1685a6bf8SThomas Gleixner // SPDX-License-Identifier: GPL-2.0-only 206164d2bSGeorge Zhang /* 306164d2bSGeorge Zhang * VMware VMCI Driver 406164d2bSGeorge Zhang * 506164d2bSGeorge Zhang * Copyright (C) 2012 VMware, Inc. All rights reserved. 606164d2bSGeorge Zhang */ 706164d2bSGeorge Zhang 806164d2bSGeorge Zhang #include <linux/vmw_vmci_defs.h> 906164d2bSGeorge Zhang #include <linux/vmw_vmci_api.h> 1042281d20SAndy King #include <linux/highmem.h> 1106164d2bSGeorge Zhang #include <linux/kernel.h> 1242281d20SAndy King #include <linux/mm.h> 1306164d2bSGeorge Zhang #include <linux/module.h> 1406164d2bSGeorge Zhang #include <linux/mutex.h> 1542281d20SAndy King #include <linux/pagemap.h> 166d6dfb4fSAndy King #include <linux/pci.h> 1742281d20SAndy King #include <linux/sched.h> 1842281d20SAndy King #include <linux/slab.h> 19d2f83e90SRusty Russell #include <linux/uio.h> 2006164d2bSGeorge Zhang #include <linux/wait.h> 21f6dcf8e7SDavid Rientjes #include <linux/vmalloc.h> 22d838df2eSAl Viro #include <linux/skbuff.h> 2306164d2bSGeorge Zhang 2406164d2bSGeorge Zhang #include "vmci_handle_array.h" 2506164d2bSGeorge Zhang #include "vmci_queue_pair.h" 2606164d2bSGeorge Zhang #include "vmci_datagram.h" 2706164d2bSGeorge Zhang #include "vmci_resource.h" 2806164d2bSGeorge Zhang #include "vmci_context.h" 2906164d2bSGeorge Zhang #include "vmci_driver.h" 3006164d2bSGeorge Zhang #include "vmci_event.h" 3106164d2bSGeorge Zhang #include "vmci_route.h" 3206164d2bSGeorge Zhang 3306164d2bSGeorge Zhang /* 3406164d2bSGeorge Zhang * In the following, we will distinguish between two kinds of VMX processes - 3506164d2bSGeorge Zhang * the ones with versions lower than VMCI_VERSION_NOVMVM that use specialized 3606164d2bSGeorge Zhang * VMCI page files in the VMX and supporting VM to VM communication and the 3706164d2bSGeorge Zhang * newer ones that use the guest memory directly. We will in the following 3806164d2bSGeorge Zhang * refer to the older VMX versions as old-style VMX'en, and the newer ones as 3906164d2bSGeorge Zhang * new-style VMX'en. 4006164d2bSGeorge Zhang * 4106164d2bSGeorge Zhang * The state transition datagram is as follows (the VMCIQPB_ prefix has been 4206164d2bSGeorge Zhang * removed for readability) - see below for more details on the transtions: 4306164d2bSGeorge Zhang * 4406164d2bSGeorge Zhang * -------------- NEW ------------- 4506164d2bSGeorge Zhang * | | 4606164d2bSGeorge Zhang * \_/ \_/ 4706164d2bSGeorge Zhang * CREATED_NO_MEM <-----------------> CREATED_MEM 4806164d2bSGeorge Zhang * | | | 4906164d2bSGeorge Zhang * | o-----------------------o | 5006164d2bSGeorge Zhang * | | | 5106164d2bSGeorge Zhang * \_/ \_/ \_/ 5206164d2bSGeorge Zhang * ATTACHED_NO_MEM <----------------> ATTACHED_MEM 5306164d2bSGeorge Zhang * | | | 5406164d2bSGeorge Zhang * | o----------------------o | 5506164d2bSGeorge Zhang * | | | 5606164d2bSGeorge Zhang * \_/ \_/ \_/ 5706164d2bSGeorge Zhang * SHUTDOWN_NO_MEM <----------------> SHUTDOWN_MEM 5806164d2bSGeorge Zhang * | | 5906164d2bSGeorge Zhang * | | 6006164d2bSGeorge Zhang * -------------> gone <------------- 6106164d2bSGeorge Zhang * 6206164d2bSGeorge Zhang * In more detail. When a VMCI queue pair is first created, it will be in the 6306164d2bSGeorge Zhang * VMCIQPB_NEW state. It will then move into one of the following states: 6406164d2bSGeorge Zhang * 6506164d2bSGeorge Zhang * - VMCIQPB_CREATED_NO_MEM: this state indicates that either: 6606164d2bSGeorge Zhang * 6706164d2bSGeorge Zhang * - the created was performed by a host endpoint, in which case there is 6806164d2bSGeorge Zhang * no backing memory yet. 6906164d2bSGeorge Zhang * 7006164d2bSGeorge Zhang * - the create was initiated by an old-style VMX, that uses 7106164d2bSGeorge Zhang * vmci_qp_broker_set_page_store to specify the UVAs of the queue pair at 7206164d2bSGeorge Zhang * a later point in time. This state can be distinguished from the one 7306164d2bSGeorge Zhang * above by the context ID of the creator. A host side is not allowed to 7406164d2bSGeorge Zhang * attach until the page store has been set. 7506164d2bSGeorge Zhang * 7606164d2bSGeorge Zhang * - VMCIQPB_CREATED_MEM: this state is the result when the queue pair 7706164d2bSGeorge Zhang * is created by a VMX using the queue pair device backend that 7806164d2bSGeorge Zhang * sets the UVAs of the queue pair immediately and stores the 7906164d2bSGeorge Zhang * information for later attachers. At this point, it is ready for 8006164d2bSGeorge Zhang * the host side to attach to it. 8106164d2bSGeorge Zhang * 8206164d2bSGeorge Zhang * Once the queue pair is in one of the created states (with the exception of 8306164d2bSGeorge Zhang * the case mentioned for older VMX'en above), it is possible to attach to the 8406164d2bSGeorge Zhang * queue pair. Again we have two new states possible: 8506164d2bSGeorge Zhang * 8606164d2bSGeorge Zhang * - VMCIQPB_ATTACHED_MEM: this state can be reached through the following 8706164d2bSGeorge Zhang * paths: 8806164d2bSGeorge Zhang * 8906164d2bSGeorge Zhang * - from VMCIQPB_CREATED_NO_MEM when a new-style VMX allocates a queue 9006164d2bSGeorge Zhang * pair, and attaches to a queue pair previously created by the host side. 9106164d2bSGeorge Zhang * 9206164d2bSGeorge Zhang * - from VMCIQPB_CREATED_MEM when the host side attaches to a queue pair 9306164d2bSGeorge Zhang * already created by a guest. 9406164d2bSGeorge Zhang * 9506164d2bSGeorge Zhang * - from VMCIQPB_ATTACHED_NO_MEM, when an old-style VMX calls 9606164d2bSGeorge Zhang * vmci_qp_broker_set_page_store (see below). 9706164d2bSGeorge Zhang * 9806164d2bSGeorge Zhang * - VMCIQPB_ATTACHED_NO_MEM: If the queue pair already was in the 9906164d2bSGeorge Zhang * VMCIQPB_CREATED_NO_MEM due to a host side create, an old-style VMX will 10006164d2bSGeorge Zhang * bring the queue pair into this state. Once vmci_qp_broker_set_page_store 10106164d2bSGeorge Zhang * is called to register the user memory, the VMCIQPB_ATTACH_MEM state 10206164d2bSGeorge Zhang * will be entered. 10306164d2bSGeorge Zhang * 10406164d2bSGeorge Zhang * From the attached queue pair, the queue pair can enter the shutdown states 10506164d2bSGeorge Zhang * when either side of the queue pair detaches. If the guest side detaches 10606164d2bSGeorge Zhang * first, the queue pair will enter the VMCIQPB_SHUTDOWN_NO_MEM state, where 10706164d2bSGeorge Zhang * the content of the queue pair will no longer be available. If the host 10806164d2bSGeorge Zhang * side detaches first, the queue pair will either enter the 10906164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_MEM, if the guest memory is currently mapped, or 11006164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_NO_MEM, if the guest memory is not mapped 11106164d2bSGeorge Zhang * (e.g., the host detaches while a guest is stunned). 11206164d2bSGeorge Zhang * 11306164d2bSGeorge Zhang * New-style VMX'en will also unmap guest memory, if the guest is 11406164d2bSGeorge Zhang * quiesced, e.g., during a snapshot operation. In that case, the guest 11506164d2bSGeorge Zhang * memory will no longer be available, and the queue pair will transition from 11606164d2bSGeorge Zhang * *_MEM state to a *_NO_MEM state. The VMX may later map the memory once more, 11706164d2bSGeorge Zhang * in which case the queue pair will transition from the *_NO_MEM state at that 11806164d2bSGeorge Zhang * point back to the *_MEM state. Note that the *_NO_MEM state may have changed, 11906164d2bSGeorge Zhang * since the peer may have either attached or detached in the meantime. The 12006164d2bSGeorge Zhang * values are laid out such that ++ on a state will move from a *_NO_MEM to a 12106164d2bSGeorge Zhang * *_MEM state, and vice versa. 12206164d2bSGeorge Zhang */ 12306164d2bSGeorge Zhang 12406164d2bSGeorge Zhang /* The Kernel specific component of the struct vmci_queue structure. */ 12506164d2bSGeorge Zhang struct vmci_queue_kern_if { 12606164d2bSGeorge Zhang struct mutex __mutex; /* Protects the queue. */ 12706164d2bSGeorge Zhang struct mutex *mutex; /* Shared by producer and consumer queues. */ 1286d6dfb4fSAndy King size_t num_pages; /* Number of pages incl. header. */ 1296d6dfb4fSAndy King bool host; /* Host or guest? */ 1306d6dfb4fSAndy King union { 1316d6dfb4fSAndy King struct { 1326d6dfb4fSAndy King dma_addr_t *pas; 1336d6dfb4fSAndy King void **vas; 1346d6dfb4fSAndy King } g; /* Used by the guest. */ 1356d6dfb4fSAndy King struct { 1366d6dfb4fSAndy King struct page **page; 1376d6dfb4fSAndy King struct page **header_page; 1386d6dfb4fSAndy King } h; /* Used by the host. */ 1396d6dfb4fSAndy King } u; 14006164d2bSGeorge Zhang }; 14106164d2bSGeorge Zhang 14206164d2bSGeorge Zhang /* 14306164d2bSGeorge Zhang * This structure is opaque to the clients. 14406164d2bSGeorge Zhang */ 14506164d2bSGeorge Zhang struct vmci_qp { 14606164d2bSGeorge Zhang struct vmci_handle handle; 14706164d2bSGeorge Zhang struct vmci_queue *produce_q; 14806164d2bSGeorge Zhang struct vmci_queue *consume_q; 14906164d2bSGeorge Zhang u64 produce_q_size; 15006164d2bSGeorge Zhang u64 consume_q_size; 15106164d2bSGeorge Zhang u32 peer; 15206164d2bSGeorge Zhang u32 flags; 15306164d2bSGeorge Zhang u32 priv_flags; 15406164d2bSGeorge Zhang bool guest_endpoint; 15506164d2bSGeorge Zhang unsigned int blocked; 15606164d2bSGeorge Zhang unsigned int generation; 15706164d2bSGeorge Zhang wait_queue_head_t event; 15806164d2bSGeorge Zhang }; 15906164d2bSGeorge Zhang 16006164d2bSGeorge Zhang enum qp_broker_state { 16106164d2bSGeorge Zhang VMCIQPB_NEW, 16206164d2bSGeorge Zhang VMCIQPB_CREATED_NO_MEM, 16306164d2bSGeorge Zhang VMCIQPB_CREATED_MEM, 16406164d2bSGeorge Zhang VMCIQPB_ATTACHED_NO_MEM, 16506164d2bSGeorge Zhang VMCIQPB_ATTACHED_MEM, 16606164d2bSGeorge Zhang VMCIQPB_SHUTDOWN_NO_MEM, 16706164d2bSGeorge Zhang VMCIQPB_SHUTDOWN_MEM, 16806164d2bSGeorge Zhang VMCIQPB_GONE 16906164d2bSGeorge Zhang }; 17006164d2bSGeorge Zhang 17106164d2bSGeorge Zhang #define QPBROKERSTATE_HAS_MEM(_qpb) (_qpb->state == VMCIQPB_CREATED_MEM || \ 17206164d2bSGeorge Zhang _qpb->state == VMCIQPB_ATTACHED_MEM || \ 17306164d2bSGeorge Zhang _qpb->state == VMCIQPB_SHUTDOWN_MEM) 17406164d2bSGeorge Zhang 17506164d2bSGeorge Zhang /* 17606164d2bSGeorge Zhang * In the queue pair broker, we always use the guest point of view for 17706164d2bSGeorge Zhang * the produce and consume queue values and references, e.g., the 17806164d2bSGeorge Zhang * produce queue size stored is the guests produce queue size. The 17906164d2bSGeorge Zhang * host endpoint will need to swap these around. The only exception is 18006164d2bSGeorge Zhang * the local queue pairs on the host, in which case the host endpoint 18106164d2bSGeorge Zhang * that creates the queue pair will have the right orientation, and 18206164d2bSGeorge Zhang * the attaching host endpoint will need to swap. 18306164d2bSGeorge Zhang */ 18406164d2bSGeorge Zhang struct qp_entry { 18506164d2bSGeorge Zhang struct list_head list_item; 18606164d2bSGeorge Zhang struct vmci_handle handle; 18706164d2bSGeorge Zhang u32 peer; 18806164d2bSGeorge Zhang u32 flags; 18906164d2bSGeorge Zhang u64 produce_size; 19006164d2bSGeorge Zhang u64 consume_size; 19106164d2bSGeorge Zhang u32 ref_count; 19206164d2bSGeorge Zhang }; 19306164d2bSGeorge Zhang 19406164d2bSGeorge Zhang struct qp_broker_entry { 19506164d2bSGeorge Zhang struct vmci_resource resource; 19606164d2bSGeorge Zhang struct qp_entry qp; 19706164d2bSGeorge Zhang u32 create_id; 19806164d2bSGeorge Zhang u32 attach_id; 19906164d2bSGeorge Zhang enum qp_broker_state state; 20006164d2bSGeorge Zhang bool require_trusted_attach; 20106164d2bSGeorge Zhang bool created_by_trusted; 20206164d2bSGeorge Zhang bool vmci_page_files; /* Created by VMX using VMCI page files */ 20306164d2bSGeorge Zhang struct vmci_queue *produce_q; 20406164d2bSGeorge Zhang struct vmci_queue *consume_q; 20506164d2bSGeorge Zhang struct vmci_queue_header saved_produce_q; 20606164d2bSGeorge Zhang struct vmci_queue_header saved_consume_q; 20706164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb; 20806164d2bSGeorge Zhang void *client_data; 20906164d2bSGeorge Zhang void *local_mem; /* Kernel memory for local queue pair */ 21006164d2bSGeorge Zhang }; 21106164d2bSGeorge Zhang 21206164d2bSGeorge Zhang struct qp_guest_endpoint { 21306164d2bSGeorge Zhang struct vmci_resource resource; 21406164d2bSGeorge Zhang struct qp_entry qp; 21506164d2bSGeorge Zhang u64 num_ppns; 21606164d2bSGeorge Zhang void *produce_q; 21706164d2bSGeorge Zhang void *consume_q; 218e6389a13SDmitry Torokhov struct ppn_set ppn_set; 21906164d2bSGeorge Zhang }; 22006164d2bSGeorge Zhang 22106164d2bSGeorge Zhang struct qp_list { 22206164d2bSGeorge Zhang struct list_head head; 22306164d2bSGeorge Zhang struct mutex mutex; /* Protect queue list. */ 22406164d2bSGeorge Zhang }; 22506164d2bSGeorge Zhang 22606164d2bSGeorge Zhang static struct qp_list qp_broker_list = { 22706164d2bSGeorge Zhang .head = LIST_HEAD_INIT(qp_broker_list.head), 22806164d2bSGeorge Zhang .mutex = __MUTEX_INITIALIZER(qp_broker_list.mutex), 22906164d2bSGeorge Zhang }; 23006164d2bSGeorge Zhang 23106164d2bSGeorge Zhang static struct qp_list qp_guest_endpoints = { 23206164d2bSGeorge Zhang .head = LIST_HEAD_INIT(qp_guest_endpoints.head), 23306164d2bSGeorge Zhang .mutex = __MUTEX_INITIALIZER(qp_guest_endpoints.mutex), 23406164d2bSGeorge Zhang }; 23506164d2bSGeorge Zhang 23606164d2bSGeorge Zhang #define INVALID_VMCI_GUEST_MEM_ID 0 23706164d2bSGeorge Zhang #define QPE_NUM_PAGES(_QPE) ((u32) \ 23842281d20SAndy King (DIV_ROUND_UP(_QPE.produce_size, PAGE_SIZE) + \ 23942281d20SAndy King DIV_ROUND_UP(_QPE.consume_size, PAGE_SIZE) + 2)) 2407eecea89SJorgen Hansen #define QP_SIZES_ARE_VALID(_prod_qsize, _cons_qsize) \ 2417eecea89SJorgen Hansen ((_prod_qsize) + (_cons_qsize) >= max(_prod_qsize, _cons_qsize) && \ 2427eecea89SJorgen Hansen (_prod_qsize) + (_cons_qsize) <= VMCI_MAX_GUEST_QP_MEMORY) 24306164d2bSGeorge Zhang 24406164d2bSGeorge Zhang /* 24506164d2bSGeorge Zhang * Frees kernel VA space for a given queue and its queue header, and 24606164d2bSGeorge Zhang * frees physical data pages. 24706164d2bSGeorge Zhang */ 24806164d2bSGeorge Zhang static void qp_free_queue(void *q, u64 size) 24906164d2bSGeorge Zhang { 25006164d2bSGeorge Zhang struct vmci_queue *queue = q; 25106164d2bSGeorge Zhang 25206164d2bSGeorge Zhang if (queue) { 2536d6dfb4fSAndy King u64 i; 25406164d2bSGeorge Zhang 2556d6dfb4fSAndy King /* Given size does not include header, so add in a page here. */ 2566d6dfb4fSAndy King for (i = 0; i < DIV_ROUND_UP(size, PAGE_SIZE) + 1; i++) { 2576d6dfb4fSAndy King dma_free_coherent(&vmci_pdev->dev, PAGE_SIZE, 2586d6dfb4fSAndy King queue->kernel_if->u.g.vas[i], 2596d6dfb4fSAndy King queue->kernel_if->u.g.pas[i]); 2606d6dfb4fSAndy King } 26106164d2bSGeorge Zhang 2626d6dfb4fSAndy King vfree(queue); 26306164d2bSGeorge Zhang } 26406164d2bSGeorge Zhang } 26506164d2bSGeorge Zhang 26606164d2bSGeorge Zhang /* 2676d6dfb4fSAndy King * Allocates kernel queue pages of specified size with IOMMU mappings, 2686d6dfb4fSAndy King * plus space for the queue structure/kernel interface and the queue 2696d6dfb4fSAndy King * header. 27006164d2bSGeorge Zhang */ 27106164d2bSGeorge Zhang static void *qp_alloc_queue(u64 size, u32 flags) 27206164d2bSGeorge Zhang { 27306164d2bSGeorge Zhang u64 i; 27406164d2bSGeorge Zhang struct vmci_queue *queue; 275aa6467f1SJorgen Hansen size_t pas_size; 276aa6467f1SJorgen Hansen size_t vas_size; 277aa6467f1SJorgen Hansen size_t queue_size = sizeof(*queue) + sizeof(*queue->kernel_if); 278146180c0SDan Carpenter u64 num_pages; 279aa6467f1SJorgen Hansen 280146180c0SDan Carpenter if (size > SIZE_MAX - PAGE_SIZE) 281146180c0SDan Carpenter return NULL; 282146180c0SDan Carpenter num_pages = DIV_ROUND_UP(size, PAGE_SIZE) + 1; 283aa6467f1SJorgen Hansen if (num_pages > 284aa6467f1SJorgen Hansen (SIZE_MAX - queue_size) / 285aa6467f1SJorgen Hansen (sizeof(*queue->kernel_if->u.g.pas) + 286aa6467f1SJorgen Hansen sizeof(*queue->kernel_if->u.g.vas))) 287aa6467f1SJorgen Hansen return NULL; 288aa6467f1SJorgen Hansen 289aa6467f1SJorgen Hansen pas_size = num_pages * sizeof(*queue->kernel_if->u.g.pas); 290aa6467f1SJorgen Hansen vas_size = num_pages * sizeof(*queue->kernel_if->u.g.vas); 291aa6467f1SJorgen Hansen queue_size += pas_size + vas_size; 29206164d2bSGeorge Zhang 2936d6dfb4fSAndy King queue = vmalloc(queue_size); 2946d6dfb4fSAndy King if (!queue) 29506164d2bSGeorge Zhang return NULL; 29606164d2bSGeorge Zhang 2976d6dfb4fSAndy King queue->q_header = NULL; 29806164d2bSGeorge Zhang queue->saved_header = NULL; 29906164d2bSGeorge Zhang queue->kernel_if = (struct vmci_queue_kern_if *)(queue + 1); 3006d6dfb4fSAndy King queue->kernel_if->mutex = NULL; 3016d6dfb4fSAndy King queue->kernel_if->num_pages = num_pages; 3026d6dfb4fSAndy King queue->kernel_if->u.g.pas = (dma_addr_t *)(queue->kernel_if + 1); 3036d6dfb4fSAndy King queue->kernel_if->u.g.vas = 3046d6dfb4fSAndy King (void **)((u8 *)queue->kernel_if->u.g.pas + pas_size); 30506164d2bSGeorge Zhang queue->kernel_if->host = false; 30606164d2bSGeorge Zhang 3076d6dfb4fSAndy King for (i = 0; i < num_pages; i++) { 3086d6dfb4fSAndy King queue->kernel_if->u.g.vas[i] = 3096d6dfb4fSAndy King dma_alloc_coherent(&vmci_pdev->dev, PAGE_SIZE, 3106d6dfb4fSAndy King &queue->kernel_if->u.g.pas[i], 3116d6dfb4fSAndy King GFP_KERNEL); 3126d6dfb4fSAndy King if (!queue->kernel_if->u.g.vas[i]) { 3136d6dfb4fSAndy King /* Size excl. the header. */ 31406164d2bSGeorge Zhang qp_free_queue(queue, i * PAGE_SIZE); 31506164d2bSGeorge Zhang return NULL; 31606164d2bSGeorge Zhang } 3176d6dfb4fSAndy King } 3186d6dfb4fSAndy King 3196d6dfb4fSAndy King /* Queue header is the first page. */ 3206d6dfb4fSAndy King queue->q_header = queue->kernel_if->u.g.vas[0]; 3216d6dfb4fSAndy King 3226d6dfb4fSAndy King return queue; 3236d6dfb4fSAndy King } 32406164d2bSGeorge Zhang 32506164d2bSGeorge Zhang /* 32606164d2bSGeorge Zhang * Copies from a given buffer or iovector to a VMCI Queue. Uses 32706164d2bSGeorge Zhang * kmap()/kunmap() to dynamically map/unmap required portions of the queue 32806164d2bSGeorge Zhang * by traversing the offset -> page translation structure for the queue. 32906164d2bSGeorge Zhang * Assumes that offset + size does not wrap around in the queue. 33006164d2bSGeorge Zhang */ 331d1038084SAl Viro static int qp_memcpy_to_queue_iter(struct vmci_queue *queue, 33206164d2bSGeorge Zhang u64 queue_offset, 333d1038084SAl Viro struct iov_iter *from, 334d1038084SAl Viro size_t size) 33506164d2bSGeorge Zhang { 33606164d2bSGeorge Zhang struct vmci_queue_kern_if *kernel_if = queue->kernel_if; 33706164d2bSGeorge Zhang size_t bytes_copied = 0; 33806164d2bSGeorge Zhang 33906164d2bSGeorge Zhang while (bytes_copied < size) { 3406d6dfb4fSAndy King const u64 page_index = 3416d6dfb4fSAndy King (queue_offset + bytes_copied) / PAGE_SIZE; 3426d6dfb4fSAndy King const size_t page_offset = 34306164d2bSGeorge Zhang (queue_offset + bytes_copied) & (PAGE_SIZE - 1); 34406164d2bSGeorge Zhang void *va; 34506164d2bSGeorge Zhang size_t to_copy; 34606164d2bSGeorge Zhang 3476d6dfb4fSAndy King if (kernel_if->host) 3486d6dfb4fSAndy King va = kmap(kernel_if->u.h.page[page_index]); 3496d6dfb4fSAndy King else 3506d6dfb4fSAndy King va = kernel_if->u.g.vas[page_index + 1]; 3516d6dfb4fSAndy King /* Skip header. */ 35206164d2bSGeorge Zhang 35306164d2bSGeorge Zhang if (size - bytes_copied > PAGE_SIZE - page_offset) 35406164d2bSGeorge Zhang /* Enough payload to fill up from this page. */ 35506164d2bSGeorge Zhang to_copy = PAGE_SIZE - page_offset; 35606164d2bSGeorge Zhang else 35706164d2bSGeorge Zhang to_copy = size - bytes_copied; 35806164d2bSGeorge Zhang 359d1038084SAl Viro if (!copy_from_iter_full((u8 *)va + page_offset, to_copy, 360d1038084SAl Viro from)) { 3616d6dfb4fSAndy King if (kernel_if->host) 3626d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 36306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 36406164d2bSGeorge Zhang } 36506164d2bSGeorge Zhang bytes_copied += to_copy; 3666d6dfb4fSAndy King if (kernel_if->host) 3676d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 36806164d2bSGeorge Zhang } 36906164d2bSGeorge Zhang 37006164d2bSGeorge Zhang return VMCI_SUCCESS; 37106164d2bSGeorge Zhang } 37206164d2bSGeorge Zhang 37306164d2bSGeorge Zhang /* 37406164d2bSGeorge Zhang * Copies to a given buffer or iovector from a VMCI Queue. Uses 37506164d2bSGeorge Zhang * kmap()/kunmap() to dynamically map/unmap required portions of the queue 37606164d2bSGeorge Zhang * by traversing the offset -> page translation structure for the queue. 37706164d2bSGeorge Zhang * Assumes that offset + size does not wrap around in the queue. 