samples/vfio-mdev/mdpy.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /*
   3  * Mediated virtual PCI display host device driver
   4  *
   5  * See mdpy-defs.h for device specs
   6  *
   7  *   (c) Gerd Hoffmann <kraxel@redhat.com>
   8  *
   9  * based on mtty driver which is:
  10  *   Copyright (c) 2016, NVIDIA CORPORATION. All rights reserved.
  11  *       Author: Neo Jia <cjia@nvidia.com>
  12  *               Kirti Wankhede <kwankhede@nvidia.com>
  13  *
  14  * This program is free software; you can redistribute it and/or modify
  15  * it under the terms of the GNU General Public License version 2 as
  16  * published by the Free Software Foundation.
  17  */
  18 #include <linux/init.h>
  19 #include <linux/module.h>
  20 #include <linux/kernel.h>
  21 #include <linux/slab.h>
  22 #include <linux/vmalloc.h>
  23 #include <linux/cdev.h>
  24 #include <linux/vfio.h>
  25 #include <linux/iommu.h>
  26 #include <linux/sysfs.h>
  27 #include <linux/mdev.h>
  28 #include <linux/pci.h>
  29 #include <drm/drm_fourcc.h>
  30 #include "mdpy-defs.h"
  31
  32 #define MDPY_NAME               "mdpy"
  33 #define MDPY_CLASS_NAME         "mdpy"
  34
  35 #define MDPY_CONFIG_SPACE_SIZE  0xff
  36 #define MDPY_MEMORY_BAR_OFFSET  PAGE_SIZE
  37 #define MDPY_DISPLAY_REGION     16
  38
  39 #define STORE_LE16(addr, val)   (*(u16 *)addr = val)
  40 #define STORE_LE32(addr, val)   (*(u32 *)addr = val)
  41
  42
  43 MODULE_LICENSE("GPL v2");
  44
  45 #define MDPY_TYPE_1 "vga"
  46 #define MDPY_TYPE_2 "xga"
  47 #define MDPY_TYPE_3 "hd"
  48
  49 static struct mdpy_type {
  50         struct mdev_type type;
  51         u32 format;
  52         u32 bytepp;
  53         u32 width;
  54         u32 height;
  55 } mdpy_types[] = {
  56         {
  57                 .type.sysfs_name        = MDPY_TYPE_1,
  58                 .type.pretty_name       = MDPY_CLASS_NAME "-" MDPY_TYPE_1,
  59                 .format = DRM_FORMAT_XRGB8888,
  60                 .bytepp = 4,
  61                 .width  = 640,
  62                 .height = 480,
  63         }, {
  64                 .type.sysfs_name        = MDPY_TYPE_2,
  65                 .type.pretty_name       = MDPY_CLASS_NAME "-" MDPY_TYPE_2,
  66                 .format = DRM_FORMAT_XRGB8888,
  67                 .bytepp = 4,
  68                 .width  = 1024,
  69                 .height = 768,
  70         }, {
  71                 .type.sysfs_name        = MDPY_TYPE_3,
  72                 .type.pretty_name       = MDPY_CLASS_NAME "-" MDPY_TYPE_3,
  73                 .format = DRM_FORMAT_XRGB8888,
  74                 .bytepp = 4,
  75                 .width  = 1920,
  76                 .height = 1080,
  77         },
  78 };
  79
  80 static struct mdev_type *mdpy_mdev_types[] = {
  81         &mdpy_types[0].type,
  82         &mdpy_types[1].type,
  83         &mdpy_types[2].type,
  84 };
  85
  86 static dev_t            mdpy_devt;
  87 static struct class     *mdpy_class;
  88 static struct cdev      mdpy_cdev;
  89 static struct device    mdpy_dev;
  90 static struct mdev_parent mdpy_parent;
  91 static const struct vfio_device_ops mdpy_dev_ops;
  92
  93 /* State of each mdev device */
  94 struct mdev_state {
  95         struct vfio_device vdev;
  96         u8 *vconfig;
  97         u32 bar_mask;
  98         struct mutex ops_lock;
  99         struct mdev_device *mdev;
 100         struct vfio_device_info dev_info;
 101
 102         const struct mdpy_type *type;
 103         u32 memsize;
 104         void *memblk;
 105 };
 106
 107 static void mdpy_create_config_space(struct mdev_state *mdev_state)
 108 {
 109         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_VENDOR_ID],
 110                    MDPY_PCI_VENDOR_ID);
 111         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_DEVICE_ID],
 112                    MDPY_PCI_DEVICE_ID);
 113         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_SUBSYSTEM_VENDOR_ID],
 114                    MDPY_PCI_SUBVENDOR_ID);
