106164d2bSGeorge Zhang /* 206164d2bSGeorge Zhang * VMware VMCI Driver 306164d2bSGeorge Zhang * 406164d2bSGeorge Zhang * Copyright (C) 2012 VMware, Inc. All rights reserved. 506164d2bSGeorge Zhang * 606164d2bSGeorge Zhang * This program is free software; you can redistribute it and/or modify it 706164d2bSGeorge Zhang * under the terms of the GNU General Public License as published by the 806164d2bSGeorge Zhang * Free Software Foundation version 2 and no later version. 906164d2bSGeorge Zhang * 1006164d2bSGeorge Zhang * This program is distributed in the hope that it will be useful, but 1106164d2bSGeorge Zhang * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY 1206164d2bSGeorge Zhang * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License 1306164d2bSGeorge Zhang * for more details. 1406164d2bSGeorge Zhang */ 1506164d2bSGeorge Zhang 1606164d2bSGeorge Zhang #include <linux/vmw_vmci_defs.h> 1706164d2bSGeorge Zhang #include <linux/vmw_vmci_api.h> 1842281d20SAndy King #include <linux/highmem.h> 1906164d2bSGeorge Zhang #include <linux/kernel.h> 2042281d20SAndy King #include <linux/mm.h> 2106164d2bSGeorge Zhang #include <linux/module.h> 2206164d2bSGeorge Zhang #include <linux/mutex.h> 2342281d20SAndy King #include <linux/pagemap.h> 246d6dfb4fSAndy King #include <linux/pci.h> 2542281d20SAndy King #include <linux/sched.h> 2642281d20SAndy King #include <linux/slab.h> 27d2f83e90SRusty Russell #include <linux/uio.h> 2806164d2bSGeorge Zhang #include <linux/wait.h> 29f6dcf8e7SDavid Rientjes #include <linux/vmalloc.h> 30d838df2eSAl Viro #include <linux/skbuff.h> 3106164d2bSGeorge Zhang 3206164d2bSGeorge Zhang #include "vmci_handle_array.h" 3306164d2bSGeorge Zhang #include "vmci_queue_pair.h" 3406164d2bSGeorge Zhang #include "vmci_datagram.h" 3506164d2bSGeorge Zhang #include "vmci_resource.h" 3606164d2bSGeorge Zhang #include "vmci_context.h" 3706164d2bSGeorge Zhang #include "vmci_driver.h" 3806164d2bSGeorge Zhang #include "vmci_event.h" 3906164d2bSGeorge Zhang #include "vmci_route.h" 4006164d2bSGeorge Zhang 4106164d2bSGeorge Zhang /* 4206164d2bSGeorge Zhang * In the following, we will distinguish between two kinds of VMX processes - 4306164d2bSGeorge Zhang * the ones with versions lower than VMCI_VERSION_NOVMVM that use specialized 4406164d2bSGeorge Zhang * VMCI page files in the VMX and supporting VM to VM communication and the 4506164d2bSGeorge Zhang * newer ones that use the guest memory directly. We will in the following 4606164d2bSGeorge Zhang * refer to the older VMX versions as old-style VMX'en, and the newer ones as 4706164d2bSGeorge Zhang * new-style VMX'en. 4806164d2bSGeorge Zhang * 4906164d2bSGeorge Zhang * The state transition datagram is as follows (the VMCIQPB_ prefix has been 5006164d2bSGeorge Zhang * removed for readability) - see below for more details on the transtions: 5106164d2bSGeorge Zhang * 5206164d2bSGeorge Zhang * -------------- NEW ------------- 5306164d2bSGeorge Zhang * | | 5406164d2bSGeorge Zhang * \_/ \_/ 5506164d2bSGeorge Zhang * CREATED_NO_MEM <-----------------> CREATED_MEM 5606164d2bSGeorge Zhang * | | | 5706164d2bSGeorge Zhang * | o-----------------------o | 5806164d2bSGeorge Zhang * | | | 5906164d2bSGeorge Zhang * \_/ \_/ \_/ 6006164d2bSGeorge Zhang * ATTACHED_NO_MEM <----------------> ATTACHED_MEM 6106164d2bSGeorge Zhang * | | | 6206164d2bSGeorge Zhang * | o----------------------o | 6306164d2bSGeorge Zhang * | | | 6406164d2bSGeorge Zhang * \_/ \_/ \_/ 6506164d2bSGeorge Zhang * SHUTDOWN_NO_MEM <----------------> SHUTDOWN_MEM 6606164d2bSGeorge Zhang * | | 6706164d2bSGeorge Zhang * | | 6806164d2bSGeorge Zhang * -------------> gone <------------- 6906164d2bSGeorge Zhang * 7006164d2bSGeorge Zhang * In more detail. When a VMCI queue pair is first created, it will be in the 7106164d2bSGeorge Zhang * VMCIQPB_NEW state. It will then move into one of the following states: 7206164d2bSGeorge Zhang * 7306164d2bSGeorge Zhang * - VMCIQPB_CREATED_NO_MEM: this state indicates that either: 7406164d2bSGeorge Zhang * 7506164d2bSGeorge Zhang * - the created was performed by a host endpoint, in which case there is 7606164d2bSGeorge Zhang * no backing memory yet. 7706164d2bSGeorge Zhang * 7806164d2bSGeorge Zhang * - the create was initiated by an old-style VMX, that uses 7906164d2bSGeorge Zhang * vmci_qp_broker_set_page_store to specify the UVAs of the queue pair at 8006164d2bSGeorge Zhang * a later point in time. This state can be distinguished from the one 8106164d2bSGeorge Zhang * above by the context ID of the creator. A host side is not allowed to 8206164d2bSGeorge Zhang * attach until the page store has been set. 8306164d2bSGeorge Zhang * 8406164d2bSGeorge Zhang * - VMCIQPB_CREATED_MEM: this state is the result when the queue pair 8506164d2bSGeorge Zhang * is created by a VMX using the queue pair device backend that 8606164d2bSGeorge Zhang * sets the UVAs of the queue pair immediately and stores the 8706164d2bSGeorge Zhang * information for later attachers. At this point, it is ready for 8806164d2bSGeorge Zhang * the host side to attach to it. 8906164d2bSGeorge Zhang * 9006164d2bSGeorge Zhang * Once the queue pair is in one of the created states (with the exception of 9106164d2bSGeorge Zhang * the case mentioned for older VMX'en above), it is possible to attach to the 9206164d2bSGeorge Zhang * queue pair. Again we have two new states possible: 9306164d2bSGeorge Zhang * 9406164d2bSGeorge Zhang * - VMCIQPB_ATTACHED_MEM: this state can be reached through the following 9506164d2bSGeorge Zhang * paths: 9606164d2bSGeorge Zhang * 9706164d2bSGeorge Zhang * - from VMCIQPB_CREATED_NO_MEM when a new-style VMX allocates a queue 9806164d2bSGeorge Zhang * pair, and attaches to a queue pair previously created by the host side. 9906164d2bSGeorge Zhang * 10006164d2bSGeorge Zhang * - from VMCIQPB_CREATED_MEM when the host side attaches to a queue pair 10106164d2bSGeorge Zhang * already created by a guest. 10206164d2bSGeorge Zhang * 10306164d2bSGeorge Zhang * - from VMCIQPB_ATTACHED_NO_MEM, when an old-style VMX calls 10406164d2bSGeorge Zhang * vmci_qp_broker_set_page_store (see below). 10506164d2bSGeorge Zhang * 10606164d2bSGeorge Zhang * - VMCIQPB_ATTACHED_NO_MEM: If the queue pair already was in the 10706164d2bSGeorge Zhang * VMCIQPB_CREATED_NO_MEM due to a host side create, an old-style VMX will 10806164d2bSGeorge Zhang * bring the queue pair into this state. Once vmci_qp_broker_set_page_store 10906164d2bSGeorge Zhang * is called to register the user memory, the VMCIQPB_ATTACH_MEM state 11006164d2bSGeorge Zhang * will be entered. 11106164d2bSGeorge Zhang * 11206164d2bSGeorge Zhang * From the attached queue pair, the queue pair can enter the shutdown states 11306164d2bSGeorge Zhang * when either side of the queue pair detaches. If the guest side detaches 11406164d2bSGeorge Zhang * first, the queue pair will enter the VMCIQPB_SHUTDOWN_NO_MEM state, where 11506164d2bSGeorge Zhang * the content of the queue pair will no longer be available. If the host 11606164d2bSGeorge Zhang * side detaches first, the queue pair will either enter the 11706164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_MEM, if the guest memory is currently mapped, or 11806164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_NO_MEM, if the guest memory is not mapped 11906164d2bSGeorge Zhang * (e.g., the host detaches while a guest is stunned). 12006164d2bSGeorge Zhang * 12106164d2bSGeorge Zhang * New-style VMX'en will also unmap guest memory, if the guest is 12206164d2bSGeorge Zhang * quiesced, e.g., during a snapshot operation. In that case, the guest 12306164d2bSGeorge Zhang * memory will no longer be available, and the queue pair will transition from 12406164d2bSGeorge Zhang * *_MEM state to a *_NO_MEM state. The VMX may later map the memory once more, 12506164d2bSGeorge Zhang * in which case the queue pair will transition from the *_NO_MEM state at that 12606164d2bSGeorge Zhang * point back to the *_MEM state. Note that the *_NO_MEM state may have changed, 12706164d2bSGeorge Zhang * since the peer may have either attached or detached in the meantime. The 12806164d2bSGeorge Zhang * values are laid out such that ++ on a state will move from a *_NO_MEM to a 12906164d2bSGeorge Zhang * *_MEM state, and vice versa. 13006164d2bSGeorge Zhang */ 13106164d2bSGeorge Zhang 13206164d2bSGeorge Zhang /* The Kernel specific component of the struct vmci_queue structure. */ 13306164d2bSGeorge Zhang struct vmci_queue_kern_if { 13406164d2bSGeorge Zhang struct mutex __mutex; /* Protects the queue. */ 13506164d2bSGeorge Zhang struct mutex *mutex; /* Shared by producer and consumer queues. */ 1366d6dfb4fSAndy King size_t num_pages; /* Number of pages incl. header. */ 1376d6dfb4fSAndy King bool host; /* Host or guest? */ 1386d6dfb4fSAndy King union { 1396d6dfb4fSAndy King struct { 1406d6dfb4fSAndy King dma_addr_t *pas; 1416d6dfb4fSAndy King void **vas; 1426d6dfb4fSAndy King } g; /* Used by the guest. */ 1436d6dfb4fSAndy King struct { 1446d6dfb4fSAndy King struct page **page; 1456d6dfb4fSAndy King struct page **header_page; 1466d6dfb4fSAndy King } h; /* Used by the host. */ 1476d6dfb4fSAndy King } u; 14806164d2bSGeorge Zhang }; 14906164d2bSGeorge Zhang 15006164d2bSGeorge Zhang /* 15106164d2bSGeorge Zhang * This structure is opaque to the clients. 15206164d2bSGeorge Zhang */ 15306164d2bSGeorge Zhang struct vmci_qp { 15406164d2bSGeorge Zhang struct vmci_handle handle; 15506164d2bSGeorge Zhang struct vmci_queue *produce_q; 15606164d2bSGeorge Zhang struct vmci_queue *consume_q; 15706164d2bSGeorge Zhang u64 produce_q_size; 15806164d2bSGeorge Zhang u64 consume_q_size; 15906164d2bSGeorge Zhang u32 peer; 16006164d2bSGeorge Zhang u32 flags; 16106164d2bSGeorge Zhang u32 priv_flags; 16206164d2bSGeorge Zhang bool guest_endpoint; 16306164d2bSGeorge Zhang unsigned int blocked; 16406164d2bSGeorge Zhang unsigned int generation; 16506164d2bSGeorge Zhang wait_queue_head_t event; 16606164d2bSGeorge Zhang }; 16706164d2bSGeorge Zhang 16806164d2bSGeorge Zhang enum qp_broker_state { 16906164d2bSGeorge Zhang VMCIQPB_NEW, 17006164d2bSGeorge Zhang VMCIQPB_CREATED_NO_MEM, 17106164d2bSGeorge Zhang VMCIQPB_CREATED_MEM, 17206164d2bSGeorge Zhang VMCIQPB_ATTACHED_NO_MEM, 17306164d2bSGeorge Zhang VMCIQPB_ATTACHED_MEM, 17406164d2bSGeorge Zhang VMCIQPB_SHUTDOWN_NO_MEM, 17506164d2bSGeorge Zhang VMCIQPB_SHUTDOWN_MEM, 17606164d2bSGeorge Zhang VMCIQPB_GONE 17706164d2bSGeorge Zhang }; 17806164d2bSGeorge Zhang 17906164d2bSGeorge Zhang #define QPBROKERSTATE_HAS_MEM(_qpb) (_qpb->state == VMCIQPB_CREATED_MEM || \ 18006164d2bSGeorge Zhang _qpb->state == VMCIQPB_ATTACHED_MEM || \ 18106164d2bSGeorge Zhang _qpb->state == VMCIQPB_SHUTDOWN_MEM) 18206164d2bSGeorge Zhang 18306164d2bSGeorge Zhang /* 18406164d2bSGeorge Zhang * In the queue pair broker, we always use the guest point of view for 18506164d2bSGeorge Zhang * the produce and consume queue values and references, e.g., the 18606164d2bSGeorge Zhang * produce queue size stored is the guests produce queue size. The 18706164d2bSGeorge Zhang * host endpoint will need to swap these around. The only exception is 18806164d2bSGeorge Zhang * the local queue pairs on the host, in which case the host endpoint 18906164d2bSGeorge Zhang * that creates the queue pair will have the right orientation, and 19006164d2bSGeorge Zhang * the attaching host endpoint will need to swap. 19106164d2bSGeorge Zhang */ 19206164d2bSGeorge Zhang struct qp_entry { 19306164d2bSGeorge Zhang struct list_head list_item; 19406164d2bSGeorge Zhang struct vmci_handle handle; 19506164d2bSGeorge Zhang u32 peer; 19606164d2bSGeorge Zhang u32 flags; 19706164d2bSGeorge Zhang u64 produce_size; 19806164d2bSGeorge Zhang u64 consume_size; 19906164d2bSGeorge Zhang u32 ref_count; 20006164d2bSGeorge Zhang }; 20106164d2bSGeorge Zhang 20206164d2bSGeorge Zhang struct qp_broker_entry { 20306164d2bSGeorge Zhang struct vmci_resource resource; 20406164d2bSGeorge Zhang struct qp_entry qp; 20506164d2bSGeorge Zhang u32 create_id; 20606164d2bSGeorge Zhang u32 attach_id; 20706164d2bSGeorge Zhang enum qp_broker_state state; 20806164d2bSGeorge Zhang bool require_trusted_attach; 20906164d2bSGeorge Zhang bool created_by_trusted; 21006164d2bSGeorge Zhang bool vmci_page_files; /* Created by VMX using VMCI page files */ 21106164d2bSGeorge Zhang struct vmci_queue *produce_q; 21206164d2bSGeorge Zhang struct vmci_queue *consume_q; 21306164d2bSGeorge Zhang struct vmci_queue_header saved_produce_q; 21406164d2bSGeorge Zhang struct vmci_queue_header saved_consume_q; 21506164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb; 21606164d2bSGeorge Zhang void *client_data; 21706164d2bSGeorge Zhang void *local_mem; /* Kernel memory for local queue pair */ 21806164d2bSGeorge Zhang }; 21906164d2bSGeorge Zhang 22006164d2bSGeorge Zhang struct qp_guest_endpoint { 22106164d2bSGeorge Zhang struct vmci_resource resource; 22206164d2bSGeorge Zhang struct qp_entry qp; 22306164d2bSGeorge Zhang u64 num_ppns; 22406164d2bSGeorge Zhang void *produce_q; 22506164d2bSGeorge Zhang void *consume_q; 226e6389a13SDmitry Torokhov struct ppn_set ppn_set; 22706164d2bSGeorge Zhang }; 22806164d2bSGeorge Zhang 22906164d2bSGeorge Zhang struct qp_list { 23006164d2bSGeorge Zhang struct list_head head; 23106164d2bSGeorge Zhang struct mutex mutex; /* Protect queue list. */ 23206164d2bSGeorge Zhang }; 23306164d2bSGeorge Zhang 23406164d2bSGeorge Zhang static struct qp_list qp_broker_list = { 23506164d2bSGeorge Zhang .head = LIST_HEAD_INIT(qp_broker_list.head), 23606164d2bSGeorge Zhang .mutex = __MUTEX_INITIALIZER(qp_broker_list.mutex), 23706164d2bSGeorge Zhang }; 23806164d2bSGeorge Zhang 23906164d2bSGeorge Zhang static struct qp_list qp_guest_endpoints = { 24006164d2bSGeorge Zhang .head = LIST_HEAD_INIT(qp_guest_endpoints.head), 24106164d2bSGeorge Zhang .mutex = __MUTEX_INITIALIZER(qp_guest_endpoints.mutex), 24206164d2bSGeorge Zhang }; 24306164d2bSGeorge Zhang 24406164d2bSGeorge Zhang #define INVALID_VMCI_GUEST_MEM_ID 0 24506164d2bSGeorge Zhang #define QPE_NUM_PAGES(_QPE) ((u32) \ 24642281d20SAndy King (DIV_ROUND_UP(_QPE.produce_size, PAGE_SIZE) + \ 24742281d20SAndy King DIV_ROUND_UP(_QPE.consume_size, PAGE_SIZE) + 2)) 24806164d2bSGeorge Zhang 24906164d2bSGeorge Zhang 25006164d2bSGeorge Zhang /* 25106164d2bSGeorge Zhang * Frees kernel VA space for a given queue and its queue header, and 25206164d2bSGeorge Zhang * frees physical data pages. 25306164d2bSGeorge Zhang */ 25406164d2bSGeorge Zhang static void qp_free_queue(void *q, u64 size) 25506164d2bSGeorge Zhang { 25606164d2bSGeorge Zhang struct vmci_queue *queue = q; 25706164d2bSGeorge Zhang 25806164d2bSGeorge Zhang if (queue) { 2596d6dfb4fSAndy King u64 i; 26006164d2bSGeorge Zhang 2616d6dfb4fSAndy King /* Given size does not include header, so add in a page here. */ 2626d6dfb4fSAndy King for (i = 0; i < DIV_ROUND_UP(size, PAGE_SIZE) + 1; i++) { 2636d6dfb4fSAndy King dma_free_coherent(&vmci_pdev->dev, PAGE_SIZE, 2646d6dfb4fSAndy King queue->kernel_if->u.g.vas[i], 2656d6dfb4fSAndy King queue->kernel_if->u.g.pas[i]); 2666d6dfb4fSAndy King } 26706164d2bSGeorge Zhang 2686d6dfb4fSAndy King vfree(queue); 26906164d2bSGeorge Zhang } 27006164d2bSGeorge Zhang } 27106164d2bSGeorge Zhang 27206164d2bSGeorge Zhang /* 2736d6dfb4fSAndy King * Allocates kernel queue pages of specified size with IOMMU mappings, 2746d6dfb4fSAndy King * plus space for the queue structure/kernel interface and the queue 2756d6dfb4fSAndy King * header. 27606164d2bSGeorge Zhang */ 27706164d2bSGeorge Zhang static void *qp_alloc_queue(u64 size, u32 flags) 27806164d2bSGeorge Zhang { 27906164d2bSGeorge Zhang u64 i; 28006164d2bSGeorge Zhang struct vmci_queue *queue; 281aa6467f1SJorgen Hansen size_t pas_size; 282aa6467f1SJorgen Hansen size_t vas_size; 283aa6467f1SJorgen Hansen size_t queue_size = sizeof(*queue) + sizeof(*queue->kernel_if); 284146180c0SDan Carpenter u64 num_pages; 285aa6467f1SJorgen Hansen 286146180c0SDan Carpenter if (size > SIZE_MAX - PAGE_SIZE) 287146180c0SDan Carpenter return NULL; 288146180c0SDan Carpenter num_pages = DIV_ROUND_UP(size, PAGE_SIZE) + 1; 289aa6467f1SJorgen Hansen if (num_pages > 290aa6467f1SJorgen Hansen (SIZE_MAX - queue_size) / 291aa6467f1SJorgen Hansen (sizeof(*queue->kernel_if->u.g.pas) + 292aa6467f1SJorgen Hansen sizeof(*queue->kernel_if->u.g.vas))) 293aa6467f1SJorgen Hansen return NULL; 294aa6467f1SJorgen Hansen 295aa6467f1SJorgen Hansen pas_size = num_pages * sizeof(*queue->kernel_if->u.g.pas); 296aa6467f1SJorgen Hansen vas_size = num_pages * sizeof(*queue->kernel_if->u.g.vas); 297aa6467f1SJorgen Hansen queue_size += pas_size + vas_size; 29806164d2bSGeorge Zhang 2996d6dfb4fSAndy King queue = vmalloc(queue_size); 3006d6dfb4fSAndy King if (!queue) 30106164d2bSGeorge Zhang return NULL; 30206164d2bSGeorge Zhang 3036d6dfb4fSAndy King queue->q_header = NULL; 30406164d2bSGeorge Zhang queue->saved_header = NULL; 30506164d2bSGeorge Zhang queue->kernel_if = (struct vmci_queue_kern_if *)(queue + 1); 3066d6dfb4fSAndy King queue->kernel_if->mutex = NULL; 3076d6dfb4fSAndy King queue->kernel_if->num_pages = num_pages; 3086d6dfb4fSAndy King queue->kernel_if->u.g.pas = (dma_addr_t *)(queue->kernel_if + 1); 3096d6dfb4fSAndy King queue->kernel_if->u.g.vas = 3106d6dfb4fSAndy King (void **)((u8 *)queue->kernel_if->u.g.pas + pas_size); 31106164d2bSGeorge Zhang queue->kernel_if->host = false; 31206164d2bSGeorge Zhang 3136d6dfb4fSAndy King for (i = 0; i < num_pages; i++) { 3146d6dfb4fSAndy King queue->kernel_if->u.g.vas[i] = 3156d6dfb4fSAndy King dma_alloc_coherent(&vmci_pdev->dev, PAGE_SIZE, 3166d6dfb4fSAndy King &queue->kernel_if->u.g.pas[i], 3176d6dfb4fSAndy King GFP_KERNEL); 3186d6dfb4fSAndy King if (!queue->kernel_if->u.g.vas[i]) { 3196d6dfb4fSAndy King /* Size excl. the header. */ 32006164d2bSGeorge Zhang qp_free_queue(queue, i * PAGE_SIZE); 32106164d2bSGeorge Zhang return NULL; 32206164d2bSGeorge Zhang } 3236d6dfb4fSAndy King } 3246d6dfb4fSAndy King 3256d6dfb4fSAndy King /* Queue header is the first page. */ 3266d6dfb4fSAndy King queue->q_header = queue->kernel_if->u.g.vas[0]; 3276d6dfb4fSAndy King 3286d6dfb4fSAndy King return queue; 3296d6dfb4fSAndy King } 33006164d2bSGeorge Zhang 33106164d2bSGeorge Zhang /* 33206164d2bSGeorge Zhang * Copies from a given buffer or iovector to a VMCI Queue. Uses 33306164d2bSGeorge Zhang * kmap()/kunmap() to dynamically map/unmap required portions of the queue 33406164d2bSGeorge Zhang * by traversing the offset -> page translation structure for the queue. 33506164d2bSGeorge Zhang * Assumes that offset + size does not wrap around in the queue. 33606164d2bSGeorge Zhang */ 337d1038084SAl Viro static int qp_memcpy_to_queue_iter(struct vmci_queue *queue, 33806164d2bSGeorge Zhang u64 queue_offset, 339d1038084SAl Viro struct iov_iter *from, 340d1038084SAl Viro size_t size) 34106164d2bSGeorge Zhang { 34206164d2bSGeorge Zhang struct vmci_queue_kern_if *kernel_if = queue->kernel_if; 34306164d2bSGeorge Zhang size_t bytes_copied = 0; 34406164d2bSGeorge Zhang 34506164d2bSGeorge Zhang while (bytes_copied < size) { 3466d6dfb4fSAndy King const u64 page_index = 3476d6dfb4fSAndy King (queue_offset + bytes_copied) / PAGE_SIZE; 3486d6dfb4fSAndy King const size_t page_offset = 34906164d2bSGeorge Zhang (queue_offset + bytes_copied) & (PAGE_SIZE - 1); 35006164d2bSGeorge Zhang void *va; 35106164d2bSGeorge Zhang size_t to_copy; 35206164d2bSGeorge Zhang 3536d6dfb4fSAndy King if (kernel_if->host) 3546d6dfb4fSAndy King va = kmap(kernel_if->u.h.page[page_index]); 3556d6dfb4fSAndy King else 3566d6dfb4fSAndy King va = kernel_if->u.g.vas[page_index + 1]; 3576d6dfb4fSAndy King /* Skip header. */ 35806164d2bSGeorge Zhang 35906164d2bSGeorge Zhang if (size - bytes_copied > PAGE_SIZE - page_offset) 36006164d2bSGeorge Zhang /* Enough payload to fill up from this page. */ 36106164d2bSGeorge Zhang to_copy = PAGE_SIZE - page_offset; 36206164d2bSGeorge Zhang else 36306164d2bSGeorge Zhang to_copy = size - bytes_copied; 36406164d2bSGeorge Zhang 365d1038084SAl Viro if (!copy_from_iter_full((u8 *)va + page_offset, to_copy, 366d1038084SAl Viro from)) { 3676d6dfb4fSAndy King if (kernel_if->host) 3686d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 36906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 37006164d2bSGeorge Zhang } 37106164d2bSGeorge Zhang bytes_copied += to_copy; 3726d6dfb4fSAndy King if (kernel_if->host) 3736d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 37406164d2bSGeorge Zhang } 37506164d2bSGeorge Zhang 37606164d2bSGeorge Zhang return VMCI_SUCCESS; 37706164d2bSGeorge Zhang } 37806164d2bSGeorge Zhang 37906164d2bSGeorge Zhang /* 38006164d2bSGeorge Zhang * Copies to a given buffer or iovector from a VMCI Queue. Uses 38106164d2bSGeorge Zhang * kmap()/kunmap() to dynamically map/unmap required portions of the queue 38206164d2bSGeorge Zhang * by traversing the offset -> page translation structure for the queue. 38306164d2bSGeorge Zhang * Assumes that offset + size does not wrap around in the queue. 