162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0
262306a36Sopenharmony_ci/*
362306a36Sopenharmony_ci * KVM coalesced MMIO
462306a36Sopenharmony_ci *
562306a36Sopenharmony_ci * Copyright (c) 2008 Bull S.A.S.
662306a36Sopenharmony_ci * Copyright 2009 Red Hat, Inc. and/or its affiliates.
762306a36Sopenharmony_ci *
862306a36Sopenharmony_ci *  Author: Laurent Vivier <Laurent.Vivier@bull.net>
962306a36Sopenharmony_ci *
1062306a36Sopenharmony_ci */
1162306a36Sopenharmony_ci
1262306a36Sopenharmony_ci#include <kvm/iodev.h>
1362306a36Sopenharmony_ci
1462306a36Sopenharmony_ci#include <linux/kvm_host.h>
1562306a36Sopenharmony_ci#include <linux/slab.h>
1662306a36Sopenharmony_ci#include <linux/kvm.h>
1762306a36Sopenharmony_ci
1862306a36Sopenharmony_ci#include "coalesced_mmio.h"
1962306a36Sopenharmony_ci
2062306a36Sopenharmony_cistatic inline struct kvm_coalesced_mmio_dev *to_mmio(struct kvm_io_device *dev)
2162306a36Sopenharmony_ci{
2262306a36Sopenharmony_ci	return container_of(dev, struct kvm_coalesced_mmio_dev, dev);
2362306a36Sopenharmony_ci}
2462306a36Sopenharmony_ci
2562306a36Sopenharmony_cistatic int coalesced_mmio_in_range(struct kvm_coalesced_mmio_dev *dev,
2662306a36Sopenharmony_ci				   gpa_t addr, int len)
2762306a36Sopenharmony_ci{
2862306a36Sopenharmony_ci	/* is it in a batchable area ?
2962306a36Sopenharmony_ci	 * (addr,len) is fully included in
3062306a36Sopenharmony_ci	 * (zone->addr, zone->size)
3162306a36Sopenharmony_ci	 */
3262306a36Sopenharmony_ci	if (len < 0)
3362306a36Sopenharmony_ci		return 0;
3462306a36Sopenharmony_ci	if (addr + len < addr)
3562306a36Sopenharmony_ci		return 0;
3662306a36Sopenharmony_ci	if (addr < dev->zone.addr)
3762306a36Sopenharmony_ci		return 0;
3862306a36Sopenharmony_ci	if (addr + len > dev->zone.addr + dev->zone.size)
3962306a36Sopenharmony_ci		return 0;
4062306a36Sopenharmony_ci	return 1;
4162306a36Sopenharmony_ci}
4262306a36Sopenharmony_ci
4362306a36Sopenharmony_cistatic int coalesced_mmio_has_room(struct kvm_coalesced_mmio_dev *dev, u32 last)
4462306a36Sopenharmony_ci{
4562306a36Sopenharmony_ci	struct kvm_coalesced_mmio_ring *ring;
4662306a36Sopenharmony_ci	unsigned avail;
4762306a36Sopenharmony_ci
4862306a36Sopenharmony_ci	/* Are we able to batch it ? */
4962306a36Sopenharmony_ci
5062306a36Sopenharmony_ci	/* last is the first free entry
5162306a36Sopenharmony_ci	 * check if we don't meet the first used entry
5262306a36Sopenharmony_ci	 * there is always one unused entry in the buffer
5362306a36Sopenharmony_ci	 */
5462306a36Sopenharmony_ci	ring = dev->kvm->coalesced_mmio_ring;
5562306a36Sopenharmony_ci	avail = (ring->first - last - 1) % KVM_COALESCED_MMIO_MAX;
5662306a36Sopenharmony_ci	if (avail == 0) {
5762306a36Sopenharmony_ci		/* full */
5862306a36Sopenharmony_ci		return 0;
5962306a36Sopenharmony_ci	}
6062306a36Sopenharmony_ci
6162306a36Sopenharmony_ci	return 1;
6262306a36Sopenharmony_ci}
6362306a36Sopenharmony_ci
6462306a36Sopenharmony_cistatic int coalesced_mmio_write(struct kvm_vcpu *vcpu,
6562306a36Sopenharmony_ci				struct kvm_io_device *this, gpa_t addr,