 115         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_SUBSYSTEM_ID],
 116                    MDPY_PCI_SUBDEVICE_ID);
 117
 118         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_COMMAND],
 119                    PCI_COMMAND_IO | PCI_COMMAND_MEMORY);
 120         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_STATUS],
 121                    PCI_STATUS_CAP_LIST);
 122         STORE_LE16((u16 *) &mdev_state->vconfig[PCI_CLASS_DEVICE],
 123                    PCI_CLASS_DISPLAY_OTHER);
 124         mdev_state->vconfig[PCI_CLASS_REVISION] =  0x01;
 125
 126         STORE_LE32((u32 *) &mdev_state->vconfig[PCI_BASE_ADDRESS_0],
 127                    PCI_BASE_ADDRESS_SPACE_MEMORY |
 128                    PCI_BASE_ADDRESS_MEM_TYPE_32  |
 129                    PCI_BASE_ADDRESS_MEM_PREFETCH);
 130         mdev_state->bar_mask = ~(mdev_state->memsize) + 1;
 131
 132         /* vendor specific capability for the config registers */
 133         mdev_state->vconfig[PCI_CAPABILITY_LIST]       = MDPY_VENDORCAP_OFFSET;
 134         mdev_state->vconfig[MDPY_VENDORCAP_OFFSET + 0] = 0x09; /* vendor cap */
 135         mdev_state->vconfig[MDPY_VENDORCAP_OFFSET + 1] = 0x00; /* next ptr */
 136         mdev_state->vconfig[MDPY_VENDORCAP_OFFSET + 2] = MDPY_VENDORCAP_SIZE;
 137         STORE_LE32((u32 *) &mdev_state->vconfig[MDPY_FORMAT_OFFSET],
 138                    mdev_state->type->format);
 139         STORE_LE32((u32 *) &mdev_state->vconfig[MDPY_WIDTH_OFFSET],
 140                    mdev_state->type->width);
 141         STORE_LE32((u32 *) &mdev_state->vconfig[MDPY_HEIGHT_OFFSET],
 142                    mdev_state->type->height);
 143 }
 144
 145 static void handle_pci_cfg_write(struct mdev_state *mdev_state, u16 offset,
 146                                  char *buf, u32 count)
 147 {
 148         struct device *dev = mdev_dev(mdev_state->mdev);
 149         u32 cfg_addr;
 150
 151         switch (offset) {
 152         case PCI_BASE_ADDRESS_0:
 153                 cfg_addr = *(u32 *)buf;
 154
 155                 if (cfg_addr == 0xffffffff) {
 156                         cfg_addr = (cfg_addr & mdev_state->bar_mask);
 157                 } else {
 158                         cfg_addr &= PCI_BASE_ADDRESS_MEM_MASK;
 159                         if (cfg_addr)
 160                                 dev_info(dev, "BAR0 @ 0x%x\n", cfg_addr);
 161                 }
 162
 163                 cfg_addr |= (mdev_state->vconfig[offset] &
 164                              ~PCI_BASE_ADDRESS_MEM_MASK);
 165                 STORE_LE32(&mdev_state->vconfig[offset], cfg_addr);
 166                 break;
 167         }
 168 }
 169
 170 static ssize_t mdev_access(struct mdev_state *mdev_state, char *buf,
 171                            size_t count, loff_t pos, bool is_write)
 172 {
 173         int ret = 0;
 174
 175         mutex_lock(&mdev_state->ops_lock);
 176
 177         if (pos < MDPY_CONFIG_SPACE_SIZE) {
 178                 if (is_write)
 179                         handle_pci_cfg_write(mdev_state, pos, buf, count);
 180                 else
 181                         memcpy(buf, (mdev_state->vconfig + pos), count);
 182
 183         } else if ((pos >= MDPY_MEMORY_BAR_OFFSET) &&
 184                    (pos + count <=
 185                     MDPY_MEMORY_BAR_OFFSET + mdev_state->memsize)) {
 186                 pos -= MDPY_MEMORY_BAR_OFFSET;
 187                 if (is_write)
 188                         memcpy(mdev_state->memblk, buf, count);
 189                 else
 190                         memcpy(buf, mdev_state->memblk, count);
 191
 192         } else {
 193                 dev_info(mdev_state->vdev.dev,
 194                          "%s: %s @0x%llx (unhandled)\n", __func__,
 195                          is_write ? "WR" : "RD", pos);
 196                 ret = -1;
 197                 goto accessfailed;
 198         }
 199
 200         ret = count;
 201
 202
 203 accessfailed:
 204         mutex_unlock(&mdev_state->ops_lock);
 205
 206         return ret;
 207 }
 208
 209 static int mdpy_reset(struct mdev_state *mdev_state)
 210 {
 211         u32 stride, i;
 212
 213         /* initialize with gray gradient */
 214         stride = mdev_state->type->width * mdev_state->type->bytepp;
 215         for (i = 0; i < mdev_state->type->height; i++)
 216                 memset(mdev_state->memblk + i * stride,
 217                        i * 255 / mdev_state->type->height,
 218                        stride);
 219         return 0;
 220 }
 221
 222 static int mdpy_init_dev(struct vfio_device *vdev)
 223 {
 224         struct mdev_state *mdev_state =
 225                 container_of(vdev, struct mdev_state, vdev);
 226         struct mdev_device *mdev = to_mdev_device(vdev->dev);
 227         const struct mdpy_type *type =
 228                 container_of(mdev->type, struct mdpy_type, type);
 229         u32 fbsize;
 230         int ret = -ENOMEM;
 231
 232         mdev_state->vconfig = kzalloc(MDPY_CONFIG_SPACE_SIZE, GFP_KERNEL);
 233         if (!mdev_state->vconfig)
 234                 return ret;
 235
 236         fbsize = roundup_pow_of_two(type->width * type->height * type->bytepp);
 237
 238         mdev_state->memblk = vmalloc_user(fbsize);
 239         if (!mdev_state->memblk)
 240                 goto out_vconfig;
 241
 242         mutex_init(&mdev_state->ops_lock);
 243         mdev_state->mdev = mdev;
 244         mdev_state->type = type;
 245         mdev_state->memsize = fbsize;
 246         mdpy_create_config_space(mdev_state);
 247         mdpy_reset(mdev_state);
 248
 249         dev_info(vdev->dev, "%s: %s (%dx%d)\n", __func__, type->type.pretty_name,
 250                  type->width, type->height);
 251         return 0;
 252
 253 out_vconfig:
 254         kfree(mdev_state->vconfig);
 255         return ret;
 256 }
 257
 258 static int mdpy_probe(struct mdev_device *mdev)
 259 {
 260         struct mdev_state *mdev_state;
 261         int ret;
 262
 263         mdev_state = vfio_alloc_device(mdev_state, vdev, &mdev->dev,
 264                                        &mdpy_dev_ops);
 265         if (IS_ERR(mdev_state))
 266                 return PTR_ERR(mdev_state);
 267
 268         ret = vfio_register_emulated_iommu_dev(&mdev_state->vdev);
 269         if (ret)
 270                 goto err_put_vdev;
 271         dev_set_drvdata(&mdev->dev, mdev_state);
 272         return 0;
 273
 274 err_put_vdev:
 275         vfio_put_device(&mdev_state->vdev);
 276         return ret;
 277 }
 278
 279 static void mdpy_release_dev(struct vfio_device *vdev)
 280 {
 281         struct mdev_state *mdev_state =
 282                 container_of(vdev, struct mdev_state, vdev);
 283
 284         vfree(mdev_state->memblk);
 285         kfree(mdev_state->vconfig);
 286 }
 287
 288 static void mdpy_remove(struct mdev_device *mdev)
 289 {
 290         struct mdev_state *mdev_state = dev_get_drvdata(&mdev->dev);
 291
 292         dev_info(&mdev->dev, "%s\n", __func__);
 293
 294         vfio_unregister_group_dev(&mdev_state->vdev);
 295         vfio_put_device(&mdev_state->vdev);
 296 }
 297
 298 static ssize_t mdpy_read(struct vfio_device *vdev, char __user *buf,
 299                          size_t count, loff_t *ppos)
 300 {
 301         struct mdev_state *mdev_state =
 302                 container_of(vdev, struct mdev_state, vdev);
 303         unsigned int done = 0;
 304         int ret;
 305
 306         while (count) {
 307                 size_t filled;
 308
 309                 if (count >= 4 && !(*ppos % 4)) {
 310                         u32 val;
 311
 312                         ret = mdev_access(mdev_state, (char *)&val, sizeof(val),
 313                                           *ppos, false);
 314                         if (ret <= 0)
 315                                 goto read_err;
 316
 317                         if (copy_to_user(buf, &val, sizeof(val)))
 318                                 goto read_err;
