Received: by 10.192.165.148 with SMTP id m20csp3447298imm; Mon, 23 Apr 2018 06:47:55 -0700 (PDT) X-Google-Smtp-Source: AIpwx4/K3xl29rpDlFAn5Y6pFRRpGFSYg3ZIROwf9BoNcOBDztRjFMTC2m142gKYup+rSIoCM+Bm X-Received: by 2002:a17:902:624:: with SMTP id 33-v6mr21120273plg.361.1524491275337; Mon, 23 Apr 2018 06:47:55 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1524491275; cv=none; d=google.com; s=arc-20160816; b=DXY0H768D9hM3vKtNj65ZokE1Jy0VmgUqWq0ry09gxROoyfAsE/KE5+duIQqTT8ov2 TQKVrxhFIFWUTANSdsTawc1/9Ec1NpNjN2Qf+ETDmq8/bpah85xTHjyQS8Lq2F+NeQgS 8VAVDxhYA1NTb1ItZb1C+OvW6WeihawPtnWC2zbwOkw4foCMeO+ZGakjnKq5mWUueRo1 RQYri25f2B9xH6e184JY+PK+PyXPANVBTVV8MPxZRNkj348dIzvGpCd3l5ZC2Nhm+d+Z KltM3d78hXdKUkBpHXpu1NF+eYLI+847PS7PfEvKG4UCMQjYBpAH1uadDmOxe0o/OKA7 t0cQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:content-language :content-transfer-encoding:in-reply-to:mime-version:user-agent:date :from:references:cc:to:subject:arc-authentication-results; bh=n0g1NGo/wPPVrn/tl8m2frz8RQvcmwftEdjcqMyUZGY=; b=COXwNGxjOfbmMQQ98JoKYhoNC3yQ0zYVS/G1f2LxP9mpGgEhTUMdgAqI/e5gafsKmt ifQHdYTmBZ3TzSVQ21YWcYuO1C+0Rc7+aTlMEQrlX9ZGnyqnV6+EHgtKSLZJyBstv9Mr RiyH1S6zVThzLBnl9TSypkaRMRX9k5XsmhKNSBL7/gCFqvUV4vCSLsm/78npqsH9CFyu ucu/7nbm0cLI5nY7ocHY89xIkxxeLWhkMIH1cc7pmRVo98luo8sRLwpeJxs+B/Vg5IlA EfmRIPUzRwKzBn3HLJR088uAMb3c9+/m0sSER7joQtB9019TKucYCiFHCiog7jHNdgKs c2HQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ibm.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id d127si93159pgc.236.2018.04.23.06.47.40; Mon, 23 Apr 2018 06:47:55 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ibm.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755245AbeDWNq3 (ORCPT + 99 others); Mon, 23 Apr 2018 09:46:29 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]:47216 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755126AbeDWNq1 (ORCPT ); Mon, 23 Apr 2018 09:46:27 -0400 Received: from pps.filterd (m0098396.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w3NDin3j097751 for ; Mon, 23 Apr 2018 09:46:27 -0400 Received: from e06smtp11.uk.ibm.com (e06smtp11.uk.ibm.com [195.75.94.107]) by mx0a-001b2d01.pphosted.com with ESMTP id 2hhgd90uav-1 (version=TLSv1.2 cipher=AES256-SHA256 bits=256 verify=NOT) for ; Mon, 23 Apr 2018 09:46:26 -0400 Received: from localhost by e06smtp11.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Mon, 23 Apr 2018 14:46:23 +0100 Received: from b06cxnps4074.portsmouth.uk.ibm.com (9.149.109.196) by e06smtp11.uk.ibm.com (192.168.101.141) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted; Mon, 23 Apr 2018 14:46:18 +0100 Received: from d06av25.portsmouth.uk.ibm.com (d06av25.portsmouth.uk.ibm.com [9.149.105.61]) by b06cxnps4074.portsmouth.uk.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id w3NDkHdN7930228; Mon, 23 Apr 2018 13:46:17 GMT Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 59EAC11C058; Mon, 23 Apr 2018 14:38:05 +0100 (BST) Received: from d06av25.portsmouth.uk.ibm.