2 * Kernel-based Virtual Machine driver for Linux
4 * This module enables machines with Intel VT-x extensions to run virtual
5 * machines without emulation or binary translation.
7 * Copyright (C) 2006 Qumranet, Inc.
10 * Avi Kivity <avi@qumranet.com>
11 * Yaniv Kamay <yaniv@qumranet.com>
13 * This work is licensed under the terms of the GNU GPL, version 2. See
14 * the COPYING file in the top-level directory.
20 #include <linux/kvm_host.h>
21 #include <linux/kvm.h>
22 #include <linux/module.h>
23 #include <linux/errno.h>
24 #include <linux/percpu.h>
25 #include <linux/gfp.h>
27 #include <linux/miscdevice.h>
28 #include <linux/vmalloc.h>
29 #include <linux/reboot.h>
30 #include <linux/debugfs.h>
31 #include <linux/highmem.h>
32 #include <linux/file.h>
33 #include <linux/sysdev.h>
34 #include <linux/cpu.h>
35 #include <linux/sched.h>
36 #include <linux/cpumask.h>
37 #include <linux/smp.h>
38 #include <linux/anon_inodes.h>
39 #include <linux/profile.h>
40 #include <linux/kvm_para.h>
41 #include <linux/pagemap.h>
42 #include <linux/mman.h>
43 #include <linux/swap.h>
45 #include <asm/processor.h>
47 #include <asm/uaccess.h>
48 #include <asm/pgtable.h>
51 #include <asm/msidef.h>
54 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
55 #include "coalesced_mmio.h"
58 #ifdef KVM_CAP_DEVICE_ASSIGNMENT
59 #include <linux/pci.h>
60 #include <linux/interrupt.h>
64 MODULE_AUTHOR("Qumranet");
65 MODULE_LICENSE("GPL");
67 static int msi2intx
= 1;
68 module_param(msi2intx
, bool, 0);
70 DEFINE_SPINLOCK(kvm_lock
);
73 static cpumask_var_t cpus_hardware_enabled
;
75 struct kmem_cache
*kvm_vcpu_cache
;
76 EXPORT_SYMBOL_GPL(kvm_vcpu_cache
);
78 static __read_mostly
struct preempt_ops kvm_preempt_ops
;
80 struct dentry
*kvm_debugfs_dir
;
82 static long kvm_vcpu_ioctl(struct file
*file
, unsigned int ioctl
,
85 static bool kvm_rebooting
;
87 #ifdef KVM_CAP_DEVICE_ASSIGNMENT
90 static void assigned_device_msi_dispatch(struct kvm_assigned_dev_kernel
*dev
)
93 struct kvm_vcpu
*vcpu
;
94 struct kvm_ioapic
*ioapic
= ioapic_irqchip(dev
->kvm
);
95 int dest_id
= (dev
->guest_msi
.address_lo
& MSI_ADDR_DEST_ID_MASK
)
96 >> MSI_ADDR_DEST_ID_SHIFT
;
97 int vector
= (dev
->guest_msi
.data
& MSI_DATA_VECTOR_MASK
)
98 >> MSI_DATA_VECTOR_SHIFT
;
99 int dest_mode
= test_bit(MSI_ADDR_DEST_MODE_SHIFT
,
100 (unsigned long *)&dev
->guest_msi
.address_lo
);
101 int trig_mode
= test_bit(MSI_DATA_TRIGGER_SHIFT
,
102 (unsigned long *)&dev
->guest_msi
.data
);
103 int delivery_mode
= test_bit(MSI_DATA_DELIVERY_MODE_SHIFT
,
104 (unsigned long *)&dev
->guest_msi
.data
);
109 deliver_bitmask
= kvm_ioapic_get_delivery_bitmask(ioapic
,
111 /* IOAPIC delivery mode value is the same as MSI here */
112 switch (delivery_mode
) {
113 case IOAPIC_LOWEST_PRIORITY
:
114 vcpu
= kvm_get_lowest_prio_vcpu(ioapic
->kvm
, vector
,
117 kvm_apic_set_irq(vcpu
, vector
, trig_mode
);
119 printk(KERN_INFO
"kvm: null lowest priority vcpu!\n");
122 for (vcpu_id
= 0; deliver_bitmask
!= 0; vcpu_id
++) {
123 if (!(deliver_bitmask
& (1 << vcpu_id
)))
125 deliver_bitmask
&= ~(1 << vcpu_id
);
126 vcpu
= ioapic
->kvm
->vcpus
[vcpu_id
];
128 kvm_apic_set_irq(vcpu
, vector
, trig_mode
);
132 printk(KERN_INFO
"kvm: unsupported MSI delivery mode\n");
136 static void assigned_device_msi_dispatch(struct kvm_assigned_dev_kernel
*dev
) {}
139 static struct kvm_assigned_dev_kernel
*kvm_find_assigned_dev(struct list_head
*head
,
142 struct list_head
*ptr
;
143 struct kvm_assigned_dev_kernel
*match
;
145 list_for_each(ptr
, head
) {
146 match
= list_entry(ptr
, struct kvm_assigned_dev_kernel
, list
);
147 if (match
->assigned_dev_id
== assigned_dev_id
)
153 static void kvm_assigned_dev_interrupt_work_handler(struct work_struct
*work
)
155 struct kvm_assigned_dev_kernel
*assigned_dev
;
157 assigned_dev
= container_of(work
, struct kvm_assigned_dev_kernel
,
160 /* This is taken to safely inject irq inside the guest. When
161 * the interrupt injection (or the ioapic code) uses a
162 * finer-grained lock, update this
164 mutex_lock(&assigned_dev
->kvm
->lock
);
165 if (assigned_dev
->irq_requested_type
& KVM_ASSIGNED_DEV_GUEST_INTX
)
166 kvm_set_irq(assigned_dev
->kvm
,
167 assigned_dev
->irq_source_id
,
168 assigned_dev
->guest_irq
, 1);
169 else if (assigned_dev
->irq_requested_type
&
170 KVM_ASSIGNED_DEV_GUEST_MSI
) {
171 assigned_device_msi_dispatch(assigned_dev
);
172 enable_irq(assigned_dev
->host_irq
);
173 assigned_dev
->host_irq_disabled
= false;
175 mutex_unlock(&assigned_dev
->kvm
->lock
);
178 static irqreturn_t
kvm_assigned_dev_intr(int irq
, void *dev_id
)
180 struct kvm_assigned_dev_kernel
*assigned_dev
=
181 (struct kvm_assigned_dev_kernel
*) dev_id
;
183 schedule_work(&assigned_dev
->interrupt_work
);
185 disable_irq_nosync(irq
);
186 assigned_dev
->host_irq_disabled
= true;
191 /* Ack the irq line for an assigned device */
192 static void kvm_assigned_dev_ack_irq(struct kvm_irq_ack_notifier
*kian
)
194 struct kvm_assigned_dev_kernel
*dev
;
199 dev
= container_of(kian
, struct kvm_assigned_dev_kernel
,
202 kvm_set_irq(dev
->kvm
, dev
->irq_source_id
, dev
->guest_irq
, 0);
204 /* The guest irq may be shared so this ack may be
205 * from another device.
207 if (dev
->host_irq_disabled
) {
208 enable_irq(dev
->host_irq
);
209 dev
->host_irq_disabled
= false;
213 /* The function implicit hold kvm->lock mutex due to cancel_work_sync() */
214 static void kvm_free_assigned_irq(struct kvm
*kvm
,
215 struct kvm_assigned_dev_kernel
*assigned_dev
)
217 if (!irqchip_in_kernel(kvm
))
220 kvm_unregister_irq_ack_notifier(&assigned_dev
->ack_notifier
);
222 if (assigned_dev
->irq_source_id
!= -1)
223 kvm_free_irq_source_id(kvm
, assigned_dev
->irq_source_id
);
224 assigned_dev
->irq_source_id
= -1;
226 if (!assigned_dev
->irq_requested_type
)
230 * In kvm_free_device_irq, cancel_work_sync return true if:
231 * 1. work is scheduled, and then cancelled.
232 * 2. work callback is executed.
234 * The first one ensured that the irq is disabled and no more events
235 * would happen. But for the second one, the irq may be enabled (e.g.
236 * for MSI). So we disable irq here to prevent further events.
238 * Notice this maybe result in nested disable if the interrupt type is
239 * INTx, but it's OK for we are going to free it.
241 * If this function is a part of VM destroy, please ensure that till
242 * now, the kvm state is still legal for probably we also have to wait
243 * interrupt_work done.
