1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-only
2*4882a593Smuzhiyun #include <linux/kvm_host.h>
3*4882a593Smuzhiyun
4*4882a593Smuzhiyun #include <asm/irq_remapping.h>
5*4882a593Smuzhiyun #include <asm/cpu.h>
6*4882a593Smuzhiyun
7*4882a593Smuzhiyun #include "lapic.h"
8*4882a593Smuzhiyun #include "irq.h"
9*4882a593Smuzhiyun #include "posted_intr.h"
10*4882a593Smuzhiyun #include "trace.h"
11*4882a593Smuzhiyun #include "vmx.h"
12*4882a593Smuzhiyun
13*4882a593Smuzhiyun /*
14*4882a593Smuzhiyun * We maintian a per-CPU linked-list of vCPU, so in wakeup_handler() we
15*4882a593Smuzhiyun * can find which vCPU should be waken up.
16*4882a593Smuzhiyun */
17*4882a593Smuzhiyun static DEFINE_PER_CPU(struct list_head, blocked_vcpu_on_cpu);
18*4882a593Smuzhiyun static DEFINE_PER_CPU(raw_spinlock_t, blocked_vcpu_on_cpu_lock);
19*4882a593Smuzhiyun
vcpu_to_pi_desc(struct kvm_vcpu * vcpu)20*4882a593Smuzhiyun static inline struct pi_desc *vcpu_to_pi_desc(struct kvm_vcpu *vcpu)
21*4882a593Smuzhiyun {
22*4882a593Smuzhiyun return &(to_vmx(vcpu)->pi_desc);
23*4882a593Smuzhiyun }
24*4882a593Smuzhiyun
vmx_vcpu_pi_load(struct kvm_vcpu * vcpu,int cpu)25*4882a593Smuzhiyun void vmx_vcpu_pi_load(struct kvm_vcpu *vcpu, int cpu)
26*4882a593Smuzhiyun {
27*4882a593Smuzhiyun struct pi_desc *pi_desc = vcpu_to_pi_desc(vcpu);
28*4882a593Smuzhiyun struct pi_desc old, new;
29*4882a593Smuzhiyun unsigned int dest;
30*4882a593Smuzhiyun
31*4882a593Smuzhiyun /*
32*4882a593Smuzhiyun * In case of hot-plug or hot-unplug, we may have to undo
33*4882a593Smuzhiyun * vmx_vcpu_pi_put even if there is no assigned device. And we
34*4882a593Smuzhiyun * always keep PI.NDST up to date for simplicity: it makes the
35*4882a593Smuzhiyun * code easier, and CPU migration is not a fast path.
36*4882a593Smuzhiyun */
37*4882a593Smuzhiyun if (!pi_test_sn(pi_desc) && vcpu->cpu == cpu)
38*4882a593Smuzhiyun return;
39*4882a593Smuzhiyun
40*4882a593Smuzhiyun /*
41*4882a593Smuzhiyun * If the 'nv' field is POSTED_INTR_WAKEUP_VECTOR, do not change
42*4882a593Smuzhiyun * PI.NDST: pi_post_block is the one expected to change PID.NDST and the
43*4882a593Smuzhiyun * wakeup handler expects the vCPU to be on the blocked_vcpu_list that
44*4882a593Smuzhiyun * matches PI.NDST. Otherwise, a vcpu may not be able to be woken up
45*4882a593Smuzhiyun * correctly.