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 741DE11C050; Mon, 23 Apr 2018 14:38:04 +0100 (BST) Received: from [9.152.224.146] (unknown [9.152.224.146]) by d06av25.portsmouth.uk.ibm.com (Postfix) with ESMTP; Mon, 23 Apr 2018 14:38:04 +0100 (BST) Subject: Re: [PATCH v4 08/15] KVM: s390: interfaces to (de)configure guest's AP matrix To: Tony Krowiak , linux-s390@vger.kernel.org, linux-kernel@vger.kernel.org, kvm@vger.kernel.org Cc: freude@de.ibm.com, schwidefsky@de.ibm.com, heiko.carstens@de.ibm.com, borntraeger@de.ibm.com, cohuck@redhat.com, kwankhede@nvidia.com, bjsdjshi@linux.vnet.ibm.com, pbonzini@redhat.com, alex.williamson@redhat.com, alifm@linux.vnet.ibm.com, mjrosato@linux.vnet.ibm.com, jjherne@linux.vnet.ibm.com, thuth@redhat.com, pasic@linux.vnet.ibm.com, berrange@redhat.com, fiuczy@linux.vnet.ibm.com, buendgen@de.ibm.com References: <1523827345-11600-1-git-send-email-akrowiak@linux.vnet.ibm.com> <1523827345-11600-9-git-send-email-akrowiak@linux.vnet.ibm.com> From: Pierre Morel Date: Mon, 23 Apr 2018 15:46:16 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 In-Reply-To: <1523827345-11600-9-git-send-email-akrowiak@linux.vnet.ibm.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-TM-AS-GCONF: 00 x-cbid: 18042313-0040-0000-0000-000004508A9E X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 18042313-0041-0000-0000-000020F4F243 Message-Id: <99f4752a-1358-61e4-bf9e-5672b2d4036f@linux.vnet.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:,, definitions=2018-04-23_05:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 impostorscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1709140000 definitions=main-1804230141 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 15/04/2018 23:22, Tony Krowiak wrote: > Provides interfaces to assign AP adapters, usage domains > and control domains to a KVM guest. > > A KVM guest is started by executing the Start Interpretive Execution (SIE) > instruction. The SIE state description is a control block that contains the > state information for a KVM guest and is supplied as input to the SIE > instruction. The SIE state description has a satellite structure called the > Crypto Control Block (CRYCB). The CRYCB contains three bitmask fields > identifying the adapters, queues (domains) and control domains assigned to > the KVM guest: > > * The AP Adapter Mask (APM) field identifies the AP adapters assigned to > the KVM guest > > * The AP Queue Mask (AQM) field identifies the AP queues assigned to > the KVM guest. Each AP queue is connected to a usage domain within > an AP adapter. > > * The AP Domain Mask (ADM) field identifies the control domains > assigned to the KVM guest. > > Each adapter, queue (usage domain) and control domain are identified by > a number from 0 to 255. The bits in each mask, from most significant to > least significant bit, correspond to the numbers 0-255. When a bit is > set, the corresponding adapter, queue (usage domain) or control domain > is assigned to the KVM guest. > > This patch will set the bits in the APM, AQM and ADM fields of the > CRYCB referenced by the KVM guest's SIE state description. The process > used is: > > 1. Verify that the bits to be set do not exceed the maximum bit > number for the given mask. > > 2. Verify that the APQNs that can be derived from the intersection > of the bits set in the APM and AQM fields of the KVM guest's CRYCB > are not assigned to any other KVM guest running on the same linux > host. > > 3. Set the APM, AQM and ADM in the CRYCB according to the matrix > configured for the mediated