kvm_main.c 38.2 KB
Newer Older
A
Avi Kivity 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
/*
 * Kernel-based Virtual Machine driver for Linux
 *
 * This module enables machines with Intel VT-x extensions to run virtual
 * machines without emulation or binary translation.
 *
 * Copyright (C) 2006 Qumranet, Inc.
 *
 * Authors:
 *   Avi Kivity   <avi@qumranet.com>
 *   Yaniv Kamay  <yaniv@qumranet.com>
 *
 * This work is licensed under the terms of the GNU GPL, version 2.  See
 * the COPYING file in the top-level directory.
 *
 */

18
#include "iodev.h"
A
Avi Kivity 已提交
19

20
#include <linux/kvm_host.h>
A
Avi Kivity 已提交
21 22 23 24 25 26 27 28 29 30 31 32
#include <linux/kvm.h>
#include <linux/module.h>
#include <linux/errno.h>
#include <linux/percpu.h>
#include <linux/gfp.h>
#include <linux/mm.h>
#include <linux/miscdevice.h>
#include <linux/vmalloc.h>
#include <linux/reboot.h>
#include <linux/debugfs.h>
#include <linux/highmem.h>
#include <linux/file.h>
33
#include <linux/sysdev.h>
A
Avi Kivity 已提交
34
#include <linux/cpu.h>
A
Alexey Dobriyan 已提交
35
#include <linux/sched.h>
36 37
#include <linux/cpumask.h>
#include <linux/smp.h>
38
#include <linux/anon_inodes.h>
39
#include <linux/profile.h>
40
#include <linux/kvm_para.h>
41
#include <linux/pagemap.h>
42
#include <linux/mman.h>
43
#include <linux/swap.h>
A
Avi Kivity 已提交
44

A
Avi Kivity 已提交
45 46 47
#include <asm/processor.h>
#include <asm/io.h>
#include <asm/uaccess.h>
48
#include <asm/pgtable.h>
A
Avi Kivity 已提交
49

50 51 52 53
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
#include "coalesced_mmio.h"
#endif

A
Avi Kivity 已提交
54 55 56
MODULE_AUTHOR("Qumranet");
MODULE_LICENSE("GPL");

57 58
DEFINE_SPINLOCK(kvm_lock);
LIST_HEAD(vm_list);
59

60 61
static cpumask_t cpus_hardware_enabled;

62 63
struct kmem_cache *kvm_vcpu_cache;
EXPORT_SYMBOL_GPL(kvm_vcpu_cache);
A
Avi Kivity 已提交
64

65 66
static __read_mostly struct preempt_ops kvm_preempt_ops;

67
struct dentry *kvm_debugfs_dir;
A
Avi Kivity 已提交
68

A
Avi Kivity 已提交
69 70 71
static long kvm_vcpu_ioctl(struct file *file, unsigned int ioctl,
			   unsigned long arg);

72 73
bool kvm_rebooting;

74 75 76 77 78
static inline int valid_vcpu(int n)
{
	return likely(n >= 0 && n < KVM_MAX_VCPUS);
}

A
Avi Kivity 已提交
79 80 81
/*
 * Switches to specified vcpu, until a matching vcpu_put()
 */
82
void vcpu_load(struct kvm_vcpu *vcpu)
A
Avi Kivity 已提交
83
{
84 85
	int cpu;

A
Avi Kivity 已提交
86
	mutex_lock(&vcpu->mutex);
87 88
	cpu = get_cpu();
	preempt_notifier_register(&vcpu->preempt_notifier);
89
	kvm_arch_vcpu_load(vcpu, cpu);
90
	put_cpu();
A
Avi Kivity 已提交
91 92
}

93
void vcpu_put(struct kvm_vcpu *vcpu)
A
Avi Kivity 已提交
94
{
95
	preempt_disable();
96
	kvm_arch_vcpu_put(vcpu);
97 98
	preempt_notifier_unregister(&vcpu->preempt_notifier);
	preempt_enable();
A
Avi Kivity 已提交
99 100 101
	mutex_unlock(&vcpu->mutex);
}

102 103 104 105 106 107
static void ack_flush(void *_completed)
{
}

void kvm_flush_remote_tlbs(struct kvm *kvm)
{
108
	int i, cpu, me;
109 110 111
	cpumask_t cpus;
	struct kvm_vcpu *vcpu;

112
	me = get_cpu();
113
	cpus_clear(cpus);
R
Rusty Russell 已提交
114 115 116 117
	for (i = 0; i < KVM_MAX_VCPUS; ++i) {
		vcpu = kvm->vcpus[i];
		if (!vcpu)
			continue;
118
		if (test_and_set_bit(KVM_REQ_TLB_FLUSH, &vcpu->requests))
119 120
			continue;
		cpu = vcpu->cpu;
121
		if (cpu != -1 && cpu != me)
122
			cpu_set(cpu, cpus);
123
	}
124
	if (cpus_empty(cpus))
125
		goto out;
126
	++kvm->stat.remote_tlb_flush;
127
	smp_call_function_mask(cpus, ack_flush, NULL, 1);
128 129
out:
	put_cpu();
130 131
}

132 133
void kvm_reload_remote_mmus(struct kvm *kvm)
{
134
	int i, cpu, me;
135 136 137
	cpumask_t cpus;
	struct kvm_vcpu *vcpu;

138
	me = get_cpu();
139 140 141 142 143 144 145 146
	cpus_clear(cpus);
	for (i = 0; i < KVM_MAX_VCPUS; ++i) {
		vcpu = kvm->vcpus[i];
		if (!vcpu)
			continue;
		if (test_and_set_bit(KVM_REQ_MMU_RELOAD, &vcpu->requests))
			continue;
		cpu = vcpu->cpu;
147
		if (cpu != -1 && cpu != me)
148 149 150
			cpu_set(cpu, cpus);
	}
	if (cpus_empty(cpus))
151
		goto out;
152
	smp_call_function_mask(cpus, ack_flush, NULL, 1);
153 154
out:
	put_cpu();
155 156 157
}


R
Rusty Russell 已提交
158 159 160 161 162 163 164 165 166
int kvm_vcpu_init(struct kvm_vcpu *vcpu, struct kvm *kvm, unsigned id)
{
	struct page *page;
	int r;

	mutex_init(&vcpu->mutex);
	vcpu->cpu = -1;
	vcpu->kvm = kvm;
	vcpu->vcpu_id = id;
E
Eddie Dong 已提交
167
	init_waitqueue_head(&vcpu->wq);
R
Rusty Russell 已提交
168 169 170 171 172 173 174 175

	page = alloc_page(GFP_KERNEL | __GFP_ZERO);
	if (!page) {
		r = -ENOMEM;
		goto fail;
	}
	vcpu->run = page_address(page);

176
	r = kvm_arch_vcpu_init(vcpu);
R
Rusty Russell 已提交
177
	if (r < 0)
178
		goto fail_free_run;
R
Rusty Russell 已提交
179 180 181 182 183
	return 0;

fail_free_run:
	free_page((unsigned long)vcpu->run);
fail:
184
	return r;
R
Rusty Russell 已提交
185 186 187 188 189
}
EXPORT_SYMBOL_GPL(kvm_vcpu_init);

void kvm_vcpu_uninit(struct kvm_vcpu *vcpu)
{
190
	kvm_arch_vcpu_uninit(vcpu);
R
Rusty Russell 已提交
191 192 193 194
	free_page((unsigned long)vcpu->run);
}
EXPORT_SYMBOL_GPL(kvm_vcpu_uninit);

195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311
#if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
static inline struct kvm *mmu_notifier_to_kvm(struct mmu_notifier *mn)
{
	return container_of(mn, struct kvm, mmu_notifier);
}

static void kvm_mmu_notifier_invalidate_page(struct mmu_notifier *mn,
					     struct mm_struct *mm,
					     unsigned long address)
{
	struct kvm *kvm = mmu_notifier_to_kvm(mn);
	int need_tlb_flush;

	/*
	 * When ->invalidate_page runs, the linux pte has been zapped
	 * already but the page is still allocated until
	 * ->invalidate_page returns. So if we increase the sequence
	 * here the kvm page fault will notice if the spte can't be
	 * established because the page is going to be freed. If
	 * instead the kvm page fault establishes the spte before
	 * ->invalidate_page runs, kvm_unmap_hva will release it
	 * before returning.
	 *
	 * The sequence increase only need to be seen at spin_unlock
	 * time, and not at spin_lock time.
	 *
	 * Increasing the sequence after the spin_unlock would be
	 * unsafe because the kvm page fault could then establish the
	 * pte after kvm_unmap_hva returned, without noticing the page
	 * is going to be freed.
	 */
	spin_lock(&kvm->mmu_lock);
	kvm->mmu_notifier_seq++;
	need_tlb_flush = kvm_unmap_hva(kvm, address);
	spin_unlock(&kvm->mmu_lock);

	/* we've to flush the tlb before the pages can be freed */
	if (need_tlb_flush)
		kvm_flush_remote_tlbs(kvm);

