = false,
75 	},
76 
77 	/* Synthetic Frame Buffer */
78 	{ .dev_type = HV_FB,
79 	  HV_SYNTHVID_GUID,
80 	  .perf_device = false,
81 	},
82 
83 	/* Synthetic Keyboard */
84 	{ .dev_type = HV_KBD,
85 	  HV_KBD_GUID,
86 	  .perf_device = false,
87 	},
88 
89 	/* Synthetic MOUSE */
90 	{ .dev_type = HV_MOUSE,
91 	  HV_MOUSE_GUID,
92 	  .perf_device = false,
93 	},
94 
95 	/* KVP */
96 	{ .dev_type = HV_KVP,
97 	  HV_KVP_GUID,
98 	  .perf_device = false,
99 	},
100 
101 	/* Time Synch */
102 	{ .dev_type = HV_TS,
103 	  HV_TS_GUID,
104 	  .perf_device = false,
105 	},
106 
107 	/* Heartbeat */
108 	{ .dev_type = HV_HB,
109 	  HV_HEART_BEAT_GUID,
110 	  .perf_device = false,
111 	},
112 
113 	/* Shutdown */
114 	{ .dev_type = HV_SHUTDOWN,
115 	  HV_SHUTDOWN_GUID,
116 	  .perf_device = false,
117 	},
118 
119 	/* File copy */
120 	{ .dev_type = HV_FCOPY,
121 	  HV_FCOPY_GUID,
122 	  .perf_device = false,
123 	},
124 
125 	/* Backup */
126 	{ .dev_type = HV_BACKUP,
127 	  HV_VSS_GUID,
128 	  .perf_device = false,
129 	},
130 
131 	/* Dynamic Memory */
132 	{ .dev_type = HV_DM,
133 	  HV_DM_GUID,
134 	  .perf_device = false,
135 	},
136 
137 	/* Unknown GUID */
138 	{ .dev_type = HV_UNKNOWN,
139 	  .perf_device = false,
140 	},
141 };
142 
143 static const struct {
144 	uuid_le guid;
145 } vmbus_unsupported_devs[] = {
146 	{ HV_AVMA1_GUID },
147 	{ HV_AVMA2_GUID },
148 	{ HV_RDV_GUID	},
149 };
150 
151 /*
152  * The rescinded channel may be blocked waiting for a response from the host;
153  * take care of that.
154  */
155 static void vmbus_rescind_cleanup(struct vmbus_channel *channel)
156 {
157 	struct vmbus_channel_msginfo *msginfo;
158 	unsigned long flags;
159 
160 
161 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
162 	channel->rescind = true;
163 	list_for_each_entry(msginfo, &vmbus_connection.chn_msg_list,
164 				msglistentry) {
165 
166 		if (msginfo->waiting_channel == channel) {
167 			complete(&msginfo->waitevent);
168 			break;
169 		}
170 	}
171 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
172 }
173 
174 static bool is_unsupported_vmbus_devs(const uuid_le *guid)
175 {
176 	int i;
177 
178 	for (i = 0; i < ARRAY_SIZE(vmbus_unsupported_devs); i++)
179 		if (!uuid_le_cmp(*guid, vmbus_unsupported_devs[i].guid))
180 			return true;
181 	return false;
182 }
183 
184 static u16 hv_get_dev_type(const struct vmbus_channel *channel)
185 {
186 	const uuid_le *guid = &channel->offermsg.offer.if_type;
187 	u16 i;
188 
189 	if (is_hvsock_channel(channel) || is_unsupported_vmbus_devs(guid))
190 		return HV_UNKNOWN;
191 
192 	for (i = HV_IDE; i < HV_UNKNOWN; i++) {
193 		if (!uuid_le_cmp(*guid, vmbus_devs[i].guid))
194 			return i;
195 	}
196 	pr_info("Unknown GUID: %pUl\n", guid);
197 	return i;
198 }
199 
200 /**
201  * vmbus_prep_negotiate_resp() - Create default response for Negotiate message
202  * @icmsghdrp: Pointer to msg header structure
203  * @buf: Raw buffer channel data
204  * @fw_version: The framework versions we can support.
205  * @fw_vercnt: The size of @fw_version.
206  * @srv_version: The service versions we can support.
207  * @srv_vercnt: The size of @srv_version.
208  * @nego_fw_version: The selected framework version.
209  * @nego_srv_version: The selected service version.
210  *
211  * Note: Versions are given in decreasing order.
212  *
213  * Set up and fill in default negotiate response message.
214  * Mainly used by Hyper-V drivers.
215  */
216 bool vmbus_prep_negotiate_resp(struct icmsg_hdr *icmsghdrp,
217 				u8 *buf, const int *fw_version, int fw_vercnt,
218 				const int *srv_version, int srv_vercnt,
219 				int *nego_fw_version, int *nego_srv_version)
220 {
221 	int icframe_major, icframe_minor;
222 	int icmsg_major, icmsg_minor;
223 	int fw_major, fw_minor;
224 	int srv_major, srv_minor;
225 	int i, j;
226 	bool found_match = false;
227 	struct icmsg_negotiate *negop;
228 
229 	icmsghdrp->icmsgsize = 0x10;
230 	negop = (struct icmsg_negotiate *)&buf[
231 		sizeof(struct vmbuspipe_hdr) +
232 		sizeof(struct icmsg_hdr)];
233 
234 	icframe_major = negop->icframe_vercnt;
235 	icframe_minor = 0;
236 
237 	icmsg_major = negop->icmsg_vercnt;
238 	icmsg_minor = 0;
239 
240 	/*
241 	 * Select the framework version number we will
242 	 * support.