matrix device via its sysfs > adapter, domain and control domain attribute files respectively. > > Signed-off-by: Tony Krowiak > --- > arch/s390/include/asm/kvm-ap.h | 79 ++++++++++ > arch/s390/kvm/kvm-ap.c | 259 +++++++++++++++++++++++++++++++++ > drivers/s390/crypto/vfio_ap_ops.c | 19 +++ > drivers/s390/crypto/vfio_ap_private.h | 4 + > 4 files changed, 361 insertions(+), 0 deletions(-) > > diff --git a/arch/s390/include/asm/kvm-ap.h b/arch/s390/include/asm/kvm-ap.h > index a6c092e..a068244 100644 > --- a/arch/s390/include/asm/kvm-ap.h > +++ b/arch/s390/include/asm/kvm-ap.h > @@ -12,6 +12,34 @@ > > #include > #include > +#include > +#include > +#include > + > +#define KVM_AP_MASK_BYTES(n) DIV_ROUND_UP(n, BITS_PER_BYTE) > + > +/** > + * The AP matrix is comprised of three bit masks identifying the adapters, > + * queues (domains) and control domains that belong to an AP matrix. The bits in > + * each mask, from least significant to most significant bit, correspond to IDs > + * 0 to the maximum ID allowed for a given mask. When a bit is set, the > + * corresponding ID belongs to the matrix. > + * > + * @apm_max: max number of bits in @apm > + * @apm identifies the AP adapters in the matrix > + * @aqm_max: max number of bits in @aqm > + * @aqm identifies the AP queues (domains) in the matrix > + * @adm_max: max number of bits in @adm > + * @adm identifies the AP control domains in the matrix > + */ > +struct kvm_ap_matrix { > + int apm_max; > + unsigned long *apm; > + int aqm_max; > + unsigned long *aqm; > + int adm_max; > + unsigned long *adm; > +}; > > /** > * kvm_ap_instructions_installed() > @@ -51,4 +79,55 @@ > */ > int kvm_ap_interpret_instructions(struct kvm *kvm, bool enable); > > +/** > + * kvm_ap_matrix_create > + * > + * Create an AP matrix to hold a configuration of AP adapters, domains and > + * control domains. > + * > + * @ap_matrix: holds the matrix that is created > + * > + * Returns 0 if the matrix is successfully created. Returns an error if an APQN > + * derived from the cross product of the AP adapter IDs and AP queue indexes > + * comprising the AP matrix is configured for another guest. > + */ > +int kvm_ap_matrix_create(struct kvm_ap_matrix **ap_matrix); why not simply return the pointer? > + > +/** > + * kvm_ap_matrix_destroy > + * > + * Destroy an AP matrix by de-allocating all storage allocated by the > + * kvm_ap_matrix_create function. > + * > + * @ap_matrix: the matrix to destroy > + */ > +void kvm_ap_matrix_destroy(struct kvm_ap_matrix *ap_matrix); > + > +/** > + * kvm_ap_configure_matrix > + * > + * Configure the AP matrix for a KVM guest. > + * > + * @kvm: the KVM guest > + * @matrix: the matrix configuration information > + * > + * Returns 0 if: > + * 1. The AP instructions are installed on the guest > + * 2. The APQNs derived from the intersection of the set of adapter > + * IDs (APM) and queue indexes (AQM) in @matrix are not configured for > + * any other KVM guest running on the same linux host. > + * Otherwise returns an error code. > + */ > +int kvm_ap_configure_matrix(struct kvm *kvm, struct kvm_ap_matrix *matrix); > + > +/** > + * kvm_ap_deconfigure_matrix > + * > + * Deconfigure the AP matrix for a KVM guest. Clears all of the bits in the > + * APM, AQM and