245 disable_irq_nosync(assigned_dev
->host_irq
);
246 cancel_work_sync(&assigned_dev
->interrupt_work
);
248 free_irq(assigned_dev
->host_irq
, (void *)assigned_dev
);
250 if (assigned_dev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_MSI
)
251 pci_disable_msi(assigned_dev
->dev
);
253 assigned_dev
->irq_requested_type
= 0;
257 static void kvm_free_assigned_device(struct kvm
*kvm
,
258 struct kvm_assigned_dev_kernel
261 kvm_free_assigned_irq(kvm
, assigned_dev
);
263 pci_reset_function(assigned_dev
->dev
);
265 pci_release_regions(assigned_dev
->dev
);
266 pci_disable_device(assigned_dev
->dev
);
267 pci_dev_put(assigned_dev
->dev
);
269 list_del(&assigned_dev
->list
);
273 void kvm_free_all_assigned_devices(struct kvm
*kvm
)
275 struct list_head
*ptr
, *ptr2
;
276 struct kvm_assigned_dev_kernel
*assigned_dev
;
278 list_for_each_safe(ptr
, ptr2
, &kvm
->arch
.assigned_dev_head
) {
279 assigned_dev
= list_entry(ptr
,
280 struct kvm_assigned_dev_kernel
,
283 kvm_free_assigned_device(kvm
, assigned_dev
);
287 static int assigned_device_update_intx(struct kvm
*kvm
,
288 struct kvm_assigned_dev_kernel
*adev
,
289 struct kvm_assigned_irq
*airq
)
291 adev
->guest_irq
= airq
->guest_irq
;
292 adev
->ack_notifier
.gsi
= airq
->guest_irq
;
294 if (adev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_INTX
)
297 if (irqchip_in_kernel(kvm
)) {
299 (adev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_MSI
)) {
300 free_irq(adev
->host_irq
, (void *)adev
);
301 pci_disable_msi(adev
->dev
);
304 if (!capable(CAP_SYS_RAWIO
))
308 adev
->host_irq
= airq
->host_irq
;
310 adev
->host_irq
= adev
->dev
->irq
;
312 /* Even though this is PCI, we don't want to use shared
313 * interrupts. Sharing host devices with guest-assigned devices
314 * on the same interrupt line is not a happy situation: there
315 * are going to be long delays in accepting, acking, etc.
317 if (request_irq(adev
->host_irq
, kvm_assigned_dev_intr
,
318 0, "kvm_assigned_intx_device", (void *)adev
))
322 adev
->irq_requested_type
= KVM_ASSIGNED_DEV_GUEST_INTX
|
323 KVM_ASSIGNED_DEV_HOST_INTX
;
328 static int assigned_device_update_msi(struct kvm
*kvm
,
329 struct kvm_assigned_dev_kernel
*adev
,
330 struct kvm_assigned_irq
*airq
)
334 if (airq
->flags
& KVM_DEV_IRQ_ASSIGN_ENABLE_MSI
) {
335 /* x86 don't care upper address of guest msi message addr */
336 adev
->irq_requested_type
|= KVM_ASSIGNED_DEV_GUEST_MSI
;
337 adev
->irq_requested_type
&= ~KVM_ASSIGNED_DEV_GUEST_INTX
;
338 adev
->guest_msi
.address_lo
= airq
->guest_msi
.addr_lo
;
339 adev
->guest_msi
.data
= airq
->guest_msi
.data
;
340 adev
->ack_notifier
.gsi
= -1;
341 } else if (msi2intx
) {
342 adev
->irq_requested_type
|= KVM_ASSIGNED_DEV_GUEST_INTX
;
343 adev
->irq_requested_type
&= ~KVM_ASSIGNED_DEV_GUEST_MSI
;
344 adev
->guest_irq
= airq
->guest_irq
;
345 adev
->ack_notifier
.gsi
= airq
->guest_irq
;
348 if (adev
->irq_requested_type
& KVM_ASSIGNED_DEV_HOST_MSI
)
351 if (irqchip_in_kernel(kvm
)) {
353 if (adev
->irq_requested_type
&
354 KVM_ASSIGNED_DEV_HOST_INTX
)
355 free_irq(adev
->host_irq
, (void *)adev
);
357 r
= pci_enable_msi(adev
->dev
);
362 adev
->host_irq
= adev
->dev
->irq
;
363 if (request_irq(adev
->host_irq
, kvm_assigned_dev_intr
, 0,
364 "kvm_assigned_msi_device", (void *)adev
))
369 adev
->irq_requested_type
= KVM_ASSIGNED_DEV_GUEST_MSI
;
371 adev
->irq_requested_type
|= KVM_ASSIGNED_DEV_HOST_MSI
;
376 static int kvm_vm_ioctl_assign_irq(struct kvm
*kvm
,
377 struct kvm_assigned_irq
381 struct kvm_assigned_dev_kernel
*match
;
383 mutex_lock(&kvm
->lock
);
385 match
= kvm_find_assigned_dev(&kvm
->arch
.assigned_dev_head
,
386 assigned_irq
->assigned_dev_id
);
388 mutex_unlock(&kvm
->lock
);
392 if (!match
->irq_requested_type
) {
393 INIT_WORK(&match
->interrupt_work
,
394 kvm_assigned_dev_interrupt_work_handler
);
395 if (irqchip_in_kernel(kvm
)) {
396 /* Register ack nofitier */
397 match
->ack_notifier
.gsi
= -1;
398 match
->ack_notifier
.irq_acked
=
399 kvm_assigned_dev_ack_irq
;
400 kvm_register_irq_ack_notifier(kvm
,
401 &match
->ack_notifier
);
403 /* Request IRQ source ID */
404 r
= kvm_request_irq_source_id(kvm
);
408 match
->irq_source_id
= r
;
411 /* Determine host device irq type, we can know the
412 * result from dev->msi_enabled */
414 pci_enable_msi(match
->dev
);
420 (assigned_irq
->flags
& KVM_DEV_IRQ_ASSIGN_ENABLE_MSI
)) ||
421 (msi2intx
&& match
->dev
->msi_enabled
)) {
423 r
= assigned_device_update_msi(kvm
, match
, assigned_irq
);
425 printk(KERN_WARNING
"kvm: failed to enable "
432 } else if (assigned_irq
->host_irq
== 0 && match
->dev
->irq
== 0) {
433 /* Host device IRQ 0 means don't support INTx */
436 "kvm: wait device to enable MSI!\n");
440 "kvm: failed to enable MSI device!\n");
445 /* Non-sharing INTx mode */
446 r
= assigned_device_update_intx(kvm
, match
, assigned_irq
);
448 printk(KERN_WARNING
"kvm: failed to enable "
454 mutex_unlock(&kvm
->lock
);
457 mutex_unlock(&kvm
->lock
);
458 kvm_free_assigned_device(kvm
, match
);
462 static int kvm_vm_ioctl_assign_device(struct kvm
*kvm
,
463 struct kvm_assigned_pci_dev
*assigned_dev
)
466 struct kvm_assigned_dev_kernel
*match
;
469 down_read(&kvm
->slots_lock
);
470 mutex_lock(&kvm
->lock
);
472 match
= kvm_find_assigned_dev(&kvm
->arch
.assigned_dev_head
,
473 assigned_dev
->assigned_dev_id
);
475 /* device already assigned */
480 match
= kzalloc(sizeof(struct kvm_assigned_dev_kernel
), GFP_KERNEL
);
482 printk(KERN_INFO
"%s: Couldn't allocate memory\n",
487 dev
= pci_get_bus_and_slot(assigned_dev
->busnr
,
488 assigned_dev
->devfn
);
490 printk(KERN_INFO
"%s: host device not found\n", __func__
);
494 if (pci_enable_device(dev
)) {
495 printk(KERN_INFO
"%s: Could not enable PCI device\n", __func__
);
499 r
= pci_request_regions(dev
, "kvm_assigned_device");
501 printk(KERN_INFO
"%s: Could not get access to device regions\n",
506 pci_reset_function(dev
);
508 match
->assigned_dev_id
= assigned_dev
->assigned_dev_id
;
509 match
->host_busnr
= assigned_dev
->busnr
;
510 match
->host_devfn
= assigned_dev
->devfn
;
511 match
->flags
= assigned_dev
->flags
;
513 match
->irq_source_id
= -1;
516 list_add(&match
->list
, &kvm
->arch
.assigned_dev_head
);
518 if (assigned_dev
->flags
& KVM_DEV_ASSIGN_ENABLE_IOMMU
) {
519 if (!kvm
->arch
.iommu_domain
) {
520 r
= kvm_iommu_map_guest(kvm
);
524 r
= kvm_assign_device(kvm
, match
);
530 mutex_unlock(&kvm
->lock
);
531 up_read(&kvm
->slots_lock
);
534 list_del(&match
->list
);
535 pci_release_regions(dev
);
537 pci_disable_device(dev
);
542 mutex_unlock(&kvm
->lock
);
543 up_read(&kvm
->slots_lock
);
548 #ifdef KVM_CAP_DEVICE_DEASSIGNMENT
549 static int kvm_vm_ioctl_deassign_device(struct kvm
*kvm
,
550 struct kvm_assigned_pci_dev
*assigned_dev
)
553 struct kvm_assigned_dev_kernel
*match
;
555 mutex_lock(&kvm
->lock
);
557 match
= kvm_find_assigned_dev(&kvm
->arch
.assigned_dev_head
,
558 assigned_dev
->assigned_dev_id
);
560 printk(KERN_INFO
"%s: device hasn't been assigned before, "
561 "so cannot be deassigned\n", __func__
);
566 if (assigned_dev
->flags
