106164d2bSGeorge Zhang /* 206164d2bSGeorge Zhang * VMware VMCI Driver 306164d2bSGeorge Zhang * 406164d2bSGeorge Zhang * Copyright (C) 2012 VMware, Inc. All rights reserved. 506164d2bSGeorge Zhang * 606164d2bSGeorge Zhang * This program is free software; you can redistribute it and/or modify it 706164d2bSGeorge Zhang * under the terms of the GNU General Public License as published by the 806164d2bSGeorge Zhang * Free Software Foundation version 2 and no later version. 906164d2bSGeorge Zhang * 1006164d2bSGeorge Zhang * This program is distributed in the hope that it will be useful, but 1106164d2bSGeorge Zhang * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY 1206164d2bSGeorge Zhang * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 1306164d2bSGeorge Zhang * for more details. 1406164d2bSGeorge Zhang */ 1506164d2bSGeorge Zhang 1606164d2bSGeorge Zhang #include <linux/vmw_vmci_defs.h> 1706164d2bSGeorge Zhang #include <linux/vmw_vmci_api.h> 1842281d20SAndy King #include <linux/highmem.h> 1906164d2bSGeorge Zhang #include <linux/kernel.h> 2042281d20SAndy King #include <linux/mm.h> 2106164d2bSGeorge Zhang #include <linux/module.h> 2206164d2bSGeorge Zhang #include <linux/mutex.h> 2342281d20SAndy King #include <linux/pagemap.h> 246d6dfb4fSAndy King #include <linux/pci.h> 2542281d20SAndy King #include <linux/sched.h> 2642281d20SAndy King #include <linux/slab.h> 27d2f83e90SRusty Russell #include <linux/uio.h> 2806164d2bSGeorge Zhang #include <linux/wait.h> 29f6dcf8e7SDavid Rientjes #include <linux/vmalloc.h> 30d838df2eSAl Viro #include <linux/skbuff.h> 3106164d2bSGeorge Zhang 3206164d2bSGeorge Zhang #include "vmci_handle_array.h" 3306164d2bSGeorge Zhang #include "vmci_queue_pair.h" 3406164d2bSGeorge Zhang #include "vmci_datagram.h" 3506164d2bSGeorge Zhang #include "vmci_resource.h" 3606164d2bSGeorge Zhang #include "vmci_context.h" 3706164d2bSGeorge Zhang #include "vmci_driver.h" 3806164d2bSGeorge Zhang #include "vmci_event.h" 3906164d2bSGeorge Zhang #include "vmci_route.h" 4006164d2bSGeorge Zhang 4106164d2bSGeorge Zhang /* 4206164d2bSGeorge Zhang * In the following, we will distinguish between two kinds of VMX processes - 4306164d2bSGeorge Zhang * the ones with versions lower than VMCI_VERSION_NOVMVM that use specialized 4406164d2bSGeorge Zhang * VMCI page files in the VMX and supporting VM to VM communication and the 4506164d2bSGeorge Zhang * newer ones that use the guest memory directly. We will in the following 4606164d2bSGeorge Zhang * refer to the older VMX versions as old-style VMX'en, and the newer ones as 4706164d2bSGeorge Zhang * new-style VMX'en. 4806164d2bSGeorge Zhang * 4906164d2bSGeorge Zhang * The state transition datagram is as follows (the VMCIQPB_ prefix has been 5006164d2bSGeorge Zhang * removed for readability) - see below for more details on the transtions: 5106164d2bSGeorge Zhang * 5206164d2bSGeorge Zhang * -------------- NEW ------------- 5306164d2bSGeorge Zhang * | | 5406164d2bSGeorge Zhang * \_/ \_/ 5506164d2bSGeorge Zhang * CREATED_NO_MEM <-----------------> CREATED_MEM 5606164d2bSGeorge Zhang * | | | 5706164d2bSGeorge Zhang * | o-----------------------o | 5806164d2bSGeorge Zhang * | | | 5906164d2bSGeorge Zhang * \_/ \_/ \_/ 6006164d2bSGeorge Zhang * ATTACHED_NO_MEM <----------------> ATTACHED_MEM 6106164d2bSGeorge Zhang * | | | 6206164d2bSGeorge Zhang * | o----------------------o | 6306164d2bSGeorge Zhang * | | | 6406164d2bSGeorge Zhang * \_/ \_/ \_/ 6506164d2bSGeorge Zhang * SHUTDOWN_NO_MEM <----------------> SHUTDOWN_MEM 6606164d2bSGeorge Zhang * | | 6706164d2bSGeorge Zhang * | | 6806164d2bSGeorge Zhang * -------------> gone <------------- 6906164d2bSGeorge Zhang * 7006164d2bSGeorge Zhang * In more detail. When a VMCI queue pair is first created, it will be in the 7106164d2bSGeorge Zhang * VMCIQPB_NEW state. It will then move into one of the following states: 7206164d2bSGeorge Zhang * 7306164d2bSGeorge Zhang * - VMCIQPB_CREATED_NO_MEM: this state indicates that either: 7406164d2bSGeorge Zhang * 7506164d2bSGeorge Zhang * - the created was performed by a host endpoint, in which case there is 7606164d2bSGeorge Zhang * no backing memory yet. 7706164d2bSGeorge Zhang * 7806164d2bSGeorge Zhang * - the create was initiated by an old-style VMX, that uses 7906164d2bSGeorge Zhang * vmci_qp_broker_set_page_store to specify the UVAs of the queue pair at 8006164d2bSGeorge Zhang * a later point in time. This state can be distinguished from the one 8106164d2bSGeorge Zhang * above by the context ID of the creator. A host side is not allowed to 8206164d2bSGeorge Zhang * attach until the page store has been set. 8306164d2bSGeorge Zhang * 8406164d2bSGeorge Zhang * - VMCIQPB_CREATED_MEM: this state is the result when the queue pair 8506164d2bSGeorge Zhang * is created by a VMX using the queue pair device backend that 8606164d2bSGeorge Zhang * sets the UVAs of the queue pair immediately and stores the 8706164d2bSGeorge Zhang * information for later attachers. At this point, it is ready for 8806164d2bSGeorge Zhang * the host side to attach to it. 8906164d2bSGeorge Zhang * 9006164d2bSGeorge Zhang * Once the queue pair is in one of the created states (with the exception of 9106164d2bSGeorge Zhang * the case mentioned for older VMX'en above), it is possible to attach to the 9206164d2bSGeorge Zhang * queue pair. Again we have two new states possible: 9306164d2bSGeorge Zhang * 9406164d2bSGeorge Zhang * - VMCIQPB_ATTACHED_MEM: this state can be reached through the following 9506164d2bSGeorge Zhang * paths: 9606164d2bSGeorge Zhang * 9706164d2bSGeorge Zhang * - from VMCIQPB_CREATED_NO_MEM when a new-style VMX allocates a queue 9806164d2bSGeorge Zhang * pair, and attaches to a queue pair previously created by the host side. 9906164d2bSGeorge Zhang * 10006164d2bSGeorge Zhang * - from VMCIQPB_CREATED_MEM when the host side attaches to a queue pair 10106164d2bSGeorge Zhang * already created by a guest. 10206164d2bSGeorge Zhang * 10306164d2bSGeorge Zhang * - from VMCIQPB_ATTACHED_NO_MEM, when an old-style VMX calls 10406164d2bSGeorge Zhang * vmci_qp_broker_set_page_store (see below). 10506164d2bSGeorge Zhang * 10606164d2bSGeorge Zhang * - VMCIQPB_ATTACHED_NO_MEM: If the queue pair already was in the 10706164d2bSGeorge Zhang * VMCIQPB_CREATED_NO_MEM due to a host side create, an old-style VMX will 10806164d2bSGeorge Zhang * bring the queue pair into this state. Once vmci_qp_broker_set_page_store 10906164d2bSGeorge Zhang * is called to register the user memory, the VMCIQPB_ATTACH_MEM state 11006164d2bSGeorge Zhang * will be entered. 11106164d2bSGeorge Zhang * 11206164d2bSGeorge Zhang * From the attached queue pair, the queue pair can enter the shutdown states 11306164d2bSGeorge Zhang * when either side of the queue pair detaches. If the guest side detaches 11406164d2bSGeorge Zhang * first, the queue pair will enter the VMCIQPB_SHUTDOWN_NO_MEM state, where 11506164d2bSGeorge Zhang * the content of the queue pair will no longer be available. If the host 11606164d2bSGeorge Zhang * side detaches first, the queue pair will either enter the 11706164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_MEM, if the guest memory is currently mapped, or 11806164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_NO_MEM, if the guest memory is not mapped 11906164d2bSGeorge Zhang * (e.g., the host detaches while a guest is stunned). 12006164d2bSGeorge Zhang * 12106164d2bSGeorge Zhang * New-style VMX'en will also unmap guest memory, if the guest is 12206164d2bSGeorge Zhang * quiesced, e.g., during a snapshot operation. In that case, the guest 12306164d2bSGeorge Zhang * memory will no longer be available, and the queue pair will transition from 12406164d2bSGeorge Zhang * *_MEM state to a *_NO_MEM state. The VMX may later map the memory once more, 12506164d2bSGeorge Zhang * in which case the queue pair will transition from the *_NO_MEM state at that 12606164d2bSGeorge Zhang * point back to the *_MEM state. Note that the *_NO_MEM state may have changed, 12706164d2bSGeorge Zhang * since the peer may have either attached or detached in the meantime. The 12806164d2bSGeorge Zhang * values are laid out such that ++ on a state will move from a *_NO_MEM to a 12906164d2bSGeorge Zhang * *_MEM state, and vice versa. 13006164d2bSGeorge Zhang */ 13106164d2bSGeorge Zhang 13206164d2bSGeorge Zhang /* The Kernel specific component of the struct vmci_queue structure. */ 13306164d2bSGeorge Zhang struct vmci_queue_kern_if { 13406164d2bSGeorge Zhang struct mutex __mutex; /* Protects the queue. */ 13506164d2bSGeorge Zhang struct mutex *mutex; /* Shared by producer and consumer queues. */ 1366d6dfb4fSAndy King size_t num_pages; /* Number of pages incl. header. */ 1376d6dfb4fSAndy King bool host; /* Host or guest? */ 1386d6dfb4fSAndy King union { 1396d6dfb4fSAndy King struct { 1406d6dfb4fSAndy King dma_addr_t *pas; 1416d6dfb4fSAndy King void **vas; 1426d6dfb4fSAndy King } g; /* Used by the guest. */ 1436d6dfb4fSAndy King struct { 1446d6dfb4fSAndy King struct page **page; 1456d6dfb4fSAndy King struct page **header_page; 1466d6dfb4fSAndy King } h; /* Used by the host. */ 1476d6dfb4fSAndy King } u; 14806164d2bSGeorge Zhang }; 14906164d2bSGeorge Zhang 15006164d2bSGeorge Zhang /* 15106164d2bSGeorge Zhang * This structure is opaque to the clients. 15206164d2bSGeorge Zhang */ 15306164d2bSGeorge Zhang struct vmci_qp { 15406164d2bSGeorge Zhang struct vmci_handle handle; 15506164d2bSGeorge Zhang struct vmci_queue *produce_q; 15606164d2bSGeorge Zhang struct vmci_queue *consume_q; 15706164d2bSGeorge Zhang u64 produce_q_size; 15806164d2bSGeorge Zhang u64 consume_q_size; 15906164d2bSGeorge Zhang u32 peer; 16006164d2bSGeorge Zhang u32 flags; 16106164d2bSGeorge Zhang u32 priv_flags; 16206164d2bSGeorge Zhang bool guest_endpoint; 16306164d2bSGeorge Zhang unsigned int blocked; 16406164d2bSGeorge Zhang unsigned int generation; 16506164d2bSGeorge Zhang wait_queue_head_t event; 16606164d2bSGeorge Zhang }; 16706164d2bSGeorge Zhang 16806164d2bSGeorge Zhang enum qp_broker_state { 16906164d2bSGeorge Zhang VMCIQPB_NEW, 17006164d2bSGeorge Zhang VMCIQPB_CREATED_NO_MEM, 17106164d2bSGeorge Zhang VMCIQPB_CREATED_MEM, 17206164d2bSGeorge Zhang VMCIQPB_ATTACHED_NO_MEM, 17306164d2bSGeorge Zhang VMCIQPB_ATTACHED_MEM, 17406164d2bSGeorge Zhang VMCIQPB_SHUTDOWN_NO_MEM, 17506164d2bSGeorge Zhang VMCIQPB_SHUTDOWN_MEM, 17606164d2bSGeorge Zhang VMCIQPB_GONE 17706164d2bSGeorge Zhang }; 17806164d2bSGeorge Zhang 17906164d2bSGeorge Zhang #define QPBROKERSTATE_HAS_MEM(_qpb) (_qpb->state == VMCIQPB_CREATED_MEM || \ 18006164d2bSGeorge Zhang _qpb->state == VMCIQPB_ATTACHED_MEM || \ 18106164d2bSGeorge Zhang _qpb->state == VMCIQPB_SHUTDOWN_MEM) 18206164d2bSGeorge Zhang 18306164d2bSGeorge Zhang /* 18406164d2bSGeorge Zhang * In the queue pair broker, we always use the guest point of view for 18506164d2bSGeorge Zhang * the produce and consume queue values and references, e.g., the 18606164d2bSGeorge Zhang * produce queue size stored is the guests produce queue size. The 18706164d2bSGeorge Zhang * host endpoint will need to swap these around. The only exception is 18806164d2bSGeorge Zhang * the local queue pairs on the host, in which case the host endpoint 18906164d2bSGeorge Zhang * that creates the queue pair will have the right orientation, and 19006164d2bSGeorge Zhang * the attaching host endpoint will need to swap. 19106164d2bSGeorge Zhang */ 19206164d2bSGeorge Zhang struct qp_entry { 19306164d2bSGeorge Zhang struct list_head list_item; 19406164d2bSGeorge Zhang struct vmci_handle handle; 19506164d2bSGeorge Zhang u32 peer; 19606164d2bSGeorge Zhang u32 flags; 19706164d2bSGeorge Zhang u64 produce_size; 19806164d2bSGeorge Zhang u64 consume_size; 19906164d2bSGeorge Zhang u32 ref_count; 20006164d2bSGeorge Zhang }; 20106164d2bSGeorge Zhang 20206164d2bSGeorge Zhang struct qp_broker_entry { 20306164d2bSGeorge Zhang struct vmci_resource resource; 20406164d2bSGeorge Zhang struct qp_entry qp; 20506164d2bSGeorge Zhang u32 create_id; 20606164d2bSGeorge Zhang u32 attach_id; 20706164d2bSGeorge Zhang enum qp_broker_state state; 20806164d2bSGeorge Zhang bool require_trusted_attach; 20906164d2bSGeorge Zhang bool created_by_trusted; 21006164d2bSGeorge Zhang bool vmci_page_files; /* Created by VMX using VMCI page files */ 21106164d2bSGeorge Zhang struct vmci_queue *produce_q; 21206164d2bSGeorge Zhang struct vmci_queue *consume_q; 21306164d2bSGeorge Zhang struct vmci_queue_header saved_produce_q; 21406164d2bSGeorge Zhang struct vmci_queue_header saved_consume_q; 21506164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb; 21606164d2bSGeorge Zhang void *client_data; 21706164d2bSGeorge Zhang void *local_mem; /* Kernel memory for local queue pair */ 21806164d2bSGeorge Zhang }; 21906164d2bSGeorge Zhang 22006164d2bSGeorge Zhang struct qp_guest_endpoint { 22106164d2bSGeorge Zhang struct vmci_resource resource; 22206164d2bSGeorge Zhang struct qp_entry qp; 22306164d2bSGeorge Zhang u64 num_ppns; 22406164d2bSGeorge Zhang void *produce_q; 22506164d2bSGeorge Zhang void *consume_q; 226e6389a13SDmitry Torokhov struct ppn_set ppn_set; 22706164d2bSGeorge Zhang }; 22806164d2bSGeorge Zhang 22906164d2bSGeorge Zhang struct qp_list { 23006164d2bSGeorge Zhang struct list_head head; 23106164d2bSGeorge Zhang struct mutex mutex; /* Protect queue list. */ 23206164d2bSGeorge Zhang }; 23306164d2bSGeorge Zhang 23406164d2bSGeorge Zhang static struct qp_list qp_broker_list = { 23506164d2bSGeorge Zhang .head = LIST_HEAD_INIT(qp_broker_list.head), 23606164d2bSGeorge Zhang .mutex = __MUTEX_INITIALIZER(qp_broker_list.mutex), 23706164d2bSGeorge Zhang }; 23806164d2bSGeorge Zhang 23906164d2bSGeorge Zhang static struct qp_list qp_guest_endpoints = { 24006164d2bSGeorge Zhang .head = LIST_HEAD_INIT(qp_guest_endpoints.head), 24106164d2bSGeorge Zhang .mutex = __MUTEX_INITIALIZER(qp_guest_endpoints.mutex), 24206164d2bSGeorge Zhang }; 24306164d2bSGeorge Zhang 24406164d2bSGeorge Zhang #define INVALID_VMCI_GUEST_MEM_ID 0 24506164d2bSGeorge Zhang #define QPE_NUM_PAGES(_QPE) ((u32) \ 24642281d20SAndy King (DIV_ROUND_UP(_QPE.produce_size, PAGE_SIZE) + \ 24742281d20SAndy King DIV_ROUND_UP(_QPE.consume_size, PAGE_SIZE) + 2)) 24806164d2bSGeorge Zhang 24906164d2bSGeorge Zhang 25006164d2bSGeorge Zhang /* 25106164d2bSGeorge Zhang * Frees kernel VA space for a given queue and its queue header, and 25206164d2bSGeorge Zhang * frees physical data pages. 25306164d2bSGeorge Zhang */ 25406164d2bSGeorge Zhang static void qp_free_queue(void *q, u64 size) 25506164d2bSGeorge Zhang { 25606164d2bSGeorge Zhang struct vmci_queue *queue = q; 25706164d2bSGeorge Zhang 25806164d2bSGeorge Zhang if (queue) { 2596d6dfb4fSAndy King u64 i; 26006164d2bSGeorge Zhang 2616d6dfb4fSAndy King /* Given size does not include header, so add in a page here. */ 2626d6dfb4fSAndy King for (i = 0; i < DIV_ROUND_UP(size, PAGE_SIZE) + 1; i++) { 2636d6dfb4fSAndy King dma_free_coherent(&vmci_pdev->dev, PAGE_SIZE, 2646d6dfb4fSAndy King queue->kernel_if->u.g.vas[i], 2656d6dfb4fSAndy King queue->kernel_if->u.g.pas[i]); 2666d6dfb4fSAndy King } 26706164d2bSGeorge Zhang 2686d6dfb4fSAndy King vfree(queue); 26906164d2bSGeorge Zhang } 27006164d2bSGeorge Zhang } 27106164d2bSGeorge Zhang 27206164d2bSGeorge Zhang /* 2736d6dfb4fSAndy King * Allocates kernel queue pages of specified size with IOMMU mappings, 2746d6dfb4fSAndy King * plus space for the queue structure/kernel interface and the queue 2756d6dfb4fSAndy King * header. 27606164d2bSGeorge Zhang */ 27706164d2bSGeorge Zhang static void *qp_alloc_queue(u64 size, u32 flags) 27806164d2bSGeorge Zhang { 27906164d2bSGeorge Zhang u64 i; 28006164d2bSGeorge Zhang struct vmci_queue *queue; 281aa6467f1SJorgen Hansen size_t pas_size; 282aa6467f1SJorgen Hansen size_t vas_size; 283aa6467f1SJorgen Hansen size_t queue_size = sizeof(*queue) + sizeof(*queue->kernel_if); 284146180c0SDan Carpenter u64 num_pages; 285aa6467f1SJorgen Hansen 286146180c0SDan Carpenter if (size > SIZE_MAX - PAGE_SIZE) 287146180c0SDan Carpenter return NULL; 288146180c0SDan Carpenter num_pages = DIV_ROUND_UP(size, PAGE_SIZE) + 1; 289aa6467f1SJorgen Hansen if (num_pages > 290aa6467f1SJorgen Hansen (SIZE_MAX - queue_size) / 291aa6467f1SJorgen Hansen (sizeof(*queue->kernel_if->u.g.pas) + 292aa6467f1SJorgen Hansen sizeof(*queue->kernel_if->u.g.vas))) 293aa6467f1SJorgen Hansen return NULL; 294aa6467f1SJorgen Hansen 295aa6467f1SJorgen Hansen pas_size = num_pages * sizeof(*queue->kernel_if->u.g.pas); 296aa6467f1SJorgen Hansen vas_size = num_pages * sizeof(*queue->kernel_if->u.g.vas); 297aa6467f1SJorgen Hansen queue_size += pas_size + vas_size; 29806164d2bSGeorge Zhang 2996d6dfb4fSAndy King queue = vmalloc(queue_size); 3006d6dfb4fSAndy King if (!queue) 30106164d2bSGeorge Zhang return NULL; 30206164d2bSGeorge Zhang 3036d6dfb4fSAndy King queue->q_header = NULL; 30406164d2bSGeorge Zhang queue->saved_header = NULL; 30506164d2bSGeorge Zhang queue->kernel_if = (struct vmci_queue_kern_if *)(queue + 1); 3066d6dfb4fSAndy King queue->kernel_if->mutex = NULL; 3076d6dfb4fSAndy King queue->kernel_if->num_pages = num_pages; 3086d6dfb4fSAndy King queue->kernel_if->u.g.pas = (dma_addr_t *)(queue->kernel_if + 1); 3096d6dfb4fSAndy King queue->kernel_if->u.g.vas = 3106d6dfb4fSAndy King (void **)((u8 *)queue->kernel_if->u.g.pas + pas_size); 31106164d2bSGeorge Zhang queue->kernel_if->host = false; 31206164d2bSGeorge Zhang 3136d6dfb4fSAndy King for (i = 0; i < num_pages; i++) { 3146d6dfb4fSAndy King queue->kernel_if->u.g.vas[i] = 3156d6dfb4fSAndy King dma_alloc_coherent(&vmci_pdev->dev, PAGE_SIZE, 3166d6dfb4fSAndy King &queue->kernel_if->u.g.pas[i], 3176d6dfb4fSAndy King GFP_KERNEL); 3186d6dfb4fSAndy King if (!queue->kernel_if->u.g.vas[i]) { 3196d6dfb4fSAndy King /* Size excl. the header. */ 32006164d2bSGeorge Zhang qp_free_queue(queue, i * PAGE_SIZE); 32106164d2bSGeorge Zhang return NULL; 32206164d2bSGeorge Zhang } 3236d6dfb4fSAndy King } 3246d6dfb4fSAndy King 3256d6dfb4fSAndy King /* Queue header is the first page. */ 3266d6dfb4fSAndy King queue->q_header = queue->kernel_if->u.g.vas[0]; 3276d6dfb4fSAndy King 3286d6dfb4fSAndy King return queue; 3296d6dfb4fSAndy King } 33006164d2bSGeorge Zhang 33106164d2bSGeorge Zhang /* 33206164d2bSGeorge Zhang * Copies from a given buffer or iovector to a VMCI Queue. Uses 33306164d2bSGeorge Zhang * kmap()/kunmap() to dynamically map/unmap required portions of the queue 33406164d2bSGeorge Zhang * by traversing the offset -> page translation structure for the queue. 33506164d2bSGeorge Zhang * Assumes that offset + size does not wrap around in the queue. 33606164d2bSGeorge Zhang */ 337d1038084SAl Viro static int qp_memcpy_to_queue_iter(struct vmci_queue *queue, 33806164d2bSGeorge Zhang u64 queue_offset, 339d1038084SAl Viro struct iov_iter *from, 340d1038084SAl Viro size_t size) 34106164d2bSGeorge Zhang { 34206164d2bSGeorge Zhang struct vmci_queue_kern_if *kernel_if = queue->kernel_if; 34306164d2bSGeorge Zhang size_t bytes_copied = 0; 34406164d2bSGeorge Zhang 34506164d2bSGeorge Zhang while (bytes_copied < size) { 3466d6dfb4fSAndy King const u64 page_index = 3476d6dfb4fSAndy King (queue_offset + bytes_copied) / PAGE_SIZE; 3486d6dfb4fSAndy King const size_t page_offset = 34906164d2bSGeorge Zhang (queue_offset + bytes_copied) & (PAGE_SIZE - 1); 35006164d2bSGeorge Zhang void *va; 35106164d2bSGeorge Zhang size_t to_copy; 35206164d2bSGeorge Zhang 3536d6dfb4fSAndy King if (kernel_if->host) 3546d6dfb4fSAndy King va = kmap(kernel_if->u.h.page[page_index]); 3556d6dfb4fSAndy King else 3566d6dfb4fSAndy King va = kernel_if->u.g.vas[page_index + 1]; 3576d6dfb4fSAndy King /* Skip header. */ 35806164d2bSGeorge Zhang 35906164d2bSGeorge Zhang if (size - bytes_copied > PAGE_SIZE - page_offset) 36006164d2bSGeorge Zhang /* Enough payload to fill up from this page. */ 36106164d2bSGeorge Zhang to_copy = PAGE_SIZE - page_offset; 36206164d2bSGeorge Zhang else 36306164d2bSGeorge Zhang to_copy = size - bytes_copied; 36406164d2bSGeorge Zhang 365d1038084SAl Viro if (!copy_from_iter_full((u8 *)va + page_offset, to_copy, 366d1038084SAl Viro from)) { 3676d6dfb4fSAndy King if (kernel_if->host) 3686d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 36906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 37006164d2bSGeorge Zhang } 37106164d2bSGeorge Zhang bytes_copied += to_copy; 3726d6dfb4fSAndy King if (kernel_if->host) 3736d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 37406164d2bSGeorge Zhang } 37506164d2bSGeorge Zhang 37606164d2bSGeorge Zhang return VMCI_SUCCESS; 37706164d2bSGeorge Zhang } 37806164d2bSGeorge Zhang 37906164d2bSGeorge Zhang /* 38006164d2bSGeorge Zhang * Copies to a given buffer or iovector from a VMCI Queue. Uses 38106164d2bSGeorge Zhang * kmap()/kunmap() to dynamically map/unmap required portions of the queue 38206164d2bSGeorge Zhang * by traversing the offset -> page translation structure for the queue. 38306164d2bSGeorge Zhang * Assumes that offset + size does not wrap around in the queue. 