 319
 320                         filled = 4;
 321                 } else if (count >= 2 && !(*ppos % 2)) {
 322                         u16 val;
 323
 324                         ret = mdev_access(mdev_state, (char *)&val, sizeof(val),
 325                                           *ppos, false);
 326                         if (ret <= 0)
 327                                 goto read_err;
 328
 329                         if (copy_to_user(buf, &val, sizeof(val)))
 330                                 goto read_err;
 331
 332                         filled = 2;
 333                 } else {
 334                         u8 val;
 335
 336                         ret = mdev_access(mdev_state, (char *)&val, sizeof(val),
 337                                           *ppos, false);
 338                         if (ret <= 0)
 339                                 goto read_err;
 340
 341                         if (copy_to_user(buf, &val, sizeof(val)))
 342                                 goto read_err;
 343
 344                         filled = 1;
 345                 }
 346
 347                 count -= filled;
 348                 done += filled;
 349                 *ppos += filled;
 350                 buf += filled;
 351         }
 352
 353         return done;
 354
 355 read_err:
 356         return -EFAULT;
 357 }
 358
 359 static ssize_t mdpy_write(struct vfio_device *vdev, const char __user *buf,
 360                           size_t count, loff_t *ppos)
 361 {
 362         struct mdev_state *mdev_state =
 363                 container_of(vdev, struct mdev_state, vdev);
 364         unsigned int done = 0;
 365         int ret;
 366
 367         while (count) {
 368                 size_t filled;
 369
 370                 if (count >= 4 && !(*ppos % 4)) {
 371                         u32 val;
 372
 373                         if (copy_from_user(&val, buf, sizeof(val)))
 374                                 goto write_err;
 375
 376                         ret = mdev_access(mdev_state, (char *)&val, sizeof(val),
 377                                           *ppos, true);
 378                         if (ret <= 0)
 379                                 goto write_err;
 380
 381                         filled = 4;
 382                 } else if (count >= 2 && !(*ppos % 2)) {
 383                         u16 val;
 384
 385                         if (copy_from_user(&val, buf, sizeof(val)))
 386                                 goto write_err;
 387
 388                         ret = mdev_access(mdev_state, (char *)&val, sizeof(val),
 389                                           *ppos, true);
 390                         if (ret <= 0)
 391                                 goto write_err;
 392
 393                         filled = 2;
 394                 } else {
 395                         u8 val;
 396
 397                         if (copy_from_user(&val, buf, sizeof(val)))
 398                                 goto write_err;
 399
 400                         ret = mdev_access(mdev_state, (char *)&val, sizeof(val),
 401                                           *ppos, true);
 402                         if (ret <= 0)
 403                                 goto write_err;
 404
 405                         filled = 1;
 406                 }
 407                 count -= filled;
 408                 done += filled;
 409                 *ppos += filled;
 410                 buf += filled;
 411         }
 412
 413         return done;
 414 write_err:
 415         return -EFAULT;
 416 }
 417
 418 static int mdpy_mmap(struct vfio_device *vdev, struct vm_area_struct *vma)
 419 {
 420         struct mdev_state *mdev_state =
 421                 container_of(vdev, struct mdev_state, vdev);
 422
 423         if (vma->vm_pgoff != MDPY_MEMORY_BAR_OFFSET >> PAGE_SHIFT)
 424                 return -EINVAL;
 425         if (vma->vm_end < vma->vm_start)
 426                 return -EINVAL;
 427         if (vma->vm_end - vma->vm_start > mdev_state->memsize)