& KVM_DEV_ASSIGN_ENABLE_IOMMU
)
567 kvm_deassign_device(kvm
, match
);
569 kvm_free_assigned_device(kvm
, match
);
572 mutex_unlock(&kvm
->lock
);
577 static inline int valid_vcpu(int n
)
579 return likely(n
>= 0 && n
< KVM_MAX_VCPUS
);
582 inline int kvm_is_mmio_pfn(pfn_t pfn
)
585 return PageReserved(pfn_to_page(pfn
));
591 * Switches to specified vcpu, until a matching vcpu_put()
593 void vcpu_load(struct kvm_vcpu
*vcpu
)
597 mutex_lock(&vcpu
->mutex
);
599 preempt_notifier_register(&vcpu
->preempt_notifier
);
600 kvm_arch_vcpu_load(vcpu
, cpu
);
604 void vcpu_put(struct kvm_vcpu
*vcpu
)
607 kvm_arch_vcpu_put(vcpu
);
608 preempt_notifier_unregister(&vcpu
->preempt_notifier
);
610 mutex_unlock(&vcpu
->mutex
);
613 static void ack_flush(void *_completed
)
617 static bool make_all_cpus_request(struct kvm
*kvm
, unsigned int req
)
622 struct kvm_vcpu
*vcpu
;
624 if (alloc_cpumask_var(&cpus
, GFP_ATOMIC
))
628 for (i
= 0; i
< KVM_MAX_VCPUS
; ++i
) {
629 vcpu
= kvm
->vcpus
[i
];
632 if (test_and_set_bit(req
, &vcpu
->requests
))
635 if (cpus
!= NULL
&& cpu
!= -1 && cpu
!= me
)
636 cpumask_set_cpu(cpu
, cpus
);
638 if (unlikely(cpus
== NULL
))
639 smp_call_function_many(cpu_online_mask
, ack_flush
, NULL
, 1);
640 else if (!cpumask_empty(cpus
))
641 smp_call_function_many(cpus
, ack_flush
, NULL
, 1);
645 free_cpumask_var(cpus
);
649 void kvm_flush_remote_tlbs(struct kvm
*kvm
)
651 if (make_all_cpus_request(kvm
, KVM_REQ_TLB_FLUSH
))
652 ++kvm
->stat
.remote_tlb_flush
;
655 void kvm_reload_remote_mmus(struct kvm
*kvm
)
657 make_all_cpus_request(kvm
, KVM_REQ_MMU_RELOAD
);
660 int kvm_vcpu_init(struct kvm_vcpu
*vcpu
, struct kvm
*kvm
, unsigned id
)
665 mutex_init(&vcpu
->mutex
);
669 init_waitqueue_head(&vcpu
->wq
);
671 page
= alloc_page(GFP_KERNEL
| __GFP_ZERO
);
676 vcpu
->run
= page_address(page
);
678 r
= kvm_arch_vcpu_init(vcpu
);
684 free_page((unsigned long)vcpu
->run
);
688 EXPORT_SYMBOL_GPL(kvm_vcpu_init
);
690 void kvm_vcpu_uninit(struct kvm_vcpu
*vcpu
)
692 kvm_arch_vcpu_uninit(vcpu
);
693 free_page((unsigned long)vcpu
->run
);
695 EXPORT_SYMBOL_GPL(kvm_vcpu_uninit
);
697 #if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
698 static inline struct kvm
*mmu_notifier_to_kvm(struct mmu_notifier
*mn
)
700 return container_of(mn
, struct kvm
, mmu_notifier
);
703 static void kvm_mmu_notifier_invalidate_page(struct mmu_notifier
*mn
,
704 struct mm_struct
*mm
,
705 unsigned long address
)
707 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
711 * When ->invalidate_page runs, the linux pte has been zapped
712 * already but the page is still allocated until
713 * ->invalidate_page returns. So if we increase the sequence
714 * here the kvm page fault will notice if the spte can't be
715 * established because the page is going to be freed. If
716 * instead the kvm page fault establishes the spte before
717 * ->invalidate_page runs, kvm_unmap_hva will release it
720 * The sequence increase only need to be seen at spin_unlock
721 * time, and not at spin_lock time.
723 * Increasing the sequence after the spin_unlock would be
724 * unsafe because the kvm page fault could then establish the
725 * pte after kvm_unmap_hva returned, without noticing the page
726 * is going to be freed.
728 spin_lock(&kvm
->mmu_lock
);
729 kvm
->mmu_notifier_seq
++;
730 need_tlb_flush
= kvm_unmap_hva(kvm
, address
);
731 spin_unlock(&kvm
->mmu_lock
);
733 /* we've to flush the tlb before the pages can be freed */
735 kvm_flush_remote_tlbs(kvm
);
739 static void kvm_mmu_notifier_invalidate_range_start(struct mmu_notifier
*mn
,
740 struct mm_struct
*mm
,
744 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
745 int need_tlb_flush
= 0;
747 spin_lock(&kvm
->mmu_lock
);
749 * The count increase must become visible at unlock time as no
750 * spte can be established without taking the mmu_lock and
751 * count is also read inside the mmu_lock critical section.
753 kvm
->mmu_notifier_count
++;
754 for (; start
< end
; start
+= PAGE_SIZE
)
755 need_tlb_flush
|= kvm_unmap_hva(kvm
, start
);
756 spin_unlock(&kvm
->mmu_lock
);
758 /* we've to flush the tlb before the pages can be freed */
760 kvm_flush_remote_tlbs(kvm
);
763 static void kvm_mmu_notifier_invalidate_range_end(struct mmu_notifier
*mn
,
764 struct mm_struct
*mm
,
768 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
770 spin_lock(&kvm
->mmu_lock
);
772 * This sequence increase will notify the kvm page fault that
773 * the page that is going to be mapped in the spte could have
776 kvm
->mmu_notifier_seq
++;
778 * The above sequence increase must be visible before the
779 * below count decrease but both values are read by the kvm
780 * page fault under mmu_lock spinlock so we don't need to add
781 * a smb_wmb() here in between the two.
783 kvm
->mmu_notifier_count
--;
784 spin_unlock(&kvm
->mmu_lock
);
786 BUG_ON(kvm
->mmu_notifier_count
< 0);
789 static int kvm_mmu_notifier_clear_flush_young(struct mmu_notifier
*mn
,
790 struct mm_struct
*mm
,
791 unsigned long address
)
793 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
796 spin_lock(&kvm
->mmu_lock
);
797 young
= kvm_age_hva(kvm
, address
);
798 spin_unlock(&kvm
->mmu_lock
);
801 kvm_flush_remote_tlbs(kvm
);
806 static void kvm_mmu_notifier_release(struct mmu_notifier
*mn
,
807 struct mm_struct
*mm
)
809 struct kvm
*kvm
= mmu_notifier_to_kvm(mn
);
810 kvm_arch_flush_shadow(kvm
);
813 static const struct mmu_notifier_ops kvm_mmu_notifier_ops
= {
814 .invalidate_page
= kvm_mmu_notifier_invalidate_page
,
815 .invalidate_range_start
= kvm_mmu_notifier_invalidate_range_start
,
816 .invalidate_range_end
= kvm_mmu_notifier_invalidate_range_end
,
817 .clear_flush_young
= kvm_mmu_notifier_clear_flush_young
,
818 .release
= kvm_mmu_notifier_release
,
820 #endif /* CONFIG_MMU_NOTIFIER && KVM_ARCH_WANT_MMU_NOTIFIER */
822 static struct kvm
*kvm_create_vm(void)
824 struct kvm
*kvm
= kvm_arch_create_vm();
825 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
831 #ifdef CONFIG_HAVE_KVM_IRQCHIP
832 INIT_HLIST_HEAD(&kvm
->mask_notifier_list
);
835 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
836 page
= alloc_page(GFP_KERNEL
| __GFP_ZERO
);
839 return ERR_PTR(-ENOMEM
);
841 kvm
->coalesced_mmio_ring
=
842 (struct kvm_coalesced_mmio_ring
*)page_address(page
);
845 #if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
848 kvm
->mmu_notifier
.ops
= &kvm_mmu_notifier_ops
;
849 err
= mmu_notifier_register(&kvm
->mmu_notifier
, current
->mm
);
851 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
860 kvm
->mm
= current
->mm
;
861 atomic_inc(&kvm
->mm
->mm_count
);
862 spin_lock_init(&kvm
->mmu_lock
);
863 kvm_io_bus_init(&kvm
->pio_bus
);
864 mutex_init(&kvm
->lock
);
865 kvm_io_bus_init(&kvm
->mmio_bus
);
866 init_rwsem(&kvm
->slots_lock
);
867 atomic_set(&kvm
->users_count
, 1);
868 spin_lock(&kvm_lock
);
869 list_add(&kvm
->vm_list
, &vm_list
);
870 spin_unlock(&kvm_lock
);
871 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
872 kvm_coalesced_mmio_init(kvm
);
879 * Free any memory in @free but not in @dont.