38406164d2bSGeorge Zhang */ 38553f58d8eSAl Viro static int qp_memcpy_from_queue_iter(struct iov_iter *to, 38606164d2bSGeorge Zhang const struct vmci_queue *queue, 38753f58d8eSAl Viro u64 queue_offset, size_t size) 38806164d2bSGeorge Zhang { 38906164d2bSGeorge Zhang struct vmci_queue_kern_if *kernel_if = queue->kernel_if; 39006164d2bSGeorge Zhang size_t bytes_copied = 0; 39106164d2bSGeorge Zhang 39206164d2bSGeorge Zhang while (bytes_copied < size) { 3936d6dfb4fSAndy King const u64 page_index = 3946d6dfb4fSAndy King (queue_offset + bytes_copied) / PAGE_SIZE; 3956d6dfb4fSAndy King const size_t page_offset = 39606164d2bSGeorge Zhang (queue_offset + bytes_copied) & (PAGE_SIZE - 1); 39706164d2bSGeorge Zhang void *va; 39806164d2bSGeorge Zhang size_t to_copy; 39953f58d8eSAl Viro int err; 40006164d2bSGeorge Zhang 4016d6dfb4fSAndy King if (kernel_if->host) 4026d6dfb4fSAndy King va = kmap(kernel_if->u.h.page[page_index]); 4036d6dfb4fSAndy King else 4046d6dfb4fSAndy King va = kernel_if->u.g.vas[page_index + 1]; 4056d6dfb4fSAndy King /* Skip header. */ 40606164d2bSGeorge Zhang 40706164d2bSGeorge Zhang if (size - bytes_copied > PAGE_SIZE - page_offset) 40806164d2bSGeorge Zhang /* Enough payload to fill up this page. */ 40906164d2bSGeorge Zhang to_copy = PAGE_SIZE - page_offset; 41006164d2bSGeorge Zhang else 41106164d2bSGeorge Zhang to_copy = size - bytes_copied; 41206164d2bSGeorge Zhang 413ce3d6e7dSAl Viro err = copy_to_iter((u8 *)va + page_offset, to_copy, to); 414ce3d6e7dSAl Viro if (err != to_copy) { 4156d6dfb4fSAndy King if (kernel_if->host) 4166d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 41706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 41806164d2bSGeorge Zhang } 41906164d2bSGeorge Zhang bytes_copied += to_copy; 4206d6dfb4fSAndy King if (kernel_if->host) 4216d6dfb4fSAndy King kunmap(kernel_if->u.h.page[page_index]); 42206164d2bSGeorge Zhang } 42306164d2bSGeorge Zhang 42406164d2bSGeorge Zhang return VMCI_SUCCESS; 42506164d2bSGeorge Zhang } 42606164d2bSGeorge Zhang 42706164d2bSGeorge Zhang /* 42806164d2bSGeorge Zhang * Allocates two list of PPNs --- one for the pages in the produce queue, 42906164d2bSGeorge Zhang * and the other for the pages in the consume queue. Intializes the list 43006164d2bSGeorge Zhang * of PPNs with the page frame numbers of the KVA for the two queues (and 43106164d2bSGeorge Zhang * the queue headers). 43206164d2bSGeorge Zhang */ 43306164d2bSGeorge Zhang static int qp_alloc_ppn_set(void *prod_q, 43406164d2bSGeorge Zhang u64 num_produce_pages, 43506164d2bSGeorge Zhang void *cons_q, 436e6389a13SDmitry Torokhov u64 num_consume_pages, struct ppn_set *ppn_set) 43706164d2bSGeorge Zhang { 43806164d2bSGeorge Zhang u32 *produce_ppns; 43906164d2bSGeorge Zhang u32 *consume_ppns; 44006164d2bSGeorge Zhang struct vmci_queue *produce_q = prod_q; 44106164d2bSGeorge Zhang struct vmci_queue *consume_q = cons_q; 44206164d2bSGeorge Zhang u64 i; 44306164d2bSGeorge Zhang 44406164d2bSGeorge Zhang if (!produce_q || !num_produce_pages || !consume_q || 44506164d2bSGeorge Zhang !num_consume_pages || !ppn_set) 44606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 44706164d2bSGeorge Zhang 44806164d2bSGeorge Zhang if (ppn_set->initialized) 44906164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 45006164d2bSGeorge Zhang 45106164d2bSGeorge Zhang produce_ppns = 45206164d2bSGeorge Zhang kmalloc(num_produce_pages * sizeof(*produce_ppns), GFP_KERNEL); 45306164d2bSGeorge Zhang if (!produce_ppns) 45406164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 45506164d2bSGeorge Zhang 45606164d2bSGeorge Zhang consume_ppns = 45706164d2bSGeorge Zhang kmalloc(num_consume_pages * sizeof(*consume_ppns), GFP_KERNEL); 45806164d2bSGeorge Zhang if (!consume_ppns) { 45906164d2bSGeorge Zhang kfree(produce_ppns); 46006164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 46106164d2bSGeorge Zhang } 46206164d2bSGeorge Zhang 4636d6dfb4fSAndy King for (i = 0; i < num_produce_pages; i++) { 46406164d2bSGeorge Zhang unsigned long pfn; 46506164d2bSGeorge Zhang 46606164d2bSGeorge Zhang produce_ppns[i] = 4676d6dfb4fSAndy King produce_q->kernel_if->u.g.pas[i] >> PAGE_SHIFT; 46806164d2bSGeorge Zhang pfn = produce_ppns[i]; 46906164d2bSGeorge Zhang 47006164d2bSGeorge Zhang /* Fail allocation if PFN isn't supported by hypervisor. */ 47106164d2bSGeorge Zhang if (sizeof(pfn) > sizeof(*produce_ppns) 47206164d2bSGeorge Zhang && pfn != produce_ppns[i]) 47306164d2bSGeorge Zhang goto ppn_error; 47406164d2bSGeorge Zhang } 47506164d2bSGeorge Zhang 4766d6dfb4fSAndy King for (i = 0; i < num_consume_pages; i++) { 47706164d2bSGeorge Zhang unsigned long pfn; 47806164d2bSGeorge Zhang 47906164d2bSGeorge Zhang consume_ppns[i] = 4806d6dfb4fSAndy King consume_q->kernel_if->u.g.pas[i] >> PAGE_SHIFT; 48106164d2bSGeorge Zhang pfn = consume_ppns[i]; 48206164d2bSGeorge Zhang 48306164d2bSGeorge Zhang /* Fail allocation if PFN isn't supported by hypervisor. */ 48406164d2bSGeorge Zhang if (sizeof(pfn) > sizeof(*consume_ppns) 48506164d2bSGeorge Zhang && pfn != consume_ppns[i]) 48606164d2bSGeorge Zhang goto ppn_error; 48706164d2bSGeorge Zhang } 48806164d2bSGeorge Zhang 48906164d2bSGeorge Zhang ppn_set->num_produce_pages = num_produce_pages; 49006164d2bSGeorge Zhang ppn_set->num_consume_pages = num_consume_pages; 49106164d2bSGeorge Zhang ppn_set->produce_ppns = produce_ppns; 49206164d2bSGeorge Zhang ppn_set->consume_ppns = consume_ppns; 49306164d2bSGeorge Zhang ppn_set->initialized = true; 49406164d2bSGeorge Zhang return VMCI_SUCCESS; 49506164d2bSGeorge Zhang 49606164d2bSGeorge Zhang ppn_error: 49706164d2bSGeorge Zhang kfree(produce_ppns); 49806164d2bSGeorge Zhang kfree(consume_ppns); 49906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 50006164d2bSGeorge Zhang } 50106164d2bSGeorge Zhang 50206164d2bSGeorge Zhang /* 50306164d2bSGeorge Zhang * Frees the two list of PPNs for a queue pair. 50406164d2bSGeorge Zhang */ 505e6389a13SDmitry Torokhov static void qp_free_ppn_set(struct ppn_set *ppn_set) 50606164d2bSGeorge Zhang { 50706164d2bSGeorge Zhang if (ppn_set->initialized) { 50806164d2bSGeorge Zhang /* Do not call these functions on NULL inputs. */ 50906164d2bSGeorge Zhang kfree(ppn_set->produce_ppns); 51006164d2bSGeorge Zhang kfree(ppn_set->consume_ppns); 51106164d2bSGeorge Zhang } 51206164d2bSGeorge Zhang memset(ppn_set, 0, sizeof(*ppn_set)); 51306164d2bSGeorge Zhang } 51406164d2bSGeorge Zhang 51506164d2bSGeorge Zhang /* 51606164d2bSGeorge Zhang * Populates the list of PPNs in the hypercall structure with the PPNS 51706164d2bSGeorge Zhang * of the produce queue and the consume queue. 51806164d2bSGeorge Zhang */ 519e6389a13SDmitry Torokhov static int qp_populate_ppn_set(u8 *call_buf, const struct ppn_set *ppn_set) 52006164d2bSGeorge Zhang { 52106164d2bSGeorge Zhang memcpy(call_buf, ppn_set->produce_ppns, 52206164d2bSGeorge Zhang ppn_set->num_produce_pages * sizeof(*ppn_set->produce_ppns)); 52306164d2bSGeorge Zhang memcpy(call_buf + 52406164d2bSGeorge Zhang ppn_set->num_produce_pages * sizeof(*ppn_set->produce_ppns), 52506164d2bSGeorge Zhang ppn_set->consume_ppns, 52606164d2bSGeorge Zhang ppn_set->num_consume_pages * sizeof(*ppn_set->consume_ppns)); 52706164d2bSGeorge Zhang 52806164d2bSGeorge Zhang return VMCI_SUCCESS; 52906164d2bSGeorge Zhang } 53006164d2bSGeorge Zhang 53106164d2bSGeorge Zhang /* 53206164d2bSGeorge Zhang * Allocates kernel VA space of specified size plus space for the queue 53306164d2bSGeorge Zhang * and kernel interface. This is different from the guest queue allocator, 53406164d2bSGeorge Zhang * because we do not allocate our own queue header/data pages here but 53506164d2bSGeorge Zhang * share those of the guest. 53606164d2bSGeorge Zhang */ 53706164d2bSGeorge Zhang static struct vmci_queue *qp_host_alloc_queue(u64 size) 53806164d2bSGeorge Zhang { 53906164d2bSGeorge Zhang struct vmci_queue *queue; 540aa6467f1SJorgen Hansen size_t queue_page_size; 541146180c0SDan Carpenter u64 num_pages; 54206164d2bSGeorge Zhang const size_t queue_size = sizeof(*queue) + sizeof(*(queue->kernel_if)); 543aa6467f1SJorgen Hansen 544146180c0SDan Carpenter if (size > SIZE_MAX - PAGE_SIZE) 545146180c0SDan Carpenter return NULL; 546146180c0SDan Carpenter num_pages = DIV_ROUND_UP(size, PAGE_SIZE) + 1; 547aa6467f1SJorgen Hansen if (num_pages > (SIZE_MAX - queue_size) / 548aa6467f1SJorgen Hansen sizeof(*queue->kernel_if->u.h.page)) 549aa6467f1SJorgen Hansen return NULL; 550aa6467f1SJorgen Hansen 551aa6467f1SJorgen Hansen queue_page_size = num_pages * sizeof(*queue->kernel_if->u.h.page); 55206164d2bSGeorge Zhang 55306164d2bSGeorge Zhang queue = kzalloc(queue_size + queue_page_size, GFP_KERNEL); 55406164d2bSGeorge Zhang if (queue) { 55506164d2bSGeorge Zhang queue->q_header = NULL; 55606164d2bSGeorge Zhang queue->saved_header = NULL; 5576d6dfb4fSAndy King queue->kernel_if = (struct vmci_queue_kern_if *)(queue + 1); 55806164d2bSGeorge Zhang queue->kernel_if->host = true; 55906164d2bSGeorge Zhang queue->kernel_if->mutex = NULL; 56006164d2bSGeorge Zhang queue->kernel_if->num_pages = num_pages; 5616d6dfb4fSAndy King queue->kernel_if->u.h.header_page = 56206164d2bSGeorge Zhang (struct page **)((u8 *)queue + queue_size); 5636d6dfb4fSAndy King queue->kernel_if->u.h.page = 5646d6dfb4fSAndy King &queue->kernel_if->u.h.header_page[1]; 56506164d2bSGeorge Zhang } 56606164d2bSGeorge Zhang 56706164d2bSGeorge Zhang return queue; 56806164d2bSGeorge Zhang } 56906164d2bSGeorge Zhang 57006164d2bSGeorge Zhang /* 57106164d2bSGeorge Zhang * Frees kernel memory for a given queue (header plus translation 57206164d2bSGeorge Zhang * structure). 57306164d2bSGeorge Zhang */ 57406164d2bSGeorge Zhang static void qp_host_free_queue(struct vmci_queue *queue, u64 queue_size) 57506164d2bSGeorge Zhang { 57606164d2bSGeorge Zhang kfree(queue); 57706164d2bSGeorge Zhang } 57806164d2bSGeorge Zhang 57906164d2bSGeorge Zhang /* 58006164d2bSGeorge Zhang * Initialize the mutex for the pair of queues. This mutex is used to 58106164d2bSGeorge Zhang * protect the q_header and the buffer from changing out from under any 58206164d2bSGeorge Zhang * users of either queue. Of course, it's only any good if the mutexes 58306164d2bSGeorge Zhang * are actually acquired. Queue structure must lie on non-paged memory 58406164d2bSGeorge Zhang * or we cannot guarantee access to the mutex. 58506164d2bSGeorge Zhang */ 58606164d2bSGeorge Zhang static void qp_init_queue_mutex(struct vmci_queue *produce_q, 58706164d2bSGeorge Zhang struct vmci_queue *consume_q) 58806164d2bSGeorge Zhang { 58906164d2bSGeorge Zhang /* 59006164d2bSGeorge Zhang * Only the host queue has shared state - the guest queues do not 59106164d2bSGeorge Zhang * need to synchronize access using a queue mutex. 59206164d2bSGeorge Zhang */ 59306164d2bSGeorge Zhang 59406164d2bSGeorge Zhang if (produce_q->kernel_if->host) { 59506164d2bSGeorge Zhang produce_q->kernel_if->mutex = &produce_q->kernel_if->__mutex; 59606164d2bSGeorge Zhang consume_q->kernel_if->mutex = &produce_q->kernel_if->__mutex; 59706164d2bSGeorge Zhang mutex_init(produce_q->kernel_if->mutex); 59806164d2bSGeorge Zhang } 59906164d2bSGeorge Zhang } 60006164d2bSGeorge Zhang 60106164d2bSGeorge Zhang /* 60206164d2bSGeorge Zhang * Cleans up the mutex for the pair of queues. 60306164d2bSGeorge Zhang */ 60406164d2bSGeorge Zhang static void qp_cleanup_queue_mutex(struct vmci_queue *produce_q, 60506164d2bSGeorge Zhang struct vmci_queue *consume_q) 60606164d2bSGeorge Zhang { 60706164d2bSGeorge Zhang if (produce_q->kernel_if->host) { 60806164d2bSGeorge Zhang produce_q->kernel_if->mutex = NULL; 60906164d2bSGeorge Zhang consume_q->kernel_if->mutex = NULL; 61006164d2bSGeorge Zhang } 61106164d2bSGeorge Zhang } 61206164d2bSGeorge Zhang 61306164d2bSGeorge Zhang /* 61406164d2bSGeorge Zhang * Acquire the mutex for the queue. Note that the produce_q and 61506164d2bSGeorge Zhang * the consume_q share a mutex. So, only one of the two need to 61606164d2bSGeorge Zhang * be passed in to this routine. Either will work just fine. 61706164d2bSGeorge Zhang */ 61806164d2bSGeorge Zhang static void qp_acquire_queue_mutex(struct vmci_queue *queue) 61906164d2bSGeorge Zhang { 62006164d2bSGeorge Zhang if (queue->kernel_if->host) 62106164d2bSGeorge Zhang mutex_lock(queue->kernel_if->mutex); 62206164d2bSGeorge Zhang } 62306164d2bSGeorge Zhang 62406164d2bSGeorge Zhang /* 62506164d2bSGeorge Zhang * Release the mutex for the queue. Note that the produce_q and 62606164d2bSGeorge Zhang * the consume_q share a mutex. So, only one of the two need to 62706164d2bSGeorge Zhang * be passed in to this routine. Either will work just fine. 62806164d2bSGeorge Zhang */ 62906164d2bSGeorge Zhang static void qp_release_queue_mutex(struct vmci_queue *queue) 63006164d2bSGeorge Zhang { 63106164d2bSGeorge Zhang if (queue->kernel_if->host) 63206164d2bSGeorge Zhang mutex_unlock(queue->kernel_if->mutex); 63306164d2bSGeorge Zhang } 63406164d2bSGeorge Zhang 63506164d2bSGeorge Zhang /* 63606164d2bSGeorge Zhang * Helper function to release pages in the PageStoreAttachInfo 63706164d2bSGeorge Zhang * previously obtained using get_user_pages. 63806164d2bSGeorge Zhang */ 63906164d2bSGeorge Zhang static void qp_release_pages(struct page **pages, 64006164d2bSGeorge Zhang u64 num_pages, bool dirty) 64106164d2bSGeorge Zhang { 64206164d2bSGeorge Zhang int i; 64306164d2bSGeorge Zhang 64406164d2bSGeorge Zhang for (i = 0; i < num_pages; i++) { 64506164d2bSGeorge Zhang if (dirty) 64606164d2bSGeorge Zhang set_page_dirty(pages[i]); 64706164d2bSGeorge Zhang 64809cbfeafSKirill A. Shutemov put_page(pages[i]); 64906164d2bSGeorge Zhang pages[i] = NULL; 65006164d2bSGeorge Zhang } 65106164d2bSGeorge Zhang } 65206164d2bSGeorge Zhang 65306164d2bSGeorge Zhang /* 65406164d2bSGeorge Zhang * Lock the user pages referenced by the {produce,consume}Buffer 65506164d2bSGeorge Zhang * struct into memory and populate the {produce,consume}Pages 65606164d2bSGeorge Zhang * arrays in the attach structure with them. 65706164d2bSGeorge Zhang */ 65806164d2bSGeorge Zhang static int qp_host_get_user_memory(u64 produce_uva, 65906164d2bSGeorge Zhang u64 consume_uva, 66006164d2bSGeorge Zhang struct vmci_queue *produce_q, 66106164d2bSGeorge Zhang struct vmci_queue *consume_q) 66206164d2bSGeorge Zhang { 66306164d2bSGeorge Zhang int retval; 66406164d2bSGeorge Zhang int err = VMCI_SUCCESS; 66506164d2bSGeorge Zhang 666240ddd49SJan Kara retval = get_user_pages_fast((uintptr_t) produce_uva, 667240ddd49SJan Kara produce_q->kernel_if->num_pages, 1, 668240ddd49SJan Kara produce_q->kernel_if->u.h.header_page); 66906164d2bSGeorge Zhang if (retval < produce_q->kernel_if->num_pages) { 670bf136121SDavidlohr Bueso pr_debug("get_user_pages_fast(produce) failed (retval=%d)", 671bf136121SDavidlohr Bueso retval); 6726d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 6736d6dfb4fSAndy King retval, false); 67406164d2bSGeorge Zhang err = VMCI_ERROR_NO_MEM; 67506164d2bSGeorge Zhang goto out; 67606164d2bSGeorge Zhang } 67706164d2bSGeorge Zhang 678240ddd49SJan Kara retval = get_user_pages_fast((uintptr_t) consume_uva, 679240ddd49SJan Kara consume_q->kernel_if->num_pages, 1, 680240ddd49SJan Kara consume_q->kernel_if->u.h.header_page); 68106164d2bSGeorge Zhang if (retval < consume_q->kernel_if->num_pages) { 682bf136121SDavidlohr Bueso pr_debug("get_user_pages_fast(consume) failed (retval=%d)", 683bf136121SDavidlohr Bueso retval); 6846d6dfb4fSAndy King qp_release_pages(consume_q->kernel_if->u.h.header_page, 6856d6dfb4fSAndy King retval, false); 6866d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 68706164d2bSGeorge Zhang produce_q->kernel_if->num_pages, false); 68806164d2bSGeorge Zhang err = VMCI_ERROR_NO_MEM; 68906164d2bSGeorge Zhang } 69006164d2bSGeorge Zhang 69106164d2bSGeorge Zhang out: 69206164d2bSGeorge Zhang return err; 69306164d2bSGeorge Zhang } 69406164d2bSGeorge Zhang 69506164d2bSGeorge Zhang /* 69606164d2bSGeorge Zhang * Registers the specification of the user pages used for backing a queue 69706164d2bSGeorge Zhang * pair. Enough information to map in pages is stored in the OS specific 69806164d2bSGeorge Zhang * part of the struct vmci_queue structure. 69906164d2bSGeorge Zhang */ 70006164d2bSGeorge Zhang static int qp_host_register_user_memory(struct vmci_qp_page_store *page_store, 70106164d2bSGeorge Zhang struct vmci_queue *produce_q, 70206164d2bSGeorge Zhang struct vmci_queue *consume_q) 70306164d2bSGeorge Zhang { 70406164d2bSGeorge Zhang u64 produce_uva; 70506164d2bSGeorge Zhang u64 consume_uva; 70606164d2bSGeorge Zhang 70706164d2bSGeorge Zhang /* 70806164d2bSGeorge Zhang * The new style and the old style mapping only differs in 70906164d2bSGeorge Zhang * that we either get a single or two UVAs, so we split the 71006164d2bSGeorge Zhang * single UVA range at the appropriate spot. 71106164d2bSGeorge Zhang */ 71206164d2bSGeorge Zhang produce_uva = page_store->pages; 71306164d2bSGeorge Zhang consume_uva = page_store->pages + 71406164d2bSGeorge Zhang produce_q->kernel_if->num_pages * PAGE_SIZE; 71506164d2bSGeorge Zhang return qp_host_get_user_memory(produce_uva, consume_uva, produce_q, 71606164d2bSGeorge Zhang consume_q); 71706164d2bSGeorge Zhang } 71806164d2bSGeorge Zhang 71906164d2bSGeorge Zhang /* 72006164d2bSGeorge Zhang * Releases and removes the references to user pages stored in the attach 72106164d2bSGeorge Zhang * struct. Pages are released from the page cache and may become 72206164d2bSGeorge Zhang * swappable again. 72306164d2bSGeorge Zhang */ 72406164d2bSGeorge Zhang static void qp_host_unregister_user_memory(struct vmci_queue *produce_q, 72506164d2bSGeorge Zhang struct vmci_queue *consume_q) 72606164d2bSGeorge Zhang { 7276d6dfb4fSAndy King qp_release_pages(produce_q->kernel_if->u.h.header_page, 72806164d2bSGeorge Zhang produce_q->kernel_if->num_pages, true); 7296d6dfb4fSAndy King memset(produce_q->kernel_if->u.h.header_page, 0, 7306d6dfb4fSAndy King sizeof(*produce_q->kernel_if->u.h.header_page) * 73106164d2bSGeorge Zhang produce_q->kernel_if->num_pages); 7326d6dfb4fSAndy King qp_release_pages(consume_q->kernel_if->u.h.header_page, 73306164d2bSGeorge Zhang consume_q->kernel_if->num_pages, true); 7346d6dfb4fSAndy King memset(consume_q->kernel_if->u.h.header_page, 0, 7356d6dfb4fSAndy King sizeof(*consume_q->kernel_if->u.h.header_page) * 73606164d2bSGeorge Zhang consume_q->kernel_if->num_pages); 73706164d2bSGeorge Zhang } 73806164d2bSGeorge Zhang 73906164d2bSGeorge Zhang /* 74006164d2bSGeorge Zhang * Once qp_host_register_user_memory has been performed on a 74106164d2bSGeorge Zhang * queue, the queue pair headers can be mapped into the 74206164d2bSGeorge Zhang * kernel. Once mapped, they must be unmapped with 74306164d2bSGeorge Zhang * qp_host_unmap_queues prior to calling 74406164d2bSGeorge Zhang * qp_host_unregister_user_memory. 74506164d2bSGeorge Zhang * Pages are pinned. 74606164d2bSGeorge Zhang */ 74706164d2bSGeorge Zhang static int qp_host_map_queues(struct vmci_queue *produce_q, 74806164d2bSGeorge Zhang struct vmci_queue *consume_q) 74906164d2bSGeorge Zhang { 75006164d2bSGeorge Zhang int result; 75106164d2bSGeorge Zhang 75206164d2bSGeorge Zhang if (!produce_q->q_header || !consume_q->q_header) { 75306164d2bSGeorge Zhang struct page *headers[2]; 75406164d2bSGeorge Zhang 75506164d2bSGeorge Zhang if (produce_q->q_header != consume_q->q_header) 75606164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 75706164d2bSGeorge Zhang 7586d6dfb4fSAndy King if (produce_q->kernel_if->u.h.header_page == NULL || 7596d6dfb4fSAndy King *produce_q->kernel_if->u.h.header_page == NULL) 76006164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 76106164d2bSGeorge Zhang 7626d6dfb4fSAndy King headers[0] = *produce_q->kernel_if->u.h.header_page; 7636d6dfb4fSAndy King headers[1] = *consume_q->kernel_if->u.h.header_page; 76406164d2bSGeorge Zhang 76506164d2bSGeorge Zhang produce_q->q_header = vmap(headers, 2, VM_MAP, PAGE_KERNEL); 76606164d2bSGeorge Zhang if (produce_q->q_header != NULL) { 76706164d2bSGeorge Zhang consume_q->q_header = 76806164d2bSGeorge Zhang (struct vmci_queue_header *)((u8 *) 76906164d2bSGeorge Zhang produce_q->q_header + 77006164d2bSGeorge Zhang PAGE_SIZE); 77106164d2bSGeorge Zhang result = VMCI_SUCCESS; 77206164d2bSGeorge Zhang } else { 77306164d2bSGeorge Zhang pr_warn("vmap failed\n"); 77406164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 77506164d2bSGeorge Zhang } 77606164d2bSGeorge Zhang } else { 77706164d2bSGeorge Zhang result = VMCI_SUCCESS; 77806164d2bSGeorge Zhang } 77906164d2bSGeorge Zhang 78006164d2bSGeorge Zhang return result; 78106164d2bSGeorge Zhang } 78206164d2bSGeorge Zhang 78306164d2bSGeorge Zhang /* 78406164d2bSGeorge Zhang * Unmaps previously mapped queue pair headers from the kernel. 78506164d2bSGeorge Zhang * Pages are unpinned. 78606164d2bSGeorge Zhang */ 78706164d2bSGeorge Zhang static int qp_host_unmap_queues(u32 gid, 78806164d2bSGeorge Zhang struct vmci_queue *produce_q, 78906164d2bSGeorge Zhang struct vmci_queue *consume_q) 79006164d2bSGeorge Zhang { 79106164d2bSGeorge Zhang if (produce_q->q_header) { 79206164d2bSGeorge Zhang if (produce_q->q_header < consume_q->q_header) 79306164d2bSGeorge Zhang vunmap(produce_q->q_header); 79406164d2bSGeorge Zhang else 79506164d2bSGeorge Zhang vunmap(consume_q->q_header); 79606164d2bSGeorge Zhang 79706164d2bSGeorge Zhang produce_q->q_header = NULL; 79806164d2bSGeorge Zhang consume_q->q_header = NULL; 79906164d2bSGeorge Zhang } 80006164d2bSGeorge Zhang 80106164d2bSGeorge Zhang return VMCI_SUCCESS; 80206164d2bSGeorge Zhang } 80306164d2bSGeorge Zhang 80406164d2bSGeorge Zhang /* 80506164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. Assumes 80606164d2bSGeorge Zhang * that the list is locked. 