243 	 */
244 
245 	for (i = 0; i < fw_vercnt; i++) {
246 		fw_major = (fw_version[i] >> 16);
247 		fw_minor = (fw_version[i] & 0xFFFF);
248 
249 		for (j = 0; j < negop->icframe_vercnt; j++) {
250 			if ((negop->icversion_data[j].major == fw_major) &&
251 			    (negop->icversion_data[j].minor == fw_minor)) {
252 				icframe_major = negop->icversion_data[j].major;
253 				icframe_minor = negop->icversion_data[j].minor;
254 				found_match = true;
255 				break;
256 			}
257 		}
258 
259 		if (found_match)
260 			break;
261 	}
262 
263 	if (!found_match)
264 		goto fw_error;
265 
266 	found_match = false;
267 
268 	for (i = 0; i < srv_vercnt; i++) {
269 		srv_major = (srv_version[i] >> 16);
270 		srv_minor = (srv_version[i] & 0xFFFF);
271 
272 		for (j = negop->icframe_vercnt;
273 			(j < negop->icframe_vercnt + negop->icmsg_vercnt);
274 			j++) {
275 
276 			if ((negop->icversion_data[j].major == srv_major) &&
277 				(negop->icversion_data[j].minor == srv_minor)) {
278 
279 				icmsg_major = negop->icversion_data[j].major;
280 				icmsg_minor = negop->icversion_data[j].minor;
281 				found_match = true;
282 				break;
283 			}
284 		}
285 
286 		if (found_match)
287 			break;
288 	}
289 
290 	/*
291 	 * Respond with the framework and service
292 	 * version numbers we can support.
293 	 */
294 
295 fw_error:
296 	if (!found_match) {
297 		negop->icframe_vercnt = 0;
298 		negop->icmsg_vercnt = 0;
299 	} else {
300 		negop->icframe_vercnt = 1;
301 		negop->icmsg_vercnt = 1;
302 	}
303 
304 	if (nego_fw_version)
305 		*nego_fw_version = (icframe_major << 16) | icframe_minor;
306 
307 	if (nego_srv_version)
308 		*nego_srv_version = (icmsg_major << 16) | icmsg_minor;
309 
310 	negop->icversion_data[0].major = icframe_major;
311 	negop->icversion_data[0].minor = icframe_minor;
312 	negop->icversion_data[1].major = icmsg_major;
313 	negop->icversion_data[1].minor = icmsg_minor;
314 	return found_match;
315 }
316 
317 EXPORT_SYMBOL_GPL(vmbus_prep_negotiate_resp);
318 
319 /*
320  * alloc_channel - Allocate and initialize a vmbus channel object
321  */
322 static struct vmbus_channel *alloc_channel(void)
323 {
324 	struct vmbus_channel *channel;
325 
326 	channel = kzalloc(sizeof(*channel), GFP_ATOMIC);
327 	if (!channel)
328 		return NULL;
329 
330 	spin_lock_init(&channel->lock);
331 	init_completion(&channel->rescind_event);
332 
333 	INIT_LIST_HEAD(&channel->sc_list);
334 	INIT_LIST_HEAD(&channel->percpu_list);
335 
336 	tasklet_init(&channel->callback_event,
337 		     vmbus_on_event, (unsigned long)channel);
338 
339 	return channel;
340 }
341 
342 /*
343  * free_channel - Release the resources used by the vmbus channel object
344  */
345 static void free_channel(struct vmbus_channel *channel)
346 {
347 	tasklet_kill(&channel->callback_event);
348 
349 	kobject_put(&channel->kobj);
350 }
351 
352 static void percpu_channel_enq(void *arg)
353 {
354 	struct vmbus_channel *channel = arg;
355 	struct hv_per_cpu_context *hv_cpu
356 		= this_cpu_ptr(hv_context.cpu_context);
357 
358 	list_add_tail_rcu(&channel->percpu_list, &hv_cpu->chan_list);
359 }
360 
361 static void percpu_channel_deq(void *arg)
362 {
363 	struct vmbus_channel *channel = arg;
364 
365 	list_del_rcu(&channel->percpu_list);
366 }
367 
368 
369 static void vmbus_release_relid(u32 relid)
370 {
371 	struct vmbus_channel_relid_released msg;
372 	int ret;
373 
374 	memset(&msg, 0, sizeof(struct vmbus_channel_relid_released));
375 	msg.child_relid = relid;
376 	msg.header.msgtype = CHANNELMSG_RELID_RELEASED;
377 	ret = vmbus_post_msg(&msg, sizeof(struct vmbus_channel_relid_released),
378 			     true);
379 
380 	trace_vmbus_release_relid(&msg, ret);
381 }
382 
383 void hv_process_channel_removal(struct vmbus_channel *channel)
384 {
385 	struct vmbus_channel *primary_channel;
386 	unsigned long flags;
387 
388 	BUG_ON(!mutex_is_locked(&vmbus_connection.channel_mutex));
389 	BUG_ON(!channel->rescind);
390 
391 	if (channel->target_cpu != get_cpu()) {
392 		put_cpu();
393 		smp_call_function_single(channel->target_cpu,
394 					 percpu_channel_deq, channel, true);
395 	} else {
396 		percpu_channel_deq(channel);
397 		put_cpu();
398 	}
399 
400 	if (channel->primary_channel == NULL) {
401 		list_del(&channel->listentry);
402 
403 		primary_channel = channel;
404 	} else {
405 		primary_channel = channel->primary_channel;
406 		spin_lock_irqsave(&primary_channel->lock, flags);
407 		list_del(&channel->sc_list);
408 		spin_unlock_irqrestore(&primary_channel->lock, flags);
409 	}
410 
411 	/*
412 	 * We need to free the bit for init_vp_index() to work in the case
413 	 * of sub-channel, when we reload drivers like hv_netvsc.