881 static void kvm_free_physmem_slot(struct kvm_memory_slot
*free
,
882 struct kvm_memory_slot
*dont
)
884 if (!dont
|| free
->rmap
!= dont
->rmap
)
887 if (!dont
|| free
->dirty_bitmap
!= dont
->dirty_bitmap
)
888 vfree(free
->dirty_bitmap
);
890 if (!dont
|| free
->lpage_info
!= dont
->lpage_info
)
891 vfree(free
->lpage_info
);
894 free
->dirty_bitmap
= NULL
;
896 free
->lpage_info
= NULL
;
899 void kvm_free_physmem(struct kvm
*kvm
)
903 for (i
= 0; i
< kvm
->nmemslots
; ++i
)
904 kvm_free_physmem_slot(&kvm
->memslots
[i
], NULL
);
907 static void kvm_destroy_vm(struct kvm
*kvm
)
909 struct mm_struct
*mm
= kvm
->mm
;
911 kvm_arch_sync_events(kvm
);
912 spin_lock(&kvm_lock
);
913 list_del(&kvm
->vm_list
);
914 spin_unlock(&kvm_lock
);
915 kvm_io_bus_destroy(&kvm
->pio_bus
);
916 kvm_io_bus_destroy(&kvm
->mmio_bus
);
917 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
918 if (kvm
->coalesced_mmio_ring
!= NULL
)
919 free_page((unsigned long)kvm
->coalesced_mmio_ring
);
921 #if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
922 mmu_notifier_unregister(&kvm
->mmu_notifier
, kvm
->mm
);
924 kvm_arch_destroy_vm(kvm
);
928 void kvm_get_kvm(struct kvm
*kvm
)
930 atomic_inc(&kvm
->users_count
);
932 EXPORT_SYMBOL_GPL(kvm_get_kvm
);
934 void kvm_put_kvm(struct kvm
*kvm
)
936 if (atomic_dec_and_test(&kvm
->users_count
))
939 EXPORT_SYMBOL_GPL(kvm_put_kvm
);
942 static int kvm_vm_release(struct inode
*inode
, struct file
*filp
)
944 struct kvm
*kvm
= filp
->private_data
;
951 * Allocate some memory and give it an address in the guest physical address
954 * Discontiguous memory is allowed, mostly for framebuffers.
956 * Must be called holding mmap_sem for write.
958 int __kvm_set_memory_region(struct kvm
*kvm
,
959 struct kvm_userspace_memory_region
*mem
,
964 unsigned long npages
;
966 struct kvm_memory_slot
*memslot
;
967 struct kvm_memory_slot old
, new;
970 /* General sanity checks */
971 if (mem
->memory_size
& (PAGE_SIZE
- 1))
973 if (mem
->guest_phys_addr
& (PAGE_SIZE
- 1))
975 if (user_alloc
&& (mem
->userspace_addr
& (PAGE_SIZE
- 1)))
977 if (mem
->slot
>= KVM_MEMORY_SLOTS
+ KVM_PRIVATE_MEM_SLOTS
)
979 if (mem
->guest_phys_addr
+ mem
->memory_size
< mem
->guest_phys_addr
)
982 memslot
= &kvm
->memslots
[mem
->slot
];
983 base_gfn
= mem
->guest_phys_addr
>> PAGE_SHIFT
;
984 npages
= mem
->memory_size
>> PAGE_SHIFT
;
987 mem
->flags
&= ~KVM_MEM_LOG_DIRTY_PAGES
;
989 new = old
= *memslot
;
991 new.base_gfn
= base_gfn
;
993 new.flags
= mem
->flags
;
995 /* Disallow changing a memory slot's size. */
997 if (npages
&& old
.npages
&& npages
!= old
.npages
)
1000 /* Check for overlaps */
1002 for (i
= 0; i
< KVM_MEMORY_SLOTS
; ++i
) {
1003 struct kvm_memory_slot
*s
= &kvm
->memslots
[i
];
1007 if (!((base_gfn
+ npages
<= s
->base_gfn
) ||
1008 (base_gfn
>= s
->base_gfn
+ s
->npages
)))
1012 /* Free page dirty bitmap if unneeded */
1013 if (!(new.flags
& KVM_MEM_LOG_DIRTY_PAGES
))
1014 new.dirty_bitmap
= NULL
;
1018 /* Allocate if a slot is being created */
1020 if (npages
&& !new.rmap
) {
1021 new.rmap
= vmalloc(npages
* sizeof(struct page
*));
1026 memset(new.rmap
, 0, npages
* sizeof(*new.rmap
));
1028 new.user_alloc
= user_alloc
;
1030 * hva_to_rmmap() serialzies with the mmu_lock and to be
1031 * safe it has to ignore memslots with !user_alloc &&
1035 new.userspace_addr
= mem
->userspace_addr
;
1037 new.userspace_addr
= 0;
1039 if (npages
&& !new.lpage_info
) {
1040 int largepages
= npages
/ KVM_PAGES_PER_HPAGE
;
1041 if (npages
% KVM_PAGES_PER_HPAGE
)
1043 if (base_gfn
% KVM_PAGES_PER_HPAGE
)
1046 new.lpage_info
= vmalloc(largepages
* sizeof(*new.lpage_info
));
1048 if (!new.lpage_info
)
1051 memset(new.lpage_info
, 0, largepages
* sizeof(*new.lpage_info
));
1053 if (base_gfn
% KVM_PAGES_PER_HPAGE
)
1054 new.lpage_info
[0].write_count
= 1;
1055 if ((base_gfn
+npages
) % KVM_PAGES_PER_HPAGE
)
1056 new.lpage_info
[largepages
-1].write_count
= 1;
1059 /* Allocate page dirty bitmap if needed */
1060 if ((new.flags
& KVM_MEM_LOG_DIRTY_PAGES
) && !new.dirty_bitmap
) {
1061 unsigned dirty_bytes
= ALIGN(npages
, BITS_PER_LONG
) / 8;
1063 new.dirty_bitmap
= vmalloc(dirty_bytes
);
1064 if (!new.dirty_bitmap
)
1066 memset(new.dirty_bitmap
, 0, dirty_bytes
);
1068 #endif /* not defined CONFIG_S390 */
1071 kvm_arch_flush_shadow(kvm
);
1073 spin_lock(&kvm
->mmu_lock
);
1074 if (mem
->slot
>= kvm
->nmemslots
)
1075 kvm
->nmemslots
= mem
->slot
+ 1;
1078 spin_unlock(&kvm
->mmu_lock
);
1080 r
= kvm_arch_set_memory_region(kvm
, mem
, old
, user_alloc
);
1082 spin_lock(&kvm
->mmu_lock
);
1084 spin_unlock(&kvm
->mmu_lock
);
1088 kvm_free_physmem_slot(&old
, npages
? &new : NULL
);
1089 /* Slot deletion case: we have to update the current slot */
1093 /* map the pages in iommu page table */
1094 r
= kvm_iommu_map_pages(kvm
, base_gfn
, npages
);
1101 kvm_free_physmem_slot(&new, &old
);
1106 EXPORT_SYMBOL_GPL(__kvm_set_memory_region
);
1108 int kvm_set_memory_region(struct kvm
*kvm
,
1109 struct kvm_userspace_memory_region
*mem
,
1114 down_write(&kvm
->slots_lock
);
1115 r
= __kvm_set_memory_region(kvm
, mem
, user_alloc
);
1116 up_write(&kvm
->slots_lock
);
1119 EXPORT_SYMBOL_GPL(kvm_set_memory_region
);
1121 int kvm_vm_ioctl_set_memory_region(struct kvm
*kvm
,
1123 kvm_userspace_memory_region
*mem
,
1126 if (mem
->slot
>= KVM_MEMORY_SLOTS
)
1128 return kvm_set_memory_region(kvm
, mem
, user_alloc
);
1131 int kvm_get_dirty_log(struct kvm
*kvm
,
1132 struct kvm_dirty_log
*log
, int *is_dirty
)
1134 struct kvm_memory_slot
*memslot
;
1137 unsigned long any
= 0;
1140 if (log
->slot
>= KVM_MEMORY_SLOTS
)
1143 memslot
= &kvm
->memslots
[log
->slot
];
1145 if (!memslot
->dirty_bitmap
)
1148 n
= ALIGN(memslot
->npages
, BITS_PER_LONG
) / 8;
1150 for (i
= 0; !any
&& i
< n
/sizeof(long); ++i
)
1151 any
= memslot
->dirty_bitmap
[i
];
1154 if (copy_to_user(log
->dirty_bitmap
, memslot
->dirty_bitmap
, n
))
1165 int is_error_page(struct page
*page
)
1167 return page
== bad_page
;
1169 EXPORT_SYMBOL_GPL(is_error_page
);
1171 int is_error_pfn(pfn_t pfn
)
1173 return pfn
== bad_pfn
;
1175 EXPORT_SYMBOL_GPL(is_error_pfn
);
1177 static inline unsigned long bad_hva(void)
1182 int kvm_is_error_hva(unsigned long addr