}

static void kvm_mmu_notifier_invalidate_range_start(struct mmu_notifier *mn,
						    struct mm_struct *mm,
						    unsigned long start,
						    unsigned long end)
{
	struct kvm *kvm = mmu_notifier_to_kvm(mn);
	int need_tlb_flush = 0;

	spin_lock(&kvm->mmu_lock);
	/*
	 * The count increase must become visible at unlock time as no
	 * spte can be established without taking the mmu_lock and
	 * count is also read inside the mmu_lock critical section.
	 */
	kvm->mmu_notifier_count++;
	for (; start < end; start += PAGE_SIZE)
		need_tlb_flush |= kvm_unmap_hva(kvm, start);
	spin_unlock(&kvm->mmu_lock);

	/* we've to flush the tlb before the pages can be freed */
	if (need_tlb_flush)
		kvm_flush_remote_tlbs(kvm);
}

static void kvm_mmu_notifier_invalidate_range_end(struct mmu_notifier *mn,
						  struct mm_struct *mm,
						  unsigned long start,
						  unsigned long end)
{
	struct kvm *kvm = mmu_notifier_to_kvm(mn);

	spin_lock(&kvm->mmu_lock);
	/*
	 * This sequence increase will notify the kvm page fault that
	 * the page that is going to be mapped in the spte could have
	 * been freed.
	 */
	kvm->mmu_notifier_seq++;
	/*
	 * The above sequence increase must be visible before the
	 * below count decrease but both values are read by the kvm
	 * page fault under mmu_lock spinlock so we don't need to add
	 * a smb_wmb() here in between the two.
	 */
	kvm->mmu_notifier_count--;
	spin_unlock(&kvm->mmu_lock);

	BUG_ON(kvm->mmu_notifier_count < 0);
}

static int kvm_mmu_notifier_clear_flush_young(struct mmu_notifier *mn,
					      struct mm_struct *mm,
					      unsigned long address)
{
	struct kvm *kvm = mmu_notifier_to_kvm(mn);
	int young;

	spin_lock(&kvm->mmu_lock);
	young = kvm_age_hva(kvm, address);
	spin_unlock(&kvm->mmu_lock);

	if (young)
		kvm_flush_remote_tlbs(kvm);

	return young;
}

static const struct mmu_notifier_ops kvm_mmu_notifier_ops = {
	.invalidate_page	= kvm_mmu_notifier_invalidate_page,
	.invalidate_range_start	= kvm_mmu_notifier_invalidate_range_start,
	.invalidate_range_end	= kvm_mmu_notifier_invalidate_range_end,
	.clear_flush_young	= kvm_mmu_notifier_clear_flush_young,
};
#endif /* CONFIG_MMU_NOTIFIER && KVM_ARCH_WANT_MMU_NOTIFIER */

312
static struct kvm *kvm_create_vm(void)
A
Avi Kivity 已提交
313
{
314
	struct kvm *kvm = kvm_arch_create_vm();
315 316 317
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
	struct page *page;
#endif
A
Avi Kivity 已提交
318

319 320
	if (IS_ERR(kvm))
		goto out;
A
Avi Kivity 已提交
321

322 323 324 325 326 327 328 329 330 331
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
	page = alloc_page(GFP_KERNEL | __GFP_ZERO);
	if (!page) {
		kfree(kvm);
		return ERR_PTR(-ENOMEM);
	}
	kvm->coalesced_mmio_ring =
			(struct kvm_coalesced_mmio_ring *)page_address(page);
#endif

332 333 334 335 336 337 338 339 340 341 342 343 344 345 346
#if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
	{
		int err;
		kvm->mmu_notifier.ops = &kvm_mmu_notifier_ops;
		err = mmu_notifier_register(&kvm->mmu_notifier, current->mm);
		if (err) {
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
			put_page(page);
#endif
			kfree(kvm);
			return ERR_PTR(err);
		}
	}
#endif

347 348
	kvm->mm = current->mm;
	atomic_inc(&kvm->mm->mm_count);
349
	spin_lock_init(&kvm->mmu_lock);
350
	kvm_io_bus_init(&kvm->pio_bus);
S
Shaohua Li 已提交
351
	mutex_init(&kvm->lock);
352
	kvm_io_bus_init(&kvm->mmio_bus);
353
	init_rwsem(&kvm->slots_lock);
I
Izik Eidus 已提交
354
	atomic_set(&kvm->users_count, 1);
355 356 357
	spin_lock(&kvm_lock);
	list_add(&kvm->vm_list, &vm_list);
	spin_unlock(&kvm_lock);
358 359 360
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
	kvm_coalesced_mmio_init(kvm);
#endif
361
out:
362 363 364
	return kvm;
}

A
Avi Kivity 已提交
365 366 367 368 369 370
/*
 * Free any memory in @free but not in @dont.
 */
static void kvm_free_physmem_slot(struct kvm_memory_slot *free,
				  struct kvm_memory_slot *dont)
{
371 372
	if (!dont || free->rmap != dont->rmap)
		vfree(free->rmap);
A
Avi Kivity 已提交
373 374 375 376

	if (!dont || free->dirty_bitmap != dont->dirty_bitmap)
		vfree(free->dirty_bitmap);

M
Marcelo Tosatti 已提交
377 378 379
	if (!dont || free->lpage_info != dont->lpage_info)
		vfree(free->lpage_info);

A
Avi Kivity 已提交
380
	free->npages = 0;
A
Al Viro 已提交
381
	free->dirty_bitmap = NULL;
382
	free->rmap = NULL;
M
Marcelo Tosatti 已提交
383
	free->lpage_info = NULL;
A
Avi Kivity 已提交
384 385
}

386
void kvm_free_physmem(struct kvm *kvm)
A
Avi Kivity 已提交
387 388 389 390
{
	int i;

	for (i = 0; i < kvm->nmemslots; ++i)
A
Al Viro 已提交
391
		kvm_free_physmem_slot(&kvm->memslots[i], NULL);
A
Avi Kivity 已提交
392 393
}

394 395
static void kvm_destroy_vm(struct kvm *kvm)
{
396 397
	struct mm_struct *mm = kvm->mm;

398 399 400
	spin_lock(&kvm_lock);
	list_del(&kvm->vm_list);
	spin_unlock(&kvm_lock);
401
	kvm_io_bus_destroy(&kvm->pio_bus);
402
	kvm_io_bus_destroy(&kvm->mmio_bus);
403 404 405
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
	if (kvm->coalesced_mmio_ring != NULL)
		free_page((unsigned long)kvm->coalesced_mmio_ring);
406 407 408
#endif
#if defined(CONFIG_MMU_NOTIFIER) && defined(KVM_ARCH_WANT_MMU_NOTIFIER)
	mmu_notifier_unregister(&kvm->mmu_notifier, kvm->mm);
409
#endif
410
	kvm_arch_destroy_vm(kvm);
411
	mmdrop(mm);
412 413
}

I
Izik Eidus 已提交
414 415 416 417 418 419 420 421 422 423 424 425 426 427
void kvm_get_kvm(struct kvm *kvm)
{
	atomic_inc(&kvm->users_count);
}
EXPORT_SYMBOL_GPL(kvm_get_kvm);

void kvm_put_kvm(struct kvm *kvm)
{
	if (atomic_dec_and_test(&kvm->users_count))
		kvm_destroy_vm(kvm);
}
EXPORT_SYMBOL_GPL(kvm_put_kvm);


428 429 430 431
static int kvm_vm_release(struct inode *inode, struct file *filp)
{
	struct kvm *kvm = filp->private_data;

I
Izik Eidus 已提交
432
	kvm_put_kvm(kvm);
A
Avi Kivity 已提交
433 434 435 436 437 438 439 440
	return 0;
}

/*
 * Allocate some memory and give it an address in the guest physical address
 * space.
 *
 * Discontiguous memory is allowed, mostly for framebuffers.
441
 *
442
 * Must be called holding mmap_sem for write.
A
Avi Kivity 已提交
443
 */
444 445 446
int __kvm_set_memory_region(struct kvm *kvm,
			    struct kvm_userspace_memory_region *mem,
			    int user_alloc)
A
Avi Kivity 已提交
447 448 449 450 451 452 453 454 455 456 457 458 459 460
{
	int r;
	gfn_t base_gfn;
	unsigned long npages;
	unsigned long i;
	struct kvm_memory_slot *memslot;
	struct kvm_memory_slot old, new;

	r = -EINVAL;
	/* General sanity checks */
	if (mem->memory_size & (PAGE_SIZE - 1))
		goto out;
	if (mem->guest_phys_addr & (PAGE_SIZE - 1))
		goto out;
461
	if (mem->slot >= KVM_MEMORY_SLOTS + KVM_PRIVATE_MEM_SLOTS)
A
Avi Kivity 已提交
462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481
		goto out;
	if (mem->guest_phys_addr + mem->memory_size < mem->guest_phys_addr)
		goto out;

	memslot = &kvm->memslots[mem->slot];
	base_gfn = mem->guest_phys_addr >> PAGE_SHIFT;
	npages = mem->memory_size >> PAGE_SHIFT;

	if (!npages)
		mem->flags &= ~KVM_MEM_LOG_DIRTY_PAGES;

	new = old = *memslot;

	new.base_gfn = base_gfn;
	new.npages = npages;
	new.flags = mem->flags;