80706164d2bSGeorge Zhang */ 80806164d2bSGeorge Zhang static struct qp_entry *qp_list_find(struct qp_list *qp_list, 80906164d2bSGeorge Zhang struct vmci_handle handle) 81006164d2bSGeorge Zhang { 81106164d2bSGeorge Zhang struct qp_entry *entry; 81206164d2bSGeorge Zhang 81306164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) 81406164d2bSGeorge Zhang return NULL; 81506164d2bSGeorge Zhang 81606164d2bSGeorge Zhang list_for_each_entry(entry, &qp_list->head, list_item) { 81706164d2bSGeorge Zhang if (vmci_handle_is_equal(entry->handle, handle)) 81806164d2bSGeorge Zhang return entry; 81906164d2bSGeorge Zhang } 82006164d2bSGeorge Zhang 82106164d2bSGeorge Zhang return NULL; 82206164d2bSGeorge Zhang } 82306164d2bSGeorge Zhang 82406164d2bSGeorge Zhang /* 82506164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. 82606164d2bSGeorge Zhang */ 82706164d2bSGeorge Zhang static struct qp_guest_endpoint * 82806164d2bSGeorge Zhang qp_guest_handle_to_entry(struct vmci_handle handle) 82906164d2bSGeorge Zhang { 83006164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 83106164d2bSGeorge Zhang struct qp_entry *qp = qp_list_find(&qp_guest_endpoints, handle); 83206164d2bSGeorge Zhang 83306164d2bSGeorge Zhang entry = qp ? container_of( 83406164d2bSGeorge Zhang qp, struct qp_guest_endpoint, qp) : NULL; 83506164d2bSGeorge Zhang return entry; 83606164d2bSGeorge Zhang } 83706164d2bSGeorge Zhang 83806164d2bSGeorge Zhang /* 83906164d2bSGeorge Zhang * Finds the entry in the list corresponding to a given handle. 84006164d2bSGeorge Zhang */ 84106164d2bSGeorge Zhang static struct qp_broker_entry * 84206164d2bSGeorge Zhang qp_broker_handle_to_entry(struct vmci_handle handle) 84306164d2bSGeorge Zhang { 84406164d2bSGeorge Zhang struct qp_broker_entry *entry; 84506164d2bSGeorge Zhang struct qp_entry *qp = qp_list_find(&qp_broker_list, handle); 84606164d2bSGeorge Zhang 84706164d2bSGeorge Zhang entry = qp ? container_of( 84806164d2bSGeorge Zhang qp, struct qp_broker_entry, qp) : NULL; 84906164d2bSGeorge Zhang return entry; 85006164d2bSGeorge Zhang } 85106164d2bSGeorge Zhang 85206164d2bSGeorge Zhang /* 85306164d2bSGeorge Zhang * Dispatches a queue pair event message directly into the local event 85406164d2bSGeorge Zhang * queue. 85506164d2bSGeorge Zhang */ 85606164d2bSGeorge Zhang static int qp_notify_peer_local(bool attach, struct vmci_handle handle) 85706164d2bSGeorge Zhang { 85806164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 85906164d2bSGeorge Zhang struct vmci_event_qp ev; 86006164d2bSGeorge Zhang 86106164d2bSGeorge Zhang ev.msg.hdr.dst = vmci_make_handle(context_id, VMCI_EVENT_HANDLER); 86206164d2bSGeorge Zhang ev.msg.hdr.src = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 86306164d2bSGeorge Zhang VMCI_CONTEXT_RESOURCE_ID); 86406164d2bSGeorge Zhang ev.msg.hdr.payload_size = sizeof(ev) - sizeof(ev.msg.hdr); 86506164d2bSGeorge Zhang ev.msg.event_data.event = 86606164d2bSGeorge Zhang attach ? VMCI_EVENT_QP_PEER_ATTACH : VMCI_EVENT_QP_PEER_DETACH; 86706164d2bSGeorge Zhang ev.payload.peer_id = context_id; 86806164d2bSGeorge Zhang ev.payload.handle = handle; 86906164d2bSGeorge Zhang 87006164d2bSGeorge Zhang return vmci_event_dispatch(&ev.msg.hdr); 87106164d2bSGeorge Zhang } 87206164d2bSGeorge Zhang 87306164d2bSGeorge Zhang /* 87406164d2bSGeorge Zhang * Allocates and initializes a qp_guest_endpoint structure. 87506164d2bSGeorge Zhang * Allocates a queue_pair rid (and handle) iff the given entry has 87606164d2bSGeorge Zhang * an invalid handle. 0 through VMCI_RESERVED_RESOURCE_ID_MAX 87706164d2bSGeorge Zhang * are reserved handles. Assumes that the QP list mutex is held 87806164d2bSGeorge Zhang * by the caller. 87906164d2bSGeorge Zhang */ 88006164d2bSGeorge Zhang static struct qp_guest_endpoint * 88106164d2bSGeorge Zhang qp_guest_endpoint_create(struct vmci_handle handle, 88206164d2bSGeorge Zhang u32 peer, 88306164d2bSGeorge Zhang u32 flags, 88406164d2bSGeorge Zhang u64 produce_size, 88506164d2bSGeorge Zhang u64 consume_size, 88606164d2bSGeorge Zhang void *produce_q, 88706164d2bSGeorge Zhang void *consume_q) 88806164d2bSGeorge Zhang { 88906164d2bSGeorge Zhang int result; 89006164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 89106164d2bSGeorge Zhang /* One page each for the queue headers. */ 89242281d20SAndy King const u64 num_ppns = DIV_ROUND_UP(produce_size, PAGE_SIZE) + 89342281d20SAndy King DIV_ROUND_UP(consume_size, PAGE_SIZE) + 2; 89406164d2bSGeorge Zhang 89506164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) { 89606164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 89706164d2bSGeorge Zhang 89806164d2bSGeorge Zhang handle = vmci_make_handle(context_id, VMCI_INVALID_ID); 89906164d2bSGeorge Zhang } 90006164d2bSGeorge Zhang 90106164d2bSGeorge Zhang entry = kzalloc(sizeof(*entry), GFP_KERNEL); 90206164d2bSGeorge Zhang if (entry) { 90306164d2bSGeorge Zhang entry->qp.peer = peer; 90406164d2bSGeorge Zhang entry->qp.flags = flags; 90506164d2bSGeorge Zhang entry->qp.produce_size = produce_size; 90606164d2bSGeorge Zhang entry->qp.consume_size = consume_size; 90706164d2bSGeorge Zhang entry->qp.ref_count = 0; 90806164d2bSGeorge Zhang entry->num_ppns = num_ppns; 90906164d2bSGeorge Zhang entry->produce_q = produce_q; 91006164d2bSGeorge Zhang entry->consume_q = consume_q; 91106164d2bSGeorge Zhang INIT_LIST_HEAD(&entry->qp.list_item); 91206164d2bSGeorge Zhang 91306164d2bSGeorge Zhang /* Add resource obj */ 91406164d2bSGeorge Zhang result = vmci_resource_add(&entry->resource, 91506164d2bSGeorge Zhang VMCI_RESOURCE_TYPE_QPAIR_GUEST, 91606164d2bSGeorge Zhang handle); 91706164d2bSGeorge Zhang entry->qp.handle = vmci_resource_handle(&entry->resource); 91806164d2bSGeorge Zhang if ((result != VMCI_SUCCESS) || 91906164d2bSGeorge Zhang qp_list_find(&qp_guest_endpoints, entry->qp.handle)) { 92006164d2bSGeorge Zhang pr_warn("Failed to add new resource (handle=0x%x:0x%x), error: %d", 92106164d2bSGeorge Zhang handle.context, handle.resource, result); 92206164d2bSGeorge Zhang kfree(entry); 92306164d2bSGeorge Zhang entry = NULL; 92406164d2bSGeorge Zhang } 92506164d2bSGeorge Zhang } 92606164d2bSGeorge Zhang return entry; 92706164d2bSGeorge Zhang } 92806164d2bSGeorge Zhang 92906164d2bSGeorge Zhang /* 93006164d2bSGeorge Zhang * Frees a qp_guest_endpoint structure. 93106164d2bSGeorge Zhang */ 93206164d2bSGeorge Zhang static void qp_guest_endpoint_destroy(struct qp_guest_endpoint *entry) 93306164d2bSGeorge Zhang { 93406164d2bSGeorge Zhang qp_free_ppn_set(&entry->ppn_set); 93506164d2bSGeorge Zhang qp_cleanup_queue_mutex(entry->produce_q, entry->consume_q); 93606164d2bSGeorge Zhang qp_free_queue(entry->produce_q, entry->qp.produce_size); 93706164d2bSGeorge Zhang qp_free_queue(entry->consume_q, entry->qp.consume_size); 93806164d2bSGeorge Zhang /* Unlink from resource hash table and free callback */ 93906164d2bSGeorge Zhang vmci_resource_remove(&entry->resource); 94006164d2bSGeorge Zhang 94106164d2bSGeorge Zhang kfree(entry); 94206164d2bSGeorge Zhang } 94306164d2bSGeorge Zhang 94406164d2bSGeorge Zhang /* 94506164d2bSGeorge Zhang * Helper to make a queue_pairAlloc hypercall when the driver is 94606164d2bSGeorge Zhang * supporting a guest device. 94706164d2bSGeorge Zhang */ 94806164d2bSGeorge Zhang static int qp_alloc_hypercall(const struct qp_guest_endpoint *entry) 94906164d2bSGeorge Zhang { 95006164d2bSGeorge Zhang struct vmci_qp_alloc_msg *alloc_msg; 95106164d2bSGeorge Zhang size_t msg_size; 95206164d2bSGeorge Zhang int result; 95306164d2bSGeorge Zhang 95406164d2bSGeorge Zhang if (!entry || entry->num_ppns <= 2) 95506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 95606164d2bSGeorge Zhang 95706164d2bSGeorge Zhang msg_size = sizeof(*alloc_msg) + 95806164d2bSGeorge Zhang (size_t) entry->num_ppns * sizeof(u32); 95906164d2bSGeorge Zhang alloc_msg = kmalloc(msg_size, GFP_KERNEL); 96006164d2bSGeorge Zhang if (!alloc_msg) 96106164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 96206164d2bSGeorge Zhang 96306164d2bSGeorge Zhang alloc_msg->hdr.dst = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 96406164d2bSGeorge Zhang VMCI_QUEUEPAIR_ALLOC); 96506164d2bSGeorge Zhang alloc_msg->hdr.src = VMCI_ANON_SRC_HANDLE; 96606164d2bSGeorge Zhang alloc_msg->hdr.payload_size = msg_size - VMCI_DG_HEADERSIZE; 96706164d2bSGeorge Zhang alloc_msg->handle = entry->qp.handle; 96806164d2bSGeorge Zhang alloc_msg->peer = entry->qp.peer; 96906164d2bSGeorge Zhang alloc_msg->flags = entry->qp.flags; 97006164d2bSGeorge Zhang alloc_msg->produce_size = entry->qp.produce_size; 97106164d2bSGeorge Zhang alloc_msg->consume_size = entry->qp.consume_size; 97206164d2bSGeorge Zhang alloc_msg->num_ppns = entry->num_ppns; 97306164d2bSGeorge Zhang 97406164d2bSGeorge Zhang result = qp_populate_ppn_set((u8 *)alloc_msg + sizeof(*alloc_msg), 97506164d2bSGeorge Zhang &entry->ppn_set); 97606164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 97706164d2bSGeorge Zhang result = vmci_send_datagram(&alloc_msg->hdr); 97806164d2bSGeorge Zhang 97906164d2bSGeorge Zhang kfree(alloc_msg); 98006164d2bSGeorge Zhang 98106164d2bSGeorge Zhang return result; 98206164d2bSGeorge Zhang } 98306164d2bSGeorge Zhang 98406164d2bSGeorge Zhang /* 98506164d2bSGeorge Zhang * Helper to make a queue_pairDetach hypercall when the driver is 98606164d2bSGeorge Zhang * supporting a guest device. 98706164d2bSGeorge Zhang */ 98806164d2bSGeorge Zhang static int qp_detatch_hypercall(struct vmci_handle handle) 98906164d2bSGeorge Zhang { 99006164d2bSGeorge Zhang struct vmci_qp_detach_msg detach_msg; 99106164d2bSGeorge Zhang 99206164d2bSGeorge Zhang detach_msg.hdr.dst = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 99306164d2bSGeorge Zhang VMCI_QUEUEPAIR_DETACH); 99406164d2bSGeorge Zhang detach_msg.hdr.src = VMCI_ANON_SRC_HANDLE; 99506164d2bSGeorge Zhang detach_msg.hdr.payload_size = sizeof(handle); 99606164d2bSGeorge Zhang detach_msg.handle = handle; 99706164d2bSGeorge Zhang 99806164d2bSGeorge Zhang return vmci_send_datagram(&detach_msg.hdr); 99906164d2bSGeorge Zhang } 100006164d2bSGeorge Zhang 100106164d2bSGeorge Zhang /* 100206164d2bSGeorge Zhang * Adds the given entry to the list. Assumes that the list is locked. 100306164d2bSGeorge Zhang */ 100406164d2bSGeorge Zhang static void qp_list_add_entry(struct qp_list *qp_list, struct qp_entry *entry) 100506164d2bSGeorge Zhang { 100606164d2bSGeorge Zhang if (entry) 100706164d2bSGeorge Zhang list_add(&entry->list_item, &qp_list->head); 100806164d2bSGeorge Zhang } 100906164d2bSGeorge Zhang 101006164d2bSGeorge Zhang /* 101106164d2bSGeorge Zhang * Removes the given entry from the list. Assumes that the list is locked. 101206164d2bSGeorge Zhang */ 101306164d2bSGeorge Zhang static void qp_list_remove_entry(struct qp_list *qp_list, 101406164d2bSGeorge Zhang struct qp_entry *entry) 101506164d2bSGeorge Zhang { 101606164d2bSGeorge Zhang if (entry) 101706164d2bSGeorge Zhang list_del(&entry->list_item); 101806164d2bSGeorge Zhang } 101906164d2bSGeorge Zhang 102006164d2bSGeorge Zhang /* 102106164d2bSGeorge Zhang * Helper for VMCI queue_pair detach interface. Frees the physical 102206164d2bSGeorge Zhang * pages for the queue pair. 102306164d2bSGeorge Zhang */ 102406164d2bSGeorge Zhang static int qp_detatch_guest_work(struct vmci_handle handle) 102506164d2bSGeorge Zhang { 102606164d2bSGeorge Zhang int result; 102706164d2bSGeorge Zhang struct qp_guest_endpoint *entry; 102806164d2bSGeorge Zhang u32 ref_count = ~0; /* To avoid compiler warning below */ 102906164d2bSGeorge Zhang 103006164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 103106164d2bSGeorge Zhang 103206164d2bSGeorge Zhang entry = qp_guest_handle_to_entry(handle); 103306164d2bSGeorge Zhang if (!entry) { 103406164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 103506164d2bSGeorge Zhang return VMCI_ERROR_NOT_FOUND; 103606164d2bSGeorge Zhang } 103706164d2bSGeorge Zhang 103806164d2bSGeorge Zhang if (entry->qp.flags & VMCI_QPFLAG_LOCAL) { 103906164d2bSGeorge Zhang result = VMCI_SUCCESS; 104006164d2bSGeorge Zhang 104106164d2bSGeorge Zhang if (entry->qp.ref_count > 1) { 104206164d2bSGeorge Zhang result = qp_notify_peer_local(false, handle); 104306164d2bSGeorge Zhang /* 104406164d2bSGeorge Zhang * We can fail to notify a local queuepair 104506164d2bSGeorge Zhang * because we can't allocate. We still want 104606164d2bSGeorge Zhang * to release the entry if that happens, so 104706164d2bSGeorge Zhang * don't bail out yet. 104806164d2bSGeorge Zhang */ 104906164d2bSGeorge Zhang } 105006164d2bSGeorge Zhang } else { 105106164d2bSGeorge Zhang result = qp_detatch_hypercall(handle); 105206164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 105306164d2bSGeorge Zhang /* 105406164d2bSGeorge Zhang * We failed to notify a non-local queuepair. 105506164d2bSGeorge Zhang * That other queuepair might still be 105606164d2bSGeorge Zhang * accessing the shared memory, so don't 105706164d2bSGeorge Zhang * release the entry yet. It will get cleaned 105806164d2bSGeorge Zhang * up by VMCIqueue_pair_Exit() if necessary 105906164d2bSGeorge Zhang * (assuming we are going away, otherwise why 106006164d2bSGeorge Zhang * did this fail?). 106106164d2bSGeorge Zhang */ 106206164d2bSGeorge Zhang 106306164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 106406164d2bSGeorge Zhang return result; 106506164d2bSGeorge Zhang } 106606164d2bSGeorge Zhang } 106706164d2bSGeorge Zhang 106806164d2bSGeorge Zhang /* 106906164d2bSGeorge Zhang * If we get here then we either failed to notify a local queuepair, or 107006164d2bSGeorge Zhang * we succeeded in all cases. Release the entry if required. 107106164d2bSGeorge Zhang */ 107206164d2bSGeorge Zhang 107306164d2bSGeorge Zhang entry->qp.ref_count--; 107406164d2bSGeorge Zhang if (entry->qp.ref_count == 0) 107506164d2bSGeorge Zhang qp_list_remove_entry(&qp_guest_endpoints, &entry->qp); 107606164d2bSGeorge Zhang 107706164d2bSGeorge Zhang /* If we didn't remove the entry, this could change once we unlock. */ 107806164d2bSGeorge Zhang if (entry) 107906164d2bSGeorge Zhang ref_count = entry->qp.ref_count; 108006164d2bSGeorge Zhang 108106164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 108206164d2bSGeorge Zhang 108306164d2bSGeorge Zhang if (ref_count == 0) 108406164d2bSGeorge Zhang qp_guest_endpoint_destroy(entry); 108506164d2bSGeorge Zhang 108606164d2bSGeorge Zhang return result; 108706164d2bSGeorge Zhang } 108806164d2bSGeorge Zhang 108906164d2bSGeorge Zhang /* 109006164d2bSGeorge Zhang * This functions handles the actual allocation of a VMCI queue 109106164d2bSGeorge Zhang * pair guest endpoint. Allocates physical pages for the queue 109206164d2bSGeorge Zhang * pair. It makes OS dependent calls through generic wrappers. 109306164d2bSGeorge Zhang */ 109406164d2bSGeorge Zhang static int qp_alloc_guest_work(struct vmci_handle *handle, 109506164d2bSGeorge Zhang struct vmci_queue **produce_q, 109606164d2bSGeorge Zhang u64 produce_size, 109706164d2bSGeorge Zhang struct vmci_queue **consume_q, 109806164d2bSGeorge Zhang u64 consume_size, 109906164d2bSGeorge Zhang u32 peer, 110006164d2bSGeorge Zhang u32 flags, 110106164d2bSGeorge Zhang u32 priv_flags) 110206164d2bSGeorge Zhang { 110306164d2bSGeorge Zhang const u64 num_produce_pages = 110442281d20SAndy King DIV_ROUND_UP(produce_size, PAGE_SIZE) + 1; 110506164d2bSGeorge Zhang const u64 num_consume_pages = 110642281d20SAndy King DIV_ROUND_UP(consume_size, PAGE_SIZE) + 1; 110706164d2bSGeorge Zhang void *my_produce_q = NULL; 110806164d2bSGeorge Zhang void *my_consume_q = NULL; 110906164d2bSGeorge Zhang int result; 111006164d2bSGeorge Zhang struct qp_guest_endpoint *queue_pair_entry = NULL; 111106164d2bSGeorge Zhang 111206164d2bSGeorge Zhang if (priv_flags != VMCI_NO_PRIVILEGE_FLAGS) 111306164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 111406164d2bSGeorge Zhang 111506164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 111606164d2bSGeorge Zhang 111706164d2bSGeorge Zhang queue_pair_entry = qp_guest_handle_to_entry(*handle); 111806164d2bSGeorge Zhang if (queue_pair_entry) { 111906164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) { 112006164d2bSGeorge Zhang /* Local attach case. */ 112106164d2bSGeorge Zhang if (queue_pair_entry->qp.ref_count > 1) { 112206164d2bSGeorge Zhang pr_devel("Error attempting to attach more than once\n"); 112306164d2bSGeorge Zhang result = VMCI_ERROR_UNAVAILABLE; 112406164d2bSGeorge Zhang goto error_keep_entry; 112506164d2bSGeorge Zhang } 112606164d2bSGeorge Zhang 112706164d2bSGeorge Zhang if (queue_pair_entry->qp.produce_size != consume_size || 112806164d2bSGeorge Zhang queue_pair_entry->qp.consume_size != 112906164d2bSGeorge Zhang produce_size || 113006164d2bSGeorge Zhang queue_pair_entry->qp.flags != 113106164d2bSGeorge Zhang (flags & ~VMCI_QPFLAG_ATTACH_ONLY)) { 113206164d2bSGeorge Zhang pr_devel("Error mismatched queue pair in local attach\n"); 113306164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_MISMATCH; 113406164d2bSGeorge Zhang goto error_keep_entry; 113506164d2bSGeorge Zhang } 113606164d2bSGeorge Zhang 113706164d2bSGeorge Zhang /* 113806164d2bSGeorge Zhang * Do a local attach. We swap the consume and 113906164d2bSGeorge Zhang * produce queues for the attacher and deliver 114006164d2bSGeorge Zhang * an attach event. 114106164d2bSGeorge Zhang */ 114206164d2bSGeorge Zhang result = qp_notify_peer_local(true, *handle); 114306164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 114406164d2bSGeorge Zhang goto error_keep_entry; 114506164d2bSGeorge Zhang 114606164d2bSGeorge Zhang my_produce_q = queue_pair_entry->consume_q; 114706164d2bSGeorge Zhang my_consume_q = queue_pair_entry->produce_q; 114806164d2bSGeorge Zhang goto out; 114906164d2bSGeorge Zhang } 115006164d2bSGeorge Zhang 115106164d2bSGeorge Zhang result = VMCI_ERROR_ALREADY_EXISTS; 115206164d2bSGeorge Zhang goto error_keep_entry; 115306164d2bSGeorge Zhang } 115406164d2bSGeorge Zhang 115506164d2bSGeorge Zhang my_produce_q = qp_alloc_queue(produce_size, flags); 115606164d2bSGeorge Zhang if (!my_produce_q) { 115706164d2bSGeorge Zhang pr_warn("Error allocating pages for produce queue\n"); 115806164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 115906164d2bSGeorge Zhang goto error; 116006164d2bSGeorge Zhang } 116106164d2bSGeorge Zhang 116206164d2bSGeorge Zhang my_consume_q = qp_alloc_queue(consume_size, flags); 116306164d2bSGeorge Zhang if (!my_consume_q) { 116406164d2bSGeorge Zhang pr_warn("Error allocating pages for consume queue\n"); 116506164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 116606164d2bSGeorge Zhang goto error; 116706164d2bSGeorge Zhang } 116806164d2bSGeorge Zhang 116906164d2bSGeorge Zhang queue_pair_entry = qp_guest_endpoint_create(*handle, peer, flags, 117006164d2bSGeorge Zhang produce_size, consume_size, 117106164d2bSGeorge Zhang my_produce_q, my_consume_q); 117206164d2bSGeorge Zhang if (!queue_pair_entry) { 117306164d2bSGeorge Zhang pr_warn("Error allocating memory in %s\n", __func__); 117406164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 117506164d2bSGeorge Zhang goto error; 117606164d2bSGeorge Zhang } 117706164d2bSGeorge Zhang 117806164d2bSGeorge Zhang result = qp_alloc_ppn_set(my_produce_q, num_produce_pages, my_consume_q, 117906164d2bSGeorge Zhang num_consume_pages, 118006164d2bSGeorge Zhang &queue_pair_entry->ppn_set); 118106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 118206164d2bSGeorge Zhang pr_warn("qp_alloc_ppn_set failed\n"); 118306164d2bSGeorge Zhang goto error; 118406164d2bSGeorge Zhang } 118506164d2bSGeorge Zhang 118606164d2bSGeorge Zhang /* 118706164d2bSGeorge Zhang * It's only necessary to notify the host if this queue pair will be 118806164d2bSGeorge Zhang * attached to from another context. 118906164d2bSGeorge Zhang */ 119006164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) { 119106164d2bSGeorge Zhang /* Local create case. */ 119206164d2bSGeorge Zhang u32 context_id = vmci_get_context_id(); 119306164d2bSGeorge Zhang 119406164d2bSGeorge Zhang /* 119506164d2bSGeorge Zhang * Enforce similar checks on local queue pairs as we 119606164d2bSGeorge Zhang * do for regular ones. The handle's context must 119706164d2bSGeorge Zhang * match the creator or attacher context id (here they 119806164d2bSGeorge Zhang * are both the current context id) and the 119906164d2bSGeorge Zhang * attach-only flag cannot exist during create. We 120006164d2bSGeorge Zhang * also ensure specified peer is this context or an 120106164d2bSGeorge Zhang * invalid one. 120206164d2bSGeorge Zhang */ 120306164d2bSGeorge Zhang if (queue_pair_entry->qp.handle.context != context_id || 120406164d2bSGeorge Zhang (queue_pair_entry->qp.peer != VMCI_INVALID_ID && 120506164d2bSGeorge Zhang queue_pair_entry->qp.peer != context_id)) { 120606164d2bSGeorge Zhang result = VMCI_ERROR_NO_ACCESS; 120706164d2bSGeorge Zhang goto error; 120806164d2bSGeorge Zhang } 120906164d2bSGeorge Zhang 121006164d2bSGeorge Zhang if (queue_pair_entry->qp.flags & VMCI_QPFLAG_ATTACH_ONLY) { 121106164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 121206164d2bSGeorge Zhang goto error; 121306164d2bSGeorge Zhang } 121406164d2bSGeorge Zhang } else { 121506164d2bSGeorge Zhang result = qp_alloc_hypercall(queue_pair_entry); 121606164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 121706164d2bSGeorge Zhang pr_warn("qp_alloc_hypercall result = %d\n", result); 121806164d2bSGeorge Zhang goto error; 121906164d2bSGeorge Zhang } 122006164d2bSGeorge Zhang } 122106164d2bSGeorge Zhang 122206164d2bSGeorge Zhang qp_init_queue_mutex((struct vmci_queue *)my_produce_q, 122306164d2bSGeorge Zhang (struct vmci_queue *)my_consume_q); 122406164d2bSGeorge Zhang 122506164d2bSGeorge Zhang qp_list_add_entry(&qp_guest_endpoints, &queue_pair_entry->qp); 122606164d2bSGeorge Zhang 122706164d2bSGeorge Zhang out: 122806164d2bSGeorge Zhang queue_pair_entry->qp.ref_count++; 122906164d2bSGeorge Zhang *handle = queue_pair_entry->qp.handle; 123006164d2bSGeorge Zhang *produce_q = (struct vmci_queue *)my_produce_q; 123106164d2bSGeorge Zhang *consume_q = (struct vmci_queue *)my_consume_q; 123206164d2bSGeorge Zhang 123306164d2bSGeorge Zhang /* 123406164d2bSGeorge Zhang * We should initialize the queue pair header pages on a local 123506164d2bSGeorge Zhang * queue pair create. For non-local queue pairs, the 123606164d2bSGeorge Zhang * hypervisor initializes the header pages in the create step. 123706164d2bSGeorge Zhang */ 123806164d2bSGeorge Zhang if ((queue_pair_entry->qp.flags & VMCI_QPFLAG_LOCAL) && 123906164d2bSGeorge Zhang queue_pair_entry->qp.ref_count == 1) { 124006164d2bSGeorge Zhang vmci_q_header_init((*produce_q)->q_header, *handle); 124106164d2bSGeorge Zhang vmci_q_header_init((*consume_q)->q_header, *handle); 124206164d2bSGeorge Zhang } 124306164d2bSGeorge Zhang 124406164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 124506164d2bSGeorge Zhang 124606164d2bSGeorge Zhang return VMCI_SUCCESS; 124706164d2bSGeorge Zhang 124806164d2bSGeorge Zhang error: 124906164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 125006164d2bSGeorge Zhang if (queue_pair_entry) { 125106164d2bSGeorge Zhang /* The queues will be freed inside the destroy routine. */ 125206164d2bSGeorge Zhang qp_guest_endpoint_destroy(queue_pair_entry); 125306164d2bSGeorge Zhang } else { 125406164d2bSGeorge Zhang qp_free_queue(my_produce_q, produce_size); 125506164d2bSGeorge Zhang qp_free_queue(my_consume_q, consume_size); 125606164d2bSGeorge Zhang } 125706164d2bSGeorge Zhang return result; 125806164d2bSGeorge Zhang 125906164d2bSGeorge Zhang error_keep_entry: 126006164d2bSGeorge Zhang /* This path should only be used when an existing entry was found. */ 126106164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 126206164d2bSGeorge Zhang return result; 126306164d2bSGeorge Zhang } 126406164d2bSGeorge Zhang 126506164d2bSGeorge Zhang /* 126606164d2bSGeorge Zhang * The first endpoint issuing a queue pair allocation will create the state 126706164d2bSGeorge Zhang * of the queue pair in the queue pair broker. 