414 	 */
415 	if (channel->affinity_policy == HV_LOCALIZED)
416 		cpumask_clear_cpu(channel->target_cpu,
417 				  &primary_channel->alloced_cpus_in_node);
418 
419 	vmbus_release_relid(channel->offermsg.child_relid);
420 
421 	free_channel(channel);
422 }
423 
424 void vmbus_free_channels(void)
425 {
426 	struct vmbus_channel *channel, *tmp;
427 
428 	list_for_each_entry_safe(channel, tmp, &vmbus_connection.chn_list,
429 		listentry) {
430 		/* hv_process_channel_removal() needs this */
431 		channel->rescind = true;
432 
433 		vmbus_device_unregister(channel->device_obj);
434 	}
435 }
436 
437 /*
438  * vmbus_process_offer - Process the offer by creating a channel/device
439  * associated with this offer
440  */
441 static void vmbus_process_offer(struct vmbus_channel *newchannel)
442 {
443 	struct vmbus_channel *channel;
444 	bool fnew = true;
445 	unsigned long flags;
446 	u16 dev_type;
447 	int ret;
448 
449 	/* Make sure this is a new offer */
450 	mutex_lock(&vmbus_connection.channel_mutex);
451 
452 	/*
453 	 * Now that we have acquired the channel_mutex,
454 	 * we can release the potentially racing rescind thread.
455 	 */
456 	atomic_dec(&vmbus_connection.offer_in_progress);
457 
458 	list_for_each_entry(channel, &vmbus_connection.chn_list, listentry) {
459 		if (!uuid_le_cmp(channel->offermsg.offer.if_type,
460 			newchannel->offermsg.offer.if_type) &&
461 			!uuid_le_cmp(channel->offermsg.offer.if_instance,
462 				newchannel->offermsg.offer.if_instance)) {
463 			fnew = false;
464 			break;
465 		}
466 	}
467 
468 	if (fnew)
469 		list_add_tail(&newchannel->listentry,
470 			      &vmbus_connection.chn_list);
471 
472 	mutex_unlock(&vmbus_connection.channel_mutex);
473 
474 	if (!fnew) {
475 		/*
476 		 * Check to see if this is a sub-channel.
477 		 */
478 		if (newchannel->offermsg.offer.sub_channel_index != 0) {
479 			/*
480 			 * Process the sub-channel.
481 			 */
482 			newchannel->primary_channel = channel;
483 			spin_lock_irqsave(&channel->lock, flags);
484 			list_add_tail(&newchannel->sc_list, &channel->sc_list);
485 			spin_unlock_irqrestore(&channel->lock, flags);
486 		} else {
487 			goto err_free_chan;
488 		}
489 	}
490 
491 	dev_type = hv_get_dev_type(newchannel);
492 
493 	init_vp_index(newchannel, dev_type);
494 
495 	if (newchannel->target_cpu != get_cpu()) {
496 		put_cpu();
497 		smp_call_function_single(newchannel->target_cpu,
498 					 percpu_channel_enq,
499 					 newchannel, true);
500 	} else {
501 		percpu_channel_enq(newchannel);
502 		put_cpu();
503 	}
504 
505 	/*
506 	 * This state is used to indicate a successful open
507 	 * so that when we do close the channel normally, we
508 	 * can cleanup properly
509 	 */
510 	newchannel->state = CHANNEL_OPEN_STATE;
511 
512 	if (!fnew) {
513 		struct hv_device *dev
514 			= newchannel->primary_channel->device_obj;
515 
516 		if (vmbus_add_channel_kobj(dev, newchannel))
517 			goto err_free_chan;
518 
519 		if (channel->sc_creation_callback != NULL)
520 			channel->sc_creation_callback(newchannel);
521 		newchannel->probe_done = true;
522 		return;
523 	}
524 
525 	/*
526 	 * Start the process of binding this offer to the driver
527 	 * We need to set the DeviceObject field before calling
528 	 * vmbus_child_dev_add()
529 	 */
530 	newchannel->device_obj = vmbus_device_create(
531 		&newchannel->offermsg.offer.if_type,
532 		&newchannel->offermsg.offer.if_instance,
533 		newchannel);
534 	if (!newchannel->device_obj)
535 		goto err_deq_chan;
536 
537 	newchannel->device_obj->device_id = dev_type;
538 	/*
539 	 * Add the new device to the bus. This will kick off device-driver
540 	 * binding which eventually invokes the device driver's AddDevice()
541 	 * method.
542 	 */
543 	ret = vmbus_device_register(newchannel->device_obj);
544 
545 	if (ret != 0) {
546 		pr_err("unable to add child device object (relid %d)\n",
547 			newchannel->offermsg.child_relid);
548 		kfree(newchannel->device_obj);
549 		goto err_deq_chan;
550 	}
551 
552 	newchannel->probe_done = true;
553 	return;
554 
555 err_deq_chan:
556 	mutex_lock(&vmbus_connection.channel_mutex);
557 	list_del(&newchannel->listentry);
558 	mutex_unlock(&vmbus_connection.channel_mutex);
559 
560 	if (newchannel->target_cpu != get_cpu()) {
561 		put_cpu();
562 		smp_call_function_single(newchannel->target_cpu,
563 					 percpu_channel_deq, newchannel, true);
564 	} else {
565 		percpu_channel_deq(newchannel);
566 		put_cpu();
567 	}
568 
569 	vmbus_release_relid(newchannel->offermsg.child_relid);
570 
571 err_free_chan:
572 	free_channel(newchannel);
573 }
574 
575 /*
576  * We use this state to statically distribute the channel interrupt load.
