Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Mike Christie <michael.christie@oracle.com>
To:     geert@linux-m68k.org, hdanton@sina.com, hch@infradead.org,
        stefanha@redhat.com, jasowang@redhat.com, mst@redhat.com,
        sgarzare@redhat.com, virtualization@lists.linux-foundation.org,
        christian.brauner@ubuntu.com, axboe@kernel.dk,
        ebiederm@xmission.com, linux-kernel@vger.kernel.org
Cc:     Mike Christie <michael.christie@oracle.com>
Subject: [PATCH 6/8] vhost_task: Allow vhost layer to use copy_process
Date:   Wed,  2 Feb 2022 15:01:58 -0600
Message-Id: <20220202210200.5235-7-michael.christie@oracle.com>
In-Reply-To: <20220202210200.5235-1-michael.christie@oracle.com>
References: <20220202210200.5235-1-michael.christie@oracle.com>
Content-Transfer-Encoding: 8bit
Content-Type: text/plain
MIME-Version: 1.0
X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?LOYltyNLTn9EjrEjcvXxALAbPHaPN7kWpScVPWTy31zoExLj3HLDVU6H5e6M?=
 =?us-ascii?Q?x+rTVfVkmpK6yHtiWg/qOErTagRnPH6ieUgNi8k6i61eDVos5DNMQrgyZ5Nw?=
 =?us-ascii?Q?msGFQrED+Oo0F1pNXhPK4mNkyu7UuQf3dcSu4CxoB4W8JyGOJTYknFWU7Ag0?=
 =?us-ascii?Q?FeIPHM1QA47YzjWnZ3opPQ17KKqzGAqrhW//8N1xjjMXBjcPCr8QbgtRzdcN?=
 =?us-ascii?Q?tuZONSMteMZFIu6SmpGSLbPQCrGLBDiU5SpISHgMFgF6WmfFe6bwP7TaBdej?=
 =?us-ascii?Q?IHQ//aAAQVjiJm8dZLzZGfya5dkP4Ec8tdVPMkpVj4IMSC7wXmk+JrKKf5PM?=
 =?us-ascii?Q?/elCTzhkX/m3f2tBGNXaEdEjZQHAt6NjS6/xuq3cl+8E6zfCV6q73o08/dyE?=
 =?us-ascii?Q?NEb5C1P/SnTaTYrHcBmPHVc1Fgb43FPP0Y3HZAMwzeMwNoHUdHFj2Yj9wHuG?=
 =?us-ascii?Q?3s7ac4NfOzT7beM2RxymUvrNOjrNiqtHa+X93dvA1xJ7oZTnHt3Ga3WGBj4j?=
 =?us-ascii?Q?FiSY6ZK4UJm5vhZrOekjDIa8g3R84efaZTxMgJtcY0YBfl1mavE/RwnEfL7v?=
 =?us-ascii?Q?2GCHF7EPBqdUROL5Xhc9c2IPDBQLhmzjwmHBTV1tLEmGCURauMQqLzmC1tS+?=
 =?us-ascii?Q?d+sOksWqAokUUKFXHRMUgCLALDpm2x4k3XTHNhHc+qpt2FAvGdVJCCONBpoM?=
 =?us-ascii?Q?Bv3CoRrTpO9bhkUcJUhZtiYTCFytdYPu13bdas7n3zN37SsjZHUldTTw6Txx?=
 =?us-ascii?Q?sdAdyM0RGLewRP2FpQJ0w21E9u9wR1LbqwGyeOHiTXgasHA8oR28IHJPIwZ3?=
 =?us-ascii?Q?wnRgVAqq7v0MefSCR8GeOcDLiCKwiJeM4JrfoP+aiXcwolBa3vOg/Wa7a5NJ?=
 =?us-ascii?Q?i8DJjQ0ZKXKjOPH/wRX/0LXpg0ZfraKMLUJSK97GqvRPqL2E5MIZlJUSK1TV?=