37806164d2bSGeorge Zhang */ 37953f58d8eSAl Viro static int qp_memcpy_from_queue_iter(struct iov_iter *to, 38006164d2bSGeorge Zhang const struct vmci_queue *queue, 38153f58d8eSAl Viro u64 queue_offset, size_t size) 38206164d2bSGeorge Zhang { 38306164d2bSGeorge Zhang struct vmci_queue_kern_if *kernel_if = queue->kernel_if; 38406164d2bSGeorge Zhang size_t bytes_copied = 0; 38506164d2bSGeorge Zhang 38606164d2bSGeorge Zhang while (bytes_copied < size) { 3876d6dfb4fSAndy King const u64 page_index = 3886d6dfb4fSAndy King (queue_offset + bytes_copied) / PAGE_SIZE; 3896d6dfb4fSAndy King const size_t page_offset = 39006164d2bSGeorge Zhang (queue_offset + bytes_copied) & (PAGE_SIZE - 1); 39106164d2bSGeorge Zhang void *va; 39206164d2bSGeorge Zhang size_t to_copy; 39353f58d8eSAl Viro int err; 39406164d2bSGeorge Zhang 3956d6dfb4fSAndy King if (kernel_if->host) 3966d6dfb4fSAndy King va = kmap(kernel_if->u.h.page[page_index]); 3976d6dfb4fSAndy King else 3986d6dfb4fSAndy King va = kernel_if->u.g.vas[page_index + 1]; 3996d6dfb4fSAndy King /* Skip header. */ 40006164d2bSGeorge Zhang 40106164d2bSGeorge Zhang if (size - bytes_copied > PAGE_SIZE - page_offset) 40206164d2bSGeorge Zhang /* Enough payload to fill up this page. */ 40306164d2bSGeorge Zhang to_copy = PAGE_SIZE - page_offset; 40406164d2bSGeorge Zhang else 40506164d2bSGeorge Zhang to_copy = size - bytes_copied; 40606164d2bSGeorge Zhang 407ce3d6e7dSAl Viro err = copy_to_iter((u8 *)va + page_offset, to_copy, to); 408ce3d6e7dSAl Viro if (err != to_copy) { 4096d6dfb4fSAndy King if (kernel_if->host) 4106d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 41106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 41206164d2bSGeorge Zhang } 41306164d2bSGeorge Zhang bytes_copied += to_copy; 4146d6dfb4fSAndy King if (kernel_if->host) 4156d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 41606164d2bSGeorge Zhang } 41706164d2bSGeorge Zhang 41806164d2bSGeorge Zhang return VMCI_SUCCESS; 41906164d2bSGeorge Zhang } 42006164d2bSGeorge Zhang 42106164d2bSGeorge Zhang /* 42206164d2bSGeorge Zhang * Allocates two list of PPNs --- one for the pages in the produce queue, 42306164d2bSGeorge Zhang * and the other for the pages in the consume queue. Intializes the list 42406164d2bSGeorge Zhang * of PPNs with the page frame numbers of the KVA for the two queues (and 42506164d2bSGeorge Zhang * the queue headers). 42606164d2bSGeorge Zhang */ 42706164d2bSGeorge Zhang static int qp_alloc_ppn_set(void *prod_q, 42806164d2bSGeorge Zhang u64 num_produce_pages, 42906164d2bSGeorge Zhang void *cons_q, 430e6389a13SDmitry Torokhov u64 num_consume_pages, struct ppn_set *ppn_set) 43106164d2bSGeorge Zhang { 432f2db7361SVishnu DASA u64 *produce_ppns; 433f2db7361SVishnu DASA u64 *consume_ppns; 43406164d2bSGeorge Zhang struct vmci_queue *produce_q = prod_q; 43506164d2bSGeorge Zhang struct vmci_queue *consume_q = cons_q; 43606164d2bSGeorge Zhang u64 i; 43706164d2bSGeorge Zhang 43806164d2bSGeorge Zhang if (!produce_q || !num_produce_pages || !consume_q || 43906164d2bSGeorge Zhang !num_consume_pages || !ppn_set) 44006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 44106164d2bSGeorge Zhang 44206164d2bSGeorge Zhang if (ppn_set->initialized) 44306164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 44406164d2bSGeorge Zhang 44506164d2bSGeorge Zhang produce_ppns = 4466da2ec56SKees Cook kmalloc_array(num_produce_pages, sizeof(*produce_ppns), 4476da2ec56SKees Cook GFP_KERNEL); 44806164d2bSGeorge Zhang if (!produce_ppns) 44906164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 45006164d2bSGeorge Zhang 45106164d2bSGeorge Zhang consume_ppns = 4526da2ec56SKees Cook kmalloc_array(num_consume_pages, sizeof(*consume_ppns), 4536da2ec56SKees Cook GFP_KERNEL); 45406164d2bSGeorge Zhang if (!consume_ppns) { 45506164d2bSGeorge Zhang kfree(produce_ppns); 45606164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 45706164d2bSGeorge Zhang } 45806164d2bSGeorge Zhang 459f2db7361SVishnu DASA for (i = 0; i < num_produce_pages; i++) 46006164d2bSGeorge Zhang produce_ppns[i] = 4616d6dfb4fSAndy King produce_q->kernel_if->u.g.pas[i] >> PAGE_SHIFT; 46206164d2bSGeorge Zhang 463f2db7361SVishnu DASA for (i = 0; i < num_consume_pages; i++) 46406164d2bSGeorge Zhang consume_ppns[i] = 4656d6dfb4fSAndy King consume_q->kernel_if->u.g.pas[i] >> PAGE_SHIFT; 46606164d2bSGeorge Zhang 46706164d2bSGeorge Zhang ppn_set->num_produce_pages = num_produce_pages; 46806164d2bSGeorge Zhang ppn_set->num_consume_pages = num_consume_pages; 46906164d2bSGeorge Zhang ppn_set->produce_ppns = produce_ppns; 47006164d2bSGeorge Zhang ppn_set->consume_ppns = consume_ppns; 47106164d2bSGeorge Zhang ppn_set->initialized = true; 47206164d2bSGeorge Zhang return VMCI_SUCCESS; 47306164d2bSGeorge Zhang } 47406164d2bSGeorge Zhang 47506164d2bSGeorge Zhang /* 47606164d2bSGeorge Zhang * Frees the two list of PPNs for a queue pair. 47706164d2bSGeorge Zhang */ 478e6389a13SDmitry Torokhov static void qp_free_ppn_set(struct ppn_set *ppn_set) 47906164d2bSGeorge Zhang { 48006164d2bSGeorge Zhang if (ppn_set->initialized) { 48106164d2bSGeorge Zhang /* Do not call these functions on NULL inputs. */ 48206164d2bSGeorge Zhang kfree(ppn_set->produce_ppns); 48306164d2bSGeorge Zhang kfree(ppn_set->consume_ppns); 48406164d2bSGeorge Zhang } 48506164d2bSGeorge Zhang memset(ppn_set, 0, sizeof(*ppn_set)); 48606164d2bSGeorge Zhang } 48706164d2bSGeorge Zhang 48806164d2bSGeorge Zhang /* 48906164d2bSGeorge Zhang * Populates the list of PPNs in the hypercall structure with the PPNS 49006164d2bSGeorge Zhang * of the produce queue and the consume queue. 49106164d2bSGeorge Zhang */ 492e6389a13SDmitry Torokhov static int qp_populate_ppn_set(u8 *call_buf, const struct ppn_set *ppn_set) 49306164d2bSGeorge Zhang { 494f2db7361SVishnu DASA if (vmci_use_ppn64()) { 49506164d2bSGeorge Zhang memcpy(call_buf, ppn_set->produce_ppns, 496f2db7361SVishnu DASA ppn_set->num_produce_pages * 497f2db7361SVishnu DASA sizeof(*ppn_set->produce_ppns)); 49806164d2bSGeorge Zhang memcpy(call_buf + 499f2db7361SVishnu DASA ppn_set->num_produce_pages * 500f2db7361SVishnu DASA sizeof(*ppn_set->produce_ppns), 50106164d2bSGeorge Zhang ppn_set->consume_ppns, 502f2db7361SVishnu DASA ppn_set->num_consume_pages * 503f2db7361SVishnu DASA sizeof(*ppn_set->consume_ppns)); 504f2db7361SVishnu DASA } else { 505f2db7361SVishnu DASA int i; 506f2db7361SVishnu DASA u32 *ppns = (u32 *) call_buf; 507f2db7361SVishnu DASA 508f2db7361SVishnu DASA for (i = 0; i < ppn_set->num_produce_pages; i++) 509f2db7361SVishnu DASA ppns[i] = (u32) ppn_set->produce_ppns[i]; 510f2db7361SVishnu DASA 511f2db7361SVishnu DASA ppns = &ppns[ppn_set->num_produce_pages]; 512f2db7361SVishnu DASA 513f2db7361SVishnu DASA for (i = 0; i < ppn_set->num_consume_pages; i++) 514f2db7361SVishnu DASA ppns[i] = (u32) ppn_set->consume_ppns[i]; 515f2db7361SVishnu DASA } 51606164d2bSGeorge Zhang 51706164d2bSGeorge Zhang return VMCI_SUCCESS; 51806164d2bSGeorge Zhang } 51906164d2bSGeorge Zhang 52006164d2bSGeorge Zhang /* 52106164d2bSGeorge Zhang * Allocates kernel VA space of specified size plus space for the queue 52206164d2bSGeorge Zhang * and kernel interface. This is different from the guest queue allocator, 52306164d2bSGeorge Zhang * because we do not allocate our own queue header/data pages here but 52406164d2bSGeorge Zhang * share those of the guest. 52506164d2bSGeorge Zhang */ 52606164d2bSGeorge Zhang static struct vmci_queue *qp_host_alloc_queue(u64 size) 52706164d2bSGeorge Zhang { 52806164d2bSGeorge Zhang struct vmci_queue *queue; 529aa6467f1SJorgen Hansen size_t queue_page_size; 530146180c0SDan Carpenter u64 num_pages; 53106164d2bSGeorge Zhang const size_t queue_size = sizeof(*queue) + sizeof(*(queue->kernel_if)); 532aa6467f1SJorgen Hansen 5337eecea89SJorgen Hansen if (size > min_t(size_t, VMCI_MAX_GUEST_QP_MEMORY, SIZE_MAX - PAGE_SIZE)) 534146180c0SDan Carpenter return NULL; 535146180c0SDan Carpenter num_pages = DIV_ROUND_UP(size, PAGE_SIZE) + 1; 536aa6467f1SJorgen Hansen if (num_pages > (SIZE_MAX - queue_size) / 537aa6467f1SJorgen Hansen sizeof(*queue->kernel_if->u.h.page)) 538aa6467f1SJorgen Hansen return NULL; 539aa6467f1SJorgen Hansen 540aa6467f1SJorgen Hansen queue_page_size = num_pages * sizeof(*queue->kernel_if->u.h.page); 54106164d2bSGeorge Zhang 5422fd10bcfSSabyrzhan Tasbolatov if (queue_size + queue_page_size > KMALLOC_MAX_SIZE) 5432fd10bcfSSabyrzhan Tasbolatov return NULL; 5442fd10bcfSSabyrzhan Tasbolatov 54506164d2bSGeorge Zhang queue = kzalloc(queue_size + queue_page_size, GFP_KERNEL); 54606164d2bSGeorge Zhang if (queue) { 54706164d2bSGeorge Zhang queue->q_header = NULL; 54806164d2bSGeorge Zhang queue->saved_header = NULL; 5496d6dfb4fSAndy King queue->kernel_if = (struct vmci_queue_kern_if *)(queue + 1); 55006164d2bSGeorge Zhang queue->kernel_if->host = true; 55106164d2bSGeorge Zhang queue->kernel_if->mutex = NULL; 55206164d2bSGeorge Zhang queue->kernel_if->num_pages = num_pages; 5536d6dfb4fSAndy King queue->kernel_if->u.h.header_page = 55406164d2bSGeorge Zhang (struct page **)((u8 *)queue + queue_size); 5556d6dfb4fSAndy King queue->kernel_if->u.h.page = 5566d6dfb4fSAndy King &queue->kernel_if->u.h.header_page[1]; 55706164d2bSGeorge Zhang } 55806164d2bSGeorge Zhang 55906164d2bSGeorge Zhang return queue; 56006164d2bSGeorge Zhang } 56106164d2bSGeorge Zhang 56206164d2bSGeorge Zhang /* 56306164d2bSGeorge Zhang * Frees kernel memory for a given queue (header plus translation 56406164d2bSGeorge Zhang * structure). 56506164d2bSGeorge Zhang */ 56606164d2bSGeorge Zhang static void qp_host_free_queue(struct vmci_queue *queue, u64 queue_size) 56706164d2bSGeorge Zhang { 56806164d2bSGeorge Zhang kfree(queue); 56906164d2bSGeorge Zhang } 57006164d2bSGeorge Zhang 57106164d2bSGeorge Zhang /* 57206164d2bSGeorge Zhang * Initialize the mutex for the pair of queues. This mutex is used to 57306164d2bSGeorge Zhang * protect the q_header and the buffer from changing out from under any 57406164d2bSGeorge Zhang * users of either queue. Of course, it's only any good if the mutexes 57506164d2bSGeorge Zhang * are actually acquired. Queue structure must lie on non-paged memory 57606164d2bSGeorge Zhang * or we cannot guarantee access to the mutex. 57706164d2bSGeorge Zhang */ 57806164d2bSGeorge Zhang static void qp_init_queue_mutex(struct vmci_queue *produce_q, 57906164d2bSGeorge Zhang struct vmci_queue *consume_q) 58006164d2bSGeorge Zhang { 58106164d2bSGeorge Zhang /* 58206164d2bSGeorge Zhang * Only the host queue has shared state - the guest queues do not 58306164d2bSGeorge Zhang * need to synchronize access using a queue mutex. 58406164d2bSGeorge Zhang */ 58506164d2bSGeorge Zhang 58606164d2bSGeorge Zhang if (produce_q->kernel_if->host) { 58706164d2bSGeorge Zhang produce_q->kernel_if->mutex = &produce_q->kernel_if->__mutex; 58806164d2bSGeorge Zhang consume_q->kernel_if->mutex = &produce_q->kernel_if->__mutex; 58906164d2bSGeorge Zhang mutex_init(produce_q->kernel_if->mutex); 59006164d2bSGeorge Zhang } 59106164d2bSGeorge Zhang } 59206164d2bSGeorge Zhang 59306164d2bSGeorge Zhang /* 59406164d2bSGeorge Zhang * Cleans up the mutex for the pair of queues. 59506164d2bSGeorge Zhang */ 59606164d2bSGeorge Zhang static void qp_cleanup_queue_mutex(struct vmci_queue *produce_q, 59706164d2bSGeorge Zhang struct vmci_queue *consume_q) 59806164d2bSGeorge Zhang { 59906164d2bSGeorge Zhang if (produce_q->kernel_if->host) { 60006164d2bSGeorge Zhang produce_q->kernel_if->mutex = NULL; 60106164d2bSGeorge Zhang consume_q->kernel_if->mutex = NULL; 60206164d2bSGeorge Zhang } 60306164d2bSGeorge Zhang } 60406164d2bSGeorge Zhang 60506164d2bSGeorge Zhang /* 60606164d2bSGeorge Zhang * Acquire the mutex for the queue. Note that the produce_q and 60706164d2bSGeorge Zhang * the consume_q share a mutex. So, only one of the two need to 60806164d2bSGeorge Zhang * be passed in to this routine. Either will work just fine. 60906164d2bSGeorge Zhang */ 61006164d2bSGeorge Zhang static void qp_acquire_queue_mutex(struct vmci_queue *queue) 61106164d2bSGeorge Zhang { 61206164d2bSGeorge Zhang if (queue->kernel_if->host) 61306164d2bSGeorge Zhang mutex_lock(queue->kernel_if->mutex); 61406164d2bSGeorge Zhang } 61506164d2bSGeorge Zhang 61606164d2bSGeorge Zhang /* 61706164d2bSGeorge Zhang * Release the mutex for the queue. Note that the produce_q and 61806164d2bSGeorge Zhang * the consume_q share a mutex. So, only one of the two need to 61906164d2bSGeorge Zhang * be passed in to this routine. Either will work just fine. 62006164d2bSGeorge Zhang */ 62106164d2bSGeorge Zhang static void qp_release_queue_mutex(struct vmci_queue *queue) 62206164d2bSGeorge Zhang { 62306164d2bSGeorge Zhang if (queue->kernel_if->host) 62406164d2bSGeorge Zhang mutex_unlock(queue->kernel_if->mutex); 62506164d2bSGeorge Zhang } 62606164d2bSGeorge Zhang 62706164d2bSGeorge Zhang /* 62806164d2bSGeorge Zhang * Helper function to release pages in the PageStoreAttachInfo 62906164d2bSGeorge Zhang * previously obtained using get_user_pages. 63006164d2bSGeorge Zhang */ 63106164d2bSGeorge Zhang static void qp_release_pages(struct page **pages, 63206164d2bSGeorge Zhang u64 num_pages, bool dirty) 63306164d2bSGeorge Zhang { 63406164d2bSGeorge Zhang int i; 63506164d2bSGeorge Zhang 63606164d2bSGeorge Zhang for (i = 0; i < num_pages; i++) { 63706164d2bSGeorge Zhang if (dirty) 6385a16c535SJorgen Hansen set_page_dirty_lock(pages[i]); 63906164d2bSGeorge Zhang 64009cbfeafSKirill A. Shutemov put_page(pages[i]); 64106164d2bSGeorge Zhang pages[i] = NULL; 64206164d2bSGeorge Zhang } 64306164d2bSGeorge Zhang } 64406164d2bSGeorge Zhang 64506164d2bSGeorge Zhang /* 64606164d2bSGeorge Zhang * Lock the user pages referenced by the {produce,consume}Buffer 64706164d2bSGeorge Zhang * struct into memory and populate the {produce,consume}Pages 64806164d2bSGeorge Zhang * arrays in the attach structure with them. 64906164d2bSGeorge Zhang */ 65006164d2bSGeorge Zhang static int qp_host_get_user_memory(u64 produce_uva, 65106164d2bSGeorge Zhang u64 consume_uva, 65206164d2bSGeorge Zhang struct vmci_queue *produce_q, 65306164d2bSGeorge Zhang struct vmci_queue *consume_q) 65406164d2bSGeorge Zhang { 65506164d2bSGeorge Zhang int retval; 65606164d2bSGeorge Zhang int err = VMCI_SUCCESS; 65706164d2bSGeorge Zhang 658240ddd49SJan Kara retval = get_user_pages_fast((uintptr_t) produce_uva, 65973b0140bSIra Weiny produce_q->kernel_if->num_pages, 66073b0140bSIra Weiny FOLL_WRITE, 661240ddd49SJan Kara produce_q->kernel_if->u.h.header_page); 6627fb2fd4eSDan Carpenter if (retval < (int)produce_q->kernel_if->num_pages) { 663bf136121SDavidlohr Bueso pr_debug("get_user_pages_fast(produce) failed (retval=%d)", 664bf136121SDavidlohr Bueso retval); 66590ca6333SAlex Dewar if (retval > 0) 6666d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 6676d6dfb4fSAndy King retval, false); 66806164d2bSGeorge Zhang err = VMCI_ERROR_NO_MEM; 66906164d2bSGeorge Zhang goto out; 67006164d2bSGeorge Zhang } 67106164d2bSGeorge Zhang 672240ddd49SJan Kara retval = get_user_pages_fast((uintptr_t) consume_uva, 67373b0140bSIra Weiny consume_q->kernel_if->num_pages, 67473b0140bSIra Weiny FOLL_WRITE, 675240ddd49SJan Kara consume_q->kernel_if->u.h.header_page); 6767fb2fd4eSDan Carpenter if (retval < (int)consume_q->kernel_if->num_pages) { 677bf136121SDavidlohr Bueso pr_debug("get_user_pages_fast(consume) failed (retval=%d)", 678bf136121SDavidlohr Bueso retval); 67990ca6333SAlex Dewar if (retval > 0) 6806d6dfb4fSAndy King qp_release_pages(consume_q->kernel_if->u.h.header_page, 6816d6dfb4fSAndy King retval, false); 6826d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 68306164d2bSGeorge Zhang produce_q->kernel_if->num_pages, false); 68406164d2bSGeorge Zhang err = VMCI_ERROR_NO_MEM; 68506164d2bSGeorge Zhang } 68606164d2bSGeorge Zhang 68706164d2bSGeorge Zhang out: 68806164d2bSGeorge Zhang return err; 68906164d2bSGeorge Zhang } 69006164d2bSGeorge Zhang 69106164d2bSGeorge Zhang /* 69206164d2bSGeorge Zhang * Registers the specification of the user pages used for backing a queue 69306164d2bSGeorge Zhang * pair. Enough information to map in pages is stored in the OS specific 69406164d2bSGeorge Zhang * part of the struct vmci_queue structure. 69506164d2bSGeorge Zhang */ 69606164d2bSGeorge Zhang static int qp_host_register_user_memory(struct vmci_qp_page_store *page_store, 69706164d2bSGeorge Zhang struct vmci_queue *produce_q, 69806164d2bSGeorge Zhang struct vmci_queue *consume_q) 69906164d2bSGeorge Zhang { 70006164d2bSGeorge Zhang u64 produce_uva; 70106164d2bSGeorge Zhang u64 consume_uva; 70206164d2bSGeorge Zhang 70306164d2bSGeorge Zhang /* 70406164d2bSGeorge Zhang * The new style and the old style mapping only differs in 70506164d2bSGeorge Zhang * that we either get a single or two UVAs, so we split the 70606164d2bSGeorge Zhang * single UVA range at the appropriate spot. 70706164d2bSGeorge Zhang */ 70806164d2bSGeorge Zhang produce_uva = page_store->pages; 70906164d2bSGeorge Zhang consume_uva = page_store->pages + 71006164d2bSGeorge Zhang produce_q->kernel_if->num_pages * PAGE_SIZE; 71106164d2bSGeorge Zhang return qp_host_get_user_memory(produce_uva, consume_uva, produce_q, 71206164d2bSGeorge Zhang consume_q); 71306164d2bSGeorge Zhang } 71406164d2bSGeorge Zhang 71506164d2bSGeorge Zhang /* 71606164d2bSGeorge Zhang * Releases and removes the references to user pages stored in the attach 71706164d2bSGeorge Zhang * struct. Pages are released from the page cache and may become 71806164d2bSGeorge Zhang * swappable again. 71906164d2bSGeorge Zhang */ 72006164d2bSGeorge Zhang static void qp_host_unregister_user_memory(struct vmci_queue *produce_q, 72106164d2bSGeorge Zhang struct vmci_queue *consume_q) 72206164d2bSGeorge Zhang { 7236d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 72406164d2bSGeorge Zhang produce_q->kernel_if->num_pages, true); 7256d6dfb4fSAndy King memset(produce_q->kernel_if->u.h.header_page, 0, 7266d6dfb4fSAndy King sizeof(*produce_q->kernel_if->u.h.header_page) * 72706164d2bSGeorge Zhang produce_q->kernel_if->num_pages); 7286d6dfb4fSAndy King qp_release_pages(consume_q->kernel_if->u.h.header_page, 72906164d2bSGeorge Zhang consume_q->kernel_if->num_pages, true); 7306d6dfb4fSAndy King memset(consume_q->kernel_if->u.h.header_page, 0, 7316d6dfb4fSAndy King sizeof(*consume_q->kernel_if->u.h.header_page) * 73206164d2bSGeorge Zhang consume_q->kernel_if->num_pages); 73306164d2bSGeorge Zhang } 73406164d2bSGeorge Zhang 73506164d2bSGeorge Zhang /* 73606164d2bSGeorge Zhang * Once qp_host_register_user_memory has been performed on a 73706164d2bSGeorge Zhang * queue, the queue pair headers can be mapped into the 73806164d2bSGeorge Zhang * kernel. Once mapped, they must be unmapped with 73906164d2bSGeorge Zhang * qp_host_unmap_queues prior to calling 74006164d2bSGeorge Zhang * qp_host_unregister_user_memory. 74106164d2bSGeorge Zhang * Pages are pinned. 74206164d2bSGeorge Zhang */ 74306164d2bSGeorge Zhang static int qp_host_map_queues(struct vmci_queue *produce_q, 74406164d2bSGeorge Zhang struct vmci_queue *consume_q) 74506164d2bSGeorge Zhang { 74606164d2bSGeorge Zhang int result; 74706164d2bSGeorge Zhang 74806164d2bSGeorge Zhang if (!produce_q->q_header || !consume_q->q_header) { 74906164d2bSGeorge Zhang struct page *headers[2]; 75006164d2bSGeorge Zhang 75106164d2bSGeorge Zhang if (produce_q->q_header != consume_q->q_header) 75206164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 75306164d2bSGeorge Zhang 7546d6dfb4fSAndy King if (produce_q->kernel_if->u.h.header_page == NULL || 7556d6dfb4fSAndy King *produce_q->kernel_if->u.h.header_page == NULL) 75606164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 75706164d2bSGeorge Zhang 7586d6dfb4fSAndy King headers[0] = *produce_q->kernel_if->u.h.header_page; 7596d6dfb4fSAndy King headers[1] = *consume_q->kernel_if->u.h.header_page; 76006164d2bSGeorge Zhang 76106164d2bSGeorge Zhang produce_q->q_header = vmap(headers, 2, VM_MAP, PAGE_KERNEL); 76206164d2bSGeorge Zhang if (produce_q->q_header != NULL) { 76306164d2bSGeorge Zhang consume_q->q_header = 76406164d2bSGeorge Zhang (struct vmci_queue_header *)((u8 *) 76506164d2bSGeorge Zhang produce_q->q_header + 76606164d2bSGeorge Zhang PAGE_SIZE); 76706164d2bSGeorge Zhang result = VMCI_SUCCESS; 76806164d2bSGeorge Zhang } else { 76906164d2bSGeorge Zhang pr_warn("vmap failed\n"); 77006164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 77106164d2bSGeorge Zhang } 77206164d2bSGeorge Zhang } else { 77306164d2bSGeorge Zhang result = VMCI_SUCCESS; 77406164d2bSGeorge Zhang } 77506164d2bSGeorge Zhang 77606164d2bSGeorge Zhang return result; 77706164d2bSGeorge Zhang } 77806164d2bSGeorge Zhang 77906164d2bSGeorge Zhang /* 78006164d2bSGeorge Zhang * Unmaps previously mapped queue pair headers from the kernel. 78106164d2bSGeorge Zhang * Pages are unpinned. 78206164d2bSGeorge Zhang */ 78306164d2bSGeorge Zhang static int qp_host_unmap_queues(u32 gid, 78406164d2bSGeorge Zhang struct vmci_queue *produce_q, 78506164d2bSGeorge Zhang struct vmci_queue *consume_q) 78606164d2bSGeorge Zhang { 78706164d2bSGeorge Zhang if (produce_q->q_header) { 78806164d2bSGeorge Zhang if (produce_q->q_header < consume_q->q_header) 78906164d2bSGeorge Zhang vunmap(produce_q->q_header); 79006164d2bSGeorge Zhang else 79106164d2bSGeorge Zhang vunmap(consume_q->q_header); 79206164d2bSGeorge Zhang 79306164d2bSGeorge Zhang produce_q->q_header = NULL; 79406164d2bSGeorge Zhang consume_q->q_header = NULL; 79506164d2bSGeorge Zhang } 79606164d2bSGeorge Zhang 79706164d2bSGeorge Zhang return VMCI_SUCCESS; 79806164d2bSGeorge Zhang } 79906164d2bSGeorge Zhang 80006164d2bSGeorge Zhang /* 80106164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. Assumes 80206164d2bSGeorge Zhang * that the list is locked. 80306164d2bSGeorge Zhang */ 80406164d2bSGeorge Zhang static struct qp_entry *qp_list_find(struct qp_list *qp_list, 80506164d2bSGeorge Zhang struct vmci_handle handle) 80606164d2bSGeorge Zhang { 80706164d2bSGeorge Zhang struct qp_entry *entry; 80806164d2bSGeorge Zhang 80906164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) 81006164d2bSGeorge Zhang return NULL; 81106164d2bSGeorge Zhang 81206164d2bSGeorge Zhang list_for_each_entry(entry, &qp_list->head, list_item) { 81306164d2bSGeorge Zhang if (vmci_handle_is_equal(entry->handle, handle)) 81406164d2bSGeorge Zhang return entry; 81506164d2bSGeorge Zhang } 81606164d2bSGeorge Zhang 81706164d2bSGeorge Zhang return NULL; 81806164d2bSGeorge Zhang } 81906164d2bSGeorge Zhang 82006164d2bSGeorge Zhang /* 82106164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. 