577  */
578 static int next_numa_node_id;
579 
580 /*
581  * Starting with Win8, we can statically distribute the incoming
582  * channel interrupt load by binding a channel to VCPU.
583  * We distribute the interrupt loads to one or more NUMA nodes based on
584  * the channel's affinity_policy.
585  *
586  * For pre-win8 hosts or non-performance critical channels we assign the
587  * first CPU in the first NUMA node.
588  */
589 static void init_vp_index(struct vmbus_channel *channel, u16 dev_type)
590 {
591 	u32 cur_cpu;
592 	bool perf_chn = vmbus_devs[dev_type].perf_device;
593 	struct vmbus_channel *primary = channel->primary_channel;
594 	int next_node;
595 	cpumask_var_t available_mask;
596 	struct cpumask *alloced_mask;
597 
598 	if ((vmbus_proto_version == VERSION_WS2008) ||
599 	    (vmbus_proto_version == VERSION_WIN7) || (!perf_chn) ||
600 	    !alloc_cpumask_var(&available_mask, GFP_KERNEL)) {
601 		/*
602 		 * Prior to win8, all channel interrupts are
603 		 * delivered on cpu 0.
604 		 * Also if the channel is not a performance critical
605 		 * channel, bind it to cpu 0.
606 		 * In case alloc_cpumask_var() fails, bind it to cpu 0.
607 		 */
608 		channel->numa_node = 0;
609 		channel->target_cpu = 0;
610 		channel->target_vp = hv_cpu_number_to_vp_number(0);
611 		return;
612 	}
613 
614 	/*
615 	 * Based on the channel affinity policy, we will assign the NUMA
616 	 * nodes.
617 	 */
618 
619 	if ((channel->affinity_policy == HV_BALANCED) || (!primary)) {
620 		while (true) {
621 			next_node = next_numa_node_id++;
622 			if (next_node == nr_node_ids) {
623 				next_node = next_numa_node_id = 0;
624 				continue;
625 			}
626 			if (cpumask_empty(cpumask_of_node(next_node)))
627 				continue;
628 			break;
629 		}
630 		channel->numa_node = next_node;
631 		primary = channel;
632 	}
633 	alloced_mask = &hv_context.hv_numa_map[primary->numa_node];
634 
635 	if (cpumask_weight(alloced_mask) ==
636 	    cpumask_weight(cpumask_of_node(primary->numa_node))) {
637 		/*
638 		 * We have cycled through all the CPUs in the node;
639 		 * reset the alloced map.
640 		 */
641 		cpumask_clear(alloced_mask);
642 	}
643 
644 	cpumask_xor(available_mask, alloced_mask,
645 		    cpumask_of_node(primary->numa_node));
646 
647 	cur_cpu = -1;
648 
649 	if (primary->affinity_policy == HV_LOCALIZED) {
650 		/*
651 		 * Normally Hyper-V host doesn't create more subchannels
652 		 * than there are VCPUs on the node but it is possible when not
653 		 * all present VCPUs on the node are initialized by guest.
654 		 * Clear the alloced_cpus_in_node to start over.
655 		 */
656 		if (cpumask_equal(&primary->alloced_cpus_in_node,
657 				  cpumask_of_node(primary->numa_node)))
658 			cpumask_clear(&primary->alloced_cpus_in_node);
659 	}
660 
661 	while (true) {
662 		cur_cpu = cpumask_next(cur_cpu, available_mask);
663 		if (cur_cpu >= nr_cpu_ids) {
664 			cur_cpu = -1;
665 			cpumask_copy(available_mask,
666 				     cpumask_of_node(primary->numa_node));
667 			continue;
668 		}
669 
670 		if (primary->affinity_policy == HV_LOCALIZED) {
671 			/*
672 			 * NOTE: in the case of sub-channel, we clear the
673 			 * sub-channel related bit(s) in
674 			 * primary->alloced_cpus_in_node in
675 			 * hv_process_channel_removal(), so when we
676 			 * reload drivers like hv_netvsc in SMP guest, here
677 			 * we're able to re-allocate
678 			 * bit from primary->alloced_cpus_in_node.
679 			 */
680 			if (!cpumask_test_cpu(cur_cpu,
681 					      &primary->alloced_cpus_in_node)) {
682 				cpumask_set_cpu(cur_cpu,
683 						&primary->alloced_cpus_in_node);
684 				cpumask_set_cpu(cur_cpu, alloced_mask);
685 				break;
686 			}
687 		} else {
688 			cpumask_set_cpu(cur_cpu, alloced_mask);
689 			break;
690 		}
691 	}
692 
693 	channel->target_cpu = cur_cpu;
694 	channel->target_vp = hv_cpu_number_to_vp_number(cur_cpu);
695 
696 	free_cpumask_var(available_mask);
697 }
698 
699 static void vmbus_wait_for_unload(void)
700 {
701 	int cpu;
702 	void *page_addr;
703 	struct hv_message *msg;
704 	struct vmbus_channel_message_header *hdr;
705 	u32 message_type;
706 
707 	/*
708 	 * CHANNELMSG_UNLOAD_RESPONSE is always delivered to the CPU which was
709 	 * used for initial contact or to CPU0 depending on host version. When
710 	 * we're crashing on a different CPU let's hope that IRQ handler on
711 	 * the cpu which receives CHANNELMSG_UNLOAD_RESPONSE is still
712 	 * functional and vmbus_unload_response() will complete
713 	 * vmbus_connection.unload_event. If not, the last thing we can do is
714 	 * read message pages for all CPUs directly.
