2 * Kernel-based Virtual Machine driver for Linux
4 * This module enables machines with Intel VT-x extensions to run virtual
5 * machines without emulation or binary translation.
7 * Copyright (C) 2006 Qumranet, Inc.
10 * Avi Kivity <avi@qumranet.com>
11 * Yaniv Kamay <yaniv@qumranet.com>
13 * This work is licensed under the terms of the GNU GPL, version 2. See
14 * the COPYING file in the top-level directory.
20 #include <linux/kvm_host.h>
21 #include <linux/kvm.h>
22 #include <linux/module.h>
23 #include <linux/errno.h>
24 #include <linux/percpu.h>
25 #include <linux/gfp.h>
27 #include <linux/miscdevice.h>
28 #include <linux/vmalloc.h>
29 #include <linux/reboot.h>
30 #include <linux/debugfs.h>
31 #include <linux/highmem.h>
32 #include <linux/file.h>
33 #include <linux/sysdev.h>
34 #include <linux/cpu.h>
35 #include <linux/sched.h>
36 #include <linux/cpumask.h>
37 #include <linux/smp.h>
38 #include <linux/anon_inodes.h>
39 #include <linux/profile.h>
40 #include <linux/kvm_para.h>
41 #include <linux/pagemap.h>
42 #include <linux/mman.h>
43 #include <linux/swap.h>
45 #include <asm/processor.h>
47 #include <asm/uaccess.h>
48 #include <asm/pgtable.h>
51 #include <asm/msidef.h>
54 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
55 #include "coalesced_mmio.h"
58 #ifdef KVM_CAP_DEVICE_ASSIGNMENT
59 #include <linux/pci.h>
60 #include <linux/interrupt.h>
64 MODULE_AUTHOR("Qumranet");
65 MODULE_LICENSE("GPL");
67 static int msi2intx
= 1;
68 module_param(msi2intx
, bool, 0);
70 DEFINE_SPINLOCK(kvm_lock
);
73 static cpumask_var_t cpus_hardware_enabled
;
75 struct kmem_cache
*kvm_vcpu_cache
;
76 EXPORT_SYMBOL_GPL(kvm_vcpu_cache
);
78 static __read_mostly
struct preempt_ops kvm_preempt_ops
;
80 struct dentry
*kvm_debugfs_dir
;
82 static long kvm_vcpu_ioctl(struct file
*file
, unsigned int ioctl
,
85 static bool kvm_rebooting
;
87 #ifdef KVM_CAP_DEVICE_ASSIGNMENT
90 static void assigned_device_msi_dispatch(struct kvm_assigned_dev_kernel
*dev
)
93 struct kvm_vcpu
*vcpu
;
94 struct kvm_ioapic
*ioapic
= ioapic_irqchip(dev
->kvm
);
95 int dest_id
= (dev
->guest_msi
.address_lo
& MSI_ADDR_DEST_ID_MASK
)
96 >> MSI_ADDR_DEST_ID_SHIFT
;
97 int vector
= (dev
->guest_msi
.data
& MSI_DATA_VECTOR_MASK
)
98 >> MSI_DATA_VECTOR_SHIFT
;
99 int dest_mode
= test_bit(MSI_ADDR_DEST_MODE_SHIFT
,
100 (unsigned long *)&dev
->guest_msi
.address_lo
);
101 int trig_mode
= test_bit(MSI_DATA_TRIGGER_SHIFT
,
102 (unsigned long *)&dev
->guest_msi
.data
);
103 int delivery_mode
= test_bit(MSI_DATA_DELIVERY_MODE_SHIFT
,
104 (unsigned long *)&dev
->guest_msi
.data
);
109 deliver_bitmask
= kvm_ioapic_get_delivery_bitmask(ioapic
,
111 /* IOAPIC delivery mode value is the same as MSI here */
112 switch (delivery_mode
) {
113 case IOAPIC_LOWEST_PRIORITY
:
114 vcpu
= kvm_get_lowest_prio_vcpu(ioapic
->kvm
, vector
,
117 kvm_apic_set_irq(vcpu
, vector
, trig_mode
);
119 printk(KERN_INFO
"kvm: null lowest priority vcpu!\n");
122 for (vcpu_id
= 0; deliver_bitmask
!= 0; vcpu_id
++) {
123 if (!(deliver_bitmask
& (1 << vcpu_id
)))
125 deliver_bitmask
&= ~(1 << vcpu_id
);
126 vcpu
= ioapic
->kvm
->vcpus
[vcpu_id
];
128 kvm_apic_set_irq(vcpu
, vector
, trig_mode
);
132 printk(KERN_INFO
"kvm: unsupported MSI delivery mode\n");
136 static void assigned_device_msi_dispatch(struct kvm_assigned_dev_kernel
*dev
) {}
139 static struct kvm_assigned_dev_kernel
*kvm_find_assigned_dev(struct list_head
*head
,
142 struct list_head
*ptr
;
143 struct kvm_assigned_dev_kernel
*match
;
145 list_for_each(ptr
, head
) {
146 match
= list_entry(ptr
, struct kvm_assigned_dev_kernel
, list
);
147 if (match
->assigned_dev_id
== assigned_dev_id
)
153 static void kvm_assigned_dev_interrupt_work_handler(struct work_struct
*work
)
155 struct kvm_assigned_dev_kernel
*assigned_dev
;
157 assigned_dev
= container_of(work
, struct kvm_assigned_dev_kernel
,
160 /* This is taken to safely inject irq inside the guest. When
161 * the interrupt injection (or the ioapic code) uses a
162 * finer-grained lock, update this
164 mutex_lock(&assigned_dev
->kvm
->lock
);
165 if (assigned_dev
->irq_requested_type
& KVM_ASSIGNED_DEV_GUEST_INTX
)
166 kvm_set_irq(assigned_dev
->kvm
,
167 assigned_dev
->irq_source_id
,
168 assigned_dev
->guest_irq
, 1);
169 else if (assigned_dev
->irq_requested_type
&
170 KVM_ASSIGNED_DEV_GUEST_MSI
) {
171 assigned_device_msi_dispatch(assigned_dev
);
172 enable_irq(assigned_dev
->host_irq
);
173 assigned_dev
->host_irq_disabled
= false;
175 mutex_unlock(&assigned_dev
->kvm
->lock
);
178 static irqreturn_t
kvm_assigned_dev_intr(int irq
, void *dev_id
)
180 struct kvm_assigned_dev_kernel
*assigned_dev
=
181 (struct kvm_assigned_dev_kernel
*) dev_id
;
183 schedule_work(&assigned_dev
->interrupt_work
);
185 disable_irq_nosync(irq
);
186 assigned_dev
->host_irq_disabled
= true;
191 /* Ack the irq line for an assigned device */
192 static void kvm_assigned_dev_ack_irq(struct kvm_irq_ack_notifier
*kian
)
194 struct kvm_assigned_dev_kernel
*dev
;
199 dev
= container_of(kian
, struct kvm_assigned_dev_kernel
,
202 kvm_set_irq(dev
->kvm
, dev
->irq_source_id
, dev
->guest_irq
, 0);
204 /* The guest irq may be shared so this ack may be
205 * from another device.
207 if (dev
->host_irq_disabled
) {
208 enable_irq(dev
->host_irq
);
209 dev
->host_irq_disabled
= false;
213 /* The function implicit hold kvm->lock mutex due to cancel_work_sync() */
214 static void kvm_free_assigned_irq(struct kvm
*kvm
,
215 struct kvm_assigned_dev_kernel
*assigned_dev
)
217 if (!irqchip_in_kernel(kvm
))
220 kvm_unregister_irq_ack_notifier(&assigned_dev
->ack_notifier
);
222 if (assigned_dev
->irq_source_id
!= -1)
223 kvm_free_irq_source_id(kvm
, assigned_dev
->irq_source_id
);
224 assigned_dev
->irq_source_id
= -1;
226 if (!assigned_dev
->irq_requested_type
)
230 * In kvm_free_device_irq, cancel_work_sync return true if:
231 * 1. work is scheduled, and then cancelled.
232 * 2. work callback is executed.
234 * The first one ensured that the irq is disabled and no more events
235 * would happen. But for the second one, the irq may be enabled (e.g.
236 * for MSI). So we disable irq here to prevent further events.
238 * Notice this maybe result in nested disable if the interrupt type is
239 * INTx, but it's OK for we are going to free it.
241 * If this function is a part of VM destroy, please ensure that till
242 * now, the kvm state is still legal for probably we also have to wait
243 * interrupt_work done.
