xref: /openbmc/linux/drivers/hv/connection.c (revision d3a9d7e4)
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  *
4  * Copyright (c) 2009, Microsoft Corporation.
5  *
6  * Authors:
7  *   Haiyang Zhang <haiyangz@microsoft.com>
8  *   Hank Janssen  <hjanssen@microsoft.com>
9  */
10 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
11 
12 #include <linux/kernel.h>
13 #include <linux/sched.h>
14 #include <linux/wait.h>
15 #include <linux/delay.h>
16 #include <linux/mm.h>
17 #include <linux/module.h>
18 #include <linux/slab.h>
19 #include <linux/vmalloc.h>
20 #include <linux/hyperv.h>
21 #include <linux/export.h>
22 #include <linux/io.h>
23 #include <linux/set_memory.h>
24 #include <asm/mshyperv.h>
25 
26 #include "hyperv_vmbus.h"
27 
28 
29 struct vmbus_connection vmbus_connection = {
30 	.conn_state		= DISCONNECTED,
31 	.unload_event		= COMPLETION_INITIALIZER(
32 				  vmbus_connection.unload_event),
33 	.next_gpadl_handle	= ATOMIC_INIT(0xE1E10),
34 
35 	.ready_for_suspend_event = COMPLETION_INITIALIZER(
36 				  vmbus_connection.ready_for_suspend_event),
37 	.ready_for_resume_event	= COMPLETION_INITIALIZER(
38 				  vmbus_connection.ready_for_resume_event),
39 };
40 EXPORT_SYMBOL_GPL(vmbus_connection);
41 
42 /*
43  * Negotiated protocol version with the host.
44  */
45 __u32 vmbus_proto_version;
46 EXPORT_SYMBOL_GPL(vmbus_proto_version);
47 
48 /*
49  * Table of VMBus versions listed from newest to oldest.
50  * VERSION_WIN7 and VERSION_WS2008 are no longer supported in
51  * Linux guests and are not listed.
52  */
53 static __u32 vmbus_versions[] = {
54 	VERSION_WIN10_V5_3,
55 	VERSION_WIN10_V5_2,
56 	VERSION_WIN10_V5_1,
57 	VERSION_WIN10_V5,
58 	VERSION_WIN10_V4_1,
59 	VERSION_WIN10,
60 	VERSION_WIN8_1,
61 	VERSION_WIN8
62 };
63 
64 /*
65  * Maximal VMBus protocol version guests can negotiate.  Useful to cap the
66  * VMBus version for testing and debugging purpose.
67  */
68 static uint max_version = VERSION_WIN10_V5_3;
69 
70 module_param(max_version, uint, S_IRUGO);
71 MODULE_PARM_DESC(max_version,
72 		 "Maximal VMBus protocol version which can be negotiated");
73 
74 int vmbus_negotiate_version(struct vmbus_channel_msginfo *msginfo, u32 version)
75 {
76 	int ret = 0;
77 	struct vmbus_channel_initiate_contact *msg;
78 	unsigned long flags;
79 
80 	init_completion(&msginfo->waitevent);
81 
82 	msg = (struct vmbus_channel_initiate_contact *)msginfo->msg;
83 
84 	memset(msg, 0, sizeof(*msg));
85 	msg->header.msgtype = CHANNELMSG_INITIATE_CONTACT;
86 	msg->vmbus_version_requested = version;
87 
88 	/*
89 	 * VMBus protocol 5.0 (VERSION_WIN10_V5) and higher require that we must
90 	 * use VMBUS_MESSAGE_CONNECTION_ID_4 for the Initiate Contact Message,
91 	 * and for subsequent messages, we must use the Message Connection ID
92 	 * field in the host-returned Version Response Message. And, with
93 	 * VERSION_WIN10_V5 and higher, we don't use msg->interrupt_page, but we
94 	 * tell the host explicitly that we still use VMBUS_MESSAGE_SINT(2) for
95 	 * compatibility.