82206164d2bSGeorge Zhang */ 82306164d2bSGeorge Zhang static struct qp_guest_endpoint * 82406164d2bSGeorge Zhang qp_guest_handle_to_entry(struct vmci_handle handle) 82506164d2bSGeorge Zhang { 82606164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 82706164d2bSGeorge Zhang struct qp_entry *qp = qp_list_find(&qp_guest_endpoints, handle); 82806164d2bSGeorge Zhang 82906164d2bSGeorge Zhang entry = qp ? container_of( 83006164d2bSGeorge Zhang qp, struct qp_guest_endpoint, qp) : NULL; 83106164d2bSGeorge Zhang return entry; 83206164d2bSGeorge Zhang } 83306164d2bSGeorge Zhang 83406164d2bSGeorge Zhang /* 83506164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. 83606164d2bSGeorge Zhang */ 83706164d2bSGeorge Zhang static struct qp_broker_entry * 83806164d2bSGeorge Zhang qp_broker_handle_to_entry(struct vmci_handle handle) 83906164d2bSGeorge Zhang { 84006164d2bSGeorge Zhang struct qp_broker_entry *entry; 84106164d2bSGeorge Zhang struct qp_entry *qp = qp_list_find(&qp_broker_list, handle); 84206164d2bSGeorge Zhang 84306164d2bSGeorge Zhang entry = qp ? container_of( 84406164d2bSGeorge Zhang qp, struct qp_broker_entry, qp) : NULL; 84506164d2bSGeorge Zhang return entry; 84606164d2bSGeorge Zhang } 84706164d2bSGeorge Zhang 84806164d2bSGeorge Zhang /* 84906164d2bSGeorge Zhang * Dispatches a queue pair event message directly into the local event 85006164d2bSGeorge Zhang * queue. 85106164d2bSGeorge Zhang */ 85206164d2bSGeorge Zhang static int qp_notify_peer_local(bool attach, struct vmci_handle handle) 85306164d2bSGeorge Zhang { 85406164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 85506164d2bSGeorge Zhang struct vmci_event_qp ev; 85606164d2bSGeorge Zhang 85706164d2bSGeorge Zhang ev.msg.hdr.dst = vmci_make_handle(context_id, VMCI_EVENT_HANDLER); 85806164d2bSGeorge Zhang ev.msg.hdr.src = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 85906164d2bSGeorge Zhang VMCI_CONTEXT_RESOURCE_ID); 86006164d2bSGeorge Zhang ev.msg.hdr.payload_size = sizeof(ev) - sizeof(ev.msg.hdr); 86106164d2bSGeorge Zhang ev.msg.event_data.event = 86206164d2bSGeorge Zhang attach ? VMCI_EVENT_QP_PEER_ATTACH : VMCI_EVENT_QP_PEER_DETACH; 86306164d2bSGeorge Zhang ev.payload.peer_id = context_id; 86406164d2bSGeorge Zhang ev.payload.handle = handle; 86506164d2bSGeorge Zhang 86606164d2bSGeorge Zhang return vmci_event_dispatch(&ev.msg.hdr); 86706164d2bSGeorge Zhang } 86806164d2bSGeorge Zhang 86906164d2bSGeorge Zhang /* 87006164d2bSGeorge Zhang * Allocates and initializes a qp_guest_endpoint structure. 87106164d2bSGeorge Zhang * Allocates a queue_pair rid (and handle) iff the given entry has 87206164d2bSGeorge Zhang * an invalid handle. 0 through VMCI_RESERVED_RESOURCE_ID_MAX 87306164d2bSGeorge Zhang * are reserved handles. Assumes that the QP list mutex is held 87406164d2bSGeorge Zhang * by the caller. 87506164d2bSGeorge Zhang */ 87606164d2bSGeorge Zhang static struct qp_guest_endpoint * 87706164d2bSGeorge Zhang qp_guest_endpoint_create(struct vmci_handle handle, 87806164d2bSGeorge Zhang u32 peer, 87906164d2bSGeorge Zhang u32 flags, 88006164d2bSGeorge Zhang u64 produce_size, 88106164d2bSGeorge Zhang u64 consume_size, 88206164d2bSGeorge Zhang void *produce_q, 88306164d2bSGeorge Zhang void *consume_q) 88406164d2bSGeorge Zhang { 88506164d2bSGeorge Zhang int result; 88606164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 88706164d2bSGeorge Zhang /* One page each for the queue headers. */ 88842281d20SAndy King const u64 num_ppns = DIV_ROUND_UP(produce_size, PAGE_SIZE) + 88942281d20SAndy King DIV_ROUND_UP(consume_size, PAGE_SIZE) + 2; 89006164d2bSGeorge Zhang 89106164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) { 89206164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 89306164d2bSGeorge Zhang 89406164d2bSGeorge Zhang handle = vmci_make_handle(context_id, VMCI_INVALID_ID); 89506164d2bSGeorge Zhang } 89606164d2bSGeorge Zhang 89706164d2bSGeorge Zhang entry = kzalloc(sizeof(*entry), GFP_KERNEL); 89806164d2bSGeorge Zhang if (entry) { 89906164d2bSGeorge Zhang entry->qp.peer = peer; 90006164d2bSGeorge Zhang entry->qp.flags = flags; 90106164d2bSGeorge Zhang entry->qp.produce_size = produce_size; 90206164d2bSGeorge Zhang entry->qp.consume_size = consume_size; 90306164d2bSGeorge Zhang entry->qp.ref_count = 0; 90406164d2bSGeorge Zhang entry->num_ppns = num_ppns; 90506164d2bSGeorge Zhang entry->produce_q = produce_q; 90606164d2bSGeorge Zhang entry->consume_q = consume_q; 90706164d2bSGeorge Zhang INIT_LIST_HEAD(&entry->qp.list_item); 90806164d2bSGeorge Zhang 90906164d2bSGeorge Zhang /* Add resource obj */ 91006164d2bSGeorge Zhang result = vmci_resource_add(&entry->resource, 91106164d2bSGeorge Zhang VMCI_RESOURCE_TYPE_QPAIR_GUEST, 91206164d2bSGeorge Zhang handle); 91306164d2bSGeorge Zhang entry->qp.handle = vmci_resource_handle(&entry->resource); 91406164d2bSGeorge Zhang if ((result != VMCI_SUCCESS) || 91506164d2bSGeorge Zhang qp_list_find(&qp_guest_endpoints, entry->qp.handle)) { 91606164d2bSGeorge Zhang pr_warn("Failed to add new resource (handle=0x%x:0x%x), error: %d", 91706164d2bSGeorge Zhang handle.context, handle.resource, result); 91806164d2bSGeorge Zhang kfree(entry); 91906164d2bSGeorge Zhang entry = NULL; 92006164d2bSGeorge Zhang } 92106164d2bSGeorge Zhang } 92206164d2bSGeorge Zhang return entry; 92306164d2bSGeorge Zhang } 92406164d2bSGeorge Zhang 92506164d2bSGeorge Zhang /* 92606164d2bSGeorge Zhang * Frees a qp_guest_endpoint structure. 92706164d2bSGeorge Zhang */ 92806164d2bSGeorge Zhang static void qp_guest_endpoint_destroy(struct qp_guest_endpoint *entry) 92906164d2bSGeorge Zhang { 93006164d2bSGeorge Zhang qp_free_ppn_set(&entry->ppn_set); 93106164d2bSGeorge Zhang qp_cleanup_queue_mutex(entry->produce_q, entry->consume_q); 93206164d2bSGeorge Zhang qp_free_queue(entry->produce_q, entry->qp.produce_size); 93306164d2bSGeorge Zhang qp_free_queue(entry->consume_q, entry->qp.consume_size); 93406164d2bSGeorge Zhang /* Unlink from resource hash table and free callback */ 93506164d2bSGeorge Zhang vmci_resource_remove(&entry->resource); 93606164d2bSGeorge Zhang 93706164d2bSGeorge Zhang kfree(entry); 93806164d2bSGeorge Zhang } 93906164d2bSGeorge Zhang 94006164d2bSGeorge Zhang /* 94106164d2bSGeorge Zhang * Helper to make a queue_pairAlloc hypercall when the driver is 94206164d2bSGeorge Zhang * supporting a guest device. 94306164d2bSGeorge Zhang */ 94406164d2bSGeorge Zhang static int qp_alloc_hypercall(const struct qp_guest_endpoint *entry) 94506164d2bSGeorge Zhang { 94606164d2bSGeorge Zhang struct vmci_qp_alloc_msg *alloc_msg; 94706164d2bSGeorge Zhang size_t msg_size; 948f2db7361SVishnu DASA size_t ppn_size; 94906164d2bSGeorge Zhang int result; 95006164d2bSGeorge Zhang 95106164d2bSGeorge Zhang if (!entry || entry->num_ppns <= 2) 95206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 95306164d2bSGeorge Zhang 954f2db7361SVishnu DASA ppn_size = vmci_use_ppn64() ? sizeof(u64) : sizeof(u32); 95506164d2bSGeorge Zhang msg_size = sizeof(*alloc_msg) + 956f2db7361SVishnu DASA (size_t) entry->num_ppns * ppn_size; 95706164d2bSGeorge Zhang alloc_msg = kmalloc(msg_size, GFP_KERNEL); 95806164d2bSGeorge Zhang if (!alloc_msg) 95906164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 96006164d2bSGeorge Zhang 96106164d2bSGeorge Zhang alloc_msg->hdr.dst = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 96206164d2bSGeorge Zhang VMCI_QUEUEPAIR_ALLOC); 96306164d2bSGeorge Zhang alloc_msg->hdr.src = VMCI_ANON_SRC_HANDLE; 96406164d2bSGeorge Zhang alloc_msg->hdr.payload_size = msg_size - VMCI_DG_HEADERSIZE; 96506164d2bSGeorge Zhang alloc_msg->handle = entry->qp.handle; 96606164d2bSGeorge Zhang alloc_msg->peer = entry->qp.peer; 96706164d2bSGeorge Zhang alloc_msg->flags = entry->qp.flags; 96806164d2bSGeorge Zhang alloc_msg->produce_size = entry->qp.produce_size; 96906164d2bSGeorge Zhang alloc_msg->consume_size = entry->qp.consume_size; 97006164d2bSGeorge Zhang alloc_msg->num_ppns = entry->num_ppns; 97106164d2bSGeorge Zhang 97206164d2bSGeorge Zhang result = qp_populate_ppn_set((u8 *)alloc_msg + sizeof(*alloc_msg), 97306164d2bSGeorge Zhang &entry->ppn_set); 97406164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 97506164d2bSGeorge Zhang result = vmci_send_datagram(&alloc_msg->hdr); 97606164d2bSGeorge Zhang 97706164d2bSGeorge Zhang kfree(alloc_msg); 97806164d2bSGeorge Zhang 97906164d2bSGeorge Zhang return result; 98006164d2bSGeorge Zhang } 98106164d2bSGeorge Zhang 98206164d2bSGeorge Zhang /* 98306164d2bSGeorge Zhang * Helper to make a queue_pairDetach hypercall when the driver is 98406164d2bSGeorge Zhang * supporting a guest device. 98506164d2bSGeorge Zhang */ 98606164d2bSGeorge Zhang static int qp_detatch_hypercall(struct vmci_handle handle) 98706164d2bSGeorge Zhang { 98806164d2bSGeorge Zhang struct vmci_qp_detach_msg detach_msg; 98906164d2bSGeorge Zhang 99006164d2bSGeorge Zhang detach_msg.hdr.dst = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 99106164d2bSGeorge Zhang VMCI_QUEUEPAIR_DETACH); 99206164d2bSGeorge Zhang detach_msg.hdr.src = VMCI_ANON_SRC_HANDLE; 99306164d2bSGeorge Zhang detach_msg.hdr.payload_size = sizeof(handle); 99406164d2bSGeorge Zhang detach_msg.handle = handle; 99506164d2bSGeorge Zhang 99606164d2bSGeorge Zhang return vmci_send_datagram(&detach_msg.hdr); 99706164d2bSGeorge Zhang } 99806164d2bSGeorge Zhang 99906164d2bSGeorge Zhang /* 100006164d2bSGeorge Zhang * Adds the given entry to the list. Assumes that the list is locked. 100106164d2bSGeorge Zhang */ 100206164d2bSGeorge Zhang static void qp_list_add_entry(struct qp_list *qp_list, struct qp_entry *entry) 100306164d2bSGeorge Zhang { 100406164d2bSGeorge Zhang if (entry) 100506164d2bSGeorge Zhang list_add(&entry->list_item, &qp_list->head); 100606164d2bSGeorge Zhang } 100706164d2bSGeorge Zhang 100806164d2bSGeorge Zhang /* 100906164d2bSGeorge Zhang * Removes the given entry from the list. Assumes that the list is locked. 101006164d2bSGeorge Zhang */ 101106164d2bSGeorge Zhang static void qp_list_remove_entry(struct qp_list *qp_list, 101206164d2bSGeorge Zhang struct qp_entry *entry) 101306164d2bSGeorge Zhang { 101406164d2bSGeorge Zhang if (entry) 101506164d2bSGeorge Zhang list_del(&entry->list_item); 101606164d2bSGeorge Zhang } 101706164d2bSGeorge Zhang 101806164d2bSGeorge Zhang /* 101906164d2bSGeorge Zhang * Helper for VMCI queue_pair detach interface. Frees the physical 102006164d2bSGeorge Zhang * pages for the queue pair. 102106164d2bSGeorge Zhang */ 102206164d2bSGeorge Zhang static int qp_detatch_guest_work(struct vmci_handle handle) 102306164d2bSGeorge Zhang { 102406164d2bSGeorge Zhang int result; 102506164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 102606164d2bSGeorge Zhang u32 ref_count = ~0; /* To avoid compiler warning below */ 102706164d2bSGeorge Zhang 102806164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 102906164d2bSGeorge Zhang 103006164d2bSGeorge Zhang entry = qp_guest_handle_to_entry(handle); 103106164d2bSGeorge Zhang if (!entry) { 103206164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 103306164d2bSGeorge Zhang return VMCI_ERROR_NOT_FOUND; 103406164d2bSGeorge Zhang } 103506164d2bSGeorge Zhang 103606164d2bSGeorge Zhang if (entry->qp.flags & VMCI_QPFLAG_LOCAL) { 103706164d2bSGeorge Zhang result = VMCI_SUCCESS; 103806164d2bSGeorge Zhang 103906164d2bSGeorge Zhang if (entry->qp.ref_count > 1) { 104006164d2bSGeorge Zhang result = qp_notify_peer_local(false, handle); 104106164d2bSGeorge Zhang /* 104206164d2bSGeorge Zhang * We can fail to notify a local queuepair 104306164d2bSGeorge Zhang * because we can't allocate. We still want 104406164d2bSGeorge Zhang * to release the entry if that happens, so 104506164d2bSGeorge Zhang * don't bail out yet. 104606164d2bSGeorge Zhang */ 104706164d2bSGeorge Zhang } 104806164d2bSGeorge Zhang } else { 104906164d2bSGeorge Zhang result = qp_detatch_hypercall(handle); 105006164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 105106164d2bSGeorge Zhang /* 105206164d2bSGeorge Zhang * We failed to notify a non-local queuepair. 105306164d2bSGeorge Zhang * That other queuepair might still be 105406164d2bSGeorge Zhang * accessing the shared memory, so don't 105506164d2bSGeorge Zhang * release the entry yet. It will get cleaned 105606164d2bSGeorge Zhang * up by VMCIqueue_pair_Exit() if necessary 105706164d2bSGeorge Zhang * (assuming we are going away, otherwise why 105806164d2bSGeorge Zhang * did this fail?). 105906164d2bSGeorge Zhang */ 106006164d2bSGeorge Zhang 106106164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 106206164d2bSGeorge Zhang return result; 106306164d2bSGeorge Zhang } 106406164d2bSGeorge Zhang } 106506164d2bSGeorge Zhang 106606164d2bSGeorge Zhang /* 106706164d2bSGeorge Zhang * If we get here then we either failed to notify a local queuepair, or 106806164d2bSGeorge Zhang * we succeeded in all cases. Release the entry if required. 106906164d2bSGeorge Zhang */ 107006164d2bSGeorge Zhang 107106164d2bSGeorge Zhang entry->qp.ref_count--; 107206164d2bSGeorge Zhang if (entry->qp.ref_count == 0) 107306164d2bSGeorge Zhang qp_list_remove_entry(&qp_guest_endpoints, &entry->qp); 107406164d2bSGeorge Zhang 107506164d2bSGeorge Zhang /* If we didn't remove the entry, this could change once we unlock. */ 107606164d2bSGeorge Zhang if (entry) 107706164d2bSGeorge Zhang ref_count = entry->qp.ref_count; 107806164d2bSGeorge Zhang 107906164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 108006164d2bSGeorge Zhang 108106164d2bSGeorge Zhang if (ref_count == 0) 108206164d2bSGeorge Zhang qp_guest_endpoint_destroy(entry); 108306164d2bSGeorge Zhang 108406164d2bSGeorge Zhang return result; 108506164d2bSGeorge Zhang } 108606164d2bSGeorge Zhang 108706164d2bSGeorge Zhang /* 108806164d2bSGeorge Zhang * This functions handles the actual allocation of a VMCI queue 108906164d2bSGeorge Zhang * pair guest endpoint. Allocates physical pages for the queue 109006164d2bSGeorge Zhang * pair. It makes OS dependent calls through generic wrappers. 109106164d2bSGeorge Zhang */ 109206164d2bSGeorge Zhang static int qp_alloc_guest_work(struct vmci_handle *handle, 109306164d2bSGeorge Zhang struct vmci_queue **produce_q, 109406164d2bSGeorge Zhang u64 produce_size, 109506164d2bSGeorge Zhang struct vmci_queue **consume_q, 109606164d2bSGeorge Zhang u64 consume_size, 109706164d2bSGeorge Zhang u32 peer, 109806164d2bSGeorge Zhang u32 flags, 109906164d2bSGeorge Zhang u32 priv_flags) 110006164d2bSGeorge Zhang { 110106164d2bSGeorge Zhang const u64 num_produce_pages = 110242281d20SAndy King DIV_ROUND_UP(produce_size, PAGE_SIZE) + 1; 110306164d2bSGeorge Zhang const u64 num_consume_pages = 110442281d20SAndy King DIV_ROUND_UP(consume_size, PAGE_SIZE) + 1; 110506164d2bSGeorge Zhang void *my_produce_q = NULL; 110606164d2bSGeorge Zhang void *my_consume_q = NULL; 110706164d2bSGeorge Zhang int result; 110806164d2bSGeorge Zhang struct qp_guest_endpoint *queue_pair_entry = NULL; 110906164d2bSGeorge Zhang 111006164d2bSGeorge Zhang if (priv_flags != VMCI_NO_PRIVILEGE_FLAGS) 111106164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 111206164d2bSGeorge Zhang 111306164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 111406164d2bSGeorge Zhang 111506164d2bSGeorge Zhang queue_pair_entry = qp_guest_handle_to_entry(*handle); 111606164d2bSGeorge Zhang if (queue_pair_entry) { 111706164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) { 111806164d2bSGeorge Zhang /* Local attach case. */ 111906164d2bSGeorge Zhang if (queue_pair_entry->qp.ref_count > 1) { 112006164d2bSGeorge Zhang pr_devel("Error attempting to attach more than once\n"); 112106164d2bSGeorge Zhang result = VMCI_ERROR_UNAVAILABLE; 112206164d2bSGeorge Zhang goto error_keep_entry; 112306164d2bSGeorge Zhang } 112406164d2bSGeorge Zhang 112506164d2bSGeorge Zhang if (queue_pair_entry->qp.produce_size != consume_size || 112606164d2bSGeorge Zhang queue_pair_entry->qp.consume_size != 112706164d2bSGeorge Zhang produce_size || 112806164d2bSGeorge Zhang queue_pair_entry->qp.flags != 112906164d2bSGeorge Zhang (flags & ~VMCI_QPFLAG_ATTACH_ONLY)) { 113006164d2bSGeorge Zhang pr_devel("Error mismatched queue pair in local attach\n"); 113106164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_MISMATCH; 113206164d2bSGeorge Zhang goto error_keep_entry; 113306164d2bSGeorge Zhang } 113406164d2bSGeorge Zhang 113506164d2bSGeorge Zhang /* 113606164d2bSGeorge Zhang * Do a local attach. We swap the consume and 113706164d2bSGeorge Zhang * produce queues for the attacher and deliver 113806164d2bSGeorge Zhang * an attach event. 113906164d2bSGeorge Zhang */ 114006164d2bSGeorge Zhang result = qp_notify_peer_local(true, *handle); 114106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 114206164d2bSGeorge Zhang goto error_keep_entry; 114306164d2bSGeorge Zhang 114406164d2bSGeorge Zhang my_produce_q = queue_pair_entry->consume_q; 114506164d2bSGeorge Zhang my_consume_q = queue_pair_entry->produce_q; 114606164d2bSGeorge Zhang goto out; 114706164d2bSGeorge Zhang } 114806164d2bSGeorge Zhang 114906164d2bSGeorge Zhang result = VMCI_ERROR_ALREADY_EXISTS; 115006164d2bSGeorge Zhang goto error_keep_entry; 115106164d2bSGeorge Zhang } 115206164d2bSGeorge Zhang 115306164d2bSGeorge Zhang my_produce_q = qp_alloc_queue(produce_size, flags); 115406164d2bSGeorge Zhang if (!my_produce_q) { 115506164d2bSGeorge Zhang pr_warn("Error allocating pages for produce queue\n"); 115606164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 115706164d2bSGeorge Zhang goto error; 115806164d2bSGeorge Zhang } 115906164d2bSGeorge Zhang 116006164d2bSGeorge Zhang my_consume_q = qp_alloc_queue(consume_size, flags); 116106164d2bSGeorge Zhang if (!my_consume_q) { 116206164d2bSGeorge Zhang pr_warn("Error allocating pages for consume queue\n"); 116306164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 116406164d2bSGeorge Zhang goto error; 116506164d2bSGeorge Zhang } 116606164d2bSGeorge Zhang 116706164d2bSGeorge Zhang queue_pair_entry = qp_guest_endpoint_create(*handle, peer, flags, 116806164d2bSGeorge Zhang produce_size, consume_size, 116906164d2bSGeorge Zhang my_produce_q, my_consume_q); 117006164d2bSGeorge Zhang if (!queue_pair_entry) { 117106164d2bSGeorge Zhang pr_warn("Error allocating memory in %s\n", __func__); 117206164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 117306164d2bSGeorge Zhang goto error; 117406164d2bSGeorge Zhang } 117506164d2bSGeorge Zhang 117606164d2bSGeorge Zhang result = qp_alloc_ppn_set(my_produce_q, num_produce_pages, my_consume_q, 117706164d2bSGeorge Zhang num_consume_pages, 117806164d2bSGeorge Zhang &queue_pair_entry->ppn_set); 117906164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 118006164d2bSGeorge Zhang pr_warn("qp_alloc_ppn_set failed\n"); 118106164d2bSGeorge Zhang goto error; 118206164d2bSGeorge Zhang } 118306164d2bSGeorge Zhang 118406164d2bSGeorge Zhang /* 118506164d2bSGeorge Zhang * It's only necessary to notify the host if this queue pair will be 118606164d2bSGeorge Zhang * attached to from another context. 118706164d2bSGeorge Zhang */ 118806164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) { 118906164d2bSGeorge Zhang /* Local create case. */ 119006164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 119106164d2bSGeorge Zhang 119206164d2bSGeorge Zhang /* 119306164d2bSGeorge Zhang * Enforce similar checks on local queue pairs as we 119406164d2bSGeorge Zhang * do for regular ones. The handle's context must 119506164d2bSGeorge Zhang * match the creator or attacher context id (here they 119606164d2bSGeorge Zhang * are both the current context id) and the 119706164d2bSGeorge Zhang * attach-only flag cannot exist during create. We 119806164d2bSGeorge Zhang * also ensure specified peer is this context or an 119906164d2bSGeorge Zhang * invalid one. 120006164d2bSGeorge Zhang */ 120106164d2bSGeorge Zhang if (queue_pair_entry->qp.handle.context != context_id || 120206164d2bSGeorge Zhang (queue_pair_entry->qp.peer != VMCI_INVALID_ID && 120306164d2bSGeorge Zhang queue_pair_entry->qp.peer != context_id)) { 120406164d2bSGeorge Zhang result = VMCI_ERROR_NO_ACCESS; 120506164d2bSGeorge Zhang goto error; 120606164d2bSGeorge Zhang } 120706164d2bSGeorge Zhang 120806164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_ATTACH_ONLY) { 120906164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 121006164d2bSGeorge Zhang goto error; 121106164d2bSGeorge Zhang } 121206164d2bSGeorge Zhang } else { 121306164d2bSGeorge Zhang result = qp_alloc_hypercall(queue_pair_entry); 121406164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 1215e8266c4cSJorgen Hansen pr_devel("qp_alloc_hypercall result = %d\n", result); 121606164d2bSGeorge Zhang goto error; 121706164d2bSGeorge Zhang } 121806164d2bSGeorge Zhang } 121906164d2bSGeorge Zhang 122006164d2bSGeorge Zhang qp_init_queue_mutex((struct vmci_queue *)my_produce_q, 122106164d2bSGeorge Zhang (struct vmci_queue *)my_consume_q); 122206164d2bSGeorge Zhang 122306164d2bSGeorge Zhang qp_list_add_entry(&qp_guest_endpoints, &queue_pair_entry->qp); 122406164d2bSGeorge Zhang 122506164d2bSGeorge Zhang out: 122606164d2bSGeorge Zhang queue_pair_entry->qp.ref_count++; 122706164d2bSGeorge Zhang *handle = queue_pair_entry->qp.handle; 122806164d2bSGeorge Zhang *produce_q = (struct vmci_queue *)my_produce_q; 122906164d2bSGeorge Zhang *consume_q = (struct vmci_queue *)my_consume_q; 123006164d2bSGeorge Zhang 123106164d2bSGeorge Zhang /* 123206164d2bSGeorge Zhang * We should initialize the queue pair header pages on a local 123306164d2bSGeorge Zhang * queue pair create. For non-local queue pairs, the 123406164d2bSGeorge Zhang * hypervisor initializes the header pages in the create step. 123506164d2bSGeorge Zhang */ 123606164d2bSGeorge Zhang if ((queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) && 123706164d2bSGeorge Zhang queue_pair_entry->qp.ref_count == 1) { 123806164d2bSGeorge Zhang vmci_q_header_init((*produce_q)->q_header, *handle); 123906164d2bSGeorge Zhang vmci_q_header_init((*consume_q)->q_header, *handle); 124006164d2bSGeorge Zhang } 124106164d2bSGeorge Zhang 124206164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 124306164d2bSGeorge Zhang 124406164d2bSGeorge Zhang return VMCI_SUCCESS; 124506164d2bSGeorge Zhang 124606164d2bSGeorge Zhang error: 124706164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 124806164d2bSGeorge Zhang if (queue_pair_entry) { 124906164d2bSGeorge Zhang /* The queues will be freed inside the destroy routine. */ 125006164d2bSGeorge Zhang qp_guest_endpoint_destroy(queue_pair_entry); 125106164d2bSGeorge Zhang } else { 125206164d2bSGeorge Zhang qp_free_queue(my_produce_q, produce_size); 125306164d2bSGeorge Zhang qp_free_queue(my_consume_q, consume_size); 125406164d2bSGeorge Zhang } 125506164d2bSGeorge Zhang return result; 125606164d2bSGeorge Zhang 125706164d2bSGeorge Zhang error_keep_entry: 125806164d2bSGeorge Zhang /* This path should only be used when an existing entry was found. */ 125906164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 126006164d2bSGeorge Zhang return result; 126106164d2bSGeorge Zhang } 126206164d2bSGeorge Zhang 126306164d2bSGeorge Zhang /* 126406164d2bSGeorge Zhang * The first endpoint issuing a queue pair allocation will create the state 126506164d2bSGeorge Zhang * of the queue pair in the queue pair broker. 