6662306a36Sopenharmony_ci				int len, const void *val)
6762306a36Sopenharmony_ci{
6862306a36Sopenharmony_ci	struct kvm_coalesced_mmio_dev *dev = to_mmio(this);
6962306a36Sopenharmony_ci	struct kvm_coalesced_mmio_ring *ring = dev->kvm->coalesced_mmio_ring;
7062306a36Sopenharmony_ci	__u32 insert;
7162306a36Sopenharmony_ci
7262306a36Sopenharmony_ci	if (!coalesced_mmio_in_range(dev, addr, len))
7362306a36Sopenharmony_ci		return -EOPNOTSUPP;
7462306a36Sopenharmony_ci
7562306a36Sopenharmony_ci	spin_lock(&dev->kvm->ring_lock);
7662306a36Sopenharmony_ci
7762306a36Sopenharmony_ci	insert = READ_ONCE(ring->last);
7862306a36Sopenharmony_ci	if (!coalesced_mmio_has_room(dev, insert) ||
7962306a36Sopenharmony_ci	    insert >= KVM_COALESCED_MMIO_MAX) {
8062306a36Sopenharmony_ci		spin_unlock(&dev->kvm->ring_lock);
8162306a36Sopenharmony_ci		return -EOPNOTSUPP;
8262306a36Sopenharmony_ci	}
8362306a36Sopenharmony_ci
8462306a36Sopenharmony_ci	/* copy data in first free entry of the ring */
8562306a36Sopenharmony_ci
8662306a36Sopenharmony_ci	ring->coalesced_mmio[insert].phys_addr = addr;
8762306a36Sopenharmony_ci	ring->coalesced_mmio[insert].len = len;
8862306a36Sopenharmony_ci	memcpy(ring->coalesced_mmio[insert].data, val, len);
8962306a36Sopenharmony_ci	ring->coalesced_mmio[insert].pio = dev->zone.pio;
9062306a36Sopenharmony_ci	smp_wmb();
9162306a36Sopenharmony_ci	ring->last = (insert + 1) % KVM_COALESCED_MMIO_MAX;
9262306a36Sopenharmony_ci	spin_unlock(&dev->kvm->ring_lock);
9362306a36Sopenharmony_ci	return 0;
9462306a36Sopenharmony_ci}
9562306a36Sopenharmony_ci
9662306a36Sopenharmony_cistatic void coalesced_mmio_destructor(struct kvm_io_device *this)
9762306a36Sopenharmony_ci{
9862306a36Sopenharmony_ci	struct kvm_coalesced_mmio_dev *dev = to_mmio(this);
9962306a36Sopenharmony_ci
10062306a36Sopenharmony_ci	list_del(&dev->list);
10162306a36Sopenharmony_ci
10262306a36Sopenharmony_ci	kfree(dev);
10362306a36Sopenharmony_ci}
10462306a36Sopenharmony_ci
10562306a36Sopenharmony_cistatic const struct kvm_io_device_ops coalesced_mmio_ops = {
10662306a36Sopenharmony_ci	.write      = coalesced_mmio_write,
10762306a36Sopenharmony_ci	.destructor = coalesced_mmio_destructor,
10862306a36Sopenharmony_ci};
10962306a36Sopenharmony_ci
11062306a36Sopenharmony_ciint kvm_coalesced_mmio_init(struct kvm *kvm)
11162306a36Sopenharmony_ci{
11262306a36Sopenharmony_ci	struct page *page;
11362306a36Sopenharmony_ci
11462306a36Sopenharmony_ci	page = alloc_page(GFP_KERNEL_ACCOUNT | __GFP_ZERO);
11562306a36Sopenharmony_ci	if (!page)
11662306a36Sopenharmony_ci		return -ENOMEM;
11762306a36Sopenharmony_ci
11862306a36Sopenharmony_ci	kvm->coalesced_mmio_ring = page_address(page);
11962306a36Sopenharmony_ci
12062306a36Sopenharmony_ci	/*
12162306a36Sopenharmony_ci	 * We're using this spinlock to sync access to the coalesced ring.
12262306a36Sopenharmony_ci	 * The list doesn't need its own lock since device registration and
12362306a36Sopenharmony_ci	 * unregistration should only happen when kvm->slots_lock is held.