 =?us-ascii?Q?0/aecrYu/3rYXGfM2x1nM49nKFzFkw0o9jw67ldm1IAkg34FKKU0q0/aqsCn?=
 =?us-ascii?Q?WcHHK2Spqj6OdVt2RxJyj/fvfnbAub553wdDTo06aHXYvh4J07WcXUCC8+Md?=
 =?us-ascii?Q?T8xyeZlFS7iwKxPIn73VVGLwgOasOVKOhjY9n0Tfg5OUJmNbF1RlR4ajTEGs?=
 =?us-ascii?Q?RtALoSpqakjW3qWikb+oRqegyqHqghiPelH259s+zrHZUBg6GHHs9hBavoZT?=
 =?us-ascii?Q?6jplKhpmCqOQaG9JxJ6vFU2qroEBR+qPrpoxO/aUGdUUJuhrU/+azNLWmdxB?=
 =?us-ascii?Q?6CzNvb6N+XGPFbWEl1ZYFqVdodzokyAuRrLo1Y1+PHLQlUwEt7isoLkrpchB?=
 =?us-ascii?Q?FQzdPsCM22w3mXZHBdyK46uBquPc0dx+kfkvMOxBTjIE5eD1ln/I8QR1FfJr?=
 =?us-ascii?Q?BM+WuCzjrijZA3CKMmgFz6et9eb1EzaGwYJmq+ncjFSeP/Rhy5Z52nBSO9dT?=
 =?us-ascii?Q?glh5oF9jTg+Tz7LNmrTVtZVCxd48h3WkL0Vb+5aaE4qVnKx1ERqHY7ukBtyc?=
 =?us-ascii?Q?0EKKxn3DyfUzV7LvLuQ1Jm9k3AOsTQfofhmQwSsIbBmWTRYak7pWfyCjTlzF?=
 =?us-ascii?Q?pADi1ZAN04m8IIVss2BxijZmt1JMg79jo0aR6d9EtQTdBKdTswoljHLbbatk?=
 =?us-ascii?Q?CcRKBRK5rP5DiyzgvERcfJqLOyEbWhBJ9s1pjY5RuaPNbE7zKE9hA+PmdFcN?=
 =?us-ascii?Q?S0m4mA=3D=3D?=
X-OriginatorOrg: oracle.com
X-MS-Exchange-CrossTenant-Network-Message-Id: ec17e43e-9bf7-4cef-d96f-08d9e68f4897
X-MS-Exchange-CrossTenant-AuthSource: DM5PR10MB1466.namprd10.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 02 Feb 2022 21:02:12.3977
 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-CrossTenant-Id: 4e2c6054-71cb-48f1-bd6c-3a9705aca71b
X-MS-Exchange-CrossTenant-MailboxType: HOSTED
X-MS-Exchange-CrossTenant-UserPrincipalName: /W1/tg6VGHK/Oc1Yc8zPnbVF6l9ZRUGFr/IghDTU+hS5v8mT0bhoYImo0/ss8KWEDJK+pfGRxVq2ZuJOtzAyJ1q6EuXAWdJAwlwniHgFcv0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR10MB4014
X-Proofpoint-Virus-Version: vendor=nai engine=6300 definitions=10246 signatures=673430
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 mlxlogscore=999 adultscore=0
 suspectscore=0 malwarescore=0 bulkscore=0 mlxscore=0 spamscore=0
 phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1
 engine=8.12.0-2201110000 definitions=main-2202020115
X-Proofpoint-GUID: D6USeyZKmyrwU5tFp-ifFTeniAwVzBAY
X-Proofpoint-ORIG-GUID: D6USeyZKmyrwU5tFp-ifFTeniAwVzBAY
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