	/* Disallow changing a memory slot's size. */
	r = -EINVAL;
	if (npages && old.npages && npages != old.npages)
482
		goto out_free;
A
Avi Kivity 已提交
483 484 485 486 487 488 489 490 491 492

	/* Check for overlaps */
	r = -EEXIST;
	for (i = 0; i < KVM_MEMORY_SLOTS; ++i) {
		struct kvm_memory_slot *s = &kvm->memslots[i];

		if (s == memslot)
			continue;
		if (!((base_gfn + npages <= s->base_gfn) ||
		      (base_gfn >= s->base_gfn + s->npages)))
493
			goto out_free;
A
Avi Kivity 已提交
494 495 496 497
	}

	/* Free page dirty bitmap if unneeded */
	if (!(new.flags & KVM_MEM_LOG_DIRTY_PAGES))
A
Al Viro 已提交
498
		new.dirty_bitmap = NULL;
A
Avi Kivity 已提交
499 500 501 502

	r = -ENOMEM;

	/* Allocate if a slot is being created */
503
#ifndef CONFIG_S390
504
	if (npages && !new.rmap) {
M
Mike Day 已提交
505
		new.rmap = vmalloc(npages * sizeof(struct page *));
506 507

		if (!new.rmap)
508
			goto out_free;
509 510

		memset(new.rmap, 0, npages * sizeof(*new.rmap));
511

512
		new.user_alloc = user_alloc;
513 514 515 516 517 518 519 520 521
		/*
		 * hva_to_rmmap() serialzies with the mmu_lock and to be
		 * safe it has to ignore memslots with !user_alloc &&
		 * !userspace_addr.
		 */
		if (user_alloc)
			new.userspace_addr = mem->userspace_addr;
		else
			new.userspace_addr = 0;
A
Avi Kivity 已提交
522
	}
M
Marcelo Tosatti 已提交
523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541
	if (npages && !new.lpage_info) {
		int largepages = npages / KVM_PAGES_PER_HPAGE;
		if (npages % KVM_PAGES_PER_HPAGE)
			largepages++;
		if (base_gfn % KVM_PAGES_PER_HPAGE)
			largepages++;

		new.lpage_info = vmalloc(largepages * sizeof(*new.lpage_info));

		if (!new.lpage_info)
			goto out_free;

		memset(new.lpage_info, 0, largepages * sizeof(*new.lpage_info));

		if (base_gfn % KVM_PAGES_PER_HPAGE)
			new.lpage_info[0].write_count = 1;
		if ((base_gfn+npages) % KVM_PAGES_PER_HPAGE)
			new.lpage_info[largepages-1].write_count = 1;
	}
A
Avi Kivity 已提交
542 543 544 545 546 547 548

	/* Allocate page dirty bitmap if needed */
	if ((new.flags & KVM_MEM_LOG_DIRTY_PAGES) && !new.dirty_bitmap) {
		unsigned dirty_bytes = ALIGN(npages, BITS_PER_LONG) / 8;

		new.dirty_bitmap = vmalloc(dirty_bytes);
		if (!new.dirty_bitmap)
549
			goto out_free;
A
Avi Kivity 已提交
550 551
		memset(new.dirty_bitmap, 0, dirty_bytes);
	}
552
#endif /* not defined CONFIG_S390 */
A
Avi Kivity 已提交
553

554 555 556
	if (!npages)
		kvm_arch_flush_shadow(kvm);

557 558 559 560
	spin_lock(&kvm->mmu_lock);
	if (mem->slot >= kvm->nmemslots)
		kvm->nmemslots = mem->slot + 1;

561
	*memslot = new;
562
	spin_unlock(&kvm->mmu_lock);
563

564 565
	r = kvm_arch_set_memory_region(kvm, mem, old, user_alloc);
	if (r) {
566
		spin_lock(&kvm->mmu_lock);
567
		*memslot = old;
568
		spin_unlock(&kvm->mmu_lock);
569
		goto out_free;
570 571
	}

A
Avi Kivity 已提交
572 573 574
	kvm_free_physmem_slot(&old, &new);
	return 0;

575
out_free:
A
Avi Kivity 已提交
576 577 578
	kvm_free_physmem_slot(&new, &old);
out:
	return r;
579 580

}
581 582 583 584 585 586 587 588
EXPORT_SYMBOL_GPL(__kvm_set_memory_region);

int kvm_set_memory_region(struct kvm *kvm,
			  struct kvm_userspace_memory_region *mem,
			  int user_alloc)
{
	int r;

589
	down_write(&kvm->slots_lock);
590
	r = __kvm_set_memory_region(kvm, mem, user_alloc);
591
	up_write(&kvm->slots_lock);
592 593
	return r;
}
594 595
EXPORT_SYMBOL_GPL(kvm_set_memory_region);

596 597 598 599
int kvm_vm_ioctl_set_memory_region(struct kvm *kvm,
				   struct
				   kvm_userspace_memory_region *mem,
				   int user_alloc)
600
{
601 602
	if (mem->slot >= KVM_MEMORY_SLOTS)
		return -EINVAL;
603
	return kvm_set_memory_region(kvm, mem, user_alloc);
A
Avi Kivity 已提交
604 605
}

606 607
int kvm_get_dirty_log(struct kvm *kvm,
			struct kvm_dirty_log *log, int *is_dirty)
A
Avi Kivity 已提交
608 609 610 611 612 613 614 615 616 617 618 619 620 621 622
{
	struct kvm_memory_slot *memslot;
	int r, i;
	int n;
	unsigned long any = 0;

	r = -EINVAL;
	if (log->slot >= KVM_MEMORY_SLOTS)
		goto out;

	memslot = &kvm->memslots[log->slot];
	r = -ENOENT;
	if (!memslot->dirty_bitmap)
		goto out;

623
	n = ALIGN(memslot->npages, BITS_PER_LONG) / 8;
A
Avi Kivity 已提交
624

625
	for (i = 0; !any && i < n/sizeof(long); ++i)
A
Avi Kivity 已提交
626 627 628 629 630 631
		any = memslot->dirty_bitmap[i];

	r = -EFAULT;
	if (copy_to_user(log->dirty_bitmap, memslot->dirty_bitmap, n))
		goto out;

632 633
	if (any)
		*is_dirty = 1;
A
Avi Kivity 已提交
634 635 636 637 638 639

	r = 0;
out:
	return r;
}

640 641 642 643 644 645
int is_error_page(struct page *page)
{
	return page == bad_page;
}
EXPORT_SYMBOL_GPL(is_error_page);

646 647 648 649 650 651
int is_error_pfn(pfn_t pfn)
{
	return pfn == bad_pfn;
}
EXPORT_SYMBOL_GPL(is_error_pfn);

I
Izik Eidus 已提交
652 653 654 655 656 657 658 659 660 661 662
static inline unsigned long bad_hva(void)
{
	return PAGE_OFFSET;
}

int kvm_is_error_hva(unsigned long addr)
{
	return addr == bad_hva();
}
EXPORT_SYMBOL_GPL(kvm_is_error_hva);

663
static struct kvm_memory_slot *__gfn_to_memslot(struct kvm *kvm, gfn_t gfn)
A
Avi Kivity 已提交
664 665 666 667 668 669 670 671 672 673
{
	int i;

	for (i = 0; i < kvm->nmemslots; ++i) {
		struct kvm_memory_slot *memslot = &kvm->memslots[i];

		if (gfn >= memslot->base_gfn
		    && gfn < memslot->base_gfn + memslot->npages)
			return memslot;
	}
A
Al Viro 已提交
674
	return NULL;
A
Avi Kivity 已提交
675
}
676 677 678 679 680 681

struct kvm_memory_slot *gfn_to_memslot(struct kvm *kvm, gfn_t gfn)
{
	gfn = unalias_gfn(kvm, gfn);
	return __gfn_to_memslot(kvm, gfn);
}
A
Avi Kivity 已提交
682

683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698
int kvm_is_visible_gfn(struct kvm *kvm, gfn_t gfn)
{
	int i;

	gfn = unalias_gfn(kvm, gfn);
	for (i = 0; i < KVM_MEMORY_SLOTS; ++i) {
		struct kvm_memory_slot *memslot = &kvm->memslots[i];

		if (gfn >= memslot->base_gfn
		    && gfn < memslot->base_gfn + memslot->npages)
			return 1;
	}
	return 0;
}
EXPORT_SYMBOL_GPL(kvm_is_visible_gfn);