46*4882a593Smuzhiyun */
47*4882a593Smuzhiyun if (pi_desc->nv == POSTED_INTR_WAKEUP_VECTOR || vcpu->cpu == cpu) {
48*4882a593Smuzhiyun pi_clear_sn(pi_desc);
49*4882a593Smuzhiyun goto after_clear_sn;
50*4882a593Smuzhiyun }
51*4882a593Smuzhiyun
52*4882a593Smuzhiyun /* The full case. */
53*4882a593Smuzhiyun do {
54*4882a593Smuzhiyun old.control = new.control = pi_desc->control;
55*4882a593Smuzhiyun
56*4882a593Smuzhiyun dest = cpu_physical_id(cpu);
57*4882a593Smuzhiyun
58*4882a593Smuzhiyun if (x2apic_enabled())
59*4882a593Smuzhiyun new.ndst = dest;
60*4882a593Smuzhiyun else
61*4882a593Smuzhiyun new.ndst = (dest << 8) & 0xFF00;
62*4882a593Smuzhiyun
63*4882a593Smuzhiyun new.sn = 0;
64*4882a593Smuzhiyun } while (cmpxchg64(&pi_desc->control, old.control,
65*4882a593Smuzhiyun new.control) != old.control);
66*4882a593Smuzhiyun
67*4882a593Smuzhiyun after_clear_sn:
68*4882a593Smuzhiyun
69*4882a593Smuzhiyun /*
70*4882a593Smuzhiyun * Clear SN before reading the bitmap. The VT-d firmware
71*4882a593Smuzhiyun * writes the bitmap and reads SN atomically (5.2.3 in the
72*4882a593Smuzhiyun * spec), so it doesn't really have a memory barrier that
73*4882a593Smuzhiyun * pairs with this, but we cannot do that and we need one.
74*4882a593Smuzhiyun */
75*4882a593Smuzhiyun smp_mb__after_atomic();
76*4882a593Smuzhiyun
77*4882a593Smuzhiyun if (!pi_is_pir_empty(pi_desc))
78*4882a593Smuzhiyun pi_set_on(pi_desc);
79*4882a593Smuzhiyun }
80*4882a593Smuzhiyun
vmx_can_use_vtd_pi(struct kvm * kvm)81*4882a593Smuzhiyun static bool vmx_can_use_vtd_pi(struct kvm *kvm)
82*4882a593Smuzhiyun {
83*4882a593Smuzhiyun return irqchip_in_kernel(kvm) && enable_apicv &&
84*4882a593Smuzhiyun kvm_arch_has_assigned_device(kvm) &&
85*4882a593Smuzhiyun irq_remapping_cap(IRQ_POSTING_CAP);
86*4882a593Smuzhiyun }
87*4882a593Smuzhiyun
vmx_vcpu_pi_put(struct kvm_vcpu * vcpu)88*4882a593Smuzhiyun void vmx_vcpu_pi_put(struct kvm_vcpu *vcpu)
89*4882a593Smuzhiyun {
90*4882a593Smuzhiyun struct pi_desc *pi_desc = vcpu_to_pi_desc(vcpu);
91*4882a593Smuzhiyun
92*4882a593Smuzhiyun if (!vmx_can_use_vtd_pi(vcpu->kvm))
93*4882a593Smuzhiyun return;
94*4882a593Smuzhiyun
95*4882a593Smuzhiyun /* Set SN when the vCPU is preempted */
96*4882a593Smuzhiyun if (vcpu->preempted)
97*4882a593Smuzhiyun pi_set_sn(pi_desc);
98*4882a593Smuzhiyun }
99*4882a593Smuzhiyun
__pi_post_block(struct kvm_vcpu * vcpu)100*4882a593Smuzhiyun static void __pi_post_block(struct kvm_vcpu *vcpu)
101*4882a593Smuzhiyun {
102*4882a593Smuzhiyun struct pi_desc *pi_desc = vcpu_to_pi_desc(vcpu);
103*4882a593Smuzhiyun struct pi_desc old, new;
104*4882a593Smuzhiyun unsigned int dest;
105*4882a593Smuzhiyun
106*4882a593Smuzhiyun do {
107*4882a593Smuzhiyun old.control = new.control = pi_desc->control;
108*4882a593Smuzhiyun WARN(old.nv != POSTED_INTR_WAKEUP_VECTOR,
109*4882a593Smuzhiyun "Wakeup handler not enabled while the VCPU is blocked\n");
110*4882a593Smuzhiyun
111*4882a593Smuzhiyun dest = cpu_physical_id(vcpu->cpu);
112*4882a593Smuzhiyun
113*4882a593Smuzhiyun if (x2apic_enabled())
114*4882a593Smuzhiyun new.ndst = dest;
115*4882a593Smuzhiyun else
116*4882a593Smuzhiyun new.ndst = (dest << 8) & 0xFF00;
117*4882a593Smuzhiyun