38406164d2bSGeorge Zhang */ 38553f58d8eSAl Viro static int qp_memcpy_from_queue_iter(struct iov_iter *to, 38606164d2bSGeorge Zhang const struct vmci_queue *queue, 38753f58d8eSAl Viro u64 queue_offset, size_t size) 38806164d2bSGeorge Zhang { 38906164d2bSGeorge Zhang struct vmci_queue_kern_if *kernel_if = queue->kernel_if; 39006164d2bSGeorge Zhang size_t bytes_copied = 0; 39106164d2bSGeorge Zhang 39206164d2bSGeorge Zhang while (bytes_copied < size) { 3936d6dfb4fSAndy King const u64 page_index = 3946d6dfb4fSAndy King (queue_offset + bytes_copied) / PAGE_SIZE; 3956d6dfb4fSAndy King const size_t page_offset = 39606164d2bSGeorge Zhang (queue_offset + bytes_copied) & (PAGE_SIZE - 1); 39706164d2bSGeorge Zhang void *va; 39806164d2bSGeorge Zhang size_t to_copy; 39953f58d8eSAl Viro int err; 40006164d2bSGeorge Zhang 4016d6dfb4fSAndy King if (kernel_if->host) 4026d6dfb4fSAndy King va = kmap(kernel_if->u.h.page[page_index]); 4036d6dfb4fSAndy King else 4046d6dfb4fSAndy King va = kernel_if->u.g.vas[page_index + 1]; 4056d6dfb4fSAndy King /* Skip header. */ 40606164d2bSGeorge Zhang 40706164d2bSGeorge Zhang if (size - bytes_copied > PAGE_SIZE - page_offset) 40806164d2bSGeorge Zhang /* Enough payload to fill up this page. */ 40906164d2bSGeorge Zhang to_copy = PAGE_SIZE - page_offset; 41006164d2bSGeorge Zhang else 41106164d2bSGeorge Zhang to_copy = size - bytes_copied; 41206164d2bSGeorge Zhang 413ce3d6e7dSAl Viro err = copy_to_iter((u8 *)va + page_offset, to_copy, to); 414ce3d6e7dSAl Viro if (err != to_copy) { 4156d6dfb4fSAndy King if (kernel_if->host) 4166d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 41706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 41806164d2bSGeorge Zhang } 41906164d2bSGeorge Zhang bytes_copied += to_copy; 4206d6dfb4fSAndy King if (kernel_if->host) 4216d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 42206164d2bSGeorge Zhang } 42306164d2bSGeorge Zhang 42406164d2bSGeorge Zhang return VMCI_SUCCESS; 42506164d2bSGeorge Zhang } 42606164d2bSGeorge Zhang 42706164d2bSGeorge Zhang /* 42806164d2bSGeorge Zhang * Allocates two list of PPNs --- one for the pages in the produce queue, 42906164d2bSGeorge Zhang * and the other for the pages in the consume queue. Intializes the list 43006164d2bSGeorge Zhang * of PPNs with the page frame numbers of the KVA for the two queues (and 43106164d2bSGeorge Zhang * the queue headers). 43206164d2bSGeorge Zhang */ 43306164d2bSGeorge Zhang static int qp_alloc_ppn_set(void *prod_q, 43406164d2bSGeorge Zhang u64 num_produce_pages, 43506164d2bSGeorge Zhang void *cons_q, 436e6389a13SDmitry Torokhov u64 num_consume_pages, struct ppn_set *ppn_set) 43706164d2bSGeorge Zhang { 43806164d2bSGeorge Zhang u32 *produce_ppns; 43906164d2bSGeorge Zhang u32 *consume_ppns; 44006164d2bSGeorge Zhang struct vmci_queue *produce_q = prod_q; 44106164d2bSGeorge Zhang struct vmci_queue *consume_q = cons_q; 44206164d2bSGeorge Zhang u64 i; 44306164d2bSGeorge Zhang 44406164d2bSGeorge Zhang if (!produce_q || !num_produce_pages || !consume_q || 44506164d2bSGeorge Zhang !num_consume_pages || !ppn_set) 44606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 44706164d2bSGeorge Zhang 44806164d2bSGeorge Zhang if (ppn_set->initialized) 44906164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 45006164d2bSGeorge Zhang 45106164d2bSGeorge Zhang produce_ppns = 4526da2ec56SKees Cook kmalloc_array(num_produce_pages, sizeof(*produce_ppns), 4536da2ec56SKees Cook GFP_KERNEL); 45406164d2bSGeorge Zhang if (!produce_ppns) 45506164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 45606164d2bSGeorge Zhang 45706164d2bSGeorge Zhang consume_ppns = 4586da2ec56SKees Cook kmalloc_array(num_consume_pages, sizeof(*consume_ppns), 4596da2ec56SKees Cook GFP_KERNEL); 46006164d2bSGeorge Zhang if (!consume_ppns) { 46106164d2bSGeorge Zhang kfree(produce_ppns); 46206164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 46306164d2bSGeorge Zhang } 46406164d2bSGeorge Zhang 4656d6dfb4fSAndy King for (i = 0; i < num_produce_pages; i++) { 46606164d2bSGeorge Zhang unsigned long pfn; 46706164d2bSGeorge Zhang 46806164d2bSGeorge Zhang produce_ppns[i] = 4696d6dfb4fSAndy King produce_q->kernel_if->u.g.pas[i] >> PAGE_SHIFT; 47006164d2bSGeorge Zhang pfn = produce_ppns[i]; 47106164d2bSGeorge Zhang 47206164d2bSGeorge Zhang /* Fail allocation if PFN isn't supported by hypervisor. */ 47306164d2bSGeorge Zhang if (sizeof(pfn) > sizeof(*produce_ppns) 47406164d2bSGeorge Zhang && pfn != produce_ppns[i]) 47506164d2bSGeorge Zhang goto ppn_error; 47606164d2bSGeorge Zhang } 47706164d2bSGeorge Zhang 4786d6dfb4fSAndy King for (i = 0; i < num_consume_pages; i++) { 47906164d2bSGeorge Zhang unsigned long pfn; 48006164d2bSGeorge Zhang 48106164d2bSGeorge Zhang consume_ppns[i] = 4826d6dfb4fSAndy King consume_q->kernel_if->u.g.pas[i] >> PAGE_SHIFT; 48306164d2bSGeorge Zhang pfn = consume_ppns[i]; 48406164d2bSGeorge Zhang 48506164d2bSGeorge Zhang /* Fail allocation if PFN isn't supported by hypervisor. */ 48606164d2bSGeorge Zhang if (sizeof(pfn) > sizeof(*consume_ppns) 48706164d2bSGeorge Zhang && pfn != consume_ppns[i]) 48806164d2bSGeorge Zhang goto ppn_error; 48906164d2bSGeorge Zhang } 49006164d2bSGeorge Zhang 49106164d2bSGeorge Zhang ppn_set->num_produce_pages = num_produce_pages; 49206164d2bSGeorge Zhang ppn_set->num_consume_pages = num_consume_pages; 49306164d2bSGeorge Zhang ppn_set->produce_ppns = produce_ppns; 49406164d2bSGeorge Zhang ppn_set->consume_ppns = consume_ppns; 49506164d2bSGeorge Zhang ppn_set->initialized = true; 49606164d2bSGeorge Zhang return VMCI_SUCCESS; 49706164d2bSGeorge Zhang 49806164d2bSGeorge Zhang ppn_error: 49906164d2bSGeorge Zhang kfree(produce_ppns); 50006164d2bSGeorge Zhang kfree(consume_ppns); 50106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 50206164d2bSGeorge Zhang } 50306164d2bSGeorge Zhang 50406164d2bSGeorge Zhang /* 50506164d2bSGeorge Zhang * Frees the two list of PPNs for a queue pair. 50606164d2bSGeorge Zhang */ 507e6389a13SDmitry Torokhov static void qp_free_ppn_set(struct ppn_set *ppn_set) 50806164d2bSGeorge Zhang { 50906164d2bSGeorge Zhang if (ppn_set->initialized) { 51006164d2bSGeorge Zhang /* Do not call these functions on NULL inputs. */ 51106164d2bSGeorge Zhang kfree(ppn_set->produce_ppns); 51206164d2bSGeorge Zhang kfree(ppn_set->consume_ppns); 51306164d2bSGeorge Zhang } 51406164d2bSGeorge Zhang memset(ppn_set, 0, sizeof(*ppn_set)); 51506164d2bSGeorge Zhang } 51606164d2bSGeorge Zhang 51706164d2bSGeorge Zhang /* 51806164d2bSGeorge Zhang * Populates the list of PPNs in the hypercall structure with the PPNS 51906164d2bSGeorge Zhang * of the produce queue and the consume queue. 52006164d2bSGeorge Zhang */ 521e6389a13SDmitry Torokhov static int qp_populate_ppn_set(u8 *call_buf, const struct ppn_set *ppn_set) 52206164d2bSGeorge Zhang { 52306164d2bSGeorge Zhang memcpy(call_buf, ppn_set->produce_ppns, 52406164d2bSGeorge Zhang ppn_set->num_produce_pages * sizeof(*ppn_set->produce_ppns)); 52506164d2bSGeorge Zhang memcpy(call_buf + 52606164d2bSGeorge Zhang ppn_set->num_produce_pages * sizeof(*ppn_set->produce_ppns), 52706164d2bSGeorge Zhang ppn_set->consume_ppns, 52806164d2bSGeorge Zhang ppn_set->num_consume_pages * sizeof(*ppn_set->consume_ppns)); 52906164d2bSGeorge Zhang 53006164d2bSGeorge Zhang return VMCI_SUCCESS; 53106164d2bSGeorge Zhang } 53206164d2bSGeorge Zhang 53306164d2bSGeorge Zhang /* 53406164d2bSGeorge Zhang * Allocates kernel VA space of specified size plus space for the queue 53506164d2bSGeorge Zhang * and kernel interface. This is different from the guest queue allocator, 53606164d2bSGeorge Zhang * because we do not allocate our own queue header/data pages here but 53706164d2bSGeorge Zhang * share those of the guest. 53806164d2bSGeorge Zhang */ 53906164d2bSGeorge Zhang static struct vmci_queue *qp_host_alloc_queue(u64 size) 54006164d2bSGeorge Zhang { 54106164d2bSGeorge Zhang struct vmci_queue *queue; 542aa6467f1SJorgen Hansen size_t queue_page_size; 543146180c0SDan Carpenter u64 num_pages; 54406164d2bSGeorge Zhang const size_t queue_size = sizeof(*queue) + sizeof(*(queue->kernel_if)); 545aa6467f1SJorgen Hansen 546146180c0SDan Carpenter if (size > SIZE_MAX - PAGE_SIZE) 547146180c0SDan Carpenter return NULL; 548146180c0SDan Carpenter num_pages = DIV_ROUND_UP(size, PAGE_SIZE) + 1; 549aa6467f1SJorgen Hansen if (num_pages > (SIZE_MAX - queue_size) / 550aa6467f1SJorgen Hansen sizeof(*queue->kernel_if->u.h.page)) 551aa6467f1SJorgen Hansen return NULL; 552aa6467f1SJorgen Hansen 553aa6467f1SJorgen Hansen queue_page_size = num_pages * sizeof(*queue->kernel_if->u.h.page); 55406164d2bSGeorge Zhang 55506164d2bSGeorge Zhang queue = kzalloc(queue_size + queue_page_size, GFP_KERNEL); 55606164d2bSGeorge Zhang if (queue) { 55706164d2bSGeorge Zhang queue->q_header = NULL; 55806164d2bSGeorge Zhang queue->saved_header = NULL; 5596d6dfb4fSAndy King queue->kernel_if = (struct vmci_queue_kern_if *)(queue + 1); 56006164d2bSGeorge Zhang queue->kernel_if->host = true; 56106164d2bSGeorge Zhang queue->kernel_if->mutex = NULL; 56206164d2bSGeorge Zhang queue->kernel_if->num_pages = num_pages; 5636d6dfb4fSAndy King queue->kernel_if->u.h.header_page = 56406164d2bSGeorge Zhang (struct page **)((u8 *)queue + queue_size); 5656d6dfb4fSAndy King queue->kernel_if->u.h.page = 5666d6dfb4fSAndy King &queue->kernel_if->u.h.header_page[1]; 56706164d2bSGeorge Zhang } 56806164d2bSGeorge Zhang 56906164d2bSGeorge Zhang return queue; 57006164d2bSGeorge Zhang } 57106164d2bSGeorge Zhang 57206164d2bSGeorge Zhang /* 57306164d2bSGeorge Zhang * Frees kernel memory for a given queue (header plus translation 57406164d2bSGeorge Zhang * structure). 57506164d2bSGeorge Zhang */ 57606164d2bSGeorge Zhang static void qp_host_free_queue(struct vmci_queue *queue, u64 queue_size) 57706164d2bSGeorge Zhang { 57806164d2bSGeorge Zhang kfree(queue); 57906164d2bSGeorge Zhang } 58006164d2bSGeorge Zhang 58106164d2bSGeorge Zhang /* 58206164d2bSGeorge Zhang * Initialize the mutex for the pair of queues. This mutex is used to 58306164d2bSGeorge Zhang * protect the q_header and the buffer from changing out from under any 58406164d2bSGeorge Zhang * users of either queue. Of course, it's only any good if the mutexes 58506164d2bSGeorge Zhang * are actually acquired. Queue structure must lie on non-paged memory 58606164d2bSGeorge Zhang * or we cannot guarantee access to the mutex. 58706164d2bSGeorge Zhang */ 58806164d2bSGeorge Zhang static void qp_init_queue_mutex(struct vmci_queue *produce_q, 58906164d2bSGeorge Zhang struct vmci_queue *consume_q) 59006164d2bSGeorge Zhang { 59106164d2bSGeorge Zhang /* 59206164d2bSGeorge Zhang * Only the host queue has shared state - the guest queues do not 59306164d2bSGeorge Zhang * need to synchronize access using a queue mutex. 59406164d2bSGeorge Zhang */ 59506164d2bSGeorge Zhang 59606164d2bSGeorge Zhang if (produce_q->kernel_if->host) { 59706164d2bSGeorge Zhang produce_q->kernel_if->mutex = &produce_q->kernel_if->__mutex; 59806164d2bSGeorge Zhang consume_q->kernel_if->mutex = &produce_q->kernel_if->__mutex; 59906164d2bSGeorge Zhang mutex_init(produce_q->kernel_if->mutex); 60006164d2bSGeorge Zhang } 60106164d2bSGeorge Zhang } 60206164d2bSGeorge Zhang 60306164d2bSGeorge Zhang /* 60406164d2bSGeorge Zhang * Cleans up the mutex for the pair of queues. 60506164d2bSGeorge Zhang */ 60606164d2bSGeorge Zhang static void qp_cleanup_queue_mutex(struct vmci_queue *produce_q, 60706164d2bSGeorge Zhang struct vmci_queue *consume_q) 60806164d2bSGeorge Zhang { 60906164d2bSGeorge Zhang if (produce_q->kernel_if->host) { 61006164d2bSGeorge Zhang produce_q->kernel_if->mutex = NULL; 61106164d2bSGeorge Zhang consume_q->kernel_if->mutex = NULL; 61206164d2bSGeorge Zhang } 61306164d2bSGeorge Zhang } 61406164d2bSGeorge Zhang 61506164d2bSGeorge Zhang /* 61606164d2bSGeorge Zhang * Acquire the mutex for the queue. Note that the produce_q and 61706164d2bSGeorge Zhang * the consume_q share a mutex. So, only one of the two need to 61806164d2bSGeorge Zhang * be passed in to this routine. Either will work just fine. 61906164d2bSGeorge Zhang */ 62006164d2bSGeorge Zhang static void qp_acquire_queue_mutex(struct vmci_queue *queue) 62106164d2bSGeorge Zhang { 62206164d2bSGeorge Zhang if (queue->kernel_if->host) 62306164d2bSGeorge Zhang mutex_lock(queue->kernel_if->mutex); 62406164d2bSGeorge Zhang } 62506164d2bSGeorge Zhang 62606164d2bSGeorge Zhang /* 62706164d2bSGeorge Zhang * Release the mutex for the queue. Note that the produce_q and 62806164d2bSGeorge Zhang * the consume_q share a mutex. So, only one of the two need to 62906164d2bSGeorge Zhang * be passed in to this routine. Either will work just fine. 63006164d2bSGeorge Zhang */ 63106164d2bSGeorge Zhang static void qp_release_queue_mutex(struct vmci_queue *queue) 63206164d2bSGeorge Zhang { 63306164d2bSGeorge Zhang if (queue->kernel_if->host) 63406164d2bSGeorge Zhang mutex_unlock(queue->kernel_if->mutex); 63506164d2bSGeorge Zhang } 63606164d2bSGeorge Zhang 63706164d2bSGeorge Zhang /* 63806164d2bSGeorge Zhang * Helper function to release pages in the PageStoreAttachInfo 63906164d2bSGeorge Zhang * previously obtained using get_user_pages. 64006164d2bSGeorge Zhang */ 64106164d2bSGeorge Zhang static void qp_release_pages(struct page **pages, 64206164d2bSGeorge Zhang u64 num_pages, bool dirty) 64306164d2bSGeorge Zhang { 64406164d2bSGeorge Zhang int i; 64506164d2bSGeorge Zhang 64606164d2bSGeorge Zhang for (i = 0; i < num_pages; i++) { 64706164d2bSGeorge Zhang if (dirty) 64806164d2bSGeorge Zhang set_page_dirty(pages[i]); 64906164d2bSGeorge Zhang 65009cbfeafSKirill A. Shutemov put_page(pages[i]); 65106164d2bSGeorge Zhang pages[i] = NULL; 65206164d2bSGeorge Zhang } 65306164d2bSGeorge Zhang } 65406164d2bSGeorge Zhang 65506164d2bSGeorge Zhang /* 65606164d2bSGeorge Zhang * Lock the user pages referenced by the {produce,consume}Buffer 65706164d2bSGeorge Zhang * struct into memory and populate the {produce,consume}Pages 65806164d2bSGeorge Zhang * arrays in the attach structure with them. 65906164d2bSGeorge Zhang */ 66006164d2bSGeorge Zhang static int qp_host_get_user_memory(u64 produce_uva, 66106164d2bSGeorge Zhang u64 consume_uva, 66206164d2bSGeorge Zhang struct vmci_queue *produce_q, 66306164d2bSGeorge Zhang struct vmci_queue *consume_q) 66406164d2bSGeorge Zhang { 66506164d2bSGeorge Zhang int retval; 66606164d2bSGeorge Zhang int err = VMCI_SUCCESS; 66706164d2bSGeorge Zhang 668240ddd49SJan Kara retval = get_user_pages_fast((uintptr_t) produce_uva, 669240ddd49SJan Kara produce_q->kernel_if->num_pages, 1, 670240ddd49SJan Kara produce_q->kernel_if->u.h.header_page); 67106164d2bSGeorge Zhang if (retval < produce_q->kernel_if->num_pages) { 672bf136121SDavidlohr Bueso pr_debug("get_user_pages_fast(produce) failed (retval=%d)", 673bf136121SDavidlohr Bueso retval); 6746d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 6756d6dfb4fSAndy King retval, false); 67606164d2bSGeorge Zhang err = VMCI_ERROR_NO_MEM; 67706164d2bSGeorge Zhang goto out; 67806164d2bSGeorge Zhang } 67906164d2bSGeorge Zhang 680240ddd49SJan Kara retval = get_user_pages_fast((uintptr_t) consume_uva, 681240ddd49SJan Kara consume_q->kernel_if->num_pages, 1, 682240ddd49SJan Kara consume_q->kernel_if->u.h.header_page); 68306164d2bSGeorge Zhang if (retval < consume_q->kernel_if->num_pages) { 684bf136121SDavidlohr Bueso pr_debug("get_user_pages_fast(consume) failed (retval=%d)", 685bf136121SDavidlohr Bueso retval); 6866d6dfb4fSAndy King qp_release_pages(consume_q->kernel_if->u.h.header_page, 6876d6dfb4fSAndy King retval, false); 6886d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 68906164d2bSGeorge Zhang produce_q->kernel_if->num_pages, false); 69006164d2bSGeorge Zhang err = VMCI_ERROR_NO_MEM; 69106164d2bSGeorge Zhang } 69206164d2bSGeorge Zhang 69306164d2bSGeorge Zhang out: 69406164d2bSGeorge Zhang return err; 69506164d2bSGeorge Zhang } 69606164d2bSGeorge Zhang 69706164d2bSGeorge Zhang /* 69806164d2bSGeorge Zhang * Registers the specification of the user pages used for backing a queue 69906164d2bSGeorge Zhang * pair. Enough information to map in pages is stored in the OS specific 70006164d2bSGeorge Zhang * part of the struct vmci_queue structure. 70106164d2bSGeorge Zhang */ 70206164d2bSGeorge Zhang static int qp_host_register_user_memory(struct vmci_qp_page_store *page_store, 70306164d2bSGeorge Zhang struct vmci_queue *produce_q, 70406164d2bSGeorge Zhang struct vmci_queue *consume_q) 70506164d2bSGeorge Zhang { 70606164d2bSGeorge Zhang u64 produce_uva; 70706164d2bSGeorge Zhang u64 consume_uva; 70806164d2bSGeorge Zhang 70906164d2bSGeorge Zhang /* 71006164d2bSGeorge Zhang * The new style and the old style mapping only differs in 71106164d2bSGeorge Zhang * that we either get a single or two UVAs, so we split the 71206164d2bSGeorge Zhang * single UVA range at the appropriate spot. 71306164d2bSGeorge Zhang */ 71406164d2bSGeorge Zhang produce_uva = page_store->pages; 71506164d2bSGeorge Zhang consume_uva = page_store->pages + 71606164d2bSGeorge Zhang produce_q->kernel_if->num_pages * PAGE_SIZE; 71706164d2bSGeorge Zhang return qp_host_get_user_memory(produce_uva, consume_uva, produce_q, 71806164d2bSGeorge Zhang consume_q); 71906164d2bSGeorge Zhang } 72006164d2bSGeorge Zhang 72106164d2bSGeorge Zhang /* 72206164d2bSGeorge Zhang * Releases and removes the references to user pages stored in the attach 72306164d2bSGeorge Zhang * struct. Pages are released from the page cache and may become 72406164d2bSGeorge Zhang * swappable again. 72506164d2bSGeorge Zhang */ 72606164d2bSGeorge Zhang static void qp_host_unregister_user_memory(struct vmci_queue *produce_q, 72706164d2bSGeorge Zhang struct vmci_queue *consume_q) 72806164d2bSGeorge Zhang { 7296d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 73006164d2bSGeorge Zhang produce_q->kernel_if->num_pages, true); 7316d6dfb4fSAndy King memset(produce_q->kernel_if->u.h.header_page, 0, 7326d6dfb4fSAndy King sizeof(*produce_q->kernel_if->u.h.header_page) * 73306164d2bSGeorge Zhang produce_q->kernel_if->num_pages); 7346d6dfb4fSAndy King qp_release_pages(consume_q->kernel_if->u.h.header_page, 73506164d2bSGeorge Zhang consume_q->kernel_if->num_pages, true); 7366d6dfb4fSAndy King memset(consume_q->kernel_if->u.h.header_page, 0, 7376d6dfb4fSAndy King sizeof(*consume_q->kernel_if->u.h.header_page) * 73806164d2bSGeorge Zhang consume_q->kernel_if->num_pages); 73906164d2bSGeorge Zhang } 74006164d2bSGeorge Zhang 74106164d2bSGeorge Zhang /* 74206164d2bSGeorge Zhang * Once qp_host_register_user_memory has been performed on a 74306164d2bSGeorge Zhang * queue, the queue pair headers can be mapped into the 74406164d2bSGeorge Zhang * kernel. Once mapped, they must be unmapped with 74506164d2bSGeorge Zhang * qp_host_unmap_queues prior to calling 74606164d2bSGeorge Zhang * qp_host_unregister_user_memory. 74706164d2bSGeorge Zhang * Pages are pinned. 74806164d2bSGeorge Zhang */ 74906164d2bSGeorge Zhang static int qp_host_map_queues(struct vmci_queue *produce_q, 75006164d2bSGeorge Zhang struct vmci_queue *consume_q) 75106164d2bSGeorge Zhang { 75206164d2bSGeorge Zhang int result; 75306164d2bSGeorge Zhang 75406164d2bSGeorge Zhang if (!produce_q->q_header || !consume_q->q_header) { 75506164d2bSGeorge Zhang struct page *headers[2]; 75606164d2bSGeorge Zhang 75706164d2bSGeorge Zhang if (produce_q->q_header != consume_q->q_header) 75806164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 75906164d2bSGeorge Zhang 7606d6dfb4fSAndy King if (produce_q->kernel_if->u.h.header_page == NULL || 7616d6dfb4fSAndy King *produce_q->kernel_if->u.h.header_page == NULL) 76206164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 76306164d2bSGeorge Zhang 7646d6dfb4fSAndy King headers[0] = *produce_q->kernel_if->u.h.header_page; 7656d6dfb4fSAndy King headers[1] = *consume_q->kernel_if->u.h.header_page; 76606164d2bSGeorge Zhang 76706164d2bSGeorge Zhang produce_q->q_header = vmap(headers, 2, VM_MAP, PAGE_KERNEL); 76806164d2bSGeorge Zhang if (produce_q->q_header != NULL) { 76906164d2bSGeorge Zhang consume_q->q_header = 77006164d2bSGeorge Zhang (struct vmci_queue_header *)((u8 *) 77106164d2bSGeorge Zhang produce_q->q_header + 77206164d2bSGeorge Zhang PAGE_SIZE); 77306164d2bSGeorge Zhang result = VMCI_SUCCESS; 77406164d2bSGeorge Zhang } else { 77506164d2bSGeorge Zhang pr_warn("vmap failed\n"); 77606164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 77706164d2bSGeorge Zhang } 77806164d2bSGeorge Zhang } else { 77906164d2bSGeorge Zhang result = VMCI_SUCCESS; 78006164d2bSGeorge Zhang } 78106164d2bSGeorge Zhang 78206164d2bSGeorge Zhang return result; 78306164d2bSGeorge Zhang } 78406164d2bSGeorge Zhang 78506164d2bSGeorge Zhang /* 78606164d2bSGeorge Zhang * Unmaps previously mapped queue pair headers from the kernel. 78706164d2bSGeorge Zhang * Pages are unpinned. 78806164d2bSGeorge Zhang */ 78906164d2bSGeorge Zhang static int qp_host_unmap_queues(u32 gid, 79006164d2bSGeorge Zhang struct vmci_queue *produce_q, 79106164d2bSGeorge Zhang struct vmci_queue *consume_q) 79206164d2bSGeorge Zhang { 79306164d2bSGeorge Zhang if (produce_q->q_header) { 79406164d2bSGeorge Zhang if (produce_q->q_header < consume_q->q_header) 79506164d2bSGeorge Zhang vunmap(produce_q->q_header); 79606164d2bSGeorge Zhang else 79706164d2bSGeorge Zhang vunmap(consume_q->q_header); 79806164d2bSGeorge Zhang 79906164d2bSGeorge Zhang produce_q->q_header = NULL; 80006164d2bSGeorge Zhang consume_q->q_header = NULL; 80106164d2bSGeorge Zhang } 80206164d2bSGeorge Zhang 80306164d2bSGeorge Zhang return VMCI_SUCCESS; 80406164d2bSGeorge Zhang } 80506164d2bSGeorge Zhang 80606164d2bSGeorge Zhang /* 80706164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. Assumes 80806164d2bSGeorge Zhang * that the list is locked. 