245 disable_irq_nosync(assigned_dev
->host_irq
);
246 cancel_work_sync(&assigned_dev
->interrupt_work
);
248 free_irq(assigned_dev
->host_irq
, (void *)assigned_dev
);
250 if (assigned_dev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_MSI
)
251 pci_disable_msi(assigned_dev
->dev
);
253 assigned_dev
->irq_requested_type
= 0;
257 static void kvm_free_assigned_device(struct kvm
*kvm
,
258 struct kvm_assigned_dev_kernel
261 kvm_free_assigned_irq(kvm
, assigned_dev
);
263 pci_reset_function(assigned_dev
->dev
);
265 pci_release_regions(assigned_dev
->dev
);
266 pci_disable_device(assigned_dev
->dev
);
267 pci_dev_put(assigned_dev
->dev
);
269 list_del(&assigned_dev
->list
);
273 void kvm_free_all_assigned_devices(struct kvm
*kvm
)
275 struct list_head
*ptr
, *ptr2
;
276 struct kvm_assigned_dev_kernel
*assigned_dev
;
278 list_for_each_safe(ptr
, ptr2
, &kvm
->arch
.assigned_dev_head
) {
279 assigned_dev
= list_entry(ptr
,
280 struct kvm_assigned_dev_kernel
,
283 kvm_free_assigned_device(kvm
, assigned_dev
);
287 static int assigned_device_update_intx(struct kvm
*kvm
,
288 struct kvm_assigned_dev_kernel
*adev
,
289 struct kvm_assigned_irq
*airq
)
291 adev
->guest_irq
= airq
->guest_irq
;
292 adev
->ack_notifier
.gsi
= airq
->guest_irq
;
294 if (adev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_INTX
)
297 if (irqchip_in_kernel(kvm
)) {
299 (adev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_MSI
)) {
300 free_irq(adev
->host_irq
, (void *)adev
);
301 pci_disable_msi(adev
->dev
);
304 if (!capable(CAP_SYS_RAWIO
))
308 adev
->host_irq
= airq
->host_irq
;
310 adev
->host_irq
= adev
->dev
->irq
;
312 /* Even though this is PCI, we don't want to use shared
313 * interrupts. Sharing host devices with guest-assigned devices
314 * on the same interrupt line is not a happy situation: there
315 * are going to be long delays in accepting, acking, etc.
317 if (request_irq(adev
->host_irq
, kvm_assigned_dev_intr
,
318 0, "kvm_assigned_intx_device", (void *)adev
))
322 adev
->irq_requested_type
= KVM_ASSIGNED_DEV_GUEST_INTX
|
323 KVM_ASSIGNED_DEV_HOST_INTX
;
328 static int assigned_device_update_msi(struct kvm
*kvm
,
329 struct kvm_assigned_dev_kernel
*adev
,
330 struct kvm_assigned_irq
*airq
)
334 if (airq
->flags
& KVM_DEV_IRQ_ASSIGN_ENABLE_MSI
) {
335 /* x86 don't care upper address of guest msi message addr */
336 adev
->irq_requested_type
|= KVM_ASSIGNED_DEV_GUEST_MSI
;
337 adev
->irq_requested_type
&= ~KVM_ASSIGNED_DEV_GUEST_INTX
;
338 adev
->guest_msi
.address_lo
= airq
->guest_msi
.addr_lo
;
339 adev
->guest_msi
.data
= airq
->guest_msi
.data
;
340 adev
->ack_notifier
.gsi
= -1;
341 } else if (msi2intx
) {
342 adev
->irq_requested_type
|= KVM_ASSIGNED_DEV_GUEST_INTX
;
343 adev
->irq_requested_type
&= ~KVM_ASSIGNED_DEV_GUEST_MSI
;
344 adev
->guest_irq
= airq
->guest_irq
;
345 adev
->ack_notifier
.gsi
= airq
->guest_irq
;
348 if (adev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_MSI
)
351 if (irqchip_in_kernel(kvm
)) {
353 if (adev
->irq_requested_type
&
354 KVM_ASSIGNED_DEV_HOST_INTX
)
355 free_irq(adev
->host_irq
, (void *)adev
);
357 r
= pci_enable_msi(adev
->dev
);
362 adev
->host_irq
= adev
->dev
->irq
;
363 if (request_irq(adev
->host_irq
, kvm_assigned_dev_intr
, 0,
364 "kvm_assigned_msi_device", (void *)adev
))
369 adev
->irq_requested_type
= KVM_ASSIGNED_DEV_GUEST_MSI
;
371 adev
->irq_requested_type
|= KVM_ASSIGNED_DEV_HOST_MSI
;
376 static int kvm_vm_ioctl_assign_irq(struct kvm
*kvm
,
377 struct kvm_assigned_irq
381 struct kvm_assigned_dev_kernel
*match
;
383 mutex_lock(&kvm
->lock
);
385 match
= kvm_find_assigned_dev(&kvm
->arch
.assigned_dev_head
,
386 assigned_irq
->assigned_dev_id
);
388 mutex_unlock(&kvm
->lock
);
392 if (!match
->irq_requested_type
) {
393 INIT_WORK(&match
->interrupt_work
,
394 kvm_assigned_dev_interrupt_work_handler
);
395 if (irqchip_in_kernel(kvm
)) {
396 /* Register ack nofitier */
397 match
->ack_notifier
.gsi
= -1;
398 match
->ack_notifier
.irq_acked
=
399 kvm_assigned_dev_ack_irq
;
400 kvm_register_irq_ack_notifier(kvm
,
401 &match
->ack_notifier
);
403 /* Request IRQ source ID */
404 r
= kvm_request_irq_source_id(kvm
);
408 match
->irq_source_id
= r
;
411 /* Determine host device irq type, we can know the
412 * result from dev->msi_enabled */
414 pci_enable_msi(match
->dev
);
420 (assigned_irq
->flags
& KVM_DEV_IRQ_ASSIGN_ENABLE_MSI
)) ||
421 (msi2intx
&& match
->dev
->msi_enabled
)) {
423 r
= assigned_device_update_msi(kvm
, match
, assigned_irq
);
425 printk(KERN_WARNING
"kvm: failed to enable "
432 } else if (assigned_irq
->host_irq
== 0 && match
->dev
->irq
== 0) {
433 /* Host device IRQ 0 means don't support INTx */
436 "kvm: wait device to enable MSI!\n");
440 "kvm: failed to enable MSI device!\n");
445 /* Non-sharing INTx mode */
446 r
= assigned_device_update_intx(kvm
, match
, assigned_irq
);
448 printk(KERN_WARNING
"kvm: failed to enable "
454 mutex_unlock(&kvm
->lock
);
457 mutex_unlock(&kvm
->lock
);
458 kvm_free_assigned_device(kvm
, match
);
462 static int kvm_vm_ioctl_assign_device(struct kvm
*kvm
,
463 struct kvm_assigned_pci_dev
*assigned_dev
)
466 struct kvm_assigned_dev_kernel
*match
;
469 down_read(&kvm
->slots_lock
);
470 mutex_lock(&kvm
->lock
);
472 match
= kvm_find_assigned_dev(&kvm
->arch
.assigned_dev_head
,
473 assigned_dev
->assigned_dev_id
);
475 /* device already assigned */
480 match
= kzalloc(sizeof(struct kvm_assigned_dev_kernel
), GFP_KERNEL
);
482 printk(KERN_INFO
"%s: Couldn't allocate memory\n",
487 dev
= pci_get_bus_and_slot(assigned_dev
->busnr
,
488 assigned_dev
->devfn
);
490 printk(KERN_INFO
"%s: host device not found\n", __func__
);
494 if (pci_enable_device(dev
)) {
495 printk(KERN_INFO
"%s: Could not enable PCI device\n", __func__
);
499 r
= pci_request_regions(dev
, "kvm_assigned_device");
501 printk(KERN_INFO
"%s: Could not get access to device regions\n",
506 pci_reset_function(dev
);
508 match
->assigned_dev_id
= assigned_dev
->assigned_dev_id
;
509 match
->host_busnr
= assigned_dev
->busnr
;
510 match
->host_devfn
= assigned_dev
->devfn
;
511 match
->flags
= assigned_dev
->flags
;
513 match
->irq_source_id
= -1;
516 list_add(&match
->list
, &kvm
->arch
.assigned_dev_head
);
518 if (assigned_dev
->flags
& KVM_DEV_ASSIGN_ENABLE_IOMMU
) {
519 if (!kvm
->arch
.iommu_domain
) {
520 r
= kvm_iommu_map_guest(kvm
);
524 r
= kvm_assign_device(kvm
, match
);
530 mutex_unlock(&kvm
->lock
);
531 up_read(&kvm
->slots_lock
);
534 list_del(&match
->list
);
535 pci_release_regions(dev
);
537 pci_disable_device(dev
);
542 mutex_unlock(&kvm
->lock
);
543 up_read(&kvm
->slots_lock
);
548 #ifdef KVM_CAP_DEVICE_DEASSIGNMENT
549 static int kvm_vm_ioctl_deassign_device(struct kvm
*kvm
,
550 struct kvm_assigned_pci_dev
*assigned_dev
)
553 struct kvm_assigned_dev_kernel
*match
;
555 mutex_lock(&kvm
->lock
);
557 match
= kvm_find_assigned_dev(&kvm
->arch
.assigned_dev_head
,
558 assigned_dev
->assigned_dev_id
);
560 printk(KERN_INFO
"%s: device hasn't been assigned before, "
561 "so cannot be deassigned\n", __func__
);
566 if (match
->flags
& KVM_DEV_ASSIGN_ENABLE_IOMMU
)