118*4882a593Smuzhiyun /* set 'NV' to 'notification vector' */
119*4882a593Smuzhiyun new.nv = POSTED_INTR_VECTOR;
120*4882a593Smuzhiyun } while (cmpxchg64(&pi_desc->control, old.control,
121*4882a593Smuzhiyun new.control) != old.control);
122*4882a593Smuzhiyun
123*4882a593Smuzhiyun if (!WARN_ON_ONCE(vcpu->pre_pcpu == -1)) {
124*4882a593Smuzhiyun raw_spin_lock(&per_cpu(blocked_vcpu_on_cpu_lock, vcpu->pre_pcpu));
125*4882a593Smuzhiyun list_del(&vcpu->blocked_vcpu_list);
126*4882a593Smuzhiyun raw_spin_unlock(&per_cpu(blocked_vcpu_on_cpu_lock, vcpu->pre_pcpu));
127*4882a593Smuzhiyun vcpu->pre_pcpu = -1;
128*4882a593Smuzhiyun }
129*4882a593Smuzhiyun }
130*4882a593Smuzhiyun
131*4882a593Smuzhiyun /*
132*4882a593Smuzhiyun * This routine does the following things for vCPU which is going
133*4882a593Smuzhiyun * to be blocked if VT-d PI is enabled.
134*4882a593Smuzhiyun * - Store the vCPU to the wakeup list, so when interrupts happen
135*4882a593Smuzhiyun * we can find the right vCPU to wake up.
136*4882a593Smuzhiyun * - Change the Posted-interrupt descriptor as below:
137*4882a593Smuzhiyun * 'NDST' <-- vcpu->pre_pcpu
138*4882a593Smuzhiyun * 'NV' <-- POSTED_INTR_WAKEUP_VECTOR
139*4882a593Smuzhiyun * - If 'ON' is set during this process, which means at least one
140*4882a593Smuzhiyun * interrupt is posted for this vCPU, we cannot block it, in
141*4882a593Smuzhiyun * this case, return 1, otherwise, return 0.
142*4882a593Smuzhiyun *
143*4882a593Smuzhiyun */
pi_pre_block(struct kvm_vcpu * vcpu)144*4882a593Smuzhiyun int pi_pre_block(struct kvm_vcpu *vcpu)
145*4882a593Smuzhiyun {
146*4882a593Smuzhiyun unsigned int dest;
147*4882a593Smuzhiyun struct pi_desc old, new;
148*4882a593Smuzhiyun struct pi_desc *pi_desc = vcpu_to_pi_desc(vcpu);
149*4882a593Smuzhiyun
150*4882a593Smuzhiyun if (!vmx_can_use_vtd_pi(vcpu->kvm))
151*4882a593Smuzhiyun return 0;
152*4882a593Smuzhiyun
153*4882a593Smuzhiyun WARN_ON(irqs_disabled());
154*4882a593Smuzhiyun local_irq_disable();
155*4882a593Smuzhiyun if (!WARN_ON_ONCE(vcpu->pre_pcpu != -1)) {
156*4882a593Smuzhiyun vcpu->pre_pcpu = vcpu->cpu;
157*4882a593Smuzhiyun raw_spin_lock(&per_cpu(blocked_vcpu_on_cpu_lock, vcpu->pre_pcpu));
158*4882a593Smuzhiyun list_add_tail(&vcpu->blocked_vcpu_list,
159*4882a593Smuzhiyun &per_cpu(blocked_vcpu_on_cpu,
160*4882a593Smuzhiyun vcpu->pre_pcpu));
161*4882a593Smuzhiyun raw_spin_unlock(&per_cpu(blocked_vcpu_on_cpu_lock, vcpu->pre_pcpu));
162*4882a593Smuzhiyun }
163*4882a593Smuzhiyun
164*4882a593Smuzhiyun do {
165*4882a593Smuzhiyun old.control = new.control = pi_desc->control;
166*4882a593Smuzhiyun
167*4882a593Smuzhiyun WARN((pi_desc->sn == 1),
168*4882a593Smuzhiyun "Warning: SN field of posted-interrupts "
169*4882a593Smuzhiyun "is set before blocking\n");
170*4882a593Smuzhiyun
171*4882a593Smuzhiyun /*
172*4882a593Smuzhiyun * Since vCPU can be preempted during this process,
173*4882a593Smuzhiyun * vcpu->cpu could be different with pre_pcpu, we
174*4882a593Smuzhiyun * need to set pre_pcpu as the destination of wakeup
175*4882a593Smuzhiyun * notification event, then we can find the right vCPU
176*4882a593Smuzhiyun * to wakeup in wakeup handler if interrupts happen
177*4882a593Smuzhiyun * when the vCPU is in blocked state.