96 	 *
97 	 * On old hosts, we should always use VMBUS_MESSAGE_CONNECTION_ID (1).
98 	 */
99 	if (version >= VERSION_WIN10_V5) {
100 		msg->msg_sint = VMBUS_MESSAGE_SINT;
101 		msg->msg_vtl = ms_hyperv.vtl;
102 		vmbus_connection.msg_conn_id = VMBUS_MESSAGE_CONNECTION_ID_4;
103 	} else {
104 		msg->interrupt_page = virt_to_phys(vmbus_connection.int_page);
105 		vmbus_connection.msg_conn_id = VMBUS_MESSAGE_CONNECTION_ID;
106 	}
107 
108 	/*
109 	 * shared_gpa_boundary is zero in non-SNP VMs, so it's safe to always
110 	 * bitwise OR it
111 	 */
112 	msg->monitor_page1 = virt_to_phys(vmbus_connection.monitor_pages[0]) |
113 				ms_hyperv.shared_gpa_boundary;
114 	msg->monitor_page2 = virt_to_phys(vmbus_connection.monitor_pages[1]) |
115 				ms_hyperv.shared_gpa_boundary;
116 
117 	msg->target_vcpu = hv_cpu_number_to_vp_number(VMBUS_CONNECT_CPU);
118 
119 	/*
120 	 * Add to list before we send the request since we may
121 	 * receive the response before returning from this routine
122 	 */
123 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
124 	list_add_tail(&msginfo->msglistentry,
125 		      &vmbus_connection.chn_msg_list);
126 
127 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
128 
129 	ret = vmbus_post_msg(msg,
130 			     sizeof(struct vmbus_channel_initiate_contact),
131 			     true);
132 
133 	trace_vmbus_negotiate_version(msg, ret);
134 
135 	if (ret != 0) {
136 		spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
137 		list_del(&msginfo->msglistentry);
138 		spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock,
139 					flags);
140 		return ret;
141 	}
142 
143 	/* Wait for the connection response */
144 	wait_for_completion(&msginfo->waitevent);
145 
146 	spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
147 	list_del(&msginfo->msglistentry);
148 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
149 
150 	/* Check if successful */
151 	if (msginfo->response.version_response.version_supported) {
152 		vmbus_connection.conn_state = CONNECTED;
153 
154 		if (version >= VERSION_WIN10_V5)
155 			vmbus_connection.msg_conn_id =
156 				msginfo->response.version_response.msg_conn_id;
157 	} else {
158 		return -ECONNREFUSED;
159 	}
160 
161 	return ret;
162 }
163 
164 /*
165  * vmbus_connect - Sends a connect request on the partition service connection
166  */
167 int vmbus_connect(void)
168 {
169 	struct vmbus_channel_msginfo *msginfo = NULL;
170 	int i, ret = 0;
171 	__u32 version;
172 
173 	/* Initialize the vmbus connection */
174 	vmbus_connection.conn_state = CONNECTING;
175 	vmbus_connection.work_queue = create_workqueue("hv_vmbus_con");
176 	if (!vmbus_connection.work_queue) {
177 		ret = -ENOMEM;
178 		goto cleanup;
179 	}
180 
181 	vmbus_connection.rescind_work_queue =
182 		create_workqueue("hv_vmbus_rescind");
183 	if (!vmbus_connection.rescind_work_queue) {
184 		ret = -ENOMEM;
185 		goto cleanup;
186 	}
187 	vmbus_connection.ignore_any_offer_msg = false;
188 
189 	vmbus_connection.handle_primary_chan_wq =
190 		create_workqueue("hv_pri_chan");
191 	if (!vmbus_connection.handle_primary_chan_wq) {
192 		ret = -ENOMEM;
193 		goto cleanup;
194 	}
195 
196 	vmbus_connection.handle_sub_chan_wq =
197 		create_workqueue("hv_sub_chan");
198 	if (!vmbus_connection.handle_sub_chan_wq) {
199 		ret = -ENOMEM;
200 		goto cleanup;
201 	}
202 
203 	INIT_LIST_HEAD(&vmbus_connection.chn_msg_list);
204 	spin_lock_init(&vmbus_connection.channelmsg_lock);