126806164d2bSGeorge Zhang * 126906164d2bSGeorge Zhang * If the creator is a guest, it will associate a VMX virtual address range 127006164d2bSGeorge Zhang * with the queue pair as specified by the page_store. For compatibility with 127106164d2bSGeorge Zhang * older VMX'en, that would use a separate step to set the VMX virtual 127206164d2bSGeorge Zhang * address range, the virtual address range can be registered later using 127306164d2bSGeorge Zhang * vmci_qp_broker_set_page_store. In that case, a page_store of NULL should be 127406164d2bSGeorge Zhang * used. 127506164d2bSGeorge Zhang * 127606164d2bSGeorge Zhang * If the creator is the host, a page_store of NULL should be used as well, 127706164d2bSGeorge Zhang * since the host is not able to supply a page store for the queue pair. 127806164d2bSGeorge Zhang * 127906164d2bSGeorge Zhang * For older VMX and host callers, the queue pair will be created in the 128006164d2bSGeorge Zhang * VMCIQPB_CREATED_NO_MEM state, and for current VMX callers, it will be 128106164d2bSGeorge Zhang * created in VMCOQPB_CREATED_MEM state. 128206164d2bSGeorge Zhang */ 128306164d2bSGeorge Zhang static int qp_broker_create(struct vmci_handle handle, 128406164d2bSGeorge Zhang u32 peer, 128506164d2bSGeorge Zhang u32 flags, 128606164d2bSGeorge Zhang u32 priv_flags, 128706164d2bSGeorge Zhang u64 produce_size, 128806164d2bSGeorge Zhang u64 consume_size, 128906164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 129006164d2bSGeorge Zhang struct vmci_ctx *context, 129106164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 129206164d2bSGeorge Zhang void *client_data, struct qp_broker_entry **ent) 129306164d2bSGeorge Zhang { 129406164d2bSGeorge Zhang struct qp_broker_entry *entry = NULL; 129506164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 129606164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 129706164d2bSGeorge Zhang int result; 129806164d2bSGeorge Zhang u64 guest_produce_size; 129906164d2bSGeorge Zhang u64 guest_consume_size; 130006164d2bSGeorge Zhang 130106164d2bSGeorge Zhang /* Do not create if the caller asked not to. */ 130206164d2bSGeorge Zhang if (flags & VMCI_QPFLAG_ATTACH_ONLY) 130306164d2bSGeorge Zhang return VMCI_ERROR_NOT_FOUND; 130406164d2bSGeorge Zhang 130506164d2bSGeorge Zhang /* 130606164d2bSGeorge Zhang * Creator's context ID should match handle's context ID or the creator 130706164d2bSGeorge Zhang * must allow the context in handle's context ID as the "peer". 130806164d2bSGeorge Zhang */ 130906164d2bSGeorge Zhang if (handle.context != context_id && handle.context != peer) 131006164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 131106164d2bSGeorge Zhang 131206164d2bSGeorge Zhang if (VMCI_CONTEXT_IS_VM(context_id) && VMCI_CONTEXT_IS_VM(peer)) 131306164d2bSGeorge Zhang return VMCI_ERROR_DST_UNREACHABLE; 131406164d2bSGeorge Zhang 131506164d2bSGeorge Zhang /* 131606164d2bSGeorge Zhang * Creator's context ID for local queue pairs should match the 131706164d2bSGeorge Zhang * peer, if a peer is specified. 131806164d2bSGeorge Zhang */ 131906164d2bSGeorge Zhang if (is_local && peer != VMCI_INVALID_ID && context_id != peer) 132006164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 132106164d2bSGeorge Zhang 132206164d2bSGeorge Zhang entry = kzalloc(sizeof(*entry), GFP_ATOMIC); 132306164d2bSGeorge Zhang if (!entry) 132406164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 132506164d2bSGeorge Zhang 132606164d2bSGeorge Zhang if (vmci_ctx_get_id(context) == VMCI_HOST_CONTEXT_ID && !is_local) { 132706164d2bSGeorge Zhang /* 132806164d2bSGeorge Zhang * The queue pair broker entry stores values from the guest 132906164d2bSGeorge Zhang * point of view, so a creating host side endpoint should swap 133006164d2bSGeorge Zhang * produce and consume values -- unless it is a local queue 133106164d2bSGeorge Zhang * pair, in which case no swapping is necessary, since the local 133206164d2bSGeorge Zhang * attacher will swap queues. 133306164d2bSGeorge Zhang */ 133406164d2bSGeorge Zhang 133506164d2bSGeorge Zhang guest_produce_size = consume_size; 133606164d2bSGeorge Zhang guest_consume_size = produce_size; 133706164d2bSGeorge Zhang } else { 133806164d2bSGeorge Zhang guest_produce_size = produce_size; 133906164d2bSGeorge Zhang guest_consume_size = consume_size; 134006164d2bSGeorge Zhang } 134106164d2bSGeorge Zhang 134206164d2bSGeorge Zhang entry->qp.handle = handle; 134306164d2bSGeorge Zhang entry->qp.peer = peer; 134406164d2bSGeorge Zhang entry->qp.flags = flags; 134506164d2bSGeorge Zhang entry->qp.produce_size = guest_produce_size; 134606164d2bSGeorge Zhang entry->qp.consume_size = guest_consume_size; 134706164d2bSGeorge Zhang entry->qp.ref_count = 1; 134806164d2bSGeorge Zhang entry->create_id = context_id; 134906164d2bSGeorge Zhang entry->attach_id = VMCI_INVALID_ID; 135006164d2bSGeorge Zhang entry->state = VMCIQPB_NEW; 135106164d2bSGeorge Zhang entry->require_trusted_attach = 135206164d2bSGeorge Zhang !!(context->priv_flags & VMCI_PRIVILEGE_FLAG_RESTRICTED); 135306164d2bSGeorge Zhang entry->created_by_trusted = 135406164d2bSGeorge Zhang !!(priv_flags & VMCI_PRIVILEGE_FLAG_TRUSTED); 135506164d2bSGeorge Zhang entry->vmci_page_files = false; 135606164d2bSGeorge Zhang entry->wakeup_cb = wakeup_cb; 135706164d2bSGeorge Zhang entry->client_data = client_data; 135806164d2bSGeorge Zhang entry->produce_q = qp_host_alloc_queue(guest_produce_size); 135906164d2bSGeorge Zhang if (entry->produce_q == NULL) { 136006164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 136106164d2bSGeorge Zhang goto error; 136206164d2bSGeorge Zhang } 136306164d2bSGeorge Zhang entry->consume_q = qp_host_alloc_queue(guest_consume_size); 136406164d2bSGeorge Zhang if (entry->consume_q == NULL) { 136506164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 136606164d2bSGeorge Zhang goto error; 136706164d2bSGeorge Zhang } 136806164d2bSGeorge Zhang 136906164d2bSGeorge Zhang qp_init_queue_mutex(entry->produce_q, entry->consume_q); 137006164d2bSGeorge Zhang 137106164d2bSGeorge Zhang INIT_LIST_HEAD(&entry->qp.list_item); 137206164d2bSGeorge Zhang 137306164d2bSGeorge Zhang if (is_local) { 137406164d2bSGeorge Zhang u8 *tmp; 137506164d2bSGeorge Zhang 137606164d2bSGeorge Zhang entry->local_mem = kcalloc(QPE_NUM_PAGES(entry->qp), 137706164d2bSGeorge Zhang PAGE_SIZE, GFP_KERNEL); 137806164d2bSGeorge Zhang if (entry->local_mem == NULL) { 137906164d2bSGeorge Zhang result = VMCI_ERROR_NO_MEM; 138006164d2bSGeorge Zhang goto error; 138106164d2bSGeorge Zhang } 138206164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 138306164d2bSGeorge Zhang entry->produce_q->q_header = entry->local_mem; 138406164d2bSGeorge Zhang tmp = (u8 *)entry->local_mem + PAGE_SIZE * 138542281d20SAndy King (DIV_ROUND_UP(entry->qp.produce_size, PAGE_SIZE) + 1); 138606164d2bSGeorge Zhang entry->consume_q->q_header = (struct vmci_queue_header *)tmp; 138706164d2bSGeorge Zhang } else if (page_store) { 138806164d2bSGeorge Zhang /* 138906164d2bSGeorge Zhang * The VMX already initialized the queue pair headers, so no 139006164d2bSGeorge Zhang * need for the kernel side to do that. 139106164d2bSGeorge Zhang */ 139206164d2bSGeorge Zhang result = qp_host_register_user_memory(page_store, 139306164d2bSGeorge Zhang entry->produce_q, 139406164d2bSGeorge Zhang entry->consume_q); 139506164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 139606164d2bSGeorge Zhang goto error; 139706164d2bSGeorge Zhang 139806164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 139906164d2bSGeorge Zhang } else { 140006164d2bSGeorge Zhang /* 140106164d2bSGeorge Zhang * A create without a page_store may be either a host 140206164d2bSGeorge Zhang * side create (in which case we are waiting for the 140306164d2bSGeorge Zhang * guest side to supply the memory) or an old style 140406164d2bSGeorge Zhang * queue pair create (in which case we will expect a 140506164d2bSGeorge Zhang * set page store call as the next step). 140606164d2bSGeorge Zhang */ 140706164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_NO_MEM; 140806164d2bSGeorge Zhang } 140906164d2bSGeorge Zhang 141006164d2bSGeorge Zhang qp_list_add_entry(&qp_broker_list, &entry->qp); 141106164d2bSGeorge Zhang if (ent != NULL) 141206164d2bSGeorge Zhang *ent = entry; 141306164d2bSGeorge Zhang 141406164d2bSGeorge Zhang /* Add to resource obj */ 141506164d2bSGeorge Zhang result = vmci_resource_add(&entry->resource, 141606164d2bSGeorge Zhang VMCI_RESOURCE_TYPE_QPAIR_HOST, 141706164d2bSGeorge Zhang handle); 141806164d2bSGeorge Zhang if (result != VMCI_SUCCESS) { 141906164d2bSGeorge Zhang pr_warn("Failed to add new resource (handle=0x%x:0x%x), error: %d", 142006164d2bSGeorge Zhang handle.context, handle.resource, result); 142106164d2bSGeorge Zhang goto error; 142206164d2bSGeorge Zhang } 142306164d2bSGeorge Zhang 142406164d2bSGeorge Zhang entry->qp.handle = vmci_resource_handle(&entry->resource); 142506164d2bSGeorge Zhang if (is_local) { 142606164d2bSGeorge Zhang vmci_q_header_init(entry->produce_q->q_header, 142706164d2bSGeorge Zhang entry->qp.handle); 142806164d2bSGeorge Zhang vmci_q_header_init(entry->consume_q->q_header, 142906164d2bSGeorge Zhang entry->qp.handle); 143006164d2bSGeorge Zhang } 143106164d2bSGeorge Zhang 143206164d2bSGeorge Zhang vmci_ctx_qp_create(context, entry->qp.handle); 143306164d2bSGeorge Zhang 143406164d2bSGeorge Zhang return VMCI_SUCCESS; 143506164d2bSGeorge Zhang 143606164d2bSGeorge Zhang error: 143706164d2bSGeorge Zhang if (entry != NULL) { 143806164d2bSGeorge Zhang qp_host_free_queue(entry->produce_q, guest_produce_size); 143906164d2bSGeorge Zhang qp_host_free_queue(entry->consume_q, guest_consume_size); 144006164d2bSGeorge Zhang kfree(entry); 144106164d2bSGeorge Zhang } 144206164d2bSGeorge Zhang 144306164d2bSGeorge Zhang return result; 144406164d2bSGeorge Zhang } 144506164d2bSGeorge Zhang 144606164d2bSGeorge Zhang /* 144706164d2bSGeorge Zhang * Enqueues an event datagram to notify the peer VM attached to 144806164d2bSGeorge Zhang * the given queue pair handle about attach/detach event by the 144906164d2bSGeorge Zhang * given VM. Returns Payload size of datagram enqueued on 145006164d2bSGeorge Zhang * success, error code otherwise. 145106164d2bSGeorge Zhang */ 145206164d2bSGeorge Zhang static int qp_notify_peer(bool attach, 145306164d2bSGeorge Zhang struct vmci_handle handle, 145406164d2bSGeorge Zhang u32 my_id, 145506164d2bSGeorge Zhang u32 peer_id) 145606164d2bSGeorge Zhang { 145706164d2bSGeorge Zhang int rv; 145806164d2bSGeorge Zhang struct vmci_event_qp ev; 145906164d2bSGeorge Zhang 146006164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || my_id == VMCI_INVALID_ID || 146106164d2bSGeorge Zhang peer_id == VMCI_INVALID_ID) 146206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 146306164d2bSGeorge Zhang 146406164d2bSGeorge Zhang /* 146506164d2bSGeorge Zhang * In vmci_ctx_enqueue_datagram() we enforce the upper limit on 146606164d2bSGeorge Zhang * number of pending events from the hypervisor to a given VM 146706164d2bSGeorge Zhang * otherwise a rogue VM could do an arbitrary number of attach 146806164d2bSGeorge Zhang * and detach operations causing memory pressure in the host 146906164d2bSGeorge Zhang * kernel. 147006164d2bSGeorge Zhang */ 147106164d2bSGeorge Zhang 147206164d2bSGeorge Zhang ev.msg.hdr.dst = vmci_make_handle(peer_id, VMCI_EVENT_HANDLER); 147306164d2bSGeorge Zhang ev.msg.hdr.src = vmci_make_handle(VMCI_HYPERVISOR_CONTEXT_ID, 147406164d2bSGeorge Zhang VMCI_CONTEXT_RESOURCE_ID); 147506164d2bSGeorge Zhang ev.msg.hdr.payload_size = sizeof(ev) - sizeof(ev.msg.hdr); 147606164d2bSGeorge Zhang ev.msg.event_data.event = attach ? 147706164d2bSGeorge Zhang VMCI_EVENT_QP_PEER_ATTACH : VMCI_EVENT_QP_PEER_DETACH; 147806164d2bSGeorge Zhang ev.payload.handle = handle; 147906164d2bSGeorge Zhang ev.payload.peer_id = my_id; 148006164d2bSGeorge Zhang 148106164d2bSGeorge Zhang rv = vmci_datagram_dispatch(VMCI_HYPERVISOR_CONTEXT_ID, 148206164d2bSGeorge Zhang &ev.msg.hdr, false); 148306164d2bSGeorge Zhang if (rv < VMCI_SUCCESS) 148406164d2bSGeorge Zhang pr_warn("Failed to enqueue queue_pair %s event datagram for context (ID=0x%x)\n", 148506164d2bSGeorge Zhang attach ? "ATTACH" : "DETACH", peer_id); 148606164d2bSGeorge Zhang 148706164d2bSGeorge Zhang return rv; 148806164d2bSGeorge Zhang } 148906164d2bSGeorge Zhang 149006164d2bSGeorge Zhang /* 149106164d2bSGeorge Zhang * The second endpoint issuing a queue pair allocation will attach to 149206164d2bSGeorge Zhang * the queue pair registered with the queue pair broker. 149306164d2bSGeorge Zhang * 149406164d2bSGeorge Zhang * If the attacher is a guest, it will associate a VMX virtual address 149506164d2bSGeorge Zhang * range with the queue pair as specified by the page_store. At this 149606164d2bSGeorge Zhang * point, the already attach host endpoint may start using the queue 149706164d2bSGeorge Zhang * pair, and an attach event is sent to it. For compatibility with 149806164d2bSGeorge Zhang * older VMX'en, that used a separate step to set the VMX virtual 149906164d2bSGeorge Zhang * address range, the virtual address range can be registered later 150006164d2bSGeorge Zhang * using vmci_qp_broker_set_page_store. In that case, a page_store of 150106164d2bSGeorge Zhang * NULL should be used, and the attach event will be generated once 150206164d2bSGeorge Zhang * the actual page store has been set. 150306164d2bSGeorge Zhang * 150406164d2bSGeorge Zhang * If the attacher is the host, a page_store of NULL should be used as 150506164d2bSGeorge Zhang * well, since the page store information is already set by the guest. 150606164d2bSGeorge Zhang * 150706164d2bSGeorge Zhang * For new VMX and host callers, the queue pair will be moved to the 150806164d2bSGeorge Zhang * VMCIQPB_ATTACHED_MEM state, and for older VMX callers, it will be 150906164d2bSGeorge Zhang * moved to the VMCOQPB_ATTACHED_NO_MEM state. 151006164d2bSGeorge Zhang */ 151106164d2bSGeorge Zhang static int qp_broker_attach(struct qp_broker_entry *entry, 151206164d2bSGeorge Zhang u32 peer, 151306164d2bSGeorge Zhang u32 flags, 151406164d2bSGeorge Zhang u32 priv_flags, 151506164d2bSGeorge Zhang u64 produce_size, 151606164d2bSGeorge Zhang u64 consume_size, 151706164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 151806164d2bSGeorge Zhang struct vmci_ctx *context, 151906164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 152006164d2bSGeorge Zhang void *client_data, 152106164d2bSGeorge Zhang struct qp_broker_entry **ent) 152206164d2bSGeorge Zhang { 152306164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 152406164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 152506164d2bSGeorge Zhang int result; 152606164d2bSGeorge Zhang 152706164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM && 152806164d2bSGeorge Zhang entry->state != VMCIQPB_CREATED_MEM) 152906164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 153006164d2bSGeorge Zhang 153106164d2bSGeorge Zhang if (is_local) { 153206164d2bSGeorge Zhang if (!(entry->qp.flags & VMCI_QPFLAG_LOCAL) || 153306164d2bSGeorge Zhang context_id != entry->create_id) { 153406164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 153506164d2bSGeorge Zhang } 153606164d2bSGeorge Zhang } else if (context_id == entry->create_id || 153706164d2bSGeorge Zhang context_id == entry->attach_id) { 153806164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 153906164d2bSGeorge Zhang } 154006164d2bSGeorge Zhang 154106164d2bSGeorge Zhang if (VMCI_CONTEXT_IS_VM(context_id) && 154206164d2bSGeorge Zhang VMCI_CONTEXT_IS_VM(entry->create_id)) 154306164d2bSGeorge Zhang return VMCI_ERROR_DST_UNREACHABLE; 154406164d2bSGeorge Zhang 154506164d2bSGeorge Zhang /* 154606164d2bSGeorge Zhang * If we are attaching from a restricted context then the queuepair 154706164d2bSGeorge Zhang * must have been created by a trusted endpoint. 154806164d2bSGeorge Zhang */ 154906164d2bSGeorge Zhang if ((context->priv_flags & VMCI_PRIVILEGE_FLAG_RESTRICTED) && 155006164d2bSGeorge Zhang !entry->created_by_trusted) 155106164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 155206164d2bSGeorge Zhang 155306164d2bSGeorge Zhang /* 155406164d2bSGeorge Zhang * If we are attaching to a queuepair that was created by a restricted 155506164d2bSGeorge Zhang * context then we must be trusted. 155606164d2bSGeorge Zhang */ 155706164d2bSGeorge Zhang if (entry->require_trusted_attach && 155806164d2bSGeorge Zhang (!(priv_flags & VMCI_PRIVILEGE_FLAG_TRUSTED))) 155906164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 156006164d2bSGeorge Zhang 156106164d2bSGeorge Zhang /* 156206164d2bSGeorge Zhang * If the creator specifies VMCI_INVALID_ID in "peer" field, access 156306164d2bSGeorge Zhang * control check is not performed. 156406164d2bSGeorge Zhang */ 156506164d2bSGeorge Zhang if (entry->qp.peer != VMCI_INVALID_ID && entry->qp.peer != context_id) 156606164d2bSGeorge Zhang return VMCI_ERROR_NO_ACCESS; 156706164d2bSGeorge Zhang 156806164d2bSGeorge Zhang if (entry->create_id == VMCI_HOST_CONTEXT_ID) { 156906164d2bSGeorge Zhang /* 157006164d2bSGeorge Zhang * Do not attach if the caller doesn't support Host Queue Pairs 157106164d2bSGeorge Zhang * and a host created this queue pair. 157206164d2bSGeorge Zhang */ 157306164d2bSGeorge Zhang 157406164d2bSGeorge Zhang if (!vmci_ctx_supports_host_qp(context)) 157506164d2bSGeorge Zhang return VMCI_ERROR_INVALID_RESOURCE; 157606164d2bSGeorge Zhang 157706164d2bSGeorge Zhang } else if (context_id == VMCI_HOST_CONTEXT_ID) { 157806164d2bSGeorge Zhang struct vmci_ctx *create_context; 157906164d2bSGeorge Zhang bool supports_host_qp; 158006164d2bSGeorge Zhang 158106164d2bSGeorge Zhang /* 158206164d2bSGeorge Zhang * Do not attach a host to a user created queue pair if that 158306164d2bSGeorge Zhang * user doesn't support host queue pair end points. 158406164d2bSGeorge Zhang */ 158506164d2bSGeorge Zhang 158606164d2bSGeorge Zhang create_context = vmci_ctx_get(entry->create_id); 158706164d2bSGeorge Zhang supports_host_qp = vmci_ctx_supports_host_qp(create_context); 158806164d2bSGeorge Zhang vmci_ctx_put(create_context); 158906164d2bSGeorge Zhang 159006164d2bSGeorge Zhang if (!supports_host_qp) 159106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_RESOURCE; 159206164d2bSGeorge Zhang } 159306164d2bSGeorge Zhang 159406164d2bSGeorge Zhang if ((entry->qp.flags & ~VMCI_QP_ASYMM) != (flags & ~VMCI_QP_ASYMM_PEER)) 159506164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 159606164d2bSGeorge Zhang 159706164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 159806164d2bSGeorge Zhang /* 159906164d2bSGeorge Zhang * The queue pair broker entry stores values from the guest 160006164d2bSGeorge Zhang * point of view, so an attaching guest should match the values 160106164d2bSGeorge Zhang * stored in the entry. 