178*4882a593Smuzhiyun */
179*4882a593Smuzhiyun dest = cpu_physical_id(vcpu->pre_pcpu);
180*4882a593Smuzhiyun
181*4882a593Smuzhiyun if (x2apic_enabled())
182*4882a593Smuzhiyun new.ndst = dest;
183*4882a593Smuzhiyun else
184*4882a593Smuzhiyun new.ndst = (dest << 8) & 0xFF00;
185*4882a593Smuzhiyun
186*4882a593Smuzhiyun /* set 'NV' to 'wakeup vector' */
187*4882a593Smuzhiyun new.nv = POSTED_INTR_WAKEUP_VECTOR;
188*4882a593Smuzhiyun } while (cmpxchg64(&pi_desc->control, old.control,
189*4882a593Smuzhiyun new.control) != old.control);
190*4882a593Smuzhiyun
191*4882a593Smuzhiyun /* We should not block the vCPU if an interrupt is posted for it. */
192*4882a593Smuzhiyun if (pi_test_on(pi_desc) == 1)
193*4882a593Smuzhiyun __pi_post_block(vcpu);
194*4882a593Smuzhiyun
195*4882a593Smuzhiyun local_irq_enable();
196*4882a593Smuzhiyun return (vcpu->pre_pcpu == -1);
197*4882a593Smuzhiyun }
198*4882a593Smuzhiyun
pi_post_block(struct kvm_vcpu * vcpu)199*4882a593Smuzhiyun void pi_post_block(struct kvm_vcpu *vcpu)
200*4882a593Smuzhiyun {
201*4882a593Smuzhiyun if (vcpu->pre_pcpu == -1)
202*4882a593Smuzhiyun return;
203*4882a593Smuzhiyun
204*4882a593Smuzhiyun WARN_ON(irqs_disabled());
205*4882a593Smuzhiyun local_irq_disable();
206*4882a593Smuzhiyun __pi_post_block(vcpu);
207*4882a593Smuzhiyun local_irq_enable();
208*4882a593Smuzhiyun }
209*4882a593Smuzhiyun
210*4882a593Smuzhiyun /*
211*4882a593Smuzhiyun * Handler for POSTED_INTERRUPT_WAKEUP_VECTOR.