126606164d2bSGeorge Zhang * 126706164d2bSGeorge Zhang * If the creator is a guest, it will associate a VMX virtual address range 126806164d2bSGeorge Zhang * with the queue pair as specified by the page_store. For compatibility with 126906164d2bSGeorge Zhang * older VMX'en, that would use a separate step to set the VMX virtual 127006164d2bSGeorge Zhang * address range, the virtual address range can be registered later using 127106164d2bSGeorge Zhang * vmci_qp_broker_set_page_store. In that case, a page_store of NULL should be 127206164d2bSGeorge Zhang * used. 127306164d2bSGeorge Zhang * 127406164d2bSGeorge Zhang * If the creator is the host, a page_store of NULL should be used as well, 127506164d2bSGeorge Zhang * since the host is not able to supply a page store for the queue pair. 127606164d2bSGeorge Zhang * 127706164d2bSGeorge Zhang * For older VMX and host callers, the queue pair will be created in the 127806164d2bSGeorge Zhang * VMCIQPB_CREATED_NO_MEM state, and for current VMX callers, it will be 127906164d2bSGeorge Zhang * created in VMCOQPB_CREATED_MEM state. 128006164d2bSGeorge Zhang */ 128106164d2bSGeorge Zhang static int qp_broker_create(struct vmci_handle handle, 128206164d2bSGeorge Zhang u32 peer, 128306164d2bSGeorge Zhang u32 flags, 128406164d2bSGeorge Zhang u32 priv_flags, 128506164d2bSGeorge Zhang u64 produce_size, 128606164d2bSGeorge Zhang u64 consume_size, 128706164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 128806164d2bSGeorge Zhang struct vmci_ctx *context, 128906164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 129006164d2bSGeorge Zhang void *client_data, struct qp_broker_entry **ent) 129106164d2bSGeorge Zhang { 129206164d2bSGeorge Zhang struct qp_broker_entry *entry = NULL; 129306164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 129406164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 129506164d2bSGeorge Zhang int result; 129606164d2bSGeorge Zhang u64 guest_produce_size; 129706164d2bSGeorge Zhang u64 guest_consume_size; 129806164d2bSGeorge Zhang 129906164d2bSGeorge Zhang /* Do not create if the caller asked not to. */ 130006164d2bSGeorge Zhang if (flags & VMCI_QPFLAG_ATTACH_ONLY) 130106164d2bSGeorge Zhang return VMCI_ERROR_NOT_FOUND; 130206164d2bSGeorge Zhang 130306164d2bSGeorge Zhang /* 130406164d2bSGeorge Zhang * Creator's context ID should match handle's context ID or the creator 130506164d2bSGeorge Zhang * must allow the context in handle's context ID as the "peer". 130606164d2bSGeorge Zhang */ 130706164d2bSGeorge Zhang if (handle.context != context_id && handle.context != peer) 130806164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 130906164d2bSGeorge Zhang 131006164d2bSGeorge Zhang if (VMCI_CONTEXT_IS_VM(context_id) && VMCI_CONTEXT_IS_VM(peer)) 131106164d2bSGeorge Zhang return VMCI_ERROR_DST_UNREACHABLE; 131206164d2bSGeorge Zhang 131306164d2bSGeorge Zhang /* 131406164d2bSGeorge Zhang * Creator's context ID for local queue pairs should match the 131506164d2bSGeorge Zhang * peer, if a peer is specified. 131606164d2bSGeorge Zhang */ 131706164d2bSGeorge Zhang if (is_local && peer != VMCI_INVALID_ID && context_id != peer) 131806164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 131906164d2bSGeorge Zhang 132006164d2bSGeorge Zhang entry = kzalloc(sizeof(*entry), GFP_ATOMIC); 132106164d2bSGeorge Zhang if (!entry) 132206164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 132306164d2bSGeorge Zhang 132406164d2bSGeorge Zhang if (vmci_ctx_get_id(context) == VMCI_HOST_CONTEXT_ID && !is_local) { 132506164d2bSGeorge Zhang /* 132606164d2bSGeorge Zhang * The queue pair broker entry stores values from the guest 132706164d2bSGeorge Zhang * point of view, so a creating host side endpoint should swap 132806164d2bSGeorge Zhang * produce and consume values -- unless it is a local queue 132906164d2bSGeorge Zhang * pair, in which case no swapping is necessary, since the local 133006164d2bSGeorge Zhang * attacher will swap queues. 133106164d2bSGeorge Zhang */ 133206164d2bSGeorge Zhang 133306164d2bSGeorge Zhang guest_produce_size = consume_size; 133406164d2bSGeorge Zhang guest_consume_size = produce_size; 133506164d2bSGeorge Zhang } else { 133606164d2bSGeorge Zhang guest_produce_size = produce_size; 133706164d2bSGeorge Zhang guest_consume_size = consume_size; 133806164d2bSGeorge Zhang } 133906164d2bSGeorge Zhang 134006164d2bSGeorge Zhang entry->qp.handle = handle; 134106164d2bSGeorge Zhang entry->qp.peer = peer; 134206164d2bSGeorge Zhang entry->qp.flags = flags; 134306164d2bSGeorge Zhang entry->qp.produce_size = guest_produce_size; 134406164d2bSGeorge Zhang entry->qp.consume_size = guest_consume_size; 134506164d2bSGeorge Zhang entry->qp.ref_count = 1; 134606164d2bSGeorge Zhang entry->create_id = context_id; 134706164d2bSGeorge Zhang entry->attach_id = VMCI_INVALID_ID; 134806164d2bSGeorge Zhang entry->state = VMCIQPB_NEW; 134906164d2bSGeorge Zhang entry->require_trusted_attach = 135006164d2bSGeorge Zhang !!(context->priv_flags & VMCI_PRIVILEGE_FLAG_RESTRICTED); 135106164d2bSGeorge Zhang entry->created_by_trusted = 135206164d2bSGeorge Zhang !!(priv_flags & VMCI_PRIVILEGE_FLAG_TRUSTED); 135306164d2bSGeorge Zhang entry->vmci_page_files = false; 135406164d2bSGeorge Zhang entry->wakeup_cb = wakeup_cb; 135506164d2bSGeorge Zhang entry->client_data = client_data; 135606164d2bSGeorge Zhang entry->produce_q = qp_host_alloc_queue(guest_produce_size); 135706164d2bSGeorge Zhang if (entry->produce_q == NULL) { 135806164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 135906164d2bSGeorge Zhang goto error; 136006164d2bSGeorge Zhang } 136106164d2bSGeorge Zhang entry->consume_q = qp_host_alloc_queue(guest_consume_size); 136206164d2bSGeorge Zhang if (entry->consume_q == NULL) { 136306164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 136406164d2bSGeorge Zhang goto error; 136506164d2bSGeorge Zhang } 136606164d2bSGeorge Zhang 136706164d2bSGeorge Zhang qp_init_queue_mutex(entry->produce_q, entry->consume_q); 136806164d2bSGeorge Zhang 136906164d2bSGeorge Zhang INIT_LIST_HEAD(&entry->qp.list_item); 137006164d2bSGeorge Zhang 137106164d2bSGeorge Zhang if (is_local) { 137206164d2bSGeorge Zhang u8 *tmp; 137306164d2bSGeorge Zhang 137406164d2bSGeorge Zhang entry->local_mem = kcalloc(QPE_NUM_PAGES(entry->qp), 137506164d2bSGeorge Zhang PAGE_SIZE, GFP_KERNEL); 137606164d2bSGeorge Zhang if (entry->local_mem == NULL) { 137706164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 137806164d2bSGeorge Zhang goto error; 137906164d2bSGeorge Zhang } 138006164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 138106164d2bSGeorge Zhang entry->produce_q->q_header = entry->local_mem; 138206164d2bSGeorge Zhang tmp = (u8 *)entry->local_mem + PAGE_SIZE * 138342281d20SAndy King (DIV_ROUND_UP(entry->qp.produce_size, PAGE_SIZE) + 1); 138406164d2bSGeorge Zhang entry->consume_q->q_header = (struct vmci_queue_header *)tmp; 138506164d2bSGeorge Zhang } else if (page_store) { 138606164d2bSGeorge Zhang /* 138706164d2bSGeorge Zhang * The VMX already initialized the queue pair headers, so no 138806164d2bSGeorge Zhang * need for the kernel side to do that. 138906164d2bSGeorge Zhang */ 139006164d2bSGeorge Zhang result = qp_host_register_user_memory(page_store, 139106164d2bSGeorge Zhang entry->produce_q, 139206164d2bSGeorge Zhang entry->consume_q); 139306164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 139406164d2bSGeorge Zhang goto error; 139506164d2bSGeorge Zhang 139606164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 139706164d2bSGeorge Zhang } else { 139806164d2bSGeorge Zhang /* 139906164d2bSGeorge Zhang * A create without a page_store may be either a host 140006164d2bSGeorge Zhang * side create (in which case we are waiting for the 140106164d2bSGeorge Zhang * guest side to supply the memory) or an old style 140206164d2bSGeorge Zhang * queue pair create (in which case we will expect a 140306164d2bSGeorge Zhang * set page store call as the next step). 140406164d2bSGeorge Zhang */ 140506164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_NO_MEM; 140606164d2bSGeorge Zhang } 140706164d2bSGeorge Zhang 140806164d2bSGeorge Zhang qp_list_add_entry(&qp_broker_list, &entry->qp); 140906164d2bSGeorge Zhang if (ent != NULL) 141006164d2bSGeorge Zhang *ent = entry; 141106164d2bSGeorge Zhang 141206164d2bSGeorge Zhang /* Add to resource obj */ 141306164d2bSGeorge Zhang result = vmci_resource_add(&entry->resource, 141406164d2bSGeorge Zhang VMCI_RESOURCE_TYPE_QPAIR_HOST, 141506164d2bSGeorge Zhang handle); 141606164d2bSGeorge Zhang if (result != VMCI_SUCCESS) { 141706164d2bSGeorge Zhang pr_warn("Failed to add new resource (handle=0x%x:0x%x), error: %d", 141806164d2bSGeorge Zhang handle.context, handle.resource, result); 141906164d2bSGeorge Zhang goto error; 142006164d2bSGeorge Zhang } 142106164d2bSGeorge Zhang 142206164d2bSGeorge Zhang entry->qp.handle = vmci_resource_handle(&entry->resource); 142306164d2bSGeorge Zhang if (is_local) { 142406164d2bSGeorge Zhang vmci_q_header_init(entry->produce_q->q_header, 142506164d2bSGeorge Zhang entry->qp.handle); 142606164d2bSGeorge Zhang vmci_q_header_init(entry->consume_q->q_header, 142706164d2bSGeorge Zhang entry->qp.handle); 142806164d2bSGeorge Zhang } 142906164d2bSGeorge Zhang 143006164d2bSGeorge Zhang vmci_ctx_qp_create(context, entry->qp.handle); 143106164d2bSGeorge Zhang 143206164d2bSGeorge Zhang return VMCI_SUCCESS; 143306164d2bSGeorge Zhang 143406164d2bSGeorge Zhang error: 143506164d2bSGeorge Zhang if (entry != NULL) { 143606164d2bSGeorge Zhang qp_host_free_queue(entry->produce_q, guest_produce_size); 143706164d2bSGeorge Zhang qp_host_free_queue(entry->consume_q, guest_consume_size); 143806164d2bSGeorge Zhang kfree(entry); 143906164d2bSGeorge Zhang } 144006164d2bSGeorge Zhang 144106164d2bSGeorge Zhang return result; 144206164d2bSGeorge Zhang } 144306164d2bSGeorge Zhang 144406164d2bSGeorge Zhang /* 144506164d2bSGeorge Zhang * Enqueues an event datagram to notify the peer VM attached to 144606164d2bSGeorge Zhang * the given queue pair handle about attach/detach event by the 144706164d2bSGeorge Zhang * given VM. Returns Payload size of datagram enqueued on 144806164d2bSGeorge Zhang * success, error code otherwise. 144906164d2bSGeorge Zhang */ 145006164d2bSGeorge Zhang static int qp_notify_peer(bool attach, 145106164d2bSGeorge Zhang struct vmci_handle handle, 145206164d2bSGeorge Zhang u32 my_id, 145306164d2bSGeorge Zhang u32 peer_id) 145406164d2bSGeorge Zhang { 145506164d2bSGeorge Zhang int rv; 145606164d2bSGeorge Zhang struct vmci_event_qp ev; 145706164d2bSGeorge Zhang 145806164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || my_id == VMCI_INVALID_ID || 145906164d2bSGeorge Zhang peer_id == VMCI_INVALID_ID) 146006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 146106164d2bSGeorge Zhang 146206164d2bSGeorge Zhang /* 146306164d2bSGeorge Zhang * In vmci_ctx_enqueue_datagram() we enforce the upper limit on 146406164d2bSGeorge Zhang * number of pending events from the hypervisor to a given VM 146506164d2bSGeorge Zhang * otherwise a rogue VM could do an arbitrary number of attach 146606164d2bSGeorge Zhang * and detach operations causing memory pressure in the host 146706164d2bSGeorge Zhang * kernel. 146806164d2bSGeorge Zhang */ 146906164d2bSGeorge Zhang 147006164d2bSGeorge Zhang ev.msg.hdr.dst = vmci_make_handle(peer_id, VMCI_EVENT_HANDLER); 147106164d2bSGeorge Zhang ev.msg.hdr.src = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 147206164d2bSGeorge Zhang VMCI_CONTEXT_RESOURCE_ID); 147306164d2bSGeorge Zhang ev.msg.hdr.payload_size = sizeof(ev) - sizeof(ev.msg.hdr); 147406164d2bSGeorge Zhang ev.msg.event_data.event = attach ? 147506164d2bSGeorge Zhang VMCI_EVENT_QP_PEER_ATTACH : VMCI_EVENT_QP_PEER_DETACH; 147606164d2bSGeorge Zhang ev.payload.handle = handle; 147706164d2bSGeorge Zhang ev.payload.peer_id = my_id; 147806164d2bSGeorge Zhang 147906164d2bSGeorge Zhang rv = vmci_datagram_dispatch(VMCI_HYPERVISOR_CONTEXT_ID, 148006164d2bSGeorge Zhang &ev.msg.hdr, false); 148106164d2bSGeorge Zhang if (rv < VMCI_SUCCESS) 148206164d2bSGeorge Zhang pr_warn("Failed to enqueue queue_pair %s event datagram for context (ID=0x%x)\n", 148306164d2bSGeorge Zhang attach ? "ATTACH" : "DETACH", peer_id); 148406164d2bSGeorge Zhang 148506164d2bSGeorge Zhang return rv; 148606164d2bSGeorge Zhang } 148706164d2bSGeorge Zhang 148806164d2bSGeorge Zhang /* 148906164d2bSGeorge Zhang * The second endpoint issuing a queue pair allocation will attach to 149006164d2bSGeorge Zhang * the queue pair registered with the queue pair broker. 149106164d2bSGeorge Zhang * 149206164d2bSGeorge Zhang * If the attacher is a guest, it will associate a VMX virtual address 149306164d2bSGeorge Zhang * range with the queue pair as specified by the page_store. At this 149406164d2bSGeorge Zhang * point, the already attach host endpoint may start using the queue 149506164d2bSGeorge Zhang * pair, and an attach event is sent to it. For compatibility with 149606164d2bSGeorge Zhang * older VMX'en, that used a separate step to set the VMX virtual 149706164d2bSGeorge Zhang * address range, the virtual address range can be registered later 149806164d2bSGeorge Zhang * using vmci_qp_broker_set_page_store. In that case, a page_store of 149906164d2bSGeorge Zhang * NULL should be used, and the attach event will be generated once 150006164d2bSGeorge Zhang * the actual page store has been set. 150106164d2bSGeorge Zhang * 150206164d2bSGeorge Zhang * If the attacher is the host, a page_store of NULL should be used as 150306164d2bSGeorge Zhang * well, since the page store information is already set by the guest. 150406164d2bSGeorge Zhang * 150506164d2bSGeorge Zhang * For new VMX and host callers, the queue pair will be moved to the 150606164d2bSGeorge Zhang * VMCIQPB_ATTACHED_MEM state, and for older VMX callers, it will be 150706164d2bSGeorge Zhang * moved to the VMCOQPB_ATTACHED_NO_MEM state. 150806164d2bSGeorge Zhang */ 150906164d2bSGeorge Zhang static int qp_broker_attach(struct qp_broker_entry *entry, 151006164d2bSGeorge Zhang u32 peer, 151106164d2bSGeorge Zhang u32 flags, 151206164d2bSGeorge Zhang u32 priv_flags, 151306164d2bSGeorge Zhang u64 produce_size, 151406164d2bSGeorge Zhang u64 consume_size, 151506164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 151606164d2bSGeorge Zhang struct vmci_ctx *context, 151706164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 151806164d2bSGeorge Zhang void *client_data, 151906164d2bSGeorge Zhang struct qp_broker_entry **ent) 152006164d2bSGeorge Zhang { 152106164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 152206164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 152306164d2bSGeorge Zhang int result; 152406164d2bSGeorge Zhang 152506164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM && 152606164d2bSGeorge Zhang entry->state != VMCIQPB_CREATED_MEM) 152706164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 152806164d2bSGeorge Zhang 152906164d2bSGeorge Zhang if (is_local) { 153006164d2bSGeorge Zhang if (!(entry->qp.flags & VMCI_QPFLAG_LOCAL) || 153106164d2bSGeorge Zhang context_id != entry->create_id) { 153206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 153306164d2bSGeorge Zhang } 153406164d2bSGeorge Zhang } else if (context_id == entry->create_id || 153506164d2bSGeorge Zhang context_id == entry->attach_id) { 153606164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 153706164d2bSGeorge Zhang } 153806164d2bSGeorge Zhang 153906164d2bSGeorge Zhang if (VMCI_CONTEXT_IS_VM(context_id) && 154006164d2bSGeorge Zhang VMCI_CONTEXT_IS_VM(entry->create_id)) 154106164d2bSGeorge Zhang return VMCI_ERROR_DST_UNREACHABLE; 154206164d2bSGeorge Zhang 154306164d2bSGeorge Zhang /* 154406164d2bSGeorge Zhang * If we are attaching from a restricted context then the queuepair 154506164d2bSGeorge Zhang * must have been created by a trusted endpoint. 154606164d2bSGeorge Zhang */ 154706164d2bSGeorge Zhang if ((context->priv_flags & VMCI_PRIVILEGE_FLAG_RESTRICTED) && 154806164d2bSGeorge Zhang !entry->created_by_trusted) 154906164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 155006164d2bSGeorge Zhang 155106164d2bSGeorge Zhang /* 155206164d2bSGeorge Zhang * If we are attaching to a queuepair that was created by a restricted 155306164d2bSGeorge Zhang * context then we must be trusted. 155406164d2bSGeorge Zhang */ 155506164d2bSGeorge Zhang if (entry->require_trusted_attach && 155606164d2bSGeorge Zhang (!(priv_flags & VMCI_PRIVILEGE_FLAG_TRUSTED))) 155706164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 155806164d2bSGeorge Zhang 155906164d2bSGeorge Zhang /* 156006164d2bSGeorge Zhang * If the creator specifies VMCI_INVALID_ID in "peer" field, access 156106164d2bSGeorge Zhang * control check is not performed. 156206164d2bSGeorge Zhang */ 156306164d2bSGeorge Zhang if (entry->qp.peer != VMCI_INVALID_ID && entry->qp.peer != context_id) 156406164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 156506164d2bSGeorge Zhang 156606164d2bSGeorge Zhang if (entry->create_id == VMCI_HOST_CONTEXT_ID) { 156706164d2bSGeorge Zhang /* 156806164d2bSGeorge Zhang * Do not attach if the caller doesn't support Host Queue Pairs 156906164d2bSGeorge Zhang * and a host created this queue pair. 157006164d2bSGeorge Zhang */ 157106164d2bSGeorge Zhang 157206164d2bSGeorge Zhang if (!vmci_ctx_supports_host_qp(context)) 157306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_RESOURCE; 157406164d2bSGeorge Zhang 157506164d2bSGeorge Zhang } else if (context_id == VMCI_HOST_CONTEXT_ID) { 157606164d2bSGeorge Zhang struct vmci_ctx *create_context; 157706164d2bSGeorge Zhang bool supports_host_qp; 157806164d2bSGeorge Zhang 157906164d2bSGeorge Zhang /* 158006164d2bSGeorge Zhang * Do not attach a host to a user created queue pair if that 158106164d2bSGeorge Zhang * user doesn't support host queue pair end points. 158206164d2bSGeorge Zhang */ 158306164d2bSGeorge Zhang 158406164d2bSGeorge Zhang create_context = vmci_ctx_get(entry->create_id); 158506164d2bSGeorge Zhang supports_host_qp = vmci_ctx_supports_host_qp(create_context); 158606164d2bSGeorge Zhang vmci_ctx_put(create_context); 158706164d2bSGeorge Zhang 158806164d2bSGeorge Zhang if (!supports_host_qp) 158906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_RESOURCE; 159006164d2bSGeorge Zhang } 159106164d2bSGeorge Zhang 159206164d2bSGeorge Zhang if ((entry->qp.flags & ~VMCI_QP_ASYMM) != (flags & ~VMCI_QP_ASYMM_PEER)) 159306164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 159406164d2bSGeorge Zhang 159506164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 159606164d2bSGeorge Zhang /* 159706164d2bSGeorge Zhang * The queue pair broker entry stores values from the guest 159806164d2bSGeorge Zhang * point of view, so an attaching guest should match the values 159906164d2bSGeorge Zhang * stored in the entry. 160006164d2bSGeorge Zhang */ 160106164d2bSGeorge Zhang 160206164d2bSGeorge Zhang if (entry->qp.produce_size != produce_size || 160306164d2bSGeorge Zhang entry->qp.consume_size != consume_size) { 160406164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 160506164d2bSGeorge Zhang } 160606164d2bSGeorge Zhang } else if (entry->qp.produce_size != consume_size || 160706164d2bSGeorge Zhang entry->qp.consume_size != produce_size) { 160806164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 160906164d2bSGeorge Zhang } 161006164d2bSGeorge Zhang 161106164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 161206164d2bSGeorge Zhang /* 161306164d2bSGeorge Zhang * If a guest attached to a queue pair, it will supply 161406164d2bSGeorge Zhang * the backing memory. If this is a pre NOVMVM vmx, 161506164d2bSGeorge Zhang * the backing memory will be supplied by calling 161606164d2bSGeorge Zhang * vmci_qp_broker_set_page_store() following the 161706164d2bSGeorge Zhang * return of the vmci_qp_broker_alloc() call. If it is 161806164d2bSGeorge Zhang * a vmx of version NOVMVM or later, the page store 161906164d2bSGeorge Zhang * must be supplied as part of the 162006164d2bSGeorge Zhang * vmci_qp_broker_alloc call. Under all circumstances 162106164d2bSGeorge Zhang * must the initially created queue pair not have any 162206164d2bSGeorge Zhang * memory associated with it already. 