715 	 */
716 	while (1) {
717 		if (completion_done(&vmbus_connection.unload_event))
718 			break;
719 
720 		for_each_online_cpu(cpu) {
721 			struct hv_per_cpu_context *hv_cpu
722 				= per_cpu_ptr(hv_context.cpu_context, cpu);
723 
724 			page_addr = hv_cpu->synic_message_page;
725 			msg = (struct hv_message *)page_addr
726 				+ VMBUS_MESSAGE_SINT;
727 
728 			message_type = READ_ONCE(msg->header.message_type);
729 			if (message_type == HVMSG_NONE)
730 				continue;
731 
732 			hdr = (struct vmbus_channel_message_header *)
733 				msg->u.payload;
734 
735 			if (hdr->msgtype == CHANNELMSG_UNLOAD_RESPONSE)
736 				complete(&vmbus_connection.unload_event);
737 
738 			vmbus_signal_eom(msg, message_type);
739 		}
740 
741 		mdelay(10);
742 	}
743 
744 	/*
745 	 * We're crashing and already got the UNLOAD_RESPONSE, cleanup all
746 	 * maybe-pending messages on all CPUs to be able to receive new
747 	 * messages after we reconnect.
748 	 */
749 	for_each_online_cpu(cpu) {
750 		struct hv_per_cpu_context *hv_cpu
751 			= per_cpu_ptr(hv_context.cpu_context, cpu);
752 
753 		page_addr = hv_cpu->synic_message_page;
754 		msg = (struct hv_message *)page_addr + VMBUS_MESSAGE_SINT;
755 		msg->header.message_type = HVMSG_NONE;
756 	}
757 }
758 
759 /*
760  * vmbus_unload_response - Handler for the unload response.
761  */
762 static void vmbus_unload_response(struct vmbus_channel_message_header *hdr)
763 {
764 	/*
765 	 * This is a global event; just wakeup the waiting thread.
766 	 * Once we successfully unload, we can cleanup the monitor state.
767 	 */
768 	complete(&vmbus_connection.unload_event);
769 }
770 
771 void vmbus_initiate_unload(bool crash)
772 {
773 	struct vmbus_channel_message_header hdr;
774 
775 	/* Pre-Win2012R2 hosts don't support reconnect */
776 	if (vmbus_proto_version < VERSION_WIN8_1)
777 		return;
778 
779 	init_completion(&vmbus_connection.unload_event);
780 	memset(&hdr, 0, sizeof(struct vmbus_channel_message_header));
781 	hdr.msgtype = CHANNELMSG_UNLOAD;
782 	vmbus_post_msg(&hdr, sizeof(struct vmbus_channel_message_header),
783 		       !crash);
784 
785 	/*
786 	 * vmbus_initiate_unload() is also called on crash and the crash can be
787 	 * happening in an interrupt context, where scheduling is impossible.
788 	 */
789 	if (!crash)
790 		wait_for_completion(&vmbus_connection.unload_event);
791 	else
792 		vmbus_wait_for_unload();
793 }
794 
795 /*
796  * vmbus_onoffer - Handler for channel offers from vmbus in parent partition.
797  *
798  */
799 static void vmbus_onoffer(struct vmbus_channel_message_header *hdr)
800 {
801 	struct vmbus_channel_offer_channel *offer;
802 	struct vmbus_channel *newchannel;
803 
804 	offer = (struct vmbus_channel_offer_channel *)hdr;
805 
806 	trace_vmbus_onoffer(offer);
807 
808 	/* Allocate the channel object and save this offer. */
809 	newchannel = alloc_channel();
810 	if (!newchannel) {
811 		vmbus_release_relid(offer->child_relid);
812 		atomic_dec(&vmbus_connection.offer_in_progress);
813 		pr_err("Unable to allocate channel object\n");
814 		return;
815 	}
816 
817 	/*
818 	 * Setup state for signalling the host.
819 	 */
820 	newchannel->sig_event = VMBUS_EVENT_CONNECTION_ID;
821 
822 	if (vmbus_proto_version != VERSION_WS2008) {
823 		newchannel->is_dedicated_interrupt =
824 				(offer->is_dedicated_interrupt != 0);
825 		newchannel->sig_event = offer->connection_id;
826 	}
827 
828 	memcpy(&newchannel->offermsg, offer,
829 	       sizeof(struct vmbus_channel_offer_channel));
830 	newchannel->monitor_grp = (u8)offer->monitorid / 32;
831 	newchannel->monitor_bit = (u8)offer->monitorid % 32;
832 
833 	vmbus_process_offer(newchannel);
834 }
835 
836 /*
837  * vmbus_onoffer_rescind - Rescind offer handler.
838  *
839  * We queue a work item to process this offer synchronously
840  */
841 static void vmbus_onoffer_rescind(struct vmbus_channel_message_header *hdr)
842 {
843 	struct vmbus_channel_rescind_offer *rescind;
844 	struct vmbus_channel *channel;
845 	struct device *dev;
846 
847 	rescind = (struct vmbus_channel_rescind_offer *)hdr;
848 
849 	trace_vmbus_onoffer_rescind(rescind);
850 
851 	/*
852 	 * The offer msg and the corresponding rescind msg
853 	 * from the host are guranteed to be ordered -
854 	 * offer comes in first and then the rescind.
855 	 * Since we process these events in work elements,
856 	 * and with preemption, we may end up processing
857 	 * the events out of order. Given that we handle these
858 	 * work elements on the same CPU, this is possible only
859 	 * in the case of preemption. In any case wait here
860 	 * until the offer processing has moved beyond the
861 	 * point where the channel is discoverable.