212*4882a593Smuzhiyun */
pi_wakeup_handler(void)213*4882a593Smuzhiyun void pi_wakeup_handler(void)
214*4882a593Smuzhiyun {
215*4882a593Smuzhiyun struct kvm_vcpu *vcpu;
216*4882a593Smuzhiyun int cpu = smp_processor_id();
217*4882a593Smuzhiyun
218*4882a593Smuzhiyun raw_spin_lock(&per_cpu(blocked_vcpu_on_cpu_lock, cpu));
219*4882a593Smuzhiyun list_for_each_entry(vcpu, &per_cpu(blocked_vcpu_on_cpu, cpu),
220*4882a593Smuzhiyun blocked_vcpu_list) {
221*4882a593Smuzhiyun struct pi_desc *pi_desc = vcpu_to_pi_desc(vcpu);
222*4882a593Smuzhiyun
223*4882a593Smuzhiyun if (pi_test_on(pi_desc) == 1)
224*4882a593Smuzhiyun kvm_vcpu_kick(vcpu);
225*4882a593Smuzhiyun }
226*4882a593Smuzhiyun raw_spin_unlock(&per_cpu(blocked_vcpu_on_cpu_lock, cpu));
227*4882a593Smuzhiyun }
228*4882a593Smuzhiyun
pi_init_cpu(int cpu)229*4882a593Smuzhiyun void __init pi_init_cpu(int cpu)
230*4882a593Smuzhiyun {
231*4882a593Smuzhiyun INIT_LIST_HEAD(&per_cpu(blocked_vcpu_on_cpu, cpu));
232*4882a593Smuzhiyun raw_spin_lock_init(&per_cpu(blocked_vcpu_on_cpu_lock, cpu));
233*4882a593Smuzhiyun }
234*4882a593Smuzhiyun
pi_has_pending_interrupt(struct kvm_vcpu * vcpu)235*4882a593Smuzhiyun bool pi_has_pending_interrupt(struct kvm_vcpu *vcpu)
236*4882a593Smuzhiyun {
237*4882a593Smuzhiyun struct pi_desc *pi_desc = vcpu_to_pi_desc(vcpu);
238*4882a593Smuzhiyun
239*4882a593Smuzhiyun return pi_test_on(pi_desc) ||
240*4882a593Smuzhiyun (pi_test_sn(pi_desc) && !pi_is_pir_empty(pi_desc));
241*4882a593Smuzhiyun }
242*4882a593Smuzhiyun
243*4882a593Smuzhiyun
244*4882a593Smuzhiyun /*
245*4882a593Smuzhiyun * pi_update_irte - set IRTE for Posted-Interrupts
246*4882a593Smuzhiyun *
247*4882a593Smuzhiyun * @kvm: kvm
248*4882a593Smuzhiyun * @host_irq: host irq of the interrupt
249*4882a593Smuzhiyun * @guest_irq: gsi of the interrupt
250*4882a593Smuzhiyun * @set: set or unset PI
251*4882a593Smuzhiyun * returns 0 on success, < 0 on failure
252*4882a593Smuzhiyun */
pi_update_irte(struct kvm * kvm,unsigned int host_irq,uint32_t guest_irq,bool set)253*4882a593Smuzhiyun int pi_update_irte(struct kvm *kvm, unsigned int host_irq, uint32_t guest_irq,
254*4882a593Smuzhiyun bool set)
255*4882a593Smuzhiyun {
256*4882a593Smuzhiyun struct kvm_kernel_irq_routing_entry *e;
257*4882a593Smuzhiyun struct kvm_irq_routing_table *irq_rt;
258*4882a593Smuzhiyun struct kvm_lapic_irq irq;
259*4882a593Smuzhiyun struct kvm_vcpu *vcpu;
260*4882a593Smuzhiyun struct vcpu_data vcpu_info;
261*4882a593Smuzhiyun int idx, ret = 0;
262*4882a593Smuzhiyun
263*4882a593Smuzhiyun if (!vmx_can_use_vtd_pi(kvm))
264*4882a593Smuzhiyun return 0;
265*4882a593Smuzhiyun
266*4882a593Smuzhiyun idx = srcu_read_lock(&kvm->irq_srcu);
267*4882a593Smuzhiyun irq_rt = srcu_dereference(kvm->irq_routing, &kvm->irq_srcu);
268*4882a593Smuzhiyun if (guest_irq >= irq_rt->nr_rt_entries ||
269*4882a593Smuzhiyun hlist_empty(&irq_rt->map[guest_irq])) {
270*4882a593Smuzhiyun pr_warn_once("no route for guest_irq %u/%u (broken user space?)\n",
271*4882a593Smuzhiyun guest_irq, irq_rt->nr_rt_entries);
272*4882a593Smuzhiyun goto out;
273*4882a593Smuzhiyun }
274*4882a593Smuzhiyun
275*4882a593Smuzhiyun hlist_for_each_entry(e, &irq_rt->map[guest_irq], link) {
276*4882a593Smuzhiyun if (e->type != KVM_IRQ_ROUTING_MSI)
277*4882a593Smuzhiyun continue;
278*4882a593Smuzhiyun /*
279*4882a593Smuzhiyun * VT-d PI cannot support posting multicast/broadcast
280*4882a593Smuzhiyun * interrupts to a vCPU, we still use interrupt remapping
281*4882a593Smuzhiyun * for these kind of interrupts.