)
1184 return addr
== bad_hva();
1186 EXPORT_SYMBOL_GPL(kvm_is_error_hva
);
1188 struct kvm_memory_slot
*gfn_to_memslot_unaliased(struct kvm
*kvm
, gfn_t gfn
)
1192 for (i
= 0; i
< kvm
->nmemslots
; ++i
) {
1193 struct kvm_memory_slot
*memslot
= &kvm
->memslots
[i
];
1195 if (gfn
>= memslot
->base_gfn
1196 && gfn
< memslot
->base_gfn
+ memslot
->npages
)
1201 EXPORT_SYMBOL_GPL(gfn_to_memslot_unaliased
);
1203 struct kvm_memory_slot
*gfn_to_memslot(struct kvm
*kvm
, gfn_t gfn
)
1205 gfn
= unalias_gfn(kvm
, gfn
);
1206 return gfn_to_memslot_unaliased(kvm
, gfn
);
1209 int kvm_is_visible_gfn(struct kvm
*kvm
, gfn_t gfn
)
1213 gfn
= unalias_gfn(kvm
, gfn
);
1214 for (i
= 0; i
< KVM_MEMORY_SLOTS
; ++i
) {
1215 struct kvm_memory_slot
*memslot
= &kvm
->memslots
[i
];
1217 if (gfn
>= memslot
->base_gfn
1218 && gfn
< memslot
->base_gfn
+ memslot
->npages
)
1223 EXPORT_SYMBOL_GPL(kvm_is_visible_gfn
);
1225 unsigned long gfn_to_hva(struct kvm
*kvm
, gfn_t gfn
)
1227 struct kvm_memory_slot
*slot
;
1229 gfn
= unalias_gfn(kvm
, gfn
);
1230 slot
= gfn_to_memslot_unaliased(kvm
, gfn
);
1233 return (slot
->userspace_addr
+ (gfn
- slot
->base_gfn
) * PAGE_SIZE
);
1235 EXPORT_SYMBOL_GPL(gfn_to_hva
);
1237 pfn_t
gfn_to_pfn(struct kvm
*kvm
, gfn_t gfn
)
1239 struct page
*page
[1];
1246 addr
= gfn_to_hva(kvm
, gfn
);
1247 if (kvm_is_error_hva(addr
)) {
1249 return page_to_pfn(bad_page
);
1252 npages
= get_user_pages_fast(addr
, 1, 1, page
);
1254 if (unlikely(npages
!= 1)) {
1255 struct vm_area_struct
*vma
;
1257 down_read(¤t
->mm
->mmap_sem
);
1258 vma
= find_vma(current
->mm
, addr
);
1260 if (vma
== NULL
|| addr
< vma
->vm_start
||
1261 !(vma
->vm_flags
& VM_PFNMAP
)) {
1262 up_read(¤t
->mm
->mmap_sem
);
1264 return page_to_pfn(bad_page
);
1267 pfn
= ((addr
- vma
->vm_start
) >> PAGE_SHIFT
) + vma
->vm_pgoff
;
1268 up_read(¤t
->mm
->mmap_sem
);
1269 BUG_ON(!kvm_is_mmio_pfn(pfn
));
1271 pfn
= page_to_pfn(page
[0]);
1276 EXPORT_SYMBOL_GPL(gfn_to_pfn
);
1278 struct page
*gfn_to_page(struct kvm
*kvm
, gfn_t gfn
)
1282 pfn
= gfn_to_pfn(kvm
, gfn
);
1283 if (!kvm_is_mmio_pfn(pfn
))
1284 return pfn_to_page(pfn
);
1286 WARN_ON(kvm_is_mmio_pfn(pfn
));
1292 EXPORT_SYMBOL_GPL(gfn_to_page
);
1294 void kvm_release_page_clean(struct page
*page
)
1296 kvm_release_pfn_clean(page_to_pfn(page
));
1298 EXPORT_SYMBOL_GPL(kvm_release_page_clean
);
1300 void kvm_release_pfn_clean(pfn_t pfn
)
1302 if (!kvm_is_mmio_pfn(pfn
))
1303 put_page(pfn_to_page(pfn
));
1305 EXPORT_SYMBOL_GPL(kvm_release_pfn_clean
);
1307 void kvm_release_page_dirty(struct page
*page
)
1309 kvm_release_pfn_dirty(page_to_pfn(page
));
1311 EXPORT_SYMBOL_GPL(kvm_release_page_dirty
);
1313 void kvm_release_pfn_dirty(pfn_t pfn
)
1315 kvm_set_pfn_dirty(pfn
);
1316 kvm_release_pfn_clean(pfn
);
1318 EXPORT_SYMBOL_GPL(kvm_release_pfn_dirty
);
1320 void kvm_set_page_dirty(struct page
*page
)
1322 kvm_set_pfn_dirty(page_to_pfn(page
));
1324 EXPORT_SYMBOL_GPL(kvm_set_page_dirty
);
1326 void kvm_set_pfn_dirty(pfn_t pfn
)
1328 if (!kvm_is_mmio_pfn(pfn
)) {
1329 struct page
*page
= pfn_to_page(pfn
);
1330 if (!PageReserved(page
))
1334 EXPORT_SYMBOL_GPL(kvm_set_pfn_dirty
);
1336 void kvm_set_pfn_accessed(pfn_t pfn
)
1338 if (!kvm_is_mmio_pfn(pfn
))
1339 mark_page_accessed(pfn_to_page(pfn
));
1341 EXPORT_SYMBOL_GPL(kvm_set_pfn_accessed
);
1343 void kvm_get_pfn(pfn_t pfn
)
1345 if (!kvm_is_mmio_pfn(pfn
))
1346 get_page(pfn_to_page(pfn
));
1348 EXPORT_SYMBOL_GPL(kvm_get_pfn
);
1350 static int next_segment(unsigned long len
, int offset
)
1352 if (len
> PAGE_SIZE
- offset
)
1353 return PAGE_SIZE
- offset
;
1358 int kvm_read_guest_page(struct kvm
*kvm
, gfn_t gfn
, void *data
, int offset
,
1364 addr
= gfn_to_hva(kvm
, gfn
);
1365 if (kvm_is_error_hva(addr
))
1367 r
= copy_from_user(data
, (void __user
*)addr
+ offset
, len
);
1372 EXPORT_SYMBOL_GPL(kvm_read_guest_page
);
1374 int kvm_read_guest(struct kvm
*kvm
, gpa_t gpa
, void *data
, unsigned long len
)
1376 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1378 int offset
= offset_in_page(gpa
);
1381 while ((seg
= next_segment(len
, offset
)) != 0) {
1382 ret
= kvm_read_guest_page(kvm
, gfn
, data
, offset
, seg
);
1392 EXPORT_SYMBOL_GPL(kvm_read_guest
);
1394 int kvm_read_guest_atomic(struct kvm
*kvm
, gpa_t gpa
, void *data
,
1399 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1400 int offset
= offset_in_page(gpa
);
1402 addr
= gfn_to_hva(kvm
, gfn
);
1403 if (kvm_is_error_hva(addr
))
1405 pagefault_disable();
1406 r
= __copy_from_user_inatomic(data
, (void __user
*)addr
+ offset
, len
);
1412 EXPORT_SYMBOL(kvm_read_guest_atomic
);
1414 int kvm_write_guest_page(struct kvm
*kvm
, gfn_t gfn
, const void *data
,
1415 int offset
, int len
)
1420 addr
= gfn_to_hva(kvm
, gfn
);
1421 if (kvm_is_error_hva(addr
))
1423 r
= copy_to_user((void __user
*)addr
+ offset
, data
, len
);
1426 mark_page_dirty(kvm
, gfn
);
1429 EXPORT_SYMBOL_GPL(kvm_write_guest_page
);
1431 int kvm_write_guest(struct kvm
*kvm
, gpa_t gpa
, const void *data
,
1434 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1436 int offset
= offset_in_page(gpa
);
1439 while ((seg
= next_segment(len
, offset
)) != 0) {
1440 ret
= kvm_write_guest_page(kvm
, gfn
, data
, offset
, seg
);
1451 int kvm_clear_guest_page(struct kvm
*kvm
, gfn_t gfn
, int offset
, int len
)
1453 return kvm_write_guest_page(kvm
, gfn
, empty_zero_page
, offset
, len
);
1455 EXPORT_SYMBOL_GPL(kvm_clear_guest_page
);
1457 int kvm_clear_guest(struct kvm
*kvm
, gpa_t gpa
, unsigned long len
)
1459 gfn_t gfn
= gpa
>> PAGE_SHIFT
;
1461 int offset
= offset_in_page(gpa
);
1464 while ((seg
= next_segment(len
, offset
)) != 0) {
1465 ret
= kvm_clear_guest_page(kvm
, gfn
, offset
, seg
);
1474 EXPORT_SYMBOL_GPL(kvm_clear_guest
);
1476 void mark_page_dirty(struct kvm
*kvm
, gfn_t gfn
)
1478 struct kvm_memory_slot
*memslot
;
1480 gfn
= unalias_gfn(kvm
, gfn
);
1481 memslot
= gfn_to_memslot_unaliased(kvm
, gfn
);
1482 if (memslot
&& memslot
->dirty_bitmap
) {
1483 unsigned long rel_gfn
= gfn
- memslot
->base_gfn
;
1486 if (!test_bit(rel_gfn
, memslot
->dirty_bitmap
))
1487 set_bit(rel_gfn
, memslot
->dirty_bitmap
);
1492 * The vCPU has executed a HLT instruction with in-kernel mode enabled.