ADM in the guest's CRYCB. > + * > + * @kvm: the KVM guest > + */ > +void kvm_ap_deconfigure_matrix(struct kvm *kvm); > + > #endif /* _ASM_KVM_AP */ > diff --git a/arch/s390/kvm/kvm-ap.c b/arch/s390/kvm/kvm-ap.c > index 55d11b5..f7226d8 100644 > --- a/arch/s390/kvm/kvm-ap.c > +++ b/arch/s390/kvm/kvm-ap.c > @@ -9,6 +9,7 @@ > #include > #include > #include > +#include > > #include "kvm-s390.h" > > @@ -78,3 +79,261 @@ int kvm_ap_interpret_instructions(struct kvm *kvm, bool enable) > return ret; > } > EXPORT_SYMBOL(kvm_ap_interpret_instructions); > + > +static inline void kvm_ap_clear_crycb_masks(struct kvm *kvm) > +{ > + memset(&kvm->arch.crypto.crycb->apcb0, 0, > + sizeof(kvm->arch.crypto.crycb->apcb0)); > + memset(&kvm->arch.crypto.crycb->apcb1, 0, > + sizeof(kvm->arch.crypto.crycb->apcb1)); > +} > + > +static inline unsigned long *kvm_ap_get_crycb_apm(struct kvm *kvm) > +{ > + unsigned long *apm; > + > + switch (kvm->arch.crypto.crycbd & CRYCB_FORMAT_MASK) { > + case CRYCB_FORMAT1: > + apm = (unsigned long *)kvm->arch.crypto.crycb->apcb0.apm; > + break; > + case CRYCB_FORMAT2: > + apm = (unsigned long *)kvm->arch.crypto.crycb->apcb1.apm; > + break; > + default: > + apm = (unsigned long *)kvm->arch.crypto.crycb->apcb0.apm; > + break; > + } > + > + return apm; > +} > + > +static inline unsigned long *kvm_ap_get_crycb_aqm(struct kvm *kvm) > +{ > + unsigned long *aqm; > + > + switch (kvm->arch.crypto.crycbd & CRYCB_FORMAT_MASK) { > + case CRYCB_FORMAT1: > + aqm = (unsigned long *)kvm->arch.crypto.crycb->apcb0.aqm; > + break; > + case CRYCB_FORMAT2: > + aqm = (unsigned long *)kvm->arch.crypto.crycb->apcb1.aqm; > + break; > + default: > + aqm = (unsigned long *)kvm->arch.crypto.crycb->apcb0.aqm; > + break; > + } > + > + return aqm; > +} > + > +static inline unsigned long *kvm_ap_get_crycb_adm(struct kvm *kvm) > +{ > + unsigned long *adm; > + > + switch (kvm->arch.crypto.crycbd & CRYCB_FORMAT_MASK) { > + case CRYCB_FORMAT1: > + adm = (unsigned long *)kvm->arch.crypto.crycb->apcb0.adm; > + break; > + case CRYCB_FORMAT2: > + adm = (unsigned long *)kvm->arch.crypto.crycb->apcb1.adm; > + break; > + default: > + adm = (unsigned long *)kvm->arch.crypto.crycb->apcb0.adm; > + break; > + } > + > + return adm; > +} > + > +static void kvm_ap_set_crycb_masks(struct kvm *kvm, > + struct kvm_ap_matrix *matrix) > +{ > + unsigned long *apm = kvm_ap_get_crycb_apm(kvm); > + unsigned long *aqm = kvm_ap_get_crycb_aqm(kvm); > + unsigned long *adm = kvm_ap_get_crycb_adm(kvm); > + > + kvm_ap_clear_crycb_masks(kvm); > + memcpy(apm, matrix->apm, KVM_AP_MASK_BYTES(matrix->apm_max)); > + memcpy(aqm, matrix->aqm, KVM_AP_MASK_BYTES(matrix->aqm_max)); > + > + /* > + * Merge the AQM and ADM since the ADM is a superset of the > + * AQM by agreed-upon convention. > + */ > + bitmap_or(adm, adm, aqm, matrix->adm_max); > +} > + > +static void kvm_ap_log_sharing_err(struct kvm *kvm, unsigned long apid, > + unsigned long apqi) > +{ > + pr_err("%s: AP queue %02lx.