M
Marcelo Tosatti 已提交
699
unsigned long gfn_to_hva(struct kvm *kvm, gfn_t gfn)
I
Izik Eidus 已提交
700 701 702 703 704 705 706 707 708
{
	struct kvm_memory_slot *slot;

	gfn = unalias_gfn(kvm, gfn);
	slot = __gfn_to_memslot(kvm, gfn);
	if (!slot)
		return bad_hva();
	return (slot->userspace_addr + (gfn - slot->base_gfn) * PAGE_SIZE);
}
709
EXPORT_SYMBOL_GPL(gfn_to_hva);
I
Izik Eidus 已提交
710

711 712 713
/*
 * Requires current->mm->mmap_sem to be held
 */
714
pfn_t gfn_to_pfn(struct kvm *kvm, gfn_t gfn)
A
Avi Kivity 已提交
715
{
716
	struct page *page[1];
I
Izik Eidus 已提交
717
	unsigned long addr;
718
	int npages;
719
	pfn_t pfn;
A
Avi Kivity 已提交
720

721 722
	might_sleep();

I
Izik Eidus 已提交
723 724
	addr = gfn_to_hva(kvm, gfn);
	if (kvm_is_error_hva(addr)) {
725
		get_page(bad_page);
726
		return page_to_pfn(bad_page);
727
	}
728

I
Izik Eidus 已提交
729 730 731
	npages = get_user_pages(current, current->mm, addr, 1, 1, 1, page,
				NULL);

732 733 734 735 736 737 738 739 740 741 742 743 744 745
	if (unlikely(npages != 1)) {
		struct vm_area_struct *vma;

		vma = find_vma(current->mm, addr);
		if (vma == NULL || addr < vma->vm_start ||
		    !(vma->vm_flags & VM_PFNMAP)) {
			get_page(bad_page);
			return page_to_pfn(bad_page);
		}

		pfn = ((addr - vma->vm_start) >> PAGE_SHIFT) + vma->vm_pgoff;
		BUG_ON(pfn_valid(pfn));
	} else
		pfn = page_to_pfn(page[0]);
746

747
	return pfn;
748 749 750 751 752 753
}

EXPORT_SYMBOL_GPL(gfn_to_pfn);

struct page *gfn_to_page(struct kvm *kvm, gfn_t gfn)
{
754 755 756 757 758 759 760 761 762 763
	pfn_t pfn;

	pfn = gfn_to_pfn(kvm, gfn);
	if (pfn_valid(pfn))
		return pfn_to_page(pfn);

	WARN_ON(!pfn_valid(pfn));

	get_page(bad_page);
	return bad_page;
A
Avi Kivity 已提交
764
}
765

A
Avi Kivity 已提交
766 767
EXPORT_SYMBOL_GPL(gfn_to_page);

768 769
void kvm_release_page_clean(struct page *page)
{
770
	kvm_release_pfn_clean(page_to_pfn(page));
771 772 773
}
EXPORT_SYMBOL_GPL(kvm_release_page_clean);

774 775
void kvm_release_pfn_clean(pfn_t pfn)
{
776 777
	if (pfn_valid(pfn))
		put_page(pfn_to_page(pfn));
778 779 780
}
EXPORT_SYMBOL_GPL(kvm_release_pfn_clean);

781
void kvm_release_page_dirty(struct page *page)
782
{
783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801
	kvm_release_pfn_dirty(page_to_pfn(page));
}
EXPORT_SYMBOL_GPL(kvm_release_page_dirty);

void kvm_release_pfn_dirty(pfn_t pfn)
{
	kvm_set_pfn_dirty(pfn);
	kvm_release_pfn_clean(pfn);
}
EXPORT_SYMBOL_GPL(kvm_release_pfn_dirty);

void kvm_set_page_dirty(struct page *page)
{
	kvm_set_pfn_dirty(page_to_pfn(page));
}
EXPORT_SYMBOL_GPL(kvm_set_page_dirty);

void kvm_set_pfn_dirty(pfn_t pfn)
{
802 803 804 805 806
	if (pfn_valid(pfn)) {
		struct page *page = pfn_to_page(pfn);
		if (!PageReserved(page))
			SetPageDirty(page);
	}
807
}
808 809 810 811
EXPORT_SYMBOL_GPL(kvm_set_pfn_dirty);

void kvm_set_pfn_accessed(pfn_t pfn)
{
812 813
	if (pfn_valid(pfn))
		mark_page_accessed(pfn_to_page(pfn));
814 815 816 817 818
}
EXPORT_SYMBOL_GPL(kvm_set_pfn_accessed);

void kvm_get_pfn(pfn_t pfn)
{
819 820
	if (pfn_valid(pfn))
		get_page(pfn_to_page(pfn));
821 822
}
EXPORT_SYMBOL_GPL(kvm_get_pfn);
823

824 825 826 827 828 829 830 831 832 833 834
static int next_segment(unsigned long len, int offset)
{
	if (len > PAGE_SIZE - offset)
		return PAGE_SIZE - offset;
	else
		return len;
}

int kvm_read_guest_page(struct kvm *kvm, gfn_t gfn, void *data, int offset,
			int len)
{
835 836
	int r;
	unsigned long addr;
837

838 839 840 841 842
	addr = gfn_to_hva(kvm, gfn);
	if (kvm_is_error_hva(addr))
		return -EFAULT;
	r = copy_from_user(data, (void __user *)addr + offset, len);
	if (r)
843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867
		return -EFAULT;
	return 0;
}
EXPORT_SYMBOL_GPL(kvm_read_guest_page);

int kvm_read_guest(struct kvm *kvm, gpa_t gpa, void *data, unsigned long len)
{
	gfn_t gfn = gpa >> PAGE_SHIFT;
	int seg;
	int offset = offset_in_page(gpa);
	int ret;

	while ((seg = next_segment(len, offset)) != 0) {
		ret = kvm_read_guest_page(kvm, gfn, data, offset, seg);
		if (ret < 0)
			return ret;
		offset = 0;
		len -= seg;
		data += seg;
		++gfn;
	}
	return 0;
}
EXPORT_SYMBOL_GPL(kvm_read_guest);

868 869 870 871 872 873 874 875 876 877 878
int kvm_read_guest_atomic(struct kvm *kvm, gpa_t gpa, void *data,
			  unsigned long len)
{
	int r;
	unsigned long addr;
	gfn_t gfn = gpa >> PAGE_SHIFT;
	int offset = offset_in_page(gpa);

	addr = gfn_to_hva(kvm, gfn);
	if (kvm_is_error_hva(addr))
		return -EFAULT;
879
	pagefault_disable();
880
	r = __copy_from_user_inatomic(data, (void __user *)addr + offset, len);
881
	pagefault_enable();
882 883 884 885 886 887
	if (r)
		return -EFAULT;
	return 0;
}
EXPORT_SYMBOL(kvm_read_guest_atomic);

888 889 890
int kvm_write_guest_page(struct kvm *kvm, gfn_t gfn, const void *data,
			 int offset, int len)
{
891 892
	int r;
	unsigned long addr;
893

894 895 896 897 898
	addr = gfn_to_hva(kvm, gfn);
	if (kvm_is_error_hva(addr))
		return -EFAULT;
	r = copy_to_user((void __user *)addr + offset, data, len);
	if (r)
899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926
		return -EFAULT;
	mark_page_dirty(kvm, gfn);
	return 0;
}
EXPORT_SYMBOL_GPL(kvm_write_guest_page);

int kvm_write_guest(struct kvm *kvm, gpa_t gpa, const void *data,
		    unsigned long len)
{
	gfn_t gfn = gpa >> PAGE_SHIFT;
	int seg;
	int offset = offset_in_page(gpa);
	int ret;

	while ((seg = next_segment(len, offset)) != 0) {
		ret = kvm_write_guest_page(kvm, gfn, data, offset, seg);
		if (ret < 0)
			return ret;
		offset = 0;
		len -= seg;
		data += seg;
		++gfn;
	}
	return 0;
}

int kvm_clear_guest_page(struct kvm *kvm, gfn_t gfn, int offset, int len)
{
927
	return kvm_write_guest_page(kvm, gfn, empty_zero_page, offset, len);
928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949
}
EXPORT_SYMBOL_GPL(kvm_clear_guest_page);

int kvm_clear_guest(struct kvm *kvm, gpa_t gpa, unsigned long len)
{
	gfn_t gfn = gpa >> PAGE_SHIFT;
	int seg;
	int offset = offset_in_page(gpa);
	int ret;

        while ((seg = next_segment(len, offset)) != 0) {
		ret = kvm_clear_guest_page(kvm, gfn, offset, seg);
		if (ret < 0)
			return ret;
		offset = 0;
		len -= seg;
		++gfn;
	}
	return 0;
}
EXPORT_SYMBOL_GPL(kvm_clear_guest);

A
Avi Kivity 已提交
950 951
void mark_page_dirty(struct kvm *kvm, gfn_t gfn)
{
952
	struct kvm_memory_slot *memslot;
A
Avi Kivity 已提交
953