80906164d2bSGeorge Zhang */ 81006164d2bSGeorge Zhang static struct qp_entry *qp_list_find(struct qp_list *qp_list, 81106164d2bSGeorge Zhang struct vmci_handle handle) 81206164d2bSGeorge Zhang { 81306164d2bSGeorge Zhang struct qp_entry *entry; 81406164d2bSGeorge Zhang 81506164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) 81606164d2bSGeorge Zhang return NULL; 81706164d2bSGeorge Zhang 81806164d2bSGeorge Zhang list_for_each_entry(entry, &qp_list->head, list_item) { 81906164d2bSGeorge Zhang if (vmci_handle_is_equal(entry->handle, handle)) 82006164d2bSGeorge Zhang return entry; 82106164d2bSGeorge Zhang } 82206164d2bSGeorge Zhang 82306164d2bSGeorge Zhang return NULL; 82406164d2bSGeorge Zhang } 82506164d2bSGeorge Zhang 82606164d2bSGeorge Zhang /* 82706164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. 82806164d2bSGeorge Zhang */ 82906164d2bSGeorge Zhang static struct qp_guest_endpoint * 83006164d2bSGeorge Zhang qp_guest_handle_to_entry(struct vmci_handle handle) 83106164d2bSGeorge Zhang { 83206164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 83306164d2bSGeorge Zhang struct qp_entry *qp = qp_list_find(&qp_guest_endpoints, handle); 83406164d2bSGeorge Zhang 83506164d2bSGeorge Zhang entry = qp ? container_of( 83606164d2bSGeorge Zhang qp, struct qp_guest_endpoint, qp) : NULL; 83706164d2bSGeorge Zhang return entry; 83806164d2bSGeorge Zhang } 83906164d2bSGeorge Zhang 84006164d2bSGeorge Zhang /* 84106164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. 84206164d2bSGeorge Zhang */ 84306164d2bSGeorge Zhang static struct qp_broker_entry * 84406164d2bSGeorge Zhang qp_broker_handle_to_entry(struct vmci_handle handle) 84506164d2bSGeorge Zhang { 84606164d2bSGeorge Zhang struct qp_broker_entry *entry; 84706164d2bSGeorge Zhang struct qp_entry *qp = qp_list_find(&qp_broker_list, handle); 84806164d2bSGeorge Zhang 84906164d2bSGeorge Zhang entry = qp ? container_of( 85006164d2bSGeorge Zhang qp, struct qp_broker_entry, qp) : NULL; 85106164d2bSGeorge Zhang return entry; 85206164d2bSGeorge Zhang } 85306164d2bSGeorge Zhang 85406164d2bSGeorge Zhang /* 85506164d2bSGeorge Zhang * Dispatches a queue pair event message directly into the local event 85606164d2bSGeorge Zhang * queue. 85706164d2bSGeorge Zhang */ 85806164d2bSGeorge Zhang static int qp_notify_peer_local(bool attach, struct vmci_handle handle) 85906164d2bSGeorge Zhang { 86006164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 86106164d2bSGeorge Zhang struct vmci_event_qp ev; 86206164d2bSGeorge Zhang 86306164d2bSGeorge Zhang ev.msg.hdr.dst = vmci_make_handle(context_id, VMCI_EVENT_HANDLER); 86406164d2bSGeorge Zhang ev.msg.hdr.src = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 86506164d2bSGeorge Zhang VMCI_CONTEXT_RESOURCE_ID); 86606164d2bSGeorge Zhang ev.msg.hdr.payload_size = sizeof(ev) - sizeof(ev.msg.hdr); 86706164d2bSGeorge Zhang ev.msg.event_data.event = 86806164d2bSGeorge Zhang attach ? VMCI_EVENT_QP_PEER_ATTACH : VMCI_EVENT_QP_PEER_DETACH; 86906164d2bSGeorge Zhang ev.payload.peer_id = context_id; 87006164d2bSGeorge Zhang ev.payload.handle = handle; 87106164d2bSGeorge Zhang 87206164d2bSGeorge Zhang return vmci_event_dispatch(&ev.msg.hdr); 87306164d2bSGeorge Zhang } 87406164d2bSGeorge Zhang 87506164d2bSGeorge Zhang /* 87606164d2bSGeorge Zhang * Allocates and initializes a qp_guest_endpoint structure. 87706164d2bSGeorge Zhang * Allocates a queue_pair rid (and handle) iff the given entry has 87806164d2bSGeorge Zhang * an invalid handle. 0 through VMCI_RESERVED_RESOURCE_ID_MAX 87906164d2bSGeorge Zhang * are reserved handles. Assumes that the QP list mutex is held 88006164d2bSGeorge Zhang * by the caller. 88106164d2bSGeorge Zhang */ 88206164d2bSGeorge Zhang static struct qp_guest_endpoint * 88306164d2bSGeorge Zhang qp_guest_endpoint_create(struct vmci_handle handle, 88406164d2bSGeorge Zhang u32 peer, 88506164d2bSGeorge Zhang u32 flags, 88606164d2bSGeorge Zhang u64 produce_size, 88706164d2bSGeorge Zhang u64 consume_size, 88806164d2bSGeorge Zhang void *produce_q, 88906164d2bSGeorge Zhang void *consume_q) 89006164d2bSGeorge Zhang { 89106164d2bSGeorge Zhang int result; 89206164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 89306164d2bSGeorge Zhang /* One page each for the queue headers. */ 89442281d20SAndy King const u64 num_ppns = DIV_ROUND_UP(produce_size, PAGE_SIZE) + 89542281d20SAndy King DIV_ROUND_UP(consume_size, PAGE_SIZE) + 2; 89606164d2bSGeorge Zhang 89706164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) { 89806164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 89906164d2bSGeorge Zhang 90006164d2bSGeorge Zhang handle = vmci_make_handle(context_id, VMCI_INVALID_ID); 90106164d2bSGeorge Zhang } 90206164d2bSGeorge Zhang 90306164d2bSGeorge Zhang entry = kzalloc(sizeof(*entry), GFP_KERNEL); 90406164d2bSGeorge Zhang if (entry) { 90506164d2bSGeorge Zhang entry->qp.peer = peer; 90606164d2bSGeorge Zhang entry->qp.flags = flags; 90706164d2bSGeorge Zhang entry->qp.produce_size = produce_size; 90806164d2bSGeorge Zhang entry->qp.consume_size = consume_size; 90906164d2bSGeorge Zhang entry->qp.ref_count = 0; 91006164d2bSGeorge Zhang entry->num_ppns = num_ppns; 91106164d2bSGeorge Zhang entry->produce_q = produce_q; 91206164d2bSGeorge Zhang entry->consume_q = consume_q; 91306164d2bSGeorge Zhang INIT_LIST_HEAD(&entry->qp.list_item); 91406164d2bSGeorge Zhang 91506164d2bSGeorge Zhang /* Add resource obj */ 91606164d2bSGeorge Zhang result = vmci_resource_add(&entry->resource, 91706164d2bSGeorge Zhang VMCI_RESOURCE_TYPE_QPAIR_GUEST, 91806164d2bSGeorge Zhang handle); 91906164d2bSGeorge Zhang entry->qp.handle = vmci_resource_handle(&entry->resource); 92006164d2bSGeorge Zhang if ((result != VMCI_SUCCESS) || 92106164d2bSGeorge Zhang qp_list_find(&qp_guest_endpoints, entry->qp.handle)) { 92206164d2bSGeorge Zhang pr_warn("Failed to add new resource (handle=0x%x:0x%x), error: %d", 92306164d2bSGeorge Zhang handle.context, handle.resource, result); 92406164d2bSGeorge Zhang kfree(entry); 92506164d2bSGeorge Zhang entry = NULL; 92606164d2bSGeorge Zhang } 92706164d2bSGeorge Zhang } 92806164d2bSGeorge Zhang return entry; 92906164d2bSGeorge Zhang } 93006164d2bSGeorge Zhang 93106164d2bSGeorge Zhang /* 93206164d2bSGeorge Zhang * Frees a qp_guest_endpoint structure. 93306164d2bSGeorge Zhang */ 93406164d2bSGeorge Zhang static void qp_guest_endpoint_destroy(struct qp_guest_endpoint *entry) 93506164d2bSGeorge Zhang { 93606164d2bSGeorge Zhang qp_free_ppn_set(&entry->ppn_set); 93706164d2bSGeorge Zhang qp_cleanup_queue_mutex(entry->produce_q, entry->consume_q); 93806164d2bSGeorge Zhang qp_free_queue(entry->produce_q, entry->qp.produce_size); 93906164d2bSGeorge Zhang qp_free_queue(entry->consume_q, entry->qp.consume_size); 94006164d2bSGeorge Zhang /* Unlink from resource hash table and free callback */ 94106164d2bSGeorge Zhang vmci_resource_remove(&entry->resource); 94206164d2bSGeorge Zhang 94306164d2bSGeorge Zhang kfree(entry); 94406164d2bSGeorge Zhang } 94506164d2bSGeorge Zhang 94606164d2bSGeorge Zhang /* 94706164d2bSGeorge Zhang * Helper to make a queue_pairAlloc hypercall when the driver is 94806164d2bSGeorge Zhang * supporting a guest device. 94906164d2bSGeorge Zhang */ 95006164d2bSGeorge Zhang static int qp_alloc_hypercall(const struct qp_guest_endpoint *entry) 95106164d2bSGeorge Zhang { 95206164d2bSGeorge Zhang struct vmci_qp_alloc_msg *alloc_msg; 95306164d2bSGeorge Zhang size_t msg_size; 95406164d2bSGeorge Zhang int result; 95506164d2bSGeorge Zhang 95606164d2bSGeorge Zhang if (!entry || entry->num_ppns <= 2) 95706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 95806164d2bSGeorge Zhang 95906164d2bSGeorge Zhang msg_size = sizeof(*alloc_msg) + 96006164d2bSGeorge Zhang (size_t) entry->num_ppns * sizeof(u32); 96106164d2bSGeorge Zhang alloc_msg = kmalloc(msg_size, GFP_KERNEL); 96206164d2bSGeorge Zhang if (!alloc_msg) 96306164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 96406164d2bSGeorge Zhang 96506164d2bSGeorge Zhang alloc_msg->hdr.dst = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 96606164d2bSGeorge Zhang VMCI_QUEUEPAIR_ALLOC); 96706164d2bSGeorge Zhang alloc_msg->hdr.src = VMCI_ANON_SRC_HANDLE; 96806164d2bSGeorge Zhang alloc_msg->hdr.payload_size = msg_size - VMCI_DG_HEADERSIZE; 96906164d2bSGeorge Zhang alloc_msg->handle = entry->qp.handle; 97006164d2bSGeorge Zhang alloc_msg->peer = entry->qp.peer; 97106164d2bSGeorge Zhang alloc_msg->flags = entry->qp.flags; 97206164d2bSGeorge Zhang alloc_msg->produce_size = entry->qp.produce_size; 97306164d2bSGeorge Zhang alloc_msg->consume_size = entry->qp.consume_size; 97406164d2bSGeorge Zhang alloc_msg->num_ppns = entry->num_ppns; 97506164d2bSGeorge Zhang 97606164d2bSGeorge Zhang result = qp_populate_ppn_set((u8 *)alloc_msg + sizeof(*alloc_msg), 97706164d2bSGeorge Zhang &entry->ppn_set); 97806164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 97906164d2bSGeorge Zhang result = vmci_send_datagram(&alloc_msg->hdr); 98006164d2bSGeorge Zhang 98106164d2bSGeorge Zhang kfree(alloc_msg); 98206164d2bSGeorge Zhang 98306164d2bSGeorge Zhang return result; 98406164d2bSGeorge Zhang } 98506164d2bSGeorge Zhang 98606164d2bSGeorge Zhang /* 98706164d2bSGeorge Zhang * Helper to make a queue_pairDetach hypercall when the driver is 98806164d2bSGeorge Zhang * supporting a guest device. 98906164d2bSGeorge Zhang */ 99006164d2bSGeorge Zhang static int qp_detatch_hypercall(struct vmci_handle handle) 99106164d2bSGeorge Zhang { 99206164d2bSGeorge Zhang struct vmci_qp_detach_msg detach_msg; 99306164d2bSGeorge Zhang 99406164d2bSGeorge Zhang detach_msg.hdr.dst = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 99506164d2bSGeorge Zhang VMCI_QUEUEPAIR_DETACH); 99606164d2bSGeorge Zhang detach_msg.hdr.src = VMCI_ANON_SRC_HANDLE; 99706164d2bSGeorge Zhang detach_msg.hdr.payload_size = sizeof(handle); 99806164d2bSGeorge Zhang detach_msg.handle = handle; 99906164d2bSGeorge Zhang 100006164d2bSGeorge Zhang return vmci_send_datagram(&detach_msg.hdr); 100106164d2bSGeorge Zhang } 100206164d2bSGeorge Zhang 100306164d2bSGeorge Zhang /* 100406164d2bSGeorge Zhang * Adds the given entry to the list. Assumes that the list is locked. 100506164d2bSGeorge Zhang */ 100606164d2bSGeorge Zhang static void qp_list_add_entry(struct qp_list *qp_list, struct qp_entry *entry) 100706164d2bSGeorge Zhang { 100806164d2bSGeorge Zhang if (entry) 100906164d2bSGeorge Zhang list_add(&entry->list_item, &qp_list->head); 101006164d2bSGeorge Zhang } 101106164d2bSGeorge Zhang 101206164d2bSGeorge Zhang /* 101306164d2bSGeorge Zhang * Removes the given entry from the list. Assumes that the list is locked. 101406164d2bSGeorge Zhang */ 101506164d2bSGeorge Zhang static void qp_list_remove_entry(struct qp_list *qp_list, 101606164d2bSGeorge Zhang struct qp_entry *entry) 101706164d2bSGeorge Zhang { 101806164d2bSGeorge Zhang if (entry) 101906164d2bSGeorge Zhang list_del(&entry->list_item); 102006164d2bSGeorge Zhang } 102106164d2bSGeorge Zhang 102206164d2bSGeorge Zhang /* 102306164d2bSGeorge Zhang * Helper for VMCI queue_pair detach interface. Frees the physical 102406164d2bSGeorge Zhang * pages for the queue pair. 102506164d2bSGeorge Zhang */ 102606164d2bSGeorge Zhang static int qp_detatch_guest_work(struct vmci_handle handle) 102706164d2bSGeorge Zhang { 102806164d2bSGeorge Zhang int result; 102906164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 103006164d2bSGeorge Zhang u32 ref_count = ~0; /* To avoid compiler warning below */ 103106164d2bSGeorge Zhang 103206164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 103306164d2bSGeorge Zhang 103406164d2bSGeorge Zhang entry = qp_guest_handle_to_entry(handle); 103506164d2bSGeorge Zhang if (!entry) { 103606164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 103706164d2bSGeorge Zhang return VMCI_ERROR_NOT_FOUND; 103806164d2bSGeorge Zhang } 103906164d2bSGeorge Zhang 104006164d2bSGeorge Zhang if (entry->qp.flags & VMCI_QPFLAG_LOCAL) { 104106164d2bSGeorge Zhang result = VMCI_SUCCESS; 104206164d2bSGeorge Zhang 104306164d2bSGeorge Zhang if (entry->qp.ref_count > 1) { 104406164d2bSGeorge Zhang result = qp_notify_peer_local(false, handle); 104506164d2bSGeorge Zhang /* 104606164d2bSGeorge Zhang * We can fail to notify a local queuepair 104706164d2bSGeorge Zhang * because we can't allocate. We still want 104806164d2bSGeorge Zhang * to release the entry if that happens, so 104906164d2bSGeorge Zhang * don't bail out yet. 105006164d2bSGeorge Zhang */ 105106164d2bSGeorge Zhang } 105206164d2bSGeorge Zhang } else { 105306164d2bSGeorge Zhang result = qp_detatch_hypercall(handle); 105406164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 105506164d2bSGeorge Zhang /* 105606164d2bSGeorge Zhang * We failed to notify a non-local queuepair. 105706164d2bSGeorge Zhang * That other queuepair might still be 105806164d2bSGeorge Zhang * accessing the shared memory, so don't 105906164d2bSGeorge Zhang * release the entry yet. It will get cleaned 106006164d2bSGeorge Zhang * up by VMCIqueue_pair_Exit() if necessary 106106164d2bSGeorge Zhang * (assuming we are going away, otherwise why 106206164d2bSGeorge Zhang * did this fail?). 106306164d2bSGeorge Zhang */ 106406164d2bSGeorge Zhang 106506164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 106606164d2bSGeorge Zhang return result; 106706164d2bSGeorge Zhang } 106806164d2bSGeorge Zhang } 106906164d2bSGeorge Zhang 107006164d2bSGeorge Zhang /* 107106164d2bSGeorge Zhang * If we get here then we either failed to notify a local queuepair, or 107206164d2bSGeorge Zhang * we succeeded in all cases. Release the entry if required. 107306164d2bSGeorge Zhang */ 107406164d2bSGeorge Zhang 107506164d2bSGeorge Zhang entry->qp.ref_count--; 107606164d2bSGeorge Zhang if (entry->qp.ref_count == 0) 107706164d2bSGeorge Zhang qp_list_remove_entry(&qp_guest_endpoints, &entry->qp); 107806164d2bSGeorge Zhang 107906164d2bSGeorge Zhang /* If we didn't remove the entry, this could change once we unlock. */ 108006164d2bSGeorge Zhang if (entry) 108106164d2bSGeorge Zhang ref_count = entry->qp.ref_count; 108206164d2bSGeorge Zhang 108306164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 108406164d2bSGeorge Zhang 108506164d2bSGeorge Zhang if (ref_count == 0) 108606164d2bSGeorge Zhang qp_guest_endpoint_destroy(entry); 108706164d2bSGeorge Zhang 108806164d2bSGeorge Zhang return result; 108906164d2bSGeorge Zhang } 109006164d2bSGeorge Zhang 109106164d2bSGeorge Zhang /* 109206164d2bSGeorge Zhang * This functions handles the actual allocation of a VMCI queue 109306164d2bSGeorge Zhang * pair guest endpoint. Allocates physical pages for the queue 109406164d2bSGeorge Zhang * pair. It makes OS dependent calls through generic wrappers. 109506164d2bSGeorge Zhang */ 109606164d2bSGeorge Zhang static int qp_alloc_guest_work(struct vmci_handle *handle, 109706164d2bSGeorge Zhang struct vmci_queue **produce_q, 109806164d2bSGeorge Zhang u64 produce_size, 109906164d2bSGeorge Zhang struct vmci_queue **consume_q, 110006164d2bSGeorge Zhang u64 consume_size, 110106164d2bSGeorge Zhang u32 peer, 110206164d2bSGeorge Zhang u32 flags, 110306164d2bSGeorge Zhang u32 priv_flags) 110406164d2bSGeorge Zhang { 110506164d2bSGeorge Zhang const u64 num_produce_pages = 110642281d20SAndy King DIV_ROUND_UP(produce_size, PAGE_SIZE) + 1; 110706164d2bSGeorge Zhang const u64 num_consume_pages = 110842281d20SAndy King DIV_ROUND_UP(consume_size, PAGE_SIZE) + 1; 110906164d2bSGeorge Zhang void *my_produce_q = NULL; 111006164d2bSGeorge Zhang void *my_consume_q = NULL; 111106164d2bSGeorge Zhang int result; 111206164d2bSGeorge Zhang struct qp_guest_endpoint *queue_pair_entry = NULL; 111306164d2bSGeorge Zhang 111406164d2bSGeorge Zhang if (priv_flags != VMCI_NO_PRIVILEGE_FLAGS) 111506164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 111606164d2bSGeorge Zhang 111706164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 111806164d2bSGeorge Zhang 111906164d2bSGeorge Zhang queue_pair_entry = qp_guest_handle_to_entry(*handle); 112006164d2bSGeorge Zhang if (queue_pair_entry) { 112106164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) { 112206164d2bSGeorge Zhang /* Local attach case. */ 112306164d2bSGeorge Zhang if (queue_pair_entry->qp.ref_count > 1) { 112406164d2bSGeorge Zhang pr_devel("Error attempting to attach more than once\n"); 112506164d2bSGeorge Zhang result = VMCI_ERROR_UNAVAILABLE; 112606164d2bSGeorge Zhang goto error_keep_entry; 112706164d2bSGeorge Zhang } 112806164d2bSGeorge Zhang 112906164d2bSGeorge Zhang if (queue_pair_entry->qp.produce_size != consume_size || 113006164d2bSGeorge Zhang queue_pair_entry->qp.consume_size != 113106164d2bSGeorge Zhang produce_size || 113206164d2bSGeorge Zhang queue_pair_entry->qp.flags != 113306164d2bSGeorge Zhang (flags & ~VMCI_QPFLAG_ATTACH_ONLY)) { 113406164d2bSGeorge Zhang pr_devel("Error mismatched queue pair in local attach\n"); 113506164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_MISMATCH; 113606164d2bSGeorge Zhang goto error_keep_entry; 113706164d2bSGeorge Zhang } 113806164d2bSGeorge Zhang 113906164d2bSGeorge Zhang /* 114006164d2bSGeorge Zhang * Do a local attach. We swap the consume and 114106164d2bSGeorge Zhang * produce queues for the attacher and deliver 114206164d2bSGeorge Zhang * an attach event. 114306164d2bSGeorge Zhang */ 114406164d2bSGeorge Zhang result = qp_notify_peer_local(true, *handle); 114506164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 114606164d2bSGeorge Zhang goto error_keep_entry; 114706164d2bSGeorge Zhang 114806164d2bSGeorge Zhang my_produce_q = queue_pair_entry->consume_q; 114906164d2bSGeorge Zhang my_consume_q = queue_pair_entry->produce_q; 115006164d2bSGeorge Zhang goto out; 115106164d2bSGeorge Zhang } 115206164d2bSGeorge Zhang 115306164d2bSGeorge Zhang result = VMCI_ERROR_ALREADY_EXISTS; 115406164d2bSGeorge Zhang goto error_keep_entry; 115506164d2bSGeorge Zhang } 115606164d2bSGeorge Zhang 115706164d2bSGeorge Zhang my_produce_q = qp_alloc_queue(produce_size, flags); 115806164d2bSGeorge Zhang if (!my_produce_q) { 115906164d2bSGeorge Zhang pr_warn("Error allocating pages for produce queue\n"); 116006164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 116106164d2bSGeorge Zhang goto error; 116206164d2bSGeorge Zhang } 116306164d2bSGeorge Zhang 116406164d2bSGeorge Zhang my_consume_q = qp_alloc_queue(consume_size, flags); 116506164d2bSGeorge Zhang if (!my_consume_q) { 116606164d2bSGeorge Zhang pr_warn("Error allocating pages for consume queue\n"); 116706164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 116806164d2bSGeorge Zhang goto error; 116906164d2bSGeorge Zhang } 117006164d2bSGeorge Zhang 117106164d2bSGeorge Zhang queue_pair_entry = qp_guest_endpoint_create(*handle, peer, flags, 117206164d2bSGeorge Zhang produce_size, consume_size, 117306164d2bSGeorge Zhang my_produce_q, my_consume_q); 117406164d2bSGeorge Zhang if (!queue_pair_entry) { 117506164d2bSGeorge Zhang pr_warn("Error allocating memory in %s\n", __func__); 117606164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 117706164d2bSGeorge Zhang goto error; 117806164d2bSGeorge Zhang } 117906164d2bSGeorge Zhang 118006164d2bSGeorge Zhang result = qp_alloc_ppn_set(my_produce_q, num_produce_pages, my_consume_q, 118106164d2bSGeorge Zhang num_consume_pages, 118206164d2bSGeorge Zhang &queue_pair_entry->ppn_set); 118306164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 118406164d2bSGeorge Zhang pr_warn("qp_alloc_ppn_set failed\n"); 118506164d2bSGeorge Zhang goto error; 118606164d2bSGeorge Zhang } 118706164d2bSGeorge Zhang 118806164d2bSGeorge Zhang /* 118906164d2bSGeorge Zhang * It's only necessary to notify the host if this queue pair will be 119006164d2bSGeorge Zhang * attached to from another context. 119106164d2bSGeorge Zhang */ 119206164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) { 119306164d2bSGeorge Zhang /* Local create case. */ 119406164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 119506164d2bSGeorge Zhang 119606164d2bSGeorge Zhang /* 119706164d2bSGeorge Zhang * Enforce similar checks on local queue pairs as we 119806164d2bSGeorge Zhang * do for regular ones. The handle's context must 119906164d2bSGeorge Zhang * match the creator or attacher context id (here they 120006164d2bSGeorge Zhang * are both the current context id) and the 120106164d2bSGeorge Zhang * attach-only flag cannot exist during create. We 120206164d2bSGeorge Zhang * also ensure specified peer is this context or an 120306164d2bSGeorge Zhang * invalid one. 120406164d2bSGeorge Zhang */ 120506164d2bSGeorge Zhang if (queue_pair_entry->qp.handle.context != context_id || 120606164d2bSGeorge Zhang (queue_pair_entry->qp.peer != VMCI_INVALID_ID && 120706164d2bSGeorge Zhang queue_pair_entry->qp.peer != context_id)) { 120806164d2bSGeorge Zhang result = VMCI_ERROR_NO_ACCESS; 120906164d2bSGeorge Zhang goto error; 121006164d2bSGeorge Zhang } 121106164d2bSGeorge Zhang 121206164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_ATTACH_ONLY) { 121306164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 121406164d2bSGeorge Zhang goto error; 121506164d2bSGeorge Zhang } 121606164d2bSGeorge Zhang } else { 121706164d2bSGeorge Zhang result = qp_alloc_hypercall(queue_pair_entry); 121806164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 121906164d2bSGeorge Zhang pr_warn("qp_alloc_hypercall result = %d\n", result); 122006164d2bSGeorge Zhang goto error; 122106164d2bSGeorge Zhang } 122206164d2bSGeorge Zhang } 122306164d2bSGeorge Zhang 122406164d2bSGeorge Zhang qp_init_queue_mutex((struct vmci_queue *)my_produce_q, 122506164d2bSGeorge Zhang (struct vmci_queue *)my_consume_q); 122606164d2bSGeorge Zhang 122706164d2bSGeorge Zhang qp_list_add_entry(&qp_guest_endpoints, &queue_pair_entry->qp); 122806164d2bSGeorge Zhang 122906164d2bSGeorge Zhang out: 123006164d2bSGeorge Zhang queue_pair_entry->qp.ref_count++; 123106164d2bSGeorge Zhang *handle = queue_pair_entry->qp.handle; 123206164d2bSGeorge Zhang *produce_q = (struct vmci_queue *)my_produce_q; 123306164d2bSGeorge Zhang *consume_q = (struct vmci_queue *)my_consume_q; 123406164d2bSGeorge Zhang 123506164d2bSGeorge Zhang /* 123606164d2bSGeorge Zhang * We should initialize the queue pair header pages on a local 123706164d2bSGeorge Zhang * queue pair create. For non-local queue pairs, the 123806164d2bSGeorge Zhang * hypervisor initializes the header pages in the create step. 123906164d2bSGeorge Zhang */ 124006164d2bSGeorge Zhang if ((queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) && 124106164d2bSGeorge Zhang queue_pair_entry->qp.ref_count == 1) { 124206164d2bSGeorge Zhang vmci_q_header_init((*produce_q)->q_header, *handle); 124306164d2bSGeorge Zhang vmci_q_header_init((*consume_q)->q_header, *handle); 124406164d2bSGeorge Zhang } 124506164d2bSGeorge Zhang 124606164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 124706164d2bSGeorge Zhang 124806164d2bSGeorge Zhang return VMCI_SUCCESS; 124906164d2bSGeorge Zhang 125006164d2bSGeorge Zhang error: 125106164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 125206164d2bSGeorge Zhang if (queue_pair_entry) { 125306164d2bSGeorge Zhang /* The queues will be freed inside the destroy routine. */ 125406164d2bSGeorge Zhang qp_guest_endpoint_destroy(queue_pair_entry); 125506164d2bSGeorge Zhang } else { 125606164d2bSGeorge Zhang qp_free_queue(my_produce_q, produce_size); 125706164d2bSGeorge Zhang qp_free_queue(my_consume_q, consume_size); 125806164d2bSGeorge Zhang } 125906164d2bSGeorge Zhang return result; 126006164d2bSGeorge Zhang 126106164d2bSGeorge Zhang error_keep_entry: 126206164d2bSGeorge Zhang /* This path should only be used when an existing entry was found. */ 126306164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 126406164d2bSGeorge Zhang return result; 126506164d2bSGeorge Zhang } 126606164d2bSGeorge Zhang 126706164d2bSGeorge Zhang /* 126806164d2bSGeorge Zhang * The first endpoint issuing a queue pair allocation will create the state 126906164d2bSGeorge Zhang * of the queue pair in the queue pair broker. 