%04lx is registered to guest %s", __func__, > + apid, apqi, kvm->arch.dbf->name); > +} > + > +/** > + * kvm_ap_validate_queue_sharing > + * > + * Verifies that the APQNs derived from the cross product of the AP adapter IDs > + * and AP queue indexes comprising the AP matrix are not configured for > + * another guest. AP queue sharing is not allowed. > + * > + * @kvm: the KVM guest > + * @matrix: the AP matrix > + * > + * Returns 0 if the APQNs are valid, otherwise; returns -EBUSY. > + */ > +static int kvm_ap_validate_queue_sharing(struct kvm *kvm, > + struct kvm_ap_matrix *matrix) > +{ > + struct kvm *vm; > + unsigned long *apm, *aqm; > + unsigned long apid, apqi; > + > + > + /* No other VM may share an AP Queue with the input VM */ I wonder if these functions and structures should really belong to KVM. The only have sense with the VFIO driver. My opinion is that they belong there, in the VFIO driver code. This will also make it easier to handle cases where AP code is not present but KVM is. > + list_for_each_entry(vm, &vm_list, vm_list) { > + if (kvm == vm) > + continue; > + > + apm = kvm_ap_get_crycb_apm(vm); > + if (!bitmap_and(apm, apm, matrix->apm, matrix->apm_max)) > + continue; > + > + aqm = kvm_ap_get_crycb_aqm(vm); > + if (!bitmap_and(aqm, aqm, matrix->aqm, matrix->aqm_max)) > + continue; > + > + for_each_set_bit_inv(apid, apm, matrix->apm_max) > + for_each_set_bit_inv(apqi, aqm, matrix->aqm_max) > + kvm_ap_log_sharing_err(kvm, apid, apqi); > + > + return -EBUSY; > + } > + > + return 0; > +} > + > +static int kvm_ap_matrix_apm_create(struct kvm_ap_matrix *ap_matrix, > + struct ap_config_info *config) > +{ > + int apm_max = (config && config->apxa) ? config->Na + 1 : 16; At this moment you already know the format of the crycb. Why don't you just use a virtual CRYCB instead of allocating bitmaps. It would be much easier to handle and compare. > + > + ap_matrix->apm = kzalloc(KVM_AP_MASK_BYTES(apm_max), GFP_KERNEL); > + if (!ap_matrix->apm) > + return -ENOMEM; > + > + ap_matrix->apm_max = apm_max; > + > + return 0; > +} > + > +static int kvm_ap_matrix_aqm_create(struct kvm_ap_matrix *ap_matrix, > + struct ap_config_info *config) > +{ > + int aqm_max = (config && config->apxa) ? config->Nd + 1 : 16; > + > + ap_matrix->aqm = kzalloc(KVM_AP_MASK_BYTES(aqm_max), GFP_KERNEL); > + if (!ap_matrix->aqm) > + return -ENOMEM; > + > + ap_matrix->aqm_max = aqm_max; > + > + return 0; > +} > + > +static int kvm_ap_matrix_adm_create(struct kvm_ap_matrix *ap_matrix, > + struct ap_config_info *config) > +{ > + int adm_max = (config && config->apxa) ? config->Nd + 1 : 16; > + > + ap_matrix->adm = kzalloc(KVM_AP_MASK_BYTES(adm_max), GFP_KERNEL); > + if (!ap_matrix->adm) > + return -ENOMEM; > + > + ap_matrix->adm_max = adm_max; > + > + return 0; > +} > + > +static void kvm_ap_matrix_masks_destroy(struct kvm_ap_matrix *ap_matrix) > +{ > + kfree(ap_matrix->apm); > + kfree(ap_matrix->aqm); > + kfree(ap_matrix->adm); > +} > + > +int kvm_ap_matrix_create(struct kvm_ap_matrix **ap_matrix) > +{ It seems much easier to me to return a pointer to the allocated kvm_ap_matrix than to provide the address of the pointer to update. > + int ret; > + struct kvm_ap_matrix *matrix; > + struct ap_config_info config; > + struct ap_config_info *config_info = NULL; > + > + memset(&config, 0, sizeof(config)); > + > + ret = ap_query_configuration(&config); > + if (ret) { > + if (ret != -EOPNOTSUPP) > + return ret; > + } else { > + config_info = &config; > + } since you give a non NULL argument you can make this test easier