862 	 */
863 
864 	while (atomic_read(&vmbus_connection.offer_in_progress) != 0) {
865 		/*
866 		 * We wait here until any channel offer is currently
867 		 * being processed.
868 		 */
869 		msleep(1);
870 	}
871 
872 	mutex_lock(&vmbus_connection.channel_mutex);
873 	channel = relid2channel(rescind->child_relid);
874 	mutex_unlock(&vmbus_connection.channel_mutex);
875 
876 	if (channel == NULL) {
877 		/*
878 		 * We failed in processing the offer message;
879 		 * we would have cleaned up the relid in that
880 		 * failure path.
881 		 */
882 		return;
883 	}
884 
885 	/*
886 	 * Before setting channel->rescind in vmbus_rescind_cleanup(), we
887 	 * should make sure the channel callback is not running any more.
888 	 */
889 	vmbus_reset_channel_cb(channel);
890 
891 	/*
892 	 * Now wait for offer handling to complete.
893 	 */
894 	vmbus_rescind_cleanup(channel);
895 	while (READ_ONCE(channel->probe_done) == false) {
896 		/*
897 		 * We wait here until any channel offer is currently
898 		 * being processed.
899 		 */
900 		msleep(1);
901 	}
902 
903 	/*
904 	 * At this point, the rescind handling can proceed safely.
905 	 */
906 
907 	if (channel->device_obj) {
908 		if (channel->chn_rescind_callback) {
909 			channel->chn_rescind_callback(channel);
910 			return;
911 		}
912 		/*
913 		 * We will have to unregister this device from the
914 		 * driver core.
915 		 */
916 		dev = get_device(&channel->device_obj->device);
917 		if (dev) {
918 			vmbus_device_unregister(channel->device_obj);
919 			put_device(dev);
920 		}
921 	}
922 	if (channel->primary_channel != NULL) {
923 		/*
924 		 * Sub-channel is being rescinded. Following is the channel
925 		 * close sequence when initiated from the driveri (refer to
926 		 * vmbus_close() for details):
927 		 * 1. Close all sub-channels first
928 		 * 2. Then close the primary channel.
929 		 */
930 		mutex_lock(&vmbus_connection.channel_mutex);
931 		if (channel->state == CHANNEL_OPEN_STATE) {
932 			/*
933 			 * The channel is currently not open;
934 			 * it is safe for us to cleanup the channel.
935 			 */
936 			hv_process_channel_removal(channel);
937 		} else {
938 			complete(&channel->rescind_event);
939 		}
940 		mutex_unlock(&vmbus_connection.channel_mutex);
941 	}
942 }
943 
944 void vmbus_hvsock_device_unregister(struct vmbus_channel *channel)
945 {
946 	BUG_ON(!is_hvsock_channel(channel));
947 
948 	/* We always get a rescind msg when a connection is closed. */
949 	while (!READ_ONCE(channel->probe_done) || !READ_ONCE(channel->rescind))
950 		msleep(1);
951 
952 	vmbus_device_unregister(channel->device_obj);
953 }
954 EXPORT_SYMBOL_GPL(vmbus_hvsock_device_unregister);
955 
956 
957 /*
958  * vmbus_onoffers_delivered -
959  * This is invoked when all offers have been delivered.
960  *
961  * Nothing to do here.
962  */
963 static void vmbus_onoffers_delivered(
964 			struct vmbus_channel_message_header *hdr)
965 {
966 }
967 
968 /*
969  * vmbus_onopen_result - Open result handler.
970  *
971  * This is invoked when we received a response to our channel open request.
972  * Find the matching request, copy the response and signal the requesting
973  * thread.
974  */
975 static void vmbus_onopen_result(struct vmbus_channel_message_header *hdr)
976 {
977 	struct vmbus_channel_open_result *result;
978 	struct vmbus_channel_msginfo *msginfo;
979 	struct vmbus_channel_message_header *requestheader;
980 	struct vmbus_channel_open_channel *openmsg;
981 	unsigned long flags;
982 
983 	result = (struct vmbus_channel_open_result *)hdr;
984 
985 	trace_vmbus_onopen_result(result);
986 
987 	/*
988 	 * Find the open msg, copy the result and signal/unblock the wait event
989 	 */
990 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
991 
992 	list_for_each_entry(msginfo, &vmbus_connection.chn_msg_list,
993 				msglistentry) {
994 		requestheader =
995 			(struct vmbus_channel_message_header *)msginfo->msg;
996 
997 		if (requestheader->msgtype == CHANNELMSG_OPENCHANNEL) {
998 			openmsg =
999 			(struct vmbus_channel_open_channel *)msginfo->msg;
1000 			if (openmsg->child_relid == result->child_relid &&
1001 			    openmsg->openid == result->openid) {
1002 				memcpy(&msginfo->response.open_result,
1003 				       result,
1004 				       sizeof(
1005 					struct vmbus_channel_open_result));
1006 				complete(&msginfo->waitevent);
1007 				break;
1008 			}
1009 		}
1010 	}
1011 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
1012 }
1013 
1014 /*
1015  * vmbus_ongpadl_created - GPADL created handler.
1016  *
1017  * This is invoked when we received a response to our gpadl create request.
1018  * Find the matching request, copy the response and signal the requesting
1019  * thread.