127006164d2bSGeorge Zhang * 127106164d2bSGeorge Zhang * If the creator is a guest, it will associate a VMX virtual address range 127206164d2bSGeorge Zhang * with the queue pair as specified by the page_store. For compatibility with 127306164d2bSGeorge Zhang * older VMX'en, that would use a separate step to set the VMX virtual 127406164d2bSGeorge Zhang * address range, the virtual address range can be registered later using 127506164d2bSGeorge Zhang * vmci_qp_broker_set_page_store. In that case, a page_store of NULL should be 127606164d2bSGeorge Zhang * used. 127706164d2bSGeorge Zhang * 127806164d2bSGeorge Zhang * If the creator is the host, a page_store of NULL should be used as well, 127906164d2bSGeorge Zhang * since the host is not able to supply a page store for the queue pair. 128006164d2bSGeorge Zhang * 128106164d2bSGeorge Zhang * For older VMX and host callers, the queue pair will be created in the 128206164d2bSGeorge Zhang * VMCIQPB_CREATED_NO_MEM state, and for current VMX callers, it will be 128306164d2bSGeorge Zhang * created in VMCOQPB_CREATED_MEM state. 128406164d2bSGeorge Zhang */ 128506164d2bSGeorge Zhang static int qp_broker_create(struct vmci_handle handle, 128606164d2bSGeorge Zhang u32 peer, 128706164d2bSGeorge Zhang u32 flags, 128806164d2bSGeorge Zhang u32 priv_flags, 128906164d2bSGeorge Zhang u64 produce_size, 129006164d2bSGeorge Zhang u64 consume_size, 129106164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 129206164d2bSGeorge Zhang struct vmci_ctx *context, 129306164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 129406164d2bSGeorge Zhang void *client_data, struct qp_broker_entry **ent) 129506164d2bSGeorge Zhang { 129606164d2bSGeorge Zhang struct qp_broker_entry *entry = NULL; 129706164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 129806164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 129906164d2bSGeorge Zhang int result; 130006164d2bSGeorge Zhang u64 guest_produce_size; 130106164d2bSGeorge Zhang u64 guest_consume_size; 130206164d2bSGeorge Zhang 130306164d2bSGeorge Zhang /* Do not create if the caller asked not to. */ 130406164d2bSGeorge Zhang if (flags & VMCI_QPFLAG_ATTACH_ONLY) 130506164d2bSGeorge Zhang return VMCI_ERROR_NOT_FOUND; 130606164d2bSGeorge Zhang 130706164d2bSGeorge Zhang /* 130806164d2bSGeorge Zhang * Creator's context ID should match handle's context ID or the creator 130906164d2bSGeorge Zhang * must allow the context in handle's context ID as the "peer". 131006164d2bSGeorge Zhang */ 131106164d2bSGeorge Zhang if (handle.context != context_id && handle.context != peer) 131206164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 131306164d2bSGeorge Zhang 131406164d2bSGeorge Zhang if (VMCI_CONTEXT_IS_VM(context_id) && VMCI_CONTEXT_IS_VM(peer)) 131506164d2bSGeorge Zhang return VMCI_ERROR_DST_UNREACHABLE; 131606164d2bSGeorge Zhang 131706164d2bSGeorge Zhang /* 131806164d2bSGeorge Zhang * Creator's context ID for local queue pairs should match the 131906164d2bSGeorge Zhang * peer, if a peer is specified. 132006164d2bSGeorge Zhang */ 132106164d2bSGeorge Zhang if (is_local && peer != VMCI_INVALID_ID && context_id != peer) 132206164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 132306164d2bSGeorge Zhang 132406164d2bSGeorge Zhang entry = kzalloc(sizeof(*entry), GFP_ATOMIC); 132506164d2bSGeorge Zhang if (!entry) 132606164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 132706164d2bSGeorge Zhang 132806164d2bSGeorge Zhang if (vmci_ctx_get_id(context) == VMCI_HOST_CONTEXT_ID && !is_local) { 132906164d2bSGeorge Zhang /* 133006164d2bSGeorge Zhang * The queue pair broker entry stores values from the guest 133106164d2bSGeorge Zhang * point of view, so a creating host side endpoint should swap 133206164d2bSGeorge Zhang * produce and consume values -- unless it is a local queue 133306164d2bSGeorge Zhang * pair, in which case no swapping is necessary, since the local 133406164d2bSGeorge Zhang * attacher will swap queues. 133506164d2bSGeorge Zhang */ 133606164d2bSGeorge Zhang 133706164d2bSGeorge Zhang guest_produce_size = consume_size; 133806164d2bSGeorge Zhang guest_consume_size = produce_size; 133906164d2bSGeorge Zhang } else { 134006164d2bSGeorge Zhang guest_produce_size = produce_size; 134106164d2bSGeorge Zhang guest_consume_size = consume_size; 134206164d2bSGeorge Zhang } 134306164d2bSGeorge Zhang 134406164d2bSGeorge Zhang entry->qp.handle = handle; 134506164d2bSGeorge Zhang entry->qp.peer = peer; 134606164d2bSGeorge Zhang entry->qp.flags = flags; 134706164d2bSGeorge Zhang entry->qp.produce_size = guest_produce_size; 134806164d2bSGeorge Zhang entry->qp.consume_size = guest_consume_size; 134906164d2bSGeorge Zhang entry->qp.ref_count = 1; 135006164d2bSGeorge Zhang entry->create_id = context_id; 135106164d2bSGeorge Zhang entry->attach_id = VMCI_INVALID_ID; 135206164d2bSGeorge Zhang entry->state = VMCIQPB_NEW; 135306164d2bSGeorge Zhang entry->require_trusted_attach = 135406164d2bSGeorge Zhang !!(context->priv_flags & VMCI_PRIVILEGE_FLAG_RESTRICTED); 135506164d2bSGeorge Zhang entry->created_by_trusted = 135606164d2bSGeorge Zhang !!(priv_flags & VMCI_PRIVILEGE_FLAG_TRUSTED); 135706164d2bSGeorge Zhang entry->vmci_page_files = false; 135806164d2bSGeorge Zhang entry->wakeup_cb = wakeup_cb; 135906164d2bSGeorge Zhang entry->client_data = client_data; 136006164d2bSGeorge Zhang entry->produce_q = qp_host_alloc_queue(guest_produce_size); 136106164d2bSGeorge Zhang if (entry->produce_q == NULL) { 136206164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 136306164d2bSGeorge Zhang goto error; 136406164d2bSGeorge Zhang } 136506164d2bSGeorge Zhang entry->consume_q = qp_host_alloc_queue(guest_consume_size); 136606164d2bSGeorge Zhang if (entry->consume_q == NULL) { 136706164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 136806164d2bSGeorge Zhang goto error; 136906164d2bSGeorge Zhang } 137006164d2bSGeorge Zhang 137106164d2bSGeorge Zhang qp_init_queue_mutex(entry->produce_q, entry->consume_q); 137206164d2bSGeorge Zhang 137306164d2bSGeorge Zhang INIT_LIST_HEAD(&entry->qp.list_item); 137406164d2bSGeorge Zhang 137506164d2bSGeorge Zhang if (is_local) { 137606164d2bSGeorge Zhang u8 *tmp; 137706164d2bSGeorge Zhang 137806164d2bSGeorge Zhang entry->local_mem = kcalloc(QPE_NUM_PAGES(entry->qp), 137906164d2bSGeorge Zhang PAGE_SIZE, GFP_KERNEL); 138006164d2bSGeorge Zhang if (entry->local_mem == NULL) { 138106164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 138206164d2bSGeorge Zhang goto error; 138306164d2bSGeorge Zhang } 138406164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 138506164d2bSGeorge Zhang entry->produce_q->q_header = entry->local_mem; 138606164d2bSGeorge Zhang tmp = (u8 *)entry->local_mem + PAGE_SIZE * 138742281d20SAndy King (DIV_ROUND_UP(entry->qp.produce_size, PAGE_SIZE) + 1); 138806164d2bSGeorge Zhang entry->consume_q->q_header = (struct vmci_queue_header *)tmp; 138906164d2bSGeorge Zhang } else if (page_store) { 139006164d2bSGeorge Zhang /* 139106164d2bSGeorge Zhang * The VMX already initialized the queue pair headers, so no 139206164d2bSGeorge Zhang * need for the kernel side to do that. 139306164d2bSGeorge Zhang */ 139406164d2bSGeorge Zhang result = qp_host_register_user_memory(page_store, 139506164d2bSGeorge Zhang entry->produce_q, 139606164d2bSGeorge Zhang entry->consume_q); 139706164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 139806164d2bSGeorge Zhang goto error; 139906164d2bSGeorge Zhang 140006164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 140106164d2bSGeorge Zhang } else { 140206164d2bSGeorge Zhang /* 140306164d2bSGeorge Zhang * A create without a page_store may be either a host 140406164d2bSGeorge Zhang * side create (in which case we are waiting for the 140506164d2bSGeorge Zhang * guest side to supply the memory) or an old style 140606164d2bSGeorge Zhang * queue pair create (in which case we will expect a 140706164d2bSGeorge Zhang * set page store call as the next step). 140806164d2bSGeorge Zhang */ 140906164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_NO_MEM; 141006164d2bSGeorge Zhang } 141106164d2bSGeorge Zhang 141206164d2bSGeorge Zhang qp_list_add_entry(&qp_broker_list, &entry->qp); 141306164d2bSGeorge Zhang if (ent != NULL) 141406164d2bSGeorge Zhang *ent = entry; 141506164d2bSGeorge Zhang 141606164d2bSGeorge Zhang /* Add to resource obj */ 141706164d2bSGeorge Zhang result = vmci_resource_add(&entry->resource, 141806164d2bSGeorge Zhang VMCI_RESOURCE_TYPE_QPAIR_HOST, 141906164d2bSGeorge Zhang handle); 142006164d2bSGeorge Zhang if (result != VMCI_SUCCESS) { 142106164d2bSGeorge Zhang pr_warn("Failed to add new resource (handle=0x%x:0x%x), error: %d", 142206164d2bSGeorge Zhang handle.context, handle.resource, result); 142306164d2bSGeorge Zhang goto error; 142406164d2bSGeorge Zhang } 142506164d2bSGeorge Zhang 142606164d2bSGeorge Zhang entry->qp.handle = vmci_resource_handle(&entry->resource); 142706164d2bSGeorge Zhang if (is_local) { 142806164d2bSGeorge Zhang vmci_q_header_init(entry->produce_q->q_header, 142906164d2bSGeorge Zhang entry->qp.handle); 143006164d2bSGeorge Zhang vmci_q_header_init(entry->consume_q->q_header, 143106164d2bSGeorge Zhang entry->qp.handle); 143206164d2bSGeorge Zhang } 143306164d2bSGeorge Zhang 143406164d2bSGeorge Zhang vmci_ctx_qp_create(context, entry->qp.handle); 143506164d2bSGeorge Zhang 143606164d2bSGeorge Zhang return VMCI_SUCCESS; 143706164d2bSGeorge Zhang 143806164d2bSGeorge Zhang error: 143906164d2bSGeorge Zhang if (entry != NULL) { 144006164d2bSGeorge Zhang qp_host_free_queue(entry->produce_q, guest_produce_size); 144106164d2bSGeorge Zhang qp_host_free_queue(entry->consume_q, guest_consume_size); 144206164d2bSGeorge Zhang kfree(entry); 144306164d2bSGeorge Zhang } 144406164d2bSGeorge Zhang 144506164d2bSGeorge Zhang return result; 144606164d2bSGeorge Zhang } 144706164d2bSGeorge Zhang 144806164d2bSGeorge Zhang /* 144906164d2bSGeorge Zhang * Enqueues an event datagram to notify the peer VM attached to 145006164d2bSGeorge Zhang * the given queue pair handle about attach/detach event by the 145106164d2bSGeorge Zhang * given VM. Returns Payload size of datagram enqueued on 145206164d2bSGeorge Zhang * success, error code otherwise. 145306164d2bSGeorge Zhang */ 145406164d2bSGeorge Zhang static int qp_notify_peer(bool attach, 145506164d2bSGeorge Zhang struct vmci_handle handle, 145606164d2bSGeorge Zhang u32 my_id, 145706164d2bSGeorge Zhang u32 peer_id) 145806164d2bSGeorge Zhang { 145906164d2bSGeorge Zhang int rv; 146006164d2bSGeorge Zhang struct vmci_event_qp ev; 146106164d2bSGeorge Zhang 146206164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || my_id == VMCI_INVALID_ID || 146306164d2bSGeorge Zhang peer_id == VMCI_INVALID_ID) 146406164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 146506164d2bSGeorge Zhang 146606164d2bSGeorge Zhang /* 146706164d2bSGeorge Zhang * In vmci_ctx_enqueue_datagram() we enforce the upper limit on 146806164d2bSGeorge Zhang * number of pending events from the hypervisor to a given VM 146906164d2bSGeorge Zhang * otherwise a rogue VM could do an arbitrary number of attach 147006164d2bSGeorge Zhang * and detach operations causing memory pressure in the host 147106164d2bSGeorge Zhang * kernel. 147206164d2bSGeorge Zhang */ 147306164d2bSGeorge Zhang 147406164d2bSGeorge Zhang ev.msg.hdr.dst = vmci_make_handle(peer_id, VMCI_EVENT_HANDLER); 147506164d2bSGeorge Zhang ev.msg.hdr.src = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 147606164d2bSGeorge Zhang VMCI_CONTEXT_RESOURCE_ID); 147706164d2bSGeorge Zhang ev.msg.hdr.payload_size = sizeof(ev) - sizeof(ev.msg.hdr); 147806164d2bSGeorge Zhang ev.msg.event_data.event = attach ? 147906164d2bSGeorge Zhang VMCI_EVENT_QP_PEER_ATTACH : VMCI_EVENT_QP_PEER_DETACH; 148006164d2bSGeorge Zhang ev.payload.handle = handle; 148106164d2bSGeorge Zhang ev.payload.peer_id = my_id; 148206164d2bSGeorge Zhang 148306164d2bSGeorge Zhang rv = vmci_datagram_dispatch(VMCI_HYPERVISOR_CONTEXT_ID, 148406164d2bSGeorge Zhang &ev.msg.hdr, false); 148506164d2bSGeorge Zhang if (rv < VMCI_SUCCESS) 148606164d2bSGeorge Zhang pr_warn("Failed to enqueue queue_pair %s event datagram for context (ID=0x%x)\n", 148706164d2bSGeorge Zhang attach ? "ATTACH" : "DETACH", peer_id); 148806164d2bSGeorge Zhang 148906164d2bSGeorge Zhang return rv; 149006164d2bSGeorge Zhang } 149106164d2bSGeorge Zhang 149206164d2bSGeorge Zhang /* 149306164d2bSGeorge Zhang * The second endpoint issuing a queue pair allocation will attach to 149406164d2bSGeorge Zhang * the queue pair registered with the queue pair broker. 149506164d2bSGeorge Zhang * 149606164d2bSGeorge Zhang * If the attacher is a guest, it will associate a VMX virtual address 149706164d2bSGeorge Zhang * range with the queue pair as specified by the page_store. At this 149806164d2bSGeorge Zhang * point, the already attach host endpoint may start using the queue 149906164d2bSGeorge Zhang * pair, and an attach event is sent to it. For compatibility with 150006164d2bSGeorge Zhang * older VMX'en, that used a separate step to set the VMX virtual 150106164d2bSGeorge Zhang * address range, the virtual address range can be registered later 150206164d2bSGeorge Zhang * using vmci_qp_broker_set_page_store. In that case, a page_store of 150306164d2bSGeorge Zhang * NULL should be used, and the attach event will be generated once 150406164d2bSGeorge Zhang * the actual page store has been set. 150506164d2bSGeorge Zhang * 150606164d2bSGeorge Zhang * If the attacher is the host, a page_store of NULL should be used as 150706164d2bSGeorge Zhang * well, since the page store information is already set by the guest. 150806164d2bSGeorge Zhang * 150906164d2bSGeorge Zhang * For new VMX and host callers, the queue pair will be moved to the 151006164d2bSGeorge Zhang * VMCIQPB_ATTACHED_MEM state, and for older VMX callers, it will be 151106164d2bSGeorge Zhang * moved to the VMCOQPB_ATTACHED_NO_MEM state. 151206164d2bSGeorge Zhang */ 151306164d2bSGeorge Zhang static int qp_broker_attach(struct qp_broker_entry *entry, 151406164d2bSGeorge Zhang u32 peer, 151506164d2bSGeorge Zhang u32 flags, 151606164d2bSGeorge Zhang u32 priv_flags, 151706164d2bSGeorge Zhang u64 produce_size, 151806164d2bSGeorge Zhang u64 consume_size, 151906164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 152006164d2bSGeorge Zhang struct vmci_ctx *context, 152106164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 152206164d2bSGeorge Zhang void *client_data, 152306164d2bSGeorge Zhang struct qp_broker_entry **ent) 152406164d2bSGeorge Zhang { 152506164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 152606164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 152706164d2bSGeorge Zhang int result; 152806164d2bSGeorge Zhang 152906164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM && 153006164d2bSGeorge Zhang entry->state != VMCIQPB_CREATED_MEM) 153106164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 153206164d2bSGeorge Zhang 153306164d2bSGeorge Zhang if (is_local) { 153406164d2bSGeorge Zhang if (!(entry->qp.flags & VMCI_QPFLAG_LOCAL) || 153506164d2bSGeorge Zhang context_id != entry->create_id) { 153606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 153706164d2bSGeorge Zhang } 153806164d2bSGeorge Zhang } else if (context_id == entry->create_id || 153906164d2bSGeorge Zhang context_id == entry->attach_id) { 154006164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 154106164d2bSGeorge Zhang } 154206164d2bSGeorge Zhang 154306164d2bSGeorge Zhang if (VMCI_CONTEXT_IS_VM(context_id) && 154406164d2bSGeorge Zhang VMCI_CONTEXT_IS_VM(entry->create_id)) 154506164d2bSGeorge Zhang return VMCI_ERROR_DST_UNREACHABLE; 154606164d2bSGeorge Zhang 154706164d2bSGeorge Zhang /* 154806164d2bSGeorge Zhang * If we are attaching from a restricted context then the queuepair 154906164d2bSGeorge Zhang * must have been created by a trusted endpoint. 155006164d2bSGeorge Zhang */ 155106164d2bSGeorge Zhang if ((context->priv_flags & VMCI_PRIVILEGE_FLAG_RESTRICTED) && 155206164d2bSGeorge Zhang !entry->created_by_trusted) 155306164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 155406164d2bSGeorge Zhang 155506164d2bSGeorge Zhang /* 155606164d2bSGeorge Zhang * If we are attaching to a queuepair that was created by a restricted 155706164d2bSGeorge Zhang * context then we must be trusted. 155806164d2bSGeorge Zhang */ 155906164d2bSGeorge Zhang if (entry->require_trusted_attach && 156006164d2bSGeorge Zhang (!(priv_flags & VMCI_PRIVILEGE_FLAG_TRUSTED))) 156106164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 156206164d2bSGeorge Zhang 156306164d2bSGeorge Zhang /* 156406164d2bSGeorge Zhang * If the creator specifies VMCI_INVALID_ID in "peer" field, access 156506164d2bSGeorge Zhang * control check is not performed. 156606164d2bSGeorge Zhang */ 156706164d2bSGeorge Zhang if (entry->qp.peer != VMCI_INVALID_ID && entry->qp.peer != context_id) 156806164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 156906164d2bSGeorge Zhang 157006164d2bSGeorge Zhang if (entry->create_id == VMCI_HOST_CONTEXT_ID) { 157106164d2bSGeorge Zhang /* 157206164d2bSGeorge Zhang * Do not attach if the caller doesn't support Host Queue Pairs 157306164d2bSGeorge Zhang * and a host created this queue pair. 157406164d2bSGeorge Zhang */ 157506164d2bSGeorge Zhang 157606164d2bSGeorge Zhang if (!vmci_ctx_supports_host_qp(context)) 157706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_RESOURCE; 157806164d2bSGeorge Zhang 157906164d2bSGeorge Zhang } else if (context_id == VMCI_HOST_CONTEXT_ID) { 158006164d2bSGeorge Zhang struct vmci_ctx *create_context; 158106164d2bSGeorge Zhang bool supports_host_qp; 158206164d2bSGeorge Zhang 158306164d2bSGeorge Zhang /* 158406164d2bSGeorge Zhang * Do not attach a host to a user created queue pair if that 158506164d2bSGeorge Zhang * user doesn't support host queue pair end points. 158606164d2bSGeorge Zhang */ 158706164d2bSGeorge Zhang 158806164d2bSGeorge Zhang create_context = vmci_ctx_get(entry->create_id); 158906164d2bSGeorge Zhang supports_host_qp = vmci_ctx_supports_host_qp(create_context); 159006164d2bSGeorge Zhang vmci_ctx_put(create_context); 159106164d2bSGeorge Zhang 159206164d2bSGeorge Zhang if (!supports_host_qp) 159306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_RESOURCE; 159406164d2bSGeorge Zhang } 159506164d2bSGeorge Zhang 159606164d2bSGeorge Zhang if ((entry->qp.flags & ~VMCI_QP_ASYMM) != (flags & ~VMCI_QP_ASYMM_PEER)) 159706164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 159806164d2bSGeorge Zhang 159906164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 160006164d2bSGeorge Zhang /* 160106164d2bSGeorge Zhang * The queue pair broker entry stores values from the guest 160206164d2bSGeorge Zhang * point of view, so an attaching guest should match the values 160306164d2bSGeorge Zhang * stored in the entry. 