954
	gfn = unalias_gfn(kvm, gfn);
R
Rusty Russell 已提交
955 956 957
	memslot = __gfn_to_memslot(kvm, gfn);
	if (memslot && memslot->dirty_bitmap) {
		unsigned long rel_gfn = gfn - memslot->base_gfn;
A
Avi Kivity 已提交
958

R
Rusty Russell 已提交
959 960 961
		/* avoid RMW */
		if (!test_bit(rel_gfn, memslot->dirty_bitmap))
			set_bit(rel_gfn, memslot->dirty_bitmap);
A
Avi Kivity 已提交
962 963 964
	}
}

E
Eddie Dong 已提交
965 966 967
/*
 * The vCPU has executed a HLT instruction with in-kernel mode enabled.
 */
968
void kvm_vcpu_block(struct kvm_vcpu *vcpu)
969
{
970 971 972 973 974 975 976 977 978 979 980 981 982 983
	DEFINE_WAIT(wait);

	for (;;) {
		prepare_to_wait(&vcpu->wq, &wait, TASK_INTERRUPTIBLE);

		if (kvm_cpu_has_interrupt(vcpu))
			break;
		if (kvm_cpu_has_pending_timer(vcpu))
			break;
		if (kvm_arch_vcpu_runnable(vcpu))
			break;
		if (signal_pending(current))
			break;

E
Eddie Dong 已提交
984 985 986 987
		vcpu_put(vcpu);
		schedule();
		vcpu_load(vcpu);
	}
988

989
	finish_wait(&vcpu->wq, &wait);
E
Eddie Dong 已提交
990 991
}

A
Avi Kivity 已提交
992 993
void kvm_resched(struct kvm_vcpu *vcpu)
{
994 995
	if (!need_resched())
		return;
A
Avi Kivity 已提交
996 997 998 999
	cond_resched();
}
EXPORT_SYMBOL_GPL(kvm_resched);

1000
static int kvm_vcpu_fault(struct vm_area_struct *vma, struct vm_fault *vmf)
1001 1002 1003 1004
{
	struct kvm_vcpu *vcpu = vma->vm_file->private_data;
	struct page *page;

1005
	if (vmf->pgoff == 0)
1006
		page = virt_to_page(vcpu->run);
A
Avi Kivity 已提交
1007
#ifdef CONFIG_X86
1008
	else if (vmf->pgoff == KVM_PIO_PAGE_OFFSET)
1009
		page = virt_to_page(vcpu->arch.pio_data);
1010 1011 1012 1013
#endif
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
	else if (vmf->pgoff == KVM_COALESCED_MMIO_PAGE_OFFSET)
		page = virt_to_page(vcpu->kvm->coalesced_mmio_ring);
A
Avi Kivity 已提交
1014
#endif
1015
	else
1016
		return VM_FAULT_SIGBUS;
1017
	get_page(page);
1018 1019
	vmf->page = page;
	return 0;
1020 1021 1022
}

static struct vm_operations_struct kvm_vcpu_vm_ops = {
1023
	.fault = kvm_vcpu_fault,
1024 1025 1026 1027 1028 1029 1030 1031
};

static int kvm_vcpu_mmap(struct file *file, struct vm_area_struct *vma)
{
	vma->vm_ops = &kvm_vcpu_vm_ops;
	return 0;
}

A
Avi Kivity 已提交
1032 1033 1034 1035
static int kvm_vcpu_release(struct inode *inode, struct file *filp)
{
	struct kvm_vcpu *vcpu = filp->private_data;

A
Al Viro 已提交
1036
	kvm_put_kvm(vcpu->kvm);
A
Avi Kivity 已提交
1037 1038 1039
	return 0;
}

1040
static const struct file_operations kvm_vcpu_fops = {
A
Avi Kivity 已提交
1041 1042 1043
	.release        = kvm_vcpu_release,
	.unlocked_ioctl = kvm_vcpu_ioctl,
	.compat_ioctl   = kvm_vcpu_ioctl,
1044
	.mmap           = kvm_vcpu_mmap,
A
Avi Kivity 已提交
1045 1046 1047 1048 1049 1050 1051
};

/*
 * Allocates an inode for the vcpu.
 */
static int create_vcpu_fd(struct kvm_vcpu *vcpu)
{
1052
	int fd = anon_inode_getfd("kvm-vcpu", &kvm_vcpu_fops, vcpu, 0);
A
Al Viro 已提交
1053
	if (fd < 0)
A
Al Viro 已提交
1054
		kvm_put_kvm(vcpu->kvm);
A
Avi Kivity 已提交
1055 1056 1057
	return fd;
}

1058 1059 1060 1061 1062 1063 1064 1065 1066
/*
 * Creates some virtual cpus.  Good luck creating more than one.
 */
static int kvm_vm_ioctl_create_vcpu(struct kvm *kvm, int n)
{
	int r;
	struct kvm_vcpu *vcpu;

	if (!valid_vcpu(n))
R
Rusty Russell 已提交
1067
		return -EINVAL;
1068

1069
	vcpu = kvm_arch_vcpu_create(kvm, n);
R
Rusty Russell 已提交
1070 1071
	if (IS_ERR(vcpu))
		return PTR_ERR(vcpu);
1072

1073 1074
	preempt_notifier_init(&vcpu->preempt_notifier, &kvm_preempt_ops);

1075 1076 1077 1078
	r = kvm_arch_vcpu_setup(vcpu);
	if (r)
		goto vcpu_destroy;

S
Shaohua Li 已提交
1079
	mutex_lock(&kvm->lock);
R
Rusty Russell 已提交
1080 1081
	if (kvm->vcpus[n]) {
		r = -EEXIST;
S
Shaohua Li 已提交
1082
		mutex_unlock(&kvm->lock);
1083
		goto vcpu_destroy;
R
Rusty Russell 已提交
1084 1085
	}
	kvm->vcpus[n] = vcpu;
S
Shaohua Li 已提交
1086
	mutex_unlock(&kvm->lock);
1087

R
Rusty Russell 已提交
1088
	/* Now it's all set up, let userspace reach it */
A
Al Viro 已提交
1089
	kvm_get_kvm(kvm);
A
Avi Kivity 已提交
1090 1091
	r = create_vcpu_fd(vcpu);
	if (r < 0)
R
Rusty Russell 已提交
1092 1093
		goto unlink;
	return r;
1094

R
Rusty Russell 已提交
1095
unlink:
S
Shaohua Li 已提交
1096
	mutex_lock(&kvm->lock);
R
Rusty Russell 已提交
1097
	kvm->vcpus[n] = NULL;
S
Shaohua Li 已提交
1098
	mutex_unlock(&kvm->lock);
1099
vcpu_destroy:
1100
	kvm_arch_vcpu_destroy(vcpu);
1101 1102 1103
	return r;
}

A
Avi Kivity 已提交
1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114
static int kvm_vcpu_ioctl_set_sigmask(struct kvm_vcpu *vcpu, sigset_t *sigset)
{
	if (sigset) {
		sigdelsetmask(sigset, sigmask(SIGKILL)|sigmask(SIGSTOP));
		vcpu->sigset_active = 1;
		vcpu->sigset = *sigset;
	} else
		vcpu->sigset_active = 0;
	return 0;
}

A
Avi Kivity 已提交
1115 1116
static long kvm_vcpu_ioctl(struct file *filp,
			   unsigned int ioctl, unsigned long arg)
A
Avi Kivity 已提交
1117
{
A
Avi Kivity 已提交
1118
	struct kvm_vcpu *vcpu = filp->private_data;
A
Al Viro 已提交
1119
	void __user *argp = (void __user *)arg;
1120
	int r;
A
Avi Kivity 已提交
1121

1122 1123
	if (vcpu->kvm->mm != current->mm)
		return -EIO;
A
Avi Kivity 已提交
1124
	switch (ioctl) {
1125
	case KVM_RUN:
1126 1127 1128
		r = -EINVAL;
		if (arg)
			goto out;
1129
		r = kvm_arch_vcpu_ioctl_run(vcpu, vcpu->run);
A
Avi Kivity 已提交
1130 1131
		break;
	case KVM_GET_REGS: {
1132
		struct kvm_regs *kvm_regs;
A
Avi Kivity 已提交
1133

1134 1135 1136
		r = -ENOMEM;
		kvm_regs = kzalloc(sizeof(struct kvm_regs), GFP_KERNEL);
		if (!kvm_regs)
A
Avi Kivity 已提交
1137
			goto out;
1138 1139 1140
		r = kvm_arch_vcpu_ioctl_get_regs(vcpu, kvm_regs);
		if (r)
			goto out_free1;
A
Avi Kivity 已提交
1141
		r = -EFAULT;
1142 1143
		if (copy_to_user(argp, kvm_regs, sizeof(struct kvm_regs)))
			goto out_free1;
A
Avi Kivity 已提交
1144
		r = 0;
1145 1146
out_free1:
		kfree(kvm_regs);
A
Avi Kivity 已提交
1147 1148 1149
		break;
	}
	case KVM_SET_REGS: {
1150
		struct kvm_regs *kvm_regs;
A
Avi Kivity 已提交
1151