1020  */
1021 static void vmbus_ongpadl_created(struct vmbus_channel_message_header *hdr)
1022 {
1023 	struct vmbus_channel_gpadl_created *gpadlcreated;
1024 	struct vmbus_channel_msginfo *msginfo;
1025 	struct vmbus_channel_message_header *requestheader;
1026 	struct vmbus_channel_gpadl_header *gpadlheader;
1027 	unsigned long flags;
1028 
1029 	gpadlcreated = (struct vmbus_channel_gpadl_created *)hdr;
1030 
1031 	trace_vmbus_ongpadl_created(gpadlcreated);
1032 
1033 	/*
1034 	 * Find the establish msg, copy the result and signal/unblock the wait
1035 	 * event
1036 	 */
1037 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
1038 
1039 	list_for_each_entry(msginfo, &vmbus_connection.chn_msg_list,
1040 				msglistentry) {
1041 		requestheader =
1042 			(struct vmbus_channel_message_header *)msginfo->msg;
1043 
1044 		if (requestheader->msgtype == CHANNELMSG_GPADL_HEADER) {
1045 			gpadlheader =
1046 			(struct vmbus_channel_gpadl_header *)requestheader;
1047 
1048 			if ((gpadlcreated->child_relid ==
1049 			     gpadlheader->child_relid) &&
1050 			    (gpadlcreated->gpadl == gpadlheader->gpadl)) {
1051 				memcpy(&msginfo->response.gpadl_created,
1052 				       gpadlcreated,
1053 				       sizeof(
1054 					struct vmbus_channel_gpadl_created));
1055 				complete(&msginfo->waitevent);
1056 				break;
1057 			}
1058 		}
1059 	}
1060 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
1061 }
1062 
1063 /*
1064  * vmbus_ongpadl_torndown - GPADL torndown handler.
1065  *
1066  * This is invoked when we received a response to our gpadl teardown request.
1067  * Find the matching request, copy the response and signal the requesting
1068  * thread.
1069  */
1070 static void vmbus_ongpadl_torndown(
1071 			struct vmbus_channel_message_header *hdr)
1072 {
1073 	struct vmbus_channel_gpadl_torndown *gpadl_torndown;
1074 	struct vmbus_channel_msginfo *msginfo;
1075 	struct vmbus_channel_message_header *requestheader;
1076 	struct vmbus_channel_gpadl_teardown *gpadl_teardown;
1077 	unsigned long flags;
1078 
1079 	gpadl_torndown = (struct vmbus_channel_gpadl_torndown *)hdr;
1080 
1081 	trace_vmbus_ongpadl_torndown(gpadl_torndown);
1082 
1083 	/*
1084 	 * Find the open msg, copy the result and signal/unblock the wait event
1085 	 */
1086 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
1087 
1088 	list_for_each_entry(msginfo, &vmbus_connection.chn_msg_list,
1089 				msglistentry) {
1090 		requestheader =
1091 			(struct vmbus_channel_message_header *)msginfo->msg;
1092 
1093 		if (requestheader->msgtype == CHANNELMSG_GPADL_TEARDOWN) {
1094 			gpadl_teardown =
1095 			(struct vmbus_channel_gpadl_teardown *)requestheader;
1096 
1097 			if (gpadl_torndown->gpadl == gpadl_teardown->gpadl) {
1098 				memcpy(&msginfo->response.gpadl_torndown,
1099 				       gpadl_torndown,
1100 				       sizeof(
1101 					struct vmbus_channel_gpadl_torndown));
1102 				complete(&msginfo->waitevent);
1103 				break;
1104 			}
1105 		}
1106 	}
1107 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
1108 }
1109 
1110 /*
1111  * vmbus_onversion_response - Version response handler
1112  *
1113  * This is invoked when we received a response to our initiate contact request.
1114  * Find the matching request, copy the response and signal the requesting
1115  * thread.
1116  */
1117 static void vmbus_onversion_response(
1118 		struct vmbus_channel_message_header *hdr)
1119 {
1120 	struct vmbus_channel_msginfo *msginfo;
1121 	struct vmbus_channel_message_header *requestheader;
1122 	struct vmbus_channel_version_response *version_response;
1123 	unsigned long flags;
1124 
1125 	version_response = (struct vmbus_channel_version_response *)hdr;
1126 
1127 	trace_vmbus_onversion_response(version_response);
1128 
1129 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
1130 
1131 	list_for_each_entry(msginfo, &vmbus_connection.chn_msg_list,
1132 				msglistentry) {
1133 		requestheader =
1134 			(struct vmbus_channel_message_header *)msginfo->msg;
1135 
1136 		if (requestheader->msgtype ==
1137 		    CHANNELMSG_INITIATE_CONTACT) {
1138 			memcpy(&msginfo->response.version_response,
1139 			      version_response,
1140 			      sizeof(struct vmbus_channel_version_response));
1141 			complete(&msginfo->waitevent);
1142 		}
1143 	}
1144 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
1145 }
1146 
1147 /* Channel message dispatch table */
1148 const struct vmbus_channel_message_table_entry
1149 channel_message_table[CHANNELMSG_COUNT] = {
1150 	{ CHANNELMSG_INVALID,			0, NULL },
1151 	{ CHANNELMSG_OFFERCHANNEL,		0, vmbus_onoffer },
1152 	{ CHANNELMSG_RESCIND_CHANNELOFFER,	0, vmbus_onoffer_rescind },
1153 	{ CHANNELMSG_REQUESTOFFERS,		0, NULL },
1154 	{ CHANNELMSG_ALLOFFERS_DELIVERED,	1, vmbus_onoffers_delivered },
1155 	{ CHANNELMSG_OPENCHANNEL,		0, NULL },
1156 	{ CHANNELMSG_OPENCHANNEL_RESULT,	1, vmbus_onopen_result },
1157 	{ CHANNELMSG_CLOSECHANNEL,		0, NULL },
1158 	{ CHANNELMSG_GPADL_HEADER,		0, NULL },
1159 	{ CHANNELMSG_GPADL_BODY,		0, NULL },
1160 	{ CHANNELMSG_GPADL_CREATED,		1, vmbus_ongpadl_created },
1161 	{ CHANNELMSG_GPADL_TEARDOWN,		0, NULL },
1162 	{ CHANNELMSG_GPADL_TORNDOWN,		1, vmbus_ongpadl_torndown },
1163 	{ CHANNELMSG_RELID_RELEASED,		0, NULL },
1164 	{ CHANNELMSG_INITIATE_CONTACT,		0, NULL },
1165 	{ CHANNELMSG_VERSION_RESPONSE,		1, vmbus_onversion_response },
1166 	{ CHANNELMSG_UNLOAD,			0, NULL },
1167 	{ CHANNELMSG_UNLOAD_RESPONSE,		1, vmbus_unload_response },
1168 	{ CHANNELMSG_18,			0, NULL },
1169 	{ CHANNELMSG_19,			0, NULL },
1170 	{ CHANNELMSG_20,			0, NULL },
1171 	{ CHANNELMSG_TL_CONNECT_REQUEST,	0, NULL },
1172 };
1173 
1174 /*
1175  * vmbus_onmessage - Handler for channel protocol messages.
