virt/kvm/async_pf.c

   1 // SPDX-License-Identifier: GPL-2.0-only
   2 /*
   3  * kvm asynchronous fault support
   4  *
   5  * Copyright 2010 Red Hat, Inc.
   6  *
   7  * Author:
   8  *      Gleb Natapov <[email protected]>
   9  */
  10
  11 #include <linux/kvm_host.h>
  12 #include <linux/slab.h>
  13 #include <linux/module.h>
  14 #include <linux/mmu_context.h>
  15 #include <linux/sched/mm.h>
  16
  17 #include "async_pf.h"
  18 #include <trace/events/kvm.h>
  19
  20 static struct kmem_cache *async_pf_cache;
  21
  22 int kvm_async_pf_init(void)
  23 {
  24         async_pf_cache = KMEM_CACHE(kvm_async_pf, 0);
  25
  26         if (!async_pf_cache)
  27                 return -ENOMEM;
  28
  29         return 0;
  30 }
  31
  32 void kvm_async_pf_deinit(void)
  33 {
  34         kmem_cache_destroy(async_pf_cache);
  35         async_pf_cache = NULL;
  36 }
  37
  38 void kvm_async_pf_vcpu_init(struct kvm_vcpu *vcpu)
  39 {
  40         INIT_LIST_HEAD(&vcpu->async_pf.done);
  41         INIT_LIST_HEAD(&vcpu->async_pf.queue);
  42         spin_lock_init(&vcpu->async_pf.lock);
  43 }
  44
  45 static void async_pf_execute(struct work_struct *work)
  46 {
  47         struct kvm_async_pf *apf =
  48                 container_of(work, struct kvm_async_pf, work);
  49         struct kvm_vcpu *vcpu = apf->vcpu;
  50         struct mm_struct *mm = vcpu->kvm->mm;
  51         unsigned long addr = apf->addr;
  52         gpa_t cr2_or_gpa = apf->cr2_or_gpa;
  53         int locked = 1;
  54         bool first;
  55
  56         might_sleep();
  57
  58         /*
  59          * Attempt to pin the VM's host address space, and simply skip gup() if
  60          * acquiring a pin fail, i.e. if the process is exiting.  Note, KVM
  61          * holds a reference to its associated mm_struct until the very end of
  62          * kvm_destroy_vm(), i.e. the struct itself won't be freed before this
  63          * work item is fully processed.
  64          */
  65         if (mmget_not_zero(mm)) {
  66                 mmap_read_lock(mm);
  67                 get_user_pages_remote(mm, addr, 1, FOLL_WRITE, NULL, &locked);
  68                 if (locked)
  69                         mmap_read_unlock(mm);
  70                 mmput(mm);
  71         }
  72
  73         /*
  74          * Notify and kick the vCPU even if faulting in the page failed, e.g.
  75          * so that the vCPU can retry the fault synchronously.
  76          */
  77         if (IS_ENABLED(CONFIG_KVM_ASYNC_PF_SYNC))
  78                 kvm_arch_async_page_present(vcpu, apf);
  79
  80         spin_lock(&vcpu->async_pf.lock);
  81         first = list_empty(&vcpu->async_pf.done);
  82         list_add_tail(&apf->link, &vcpu->async_pf.done);
  83         apf->vcpu = NULL;
  84         spin_unlock(&vcpu->async_pf.lock);
  85
  86         if (!IS_ENABLED(CONFIG_KVM_ASYNC_PF_SYNC) && first)
  87                 kvm_arch_async_page_present_queued(vcpu);
  88
  89         /*
  90          * apf may be freed by kvm_check_async_pf_completion() after
  91          * this point
  92          */
  93
  94         trace_kvm_async_pf_completed(addr, cr2_or_gpa);
  95
  96         __kvm_vcpu_wake_up(vcpu);
  97 }
  98
  99 static void kvm_flush_and_free_async_pf_work(struct kvm_async_pf *work)
 100 {
 101         /*
 102          * The async #PF is "done", but KVM must wait for the work item itself,
 103          * i.e. async_pf_execute(), to run to completion.  If KVM is a module,
 104          * KVM must ensure *no* code owned by the KVM (the module) can be run
 105          * after the last call to module_put().  Note, flushing the work item
 106          * is always required when the item is taken off the completion queue.
 107          * E.g. even if the vCPU handles the item in the "normal" path, the VM
 108          * could be terminated before async_pf_execute() completes.
 109          *
 110          * Wake all events skip the queue and go straight done, i.e. don't
 111          * need to be flushed (but sanity check that the work wasn't queued).
 112          */
 113         if (work->wakeup_all)
 114                 WARN_ON_ONCE(work->work.func);
 115         else
 116                 flush_work(&work->work);
 117         kmem_cache_free(async_pf_cache, work);
 118 }
 119
 120 void kvm_clear_async_pf_completion_queue(struct kvm_vcpu *vcpu)
 121 {
 122         spin_lock(&vcpu->async_pf.lock);
 123
 124         /* cancel outstanding work queue item */
 125         while (!list_empty(&vcpu->async_pf.queue)) {
 126                 struct kvm_async_pf *work =
 127                         list_first_entry(&vcpu->async_pf.queue,
 128                                          typeof(*work), queue);
 129                 list_del(&work->queue);
 130
 131                 /*
 132                  * We know it's present in vcpu->async_pf.done, do
 133                  * nothing here.