205 
206 	INIT_LIST_HEAD(&vmbus_connection.chn_list);
207 	mutex_init(&vmbus_connection.channel_mutex);
208 
209 	/*
210 	 * Setup the vmbus event connection for channel interrupt
211 	 * abstraction stuff
212 	 */
213 	vmbus_connection.int_page =
214 	(void *)hv_alloc_hyperv_zeroed_page();
215 	if (vmbus_connection.int_page == NULL) {
216 		ret = -ENOMEM;
217 		goto cleanup;
218 	}
219 
220 	vmbus_connection.recv_int_page = vmbus_connection.int_page;
221 	vmbus_connection.send_int_page =
222 		(void *)((unsigned long)vmbus_connection.int_page +
223 			(HV_HYP_PAGE_SIZE >> 1));
224 
225 	/*
226 	 * Setup the monitor notification facility. The 1st page for
227 	 * parent->child and the 2nd page for child->parent
228 	 */
229 	vmbus_connection.monitor_pages[0] = (void *)hv_alloc_hyperv_page();
230 	vmbus_connection.monitor_pages[1] = (void *)hv_alloc_hyperv_page();
231 	if ((vmbus_connection.monitor_pages[0] == NULL) ||
232 	    (vmbus_connection.monitor_pages[1] == NULL)) {
233 		ret = -ENOMEM;
234 		goto cleanup;
235 	}
236 
237 	ret = set_memory_decrypted((unsigned long)
238 				vmbus_connection.monitor_pages[0], 1);
239 	ret |= set_memory_decrypted((unsigned long)
240 				vmbus_connection.monitor_pages[1], 1);
241 	if (ret)
242 		goto cleanup;
243 
244 	/*
245 	 * Set_memory_decrypted() will change the memory contents if
246 	 * decryption occurs, so zero monitor pages here.
247 	 */
248 	memset(vmbus_connection.monitor_pages[0], 0x00, HV_HYP_PAGE_SIZE);
249 	memset(vmbus_connection.monitor_pages[1], 0x00, HV_HYP_PAGE_SIZE);
250 
251 	msginfo = kzalloc(sizeof(*msginfo) +
252 			  sizeof(struct vmbus_channel_initiate_contact),
253 			  GFP_KERNEL);
254 	if (msginfo == NULL) {
255 		ret = -ENOMEM;
256 		goto cleanup;
257 	}
258 
259 	/*
260 	 * Negotiate a compatible VMBUS version number with the
261 	 * host. We start with the highest number we can support
262 	 * and work our way down until we negotiate a compatible
263 	 * version.
264 	 */
265 
266 	for (i = 0; ; i++) {
267 		if (i == ARRAY_SIZE(vmbus_versions)) {
268 			ret = -EDOM;
269 			goto cleanup;
270 		}
271 
272 		version = vmbus_versions[i];
273 		if (version > max_version)
274 			continue;
275 
276 		ret = vmbus_negotiate_version(msginfo, version);
277 		if (ret == -ETIMEDOUT)
278 			goto cleanup;
279 
280 		if (vmbus_connection.conn_state == CONNECTED)
281 			break;
282 	}
283 
284 	if (hv_is_isolation_supported() && version < VERSION_WIN10_V5_2) {
285 		pr_err("Invalid VMBus version %d.%d (expected >= %d.%d) from the host supporting isolation\n",
286 		       version >> 16, version & 0xFFFF, VERSION_WIN10_V5_2 >> 16, VERSION_WIN10_V5_2 & 0xFFFF);
287 		ret = -EINVAL;
288 		goto cleanup;
289 	}
290 
291 	vmbus_proto_version = version;
292 	pr_info("Vmbus version:%d.%d\n",
293 		version >> 16, version & 0xFFFF);
294 
295 	vmbus_connection.channels = kcalloc(MAX_CHANNEL_RELIDS,
296 					    sizeof(struct vmbus_channel *),
297 					    GFP_KERNEL);
298 	if (vmbus_connection.channels == NULL) {
299 		ret = -ENOMEM;
300 		goto cleanup;
301 	}
302 
303 	kfree(msginfo);
304 	return 0;
305 
306 cleanup:
307 	pr_err("Unable to connect to host\n");
308 
309 	vmbus_connection.conn_state = DISCONNECTED;
310 	vmbus_disconnect();
311 
312 	kfree(msginfo);
313 
314 	return ret;
315 }
316 
317 void vmbus_disconnect(void)
318 {
319 	/*
320 	 * First send the unload request to the host.