162306164d2bSGeorge Zhang */ 162406164d2bSGeorge Zhang 162506164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM) 162606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 162706164d2bSGeorge Zhang 162806164d2bSGeorge Zhang if (page_store != NULL) { 162906164d2bSGeorge Zhang /* 163006164d2bSGeorge Zhang * Patch up host state to point to guest 163106164d2bSGeorge Zhang * supplied memory. The VMX already 163206164d2bSGeorge Zhang * initialized the queue pair headers, so no 163306164d2bSGeorge Zhang * need for the kernel side to do that. 163406164d2bSGeorge Zhang */ 163506164d2bSGeorge Zhang 163606164d2bSGeorge Zhang result = qp_host_register_user_memory(page_store, 163706164d2bSGeorge Zhang entry->produce_q, 163806164d2bSGeorge Zhang entry->consume_q); 163906164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 164006164d2bSGeorge Zhang return result; 164106164d2bSGeorge Zhang 164206164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 164306164d2bSGeorge Zhang } else { 164406164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_NO_MEM; 164506164d2bSGeorge Zhang } 164606164d2bSGeorge Zhang } else if (entry->state == VMCIQPB_CREATED_NO_MEM) { 164706164d2bSGeorge Zhang /* 164806164d2bSGeorge Zhang * The host side is attempting to attach to a queue 164906164d2bSGeorge Zhang * pair that doesn't have any memory associated with 165006164d2bSGeorge Zhang * it. This must be a pre NOVMVM vmx that hasn't set 165106164d2bSGeorge Zhang * the page store information yet, or a quiesced VM. 165206164d2bSGeorge Zhang */ 165306164d2bSGeorge Zhang 165406164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 165506164d2bSGeorge Zhang } else { 165606164d2bSGeorge Zhang /* The host side has successfully attached to a queue pair. */ 165706164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 165806164d2bSGeorge Zhang } 165906164d2bSGeorge Zhang 166006164d2bSGeorge Zhang if (entry->state == VMCIQPB_ATTACHED_MEM) { 166106164d2bSGeorge Zhang result = 166206164d2bSGeorge Zhang qp_notify_peer(true, entry->qp.handle, context_id, 166306164d2bSGeorge Zhang entry->create_id); 166406164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 166506164d2bSGeorge Zhang pr_warn("Failed to notify peer (ID=0x%x) of attach to queue pair (handle=0x%x:0x%x)\n", 166606164d2bSGeorge Zhang entry->create_id, entry->qp.handle.context, 166706164d2bSGeorge Zhang entry->qp.handle.resource); 166806164d2bSGeorge Zhang } 166906164d2bSGeorge Zhang 167006164d2bSGeorge Zhang entry->attach_id = context_id; 167106164d2bSGeorge Zhang entry->qp.ref_count++; 167206164d2bSGeorge Zhang if (wakeup_cb) { 167306164d2bSGeorge Zhang entry->wakeup_cb = wakeup_cb; 167406164d2bSGeorge Zhang entry->client_data = client_data; 167506164d2bSGeorge Zhang } 167606164d2bSGeorge Zhang 167706164d2bSGeorge Zhang /* 167806164d2bSGeorge Zhang * When attaching to local queue pairs, the context already has 167906164d2bSGeorge Zhang * an entry tracking the queue pair, so don't add another one. 168006164d2bSGeorge Zhang */ 168106164d2bSGeorge Zhang if (!is_local) 168206164d2bSGeorge Zhang vmci_ctx_qp_create(context, entry->qp.handle); 168306164d2bSGeorge Zhang 168406164d2bSGeorge Zhang if (ent != NULL) 168506164d2bSGeorge Zhang *ent = entry; 168606164d2bSGeorge Zhang 168706164d2bSGeorge Zhang return VMCI_SUCCESS; 168806164d2bSGeorge Zhang } 168906164d2bSGeorge Zhang 169006164d2bSGeorge Zhang /* 169106164d2bSGeorge Zhang * queue_pair_Alloc for use when setting up queue pair endpoints 169206164d2bSGeorge Zhang * on the host. 169306164d2bSGeorge Zhang */ 169406164d2bSGeorge Zhang static int qp_broker_alloc(struct vmci_handle handle, 169506164d2bSGeorge Zhang u32 peer, 169606164d2bSGeorge Zhang u32 flags, 169706164d2bSGeorge Zhang u32 priv_flags, 169806164d2bSGeorge Zhang u64 produce_size, 169906164d2bSGeorge Zhang u64 consume_size, 170006164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 170106164d2bSGeorge Zhang struct vmci_ctx *context, 170206164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 170306164d2bSGeorge Zhang void *client_data, 170406164d2bSGeorge Zhang struct qp_broker_entry **ent, 170506164d2bSGeorge Zhang bool *swap) 170606164d2bSGeorge Zhang { 170706164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 170806164d2bSGeorge Zhang bool create; 170906164d2bSGeorge Zhang struct qp_broker_entry *entry = NULL; 171006164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 171106164d2bSGeorge Zhang int result; 171206164d2bSGeorge Zhang 171306164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || 171406164d2bSGeorge Zhang (flags & ~VMCI_QP_ALL_FLAGS) || is_local || 171506164d2bSGeorge Zhang !(produce_size || consume_size) || 171606164d2bSGeorge Zhang !context || context_id == VMCI_INVALID_ID || 171706164d2bSGeorge Zhang handle.context == VMCI_INVALID_ID) { 171806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 171906164d2bSGeorge Zhang } 172006164d2bSGeorge Zhang 172106164d2bSGeorge Zhang if (page_store && !VMCI_QP_PAGESTORE_IS_WELLFORMED(page_store)) 172206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 172306164d2bSGeorge Zhang 172406164d2bSGeorge Zhang /* 172506164d2bSGeorge Zhang * In the initial argument check, we ensure that non-vmkernel hosts 172606164d2bSGeorge Zhang * are not allowed to create local queue pairs. 172706164d2bSGeorge Zhang */ 172806164d2bSGeorge Zhang 172906164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 173006164d2bSGeorge Zhang 173106164d2bSGeorge Zhang if (!is_local && vmci_ctx_qp_exists(context, handle)) { 173206164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) already attached to queue pair (handle=0x%x:0x%x)\n", 173306164d2bSGeorge Zhang context_id, handle.context, handle.resource); 173406164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 173506164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 173606164d2bSGeorge Zhang } 173706164d2bSGeorge Zhang 173806164d2bSGeorge Zhang if (handle.resource != VMCI_INVALID_ID) 173906164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 174006164d2bSGeorge Zhang 174106164d2bSGeorge Zhang if (!entry) { 174206164d2bSGeorge Zhang create = true; 174306164d2bSGeorge Zhang result = 174406164d2bSGeorge Zhang qp_broker_create(handle, peer, flags, priv_flags, 174506164d2bSGeorge Zhang produce_size, consume_size, page_store, 174606164d2bSGeorge Zhang context, wakeup_cb, client_data, ent); 174706164d2bSGeorge Zhang } else { 174806164d2bSGeorge Zhang create = false; 174906164d2bSGeorge Zhang result = 175006164d2bSGeorge Zhang qp_broker_attach(entry, peer, flags, priv_flags, 175106164d2bSGeorge Zhang produce_size, consume_size, page_store, 175206164d2bSGeorge Zhang context, wakeup_cb, client_data, ent); 175306164d2bSGeorge Zhang } 175406164d2bSGeorge Zhang 175506164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 175606164d2bSGeorge Zhang 175706164d2bSGeorge Zhang if (swap) 175806164d2bSGeorge Zhang *swap = (context_id == VMCI_HOST_CONTEXT_ID) && 175906164d2bSGeorge Zhang !(create && is_local); 176006164d2bSGeorge Zhang 176106164d2bSGeorge Zhang return result; 176206164d2bSGeorge Zhang } 176306164d2bSGeorge Zhang 176406164d2bSGeorge Zhang /* 176506164d2bSGeorge Zhang * This function implements the kernel API for allocating a queue 176606164d2bSGeorge Zhang * pair. 176706164d2bSGeorge Zhang */ 176806164d2bSGeorge Zhang static int qp_alloc_host_work(struct vmci_handle *handle, 176906164d2bSGeorge Zhang struct vmci_queue **produce_q, 177006164d2bSGeorge Zhang u64 produce_size, 177106164d2bSGeorge Zhang struct vmci_queue **consume_q, 177206164d2bSGeorge Zhang u64 consume_size, 177306164d2bSGeorge Zhang u32 peer, 177406164d2bSGeorge Zhang u32 flags, 177506164d2bSGeorge Zhang u32 priv_flags, 177606164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 177706164d2bSGeorge Zhang void *client_data) 177806164d2bSGeorge Zhang { 177906164d2bSGeorge Zhang struct vmci_handle new_handle; 178006164d2bSGeorge Zhang struct vmci_ctx *context; 178106164d2bSGeorge Zhang struct qp_broker_entry *entry; 178206164d2bSGeorge Zhang int result; 178306164d2bSGeorge Zhang bool swap; 178406164d2bSGeorge Zhang 178506164d2bSGeorge Zhang if (vmci_handle_is_invalid(*handle)) { 178606164d2bSGeorge Zhang new_handle = vmci_make_handle( 178706164d2bSGeorge Zhang VMCI_HOST_CONTEXT_ID, VMCI_INVALID_ID); 178806164d2bSGeorge Zhang } else 178906164d2bSGeorge Zhang new_handle = *handle; 179006164d2bSGeorge Zhang 179106164d2bSGeorge Zhang context = vmci_ctx_get(VMCI_HOST_CONTEXT_ID); 179206164d2bSGeorge Zhang entry = NULL; 179306164d2bSGeorge Zhang result = 179406164d2bSGeorge Zhang qp_broker_alloc(new_handle, peer, flags, priv_flags, 179506164d2bSGeorge Zhang produce_size, consume_size, NULL, context, 179606164d2bSGeorge Zhang wakeup_cb, client_data, &entry, &swap); 179706164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 179806164d2bSGeorge Zhang if (swap) { 179906164d2bSGeorge Zhang /* 180006164d2bSGeorge Zhang * If this is a local queue pair, the attacher 180106164d2bSGeorge Zhang * will swap around produce and consume 180206164d2bSGeorge Zhang * queues. 180306164d2bSGeorge Zhang */ 180406164d2bSGeorge Zhang 180506164d2bSGeorge Zhang *produce_q = entry->consume_q; 180606164d2bSGeorge Zhang *consume_q = entry->produce_q; 180706164d2bSGeorge Zhang } else { 180806164d2bSGeorge Zhang *produce_q = entry->produce_q; 180906164d2bSGeorge Zhang *consume_q = entry->consume_q; 181006164d2bSGeorge Zhang } 181106164d2bSGeorge Zhang 181206164d2bSGeorge Zhang *handle = vmci_resource_handle(&entry->resource); 181306164d2bSGeorge Zhang } else { 181406164d2bSGeorge Zhang *handle = VMCI_INVALID_HANDLE; 181506164d2bSGeorge Zhang pr_devel("queue pair broker failed to alloc (result=%d)\n", 181606164d2bSGeorge Zhang result); 181706164d2bSGeorge Zhang } 181806164d2bSGeorge Zhang vmci_ctx_put(context); 181906164d2bSGeorge Zhang return result; 182006164d2bSGeorge Zhang } 182106164d2bSGeorge Zhang 182206164d2bSGeorge Zhang /* 182306164d2bSGeorge Zhang * Allocates a VMCI queue_pair. Only checks validity of input 182406164d2bSGeorge Zhang * arguments. The real work is done in the host or guest 182506164d2bSGeorge Zhang * specific function. 182606164d2bSGeorge Zhang */ 182706164d2bSGeorge Zhang int vmci_qp_alloc(struct vmci_handle *handle, 182806164d2bSGeorge Zhang struct vmci_queue **produce_q, 182906164d2bSGeorge Zhang u64 produce_size, 183006164d2bSGeorge Zhang struct vmci_queue **consume_q, 183106164d2bSGeorge Zhang u64 consume_size, 183206164d2bSGeorge Zhang u32 peer, 183306164d2bSGeorge Zhang u32 flags, 183406164d2bSGeorge Zhang u32 priv_flags, 183506164d2bSGeorge Zhang bool guest_endpoint, 183606164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 183706164d2bSGeorge Zhang void *client_data) 183806164d2bSGeorge Zhang { 183906164d2bSGeorge Zhang if (!handle || !produce_q || !consume_q || 184006164d2bSGeorge Zhang (!produce_size && !consume_size) || (flags & ~VMCI_QP_ALL_FLAGS)) 184106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 184206164d2bSGeorge Zhang 184306164d2bSGeorge Zhang if (guest_endpoint) { 184406164d2bSGeorge Zhang return qp_alloc_guest_work(handle, produce_q, 184506164d2bSGeorge Zhang produce_size, consume_q, 184606164d2bSGeorge Zhang consume_size, peer, 184706164d2bSGeorge Zhang flags, priv_flags); 184806164d2bSGeorge Zhang } else { 184906164d2bSGeorge Zhang return qp_alloc_host_work(handle, produce_q, 185006164d2bSGeorge Zhang produce_size, consume_q, 185106164d2bSGeorge Zhang consume_size, peer, flags, 185206164d2bSGeorge Zhang priv_flags, wakeup_cb, client_data); 185306164d2bSGeorge Zhang } 185406164d2bSGeorge Zhang } 185506164d2bSGeorge Zhang 185606164d2bSGeorge Zhang /* 185706164d2bSGeorge Zhang * This function implements the host kernel API for detaching from 185806164d2bSGeorge Zhang * a queue pair. 185906164d2bSGeorge Zhang */ 186006164d2bSGeorge Zhang static int qp_detatch_host_work(struct vmci_handle handle) 186106164d2bSGeorge Zhang { 186206164d2bSGeorge Zhang int result; 186306164d2bSGeorge Zhang struct vmci_ctx *context; 186406164d2bSGeorge Zhang 186506164d2bSGeorge Zhang context = vmci_ctx_get(VMCI_HOST_CONTEXT_ID); 186606164d2bSGeorge Zhang 186706164d2bSGeorge Zhang result = vmci_qp_broker_detach(handle, context); 186806164d2bSGeorge Zhang 186906164d2bSGeorge Zhang vmci_ctx_put(context); 187006164d2bSGeorge Zhang return result; 187106164d2bSGeorge Zhang } 187206164d2bSGeorge Zhang 187306164d2bSGeorge Zhang /* 187406164d2bSGeorge Zhang * Detaches from a VMCI queue_pair. Only checks validity of input argument. 187506164d2bSGeorge Zhang * Real work is done in the host or guest specific function. 187606164d2bSGeorge Zhang */ 187706164d2bSGeorge Zhang static int qp_detatch(struct vmci_handle handle, bool guest_endpoint) 187806164d2bSGeorge Zhang { 187906164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) 188006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 188106164d2bSGeorge Zhang 188206164d2bSGeorge Zhang if (guest_endpoint) 188306164d2bSGeorge Zhang return qp_detatch_guest_work(handle); 188406164d2bSGeorge Zhang else 188506164d2bSGeorge Zhang return qp_detatch_host_work(handle); 188606164d2bSGeorge Zhang } 188706164d2bSGeorge Zhang 188806164d2bSGeorge Zhang /* 188906164d2bSGeorge Zhang * Returns the entry from the head of the list. Assumes that the list is 189006164d2bSGeorge Zhang * locked. 189106164d2bSGeorge Zhang */ 189206164d2bSGeorge Zhang static struct qp_entry *qp_list_get_head(struct qp_list *qp_list) 189306164d2bSGeorge Zhang { 189406164d2bSGeorge Zhang if (!list_empty(&qp_list->head)) { 189506164d2bSGeorge Zhang struct qp_entry *entry = 189606164d2bSGeorge Zhang list_first_entry(&qp_list->head, struct qp_entry, 189706164d2bSGeorge Zhang list_item); 189806164d2bSGeorge Zhang return entry; 189906164d2bSGeorge Zhang } 190006164d2bSGeorge Zhang 190106164d2bSGeorge Zhang return NULL; 190206164d2bSGeorge Zhang } 190306164d2bSGeorge Zhang 190406164d2bSGeorge Zhang void vmci_qp_broker_exit(void) 190506164d2bSGeorge Zhang { 190606164d2bSGeorge Zhang struct qp_entry *entry; 190706164d2bSGeorge Zhang struct qp_broker_entry *be; 190806164d2bSGeorge Zhang 190906164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 191006164d2bSGeorge Zhang 191106164d2bSGeorge Zhang while ((entry = qp_list_get_head(&qp_broker_list))) { 191206164d2bSGeorge Zhang be = (struct qp_broker_entry *)entry; 191306164d2bSGeorge Zhang 191406164d2bSGeorge Zhang qp_list_remove_entry(&qp_broker_list, entry); 191506164d2bSGeorge Zhang kfree(be); 191606164d2bSGeorge Zhang } 191706164d2bSGeorge Zhang 191806164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 191906164d2bSGeorge Zhang } 192006164d2bSGeorge Zhang 192106164d2bSGeorge Zhang /* 192206164d2bSGeorge Zhang * Requests that a queue pair be allocated with the VMCI queue 192306164d2bSGeorge Zhang * pair broker. Allocates a queue pair entry if one does not 192406164d2bSGeorge Zhang * exist. Attaches to one if it exists, and retrieves the page 192506164d2bSGeorge Zhang * files backing that queue_pair. Assumes that the queue pair 192606164d2bSGeorge Zhang * broker lock is held. 192706164d2bSGeorge Zhang */ 192806164d2bSGeorge Zhang int vmci_qp_broker_alloc(struct vmci_handle handle, 192906164d2bSGeorge Zhang u32 peer, 193006164d2bSGeorge Zhang u32 flags, 193106164d2bSGeorge Zhang u32 priv_flags, 193206164d2bSGeorge Zhang u64 produce_size, 193306164d2bSGeorge Zhang u64 consume_size, 193406164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 193506164d2bSGeorge Zhang struct vmci_ctx *context) 193606164d2bSGeorge Zhang { 19377eecea89SJorgen Hansen if (!QP_SIZES_ARE_VALID(produce_size, consume_size)) 19387eecea89SJorgen Hansen return VMCI_ERROR_NO_RESOURCES; 19397eecea89SJorgen Hansen 194006164d2bSGeorge Zhang return qp_broker_alloc(handle, peer, flags, priv_flags, 194106164d2bSGeorge Zhang produce_size, consume_size, 194206164d2bSGeorge Zhang page_store, context, NULL, NULL, NULL, NULL); 194306164d2bSGeorge Zhang } 194406164d2bSGeorge Zhang 194506164d2bSGeorge Zhang /* 194606164d2bSGeorge Zhang * VMX'en with versions lower than VMCI_VERSION_NOVMVM use a separate 194706164d2bSGeorge Zhang * step to add the UVAs of the VMX mapping of the queue pair. This function 194806164d2bSGeorge Zhang * provides backwards compatibility with such VMX'en, and takes care of 194906164d2bSGeorge Zhang * registering the page store for a queue pair previously allocated by the 195006164d2bSGeorge Zhang * VMX during create or attach. This function will move the queue pair state 195106164d2bSGeorge Zhang * to either from VMCIQBP_CREATED_NO_MEM to VMCIQBP_CREATED_MEM or 195206164d2bSGeorge Zhang * VMCIQBP_ATTACHED_NO_MEM to VMCIQBP_ATTACHED_MEM. If moving to the 195306164d2bSGeorge Zhang * attached state with memory, the queue pair is ready to be used by the 195406164d2bSGeorge Zhang * host peer, and an attached event will be generated. 195506164d2bSGeorge Zhang * 195606164d2bSGeorge Zhang * Assumes that the queue pair broker lock is held. 195706164d2bSGeorge Zhang * 195806164d2bSGeorge Zhang * This function is only used by the hosted platform, since there is no 195906164d2bSGeorge Zhang * issue with backwards compatibility for vmkernel. 196006164d2bSGeorge Zhang */ 196106164d2bSGeorge Zhang int vmci_qp_broker_set_page_store(struct vmci_handle handle, 196206164d2bSGeorge Zhang u64 produce_uva, 196306164d2bSGeorge Zhang u64 consume_uva, 196406164d2bSGeorge Zhang struct vmci_ctx *context) 196506164d2bSGeorge Zhang { 196606164d2bSGeorge Zhang struct qp_broker_entry *entry; 196706164d2bSGeorge Zhang int result; 196806164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 196906164d2bSGeorge Zhang 197006164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 197106164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 197206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 197306164d2bSGeorge Zhang 197406164d2bSGeorge Zhang /* 197506164d2bSGeorge Zhang * We only support guest to host queue pairs, so the VMX must 197606164d2bSGeorge Zhang * supply UVAs for the mapped page files. 197706164d2bSGeorge Zhang */ 197806164d2bSGeorge Zhang 197906164d2bSGeorge Zhang if (produce_uva == 0 || consume_uva == 0) 198006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 198106164d2bSGeorge Zhang 198206164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 198306164d2bSGeorge Zhang 198406164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 198506164d2bSGeorge Zhang pr_warn("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 198606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 198706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 198806164d2bSGeorge Zhang goto out; 198906164d2bSGeorge Zhang } 199006164d2bSGeorge Zhang 199106164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 199206164d2bSGeorge Zhang if (!entry) { 199306164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 199406164d2bSGeorge Zhang goto out; 199506164d2bSGeorge Zhang } 199606164d2bSGeorge Zhang 199706164d2bSGeorge Zhang /* 199806164d2bSGeorge Zhang * If I'm the owner then I can set the page store. 199906164d2bSGeorge Zhang * 200006164d2bSGeorge Zhang * Or, if a host created the queue_pair and I'm the attached peer 200106164d2bSGeorge Zhang * then I can set the page store. 200206164d2bSGeorge Zhang */ 200306164d2bSGeorge Zhang if (entry->create_id != context_id && 200406164d2bSGeorge Zhang (entry->create_id != VMCI_HOST_CONTEXT_ID || 200506164d2bSGeorge Zhang entry->attach_id != context_id)) { 200606164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTOWNER; 200706164d2bSGeorge Zhang goto out; 200806164d2bSGeorge Zhang } 200906164d2bSGeorge Zhang 201006164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM && 201106164d2bSGeorge Zhang entry->state != VMCIQPB_ATTACHED_NO_MEM) { 201206164d2bSGeorge Zhang result = VMCI_ERROR_UNAVAILABLE; 201306164d2bSGeorge Zhang goto out; 201406164d2bSGeorge Zhang } 201506164d2bSGeorge Zhang 201606164d2bSGeorge Zhang result = qp_host_get_user_memory(produce_uva, consume_uva, 201706164d2bSGeorge Zhang entry->produce_q, entry->consume_q); 201806164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 201906164d2bSGeorge Zhang goto out; 202006164d2bSGeorge Zhang 202106164d2bSGeorge Zhang result = qp_host_map_queues(entry->produce_q, entry->consume_q); 202206164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 202306164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 202406164d2bSGeorge Zhang entry->consume_q); 202506164d2bSGeorge Zhang goto out; 202606164d2bSGeorge Zhang } 202706164d2bSGeorge Zhang 202806164d2bSGeorge Zhang if (entry->state == VMCIQPB_CREATED_NO_MEM) 202906164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 203006164d2bSGeorge Zhang else 203106164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 203206164d2bSGeorge Zhang 203306164d2bSGeorge Zhang entry->vmci_page_files = true; 203406164d2bSGeorge Zhang 203506164d2bSGeorge Zhang if (entry->state == VMCIQPB_ATTACHED_MEM) { 203606164d2bSGeorge Zhang result = 203706164d2bSGeorge Zhang qp_notify_peer(true, handle, context_id, entry->create_id); 203806164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 203906164d2bSGeorge Zhang pr_warn("Failed to notify peer (ID=0x%x) of attach to queue pair (handle=0x%x:0x%x)\n", 204006164d2bSGeorge Zhang entry->create_id, entry->qp.handle.context, 204106164d2bSGeorge Zhang entry->qp.handle.resource); 204206164d2bSGeorge Zhang } 204306164d2bSGeorge Zhang } 204406164d2bSGeorge Zhang 204506164d2bSGeorge Zhang result = VMCI_SUCCESS; 204606164d2bSGeorge Zhang out: 204706164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 204806164d2bSGeorge Zhang return result; 204906164d2bSGeorge Zhang } 205006164d2bSGeorge Zhang 205106164d2bSGeorge Zhang /* 205206164d2bSGeorge Zhang * Resets saved queue headers for the given QP broker 205306164d2bSGeorge Zhang * entry. Should be used when guest memory becomes available 205406164d2bSGeorge Zhang * again, or the guest detaches. 