567 kvm_deassign_device(kvm
, match
);
569 kvm_free_assigned_device(kvm
, match
);
572 mutex_unlock(&kvm
->lock
);
577 static inline int valid_vcpu(int n
)
579 return likely(n
>= 0 && n
< KVM_MAX_VCPUS
);
582 inline int kvm_is_mmio_pfn(pfn_t pfn
)
584 if (pfn_valid(pfn
)) {
585 struct page
*page
= compound_head(pfn_to_page(pfn
));
586 return PageReserved(page
);
593 * Switches to specified vcpu, until a matching vcpu_put()
595 void vcpu_load(struct kvm_vcpu
*vcpu
)
599 mutex_lock(&vcpu
->mutex
);
601 preempt_notifier_register(&vcpu
->preempt_notifier
);
602 kvm_arch_vcpu_load(vcpu
, cpu
);
606 void vcpu_put(struct kvm_vcpu
*vcpu
)
609 kvm_arch_vcpu_put(vcpu
);
610 preempt_notifier_unregister(&vcpu
->preempt_notifier
);
612 mutex_unlock(&vcpu
->mutex
);
615 static void ack_flush(void *_completed
)
619 static bool make_all_cpus_request(struct kvm
*kvm
, unsigned int req
)
624 struct kvm_vcpu
*vcpu
;
626 if (alloc_cpumask_var(&cpus
, GFP_ATOMIC
))
630 for (i
= 0; i
< KVM_MAX_VCPUS
; ++i
) {
631 vcpu
= kvm
->vcpus
[i
];
634 if (test_and_set_bit(req
, &vcpu
->requests
))
637 if (cpus
!= NULL
&& cpu
!= -1 && cpu
!= me
)
638 cpumask_set_cpu(cpu
, cpus
);
640 if (unlikely(cpus
== NULL
))
641 smp_call_function_many(cpu_online_mask
, ack_flush
, NULL
, 1);
642 else if (!cpumask_empty(cpus
))
643 smp_call_function_many(cpus
, ack_flush
, NULL
, 1);
647 free_cpumask_var(cpus
);
651 void kvm_flush_remote_tlbs(struct kvm
*kvm
)
653 if (make_all_cpus_request(kvm
, KVM_REQ_TLB_FLUSH
))
654 ++kvm
->stat
.remote_tlb_flush
;
657 void kvm_reload_remote_mmus(struct kvm
*kvm
)
659 make_all_cpus_request(kvm
, KVM_REQ_MMU_RELOAD
);
662 int kvm_vcpu_init(struct kvm_vcpu
*vcpu
, struct kvm
*kvm
, unsigned id
)
667 mutex_init(&vcpu
->mutex
);
671 init_waitqueue_head(&vcpu
->wq
);
673 page
= alloc_page(GFP_KERNEL
| __GFP_ZERO
);
678 vcpu
->run
= page_address(page
);
680 r
= kvm_arch_vcpu_init(vcpu
);
686 free_page((unsigned long)vcpu
->run
);
690 EXPORT_SYMBOL_GPL(kvm_vcpu_init
);
692 void kvm_vcpu_uninit(struct kvm_vcpu
*vcpu
)
694 kvm_arch_vcpu_uninit(vcpu
);
695 free_page((unsigned long)vcpu
->run
);
697 EXPORT_SYMBOL_GPL(kvm_vcpu_uninit
);
699 #if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
700 static inline struct kvm
*mmu_notifier_to_kvm(struct mmu_notifier
*mn
)
702 return container_of(mn
, struct kvm
, mmu_notifier
);
705 static void kvm_mmu_notifier_invalidate_page(struct mmu_notifier
*mn
,
706 struct mm_struct
*mm
,
707 unsigned long address
)
709 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
713 * When ->invalidate_page runs, the linux pte has been zapped
714 * already but the page is still allocated until
715 * ->invalidate_page returns. So if we increase the sequence
716 * here the kvm page fault will notice if the spte can't be
717 * established because the page is going to be freed. If
718 * instead the kvm page fault establishes the spte before
719 * ->invalidate_page runs, kvm_unmap_hva will release it
722 * The sequence increase only need to be seen at spin_unlock
723 * time, and not at spin_lock time.
725 * Increasing the sequence after the spin_unlock would be
726 * unsafe because the kvm page fault could then establish the
727 * pte after kvm_unmap_hva returned, without noticing the page
728 * is going to be freed.
730 spin_lock(&kvm
->mmu_lock
);
731 kvm
->mmu_notifier_seq
++;
732 need_tlb_flush
= kvm_unmap_hva(kvm
, address
);
733 spin_unlock(&kvm
->mmu_lock
);
735 /* we've to flush the tlb before the pages can be freed */
737 kvm_flush_remote_tlbs(kvm
);
741 static void kvm_mmu_notifier_invalidate_range_start(struct mmu_notifier
*mn
,
742 struct mm_struct
*mm
,
746 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
747 int need_tlb_flush
= 0;
749 spin_lock(&kvm
->mmu_lock
);
751 * The count increase must become visible at unlock time as no
752 * spte can be established without taking the mmu_lock and
753 * count is also read inside the mmu_lock critical section.
755 kvm
->mmu_notifier_count
++;
756 for (; start
< end
; start
+= PAGE_SIZE
)
757 need_tlb_flush
|= kvm_unmap_hva(kvm
, start
);
758 spin_unlock(&kvm
->mmu_lock
);
760 /* we've to flush the tlb before the pages can be freed */
762 kvm_flush_remote_tlbs(kvm
);
765 static void kvm_mmu_notifier_invalidate_range_end(struct mmu_notifier
*mn
,
766 struct mm_struct
*mm
,
770 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
772 spin_lock(&kvm
->mmu_lock
);
774 * This sequence increase will notify the kvm page fault that
775 * the page that is going to be mapped in the spte could have
778 kvm
->mmu_notifier_seq
++;
780 * The above sequence increase must be visible before the
781 * below count decrease but both values are read by the kvm
782 * page fault under mmu_lock spinlock so we don't need to add
783 * a smb_wmb() here in between the two.
785 kvm
->mmu_notifier_count
--;
786 spin_unlock(&kvm
->mmu_lock
);
788 BUG_ON(kvm
->mmu_notifier_count
< 0);
791 static int kvm_mmu_notifier_clear_flush_young(struct mmu_notifier
*mn
,
792 struct mm_struct
*mm
,
793 unsigned long address
)
795 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
798 spin_lock(&kvm
->mmu_lock
);
799 young
= kvm_age_hva(kvm
, address
);
800 spin_unlock(&kvm
->mmu_lock
);
803 kvm_flush_remote_tlbs(kvm
);
808 static void kvm_mmu_notifier_release(struct mmu_notifier
*mn
,
809 struct mm_struct
*mm
)
811 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
812 kvm_arch_flush_shadow(kvm
);
815 static const struct mmu_notifier_ops kvm_mmu_notifier_ops
= {
816 .invalidate_page
= kvm_mmu_notifier_invalidate_page
,
817 .invalidate_range_start
= kvm_mmu_notifier_invalidate_range_start
,
818 .invalidate_range_end
= kvm_mmu_notifier_invalidate_range_end
,
819 .clear_flush_young
= kvm_mmu_notifier_clear_flush_young
,
820 .release
= kvm_mmu_notifier_release
,
822 #endif /* CONFIG_MMU_NOTIFIER && KVM_ARCH_WANT_MMU_NOTIFIER */
824 static struct kvm
*kvm_create_vm(void)
826 struct kvm
*kvm
= kvm_arch_create_vm();
827 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
833 #ifdef CONFIG_HAVE_KVM_IRQCHIP
834 INIT_HLIST_HEAD(&kvm
->mask_notifier_list
);
837 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
838 page
= alloc_page(GFP_KERNEL
| __GFP_ZERO
);
841 return ERR_PTR(-ENOMEM
);
843 kvm
->coalesced_mmio_ring
=
844 (struct kvm_coalesced_mmio_ring
*)page_address(page
);
847 #if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
850 kvm
->mmu_notifier
.ops
= &kvm_mmu_notifier_ops
;
851 err
= mmu_notifier_register(&kvm
->mmu_notifier
, current
->mm
);
853 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
862 kvm
->mm
= current
->mm
;
863 atomic_inc(&kvm
->mm
->mm_count
);
864 spin_lock_init(&kvm
->mmu_lock
);
865 kvm_io_bus_init(&kvm
->pio_bus
);
866 mutex_init(&kvm
->lock
);
867 kvm_io_bus_init(&kvm
->mmio_bus
);
868 init_rwsem(&kvm
->slots_lock
);
869 atomic_set(&kvm
->users_count
, 1);
870 spin_lock(&kvm_lock
);
871 list_add(&kvm
->vm_list
, &vm_list
);
872 spin_unlock(&kvm_lock
);
873 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
874 kvm_coalesced_mmio_init(kvm
);
881 * Free any memory in @free but not in @dont.