321 	 */
322 	vmbus_initiate_unload(false);
323 
324 	if (vmbus_connection.handle_sub_chan_wq)
325 		destroy_workqueue(vmbus_connection.handle_sub_chan_wq);
326 
327 	if (vmbus_connection.handle_primary_chan_wq)
328 		destroy_workqueue(vmbus_connection.handle_primary_chan_wq);
329 
330 	if (vmbus_connection.rescind_work_queue)
331 		destroy_workqueue(vmbus_connection.rescind_work_queue);
332 
333 	if (vmbus_connection.work_queue)
334 		destroy_workqueue(vmbus_connection.work_queue);
335 
336 	if (vmbus_connection.int_page) {
337 		hv_free_hyperv_page((unsigned long)vmbus_connection.int_page);
338 		vmbus_connection.int_page = NULL;
339 	}
340 
341 	set_memory_encrypted((unsigned long)vmbus_connection.monitor_pages[0], 1);
342 	set_memory_encrypted((unsigned long)vmbus_connection.monitor_pages[1], 1);
343 
344 	hv_free_hyperv_page((unsigned long)vmbus_connection.monitor_pages[0]);
345 	hv_free_hyperv_page((unsigned long)vmbus_connection.monitor_pages[1]);
346 	vmbus_connection.monitor_pages[0] = NULL;
347 	vmbus_connection.monitor_pages[1] = NULL;
348 }
349 
350 /*
351  * relid2channel - Get the channel object given its
352  * child relative id (ie channel id)
353  */
354 struct vmbus_channel *relid2channel(u32 relid)
355 {
356 	if (vmbus_connection.channels == NULL) {
357 		pr_warn_once("relid2channel: relid=%d: No channels mapped!\n", relid);
358 		return NULL;
359 	}
360 	if (WARN_ON(relid >= MAX_CHANNEL_RELIDS))
361 		return NULL;
362 	return READ_ONCE(vmbus_connection.channels[relid]);
363 }
364 
365 /*
366  * vmbus_on_event - Process a channel event notification
367  *
368  * For batched channels (default) optimize host to guest signaling
369  * by ensuring:
370  * 1. While reading the channel, we disable interrupts from host.
371  * 2. Ensure that we process all posted messages from the host
372  *    before returning from this callback.
373  * 3. Once we return, enable signaling from the host. Once this
374  *    state is set we check to see if additional packets are
375  *    available to read. In this case we repeat the process.
376  *    If this tasklet has been running for a long time
377  *    then reschedule ourselves.
378  */
379 void vmbus_on_event(unsigned long data)
380 {
381 	struct vmbus_channel *channel = (void *) data;
382 	void (*callback_fn)(void *context);
383 
384 	trace_vmbus_on_event(channel);
385 
386 	hv_debug_delay_test(channel, INTERRUPT_DELAY);
387 
388 	/* A channel once created is persistent even when
389 	 * there is no driver handling the device. An
390 	 * unloading driver sets the onchannel_callback to NULL.