160406164d2bSGeorge Zhang */ 160506164d2bSGeorge Zhang 160606164d2bSGeorge Zhang if (entry->qp.produce_size != produce_size || 160706164d2bSGeorge Zhang entry->qp.consume_size != consume_size) { 160806164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 160906164d2bSGeorge Zhang } 161006164d2bSGeorge Zhang } else if (entry->qp.produce_size != consume_size || 161106164d2bSGeorge Zhang entry->qp.consume_size != produce_size) { 161206164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 161306164d2bSGeorge Zhang } 161406164d2bSGeorge Zhang 161506164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 161606164d2bSGeorge Zhang /* 161706164d2bSGeorge Zhang * If a guest attached to a queue pair, it will supply 161806164d2bSGeorge Zhang * the backing memory. If this is a pre NOVMVM vmx, 161906164d2bSGeorge Zhang * the backing memory will be supplied by calling 162006164d2bSGeorge Zhang * vmci_qp_broker_set_page_store() following the 162106164d2bSGeorge Zhang * return of the vmci_qp_broker_alloc() call. If it is 162206164d2bSGeorge Zhang * a vmx of version NOVMVM or later, the page store 162306164d2bSGeorge Zhang * must be supplied as part of the 162406164d2bSGeorge Zhang * vmci_qp_broker_alloc call. Under all circumstances 162506164d2bSGeorge Zhang * must the initially created queue pair not have any 162606164d2bSGeorge Zhang * memory associated with it already. 162706164d2bSGeorge Zhang */ 162806164d2bSGeorge Zhang 162906164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM) 163006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 163106164d2bSGeorge Zhang 163206164d2bSGeorge Zhang if (page_store != NULL) { 163306164d2bSGeorge Zhang /* 163406164d2bSGeorge Zhang * Patch up host state to point to guest 163506164d2bSGeorge Zhang * supplied memory. The VMX already 163606164d2bSGeorge Zhang * initialized the queue pair headers, so no 163706164d2bSGeorge Zhang * need for the kernel side to do that. 163806164d2bSGeorge Zhang */ 163906164d2bSGeorge Zhang 164006164d2bSGeorge Zhang result = qp_host_register_user_memory(page_store, 164106164d2bSGeorge Zhang entry->produce_q, 164206164d2bSGeorge Zhang entry->consume_q); 164306164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 164406164d2bSGeorge Zhang return result; 164506164d2bSGeorge Zhang 164606164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 164706164d2bSGeorge Zhang } else { 164806164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_NO_MEM; 164906164d2bSGeorge Zhang } 165006164d2bSGeorge Zhang } else if (entry->state == VMCIQPB_CREATED_NO_MEM) { 165106164d2bSGeorge Zhang /* 165206164d2bSGeorge Zhang * The host side is attempting to attach to a queue 165306164d2bSGeorge Zhang * pair that doesn't have any memory associated with 165406164d2bSGeorge Zhang * it. This must be a pre NOVMVM vmx that hasn't set 165506164d2bSGeorge Zhang * the page store information yet, or a quiesced VM. 165606164d2bSGeorge Zhang */ 165706164d2bSGeorge Zhang 165806164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 165906164d2bSGeorge Zhang } else { 166006164d2bSGeorge Zhang /* The host side has successfully attached to a queue pair. */ 166106164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 166206164d2bSGeorge Zhang } 166306164d2bSGeorge Zhang 166406164d2bSGeorge Zhang if (entry->state == VMCIQPB_ATTACHED_MEM) { 166506164d2bSGeorge Zhang result = 166606164d2bSGeorge Zhang qp_notify_peer(true, entry->qp.handle, context_id, 166706164d2bSGeorge Zhang entry->create_id); 166806164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 166906164d2bSGeorge Zhang pr_warn("Failed to notify peer (ID=0x%x) of attach to queue pair (handle=0x%x:0x%x)\n", 167006164d2bSGeorge Zhang entry->create_id, entry->qp.handle.context, 167106164d2bSGeorge Zhang entry->qp.handle.resource); 167206164d2bSGeorge Zhang } 167306164d2bSGeorge Zhang 167406164d2bSGeorge Zhang entry->attach_id = context_id; 167506164d2bSGeorge Zhang entry->qp.ref_count++; 167606164d2bSGeorge Zhang if (wakeup_cb) { 167706164d2bSGeorge Zhang entry->wakeup_cb = wakeup_cb; 167806164d2bSGeorge Zhang entry->client_data = client_data; 167906164d2bSGeorge Zhang } 168006164d2bSGeorge Zhang 168106164d2bSGeorge Zhang /* 168206164d2bSGeorge Zhang * When attaching to local queue pairs, the context already has 168306164d2bSGeorge Zhang * an entry tracking the queue pair, so don't add another one. 168406164d2bSGeorge Zhang */ 168506164d2bSGeorge Zhang if (!is_local) 168606164d2bSGeorge Zhang vmci_ctx_qp_create(context, entry->qp.handle); 168706164d2bSGeorge Zhang 168806164d2bSGeorge Zhang if (ent != NULL) 168906164d2bSGeorge Zhang *ent = entry; 169006164d2bSGeorge Zhang 169106164d2bSGeorge Zhang return VMCI_SUCCESS; 169206164d2bSGeorge Zhang } 169306164d2bSGeorge Zhang 169406164d2bSGeorge Zhang /* 169506164d2bSGeorge Zhang * queue_pair_Alloc for use when setting up queue pair endpoints 169606164d2bSGeorge Zhang * on the host. 169706164d2bSGeorge Zhang */ 169806164d2bSGeorge Zhang static int qp_broker_alloc(struct vmci_handle handle, 169906164d2bSGeorge Zhang u32 peer, 170006164d2bSGeorge Zhang u32 flags, 170106164d2bSGeorge Zhang u32 priv_flags, 170206164d2bSGeorge Zhang u64 produce_size, 170306164d2bSGeorge Zhang u64 consume_size, 170406164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 170506164d2bSGeorge Zhang struct vmci_ctx *context, 170606164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 170706164d2bSGeorge Zhang void *client_data, 170806164d2bSGeorge Zhang struct qp_broker_entry **ent, 170906164d2bSGeorge Zhang bool *swap) 171006164d2bSGeorge Zhang { 171106164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 171206164d2bSGeorge Zhang bool create; 171306164d2bSGeorge Zhang struct qp_broker_entry *entry = NULL; 171406164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 171506164d2bSGeorge Zhang int result; 171606164d2bSGeorge Zhang 171706164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || 171806164d2bSGeorge Zhang (flags & ~VMCI_QP_ALL_FLAGS) || is_local || 171906164d2bSGeorge Zhang !(produce_size || consume_size) || 172006164d2bSGeorge Zhang !context || context_id == VMCI_INVALID_ID || 172106164d2bSGeorge Zhang handle.context == VMCI_INVALID_ID) { 172206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 172306164d2bSGeorge Zhang } 172406164d2bSGeorge Zhang 172506164d2bSGeorge Zhang if (page_store && !VMCI_QP_PAGESTORE_IS_WELLFORMED(page_store)) 172606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 172706164d2bSGeorge Zhang 172806164d2bSGeorge Zhang /* 172906164d2bSGeorge Zhang * In the initial argument check, we ensure that non-vmkernel hosts 173006164d2bSGeorge Zhang * are not allowed to create local queue pairs. 173106164d2bSGeorge Zhang */ 173206164d2bSGeorge Zhang 173306164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 173406164d2bSGeorge Zhang 173506164d2bSGeorge Zhang if (!is_local && vmci_ctx_qp_exists(context, handle)) { 173606164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) already attached to queue pair (handle=0x%x:0x%x)\n", 173706164d2bSGeorge Zhang context_id, handle.context, handle.resource); 173806164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 173906164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 174006164d2bSGeorge Zhang } 174106164d2bSGeorge Zhang 174206164d2bSGeorge Zhang if (handle.resource != VMCI_INVALID_ID) 174306164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 174406164d2bSGeorge Zhang 174506164d2bSGeorge Zhang if (!entry) { 174606164d2bSGeorge Zhang create = true; 174706164d2bSGeorge Zhang result = 174806164d2bSGeorge Zhang qp_broker_create(handle, peer, flags, priv_flags, 174906164d2bSGeorge Zhang produce_size, consume_size, page_store, 175006164d2bSGeorge Zhang context, wakeup_cb, client_data, ent); 175106164d2bSGeorge Zhang } else { 175206164d2bSGeorge Zhang create = false; 175306164d2bSGeorge Zhang result = 175406164d2bSGeorge Zhang qp_broker_attach(entry, peer, flags, priv_flags, 175506164d2bSGeorge Zhang produce_size, consume_size, page_store, 175606164d2bSGeorge Zhang context, wakeup_cb, client_data, ent); 175706164d2bSGeorge Zhang } 175806164d2bSGeorge Zhang 175906164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 176006164d2bSGeorge Zhang 176106164d2bSGeorge Zhang if (swap) 176206164d2bSGeorge Zhang *swap = (context_id == VMCI_HOST_CONTEXT_ID) && 176306164d2bSGeorge Zhang !(create && is_local); 176406164d2bSGeorge Zhang 176506164d2bSGeorge Zhang return result; 176606164d2bSGeorge Zhang } 176706164d2bSGeorge Zhang 176806164d2bSGeorge Zhang /* 176906164d2bSGeorge Zhang * This function implements the kernel API for allocating a queue 177006164d2bSGeorge Zhang * pair. 177106164d2bSGeorge Zhang */ 177206164d2bSGeorge Zhang static int qp_alloc_host_work(struct vmci_handle *handle, 177306164d2bSGeorge Zhang struct vmci_queue **produce_q, 177406164d2bSGeorge Zhang u64 produce_size, 177506164d2bSGeorge Zhang struct vmci_queue **consume_q, 177606164d2bSGeorge Zhang u64 consume_size, 177706164d2bSGeorge Zhang u32 peer, 177806164d2bSGeorge Zhang u32 flags, 177906164d2bSGeorge Zhang u32 priv_flags, 178006164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 178106164d2bSGeorge Zhang void *client_data) 178206164d2bSGeorge Zhang { 178306164d2bSGeorge Zhang struct vmci_handle new_handle; 178406164d2bSGeorge Zhang struct vmci_ctx *context; 178506164d2bSGeorge Zhang struct qp_broker_entry *entry; 178606164d2bSGeorge Zhang int result; 178706164d2bSGeorge Zhang bool swap; 178806164d2bSGeorge Zhang 178906164d2bSGeorge Zhang if (vmci_handle_is_invalid(*handle)) { 179006164d2bSGeorge Zhang new_handle = vmci_make_handle( 179106164d2bSGeorge Zhang VMCI_HOST_CONTEXT_ID, VMCI_INVALID_ID); 179206164d2bSGeorge Zhang } else 179306164d2bSGeorge Zhang new_handle = *handle; 179406164d2bSGeorge Zhang 179506164d2bSGeorge Zhang context = vmci_ctx_get(VMCI_HOST_CONTEXT_ID); 179606164d2bSGeorge Zhang entry = NULL; 179706164d2bSGeorge Zhang result = 179806164d2bSGeorge Zhang qp_broker_alloc(new_handle, peer, flags, priv_flags, 179906164d2bSGeorge Zhang produce_size, consume_size, NULL, context, 180006164d2bSGeorge Zhang wakeup_cb, client_data, &entry, &swap); 180106164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 180206164d2bSGeorge Zhang if (swap) { 180306164d2bSGeorge Zhang /* 180406164d2bSGeorge Zhang * If this is a local queue pair, the attacher 180506164d2bSGeorge Zhang * will swap around produce and consume 180606164d2bSGeorge Zhang * queues. 180706164d2bSGeorge Zhang */ 180806164d2bSGeorge Zhang 180906164d2bSGeorge Zhang *produce_q = entry->consume_q; 181006164d2bSGeorge Zhang *consume_q = entry->produce_q; 181106164d2bSGeorge Zhang } else { 181206164d2bSGeorge Zhang *produce_q = entry->produce_q; 181306164d2bSGeorge Zhang *consume_q = entry->consume_q; 181406164d2bSGeorge Zhang } 181506164d2bSGeorge Zhang 181606164d2bSGeorge Zhang *handle = vmci_resource_handle(&entry->resource); 181706164d2bSGeorge Zhang } else { 181806164d2bSGeorge Zhang *handle = VMCI_INVALID_HANDLE; 181906164d2bSGeorge Zhang pr_devel("queue pair broker failed to alloc (result=%d)\n", 182006164d2bSGeorge Zhang result); 182106164d2bSGeorge Zhang } 182206164d2bSGeorge Zhang vmci_ctx_put(context); 182306164d2bSGeorge Zhang return result; 182406164d2bSGeorge Zhang } 182506164d2bSGeorge Zhang 182606164d2bSGeorge Zhang /* 182706164d2bSGeorge Zhang * Allocates a VMCI queue_pair. Only checks validity of input 182806164d2bSGeorge Zhang * arguments. The real work is done in the host or guest 182906164d2bSGeorge Zhang * specific function. 183006164d2bSGeorge Zhang */ 183106164d2bSGeorge Zhang int vmci_qp_alloc(struct vmci_handle *handle, 183206164d2bSGeorge Zhang struct vmci_queue **produce_q, 183306164d2bSGeorge Zhang u64 produce_size, 183406164d2bSGeorge Zhang struct vmci_queue **consume_q, 183506164d2bSGeorge Zhang u64 consume_size, 183606164d2bSGeorge Zhang u32 peer, 183706164d2bSGeorge Zhang u32 flags, 183806164d2bSGeorge Zhang u32 priv_flags, 183906164d2bSGeorge Zhang bool guest_endpoint, 184006164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 184106164d2bSGeorge Zhang void *client_data) 184206164d2bSGeorge Zhang { 184306164d2bSGeorge Zhang if (!handle || !produce_q || !consume_q || 184406164d2bSGeorge Zhang (!produce_size && !consume_size) || (flags & ~VMCI_QP_ALL_FLAGS)) 184506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 184606164d2bSGeorge Zhang 184706164d2bSGeorge Zhang if (guest_endpoint) { 184806164d2bSGeorge Zhang return qp_alloc_guest_work(handle, produce_q, 184906164d2bSGeorge Zhang produce_size, consume_q, 185006164d2bSGeorge Zhang consume_size, peer, 185106164d2bSGeorge Zhang flags, priv_flags); 185206164d2bSGeorge Zhang } else { 185306164d2bSGeorge Zhang return qp_alloc_host_work(handle, produce_q, 185406164d2bSGeorge Zhang produce_size, consume_q, 185506164d2bSGeorge Zhang consume_size, peer, flags, 185606164d2bSGeorge Zhang priv_flags, wakeup_cb, client_data); 185706164d2bSGeorge Zhang } 185806164d2bSGeorge Zhang } 185906164d2bSGeorge Zhang 186006164d2bSGeorge Zhang /* 186106164d2bSGeorge Zhang * This function implements the host kernel API for detaching from 186206164d2bSGeorge Zhang * a queue pair. 186306164d2bSGeorge Zhang */ 186406164d2bSGeorge Zhang static int qp_detatch_host_work(struct vmci_handle handle) 186506164d2bSGeorge Zhang { 186606164d2bSGeorge Zhang int result; 186706164d2bSGeorge Zhang struct vmci_ctx *context; 186806164d2bSGeorge Zhang 186906164d2bSGeorge Zhang context = vmci_ctx_get(VMCI_HOST_CONTEXT_ID); 187006164d2bSGeorge Zhang 187106164d2bSGeorge Zhang result = vmci_qp_broker_detach(handle, context); 187206164d2bSGeorge Zhang 187306164d2bSGeorge Zhang vmci_ctx_put(context); 187406164d2bSGeorge Zhang return result; 187506164d2bSGeorge Zhang } 187606164d2bSGeorge Zhang 187706164d2bSGeorge Zhang /* 187806164d2bSGeorge Zhang * Detaches from a VMCI queue_pair. Only checks validity of input argument. 187906164d2bSGeorge Zhang * Real work is done in the host or guest specific function. 188006164d2bSGeorge Zhang */ 188106164d2bSGeorge Zhang static int qp_detatch(struct vmci_handle handle, bool guest_endpoint) 188206164d2bSGeorge Zhang { 188306164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) 188406164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 188506164d2bSGeorge Zhang 188606164d2bSGeorge Zhang if (guest_endpoint) 188706164d2bSGeorge Zhang return qp_detatch_guest_work(handle); 188806164d2bSGeorge Zhang else 188906164d2bSGeorge Zhang return qp_detatch_host_work(handle); 189006164d2bSGeorge Zhang } 189106164d2bSGeorge Zhang 189206164d2bSGeorge Zhang /* 189306164d2bSGeorge Zhang * Returns the entry from the head of the list. Assumes that the list is 189406164d2bSGeorge Zhang * locked. 189506164d2bSGeorge Zhang */ 189606164d2bSGeorge Zhang static struct qp_entry *qp_list_get_head(struct qp_list *qp_list) 189706164d2bSGeorge Zhang { 189806164d2bSGeorge Zhang if (!list_empty(&qp_list->head)) { 189906164d2bSGeorge Zhang struct qp_entry *entry = 190006164d2bSGeorge Zhang list_first_entry(&qp_list->head, struct qp_entry, 190106164d2bSGeorge Zhang list_item); 190206164d2bSGeorge Zhang return entry; 190306164d2bSGeorge Zhang } 190406164d2bSGeorge Zhang 190506164d2bSGeorge Zhang return NULL; 190606164d2bSGeorge Zhang } 190706164d2bSGeorge Zhang 190806164d2bSGeorge Zhang void vmci_qp_broker_exit(void) 190906164d2bSGeorge Zhang { 191006164d2bSGeorge Zhang struct qp_entry *entry; 191106164d2bSGeorge Zhang struct qp_broker_entry *be; 191206164d2bSGeorge Zhang 191306164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 191406164d2bSGeorge Zhang 191506164d2bSGeorge Zhang while ((entry = qp_list_get_head(&qp_broker_list))) { 191606164d2bSGeorge Zhang be = (struct qp_broker_entry *)entry; 191706164d2bSGeorge Zhang 191806164d2bSGeorge Zhang qp_list_remove_entry(&qp_broker_list, entry); 191906164d2bSGeorge Zhang kfree(be); 192006164d2bSGeorge Zhang } 192106164d2bSGeorge Zhang 192206164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 192306164d2bSGeorge Zhang } 192406164d2bSGeorge Zhang 192506164d2bSGeorge Zhang /* 192606164d2bSGeorge Zhang * Requests that a queue pair be allocated with the VMCI queue 192706164d2bSGeorge Zhang * pair broker. Allocates a queue pair entry if one does not 192806164d2bSGeorge Zhang * exist. Attaches to one if it exists, and retrieves the page 192906164d2bSGeorge Zhang * files backing that queue_pair. Assumes that the queue pair 193006164d2bSGeorge Zhang * broker lock is held. 193106164d2bSGeorge Zhang */ 193206164d2bSGeorge Zhang int vmci_qp_broker_alloc(struct vmci_handle handle, 193306164d2bSGeorge Zhang u32 peer, 193406164d2bSGeorge Zhang u32 flags, 193506164d2bSGeorge Zhang u32 priv_flags, 193606164d2bSGeorge Zhang u64 produce_size, 193706164d2bSGeorge Zhang u64 consume_size, 193806164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 193906164d2bSGeorge Zhang struct vmci_ctx *context) 194006164d2bSGeorge Zhang { 194106164d2bSGeorge Zhang return qp_broker_alloc(handle, peer, flags, priv_flags, 194206164d2bSGeorge Zhang produce_size, consume_size, 194306164d2bSGeorge Zhang page_store, context, NULL, NULL, NULL, NULL); 194406164d2bSGeorge Zhang } 194506164d2bSGeorge Zhang 194606164d2bSGeorge Zhang /* 194706164d2bSGeorge Zhang * VMX'en with versions lower than VMCI_VERSION_NOVMVM use a separate 194806164d2bSGeorge Zhang * step to add the UVAs of the VMX mapping of the queue pair. This function 194906164d2bSGeorge Zhang * provides backwards compatibility with such VMX'en, and takes care of 195006164d2bSGeorge Zhang * registering the page store for a queue pair previously allocated by the 195106164d2bSGeorge Zhang * VMX during create or attach. This function will move the queue pair state 195206164d2bSGeorge Zhang * to either from VMCIQBP_CREATED_NO_MEM to VMCIQBP_CREATED_MEM or 195306164d2bSGeorge Zhang * VMCIQBP_ATTACHED_NO_MEM to VMCIQBP_ATTACHED_MEM. If moving to the 195406164d2bSGeorge Zhang * attached state with memory, the queue pair is ready to be used by the 195506164d2bSGeorge Zhang * host peer, and an attached event will be generated. 195606164d2bSGeorge Zhang * 195706164d2bSGeorge Zhang * Assumes that the queue pair broker lock is held. 195806164d2bSGeorge Zhang * 195906164d2bSGeorge Zhang * This function is only used by the hosted platform, since there is no 196006164d2bSGeorge Zhang * issue with backwards compatibility for vmkernel. 196106164d2bSGeorge Zhang */ 196206164d2bSGeorge Zhang int vmci_qp_broker_set_page_store(struct vmci_handle handle, 196306164d2bSGeorge Zhang u64 produce_uva, 196406164d2bSGeorge Zhang u64 consume_uva, 196506164d2bSGeorge Zhang struct vmci_ctx *context) 196606164d2bSGeorge Zhang { 196706164d2bSGeorge Zhang struct qp_broker_entry *entry; 196806164d2bSGeorge Zhang int result; 196906164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 197006164d2bSGeorge Zhang 197106164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 197206164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 197306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 197406164d2bSGeorge Zhang 197506164d2bSGeorge Zhang /* 197606164d2bSGeorge Zhang * We only support guest to host queue pairs, so the VMX must 197706164d2bSGeorge Zhang * supply UVAs for the mapped page files. 197806164d2bSGeorge Zhang */ 197906164d2bSGeorge Zhang 198006164d2bSGeorge Zhang if (produce_uva == 0 || consume_uva == 0) 198106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 198206164d2bSGeorge Zhang 198306164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 198406164d2bSGeorge Zhang 198506164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 198606164d2bSGeorge Zhang pr_warn("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 198706164d2bSGeorge Zhang context_id, handle.context, handle.resource); 198806164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 198906164d2bSGeorge Zhang goto out; 199006164d2bSGeorge Zhang } 199106164d2bSGeorge Zhang 199206164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 199306164d2bSGeorge Zhang if (!entry) { 199406164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 199506164d2bSGeorge Zhang goto out; 199606164d2bSGeorge Zhang } 199706164d2bSGeorge Zhang 199806164d2bSGeorge Zhang /* 199906164d2bSGeorge Zhang * If I'm the owner then I can set the page store. 200006164d2bSGeorge Zhang * 200106164d2bSGeorge Zhang * Or, if a host created the queue_pair and I'm the attached peer 200206164d2bSGeorge Zhang * then I can set the page store. 200306164d2bSGeorge Zhang */ 200406164d2bSGeorge Zhang if (entry->create_id != context_id && 200506164d2bSGeorge Zhang (entry->create_id != VMCI_HOST_CONTEXT_ID || 200606164d2bSGeorge Zhang entry->attach_id != context_id)) { 200706164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTOWNER; 200806164d2bSGeorge Zhang goto out; 200906164d2bSGeorge Zhang } 201006164d2bSGeorge Zhang 201106164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM && 201206164d2bSGeorge Zhang entry->state != VMCIQPB_ATTACHED_NO_MEM) { 201306164d2bSGeorge Zhang result = VMCI_ERROR_UNAVAILABLE; 201406164d2bSGeorge Zhang goto out; 201506164d2bSGeorge Zhang } 201606164d2bSGeorge Zhang 201706164d2bSGeorge Zhang result = qp_host_get_user_memory(produce_uva, consume_uva, 201806164d2bSGeorge Zhang entry->produce_q, entry->consume_q); 201906164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 202006164d2bSGeorge Zhang goto out; 202106164d2bSGeorge Zhang 202206164d2bSGeorge Zhang result = qp_host_map_queues(entry->produce_q, entry->consume_q); 202306164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 202406164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 202506164d2bSGeorge Zhang entry->consume_q); 202606164d2bSGeorge Zhang goto out; 202706164d2bSGeorge Zhang } 202806164d2bSGeorge Zhang 202906164d2bSGeorge Zhang if (entry->state == VMCIQPB_CREATED_NO_MEM) 203006164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 203106164d2bSGeorge Zhang else 203206164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 203306164d2bSGeorge Zhang 203406164d2bSGeorge Zhang entry->vmci_page_files = true; 203506164d2bSGeorge Zhang 203606164d2bSGeorge Zhang if (entry->state == VMCIQPB_ATTACHED_MEM) { 203706164d2bSGeorge Zhang result = 203806164d2bSGeorge Zhang qp_notify_peer(true, handle, context_id, entry->create_id); 203906164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 204006164d2bSGeorge Zhang pr_warn("Failed to notify peer (ID=0x%x) of attach to queue pair (handle=0x%x:0x%x)\n", 204106164d2bSGeorge Zhang entry->create_id, entry->qp.handle.context, 204206164d2bSGeorge Zhang entry->qp.handle.resource); 204306164d2bSGeorge Zhang } 204406164d2bSGeorge Zhang } 204506164d2bSGeorge Zhang 204606164d2bSGeorge Zhang result = VMCI_SUCCESS; 204706164d2bSGeorge Zhang out: 204806164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 204906164d2bSGeorge Zhang return result; 205006164d2bSGeorge Zhang } 205106164d2bSGeorge Zhang 205206164d2bSGeorge Zhang /* 205306164d2bSGeorge Zhang * Resets saved queue headers for the given QP broker 205406164d2bSGeorge Zhang * entry. Should be used when guest memory becomes available 205506164d2bSGeorge Zhang * again, or the guest detaches. 