883 static void kvm_free_physmem_slot(struct kvm_memory_slot
*free
,
884 struct kvm_memory_slot
*dont
)
886 if (!dont
|| free
->rmap
!= dont
->rmap
)
889 if (!dont
|| free
->dirty_bitmap
!= dont
->dirty_bitmap
)
890 vfree(free
->dirty_bitmap
);
892 if (!dont
|| free
->lpage_info
!= dont
->lpage_info
)
893 vfree(free
->lpage_info
);
896 free
->dirty_bitmap
= NULL
;
898 free
->lpage_info
= NULL
;
901 void kvm_free_physmem(struct kvm
*kvm
)
905 for (i
= 0; i
< kvm
->nmemslots
; ++i
)
906 kvm_free_physmem_slot(&kvm
->memslots
[i
], NULL
);
909 static void kvm_destroy_vm(struct kvm
*kvm
)
911 struct mm_struct
*mm
= kvm
->mm
;
913 kvm_arch_sync_events(kvm
);
914 spin_lock(&kvm_lock
);
915 list_del(&kvm
->vm_list
);
916 spin_unlock(&kvm_lock
);
917 kvm_io_bus_destroy(&kvm
->pio_bus
);
918 kvm_io_bus_destroy(&kvm
->mmio_bus
);
919 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
920 if (kvm
->coalesced_mmio_ring
!= NULL
)
921 free_page((unsigned long)kvm
->coalesced_mmio_ring
);
923 #if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
924 mmu_notifier_unregister(&kvm
->mmu_notifier
, kvm
->mm
);
926 kvm_arch_destroy_vm(kvm
);
930 void kvm_get_kvm(struct kvm
*kvm
)
932 atomic_inc(&kvm
->users_count
);
934 EXPORT_SYMBOL_GPL(kvm_get_kvm
);
936 void kvm_put_kvm(struct kvm
*kvm
)
938 if (atomic_dec_and_test(&kvm
->users_count
))
941 EXPORT_SYMBOL_GPL(kvm_put_kvm
);
944 static int kvm_vm_release(struct inode
*inode
, struct file
*filp
)
946 struct kvm
*kvm
= filp
->private_data
;
953 * Allocate some memory and give it an address in the guest physical address
956 * Discontiguous memory is allowed, mostly for framebuffers.
958 * Must be called holding mmap_sem for write.
960 int __kvm_set_memory_region(struct kvm
*kvm
,
961 struct kvm_userspace_memory_region
*mem
,
966 unsigned long npages
;
969 struct kvm_memory_slot
*memslot
;
970 struct kvm_memory_slot old
, new;
973 /* General sanity checks */
974 if (mem
->memory_size
& (PAGE_SIZE
- 1))
976 if (mem
->guest_phys_addr
& (PAGE_SIZE
- 1))
978 if (user_alloc
&& (mem
->userspace_addr
& (PAGE_SIZE
- 1)))
980 if (mem
->slot
>= KVM_MEMORY_SLOTS
+ KVM_PRIVATE_MEM_SLOTS
)
982 if (mem
->guest_phys_addr
+ mem
->memory_size
< mem
->guest_phys_addr
)
985 memslot
= &kvm
->memslots
[mem
->slot
];
986 base_gfn
= mem
->guest_phys_addr
>> PAGE_SHIFT
;
987 npages
= mem
->memory_size
>> PAGE_SHIFT
;
990 mem
->flags
&= ~KVM_MEM_LOG_DIRTY_PAGES
;
992 new = old
= *memslot
;
994 new.base_gfn
= base_gfn
;
996 new.flags
= mem
->flags
;
998 /* Disallow changing a memory slot's size. */
1000 if (npages
&& old
.npages
&& npages
!= old
.npages
)
1003 /* Check for overlaps */
1005 for (i
= 0; i
< KVM_MEMORY_SLOTS
; ++i
) {
1006 struct kvm_memory_slot
*s
= &kvm
->memslots
[i
];
1008 if (s
== memslot
|| !s
->npages
)
1010 if (!((base_gfn
+ npages
<= s
->base_gfn
) ||
1011 (base_gfn
>= s
->base_gfn
+ s
->npages
)))
1015 /* Free page dirty bitmap if unneeded */
1016 if (!(new.flags
& KVM_MEM_LOG_DIRTY_PAGES
))
1017 new.dirty_bitmap
= NULL
;
1021 /* Allocate if a slot is being created */
1023 if (npages
&& !new.rmap
) {
1024 new.rmap
= vmalloc(npages
* sizeof(struct page
*));
1029 memset(new.rmap
, 0, npages
* sizeof(*new.rmap
));
1031 new.user_alloc
= user_alloc
;
1033 * hva_to_rmmap() serialzies with the mmu_lock and to be
1034 * safe it has to ignore memslots with !user_alloc &&
1038 new.userspace_addr
= mem
->userspace_addr
;
1040 new.userspace_addr
= 0;
1042 if (npages
&& !new.lpage_info
) {
1043 largepages
= 1 + (base_gfn
+ npages
- 1) / KVM_PAGES_PER_HPAGE
;
1044 largepages
-= base_gfn
/ KVM_PAGES_PER_HPAGE
;
1046 new.lpage_info
= vmalloc(largepages
* sizeof(*new.lpage_info
));
1048 if (!new.lpage_info
)
1051 memset(new.lpage_info
, 0, largepages
* sizeof(*new.lpage_info
));
1053 if (base_gfn
% KVM_PAGES_PER_HPAGE
)
1054 new.lpage_info
[0].write_count
= 1;
1055 if ((base_gfn
+npages
) % KVM_PAGES_PER_HPAGE
)
1056 new.lpage_info
[largepages
-1].write_count
= 1;
1059 /* Allocate page dirty bitmap if needed */
1060 if ((new.flags
& KVM_MEM_LOG_DIRTY_PAGES
) && !new.dirty_bitmap
) {
1061 unsigned dirty_bytes
= ALIGN(npages
, BITS_PER_LONG
) / 8;
1063 new.dirty_bitmap
= vmalloc(dirty_bytes
);
1064 if (!new.dirty_bitmap
)
1066 memset(new.dirty_bitmap
, 0, dirty_bytes
);
1068 #endif /* not defined CONFIG_S390 */
1071 kvm_arch_flush_shadow(kvm
);
1073 spin_lock(&kvm
->mmu_lock
);
1074 if (mem
->slot
>= kvm
->nmemslots
)
1075 kvm
->nmemslots
= mem
->slot
+ 1;
1078 spin_unlock(&kvm
->mmu_lock
);
1080 r
= kvm_arch_set_memory_region(kvm
, mem
, old
, user_alloc
);
1082 spin_lock(&kvm
->mmu_lock
);
1084 spin_unlock(&kvm
->mmu_lock
);
1088 kvm_free_physmem_slot(&old
, npages
? &new : NULL
);
1089 /* Slot deletion case: we have to update the current slot */
1093 /* map the pages in iommu page table */
1094 r
= kvm_iommu_map_pages(kvm
, base_gfn
, npages
);
1101 kvm_free_physmem_slot(&new, &old
);
1106 EXPORT_SYMBOL_GPL(__kvm_set_memory_region
);
1108 int kvm_set_memory_region(struct kvm
*kvm
,
1109 struct kvm_userspace_memory_region
*mem
,
1114 down_write(&kvm
->slots_lock
);
1115 r
= __kvm_set_memory_region(kvm
, mem
, user_alloc
);
1116 up_write(&kvm
->slots_lock
);
1119 EXPORT_SYMBOL_GPL(kvm_set_memory_region
);
1121 int kvm_vm_ioctl_set_memory_region(struct kvm
*kvm
,
1123 kvm_userspace_memory_region
*mem
,
1126 if (mem
->slot
>= KVM_MEMORY_SLOTS
)
1128 return kvm_set_memory_region(kvm
, mem
, user_alloc
);
1131 int kvm_get_dirty_log(struct kvm
*kvm
,
1132 struct kvm_dirty_log
*log
, int *is_dirty
)
1134 struct kvm_memory_slot
*memslot
;
1137 unsigned long any
= 0;
1140 if (log
->slot
>= KVM_MEMORY_SLOTS
)
1143 memslot
= &kvm
->memslots
[log
->slot
];
1145 if (!memslot
->dirty_bitmap
)
1148 n
= ALIGN(memslot
->npages
, BITS_PER_LONG
) / 8;
1150 for (i
= 0; !any
&& i
< n
/sizeof(long); ++i
)
1151 any
= memslot
->dirty_bitmap
[i
];
1154 if (copy_to_user(log
->dirty_bitmap
, memslot
->dirty_bitmap
, n
))
1165 int is_error_page(struct page
*page
)
1167 return page
== bad_page
;
1169 EXPORT_SYMBOL_GPL(is_error_page
);
1171 int is_error_pfn(pfn_t pfn
)
1173 return pfn
== bad_pfn
;
1175 EXPORT_SYMBOL_GPL(is_error_pfn
);
1177 static inline unsigned long bad_hva(void)
1182 int kvm_is_error_hva(unsigned long addr