1494 void kvm_vcpu_block(struct kvm_vcpu
*vcpu
)
1499 prepare_to_wait(&vcpu
->wq
, &wait
, TASK_INTERRUPTIBLE
);
1501 if (kvm_cpu_has_interrupt(vcpu
) ||
1502 kvm_cpu_has_pending_timer(vcpu
) ||
1503 kvm_arch_vcpu_runnable(vcpu
)) {
1504 set_bit(KVM_REQ_UNHALT
, &vcpu
->requests
);
1507 if (signal_pending(current
))
1515 finish_wait(&vcpu
->wq
, &wait
);
1518 void kvm_resched(struct kvm_vcpu
*vcpu
)
1520 if (!need_resched())
1524 EXPORT_SYMBOL_GPL(kvm_resched
);
1526 static int kvm_vcpu_fault(struct vm_area_struct
*vma
, struct vm_fault
*vmf
)
1528 struct kvm_vcpu
*vcpu
= vma
->vm_file
->private_data
;
1531 if (vmf
->pgoff
== 0)
1532 page
= virt_to_page(vcpu
->run
);
1534 else if (vmf
->pgoff
== KVM_PIO_PAGE_OFFSET
)
1535 page
= virt_to_page(vcpu
->arch
.pio_data
);
1537 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
1538 else if (vmf
->pgoff
== KVM_COALESCED_MMIO_PAGE_OFFSET
)
1539 page
= virt_to_page(vcpu
->kvm
->coalesced_mmio_ring
);
1542 return VM_FAULT_SIGBUS
;
1548 static struct vm_operations_struct kvm_vcpu_vm_ops
= {
1549 .fault
= kvm_vcpu_fault
,
1552 static int kvm_vcpu_mmap(struct file
*file
, struct vm_area_struct
*vma
)
1554 vma
->vm_ops
= &kvm_vcpu_vm_ops
;
1558 static int kvm_vcpu_release(struct inode
*inode
, struct file
*filp
)
1560 struct kvm_vcpu
*vcpu
= filp
->private_data
;
1562 kvm_put_kvm(vcpu
->kvm
);
1566 static struct file_operations kvm_vcpu_fops
= {
1567 .release
= kvm_vcpu_release
,
1568 .unlocked_ioctl
= kvm_vcpu_ioctl
,
1569 .compat_ioctl
= kvm_vcpu_ioctl
,
1570 .mmap
= kvm_vcpu_mmap
,
1574 * Allocates an inode for the vcpu.
1576 static int create_vcpu_fd(struct kvm_vcpu
*vcpu
)
1578 int fd
= anon_inode_getfd("kvm-vcpu", &kvm_vcpu_fops
, vcpu
, 0);
1580 kvm_put_kvm(vcpu
->kvm
);
1585 * Creates some virtual cpus. Good luck creating more than one.
1587 static int kvm_vm_ioctl_create_vcpu(struct kvm
*kvm
, int n
)
1590 struct kvm_vcpu
*vcpu
;
1595 vcpu
= kvm_arch_vcpu_create(kvm
, n
);
1597 return PTR_ERR(vcpu
);
1599 preempt_notifier_init(&vcpu
->preempt_notifier
, &kvm_preempt_ops
);
1601 r
= kvm_arch_vcpu_setup(vcpu
);
1605 mutex_lock(&kvm
->lock
);
1606 if (kvm
->vcpus
[n
]) {
1610 kvm
->vcpus
[n
] = vcpu
;
1611 mutex_unlock(&kvm
->lock
);
1613 /* Now it's all set up, let userspace reach it */
1615 r
= create_vcpu_fd(vcpu
);
1621 mutex_lock(&kvm
->lock
);
1622 kvm
->vcpus
[n
] = NULL
;
1624 mutex_unlock(&kvm
->lock
);
1625 kvm_arch_vcpu_destroy(vcpu
);
1629 static int kvm_vcpu_ioctl_set_sigmask(struct kvm_vcpu
*vcpu
, sigset_t
*sigset
)
1632 sigdelsetmask(sigset
, sigmask(SIGKILL
)|sigmask(SIGSTOP
));
1633 vcpu
->sigset_active
= 1;
1634 vcpu
->sigset
= *sigset
;
1636 vcpu
->sigset_active
= 0;
1640 static long kvm_vcpu_ioctl(struct file
*filp
,
1641 unsigned int ioctl
, unsigned long arg
)
1643 struct kvm_vcpu
*vcpu
= filp
->private_data
;
1644 void __user
*argp
= (void __user
*)arg
;
1646 struct kvm_fpu
*fpu
= NULL
;
1647 struct kvm_sregs
*kvm_sregs
= NULL
;
1649 if (vcpu
->kvm
->mm
!= current
->mm
)
1656 r
= kvm_arch_vcpu_ioctl_run(vcpu
, vcpu
->run
);
1658 case KVM_GET_REGS
: {
1659 struct kvm_regs
*kvm_regs
;
1662 kvm_regs
= kzalloc(sizeof(struct kvm_regs
), GFP_KERNEL
);
1665 r
= kvm_arch_vcpu_ioctl_get_regs(vcpu
, kvm_regs
);
1669 if (copy_to_user(argp
, kvm_regs
, sizeof(struct kvm_regs
)))
1676 case KVM_SET_REGS
: {
1677 struct kvm_regs
*kvm_regs
;
1680 kvm_regs
= kzalloc(sizeof(struct kvm_regs
), GFP_KERNEL
);
1684 if (copy_from_user(kvm_regs
, argp
, sizeof(struct kvm_regs
)))
1686 r
= kvm_arch_vcpu_ioctl_set_regs(vcpu
, kvm_regs
);
1694 case KVM_GET_SREGS
: {
1695 kvm_sregs
= kzalloc(sizeof(struct kvm_sregs
), GFP_KERNEL
);
1699 r
= kvm_arch_vcpu_ioctl_get_sregs(vcpu
, kvm_sregs
);
1703 if (copy_to_user(argp
, kvm_sregs
, sizeof(struct kvm_sregs
)))
1708 case KVM_SET_SREGS
: {
1709 kvm_sregs
= kmalloc(sizeof(struct kvm_sregs
), GFP_KERNEL
);
1714 if (copy_from_user(kvm_sregs
, argp
, sizeof(struct kvm_sregs
)))
1716 r
= kvm_arch_vcpu_ioctl_set_sregs(vcpu
, kvm_sregs
);
1722 case KVM_GET_MP_STATE
: {
1723 struct kvm_mp_state mp_state
;
1725 r
= kvm_arch_vcpu_ioctl_get_mpstate(vcpu
, &mp_state
);
1729 if (copy_to_user(argp
, &mp_state
, sizeof mp_state
))
1734 case KVM_SET_MP_STATE
: {
1735 struct kvm_mp_state mp_state
;
1738 if (copy_from_user(&mp_state
, argp
, sizeof mp_state
))
1740 r
= kvm_arch_vcpu_ioctl_set_mpstate(vcpu
, &mp_state
);
1746 case KVM_TRANSLATE
: {
1747 struct kvm_translation tr
;
1750 if (copy_from_user(&tr
, argp
, sizeof tr
))
1752 r
= kvm_arch_vcpu_ioctl_translate(vcpu
, &tr
);
1756 if (copy_to_user(argp
, &tr
, sizeof tr
))
1761 case KVM_DEBUG_GUEST
: {
1762 struct kvm_debug_guest dbg
;
1765 if (copy_from_user(&dbg
, argp
, sizeof dbg
))
1767 r
= kvm_arch_vcpu_ioctl_debug_guest(vcpu
, &dbg
);
1773 case KVM_SET_SIGNAL_MASK
: {
1774 struct kvm_signal_mask __user
*sigmask_arg
= argp
;
1775 struct kvm_signal_mask kvm_sigmask
;
1776 sigset_t sigset
, *p
;
1781 if (copy_from_user(&kvm_sigmask
, argp
,
1782 sizeof kvm_sigmask
))
1785 if (kvm_sigmask
.len
!= sizeof sigset
)
1788 if (copy_from_user(&sigset
, sigmask_arg
->sigset
,
1793 r
= kvm_vcpu_ioctl_set_sigmask(vcpu
, &sigset
);
1797 fpu
= kzalloc(sizeof(struct kvm_fpu
), GFP_KERNEL
);
1801 r
= kvm_arch_vcpu_ioctl_get_fpu(vcpu
, fpu
);
1805 if (copy_to_user(argp
, fpu
, sizeof(struct kvm_fpu
)))
1811 fpu
= kmalloc(sizeof(struct kvm_fpu
), GFP_KERNEL
);
1816 if (copy_from_user(fpu
, argp
, sizeof(struct kvm_fpu
)))
1818 r
= kvm_arch_vcpu_ioctl_set_fpu(vcpu
