iommu/vt-d: Add iotlb flush for nested domain

This implements the .cache_invalidate_user() callback to support iotlb
flush for nested domain.

Link: https://lore.kernel.org/r/[email protected]
Reviewed-by: Kevin Tian <[email protected]>
Signed-off-by: Lu Baolu <[email protected]>
Co-developed-by: Yi Liu <[email protected]>
Signed-off-by: Yi Liu <[email protected]>
Signed-off-by: Jason Gunthorpe <[email protected]>

diff --git a/drivers/iommu/intel/nested.c b/drivers/iommu/intel/nested.c
index b5a5563ab32c6bbb3a2e780bb010875b95dd29f4..f26c7f1c46ccaf43b0a4db5209b5c85b484277ed 100644 (file)
--- a/drivers/iommu/intel/nested.c
+++ b/drivers/iommu/intel/nested.c
@@ -73,9 +73,97 @@ static void intel_nested_domain_free(struct iommu_domain *domain)
        kfree(to_dmar_domain(domain));
 }
 
+static void nested_flush_dev_iotlb(struct dmar_domain *domain, u64 addr,
+                                  unsigned int mask)
+{
+       struct device_domain_info *info;
+       unsigned long flags;
+       u16 sid, qdep;
+
+       spin_lock_irqsave(&domain->lock, flags);
+       list_for_each_entry(info, &domain->devices, link) {
+               if (!info->ats_enabled)
+                       continue;
+               sid = info->bus << 8 | info->devfn;
+               qdep = info->ats_qdep;
+               qi_flush_dev_iotlb(info->iommu, sid, info->pfsid,
+                                  qdep, addr, mask);
+               quirk_extra_dev_tlb_flush(info, addr, mask,
+                                         IOMMU_NO_PASID, qdep);
+       }
+       spin_unlock_irqrestore(&domain->lock, flags);
+}
+
+static void intel_nested_flush_cache(struct dmar_domain *domain, u64 addr,
+                                    unsigned long npages, bool ih)
+{
+       struct iommu_domain_info *info;
+       unsigned int mask;
+       unsigned long i;
+
+       xa_for_each(&domain->iommu_array, i, info)
+               qi_flush_piotlb(info->iommu,
+                               domain_id_iommu(domain, info->iommu),
+                               IOMMU_NO_PASID, addr, npages, ih);
+
+       if (!domain->has_iotlb_device)
+               return;
+
+       if (npages == U64_MAX)
+               mask = 64 - VTD_PAGE_SHIFT;
+       else
+               mask = ilog2(__roundup_pow_of_two(npages));
+
+       nested_flush_dev_iotlb(domain, addr, mask);
+}
+
+static int intel_nested_cache_invalidate_user(struct iommu_domain *domain,
+                                             struct iommu_user_data_array *array)
+{
+       struct dmar_domain *dmar_domain = to_dmar_domain(domain);
+       struct iommu_hwpt_vtd_s1_invalidate inv_entry;
+       u32 index, processed = 0;
+       int ret = 0;
+
+       if (array->type != IOMMU_HWPT_INVALIDATE_DATA_VTD_S1) {
+               ret = -EINVAL;
+               goto out;
+       }
+
+       for (index = 0; index < array->entry_num; index++) {
+               ret = iommu_copy_struct_from_user_array(&inv_entry, array,
+                                                       IOMMU_HWPT_INVALIDATE_DATA_VTD_S1,
+                                                       index, __reserved);
+               if (ret)
+                       break;
+
+               if ((inv_entry.flags & ~IOMMU_VTD_INV_FLAGS_LEAF) ||
+                   inv_entry.__reserved) {
+                       ret = -EOPNOTSUPP;
+                       break;
+               }
+
+               if (!IS_ALIGNED(inv_entry.addr, VTD_PAGE_SIZE) ||
+                   ((inv_entry.npages == U64_MAX) && inv_entry.addr)) {
+                       ret = -EINVAL;
+                       break;
+               }
+
+               intel_nested_flush_cache(dmar_domain, inv_entry.addr,
+                                        inv_entry.npages,
+                                        inv_entry.flags & IOMMU_VTD_INV_FLAGS_LEAF);
+               processed++;
+       }
+
+out:
+       array->entry_num = processed;
+       return ret;
+}
+
 static const struct iommu_domain_ops intel_nested_domain_ops = {
        .attach_dev             = intel_nested_attach_dev,
        .free                   = intel_nested_domain_free,
+       .cache_invalidate_user  = intel_nested_cache_invalidate_user,
 };
 
 struct iommu_domain *intel_nested_domain_alloc(struct iommu_domain *parent,