)
1184 return addr
== bad_hva();
1186 EXPORT_SYMBOL_GPL(kvm_is_error_hva
);
1188 struct kvm_memory_slot
*gfn_to_memslot_unaliased(struct kvm
*kvm
, gfn_t gfn
)
1192 for (i
= 0; i
< kvm
->nmemslots
; ++i
) {
1193 struct kvm_memory_slot
*memslot
= &kvm
->memslots
[i
];
1195 if (gfn
>= memslot
->base_gfn
1196 && gfn
< memslot
->base_gfn
+ memslot
->npages
)
1201 EXPORT_SYMBOL_GPL(gfn_to_memslot_unaliased
);
1203 struct kvm_memory_slot
*gfn_to_memslot(struct kvm
*kvm
, gfn_t gfn
)
1205 gfn
= unalias_gfn(kvm
, gfn
);
1206 return gfn_to_memslot_unaliased(kvm
, gfn
);
1209 int kvm_is_visible_gfn(struct kvm
*kvm
, gfn_t gfn
)
1213 gfn
= unalias_gfn(kvm
, gfn
);
1214 for (i
= 0; i
< KVM_MEMORY_SLOTS
; ++i
) {
1215 struct kvm_memory_slot
*memslot
= &kvm
->memslots
[i
];
1217 if (gfn
>= memslot
->base_gfn
1218 && gfn
< memslot
->base_gfn
+ memslot
->npages
)
1223 EXPORT_SYMBOL_GPL(kvm_is_visible_gfn
);
1225 unsigned long gfn_to_hva(struct kvm
*kvm
, gfn_t gfn
)
1227 struct kvm_memory_slot
*slot
;
1229 gfn
= unalias_gfn(kvm
, gfn
);
1230 slot
= gfn_to_memslot_unaliased(kvm
, gfn
);
1233 return (slot
->userspace_addr
+ (gfn
- slot
->base_gfn
) * PAGE_SIZE
);
1235 EXPORT_SYMBOL_GPL(gfn_to_hva
);
1237 pfn_t
gfn_to_pfn(struct kvm
*kvm
, gfn_t gfn
)
1239 struct page
*page
[1];
1246 addr
= gfn_to_hva(kvm
, gfn
);
1247 if (kvm_is_error_hva(addr
)) {
1249 return page_to_pfn(bad_page
);
1252 npages
= get_user_pages_fast(addr
, 1, 1, page
);
1254 if (unlikely(npages
!= 1)) {
1255 struct vm_area_struct
*vma
;
1257 down_read(¤t
->mm
->mmap_sem
);
1258 vma
= find_vma(current
->mm
, addr
);
1260 if (vma
== NULL
|| addr
< vma
->vm_start
||
1261 !(vma
->vm_flags
& VM_PFNMAP
)) {
1262 up_read(¤t
->mm
->mmap_sem
);
1264 return page_to_pfn(bad_page
);
1267 pfn
= ((addr
- vma
->vm_start
) >> PAGE_SHIFT
) + vma
->vm_pgoff
;
1268 up_read(¤t
->mm
->mmap_sem
);
1269 BUG_ON(!kvm_is_mmio_pfn(pfn
));
1271 pfn
= page_to_pfn(page
[0]);
1276 EXPORT_SYMBOL_GPL(gfn_to_pfn
);
1278 struct page
*gfn_to_page(struct kvm
*kvm
, gfn_t gfn
)
1282 pfn
= gfn_to_pfn(kvm
, gfn
);
1283 if (!kvm_is_mmio_pfn(pfn
))
1284 return pfn_to_page(pfn
);
1286 WARN_ON(kvm_is_mmio_pfn(pfn
));
1292 EXPORT_SYMBOL_GPL(gfn_to_page
);
1294 void kvm_release_page_clean(struct page
*page
)
1296 kvm_release_pfn_clean(page_to_pfn(page
));
1298 EXPORT_SYMBOL_GPL(kvm_release_page_clean
);
1300 void kvm_release_pfn_clean(pfn_t pfn
)
1302 if (!kvm_is_mmio_pfn(pfn
))
1303 put_page(pfn_to_page(pfn
));
1305 EXPORT_SYMBOL_GPL(kvm_release_pfn_clean
);
1307 void kvm_release_page_dirty(struct page
*page
)
1309 kvm_release_pfn_dirty(page_to_pfn(page
));
1311 EXPORT_SYMBOL_GPL(kvm_release_page_dirty
);
1313 void kvm_release_pfn_dirty(pfn_t pfn
)
1315 kvm_set_pfn_dirty(pfn
);
1316 kvm_release_pfn_clean(pfn
);
1318 EXPORT_SYMBOL_GPL(kvm_release_pfn_dirty
);
1320 void kvm_set_page_dirty(struct page
*page
)
1322 kvm_set_pfn_dirty(page_to_pfn(page
));
1324 EXPORT_SYMBOL_GPL(kvm_set_page_dirty
);
1326 void kvm_set_pfn_dirty(pfn_t pfn
)
1328 if (!kvm_is_mmio_pfn(pfn
)) {
1329 struct page
*page
= pfn_to_page(pfn
);
1330 if (!PageReserved(page
))
1334 EXPORT_SYMBOL_GPL(kvm_set_pfn_dirty
);
1336 void kvm_set_pfn_accessed(pfn_t pfn
)
1338 if (!kvm_is_mmio_pfn(pfn
))
1339 mark_page_accessed(pfn_to_page(pfn
));
1341 EXPORT_SYMBOL_GPL(kvm_set_pfn_accessed
);
1343 void kvm_get_pfn(pfn_t pfn
)
1345 if (!kvm_is_mmio_pfn(pfn
))
1346 get_page(pfn_to_page(pfn
));
1348 EXPORT_SYMBOL_GPL(kvm_get_pfn
);
1350 static int next_segment(unsigned long len
, int offset
)
1352 if (len
> PAGE_SIZE
- offset
)
1353 return PAGE_SIZE
- offset
;
1358 int kvm_read_guest_page(struct kvm
*kvm
, gfn_t gfn
, void *data
, int offset
,
1364 addr
= gfn_to_hva(kvm
, gfn
);
1365 if (kvm_is_error_hva(addr
))
1367 r
= copy_from_user(data
, (void __user
*)addr
+ offset
, len
);
1372 EXPORT_SYMBOL_GPL(kvm_read_guest_page
);
1374 int kvm_read_guest(struct kvm
*kvm
, gpa_t gpa
, void *data
, unsigned long len
)
1376 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1378 int offset
= offset_in_page(gpa
);
1381 while ((seg
= next_segment(len
, offset
)) != 0) {
1382 ret
= kvm_read_guest_page(kvm
, gfn
, data
, offset
, seg
);
1392 EXPORT_SYMBOL_GPL(kvm_read_guest
);
1394 int kvm_read_guest_atomic(struct kvm
*kvm
, gpa_t gpa
, void *data
,
1399 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1400 int offset
= offset_in_page(gpa
);
1402 addr
= gfn_to_hva(kvm
, gfn
);
1403 if (kvm_is_error_hva(addr
))
1405 pagefault_disable();
1406 r
= __copy_from_user_inatomic(data
, (void __user
*)addr
+ offset
, len
);
1412 EXPORT_SYMBOL(kvm_read_guest_atomic
);
1414 int kvm_write_guest_page(struct kvm
*kvm
, gfn_t gfn
, const void *data
,
1415 int offset
, int len
)
1420 addr
= gfn_to_hva(kvm
, gfn
);
1421 if (kvm_is_error_hva(addr
))
1423 r
= copy_to_user((void __user
*)addr
+ offset
, data
, len
);
1426 mark_page_dirty(kvm
, gfn
);
1429 EXPORT_SYMBOL_GPL(kvm_write_guest_page
);
1431 int kvm_write_guest(struct kvm
*kvm
, gpa_t gpa
, const void *data
,
1434 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1436 int offset
= offset_in_page(gpa
);
1439 while ((seg
= next_segment(len
, offset
)) != 0) {
1440 ret
= kvm_write_guest_page(kvm
, gfn
, data
, offset
, seg
);
1451 int kvm_clear_guest_page(struct kvm
*kvm
, gfn_t gfn
, int offset
, int len
)
1453 return kvm_write_guest_page(kvm
, gfn
, empty_zero_page
, offset
, len
);
1455 EXPORT_SYMBOL_GPL(kvm_clear_guest_page
);
1457 int kvm_clear_guest(struct kvm
*kvm
, gpa_t gpa
, unsigned long len
)
1459 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1461 int offset
= offset_in_page(gpa
);
1464 while ((seg
= next_segment(len
, offset
)) != 0) {
1465 ret
= kvm_clear_guest_page(kvm
, gfn
, offset
, seg
);
1474 EXPORT_SYMBOL_GPL(kvm_clear_guest
);
1476 void mark_page_dirty(struct kvm
*kvm
, gfn_t gfn
)
1478 struct kvm_memory_slot
*memslot
;
1480 gfn
= unalias_gfn(kvm
, gfn
);
1481 memslot
= gfn_to_memslot_unaliased(kvm
, gfn
);
1482 if (memslot
&& memslot
->dirty_bitmap
) {
1483 unsigned long rel_gfn
= gfn
- memslot
->base_gfn
;
1486 if (!test_bit(rel_gfn
, memslot
->dirty_bitmap
))
1487 set_bit(rel_gfn
, memslot
->dirty_bitmap
);
1492 * The vCPU has executed a HLT instruction with in-kernel mode enabled.