160206164d2bSGeorge Zhang */ 160306164d2bSGeorge Zhang 160406164d2bSGeorge Zhang if (entry->qp.produce_size != produce_size || 160506164d2bSGeorge Zhang entry->qp.consume_size != consume_size) { 160606164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 160706164d2bSGeorge Zhang } 160806164d2bSGeorge Zhang } else if (entry->qp.produce_size != consume_size || 160906164d2bSGeorge Zhang entry->qp.consume_size != produce_size) { 161006164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_MISMATCH; 161106164d2bSGeorge Zhang } 161206164d2bSGeorge Zhang 161306164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 161406164d2bSGeorge Zhang /* 161506164d2bSGeorge Zhang * If a guest attached to a queue pair, it will supply 161606164d2bSGeorge Zhang * the backing memory. If this is a pre NOVMVM vmx, 161706164d2bSGeorge Zhang * the backing memory will be supplied by calling 161806164d2bSGeorge Zhang * vmci_qp_broker_set_page_store() following the 161906164d2bSGeorge Zhang * return of the vmci_qp_broker_alloc() call. If it is 162006164d2bSGeorge Zhang * a vmx of version NOVMVM or later, the page store 162106164d2bSGeorge Zhang * must be supplied as part of the 162206164d2bSGeorge Zhang * vmci_qp_broker_alloc call. Under all circumstances 162306164d2bSGeorge Zhang * must the initially created queue pair not have any 162406164d2bSGeorge Zhang * memory associated with it already. 162506164d2bSGeorge Zhang */ 162606164d2bSGeorge Zhang 162706164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM) 162806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 162906164d2bSGeorge Zhang 163006164d2bSGeorge Zhang if (page_store != NULL) { 163106164d2bSGeorge Zhang /* 163206164d2bSGeorge Zhang * Patch up host state to point to guest 163306164d2bSGeorge Zhang * supplied memory. The VMX already 163406164d2bSGeorge Zhang * initialized the queue pair headers, so no 163506164d2bSGeorge Zhang * need for the kernel side to do that. 163606164d2bSGeorge Zhang */ 163706164d2bSGeorge Zhang 163806164d2bSGeorge Zhang result = qp_host_register_user_memory(page_store, 163906164d2bSGeorge Zhang entry->produce_q, 164006164d2bSGeorge Zhang entry->consume_q); 164106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 164206164d2bSGeorge Zhang return result; 164306164d2bSGeorge Zhang 164406164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 164506164d2bSGeorge Zhang } else { 164606164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_NO_MEM; 164706164d2bSGeorge Zhang } 164806164d2bSGeorge Zhang } else if (entry->state == VMCIQPB_CREATED_NO_MEM) { 164906164d2bSGeorge Zhang /* 165006164d2bSGeorge Zhang * The host side is attempting to attach to a queue 165106164d2bSGeorge Zhang * pair that doesn't have any memory associated with 165206164d2bSGeorge Zhang * it. This must be a pre NOVMVM vmx that hasn't set 165306164d2bSGeorge Zhang * the page store information yet, or a quiesced VM. 165406164d2bSGeorge Zhang */ 165506164d2bSGeorge Zhang 165606164d2bSGeorge Zhang return VMCI_ERROR_UNAVAILABLE; 165706164d2bSGeorge Zhang } else { 165806164d2bSGeorge Zhang /* The host side has successfully attached to a queue pair. */ 165906164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 166006164d2bSGeorge Zhang } 166106164d2bSGeorge Zhang 166206164d2bSGeorge Zhang if (entry->state == VMCIQPB_ATTACHED_MEM) { 166306164d2bSGeorge Zhang result = 166406164d2bSGeorge Zhang qp_notify_peer(true, entry->qp.handle, context_id, 166506164d2bSGeorge Zhang entry->create_id); 166606164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 166706164d2bSGeorge Zhang pr_warn("Failed to notify peer (ID=0x%x) of attach to queue pair (handle=0x%x:0x%x)\n", 166806164d2bSGeorge Zhang entry->create_id, entry->qp.handle.context, 166906164d2bSGeorge Zhang entry->qp.handle.resource); 167006164d2bSGeorge Zhang } 167106164d2bSGeorge Zhang 167206164d2bSGeorge Zhang entry->attach_id = context_id; 167306164d2bSGeorge Zhang entry->qp.ref_count++; 167406164d2bSGeorge Zhang if (wakeup_cb) { 167506164d2bSGeorge Zhang entry->wakeup_cb = wakeup_cb; 167606164d2bSGeorge Zhang entry->client_data = client_data; 167706164d2bSGeorge Zhang } 167806164d2bSGeorge Zhang 167906164d2bSGeorge Zhang /* 168006164d2bSGeorge Zhang * When attaching to local queue pairs, the context already has 168106164d2bSGeorge Zhang * an entry tracking the queue pair, so don't add another one. 168206164d2bSGeorge Zhang */ 168306164d2bSGeorge Zhang if (!is_local) 168406164d2bSGeorge Zhang vmci_ctx_qp_create(context, entry->qp.handle); 168506164d2bSGeorge Zhang 168606164d2bSGeorge Zhang if (ent != NULL) 168706164d2bSGeorge Zhang *ent = entry; 168806164d2bSGeorge Zhang 168906164d2bSGeorge Zhang return VMCI_SUCCESS; 169006164d2bSGeorge Zhang } 169106164d2bSGeorge Zhang 169206164d2bSGeorge Zhang /* 169306164d2bSGeorge Zhang * queue_pair_Alloc for use when setting up queue pair endpoints 169406164d2bSGeorge Zhang * on the host. 169506164d2bSGeorge Zhang */ 169606164d2bSGeorge Zhang static int qp_broker_alloc(struct vmci_handle handle, 169706164d2bSGeorge Zhang u32 peer, 169806164d2bSGeorge Zhang u32 flags, 169906164d2bSGeorge Zhang u32 priv_flags, 170006164d2bSGeorge Zhang u64 produce_size, 170106164d2bSGeorge Zhang u64 consume_size, 170206164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 170306164d2bSGeorge Zhang struct vmci_ctx *context, 170406164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 170506164d2bSGeorge Zhang void *client_data, 170606164d2bSGeorge Zhang struct qp_broker_entry **ent, 170706164d2bSGeorge Zhang bool *swap) 170806164d2bSGeorge Zhang { 170906164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 171006164d2bSGeorge Zhang bool create; 171106164d2bSGeorge Zhang struct qp_broker_entry *entry = NULL; 171206164d2bSGeorge Zhang bool is_local = flags & VMCI_QPFLAG_LOCAL; 171306164d2bSGeorge Zhang int result; 171406164d2bSGeorge Zhang 171506164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || 171606164d2bSGeorge Zhang (flags & ~VMCI_QP_ALL_FLAGS) || is_local || 171706164d2bSGeorge Zhang !(produce_size || consume_size) || 171806164d2bSGeorge Zhang !context || context_id == VMCI_INVALID_ID || 171906164d2bSGeorge Zhang handle.context == VMCI_INVALID_ID) { 172006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 172106164d2bSGeorge Zhang } 172206164d2bSGeorge Zhang 172306164d2bSGeorge Zhang if (page_store && !VMCI_QP_PAGESTORE_IS_WELLFORMED(page_store)) 172406164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 172506164d2bSGeorge Zhang 172606164d2bSGeorge Zhang /* 172706164d2bSGeorge Zhang * In the initial argument check, we ensure that non-vmkernel hosts 172806164d2bSGeorge Zhang * are not allowed to create local queue pairs. 172906164d2bSGeorge Zhang */ 173006164d2bSGeorge Zhang 173106164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 173206164d2bSGeorge Zhang 173306164d2bSGeorge Zhang if (!is_local && vmci_ctx_qp_exists(context, handle)) { 173406164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) already attached to queue pair (handle=0x%x:0x%x)\n", 173506164d2bSGeorge Zhang context_id, handle.context, handle.resource); 173606164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 173706164d2bSGeorge Zhang return VMCI_ERROR_ALREADY_EXISTS; 173806164d2bSGeorge Zhang } 173906164d2bSGeorge Zhang 174006164d2bSGeorge Zhang if (handle.resource != VMCI_INVALID_ID) 174106164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 174206164d2bSGeorge Zhang 174306164d2bSGeorge Zhang if (!entry) { 174406164d2bSGeorge Zhang create = true; 174506164d2bSGeorge Zhang result = 174606164d2bSGeorge Zhang qp_broker_create(handle, peer, flags, priv_flags, 174706164d2bSGeorge Zhang produce_size, consume_size, page_store, 174806164d2bSGeorge Zhang context, wakeup_cb, client_data, ent); 174906164d2bSGeorge Zhang } else { 175006164d2bSGeorge Zhang create = false; 175106164d2bSGeorge Zhang result = 175206164d2bSGeorge Zhang qp_broker_attach(entry, peer, flags, priv_flags, 175306164d2bSGeorge Zhang produce_size, consume_size, page_store, 175406164d2bSGeorge Zhang context, wakeup_cb, client_data, ent); 175506164d2bSGeorge Zhang } 175606164d2bSGeorge Zhang 175706164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 175806164d2bSGeorge Zhang 175906164d2bSGeorge Zhang if (swap) 176006164d2bSGeorge Zhang *swap = (context_id == VMCI_HOST_CONTEXT_ID) && 176106164d2bSGeorge Zhang !(create && is_local); 176206164d2bSGeorge Zhang 176306164d2bSGeorge Zhang return result; 176406164d2bSGeorge Zhang } 176506164d2bSGeorge Zhang 176606164d2bSGeorge Zhang /* 176706164d2bSGeorge Zhang * This function implements the kernel API for allocating a queue 176806164d2bSGeorge Zhang * pair. 176906164d2bSGeorge Zhang */ 177006164d2bSGeorge Zhang static int qp_alloc_host_work(struct vmci_handle *handle, 177106164d2bSGeorge Zhang struct vmci_queue **produce_q, 177206164d2bSGeorge Zhang u64 produce_size, 177306164d2bSGeorge Zhang struct vmci_queue **consume_q, 177406164d2bSGeorge Zhang u64 consume_size, 177506164d2bSGeorge Zhang u32 peer, 177606164d2bSGeorge Zhang u32 flags, 177706164d2bSGeorge Zhang u32 priv_flags, 177806164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 177906164d2bSGeorge Zhang void *client_data) 178006164d2bSGeorge Zhang { 178106164d2bSGeorge Zhang struct vmci_handle new_handle; 178206164d2bSGeorge Zhang struct vmci_ctx *context; 178306164d2bSGeorge Zhang struct qp_broker_entry *entry; 178406164d2bSGeorge Zhang int result; 178506164d2bSGeorge Zhang bool swap; 178606164d2bSGeorge Zhang 178706164d2bSGeorge Zhang if (vmci_handle_is_invalid(*handle)) { 178806164d2bSGeorge Zhang new_handle = vmci_make_handle( 178906164d2bSGeorge Zhang VMCI_HOST_CONTEXT_ID, VMCI_INVALID_ID); 179006164d2bSGeorge Zhang } else 179106164d2bSGeorge Zhang new_handle = *handle; 179206164d2bSGeorge Zhang 179306164d2bSGeorge Zhang context = vmci_ctx_get(VMCI_HOST_CONTEXT_ID); 179406164d2bSGeorge Zhang entry = NULL; 179506164d2bSGeorge Zhang result = 179606164d2bSGeorge Zhang qp_broker_alloc(new_handle, peer, flags, priv_flags, 179706164d2bSGeorge Zhang produce_size, consume_size, NULL, context, 179806164d2bSGeorge Zhang wakeup_cb, client_data, &entry, &swap); 179906164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 180006164d2bSGeorge Zhang if (swap) { 180106164d2bSGeorge Zhang /* 180206164d2bSGeorge Zhang * If this is a local queue pair, the attacher 180306164d2bSGeorge Zhang * will swap around produce and consume 180406164d2bSGeorge Zhang * queues. 180506164d2bSGeorge Zhang */ 180606164d2bSGeorge Zhang 180706164d2bSGeorge Zhang *produce_q = entry->consume_q; 180806164d2bSGeorge Zhang *consume_q = entry->produce_q; 180906164d2bSGeorge Zhang } else { 181006164d2bSGeorge Zhang *produce_q = entry->produce_q; 181106164d2bSGeorge Zhang *consume_q = entry->consume_q; 181206164d2bSGeorge Zhang } 181306164d2bSGeorge Zhang 181406164d2bSGeorge Zhang *handle = vmci_resource_handle(&entry->resource); 181506164d2bSGeorge Zhang } else { 181606164d2bSGeorge Zhang *handle = VMCI_INVALID_HANDLE; 181706164d2bSGeorge Zhang pr_devel("queue pair broker failed to alloc (result=%d)\n", 181806164d2bSGeorge Zhang result); 181906164d2bSGeorge Zhang } 182006164d2bSGeorge Zhang vmci_ctx_put(context); 182106164d2bSGeorge Zhang return result; 182206164d2bSGeorge Zhang } 182306164d2bSGeorge Zhang 182406164d2bSGeorge Zhang /* 182506164d2bSGeorge Zhang * Allocates a VMCI queue_pair. Only checks validity of input 182606164d2bSGeorge Zhang * arguments. The real work is done in the host or guest 182706164d2bSGeorge Zhang * specific function. 182806164d2bSGeorge Zhang */ 182906164d2bSGeorge Zhang int vmci_qp_alloc(struct vmci_handle *handle, 183006164d2bSGeorge Zhang struct vmci_queue **produce_q, 183106164d2bSGeorge Zhang u64 produce_size, 183206164d2bSGeorge Zhang struct vmci_queue **consume_q, 183306164d2bSGeorge Zhang u64 consume_size, 183406164d2bSGeorge Zhang u32 peer, 183506164d2bSGeorge Zhang u32 flags, 183606164d2bSGeorge Zhang u32 priv_flags, 183706164d2bSGeorge Zhang bool guest_endpoint, 183806164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb, 183906164d2bSGeorge Zhang void *client_data) 184006164d2bSGeorge Zhang { 184106164d2bSGeorge Zhang if (!handle || !produce_q || !consume_q || 184206164d2bSGeorge Zhang (!produce_size && !consume_size) || (flags & ~VMCI_QP_ALL_FLAGS)) 184306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 184406164d2bSGeorge Zhang 184506164d2bSGeorge Zhang if (guest_endpoint) { 184606164d2bSGeorge Zhang return qp_alloc_guest_work(handle, produce_q, 184706164d2bSGeorge Zhang produce_size, consume_q, 184806164d2bSGeorge Zhang consume_size, peer, 184906164d2bSGeorge Zhang flags, priv_flags); 185006164d2bSGeorge Zhang } else { 185106164d2bSGeorge Zhang return qp_alloc_host_work(handle, produce_q, 185206164d2bSGeorge Zhang produce_size, consume_q, 185306164d2bSGeorge Zhang consume_size, peer, flags, 185406164d2bSGeorge Zhang priv_flags, wakeup_cb, client_data); 185506164d2bSGeorge Zhang } 185606164d2bSGeorge Zhang } 185706164d2bSGeorge Zhang 185806164d2bSGeorge Zhang /* 185906164d2bSGeorge Zhang * This function implements the host kernel API for detaching from 186006164d2bSGeorge Zhang * a queue pair. 186106164d2bSGeorge Zhang */ 186206164d2bSGeorge Zhang static int qp_detatch_host_work(struct vmci_handle handle) 186306164d2bSGeorge Zhang { 186406164d2bSGeorge Zhang int result; 186506164d2bSGeorge Zhang struct vmci_ctx *context; 186606164d2bSGeorge Zhang 186706164d2bSGeorge Zhang context = vmci_ctx_get(VMCI_HOST_CONTEXT_ID); 186806164d2bSGeorge Zhang 186906164d2bSGeorge Zhang result = vmci_qp_broker_detach(handle, context); 187006164d2bSGeorge Zhang 187106164d2bSGeorge Zhang vmci_ctx_put(context); 187206164d2bSGeorge Zhang return result; 187306164d2bSGeorge Zhang } 187406164d2bSGeorge Zhang 187506164d2bSGeorge Zhang /* 187606164d2bSGeorge Zhang * Detaches from a VMCI queue_pair. Only checks validity of input argument. 187706164d2bSGeorge Zhang * Real work is done in the host or guest specific function. 187806164d2bSGeorge Zhang */ 187906164d2bSGeorge Zhang static int qp_detatch(struct vmci_handle handle, bool guest_endpoint) 188006164d2bSGeorge Zhang { 188106164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle)) 188206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 188306164d2bSGeorge Zhang 188406164d2bSGeorge Zhang if (guest_endpoint) 188506164d2bSGeorge Zhang return qp_detatch_guest_work(handle); 188606164d2bSGeorge Zhang else 188706164d2bSGeorge Zhang return qp_detatch_host_work(handle); 188806164d2bSGeorge Zhang } 188906164d2bSGeorge Zhang 189006164d2bSGeorge Zhang /* 189106164d2bSGeorge Zhang * Returns the entry from the head of the list. Assumes that the list is 189206164d2bSGeorge Zhang * locked. 189306164d2bSGeorge Zhang */ 189406164d2bSGeorge Zhang static struct qp_entry *qp_list_get_head(struct qp_list *qp_list) 189506164d2bSGeorge Zhang { 189606164d2bSGeorge Zhang if (!list_empty(&qp_list->head)) { 189706164d2bSGeorge Zhang struct qp_entry *entry = 189806164d2bSGeorge Zhang list_first_entry(&qp_list->head, struct qp_entry, 189906164d2bSGeorge Zhang list_item); 190006164d2bSGeorge Zhang return entry; 190106164d2bSGeorge Zhang } 190206164d2bSGeorge Zhang 190306164d2bSGeorge Zhang return NULL; 190406164d2bSGeorge Zhang } 190506164d2bSGeorge Zhang 190606164d2bSGeorge Zhang void vmci_qp_broker_exit(void) 190706164d2bSGeorge Zhang { 190806164d2bSGeorge Zhang struct qp_entry *entry; 190906164d2bSGeorge Zhang struct qp_broker_entry *be; 191006164d2bSGeorge Zhang 191106164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 191206164d2bSGeorge Zhang 191306164d2bSGeorge Zhang while ((entry = qp_list_get_head(&qp_broker_list))) { 191406164d2bSGeorge Zhang be = (struct qp_broker_entry *)entry; 191506164d2bSGeorge Zhang 191606164d2bSGeorge Zhang qp_list_remove_entry(&qp_broker_list, entry); 191706164d2bSGeorge Zhang kfree(be); 191806164d2bSGeorge Zhang } 191906164d2bSGeorge Zhang 192006164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 192106164d2bSGeorge Zhang } 192206164d2bSGeorge Zhang 192306164d2bSGeorge Zhang /* 192406164d2bSGeorge Zhang * Requests that a queue pair be allocated with the VMCI queue 192506164d2bSGeorge Zhang * pair broker. Allocates a queue pair entry if one does not 192606164d2bSGeorge Zhang * exist. Attaches to one if it exists, and retrieves the page 192706164d2bSGeorge Zhang * files backing that queue_pair. Assumes that the queue pair 192806164d2bSGeorge Zhang * broker lock is held. 192906164d2bSGeorge Zhang */ 193006164d2bSGeorge Zhang int vmci_qp_broker_alloc(struct vmci_handle handle, 193106164d2bSGeorge Zhang u32 peer, 193206164d2bSGeorge Zhang u32 flags, 193306164d2bSGeorge Zhang u32 priv_flags, 193406164d2bSGeorge Zhang u64 produce_size, 193506164d2bSGeorge Zhang u64 consume_size, 193606164d2bSGeorge Zhang struct vmci_qp_page_store *page_store, 193706164d2bSGeorge Zhang struct vmci_ctx *context) 193806164d2bSGeorge Zhang { 193906164d2bSGeorge Zhang return qp_broker_alloc(handle, peer, flags, priv_flags, 194006164d2bSGeorge Zhang produce_size, consume_size, 194106164d2bSGeorge Zhang page_store, context, NULL, NULL, NULL, NULL); 194206164d2bSGeorge Zhang } 194306164d2bSGeorge Zhang 194406164d2bSGeorge Zhang /* 194506164d2bSGeorge Zhang * VMX'en with versions lower than VMCI_VERSION_NOVMVM use a separate 194606164d2bSGeorge Zhang * step to add the UVAs of the VMX mapping of the queue pair. This function 194706164d2bSGeorge Zhang * provides backwards compatibility with such VMX'en, and takes care of 194806164d2bSGeorge Zhang * registering the page store for a queue pair previously allocated by the 194906164d2bSGeorge Zhang * VMX during create or attach. This function will move the queue pair state 195006164d2bSGeorge Zhang * to either from VMCIQBP_CREATED_NO_MEM to VMCIQBP_CREATED_MEM or 195106164d2bSGeorge Zhang * VMCIQBP_ATTACHED_NO_MEM to VMCIQBP_ATTACHED_MEM. If moving to the 195206164d2bSGeorge Zhang * attached state with memory, the queue pair is ready to be used by the 195306164d2bSGeorge Zhang * host peer, and an attached event will be generated. 195406164d2bSGeorge Zhang * 195506164d2bSGeorge Zhang * Assumes that the queue pair broker lock is held. 195606164d2bSGeorge Zhang * 195706164d2bSGeorge Zhang * This function is only used by the hosted platform, since there is no 195806164d2bSGeorge Zhang * issue with backwards compatibility for vmkernel. 195906164d2bSGeorge Zhang */ 196006164d2bSGeorge Zhang int vmci_qp_broker_set_page_store(struct vmci_handle handle, 196106164d2bSGeorge Zhang u64 produce_uva, 196206164d2bSGeorge Zhang u64 consume_uva, 196306164d2bSGeorge Zhang struct vmci_ctx *context) 196406164d2bSGeorge Zhang { 196506164d2bSGeorge Zhang struct qp_broker_entry *entry; 196606164d2bSGeorge Zhang int result; 196706164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 196806164d2bSGeorge Zhang 196906164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 197006164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 197106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 197206164d2bSGeorge Zhang 197306164d2bSGeorge Zhang /* 197406164d2bSGeorge Zhang * We only support guest to host queue pairs, so the VMX must 197506164d2bSGeorge Zhang * supply UVAs for the mapped page files. 197606164d2bSGeorge Zhang */ 197706164d2bSGeorge Zhang 197806164d2bSGeorge Zhang if (produce_uva == 0 || consume_uva == 0) 197906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 198006164d2bSGeorge Zhang 198106164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 198206164d2bSGeorge Zhang 198306164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 198406164d2bSGeorge Zhang pr_warn("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 198506164d2bSGeorge Zhang context_id, handle.context, handle.resource); 198606164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 198706164d2bSGeorge Zhang goto out; 198806164d2bSGeorge Zhang } 198906164d2bSGeorge Zhang 199006164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 199106164d2bSGeorge Zhang if (!entry) { 199206164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 199306164d2bSGeorge Zhang goto out; 199406164d2bSGeorge Zhang } 199506164d2bSGeorge Zhang 199606164d2bSGeorge Zhang /* 199706164d2bSGeorge Zhang * If I'm the owner then I can set the page store. 199806164d2bSGeorge Zhang * 199906164d2bSGeorge Zhang * Or, if a host created the queue_pair and I'm the attached peer 200006164d2bSGeorge Zhang * then I can set the page store. 200106164d2bSGeorge Zhang */ 200206164d2bSGeorge Zhang if (entry->create_id != context_id && 200306164d2bSGeorge Zhang (entry->create_id != VMCI_HOST_CONTEXT_ID || 200406164d2bSGeorge Zhang entry->attach_id != context_id)) { 200506164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTOWNER; 200606164d2bSGeorge Zhang goto out; 200706164d2bSGeorge Zhang } 200806164d2bSGeorge Zhang 200906164d2bSGeorge Zhang if (entry->state != VMCIQPB_CREATED_NO_MEM && 201006164d2bSGeorge Zhang entry->state != VMCIQPB_ATTACHED_NO_MEM) { 201106164d2bSGeorge Zhang result = VMCI_ERROR_UNAVAILABLE; 201206164d2bSGeorge Zhang goto out; 201306164d2bSGeorge Zhang } 201406164d2bSGeorge Zhang 201506164d2bSGeorge Zhang result = qp_host_get_user_memory(produce_uva, consume_uva, 201606164d2bSGeorge Zhang entry->produce_q, entry->consume_q); 201706164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 201806164d2bSGeorge Zhang goto out; 201906164d2bSGeorge Zhang 202006164d2bSGeorge Zhang result = qp_host_map_queues(entry->produce_q, entry->consume_q); 202106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 202206164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 202306164d2bSGeorge Zhang entry->consume_q); 202406164d2bSGeorge Zhang goto out; 202506164d2bSGeorge Zhang } 202606164d2bSGeorge Zhang 202706164d2bSGeorge Zhang if (entry->state == VMCIQPB_CREATED_NO_MEM) 202806164d2bSGeorge Zhang entry->state = VMCIQPB_CREATED_MEM; 202906164d2bSGeorge Zhang else 203006164d2bSGeorge Zhang entry->state = VMCIQPB_ATTACHED_MEM; 203106164d2bSGeorge Zhang 203206164d2bSGeorge Zhang entry->vmci_page_files = true; 203306164d2bSGeorge Zhang 203406164d2bSGeorge Zhang if (entry->state == VMCIQPB_ATTACHED_MEM) { 203506164d2bSGeorge Zhang result = 203606164d2bSGeorge Zhang qp_notify_peer(true, handle, context_id, entry->create_id); 203706164d2bSGeorge Zhang if (result < VMCI_SUCCESS) { 203806164d2bSGeorge Zhang pr_warn("Failed to notify peer (ID=0x%x) of attach to queue pair (handle=0x%x:0x%x)\n", 203906164d2bSGeorge Zhang entry->create_id, entry->qp.handle.context, 204006164d2bSGeorge Zhang entry->qp.handle.resource); 204106164d2bSGeorge Zhang } 204206164d2bSGeorge Zhang } 204306164d2bSGeorge Zhang 204406164d2bSGeorge Zhang result = VMCI_SUCCESS; 204506164d2bSGeorge Zhang out: 204606164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 204706164d2bSGeorge Zhang return result; 204806164d2bSGeorge Zhang } 204906164d2bSGeorge Zhang 205006164d2bSGeorge Zhang /* 205106164d2bSGeorge Zhang * Resets saved queue headers for the given QP broker 205206164d2bSGeorge Zhang * entry. Should be used when guest memory becomes available 205306164d2bSGeorge Zhang * again, or the guest detaches. 