205606164d2bSGeorge Zhang */ 205706164d2bSGeorge Zhang static void qp_reset_saved_headers(struct qp_broker_entry *entry) 205806164d2bSGeorge Zhang { 205906164d2bSGeorge Zhang entry->produce_q->saved_header = NULL; 206006164d2bSGeorge Zhang entry->consume_q->saved_header = NULL; 206106164d2bSGeorge Zhang } 206206164d2bSGeorge Zhang 206306164d2bSGeorge Zhang /* 206406164d2bSGeorge Zhang * The main entry point for detaching from a queue pair registered with the 206506164d2bSGeorge Zhang * queue pair broker. If more than one endpoint is attached to the queue 206606164d2bSGeorge Zhang * pair, the first endpoint will mainly decrement a reference count and 206706164d2bSGeorge Zhang * generate a notification to its peer. The last endpoint will clean up 206806164d2bSGeorge Zhang * the queue pair state registered with the broker. 206906164d2bSGeorge Zhang * 207006164d2bSGeorge Zhang * When a guest endpoint detaches, it will unmap and unregister the guest 207106164d2bSGeorge Zhang * memory backing the queue pair. If the host is still attached, it will 207206164d2bSGeorge Zhang * no longer be able to access the queue pair content. 207306164d2bSGeorge Zhang * 207406164d2bSGeorge Zhang * If the queue pair is already in a state where there is no memory 207506164d2bSGeorge Zhang * registered for the queue pair (any *_NO_MEM state), it will transition to 207606164d2bSGeorge Zhang * the VMCIQPB_SHUTDOWN_NO_MEM state. This will also happen, if a guest 207706164d2bSGeorge Zhang * endpoint is the first of two endpoints to detach. If the host endpoint is 207806164d2bSGeorge Zhang * the first out of two to detach, the queue pair will move to the 207906164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_MEM state. 208006164d2bSGeorge Zhang */ 208106164d2bSGeorge Zhang int vmci_qp_broker_detach(struct vmci_handle handle, struct vmci_ctx *context) 208206164d2bSGeorge Zhang { 208306164d2bSGeorge Zhang struct qp_broker_entry *entry; 208406164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 208506164d2bSGeorge Zhang u32 peer_id; 208606164d2bSGeorge Zhang bool is_local = false; 208706164d2bSGeorge Zhang int result; 208806164d2bSGeorge Zhang 208906164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 209006164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) { 209106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 209206164d2bSGeorge Zhang } 209306164d2bSGeorge Zhang 209406164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 209506164d2bSGeorge Zhang 209606164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 209706164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 209806164d2bSGeorge Zhang context_id, handle.context, handle.resource); 209906164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 210006164d2bSGeorge Zhang goto out; 210106164d2bSGeorge Zhang } 210206164d2bSGeorge Zhang 210306164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 210406164d2bSGeorge Zhang if (!entry) { 210506164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair(handle=0x%x:0x%x) that isn't present in broker\n", 210606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 210706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 210806164d2bSGeorge Zhang goto out; 210906164d2bSGeorge Zhang } 211006164d2bSGeorge Zhang 211106164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 211206164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 211306164d2bSGeorge Zhang goto out; 211406164d2bSGeorge Zhang } 211506164d2bSGeorge Zhang 211606164d2bSGeorge Zhang if (context_id == entry->create_id) { 211706164d2bSGeorge Zhang peer_id = entry->attach_id; 211806164d2bSGeorge Zhang entry->create_id = VMCI_INVALID_ID; 211906164d2bSGeorge Zhang } else { 212006164d2bSGeorge Zhang peer_id = entry->create_id; 212106164d2bSGeorge Zhang entry->attach_id = VMCI_INVALID_ID; 212206164d2bSGeorge Zhang } 212306164d2bSGeorge Zhang entry->qp.ref_count--; 212406164d2bSGeorge Zhang 212506164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 212606164d2bSGeorge Zhang 212706164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 212806164d2bSGeorge Zhang bool headers_mapped; 212906164d2bSGeorge Zhang 213006164d2bSGeorge Zhang /* 213106164d2bSGeorge Zhang * Pre NOVMVM vmx'en may detach from a queue pair 213206164d2bSGeorge Zhang * before setting the page store, and in that case 213306164d2bSGeorge Zhang * there is no user memory to detach from. Also, more 213406164d2bSGeorge Zhang * recent VMX'en may detach from a queue pair in the 213506164d2bSGeorge Zhang * quiesced state. 213606164d2bSGeorge Zhang */ 213706164d2bSGeorge Zhang 213806164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 213906164d2bSGeorge Zhang headers_mapped = entry->produce_q->q_header || 214006164d2bSGeorge Zhang entry->consume_q->q_header; 214106164d2bSGeorge Zhang if (QPBROKERSTATE_HAS_MEM(entry)) { 214206164d2bSGeorge Zhang result = 214306164d2bSGeorge Zhang qp_host_unmap_queues(INVALID_VMCI_GUEST_MEM_ID, 214406164d2bSGeorge Zhang entry->produce_q, 214506164d2bSGeorge Zhang entry->consume_q); 214606164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 214706164d2bSGeorge Zhang pr_warn("Failed to unmap queue headers for queue pair (handle=0x%x:0x%x,result=%d)\n", 214806164d2bSGeorge Zhang handle.context, handle.resource, 214906164d2bSGeorge Zhang result); 215006164d2bSGeorge Zhang 215106164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 2152234b7f8dSGustavo A. R. Silva entry->consume_q); 215306164d2bSGeorge Zhang 215406164d2bSGeorge Zhang } 215506164d2bSGeorge Zhang 215606164d2bSGeorge Zhang if (!headers_mapped) 215706164d2bSGeorge Zhang qp_reset_saved_headers(entry); 215806164d2bSGeorge Zhang 215906164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 216006164d2bSGeorge Zhang 216106164d2bSGeorge Zhang if (!headers_mapped && entry->wakeup_cb) 216206164d2bSGeorge Zhang entry->wakeup_cb(entry->client_data); 216306164d2bSGeorge Zhang 216406164d2bSGeorge Zhang } else { 216506164d2bSGeorge Zhang if (entry->wakeup_cb) { 216606164d2bSGeorge Zhang entry->wakeup_cb = NULL; 216706164d2bSGeorge Zhang entry->client_data = NULL; 216806164d2bSGeorge Zhang } 216906164d2bSGeorge Zhang } 217006164d2bSGeorge Zhang 217106164d2bSGeorge Zhang if (entry->qp.ref_count == 0) { 217206164d2bSGeorge Zhang qp_list_remove_entry(&qp_broker_list, &entry->qp); 217306164d2bSGeorge Zhang 217406164d2bSGeorge Zhang if (is_local) 217506164d2bSGeorge Zhang kfree(entry->local_mem); 217606164d2bSGeorge Zhang 217706164d2bSGeorge Zhang qp_cleanup_queue_mutex(entry->produce_q, entry->consume_q); 217806164d2bSGeorge Zhang qp_host_free_queue(entry->produce_q, entry->qp.produce_size); 217906164d2bSGeorge Zhang qp_host_free_queue(entry->consume_q, entry->qp.consume_size); 218006164d2bSGeorge Zhang /* Unlink from resource hash table and free callback */ 218106164d2bSGeorge Zhang vmci_resource_remove(&entry->resource); 218206164d2bSGeorge Zhang 218306164d2bSGeorge Zhang kfree(entry); 218406164d2bSGeorge Zhang 218506164d2bSGeorge Zhang vmci_ctx_qp_destroy(context, handle); 218606164d2bSGeorge Zhang } else { 218706164d2bSGeorge Zhang qp_notify_peer(false, handle, context_id, peer_id); 218806164d2bSGeorge Zhang if (context_id == VMCI_HOST_CONTEXT_ID && 218906164d2bSGeorge Zhang QPBROKERSTATE_HAS_MEM(entry)) { 219006164d2bSGeorge Zhang entry->state = VMCIQPB_SHUTDOWN_MEM; 219106164d2bSGeorge Zhang } else { 219206164d2bSGeorge Zhang entry->state = VMCIQPB_SHUTDOWN_NO_MEM; 219306164d2bSGeorge Zhang } 219406164d2bSGeorge Zhang 219506164d2bSGeorge Zhang if (!is_local) 219606164d2bSGeorge Zhang vmci_ctx_qp_destroy(context, handle); 219706164d2bSGeorge Zhang 219806164d2bSGeorge Zhang } 219906164d2bSGeorge Zhang result = VMCI_SUCCESS; 220006164d2bSGeorge Zhang out: 220106164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 220206164d2bSGeorge Zhang return result; 220306164d2bSGeorge Zhang } 220406164d2bSGeorge Zhang 220506164d2bSGeorge Zhang /* 220606164d2bSGeorge Zhang * Establishes the necessary mappings for a queue pair given a 220706164d2bSGeorge Zhang * reference to the queue pair guest memory. This is usually 220806164d2bSGeorge Zhang * called when a guest is unquiesced and the VMX is allowed to 220906164d2bSGeorge Zhang * map guest memory once again. 221006164d2bSGeorge Zhang */ 221106164d2bSGeorge Zhang int vmci_qp_broker_map(struct vmci_handle handle, 221206164d2bSGeorge Zhang struct vmci_ctx *context, 221306164d2bSGeorge Zhang u64 guest_mem) 221406164d2bSGeorge Zhang { 221506164d2bSGeorge Zhang struct qp_broker_entry *entry; 221606164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 221706164d2bSGeorge Zhang bool is_local = false; 221806164d2bSGeorge Zhang int result; 221906164d2bSGeorge Zhang 222006164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 222106164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 222206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 222306164d2bSGeorge Zhang 222406164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 222506164d2bSGeorge Zhang 222606164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 222706164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 222806164d2bSGeorge Zhang context_id, handle.context, handle.resource); 222906164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 223006164d2bSGeorge Zhang goto out; 223106164d2bSGeorge Zhang } 223206164d2bSGeorge Zhang 223306164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 223406164d2bSGeorge Zhang if (!entry) { 223506164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair (handle=0x%x:0x%x) that isn't present in broker\n", 223606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 223706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 223806164d2bSGeorge Zhang goto out; 223906164d2bSGeorge Zhang } 224006164d2bSGeorge Zhang 224106164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 224206164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 224306164d2bSGeorge Zhang goto out; 224406164d2bSGeorge Zhang } 224506164d2bSGeorge Zhang 224606164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 224706164d2bSGeorge Zhang result = VMCI_SUCCESS; 224806164d2bSGeorge Zhang 224906164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 225006164d2bSGeorge Zhang struct vmci_qp_page_store page_store; 225106164d2bSGeorge Zhang 225206164d2bSGeorge Zhang page_store.pages = guest_mem; 225306164d2bSGeorge Zhang page_store.len = QPE_NUM_PAGES(entry->qp); 225406164d2bSGeorge Zhang 225506164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 225606164d2bSGeorge Zhang qp_reset_saved_headers(entry); 225706164d2bSGeorge Zhang result = 225806164d2bSGeorge Zhang qp_host_register_user_memory(&page_store, 225906164d2bSGeorge Zhang entry->produce_q, 226006164d2bSGeorge Zhang entry->consume_q); 226106164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 226206164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 226306164d2bSGeorge Zhang /* Move state from *_NO_MEM to *_MEM */ 226406164d2bSGeorge Zhang 226506164d2bSGeorge Zhang entry->state++; 226606164d2bSGeorge Zhang 226706164d2bSGeorge Zhang if (entry->wakeup_cb) 226806164d2bSGeorge Zhang entry->wakeup_cb(entry->client_data); 226906164d2bSGeorge Zhang } 227006164d2bSGeorge Zhang } 227106164d2bSGeorge Zhang 227206164d2bSGeorge Zhang out: 227306164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 227406164d2bSGeorge Zhang return result; 227506164d2bSGeorge Zhang } 227606164d2bSGeorge Zhang 227706164d2bSGeorge Zhang /* 227806164d2bSGeorge Zhang * Saves a snapshot of the queue headers for the given QP broker 227906164d2bSGeorge Zhang * entry. Should be used when guest memory is unmapped. 228006164d2bSGeorge Zhang * Results: 228106164d2bSGeorge Zhang * VMCI_SUCCESS on success, appropriate error code if guest memory 228206164d2bSGeorge Zhang * can't be accessed.. 228306164d2bSGeorge Zhang */ 228406164d2bSGeorge Zhang static int qp_save_headers(struct qp_broker_entry *entry) 228506164d2bSGeorge Zhang { 228606164d2bSGeorge Zhang int result; 228706164d2bSGeorge Zhang 228806164d2bSGeorge Zhang if (entry->produce_q->saved_header != NULL && 228906164d2bSGeorge Zhang entry->consume_q->saved_header != NULL) { 229006164d2bSGeorge Zhang /* 229106164d2bSGeorge Zhang * If the headers have already been saved, we don't need to do 229206164d2bSGeorge Zhang * it again, and we don't want to map in the headers 229306164d2bSGeorge Zhang * unnecessarily. 229406164d2bSGeorge Zhang */ 229506164d2bSGeorge Zhang 229606164d2bSGeorge Zhang return VMCI_SUCCESS; 229706164d2bSGeorge Zhang } 229806164d2bSGeorge Zhang 229906164d2bSGeorge Zhang if (NULL == entry->produce_q->q_header || 230006164d2bSGeorge Zhang NULL == entry->consume_q->q_header) { 230106164d2bSGeorge Zhang result = qp_host_map_queues(entry->produce_q, entry->consume_q); 230206164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 230306164d2bSGeorge Zhang return result; 230406164d2bSGeorge Zhang } 230506164d2bSGeorge Zhang 230606164d2bSGeorge Zhang memcpy(&entry->saved_produce_q, entry->produce_q->q_header, 230706164d2bSGeorge Zhang sizeof(entry->saved_produce_q)); 230806164d2bSGeorge Zhang entry->produce_q->saved_header = &entry->saved_produce_q; 230906164d2bSGeorge Zhang memcpy(&entry->saved_consume_q, entry->consume_q->q_header, 231006164d2bSGeorge Zhang sizeof(entry->saved_consume_q)); 231106164d2bSGeorge Zhang entry->consume_q->saved_header = &entry->saved_consume_q; 231206164d2bSGeorge Zhang 231306164d2bSGeorge Zhang return VMCI_SUCCESS; 231406164d2bSGeorge Zhang } 231506164d2bSGeorge Zhang 231606164d2bSGeorge Zhang /* 231706164d2bSGeorge Zhang * Removes all references to the guest memory of a given queue pair, and 231806164d2bSGeorge Zhang * will move the queue pair from state *_MEM to *_NO_MEM. It is usually 231906164d2bSGeorge Zhang * called when a VM is being quiesced where access to guest memory should 232006164d2bSGeorge Zhang * avoided. 232106164d2bSGeorge Zhang */ 232206164d2bSGeorge Zhang int vmci_qp_broker_unmap(struct vmci_handle handle, 232306164d2bSGeorge Zhang struct vmci_ctx *context, 232406164d2bSGeorge Zhang u32 gid) 232506164d2bSGeorge Zhang { 232606164d2bSGeorge Zhang struct qp_broker_entry *entry; 232706164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 232806164d2bSGeorge Zhang bool is_local = false; 232906164d2bSGeorge Zhang int result; 233006164d2bSGeorge Zhang 233106164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 233206164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 233306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 233406164d2bSGeorge Zhang 233506164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 233606164d2bSGeorge Zhang 233706164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 233806164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 233906164d2bSGeorge Zhang context_id, handle.context, handle.resource); 234006164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 234106164d2bSGeorge Zhang goto out; 234206164d2bSGeorge Zhang } 234306164d2bSGeorge Zhang 234406164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 234506164d2bSGeorge Zhang if (!entry) { 234606164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair (handle=0x%x:0x%x) that isn't present in broker\n", 234706164d2bSGeorge Zhang context_id, handle.context, handle.resource); 234806164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 234906164d2bSGeorge Zhang goto out; 235006164d2bSGeorge Zhang } 235106164d2bSGeorge Zhang 235206164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 235306164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 235406164d2bSGeorge Zhang goto out; 235506164d2bSGeorge Zhang } 235606164d2bSGeorge Zhang 235706164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 235806164d2bSGeorge Zhang 235906164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 236006164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 236106164d2bSGeorge Zhang result = qp_save_headers(entry); 236206164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 236306164d2bSGeorge Zhang pr_warn("Failed to save queue headers for queue pair (handle=0x%x:0x%x,result=%d)\n", 236406164d2bSGeorge Zhang handle.context, handle.resource, result); 236506164d2bSGeorge Zhang 236606164d2bSGeorge Zhang qp_host_unmap_queues(gid, entry->produce_q, entry->consume_q); 236706164d2bSGeorge Zhang 236806164d2bSGeorge Zhang /* 236906164d2bSGeorge Zhang * On hosted, when we unmap queue pairs, the VMX will also 237006164d2bSGeorge Zhang * unmap the guest memory, so we invalidate the previously 237106164d2bSGeorge Zhang * registered memory. If the queue pair is mapped again at a 237206164d2bSGeorge Zhang * later point in time, we will need to reregister the user 237306164d2bSGeorge Zhang * memory with a possibly new user VA. 237406164d2bSGeorge Zhang */ 237506164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 237606164d2bSGeorge Zhang entry->consume_q); 237706164d2bSGeorge Zhang 237806164d2bSGeorge Zhang /* 237906164d2bSGeorge Zhang * Move state from *_MEM to *_NO_MEM. 238006164d2bSGeorge Zhang */ 238106164d2bSGeorge Zhang entry->state--; 238206164d2bSGeorge Zhang 238306164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 238406164d2bSGeorge Zhang } 238506164d2bSGeorge Zhang 238606164d2bSGeorge Zhang result = VMCI_SUCCESS; 238706164d2bSGeorge Zhang 238806164d2bSGeorge Zhang out: 238906164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 239006164d2bSGeorge Zhang return result; 239106164d2bSGeorge Zhang } 239206164d2bSGeorge Zhang 239306164d2bSGeorge Zhang /* 239406164d2bSGeorge Zhang * Destroys all guest queue pair endpoints. If active guest queue 239506164d2bSGeorge Zhang * pairs still exist, hypercalls to attempt detach from these 239606164d2bSGeorge Zhang * queue pairs will be made. Any failure to detach is silently 239706164d2bSGeorge Zhang * ignored. 239806164d2bSGeorge Zhang */ 239906164d2bSGeorge Zhang void vmci_qp_guest_endpoints_exit(void) 240006164d2bSGeorge Zhang { 240106164d2bSGeorge Zhang struct qp_entry *entry; 240206164d2bSGeorge Zhang struct qp_guest_endpoint *ep; 240306164d2bSGeorge Zhang 240406164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 240506164d2bSGeorge Zhang 240606164d2bSGeorge Zhang while ((entry = qp_list_get_head(&qp_guest_endpoints))) { 240706164d2bSGeorge Zhang ep = (struct qp_guest_endpoint *)entry; 240806164d2bSGeorge Zhang 240906164d2bSGeorge Zhang /* Don't make a hypercall for local queue_pairs. */ 241006164d2bSGeorge Zhang if (!(entry->flags & VMCI_QPFLAG_LOCAL)) 241106164d2bSGeorge Zhang qp_detatch_hypercall(entry->handle); 241206164d2bSGeorge Zhang 241306164d2bSGeorge Zhang /* We cannot fail the exit, so let's reset ref_count. */ 241406164d2bSGeorge Zhang entry->ref_count = 0; 241506164d2bSGeorge Zhang qp_list_remove_entry(&qp_guest_endpoints, entry); 241606164d2bSGeorge Zhang 241706164d2bSGeorge Zhang qp_guest_endpoint_destroy(ep); 241806164d2bSGeorge Zhang } 241906164d2bSGeorge Zhang 242006164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 242106164d2bSGeorge Zhang } 242206164d2bSGeorge Zhang 242306164d2bSGeorge Zhang /* 242406164d2bSGeorge Zhang * Helper routine that will lock the queue pair before subsequent 242506164d2bSGeorge Zhang * operations. 242606164d2bSGeorge Zhang * Note: Non-blocking on the host side is currently only implemented in ESX. 242706164d2bSGeorge Zhang * Since non-blocking isn't yet implemented on the host personality we 242806164d2bSGeorge Zhang * have no reason to acquire a spin lock. So to avoid the use of an 242906164d2bSGeorge Zhang * unnecessary lock only acquire the mutex if we can block. 