1494 void kvm_vcpu_block(struct kvm_vcpu
*vcpu
)
1499 prepare_to_wait(&vcpu
->wq
, &wait
, TASK_INTERRUPTIBLE
);
1501 if (kvm_cpu_has_interrupt(vcpu
) ||
1502 kvm_cpu_has_pending_timer(vcpu
) ||
1503 kvm_arch_vcpu_runnable(vcpu
)) {
1504 set_bit(KVM_REQ_UNHALT
, &vcpu
->requests
);
1507 if (signal_pending(current
))
1515 finish_wait(&vcpu
->wq
, &wait
);
1518 void kvm_resched(struct kvm_vcpu
*vcpu
)
1520 if (!need_resched())
1524 EXPORT_SYMBOL_GPL(kvm_resched
);
1526 static int kvm_vcpu_fault(struct vm_area_struct
*vma
, struct vm_fault
*vmf
)
1528 struct kvm_vcpu
*vcpu
= vma
->vm_file
->private_data
;
1531 if (vmf
->pgoff
== 0)
1532 page
= virt_to_page(vcpu
->run
);
1534 else if (vmf
->pgoff
== KVM_PIO_PAGE_OFFSET
)
1535 page
= virt_to_page(vcpu
->arch
.pio_data
);
1537 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
1538 else if (vmf
->pgoff
== KVM_COALESCED_MMIO_PAGE_OFFSET
)
1539 page
= virt_to_page(vcpu
->kvm
->coalesced_mmio_ring
);
1542 return VM_FAULT_SIGBUS
;
1548 static struct vm_operations_struct kvm_vcpu_vm_ops
= {
1549 .fault
= kvm_vcpu_fault
,
1552 static int kvm_vcpu_mmap(struct file
*file
, struct vm_area_struct
*vma
)
1554 vma
->vm_ops
= &kvm_vcpu_vm_ops
;
1558 static int kvm_vcpu_release(struct inode
*inode
, struct file
*filp
)
1560 struct kvm_vcpu
*vcpu
= filp
->private_data
;
1562 kvm_put_kvm(vcpu
->kvm
);
1566 static struct file_operations kvm_vcpu_fops
= {
1567 .release
= kvm_vcpu_release
,
1568 .unlocked_ioctl
= kvm_vcpu_ioctl
,
1569 .compat_ioctl
= kvm_vcpu_ioctl
,
1570 .mmap
= kvm_vcpu_mmap
,
1574 * Allocates an inode for the vcpu.
1576 static int create_vcpu_fd(struct kvm_vcpu
*vcpu
)
1578 int fd
= anon_inode_getfd("kvm-vcpu", &kvm_vcpu_fops
, vcpu
, 0);
1580 kvm_put_kvm(vcpu
->kvm
);
1585 * Creates some virtual cpus. Good luck creating more than one.
1587 static int kvm_vm_ioctl_create_vcpu(struct kvm
*kvm
, int n
)
1590 struct kvm_vcpu
*vcpu
;
1595 vcpu
= kvm_arch_vcpu_create(kvm
, n
);
1597 return PTR_ERR(vcpu
);
1599 preempt_notifier_init(&vcpu
->preempt_notifier
, &kvm_preempt_ops
);
1601 r
= kvm_arch_vcpu_setup(vcpu
);
1605 mutex_lock(&kvm
->lock
);
1606 if (kvm
->vcpus
[n
]) {
1610 kvm
->vcpus
[n
] = vcpu
;
1611 mutex_unlock(&kvm
->lock
);
1613 /* Now it's all set up, let userspace reach it */
1615 r
= create_vcpu_fd(vcpu
);
1621 mutex_lock(&kvm
->lock
);
1622 kvm
->vcpus
[n
] = NULL
;
1624 mutex_unlock(&kvm
->lock
);
1625 kvm_arch_vcpu_destroy(vcpu
);
1629 static int kvm_vcpu_ioctl_set_sigmask(struct kvm_vcpu
*vcpu
, sigset_t
*sigset
)
1632 sigdelsetmask(sigset
, sigmask(SIGKILL
)|sigmask(SIGSTOP
));
1633 vcpu
->sigset_active
= 1;
1634 vcpu
->sigset
= *sigset
;
1636 vcpu
->sigset_active
= 0;
1640 static long kvm_vcpu_ioctl(struct file
*filp
,
1641 unsigned int ioctl
, unsigned long arg
)
1643 struct kvm_vcpu
*vcpu
= filp
->private_data
;
1644 void __user
*argp
= (void __user
*)arg
;
1646 struct kvm_fpu
*fpu
= NULL
;
1647 struct kvm_sregs
*kvm_sregs
= NULL
;
1649 if (vcpu
->kvm
->mm
!= current
->mm
)
1656 r
= kvm_arch_vcpu_ioctl_run(vcpu
, vcpu
->run
);
1658 case KVM_GET_REGS
: {
1659 struct kvm_regs
*kvm_regs
;
1662 kvm_regs
= kzalloc(sizeof(struct kvm_regs
), GFP_KERNEL
);
1665 r
= kvm_arch_vcpu_ioctl_get_regs(vcpu
, kvm_regs
);
1669 if (copy_to_user(argp
, kvm_regs
, sizeof(struct kvm_regs
)))
1676 case KVM_SET_REGS
: {
1677 struct kvm_regs
*kvm_regs
;
1680 kvm_regs
= kzalloc(sizeof(struct kvm_regs
), GFP_KERNEL
);
1684 if (copy_from_user(kvm_regs
, argp
, sizeof(struct kvm_regs
)))
1686 r
= kvm_arch_vcpu_ioctl_set_regs(vcpu
, kvm_regs
);
1694 case KVM_GET_SREGS
: {
1695 kvm_sregs
= kzalloc(sizeof(struct kvm_sregs
), GFP_KERNEL
);
1699 r
= kvm_arch_vcpu_ioctl_get_sregs(vcpu
, kvm_sregs
);
1703 if (copy_to_user(argp
, kvm_sregs
, sizeof(struct kvm_sregs
)))
1708 case KVM_SET_SREGS
: {
1709 kvm_sregs
= kmalloc(sizeof(struct kvm_sregs
), GFP_KERNEL
);
1714 if (copy_from_user(kvm_sregs
, argp
, sizeof(struct kvm_sregs
)))
1716 r
= kvm_arch_vcpu_ioctl_set_sregs(vcpu
, kvm_sregs
);
1722 case KVM_GET_MP_STATE
: {
1723 struct kvm_mp_state mp_state
;
1725 r
= kvm_arch_vcpu_ioctl_get_mpstate(vcpu
, &mp_state
);
1729 if (copy_to_user(argp
, &mp_state
, sizeof mp_state
))
1734 case KVM_SET_MP_STATE
: {
1735 struct kvm_mp_state mp_state
;
1738 if (copy_from_user(&mp_state
, argp
, sizeof mp_state
))
1740 r
= kvm_arch_vcpu_ioctl_set_mpstate(vcpu
, &mp_state
);
1746 case KVM_TRANSLATE
: {
1747 struct kvm_translation tr
;
1750 if (copy_from_user(&tr
, argp
, sizeof tr
))
1752 r
= kvm_arch_vcpu_ioctl_translate(vcpu
, &tr
);
1756 if (copy_to_user(argp
, &tr
, sizeof tr
))
1761 case KVM_DEBUG_GUEST
: {
1762 struct kvm_debug_guest dbg
;
1765 if (copy_from_user(&dbg
, argp
, sizeof dbg
))
1767 r
= kvm_arch_vcpu_ioctl_debug_guest(vcpu
, &dbg
);
1773 case KVM_SET_SIGNAL_MASK
: {
1774 struct kvm_signal_mask __user
*sigmask_arg
= argp
;
1775 struct kvm_signal_mask kvm_sigmask
;
1776 sigset_t sigset
, *p
;
1781 if (copy_from_user(&kvm_sigmask
, argp
,
1782 sizeof kvm_sigmask
))
1785 if (kvm_sigmask
.len
!= sizeof sigset
)
1788 if (copy_from_user(&sigset
, sigmask_arg
->sigset
,
1793 r
= kvm_vcpu_ioctl_set_sigmask(vcpu
, &sigset
);
1797 fpu
= kzalloc(sizeof(struct kvm_fpu
), GFP_KERNEL
);
1801 r
= kvm_arch_vcpu_ioctl_get_fpu(vcpu
, fpu
);
1805 if (copy_to_user(argp
, fpu
, sizeof(struct kvm_fpu
)))
1811 fpu
= kmalloc(sizeof(struct kvm_fpu
), GFP_KERNEL
);
1816 if (copy_from_user(fpu
, argp
, sizeof(struct kvm_fpu
)))
1818 r
= kvm_arch_vcpu_ioctl_set_fpu(vcpu
, fpu
);
1825 r
= kvm_arch_vcpu_ioctl(filp