Qemu will create vhost devices in the kernel which perform network, SCSI,
etc IO and management operations from worker threads created by the
kthread API. Because the kthread API does a copy_process on the kthreadd
thread, the vhost layer has to use kthread_use_mm to access the Qemu
thread's memory and cgroup_attach_task_all to add itself to the Qemu
thread's cgroups, and it bypasses the RLIMIT_NPROC limit.

This patch adds a new struct vhost_task which can be used instead of
kthreads. They allow the vhost layer to use copy_process and inherit
the userspace process's mm and cgroups and the task is accounted for
under the userspace's nproc count.

Signed-off-by: Mike Christie <michael.christie@oracle.com>
---
 MAINTAINERS                      |   2 +
 drivers/vhost/Kconfig            |   5 ++
 include/linux/sched/vhost_task.h |  23 ++++++
 kernel/Makefile                  |   1 +
 kernel/vhost_task.c              | 123 +++++++++++++++++++++++++++++++
 5 files changed, 154 insertions(+)
 create mode 100644 include/linux/sched/vhost_task.h
 create mode 100644 kernel/vhost_task.c

diff --git a/MAINTAINERS b/MAINTAINERS
index f41088418aae..0d595f2ef4ae 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -20464,7 +20464,9 @@ L:	virtualization@lists.linux-foundation.org
 L:	netdev@vger.kernel.org
 S:	Maintained
 T:	git git://git.kernel.org/pub/scm/linux/kernel/git/mst/vhost.git
+F:	kernel/vhost_task.c
 F:	drivers/vhost/
+F:	include/linux/sched/vhost_task.h
 F:	include/linux/vhost_iotlb.h
 F:	include/uapi/linux/vhost.h
 
diff --git a/drivers/vhost/Kconfig b/drivers/vhost/Kconfig
index 587fbae06182..b455d9ab6f3d 100644
--- a/drivers/vhost/Kconfig
+++ b/drivers/vhost/Kconfig
@@ -13,9 +13,14 @@ config VHOST_RING
 	  This option is selected by any driver which needs to access
 	  the host side of a virtio ring.
 
+config VHOST_TASK
+	bool
+	default n
+
 config VHOST
 	tristate
 	select VHOST_IOTLB
+	select VHOST_TASK
 	help
 	  This option is selected by any driver which needs to access
 	  the core of vhost.
diff --git a/include/linux/sched/vhost_task.h b/include/linux/sched/vhost_task.h
new file mode 100644
index 000000000000..50d02a25d37b
--- /dev/null
+++ b/include/linux/sched/vhost_task.h
@@ -0,0 +1,23 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef _LINUX_VHOST_TASK_H
+#define _LINUX_VHOST_TASK_H
+
+#include <linux/completion.h>
+
+struct task_struct;
+
+struct vhost_task {
+	int (*fn)(void *data);
+	void *data;
+	struct completion exited;
+	unsigned long flags;
+	struct task_struct *task;
+};
+
+struct vhost_task *vhost_task_create(int (*fn)(void *), void *arg, int node);
+__printf(2, 3)
+void vhost_task_start(struct vhost_task *vtsk, const char namefmt[], ...);
+void vhost_task_stop(struct vhost_task *vtsk);
+bool vhost_task_should_stop(struct vhost_task *vtsk);
+
+#endif
diff --git a/kernel/Makefile b/kernel/Makefile
index 56f4ee97f328..d82f388082b8 100644
--- a/kernel/Makefile
+++ b/kernel/Makefile
@@ -15,6 +15,7 @@ obj-y     = fork.o exec_domain.o panic.o \
 obj-$(CONFIG_USERMODE_DRIVER) += usermode_driver.o
 obj-$(CONFIG_MODULES) += kmod.o
 obj-$(CONFIG_MULTIUSER) += groups.o
+obj-$(CONFIG_VHOST_TASK) += vhost_task.o
 