 134                  */
 135                 if (!work->vcpu)
 136                         continue;
 137
 138                 spin_unlock(&vcpu->async_pf.lock);
 139 #ifdef CONFIG_KVM_ASYNC_PF_SYNC
 140                 flush_work(&work->work);
 141 #else
 142                 if (cancel_work_sync(&work->work))
 143                         kmem_cache_free(async_pf_cache, work);
 144 #endif
 145                 spin_lock(&vcpu->async_pf.lock);
 146         }
 147
 148         while (!list_empty(&vcpu->async_pf.done)) {
 149                 struct kvm_async_pf *work =
 150                         list_first_entry(&vcpu->async_pf.done,
 151                                          typeof(*work), link);
 152                 list_del(&work->link);
 153
 154                 spin_unlock(&vcpu->async_pf.lock);
 155                 kvm_flush_and_free_async_pf_work(work);
 156                 spin_lock(&vcpu->async_pf.lock);
 157         }
 158         spin_unlock(&vcpu->async_pf.lock);
 159
 160         vcpu->async_pf.queued = 0;
 161 }
 162
 163 void kvm_check_async_pf_completion(struct kvm_vcpu *vcpu)
 164 {
 165         struct kvm_async_pf *work;
 166
 167         while (!list_empty_careful(&vcpu->async_pf.done) &&
 168               kvm_arch_can_dequeue_async_page_present(vcpu)) {
 169                 spin_lock(&vcpu->async_pf.lock);
 170                 work = list_first_entry(&vcpu->async_pf.done, typeof(*work),
 171                                               link);
 172                 list_del(&work->link);
 173                 spin_unlock(&vcpu->async_pf.lock);
 174
 175                 kvm_arch_async_page_ready(vcpu, work);
 176                 if (!IS_ENABLED(CONFIG_KVM_ASYNC_PF_SYNC))
 177                         kvm_arch_async_page_present(vcpu, work);
 178
 179                 list_del(&work->queue);
 180                 vcpu->async_pf.queued--;
 181                 kvm_flush_and_free_async_pf_work(work);
 182         }
 183 }
 184
 185 /*
 186  * Try to schedule a job to handle page fault asynchronously. Returns 'true' on
 187  * success, 'false' on failure (page fault has to be handled synchronously).
 188  */
 189 bool kvm_setup_async_pf(struct kvm_vcpu *vcpu, gpa_t cr2_or_gpa,
 190                         unsigned long hva, struct kvm_arch_async_pf *arch)
 191 {
 192         struct kvm_async_pf *work;
 193
 194         if (vcpu->async_pf.queued >= ASYNC_PF_PER_VCPU)
 195                 return false;
 196
 197         /* Arch specific code should not do async PF in this case */
 198         if (unlikely(kvm_is_error_hva(hva)))
 199                 return false;
 200
 201         /*
 202          * do alloc nowait since if we are going to sleep anyway we
 203          * may as well sleep faulting in page
 204          */
 205         work = kmem_cache_zalloc(async_pf_cache, GFP_NOWAIT | __GFP_NOWARN);
 206         if (!work)
 207                 return false;
 208
 209         work->wakeup_all = false;
 210         work->vcpu = vcpu;
 211         work->cr2_or_gpa = cr2_or_gpa;
 212         work->addr = hva;
 213         work->arch = *arch;
 214
 215         INIT_WORK(&work->work, async_pf_execute);
 216
 217         list_add_tail(&work->queue, &vcpu->async_pf.queue);
 218         vcpu->async_pf.queued++;
 219         work->notpresent_injected = kvm_arch_async_page_not_present(vcpu, work);
 220
 221         schedule_work(&work->work);
 222
 223         return true;
 224 }
 225
 226 int kvm_async_pf_wakeup_all(struct kvm_vcpu *vcpu)
 227 {
 228         struct kvm_async_pf *work;
 229         bool first;
 230
 231         if (!list_empty_careful(&vcpu->async_pf.done))
 232                 return 0;
 233
 234         work = kmem_cache_zalloc(async_pf_cache, GFP_ATOMIC);
 235         if (!work)
 236                 return -ENOMEM;
 237
 238         work->wakeup_all = true;
 239         INIT_LIST_HEAD(&work->queue); /* for list_del to work */
 240
 241         spin_lock(&vcpu->async_pf.lock);
 242         first = list_empty(&vcpu->async_pf.done);
 243         list_add_tail(&work->link, &vcpu->async_pf.done);
 244         spin_unlock(&vcpu->async_pf.lock);
 245
 246         if (!IS_ENABLED(CONFIG_KVM_ASYNC_PF_SYNC) && first)
 247                 kvm_arch_async_page_present_queued(vcpu);
 248
 249         vcpu->async_pf.queued++;
 250         return 0;
 251 }