205506164d2bSGeorge Zhang */ 205606164d2bSGeorge Zhang static void qp_reset_saved_headers(struct qp_broker_entry *entry) 205706164d2bSGeorge Zhang { 205806164d2bSGeorge Zhang entry->produce_q->saved_header = NULL; 205906164d2bSGeorge Zhang entry->consume_q->saved_header = NULL; 206006164d2bSGeorge Zhang } 206106164d2bSGeorge Zhang 206206164d2bSGeorge Zhang /* 206306164d2bSGeorge Zhang * The main entry point for detaching from a queue pair registered with the 206406164d2bSGeorge Zhang * queue pair broker. If more than one endpoint is attached to the queue 206506164d2bSGeorge Zhang * pair, the first endpoint will mainly decrement a reference count and 206606164d2bSGeorge Zhang * generate a notification to its peer. The last endpoint will clean up 206706164d2bSGeorge Zhang * the queue pair state registered with the broker. 206806164d2bSGeorge Zhang * 206906164d2bSGeorge Zhang * When a guest endpoint detaches, it will unmap and unregister the guest 207006164d2bSGeorge Zhang * memory backing the queue pair. If the host is still attached, it will 207106164d2bSGeorge Zhang * no longer be able to access the queue pair content. 207206164d2bSGeorge Zhang * 207306164d2bSGeorge Zhang * If the queue pair is already in a state where there is no memory 207406164d2bSGeorge Zhang * registered for the queue pair (any *_NO_MEM state), it will transition to 207506164d2bSGeorge Zhang * the VMCIQPB_SHUTDOWN_NO_MEM state. This will also happen, if a guest 207606164d2bSGeorge Zhang * endpoint is the first of two endpoints to detach. If the host endpoint is 207706164d2bSGeorge Zhang * the first out of two to detach, the queue pair will move to the 207806164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_MEM state. 207906164d2bSGeorge Zhang */ 208006164d2bSGeorge Zhang int vmci_qp_broker_detach(struct vmci_handle handle, struct vmci_ctx *context) 208106164d2bSGeorge Zhang { 208206164d2bSGeorge Zhang struct qp_broker_entry *entry; 208306164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 208406164d2bSGeorge Zhang u32 peer_id; 208506164d2bSGeorge Zhang bool is_local = false; 208606164d2bSGeorge Zhang int result; 208706164d2bSGeorge Zhang 208806164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 208906164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) { 209006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 209106164d2bSGeorge Zhang } 209206164d2bSGeorge Zhang 209306164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 209406164d2bSGeorge Zhang 209506164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 209606164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 209706164d2bSGeorge Zhang context_id, handle.context, handle.resource); 209806164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 209906164d2bSGeorge Zhang goto out; 210006164d2bSGeorge Zhang } 210106164d2bSGeorge Zhang 210206164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 210306164d2bSGeorge Zhang if (!entry) { 210406164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair(handle=0x%x:0x%x) that isn't present in broker\n", 210506164d2bSGeorge Zhang context_id, handle.context, handle.resource); 210606164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 210706164d2bSGeorge Zhang goto out; 210806164d2bSGeorge Zhang } 210906164d2bSGeorge Zhang 211006164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 211106164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 211206164d2bSGeorge Zhang goto out; 211306164d2bSGeorge Zhang } 211406164d2bSGeorge Zhang 211506164d2bSGeorge Zhang if (context_id == entry->create_id) { 211606164d2bSGeorge Zhang peer_id = entry->attach_id; 211706164d2bSGeorge Zhang entry->create_id = VMCI_INVALID_ID; 211806164d2bSGeorge Zhang } else { 211906164d2bSGeorge Zhang peer_id = entry->create_id; 212006164d2bSGeorge Zhang entry->attach_id = VMCI_INVALID_ID; 212106164d2bSGeorge Zhang } 212206164d2bSGeorge Zhang entry->qp.ref_count--; 212306164d2bSGeorge Zhang 212406164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 212506164d2bSGeorge Zhang 212606164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 212706164d2bSGeorge Zhang bool headers_mapped; 212806164d2bSGeorge Zhang 212906164d2bSGeorge Zhang /* 213006164d2bSGeorge Zhang * Pre NOVMVM vmx'en may detach from a queue pair 213106164d2bSGeorge Zhang * before setting the page store, and in that case 213206164d2bSGeorge Zhang * there is no user memory to detach from. Also, more 213306164d2bSGeorge Zhang * recent VMX'en may detach from a queue pair in the 213406164d2bSGeorge Zhang * quiesced state. 213506164d2bSGeorge Zhang */ 213606164d2bSGeorge Zhang 213706164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 213806164d2bSGeorge Zhang headers_mapped = entry->produce_q->q_header || 213906164d2bSGeorge Zhang entry->consume_q->q_header; 214006164d2bSGeorge Zhang if (QPBROKERSTATE_HAS_MEM(entry)) { 214106164d2bSGeorge Zhang result = 214206164d2bSGeorge Zhang qp_host_unmap_queues(INVALID_VMCI_GUEST_MEM_ID, 214306164d2bSGeorge Zhang entry->produce_q, 214406164d2bSGeorge Zhang entry->consume_q); 214506164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 214606164d2bSGeorge Zhang pr_warn("Failed to unmap queue headers for queue pair (handle=0x%x:0x%x,result=%d)\n", 214706164d2bSGeorge Zhang handle.context, handle.resource, 214806164d2bSGeorge Zhang result); 214906164d2bSGeorge Zhang 215006164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 2151234b7f8dSGustavo A. R. Silva entry->consume_q); 215206164d2bSGeorge Zhang 215306164d2bSGeorge Zhang } 215406164d2bSGeorge Zhang 215506164d2bSGeorge Zhang if (!headers_mapped) 215606164d2bSGeorge Zhang qp_reset_saved_headers(entry); 215706164d2bSGeorge Zhang 215806164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 215906164d2bSGeorge Zhang 216006164d2bSGeorge Zhang if (!headers_mapped && entry->wakeup_cb) 216106164d2bSGeorge Zhang entry->wakeup_cb(entry->client_data); 216206164d2bSGeorge Zhang 216306164d2bSGeorge Zhang } else { 216406164d2bSGeorge Zhang if (entry->wakeup_cb) { 216506164d2bSGeorge Zhang entry->wakeup_cb = NULL; 216606164d2bSGeorge Zhang entry->client_data = NULL; 216706164d2bSGeorge Zhang } 216806164d2bSGeorge Zhang } 216906164d2bSGeorge Zhang 217006164d2bSGeorge Zhang if (entry->qp.ref_count == 0) { 217106164d2bSGeorge Zhang qp_list_remove_entry(&qp_broker_list, &entry->qp); 217206164d2bSGeorge Zhang 217306164d2bSGeorge Zhang if (is_local) 217406164d2bSGeorge Zhang kfree(entry->local_mem); 217506164d2bSGeorge Zhang 217606164d2bSGeorge Zhang qp_cleanup_queue_mutex(entry->produce_q, entry->consume_q); 217706164d2bSGeorge Zhang qp_host_free_queue(entry->produce_q, entry->qp.produce_size); 217806164d2bSGeorge Zhang qp_host_free_queue(entry->consume_q, entry->qp.consume_size); 217906164d2bSGeorge Zhang /* Unlink from resource hash table and free callback */ 218006164d2bSGeorge Zhang vmci_resource_remove(&entry->resource); 218106164d2bSGeorge Zhang 218206164d2bSGeorge Zhang kfree(entry); 218306164d2bSGeorge Zhang 218406164d2bSGeorge Zhang vmci_ctx_qp_destroy(context, handle); 218506164d2bSGeorge Zhang } else { 218606164d2bSGeorge Zhang qp_notify_peer(false, handle, context_id, peer_id); 218706164d2bSGeorge Zhang if (context_id == VMCI_HOST_CONTEXT_ID && 218806164d2bSGeorge Zhang QPBROKERSTATE_HAS_MEM(entry)) { 218906164d2bSGeorge Zhang entry->state = VMCIQPB_SHUTDOWN_MEM; 219006164d2bSGeorge Zhang } else { 219106164d2bSGeorge Zhang entry->state = VMCIQPB_SHUTDOWN_NO_MEM; 219206164d2bSGeorge Zhang } 219306164d2bSGeorge Zhang 219406164d2bSGeorge Zhang if (!is_local) 219506164d2bSGeorge Zhang vmci_ctx_qp_destroy(context, handle); 219606164d2bSGeorge Zhang 219706164d2bSGeorge Zhang } 219806164d2bSGeorge Zhang result = VMCI_SUCCESS; 219906164d2bSGeorge Zhang out: 220006164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 220106164d2bSGeorge Zhang return result; 220206164d2bSGeorge Zhang } 220306164d2bSGeorge Zhang 220406164d2bSGeorge Zhang /* 220506164d2bSGeorge Zhang * Establishes the necessary mappings for a queue pair given a 220606164d2bSGeorge Zhang * reference to the queue pair guest memory. This is usually 220706164d2bSGeorge Zhang * called when a guest is unquiesced and the VMX is allowed to 220806164d2bSGeorge Zhang * map guest memory once again. 220906164d2bSGeorge Zhang */ 221006164d2bSGeorge Zhang int vmci_qp_broker_map(struct vmci_handle handle, 221106164d2bSGeorge Zhang struct vmci_ctx *context, 221206164d2bSGeorge Zhang u64 guest_mem) 221306164d2bSGeorge Zhang { 221406164d2bSGeorge Zhang struct qp_broker_entry *entry; 221506164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 221606164d2bSGeorge Zhang int result; 221706164d2bSGeorge Zhang 221806164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 221906164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 222006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 222106164d2bSGeorge Zhang 222206164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 222306164d2bSGeorge Zhang 222406164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 222506164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 222606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 222706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 222806164d2bSGeorge Zhang goto out; 222906164d2bSGeorge Zhang } 223006164d2bSGeorge Zhang 223106164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 223206164d2bSGeorge Zhang if (!entry) { 223306164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair (handle=0x%x:0x%x) that isn't present in broker\n", 223406164d2bSGeorge Zhang context_id, handle.context, handle.resource); 223506164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 223606164d2bSGeorge Zhang goto out; 223706164d2bSGeorge Zhang } 223806164d2bSGeorge Zhang 223906164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 224006164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 224106164d2bSGeorge Zhang goto out; 224206164d2bSGeorge Zhang } 224306164d2bSGeorge Zhang 224406164d2bSGeorge Zhang result = VMCI_SUCCESS; 224506164d2bSGeorge Zhang 2246a30dc6cfSWang Hai if (context_id != VMCI_HOST_CONTEXT_ID && 2247a30dc6cfSWang Hai !QPBROKERSTATE_HAS_MEM(entry)) { 224806164d2bSGeorge Zhang struct vmci_qp_page_store page_store; 224906164d2bSGeorge Zhang 225006164d2bSGeorge Zhang page_store.pages = guest_mem; 225106164d2bSGeorge Zhang page_store.len = QPE_NUM_PAGES(entry->qp); 225206164d2bSGeorge Zhang 225306164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 225406164d2bSGeorge Zhang qp_reset_saved_headers(entry); 225506164d2bSGeorge Zhang result = 225606164d2bSGeorge Zhang qp_host_register_user_memory(&page_store, 225706164d2bSGeorge Zhang entry->produce_q, 225806164d2bSGeorge Zhang entry->consume_q); 225906164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 226006164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 226106164d2bSGeorge Zhang /* Move state from *_NO_MEM to *_MEM */ 226206164d2bSGeorge Zhang 226306164d2bSGeorge Zhang entry->state++; 226406164d2bSGeorge Zhang 226506164d2bSGeorge Zhang if (entry->wakeup_cb) 226606164d2bSGeorge Zhang entry->wakeup_cb(entry->client_data); 226706164d2bSGeorge Zhang } 226806164d2bSGeorge Zhang } 226906164d2bSGeorge Zhang 227006164d2bSGeorge Zhang out: 227106164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 227206164d2bSGeorge Zhang return result; 227306164d2bSGeorge Zhang } 227406164d2bSGeorge Zhang 227506164d2bSGeorge Zhang /* 227606164d2bSGeorge Zhang * Saves a snapshot of the queue headers for the given QP broker 227706164d2bSGeorge Zhang * entry. Should be used when guest memory is unmapped. 227806164d2bSGeorge Zhang * Results: 227906164d2bSGeorge Zhang * VMCI_SUCCESS on success, appropriate error code if guest memory 228006164d2bSGeorge Zhang * can't be accessed.. 228106164d2bSGeorge Zhang */ 228206164d2bSGeorge Zhang static int qp_save_headers(struct qp_broker_entry *entry) 228306164d2bSGeorge Zhang { 228406164d2bSGeorge Zhang int result; 228506164d2bSGeorge Zhang 228606164d2bSGeorge Zhang if (entry->produce_q->saved_header != NULL && 228706164d2bSGeorge Zhang entry->consume_q->saved_header != NULL) { 228806164d2bSGeorge Zhang /* 228906164d2bSGeorge Zhang * If the headers have already been saved, we don't need to do 229006164d2bSGeorge Zhang * it again, and we don't want to map in the headers 229106164d2bSGeorge Zhang * unnecessarily. 229206164d2bSGeorge Zhang */ 229306164d2bSGeorge Zhang 229406164d2bSGeorge Zhang return VMCI_SUCCESS; 229506164d2bSGeorge Zhang } 229606164d2bSGeorge Zhang 229706164d2bSGeorge Zhang if (NULL == entry->produce_q->q_header || 229806164d2bSGeorge Zhang NULL == entry->consume_q->q_header) { 229906164d2bSGeorge Zhang result = qp_host_map_queues(entry->produce_q, entry->consume_q); 230006164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 230106164d2bSGeorge Zhang return result; 230206164d2bSGeorge Zhang } 230306164d2bSGeorge Zhang 230406164d2bSGeorge Zhang memcpy(&entry->saved_produce_q, entry->produce_q->q_header, 230506164d2bSGeorge Zhang sizeof(entry->saved_produce_q)); 230606164d2bSGeorge Zhang entry->produce_q->saved_header = &entry->saved_produce_q; 230706164d2bSGeorge Zhang memcpy(&entry->saved_consume_q, entry->consume_q->q_header, 230806164d2bSGeorge Zhang sizeof(entry->saved_consume_q)); 230906164d2bSGeorge Zhang entry->consume_q->saved_header = &entry->saved_consume_q; 231006164d2bSGeorge Zhang 231106164d2bSGeorge Zhang return VMCI_SUCCESS; 231206164d2bSGeorge Zhang } 231306164d2bSGeorge Zhang 231406164d2bSGeorge Zhang /* 231506164d2bSGeorge Zhang * Removes all references to the guest memory of a given queue pair, and 231606164d2bSGeorge Zhang * will move the queue pair from state *_MEM to *_NO_MEM. It is usually 231706164d2bSGeorge Zhang * called when a VM is being quiesced where access to guest memory should 231806164d2bSGeorge Zhang * avoided. 231906164d2bSGeorge Zhang */ 232006164d2bSGeorge Zhang int vmci_qp_broker_unmap(struct vmci_handle handle, 232106164d2bSGeorge Zhang struct vmci_ctx *context, 232206164d2bSGeorge Zhang u32 gid) 232306164d2bSGeorge Zhang { 232406164d2bSGeorge Zhang struct qp_broker_entry *entry; 232506164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 232606164d2bSGeorge Zhang int result; 232706164d2bSGeorge Zhang 232806164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 232906164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 233006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 233106164d2bSGeorge Zhang 233206164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 233306164d2bSGeorge Zhang 233406164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 233506164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 233606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 233706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 233806164d2bSGeorge Zhang goto out; 233906164d2bSGeorge Zhang } 234006164d2bSGeorge Zhang 234106164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 234206164d2bSGeorge Zhang if (!entry) { 234306164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair (handle=0x%x:0x%x) that isn't present in broker\n", 234406164d2bSGeorge Zhang context_id, handle.context, handle.resource); 234506164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 234606164d2bSGeorge Zhang goto out; 234706164d2bSGeorge Zhang } 234806164d2bSGeorge Zhang 234906164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 235006164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 235106164d2bSGeorge Zhang goto out; 235206164d2bSGeorge Zhang } 235306164d2bSGeorge Zhang 2354a30dc6cfSWang Hai if (context_id != VMCI_HOST_CONTEXT_ID && 2355a30dc6cfSWang Hai QPBROKERSTATE_HAS_MEM(entry)) { 235606164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 235706164d2bSGeorge Zhang result = qp_save_headers(entry); 235806164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 235906164d2bSGeorge Zhang pr_warn("Failed to save queue headers for queue pair (handle=0x%x:0x%x,result=%d)\n", 236006164d2bSGeorge Zhang handle.context, handle.resource, result); 236106164d2bSGeorge Zhang 236206164d2bSGeorge Zhang qp_host_unmap_queues(gid, entry->produce_q, entry->consume_q); 236306164d2bSGeorge Zhang 236406164d2bSGeorge Zhang /* 236506164d2bSGeorge Zhang * On hosted, when we unmap queue pairs, the VMX will also 236606164d2bSGeorge Zhang * unmap the guest memory, so we invalidate the previously 236706164d2bSGeorge Zhang * registered memory. If the queue pair is mapped again at a 236806164d2bSGeorge Zhang * later point in time, we will need to reregister the user 236906164d2bSGeorge Zhang * memory with a possibly new user VA. 237006164d2bSGeorge Zhang */ 237106164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 237206164d2bSGeorge Zhang entry->consume_q); 237306164d2bSGeorge Zhang 237406164d2bSGeorge Zhang /* 237506164d2bSGeorge Zhang * Move state from *_MEM to *_NO_MEM. 237606164d2bSGeorge Zhang */ 237706164d2bSGeorge Zhang entry->state--; 237806164d2bSGeorge Zhang 237906164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 238006164d2bSGeorge Zhang } 238106164d2bSGeorge Zhang 238206164d2bSGeorge Zhang result = VMCI_SUCCESS; 238306164d2bSGeorge Zhang 238406164d2bSGeorge Zhang out: 238506164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 238606164d2bSGeorge Zhang return result; 238706164d2bSGeorge Zhang } 238806164d2bSGeorge Zhang 238906164d2bSGeorge Zhang /* 239006164d2bSGeorge Zhang * Destroys all guest queue pair endpoints. If active guest queue 239106164d2bSGeorge Zhang * pairs still exist, hypercalls to attempt detach from these 239206164d2bSGeorge Zhang * queue pairs will be made. Any failure to detach is silently 239306164d2bSGeorge Zhang * ignored. 239406164d2bSGeorge Zhang */ 239506164d2bSGeorge Zhang void vmci_qp_guest_endpoints_exit(void) 239606164d2bSGeorge Zhang { 239706164d2bSGeorge Zhang struct qp_entry *entry; 239806164d2bSGeorge Zhang struct qp_guest_endpoint *ep; 239906164d2bSGeorge Zhang 240006164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 240106164d2bSGeorge Zhang 240206164d2bSGeorge Zhang while ((entry = qp_list_get_head(&qp_guest_endpoints))) { 240306164d2bSGeorge Zhang ep = (struct qp_guest_endpoint *)entry; 240406164d2bSGeorge Zhang 240506164d2bSGeorge Zhang /* Don't make a hypercall for local queue_pairs. */ 240606164d2bSGeorge Zhang if (!(entry->flags & VMCI_QPFLAG_LOCAL)) 240706164d2bSGeorge Zhang qp_detatch_hypercall(entry->handle); 240806164d2bSGeorge Zhang 240906164d2bSGeorge Zhang /* We cannot fail the exit, so let's reset ref_count. */ 241006164d2bSGeorge Zhang entry->ref_count = 0; 241106164d2bSGeorge Zhang qp_list_remove_entry(&qp_guest_endpoints, entry); 241206164d2bSGeorge Zhang 241306164d2bSGeorge Zhang qp_guest_endpoint_destroy(ep); 241406164d2bSGeorge Zhang } 241506164d2bSGeorge Zhang 241606164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 241706164d2bSGeorge Zhang } 241806164d2bSGeorge Zhang 241906164d2bSGeorge Zhang /* 242006164d2bSGeorge Zhang * Helper routine that will lock the queue pair before subsequent 242106164d2bSGeorge Zhang * operations. 242206164d2bSGeorge Zhang * Note: Non-blocking on the host side is currently only implemented in ESX. 242306164d2bSGeorge Zhang * Since non-blocking isn't yet implemented on the host personality we 242406164d2bSGeorge Zhang * have no reason to acquire a spin lock. So to avoid the use of an 242506164d2bSGeorge Zhang * unnecessary lock only acquire the mutex if we can block. 242606164d2bSGeorge Zhang */ 242706164d2bSGeorge Zhang static void qp_lock(const struct vmci_qp *qpair) 242806164d2bSGeorge Zhang { 242906164d2bSGeorge Zhang qp_acquire_queue_mutex(qpair->produce_q); 243006164d2bSGeorge Zhang } 243106164d2bSGeorge Zhang 243206164d2bSGeorge Zhang /* 243306164d2bSGeorge Zhang * Helper routine that unlocks the queue pair after calling 243445412befSAndy King * qp_lock. 243506164d2bSGeorge Zhang */ 243606164d2bSGeorge Zhang static void qp_unlock(const struct vmci_qp *qpair) 243706164d2bSGeorge Zhang { 243806164d2bSGeorge Zhang qp_release_queue_mutex(qpair->produce_q); 243906164d2bSGeorge Zhang } 244006164d2bSGeorge Zhang 244106164d2bSGeorge Zhang /* 244206164d2bSGeorge Zhang * The queue headers may not be mapped at all times. If a queue is 244306164d2bSGeorge Zhang * currently not mapped, it will be attempted to do so. 244406164d2bSGeorge Zhang */ 244506164d2bSGeorge Zhang static int qp_map_queue_headers(struct vmci_queue *produce_q, 244645412befSAndy King struct vmci_queue *consume_q) 244706164d2bSGeorge Zhang { 244806164d2bSGeorge Zhang int result; 244906164d2bSGeorge Zhang 245006164d2bSGeorge Zhang if (NULL == produce_q->q_header || NULL == consume_q->q_header) { 245106164d2bSGeorge Zhang result = qp_host_map_queues(produce_q, consume_q); 245206164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 245306164d2bSGeorge Zhang return (produce_q->saved_header && 245406164d2bSGeorge Zhang consume_q->saved_header) ? 