, ioctl
, arg
);
1833 static long kvm_vm_ioctl(struct file
*filp
,
1834 unsigned int ioctl
, unsigned long arg
)
1836 struct kvm
*kvm
= filp
->private_data
;
1837 void __user
*argp
= (void __user
*)arg
;
1840 if (kvm
->mm
!= current
->mm
)
1843 case KVM_CREATE_VCPU
:
1844 r
= kvm_vm_ioctl_create_vcpu(kvm
, arg
);
1848 case KVM_SET_USER_MEMORY_REGION
: {
1849 struct kvm_userspace_memory_region kvm_userspace_mem
;
1852 if (copy_from_user(&kvm_userspace_mem
, argp
,
1853 sizeof kvm_userspace_mem
))
1856 r
= kvm_vm_ioctl_set_memory_region(kvm
, &kvm_userspace_mem
, 1);
1861 case KVM_GET_DIRTY_LOG
: {
1862 struct kvm_dirty_log log
;
1865 if (copy_from_user(&log
, argp
, sizeof log
))
1867 r
= kvm_vm_ioctl_get_dirty_log(kvm
, &log
);
1872 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
1873 case KVM_REGISTER_COALESCED_MMIO
: {
1874 struct kvm_coalesced_mmio_zone zone
;
1876 if (copy_from_user(&zone
, argp
, sizeof zone
))
1879 r
= kvm_vm_ioctl_register_coalesced_mmio(kvm
, &zone
);
1885 case KVM_UNREGISTER_COALESCED_MMIO
: {
1886 struct kvm_coalesced_mmio_zone zone
;
1888 if (copy_from_user(&zone
, argp
, sizeof zone
))
1891 r
= kvm_vm_ioctl_unregister_coalesced_mmio(kvm
, &zone
);
1898 #ifdef KVM_CAP_DEVICE_ASSIGNMENT
1899 case KVM_ASSIGN_PCI_DEVICE
: {
1900 struct kvm_assigned_pci_dev assigned_dev
;
1903 if (copy_from_user(&assigned_dev
, argp
, sizeof assigned_dev
))
1905 r
= kvm_vm_ioctl_assign_device(kvm
, &assigned_dev
);
1910 case KVM_ASSIGN_IRQ
: {
1911 struct kvm_assigned_irq assigned_irq
;
1914 if (copy_from_user(&assigned_irq
, argp
, sizeof assigned_irq
))
1916 r
= kvm_vm_ioctl_assign_irq(kvm
, &assigned_irq
);
1922 #ifdef KVM_CAP_DEVICE_DEASSIGNMENT
1923 case KVM_DEASSIGN_PCI_DEVICE
: {
1924 struct kvm_assigned_pci_dev assigned_dev
;
1927 if (copy_from_user(&assigned_dev
, argp
, sizeof assigned_dev
))
1929 r
= kvm_vm_ioctl_deassign_device(kvm
, &assigned_dev
);
1936 r
= kvm_arch_vm_ioctl(filp
, ioctl
, arg
);
1942 static int kvm_vm_fault(struct vm_area_struct
*vma
, struct vm_fault
*vmf
)
1944 struct page
*page
[1];
1947 gfn_t gfn
= vmf
->pgoff
;
1948 struct kvm
*kvm
= vma
->vm_file
->private_data
;
1950 addr
= gfn_to_hva(kvm
, gfn
);
1951 if (kvm_is_error_hva(addr
))
1952 return VM_FAULT_SIGBUS
;
1954 npages
= get_user_pages(current
, current
->mm
, addr
, 1, 1, 0, page
,
1956 if (unlikely(npages
!= 1))
1957 return VM_FAULT_SIGBUS
;
1959 vmf
->page
= page
[0];
1963 static struct vm_operations_struct kvm_vm_vm_ops
= {
1964 .fault
= kvm_vm_fault
,
1967 static int kvm_vm_mmap(struct file
*file
, struct vm_area_struct
*vma
)
1969 vma
->vm_ops
= &kvm_vm_vm_ops
;
1973 static struct file_operations kvm_vm_fops
= {
1974 .release
= kvm_vm_release
,
1975 .unlocked_ioctl
= kvm_vm_ioctl
,
1976 .compat_ioctl
= kvm_vm_ioctl
,
1977 .mmap
= kvm_vm_mmap
,
1980 static int kvm_dev_ioctl_create_vm(void)
1985 kvm
= kvm_create_vm();
1987 return PTR_ERR(kvm
);
1988 fd
= anon_inode_getfd("kvm-vm", &kvm_vm_fops
, kvm
, 0);
1995 static long kvm_dev_ioctl_check_extension_generic(long arg
)
1998 case KVM_CAP_USER_MEMORY
:
1999 case KVM_CAP_DESTROY_MEMORY_REGION_WORKS
:
2000 case KVM_CAP_JOIN_MEMORY_REGIONS_WORKS
:
2005 return kvm_dev_ioctl_check_extension(arg
);
2008 static long kvm_dev_ioctl(struct file
*filp
,
2009 unsigned int ioctl
, unsigned long arg
)
2014 case KVM_GET_API_VERSION
:
2018 r
= KVM_API_VERSION
;
2024 r
= kvm_dev_ioctl_create_vm();
2026 case KVM_CHECK_EXTENSION
:
2027 r
= kvm_dev_ioctl_check_extension_generic(arg
);
2029 case KVM_GET_VCPU_MMAP_SIZE
:
2033 r
= PAGE_SIZE
; /* struct kvm_run */
2035 r
+= PAGE_SIZE
; /* pio data page */
2037 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
2038 r
+= PAGE_SIZE
; /* coalesced mmio ring page */
2041 case KVM_TRACE_ENABLE
:
2042 case KVM_TRACE_PAUSE
:
2043 case KVM_TRACE_DISABLE
:
2044 r
= kvm_trace_ioctl(ioctl
, arg
);
2047 return kvm_arch_dev_ioctl(filp
, ioctl
, arg
);
2053 static struct file_operations kvm_chardev_ops
= {
2054 .unlocked_ioctl
= kvm_dev_ioctl
,
2055 .compat_ioctl
= kvm_dev_ioctl
,
2058 static struct miscdevice kvm_dev
= {
2064 static void hardware_enable(void *junk
)
2066 int cpu
= raw_smp_processor_id();
2068 if (cpumask_test_cpu(cpu
, cpus_hardware_enabled
))
2070 cpumask_set_cpu(cpu
, cpus_hardware_enabled
);
2071 kvm_arch_hardware_enable(NULL
);
2074 static void hardware_disable(void *junk
)
2076 int cpu
= raw_smp_processor_id();
2078 if (!cpumask_test_cpu(cpu
, cpus_hardware_enabled
))
2080 cpumask_clear_cpu(cpu
, cpus_hardware_enabled
);
2081 kvm_arch_hardware_disable(NULL
);
2084 static int kvm_cpu_hotplug(struct notifier_block
*notifier
, unsigned long val
,
2089 val
&= ~CPU_TASKS_FROZEN
;
2092 printk(KERN_INFO
"kvm: disabling virtualization on CPU%d\n",
2094 hardware_disable(NULL
);
2096 case CPU_UP_CANCELED
:
2097 printk(KERN_INFO
"kvm: disabling virtualization on CPU%d\n",
2099 smp_call_function_single(cpu
, hardware_disable
, NULL
, 1);
2102 printk(KERN_INFO
"kvm: enabling virtualization on CPU%d\n",
2104 smp_call_function_single(cpu
, hardware_enable
, NULL
, 1);
2111 asmlinkage
void kvm_handle_fault_on_reboot(void)
2114 /* spin while reset goes on */
2117 /* Fault while not rebooting. We want the trace. */
2120 EXPORT_SYMBOL_GPL(kvm_handle_fault_on_reboot
);
2122 static int kvm_reboot(struct notifier_block
*notifier
, unsigned long val
,
2125 if (val
== SYS_RESTART
) {
2127 * Some (well, at least mine) BIOSes hang on reboot if
2130 printk(KERN_INFO
"kvm: exiting hardware virtualization\n");
2131 kvm_rebooting