, fpu
);
1825 r
= kvm_arch_vcpu_ioctl(filp
, ioctl
, arg
);
1833 static long kvm_vm_ioctl(struct file
*filp
,
1834 unsigned int ioctl
, unsigned long arg
)
1836 struct kvm
*kvm
= filp
->private_data
;
1837 void __user
*argp
= (void __user
*)arg
;
1840 if (kvm
->mm
!= current
->mm
)
1843 case KVM_CREATE_VCPU
:
1844 r
= kvm_vm_ioctl_create_vcpu(kvm
, arg
);
1848 case KVM_SET_USER_MEMORY_REGION
: {
1849 struct kvm_userspace_memory_region kvm_userspace_mem
;
1852 if (copy_from_user(&kvm_userspace_mem
, argp
,
1853 sizeof kvm_userspace_mem
))
1856 r
= kvm_vm_ioctl_set_memory_region(kvm
, &kvm_userspace_mem
, 1);
1861 case KVM_GET_DIRTY_LOG
: {
1862 struct kvm_dirty_log log
;
1865 if (copy_from_user(&log
, argp
, sizeof log
))
1867 r
= kvm_vm_ioctl_get_dirty_log(kvm
, &log
);
1872 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
1873 case KVM_REGISTER_COALESCED_MMIO
: {
1874 struct kvm_coalesced_mmio_zone zone
;
1876 if (copy_from_user(&zone
, argp
, sizeof zone
))
1879 r
= kvm_vm_ioctl_register_coalesced_mmio(kvm
, &zone
);
1885 case KVM_UNREGISTER_COALESCED_MMIO
: {
1886 struct kvm_coalesced_mmio_zone zone
;
1888 if (copy_from_user(&zone
, argp
, sizeof zone
))
1891 r
= kvm_vm_ioctl_unregister_coalesced_mmio(kvm
, &zone
);
1898 #ifdef KVM_CAP_DEVICE_ASSIGNMENT
1899 case KVM_ASSIGN_PCI_DEVICE
: {
1900 struct kvm_assigned_pci_dev assigned_dev
;
1903 if (copy_from_user(&assigned_dev
, argp
, sizeof assigned_dev
))
1905 r
= kvm_vm_ioctl_assign_device(kvm
, &assigned_dev
);
1910 case KVM_ASSIGN_IRQ
: {
1911 struct kvm_assigned_irq assigned_irq
;
1914 if (copy_from_user(&assigned_irq
, argp
, sizeof assigned_irq
))
1916 r
= kvm_vm_ioctl_assign_irq(kvm
, &assigned_irq
);
1922 #ifdef KVM_CAP_DEVICE_DEASSIGNMENT
1923 case KVM_DEASSIGN_PCI_DEVICE
: {
1924 struct kvm_assigned_pci_dev assigned_dev
;
1927 if (copy_from_user(&assigned_dev
, argp
, sizeof assigned_dev
))
1929 r
= kvm_vm_ioctl_deassign_device(kvm
, &assigned_dev
);
1936 r
= kvm_arch_vm_ioctl(filp
, ioctl
, arg
);
1942 static int kvm_vm_fault(struct vm_area_struct
*vma
, struct vm_fault
*vmf
)
1944 struct page
*page
[1];
1947 gfn_t gfn
= vmf
->pgoff
;
1948 struct kvm
*kvm
= vma
->vm_file
->private_data
;
1950 addr
= gfn_to_hva(kvm
, gfn
);
1951 if (kvm_is_error_hva(addr
))
1952 return VM_FAULT_SIGBUS
;
1954 npages
= get_user_pages(current
, current
->mm
, addr
, 1, 1, 0, page
,
1956 if (unlikely(npages
!= 1))
1957 return VM_FAULT_SIGBUS
;
1959 vmf
->page
= page
[0];
1963 static struct vm_operations_struct kvm_vm_vm_ops
= {
1964 .fault
= kvm_vm_fault
,
1967 static int kvm_vm_mmap(struct file
*file
, struct vm_area_struct
*vma
)
1969 vma
->vm_ops
= &kvm_vm_vm_ops
;
1973 static struct file_operations kvm_vm_fops
= {
1974 .release
= kvm_vm_release
,
1975 .unlocked_ioctl
= kvm_vm_ioctl
,
1976 .compat_ioctl
= kvm_vm_ioctl
,
1977 .mmap
= kvm_vm_mmap
,
1980 static int kvm_dev_ioctl_create_vm(void)
1985 kvm
= kvm_create_vm();
1987 return PTR_ERR(kvm
);
1988 fd
= anon_inode_getfd("kvm-vm", &kvm_vm_fops
, kvm
, 0);
1995 static long kvm_dev_ioctl_check_extension_generic(long arg
)
1998 case KVM_CAP_USER_MEMORY
:
1999 case KVM_CAP_DESTROY_MEMORY_REGION_WORKS
:
2004 return kvm_dev_ioctl_check_extension(arg
);
2007 static long kvm_dev_ioctl(struct file
*filp
,
2008 unsigned int ioctl
, unsigned long arg
)
2013 case KVM_GET_API_VERSION
:
2017 r
= KVM_API_VERSION
;
2023 r
= kvm_dev_ioctl_create_vm();
2025 case KVM_CHECK_EXTENSION
:
2026 r
= kvm_dev_ioctl_check_extension_generic(arg
);
2028 case KVM_GET_VCPU_MMAP_SIZE
:
2032 r
= PAGE_SIZE
; /* struct kvm_run */
2034 r
+= PAGE_SIZE
; /* pio data page */
2036 #ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
2037 r
+= PAGE_SIZE
; /* coalesced mmio ring page */
2040 case KVM_TRACE_ENABLE
:
2041 case KVM_TRACE_PAUSE
:
2042 case KVM_TRACE_DISABLE
:
2043 r
= kvm_trace_ioctl(ioctl
, arg
);
2046 return kvm_arch_dev_ioctl(filp
, ioctl
, arg
);
2052 static struct file_operations kvm_chardev_ops
= {
2053 .unlocked_ioctl
= kvm_dev_ioctl
,
2054 .compat_ioctl
= kvm_dev_ioctl
,
2057 static struct miscdevice kvm_dev
= {
2063 static void hardware_enable(void *junk
)
2065 int cpu
= raw_smp_processor_id();
2067 if (cpumask_test_cpu(cpu
, cpus_hardware_enabled
))
2069 cpumask_set_cpu(cpu
, cpus_hardware_enabled
);
2070 kvm_arch_hardware_enable(NULL
);
2073 static void hardware_disable(void *junk
)
2075 int cpu
= raw_smp_processor_id();
2077 if (!cpumask_test_cpu(cpu
, cpus_hardware_enabled
))
2079 cpumask_clear_cpu(cpu
, cpus_hardware_enabled
);
2080 kvm_arch_hardware_disable(NULL
);
2083 static int kvm_cpu_hotplug(struct notifier_block
*notifier
, unsigned long val
,
2088 val
&= ~CPU_TASKS_FROZEN
;
2091 printk(KERN_INFO
"kvm: disabling virtualization on CPU%d\n",
2093 hardware_disable(NULL
);
2095 case CPU_UP_CANCELED
:
2096 printk(KERN_INFO
"kvm: disabling virtualization on CPU%d\n",
2098 smp_call_function_single(cpu
, hardware_disable
, NULL
, 1);
2101 printk(KERN_INFO
"kvm: enabling virtualization on CPU%d\n",
2103 smp_call_function_single(cpu
, hardware_enable
, NULL
, 1);
2110 asmlinkage
void kvm_handle_fault_on_reboot(void)
2113 /* spin while reset goes on */
2116 /* Fault while not rebooting. We want the trace. */
2119 EXPORT_SYMBOL_GPL(kvm_handle_fault_on_reboot
);
2121 static int kvm_reboot(struct notifier_block
*notifier
, unsigned long val
,
2124 if (val
== SYS_RESTART
) {
2126 * Some (well, at least mine) BIOSes hang on reboot if
2129 printk(KERN_INFO
"kvm: exiting hardware virtualization\n");