205406164d2bSGeorge Zhang */ 205506164d2bSGeorge Zhang static void qp_reset_saved_headers(struct qp_broker_entry *entry) 205606164d2bSGeorge Zhang { 205706164d2bSGeorge Zhang entry->produce_q->saved_header = NULL; 205806164d2bSGeorge Zhang entry->consume_q->saved_header = NULL; 205906164d2bSGeorge Zhang } 206006164d2bSGeorge Zhang 206106164d2bSGeorge Zhang /* 206206164d2bSGeorge Zhang * The main entry point for detaching from a queue pair registered with the 206306164d2bSGeorge Zhang * queue pair broker. If more than one endpoint is attached to the queue 206406164d2bSGeorge Zhang * pair, the first endpoint will mainly decrement a reference count and 206506164d2bSGeorge Zhang * generate a notification to its peer. The last endpoint will clean up 206606164d2bSGeorge Zhang * the queue pair state registered with the broker. 206706164d2bSGeorge Zhang * 206806164d2bSGeorge Zhang * When a guest endpoint detaches, it will unmap and unregister the guest 206906164d2bSGeorge Zhang * memory backing the queue pair. If the host is still attached, it will 207006164d2bSGeorge Zhang * no longer be able to access the queue pair content. 207106164d2bSGeorge Zhang * 207206164d2bSGeorge Zhang * If the queue pair is already in a state where there is no memory 207306164d2bSGeorge Zhang * registered for the queue pair (any *_NO_MEM state), it will transition to 207406164d2bSGeorge Zhang * the VMCIQPB_SHUTDOWN_NO_MEM state. This will also happen, if a guest 207506164d2bSGeorge Zhang * endpoint is the first of two endpoints to detach. If the host endpoint is 207606164d2bSGeorge Zhang * the first out of two to detach, the queue pair will move to the 207706164d2bSGeorge Zhang * VMCIQPB_SHUTDOWN_MEM state. 207806164d2bSGeorge Zhang */ 207906164d2bSGeorge Zhang int vmci_qp_broker_detach(struct vmci_handle handle, struct vmci_ctx *context) 208006164d2bSGeorge Zhang { 208106164d2bSGeorge Zhang struct qp_broker_entry *entry; 208206164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 208306164d2bSGeorge Zhang u32 peer_id; 208406164d2bSGeorge Zhang bool is_local = false; 208506164d2bSGeorge Zhang int result; 208606164d2bSGeorge Zhang 208706164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 208806164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) { 208906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 209006164d2bSGeorge Zhang } 209106164d2bSGeorge Zhang 209206164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 209306164d2bSGeorge Zhang 209406164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 209506164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 209606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 209706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 209806164d2bSGeorge Zhang goto out; 209906164d2bSGeorge Zhang } 210006164d2bSGeorge Zhang 210106164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 210206164d2bSGeorge Zhang if (!entry) { 210306164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair(handle=0x%x:0x%x) that isn't present in broker\n", 210406164d2bSGeorge Zhang context_id, handle.context, handle.resource); 210506164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 210606164d2bSGeorge Zhang goto out; 210706164d2bSGeorge Zhang } 210806164d2bSGeorge Zhang 210906164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 211006164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 211106164d2bSGeorge Zhang goto out; 211206164d2bSGeorge Zhang } 211306164d2bSGeorge Zhang 211406164d2bSGeorge Zhang if (context_id == entry->create_id) { 211506164d2bSGeorge Zhang peer_id = entry->attach_id; 211606164d2bSGeorge Zhang entry->create_id = VMCI_INVALID_ID; 211706164d2bSGeorge Zhang } else { 211806164d2bSGeorge Zhang peer_id = entry->create_id; 211906164d2bSGeorge Zhang entry->attach_id = VMCI_INVALID_ID; 212006164d2bSGeorge Zhang } 212106164d2bSGeorge Zhang entry->qp.ref_count--; 212206164d2bSGeorge Zhang 212306164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 212406164d2bSGeorge Zhang 212506164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 212606164d2bSGeorge Zhang bool headers_mapped; 212706164d2bSGeorge Zhang 212806164d2bSGeorge Zhang /* 212906164d2bSGeorge Zhang * Pre NOVMVM vmx'en may detach from a queue pair 213006164d2bSGeorge Zhang * before setting the page store, and in that case 213106164d2bSGeorge Zhang * there is no user memory to detach from. Also, more 213206164d2bSGeorge Zhang * recent VMX'en may detach from a queue pair in the 213306164d2bSGeorge Zhang * quiesced state. 213406164d2bSGeorge Zhang */ 213506164d2bSGeorge Zhang 213606164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 213706164d2bSGeorge Zhang headers_mapped = entry->produce_q->q_header || 213806164d2bSGeorge Zhang entry->consume_q->q_header; 213906164d2bSGeorge Zhang if (QPBROKERSTATE_HAS_MEM(entry)) { 214006164d2bSGeorge Zhang result = 214106164d2bSGeorge Zhang qp_host_unmap_queues(INVALID_VMCI_GUEST_MEM_ID, 214206164d2bSGeorge Zhang entry->produce_q, 214306164d2bSGeorge Zhang entry->consume_q); 214406164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 214506164d2bSGeorge Zhang pr_warn("Failed to unmap queue headers for queue pair (handle=0x%x:0x%x,result=%d)\n", 214606164d2bSGeorge Zhang handle.context, handle.resource, 214706164d2bSGeorge Zhang result); 214806164d2bSGeorge Zhang 214906164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 2150234b7f8dSGustavo A. R. Silva entry->consume_q); 215106164d2bSGeorge Zhang 215206164d2bSGeorge Zhang } 215306164d2bSGeorge Zhang 215406164d2bSGeorge Zhang if (!headers_mapped) 215506164d2bSGeorge Zhang qp_reset_saved_headers(entry); 215606164d2bSGeorge Zhang 215706164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 215806164d2bSGeorge Zhang 215906164d2bSGeorge Zhang if (!headers_mapped && entry->wakeup_cb) 216006164d2bSGeorge Zhang entry->wakeup_cb(entry->client_data); 216106164d2bSGeorge Zhang 216206164d2bSGeorge Zhang } else { 216306164d2bSGeorge Zhang if (entry->wakeup_cb) { 216406164d2bSGeorge Zhang entry->wakeup_cb = NULL; 216506164d2bSGeorge Zhang entry->client_data = NULL; 216606164d2bSGeorge Zhang } 216706164d2bSGeorge Zhang } 216806164d2bSGeorge Zhang 216906164d2bSGeorge Zhang if (entry->qp.ref_count == 0) { 217006164d2bSGeorge Zhang qp_list_remove_entry(&qp_broker_list, &entry->qp); 217106164d2bSGeorge Zhang 217206164d2bSGeorge Zhang if (is_local) 217306164d2bSGeorge Zhang kfree(entry->local_mem); 217406164d2bSGeorge Zhang 217506164d2bSGeorge Zhang qp_cleanup_queue_mutex(entry->produce_q, entry->consume_q); 217606164d2bSGeorge Zhang qp_host_free_queue(entry->produce_q, entry->qp.produce_size); 217706164d2bSGeorge Zhang qp_host_free_queue(entry->consume_q, entry->qp.consume_size); 217806164d2bSGeorge Zhang /* Unlink from resource hash table and free callback */ 217906164d2bSGeorge Zhang vmci_resource_remove(&entry->resource); 218006164d2bSGeorge Zhang 218106164d2bSGeorge Zhang kfree(entry); 218206164d2bSGeorge Zhang 218306164d2bSGeorge Zhang vmci_ctx_qp_destroy(context, handle); 218406164d2bSGeorge Zhang } else { 218506164d2bSGeorge Zhang qp_notify_peer(false, handle, context_id, peer_id); 218606164d2bSGeorge Zhang if (context_id == VMCI_HOST_CONTEXT_ID && 218706164d2bSGeorge Zhang QPBROKERSTATE_HAS_MEM(entry)) { 218806164d2bSGeorge Zhang entry->state = VMCIQPB_SHUTDOWN_MEM; 218906164d2bSGeorge Zhang } else { 219006164d2bSGeorge Zhang entry->state = VMCIQPB_SHUTDOWN_NO_MEM; 219106164d2bSGeorge Zhang } 219206164d2bSGeorge Zhang 219306164d2bSGeorge Zhang if (!is_local) 219406164d2bSGeorge Zhang vmci_ctx_qp_destroy(context, handle); 219506164d2bSGeorge Zhang 219606164d2bSGeorge Zhang } 219706164d2bSGeorge Zhang result = VMCI_SUCCESS; 219806164d2bSGeorge Zhang out: 219906164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 220006164d2bSGeorge Zhang return result; 220106164d2bSGeorge Zhang } 220206164d2bSGeorge Zhang 220306164d2bSGeorge Zhang /* 220406164d2bSGeorge Zhang * Establishes the necessary mappings for a queue pair given a 220506164d2bSGeorge Zhang * reference to the queue pair guest memory. This is usually 220606164d2bSGeorge Zhang * called when a guest is unquiesced and the VMX is allowed to 220706164d2bSGeorge Zhang * map guest memory once again. 220806164d2bSGeorge Zhang */ 220906164d2bSGeorge Zhang int vmci_qp_broker_map(struct vmci_handle handle, 221006164d2bSGeorge Zhang struct vmci_ctx *context, 221106164d2bSGeorge Zhang u64 guest_mem) 221206164d2bSGeorge Zhang { 221306164d2bSGeorge Zhang struct qp_broker_entry *entry; 221406164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 221506164d2bSGeorge Zhang bool is_local = false; 221606164d2bSGeorge Zhang int result; 221706164d2bSGeorge Zhang 221806164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 221906164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 222006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 222106164d2bSGeorge Zhang 222206164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 222306164d2bSGeorge Zhang 222406164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 222506164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 222606164d2bSGeorge Zhang context_id, handle.context, handle.resource); 222706164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 222806164d2bSGeorge Zhang goto out; 222906164d2bSGeorge Zhang } 223006164d2bSGeorge Zhang 223106164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 223206164d2bSGeorge Zhang if (!entry) { 223306164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair (handle=0x%x:0x%x) that isn't present in broker\n", 223406164d2bSGeorge Zhang context_id, handle.context, handle.resource); 223506164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 223606164d2bSGeorge Zhang goto out; 223706164d2bSGeorge Zhang } 223806164d2bSGeorge Zhang 223906164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 224006164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 224106164d2bSGeorge Zhang goto out; 224206164d2bSGeorge Zhang } 224306164d2bSGeorge Zhang 224406164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 224506164d2bSGeorge Zhang result = VMCI_SUCCESS; 224606164d2bSGeorge Zhang 224706164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 224806164d2bSGeorge Zhang struct vmci_qp_page_store page_store; 224906164d2bSGeorge Zhang 225006164d2bSGeorge Zhang page_store.pages = guest_mem; 225106164d2bSGeorge Zhang page_store.len = QPE_NUM_PAGES(entry->qp); 225206164d2bSGeorge Zhang 225306164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 225406164d2bSGeorge Zhang qp_reset_saved_headers(entry); 225506164d2bSGeorge Zhang result = 225606164d2bSGeorge Zhang qp_host_register_user_memory(&page_store, 225706164d2bSGeorge Zhang entry->produce_q, 225806164d2bSGeorge Zhang entry->consume_q); 225906164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 226006164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 226106164d2bSGeorge Zhang /* Move state from *_NO_MEM to *_MEM */ 226206164d2bSGeorge Zhang 226306164d2bSGeorge Zhang entry->state++; 226406164d2bSGeorge Zhang 226506164d2bSGeorge Zhang if (entry->wakeup_cb) 226606164d2bSGeorge Zhang entry->wakeup_cb(entry->client_data); 226706164d2bSGeorge Zhang } 226806164d2bSGeorge Zhang } 226906164d2bSGeorge Zhang 227006164d2bSGeorge Zhang out: 227106164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 227206164d2bSGeorge Zhang return result; 227306164d2bSGeorge Zhang } 227406164d2bSGeorge Zhang 227506164d2bSGeorge Zhang /* 227606164d2bSGeorge Zhang * Saves a snapshot of the queue headers for the given QP broker 227706164d2bSGeorge Zhang * entry. Should be used when guest memory is unmapped. 227806164d2bSGeorge Zhang * Results: 227906164d2bSGeorge Zhang * VMCI_SUCCESS on success, appropriate error code if guest memory 228006164d2bSGeorge Zhang * can't be accessed.. 228106164d2bSGeorge Zhang */ 228206164d2bSGeorge Zhang static int qp_save_headers(struct qp_broker_entry *entry) 228306164d2bSGeorge Zhang { 228406164d2bSGeorge Zhang int result; 228506164d2bSGeorge Zhang 228606164d2bSGeorge Zhang if (entry->produce_q->saved_header != NULL && 228706164d2bSGeorge Zhang entry->consume_q->saved_header != NULL) { 228806164d2bSGeorge Zhang /* 228906164d2bSGeorge Zhang * If the headers have already been saved, we don't need to do 229006164d2bSGeorge Zhang * it again, and we don't want to map in the headers 229106164d2bSGeorge Zhang * unnecessarily. 229206164d2bSGeorge Zhang */ 229306164d2bSGeorge Zhang 229406164d2bSGeorge Zhang return VMCI_SUCCESS; 229506164d2bSGeorge Zhang } 229606164d2bSGeorge Zhang 229706164d2bSGeorge Zhang if (NULL == entry->produce_q->q_header || 229806164d2bSGeorge Zhang NULL == entry->consume_q->q_header) { 229906164d2bSGeorge Zhang result = qp_host_map_queues(entry->produce_q, entry->consume_q); 230006164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 230106164d2bSGeorge Zhang return result; 230206164d2bSGeorge Zhang } 230306164d2bSGeorge Zhang 230406164d2bSGeorge Zhang memcpy(&entry->saved_produce_q, entry->produce_q->q_header, 230506164d2bSGeorge Zhang sizeof(entry->saved_produce_q)); 230606164d2bSGeorge Zhang entry->produce_q->saved_header = &entry->saved_produce_q; 230706164d2bSGeorge Zhang memcpy(&entry->saved_consume_q, entry->consume_q->q_header, 230806164d2bSGeorge Zhang sizeof(entry->saved_consume_q)); 230906164d2bSGeorge Zhang entry->consume_q->saved_header = &entry->saved_consume_q; 231006164d2bSGeorge Zhang 231106164d2bSGeorge Zhang return VMCI_SUCCESS; 231206164d2bSGeorge Zhang } 231306164d2bSGeorge Zhang 231406164d2bSGeorge Zhang /* 231506164d2bSGeorge Zhang * Removes all references to the guest memory of a given queue pair, and 231606164d2bSGeorge Zhang * will move the queue pair from state *_MEM to *_NO_MEM. It is usually 231706164d2bSGeorge Zhang * called when a VM is being quiesced where access to guest memory should 231806164d2bSGeorge Zhang * avoided. 231906164d2bSGeorge Zhang */ 232006164d2bSGeorge Zhang int vmci_qp_broker_unmap(struct vmci_handle handle, 232106164d2bSGeorge Zhang struct vmci_ctx *context, 232206164d2bSGeorge Zhang u32 gid) 232306164d2bSGeorge Zhang { 232406164d2bSGeorge Zhang struct qp_broker_entry *entry; 232506164d2bSGeorge Zhang const u32 context_id = vmci_ctx_get_id(context); 232606164d2bSGeorge Zhang bool is_local = false; 232706164d2bSGeorge Zhang int result; 232806164d2bSGeorge Zhang 232906164d2bSGeorge Zhang if (vmci_handle_is_invalid(handle) || !context || 233006164d2bSGeorge Zhang context_id == VMCI_INVALID_ID) 233106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 233206164d2bSGeorge Zhang 233306164d2bSGeorge Zhang mutex_lock(&qp_broker_list.mutex); 233406164d2bSGeorge Zhang 233506164d2bSGeorge Zhang if (!vmci_ctx_qp_exists(context, handle)) { 233606164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) not attached to queue pair (handle=0x%x:0x%x)\n", 233706164d2bSGeorge Zhang context_id, handle.context, handle.resource); 233806164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 233906164d2bSGeorge Zhang goto out; 234006164d2bSGeorge Zhang } 234106164d2bSGeorge Zhang 234206164d2bSGeorge Zhang entry = qp_broker_handle_to_entry(handle); 234306164d2bSGeorge Zhang if (!entry) { 234406164d2bSGeorge Zhang pr_devel("Context (ID=0x%x) reports being attached to queue pair (handle=0x%x:0x%x) that isn't present in broker\n", 234506164d2bSGeorge Zhang context_id, handle.context, handle.resource); 234606164d2bSGeorge Zhang result = VMCI_ERROR_NOT_FOUND; 234706164d2bSGeorge Zhang goto out; 234806164d2bSGeorge Zhang } 234906164d2bSGeorge Zhang 235006164d2bSGeorge Zhang if (context_id != entry->create_id && context_id != entry->attach_id) { 235106164d2bSGeorge Zhang result = VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 235206164d2bSGeorge Zhang goto out; 235306164d2bSGeorge Zhang } 235406164d2bSGeorge Zhang 235506164d2bSGeorge Zhang is_local = entry->qp.flags & VMCI_QPFLAG_LOCAL; 235606164d2bSGeorge Zhang 235706164d2bSGeorge Zhang if (context_id != VMCI_HOST_CONTEXT_ID) { 235806164d2bSGeorge Zhang qp_acquire_queue_mutex(entry->produce_q); 235906164d2bSGeorge Zhang result = qp_save_headers(entry); 236006164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 236106164d2bSGeorge Zhang pr_warn("Failed to save queue headers for queue pair (handle=0x%x:0x%x,result=%d)\n", 236206164d2bSGeorge Zhang handle.context, handle.resource, result); 236306164d2bSGeorge Zhang 236406164d2bSGeorge Zhang qp_host_unmap_queues(gid, entry->produce_q, entry->consume_q); 236506164d2bSGeorge Zhang 236606164d2bSGeorge Zhang /* 236706164d2bSGeorge Zhang * On hosted, when we unmap queue pairs, the VMX will also 236806164d2bSGeorge Zhang * unmap the guest memory, so we invalidate the previously 236906164d2bSGeorge Zhang * registered memory. If the queue pair is mapped again at a 237006164d2bSGeorge Zhang * later point in time, we will need to reregister the user 237106164d2bSGeorge Zhang * memory with a possibly new user VA. 237206164d2bSGeorge Zhang */ 237306164d2bSGeorge Zhang qp_host_unregister_user_memory(entry->produce_q, 237406164d2bSGeorge Zhang entry->consume_q); 237506164d2bSGeorge Zhang 237606164d2bSGeorge Zhang /* 237706164d2bSGeorge Zhang * Move state from *_MEM to *_NO_MEM. 237806164d2bSGeorge Zhang */ 237906164d2bSGeorge Zhang entry->state--; 238006164d2bSGeorge Zhang 238106164d2bSGeorge Zhang qp_release_queue_mutex(entry->produce_q); 238206164d2bSGeorge Zhang } 238306164d2bSGeorge Zhang 238406164d2bSGeorge Zhang result = VMCI_SUCCESS; 238506164d2bSGeorge Zhang 238606164d2bSGeorge Zhang out: 238706164d2bSGeorge Zhang mutex_unlock(&qp_broker_list.mutex); 238806164d2bSGeorge Zhang return result; 238906164d2bSGeorge Zhang } 239006164d2bSGeorge Zhang 239106164d2bSGeorge Zhang /* 239206164d2bSGeorge Zhang * Destroys all guest queue pair endpoints. If active guest queue 239306164d2bSGeorge Zhang * pairs still exist, hypercalls to attempt detach from these 239406164d2bSGeorge Zhang * queue pairs will be made. Any failure to detach is silently 239506164d2bSGeorge Zhang * ignored. 239606164d2bSGeorge Zhang */ 239706164d2bSGeorge Zhang void vmci_qp_guest_endpoints_exit(void) 239806164d2bSGeorge Zhang { 239906164d2bSGeorge Zhang struct qp_entry *entry; 240006164d2bSGeorge Zhang struct qp_guest_endpoint *ep; 240106164d2bSGeorge Zhang 240206164d2bSGeorge Zhang mutex_lock(&qp_guest_endpoints.mutex); 240306164d2bSGeorge Zhang 240406164d2bSGeorge Zhang while ((entry = qp_list_get_head(&qp_guest_endpoints))) { 240506164d2bSGeorge Zhang ep = (struct qp_guest_endpoint *)entry; 240606164d2bSGeorge Zhang 240706164d2bSGeorge Zhang /* Don't make a hypercall for local queue_pairs. */ 240806164d2bSGeorge Zhang if (!(entry->flags & VMCI_QPFLAG_LOCAL)) 240906164d2bSGeorge Zhang qp_detatch_hypercall(entry->handle); 241006164d2bSGeorge Zhang 241106164d2bSGeorge Zhang /* We cannot fail the exit, so let's reset ref_count. */ 241206164d2bSGeorge Zhang entry->ref_count = 0; 241306164d2bSGeorge Zhang qp_list_remove_entry(&qp_guest_endpoints, entry); 241406164d2bSGeorge Zhang 241506164d2bSGeorge Zhang qp_guest_endpoint_destroy(ep); 241606164d2bSGeorge Zhang } 241706164d2bSGeorge Zhang 241806164d2bSGeorge Zhang mutex_unlock(&qp_guest_endpoints.mutex); 241906164d2bSGeorge Zhang } 242006164d2bSGeorge Zhang 242106164d2bSGeorge Zhang /* 242206164d2bSGeorge Zhang * Helper routine that will lock the queue pair before subsequent 242306164d2bSGeorge Zhang * operations. 242406164d2bSGeorge Zhang * Note: Non-blocking on the host side is currently only implemented in ESX. 242506164d2bSGeorge Zhang * Since non-blocking isn't yet implemented on the host personality we 242606164d2bSGeorge Zhang * have no reason to acquire a spin lock. So to avoid the use of an 242706164d2bSGeorge Zhang * unnecessary lock only acquire the mutex if we can block. 