as if (ret)     return ret; I do not think that you really need both config and config_info. > + > + matrix = kzalloc(sizeof(*matrix), GFP_KERNEL); > + if (!matrix) > + return -ENOMEM; > + > + ret = kvm_ap_matrix_apm_create(matrix, config_info); > + if (ret) > + goto mask_create_err; > + > + ret = kvm_ap_matrix_aqm_create(matrix, config_info); > + if (ret) > + goto mask_create_err; > + > + ret = kvm_ap_matrix_adm_create(matrix, config_info); > + if (ret) > + goto mask_create_err; > + > + *ap_matrix = matrix; > + > + return 0; > + > +mask_create_err: > + kvm_ap_matrix_masks_destroy(matrix); > + kfree(matrix); > + return ret; > +} > +EXPORT_SYMBOL(kvm_ap_matrix_create); > + > +void kvm_ap_matrix_destroy(struct kvm_ap_matrix *ap_matrix) > +{ > + kvm_ap_matrix_masks_destroy(ap_matrix); > + kfree(ap_matrix); > +} > +EXPORT_SYMBOL(kvm_ap_matrix_destroy); > + > +int kvm_ap_configure_matrix(struct kvm *kvm, struct kvm_ap_matrix *matrix) > +{ > + int ret = 0; > + > + mutex_lock(&kvm->lock); > + > + ret = kvm_ap_validate_queue_sharing(kvm, matrix); > + if (ret) > + goto done; > + > + kvm_ap_set_crycb_masks(kvm, matrix); > + > +done: > + mutex_unlock(&kvm->lock); > + > + return ret; > +} > +EXPORT_SYMBOL(kvm_ap_configure_matrix); > + > +void kvm_ap_deconfigure_matrix(struct kvm *kvm) > +{ > + kvm_ap_clear_crycb_masks(kvm); > +} > +EXPORT_SYMBOL(kvm_ap_deconfigure_matrix); > diff --git a/drivers/s390/crypto/vfio_ap_ops.c b/drivers/s390/crypto/vfio_ap_ops.c > index d41b0b8..647ea24 100644 > --- a/drivers/s390/crypto/vfio_ap_ops.c > +++ b/drivers/s390/crypto/vfio_ap_ops.c > @@ -10,6 +10,7 @@ > #include > #include > #include > +#include > > #include "vfio_ap_private.h" > > @@ -18,8 +19,23 @@ > > static int vfio_ap_mdev_create(struct kobject *kobj, struct mdev_device *mdev) > { > + int ret; > + struct ap_matrix_mdev *matrix_mdev; > struct ap_matrix *ap_matrix = to_ap_matrix(mdev_parent_dev(mdev)); > + struct kvm_ap_matrix *matrix; > + > + ret = kvm_ap_matrix_create(&matrix); > + if (ret) > + return ret; > + > + matrix_mdev = kzalloc(sizeof(*matrix_mdev), GFP_KERNEL); > + if (!matrix_mdev) { > + kvm_ap_matrix_destroy(matrix); > + return -ENOMEM; > + } > > + matrix_mdev->matrix = matrix; > + mdev_set_drvdata(mdev, matrix_mdev); > ap_matrix->available_instances--; > > return 0; > @@ -28,7 +44,10 @@ static int vfio_ap_mdev_create(struct kobject *kobj, struct mdev_device *mdev) > static int vfio_ap_mdev_remove(struct mdev_device *mdev) > { > struct ap_matrix *ap_matrix = to_ap_matrix(mdev_parent_dev(mdev)); > + struct ap_matrix_mdev *matrix_mdev = mdev_get_drvdata(mdev); > > + kvm_ap_matrix_destroy(matrix_mdev->matrix); > + kfree(matrix_mdev); > ap_matrix->available_instances++; > > return 0; > diff --git a/drivers/s390/crypto/vfio_ap_private.h b/drivers/s390/crypto/vfio_ap_private.h > index c47aeec..f248faf 100644 > --- a/drivers/s390/crypto/vfio_ap_private.h > +++ b/drivers/s390/crypto/vfio_ap_private.h > @@ -29,6 +29,10 @@ struct ap_matrix { > int available_instances; > }; > > +struct ap_matrix_mdev { > + struct kvm_ap_matrix *matrix; > +}; > + > static inline struct ap_matrix *to_ap_matrix(struct device *dev) > { > return container_of(dev, struct ap_matrix, device); -- Pierre Morel Linux/KVM/QEMU in Böblingen - Germany