= true;
2132 on_each_cpu(hardware_disable
, NULL
, 1);
2137 static struct notifier_block kvm_reboot_notifier
= {
2138 .notifier_call
= kvm_reboot
,
2142 void kvm_io_bus_init(struct kvm_io_bus
*bus
)
2144 memset(bus
, 0, sizeof(*bus
));
2147 void kvm_io_bus_destroy(struct kvm_io_bus
*bus
)
2151 for (i
= 0; i
< bus
->dev_count
; i
++) {
2152 struct kvm_io_device
*pos
= bus
->devs
[i
];
2154 kvm_iodevice_destructor(pos
);
2158 struct kvm_io_device
*kvm_io_bus_find_dev(struct kvm_io_bus
*bus
,
2159 gpa_t addr
, int len
, int is_write
)
2163 for (i
= 0; i
< bus
->dev_count
; i
++) {
2164 struct kvm_io_device
*pos
= bus
->devs
[i
];
2166 if (pos
->in_range(pos
, addr
, len
, is_write
))
2173 void kvm_io_bus_register_dev(struct kvm_io_bus
*bus
, struct kvm_io_device
*dev
)
2175 BUG_ON(bus
->dev_count
> (NR_IOBUS_DEVS
-1));
2177 bus
->devs
[bus
->dev_count
++] = dev
;
2180 static struct notifier_block kvm_cpu_notifier
= {
2181 .notifier_call
= kvm_cpu_hotplug
,
2182 .priority
= 20, /* must be > scheduler priority */
2185 static int vm_stat_get(void *_offset
, u64
*val
)
2187 unsigned offset
= (long)_offset
;
2191 spin_lock(&kvm_lock
);
2192 list_for_each_entry(kvm
, &vm_list
, vm_list
)
2193 *val
+= *(u32
*)((void *)kvm
+ offset
);
2194 spin_unlock(&kvm_lock
);
2198 DEFINE_SIMPLE_ATTRIBUTE(vm_stat_fops
, vm_stat_get
, NULL
, "%llu\n");
2200 static int vcpu_stat_get(void *_offset
, u64
*val
)
2202 unsigned offset
= (long)_offset
;
2204 struct kvm_vcpu
*vcpu
;
2208 spin_lock(&kvm_lock
);
2209 list_for_each_entry(kvm
, &vm_list
, vm_list
)
2210 for (i
= 0; i
< KVM_MAX_VCPUS
; ++i
) {
2211 vcpu
= kvm
->vcpus
[i
];
2213 *val
+= *(u32
*)((void *)vcpu
+ offset
);
2215 spin_unlock(&kvm_lock
);
2219 DEFINE_SIMPLE_ATTRIBUTE(vcpu_stat_fops
, vcpu_stat_get
, NULL
, "%llu\n");
2221 static struct file_operations
*stat_fops
[] = {
2222 [KVM_STAT_VCPU
] = &vcpu_stat_fops
,
2223 [KVM_STAT_VM
] = &vm_stat_fops
,
2226 static void kvm_init_debug(void)
2228 struct kvm_stats_debugfs_item
*p
;
2230 kvm_debugfs_dir
= debugfs_create_dir("kvm", NULL
);
2231 for (p
= debugfs_entries
; p
->name
; ++p
)
2232 p
->dentry
= debugfs_create_file(p
->name
, 0444, kvm_debugfs_dir
,
2233 (void *)(long)p
->offset
,
2234 stat_fops
[p
->kind
]);
2237 static void kvm_exit_debug(void)
2239 struct kvm_stats_debugfs_item
*p
;
2241 for (p
= debugfs_entries
; p
->name
; ++p
)
2242 debugfs_remove(p
->dentry
);
2243 debugfs_remove(kvm_debugfs_dir
);
2246 static int kvm_suspend(struct sys_device
*dev
, pm_message_t state
)
2248 hardware_disable(NULL
);
2252 static int kvm_resume(struct sys_device
*dev
)
2254 hardware_enable(NULL
);
2258 static struct sysdev_class kvm_sysdev_class
= {
2260 .suspend
= kvm_suspend
,
2261 .resume
= kvm_resume
,
2264 static struct sys_device kvm_sysdev
= {
2266 .cls
= &kvm_sysdev_class
,
2269 struct page
*bad_page
;
2273 struct kvm_vcpu
*preempt_notifier_to_vcpu(struct preempt_notifier
*pn
)
2275 return container_of(pn
, struct kvm_vcpu
, preempt_notifier
);
2278 static void kvm_sched_in(struct preempt_notifier
*pn
, int cpu
)
2280 struct kvm_vcpu
*vcpu
= preempt_notifier_to_vcpu(pn
);
2282 kvm_arch_vcpu_load(vcpu
, cpu
);
2285 static void kvm_sched_out(struct preempt_notifier
*pn
,
2286 struct task_struct
*next
)
2288 struct kvm_vcpu
*vcpu
= preempt_notifier_to_vcpu(pn
);
2290 kvm_arch_vcpu_put(vcpu
);
2293 int kvm_init(void *opaque
, unsigned int vcpu_size
,
2294 struct module
*module
)
2301 r
= kvm_arch_init(opaque
);
2305 bad_page
= alloc_page(GFP_KERNEL
| __GFP_ZERO
);
2307 if (bad_page
== NULL
) {
2312 bad_pfn
= page_to_pfn(bad_page
);
2314 if (!alloc_cpumask_var(&cpus_hardware_enabled
, GFP_KERNEL
)) {
2318 cpumask_clear(cpus_hardware_enabled
);
2320 r
= kvm_arch_hardware_setup();
2324 for_each_online_cpu(cpu
) {
2325 smp_call_function_single(cpu
,
2326 kvm_arch_check_processor_compat
,
2332 on_each_cpu(hardware_enable
, NULL
, 1);
2333 r
= register_cpu_notifier(&kvm_cpu_notifier
);
2336 register_reboot_notifier(&kvm_reboot_notifier
);
2338 r
= sysdev_class_register(&kvm_sysdev_class
);
2342 r
= sysdev_register(&kvm_sysdev
);
2346 /* A kmem cache lets us meet the alignment requirements of fx_save. */
2347 kvm_vcpu_cache
= kmem_cache_create("kvm_vcpu", vcpu_size
,
2348 __alignof__(struct kvm_vcpu
),
2350 if (!kvm_vcpu_cache
) {
2355 kvm_chardev_ops
.owner
= module
;
2356 kvm_vm_fops
.owner
= module
;
2357 kvm_vcpu_fops
.owner
= module
;
2359 r
= misc_register(&kvm_dev
);
2361 printk(KERN_ERR
"kvm: misc device register failed\n");
2365 kvm_preempt_ops
.sched_in
= kvm_sched_in
;
2366 kvm_preempt_ops
.sched_out
= kvm_sched_out
;
2374 kmem_cache_destroy(kvm_vcpu_cache
);
2376 sysdev_unregister(&kvm_sysdev
);
2378 sysdev_class_unregister(&kvm_sysdev_class
);
2380 unregister_reboot_notifier(&kvm_reboot_notifier
);
2381 unregister_cpu_notifier(&kvm_cpu_notifier
);
2383 on_each_cpu(hardware_disable
, NULL
, 1);
2385 kvm_arch_hardware_unsetup();
2387 free_cpumask_var(cpus_hardware_enabled
);
2389 __free_page(bad_page
);
2396 EXPORT_SYMBOL_GPL(kvm_init
);
2400 kvm_trace_cleanup();
2401 misc_deregister(&kvm_dev
);
2402 kmem_cache_destroy(kvm_vcpu_cache
);
2403 sysdev_unregister(&kvm_sysdev
);
2404 sysdev_class_unregister(&kvm_sysdev_class
);
2405 unregister_reboot_notifier(&kvm_reboot_notifier
);
2406 unregister_cpu_notifier(&kvm_cpu_notifier
);
2407 on_each_cpu(hardware_disable
, NULL
, 1);
2408 kvm_arch_hardware_unsetup();
2411 free_cpumask_var(cpus_hardware_enabled
);
2412 __free_page(bad_page
);
2414 EXPORT_SYMBOL_GPL(kvm_exit
);