391 	 */
392 	callback_fn = READ_ONCE(channel->onchannel_callback);
393 	if (unlikely(!callback_fn))
394 		return;
395 
396 	(*callback_fn)(channel->channel_callback_context);
397 
398 	if (channel->callback_mode != HV_CALL_BATCHED)
399 		return;
400 
401 	if (likely(hv_end_read(&channel->inbound) == 0))
402 		return;
403 
404 	hv_begin_read(&channel->inbound);
405 	tasklet_schedule(&channel->callback_event);
406 }
407 
408 /*
409  * vmbus_post_msg - Send a msg on the vmbus's message connection
410  */
411 int vmbus_post_msg(void *buffer, size_t buflen, bool can_sleep)
412 {
413 	struct vmbus_channel_message_header *hdr;
414 	union hv_connection_id conn_id;
415 	int ret = 0;
416 	int retries = 0;
417 	u32 usec = 1;
418 
419 	conn_id.asu32 = 0;
420 	conn_id.u.id = vmbus_connection.msg_conn_id;
421 
422 	/*
423 	 * hv_post_message() can have transient failures because of
424 	 * insufficient resources. Retry the operation a couple of
425 	 * times before giving up.
426 	 */
427 	while (retries < 100) {
428 		ret = hv_post_message(conn_id, 1, buffer, buflen);
429 
430 		switch (ret) {
431 		case HV_STATUS_INVALID_CONNECTION_ID:
432 			/*
433 			 * See vmbus_negotiate_version(): VMBus protocol 5.0
434 			 * and higher require that we must use
435 			 * VMBUS_MESSAGE_CONNECTION_ID_4 for the Initiate
436 			 * Contact message, but on old hosts that only
437 			 * support VMBus protocol 4.0 or lower, here we get
438 			 * HV_STATUS_INVALID_CONNECTION_ID and we should
439 			 * return an error immediately without retrying.
440 			 */
441 			hdr = buffer;
442 			if (hdr->msgtype == CHANNELMSG_INITIATE_CONTACT)
443 				return -EINVAL;
444 			/*
445 			 * We could get this if we send messages too
446 			 * frequently.
447 			 */
448 			ret = -EAGAIN;
449 			break;
450 		case HV_STATUS_INSUFFICIENT_MEMORY:
451 		case HV_STATUS_INSUFFICIENT_BUFFERS:
452 			ret = -ENOBUFS;
453 			break;
454 		case HV_STATUS_SUCCESS:
455 			return ret;
456 		default:
457 			pr_err("hv_post_msg() failed; error code:%d\n", ret);
458 			return -EINVAL;
459 		}
460 
461 		retries++;
462 		if (can_sleep && usec > 1000)
463 			msleep(usec / 1000);
464 		else if (usec < MAX_UDELAY_MS * 1000)
465 			udelay(usec);
466 		else
467 			mdelay(usec / 1000);
468 
469 		if (retries < 22)
470 			usec *= 2;
471 	}
472 	return ret;
473 }
474 
475 /*
476  * vmbus_set_event - Send an event notification to the parent
477  */
478 void vmbus_set_event(struct vmbus_channel *channel)
479 {
480 	u32 child_relid = channel->offermsg.child_relid;
481 
482 	if (!channel->is_dedicated_interrupt)
483 		vmbus_send_interrupt(child_relid);
484 
485 	++channel->sig_events;
486 
487 	if (ms_hyperv.paravisor_present) {
488 		if (hv_isolation_type_snp())
489 			hv_ghcb_hypercall(HVCALL_SIGNAL_EVENT, &channel->sig_event,
490 					  NULL, sizeof(channel->sig_event));
491 		else if (hv_isolation_type_tdx())
492 			hv_tdx_hypercall(HVCALL_SIGNAL_EVENT | HV_HYPERCALL_FAST_BIT,
493 					 channel->sig_event, 0);
494 		else
495 			WARN_ON_ONCE(1);
496 	} else {
497 		hv_do_fast_hypercall8(HVCALL_SIGNAL_EVENT, channel->sig_event);
498 	}
499 }
500 EXPORT_SYMBOL_GPL(vmbus_set_event);
501