12462306a36Sopenharmony_ci	 */
12562306a36Sopenharmony_ci	spin_lock_init(&kvm->ring_lock);
12662306a36Sopenharmony_ci	INIT_LIST_HEAD(&kvm->coalesced_zones);
12762306a36Sopenharmony_ci
12862306a36Sopenharmony_ci	return 0;
12962306a36Sopenharmony_ci}
13062306a36Sopenharmony_ci
13162306a36Sopenharmony_civoid kvm_coalesced_mmio_free(struct kvm *kvm)
13262306a36Sopenharmony_ci{
13362306a36Sopenharmony_ci	if (kvm->coalesced_mmio_ring)
13462306a36Sopenharmony_ci		free_page((unsigned long)kvm->coalesced_mmio_ring);
13562306a36Sopenharmony_ci}
13662306a36Sopenharmony_ci
13762306a36Sopenharmony_ciint kvm_vm_ioctl_register_coalesced_mmio(struct kvm *kvm,
13862306a36Sopenharmony_ci					 struct kvm_coalesced_mmio_zone *zone)
13962306a36Sopenharmony_ci{
14062306a36Sopenharmony_ci	int ret;
14162306a36Sopenharmony_ci	struct kvm_coalesced_mmio_dev *dev;
14262306a36Sopenharmony_ci
14362306a36Sopenharmony_ci	if (zone->pio != 1 && zone->pio != 0)
14462306a36Sopenharmony_ci		return -EINVAL;
14562306a36Sopenharmony_ci
14662306a36Sopenharmony_ci	dev = kzalloc(sizeof(struct kvm_coalesced_mmio_dev),
14762306a36Sopenharmony_ci		      GFP_KERNEL_ACCOUNT);
14862306a36Sopenharmony_ci	if (!dev)
14962306a36Sopenharmony_ci		return -ENOMEM;
15062306a36Sopenharmony_ci
15162306a36Sopenharmony_ci	kvm_iodevice_init(&dev->dev, &coalesced_mmio_ops);
15262306a36Sopenharmony_ci	dev->kvm = kvm;
15362306a36Sopenharmony_ci	dev->zone = *zone;
15462306a36Sopenharmony_ci
15562306a36Sopenharmony_ci	mutex_lock(&kvm->slots_lock);
15662306a36Sopenharmony_ci	ret = kvm_io_bus_register_dev(kvm,
15762306a36Sopenharmony_ci				zone->pio ? KVM_PIO_BUS : KVM_MMIO_BUS,
15862306a36Sopenharmony_ci				zone->addr, zone->size, &dev->dev);
15962306a36Sopenharmony_ci	if (ret < 0)
16062306a36Sopenharmony_ci		goto out_free_dev;
16162306a36Sopenharmony_ci	list_add_tail(&dev->list, &kvm->coalesced_zones);
16262306a36Sopenharmony_ci	mutex_unlock(&kvm->slots_lock);
16362306a36Sopenharmony_ci
16462306a36Sopenharmony_ci	return 0;
16562306a36Sopenharmony_ci
16662306a36Sopenharmony_ciout_free_dev:
16762306a36Sopenharmony_ci	mutex_unlock(&kvm->slots_lock);
16862306a36Sopenharmony_ci	kfree(dev);
16962306a36Sopenharmony_ci
17062306a36Sopenharmony_ci	return ret;
17162306a36Sopenharmony_ci}
17262306a36Sopenharmony_ci
17362306a36Sopenharmony_ciint kvm_vm_ioctl_unregister_coalesced_mmio(struct kvm *kvm,
17462306a36Sopenharmony_ci					   struct kvm_coalesced_mmio_zone *zone)
17562306a36Sopenharmony_ci{
17662306a36Sopenharmony_ci	struct kvm_coalesced_mmio_dev *dev, *tmp;
17762306a36Sopenharmony_ci	int r;
17862306a36Sopenharmony_ci
17962306a36Sopenharmony_ci	if (zone->pio != 1 && zone->pio != 0)
18062306a36Sopenharmony_ci		return -EINVAL;
18162306a36Sopenharmony_ci
18262306a36Sopenharmony_ci	mutex_lock(&kvm->slots_lock);
18362306a36Sopenharmony_ci
18462306a36Sopenharmony_ci	list_for_each_entry_safe(dev, tmp, &kvm->coalesced_zones, list) {
18562306a36Sopenharmony_ci		if (zone->pio == dev->zone.pio &&
18662306a36Sopenharmony_ci		    coalesced_mmio_in_range(dev, zone->addr, zone->size)) {
18762306a36Sopenharmony_ci			r = kvm_io_bus_unregister_dev(kvm,
18862306a36Sopenharmony_ci				zone->pio ? KVM_PIO_BUS : KVM_MMIO_BUS, &dev->dev);
18962306a36Sopenharmony_ci			/*
19062306a36Sopenharmony_ci			 * On failure, unregister destroys all devices on the
19162306a36Sopenharmony_ci			 * bus, including the target device. There's no need
19262306a36Sopenharmony_ci			 * to restart the walk as there aren't any zones left.
19362306a36Sopenharmony_ci			 */
19462306a36Sopenharmony_ci			if (r)
19562306a36Sopenharmony_ci				break;
19662306a36Sopenharmony_ci		}
19762306a36Sopenharmony_ci	}
19862306a36Sopenharmony_ci
19962306a36Sopenharmony_ci	mutex_unlock(&kvm->slots_lock);
20062306a36Sopenharmony_ci
20162306a36Sopenharmony_ci	/*
20262306a36Sopenharmony_ci	 * Ignore the result of kvm_io_bus_unregister_dev(), from userspace's
20362306a36Sopenharmony_ci	 * perspective, the coalesced MMIO is most definitely unregistered.
20462306a36Sopenharmony_ci	 */
20562306a36Sopenharmony_ci	return 0;
20662306a36Sopenharmony_ci}
207