 428                 return -EINVAL;
 429         if ((vma->vm_flags & VM_SHARED) == 0)
 430                 return -EINVAL;
 431
 432         return remap_vmalloc_range(vma, mdev_state->memblk, 0);
 433 }
 434
 435 static int mdpy_get_region_info(struct mdev_state *mdev_state,
 436                                 struct vfio_region_info *region_info,
 437                                 u16 *cap_type_id, void **cap_type)
 438 {
 439         if (region_info->index >= VFIO_PCI_NUM_REGIONS &&
 440             region_info->index != MDPY_DISPLAY_REGION)
 441                 return -EINVAL;
 442
 443         switch (region_info->index) {
 444         case VFIO_PCI_CONFIG_REGION_INDEX:
 445                 region_info->offset = 0;
 446                 region_info->size   = MDPY_CONFIG_SPACE_SIZE;
 447                 region_info->flags  = (VFIO_REGION_INFO_FLAG_READ |
 448                                        VFIO_REGION_INFO_FLAG_WRITE);
 449                 break;
 450         case VFIO_PCI_BAR0_REGION_INDEX:
 451         case MDPY_DISPLAY_REGION:
 452                 region_info->offset = MDPY_MEMORY_BAR_OFFSET;
 453                 region_info->size   = mdev_state->memsize;
 454                 region_info->flags  = (VFIO_REGION_INFO_FLAG_READ  |
 455                                        VFIO_REGION_INFO_FLAG_WRITE |
 456                                        VFIO_REGION_INFO_FLAG_MMAP);
 457                 break;
 458         default:
 459                 region_info->size   = 0;
 460                 region_info->offset = 0;
 461                 region_info->flags  = 0;
 462         }
 463
 464         return 0;
 465 }
 466
 467 static int mdpy_get_irq_info(struct vfio_irq_info *irq_info)
 468 {
 469         irq_info->count = 0;
 470         return 0;
 471 }
 472
 473 static int mdpy_get_device_info(struct vfio_device_info *dev_info)
 474 {
 475         dev_info->flags = VFIO_DEVICE_FLAGS_PCI;
 476         dev_info->num_regions = VFIO_PCI_NUM_REGIONS;
 477         dev_info->num_irqs = VFIO_PCI_NUM_IRQS;
 478         return 0;
 479 }
 480
 481 static int mdpy_query_gfx_plane(struct mdev_state *mdev_state,
 482                                 struct vfio_device_gfx_plane_info *plane)
 483 {
 484         if (plane->flags & VFIO_GFX_PLANE_TYPE_PROBE) {
 485                 if (plane->flags == (VFIO_GFX_PLANE_TYPE_PROBE |
 486                                      VFIO_GFX_PLANE_TYPE_REGION))
 487                         return 0;
 488                 return -EINVAL;
 489         }
 490
 491         if (plane->flags != VFIO_GFX_PLANE_TYPE_REGION)
 492                 return -EINVAL;
 493
 494         plane->drm_format     = mdev_state->type->format;
 495         plane->width          = mdev_state->type->width;
 496         plane->height         = mdev_state->type->height;
 497         plane->stride         = (mdev_state->type->width *
 498                                  mdev_state->type->bytepp);
 499         plane->size           = mdev_state->memsize;
 500         plane->region_index   = MDPY_DISPLAY_REGION;
 501
 502         /* unused */
 503         plane->drm_format_mod = 0;
 504         plane->x_pos          = 0;
 505         plane->y_pos          = 0;
 506         plane->x_hot          = 0;
 507         plane->y_hot          = 0;
 508
 509         return 0;
 510 }
 511
 512 static long mdpy_ioctl(struct vfio_device *vdev, unsigned int cmd,
 513                        unsigned long arg)
 514 {
 515         int ret = 0;
 516         unsigned long minsz;
 517         struct mdev_state *mdev_state =
 518                 container_of(vdev, struct mdev_state, vdev);
 519
 520         switch (cmd) {
 521         case VFIO_DEVICE_GET_INFO:
 522         {
 523                 struct vfio_device_info info;
 524
 525                 minsz = offsetofend(struct vfio_device_info, num_irqs);
 526
 527                 if (copy_from_user(&info, (void __user *)arg, minsz))
 528                         return -EFAULT;