242806164d2bSGeorge Zhang */ 242906164d2bSGeorge Zhang static void qp_lock(const struct vmci_qp *qpair) 243006164d2bSGeorge Zhang { 243106164d2bSGeorge Zhang qp_acquire_queue_mutex(qpair->produce_q); 243206164d2bSGeorge Zhang } 243306164d2bSGeorge Zhang 243406164d2bSGeorge Zhang /* 243506164d2bSGeorge Zhang * Helper routine that unlocks the queue pair after calling 243645412befSAndy King * qp_lock. 243706164d2bSGeorge Zhang */ 243806164d2bSGeorge Zhang static void qp_unlock(const struct vmci_qp *qpair) 243906164d2bSGeorge Zhang { 244006164d2bSGeorge Zhang qp_release_queue_mutex(qpair->produce_q); 244106164d2bSGeorge Zhang } 244206164d2bSGeorge Zhang 244306164d2bSGeorge Zhang /* 244406164d2bSGeorge Zhang * The queue headers may not be mapped at all times. If a queue is 244506164d2bSGeorge Zhang * currently not mapped, it will be attempted to do so. 244606164d2bSGeorge Zhang */ 244706164d2bSGeorge Zhang static int qp_map_queue_headers(struct vmci_queue *produce_q, 244845412befSAndy King struct vmci_queue *consume_q) 244906164d2bSGeorge Zhang { 245006164d2bSGeorge Zhang int result; 245106164d2bSGeorge Zhang 245206164d2bSGeorge Zhang if (NULL == produce_q->q_header || NULL == consume_q->q_header) { 245306164d2bSGeorge Zhang result = qp_host_map_queues(produce_q, consume_q); 245406164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 245506164d2bSGeorge Zhang return (produce_q->saved_header && 245606164d2bSGeorge Zhang consume_q->saved_header) ? 245706164d2bSGeorge Zhang VMCI_ERROR_QUEUEPAIR_NOT_READY : 245806164d2bSGeorge Zhang VMCI_ERROR_QUEUEPAIR_NOTATTACHED; 245906164d2bSGeorge Zhang } 246006164d2bSGeorge Zhang 246106164d2bSGeorge Zhang return VMCI_SUCCESS; 246206164d2bSGeorge Zhang } 246306164d2bSGeorge Zhang 246406164d2bSGeorge Zhang /* 246506164d2bSGeorge Zhang * Helper routine that will retrieve the produce and consume 246606164d2bSGeorge Zhang * headers of a given queue pair. If the guest memory of the 246706164d2bSGeorge Zhang * queue pair is currently not available, the saved queue headers 246806164d2bSGeorge Zhang * will be returned, if these are available. 246906164d2bSGeorge Zhang */ 247006164d2bSGeorge Zhang static int qp_get_queue_headers(const struct vmci_qp *qpair, 247106164d2bSGeorge Zhang struct vmci_queue_header **produce_q_header, 247206164d2bSGeorge Zhang struct vmci_queue_header **consume_q_header) 247306164d2bSGeorge Zhang { 247406164d2bSGeorge Zhang int result; 247506164d2bSGeorge Zhang 247645412befSAndy King result = qp_map_queue_headers(qpair->produce_q, qpair->consume_q); 247706164d2bSGeorge Zhang if (result == VMCI_SUCCESS) { 247806164d2bSGeorge Zhang *produce_q_header = qpair->produce_q->q_header; 247906164d2bSGeorge Zhang *consume_q_header = qpair->consume_q->q_header; 248006164d2bSGeorge Zhang } else if (qpair->produce_q->saved_header && 248106164d2bSGeorge Zhang qpair->consume_q->saved_header) { 248206164d2bSGeorge Zhang *produce_q_header = qpair->produce_q->saved_header; 248306164d2bSGeorge Zhang *consume_q_header = qpair->consume_q->saved_header; 248406164d2bSGeorge Zhang result = VMCI_SUCCESS; 248506164d2bSGeorge Zhang } 248606164d2bSGeorge Zhang 248706164d2bSGeorge Zhang return result; 248806164d2bSGeorge Zhang } 248906164d2bSGeorge Zhang 249006164d2bSGeorge Zhang /* 249106164d2bSGeorge Zhang * Callback from VMCI queue pair broker indicating that a queue 249206164d2bSGeorge Zhang * pair that was previously not ready, now either is ready or 249306164d2bSGeorge Zhang * gone forever. 249406164d2bSGeorge Zhang */ 249506164d2bSGeorge Zhang static int qp_wakeup_cb(void *client_data) 249606164d2bSGeorge Zhang { 249706164d2bSGeorge Zhang struct vmci_qp *qpair = (struct vmci_qp *)client_data; 249806164d2bSGeorge Zhang 249906164d2bSGeorge Zhang qp_lock(qpair); 250006164d2bSGeorge Zhang while (qpair->blocked > 0) { 250106164d2bSGeorge Zhang qpair->blocked--; 250206164d2bSGeorge Zhang qpair->generation++; 250306164d2bSGeorge Zhang wake_up(&qpair->event); 250406164d2bSGeorge Zhang } 250506164d2bSGeorge Zhang qp_unlock(qpair); 250606164d2bSGeorge Zhang 250706164d2bSGeorge Zhang return VMCI_SUCCESS; 250806164d2bSGeorge Zhang } 250906164d2bSGeorge Zhang 251006164d2bSGeorge Zhang /* 251106164d2bSGeorge Zhang * Makes the calling thread wait for the queue pair to become 251206164d2bSGeorge Zhang * ready for host side access. Returns true when thread is 251306164d2bSGeorge Zhang * woken up after queue pair state change, false otherwise. 251406164d2bSGeorge Zhang */ 251506164d2bSGeorge Zhang static bool qp_wait_for_ready_queue(struct vmci_qp *qpair) 251606164d2bSGeorge Zhang { 251706164d2bSGeorge Zhang unsigned int generation; 251806164d2bSGeorge Zhang 251906164d2bSGeorge Zhang qpair->blocked++; 252006164d2bSGeorge Zhang generation = qpair->generation; 252106164d2bSGeorge Zhang qp_unlock(qpair); 252206164d2bSGeorge Zhang wait_event(qpair->event, generation != qpair->generation); 252306164d2bSGeorge Zhang qp_lock(qpair); 252406164d2bSGeorge Zhang 252506164d2bSGeorge Zhang return true; 252606164d2bSGeorge Zhang } 252706164d2bSGeorge Zhang 252806164d2bSGeorge Zhang /* 252906164d2bSGeorge Zhang * Enqueues a given buffer to the produce queue using the provided 253006164d2bSGeorge Zhang * function. As many bytes as possible (space available in the queue) 253106164d2bSGeorge Zhang * are enqueued. Assumes the queue->mutex has been acquired. Returns 253206164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NOSPACE if no space was available to enqueue 253306164d2bSGeorge Zhang * data, VMCI_ERROR_INVALID_SIZE, if any queue pointer is outside the 253406164d2bSGeorge Zhang * queue (as defined by the queue size), VMCI_ERROR_INVALID_ARGS, if 253506164d2bSGeorge Zhang * an error occured when accessing the buffer, 253606164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NOTATTACHED, if the queue pair pages aren't 253706164d2bSGeorge Zhang * available. Otherwise, the number of bytes written to the queue is 253806164d2bSGeorge Zhang * returned. Updates the tail pointer of the produce queue. 253906164d2bSGeorge Zhang */ 254006164d2bSGeorge Zhang static ssize_t qp_enqueue_locked(struct vmci_queue *produce_q, 254106164d2bSGeorge Zhang struct vmci_queue *consume_q, 254206164d2bSGeorge Zhang const u64 produce_q_size, 2543d1038084SAl Viro struct iov_iter *from) 254406164d2bSGeorge Zhang { 254506164d2bSGeorge Zhang s64 free_space; 254606164d2bSGeorge Zhang u64 tail; 2547d1038084SAl Viro size_t buf_size = iov_iter_count(from); 254806164d2bSGeorge Zhang size_t written; 254906164d2bSGeorge Zhang ssize_t result; 255006164d2bSGeorge Zhang 255145412befSAndy King result = qp_map_queue_headers(produce_q, consume_q); 255206164d2bSGeorge Zhang if (unlikely(result != VMCI_SUCCESS)) 255306164d2bSGeorge Zhang return result; 255406164d2bSGeorge Zhang 255506164d2bSGeorge Zhang free_space = vmci_q_header_free_space(produce_q->q_header, 255606164d2bSGeorge Zhang consume_q->q_header, 255706164d2bSGeorge Zhang produce_q_size); 255806164d2bSGeorge Zhang if (free_space == 0) 255906164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_NOSPACE; 256006164d2bSGeorge Zhang 256106164d2bSGeorge Zhang if (free_space < VMCI_SUCCESS) 256206164d2bSGeorge Zhang return (ssize_t) free_space; 256306164d2bSGeorge Zhang 256406164d2bSGeorge Zhang written = (size_t) (free_space > buf_size ? buf_size : free_space); 256506164d2bSGeorge Zhang tail = vmci_q_header_producer_tail(produce_q->q_header); 256606164d2bSGeorge Zhang if (likely(tail + written < produce_q_size)) { 2567d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, tail, from, written); 256806164d2bSGeorge Zhang } else { 256906164d2bSGeorge Zhang /* Tail pointer wraps around. */ 257006164d2bSGeorge Zhang 257106164d2bSGeorge Zhang const size_t tmp = (size_t) (produce_q_size - tail); 257206164d2bSGeorge Zhang 2573d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, tail, from, tmp); 257406164d2bSGeorge Zhang if (result >= VMCI_SUCCESS) 2575d1038084SAl Viro result = qp_memcpy_to_queue_iter(produce_q, 0, from, 257606164d2bSGeorge Zhang written - tmp); 257706164d2bSGeorge Zhang } 257806164d2bSGeorge Zhang 257906164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 258006164d2bSGeorge Zhang return result; 258106164d2bSGeorge Zhang 258206164d2bSGeorge Zhang vmci_q_header_add_producer_tail(produce_q->q_header, written, 258306164d2bSGeorge Zhang produce_q_size); 258406164d2bSGeorge Zhang return written; 258506164d2bSGeorge Zhang } 258606164d2bSGeorge Zhang 258706164d2bSGeorge Zhang /* 258806164d2bSGeorge Zhang * Dequeues data (if available) from the given consume queue. Writes data 258906164d2bSGeorge Zhang * to the user provided buffer using the provided function. 259006164d2bSGeorge Zhang * Assumes the queue->mutex has been acquired. 259106164d2bSGeorge Zhang * Results: 259206164d2bSGeorge Zhang * VMCI_ERROR_QUEUEPAIR_NODATA if no data was available to dequeue. 259306164d2bSGeorge Zhang * VMCI_ERROR_INVALID_SIZE, if any queue pointer is outside the queue 259406164d2bSGeorge Zhang * (as defined by the queue size). 259506164d2bSGeorge Zhang * VMCI_ERROR_INVALID_ARGS, if an error occured when accessing the buffer. 259606164d2bSGeorge Zhang * Otherwise the number of bytes dequeued is returned. 259706164d2bSGeorge Zhang * Side effects: 259806164d2bSGeorge Zhang * Updates the head pointer of the consume queue. 259906164d2bSGeorge Zhang */ 260006164d2bSGeorge Zhang static ssize_t qp_dequeue_locked(struct vmci_queue *produce_q, 260106164d2bSGeorge Zhang struct vmci_queue *consume_q, 260206164d2bSGeorge Zhang const u64 consume_q_size, 260353f58d8eSAl Viro struct iov_iter *to, 260445412befSAndy King bool update_consumer) 260506164d2bSGeorge Zhang { 260653f58d8eSAl Viro size_t buf_size = iov_iter_count(to); 260706164d2bSGeorge Zhang s64 buf_ready; 260806164d2bSGeorge Zhang u64 head; 260906164d2bSGeorge Zhang size_t read; 261006164d2bSGeorge Zhang ssize_t result; 261106164d2bSGeorge Zhang 261245412befSAndy King result = qp_map_queue_headers(produce_q, consume_q); 261306164d2bSGeorge Zhang if (unlikely(result != VMCI_SUCCESS)) 261406164d2bSGeorge Zhang return result; 261506164d2bSGeorge Zhang 261606164d2bSGeorge Zhang buf_ready = vmci_q_header_buf_ready(consume_q->q_header, 261706164d2bSGeorge Zhang produce_q->q_header, 261806164d2bSGeorge Zhang consume_q_size); 261906164d2bSGeorge Zhang if (buf_ready == 0) 262006164d2bSGeorge Zhang return VMCI_ERROR_QUEUEPAIR_NODATA; 262106164d2bSGeorge Zhang 262206164d2bSGeorge Zhang if (buf_ready < VMCI_SUCCESS) 262306164d2bSGeorge Zhang return (ssize_t) buf_ready; 262406164d2bSGeorge Zhang 262506164d2bSGeorge Zhang read = (size_t) (buf_ready > buf_size ? buf_size : buf_ready); 262606164d2bSGeorge Zhang head = vmci_q_header_consumer_head(produce_q->q_header); 262706164d2bSGeorge Zhang if (likely(head + read < consume_q_size)) { 262853f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, head, read); 262906164d2bSGeorge Zhang } else { 263006164d2bSGeorge Zhang /* Head pointer wraps around. */ 263106164d2bSGeorge Zhang 263206164d2bSGeorge Zhang const size_t tmp = (size_t) (consume_q_size - head); 263306164d2bSGeorge Zhang 263453f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, head, tmp); 263506164d2bSGeorge Zhang if (result >= VMCI_SUCCESS) 263653f58d8eSAl Viro result = qp_memcpy_from_queue_iter(to, consume_q, 0, 263706164d2bSGeorge Zhang read - tmp); 263806164d2bSGeorge Zhang 263906164d2bSGeorge Zhang } 264006164d2bSGeorge Zhang 264106164d2bSGeorge Zhang if (result < VMCI_SUCCESS) 264206164d2bSGeorge Zhang return result; 264306164d2bSGeorge Zhang 264406164d2bSGeorge Zhang if (update_consumer) 264506164d2bSGeorge Zhang vmci_q_header_add_consumer_head(produce_q->q_header, 264606164d2bSGeorge Zhang read, consume_q_size); 264706164d2bSGeorge Zhang 264806164d2bSGeorge Zhang return read; 264906164d2bSGeorge Zhang } 265006164d2bSGeorge Zhang 265106164d2bSGeorge Zhang /* 265206164d2bSGeorge Zhang * vmci_qpair_alloc() - Allocates a queue pair. 265306164d2bSGeorge Zhang * @qpair: Pointer for the new vmci_qp struct. 265406164d2bSGeorge Zhang * @handle: Handle to track the resource. 265506164d2bSGeorge Zhang * @produce_qsize: Desired size of the producer queue. 265606164d2bSGeorge Zhang * @consume_qsize: Desired size of the consumer queue. 265706164d2bSGeorge Zhang * @peer: ContextID of the peer. 265806164d2bSGeorge Zhang * @flags: VMCI flags. 265906164d2bSGeorge Zhang * @priv_flags: VMCI priviledge flags. 266006164d2bSGeorge Zhang * 266106164d2bSGeorge Zhang * This is the client interface for allocating the memory for a 266206164d2bSGeorge Zhang * vmci_qp structure and then attaching to the underlying 266306164d2bSGeorge Zhang * queue. If an error occurs allocating the memory for the 266406164d2bSGeorge Zhang * vmci_qp structure no attempt is made to attach. If an 266506164d2bSGeorge Zhang * error occurs attaching, then the structure is freed. 266606164d2bSGeorge Zhang */ 266706164d2bSGeorge Zhang int vmci_qpair_alloc(struct vmci_qp **qpair, 266806164d2bSGeorge Zhang struct vmci_handle *handle, 266906164d2bSGeorge Zhang u64 produce_qsize, 267006164d2bSGeorge Zhang u64 consume_qsize, 267106164d2bSGeorge Zhang u32 peer, 267206164d2bSGeorge Zhang u32 flags, 267306164d2bSGeorge Zhang u32 priv_flags) 267406164d2bSGeorge Zhang { 267506164d2bSGeorge Zhang struct vmci_qp *my_qpair; 267606164d2bSGeorge Zhang int retval; 267706164d2bSGeorge Zhang struct vmci_handle src = VMCI_INVALID_HANDLE; 267806164d2bSGeorge Zhang struct vmci_handle dst = vmci_make_handle(peer, VMCI_INVALID_ID); 267906164d2bSGeorge Zhang enum vmci_route route; 268006164d2bSGeorge Zhang vmci_event_release_cb wakeup_cb; 268106164d2bSGeorge Zhang void *client_data; 268206164d2bSGeorge Zhang 268306164d2bSGeorge Zhang /* 268406164d2bSGeorge Zhang * Restrict the size of a queuepair. The device already 268506164d2bSGeorge Zhang * enforces a limit on the total amount of memory that can be 268606164d2bSGeorge Zhang * allocated to queuepairs for a guest. However, we try to 268706164d2bSGeorge Zhang * allocate this memory before we make the queuepair 268806164d2bSGeorge Zhang * allocation hypercall. On Linux, we allocate each page 268906164d2bSGeorge Zhang * separately, which means rather than fail, the guest will 269006164d2bSGeorge Zhang * thrash while it tries to allocate, and will become 269106164d2bSGeorge Zhang * increasingly unresponsive to the point where it appears to 269206164d2bSGeorge Zhang * be hung. So we place a limit on the size of an individual 269306164d2bSGeorge Zhang * queuepair here, and leave the device to enforce the 269406164d2bSGeorge Zhang * restriction on total queuepair memory. (Note that this 269506164d2bSGeorge Zhang * doesn't prevent all cases; a user with only this much 269606164d2bSGeorge Zhang * physical memory could still get into trouble.) The error 269706164d2bSGeorge Zhang * used by the device is NO_RESOURCES, so use that here too. 269806164d2bSGeorge Zhang */ 269906164d2bSGeorge Zhang 270006164d2bSGeorge Zhang if (produce_qsize + consume_qsize < max(produce_qsize, consume_qsize) || 270106164d2bSGeorge Zhang produce_qsize + consume_qsize > VMCI_MAX_GUEST_QP_MEMORY) 270206164d2bSGeorge Zhang return VMCI_ERROR_NO_RESOURCES; 270306164d2bSGeorge Zhang 270406164d2bSGeorge Zhang retval = vmci_route(&src, &dst, false, &route); 270506164d2bSGeorge Zhang if (retval < VMCI_SUCCESS) 270606164d2bSGeorge Zhang route = vmci_guest_code_active() ? 270706164d2bSGeorge Zhang VMCI_ROUTE_AS_GUEST : VMCI_ROUTE_AS_HOST; 270806164d2bSGeorge Zhang 270945412befSAndy King if (flags & (VMCI_QPFLAG_NONBLOCK | VMCI_QPFLAG_PINNED)) { 271045412befSAndy King pr_devel("NONBLOCK OR PINNED set"); 271106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 271206164d2bSGeorge Zhang } 271306164d2bSGeorge Zhang 271406164d2bSGeorge Zhang my_qpair = kzalloc(sizeof(*my_qpair), GFP_KERNEL); 271506164d2bSGeorge Zhang if (!my_qpair) 271606164d2bSGeorge Zhang return VMCI_ERROR_NO_MEM; 271706164d2bSGeorge Zhang 271806164d2bSGeorge Zhang my_qpair->produce_q_size = produce_qsize; 271906164d2bSGeorge Zhang my_qpair->consume_q_size = consume_qsize; 272006164d2bSGeorge Zhang my_qpair->peer = peer; 272106164d2bSGeorge Zhang my_qpair->flags = flags; 272206164d2bSGeorge Zhang my_qpair->priv_flags = priv_flags; 272306164d2bSGeorge Zhang 272406164d2bSGeorge Zhang wakeup_cb = NULL; 272506164d2bSGeorge Zhang client_data = NULL; 272606164d2bSGeorge Zhang 272706164d2bSGeorge Zhang if (VMCI_ROUTE_AS_HOST == route) { 272806164d2bSGeorge Zhang my_qpair->guest_endpoint = false; 272906164d2bSGeorge Zhang if (!(flags & VMCI_QPFLAG_LOCAL)) { 273006164d2bSGeorge Zhang my_qpair->blocked = 0; 273106164d2bSGeorge Zhang my_qpair->generation = 0; 273206164d2bSGeorge Zhang init_waitqueue_head(&my_qpair->event); 273306164d2bSGeorge Zhang wakeup_cb = qp_wakeup_cb; 273406164d2bSGeorge Zhang client_data = (void *)my_qpair; 273506164d2bSGeorge Zhang } 273606164d2bSGeorge Zhang } else { 273706164d2bSGeorge Zhang my_qpair->guest_endpoint = true; 273806164d2bSGeorge Zhang } 273906164d2bSGeorge Zhang 274006164d2bSGeorge Zhang retval = vmci_qp_alloc(handle, 274106164d2bSGeorge Zhang &my_qpair->produce_q, 274206164d2bSGeorge Zhang my_qpair->produce_q_size, 274306164d2bSGeorge Zhang &my_qpair->consume_q, 274406164d2bSGeorge Zhang my_qpair->consume_q_size, 274506164d2bSGeorge Zhang my_qpair->peer, 274606164d2bSGeorge Zhang my_qpair->flags, 274706164d2bSGeorge Zhang my_qpair->priv_flags, 274806164d2bSGeorge Zhang my_qpair->guest_endpoint, 274906164d2bSGeorge Zhang wakeup_cb, client_data); 275006164d2bSGeorge Zhang 275106164d2bSGeorge Zhang if (retval < VMCI_SUCCESS) { 275206164d2bSGeorge Zhang kfree(my_qpair); 275306164d2bSGeorge Zhang return retval; 275406164d2bSGeorge Zhang } 275506164d2bSGeorge Zhang 275606164d2bSGeorge Zhang *qpair = my_qpair; 275706164d2bSGeorge Zhang my_qpair->handle = *handle; 275806164d2bSGeorge Zhang 275906164d2bSGeorge Zhang return retval; 276006164d2bSGeorge Zhang } 276106164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_alloc); 276206164d2bSGeorge Zhang 276306164d2bSGeorge Zhang /* 276406164d2bSGeorge Zhang * vmci_qpair_detach() - Detatches the client from a queue pair. 276506164d2bSGeorge Zhang * @qpair: Reference of a pointer to the qpair struct. 276606164d2bSGeorge Zhang * 276706164d2bSGeorge Zhang * This is the client interface for detaching from a VMCIQPair. 276806164d2bSGeorge Zhang * Note that this routine will free the memory allocated for the 276906164d2bSGeorge Zhang * vmci_qp structure too. 277006164d2bSGeorge Zhang */ 277106164d2bSGeorge Zhang int vmci_qpair_detach(struct vmci_qp **qpair) 277206164d2bSGeorge Zhang { 277306164d2bSGeorge Zhang int result; 277406164d2bSGeorge Zhang struct vmci_qp *old_qpair; 277506164d2bSGeorge Zhang 277606164d2bSGeorge Zhang if (!qpair || !(*qpair)) 277706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 277806164d2bSGeorge Zhang 277906164d2bSGeorge Zhang old_qpair = *qpair; 278006164d2bSGeorge Zhang result = qp_detatch(old_qpair->handle, old_qpair->guest_endpoint); 278106164d2bSGeorge Zhang 278206164d2bSGeorge Zhang /* 278306164d2bSGeorge Zhang * The guest can fail to detach for a number of reasons, and 278406164d2bSGeorge Zhang * if it does so, it will cleanup the entry (if there is one). 278506164d2bSGeorge Zhang * The host can fail too, but it won't cleanup the entry 278606164d2bSGeorge Zhang * immediately, it will do that later when the context is 278706164d2bSGeorge Zhang * freed. Either way, we need to release the qpair struct 278806164d2bSGeorge Zhang * here; there isn't much the caller can do, and we don't want 278906164d2bSGeorge Zhang * to leak. 279006164d2bSGeorge Zhang */ 279106164d2bSGeorge Zhang 279206164d2bSGeorge Zhang memset(old_qpair, 0, sizeof(*old_qpair)); 279306164d2bSGeorge Zhang old_qpair->handle = VMCI_INVALID_HANDLE; 279406164d2bSGeorge Zhang old_qpair->peer = VMCI_INVALID_ID; 279506164d2bSGeorge Zhang kfree(old_qpair); 279606164d2bSGeorge Zhang *qpair = NULL; 279706164d2bSGeorge Zhang 279806164d2bSGeorge Zhang return result; 279906164d2bSGeorge Zhang } 280006164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_detach); 280106164d2bSGeorge Zhang 280206164d2bSGeorge Zhang /* 280306164d2bSGeorge Zhang * vmci_qpair_get_produce_indexes() - Retrieves the indexes of the producer. 280406164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 280506164d2bSGeorge Zhang * @producer_tail: Reference used for storing producer tail index. 280606164d2bSGeorge Zhang * @consumer_head: Reference used for storing the consumer head index. 280706164d2bSGeorge Zhang * 280806164d2bSGeorge Zhang * This is the client interface for getting the current indexes of the 280906164d2bSGeorge Zhang * QPair from the point of the view of the caller as the producer. 281006164d2bSGeorge Zhang */ 281106164d2bSGeorge Zhang int vmci_qpair_get_produce_indexes(const struct vmci_qp *qpair, 281206164d2bSGeorge Zhang u64 *producer_tail, 281306164d2bSGeorge Zhang u64 *consumer_head) 281406164d2bSGeorge Zhang { 281506164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 281606164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 281706164d2bSGeorge Zhang int result; 281806164d2bSGeorge Zhang 281906164d2bSGeorge Zhang if (!qpair) 282006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 282106164d2bSGeorge Zhang 282206164d2bSGeorge Zhang qp_lock(qpair); 282306164d2bSGeorge Zhang result = 282406164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 282506164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 282606164d2bSGeorge Zhang vmci_q_header_get_pointers(produce_q_header, consume_q_header, 282706164d2bSGeorge Zhang producer_tail, consumer_head); 282806164d2bSGeorge Zhang qp_unlock(qpair); 282906164d2bSGeorge Zhang 283006164d2bSGeorge Zhang if (result == VMCI_SUCCESS && 283106164d2bSGeorge Zhang ((producer_tail && *producer_tail >= qpair->produce_q_size) || 283206164d2bSGeorge Zhang (consumer_head && *consumer_head >= qpair->produce_q_size))) 283306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_SIZE; 283406164d2bSGeorge Zhang 283506164d2bSGeorge Zhang return result; 283606164d2bSGeorge Zhang } 283706164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_get_produce_indexes); 283806164d2bSGeorge Zhang 283906164d2bSGeorge Zhang /* 28403f8b6fb7SMasahiro Yamada * vmci_qpair_get_consume_indexes() - Retrieves the indexes of the consumer. 