243006164d2bSGeorge Zhang */ 243106164d2bSGeorge Zhang static void qp_lock(const struct vmci_qp *qpair) 243206164d2bSGeorge Zhang { 243306164d2bSGeorge Zhang qp_acquire_queue_mutex(qpair->produce_q); 243406164d2bSGeorge Zhang } 243506164d2bSGeorge Zhang 243606164d2bSGeorge Zhang /* 243706164d2bSGeorge Zhang * Helper routine that unlocks the queue pair after calling 243845412befSAndy King * qp_lock. 243906164d2bSGeorge Zhang */ 244006164d2bSGeorge Zhang static void qp_unlock(const struct vmci_qp *qpair) 244106164d2bSGeorge Zhang { 244206164d2bSGeorge Zhang qp_release_queue_mutex(qpair->produce_q); 244306164d2bSGeorge Zhang } 244406164d2bSGeorge Zhang 244506164d2bSGeorge Zhang /* 244606164d2bSGeorge Zhang * The queue headers may not be mapped at all times. If a queue is 244706164d2bSGeorge Zhang * currently not mapped, it will be attempted to do so. 244806164d2bSGeorge Zhang */ 244906164d2bSGeorge Zhang static int qp_map_queue_headers(struct vmci_queue *produce_q, 245045412befSAndy King struct vmci_queue *consume_q) 245106164d2bSGeorge Zhang { 245206164d2bSGeorge Zhang int result; 245306164d2bSGeorge Zhang 245406164d2bSGeorge Zhang if (NULL == produce_q->q_header || NULL == consume_q->q_header) { 245506164d2bSGeorge Zhang result = qp_host_map_queues(produce_q, consume_q); 245606164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 245706164d2bSGeorge Zhang return (produce_q->saved_header && 245806164d2bSGeorge Zhang consume_q->saved_header) ? 245906164d2bSGeorge Zhang VMCI_ERROR_QUEUEPAIR_NOT_READY : 246006164d2bSGeorge Zhang VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 246106164d2bSGeorge Zhang } 246206164d2bSGeorge Zhang 246306164d2bSGeorge Zhang return VMCI_SUCCESS; 246406164d2bSGeorge Zhang } 246506164d2bSGeorge Zhang 246606164d2bSGeorge Zhang /* 246706164d2bSGeorge Zhang * Helper routine that will retrieve the produce and consume 246806164d2bSGeorge Zhang * headers of a given queue pair. If the guest memory of the 246906164d2bSGeorge Zhang * queue pair is currently not available, the saved queue headers 247006164d2bSGeorge Zhang * will be returned, if these are available. 247106164d2bSGeorge Zhang */ 247206164d2bSGeorge Zhang static int qp_get_queue_headers(const struct vmci_qp *qpair, 247306164d2bSGeorge Zhang struct vmci_queue_header **produce_q_header, 247406164d2bSGeorge Zhang struct vmci_queue_header **consume_q_header) 247506164d2bSGeorge Zhang { 247606164d2bSGeorge Zhang int result; 247706164d2bSGeorge Zhang 247845412befSAndy King result = qp_map_queue_headers(qpair->produce_q, qpair->consume_q); 247906164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 248006164d2bSGeorge Zhang *produce_q_header = qpair->produce_q->q_header; 248106164d2bSGeorge Zhang *consume_q_header = qpair->consume_q->q_header; 248206164d2bSGeorge Zhang } else if (qpair->produce_q->saved_header && 248306164d2bSGeorge Zhang qpair->consume_q->saved_header) { 248406164d2bSGeorge Zhang *produce_q_header = qpair->produce_q->saved_header; 248506164d2bSGeorge Zhang *consume_q_header = qpair->consume_q->saved_header; 248606164d2bSGeorge Zhang result = VMCI_SUCCESS; 248706164d2bSGeorge Zhang } 248806164d2bSGeorge Zhang 248906164d2bSGeorge Zhang return result; 249006164d2bSGeorge Zhang } 249106164d2bSGeorge Zhang 249206164d2bSGeorge Zhang /* 249306164d2bSGeorge Zhang * Callback from VMCI queue pair broker indicating that a queue 249406164d2bSGeorge Zhang * pair that was previously not ready, now either is ready or 249506164d2bSGeorge Zhang * gone forever. 249606164d2bSGeorge Zhang */ 249706164d2bSGeorge Zhang static int qp_wakeup_cb(void *client_data) 249806164d2bSGeorge Zhang { 249906164d2bSGeorge Zhang struct vmci_qp *qpair = (struct vmci_qp *)client_data; 250006164d2bSGeorge Zhang 250106164d2bSGeorge Zhang qp_lock(qpair); 250206164d2bSGeorge Zhang while (qpair->blocked > 0) { 250306164d2bSGeorge Zhang qpair->blocked--; 250406164d2bSGeorge Zhang qpair->generation++; 250506164d2bSGeorge Zhang wake_up(&qpair->event); 250606164d2bSGeorge Zhang } 250706164d2bSGeorge Zhang qp_unlock(qpair); 250806164d2bSGeorge Zhang 250906164d2bSGeorge Zhang return VMCI_SUCCESS; 251006164d2bSGeorge Zhang } 251106164d2bSGeorge Zhang 251206164d2bSGeorge Zhang /* 251306164d2bSGeorge Zhang * Makes the calling thread wait for the queue pair to become 251406164d2bSGeorge Zhang * ready for host side access. Returns true when thread is 251506164d2bSGeorge Zhang * woken up after queue pair state change, false otherwise. 251606164d2bSGeorge Zhang */ 251706164d2bSGeorge Zhang static bool qp_wait_for_ready_queue(struct vmci_qp *qpair) 251806164d2bSGeorge Zhang { 251906164d2bSGeorge Zhang unsigned int generation; 252006164d2bSGeorge Zhang 252106164d2bSGeorge Zhang qpair->blocked++; 252206164d2bSGeorge Zhang generation = qpair->generation; 252306164d2bSGeorge Zhang qp_unlock(qpair); 252406164d2bSGeorge Zhang wait_event(qpair->event, generation != qpair->generation); 252506164d2bSGeorge Zhang qp_lock(qpair); 252606164d2bSGeorge Zhang 252706164d2bSGeorge Zhang return true; 252806164d2bSGeorge Zhang } 252906164d2bSGeorge Zhang 253006164d2bSGeorge Zhang /* 253106164d2bSGeorge Zhang * Enqueues a given buffer to the produce queue using the provided 253206164d2bSGeorge Zhang * function. As many bytes as possible (space available in the queue) 253306164d2bSGeorge Zhang * are enqueued. Assumes the queue->mutex has been acquired. Returns 253406164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NOSPACE if no space was available to enqueue 253506164d2bSGeorge Zhang * data, VMCI_ERROR_INVALID_SIZE, if any queue pointer is outside the 253606164d2bSGeorge Zhang * queue (as defined by the queue size), VMCI_ERROR_INVALID_ARGS, if 253706164d2bSGeorge Zhang * an error occured when accessing the buffer, 253806164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NOTATTACHED, if the queue pair pages aren't 253906164d2bSGeorge Zhang * available. Otherwise, the number of bytes written to the queue is 254006164d2bSGeorge Zhang * returned. Updates the tail pointer of the produce queue. 254106164d2bSGeorge Zhang */ 254206164d2bSGeorge Zhang static ssize_t qp_enqueue_locked(struct vmci_queue *produce_q, 254306164d2bSGeorge Zhang struct vmci_queue *consume_q, 254406164d2bSGeorge Zhang const u64 produce_q_size, 2545d1038084SAl Viro struct iov_iter *from) 254606164d2bSGeorge Zhang { 254706164d2bSGeorge Zhang s64 free_space; 254806164d2bSGeorge Zhang u64 tail; 2549d1038084SAl Viro size_t buf_size = iov_iter_count(from); 255006164d2bSGeorge Zhang size_t written; 255106164d2bSGeorge Zhang ssize_t result; 255206164d2bSGeorge Zhang 255345412befSAndy King result = qp_map_queue_headers(produce_q, consume_q); 255406164d2bSGeorge Zhang if (unlikely(result != VMCI_SUCCESS)) 255506164d2bSGeorge Zhang return result; 255606164d2bSGeorge Zhang 255706164d2bSGeorge Zhang free_space = vmci_q_header_free_space(produce_q->q_header, 255806164d2bSGeorge Zhang consume_q->q_header, 255906164d2bSGeorge Zhang produce_q_size); 256006164d2bSGeorge Zhang if (free_space == 0) 256106164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_NOSPACE; 256206164d2bSGeorge Zhang 256306164d2bSGeorge Zhang if (free_space < VMCI_SUCCESS) 256406164d2bSGeorge Zhang return (ssize_t) free_space; 256506164d2bSGeorge Zhang 256606164d2bSGeorge Zhang written = (size_t) (free_space > buf_size ? buf_size : free_space); 256706164d2bSGeorge Zhang tail = vmci_q_header_producer_tail(produce_q->q_header); 256806164d2bSGeorge Zhang if (likely(tail + written < produce_q_size)) { 2569d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, tail, from, written); 257006164d2bSGeorge Zhang } else { 257106164d2bSGeorge Zhang /* Tail pointer wraps around. */ 257206164d2bSGeorge Zhang 257306164d2bSGeorge Zhang const size_t tmp = (size_t) (produce_q_size - tail); 257406164d2bSGeorge Zhang 2575d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, tail, from, tmp); 257606164d2bSGeorge Zhang if (result >= VMCI_SUCCESS) 2577d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, 0, from, 257806164d2bSGeorge Zhang written - tmp); 257906164d2bSGeorge Zhang } 258006164d2bSGeorge Zhang 258106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 258206164d2bSGeorge Zhang return result; 258306164d2bSGeorge Zhang 258406164d2bSGeorge Zhang vmci_q_header_add_producer_tail(produce_q->q_header, written, 258506164d2bSGeorge Zhang produce_q_size); 258606164d2bSGeorge Zhang return written; 258706164d2bSGeorge Zhang } 258806164d2bSGeorge Zhang 258906164d2bSGeorge Zhang /* 259006164d2bSGeorge Zhang * Dequeues data (if available) from the given consume queue. Writes data 259106164d2bSGeorge Zhang * to the user provided buffer using the provided function. 259206164d2bSGeorge Zhang * Assumes the queue->mutex has been acquired. 259306164d2bSGeorge Zhang * Results: 259406164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NODATA if no data was available to dequeue. 259506164d2bSGeorge Zhang * VMCI_ERROR_INVALID_SIZE, if any queue pointer is outside the queue 259606164d2bSGeorge Zhang * (as defined by the queue size). 259706164d2bSGeorge Zhang * VMCI_ERROR_INVALID_ARGS, if an error occured when accessing the buffer. 259806164d2bSGeorge Zhang * Otherwise the number of bytes dequeued is returned. 259906164d2bSGeorge Zhang * Side effects: 260006164d2bSGeorge Zhang * Updates the head pointer of the consume queue. 260106164d2bSGeorge Zhang */ 260206164d2bSGeorge Zhang static ssize_t qp_dequeue_locked(struct vmci_queue *produce_q, 260306164d2bSGeorge Zhang struct vmci_queue *consume_q, 260406164d2bSGeorge Zhang const u64 consume_q_size, 260553f58d8eSAl Viro struct iov_iter *to, 260645412befSAndy King bool update_consumer) 260706164d2bSGeorge Zhang { 260853f58d8eSAl Viro size_t buf_size = iov_iter_count(to); 260906164d2bSGeorge Zhang s64 buf_ready; 261006164d2bSGeorge Zhang u64 head; 261106164d2bSGeorge Zhang size_t read; 261206164d2bSGeorge Zhang ssize_t result; 261306164d2bSGeorge Zhang 261445412befSAndy King result = qp_map_queue_headers(produce_q, consume_q); 261506164d2bSGeorge Zhang if (unlikely(result != VMCI_SUCCESS)) 261606164d2bSGeorge Zhang return result; 261706164d2bSGeorge Zhang 261806164d2bSGeorge Zhang buf_ready = vmci_q_header_buf_ready(consume_q->q_header, 261906164d2bSGeorge Zhang produce_q->q_header, 262006164d2bSGeorge Zhang consume_q_size); 262106164d2bSGeorge Zhang if (buf_ready == 0) 262206164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_NODATA; 262306164d2bSGeorge Zhang 262406164d2bSGeorge Zhang if (buf_ready < VMCI_SUCCESS) 262506164d2bSGeorge Zhang return (ssize_t) buf_ready; 262606164d2bSGeorge Zhang 262706164d2bSGeorge Zhang read = (size_t) (buf_ready > buf_size ? buf_size : buf_ready); 262806164d2bSGeorge Zhang head = vmci_q_header_consumer_head(produce_q->q_header); 262906164d2bSGeorge Zhang if (likely(head + read < consume_q_size)) { 263053f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, head, read); 263106164d2bSGeorge Zhang } else { 263206164d2bSGeorge Zhang /* Head pointer wraps around. */ 263306164d2bSGeorge Zhang 263406164d2bSGeorge Zhang const size_t tmp = (size_t) (consume_q_size - head); 263506164d2bSGeorge Zhang 263653f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, head, tmp); 263706164d2bSGeorge Zhang if (result >= VMCI_SUCCESS) 263853f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, 0, 263906164d2bSGeorge Zhang read - tmp); 264006164d2bSGeorge Zhang 264106164d2bSGeorge Zhang } 264206164d2bSGeorge Zhang 264306164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 264406164d2bSGeorge Zhang return result; 264506164d2bSGeorge Zhang 264606164d2bSGeorge Zhang if (update_consumer) 264706164d2bSGeorge Zhang vmci_q_header_add_consumer_head(produce_q->q_header, 264806164d2bSGeorge Zhang read, consume_q_size); 264906164d2bSGeorge Zhang 265006164d2bSGeorge Zhang return read; 265106164d2bSGeorge Zhang } 265206164d2bSGeorge Zhang 265306164d2bSGeorge Zhang /* 265406164d2bSGeorge Zhang * vmci_qpair_alloc() - Allocates a queue pair. 265506164d2bSGeorge Zhang * @qpair: Pointer for the new vmci_qp struct. 265606164d2bSGeorge Zhang * @handle: Handle to track the resource. 265706164d2bSGeorge Zhang * @produce_qsize: Desired size of the producer queue. 265806164d2bSGeorge Zhang * @consume_qsize: Desired size of the consumer queue. 265906164d2bSGeorge Zhang * @peer: ContextID of the peer. 266006164d2bSGeorge Zhang * @flags: VMCI flags. 266106164d2bSGeorge Zhang * @priv_flags: VMCI priviledge flags. 266206164d2bSGeorge Zhang * 266306164d2bSGeorge Zhang * This is the client interface for allocating the memory for a 266406164d2bSGeorge Zhang * vmci_qp structure and then attaching to the underlying 266506164d2bSGeorge Zhang * queue. If an error occurs allocating the memory for the 266606164d2bSGeorge Zhang * vmci_qp structure no attempt is made to attach. If an 266706164d2bSGeorge Zhang * error occurs attaching, then the structure is freed. 266806164d2bSGeorge Zhang */ 266906164d2bSGeorge Zhang int vmci_qpair_alloc(struct vmci_qp **qpair, 267006164d2bSGeorge Zhang struct vmci_handle *handle, 267106164d2bSGeorge Zhang u64 produce_qsize, 267206164d2bSGeorge Zhang u64 consume_qsize, 267306164d2bSGeorge Zhang u32 peer, 267406164d2bSGeorge Zhang u32 flags, 267506164d2bSGeorge Zhang u32 priv_flags) 267606164d2bSGeorge Zhang { 267706164d2bSGeorge Zhang struct vmci_qp *my_qpair; 267806164d2bSGeorge Zhang int retval; 267906164d2bSGeorge Zhang struct vmci_handle src = VMCI_INVALID_HANDLE; 268006164d2bSGeorge Zhang struct vmci_handle dst = vmci_make_handle(peer, VMCI_INVALID_ID); 268106164d2bSGeorge Zhang enum vmci_route route; 268206164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb; 268306164d2bSGeorge Zhang void *client_data; 268406164d2bSGeorge Zhang 268506164d2bSGeorge Zhang /* 268606164d2bSGeorge Zhang * Restrict the size of a queuepair. The device already 268706164d2bSGeorge Zhang * enforces a limit on the total amount of memory that can be 268806164d2bSGeorge Zhang * allocated to queuepairs for a guest. However, we try to 268906164d2bSGeorge Zhang * allocate this memory before we make the queuepair 269006164d2bSGeorge Zhang * allocation hypercall. On Linux, we allocate each page 269106164d2bSGeorge Zhang * separately, which means rather than fail, the guest will 269206164d2bSGeorge Zhang * thrash while it tries to allocate, and will become 269306164d2bSGeorge Zhang * increasingly unresponsive to the point where it appears to 269406164d2bSGeorge Zhang * be hung. So we place a limit on the size of an individual 269506164d2bSGeorge Zhang * queuepair here, and leave the device to enforce the 269606164d2bSGeorge Zhang * restriction on total queuepair memory. (Note that this 269706164d2bSGeorge Zhang * doesn't prevent all cases; a user with only this much 269806164d2bSGeorge Zhang * physical memory could still get into trouble.) The error 269906164d2bSGeorge Zhang * used by the device is NO_RESOURCES, so use that here too. 270006164d2bSGeorge Zhang */ 270106164d2bSGeorge Zhang 270206164d2bSGeorge Zhang if (produce_qsize + consume_qsize < max(produce_qsize, consume_qsize) || 270306164d2bSGeorge Zhang produce_qsize + consume_qsize > VMCI_MAX_GUEST_QP_MEMORY) 270406164d2bSGeorge Zhang return VMCI_ERROR_NO_RESOURCES; 270506164d2bSGeorge Zhang 270606164d2bSGeorge Zhang retval = vmci_route(&src, &dst, false, &route); 270706164d2bSGeorge Zhang if (retval < VMCI_SUCCESS) 270806164d2bSGeorge Zhang route = vmci_guest_code_active() ? 270906164d2bSGeorge Zhang VMCI_ROUTE_AS_GUEST : VMCI_ROUTE_AS_HOST; 271006164d2bSGeorge Zhang 271145412befSAndy King if (flags & (VMCI_QPFLAG_NONBLOCK | VMCI_QPFLAG_PINNED)) { 271245412befSAndy King pr_devel("NONBLOCK OR PINNED set"); 271306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 271406164d2bSGeorge Zhang } 271506164d2bSGeorge Zhang 271606164d2bSGeorge Zhang my_qpair = kzalloc(sizeof(*my_qpair), GFP_KERNEL); 271706164d2bSGeorge Zhang if (!my_qpair) 271806164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 271906164d2bSGeorge Zhang 272006164d2bSGeorge Zhang my_qpair->produce_q_size = produce_qsize; 272106164d2bSGeorge Zhang my_qpair->consume_q_size = consume_qsize; 272206164d2bSGeorge Zhang my_qpair->peer = peer; 272306164d2bSGeorge Zhang my_qpair->flags = flags; 272406164d2bSGeorge Zhang my_qpair->priv_flags = priv_flags; 272506164d2bSGeorge Zhang 272606164d2bSGeorge Zhang wakeup_cb = NULL; 272706164d2bSGeorge Zhang client_data = NULL; 272806164d2bSGeorge Zhang 272906164d2bSGeorge Zhang if (VMCI_ROUTE_AS_HOST == route) { 273006164d2bSGeorge Zhang my_qpair->guest_endpoint = false; 273106164d2bSGeorge Zhang if (!(flags & VMCI_QPFLAG_LOCAL)) { 273206164d2bSGeorge Zhang my_qpair->blocked = 0; 273306164d2bSGeorge Zhang my_qpair->generation = 0; 273406164d2bSGeorge Zhang init_waitqueue_head(&my_qpair->event); 273506164d2bSGeorge Zhang wakeup_cb = qp_wakeup_cb; 273606164d2bSGeorge Zhang client_data = (void *)my_qpair; 273706164d2bSGeorge Zhang } 273806164d2bSGeorge Zhang } else { 273906164d2bSGeorge Zhang my_qpair->guest_endpoint = true; 274006164d2bSGeorge Zhang } 274106164d2bSGeorge Zhang 274206164d2bSGeorge Zhang retval = vmci_qp_alloc(handle, 274306164d2bSGeorge Zhang &my_qpair->produce_q, 274406164d2bSGeorge Zhang my_qpair->produce_q_size, 274506164d2bSGeorge Zhang &my_qpair->consume_q, 274606164d2bSGeorge Zhang my_qpair->consume_q_size, 274706164d2bSGeorge Zhang my_qpair->peer, 274806164d2bSGeorge Zhang my_qpair->flags, 274906164d2bSGeorge Zhang my_qpair->priv_flags, 275006164d2bSGeorge Zhang my_qpair->guest_endpoint, 275106164d2bSGeorge Zhang wakeup_cb, client_data); 275206164d2bSGeorge Zhang 275306164d2bSGeorge Zhang if (retval < VMCI_SUCCESS) { 275406164d2bSGeorge Zhang kfree(my_qpair); 275506164d2bSGeorge Zhang return retval; 275606164d2bSGeorge Zhang } 275706164d2bSGeorge Zhang 275806164d2bSGeorge Zhang *qpair = my_qpair; 275906164d2bSGeorge Zhang my_qpair->handle = *handle; 276006164d2bSGeorge Zhang 276106164d2bSGeorge Zhang return retval; 276206164d2bSGeorge Zhang } 276306164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_alloc); 276406164d2bSGeorge Zhang 276506164d2bSGeorge Zhang /* 276606164d2bSGeorge Zhang * vmci_qpair_detach() - Detatches the client from a queue pair. 276706164d2bSGeorge Zhang * @qpair: Reference of a pointer to the qpair struct. 276806164d2bSGeorge Zhang * 276906164d2bSGeorge Zhang * This is the client interface for detaching from a VMCIQPair. 277006164d2bSGeorge Zhang * Note that this routine will free the memory allocated for the 277106164d2bSGeorge Zhang * vmci_qp structure too. 277206164d2bSGeorge Zhang */ 277306164d2bSGeorge Zhang int vmci_qpair_detach(struct vmci_qp **qpair) 277406164d2bSGeorge Zhang { 277506164d2bSGeorge Zhang int result; 277606164d2bSGeorge Zhang struct vmci_qp *old_qpair; 277706164d2bSGeorge Zhang 277806164d2bSGeorge Zhang if (!qpair || !(*qpair)) 277906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 278006164d2bSGeorge Zhang 278106164d2bSGeorge Zhang old_qpair = *qpair; 278206164d2bSGeorge Zhang result = qp_detatch(old_qpair->handle, old_qpair->guest_endpoint); 278306164d2bSGeorge Zhang 278406164d2bSGeorge Zhang /* 278506164d2bSGeorge Zhang * The guest can fail to detach for a number of reasons, and 278606164d2bSGeorge Zhang * if it does so, it will cleanup the entry (if there is one). 278706164d2bSGeorge Zhang * The host can fail too, but it won't cleanup the entry 278806164d2bSGeorge Zhang * immediately, it will do that later when the context is 278906164d2bSGeorge Zhang * freed. Either way, we need to release the qpair struct 279006164d2bSGeorge Zhang * here; there isn't much the caller can do, and we don't want 279106164d2bSGeorge Zhang * to leak. 279206164d2bSGeorge Zhang */ 279306164d2bSGeorge Zhang 279406164d2bSGeorge Zhang memset(old_qpair, 0, sizeof(*old_qpair)); 279506164d2bSGeorge Zhang old_qpair->handle = VMCI_INVALID_HANDLE; 279606164d2bSGeorge Zhang old_qpair->peer = VMCI_INVALID_ID; 279706164d2bSGeorge Zhang kfree(old_qpair); 279806164d2bSGeorge Zhang *qpair = NULL; 279906164d2bSGeorge Zhang 280006164d2bSGeorge Zhang return result; 280106164d2bSGeorge Zhang } 280206164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_detach); 280306164d2bSGeorge Zhang 280406164d2bSGeorge Zhang /* 280506164d2bSGeorge Zhang * vmci_qpair_get_produce_indexes() - Retrieves the indexes of the producer. 280606164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 280706164d2bSGeorge Zhang * @producer_tail: Reference used for storing producer tail index. 280806164d2bSGeorge Zhang * @consumer_head: Reference used for storing the consumer head index. 280906164d2bSGeorge Zhang * 281006164d2bSGeorge Zhang * This is the client interface for getting the current indexes of the 281106164d2bSGeorge Zhang * QPair from the point of the view of the caller as the producer. 281206164d2bSGeorge Zhang */ 281306164d2bSGeorge Zhang int vmci_qpair_get_produce_indexes(const struct vmci_qp *qpair, 281406164d2bSGeorge Zhang u64 *producer_tail, 281506164d2bSGeorge Zhang u64 *consumer_head) 281606164d2bSGeorge Zhang { 281706164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 281806164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 281906164d2bSGeorge Zhang int result; 282006164d2bSGeorge Zhang 282106164d2bSGeorge Zhang if (!qpair) 282206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 282306164d2bSGeorge Zhang 282406164d2bSGeorge Zhang qp_lock(qpair); 282506164d2bSGeorge Zhang result = 282606164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 282706164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 282806164d2bSGeorge Zhang vmci_q_header_get_pointers(produce_q_header, consume_q_header, 282906164d2bSGeorge Zhang producer_tail, consumer_head); 283006164d2bSGeorge Zhang qp_unlock(qpair); 283106164d2bSGeorge Zhang 283206164d2bSGeorge Zhang if (result == VMCI_SUCCESS && 283306164d2bSGeorge Zhang ((producer_tail && *producer_tail >= qpair->produce_q_size) || 283406164d2bSGeorge Zhang (consumer_head && *consumer_head >= qpair->produce_q_size))) 283506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_SIZE; 283606164d2bSGeorge Zhang 283706164d2bSGeorge Zhang return result; 283806164d2bSGeorge Zhang } 283906164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_get_produce_indexes); 284006164d2bSGeorge Zhang 284106164d2bSGeorge Zhang /* 28423f8b6fb7SMasahiro Yamada * vmci_qpair_get_consume_indexes() - Retrieves the indexes of the consumer. 