 529
 530                 if (info.argsz < minsz)
 531                         return -EINVAL;
 532
 533                 ret = mdpy_get_device_info(&info);
 534                 if (ret)
 535                         return ret;
 536
 537                 memcpy(&mdev_state->dev_info, &info, sizeof(info));
 538
 539                 if (copy_to_user((void __user *)arg, &info, minsz))
 540                         return -EFAULT;
 541
 542                 return 0;
 543         }
 544         case VFIO_DEVICE_GET_REGION_INFO:
 545         {
 546                 struct vfio_region_info info;
 547                 u16 cap_type_id = 0;
 548                 void *cap_type = NULL;
 549
 550                 minsz = offsetofend(struct vfio_region_info, offset);
 551
 552                 if (copy_from_user(&info, (void __user *)arg, minsz))
 553                         return -EFAULT;
 554
 555                 if (info.argsz < minsz)
 556                         return -EINVAL;
 557
 558                 ret = mdpy_get_region_info(mdev_state, &info, &cap_type_id,
 559                                            &cap_type);
 560                 if (ret)
 561                         return ret;
 562
 563                 if (copy_to_user((void __user *)arg, &info, minsz))
 564                         return -EFAULT;
 565
 566                 return 0;
 567         }
 568
 569         case VFIO_DEVICE_GET_IRQ_INFO:
 570         {
 571                 struct vfio_irq_info info;
 572
 573                 minsz = offsetofend(struct vfio_irq_info, count);
 574
 575                 if (copy_from_user(&info, (void __user *)arg, minsz))
 576                         return -EFAULT;
 577
 578                 if ((info.argsz < minsz) ||
 579                     (info.index >= mdev_state->dev_info.num_irqs))
 580                         return -EINVAL;
 581
 582                 ret = mdpy_get_irq_info(&info);
 583                 if (ret)
 584                         return ret;
 585
 586                 if (copy_to_user((void __user *)arg, &info, minsz))
 587                         return -EFAULT;
 588
 589                 return 0;
 590         }
 591
 592         case VFIO_DEVICE_QUERY_GFX_PLANE:
 593         {
 594                 struct vfio_device_gfx_plane_info plane;
 595
 596                 minsz = offsetofend(struct vfio_device_gfx_plane_info,
 597                                     region_index);
 598
 599                 if (copy_from_user(&plane, (void __user *)arg, minsz))
 600                         return -EFAULT;
 601
 602                 if (plane.argsz < minsz)
 603                         return -EINVAL;
 604
 605                 ret = mdpy_query_gfx_plane(mdev_state, &plane);
 606                 if (ret)
 607                         return ret;
 608
 609                 if (copy_to_user((void __user *)arg, &plane, minsz))
 610                         return -EFAULT;
 611
 612                 return 0;
 613         }
 614
 615         case VFIO_DEVICE_SET_IRQS:
 616                 return -EINVAL;
 617
 618         case VFIO_DEVICE_RESET:
 619                 return mdpy_reset(mdev_state);
 620         }
 621         return -ENOTTY;
 622 }
 623
 624 static ssize_t
 625 resolution_show(struct device *dev, struct device_attribute *attr,
 626                 char *buf)
 627 {
 628         struct mdev_state *mdev_state = dev_get_drvdata(dev);
 629
 630         return sprintf(buf, "%dx%d\n",
 631                        mdev_state->type->width,
 632                        mdev_state->type->height);
 633 }
 634 static DEVICE_ATTR_RO(resolution);
 635
 636 static struct attribute *mdev_dev_attrs[] = {
 637         &dev_attr_resolution.attr,
 638         NULL,
 639 };
 640
 641 static const struct attribute_group mdev_dev_group = {
 642         .name  = "vendor",
 643         .attrs = mdev_dev_attrs,
 644 };
 645
 646 static const struct attribute_group *mdev_dev_groups[] = {
 647         &mdev_dev_group,
 648         NULL,
 649 };
 650