 ifdef CONFIG_FUNCTION_TRACER
 # Do not trace internal ftrace files
diff --git a/kernel/vhost_task.c b/kernel/vhost_task.c
new file mode 100644
index 000000000000..cdf875617656
--- /dev/null
+++ b/kernel/vhost_task.c
@@ -0,0 +1,123 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * Copyright (C) 2021 Oracle Corporation
+ */
+#include <linux/slab.h>
+#include <linux/completion.h>
+#include <linux/sched/task.h>
+#include <linux/sched/vhost_task.h>
+#include <linux/sched/signal.h>
+
+enum vhost_task_flags {
+	VHOST_TASK_FLAGS_STOP,
+};
+
+static void vhost_task_fn(void *data)
+{
+	struct vhost_task *vtsk = data;
+	int ret;
+
+	ret = vtsk->fn(vtsk->data);
+	complete(&vtsk->exited);
+	do_exit(ret);
+}
+
+/**
+ * vhost_task_stop - stop a vhost_task
+ * @vtsk: vhost_task to stop
+ *
+ * Callers must call vhost_task_should_stop and return from their worker
+ * function when it returns true;
+ */
+void vhost_task_stop(struct vhost_task *vtsk)
+{
+	pid_t pid = vtsk->task->pid;
+
+	set_bit(VHOST_TASK_FLAGS_STOP, &vtsk->flags);
+	wake_up_process(vtsk->task);
+	/*
+	 * Make sure vhost_task_fn is no longer accessing the vhost_task before
+	 * freeing it below. If userspace crashed or exited without closing,
+	 * then the vhost_task->task could already be marked dead so
+	 * kernel_wait will return early.
+	 */
+	wait_for_completion(&vtsk->exited);
+	/*
+	 * If we are just closing/removing a device and the parent process is
+	 * not exiting then reap the task.
+	 */
+	kernel_wait4(pid, NULL, __WCLONE, NULL);
+	kfree(vtsk);
+}
+EXPORT_SYMBOL_GPL(vhost_task_stop);
+
+/**
+ * vhost_task_should_stop - should the vhost task return from the work function
+ */
+bool vhost_task_should_stop(struct vhost_task *vtsk)
+{
+	return test_bit(VHOST_TASK_FLAGS_STOP, &vtsk->flags);
+}
+EXPORT_SYMBOL_GPL(vhost_task_should_stop);
+
+/**
+ * vhost_task_create - create a copy of a process to be used by the kernel
+ * @fn: thread stack
+ * @arg: data to be passed to fn
+ * @node: numa node to allocate task from
+ *
+ * This returns a specialized task for use by the vhost layer or NULL on
+ * failure. The returned task is inactive, and the caller must fire it up
+ * through vhost_task_start().
+ */
+struct vhost_task *vhost_task_create(int (*fn)(void *), void *arg, int node)
+{
+	struct kernel_clone_args args = {
+		.flags		= CLONE_FS | CLONE_UNTRACED | CLONE_VM,
+		.exit_signal	= 0,
+		.stack		= (unsigned long)vhost_task_fn,
+		.worker_flags	= USER_WORKER | USER_WORKER_NO_FILES |
+				  USER_WORKER_SIG_IGN,
+	};
+	struct vhost_task *vtsk;
+	struct task_struct *tsk;
+
+	vtsk = kzalloc(GFP_KERNEL, sizeof(*vtsk));
+	if (!vtsk)
+		return ERR_PTR(-ENOMEM);
+
+	init_completion(&vtsk->exited);
+	vtsk->data = arg;
+	vtsk->fn = fn;
+	args.stack_size =  (unsigned long)vtsk;
+
+	tsk = copy_process(NULL, 0, node, &args);
+	if (IS_ERR(tsk)) {
+		kfree(vtsk);
+		return NULL;
+	}
+
+	vtsk->task = tsk;
+
+	return vtsk;
+}
+EXPORT_SYMBOL_GPL(vhost_task_create);
+
+/**
+ * vhost_task_start - start a vhost_task created with vhost_task_create
+ * @vtsk: vhost_task to wake up
+ * @namefmt: printf-style format string for the thread name
+ */
+void vhost_task_start(struct vhost_task *vtsk, const char namefmt[], ...)
+{
+	char name[TASK_COMM_LEN];
+	va_list args;
+
+	va_start(args, namefmt);
+	vsnprintf(name, sizeof(name), namefmt, args);
+	set_task_comm(vtsk->task, name);
+	va_end(args);
+
+	wake_up_new_task(vtsk->task);
+}
+EXPORT_SYMBOL_GPL(vhost_task_start);
-- 
2.25.1