284306164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 284406164d2bSGeorge Zhang * @consumer_tail: Reference used for storing consumer tail index. 284506164d2bSGeorge Zhang * @producer_head: Reference used for storing the producer head index. 284606164d2bSGeorge Zhang * 284706164d2bSGeorge Zhang * This is the client interface for getting the current indexes of the 284806164d2bSGeorge Zhang * QPair from the point of the view of the caller as the consumer. 284906164d2bSGeorge Zhang */ 285006164d2bSGeorge Zhang int vmci_qpair_get_consume_indexes(const struct vmci_qp *qpair, 285106164d2bSGeorge Zhang u64 *consumer_tail, 285206164d2bSGeorge Zhang u64 *producer_head) 285306164d2bSGeorge Zhang { 285406164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 285506164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 285606164d2bSGeorge Zhang int result; 285706164d2bSGeorge Zhang 285806164d2bSGeorge Zhang if (!qpair) 285906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 286006164d2bSGeorge Zhang 286106164d2bSGeorge Zhang qp_lock(qpair); 286206164d2bSGeorge Zhang result = 286306164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 286406164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 286506164d2bSGeorge Zhang vmci_q_header_get_pointers(consume_q_header, produce_q_header, 286606164d2bSGeorge Zhang consumer_tail, producer_head); 286706164d2bSGeorge Zhang qp_unlock(qpair); 286806164d2bSGeorge Zhang 286906164d2bSGeorge Zhang if (result == VMCI_SUCCESS && 287006164d2bSGeorge Zhang ((consumer_tail && *consumer_tail >= qpair->consume_q_size) || 287106164d2bSGeorge Zhang (producer_head && *producer_head >= qpair->consume_q_size))) 287206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_SIZE; 287306164d2bSGeorge Zhang 287406164d2bSGeorge Zhang return result; 287506164d2bSGeorge Zhang } 287606164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_get_consume_indexes); 287706164d2bSGeorge Zhang 287806164d2bSGeorge Zhang /* 287906164d2bSGeorge Zhang * vmci_qpair_produce_free_space() - Retrieves free space in producer queue. 288006164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 288106164d2bSGeorge Zhang * 288206164d2bSGeorge Zhang * This is the client interface for getting the amount of free 288306164d2bSGeorge Zhang * space in the QPair from the point of the view of the caller as 288406164d2bSGeorge Zhang * the producer which is the common case. Returns < 0 if err, else 288506164d2bSGeorge Zhang * available bytes into which data can be enqueued if > 0. 288606164d2bSGeorge Zhang */ 288706164d2bSGeorge Zhang s64 vmci_qpair_produce_free_space(const struct vmci_qp *qpair) 288806164d2bSGeorge Zhang { 288906164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 289006164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 289106164d2bSGeorge Zhang s64 result; 289206164d2bSGeorge Zhang 289306164d2bSGeorge Zhang if (!qpair) 289406164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 289506164d2bSGeorge Zhang 289606164d2bSGeorge Zhang qp_lock(qpair); 289706164d2bSGeorge Zhang result = 289806164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 289906164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 290006164d2bSGeorge Zhang result = vmci_q_header_free_space(produce_q_header, 290106164d2bSGeorge Zhang consume_q_header, 290206164d2bSGeorge Zhang qpair->produce_q_size); 290306164d2bSGeorge Zhang else 290406164d2bSGeorge Zhang result = 0; 290506164d2bSGeorge Zhang 290606164d2bSGeorge Zhang qp_unlock(qpair); 290706164d2bSGeorge Zhang 290806164d2bSGeorge Zhang return result; 290906164d2bSGeorge Zhang } 291006164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_produce_free_space); 291106164d2bSGeorge Zhang 291206164d2bSGeorge Zhang /* 291306164d2bSGeorge Zhang * vmci_qpair_consume_free_space() - Retrieves free space in consumer queue. 291406164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 291506164d2bSGeorge Zhang * 291606164d2bSGeorge Zhang * This is the client interface for getting the amount of free 291706164d2bSGeorge Zhang * space in the QPair from the point of the view of the caller as 291806164d2bSGeorge Zhang * the consumer which is not the common case. Returns < 0 if err, else 291906164d2bSGeorge Zhang * available bytes into which data can be enqueued if > 0. 292006164d2bSGeorge Zhang */ 292106164d2bSGeorge Zhang s64 vmci_qpair_consume_free_space(const struct vmci_qp *qpair) 292206164d2bSGeorge Zhang { 292306164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 292406164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 292506164d2bSGeorge Zhang s64 result; 292606164d2bSGeorge Zhang 292706164d2bSGeorge Zhang if (!qpair) 292806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 292906164d2bSGeorge Zhang 293006164d2bSGeorge Zhang qp_lock(qpair); 293106164d2bSGeorge Zhang result = 293206164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 293306164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 293406164d2bSGeorge Zhang result = vmci_q_header_free_space(consume_q_header, 293506164d2bSGeorge Zhang produce_q_header, 293606164d2bSGeorge Zhang qpair->consume_q_size); 293706164d2bSGeorge Zhang else 293806164d2bSGeorge Zhang result = 0; 293906164d2bSGeorge Zhang 294006164d2bSGeorge Zhang qp_unlock(qpair); 294106164d2bSGeorge Zhang 294206164d2bSGeorge Zhang return result; 294306164d2bSGeorge Zhang } 294406164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_consume_free_space); 294506164d2bSGeorge Zhang 294606164d2bSGeorge Zhang /* 294706164d2bSGeorge Zhang * vmci_qpair_produce_buf_ready() - Gets bytes ready to read from 294806164d2bSGeorge Zhang * producer queue. 294906164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 295006164d2bSGeorge Zhang * 295106164d2bSGeorge Zhang * This is the client interface for getting the amount of 295206164d2bSGeorge Zhang * enqueued data in the QPair from the point of the view of the 295306164d2bSGeorge Zhang * caller as the producer which is not the common case. Returns < 0 if err, 295406164d2bSGeorge Zhang * else available bytes that may be read. 295506164d2bSGeorge Zhang */ 295606164d2bSGeorge Zhang s64 vmci_qpair_produce_buf_ready(const struct vmci_qp *qpair) 295706164d2bSGeorge Zhang { 295806164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 295906164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 296006164d2bSGeorge Zhang s64 result; 296106164d2bSGeorge Zhang 296206164d2bSGeorge Zhang if (!qpair) 296306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 296406164d2bSGeorge Zhang 296506164d2bSGeorge Zhang qp_lock(qpair); 296606164d2bSGeorge Zhang result = 296706164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 296806164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 296906164d2bSGeorge Zhang result = vmci_q_header_buf_ready(produce_q_header, 297006164d2bSGeorge Zhang consume_q_header, 297106164d2bSGeorge Zhang qpair->produce_q_size); 297206164d2bSGeorge Zhang else 297306164d2bSGeorge Zhang result = 0; 297406164d2bSGeorge Zhang 297506164d2bSGeorge Zhang qp_unlock(qpair); 297606164d2bSGeorge Zhang 297706164d2bSGeorge Zhang return result; 297806164d2bSGeorge Zhang } 297906164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_produce_buf_ready); 298006164d2bSGeorge Zhang 298106164d2bSGeorge Zhang /* 298206164d2bSGeorge Zhang * vmci_qpair_consume_buf_ready() - Gets bytes ready to read from 298306164d2bSGeorge Zhang * consumer queue. 298406164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 298506164d2bSGeorge Zhang * 298606164d2bSGeorge Zhang * This is the client interface for getting the amount of 298706164d2bSGeorge Zhang * enqueued data in the QPair from the point of the view of the 298806164d2bSGeorge Zhang * caller as the consumer which is the normal case. Returns < 0 if err, 298906164d2bSGeorge Zhang * else available bytes that may be read. 299006164d2bSGeorge Zhang */ 299106164d2bSGeorge Zhang s64 vmci_qpair_consume_buf_ready(const struct vmci_qp *qpair) 299206164d2bSGeorge Zhang { 299306164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 299406164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 299506164d2bSGeorge Zhang s64 result; 299606164d2bSGeorge Zhang 299706164d2bSGeorge Zhang if (!qpair) 299806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 299906164d2bSGeorge Zhang 300006164d2bSGeorge Zhang qp_lock(qpair); 300106164d2bSGeorge Zhang result = 300206164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 300306164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 300406164d2bSGeorge Zhang result = vmci_q_header_buf_ready(consume_q_header, 300506164d2bSGeorge Zhang produce_q_header, 300606164d2bSGeorge Zhang qpair->consume_q_size); 300706164d2bSGeorge Zhang else 300806164d2bSGeorge Zhang result = 0; 300906164d2bSGeorge Zhang 301006164d2bSGeorge Zhang qp_unlock(qpair); 301106164d2bSGeorge Zhang 301206164d2bSGeorge Zhang return result; 301306164d2bSGeorge Zhang } 301406164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_consume_buf_ready); 301506164d2bSGeorge Zhang 301606164d2bSGeorge Zhang /* 301706164d2bSGeorge Zhang * vmci_qpair_enqueue() - Throw data on the queue. 301806164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 301906164d2bSGeorge Zhang * @buf: Pointer to buffer containing data 302006164d2bSGeorge Zhang * @buf_size: Length of buffer. 302106164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 302206164d2bSGeorge Zhang * 302306164d2bSGeorge Zhang * This is the client interface for enqueueing data into the queue. 302406164d2bSGeorge Zhang * Returns number of bytes enqueued or < 0 on error. 302506164d2bSGeorge Zhang */ 302606164d2bSGeorge Zhang ssize_t vmci_qpair_enqueue(struct vmci_qp *qpair, 302706164d2bSGeorge Zhang const void *buf, 302806164d2bSGeorge Zhang size_t buf_size, 302906164d2bSGeorge Zhang int buf_type) 303006164d2bSGeorge Zhang { 303106164d2bSGeorge Zhang ssize_t result; 3032d1038084SAl Viro struct iov_iter from; 3033d1038084SAl Viro struct kvec v = {.iov_base = (void *)buf, .iov_len = buf_size}; 303406164d2bSGeorge Zhang 303506164d2bSGeorge Zhang if (!qpair || !buf) 303606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 303706164d2bSGeorge Zhang 3038d1038084SAl Viro iov_iter_kvec(&from, WRITE | ITER_KVEC, &v, 1, buf_size); 3039d1038084SAl Viro 304006164d2bSGeorge Zhang qp_lock(qpair); 304106164d2bSGeorge Zhang 304206164d2bSGeorge Zhang do { 304306164d2bSGeorge Zhang result = qp_enqueue_locked(qpair->produce_q, 304406164d2bSGeorge Zhang qpair->consume_q, 304506164d2bSGeorge Zhang qpair->produce_q_size, 3046d1038084SAl Viro &from); 304706164d2bSGeorge Zhang 304806164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 304906164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 305006164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 305106164d2bSGeorge Zhang 305206164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 305306164d2bSGeorge Zhang 305406164d2bSGeorge Zhang qp_unlock(qpair); 305506164d2bSGeorge Zhang 305606164d2bSGeorge Zhang return result; 305706164d2bSGeorge Zhang } 305806164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_enqueue); 305906164d2bSGeorge Zhang 306006164d2bSGeorge Zhang /* 306106164d2bSGeorge Zhang * vmci_qpair_dequeue() - Get data from the queue. 306206164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 306306164d2bSGeorge Zhang * @buf: Pointer to buffer for the data 306406164d2bSGeorge Zhang * @buf_size: Length of buffer. 306506164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 306606164d2bSGeorge Zhang * 306706164d2bSGeorge Zhang * This is the client interface for dequeueing data from the queue. 306806164d2bSGeorge Zhang * Returns number of bytes dequeued or < 0 on error. 306906164d2bSGeorge Zhang */ 307006164d2bSGeorge Zhang ssize_t vmci_qpair_dequeue(struct vmci_qp *qpair, 307106164d2bSGeorge Zhang void *buf, 307206164d2bSGeorge Zhang size_t buf_size, 307306164d2bSGeorge Zhang int buf_type) 307406164d2bSGeorge Zhang { 307506164d2bSGeorge Zhang ssize_t result; 3076ce3d6e7dSAl Viro struct iov_iter to; 3077ce3d6e7dSAl Viro struct kvec v = {.iov_base = buf, .iov_len = buf_size}; 307806164d2bSGeorge Zhang 307906164d2bSGeorge Zhang if (!qpair || !buf) 308006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 308106164d2bSGeorge Zhang 3082ce3d6e7dSAl Viro iov_iter_kvec(&to, READ | ITER_KVEC, &v, 1, buf_size); 3083ce3d6e7dSAl Viro 308406164d2bSGeorge Zhang qp_lock(qpair); 308506164d2bSGeorge Zhang 308606164d2bSGeorge Zhang do { 308706164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 308806164d2bSGeorge Zhang qpair->consume_q, 308906164d2bSGeorge Zhang qpair->consume_q_size, 309053f58d8eSAl Viro &to, true); 309106164d2bSGeorge Zhang 309206164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 309306164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 309406164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 309506164d2bSGeorge Zhang 309606164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 309706164d2bSGeorge Zhang 309806164d2bSGeorge Zhang qp_unlock(qpair); 309906164d2bSGeorge Zhang 310006164d2bSGeorge Zhang return result; 310106164d2bSGeorge Zhang } 310206164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_dequeue); 310306164d2bSGeorge Zhang 310406164d2bSGeorge Zhang /* 310506164d2bSGeorge Zhang * vmci_qpair_peek() - Peek at the data in the queue. 310606164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 310706164d2bSGeorge Zhang * @buf: Pointer to buffer for the data 310806164d2bSGeorge Zhang * @buf_size: Length of buffer. 310906164d2bSGeorge Zhang * @buf_type: Buffer type (Unused on Linux). 311006164d2bSGeorge Zhang * 311106164d2bSGeorge Zhang * This is the client interface for peeking into a queue. (I.e., 311206164d2bSGeorge Zhang * copy data from the queue without updating the head pointer.) 311306164d2bSGeorge Zhang * Returns number of bytes dequeued or < 0 on error. 311406164d2bSGeorge Zhang */ 311506164d2bSGeorge Zhang ssize_t vmci_qpair_peek(struct vmci_qp *qpair, 311606164d2bSGeorge Zhang void *buf, 311706164d2bSGeorge Zhang size_t buf_size, 311806164d2bSGeorge Zhang int buf_type) 311906164d2bSGeorge Zhang { 3120ce3d6e7dSAl Viro struct iov_iter to; 3121ce3d6e7dSAl Viro struct kvec v = {.iov_base = buf, .iov_len = buf_size}; 312206164d2bSGeorge Zhang ssize_t result; 312306164d2bSGeorge Zhang 312406164d2bSGeorge Zhang if (!qpair || !buf) 312506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 312606164d2bSGeorge Zhang 3127ce3d6e7dSAl Viro iov_iter_kvec(&to, READ | ITER_KVEC, &v, 1, buf_size); 3128ce3d6e7dSAl Viro 312906164d2bSGeorge Zhang qp_lock(qpair); 313006164d2bSGeorge Zhang 313106164d2bSGeorge Zhang do { 313206164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 313306164d2bSGeorge Zhang qpair->consume_q, 313406164d2bSGeorge Zhang qpair->consume_q_size, 313553f58d8eSAl Viro &to, false); 313606164d2bSGeorge Zhang 313706164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 313806164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 313906164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 314006164d2bSGeorge Zhang 314106164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 314206164d2bSGeorge Zhang 314306164d2bSGeorge Zhang qp_unlock(qpair); 314406164d2bSGeorge Zhang 314506164d2bSGeorge Zhang return result; 314606164d2bSGeorge Zhang } 314706164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_peek); 314806164d2bSGeorge Zhang 314906164d2bSGeorge Zhang /* 315006164d2bSGeorge Zhang * vmci_qpair_enquev() - Throw data on the queue using iov. 315106164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 315206164d2bSGeorge Zhang * @iov: Pointer to buffer containing data 315306164d2bSGeorge Zhang * @iov_size: Length of buffer. 315406164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 315506164d2bSGeorge Zhang * 315606164d2bSGeorge Zhang * This is the client interface for enqueueing data into the queue. 315706164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 315806164d2bSGeorge Zhang * of bytes enqueued or < 0 on error. 315906164d2bSGeorge Zhang */ 316006164d2bSGeorge Zhang ssize_t vmci_qpair_enquev(struct vmci_qp *qpair, 31614c946d9cSAl Viro struct msghdr *msg, 316206164d2bSGeorge Zhang size_t iov_size, 316306164d2bSGeorge Zhang int buf_type) 316406164d2bSGeorge Zhang { 316506164d2bSGeorge Zhang ssize_t result; 316606164d2bSGeorge Zhang 31674c946d9cSAl Viro if (!qpair) 316806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 316906164d2bSGeorge Zhang 317006164d2bSGeorge Zhang qp_lock(qpair); 317106164d2bSGeorge Zhang 317206164d2bSGeorge Zhang do { 317306164d2bSGeorge Zhang result = qp_enqueue_locked(qpair->produce_q, 317406164d2bSGeorge Zhang qpair->consume_q, 317506164d2bSGeorge Zhang qpair->produce_q_size, 3176d1038084SAl Viro &msg->msg_iter); 317706164d2bSGeorge Zhang 317806164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 317906164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 318006164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 318106164d2bSGeorge Zhang 318206164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 318306164d2bSGeorge Zhang 318406164d2bSGeorge Zhang qp_unlock(qpair); 318506164d2bSGeorge Zhang 318606164d2bSGeorge Zhang return result; 318706164d2bSGeorge Zhang } 318806164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_enquev); 318906164d2bSGeorge Zhang 319006164d2bSGeorge Zhang /* 319106164d2bSGeorge Zhang * vmci_qpair_dequev() - Get data from the queue using iov. 319206164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 319306164d2bSGeorge Zhang * @iov: Pointer to buffer for the data 319406164d2bSGeorge Zhang * @iov_size: Length of buffer. 319506164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 319606164d2bSGeorge Zhang * 319706164d2bSGeorge Zhang * This is the client interface for dequeueing data from the queue. 319806164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 319906164d2bSGeorge Zhang * of bytes dequeued or < 0 on error. 320006164d2bSGeorge Zhang */ 320106164d2bSGeorge Zhang ssize_t vmci_qpair_dequev(struct vmci_qp *qpair, 3202d838df2eSAl Viro struct msghdr *msg, 320306164d2bSGeorge Zhang size_t iov_size, 320406164d2bSGeorge Zhang int buf_type) 320506164d2bSGeorge Zhang { 320606164d2bSGeorge Zhang ssize_t result; 320706164d2bSGeorge Zhang 3208d838df2eSAl Viro if (!qpair) 320906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 321006164d2bSGeorge Zhang 321132b083a3SAndy King qp_lock(qpair); 321232b083a3SAndy King 321306164d2bSGeorge Zhang do { 321406164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 321506164d2bSGeorge Zhang qpair->consume_q, 321606164d2bSGeorge Zhang qpair->consume_q_size, 321753f58d8eSAl Viro &msg->msg_iter, true); 321806164d2bSGeorge Zhang 321906164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 322006164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 322106164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 322206164d2bSGeorge Zhang 322306164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 322406164d2bSGeorge Zhang 322506164d2bSGeorge Zhang qp_unlock(qpair); 322606164d2bSGeorge Zhang 322706164d2bSGeorge Zhang return result; 322806164d2bSGeorge Zhang } 322906164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_dequev); 323006164d2bSGeorge Zhang 323106164d2bSGeorge Zhang /* 323206164d2bSGeorge Zhang * vmci_qpair_peekv() - Peek at the data in the queue using iov. 323306164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 323406164d2bSGeorge Zhang * @iov: Pointer to buffer for the data 323506164d2bSGeorge Zhang * @iov_size: Length of buffer. 323606164d2bSGeorge Zhang * @buf_type: Buffer type (Unused on Linux). 323706164d2bSGeorge Zhang * 323806164d2bSGeorge Zhang * This is the client interface for peeking into a queue. (I.e., 323906164d2bSGeorge Zhang * copy data from the queue without updating the head pointer.) 324006164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 324106164d2bSGeorge Zhang * of bytes peeked or < 0 on error. 324206164d2bSGeorge Zhang */ 324306164d2bSGeorge Zhang ssize_t vmci_qpair_peekv(struct vmci_qp *qpair, 3244d838df2eSAl Viro struct msghdr *msg, 324506164d2bSGeorge Zhang size_t iov_size, 324606164d2bSGeorge Zhang int buf_type) 324706164d2bSGeorge Zhang { 324806164d2bSGeorge Zhang ssize_t result; 324906164d2bSGeorge Zhang 3250d838df2eSAl Viro if (!qpair) 325106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 325206164d2bSGeorge Zhang 325306164d2bSGeorge Zhang qp_lock(qpair); 325406164d2bSGeorge Zhang 325506164d2bSGeorge Zhang do { 325606164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 325706164d2bSGeorge Zhang qpair->consume_q, 325806164d2bSGeorge Zhang qpair->consume_q_size, 325953f58d8eSAl Viro &msg->msg_iter, false); 326006164d2bSGeorge Zhang 326106164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 326206164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 326306164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 326406164d2bSGeorge Zhang 326506164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 326606164d2bSGeorge Zhang 326706164d2bSGeorge Zhang qp_unlock(qpair); 326806164d2bSGeorge Zhang return result; 326906164d2bSGeorge Zhang } 327006164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_peekv); 3271