2130 kvm_rebooting
= true;
2131 on_each_cpu(hardware_disable
, NULL
, 1);
2136 static struct notifier_block kvm_reboot_notifier
= {
2137 .notifier_call
= kvm_reboot
,
2141 void kvm_io_bus_init(struct kvm_io_bus
*bus
)
2143 memset(bus
, 0, sizeof(*bus
));
2146 void kvm_io_bus_destroy(struct kvm_io_bus
*bus
)
2150 for (i
= 0; i
< bus
->dev_count
; i
++) {
2151 struct kvm_io_device
*pos
= bus
->devs
[i
];
2153 kvm_iodevice_destructor(pos
);
2157 struct kvm_io_device
*kvm_io_bus_find_dev(struct kvm_io_bus
*bus
,
2158 gpa_t addr
, int len
, int is_write
)
2162 for (i
= 0; i
< bus
->dev_count
; i
++) {
2163 struct kvm_io_device
*pos
= bus
->devs
[i
];
2165 if (pos
->in_range(pos
, addr
, len
, is_write
))
2172 void kvm_io_bus_register_dev(struct kvm_io_bus
*bus
, struct kvm_io_device
*dev
)
2174 BUG_ON(bus
->dev_count
> (NR_IOBUS_DEVS
-1));
2176 bus
->devs
[bus
->dev_count
++] = dev
;
2179 static struct notifier_block kvm_cpu_notifier
= {
2180 .notifier_call
= kvm_cpu_hotplug
,
2181 .priority
= 20, /* must be > scheduler priority */
2184 static int vm_stat_get(void *_offset
, u64
*val
)
2186 unsigned offset
= (long)_offset
;
2190 spin_lock(&kvm_lock
);
2191 list_for_each_entry(kvm
, &vm_list
, vm_list
)
2192 *val
+= *(u32
*)((void *)kvm
+ offset
);
2193 spin_unlock(&kvm_lock
);
2197 DEFINE_SIMPLE_ATTRIBUTE(vm_stat_fops
, vm_stat_get
, NULL
, "%llu\n");
2199 static int vcpu_stat_get(void *_offset
, u64
*val
)
2201 unsigned offset
= (long)_offset
;
2203 struct kvm_vcpu
*vcpu
;
2207 spin_lock(&kvm_lock
);
2208 list_for_each_entry(kvm
, &vm_list
, vm_list
)
2209 for (i
= 0; i
< KVM_MAX_VCPUS
; ++i
) {
2210 vcpu
= kvm
->vcpus
[i
];
2212 *val
+= *(u32
*)((void *)vcpu
+ offset
);
2214 spin_unlock(&kvm_lock
);
2218 DEFINE_SIMPLE_ATTRIBUTE(vcpu_stat_fops
, vcpu_stat_get
, NULL
, "%llu\n");
2220 static struct file_operations
*stat_fops
[] = {
2221 [KVM_STAT_VCPU
] = &vcpu_stat_fops
,
2222 [KVM_STAT_VM
] = &vm_stat_fops
,
2225 static void kvm_init_debug(void)
2227 struct kvm_stats_debugfs_item
*p
;
2229 kvm_debugfs_dir
= debugfs_create_dir("kvm", NULL
);
2230 for (p
= debugfs_entries
; p
->name
; ++p
)
2231 p
->dentry
= debugfs_create_file(p
->name
, 0444, kvm_debugfs_dir
,
2232 (void *)(long)p
->offset
,
2233 stat_fops
[p
->kind
]);
2236 static void kvm_exit_debug(void)
2238 struct kvm_stats_debugfs_item
*p
;
2240 for (p
= debugfs_entries
; p
->name
; ++p
)
2241 debugfs_remove(p
->dentry
);
2242 debugfs_remove(kvm_debugfs_dir
);
2245 static int kvm_suspend(struct sys_device
*dev
, pm_message_t state
)
2247 hardware_disable(NULL
);
2251 static int kvm_resume(struct sys_device
*dev
)
2253 hardware_enable(NULL
);
2257 static struct sysdev_class kvm_sysdev_class
= {
2259 .suspend
= kvm_suspend
,
2260 .resume
= kvm_resume
,
2263 static struct sys_device kvm_sysdev
= {
2265 .cls
= &kvm_sysdev_class
,
2268 struct page
*bad_page
;
2272 struct kvm_vcpu
*preempt_notifier_to_vcpu(struct preempt_notifier
*pn
)
2274 return container_of(pn
, struct kvm_vcpu
, preempt_notifier
);
2277 static void kvm_sched_in(struct preempt_notifier
*pn
, int cpu
)
2279 struct kvm_vcpu
*vcpu
= preempt_notifier_to_vcpu(pn
);
2281 kvm_arch_vcpu_load(vcpu
, cpu
);
2284 static void kvm_sched_out(struct preempt_notifier
*pn
,
2285 struct task_struct
*next
)
2287 struct kvm_vcpu
*vcpu
= preempt_notifier_to_vcpu(pn
);
2289 kvm_arch_vcpu_put(vcpu
);
2292 int kvm_init(void *opaque
, unsigned int vcpu_size
,
2293 struct module
*module
)
2300 r
= kvm_arch_init(opaque
);
2304 bad_page
= alloc_page(GFP_KERNEL
| __GFP_ZERO
);
2306 if (bad_page
== NULL
) {
2311 bad_pfn
= page_to_pfn(bad_page
);
2313 if (!alloc_cpumask_var(&cpus_hardware_enabled
, GFP_KERNEL
)) {
2318 r
= kvm_arch_hardware_setup();
2322 for_each_online_cpu(cpu
) {
2323 smp_call_function_single(cpu
,
2324 kvm_arch_check_processor_compat
,
2330 on_each_cpu(hardware_enable
, NULL
, 1);
2331 r
= register_cpu_notifier(&kvm_cpu_notifier
);
2334 register_reboot_notifier(&kvm_reboot_notifier
);
2336 r
= sysdev_class_register(&kvm_sysdev_class
);
2340 r
= sysdev_register(&kvm_sysdev
);
2344 /* A kmem cache lets us meet the alignment requirements of fx_save. */
2345 kvm_vcpu_cache
= kmem_cache_create("kvm_vcpu", vcpu_size
,
2346 __alignof__(struct kvm_vcpu
),
2348 if (!kvm_vcpu_cache
) {
2353 kvm_chardev_ops
.owner
= module
;
2354 kvm_vm_fops
.owner
= module
;
2355 kvm_vcpu_fops
.owner
= module
;
2357 r
= misc_register(&kvm_dev
);
2359 printk(KERN_ERR
"kvm: misc device register failed\n");
2363 kvm_preempt_ops
.sched_in
= kvm_sched_in
;
2364 kvm_preempt_ops
.sched_out
= kvm_sched_out
;
2372 kmem_cache_destroy(kvm_vcpu_cache
);
2374 sysdev_unregister(&kvm_sysdev
);
2376 sysdev_class_unregister(&kvm_sysdev_class
);
2378 unregister_reboot_notifier(&kvm_reboot_notifier
);
2379 unregister_cpu_notifier(&kvm_cpu_notifier
);
2381 on_each_cpu(hardware_disable
, NULL
, 1);
2383 kvm_arch_hardware_unsetup();
2385 free_cpumask_var(cpus_hardware_enabled
);
2387 __free_page(bad_page
);
2394 EXPORT_SYMBOL_GPL(kvm_init
);
2398 kvm_trace_cleanup();
2399 misc_deregister(&kvm_dev
);
2400 kmem_cache_destroy(kvm_vcpu_cache
);
2401 sysdev_unregister(&kvm_sysdev
);
2402 sysdev_class_unregister(&kvm_sysdev_class
);
2403 unregister_reboot_notifier(&kvm_reboot_notifier
);
2404 unregister_cpu_notifier(&kvm_cpu_notifier
);
2405 on_each_cpu(hardware_disable
, NULL
, 1);
2406 kvm_arch_hardware_unsetup();
2409 free_cpumask_var(cpus_hardware_enabled
);
2410 __free_page(bad_page
);
2412 EXPORT_SYMBOL_GPL(kvm_exit
);