1152 1153 1154
		r = -ENOMEM;
		kvm_regs = kzalloc(sizeof(struct kvm_regs), GFP_KERNEL);
		if (!kvm_regs)
A
Avi Kivity 已提交
1155
			goto out;
1156 1157 1158 1159
		r = -EFAULT;
		if (copy_from_user(kvm_regs, argp, sizeof(struct kvm_regs)))
			goto out_free2;
		r = kvm_arch_vcpu_ioctl_set_regs(vcpu, kvm_regs);
A
Avi Kivity 已提交
1160
		if (r)
1161
			goto out_free2;
A
Avi Kivity 已提交
1162
		r = 0;
1163 1164
out_free2:
		kfree(kvm_regs);
A
Avi Kivity 已提交
1165 1166 1167 1168 1169
		break;
	}
	case KVM_GET_SREGS: {
		struct kvm_sregs kvm_sregs;

A
Avi Kivity 已提交
1170
		memset(&kvm_sregs, 0, sizeof kvm_sregs);
1171
		r = kvm_arch_vcpu_ioctl_get_sregs(vcpu, &kvm_sregs);
A
Avi Kivity 已提交
1172 1173 1174
		if (r)
			goto out;
		r = -EFAULT;
A
Al Viro 已提交
1175
		if (copy_to_user(argp, &kvm_sregs, sizeof kvm_sregs))
A
Avi Kivity 已提交
1176 1177 1178 1179 1180 1181 1182 1183
			goto out;
		r = 0;
		break;
	}
	case KVM_SET_SREGS: {
		struct kvm_sregs kvm_sregs;

		r = -EFAULT;
A
Al Viro 已提交
1184
		if (copy_from_user(&kvm_sregs, argp, sizeof kvm_sregs))
A
Avi Kivity 已提交
1185
			goto out;
1186
		r = kvm_arch_vcpu_ioctl_set_sregs(vcpu, &kvm_sregs);
A
Avi Kivity 已提交
1187 1188 1189 1190 1191
		if (r)
			goto out;
		r = 0;
		break;
	}
1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215
	case KVM_GET_MP_STATE: {
		struct kvm_mp_state mp_state;

		r = kvm_arch_vcpu_ioctl_get_mpstate(vcpu, &mp_state);
		if (r)
			goto out;
		r = -EFAULT;
		if (copy_to_user(argp, &mp_state, sizeof mp_state))
			goto out;
		r = 0;
		break;
	}
	case KVM_SET_MP_STATE: {
		struct kvm_mp_state mp_state;

		r = -EFAULT;
		if (copy_from_user(&mp_state, argp, sizeof mp_state))
			goto out;
		r = kvm_arch_vcpu_ioctl_set_mpstate(vcpu, &mp_state);
		if (r)
			goto out;
		r = 0;
		break;
	}
A
Avi Kivity 已提交
1216 1217 1218 1219
	case KVM_TRANSLATE: {
		struct kvm_translation tr;

		r = -EFAULT;
A
Al Viro 已提交
1220
		if (copy_from_user(&tr, argp, sizeof tr))
A
Avi Kivity 已提交
1221
			goto out;
1222
		r = kvm_arch_vcpu_ioctl_translate(vcpu, &tr);
A
Avi Kivity 已提交
1223 1224 1225
		if (r)
			goto out;
		r = -EFAULT;
A
Al Viro 已提交
1226
		if (copy_to_user(argp, &tr, sizeof tr))
A
Avi Kivity 已提交
1227 1228 1229 1230 1231 1232 1233 1234
			goto out;
		r = 0;
		break;
	}
	case KVM_DEBUG_GUEST: {
		struct kvm_debug_guest dbg;

		r = -EFAULT;
A
Al Viro 已提交
1235
		if (copy_from_user(&dbg, argp, sizeof dbg))
A
Avi Kivity 已提交
1236
			goto out;
1237
		r = kvm_arch_vcpu_ioctl_debug_guest(vcpu, &dbg);
A
Avi Kivity 已提交
1238 1239 1240 1241 1242
		if (r)
			goto out;
		r = 0;
		break;
	}
A
Avi Kivity 已提交
1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258 1259 1260 1261 1262 1263 1264 1265
	case KVM_SET_SIGNAL_MASK: {
		struct kvm_signal_mask __user *sigmask_arg = argp;
		struct kvm_signal_mask kvm_sigmask;
		sigset_t sigset, *p;

		p = NULL;
		if (argp) {
			r = -EFAULT;
			if (copy_from_user(&kvm_sigmask, argp,
					   sizeof kvm_sigmask))
				goto out;
			r = -EINVAL;
			if (kvm_sigmask.len != sizeof sigset)
				goto out;
			r = -EFAULT;
			if (copy_from_user(&sigset, sigmask_arg->sigset,
					   sizeof sigset))
				goto out;
			p = &sigset;
		}
		r = kvm_vcpu_ioctl_set_sigmask(vcpu, &sigset);
		break;
	}
A
Avi Kivity 已提交
1266 1267 1268 1269
	case KVM_GET_FPU: {
		struct kvm_fpu fpu;

		memset(&fpu, 0, sizeof fpu);
1270
		r = kvm_arch_vcpu_ioctl_get_fpu(vcpu, &fpu);
A
Avi Kivity 已提交
1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284
		if (r)
			goto out;
		r = -EFAULT;
		if (copy_to_user(argp, &fpu, sizeof fpu))
			goto out;
		r = 0;
		break;
	}
	case KVM_SET_FPU: {
		struct kvm_fpu fpu;

		r = -EFAULT;
		if (copy_from_user(&fpu, argp, sizeof fpu))
			goto out;
1285
		r = kvm_arch_vcpu_ioctl_set_fpu(vcpu, &fpu);
A
Avi Kivity 已提交
1286 1287 1288 1289 1290
		if (r)
			goto out;
		r = 0;
		break;
	}
A
Avi Kivity 已提交
1291
	default:
1292
		r = kvm_arch_vcpu_ioctl(filp, ioctl, arg);
A
Avi Kivity 已提交
1293 1294 1295 1296 1297 1298 1299 1300 1301 1302
	}
out:
	return r;
}

static long kvm_vm_ioctl(struct file *filp,
			   unsigned int ioctl, unsigned long arg)
{
	struct kvm *kvm = filp->private_data;
	void __user *argp = (void __user *)arg;
1303
	int r;
A
Avi Kivity 已提交
1304

1305 1306
	if (kvm->mm != current->mm)
		return -EIO;
A
Avi Kivity 已提交
1307 1308 1309 1310 1311 1312
	switch (ioctl) {
	case KVM_CREATE_VCPU:
		r = kvm_vm_ioctl_create_vcpu(kvm, arg);
		if (r < 0)
			goto out;
		break;
1313 1314 1315 1316 1317 1318 1319 1320 1321
	case KVM_SET_USER_MEMORY_REGION: {
		struct kvm_userspace_memory_region kvm_userspace_mem;

		r = -EFAULT;
		if (copy_from_user(&kvm_userspace_mem, argp,
						sizeof kvm_userspace_mem))
			goto out;

		r = kvm_vm_ioctl_set_memory_region(kvm, &kvm_userspace_mem, 1);
A
Avi Kivity 已提交
1322 1323 1324 1325 1326 1327 1328 1329
		if (r)
			goto out;
		break;
	}
	case KVM_GET_DIRTY_LOG: {
		struct kvm_dirty_log log;

		r = -EFAULT;
A
Al Viro 已提交
1330
		if (copy_from_user(&log, argp, sizeof log))
A
Avi Kivity 已提交
1331
			goto out;
1332
		r = kvm_vm_ioctl_get_dirty_log(kvm, &log);
A
Avi Kivity 已提交
1333 1334 1335 1336
		if (r)
			goto out;
		break;
	}
1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
	case KVM_REGISTER_COALESCED_MMIO: {
		struct kvm_coalesced_mmio_zone zone;
		r = -EFAULT;
		if (copy_from_user(&zone, argp, sizeof zone))
			goto out;
		r = -ENXIO;
		r = kvm_vm_ioctl_register_coalesced_mmio(kvm, &zone);
		if (r)
			goto out;
		r = 0;
		break;
	}
	case KVM_UNREGISTER_COALESCED_MMIO: {
		struct kvm_coalesced_mmio_zone zone;
		r = -EFAULT;
		if (copy_from_user(&zone, argp, sizeof zone))
			goto out;
		r = -ENXIO;
		r = kvm_vm_ioctl_unregister_coalesced_mmio(kvm, &zone);
		if (r)
			goto out;
		r = 0;
		break;
	}
#endif
1363
	default:
1364
		r = kvm_arch_vm_ioctl(filp, ioctl, arg);
1365 1366 1367 1368 1369
	}
out:
	return r;
}