1176  *
1177  * This is invoked in the vmbus worker thread context.
1178  */
1179 void vmbus_onmessage(void *context)
1180 {
1181 	struct hv_message *msg = context;
1182 	struct vmbus_channel_message_header *hdr;
1183 	int size;
1184 
1185 	hdr = (struct vmbus_channel_message_header *)msg->u.payload;
1186 	size = msg->header.payload_size;
1187 
1188 	trace_vmbus_on_message(hdr);
1189 
1190 	if (hdr->msgtype >= CHANNELMSG_COUNT) {
1191 		pr_err("Received invalid channel message type %d size %d\n",
1192 			   hdr->msgtype, size);
1193 		print_hex_dump_bytes("", DUMP_PREFIX_NONE,
1194 				     (unsigned char *)msg->u.payload, size);
1195 		return;
1196 	}
1197 
1198 	if (channel_message_table[hdr->msgtype].message_handler)
1199 		channel_message_table[hdr->msgtype].message_handler(hdr);
1200 	else
1201 		pr_err("Unhandled channel message type %d\n", hdr->msgtype);
1202 }
1203 
1204 /*
1205  * vmbus_request_offers - Send a request to get all our pending offers.
1206  */
1207 int vmbus_request_offers(void)
1208 {
1209 	struct vmbus_channel_message_header *msg;
1210 	struct vmbus_channel_msginfo *msginfo;
1211 	int ret;
1212 
1213 	msginfo = kmalloc(sizeof(*msginfo) +
1214 			  sizeof(struct vmbus_channel_message_header),
1215 			  GFP_KERNEL);
1216 	if (!msginfo)
1217 		return -ENOMEM;
1218 
1219 	msg = (struct vmbus_channel_message_header *)msginfo->msg;
1220 
1221 	msg->msgtype = CHANNELMSG_REQUESTOFFERS;
1222 
1223 	ret = vmbus_post_msg(msg, sizeof(struct vmbus_channel_message_header),
1224 			     true);
1225 
1226 	trace_vmbus_request_offers(ret);
1227 
1228 	if (ret != 0) {
1229 		pr_err("Unable to request offers - %d\n", ret);
1230 
1231 		goto cleanup;
1232 	}
1233 
1234 cleanup:
1235 	kfree(msginfo);
1236 
1237 	return ret;
1238 }
1239 
1240 static void invoke_sc_cb(struct vmbus_channel *primary_channel)
1241 {
1242 	struct list_head *cur, *tmp;
1243 	struct vmbus_channel *cur_channel;
1244 
1245 	if (primary_channel->sc_creation_callback == NULL)
1246 		return;
1247 
1248 	list_for_each_safe(cur, tmp, &primary_channel->sc_list) {
1249 		cur_channel = list_entry(cur, struct vmbus_channel, sc_list);
1250 
1251 		primary_channel->sc_creation_callback(cur_channel);
1252 	}
1253 }
1254 
1255 void vmbus_set_sc_create_callback(struct vmbus_channel *primary_channel,
1256 				void (*sc_cr_cb)(struct vmbus_channel *new_sc))
1257 {
1258 	primary_channel->sc_creation_callback = sc_cr_cb;
1259 }
1260 EXPORT_SYMBOL_GPL(vmbus_set_sc_create_callback);
1261 
1262 bool vmbus_are_subchannels_present(struct vmbus_channel *primary)
1263 {
1264 	bool ret;
1265 
1266 	ret = !list_empty(&primary->sc_list);
1267 
1268 	if (ret) {
1269 		/*
1270 		 * Invoke the callback on sub-channel creation.
1271 		 * This will present a uniform interface to the
1272 		 * clients.
1273 		 */
1274 		invoke_sc_cb(primary);
1275 	}
1276 
1277 	return ret;
1278 }
1279 EXPORT_SYMBOL_GPL(vmbus_are_subchannels_present);
1280 
1281 void vmbus_set_chn_rescind_callback(struct vmbus_channel *channel,
1282 		void (*chn_rescind_cb)(struct vmbus_channel *))
1283 {
1284 	channel->chn_rescind_callback = chn_rescind_cb;
1285 }
1286 EXPORT_SYMBOL_GPL(vmbus_set_chn_rescind_callback);
1287