245506164d2bSGeorge Zhang VMCI_ERROR_QUEUEPAIR_NOT_READY : 245606164d2bSGeorge Zhang VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 245706164d2bSGeorge Zhang } 245806164d2bSGeorge Zhang 245906164d2bSGeorge Zhang return VMCI_SUCCESS; 246006164d2bSGeorge Zhang } 246106164d2bSGeorge Zhang 246206164d2bSGeorge Zhang /* 246306164d2bSGeorge Zhang * Helper routine that will retrieve the produce and consume 246406164d2bSGeorge Zhang * headers of a given queue pair. If the guest memory of the 246506164d2bSGeorge Zhang * queue pair is currently not available, the saved queue headers 246606164d2bSGeorge Zhang * will be returned, if these are available. 246706164d2bSGeorge Zhang */ 246806164d2bSGeorge Zhang static int qp_get_queue_headers(const struct vmci_qp *qpair, 246906164d2bSGeorge Zhang struct vmci_queue_header **produce_q_header, 247006164d2bSGeorge Zhang struct vmci_queue_header **consume_q_header) 247106164d2bSGeorge Zhang { 247206164d2bSGeorge Zhang int result; 247306164d2bSGeorge Zhang 247445412befSAndy King result = qp_map_queue_headers(qpair->produce_q, qpair->consume_q); 247506164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 247606164d2bSGeorge Zhang *produce_q_header = qpair->produce_q->q_header; 247706164d2bSGeorge Zhang *consume_q_header = qpair->consume_q->q_header; 247806164d2bSGeorge Zhang } else if (qpair->produce_q->saved_header && 247906164d2bSGeorge Zhang qpair->consume_q->saved_header) { 248006164d2bSGeorge Zhang *produce_q_header = qpair->produce_q->saved_header; 248106164d2bSGeorge Zhang *consume_q_header = qpair->consume_q->saved_header; 248206164d2bSGeorge Zhang result = VMCI_SUCCESS; 248306164d2bSGeorge Zhang } 248406164d2bSGeorge Zhang 248506164d2bSGeorge Zhang return result; 248606164d2bSGeorge Zhang } 248706164d2bSGeorge Zhang 248806164d2bSGeorge Zhang /* 248906164d2bSGeorge Zhang * Callback from VMCI queue pair broker indicating that a queue 249006164d2bSGeorge Zhang * pair that was previously not ready, now either is ready or 249106164d2bSGeorge Zhang * gone forever. 249206164d2bSGeorge Zhang */ 249306164d2bSGeorge Zhang static int qp_wakeup_cb(void *client_data) 249406164d2bSGeorge Zhang { 249506164d2bSGeorge Zhang struct vmci_qp *qpair = (struct vmci_qp *)client_data; 249606164d2bSGeorge Zhang 249706164d2bSGeorge Zhang qp_lock(qpair); 249806164d2bSGeorge Zhang while (qpair->blocked > 0) { 249906164d2bSGeorge Zhang qpair->blocked--; 250006164d2bSGeorge Zhang qpair->generation++; 250106164d2bSGeorge Zhang wake_up(&qpair->event); 250206164d2bSGeorge Zhang } 250306164d2bSGeorge Zhang qp_unlock(qpair); 250406164d2bSGeorge Zhang 250506164d2bSGeorge Zhang return VMCI_SUCCESS; 250606164d2bSGeorge Zhang } 250706164d2bSGeorge Zhang 250806164d2bSGeorge Zhang /* 250906164d2bSGeorge Zhang * Makes the calling thread wait for the queue pair to become 251006164d2bSGeorge Zhang * ready for host side access. Returns true when thread is 251106164d2bSGeorge Zhang * woken up after queue pair state change, false otherwise. 251206164d2bSGeorge Zhang */ 251306164d2bSGeorge Zhang static bool qp_wait_for_ready_queue(struct vmci_qp *qpair) 251406164d2bSGeorge Zhang { 251506164d2bSGeorge Zhang unsigned int generation; 251606164d2bSGeorge Zhang 251706164d2bSGeorge Zhang qpair->blocked++; 251806164d2bSGeorge Zhang generation = qpair->generation; 251906164d2bSGeorge Zhang qp_unlock(qpair); 252006164d2bSGeorge Zhang wait_event(qpair->event, generation != qpair->generation); 252106164d2bSGeorge Zhang qp_lock(qpair); 252206164d2bSGeorge Zhang 252306164d2bSGeorge Zhang return true; 252406164d2bSGeorge Zhang } 252506164d2bSGeorge Zhang 252606164d2bSGeorge Zhang /* 252706164d2bSGeorge Zhang * Enqueues a given buffer to the produce queue using the provided 252806164d2bSGeorge Zhang * function. As many bytes as possible (space available in the queue) 252906164d2bSGeorge Zhang * are enqueued. Assumes the queue->mutex has been acquired. Returns 253006164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NOSPACE if no space was available to enqueue 253106164d2bSGeorge Zhang * data, VMCI_ERROR_INVALID_SIZE, if any queue pointer is outside the 253206164d2bSGeorge Zhang * queue (as defined by the queue size), VMCI_ERROR_INVALID_ARGS, if 253306164d2bSGeorge Zhang * an error occured when accessing the buffer, 253406164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NOTATTACHED, if the queue pair pages aren't 253506164d2bSGeorge Zhang * available. Otherwise, the number of bytes written to the queue is 253606164d2bSGeorge Zhang * returned. Updates the tail pointer of the produce queue. 253706164d2bSGeorge Zhang */ 253806164d2bSGeorge Zhang static ssize_t qp_enqueue_locked(struct vmci_queue *produce_q, 253906164d2bSGeorge Zhang struct vmci_queue *consume_q, 254006164d2bSGeorge Zhang const u64 produce_q_size, 2541d1038084SAl Viro struct iov_iter *from) 254206164d2bSGeorge Zhang { 254306164d2bSGeorge Zhang s64 free_space; 254406164d2bSGeorge Zhang u64 tail; 2545d1038084SAl Viro size_t buf_size = iov_iter_count(from); 254606164d2bSGeorge Zhang size_t written; 254706164d2bSGeorge Zhang ssize_t result; 254806164d2bSGeorge Zhang 254945412befSAndy King result = qp_map_queue_headers(produce_q, consume_q); 255006164d2bSGeorge Zhang if (unlikely(result != VMCI_SUCCESS)) 255106164d2bSGeorge Zhang return result; 255206164d2bSGeorge Zhang 255306164d2bSGeorge Zhang free_space = vmci_q_header_free_space(produce_q->q_header, 255406164d2bSGeorge Zhang consume_q->q_header, 255506164d2bSGeorge Zhang produce_q_size); 255606164d2bSGeorge Zhang if (free_space == 0) 255706164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_NOSPACE; 255806164d2bSGeorge Zhang 255906164d2bSGeorge Zhang if (free_space < VMCI_SUCCESS) 256006164d2bSGeorge Zhang return (ssize_t) free_space; 256106164d2bSGeorge Zhang 256206164d2bSGeorge Zhang written = (size_t) (free_space > buf_size ? buf_size : free_space); 256306164d2bSGeorge Zhang tail = vmci_q_header_producer_tail(produce_q->q_header); 256406164d2bSGeorge Zhang if (likely(tail + written < produce_q_size)) { 2565d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, tail, from, written); 256606164d2bSGeorge Zhang } else { 256706164d2bSGeorge Zhang /* Tail pointer wraps around. */ 256806164d2bSGeorge Zhang 256906164d2bSGeorge Zhang const size_t tmp = (size_t) (produce_q_size - tail); 257006164d2bSGeorge Zhang 2571d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, tail, from, tmp); 257206164d2bSGeorge Zhang if (result >= VMCI_SUCCESS) 2573d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, 0, from, 257406164d2bSGeorge Zhang written - tmp); 257506164d2bSGeorge Zhang } 257606164d2bSGeorge Zhang 257706164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 257806164d2bSGeorge Zhang return result; 257906164d2bSGeorge Zhang 2580*1f714291SVishnu Dasa /* 2581*1f714291SVishnu Dasa * This virt_wmb() ensures that data written to the queue 2582*1f714291SVishnu Dasa * is observable before the new producer_tail is. 2583*1f714291SVishnu Dasa */ 2584*1f714291SVishnu Dasa virt_wmb(); 2585*1f714291SVishnu Dasa 258606164d2bSGeorge Zhang vmci_q_header_add_producer_tail(produce_q->q_header, written, 258706164d2bSGeorge Zhang produce_q_size); 258806164d2bSGeorge Zhang return written; 258906164d2bSGeorge Zhang } 259006164d2bSGeorge Zhang 259106164d2bSGeorge Zhang /* 259206164d2bSGeorge Zhang * Dequeues data (if available) from the given consume queue. Writes data 259306164d2bSGeorge Zhang * to the user provided buffer using the provided function. 259406164d2bSGeorge Zhang * Assumes the queue->mutex has been acquired. 259506164d2bSGeorge Zhang * Results: 259606164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NODATA if no data was available to dequeue. 259706164d2bSGeorge Zhang * VMCI_ERROR_INVALID_SIZE, if any queue pointer is outside the queue 259806164d2bSGeorge Zhang * (as defined by the queue size). 259906164d2bSGeorge Zhang * VMCI_ERROR_INVALID_ARGS, if an error occured when accessing the buffer. 260006164d2bSGeorge Zhang * Otherwise the number of bytes dequeued is returned. 260106164d2bSGeorge Zhang * Side effects: 260206164d2bSGeorge Zhang * Updates the head pointer of the consume queue. 260306164d2bSGeorge Zhang */ 260406164d2bSGeorge Zhang static ssize_t qp_dequeue_locked(struct vmci_queue *produce_q, 260506164d2bSGeorge Zhang struct vmci_queue *consume_q, 260606164d2bSGeorge Zhang const u64 consume_q_size, 260753f58d8eSAl Viro struct iov_iter *to, 260845412befSAndy King bool update_consumer) 260906164d2bSGeorge Zhang { 261053f58d8eSAl Viro size_t buf_size = iov_iter_count(to); 261106164d2bSGeorge Zhang s64 buf_ready; 261206164d2bSGeorge Zhang u64 head; 261306164d2bSGeorge Zhang size_t read; 261406164d2bSGeorge Zhang ssize_t result; 261506164d2bSGeorge Zhang 261645412befSAndy King result = qp_map_queue_headers(produce_q, consume_q); 261706164d2bSGeorge Zhang if (unlikely(result != VMCI_SUCCESS)) 261806164d2bSGeorge Zhang return result; 261906164d2bSGeorge Zhang 262006164d2bSGeorge Zhang buf_ready = vmci_q_header_buf_ready(consume_q->q_header, 262106164d2bSGeorge Zhang produce_q->q_header, 262206164d2bSGeorge Zhang consume_q_size); 262306164d2bSGeorge Zhang if (buf_ready == 0) 262406164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_NODATA; 262506164d2bSGeorge Zhang 262606164d2bSGeorge Zhang if (buf_ready < VMCI_SUCCESS) 262706164d2bSGeorge Zhang return (ssize_t) buf_ready; 262806164d2bSGeorge Zhang 2629*1f714291SVishnu Dasa /* 2630*1f714291SVishnu Dasa * This virt_rmb() ensures that data from the queue will be read 2631*1f714291SVishnu Dasa * after we have determined how much is ready to be consumed. 2632*1f714291SVishnu Dasa */ 2633*1f714291SVishnu Dasa virt_rmb(); 2634*1f714291SVishnu Dasa 263506164d2bSGeorge Zhang read = (size_t) (buf_ready > buf_size ? buf_size : buf_ready); 263606164d2bSGeorge Zhang head = vmci_q_header_consumer_head(produce_q->q_header); 263706164d2bSGeorge Zhang if (likely(head + read < consume_q_size)) { 263853f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, head, read); 263906164d2bSGeorge Zhang } else { 264006164d2bSGeorge Zhang /* Head pointer wraps around. */ 264106164d2bSGeorge Zhang 264206164d2bSGeorge Zhang const size_t tmp = (size_t) (consume_q_size - head); 264306164d2bSGeorge Zhang 264453f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, head, tmp); 264506164d2bSGeorge Zhang if (result >= VMCI_SUCCESS) 264653f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, 0, 264706164d2bSGeorge Zhang read - tmp); 264806164d2bSGeorge Zhang 264906164d2bSGeorge Zhang } 265006164d2bSGeorge Zhang 265106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 265206164d2bSGeorge Zhang return result; 265306164d2bSGeorge Zhang 265406164d2bSGeorge Zhang if (update_consumer) 265506164d2bSGeorge Zhang vmci_q_header_add_consumer_head(produce_q->q_header, 265606164d2bSGeorge Zhang read, consume_q_size); 265706164d2bSGeorge Zhang 265806164d2bSGeorge Zhang return read; 265906164d2bSGeorge Zhang } 266006164d2bSGeorge Zhang 266106164d2bSGeorge Zhang /* 266206164d2bSGeorge Zhang * vmci_qpair_alloc() - Allocates a queue pair. 266306164d2bSGeorge Zhang * @qpair: Pointer for the new vmci_qp struct. 266406164d2bSGeorge Zhang * @handle: Handle to track the resource. 266506164d2bSGeorge Zhang * @produce_qsize: Desired size of the producer queue. 266606164d2bSGeorge Zhang * @consume_qsize: Desired size of the consumer queue. 266706164d2bSGeorge Zhang * @peer: ContextID of the peer. 266806164d2bSGeorge Zhang * @flags: VMCI flags. 266906164d2bSGeorge Zhang * @priv_flags: VMCI priviledge flags. 267006164d2bSGeorge Zhang * 267106164d2bSGeorge Zhang * This is the client interface for allocating the memory for a 267206164d2bSGeorge Zhang * vmci_qp structure and then attaching to the underlying 267306164d2bSGeorge Zhang * queue. If an error occurs allocating the memory for the 267406164d2bSGeorge Zhang * vmci_qp structure no attempt is made to attach. If an 267506164d2bSGeorge Zhang * error occurs attaching, then the structure is freed. 267606164d2bSGeorge Zhang */ 267706164d2bSGeorge Zhang int vmci_qpair_alloc(struct vmci_qp **qpair, 267806164d2bSGeorge Zhang struct vmci_handle *handle, 267906164d2bSGeorge Zhang u64 produce_qsize, 268006164d2bSGeorge Zhang u64 consume_qsize, 268106164d2bSGeorge Zhang u32 peer, 268206164d2bSGeorge Zhang u32 flags, 268306164d2bSGeorge Zhang u32 priv_flags) 268406164d2bSGeorge Zhang { 268506164d2bSGeorge Zhang struct vmci_qp *my_qpair; 268606164d2bSGeorge Zhang int retval; 268706164d2bSGeorge Zhang struct vmci_handle src = VMCI_INVALID_HANDLE; 268806164d2bSGeorge Zhang struct vmci_handle dst = vmci_make_handle(peer, VMCI_INVALID_ID); 268906164d2bSGeorge Zhang enum vmci_route route; 269006164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb; 269106164d2bSGeorge Zhang void *client_data; 269206164d2bSGeorge Zhang 269306164d2bSGeorge Zhang /* 269406164d2bSGeorge Zhang * Restrict the size of a queuepair. The device already 269506164d2bSGeorge Zhang * enforces a limit on the total amount of memory that can be 269606164d2bSGeorge Zhang * allocated to queuepairs for a guest. However, we try to 269706164d2bSGeorge Zhang * allocate this memory before we make the queuepair 269806164d2bSGeorge Zhang * allocation hypercall. On Linux, we allocate each page 269906164d2bSGeorge Zhang * separately, which means rather than fail, the guest will 270006164d2bSGeorge Zhang * thrash while it tries to allocate, and will become 270106164d2bSGeorge Zhang * increasingly unresponsive to the point where it appears to 270206164d2bSGeorge Zhang * be hung. So we place a limit on the size of an individual 270306164d2bSGeorge Zhang * queuepair here, and leave the device to enforce the 270406164d2bSGeorge Zhang * restriction on total queuepair memory. (Note that this 270506164d2bSGeorge Zhang * doesn't prevent all cases; a user with only this much 270606164d2bSGeorge Zhang * physical memory could still get into trouble.) The error 270706164d2bSGeorge Zhang * used by the device is NO_RESOURCES, so use that here too. 270806164d2bSGeorge Zhang */ 270906164d2bSGeorge Zhang 27107eecea89SJorgen Hansen if (!QP_SIZES_ARE_VALID(produce_qsize, consume_qsize)) 271106164d2bSGeorge Zhang return VMCI_ERROR_NO_RESOURCES; 271206164d2bSGeorge Zhang 271306164d2bSGeorge Zhang retval = vmci_route(&src, &dst, false, &route); 271406164d2bSGeorge Zhang if (retval < VMCI_SUCCESS) 271506164d2bSGeorge Zhang route = vmci_guest_code_active() ? 271606164d2bSGeorge Zhang VMCI_ROUTE_AS_GUEST : VMCI_ROUTE_AS_HOST; 271706164d2bSGeorge Zhang 271845412befSAndy King if (flags & (VMCI_QPFLAG_NONBLOCK | VMCI_QPFLAG_PINNED)) { 271945412befSAndy King pr_devel("NONBLOCK OR PINNED set"); 272006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 272106164d2bSGeorge Zhang } 272206164d2bSGeorge Zhang 272306164d2bSGeorge Zhang my_qpair = kzalloc(sizeof(*my_qpair), GFP_KERNEL); 272406164d2bSGeorge Zhang if (!my_qpair) 272506164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 272606164d2bSGeorge Zhang 272706164d2bSGeorge Zhang my_qpair->produce_q_size = produce_qsize; 272806164d2bSGeorge Zhang my_qpair->consume_q_size = consume_qsize; 272906164d2bSGeorge Zhang my_qpair->peer = peer; 273006164d2bSGeorge Zhang my_qpair->flags = flags; 273106164d2bSGeorge Zhang my_qpair->priv_flags = priv_flags; 273206164d2bSGeorge Zhang 273306164d2bSGeorge Zhang wakeup_cb = NULL; 273406164d2bSGeorge Zhang client_data = NULL; 273506164d2bSGeorge Zhang 273606164d2bSGeorge Zhang if (VMCI_ROUTE_AS_HOST == route) { 273706164d2bSGeorge Zhang my_qpair->guest_endpoint = false; 273806164d2bSGeorge Zhang if (!(flags & VMCI_QPFLAG_LOCAL)) { 273906164d2bSGeorge Zhang my_qpair->blocked = 0; 274006164d2bSGeorge Zhang my_qpair->generation = 0; 274106164d2bSGeorge Zhang init_waitqueue_head(&my_qpair->event); 274206164d2bSGeorge Zhang wakeup_cb = qp_wakeup_cb; 274306164d2bSGeorge Zhang client_data = (void *)my_qpair; 274406164d2bSGeorge Zhang } 274506164d2bSGeorge Zhang } else { 274606164d2bSGeorge Zhang my_qpair->guest_endpoint = true; 274706164d2bSGeorge Zhang } 274806164d2bSGeorge Zhang 274906164d2bSGeorge Zhang retval = vmci_qp_alloc(handle, 275006164d2bSGeorge Zhang &my_qpair->produce_q, 275106164d2bSGeorge Zhang my_qpair->produce_q_size, 275206164d2bSGeorge Zhang &my_qpair->consume_q, 275306164d2bSGeorge Zhang my_qpair->consume_q_size, 275406164d2bSGeorge Zhang my_qpair->peer, 275506164d2bSGeorge Zhang my_qpair->flags, 275606164d2bSGeorge Zhang my_qpair->priv_flags, 275706164d2bSGeorge Zhang my_qpair->guest_endpoint, 275806164d2bSGeorge Zhang wakeup_cb, client_data); 275906164d2bSGeorge Zhang 276006164d2bSGeorge Zhang if (retval < VMCI_SUCCESS) { 276106164d2bSGeorge Zhang kfree(my_qpair); 276206164d2bSGeorge Zhang return retval; 276306164d2bSGeorge Zhang } 276406164d2bSGeorge Zhang 276506164d2bSGeorge Zhang *qpair = my_qpair; 276606164d2bSGeorge Zhang my_qpair->handle = *handle; 276706164d2bSGeorge Zhang 276806164d2bSGeorge Zhang return retval; 276906164d2bSGeorge Zhang } 277006164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_alloc); 277106164d2bSGeorge Zhang 277206164d2bSGeorge Zhang /* 277306164d2bSGeorge Zhang * vmci_qpair_detach() - Detatches the client from a queue pair. 277406164d2bSGeorge Zhang * @qpair: Reference of a pointer to the qpair struct. 277506164d2bSGeorge Zhang * 277606164d2bSGeorge Zhang * This is the client interface for detaching from a VMCIQPair. 277706164d2bSGeorge Zhang * Note that this routine will free the memory allocated for the 277806164d2bSGeorge Zhang * vmci_qp structure too. 277906164d2bSGeorge Zhang */ 278006164d2bSGeorge Zhang int vmci_qpair_detach(struct vmci_qp **qpair) 278106164d2bSGeorge Zhang { 278206164d2bSGeorge Zhang int result; 278306164d2bSGeorge Zhang struct vmci_qp *old_qpair; 278406164d2bSGeorge Zhang 278506164d2bSGeorge Zhang if (!qpair || !(*qpair)) 278606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 278706164d2bSGeorge Zhang 278806164d2bSGeorge Zhang old_qpair = *qpair; 278906164d2bSGeorge Zhang result = qp_detatch(old_qpair->handle, old_qpair->guest_endpoint); 279006164d2bSGeorge Zhang 279106164d2bSGeorge Zhang /* 279206164d2bSGeorge Zhang * The guest can fail to detach for a number of reasons, and 279306164d2bSGeorge Zhang * if it does so, it will cleanup the entry (if there is one). 279406164d2bSGeorge Zhang * The host can fail too, but it won't cleanup the entry 279506164d2bSGeorge Zhang * immediately, it will do that later when the context is 279606164d2bSGeorge Zhang * freed. Either way, we need to release the qpair struct 279706164d2bSGeorge Zhang * here; there isn't much the caller can do, and we don't want 279806164d2bSGeorge Zhang * to leak. 279906164d2bSGeorge Zhang */ 280006164d2bSGeorge Zhang 280106164d2bSGeorge Zhang memset(old_qpair, 0, sizeof(*old_qpair)); 280206164d2bSGeorge Zhang old_qpair->handle = VMCI_INVALID_HANDLE; 280306164d2bSGeorge Zhang old_qpair->peer = VMCI_INVALID_ID; 280406164d2bSGeorge Zhang kfree(old_qpair); 280506164d2bSGeorge Zhang *qpair = NULL; 280606164d2bSGeorge Zhang 280706164d2bSGeorge Zhang return result; 280806164d2bSGeorge Zhang } 280906164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_detach); 281006164d2bSGeorge Zhang 281106164d2bSGeorge Zhang /* 281206164d2bSGeorge Zhang * vmci_qpair_get_produce_indexes() - Retrieves the indexes of the producer. 281306164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 281406164d2bSGeorge Zhang * @producer_tail: Reference used for storing producer tail index. 281506164d2bSGeorge Zhang * @consumer_head: Reference used for storing the consumer head index. 281606164d2bSGeorge Zhang * 281706164d2bSGeorge Zhang * This is the client interface for getting the current indexes of the 281806164d2bSGeorge Zhang * QPair from the point of the view of the caller as the producer. 281906164d2bSGeorge Zhang */ 282006164d2bSGeorge Zhang int vmci_qpair_get_produce_indexes(const struct vmci_qp *qpair, 282106164d2bSGeorge Zhang u64 *producer_tail, 282206164d2bSGeorge Zhang u64 *consumer_head) 282306164d2bSGeorge Zhang { 282406164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 282506164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 282606164d2bSGeorge Zhang int result; 282706164d2bSGeorge Zhang 282806164d2bSGeorge Zhang if (!qpair) 282906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 283006164d2bSGeorge Zhang 283106164d2bSGeorge Zhang qp_lock(qpair); 283206164d2bSGeorge Zhang result = 283306164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 283406164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 283506164d2bSGeorge Zhang vmci_q_header_get_pointers(produce_q_header, consume_q_header, 283606164d2bSGeorge Zhang producer_tail, consumer_head); 283706164d2bSGeorge Zhang qp_unlock(qpair); 283806164d2bSGeorge Zhang 283906164d2bSGeorge Zhang if (result == VMCI_SUCCESS && 284006164d2bSGeorge Zhang ((producer_tail && *producer_tail >= qpair->produce_q_size) || 284106164d2bSGeorge Zhang (consumer_head && *consumer_head >= qpair->produce_q_size))) 284206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_SIZE; 284306164d2bSGeorge Zhang 284406164d2bSGeorge Zhang return result; 284506164d2bSGeorge Zhang } 284606164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_get_produce_indexes); 284706164d2bSGeorge Zhang 284806164d2bSGeorge Zhang /* 28493f8b6fb7SMasahiro Yamada * vmci_qpair_get_consume_indexes() - Retrieves the indexes of the consumer. 