1370
static int kvm_vm_fault(struct vm_area_struct *vma, struct vm_fault *vmf)
1371 1372 1373 1374
{
	struct kvm *kvm = vma->vm_file->private_data;
	struct page *page;

1375 1376
	if (!kvm_is_visible_gfn(kvm, vmf->pgoff))
		return VM_FAULT_SIGBUS;
1377
	page = gfn_to_page(kvm, vmf->pgoff);
1378
	if (is_error_page(page)) {
1379
		kvm_release_page_clean(page);
1380
		return VM_FAULT_SIGBUS;
1381
	}
1382 1383
	vmf->page = page;
	return 0;
1384 1385 1386
}

static struct vm_operations_struct kvm_vm_vm_ops = {
1387
	.fault = kvm_vm_fault,
1388 1389 1390 1391 1392 1393 1394 1395
};

static int kvm_vm_mmap(struct file *file, struct vm_area_struct *vma)
{
	vma->vm_ops = &kvm_vm_vm_ops;
	return 0;
}

1396
static const struct file_operations kvm_vm_fops = {
1397 1398 1399 1400 1401 1402 1403 1404
	.release        = kvm_vm_release,
	.unlocked_ioctl = kvm_vm_ioctl,
	.compat_ioctl   = kvm_vm_ioctl,
	.mmap           = kvm_vm_mmap,
};

static int kvm_dev_ioctl_create_vm(void)
{
A
Al Viro 已提交
1405
	int fd;
1406 1407 1408
	struct kvm *kvm;

	kvm = kvm_create_vm();
1409 1410
	if (IS_ERR(kvm))
		return PTR_ERR(kvm);
1411
	fd = anon_inode_getfd("kvm-vm", &kvm_vm_fops, kvm, 0);
A
Al Viro 已提交
1412
	if (fd < 0)
A
Al Viro 已提交
1413
		kvm_put_kvm(kvm);
1414 1415 1416 1417 1418 1419 1420

	return fd;
}

static long kvm_dev_ioctl(struct file *filp,
			  unsigned int ioctl, unsigned long arg)
{
1421
	long r = -EINVAL;
1422 1423 1424

	switch (ioctl) {
	case KVM_GET_API_VERSION:
1425 1426 1427
		r = -EINVAL;
		if (arg)
			goto out;
1428 1429 1430
		r = KVM_API_VERSION;
		break;
	case KVM_CREATE_VM:
1431 1432 1433
		r = -EINVAL;
		if (arg)
			goto out;
1434 1435
		r = kvm_dev_ioctl_create_vm();
		break;
1436
	case KVM_CHECK_EXTENSION:
1437
		r = kvm_dev_ioctl_check_extension(arg);
1438
		break;
1439 1440 1441 1442
	case KVM_GET_VCPU_MMAP_SIZE:
		r = -EINVAL;
		if (arg)
			goto out;
1443 1444 1445
		r = PAGE_SIZE;     /* struct kvm_run */
#ifdef CONFIG_X86
		r += PAGE_SIZE;    /* pio data page */
1446 1447 1448
#endif
#ifdef KVM_COALESCED_MMIO_PAGE_OFFSET
		r += PAGE_SIZE;    /* coalesced mmio ring page */
1449
#endif
1450
		break;
1451 1452 1453 1454 1455
	case KVM_TRACE_ENABLE:
	case KVM_TRACE_PAUSE:
	case KVM_TRACE_DISABLE:
		r = kvm_trace_ioctl(ioctl, arg);
		break;
A
Avi Kivity 已提交
1456
	default:
1457
		return kvm_arch_dev_ioctl(filp, ioctl, arg);
A
Avi Kivity 已提交
1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468
	}
out:
	return r;
}

static struct file_operations kvm_chardev_ops = {
	.unlocked_ioctl = kvm_dev_ioctl,
	.compat_ioctl   = kvm_dev_ioctl,
};

static struct miscdevice kvm_dev = {
A
Avi Kivity 已提交
1469
	KVM_MINOR,
A
Avi Kivity 已提交
1470 1471 1472 1473
	"kvm",
	&kvm_chardev_ops,
};

1474 1475 1476 1477 1478 1479 1480
static void hardware_enable(void *junk)
{
	int cpu = raw_smp_processor_id();

	if (cpu_isset(cpu, cpus_hardware_enabled))
		return;
	cpu_set(cpu, cpus_hardware_enabled);
1481
	kvm_arch_hardware_enable(NULL);
1482 1483 1484 1485 1486 1487 1488 1489 1490
}

static void hardware_disable(void *junk)
{
	int cpu = raw_smp_processor_id();

	if (!cpu_isset(cpu, cpus_hardware_enabled))
		return;
	cpu_clear(cpu, cpus_hardware_enabled);
1491
	kvm_arch_hardware_disable(NULL);
1492 1493
}

A
Avi Kivity 已提交
1494 1495 1496 1497 1498
static int kvm_cpu_hotplug(struct notifier_block *notifier, unsigned long val,
			   void *v)
{
	int cpu = (long)v;

1499
	val &= ~CPU_TASKS_FROZEN;
A
Avi Kivity 已提交
1500
	switch (val) {
1501
	case CPU_DYING:
1502 1503 1504 1505
		printk(KERN_INFO "kvm: disabling virtualization on CPU%d\n",
		       cpu);
		hardware_disable(NULL);
		break;
A
Avi Kivity 已提交
1506
	case CPU_UP_CANCELED:
1507 1508
		printk(KERN_INFO "kvm: disabling virtualization on CPU%d\n",
		       cpu);
1509
		smp_call_function_single(cpu, hardware_disable, NULL, 1);
A
Avi Kivity 已提交
1510
		break;
1511 1512 1513
	case CPU_ONLINE:
		printk(KERN_INFO "kvm: enabling virtualization on CPU%d\n",
		       cpu);
1514
		smp_call_function_single(cpu, hardware_enable, NULL, 1);
A
Avi Kivity 已提交
1515 1516 1517 1518 1519
		break;
	}
	return NOTIFY_OK;
}

1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531

asmlinkage void kvm_handle_fault_on_reboot(void)
{
	if (kvm_rebooting)
		/* spin while reset goes on */
		while (true)
			;
	/* Fault while not rebooting.  We want the trace. */
	BUG();
}
EXPORT_SYMBOL_GPL(kvm_handle_fault_on_reboot);

1532
static int kvm_reboot(struct notifier_block *notifier, unsigned long val,
M
Mike Day 已提交
1533
		      void *v)
1534 1535 1536 1537 1538 1539 1540
{
	if (val == SYS_RESTART) {
		/*
		 * Some (well, at least mine) BIOSes hang on reboot if
		 * in vmx root mode.
		 */
		printk(KERN_INFO "kvm: exiting hardware virtualization\n");
1541
		kvm_rebooting = true;
1542
		on_each_cpu(hardware_disable, NULL, 1);
1543 1544 1545 1546 1547 1548 1549 1550 1551
	}
	return NOTIFY_OK;
}

static struct notifier_block kvm_reboot_notifier = {
	.notifier_call = kvm_reboot,
	.priority = 0,
};

1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567
void kvm_io_bus_init(struct kvm_io_bus *bus)
{
	memset(bus, 0, sizeof(*bus));
}

void kvm_io_bus_destroy(struct kvm_io_bus *bus)
{
	int i;

	for (i = 0; i < bus->dev_count; i++) {
		struct kvm_io_device *pos = bus->devs[i];

		kvm_iodevice_destructor(pos);
	}
}

1568 1569
struct kvm_io_device *kvm_io_bus_find_dev(struct kvm_io_bus *bus,
					  gpa_t addr, int len, int is_write)
1570 1571 1572 1573 1574 1575
{
	int i;

	for (i = 0; i < bus->dev_count; i++) {
		struct kvm_io_device *pos = bus->devs[i];

1576
		if (pos->in_range(pos, addr, len, is_write))
1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589
			return pos;
	}

	return NULL;
}

void kvm_io_bus_register_dev(struct kvm_io_bus *bus, struct kvm_io_device *dev)
{
	BUG_ON(bus->dev_count > (NR_IOBUS_DEVS-1));

	bus->devs[bus->dev_count++] = dev;
}

A
Avi Kivity 已提交
1590 1591 1592 1593 1594
static struct notifier_block kvm_cpu_notifier = {
	.notifier_call = kvm_cpu_hotplug,
	.priority = 20, /* must be > scheduler priority */
};

1595
static int vm_stat_get(void *_offset, u64 *val)
1596 1597 1598 1599
{
	unsigned offset = (long)_offset;
	struct kvm *kvm;

1600
	*val = 0;
1601 1602
	spin_lock(&kvm_lock);
	list_for_each_entry(kvm, &vm_list, vm_list)
1603
		*val += *(u32 *)((void *)kvm + offset);
1604
	spin_unlock(&kvm_lock);
1605
	return 0;
1606 1607 1608 1609
}