 651 static ssize_t mdpy_show_description(struct mdev_type *mtype, char *buf)
 652 {
 653         struct mdpy_type *type = container_of(mtype, struct mdpy_type, type);
 654
 655         return sprintf(buf, "virtual display, %dx%d framebuffer\n",
 656                        type->width, type->height);
 657 }
 658
 659 static const struct vfio_device_ops mdpy_dev_ops = {
 660         .init = mdpy_init_dev,
 661         .release = mdpy_release_dev,
 662         .read = mdpy_read,
 663         .write = mdpy_write,
 664         .ioctl = mdpy_ioctl,
 665         .mmap = mdpy_mmap,
 666         .bind_iommufd   = vfio_iommufd_emulated_bind,
 667         .unbind_iommufd = vfio_iommufd_emulated_unbind,
 668         .attach_ioas    = vfio_iommufd_emulated_attach_ioas,
 669         .detach_ioas    = vfio_iommufd_emulated_detach_ioas,
 670 };
 671
 672 static struct mdev_driver mdpy_driver = {
 673         .device_api = VFIO_DEVICE_API_PCI_STRING,
 674         .max_instances = 4,
 675         .driver = {
 676                 .name = "mdpy",
 677                 .owner = THIS_MODULE,
 678                 .mod_name = KBUILD_MODNAME,
 679                 .dev_groups = mdev_dev_groups,
 680         },
 681         .probe = mdpy_probe,
 682         .remove = mdpy_remove,
 683         .show_description = mdpy_show_description,
 684 };
 685
 686 static const struct file_operations vd_fops = {
 687         .owner          = THIS_MODULE,
 688 };
 689
 690 static void mdpy_device_release(struct device *dev)
 691 {
 692         /* nothing */
 693 }
 694
 695 static int __init mdpy_dev_init(void)
 696 {
 697         int ret = 0;
 698
 699         ret = alloc_chrdev_region(&mdpy_devt, 0, MINORMASK + 1, MDPY_NAME);
 700         if (ret < 0) {
 701                 pr_err("Error: failed to register mdpy_dev, err: %d\n", ret);
 702                 return ret;
 703         }
 704         cdev_init(&mdpy_cdev, &vd_fops);
 705         cdev_add(&mdpy_cdev, mdpy_devt, MINORMASK + 1);
 706         pr_info("%s: major %d\n", __func__, MAJOR(mdpy_devt));
 707
 708         ret = mdev_register_driver(&mdpy_driver);
 709         if (ret)
 710                 goto err_cdev;
 711
 712         mdpy_class = class_create(MDPY_CLASS_NAME);
 713         if (IS_ERR(mdpy_class)) {
 714                 pr_err("Error: failed to register mdpy_dev class\n");
 715                 ret = PTR_ERR(mdpy_class);
 716                 goto err_driver;
 717         }
 718         mdpy_dev.class = mdpy_class;
 719         mdpy_dev.release = mdpy_device_release;
 720         dev_set_name(&mdpy_dev, "%s", MDPY_NAME);
 721
 722         ret = device_register(&mdpy_dev);
 723         if (ret)
 724                 goto err_put;
 725
 726         ret = mdev_register_parent(&mdpy_parent, &mdpy_dev, &mdpy_driver,
 727                                    mdpy_mdev_types,
 728                                    ARRAY_SIZE(mdpy_mdev_types));
 729         if (ret)
 730                 goto err_device;
 731
 732         return 0;
 733
 734 err_device:
 735         device_del(&mdpy_dev);
 736 err_put:
 737         put_device(&mdpy_dev);
 738         class_destroy(mdpy_class);
 739 err_driver:
 740         mdev_unregister_driver(&mdpy_driver);
 741 err_cdev:
 742         cdev_del(&mdpy_cdev);
 743         unregister_chrdev_region(mdpy_devt, MINORMASK + 1);
 744         return ret;
 745 }
 746
 747 static void __exit mdpy_dev_exit(void)
 748 {
 749         mdpy_dev.bus = NULL;
 750         mdev_unregister_parent(&mdpy_parent);
 751
 752         device_unregister(&mdpy_dev);
 753         mdev_unregister_driver(&mdpy_driver);
 754         cdev_del(&mdpy_cdev);
 755         unregister_chrdev_region(mdpy_devt, MINORMASK + 1);
 756         class_destroy(mdpy_class);
 757         mdpy_class = NULL;
 758 }
 759
 760 module_param_named(count, mdpy_driver.max_instances, int, 0444);
 761 MODULE_PARM_DESC(count, "number of " MDPY_NAME " devices");
 762
 763 module_init(mdpy_dev_init)
 764 module_exit(mdpy_dev_exit)