285006164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 285106164d2bSGeorge Zhang * @consumer_tail: Reference used for storing consumer tail index. 285206164d2bSGeorge Zhang * @producer_head: Reference used for storing the producer head index. 285306164d2bSGeorge Zhang * 285406164d2bSGeorge Zhang * This is the client interface for getting the current indexes of the 285506164d2bSGeorge Zhang * QPair from the point of the view of the caller as the consumer. 285606164d2bSGeorge Zhang */ 285706164d2bSGeorge Zhang int vmci_qpair_get_consume_indexes(const struct vmci_qp *qpair, 285806164d2bSGeorge Zhang u64 *consumer_tail, 285906164d2bSGeorge Zhang u64 *producer_head) 286006164d2bSGeorge Zhang { 286106164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 286206164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 286306164d2bSGeorge Zhang int result; 286406164d2bSGeorge Zhang 286506164d2bSGeorge Zhang if (!qpair) 286606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 286706164d2bSGeorge Zhang 286806164d2bSGeorge Zhang qp_lock(qpair); 286906164d2bSGeorge Zhang result = 287006164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 287106164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 287206164d2bSGeorge Zhang vmci_q_header_get_pointers(consume_q_header, produce_q_header, 287306164d2bSGeorge Zhang consumer_tail, producer_head); 287406164d2bSGeorge Zhang qp_unlock(qpair); 287506164d2bSGeorge Zhang 287606164d2bSGeorge Zhang if (result == VMCI_SUCCESS && 287706164d2bSGeorge Zhang ((consumer_tail && *consumer_tail >= qpair->consume_q_size) || 287806164d2bSGeorge Zhang (producer_head && *producer_head >= qpair->consume_q_size))) 287906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_SIZE; 288006164d2bSGeorge Zhang 288106164d2bSGeorge Zhang return result; 288206164d2bSGeorge Zhang } 288306164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_get_consume_indexes); 288406164d2bSGeorge Zhang 288506164d2bSGeorge Zhang /* 288606164d2bSGeorge Zhang * vmci_qpair_produce_free_space() - Retrieves free space in producer queue. 288706164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 288806164d2bSGeorge Zhang * 288906164d2bSGeorge Zhang * This is the client interface for getting the amount of free 289006164d2bSGeorge Zhang * space in the QPair from the point of the view of the caller as 289106164d2bSGeorge Zhang * the producer which is the common case. Returns < 0 if err, else 289206164d2bSGeorge Zhang * available bytes into which data can be enqueued if > 0. 289306164d2bSGeorge Zhang */ 289406164d2bSGeorge Zhang s64 vmci_qpair_produce_free_space(const struct vmci_qp *qpair) 289506164d2bSGeorge Zhang { 289606164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 289706164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 289806164d2bSGeorge Zhang s64 result; 289906164d2bSGeorge Zhang 290006164d2bSGeorge Zhang if (!qpair) 290106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 290206164d2bSGeorge Zhang 290306164d2bSGeorge Zhang qp_lock(qpair); 290406164d2bSGeorge Zhang result = 290506164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 290606164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 290706164d2bSGeorge Zhang result = vmci_q_header_free_space(produce_q_header, 290806164d2bSGeorge Zhang consume_q_header, 290906164d2bSGeorge Zhang qpair->produce_q_size); 291006164d2bSGeorge Zhang else 291106164d2bSGeorge Zhang result = 0; 291206164d2bSGeorge Zhang 291306164d2bSGeorge Zhang qp_unlock(qpair); 291406164d2bSGeorge Zhang 291506164d2bSGeorge Zhang return result; 291606164d2bSGeorge Zhang } 291706164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_produce_free_space); 291806164d2bSGeorge Zhang 291906164d2bSGeorge Zhang /* 292006164d2bSGeorge Zhang * vmci_qpair_consume_free_space() - Retrieves free space in consumer queue. 292106164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 292206164d2bSGeorge Zhang * 292306164d2bSGeorge Zhang * This is the client interface for getting the amount of free 292406164d2bSGeorge Zhang * space in the QPair from the point of the view of the caller as 292506164d2bSGeorge Zhang * the consumer which is not the common case. Returns < 0 if err, else 292606164d2bSGeorge Zhang * available bytes into which data can be enqueued if > 0. 292706164d2bSGeorge Zhang */ 292806164d2bSGeorge Zhang s64 vmci_qpair_consume_free_space(const struct vmci_qp *qpair) 292906164d2bSGeorge Zhang { 293006164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 293106164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 293206164d2bSGeorge Zhang s64 result; 293306164d2bSGeorge Zhang 293406164d2bSGeorge Zhang if (!qpair) 293506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 293606164d2bSGeorge Zhang 293706164d2bSGeorge Zhang qp_lock(qpair); 293806164d2bSGeorge Zhang result = 293906164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 294006164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 294106164d2bSGeorge Zhang result = vmci_q_header_free_space(consume_q_header, 294206164d2bSGeorge Zhang produce_q_header, 294306164d2bSGeorge Zhang qpair->consume_q_size); 294406164d2bSGeorge Zhang else 294506164d2bSGeorge Zhang result = 0; 294606164d2bSGeorge Zhang 294706164d2bSGeorge Zhang qp_unlock(qpair); 294806164d2bSGeorge Zhang 294906164d2bSGeorge Zhang return result; 295006164d2bSGeorge Zhang } 295106164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_consume_free_space); 295206164d2bSGeorge Zhang 295306164d2bSGeorge Zhang /* 295406164d2bSGeorge Zhang * vmci_qpair_produce_buf_ready() - Gets bytes ready to read from 295506164d2bSGeorge Zhang * producer queue. 295606164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 295706164d2bSGeorge Zhang * 295806164d2bSGeorge Zhang * This is the client interface for getting the amount of 295906164d2bSGeorge Zhang * enqueued data in the QPair from the point of the view of the 296006164d2bSGeorge Zhang * caller as the producer which is not the common case. Returns < 0 if err, 296106164d2bSGeorge Zhang * else available bytes that may be read. 296206164d2bSGeorge Zhang */ 296306164d2bSGeorge Zhang s64 vmci_qpair_produce_buf_ready(const struct vmci_qp *qpair) 296406164d2bSGeorge Zhang { 296506164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 296606164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 296706164d2bSGeorge Zhang s64 result; 296806164d2bSGeorge Zhang 296906164d2bSGeorge Zhang if (!qpair) 297006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 297106164d2bSGeorge Zhang 297206164d2bSGeorge Zhang qp_lock(qpair); 297306164d2bSGeorge Zhang result = 297406164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 297506164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 297606164d2bSGeorge Zhang result = vmci_q_header_buf_ready(produce_q_header, 297706164d2bSGeorge Zhang consume_q_header, 297806164d2bSGeorge Zhang qpair->produce_q_size); 297906164d2bSGeorge Zhang else 298006164d2bSGeorge Zhang result = 0; 298106164d2bSGeorge Zhang 298206164d2bSGeorge Zhang qp_unlock(qpair); 298306164d2bSGeorge Zhang 298406164d2bSGeorge Zhang return result; 298506164d2bSGeorge Zhang } 298606164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_produce_buf_ready); 298706164d2bSGeorge Zhang 298806164d2bSGeorge Zhang /* 298906164d2bSGeorge Zhang * vmci_qpair_consume_buf_ready() - Gets bytes ready to read from 299006164d2bSGeorge Zhang * consumer queue. 299106164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 299206164d2bSGeorge Zhang * 299306164d2bSGeorge Zhang * This is the client interface for getting the amount of 299406164d2bSGeorge Zhang * enqueued data in the QPair from the point of the view of the 299506164d2bSGeorge Zhang * caller as the consumer which is the normal case. Returns < 0 if err, 299606164d2bSGeorge Zhang * else available bytes that may be read. 299706164d2bSGeorge Zhang */ 299806164d2bSGeorge Zhang s64 vmci_qpair_consume_buf_ready(const struct vmci_qp *qpair) 299906164d2bSGeorge Zhang { 300006164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 300106164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 300206164d2bSGeorge Zhang s64 result; 300306164d2bSGeorge Zhang 300406164d2bSGeorge Zhang if (!qpair) 300506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 300606164d2bSGeorge Zhang 300706164d2bSGeorge Zhang qp_lock(qpair); 300806164d2bSGeorge Zhang result = 300906164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 301006164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 301106164d2bSGeorge Zhang result = vmci_q_header_buf_ready(consume_q_header, 301206164d2bSGeorge Zhang produce_q_header, 301306164d2bSGeorge Zhang qpair->consume_q_size); 301406164d2bSGeorge Zhang else 301506164d2bSGeorge Zhang result = 0; 301606164d2bSGeorge Zhang 301706164d2bSGeorge Zhang qp_unlock(qpair); 301806164d2bSGeorge Zhang 301906164d2bSGeorge Zhang return result; 302006164d2bSGeorge Zhang } 302106164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_consume_buf_ready); 302206164d2bSGeorge Zhang 302306164d2bSGeorge Zhang /* 302406164d2bSGeorge Zhang * vmci_qpair_enqueue() - Throw data on the queue. 302506164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 302606164d2bSGeorge Zhang * @buf: Pointer to buffer containing data 302706164d2bSGeorge Zhang * @buf_size: Length of buffer. 302806164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 302906164d2bSGeorge Zhang * 303006164d2bSGeorge Zhang * This is the client interface for enqueueing data into the queue. 303106164d2bSGeorge Zhang * Returns number of bytes enqueued or < 0 on error. 303206164d2bSGeorge Zhang */ 303306164d2bSGeorge Zhang ssize_t vmci_qpair_enqueue(struct vmci_qp *qpair, 303406164d2bSGeorge Zhang const void *buf, 303506164d2bSGeorge Zhang size_t buf_size, 303606164d2bSGeorge Zhang int buf_type) 303706164d2bSGeorge Zhang { 303806164d2bSGeorge Zhang ssize_t result; 3039d1038084SAl Viro struct iov_iter from; 3040d1038084SAl Viro struct kvec v = {.iov_base = (void *)buf, .iov_len = buf_size}; 304106164d2bSGeorge Zhang 304206164d2bSGeorge Zhang if (!qpair || !buf) 304306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 304406164d2bSGeorge Zhang 3045aa563d7bSDavid Howells iov_iter_kvec(&from, WRITE, &v, 1, buf_size); 3046d1038084SAl Viro 304706164d2bSGeorge Zhang qp_lock(qpair); 304806164d2bSGeorge Zhang 304906164d2bSGeorge Zhang do { 305006164d2bSGeorge Zhang result = qp_enqueue_locked(qpair->produce_q, 305106164d2bSGeorge Zhang qpair->consume_q, 305206164d2bSGeorge Zhang qpair->produce_q_size, 3053d1038084SAl Viro &from); 305406164d2bSGeorge Zhang 305506164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 305606164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 305706164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 305806164d2bSGeorge Zhang 305906164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 306006164d2bSGeorge Zhang 306106164d2bSGeorge Zhang qp_unlock(qpair); 306206164d2bSGeorge Zhang 306306164d2bSGeorge Zhang return result; 306406164d2bSGeorge Zhang } 306506164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_enqueue); 306606164d2bSGeorge Zhang 306706164d2bSGeorge Zhang /* 306806164d2bSGeorge Zhang * vmci_qpair_dequeue() - Get data from the queue. 306906164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 307006164d2bSGeorge Zhang * @buf: Pointer to buffer for the data 307106164d2bSGeorge Zhang * @buf_size: Length of buffer. 307206164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 307306164d2bSGeorge Zhang * 307406164d2bSGeorge Zhang * This is the client interface for dequeueing data from the queue. 307506164d2bSGeorge Zhang * Returns number of bytes dequeued or < 0 on error. 307606164d2bSGeorge Zhang */ 307706164d2bSGeorge Zhang ssize_t vmci_qpair_dequeue(struct vmci_qp *qpair, 307806164d2bSGeorge Zhang void *buf, 307906164d2bSGeorge Zhang size_t buf_size, 308006164d2bSGeorge Zhang int buf_type) 308106164d2bSGeorge Zhang { 308206164d2bSGeorge Zhang ssize_t result; 3083ce3d6e7dSAl Viro struct iov_iter to; 3084ce3d6e7dSAl Viro struct kvec v = {.iov_base = buf, .iov_len = buf_size}; 308506164d2bSGeorge Zhang 308606164d2bSGeorge Zhang if (!qpair || !buf) 308706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 308806164d2bSGeorge Zhang 3089aa563d7bSDavid Howells iov_iter_kvec(&to, READ, &v, 1, buf_size); 3090ce3d6e7dSAl Viro 309106164d2bSGeorge Zhang qp_lock(qpair); 309206164d2bSGeorge Zhang 309306164d2bSGeorge Zhang do { 309406164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 309506164d2bSGeorge Zhang qpair->consume_q, 309606164d2bSGeorge Zhang qpair->consume_q_size, 309753f58d8eSAl Viro &to, true); 309806164d2bSGeorge Zhang 309906164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 310006164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 310106164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 310206164d2bSGeorge Zhang 310306164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 310406164d2bSGeorge Zhang 310506164d2bSGeorge Zhang qp_unlock(qpair); 310606164d2bSGeorge Zhang 310706164d2bSGeorge Zhang return result; 310806164d2bSGeorge Zhang } 310906164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_dequeue); 311006164d2bSGeorge Zhang 311106164d2bSGeorge Zhang /* 311206164d2bSGeorge Zhang * vmci_qpair_peek() - Peek at the data in the queue. 311306164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 311406164d2bSGeorge Zhang * @buf: Pointer to buffer for the data 311506164d2bSGeorge Zhang * @buf_size: Length of buffer. 311606164d2bSGeorge Zhang * @buf_type: Buffer type (Unused on Linux). 311706164d2bSGeorge Zhang * 311806164d2bSGeorge Zhang * This is the client interface for peeking into a queue. (I.e., 311906164d2bSGeorge Zhang * copy data from the queue without updating the head pointer.) 312006164d2bSGeorge Zhang * Returns number of bytes dequeued or < 0 on error. 312106164d2bSGeorge Zhang */ 312206164d2bSGeorge Zhang ssize_t vmci_qpair_peek(struct vmci_qp *qpair, 312306164d2bSGeorge Zhang void *buf, 312406164d2bSGeorge Zhang size_t buf_size, 312506164d2bSGeorge Zhang int buf_type) 312606164d2bSGeorge Zhang { 3127ce3d6e7dSAl Viro struct iov_iter to; 3128ce3d6e7dSAl Viro struct kvec v = {.iov_base = buf, .iov_len = buf_size}; 312906164d2bSGeorge Zhang ssize_t result; 313006164d2bSGeorge Zhang 313106164d2bSGeorge Zhang if (!qpair || !buf) 313206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 313306164d2bSGeorge Zhang 3134aa563d7bSDavid Howells iov_iter_kvec(&to, READ, &v, 1, buf_size); 3135ce3d6e7dSAl Viro 313606164d2bSGeorge Zhang qp_lock(qpair); 313706164d2bSGeorge Zhang 313806164d2bSGeorge Zhang do { 313906164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 314006164d2bSGeorge Zhang qpair->consume_q, 314106164d2bSGeorge Zhang qpair->consume_q_size, 314253f58d8eSAl Viro &to, false); 314306164d2bSGeorge Zhang 314406164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 314506164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 314606164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 314706164d2bSGeorge Zhang 314806164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 314906164d2bSGeorge Zhang 315006164d2bSGeorge Zhang qp_unlock(qpair); 315106164d2bSGeorge Zhang 315206164d2bSGeorge Zhang return result; 315306164d2bSGeorge Zhang } 315406164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_peek); 315506164d2bSGeorge Zhang 315606164d2bSGeorge Zhang /* 315706164d2bSGeorge Zhang * vmci_qpair_enquev() - Throw data on the queue using iov. 315806164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 315906164d2bSGeorge Zhang * @iov: Pointer to buffer containing data 316006164d2bSGeorge Zhang * @iov_size: Length of buffer. 316106164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 316206164d2bSGeorge Zhang * 316306164d2bSGeorge Zhang * This is the client interface for enqueueing data into the queue. 316406164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 316506164d2bSGeorge Zhang * of bytes enqueued or < 0 on error. 316606164d2bSGeorge Zhang */ 316706164d2bSGeorge Zhang ssize_t vmci_qpair_enquev(struct vmci_qp *qpair, 31684c946d9cSAl Viro struct msghdr *msg, 316906164d2bSGeorge Zhang size_t iov_size, 317006164d2bSGeorge Zhang int buf_type) 317106164d2bSGeorge Zhang { 317206164d2bSGeorge Zhang ssize_t result; 317306164d2bSGeorge Zhang 31744c946d9cSAl Viro if (!qpair) 317506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 317606164d2bSGeorge Zhang 317706164d2bSGeorge Zhang qp_lock(qpair); 317806164d2bSGeorge Zhang 317906164d2bSGeorge Zhang do { 318006164d2bSGeorge Zhang result = qp_enqueue_locked(qpair->produce_q, 318106164d2bSGeorge Zhang qpair->consume_q, 318206164d2bSGeorge Zhang qpair->produce_q_size, 3183d1038084SAl Viro &msg->msg_iter); 318406164d2bSGeorge Zhang 318506164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 318606164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 318706164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 318806164d2bSGeorge Zhang 318906164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 319006164d2bSGeorge Zhang 319106164d2bSGeorge Zhang qp_unlock(qpair); 319206164d2bSGeorge Zhang 319306164d2bSGeorge Zhang return result; 319406164d2bSGeorge Zhang } 319506164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_enquev); 319606164d2bSGeorge Zhang 319706164d2bSGeorge Zhang /* 319806164d2bSGeorge Zhang * vmci_qpair_dequev() - Get data from the queue using iov. 319906164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 320006164d2bSGeorge Zhang * @iov: Pointer to buffer for the data 320106164d2bSGeorge Zhang * @iov_size: Length of buffer. 320206164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 320306164d2bSGeorge Zhang * 320406164d2bSGeorge Zhang * This is the client interface for dequeueing data from the queue. 320506164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 320606164d2bSGeorge Zhang * of bytes dequeued or < 0 on error. 320706164d2bSGeorge Zhang */ 320806164d2bSGeorge Zhang ssize_t vmci_qpair_dequev(struct vmci_qp *qpair, 3209d838df2eSAl Viro struct msghdr *msg, 321006164d2bSGeorge Zhang size_t iov_size, 321106164d2bSGeorge Zhang int buf_type) 321206164d2bSGeorge Zhang { 321306164d2bSGeorge Zhang ssize_t result; 321406164d2bSGeorge Zhang 3215d838df2eSAl Viro if (!qpair) 321606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 321706164d2bSGeorge Zhang 321832b083a3SAndy King qp_lock(qpair); 321932b083a3SAndy King 322006164d2bSGeorge Zhang do { 322106164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 322206164d2bSGeorge Zhang qpair->consume_q, 322306164d2bSGeorge Zhang qpair->consume_q_size, 322453f58d8eSAl Viro &msg->msg_iter, true); 322506164d2bSGeorge Zhang 322606164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 322706164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 322806164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 322906164d2bSGeorge Zhang 323006164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 323106164d2bSGeorge Zhang 323206164d2bSGeorge Zhang qp_unlock(qpair); 323306164d2bSGeorge Zhang 323406164d2bSGeorge Zhang return result; 323506164d2bSGeorge Zhang } 323606164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_dequev); 323706164d2bSGeorge Zhang 323806164d2bSGeorge Zhang /* 323906164d2bSGeorge Zhang * vmci_qpair_peekv() - Peek at the data in the queue using iov. 324006164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 324106164d2bSGeorge Zhang * @iov: Pointer to buffer for the data 324206164d2bSGeorge Zhang * @iov_size: Length of buffer. 324306164d2bSGeorge Zhang * @buf_type: Buffer type (Unused on Linux). 324406164d2bSGeorge Zhang * 324506164d2bSGeorge Zhang * This is the client interface for peeking into a queue. (I.e., 324606164d2bSGeorge Zhang * copy data from the queue without updating the head pointer.) 324706164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 324806164d2bSGeorge Zhang * of bytes peeked or < 0 on error. 324906164d2bSGeorge Zhang */ 325006164d2bSGeorge Zhang ssize_t vmci_qpair_peekv(struct vmci_qp *qpair, 3251d838df2eSAl Viro struct msghdr *msg, 325206164d2bSGeorge Zhang size_t iov_size, 325306164d2bSGeorge Zhang int buf_type) 325406164d2bSGeorge Zhang { 325506164d2bSGeorge Zhang ssize_t result; 325606164d2bSGeorge Zhang 3257d838df2eSAl Viro if (!qpair) 325806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 325906164d2bSGeorge Zhang 326006164d2bSGeorge Zhang qp_lock(qpair); 326106164d2bSGeorge Zhang 326206164d2bSGeorge Zhang do { 326306164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 326406164d2bSGeorge Zhang qpair->consume_q, 326506164d2bSGeorge Zhang qpair->consume_q_size, 326653f58d8eSAl Viro &msg->msg_iter, false); 326706164d2bSGeorge Zhang 326806164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 326906164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 327006164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 327106164d2bSGeorge Zhang 327206164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 327306164d2bSGeorge Zhang 327406164d2bSGeorge Zhang qp_unlock(qpair); 327506164d2bSGeorge Zhang return result; 327606164d2bSGeorge Zhang } 327706164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_peekv); 3278