284106164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 284206164d2bSGeorge Zhang * @consumer_tail: Reference used for storing consumer tail index. 284306164d2bSGeorge Zhang * @producer_head: Reference used for storing the producer head index. 284406164d2bSGeorge Zhang * 284506164d2bSGeorge Zhang * This is the client interface for getting the current indexes of the 284606164d2bSGeorge Zhang * QPair from the point of the view of the caller as the consumer. 284706164d2bSGeorge Zhang */ 284806164d2bSGeorge Zhang int vmci_qpair_get_consume_indexes(const struct vmci_qp *qpair, 284906164d2bSGeorge Zhang u64 *consumer_tail, 285006164d2bSGeorge Zhang u64 *producer_head) 285106164d2bSGeorge Zhang { 285206164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 285306164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 285406164d2bSGeorge Zhang int result; 285506164d2bSGeorge Zhang 285606164d2bSGeorge Zhang if (!qpair) 285706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 285806164d2bSGeorge Zhang 285906164d2bSGeorge Zhang qp_lock(qpair); 286006164d2bSGeorge Zhang result = 286106164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 286206164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 286306164d2bSGeorge Zhang vmci_q_header_get_pointers(consume_q_header, produce_q_header, 286406164d2bSGeorge Zhang consumer_tail, producer_head); 286506164d2bSGeorge Zhang qp_unlock(qpair); 286606164d2bSGeorge Zhang 286706164d2bSGeorge Zhang if (result == VMCI_SUCCESS && 286806164d2bSGeorge Zhang ((consumer_tail && *consumer_tail >= qpair->consume_q_size) || 286906164d2bSGeorge Zhang (producer_head && *producer_head >= qpair->consume_q_size))) 287006164d2bSGeorge Zhang return VMCI_ERROR_INVALID_SIZE; 287106164d2bSGeorge Zhang 287206164d2bSGeorge Zhang return result; 287306164d2bSGeorge Zhang } 287406164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_get_consume_indexes); 287506164d2bSGeorge Zhang 287606164d2bSGeorge Zhang /* 287706164d2bSGeorge Zhang * vmci_qpair_produce_free_space() - Retrieves free space in producer queue. 287806164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 287906164d2bSGeorge Zhang * 288006164d2bSGeorge Zhang * This is the client interface for getting the amount of free 288106164d2bSGeorge Zhang * space in the QPair from the point of the view of the caller as 288206164d2bSGeorge Zhang * the producer which is the common case. Returns < 0 if err, else 288306164d2bSGeorge Zhang * available bytes into which data can be enqueued if > 0. 288406164d2bSGeorge Zhang */ 288506164d2bSGeorge Zhang s64 vmci_qpair_produce_free_space(const struct vmci_qp *qpair) 288606164d2bSGeorge Zhang { 288706164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 288806164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 288906164d2bSGeorge Zhang s64 result; 289006164d2bSGeorge Zhang 289106164d2bSGeorge Zhang if (!qpair) 289206164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 289306164d2bSGeorge Zhang 289406164d2bSGeorge Zhang qp_lock(qpair); 289506164d2bSGeorge Zhang result = 289606164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 289706164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 289806164d2bSGeorge Zhang result = vmci_q_header_free_space(produce_q_header, 289906164d2bSGeorge Zhang consume_q_header, 290006164d2bSGeorge Zhang qpair->produce_q_size); 290106164d2bSGeorge Zhang else 290206164d2bSGeorge Zhang result = 0; 290306164d2bSGeorge Zhang 290406164d2bSGeorge Zhang qp_unlock(qpair); 290506164d2bSGeorge Zhang 290606164d2bSGeorge Zhang return result; 290706164d2bSGeorge Zhang } 290806164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_produce_free_space); 290906164d2bSGeorge Zhang 291006164d2bSGeorge Zhang /* 291106164d2bSGeorge Zhang * vmci_qpair_consume_free_space() - Retrieves free space in consumer queue. 291206164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 291306164d2bSGeorge Zhang * 291406164d2bSGeorge Zhang * This is the client interface for getting the amount of free 291506164d2bSGeorge Zhang * space in the QPair from the point of the view of the caller as 291606164d2bSGeorge Zhang * the consumer which is not the common case. Returns < 0 if err, else 291706164d2bSGeorge Zhang * available bytes into which data can be enqueued if > 0. 291806164d2bSGeorge Zhang */ 291906164d2bSGeorge Zhang s64 vmci_qpair_consume_free_space(const struct vmci_qp *qpair) 292006164d2bSGeorge Zhang { 292106164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 292206164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 292306164d2bSGeorge Zhang s64 result; 292406164d2bSGeorge Zhang 292506164d2bSGeorge Zhang if (!qpair) 292606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 292706164d2bSGeorge Zhang 292806164d2bSGeorge Zhang qp_lock(qpair); 292906164d2bSGeorge Zhang result = 293006164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 293106164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 293206164d2bSGeorge Zhang result = vmci_q_header_free_space(consume_q_header, 293306164d2bSGeorge Zhang produce_q_header, 293406164d2bSGeorge Zhang qpair->consume_q_size); 293506164d2bSGeorge Zhang else 293606164d2bSGeorge Zhang result = 0; 293706164d2bSGeorge Zhang 293806164d2bSGeorge Zhang qp_unlock(qpair); 293906164d2bSGeorge Zhang 294006164d2bSGeorge Zhang return result; 294106164d2bSGeorge Zhang } 294206164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_consume_free_space); 294306164d2bSGeorge Zhang 294406164d2bSGeorge Zhang /* 294506164d2bSGeorge Zhang * vmci_qpair_produce_buf_ready() - Gets bytes ready to read from 294606164d2bSGeorge Zhang * producer queue. 294706164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 294806164d2bSGeorge Zhang * 294906164d2bSGeorge Zhang * This is the client interface for getting the amount of 295006164d2bSGeorge Zhang * enqueued data in the QPair from the point of the view of the 295106164d2bSGeorge Zhang * caller as the producer which is not the common case. Returns < 0 if err, 295206164d2bSGeorge Zhang * else available bytes that may be read. 295306164d2bSGeorge Zhang */ 295406164d2bSGeorge Zhang s64 vmci_qpair_produce_buf_ready(const struct vmci_qp *qpair) 295506164d2bSGeorge Zhang { 295606164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 295706164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 295806164d2bSGeorge Zhang s64 result; 295906164d2bSGeorge Zhang 296006164d2bSGeorge Zhang if (!qpair) 296106164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 296206164d2bSGeorge Zhang 296306164d2bSGeorge Zhang qp_lock(qpair); 296406164d2bSGeorge Zhang result = 296506164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 296606164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 296706164d2bSGeorge Zhang result = vmci_q_header_buf_ready(produce_q_header, 296806164d2bSGeorge Zhang consume_q_header, 296906164d2bSGeorge Zhang qpair->produce_q_size); 297006164d2bSGeorge Zhang else 297106164d2bSGeorge Zhang result = 0; 297206164d2bSGeorge Zhang 297306164d2bSGeorge Zhang qp_unlock(qpair); 297406164d2bSGeorge Zhang 297506164d2bSGeorge Zhang return result; 297606164d2bSGeorge Zhang } 297706164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_produce_buf_ready); 297806164d2bSGeorge Zhang 297906164d2bSGeorge Zhang /* 298006164d2bSGeorge Zhang * vmci_qpair_consume_buf_ready() - Gets bytes ready to read from 298106164d2bSGeorge Zhang * consumer queue. 298206164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 298306164d2bSGeorge Zhang * 298406164d2bSGeorge Zhang * This is the client interface for getting the amount of 298506164d2bSGeorge Zhang * enqueued data in the QPair from the point of the view of the 298606164d2bSGeorge Zhang * caller as the consumer which is the normal case. Returns < 0 if err, 298706164d2bSGeorge Zhang * else available bytes that may be read. 298806164d2bSGeorge Zhang */ 298906164d2bSGeorge Zhang s64 vmci_qpair_consume_buf_ready(const struct vmci_qp *qpair) 299006164d2bSGeorge Zhang { 299106164d2bSGeorge Zhang struct vmci_queue_header *produce_q_header; 299206164d2bSGeorge Zhang struct vmci_queue_header *consume_q_header; 299306164d2bSGeorge Zhang s64 result; 299406164d2bSGeorge Zhang 299506164d2bSGeorge Zhang if (!qpair) 299606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 299706164d2bSGeorge Zhang 299806164d2bSGeorge Zhang qp_lock(qpair); 299906164d2bSGeorge Zhang result = 300006164d2bSGeorge Zhang qp_get_queue_headers(qpair, &produce_q_header, &consume_q_header); 300106164d2bSGeorge Zhang if (result == VMCI_SUCCESS) 300206164d2bSGeorge Zhang result = vmci_q_header_buf_ready(consume_q_header, 300306164d2bSGeorge Zhang produce_q_header, 300406164d2bSGeorge Zhang qpair->consume_q_size); 300506164d2bSGeorge Zhang else 300606164d2bSGeorge Zhang result = 0; 300706164d2bSGeorge Zhang 300806164d2bSGeorge Zhang qp_unlock(qpair); 300906164d2bSGeorge Zhang 301006164d2bSGeorge Zhang return result; 301106164d2bSGeorge Zhang } 301206164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_consume_buf_ready); 301306164d2bSGeorge Zhang 301406164d2bSGeorge Zhang /* 301506164d2bSGeorge Zhang * vmci_qpair_enqueue() - Throw data on the queue. 301606164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 301706164d2bSGeorge Zhang * @buf: Pointer to buffer containing data 301806164d2bSGeorge Zhang * @buf_size: Length of buffer. 301906164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 302006164d2bSGeorge Zhang * 302106164d2bSGeorge Zhang * This is the client interface for enqueueing data into the queue. 302206164d2bSGeorge Zhang * Returns number of bytes enqueued or < 0 on error. 302306164d2bSGeorge Zhang */ 302406164d2bSGeorge Zhang ssize_t vmci_qpair_enqueue(struct vmci_qp *qpair, 302506164d2bSGeorge Zhang const void *buf, 302606164d2bSGeorge Zhang size_t buf_size, 302706164d2bSGeorge Zhang int buf_type) 302806164d2bSGeorge Zhang { 302906164d2bSGeorge Zhang ssize_t result; 3030d1038084SAl Viro struct iov_iter from; 3031d1038084SAl Viro struct kvec v = {.iov_base = (void *)buf, .iov_len = buf_size}; 303206164d2bSGeorge Zhang 303306164d2bSGeorge Zhang if (!qpair || !buf) 303406164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 303506164d2bSGeorge Zhang 3036d1038084SAl Viro iov_iter_kvec(&from, WRITE | ITER_KVEC, &v, 1, buf_size); 3037d1038084SAl Viro 303806164d2bSGeorge Zhang qp_lock(qpair); 303906164d2bSGeorge Zhang 304006164d2bSGeorge Zhang do { 304106164d2bSGeorge Zhang result = qp_enqueue_locked(qpair->produce_q, 304206164d2bSGeorge Zhang qpair->consume_q, 304306164d2bSGeorge Zhang qpair->produce_q_size, 3044d1038084SAl Viro &from); 304506164d2bSGeorge Zhang 304606164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 304706164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 304806164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 304906164d2bSGeorge Zhang 305006164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 305106164d2bSGeorge Zhang 305206164d2bSGeorge Zhang qp_unlock(qpair); 305306164d2bSGeorge Zhang 305406164d2bSGeorge Zhang return result; 305506164d2bSGeorge Zhang } 305606164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_enqueue); 305706164d2bSGeorge Zhang 305806164d2bSGeorge Zhang /* 305906164d2bSGeorge Zhang * vmci_qpair_dequeue() - Get data from the queue. 306006164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 306106164d2bSGeorge Zhang * @buf: Pointer to buffer for the data 306206164d2bSGeorge Zhang * @buf_size: Length of buffer. 306306164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 306406164d2bSGeorge Zhang * 306506164d2bSGeorge Zhang * This is the client interface for dequeueing data from the queue. 306606164d2bSGeorge Zhang * Returns number of bytes dequeued or < 0 on error. 306706164d2bSGeorge Zhang */ 306806164d2bSGeorge Zhang ssize_t vmci_qpair_dequeue(struct vmci_qp *qpair, 306906164d2bSGeorge Zhang void *buf, 307006164d2bSGeorge Zhang size_t buf_size, 307106164d2bSGeorge Zhang int buf_type) 307206164d2bSGeorge Zhang { 307306164d2bSGeorge Zhang ssize_t result; 3074ce3d6e7dSAl Viro struct iov_iter to; 3075ce3d6e7dSAl Viro struct kvec v = {.iov_base = buf, .iov_len = buf_size}; 307606164d2bSGeorge Zhang 307706164d2bSGeorge Zhang if (!qpair || !buf) 307806164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 307906164d2bSGeorge Zhang 3080ce3d6e7dSAl Viro iov_iter_kvec(&to, READ | ITER_KVEC, &v, 1, buf_size); 3081ce3d6e7dSAl Viro 308206164d2bSGeorge Zhang qp_lock(qpair); 308306164d2bSGeorge Zhang 308406164d2bSGeorge Zhang do { 308506164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 308606164d2bSGeorge Zhang qpair->consume_q, 308706164d2bSGeorge Zhang qpair->consume_q_size, 308853f58d8eSAl Viro &to, true); 308906164d2bSGeorge Zhang 309006164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 309106164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 309206164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 309306164d2bSGeorge Zhang 309406164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 309506164d2bSGeorge Zhang 309606164d2bSGeorge Zhang qp_unlock(qpair); 309706164d2bSGeorge Zhang 309806164d2bSGeorge Zhang return result; 309906164d2bSGeorge Zhang } 310006164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_dequeue); 310106164d2bSGeorge Zhang 310206164d2bSGeorge Zhang /* 310306164d2bSGeorge Zhang * vmci_qpair_peek() - Peek at the data in the queue. 310406164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 310506164d2bSGeorge Zhang * @buf: Pointer to buffer for the data 310606164d2bSGeorge Zhang * @buf_size: Length of buffer. 310706164d2bSGeorge Zhang * @buf_type: Buffer type (Unused on Linux). 310806164d2bSGeorge Zhang * 310906164d2bSGeorge Zhang * This is the client interface for peeking into a queue. (I.e., 311006164d2bSGeorge Zhang * copy data from the queue without updating the head pointer.) 311106164d2bSGeorge Zhang * Returns number of bytes dequeued or < 0 on error. 311206164d2bSGeorge Zhang */ 311306164d2bSGeorge Zhang ssize_t vmci_qpair_peek(struct vmci_qp *qpair, 311406164d2bSGeorge Zhang void *buf, 311506164d2bSGeorge Zhang size_t buf_size, 311606164d2bSGeorge Zhang int buf_type) 311706164d2bSGeorge Zhang { 3118ce3d6e7dSAl Viro struct iov_iter to; 3119ce3d6e7dSAl Viro struct kvec v = {.iov_base = buf, .iov_len = buf_size}; 312006164d2bSGeorge Zhang ssize_t result; 312106164d2bSGeorge Zhang 312206164d2bSGeorge Zhang if (!qpair || !buf) 312306164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 312406164d2bSGeorge Zhang 3125ce3d6e7dSAl Viro iov_iter_kvec(&to, READ | ITER_KVEC, &v, 1, buf_size); 3126ce3d6e7dSAl Viro 312706164d2bSGeorge Zhang qp_lock(qpair); 312806164d2bSGeorge Zhang 312906164d2bSGeorge Zhang do { 313006164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 313106164d2bSGeorge Zhang qpair->consume_q, 313206164d2bSGeorge Zhang qpair->consume_q_size, 313353f58d8eSAl Viro &to, false); 313406164d2bSGeorge Zhang 313506164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 313606164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 313706164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 313806164d2bSGeorge Zhang 313906164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 314006164d2bSGeorge Zhang 314106164d2bSGeorge Zhang qp_unlock(qpair); 314206164d2bSGeorge Zhang 314306164d2bSGeorge Zhang return result; 314406164d2bSGeorge Zhang } 314506164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_peek); 314606164d2bSGeorge Zhang 314706164d2bSGeorge Zhang /* 314806164d2bSGeorge Zhang * vmci_qpair_enquev() - Throw data on the queue using iov. 314906164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 315006164d2bSGeorge Zhang * @iov: Pointer to buffer containing data 315106164d2bSGeorge Zhang * @iov_size: Length of buffer. 315206164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 315306164d2bSGeorge Zhang * 315406164d2bSGeorge Zhang * This is the client interface for enqueueing data into the queue. 315506164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 315606164d2bSGeorge Zhang * of bytes enqueued or < 0 on error. 315706164d2bSGeorge Zhang */ 315806164d2bSGeorge Zhang ssize_t vmci_qpair_enquev(struct vmci_qp *qpair, 31594c946d9cSAl Viro struct msghdr *msg, 316006164d2bSGeorge Zhang size_t iov_size, 316106164d2bSGeorge Zhang int buf_type) 316206164d2bSGeorge Zhang { 316306164d2bSGeorge Zhang ssize_t result; 316406164d2bSGeorge Zhang 31654c946d9cSAl Viro if (!qpair) 316606164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 316706164d2bSGeorge Zhang 316806164d2bSGeorge Zhang qp_lock(qpair); 316906164d2bSGeorge Zhang 317006164d2bSGeorge Zhang do { 317106164d2bSGeorge Zhang result = qp_enqueue_locked(qpair->produce_q, 317206164d2bSGeorge Zhang qpair->consume_q, 317306164d2bSGeorge Zhang qpair->produce_q_size, 3174d1038084SAl Viro &msg->msg_iter); 317506164d2bSGeorge Zhang 317606164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 317706164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 317806164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 317906164d2bSGeorge Zhang 318006164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 318106164d2bSGeorge Zhang 318206164d2bSGeorge Zhang qp_unlock(qpair); 318306164d2bSGeorge Zhang 318406164d2bSGeorge Zhang return result; 318506164d2bSGeorge Zhang } 318606164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_enquev); 318706164d2bSGeorge Zhang 318806164d2bSGeorge Zhang /* 318906164d2bSGeorge Zhang * vmci_qpair_dequev() - Get data from the queue using iov. 319006164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 319106164d2bSGeorge Zhang * @iov: Pointer to buffer for the data 319206164d2bSGeorge Zhang * @iov_size: Length of buffer. 319306164d2bSGeorge Zhang * @buf_type: Buffer type (Unused). 319406164d2bSGeorge Zhang * 319506164d2bSGeorge Zhang * This is the client interface for dequeueing data from the queue. 319606164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 319706164d2bSGeorge Zhang * of bytes dequeued or < 0 on error. 319806164d2bSGeorge Zhang */ 319906164d2bSGeorge Zhang ssize_t vmci_qpair_dequev(struct vmci_qp *qpair, 3200d838df2eSAl Viro struct msghdr *msg, 320106164d2bSGeorge Zhang size_t iov_size, 320206164d2bSGeorge Zhang int buf_type) 320306164d2bSGeorge Zhang { 320406164d2bSGeorge Zhang ssize_t result; 320506164d2bSGeorge Zhang 3206d838df2eSAl Viro if (!qpair) 320706164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 320806164d2bSGeorge Zhang 320932b083a3SAndy King qp_lock(qpair); 321032b083a3SAndy King 321106164d2bSGeorge Zhang do { 321206164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 321306164d2bSGeorge Zhang qpair->consume_q, 321406164d2bSGeorge Zhang qpair->consume_q_size, 321553f58d8eSAl Viro &msg->msg_iter, true); 321606164d2bSGeorge Zhang 321706164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 321806164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 321906164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 322006164d2bSGeorge Zhang 322106164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 322206164d2bSGeorge Zhang 322306164d2bSGeorge Zhang qp_unlock(qpair); 322406164d2bSGeorge Zhang 322506164d2bSGeorge Zhang return result; 322606164d2bSGeorge Zhang } 322706164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_dequev); 322806164d2bSGeorge Zhang 322906164d2bSGeorge Zhang /* 323006164d2bSGeorge Zhang * vmci_qpair_peekv() - Peek at the data in the queue using iov. 323106164d2bSGeorge Zhang * @qpair: Pointer to the queue pair struct. 323206164d2bSGeorge Zhang * @iov: Pointer to buffer for the data 323306164d2bSGeorge Zhang * @iov_size: Length of buffer. 323406164d2bSGeorge Zhang * @buf_type: Buffer type (Unused on Linux). 323506164d2bSGeorge Zhang * 323606164d2bSGeorge Zhang * This is the client interface for peeking into a queue. (I.e., 323706164d2bSGeorge Zhang * copy data from the queue without updating the head pointer.) 323806164d2bSGeorge Zhang * This function uses IO vectors to handle the work. Returns number 323906164d2bSGeorge Zhang * of bytes peeked or < 0 on error. 324006164d2bSGeorge Zhang */ 324106164d2bSGeorge Zhang ssize_t vmci_qpair_peekv(struct vmci_qp *qpair, 3242d838df2eSAl Viro struct msghdr *msg, 324306164d2bSGeorge Zhang size_t iov_size, 324406164d2bSGeorge Zhang int buf_type) 324506164d2bSGeorge Zhang { 324606164d2bSGeorge Zhang ssize_t result; 324706164d2bSGeorge Zhang 3248d838df2eSAl Viro if (!qpair) 324906164d2bSGeorge Zhang return VMCI_ERROR_INVALID_ARGS; 325006164d2bSGeorge Zhang 325106164d2bSGeorge Zhang qp_lock(qpair); 325206164d2bSGeorge Zhang 325306164d2bSGeorge Zhang do { 325406164d2bSGeorge Zhang result = qp_dequeue_locked(qpair->produce_q, 325506164d2bSGeorge Zhang qpair->consume_q, 325606164d2bSGeorge Zhang qpair->consume_q_size, 325753f58d8eSAl Viro &msg->msg_iter, false); 325806164d2bSGeorge Zhang 325906164d2bSGeorge Zhang if (result == VMCI_ERROR_QUEUEPAIR_NOT_READY && 326006164d2bSGeorge Zhang !qp_wait_for_ready_queue(qpair)) 326106164d2bSGeorge Zhang result = VMCI_ERROR_WOULD_BLOCK; 326206164d2bSGeorge Zhang 326306164d2bSGeorge Zhang } while (result == VMCI_ERROR_QUEUEPAIR_NOT_READY); 326406164d2bSGeorge Zhang 326506164d2bSGeorge Zhang qp_unlock(qpair); 326606164d2bSGeorge Zhang return result; 326706164d2bSGeorge Zhang } 326806164d2bSGeorge Zhang EXPORT_SYMBOL_GPL(vmci_qpair_peekv); 3269