282*4882a593Smuzhiyun *
283*4882a593Smuzhiyun * For lowest-priority interrupts, we only support
284*4882a593Smuzhiyun * those with single CPU as the destination, e.g. user
285*4882a593Smuzhiyun * configures the interrupts via /proc/irq or uses
286*4882a593Smuzhiyun * irqbalance to make the interrupts single-CPU.
287*4882a593Smuzhiyun *
288*4882a593Smuzhiyun * We will support full lowest-priority interrupt later.
289*4882a593Smuzhiyun *
290*4882a593Smuzhiyun * In addition, we can only inject generic interrupts using
291*4882a593Smuzhiyun * the PI mechanism, refuse to route others through it.
292*4882a593Smuzhiyun */
293*4882a593Smuzhiyun
294*4882a593Smuzhiyun kvm_set_msi_irq(kvm, e, &irq);
295*4882a593Smuzhiyun if (!kvm_intr_is_single_vcpu(kvm, &irq, &vcpu) ||
296*4882a593Smuzhiyun !kvm_irq_is_postable(&irq)) {
297*4882a593Smuzhiyun /*
298*4882a593Smuzhiyun * Make sure the IRTE is in remapped mode if
299*4882a593Smuzhiyun * we don't handle it in posted mode.
300*4882a593Smuzhiyun */
301*4882a593Smuzhiyun ret = irq_set_vcpu_affinity(host_irq, NULL);
302*4882a593Smuzhiyun if (ret < 0) {
303*4882a593Smuzhiyun printk(KERN_INFO
304*4882a593Smuzhiyun "failed to back to remapped mode, irq: %u\n",
305*4882a593Smuzhiyun host_irq);
306*4882a593Smuzhiyun goto out;
307*4882a593Smuzhiyun }
308*4882a593Smuzhiyun
309*4882a593Smuzhiyun continue;
310*4882a593Smuzhiyun }
311*4882a593Smuzhiyun
312*4882a593Smuzhiyun vcpu_info.pi_desc_addr = __pa(&to_vmx(vcpu)->pi_desc);
313*4882a593Smuzhiyun vcpu_info.vector = irq.vector;
314*4882a593Smuzhiyun
315*4882a593Smuzhiyun trace_kvm_pi_irte_update(host_irq, vcpu->vcpu_id, e->gsi,
316*4882a593Smuzhiyun vcpu_info.vector, vcpu_info.pi_desc_addr, set);
317*4882a593Smuzhiyun
318*4882a593Smuzhiyun if (set)
319*4882a593Smuzhiyun ret = irq_set_vcpu_affinity(host_irq, &vcpu_info);
320*4882a593Smuzhiyun else
321*4882a593Smuzhiyun ret = irq_set_vcpu_affinity(host_irq, NULL);
322*4882a593Smuzhiyun
323*4882a593Smuzhiyun if (ret < 0) {
324*4882a593Smuzhiyun printk(KERN_INFO "%s: failed to update PI IRTE\n",
325*4882a593Smuzhiyun __func__);
326*4882a593Smuzhiyun goto out;
327*4882a593Smuzhiyun }
328*4882a593Smuzhiyun }
329*4882a593Smuzhiyun
330*4882a593Smuzhiyun ret = 0;
331*4882a593Smuzhiyun out:
332*4882a593Smuzhiyun srcu_read_unlock(&kvm->irq_srcu, idx);
333*4882a593Smuzhiyun return ret;
334*4882a593Smuzhiyun }
335