DEFINE_SIMPLE_ATTRIBUTE(vm_stat_fops, vm_stat_get, NULL, "%llu\n");

1610
static int vcpu_stat_get(void *_offset, u64 *val)
A
Avi Kivity 已提交
1611 1612 1613 1614 1615 1616
{
	unsigned offset = (long)_offset;
	struct kvm *kvm;
	struct kvm_vcpu *vcpu;
	int i;

1617
	*val = 0;
A
Avi Kivity 已提交
1618 1619 1620
	spin_lock(&kvm_lock);
	list_for_each_entry(kvm, &vm_list, vm_list)
		for (i = 0; i < KVM_MAX_VCPUS; ++i) {
R
Rusty Russell 已提交
1621 1622
			vcpu = kvm->vcpus[i];
			if (vcpu)
1623
				*val += *(u32 *)((void *)vcpu + offset);
A
Avi Kivity 已提交
1624 1625
		}
	spin_unlock(&kvm_lock);
1626
	return 0;
A
Avi Kivity 已提交
1627 1628
}

1629 1630 1631 1632 1633 1634
DEFINE_SIMPLE_ATTRIBUTE(vcpu_stat_fops, vcpu_stat_get, NULL, "%llu\n");

static struct file_operations *stat_fops[] = {
	[KVM_STAT_VCPU] = &vcpu_stat_fops,
	[KVM_STAT_VM]   = &vm_stat_fops,
};
A
Avi Kivity 已提交
1635

1636
static void kvm_init_debug(void)
A
Avi Kivity 已提交
1637 1638 1639
{
	struct kvm_stats_debugfs_item *p;

1640
	kvm_debugfs_dir = debugfs_create_dir("kvm", NULL);
A
Avi Kivity 已提交
1641
	for (p = debugfs_entries; p->name; ++p)
1642
		p->dentry = debugfs_create_file(p->name, 0444, kvm_debugfs_dir,
A
Avi Kivity 已提交
1643
						(void *)(long)p->offset,
1644
						stat_fops[p->kind]);
A
Avi Kivity 已提交
1645 1646 1647 1648 1649 1650 1651 1652
}

static void kvm_exit_debug(void)
{
	struct kvm_stats_debugfs_item *p;

	for (p = debugfs_entries; p->name; ++p)
		debugfs_remove(p->dentry);
1653
	debugfs_remove(kvm_debugfs_dir);
A
Avi Kivity 已提交
1654 1655
}

1656 1657
static int kvm_suspend(struct sys_device *dev, pm_message_t state)
{
A
Avi Kivity 已提交
1658
	hardware_disable(NULL);
1659 1660 1661 1662 1663
	return 0;
}

static int kvm_resume(struct sys_device *dev)
{
A
Avi Kivity 已提交
1664
	hardware_enable(NULL);
1665 1666 1667 1668
	return 0;
}

static struct sysdev_class kvm_sysdev_class = {
1669
	.name = "kvm",
1670 1671 1672 1673 1674 1675 1676 1677 1678
	.suspend = kvm_suspend,
	.resume = kvm_resume,
};

static struct sys_device kvm_sysdev = {
	.id = 0,
	.cls = &kvm_sysdev_class,
};

1679
struct page *bad_page;
1680
pfn_t bad_pfn;
A
Avi Kivity 已提交
1681

1682 1683 1684 1685 1686 1687 1688 1689 1690 1691
static inline
struct kvm_vcpu *preempt_notifier_to_vcpu(struct preempt_notifier *pn)
{
	return container_of(pn, struct kvm_vcpu, preempt_notifier);
}

static void kvm_sched_in(struct preempt_notifier *pn, int cpu)
{
	struct kvm_vcpu *vcpu = preempt_notifier_to_vcpu(pn);

1692
	kvm_arch_vcpu_load(vcpu, cpu);
1693 1694 1695 1696 1697 1698 1699
}

static void kvm_sched_out(struct preempt_notifier *pn,
			  struct task_struct *next)
{
	struct kvm_vcpu *vcpu = preempt_notifier_to_vcpu(pn);

1700
	kvm_arch_vcpu_put(vcpu);
1701 1702
}

1703
int kvm_init(void *opaque, unsigned int vcpu_size,
1704
		  struct module *module)
A
Avi Kivity 已提交
1705 1706
{
	int r;
Y
Yang, Sheng 已提交
1707
	int cpu;
A
Avi Kivity 已提交
1708

1709 1710
	kvm_init_debug();

1711 1712
	r = kvm_arch_init(opaque);
	if (r)
1713
		goto out_fail;
1714 1715 1716 1717 1718 1719 1720 1721

	bad_page = alloc_page(GFP_KERNEL | __GFP_ZERO);

	if (bad_page == NULL) {
		r = -ENOMEM;
		goto out;
	}

1722 1723
	bad_pfn = page_to_pfn(bad_page);

1724
	r = kvm_arch_hardware_setup();
A
Avi Kivity 已提交
1725
	if (r < 0)
1726
		goto out_free_0;
A
Avi Kivity 已提交
1727

Y
Yang, Sheng 已提交
1728 1729
	for_each_online_cpu(cpu) {
		smp_call_function_single(cpu,
1730
				kvm_arch_check_processor_compat,
1731
				&r, 1);
Y
Yang, Sheng 已提交
1732
		if (r < 0)
1733
			goto out_free_1;
Y
Yang, Sheng 已提交
1734 1735
	}

1736
	on_each_cpu(hardware_enable, NULL, 1);
A
Avi Kivity 已提交
1737 1738
	r = register_cpu_notifier(&kvm_cpu_notifier);
	if (r)
1739
		goto out_free_2;
A
Avi Kivity 已提交
1740 1741
	register_reboot_notifier(&kvm_reboot_notifier);

1742 1743
	r = sysdev_class_register(&kvm_sysdev_class);
	if (r)
1744
		goto out_free_3;
1745 1746 1747

	r = sysdev_register(&kvm_sysdev);
	if (r)
1748
		goto out_free_4;
1749

1750 1751
	/* A kmem cache lets us meet the alignment requirements of fx_save. */
	kvm_vcpu_cache = kmem_cache_create("kvm_vcpu", vcpu_size,
J
Joe Perches 已提交
1752 1753
					   __alignof__(struct kvm_vcpu),
					   0, NULL);
1754 1755
	if (!kvm_vcpu_cache) {
		r = -ENOMEM;
1756
		goto out_free_5;
1757 1758
	}

A
Avi Kivity 已提交
1759 1760 1761 1762
	kvm_chardev_ops.owner = module;

	r = misc_register(&kvm_dev);
	if (r) {
M
Mike Day 已提交
1763
		printk(KERN_ERR "kvm: misc device register failed\n");
A
Avi Kivity 已提交
1764 1765 1766
		goto out_free;
	}

1767 1768 1769
	kvm_preempt_ops.sched_in = kvm_sched_in;
	kvm_preempt_ops.sched_out = kvm_sched_out;

1770
	return 0;
A
Avi Kivity 已提交
1771 1772

out_free:
1773
	kmem_cache_destroy(kvm_vcpu_cache);
1774
out_free_5:
1775
	sysdev_unregister(&kvm_sysdev);
1776
out_free_4:
1777
	sysdev_class_unregister(&kvm_sysdev_class);
1778
out_free_3:
A
Avi Kivity 已提交
1779
	unregister_reboot_notifier(&kvm_reboot_notifier);
A
Avi Kivity 已提交
1780
	unregister_cpu_notifier(&kvm_cpu_notifier);
1781
out_free_2:
1782
	on_each_cpu(hardware_disable, NULL, 1);
1783
out_free_1:
1784
	kvm_arch_hardware_unsetup();
1785 1786
out_free_0:
	__free_page(bad_page);
1787
out:
1788
	kvm_arch_exit();
1789
	kvm_exit_debug();
1790
out_fail:
A
Avi Kivity 已提交
1791 1792
	return r;
}
1793
EXPORT_SYMBOL_GPL(kvm_init);
A
Avi Kivity 已提交
1794

1795
void kvm_exit(void)
A
Avi Kivity 已提交
1796
{
1797
	kvm_trace_cleanup();
A
Avi Kivity 已提交
1798
	misc_deregister(&kvm_dev);
1799
	kmem_cache_destroy(kvm_vcpu_cache);
1800 1801
	sysdev_unregister(&kvm_sysdev);
	sysdev_class_unregister(&kvm_sysdev_class);
A
Avi Kivity 已提交
1802
	unregister_reboot_notifier(&kvm_reboot_notifier);
1803
	unregister_cpu_notifier(&kvm_cpu_notifier);
1804
	on_each_cpu(hardware_disable, NULL, 1);
1805
	kvm_arch_hardware_unsetup();
1806
	kvm_arch_exit();
A
Avi Kivity 已提交
1807
	kvm_exit_debug();
1808
	__free_page(bad_page);
A
Avi Kivity 已提交
1809
}
1810
EXPORT_SYMBOL_GPL(kvm_exit);